[Mon Nov 10 18:40:43.536172 2025] [rewrite:trace3] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c00f5a0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip per-dir prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/ -> , referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536220 2025] [rewrite:trace3] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c00f5a0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] applying pattern '^(.*)$' to uri '', referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536263 2025] [rewrite:trace4] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c00f5a0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536266 2025] [rewrite:trace3] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c00f5a0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip per-dir prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/ -> , referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536266 2025] [rewrite:trace3] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c00f5a0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] applying pattern '^(.*)$' to uri '', referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536320 2025] [rewrite:trace4] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c00f5a0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536325 2025] [rewrite:trace4] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c00f5a0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='/home/measureyourbrand/public_html/measureyourcause.com.au/' pattern='!-f' => matched, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536339 2025] [rewrite:trace4] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c00f5a0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='/home/measureyourbrand/public_html/measureyourcause.com.au/' pattern='!-d' => not-matched, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536375 2025] [rewrite:trace1] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c00f5a0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] pass through /home/measureyourbrand/public_html/measureyourcause.com.au/, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536438 2025] [rewrite:trace3] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c0cd150/subreq] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip per-dir prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/index.php -> index.php, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536438 2025] [rewrite:trace3] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c0cd150/subreq] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] applying pattern '^(.*)$' to uri 'index.php', referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536459 2025] [rewrite:trace4] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c0cd150/subreq] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='index.php' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:40:43.536470 2025] [rewrite:trace1] [pid 10210:tid 10266] mod_rewrite.c(505): [client 78.47.173.76:35888] 78.47.173.76 - - [measureyourcause.com.au/sid#22efa778][rid#7ff52c0cd150/subreq] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] pass through /home/measureyourbrand/public_html/measureyourcause.com.au/index.php, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:44:46.682112 2025] [rewrite:trace3] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip per-dir prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx -> \xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx
[Mon Nov 10 18:44:46.682159 2025] [rewrite:trace3] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] applying pattern '^(.*)$' to uri '\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx'
[Mon Nov 10 18:44:46.682180 2025] [rewrite:trace4] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='on' pattern='off' => not-matched
[Mon Nov 10 18:44:46.682191 2025] [rewrite:trace3] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip per-dir prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx -> \xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx
[Mon Nov 10 18:44:46.682202 2025] [rewrite:trace3] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] applying pattern '^(.*)$' to uri '\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx'
[Mon Nov 10 18:44:46.682215 2025] [rewrite:trace4] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx' pattern='!^(index\\.php|images|robots\\.txt)' => matched
[Mon Nov 10 18:44:46.682254 2025] [rewrite:trace4] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='/home/measureyourbrand/public_html/measureyourcause.com.au/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx' pattern='!-f' => matched
[Mon Nov 10 18:44:46.682270 2025] [rewrite:trace4] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='/home/measureyourbrand/public_html/measureyourcause.com.au/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx' pattern='!-d' => matched
[Mon Nov 10 18:44:46.682281 2025] [rewrite:trace2] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] rewrite '\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx' -> 'index.php/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx'
[Mon Nov 10 18:44:46.682325 2025] [rewrite:trace3] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] add per-dir prefix: index.php/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx -> /home/measureyourbrand/public_html/measureyourcause.com.au/index.php/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx
[Mon Nov 10 18:44:46.682341 2025] [rewrite:trace2] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] setting lastsub to rule with output index.php/$1
[Mon Nov 10 18:44:46.682362 2025] [rewrite:trace2] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip document_root prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/index.php/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx -> /index.php/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx
[Mon Nov 10 18:44:46.682380 2025] [rewrite:trace1] [pid 11954:tid 12018] mod_rewrite.c(505): [client 18.211.39.188:31063] 18.211.39.188 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2e804faf0/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] internal redirect with /index.php/\xe0\xb8\xaa\xe0\xb8\xa5\xe0\xb9\x87\xe0\xb8\xad\xe0\xb8\x95888\xe0\xb9\x80\xe0\xb8\xa7\xe0\xb9\x87\xe0\xb8\x9a\xe0\xb8\x95\xe0\xb8\xa3\xe0\xb8\x87\xe0\xb8\xa7\xe0\xb8\xad\xe0\xb9\x80\xe0\xb8\xa5\xe0\xb8\x97.aspx [INTERNAL REDIRECT]
[Mon Nov 10 18:44:50.536112 2025] [rewrite:trace3] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip per-dir prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx -> \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx
[Mon Nov 10 18:44:50.536168 2025] [rewrite:trace3] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] applying pattern '^(.*)$' to uri '\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx'
[Mon Nov 10 18:44:50.536188 2025] [rewrite:trace4] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='on' pattern='off' => not-matched
[Mon Nov 10 18:44:50.536198 2025] [rewrite:trace3] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip per-dir prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx -> \xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx
[Mon Nov 10 18:44:50.536211 2025] [rewrite:trace3] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] applying pattern '^(.*)$' to uri '\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx'
[Mon Nov 10 18:44:50.536221 2025] [rewrite:trace4] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx' pattern='!^(index\\.php|images|robots\\.txt)' => matched
[Mon Nov 10 18:44:50.536257 2025] [rewrite:trace4] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='/home/measureyourbrand/public_html/measureyourcause.com.au/\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx' pattern='!-f' => matched
[Mon Nov 10 18:44:50.536270 2025] [rewrite:trace4] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='/home/measureyourbrand/public_html/measureyourcause.com.au/\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx' pattern='!-d' => matched
[Mon Nov 10 18:44:50.536289 2025] [rewrite:trace2] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] rewrite '\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx' -> 'index.php/\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx'
[Mon Nov 10 18:44:50.536299 2025] [rewrite:trace3] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] add per-dir prefix: index.php/\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx -> /home/measureyourbrand/public_html/measureyourcause.com.au/index.php/\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx
[Mon Nov 10 18:44:50.536317 2025] [rewrite:trace2] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] setting lastsub to rule with output index.php/$1
[Mon Nov 10 18:44:50.536323 2025] [rewrite:trace2] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip document_root prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/index.php/\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx -> /index.php/\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx
[Mon Nov 10 18:44:50.536373 2025] [rewrite:trace1] [pid 12043:tid 12072] mod_rewrite.c(505): [client 18.214.138.148:31913] 18.214.138.148 - - [measureyourcause.com.au/sid#22f01778][rid#7ff2b8026070/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] internal redirect with /index.php/\xe0\xb8\x97\xe0\xb8\xb2\xe0\xb8\x87\xe0\xb9\x80\xe0\xb8\x82\xe0\xb9\x89\xe0\xb8\xb2 sbobet \xe0\xb9\x83\xe0\xb8\xab\xe0\xb8\xa1\xe0\xb9\x88\xe0\xb8\xa5\xe0\xb9\x88\xe0\xb8\xb2\xe0\xb8\xaa\xe0\xb8\xb8\xe0\xb8\x94.aspx [INTERNAL REDIRECT]
[Mon Nov 10 18:45:49.406416 2025] [rewrite:trace3] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8055a90/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip per-dir prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/ -> , referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406451 2025] [rewrite:trace3] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8055a90/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] applying pattern '^(.*)$' to uri '', referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406471 2025] [rewrite:trace4] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8055a90/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='on' pattern='off' => not-matched, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406483 2025] [rewrite:trace3] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8055a90/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip per-dir prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/ -> , referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406492 2025] [rewrite:trace3] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8055a90/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] applying pattern '^(.*)$' to uri '', referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406504 2025] [rewrite:trace4] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8055a90/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='' pattern='!^(index\\.php|images|robots\\.txt)' => matched, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406531 2025] [rewrite:trace4] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8055a90/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='/home/measureyourbrand/public_html/measureyourcause.com.au/' pattern='!-f' => matched, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406548 2025] [rewrite:trace4] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8055a90/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='/home/measureyourbrand/public_html/measureyourcause.com.au/' pattern='!-d' => not-matched, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406548 2025] [rewrite:trace1] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8055a90/initial] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] pass through /home/measureyourbrand/public_html/measureyourcause.com.au/, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406606 2025] [rewrite:trace3] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8057aa0/subreq] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] strip per-dir prefix: /home/measureyourbrand/public_html/measureyourcause.com.au/index.php -> index.php, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406631 2025] [rewrite:trace3] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8057aa0/subreq] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] applying pattern '^(.*)$' to uri 'index.php', referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406645 2025] [rewrite:trace4] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8057aa0/subreq] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] RewriteCond: input='index.php' pattern='!^(index\\.php|images|robots\\.txt)' => not-matched, referer: https://measureyourcause.com.au/
[Mon Nov 10 18:45:49.406656 2025] [rewrite:trace1] [pid 12498:tid 12562] mod_rewrite.c(505): [client 49.13.134.145:17428] 49.13.134.145 - - [measureyourcause.com.au/sid#23623778][rid#7f80b8057aa0/subreq] [perdir /home/measureyourbrand/public_html/measureyourcause.com.au/] pass through /home/measureyourbrand/public_html/measureyourcause.com.au/index.php, referer: https://measureyourcause.com.au/
[Mon Nov 10 22:41:03.700967 2025] [:error] [pid 34820:tid 34846] [client 170.106.73.216:47858] [client 170.106.73.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRH5f2K3qvhYIA1ghWD05QAAARg"]
[Tue Nov 11 01:28:45.488529 2025] [:error] [pid 24225:tid 24253] [client 182.42.111.213:60499] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRIgzZ2rrdiHvhXEioV0PgAAAlQ"]
[Tue Nov 11 02:28:21.582627 2025] [:error] [pid 41825:tid 41902] [client 43.130.3.122:60768] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRIuxYr5hkwmQG_pQgAh_AAAAE8"]
[Tue Nov 11 05:41:26.443980 2025] [:error] [pid 34002:tid 34015] [client 130.33.27.47:38093] [client 130.33.27.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.33.27.47, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aRJcBtNx46Ag0u620oqk5wAAAAk"]
[Tue Nov 11 05:41:26.564049 2025] [:error] [pid 33931:tid 33950] [client 130.33.27.47:19477] [client 130.33.27.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.33.27.47, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aRJcBknJb679KZEjo-PWuQAAAQo"]
[Tue Nov 11 06:52:18.247325 2025] [:error] [pid 33888:tid 33899] [client 194.5.82.132:33381] [client 194.5.82.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.132, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aRJsoohA0uVBNwBRvPr9TwAAAIg"]
[Tue Nov 11 13:36:47.260261 2025] [:error] [pid 59670:tid 59690] [client 203.2.64.59:35937] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRLLb6k2Cnts0y-hpfrfiQAAAJE"]
[Tue Nov 11 18:47:41.081495 2025] [:error] [pid 36673:tid 36686] [client 223.25.63.33:18734] [client 223.25.63.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.25.63.33, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aRMUTSvASiSDHs9bkff9rAAAAIs"]
[Tue Nov 11 19:21:54.394032 2025] [autoindex:error] [pid 36673:tid 36697] [client 159.203.172.143:54042] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 11 19:59:00.154450 2025] [:error] [pid 36673:tid 36688] [client 182.40.104.255:58244] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRMlBCvASiSDHs9bkfcQHgAAAI0"]
[Tue Nov 11 20:52:29.457094 2025] [:error] [pid 36673:tid 36680] [client 104.131.167.155:58926] [client 104.131.167.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aRMxjSvASiSDHs9bkfcf0gAAAIU"]
[Tue Nov 11 20:52:31.170595 2025] [:error] [pid 43205:tid 43218] [client 104.131.167.155:51034] [client 104.131.167.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aRMxj748SbhIkX6TjwOkbgAAAQo"]
[Tue Nov 11 23:09:23.642347 2025] [:error] [pid 47964:tid 47991] [client 104.131.167.155:36158] [client 104.131.167.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aRNRo16CQC3ebUS5pkQdVgAAAZg"]
[Tue Nov 11 23:09:25.615278 2025] [:error] [pid 47964:tid 47967] [client 104.131.167.155:60168] [client 104.131.167.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aRNRpV6CQC3ebUS5pkQdWQAAAYA"]
[Wed Nov 12 00:56:40.505983 2025] [:error] [pid 54700:tid 54937] [client 43.130.116.87:44362] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRNqyGB5AaOtkwsSKToE5QAAAEE"]
[Wed Nov 12 02:36:56.437320 2025] [:error] [pid 40745:tid 40773] [client 14.215.163.132:58393] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aROCSMdgIR-a_T0XcdAg6QAAABc"]
2025/11/12 08:17:35 [error] 2199#2199: *54 openat() "/home/measureyourbrand/public_html/measureyourcause.com.au/betflix casino.aspx" failed (2: No such file or directory), client: 44.215.231.15, server: measureyourcause.com.au, request: "GET /betflix%20casino.aspx HTTP/1.1", host: "measureyourcause.com.au"
2025/11/12 08:18:41 [error] 2188#2188: *326 "/home/measureyourbrand/public_html/measureyourcause.com.au/index.php" is forbidden (13: Permission denied), client: 78.46.215.1, server: measureyourcause.com.au, request: "GET / HTTP/1.1", host: "measureyourcause.com.au", referrer: "https://measureyourcause.com.au/"
2025/11/12 08:19:46 [error] 2197#2197: *506 openat() "/home/measureyourbrand/public_html/measureyourcause.com.au/robots.txt" failed (2: No such file or directory), client: 198.244.242.144, server: measureyourcause.com.au, request: "GET /robots.txt HTTP/1.1", host: "measureyourcause.com.au"
2025/11/12 08:19:55 [error] 2197#2197: *533 openat() "/home/measureyourbrand/public_html/measureyourcause.com.au/store/apps/collection/cluster" failed (2: No such file or directory), client: 142.44.233.213, server: measureyourcause.com.au, request: "GET /store/apps/collection/cluster?gsr=SnBqGDQ4ekRnM0ZmOWxOTVVxVXJrUUExQmc9PcICUwoZChVjb20udGVlbnBhdHRpLmhkLmdvbGQQBxgIMAE4AEoqCAIQABoeVGVlbiBQYXR0aSBHb2xkLCBSdW1teSAmIFBva2VyIAAoADAAUABYAWAA:S:ANO1ljKxc6w HTTP/1.1", host: "measureyourcause.com.au"
2025/11/12 08:44:09 [error] 24792#24792: *459 connect() failed (111: Connection refused) while connecting to upstream, client: 78.46.190.63, server: measureyourcause.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourcause.com.au", referrer: "https://measureyourcause.com.au/"
2025/11/12 08:49:14 [error] 24799#24799: *1868 connect() failed (111: Connection refused) while connecting to upstream, client: 3.79.134.69, server: measureyourcause.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourcause.com.au", referrer: "https://measureyourcause.com.au/"
2025/11/12 08:54:21 [error] 24804#24804: *3204 connect() failed (111: Connection refused) while connecting to upstream, client: 128.140.106.114, server: measureyourcause.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourcause.com.au", referrer: "https://measureyourcause.com.au/"
2025/11/12 08:59:27 [error] 24803#24803: *7709 connect() failed (111: Connection refused) while connecting to upstream, client: 49.13.24.81, server: measureyourcause.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourcause.com.au", referrer: "https://measureyourcause.com.au/"
2025/11/12 09:04:32 [error] 24803#24803: *9290 connect() failed (111: Connection refused) while connecting to upstream, client: 157.90.156.63, server: measureyourcause.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourcause.com.au", referrer: "https://measureyourcause.com.au/"
[Wed Nov 12 14:01:15.824849 2025] [:error] [pid 60097:tid 60166] [client 45.153.34.41:55920] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aRQiq8dT5oio_TbWpi8shwAAAM0"]
[Wed Nov 12 14:31:37.406734 2025] [:error] [pid 60097:tid 60165] [client 45.153.34.41:60850] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aRQpycdT5oio_TbWpi82lgAAAMw"]
[Thu Nov 13 03:25:00.249293 2025] [:error] [pid 60095:tid 60102] [client 144.91.103.201:55564] [client 144.91.103.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/.well-known/security.txt"] [unique_id "aRTfDHlw2elroagFF1qSpAAAAEM"]
[Thu Nov 13 03:25:01.586976 2025] [:error] [pid 60180:tid 60195] [client 144.91.103.201:55576] [client 144.91.103.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/security.txt"] [unique_id "aRTfDVhgd7ccS8EZg1qz7wAAAU0"]
[Thu Nov 13 07:35:41.411462 2025] [:error] [pid 22307:tid 22328] [client 85.203.36.129:35509] [client 85.203.36.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aRUZzar7fLMQQanZ_9ygmQAAANM"]
[Thu Nov 13 08:18:34.204946 2025] [:error] [pid 22307:tid 22327] [client 112.211.80.187:61901] [client 112.211.80.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.211.80.187, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aRUj2qr7fLMQQanZ_9yrCgAAANI"]
[Thu Nov 13 10:32:31.476515 2025] [:error] [pid 62303:tid 62310] [client 49.51.243.156:35552] [client 49.51.243.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRVDP7-hlFTtVrZw8jA5bgAAAIM"]
[Thu Nov 13 16:24:16.885916 2025] [:error] [pid 44245:tid 44252] [client 182.44.9.147:41029] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRWVsIk7r-HKZdqw-dW2hgAAAUE"]
[Thu Nov 13 17:10:34.445592 2025] [:error] [pid 62215:tid 62223] [client 216.81.248.1:55850] [client 216.81.248.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aRWgikvClof1c6XaOBWdKgAAAMQ"]
[Thu Nov 13 17:55:43.518462 2025] [:error] [pid 44354:tid 44361] [client 150.241.107.255:56035] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrH3qKopQhy3G4s3l0aAAAAYI"]
[Thu Nov 13 21:41:58.535805 2025] [:error] [pid 4994:tid 5077] [client 159.89.162.68:60362] [client 159.89.162.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.162.68, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aRXgJgVaYoYtjfBbabUH3gAAAJg"]
[Thu Nov 13 21:41:59.098640 2025] [:error] [pid 4993:tid 5035] [client 159.89.162.68:60540] [client 159.89.162.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.162.68, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aRXgJ8l_cC0Js5xNCU1A1gAAAAk"]
[Thu Nov 13 22:51:42.584256 2025] [:error] [pid 19872:tid 19895] [client 45.138.16.29:60517] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/postnews.php"] [unique_id "aRXwfsusrN1b6ZJ_vbsoqQAAAFI"]
[Thu Nov 13 22:51:43.332757 2025] [:error] [pid 28868:tid 28891] [client 45.138.16.29:60600] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRXwf4q9fgBJ6LAEEDzc6QAAAVU"]
[Thu Nov 13 22:51:43.861515 2025] [:error] [pid 19872:tid 19885] [client 45.138.16.29:60675] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRXwf8usrN1b6ZJ_vbsoxgAAAEg"]
[Thu Nov 13 23:02:06.576133 2025] [:error] [pid 19872:tid 19884] [client 182.43.70.143:37046] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRXy7susrN1b6ZJ_vbssCwAAAEc"]
[Fri Nov 14 02:27:01.840500 2025] [:error] [pid 56586:tid 56595] [client 170.106.179.68:36336] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRYi9a7eYD3G9deYMP5ZtgAAAYQ"]
[Fri Nov 14 11:29:39.068003 2025] [:error] [pid 47154:tid 47176] [client 203.2.64.59:56618] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRaiI0ijA13A3g3ATrLipQAAABE"]
[Fri Nov 14 12:53:46.605409 2025] [:error] [pid 16671:tid 16695] [client 170.106.84.136:47960] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRa12jsoHwEAmeIzZXDbNQAAARI"]
[Fri Nov 14 17:52:53.458836 2025] [:error] [pid 16575:tid 16646] [client 125.94.144.102:41320] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRb79e6qT670YxigvbCDNAAAAMw"]
[Fri Nov 14 23:05:48.072891 2025] [:error] [pid 16574:tid 16615] [client 103.97.104.150:61685] [client 103.97.104.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.97.104.150, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aRdFTP6XQqe4NqaoE9KCnAAAAIg"]
[Sat Nov 15 00:34:28.263370 2025] [:error] [pid 45907:tid 45929] [client 222.79.104.23:60444] [client 222.79.104.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRdaFFAqmYxCpnT9gJFxLQAAAVI"]
[Sat Nov 15 03:21:14.105763 2025] [:error] [pid 18513:tid 18540] [client 170.106.163.48:60054] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aReBKvc94upQFzRWlUkDAQAAAFY"]
[Sat Nov 15 06:32:10.116282 2025] [ssl:error] [pid 27909:tid 27914] [client 178.62.82.141:50976] AH02032: Hostname luqokig.world provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup
[Sat Nov 15 09:40:20.876541 2025] [:error] [pid 27911:tid 27970] [client 49.51.233.46:40598] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRfaBMGzUdrhGBIfiKQMNgAAAII"]
[Sat Nov 15 12:09:26.027716 2025] [:error] [pid 20654:tid 20678] [client 138.197.23.42:64507] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRf89ncS7eC8vO76_ydtbAAAA5U"]
[Sat Nov 15 12:09:26.450650 2025] [:error] [pid 19959:tid 19983] [client 138.197.23.42:64664] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRf89sjejiTUP1-IawOAIgAAAZE"]
[Sat Nov 15 12:09:26.868333 2025] [:error] [pid 20654:tid 20668] [client 138.197.23.42:64816] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRf89ncS7eC8vO76_ydtlQAAA4s"]
[Sat Nov 15 12:09:27.286611 2025] [:error] [pid 27997:tid 28021] [client 138.197.23.42:64969] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRf899pja_6cDxKbxFmOOQAAANY"]
[Sat Nov 15 12:09:27.723376 2025] [:error] [pid 20346:tid 20366] [client 138.197.23.42:65136] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRf8957hsydZdIoVTlvM9wAAAxE"]
[Sat Nov 15 12:53:08.332341 2025] [:error] [pid 27997:tid 28014] [client 182.42.111.156:48584] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRgHNNpja_6cDxKbxFmXBwAAAM8"]
[Sat Nov 15 18:07:57.101417 2025] [:error] [pid 20654:tid 20678] [client 152.42.200.79:65135] [client 152.42.200.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aRhQ_XcS7eC8vO76_yfjRAAAA5U"]
[Sat Nov 15 19:50:46.427891 2025] [:error] [pid 20654:tid 20679] [client 43.159.132.207:57236] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRhpFncS7eC8vO76_ycBEwAAA5Y"]
[Sat Nov 15 20:15:54.811208 2025] [:error] [pid 22765:tid 22777] [client 45.138.16.215:51101] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/postnews.php"] [unique_id "aRhu-qbrQzjuZmPIWDb87QAAAoc"]
[Sat Nov 15 20:15:55.344829 2025] [:error] [pid 22765:tid 22785] [client 45.138.16.215:51242] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aRhu-6brQzjuZmPIWDb88gAAAo8"]
[Sat Nov 15 20:15:55.898457 2025] [:error] [pid 22765:tid 22793] [client 45.138.16.215:51430] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aRhu-6brQzjuZmPIWDb8-AAAApc"]
[Sat Nov 15 20:26:26.900698 2025] [:error] [pid 27997:tid 28019] [client 45.134.79.103:63634] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRhxctpja_6cDxKbxFnq4QAAANQ"]
[Sat Nov 15 20:26:27.545228 2025] [:error] [pid 22765:tid 22794] [client 45.134.79.103:63907] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRhxc6brQzjuZmPIWDb-jgAAApg"]
[Sat Nov 15 20:26:28.198854 2025] [:error] [pid 20346:tid 20360] [client 45.134.79.103:64132] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdJ7hsydZdIoVTltM1AAAAws"]
[Sat Nov 15 22:38:15.064220 2025] [:error] [pid 27997:tid 28015] [client 4.197.170.217:64424] [client 4.197.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aRiQV9pja_6cDxKbxFn8zgAAANA"]
[Sat Nov 15 22:38:15.943616 2025] [:error] [pid 20346:tid 20357] [client 4.197.170.217:64460] [client 4.197.170.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aRiQV57hsydZdIoVTltleAAAAwg"]
[Sat Nov 15 22:38:15.982585 2025] [:error] [pid 20346:tid 20359] [client 4.197.170.217:64386] [client 4.197.170.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRiQV57hsydZdIoVTltleQAAAwo"]
[Sat Nov 15 22:38:16.015992 2025] [:error] [pid 22765:tid 22772] [client 4.197.170.217:64477] [client 4.197.170.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRiQWKbrQzjuZmPIWDYXhQAAAoQ"]
[Sat Nov 15 22:38:16.049122 2025] [:error] [pid 20346:tid 20353] [client 4.197.170.217:64463] [client 4.197.170.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRiQWJ7hsydZdIoVTltlegAAAwQ"]
[Sat Nov 15 22:38:16.081690 2025] [:error] [pid 20654:tid 20667] [client 4.197.170.217:64495] [client 4.197.170.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aRiQWHcS7eC8vO76_yciYQAAA4o"]
[Sat Nov 15 23:56:55.607648 2025] [:error] [pid 22765:tid 22791] [client 34.26.203.176:40852] [client 34.26.203.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aRiix6brQzjuZmPIWDYphAAAApU"]
[Sun Nov 16 02:18:50.337882 2025] [:error] [pid 20346:tid 20356] [client 182.44.8.254:52267] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRjECp7hsydZdIoVTluNiQAAAwc"]
[Sun Nov 16 02:49:51.991896 2025] [autoindex:error] [pid 27997:tid 28006] [client 20.2.83.141:53632] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 05:13:07.148068 2025] [:error] [pid 52470:tid 52515] [client 150.109.230.210:48098] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRjs40g9mXF2ZFFtj1XHAQAAAEo"]
[Sun Nov 16 08:40:36.122473 2025] [:error] [pid 20556:tid 20562] [client 182.44.2.148:45364] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRkdhEkbyEckbWtBcCLUCgAAAQQ"]
[Sun Nov 16 15:13:33.427414 2025] [:error] [pid 34227:tid 34234] [client 136.113.219.178:44086] [client 136.113.219.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aRl5nX108zGLYs9eMugVGgAAAgU"]
[Sun Nov 16 15:17:05.823142 2025] [:error] [pid 34164:tid 34181] [client 182.44.67.97:48847] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRl6ce93ccBCLD8-Q4YjIwAAAY0"]
[Sun Nov 16 17:10:41.912134 2025] [:error] [pid 52563:tid 52584] [client 93.123.109.173:54808] [client 93.123.109.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aRmVEc-l3ey-hVJ5AuubkAAAANI"]
[Sun Nov 16 18:42:46.686203 2025] [autoindex:error] [pid 20556:tid 20573] [client 155.94.163.116:65130] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 19:48:55.902717 2025] [:error] [pid 20556:tid 20577] [client 43.166.250.187:36732] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRm6J0kbyEckbWtBcCKdEwAAARM"]
[Sun Nov 16 22:04:01.211404 2025] [:error] [pid 52469:tid 52487] [client 117.62.235.53:42877] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRnZ0U6HaXpHeEZ98Z0iOwAAAAo"]
[Mon Nov 17 04:07:43.479911 2025] [:error] [pid 59889:tid 59920] [client 217.182.189.50:51531] [client 217.182.189.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.182.189.50, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aRovDwFRxS4i_Z2cRF3XhQAAAM8"], referer: https://www.google.com
[Mon Nov 17 04:07:44.427108 2025] [:error] [pid 59889:tid 59925] [client 217.182.189.50:58383] [client 217.182.189.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.182.189.50, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aRovEAFRxS4i_Z2cRF3XiAAAANQ"], referer: https://www.google.com
[Mon Nov 17 04:16:32.611002 2025] [:error] [pid 39449:tid 39473] [client 217.182.189.50:59275] [client 217.182.189.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.182.189.50, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-login.php"] [unique_id "aRoxIKUCymTA3MDfzLNzfQAAABM"], referer: https://www.google.com
[Mon Nov 17 04:16:33.559176 2025] [:error] [pid 39537:tid 39560] [client 217.182.189.50:54422] [client 217.182.189.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.182.189.50, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-login.php"] [unique_id "aRoxIYZRrh1pcrdcLB-0MAAAANQ"], referer: https://www.google.com
[Mon Nov 17 04:25:00.372744 2025] [:error] [pid 39450:tid 39487] [client 217.182.189.50:54420] [client 217.182.189.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.182.189.50, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aRozHOoZqPB4_7vNEDR-zQAAAEY"], referer: https://www.google.com
[Mon Nov 17 04:25:01.321136 2025] [:error] [pid 39451:tid 39512] [client 217.182.189.50:56523] [client 217.182.189.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 217.182.189.50, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aRozHefgkqXTS0SO3fBQYgAAAIQ"], referer: https://www.google.com
[Mon Nov 17 04:43:24.638811 2025] [:error] [pid 39450:tid 39487] [client 182.40.104.255:33926] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRo3bOoZqPB4_7vNEDSD-QAAAEY"]
[Mon Nov 17 06:11:59.434513 2025] [:error] [pid 39451:tid 39518] [client 43.133.220.37:39708] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRpML-fgkqXTS0SO3fB0cAAAAIo"]
[Mon Nov 17 11:58:51.012729 2025] [:error] [pid 39537:tid 39543] [client 38.46.223.156:65158] [client 38.46.223.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.46.223.156, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aRqde4ZRrh1pcrdcLB92LwAAAMM"]
[Mon Nov 17 11:58:52.744388 2025] [:error] [pid 39537:tid 39556] [client 38.46.223.156:65158] [client 38.46.223.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aRqdfIZRrh1pcrdcLB92OQAAANA"]
[Mon Nov 17 11:58:53.431301 2025] [:error] [pid 39537:tid 39557] [client 38.46.223.156:60737] [client 38.46.223.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aRqdfYZRrh1pcrdcLB92OgAAANE"]
[Mon Nov 17 11:58:54.134941 2025] [:error] [pid 39451:tid 39528] [client 38.46.223.156:58842] [client 38.46.223.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aRqdfufgkqXTS0SO3fDfvgAAAJQ"]
[Mon Nov 17 11:58:54.833931 2025] [:error] [pid 39451:tid 39526] [client 38.46.223.156:55124] [client 38.46.223.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aRqdfufgkqXTS0SO3fDfvwAAAJI"]
[Mon Nov 17 15:37:30.344190 2025] [:error] [pid 39449:tid 39474] [client 43.157.168.43:36246] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRrQuqUCymTA3MDfzLMeaAAAABQ"]
[Mon Nov 17 17:42:24.986295 2025] [:error] [pid 39537:tid 39548] [client 222.79.103.59:42608] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRruAIZRrh1pcrdcLB-mOwAAAMg"]
[Mon Nov 17 19:52:55.307671 2025] [:error] [pid 15888:tid 15914] [client 13.38.119.237:56498] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aRsMlwjAdDTBm4W3qW023wAAAdc"]
[Mon Nov 17 19:52:55.307838 2025] [:error] [pid 20913:tid 20926] [client 13.38.119.237:56512] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aRsMl-kafGNeN3nY1bdZ3gAAA0s"]
[Mon Nov 17 19:53:00.475602 2025] [:error] [pid 39451:tid 39531] [client 13.38.119.237:56534] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "aRsMnOfgkqXTS0SO3fAh0wAAAJc"]
[Mon Nov 17 19:53:00.476262 2025] [:error] [pid 40548:tid 40565] [client 13.38.119.237:56540] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aRsMnAM_PykfYnxh-j9rgAAAAQ8"]
[Mon Nov 17 19:53:00.500971 2025] [:error] [pid 40548:tid 40551] [client 13.38.119.237:56526] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "aRsMnAM_PykfYnxh-j9rgQAAAQE"]
[Mon Nov 17 19:53:00.527506 2025] [:error] [pid 40548:tid 40570] [client 13.38.119.237:56536] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aRsMnAM_PykfYnxh-j9rggAAARQ"]
[Mon Nov 17 19:53:10.074714 2025] [:error] [pid 39449:tid 39457] [client 13.38.119.237:45318] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aRsMpqUCymTA3MDfzLNZ3gAAAAM"]
[Mon Nov 17 19:53:10.170847 2025] [:error] [pid 39451:tid 39532] [client 13.38.119.237:45334] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aRsMpufgkqXTS0SO3fAh1QAAAJg"]
[Mon Nov 17 19:53:10.173455 2025] [:error] [pid 30801:tid 30807] [client 13.38.119.237:45348] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aRsMpjbGAU49DhMTBD7u9AAAAkQ"]
[Mon Nov 17 19:53:10.233864 2025] [:error] [pid 32753:tid 32763] [client 13.38.119.237:45388] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "aRsMpk6YNqI5vkht922AyAAAA8c"]
[Mon Nov 17 19:53:10.278476 2025] [:error] [pid 39451:tid 39517] [client 13.38.119.237:45356] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aRsMpufgkqXTS0SO3fAh1gAAAIk"]
[Mon Nov 17 19:53:10.281106 2025] [:error] [pid 31419:tid 31430] [client 13.38.119.237:45372] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env~"] [unique_id "aRsMpgHQ5Sbp7elmDZiXRQAAAok"]
[Mon Nov 17 19:53:10.291419 2025] [:error] [pid 32753:tid 32767] [client 13.38.119.237:45368] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aRsMpk6YNqI5vkht922AyQAAA8s"]
[Mon Nov 17 19:53:10.300504 2025] [:error] [pid 39537:tid 39556] [client 13.38.119.237:45414] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.swp"] [unique_id "aRsMpoZRrh1pcrdcLB-8dwAAANA"]
[Mon Nov 17 19:53:10.302181 2025] [:error] [pid 39451:tid 39528] [client 13.38.119.237:45416] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aRsMpufgkqXTS0SO3fAh1wAAAJQ"]
[Mon Nov 17 19:53:10.304907 2025] [:error] [pid 20913:tid 20929] [client 13.38.119.237:45428] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/admin/.env.save"] [unique_id "aRsMpukafGNeN3nY1bdZ5AAAA04"]
[Mon Nov 17 19:53:10.314502 2025] [:error] [pid 39537:tid 39552] [client 13.38.119.237:45404] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.orig"] [unique_id "aRsMpoZRrh1pcrdcLB-8eAAAAMw"]
[Mon Nov 17 19:53:10.315792 2025] [:error] [pid 32753:tid 32774] [client 13.38.119.237:45426] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.tmp"] [unique_id "aRsMpk6YNqI5vkht922AygAAA9I"]
[Mon Nov 17 19:53:10.362192 2025] [:error] [pid 40548:tid 40568] [client 13.38.119.237:45440] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/admin/.env.bak"] [unique_id "aRsMpgM_PykfYnxh-j9rhAAAARI"]
[Mon Nov 17 19:53:10.383840 2025] [:error] [pid 32753:tid 32760] [client 13.38.119.237:45448] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/admin/.env.old"] [unique_id "aRsMpk6YNqI5vkht922AywAAA8Q"]
[Mon Nov 17 19:53:10.389389 2025] [:error] [pid 20913:tid 20939] [client 13.38.119.237:45436] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "aRsMpukafGNeN3nY1bdZ5QAAA1g"]
[Mon Nov 17 19:53:10.402811 2025] [:error] [pid 32753:tid 32766] [client 13.38.119.237:45446] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "aRsMpk6YNqI5vkht922AzAAAA8o"]
[Mon Nov 17 19:53:10.456990 2025] [:error] [pid 32753:tid 32762] [client 13.38.119.237:45462] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aRsMpk6YNqI5vkht922AzQAAA8Y"]
[Mon Nov 17 19:53:14.141666 2025] [:error] [pid 32753:tid 32772] [client 13.38.119.237:45476] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.env.bak"] [unique_id "aRsMqk6YNqI5vkht922A1AAAA9A"]
[Mon Nov 17 19:53:14.180190 2025] [:error] [pid 39449:tid 39455] [client 13.38.119.237:45470] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/api/.env.save"] [unique_id "aRsMqqUCymTA3MDfzLNZ3wAAAAE"]
[Mon Nov 17 19:53:14.208482 2025] [:error] [pid 65302:tid 65315] [client 13.38.119.237:45482] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/api/.env.old"] [unique_id "aRsMqgPMSx2v85r8y7wCaAAAAUs"]
[Mon Nov 17 19:53:14.228053 2025] [:error] [pid 39449:tid 39467] [client 13.38.119.237:45490] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/api/.env.bak"] [unique_id "aRsMqqUCymTA3MDfzLNZ4AAAAA0"]
[Mon Nov 17 19:53:14.254792 2025] [:error] [pid 39537:tid 39562] [client 13.38.119.237:45514] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.env.save"] [unique_id "aRsMqoZRrh1pcrdcLB-8ewAAANY"]
[Mon Nov 17 19:53:14.295849 2025] [:error] [pid 39449:tid 39458] [client 13.38.119.237:45500] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aRsMqqUCymTA3MDfzLNZ4QAAAAQ"]
[Mon Nov 17 19:53:17.681358 2025] [:error] [pid 31419:tid 31437] [client 13.38.119.237:52036] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.env.old"] [unique_id "aRsMrQHQ5Sbp7elmDZiXSAAAApA"]
[Mon Nov 17 19:53:18.509635 2025] [:error] [pid 39449:tid 39476] [client 13.38.119.237:52114] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/public/.env"] [unique_id "aRsMrqUCymTA3MDfzLNZ5gAAABY"]
[Mon Nov 17 19:53:18.633415 2025] [:error] [pid 15888:tid 15898] [client 13.38.119.237:52138] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/assets/.env.old"] [unique_id "aRsMrgjAdDTBm4W3qW024wAAAcc"]
[Mon Nov 17 19:53:18.697453 2025] [:error] [pid 31419:tid 31432] [client 13.38.119.237:52172] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/public/.env.save"] [unique_id "aRsMrgHQ5Sbp7elmDZiXTAAAAos"]
[Mon Nov 17 19:53:18.697563 2025] [:error] [pid 65302:tid 65328] [client 13.38.119.237:52104] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/lib/.env"] [unique_id "aRsMrgPMSx2v85r8y7wCcgAAAVg"]
[Mon Nov 17 19:53:18.702196 2025] [:error] [pid 30801:tid 30823] [client 13.38.119.237:52190] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/includes/.env"] [unique_id "aRsMrjbGAU49DhMTBD7u-QAAAlQ"]
[Mon Nov 17 19:53:18.702351 2025] [:error] [pid 30801:tid 30822] [client 13.38.119.237:52060] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/config/.env.bak"] [unique_id "aRsMrjbGAU49DhMTBD7u-AAAAlM"]
[Mon Nov 17 19:53:18.709571 2025] [:error] [pid 32753:tid 32767] [client 13.38.119.237:52128] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/src/.env.old"] [unique_id "aRsMrk6YNqI5vkht922A1gAAA8s"]
[Mon Nov 17 19:53:18.712148 2025] [:error] [pid 32753:tid 32773] [client 13.38.119.237:52196] [client 13.38.119.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/assets/.env.save"] [unique_id "aRsMrk6YNqI5vkht922A1wAAA9E"]
[Mon Nov 17 20:40:31.977594 2025] [:error] [pid 30801:tid 30825] [client 13.235.81.12:53562] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aRsXvzbGAU49DhMTBD71pwAAAlY"]
[Mon Nov 17 20:40:31.983824 2025] [:error] [pid 32753:tid 32760] [client 13.235.81.12:53536] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "aRsXv06YNqI5vkht922NiwAAA8Q"]
[Mon Nov 17 20:40:31.991786 2025] [:error] [pid 31419:tid 31440] [client 13.235.81.12:53556] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aRsXvwHQ5Sbp7elmDZifQAAAApM"]
[Mon Nov 17 20:40:32.013102 2025] [:error] [pid 65302:tid 65317] [client 13.235.81.12:53540] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aRsXwAPMSx2v85r8y7wJggAAAU0"]
[Mon Nov 17 20:40:32.047725 2025] [:error] [pid 32753:tid 32762] [client 13.235.81.12:53522] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aRsXwE6YNqI5vkht922NjAAAA8Y"]
[Mon Nov 17 20:40:32.062400 2025] [:error] [pid 32753:tid 32766] [client 13.235.81.12:53516] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aRsXwE6YNqI5vkht922NjQAAA8o"]
[Mon Nov 17 20:40:32.121822 2025] [:error] [pid 30801:tid 30811] [client 13.235.81.12:53654] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env.save"] [unique_id "aRsXwDbGAU49DhMTBD71qAAAAkg"]
[Mon Nov 17 20:40:32.122295 2025] [:error] [pid 39537:tid 39545] [client 13.235.81.12:53604] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aRsXwIZRrh1pcrdcLB_CjgAAAMU"]
[Mon Nov 17 20:40:32.129104 2025] [:error] [pid 30801:tid 30816] [client 13.235.81.12:53650] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env.old"] [unique_id "aRsXwDbGAU49DhMTBD71qQAAAk0"]
[Mon Nov 17 20:40:32.138315 2025] [:error] [pid 30801:tid 30817] [client 13.235.81.12:53760] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env.save"] [unique_id "aRsXwDbGAU49DhMTBD71qgAAAk4"]
[Mon Nov 17 20:40:32.139628 2025] [:error] [pid 39451:tid 39521] [client 13.235.81.12:53574] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env~"] [unique_id "aRsXwOfgkqXTS0SO3fAnQAAAAI0"]
[Mon Nov 17 20:40:32.149773 2025] [:error] [pid 30801:tid 30814] [client 13.235.81.12:53668] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env.old"] [unique_id "aRsXwDbGAU49DhMTBD71qwAAAks"]
[Mon Nov 17 20:40:32.180177 2025] [:error] [pid 30801:tid 30809] [client 13.235.81.12:53648] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aRsXwDbGAU49DhMTBD71rAAAAkY"]
[Mon Nov 17 20:40:32.202505 2025] [:error] [pid 30801:tid 30815] [client 13.235.81.12:53748] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.swp"] [unique_id "aRsXwDbGAU49DhMTBD71rQAAAkw"]
[Mon Nov 17 20:40:32.208168 2025] [:error] [pid 30801:tid 30808] [client 13.235.81.12:53684] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aRsXwDbGAU49DhMTBD71rgAAAkU"]
[Mon Nov 17 20:40:32.223775 2025] [:error] [pid 30801:tid 30803] [client 13.235.81.12:53734] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aRsXwDbGAU49DhMTBD71rwAAAkA"]
[Mon Nov 17 20:40:32.237673 2025] [:error] [pid 30801:tid 30812] [client 13.235.81.12:53614] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "aRsXwDbGAU49DhMTBD71sAAAAkk"]
[Mon Nov 17 20:40:32.249384 2025] [:error] [pid 30801:tid 30819] [client 13.235.81.12:53718] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env.bak"] [unique_id "aRsXwDbGAU49DhMTBD71sQAAAlA"]
[Mon Nov 17 20:40:32.250077 2025] [:error] [pid 39451:tid 39513] [client 13.235.81.12:53766] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.orig"] [unique_id "aRsXwOfgkqXTS0SO3fAnQQAAAIU"]
[Mon Nov 17 20:40:32.253152 2025] [:error] [pid 65302:tid 65312] [client 13.235.81.12:53712] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "aRsXwAPMSx2v85r8y7wJgwAAAUg"]
[Mon Nov 17 20:40:32.253829 2025] [:error] [pid 31419:tid 31425] [client 13.235.81.12:53586] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aRsXwAHQ5Sbp7elmDZifQgAAAoQ"]
[Mon Nov 17 20:40:32.261095 2025] [:error] [pid 31419:tid 31434] [client 13.235.81.12:53612] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "aRsXwAHQ5Sbp7elmDZifQwAAAo0"]
[Mon Nov 17 20:40:32.281811 2025] [:error] [pid 15888:tid 15891] [client 13.235.81.12:53638] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env.bak"] [unique_id "aRsXwAjAdDTBm4W3qW076AAAAcA"]
[Mon Nov 17 20:40:32.281811 2025] [:error] [pid 31419:tid 31430] [client 13.235.81.12:53588] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "aRsXwAHQ5Sbp7elmDZifRAAAAok"]
[Mon Nov 17 20:40:32.303271 2025] [:error] [pid 31419:tid 31439] [client 13.235.81.12:53770] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aRsXwAHQ5Sbp7elmDZifRQAAApI"]
[Mon Nov 17 20:40:32.324189 2025] [:error] [pid 39451:tid 39520] [client 13.235.81.12:53772] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.bak"] [unique_id "aRsXwOfgkqXTS0SO3fAnQgAAAIw"]
[Mon Nov 17 20:40:32.335012 2025] [:error] [pid 39449:tid 39455] [client 13.235.81.12:53622] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.tmp"] [unique_id "aRsXwKUCymTA3MDfzLNj5wAAAAE"]
[Mon Nov 17 20:40:32.344073 2025] [:error] [pid 32753:tid 32768] [client 13.235.81.12:53788] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.bak"] [unique_id "aRsXwE6YNqI5vkht922NjgAAA8w"]
[Mon Nov 17 20:40:32.345733 2025] [:error] [pid 31419:tid 31422] [client 13.235.81.12:53802] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.old"] [unique_id "aRsXwAHQ5Sbp7elmDZifRgAAAoE"]
[Mon Nov 17 20:40:32.353963 2025] [:error] [pid 32753:tid 32776] [client 13.235.81.12:53816] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env"] [unique_id "aRsXwE6YNqI5vkht922NjwAAA9Q"]
[Mon Nov 17 20:40:32.373771 2025] [:error] [pid 32753:tid 32774] [client 13.235.81.12:53818] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.save"] [unique_id "aRsXwE6YNqI5vkht922NkAAAA9I"]
[Mon Nov 17 20:40:32.382129 2025] [:error] [pid 31419:tid 31441] [client 13.235.81.12:53824] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.save"] [unique_id "aRsXwAHQ5Sbp7elmDZifRwAAApQ"]
[Mon Nov 17 20:40:32.391044 2025] [:error] [pid 32753:tid 32758] [client 13.235.81.12:53696] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aRsXwE6YNqI5vkht922NkQAAA8I"]
[Mon Nov 17 20:40:32.801666 2025] [:error] [pid 15888:tid 15910] [client 13.235.81.12:37850] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.old"] [unique_id "aRsXwAjAdDTBm4W3qW076wAAAdM"]
[Mon Nov 17 20:40:32.809125 2025] [:error] [pid 15888:tid 15892] [client 13.235.81.12:53828] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env.save"] [unique_id "aRsXwAjAdDTBm4W3qW077AAAAcE"]
[Mon Nov 17 20:40:32.811560 2025] [:error] [pid 15888:tid 15906] [client 13.235.81.12:37852] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env.bak"] [unique_id "aRsXwAjAdDTBm4W3qW077QAAAc8"]
[Mon Nov 17 20:40:33.354404 2025] [:error] [pid 39537:tid 39540] [client 13.235.81.12:37934] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib/.env.save"] [unique_id "aRsXwYZRrh1pcrdcLB_CjwAAAMA"]
[Mon Nov 17 20:40:33.385506 2025] [:error] [pid 32753:tid 32761] [client 13.235.81.12:38220] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/themes/.env"] [unique_id "aRsXwU6YNqI5vkht922NkgAAA8U"]
[Mon Nov 17 20:40:33.388251 2025] [:error] [pid 15888:tid 15905] [client 13.235.81.12:38032] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/system/.env"] [unique_id "aRsXwQjAdDTBm4W3qW077gAAAc4"]
[Mon Nov 17 20:40:33.403748 2025] [:error] [pid 31419:tid 31443] [client 13.235.81.12:37860] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env"] [unique_id "aRsXwQHQ5Sbp7elmDZifSQAAApY"]
[Mon Nov 17 20:40:33.409323 2025] [:error] [pid 32753:tid 32778] [client 13.235.81.12:53838] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env.old"] [unique_id "aRsXwU6YNqI5vkht922NkwAAA9Y"]
[Mon Nov 17 20:40:33.415328 2025] [:error] [pid 30801:tid 30823] [client 13.235.81.12:37962] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env.old"] [unique_id "aRsXwTbGAU49DhMTBD71sgAAAlQ"]
[Mon Nov 17 20:40:33.418369 2025] [:error] [pid 39451:tid 39525] [client 13.235.81.12:37994] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib/.env.old"] [unique_id "aRsXwefgkqXTS0SO3fAnRAAAAJE"]
[Mon Nov 17 20:40:33.426333 2025] [:error] [pid 39451:tid 39518] [client 13.235.81.12:37956] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env.bak"] [unique_id "aRsXwefgkqXTS0SO3fAnRQAAAIo"]
[Mon Nov 17 20:40:33.430323 2025] [:error] [pid 31419:tid 31423] [client 13.235.81.12:37906] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env.save"] [unique_id "aRsXwQHQ5Sbp7elmDZifSgAAAoI"]
[Mon Nov 17 20:40:33.433790 2025] [:error] [pid 31419:tid 31429] [client 13.235.81.12:37878] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env.old"] [unique_id "aRsXwQHQ5Sbp7elmDZifSwAAAog"]
[Mon Nov 17 20:40:33.440412 2025] [:error] [pid 31419:tid 31433] [client 13.235.81.12:37862] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env.save"] [unique_id "aRsXwQHQ5Sbp7elmDZifTAAAAow"]
[Mon Nov 17 20:40:33.441002 2025] [:error] [pid 40548:tid 40574] [client 13.235.81.12:37944] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env.old"] [unique_id "aRsXwQM_PykfYnxh-j9xggAAARg"]
[Mon Nov 17 20:40:33.442836 2025] [:error] [pid 20913:tid 20931] [client 13.235.81.12:37980] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/application/.env.old"] [unique_id "aRsXwekafGNeN3nY1bdhZgAAA1A"]
[Mon Nov 17 20:40:33.461460 2025] [:error] [pid 32753:tid 32775] [client 13.235.81.12:38212] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/.env"] [unique_id "aRsXwU6YNqI5vkht922NlAAAA9M"]
[Mon Nov 17 20:40:33.466607 2025] [:error] [pid 31419:tid 31444] [client 13.235.81.12:37928] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env"] [unique_id "aRsXwQHQ5Sbp7elmDZifTgAAApc"]
[Mon Nov 17 20:40:33.479676 2025] [:error] [pid 31419:tid 31421] [client 13.235.81.12:38056] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env.save"] [unique_id "aRsXwQHQ5Sbp7elmDZifTwAAAoA"]
[Mon Nov 17 20:40:33.484760 2025] [:error] [pid 31419:tid 31442] [client 13.235.81.12:53864] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env.bak"] [unique_id "aRsXwQHQ5Sbp7elmDZifUAAAApU"]
[Mon Nov 17 20:40:33.485328 2025] [:error] [pid 15888:tid 15897] [client 13.235.81.12:37982] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/system/.env.save"] [unique_id "aRsXwQjAdDTBm4W3qW077wAAAcY"]
[Mon Nov 17 20:40:33.488081 2025] [:error] [pid 39449:tid 39467] [client 13.235.81.12:37960] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env.bak"] [unique_id "aRsXwaUCymTA3MDfzLNj6wAAAA0"]
[Mon Nov 17 20:40:33.492285 2025] [:error] [pid 39537:tid 39556] [client 13.235.81.12:37950] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib/.env.bak"] [unique_id "aRsXwYZRrh1pcrdcLB_CkAAAANA"]
[Mon Nov 17 20:40:33.493454 2025] [:error] [pid 32753:tid 32763] [client 13.235.81.12:38196] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/modules/.env.old"] [unique_id "aRsXwU6YNqI5vkht922NlQAAA8c"]
[Mon Nov 17 20:40:33.497379 2025] [:error] [pid 31419:tid 31435] [client 13.235.81.12:53854] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aRsXwQHQ5Sbp7elmDZifUQAAAo4"]
[Mon Nov 17 20:40:33.504210 2025] [:error] [pid 30801:tid 30820] [client 13.235.81.12:38172] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/plugins/.env.bak"] [unique_id "aRsXwTbGAU49DhMTBD71swAAAlE"]
[Mon Nov 17 20:40:33.509861 2025] [:error] [pid 39537:tid 39563] [client 13.235.81.12:38098] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/storage/.env.bak"] [unique_id "aRsXwYZRrh1pcrdcLB_CkQAAANc"]
[Mon Nov 17 20:40:33.516077 2025] [:error] [pid 31419:tid 31428] [client 13.235.81.12:38158] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/storage/.env.save"] [unique_id "aRsXwQHQ5Sbp7elmDZifUwAAAoc"]
[Mon Nov 17 20:40:33.524176 2025] [:error] [pid 39451:tid 39531] [client 13.235.81.12:37894] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env"] [unique_id "aRsXwefgkqXTS0SO3fAnRgAAAJc"]
[Mon Nov 17 20:40:33.527586 2025] [:error] [pid 39449:tid 39455] [client 13.235.81.12:38124] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/storage/.env.old"] [unique_id "aRsXwaUCymTA3MDfzLNj7AAAAAE"]
[Mon Nov 17 20:40:33.527536 2025] [:error] [pid 39449:tid 39454] [client 13.235.81.12:38014] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/.env.save"] [unique_id "aRsXwaUCymTA3MDfzLNj7QAAAAA"]
[Mon Nov 17 20:40:33.531728 2025] [:error] [pid 39449:tid 39474] [client 13.235.81.12:38040] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/system/.env.old"] [unique_id "aRsXwaUCymTA3MDfzLNj7gAAABQ"]
[Mon Nov 17 20:40:33.537625 2025] [:error] [pid 32753:tid 32777] [client 13.235.81.12:38048] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib/.env"] [unique_id "aRsXwU6YNqI5vkht922NlgAAA9U"]
[Mon Nov 17 20:40:33.550346 2025] [:error] [pid 32753:tid 32756] [client 13.235.81.12:38210] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/.env.old"] [unique_id "aRsXwU6YNqI5vkht922NlwAAA8A"]
[Mon Nov 17 20:40:33.561962 2025] [:error] [pid 40548:tid 40555] [client 13.235.81.12:37912] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env.save"] [unique_id "aRsXwQM_PykfYnxh-j9xgwAAAQU"]
[Mon Nov 17 20:40:33.565706 2025] [:error] [pid 20913:tid 20920] [client 13.235.81.12:38022] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env.old"] [unique_id "aRsXwekafGNeN3nY1bdhZwAAA0U"]
[Mon Nov 17 20:40:33.571683 2025] [:error] [pid 39449:tid 39463] [client 13.235.81.12:37966] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env.bak"] [unique_id "aRsXwaUCymTA3MDfzLNj7wAAAAk"]
[Mon Nov 17 20:40:33.580661 2025] [:error] [pid 39537:tid 39561] [client 13.235.81.12:38112] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/themes/.env.save"] [unique_id "aRsXwYZRrh1pcrdcLB_CkgAAANU"]
[Mon Nov 17 20:40:33.587122 2025] [:error] [pid 15888:tid 15914] [client 13.235.81.12:38130] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/modules/.env.bak"] [unique_id "aRsXwQjAdDTBm4W3qW078AAAAdc"]
[Mon Nov 17 20:40:33.590414 2025] [:error] [pid 32753:tid 32769] [client 13.235.81.12:38078] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/themes/.env.old"] [unique_id "aRsXwU6YNqI5vkht922NmAAAA80"]
[Mon Nov 17 20:40:33.590501 2025] [:error] [pid 15888:tid 15904] [client 13.235.81.12:38128] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/modules/.env"] [unique_id "aRsXwQjAdDTBm4W3qW078QAAAc0"]
[Mon Nov 17 20:40:33.649137 2025] [:error] [pid 31419:tid 31437] [client 13.235.81.12:38070] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/application/.env"] [unique_id "aRsXwQHQ5Sbp7elmDZifVQAAApA"]
[Mon Nov 17 20:40:33.798423 2025] [:error] [pid 39449:tid 39456] [client 13.235.81.12:38138] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/storage/.env"] [unique_id "aRsXwaUCymTA3MDfzLNj8AAAAAI"]
[Mon Nov 17 20:40:33.844039 2025] [:error] [pid 39537:tid 39543] [client 13.235.81.12:38082] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/modules/.env.save"] [unique_id "aRsXwYZRrh1pcrdcLB_CkwAAAMM"]
[Mon Nov 17 20:40:33.868352 2025] [:error] [pid 31419:tid 31427] [client 13.235.81.12:38142] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/plugins/.env.old"] [unique_id "aRsXwQHQ5Sbp7elmDZifVgAAAoY"]
[Mon Nov 17 20:40:33.870715 2025] [:error] [pid 31419:tid 31430] [client 13.235.81.12:38246] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/plugins/.env"] [unique_id "aRsXwQHQ5Sbp7elmDZifVwAAAok"]
[Mon Nov 17 20:40:33.877392 2025] [:error] [pid 31419:tid 31438] [client 13.235.81.12:38238] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/themes/.env.bak"] [unique_id "aRsXwQHQ5Sbp7elmDZifWAAAApE"]
[Mon Nov 17 20:40:33.887457 2025] [:error] [pid 32753:tid 32759] [client 13.235.81.12:38188] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/plugins/.env.save"] [unique_id "aRsXwU6YNqI5vkht922NmQAAA8M"]
[Mon Nov 17 20:40:33.894184 2025] [:error] [pid 32753:tid 32779] [client 13.235.81.12:37976] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env"] [unique_id "aRsXwU6YNqI5vkht922NmgAAA9c"]
[Mon Nov 17 20:40:34.190932 2025] [:error] [pid 39449:tid 39459] [client 13.235.81.12:38004] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/application/.env.save"] [unique_id "aRsXwqUCymTA3MDfzLNj8QAAAAU"]
[Mon Nov 17 20:40:34.303627 2025] [:error] [pid 31419:tid 31424] [client 13.235.81.12:38244] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/.env.bak"] [unique_id "aRsXwgHQ5Sbp7elmDZifWQAAAoM"]
[Mon Nov 17 20:40:34.352027 2025] [:error] [pid 39449:tid 39477] [client 13.235.81.12:37990] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/system/.env.bak"] [unique_id "aRsXwqUCymTA3MDfzLNj8gAAABc"]
[Mon Nov 17 20:40:34.435435 2025] [:error] [pid 31419:tid 31434] [client 13.235.81.12:38222] [client 13.235.81.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/application/.env.bak"] [unique_id "aRsXwgHQ5Sbp7elmDZifWgAAAo0"]
[Mon Nov 17 22:57:58.902357 2025] [:error] [pid 15888:tid 15902] [client 3.88.155.64:56306] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "aRs39gjAdDTBm4W3qW1LgAAAAcs"]
[Mon Nov 17 22:57:58.917987 2025] [:error] [pid 40548:tid 40562] [client 3.88.155.64:56288] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aRs39gM_PykfYnxh-j-BSAAAAQw"]
[Mon Nov 17 22:57:58.934508 2025] [:error] [pid 39451:tid 39512] [client 3.88.155.64:56300] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aRs39ufgkqXTS0SO3fA2-gAAAIQ"]
[Mon Nov 17 22:57:58.992246 2025] [:error] [pid 39537:tid 39563] [client 3.88.155.64:56304] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "aRs39oZRrh1pcrdcLB_SwAAAANc"]
[Mon Nov 17 22:57:59.023446 2025] [:error] [pid 39451:tid 39518] [client 3.88.155.64:56308] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aRs39-fgkqXTS0SO3fA2-wAAAIo"]
[Mon Nov 17 22:57:59.024844 2025] [:error] [pid 39449:tid 39456] [client 3.88.155.64:56324] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aRs396UCymTA3MDfzLN98AAAAAI"]
[Mon Nov 17 22:57:59.076392 2025] [:error] [pid 39537:tid 39556] [client 3.88.155.64:56346] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aRs394ZRrh1pcrdcLB_SwQAAANA"]
[Mon Nov 17 22:57:59.087673 2025] [:error] [pid 40548:tid 40563] [client 3.88.155.64:56330] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aRs39wM_PykfYnxh-j-BSQAAAQ0"]
[Mon Nov 17 22:57:59.119405 2025] [:error] [pid 65302:tid 65320] [client 3.88.155.64:56356] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env~"] [unique_id "aRs39wPMSx2v85r8y7wcTQAAAVA"]
[Mon Nov 17 22:57:59.142761 2025] [:error] [pid 32753:tid 32756] [client 3.88.155.64:56352] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aRs3906YNqI5vkht922vOQAAA8A"]
[Mon Nov 17 22:57:59.151314 2025] [:error] [pid 15888:tid 15908] [client 3.88.155.64:56378] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "aRs39wjAdDTBm4W3qW1LgQAAAdE"]
[Mon Nov 17 22:57:59.155199 2025] [:error] [pid 15888:tid 15914] [client 3.88.155.64:56370] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aRs39wjAdDTBm4W3qW1LggAAAdc"]
[Mon Nov 17 22:57:59.157151 2025] [:error] [pid 32753:tid 32761] [client 3.88.155.64:56392] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.orig"] [unique_id "aRs3906YNqI5vkht922vOgAAA8U"]
[Mon Nov 17 22:57:59.169263 2025] [:error] [pid 32753:tid 32780] [client 3.88.155.64:56398] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.swp"] [unique_id "aRs3906YNqI5vkht922vOwAAA9g"]
[Mon Nov 17 22:57:59.194756 2025] [:error] [pid 32753:tid 32777] [client 3.88.155.64:56426] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "aRs3906YNqI5vkht922vPAAAA9U"]
[Mon Nov 17 22:57:59.208387 2025] [:error] [pid 15888:tid 15892] [client 3.88.155.64:56418] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.tmp"] [unique_id "aRs39wjAdDTBm4W3qW1LgwAAAcE"]
[Mon Nov 17 22:57:59.214764 2025] [:error] [pid 15888:tid 15910] [client 3.88.155.64:56412] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aRs39wjAdDTBm4W3qW1LhAAAAdM"]
[Mon Nov 17 22:57:59.223968 2025] [:error] [pid 32753:tid 32773] [client 3.88.155.64:56406] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aRs3906YNqI5vkht922vPQAAA9E"]
[Mon Nov 17 22:58:01.178465 2025] [:error] [pid 20913:tid 20923] [client 3.88.155.64:56484] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "aRs3-ekafGNeN3nY1bd1qgAAA0g"]
[Mon Nov 17 22:58:01.199882 2025] [:error] [pid 31419:tid 31432] [client 3.88.155.64:56432] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env.old"] [unique_id "aRs3-QHQ5Sbp7elmDZi1KgAAAos"]
[Mon Nov 17 22:58:01.377226 2025] [:error] [pid 31419:tid 31442] [client 3.88.155.64:56460] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.save"] [unique_id "aRs3-QHQ5Sbp7elmDZi1LAAAApU"]
[Mon Nov 17 22:58:01.395027 2025] [:error] [pid 32753:tid 32774] [client 3.88.155.64:56472] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env.bak"] [unique_id "aRs3-U6YNqI5vkht922vRgAAA9I"]
[Mon Nov 17 22:58:01.398077 2025] [:error] [pid 32753:tid 32765] [client 3.88.155.64:56500] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env.bak"] [unique_id "aRs3-U6YNqI5vkht922vRwAAA8k"]
[Mon Nov 17 22:58:01.405175 2025] [:error] [pid 31419:tid 31422] [client 3.88.155.64:56448] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env.save"] [unique_id "aRs3-QHQ5Sbp7elmDZi1LQAAAoE"]
[Mon Nov 17 22:58:01.413653 2025] [:error] [pid 32753:tid 32759] [client 3.88.155.64:56506] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aRs3-U6YNqI5vkht922vSAAAA8M"]
[Mon Nov 17 22:58:01.674972 2025] [:error] [pid 65302:tid 65322] [client 3.88.155.64:56516] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env.old"] [unique_id "aRs3-QPMSx2v85r8y7wcUQAAAVI"]
[Mon Nov 17 22:58:01.739769 2025] [:error] [pid 20913:tid 20918] [client 3.88.155.64:56532] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aRs3-ekafGNeN3nY1bd1rAAAA0M"]
[Mon Nov 17 22:58:01.885712 2025] [:error] [pid 32753:tid 32771] [client 3.88.155.64:56528] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env.save"] [unique_id "aRs3-U6YNqI5vkht922vSQAAA88"]
[Mon Nov 17 22:58:02.113216 2025] [:error] [pid 30801:tid 30809] [client 3.88.155.64:50278] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aRs3-jbGAU49DhMTBD4HFwAAAkY"]
[Mon Nov 17 22:58:02.149766 2025] [:error] [pid 65302:tid 65318] [client 3.88.155.64:50298] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env"] [unique_id "aRs3-gPMSx2v85r8y7wcUgAAAU4"]
[Mon Nov 17 22:58:02.153069 2025] [:error] [pid 39451:tid 39526] [client 3.88.155.64:50300] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.bak"] [unique_id "aRs3-ufgkqXTS0SO3fA2_AAAAJI"]
[Mon Nov 17 22:58:02.153379 2025] [:error] [pid 31419:tid 31428] [client 3.88.155.64:50386] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env.save"] [unique_id "aRs3-gHQ5Sbp7elmDZi1LgAAAoc"]
[Mon Nov 17 22:58:02.168162 2025] [:error] [pid 31419:tid 31425] [client 3.88.155.64:50262] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.old"] [unique_id "aRs3-gHQ5Sbp7elmDZi1LwAAAoQ"]
[Mon Nov 17 22:58:02.168206 2025] [:error] [pid 39537:tid 39558] [client 3.88.155.64:50328] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env.bak"] [unique_id "aRs3-oZRrh1pcrdcLB_SyAAAANI"]
[Mon Nov 17 22:58:02.175522 2025] [:error] [pid 65302:tid 65304] [client 3.88.155.64:50380] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env.save"] [unique_id "aRs3-gPMSx2v85r8y7wcUwAAAUA"]
[Mon Nov 17 22:58:02.175919 2025] [:error] [pid 31419:tid 31444] [client 3.88.155.64:50250] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env"] [unique_id "aRs3-gHQ5Sbp7elmDZi1MAAAApc"]
[Mon Nov 17 22:58:02.179848 2025] [:error] [pid 65302:tid 65328] [client 3.88.155.64:50358] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env.old"] [unique_id "aRs3-gPMSx2v85r8y7wcVAAAAVg"]
[Mon Nov 17 22:58:02.182782 2025] [:error] [pid 65302:tid 65308] [client 3.88.155.64:50374] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.old"] [unique_id "aRs3-gPMSx2v85r8y7wcVQAAAUQ"]
[Mon Nov 17 22:58:02.188518 2025] [:error] [pid 65302:tid 65313] [client 3.88.155.64:50330] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.save"] [unique_id "aRs3-gPMSx2v85r8y7wcVgAAAUk"]
[Mon Nov 17 22:58:02.211512 2025] [:error] [pid 65302:tid 65310] [client 3.88.155.64:50282] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.bak"] [unique_id "aRs3-gPMSx2v85r8y7wcVwAAAUY"]
[Mon Nov 17 22:58:02.218719 2025] [:error] [pid 40548:tid 40560] [client 3.88.155.64:50400] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env"] [unique_id "aRs3-gM_PykfYnxh-j-BTAAAAQo"]
[Mon Nov 17 22:58:02.236256 2025] [:error] [pid 30801:tid 30823] [client 3.88.155.64:50408] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env.bak"] [unique_id "aRs3-jbGAU49DhMTBD4HGAAAAlQ"]
[Mon Nov 17 22:58:02.239409 2025] [:error] [pid 65302:tid 65307] [client 3.88.155.64:50312] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env.save"] [unique_id "aRs3-gPMSx2v85r8y7wcWAAAAUM"]
[Mon Nov 17 22:58:02.240497 2025] [:error] [pid 65302:tid 65311] [client 3.88.155.64:50326] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env.bak"] [unique_id "aRs3-gPMSx2v85r8y7wcWQAAAUc"]
[Mon Nov 17 22:58:02.270779 2025] [:error] [pid 40548:tid 40572] [client 3.88.155.64:50342] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env.old"] [unique_id "aRs3-gM_PykfYnxh-j-BTQAAARY"]
[Mon Nov 17 22:58:02.283625 2025] [:error] [pid 30801:tid 30811] [client 3.88.155.64:50414] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env"] [unique_id "aRs3-jbGAU49DhMTBD4HGQAAAkg"]
[Mon Nov 17 22:58:02.299758 2025] [:error] [pid 31419:tid 31427] [client 3.88.155.64:50394] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env.bak"] [unique_id "aRs3-gHQ5Sbp7elmDZi1MQAAAoY"]
[Mon Nov 17 22:58:02.351201 2025] [:error] [pid 30801:tid 30822] [client 3.88.155.64:50428] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env.save"] [unique_id "aRs3-jbGAU49DhMTBD4HGgAAAlM"]
[Mon Nov 17 22:58:02.367477 2025] [:error] [pid 30801:tid 30816] [client 3.88.155.64:50430] [client 3.88.155.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env.old"] [unique_id "aRs3-jbGAU49DhMTBD4HGwAAAk0"]
[Tue Nov 18 00:29:47.525821 2025] [:error] [pid 40561:tid 40610] [client 175.6.217.4:52830] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRtNe5dU597fIdQPRD-uhgAAAM4"]
[Tue Nov 18 07:23:08.755303 2025] [:error] [pid 61482:tid 61495] [client 15.152.145.98:51992] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aRuuXPtNHsWZClVWav5hEQAAAMg"]
[Tue Nov 18 07:23:20.651461 2025] [:error] [pid 42804:tid 42814] [client 15.152.145.98:44210] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "aRuuaPpXARlE6tIuBnlpkwAAAUg"]
[Tue Nov 18 07:23:20.661502 2025] [:error] [pid 42804:tid 42815] [client 15.152.145.98:44222] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aRuuaPpXARlE6tIuBnlplAAAAUk"]
[Tue Nov 18 07:23:20.663837 2025] [:error] [pid 42804:tid 42822] [client 15.152.145.98:44234] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "aRuuaPpXARlE6tIuBnlplQAAAVA"]
[Tue Nov 18 07:23:20.746320 2025] [:error] [pid 42804:tid 42824] [client 15.152.145.98:44242] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aRuuaPpXARlE6tIuBnlplgAAAVI"]
[Tue Nov 18 07:23:26.426750 2025] [:error] [pid 61393:tid 61458] [client 15.152.145.98:44252] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aRuubmH9XjlbVPv9gQUvoQAAAII"]
[Tue Nov 18 07:23:26.507264 2025] [:error] [pid 9935:tid 9947] [client 15.152.145.98:44282] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aRuubgWOMXsrZFRF6sjgdQAAAYo"]
[Tue Nov 18 07:23:26.515259 2025] [:error] [pid 29195:tid 29213] [client 15.152.145.98:44268] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aRuubhMeonxy_4yeOTVMzwAAARA"]
[Tue Nov 18 07:23:26.554430 2025] [:error] [pid 9935:tid 9946] [client 15.152.145.98:44272] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aRuubgWOMXsrZFRF6sjgdgAAAYk"]
[Tue Nov 18 07:23:26.601309 2025] [:error] [pid 9935:tid 9940] [client 15.152.145.98:44278] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env~"] [unique_id "aRuubgWOMXsrZFRF6sjgdwAAAYM"]
[Tue Nov 18 07:23:27.700826 2025] [:error] [pid 42804:tid 42823] [client 15.152.145.98:44292] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "aRuub_pXARlE6tIuBnlpowAAAVE"]
[Tue Nov 18 07:23:27.715447 2025] [:error] [pid 61392:tid 61453] [client 15.152.145.98:44320] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aRuub3Smvb496zZxueLh1wAAAFg"]
[Tue Nov 18 07:23:27.809882 2025] [:error] [pid 42804:tid 42826] [client 15.152.145.98:44304] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aRuub_pXARlE6tIuBnlppAAAAVQ"]
[Tue Nov 18 07:23:27.894368 2025] [:error] [pid 42804:tid 42812] [client 15.152.145.98:44336] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.orig"] [unique_id "aRuub_pXARlE6tIuBnlppQAAAUY"]
[Tue Nov 18 07:23:27.908165 2025] [:error] [pid 42804:tid 42827] [client 15.152.145.98:44326] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aRuub_pXARlE6tIuBnlppgAAAVU"]
[Tue Nov 18 07:23:34.032942 2025] [:error] [pid 42804:tid 42812] [client 15.152.145.98:46654] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.swp"] [unique_id "aRuudvpXARlE6tIuBnlpqQAAAUY"]
[Tue Nov 18 07:23:34.165357 2025] [:error] [pid 42804:tid 42827] [client 15.152.145.98:46656] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.tmp"] [unique_id "aRuudvpXARlE6tIuBnlpqgAAAVU"]
[Tue Nov 18 07:23:37.956701 2025] [:error] [pid 61393:tid 61459] [client 15.152.145.98:46678] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/admin/.env.bak"] [unique_id "aRuueWH9XjlbVPv9gQUvrgAAAIM"]
[Tue Nov 18 07:23:38.069064 2025] [:error] [pid 61391:tid 61400] [client 15.152.145.98:46670] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "aRuueowXIKmhlnkP3-dwcAAAAAA"]
[Tue Nov 18 07:23:38.083865 2025] [:error] [pid 61391:tid 61422] [client 15.152.145.98:46690] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/admin/.env.save"] [unique_id "aRuueowXIKmhlnkP3-dwcQAAABY"]
[Tue Nov 18 07:23:38.103091 2025] [:error] [pid 61393:tid 61468] [client 15.152.145.98:46692] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/admin/.env.old"] [unique_id "aRuuemH9XjlbVPv9gQUvrwAAAIw"]
[Tue Nov 18 07:23:38.120006 2025] [:error] [pid 61393:tid 61464] [client 15.152.145.98:46714] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aRuuemH9XjlbVPv9gQUvsAAAAIg"]
[Tue Nov 18 07:23:38.168509 2025] [:error] [pid 61393:tid 61462] [client 15.152.145.98:46722] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/api/.env.save"] [unique_id "aRuuemH9XjlbVPv9gQUvsQAAAIY"]
[Tue Nov 18 07:23:38.173464 2025] [:error] [pid 61393:tid 61478] [client 15.152.145.98:46702] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "aRuuemH9XjlbVPv9gQUvsgAAAJY"]
[Tue Nov 18 07:24:03.925446 2025] [:error] [pid 9935:tid 9952] [client 15.152.145.98:51346] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aRuukwWOMXsrZFRF6sjgnwAAAY8"]
[Tue Nov 18 07:24:03.944355 2025] [:error] [pid 61392:tid 61438] [client 15.152.145.98:51472] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/src/.env.old"] [unique_id "aRuuk3Smvb496zZxueLh_gAAAEk"]
[Tue Nov 18 07:24:03.955210 2025] [:error] [pid 42804:tid 42813] [client 15.152.145.98:51420] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/config/.env.old"] [unique_id "aRuuk_pXARlE6tIuBnlpwwAAAUc"]
[Tue Nov 18 07:24:03.958900 2025] [:error] [pid 61391:tid 61406] [client 15.152.145.98:51382] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/src/.env"] [unique_id "aRuuk4wXIKmhlnkP3-dwlQAAAAY"]
[Tue Nov 18 07:24:03.980855 2025] [:error] [pid 9935:tid 9950] [client 15.152.145.98:51434] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aRuukwWOMXsrZFRF6sjgogAAAY0"]
[Tue Nov 18 07:24:03.981273 2025] [:error] [pid 29195:tid 29203] [client 15.152.145.98:51332] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/api/.env.old"] [unique_id "aRuukxMeonxy_4yeOTVM8gAAAQY"]
[Tue Nov 18 07:24:03.987127 2025] [:error] [pid 9935:tid 9937] [client 15.152.145.98:51450] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/public/.env.old"] [unique_id "aRuukwWOMXsrZFRF6sjgowAAAYA"]
[Tue Nov 18 07:24:03.987151 2025] [:error] [pid 29195:tid 29216] [client 15.152.145.98:51376] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.env.old"] [unique_id "aRuukxMeonxy_4yeOTVM8wAAARM"]
[Tue Nov 18 07:24:03.988267 2025] [:error] [pid 42804:tid 42807] [client 15.152.145.98:51460] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/config/.env.save"] [unique_id "aRuuk_pXARlE6tIuBnlpxAAAAUE"]
[Tue Nov 18 07:24:03.988360 2025] [:error] [pid 42804:tid 42826] [client 15.152.145.98:51408] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/public/.env.save"] [unique_id "aRuuk_pXARlE6tIuBnlpxQAAAVQ"]
[Tue Nov 18 07:24:03.992871 2025] [:error] [pid 61391:tid 61423] [client 15.152.145.98:51370] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/public/.env"] [unique_id "aRuuk4wXIKmhlnkP3-dwlgAAABc"]
[Tue Nov 18 07:24:03.998284 2025] [:error] [pid 42804:tid 42828] [client 15.152.145.98:51398] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/api/.env.bak"] [unique_id "aRuuk_pXARlE6tIuBnlpxgAAAVY"]
[Tue Nov 18 07:24:04.004605 2025] [:error] [pid 9935:tid 9940] [client 15.152.145.98:51316] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/config/.env.bak"] [unique_id "aRuulAWOMXsrZFRF6sjgpAAAAYM"]
[Tue Nov 18 07:24:04.005736 2025] [:error] [pid 61392:tid 61429] [client 15.152.145.98:51412] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.env.bak"] [unique_id "aRuulHSmvb496zZxueLh_wAAAEA"]
[Tue Nov 18 07:24:04.015306 2025] [:error] [pid 42804:tid 42823] [client 15.152.145.98:51388] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.env.save"] [unique_id "aRuulPpXARlE6tIuBnlpxwAAAVE"]
[Tue Nov 18 07:24:04.041000 2025] [:error] [pid 42804:tid 42822] [client 15.152.145.98:51358] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/src/.env.bak"] [unique_id "aRuulPpXARlE6tIuBnlpyAAAAVA"]
[Tue Nov 18 07:24:04.042374 2025] [:error] [pid 42804:tid 42821] [client 15.152.145.98:51320] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/src/.env.save"] [unique_id "aRuulPpXARlE6tIuBnlpyQAAAU8"]
[Tue Nov 18 07:24:04.058604 2025] [:error] [pid 9935:tid 9941] [client 15.152.145.98:51486] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/public/.env.bak"] [unique_id "aRuulAWOMXsrZFRF6sjgpQAAAYQ"]
[Tue Nov 18 07:24:04.142925 2025] [:error] [pid 42804:tid 42827] [client 15.152.145.98:51500] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/includes/.env.save"] [unique_id "aRuulPpXARlE6tIuBnlpygAAAVU"]
[Tue Nov 18 07:24:04.156872 2025] [:error] [pid 29195:tid 29206] [client 15.152.145.98:51550] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/lib/.env.save"] [unique_id "aRuulBMeonxy_4yeOTVM9AAAAQk"]
[Tue Nov 18 07:24:04.157617 2025] [:error] [pid 61392:tid 61433] [client 15.152.145.98:51516] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/includes/.env"] [unique_id "aRuulHSmvb496zZxueLiAAAAAEQ"]
[Tue Nov 18 07:24:04.172776 2025] [:error] [pid 9935:tid 9948] [client 15.152.145.98:51524] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/assets/.env"] [unique_id "aRuulAWOMXsrZFRF6sjgpwAAAYs"]
[Tue Nov 18 07:24:04.214472 2025] [:error] [pid 29195:tid 29217] [client 15.152.145.98:51536] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/includes/.env.bak"] [unique_id "aRuulBMeonxy_4yeOTVM9QAAARQ"]
[Tue Nov 18 07:24:04.284616 2025] [:error] [pid 9935:tid 9956] [client 15.152.145.98:51564] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/lib/.env"] [unique_id "aRuulAWOMXsrZFRF6sjgqQAAAZM"]
[Tue Nov 18 07:24:04.324714 2025] [:error] [pid 42804:tid 42830] [client 15.152.145.98:51544] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/assets/.env.save"] [unique_id "aRuulPpXARlE6tIuBnlpywAAAVg"]
[Tue Nov 18 07:24:04.326429 2025] [:error] [pid 42804:tid 42811] [client 15.152.145.98:51534] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/assets/.env.old"] [unique_id "aRuulPpXARlE6tIuBnlpzAAAAUU"]
[Tue Nov 18 07:24:04.345484 2025] [:error] [pid 29195:tid 29197] [client 15.152.145.98:51542] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/includes/.env.old"] [unique_id "aRuulBMeonxy_4yeOTVM9gAAAQA"]
[Tue Nov 18 07:24:04.351768 2025] [:error] [pid 29195:tid 29202] [client 15.152.145.98:51518] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/assets/.env.bak"] [unique_id "aRuulBMeonxy_4yeOTVM9wAAAQU"]
[Tue Nov 18 07:24:06.059911 2025] [:error] [pid 42804:tid 42820] [client 15.152.145.98:51600] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/lib/.env.old"] [unique_id "aRuulvpXARlE6tIuBnlp1gAAAU4"]
[Tue Nov 18 07:24:06.068670 2025] [:error] [pid 61482:tid 61504] [client 15.152.145.98:51592] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/application/.env.old"] [unique_id "aRuulvtNHsWZClVWav5hMgAAANE"]
[Tue Nov 18 07:24:06.071786 2025] [:error] [pid 61393:tid 61473] [client 15.152.145.98:51590] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/application/.env"] [unique_id "aRuulmH9XjlbVPv9gQUvyQAAAJE"]
[Tue Nov 18 07:24:06.089496 2025] [:error] [pid 61482:tid 61501] [client 15.152.145.98:51620] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/system/.env"] [unique_id "aRuulvtNHsWZClVWav5hMwAAAM4"]
[Tue Nov 18 07:24:06.090917 2025] [:error] [pid 42804:tid 42817] [client 15.152.145.98:51576] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/lib/.env.bak"] [unique_id "aRuulvpXARlE6tIuBnlp1wAAAUs"]
[Tue Nov 18 07:24:06.140646 2025] [:error] [pid 61482:tid 61488] [client 15.152.145.98:51612] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/application/.env.save"] [unique_id "aRuulvtNHsWZClVWav5hNAAAAME"]
[Tue Nov 18 07:24:06.191716 2025] [:error] [pid 9935:tid 9951] [client 15.152.145.98:51596] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/core/.env"] [unique_id "aRuulgWOMXsrZFRF6sjgsAAAAY4"]
[Tue Nov 18 07:24:06.347919 2025] [:error] [pid 61392:tid 61436] [client 15.152.145.98:51602] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/system/.env.save"] [unique_id "aRuulnSmvb496zZxueLiAgAAAEc"]
[Tue Nov 18 07:24:06.383964 2025] [:error] [pid 42804:tid 42814] [client 15.152.145.98:51594] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/system/.env.old"] [unique_id "aRuulvpXARlE6tIuBnlp2wAAAUg"]
[Tue Nov 18 07:24:06.467678 2025] [:error] [pid 42804:tid 42812] [client 15.152.145.98:51628] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/system/.env.bak"] [unique_id "aRuulvpXARlE6tIuBnlp3AAAAUY"]
[Tue Nov 18 07:24:06.519497 2025] [:error] [pid 42804:tid 42815] [client 15.152.145.98:51644] [client 15.152.145.98] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/application/.env.bak"] [unique_id "aRuulvpXARlE6tIuBnlp3QAAAUk"]
[Tue Nov 18 08:08:02.460909 2025] [:error] [pid 61482:tid 61496] [client 54.93.87.136:57210] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "aRu44vtNHsWZClVWav5rNgAAAMk"]
[Tue Nov 18 08:08:02.477196 2025] [:error] [pid 61393:tid 61467] [client 54.93.87.136:57252] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env.bak"] [unique_id "aRu44mH9XjlbVPv9gQU3vAAAAIs"]
[Tue Nov 18 08:08:02.482750 2025] [:error] [pid 61482:tid 61503] [client 54.93.87.136:57172] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.orig"] [unique_id "aRu44vtNHsWZClVWav5rNwAAANA"]
[Tue Nov 18 08:08:02.483773 2025] [:error] [pid 28635:tid 28647] [client 54.93.87.136:57156] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aRu44mB61AnWhG54Xz3GyQAAAck"]
[Tue Nov 18 08:08:02.486245 2025] [:error] [pid 61393:tid 61473] [client 54.93.87.136:57254] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.save"] [unique_id "aRu44mH9XjlbVPv9gQU3vQAAAJE"]
[Tue Nov 18 08:08:02.486964 2025] [:error] [pid 61393:tid 61476] [client 54.93.87.136:57228] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "aRu44mH9XjlbVPv9gQU3vgAAAJQ"]
[Tue Nov 18 08:08:02.490371 2025] [:error] [pid 61482:tid 61499] [client 54.93.87.136:57304] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib/.env.save"] [unique_id "aRu44vtNHsWZClVWav5rOAAAAMw"]
[Tue Nov 18 08:08:02.490939 2025] [:error] [pid 61393:tid 61458] [client 54.93.87.136:57130] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "aRu44mH9XjlbVPv9gQU3vwAAAII"]
[Tue Nov 18 08:08:02.492460 2025] [:error] [pid 61393:tid 61475] [client 54.93.87.136:57164] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aRu44mH9XjlbVPv9gQU3wAAAAJM"]
[Tue Nov 18 08:08:02.496317 2025] [:error] [pid 61482:tid 61504] [client 54.93.87.136:57178] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aRu44vtNHsWZClVWav5rOQAAANE"]
[Tue Nov 18 08:08:02.497153 2025] [:error] [pid 61482:tid 61508] [client 54.93.87.136:57314] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env.bak"] [unique_id "aRu44vtNHsWZClVWav5rOgAAANU"]
[Tue Nov 18 08:08:02.499659 2025] [:error] [pid 29195:tid 29200] [client 54.93.87.136:57138] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env~"] [unique_id "aRu44hMeonxy_4yeOTVVWAAAAQM"]
[Tue Nov 18 08:08:02.500899 2025] [:error] [pid 28635:tid 28655] [client 54.93.87.136:57286] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env.old"] [unique_id "aRu44mB61AnWhG54Xz3GygAAAdE"]
[Tue Nov 18 08:08:02.502537 2025] [:error] [pid 42804:tid 42823] [client 54.93.87.136:57146] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aRu44vpXARlE6tIuBnly2gAAAVE"]
[Tue Nov 18 08:08:02.503518 2025] [:error] [pid 29195:tid 29214] [client 54.93.87.136:57298] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env"] [unique_id "aRu44hMeonxy_4yeOTVVWQAAARE"]
[Tue Nov 18 08:08:02.503657 2025] [:error] [pid 61482:tid 61500] [client 54.93.87.136:57116] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aRu44vtNHsWZClVWav5rOwAAAM0"]
[Tue Nov 18 08:08:02.505035 2025] [:error] [pid 61392:tid 61433] [client 54.93.87.136:57074] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "aRu44nSmvb496zZxueLuBgAAAEQ"]
[Tue Nov 18 08:08:02.504966 2025] [:error] [pid 61482:tid 61511] [client 54.93.87.136:57194] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.swp"] [unique_id "aRu44vtNHsWZClVWav5rPAAAANg"]
[Tue Nov 18 08:08:02.508371 2025] [:error] [pid 61391:tid 61410] [client 54.93.87.136:57274] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aRu44owXIKmhlnkP3-d4NwAAAAo"]
[Tue Nov 18 08:08:02.511884 2025] [:error] [pid 28635:tid 28662] [client 54.93.87.136:57302] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env.old"] [unique_id "aRu44mB61AnWhG54Xz3GywAAAdg"]
[Tue Nov 18 08:08:02.521595 2025] [:error] [pid 9935:tid 9937] [client 54.93.87.136:57232] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.tmp"] [unique_id "aRu44gWOMXsrZFRF6sjwhQAAAYA"]
[Tue Nov 18 08:08:02.522942 2025] [:error] [pid 61393:tid 61466] [client 54.93.87.136:57256] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.bak"] [unique_id "aRu44mH9XjlbVPv9gQU3wQAAAIo"]
[Tue Nov 18 08:08:02.527835 2025] [:error] [pid 61482:tid 61502] [client 54.93.87.136:57142] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aRu44vtNHsWZClVWav5rPQAAAM8"]
[Tue Nov 18 08:08:02.528108 2025] [:error] [pid 61482:tid 61492] [client 54.93.87.136:57212] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env.save"] [unique_id "aRu44vtNHsWZClVWav5rPgAAAMU"]
[Tue Nov 18 08:08:02.528672 2025] [:error] [pid 61393:tid 61471] [client 54.93.87.136:57100] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "aRu44mH9XjlbVPv9gQU3wgAAAI8"]
[Tue Nov 18 08:08:02.529817 2025] [:error] [pid 61393:tid 61463] [client 54.93.87.136:57184] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aRu44mH9XjlbVPv9gQU3wwAAAIc"]
[Tue Nov 18 08:08:02.531304 2025] [:error] [pid 61392:tid 61431] [client 54.93.87.136:57132] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aRu44nSmvb496zZxueLuBwAAAEI"]
[Tue Nov 18 08:08:02.532704 2025] [:error] [pid 29195:tid 29203] [client 54.93.87.136:57242] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env.save"] [unique_id "aRu44hMeonxy_4yeOTVVWgAAAQY"]
[Tue Nov 18 08:08:02.553467 2025] [:error] [pid 61393:tid 61456] [client 54.93.87.136:57122] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aRu44mH9XjlbVPv9gQU3xAAAAIA"]
[Tue Nov 18 08:08:02.567425 2025] [:error] [pid 61393:tid 61480] [client 54.93.87.136:57264] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aRu44mH9XjlbVPv9gQU3xQAAAJg"]
[Tue Nov 18 08:08:02.705155 2025] [:error] [pid 61391:tid 61412] [client 54.93.87.136:57088] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aRu44owXIKmhlnkP3-d4OAAAAAw"]
[Tue Nov 18 08:08:02.811926 2025] [:error] [pid 29195:tid 29199] [client 54.93.87.136:57382] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env.old"] [unique_id "aRu44hMeonxy_4yeOTVVWwAAAQI"]
[Tue Nov 18 08:08:02.885936 2025] [:error] [pid 61391:tid 61413] [client 54.93.87.136:57374] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/application/.env.save"] [unique_id "aRu44owXIKmhlnkP3-d4OQAAAA0"]
[Tue Nov 18 08:08:02.889885 2025] [:error] [pid 61393:tid 61464] [client 54.93.87.136:57322] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env.save"] [unique_id "aRu44mH9XjlbVPv9gQU3xgAAAIg"]
[Tue Nov 18 08:08:02.898854 2025] [:error] [pid 9935:tid 9941] [client 54.93.87.136:57360] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env"] [unique_id "aRu44gWOMXsrZFRF6sjwhgAAAYQ"]
[Tue Nov 18 08:08:02.903800 2025] [:error] [pid 9935:tid 9957] [client 54.93.87.136:57426] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/application/.env"] [unique_id "aRu44gWOMXsrZFRF6sjwhwAAAZQ"]
[Tue Nov 18 08:08:02.904316 2025] [:error] [pid 9935:tid 9959] [client 54.93.87.136:57352] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env.old"] [unique_id "aRu44gWOMXsrZFRF6sjwiAAAAZY"]
[Tue Nov 18 08:08:02.909040 2025] [:error] [pid 61391:tid 61421] [client 54.93.87.136:40624] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env.save"] [unique_id "aRu44owXIKmhlnkP3-d4OgAAABU"]
[Tue Nov 18 08:08:02.911217 2025] [:error] [pid 42804:tid 42811] [client 54.93.87.136:40636] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env.bak"] [unique_id "aRu44vpXARlE6tIuBnly2wAAAUU"]
[Tue Nov 18 08:08:02.912377 2025] [:error] [pid 61392:tid 61446] [client 54.93.87.136:40638] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env.save"] [unique_id "aRu44nSmvb496zZxueLuCAAAAFE"]
[Tue Nov 18 08:08:02.914019 2025] [:error] [pid 61393:tid 61457] [client 54.93.87.136:57402] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib/.env.bak"] [unique_id "aRu44mH9XjlbVPv9gQU3xwAAAIE"]
[Tue Nov 18 08:08:02.915393 2025] [:error] [pid 28635:tid 28650] [client 54.93.87.136:57316] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env.bak"] [unique_id "aRu44mB61AnWhG54Xz3GzAAAAcw"]
[Tue Nov 18 08:08:02.916125 2025] [:error] [pid 61393:tid 61479] [client 54.93.87.136:57334] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aRu44mH9XjlbVPv9gQU3yAAAAJc"]
[Tue Nov 18 08:08:02.920783 2025] [:error] [pid 61391:tid 61401] [client 54.93.87.136:57412] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env.old"] [unique_id "aRu44owXIKmhlnkP3-d4OwAAAAE"]
[Tue Nov 18 08:08:02.925470 2025] [:error] [pid 61391:tid 61408] [client 54.93.87.136:40584] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env"] [unique_id "aRu44owXIKmhlnkP3-d4PAAAAAg"]
[Tue Nov 18 08:08:02.927639 2025] [:error] [pid 61393:tid 61468] [client 54.93.87.136:57424] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib/.env"] [unique_id "aRu44mH9XjlbVPv9gQU3yQAAAIw"]
[Tue Nov 18 08:08:02.931079 2025] [:error] [pid 61393:tid 61461] [client 54.93.87.136:40612] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib/.env.old"] [unique_id "aRu44mH9XjlbVPv9gQU3ygAAAIU"]
[Tue Nov 18 08:08:02.932843 2025] [:error] [pid 61393:tid 61462] [client 54.93.87.136:40600] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env.old"] [unique_id "aRu44mH9XjlbVPv9gQU3ywAAAIY"]
[Tue Nov 18 08:08:02.933119 2025] [:error] [pid 61392:tid 61450] [client 54.93.87.136:57390] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.save"] [unique_id "aRu44nSmvb496zZxueLuCQAAAFU"]
[Tue Nov 18 08:08:02.933372 2025] [:error] [pid 9935:tid 9954] [client 54.93.87.136:57404] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets/.env.bak"] [unique_id "aRu44gWOMXsrZFRF6sjwiQAAAZE"]
[Tue Nov 18 08:08:02.934281 2025] [:error] [pid 61391:tid 61411] [client 54.93.87.136:40658] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.old"] [unique_id "aRu44owXIKmhlnkP3-d4PQAAAAs"]
[Tue Nov 18 08:08:02.943685 2025] [:error] [pid 61482:tid 61501] [client 54.93.87.136:57336] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.old"] [unique_id "aRu44vtNHsWZClVWav5rPwAAAM4"]
[Tue Nov 18 08:08:02.944011 2025] [:error] [pid 61482:tid 61487] [client 54.93.87.136:57328] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env.bak"] [unique_id "aRu44vtNHsWZClVWav5rQAAAAMA"]
[Tue Nov 18 08:08:02.944422 2025] [:error] [pid 42804:tid 42809] [client 54.93.87.136:40652] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/includes/.env.save"] [unique_id "aRu44vpXARlE6tIuBnly3AAAAUM"]
[Tue Nov 18 08:08:02.949103 2025] [:error] [pid 61391:tid 61415] [client 54.93.87.136:40578] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env"] [unique_id "aRu44owXIKmhlnkP3-d4PgAAAA8"]
[Tue Nov 18 08:08:02.961843 2025] [:error] [pid 28635:tid 28661] [client 54.93.87.136:40660] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.bak"] [unique_id "aRu44mB61AnWhG54Xz3GzQAAAdc"]
[Tue Nov 18 08:08:06.995678 2025] [:error] [pid 42804:tid 42812] [client 54.93.87.136:40662] [client 54.93.87.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/application/.env.bak"] [unique_id "aRu45vpXARlE6tIuBnly3gAAAUY"]
[Tue Nov 18 11:11:32.227686 2025] [:error] [pid 28635:tid 28650] [client 43.130.14.245:52536] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRvj5GB61AnWhG54Xz0A1gAAAcw"]
[Tue Nov 18 12:05:04.835166 2025] [:error] [pid 44470:tid 44497] [client 103.164.211.83:65212] [client 103.164.211.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.164.211.83, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aRvwcDv-RLYfULjlgDZKLAAAAFY"]
[Tue Nov 18 13:00:23.216190 2025] [:error] [pid 44471:tid 44513] [client 182.42.111.213:46815] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRv9Z-_6m0bQO14XwtPv3wAAAQk"]
[Tue Nov 18 14:47:57.093341 2025] [:error] [pid 44624:tid 44650] [client 43.153.19.83:44954] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRwWnSllffozoBluWCUZWgAAAZc"]
[Tue Nov 18 16:26:35.125055 2025] [:error] [pid 44624:tid 44637] [client 84.247.191.22:57410] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aRwtuyllffozoBluWCVI0AAAAYo"], referer: binance.com
[Tue Nov 18 19:38:53.062738 2025] [:error] [pid 44624:tid 44637] [client 106.119.167.146:45568] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRxazSllffozoBluWCWphAAAAYo"]
[Tue Nov 18 21:37:30.437341 2025] [:error] [pid 44472:tid 44534] [client 45.134.79.103:56518] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRx2moKhGwkiLjv8BQwe3wAAAUM"]
[Tue Nov 18 21:37:31.104051 2025] [:error] [pid 44560:tid 44583] [client 45.134.79.103:51207] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRx2mwnbP7etF3q5-5vI4wAAAMw"]
[Tue Nov 18 21:37:31.738591 2025] [:error] [pid 44470:tid 44487] [client 45.134.79.103:58881] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mzv-RLYfULjlgDb_XQAAAEw"]
[Wed Nov 19 02:15:26.971979 2025] [:error] [pid 43880:tid 43892] [client 182.44.8.254:49709] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aRy3vu1q1HNbKyNr9SZ3gwAAAEc"]
[Wed Nov 19 02:47:58.108985 2025] [:error] [pid 14439:tid 14446] [client 172.93.148.166:52600] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRy_Xlat0cKFYVAxpdDvywAAAQU"]
[Wed Nov 19 02:48:00.167799 2025] [:error] [pid 43882:tid 43953] [client 172.93.148.166:54542] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aRy_YN5CQQLff3maRMIGCQAAAA0"]
[Wed Nov 19 02:48:02.172151 2025] [:error] [pid 44063:tid 44119] [client 172.93.148.166:54564] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aRy_YkVOSC7H33BBqQ0UsQAAAII"]
[Wed Nov 19 02:48:04.525888 2025] [:error] [pid 43881:tid 43923] [client 172.93.148.166:54598] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aRy_ZH_TrIND5buvEyf1aAAAAUo"]
[Wed Nov 19 02:48:06.661113 2025] [:error] [pid 43882:tid 43954] [client 172.93.148.166:54668] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aRy_Zt5CQQLff3maRMIGGQAAAA4"]
[Wed Nov 19 02:48:10.172794 2025] [:error] [pid 43880:tid 43901] [client 172.93.148.166:64039] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aRy_au1q1HNbKyNr9SaFOwAAAFA"]
[Wed Nov 19 02:48:10.807643 2025] [:error] [pid 44063:tid 44120] [client 172.93.148.166:60778] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aRy_akVOSC7H33BBqQ0U1QAAAIM"]
[Wed Nov 19 02:48:11.388606 2025] [:error] [pid 14439:tid 14447] [client 172.93.148.166:60814] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aRy_a1at0cKFYVAxpdDwAQAAAQY"]
[Wed Nov 19 02:48:11.920788 2025] [:error] [pid 43882:tid 43945] [client 172.93.148.166:60824] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aRy_a95CQQLff3maRMIGIgAAAAU"]
[Wed Nov 19 02:48:12.385768 2025] [:error] [pid 14439:tid 14463] [client 172.93.148.166:60844] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aRy_bFat0cKFYVAxpdDwBwAAARY"]
[Wed Nov 19 02:48:13.139284 2025] [:error] [pid 44063:tid 44138] [client 172.93.148.166:60846] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aRy_bUVOSC7H33BBqQ0U4wAAAJU"]
[Wed Nov 19 02:48:14.263783 2025] [:error] [pid 14439:tid 14448] [client 172.93.148.166:60860] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aRy_blat0cKFYVAxpdDwEwAAAQc"]
[Wed Nov 19 02:48:16.853678 2025] [:error] [pid 43880:tid 43898] [client 172.93.148.166:60904] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aRy_cO1q1HNbKyNr9SaFWwAAAE0"]
[Wed Nov 19 02:48:17.576582 2025] [:error] [pid 43880:tid 43896] [client 172.93.148.166:47596] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aRy_ce1q1HNbKyNr9SaFYgAAAEs"]
[Wed Nov 19 02:48:18.452417 2025] [:error] [pid 44063:tid 44127] [client 172.93.148.166:47628] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aRy_ckVOSC7H33BBqQ0VFAAAAIo"]
[Wed Nov 19 02:48:20.548048 2025] [:error] [pid 43880:tid 43897] [client 172.93.148.166:47630] [client 172.93.148.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aRy_dO1q1HNbKyNr9SaFgQAAAEw"]
[Wed Nov 19 02:48:21.981726 2025] [:error] [pid 43882:tid 43950] [client 172.93.148.190:47718] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aRy_dd5CQQLff3maRMIGRwAAAAo"]
[Wed Nov 19 02:48:25.002285 2025] [:error] [pid 3052:tid 3140] [client 172.93.148.190:47720] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aRy_eVNM6bOMTTuJnz2rfgAAAMs"]
[Wed Nov 19 02:48:25.809211 2025] [:error] [pid 43882:tid 43944] [client 172.93.148.190:47726] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aRy_ed5CQQLff3maRMIGVQAAAAQ"]
[Wed Nov 19 02:48:27.432294 2025] [:error] [pid 3052:tid 3140] [client 172.93.148.190:47732] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aRy_e1NM6bOMTTuJnz2riwAAAMs"]
[Wed Nov 19 02:48:28.641192 2025] [:error] [pid 14439:tid 14452] [client 172.93.148.190:44062] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aRy_fFat0cKFYVAxpdDwMwAAAQs"]
[Wed Nov 19 02:48:32.378667 2025] [:error] [pid 3052:tid 3129] [client 172.93.148.190:44082] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aRy_gFNM6bOMTTuJnz2rpAAAAME"]
[Wed Nov 19 02:48:33.005891 2025] [:error] [pid 43881:tid 43918] [client 172.93.148.190:44128] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aRy_gX_TrIND5buvEyf1nwAAAUU"]
[Wed Nov 19 02:48:33.584787 2025] [:error] [pid 43881:tid 43933] [client 172.93.148.190:44136] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aRy_gX_TrIND5buvEyf1oAAAAVQ"]
[Wed Nov 19 02:48:36.471040 2025] [:error] [pid 43881:tid 43916] [client 172.93.148.190:44144] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aRy_hH_TrIND5buvEyf1qwAAAUM"]
[Wed Nov 19 02:48:36.990296 2025] [:error] [pid 43880:tid 43898] [client 172.93.148.190:44182] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aRy_hO1q1HNbKyNr9SaFogAAAE0"]
[Wed Nov 19 02:48:37.515290 2025] [:error] [pid 43880:tid 43902] [client 172.93.148.190:32786] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRy_he1q1HNbKyNr9SaFpAAAAFE"]
[Wed Nov 19 02:48:40.803569 2025] [:error] [pid 43882:tid 43943] [client 172.93.148.190:32800] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aRy_iN5CQQLff3maRMIGdgAAAAM"]
[Wed Nov 19 02:48:42.082604 2025] [:error] [pid 43881:tid 43917] [client 172.93.148.190:32848] [client 172.93.148.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.93.148.190, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aRy_in_TrIND5buvEyf1xQAAAUQ"]
[Wed Nov 19 02:48:45.848742 2025] [:error] [pid 43881:tid 43925] [client 172.93.148.190:32848] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aRy_jX_TrIND5buvEyf14wAAAUw"]
[Wed Nov 19 02:48:46.832824 2025] [:error] [pid 44063:tid 44126] [client 172.93.148.190:32900] [client 172.93.148.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.93.148.190, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aRy_jkVOSC7H33BBqQ0VYQAAAIk"]
[Wed Nov 19 02:48:48.676565 2025] [:error] [pid 44063:tid 44140] [client 172.93.148.190:32900] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aRy_kEVOSC7H33BBqQ0VZQAAAJc"]
[Wed Nov 19 02:48:51.402448 2025] [:error] [pid 14439:tid 14447] [client 172.93.148.190:40586] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aRy_k1at0cKFYVAxpdDwhQAAAQY"]
[Wed Nov 19 02:48:53.987307 2025] [:error] [pid 44063:tid 44127] [client 172.93.148.190:40604] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aRy_lUVOSC7H33BBqQ0VewAAAIo"]
[Wed Nov 19 02:48:54.950090 2025] [:error] [pid 43881:tid 43914] [client 172.93.148.190:40690] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aRy_ln_TrIND5buvEyf1_AAAAUE"]
[Wed Nov 19 02:48:56.790596 2025] [:error] [pid 44063:tid 44135] [client 172.93.148.190:40714] [client 172.93.148.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.93.148.190, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aRy_mEVOSC7H33BBqQ0VhwAAAJI"]
[Wed Nov 19 02:48:57.031304 2025] [:error] [pid 44063:tid 44122] [client 172.93.148.190:40714] [client 172.93.148.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aRy_mUVOSC7H33BBqQ0ViAAAAIU"]
[Wed Nov 19 02:49:08.060973 2025] [:error] [pid 3052:tid 3136] [client 172.93.148.190:47356] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/install.php"] [unique_id "aRy_pFNM6bOMTTuJnz2tVgAAAMc"]
[Wed Nov 19 02:49:08.630609 2025] [:error] [pid 3052:tid 3144] [client 172.93.148.190:41346] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/install.php"] [unique_id "aRy_pFNM6bOMTTuJnz2tWgAAAM8"]
[Wed Nov 19 02:49:09.135494 2025] [:error] [pid 43882:tid 43940] [client 172.93.148.190:41382] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/install.php"] [unique_id "aRy_pd5CQQLff3maRMIGtQAAAAA"]
[Wed Nov 19 02:49:09.752094 2025] [:error] [pid 43880:tid 43904] [client 172.93.148.190:41398] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/install.php"] [unique_id "aRy_pe1q1HNbKyNr9SaF4QAAAFM"]
[Wed Nov 19 02:49:10.218736 2025] [:error] [pid 44063:tid 44117] [client 172.93.148.190:41412] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/install.php"] [unique_id "aRy_pkVOSC7H33BBqQ0VmgAAAIA"]
[Wed Nov 19 02:49:20.725707 2025] [:error] [pid 43882:tid 43947] [client 172.93.148.190:41462] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aRy_sN5CQQLff3maRMIG6AAAAAc"]
[Wed Nov 19 02:49:21.264722 2025] [:error] [pid 43882:tid 43951] [client 172.93.148.190:34250] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aRy_sd5CQQLff3maRMIG6wAAAAs"]
[Wed Nov 19 02:49:21.779225 2025] [:error] [pid 44063:tid 44124] [client 172.93.148.190:34258] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aRy_sUVOSC7H33BBqQ0VswAAAIc"]
[Wed Nov 19 02:49:22.896885 2025] [:error] [pid 14439:tid 14449] [client 172.93.148.190:34264] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aRy_slat0cKFYVAxpdDxUgAAAQg"]
[Wed Nov 19 02:49:23.450682 2025] [:error] [pid 43882:tid 43952] [client 172.93.148.190:34276] [client 172.93.148.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aRy_s95CQQLff3maRMIG9gAAAAw"]
[Wed Nov 19 03:54:01.660409 2025] [:error] [pid 21900:tid 21963] [client 43.164.196.57:43624] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aRzO2Vi_9MbubBVVD0IJhgAAAII"]
[Wed Nov 19 07:30:38.140699 2025] [:error] [pid 6644:tid 6649] [client 18.191.165.250:56381] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR0Bnk0i6Rf788MB6sbZjgAAAMM"]
[Wed Nov 19 07:30:38.531313 2025] [:error] [pid 6644:tid 6664] [client 18.191.165.250:56465] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR0Bnk0i6Rf788MB6sbZpwAAANI"]
[Wed Nov 19 07:30:38.935514 2025] [:error] [pid 6554:tid 6569] [client 18.191.165.250:56582] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR0Bnt8rvPWLafJFqmVW2wAAAAk"]
[Wed Nov 19 07:30:39.331395 2025] [:error] [pid 6554:tid 6565] [client 18.191.165.250:56720] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR0Bn98rvPWLafJFqmVW5AAAAAY"]
[Wed Nov 19 07:30:39.728769 2025] [:error] [pid 6555:tid 6600] [client 18.191.165.250:56797] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR0Bn0bVJm8eMsGMTCONyQAAAEk"]
[Wed Nov 19 08:56:03.047863 2025] [:error] [pid 6919:tid 6928] [client 104.234.19.84:45065] [client 104.234.19.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.19.84, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aR0Vo0YFdN1s_9xJVUnJIwAAAQY"]
[Wed Nov 19 08:56:04.061874 2025] [:error] [pid 6556:tid 6622] [client 216.24.219.17:59899] [client 216.24.219.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.17, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aR0VpJuL7hhgrmdM1muR4AAAAIQ"]
[Wed Nov 19 14:43:55.243587 2025] [:error] [pid 12672:tid 12697] [client 222.79.103.59:44959] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aR1nK_9vojl6X1cc5mXmugAAAdQ"]
[Wed Nov 19 15:12:24.023227 2025] [:error] [pid 6555:tid 6608] [client 35.88.121.27:60934] [client 35.88.121.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.88.121.27, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aR1t2EbVJm8eMsGMTCMFkwAAAFE"]
[Wed Nov 19 15:12:26.704142 2025] [:error] [pid 6555:tid 6607] [client 35.88.121.27:60934] [client 35.88.121.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aR1t2kbVJm8eMsGMTCMFngAAAFA"]
[Wed Nov 19 15:12:27.490773 2025] [:error] [pid 6644:tid 6668] [client 35.88.121.27:64184] [client 35.88.121.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aR1t200i6Rf788MB6sZvagAAANY"]
[Wed Nov 19 15:12:28.262405 2025] [:error] [pid 12672:tid 12688] [client 35.88.121.27:64377] [client 35.88.121.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aR1t3P9vojl6X1cc5mXtBwAAAcs"]
[Wed Nov 19 15:12:28.990516 2025] [:error] [pid 12672:tid 12682] [client 35.88.121.27:61176] [client 35.88.121.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aR1t3P9vojl6X1cc5mXtCQAAAcU"]
[Wed Nov 19 15:12:29.735483 2025] [:error] [pid 6555:tid 6593] [client 35.88.121.27:61621] [client 35.88.121.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aR1t3UbVJm8eMsGMTCMFogAAAEI"]
[Wed Nov 19 15:12:30.480698 2025] [:error] [pid 6919:tid 6936] [client 35.88.121.27:64730] [client 35.88.121.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aR1t3kYFdN1s_9xJVUlFmgAAAQ4"]
[Wed Nov 19 15:12:31.257907 2025] [:error] [pid 26664:tid 26681] [client 35.88.121.27:63459] [client 35.88.121.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aR1t34pWc1yoj2P7MeDRCgAAAU4"]
[Wed Nov 19 18:36:37.003946 2025] [:error] [pid 6919:tid 6942] [client 34.169.118.117:60164] [client 34.169.118.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.169.118.117, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aR2dtUYFdN1s_9xJVUlo1wAAARQ"]
[Wed Nov 19 18:36:38.921378 2025] [:error] [pid 6919:tid 6944] [client 34.169.118.117:60164] [client 34.169.118.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aR2dtkYFdN1s_9xJVUlo4wAAARY"]
[Wed Nov 19 18:36:39.531836 2025] [:error] [pid 12643:tid 12654] [client 34.169.118.117:61643] [client 34.169.118.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aR2dt8aLCNSdLHNAGt7hZgAAAYg"]
[Wed Nov 19 18:36:40.141656 2025] [:error] [pid 12672:tid 12678] [client 34.169.118.117:62001] [client 34.169.118.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aR2duP9vojl6X1cc5mUSGQAAAcE"]
[Wed Nov 19 18:36:40.752161 2025] [:error] [pid 6555:tid 6595] [client 34.169.118.117:62363] [client 34.169.118.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aR2duEbVJm8eMsGMTCMhRAAAAEQ"]
[Wed Nov 19 18:36:41.361170 2025] [:error] [pid 6644:tid 6648] [client 34.169.118.117:62703] [client 34.169.118.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aR2duU0i6Rf788MB6saniAAAAMI"]
[Wed Nov 19 18:36:41.968073 2025] [:error] [pid 12643:tid 12667] [client 34.169.118.117:63027] [client 34.169.118.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aR2ducaLCNSdLHNAGt7hZwAAAZU"]
[Wed Nov 19 20:35:57.830948 2025] [:error] [pid 12673:tid 12726] [client 104.196.176.201:58179] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rcab1F0fb062dH1xygAAAhY"]
[Wed Nov 19 21:29:19.775925 2025] [:error] [pid 26664:tid 26689] [client 43.152.72.247:40110] [client 43.152.72.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aR3GL4pWc1yoj2P7MeAMBQAAAVU"]
[Thu Nov 20 03:06:43.871129 2025] [:error] [pid 8909:tid 8942] [client 80.94.92.138:13412] [client 80.94.92.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aR4VQ2nKNOWZ-UbT97B-fAAAA8M"]
[Thu Nov 20 03:06:44.864471 2025] [:error] [pid 50223:tid 50341] [client 80.94.92.138:12184] [client 80.94.92.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aR4VRD4iSUKl66cdvvbtngAAAEY"]
[Thu Nov 20 12:10:21.420956 2025] [:error] [pid 34444:tid 34449] [client 98.81.111.26:49232] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR6UrVNEol4jlmmA_GPw0QAAAUM"]
[Thu Nov 20 12:10:21.839652 2025] [:error] [pid 55340:tid 55352] [client 98.81.111.26:52753] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR6UrfOxD-NeMydTybBJzAAAAAc"]
[Thu Nov 20 12:10:22.249008 2025] [:error] [pid 804:tid 833] [client 98.81.111.26:64893] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR6UrvaRHpUlPL9O0Lk1qgAAAYk"]
[Thu Nov 20 12:10:22.654715 2025] [:error] [pid 34444:tid 34463] [client 98.81.111.26:62970] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR6UrlNEol4jlmmA_GPw9AAAAVE"]
[Thu Nov 20 12:10:23.061573 2025] [:error] [pid 34405:tid 34414] [client 98.81.111.26:58888] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR6UrzFpvu8oRK7ATfvJUwAAAQc"]
[Thu Nov 20 12:15:51.104993 2025] [:error] [pid 34405:tid 34414] [client 98.81.111.26:52088] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR6V9zFpvu8oRK7ATfvM5gAAAQc"]
[Thu Nov 20 12:15:51.513834 2025] [:error] [pid 34405:tid 34427] [client 98.81.111.26:54797] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR6V9zFpvu8oRK7ATfvM_gAAARQ"]
[Thu Nov 20 12:15:51.923526 2025] [:error] [pid 55430:tid 55444] [client 98.81.111.26:58570] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR6V9_PZXaIMEU4pE7umGAAAAMs"]
[Thu Nov 20 12:15:52.330835 2025] [:error] [pid 55430:tid 55442] [client 98.81.111.26:61461] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR6V-PPZXaIMEU4pE7umJQAAAMk"]
[Thu Nov 20 12:15:52.738239 2025] [:error] [pid 34405:tid 34420] [client 98.81.111.26:63987] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR6V-DFpvu8oRK7ATfvNMgAAAQ0"]
[Thu Nov 20 16:17:57.983103 2025] [:error] [pid 40415:tid 40436] [client 182.44.12.37:46070] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aR7OtahjIyLSv09svwOFPwAAAdI"]
[Thu Nov 20 22:58:26.738869 2025] [:error] [pid 40415:tid 40425] [client 121.229.185.160:59112] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR8skqhjIyLSv09svwPgeQAAAcc"]
[Fri Nov 21 05:25:14.188981 2025] [:error] [pid 13327:tid 13388] [client 222.79.104.23:38061] [client 222.79.104.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aR-HOvBXf-8B6mFkLeOT9QAAAIM"]
[Fri Nov 21 06:30:36.790999 2025] [:error] [pid 17882:tid 17898] [client 43.131.32.36:58844] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR-WjIwFFssEn348h94JcgAAAU4"]
[Fri Nov 21 11:36:14.714453 2025] [:error] [pid 46237:tid 46246] [client 49.7.227.204:33920] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aR_eLio2qlis7MUDbMIo7gAAAcc"]
[Fri Nov 21 14:43:40.475259 2025] [:error] [pid 25429:tid 25451] [client 213.21.239.4:56314] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSAKHD4rZbRSr7vu-NN8iAAAABI"]
[Fri Nov 21 15:09:28.004262 2025] [:error] [pid 25521:tid 25525] [client 213.21.239.4:44352] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSAQKPhXnBMilDddn3W_AgAAAMI"]
[Fri Nov 21 15:42:37.919403 2025] [:error] [pid 25554:tid 25577] [client 213.21.239.4:52500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAX7R-NtB-9AzFZrk48bQAAARM"]
[Fri Nov 21 16:08:28.193324 2025] [:error] [pid 25430:tid 25479] [client 213.21.239.4:50994] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAd_KpnWJcWt_4foXlKtwAAAFM"]
[Fri Nov 21 16:50:01.960307 2025] [:error] [pid 25431:tid 25510] [client 45.132.227.54:60129] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSAnucklhXxmoIExII1KfQAAAJc"]
[Fri Nov 21 16:50:04.190745 2025] [:error] [pid 25430:tid 25464] [client 136.144.42.70:44377] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSAnvKpnWJcWt_4foXlWFAAAAEQ"]
[Fri Nov 21 16:50:07.758864 2025] [:error] [pid 25521:tid 25539] [client 172.98.32.76:35349] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSAnv_hXnBMilDddn3X82QAAANA"]
[Fri Nov 21 16:50:09.982527 2025] [:error] [pid 25429:tid 25446] [client 172.98.32.100:43661] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSAnwT4rZbRSr7vu-NO7RAAAAA0"]
[Fri Nov 21 16:50:13.545961 2025] [:error] [pid 25430:tid 25470] [client 45.132.227.52:63053] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSAnxapnWJcWt_4foXlWHgAAAEo"]
[Fri Nov 21 16:50:14.933613 2025] [:error] [pid 46939:tid 46943] [client 172.98.32.83:63445] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSAnxu0OmVoxD4VZ_ZmMvQAAAUE"]
[Fri Nov 21 16:50:15.809277 2025] [:error] [pid 46939:tid 46964] [client 172.98.32.77:35993] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSAnx-0OmVoxD4VZ_ZmMwAAAAVY"]
[Fri Nov 21 16:50:16.708667 2025] [:error] [pid 25429:tid 25439] [client 172.98.32.92:53261] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSAnyD4rZbRSr7vu-NO7SwAAAAY"]
[Fri Nov 21 16:50:19.760429 2025] [:error] [pid 25554:tid 25565] [client 172.98.32.91:59949] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSAnyx-NtB-9AzFZrk5pOQAAAQc"]
[Fri Nov 21 16:50:20.623888 2025] [:error] [pid 25429:tid 25446] [client 172.98.32.81:52097] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSAnzD4rZbRSr7vu-NO7TQAAAA0"]
[Fri Nov 21 16:50:21.965830 2025] [:error] [pid 25521:tid 25540] [client 136.144.42.73:31657] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSAnzfhXnBMilDddn3X88QAAANE"]
[Fri Nov 21 16:50:23.731955 2025] [:error] [pid 25431:tid 25511] [client 45.132.227.56:39041] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aSAnz8klhXxmoIExII1KkgAAAJg"]
[Fri Nov 21 16:50:26.489038 2025] [:error] [pid 25429:tid 25451] [client 45.132.227.68:52909] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSAn0j4rZbRSr7vu-NO7WQAAABI"]
[Fri Nov 21 16:50:27.786698 2025] [:error] [pid 25431:tid 25499] [client 45.132.227.54:63447] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSAn08klhXxmoIExII1KlgAAAIw"]
[Fri Nov 21 16:50:29.085205 2025] [:error] [pid 46939:tid 46964] [client 45.132.227.61:60471] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSAn1e0OmVoxD4VZ_ZmM2wAAAVY"]
[Fri Nov 21 16:50:32.630644 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.90:23513] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSAn2O0OmVoxD4VZ_ZmM6gAAAVE"]
[Fri Nov 21 16:50:33.940817 2025] [:error] [pid 46939:tid 46944] [client 172.98.32.98:55887] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSAn2e0OmVoxD4VZ_ZmM7gAAAUI"]
[Fri Nov 21 16:50:35.749141 2025] [:error] [pid 25431:tid 25504] [client 45.132.227.55:20299] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSAn28klhXxmoIExII1KowAAAJE"]
[Fri Nov 21 16:50:37.050439 2025] [:error] [pid 25430:tid 25469] [client 172.98.32.93:56063] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSAn3apnWJcWt_4foXlWMwAAAEk"]
[Fri Nov 21 16:50:39.663687 2025] [:error] [pid 46939:tid 46954] [client 172.98.32.86:58073] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSAn3-0OmVoxD4VZ_ZmM9gAAAUw"]
[Fri Nov 21 16:50:40.971587 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.87:28185] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSAn4O0OmVoxD4VZ_ZmM_wAAAUM"]
[Fri Nov 21 16:50:42.280269 2025] [:error] [pid 46939:tid 46949] [client 172.98.32.96:45485] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSAn4u0OmVoxD4VZ_ZmNBAAAAUc"]
[Fri Nov 21 16:50:43.145607 2025] [:error] [pid 25430:tid 25470] [client 45.132.227.64:56353] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSAn46pnWJcWt_4foXlWPgAAAEo"]
[Fri Nov 21 16:50:44.008568 2025] [:error] [pid 25431:tid 25497] [client 45.132.227.58:34629] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSAn5MklhXxmoIExII1KswAAAIo"]
[Fri Nov 21 16:50:46.212934 2025] [:error] [pid 25429:tid 25438] [client 172.98.32.79:24467] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSAn5j4rZbRSr7vu-NO7dAAAAAU"]
[Fri Nov 21 16:50:47.077837 2025] [:error] [pid 25554:tid 25575] [client 45.132.227.65:27833] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSAn5x-NtB-9AzFZrk5pWwAAARE"]
[Fri Nov 21 16:50:47.949405 2025] [:error] [pid 46939:tid 46958] [client 45.132.227.62:23319] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSAn5-0OmVoxD4VZ_ZmNCgAAAVA"]
[Fri Nov 21 16:50:52.439012 2025] [:error] [pid 46939:tid 46954] [client 45.132.227.64:33601] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSAn7O0OmVoxD4VZ_ZmNKgAAAUw"]
[Fri Nov 21 16:50:54.633807 2025] [:error] [pid 25429:tid 25449] [client 172.98.32.89:62719] [client 172.98.32.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.89, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSAn7j4rZbRSr7vu-NO7fgAAABA"]
[Fri Nov 21 16:50:59.957209 2025] [:error] [pid 25429:tid 25442] [client 172.98.32.89:62719] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSAn8z4rZbRSr7vu-NO7jAAAAAk"]
[Fri Nov 21 16:51:01.700041 2025] [:error] [pid 25431:tid 25496] [client 136.144.42.74:56367] [client 136.144.42.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.74, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSAn9cklhXxmoIExII1K6gAAAIk"]
[Fri Nov 21 16:51:02.582521 2025] [:error] [pid 25431:tid 25509] [client 136.144.42.74:56367] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSAn9sklhXxmoIExII1K7AAAAJY"]
[Fri Nov 21 16:51:06.954757 2025] [:error] [pid 25521:tid 25547] [client 45.132.227.65:37303] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSAn-vhXnBMilDddn3X9LAAAANg"]
[Fri Nov 21 16:51:11.380477 2025] [:error] [pid 25429:tid 25442] [client 45.132.227.68:46481] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSAn_z4rZbRSr7vu-NO7nQAAAAk"]
[Fri Nov 21 16:51:13.142409 2025] [:error] [pid 25521:tid 25545] [client 172.98.32.95:23307] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSAoAfhXnBMilDddn3X9OQAAANY"]
[Fri Nov 21 16:51:16.319479 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.69:41297] [client 136.144.42.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.69, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSAoBO0OmVoxD4VZ_ZmNSQAAAUI"]
[Fri Nov 21 16:51:16.768840 2025] [:error] [pid 46939:tid 46958] [client 136.144.42.69:41297] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSAoBO0OmVoxD4VZ_ZmNSgAAAVA"]
[Fri Nov 21 16:51:25.122014 2025] [:error] [pid 25430:tid 25464] [client 136.144.42.77:39529] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSAoDapnWJcWt_4foXlWkAAAAEQ"]
[Fri Nov 21 16:51:27.313037 2025] [:error] [pid 25431:tid 25503] [client 172.98.32.88:22337] [client 172.98.32.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.88, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSAoD8klhXxmoIExII1LSQAAAJA"]
[Fri Nov 21 16:51:29.071640 2025] [:error] [pid 25431:tid 25488] [client 172.98.32.88:22337] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSAoEcklhXxmoIExII1LbAAAAIE"]
[Fri Nov 21 16:51:30.378728 2025] [:error] [pid 25431:tid 25511] [client 172.98.32.86:43175] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSAoEsklhXxmoIExII1LcQAAAJg"]
[Fri Nov 21 16:51:32.129214 2025] [:error] [pid 46939:tid 46958] [client 45.132.227.61:36167] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSAoFO0OmVoxD4VZ_ZmNWAAAAVA"]
[Fri Nov 21 16:51:34.311449 2025] [:error] [pid 25430:tid 25473] [client 172.98.32.76:38297] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSAoFqpnWJcWt_4foXlWlgAAAE0"]
[Fri Nov 21 16:51:35.181222 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.79:37565] [client 136.144.42.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSAoF-0OmVoxD4VZ_ZmNaAAAAUI"]
[Fri Nov 21 16:51:38.239735 2025] [:error] [pid 46939:tid 46966] [client 172.98.32.78:57369] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSAoGu0OmVoxD4VZ_ZmNdwAAAVg"]
[Fri Nov 21 16:51:39.537604 2025] [:error] [pid 25429:tid 25442] [client 45.132.227.63:50147] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSAoGz4rZbRSr7vu-NO71QAAAAk"]
[Fri Nov 21 16:51:41.742042 2025] [:error] [pid 25554:tid 25571] [client 45.132.227.55:47645] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSAoHR-NtB-9AzFZrk5qBAAAAQ0"]
[Fri Nov 21 16:51:43.918171 2025] [:error] [pid 46939:tid 46957] [client 172.98.32.100:35665] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSAoH-0OmVoxD4VZ_ZmNjgAAAU8"]
[Fri Nov 21 16:51:45.654923 2025] [:error] [pid 25521:tid 25537] [client 172.98.32.96:32237] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSAoIfhXnBMilDddn3X9WQAAAM4"]
[Fri Nov 21 16:51:47.859210 2025] [:error] [pid 25521:tid 25544] [client 172.98.32.97:24687] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSAoI_hXnBMilDddn3X9YwAAANU"]
[Fri Nov 21 16:51:51.823723 2025] [:error] [pid 25431:tid 25510] [client 172.98.32.88:24563] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSAoJ8klhXxmoIExII1LjQAAAJc"]
[Fri Nov 21 16:51:52.687832 2025] [:error] [pid 46939:tid 46956] [client 172.98.32.86:59381] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSAoKO0OmVoxD4VZ_ZmNpAAAAU4"]
[Fri Nov 21 16:51:53.549183 2025] [:error] [pid 25431:tid 25511] [client 136.144.42.74:43531] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSAoKcklhXxmoIExII1LkQAAAJg"]
[Fri Nov 21 16:51:54.410061 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.82:65027] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSAoKh-NtB-9AzFZrk5qFwAAARA"]
[Fri Nov 21 16:51:55.722123 2025] [:error] [pid 25521:tid 25525] [client 45.132.227.52:36231] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSAoK_hXnBMilDddn3X9aAAAAMI"]
[Fri Nov 21 16:51:56.586635 2025] [:error] [pid 46939:tid 46963] [client 136.144.42.72:29555] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSAoLO0OmVoxD4VZ_ZmNrgAAAVU"]
[Fri Nov 21 16:51:58.353637 2025] [:error] [pid 25521:tid 25544] [client 136.144.42.78:62743] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSAoLvhXnBMilDddn3X9cQAAANU"]
[Fri Nov 21 16:51:59.214466 2025] [:error] [pid 25521:tid 25535] [client 45.132.227.54:20307] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSAoL_hXnBMilDddn3X9dAAAAMw"]
[Fri Nov 21 16:52:00.224991 2025] [:error] [pid 46939:tid 46957] [client 45.132.227.63:33551] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSAoMO0OmVoxD4VZ_ZmNtQAAAU8"]
[Fri Nov 21 16:52:01.089322 2025] [:error] [pid 25430:tid 25484] [client 172.98.32.94:61873] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSAoMapnWJcWt_4foXlWogAAAFg"]
[Fri Nov 21 16:52:03.488455 2025] [:error] [pid 46939:tid 46958] [client 45.132.227.64:45805] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSAoM-0OmVoxD4VZ_ZmNvAAAAVA"]
[Fri Nov 21 16:52:05.221391 2025] [:error] [pid 25554:tid 25563] [client 45.132.227.56:52235] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSAoNR-NtB-9AzFZrk5qJQAAAQU"]
[Fri Nov 21 16:52:07.843131 2025] [:error] [pid 25431:tid 25500] [client 45.132.227.61:43227] [client 45.132.227.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSAoN8klhXxmoIExII1LnwAAAI0"]
[Fri Nov 21 16:52:11.803891 2025] [:error] [pid 25431:tid 25507] [client 172.98.32.76:63139] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSAoO8klhXxmoIExII1LrAAAAJQ"]
[Fri Nov 21 16:52:13.975036 2025] [:error] [pid 25554:tid 25577] [client 45.132.227.53:59867] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSAoPR-NtB-9AzFZrk5qPwAAARM"]
[Fri Nov 21 16:52:14.842854 2025] [:error] [pid 25429:tid 25444] [client 45.132.227.52:53133] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSAoPj4rZbRSr7vu-NO79wAAAAs"]
[Fri Nov 21 16:52:17.456422 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.77:54085] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSAoQe0OmVoxD4VZ_ZmN0QAAAVE"]
[Fri Nov 21 16:52:19.644077 2025] [proxy_fcgi:error] [pid 25429:tid 25437] [client 172.98.32.76:56055] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:52:20.076696 2025] [proxy_fcgi:error] [pid 25429:tid 25447] [client 172.98.32.76:56055] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:52:20.512662 2025] [proxy_fcgi:error] [pid 25429:tid 25457] [client 172.98.32.76:56055] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:52:22.698855 2025] [:error] [pid 25429:tid 25448] [client 172.98.32.76:56055] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSAoRj4rZbRSr7vu-NO8FAAAAA8"]
[Fri Nov 21 16:52:23.568485 2025] [:error] [pid 25431:tid 25504] [client 172.98.32.89:45629] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSAoR8klhXxmoIExII1LywAAAJE"]
[Fri Nov 21 16:52:24.449832 2025] [:error] [pid 25521:tid 25527] [client 172.98.32.95:40321] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSAoSPhXnBMilDddn3X9kQAAAMQ"]
[Fri Nov 21 16:52:25.311271 2025] [:error] [pid 46939:tid 46964] [client 172.98.32.89:61319] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSAoSe0OmVoxD4VZ_ZmN9AAAAVY"]
[Fri Nov 21 16:52:26.187400 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.95:62295] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSAoSu0OmVoxD4VZ_ZmN9gAAAUM"]
[Fri Nov 21 16:52:27.054289 2025] [:error] [pid 25430:tid 25460] [client 172.98.32.87:59507] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSAoS6pnWJcWt_4foXlWvQAAAEA"]
[Fri Nov 21 16:52:28.458015 2025] [:error] [pid 25431:tid 25509] [client 172.98.32.100:34377] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSAoTMklhXxmoIExII1L0gAAAJY"]
[Fri Nov 21 16:52:29.329375 2025] [:error] [pid 46939:tid 46956] [client 172.98.32.94:56721] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSAoTe0OmVoxD4VZ_ZmN_gAAAU4"]
[Fri Nov 21 16:52:30.199264 2025] [:error] [pid 25554:tid 25559] [client 172.98.32.100:24597] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSAoTh-NtB-9AzFZrk5qaQAAAQE"]
[Fri Nov 21 16:52:31.059064 2025] [:error] [pid 25521:tid 25545] [client 45.132.227.57:28757] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSAoT_hXnBMilDddn3X9mgAAANY"]
[Fri Nov 21 16:52:32.798039 2025] [:error] [pid 25430:tid 25474] [client 172.98.32.93:44057] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSAoUKpnWJcWt_4foXlWyAAAAE4"]
[Fri Nov 21 16:52:34.146446 2025] [:error] [pid 46939:tid 46965] [client 45.132.227.64:40017] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSAoUu0OmVoxD4VZ_ZmOBAAAAVc"]
[Fri Nov 21 16:52:35.931795 2025] [:error] [pid 25430:tid 25460] [client 172.98.32.85:48119] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSAoU6pnWJcWt_4foXlWzQAAAEA"]
[Fri Nov 21 16:52:37.688794 2025] [:error] [pid 25430:tid 25476] [client 136.144.42.80:49833] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSAoVapnWJcWt_4foXlW1AAAAFA"]
[Fri Nov 21 16:52:39.892679 2025] [:error] [pid 25429:tid 25451] [client 172.98.32.81:57835] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSAoVz4rZbRSr7vu-NO8LQAAABI"]
[Fri Nov 21 16:52:42.516349 2025] [:error] [pid 46939:tid 46947] [client 45.132.227.67:51513] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSAoWu0OmVoxD4VZ_ZmOPAAAAUU"]
[Fri Nov 21 16:52:43.815952 2025] [:error] [pid 25429:tid 25454] [client 45.132.227.62:34173] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSAoWz4rZbRSr7vu-NO8NgAAABU"]
[Fri Nov 21 16:52:51.728838 2025] [:error] [pid 25554:tid 25567] [client 172.98.32.86:25605] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSAoYx-NtB-9AzFZrk5qiAAAAQk"]
[Fri Nov 21 16:52:52.596080 2025] [:error] [pid 25430:tid 25482] [client 136.144.42.72:62683] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSAoZKpnWJcWt_4foXlW6wAAAFY"]
[Fri Nov 21 16:52:53.458981 2025] [:error] [pid 25430:tid 25475] [client 172.98.32.93:20925] [client 172.98.32.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.93, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSAoZapnWJcWt_4foXlW7gAAAE8"]
[Fri Nov 21 16:52:54.335938 2025] [:error] [pid 25430:tid 25479] [client 172.98.32.93:20925] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSAoZqpnWJcWt_4foXlW9QAAAFM"]
[Fri Nov 21 16:52:56.110314 2025] [:error] [pid 46939:tid 46960] [client 45.132.227.63:52949] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSAoaO0OmVoxD4VZ_ZmOZgAAAVI"]
[Fri Nov 21 16:52:56.983754 2025] [:error] [pid 25429:tid 25435] [client 172.98.32.82:52723] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSAoaD4rZbRSr7vu-NO8SgAAAAI"]
[Fri Nov 21 16:52:59.637896 2025] [:error] [pid 25554:tid 25573] [client 172.98.32.95:54301] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSAoax-NtB-9AzFZrk5qlAAAAQ8"]
[Fri Nov 21 16:53:00.498743 2025] [:error] [pid 46939:tid 46944] [client 172.98.32.97:39751] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aSAobO0OmVoxD4VZ_ZmOdQAAAUI"]
[Fri Nov 21 16:53:03.552575 2025] [:error] [pid 46939:tid 46954] [client 172.98.32.78:26279] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSAob-0OmVoxD4VZ_ZmOmQAAAUw"]
[Fri Nov 21 16:53:07.825179 2025] [proxy_fcgi:error] [pid 25431:tid 25501] [client 172.98.32.79:44165] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:53:08.693845 2025] [:error] [pid 25431:tid 25496] [client 172.98.32.79:44165] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSAodMklhXxmoIExII1MOwAAAIk"]
[Fri Nov 21 16:53:11.001011 2025] [:error] [pid 25554:tid 25565] [client 45.132.227.58:61003] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSAodx-NtB-9AzFZrk5qrQAAAQc"]
[Fri Nov 21 16:53:12.739977 2025] [:error] [pid 46939:tid 46960] [client 136.144.42.69:21263] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSAoeO0OmVoxD4VZ_ZmOygAAAVI"]
[Fri Nov 21 16:53:13.607343 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.84:60121] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSAoee0OmVoxD4VZ_ZmOzgAAAUM"]
[Fri Nov 21 16:53:17.538415 2025] [:error] [pid 25429:tid 25445] [client 172.98.32.76:62037] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSAofT4rZbRSr7vu-NO8cAAAAAw"]
[Fri Nov 21 16:53:18.413362 2025] [:error] [pid 46939:tid 46961] [client 45.132.227.66:57403] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSAofu0OmVoxD4VZ_ZmO3QAAAVM"]
[Fri Nov 21 16:53:21.039579 2025] [:error] [pid 46939:tid 46959] [client 45.132.227.54:25673] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSAoge0OmVoxD4VZ_ZmO8QAAAVE"]
[Fri Nov 21 16:53:21.903009 2025] [:error] [pid 25429:tid 25451] [client 172.98.32.81:52387] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSAogT4rZbRSr7vu-NO8eQAAABI"]
[Fri Nov 21 16:53:24.136984 2025] [:error] [pid 25430:tid 25462] [client 45.132.227.62:43459] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSAohKpnWJcWt_4foXlXSwAAAEI"]
[Fri Nov 21 16:53:27.178970 2025] [:error] [pid 25521:tid 25538] [client 172.98.32.89:65125] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSAoh_hXnBMilDddn3X96wAAAM8"]
[Fri Nov 21 16:53:28.494853 2025] [:error] [pid 46939:tid 46944] [client 45.132.227.64:65241] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSAoiO0OmVoxD4VZ_ZmPPAAAAUI"]
[Fri Nov 21 16:53:32.427829 2025] [:error] [pid 46939:tid 46954] [client 45.132.227.67:25881] [client 45.132.227.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.67, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aSAojO0OmVoxD4VZ_ZmPVQAAAUw"]
[Fri Nov 21 16:53:35.084900 2025] [:error] [pid 46939:tid 46950] [client 45.132.227.67:25881] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSAoj-0OmVoxD4VZ_ZmPYAAAAUg"]
[Fri Nov 21 16:53:35.961114 2025] [:error] [pid 25554:tid 25570] [client 45.132.227.66:20321] [client 45.132.227.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.66, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSAojx-NtB-9AzFZrk5qwQAAAQw"]
[Fri Nov 21 16:53:40.773350 2025] [proxy_fcgi:error] [pid 25554:tid 25562] [client 45.132.227.66:20321] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:53:47.335893 2025] [:error] [pid 25554:tid 25572] [client 45.132.227.66:20321] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSAomx-NtB-9AzFZrk5q4QAAAQ4"]
[Fri Nov 21 16:53:49.506746 2025] [:error] [pid 25521:tid 25545] [client 45.132.227.52:47801] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSAonfhXnBMilDddn3X-NQAAANY"]
[Fri Nov 21 16:53:51.250935 2025] [:error] [pid 46939:tid 46949] [client 172.98.32.98:60971] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSAon-0OmVoxD4VZ_ZmPogAAAUc"]
[Fri Nov 21 16:53:57.031906 2025] [:error] [pid 46939:tid 46950] [client 172.98.32.84:61609] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSAope0OmVoxD4VZ_ZmPuQAAAUg"]
[Fri Nov 21 16:53:58.806116 2025] [:error] [pid 25431:tid 25498] [client 136.144.42.73:48389] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSAopsklhXxmoIExII1MrgAAAIs"]
[Fri Nov 21 16:54:00.100609 2025] [:error] [pid 25521:tid 25530] [client 172.98.32.86:52085] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSAoqPhXnBMilDddn3X-WAAAAMc"]
[Fri Nov 21 16:54:02.744209 2025] [proxy_fcgi:error] [pid 25554:tid 25580] [client 172.98.32.79:31553] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:03.179050 2025] [proxy_fcgi:error] [pid 25554:tid 25563] [client 172.98.32.79:31553] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:03.611261 2025] [:error] [pid 25554:tid 25575] [client 172.98.32.79:31553] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSAoqx-NtB-9AzFZrk5rGwAAARE"]
[Fri Nov 21 16:54:04.474170 2025] [:error] [pid 25431:tid 25490] [client 172.98.32.86:64749] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSAorMklhXxmoIExII1M2AAAAIM"]
[Fri Nov 21 16:54:08.387739 2025] [:error] [pid 25429:tid 25438] [client 45.132.227.62:38311] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSAosD4rZbRSr7vu-NO88AAAAAU"]
[Fri Nov 21 16:54:09.717589 2025] [:error] [pid 46939:tid 46950] [client 45.132.227.65:34745] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aSAose0OmVoxD4VZ_ZmP3AAAAUg"]
[Fri Nov 21 16:54:11.893181 2025] [:error] [pid 46939:tid 46962] [client 172.98.32.84:56703] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSAos-0OmVoxD4VZ_ZmP6AAAAVQ"]
[Fri Nov 21 16:54:15.918291 2025] [:error] [pid 46939:tid 46965] [client 136.144.42.75:41277] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSAot-0OmVoxD4VZ_ZmQBQAAAVc"]
[Fri Nov 21 16:54:16.792691 2025] [proxy_fcgi:error] [pid 46939:tid 46947] [client 45.132.227.62:54733] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:18.109119 2025] [:error] [pid 46939:tid 46953] [client 45.132.227.62:54733] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSAouu0OmVoxD4VZ_ZmQFAAAAUs"]
[Fri Nov 21 16:54:21.154558 2025] [proxy_fcgi:error] [pid 25429:tid 25447] [client 45.132.227.67:20035] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:22.019714 2025] [:error] [pid 25429:tid 25443] [client 45.132.227.67:20035] [client 45.132.227.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.67, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSAovj4rZbRSr7vu-NO9HwAAAAo"]
[Fri Nov 21 16:54:24.235606 2025] [:error] [pid 25429:tid 25454] [client 45.132.227.67:20035] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSAowD4rZbRSr7vu-NO9KQAAABU"]
[Fri Nov 21 16:54:25.543444 2025] [:error] [pid 25521:tid 25542] [client 172.98.32.95:59119] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSAowfhXnBMilDddn3X-kgAAANM"]
[Fri Nov 21 16:54:28.167424 2025] [:error] [pid 25429:tid 25455] [client 172.98.32.98:23175] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSAoxD4rZbRSr7vu-NO9NgAAABY"]
[Fri Nov 21 16:54:30.791923 2025] [:error] [pid 25429:tid 25436] [client 136.144.42.74:23917] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSAoxj4rZbRSr7vu-NO9PAAAAAM"]
[Fri Nov 21 16:54:32.097974 2025] [:error] [pid 25521:tid 25523] [client 172.98.32.94:22789] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSAoyPhXnBMilDddn3X-mgAAAMA"]
[Fri Nov 21 16:54:34.275128 2025] [:error] [pid 25430:tid 25469] [client 172.98.32.93:36525] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSAoyqpnWJcWt_4foXlX-QAAAEk"]
[Fri Nov 21 16:54:36.013098 2025] [proxy_fcgi:error] [pid 25431:tid 25507] [client 172.98.32.93:47719] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:36.442890 2025] [:error] [pid 25431:tid 25502] [client 172.98.32.93:47719] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSAozMklhXxmoIExII1NNwAAAI8"]
[Fri Nov 21 16:54:37.809440 2025] [:error] [pid 25521:tid 25542] [client 136.144.42.74:49415] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSAozfhXnBMilDddn3X-sAAAANM"]
[Fri Nov 21 16:54:38.669478 2025] [:error] [pid 25554:tid 25575] [client 45.132.227.62:29947] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSAozh-NtB-9AzFZrk5rbAAAARE"]
[Fri Nov 21 16:54:39.527767 2025] [:error] [pid 25429:tid 25434] [client 45.132.227.60:44435] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSAozz4rZbRSr7vu-NO9QwAAAAE"]
[Fri Nov 21 16:54:41.448408 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.90:63305] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSAo0R-NtB-9AzFZrk5rdwAAAQ0"]
[Fri Nov 21 16:54:42.316915 2025] [:error] [pid 25431:tid 25506] [client 172.98.32.82:24875] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSAo0sklhXxmoIExII1NOwAAAJM"]
[Fri Nov 21 16:54:43.190201 2025] [:error] [pid 46939:tid 46964] [client 45.132.227.58:40365] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSAo0-0OmVoxD4VZ_ZmQMwAAAVY"]
[Fri Nov 21 16:54:44.937901 2025] [:error] [pid 25429:tid 25441] [client 45.132.227.59:56833] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSAo1D4rZbRSr7vu-NO9SgAAAAg"]
[Fri Nov 21 16:54:45.804023 2025] [:error] [pid 25521:tid 25526] [client 172.98.32.93:38125] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSAo1fhXnBMilDddn3X-ugAAAMM"]
[Fri Nov 21 16:54:46.669018 2025] [:error] [pid 25429:tid 25443] [client 172.98.32.98:55425] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSAo1j4rZbRSr7vu-NO9TwAAAAo"]
[Fri Nov 21 16:54:47.982765 2025] [:error] [pid 46939:tid 46951] [client 172.98.32.96:42959] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSAo1-0OmVoxD4VZ_ZmQQAAAAUk"]
[Fri Nov 21 16:54:49.723227 2025] [:error] [pid 25429:tid 25455] [client 45.132.227.62:38377] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSAo2T4rZbRSr7vu-NO9VAAAABY"]
[Fri Nov 21 16:54:50.594092 2025] [proxy_fcgi:error] [pid 25430:tid 25469] [client 45.132.227.65:61945] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:52.325085 2025] [:error] [pid 25430:tid 25476] [client 45.132.227.65:61945] [client 45.132.227.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.65, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSAo3KpnWJcWt_4foXlYDQAAAFA"]
[Fri Nov 21 16:54:54.930323 2025] [:error] [pid 25430:tid 25482] [client 45.132.227.65:61945] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSAo3qpnWJcWt_4foXlYFQAAAFY"]
[Fri Nov 21 16:54:55.806158 2025] [:error] [pid 46939:tid 46964] [client 172.98.32.98:34869] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSAo3-0OmVoxD4VZ_ZmQUwAAAVY"]
[Fri Nov 21 16:55:05.149727 2025] [:error] [pid 25554:tid 25560] [client 45.132.227.68:49943] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSAo6R-NtB-9AzFZrk5rwAAAAQI"]
[Fri Nov 21 16:55:06.028002 2025] [:error] [pid 25554:tid 25568] [client 45.132.227.53:25797] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSAo6h-NtB-9AzFZrk5rxAAAAQo"]
[Fri Nov 21 16:55:06.893378 2025] [:error] [pid 25521:tid 25532] [client 45.132.227.60:26369] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSAo6vhXnBMilDddn3X-yQAAAMk"]
[Fri Nov 21 16:55:11.357373 2025] [:error] [pid 25430:tid 25460] [client 172.98.32.84:25217] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSAo76pnWJcWt_4foXlYIQAAAEA"]
[Fri Nov 21 16:55:12.229529 2025] [:error] [pid 46939:tid 46949] [client 172.98.32.77:44365] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSAo8O0OmVoxD4VZ_ZmQfwAAAUc"]
[Fri Nov 21 16:55:13.109716 2025] [:error] [pid 25431:tid 25502] [client 45.132.227.65:21255] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSAo8cklhXxmoIExII1NbAAAAI8"]
[Fri Nov 21 16:55:15.746137 2025] [:error] [pid 25554:tid 25568] [client 172.98.32.78:30619] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSAo8x-NtB-9AzFZrk5r3wAAAQo"]
[Fri Nov 21 16:55:17.087479 2025] [:error] [pid 25554:tid 25576] [client 172.98.32.89:41971] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSAo9R-NtB-9AzFZrk5r5QAAARI"]
[Fri Nov 21 16:55:18.835405 2025] [:error] [pid 25521:tid 25525] [client 45.132.227.62:24033] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSAo9vhXnBMilDddn3X-1QAAAMI"]
[Fri Nov 21 16:55:24.478013 2025] [:error] [pid 46939:tid 46966] [client 45.132.227.64:53537] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSAo_O0OmVoxD4VZ_ZmQsQAAAVg"]
[Fri Nov 21 16:55:26.223025 2025] [:error] [pid 25429:tid 25434] [client 45.132.227.54:46055] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSAo_j4rZbRSr7vu-NO9pwAAAAE"]
[Fri Nov 21 16:55:29.697416 2025] [:error] [pid 25521:tid 25546] [client 172.98.32.84:37199] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSApAfhXnBMilDddn3X-8AAAANc"]
[Fri Nov 21 16:55:31.436210 2025] [:error] [pid 46939:tid 46963] [client 45.132.227.60:45145] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSApA-0OmVoxD4VZ_ZmQvAAAAVU"]
[Fri Nov 21 16:55:34.079412 2025] [:error] [pid 46939:tid 46945] [client 45.132.227.59:46289] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSApBu0OmVoxD4VZ_ZmQxgAAAUM"]
[Fri Nov 21 16:55:37.124287 2025] [:error] [pid 46939:tid 46951] [client 136.144.42.73:54605] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSApCe0OmVoxD4VZ_ZmQzwAAAUk"]
[Fri Nov 21 16:55:38.858598 2025] [:error] [pid 25554:tid 25570] [client 172.98.32.97:48465] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSApCh-NtB-9AzFZrk5sBwAAAQw"]
[Fri Nov 21 16:55:39.718600 2025] [:error] [pid 46939:tid 46964] [client 172.98.32.96:47399] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSApC-0OmVoxD4VZ_ZmQ3QAAAVY"]
[Fri Nov 21 16:55:42.768947 2025] [:error] [pid 25554:tid 25558] [client 45.132.227.66:52209] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSApDh-NtB-9AzFZrk5sEQAAAQA"]
[Fri Nov 21 16:55:45.835503 2025] [:error] [pid 25430:tid 25461] [client 172.98.32.90:61241] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSApEapnWJcWt_4foXlYSgAAAEE"]
[Fri Nov 21 16:55:48.441875 2025] [:error] [pid 25429:tid 25451] [client 136.144.42.80:33299] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSApFD4rZbRSr7vu-NO92AAAABI"]
[Fri Nov 21 16:55:49.318508 2025] [:error] [pid 25429:tid 25454] [client 136.144.42.72:55675] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSApFT4rZbRSr7vu-NO92QAAABU"]
[Fri Nov 21 16:55:51.052678 2025] [:error] [pid 46939:tid 46964] [client 172.98.32.78:37627] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSApF-0OmVoxD4VZ_ZmQ8wAAAVY"]
[Fri Nov 21 16:55:53.226457 2025] [:error] [pid 25429:tid 25443] [client 172.98.32.96:38607] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSApGT4rZbRSr7vu-NO94AAAAAo"]
[Fri Nov 21 16:55:54.086117 2025] [:error] [pid 46939:tid 46959] [client 172.98.32.76:53917] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSApGu0OmVoxD4VZ_ZmQ-wAAAVE"]
[Fri Nov 21 16:55:57.590942 2025] [:error] [pid 25521:tid 25544] [client 136.144.42.69:44629] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSApHfhXnBMilDddn3X_FwAAANU"]
[Fri Nov 21 16:55:59.336280 2025] [:error] [pid 25429:tid 25450] [client 172.98.32.77:56645] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSApHz4rZbRSr7vu-NO95QAAABE"]
[Fri Nov 21 16:56:00.199225 2025] [:error] [pid 46939:tid 46957] [client 45.132.227.67:27869] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSApIO0OmVoxD4VZ_ZmRBAAAAU8"]
[Fri Nov 21 16:56:01.946706 2025] [:error] [pid 25431:tid 25489] [client 136.144.42.80:28755] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSApIcklhXxmoIExII1NwwAAAII"]
[Fri Nov 21 16:56:03.270470 2025] [:error] [pid 25521:tid 25535] [client 172.98.32.79:37739] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSApI_hXnBMilDddn3X_IgAAAMw"]
[Fri Nov 21 16:56:06.314778 2025] [:error] [pid 25431:tid 25492] [client 136.144.42.73:40343] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSApJsklhXxmoIExII1NywAAAIU"]
[Fri Nov 21 16:56:08.053253 2025] [:error] [pid 46939:tid 46959] [client 136.144.42.69:40831] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSApKO0OmVoxD4VZ_ZmRDwAAAVE"]
[Fri Nov 21 16:56:09.786743 2025] [:error] [pid 25429:tid 25447] [client 172.98.32.86:33951] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSApKT4rZbRSr7vu-NO99wAAAA4"]
[Fri Nov 21 16:56:11.078988 2025] [:error] [pid 25431:tid 25503] [client 172.98.32.88:41843] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSApK8klhXxmoIExII1N0wAAAJA"]
[Fri Nov 21 16:56:12.395711 2025] [:error] [pid 25521:tid 25542] [client 172.98.32.82:43469] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSApLPhXnBMilDddn3X_MAAAANM"]
[Fri Nov 21 16:56:13.264299 2025] [:error] [pid 46939:tid 46942] [client 172.98.32.76:24569] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSApLe0OmVoxD4VZ_ZmRGAAAAUA"]
[Fri Nov 21 16:56:14.141021 2025] [:error] [pid 46939:tid 46957] [client 172.98.32.90:39719] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSApLu0OmVoxD4VZ_ZmRGgAAAU8"]
[Fri Nov 21 16:56:17.642305 2025] [:error] [pid 46939:tid 46957] [client 45.132.227.52:61225] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSApMe0OmVoxD4VZ_ZmRKAAAAU8"]
[Fri Nov 21 16:56:19.820686 2025] [:error] [pid 46939:tid 46950] [client 172.98.32.88:46405] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSApM-0OmVoxD4VZ_ZmRMQAAAUg"]
[Fri Nov 21 16:56:23.493155 2025] [:error] [pid 46939:tid 46959] [client 136.144.42.74:58027] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSApN-0OmVoxD4VZ_ZmRPgAAAVE"]
[Fri Nov 21 16:56:25.680478 2025] [:error] [pid 25554:tid 25564] [client 172.98.32.85:28277] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSApOR-NtB-9AzFZrk5sTgAAAQY"]
[Fri Nov 21 16:56:29.195789 2025] [:error] [pid 25554:tid 25579] [client 172.98.32.87:46097] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSApPR-NtB-9AzFZrk5sWgAAARU"]
[Fri Nov 21 18:05:39.066686 2025] [:error] [pid 25521:tid 25527] [client 106.119.167.146:42904] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSA5c_hXnBMilDddn3UUygAAAMQ"]
[Fri Nov 21 18:45:34.083561 2025] [:error] [pid 25429:tid 25436] [client 104.28.240.82:15061] [client 104.28.240.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.82, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSBCzj4rZbRSr7vu-NPbegAAAAM"]
[Fri Nov 21 20:42:41.219798 2025] [:error] [pid 25521:tid 25546] [client 43.159.149.216:40992] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSBeQfhXnBMilDddn3VN5AAAANc"]
[Fri Nov 21 21:19:15.638240 2025] [:error] [pid 25554:tid 25566] [client 193.37.33.249:36685] [client 193.37.33.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.249, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSBm0x-NtB-9AzFZrk6yOgAAAQg"]
[Sat Nov 22 03:53:06.272692 2025] [:error] [pid 53478:tid 53529] [client 103.167.150.158:58339] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDIghUYdXBbQswAdTVAAAAAFQ"]
[Sat Nov 22 04:12:48.997053 2025] [:error] [pid 53478:tid 53517] [client 103.59.160.179:49941] [client 103.59.160.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.59.160.179, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDHwAhUYdXBbQswAdTbEwAAAEg"]
[Sat Nov 22 04:12:49.316798 2025] [:error] [pid 53478:tid 53511] [client 103.59.160.179:49941] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwQhUYdXBbQswAdTbGAAAAEI"]
[Sat Nov 22 04:12:49.328234 2025] [:error] [pid 53477:tid 53498] [client 103.59.160.179:50034] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDHwX7Lu30Ku9O40aKo_gAAABE"]
[Sat Nov 22 04:12:49.752151 2025] [:error] [pid 53478:tid 53525] [client 103.59.160.179:50277] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwQhUYdXBbQswAdTbHAAAAFA"]
[Sat Nov 22 04:12:49.780283 2025] [:error] [pid 53478:tid 53521] [client 103.59.160.179:50282] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwQhUYdXBbQswAdTbHgAAAEw"]
[Sat Nov 22 04:12:50.206727 2025] [:error] [pid 53479:tid 53550] [client 103.59.160.179:50438] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwm6cicFF3Aas-oRDYAAAAI4"]
[Sat Nov 22 04:12:50.217708 2025] [:error] [pid 53479:tid 53544] [client 103.59.160.179:50445] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwm6cicFF3Aas-oRDYQAAAIg"]
[Sat Nov 22 04:12:50.671674 2025] [:error] [pid 53478:tid 53529] [client 103.59.160.179:50610] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwghUYdXBbQswAdTbIgAAAFQ"]
[Sat Nov 22 04:12:50.678616 2025] [:error] [pid 53479:tid 53538] [client 103.59.160.179:50612] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aSDHwm6cicFF3Aas-oRDYwAAAII"]
[Sat Nov 22 04:12:51.109799 2025] [:error] [pid 53479:tid 53558] [client 103.59.160.179:50767] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aSDHw26cicFF3Aas-oRDZgAAAJY"]
[Sat Nov 22 04:12:51.117977 2025] [:error] [pid 53479:tid 53556] [client 103.59.160.179:50773] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aSDHw26cicFF3Aas-oRDZwAAAJQ"]
[Sat Nov 22 04:12:51.581732 2025] [:error] [pid 53566:tid 53590] [client 103.59.160.179:50948] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aSDHw8bSHDBkRbwMbd76xgAAANY"]
[Sat Nov 22 04:12:51.591453 2025] [:error] [pid 53479:tid 53547] [client 103.59.160.179:50956] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "aSDHw26cicFF3Aas-oRDaQAAAIs"]
[Sat Nov 22 04:12:52.016405 2025] [:error] [pid 53566:tid 53577] [client 103.59.160.179:51099] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxMbSHDBkRbwMbd76yQAAAMk"]
[Sat Nov 22 04:12:52.029768 2025] [:error] [pid 53566:tid 53568] [client 103.59.160.179:51102] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxMbSHDBkRbwMbd76ygAAAMA"]
[Sat Nov 22 04:12:52.495961 2025] [:error] [pid 53566:tid 53580] [client 103.59.160.179:51285] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxMbSHDBkRbwMbd76zgAAAMw"]
[Sat Nov 22 04:12:52.500455 2025] [:error] [pid 53478:tid 53523] [client 103.59.160.179:51294] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxAhUYdXBbQswAdTbKAAAAE4"]
[Sat Nov 22 04:12:52.975242 2025] [:error] [pid 53477:tid 53481] [client 103.59.160.179:51465] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxH7Lu30Ku9O40aKpBwAAAAA"]
[Sat Nov 22 04:12:52.980603 2025] [:error] [pid 53477:tid 53496] [client 103.59.160.179:51466] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxH7Lu30Ku9O40aKpCAAAAA8"]
[Sat Nov 22 04:12:53.415927 2025] [:error] [pid 53479:tid 53551] [client 103.59.160.179:51615] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxW6cicFF3Aas-oRDbgAAAI8"]
[Sat Nov 22 04:12:53.417103 2025] [:error] [pid 53478:tid 53522] [client 103.59.160.179:51617] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxQhUYdXBbQswAdTbKwAAAE0"]
[Sat Nov 22 04:12:53.921033 2025] [:error] [pid 53479:tid 53550] [client 103.59.160.179:51782] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxW6cicFF3Aas-oRDcAAAAI4"]
[Sat Nov 22 04:12:53.922241 2025] [:error] [pid 53478:tid 53519] [client 103.59.160.179:51776] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxQhUYdXBbQswAdTbLAAAAEo"]
[Sat Nov 22 04:12:54.372063 2025] [:error] [pid 53479:tid 53552] [client 103.59.160.179:51930] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxm6cicFF3Aas-oRDcwAAAJA"]
[Sat Nov 22 04:12:54.809283 2025] [:error] [pid 53566:tid 53577] [client 103.59.160.179:52110] [client 103.59.160.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSDHxsbSHDBkRbwMbd762gAAAMk"]
[Sat Nov 22 06:00:12.481566 2025] [:error] [pid 25856:tid 25858] [client 31.171.130.86:28225] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSDg7BsTP0wy94zKUvG4wwAAAQA"]
[Sat Nov 22 06:00:15.120481 2025] [:error] [pid 53477:tid 53501] [client 31.171.130.74:58917] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSDg737Lu30Ku9O40aLkOgAAABQ"]
[Sat Nov 22 06:00:19.077637 2025] [:error] [pid 53479:tid 53558] [client 31.171.130.102:38669] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSDg826cicFF3Aas-oR-kAAAAJY"]
[Sat Nov 22 06:00:20.986101 2025] [:error] [pid 53566:tid 53586] [client 31.171.130.67:63447] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSDg9MbSHDBkRbwMbd5CPQAAANI"]
[Sat Nov 22 06:00:21.943201 2025] [:error] [pid 53566:tid 53587] [client 31.171.130.102:35885] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSDg9cbSHDBkRbwMbd5CSQAAANM"]
[Sat Nov 22 06:00:22.925843 2025] [:error] [pid 53479:tid 53557] [client 31.171.130.97:29025] [client 31.171.130.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSDg9m6cicFF3Aas-oR-mQAAAJU"]
[Sat Nov 22 06:00:24.395212 2025] [:error] [pid 53478:tid 53514] [client 31.171.130.91:57005] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSDg-AhUYdXBbQswAdQZhAAAAEU"]
[Sat Nov 22 06:00:26.570786 2025] [:error] [pid 53477:tid 53503] [client 31.171.130.61:63167] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSDg-n7Lu30Ku9O40aLkVQAAABY"]
[Sat Nov 22 06:00:33.829539 2025] [:error] [pid 53479:tid 53549] [client 31.171.130.68:54327] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSDhAW6cicFF3Aas-oR-tAAAAI0"]
[Sat Nov 22 06:00:34.759960 2025] [:error] [pid 53566:tid 53591] [client 31.171.130.71:33595] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSDhAsbSHDBkRbwMbd5CfQAAANc"]
[Sat Nov 22 06:00:53.896197 2025] [:error] [pid 53566:tid 53575] [client 31.171.130.102:28447] [client 31.171.130.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.102, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSDhFcbSHDBkRbwMbd5C7AAAAMc"]
[Sat Nov 22 06:00:56.316680 2025] [:error] [pid 53566:tid 53571] [client 31.171.130.102:28447] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSDhGMbSHDBkRbwMbd5DBQAAAMM"]
[Sat Nov 22 06:01:03.393801 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.99:23435] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSDhHxsTP0wy94zKUvG5ogAAAQ0"]
[Sat Nov 22 06:01:20.881048 2025] [:error] [pid 53566:tid 53570] [client 31.171.130.75:46603] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSDhMMbSHDBkRbwMbd5DdgAAAMI"]
[Sat Nov 22 06:01:48.471651 2025] [:error] [pid 25856:tid 25864] [client 31.171.130.58:22577] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSDhTBsTP0wy94zKUvG6VwAAAQY"]
[Sat Nov 22 06:02:06.179585 2025] [:error] [pid 53566:tid 53585] [client 31.171.130.71:35833] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSDhXsbSHDBkRbwMbd5EHQAAANE"]
[Sat Nov 22 06:02:07.135119 2025] [:error] [pid 25856:tid 25871] [client 31.171.130.59:55073] [client 31.171.130.59] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.171.130.59, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDhXxsTP0wy94zKUvG6fwAAAQ0"]
[Sat Nov 22 06:02:08.722626 2025] [:error] [pid 25856:tid 25866] [client 31.171.130.59:55073] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDhYBsTP0wy94zKUvG6hQAAAQg"]
[Sat Nov 22 06:02:14.110355 2025] [:error] [pid 25856:tid 25869] [client 31.171.130.55:64223] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSDhZhsTP0wy94zKUvG6nAAAAQs"]
[Sat Nov 22 06:02:24.378206 2025] [:error] [pid 25856:tid 25865] [client 31.171.130.80:57159] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSDhcBsTP0wy94zKUvG6xAAAAQc"]
[Sat Nov 22 06:02:25.410622 2025] [:error] [pid 53479:tid 53553] [client 31.171.130.102:51861] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSDhcW6cicFF3Aas-oR_jQAAAJE"]
[Sat Nov 22 06:02:26.362052 2025] [:error] [pid 53566:tid 53571] [client 31.171.130.74:23063] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSDhcsbSHDBkRbwMbd5ENAAAAMM"]
[Sat Nov 22 06:02:28.316595 2025] [:error] [pid 53479:tid 53547] [client 31.171.130.55:31403] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSDhdG6cicFF3Aas-oR_jwAAAIs"]
[Sat Nov 22 06:02:31.886288 2025] [:error] [pid 53478:tid 53516] [client 31.171.130.79:60487] [client 31.171.130.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.79, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSDhdwhUYdXBbQswAdQafAAAAEc"]
[Sat Nov 22 06:02:41.383868 2025] [:error] [pid 53478:tid 53525] [client 31.171.130.79:60487] [client 31.171.130.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSDhgQhUYdXBbQswAdQamAAAAFA"]
[Sat Nov 22 06:02:43.899057 2025] [:error] [pid 53566:tid 53570] [client 31.171.130.84:56523] [client 31.171.130.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.84, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSDhg8bSHDBkRbwMbd5EWwAAAMI"]
[Sat Nov 22 06:02:47.690421 2025] [:error] [pid 53566:tid 53592] [client 31.171.130.84:56523] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSDhh8bSHDBkRbwMbd5EdAAAANg"]
[Sat Nov 22 06:02:48.658859 2025] [:error] [pid 53479:tid 53538] [client 31.171.130.84:39575] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSDhiG6cicFF3Aas-oR_7gAAAII"]
[Sat Nov 22 06:02:50.509797 2025] [proxy_fcgi:error] [pid 53566:tid 53585] [client 31.171.130.72:34711] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:02:54.394990 2025] [proxy_fcgi:error] [pid 53566:tid 53585] [client 31.171.130.72:34711] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:03:01.842456 2025] [:error] [pid 53566:tid 53590] [client 31.171.130.72:34711] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSDhlcbSHDBkRbwMbd5EvwAAANY"]
[Sat Nov 22 06:03:05.736073 2025] [:error] [pid 53566:tid 53588] [client 31.171.130.82:40579] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSDhmcbSHDBkRbwMbd5E2gAAANQ"]
[Sat Nov 22 06:03:07.778430 2025] [:error] [pid 53566:tid 53576] [client 31.171.130.58:45633] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSDhm8bSHDBkRbwMbd5E4wAAAMg"]
[Sat Nov 22 06:03:11.199582 2025] [:error] [pid 53477:tid 53497] [client 31.171.130.56:48707] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aSDhn37Lu30Ku9O40aLmRAAAABA"]
[Sat Nov 22 06:03:12.157600 2025] [:error] [pid 25856:tid 25879] [client 31.171.130.92:35395] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSDhoBsTP0wy94zKUvG7dgAAARU"]
[Sat Nov 22 06:03:13.054706 2025] [:error] [pid 53477:tid 53493] [client 31.171.130.97:50417] [client 31.171.130.97] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.97, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSDhoX7Lu30Ku9O40aLmTAAAAAw"]
[Sat Nov 22 06:03:14.512478 2025] [:error] [pid 53477:tid 53482] [client 31.171.130.97:50417] [client 31.171.130.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSDhon7Lu30Ku9O40aLmWwAAAAE"]
[Sat Nov 22 06:03:19.916413 2025] [:error] [pid 53477:tid 53499] [client 31.171.130.68:33847] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSDhp37Lu30Ku9O40aLmegAAABI"]
[Sat Nov 22 06:03:22.880405 2025] [:error] [pid 53478:tid 53513] [client 31.171.130.90:27903] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSDhqghUYdXBbQswAdQbJQAAAEQ"]
[Sat Nov 22 06:03:25.484158 2025] [:error] [pid 53479:tid 53536] [client 31.171.130.70:27905] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSDhrW6cicFF3Aas-oSATAAAAIA"]
[Sat Nov 22 06:03:28.583903 2025] [:error] [pid 53566:tid 53584] [client 31.171.130.74:58449] [client 31.171.130.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.74, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSDhsMbSHDBkRbwMbd5FKwAAANA"]
[Sat Nov 22 06:03:30.314926 2025] [:error] [pid 53566:tid 53586] [client 31.171.130.74:58449] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSDhssbSHDBkRbwMbd5FMwAAANI"]
[Sat Nov 22 06:03:31.746622 2025] [:error] [pid 53479:tid 53542] [client 31.171.130.83:30277] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSDhs26cicFF3Aas-oSAZwAAAIY"]
[Sat Nov 22 06:03:38.524204 2025] [:error] [pid 53477:tid 53481] [client 31.171.130.82:51083] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSDhun7Lu30Ku9O40aLmxQAAAAA"]
[Sat Nov 22 06:03:40.411043 2025] [:error] [pid 25856:tid 25880] [client 31.171.130.75:31525] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSDhvBsTP0wy94zKUvG8ZwAAARY"]
[Sat Nov 22 06:03:41.347073 2025] [:error] [pid 53566:tid 53581] [client 31.171.130.69:37683] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSDhvcbSHDBkRbwMbd5FcgAAAM0"]
[Sat Nov 22 06:03:42.250220 2025] [:error] [pid 25856:tid 25875] [client 31.171.130.99:55823] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSDhvhsTP0wy94zKUvG8fgAAARE"]
[Sat Nov 22 06:03:43.223170 2025] [:error] [pid 53566:tid 53583] [client 31.171.130.80:30049] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSDhv8bSHDBkRbwMbd5FeQAAAM8"]
[Sat Nov 22 06:03:46.499737 2025] [:error] [pid 53479:tid 53538] [client 31.171.130.74:64255] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSDhwm6cicFF3Aas-oSAsgAAAII"]
[Sat Nov 22 06:03:49.988742 2025] [:error] [pid 53477:tid 53498] [client 31.171.130.82:32211] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSDhxX7Lu30Ku9O40aLm-gAAABE"]
[Sat Nov 22 06:03:51.954100 2025] [:error] [pid 53478:tid 53512] [client 31.171.130.68:51379] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSDhxwhUYdXBbQswAdQbxQAAAEM"]
[Sat Nov 22 06:03:54.413611 2025] [:error] [pid 53478:tid 53520] [client 31.171.130.83:39965] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSDhyghUYdXBbQswAdQb0wAAAEs"]
[Sat Nov 22 06:03:57.567767 2025] [:error] [pid 25856:tid 25865] [client 31.171.130.101:49641] [client 31.171.130.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSDhzRsTP0wy94zKUvG86AAAAQc"]
[Sat Nov 22 06:03:58.562212 2025] [:error] [pid 53478:tid 53523] [client 31.171.130.61:25613] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSDhzghUYdXBbQswAdQb5QAAAE4"]
[Sat Nov 22 06:04:00.575351 2025] [:error] [pid 53479:tid 53560] [client 31.171.130.71:21765] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSDh0G6cicFF3Aas-oSA2wAAAJg"]
[Sat Nov 22 06:04:03.732149 2025] [:error] [pid 53566:tid 53585] [client 31.171.130.87:42655] [client 31.171.130.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.87, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSDh08bSHDBkRbwMbd5F8AAAANE"]
[Sat Nov 22 06:04:06.020085 2025] [:error] [pid 53566:tid 53575] [client 31.171.130.87:42655] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSDh1sbSHDBkRbwMbd5GAgAAAMc"]
[Sat Nov 22 06:04:08.022431 2025] [:error] [pid 25856:tid 25880] [client 31.171.130.76:60537] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSDh2BsTP0wy94zKUvG9KAAAARY"]
[Sat Nov 22 06:04:12.801222 2025] [:error] [pid 25856:tid 25879] [client 31.171.130.70:64981] [client 31.171.130.70] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.70, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSDh3BsTP0wy94zKUvG9TgAAARU"]
[Sat Nov 22 06:04:13.284319 2025] [:error] [pid 25856:tid 25860] [client 31.171.130.70:64981] [client 31.171.130.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSDh3RsTP0wy94zKUvG9UgAAAQI"]
[Sat Nov 22 06:04:14.240772 2025] [:error] [pid 53566:tid 53568] [client 31.171.130.102:58389] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aSDh3sbSHDBkRbwMbd5GLQAAAMA"]
[Sat Nov 22 06:04:15.246398 2025] [:error] [pid 53479:tid 53544] [client 31.171.130.54:43653] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSDh326cicFF3Aas-oSBHAAAAIg"]
[Sat Nov 22 06:04:18.174155 2025] [:error] [pid 53477:tid 53505] [client 31.171.130.59:28215] [client 31.171.130.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSDh4n7Lu30Ku9O40aLnawAAABg"]
[Sat Nov 22 06:04:23.892318 2025] [:error] [pid 53566:tid 53568] [client 31.171.130.86:62253] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSDh58bSHDBkRbwMbd5GegAAAMA"]
[Sat Nov 22 06:04:27.234188 2025] [:error] [pid 25856:tid 25858] [client 31.171.130.87:43149] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSDh6xsTP0wy94zKUvG93wAAAQA"]
[Sat Nov 22 06:04:31.884745 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.105:52373] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSDh737Lu30Ku9O40aLnnAAAAAs"]
[Sat Nov 22 06:04:33.286643 2025] [:error] [pid 53479:tid 53550] [client 31.171.130.81:21335] [client 31.171.130.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSDh8W6cicFF3Aas-oSBnAAAAI4"]
[Sat Nov 22 06:04:34.709912 2025] [:error] [pid 53479:tid 53546] [client 31.171.130.71:63029] [client 31.171.130.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSDh8m6cicFF3Aas-oSBqwAAAIo"]
[Sat Nov 22 06:04:37.396771 2025] [:error] [pid 53566:tid 53581] [client 31.171.130.88:32307] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSDh9cbSHDBkRbwMbd5GwgAAAM0"]
[Sat Nov 22 06:04:38.871559 2025] [:error] [pid 53566:tid 53574] [client 31.171.130.84:50787] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSDh9sbSHDBkRbwMbd5GzQAAAMY"]
[Sat Nov 22 06:04:42.222082 2025] [:error] [pid 53478:tid 53513] [client 31.171.130.90:48903] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSDh-ghUYdXBbQswAdQcoAAAAEQ"]
[Sat Nov 22 06:04:44.679798 2025] [:error] [pid 53478:tid 53517] [client 31.171.130.86:54481] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSDh_AhUYdXBbQswAdQcrgAAAEg"]
[Sat Nov 22 06:04:47.072364 2025] [:error] [pid 53477:tid 53490] [client 31.171.130.92:47607] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSDh_37Lu30Ku9O40aLn8AAAAAk"]
[Sat Nov 22 06:04:48.987317 2025] [:error] [pid 53479:tid 53559] [client 31.171.130.69:35389] [client 31.171.130.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSDiAG6cicFF3Aas-oSCAwAAAJc"]
[Sat Nov 22 06:04:50.874019 2025] [proxy_fcgi:error] [pid 53477:tid 53487] [client 31.171.130.67:22257] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:04:53.683638 2025] [:error] [pid 53477:tid 53504] [client 31.171.130.67:22257] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSDiBX7Lu30Ku9O40aLoGAAAABc"]
[Sat Nov 22 06:05:03.881147 2025] [:error] [pid 53477:tid 53495] [client 31.171.130.78:61475] [client 31.171.130.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSDiD37Lu30Ku9O40aLoTAAAAA4"]
[Sat Nov 22 06:05:04.811659 2025] [:error] [pid 53479:tid 53545] [client 31.171.130.88:28877] [client 31.171.130.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSDiEG6cicFF3Aas-oSCYQAAAIk"]
[Sat Nov 22 06:05:08.227067 2025] [:error] [pid 53478:tid 53523] [client 31.171.130.86:25795] [client 31.171.130.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSDiFAhUYdXBbQswAdQdIwAAAE4"]
[Sat Nov 22 06:05:09.158471 2025] [:error] [pid 53566:tid 53575] [client 31.171.130.87:54877] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSDiFcbSHDBkRbwMbd5HYwAAAMc"]
[Sat Nov 22 06:05:10.612220 2025] [:error] [pid 53477:tid 53493] [client 31.171.130.82:64051] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSDiFn7Lu30Ku9O40aLoaAAAAAw"]
[Sat Nov 22 06:05:15.224564 2025] [:error] [pid 53478:tid 53520] [client 31.171.130.100:65157] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSDiGwhUYdXBbQswAdQdaQAAAEs"]
[Sat Nov 22 06:05:16.811441 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.102:21907] [client 31.171.130.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.102, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSDiHAhUYdXBbQswAdQdhAAAAFU"]
[Sat Nov 22 06:05:17.789749 2025] [:error] [pid 53478:tid 53527] [client 31.171.130.102:21907] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSDiHQhUYdXBbQswAdQdlAAAAFI"]
[Sat Nov 22 06:05:18.764390 2025] [:error] [pid 53478:tid 53519] [client 31.171.130.68:57043] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSDiHghUYdXBbQswAdQdoQAAAEo"]
[Sat Nov 22 06:05:21.179952 2025] [:error] [pid 25856:tid 25882] [client 31.171.130.105:58643] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSDiIRsTP0wy94zKUvG_BQAAARg"]
[Sat Nov 22 06:05:22.702616 2025] [:error] [pid 25856:tid 25882] [client 31.171.130.93:24035] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSDiIhsTP0wy94zKUvG_EQAAARg"]
[Sat Nov 22 06:05:26.524497 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 31.171.130.57:50931] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:30.568126 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 31.171.130.57:50931] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:31.513814 2025] [:error] [pid 53477:tid 53481] [client 31.171.130.57:50931] [client 31.171.130.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSDiK37Lu30Ku9O40aLouAAAAAA"]
[Sat Nov 22 06:05:33.994968 2025] [:error] [pid 53478:tid 53522] [client 31.171.130.65:41023] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSDiLQhUYdXBbQswAdQeRwAAAE0"]
[Sat Nov 22 06:05:36.328761 2025] [:error] [pid 53479:tid 53537] [client 31.171.130.94:28737] [client 31.171.130.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.94, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSDiMG6cicFF3Aas-oSC5gAAAIE"]
[Sat Nov 22 06:05:36.338624 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 31.171.130.94:28737] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:41.438542 2025] [:error] [pid 53479:tid 53553] [client 31.171.130.94:28737] [client 31.171.130.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aSDiNW6cicFF3Aas-oSC-wAAAJE"]
[Sat Nov 22 06:05:42.358336 2025] [:error] [pid 25856:tid 25864] [client 31.171.130.82:27451] [client 31.171.130.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.82, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSDiNhsTP0wy94zKUvG_gAAAAQY"]
[Sat Nov 22 06:05:43.505538 2025] [:error] [pid 25856:tid 25859] [client 31.171.130.82:27451] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSDiNxsTP0wy94zKUvG_hAAAAQE"]
[Sat Nov 22 06:05:47.484328 2025] [proxy_fcgi:error] [pid 53479:tid 53558] [client 31.171.130.76:61557] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:05:49.025864 2025] [:error] [pid 53479:tid 53550] [client 31.171.130.76:61557] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSDiPW6cicFF3Aas-oSDJAAAAI4"]
[Sat Nov 22 06:05:51.077520 2025] [:error] [pid 53478:tid 53520] [client 31.171.130.60:23843] [client 31.171.130.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSDiPwhUYdXBbQswAdQe4AAAAEs"]
[Sat Nov 22 06:05:52.497896 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.93:46923] [client 31.171.130.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.93, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSDiQH7Lu30Ku9O40aLpDAAAAAY"]
[Sat Nov 22 06:05:56.385592 2025] [:error] [pid 53477:tid 53504] [client 31.171.130.93:46923] [client 31.171.130.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSDiRH7Lu30Ku9O40aLpGAAAABc"]
[Sat Nov 22 06:05:57.782479 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.91:25727] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aSDiRQhUYdXBbQswAdQe_gAAAFU"]
[Sat Nov 22 06:06:02.618476 2025] [:error] [pid 53478:tid 53510] [client 31.171.130.99:21561] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSDiSghUYdXBbQswAdQfEAAAAEE"]
[Sat Nov 22 06:06:04.018486 2025] [:error] [pid 25856:tid 25875] [client 31.171.130.96:24265] [client 31.171.130.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSDiTBsTP0wy94zKUvHAEgAAARE"]
[Sat Nov 22 06:06:05.417339 2025] [:error] [pid 53478:tid 53528] [client 31.171.130.55:49761] [client 31.171.130.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSDiTQhUYdXBbQswAdQfHQAAAFM"]
[Sat Nov 22 06:06:08.368121 2025] [:error] [pid 53479:tid 53558] [client 31.171.130.81:25551] [client 31.171.130.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.81, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSDiUG6cicFF3Aas-oSDaAAAAJY"]
[Sat Nov 22 06:06:08.822104 2025] [:error] [pid 53479:tid 53551] [client 31.171.130.81:25551] [client 31.171.130.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSDiUG6cicFF3Aas-oSDagAAAI8"]
[Sat Nov 22 06:06:13.737603 2025] [:error] [pid 53478:tid 53513] [client 31.171.130.61:64017] [client 31.171.130.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSDiVQhUYdXBbQswAdQfgAAAAEQ"]
[Sat Nov 22 06:06:14.667441 2025] [:error] [pid 53566:tid 53574] [client 31.171.130.85:51053] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSDiVsbSHDBkRbwMbd5ItgAAAMY"]
[Sat Nov 22 06:06:18.787018 2025] [proxy_fcgi:error] [pid 53477:tid 53500] [client 31.171.130.66:30237] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:20.293178 2025] [proxy_fcgi:error] [pid 53477:tid 53486] [client 31.171.130.66:30237] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:20.772352 2025] [:error] [pid 53477:tid 53492] [client 31.171.130.66:30237] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSDiXH7Lu30Ku9O40aLpYgAAAAs"]
[Sat Nov 22 06:06:23.134064 2025] [:error] [pid 53566:tid 53585] [client 31.171.130.92:48963] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aSDiX8bSHDBkRbwMbd5I1wAAANE"]
[Sat Nov 22 06:06:28.091603 2025] [proxy_fcgi:error] [pid 53477:tid 53491] [client 31.171.130.80:55213] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:29.117778 2025] [:error] [pid 53477:tid 53482] [client 31.171.130.80:55213] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSDiZX7Lu30Ku9O40aLphQAAAAE"]
[Sat Nov 22 06:06:32.682876 2025] [:error] [pid 53566:tid 53575] [client 31.171.130.100:42371] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSDiaMbSHDBkRbwMbd5I7wAAAMc"]
[Sat Nov 22 06:06:38.177682 2025] [proxy_fcgi:error] [pid 53566:tid 53585] [client 31.171.130.67:31645] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:38.622857 2025] [:error] [pid 53566:tid 53569] [client 31.171.130.67:31645] [client 31.171.130.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSDibsbSHDBkRbwMbd5JCQAAAME"]
[Sat Nov 22 06:06:39.607176 2025] [proxy_fcgi:error] [pid 53566:tid 53580] [client 31.171.130.65:25935] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:06:42.727699 2025] [:error] [pid 53566:tid 53581] [client 31.171.130.65:25935] [client 31.171.130.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSDicsbSHDBkRbwMbd5JHQAAAM0"]
[Sat Nov 22 06:06:48.218597 2025] [:error] [pid 53477:tid 53481] [client 31.171.130.66:52557] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aSDieH7Lu30Ku9O40aLpvAAAAAA"]
[Sat Nov 22 06:06:52.991764 2025] [:error] [pid 53478:tid 53515] [client 31.171.130.76:51621] [client 31.171.130.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.76, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSDifAhUYdXBbQswAdQgbQAAAEY"]
[Sat Nov 22 06:06:54.003846 2025] [:error] [pid 53478:tid 53533] [client 31.171.130.76:51621] [client 31.171.130.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.76, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSDifghUYdXBbQswAdQgdAAAAFg"]
[Sat Nov 22 06:06:54.485850 2025] [:error] [pid 53478:tid 53510] [client 31.171.130.76:51621] [client 31.171.130.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aSDifghUYdXBbQswAdQgdwAAAEE"]
[Sat Nov 22 06:06:59.387609 2025] [:error] [pid 53566:tid 53568] [client 31.171.130.72:36213] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSDig8bSHDBkRbwMbd5JQgAAAMA"]
[Sat Nov 22 06:07:01.490132 2025] [:error] [pid 53478:tid 53524] [client 31.171.130.57:38161] [client 31.171.130.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSDihQhUYdXBbQswAdQgjQAAAE8"]
[Sat Nov 22 06:07:07.408628 2025] [proxy_fcgi:error] [pid 53479:tid 53559] [client 31.171.130.75:50539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:07:08.909824 2025] [proxy_fcgi:error] [pid 53479:tid 53536] [client 31.171.130.75:50539] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:07:09.900923 2025] [:error] [pid 53479:tid 53554] [client 31.171.130.75:50539] [client 31.171.130.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSDijW6cicFF3Aas-oSEEgAAAJI"]
[Sat Nov 22 06:07:10.908352 2025] [:error] [pid 53477:tid 53483] [client 31.171.130.74:64627] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSDijn7Lu30Ku9O40aLp6QAAAAI"]
[Sat Nov 22 06:07:13.785612 2025] [:error] [pid 25856:tid 25882] [client 31.171.130.77:32179] [client 31.171.130.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.77, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aSDikRsTP0wy94zKUvHAvQAAARg"]
[Sat Nov 22 06:07:15.783217 2025] [:error] [pid 25856:tid 25862] [client 31.171.130.77:32179] [client 31.171.130.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSDikxsTP0wy94zKUvHAxAAAAQQ"]
[Sat Nov 22 06:07:17.199162 2025] [:error] [pid 25856:tid 25876] [client 31.171.130.83:25233] [client 31.171.130.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSDilRsTP0wy94zKUvHAyQAAARI"]
[Sat Nov 22 06:07:19.158149 2025] [:error] [pid 53566:tid 53590] [client 31.171.130.79:49141] [client 31.171.130.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSDil8bSHDBkRbwMbd5JkQAAANY"]
[Sat Nov 22 06:07:25.794830 2025] [:error] [pid 25856:tid 25881] [client 31.171.130.54:30695] [client 31.171.130.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSDinRsTP0wy94zKUvHA9AAAARc"]
[Sat Nov 22 06:07:29.124647 2025] [proxy_fcgi:error] [pid 25856:tid 25862] [client 31.171.130.90:38367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:07:30.125299 2025] [:error] [pid 25856:tid 25867] [client 31.171.130.90:38367] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSDiohsTP0wy94zKUvHBEQAAAQk"]
[Sat Nov 22 06:07:31.624225 2025] [proxy_fcgi:error] [pid 53478:tid 53509] [client 31.171.130.63:61151] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:07:38.773745 2025] [:error] [pid 53478:tid 53524] [client 31.171.130.63:61151] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aSDiqghUYdXBbQswAdQhIQAAAE8"]
[Sat Nov 22 06:07:45.121204 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.99:57189] [client 31.171.130.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSDisX7Lu30Ku9O40aLqnAAAAAY"]
[Sat Nov 22 06:07:48.506471 2025] [:error] [pid 53478:tid 53512] [client 31.171.130.102:54045] [client 31.171.130.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSDitAhUYdXBbQswAdQhXwAAAEM"]
[Sat Nov 22 06:07:49.921990 2025] [:error] [pid 53478:tid 53528] [client 31.171.130.74:44379] [client 31.171.130.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSDitQhUYdXBbQswAdQhZwAAAFM"]
[Sat Nov 22 06:07:54.997883 2025] [:error] [pid 53479:tid 53542] [client 31.171.130.105:39347] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSDium6cicFF3Aas-oSE-AAAAIY"]
[Sat Nov 22 06:07:55.943597 2025] [:error] [pid 53479:tid 53557] [client 31.171.130.105:31953] [client 31.171.130.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSDiu26cicFF3Aas-oSE_wAAAJU"]
[Sat Nov 22 06:07:59.884797 2025] [:error] [pid 53479:tid 53551] [client 31.171.130.90:44881] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSDiv26cicFF3Aas-oSFEQAAAI8"]
[Sat Nov 22 06:08:17.914497 2025] [proxy_fcgi:error] [pid 53479:tid 53541] [client 31.171.130.73:56593] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:08:18.885753 2025] [:error] [pid 53479:tid 53545] [client 31.171.130.73:56593] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSDi0m6cicFF3Aas-oSFVgAAAIk"]
[Sat Nov 22 06:08:25.392807 2025] [:error] [pid 53478:tid 53509] [client 31.171.130.58:43613] [client 31.171.130.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aSDi2QhUYdXBbQswAdQh2AAAAEA"]
[Sat Nov 22 06:08:34.204897 2025] [:error] [pid 53477:tid 53491] [client 31.171.130.72:34465] [client 31.171.130.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aSDi4n7Lu30Ku9O40aLrFQAAAAo"]
[Sat Nov 22 06:08:35.158793 2025] [:error] [pid 53566:tid 53592] [client 31.171.130.85:44323] [client 31.171.130.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aSDi48bSHDBkRbwMbd5KWQAAANg"]
[Sat Nov 22 06:08:37.178005 2025] [:error] [pid 53566:tid 53577] [client 31.171.130.66:39869] [client 31.171.130.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aSDi5cbSHDBkRbwMbd5KXwAAAMk"]
[Sat Nov 22 06:08:40.593189 2025] [:error] [pid 25856:tid 25861] [client 31.171.130.64:50117] [client 31.171.130.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aSDi6BsTP0wy94zKUvHCPQAAAQM"]
[Sat Nov 22 06:08:49.322675 2025] [:error] [pid 25856:tid 25864] [client 31.171.130.79:57641] [client 31.171.130.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aSDi8RsTP0wy94zKUvHCXAAAAQY"]
[Sat Nov 22 06:08:50.332428 2025] [:error] [pid 25856:tid 25877] [client 31.171.130.68:23183] [client 31.171.130.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aSDi8hsTP0wy94zKUvHCXwAAARM"]
[Sat Nov 22 06:08:53.895764 2025] [:error] [pid 53479:tid 53549] [client 31.171.130.73:53573] [client 31.171.130.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aSDi9W6cicFF3Aas-oSFrwAAAI0"]
[Sat Nov 22 06:08:55.886736 2025] [:error] [pid 53478:tid 53525] [client 31.171.130.87:60761] [client 31.171.130.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aSDi9whUYdXBbQswAdQiQQAAAFA"]
[Sat Nov 22 06:08:56.770152 2025] [:error] [pid 53478:tid 53511] [client 31.171.130.100:45541] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aSDi-AhUYdXBbQswAdQiQwAAAEI"]
[Sat Nov 22 06:09:01.795670 2025] [:error] [pid 53566:tid 53568] [client 31.171.130.82:64365] [client 31.171.130.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.82, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/images/wp-login.php"] [unique_id "aSDi_cbSHDBkRbwMbd5KkQAAAMA"]
[Sat Nov 22 06:09:04.297026 2025] [:error] [pid 53566:tid 53592] [client 31.171.130.82:64365] [client 31.171.130.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aSDjAMbSHDBkRbwMbd5KmAAAANg"]
[Sat Nov 22 06:09:07.192613 2025] [:error] [pid 53566:tid 53574] [client 31.171.130.91:61029] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aSDjA8bSHDBkRbwMbd5KpAAAAMY"]
[Sat Nov 22 06:09:08.138439 2025] [:error] [pid 53477:tid 53489] [client 31.171.130.90:21151] [client 31.171.130.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSDjBH7Lu30Ku9O40aLrXgAAAAg"]
[Sat Nov 22 06:09:09.216340 2025] [proxy_fcgi:error] [pid 53566:tid 53569] [client 31.171.130.92:42597] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 06:09:09.680842 2025] [:error] [pid 53566:tid 53573] [client 31.171.130.92:42597] [client 31.171.130.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.92, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aSDjBcbSHDBkRbwMbd5KqQAAAMU"]
[Sat Nov 22 06:09:10.674164 2025] [:error] [pid 53566:tid 53588] [client 31.171.130.92:42597] [client 31.171.130.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aSDjBsbSHDBkRbwMbd5KrQAAANQ"]
[Sat Nov 22 06:09:14.424834 2025] [:error] [pid 53477:tid 53493] [client 31.171.130.91:42355] [client 31.171.130.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aSDjCn7Lu30Ku9O40aLreAAAAAw"]
[Sat Nov 22 06:09:39.972617 2025] [:error] [pid 53477:tid 53481] [client 31.171.130.80:56743] [client 31.171.130.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.80, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSDjI37Lu30Ku9O40aLr1gAAAAA"]
[Sat Nov 22 06:09:41.980234 2025] [:error] [pid 53477:tid 53503] [client 31.171.130.80:56743] [client 31.171.130.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.80, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aSDjJX7Lu30Ku9O40aLr3gAAABY"]
[Sat Nov 22 06:09:43.486647 2025] [:error] [pid 53477:tid 53487] [client 31.171.130.80:56743] [client 31.171.130.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSDjJ37Lu30Ku9O40aLr4QAAAAY"]
[Sat Nov 22 06:09:44.441998 2025] [:error] [pid 53477:tid 53502] [client 31.171.130.100:32689] [client 31.171.130.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aSDjKH7Lu30Ku9O40aLr4gAAABU"]
[Sat Nov 22 06:09:47.418690 2025] [:error] [pid 53477:tid 53504] [client 31.171.130.56:45903] [client 31.171.130.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSDjK37Lu30Ku9O40aLr5wAAABc"]
[Sat Nov 22 06:09:55.279637 2025] [:error] [pid 53478:tid 53530] [client 31.171.130.63:20599] [client 31.171.130.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.63, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aSDjMwhUYdXBbQswAdQi7AAAAFU"]
[Sat Nov 22 06:09:55.779947 2025] [:error] [pid 53478:tid 53510] [client 31.171.130.63:20599] [client 31.171.130.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSDjMwhUYdXBbQswAdQi7wAAAEE"]
[Sat Nov 22 06:09:57.687392 2025] [:error] [pid 53477:tid 53482] [client 31.171.130.62:25333] [client 31.171.130.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.62, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSDjNX7Lu30Ku9O40aLr-AAAAAE"]
[Sat Nov 22 06:10:06.088851 2025] [:error] [pid 53477:tid 53493] [client 31.171.130.62:25333] [client 31.171.130.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aSDjPn7Lu30Ku9O40aLsJQAAAAw"]
[Sat Nov 22 06:10:15.700701 2025] [:error] [pid 53566:tid 53589] [client 31.171.130.84:25757] [client 31.171.130.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSDjR8bSHDBkRbwMbd5LVgAAANU"]
[Sat Nov 22 06:10:23.435395 2025] [:error] [pid 25856:tid 25878] [client 31.171.130.57:24221] [client 31.171.130.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.57, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSDjTxsTP0wy94zKUvHD8gAAARQ"]
[Sat Nov 22 06:10:30.488253 2025] [autoindex:error] [pid 25856:tid 25861] [client 31.171.130.57:24221] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:13:36.379020 2025] [authz_core:error] [pid 53478:tid 53524] [client 31.171.130.94:46847] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/
[Sat Nov 22 06:56:30.381205 2025] [:error] [pid 53477:tid 53494] [client 212.116.231.26:43816] [client 212.116.231.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSDuHn7Lu30Ku9O40aIGNAAAAA0"]
[Sat Nov 22 06:56:32.452418 2025] [:error] [pid 53479:tid 53550] [client 212.116.231.26:49802] [client 212.116.231.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSDuIG6cicFF3Aas-oSg-wAAAI4"]
[Sat Nov 22 06:56:35.758984 2025] [:error] [pid 53566:tid 53582] [client 212.116.231.26:58890] [client 212.116.231.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSDuI8bSHDBkRbwMbd5nEgAAAM4"]
[Sat Nov 22 06:56:37.452119 2025] [:error] [pid 53477:tid 53505] [client 212.116.231.26:59818] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aSDuJX7Lu30Ku9O40aIGjAAAABg"]
[Sat Nov 22 06:56:38.265693 2025] [:error] [pid 53477:tid 53500] [client 212.116.231.26:60552] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aSDuJn7Lu30Ku9O40aIGlwAAABM"]
[Sat Nov 22 06:56:39.100789 2025] [:error] [pid 53566:tid 53573] [client 212.116.231.26:32778] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aSDuJ8bSHDBkRbwMbd5nPwAAAMU"]
[Sat Nov 22 06:56:39.921161 2025] [:error] [pid 53477:tid 53482] [client 212.116.231.26:47654] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aSDuJ37Lu30Ku9O40aIGsgAAAAE"]
[Sat Nov 22 06:56:40.756973 2025] [:error] [pid 53479:tid 53547] [client 212.116.231.26:48040] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aSDuKG6cicFF3Aas-oShVAAAAIs"]
[Sat Nov 22 06:56:41.978568 2025] [:error] [pid 53478:tid 53516] [client 212.116.231.26:48480] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuKQhUYdXBbQswAdQ_8wAAAEc"]
[Sat Nov 22 06:56:42.790254 2025] [:error] [pid 53566:tid 53581] [client 212.116.231.26:49134] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuKsbSHDBkRbwMbd5naAAAAM0"]
[Sat Nov 22 06:56:43.604327 2025] [:error] [pid 53479:tid 53552] [client 212.116.231.26:49560] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuK26cicFF3Aas-oShdQAAAJA"]
[Sat Nov 22 06:56:44.418596 2025] [:error] [pid 9547:tid 9575] [client 212.116.231.26:49998] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuLNClOR5qk7DoMeGlfwAAAVY"]
[Sat Nov 22 06:56:45.253748 2025] [:error] [pid 53479:tid 53548] [client 212.116.231.26:50430] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuLW6cicFF3Aas-oShjAAAAIw"]
[Sat Nov 22 07:31:35.613840 2025] [:error] [pid 53478:tid 53532] [client 4.255.247.224:55210] [client 4.255.247.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.255.247.224, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSD2VwhUYdXBbQswAdRJbgAAAFc"]
[Sat Nov 22 07:31:37.722216 2025] [:error] [pid 53478:tid 53515] [client 4.255.247.224:55210] [client 4.255.247.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSD2WQhUYdXBbQswAdRJeQAAAEY"]
[Sat Nov 22 07:31:38.413037 2025] [:error] [pid 53478:tid 53516] [client 4.255.247.224:55413] [client 4.255.247.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSD2WghUYdXBbQswAdRJegAAAEc"]
[Sat Nov 22 07:31:39.104324 2025] [:error] [pid 53478:tid 53528] [client 4.255.247.224:55450] [client 4.255.247.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSD2WwhUYdXBbQswAdRJewAAAFM"]
[Sat Nov 22 07:42:22.207815 2025] [:error] [pid 53479:tid 53556] [client 43.157.95.131:38294] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSD43m6cicFF3Aas-oSsjQAAAJQ"]
[Sat Nov 22 10:52:05.053688 2025] [autoindex:error] [pid 53478:tid 53513] [client 139.59.37.180:55001] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 22 11:05:18.851344 2025] [:error] [pid 53479:tid 53549] [client 138.197.43.225:64480] [client 138.197.43.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSEobm6cicFF3Aas-oToJQAAAI0"]
[Sat Nov 22 11:05:19.508409 2025] [:error] [pid 53479:tid 53539] [client 138.197.43.225:47270] [client 138.197.43.225] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSEob26cicFF3Aas-oToKAAAAIM"]
[Sat Nov 22 13:14:22.778887 2025] [:error] [pid 53566:tid 53578] [client 182.40.104.255:33632] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSFGrsbSHDBkRbwMbd7ZywAAAMo"]
[Sat Nov 22 15:09:11.116783 2025] [:error] [pid 53566:tid 53591] [client 85.131.192.23:50828] [client 85.131.192.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.131.192.23, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSFhl8bSHDBkRbwMbd723gAAANc"], referer: https://www.google.com
[Sat Nov 22 15:09:11.661851 2025] [:error] [pid 53566:tid 53575] [client 85.131.192.23:50850] [client 85.131.192.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.131.192.23, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSFhl8bSHDBkRbwMbd723wAAAMc"], referer: https://www.google.com
[Sat Nov 22 15:56:09.424854 2025] [:error] [pid 25856:tid 25861] [client 139.135.241.64:59588] [client 139.135.241.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.241.64, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSFsmRsTP0wy94zKUvGKUQAAAQM"]
[Sun Nov 23 02:26:05.184768 2025] [:error] [pid 8816:tid 8890] [client 182.44.12.37:44344] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSIAPZb4RIAN-_BXnHl9nwAAAIY"]
[Sun Nov 23 04:32:43.067793 2025] [:error] [pid 44652:tid 44719] [client 216.126.225.91:35178] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSId69iQFwsyXQDhwyCtHwAAAQ0"]
[Sun Nov 23 08:37:15.836227 2025] [:error] [pid 38740:tid 38816] [client 121.229.185.160:50257] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSJXOw13QPZSi6O8umXWkgAAAJQ"]
[Sun Nov 23 14:44:18.029742 2025] [:error] [pid 38739:tid 38782] [client 122.176.106.134:64643] [client 122.176.106.134] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.106.134, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSKtQgdvEgJm2n2cDmrewgAAAE0"]
[Sun Nov 23 15:01:21.009241 2025] [:error] [pid 38738:tid 38755] [client 182.44.9.147:39470] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSKxQQytc6TL9XavPmOjGwAAAA0"]
[Sun Nov 23 15:46:10.453606 2025] [:error] [pid 44652:tid 44724] [client 176.65.132.18:49154] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSK7wtiQFwsyXQDhwyB13QAAARI"]
[Sun Nov 23 16:34:32.400123 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.44:34283] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLHGE8WZjXLvbHTHPeKjwAAAMQ"]
[Sun Nov 23 16:34:33.140318 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.31:60679] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLHGU8WZjXLvbHTHPeKqQAAAM8"]
[Sun Nov 23 16:34:34.131938 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.30:24253] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLHGgdvEgJm2n2cDmr8owAAAEI"]
[Sun Nov 23 16:34:34.748648 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.52:25111] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLHGk8WZjXLvbHTHPeKzwAAAMQ"]
[Sun Nov 23 16:34:35.820728 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.71:26357] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLHG9iQFwsyXQDhwyCEQQAAARg"]
[Sun Nov 23 16:34:36.127693 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.70:54819] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLHHA13QPZSi6O8umVmgQAAAIc"]
[Sun Nov 23 16:34:36.519593 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.28:23941] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLHHE8WZjXLvbHTHPeK9gAAAMQ"]
[Sun Nov 23 16:34:36.730873 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.16:59817] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLHHAytc6TL9XavPmPK9AAAABI"]
[Sun Nov 23 16:34:36.926083 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.38:33511] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLHHAdvEgJm2n2cDmr8yQAAAE4"]
[Sun Nov 23 16:34:37.119029 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.14:45269] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLHHQ13QPZSi6O8umVmkgAAAIk"]
[Sun Nov 23 16:34:37.567028 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.18:65177] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLHHQ13QPZSi6O8umVmmgAAAI4"]
[Sun Nov 23 16:34:38.074764 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.49:56459] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aSLHHtiQFwsyXQDhwyCElwAAAQ4"]
[Sun Nov 23 16:34:38.472787 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.43:26887] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLHHk8WZjXLvbHTHPeLFgAAAMM"]
[Sun Nov 23 16:34:39.971652 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.2:40713] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLHHwytc6TL9XavPmPLLAAAAAY"]
[Sun Nov 23 16:34:40.316896 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.73:56875] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLHINiQFwsyXQDhwyCFBgAAAQc"]
[Sun Nov 23 16:34:41.347653 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.28:60539] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLHIdiQFwsyXQDhwyCFLwAAAQQ"]
[Sun Nov 23 16:34:41.817291 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.17:30057] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLHIQ13QPZSi6O8umVmyQAAAIY"]
[Sun Nov 23 16:34:42.218770 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.47:49285] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLHIk8WZjXLvbHTHPeLUwAAAMU"]
[Sun Nov 23 16:34:42.522687 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.67:42563] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLHIgytc6TL9XavPmPLZgAAAA0"]
[Sun Nov 23 16:34:43.348119 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.6:27027] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLHIwdvEgJm2n2cDmr9VwAAAE8"]
[Sun Nov 23 16:34:43.670318 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.10:21269] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLHI08WZjXLvbHTHPeLbgAAANA"]
[Sun Nov 23 16:34:44.087716 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.63:62433] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLHJAytc6TL9XavPmPLgAAAAA0"]
[Sun Nov 23 16:34:44.288422 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.44:32761] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLHJAytc6TL9XavPmPLhAAAABg"]
[Sun Nov 23 16:34:44.481823 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.76:41885] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLHJA13QPZSi6O8umVm7QAAAJA"]
[Sun Nov 23 16:34:45.055254 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.6:57823] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLHJQytc6TL9XavPmPLkgAAAAU"]
[Sun Nov 23 16:34:45.362877 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.8:56393] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLHJU8WZjXLvbHTHPeLjAAAAMc"]
[Sun Nov 23 16:34:45.548992 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.46:21463] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLHJQ13QPZSi6O8umVm_wAAAIw"]
[Sun Nov 23 16:34:46.845013 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.78:48859] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLHJk8WZjXLvbHTHPeLqgAAANI"]
[Sun Nov 23 16:34:47.406747 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.38:33519] [client 140.99.1.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.38, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLHJwytc6TL9XavPmPL2wAAAA4"]
[Sun Nov 23 16:34:48.837921 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.38:33519] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLHKAytc6TL9XavPmPMHgAAAAw"]
[Sun Nov 23 16:34:49.329057 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.77:26163] [client 140.99.1.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.77, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLHKU8WZjXLvbHTHPeL0wAAANA"]
[Sun Nov 23 16:34:49.529151 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.77:26163] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLHKU8WZjXLvbHTHPeL3AAAAMM"]
[Sun Nov 23 16:34:50.646715 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.17:51859] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLHKg13QPZSi6O8umVndQAAAIw"]
[Sun Nov 23 16:34:52.083318 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.62:26175] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLHLE8WZjXLvbHTHPeMDQAAAMs"]
[Sun Nov 23 16:34:52.494251 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.78:23487] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLHLE8WZjXLvbHTHPeMGQAAANc"]
[Sun Nov 23 16:34:52.997852 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.31:46669] [client 140.99.1.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.31, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLHLNiQFwsyXQDhwyCGZAAAAQg"]
[Sun Nov 23 16:34:53.204721 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.31:46669] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLHLdiQFwsyXQDhwyCGZwAAARA"]
[Sun Nov 23 16:34:55.467332 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.71:54305] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLHL9iQFwsyXQDhwyCGpQAAAQk"]
[Sun Nov 23 16:34:56.850436 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.69:39781] [client 140.99.1.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.69, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLHME8WZjXLvbHTHPeMfwAAANI"]
[Sun Nov 23 16:34:57.429750 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.69:39781] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLHMU8WZjXLvbHTHPeMigAAAM0"]
[Sun Nov 23 16:34:57.859986 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.78:20149] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLHMQdvEgJm2n2cDmr-6gAAAFE"]
[Sun Nov 23 16:34:59.661128 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.8:27633] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLHMw13QPZSi6O8umVoVgAAAJc"]
[Sun Nov 23 16:35:00.251075 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.50:30111] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLHNA13QPZSi6O8umVocwAAAI0"]
[Sun Nov 23 16:35:00.441083 2025] [:error] [pid 38739:tid 38773] [client 140.99.1.44:45537] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLHNAdvEgJm2n2cDmr_HQAAAEQ"]
[Sun Nov 23 16:35:05.703083 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.67:59343] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLHOdiQFwsyXQDhwyCHPgAAAQo"]
[Sun Nov 23 16:35:06.038624 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.9:23869] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLHOk8WZjXLvbHTHPeNVwAAAMo"]
[Sun Nov 23 16:35:06.569072 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.17:45527] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLHOk8WZjXLvbHTHPeNagAAANc"]
[Sun Nov 23 16:35:07.268847 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.14:36617] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLHOwytc6TL9XavPmPN_wAAAAk"]
[Sun Nov 23 16:35:07.718570 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.52:42967] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLHO08WZjXLvbHTHPeNgAAAAMU"]
[Sun Nov 23 16:35:08.389175 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.28:32815] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLHPNiQFwsyXQDhwyCHhQAAARc"]
[Sun Nov 23 16:35:09.544794 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.43:50043] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLHPQdvEgJm2n2cDmoABQAAAEw"]
[Sun Nov 23 16:35:09.748592 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.13:56767] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLHPQ13QPZSi6O8umVplQAAAII"]
[Sun Nov 23 16:35:10.049729 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.65:34961] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLHPgdvEgJm2n2cDmoAEQAAAEE"]
[Sun Nov 23 16:35:10.240152 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.32:45417] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLHPgytc6TL9XavPmPONAAAAAw"]
[Sun Nov 23 16:35:10.623248 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.17:41565] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLHPgytc6TL9XavPmPOQAAAABY"]
[Sun Nov 23 16:35:10.921996 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.17:63943] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLHPk8WZjXLvbHTHPeNvwAAANM"]
[Sun Nov 23 16:35:11.406885 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.73:54773] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSLHPwytc6TL9XavPmPOZwAAAA0"]
[Sun Nov 23 16:35:11.622618 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.53:35677] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLHP08WZjXLvbHTHPeN1AAAAMQ"]
[Sun Nov 23 16:35:11.936241 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.46:53115] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLHPw13QPZSi6O8umVp1AAAAIo"]
[Sun Nov 23 16:35:12.131206 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.46:36409] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLHQE8WZjXLvbHTHPeN4AAAANY"]
[Sun Nov 23 16:35:12.414215 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.30:45461] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLHQAytc6TL9XavPmPOgAAAABg"]
[Sun Nov 23 16:35:13.002158 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.33:26267] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLHQQdvEgJm2n2cDmoAQgAAAEY"]
[Sun Nov 23 16:35:13.737557 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.39:56737] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLHQU8WZjXLvbHTHPeODQAAAME"]
[Sun Nov 23 16:35:14.854614 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.8:59013] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLHQgdvEgJm2n2cDmoAegAAAEc"]
[Sun Nov 23 16:35:15.417335 2025] [:error] [pid 38739:tid 38773] [client 140.99.1.47:61479] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLHQwdvEgJm2n2cDmoAhgAAAEQ"]
[Sun Nov 23 16:35:15.747262 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.46:24313] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLHQ08WZjXLvbHTHPeORgAAAMU"]
[Sun Nov 23 16:35:16.471268 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.70:21747] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLHRAytc6TL9XavPmPPDAAAAAE"]
[Sun Nov 23 16:35:17.089741 2025] [proxy_fcgi:error] [pid 38738:tid 38756] [client 140.99.1.6:53573] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:17.200614 2025] [proxy_fcgi:error] [pid 38738:tid 38758] [client 140.99.1.6:53573] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:17.356610 2025] [proxy_fcgi:error] [pid 38738:tid 38751] [client 140.99.1.6:53573] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:18.048497 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.6:53573] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLHRgytc6TL9XavPmPPVQAAABY"]
[Sun Nov 23 16:35:18.233236 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.65:38925] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLHRgdvEgJm2n2cDmoAqwAAAFg"]
[Sun Nov 23 16:35:18.478255 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.53:25245] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLHRtiQFwsyXQDhwyCIiAAAAQk"]
[Sun Nov 23 16:35:18.723456 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.71:24881] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLHRg13QPZSi6O8umVq4wAAAIQ"]
[Sun Nov 23 16:35:18.905733 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.17:59991] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLHRgytc6TL9XavPmPPcAAAAAI"]
[Sun Nov 23 16:35:19.168660 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.67:42259] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLHR9iQFwsyXQDhwyCInwAAAQ4"]
[Sun Nov 23 16:35:19.459516 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.76:42291] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLHRw13QPZSi6O8umVrAgAAAIY"]
[Sun Nov 23 16:35:20.667332 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.50:27927] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLHSAdvEgJm2n2cDmoA6AAAAEw"]
[Sun Nov 23 16:35:20.849434 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.70:56923] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLHSAdvEgJm2n2cDmoA8wAAAEU"]
[Sun Nov 23 16:35:21.048986 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.10:50813] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLHSU8WZjXLvbHTHPeOxAAAAM8"]
[Sun Nov 23 16:35:21.496533 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.18:33935] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLHSdiQFwsyXQDhwyCIxgAAAQM"]
[Sun Nov 23 16:35:21.812955 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.72:61165] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLHSQdvEgJm2n2cDmoBFAAAAEI"]
[Sun Nov 23 16:35:22.201990 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.8:62919] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLHSk8WZjXLvbHTHPeO5AAAAMI"]
[Sun Nov 23 16:35:22.606935 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.24:50829] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSLHSgytc6TL9XavPmPP3QAAABE"]
[Sun Nov 23 16:35:23.116976 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.39:60293] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLHSwdvEgJm2n2cDmoBMgAAAEE"]
[Sun Nov 23 16:35:23.718602 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.3:58971] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSLHS9iQFwsyXQDhwyCI6wAAARI"]
[Sun Nov 23 16:35:24.006385 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.20:58939] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLHTAdvEgJm2n2cDmoBTQAAAEI"]
[Sun Nov 23 16:35:25.860216 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.43:25933] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSLHTQdvEgJm2n2cDmoBhAAAAFg"]
[Sun Nov 23 16:35:26.051624 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.33:60317] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSLHTtiQFwsyXQDhwyCJFQAAAQE"]
[Sun Nov 23 16:35:26.249875 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.6:50157] [client 140.99.1.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.6, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSLHTgdvEgJm2n2cDmoBkAAAAFg"]
[Sun Nov 23 16:35:26.535296 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.6:50157] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSLHTgdvEgJm2n2cDmoBmQAAAEg"]
[Sun Nov 23 16:35:27.462420 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.65:38609] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSLHT9iQFwsyXQDhwyCJRQAAARM"]
[Sun Nov 23 16:35:27.678038 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.46:57487] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSLHTw13QPZSi6O8umVsQAAAAIA"]
[Sun Nov 23 16:35:28.611645 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.9:49135] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSLHUNiQFwsyXQDhwyCJZQAAAQM"]
[Sun Nov 23 16:35:28.797569 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.24:45363] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aSLHUE8WZjXLvbHTHPeP1wAAANU"]
[Sun Nov 23 16:35:29.857679 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.68:25909] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSLHUdiQFwsyXQDhwyCJeQAAARg"]
[Sun Nov 23 16:35:30.289612 2025] [proxy_fcgi:error] [pid 38738:tid 38761] [client 140.99.1.71:29121] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:30.741939 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.71:29121] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSLHUgytc6TL9XavPmPQ-wAAAAg"]
[Sun Nov 23 16:35:30.930878 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.75:46939] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSLHUg13QPZSi6O8umVspAAAAIg"]
[Sun Nov 23 16:35:31.567396 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.73:38673] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSLHU9iQFwsyXQDhwyCJpAAAARA"]
[Sun Nov 23 16:35:32.784726 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.7:22727] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSLHVA13QPZSi6O8umVsxAAAAJU"]
[Sun Nov 23 16:35:33.740751 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.18:46775] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSLHVU8WZjXLvbHTHPeQTwAAANU"]
[Sun Nov 23 16:35:33.978689 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.70:50407] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSLHVU8WZjXLvbHTHPeQVwAAAMU"]
[Sun Nov 23 16:35:34.716455 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.74:44227] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSLHVk8WZjXLvbHTHPeQcQAAANA"]
[Sun Nov 23 16:35:34.983436 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.78:58903] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSLHVgdvEgJm2n2cDmoCVgAAAFg"]
[Sun Nov 23 16:35:35.201198 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.52:50007] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSLHVw13QPZSi6O8umVs_gAAAIc"]
[Sun Nov 23 16:35:36.182234 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.65:30537] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSLHWA13QPZSi6O8umVtIwAAAIA"]
[Sun Nov 23 16:35:36.577430 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.27:53605] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSLHWE8WZjXLvbHTHPeQowAAAMo"]
[Sun Nov 23 16:35:37.760670 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.46:33431] [client 140.99.1.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.46, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aSLHWQ13QPZSi6O8umVtYgAAAIM"]
[Sun Nov 23 16:35:38.478394 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.46:33431] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSLHWg13QPZSi6O8umVtewAAAIE"]
[Sun Nov 23 16:35:38.677515 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.2:62171] [client 140.99.1.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.2, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSLHWg13QPZSi6O8umVtgwAAAJg"]
[Sun Nov 23 16:35:40.040819 2025] [proxy_fcgi:error] [pid 38740:tid 38811] [client 140.99.1.2:62171] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:41.875952 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.2:62171] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSLHXQ13QPZSi6O8umVuJAAAAJc"]
[Sun Nov 23 16:35:42.538470 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.9:24475] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSLHXg13QPZSi6O8umVuQAAAAJg"]
[Sun Nov 23 16:35:43.445733 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.8:62955] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSLHXw13QPZSi6O8umVuVAAAAIs"]
[Sun Nov 23 16:35:44.776848 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.16:41363] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSLHYNiQFwsyXQDhwyCLJAAAAQY"]
[Sun Nov 23 16:35:45.243040 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.16:39915] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSLHYQytc6TL9XavPmPTJQAAABc"]
[Sun Nov 23 16:35:45.747416 2025] [:error] [pid 38739:tid 38785] [client 140.99.1.7:35155] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSLHYQdvEgJm2n2cDmoDYQAAAFA"]
[Sun Nov 23 16:35:46.467607 2025] [proxy_fcgi:error] [pid 38738:tid 38765] [client 140.99.1.31:48573] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:46.602612 2025] [proxy_fcgi:error] [pid 38738:tid 38760] [client 140.99.1.31:48573] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:46.727955 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.31:48573] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSLHYgytc6TL9XavPmPTWgAAAA0"]
[Sun Nov 23 16:35:46.978235 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.7:25319] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSLHYgdvEgJm2n2cDmoDlAAAAEE"]
[Sun Nov 23 16:35:48.093514 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.20:37913] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSLHZAdvEgJm2n2cDmoD0gAAAFM"]
[Sun Nov 23 16:35:48.478694 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.75:58799] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aSLHZE8WZjXLvbHTHPeRuAAAAM8"]
[Sun Nov 23 16:35:49.069332 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.30:38169] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSLHZQ13QPZSi6O8umVvGgAAAIg"]
[Sun Nov 23 16:35:50.186793 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.67:52771] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSLHZk8WZjXLvbHTHPeR-wAAAMY"]
[Sun Nov 23 16:35:50.404606 2025] [proxy_fcgi:error] [pid 38824:tid 38842] [client 140.99.1.72:27453] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:50.857535 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.72:27453] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSLHZk8WZjXLvbHTHPeSEgAAAMw"]
[Sun Nov 23 16:35:51.702618 2025] [proxy_fcgi:error] [pid 44652:tid 44714] [client 140.99.1.14:52845] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:51.993231 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.14:52845] [client 140.99.1.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.14, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSLHZ9iQFwsyXQDhwyCLywAAAQw"]
[Sun Nov 23 16:35:52.661488 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.14:52845] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSLHaNiQFwsyXQDhwyCL6gAAARg"]
[Sun Nov 23 16:35:52.961987 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.15:48971] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSLHaAytc6TL9XavPmPT4AAAABY"]
[Sun Nov 23 16:35:53.737978 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.63:41627] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSLHaQdvEgJm2n2cDmoEXAAAAFY"]
[Sun Nov 23 16:35:54.778370 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.33:30781] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSLHagdvEgJm2n2cDmoEcAAAAEU"]
[Sun Nov 23 16:35:55.263566 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.39:38057] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSLHawytc6TL9XavPmPUIwAAAA8"]
[Sun Nov 23 16:35:55.809182 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.38:38107] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSLHawytc6TL9XavPmPUOAAAAAo"]
[Sun Nov 23 16:35:56.380405 2025] [proxy_fcgi:error] [pid 38739:tid 38776] [client 140.99.1.50:57387] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:56.474673 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.50:57387] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSLHbAdvEgJm2n2cDmoEoQAAAEw"]
[Sun Nov 23 16:35:56.839155 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.5:45749] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSLHbAytc6TL9XavPmPURwAAAA0"]
[Sun Nov 23 16:35:57.037591 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.77:27229] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSLHbdiQFwsyXQDhwyCMegAAAQw"]
[Sun Nov 23 16:35:57.221333 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.3:35519] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSLHbQ13QPZSi6O8umVv4AAAAIE"]
[Sun Nov 23 16:35:57.431713 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.76:39629] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSLHbQdvEgJm2n2cDmoEuQAAAFU"]
[Sun Nov 23 16:35:57.666227 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.52:21459] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSLHbQytc6TL9XavPmPUYQAAAA4"]
[Sun Nov 23 16:35:57.881072 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.78:27833] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSLHbQdvEgJm2n2cDmoEwgAAAEM"]
[Sun Nov 23 16:35:58.902150 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.7:35597] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSLHbg13QPZSi6O8umVv_wAAAIw"]
[Sun Nov 23 16:35:59.200164 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.48:48315] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSLHb08WZjXLvbHTHPeTSgAAAMw"]
[Sun Nov 23 16:35:59.418965 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.67:29637] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSLHbw13QPZSi6O8umVwDQAAAIg"]
[Sun Nov 23 16:35:59.719098 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.13:33063] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSLHbwdvEgJm2n2cDmoE2AAAAEY"]
[Sun Nov 23 16:36:00.218695 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.5:45059] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSLHcAytc6TL9XavPmPUsQAAAAA"]
[Sun Nov 23 16:36:00.407607 2025] [proxy_fcgi:error] [pid 44652:tid 44712] [client 140.99.1.15:43463] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:00.940198 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.15:43463] [client 140.99.1.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.15, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSLHcNiQFwsyXQDhwyCM5QAAAQ0"]
[Sun Nov 23 16:36:01.586229 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.15:43463] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSLHcdiQFwsyXQDhwyCNAQAAARA"]
[Sun Nov 23 16:36:01.774360 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.15:60815] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSLHcQ13QPZSi6O8umVwPQAAAIY"]
[Sun Nov 23 16:36:07.982138 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.75:29111] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSLHd9iQFwsyXQDhwyCNngAAAQo"]
[Sun Nov 23 16:36:08.187333 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.2:51945] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSLHeAytc6TL9XavPmPVwgAAABU"]
[Sun Nov 23 16:36:08.496561 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.17:26595] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSLHeA13QPZSi6O8umVxIgAAAI4"]
[Sun Nov 23 16:36:09.483770 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.50:46695] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSLHeQytc6TL9XavPmPV7gAAAAA"]
[Sun Nov 23 16:36:09.723839 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.65:57895] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSLHediQFwsyXQDhwyCNxAAAAQ4"]
[Sun Nov 23 16:36:09.916473 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.43:53555] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSLHeU8WZjXLvbHTHPeU2QAAAMI"]
[Sun Nov 23 16:36:10.715855 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.33:24639] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSLHetiQFwsyXQDhwyCN5QAAAQw"]
[Sun Nov 23 16:36:11.037980 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.10:54715] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSLHe9iQFwsyXQDhwyCN7wAAAQ0"]
[Sun Nov 23 16:36:11.558786 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.11:27487] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSLHewytc6TL9XavPmPWLgAAAAE"]
[Sun Nov 23 16:36:13.178827 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.74:63601] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSLHfU8WZjXLvbHTHPeVMQAAAMo"]
[Sun Nov 23 16:36:13.601392 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.27:29257] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSLHfU8WZjXLvbHTHPeVQwAAANM"]
[Sun Nov 23 16:36:14.527507 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.75:35887] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSLHftiQFwsyXQDhwyCOZgAAARI"]
[Sun Nov 23 16:36:14.948924 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.30:23547] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSLHfgdvEgJm2n2cDmoG8gAAAEY"]
[Sun Nov 23 16:36:15.697665 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.65:50579] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSLHfwytc6TL9XavPmPW2AAAAAU"]
[Sun Nov 23 16:36:16.653008 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.18:36279] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSLHgAytc6TL9XavPmPW8wAAAAE"]
[Sun Nov 23 16:36:17.090083 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.71:30235] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSLHgU8WZjXLvbHTHPeVwwAAANc"]
[Sun Nov 23 16:36:17.274691 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.8:54197] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSLHgQdvEgJm2n2cDmoHTgAAAE0"]
[Sun Nov 23 16:36:18.108994 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.68:30455] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSLHggytc6TL9XavPmPXBgAAAAU"]
[Sun Nov 23 16:36:18.980938 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.63:27791] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSLHgk8WZjXLvbHTHPeWCQAAAMU"]
[Sun Nov 23 16:36:19.758615 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.32:58577] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSLHgwdvEgJm2n2cDmoHmAAAAEE"]
[Sun Nov 23 16:36:24.199261 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.30:21141] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSLHiE8WZjXLvbHTHPeWgwAAAMQ"]
[Sun Nov 23 16:36:24.764229 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.5:61315] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSLHiA13QPZSi6O8umVzAwAAAJE"]
[Sun Nov 23 16:36:25.304663 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.75:25181] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSLHiQdvEgJm2n2cDmoITAAAAFY"]
[Sun Nov 23 16:36:25.531356 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.31:35709] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSLHiQdvEgJm2n2cDmoIWQAAAEM"]
[Sun Nov 23 16:36:26.491994 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.37:22463] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSLHik8WZjXLvbHTHPeWyQAAANM"]
[Sun Nov 23 16:36:26.953191 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.17:36839] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSLHik8WZjXLvbHTHPeW1wAAAM4"]
[Sun Nov 23 16:36:27.168502 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.68:24999] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSLHi9iQFwsyXQDhwyCPagAAAQc"]
[Sun Nov 23 16:36:27.629544 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.17:46677] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSLHiwdvEgJm2n2cDmoIsAAAAE8"]
[Sun Nov 23 16:36:27.966618 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.2:29581] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSLHiwdvEgJm2n2cDmoIwQAAAE8"]
[Sun Nov 23 16:36:28.793015 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.38:22183] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSLHjAytc6TL9XavPmPYewAAABg"]
[Sun Nov 23 16:36:29.274704 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.71:38027] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSLHjQ13QPZSi6O8umVzkgAAAI8"]
[Sun Nov 23 16:36:29.782059 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.31:58293] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSLHjdiQFwsyXQDhwyCPtgAAAQM"]
[Sun Nov 23 16:36:30.117165 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.50:27029] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSLHjgytc6TL9XavPmPYrgAAABA"]
[Sun Nov 23 16:36:30.543524 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.67:20407] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSLHjgdvEgJm2n2cDmoJQAAAAE4"]
[Sun Nov 23 16:36:30.829799 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.33:61769] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSLHjk8WZjXLvbHTHPeXHQAAAMU"]
[Sun Nov 23 16:36:31.145650 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.24:60213] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSLHjw13QPZSi6O8umVzvgAAAIc"]
[Sun Nov 23 16:36:32.216141 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.69:25955] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSLHkA13QPZSi6O8umVz1QAAAIM"]
[Sun Nov 23 16:36:32.863565 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.39:27167] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSLHkA13QPZSi6O8umVz8AAAAII"]
[Sun Nov 23 16:36:33.392528 2025] [:error] [pid 44652:tid 44722] [client 140.99.1.68:34653] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSLHkdiQFwsyXQDhwyCP9wAAARA"]
[Sun Nov 23 16:36:34.015162 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.53:56391] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSLHkk8WZjXLvbHTHPeXlAAAAM8"]
[Sun Nov 23 16:36:35.206707 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.72:48777] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSLHkwdvEgJm2n2cDmoKFgAAAEo"]
[Sun Nov 23 16:36:35.558013 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.30:22059] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSLHk08WZjXLvbHTHPeXugAAAMc"]
[Sun Nov 23 16:36:36.005008 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.65:32229] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSLHlA13QPZSi6O8umV0UAAAAI4"]
[Sun Nov 23 16:36:36.474039 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.28:65021] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSLHlAytc6TL9XavPmPZeQAAABA"]
[Sun Nov 23 16:36:37.769490 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.47:36327] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSLHldiQFwsyXQDhwyCQhAAAAQQ"]
[Sun Nov 23 16:36:37.981448 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.30:53645] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSLHlQytc6TL9XavPmPZlQAAAAY"]
[Sun Nov 23 16:36:38.635927 2025] [:error] [pid 38824:tid 38835] [client 140.99.1.37:45939] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSLHlk8WZjXLvbHTHPeYIQAAAMg"]
[Sun Nov 23 16:36:38.884340 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.30:52721] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSLHlgdvEgJm2n2cDmoKaQAAAEY"]
[Sun Nov 23 16:36:39.417792 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.30:37959] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSLHlw13QPZSi6O8umV0ugAAAIQ"]
[Sun Nov 23 16:36:39.609254 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.33:55221] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSLHlwdvEgJm2n2cDmoKdgAAAEo"]
[Sun Nov 23 16:36:39.810868 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.68:29063] [client 140.99.1.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.68, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSLHlwdvEgJm2n2cDmoKfgAAAE8"]
[Sun Nov 23 16:36:39.827606 2025] [proxy_fcgi:error] [pid 38739:tid 38784] [client 140.99.1.68:29063] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:40.020092 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.68:29063] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSLHlwdvEgJm2n2cDmoKgwAAAEU"]
[Sun Nov 23 16:36:40.616784 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.52:49247] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSLHmA13QPZSi6O8umV04QAAAI0"]
[Sun Nov 23 16:36:41.330275 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.42:37379] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSLHmQ13QPZSi6O8umV09wAAAJQ"]
[Sun Nov 23 16:36:42.495795 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.77:60607] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSLHmg13QPZSi6O8umV1EwAAAI0"]
[Sun Nov 23 16:36:42.864911 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.74:63485] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSLHmtiQFwsyXQDhwyCQ-gAAARQ"]
[Sun Nov 23 16:36:43.350106 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.53:52873] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSLHm9iQFwsyXQDhwyCRFwAAARM"]
[Sun Nov 23 16:36:43.642079 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.5:45569] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSLHm08WZjXLvbHTHPeYggAAANg"]
[Sun Nov 23 16:36:43.849642 2025] [proxy_fcgi:error] [pid 38740:tid 38804] [client 140.99.1.47:51557] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:43.958906 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.47:51557] [client 140.99.1.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.47, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSLHmw13QPZSi6O8umV1TgAAAIs"]
[Sun Nov 23 16:36:44.241337 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.47:51557] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSLHnA13QPZSi6O8umV1WQAAAIk"]
[Sun Nov 23 16:36:44.929621 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.32:29441] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSLHnAdvEgJm2n2cDmoKyAAAAFY"]
[Sun Nov 23 16:36:45.243935 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.67:59099] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSLHnQytc6TL9XavPmPafgAAABc"]
[Sun Nov 23 16:36:45.487489 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.42:58819] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSLHnU8WZjXLvbHTHPeYrwAAAMY"]
[Sun Nov 23 16:36:47.121943 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.65:48637] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSLHnw13QPZSi6O8umV1iQAAAI0"]
[Sun Nov 23 16:36:47.551697 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.65:22987] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSLHnwytc6TL9XavPmPa5AAAABU"]
[Sun Nov 23 16:36:48.355019 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.38:63499] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSLHoNiQFwsyXQDhwyCRtAAAAQo"]
[Sun Nov 23 16:36:48.558024 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.78:37051] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSLHoNiQFwsyXQDhwyCRwQAAAQ8"]
[Sun Nov 23 16:36:48.969044 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.13:33639] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSLHoAdvEgJm2n2cDmoLIQAAAEo"]
[Sun Nov 23 16:36:49.894139 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.42:44413] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSLHoQdvEgJm2n2cDmoLNwAAAFI"]
[Sun Nov 23 16:36:50.553590 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.69:45117] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSLHok8WZjXLvbHTHPeZEwAAAMo"]
[Sun Nov 23 16:36:50.645469 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.69:45117] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSLHok8WZjXLvbHTHPeZGAAAANM"]
[Sun Nov 23 16:36:51.144744 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.71:55947] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSLHo08WZjXLvbHTHPeZKQAAANc"]
[Sun Nov 23 16:36:51.449990 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.20:37345] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSLHo9iQFwsyXQDhwyCSIQAAARI"]
[Sun Nov 23 16:36:52.342378 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.71:39479] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSLHpAytc6TL9XavPmPbgQAAAAg"]
[Sun Nov 23 16:36:52.828514 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.6:45213] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSLHpNiQFwsyXQDhwyCSRQAAAQc"]
[Sun Nov 23 16:36:53.162749 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.46:37829] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSLHpU8WZjXLvbHTHPeZVwAAAMY"]
[Sun Nov 23 16:36:54.104801 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.14:55665] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSLHptiQFwsyXQDhwyCSZwAAAQU"]
[Sun Nov 23 16:36:54.490778 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.49:37129] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSLHpgdvEgJm2n2cDmoLtQAAAEA"]
[Sun Nov 23 16:36:54.912367 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.28:37621] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSLHpgytc6TL9XavPmPbtgAAAAI"]
[Sun Nov 23 16:36:55.202565 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.74:28721] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSLHpwytc6TL9XavPmPbwQAAABY"]
[Sun Nov 23 16:36:55.591982 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.10:44513] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSLHp08WZjXLvbHTHPeZhgAAANc"]
[Sun Nov 23 16:36:56.462864 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.48:45137] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSLHqAytc6TL9XavPmPb3gAAAA8"]
[Sun Nov 23 16:36:56.663849 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.76:59503] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSLHqAdvEgJm2n2cDmoL8wAAAFY"]
[Sun Nov 23 16:36:57.624191 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.8:56935] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSLHqQytc6TL9XavPmPb_gAAAAA"]
[Sun Nov 23 16:36:58.080666 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.16:22085] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSLHqk8WZjXLvbHTHPeZyAAAANE"]
[Sun Nov 23 16:36:58.678739 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.76:57685] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSLHqtiQFwsyXQDhwyCS8wAAARE"]
[Sun Nov 23 16:36:58.862014 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.70:27175] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSLHqgdvEgJm2n2cDmoMOwAAAEE"]
[Sun Nov 23 16:37:02.929540 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.70:36979] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSLHrg13QPZSi6O8umV25wAAAJc"]
[Sun Nov 23 16:37:03.401721 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.48:28635] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSLHr9iQFwsyXQDhwyCTggAAAQU"]
[Sun Nov 23 16:37:03.825314 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.37:38333] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSLHr08WZjXLvbHTHPeaPwAAAMs"]
[Sun Nov 23 16:37:05.076307 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.63:26739] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSLHsQytc6TL9XavPmPc2gAAAAY"]
[Sun Nov 23 16:37:05.398111 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.43:24443] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSLHsU8WZjXLvbHTHPeaWwAAANY"]
[Sun Nov 23 16:37:05.666062 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.37:36185] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSLHsQdvEgJm2n2cDmoNDAAAAE8"]
[Sun Nov 23 16:37:06.106957 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.49:63913] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSLHsgdvEgJm2n2cDmoNHAAAAEU"]
[Sun Nov 23 16:37:06.412024 2025] [:error] [pid 44652:tid 44717] [client 140.99.1.17:58325] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSLHstiQFwsyXQDhwyCT3AAAAQs"]
[Sun Nov 23 16:37:06.722015 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.76:45229] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSLHsk8WZjXLvbHTHPeafQAAAM0"]
[Sun Nov 23 16:37:06.957918 2025] [:error] [pid 38739:tid 38773] [client 140.99.1.62:59421] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSLHsgdvEgJm2n2cDmoNNQAAAEQ"]
[Sun Nov 23 16:37:07.557414 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.75:60575] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSLHsw13QPZSi6O8umV3XQAAAIQ"]
[Sun Nov 23 16:37:08.175005 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.27:24201] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSLHtAdvEgJm2n2cDmoNUgAAAFE"]
[Sun Nov 23 16:37:08.489991 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.27:48367] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSLHtA13QPZSi6O8umV3bQAAAIM"]
[Sun Nov 23 16:37:08.799463 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.5:55211] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSLHtNiQFwsyXQDhwyCUQgAAARM"]
[Sun Nov 23 16:37:09.630295 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.3:42547] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSLHtQytc6TL9XavPmPdeQAAAAY"]
[Sun Nov 23 16:37:09.875992 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.30:35239] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSLHtQ13QPZSi6O8umV3jgAAAIQ"]
[Sun Nov 23 16:37:10.296042 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.8:62015] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSLHtgdvEgJm2n2cDmoNrQAAAE4"]
[Sun Nov 23 16:37:11.959629 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.48:25325] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSLHt08WZjXLvbHTHPebDAAAAMA"]
[Sun Nov 23 16:37:12.428032 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.42:42207] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSLHuAytc6TL9XavPmPdvwAAAA8"]
[Sun Nov 23 16:37:12.963397 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.3:49441] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSLHuE8WZjXLvbHTHPebHwAAANU"]
[Sun Nov 23 16:37:13.356615 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.2:32607] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSLHudiQFwsyXQDhwyCUxgAAAQ8"]
[Sun Nov 23 16:37:13.757263 2025] [:error] [pid 38739:tid 38785] [client 140.99.1.5:33143] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSLHuQdvEgJm2n2cDmoOCgAAAFA"]
[Sun Nov 23 16:37:14.385980 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.78:47903] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSLHugdvEgJm2n2cDmoOJgAAAEU"]
[Sun Nov 23 16:37:15.025777 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.31:35597] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSLHuwdvEgJm2n2cDmoOMwAAAEw"]
[Sun Nov 23 16:37:15.239612 2025] [proxy_fcgi:error] [pid 38739:tid 38791] [client 140.99.1.74:50963] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:37:15.381263 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.74:50963] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSLHuwdvEgJm2n2cDmoOQAAAAFU"]
[Sun Nov 23 16:37:15.630766 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.47:31323] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSLHu08WZjXLvbHTHPebWwAAAMw"]
[Sun Nov 23 16:37:16.114712 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.13:46889] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSLHvAdvEgJm2n2cDmoOWQAAAE4"]
[Sun Nov 23 16:37:16.408299 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.43:54839] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSLHvAdvEgJm2n2cDmoOYAAAAE0"]
[Sun Nov 23 16:37:17.293908 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.11:49883] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSLHvQdvEgJm2n2cDmoOdwAAAEg"]
[Sun Nov 23 16:37:17.518617 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.38:37949] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSLHvQytc6TL9XavPmPePAAAABU"]
[Sun Nov 23 16:37:17.874266 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.71:26383] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSLHvdiQFwsyXQDhwyCVLgAAAQM"]
[Sun Nov 23 16:37:18.117828 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.28:34573] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSLHvk8WZjXLvbHTHPebnwAAAMI"]
[Sun Nov 23 16:37:18.305529 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.28:20027] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSLHvgdvEgJm2n2cDmoOjwAAAEA"]
[Sun Nov 23 16:37:18.508925 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.74:63139] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSLHvk8WZjXLvbHTHPebswAAAMw"]
[Sun Nov 23 16:37:22.264400 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.76:31705] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSLHwtiQFwsyXQDhwyCVlQAAAQA"]
[Sun Nov 23 16:37:22.448608 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.7:28881] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSLHwgytc6TL9XavPmPe2QAAAAo"]
[Sun Nov 23 16:37:22.950606 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.73:39361] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSLHwgytc6TL9XavPmPe6wAAAAI"]
[Sun Nov 23 16:37:23.255416 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.49:39267] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSLHwwdvEgJm2n2cDmoPCQAAAFQ"]
[Sun Nov 23 16:37:23.791954 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.28:46869] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSLHw08WZjXLvbHTHPecNAAAAM8"]
[Sun Nov 23 16:37:24.055895 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.43:59687] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSLHxA13QPZSi6O8umV5UAAAAIE"]
[Sun Nov 23 16:37:25.144322 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.31:20039] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSLHxQ13QPZSi6O8umV5mAAAAIk"]
[Sun Nov 23 16:37:25.326414 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.43:64329] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSLHxdiQFwsyXQDhwyCV1QAAARU"]
[Sun Nov 23 16:37:25.721271 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.26:45011] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSLHxQytc6TL9XavPmPfJQAAAAw"]
[Sun Nov 23 16:37:26.123414 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.26:64883] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSLHxgytc6TL9XavPmPfNgAAAAI"]
[Sun Nov 23 16:37:26.469775 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.50:24933] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSLHxg13QPZSi6O8umV51wAAAJI"]
[Sun Nov 23 16:37:26.653594 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.74:50413] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSLHxgdvEgJm2n2cDmoPZQAAAFM"]
[Sun Nov 23 16:37:26.918828 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.10:39945] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSLHxtiQFwsyXQDhwyCWBAAAARY"]
[Sun Nov 23 16:37:27.544002 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.2:31107] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSLHxwdvEgJm2n2cDmoPfgAAAEc"]
[Sun Nov 23 16:37:27.931202 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.14:42121] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSLHx9iQFwsyXQDhwyCWIwAAAQ4"]
[Sun Nov 23 16:37:28.598343 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.77:54367] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSLHyAdvEgJm2n2cDmoPmAAAAEU"]
[Sun Nov 23 16:37:28.804228 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.7:59701] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSLHyNiQFwsyXQDhwyCWNwAAARY"]
[Sun Nov 23 16:37:29.185795 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.75:31615] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSLHyQytc6TL9XavPmPfjwAAAA8"]
[Sun Nov 23 16:37:30.642931 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.16:32015] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSLHyg13QPZSi6O8umV6ewAAAIM"]
[Sun Nov 23 16:37:31.114916 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.33:61291] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSLHy08WZjXLvbHTHPecvgAAANg"]
[Sun Nov 23 16:37:31.652449 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.26:49195] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSLHywytc6TL9XavPmPf3gAAAAo"]
[Sun Nov 23 16:37:31.868517 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.14:63529] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSLHywytc6TL9XavPmPf5QAAAAs"]
[Sun Nov 23 16:37:32.084088 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.77:52659] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSLHzE8WZjXLvbHTHPeczgAAANc"]
[Sun Nov 23 16:37:46.995080 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.18:54591] [client 140.99.1.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/modules/"] [unique_id "aSLH2g13QPZSi6O8umV8KQAAAIU"]
[Sun Nov 23 16:45:53.375983 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.30:46029] [client 140.99.1.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aSLJwQ13QPZSi6O8umWnpAAAAIY"]
[Sun Nov 23 16:45:53.608045 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.30:59745] [client 140.99.1.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aSLJwQytc6TL9XavPmMKywAAAAw"]
[Sun Nov 23 16:45:58.759931 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.6:33947] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLJxgdvEgJm2n2cDmo3qgAAAFU"]
[Sun Nov 23 16:45:59.417384 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.38:35133] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLJxwytc6TL9XavPmMLLwAAAA0"]
[Sun Nov 23 16:46:00.805178 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.69:46037] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLJyAdvEgJm2n2cDmo3xwAAAEM"]
[Sun Nov 23 16:46:01.412483 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.47:20089] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLJyfq-c47Q5mW5E9F5qQAAAZU"]
[Sun Nov 23 16:46:01.718200 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.71:46049] [client 140.99.1.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aSLJyU8WZjXLvbHTHPfB8QAAANA"]
[Sun Nov 23 16:46:02.639107 2025] [:error] [pid 17534:tid 17556] [client 140.99.1.14:30991] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLJynPX9nXBrhgM8swrWgAAAdQ"]
[Sun Nov 23 16:46:03.063018 2025] [:error] [pid 44652:tid 44706] [client 140.99.1.5:22851] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLJy9iQFwsyXQDhwyC8fQAAAQA"]
[Sun Nov 23 16:46:03.374802 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.26:40273] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLJy9iQFwsyXQDhwyC8iwAAARg"]
[Sun Nov 23 16:46:03.584972 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.71:22219] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLJyw13QPZSi6O8umWoTAAAAIE"]
[Sun Nov 23 16:46:03.809817 2025] [:error] [pid 17534:tid 17540] [client 140.99.1.71:56997] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLJy3PX9nXBrhgM8swrdQAAAcQ"]
[Sun Nov 23 16:46:04.072242 2025] [:error] [pid 17534:tid 17547] [client 140.99.1.44:52467] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLJzHPX9nXBrhgM8swrfQAAAcs"]
[Sun Nov 23 16:46:04.399053 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.32:37753] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLJzAytc6TL9XavPmMLmAAAABg"]
[Sun Nov 23 16:46:05.011512 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.39:62545] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aSLJzfq-c47Q5mW5E9F51gAAAZA"]
[Sun Nov 23 16:46:05.550087 2025] [:error] [pid 14602:tid 14627] [client 140.99.1.32:40677] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLJzR-I77jdD81pU-mmLAAAAUY"]
[Sun Nov 23 16:46:05.883064 2025] [:error] [pid 16066:tid 16090] [client 140.99.1.27:23347] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLJzfq-c47Q5mW5E9F55wAAAZU"]
[Sun Nov 23 16:46:06.291066 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.11:37959] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLJzg13QPZSi6O8umWohgAAAIk"]
[Sun Nov 23 16:46:07.496050 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.49:23507] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLJz9iQFwsyXQDhwyC8-AAAAQc"]
[Sun Nov 23 16:46:07.843009 2025] [:error] [pid 16066:tid 16081] [client 140.99.1.17:55919] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLJz_q-c47Q5mW5E9F6BQAAAYw"]
[Sun Nov 23 16:46:08.283319 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.69:50583] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLJ0NiQFwsyXQDhwyC9CQAAAQc"]
[Sun Nov 23 16:46:08.667687 2025] [:error] [pid 17534:tid 17538] [client 140.99.1.26:61703] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLJ0HPX9nXBrhgM8swr2QAAAcI"]
[Sun Nov 23 16:46:09.489896 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.63:65035] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLJ0Q13QPZSi6O8umWoxwAAAIk"]
[Sun Nov 23 16:46:10.563900 2025] [:error] [pid 17534:tid 17558] [client 140.99.1.27:61435] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLJ0nPX9nXBrhgM8swr-gAAAdY"]
[Sun Nov 23 16:46:10.899036 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.78:26425] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLJ0gdvEgJm2n2cDmo4RwAAAE4"]
[Sun Nov 23 16:46:11.217662 2025] [:error] [pid 38739:tid 38780] [client 140.99.1.13:34999] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLJ0wdvEgJm2n2cDmo4TQAAAEs"]
[Sun Nov 23 16:46:11.494733 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.9:53963] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLJ0wdvEgJm2n2cDmo4UAAAAE8"]
[Sun Nov 23 16:46:12.141327 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.30:38465] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLJ1Aytc6TL9XavPmMMKgAAAAk"]
[Sun Nov 23 16:46:12.327175 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.26:48423] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLJ1A13QPZSi6O8umWo6AAAAI8"]
[Sun Nov 23 16:46:12.569019 2025] [:error] [pid 17534:tid 17560] [client 140.99.1.17:42673] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLJ1HPX9nXBrhgM8swsJQAAAdg"]
[Sun Nov 23 16:46:14.063029 2025] [:error] [pid 17534:tid 17550] [client 140.99.1.74:48017] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLJ1nPX9nXBrhgM8swsTgAAAc4"]
[Sun Nov 23 16:46:15.046906 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.6:28901] [client 140.99.1.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.6, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLJ108WZjXLvbHTHPfCbgAAAMI"]
[Sun Nov 23 16:46:16.644790 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.6:28901] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLJ2E8WZjXLvbHTHPfCjAAAAMs"]
[Sun Nov 23 16:46:17.119449 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.11:24575] [client 140.99.1.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.11, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLJ2U8WZjXLvbHTHPfCkQAAAM4"]
[Sun Nov 23 16:46:17.370607 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.11:24575] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLJ2U8WZjXLvbHTHPfClgAAANY"]
[Sun Nov 23 16:46:18.718669 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.24:43533] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLJ2k8WZjXLvbHTHPfCtAAAAM8"]
[Sun Nov 23 16:46:19.984704 2025] [:error] [pid 38824:tid 38835] [client 140.99.1.2:38209] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLJ208WZjXLvbHTHPfCzgAAAMg"]
[Sun Nov 23 16:46:21.154778 2025] [:error] [pid 44652:tid 44727] [client 140.99.1.71:60309] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLJ3diQFwsyXQDhwyC9eQAAARU"]
[Sun Nov 23 16:46:21.740679 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.47:53741] [client 140.99.1.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.47, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLJ3U8WZjXLvbHTHPfC2wAAAMk"]
[Sun Nov 23 16:46:22.940983 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.47:53741] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLJ3k8WZjXLvbHTHPfC6gAAAME"]
[Sun Nov 23 16:46:25.468721 2025] [:error] [pid 17534:tid 17539] [client 140.99.1.63:50903] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLJ4XPX9nXBrhgM8swtPgAAAcM"]
[Sun Nov 23 16:46:33.344452 2025] [:error] [pid 16066:tid 16082] [client 140.99.1.42:33709] [client 140.99.1.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.42, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLJ6fq-c47Q5mW5E9F75AAAAY0"]
[Sun Nov 23 16:46:34.164004 2025] [:error] [pid 16066:tid 16077] [client 140.99.1.42:33709] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLJ6vq-c47Q5mW5E9F7_wAAAYg"]
[Sun Nov 23 16:46:34.728443 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.8:31167] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLJ6g13QPZSi6O8umWqBgAAAIY"]
[Sun Nov 23 16:46:35.276077 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.63:40603] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLJ6wdvEgJm2n2cDmo6UAAAAE4"]
[Sun Nov 23 16:46:35.980978 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.11:26809] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLJ69iQFwsyXQDhwyC-DwAAAQg"]
[Sun Nov 23 16:46:36.372104 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.38:26997] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLJ7NiQFwsyXQDhwyC-EgAAARg"]
[Sun Nov 23 16:46:44.413903 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.77:60151] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLJ9B-I77jdD81pU-moTwAAAVY"]
[Sun Nov 23 16:46:44.930935 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.5:40927] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLJ9HPX9nXBrhgM8swvcAAAAcw"]
[Sun Nov 23 16:46:45.658266 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.15:45247] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLJ9diQFwsyXQDhwyC-vgAAARY"]
[Sun Nov 23 16:46:46.350793 2025] [:error] [pid 17534:tid 17542] [client 140.99.1.13:33737] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLJ9nPX9nXBrhgM8swvjwAAAcY"]
[Sun Nov 23 16:46:46.849660 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.52:54247] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLJ9g13QPZSi6O8umWqtwAAAIM"]
[Sun Nov 23 17:06:44.973053 2025] [proxy_fcgi:error] [pid 16066:tid 16093] [client 13.70.85.214:18322] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:06:45.012609 2025] [:error] [pid 16066:tid 16086] [client 13.70.85.214:18322] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSLOpfq-c47Q5mW5E9GW1wAAAZE"]
[Sun Nov 23 17:06:46.065058 2025] [:error] [pid 44652:tid 44719] [client 13.70.85.214:18419] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aSLOptiQFwsyXQDhwyDdIQAAAQ0"]
[Sun Nov 23 17:06:47.093151 2025] [:error] [pid 16066:tid 16080] [client 13.70.85.214:18305] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aSLOp_q-c47Q5mW5E9GW3AAAAYs"]
[Sun Nov 23 17:06:47.962560 2025] [:error] [pid 44652:tid 44723] [client 13.70.85.214:18397] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aSLOp9iQFwsyXQDhwyDdIgAAARE"]
[Sun Nov 23 17:06:48.907136 2025] [:error] [pid 44652:tid 44728] [client 13.70.85.214:18385] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aSLOqNiQFwsyXQDhwyDdJAAAARY"]
[Sun Nov 23 17:06:50.823038 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:18318] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aSLOqg13QPZSi6O8umXEugAAAJI"]
[Sun Nov 23 17:06:52.250162 2025] [:error] [pid 16066:tid 16072] [client 13.70.85.214:18394] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aSLOrPq-c47Q5mW5E9GW4AAAAYM"]
[Sun Nov 23 17:06:54.102053 2025] [:error] [pid 44652:tid 44707] [client 13.70.85.214:18366] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aSLOrtiQFwsyXQDhwyDdMAAAAQE"]
[Sun Nov 23 17:06:56.098622 2025] [:error] [pid 17534:tid 17537] [client 13.70.85.214:18415] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aSLOsHPX9nXBrhgM8sxTBgAAAcE"]
[Sun Nov 23 17:06:57.020159 2025] [:error] [pid 16066:tid 16093] [client 13.70.85.214:18383] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aSLOsfq-c47Q5mW5E9GW5AAAAZg"]
[Sun Nov 23 17:06:57.969391 2025] [:error] [pid 16066:tid 16088] [client 13.70.85.214:18315] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aSLOsfq-c47Q5mW5E9GW5gAAAZM"]
[Sun Nov 23 17:06:59.234835 2025] [:error] [pid 16066:tid 16087] [client 13.70.85.214:18324] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aSLOs_q-c47Q5mW5E9GW6gAAAZI"]
[Sun Nov 23 17:06:59.873909 2025] [:error] [pid 16066:tid 16076] [client 13.70.85.214:18390] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aSLOs_q-c47Q5mW5E9GW6wAAAYc"]
[Sun Nov 23 17:07:00.616001 2025] [:error] [pid 44652:tid 44724] [client 13.70.85.214:18409] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aSLOtNiQFwsyXQDhwyDdMwAAARI"]
[Sun Nov 23 17:07:01.485067 2025] [:error] [pid 38739:tid 38790] [client 13.70.85.214:18344] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aSLOtQdvEgJm2n2cDmpRXAAAAFU"]
[Sun Nov 23 17:07:02.667960 2025] [:error] [pid 44652:tid 44723] [client 13.70.85.214:18310] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aSLOttiQFwsyXQDhwyDdNQAAARE"]
[Sun Nov 23 17:07:04.418893 2025] [:error] [pid 44652:tid 44725] [client 13.70.85.214:18388] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aSLOuNiQFwsyXQDhwyDdNwAAARM"]
[Sun Nov 23 17:07:04.947593 2025] [:error] [pid 38739:tid 38782] [client 13.70.85.214:18380] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aSLOuAdvEgJm2n2cDmpRXQAAAE0"]
[Sun Nov 23 17:07:05.201731 2025] [:error] [pid 44652:tid 44730] [client 13.70.85.214:18420] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aSLOudiQFwsyXQDhwyDdOQAAARg"]
[Sun Nov 23 17:07:05.698936 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:18411] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aSLOuU8WZjXLvbHTHPfbSgAAAME"]
[Sun Nov 23 17:07:06.843774 2025] [:error] [pid 14602:tid 14631] [client 13.70.85.214:18405] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aSLOuh-I77jdD81pU-nD8gAAAUo"]
[Sun Nov 23 17:07:07.407391 2025] [:error] [pid 16066:tid 16072] [client 13.70.85.214:18384] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aSLOu_q-c47Q5mW5E9GW7gAAAYM"]
[Sun Nov 23 17:07:08.062955 2025] [:error] [pid 38824:tid 38827] [client 13.70.85.214:18309] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aSLOvE8WZjXLvbHTHPfbTQAAAMA"]
[Sun Nov 23 17:07:08.897403 2025] [:error] [pid 38739:tid 38771] [client 13.70.85.214:18279] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aSLOvAdvEgJm2n2cDmpRYAAAAEI"]
[Sun Nov 23 17:07:09.832231 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:18339] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aSLOvQ13QPZSi6O8umXEzAAAAJI"]
[Sun Nov 23 17:07:11.159261 2025] [:error] [pid 17534:tid 17545] [client 13.70.85.214:18427] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aSLOv3PX9nXBrhgM8sxTJgAAAck"]
[Sun Nov 23 17:07:11.573464 2025] [:error] [pid 38824:tid 38849] [client 13.70.85.214:18428] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aSLOv08WZjXLvbHTHPfbUQAAANY"]
[Sun Nov 23 17:07:13.120255 2025] [:error] [pid 44652:tid 44708] [client 13.70.85.214:18336] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aSLOwdiQFwsyXQDhwyDdUQAAAQI"]
[Sun Nov 23 17:07:13.740340 2025] [:error] [pid 38740:tid 38818] [client 13.70.85.214:18407] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aSLOwQ13QPZSi6O8umXE0AAAAJY"]
[Sun Nov 23 17:07:14.907815 2025] [:error] [pid 38824:tid 38848] [client 13.70.85.214:18413] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aSLOwk8WZjXLvbHTHPfbWAAAANU"]
[Sun Nov 23 17:07:15.723395 2025] [:error] [pid 38740:tid 38799] [client 13.70.85.214:18379] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cok.php"] [unique_id "aSLOww13QPZSi6O8umXE0QAAAIM"]
[Sun Nov 23 17:07:16.829450 2025] [:error] [pid 38739:tid 38787] [client 13.70.85.214:18429] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cok.php"] [unique_id "aSLOxAdvEgJm2n2cDmpRdQAAAFI"]
[Sun Nov 23 17:07:18.972401 2025] [:error] [pid 17534:tid 17540] [client 13.70.85.214:18323] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cok.php"] [unique_id "aSLOxnPX9nXBrhgM8sxTNwAAAcQ"]
[Sun Nov 23 17:07:20.335235 2025] [:error] [pid 38824:tid 38827] [client 13.70.85.214:18382] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cok.php"] [unique_id "aSLOyE8WZjXLvbHTHPfbXQAAAMA"]
[Sun Nov 23 17:07:21.034743 2025] [:error] [pid 38739:tid 38793] [client 13.70.85.214:18274] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aSLOyQdvEgJm2n2cDmpReAAAAFg"]
[Sun Nov 23 17:07:23.967626 2025] [:error] [pid 17534:tid 17560] [client 13.70.85.214:18325] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aSLOy3PX9nXBrhgM8sxTSQAAAdg"]
[Sun Nov 23 17:07:24.889389 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:18371] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aSLOzA13QPZSi6O8umXE0gAAAIA"]
[Sun Nov 23 17:07:25.684681 2025] [:error] [pid 38824:tid 38832] [client 13.70.85.214:18304] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aSLOzU8WZjXLvbHTHPfbXgAAAMU"]
[Sun Nov 23 17:07:28.894330 2025] [:error] [pid 14602:tid 14644] [client 13.70.85.214:18426] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aSLO0B-I77jdD81pU-nEAgAAAVc"]
[Sun Nov 23 17:07:29.906702 2025] [:error] [pid 38740:tid 38805] [client 13.70.85.214:18343] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aSLO0Q13QPZSi6O8umXE1wAAAIk"]
[Sun Nov 23 17:07:30.970857 2025] [:error] [pid 38738:tid 38756] [client 13.70.85.214:18406] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aSLO0gytc6TL9XavPmMmmQAAAA4"]
[Sun Nov 23 17:07:32.744574 2025] [:error] [pid 16066:tid 16070] [client 13.70.85.214:18330] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aSLO1Pq-c47Q5mW5E9GXAgAAAYE"]
[Sun Nov 23 17:07:33.089461 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:18321] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fh26.php"] [unique_id "aSLO1Qytc6TL9XavPmMmnQAAAAE"]
[Sun Nov 23 17:07:34.079234 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:18374] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fh26.php"] [unique_id "aSLO1gdvEgJm2n2cDmpRgAAAAEs"]
[Sun Nov 23 17:07:36.479812 2025] [:error] [pid 16066:tid 16082] [client 13.70.85.214:18306] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fh26.php"] [unique_id "aSLO2Pq-c47Q5mW5E9GXDAAAAY0"]
[Sun Nov 23 17:07:37.980263 2025] [:error] [pid 16066:tid 16083] [client 13.70.85.214:18326] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fh26.php"] [unique_id "aSLO2fq-c47Q5mW5E9GXFAAAAY4"]
[Sun Nov 23 17:07:38.202274 2025] [:error] [pid 38824:tid 38841] [client 13.70.85.214:18260] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aSLO2k8WZjXLvbHTHPfbbgAAAM4"]
[Sun Nov 23 17:07:38.926845 2025] [:error] [pid 44652:tid 44715] [client 13.70.85.214:18412] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aSLO2tiQFwsyXQDhwyDdfwAAAQk"]
[Sun Nov 23 17:07:40.102068 2025] [:error] [pid 38738:tid 38745] [client 13.70.85.214:18386] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aSLO3Aytc6TL9XavPmMmoAAAAAM"]
[Sun Nov 23 17:07:41.981042 2025] [:error] [pid 38824:tid 38832] [client 13.70.85.214:18317] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aSLO3U8WZjXLvbHTHPfbcQAAAMU"]
[Sun Nov 23 17:07:43.945185 2025] [:error] [pid 17534:tid 17536] [client 13.70.85.214:18316] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aSLO33PX9nXBrhgM8sxTbwAAAcA"]
[Sun Nov 23 17:07:46.451463 2025] [:error] [pid 14602:tid 14638] [client 13.70.85.214:18403] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aSLO4h-I77jdD81pU-nECQAAAVE"]
[Sun Nov 23 17:07:51.672303 2025] [:error] [pid 44652:tid 44714] [client 13.70.85.214:18369] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aSLO59iQFwsyXQDhwyDdpgAAAQg"]
[Sun Nov 23 17:07:54.007941 2025] [:error] [pid 38740:tid 38807] [client 13.70.85.214:18351] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aSLO6g13QPZSi6O8umXE8gAAAIs"]
[Sun Nov 23 17:07:54.964439 2025] [:error] [pid 17534:tid 17547] [client 13.70.85.214:18392] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aSLO6nPX9nXBrhgM8sxTfwAAAcs"]
[Sun Nov 23 17:07:55.898425 2025] [:error] [pid 14602:tid 14628] [client 13.70.85.214:18425] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aSLO6x-I77jdD81pU-nEDgAAAUc"]
[Sun Nov 23 17:07:59.879624 2025] [:error] [pid 38740:tid 38797] [client 13.70.85.214:18342] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aSLO7w13QPZSi6O8umXE9gAAAIE"]
[Sun Nov 23 17:08:01.328618 2025] [:error] [pid 38824:tid 38827] [client 13.70.85.214:18373] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aSLO8U8WZjXLvbHTHPfbfQAAAMA"]
[Sun Nov 23 17:08:06.115992 2025] [:error] [pid 44652:tid 44726] [client 13.70.85.214:18264] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aSLO9tiQFwsyXQDhwyDdugAAARQ"]
[Sun Nov 23 17:08:06.750750 2025] [:error] [pid 38824:tid 38851] [client 13.70.85.214:18381] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aSLO9k8WZjXLvbHTHPfbgQAAANg"]
[Sun Nov 23 17:08:07.932794 2025] [:error] [pid 44652:tid 44707] [client 13.70.85.214:18329] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aSLO99iQFwsyXQDhwyDdvAAAAQE"]
[Sun Nov 23 17:08:08.424240 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:18319] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aSLO-AdvEgJm2n2cDmpRoQAAAEs"]
[Sun Nov 23 17:08:09.801510 2025] [:error] [pid 17534:tid 17537] [client 13.70.85.214:18431] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aSLO-XPX9nXBrhgM8sxTsQAAAcE"]
[Sun Nov 23 17:08:10.119682 2025] [:error] [pid 16066:tid 16081] [client 13.70.85.214:18338] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aSLO-vq-c47Q5mW5E9GXPgAAAYw"]
[Sun Nov 23 17:08:10.942524 2025] [:error] [pid 16066:tid 16084] [client 13.70.85.214:18307] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSLO-vq-c47Q5mW5E9GXQAAAAY8"]
[Sun Nov 23 17:08:12.214719 2025] [:error] [pid 17534:tid 17547] [client 13.70.85.214:18242] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSLO_HPX9nXBrhgM8sxTuAAAAcs"]
[Sun Nov 23 17:08:13.382748 2025] [:error] [pid 44652:tid 44720] [client 13.70.85.214:18416] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSLO_diQFwsyXQDhwyDdvwAAAQ4"]
[Sun Nov 23 17:08:15.020624 2025] [:error] [pid 38824:tid 38847] [client 13.70.85.214:18257] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSLO_08WZjXLvbHTHPfbhgAAANQ"]
[Sun Nov 23 17:08:16.114341 2025] [:error] [pid 38824:tid 38843] [client 13.70.85.214:18421] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLPAE8WZjXLvbHTHPfbhwAAANA"]
[Sun Nov 23 17:08:17.216655 2025] [:error] [pid 14602:tid 14630] [client 13.70.85.214:18253] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLPAR-I77jdD81pU-nEKgAAAUk"]
[Sun Nov 23 17:08:19.083505 2025] [:error] [pid 16066:tid 16087] [client 13.70.85.214:18408] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLPA_q-c47Q5mW5E9GXRgAAAZI"]
[Sun Nov 23 17:08:20.025173 2025] [:error] [pid 17534:tid 17548] [client 13.70.85.214:18240] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSLPBHPX9nXBrhgM8sxTzwAAAcw"]
[Sun Nov 23 17:08:21.819256 2025] [:error] [pid 38739:tid 38772] [client 13.70.85.214:18313] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSLPBQdvEgJm2n2cDmpRqQAAAEM"]
[Sun Nov 23 17:08:22.690529 2025] [:error] [pid 14602:tid 14626] [client 13.70.85.214:18261] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSLPBh-I77jdD81pU-nELgAAAUU"]
[Sun Nov 23 17:08:23.290777 2025] [:error] [pid 38739:tid 38773] [client 13.70.85.214:18418] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSLPBwdvEgJm2n2cDmpRqwAAAEQ"]
[Sun Nov 23 17:08:24.139979 2025] [:error] [pid 38824:tid 38834] [client 13.70.85.214:18246] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSLPCE8WZjXLvbHTHPfbiQAAAMc"]
[Sun Nov 23 17:08:24.820781 2025] [:error] [pid 38740:tid 38819] [client 13.70.85.214:18334] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSLPCA13QPZSi6O8umXFBAAAAJc"]
[Sun Nov 23 17:08:25.689836 2025] [:error] [pid 16066:tid 16079] [client 13.70.85.214:18348] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSLPCfq-c47Q5mW5E9GXSQAAAYo"]
[Sun Nov 23 17:08:26.018356 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:18276] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSLPCgdvEgJm2n2cDmpRrAAAAE4"]
[Sun Nov 23 17:08:27.145499 2025] [:error] [pid 38740:tid 38802] [client 13.70.85.214:18241] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSLPCw13QPZSi6O8umXFBQAAAIY"]
[Sun Nov 23 17:08:27.826623 2025] [:error] [pid 44652:tid 44719] [client 13.70.85.214:18396] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aSLPC9iQFwsyXQDhwyDdyQAAAQ0"]
[Sun Nov 23 17:08:28.107306 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:18360] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aSLPDA13QPZSi6O8umXFBgAAAJI"]
[Sun Nov 23 17:08:28.662765 2025] [:error] [pid 38739:tid 38790] [client 13.70.85.214:18400] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aSLPDAdvEgJm2n2cDmpRsAAAAFU"]
[Sun Nov 23 17:08:30.342942 2025] [:error] [pid 17534:tid 17539] [client 13.70.85.214:18332] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aSLPDnPX9nXBrhgM8sxT6wAAAcM"]
[Sun Nov 23 17:08:30.888126 2025] [:error] [pid 14602:tid 14638] [client 13.70.85.214:18337] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aSLPDh-I77jdD81pU-nEOAAAAVE"]
[Sun Nov 23 17:08:32.159989 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:18354] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aSLPEA13QPZSi6O8umXFBwAAAIU"]
[Sun Nov 23 17:08:33.685150 2025] [:error] [pid 44652:tid 44730] [client 13.70.85.214:18352] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aSLPEdiQFwsyXQDhwyDd6gAAARg"]
[Sun Nov 23 17:08:34.829497 2025] [:error] [pid 17534:tid 17548] [client 13.70.85.214:18417] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aSLPEnPX9nXBrhgM8sxT8AAAAcw"]
[Sun Nov 23 17:08:36.235643 2025] [:error] [pid 44652:tid 44729] [client 13.70.85.214:18398] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aSLPFNiQFwsyXQDhwyDd7wAAARc"]
[Sun Nov 23 17:08:37.759675 2025] [:error] [pid 38740:tid 38808] [client 13.70.85.214:18430] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aSLPFQ13QPZSi6O8umXFDQAAAIw"]
[Sun Nov 23 17:08:38.143005 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:18361] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aSLPFgytc6TL9XavPmMnAAAAAAE"]
[Sun Nov 23 17:08:38.990019 2025] [:error] [pid 17534:tid 17559] [client 13.70.85.214:18308] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aSLPFnPX9nXBrhgM8sxT9wAAAdc"]
[Sun Nov 23 17:08:39.900971 2025] [:error] [pid 38740:tid 38799] [client 13.70.85.214:18368] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13k.php"] [unique_id "aSLPFw13QPZSi6O8umXFDwAAAIM"]
[Sun Nov 23 17:08:42.827755 2025] [:error] [pid 16066:tid 16074] [client 13.70.85.214:18358] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13k.php"] [unique_id "aSLPGvq-c47Q5mW5E9GXVQAAAYU"]
[Sun Nov 23 17:08:43.926323 2025] [:error] [pid 38824:tid 38845] [client 13.70.85.214:18267] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13k.php"] [unique_id "aSLPG08WZjXLvbHTHPfbsAAAANI"]
[Sun Nov 23 17:08:45.530617 2025] [:error] [pid 17534:tid 17543] [client 13.70.85.214:18401] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13k.php"] [unique_id "aSLPHXPX9nXBrhgM8sxT_gAAAcc"]
[Sun Nov 23 17:08:48.270126 2025] [:error] [pid 38740:tid 38818] [client 13.70.85.214:18363] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSLPIA13QPZSi6O8umXFGwAAAJY"]
[Sun Nov 23 17:08:48.862797 2025] [:error] [pid 44652:tid 44720] [client 13.70.85.214:18399] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSLPINiQFwsyXQDhwyDeAQAAAQ4"]
[Sun Nov 23 17:08:49.782000 2025] [:error] [pid 44652:tid 44707] [client 13.70.85.214:18345] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSLPIdiQFwsyXQDhwyDeBAAAAQE"]
[Sun Nov 23 17:08:53.423614 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:18355] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLPJQytc6TL9XavPmMnCAAAABM"]
[Sun Nov 23 17:08:55.979093 2025] [:error] [pid 14602:tid 14635] [client 13.70.85.214:18249] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aSLPJx-I77jdD81pU-nESgAAAU4"]
[Sun Nov 23 17:08:56.859414 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:18353] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aSLPKAdvEgJm2n2cDmpR1AAAAFY"]
[Sun Nov 23 17:08:57.964708 2025] [:error] [pid 16066:tid 16069] [client 13.70.85.214:18281] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aSLPKfq-c47Q5mW5E9GXXgAAAYA"]
[Sun Nov 23 17:08:58.938384 2025] [:error] [pid 38824:tid 38829] [client 13.70.85.214:18391] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aSLPKk8WZjXLvbHTHPfbwAAAAMI"]
[Sun Nov 23 17:08:59.651231 2025] [:error] [pid 17534:tid 17540] [client 13.70.85.214:18271] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/product.php"] [unique_id "aSLPK3PX9nXBrhgM8sxUBgAAAcQ"]
[Sun Nov 23 17:08:59.893215 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:18340] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/product.php"] [unique_id "aSLPKwytc6TL9XavPmMnDgAAABg"]
[Sun Nov 23 17:09:00.382593 2025] [:error] [pid 44652:tid 44714] [client 13.70.85.214:18251] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/product.php"] [unique_id "aSLPLNiQFwsyXQDhwyDeEQAAAQg"]
[Sun Nov 23 17:09:02.043791 2025] [:error] [pid 14602:tid 14627] [client 13.70.85.214:18378] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/product.php"] [unique_id "aSLPLh-I77jdD81pU-nETQAAAUY"]
[Sun Nov 23 17:09:03.129102 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:18320] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/function.php"] [unique_id "aSLPLwdvEgJm2n2cDmpR5QAAAEU"]
[Sun Nov 23 17:09:03.933882 2025] [:error] [pid 17534:tid 17544] [client 13.70.85.214:18272] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/function.php"] [unique_id "aSLPL3PX9nXBrhgM8sxUCgAAAcg"]
[Sun Nov 23 17:09:04.134604 2025] [:error] [pid 14602:tid 14628] [client 13.70.85.214:18362] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/function.php"] [unique_id "aSLPMB-I77jdD81pU-nETwAAAUc"]
[Sun Nov 23 17:09:04.513052 2025] [:error] [pid 38824:tid 38839] [client 13.70.85.214:18422] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/function.php"] [unique_id "aSLPME8WZjXLvbHTHPfbwgAAAMw"]
[Sun Nov 23 17:09:04.942485 2025] [:error] [pid 38824:tid 38845] [client 13.70.85.214:18402] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aSLPME8WZjXLvbHTHPfbwwAAANI"]
[Sun Nov 23 17:09:06.935402 2025] [:error] [pid 17534:tid 17551] [client 13.70.85.214:18359] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aSLPMnPX9nXBrhgM8sxUDAAAAc8"]
[Sun Nov 23 17:09:07.287580 2025] [:error] [pid 44652:tid 44708] [client 13.70.85.214:18311] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aSLPM9iQFwsyXQDhwyDeGQAAAQI"]
[Sun Nov 23 17:09:07.592885 2025] [:error] [pid 17534:tid 17541] [client 13.70.85.214:18273] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aSLPM3PX9nXBrhgM8sxUDQAAAcU"]
[Sun Nov 23 17:09:08.411068 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:18290] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSLPNAytc6TL9XavPmMnEwAAABM"]
[Sun Nov 23 17:09:09.693722 2025] [:error] [pid 16066:tid 16093] [client 13.70.85.214:18269] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSLPNfq-c47Q5mW5E9GXZAAAAZg"]
[Sun Nov 23 17:09:10.654045 2025] [:error] [pid 16066:tid 16071] [client 13.70.85.214:18268] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSLPNvq-c47Q5mW5E9GXZgAAAYI"]
[Sun Nov 23 17:09:10.990683 2025] [:error] [pid 17534:tid 17539] [client 13.70.85.214:18331] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSLPNnPX9nXBrhgM8sxUEAAAAcM"]
[Sun Nov 23 17:09:11.805326 2025] [:error] [pid 14602:tid 14643] [client 13.70.85.214:18296] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aSLPNx-I77jdD81pU-nEUgAAAVY"]
[Sun Nov 23 17:09:12.129301 2025] [:error] [pid 16066:tid 16069] [client 13.70.85.214:18277] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aSLPOPq-c47Q5mW5E9GXaAAAAYA"]
[Sun Nov 23 17:09:13.140198 2025] [:error] [pid 44652:tid 44714] [client 13.70.85.214:18347] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aSLPOdiQFwsyXQDhwyDeJgAAAQg"]
[Sun Nov 23 17:09:14.241879 2025] [:error] [pid 16066:tid 16092] [client 13.70.85.214:18189] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aSLPOvq-c47Q5mW5E9GXcgAAAZc"]
[Sun Nov 23 17:09:14.619599 2025] [:error] [pid 16066:tid 16090] [client 13.70.85.214:18292] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aSLPOvq-c47Q5mW5E9GXcwAAAZU"]
[Sun Nov 23 17:09:15.449883 2025] [:error] [pid 38740:tid 38798] [client 13.70.85.214:18341] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aSLPOw13QPZSi6O8umXFKQAAAII"]
[Sun Nov 23 17:09:16.839397 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:18410] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aSLPPAytc6TL9XavPmMnIQAAAA8"]
[Sun Nov 23 17:09:17.406589 2025] [:error] [pid 38740:tid 38805] [client 13.70.85.214:18376] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aSLPPQ13QPZSi6O8umXFKwAAAIk"]
[Sun Nov 23 17:09:18.893990 2025] [:error] [pid 16066:tid 16070] [client 13.70.85.214:18333] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aSLPPvq-c47Q5mW5E9GXdgAAAYE"]
[Sun Nov 23 17:09:19.942444 2025] [:error] [pid 14602:tid 14639] [client 13.70.85.214:18365] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aSLPPx-I77jdD81pU-nEVgAAAVI"]
[Sun Nov 23 17:09:20.121989 2025] [:error] [pid 17534:tid 17536] [client 13.70.85.214:18297] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aSLPQHPX9nXBrhgM8sxUIwAAAcA"]
[Sun Nov 23 17:09:20.272854 2025] [:error] [pid 17534:tid 17539] [client 13.70.85.214:18377] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aSLPQHPX9nXBrhgM8sxUJAAAAcM"]
[Sun Nov 23 17:09:20.551144 2025] [:error] [pid 38824:tid 38844] [client 13.70.85.214:18357] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aSLPQE8WZjXLvbHTHPfb3AAAANE"]
[Sun Nov 23 17:09:21.800445 2025] [:error] [pid 44652:tid 44729] [client 13.70.85.214:18423] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aSLPQdiQFwsyXQDhwyDeLwAAARc"]
[Sun Nov 23 17:09:23.137622 2025] [:error] [pid 16066:tid 16085] [client 13.70.85.214:18404] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aSLPQ_q-c47Q5mW5E9GXeAAAAZA"]
[Sun Nov 23 17:09:24.929182 2025] [:error] [pid 16066:tid 16074] [client 13.70.85.214:18350] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aSLPRPq-c47Q5mW5E9GXeQAAAYU"]
[Sun Nov 23 17:09:25.925248 2025] [:error] [pid 38738:tid 38746] [client 13.70.85.214:18288] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSLPRQytc6TL9XavPmMnLwAAAAQ"]
[Sun Nov 23 17:09:26.912923 2025] [:error] [pid 38739:tid 38787] [client 13.70.85.214:18250] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSLPRgdvEgJm2n2cDmpSBwAAAFI"]
[Sun Nov 23 17:09:27.863072 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:18395] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSLPR08WZjXLvbHTHPfb3wAAAME"]
[Sun Nov 23 17:09:29.906943 2025] [:error] [pid 38740:tid 38815] [client 13.70.85.214:18397] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSLPSQ13QPZSi6O8umXFMwAAAJM"]
[Sun Nov 23 17:09:30.879690 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:18183] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aSLPSgdvEgJm2n2cDmpSDAAAAEc"]
[Sun Nov 23 17:09:34.058731 2025] [:error] [pid 38738:tid 38762] [client 13.70.85.214:18367] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aSLPTgytc6TL9XavPmMnMQAAABQ"]
[Sun Nov 23 17:09:35.851630 2025] [:error] [pid 17534:tid 17555] [client 13.70.85.214:18258] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aSLPT3PX9nXBrhgM8sxUMAAAAdM"]
[Sun Nov 23 17:09:36.765007 2025] [:error] [pid 38739:tid 38775] [client 13.70.85.214:18314] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aSLPUAdvEgJm2n2cDmpSGgAAAEY"]
[Sun Nov 23 17:09:37.876411 2025] [:error] [pid 38739:tid 38789] [client 13.70.85.214:18221] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aSLPUQdvEgJm2n2cDmpSHAAAAFQ"]
[Sun Nov 23 17:09:38.344490 2025] [:error] [pid 38740:tid 38804] [client 13.70.85.214:18328] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aSLPUg13QPZSi6O8umXFPQAAAIg"]
[Sun Nov 23 17:09:41.223399 2025] [:error] [pid 14602:tid 14630] [client 13.70.85.214:18303] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aSLPVR-I77jdD81pU-nEeQAAAUk"]
[Sun Nov 23 17:09:42.954431 2025] [:error] [pid 38738:tid 38753] [client 13.70.85.214:18393] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aSLPVgytc6TL9XavPmMnNgAAAAs"]
[Sun Nov 23 17:09:44.658659 2025] [:error] [pid 38740:tid 38807] [client 13.70.85.214:18289] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aSLPWA13QPZSi6O8umXFQAAAAIs"]
[Sun Nov 23 17:09:45.738873 2025] [:error] [pid 16066:tid 16082] [client 13.70.85.214:18252] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aSLPWfq-c47Q5mW5E9GXhwAAAY0"]
[Sun Nov 23 17:09:47.031381 2025] [:error] [pid 38824:tid 38835] [client 13.70.85.214:18224] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aSLPW08WZjXLvbHTHPfb7gAAAMg"]
[Sun Nov 23 17:09:50.647502 2025] [:error] [pid 14602:tid 14629] [client 13.70.85.214:18291] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aSLPXh-I77jdD81pU-nEhgAAAUg"]
[Sun Nov 23 17:09:51.222609 2025] [:error] [pid 38824:tid 38849] [client 13.70.85.214:18312] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aSLPX08WZjXLvbHTHPfb9AAAANY"]
[Sun Nov 23 17:09:52.429942 2025] [:error] [pid 14602:tid 14636] [client 13.70.85.214:18211] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aSLPYB-I77jdD81pU-nEjQAAAU8"]
[Sun Nov 23 17:09:54.878759 2025] [:error] [pid 38739:tid 38769] [client 13.70.85.214:18190] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aSLPYgdvEgJm2n2cDmpSQAAAAEA"]
[Sun Nov 23 17:10:01.159828 2025] [:error] [pid 38739:tid 38770] [client 13.70.85.214:18254] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSLPaQdvEgJm2n2cDmpSYQAAAEE"]
[Sun Nov 23 17:10:03.080784 2025] [:error] [pid 16066:tid 16084] [client 13.70.85.214:18302] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSLPa_q-c47Q5mW5E9GXmwAAAY8"]
[Sun Nov 23 17:10:03.926896 2025] [:error] [pid 38740:tid 38820] [client 13.70.85.214:18226] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSLPaw13QPZSi6O8umXFTAAAAJg"]
[Sun Nov 23 17:10:05.075012 2025] [:error] [pid 17534:tid 17553] [client 13.70.85.214:18255] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSLPbXPX9nXBrhgM8sxUQQAAAdE"]
[Sun Nov 23 17:10:05.854319 2025] [:error] [pid 38738:tid 38742] [client 13.70.85.214:18184] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSLPbQytc6TL9XavPmMnRgAAAAA"]
[Sun Nov 23 17:10:06.880179 2025] [:error] [pid 38739:tid 38769] [client 13.70.85.214:18188] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSLPbgdvEgJm2n2cDmpSZgAAAEA"]
[Sun Nov 23 17:10:07.337821 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:18243] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSLPbwdvEgJm2n2cDmpSaQAAAFY"]
[Sun Nov 23 17:10:08.316338 2025] [:error] [pid 44652:tid 44713] [client 13.70.85.214:18265] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSLPcNiQFwsyXQDhwyDeTgAAAQc"]
[Sun Nov 23 17:10:09.942613 2025] [:error] [pid 38824:tid 38834] [client 13.70.85.214:18219] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSLPcU8WZjXLvbHTHPfcBwAAAMc"]
[Sun Nov 23 17:10:10.312024 2025] [:error] [pid 38824:tid 38840] [client 13.70.85.214:18262] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSLPck8WZjXLvbHTHPfcCAAAAM0"]
[Sun Nov 23 17:10:11.061587 2025] [:error] [pid 38740:tid 38805] [client 13.70.85.214:18280] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSLPcw13QPZSi6O8umXFUgAAAIk"]
[Sun Nov 23 17:10:11.835245 2025] [:error] [pid 17534:tid 17555] [client 13.70.85.214:18282] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSLPc3PX9nXBrhgM8sxUSAAAAdM"]
[Sun Nov 23 17:10:12.796016 2025] [:error] [pid 14602:tid 14644] [client 13.70.85.214:18300] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aSLPdB-I77jdD81pU-nEqgAAAVc"]
[Sun Nov 23 17:10:13.003643 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:18364] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aSLPdQytc6TL9XavPmMnSgAAAAw"]
[Sun Nov 23 17:10:13.928206 2025] [:error] [pid 16066:tid 16072] [client 13.70.85.214:18293] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aSLPdfq-c47Q5mW5E9GXpgAAAYM"]
[Sun Nov 23 17:10:15.590376 2025] [:error] [pid 16066:tid 16088] [client 13.70.85.214:18370] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aSLPd_q-c47Q5mW5E9GXqQAAAZM"]
[Sun Nov 23 17:10:16.387350 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:18346] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aSLPeAytc6TL9XavPmMnTwAAAAg"]
[Sun Nov 23 17:10:18.623647 2025] [:error] [pid 38739:tid 38769] [client 13.70.85.214:18179] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aSLPegdvEgJm2n2cDmpSdQAAAEA"]
[Sun Nov 23 17:10:19.603113 2025] [:error] [pid 14602:tid 14626] [client 13.70.85.214:18201] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aSLPex-I77jdD81pU-nEuAAAAUU"]
[Sun Nov 23 17:10:23.086676 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:18244] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aSLPfwytc6TL9XavPmMnUwAAABM"]
[Sun Nov 23 17:10:23.983659 2025] [:error] [pid 44652:tid 44706] [client 13.70.85.214:18117] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aSLPf9iQFwsyXQDhwyDeZQAAAQA"]
[Sun Nov 23 17:10:25.317948 2025] [:error] [pid 38824:tid 38843] [client 13.70.85.214:18285] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aSLPgU8WZjXLvbHTHPfcDgAAANA"]
[Sun Nov 23 17:10:25.882104 2025] [:error] [pid 14602:tid 14637] [client 13.70.85.214:18220] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aSLPgR-I77jdD81pU-nEvQAAAVA"]
[Sun Nov 23 17:10:26.741600 2025] [:error] [pid 38738:tid 38751] [client 13.70.85.214:18180] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aSLPggytc6TL9XavPmMnYAAAAAk"]
[Sun Nov 23 17:10:27.702389 2025] [:error] [pid 38824:tid 38849] [client 13.70.85.214:18275] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSLPg08WZjXLvbHTHPfcEQAAANY"]
[Sun Nov 23 17:10:28.456790 2025] [:error] [pid 38740:tid 38816] [client 13.70.85.214:18223] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSLPhA13QPZSi6O8umXFZgAAAJQ"]
[Sun Nov 23 17:10:29.217032 2025] [:error] [pid 44652:tid 44711] [client 13.70.85.214:18116] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSLPhdiQFwsyXQDhwyDedgAAAQU"]
[Sun Nov 23 17:10:32.013048 2025] [:error] [pid 38738:tid 38747] [client 13.70.85.214:18299] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSLPiAytc6TL9XavPmMnYwAAAAU"]
[Sun Nov 23 17:10:32.999265 2025] [:error] [pid 38738:tid 38765] [client 13.70.85.214:18283] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSLPiAytc6TL9XavPmMnZAAAABc"]
[Sun Nov 23 17:10:34.460075 2025] [:error] [pid 38740:tid 38804] [client 13.70.85.214:18203] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSLPig13QPZSi6O8umXFagAAAIg"]
[Sun Nov 23 17:10:35.899378 2025] [:error] [pid 17534:tid 17543] [client 13.70.85.214:18424] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSLPi3PX9nXBrhgM8sxUZgAAAcc"]
[Sun Nov 23 17:10:36.965118 2025] [:error] [pid 17534:tid 17544] [client 13.70.85.214:18177] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSLPjHPX9nXBrhgM8sxUaAAAAcg"]
[Sun Nov 23 17:10:38.271287 2025] [:error] [pid 17534:tid 17545] [client 13.70.85.214:18215] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aSLPjnPX9nXBrhgM8sxUbQAAAck"]
[Sun Nov 23 17:10:39.483807 2025] [:error] [pid 38824:tid 38844] [client 13.70.85.214:18137] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aSLPj08WZjXLvbHTHPfcFwAAANE"]
[Sun Nov 23 17:10:40.426232 2025] [:error] [pid 38739:tid 38781] [client 13.70.85.214:18214] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aSLPkAdvEgJm2n2cDmpSnwAAAEw"]
[Sun Nov 23 17:10:41.433250 2025] [:error] [pid 38738:tid 38742] [client 13.70.85.214:18259] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aSLPkQytc6TL9XavPmMnZgAAAAA"]
[Sun Nov 23 17:10:42.367462 2025] [:error] [pid 44652:tid 44713] [client 13.70.85.214:18298] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSLPktiQFwsyXQDhwyDegwAAAQc"]
[Sun Nov 23 17:10:43.727384 2025] [:error] [pid 16066:tid 16091] [client 13.70.85.214:18245] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSLPk_q-c47Q5mW5E9GX1wAAAZY"]
[Sun Nov 23 17:10:44.424792 2025] [:error] [pid 44652:tid 44730] [client 13.70.85.214:18327] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSLPlNiQFwsyXQDhwyDehQAAARg"]
[Sun Nov 23 17:10:44.880804 2025] [:error] [pid 44652:tid 44724] [client 13.70.85.214:18178] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSLPlNiQFwsyXQDhwyDehgAAARI"]
[Sun Nov 23 17:10:46.847966 2025] [:error] [pid 17534:tid 17540] [client 13.70.85.214:18284] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aSLPlnPX9nXBrhgM8sxUdwAAAcQ"]
[Sun Nov 23 17:10:48.764699 2025] [:error] [pid 14602:tid 14644] [client 13.70.85.214:18150] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aSLPmB-I77jdD81pU-nE2wAAAVc"]
[Sun Nov 23 17:10:49.355378 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:18225] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aSLPmQdvEgJm2n2cDmpSogAAAE4"]
[Sun Nov 23 17:10:50.775337 2025] [:error] [pid 14602:tid 14638] [client 13.70.85.214:18213] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aSLPmh-I77jdD81pU-nE3wAAAVE"]
[Sun Nov 23 17:10:51.258018 2025] [:error] [pid 38740:tid 38817] [client 13.70.85.214:18256] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSLPmw13QPZSi6O8umXFeAAAAJU"]
[Sun Nov 23 17:10:52.433711 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:18270] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSLPnAdvEgJm2n2cDmpSpAAAAFY"]
[Sun Nov 23 17:10:53.839311 2025] [:error] [pid 16066:tid 16077] [client 13.70.85.214:18118] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSLPnfq-c47Q5mW5E9GX6AAAAYg"]
[Sun Nov 23 17:10:54.200925 2025] [:error] [pid 38824:tid 38833] [client 13.70.85.214:18414] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSLPnk8WZjXLvbHTHPfcHgAAAMY"]
[Sun Nov 23 17:10:55.565819 2025] [:error] [pid 44652:tid 44711] [client 13.70.85.214:18286] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aSLPn9iQFwsyXQDhwyDemAAAAQU"]
[Sun Nov 23 17:10:55.919904 2025] [:error] [pid 38738:tid 38749] [client 13.70.85.214:18218] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aSLPnwytc6TL9XavPmMnbQAAAAc"]
[Sun Nov 23 17:10:58.150288 2025] [:error] [pid 38739:tid 38786] [client 13.70.85.214:18131] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aSLPogdvEgJm2n2cDmpSqAAAAFE"]
[Sun Nov 23 17:10:58.512391 2025] [:error] [pid 17534:tid 17558] [client 13.70.85.214:18199] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aSLPonPX9nXBrhgM8sxUggAAAdY"]
[Sun Nov 23 17:11:03.249750 2025] [:error] [pid 17534:tid 17542] [client 13.70.85.214:18287] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSLPp3PX9nXBrhgM8sxUkgAAAcY"]
[Sun Nov 23 17:11:04.094761 2025] [:error] [pid 16066:tid 16075] [client 13.70.85.214:18205] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLPqPq-c47Q5mW5E9GX_QAAAYY"]
[Sun Nov 23 17:11:05.945391 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:18061] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aSLPqQdvEgJm2n2cDmpSqgAAAEc"]
[Sun Nov 23 17:11:06.896088 2025] [:error] [pid 16066:tid 16081] [client 13.70.85.214:18320] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aSLPqvq-c47Q5mW5E9GYAQAAAYw"]
[Sun Nov 23 17:11:08.178948 2025] [:error] [pid 17534:tid 17555] [client 13.70.85.214:18125] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aSLPrHPX9nXBrhgM8sxUlQAAAdM"]
[Sun Nov 23 17:11:10.577066 2025] [:error] [pid 16066:tid 16072] [client 13.70.85.214:18349] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aSLPrvq-c47Q5mW5E9GYCAAAAYM"]
[Sun Nov 23 17:11:13.379749 2025] [:error] [pid 17534:tid 17542] [client 13.70.85.214:18206] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSLPsXPX9nXBrhgM8sxUmAAAAcY"]
[Sun Nov 23 17:11:14.037756 2025] [:error] [pid 38740:tid 38808] [client 13.70.85.214:18230] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSLPsg13QPZSi6O8umXFgwAAAIw"]
[Sun Nov 23 17:11:15.102844 2025] [:error] [pid 17534:tid 17557] [client 13.70.85.214:18153] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSLPs3PX9nXBrhgM8sxUmgAAAdU"]
[Sun Nov 23 17:11:16.153852 2025] [:error] [pid 16066:tid 16083] [client 13.70.85.214:18127] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSLPtPq-c47Q5mW5E9GYEAAAAY4"]
[Sun Nov 23 17:11:16.953496 2025] [:error] [pid 44652:tid 44724] [client 13.70.85.214:18185] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSLPtNiQFwsyXQDhwyDesAAAARI"]
[Sun Nov 23 17:11:19.437637 2025] [:error] [pid 38740:tid 38797] [client 13.70.85.214:18193] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSLPtw13QPZSi6O8umXFhgAAAIE"]
[Sun Nov 23 17:11:22.433177 2025] [:error] [pid 38824:tid 38827] [client 13.70.85.214:18318] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSLPuk8WZjXLvbHTHPfcNwAAAMA"]
[Sun Nov 23 17:11:24.942174 2025] [:error] [pid 38740:tid 38802] [client 13.70.85.214:18197] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSLPvA13QPZSi6O8umXFiwAAAIY"]
[Sun Nov 23 17:11:25.252599 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:18295] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSLPvQ13QPZSi6O8umXFjAAAAIA"]
[Sun Nov 23 17:11:30.445203 2025] [:error] [pid 44652:tid 44713] [client 13.70.85.214:18322] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSLPwtiQFwsyXQDhwyDeuAAAAQc"]
[Sun Nov 23 17:11:33.021828 2025] [:error] [pid 17534:tid 17557] [client 13.70.85.214:18216] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSLPxXPX9nXBrhgM8sxUqQAAAdU"]
[Sun Nov 23 17:11:34.440851 2025] [:error] [pid 16066:tid 16079] [client 13.70.85.214:18279] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSLPxvq-c47Q5mW5E9GYJwAAAYo"]
[Sun Nov 23 17:11:36.229270 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:18384] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSLPyAdvEgJm2n2cDmpSsAAAAFY"]
[Sun Nov 23 17:11:36.845588 2025] [:error] [pid 14602:tid 14635] [client 13.70.85.214:18427] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSLPyB-I77jdD81pU-nE6wAAAU4"]
[Sun Nov 23 17:11:36.976039 2025] [:error] [pid 44652:tid 44709] [client 13.70.85.214:18294] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSLPyNiQFwsyXQDhwyDevAAAAQM"]
[Sun Nov 23 17:11:38.110028 2025] [:error] [pid 16066:tid 16080] [client 13.70.85.214:18389] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSLPyvq-c47Q5mW5E9GYLQAAAYs"]
[Sun Nov 23 17:11:39.626948 2025] [:error] [pid 38738:tid 38763] [client 13.70.85.214:18173] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSLPywytc6TL9XavPmMnggAAABU"]
[Sun Nov 23 17:11:40.158893 2025] [:error] [pid 16066:tid 16088] [client 13.70.85.214:18385] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSLPzPq-c47Q5mW5E9GYMAAAAZM"]
[Sun Nov 23 17:11:40.405389 2025] [:error] [pid 38739:tid 38792] [client 13.70.85.214:18139] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSLPzAdvEgJm2n2cDmpSsQAAAFc"]
[Sun Nov 23 17:11:41.713386 2025] [:error] [pid 38740:tid 38808] [client 13.70.85.214:18344] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aSLPzQ13QPZSi6O8umXFkAAAAIw"]
[Sun Nov 23 17:11:45.007163 2025] [:error] [pid 14602:tid 14645] [client 13.70.85.214:18371] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aSLP0R-I77jdD81pU-nE8wAAAVg"]
[Sun Nov 23 17:11:46.321176 2025] [:error] [pid 38739:tid 38785] [client 13.70.85.214:18182] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aSLP0gdvEgJm2n2cDmpStgAAAFA"]
[Sun Nov 23 17:11:46.942506 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:18429] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aSLP0gdvEgJm2n2cDmpStwAAAEU"]
[Sun Nov 23 17:11:47.403983 2025] [:error] [pid 17534:tid 17555] [client 13.70.85.214:18147] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSLP03PX9nXBrhgM8sxUrAAAAdM"]
[Sun Nov 23 17:11:48.282171 2025] [:error] [pid 17534:tid 17546] [client 13.70.85.214:18315] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSLP1HPX9nXBrhgM8sxUrgAAAco"]
[Sun Nov 23 17:11:49.392786 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:18229] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSLP1Qytc6TL9XavPmMngwAAAAw"]
[Sun Nov 23 17:11:51.138957 2025] [:error] [pid 17534:tid 17536] [client 13.70.85.214:18140] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSLP13PX9nXBrhgM8sxUywAAAcA"]
[Sun Nov 23 17:11:51.676626 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:18235] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aSLP1wdvEgJm2n2cDmpSuAAAAEc"]
[Sun Nov 23 17:11:52.348056 2025] [:error] [pid 14602:tid 14641] [client 13.70.85.214:18428] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSLP2B-I77jdD81pU-nE9QAAAVQ"]
[Sun Nov 23 17:11:52.932095 2025] [:error] [pid 16066:tid 16088] [client 13.70.85.214:18390] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aSLP2Pq-c47Q5mW5E9GYQgAAAZM"]
[Sun Nov 23 17:11:53.900457 2025] [:error] [pid 38824:tid 38840] [client 13.70.85.214:18159] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aSLP2U8WZjXLvbHTHPfcQgAAAM0"]
[Sun Nov 23 17:11:54.743770 2025] [:error] [pid 16066:tid 16084] [client 13.70.85.214:18306] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aSLP2vq-c47Q5mW5E9GYSAAAAY8"]
[Sun Nov 23 17:11:57.080509 2025] [:error] [pid 44652:tid 44713] [client 13.70.85.214:18195] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aSLP3diQFwsyXQDhwyDexQAAAQc"]
[Sun Nov 23 17:11:59.153056 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:18374] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqq.php"] [unique_id "aSLP3wytc6TL9XavPmMnjAAAABM"]
[Sun Nov 23 17:12:00.146632 2025] [:error] [pid 16066:tid 16079] [client 13.70.85.214:18326] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqq.php"] [unique_id "aSLP4Pq-c47Q5mW5E9GYYgAAAYo"]
[Sun Nov 23 17:12:01.068618 2025] [:error] [pid 16066:tid 16071] [client 13.70.85.214:18372] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqq.php"] [unique_id "aSLP4fq-c47Q5mW5E9GYZQAAAYI"]
[Sun Nov 23 17:12:03.422183 2025] [:error] [pid 17534:tid 17541] [client 13.70.85.214:18420] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqq.php"] [unique_id "aSLP43PX9nXBrhgM8sxU-AAAAcU"]
[Sun Nov 23 17:12:07.795043 2025] [:error] [pid 16066:tid 16085] [client 13.70.85.214:18051] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSLP5_q-c47Q5mW5E9GYbwAAAZA"]
[Sun Nov 23 17:12:08.176944 2025] [proxy_fcgi:error] [pid 44652:tid 44720] [client 13.70.85.214:18089] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 17:12:09.046815 2025] [:error] [pid 44652:tid 44711] [client 13.70.85.214:18089] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLP6diQFwsyXQDhwyDe7QAAAQU"]
[Sun Nov 23 17:12:12.685863 2025] [:error] [pid 16066:tid 16072] [client 13.70.85.214:18343] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLP7Pq-c47Q5mW5E9GYeAAAAYM"]
[Sun Nov 23 17:12:15.571373 2025] [:error] [pid 38740:tid 38817] [client 13.70.85.214:18167] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLP7w13QPZSi6O8umXFxQAAAJU"]
[Sun Nov 23 17:12:16.436134 2025] [:error] [pid 38740:tid 38813] [client 13.70.85.214:18310] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLP8A13QPZSi6O8umXFxwAAAJE"]
[Sun Nov 23 17:12:20.063368 2025] [:error] [pid 17534:tid 17559] [client 13.70.85.214:18305] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSLP9HPX9nXBrhgM8sxVFAAAAdc"]
[Sun Nov 23 17:12:20.974665 2025] [:error] [pid 38739:tid 38775] [client 13.70.85.214:18336] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSLP9AdvEgJm2n2cDmpSzAAAAEY"]
[Sun Nov 23 17:12:22.628002 2025] [:error] [pid 38740:tid 38807] [client 13.70.85.214:18375] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSLP9g13QPZSi6O8umXFyQAAAIs"]
[Sun Nov 23 17:12:24.544668 2025] [:error] [pid 38739:tid 38792] [client 13.70.85.214:18120] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSLP-AdvEgJm2n2cDmpSzwAAAFc"]
[Sun Nov 23 17:12:25.053804 2025] [:error] [pid 44652:tid 44709] [client 13.70.85.214:18382] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSLP-diQFwsyXQDhwyDe_AAAAQM"]
[Sun Nov 23 17:12:28.325564 2025] [:error] [pid 16066:tid 16090] [client 13.70.85.214:18156] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSLP_Pq-c47Q5mW5E9GYjQAAAZU"]
[Sun Nov 23 17:12:31.670515 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:18387] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSLP_wytc6TL9XavPmMnpAAAAAg"]
[Sun Nov 23 17:12:32.635005 2025] [:error] [pid 38738:tid 38756] [client 13.70.85.214:18200] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSLQAAytc6TL9XavPmMnqAAAAA4"]
[Sun Nov 23 17:12:34.251763 2025] [:error] [pid 44652:tid 44716] [client 13.70.85.214:18114] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSLQAtiQFwsyXQDhwyDfBAAAAQo"]
[Sun Nov 23 17:12:35.988199 2025] [:error] [pid 44652:tid 44728] [client 13.70.85.214:18386] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSLQA9iQFwsyXQDhwyDfBgAAARY"]
[Sun Nov 23 17:12:37.624290 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:18421] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSLQBU8WZjXLvbHTHPfcWQAAAME"]
[Sun Nov 23 17:12:38.546497 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:18316] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSLQBgdvEgJm2n2cDmpS0wAAAEs"]
[Sun Nov 23 17:12:39.485167 2025] [:error] [pid 38738:tid 38758] [client 13.70.85.214:18115] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSLQBwytc6TL9XavPmMntAAAABA"]
[Sun Nov 23 17:12:41.284945 2025] [:error] [pid 38738:tid 38763] [client 13.70.85.214:18323] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSLQCQytc6TL9XavPmMntgAAABU"]
[Sun Nov 23 17:12:41.941240 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:18335] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSLQCQdvEgJm2n2cDmpS1QAAAEc"]
[Sun Nov 23 17:12:43.781625 2025] [:error] [pid 38739:tid 38789] [client 13.70.85.214:18257] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSLQCwdvEgJm2n2cDmpS2AAAAFQ"]
[Sun Nov 23 17:12:45.262229 2025] [:error] [pid 38824:tid 38838] [client 13.70.85.214:18366] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSLQDU8WZjXLvbHTHPfcZwAAAMs"]
[Sun Nov 23 17:12:46.802662 2025] [:error] [pid 38824:tid 38843] [client 13.70.85.214:18248] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aSLQDk8WZjXLvbHTHPfcawAAANA"]
[Sun Nov 23 17:12:47.035873 2025] [:error] [pid 44652:tid 44712] [client 13.70.85.214:18317] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aSLQD9iQFwsyXQDhwyDfJgAAAQY"]
[Sun Nov 23 17:12:48.120755 2025] [:error] [pid 17534:tid 17554] [client 13.70.85.214:18187] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aSLQEHPX9nXBrhgM8sxVQAAAAdI"]
[Sun Nov 23 17:12:50.812503 2025] [:error] [pid 38740:tid 38813] [client 13.70.85.214:18411] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aSLQEg13QPZSi6O8umXF5gAAAJE"]
[Sun Nov 23 17:12:53.844600 2025] [:error] [pid 38738:tid 38753] [client 13.70.85.214:18425] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aSLQFQytc6TL9XavPmMn0AAAAAs"]
[Sun Nov 23 17:12:56.261101 2025] [:error] [pid 38738:tid 38742] [client 13.70.85.214:18412] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aSLQGAytc6TL9XavPmMn0gAAAAA"]
[Sun Nov 23 17:12:57.351586 2025] [:error] [pid 14602:tid 14637] [client 13.70.85.214:18418] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aSLQGR-I77jdD81pU-nFHQAAAVA"]
[Sun Nov 23 17:12:59.138827 2025] [:error] [pid 38824:tid 38840] [client 13.70.85.214:18392] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aSLQG08WZjXLvbHTHPfcgQAAAM0"]
[Sun Nov 23 17:12:59.837568 2025] [:error] [pid 44652:tid 44715] [client 13.70.85.214:18430] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aSLQG9iQFwsyXQDhwyDfLAAAAQk"]
[Sun Nov 23 17:13:00.545527 2025] [:error] [pid 16066:tid 16074] [client 13.70.85.214:18396] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aSLQHPq-c47Q5mW5E9GYugAAAYU"]
[Sun Nov 23 17:13:01.424904 2025] [:error] [pid 14602:tid 14626] [client 13.70.85.214:18330] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aSLQHR-I77jdD81pU-nFJQAAAUU"]
[Sun Nov 23 17:13:02.771714 2025] [:error] [pid 16066:tid 16085] [client 13.70.85.214:18380] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aSLQHvq-c47Q5mW5E9GYvAAAAZA"]
[Sun Nov 23 17:13:04.988418 2025] [:error] [pid 38740:tid 38804] [client 13.70.85.214:18356] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSLQIA13QPZSi6O8umXF6AAAAIg"]
[Sun Nov 23 17:13:05.837950 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:18247] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSLQIQytc6TL9XavPmMn1AAAABE"]
[Sun Nov 23 17:13:07.979341 2025] [:error] [pid 17534:tid 17557] [client 13.70.85.214:18266] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aSLQI3PX9nXBrhgM8sxVUgAAAdU"]
[Sun Nov 23 17:13:08.507834 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:18332] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aSLQJAytc6TL9XavPmMn1wAAAA8"]
[Sun Nov 23 17:13:09.441644 2025] [:error] [pid 38824:tid 38842] [client 13.70.85.214:18426] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aSLQJU8WZjXLvbHTHPfciAAAAM8"]
[Sun Nov 23 17:13:10.982884 2025] [:error] [pid 38824:tid 38835] [client 13.70.85.214:18222] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bge.php"] [unique_id "aSLQJk8WZjXLvbHTHPfciQAAAMg"]
[Sun Nov 23 17:13:11.779390 2025] [:error] [pid 14602:tid 14635] [client 13.70.85.214:18319] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bge.php"] [unique_id "aSLQJx-I77jdD81pU-nFKQAAAU4"]
[Sun Nov 23 18:13:33.840659 2025] [:error] [pid 14602:tid 14627] [client 43.153.54.138:45966] [client 43.153.54.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSLeTR-I77jdD81pU-nOngAAAUY"]
[Sun Nov 23 18:44:06.196619 2025] [:error] [pid 38824:tid 38833] [client 176.65.132.18:46540] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSLldk8WZjXLvbHTHPfsMAAAAMY"]
[Sun Nov 23 18:53:54.833373 2025] [:error] [pid 38738:tid 38765] [client 172.70.243.225:10662] [client 172.70.243.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSLnwgytc6TL9XavPmM8EQAAABc"]
[Sun Nov 23 21:38:48.939089 2025] [:error] [pid 14602:tid 14641] [client 111.172.249.49:32882] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSMOaB-I77jdD81pU-nxEQAAAVQ"]
[Sun Nov 23 23:58:47.315323 2025] [:error] [pid 44652:tid 44729] [client 176.65.132.18:48034] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSMvN9iQFwsyXQDhwyBMVgAAARc"]
[Mon Nov 24 03:01:36.672914 2025] [:error] [pid 8337:tid 8345] [client 176.65.132.18:57820] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSNaEOSmps4S2j95D5ik2AAAAAY"]
[Mon Nov 24 04:05:59.509324 2025] [:error] [pid 59958:tid 59999] [client 180.102.134.69:54132] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSNpJ-ar7CWszFXSk6EIAQAAAEo"]
[Mon Nov 24 08:20:15.530158 2025] [:error] [pid 48601:tid 48657] [client 103.65.237.124:61637] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aSOkv4MM4MaVTk74-AYoOgAAAgA"]
[Mon Nov 24 09:14:32.552606 2025] [:error] [pid 48688:tid 48704] [client 140.99.1.9:55501] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSOxeBm2q1FkzLam7A00_AAAAkw"]
[Mon Nov 24 09:14:33.048773 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.32:34083] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSOxeTCyPLrvg06aormKfQAAAAU"]
[Mon Nov 24 09:14:33.836674 2025] [:error] [pid 48600:tid 48646] [client 140.99.1.67:48845] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSOxeftOzSUAQvWVjBck2gAAAdA"]
[Mon Nov 24 09:14:34.313700 2025] [:error] [pid 48600:tid 48633] [client 140.99.1.43:36113] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSOxevtOzSUAQvWVjBck7AAAAcM"]
[Mon Nov 24 09:14:35.219103 2025] [:error] [pid 49900:tid 49905] [client 140.99.1.24:60219] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSOxezCyPLrvg06aormKjQAAAAM"]
[Mon Nov 24 09:14:35.611333 2025] [:error] [pid 48600:tid 48652] [client 140.99.1.53:58853] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSOxe_tOzSUAQvWVjBck8gAAAdY"]
[Mon Nov 24 09:14:35.795620 2025] [:error] [pid 48599:tid 48611] [client 140.99.1.71:20433] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSOxe5zvu6PDJiRKE3LEzgAAAYg"]
[Mon Nov 24 09:14:36.040095 2025] [:error] [pid 48600:tid 48636] [client 140.99.1.63:30589] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSOxfPtOzSUAQvWVjBck9QAAAcY"]
[Mon Nov 24 09:14:36.235693 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.33:44027] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSOxfBm2q1FkzLam7A01AwAAAlI"]
[Mon Nov 24 09:14:36.505788 2025] [:error] [pid 48601:tid 48667] [client 140.99.1.6:21289] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSOxfIMM4MaVTk74-AZErwAAAgo"]
[Mon Nov 24 09:14:36.892739 2025] [:error] [pid 48599:tid 48616] [client 140.99.1.69:43735] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSOxfJzvu6PDJiRKE3LE0AAAAY0"]
[Mon Nov 24 09:14:38.013473 2025] [:error] [pid 48600:tid 48641] [client 140.99.1.42:24487] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aSOxfvtOzSUAQvWVjBck_wAAAcs"]
[Mon Nov 24 09:14:38.443019 2025] [:error] [pid 48688:tid 48694] [client 140.99.1.37:45947] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSOxfhm2q1FkzLam7A01DgAAAkI"]
[Mon Nov 24 09:14:38.764915 2025] [:error] [pid 49900:tid 49906] [client 140.99.1.52:25879] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSOxfjCyPLrvg06aormKpQAAAAQ"]
[Mon Nov 24 09:14:39.071052 2025] [:error] [pid 48600:tid 48653] [client 140.99.1.50:64767] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSOxf_tOzSUAQvWVjBclAgAAAdc"]
[Mon Nov 24 09:14:39.965069 2025] [:error] [pid 48599:tid 48603] [client 140.99.1.31:24933] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSOxf5zvu6PDJiRKE3LE2wAAAYA"]
[Mon Nov 24 09:14:40.318753 2025] [:error] [pid 48600:tid 48631] [client 140.99.1.24:39247] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSOxgPtOzSUAQvWVjBclDQAAAcE"]
[Mon Nov 24 09:14:40.833242 2025] [:error] [pid 48599:tid 48618] [client 140.99.1.62:31215] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSOxgJzvu6PDJiRKE3LE3wAAAY8"]
[Mon Nov 24 09:14:41.148085 2025] [:error] [pid 48599:tid 48610] [client 140.99.1.28:62641] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSOxgZzvu6PDJiRKE3LE4QAAAYc"]
[Mon Nov 24 09:14:41.936757 2025] [:error] [pid 49900:tid 49922] [client 140.99.1.27:48743] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSOxgTCyPLrvg06aormKtgAAABQ"]
[Mon Nov 24 09:14:42.294317 2025] [:error] [pid 48599:tid 48604] [client 140.99.1.48:34593] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSOxgpzvu6PDJiRKE3LE5QAAAYE"]
[Mon Nov 24 09:14:42.653380 2025] [:error] [pid 48688:tid 48692] [client 140.99.1.31:55877] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSOxghm2q1FkzLam7A01HQAAAkA"]
[Mon Nov 24 09:14:42.841936 2025] [:error] [pid 48688:tid 48697] [client 140.99.1.75:34157] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSOxghm2q1FkzLam7A01IQAAAkU"]
[Mon Nov 24 09:14:43.045817 2025] [:error] [pid 48688:tid 48712] [client 140.99.1.46:29947] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSOxgxm2q1FkzLam7A01JAAAAlQ"]
[Mon Nov 24 09:14:45.196999 2025] [:error] [pid 48599:tid 48617] [client 140.99.1.10:20941] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSOxhZzvu6PDJiRKE3LE7gAAAY4"]
[Mon Nov 24 09:14:45.392767 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.39:44331] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSOxhTCyPLrvg06aormKxAAAABM"]
[Mon Nov 24 09:14:45.624301 2025] [:error] [pid 48688:tid 48709] [client 140.99.1.70:30173] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSOxhRm2q1FkzLam7A01LAAAAlE"]
[Mon Nov 24 09:14:46.839656 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.47:29909] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSOxhjCyPLrvg06aormK0QAAAA4"]
[Mon Nov 24 09:14:47.449413 2025] [:error] [pid 48599:tid 48619] [client 140.99.1.38:45421] [client 140.99.1.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.38, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSOxh5zvu6PDJiRKE3LE9gAAAZA"]
[Mon Nov 24 09:14:48.730165 2025] [:error] [pid 48599:tid 48622] [client 140.99.1.38:45421] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSOxiJzvu6PDJiRKE3LFBAAAAZM"]
[Mon Nov 24 09:14:49.145050 2025] [:error] [pid 48601:tid 48676] [client 140.99.1.53:48557] [client 140.99.1.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.53, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSOxiYMM4MaVTk74-AZE5AAAAhM"]
[Mon Nov 24 09:14:49.363252 2025] [:error] [pid 48601:tid 48672] [client 140.99.1.53:48557] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSOxiYMM4MaVTk74-AZE6AAAAg8"]
[Mon Nov 24 09:14:50.523740 2025] [:error] [pid 48600:tid 48637] [client 140.99.1.72:52375] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSOxivtOzSUAQvWVjBclNAAAAcc"]
[Mon Nov 24 09:14:51.743984 2025] [:error] [pid 49900:tid 49903] [client 140.99.1.10:44497] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSOxizCyPLrvg06aormLAQAAAAE"]
[Mon Nov 24 09:14:52.226403 2025] [:error] [pid 48600:tid 48654] [client 140.99.1.17:41241] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSOxjPtOzSUAQvWVjBclNwAAAdg"]
[Mon Nov 24 09:14:52.933500 2025] [:error] [pid 48599:tid 48622] [client 140.99.1.49:47455] [client 140.99.1.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.49, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSOxjJzvu6PDJiRKE3LFFQAAAZM"]
[Mon Nov 24 09:14:53.037975 2025] [:error] [pid 48599:tid 48627] [client 140.99.1.49:47455] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSOxjZzvu6PDJiRKE3LFFwAAAZg"]
[Mon Nov 24 09:14:55.418517 2025] [:error] [pid 49900:tid 49926] [client 140.99.1.52:57649] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSOxjzCyPLrvg06aormLLgAAABg"]
[Mon Nov 24 09:14:56.111214 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.62:34419] [client 140.99.1.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.62, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSOxkDCyPLrvg06aormLMwAAAA4"]
[Mon Nov 24 09:14:56.526331 2025] [:error] [pid 49900:tid 49919] [client 140.99.1.62:34419] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSOxkDCyPLrvg06aormLPAAAABE"]
[Mon Nov 24 09:14:56.909672 2025] [:error] [pid 49900:tid 49915] [client 140.99.1.20:23199] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSOxkDCyPLrvg06aormLQQAAAA0"]
[Mon Nov 24 09:14:57.350166 2025] [:error] [pid 48599:tid 48616] [client 140.99.1.52:43171] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSOxkZzvu6PDJiRKE3LFIQAAAY0"]
[Mon Nov 24 09:14:58.003119 2025] [:error] [pid 48599:tid 48613] [client 140.99.1.31:33607] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSOxkpzvu6PDJiRKE3LFJgAAAYo"]
[Mon Nov 24 09:14:58.202539 2025] [:error] [pid 48688:tid 48693] [client 140.99.1.73:63079] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSOxkhm2q1FkzLam7A01YQAAAkE"]
[Mon Nov 24 09:14:58.995528 2025] [:error] [pid 49900:tid 49919] [client 140.99.1.75:34283] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSOxkjCyPLrvg06aormLSgAAABE"]
[Mon Nov 24 09:14:59.351153 2025] [:error] [pid 48601:tid 48680] [client 140.99.1.43:63531] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSOxk4MM4MaVTk74-AZFDwAAAhc"]
[Mon Nov 24 09:15:00.010833 2025] [:error] [pid 48688:tid 48700] [client 140.99.1.74:33405] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSOxlBm2q1FkzLam7A01cQAAAkg"]
[Mon Nov 24 09:15:00.582692 2025] [:error] [pid 49900:tid 49910] [client 140.99.1.39:47915] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSOxlDCyPLrvg06aormLVAAAAAg"]
[Mon Nov 24 09:15:01.328941 2025] [:error] [pid 48688:tid 48697] [client 140.99.1.78:21649] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSOxlRm2q1FkzLam7A01eAAAAkU"]
[Mon Nov 24 09:15:03.533443 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.3:58781] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSOxl4MM4MaVTk74-AZFKgAAAgU"]
[Mon Nov 24 09:15:05.097813 2025] [:error] [pid 49900:tid 49920] [client 140.99.1.33:56015] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSOxmTCyPLrvg06aormLdAAAABI"]
[Mon Nov 24 09:15:05.440961 2025] [:error] [pid 48688:tid 48708] [client 140.99.1.50:38245] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSOxmRm2q1FkzLam7A01lAAAAlA"]
[Mon Nov 24 09:15:05.699246 2025] [:error] [pid 48599:tid 48624] [client 140.99.1.16:46423] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSOxmZzvu6PDJiRKE3LFOgAAAZU"]
[Mon Nov 24 09:15:05.935077 2025] [:error] [pid 48601:tid 48666] [client 140.99.1.39:63031] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSOxmYMM4MaVTk74-AZFNgAAAgk"]
[Mon Nov 24 09:15:06.380589 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.37:24829] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSOxmjCyPLrvg06aormLfgAAAAA"]
[Mon Nov 24 09:15:06.605173 2025] [:error] [pid 48599:tid 48625] [client 140.99.1.38:56055] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSOxmpzvu6PDJiRKE3LFQAAAAZY"]
[Mon Nov 24 09:15:07.245013 2025] [:error] [pid 48600:tid 48645] [client 140.99.1.46:63405] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSOxm_tOzSUAQvWVjBclcwAAAc8"]
[Mon Nov 24 09:15:07.451200 2025] [:error] [pid 48599:tid 48617] [client 140.99.1.2:37781] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSOxm5zvu6PDJiRKE3LFRgAAAY4"]
[Mon Nov 24 09:15:07.751855 2025] [:error] [pid 48688:tid 48697] [client 140.99.1.50:44391] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSOxmxm2q1FkzLam7A01vgAAAkU"]
[Mon Nov 24 09:15:07.971097 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.14:26281] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSOxmzCyPLrvg06aormLiQAAAA4"]
[Mon Nov 24 09:15:08.414211 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.9:54607] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSOxnDCyPLrvg06aormLjgAAAAA"]
[Mon Nov 24 09:15:08.840843 2025] [:error] [pid 48601:tid 48666] [client 140.99.1.7:43319] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSOxnIMM4MaVTk74-AZFRwAAAgk"]
[Mon Nov 24 09:15:09.474900 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.18:24135] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSOxnTCyPLrvg06aormLlwAAAAU"]
[Mon Nov 24 09:15:10.481690 2025] [:error] [pid 48599:tid 48614] [client 140.99.1.74:48271] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSOxnpzvu6PDJiRKE3LFUQAAAYs"]
[Mon Nov 24 09:15:11.227761 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.68:35999] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSOxnzCyPLrvg06aormLowAAABM"]
[Mon Nov 24 09:15:11.440104 2025] [:error] [pid 48601:tid 48677] [client 140.99.1.28:48267] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSOxn4MM4MaVTk74-AZFWgAAAhQ"]
[Mon Nov 24 09:15:12.161692 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.44:64545] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSOxoDCyPLrvg06aormLqwAAAAU"]
[Mon Nov 24 09:15:12.715643 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 140.99.1.73:42845] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:12.835634 2025] [proxy_fcgi:error] [pid 48601:tid 48678] [client 140.99.1.73:42845] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:12.943107 2025] [proxy_fcgi:error] [pid 48601:tid 48665] [client 140.99.1.73:42845] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:13.611766 2025] [:error] [pid 48601:tid 48657] [client 140.99.1.73:42845] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSOxoYMM4MaVTk74-AZFbQAAAgA"]
[Mon Nov 24 09:15:13.835571 2025] [:error] [pid 48601:tid 48663] [client 140.99.1.17:41655] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSOxoYMM4MaVTk74-AZFbgAAAgY"]
[Mon Nov 24 09:15:14.037985 2025] [:error] [pid 48601:tid 48666] [client 140.99.1.13:42775] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSOxooMM4MaVTk74-AZFcQAAAgk"]
[Mon Nov 24 09:15:14.297086 2025] [:error] [pid 48600:tid 48642] [client 140.99.1.52:43807] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSOxovtOzSUAQvWVjBclgAAAAcw"]
[Mon Nov 24 09:15:14.569384 2025] [:error] [pid 48600:tid 48633] [client 140.99.1.70:47905] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSOxovtOzSUAQvWVjBclgQAAAcM"]
[Mon Nov 24 09:15:14.793701 2025] [:error] [pid 48600:tid 48650] [client 140.99.1.15:56781] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSOxovtOzSUAQvWVjBclhQAAAdQ"]
[Mon Nov 24 09:15:15.125230 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.27:30655] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSOxozCyPLrvg06aormLtAAAAAA"]
[Mon Nov 24 09:15:15.373142 2025] [:error] [pid 48599:tid 48615] [client 140.99.1.68:29347] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSOxo5zvu6PDJiRKE3LFVAAAAYw"]
[Mon Nov 24 09:15:17.285425 2025] [:error] [pid 48601:tid 48672] [client 140.99.1.68:35291] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSOxpYMM4MaVTk74-AZFfgAAAg8"]
[Mon Nov 24 09:15:17.484888 2025] [:error] [pid 49900:tid 49908] [client 140.99.1.5:55849] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSOxpTCyPLrvg06aormLvwAAAAY"]
[Mon Nov 24 09:15:17.994724 2025] [:error] [pid 48601:tid 48674] [client 140.99.1.11:54627] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSOxpYMM4MaVTk74-AZFggAAAhE"]
[Mon Nov 24 09:15:18.344766 2025] [:error] [pid 48688:tid 48705] [client 140.99.1.65:46567] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSOxphm2q1FkzLam7A016QAAAk0"]
[Mon Nov 24 09:15:18.807964 2025] [:error] [pid 49900:tid 49917] [client 140.99.1.39:32959] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSOxpjCyPLrvg06aormLzAAAAA8"]
[Mon Nov 24 09:15:19.231819 2025] [:error] [pid 48600:tid 48652] [client 140.99.1.8:28791] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSOxp_tOzSUAQvWVjBclmgAAAdY"]
[Mon Nov 24 09:15:19.791764 2025] [:error] [pid 48688:tid 48696] [client 140.99.1.47:58651] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSOxpxm2q1FkzLam7A018gAAAkQ"]
[Mon Nov 24 09:15:22.132973 2025] [:error] [pid 49900:tid 49905] [client 140.99.1.3:40291] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSOxqjCyPLrvg06aormL5AAAAAM"]
[Mon Nov 24 09:15:23.973436 2025] [:error] [pid 49900:tid 49917] [client 140.99.1.47:24203] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSOxqzCyPLrvg06aormL8gAAAA8"]
[Mon Nov 24 09:15:26.187317 2025] [:error] [pid 48688:tid 48705] [client 140.99.1.73:57575] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSOxrhm2q1FkzLam7A02NwAAAk0"]
[Mon Nov 24 09:15:26.407926 2025] [:error] [pid 48599:tid 48606] [client 140.99.1.26:39361] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSOxrpzvu6PDJiRKE3LFYQAAAYM"]
[Mon Nov 24 09:15:26.635410 2025] [:error] [pid 48601:tid 48678] [client 140.99.1.44:37851] [client 140.99.1.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.44, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSOxroMM4MaVTk74-AZFngAAAhU"]
[Mon Nov 24 09:15:26.907124 2025] [:error] [pid 48601:tid 48675] [client 140.99.1.44:37851] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSOxroMM4MaVTk74-AZFogAAAhI"]
[Mon Nov 24 09:15:27.386204 2025] [:error] [pid 48599:tid 48603] [client 140.99.1.37:39471] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSOxr5zvu6PDJiRKE3LFZQAAAYA"]
[Mon Nov 24 09:15:27.578703 2025] [:error] [pid 48688:tid 48714] [client 140.99.1.65:42441] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSOxrxm2q1FkzLam7A02PgAAAlY"]
[Mon Nov 24 09:15:28.358222 2025] [:error] [pid 48601:tid 48661] [client 140.99.1.52:56275] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSOxsIMM4MaVTk74-AZFrAAAAgQ"]
[Mon Nov 24 09:15:28.557114 2025] [:error] [pid 48688:tid 48708] [client 140.99.1.68:22687] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aSOxsBm2q1FkzLam7A02RQAAAlA"]
[Mon Nov 24 09:15:29.444455 2025] [:error] [pid 48688:tid 48694] [client 140.99.1.6:64405] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSOxsRm2q1FkzLam7A02VQAAAkI"]
[Mon Nov 24 09:15:29.872741 2025] [proxy_fcgi:error] [pid 49900:tid 49905] [client 140.99.1.73:45039] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:30.107994 2025] [:error] [pid 49900:tid 49925] [client 140.99.1.73:45039] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSOxsjCyPLrvg06aormMDgAAABc"]
[Mon Nov 24 09:15:30.345496 2025] [:error] [pid 49900:tid 49915] [client 140.99.1.26:45069] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSOxsjCyPLrvg06aormMEAAAAA0"]
[Mon Nov 24 09:15:30.871242 2025] [:error] [pid 48600:tid 48646] [client 140.99.1.37:36399] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSOxsvtOzSUAQvWVjBclvQAAAdA"]
[Mon Nov 24 09:15:31.075105 2025] [:error] [pid 48600:tid 48636] [client 140.99.1.69:37511] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSOxs_tOzSUAQvWVjBclvgAAAcY"]
[Mon Nov 24 09:15:32.208499 2025] [:error] [pid 49900:tid 49904] [client 140.99.1.24:59405] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSOxtDCyPLrvg06aormMGwAAAAI"]
[Mon Nov 24 09:15:32.446955 2025] [:error] [pid 48601:tid 48675] [client 140.99.1.68:57141] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSOxtIMM4MaVTk74-AZFsAAAAhI"]
[Mon Nov 24 09:15:33.249742 2025] [:error] [pid 48600:tid 48637] [client 140.99.1.63:58601] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSOxtftOzSUAQvWVjBclyQAAAcc"]
[Mon Nov 24 09:15:33.449105 2025] [:error] [pid 48601:tid 48674] [client 140.99.1.38:25009] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSOxtYMM4MaVTk74-AZFsQAAAhE"]
[Mon Nov 24 09:15:33.631568 2025] [:error] [pid 48599:tid 48613] [client 140.99.1.48:32785] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSOxtZzvu6PDJiRKE3LFbQAAAYo"]
[Mon Nov 24 09:15:34.409807 2025] [:error] [pid 48688:tid 48700] [client 140.99.1.11:59083] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSOxthm2q1FkzLam7A02kQAAAkg"]
[Mon Nov 24 09:15:34.743029 2025] [:error] [pid 48599:tid 48606] [client 140.99.1.48:26081] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSOxtpzvu6PDJiRKE3LFcQAAAYM"]
[Mon Nov 24 09:15:35.776863 2025] [:error] [pid 48601:tid 48677] [client 140.99.1.3:30609] [client 140.99.1.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.3, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aSOxt4MM4MaVTk74-AZFuwAAAhQ"]
[Mon Nov 24 09:15:36.457187 2025] [:error] [pid 48601:tid 48675] [client 140.99.1.3:30609] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSOxuIMM4MaVTk74-AZFxAAAAhI"]
[Mon Nov 24 09:15:36.695993 2025] [:error] [pid 48601:tid 48669] [client 140.99.1.37:34769] [client 140.99.1.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.37, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSOxuIMM4MaVTk74-AZFxQAAAgw"]
[Mon Nov 24 09:15:38.134256 2025] [proxy_fcgi:error] [pid 48601:tid 48657] [client 140.99.1.37:34769] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:39.925096 2025] [:error] [pid 48601:tid 48681] [client 140.99.1.37:34769] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSOxu4MM4MaVTk74-AZF9gAAAhg"]
[Mon Nov 24 09:15:40.465950 2025] [:error] [pid 48601:tid 48668] [client 140.99.1.10:61381] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSOxvIMM4MaVTk74-AZGAAAAAgs"]
[Mon Nov 24 09:15:40.925085 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.37:44015] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSOxvDCyPLrvg06aormMNAAAAAA"]
[Mon Nov 24 09:15:42.479949 2025] [:error] [pid 48601:tid 48679] [client 140.99.1.3:38451] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSOxvoMM4MaVTk74-AZGHwAAAhY"]
[Mon Nov 24 09:15:43.027388 2025] [:error] [pid 48600:tid 48641] [client 140.99.1.68:40809] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSOxv_tOzSUAQvWVjBcl6AAAAcs"]
[Mon Nov 24 09:15:43.348509 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.74:61059] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSOxvzCyPLrvg06aormMOgAAABM"]
[Mon Nov 24 09:15:44.024085 2025] [proxy_fcgi:error] [pid 48600:tid 48652] [client 140.99.1.14:31285] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:44.144544 2025] [proxy_fcgi:error] [pid 48600:tid 48643] [client 140.99.1.14:31285] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:44.245091 2025] [:error] [pid 48600:tid 48630] [client 140.99.1.14:31285] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSOxwPtOzSUAQvWVjBcl8AAAAcA"]
[Mon Nov 24 09:15:46.443255 2025] [:error] [pid 48601:tid 48681] [client 140.99.1.46:60251] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSOxwoMM4MaVTk74-AZGRgAAAhg"]
[Mon Nov 24 09:15:47.545945 2025] [:error] [pid 49900:tid 49904] [client 140.99.1.8:37707] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSOxwzCyPLrvg06aormMTwAAAAI"]
[Mon Nov 24 09:15:47.858065 2025] [:error] [pid 49900:tid 49923] [client 140.99.1.7:31463] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aSOxwzCyPLrvg06aormMUgAAABU"]
[Mon Nov 24 09:15:48.511128 2025] [:error] [pid 48600:tid 48632] [client 140.99.1.53:57197] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSOxxPtOzSUAQvWVjBcl-wAAAcI"]
[Mon Nov 24 09:15:49.627035 2025] [:error] [pid 48688:tid 48713] [client 140.99.1.50:41193] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSOxxRm2q1FkzLam7A020gAAAlU"]
[Mon Nov 24 09:15:49.903641 2025] [proxy_fcgi:error] [pid 48599:tid 48627] [client 140.99.1.8:24581] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:50.239018 2025] [:error] [pid 48599:tid 48607] [client 140.99.1.8:24581] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSOxxpzvu6PDJiRKE3LF0AAAAYQ"]
[Mon Nov 24 09:15:51.154983 2025] [proxy_fcgi:error] [pid 49900:tid 49921] [client 140.99.1.33:29663] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:51.356148 2025] [:error] [pid 49900:tid 49924] [client 140.99.1.33:29663] [client 140.99.1.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.33, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSOxxzCyPLrvg06aormMYQAAABY"]
[Mon Nov 24 09:15:51.963283 2025] [:error] [pid 49900:tid 49918] [client 140.99.1.33:29663] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSOxxzCyPLrvg06aormMaAAAABA"]
[Mon Nov 24 09:15:52.293823 2025] [:error] [pid 48688:tid 48707] [client 140.99.1.28:46087] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSOxyBm2q1FkzLam7A023AAAAk8"]
[Mon Nov 24 09:15:52.968061 2025] [:error] [pid 48601:tid 48660] [client 140.99.1.43:22935] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSOxyIMM4MaVTk74-AZGfwAAAgM"]
[Mon Nov 24 09:15:53.644154 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.75:31141] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSOxyYMM4MaVTk74-AZGhQAAAgU"]
[Mon Nov 24 09:15:54.048818 2025] [:error] [pid 48688:tid 48711] [client 140.99.1.39:54585] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSOxyhm2q1FkzLam7A024wAAAlM"]
[Mon Nov 24 09:15:54.604856 2025] [:error] [pid 48599:tid 48603] [client 140.99.1.37:30403] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSOxypzvu6PDJiRKE3LF1gAAAYA"]
[Mon Nov 24 09:15:55.155957 2025] [proxy_fcgi:error] [pid 48600:tid 48652] [client 140.99.1.32:33377] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:55.262910 2025] [:error] [pid 48600:tid 48643] [client 140.99.1.32:33377] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSOxy_tOzSUAQvWVjBcmCwAAAc0"]
[Mon Nov 24 09:15:55.654175 2025] [:error] [pid 48600:tid 48654] [client 140.99.1.33:44319] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSOxy_tOzSUAQvWVjBcmDgAAAdg"]
[Mon Nov 24 09:15:55.881682 2025] [:error] [pid 48600:tid 48630] [client 140.99.1.65:42657] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSOxy_tOzSUAQvWVjBcmDwAAAcA"]
[Mon Nov 24 09:15:56.094709 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.37:30071] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSOxzDCyPLrvg06aormMcgAAABM"]
[Mon Nov 24 09:15:56.345163 2025] [:error] [pid 48599:tid 48607] [client 140.99.1.76:64149] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSOxzJzvu6PDJiRKE3LF2QAAAYQ"]
[Mon Nov 24 09:15:56.650950 2025] [:error] [pid 48688:tid 48712] [client 140.99.1.73:60897] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSOxzBm2q1FkzLam7A026gAAAlQ"]
[Mon Nov 24 09:15:56.867758 2025] [:error] [pid 48599:tid 48614] [client 140.99.1.5:43535] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSOxzJzvu6PDJiRKE3LF2gAAAYs"]
[Mon Nov 24 09:15:57.357198 2025] [:error] [pid 48599:tid 48621] [client 140.99.1.27:50017] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSOxzZzvu6PDJiRKE3LF3gAAAZI"]
[Mon Nov 24 09:15:57.720385 2025] [:error] [pid 48601:tid 48677] [client 140.99.1.74:39871] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSOxzYMM4MaVTk74-AZGjAAAAhQ"]
[Mon Nov 24 09:15:57.966749 2025] [:error] [pid 48599:tid 48615] [client 140.99.1.46:53405] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSOxzZzvu6PDJiRKE3LF3wAAAYw"]
[Mon Nov 24 09:15:58.366972 2025] [:error] [pid 48688:tid 48701] [client 140.99.1.9:42437] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSOxzhm2q1FkzLam7A027gAAAkk"]
[Mon Nov 24 09:15:58.799036 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.43:38267] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSOxzjCyPLrvg06aormMfAAAAAA"]
[Mon Nov 24 09:15:59.010695 2025] [proxy_fcgi:error] [pid 48601:tid 48680] [client 140.99.1.65:44259] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:15:59.681701 2025] [:error] [pid 48601:tid 48676] [client 140.99.1.65:44259] [client 140.99.1.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.65, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSOxz4MM4MaVTk74-AZGlQAAAhM"]
[Mon Nov 24 09:16:00.449919 2025] [:error] [pid 48601:tid 48679] [client 140.99.1.65:44259] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSOx0IMM4MaVTk74-AZGnAAAAhY"]
[Mon Nov 24 09:16:00.684324 2025] [:error] [pid 49900:tid 49908] [client 140.99.1.15:36437] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSOx0DCyPLrvg06aormMgQAAAAY"]
[Mon Nov 24 09:16:03.967954 2025] [:error] [pid 48600:tid 48643] [client 140.99.1.69:27095] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSOx0_tOzSUAQvWVjBcmMwAAAc0"]
[Mon Nov 24 09:16:04.205462 2025] [:error] [pid 49900:tid 49909] [client 140.99.1.10:44755] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSOx1DCyPLrvg06aormMjgAAAAc"]
[Mon Nov 24 09:16:04.612745 2025] [:error] [pid 48600:tid 48644] [client 140.99.1.43:51163] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSOx1PtOzSUAQvWVjBcmNgAAAc4"]
[Mon Nov 24 09:16:05.718915 2025] [:error] [pid 48601:tid 48663] [client 140.99.1.37:51481] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSOx1YMM4MaVTk74-AZGrAAAAgY"]
[Mon Nov 24 09:16:05.945919 2025] [:error] [pid 48688:tid 48713] [client 140.99.1.65:55079] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSOx1Rm2q1FkzLam7A02_wAAAlU"]
[Mon Nov 24 09:16:06.151979 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.39:54547] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSOx1jCyPLrvg06aormMmAAAAAU"]
[Mon Nov 24 09:16:08.661439 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.49:62305] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSOx2Bm2q1FkzLam7A03CgAAAlI"]
[Mon Nov 24 09:16:09.414109 2025] [:error] [pid 48601:tid 48658] [client 140.99.1.20:20109] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSOx2YMM4MaVTk74-AZGtgAAAgE"]
[Mon Nov 24 09:16:09.973128 2025] [:error] [pid 48599:tid 48611] [client 140.99.1.14:60665] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSOx2Zzvu6PDJiRKE3LF8wAAAYg"]
[Mon Nov 24 09:16:11.751084 2025] [:error] [pid 48600:tid 48648] [client 140.99.1.72:31553] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSOx2_tOzSUAQvWVjBcmWwAAAdI"]
[Mon Nov 24 09:16:12.250608 2025] [:error] [pid 48599:tid 48609] [client 140.99.1.74:63227] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSOx3Jzvu6PDJiRKE3LF-QAAAYY"]
[Mon Nov 24 09:16:13.275880 2025] [:error] [pid 48599:tid 48605] [client 140.99.1.67:55641] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSOx3Zzvu6PDJiRKE3LGAwAAAYI"]
[Mon Nov 24 09:16:13.737663 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.43:36633] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSOx3TCyPLrvg06aormMtAAAAAU"]
[Mon Nov 24 09:16:14.647990 2025] [:error] [pid 48599:tid 48610] [client 140.99.1.16:41227] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSOx3pzvu6PDJiRKE3LGCgAAAYc"]
[Mon Nov 24 09:16:15.470139 2025] [:error] [pid 48601:tid 48669] [client 140.99.1.8:22535] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSOx34MM4MaVTk74-AZGxAAAAgw"]
[Mon Nov 24 09:16:15.967982 2025] [:error] [pid 48600:tid 48634] [client 140.99.1.62:62419] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSOx3_tOzSUAQvWVjBcmZQAAAcQ"]
[Mon Nov 24 09:16:16.157072 2025] [:error] [pid 49900:tid 49904] [client 140.99.1.71:21759] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSOx4DCyPLrvg06aormMvAAAAAI"]
[Mon Nov 24 09:16:17.134105 2025] [:error] [pid 48601:tid 48673] [client 140.99.1.43:43655] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSOx4YMM4MaVTk74-AZGzgAAAhA"]
[Mon Nov 24 09:16:18.093700 2025] [:error] [pid 48599:tid 48612] [client 140.99.1.42:59045] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSOx4pzvu6PDJiRKE3LGFgAAAYk"]
[Mon Nov 24 09:16:18.973597 2025] [:error] [pid 48688:tid 48698] [client 140.99.1.37:22385] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSOx4hm2q1FkzLam7A03KAAAAkY"]
[Mon Nov 24 09:16:19.190734 2025] [:error] [pid 49900:tid 49926] [client 140.99.1.44:60867] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSOx4zCyPLrvg06aormMxwAAABg"]
[Mon Nov 24 09:16:19.679768 2025] [:error] [pid 48688:tid 48695] [client 140.99.1.75:43601] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSOx4xm2q1FkzLam7A03LgAAAkM"]
[Mon Nov 24 09:16:20.264419 2025] [:error] [pid 49900:tid 49923] [client 140.99.1.16:29773] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSOx5DCyPLrvg06aormMzwAAABU"]
[Mon Nov 24 09:16:20.517643 2025] [:error] [pid 48688:tid 48714] [client 140.99.1.72:20887] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSOx5Bm2q1FkzLam7A03MgAAAlY"]
[Mon Nov 24 09:16:21.565100 2025] [:error] [pid 49900:tid 49905] [client 140.99.1.3:33495] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSOx5TCyPLrvg06aormM2AAAAAM"]
[Mon Nov 24 09:16:21.972125 2025] [:error] [pid 48601:tid 48661] [client 140.99.1.49:49663] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSOx5YMM4MaVTk74-AZG1QAAAgQ"]
[Mon Nov 24 09:16:22.197714 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.74:37881] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSOx5jCyPLrvg06aormM3AAAAA4"]
[Mon Nov 24 09:16:23.031161 2025] [:error] [pid 48599:tid 48621] [client 140.99.1.27:35371] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSOx55zvu6PDJiRKE3LGHgAAAZI"]
[Mon Nov 24 09:16:23.368192 2025] [:error] [pid 49900:tid 49903] [client 140.99.1.46:48603] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSOx5zCyPLrvg06aormM5wAAAAE"]
[Mon Nov 24 09:16:24.288787 2025] [:error] [pid 48599:tid 48603] [client 140.99.1.49:35137] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSOx6Jzvu6PDJiRKE3LGJQAAAYA"]
[Mon Nov 24 09:16:24.771161 2025] [:error] [pid 48688:tid 48707] [client 140.99.1.62:63597] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSOx6Bm2q1FkzLam7A03SAAAAk8"]
[Mon Nov 24 09:16:25.331816 2025] [:error] [pid 48600:tid 48640] [client 140.99.1.38:42889] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSOx6ftOzSUAQvWVjBcmfgAAAco"]
[Mon Nov 24 09:16:25.634698 2025] [:error] [pid 48688:tid 48699] [client 140.99.1.42:59145] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSOx6Rm2q1FkzLam7A03TwAAAkc"]
[Mon Nov 24 09:16:26.053340 2025] [:error] [pid 48688:tid 48705] [client 140.99.1.17:46073] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSOx6hm2q1FkzLam7A03VAAAAk0"]
[Mon Nov 24 09:16:26.325114 2025] [:error] [pid 48688:tid 48698] [client 140.99.1.26:32915] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSOx6hm2q1FkzLam7A03VgAAAkY"]
[Mon Nov 24 09:16:26.567726 2025] [:error] [pid 48601:tid 48680] [client 140.99.1.18:37315] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSOx6oMM4MaVTk74-AZG3AAAAhc"]
[Mon Nov 24 09:16:27.510774 2025] [:error] [pid 48601:tid 48661] [client 140.99.1.18:41809] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSOx64MM4MaVTk74-AZG4wAAAgQ"]
[Mon Nov 24 09:16:28.210312 2025] [:error] [pid 49900:tid 49907] [client 140.99.1.7:56621] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSOx7DCyPLrvg06aormM_wAAAAU"]
[Mon Nov 24 09:16:28.841160 2025] [:error] [pid 49900:tid 49906] [client 140.99.1.37:22989] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSOx7DCyPLrvg06aormNBQAAAAQ"]
[Mon Nov 24 09:16:29.542900 2025] [:error] [pid 48688:tid 48716] [client 140.99.1.48:41599] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSOx7Rm2q1FkzLam7A03YQAAAlg"]
[Mon Nov 24 09:16:30.409624 2025] [:error] [pid 49900:tid 49925] [client 140.99.1.5:26271] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSOx7jCyPLrvg06aormNFAAAABc"]
[Mon Nov 24 09:16:30.823868 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.31:56121] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSOx7oMM4MaVTk74-AZG6AAAAgU"]
[Mon Nov 24 09:16:31.138071 2025] [:error] [pid 49900:tid 49904] [client 140.99.1.69:50555] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSOx7zCyPLrvg06aormNGAAAAAI"]
[Mon Nov 24 09:16:33.087874 2025] [:error] [pid 48601:tid 48678] [client 140.99.1.71:62417] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSOx8YMM4MaVTk74-AZG7gAAAhU"]
[Mon Nov 24 09:16:34.238147 2025] [:error] [pid 48688:tid 48698] [client 140.99.1.43:47321] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSOx8hm2q1FkzLam7A03dQAAAkY"]
[Mon Nov 24 09:16:34.443723 2025] [:error] [pid 48599:tid 48605] [client 140.99.1.65:44169] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSOx8pzvu6PDJiRKE3LGOgAAAYI"]
[Mon Nov 24 09:16:35.025665 2025] [:error] [pid 49900:tid 49911] [client 140.99.1.9:64355] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSOx8zCyPLrvg06aormNLgAAAAk"]
[Mon Nov 24 09:16:35.209848 2025] [:error] [pid 48599:tid 48616] [client 140.99.1.42:21289] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSOx85zvu6PDJiRKE3LGOwAAAY0"]
[Mon Nov 24 09:16:35.676878 2025] [:error] [pid 48688:tid 48716] [client 140.99.1.74:31433] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSOx8xm2q1FkzLam7A03fwAAAlg"]
[Mon Nov 24 09:16:35.880146 2025] [:error] [pid 48688:tid 48702] [client 140.99.1.46:49325] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSOx8xm2q1FkzLam7A03gQAAAko"]
[Mon Nov 24 09:16:36.071663 2025] [:error] [pid 48599:tid 48606] [client 140.99.1.49:31191] [client 140.99.1.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.49, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSOx9Jzvu6PDJiRKE3LGPwAAAYM"]
[Mon Nov 24 09:16:36.078604 2025] [proxy_fcgi:error] [pid 48599:tid 48606] [client 140.99.1.49:31191] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:16:36.172615 2025] [:error] [pid 48599:tid 48618] [client 140.99.1.49:31191] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSOx9Jzvu6PDJiRKE3LGQAAAAY8"]
[Mon Nov 24 09:16:36.796617 2025] [:error] [pid 48688:tid 48704] [client 140.99.1.24:61377] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSOx9Bm2q1FkzLam7A03hwAAAkw"]
[Mon Nov 24 09:16:37.020902 2025] [:error] [pid 49900:tid 49922] [client 140.99.1.74:44303] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSOx9TCyPLrvg06aormNNQAAABQ"]
[Mon Nov 24 09:16:38.071652 2025] [:error] [pid 48601:tid 48675] [client 140.99.1.75:55073] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSOx9oMM4MaVTk74-AZG_AAAAhI"]
[Mon Nov 24 09:16:38.364669 2025] [:error] [pid 48601:tid 48681] [client 140.99.1.49:37811] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSOx9oMM4MaVTk74-AZG_QAAAhg"]
[Mon Nov 24 09:16:38.875960 2025] [:error] [pid 48600:tid 48634] [client 140.99.1.3:26613] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSOx9vtOzSUAQvWVjBcmnwAAAcQ"]
[Mon Nov 24 09:16:39.185148 2025] [:error] [pid 48601:tid 48661] [client 140.99.1.77:28783] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSOx94MM4MaVTk74-AZG_wAAAgQ"]
[Mon Nov 24 09:16:39.437383 2025] [proxy_fcgi:error] [pid 48601:tid 48666] [client 140.99.1.62:51813] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:16:39.532665 2025] [:error] [pid 48601:tid 48657] [client 140.99.1.62:51813] [client 140.99.1.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.62, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSOx94MM4MaVTk74-AZHAgAAAgA"]
[Mon Nov 24 09:16:39.873441 2025] [:error] [pid 48601:tid 48664] [client 140.99.1.62:51813] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSOx94MM4MaVTk74-AZHBAAAAgc"]
[Mon Nov 24 09:16:42.017660 2025] [:error] [pid 48601:tid 48674] [client 140.99.1.30:51617] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSOx-oMM4MaVTk74-AZHCwAAAhE"]
[Mon Nov 24 09:16:42.405492 2025] [:error] [pid 48688:tid 48700] [client 140.99.1.76:31345] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSOx-hm2q1FkzLam7A03kQAAAkg"]
[Mon Nov 24 09:16:42.597437 2025] [:error] [pid 49900:tid 49910] [client 140.99.1.9:62327] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSOx-jCyPLrvg06aormNRwAAAAg"]
[Mon Nov 24 09:16:43.141608 2025] [:error] [pid 48599:tid 48626] [client 140.99.1.28:57009] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSOx-5zvu6PDJiRKE3LGVgAAAZc"]
[Mon Nov 24 09:16:43.847219 2025] [:error] [pid 48688:tid 48710] [client 140.99.1.32:38815] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSOx-xm2q1FkzLam7A03lgAAAlI"]
[Mon Nov 24 09:16:44.490183 2025] [:error] [pid 48599:tid 48613] [client 140.99.1.28:40989] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSOx_Jzvu6PDJiRKE3LGWwAAAYo"]
[Mon Nov 24 09:16:44.800576 2025] [:error] [pid 48688:tid 48702] [client 140.99.1.28:52461] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSOx_Bm2q1FkzLam7A03mQAAAko"]
[Mon Nov 24 09:16:45.186941 2025] [:error] [pid 48688:tid 48715] [client 140.99.1.70:26111] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSOx_Rm2q1FkzLam7A03nAAAAlc"]
[Mon Nov 24 09:16:46.071078 2025] [:error] [pid 48688:tid 48699] [client 140.99.1.20:37351] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSOx_hm2q1FkzLam7A03owAAAkc"]
[Mon Nov 24 09:16:46.533146 2025] [:error] [pid 49900:tid 49923] [client 140.99.1.68:24377] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSOx_jCyPLrvg06aormNUAAAABU"]
[Mon Nov 24 09:16:46.697877 2025] [:error] [pid 49900:tid 49921] [client 140.99.1.68:24377] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSOx_jCyPLrvg06aormNUQAAABM"]
[Mon Nov 24 09:16:47.298981 2025] [:error] [pid 48599:tid 48610] [client 140.99.1.76:40665] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSOx_5zvu6PDJiRKE3LGYwAAAYc"]
[Mon Nov 24 09:16:47.497707 2025] [:error] [pid 48601:tid 48664] [client 140.99.1.67:25399] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSOx_4MM4MaVTk74-AZHJgAAAgc"]
[Mon Nov 24 09:16:48.831167 2025] [:error] [pid 49900:tid 49919] [client 140.99.1.47:29401] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSOyADCyPLrvg06aormNXwAAABE"]
[Mon Nov 24 09:16:49.266144 2025] [:error] [pid 48599:tid 48620] [client 140.99.1.5:45803] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSOyAZzvu6PDJiRKE3LGdQAAAZE"]
[Mon Nov 24 09:16:49.677091 2025] [:error] [pid 48600:tid 48649] [client 140.99.1.31:45943] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSOyAftOzSUAQvWVjBcmxgAAAdM"]
[Mon Nov 24 09:16:50.621617 2025] [:error] [pid 48600:tid 48646] [client 140.99.1.13:28905] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSOyAvtOzSUAQvWVjBcm0gAAAdA"]
[Mon Nov 24 09:16:50.972063 2025] [:error] [pid 48601:tid 48673] [client 140.99.1.76:57845] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSOyAoMM4MaVTk74-AZHLgAAAhA"]
[Mon Nov 24 09:16:51.426874 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.72:22221] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSOyAzCyPLrvg06aormNbQAAAA4"]
[Mon Nov 24 09:16:51.698175 2025] [:error] [pid 48599:tid 48618] [client 140.99.1.73:39667] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSOyA5zvu6PDJiRKE3LGewAAAY8"]
[Mon Nov 24 09:16:52.506876 2025] [:error] [pid 48600:tid 48654] [client 140.99.1.6:39591] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSOyBPtOzSUAQvWVjBcm2QAAAdg"]
[Mon Nov 24 09:16:53.160109 2025] [:error] [pid 48601:tid 48660] [client 140.99.1.42:22283] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSOyBYMM4MaVTk74-AZHNQAAAgM"]
[Mon Nov 24 09:16:53.433177 2025] [:error] [pid 49900:tid 49913] [client 140.99.1.14:52489] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSOyBTCyPLrvg06aormNcQAAAAs"]
[Mon Nov 24 09:16:54.231708 2025] [:error] [pid 48600:tid 48630] [client 140.99.1.43:25825] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSOyBvtOzSUAQvWVjBcm4wAAAcA"]
[Mon Nov 24 09:16:54.730225 2025] [:error] [pid 48599:tid 48619] [client 140.99.1.70:46437] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSOyBpzvu6PDJiRKE3LGggAAAZA"]
[Mon Nov 24 09:16:55.309787 2025] [:error] [pid 49900:tid 49904] [client 140.99.1.44:54445] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSOyBzCyPLrvg06aormNewAAAAI"]
[Mon Nov 24 09:16:55.501704 2025] [:error] [pid 48599:tid 48613] [client 140.99.1.78:22153] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSOyB5zvu6PDJiRKE3LGgwAAAYo"]
[Mon Nov 24 09:16:57.272644 2025] [:error] [pid 48599:tid 48605] [client 140.99.1.49:59569] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSOyCZzvu6PDJiRKE3LGhwAAAYI"]
[Mon Nov 24 09:16:57.698271 2025] [:error] [pid 48599:tid 48626] [client 140.99.1.75:26819] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSOyCZzvu6PDJiRKE3LGjAAAAZc"]
[Mon Nov 24 09:16:58.193609 2025] [:error] [pid 48599:tid 48608] [client 140.99.1.52:47041] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSOyCpzvu6PDJiRKE3LGkAAAAYU"]
[Mon Nov 24 09:16:58.438585 2025] [:error] [pid 48600:tid 48634] [client 140.99.1.71:30729] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSOyCvtOzSUAQvWVjBcm6gAAAcQ"]
[Mon Nov 24 09:16:58.812041 2025] [:error] [pid 48688:tid 48693] [client 140.99.1.3:33619] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSOyChm2q1FkzLam7A03xwAAAkE"]
[Mon Nov 24 09:16:59.010156 2025] [:error] [pid 48601:tid 48662] [client 140.99.1.75:34587] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSOyC4MM4MaVTk74-AZHPQAAAgU"]
[Mon Nov 24 09:17:01.115747 2025] [:error] [pid 48688:tid 48708] [client 140.99.1.53:33733] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSOyDRm2q1FkzLam7A031gAAAlA"]
[Mon Nov 24 09:17:02.311178 2025] [:error] [pid 49900:tid 49919] [client 140.99.1.5:53701] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSOyDjCyPLrvg06aormNiwAAABE"]
[Mon Nov 24 09:17:02.672644 2025] [:error] [pid 48600:tid 48654] [client 140.99.1.33:21711] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSOyDvtOzSUAQvWVjBcm8wAAAdg"]
[Mon Nov 24 09:17:02.907004 2025] [:error] [pid 49900:tid 49906] [client 140.99.1.68:47929] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSOyDjCyPLrvg06aormNjgAAAAQ"]
[Mon Nov 24 09:17:06.358067 2025] [:error] [pid 49900:tid 49915] [client 140.99.1.11:53463] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSOyEjCyPLrvg06aormNnQAAAA0"]
[Mon Nov 24 09:17:06.956340 2025] [:error] [pid 48688:tid 48712] [client 140.99.1.26:26935] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSOyEhm2q1FkzLam7A035gAAAlQ"]
[Mon Nov 24 09:17:07.271863 2025] [:error] [pid 48600:tid 48651] [client 140.99.1.67:63355] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSOyE_tOzSUAQvWVjBcm-gAAAdU"]
[Mon Nov 24 09:17:07.805563 2025] [:error] [pid 48600:tid 48638] [client 140.99.1.11:22235] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSOyE_tOzSUAQvWVjBcm_QAAAcg"]
[Mon Nov 24 09:17:09.060775 2025] [:error] [pid 48600:tid 48651] [client 140.99.1.39:59637] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSOyFftOzSUAQvWVjBcnCQAAAdU"]
[Mon Nov 24 09:17:10.379790 2025] [:error] [pid 48599:tid 48609] [client 140.99.1.42:62465] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSOyFpzvu6PDJiRKE3LGpgAAAYY"]
[Mon Nov 24 09:17:10.803721 2025] [:error] [pid 48599:tid 48615] [client 140.99.1.13:62127] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSOyFpzvu6PDJiRKE3LGqQAAAYw"]
[Mon Nov 24 09:17:11.466987 2025] [:error] [pid 48600:tid 48641] [client 140.99.1.68:43331] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSOyF_tOzSUAQvWVjBcnEQAAAcs"]
[Mon Nov 24 09:17:11.865176 2025] [:error] [pid 48601:tid 48671] [client 140.99.1.68:64921] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSOyF4MM4MaVTk74-AZHTgAAAg4"]
[Mon Nov 24 09:17:12.274416 2025] [:error] [pid 48600:tid 48637] [client 140.99.1.44:43011] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSOyGPtOzSUAQvWVjBcnFwAAAcc"]
[Mon Nov 24 09:17:12.617496 2025] [:error] [pid 48600:tid 48633] [client 140.99.1.75:33217] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSOyGPtOzSUAQvWVjBcnGwAAAcM"]
[Mon Nov 24 09:17:12.990288 2025] [:error] [pid 48688:tid 48708] [client 140.99.1.73:39509] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSOyGBm2q1FkzLam7A039wAAAlA"]
[Mon Nov 24 09:17:13.702873 2025] [:error] [pid 49900:tid 49925] [client 140.99.1.77:62509] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSOyGTCyPLrvg06aormNsQAAABc"]
[Mon Nov 24 09:17:14.299847 2025] [:error] [pid 48600:tid 48639] [client 140.99.1.9:35123] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSOyGvtOzSUAQvWVjBcnJAAAAck"]
[Mon Nov 24 09:17:14.544523 2025] [proxy_fcgi:error] [pid 48601:tid 48678] [client 140.99.1.72:31201] AH01071: Got error 'Primary script unknown'
[Mon Nov 24 09:17:14.651402 2025] [:error] [pid 48601:tid 48666] [client 140.99.1.72:31201] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSOyGoMM4MaVTk74-AZHUgAAAgk"]
[Mon Nov 24 09:17:14.851999 2025] [:error] [pid 48600:tid 48642] [client 140.99.1.72:20555] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSOyGvtOzSUAQvWVjBcnKAAAAcw"]
[Mon Nov 24 09:17:15.331958 2025] [:error] [pid 48599:tid 48624] [client 140.99.1.26:22419] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSOyG5zvu6PDJiRKE3LGsgAAAZU"]
[Mon Nov 24 09:17:15.547229 2025] [:error] [pid 49900:tid 49902] [client 140.99.1.13:43461] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSOyGzCyPLrvg06aormNswAAAAA"]
[Mon Nov 24 09:17:16.680364 2025] [:error] [pid 48600:tid 48641] [client 140.99.1.46:53855] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSOyHPtOzSUAQvWVjBcnNAAAAcs"]
[Mon Nov 24 09:17:16.868792 2025] [:error] [pid 49900:tid 49913] [client 140.99.1.77:48491] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSOyHDCyPLrvg06aormNuAAAAAs"]
[Mon Nov 24 09:17:18.684483 2025] [:error] [pid 48600:tid 48632] [client 140.99.1.15:43811] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSOyHvtOzSUAQvWVjBcnOgAAAcI"]
[Mon Nov 24 09:17:18.927693 2025] [:error] [pid 48688:tid 48698] [client 140.99.1.28:21785] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSOyHhm2q1FkzLam7A04BwAAAkY"]
[Mon Nov 24 09:17:19.196664 2025] [:error] [pid 48599:tid 48613] [client 140.99.1.7:54967] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSOyH5zvu6PDJiRKE3LGvQAAAYo"]
[Mon Nov 24 09:17:19.498866 2025] [:error] [pid 48688:tid 48703] [client 140.99.1.9:56735] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSOyHxm2q1FkzLam7A04CQAAAks"]
[Mon Nov 24 09:17:21.630583 2025] [:error] [pid 48599:tid 48613] [client 140.99.1.11:31461] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSOyIZzvu6PDJiRKE3LGyQAAAYo"]
[Mon Nov 24 09:17:21.894931 2025] [:error] [pid 48600:tid 48633] [client 140.99.1.14:25029] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSOyIftOzSUAQvWVjBcnPwAAAcM"]
[Mon Nov 24 09:17:22.373792 2025] [:error] [pid 49900:tid 49915] [client 140.99.1.14:42489] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSOyIjCyPLrvg06aormNwQAAAA0"]
[Mon Nov 24 09:17:22.668795 2025] [:error] [pid 48688:tid 48715] [client 140.99.1.49:49999] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSOyIhm2q1FkzLam7A04FgAAAlc"]
[Mon Nov 24 09:17:23.087846 2025] [:error] [pid 48599:tid 48618] [client 140.99.1.46:58343] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSOyI5zvu6PDJiRKE3LGzgAAAY8"]
[Mon Nov 24 09:17:23.334658 2025] [:error] [pid 49900:tid 49916] [client 140.99.1.48:42521] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSOyIzCyPLrvg06aormNxgAAAA4"]
[Mon Nov 24 09:17:24.405096 2025] [:error] [pid 48600:tid 48638] [client 140.99.1.37:55895] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSOyJPtOzSUAQvWVjBcnTQAAAcg"]
[Mon Nov 24 09:17:24.601377 2025] [:error] [pid 48688:tid 48716] [client 140.99.1.32:27757] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSOyJBm2q1FkzLam7A04HgAAAlg"]
[Mon Nov 24 09:17:25.218145 2025] [:error] [pid 48599:tid 48608] [client 140.99.1.24:35023] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSOyJZzvu6PDJiRKE3LG1AAAAYU"]
[Mon Nov 24 09:17:25.706818 2025] [:error] [pid 48599:tid 48617] [client 140.99.1.53:58575] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSOyJZzvu6PDJiRKE3LG1wAAAY4"]
[Mon Nov 24 09:17:26.052871 2025] [:error] [pid 48600:tid 48654] [client 140.99.1.69:40059] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSOyJvtOzSUAQvWVjBcnUwAAAdg"]
[Mon Nov 24 09:17:26.285621 2025] [:error] [pid 48599:tid 48627] [client 140.99.1.28:64211] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSOyJpzvu6PDJiRKE3LG2AAAAZg"]
[Mon Nov 24 09:17:26.505161 2025] [:error] [pid 48600:tid 48632] [client 140.99.1.26:52577] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSOyJvtOzSUAQvWVjBcnVQAAAcI"]
[Mon Nov 24 09:17:27.192314 2025] [:error] [pid 48600:tid 48643] [client 140.99.1.37:27665] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSOyJ_tOzSUAQvWVjBcnWQAAAc0"]
[Mon Nov 24 09:17:27.665158 2025] [:error] [pid 48599:tid 48612] [client 140.99.1.77:37737] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSOyJ5zvu6PDJiRKE3LG3wAAAYk"]
[Mon Nov 24 09:17:28.322527 2025] [:error] [pid 48600:tid 48642] [client 140.99.1.3:42657] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSOyKPtOzSUAQvWVjBcnYQAAAcw"]
[Mon Nov 24 09:17:28.547943 2025] [:error] [pid 48600:tid 48632] [client 140.99.1.5:38241] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSOyKPtOzSUAQvWVjBcnYgAAAcI"]
[Mon Nov 24 09:17:28.957590 2025] [:error] [pid 48600:tid 48635] [client 140.99.1.14:46143] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSOyKPtOzSUAQvWVjBcnZgAAAcU"]
[Mon Nov 24 09:17:30.280063 2025] [:error] [pid 48601:tid 48668] [client 140.99.1.44:55509] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSOyKoMM4MaVTk74-AZHbgAAAgs"]
[Mon Nov 24 09:17:30.794833 2025] [:error] [pid 48688:tid 48703] [client 140.99.1.8:50807] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSOyKhm2q1FkzLam7A04KQAAAks"]
[Mon Nov 24 09:17:31.352695 2025] [:error] [pid 48688:tid 48700] [client 140.99.1.53:61379] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSOyKxm2q1FkzLam7A04LgAAAkg"]
[Mon Nov 24 09:17:31.544038 2025] [:error] [pid 48600:tid 48653] [client 140.99.1.18:25083] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSOyK_tOzSUAQvWVjBcnbwAAAdc"]
[Mon Nov 24 09:17:31.747060 2025] [:error] [pid 48688:tid 48701] [client 140.99.1.28:22585] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSOyKxm2q1FkzLam7A04LwAAAkk"]
[Mon Nov 24 10:22:03.932941 2025] [:error] [pid 49900:tid 49913] [client 78.47.98.55:52662] [client 78.47.98.55] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "140.99.1.27_3419b8871e3c107029d7d0beb9cac836baa5e71e"): Internal error (specific information not available) [hostname "measureyourcause.com.au"] [uri "/index.php"] [unique_id "aSPBSTCyPLrvg06aormxAgAAAAs"], referer: https://measureyourcause.com.au/
[Mon Nov 24 10:24:18.208446 2025] [:error] [pid 49900:tid 49910] [client 101.91.148.219:45346] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSPB0jCyPLrvg06aormyEQAAAAg"]
[Mon Nov 24 14:14:10.770659 2025] [:error] [pid 49900:tid 49911] [client 177.37.140.226:16738] [client 177.37.140.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.37.140.226, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSP3sjCyPLrvg06aornlJwAAAAk"]
[Mon Nov 24 16:06:47.454322 2025] [:error] [pid 9630:tid 9639] [client 172.177.3.143:65404] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aSQSFyrSgUgPGkizt2reKQAAAEc"]
[Mon Nov 24 16:06:48.923233 2025] [:error] [pid 48599:tid 48613] [client 172.177.3.143:65324] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aSQSGJzvu6PDJiRKE3IWSgAAAYo"]
[Mon Nov 24 16:06:50.155402 2025] [:error] [pid 16593:tid 16617] [client 172.177.3.143:65366] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aSQSGhVGznHBJI2LKpQx3AAAApY"]
[Mon Nov 24 16:06:51.660476 2025] [:error] [pid 48599:tid 48624] [client 172.177.3.143:65371] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aSQSG5zvu6PDJiRKE3IWSwAAAZU"]
[Mon Nov 24 16:06:53.575258 2025] [:error] [pid 48601:tid 48664] [client 172.177.3.143:65291] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aSQSHYMM4MaVTk74-AakLQAAAgc"]
[Mon Nov 24 16:06:55.468868 2025] [:error] [pid 48599:tid 48612] [client 172.177.3.143:65393] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aSQSH5zvu6PDJiRKE3IWTQAAAYk"]
[Mon Nov 24 16:06:56.888592 2025] [:error] [pid 9630:tid 9635] [client 172.177.3.143:65294] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aSQSICrSgUgPGkizt2reMQAAAEM"]
[Mon Nov 24 16:06:57.905503 2025] [:error] [pid 49900:tid 49923] [client 172.177.3.143:65344] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aSQSITCyPLrvg06aorn9IAAAABU"]
[Mon Nov 24 16:06:58.942347 2025] [:error] [pid 49900:tid 49915] [client 172.177.3.143:65362] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aSQSIjCyPLrvg06aorn9IgAAAA0"]
[Mon Nov 24 16:07:00.855783 2025] [:error] [pid 16441:tid 16464] [client 172.177.3.143:65284] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aSQSJIq_bc5MOa9HflkbDgAAAJQ"]
[Mon Nov 24 16:07:02.119187 2025] [:error] [pid 49900:tid 49924] [client 172.177.3.143:65331] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aSQSJjCyPLrvg06aorn9JAAAABY"]
[Mon Nov 24 16:07:03.540367 2025] [:error] [pid 49900:tid 49917] [client 172.177.3.143:65357] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aSQSJzCyPLrvg06aorn9JwAAAA8"]
[Mon Nov 24 16:07:04.321308 2025] [:error] [pid 16593:tid 16606] [client 172.177.3.143:65356] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aSQSKBVGznHBJI2LKpQx8AAAAos"]
[Mon Nov 24 16:07:05.140081 2025] [:error] [pid 16516:tid 16521] [client 172.177.3.143:65380] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aSQSKfqZbniwaNwL8XnZ9AAAAQI"]
[Mon Nov 24 16:07:05.688935 2025] [:error] [pid 48601:tid 48668] [client 172.177.3.143:65368] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aSQSKYMM4MaVTk74-AakMwAAAgs"]
[Mon Nov 24 16:07:06.837728 2025] [:error] [pid 16516:tid 16524] [client 172.177.3.143:64869] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aSQSKvqZbniwaNwL8XnZ9wAAAQU"]
[Mon Nov 24 16:07:08.006760 2025] [:error] [pid 48599:tid 48605] [client 172.177.3.143:65340] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsz.php"] [unique_id "aSQSLJzvu6PDJiRKE3IWUQAAAYI"]
[Mon Nov 24 16:07:09.970904 2025] [:error] [pid 48601:tid 48673] [client 172.177.3.143:65367] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsz.php"] [unique_id "aSQSLYMM4MaVTk74-AakRAAAAhA"]
[Mon Nov 24 16:07:11.351324 2025] [:error] [pid 16441:tid 16463] [client 172.177.3.143:65332] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsz.php"] [unique_id "aSQSL4q_bc5MOa9HflkbEgAAAJM"]
[Mon Nov 24 16:07:12.350377 2025] [:error] [pid 16441:tid 16451] [client 172.177.3.143:65288] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsz.php"] [unique_id "aSQSMIq_bc5MOa9HflkbFQAAAIc"]
[Mon Nov 24 16:07:13.535221 2025] [:error] [pid 9630:tid 9646] [client 172.177.3.143:65297] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aSQSMSrSgUgPGkizt2reRwAAAE4"]
[Mon Nov 24 16:07:15.515980 2025] [:error] [pid 16593:tid 16619] [client 172.177.3.143:65373] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aSQSMxVGznHBJI2LKpQx_gAAApg"]
[Mon Nov 24 16:07:17.701896 2025] [:error] [pid 16549:tid 16557] [client 172.177.3.143:65311] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aSQSNaeWW19A99PUw_cuwwAAAUU"]
[Mon Nov 24 16:07:18.815635 2025] [:error] [pid 48599:tid 48627] [client 172.177.3.143:65369] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aSQSNpzvu6PDJiRKE3IWYAAAAZg"]
[Mon Nov 24 16:07:21.355123 2025] [:error] [pid 16441:tid 16459] [client 172.177.3.143:65405] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aSQSOYq_bc5MOa9HflkbGgAAAI8"]
[Mon Nov 24 16:07:22.450564 2025] [:error] [pid 16516:tid 16531] [client 172.177.3.143:65358] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aSQSOvqZbniwaNwL8XnaAgAAAQw"]
[Mon Nov 24 16:07:25.094639 2025] [:error] [pid 16549:tid 16572] [client 172.177.3.143:65322] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aSQSPaeWW19A99PUw_cuxgAAAVM"]
[Mon Nov 24 16:07:26.334063 2025] [:error] [pid 48688:tid 48698] [client 172.177.3.143:65317] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aSQSPhm2q1FkzLam7A2PWQAAAkY"]
[Mon Nov 24 16:07:28.930731 2025] [:error] [pid 49900:tid 49923] [client 172.177.3.143:65359] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aSQSQDCyPLrvg06aorn9PQAAABU"]
[Mon Nov 24 16:07:31.547953 2025] [:error] [pid 49900:tid 49910] [client 172.177.3.143:65304] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aSQSQzCyPLrvg06aorn9QQAAAAg"]
[Mon Nov 24 16:07:34.688369 2025] [:error] [pid 48599:tid 48618] [client 172.177.3.143:65390] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aSQSRpzvu6PDJiRKE3IWbwAAAY8"]
[Mon Nov 24 16:07:37.219569 2025] [:error] [pid 48601:tid 48673] [client 172.177.3.143:65352] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aSQSSYMM4MaVTk74-AakUgAAAhA"]
[Mon Nov 24 16:07:38.279335 2025] [:error] [pid 16441:tid 16451] [client 172.177.3.143:65325] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aSQSSoq_bc5MOa9HflkbLAAAAIc"]
[Mon Nov 24 16:07:40.573477 2025] [:error] [pid 16441:tid 16467] [client 172.177.3.143:65388] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aSQSTIq_bc5MOa9HflkbMAAAAJc"]
[Mon Nov 24 16:07:41.910973 2025] [:error] [pid 16516:tid 16530] [client 172.177.3.143:65296] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aSQSTfqZbniwaNwL8XnaBQAAAQs"]
[Mon Nov 24 16:07:43.065943 2025] [:error] [pid 48600:tid 48635] [client 172.177.3.143:65385] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aSQST_tOzSUAQvWVjBdvjwAAAcU"]
[Mon Nov 24 16:07:44.193920 2025] [:error] [pid 48688:tid 48707] [client 172.177.3.143:65389] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aSQSUBm2q1FkzLam7A2PdQAAAk8"]
[Mon Nov 24 16:07:45.233262 2025] [:error] [pid 49900:tid 49905] [client 172.177.3.143:65309] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aSQSUTCyPLrvg06aorn9RwAAAAM"]
[Mon Nov 24 16:07:46.114385 2025] [:error] [pid 48601:tid 48671] [client 172.177.3.143:65341] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aSQSUoMM4MaVTk74-AakWgAAAg4"]
[Mon Nov 24 16:07:57.449876 2025] [:error] [pid 16441:tid 16457] [client 172.177.3.143:65364] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aSQSXYq_bc5MOa9HflkbSQAAAI0"]
[Mon Nov 24 16:08:00.798789 2025] [:error] [pid 48600:tid 48649] [client 172.177.3.143:65290] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aSQSYPtOzSUAQvWVjBdvowAAAdM"]
[Mon Nov 24 16:08:05.972246 2025] [:error] [pid 16593:tid 16596] [client 172.177.3.143:65320] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aSQSZRVGznHBJI2LKpQyFQAAAoE"]
[Mon Nov 24 16:08:08.150169 2025] [:error] [pid 48600:tid 48652] [client 172.177.3.143:64842] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aSQSaPtOzSUAQvWVjBdvpwAAAdY"]
[Mon Nov 24 16:08:09.290499 2025] [:error] [pid 48688:tid 48703] [client 172.177.3.143:64839] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/set.php"] [unique_id "aSQSaRm2q1FkzLam7A2PhwAAAks"]
[Mon Nov 24 16:08:10.487966 2025] [:error] [pid 9630:tid 9656] [client 172.177.3.143:65308] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/set.php"] [unique_id "aSQSairSgUgPGkizt2reoAAAAFg"]
[Mon Nov 24 16:08:11.607320 2025] [:error] [pid 16441:tid 16448] [client 172.177.3.143:65377] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/set.php"] [unique_id "aSQSa4q_bc5MOa9HflkbcQAAAIQ"]
[Mon Nov 24 16:08:12.804516 2025] [:error] [pid 48601:tid 48674] [client 172.177.3.143:65375] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/set.php"] [unique_id "aSQSbIMM4MaVTk74-AaknQAAAhE"]
[Mon Nov 24 16:08:14.140078 2025] [:error] [pid 16549:tid 16576] [client 172.177.3.143:65291] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aSQSbqeWW19A99PUw_cu8AAAAVc"]
[Mon Nov 24 16:08:15.105233 2025] [:error] [pid 16593:tid 16611] [client 172.177.3.143:65295] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aSQSbxVGznHBJI2LKpQyIwAAApA"]
[Mon Nov 24 16:08:16.482106 2025] [:error] [pid 16549:tid 16553] [client 172.177.3.143:65310] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aSQScKeWW19A99PUw_cu8QAAAUE"]
[Mon Nov 24 16:08:18.190822 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:65396] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aSQScoq_bc5MOa9HflkbdwAAAJU"]
[Mon Nov 24 16:08:19.179787 2025] [:error] [pid 16441:tid 16454] [client 172.177.3.143:65301] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh77.php"] [unique_id "aSQSc4q_bc5MOa9HflkbeAAAAIo"]
[Mon Nov 24 16:08:20.027055 2025] [:error] [pid 16593:tid 16597] [client 172.177.3.143:65394] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh77.php"] [unique_id "aSQSdBVGznHBJI2LKpQyKwAAAoI"]
[Mon Nov 24 16:08:21.041181 2025] [:error] [pid 48688:tid 48714] [client 172.177.3.143:65321] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh77.php"] [unique_id "aSQSdRm2q1FkzLam7A2PjAAAAlY"]
[Mon Nov 24 16:08:21.730568 2025] [:error] [pid 48601:tid 48680] [client 172.177.3.143:65359] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh77.php"] [unique_id "aSQSdYMM4MaVTk74-AakoQAAAhc"]
[Mon Nov 24 16:08:22.841298 2025] [:error] [pid 48601:tid 48660] [client 172.177.3.143:64771] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSQSdoMM4MaVTk74-AakogAAAgM"]
[Mon Nov 24 16:08:25.166453 2025] [:error] [pid 16593:tid 16606] [client 172.177.3.143:65402] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSQSeRVGznHBJI2LKpQyMAAAAos"]
[Mon Nov 24 16:08:26.196898 2025] [:error] [pid 48601:tid 48665] [client 172.177.3.143:64871] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSQSeoMM4MaVTk74-AakpAAAAgg"]
[Mon Nov 24 16:08:27.670664 2025] [:error] [pid 16441:tid 16464] [client 172.177.3.143:65354] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSQSe4q_bc5MOa9HflkbfgAAAJQ"]
[Mon Nov 24 16:08:28.619168 2025] [:error] [pid 48688:tid 48711] [client 172.177.3.143:65399] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aSQSfBm2q1FkzLam7A2PkgAAAlM"]
[Mon Nov 24 16:08:30.552945 2025] [:error] [pid 48599:tid 48626] [client 172.177.3.143:64845] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aSQSfpzvu6PDJiRKE3IWpQAAAZc"]
[Mon Nov 24 16:08:32.675682 2025] [:error] [pid 48599:tid 48608] [client 172.177.3.143:64881] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aSQSgJzvu6PDJiRKE3IWpwAAAYU"]
[Mon Nov 24 16:08:34.301706 2025] [:error] [pid 16549:tid 16565] [client 172.177.3.143:65395] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aSQSgqeWW19A99PUw_cu-AAAAU0"]
[Mon Nov 24 16:08:35.552075 2025] [:error] [pid 16516:tid 16536] [client 172.177.3.143:65319] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aSQSg_qZbniwaNwL8XnaFgAAARE"]
[Mon Nov 24 16:08:36.686825 2025] [:error] [pid 9630:tid 9634] [client 172.177.3.143:65283] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aSQShCrSgUgPGkizt2reqwAAAEI"]
[Mon Nov 24 16:08:37.205227 2025] [:error] [pid 48601:tid 48659] [client 172.177.3.143:65351] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aSQShYMM4MaVTk74-AakqQAAAgI"]
[Mon Nov 24 16:08:38.480607 2025] [:error] [pid 48599:tid 48625] [client 172.177.3.143:65323] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aSQShpzvu6PDJiRKE3IWqwAAAZY"]
[Mon Nov 24 16:08:39.877265 2025] [:error] [pid 48601:tid 48675] [client 172.177.3.143:65282] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aSQSh4MM4MaVTk74-AakqgAAAhI"]
[Mon Nov 24 16:08:41.019709 2025] [:error] [pid 16593:tid 16603] [client 172.177.3.143:65298] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aSQSiRVGznHBJI2LKpQyQAAAAog"]
[Mon Nov 24 16:08:43.317592 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:64795] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aSQSi4q_bc5MOa9HflkbhwAAAJg"]
[Mon Nov 24 16:08:43.984747 2025] [:error] [pid 16549:tid 16567] [client 172.177.3.143:65286] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aSQSi6eWW19A99PUw_cu-QAAAU8"]
[Mon Nov 24 16:08:45.485754 2025] [:error] [pid 16549:tid 16558] [client 172.177.3.143:65360] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aSQSjaeWW19A99PUw_cu-wAAAUY"]
[Mon Nov 24 16:08:46.418822 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:65378] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aSQSjoq_bc5MOa9HflkbjwAAAJU"]
[Mon Nov 24 16:08:47.379100 2025] [:error] [pid 16441:tid 16467] [client 172.177.3.143:65281] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aSQSj4q_bc5MOa9HflkbkAAAAJc"]
[Mon Nov 24 16:08:48.616009 2025] [:error] [pid 16549:tid 16555] [client 172.177.3.143:65329] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aSQSkKeWW19A99PUw_cu_QAAAUM"]
[Mon Nov 24 16:08:50.215085 2025] [:error] [pid 16549:tid 16561] [client 172.177.3.143:64887] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hgm.php"] [unique_id "aSQSkqeWW19A99PUw_cu_wAAAUk"]
[Mon Nov 24 16:08:54.013733 2025] [:error] [pid 16593:tid 16598] [client 172.177.3.143:65318] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hgm.php"] [unique_id "aSQSlhVGznHBJI2LKpQyTAAAAoM"]
[Mon Nov 24 16:08:55.517082 2025] [:error] [pid 48688:tid 48707] [client 172.177.3.143:64878] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hgm.php"] [unique_id "aSQSlxm2q1FkzLam7A2PnAAAAk8"]
[Mon Nov 24 16:09:06.689426 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:65336] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdrex.php"] [unique_id "aSQSooq_bc5MOa9HflkbpwAAAJg"]
[Mon Nov 24 16:09:07.572867 2025] [:error] [pid 16516:tid 16519] [client 172.177.3.143:64868] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdrex.php"] [unique_id "aSQSo_qZbniwaNwL8XnaIgAAAQA"]
[Mon Nov 24 16:09:08.564689 2025] [:error] [pid 16549:tid 16562] [client 172.177.3.143:64840] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdrex.php"] [unique_id "aSQSpKeWW19A99PUw_cvAgAAAUo"]
[Mon Nov 24 16:09:09.239556 2025] [:error] [pid 49900:tid 49924] [client 172.177.3.143:64832] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdrex.php"] [unique_id "aSQSpTCyPLrvg06aorn9gwAAABY"]
[Mon Nov 24 16:09:10.488456 2025] [:error] [pid 48599:tid 48610] [client 172.177.3.143:64841] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aSQSppzvu6PDJiRKE3IWxAAAAYc"]
[Mon Nov 24 16:09:11.682347 2025] [:error] [pid 48599:tid 48626] [client 172.177.3.143:65330] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aSQSp5zvu6PDJiRKE3IWyAAAAZc"]
[Mon Nov 24 16:09:12.342361 2025] [:error] [pid 48600:tid 48651] [client 172.177.3.143:65383] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aSQSqPtOzSUAQvWVjBdv5gAAAdU"]
[Mon Nov 24 16:09:13.471433 2025] [:error] [pid 48600:tid 48638] [client 172.177.3.143:65299] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aSQSqftOzSUAQvWVjBdv6gAAAcg"]
[Mon Nov 24 16:09:14.674735 2025] [:error] [pid 16549:tid 16557] [client 172.177.3.143:65339] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gul.php"] [unique_id "aSQSqqeWW19A99PUw_cvBAAAAUU"]
[Mon Nov 24 16:09:16.746865 2025] [:error] [pid 16516:tid 16530] [client 172.177.3.143:65312] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gul.php"] [unique_id "aSQSrPqZbniwaNwL8XnaJQAAAQs"]
[Mon Nov 24 16:09:18.129267 2025] [:error] [pid 48599:tid 48625] [client 172.177.3.143:64890] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gul.php"] [unique_id "aSQSrpzvu6PDJiRKE3IWyQAAAZY"]
[Mon Nov 24 16:09:20.261842 2025] [:error] [pid 16593:tid 16604] [client 172.177.3.143:65335] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gul.php"] [unique_id "aSQSsBVGznHBJI2LKpQyWAAAAok"]
[Mon Nov 24 16:09:21.527286 2025] [:error] [pid 16593:tid 16610] [client 172.177.3.143:65315] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aSQSsRVGznHBJI2LKpQyWwAAAo8"]
[Mon Nov 24 16:09:22.599213 2025] [:error] [pid 16593:tid 16617] [client 172.177.3.143:64783] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aSQSshVGznHBJI2LKpQyXQAAApY"]
[Mon Nov 24 16:09:23.605594 2025] [:error] [pid 16516:tid 16540] [client 172.177.3.143:65349] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aSQSs_qZbniwaNwL8XnaKwAAARU"]
[Mon Nov 24 16:09:25.049610 2025] [:error] [pid 9630:tid 9646] [client 172.177.3.143:64769] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aSQStSrSgUgPGkizt2rewQAAAE4"]
[Mon Nov 24 16:09:26.235508 2025] [:error] [pid 9630:tid 9652] [client 172.177.3.143:65387] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aSQStirSgUgPGkizt2rewgAAAFQ"]
[Mon Nov 24 16:09:26.868860 2025] [:error] [pid 16441:tid 16462] [client 172.177.3.143:65379] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aSQStoq_bc5MOa9HflkbqQAAAJI"]
[Mon Nov 24 16:09:28.240758 2025] [:error] [pid 48599:tid 48620] [client 172.177.3.143:64862] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aSQSuJzvu6PDJiRKE3IW0QAAAZE"]
[Mon Nov 24 16:09:29.137120 2025] [:error] [pid 9630:tid 9651] [client 172.177.3.143:64883] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aSQSuSrSgUgPGkizt2rexQAAAFM"]
[Mon Nov 24 16:09:30.371629 2025] [:error] [pid 16441:tid 16451] [client 172.177.3.143:65365] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/show/asa.php"] [unique_id "aSQSuoq_bc5MOa9HflkbswAAAIc"]
[Mon Nov 24 16:09:31.140259 2025] [:error] [pid 48599:tid 48605] [client 172.177.3.143:64843] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/show/asa.php"] [unique_id "aSQSu5zvu6PDJiRKE3IW0wAAAYI"]
[Mon Nov 24 16:09:32.896739 2025] [:error] [pid 48601:tid 48669] [client 172.177.3.143:65314] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/show/asa.php"] [unique_id "aSQSvIMM4MaVTk74-Aak_QAAAgw"]
[Mon Nov 24 16:09:33.874717 2025] [:error] [pid 16441:tid 16458] [client 172.177.3.143:65381] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/show/asa.php"] [unique_id "aSQSvYq_bc5MOa9HflkbtwAAAI4"]
[Mon Nov 24 16:09:35.073312 2025] [:error] [pid 9630:tid 9640] [client 172.177.3.143:65342] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nae.php"] [unique_id "aSQSvyrSgUgPGkizt2rexwAAAEg"]
[Mon Nov 24 16:09:36.450394 2025] [:error] [pid 16516:tid 16543] [client 172.177.3.143:65316] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nae.php"] [unique_id "aSQSwPqZbniwaNwL8XnaLAAAARg"]
[Mon Nov 24 16:09:37.482587 2025] [:error] [pid 48600:tid 48635] [client 172.177.3.143:64785] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nae.php"] [unique_id "aSQSwftOzSUAQvWVjBdv7wAAAcU"]
[Mon Nov 24 16:09:38.692470 2025] [:error] [pid 16516:tid 16541] [client 172.177.3.143:65293] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nae.php"] [unique_id "aSQSwvqZbniwaNwL8XnaLQAAARY"]
[Mon Nov 24 16:09:39.828000 2025] [:error] [pid 48600:tid 48653] [client 172.177.3.143:64850] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aSQSw_tOzSUAQvWVjBdv8AAAAdc"]
[Mon Nov 24 16:09:40.684710 2025] [:error] [pid 48601:tid 48678] [client 172.177.3.143:65305] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aSQSxIMM4MaVTk74-AalFAAAAhU"]
[Mon Nov 24 16:09:41.521074 2025] [:error] [pid 48601:tid 48677] [client 172.177.3.143:65289] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aSQSxYMM4MaVTk74-AalFQAAAhQ"]
[Mon Nov 24 16:09:42.553196 2025] [:error] [pid 48600:tid 48650] [client 172.177.3.143:64793] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aSQSxvtOzSUAQvWVjBdv8QAAAdQ"]
[Mon Nov 24 16:09:43.396287 2025] [:error] [pid 16441:tid 16467] [client 172.177.3.143:64798] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aSQSx4q_bc5MOa9HflkbvQAAAJc"]
[Mon Nov 24 16:09:44.447817 2025] [:error] [pid 9630:tid 9641] [client 172.177.3.143:65338] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aSQSyCrSgUgPGkizt2re0AAAAEk"]
[Mon Nov 24 16:09:45.474844 2025] [:error] [pid 48600:tid 48633] [client 172.177.3.143:64889] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aSQSyftOzSUAQvWVjBdv8gAAAcM"]
[Mon Nov 24 16:09:46.932905 2025] [:error] [pid 48599:tid 48612] [client 172.177.3.143:65327] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aSQSypzvu6PDJiRKE3IW2QAAAYk"]
[Mon Nov 24 16:09:47.577650 2025] [:error] [pid 9630:tid 9655] [client 172.177.3.143:64813] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aSQSyyrSgUgPGkizt2re0QAAAFc"]
[Mon Nov 24 16:09:48.716290 2025] [:error] [pid 9630:tid 9640] [client 172.177.3.143:64884] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aSQSzCrSgUgPGkizt2re0wAAAEg"]
[Mon Nov 24 16:09:50.339726 2025] [:error] [pid 48599:tid 48614] [client 172.177.3.143:65302] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aSQSzpzvu6PDJiRKE3IW2wAAAYs"]
[Mon Nov 24 16:09:51.056455 2025] [:error] [pid 16441:tid 16452] [client 172.177.3.143:64837] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aSQSz4q_bc5MOa9HflkbwQAAAIg"]
[Mon Nov 24 16:09:52.205048 2025] [:error] [pid 48600:tid 48636] [client 172.177.3.143:65386] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aSQS0PtOzSUAQvWVjBdv8wAAAcY"]
[Mon Nov 24 16:09:52.941230 2025] [:error] [pid 48600:tid 48649] [client 172.177.3.143:65392] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aSQS0PtOzSUAQvWVjBdv9AAAAdM"]
[Mon Nov 24 16:09:53.977781 2025] [:error] [pid 49900:tid 49921] [client 172.177.3.143:64784] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aSQS0TCyPLrvg06aorn9oAAAABM"]
[Mon Nov 24 16:09:54.987066 2025] [:error] [pid 49900:tid 49919] [client 172.177.3.143:64780] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aSQS0jCyPLrvg06aorn9oQAAABE"]
[Mon Nov 24 16:09:56.277455 2025] [:error] [pid 9630:tid 9647] [client 172.177.3.143:65280] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aSQS1CrSgUgPGkizt2re2AAAAE8"]
[Mon Nov 24 16:09:57.059344 2025] [:error] [pid 16441:tid 16459] [client 172.177.3.143:64870] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aSQS1Yq_bc5MOa9HflkbxgAAAI8"]
[Mon Nov 24 16:09:57.842056 2025] [:error] [pid 48599:tid 48603] [client 172.177.3.143:64236] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aSQS1Zzvu6PDJiRKE3IW3QAAAYA"]
[Mon Nov 24 16:09:59.339898 2025] [:error] [pid 16593:tid 16602] [client 172.177.3.143:64886] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aSQS1xVGznHBJI2LKpQynwAAAoc"]
[Mon Nov 24 16:10:00.258118 2025] [:error] [pid 49900:tid 49925] [client 172.177.3.143:65300] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aSQS2DCyPLrvg06aorn9owAAABc"]
[Mon Nov 24 16:10:01.074004 2025] [:error] [pid 48601:tid 48659] [client 172.177.3.143:64862] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aSQS2YMM4MaVTk74-AalNQAAAgI"]
[Mon Nov 24 16:10:02.841696 2025] [:error] [pid 16593:tid 16606] [client 172.177.3.143:64891] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aSQS2hVGznHBJI2LKpQyowAAAos"]
[Mon Nov 24 16:10:04.208685 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:64768] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aSQS3Iq_bc5MOa9HflkbyQAAAIw"]
[Mon Nov 24 16:10:05.990425 2025] [:error] [pid 16516:tid 16534] [client 172.177.3.143:64854] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1254.php"] [unique_id "aSQS3fqZbniwaNwL8XnaNAAAAQ8"]
[Mon Nov 24 16:10:13.924924 2025] [:error] [pid 48688:tid 48702] [client 172.177.3.143:65398] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aSQS5Rm2q1FkzLam7A2PwwAAAko"]
[Mon Nov 24 16:10:14.939997 2025] [:error] [pid 49900:tid 49920] [client 172.177.3.143:64893] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aSQS5jCyPLrvg06aorn9qAAAABI"]
[Mon Nov 24 16:10:16.305527 2025] [:error] [pid 16549:tid 16574] [client 172.177.3.143:64794] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aSQS6KeWW19A99PUw_cvIwAAAVU"]
[Mon Nov 24 16:10:17.225818 2025] [:error] [pid 16549:tid 16569] [client 172.177.3.143:64872] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aSQS6aeWW19A99PUw_cvJgAAAVE"]
[Mon Nov 24 16:10:18.072284 2025] [:error] [pid 16593:tid 16612] [client 172.177.3.143:65328] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aSQS6hVGznHBJI2LKpQysgAAApE"]
[Mon Nov 24 16:10:19.702412 2025] [:error] [pid 48600:tid 48653] [client 172.177.3.143:64856] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aSQS6_tOzSUAQvWVjBdv_gAAAdc"]
[Mon Nov 24 16:10:21.254440 2025] [:error] [pid 16549:tid 16567] [client 172.177.3.143:65287] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aSQS7aeWW19A99PUw_cvKgAAAU8"]
[Mon Nov 24 16:10:21.916482 2025] [:error] [pid 16441:tid 16464] [client 172.177.3.143:64859] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aSQS7Yq_bc5MOa9Hflkb6AAAAJQ"]
[Mon Nov 24 16:10:22.874161 2025] [:error] [pid 48600:tid 48636] [client 172.177.3.143:64860] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6erg.php"] [unique_id "aSQS7vtOzSUAQvWVjBdv_wAAAcY"]
[Mon Nov 24 16:10:23.859855 2025] [:error] [pid 16516:tid 16529] [client 172.177.3.143:64253] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6erg.php"] [unique_id "aSQS7_qZbniwaNwL8XnaOQAAAQo"]
[Mon Nov 24 16:10:25.101422 2025] [:error] [pid 9630:tid 9641] [client 172.177.3.143:64852] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6erg.php"] [unique_id "aSQS8SrSgUgPGkizt2re6QAAAEk"]
[Mon Nov 24 16:10:26.412966 2025] [:error] [pid 16593:tid 16614] [client 172.177.3.143:65361] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6erg.php"] [unique_id "aSQS8hVGznHBJI2LKpQyvwAAApM"]
[Mon Nov 24 16:10:27.733380 2025] [:error] [pid 49900:tid 49919] [client 172.177.3.143:65403] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aSQS8zCyPLrvg06aorn9rgAAABE"]
[Mon Nov 24 16:10:28.569187 2025] [:error] [pid 48599:tid 48614] [client 172.177.3.143:65343] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aSQS9Jzvu6PDJiRKE3IW5wAAAYs"]
[Mon Nov 24 16:10:31.654416 2025] [:error] [pid 49900:tid 49912] [client 172.177.3.143:64778] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aSQS9zCyPLrvg06aorn9sAAAAAo"]
[Mon Nov 24 16:10:32.912128 2025] [:error] [pid 16441:tid 16453] [client 172.177.3.143:64847] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aSQS-Iq_bc5MOa9Hflkb7QAAAIk"]
[Mon Nov 24 16:10:33.542202 2025] [:error] [pid 16516:tid 16528] [client 172.177.3.143:64192] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/89.php"] [unique_id "aSQS-fqZbniwaNwL8XnaPgAAAQk"]
[Mon Nov 24 16:10:34.702198 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:65303] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/89.php"] [unique_id "aSQS-oq_bc5MOa9Hflkb7wAAAJg"]
[Mon Nov 24 16:10:35.809180 2025] [:error] [pid 48601:tid 48675] [client 172.177.3.143:64838] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/89.php"] [unique_id "aSQS-4MM4MaVTk74-AalXQAAAhI"]
[Mon Nov 24 16:10:36.866924 2025] [:error] [pid 49900:tid 49907] [client 172.177.3.143:64864] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/89.php"] [unique_id "aSQS_DCyPLrvg06aorn9vwAAAAU"]
[Mon Nov 24 16:10:37.552475 2025] [:error] [pid 48688:tid 48711] [client 172.177.3.143:65401] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aSQS_Rm2q1FkzLam7A2PywAAAlM"]
[Mon Nov 24 16:10:38.141193 2025] [:error] [pid 16441:tid 16457] [client 172.177.3.143:64779] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aSQS_oq_bc5MOa9Hflkb8wAAAI0"]
[Mon Nov 24 16:10:39.132819 2025] [:error] [pid 16441:tid 16459] [client 172.177.3.143:65382] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aSQS_4q_bc5MOa9Hflkb9AAAAI8"]
[Mon Nov 24 16:10:40.618962 2025] [:error] [pid 16593:tid 16599] [client 172.177.3.143:64815] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aSQTABVGznHBJI2LKpQy2QAAAoQ"]
[Mon Nov 24 16:10:42.924765 2025] [:error] [pid 9630:tid 9643] [client 172.177.3.143:65372] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aSQTAirSgUgPGkizt2re-wAAAEs"]
[Mon Nov 24 16:10:44.195787 2025] [:error] [pid 48600:tid 48630] [client 172.177.3.143:65333] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aSQTBPtOzSUAQvWVjBdwBgAAAcA"]
[Mon Nov 24 16:10:45.121869 2025] [:error] [pid 48600:tid 48652] [client 172.177.3.143:65397] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aSQTBftOzSUAQvWVjBdwCQAAAdY"]
[Mon Nov 24 16:10:46.657274 2025] [:error] [pid 48599:tid 48610] [client 172.177.3.143:65306] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aSQTBpzvu6PDJiRKE3IW6wAAAYc"]
[Mon Nov 24 16:10:47.879362 2025] [:error] [pid 9630:tid 9648] [client 172.177.3.143:64833] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aSQTByrSgUgPGkizt2re_QAAAFA"]
[Mon Nov 24 16:10:48.857828 2025] [:error] [pid 16593:tid 16615] [client 172.177.3.143:64876] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aSQTCBVGznHBJI2LKpQy3QAAApQ"]
[Mon Nov 24 16:10:50.366371 2025] [:error] [pid 48688:tid 48714] [client 172.177.3.143:64217] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aSQTChm2q1FkzLam7A2P1AAAAlY"]
[Mon Nov 24 16:10:51.488349 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:64775] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aSQTC4q_bc5MOa9Hflkb-gAAAJg"]
[Mon Nov 24 16:10:52.278305 2025] [:error] [pid 48601:tid 48659] [client 172.177.3.143:65374] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berm.php"] [unique_id "aSQTDIMM4MaVTk74-AalZAAAAgI"]
[Mon Nov 24 16:10:53.063260 2025] [:error] [pid 48600:tid 48635] [client 172.177.3.143:65326] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berm.php"] [unique_id "aSQTDftOzSUAQvWVjBdwCgAAAcU"]
[Mon Nov 24 16:10:54.195019 2025] [:error] [pid 48600:tid 48636] [client 172.177.3.143:64875] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berm.php"] [unique_id "aSQTDvtOzSUAQvWVjBdwDAAAAcY"]
[Mon Nov 24 16:10:55.277363 2025] [:error] [pid 48599:tid 48607] [client 172.177.3.143:64800] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berm.php"] [unique_id "aSQTD5zvu6PDJiRKE3IW-QAAAYQ"]
[Mon Nov 24 16:10:56.580545 2025] [:error] [pid 48601:tid 48681] [client 172.177.3.143:65400] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wan.php"] [unique_id "aSQTEIMM4MaVTk74-AalZQAAAhg"]
[Mon Nov 24 16:10:57.592671 2025] [:error] [pid 49900:tid 49905] [client 172.177.3.143:64855] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wan.php"] [unique_id "aSQTETCyPLrvg06aorn9zwAAAAM"]
[Mon Nov 24 16:10:58.532110 2025] [:error] [pid 48601:tid 48672] [client 172.177.3.143:64894] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wan.php"] [unique_id "aSQTEoMM4MaVTk74-AalZwAAAg8"]
[Mon Nov 24 16:11:00.274955 2025] [:error] [pid 16593:tid 16611] [client 172.177.3.143:64895] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wan.php"] [unique_id "aSQTFBVGznHBJI2LKpQy5gAAApA"]
[Mon Nov 24 16:11:00.894861 2025] [:error] [pid 49900:tid 49917] [client 172.177.3.143:65313] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aSQTFDCyPLrvg06aorn90QAAAA8"]
[Mon Nov 24 16:11:02.348900 2025] [:error] [pid 9630:tid 9640] [client 172.177.3.143:64835] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aSQTFirSgUgPGkizt2rfDwAAAEg"]
[Mon Nov 24 16:11:03.326832 2025] [:error] [pid 16516:tid 16535] [client 172.177.3.143:64851] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aSQTF_qZbniwaNwL8XnaZAAAARA"]
[Mon Nov 24 16:11:04.217746 2025] [:error] [pid 48688:tid 48716] [client 172.177.3.143:64849] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aSQTGBm2q1FkzLam7A2P1gAAAlg"]
[Mon Nov 24 16:11:05.904081 2025] [:error] [pid 16441:tid 16459] [client 172.177.3.143:65376] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ma1.php"] [unique_id "aSQTGYq_bc5MOa9HflkcAAAAAI8"]
[Mon Nov 24 16:11:06.807102 2025] [:error] [pid 9630:tid 9638] [client 172.177.3.143:64830] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ma1.php"] [unique_id "aSQTGirSgUgPGkizt2rfFwAAAEY"]
[Mon Nov 24 16:11:07.405039 2025] [:error] [pid 16549:tid 16573] [client 172.177.3.143:64216] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ma1.php"] [unique_id "aSQTG6eWW19A99PUw_cvNQAAAVQ"]
[Mon Nov 24 16:11:08.610657 2025] [:error] [pid 16441:tid 16450] [client 172.177.3.143:64796] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ma1.php"] [unique_id "aSQTHIq_bc5MOa9HflkcBAAAAIY"]
[Mon Nov 24 16:11:09.563592 2025] [:error] [pid 48599:tid 48610] [client 172.177.3.143:64863] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aSQTHZzvu6PDJiRKE3IW-gAAAYc"]
[Mon Nov 24 16:11:10.902098 2025] [:error] [pid 16441:tid 16444] [client 172.177.3.143:65406] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aSQTHoq_bc5MOa9HflkcCQAAAIA"]
[Mon Nov 24 16:11:11.760491 2025] [:error] [pid 16593:tid 16615] [client 172.177.3.143:64802] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aSQTHxVGznHBJI2LKpQy7AAAApQ"]
[Mon Nov 24 16:11:12.755129 2025] [:error] [pid 16441:tid 16464] [client 172.177.3.143:65347] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aSQTIIq_bc5MOa9HflkcCwAAAJQ"]
[Mon Nov 24 16:11:20.903916 2025] [:error] [pid 49900:tid 49907] [client 172.177.3.143:64874] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vip.php"] [unique_id "aSQTKDCyPLrvg06aorn94QAAAAU"]
[Mon Nov 24 16:11:22.249388 2025] [:error] [pid 48688:tid 48693] [client 172.177.3.143:64822] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vip.php"] [unique_id "aSQTKhm2q1FkzLam7A2P2gAAAkE"]
[Mon Nov 24 16:11:24.802641 2025] [:error] [pid 48688:tid 48715] [client 172.177.3.143:64242] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vip.php"] [unique_id "aSQTLBm2q1FkzLam7A2P2wAAAlc"]
[Mon Nov 24 16:11:26.172025 2025] [:error] [pid 16516:tid 16542] [client 172.177.3.143:65356] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vip.php"] [unique_id "aSQTLvqZbniwaNwL8XnabAAAARc"]
[Mon Nov 24 16:11:28.159415 2025] [:error] [pid 16549:tid 16577] [client 172.177.3.143:64865] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aSQTMKeWW19A99PUw_cvOQAAAVg"]
[Mon Nov 24 16:11:29.470403 2025] [:error] [pid 48688:tid 48711] [client 172.177.3.143:65362] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aSQTMRm2q1FkzLam7A2P3AAAAlM"]
[Mon Nov 24 16:11:30.472318 2025] [:error] [pid 49900:tid 49918] [client 172.177.3.143:64811] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aSQTMjCyPLrvg06aorn95AAAABA"]
[Mon Nov 24 16:11:31.879958 2025] [:error] [pid 16593:tid 16610] [client 172.177.3.143:65324] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aSQTMxVGznHBJI2LKpQy-QAAAo8"]
[Mon Nov 24 16:11:33.549789 2025] [:error] [pid 48600:tid 48635] [client 172.177.3.143:64803] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xm.php"] [unique_id "aSQTNftOzSUAQvWVjBdwGAAAAcU"]
[Mon Nov 24 16:11:34.723710 2025] [:error] [pid 48600:tid 48636] [client 172.177.3.143:64867] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xm.php"] [unique_id "aSQTNvtOzSUAQvWVjBdwGgAAAcY"]
[Mon Nov 24 16:11:36.148900 2025] [:error] [pid 16516:tid 16527] [client 172.177.3.143:64869] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xm.php"] [unique_id "aSQTOPqZbniwaNwL8XnabgAAAQg"]
[Mon Nov 24 16:11:37.468679 2025] [:error] [pid 16516:tid 16523] [client 172.177.3.143:65332] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xm.php"] [unique_id "aSQTOfqZbniwaNwL8XnabwAAAQQ"]
[Mon Nov 24 16:11:39.017797 2025] [:error] [pid 9630:tid 9633] [client 172.177.3.143:64827] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpc1.php"] [unique_id "aSQTOyrSgUgPGkizt2rfRAAAAEE"]
[Mon Nov 24 16:11:40.043505 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:65346] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpc1.php"] [unique_id "aSQTPIq_bc5MOa9HflkcFgAAAIw"]
[Mon Nov 24 16:11:41.093220 2025] [:error] [pid 16516:tid 16529] [client 172.177.3.143:65380] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpc1.php"] [unique_id "aSQTPfqZbniwaNwL8XnacAAAAQo"]
[Mon Nov 24 16:11:42.521408 2025] [:error] [pid 49900:tid 49904] [client 172.177.3.143:64861] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpc1.php"] [unique_id "aSQTPjCyPLrvg06aorn96QAAAAI"]
[Mon Nov 24 16:11:44.502894 2025] [:error] [pid 9630:tid 9632] [client 172.177.3.143:65366] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aSQTQCrSgUgPGkizt2rfTAAAAEA"]
[Mon Nov 24 16:11:46.282036 2025] [:error] [pid 16593:tid 16596] [client 172.177.3.143:64880] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aSQTQhVGznHBJI2LKpQy-wAAAoE"]
[Mon Nov 24 16:11:47.249267 2025] [:error] [pid 48599:tid 48626] [client 172.177.3.143:64892] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aSQTQ5zvu6PDJiRKE3IXBgAAAZc"]
[Mon Nov 24 16:11:48.051359 2025] [:error] [pid 16549:tid 16559] [client 172.177.3.143:64777] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aSQTRKeWW19A99PUw_cvPwAAAUc"]
[Mon Nov 24 16:11:49.040274 2025] [:error] [pid 49900:tid 49924] [client 172.177.3.143:64790] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aSQTRTCyPLrvg06aorn96wAAABY"]
[Mon Nov 24 16:11:49.860045 2025] [:error] [pid 48600:tid 48643] [client 172.177.3.143:64208] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aSQTRftOzSUAQvWVjBdwHQAAAc0"]
[Mon Nov 24 16:11:51.518654 2025] [:error] [pid 48599:tid 48611] [client 172.177.3.143:65353] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aSQTR5zvu6PDJiRKE3IXBwAAAYg"]
[Mon Nov 24 16:11:52.866942 2025] [:error] [pid 48600:tid 48648] [client 172.177.3.143:64203] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aSQTSPtOzSUAQvWVjBdwIQAAAdI"]
[Mon Nov 24 16:11:53.909062 2025] [:error] [pid 48599:tid 48605] [client 172.177.3.143:64774] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aSQTSZzvu6PDJiRKE3IXCQAAAYI"]
[Mon Nov 24 16:11:54.790120 2025] [:error] [pid 48599:tid 48613] [client 172.177.3.143:65297] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aSQTSpzvu6PDJiRKE3IXCwAAAYo"]
[Mon Nov 24 16:11:55.858842 2025] [:error] [pid 16441:tid 16447] [client 172.177.3.143:65367] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aSQTS4q_bc5MOa9HflkcHwAAAIM"]
[Mon Nov 24 16:11:58.056011 2025] [:error] [pid 48688:tid 48713] [client 172.177.3.143:64853] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aSQTThm2q1FkzLam7A2P6QAAAlU"]
[Mon Nov 24 16:12:00.356323 2025] [:error] [pid 48600:tid 48654] [client 172.177.3.143:65325] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aSQTUPtOzSUAQvWVjBdwJAAAAdg"]
[Mon Nov 24 16:12:01.703057 2025] [:error] [pid 9630:tid 9645] [client 172.177.3.143:64812] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aSQTUSrSgUgPGkizt2rfZAAAAE0"]
[Mon Nov 24 16:12:02.587920 2025] [:error] [pid 48688:tid 48694] [client 172.177.3.143:65340] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aSQTUhm2q1FkzLam7A2P7AAAAkI"]
[Mon Nov 24 16:12:04.418349 2025] [:error] [pid 48600:tid 48633] [client 172.177.3.143:64892] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aSQTVPtOzSUAQvWVjBdwJgAAAcM"]
[Mon Nov 24 16:12:05.671703 2025] [:error] [pid 9630:tid 9636] [client 172.177.3.143:65294] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "aSQTVSrSgUgPGkizt2rfawAAAEQ"]
[Mon Nov 24 16:12:06.808768 2025] [:error] [pid 9630:tid 9651] [client 172.177.3.143:65393] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "aSQTVirSgUgPGkizt2rfbQAAAFM"]
[Mon Nov 24 16:12:09.080008 2025] [:error] [pid 9630:tid 9649] [client 172.177.3.143:64873] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "aSQTWSrSgUgPGkizt2rfcwAAAFE"]
[Mon Nov 24 16:12:10.331506 2025] [:error] [pid 9630:tid 9655] [client 172.177.3.143:64807] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "aSQTWirSgUgPGkizt2rfdwAAAFc"]
[Mon Nov 24 16:12:11.603632 2025] [:error] [pid 16549:tid 16557] [client 172.177.3.143:65404] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tarc.php"] [unique_id "aSQTW6eWW19A99PUw_cvSAAAAUU"]
[Mon Nov 24 16:12:12.800322 2025] [:error] [pid 48688:tid 48716] [client 172.177.3.143:65337] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tarc.php"] [unique_id "aSQTXBm2q1FkzLam7A2P7gAAAlg"]
[Mon Nov 24 16:12:14.306906 2025] [:error] [pid 48601:tid 48681] [client 172.177.3.143:64234] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tarc.php"] [unique_id "aSQTXoMM4MaVTk74-AalegAAAhg"]
[Mon Nov 24 16:12:15.448749 2025] [:error] [pid 16441:tid 16447] [client 172.177.3.143:65405] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tarc.php"] [unique_id "aSQTX4q_bc5MOa9HflkcKQAAAIM"]
[Mon Nov 24 16:12:16.032159 2025] [:error] [pid 49900:tid 49904] [client 172.177.3.143:64846] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aSQTYDCyPLrvg06aorn98wAAAAI"]
[Mon Nov 24 16:12:17.651622 2025] [:error] [pid 48599:tid 48620] [client 172.177.3.143:64819] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aSQTYZzvu6PDJiRKE3IXDwAAAZE"]
[Mon Nov 24 16:12:19.625615 2025] [:error] [pid 48688:tid 48693] [client 172.177.3.143:64182] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aSQTYxm2q1FkzLam7A2P8gAAAkE"]
[Mon Nov 24 16:12:28.463832 2025] [:error] [pid 16549:tid 16553] [client 172.177.3.143:64195] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aSQTbKeWW19A99PUw_cvVgAAAUE"]
[Mon Nov 24 16:12:29.875188 2025] [:error] [pid 9630:tid 9643] [client 172.177.3.143:64801] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aSQTbSrSgUgPGkizt2rflgAAAEs"]
[Mon Nov 24 16:12:31.458803 2025] [:error] [pid 48688:tid 48696] [client 172.177.3.143:64848] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aSQTbxm2q1FkzLam7A2P9wAAAkQ"]
[Mon Nov 24 16:12:33.872441 2025] [:error] [pid 48601:tid 48658] [client 172.177.3.143:65310] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aSQTcYMM4MaVTk74-AalhgAAAgE"]
[Mon Nov 24 16:12:34.950124 2025] [:error] [pid 48599:tid 48617] [client 172.177.3.143:65317] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aSQTcpzvu6PDJiRKE3IXEwAAAY4"]
[Mon Nov 24 16:12:35.862103 2025] [:error] [pid 48601:tid 48670] [client 172.177.3.143:64831] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aSQTc4MM4MaVTk74-AaliAAAAg0"]
[Mon Nov 24 16:12:37.178637 2025] [:error] [pid 16516:tid 16529] [client 172.177.3.143:65295] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aSQTdfqZbniwaNwL8XnafAAAAQo"]
[Mon Nov 24 16:12:37.929793 2025] [:error] [pid 48688:tid 48692] [client 172.177.3.143:65308] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aSQTdRm2q1FkzLam7A2QAwAAAkA"]
[Mon Nov 24 16:12:38.545373 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:65352] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aSQTdoq_bc5MOa9HflkcNwAAAJg"]
[Mon Nov 24 16:12:40.264962 2025] [:error] [pid 48600:tid 48636] [client 172.177.3.143:64871] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aSQTePtOzSUAQvWVjBdwUAAAAcY"]
[Mon Nov 24 16:12:42.681734 2025] [:error] [pid 9630:tid 9632] [client 172.177.3.143:64247] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aSQTeirSgUgPGkizt2rfmgAAAEA"]
[Mon Nov 24 16:12:43.681217 2025] [:error] [pid 16441:tid 16466] [client 172.177.3.143:64806] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aSQTe4q_bc5MOa9HflkcOwAAAJY"]
[Mon Nov 24 16:12:45.184355 2025] [:error] [pid 16516:tid 16522] [client 172.177.3.143:65391] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aSQTffqZbniwaNwL8XnafwAAAQM"]
[Mon Nov 24 16:12:45.890443 2025] [:error] [pid 48688:tid 48707] [client 172.177.3.143:65375] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aSQTfRm2q1FkzLam7A2QDwAAAk8"]
[Mon Nov 24 16:12:48.234828 2025] [:error] [pid 16441:tid 16445] [client 172.177.3.143:64235] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aSQTgIq_bc5MOa9HflkcPgAAAIE"]
[Mon Nov 24 16:12:49.257916 2025] [:error] [pid 48599:tid 48608] [client 172.177.3.143:65364] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aSQTgZzvu6PDJiRKE3IXFgAAAYU"]
[Mon Nov 24 16:12:50.399612 2025] [:error] [pid 16549:tid 16574] [client 172.177.3.143:64821] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aSQTgqeWW19A99PUw_cvWgAAAVU"]
[Mon Nov 24 16:12:51.403525 2025] [:error] [pid 48599:tid 48625] [client 172.177.3.143:64882] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aSQTg5zvu6PDJiRKE3IXFwAAAZY"]
[Mon Nov 24 16:12:53.593013 2025] [:error] [pid 49900:tid 49916] [client 172.177.3.143:65284] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aSQThTCyPLrvg06aorn-MAAAAA4"]
[Mon Nov 24 16:12:55.730902 2025] [:error] [pid 48688:tid 48711] [client 172.177.3.143:65323] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aSQThxm2q1FkzLam7A2QEgAAAlM"]
[Mon Nov 24 16:12:56.769758 2025] [:error] [pid 16593:tid 16611] [client 172.177.3.143:64199] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aSQTiBVGznHBJI2LKpQzDwAAApA"]
[Mon Nov 24 16:12:57.618100 2025] [:error] [pid 48601:tid 48677] [client 172.177.3.143:64789] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aSQTiYMM4MaVTk74-AalsQAAAhQ"]
[Mon Nov 24 16:12:59.149045 2025] [:error] [pid 16549:tid 16575] [client 172.177.3.143:65281] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aSQTi6eWW19A99PUw_cvXQAAAVY"]
[Mon Nov 24 16:13:01.362055 2025] [:error] [pid 49900:tid 49910] [client 172.177.3.143:65304] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aSQTjTCyPLrvg06aorn-NQAAAAg"]
[Mon Nov 24 16:13:02.924641 2025] [:error] [pid 48600:tid 48652] [client 172.177.3.143:65292] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aSQTjvtOzSUAQvWVjBdwVwAAAdY"]
[Mon Nov 24 16:13:04.316392 2025] [:error] [pid 49900:tid 49905] [client 172.177.3.143:65334] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aSQTkDCyPLrvg06aorn-NgAAAAM"]
[Mon Nov 24 16:13:05.259044 2025] [:error] [pid 49900:tid 49909] [client 172.177.3.143:64791] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aSQTkTCyPLrvg06aorn-OAAAAAc"]
[Mon Nov 24 16:13:06.177619 2025] [:error] [pid 16441:tid 16462] [client 172.177.3.143:64828] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aSQTkoq_bc5MOa9HflkcWwAAAJI"]
[Mon Nov 24 16:13:06.909918 2025] [:error] [pid 48601:tid 48674] [client 172.177.3.143:65345] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aSQTkoMM4MaVTk74-AaltQAAAhE"]
[Mon Nov 24 16:13:07.913656 2025] [:error] [pid 48688:tid 48710] [client 172.177.3.143:65311] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aSQTkxm2q1FkzLam7A2QIgAAAlI"]
[Mon Nov 24 16:13:08.643260 2025] [:error] [pid 9630:tid 9632] [client 172.177.3.143:65283] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aSQTlCrSgUgPGkizt2rfpQAAAEA"]
[Mon Nov 24 16:13:09.424635 2025] [:error] [pid 16549:tid 16566] [client 172.177.3.143:64233] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aSQTlaeWW19A99PUw_cvcQAAAU4"]
[Mon Nov 24 16:13:10.387790 2025] [:error] [pid 48688:tid 48711] [client 172.177.3.143:64816] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skk.php"] [unique_id "aSQTlhm2q1FkzLam7A2QJAAAAlM"]
[Mon Nov 24 16:13:11.899982 2025] [:error] [pid 16593:tid 16601] [client 172.177.3.143:65288] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skk.php"] [unique_id "aSQTlxVGznHBJI2LKpQzEQAAAoY"]
[Mon Nov 24 16:13:12.823620 2025] [:error] [pid 16441:tid 16464] [client 172.177.3.143:64198] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skk.php"] [unique_id "aSQTmIq_bc5MOa9HflkcZwAAAJQ"]
[Mon Nov 24 16:13:13.673945 2025] [:error] [pid 49900:tid 49906] [client 172.177.3.143:64782] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skk.php"] [unique_id "aSQTmTCyPLrvg06aorn-QQAAAAQ"]
[Mon Nov 24 16:13:14.902338 2025] [:error] [pid 16441:tid 16462] [client 172.177.3.143:64205] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aSQTmoq_bc5MOa9HflkcbQAAAJI"]
[Mon Nov 24 16:13:15.917281 2025] [:error] [pid 49900:tid 49915] [client 172.177.3.143:65350] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aSQTmzCyPLrvg06aorn-RAAAAA0"]
[Mon Nov 24 16:13:17.637226 2025] [:error] [pid 16549:tid 16576] [client 172.177.3.143:65396] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aSQTnaeWW19A99PUw_cvdAAAAVc"]
[Mon Nov 24 16:13:18.997406 2025] [:error] [pid 16549:tid 16571] [client 172.177.3.143:64840] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aSQTnqeWW19A99PUw_cvdQAAAVI"]
[Mon Nov 24 16:13:20.198519 2025] [:error] [pid 9630:tid 9651] [client 172.177.3.143:65319] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admi.php"] [unique_id "aSQToCrSgUgPGkizt2rfqgAAAFM"]
[Mon Nov 24 16:13:21.538685 2025] [:error] [pid 16593:tid 16605] [client 172.177.3.143:64213] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admi.php"] [unique_id "aSQToRVGznHBJI2LKpQzEwAAAoo"]
[Mon Nov 24 16:13:22.836887 2025] [:error] [pid 48599:tid 48603] [client 172.177.3.143:65359] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admi.php"] [unique_id "aSQTopzvu6PDJiRKE3IXHgAAAYA"]
[Mon Nov 24 16:13:23.960894 2025] [:error] [pid 48599:tid 48610] [client 172.177.3.143:65282] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admi.php"] [unique_id "aSQTo5zvu6PDJiRKE3IXHwAAAYc"]
[Mon Nov 24 16:13:25.413653 2025] [:error] [pid 16441:tid 16453] [client 172.177.3.143:65360] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aSQTpYq_bc5MOa9HflkcdwAAAIk"]
[Mon Nov 24 16:13:26.371651 2025] [:error] [pid 16441:tid 16464] [client 172.177.3.143:64792] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aSQTpoq_bc5MOa9HflkceAAAAJQ"]
[Mon Nov 24 16:13:27.551349 2025] [:error] [pid 9630:tid 9643] [client 172.177.3.143:65330] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aSQTpyrSgUgPGkizt2rfsAAAAEs"]
[Mon Nov 24 16:13:37.330890 2025] [:error] [pid 9630:tid 9653] [client 172.177.3.143:64773] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aSQTsSrSgUgPGkizt2rfywAAAFU"]
[Mon Nov 24 16:13:38.424475 2025] [:error] [pid 48688:tid 48715] [client 172.177.3.143:65354] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aSQTshm2q1FkzLam7A2QOAAAAlc"]
[Mon Nov 24 16:13:39.601396 2025] [:error] [pid 49900:tid 49911] [client 172.177.3.143:64868] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aSQTszCyPLrvg06aorn-UwAAAAk"]
[Mon Nov 24 16:13:40.523680 2025] [:error] [pid 48599:tid 48606] [client 172.177.3.143:65296] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aSQTtJzvu6PDJiRKE3IXJAAAAYM"]
[Mon Nov 24 16:13:41.935251 2025] [:error] [pid 16441:tid 16461] [client 172.177.3.143:65357] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aSQTtYq_bc5MOa9HflkcfwAAAJE"]
[Mon Nov 24 16:13:43.148874 2025] [:error] [pid 48688:tid 48710] [client 172.177.3.143:64823] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aSQTtxm2q1FkzLam7A2QQgAAAlI"]
[Mon Nov 24 16:13:44.723286 2025] [:error] [pid 16593:tid 16612] [client 172.177.3.143:65336] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aSQTuBVGznHBJI2LKpQzGgAAApE"]
[Mon Nov 24 16:13:47.687407 2025] [:error] [pid 9630:tid 9648] [client 172.177.3.143:65387] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aSQTuyrSgUgPGkizt2rfzgAAAFA"]
[Mon Nov 24 16:13:49.448332 2025] [:error] [pid 48600:tid 48644] [client 172.177.3.143:64197] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aSQTvftOzSUAQvWVjBdwZQAAAc4"]
[Mon Nov 24 16:13:51.742998 2025] [:error] [pid 16593:tid 16609] [client 172.177.3.143:64772] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aSQTvxVGznHBJI2LKpQzHQAAAo4"]
[Mon Nov 24 16:13:52.543263 2025] [:error] [pid 48600:tid 48635] [client 172.177.3.143:65318] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aSQTwPtOzSUAQvWVjBdwZgAAAcU"]
[Mon Nov 24 16:13:54.311786 2025] [:error] [pid 48601:tid 48673] [client 172.177.3.143:64799] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aSQTwoMM4MaVTk74-AalxwAAAhA"]
[Mon Nov 24 16:13:55.509178 2025] [:error] [pid 16593:tid 16607] [client 172.177.3.143:65299] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aSQTwxVGznHBJI2LKpQzIgAAAow"]
[Mon Nov 24 16:13:57.589387 2025] [:error] [pid 9630:tid 9656] [client 172.177.3.143:65329] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aSQTxSrSgUgPGkizt2rf0wAAAFg"]
[Mon Nov 24 16:13:59.635372 2025] [:error] [pid 49900:tid 49922] [client 172.177.3.143:65373] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aSQTxzCyPLrvg06aorn-WwAAABQ"]
[Mon Nov 24 16:14:01.806974 2025] [:error] [pid 48599:tid 48617] [client 172.177.3.143:65339] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aSQTyZzvu6PDJiRKE3IXLwAAAY4"]
[Mon Nov 24 16:14:03.121489 2025] [:error] [pid 49900:tid 49924] [client 172.177.3.143:64813] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aSQTyzCyPLrvg06aorn-XwAAABY"]
[Mon Nov 24 16:14:04.691077 2025] [:error] [pid 48599:tid 48604] [client 172.177.3.143:64881] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aSQTzJzvu6PDJiRKE3IXMwAAAYE"]
[Mon Nov 24 16:14:05.506425 2025] [:error] [pid 48601:tid 48657] [client 172.177.3.143:65385] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aSQTzYMM4MaVTk74-AalzAAAAgA"]
[Mon Nov 24 16:14:07.789248 2025] [:error] [pid 49900:tid 49906] [client 172.177.3.143:64841] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aSQTzzCyPLrvg06aorn-YAAAAAQ"]
[Mon Nov 24 16:14:10.119064 2025] [:error] [pid 48600:tid 48634] [client 172.177.3.143:65291] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aSQT0vtOzSUAQvWVjBdwbgAAAcQ"]
[Mon Nov 24 16:14:11.590824 2025] [:error] [pid 48599:tid 48620] [client 172.177.3.143:65344] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aSQT05zvu6PDJiRKE3IXNQAAAZE"]
[Mon Nov 24 16:14:12.932662 2025] [:error] [pid 16441:tid 16460] [client 172.177.3.143:65349] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aSQT1Iq_bc5MOa9HflkcigAAAJA"]
[Mon Nov 24 16:14:14.925798 2025] [:error] [pid 16549:tid 16575] [client 172.177.3.143:64223] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aSQT1qeWW19A99PUw_cvlgAAAVY"]
[Mon Nov 24 16:14:16.399262 2025] [:error] [pid 9630:tid 9640] [client 172.177.3.143:65285] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aSQT2CrSgUgPGkizt2rf4QAAAEg"]
[Mon Nov 24 16:14:17.192472 2025] [:error] [pid 16549:tid 16576] [client 172.177.3.143:65305] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aSQT2aeWW19A99PUw_cvnQAAAVc"]
[Mon Nov 24 16:14:19.059478 2025] [:error] [pid 48601:tid 48677] [client 172.177.3.143:65383] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aSQT24MM4MaVTk74-Aal3gAAAhQ"]
[Mon Nov 24 16:14:20.356330 2025] [:error] [pid 16441:tid 16462] [client 172.177.3.143:65290] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aSQT3Iq_bc5MOa9HflkcngAAAJI"]
[Mon Nov 24 16:14:23.589807 2025] [:error] [pid 48599:tid 48604] [client 172.177.3.143:64222] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aSQT35zvu6PDJiRKE3IXPwAAAYE"]
[Mon Nov 24 16:14:25.752792 2025] [:error] [pid 49900:tid 49902] [client 172.177.3.143:65369] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aSQT4TCyPLrvg06aorn-bQAAAAA"]
[Mon Nov 24 16:14:26.666280 2025] [:error] [pid 16441:tid 16458] [client 172.177.3.143:64196] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aSQT4oq_bc5MOa9HflkcrgAAAI4"]
[Mon Nov 24 16:14:28.733631 2025] [:error] [pid 48688:tid 48699] [client 172.177.3.143:64843] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aSQT5Bm2q1FkzLam7A2QawAAAkc"]
[Mon Nov 24 16:14:30.220370 2025] [:error] [pid 48599:tid 48618] [client 172.177.3.143:64850] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "aSQT5pzvu6PDJiRKE3IXQQAAAY8"]
[Mon Nov 24 16:14:31.851620 2025] [:error] [pid 48688:tid 48715] [client 172.177.3.143:65309] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "aSQT5xm2q1FkzLam7A2QbQAAAlc"]
[Mon Nov 24 16:14:33.251887 2025] [:error] [pid 16441:tid 16447] [client 172.177.3.143:64860] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "aSQT6Yq_bc5MOa9HflkctAAAAIM"]
[Mon Nov 24 16:14:35.488887 2025] [:error] [pid 48601:tid 48668] [client 172.177.3.143:64883] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "aSQT64MM4MaVTk74-Aal8wAAAgs"]
[Mon Nov 24 16:14:45.590107 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:65338] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggfi.php"] [unique_id "aSQT9Yq_bc5MOa9Hflkc2gAAAJU"]
[Mon Nov 24 16:14:47.576160 2025] [:error] [pid 16441:tid 16446] [client 172.177.3.143:65302] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggfi.php"] [unique_id "aSQT94q_bc5MOa9Hflkc3QAAAII"]
[Mon Nov 24 16:14:49.200253 2025] [:error] [pid 48688:tid 48702] [client 172.177.3.143:64770] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggfi.php"] [unique_id "aSQT-Rm2q1FkzLam7A2QhQAAAko"]
[Mon Nov 24 16:14:50.189017 2025] [:error] [pid 16441:tid 16453] [client 172.177.3.143:64785] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggfi.php"] [unique_id "aSQT-oq_bc5MOa9Hflkc3wAAAIk"]
[Mon Nov 24 16:14:51.310675 2025] [:error] [pid 16516:tid 16522] [client 172.177.3.143:65384] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aSQT-_qZbniwaNwL8Xna5QAAAQM"]
[Mon Nov 24 16:14:52.195025 2025] [:error] [pid 48599:tid 48615] [client 172.177.3.143:64768] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aSQT_Jzvu6PDJiRKE3IXbwAAAYw"]
[Mon Nov 24 16:14:53.745697 2025] [:error] [pid 16441:tid 16463] [client 172.177.3.143:64810] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aSQT_Yq_bc5MOa9Hflkc5QAAAJM"]
[Mon Nov 24 16:14:54.936809 2025] [:error] [pid 16593:tid 16610] [client 172.177.3.143:65321] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aSQT_hVGznHBJI2LKpQzcQAAAo8"]
[Mon Nov 24 16:14:55.837175 2025] [:error] [pid 16516:tid 16537] [client 172.177.3.143:65386] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aSQT__qZbniwaNwL8Xna6AAAARI"]
[Mon Nov 24 16:14:56.526520 2025] [:error] [pid 48601:tid 48660] [client 172.177.3.143:64854] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aSQUAIMM4MaVTk74-AamAAAAAgM"]
[Mon Nov 24 16:14:58.775050 2025] [:error] [pid 49900:tid 49904] [client 172.177.3.143:65351] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aSQUAjCyPLrvg06aorn-hwAAAAI"]
[Mon Nov 24 16:15:05.291682 2025] [:error] [pid 9630:tid 9649] [client 172.177.3.143:64776] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aSQUCSrSgUgPGkizt2rgIgAAAFE"]
[Mon Nov 24 16:15:07.933519 2025] [:error] [pid 9630:tid 9646] [client 172.177.3.143:65374] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tsconfig.php"] [unique_id "aSQUCyrSgUgPGkizt2rgKAAAAE4"]
[Mon Nov 24 16:15:10.055002 2025] [:error] [pid 16441:tid 16448] [client 172.177.3.143:65327] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tsconfig.php"] [unique_id "aSQUDoq_bc5MOa9Hflkc7wAAAIQ"]
[Mon Nov 24 16:15:11.604201 2025] [:error] [pid 16441:tid 16446] [client 172.177.3.143:65399] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tsconfig.php"] [unique_id "aSQUD4q_bc5MOa9Hflkc8QAAAII"]
[Mon Nov 24 16:15:13.629472 2025] [:error] [pid 16516:tid 16525] [client 172.177.3.143:64839] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tsconfig.php"] [unique_id "aSQUEfqZbniwaNwL8Xna-QAAAQY"]
[Mon Nov 24 16:15:14.624848 2025] [:error] [pid 49900:tid 49902] [client 172.177.3.143:64836] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aSQUEjCyPLrvg06aorn-lwAAAAA"]
[Mon Nov 24 16:15:16.074624 2025] [:error] [pid 16441:tid 16445] [client 172.177.3.143:64878] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aSQUFIq_bc5MOa9Hflkc_QAAAIE"]
[Mon Nov 24 16:15:18.160456 2025] [:error] [pid 48601:tid 48676] [client 172.177.3.143:64228] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aSQUFoMM4MaVTk74-AamPwAAAhM"]
[Mon Nov 24 16:15:19.241457 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:65403] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aSQUF4q_bc5MOa9HflkdBwAAAIw"]
[Mon Nov 24 16:15:20.548978 2025] [:error] [pid 16441:tid 16466] [client 172.177.3.143:65377] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pt.php"] [unique_id "aSQUGIq_bc5MOa9HflkdDAAAAJY"]
[Mon Nov 24 16:15:21.603019 2025] [:error] [pid 16516:tid 16529] [client 172.177.3.143:65301] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pt.php"] [unique_id "aSQUGfqZbniwaNwL8Xna_AAAAQo"]
[Mon Nov 24 16:15:22.313976 2025] [:error] [pid 48600:tid 48640] [client 172.177.3.143:64204] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pt.php"] [unique_id "aSQUGvtOzSUAQvWVjBdwnwAAAco"]
[Mon Nov 24 16:15:23.323908 2025] [:error] [pid 48601:tid 48663] [client 172.177.3.143:65382] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pt.php"] [unique_id "aSQUG4MM4MaVTk74-AamQwAAAgY"]
[Mon Nov 24 16:15:24.666653 2025] [:error] [pid 48601:tid 48668] [client 172.177.3.143:65303] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aSQUHIMM4MaVTk74-AamRQAAAgs"]
[Mon Nov 24 16:15:27.120677 2025] [:error] [pid 48599:tid 48612] [client 172.177.3.143:65381] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aSQUH5zvu6PDJiRKE3IXngAAAYk"]
[Mon Nov 24 16:15:28.244711 2025] [:error] [pid 48599:tid 48607] [client 172.177.3.143:65397] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aSQUIJzvu6PDJiRKE3IXnwAAAYQ"]
[Mon Nov 24 16:15:29.582029 2025] [:error] [pid 48599:tid 48618] [client 172.177.3.143:65313] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aSQUIZzvu6PDJiRKE3IXoAAAAY8"]
[Mon Nov 24 16:15:30.711226 2025] [:error] [pid 48601:tid 48671] [client 172.177.3.143:64834] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSQUIoMM4MaVTk74-AamTgAAAg4"]
[Mon Nov 24 16:15:32.184691 2025] [:error] [pid 16441:tid 16450] [client 172.177.3.143:65395] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSQUJIq_bc5MOa9HflkdDwAAAIY"]
[Mon Nov 24 16:15:33.465822 2025] [:error] [pid 49900:tid 49918] [client 172.177.3.143:64835] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSQUJTCyPLrvg06aorn-uwAAABA"]
[Mon Nov 24 16:15:34.399770 2025] [:error] [pid 48688:tid 48702] [client 172.177.3.143:65328] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSQUJhm2q1FkzLam7A2QpQAAAko"]
[Mon Nov 24 16:15:34.908180 2025] [:error] [pid 9630:tid 9634] [client 172.177.3.143:65300] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSQUJirSgUgPGkizt2rgUwAAAEI"]
[Mon Nov 24 16:15:36.872937 2025] [:error] [pid 49900:tid 49911] [client 172.177.3.143:65376] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSQUKDCyPLrvg06aorn-xQAAAAk"]
[Mon Nov 24 16:15:38.284026 2025] [:error] [pid 48600:tid 48644] [client 172.177.3.143:64793] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSQUKvtOzSUAQvWVjBdwpAAAAc4"]
[Mon Nov 24 16:15:40.825286 2025] [:error] [pid 16516:tid 16523] [client 172.177.3.143:64837] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSQULPqZbniwaNwL8XnbGgAAAQQ"]
[Mon Nov 24 16:15:42.776529 2025] [:error] [pid 48600:tid 48645] [client 172.177.3.143:65343] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mango.php"] [unique_id "aSQULvtOzSUAQvWVjBdwqQAAAc8"]
[Mon Nov 24 16:15:53.236936 2025] [:error] [pid 9630:tid 9638] [client 172.177.3.143:64855] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5drd24.php"] [unique_id "aSQUOSrSgUgPGkizt2rgfQAAAEY"]
[Mon Nov 24 16:15:54.183752 2025] [:error] [pid 16516:tid 16536] [client 172.177.3.143:65293] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5drd24.php"] [unique_id "aSQUOvqZbniwaNwL8XnbOgAAARE"]
[Mon Nov 24 16:15:54.863661 2025] [:error] [pid 16516:tid 16527] [client 172.177.3.143:64849] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5drd24.php"] [unique_id "aSQUOvqZbniwaNwL8XnbPAAAAQg"]
[Mon Nov 24 16:15:55.549312 2025] [:error] [pid 16516:tid 16519] [client 172.177.3.143:65289] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5drd24.php"] [unique_id "aSQUO_qZbniwaNwL8XnbPgAAAQA"]
[Mon Nov 24 16:15:57.071525 2025] [:error] [pid 16516:tid 16540] [client 172.177.3.143:65298] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "aSQUPfqZbniwaNwL8XnbRAAAARU"]
[Mon Nov 24 16:15:58.582376 2025] [:error] [pid 16441:tid 16444] [client 172.177.3.143:64787] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "aSQUPoq_bc5MOa9HflkdNQAAAIA"]
[Mon Nov 24 16:15:59.604201 2025] [:error] [pid 9630:tid 9633] [client 172.177.3.143:65363] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "aSQUPyrSgUgPGkizt2rghQAAAEE"]
[Mon Nov 24 16:16:00.993564 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:64832] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "aSQUQIq_bc5MOa9HflkdOgAAAJU"]
[Mon Nov 24 16:16:02.403076 2025] [:error] [pid 48599:tid 48610] [client 172.177.3.143:64199] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-hayato.php"] [unique_id "aSQUQpzvu6PDJiRKE3IXwAAAAYc"]
[Mon Nov 24 16:16:03.954891 2025] [:error] [pid 16516:tid 16542] [client 172.177.3.143:65362] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-hayato.php"] [unique_id "aSQUQ_qZbniwaNwL8XnbSwAAARc"]
[Mon Nov 24 16:16:05.667362 2025] [:error] [pid 16441:tid 16466] [client 172.177.3.143:64225] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-hayato.php"] [unique_id "aSQURYq_bc5MOa9HflkdVwAAAJY"]
[Mon Nov 24 16:16:07.360621 2025] [:error] [pid 16441:tid 16450] [client 172.177.3.143:64826] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-hayato.php"] [unique_id "aSQUR4q_bc5MOa9HflkdXgAAAIY"]
[Mon Nov 24 16:16:09.325792 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:65312] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Hd.php"] [unique_id "aSQUSYq_bc5MOa9HflkdYAAAAJg"]
[Mon Nov 24 16:16:10.433204 2025] [:error] [pid 9630:tid 9656] [client 172.177.3.143:64861] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Hd.php"] [unique_id "aSQUSirSgUgPGkizt2rgjAAAAFg"]
[Mon Nov 24 16:16:11.564741 2025] [:error] [pid 16593:tid 16609] [client 172.177.3.143:64875] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Hd.php"] [unique_id "aSQUSxVGznHBJI2LKpQzpgAAAo4"]
[Mon Nov 24 16:16:12.830443 2025] [:error] [pid 49900:tid 49918] [client 172.177.3.143:64820] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Hd.php"] [unique_id "aSQUTDCyPLrvg06aorn-_gAAABA"]
[Mon Nov 24 16:16:15.729848 2025] [:error] [pid 9630:tid 9635] [client 172.177.3.143:65286] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "aSQUTyrSgUgPGkizt2rglwAAAEM"]
[Mon Nov 24 16:16:16.961894 2025] [:error] [pid 48601:tid 48681] [client 172.177.3.143:65340] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "aSQUUIMM4MaVTk74-AamkQAAAhg"]
[Mon Nov 24 16:16:17.793464 2025] [:error] [pid 9630:tid 9639] [client 172.177.3.143:65366] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "aSQUUSrSgUgPGkizt2rgmgAAAEc"]
[Mon Nov 24 16:16:19.284924 2025] [:error] [pid 48688:tid 48711] [client 172.177.3.143:65324] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "aSQUUxm2q1FkzLam7A2Q3AAAAlM"]
[Mon Nov 24 16:16:19.954495 2025] [:error] [pid 48601:tid 48659] [client 172.177.3.143:65406] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/colour.php"] [unique_id "aSQUU4MM4MaVTk74-AammgAAAgI"]
[Mon Nov 24 16:16:21.135972 2025] [:error] [pid 48601:tid 48670] [client 172.177.3.143:65351] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/colour.php"] [unique_id "aSQUVYMM4MaVTk74-AamnQAAAg0"]
[Mon Nov 24 16:16:22.209971 2025] [:error] [pid 48600:tid 48634] [client 172.177.3.143:65371] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/colour.php"] [unique_id "aSQUVvtOzSUAQvWVjBdw8QAAAcQ"]
[Mon Nov 24 16:16:23.246989 2025] [:error] [pid 16549:tid 16564] [client 172.177.3.143:65307] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/colour.php"] [unique_id "aSQUV6eWW19A99PUw_cwEwAAAUw"]
[Mon Nov 24 16:16:24.403639 2025] [:error] [pid 9630:tid 9637] [client 172.177.3.143:64880] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/soYgFVi.php"] [unique_id "aSQUWCrSgUgPGkizt2rgnwAAAEU"]
[Mon Nov 24 16:16:26.030600 2025] [:error] [pid 16516:tid 16527] [client 172.177.3.143:65316] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/soYgFVi.php"] [unique_id "aSQUWvqZbniwaNwL8XnbYQAAAQg"]
[Mon Nov 24 16:16:28.798692 2025] [:error] [pid 48688:tid 48713] [client 172.177.3.143:64215] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/soYgFVi.php"] [unique_id "aSQUXBm2q1FkzLam7A2Q5gAAAlU"]
[Mon Nov 24 16:16:30.245733 2025] [:error] [pid 16549:tid 16553] [client 172.177.3.143:65280] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/soYgFVi.php"] [unique_id "aSQUXqeWW19A99PUw_cwFwAAAUE"]
[Mon Nov 24 16:16:31.652063 2025] [:error] [pid 16593:tid 16619] [client 172.177.3.143:64819] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kn18l3.php"] [unique_id "aSQUXxVGznHBJI2LKpQztQAAApg"]
[Mon Nov 24 16:16:33.029214 2025] [:error] [pid 48600:tid 48633] [client 172.177.3.143:64807] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kn18l3.php"] [unique_id "aSQUYftOzSUAQvWVjBdxAAAAAcM"]
[Mon Nov 24 16:16:33.857391 2025] [:error] [pid 16441:tid 16452] [client 172.177.3.143:64252] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kn18l3.php"] [unique_id "aSQUYYq_bc5MOa9HflkdfAAAAIg"]
[Mon Nov 24 16:16:34.678959 2025] [:error] [pid 16441:tid 16446] [client 172.177.3.143:65390] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kn18l3.php"] [unique_id "aSQUYoq_bc5MOa9HflkdfQAAAII"]
[Mon Nov 24 16:16:36.665227 2025] [:error] [pid 48600:tid 48642] [client 172.177.3.143:65287] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwnd.php"] [unique_id "aSQUZPtOzSUAQvWVjBdxBQAAAcw"]
[Mon Nov 24 16:16:38.586186 2025] [:error] [pid 16441:tid 16453] [client 172.177.3.143:65394] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwnd.php"] [unique_id "aSQUZoq_bc5MOa9HflkdgQAAAIk"]
[Mon Nov 24 16:16:39.981528 2025] [:error] [pid 16441:tid 16448] [client 172.177.3.143:65379] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwnd.php"] [unique_id "aSQUZ4q_bc5MOa9HflkdhQAAAIQ"]
[Mon Nov 24 16:16:43.373413 2025] [:error] [pid 16549:tid 16568] [client 172.177.3.143:64856] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwnd.php"] [unique_id "aSQUa6eWW19A99PUw_cwGwAAAVA"]
[Mon Nov 24 16:16:44.779602 2025] [:error] [pid 16593:tid 16612] [client 172.177.3.143:65346] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/getid3s.php"] [unique_id "aSQUbBVGznHBJI2LKpQzugAAApE"]
[Mon Nov 24 16:16:46.189760 2025] [:error] [pid 9630:tid 9633] [client 172.177.3.143:65358] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/getid3s.php"] [unique_id "aSQUbirSgUgPGkizt2rgrAAAAEE"]
[Mon Nov 24 16:16:48.010879 2025] [:error] [pid 9630:tid 9632] [client 172.177.3.143:65314] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/getid3s.php"] [unique_id "aSQUcCrSgUgPGkizt2rgrQAAAEA"]
[Mon Nov 24 16:17:01.743532 2025] [:error] [pid 48688:tid 48696] [client 172.177.3.143:64864] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aSQUfRm2q1FkzLam7A2Q-wAAAkQ"]
[Mon Nov 24 16:17:04.740469 2025] [:error] [pid 16441:tid 16452] [client 172.177.3.143:65404] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aSQUgIq_bc5MOa9HflkdpAAAAIg"]
[Mon Nov 24 16:17:08.046251 2025] [:error] [pid 48599:tid 48625] [client 172.177.3.143:65308] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aSQUhJzvu6PDJiRKE3IX7AAAAZY"]
[Mon Nov 24 16:17:09.710401 2025] [:error] [pid 48601:tid 48681] [client 172.177.3.143:65342] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aSQUhYMM4MaVTk74-AamxQAAAhg"]
[Mon Nov 24 16:17:11.876020 2025] [:error] [pid 16441:tid 16461] [client 172.177.3.143:65392] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php8"] [unique_id "aSQUh4q_bc5MOa9HflkdrQAAAJE"]
[Mon Nov 24 16:17:13.305868 2025] [:error] [pid 48601:tid 48669] [client 172.177.3.143:65341] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php8"] [unique_id "aSQUiYMM4MaVTk74-AamyAAAAgw"]
[Mon Nov 24 16:17:14.903229 2025] [:error] [pid 16516:tid 16535] [client 172.177.3.143:64872] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php8"] [unique_id "aSQUivqZbniwaNwL8XnbdgAAARA"]
[Mon Nov 24 16:17:16.197274 2025] [:error] [pid 48601:tid 48663] [client 172.177.3.143:64838] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php8"] [unique_id "aSQUjIMM4MaVTk74-AamzAAAAgY"]
[Mon Nov 24 16:17:18.341514 2025] [:error] [pid 48688:tid 48708] [client 172.177.3.143:64210] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aSQUjhm2q1FkzLam7A2RAgAAAlA"]
[Mon Nov 24 16:17:19.163834 2025] [:error] [pid 16593:tid 16604] [client 172.177.3.143:65393] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aSQUjxVGznHBJI2LKpQzwQAAAok"]
[Mon Nov 24 16:17:21.133696 2025] [:error] [pid 16516:tid 16534] [client 172.177.3.143:65283] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aSQUkfqZbniwaNwL8XnbeAAAAQ8"]
[Mon Nov 24 16:17:22.799026 2025] [:error] [pid 48599:tid 48610] [client 172.177.3.143:64778] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aSQUkpzvu6PDJiRKE3IX8gAAAYc"]
[Mon Nov 24 16:17:25.548318 2025] [:error] [pid 16549:tid 16553] [client 172.177.3.143:64887] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploxe.php"] [unique_id "aSQUlaeWW19A99PUw_cwKgAAAUE"]
[Mon Nov 24 16:17:27.919207 2025] [:error] [pid 16441:tid 16446] [client 172.177.3.143:65310] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploxe.php"] [unique_id "aSQUl4q_bc5MOa9HflkdugAAAII"]
[Mon Nov 24 16:17:29.209342 2025] [:error] [pid 49900:tid 49906] [client 172.177.3.143:65402] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploxe.php"] [unique_id "aSQUmTCyPLrvg06aorn_RQAAAAQ"]
[Mon Nov 24 16:17:31.621298 2025] [:error] [pid 16441:tid 16464] [client 172.177.3.143:65388] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploxe.php"] [unique_id "aSQUm4q_bc5MOa9HflkdwQAAAJQ"]
[Mon Nov 24 16:17:32.451785 2025] [:error] [pid 16441:tid 16450] [client 172.177.3.143:65361] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ropyx.php"] [unique_id "aSQUnIq_bc5MOa9HflkdxAAAAIY"]
[Mon Nov 24 16:17:34.795415 2025] [:error] [pid 48600:tid 48642] [client 172.177.3.143:65372] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ropyx.php"] [unique_id "aSQUnvtOzSUAQvWVjBdxJQAAAcw"]
[Mon Nov 24 16:17:36.506791 2025] [:error] [pid 48599:tid 48627] [client 172.177.3.143:64200] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ropyx.php"] [unique_id "aSQUoJzvu6PDJiRKE3IX9gAAAZg"]
[Mon Nov 24 16:17:39.029091 2025] [:error] [pid 48688:tid 48699] [client 172.177.3.143:65306] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ropyx.php"] [unique_id "aSQUoxm2q1FkzLam7A2RCgAAAkc"]
[Mon Nov 24 16:17:40.193308 2025] [:error] [pid 48601:tid 48657] [client 172.177.3.143:65407] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/Alex-Cross.php"] [unique_id "aSQUpIMM4MaVTk74-Aam1AAAAgA"]
[Mon Nov 24 16:17:41.083262 2025] [:error] [pid 9630:tid 9653] [client 172.177.3.143:65337] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/Alex-Cross.php"] [unique_id "aSQUpSrSgUgPGkizt2rgywAAAFU"]
[Mon Nov 24 16:17:42.293109 2025] [:error] [pid 9630:tid 9637] [client 172.177.3.143:64782] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/Alex-Cross.php"] [unique_id "aSQUpirSgUgPGkizt2rgzgAAAEU"]
[Mon Nov 24 16:17:43.220492 2025] [:error] [pid 49900:tid 49903] [client 172.177.3.143:64247] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/Alex-Cross.php"] [unique_id "aSQUpzCyPLrvg06aorn_UwAAAAE"]
[Mon Nov 24 16:17:44.007677 2025] [:error] [pid 9630:tid 9651] [client 172.177.3.143:65348] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-head.php"] [unique_id "aSQUqCrSgUgPGkizt2rgzwAAAFM"]
[Mon Nov 24 16:17:44.941264 2025] [:error] [pid 16441:tid 16453] [client 172.177.3.143:65332] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-head.php"] [unique_id "aSQUqIq_bc5MOa9HflkdywAAAIk"]
[Mon Nov 24 16:17:46.098928 2025] [:error] [pid 9630:tid 9654] [client 172.177.3.143:64792] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-head.php"] [unique_id "aSQUqirSgUgPGkizt2rg1QAAAFY"]
[Mon Nov 24 16:17:47.422468 2025] [:error] [pid 48601:tid 48676] [client 172.177.3.143:64867] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-head.php"] [unique_id "aSQUq4MM4MaVTk74-Aam1wAAAhM"]
[Mon Nov 24 16:17:49.276627 2025] [:error] [pid 16516:tid 16523] [client 172.177.3.143:65364] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ae.php"] [unique_id "aSQUrfqZbniwaNwL8XnbjgAAAQQ"]
[Mon Nov 24 16:17:50.822408 2025] [:error] [pid 49900:tid 49922] [client 172.177.3.143:64845] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ae.php"] [unique_id "aSQUrjCyPLrvg06aorn_XAAAABQ"]
[Mon Nov 24 16:17:53.199633 2025] [:error] [pid 16516:tid 16537] [client 172.177.3.143:65297] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ae.php"] [unique_id "aSQUsfqZbniwaNwL8XnbkgAAARI"]
[Mon Nov 24 16:17:53.901064 2025] [:error] [pid 49900:tid 49920] [client 172.177.3.143:65356] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ae.php"] [unique_id "aSQUsTCyPLrvg06aorn_ZAAAABI"]
[Mon Nov 24 16:17:55.664871 2025] [:error] [pid 48599:tid 48618] [client 172.177.3.143:65281] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cs.php"] [unique_id "aSQUs5zvu6PDJiRKE3IX_QAAAY8"]
[Mon Nov 24 16:17:56.654851 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:65387] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cs.php"] [unique_id "aSQUtIq_bc5MOa9Hflkd2AAAAJU"]
[Mon Nov 24 16:17:59.914603 2025] [:error] [pid 16549:tid 16573] [client 172.177.3.143:65296] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cs.php"] [unique_id "aSQUt6eWW19A99PUw_cwPgAAAVQ"]
[Mon Nov 24 16:18:10.934746 2025] [:error] [pid 48601:tid 48673] [client 172.177.3.143:65317] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpas2.php"] [unique_id "aSQUwoMM4MaVTk74-AanAQAAAhA"]
[Mon Nov 24 16:18:12.863560 2025] [:error] [pid 16593:tid 16611] [client 172.177.3.143:65323] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpas2.php"] [unique_id "aSQUxBVGznHBJI2LKpQz3wAAApA"]
[Mon Nov 24 16:18:14.101910 2025] [:error] [pid 9630:tid 9639] [client 172.177.3.143:65294] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpas2.php"] [unique_id "aSQUxirSgUgPGkizt2rg7AAAAEc"]
[Mon Nov 24 16:18:20.654361 2025] [:error] [pid 9630:tid 9650] [client 172.177.3.143:65347] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpas2.php"] [unique_id "aSQUzCrSgUgPGkizt2rg8QAAAFI"]
[Mon Nov 24 16:18:21.306192 2025] [:error] [pid 16516:tid 16527] [client 172.177.3.143:64840] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sss.php"] [unique_id "aSQUzfqZbniwaNwL8XnbmQAAAQg"]
[Mon Nov 24 16:18:22.539610 2025] [:error] [pid 48688:tid 48701] [client 172.177.3.143:65375] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sss.php"] [unique_id "aSQUzhm2q1FkzLam7A2RIQAAAkk"]
[Mon Nov 24 16:18:23.833648 2025] [:error] [pid 16549:tid 16572] [client 172.177.3.143:64779] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sss.php"] [unique_id "aSQUz6eWW19A99PUw_cwSgAAAVM"]
[Mon Nov 24 16:18:26.184836 2025] [:error] [pid 16441:tid 16449] [client 172.177.3.143:65352] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sss.php"] [unique_id "aSQU0oq_bc5MOa9Hflkd5AAAAIU"]
[Mon Nov 24 16:55:12.865439 2025] [:error] [pid 49900:tid 49904] [client 182.44.9.147:47733] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSQdcDCyPLrvg06aorkG0wAAAAI"]
[Mon Nov 24 17:50:55.440963 2025] [:error] [pid 16441:tid 16444] [client 4.233.64.129:42780] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQqf4q_bc5MOa9Hflk9AwAAAIA"]
[Mon Nov 24 17:50:58.690085 2025] [:error] [pid 9630:tid 9643] [client 4.233.64.129:42893] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQqgirSgUgPGkizt2r5hwAAAEs"]
[Mon Nov 24 17:51:01.797194 2025] [:error] [pid 16516:tid 16530] [client 4.233.64.129:42882] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSQqhfqZbniwaNwL8XnnMwAAAQs"]
[Mon Nov 24 18:31:26.220531 2025] [:error] [pid 48688:tid 48712] [client 172.177.3.143:35721] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aSQz_hm2q1FkzLam7A2o9AAAAlQ"]
[Mon Nov 24 18:31:29.110588 2025] [:error] [pid 9630:tid 9647] [client 172.177.3.143:35822] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aSQ0ASrSgUgPGkizt2oEsgAAAE8"]
[Mon Nov 24 18:31:30.889318 2025] [:error] [pid 49900:tid 49918] [client 172.177.3.143:35780] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aSQ0AjCyPLrvg06aorkdSAAAABA"]
[Mon Nov 24 18:31:32.761095 2025] [:error] [pid 16593:tid 16598] [client 172.177.3.143:35724] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aSQ0BBVGznHBJI2LKpRJqQAAAoM"]
[Mon Nov 24 18:31:33.456608 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:35818] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aSQ0BYq_bc5MOa9HfllLiAAAAJg"]
[Mon Nov 24 18:31:34.169587 2025] [:error] [pid 48688:tid 48696] [client 172.177.3.143:35816] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aSQ0Bhm2q1FkzLam7A2o9QAAAkQ"]
[Mon Nov 24 18:31:35.031912 2025] [:error] [pid 16441:tid 16463] [client 172.177.3.143:35736] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aSQ0B4q_bc5MOa9HfllLjgAAAJM"]
[Mon Nov 24 18:31:36.576200 2025] [:error] [pid 16549:tid 16571] [client 172.177.3.143:35783] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aSQ0CKeWW19A99PUw_dE8wAAAVI"]
[Mon Nov 24 18:31:37.776963 2025] [:error] [pid 49900:tid 49926] [client 172.177.3.143:35782] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aSQ0CTCyPLrvg06aorkdSQAAABg"]
[Mon Nov 24 18:31:39.541786 2025] [:error] [pid 16441:tid 16452] [client 172.177.3.143:35793] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aSQ0C4q_bc5MOa9HfllLmwAAAIg"]
[Mon Nov 24 18:31:41.068898 2025] [:error] [pid 16441:tid 16463] [client 172.177.3.143:35712] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aSQ0DYq_bc5MOa9HfllLnQAAAJM"]
[Mon Nov 24 18:31:42.015524 2025] [:error] [pid 48601:tid 48660] [client 172.177.3.143:35789] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aSQ0DoMM4MaVTk74-AbClgAAAgM"]
[Mon Nov 24 18:31:43.480710 2025] [:error] [pid 48600:tid 48652] [client 172.177.3.143:35785] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aSQ0D_tOzSUAQvWVjBeE-AAAAdY"]
[Mon Nov 24 18:31:44.823883 2025] [:error] [pid 48600:tid 48637] [client 172.177.3.143:35835] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aSQ0EPtOzSUAQvWVjBeE-QAAAcc"]
[Mon Nov 24 18:31:46.482589 2025] [:error] [pid 48599:tid 48622] [client 172.177.3.143:35838] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aSQ0Epzvu6PDJiRKE3IvIAAAAZM"]
[Mon Nov 24 18:31:48.153051 2025] [:error] [pid 16593:tid 16603] [client 172.177.3.143:35813] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aSQ0FBVGznHBJI2LKpRJrgAAAog"]
[Mon Nov 24 18:31:51.003623 2025] [:error] [pid 16441:tid 16446] [client 172.177.3.143:35795] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsz.php"] [unique_id "aSQ0F4q_bc5MOa9HfllLpQAAAII"]
[Mon Nov 24 18:31:51.934757 2025] [:error] [pid 48601:tid 48674] [client 172.177.3.143:35791] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsz.php"] [unique_id "aSQ0F4MM4MaVTk74-AbCnwAAAhE"]
[Mon Nov 24 18:31:52.818171 2025] [:error] [pid 16516:tid 16529] [client 172.177.3.143:35660] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsz.php"] [unique_id "aSQ0GPqZbniwaNwL8XntaQAAAQo"]
[Mon Nov 24 18:31:54.225425 2025] [:error] [pid 16549:tid 16568] [client 172.177.3.143:35747] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsz.php"] [unique_id "aSQ0GqeWW19A99PUw_dE9wAAAVA"]
[Mon Nov 24 18:31:55.362922 2025] [:error] [pid 16441:tid 16464] [client 172.177.3.143:35713] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aSQ0G4q_bc5MOa9HfllLpwAAAJQ"]
[Mon Nov 24 18:31:56.656087 2025] [:error] [pid 49900:tid 49903] [client 172.177.3.143:35792] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aSQ0HDCyPLrvg06aorkdVAAAAAE"]
[Mon Nov 24 18:31:57.507207 2025] [:error] [pid 49900:tid 49916] [client 172.177.3.143:35787] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aSQ0HTCyPLrvg06aorkdVwAAAA4"]
[Mon Nov 24 18:31:58.443940 2025] [:error] [pid 16549:tid 16576] [client 172.177.3.143:35823] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aSQ0HqeWW19A99PUw_dE-QAAAVc"]
[Mon Nov 24 18:32:00.189639 2025] [:error] [pid 49900:tid 49920] [client 172.177.3.143:35803] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aSQ0IDCyPLrvg06aorkdXQAAABI"]
[Mon Nov 24 18:32:02.118123 2025] [:error] [pid 48601:tid 48671] [client 172.177.3.143:35732] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aSQ0IoMM4MaVTk74-AbC1gAAAg4"]
[Mon Nov 24 18:32:03.127461 2025] [:error] [pid 9630:tid 9638] [client 172.177.3.143:35824] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aSQ0IyrSgUgPGkizt2oEvgAAAEY"]
[Mon Nov 24 18:32:04.391806 2025] [:error] [pid 16516:tid 16528] [client 172.177.3.143:35834] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aSQ0JPqZbniwaNwL8XntbQAAAQk"]
[Mon Nov 24 18:32:05.730780 2025] [:error] [pid 16549:tid 16560] [client 172.177.3.143:35761] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aSQ0JaeWW19A99PUw_dE-gAAAUg"]
[Mon Nov 24 18:32:06.629951 2025] [:error] [pid 48688:tid 48702] [client 172.177.3.143:35738] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aSQ0Jhm2q1FkzLam7A2o-gAAAko"]
[Mon Nov 24 18:32:08.029762 2025] [:error] [pid 16549:tid 16552] [client 172.177.3.143:35739] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aSQ0KKeWW19A99PUw_dE_QAAAUA"]
[Mon Nov 24 18:32:09.219330 2025] [:error] [pid 48688:tid 48705] [client 172.177.3.143:35734] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aSQ0KRm2q1FkzLam7A2pAAAAAk0"]
[Mon Nov 24 18:32:10.605597 2025] [:error] [pid 48600:tid 48645] [client 172.177.3.143:35831] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aSQ0KvtOzSUAQvWVjBeE_AAAAc8"]
[Mon Nov 24 18:32:11.758174 2025] [:error] [pid 16516:tid 16527] [client 172.177.3.143:35837] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aSQ0K_qZbniwaNwL8XntbwAAAQg"]
[Mon Nov 24 18:32:13.465709 2025] [:error] [pid 48600:tid 48635] [client 172.177.3.143:35820] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aSQ0LftOzSUAQvWVjBeE_QAAAcU"]
[Mon Nov 24 18:32:14.401017 2025] [:error] [pid 49900:tid 49902] [client 172.177.3.143:35839] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aSQ0LjCyPLrvg06aorkdgAAAAAA"]
[Mon Nov 24 18:32:15.587642 2025] [:error] [pid 48601:tid 48669] [client 172.177.3.143:35807] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aSQ0L4MM4MaVTk74-AbDCQAAAgw"]
[Mon Nov 24 18:32:16.894369 2025] [:error] [pid 16441:tid 16447] [client 172.177.3.143:35715] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aSQ0MIq_bc5MOa9HfllL5QAAAIM"]
[Mon Nov 24 18:32:17.865206 2025] [:error] [pid 48600:tid 48649] [client 172.177.3.143:35788] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aSQ0MftOzSUAQvWVjBeE_gAAAdM"]
[Mon Nov 24 18:32:18.879058 2025] [:error] [pid 48601:tid 48676] [client 172.177.3.143:35754] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aSQ0MoMM4MaVTk74-AbDDgAAAhM"]
[Mon Nov 24 18:32:19.779257 2025] [:error] [pid 16549:tid 16554] [client 172.177.3.143:35806] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSQ0M6eWW19A99PUw_dFEgAAAUI"]
[Mon Nov 24 18:32:20.312392 2025] [:error] [pid 16593:tid 16606] [client 172.177.3.143:35729] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSQ0NBVGznHBJI2LKpRJxwAAAos"]
[Mon Nov 24 18:32:21.126678 2025] [:error] [pid 48688:tid 48702] [client 172.177.3.143:35777] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSQ0NRm2q1FkzLam7A2pDwAAAko"]
[Mon Nov 24 18:32:22.529889 2025] [:error] [pid 49900:tid 49909] [client 172.177.3.143:35723] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aSQ0NjCyPLrvg06aorkdhwAAAAc"]
[Mon Nov 24 18:32:23.571954 2025] [:error] [pid 48600:tid 48653] [client 172.177.3.143:35821] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aSQ0N_tOzSUAQvWVjBeFAAAAAdc"]
[Mon Nov 24 18:32:24.186336 2025] [:error] [pid 16441:tid 16455] [client 172.177.3.143:35833] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aSQ0OIq_bc5MOa9HfllL6QAAAIs"]
[Mon Nov 24 18:32:24.987029 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:35716] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aSQ0OIq_bc5MOa9HfllL6gAAAJU"]
[Mon Nov 24 18:32:25.531923 2025] [:error] [pid 48688:tid 48705] [client 172.177.3.143:35743] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aSQ0ORm2q1FkzLam7A2pEgAAAk0"]
[Mon Nov 24 18:32:33.902709 2025] [:error] [pid 48688:tid 48710] [client 172.177.3.143:35800] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh77.php"] [unique_id "aSQ0QRm2q1FkzLam7A2pLQAAAlI"]
[Mon Nov 24 18:32:35.291720 2025] [:error] [pid 48688:tid 48707] [client 172.177.3.143:35726] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh77.php"] [unique_id "aSQ0Qxm2q1FkzLam7A2pLgAAAk8"]
[Mon Nov 24 18:32:36.561158 2025] [:error] [pid 16549:tid 16557] [client 172.177.3.143:35797] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh77.php"] [unique_id "aSQ0RKeWW19A99PUw_dFHAAAAUU"]
[Mon Nov 24 18:32:37.872242 2025] [:error] [pid 16549:tid 16567] [client 172.177.3.143:35829] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh77.php"] [unique_id "aSQ0RaeWW19A99PUw_dFHgAAAU8"]
[Mon Nov 24 18:32:39.375852 2025] [:error] [pid 16441:tid 16444] [client 172.177.3.143:35810] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSQ0R4q_bc5MOa9HfllL8AAAAIA"]
[Mon Nov 24 18:32:39.953723 2025] [:error] [pid 48688:tid 48712] [client 172.177.3.143:35753] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSQ0Rxm2q1FkzLam7A2pMAAAAlQ"]
[Mon Nov 24 18:32:41.194070 2025] [:error] [pid 16441:tid 16453] [client 172.177.3.143:35719] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSQ0SYq_bc5MOa9HfllL8QAAAIk"]
[Mon Nov 24 18:32:42.539437 2025] [:error] [pid 16516:tid 16527] [client 172.177.3.143:35808] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSQ0SvqZbniwaNwL8XntegAAAQg"]
[Mon Nov 24 18:32:43.246685 2025] [:error] [pid 9630:tid 9638] [client 172.177.3.143:35798] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aSQ0SyrSgUgPGkizt2oE1QAAAEY"]
[Mon Nov 24 18:32:44.025646 2025] [:error] [pid 9630:tid 9650] [client 172.177.3.143:35751] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aSQ0TCrSgUgPGkizt2oE1gAAAFI"]
[Mon Nov 24 18:32:44.884412 2025] [:error] [pid 49900:tid 49917] [client 172.177.3.143:35733] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aSQ0TDCyPLrvg06aorkdlAAAAA8"]
[Mon Nov 24 18:32:46.245996 2025] [:error] [pid 16549:tid 16555] [client 172.177.3.143:35767] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aSQ0TqeWW19A99PUw_dFHwAAAUM"]
[Mon Nov 24 18:32:47.498091 2025] [:error] [pid 9630:tid 9649] [client 172.177.3.143:35670] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aSQ0TyrSgUgPGkizt2oE2wAAAFE"]
[Mon Nov 24 18:32:48.146413 2025] [:error] [pid 49900:tid 49913] [client 172.177.3.143:35750] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aSQ0UDCyPLrvg06aorkdlgAAAAs"]
[Mon Nov 24 18:32:48.910088 2025] [:error] [pid 49900:tid 49921] [client 172.177.3.143:35809] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aSQ0UDCyPLrvg06aorkdmQAAABM"]
[Mon Nov 24 18:32:49.718860 2025] [:error] [pid 16593:tid 16614] [client 172.177.3.143:35832] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aSQ0URVGznHBJI2LKpRJ0AAAApM"]
[Mon Nov 24 18:32:51.130235 2025] [:error] [pid 16441:tid 16462] [client 172.177.3.143:35804] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aSQ0U4q_bc5MOa9HfllL9QAAAJI"]
[Mon Nov 24 18:32:52.287634 2025] [:error] [pid 48688:tid 48693] [client 172.177.3.143:35769] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aSQ0VBm2q1FkzLam7A2pMgAAAkE"]
[Mon Nov 24 18:32:53.824032 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:35749] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aSQ0VYq_bc5MOa9HfllL9wAAAJU"]
[Mon Nov 24 18:32:54.715658 2025] [:error] [pid 49900:tid 49904] [client 172.177.3.143:35812] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aSQ0VjCyPLrvg06aorkdqAAAAAI"]
[Mon Nov 24 18:32:55.369888 2025] [:error] [pid 9630:tid 9653] [client 172.177.3.143:35774] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aSQ0VyrSgUgPGkizt2oE4QAAAFU"]
[Mon Nov 24 18:32:56.523093 2025] [:error] [pid 16441:tid 16447] [client 172.177.3.143:35718] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aSQ0WIq_bc5MOa9HfllMAwAAAIM"]
[Mon Nov 24 18:32:57.453303 2025] [:error] [pid 16441:tid 16450] [client 172.177.3.143:35763] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aSQ0WYq_bc5MOa9HfllMCgAAAIY"]
[Mon Nov 24 18:32:58.457411 2025] [:error] [pid 9630:tid 9636] [client 172.177.3.143:35714] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aSQ0WirSgUgPGkizt2oE5gAAAEQ"]
[Mon Nov 24 18:32:59.623929 2025] [:error] [pid 16549:tid 16564] [client 172.177.3.143:35768] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hgm.php"] [unique_id "aSQ0W6eWW19A99PUw_dFIQAAAUw"]
[Mon Nov 24 18:33:00.690328 2025] [:error] [pid 16593:tid 16601] [client 172.177.3.143:35676] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hgm.php"] [unique_id "aSQ0XBVGznHBJI2LKpRJ4wAAAoY"]
[Mon Nov 24 18:33:01.234159 2025] [:error] [pid 16549:tid 16573] [client 172.177.3.143:35650] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hgm.php"] [unique_id "aSQ0XaeWW19A99PUw_dFIgAAAVQ"]
[Mon Nov 24 18:33:01.895524 2025] [:error] [pid 48600:tid 48654] [client 172.177.3.143:35826] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hgm.php"] [unique_id "aSQ0XftOzSUAQvWVjBeFEQAAAdg"]
[Mon Nov 24 18:33:03.761868 2025] [:error] [pid 9630:tid 9649] [client 172.177.3.143:35651] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nax.php"] [unique_id "aSQ0XyrSgUgPGkizt2oE6QAAAFE"]
[Mon Nov 24 18:33:04.740941 2025] [:error] [pid 48600:tid 48642] [client 172.177.3.143:35799] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nax.php"] [unique_id "aSQ0YPtOzSUAQvWVjBeFEgAAAcw"]
[Mon Nov 24 18:33:05.853972 2025] [:error] [pid 9630:tid 9633] [client 172.177.3.143:35770] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nax.php"] [unique_id "aSQ0YSrSgUgPGkizt2oE6gAAAEE"]
[Mon Nov 24 18:33:06.793835 2025] [:error] [pid 48600:tid 48647] [client 172.177.3.143:35720] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nax.php"] [unique_id "aSQ0YvtOzSUAQvWVjBeFEwAAAdE"]
[Mon Nov 24 18:33:07.618399 2025] [:error] [pid 48600:tid 48634] [client 172.177.3.143:35725] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xrp.php"] [unique_id "aSQ0Y_tOzSUAQvWVjBeFFgAAAcQ"]
[Mon Nov 24 18:33:08.645280 2025] [:error] [pid 48601:tid 48661] [client 172.177.3.143:35772] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xrp.php"] [unique_id "aSQ0ZIMM4MaVTk74-AbDMwAAAgQ"]
[Mon Nov 24 18:33:09.446309 2025] [:error] [pid 48601:tid 48678] [client 172.177.3.143:35827] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xrp.php"] [unique_id "aSQ0ZYMM4MaVTk74-AbDNAAAAhU"]
[Mon Nov 24 18:33:10.676816 2025] [:error] [pid 48688:tid 48702] [client 172.177.3.143:35701] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xrp.php"] [unique_id "aSQ0Zhm2q1FkzLam7A2pWwAAAko"]
[Mon Nov 24 18:33:11.425121 2025] [:error] [pid 48599:tid 48614] [client 172.177.3.143:35757] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "aSQ0Z5zvu6PDJiRKE3IvOQAAAYs"]
[Mon Nov 24 18:33:12.738172 2025] [:error] [pid 16441:tid 16461] [client 172.177.3.143:35801] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "aSQ0aIq_bc5MOa9HfllMJgAAAJE"]
[Mon Nov 24 18:33:13.599222 2025] [:error] [pid 9630:tid 9655] [client 172.177.3.143:35663] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "aSQ0aSrSgUgPGkizt2oE-AAAAFc"]
[Mon Nov 24 18:33:14.564929 2025] [:error] [pid 48599:tid 48622] [client 172.177.3.143:35649] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "aSQ0apzvu6PDJiRKE3IvOgAAAZM"]
[Mon Nov 24 18:33:15.371160 2025] [:error] [pid 16549:tid 16553] [client 172.177.3.143:35784] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc.php"] [unique_id "aSQ0a6eWW19A99PUw_dFKAAAAUE"]
[Mon Nov 24 18:33:16.123220 2025] [:error] [pid 16549:tid 16576] [client 172.177.3.143:35766] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc.php"] [unique_id "aSQ0bKeWW19A99PUw_dFKQAAAVc"]
[Mon Nov 24 18:33:17.338948 2025] [:error] [pid 48599:tid 48624] [client 172.177.3.143:35836] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc.php"] [unique_id "aSQ0bZzvu6PDJiRKE3IvQAAAAZU"]
[Mon Nov 24 18:33:18.455318 2025] [:error] [pid 48599:tid 48616] [client 172.177.3.143:35657] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc.php"] [unique_id "aSQ0bpzvu6PDJiRKE3IvQQAAAY0"]
[Mon Nov 24 18:33:19.575265 2025] [:error] [pid 16516:tid 16538] [client 172.177.3.143:35796] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aSQ0b_qZbniwaNwL8XntgwAAARM"]
[Mon Nov 24 18:33:20.401820 2025] [:error] [pid 48688:tid 48694] [client 172.177.3.143:35699] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aSQ0cBm2q1FkzLam7A2pXwAAAkI"]
[Mon Nov 24 18:33:21.366523 2025] [:error] [pid 48688:tid 48696] [client 172.177.3.143:35656] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aSQ0cRm2q1FkzLam7A2pYQAAAkQ"]
[Mon Nov 24 18:33:22.111657 2025] [:error] [pid 49900:tid 49926] [client 172.177.3.143:35776] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aSQ0cjCyPLrvg06aorkdyQAAABg"]
[Mon Nov 24 18:33:23.262903 2025] [:error] [pid 9630:tid 9639] [client 172.177.3.143:35790] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aSQ0cyrSgUgPGkizt2oE_gAAAEc"]
[Mon Nov 24 18:33:24.095584 2025] [:error] [pid 16441:tid 16451] [client 172.177.3.143:35805] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aSQ0dIq_bc5MOa9HfllMLAAAAIc"]
[Mon Nov 24 18:33:25.185540 2025] [:error] [pid 48599:tid 48610] [client 172.177.3.143:35679] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aSQ0dZzvu6PDJiRKE3IvRAAAAYc"]
[Mon Nov 24 18:33:26.178921 2025] [:error] [pid 48600:tid 48643] [client 172.177.3.143:35740] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aSQ0dvtOzSUAQvWVjBeFHQAAAc0"]
[Mon Nov 24 18:33:27.194764 2025] [:error] [pid 16441:tid 16460] [client 172.177.3.143:35778] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aSQ0d4q_bc5MOa9HfllMMAAAAJA"]
[Mon Nov 24 18:33:27.822030 2025] [:error] [pid 48600:tid 48640] [client 172.177.3.143:35744] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aSQ0d_tOzSUAQvWVjBeFHgAAAco"]
[Mon Nov 24 18:33:28.383749 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:35584] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aSQ0eIq_bc5MOa9HfllMNQAAAJU"]
[Mon Nov 24 18:33:29.316569 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:35601] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aSQ0eYq_bc5MOa9HfllMNwAAAIw"]
[Mon Nov 24 18:33:30.833062 2025] [:error] [pid 49900:tid 49914] [client 172.177.3.143:35814] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sow.php"] [unique_id "aSQ0ejCyPLrvg06aorkd0wAAAAw"]
[Mon Nov 24 18:33:32.363266 2025] [:error] [pid 16516:tid 16536] [client 172.177.3.143:35661] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sow.php"] [unique_id "aSQ0fPqZbniwaNwL8XntiQAAARE"]
[Mon Nov 24 18:33:32.886025 2025] [:error] [pid 16441:tid 16460] [client 172.177.3.143:35666] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sow.php"] [unique_id "aSQ0fIq_bc5MOa9HfllMOgAAAJA"]
[Mon Nov 24 18:33:41.828481 2025] [:error] [pid 9630:tid 9646] [client 172.177.3.143:35655] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aSQ0hSrSgUgPGkizt2oFDQAAAE4"]
[Mon Nov 24 18:33:42.865340 2025] [:error] [pid 16516:tid 16526] [client 172.177.3.143:35802] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aSQ0hvqZbniwaNwL8XntmwAAAQc"]
[Mon Nov 24 18:33:43.773538 2025] [:error] [pid 16516:tid 16527] [client 172.177.3.143:35737] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aSQ0h_qZbniwaNwL8XntnAAAAQg"]
[Mon Nov 24 18:33:44.666332 2025] [:error] [pid 48600:tid 48650] [client 172.177.3.143:35830] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aSQ0iPtOzSUAQvWVjBeFJQAAAdQ"]
[Mon Nov 24 18:33:45.657934 2025] [:error] [pid 48599:tid 48614] [client 172.177.3.143:35654] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aSQ0iZzvu6PDJiRKE3IvRQAAAYs"]
[Mon Nov 24 18:33:46.696936 2025] [:error] [pid 48599:tid 48622] [client 172.177.3.143:35681] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aSQ0ipzvu6PDJiRKE3IvRwAAAZM"]
[Mon Nov 24 18:33:47.419915 2025] [:error] [pid 16441:tid 16460] [client 172.177.3.143:35682] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aSQ0i4q_bc5MOa9HfllMQgAAAJA"]
[Mon Nov 24 18:33:48.170288 2025] [:error] [pid 9630:tid 9637] [client 172.177.3.143:35828] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aSQ0jCrSgUgPGkizt2oFEAAAAEU"]
[Mon Nov 24 18:33:49.081912 2025] [:error] [pid 9630:tid 9653] [client 172.177.3.143:35702] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aSQ0jSrSgUgPGkizt2oFEQAAAFU"]
[Mon Nov 24 18:33:49.905746 2025] [:error] [pid 9630:tid 9634] [client 172.177.3.143:35588] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aSQ0jSrSgUgPGkizt2oFEgAAAEI"]
[Mon Nov 24 18:33:50.398268 2025] [:error] [pid 48688:tid 48705] [client 172.177.3.143:35717] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aSQ0jhm2q1FkzLam7A2pZwAAAk0"]
[Mon Nov 24 18:33:50.964501 2025] [:error] [pid 9630:tid 9638] [client 172.177.3.143:35773] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aSQ0jirSgUgPGkizt2oFEwAAAEY"]
[Mon Nov 24 18:33:51.525751 2025] [:error] [pid 16593:tid 16614] [client 172.177.3.143:35722] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aSQ0jxVGznHBJI2LKpRJ8gAAApM"]
[Mon Nov 24 18:33:52.409936 2025] [:error] [pid 48688:tid 48702] [client 172.177.3.143:35730] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aSQ0kBm2q1FkzLam7A2paAAAAko"]
[Mon Nov 24 18:33:53.162887 2025] [:error] [pid 16593:tid 16609] [client 172.177.3.143:35593] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aSQ0kRVGznHBJI2LKpRJ9AAAAo4"]
[Mon Nov 24 18:33:54.173420 2025] [:error] [pid 48599:tid 48627] [client 172.177.3.143:35752] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aSQ0kpzvu6PDJiRKE3IvSAAAAZg"]
[Mon Nov 24 18:33:54.964916 2025] [:error] [pid 16441:tid 16445] [client 172.177.3.143:35786] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aSQ0koq_bc5MOa9HfllMRQAAAIE"]
[Mon Nov 24 18:33:56.010708 2025] [:error] [pid 16441:tid 16463] [client 172.177.3.143:35662] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aSQ0lIq_bc5MOa9HfllMRwAAAJM"]
[Mon Nov 24 18:33:57.151401 2025] [:error] [pid 48600:tid 48649] [client 172.177.3.143:35689] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aSQ0lftOzSUAQvWVjBeFKQAAAdM"]
[Mon Nov 24 18:33:58.303624 2025] [:error] [pid 49900:tid 49926] [client 172.177.3.143:35597] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aSQ0ljCyPLrvg06aorkd7AAAABg"]
[Mon Nov 24 18:33:59.110808 2025] [:error] [pid 49900:tid 49912] [client 172.177.3.143:35731] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1254.php"] [unique_id "aSQ0lzCyPLrvg06aorkd7QAAAAo"]
[Mon Nov 24 18:33:59.782950 2025] [:error] [pid 16593:tid 16610] [client 172.177.3.143:35665] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1254.php"] [unique_id "aSQ0lxVGznHBJI2LKpRJ9wAAAo8"]
[Mon Nov 24 18:34:00.368615 2025] [:error] [pid 9630:tid 9648] [client 172.177.3.143:35586] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1254.php"] [unique_id "aSQ0mCrSgUgPGkizt2oFGwAAAFA"]
[Mon Nov 24 18:34:02.137741 2025] [:error] [pid 16593:tid 16597] [client 172.177.3.143:35700] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1254.php"] [unique_id "aSQ0mhVGznHBJI2LKpRJ-AAAAoI"]
[Mon Nov 24 18:34:03.168736 2025] [:error] [pid 48600:tid 48643] [client 172.177.3.143:35610] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aSQ0m_tOzSUAQvWVjBeFLAAAAc0"]
[Mon Nov 24 18:34:04.243489 2025] [:error] [pid 48599:tid 48616] [client 172.177.3.143:35678] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aSQ0nJzvu6PDJiRKE3IvTAAAAY0"]
[Mon Nov 24 18:34:04.939091 2025] [:error] [pid 48599:tid 48604] [client 172.177.3.143:35758] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aSQ0nJzvu6PDJiRKE3IvTQAAAYE"]
[Mon Nov 24 18:34:05.730479 2025] [:error] [pid 48688:tid 48700] [client 172.177.3.143:35611] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aSQ0nRm2q1FkzLam7A2pagAAAkg"]
[Mon Nov 24 18:34:06.724648 2025] [:error] [pid 16593:tid 16612] [client 172.177.3.143:35648] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jju.php"] [unique_id "aSQ0nhVGznHBJI2LKpRJ-QAAApE"]
[Mon Nov 24 18:34:07.405700 2025] [:error] [pid 16593:tid 16595] [client 172.177.3.143:35819] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jju.php"] [unique_id "aSQ0nxVGznHBJI2LKpRJ-wAAAoA"]
[Mon Nov 24 18:34:08.440564 2025] [:error] [pid 16516:tid 16535] [client 172.177.3.143:35673] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jju.php"] [unique_id "aSQ0oPqZbniwaNwL8XntngAAARA"]
[Mon Nov 24 18:34:09.130950 2025] [:error] [pid 16441:tid 16461] [client 172.177.3.143:35684] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jju.php"] [unique_id "aSQ0oYq_bc5MOa9HfllMVwAAAJE"]
[Mon Nov 24 18:34:10.072036 2025] [:error] [pid 48599:tid 48617] [client 172.177.3.143:35709] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcxb.php"] [unique_id "aSQ0opzvu6PDJiRKE3IvTwAAAY4"]
[Mon Nov 24 18:34:11.218750 2025] [:error] [pid 16516:tid 16540] [client 172.177.3.143:35667] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcxb.php"] [unique_id "aSQ0o_qZbniwaNwL8XntnwAAARU"]
[Mon Nov 24 18:34:12.502393 2025] [:error] [pid 16549:tid 16565] [client 172.177.3.143:35616] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcxb.php"] [unique_id "aSQ0pKeWW19A99PUw_dFPAAAAU0"]
[Mon Nov 24 18:34:13.040885 2025] [:error] [pid 16593:tid 16599] [client 172.177.3.143:35745] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcxb.php"] [unique_id "aSQ0pRVGznHBJI2LKpRJ_wAAAoQ"]
[Mon Nov 24 18:34:13.888479 2025] [:error] [pid 16516:tid 16524] [client 172.177.3.143:35760] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moo.php"] [unique_id "aSQ0pfqZbniwaNwL8XntoQAAAQU"]
[Mon Nov 24 18:34:14.903279 2025] [:error] [pid 9630:tid 9637] [client 172.177.3.143:35748] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moo.php"] [unique_id "aSQ0pirSgUgPGkizt2oFIAAAAEU"]
[Mon Nov 24 18:34:15.738260 2025] [:error] [pid 16516:tid 16525] [client 172.177.3.143:35591] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moo.php"] [unique_id "aSQ0p_qZbniwaNwL8XntogAAAQY"]
[Mon Nov 24 18:34:16.601088 2025] [:error] [pid 16516:tid 16534] [client 172.177.3.143:35706] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moo.php"] [unique_id "aSQ0qPqZbniwaNwL8XntowAAAQ8"]
[Mon Nov 24 18:34:17.167867 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:35711] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aSQ0qYq_bc5MOa9HfllMWQAAAIw"]
[Mon Nov 24 18:34:18.019087 2025] [:error] [pid 48688:tid 48695] [client 172.177.3.143:35710] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aSQ0qhm2q1FkzLam7A2pcAAAAkM"]
[Mon Nov 24 18:34:18.813811 2025] [:error] [pid 48599:tid 48609] [client 172.177.3.143:35735] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aSQ0qpzvu6PDJiRKE3IvUQAAAYY"]
[Mon Nov 24 18:34:19.762281 2025] [:error] [pid 48688:tid 48693] [client 172.177.3.143:35585] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aSQ0qxm2q1FkzLam7A2pcQAAAkE"]
[Mon Nov 24 18:34:20.587781 2025] [:error] [pid 16441:tid 16466] [client 172.177.3.143:35668] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aSQ0rIq_bc5MOa9HfllMWwAAAJY"]
[Mon Nov 24 18:34:21.767832 2025] [:error] [pid 49900:tid 49924] [client 172.177.3.143:35563] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aSQ0rTCyPLrvg06aorkd-gAAABY"]
[Mon Nov 24 18:34:22.507147 2025] [:error] [pid 49900:tid 49906] [client 172.177.3.143:35762] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aSQ0rjCyPLrvg06aorkd_QAAAAQ"]
[Mon Nov 24 18:34:23.730408 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:35686] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aSQ0r4q_bc5MOa9HfllMZgAAAJU"]
[Mon Nov 24 18:34:24.707078 2025] [:error] [pid 48688:tid 48705] [client 172.177.3.143:35653] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aSQ0sBm2q1FkzLam7A2pdgAAAk0"]
[Mon Nov 24 18:34:25.651052 2025] [:error] [pid 16441:tid 16466] [client 172.177.3.143:35631] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aSQ0sYq_bc5MOa9HfllMgQAAAJY"]
[Mon Nov 24 18:34:26.635605 2025] [:error] [pid 49900:tid 49910] [client 172.177.3.143:35602] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aSQ0sjCyPLrvg06aorkeDAAAAAg"]
[Mon Nov 24 18:34:27.514347 2025] [:error] [pid 16593:tid 16605] [client 172.177.3.143:35815] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aSQ0sxVGznHBJI2LKpRKBwAAAoo"]
[Mon Nov 24 18:34:28.152320 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:35703] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aSQ0tIq_bc5MOa9HfllMiAAAAJg"]
[Mon Nov 24 18:34:28.909446 2025] [:error] [pid 16593:tid 16597] [client 172.177.3.143:35691] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aSQ0tBVGznHBJI2LKpRKCQAAAoI"]
[Mon Nov 24 18:34:29.867407 2025] [:error] [pid 16441:tid 16446] [client 172.177.3.143:35598] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aSQ0tYq_bc5MOa9HfllMiwAAAII"]
[Mon Nov 24 18:34:30.920355 2025] [:error] [pid 16441:tid 16449] [client 172.177.3.143:35728] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aSQ0toq_bc5MOa9HfllMjQAAAIU"]
[Mon Nov 24 18:34:31.621993 2025] [:error] [pid 9630:tid 9636] [client 172.177.3.143:35705] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testas.php"] [unique_id "aSQ0tyrSgUgPGkizt2oFNgAAAEQ"]
[Mon Nov 24 18:34:32.274018 2025] [:error] [pid 16549:tid 16565] [client 172.177.3.143:35668] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testas.php"] [unique_id "aSQ0uKeWW19A99PUw_dFUAAAAU0"]
[Mon Nov 24 18:34:32.791390 2025] [:error] [pid 48600:tid 48650] [client 172.177.3.143:35652] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testas.php"] [unique_id "aSQ0uPtOzSUAQvWVjBeFMQAAAdQ"]
[Mon Nov 24 18:34:33.317620 2025] [:error] [pid 16441:tid 16444] [client 172.177.3.143:35779] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testas.php"] [unique_id "aSQ0uYq_bc5MOa9HfllMjwAAAIA"]
[Mon Nov 24 18:34:34.274843 2025] [:error] [pid 16441:tid 16460] [client 172.177.3.143:35683] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tech5pr.php"] [unique_id "aSQ0uoq_bc5MOa9HfllMkAAAAJA"]
[Mon Nov 24 18:34:35.274028 2025] [:error] [pid 16593:tid 16602] [client 172.177.3.143:35608] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tech5pr.php"] [unique_id "aSQ0uxVGznHBJI2LKpRKDwAAAoc"]
[Mon Nov 24 18:34:36.053309 2025] [:error] [pid 48688:tid 48707] [client 172.177.3.143:35696] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tech5pr.php"] [unique_id "aSQ0vBm2q1FkzLam7A2peQAAAk8"]
[Mon Nov 24 18:34:37.087007 2025] [:error] [pid 48600:tid 48636] [client 172.177.3.143:35658] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tech5pr.php"] [unique_id "aSQ0vftOzSUAQvWVjBeFNAAAAcY"]
[Mon Nov 24 18:34:37.740027 2025] [:error] [pid 48688:tid 48694] [client 172.177.3.143:35759] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aSQ0vRm2q1FkzLam7A2pewAAAkI"]
[Mon Nov 24 18:34:38.594169 2025] [:error] [pid 9630:tid 9648] [client 172.177.3.143:35825] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aSQ0virSgUgPGkizt2oFPAAAAFA"]
[Mon Nov 24 18:34:40.467982 2025] [:error] [pid 9630:tid 9646] [client 172.177.3.143:35664] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aSQ0wCrSgUgPGkizt2oFPQAAAE4"]
[Mon Nov 24 18:34:40.926450 2025] [:error] [pid 48688:tid 48696] [client 172.177.3.143:35603] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aSQ0wBm2q1FkzLam7A2pfgAAAkQ"]
[Mon Nov 24 18:34:48.734067 2025] [:error] [pid 16593:tid 16596] [client 172.177.3.143:35659] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aSQ0yBVGznHBJI2LKpRKKAAAAoE"]
[Mon Nov 24 18:34:49.730836 2025] [:error] [pid 49900:tid 49919] [client 172.177.3.143:35687] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aSQ0yTCyPLrvg06aorkeKwAAABE"]
[Mon Nov 24 18:34:50.839681 2025] [:error] [pid 16441:tid 16444] [client 172.177.3.143:35637] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aSQ0yoq_bc5MOa9HfllMlwAAAIA"]
[Mon Nov 24 18:34:51.450222 2025] [:error] [pid 48688:tid 48692] [client 172.177.3.143:35708] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aSQ0yxm2q1FkzLam7A2pggAAAkA"]
[Mon Nov 24 18:34:52.605372 2025] [:error] [pid 16441:tid 16447] [client 172.177.3.143:35551] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h8h9.php"] [unique_id "aSQ0zIq_bc5MOa9HfllMmQAAAIM"]
[Mon Nov 24 18:34:53.420136 2025] [:error] [pid 16441:tid 16445] [client 172.177.3.143:35640] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h8h9.php"] [unique_id "aSQ0zYq_bc5MOa9HfllMmwAAAIE"]
[Mon Nov 24 18:34:54.297705 2025] [:error] [pid 16549:tid 16576] [client 172.177.3.143:35671] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h8h9.php"] [unique_id "aSQ0zqeWW19A99PUw_dFVwAAAVc"]
[Mon Nov 24 18:34:55.377047 2025] [:error] [pid 48601:tid 48658] [client 172.177.3.143:35688] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h8h9.php"] [unique_id "aSQ0z4MM4MaVTk74-AbDXQAAAgE"]
[Mon Nov 24 18:34:56.026265 2025] [:error] [pid 48601:tid 48667] [client 172.177.3.143:35746] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cliner.php"] [unique_id "aSQ00IMM4MaVTk74-AbDXgAAAgo"]
[Mon Nov 24 18:34:56.715336 2025] [:error] [pid 9630:tid 9654] [client 172.177.3.143:35669] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cliner.php"] [unique_id "aSQ00CrSgUgPGkizt2oFRQAAAFY"]
[Mon Nov 24 18:34:57.941970 2025] [:error] [pid 9630:tid 9640] [client 172.177.3.143:35618] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cliner.php"] [unique_id "aSQ00SrSgUgPGkizt2oFRwAAAEg"]
[Mon Nov 24 18:34:58.876465 2025] [:error] [pid 16593:tid 16610] [client 172.177.3.143:35587] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cliner.php"] [unique_id "aSQ00hVGznHBJI2LKpRKLQAAAo8"]
[Mon Nov 24 18:34:59.907138 2025] [:error] [pid 16441:tid 16452] [client 172.177.3.143:35817] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/racs3.php"] [unique_id "aSQ004q_bc5MOa9HfllMoAAAAIg"]
[Mon Nov 24 18:35:00.754002 2025] [:error] [pid 16516:tid 16543] [client 172.177.3.143:35727] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/racs3.php"] [unique_id "aSQ01PqZbniwaNwL8XntswAAARg"]
[Mon Nov 24 18:35:01.779964 2025] [:error] [pid 48599:tid 48614] [client 172.177.3.143:35693] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/racs3.php"] [unique_id "aSQ01Zzvu6PDJiRKE3IvXgAAAYs"]
[Mon Nov 24 18:35:02.640983 2025] [:error] [pid 16441:tid 16449] [client 172.177.3.143:35639] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/racs3.php"] [unique_id "aSQ01oq_bc5MOa9HfllMoQAAAIU"]
[Mon Nov 24 18:35:03.267224 2025] [:error] [pid 16441:tid 16445] [client 172.177.3.143:35582] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2index.php"] [unique_id "aSQ014q_bc5MOa9HfllMogAAAIE"]
[Mon Nov 24 18:35:04.624935 2025] [:error] [pid 48600:tid 48643] [client 172.177.3.143:35634] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2index.php"] [unique_id "aSQ02PtOzSUAQvWVjBeFOAAAAc0"]
[Mon Nov 24 18:35:06.230344 2025] [:error] [pid 16516:tid 16529] [client 172.177.3.143:35641] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2index.php"] [unique_id "aSQ02vqZbniwaNwL8XnttQAAAQo"]
[Mon Nov 24 18:35:07.672510 2025] [:error] [pid 48599:tid 48627] [client 172.177.3.143:35643] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2index.php"] [unique_id "aSQ025zvu6PDJiRKE3IvYAAAAZg"]
[Mon Nov 24 18:35:08.999868 2025] [:error] [pid 9630:tid 9641] [client 172.177.3.143:35742] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aSQ03CrSgUgPGkizt2oFWQAAAEk"]
[Mon Nov 24 18:35:09.951356 2025] [:error] [pid 9630:tid 9633] [client 172.177.3.143:35604] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aSQ03SrSgUgPGkizt2oFXwAAAEE"]
[Mon Nov 24 18:35:10.849119 2025] [:error] [pid 9630:tid 9651] [client 172.177.3.143:35765] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aSQ03irSgUgPGkizt2oFYwAAAFM"]
[Mon Nov 24 18:35:12.086632 2025] [:error] [pid 9630:tid 9647] [client 172.177.3.143:35674] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aSQ04CrSgUgPGkizt2oFagAAAE8"]
[Mon Nov 24 18:35:13.271989 2025] [:error] [pid 48688:tid 48698] [client 172.177.3.143:35644] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mtvcrew.php"] [unique_id "aSQ04Rm2q1FkzLam7A2pjQAAAkY"]
[Mon Nov 24 18:35:13.905712 2025] [:error] [pid 48601:tid 48670] [client 172.177.3.143:35647] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mtvcrew.php"] [unique_id "aSQ04YMM4MaVTk74-AbDbQAAAg0"]
[Mon Nov 24 18:35:14.628918 2025] [:error] [pid 48688:tid 48715] [client 172.177.3.143:35748] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mtvcrew.php"] [unique_id "aSQ04hm2q1FkzLam7A2pjwAAAlc"]
[Mon Nov 24 18:35:15.275113 2025] [:error] [pid 48599:tid 48611] [client 172.177.3.143:35599] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mtvcrew.php"] [unique_id "aSQ045zvu6PDJiRKE3IvYgAAAYg"]
[Mon Nov 24 18:35:15.973362 2025] [:error] [pid 48688:tid 48706] [client 172.177.3.143:35764] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agdew.php"] [unique_id "aSQ04xm2q1FkzLam7A2pkQAAAk4"]
[Mon Nov 24 18:35:16.811778 2025] [:error] [pid 16441:tid 16463] [client 172.177.3.143:35694] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agdew.php"] [unique_id "aSQ05Iq_bc5MOa9HfllMzQAAAJM"]
[Mon Nov 24 18:35:17.444362 2025] [:error] [pid 16441:tid 16457] [client 172.177.3.143:35628] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agdew.php"] [unique_id "aSQ05Yq_bc5MOa9HfllM0AAAAI0"]
[Mon Nov 24 18:35:18.209320 2025] [:error] [pid 48688:tid 48694] [client 172.177.3.143:35707] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agdew.php"] [unique_id "aSQ05hm2q1FkzLam7A2pmwAAAkI"]
[Mon Nov 24 18:35:19.034433 2025] [:error] [pid 48599:tid 48626] [client 172.177.3.143:35756] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Eva.php"] [unique_id "aSQ055zvu6PDJiRKE3IvbQAAAZc"]
[Mon Nov 24 18:35:19.860231 2025] [:error] [pid 9630:tid 9646] [client 172.177.3.143:35692] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Eva.php"] [unique_id "aSQ05yrSgUgPGkizt2oFhQAAAE4"]
[Mon Nov 24 18:35:20.640505 2025] [:error] [pid 9630:tid 9637] [client 172.177.3.143:35697] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Eva.php"] [unique_id "aSQ06CrSgUgPGkizt2oFhwAAAEU"]
[Mon Nov 24 18:35:21.468794 2025] [:error] [pid 49900:tid 49916] [client 172.177.3.143:35626] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Eva.php"] [unique_id "aSQ06TCyPLrvg06aorkeTwAAAA4"]
[Mon Nov 24 18:35:22.243673 2025] [:error] [pid 48688:tid 48708] [client 172.177.3.143:35596] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aSQ06hm2q1FkzLam7A2powAAAlA"]
[Mon Nov 24 18:35:23.659719 2025] [:error] [pid 48600:tid 48637] [client 172.177.3.143:35553] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aSQ06_tOzSUAQvWVjBeFPAAAAcc"]
[Mon Nov 24 18:35:25.063665 2025] [:error] [pid 16593:tid 16607] [client 172.177.3.143:35771] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aSQ07RVGznHBJI2LKpRKSgAAAow"]
[Mon Nov 24 18:35:25.730041 2025] [:error] [pid 49900:tid 49912] [client 172.177.3.143:35529] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aSQ07TCyPLrvg06aorkeUwAAAAo"]
[Mon Nov 24 18:35:26.630010 2025] [:error] [pid 9630:tid 9638] [client 172.177.3.143:35630] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aSQ07irSgUgPGkizt2oFjgAAAEY"]
[Mon Nov 24 18:35:28.494936 2025] [:error] [pid 9630:tid 9636] [client 172.177.3.143:35632] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aSQ08CrSgUgPGkizt2oFjwAAAEQ"]
[Mon Nov 24 18:35:30.279698 2025] [:error] [pid 48601:tid 48666] [client 172.177.3.143:35605] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aSQ08oMM4MaVTk74-AbDcwAAAgk"]
[Mon Nov 24 18:35:31.512784 2025] [:error] [pid 9630:tid 9654] [client 172.177.3.143:35638] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aSQ08yrSgUgPGkizt2oFlgAAAFY"]
[Mon Nov 24 18:35:32.165225 2025] [:error] [pid 9630:tid 9639] [client 172.177.3.143:35589] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/giclass.php"] [unique_id "aSQ09CrSgUgPGkizt2oFmQAAAEc"]
[Mon Nov 24 18:35:32.904724 2025] [:error] [pid 9630:tid 9648] [client 172.177.3.143:35633] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/giclass.php"] [unique_id "aSQ09CrSgUgPGkizt2oFmgAAAFA"]
[Mon Nov 24 18:35:33.756620 2025] [:error] [pid 9630:tid 9647] [client 172.177.3.143:35755] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/giclass.php"] [unique_id "aSQ09SrSgUgPGkizt2oFnAAAAE8"]
[Mon Nov 24 18:35:34.804680 2025] [:error] [pid 48601:tid 48662] [client 172.177.3.143:35677] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/giclass.php"] [unique_id "aSQ09oMM4MaVTk74-AbDdAAAAgU"]
[Mon Nov 24 18:35:35.768867 2025] [:error] [pid 16516:tid 16519] [client 172.177.3.143:35794] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vip.php"] [unique_id "aSQ09_qZbniwaNwL8XntwwAAAQA"]
[Mon Nov 24 18:35:37.158824 2025] [:error] [pid 16441:tid 16463] [client 172.177.3.143:35540] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vip.php"] [unique_id "aSQ0-Yq_bc5MOa9HfllNAwAAAJM"]
[Mon Nov 24 18:35:38.383117 2025] [:error] [pid 16441:tid 16461] [client 172.177.3.143:35531] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vip.php"] [unique_id "aSQ0-oq_bc5MOa9HfllNBAAAAJE"]
[Mon Nov 24 18:35:40.101945 2025] [:error] [pid 16441:tid 16457] [client 172.177.3.143:35811] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vip.php"] [unique_id "aSQ0_Iq_bc5MOa9HfllNBwAAAI0"]
[Mon Nov 24 18:35:41.598133 2025] [:error] [pid 16593:tid 16616] [client 172.177.3.143:35555] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aSQ0_RVGznHBJI2LKpRKUAAAApU"]
[Mon Nov 24 18:35:43.587875 2025] [:error] [pid 48600:tid 48649] [client 172.177.3.143:35522] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aSQ0__tOzSUAQvWVjBeFRwAAAdM"]
[Mon Nov 24 18:35:45.189810 2025] [:error] [pid 49900:tid 49906] [client 172.177.3.143:35695] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aSQ1ATCyPLrvg06aorkeaQAAAAQ"]
[Mon Nov 24 18:35:46.776248 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:35624] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aSQ1Aoq_bc5MOa9HfllNCQAAAIw"]
[Mon Nov 24 18:35:47.546803 2025] [:error] [pid 16441:tid 16453] [client 172.177.3.143:35530] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xm.php"] [unique_id "aSQ1A4q_bc5MOa9HfllNCwAAAIk"]
[Mon Nov 24 18:35:58.235784 2025] [:error] [pid 16549:tid 16561] [client 172.177.3.143:35675] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aSQ1DqeWW19A99PUw_dFngAAAUk"]
[Mon Nov 24 18:35:59.250751 2025] [:error] [pid 48601:tid 48679] [client 172.177.3.143:35560] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aSQ1D4MM4MaVTk74-AbDiAAAAhY"]
[Mon Nov 24 18:35:59.874302 2025] [:error] [pid 16593:tid 16596] [client 172.177.3.143:35645] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aSQ1DxVGznHBJI2LKpRKVQAAAoE"]
[Mon Nov 24 18:36:00.513386 2025] [:error] [pid 48601:tid 48668] [client 172.177.3.143:35590] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aSQ1EIMM4MaVTk74-AbDiQAAAgs"]
[Mon Nov 24 18:36:01.434191 2025] [:error] [pid 48600:tid 48638] [client 172.177.3.143:35543] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/orm.php"] [unique_id "aSQ1EftOzSUAQvWVjBeFSwAAAcg"]
[Mon Nov 24 18:36:02.284461 2025] [:error] [pid 9630:tid 9641] [client 172.177.3.143:35775] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/orm.php"] [unique_id "aSQ1EirSgUgPGkizt2oFqgAAAEk"]
[Mon Nov 24 18:36:02.952297 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:35592] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/orm.php"] [unique_id "aSQ1Eoq_bc5MOa9HfllNEwAAAIw"]
[Mon Nov 24 18:36:03.633812 2025] [:error] [pid 9630:tid 9642] [client 172.177.3.143:35781] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/orm.php"] [unique_id "aSQ1EyrSgUgPGkizt2oFqwAAAEo"]
[Mon Nov 24 18:36:04.179693 2025] [:error] [pid 16441:tid 16453] [client 172.177.3.143:35550] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.an5.php"] [unique_id "aSQ1FIq_bc5MOa9HfllNFAAAAIk"]
[Mon Nov 24 18:36:05.185510 2025] [:error] [pid 9630:tid 9646] [client 172.177.3.143:35629] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.an5.php"] [unique_id "aSQ1FSrSgUgPGkizt2oFrAAAAE4"]
[Mon Nov 24 18:36:05.946612 2025] [:error] [pid 49900:tid 49919] [client 172.177.3.143:35713] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.an5.php"] [unique_id "aSQ1FTCyPLrvg06aorkefgAAABE"]
[Mon Nov 24 18:36:07.343278 2025] [:error] [pid 48601:tid 48677] [client 172.177.3.143:35787] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.an5.php"] [unique_id "aSQ1F4MM4MaVTk74-AbDjgAAAhQ"]
[Mon Nov 24 18:36:08.128331 2025] [:error] [pid 48599:tid 48613] [client 172.177.3.143:35813] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waff.php"] [unique_id "aSQ1GJzvu6PDJiRKE3IvjQAAAYo"]
[Mon Nov 24 18:36:09.368442 2025] [:error] [pid 16441:tid 16467] [client 172.177.3.143:35646] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waff.php"] [unique_id "aSQ1GYq_bc5MOa9HfllNGQAAAJc"]
[Mon Nov 24 18:36:09.887579 2025] [:error] [pid 16441:tid 16461] [client 172.177.3.143:35724] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waff.php"] [unique_id "aSQ1GYq_bc5MOa9HfllNGgAAAJE"]
[Mon Nov 24 18:36:10.476755 2025] [:error] [pid 48599:tid 48607] [client 172.177.3.143:35783] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waff.php"] [unique_id "aSQ1Gpzvu6PDJiRKE3IvjgAAAYQ"]
[Mon Nov 24 18:36:11.544083 2025] [:error] [pid 49900:tid 49907] [client 172.177.3.143:35721] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yep.php"] [unique_id "aSQ1GzCyPLrvg06aorkeiQAAAAU"]
[Mon Nov 24 18:36:12.416226 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:35544] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yep.php"] [unique_id "aSQ1HIq_bc5MOa9HfllNIAAAAJU"]
[Mon Nov 24 18:36:13.450331 2025] [:error] [pid 48599:tid 48618] [client 172.177.3.143:35595] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yep.php"] [unique_id "aSQ1HZzvu6PDJiRKE3IvkAAAAY8"]
[Mon Nov 24 18:36:14.595424 2025] [:error] [pid 48688:tid 48703] [client 172.177.3.143:35685] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yep.php"] [unique_id "aSQ1Hhm2q1FkzLam7A2pugAAAks"]
[Mon Nov 24 18:36:16.265926 2025] [:error] [pid 16441:tid 16457] [client 172.177.3.143:35680] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aSQ1IIq_bc5MOa9HfllNIwAAAI0"]
[Mon Nov 24 18:36:16.986494 2025] [:error] [pid 16593:tid 16606] [client 172.177.3.143:35636] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aSQ1IBVGznHBJI2LKpRKWQAAAos"]
[Mon Nov 24 18:36:17.659710 2025] [:error] [pid 48599:tid 48608] [client 172.177.3.143:35609] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aSQ1IZzvu6PDJiRKE3IvkQAAAYU"]
[Mon Nov 24 18:36:18.578668 2025] [:error] [pid 48688:tid 48705] [client 172.177.3.143:35698] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aSQ1Ihm2q1FkzLam7A2pwAAAAk0"]
[Mon Nov 24 18:36:19.476768 2025] [:error] [pid 16516:tid 16523] [client 172.177.3.143:35523] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aSQ1I_qZbniwaNwL8Xnt1AAAAQQ"]
[Mon Nov 24 18:36:20.432965 2025] [:error] [pid 16593:tid 16597] [client 172.177.3.143:35594] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aSQ1JBVGznHBJI2LKpRKXAAAAoI"]
[Mon Nov 24 18:36:21.611045 2025] [:error] [pid 9630:tid 9633] [client 172.177.3.143:35469] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aSQ1JSrSgUgPGkizt2oFxAAAAEE"]
[Mon Nov 24 18:36:22.187783 2025] [:error] [pid 16593:tid 16616] [client 172.177.3.143:35562] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aSQ1JhVGznHBJI2LKpRKXQAAApU"]
[Mon Nov 24 18:36:22.984381 2025] [:error] [pid 9630:tid 9637] [client 172.177.3.143:35612] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aSQ1JirSgUgPGkizt2oFygAAAEU"]
[Mon Nov 24 18:36:23.672605 2025] [:error] [pid 9630:tid 9655] [client 172.177.3.143:35472] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aSQ1JyrSgUgPGkizt2oFzQAAAFc"]
[Mon Nov 24 18:36:24.701237 2025] [:error] [pid 48688:tid 48712] [client 172.177.3.143:35520] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aSQ1KBm2q1FkzLam7A2pxAAAAlQ"]
[Mon Nov 24 18:36:25.559177 2025] [:error] [pid 48601:tid 48667] [client 172.177.3.143:35622] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aSQ1KYMM4MaVTk74-AbDkwAAAgo"]
[Mon Nov 24 18:36:26.596283 2025] [:error] [pid 16516:tid 16524] [client 172.177.3.143:35834] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aSQ1KvqZbniwaNwL8Xnt2wAAAQU"]
[Mon Nov 24 18:36:27.225522 2025] [:error] [pid 49900:tid 49909] [client 172.177.3.143:35548] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aSQ1KzCyPLrvg06aorkepAAAAAc"]
[Mon Nov 24 18:36:27.853696 2025] [:error] [pid 48601:tid 48657] [client 172.177.3.143:35831] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aSQ1K4MM4MaVTk74-AbDlAAAAgA"]
[Mon Nov 24 18:36:28.454707 2025] [:error] [pid 16441:tid 16461] [client 172.177.3.143:35534] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aSQ1LIq_bc5MOa9HfllNLQAAAJE"]
[Mon Nov 24 18:36:28.983426 2025] [:error] [pid 16441:tid 16457] [client 172.177.3.143:35837] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aSQ1LIq_bc5MOa9HfllNLwAAAI0"]
[Mon Nov 24 18:36:29.595224 2025] [:error] [pid 48601:tid 48680] [client 172.177.3.143:35734] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aSQ1LYMM4MaVTk74-AbDlQAAAhc"]
[Mon Nov 24 18:36:30.536818 2025] [:error] [pid 48601:tid 48668] [client 172.177.3.143:35614] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aSQ1LoMM4MaVTk74-AbDlwAAAgs"]
[Mon Nov 24 18:36:31.434123 2025] [:error] [pid 48688:tid 48713] [client 172.177.3.143:35456] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aSQ1Lxm2q1FkzLam7A2pxwAAAlU"]
[Mon Nov 24 18:36:32.129287 2025] [:error] [pid 49900:tid 49920] [client 172.177.3.143:35539] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aSQ1MDCyPLrvg06aorkepwAAABI"]
[Mon Nov 24 18:36:33.092218 2025] [:error] [pid 16441:tid 16444] [client 172.177.3.143:35528] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aSQ1MYq_bc5MOa9HfllNMwAAAIA"]
[Mon Nov 24 18:36:33.964523 2025] [:error] [pid 48599:tid 48627] [client 172.177.3.143:35627] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aSQ1MZzvu6PDJiRKE3IvlgAAAZg"]
[Mon Nov 24 18:36:35.282499 2025] [:error] [pid 48601:tid 48671] [client 172.177.3.143:35823] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aSQ1M4MM4MaVTk74-AbDmAAAAg4"]
[Mon Nov 24 18:36:36.172936 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:35712] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aSQ1NIq_bc5MOa9HfllNPAAAAJg"]
[Mon Nov 24 18:36:36.853219 2025] [:error] [pid 49900:tid 49907] [client 172.177.3.143:35789] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aSQ1NDCyPLrvg06aorketwAAAAU"]
[Mon Nov 24 18:36:37.491738 2025] [:error] [pid 16549:tid 16561] [client 172.177.3.143:35729] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aSQ1NaeWW19A99PUw_dFqwAAAUk"]
[Mon Nov 24 18:36:38.144895 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:35715] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aSQ1Noq_bc5MOa9HfllNUgAAAJg"]
[Mon Nov 24 18:36:38.909475 2025] [:error] [pid 16441:tid 16444] [client 172.177.3.143:35556] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aSQ1Noq_bc5MOa9HfllNWwAAAIA"]
[Mon Nov 24 18:36:39.662803 2025] [:error] [pid 48601:tid 48672] [client 172.177.3.143:35838] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aSQ1N4MM4MaVTk74-AbDmgAAAg8"]
[Mon Nov 24 18:36:40.166207 2025] [:error] [pid 48601:tid 48673] [client 172.177.3.143:35690] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aSQ1OIMM4MaVTk74-AbDmwAAAhA"]
[Mon Nov 24 18:36:42.385666 2025] [:error] [pid 16516:tid 16525] [client 172.177.3.143:35617] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aSQ1OvqZbniwaNwL8Xnt3QAAAQY"]
[Mon Nov 24 18:36:42.877755 2025] [:error] [pid 48688:tid 48706] [client 172.177.3.143:35607] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aSQ1Ohm2q1FkzLam7A2pygAAAk4"]
[Mon Nov 24 18:36:43.676045 2025] [:error] [pid 48600:tid 48650] [client 172.177.3.143:35619] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aSQ1O_tOzSUAQvWVjBeFVwAAAdQ"]
[Mon Nov 24 18:36:44.685858 2025] [:error] [pid 48601:tid 48665] [client 172.177.3.143:35793] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aSQ1PIMM4MaVTk74-AbDngAAAgg"]
[Mon Nov 24 18:36:45.239973 2025] [:error] [pid 16549:tid 16559] [client 172.177.3.143:35561] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aSQ1PaeWW19A99PUw_dFrQAAAUc"]
[Mon Nov 24 18:36:46.149211 2025] [:error] [pid 48601:tid 48678] [client 172.177.3.143:35803] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aSQ1PoMM4MaVTk74-AbDogAAAhU"]
[Mon Nov 24 18:36:47.589179 2025] [:error] [pid 48688:tid 48715] [client 172.177.3.143:35739] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aSQ1Pxm2q1FkzLam7A2pzQAAAlc"]
[Mon Nov 24 18:36:48.636540 2025] [:error] [pid 16549:tid 16558] [client 172.177.3.143:35835] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aSQ1QKeWW19A99PUw_dFrgAAAUY"]
[Mon Nov 24 18:36:50.106918 2025] [:error] [pid 48599:tid 48619] [client 172.177.3.143:35537] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aSQ1Qpzvu6PDJiRKE3IvmQAAAZA"]
[Mon Nov 24 18:36:52.082585 2025] [:error] [pid 48599:tid 48624] [client 172.177.3.143:35635] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aSQ1RJzvu6PDJiRKE3IvmgAAAZU"]
[Mon Nov 24 18:36:53.993213 2025] [:error] [pid 49900:tid 49908] [client 172.177.3.143:35688] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aSQ1RTCyPLrvg06aorke7gAAAAY"]
[Mon Nov 24 18:36:54.986980 2025] [:error] [pid 16516:tid 16530] [client 172.177.3.143:35798] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aSQ1RvqZbniwaNwL8Xnt5AAAAQs"]
[Mon Nov 24 18:36:56.262569 2025] [:error] [pid 16516:tid 16527] [client 172.177.3.143:35800] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aSQ1SPqZbniwaNwL8Xnt5gAAAQg"]
[Mon Nov 24 18:36:57.414993 2025] [:error] [pid 16441:tid 16461] [client 172.177.3.143:35821] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skk.php"] [unique_id "aSQ1SYq_bc5MOa9HfllNdQAAAJE"]
[Mon Nov 24 18:37:04.920350 2025] [:error] [pid 16516:tid 16519] [client 172.177.3.143:35621] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aSQ1UPqZbniwaNwL8Xnt8wAAAQA"]
[Mon Nov 24 18:37:05.742634 2025] [:error] [pid 16593:tid 16603] [client 172.177.3.143:35747] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aSQ1URVGznHBJI2LKpRKcAAAAog"]
[Mon Nov 24 18:37:06.309779 2025] [:error] [pid 16549:tid 16564] [client 172.177.3.143:35812] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aSQ1UqeWW19A99PUw_dFtAAAAUw"]
[Mon Nov 24 18:37:06.783228 2025] [:error] [pid 16549:tid 16565] [client 172.177.3.143:35743] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aSQ1UqeWW19A99PUw_dFtQAAAU0"]
[Mon Nov 24 18:37:07.324183 2025] [:error] [pid 16441:tid 16450] [client 172.177.3.143:35736] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aSQ1U4q_bc5MOa9HfllNgAAAAIY"]
[Mon Nov 24 18:37:08.009102 2025] [:error] [pid 16593:tid 16604] [client 172.177.3.143:35716] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aSQ1VBVGznHBJI2LKpRKcQAAAok"]
[Mon Nov 24 18:37:08.647293 2025] [:error] [pid 48601:tid 48673] [client 172.177.3.143:35532] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aSQ1VIMM4MaVTk74-AbDvAAAAhA"]
[Mon Nov 24 18:37:09.269222 2025] [:error] [pid 48601:tid 48677] [client 172.177.3.143:35524] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aSQ1VYMM4MaVTk74-AbDvgAAAhQ"]
[Mon Nov 24 18:37:10.037213 2025] [:error] [pid 16593:tid 16611] [client 172.177.3.143:35839] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/twso.php"] [unique_id "aSQ1VhVGznHBJI2LKpRKcwAAApA"]
[Mon Nov 24 18:37:10.584634 2025] [:error] [pid 16441:tid 16454] [client 172.177.3.143:35579] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/twso.php"] [unique_id "aSQ1Voq_bc5MOa9HfllNlgAAAIo"]
[Mon Nov 24 18:37:11.230639 2025] [:error] [pid 48599:tid 48613] [client 172.177.3.143:35804] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/twso.php"] [unique_id "aSQ1V5zvu6PDJiRKE3IvrgAAAYo"]
[Mon Nov 24 18:37:11.770689 2025] [:error] [pid 48601:tid 48679] [client 172.177.3.143:35832] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/twso.php"] [unique_id "aSQ1V4MM4MaVTk74-AbD5AAAAhY"]
[Mon Nov 24 18:37:12.637899 2025] [:error] [pid 16549:tid 16562] [client 172.177.3.143:35615] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aSQ1WKeWW19A99PUw_dFuAAAAUo"]
[Mon Nov 24 18:37:13.576696 2025] [:error] [pid 48599:tid 48606] [client 172.177.3.143:35754] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aSQ1WZzvu6PDJiRKE3IvtAAAAYM"]
[Mon Nov 24 18:37:14.674131 2025] [:error] [pid 48601:tid 48671] [client 172.177.3.143:35459] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aSQ1WoMM4MaVTk74-AbD8AAAAg4"]
[Mon Nov 24 18:37:15.629068 2025] [:error] [pid 16441:tid 16450] [client 172.177.3.143:35822] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aSQ1W4q_bc5MOa9HfllNqwAAAIY"]
[Mon Nov 24 18:37:16.275632 2025] [:error] [pid 16593:tid 16604] [client 172.177.3.143:35557] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aSQ1XBVGznHBJI2LKpRKoQAAAok"]
[Mon Nov 24 18:37:17.255687 2025] [:error] [pid 48688:tid 48716] [client 172.177.3.143:35660] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aSQ1XRm2q1FkzLam7A2qMQAAAlg"]
[Mon Nov 24 18:37:17.839136 2025] [:error] [pid 49900:tid 49921] [client 172.177.3.143:35749] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aSQ1XTCyPLrvg06aorkfLwAAABM"]
[Mon Nov 24 18:37:18.501320 2025] [:error] [pid 16516:tid 16543] [client 172.177.3.143:35810] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aSQ1XvqZbniwaNwL8XnuAwAAARg"]
[Mon Nov 24 18:37:19.060223 2025] [:error] [pid 48601:tid 48662] [client 172.177.3.143:35769] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aSQ1X4MM4MaVTk74-AbD8QAAAgU"]
[Mon Nov 24 18:37:19.783260 2025] [:error] [pid 48688:tid 48697] [client 172.177.3.143:35770] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aSQ1Xxm2q1FkzLam7A2qMgAAAkU"]
[Mon Nov 24 18:37:20.543222 2025] [:error] [pid 9630:tid 9646] [client 172.177.3.143:35816] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aSQ1YCrSgUgPGkizt2oGQwAAAE4"]
[Mon Nov 24 18:37:21.360002 2025] [:error] [pid 48599:tid 48615] [client 172.177.3.143:35806] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aSQ1YZzvu6PDJiRKE3IvwgAAAYw"]
[Mon Nov 24 18:37:23.189756 2025] [:error] [pid 16441:tid 16444] [client 172.177.3.143:35777] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aSQ1Y4q_bc5MOa9HfllNuQAAAIA"]
[Mon Nov 24 18:37:24.228631 2025] [:error] [pid 16516:tid 16541] [client 172.177.3.143:35720] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aSQ1ZPqZbniwaNwL8XnuBwAAARY"]
[Mon Nov 24 18:37:25.009647 2025] [:error] [pid 49900:tid 49912] [client 172.177.3.143:35583] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aSQ1ZTCyPLrvg06aorkfMwAAAAo"]
[Mon Nov 24 18:37:26.001909 2025] [:error] [pid 9630:tid 9651] [client 172.177.3.143:35774] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aSQ1ZirSgUgPGkizt2oGRAAAAFM"]
[Mon Nov 24 18:37:26.753042 2025] [:error] [pid 16441:tid 16466] [client 172.177.3.143:35499] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aSQ1Zoq_bc5MOa9HfllNvQAAAJY"]
[Mon Nov 24 18:37:28.262915 2025] [:error] [pid 16549:tid 16572] [client 172.177.3.143:35546] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aSQ1aKeWW19A99PUw_dFxgAAAVM"]
[Mon Nov 24 18:37:29.385083 2025] [:error] [pid 48688:tid 48712] [client 172.177.3.143:35613] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aSQ1aRm2q1FkzLam7A2qOAAAAlQ"]
[Mon Nov 24 18:37:30.096807 2025] [:error] [pid 16441:tid 16448] [client 172.177.3.143:35526] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aSQ1aoq_bc5MOa9HfllNwQAAAIQ"]
[Mon Nov 24 18:37:30.959849 2025] [:error] [pid 9630:tid 9655] [client 172.177.3.143:35827] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aSQ1airSgUgPGkizt2oGSwAAAFc"]
[Mon Nov 24 18:37:32.218901 2025] [:error] [pid 16441:tid 16450] [client 172.177.3.143:35751] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aSQ1bIq_bc5MOa9HfllNxgAAAIY"]
[Mon Nov 24 18:37:33.224324 2025] [:error] [pid 16441:tid 16460] [client 172.177.3.143:35642] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aSQ1bYq_bc5MOa9HfllNxwAAAJA"]
[Mon Nov 24 18:37:34.073616 2025] [:error] [pid 16549:tid 16563] [client 172.177.3.143:35723] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aSQ1bqeWW19A99PUw_dFyAAAAUs"]
[Mon Nov 24 18:37:34.530607 2025] [:error] [pid 48599:tid 48605] [client 172.177.3.143:35569] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aSQ1bpzvu6PDJiRKE3IvxwAAAYI"]
[Mon Nov 24 18:37:35.519424 2025] [:error] [pid 48688:tid 48709] [client 172.177.3.143:35718] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aSQ1bxm2q1FkzLam7A2qPQAAAlE"]
[Mon Nov 24 18:37:36.384159 2025] [:error] [pid 48600:tid 48648] [client 172.177.3.143:35826] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aSQ1cPtOzSUAQvWVjBeFaQAAAdI"]
[Mon Nov 24 18:37:37.048842 2025] [:error] [pid 48599:tid 48611] [client 172.177.3.143:35714] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aSQ1cZzvu6PDJiRKE3IvyQAAAYg"]
[Mon Nov 24 18:37:37.772070 2025] [:error] [pid 16516:tid 16536] [client 172.177.3.143:35732] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aSQ1cfqZbniwaNwL8XnuDAAAARE"]
[Mon Nov 24 18:37:38.315798 2025] [:error] [pid 16516:tid 16535] [client 172.177.3.143:35733] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aSQ1cvqZbniwaNwL8XnuDgAAARA"]
[Mon Nov 24 18:37:39.273946 2025] [:error] [pid 16593:tid 16601] [client 172.177.3.143:35657] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aSQ1cxVGznHBJI2LKpRKpQAAAoY"]
[Mon Nov 24 18:37:40.431740 2025] [:error] [pid 9630:tid 9646] [client 172.177.3.143:35623] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aSQ1dCrSgUgPGkizt2oGUAAAAE4"]
[Mon Nov 24 18:37:41.526893 2025] [:error] [pid 49900:tid 49917] [client 172.177.3.143:35797] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "aSQ1dTCyPLrvg06aorkfOwAAAA8"]
[Mon Nov 24 18:37:42.267009 2025] [:error] [pid 49900:tid 49913] [client 172.177.3.143:35467] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "aSQ1djCyPLrvg06aorkfPQAAAAs"]
[Mon Nov 24 18:37:42.890661 2025] [:error] [pid 49900:tid 49918] [client 172.177.3.143:35750] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "aSQ1djCyPLrvg06aorkfPwAAABA"]
[Mon Nov 24 18:37:43.733732 2025] [:error] [pid 48600:tid 48636] [client 172.177.3.143:35790] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "aSQ1d_tOzSUAQvWVjBeFbQAAAcY"]
[Mon Nov 24 18:37:44.601599 2025] [:error] [pid 48688:tid 48715] [client 172.177.3.143:35792] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aSQ1eBm2q1FkzLam7A2qPgAAAlc"]
[Mon Nov 24 18:37:45.472051 2025] [:error] [pid 49900:tid 49923] [client 172.177.3.143:35554] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aSQ1eTCyPLrvg06aorkfQgAAABU"]
[Mon Nov 24 18:37:46.355717 2025] [:error] [pid 16441:tid 16457] [client 172.177.3.143:35576] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aSQ1eoq_bc5MOa9HfllNzgAAAI0"]
[Mon Nov 24 18:37:46.957486 2025] [:error] [pid 49900:tid 49904] [client 172.177.3.143:35836] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aSQ1ejCyPLrvg06aorkfWwAAAAI"]
[Mon Nov 24 18:37:47.620650 2025] [:error] [pid 49900:tid 49919] [client 172.177.3.143:35650] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G6.php"] [unique_id "aSQ1ezCyPLrvg06aorkfaQAAABE"]
[Mon Nov 24 18:37:48.336076 2025] [:error] [pid 48688:tid 48697] [client 172.177.3.143:35701] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G6.php"] [unique_id "aSQ1fBm2q1FkzLam7A2qVQAAAkU"]
[Mon Nov 24 18:37:49.108964 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:35801] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G6.php"] [unique_id "aSQ1fYq_bc5MOa9HfllN5wAAAIw"]
[Mon Nov 24 18:37:50.316219 2025] [:error] [pid 48601:tid 48675] [client 172.177.3.143:35833] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G6.php"] [unique_id "aSQ1foMM4MaVTk74-AbECQAAAhI"]
[Mon Nov 24 18:37:51.347393 2025] [:error] [pid 16549:tid 16576] [client 172.177.3.143:35824] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z57.php"] [unique_id "aSQ1f6eWW19A99PUw_dFygAAAVc"]
[Mon Nov 24 18:37:52.179898 2025] [:error] [pid 48688:tid 48711] [client 172.177.3.143:35676] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z57.php"] [unique_id "aSQ1gBm2q1FkzLam7A2qVwAAAlM"]
[Mon Nov 24 18:37:52.973073 2025] [:error] [pid 16593:tid 16614] [client 172.177.3.143:35460] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z57.php"] [unique_id "aSQ1gBVGznHBJI2LKpRKpwAAApM"]
[Mon Nov 24 18:37:53.655759 2025] [:error] [pid 48599:tid 48610] [client 172.177.3.143:35679] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z57.php"] [unique_id "aSQ1gZzvu6PDJiRKE3IvzAAAAYc"]
[Mon Nov 24 18:37:54.268753 2025] [:error] [pid 48688:tid 48696] [client 172.177.3.143:35799] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aSQ1ghm2q1FkzLam7A2qWQAAAkQ"]
[Mon Nov 24 18:37:54.856641 2025] [:error] [pid 16593:tid 16613] [client 172.177.3.143:35488] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aSQ1ghVGznHBJI2LKpRKqAAAApI"]
[Mon Nov 24 18:37:55.360996 2025] [:error] [pid 16593:tid 16616] [client 172.177.3.143:35521] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aSQ1gxVGznHBJI2LKpRKqQAAApU"]
[Mon Nov 24 18:37:55.940058 2025] [:error] [pid 48601:tid 48673] [client 172.177.3.143:35726] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aSQ1g4MM4MaVTk74-AbECwAAAhA"]
[Mon Nov 24 18:37:57.116705 2025] [:error] [pid 49900:tid 49906] [client 172.177.3.143:35656] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aSQ1hTCyPLrvg06aorkfdwAAAAQ"]
[Mon Nov 24 18:37:58.115945 2025] [:error] [pid 49900:tid 49925] [client 172.177.3.143:35809] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aSQ1hjCyPLrvg06aorkfewAAABc"]
[Mon Nov 24 18:37:59.071545 2025] [:error] [pid 16441:tid 16460] [client 172.177.3.143:35717] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aSQ1h4q_bc5MOa9HfllN7wAAAJA"]
[Mon Nov 24 18:37:59.721511 2025] [:error] [pid 49900:tid 49916] [client 172.177.3.143:35565] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aSQ1hzCyPLrvg06aorkffQAAAA4"]
[Mon Nov 24 18:38:00.570465 2025] [:error] [pid 16593:tid 16617] [client 172.177.3.143:35785] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aSQ1iBVGznHBJI2LKpRKqgAAApY"]
[Mon Nov 24 18:38:01.909329 2025] [:error] [pid 48601:tid 48681] [client 172.177.3.143:35788] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aSQ1iYMM4MaVTk74-AbEEAAAAhg"]
[Mon Nov 24 18:38:02.664200 2025] [:error] [pid 48600:tid 48638] [client 172.177.3.143:35829] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aSQ1ivtOzSUAQvWVjBeFdwAAAcg"]
[Mon Nov 24 18:38:03.181821 2025] [:error] [pid 48599:tid 48622] [client 172.177.3.143:35792] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aSQ1i5zvu6PDJiRKE3Iv0AAAAZM"]
[Mon Nov 24 18:38:11.289944 2025] [:error] [pid 48601:tid 48681] [client 172.177.3.143:35571] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aSQ1k4MM4MaVTk74-AbEHwAAAhg"]
[Mon Nov 24 18:38:12.793748 2025] [:error] [pid 48601:tid 48669] [client 172.177.3.143:35536] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aSQ1lIMM4MaVTk74-AbEIAAAAgw"]
[Mon Nov 24 18:38:14.677853 2025] [:error] [pid 9630:tid 9654] [client 172.177.3.143:35731] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aSQ1lirSgUgPGkizt2oGZgAAAFY"]
[Mon Nov 24 18:38:17.409409 2025] [:error] [pid 16441:tid 16464] [client 172.177.3.143:35538] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aSQ1mYq_bc5MOa9HfllOAQAAAJQ"]
[Mon Nov 24 18:38:20.923526 2025] [:error] [pid 16441:tid 16457] [client 172.177.3.143:35681] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSQ1nIq_bc5MOa9HfllOBgAAAI0"]
[Mon Nov 24 18:38:22.333885 2025] [:error] [pid 49900:tid 49908] [client 172.177.3.143:35789] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSQ1njCyPLrvg06aorkfkgAAAAY"]
[Mon Nov 24 18:38:23.348259 2025] [:error] [pid 48688:tid 48700] [client 172.177.3.143:35670] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSQ1nxm2q1FkzLam7A2qYQAAAkg"]
[Mon Nov 24 18:38:24.237712 2025] [:error] [pid 48601:tid 48674] [client 172.177.3.143:35719] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSQ1oIMM4MaVTk74-AbEJgAAAhE"]
[Mon Nov 24 18:38:25.102876 2025] [:error] [pid 48600:tid 48646] [client 172.177.3.143:35649] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSQ1oftOzSUAQvWVjBeFfAAAAdA"]
[Mon Nov 24 18:38:25.777002 2025] [:error] [pid 49900:tid 49905] [client 172.177.3.143:35654] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSQ1oTCyPLrvg06aorkfkwAAAAM"]
[Mon Nov 24 18:38:26.312219 2025] [:error] [pid 16593:tid 16597] [client 172.177.3.143:35757] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSQ1ohVGznHBJI2LKpRKtwAAAoI"]
[Mon Nov 24 18:38:27.104830 2025] [:error] [pid 48600:tid 48649] [client 172.177.3.143:35722] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSQ1o_tOzSUAQvWVjBeFfgAAAdM"]
[Mon Nov 24 18:38:27.650768 2025] [:error] [pid 48688:tid 48702] [client 172.177.3.143:35766] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mango.php"] [unique_id "aSQ1oxm2q1FkzLam7A2qZAAAAko"]
[Mon Nov 24 18:38:28.449826 2025] [:error] [pid 48600:tid 48641] [client 172.177.3.143:35564] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mango.php"] [unique_id "aSQ1pPtOzSUAQvWVjBeFgQAAAcs"]
[Mon Nov 24 18:38:30.130642 2025] [:error] [pid 48599:tid 48608] [client 172.177.3.143:35586] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mango.php"] [unique_id "aSQ1ppzvu6PDJiRKE3Iv2wAAAYU"]
[Mon Nov 24 18:38:31.214277 2025] [:error] [pid 16516:tid 16527] [client 172.177.3.143:35585] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mango.php"] [unique_id "aSQ1p_qZbniwaNwL8XnuGgAAAQg"]
[Mon Nov 24 18:38:31.861856 2025] [:error] [pid 48601:tid 48665] [client 172.177.3.143:35782] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/singlex.php"] [unique_id "aSQ1p4MM4MaVTk74-AbELAAAAgg"]
[Mon Nov 24 18:38:32.489581 2025] [:error] [pid 49900:tid 49910] [client 172.177.3.143:35616] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/singlex.php"] [unique_id "aSQ1qDCyPLrvg06aorkfmQAAAAg"]
[Mon Nov 24 18:38:33.055853 2025] [:error] [pid 48599:tid 48618] [client 172.177.3.143:35558] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/singlex.php"] [unique_id "aSQ1qZzvu6PDJiRKE3Iv3AAAAY8"]
[Mon Nov 24 18:38:33.605733 2025] [:error] [pid 48601:tid 48666] [client 172.177.3.143:35466] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/singlex.php"] [unique_id "aSQ1qYMM4MaVTk74-AbEMAAAAgk"]
[Mon Nov 24 18:38:34.548856 2025] [:error] [pid 16549:tid 16566] [client 172.177.3.143:35578] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aSQ1qqeWW19A99PUw_dF3wAAAU4"]
[Mon Nov 24 18:38:35.460260 2025] [:error] [pid 48599:tid 48625] [client 172.177.3.143:35586] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aSQ1q5zvu6PDJiRKE3Iv4QAAAZY"]
[Mon Nov 24 18:38:36.280417 2025] [:error] [pid 16593:tid 16615] [client 172.177.3.143:35473] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aSQ1rBVGznHBJI2LKpRKvQAAApQ"]
[Mon Nov 24 18:38:37.181050 2025] [:error] [pid 48599:tid 48617] [client 172.177.3.143:35735] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aSQ1rZzvu6PDJiRKE3Iv4gAAAY4"]
[Mon Nov 24 18:38:38.252015 2025] [:error] [pid 48599:tid 48627] [client 172.177.3.143:35767] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pepe.php"] [unique_id "aSQ1rpzvu6PDJiRKE3Iv5gAAAZg"]
[Mon Nov 24 18:38:39.564151 2025] [:error] [pid 16593:tid 16612] [client 172.177.3.143:35730] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pepe.php"] [unique_id "aSQ1rxVGznHBJI2LKpRKzQAAApE"]
[Mon Nov 24 18:38:40.565320 2025] [:error] [pid 16441:tid 16463] [client 172.177.3.143:35760] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pepe.php"] [unique_id "aSQ1sIq_bc5MOa9HfllOMwAAAJM"]
[Mon Nov 24 18:38:41.218443 2025] [:error] [pid 16441:tid 16445] [client 172.177.3.143:35758] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pepe.php"] [unique_id "aSQ1sYq_bc5MOa9HfllONwAAAIE"]
[Mon Nov 24 18:38:41.857650 2025] [:error] [pid 16441:tid 16448] [client 172.177.3.143:35807] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcrtg.php"] [unique_id "aSQ1sYq_bc5MOa9HfllOOAAAAIQ"]
[Mon Nov 24 18:38:43.647017 2025] [:error] [pid 48688:tid 48708] [client 172.177.3.143:35573] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcrtg.php"] [unique_id "aSQ1sxm2q1FkzLam7A2qcgAAAlA"]
[Mon Nov 24 18:38:44.283019 2025] [:error] [pid 48688:tid 48701] [client 172.177.3.143:35704] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcrtg.php"] [unique_id "aSQ1tBm2q1FkzLam7A2qcwAAAkk"]
[Mon Nov 24 18:38:45.094347 2025] [:error] [pid 48688:tid 48700] [client 172.177.3.143:35815] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcrtg.php"] [unique_id "aSQ1tRm2q1FkzLam7A2qdgAAAkg"]
[Mon Nov 24 18:38:46.222133 2025] [:error] [pid 48601:tid 48675] [client 172.177.3.143:35745] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BbiNip.php"] [unique_id "aSQ1toMM4MaVTk74-AbEOQAAAhI"]
[Mon Nov 24 18:38:47.390961 2025] [:error] [pid 48600:tid 48644] [client 172.177.3.143:35786] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BbiNip.php"] [unique_id "aSQ1t_tOzSUAQvWVjBeFowAAAc4"]
[Mon Nov 24 18:38:48.281998 2025] [:error] [pid 48688:tid 48707] [client 172.177.3.143:35610] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BbiNip.php"] [unique_id "aSQ1uBm2q1FkzLam7A2qegAAAk8"]
[Mon Nov 24 18:38:49.282253 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:35663] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BbiNip.php"] [unique_id "aSQ1uYq_bc5MOa9HfllOPQAAAIw"]
[Mon Nov 24 18:38:49.785598 2025] [:error] [pid 48601:tid 48664] [client 172.177.3.143:35668] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl2023.php"] [unique_id "aSQ1uYMM4MaVTk74-AbEPAAAAgc"]
[Mon Nov 24 18:38:50.910013 2025] [:error] [pid 16516:tid 16519] [client 172.177.3.143:35825] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl2023.php"] [unique_id "aSQ1uvqZbniwaNwL8XnuIQAAAQA"]
[Mon Nov 24 18:38:51.985925 2025] [:error] [pid 48601:tid 48667] [client 172.177.3.143:35625] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl2023.php"] [unique_id "aSQ1u4MM4MaVTk74-AbEQAAAAgo"]
[Mon Nov 24 18:38:52.905750 2025] [:error] [pid 49900:tid 49919] [client 172.177.3.143:35738] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl2023.php"] [unique_id "aSQ1vDCyPLrvg06aorkftgAAABE"]
[Mon Nov 24 18:38:54.024236 2025] [:error] [pid 49900:tid 49915] [client 172.177.3.143:35762] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "aSQ1vjCyPLrvg06aorkftwAAAA0"]
[Mon Nov 24 18:38:55.448532 2025] [:error] [pid 16549:tid 16559] [client 172.177.3.143:35655] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "aSQ1v6eWW19A99PUw_dGBgAAAUc"]
[Mon Nov 24 18:38:56.822264 2025] [:error] [pid 9630:tid 9648] [client 172.177.3.143:35481] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "aSQ1wCrSgUgPGkizt2oGlQAAAFA"]
[Mon Nov 24 18:38:58.132224 2025] [:error] [pid 49900:tid 49917] [client 172.177.3.143:35805] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "aSQ1wjCyPLrvg06aorkfvgAAAA8"]
[Mon Nov 24 18:38:59.513583 2025] [:error] [pid 48601:tid 48657] [client 172.177.3.143:35664] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aSQ1w4MM4MaVTk74-AbERAAAAgA"]
[Mon Nov 24 18:39:00.953171 2025] [:error] [pid 48601:tid 48675] [client 172.177.3.143:35516] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aSQ1xIMM4MaVTk74-AbERwAAAhI"]
[Mon Nov 24 18:39:03.104959 2025] [:error] [pid 48688:tid 48714] [client 172.177.3.143:35791] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aSQ1xxm2q1FkzLam7A2qhwAAAlY"]
[Mon Nov 24 18:39:03.974171 2025] [:error] [pid 48600:tid 48641] [client 172.177.3.143:35666] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aSQ1x_tOzSUAQvWVjBeFtAAAAcs"]
[Mon Nov 24 18:39:04.614712 2025] [:error] [pid 16593:tid 16601] [client 172.177.3.143:35740] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-more.php"] [unique_id "aSQ1yBVGznHBJI2LKpRK1wAAAoY"]
[Mon Nov 24 18:39:05.248397 2025] [:error] [pid 9630:tid 9635] [client 172.177.3.143:35689] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-more.php"] [unique_id "aSQ1ySrSgUgPGkizt2oGmQAAAEM"]
[Mon Nov 24 18:39:07.481300 2025] [:error] [pid 48688:tid 48707] [client 172.177.3.143:35541] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-more.php"] [unique_id "aSQ1yxm2q1FkzLam7A2qiwAAAk8"]
[Mon Nov 24 18:39:09.561283 2025] [:error] [pid 48600:tid 48632] [client 172.177.3.143:35795] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-more.php"] [unique_id "aSQ1zftOzSUAQvWVjBeFxAAAAcI"]
[Mon Nov 24 18:39:18.689537 2025] [:error] [pid 9630:tid 9651] [client 172.177.3.143:35725] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Auth.php"] [unique_id "aSQ11irSgUgPGkizt2oGqgAAAFM"]
[Mon Nov 24 18:39:19.591946 2025] [:error] [pid 49900:tid 49904] [client 172.177.3.143:35814] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Auth.php"] [unique_id "aSQ11zCyPLrvg06aorkfxQAAAAI"]
[Mon Nov 24 18:39:20.829490 2025] [:error] [pid 16593:tid 16616] [client 172.177.3.143:35678] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Auth.php"] [unique_id "aSQ12BVGznHBJI2LKpRK8gAAApU"]
[Mon Nov 24 18:39:21.567281 2025] [:error] [pid 16549:tid 16560] [client 172.177.3.143:35672] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Auth.php"] [unique_id "aSQ12aeWW19A99PUw_dGIwAAAUg"]
[Mon Nov 24 18:39:22.302656 2025] [:error] [pid 16549:tid 16568] [client 172.177.3.143:35604] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kaori.php"] [unique_id "aSQ12qeWW19A99PUw_dGJAAAAVA"]
[Mon Nov 24 18:39:23.064800 2025] [:error] [pid 16516:tid 16524] [client 172.177.3.143:35640] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kaori.php"] [unique_id "aSQ12_qZbniwaNwL8XnuNQAAAQU"]
[Mon Nov 24 18:39:23.911336 2025] [:error] [pid 16593:tid 16604] [client 172.177.3.143:35639] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kaori.php"] [unique_id "aSQ12xVGznHBJI2LKpRK9QAAAok"]
[Mon Nov 24 18:39:25.291582 2025] [:error] [pid 49900:tid 49910] [client 172.177.3.143:35651] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kaori.php"] [unique_id "aSQ13TCyPLrvg06aorkfxgAAAAg"]
[Mon Nov 24 18:39:26.794806 2025] [:error] [pid 9630:tid 9653] [client 172.177.3.143:35702] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/white.php"] [unique_id "aSQ13irSgUgPGkizt2oGrgAAAFU"]
[Mon Nov 24 18:39:27.526617 2025] [:error] [pid 9630:tid 9643] [client 172.177.3.143:35780] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/white.php"] [unique_id "aSQ13yrSgUgPGkizt2oGrwAAAEs"]
[Mon Nov 24 18:39:28.544606 2025] [:error] [pid 49900:tid 49924] [client 172.177.3.143:35500] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/white.php"] [unique_id "aSQ14DCyPLrvg06aorkfyAAAABY"]
[Mon Nov 24 18:39:29.588012 2025] [:error] [pid 48600:tid 48654] [client 172.177.3.143:35746] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/white.php"] [unique_id "aSQ14ftOzSUAQvWVjBeFywAAAdg"]
[Mon Nov 24 18:39:31.237598 2025] [:error] [pid 16516:tid 16529] [client 172.177.3.143:35784] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aSQ14_qZbniwaNwL8XnuPAAAAQo"]
[Mon Nov 24 18:39:32.143490 2025] [:error] [pid 48688:tid 48697] [client 172.177.3.143:35703] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aSQ15Bm2q1FkzLam7A2qoAAAAkU"]
[Mon Nov 24 18:39:33.539038 2025] [:error] [pid 48600:tid 48645] [client 172.177.3.143:35671] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aSQ15ftOzSUAQvWVjBeFzQAAAc8"]
[Mon Nov 24 18:39:34.305451 2025] [:error] [pid 16516:tid 16541] [client 172.177.3.143:35728] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aSQ15vqZbniwaNwL8XnuPQAAARY"]
[Mon Nov 24 18:39:35.311625 2025] [:error] [pid 48599:tid 48627] [client 172.177.3.143:35768] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-db.php"] [unique_id "aSQ155zvu6PDJiRKE3IwHgAAAZg"]
[Mon Nov 24 18:39:36.001943 2025] [:error] [pid 49900:tid 49920] [client 172.177.3.143:35658] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-db.php"] [unique_id "aSQ16DCyPLrvg06aorkfzQAAABI"]
[Mon Nov 24 18:39:37.054188 2025] [:error] [pid 49900:tid 49904] [client 172.177.3.143:35802] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-db.php"] [unique_id "aSQ16TCyPLrvg06aorkf1QAAAAI"]
[Mon Nov 24 18:39:37.840469 2025] [:error] [pid 16441:tid 16461] [client 172.177.3.143:35820] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-db.php"] [unique_id "aSQ16Yq_bc5MOa9HfllOqAAAAJE"]
[Mon Nov 24 18:39:38.505799 2025] [:error] [pid 48599:tid 48624] [client 172.177.3.143:35667] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/14.php"] [unique_id "aSQ16pzvu6PDJiRKE3IwKQAAAZU"]
[Mon Nov 24 18:39:39.584860 2025] [:error] [pid 16441:tid 16465] [client 172.177.3.143:35587] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/14.php"] [unique_id "aSQ164q_bc5MOa9HfllOqwAAAJU"]
[Mon Nov 24 18:39:40.396450 2025] [:error] [pid 16441:tid 16464] [client 172.177.3.143:35659] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/14.php"] [unique_id "aSQ17Iq_bc5MOa9HfllOrgAAAJQ"]
[Mon Nov 24 18:39:41.442656 2025] [:error] [pid 48601:tid 48661] [client 172.177.3.143:35773] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/14.php"] [unique_id "aSQ17YMM4MaVTk74-AbEZgAAAgQ"]
[Mon Nov 24 18:39:42.197769 2025] [:error] [pid 16441:tid 16458] [client 172.177.3.143:35572] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aSQ17oq_bc5MOa9HfllOuAAAAI4"]
[Mon Nov 24 18:39:43.069222 2025] [:error] [pid 9630:tid 9645] [client 172.177.3.143:35570] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aSQ17yrSgUgPGkizt2oGvQAAAE0"]
[Mon Nov 24 18:39:44.031517 2025] [:error] [pid 48600:tid 48635] [client 172.177.3.143:35753] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aSQ18PtOzSUAQvWVjBeF0gAAAcU"]
[Mon Nov 24 18:39:44.781903 2025] [:error] [pid 49900:tid 49906] [client 172.177.3.143:35830] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aSQ18DCyPLrvg06aorkf4QAAAAQ"]
[Mon Nov 24 18:39:45.888766 2025] [:error] [pid 49900:tid 49925] [client 172.177.3.143:35691] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aSQ18TCyPLrvg06aorkf5wAAABc"]
[Mon Nov 24 18:39:47.251816 2025] [:error] [pid 9630:tid 9635] [client 172.177.3.143:35687] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aSQ18yrSgUgPGkizt2oGwQAAAEM"]
[Mon Nov 24 18:39:48.870263 2025] [:error] [pid 49900:tid 49920] [client 172.177.3.143:35748] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aSQ19DCyPLrvg06aorkf8gAAABI"]
[Mon Nov 24 18:39:50.143150 2025] [:error] [pid 9630:tid 9640] [client 172.177.3.143:35673] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aSQ19irSgUgPGkizt2oGxAAAAEg"]
[Mon Nov 24 18:39:51.120962 2025] [:error] [pid 16441:tid 16446] [client 172.177.3.143:35568] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sts.php"] [unique_id "aSQ194q_bc5MOa9HfllO5gAAAII"]
[Mon Nov 24 18:39:52.124017 2025] [:error] [pid 48599:tid 48619] [client 172.177.3.143:35589] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sts.php"] [unique_id "aSQ1-Jzvu6PDJiRKE3IwNgAAAZA"]
[Mon Nov 24 18:39:53.045487 2025] [:error] [pid 16549:tid 16566] [client 172.177.3.143:35709] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sts.php"] [unique_id "aSQ1-aeWW19A99PUw_dGNAAAAU4"]
[Mon Nov 24 18:39:54.265325 2025] [:error] [pid 16441:tid 16458] [client 172.177.3.143:35517] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sts.php"] [unique_id "aSQ1-oq_bc5MOa9HfllO-AAAAI4"]
[Mon Nov 24 18:39:55.148298 2025] [:error] [pid 48600:tid 48643] [client 172.177.3.143:35808] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aSQ1-_tOzSUAQvWVjBeF6QAAAc0"]
[Mon Nov 24 18:39:56.269289 2025] [:error] [pid 16441:tid 16445] [client 172.177.3.143:35710] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aSQ1_Iq_bc5MOa9HfllPAQAAAIE"]
[Mon Nov 24 18:39:57.188875 2025] [:error] [pid 16516:tid 16533] [client 172.177.3.143:35727] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aSQ1_fqZbniwaNwL8XnuVQAAAQ4"]
[Mon Nov 24 18:39:58.085329 2025] [:error] [pid 49900:tid 49913] [client 172.177.3.143:35752] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aSQ1_jCyPLrvg06aorkgDQAAAAs"]
[Mon Nov 24 18:39:59.040305 2025] [:error] [pid 48600:tid 48631] [client 172.177.3.143:35674] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aSQ1__tOzSUAQvWVjBeF6wAAAcE"]
[Mon Nov 24 18:40:00.398281 2025] [:error] [pid 16441:tid 16460] [client 172.177.3.143:35772] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aSQ2AIq_bc5MOa9HfllPDQAAAJA"]
[Mon Nov 24 18:40:01.686285 2025] [:error] [pid 49900:tid 49911] [client 172.177.3.143:35707] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aSQ2ATCyPLrvg06aorkgDwAAAAk"]
[Mon Nov 24 18:40:02.723158 2025] [:error] [pid 48688:tid 48703] [client 172.177.3.143:35755] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aSQ2Ahm2q1FkzLam7A2qzwAAAks"]
[Mon Nov 24 18:40:03.615016 2025] [:error] [pid 48601:tid 48670] [client 172.177.3.143:35741] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php8"] [unique_id "aSQ2A4MM4MaVTk74-AbEdAAAAg0"]
[Mon Nov 24 18:40:04.366905 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:35682] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php8"] [unique_id "aSQ2BIq_bc5MOa9HfllPGwAAAIw"]
[Mon Nov 24 18:40:06.543015 2025] [:error] [pid 48600:tid 48638] [client 172.177.3.143:35552] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php8"] [unique_id "aSQ2BvtOzSUAQvWVjBeF7QAAAcg"]
[Mon Nov 24 18:40:07.809434 2025] [:error] [pid 48688:tid 48699] [client 172.177.3.143:35742] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php8"] [unique_id "aSQ2Bxm2q1FkzLam7A2q0AAAAkc"]
[Mon Nov 24 18:40:08.632623 2025] [:error] [pid 9630:tid 9641] [client 172.177.3.143:35818] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aSQ2CCrSgUgPGkizt2oG2gAAAEk"]
[Mon Nov 24 18:40:09.283510 2025] [:error] [pid 48688:tid 48715] [client 172.177.3.143:35705] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aSQ2CRm2q1FkzLam7A2q0QAAAlc"]
[Mon Nov 24 18:40:10.952671 2025] [:error] [pid 49900:tid 49917] [client 172.177.3.143:35665] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aSQ2CjCyPLrvg06aorkgEgAAAA8"]
[Mon Nov 24 18:40:11.683511 2025] [:error] [pid 9630:tid 9650] [client 172.177.3.143:35699] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aSQ2CyrSgUgPGkizt2oG4AAAAFI"]
[Mon Nov 24 18:40:12.650673 2025] [:error] [pid 16441:tid 16456] [client 172.177.3.143:35708] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploxe.php"] [unique_id "aSQ2DIq_bc5MOa9HfllPLQAAAIw"]
[Mon Nov 24 18:40:13.628120 2025] [:error] [pid 9630:tid 9638] [client 172.177.3.143:35675] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploxe.php"] [unique_id "aSQ2DSrSgUgPGkizt2oG5AAAAEY"]
[Mon Nov 24 18:40:14.972065 2025] [:error] [pid 16441:tid 16460] [client 172.177.3.143:35737] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploxe.php"] [unique_id "aSQ2Doq_bc5MOa9HfllPPgAAAJA"]
[Mon Nov 24 18:40:16.051972 2025] [:error] [pid 9630:tid 9644] [client 172.177.3.143:35696] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploxe.php"] [unique_id "aSQ2ECrSgUgPGkizt2oG7AAAAEw"]
[Mon Nov 24 18:40:17.109453 2025] [:error] [pid 16441:tid 16449] [client 172.177.3.143:35629] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ropyx.php"] [unique_id "aSQ2EYq_bc5MOa9HfllPSAAAAIU"]
[Mon Nov 24 18:40:27.378435 2025] [:error] [pid 16441:tid 16454] [client 172.177.3.143:35602] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1wx.php"] [unique_id "aSQ2G4q_bc5MOa9HfllPZQAAAIo"]
[Mon Nov 24 18:40:28.142850 2025] [:error] [pid 16441:tid 16468] [client 172.177.3.143:35778] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1wx.php"] [unique_id "aSQ2HIq_bc5MOa9HfllPaAAAAJg"]
[Mon Nov 24 18:40:29.102346 2025] [:error] [pid 16516:tid 16527] [client 172.177.3.143:35761] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1wx.php"] [unique_id "aSQ2HfqZbniwaNwL8XnuYgAAAQg"]
[Mon Nov 24 18:40:29.809634 2025] [:error] [pid 16593:tid 16606] [client 172.177.3.143:35683] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1wx.php"] [unique_id "aSQ2HRVGznHBJI2LKpRLFgAAAos"]
[Mon Nov 24 18:40:30.430270 2025] [:error] [pid 48600:tid 48635] [client 172.177.3.143:35606] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pagea.php"] [unique_id "aSQ2HvtOzSUAQvWVjBeF8QAAAcU"]
[Mon Nov 24 18:40:31.172885 2025] [:error] [pid 16516:tid 16536] [client 172.177.3.143:35692] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pagea.php"] [unique_id "aSQ2H_qZbniwaNwL8XnuYwAAARE"]
[Mon Nov 24 18:40:31.763669 2025] [:error] [pid 48599:tid 48627] [client 172.177.3.143:35602] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pagea.php"] [unique_id "aSQ2H5zvu6PDJiRKE3IwWQAAAZg"]
[Mon Nov 24 18:40:32.293856 2025] [:error] [pid 48688:tid 48709] [client 172.177.3.143:35464] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pagea.php"] [unique_id "aSQ2IBm2q1FkzLam7A2q2wAAAlE"]
[Mon Nov 24 18:40:32.902746 2025] [:error] [pid 48599:tid 48605] [client 172.177.3.143:35695] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aSQ2IJzvu6PDJiRKE3IwWgAAAYI"]
[Mon Nov 24 18:40:34.030170 2025] [:error] [pid 16516:tid 16535] [client 172.177.3.143:35341] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aSQ2IvqZbniwaNwL8XnuZwAAARA"]
[Mon Nov 24 18:40:34.773622 2025] [:error] [pid 48600:tid 48649] [client 172.177.3.143:35555] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aSQ2IvtOzSUAQvWVjBeF9QAAAdM"]
[Mon Nov 24 18:40:35.751763 2025] [:error] [pid 48600:tid 48647] [client 172.177.3.143:35643] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aSQ2I_tOzSUAQvWVjBeF9gAAAdE"]
[Mon Nov 24 18:40:37.090734 2025] [:error] [pid 9630:tid 9645] [client 172.177.3.143:35479] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lzmelu.php"] [unique_id "aSQ2JSrSgUgPGkizt2oG-AAAAE0"]
[Mon Nov 24 18:40:38.263989 2025] [:error] [pid 9630:tid 9643] [client 172.177.3.143:35831] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lzmelu.php"] [unique_id "aSQ2JirSgUgPGkizt2oG-QAAAEs"]
[Mon Nov 24 18:40:39.730703 2025] [:error] [pid 16593:tid 16599] [client 172.177.3.143:35510] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lzmelu.php"] [unique_id "aSQ2JxVGznHBJI2LKpRLGgAAAoQ"]
[Mon Nov 24 18:40:40.404350 2025] [:error] [pid 16441:tid 16447] [client 172.177.3.143:35811] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lzmelu.php"] [unique_id "aSQ2KIq_bc5MOa9HfllPuAAAAIM"]
[Mon Nov 24 18:40:41.755098 2025] [:error] [pid 48688:tid 48714] [client 172.177.3.143:35764] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpas2.php"] [unique_id "aSQ2KRm2q1FkzLam7A2q4QAAAlY"]
[Mon Nov 24 18:40:43.030479 2025] [:error] [pid 16593:tid 16617] [client 172.177.3.143:35637] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpas2.php"] [unique_id "aSQ2KxVGznHBJI2LKpRLHQAAApY"]
[Mon Nov 24 18:40:45.916537 2025] [:error] [pid 9630:tid 9638] [client 172.177.3.143:35734] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpas2.php"] [unique_id "aSQ2LSrSgUgPGkizt2oG_QAAAEY"]
[Mon Nov 24 18:40:46.463478 2025] [:error] [pid 16516:tid 16525] [client 172.177.3.143:35715] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpas2.php"] [unique_id "aSQ2LvqZbniwaNwL8XnuaQAAAQY"]
[Mon Nov 24 18:40:47.038417 2025] [:error] [pid 16549:tid 16554] [client 172.177.3.143:35781] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sss.php"] [unique_id "aSQ2L6eWW19A99PUw_dGSwAAAUI"]
[Mon Nov 24 18:40:48.153672 2025] [:error] [pid 48599:tid 48620] [client 172.177.3.143:35677] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sss.php"] [unique_id "aSQ2MJzvu6PDJiRKE3IwXgAAAZE"]
[Mon Nov 24 18:40:49.052908 2025] [:error] [pid 48600:tid 48640] [client 172.177.3.143:35834] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sss.php"] [unique_id "aSQ2MftOzSUAQvWVjBeF-QAAAco"]
[Mon Nov 24 18:40:50.075458 2025] [:error] [pid 48599:tid 48609] [client 172.177.3.143:35823] [client 172.177.3.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sss.php"] [unique_id "aSQ2Mpzvu6PDJiRKE3IwXwAAAYY"]
[Mon Nov 24 19:26:27.453711 2025] [autoindex:error] [pid 48601:tid 48659] [client 104.208.164.183:2992] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Mon Nov 24 19:26:29.107920 2025] [autoindex:error] [pid 48601:tid 48677] [client 104.208.164.183:6595] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Mon Nov 24 19:26:34.294835 2025] [autoindex:error] [pid 48601:tid 48665] [client 104.208.164.183:2992] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/vendor/phpunit/phpunit/src/Util/PHP/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Mon Nov 24 19:26:35.289136 2025] [autoindex:error] [pid 48601:tid 48661] [client 104.208.164.183:2992] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Mon Nov 24 19:26:37.815015 2025] [authz_core:error] [pid 48601:tid 48659] [client 104.208.164.183:6595] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/, referer: https://www.google.fr/
[Mon Nov 24 19:41:41.114300 2025] [:error] [pid 48600:tid 48639] [client 43.130.71.237:34606] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSREdftOzSUAQvWVjBeQ8gAAAck"]
[Mon Nov 24 20:42:26.473460 2025] [autoindex:error] [pid 16516:tid 16534] [client 54.88.25.47:64518] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Nov 24 20:57:29.109765 2025] [:error] [pid 48601:tid 48662] [client 4.233.64.129:51541] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSRWOYMM4MaVTk74-Abd0wAAAgU"]
[Mon Nov 24 20:57:35.788833 2025] [:error] [pid 48600:tid 48636] [client 4.233.64.129:29443] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSRWP_tOzSUAQvWVjBebOAAAAcY"]
[Mon Nov 24 21:45:37.692130 2025] [:error] [pid 9630:tid 9638] [client 193.32.126.212:53601] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSRhgSrSgUgPGkizt2o4NwAAAEY"]
[Mon Nov 24 21:45:38.186829 2025] [:error] [pid 16593:tid 16595] [client 193.32.126.212:54301] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSRhghVGznHBJI2LKpRr6wAAAoA"]
[Mon Nov 24 21:45:38.702902 2025] [:error] [pid 48688:tid 48704] [client 193.32.126.212:54866] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhghm2q1FkzLam7A3PzwAAAkw"]
[Mon Nov 24 23:33:43.303311 2025] [:error] [pid 16593:tid 16611] [client 123.187.240.242:35403] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSR61xVGznHBJI2LKpR8NwAAApA"]
[Tue Nov 25 01:18:09.582640 2025] [autoindex:error] [pid 48600:tid 48647] [client 54.88.25.47:55298] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 25 01:58:06.676975 2025] [:error] [pid 48688:tid 48708] [client 159.203.89.146:33238] [client 159.203.89.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSScrhm2q1FkzLam7A37JwAAAlA"]
[Tue Nov 25 02:17:54.691711 2025] [:error] [pid 48601:tid 48672] [client 167.172.246.101:58530] [client 167.172.246.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSShUoMM4MaVTk74-AYbXAAAAg8"]
[Tue Nov 25 03:33:43.148417 2025] [:error] [pid 30780:tid 30807] [client 101.33.81.73:36868] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSSzF2bsLALS6sUpHIfD0QAAAA8"]
[Tue Nov 25 03:43:58.854278 2025] [:error] [pid 61433:tid 61508] [client 159.203.89.146:60646] [client 159.203.89.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSS1fk1nb5r2eDXSMnS0yAAAAIs"]
[Tue Nov 25 04:23:40.436949 2025] [:error] [pid 14168:tid 14195] [client 167.172.246.101:53498] [client 167.172.246.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSS-zPR-ZDU0QEgAIItWcAAAANg"]
[Tue Nov 25 04:28:22.803086 2025] [:error] [pid 14688:tid 14704] [client 198.46.154.59:59842] [client 198.46.154.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aSS_5m9vYrBoEsiDnizQjAAAAQ4"]
[Tue Nov 25 04:28:44.474331 2025] [:error] [pid 14168:tid 14187] [client 198.46.154.59:60043] [client 198.46.154.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aSS__PR-ZDU0QEgAIItYegAAANA"]
[Tue Nov 25 05:55:37.949393 2025] [:error] [pid 14168:tid 14178] [client 106.227.49.113:50028] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSTUWfR-ZDU0QEgAIIt5SwAAAMc"]
[Tue Nov 25 10:05:39.727467 2025] [:error] [pid 14077:tid 14133] [client 189.37.72.79:17474] [client 189.37.72.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.37.72.79, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSUO8xG9n7UHEkwDTyi0DAAAAFc"]
[Tue Nov 25 12:00:38.526884 2025] [:error] [pid 28739:tid 28765] [client 43.157.147.3:59748] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSUp5hxGpKmlkG4FexQQuAAAAgM"]
[Tue Nov 25 16:59:46.592366 2025] [:error] [pid 14168:tid 14182] [client 101.33.80.42:33220] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSVwAvR-ZDU0QEgAIItD_wAAAMs"]
[Tue Nov 25 17:12:42.052631 2025] [:error] [pid 28740:tid 28809] [client 54.173.250.15:56920] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSVzClppQCoYxWW6V0VSxgAAAlI"]
[Tue Nov 25 18:47:51.385852 2025] [:error] [pid 28836:tid 28968] [client 180.102.134.69:54436] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSWJV5wNRsoxcLQGkTe1GAAAAs0"]
[Tue Nov 25 18:52:46.287235 2025] [:error] [pid 14076:tid 14086] [client 138.199.60.187:35138] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSWKfnsB4Gz6Qw-pvBsJqgAAAAU"]
[Tue Nov 25 18:52:47.225496 2025] [:error] [pid 28609:tid 28625] [client 138.199.60.187:35582] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSWKfyGGdT-nZJVs3x24XQAAAYc"]
[Tue Nov 25 18:52:48.288105 2025] [:error] [pid 28836:tid 29014] [client 138.199.60.187:35674] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSWKgJwNRsoxcLQGkTe2uwAAAtg"]
[Tue Nov 25 18:52:49.261725 2025] [:error] [pid 2987:tid 3000] [client 138.199.60.187:60302] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSWKgc-djEt-pTzPxnyTSgAAAUs"]
[Tue Nov 25 18:52:52.246777 2025] [:error] [pid 28842:tid 28997] [client 138.199.60.187:60426] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSWKhNNmoaPf6T4-6C2DGgAAA0c"]
[Tue Nov 25 18:52:52.658806 2025] [:error] [pid 28842:tid 29001] [client 138.199.60.187:60830] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSWKhNNmoaPf6T4-6C2DHAAAA0s"]
[Tue Nov 25 18:52:52.907847 2025] [:error] [pid 14168:tid 14180] [client 138.199.60.187:60902] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSWKhPR-ZDU0QEgAIItbnQAAAMk"]
[Tue Nov 25 18:52:53.184698 2025] [:error] [pid 28842:tid 28990] [client 138.199.60.187:60966] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSWKhdNmoaPf6T4-6C2DHQAAA0A"]
[Tue Nov 25 18:52:53.459363 2025] [:error] [pid 28609:tid 28634] [client 138.199.60.187:32780] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSWKhSGGdT-nZJVs3x24fQAAAZA"]
[Tue Nov 25 18:52:53.729308 2025] [:error] [pid 14077:tid 14126] [client 138.199.60.187:32816] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSWKhRG9n7UHEkwDTyh9fQAAAFA"]
[Tue Nov 25 18:52:54.144328 2025] [:error] [pid 14077:tid 14110] [client 138.199.60.187:32856] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSWKhhG9n7UHEkwDTyh9ggAAAEA"]
[Tue Nov 25 18:52:54.699405 2025] [:error] [pid 28740:tid 28806] [client 138.199.60.187:32920] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aSWKhlppQCoYxWW6V0Vx8gAAAk8"]
[Tue Nov 25 18:52:55.257567 2025] [:error] [pid 28836:tid 29008] [client 138.199.60.187:33030] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSWKh5wNRsoxcLQGkTe27gAAAtI"]
[Tue Nov 25 18:52:55.632608 2025] [:error] [pid 28836:tid 29012] [client 138.199.60.187:33196] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSWKh5wNRsoxcLQGkTe28gAAAtY"]
[Tue Nov 25 18:52:56.064854 2025] [:error] [pid 28842:tid 28998] [client 138.199.60.187:33272] [client 138.199.60.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSWKiNNmoaPf6T4-6C2DNQAAA0g"]
[Tue Nov 25 18:52:57.586730 2025] [:error] [pid 2987:tid 3003] [client 138.199.60.187:33760] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSWKic-djEt-pTzPxnyTpgAAAU4"]
[Tue Nov 25 18:52:57.819680 2025] [:error] [pid 14078:tid 14149] [client 138.199.60.187:33906] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSWKidVXYbb0ii_rVoI3gAAAAIw"]
[Tue Nov 25 18:52:58.076382 2025] [:error] [pid 28836:tid 28965] [client 138.199.60.187:40832] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSWKipwNRsoxcLQGkTe3DwAAAso"]
[Tue Nov 25 18:52:58.529611 2025] [:error] [pid 28740:tid 28798] [client 138.199.60.187:41012] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSWKilppQCoYxWW6V0VyGwAAAkc"]
[Tue Nov 25 18:52:58.796800 2025] [:error] [pid 28836:tid 28966] [client 138.199.60.187:41104] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSWKipwNRsoxcLQGkTe3EwAAAss"]
[Tue Nov 25 18:52:59.041310 2025] [:error] [pid 28842:tid 29021] [client 138.199.60.187:41206] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKi9NmoaPf6T4-6C2DSQAAA1M"]
[Tue Nov 25 18:52:59.320039 2025] [:error] [pid 28740:tid 28794] [client 138.199.60.187:41292] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKi1ppQCoYxWW6V0VyKQAAAkM"]
[Tue Nov 25 18:52:59.567683 2025] [:error] [pid 28842:tid 29017] [client 138.199.60.187:41434] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKi9NmoaPf6T4-6C2DWAAAA1A"]
[Tue Nov 25 18:53:00.045208 2025] [:error] [pid 14076:tid 14092] [client 138.199.60.187:41586] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKjHsB4Gz6Qw-pvBsJ6gAAAAs"]
[Tue Nov 25 18:53:01.328767 2025] [:error] [pid 28609:tid 28642] [client 138.199.60.187:42022] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKjSGGdT-nZJVs3x24rgAAAZg"]
[Tue Nov 25 20:49:11.166983 2025] [:error] [pid 14168:tid 14184] [client 4.251.107.128:52989] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSWlx_R-ZDU0QEgAIIt82QAAAM0"]
[Tue Nov 25 20:49:14.107679 2025] [:error] [pid 28609:tid 28640] [client 4.251.107.128:52942] [client 4.251.107.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSWlyiGGdT-nZJVs3x3ZigAAAZY"]
[Tue Nov 25 22:02:36.704084 2025] [:error] [pid 43843:tid 43851] [client 43.166.246.180:38532] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSW2_Bhx4v3NUNdMKDP8SwAAAcY"]
[Tue Nov 25 23:37:35.044576 2025] [autoindex:error] [pid 43843:tid 43856] [client 139.59.30.253:64345] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 01:21:38.084265 2025] [:error] [pid 14078:tid 14158] [client 213.21.239.4:35034] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/database/.git/config"] [unique_id "aSXlotVXYbb0ii_rVoLo7AAAAJU"]
[Wed Nov 26 01:21:38.095158 2025] [:error] [pid 14076:tid 14084] [client 213.21.239.4:35056] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/..;/.git/config"] [unique_id "aSXlonsB4Gz6Qw-pvBuF1AAAAAM"]
[Wed Nov 26 01:21:38.107123 2025] [:error] [pid 28739:tid 28780] [client 213.21.239.4:35198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/dev/.git/config"] [unique_id "aSXlohxGpKmlkG4FexT9QQAAAhI"]
[Wed Nov 26 01:21:38.112679 2025] [:error] [pid 43981:tid 43988] [client 213.21.239.4:35098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.git/config"] [unique_id "aSXloggZn97m_qh_RaGcrwAAAwU"]
[Wed Nov 26 01:21:38.114882 2025] [:error] [pid 14078:tid 14153] [client 213.21.239.4:35122] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/.git/%0Aconfig"] [unique_id "aSXlotVXYbb0ii_rVoLo7QAAAJA"]
[Wed Nov 26 01:21:38.116314 2025] [:error] [pid 43981:tid 43984] [client 213.21.239.4:35124] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets../.git/config"] [unique_id "aSXloggZn97m_qh_RaGcsAAAAwE"]
[Wed Nov 26 01:21:38.116905 2025] [:error] [pid 43843:tid 43868] [client 213.21.239.4:35126] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/application/.git/config"] [unique_id "aSXlohhx4v3NUNdMKDMlSwAAAdc"]
[Wed Nov 26 01:21:38.118819 2025] [:error] [pid 43843:tid 43862] [client 213.21.239.4:35188] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backup/.git/config"] [unique_id "aSXlohhx4v3NUNdMKDMlTAAAAdE"]
[Wed Nov 26 01:21:38.119460 2025] [:error] [pid 43843:tid 43846] [client 213.21.239.4:35200] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/common/.git/config"] [unique_id "aSXlohhx4v3NUNdMKDMlTQAAAcE"]
[Wed Nov 26 01:21:38.122605 2025] [:error] [pid 28609:tid 28618] [client 213.21.239.4:35206] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause../.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0vfwAAAYA"]
[Wed Nov 26 01:21:38.124011 2025] [:error] [pid 14168:tid 14191] [client 213.21.239.4:35204] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/.git/config;"] [unique_id "aSXlovR-ZDU0QEgAIIvCEQAAANQ"]
[Wed Nov 26 01:21:38.135800 2025] [:error] [pid 28609:tid 28621] [client 213.21.239.4:35086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/css../.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0vgwAAAYM"]
[Wed Nov 26 01:21:38.136301 2025] [:error] [pid 14078:tid 14151] [client 213.21.239.4:35052] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/developer/.git/config"] [unique_id "aSXlotVXYbb0ii_rVoLo7wAAAI4"]
[Wed Nov 26 01:21:38.139120 2025] [:error] [pid 14077:tid 14111] [client 213.21.239.4:35172] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/.git/config"] [unique_id "aSXlohG9n7UHEkwDTygKOgAAAEE"]
[Wed Nov 26 01:21:38.139781 2025] [:error] [pid 14076:tid 14094] [client 213.21.239.4:35222] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/;/.git/config"] [unique_id "aSXlonsB4Gz6Qw-pvBuF1gAAAA0"]
[Wed Nov 26 01:21:38.140393 2025] [:error] [pid 43981:tid 43996] [client 213.21.239.4:35220] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.git/config"] [unique_id "aSXloggZn97m_qh_RaGcsQAAAw0"]
[Wed Nov 26 01:21:38.141756 2025] [:error] [pid 43981:tid 43992] [client 213.21.239.4:35120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/static../.git/config"] [unique_id "aSXloggZn97m_qh_RaGcsgAAAwk"]
[Wed Nov 26 01:21:38.142137 2025] [:error] [pid 28836:tid 28959] [client 213.21.239.4:35256] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.git/config"] [unique_id "aSXlopwNRsoxcLQGkTciIwAAAsQ"]
[Wed Nov 26 01:21:38.150949 2025] [:error] [pid 2987:tid 2995] [client 213.21.239.4:35252] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/.git/config;.."] [unique_id "aSXlos-djEt-pTzPxnwFWAAAAUY"]
[Wed Nov 26 01:21:38.151988 2025] [:error] [pid 43981:tid 43993] [client 213.21.239.4:35178] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/content../.git/config"] [unique_id "aSXloggZn97m_qh_RaGctAAAAwo"]
[Wed Nov 26 01:21:41.387342 2025] [:error] [pid 14078:tid 14152] [client 213.21.239.4:35652] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/js../.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLo-AAAAI8"]
[Wed Nov 26 01:21:41.388241 2025] [:error] [pid 14078:tid 14161] [client 213.21.239.4:35514] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git/%0Aconfig"] [unique_id "aSXlpdVXYbb0ii_rVoLo-QAAAJg"]
[Wed Nov 26 01:21:41.392216 2025] [:error] [pid 14078:tid 14146] [client 213.21.239.4:35566] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/..;/.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLo-wAAAIk"]
[Wed Nov 26 01:21:41.397631 2025] [:error] [pid 14078:tid 14137] [client 213.21.239.4:35806] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/;/.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLo_wAAAIA"]
[Wed Nov 26 01:21:41.397845 2025] [:error] [pid 14078:tid 14158] [client 213.21.239.4:35618] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLpAAAAAJU"]
[Wed Nov 26 01:21:41.411729 2025] [:error] [pid 28609:tid 28629] [client 213.21.239.4:35868] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/;/.git/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vjAAAAYs"]
[Wed Nov 26 01:21:41.412890 2025] [:error] [pid 14078:tid 14147] [client 213.21.239.4:35550] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au../.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLpBgAAAIo"]
[Wed Nov 26 01:21:41.416224 2025] [:error] [pid 14078:tid 14141] [client 213.21.239.4:35870] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/images../.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLpBwAAAIQ"]
[Wed Nov 26 01:21:41.418524 2025] [:error] [pid 14078:tid 14145] [client 213.21.239.4:35714] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config;.."] [unique_id "aSXlpdVXYbb0ii_rVoLpCQAAAIg"]
[Wed Nov 26 01:21:41.419137 2025] [:error] [pid 14077:tid 14116] [client 213.21.239.4:35606] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/img../.git/config"] [unique_id "aSXlpRG9n7UHEkwDTygKQgAAAEY"]
[Wed Nov 26 01:21:41.421160 2025] [:error] [pid 14077:tid 14126] [client 213.21.239.4:35780] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.git;/config;"] [unique_id "aSXlpRG9n7UHEkwDTygKQwAAAFA"]
[Wed Nov 26 01:21:41.421792 2025] [:error] [pid 28836:tid 28967] [client 213.21.239.4:35894] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.git;/config"] [unique_id "aSXlpZwNRsoxcLQGkTciKgAAAsw"]
[Wed Nov 26 01:21:41.422694 2025] [:error] [pid 14077:tid 14122] [client 213.21.239.4:35670] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config;"] [unique_id "aSXlpRG9n7UHEkwDTygKRQAAAEw"]
[Wed Nov 26 01:21:41.423206 2025] [:error] [pid 14078:tid 14154] [client 213.21.239.4:35756] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/message-api/.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLpCgAAAJE"]
[Wed Nov 26 01:21:41.428364 2025] [:error] [pid 14077:tid 14119] [client 213.21.239.4:35704] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib../.git/config"] [unique_id "aSXlpRG9n7UHEkwDTygKRgAAAEk"]
[Wed Nov 26 01:21:41.431467 2025] [:error] [pid 14077:tid 14121] [client 213.21.239.4:35846] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git/config;.."] [unique_id "aSXlpRG9n7UHEkwDTygKRwAAAEs"]
[Wed Nov 26 01:21:41.432140 2025] [:error] [pid 28609:tid 28635] [client 213.21.239.4:35842] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git/config;"] [unique_id "aSXlpSGGdT-nZJVs3x0vjQAAAZE"]
[Wed Nov 26 01:21:41.433641 2025] [:error] [pid 28609:tid 28640] [client 213.21.239.4:35958] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vjwAAAZY"]
[Wed Nov 26 01:21:41.436368 2025] [:error] [pid 14076:tid 14087] [client 213.21.239.4:35720] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/live/.git/config"] [unique_id "aSXlpXsB4Gz6Qw-pvBuF2gAAAAY"]
[Wed Nov 26 01:21:41.439670 2025] [:error] [pid 43981:tid 44000] [client 213.21.239.4:35860] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/git/.git/config"] [unique_id "aSXlpQgZn97m_qh_RaGctgAAAxE"]
[Wed Nov 26 01:21:41.444420 2025] [:error] [pid 28739:tid 28779] [client 213.21.239.4:35944] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/..;/.git/config"] [unique_id "aSXlpRxGpKmlkG4FexT9SwAAAhE"]
[Wed Nov 26 01:21:41.445030 2025] [:error] [pid 14168:tid 14173] [client 213.21.239.4:36006] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/static../.git/config"] [unique_id "aSXlpfR-ZDU0QEgAIIvCFQAAAMI"]
[Wed Nov 26 01:21:41.445948 2025] [:error] [pid 28609:tid 28618] [client 213.21.239.4:35812] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/m/.git/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vkQAAAYA"]
[Wed Nov 26 01:21:41.448318 2025] [:error] [pid 28609:tid 28630] [client 213.21.239.4:35850] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git;/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vkgAAAYw"]
[Wed Nov 26 01:21:41.465235 2025] [:error] [pid 28609:tid 28636] [client 213.21.239.4:35918] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSXlpSGGdT-nZJVs3x0vlwAAAZI"]
[Wed Nov 26 01:21:43.455936 2025] [:error] [pid 14078:tid 14150] [client 213.21.239.4:57308] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.git;/config"] [unique_id "aSXlp9VXYbb0ii_rVoLpEAAAAI0"]
[Wed Nov 26 01:21:43.458649 2025] [:error] [pid 14078:tid 14147] [client 213.21.239.4:57318] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.git;/config;"] [unique_id "aSXlp9VXYbb0ii_rVoLpEQAAAIo"]
[Wed Nov 26 01:21:43.507270 2025] [:error] [pid 14078:tid 14143] [client 213.21.239.4:57320] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git;/config"] [unique_id "aSXlp9VXYbb0ii_rVoLpEwAAAIY"]
[Wed Nov 26 01:21:44.386206 2025] [:error] [pid 14168:tid 14184] [client 213.21.239.4:57378] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config;"] [unique_id "aSXlqPR-ZDU0QEgAIIvCHQAAAM0"]
[Wed Nov 26 01:21:44.401619 2025] [:error] [pid 43843:tid 43858] [client 213.21.239.4:57688] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.git/config"] [unique_id "aSXlqBhx4v3NUNdMKDMlWAAAAc0"]
[Wed Nov 26 01:21:44.415063 2025] [:error] [pid 43843:tid 43847] [client 213.21.239.4:57658] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git/config"] [unique_id "aSXlqBhx4v3NUNdMKDMlWgAAAcI"]
[Wed Nov 26 01:21:44.418311 2025] [:error] [pid 28739:tid 28769] [client 213.21.239.4:57546] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/..;/.git/config"] [unique_id "aSXlqBxGpKmlkG4FexT9VAAAAgc"]
[Wed Nov 26 01:21:44.418360 2025] [:error] [pid 14077:tid 14116] [client 213.21.239.4:57886] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/static../.git/config"] [unique_id "aSXlqBG9n7UHEkwDTygKVAAAAEY"]
[Wed Nov 26 01:21:44.422723 2025] [:error] [pid 28836:tid 28965] [client 213.21.239.4:57826] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au../.git/config"] [unique_id "aSXlqJwNRsoxcLQGkTciOgAAAso"]
[Wed Nov 26 01:21:44.428702 2025] [:error] [pid 43843:tid 43867] [client 213.21.239.4:57670] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSXlqBhx4v3NUNdMKDMlWwAAAdY"]
[Wed Nov 26 01:21:44.439597 2025] [:error] [pid 43981:tid 43983] [client 213.21.239.4:57704] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git/config;"] [unique_id "aSXlqAgZn97m_qh_RaGctwAAAwA"]
[Wed Nov 26 01:21:44.442476 2025] [:error] [pid 43843:tid 43857] [client 213.21.239.4:57612] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au../config"] [unique_id "aSXlqBhx4v3NUNdMKDMlXQAAAcw"]
[Wed Nov 26 01:21:44.443405 2025] [:error] [pid 28739:tid 28771] [client 213.21.239.4:57780] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git/%0Aconfig"] [unique_id "aSXlqBxGpKmlkG4FexT9WQAAAgk"]
[Wed Nov 26 01:21:44.444282 2025] [:error] [pid 28739:tid 28782] [client 213.21.239.4:57776] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSXlqBxGpKmlkG4FexT9WgAAAhQ"]
[Wed Nov 26 01:21:44.446617 2025] [:error] [pid 28836:tid 28968] [client 213.21.239.4:57844] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git;/config"] [unique_id "aSXlqJwNRsoxcLQGkTciPQAAAs0"]
[Wed Nov 26 01:21:44.446791 2025] [:error] [pid 43843:tid 43863] [client 213.21.239.4:57638] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/prod/.git/config"] [unique_id "aSXlqBhx4v3NUNdMKDMlXgAAAdI"]
[Wed Nov 26 01:21:44.446823 2025] [:error] [pid 14168:tid 14185] [client 213.21.239.4:57820] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/new/.git/config"] [unique_id "aSXlqPR-ZDU0QEgAIIvCIAAAAM4"]
[Wed Nov 26 01:21:44.449921 2025] [:error] [pid 2987:tid 3012] [client 213.21.239.4:57856] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/;/.git/config"] [unique_id "aSXlqM-djEt-pTzPxnwFYgAAAVc"]
[Wed Nov 26 01:21:44.450105 2025] [:error] [pid 28609:tid 28622] [client 213.21.239.4:57938] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/..;/.git/config"] [unique_id "aSXlqCGGdT-nZJVs3x0voQAAAYQ"]
[Wed Nov 26 01:21:44.455614 2025] [:error] [pid 2987:tid 3002] [client 213.21.239.4:57960] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config"] [unique_id "aSXlqM-djEt-pTzPxnwFYwAAAU0"]
[Wed Nov 26 01:21:44.459598 2025] [:error] [pid 28836:tid 28959] [client 213.21.239.4:57786] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git/config;.."] [unique_id "aSXlqJwNRsoxcLQGkTciPwAAAsQ"]
[Wed Nov 26 01:21:44.461263 2025] [:error] [pid 28836:tid 28967] [client 213.21.239.4:57864] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/config"] [unique_id "aSXlqJwNRsoxcLQGkTciQAAAAsw"]
[Wed Nov 26 01:21:44.462022 2025] [:error] [pid 2987:tid 3001] [client 213.21.239.4:57892] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/../config"] [unique_id "aSXlqM-djEt-pTzPxnwFZAAAAUw"]
[Wed Nov 26 01:21:44.463355 2025] [:error] [pid 28836:tid 28962] [client 213.21.239.4:57928] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/qa/.git/config"] [unique_id "aSXlqJwNRsoxcLQGkTciQQAAAsc"]
[Wed Nov 26 01:21:44.465701 2025] [:error] [pid 43843:tid 43855] [client 213.21.239.4:57814] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/../.git/config"] [unique_id "aSXlqBhx4v3NUNdMKDMlYAAAAco"]
[Wed Nov 26 01:21:46.385637 2025] [:error] [pid 14078:tid 14151] [client 213.21.239.4:58022] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/;/.git/config"] [unique_id "aSXlqtVXYbb0ii_rVoLpHAAAAI4"]
[Wed Nov 26 01:21:46.401203 2025] [:error] [pid 14168:tid 14179] [client 213.21.239.4:58080] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config;.."] [unique_id "aSXlqvR-ZDU0QEgAIIvCIgAAAMg"]
[Wed Nov 26 01:21:46.404698 2025] [:error] [pid 28739:tid 28764] [client 213.21.239.4:58064] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.git;/config"] [unique_id "aSXlqhxGpKmlkG4FexT9XAAAAgI"]
[Wed Nov 26 01:21:46.475116 2025] [:error] [pid 2987:tid 2992] [client 213.21.239.4:58174] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config"] [unique_id "aSXlqs-djEt-pTzPxnwFZgAAAUM"]
[Wed Nov 26 01:21:46.482067 2025] [:error] [pid 43843:tid 43847] [client 213.21.239.4:58222] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/config"] [unique_id "aSXlqhhx4v3NUNdMKDMlZgAAAcI"]
[Wed Nov 26 01:21:46.484242 2025] [:error] [pid 28836:tid 28956] [client 213.21.239.4:58202] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.git;/config"] [unique_id "aSXlqpwNRsoxcLQGkTciQwAAAsE"]
[Wed Nov 26 01:21:46.485294 2025] [:error] [pid 14078:tid 14139] [client 213.21.239.4:58206] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au../config"] [unique_id "aSXlqtVXYbb0ii_rVoLpJAAAAII"]
[Wed Nov 26 01:21:46.501937 2025] [:error] [pid 14078:tid 14148] [client 213.21.239.4:58234] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/../config"] [unique_id "aSXlqtVXYbb0ii_rVoLpJQAAAIs"]
[Wed Nov 26 01:21:47.395804 2025] [:error] [pid 14076:tid 14088] [client 213.21.239.4:58264] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/static../.git/config"] [unique_id "aSXlq3sB4Gz6Qw-pvBuF2wAAAAc"]
[Wed Nov 26 01:21:47.398738 2025] [:error] [pid 43843:tid 43866] [client 213.21.239.4:58384] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/uat/.git/config"] [unique_id "aSXlqxhx4v3NUNdMKDMlZwAAAdU"]
[Wed Nov 26 01:21:47.400772 2025] [:error] [pid 28836:tid 28957] [client 213.21.239.4:58450] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web/.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciRwAAAsI"]
[Wed Nov 26 01:21:47.419507 2025] [:error] [pid 14076:tid 14099] [client 213.21.239.4:58420] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSXlq3sB4Gz6Qw-pvBuF3AAAABI"]
[Wed Nov 26 01:21:47.430770 2025] [:error] [pid 28836:tid 28966] [client 213.21.239.4:58440] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/staging/.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciTAAAAss"]
[Wed Nov 26 01:21:47.431994 2025] [:error] [pid 28836:tid 28968] [client 213.21.239.4:58460] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciTQAAAs0"]
[Wed Nov 26 01:21:47.432191 2025] [:error] [pid 14076:tid 14097] [client 213.21.239.4:58280] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/static../.git/config"] [unique_id "aSXlq3sB4Gz6Qw-pvBuF3QAAABA"]
[Wed Nov 26 01:21:47.433836 2025] [:error] [pid 14076:tid 14090] [client 213.21.239.4:58442] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSXlq3sB4Gz6Qw-pvBuF3gAAAAk"]
[Wed Nov 26 01:21:48.435513 2025] [:error] [pid 14078:tid 14144] [client 213.21.239.4:58472] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.git;/config"] [unique_id "aSXlrNVXYbb0ii_rVoLpKgAAAIc"]
[Wed Nov 26 01:31:30.062480 2025] [:error] [pid 28609:tid 28624] [client 182.42.111.156:44175] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSXn8iGGdT-nZJVs3x0xdQAAAYY"]
[Wed Nov 26 02:41:21.489334 2025] [:error] [pid 14078:tid 14158] [client 54.173.250.15:55058] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSX4UdVXYbb0ii_rVoIC0AAAAJU"]
[Wed Nov 26 10:57:48.103358 2025] [:error] [pid 10383:tid 10391] [client 170.106.15.3:48442] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSZsrK0RJ-zjhOVjD8-WlAAAAcU"]
[Wed Nov 26 14:03:32.659996 2025] [:error] [pid 34742:tid 34753] [client 139.59.30.253:58506] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aSaYNJSuLNwpQF_jzAdFCQAAAEU"], referer: binance.com
[Wed Nov 26 18:05:54.313692 2025] [:error] [pid 45683:tid 45706] [client 146.70.186.204:46326] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSbRAhX1gQgNFW_222qYlwAAAVI"]
[Wed Nov 26 18:05:55.351287 2025] [:error] [pid 45684:tid 45725] [client 146.70.186.204:3630] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSbRA_g5LMxwI4-PD1cnjQAAAAo"]
[Wed Nov 26 18:05:57.008283 2025] [:error] [pid 45769:tid 45794] [client 146.70.186.204:46490] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSbRBVdG5Eht9c3yy4MRZgAAAdY"]
[Wed Nov 26 18:05:58.086861 2025] [:error] [pid 6471:tid 6495] [client 146.70.186.204:46506] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSbRBuh3Z9TZLlRuTiN5DgAAAJU"]
[Wed Nov 26 18:05:59.740154 2025] [:error] [pid 46443:tid 46455] [client 146.70.186.204:46520] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSbRB8LmDsnHrj-QFB_F6QAAAEo"]
[Wed Nov 26 18:06:00.358981 2025] [:error] [pid 45684:tid 45724] [client 146.70.186.204:46522] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSbRCPg5LMxwI4-PD1cnkgAAAAk"]
[Wed Nov 26 18:06:00.768626 2025] [:error] [pid 45683:tid 45689] [client 146.70.186.204:46528] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSbRCBX1gQgNFW_222qYogAAAUE"]
[Wed Nov 26 18:06:01.176312 2025] [:error] [pid 46443:tid 46464] [client 146.70.186.204:44552] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSbRCcLmDsnHrj-QFB_F8wAAAFM"]
[Wed Nov 26 18:06:01.588752 2025] [:error] [pid 6471:tid 6486] [client 146.70.186.204:44554] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSbRCeh3Z9TZLlRuTiN5EQAAAIw"]
[Wed Nov 26 18:06:01.996429 2025] [:error] [pid 46443:tid 46455] [client 146.70.186.204:44558] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSbRCcLmDsnHrj-QFB_F-AAAAEo"]
[Wed Nov 26 18:06:02.615965 2025] [:error] [pid 46443:tid 46450] [client 146.70.186.204:44574] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSbRCsLmDsnHrj-QFB_F-wAAAEU"]
[Wed Nov 26 18:06:03.470877 2025] [:error] [pid 20733:tid 20758] [client 146.70.186.204:44582] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aSbRCwV9EP2HuRvnH8dF3QAAANc"]
[Wed Nov 26 18:06:04.293670 2025] [:error] [pid 45683:tid 45710] [client 146.70.186.204:44592] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSbRDBX1gQgNFW_222qYqgAAAVY"]
[Wed Nov 26 18:06:04.913698 2025] [:error] [pid 45684:tid 45727] [client 146.70.186.204:44600] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSbRDPg5LMxwI4-PD1cnlwAAAAw"]
[Wed Nov 26 18:06:05.526767 2025] [:error] [pid 45769:tid 45772] [client 146.70.186.204:44610] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSbRDVdG5Eht9c3yy4MRggAAAcA"]
[Wed Nov 26 18:06:07.179004 2025] [:error] [pid 45684:tid 45732] [client 146.70.186.204:44614] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSbRD_g5LMxwI4-PD1cnnwAAABE"]
[Wed Nov 26 18:06:07.792895 2025] [:error] [pid 46443:tid 46467] [client 146.70.186.204:44622] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSbRD8LmDsnHrj-QFB_GAgAAAFY"]
[Wed Nov 26 18:06:08.615892 2025] [:error] [pid 46443:tid 46458] [client 146.70.186.204:44624] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSbREMLmDsnHrj-QFB_GBQAAAE0"]
[Wed Nov 26 18:06:09.228989 2025] [:error] [pid 6471:tid 6483] [client 146.70.186.204:44640] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSbREeh3Z9TZLlRuTiN5FgAAAIk"]
[Wed Nov 26 18:06:10.468662 2025] [:error] [pid 45683:tid 45694] [client 146.70.186.204:44648] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSbREhX1gQgNFW_222qYuAAAAUY"]
[Wed Nov 26 18:06:11.083862 2025] [:error] [pid 45769:tid 45786] [client 146.70.186.204:44664] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSbRE1dG5Eht9c3yy4MRhQAAAc4"]
[Wed Nov 26 18:06:11.701253 2025] [:error] [pid 45769:tid 45779] [client 146.70.186.204:59248] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSbRE1dG5Eht9c3yy4MRiAAAAcc"]
[Wed Nov 26 18:06:12.106960 2025] [:error] [pid 45685:tid 45761] [client 146.70.186.204:59260] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSbRFFj3f_NRdgU0DQ7GiQAAARM"]
[Wed Nov 26 18:06:12.515048 2025] [:error] [pid 45769:tid 45785] [client 146.70.186.204:11689] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSbRFFdG5Eht9c3yy4MRigAAAc0"]
[Wed Nov 26 18:06:14.946451 2025] [:error] [pid 20733:tid 20737] [client 146.70.186.204:59276] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSbRFgV9EP2HuRvnH8dF4wAAAMI"]
[Wed Nov 26 18:06:17.260522 2025] [:error] [pid 46443:tid 46445] [client 146.70.186.204:59288] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSbRGcLmDsnHrj-QFB_GCQAAAEA"]
[Wed Nov 26 18:06:18.722101 2025] [:error] [pid 45769:tid 45787] [client 146.70.186.204:59300] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSbRGldG5Eht9c3yy4MRogAAAc8"]
[Wed Nov 26 18:06:21.912190 2025] [:error] [pid 6471:tid 6493] [client 146.70.186.204:59302] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSbRHeh3Z9TZLlRuTiN5NAAAAJM"]
[Wed Nov 26 18:06:23.784168 2025] [:error] [pid 45684:tid 45736] [client 146.70.186.204:37194] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSbRH_g5LMxwI4-PD1coXAAAABU"]
[Wed Nov 26 18:06:26.283708 2025] [:error] [pid 45684:tid 45722] [client 146.70.186.204:37194] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSbRIvg5LMxwI4-PD1coawAAAAc"]
[Wed Nov 26 18:06:27.122489 2025] [:error] [pid 6471:tid 6491] [client 146.70.186.204:37200] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSbRI-h3Z9TZLlRuTiN5PAAAAJE"]
[Wed Nov 26 18:06:27.547661 2025] [:error] [pid 6471:tid 6474] [client 146.70.186.204:37200] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSbRI-h3Z9TZLlRuTiN5PwAAAIA"]
[Wed Nov 26 18:06:29.610895 2025] [:error] [pid 46443:tid 46451] [client 146.70.186.204:37204] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSbRJcLmDsnHrj-QFB_GbgAAAEY"]
[Wed Nov 26 18:06:31.690282 2025] [:error] [pid 20733:tid 20755] [client 146.70.186.204:37208] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSbRJwV9EP2HuRvnH8dGHgAAANQ"]
[Wed Nov 26 18:06:32.514141 2025] [:error] [pid 45684:tid 45734] [client 146.70.186.204:45932] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSbRKPg5LMxwI4-PD1comgAAABM"]
[Wed Nov 26 18:06:33.547902 2025] [:error] [pid 46443:tid 46461] [client 146.70.186.204:45948] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSbRKcLmDsnHrj-QFB_GeQAAAFA"]
[Wed Nov 26 18:06:33.755138 2025] [:error] [pid 46443:tid 46445] [client 146.70.186.204:45948] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSbRKcLmDsnHrj-QFB_GewAAAEA"]
[Wed Nov 26 18:06:37.688015 2025] [:error] [pid 45683:tid 45696] [client 146.70.186.204:45952] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSbRLRX1gQgNFW_222qZHQAAAUg"]
[Wed Nov 26 18:06:40.093831 2025] [:error] [pid 6471:tid 6474] [client 146.70.186.204:45968] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSbRMOh3Z9TZLlRuTiN5SAAAAIA"]
[Wed Nov 26 18:06:40.925357 2025] [:error] [pid 6471:tid 6494] [client 146.70.186.204:45968] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSbRMOh3Z9TZLlRuTiN5TQAAAJQ"]
[Wed Nov 26 18:06:41.540104 2025] [:error] [pid 46443:tid 46462] [client 146.70.186.204:59724] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSbRMcLmDsnHrj-QFB_GfgAAAFE"]
[Wed Nov 26 18:06:42.360585 2025] [:error] [pid 45685:tid 45756] [client 146.70.186.204:59736] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSbRMlj3f_NRdgU0DQ7GowAAAQ4"]
[Wed Nov 26 18:06:43.387880 2025] [:error] [pid 6471:tid 6482] [client 146.70.186.204:59748] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSbRM-h3Z9TZLlRuTiN5UgAAAIg"]
[Wed Nov 26 18:06:43.793432 2025] [:error] [pid 45685:tid 45749] [client 146.70.186.204:59760] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSbRM1j3f_NRdgU0DQ7GpQAAAQc"]
[Wed Nov 26 18:06:45.242088 2025] [:error] [pid 6471:tid 6479] [client 146.70.186.204:4065] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSbRNeh3Z9TZLlRuTiN5WAAAAIU"]
[Wed Nov 26 18:06:45.858909 2025] [:error] [pid 46443:tid 46448] [client 146.70.186.204:59776] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSbRNcLmDsnHrj-QFB_GgAAAAEM"]
[Wed Nov 26 18:06:46.887330 2025] [:error] [pid 45685:tid 45759] [client 146.70.186.204:59784] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSbRNlj3f_NRdgU0DQ7GrAAAARE"]
[Wed Nov 26 18:06:47.916444 2025] [:error] [pid 46443:tid 46451] [client 146.70.186.204:59786] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSbRN8LmDsnHrj-QFB_GhQAAAEY"]
[Wed Nov 26 18:06:50.042600 2025] [:error] [pid 20733:tid 20742] [client 146.70.186.204:59788] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSbROgV9EP2HuRvnH8dGKAAAAMc"]
[Wed Nov 26 18:06:51.072921 2025] [:error] [pid 20733:tid 20757] [client 146.70.186.204:59798] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSbROwV9EP2HuRvnH8dGLAAAANY"]
[Wed Nov 26 18:06:54.124234 2025] [:error] [pid 20733:tid 20752] [client 146.70.186.204:50340] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSbRPgV9EP2HuRvnH8dGNQAAANE"]
[Wed Nov 26 18:06:54.530745 2025] [:error] [pid 45685:tid 45756] [client 146.70.186.204:50346] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSbRPlj3f_NRdgU0DQ7GrwAAAQ4"]
[Wed Nov 26 18:06:54.935973 2025] [:error] [pid 46443:tid 46452] [client 146.70.186.204:50354] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSbRPsLmDsnHrj-QFB_GiQAAAEc"]
[Wed Nov 26 18:06:55.341199 2025] [:error] [pid 45769:tid 45784] [client 146.70.186.204:50364] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSbRP1dG5Eht9c3yy4MRvgAAAcw"]
[Wed Nov 26 18:06:55.953748 2025] [:error] [pid 45684:tid 45715] [client 146.70.186.204:50366] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSbRP_g5LMxwI4-PD1cozQAAAAA"]
[Wed Nov 26 18:06:56.359645 2025] [:error] [pid 45685:tid 45761] [client 146.70.186.204:10972] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSbRQFj3f_NRdgU0DQ7GsAAAARM"]
[Wed Nov 26 18:06:57.180841 2025] [:error] [pid 45684:tid 45718] [client 146.70.186.204:50384] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSbRQfg5LMxwI4-PD1co0AAAAAM"]
[Wed Nov 26 18:06:57.587275 2025] [:error] [pid 46443:tid 46449] [client 146.70.186.204:50388] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSbRQcLmDsnHrj-QFB_GmAAAAEQ"]
[Wed Nov 26 18:06:57.992510 2025] [:error] [pid 46443:tid 46451] [client 146.70.186.204:50390] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSbRQcLmDsnHrj-QFB_GoQAAAEY"]
[Wed Nov 26 18:06:58.397851 2025] [:error] [pid 45769:tid 45777] [client 146.70.186.204:50406] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSbRQldG5Eht9c3yy4MRwQAAAcU"]
[Wed Nov 26 18:06:59.014914 2025] [:error] [pid 6471:tid 6486] [client 146.70.186.204:50410] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSbRQ-h3Z9TZLlRuTiN5YAAAAIw"]
[Wed Nov 26 18:06:59.835728 2025] [:error] [pid 45769:tid 45793] [client 146.70.186.204:50424] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSbRQ1dG5Eht9c3yy4MRxQAAAdU"]
[Wed Nov 26 18:07:01.078520 2025] [:error] [pid 46443:tid 46465] [client 146.70.186.204:50434] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSbRRcLmDsnHrj-QFB_GtgAAAFQ"]
[Wed Nov 26 18:07:02.947740 2025] [:error] [pid 45684:tid 45735] [client 146.70.186.204:51162] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSbRRvg5LMxwI4-PD1co5AAAABQ"]
[Wed Nov 26 18:07:03.982412 2025] [:error] [pid 6471:tid 6483] [client 146.70.186.204:51174] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSbRR-h3Z9TZLlRuTiN5ZgAAAIk"]
[Wed Nov 26 18:07:04.390204 2025] [:error] [pid 46443:tid 46464] [client 146.70.186.204:51182] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSbRSMLmDsnHrj-QFB_GuAAAAFM"]
[Wed Nov 26 18:07:05.632675 2025] [:error] [pid 45685:tid 45761] [client 146.70.186.204:51186] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSbRSVj3f_NRdgU0DQ7GwgAAARM"]
[Wed Nov 26 18:07:06.668762 2025] [proxy_fcgi:error] [pid 6471:tid 6492] [client 146.70.186.204:51194] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:07:06.876159 2025] [proxy_fcgi:error] [pid 6471:tid 6489] [client 146.70.186.204:51194] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:07:07.085099 2025] [proxy_fcgi:error] [pid 6471:tid 6487] [client 146.70.186.204:51194] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:07:09.303604 2025] [:error] [pid 6471:tid 6474] [client 146.70.186.204:51194] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSbRTeh3Z9TZLlRuTiN5dwAAAIA"]
[Wed Nov 26 18:07:09.710261 2025] [:error] [pid 46443:tid 46447] [client 146.70.186.204:51198] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSbRTcLmDsnHrj-QFB_GuwAAAEI"]
[Wed Nov 26 18:07:10.118437 2025] [:error] [pid 45684:tid 45734] [client 146.70.186.204:51200] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSbRTvg5LMxwI4-PD1co6wAAABM"]
[Wed Nov 26 18:07:10.524937 2025] [:error] [pid 45684:tid 45726] [client 146.70.186.204:51208] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSbRTvg5LMxwI4-PD1co7AAAAAs"]
[Wed Nov 26 18:07:10.931270 2025] [:error] [pid 20733:tid 20735] [client 146.70.186.204:51224] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSbRTgV9EP2HuRvnH8dGPgAAAMA"]
[Wed Nov 26 18:07:11.338375 2025] [:error] [pid 46443:tid 46450] [client 146.70.186.204:54688] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSbRT8LmDsnHrj-QFB_GvAAAAEU"]
[Wed Nov 26 18:07:11.951030 2025] [:error] [pid 45684:tid 45732] [client 146.70.186.204:54694] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSbRT_g5LMxwI4-PD1co8QAAABE"]
[Wed Nov 26 18:07:12.358183 2025] [:error] [pid 20733:tid 20754] [client 146.70.186.204:54710] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSbRUAV9EP2HuRvnH8dGPwAAANM"]
[Wed Nov 26 18:07:12.764235 2025] [:error] [pid 45685:tid 45760] [client 146.70.186.204:54720] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSbRUFj3f_NRdgU0DQ7GxAAAARI"]
[Wed Nov 26 18:07:13.169350 2025] [:error] [pid 45683:tid 45707] [client 146.70.186.204:54732] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSbRURX1gQgNFW_222qZLwAAAVM"]
[Wed Nov 26 18:07:13.990963 2025] [:error] [pid 45685:tid 45747] [client 146.70.186.204:54744] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSbRUVj3f_NRdgU0DQ7GxwAAAQU"]
[Wed Nov 26 18:07:14.602517 2025] [:error] [pid 45684:tid 45715] [client 146.70.186.204:54754] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSbRUvg5LMxwI4-PD1co9wAAAAA"]
[Wed Nov 26 18:07:15.422491 2025] [:error] [pid 45683:tid 45695] [client 146.70.186.204:54756] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSbRUxX1gQgNFW_222qZMwAAAUc"]
[Wed Nov 26 18:07:16.241583 2025] [:error] [pid 45685:tid 45748] [client 146.70.186.204:54760] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSbRVFj3f_NRdgU0DQ7GygAAAQY"]
[Wed Nov 26 18:07:17.268422 2025] [:error] [pid 45684:tid 45730] [client 146.70.186.204:54772] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSbRVfg5LMxwI4-PD1co_gAAAA8"]
[Wed Nov 26 18:07:18.506133 2025] [:error] [pid 45683:tid 45712] [client 146.70.186.204:54780] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSbRVhX1gQgNFW_222qZOAAAAVg"]
[Wed Nov 26 18:07:19.121476 2025] [:error] [pid 45685:tid 45756] [client 146.70.186.204:54782] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSbRV1j3f_NRdgU0DQ7GzAAAAQ4"]
[Wed Nov 26 18:07:22.849604 2025] [:error] [pid 46443:tid 46463] [client 146.70.186.204:54798] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSbRWsLmDsnHrj-QFB_G0AAAAFI"]
[Wed Nov 26 18:07:23.255122 2025] [:error] [pid 45683:tid 45709] [client 146.70.186.204:48406] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSbRWxX1gQgNFW_222qZOgAAAVU"]
[Wed Nov 26 18:07:23.661233 2025] [:error] [pid 45769:tid 45773] [client 146.70.186.204:48414] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSbRW1dG5Eht9c3yy4MR0QAAAcE"]
[Wed Nov 26 18:07:24.076897 2025] [:error] [pid 45769:tid 45789] [client 146.70.186.204:48414] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSbRXFdG5Eht9c3yy4MR0wAAAdE"]
[Wed Nov 26 18:07:24.896274 2025] [:error] [pid 45684:tid 45717] [client 146.70.186.204:48428] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSbRXPg5LMxwI4-PD1cpDQAAAAI"]
[Wed Nov 26 18:07:25.302876 2025] [:error] [pid 45684:tid 45725] [client 146.70.186.204:48432] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSbRXfg5LMxwI4-PD1cpDgAAAAo"]
[Wed Nov 26 18:07:26.552620 2025] [:error] [pid 45769:tid 45776] [client 146.70.186.204:48444] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSbRXldG5Eht9c3yy4MR2AAAAcQ"]
[Wed Nov 26 18:07:26.959073 2025] [:error] [pid 20733:tid 20753] [client 146.70.186.204:48446] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aSbRXgV9EP2HuRvnH8dGSQAAANI"]
[Wed Nov 26 18:07:28.406293 2025] [:error] [pid 45684:tid 45737] [client 146.70.186.204:48462] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSbRYPg5LMxwI4-PD1cpGAAAABY"]
[Wed Nov 26 18:07:29.243357 2025] [proxy_fcgi:error] [pid 20733:tid 20750] [client 146.70.186.204:48472] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:07:29.655811 2025] [:error] [pid 20733:tid 20745] [client 146.70.186.204:48472] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSbRYQV9EP2HuRvnH8dGVAAAAMo"]
[Wed Nov 26 18:07:30.063558 2025] [:error] [pid 45683:tid 45696] [client 146.70.186.204:48476] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSbRYhX1gQgNFW_222qZPgAAAUg"]
[Wed Nov 26 18:07:30.887893 2025] [:error] [pid 45769:tid 45790] [client 146.70.186.204:48490] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSbRYldG5Eht9c3yy4MR4wAAAdI"]
[Wed Nov 26 18:07:31.295187 2025] [:error] [pid 45684:tid 45736] [client 146.70.186.204:44712] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSbRY_g5LMxwI4-PD1cpHgAAABU"]
[Wed Nov 26 18:07:33.171658 2025] [:error] [pid 45685:tid 45745] [client 146.70.186.204:44724] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSbRZVj3f_NRdgU0DQ7G7gAAAQM"]
[Wed Nov 26 18:07:33.578654 2025] [:error] [pid 20733:tid 20755] [client 146.70.186.204:44728] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSbRZQV9EP2HuRvnH8dGXQAAANQ"]
[Wed Nov 26 18:07:34.816219 2025] [:error] [pid 45769:tid 45784] [client 146.70.186.204:44738] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSbRZldG5Eht9c3yy4MR6QAAAcw"]
[Wed Nov 26 18:07:35.223258 2025] [:error] [pid 46443:tid 46460] [client 146.70.186.204:44750] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSbRZ8LmDsnHrj-QFB_G2QAAAE8"]
[Wed Nov 26 18:07:35.628469 2025] [:error] [pid 6471:tid 6475] [client 146.70.186.204:44752] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSbRZ-h3Z9TZLlRuTiN5lQAAAIE"]
[Wed Nov 26 18:07:37.073074 2025] [:error] [pid 45684:tid 45735] [client 146.70.186.204:44762] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSbRafg5LMxwI4-PD1cpPgAAABQ"]
[Wed Nov 26 18:07:37.687420 2025] [:error] [pid 45683:tid 45689] [client 146.70.186.204:44764] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSbRaRX1gQgNFW_222qZUQAAAUE"]
[Wed Nov 26 18:07:40.936601 2025] [:error] [pid 20733:tid 20756] [client 146.70.186.204:44768] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aSbRbAV9EP2HuRvnH8dGegAAANU"]
[Wed Nov 26 18:07:42.180366 2025] [:error] [pid 20733:tid 20758] [client 146.70.186.204:44768] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSbRbgV9EP2HuRvnH8dGgAAAANc"]
[Wed Nov 26 18:07:42.586876 2025] [:error] [pid 45685:tid 45753] [client 146.70.186.204:38816] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSbRblj3f_NRdgU0DQ7G7wAAAQs"]
[Wed Nov 26 18:07:44.870906 2025] [proxy_fcgi:error] [pid 45685:tid 45752] [client 146.70.186.204:38816] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:07:47.982713 2025] [:error] [pid 45685:tid 45745] [client 146.70.186.204:38816] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSbRc1j3f_NRdgU0DQ7HDAAAAQM"]
[Wed Nov 26 18:07:49.015401 2025] [:error] [pid 45769:tid 45786] [client 146.70.186.204:38830] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSbRdVdG5Eht9c3yy4MR-wAAAc4"]
[Wed Nov 26 18:07:49.837397 2025] [:error] [pid 46443:tid 46449] [client 146.70.186.204:38836] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSbRdcLmDsnHrj-QFB_G9AAAAEQ"]
[Wed Nov 26 18:07:52.133461 2025] [:error] [pid 46443:tid 46453] [client 146.70.186.204:38842] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSbReMLmDsnHrj-QFB_HAQAAAEg"]
[Wed Nov 26 18:07:52.952137 2025] [:error] [pid 45684:tid 45730] [client 146.70.186.204:50612] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSbRePg5LMxwI4-PD1cpUAAAAA8"]
[Wed Nov 26 18:07:53.565668 2025] [:error] [pid 46443:tid 46460] [client 146.70.186.204:50628] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSbRecLmDsnHrj-QFB_HAwAAAE8"]
[Wed Nov 26 18:07:54.805989 2025] [proxy_fcgi:error] [pid 45685:tid 45756] [client 146.70.186.204:50636] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:07:55.014577 2025] [proxy_fcgi:error] [pid 45685:tid 45750] [client 146.70.186.204:50636] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:07:55.217958 2025] [:error] [pid 45685:tid 45761] [client 146.70.186.204:50636] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSbRe1j3f_NRdgU0DQ7HFQAAARM"]
[Wed Nov 26 18:07:55.623766 2025] [:error] [pid 45685:tid 45751] [client 146.70.186.204:50644] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSbRe1j3f_NRdgU0DQ7HFgAAAQk"]
[Wed Nov 26 18:07:57.495032 2025] [:error] [pid 45683:tid 45694] [client 146.70.186.204:50652] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSbRfRX1gQgNFW_222qZbAAAAUY"]
[Wed Nov 26 18:07:58.109310 2025] [:error] [pid 45683:tid 45705] [client 146.70.186.204:50664] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aSbRfhX1gQgNFW_222qZcQAAAVE"]
[Wed Nov 26 18:07:59.137749 2025] [:error] [pid 6471:tid 6476] [client 146.70.186.204:50670] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSbRf-h3Z9TZLlRuTiN5ogAAAII"]
[Wed Nov 26 18:08:01.001428 2025] [:error] [pid 45683:tid 45691] [client 146.70.186.204:50684] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSbRgRX1gQgNFW_222qZiwAAAUM"]
[Wed Nov 26 18:08:01.411084 2025] [proxy_fcgi:error] [pid 20733:tid 20743] [client 146.70.186.204:5614] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:08:02.067032 2025] [:error] [pid 20733:tid 20744] [client 146.70.186.204:5614] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSbRggV9EP2HuRvnH8dGiAAAAMk"]
[Wed Nov 26 18:08:03.522097 2025] [proxy_fcgi:error] [pid 45684:tid 45732] [client 146.70.186.204:38464] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:08:03.934213 2025] [:error] [pid 45684:tid 45718] [client 146.70.186.204:38464] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSbRg_g5LMxwI4-PD1cpcgAAAAM"]
[Wed Nov 26 18:08:04.968160 2025] [:error] [pid 45684:tid 45730] [client 146.70.186.204:38464] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSbRhPg5LMxwI4-PD1cpeAAAAA8"]
[Wed Nov 26 18:08:05.584147 2025] [:error] [pid 45685:tid 45759] [client 146.70.186.204:38468] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSbRhVj3f_NRdgU0DQ7HPwAAARE"]
[Wed Nov 26 18:08:06.817030 2025] [:error] [pid 6471:tid 6491] [client 146.70.186.204:38480] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSbRhuh3Z9TZLlRuTiN5rAAAAJE"]
[Wed Nov 26 18:08:08.053843 2025] [:error] [pid 45684:tid 45728] [client 146.70.186.204:13634] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSbRiPg5LMxwI4-PD1cpfQAAAA0"]
[Wed Nov 26 18:08:08.667788 2025] [:error] [pid 45685:tid 45743] [client 146.70.186.204:38506] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSbRiFj3f_NRdgU0DQ7HQgAAAQE"]
[Wed Nov 26 18:08:09.696021 2025] [:error] [pid 45683:tid 45689] [client 146.70.186.204:38518] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSbRiRX1gQgNFW_222qZlAAAAUE"]
[Wed Nov 26 18:08:10.520188 2025] [proxy_fcgi:error] [pid 20733:tid 20736] [client 146.70.186.204:38532] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:08:10.723707 2025] [:error] [pid 20733:tid 20753] [client 146.70.186.204:38532] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSbRigV9EP2HuRvnH8dGjgAAANI"]
[Wed Nov 26 18:08:11.342540 2025] [:error] [pid 45683:tid 45690] [client 146.70.186.204:60400] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSbRixX1gQgNFW_222qZlgAAAUI"]
[Wed Nov 26 18:08:11.747621 2025] [:error] [pid 45685:tid 45762] [client 146.70.186.204:60408] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSbRi1j3f_NRdgU0DQ7HRQAAARQ"]
[Wed Nov 26 18:08:12.152936 2025] [:error] [pid 46443:tid 46465] [client 146.70.186.204:60410] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSbRjMLmDsnHrj-QFB_HOwAAAFQ"]
[Wed Nov 26 18:08:12.558639 2025] [:error] [pid 6471:tid 6490] [client 146.70.186.204:60416] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSbRjOh3Z9TZLlRuTiN5rwAAAJA"]
[Wed Nov 26 18:08:12.966331 2025] [:error] [pid 45683:tid 45698] [client 146.70.186.204:60418] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSbRjBX1gQgNFW_222qZmQAAAUo"]
[Wed Nov 26 18:08:13.372253 2025] [:error] [pid 46443:tid 46461] [client 146.70.186.204:60424] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSbRjcLmDsnHrj-QFB_HPQAAAFA"]
[Wed Nov 26 18:08:14.192796 2025] [:error] [pid 6471:tid 6489] [client 146.70.186.204:60428] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSbRjuh3Z9TZLlRuTiN5sgAAAI8"]
[Wed Nov 26 18:08:14.600215 2025] [:error] [pid 45769:tid 45781] [client 146.70.186.204:60448] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSbRjldG5Eht9c3yy4MSSwAAAck"]
[Wed Nov 26 18:08:15.006708 2025] [:error] [pid 46443:tid 46453] [client 146.70.186.204:60452] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSbRj8LmDsnHrj-QFB_HQgAAAEg"]
[Wed Nov 26 18:08:15.622736 2025] [:error] [pid 46443:tid 46459] [client 146.70.186.204:60466] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSbRj8LmDsnHrj-QFB_HSAAAAE4"]
[Wed Nov 26 18:08:16.444591 2025] [:error] [pid 20733:tid 20744] [client 146.70.186.204:60478] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSbRkAV9EP2HuRvnH8dGlAAAAMk"]
[Wed Nov 26 18:08:16.854774 2025] [proxy_fcgi:error] [pid 45685:tid 45759] [client 146.70.186.204:60484] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:08:17.681308 2025] [:error] [pid 45685:tid 45764] [client 146.70.186.204:60484] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSbRkVj3f_NRdgU0DQ7HTwAAARY"]
[Wed Nov 26 18:08:18.926710 2025] [:error] [pid 45685:tid 45747] [client 146.70.186.204:60484] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSbRklj3f_NRdgU0DQ7HVQAAAQU"]
[Wed Nov 26 18:08:19.334328 2025] [:error] [pid 45684:tid 45718] [client 146.70.186.204:60494] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSbRk_g5LMxwI4-PD1cpggAAAAM"]
[Wed Nov 26 18:08:25.758453 2025] [:error] [pid 6471:tid 6495] [client 146.70.186.204:60500] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSbRmeh3Z9TZLlRuTiN50wAAAJU"]
[Wed Nov 26 18:08:26.164826 2025] [:error] [pid 45684:tid 45719] [client 146.70.186.204:45760] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSbRmvg5LMxwI4-PD1cpkwAAAAQ"]
[Wed Nov 26 18:08:26.572485 2025] [:error] [pid 45769:tid 45786] [client 146.70.186.204:45774] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSbRmldG5Eht9c3yy4MSgAAAAc4"]
[Wed Nov 26 18:08:28.222216 2025] [:error] [pid 45684:tid 45736] [client 146.70.186.204:45796] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSbRnPg5LMxwI4-PD1cppwAAABU"]
[Wed Nov 26 18:08:28.629119 2025] [:error] [pid 45685:tid 45762] [client 146.70.186.204:45826] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSbRnFj3f_NRdgU0DQ7HaAAAARQ"]
[Wed Nov 26 18:08:29.035333 2025] [:error] [pid 45685:tid 45744] [client 146.70.186.204:45852] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSbRnVj3f_NRdgU0DQ7HaQAAAQI"]
[Wed Nov 26 18:08:30.270150 2025] [:error] [pid 45769:tid 45776] [client 146.70.186.204:45876] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSbRnldG5Eht9c3yy4MSigAAAcQ"]
[Wed Nov 26 18:08:30.882622 2025] [:error] [pid 45685:tid 45755] [client 146.70.186.204:7212] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSbRnlj3f_NRdgU0DQ7HcQAAAQ0"]
[Wed Nov 26 18:08:31.702658 2025] [:error] [pid 46443:tid 46451] [client 146.70.186.204:55180] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSbRn8LmDsnHrj-QFB_HjwAAAEY"]
[Wed Nov 26 18:08:34.386907 2025] [:error] [pid 45684:tid 45738] [client 146.70.186.204:55196] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSbRovg5LMxwI4-PD1cpvwAAABc"]
[Wed Nov 26 18:08:35.208287 2025] [:error] [pid 45685:tid 45742] [client 146.70.186.204:55216] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSbRo1j3f_NRdgU0DQ7HegAAAQA"]
[Wed Nov 26 18:08:36.862125 2025] [:error] [pid 45684:tid 45725] [client 146.70.186.204:55232] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSbRpPg5LMxwI4-PD1cpywAAAAo"]
[Wed Nov 26 18:08:37.688720 2025] [:error] [pid 46443:tid 46450] [client 146.70.186.204:55260] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSbRpcLmDsnHrj-QFB_HnAAAAEU"]
[Wed Nov 26 18:08:38.933180 2025] [:error] [pid 6471:tid 6496] [client 146.70.186.204:55278] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSbRpuh3Z9TZLlRuTiN58AAAAJY"]
[Wed Nov 26 18:08:40.375226 2025] [:error] [pid 45683:tid 45703] [client 146.70.186.204:55316] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSbRqBX1gQgNFW_222qZwAAAAU8"]
[Wed Nov 26 18:08:41.215352 2025] [:error] [pid 45684:tid 45721] [client 146.70.186.204:55350] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSbRqfg5LMxwI4-PD1cp6gAAAAY"]
[Wed Nov 26 18:08:41.622560 2025] [:error] [pid 45685:tid 45746] [client 146.70.186.204:50146] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSbRqVj3f_NRdgU0DQ7HjAAAAQQ"]
[Wed Nov 26 18:08:43.067658 2025] [:error] [pid 46443:tid 46466] [client 146.70.186.204:50154] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSbRq8LmDsnHrj-QFB_HrQAAAFU"]
[Wed Nov 26 18:08:44.512763 2025] [:error] [pid 46443:tid 46460] [client 146.70.186.204:50156] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSbRrMLmDsnHrj-QFB_HuAAAAE8"]
[Wed Nov 26 18:08:45.754732 2025] [:error] [pid 6471:tid 6480] [client 146.70.186.204:50170] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSbRreh3Z9TZLlRuTiN5_wAAAIY"]
[Wed Nov 26 18:08:46.162026 2025] [:error] [pid 45769:tid 45774] [client 146.70.186.204:50172] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSbRrldG5Eht9c3yy4MSlwAAAcI"]
[Wed Nov 26 18:08:46.980793 2025] [:error] [pid 46443:tid 46445] [client 146.70.186.204:50182] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSbRrsLmDsnHrj-QFB_HxwAAAEA"]
[Wed Nov 26 18:08:48.015151 2025] [:error] [pid 45684:tid 45734] [client 146.70.186.204:50194] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSbRsPg5LMxwI4-PD1cqAgAAABM"]
[Wed Nov 26 18:08:48.664833 2025] [:error] [pid 20733:tid 20748] [client 146.70.186.204:50222] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSbRsAV9EP2HuRvnH8dGugAAAM0"]
[Wed Nov 26 18:08:50.317715 2025] [:error] [pid 6471:tid 6484] [client 146.70.186.204:50234] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSbRsuh3Z9TZLlRuTiN6CgAAAIo"]
[Wed Nov 26 18:08:51.141359 2025] [:error] [pid 20733:tid 20739] [client 146.70.186.204:50258] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSbRswV9EP2HuRvnH8dGwwAAAMQ"]
[Wed Nov 26 18:08:51.547616 2025] [:error] [pid 46443:tid 46451] [client 146.70.186.204:56518] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSbRs8LmDsnHrj-QFB_HygAAAEY"]
[Wed Nov 26 18:08:52.368268 2025] [:error] [pid 46443:tid 46459] [client 146.70.186.204:56524] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSbRtMLmDsnHrj-QFB_HzQAAAE4"]
[Wed Nov 26 18:08:52.991519 2025] [:error] [pid 45685:tid 45760] [client 146.70.186.204:56542] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSbRtFj3f_NRdgU0DQ7HnAAAARI"]
[Wed Nov 26 18:08:54.437769 2025] [:error] [pid 45769:tid 45786] [client 146.70.186.204:56552] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSbRtldG5Eht9c3yy4MSnwAAAc4"]
[Wed Nov 26 18:08:55.261035 2025] [:error] [pid 45684:tid 45730] [client 146.70.186.204:56556] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSbRt_g5LMxwI4-PD1cqCAAAAA8"]
[Wed Nov 26 18:08:56.080405 2025] [:error] [pid 45685:tid 45763] [client 146.70.186.204:56572] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSbRuFj3f_NRdgU0DQ7HoQAAARU"]
[Wed Nov 26 18:08:56.692506 2025] [:error] [pid 45684:tid 45717] [client 146.70.186.204:56592] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSbRuPg5LMxwI4-PD1cqDwAAAAI"]
[Wed Nov 26 18:08:57.304195 2025] [:error] [pid 6471:tid 6497] [client 146.70.186.204:56608] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSbRueh3Z9TZLlRuTiN6HgAAAJc"]
[Wed Nov 26 18:08:57.712603 2025] [:error] [pid 45684:tid 45736] [client 146.70.186.204:14657] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSbRufg5LMxwI4-PD1cqGQAAABU"]
[Wed Nov 26 18:08:58.120145 2025] [:error] [pid 45769:tid 45781] [client 146.70.186.204:56630] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSbRuldG5Eht9c3yy4MSoQAAAck"]
[Wed Nov 26 18:08:59.776785 2025] [:error] [pid 45685:tid 45766] [client 146.70.186.204:56638] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSbRu1j3f_NRdgU0DQ7HqQAAARg"]
[Wed Nov 26 18:09:00.827738 2025] [:error] [pid 45684:tid 45733] [client 146.70.186.204:56652] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSbRvPg5LMxwI4-PD1cqKAAAABI"]
[Wed Nov 26 18:09:01.890895 2025] [:error] [pid 6471:tid 6479] [client 146.70.186.204:48882] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSbRveh3Z9TZLlRuTiN6NQAAAIU"]
[Wed Nov 26 18:09:02.969153 2025] [:error] [pid 45684:tid 45725] [client 146.70.186.204:48908] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSbRvvg5LMxwI4-PD1cqMwAAAAo"]
[Wed Nov 26 18:09:04.638652 2025] [:error] [pid 45683:tid 45698] [client 146.70.186.204:48934] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSbRwBX1gQgNFW_222qZ0QAAAUo"]
[Wed Nov 26 18:09:05.255827 2025] [:error] [pid 20733:tid 20753] [client 146.70.186.204:48978] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSbRwQV9EP2HuRvnH8dG1wAAANI"]
[Wed Nov 26 18:09:05.871052 2025] [:error] [pid 6471:tid 6480] [client 146.70.186.204:48980] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSbRweh3Z9TZLlRuTiN6NwAAAIY"]
[Wed Nov 26 18:09:06.703810 2025] [:error] [pid 45769:tid 45796] [client 146.70.186.204:48994] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSbRwldG5Eht9c3yy4MSsQAAAdg"]
[Wed Nov 26 18:09:09.977960 2025] [:error] [pid 46443:tid 46450] [client 146.70.186.204:49010] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSbRxcLmDsnHrj-QFB_H7wAAAEU"]
[Wed Nov 26 18:09:10.385077 2025] [:error] [pid 46443:tid 46445] [client 146.70.186.204:49068] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSbRxsLmDsnHrj-QFB_H8gAAAEA"]
[Wed Nov 26 18:09:11.415252 2025] [:error] [pid 6471:tid 6482] [client 146.70.186.204:49072] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSbRx-h3Z9TZLlRuTiN6UQAAAIg"]
[Wed Nov 26 18:09:11.820922 2025] [:error] [pid 45685:tid 45743] [client 146.70.186.204:50592] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSbRx1j3f_NRdgU0DQ7HtQAAAQE"]
[Wed Nov 26 18:09:12.643917 2025] [:error] [pid 20733:tid 20737] [client 146.70.186.204:50598] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSbRyAV9EP2HuRvnH8dG3wAAAMI"]
[Wed Nov 26 18:09:13.102118 2025] [:error] [pid 6471:tid 6492] [client 146.70.186.204:50614] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSbRyeh3Z9TZLlRuTiN6YAAAAJI"]
[Wed Nov 26 18:09:13.508956 2025] [:error] [pid 46443:tid 46456] [client 146.70.186.204:50634] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSbRycLmDsnHrj-QFB_H9QAAAEs"]
[Wed Nov 26 18:09:13.513382 2025] [proxy_fcgi:error] [pid 46443:tid 46456] [client 146.70.186.204:50634] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:09:13.716383 2025] [:error] [pid 46443:tid 46459] [client 146.70.186.204:50634] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSbRycLmDsnHrj-QFB_H9wAAAE4"]
[Wed Nov 26 18:09:14.752028 2025] [:error] [pid 45683:tid 45694] [client 146.70.186.204:50662] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSbRyhX1gQgNFW_222qZ3wAAAUY"]
[Wed Nov 26 18:09:15.160111 2025] [:error] [pid 45684:tid 45725] [client 146.70.186.204:50696] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSbRy_g5LMxwI4-PD1cqPQAAAAo"]
[Wed Nov 26 18:09:18.215680 2025] [:error] [pid 20733:tid 20747] [client 146.70.186.204:50712] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSbRzgV9EP2HuRvnH8dG6AAAAMw"]
[Wed Nov 26 18:09:18.622312 2025] [:error] [pid 45685:tid 45746] [client 146.70.186.204:50772] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSbRzlj3f_NRdgU0DQ7HuwAAAQQ"]
[Wed Nov 26 18:09:19.444387 2025] [:error] [pid 45769:tid 45790] [client 146.70.186.204:50798] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSbRz1dG5Eht9c3yy4MSuwAAAdI"]
[Wed Nov 26 18:09:19.850178 2025] [:error] [pid 46443:tid 46460] [client 146.70.186.204:50806] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSbRz8LmDsnHrj-QFB_H-wAAAE8"]
[Wed Nov 26 18:09:20.259729 2025] [proxy_fcgi:error] [pid 45769:tid 45795] [client 146.70.186.204:50818] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:09:20.463822 2025] [:error] [pid 45769:tid 45781] [client 146.70.186.204:50818] [client 146.70.186.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.186.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSbR0FdG5Eht9c3yy4MSvwAAAck"]
[Wed Nov 26 18:09:20.880565 2025] [:error] [pid 45769:tid 45779] [client 146.70.186.204:50818] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSbR0FdG5Eht9c3yy4MSwQAAAcc"]
[Wed Nov 26 18:09:22.116370 2025] [:error] [pid 46443:tid 46464] [client 146.70.186.204:33300] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSbR0sLmDsnHrj-QFB_IAwAAAFM"]
[Wed Nov 26 18:09:22.729070 2025] [:error] [pid 45769:tid 45789] [client 146.70.186.204:33332] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSbR0ldG5Eht9c3yy4MSwwAAAdE"]
[Wed Nov 26 18:09:23.137058 2025] [:error] [pid 20733:tid 20741] [client 146.70.186.204:33350] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSbR0wV9EP2HuRvnH8dG6gAAAMY"]
[Wed Nov 26 18:09:24.167430 2025] [:error] [pid 45685:tid 45744] [client 146.70.186.204:33370] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSbR1Fj3f_NRdgU0DQ7HwQAAAQI"]
[Wed Nov 26 18:09:24.995276 2025] [:error] [pid 6471:tid 6493] [client 146.70.186.204:33382] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSbR1Oh3Z9TZLlRuTiN6gwAAAJM"]
[Wed Nov 26 18:09:26.228914 2025] [:error] [pid 45684:tid 45733] [client 146.70.186.204:33390] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSbR1vg5LMxwI4-PD1cqXAAAABI"]
[Wed Nov 26 18:09:26.635064 2025] [:error] [pid 20733:tid 20758] [client 146.70.186.204:33392] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSbR1gV9EP2HuRvnH8dG8QAAANc"]
[Wed Nov 26 18:09:27.246662 2025] [:error] [pid 45769:tid 45786] [client 146.70.186.204:33406] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSbR11dG5Eht9c3yy4MSyQAAAc4"]
[Wed Nov 26 18:09:28.895909 2025] [:error] [pid 45683:tid 45694] [client 146.70.186.204:33440] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSbR2BX1gQgNFW_222qZ_gAAAUY"]
[Wed Nov 26 18:09:29.716023 2025] [:error] [pid 45685:tid 45746] [client 146.70.186.204:33476] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSbR2Vj3f_NRdgU0DQ7HywAAAQQ"]
[Wed Nov 26 18:09:29.919504 2025] [:error] [pid 45685:tid 45742] [client 146.70.186.204:33476] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSbR2Vj3f_NRdgU0DQ7HzQAAAQA"]
[Wed Nov 26 18:09:30.743023 2025] [:error] [pid 45685:tid 45763] [client 146.70.186.204:33504] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSbR2lj3f_NRdgU0DQ7H0gAAARU"]
[Wed Nov 26 18:09:31.149025 2025] [:error] [pid 46443:tid 46449] [client 146.70.186.204:56866] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSbR28LmDsnHrj-QFB_ICwAAAEQ"]
[Wed Nov 26 18:09:32.802676 2025] [:error] [pid 45685:tid 45746] [client 146.70.186.204:56870] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSbR3Fj3f_NRdgU0DQ7H2QAAAQQ"]
[Wed Nov 26 18:09:33.633986 2025] [:error] [pid 45684:tid 45715] [client 146.70.186.204:56896] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSbR3fg5LMxwI4-PD1cqagAAAAA"]
[Wed Nov 26 18:09:34.249138 2025] [:error] [pid 6471:tid 6486] [client 146.70.186.204:56898] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSbR3uh3Z9TZLlRuTiN6hQAAAIw"]
[Wed Nov 26 18:09:35.686493 2025] [:error] [pid 45683:tid 45703] [client 146.70.186.204:56916] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSbR3xX1gQgNFW_222qaGQAAAU8"]
[Wed Nov 26 18:09:36.304172 2025] [:error] [pid 45685:tid 45760] [client 146.70.186.204:38511] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSbR4Fj3f_NRdgU0DQ7H3QAAARI"]
[Wed Nov 26 18:09:36.924742 2025] [:error] [pid 6471:tid 6477] [client 146.70.186.204:56970] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSbR4Oh3Z9TZLlRuTiN6iQAAAIM"]
[Wed Nov 26 18:09:37.331375 2025] [:error] [pid 20733:tid 20744] [client 146.70.186.204:56986] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSbR4QV9EP2HuRvnH8dG_QAAAMk"]
[Wed Nov 26 18:09:38.506250 2025] [:error] [pid 45769:tid 45786] [client 146.70.186.204:57008] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSbR4ldG5Eht9c3yy4MS1wAAAc4"]
[Wed Nov 26 18:09:39.745650 2025] [:error] [pid 45769:tid 45772] [client 146.70.186.204:57018] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSbR41dG5Eht9c3yy4MS3QAAAcA"]
[Wed Nov 26 18:09:40.151859 2025] [:error] [pid 45685:tid 45763] [client 146.70.186.204:64769] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSbR5Fj3f_NRdgU0DQ7H3wAAARU"]
[Wed Nov 26 18:09:41.594780 2025] [:error] [pid 45685:tid 45766] [client 146.70.186.204:57038] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSbR5Vj3f_NRdgU0DQ7H5QAAARg"]
[Wed Nov 26 18:09:42.417468 2025] [:error] [pid 45685:tid 45742] [client 146.70.186.204:50490] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSbR5lj3f_NRdgU0DQ7H6AAAAQA"]
[Wed Nov 26 18:09:43.443097 2025] [:error] [pid 45683:tid 45702] [client 146.70.186.204:50516] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSbR5xX1gQgNFW_222qaLgAAAU4"]
[Wed Nov 26 18:09:43.849745 2025] [:error] [pid 45769:tid 45783] [client 146.70.186.204:50540] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSbR51dG5Eht9c3yy4MS4QAAAcs"]
[Wed Nov 26 18:09:44.467508 2025] [:error] [pid 46443:tid 46449] [client 146.70.186.204:50542] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSbR6MLmDsnHrj-QFB_IFwAAAEQ"]
[Wed Nov 26 18:09:45.290117 2025] [:error] [pid 46443:tid 46447] [client 146.70.186.204:50552] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSbR6cLmDsnHrj-QFB_IHAAAAEI"]
[Wed Nov 26 18:09:46.114126 2025] [:error] [pid 45685:tid 45744] [client 146.70.186.204:50560] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSbR6lj3f_NRdgU0DQ7H6wAAAQI"]
[Wed Nov 26 18:09:46.524197 2025] [:error] [pid 45684:tid 45737] [client 146.70.186.204:50564] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSbR6vg5LMxwI4-PD1cqiAAAABY"]
[Wed Nov 26 18:09:47.140585 2025] [:error] [pid 45685:tid 45754] [client 146.70.186.204:50576] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSbR61j3f_NRdgU0DQ7H8AAAAQw"]
[Wed Nov 26 18:09:47.545117 2025] [:error] [pid 46443:tid 46463] [client 146.70.186.204:50584] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSbR68LmDsnHrj-QFB_IIwAAAFI"]
[Wed Nov 26 18:09:48.377613 2025] [:error] [pid 20733:tid 20749] [client 146.70.186.204:50588] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSbR7AV9EP2HuRvnH8dHBQAAAM4"]
[Wed Nov 26 18:09:49.018900 2025] [:error] [pid 45769:tid 45773] [client 146.70.186.204:50612] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSbR7VdG5Eht9c3yy4MS5wAAAcE"]
[Wed Nov 26 18:09:49.425374 2025] [:error] [pid 6471:tid 6496] [client 146.70.186.204:50638] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSbR7eh3Z9TZLlRuTiN6oAAAAJY"]
[Wed Nov 26 18:09:49.833869 2025] [:error] [pid 45685:tid 45756] [client 146.70.186.204:50623] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSbR7Vj3f_NRdgU0DQ7H9gAAAQ4"]
[Wed Nov 26 18:09:50.870395 2025] [:error] [pid 45684:tid 45716] [client 146.70.186.204:50670] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSbR7vg5LMxwI4-PD1cqkAAAAAE"]
[Wed Nov 26 18:09:51.691865 2025] [:error] [pid 45684:tid 45733] [client 146.70.186.204:43676] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSbR7_g5LMxwI4-PD1cqkwAAABI"]
[Wed Nov 26 18:09:52.307846 2025] [:error] [pid 45769:tid 45785] [client 146.70.186.204:43680] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSbR8FdG5Eht9c3yy4MS7QAAAc0"]
[Wed Nov 26 18:09:52.922016 2025] [:error] [pid 45769:tid 45783] [client 146.70.186.204:43684] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSbR8FdG5Eht9c3yy4MS8QAAAcs"]
[Wed Nov 26 18:09:54.568594 2025] [:error] [pid 46443:tid 46464] [client 146.70.186.204:43710] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSbR8sLmDsnHrj-QFB_IMQAAAFM"]
[Wed Nov 26 18:09:54.974384 2025] [:error] [pid 45683:tid 45692] [client 146.70.186.204:43742] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSbR8hX1gQgNFW_222qaOQAAAUQ"]
[Wed Nov 26 18:09:55.796043 2025] [:error] [pid 45684:tid 45718] [client 146.70.186.204:43754] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSbR8_g5LMxwI4-PD1cqlgAAAAM"]
[Wed Nov 26 18:09:57.034919 2025] [:error] [pid 45684:tid 45730] [client 146.70.186.204:43768] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSbR9fg5LMxwI4-PD1cqnAAAAA8"]
[Wed Nov 26 18:09:57.861631 2025] [:error] [pid 46443:tid 46467] [client 146.70.186.204:43770] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSbR9cLmDsnHrj-QFB_IOAAAAFY"]
[Wed Nov 26 18:09:58.680888 2025] [:error] [pid 20733:tid 20736] [client 146.70.186.204:43784] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSbR9gV9EP2HuRvnH8dHDgAAAME"]
[Wed Nov 26 18:09:59.294169 2025] [:error] [pid 45683:tid 45700] [client 146.70.186.204:43794] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSbR9xX1gQgNFW_222qaPQAAAUw"]
[Wed Nov 26 18:09:59.907359 2025] [:error] [pid 45684:tid 45722] [client 146.70.186.204:43804] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSbR9_g5LMxwI4-PD1cqogAAAAc"]
[Wed Nov 26 18:10:01.247672 2025] [:error] [pid 46443:tid 46461] [client 146.70.186.204:43806] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSbR-cLmDsnHrj-QFB_IRQAAAFA"]
[Wed Nov 26 18:10:02.399188 2025] [:error] [pid 20733:tid 20738] [client 146.70.186.204:47114] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSbR-gV9EP2HuRvnH8dHFgAAAMM"]
[Wed Nov 26 18:10:02.882272 2025] [proxy_fcgi:error] [pid 45683:tid 45696] [client 146.70.186.204:47128] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 18:10:03.127812 2025] [:error] [pid 45683:tid 45691] [client 146.70.186.204:47128] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSbR-xX1gQgNFW_222qaRQAAAUM"]
[Wed Nov 26 18:10:03.763483 2025] [:error] [pid 45683:tid 45702] [client 146.70.186.204:47134] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSbR-xX1gQgNFW_222qaRgAAAU4"]
[Wed Nov 26 18:10:04.620264 2025] [:error] [pid 45683:tid 45703] [client 146.70.186.204:47146] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSbR_BX1gQgNFW_222qaSgAAAU8"]
[Wed Nov 26 18:10:05.083892 2025] [:error] [pid 45684:tid 45727] [client 146.70.186.204:47160] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSbR_fg5LMxwI4-PD1cqqQAAAAw"]
[Wed Nov 26 18:10:06.784709 2025] [:error] [pid 45683:tid 45694] [client 146.70.186.204:47168] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSbR_hX1gQgNFW_222qaUwAAAUY"]
[Wed Nov 26 18:10:07.195822 2025] [:error] [pid 45769:tid 45775] [client 146.70.186.204:47170] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSbR_1dG5Eht9c3yy4MS-QAAAcM"]
[Wed Nov 26 18:10:07.812092 2025] [:error] [pid 20733:tid 20747] [client 146.70.186.204:47172] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSbR_wV9EP2HuRvnH8dHGQAAAMw"]
[Wed Nov 26 18:10:08.220341 2025] [:error] [pid 45683:tid 45697] [client 146.70.186.204:47188] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSbSABX1gQgNFW_222qaVQAAAUk"]
[Wed Nov 26 18:10:08.636416 2025] [:error] [pid 45684:tid 45718] [client 146.70.186.204:47196] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSbSAPg5LMxwI4-PD1cqrwAAAAM"]
[Wed Nov 26 18:10:09.044110 2025] [:error] [pid 20733:tid 20736] [client 146.70.186.204:47200] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSbSAQV9EP2HuRvnH8dHGwAAAME"]
[Wed Nov 26 18:10:10.292462 2025] [:error] [pid 20733:tid 20737] [client 146.70.186.204:47214] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSbSAgV9EP2HuRvnH8dHIAAAAMI"]
[Wed Nov 26 18:10:10.700794 2025] [:error] [pid 6471:tid 6494] [client 146.70.186.204:47226] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSbSAuh3Z9TZLlRuTiN6sQAAAJQ"]
[Wed Nov 26 18:10:11.524953 2025] [:error] [pid 45685:tid 45748] [client 146.70.186.204:44458] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSbSA1j3f_NRdgU0DQ7IAgAAAQY"]
[Wed Nov 26 18:10:11.931809 2025] [:error] [pid 45685:tid 45765] [client 146.70.186.204:44472] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSbSA1j3f_NRdgU0DQ7IBAAAARc"]
[Wed Nov 26 18:10:12.756964 2025] [:error] [pid 45684:tid 45719] [client 146.70.186.204:44474] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSbSBPg5LMxwI4-PD1cqtQAAAAQ"]
[Wed Nov 26 18:10:13.164824 2025] [:error] [pid 45683:tid 45706] [client 146.70.186.204:44484] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSbSBRX1gQgNFW_222qaWgAAAVI"]
[Wed Nov 26 18:10:15.023677 2025] [:error] [pid 45684:tid 45722] [client 146.70.186.204:44486] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSbSB_g5LMxwI4-PD1cqvwAAAAc"]
[Wed Nov 26 18:10:15.429761 2025] [:error] [pid 45683:tid 45696] [client 146.70.186.204:44496] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSbSBxX1gQgNFW_222qaYAAAAUg"]
[Wed Nov 26 18:10:16.261094 2025] [:error] [pid 45683:tid 45692] [client 146.70.186.204:44510] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSbSCBX1gQgNFW_222qaYwAAAUQ"]
[Wed Nov 26 18:10:16.873149 2025] [:error] [pid 45683:tid 45688] [client 146.70.186.204:44524] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSbSCBX1gQgNFW_222qaZQAAAUA"]
[Wed Nov 26 18:10:17.490045 2025] [:error] [pid 46443:tid 46449] [client 146.70.186.204:44528] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSbSCcLmDsnHrj-QFB_IVgAAAEQ"]
[Wed Nov 26 18:10:17.896192 2025] [:error] [pid 20733:tid 20738] [client 146.70.186.204:44540] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSbSCQV9EP2HuRvnH8dHIwAAAMM"]
[Wed Nov 26 18:10:18.308768 2025] [:error] [pid 46443:tid 46457] [client 146.70.186.204:44546] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSbSCsLmDsnHrj-QFB_IWAAAAEw"]
[Wed Nov 26 18:10:19.338923 2025] [:error] [pid 45683:tid 45694] [client 146.70.186.204:44554] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSbSCxX1gQgNFW_222qadQAAAUY"]
[Wed Nov 26 18:10:19.963997 2025] [:error] [pid 20733:tid 20758] [client 146.70.186.204:44558] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSbSCwV9EP2HuRvnH8dHJQAAANc"]
[Wed Nov 26 18:10:20.994679 2025] [:error] [pid 45684:tid 45732] [client 146.70.186.204:44562] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSbSDPg5LMxwI4-PD1cq1gAAABE"]
[Wed Nov 26 18:10:21.400897 2025] [:error] [pid 45684:tid 45730] [client 146.70.186.204:38352] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSbSDfg5LMxwI4-PD1cq2AAAAA8"]
[Wed Nov 26 18:10:22.018871 2025] [:error] [pid 45684:tid 45722] [client 146.70.186.204:38360] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSbSDvg5LMxwI4-PD1cq4AAAAAc"]
[Wed Nov 26 18:10:24.290273 2025] [:error] [pid 45769:tid 45785] [client 146.70.186.204:38362] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSbSEFdG5Eht9c3yy4MTIAAAAc0"]
[Wed Nov 26 18:10:24.912872 2025] [:error] [pid 45683:tid 45704] [client 146.70.186.204:38366] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSbSEBX1gQgNFW_222qafAAAAVA"]
[Wed Nov 26 18:10:25.734125 2025] [:error] [pid 45684:tid 45726] [client 146.70.186.204:38370] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSbSEfg5LMxwI4-PD1cq8wAAAAs"]
[Wed Nov 26 18:10:26.139118 2025] [:error] [pid 45769:tid 45789] [client 146.70.186.204:38386] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSbSEldG5Eht9c3yy4MTIQAAAdE"]
[Wed Nov 26 18:10:26.545081 2025] [:error] [pid 45684:tid 45738] [client 146.70.186.204:38398] [client 146.70.186.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSbSEvg5LMxwI4-PD1cq-wAAABc"]
[Wed Nov 26 18:10:58.845369 2025] [:error] [pid 45769:tid 45781] [client 84.17.35.119:57080] [client 84.17.35.119] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "157.173.110.15_68b0c1b0b04d7e3dbb8ef1f3915d3b67959f4b56"): Internal error (specific information not available) [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-includes/IXR/"] [unique_id "aSbSL1dG5Eht9c3yy4MTfgAAAck"]
[Wed Nov 26 18:59:07.639946 2025] [:error] [pid 20733:tid 20737] [client 43.157.188.74:60584] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSbdewV9EP2HuRvnH8dTxgAAAMI"]
[Wed Nov 26 21:41:33.655466 2025] [:error] [pid 6471:tid 6493] [client 216.126.239.203:43468] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aScDjeh3Z9TZLlRuTiOydwAAAJM"]
[Thu Nov 27 00:54:12.262354 2025] [:error] [pid 24826:tid 25126] [client 103.77.107.57:55827] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aScwtFEvPXLVl-nh-yLcsAAAAQs"]
[Thu Nov 27 00:54:12.504286 2025] [:error] [pid 25262:tid 25330] [client 103.77.107.57:60016] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aScwtE3p81VU3bYILBU9UQAAAgk"]
[Thu Nov 27 01:14:42.643480 2025] [:error] [pid 54723:tid 54734] [client 131.255.20.238:6737] [client 131.255.20.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.255.20.238, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSc1gg2CEg7QoyDosdL4JAAAAAQ"]
[Thu Nov 27 06:25:27.388222 2025] [:error] [pid 21017:tid 21079] [client 4.241.209.139:10230] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aSd-V6ZA663ub03MMQuz8wAAARQ"]
[Thu Nov 27 06:25:27.714496 2025] [:error] [pid 6203:tid 6260] [client 4.241.209.139:10177] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aSd-V8bdRL7aKyrgqyzkuAAAAIA"]
[Thu Nov 27 06:25:27.993972 2025] [:error] [pid 6202:tid 6240] [client 4.241.209.139:10224] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aSd-V9Ja7NTP0XPyZ6mBtgAAAEc"]
[Thu Nov 27 06:25:28.276385 2025] [:error] [pid 6201:tid 6213] [client 4.241.209.139:10127] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aSd-WDkSJeRkIQGTjzw82wAAAAg"]
[Thu Nov 27 06:25:28.581392 2025] [:error] [pid 6201:tid 6210] [client 4.241.209.139:10213] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aSd-WDkSJeRkIQGTjzw83AAAAAU"]
[Thu Nov 27 06:25:28.877067 2025] [:error] [pid 6290:tid 6302] [client 4.241.209.139:10178] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aSd-WIqL4zye-zKr6su5AwAAAMg"]
[Thu Nov 27 06:25:29.302547 2025] [:error] [pid 6202:tid 6234] [client 4.241.209.139:10214] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aSd-WdJa7NTP0XPyZ6mBtwAAAEE"]
[Thu Nov 27 06:25:29.588362 2025] [:error] [pid 6290:tid 6314] [client 4.241.209.139:10188] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aSd-WYqL4zye-zKr6su5BAAAANQ"]
[Thu Nov 27 06:25:29.968912 2025] [:error] [pid 6202:tid 6247] [client 4.241.209.139:10221] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aSd-WdJa7NTP0XPyZ6mBuAAAAE4"]
[Thu Nov 27 06:25:30.284857 2025] [:error] [pid 6202:tid 6257] [client 4.241.209.139:10195] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aSd-WtJa7NTP0XPyZ6mBuQAAAFg"]
[Thu Nov 27 06:25:30.617836 2025] [:error] [pid 6290:tid 6318] [client 4.241.209.139:10176] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aSd-WoqL4zye-zKr6su5BgAAANg"]
[Thu Nov 27 06:25:30.949292 2025] [:error] [pid 6202:tid 6238] [client 4.241.209.139:10211] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aSd-WtJa7NTP0XPyZ6mBugAAAEU"]
[Thu Nov 27 06:25:31.248427 2025] [:error] [pid 6202:tid 6244] [client 4.241.209.139:10215] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cok.php"] [unique_id "aSd-W9Ja7NTP0XPyZ6mBuwAAAEs"]
[Thu Nov 27 06:25:31.512268 2025] [:error] [pid 6202:tid 6242] [client 4.241.209.139:10227] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cok.php"] [unique_id "aSd-W9Ja7NTP0XPyZ6mBvAAAAEk"]
[Thu Nov 27 06:25:31.873507 2025] [:error] [pid 6202:tid 6255] [client 4.241.209.139:10206] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cok.php"] [unique_id "aSd-W9Ja7NTP0XPyZ6mBvQAAAFY"]
[Thu Nov 27 06:25:32.145429 2025] [:error] [pid 6202:tid 6253] [client 4.241.209.139:10124] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cok.php"] [unique_id "aSd-XNJa7NTP0XPyZ6mBvwAAAFQ"]
[Thu Nov 27 06:25:32.411349 2025] [:error] [pid 6202:tid 6245] [client 4.241.209.139:10115] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aSd-XNJa7NTP0XPyZ6mBwgAAAEw"]
[Thu Nov 27 06:25:32.690516 2025] [:error] [pid 6202:tid 6249] [client 4.241.209.139:10131] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aSd-XNJa7NTP0XPyZ6mBwwAAAFA"]
[Thu Nov 27 06:25:32.992137 2025] [:error] [pid 6203:tid 6268] [client 4.241.209.139:10208] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aSd-XMbdRL7aKyrgqyzkuQAAAIg"]
[Thu Nov 27 06:25:33.298835 2025] [:error] [pid 21017:tid 21066] [client 4.241.209.139:10182] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aSd-XaZA663ub03MMQuz9AAAAQc"]
[Thu Nov 27 06:25:33.699781 2025] [:error] [pid 21017:tid 21065] [client 4.241.209.139:10129] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aSd-XaZA663ub03MMQuz9QAAAQY"]
[Thu Nov 27 06:25:34.033891 2025] [:error] [pid 6290:tid 6317] [client 4.241.209.139:10053] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aSd-XoqL4zye-zKr6su5BwAAANc"]
[Thu Nov 27 06:25:34.394187 2025] [:error] [pid 21017:tid 21059] [client 4.241.209.139:10164] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aSd-XqZA663ub03MMQuz9wAAAQA"]
[Thu Nov 27 06:25:34.687434 2025] [:error] [pid 21017:tid 21080] [client 4.241.209.139:10119] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aSd-XqZA663ub03MMQuz-AAAARU"]
[Thu Nov 27 06:25:35.227104 2025] [:error] [pid 6202:tid 6236] [client 4.241.209.139:10120] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aSd-X9Ja7NTP0XPyZ6mBxgAAAEM"]
[Thu Nov 27 06:25:35.585740 2025] [:error] [pid 21017:tid 21068] [client 4.241.209.139:10077] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aSd-X6ZA663ub03MMQuz-gAAAQk"]
[Thu Nov 27 06:25:35.870964 2025] [:error] [pid 6203:tid 6275] [client 4.241.209.139:10201] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aSd-X8bdRL7aKyrgqyzkugAAAI8"]
[Thu Nov 27 06:25:36.112678 2025] [:error] [pid 21017:tid 21062] [client 4.241.209.139:10123] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aSd-YKZA663ub03MMQuz-wAAAQM"]
[Thu Nov 27 06:25:36.382024 2025] [:error] [pid 21017:tid 21071] [client 4.241.209.139:10194] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lx.php"] [unique_id "aSd-YKZA663ub03MMQuz_AAAAQw"]
[Thu Nov 27 06:25:36.695096 2025] [:error] [pid 6202:tid 6235] [client 4.241.209.139:10190] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lx.php"] [unique_id "aSd-YNJa7NTP0XPyZ6mByQAAAEI"]
[Thu Nov 27 06:25:37.074628 2025] [:error] [pid 6203:tid 6274] [client 4.241.209.139:10226] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lx.php"] [unique_id "aSd-YcbdRL7aKyrgqyzkuwAAAI4"]
[Thu Nov 27 06:25:37.417925 2025] [:error] [pid 6203:tid 6266] [client 4.241.209.139:10212] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lx.php"] [unique_id "aSd-YcbdRL7aKyrgqyzkvAAAAIY"]
[Thu Nov 27 06:25:37.736269 2025] [:error] [pid 21017:tid 21072] [client 4.241.209.139:10112] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1w.php"] [unique_id "aSd-YaZA663ub03MMQu0AAAAAQ0"]
[Thu Nov 27 06:25:38.065831 2025] [:error] [pid 21017:tid 21060] [client 4.241.209.139:10055] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1w.php"] [unique_id "aSd-YqZA663ub03MMQu0AQAAAQE"]
[Thu Nov 27 06:25:38.440394 2025] [:error] [pid 21017:tid 21079] [client 4.241.209.139:10234] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1w.php"] [unique_id "aSd-YqZA663ub03MMQu0AgAAARQ"]
[Thu Nov 27 06:25:38.766493 2025] [:error] [pid 6203:tid 6263] [client 4.241.209.139:10218] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1w.php"] [unique_id "aSd-YsbdRL7aKyrgqyzkvgAAAIM"]
[Thu Nov 27 06:25:39.021498 2025] [:error] [pid 6201:tid 6212] [client 4.241.209.139:10192] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cafe.php"] [unique_id "aSd-YzkSJeRkIQGTjzw84QAAAAc"]
[Thu Nov 27 06:25:39.308398 2025] [:error] [pid 6203:tid 6261] [client 4.241.209.139:10200] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cafe.php"] [unique_id "aSd-Y8bdRL7aKyrgqyzkvwAAAIE"]
[Thu Nov 27 06:25:39.559119 2025] [:error] [pid 6202:tid 6257] [client 4.241.209.139:10141] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cafe.php"] [unique_id "aSd-Y9Ja7NTP0XPyZ6mBzAAAAFg"]
[Thu Nov 27 06:25:39.810130 2025] [:error] [pid 21017:tid 21063] [client 4.241.209.139:10199] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cafe.php"] [unique_id "aSd-Y6ZA663ub03MMQu0AwAAAQQ"]
[Thu Nov 27 06:25:40.138669 2025] [:error] [pid 21017:tid 21066] [client 4.241.209.139:10181] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww2.php"] [unique_id "aSd-ZKZA663ub03MMQu0BAAAAQc"]
[Thu Nov 27 06:25:40.506798 2025] [:error] [pid 21017:tid 21080] [client 4.241.209.139:10113] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww2.php"] [unique_id "aSd-ZKZA663ub03MMQu0BgAAARU"]
[Thu Nov 27 06:25:40.761486 2025] [:error] [pid 6201:tid 6228] [client 4.241.209.139:10180] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww2.php"] [unique_id "aSd-ZDkSJeRkIQGTjzw85AAAABc"]
[Thu Nov 27 06:25:41.060214 2025] [:error] [pid 6203:tid 6273] [client 4.241.209.139:10133] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww2.php"] [unique_id "aSd-ZcbdRL7aKyrgqyzkwAAAAI0"]
[Thu Nov 27 06:25:41.439327 2025] [:error] [pid 6202:tid 6244] [client 4.241.209.139:10132] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aSd-ZdJa7NTP0XPyZ6mBzgAAAEs"]
[Thu Nov 27 06:25:42.068839 2025] [:error] [pid 6290:tid 6305] [client 4.241.209.139:10069] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aSd-ZoqL4zye-zKr6su5DgAAAMs"]
[Thu Nov 27 06:25:42.451249 2025] [:error] [pid 6290:tid 6309] [client 4.241.209.139:10209] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aSd-ZoqL4zye-zKr6su5DwAAAM8"]
[Thu Nov 27 06:25:42.741417 2025] [:error] [pid 6290:tid 6303] [client 4.241.209.139:10006] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aSd-ZoqL4zye-zKr6su5EQAAAMk"]
[Thu Nov 27 06:25:43.159529 2025] [:error] [pid 6202:tid 6255] [client 4.241.209.139:10168] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/500.php"] [unique_id "aSd-Z9Ja7NTP0XPyZ6mB0AAAAFY"]
[Thu Nov 27 06:25:43.530183 2025] [:error] [pid 6203:tid 6265] [client 4.241.209.139:10140] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/500.php"] [unique_id "aSd-Z8bdRL7aKyrgqyzkwQAAAIU"]
[Thu Nov 27 06:25:43.876354 2025] [:error] [pid 21017:tid 21082] [client 4.241.209.139:10157] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/500.php"] [unique_id "aSd-Z6ZA663ub03MMQu0CAAAARc"]
[Thu Nov 27 06:25:44.233907 2025] [:error] [pid 21017:tid 21083] [client 4.241.209.139:10223] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/500.php"] [unique_id "aSd-aKZA663ub03MMQu0CQAAARg"]
[Thu Nov 27 06:25:44.812428 2025] [:error] [pid 21017:tid 21073] [client 4.241.209.139:10125] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aSd-aKZA663ub03MMQu0CgAAAQ4"]
[Thu Nov 27 06:25:45.077027 2025] [:error] [pid 6201:tid 6208] [client 4.241.209.139:10173] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aSd-aTkSJeRkIQGTjzw85QAAAAM"]
[Thu Nov 27 06:25:45.365163 2025] [:error] [pid 6290:tid 6314] [client 4.241.209.139:10183] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aSd-aYqL4zye-zKr6su5EgAAANQ"]
[Thu Nov 27 06:25:45.730530 2025] [:error] [pid 6201:tid 6226] [client 4.241.209.139:10216] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aSd-aTkSJeRkIQGTjzw85gAAABU"]
[Thu Nov 27 06:25:46.028946 2025] [:error] [pid 6290:tid 6317] [client 4.241.209.139:10184] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aSd-aoqL4zye-zKr6su5FAAAANc"]
[Thu Nov 27 06:25:46.355875 2025] [:error] [pid 6290:tid 6308] [client 4.241.209.139:10057] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aSd-aoqL4zye-zKr6su5FgAAAM4"]
[Thu Nov 27 06:25:46.840875 2025] [:error] [pid 6201:tid 6207] [client 4.241.209.139:10231] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aSd-ajkSJeRkIQGTjzw85wAAAAI"]
[Thu Nov 27 06:25:47.386659 2025] [:error] [pid 21017:tid 21076] [client 4.241.209.139:10235] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aSd-a6ZA663ub03MMQu0CwAAARE"]
[Thu Nov 27 06:25:47.764521 2025] [:error] [pid 21017:tid 21067] [client 4.241.209.139:10152] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aSd-a6ZA663ub03MMQu0DQAAAQg"]
[Thu Nov 27 06:25:48.209212 2025] [:error] [pid 6203:tid 6267] [client 4.241.209.139:10145] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aSd-bMbdRL7aKyrgqyzkwwAAAIc"]
[Thu Nov 27 06:25:49.014439 2025] [:error] [pid 6203:tid 6262] [client 4.241.209.139:10050] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aSd-bcbdRL7aKyrgqyzkxAAAAII"]
[Thu Nov 27 06:25:50.384143 2025] [:error] [pid 21017:tid 21077] [client 4.241.209.139:10136] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aSd-bqZA663ub03MMQu0EAAAARI"]
[Thu Nov 27 06:25:51.663384 2025] [:error] [pid 6290:tid 6297] [client 4.241.209.139:10197] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aSd-b4qL4zye-zKr6su5GgAAAMM"]
[Thu Nov 27 06:25:52.646402 2025] [:error] [pid 6290:tid 6296] [client 4.241.209.139:10048] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aSd-cIqL4zye-zKr6su5HQAAAMI"]
[Thu Nov 27 06:25:53.447599 2025] [:error] [pid 21017:tid 21063] [client 4.241.209.139:10066] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aSd-caZA663ub03MMQu0EwAAAQQ"]
[Thu Nov 27 06:25:54.665266 2025] [:error] [pid 6290:tid 6305] [client 4.241.209.139:10126] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aSd-coqL4zye-zKr6su5IAAAAMs"]
[Thu Nov 27 06:25:55.948804 2025] [:error] [pid 6203:tid 6260] [client 4.241.209.139:10144] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aSd-c8bdRL7aKyrgqyzkyAAAAIA"]
[Thu Nov 27 06:25:56.429394 2025] [:error] [pid 21017:tid 21062] [client 4.241.209.139:10049] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aSd-dKZA663ub03MMQu0GAAAAQM"]
[Thu Nov 27 06:25:57.035622 2025] [:error] [pid 6203:tid 6282] [client 4.241.209.139:10142] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aSd-dcbdRL7aKyrgqyzkyQAAAJY"]
[Thu Nov 27 06:25:57.703702 2025] [:error] [pid 6290:tid 6299] [client 4.241.209.139:10065] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aSd-dYqL4zye-zKr6su5JQAAAMU"]
[Thu Nov 27 06:25:58.154641 2025] [:error] [pid 6201:tid 6211] [client 4.241.209.139:10167] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSd-djkSJeRkIQGTjzw87AAAAAY"]
[Thu Nov 27 06:25:58.442118 2025] [:error] [pid 6201:tid 6224] [client 4.241.209.139:10228] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSd-djkSJeRkIQGTjzw87QAAABM"]
[Thu Nov 27 06:25:58.905197 2025] [:error] [pid 6203:tid 6275] [client 4.241.209.139:9986] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSd-dsbdRL7aKyrgqyzkzAAAAI8"]
[Thu Nov 27 06:25:59.520077 2025] [:error] [pid 6290:tid 6306] [client 4.241.209.139:10048] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSd-d4qL4zye-zKr6su5JgAAAMw"]
[Thu Nov 27 06:25:59.891617 2025] [:error] [pid 6290:tid 6296] [client 4.241.209.139:10072] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSd-d4qL4zye-zKr6su5JwAAAMI"]
[Thu Nov 27 06:26:00.290728 2025] [:error] [pid 6290:tid 6294] [client 4.241.209.139:10151] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSd-eIqL4zye-zKr6su5KAAAAMA"]
[Thu Nov 27 06:26:00.631282 2025] [:error] [pid 6290:tid 6305] [client 4.241.209.139:10150] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSd-eIqL4zye-zKr6su5KQAAAMs"]
[Thu Nov 27 06:26:01.045449 2025] [:error] [pid 6203:tid 6263] [client 4.241.209.139:10116] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSd-ecbdRL7aKyrgqyzkzwAAAIM"]
[Thu Nov 27 06:26:01.651096 2025] [:error] [pid 6201:tid 6222] [client 4.241.209.139:10122] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSd-eTkSJeRkIQGTjzw88AAAABE"]
[Thu Nov 27 06:26:01.997970 2025] [:error] [pid 6290:tid 6298] [client 4.241.209.139:10205] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSd-eYqL4zye-zKr6su5KwAAAMQ"]
[Thu Nov 27 06:26:02.381681 2025] [:error] [pid 21017:tid 21073] [client 4.241.209.139:10080] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSd-eqZA663ub03MMQu0GQAAAQ4"]
[Thu Nov 27 06:26:02.722918 2025] [:error] [pid 6202:tid 6239] [client 4.241.209.139:10219] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aSd-etJa7NTP0XPyZ6mB8wAAAEY"]
[Thu Nov 27 06:26:03.036249 2025] [:error] [pid 6203:tid 6261] [client 4.241.209.139:10060] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aSd-e8bdRL7aKyrgqyzk0AAAAIE"]
[Thu Nov 27 06:26:03.387165 2025] [:error] [pid 21017:tid 21067] [client 4.241.209.139:10196] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aSd-e6ZA663ub03MMQu0GwAAAQg"]
[Thu Nov 27 06:26:03.743306 2025] [:error] [pid 6203:tid 6273] [client 4.241.209.139:10095] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aSd-e8bdRL7aKyrgqyzk0QAAAI0"]
[Thu Nov 27 06:26:04.201381 2025] [:error] [pid 6203:tid 6265] [client 4.241.209.139:10068] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aSd-fMbdRL7aKyrgqyzk0gAAAIU"]
[Thu Nov 27 06:26:04.553181 2025] [:error] [pid 6203:tid 6278] [client 4.241.209.139:10100] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aSd-fMbdRL7aKyrgqyzk0wAAAJI"]
[Thu Nov 27 06:26:04.901276 2025] [:error] [pid 6202:tid 6249] [client 4.241.209.139:10164] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aSd-fNJa7NTP0XPyZ6mB9wAAAFA"]
[Thu Nov 27 06:26:05.205631 2025] [:error] [pid 6203:tid 6276] [client 4.241.209.139:10202] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aSd-fcbdRL7aKyrgqyzk1AAAAJA"]
[Thu Nov 27 06:26:05.476924 2025] [:error] [pid 6290:tid 6299] [client 4.241.209.139:10160] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aSd-fYqL4zye-zKr6su5MgAAAMU"]
[Thu Nov 27 06:26:05.857790 2025] [:error] [pid 21017:tid 21061] [client 4.241.209.139:10078] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aSd-faZA663ub03MMQu0HgAAAQI"]
[Thu Nov 27 06:26:06.258731 2025] [:error] [pid 21017:tid 21060] [client 4.241.209.139:10099] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aSd-fqZA663ub03MMQu0IAAAAQE"]
[Thu Nov 27 06:26:06.637795 2025] [:error] [pid 21017:tid 21079] [client 4.241.209.139:10100] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aSd-fqZA663ub03MMQu0IQAAARQ"]
[Thu Nov 27 06:26:06.990078 2025] [:error] [pid 21017:tid 21063] [client 4.241.209.139:10088] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aSd-fqZA663ub03MMQu0IgAAAQQ"]
[Thu Nov 27 06:26:07.258129 2025] [:error] [pid 6290:tid 6307] [client 4.241.209.139:10121] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSd-f4qL4zye-zKr6su5NQAAAM0"]
[Thu Nov 27 06:26:07.583633 2025] [:error] [pid 6290:tid 6297] [client 4.241.209.139:10159] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSd-f4qL4zye-zKr6su5NgAAAMM"]
[Thu Nov 27 06:26:07.905507 2025] [:error] [pid 6201:tid 6213] [client 4.241.209.139:10138] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSd-fzkSJeRkIQGTjzw8-AAAAAg"]
[Thu Nov 27 06:26:08.219816 2025] [:error] [pid 6201:tid 6214] [client 4.241.209.139:10232] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSd-gDkSJeRkIQGTjzw8-QAAAAk"]
[Thu Nov 27 06:26:08.462209 2025] [:error] [pid 6202:tid 6252] [client 4.241.209.139:10217] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSd-gNJa7NTP0XPyZ6mB-QAAAFM"]
[Thu Nov 27 06:26:08.821857 2025] [:error] [pid 6202:tid 6237] [client 4.241.209.139:10054] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSd-gNJa7NTP0XPyZ6mB-gAAAEQ"]
[Thu Nov 27 06:26:09.097561 2025] [:error] [pid 6203:tid 6277] [client 4.241.209.139:10238] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSd-gcbdRL7aKyrgqyzk1wAAAJE"]
[Thu Nov 27 06:26:09.370411 2025] [:error] [pid 6202:tid 6251] [client 4.241.209.139:10093] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSd-gdJa7NTP0XPyZ6mB-wAAAFI"]
[Thu Nov 27 06:26:09.799154 2025] [:error] [pid 6290:tid 6294] [client 4.241.209.139:10146] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aSd-gYqL4zye-zKr6su5OQAAAMA"]
[Thu Nov 27 06:26:10.086840 2025] [:error] [pid 6201:tid 6210] [client 4.241.209.139:10130] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aSd-gjkSJeRkIQGTjzw8-wAAAAU"]
[Thu Nov 27 06:26:10.399956 2025] [:error] [pid 6203:tid 6280] [client 4.241.209.139:10071] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aSd-gsbdRL7aKyrgqyzk2QAAAJQ"]
[Thu Nov 27 06:26:10.686361 2025] [:error] [pid 6203:tid 6282] [client 4.241.209.139:10203] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aSd-gsbdRL7aKyrgqyzk2gAAAJY"]
[Thu Nov 27 06:26:10.985814 2025] [:error] [pid 6201:tid 6211] [client 4.241.209.139:10085] [client 4.241.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSd-gjkSJeRkIQGTjzw8_QAAAAY"]
[Thu Nov 27 06:26:11.290231 2025] [:error] [pid 21017:tid 21068] [client 4.241.209.139:10051] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/termps.php"] [unique_id "aSd-g6ZA663ub03MMQu0JwAAAQk"]
[Thu Nov 27 06:26:11.604059 2025] [:error] [pid 21017:tid 21071] [client 4.241.209.139:10237] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/termps.php"] [unique_id "aSd-g6ZA663ub03MMQu0KAAAAQw"]
[Thu Nov 27 06:26:11.887691 2025] [:error] [pid 6202:tid 6246] [client 4.241.209.139:10135] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/termps.php"] [unique_id "aSd-g9Ja7NTP0XPyZ6mB_AAAAE0"]
[Thu Nov 27 06:26:12.198736 2025] [:error] [pid 6290:tid 6295] [client 4.241.209.139:10010] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aSd-hIqL4zye-zKr6su5PQAAAME"]
[Thu Nov 27 06:26:12.454379 2025] [:error] [pid 6202:tid 6243] [client 4.241.209.139:10118] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aSd-hNJa7NTP0XPyZ6mB_QAAAEo"]
[Thu Nov 27 06:26:12.882625 2025] [:error] [pid 6202:tid 6235] [client 4.241.209.139:10114] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aSd-hNJa7NTP0XPyZ6mB_gAAAEI"]
[Thu Nov 27 06:26:13.393891 2025] [:error] [pid 6202:tid 6247] [client 4.241.209.139:10198] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aSd-hdJa7NTP0XPyZ6mB_wAAAE4"]
[Thu Nov 27 06:26:13.742666 2025] [:error] [pid 6203:tid 6263] [client 4.241.209.139:10056] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSd-hcbdRL7aKyrgqyzk3gAAAIM"]
[Thu Nov 27 06:26:14.044274 2025] [:error] [pid 6202:tid 6240] [client 4.241.209.139:10091] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSd-htJa7NTP0XPyZ6mCAQAAAEc"]
[Thu Nov 27 06:26:14.290651 2025] [:error] [pid 6201:tid 6220] [client 4.241.209.139:10107] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSd-hjkSJeRkIQGTjzw8_wAAAA8"]
[Thu Nov 27 06:26:14.586906 2025] [:error] [pid 6202:tid 6244] [client 4.241.209.139:10079] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aSd-htJa7NTP0XPyZ6mCAgAAAEs"]
[Thu Nov 27 06:26:14.989999 2025] [:error] [pid 6201:tid 6208] [client 4.241.209.139:10220] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dada.php"] [unique_id "aSd-hjkSJeRkIQGTjzw9AAAAAAM"]
[Thu Nov 27 06:26:15.390291 2025] [:error] [pid 21017:tid 21074] [client 4.241.209.139:10158] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dada.php"] [unique_id "aSd-h6ZA663ub03MMQu0KwAAAQ8"]
[Thu Nov 27 06:26:15.697503 2025] [:error] [pid 6201:tid 6227] [client 4.241.209.139:10170] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dada.php"] [unique_id "aSd-hzkSJeRkIQGTjzw9AQAAABY"]
[Thu Nov 27 06:26:15.991640 2025] [:error] [pid 21017:tid 21067] [client 4.241.209.139:10067] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dada.php"] [unique_id "aSd-h6ZA663ub03MMQu0LAAAAQg"]
[Thu Nov 27 06:26:16.402806 2025] [:error] [pid 21017:tid 21070] [client 4.241.209.139:10110] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aSd-iKZA663ub03MMQu0LgAAAQs"]
[Thu Nov 27 06:26:16.711095 2025] [:error] [pid 21017:tid 21075] [client 4.241.209.139:10239] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aSd-iKZA663ub03MMQu0LwAAARA"]
[Thu Nov 27 06:26:17.067932 2025] [:error] [pid 6290:tid 6311] [client 4.241.209.139:10074] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aSd-iYqL4zye-zKr6su5PgAAANE"]
[Thu Nov 27 06:26:17.448297 2025] [:error] [pid 21017:tid 21060] [client 4.241.209.139:9995] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aSd-iaZA663ub03MMQu0MAAAAQE"]
[Thu Nov 27 06:26:17.716924 2025] [:error] [pid 21017:tid 21079] [client 4.241.209.139:10137] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSd-iaZA663ub03MMQu0MQAAARQ"]
[Thu Nov 27 06:26:17.985127 2025] [:error] [pid 6203:tid 6265] [client 4.241.209.139:10059] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSd-icbdRL7aKyrgqyzk4AAAAIU"]
[Thu Nov 27 06:26:18.323116 2025] [:error] [pid 6290:tid 6314] [client 4.241.209.139:10166] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSd-ioqL4zye-zKr6su5QAAAANQ"]
[Thu Nov 27 06:26:18.572008 2025] [:error] [pid 6290:tid 6299] [client 4.241.209.139:10090] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSd-ioqL4zye-zKr6su5QQAAAMU"]
[Thu Nov 27 06:26:18.866626 2025] [:error] [pid 21017:tid 21064] [client 4.241.209.139:10092] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aSd-iqZA663ub03MMQu0NAAAAQU"]
[Thu Nov 27 06:26:19.120848 2025] [:error] [pid 6290:tid 6313] [client 4.241.209.139:10104] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aSd-i4qL4zye-zKr6su5QgAAANM"]
[Thu Nov 27 06:26:19.381557 2025] [:error] [pid 21017:tid 21080] [client 4.241.209.139:10204] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aSd-i6ZA663ub03MMQu0NQAAARU"]
[Thu Nov 27 06:26:19.706318 2025] [:error] [pid 21017:tid 21081] [client 4.241.209.139:10082] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aSd-i6ZA663ub03MMQu0NgAAARY"]
[Thu Nov 27 06:26:20.083294 2025] [:error] [pid 6202:tid 6239] [client 4.241.209.139:10225] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aSd-jNJa7NTP0XPyZ6mCBgAAAEY"]
[Thu Nov 27 06:26:20.369258 2025] [:error] [pid 21017:tid 21059] [client 4.241.209.139:10061] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aSd-jKZA663ub03MMQu0OAAAAQA"]
[Thu Nov 27 06:26:21.050258 2025] [:error] [pid 21017:tid 21062] [client 4.241.209.139:10083] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aSd-jaZA663ub03MMQu0OQAAAQM"]
[Thu Nov 27 06:26:21.306340 2025] [:error] [pid 6290:tid 6302] [client 4.241.209.139:10179] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aSd-jYqL4zye-zKr6su5QwAAAMg"]
[Thu Nov 27 06:26:21.994644 2025] [:error] [pid 21017:tid 21076] [client 4.241.209.139:10103] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSd-jaZA663ub03MMQu0OwAAARE"]
[Thu Nov 27 06:26:22.318320 2025] [:error] [pid 21017:tid 21074] [client 4.241.209.139:9996] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSd-jqZA663ub03MMQu0PAAAAQ8"]
[Thu Nov 27 06:26:22.856941 2025] [:error] [pid 6202:tid 6241] [client 4.241.209.139:10207] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSd-jtJa7NTP0XPyZ6mCBwAAAEg"]
[Thu Nov 27 06:26:23.148144 2025] [:error] [pid 6202:tid 6249] [client 4.241.209.139:9991] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aSd-j9Ja7NTP0XPyZ6mCCAAAAFA"]
[Thu Nov 27 06:26:23.515144 2025] [:error] [pid 6202:tid 6248] [client 4.241.209.139:10174] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aSd-j9Ja7NTP0XPyZ6mCCQAAAE8"]
[Thu Nov 27 06:26:23.912425 2025] [:error] [pid 6203:tid 6262] [client 4.241.209.139:10175] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aSd-j8bdRL7aKyrgqyzk4gAAAII"]
[Thu Nov 27 06:26:24.261998 2025] [:error] [pid 21017:tid 21075] [client 4.241.209.139:10058] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aSd-kKZA663ub03MMQu0PwAAARA"]
[Thu Nov 27 06:26:24.754248 2025] [:error] [pid 6201:tid 6207] [client 4.241.209.139:10149] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aSd-kDkSJeRkIQGTjzw9AgAAAAI"]
[Thu Nov 27 06:26:25.101945 2025] [:error] [pid 6203:tid 6281] [client 4.241.209.139:10087] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aSd-kcbdRL7aKyrgqyzk5AAAAJU"]
[Thu Nov 27 06:26:25.498180 2025] [:error] [pid 6203:tid 6270] [client 4.241.209.139:10154] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aSd-kcbdRL7aKyrgqyzk5QAAAIo"]
[Thu Nov 27 06:26:26.052424 2025] [:error] [pid 6203:tid 6277] [client 4.241.209.139:10155] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aSd-ksbdRL7aKyrgqyzk5gAAAJE"]
[Thu Nov 27 06:26:26.450154 2025] [:error] [pid 6202:tid 6252] [client 4.241.209.139:9999] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aSd-ktJa7NTP0XPyZ6mCDAAAAFM"]
[Thu Nov 27 06:26:26.846602 2025] [:error] [pid 6290:tid 6297] [client 4.241.209.139:10034] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aSd-koqL4zye-zKr6su5RgAAAMM"]
[Thu Nov 27 06:26:30.737160 2025] [:error] [pid 6202:tid 6256] [client 4.241.209.139:10205] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSd-ltJa7NTP0XPyZ6mCHAAAAFc"]
[Thu Nov 27 06:26:31.031432 2025] [:error] [pid 6201:tid 6217] [client 4.241.209.139:10031] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSd-lzkSJeRkIQGTjzw9BwAAAAw"]
[Thu Nov 27 06:26:31.287971 2025] [:error] [pid 6202:tid 6248] [client 4.241.209.139:10081] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSd-l9Ja7NTP0XPyZ6mCHQAAAE8"]
[Thu Nov 27 06:26:31.535313 2025] [:error] [pid 6201:tid 6229] [client 4.241.209.139:10026] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSd-lzkSJeRkIQGTjzw9CAAAABg"]
[Thu Nov 27 06:26:31.787108 2025] [:error] [pid 21017:tid 21080] [client 4.241.209.139:10143] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSd-l6ZA663ub03MMQu0QgAAARU"]
[Thu Nov 27 06:26:32.121661 2025] [:error] [pid 21017:tid 21081] [client 4.241.209.139:10105] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSd-mKZA663ub03MMQu0QwAAARY"]
[Thu Nov 27 06:26:32.479742 2025] [:error] [pid 6290:tid 6294] [client 4.241.209.139:10029] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSd-mIqL4zye-zKr6su5SAAAAMA"]
[Thu Nov 27 06:26:32.932992 2025] [:error] [pid 6290:tid 6305] [client 4.241.209.139:10018] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSd-mIqL4zye-zKr6su5SQAAAMs"]
[Thu Nov 27 06:26:33.186101 2025] [:error] [pid 6201:tid 6219] [client 4.241.209.139:10148] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSd-mTkSJeRkIQGTjzw9CQAAAA4"]
[Thu Nov 27 06:26:33.543507 2025] [:error] [pid 21017:tid 21062] [client 4.241.209.139:10041] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSd-maZA663ub03MMQu0RgAAAQM"]
[Thu Nov 27 06:26:33.861894 2025] [:error] [pid 6202:tid 6254] [client 4.241.209.139:10033] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSd-mdJa7NTP0XPyZ6mCHgAAAFU"]
[Thu Nov 27 06:26:34.412255 2025] [:error] [pid 21017:tid 21073] [client 4.241.209.139:10064] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSd-mqZA663ub03MMQu0SAAAAQ4"]
[Thu Nov 27 06:26:34.736807 2025] [:error] [pid 6201:tid 6224] [client 4.241.209.139:10096] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSd-mjkSJeRkIQGTjzw9CwAAABM"]
[Thu Nov 27 06:26:35.264039 2025] [:error] [pid 6202:tid 6237] [client 4.241.209.139:9994] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSd-m9Ja7NTP0XPyZ6mCHwAAAEQ"]
[Thu Nov 27 06:26:35.745833 2025] [:error] [pid 6202:tid 6251] [client 4.241.209.139:10052] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSd-m9Ja7NTP0XPyZ6mCIAAAAFI"]
[Thu Nov 27 06:26:36.286379 2025] [:error] [pid 6203:tid 6278] [client 4.241.209.139:10109] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSd-nMbdRL7aKyrgqyzk9AAAAJI"]
[Thu Nov 27 06:26:36.821609 2025] [:error] [pid 6202:tid 6246] [client 4.241.209.139:10041] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aSd-nNJa7NTP0XPyZ6mCIQAAAE0"]
[Thu Nov 27 06:26:37.242187 2025] [:error] [pid 6201:tid 6227] [client 4.241.209.139:10047] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aSd-nTkSJeRkIQGTjzw9DgAAABY"]
[Thu Nov 27 06:26:37.820327 2025] [:error] [pid 21017:tid 21074] [client 4.241.209.139:10040] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aSd-naZA663ub03MMQu0SgAAAQ8"]
[Thu Nov 27 06:26:38.542001 2025] [:error] [pid 21017:tid 21061] [client 4.241.209.139:10075] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aSd-nqZA663ub03MMQu0SwAAAQI"]
[Thu Nov 27 06:26:39.037205 2025] [:error] [pid 6202:tid 6247] [client 4.241.209.139:10009] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aSd-n9Ja7NTP0XPyZ6mCIwAAAE4"]
[Thu Nov 27 06:26:39.486602 2025] [:error] [pid 6201:tid 6207] [client 4.241.209.139:10172] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aSd-nzkSJeRkIQGTjzw9EAAAAAI"]
[Thu Nov 27 06:26:40.467476 2025] [:error] [pid 6203:tid 6270] [client 4.241.209.139:9952] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aSd-oMbdRL7aKyrgqyzk9wAAAIo"]
[Thu Nov 27 06:26:41.007157 2025] [:error] [pid 6202:tid 6255] [client 4.241.209.139:10084] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aSd-odJa7NTP0XPyZ6mCKgAAAFY"]
[Thu Nov 27 06:26:41.923247 2025] [:error] [pid 6201:tid 6210] [client 4.241.209.139:9940] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aSd-oTkSJeRkIQGTjzw9EgAAAAU"]
[Thu Nov 27 06:26:42.517968 2025] [:error] [pid 6290:tid 6311] [client 4.241.209.139:10005] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aSd-ooqL4zye-zKr6su5TgAAANE"]
[Thu Nov 27 06:26:43.628537 2025] [:error] [pid 6202:tid 6255] [client 4.241.209.139:10086] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aSd-o9Ja7NTP0XPyZ6mCNQAAAFY"]
[Thu Nov 27 06:26:44.652799 2025] [:error] [pid 6201:tid 6209] [client 4.241.209.139:9934] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aSd-pDkSJeRkIQGTjzw9FwAAAAQ"]
[Thu Nov 27 06:26:45.944601 2025] [:error] [pid 6203:tid 6265] [client 4.241.209.139:10189] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSd-pcbdRL7aKyrgqyzlAAAAAIU"]
[Thu Nov 27 06:26:48.048915 2025] [:error] [pid 6201:tid 6224] [client 4.241.209.139:10063] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSd-qDkSJeRkIQGTjzw9GAAAABM"]
[Thu Nov 27 06:26:49.855480 2025] [:error] [pid 6203:tid 6280] [client 4.241.209.139:9965] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSd-qcbdRL7aKyrgqyzlBgAAAJQ"]
[Thu Nov 27 06:26:50.624869 2025] [:error] [pid 6203:tid 6264] [client 4.241.209.139:9984] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSd-qsbdRL7aKyrgqyzlCQAAAIQ"]
[Thu Nov 27 06:26:51.278144 2025] [:error] [pid 21017:tid 21068] [client 4.241.209.139:10108] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSd-q6ZA663ub03MMQu0UAAAAQk"]
[Thu Nov 27 06:26:51.789224 2025] [:error] [pid 6203:tid 6263] [client 4.241.209.139:9974] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSd-q8bdRL7aKyrgqyzlCwAAAIM"]
[Thu Nov 27 06:26:52.192873 2025] [:error] [pid 6201:tid 6207] [client 4.241.209.139:10021] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSd-rDkSJeRkIQGTjzw9HAAAAAI"]
[Thu Nov 27 06:26:52.756827 2025] [:error] [pid 21017:tid 21073] [client 4.241.209.139:9987] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aSd-rKZA663ub03MMQu0UwAAAQ4"]
[Thu Nov 27 06:26:53.062014 2025] [:error] [pid 21017:tid 21074] [client 4.241.209.139:10018] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aSd-raZA663ub03MMQu0VAAAAQ8"]
[Thu Nov 27 06:26:53.680265 2025] [:error] [pid 21017:tid 21075] [client 4.241.209.139:9985] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aSd-raZA663ub03MMQu0VQAAARA"]
[Thu Nov 27 06:26:54.415599 2025] [:error] [pid 6290:tid 6309] [client 4.241.209.139:10169] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aSd-roqL4zye-zKr6su5XQAAAM8"]
[Thu Nov 27 06:26:54.752937 2025] [:error] [pid 6290:tid 6313] [client 4.241.209.139:9982] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aSd-roqL4zye-zKr6su5XgAAANM"]
[Thu Nov 27 06:26:55.208782 2025] [:error] [pid 21017:tid 21077] [client 4.241.209.139:10128] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSd-r6ZA663ub03MMQu0VwAAARI"]
[Thu Nov 27 06:26:55.864017 2025] [:error] [pid 21017:tid 21065] [client 4.241.209.139:9992] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSd-r6ZA663ub03MMQu0WAAAAQY"]
[Thu Nov 27 06:26:56.303141 2025] [:error] [pid 6201:tid 6224] [client 4.241.209.139:10001] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSd-sDkSJeRkIQGTjzw9JAAAABM"]
[Thu Nov 27 06:26:56.858735 2025] [:error] [pid 6201:tid 6211] [client 4.241.209.139:9932] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSd-sDkSJeRkIQGTjzw9JQAAAAY"]
[Thu Nov 27 06:26:57.338002 2025] [:error] [pid 6201:tid 6208] [client 4.241.209.139:10229] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aSd-sTkSJeRkIQGTjzw9JgAAAAM"]
[Thu Nov 27 06:26:58.061938 2025] [:error] [pid 21017:tid 21082] [client 4.241.209.139:10153] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aSd-sqZA663ub03MMQu0WgAAARc"]
[Thu Nov 27 06:26:58.582495 2025] [:error] [pid 6201:tid 6227] [client 4.241.209.139:10030] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aSd-sjkSJeRkIQGTjzw9JwAAABY"]
[Thu Nov 27 06:26:58.880684 2025] [:error] [pid 6202:tid 6237] [client 4.241.209.139:10163] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aSd-stJa7NTP0XPyZ6mCNgAAAEQ"]
[Thu Nov 27 06:26:59.230353 2025] [:error] [pid 21017:tid 21076] [client 4.241.209.139:10070] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSd-s6ZA663ub03MMQu0WwAAARE"]
[Thu Nov 27 06:26:59.577949 2025] [:error] [pid 21017:tid 21067] [client 4.241.209.139:10117] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSd-s6ZA663ub03MMQu0XAAAAQg"]
[Thu Nov 27 06:27:00.022673 2025] [:error] [pid 21017:tid 21075] [client 4.241.209.139:10024] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSd-tKZA663ub03MMQu0XQAAARA"]
[Thu Nov 27 06:27:00.579449 2025] [:error] [pid 21017:tid 21068] [client 4.241.209.139:9957] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSd-tKZA663ub03MMQu0YAAAAQk"]
[Thu Nov 27 06:27:01.131230 2025] [:error] [pid 6203:tid 6284] [client 4.241.209.139:10134] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aSd-tcbdRL7aKyrgqyzlOwAAAJg"]
[Thu Nov 27 06:27:01.523840 2025] [:error] [pid 21017:tid 21059] [client 4.241.209.139:9943] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aSd-taZA663ub03MMQu0YwAAAQA"]
[Thu Nov 27 06:27:02.010382 2025] [:error] [pid 6201:tid 6229] [client 4.241.209.139:10236] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aSd-tjkSJeRkIQGTjzw9KAAAABg"]
[Thu Nov 27 06:27:02.631099 2025] [:error] [pid 21017:tid 21076] [client 4.241.209.139:10101] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aSd-tqZA663ub03MMQu0ZAAAARE"]
[Thu Nov 27 06:27:02.957762 2025] [:error] [pid 21017:tid 21070] [client 4.241.209.139:10161] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aSd-tqZA663ub03MMQu0ZgAAAQs"]
[Thu Nov 27 06:27:03.344636 2025] [:error] [pid 21017:tid 21069] [client 4.241.209.139:10028] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aSd-t6ZA663ub03MMQu0aAAAAQo"]
[Thu Nov 27 06:27:03.844812 2025] [:error] [pid 21017:tid 21072] [client 4.241.209.139:10008] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aSd-t6ZA663ub03MMQu0aQAAAQ0"]
[Thu Nov 27 06:27:04.311985 2025] [:error] [pid 6201:tid 6215] [client 4.241.209.139:10017] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aSd-uDkSJeRkIQGTjzw9KwAAAAo"]
[Thu Nov 27 06:27:04.597236 2025] [:error] [pid 21017:tid 21065] [client 4.241.209.139:9925] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aSd-uKZA663ub03MMQu0bwAAAQY"]
[Thu Nov 27 06:27:05.008917 2025] [:error] [pid 6203:tid 6261] [client 4.241.209.139:9947] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aSd-ucbdRL7aKyrgqyzlPQAAAIE"]
[Thu Nov 27 06:27:05.337145 2025] [:error] [pid 6203:tid 6278] [client 4.241.209.139:10089] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aSd-ucbdRL7aKyrgqyzlPgAAAJI"]
[Thu Nov 27 06:27:05.719979 2025] [:error] [pid 6203:tid 6266] [client 4.241.209.139:10015] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aSd-ucbdRL7aKyrgqyzlPwAAAIY"]
[Thu Nov 27 06:27:06.116522 2025] [:error] [pid 6202:tid 6247] [client 4.241.209.139:10162] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aSd-utJa7NTP0XPyZ6mCOQAAAE4"]
[Thu Nov 27 06:27:06.408926 2025] [:error] [pid 6290:tid 6309] [client 4.241.209.139:9990] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aSd-uoqL4zye-zKr6su5dwAAAM8"]
[Thu Nov 27 06:27:06.722469 2025] [:error] [pid 6201:tid 6216] [client 4.241.209.139:10036] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aSd-ujkSJeRkIQGTjzw9LAAAAAs"]
[Thu Nov 27 06:27:07.091019 2025] [:error] [pid 6202:tid 6235] [client 4.241.209.139:10233] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aSd-u9Ja7NTP0XPyZ6mCOgAAAEI"]
[Thu Nov 27 06:27:07.691094 2025] [:error] [pid 21017:tid 21081] [client 4.241.209.139:10186] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g6sshell.php"] [unique_id "aSd-u6ZA663ub03MMQu0cQAAARY"]
[Thu Nov 27 06:27:08.114798 2025] [:error] [pid 21017:tid 21083] [client 4.241.209.139:10025] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g6sshell.php"] [unique_id "aSd-vKZA663ub03MMQu0dgAAARg"]
[Thu Nov 27 06:27:08.521587 2025] [:error] [pid 6290:tid 6302] [client 4.241.209.139:10039] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g6sshell.php"] [unique_id "aSd-vIqL4zye-zKr6su5egAAAMg"]
[Thu Nov 27 06:27:08.889514 2025] [:error] [pid 6201:tid 6211] [client 4.241.209.139:9993] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g6sshell.php"] [unique_id "aSd-vDkSJeRkIQGTjzw9LwAAAAY"]
[Thu Nov 27 06:27:09.298353 2025] [:error] [pid 6201:tid 6222] [client 4.241.209.139:10094] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aSd-vTkSJeRkIQGTjzw9MAAAABE"]
[Thu Nov 27 06:27:09.658309 2025] [:error] [pid 21017:tid 21076] [client 4.241.209.139:10013] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aSd-vaZA663ub03MMQu0eQAAARE"]
[Thu Nov 27 06:27:09.917613 2025] [:error] [pid 21017:tid 21061] [client 4.241.209.139:9927] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aSd-vaZA663ub03MMQu0egAAAQI"]
[Thu Nov 27 06:27:10.349590 2025] [:error] [pid 6202:tid 6242] [client 4.241.209.139:10106] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aSd-vtJa7NTP0XPyZ6mCOwAAAEk"]
[Thu Nov 27 06:27:10.638943 2025] [:error] [pid 21017:tid 21072] [client 4.241.209.139:9920] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aSd-vqZA663ub03MMQu0ewAAAQ0"]
[Thu Nov 27 06:27:11.087995 2025] [:error] [pid 21017:tid 21062] [client 4.241.209.139:9960] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aSd-v6ZA663ub03MMQu0fQAAAQM"]
[Thu Nov 27 06:27:11.418621 2025] [:error] [pid 21017:tid 21068] [client 4.241.209.139:10012] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aSd-v6ZA663ub03MMQu0fwAAAQk"]
[Thu Nov 27 06:27:11.962809 2025] [:error] [pid 21017:tid 21073] [client 4.241.209.139:9885] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aSd-v6ZA663ub03MMQu0hAAAAQ4"]
[Thu Nov 27 06:27:12.573333 2025] [:error] [pid 6202:tid 6255] [client 4.241.209.139:10222] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aSd-wNJa7NTP0XPyZ6mCPAAAAFY"]
[Thu Nov 27 06:27:13.168399 2025] [:error] [pid 6203:tid 6273] [client 4.241.209.139:10014] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aSd-wcbdRL7aKyrgqyzlRgAAAI0"]
[Thu Nov 27 06:27:13.700349 2025] [:error] [pid 21017:tid 21080] [client 4.241.209.139:10147] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aSd-waZA663ub03MMQu0iAAAARU"]
[Thu Nov 27 06:27:14.691164 2025] [:error] [pid 6203:tid 6279] [client 4.241.209.139:10193] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aSd-wsbdRL7aKyrgqyzlSQAAAJM"]
[Thu Nov 27 06:27:15.039797 2025] [:error] [pid 6202:tid 6257] [client 4.241.209.139:9947] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aSd-w9Ja7NTP0XPyZ6mCPQAAAFg"]
[Thu Nov 27 06:27:15.465812 2025] [:error] [pid 6203:tid 6281] [client 4.241.209.139:10098] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aSd-w8bdRL7aKyrgqyzlSwAAAJU"]
[Thu Nov 27 06:27:16.492605 2025] [:error] [pid 6290:tid 6307] [client 4.241.209.139:10037] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aSd-xIqL4zye-zKr6su5fQAAAM0"]
[Thu Nov 27 06:27:16.769849 2025] [:error] [pid 6203:tid 6275] [client 4.241.209.139:10073] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aSd-xMbdRL7aKyrgqyzlTQAAAI8"]
[Thu Nov 27 06:27:17.157622 2025] [:error] [pid 6290:tid 6295] [client 4.241.209.139:10102] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSd-xYqL4zye-zKr6su5gAAAAME"]
[Thu Nov 27 06:27:17.638526 2025] [:error] [pid 6290:tid 6298] [client 4.241.209.139:9951] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSd-xYqL4zye-zKr6su5ggAAAMQ"]
[Thu Nov 27 06:27:18.079359 2025] [:error] [pid 6290:tid 6308] [client 4.241.209.139:10046] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSd-xoqL4zye-zKr6su5gwAAAM4"]
[Thu Nov 27 06:27:18.481938 2025] [:error] [pid 21017:tid 21065] [client 4.241.209.139:10035] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSd-xqZA663ub03MMQu0mQAAAQY"]
[Thu Nov 27 06:27:18.791877 2025] [:error] [pid 21017:tid 21078] [client 4.241.209.139:10011] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSd-xqZA663ub03MMQu0ngAAARM"]
[Thu Nov 27 06:27:19.121770 2025] [:error] [pid 21017:tid 21066] [client 4.241.209.139:10022] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSd-x6ZA663ub03MMQu0owAAAQc"]
[Thu Nov 27 06:27:19.539074 2025] [:error] [pid 6203:tid 6278] [client 4.241.209.139:10076] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSd-x8bdRL7aKyrgqyzlVgAAAJI"]
[Thu Nov 27 06:27:20.058752 2025] [:error] [pid 6203:tid 6267] [client 4.241.209.139:9956] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSd-yMbdRL7aKyrgqyzlXAAAAIc"]
[Thu Nov 27 06:27:20.484133 2025] [:error] [pid 6201:tid 6214] [client 4.241.209.139:9978] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aSd-yDkSJeRkIQGTjzw9OQAAAAk"]
[Thu Nov 27 06:27:20.772805 2025] [:error] [pid 21017:tid 21079] [client 4.241.209.139:9931] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aSd-yKZA663ub03MMQu0qgAAARQ"]
[Thu Nov 27 06:27:21.154271 2025] [:error] [pid 6201:tid 6216] [client 4.241.209.139:10000] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aSd-yTkSJeRkIQGTjzw9OwAAAAs"]
[Thu Nov 27 06:27:21.431629 2025] [:error] [pid 21017:tid 21078] [client 4.241.209.139:10156] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aSd-yaZA663ub03MMQu0rwAAARM"]
[Thu Nov 27 06:27:21.730695 2025] [:error] [pid 21017:tid 21060] [client 4.241.209.139:10062] [client 4.241.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSd-yaZA663ub03MMQu0sgAAAQE"]
[Thu Nov 27 06:27:22.152054 2025] [:error] [pid 21017:tid 21061] [client 4.241.209.139:9859] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aSd-yqZA663ub03MMQu0tgAAAQI"]
[Thu Nov 27 06:27:22.639903 2025] [:error] [pid 6290:tid 6315] [client 4.241.209.139:10004] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aSd-yoqL4zye-zKr6su5iwAAANU"]
[Thu Nov 27 06:27:23.052409 2025] [:error] [pid 21017:tid 21079] [client 4.241.209.139:9921] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aSd-y6ZA663ub03MMQu0yQAAARQ"]
[Thu Nov 27 06:27:23.498920 2025] [:error] [pid 6201:tid 6212] [client 4.241.209.139:9935] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aSd-yzkSJeRkIQGTjzw9PwAAAAc"]
[Thu Nov 27 06:27:24.008369 2025] [:error] [pid 6202:tid 6240] [client 4.241.209.139:9861] [client 4.241.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSd-zNJa7NTP0XPyZ6mCVwAAAEc"]
[Thu Nov 27 06:27:26.167747 2025] [:error] [pid 6290:tid 6299] [client 4.241.209.139:9966] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSd-zoqL4zye-zKr6su5mAAAAMU"]
[Thu Nov 27 06:27:26.814150 2025] [:error] [pid 21017:tid 21067] [client 4.241.209.139:10210] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSd-zqZA663ub03MMQu05QAAAQg"]
[Thu Nov 27 06:27:27.180320 2025] [:error] [pid 6202:tid 6250] [client 4.241.209.139:9968] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSd-z9Ja7NTP0XPyZ6mCXQAAAFE"]
[Thu Nov 27 06:27:27.828447 2025] [:error] [pid 6201:tid 6225] [client 4.241.209.139:9944] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSd-zzkSJeRkIQGTjzw9RQAAABQ"]
[Thu Nov 27 06:27:28.524338 2025] [:error] [pid 6201:tid 6206] [client 4.241.209.139:9989] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSd-0DkSJeRkIQGTjzw9SAAAAAE"]
[Thu Nov 27 06:27:28.838806 2025] [:error] [pid 21017:tid 21063] [client 4.241.209.139:10016] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSd-0KZA663ub03MMQu06wAAAQQ"]
[Thu Nov 27 06:27:29.212515 2025] [:error] [pid 6203:tid 6263] [client 4.241.209.139:9933] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSd-0cbdRL7aKyrgqyzlZgAAAIM"]
[Thu Nov 27 06:27:29.555198 2025] [:error] [pid 6202:tid 6239] [client 4.241.209.139:9967] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSd-0dJa7NTP0XPyZ6mCYwAAAEY"]
[Thu Nov 27 06:27:31.091273 2025] [:error] [pid 21017:tid 21081] [client 4.241.209.139:9922] [client 4.241.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSd-06ZA663ub03MMQu09QAAARY"]
[Thu Nov 27 06:27:32.231483 2025] [:error] [pid 6203:tid 6265] [client 4.241.209.139:10185] [client 4.241.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSd-1MbdRL7aKyrgqyzlbgAAAIU"]
[Thu Nov 27 06:27:35.203159 2025] [proxy_fcgi:error] [pid 6202:tid 6250] [client 4.241.209.139:10038] AH01071: Got error 'Primary script unknown'
[Thu Nov 27 06:27:36.510301 2025] [:error] [pid 6202:tid 6247] [client 4.241.209.139:10038] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSd-2NJa7NTP0XPyZ6mCcgAAAE4"]
[Thu Nov 27 06:27:36.948464 2025] [:error] [pid 6290:tid 6314] [client 4.241.209.139:9874] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSd-2IqL4zye-zKr6su5pgAAANQ"]
[Thu Nov 27 06:27:37.463132 2025] [:error] [pid 6290:tid 6304] [client 4.241.209.139:9963] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSd-2YqL4zye-zKr6su5pwAAAMo"]
[Thu Nov 27 06:27:37.826131 2025] [:error] [pid 6203:tid 6267] [client 4.241.209.139:10032] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSd-2cbdRL7aKyrgqyzlfgAAAIc"]
[Thu Nov 27 06:27:38.316020 2025] [:error] [pid 6203:tid 6276] [client 4.241.209.139:10042] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSd-2sbdRL7aKyrgqyzlfwAAAJA"]
[Thu Nov 27 06:27:38.642764 2025] [:error] [pid 21017:tid 21059] [client 4.241.209.139:10097] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSd-2qZA663ub03MMQu1DAAAAQA"]
[Thu Nov 27 06:27:39.047895 2025] [:error] [pid 6290:tid 6294] [client 4.241.209.139:10007] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSd-24qL4zye-zKr6su5qwAAAMA"]
[Thu Nov 27 06:27:39.539768 2025] [:error] [pid 6290:tid 6315] [client 4.241.209.139:9877] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSd-24qL4zye-zKr6su5rAAAANU"]
[Thu Nov 27 06:27:40.167295 2025] [:error] [pid 6203:tid 6280] [client 4.241.209.139:9858] [client 4.241.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSd-3MbdRL7aKyrgqyzlhAAAAJQ"]
[Thu Nov 27 06:27:40.461065 2025] [:error] [pid 6203:tid 6277] [client 4.241.209.139:9942] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSd-3MbdRL7aKyrgqyzlhgAAAJE"]
[Thu Nov 27 06:27:40.735206 2025] [:error] [pid 21017:tid 21068] [client 4.241.209.139:9862] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSd-3KZA663ub03MMQu1EwAAAQk"]
[Thu Nov 27 06:27:41.192134 2025] [:error] [pid 21017:tid 21072] [client 4.241.209.139:9959] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSd-3aZA663ub03MMQu1FgAAAQ0"]
[Thu Nov 27 06:27:41.843159 2025] [:error] [pid 21017:tid 21079] [client 4.241.209.139:9939] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSd-3aZA663ub03MMQu1GQAAARQ"]
[Thu Nov 27 06:27:42.294383 2025] [:error] [pid 6203:tid 6278] [client 4.241.209.139:9950] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSd-3sbdRL7aKyrgqyzligAAAJI"]
[Thu Nov 27 06:27:42.674507 2025] [:error] [pid 21017:tid 21076] [client 4.241.209.139:9948] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSd-3qZA663ub03MMQu1HwAAARE"]
[Thu Nov 27 06:27:43.065230 2025] [:error] [pid 21017:tid 21083] [client 4.241.209.139:9955] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSd-36ZA663ub03MMQu1JgAAARg"]
[Thu Nov 27 06:27:43.435394 2025] [:error] [pid 21017:tid 21072] [client 4.241.209.139:10044] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSd-36ZA663ub03MMQu1JwAAAQ0"]
[Thu Nov 27 06:27:43.739358 2025] [:error] [pid 21017:tid 21061] [client 4.241.209.139:10171] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSd-36ZA663ub03MMQu1KQAAAQI"]
[Thu Nov 27 06:27:44.077883 2025] [:error] [pid 6203:tid 6265] [client 4.241.209.139:9979] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSd-4MbdRL7aKyrgqyzlkAAAAIU"]
[Thu Nov 27 06:27:44.457088 2025] [:error] [pid 6202:tid 6240] [client 4.241.209.139:9980] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSd-4NJa7NTP0XPyZ6mCewAAAEc"]
[Thu Nov 27 06:27:44.834888 2025] [:error] [pid 6202:tid 6253] [client 4.241.209.139:10165] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSd-4NJa7NTP0XPyZ6mCfAAAAFQ"]
[Thu Nov 27 06:27:45.232566 2025] [:error] [pid 6201:tid 6211] [client 4.241.209.139:9796] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSd-4TkSJeRkIQGTjzw9WAAAAAY"]
[Thu Nov 27 06:27:45.683849 2025] [:error] [pid 6290:tid 6311] [client 4.241.209.139:9913] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSd-4YqL4zye-zKr6su5uAAAANE"]
[Thu Nov 27 06:27:46.329884 2025] [:error] [pid 6202:tid 6250] [client 4.241.209.139:9962] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSd-4tJa7NTP0XPyZ6mCfwAAAFE"]
[Thu Nov 27 06:27:46.908300 2025] [:error] [pid 6290:tid 6307] [client 4.241.209.139:9916] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSd-4oqL4zye-zKr6su5vQAAAM0"]
[Thu Nov 27 06:27:47.526047 2025] [:error] [pid 6201:tid 6228] [client 4.241.209.139:9958] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSd-4zkSJeRkIQGTjzw9XgAAABc"]
[Thu Nov 27 06:27:47.823828 2025] [:error] [pid 21017:tid 21067] [client 4.241.209.139:9857] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSd-46ZA663ub03MMQu1NwAAAQg"]
[Thu Nov 27 06:27:48.153856 2025] [:error] [pid 6201:tid 6209] [client 4.241.209.139:9930] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSd-5DkSJeRkIQGTjzw9YQAAAAQ"]
[Thu Nov 27 06:27:48.561892 2025] [:error] [pid 6201:tid 6221] [client 4.241.209.139:9998] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSd-5DkSJeRkIQGTjzw9YwAAABA"]
[Thu Nov 27 06:27:48.809200 2025] [:error] [pid 6290:tid 6310] [client 4.241.209.139:9997] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSd-5IqL4zye-zKr6su5zwAAANA"]
[Thu Nov 27 06:27:49.144172 2025] [:error] [pid 21017:tid 21059] [client 4.241.209.139:10044] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSd-5aZA663ub03MMQu1RQAAAQA"]
[Thu Nov 27 06:27:49.845182 2025] [:error] [pid 6203:tid 6282] [client 4.241.209.139:9937] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSd-5cbdRL7aKyrgqyzlnQAAAJY"]
[Thu Nov 27 06:27:50.221056 2025] [:error] [pid 6201:tid 6226] [client 4.241.209.139:10187] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSd-5jkSJeRkIQGTjzw9ZwAAABU"]
[Thu Nov 27 06:27:50.892761 2025] [:error] [pid 6203:tid 6271] [client 4.241.209.139:10115] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aSd-5sbdRL7aKyrgqyzloQAAAIs"]
[Thu Nov 27 06:27:51.229861 2025] [:error] [pid 6202:tid 6236] [client 4.241.209.139:9910] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aSd-59Ja7NTP0XPyZ6mChwAAAEM"]
[Thu Nov 27 06:27:51.687142 2025] [:error] [pid 6202:tid 6248] [client 4.241.209.139:9864] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aSd-59Ja7NTP0XPyZ6mCiAAAAE8"]
[Thu Nov 27 06:27:52.281961 2025] [:error] [pid 6290:tid 6314] [client 4.241.209.139:10027] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aSd-6IqL4zye-zKr6su55AAAANQ"]
[Thu Nov 27 06:27:53.006030 2025] [:error] [pid 6203:tid 6263] [client 4.241.209.139:9891] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aSd-6cbdRL7aKyrgqyzlowAAAIM"]
[Thu Nov 27 06:27:53.468498 2025] [:error] [pid 6202:tid 6250] [client 4.241.209.139:10191] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aSd-6dJa7NTP0XPyZ6mCiwAAAFE"]
[Thu Nov 27 06:27:53.800046 2025] [:error] [pid 6203:tid 6278] [client 4.241.209.139:9894] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aSd-6cbdRL7aKyrgqyzlpgAAAJI"]
[Thu Nov 27 06:27:54.271183 2025] [:error] [pid 6202:tid 6237] [client 4.241.209.139:9946] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aSd-6tJa7NTP0XPyZ6mCjQAAAEQ"]
[Thu Nov 27 06:27:54.690739 2025] [:error] [pid 21017:tid 21078] [client 4.241.209.139:9909] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aSd-6qZA663ub03MMQu1VgAAARM"]
[Thu Nov 27 06:27:55.190859 2025] [:error] [pid 6203:tid 6282] [client 4.241.209.139:9977] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aSd-68bdRL7aKyrgqyzlqAAAAJY"]
[Thu Nov 27 06:27:55.690946 2025] [:error] [pid 6290:tid 6294] [client 4.241.209.139:9923] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aSd-64qL4zye-zKr6su56gAAAMA"]
[Thu Nov 27 06:27:56.148790 2025] [:error] [pid 6202:tid 6257] [client 4.241.209.139:9911] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aSd-7NJa7NTP0XPyZ6mCkQAAAFg"]
[Thu Nov 27 06:27:56.763101 2025] [:error] [pid 6202:tid 6233] [client 4.241.209.139:9988] [client 4.241.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSd-7NJa7NTP0XPyZ6mCkgAAAEA"]
[Thu Nov 27 06:27:57.316795 2025] [:error] [pid 21017:tid 21070] [client 4.241.209.139:9876] [client 4.241.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSd-7aZA663ub03MMQu1XQAAAQs"]
[Thu Nov 27 06:27:57.668883 2025] [:error] [pid 6201:tid 6216] [client 4.241.209.139:9867] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aSd-7TkSJeRkIQGTjzw9bQAAAAs"]
[Thu Nov 27 06:27:58.411684 2025] [:error] [pid 6203:tid 6275] [client 4.241.209.139:9929] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aSd-7sbdRL7aKyrgqyzlqgAAAI8"]
[Thu Nov 27 06:27:58.903104 2025] [:error] [pid 6202:tid 6236] [client 4.241.209.139:10003] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aSd-7tJa7NTP0XPyZ6mClAAAAEM"]
[Thu Nov 27 06:27:59.424165 2025] [:error] [pid 21017:tid 21063] [client 4.241.209.139:9887] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aSd-76ZA663ub03MMQu1YwAAAQQ"]
[Thu Nov 27 06:27:59.840167 2025] [:error] [pid 21017:tid 21080] [client 4.241.209.139:10111] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aSd-76ZA663ub03MMQu1ZQAAARU"]
[Thu Nov 27 06:28:00.258989 2025] [:error] [pid 6203:tid 6273] [client 4.241.209.139:9826] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aSd-8MbdRL7aKyrgqyzlrAAAAI0"]
[Thu Nov 27 06:28:00.639075 2025] [:error] [pid 6201:tid 6209] [client 4.241.209.139:9860] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aSd-8DkSJeRkIQGTjzw9bwAAAAQ"]
[Thu Nov 27 06:28:00.946156 2025] [:error] [pid 6201:tid 6223] [client 4.241.209.139:9856] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aSd-8DkSJeRkIQGTjzw9cAAAABI"]
[Thu Nov 27 06:28:01.311212 2025] [:error] [pid 6201:tid 6221] [client 4.241.209.139:9888] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Wop.php"] [unique_id "aSd-8TkSJeRkIQGTjzw9cQAAABA"]
[Thu Nov 27 06:28:01.753540 2025] [:error] [pid 6203:tid 6272] [client 4.241.209.139:9972] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Wop.php"] [unique_id "aSd-8cbdRL7aKyrgqyzlrQAAAIw"]
[Thu Nov 27 06:28:02.070296 2025] [:error] [pid 6203:tid 6271] [client 4.241.209.139:9883] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Wop.php"] [unique_id "aSd-8sbdRL7aKyrgqyzlrgAAAIs"]
[Thu Nov 27 06:28:02.708522 2025] [:error] [pid 6201:tid 6222] [client 4.241.209.139:9872] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Wop.php"] [unique_id "aSd-8jkSJeRkIQGTjzw9cwAAABE"]
[Thu Nov 27 06:28:03.548694 2025] [:error] [pid 6203:tid 6278] [client 4.241.209.139:9865] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mom.php"] [unique_id "aSd-88bdRL7aKyrgqyzlswAAAJI"]
[Thu Nov 27 06:28:04.021799 2025] [:error] [pid 6290:tid 6306] [client 4.241.209.139:9880] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mom.php"] [unique_id "aSd-9IqL4zye-zKr6su58gAAAMw"]
[Thu Nov 27 06:28:04.358514 2025] [:error] [pid 6290:tid 6299] [client 4.241.209.139:9971] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mom.php"] [unique_id "aSd-9IqL4zye-zKr6su58wAAAMU"]
[Thu Nov 27 06:28:05.386492 2025] [:error] [pid 6203:tid 6280] [client 4.241.209.139:9810] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mom.php"] [unique_id "aSd-9cbdRL7aKyrgqyzluQAAAJQ"]
[Thu Nov 27 06:28:05.896281 2025] [:error] [pid 6203:tid 6267] [client 4.241.209.139:9907] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sh3ll.php"] [unique_id "aSd-9cbdRL7aKyrgqyzlugAAAIc"]
[Thu Nov 27 06:28:06.284680 2025] [:error] [pid 21017:tid 21060] [client 4.241.209.139:9964] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sh3ll.php"] [unique_id "aSd-9qZA663ub03MMQu1bwAAAQE"]
[Thu Nov 27 06:28:06.656699 2025] [:error] [pid 6203:tid 6262] [client 4.241.209.139:9873] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sh3ll.php"] [unique_id "aSd-9sbdRL7aKyrgqyzlvAAAAII"]
[Thu Nov 27 06:28:06.948681 2025] [:error] [pid 6201:tid 6218] [client 4.241.209.139:9917] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sh3ll.php"] [unique_id "aSd-9jkSJeRkIQGTjzw9ewAAAA0"]
[Thu Nov 27 06:28:07.343595 2025] [:error] [pid 21017:tid 21063] [client 4.241.209.139:9969] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/%E5%B9%B3%E4%BB%AE%E5%90%8Ds.php"] [unique_id "aSd-96ZA663ub03MMQu1cAAAAQQ"]
[Thu Nov 27 06:28:07.840410 2025] [:error] [pid 21017:tid 21068] [client 4.241.209.139:9976] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/%E5%B9%B3%E4%BB%AE%E5%90%8Ds.php"] [unique_id "aSd-96ZA663ub03MMQu1cgAAAQk"]
[Thu Nov 27 06:28:08.206778 2025] [:error] [pid 6201:tid 6221] [client 4.241.209.139:10020] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/%E5%B9%B3%E4%BB%AE%E5%90%8Ds.php"] [unique_id "aSd--DkSJeRkIQGTjzw9fwAAABA"]
[Thu Nov 27 06:28:08.799022 2025] [:error] [pid 21017:tid 21076] [client 4.241.209.139:9928] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/%E5%B9%B3%E4%BB%AE%E5%90%8Ds.php"] [unique_id "aSd--KZA663ub03MMQu1egAAARE"]
[Thu Nov 27 06:28:09.226819 2025] [:error] [pid 21017:tid 21063] [client 4.241.209.139:9904] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/frg.php"] [unique_id "aSd--aZA663ub03MMQu1fwAAAQQ"]
[Thu Nov 27 06:28:09.606163 2025] [:error] [pid 6202:tid 6257] [client 4.241.209.139:9912] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/frg.php"] [unique_id "aSd--dJa7NTP0XPyZ6mCoAAAAFg"]
[Thu Nov 27 06:28:09.964155 2025] [:error] [pid 21017:tid 21067] [client 4.241.209.139:9869] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/frg.php"] [unique_id "aSd--aZA663ub03MMQu1ggAAAQg"]
[Thu Nov 27 06:28:10.350205 2025] [:error] [pid 6203:tid 6270] [client 4.241.209.139:9938] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/frg.php"] [unique_id "aSd--sbdRL7aKyrgqyzlwQAAAIo"]
[Thu Nov 27 06:28:10.624920 2025] [:error] [pid 6290:tid 6317] [client 4.241.209.139:10139] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "aSd--oqL4zye-zKr6su5-AAAANc"]
[Thu Nov 27 06:28:10.985491 2025] [:error] [pid 6203:tid 6282] [client 4.241.209.139:9881] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "aSd--sbdRL7aKyrgqyzlxQAAAJY"]
[Thu Nov 27 06:28:11.522203 2025] [:error] [pid 6203:tid 6269] [client 4.241.209.139:9945] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "aSd--8bdRL7aKyrgqyzlxwAAAIk"]
[Thu Nov 27 06:28:11.986246 2025] [:error] [pid 21017:tid 21080] [client 4.241.209.139:9893] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "aSd--6ZA663ub03MMQu1iAAAARU"]
[Thu Nov 27 06:28:12.292418 2025] [:error] [pid 21017:tid 21072] [client 4.241.209.139:9908] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bge.php"] [unique_id "aSd-_KZA663ub03MMQu1igAAAQ0"]
[Thu Nov 27 06:28:12.611098 2025] [:error] [pid 6290:tid 6318] [client 4.241.209.139:9926] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bge.php"] [unique_id "aSd-_IqL4zye-zKr6su5-QAAANg"]
[Thu Nov 27 06:28:12.938250 2025] [:error] [pid 6203:tid 6260] [client 4.241.209.139:9834] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bge.php"] [unique_id "aSd-_MbdRL7aKyrgqyzlzAAAAIA"]
[Thu Nov 27 06:28:13.249876 2025] [:error] [pid 6202:tid 6250] [client 4.241.209.139:9868] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bge.php"] [unique_id "aSd-_dJa7NTP0XPyZ6mCqAAAAFE"]
[Thu Nov 27 06:28:13.712749 2025] [:error] [pid 6290:tid 6308] [client 4.241.209.139:9897] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ifm.php"] [unique_id "aSd-_YqL4zye-zKr6su5_AAAAM4"]
[Thu Nov 27 06:28:14.148928 2025] [:error] [pid 6202:tid 6237] [client 4.241.209.139:9895] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ifm.php"] [unique_id "aSd-_tJa7NTP0XPyZ6mCrAAAAEQ"]
[Thu Nov 27 06:28:14.762148 2025] [:error] [pid 6203:tid 6270] [client 4.241.209.139:10002] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ifm.php"] [unique_id "aSd-_sbdRL7aKyrgqyzlzwAAAIo"]
[Thu Nov 27 06:28:15.505917 2025] [:error] [pid 21017:tid 21079] [client 4.241.209.139:10023] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ifm.php"] [unique_id "aSd-_6ZA663ub03MMQu1lAAAARQ"]
[Thu Nov 27 06:28:16.302641 2025] [:error] [pid 6202:tid 6246] [client 4.241.209.139:9799] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww5.php"] [unique_id "aSd_ANJa7NTP0XPyZ6mCrgAAAE0"]
[Thu Nov 27 06:28:16.923116 2025] [:error] [pid 6202:tid 6242] [client 4.241.209.139:9863] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww5.php"] [unique_id "aSd_ANJa7NTP0XPyZ6mCsAAAAEk"]
[Thu Nov 27 06:28:17.762966 2025] [:error] [pid 21017:tid 21069] [client 4.241.209.139:9906] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww5.php"] [unique_id "aSd_AaZA663ub03MMQu1lwAAAQo"]
[Thu Nov 27 06:28:18.998948 2025] [:error] [pid 21017:tid 21079] [client 4.241.209.139:10045] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww5.php"] [unique_id "aSd_AqZA663ub03MMQu1oQAAARQ"]
[Thu Nov 27 06:28:19.727396 2025] [:error] [pid 6202:tid 6239] [client 4.241.209.139:9866] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSd_A9Ja7NTP0XPyZ6mCtAAAAEY"]
[Thu Nov 27 06:28:20.053119 2025] [:error] [pid 21017:tid 21081] [client 4.241.209.139:9983] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSd_BKZA663ub03MMQu1owAAARY"]
[Thu Nov 27 06:28:20.362287 2025] [:error] [pid 21017:tid 21073] [client 4.241.209.139:9896] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSd_BKZA663ub03MMQu1pgAAAQ4"]
[Thu Nov 27 06:28:20.615678 2025] [:error] [pid 6203:tid 6262] [client 4.241.209.139:9884] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSd_BMbdRL7aKyrgqyzl1gAAAII"]
[Thu Nov 27 06:28:20.968736 2025] [:error] [pid 21017:tid 21062] [client 4.241.209.139:9892] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aSd_BKZA663ub03MMQu1qgAAAQM"]
[Thu Nov 27 06:28:21.268081 2025] [:error] [pid 21017:tid 21063] [client 4.241.209.139:9915] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aSd_BaZA663ub03MMQu1rQAAAQQ"]
[Thu Nov 27 06:28:21.649922 2025] [:error] [pid 21017:tid 21071] [client 4.241.209.139:9902] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aSd_BaZA663ub03MMQu1rgAAAQw"]
[Thu Nov 27 06:28:21.934460 2025] [:error] [pid 21017:tid 21079] [client 4.241.209.139:10043] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aSd_BaZA663ub03MMQu1sQAAARQ"]
[Thu Nov 27 06:28:22.319213 2025] [:error] [pid 6201:tid 6217] [client 4.241.209.139:9901] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aSd_BjkSJeRkIQGTjzw9gAAAAAw"]
[Thu Nov 27 06:28:22.695546 2025] [:error] [pid 21017:tid 21069] [client 4.241.209.139:9879] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aSd_BqZA663ub03MMQu1twAAAQo"]
[Thu Nov 27 06:28:23.422497 2025] [:error] [pid 21017:tid 21063] [client 4.241.209.139:9827] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aSd_B6ZA663ub03MMQu1uQAAAQQ"]
[Thu Nov 27 06:28:23.996383 2025] [:error] [pid 6201:tid 6222] [client 4.241.209.139:9829] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aSd_BzkSJeRkIQGTjzw9ggAAABE"]
[Thu Nov 27 06:28:24.615810 2025] [:error] [pid 6201:tid 6213] [client 4.241.209.139:9918] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waw.php"] [unique_id "aSd_CDkSJeRkIQGTjzw9hgAAAAg"]
[Thu Nov 27 06:28:25.186929 2025] [:error] [pid 21017:tid 21083] [client 4.241.209.139:9838] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waw.php"] [unique_id "aSd_CaZA663ub03MMQu1wgAAARg"]
[Thu Nov 27 06:28:25.472694 2025] [:error] [pid 6201:tid 6212] [client 4.241.209.139:9818] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waw.php"] [unique_id "aSd_CTkSJeRkIQGTjzw9igAAAAc"]
[Thu Nov 27 06:28:25.750954 2025] [:error] [pid 6201:tid 6218] [client 4.241.209.139:9812] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waw.php"] [unique_id "aSd_CTkSJeRkIQGTjzw9jQAAAA0"]
[Thu Nov 27 06:28:26.095567 2025] [:error] [pid 6202:tid 6246] [client 4.241.209.139:9732] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aSd_CtJa7NTP0XPyZ6mCvgAAAE0"]
[Thu Nov 27 06:28:26.371052 2025] [:error] [pid 6290:tid 6311] [client 4.241.209.139:9914] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aSd_CoqL4zye-zKr6su6FgAAANE"]
[Thu Nov 27 06:28:26.921886 2025] [:error] [pid 6203:tid 6262] [client 4.241.209.139:9903] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aSd_CsbdRL7aKyrgqyzl4QAAAII"]
[Thu Nov 27 06:28:27.331422 2025] [:error] [pid 21017:tid 21066] [client 4.241.209.139:9806] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aSd_C6ZA663ub03MMQu1yAAAAQc"]
[Thu Nov 27 06:28:27.805399 2025] [:error] [pid 6203:tid 6275] [client 4.241.209.139:9905] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aSd_C8bdRL7aKyrgqyzl5wAAAI8"]
[Thu Nov 27 06:28:28.217812 2025] [:error] [pid 6203:tid 6278] [client 4.241.209.139:9835] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aSd_DMbdRL7aKyrgqyzl6QAAAJI"]
[Thu Nov 27 06:28:28.606385 2025] [:error] [pid 21017:tid 21082] [client 4.241.209.139:9970] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aSd_DKZA663ub03MMQu1zQAAARc"]
[Thu Nov 27 06:28:28.951885 2025] [:error] [pid 6202:tid 6233] [client 4.241.209.139:9961] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aSd_DNJa7NTP0XPyZ6mCwQAAAEA"]
[Thu Nov 27 06:28:29.270146 2025] [:error] [pid 6290:tid 6312] [client 4.241.209.139:9808] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aSd_DYqL4zye-zKr6su6HAAAANI"]
[Thu Nov 27 06:28:29.639131 2025] [:error] [pid 6203:tid 6265] [client 4.241.209.139:9802] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aSd_DcbdRL7aKyrgqyzl7AAAAIU"]
[Thu Nov 27 06:28:29.949889 2025] [:error] [pid 6202:tid 6253] [client 4.241.209.139:9889] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aSd_DdJa7NTP0XPyZ6mCxQAAAFQ"]
[Thu Nov 27 06:28:30.484402 2025] [:error] [pid 6203:tid 6280] [client 4.241.209.139:9815] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aSd_DsbdRL7aKyrgqyzl7gAAAJQ"]
[Thu Nov 27 06:28:30.772065 2025] [:error] [pid 6203:tid 6284] [client 4.241.209.139:9890] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aSd_DsbdRL7aKyrgqyzl8AAAAJg"]
[Thu Nov 27 06:28:31.269072 2025] [:error] [pid 6203:tid 6268] [client 4.241.209.139:9805] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aSd_D8bdRL7aKyrgqyzl8gAAAIg"]
[Thu Nov 27 06:28:31.666257 2025] [:error] [pid 6290:tid 6302] [client 4.241.209.139:9795] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aSd_D4qL4zye-zKr6su6IAAAAMg"]
[Thu Nov 27 06:28:32.071592 2025] [:error] [pid 6290:tid 6318] [client 4.241.209.139:9936] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aSd_EIqL4zye-zKr6su6IgAAANg"]
[Thu Nov 27 06:28:32.678800 2025] [:error] [pid 6201:tid 6206] [client 4.241.209.139:9975] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSd_EDkSJeRkIQGTjzw9lAAAAAE"]
[Thu Nov 27 06:28:33.144392 2025] [:error] [pid 21017:tid 21073] [client 4.241.209.139:9878] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSd_EaZA663ub03MMQu11AAAAQ4"]
[Thu Nov 27 06:28:33.635864 2025] [:error] [pid 6203:tid 6273] [client 4.241.209.139:9899] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSd_EcbdRL7aKyrgqyzl9wAAAI0"]
[Thu Nov 27 06:28:34.175950 2025] [:error] [pid 6203:tid 6278] [client 4.241.209.139:9898] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aSd_EsbdRL7aKyrgqyzl-AAAAJI"]
[Thu Nov 27 06:28:35.077767 2025] [:error] [pid 6202:tid 6251] [client 4.241.209.139:9949] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aSd_E9Ja7NTP0XPyZ6mCzgAAAFI"]
[Thu Nov 27 06:28:35.534983 2025] [:error] [pid 6202:tid 6245] [client 4.241.209.139:9871] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aSd_E9Ja7NTP0XPyZ6mC0QAAAEw"]
[Thu Nov 27 06:28:35.990634 2025] [:error] [pid 6202:tid 6253] [client 4.241.209.139:9863] [client 4.241.209.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aSd_E9Ja7NTP0XPyZ6mC1AAAAFQ"]
[Thu Nov 27 08:55:51.093134 2025] [:error] [pid 40009:tid 40084] [client 64.225.75.246:55336] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSehl0JuxjShta_KR6UAwQAAAVQ"]
[Thu Nov 27 08:55:52.072540 2025] [:error] [pid 19013:tid 19025] [client 64.225.75.246:55348] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/graphql"] [unique_id "aSehmIaBrX8b6-N6_86ZogAAAAg"]
[Thu Nov 27 08:55:52.799231 2025] [:error] [pid 19014:tid 19056] [client 64.225.75.246:55362] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api"] [unique_id "aSehmI2utvwZ4eADRmr9fQAAAEw"]
[Thu Nov 27 08:55:53.527546 2025] [:error] [pid 19119:tid 19175] [client 64.225.75.246:55374] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/graphql"] [unique_id "aSehmRsL_RTusriYkweASwAAAME"]
[Thu Nov 27 08:55:54.253813 2025] [:error] [pid 19119:tid 19184] [client 64.225.75.246:55390] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/graphql/api"] [unique_id "aSehmhsL_RTusriYkweAVAAAAMo"]
[Thu Nov 27 08:55:55.025962 2025] [:error] [pid 39563:tid 39586] [client 64.225.75.246:55404] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/gql"] [unique_id "aSehmzNSKUd-PJ2wU0QjswAAARU"]
[Thu Nov 27 08:55:55.745544 2025] [:error] [pid 19015:tid 19089] [client 64.225.75.246:55414] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swagger-ui.html"] [unique_id "aSehmw4MxyJWPPh2qEjD4QAAAJI"]
[Thu Nov 27 08:55:56.464958 2025] [:error] [pid 39563:tid 39573] [client 64.225.75.246:55426] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swagger/index.html"] [unique_id "aSehnDNSKUd-PJ2wU0QjtQAAAQg"]
[Thu Nov 27 08:55:57.186563 2025] [:error] [pid 19013:tid 19034] [client 64.225.75.246:49628] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swagger/swagger-ui.html"] [unique_id "aSehnYaBrX8b6-N6_86ZowAAABE"]
[Thu Nov 27 08:55:57.914603 2025] [:error] [pid 19014:tid 19050] [client 64.225.75.246:49644] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "aSehnY2utvwZ4eADRmr9gwAAAEY"]
[Thu Nov 27 08:55:58.641348 2025] [:error] [pid 19015:tid 19082] [client 64.225.75.246:49646] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swagger.json"] [unique_id "aSehng4MxyJWPPh2qEjD4gAAAIs"]
[Thu Nov 27 08:55:59.360693 2025] [:error] [pid 19119:tid 19186] [client 64.225.75.246:49656] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aSehnxsL_RTusriYkweAZQAAAMw"]
[Thu Nov 27 08:56:00.079434 2025] [:error] [pid 40009:tid 40081] [client 64.225.75.246:49668] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2/api-docs"] [unique_id "aSehoEJuxjShta_KR6UA2QAAAVE"]
[Thu Nov 27 08:56:00.807943 2025] [:error] [pid 19013:tid 19035] [client 64.225.75.246:49680] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3/api-docs"] [unique_id "aSehoIaBrX8b6-N6_86ZpQAAABI"]
[Thu Nov 27 08:56:00.838481 2025] [:error] [pid 39563:tid 39572] [client 64.227.32.66:44154] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/v2/api-docs"] [unique_id "aSehoDNSKUd-PJ2wU0QjuQAAAQc"]
[Thu Nov 27 08:56:01.573644 2025] [:error] [pid 19119:tid 19194] [client 64.227.32.66:44158] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/v3/api-docs"] [unique_id "aSehoRsL_RTusriYkweAcAAAANQ"]
[Thu Nov 27 08:56:01.589834 2025] [:error] [pid 19015:tid 19076] [client 64.225.75.246:49692] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aSehoQ4MxyJWPPh2qEjD7QAAAIU"]
[Thu Nov 27 08:56:02.311699 2025] [:error] [pid 19013:tid 19038] [client 64.227.32.66:44174] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aSehooaBrX8b6-N6_86ZpgAAABU"]
[Thu Nov 27 08:56:02.326934 2025] [:error] [pid 19013:tid 19036] [client 64.225.75.246:49698] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/swagger.json"] [unique_id "aSehooaBrX8b6-N6_86ZpwAAABM"]
[Thu Nov 27 08:56:03.053513 2025] [:error] [pid 19013:tid 19027] [client 64.225.75.246:49702] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/@vite/env"] [unique_id "aSeho4aBrX8b6-N6_86ZqAAAAAo"]
[Thu Nov 27 08:56:03.177712 2025] [:error] [pid 19013:tid 19023] [client 64.227.32.66:44184] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/api/swagger.json"] [unique_id "aSeho4aBrX8b6-N6_86ZqQAAAAY"]
[Thu Nov 27 08:56:03.782224 2025] [:error] [pid 19013:tid 19020] [client 64.225.75.246:49712] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/actuator/env"] [unique_id "aSeho4aBrX8b6-N6_86ZqwAAAAM"]
[Thu Nov 27 08:56:03.918043 2025] [:error] [pid 19015:tid 19088] [client 64.227.32.66:44186] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/@vite/env"] [unique_id "aSehow4MxyJWPPh2qEjD7gAAAJE"]
[Thu Nov 27 08:56:04.514394 2025] [:error] [pid 19119:tid 19197] [client 64.225.75.246:49716] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server"] [unique_id "aSehpBsL_RTusriYkweAcwAAANc"]
[Thu Nov 27 08:56:04.659457 2025] [:error] [pid 19119:tid 19183] [client 64.227.32.66:44188] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/actuator/env"] [unique_id "aSehpBsL_RTusriYkweAdAAAAMk"]
[Thu Nov 27 08:56:05.243757 2025] [:error] [pid 19119:tid 19191] [client 64.225.75.246:49718] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSehpRsL_RTusriYkweAdgAAANE"]
[Thu Nov 27 08:56:05.411008 2025] [:error] [pid 39563:tid 39570] [client 64.227.32.66:55818] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSehpTNSKUd-PJ2wU0QjuwAAAQU"]
[Thu Nov 27 08:56:05.970429 2025] [:error] [pid 40009:tid 40075] [client 64.225.75.246:49724] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about"] [unique_id "aSehpUJuxjShta_KR6UA3QAAAUw"]
[Thu Nov 27 08:56:06.140144 2025] [:error] [pid 39563:tid 39566] [client 64.227.32.66:55824] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/server"] [unique_id "aSehpjNSKUd-PJ2wU0QjvAAAAQE"]
[Thu Nov 27 08:56:06.691288 2025] [:error] [pid 19014:tid 19049] [client 64.225.75.246:49732] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug/default/view"] [unique_id "aSehpo2utvwZ4eADRmr9hwAAAEU"]
[Thu Nov 27 08:56:06.866813 2025] [:error] [pid 40009:tid 40074] [client 64.227.32.66:55838] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSehpkJuxjShta_KR6UA3wAAAUs"]
[Thu Nov 27 08:56:07.460045 2025] [:error] [pid 19015:tid 19095] [client 64.225.75.246:46518] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2/_catalog"] [unique_id "aSehpw4MxyJWPPh2qEjD7wAAAJg"]
[Thu Nov 27 08:56:07.617288 2025] [:error] [pid 39563:tid 39588] [client 64.227.32.66:55848] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about"] [unique_id "aSehpzNSKUd-PJ2wU0QjvgAAARc"]
[Thu Nov 27 08:56:08.194849 2025] [:error] [pid 19119:tid 19176] [client 64.225.75.246:46522] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSehqBsL_RTusriYkweAeQAAAMI"]
[Thu Nov 27 08:56:08.348471 2025] [:error] [pid 39563:tid 39581] [client 64.227.32.66:55856] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/debug/default/view"] [unique_id "aSehqDNSKUd-PJ2wU0QjvwAAARA"]
[Thu Nov 27 08:56:08.929449 2025] [:error] [pid 19119:tid 19184] [client 64.225.75.246:46526] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server-status"] [unique_id "aSehqBsL_RTusriYkweAfAAAAMo"]
[Thu Nov 27 08:56:09.081394 2025] [:error] [pid 19119:tid 19186] [client 64.227.32.66:55864] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/v2/_catalog"] [unique_id "aSehqRsL_RTusriYkweAfQAAAMw"]
[Thu Nov 27 08:56:09.652713 2025] [:error] [pid 40009:tid 40063] [client 64.225.75.246:46536] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/login.action"] [unique_id "aSehqUJuxjShta_KR6UA4gAAAUE"]
[Thu Nov 27 08:56:09.833770 2025] [:error] [pid 19119:tid 19183] [client 64.227.32.66:55880] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSehqRsL_RTusriYkweAfgAAAMk"]
[Thu Nov 27 08:56:10.380501 2025] [:error] [pid 39563:tid 39586] [client 64.225.75.246:46540] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_all_dbs"] [unique_id "aSehqjNSKUd-PJ2wU0QjwQAAARU"]
[Thu Nov 27 08:56:10.679405 2025] [:error] [pid 40009:tid 40076] [client 64.227.32.66:55884] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/server-status"] [unique_id "aSehqkJuxjShta_KR6UA5AAAAU0"]
[Thu Nov 27 08:56:11.108778 2025] [:error] [pid 19119:tid 19188] [client 64.225.75.246:46552] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.DS_Store"] [unique_id "aSehqxsL_RTusriYkweAgAAAAM4"]
[Thu Nov 27 08:56:11.424585 2025] [:error] [pid 19119:tid 19180] [client 64.227.32.66:55886] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/login.action"] [unique_id "aSehqxsL_RTusriYkweAgQAAAMY"]
[Thu Nov 27 08:56:12.074701 2025] [:error] [pid 19119:tid 19196] [client 64.225.75.246:46560] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aSehrBsL_RTusriYkweAggAAANY"]
[Thu Nov 27 08:56:12.348147 2025] [:error] [pid 40009:tid 40071] [client 64.227.32.66:55888] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/_all_dbs"] [unique_id "aSehrEJuxjShta_KR6UA5gAAAUg"]
[Thu Nov 27 08:56:12.880487 2025] [:error] [pid 40009:tid 40086] [client 64.225.75.246:46576] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSehrEJuxjShta_KR6UA6AAAAVY"]
[Thu Nov 27 08:56:13.081797 2025] [:error] [pid 39563:tid 39565] [client 64.227.32.66:55890] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.DS_Store"] [unique_id "aSehrTNSKUd-PJ2wU0QjxQAAAQA"]
[Thu Nov 27 08:56:13.819255 2025] [:error] [pid 39563:tid 39568] [client 64.227.32.66:55896] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aSehrTNSKUd-PJ2wU0QjxgAAAQM"]
[Thu Nov 27 08:56:13.834853 2025] [:error] [pid 39563:tid 39569] [client 64.225.75.246:46588] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSehrTNSKUd-PJ2wU0QjxwAAAQQ"]
[Thu Nov 27 08:56:14.668938 2025] [:error] [pid 40009:tid 40064] [client 64.227.32.66:55900] [client 64.227.32.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSehrkJuxjShta_KR6UA6gAAAUI"]
[Thu Nov 27 08:56:14.713300 2025] [:error] [pid 19119:tid 19180] [client 64.225.75.246:46596] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.json"] [unique_id "aSehrhsL_RTusriYkweAjwAAAMY"]
[Thu Nov 27 08:56:15.396787 2025] [:error] [pid 19119:tid 19179] [client 64.227.32.66:40124] [client 64.227.32.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSehrxsL_RTusriYkweAlAAAAMU"]
[Thu Nov 27 08:56:15.515508 2025] [:error] [pid 19119:tid 19176] [client 64.225.75.246:46610] [client 64.225.75.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/telescope/requests"] [unique_id "aSehrxsL_RTusriYkweAlQAAAMI"]
[Thu Nov 27 09:39:11.009142 2025] [:error] [pid 40009:tid 40075] [client 182.42.111.213:54407] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aServ0JuxjShta_KR6UTUwAAAUw"]
[Fri Nov 28 13:30:55.106331 2025] [:error] [pid 37647:tid 37667] [client 144.126.229.182:54858] [client 144.126.229.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.126.229.182, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSkzj4FGzppE2t9ZCZwb-AAAAY8"]
[Fri Nov 28 13:30:56.610094 2025] [:error] [pid 34292:tid 34314] [client 144.126.229.182:63070] [client 144.126.229.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.126.229.182, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSkzkH3F38HO0odRi1SzeAAAABQ"]
[Fri Nov 28 17:35:05.213561 2025] [:error] [pid 55588:tid 55608] [client 180.102.134.69:60735] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSlsyVkh_zgPkFPwj1fLuQAAAdI"]
[Fri Nov 28 20:33:53.699087 2025] [:error] [pid 47395:tid 47405] [client 223.185.31.227:9091] [client 223.185.31.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.31.227, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmWsQL-OiEmV804OC2xEgAAAQc"]
[Fri Nov 28 21:24:19.960541 2025] [:error] [pid 47395:tid 47420] [client 34.12.108.18:57607] [client 34.12.108.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.12.108.18, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSmigwL-OiEmV804OC28VwAAARY"]
[Fri Nov 28 21:24:21.200425 2025] [:error] [pid 47395:tid 47401] [client 34.12.108.18:57607] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aSmihQL-OiEmV804OC28ZAAAAQM"]
[Fri Nov 28 21:24:22.672376 2025] [:error] [pid 42807:tid 42812] [client 34.12.108.18:52821] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aSmihriVNcUICHtTcwqHxgAAAII"]
[Fri Nov 28 21:24:23.974842 2025] [:error] [pid 38435:tid 38445] [client 34.12.108.18:54920] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aSmih9t2E1u6lE46Uplw7AAAAAg"]
[Fri Nov 28 21:24:25.296155 2025] [:error] [pid 38347:tid 38381] [client 34.12.108.18:51280] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aSmiiV4FzQmoUx27MAl-awAAAEQ"]
[Fri Nov 28 21:24:26.460637 2025] [:error] [pid 38435:tid 38439] [client 34.12.108.18:58719] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aSmiitt2E1u6lE46Uplw7wAAAAI"]
[Fri Nov 28 21:24:27.701093 2025] [:error] [pid 38347:tid 38399] [client 34.12.108.18:51319] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aSmii14FzQmoUx27MAl-cwAAAFY"]
[Fri Nov 28 21:24:28.839902 2025] [:error] [pid 38435:tid 38441] [client 34.12.108.18:58911] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aSmijNt2E1u6lE46Uplw8gAAAAQ"]
[Fri Nov 28 21:24:29.981754 2025] [:error] [pid 47395:tid 47409] [client 34.12.108.18:64931] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSmijQL-OiEmV804OC28awAAAQs"]
[Fri Nov 28 21:24:31.155502 2025] [:error] [pid 38346:tid 38351] [client 34.12.108.18:54242] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSmijzVLXLVaGOn9rSn6IgAAAYE"]
[Fri Nov 28 21:24:32.333724 2025] [:error] [pid 42807:tid 42824] [client 34.12.108.18:50049] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSmikLiVNcUICHtTcwqHywAAAI4"]
[Fri Nov 28 21:24:33.576413 2025] [:error] [pid 47471:tid 47479] [client 34.12.108.18:56054] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSmikdhJAyjzRrygCejSlwAAAUY"]
[Fri Nov 28 21:24:34.757288 2025] [:error] [pid 38346:tid 38369] [client 34.12.108.18:52083] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSmikjVLXLVaGOn9rSn6KwAAAZM"]
[Fri Nov 28 21:24:35.925742 2025] [:error] [pid 38435:tid 38451] [client 34.12.108.18:56292] [client 34.12.108.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSmik9t2E1u6lE46Uplw9QAAAA4"]
[Sat Nov 29 00:05:18.732898 2025] [:error] [pid 47395:tid 47407] [client 103.167.150.158:56906] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSnIPgL-OiEmV804OC3l5gAAAQk"]
[Sat Nov 29 00:13:43.243773 2025] [:error] [pid 9654:tid 9668] [client 113.219.218.197:43259] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSnKN3wlAlfevRIdjr-VFwAAAEo"]
[Sat Nov 29 02:18:44.987004 2025] [:error] [pid 9656:tid 9722] [client 138.197.94.71:37820] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSnnhI_4AfnhtHpInuneIgAAAIo"]
[Sat Nov 29 02:18:50.823356 2025] [:error] [pid 9751:tid 9771] [client 138.197.94.71:52476] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSnniqqNNTs_lWy2XeH7ZQAAAdI"]
[Sat Nov 29 04:55:47.011715 2025] [:error] [pid 53819:tid 53896] [client 138.197.94.71:52870] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSoMU7rEG0migocqTWewlAAAAJQ"]
[Sat Nov 29 04:55:48.262674 2025] [:error] [pid 53819:tid 53877] [client 138.197.94.71:51094] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSoMVLrEG0migocqTWewlQAAAIE"]
[Sat Nov 29 05:35:16.506621 2025] [:error] [pid 53906:tid 53921] [client 121.127.34.120:59758] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aSoVlJaQHRVpydtRoVcAQAAAAM0"]
[Sat Nov 29 05:35:17.106534 2025] [:error] [pid 53817:tid 53833] [client 121.127.34.120:60637] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aSoVlRUtaHwNb4_nTTSokwAAAAw"]
[Sat Nov 29 05:35:23.645452 2025] [:error] [pid 22939:tid 22952] [client 121.127.34.120:54523] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/adforest/style.css"] [unique_id "aSoVm9Rbdh0p_UmbHuB-6gAAAYs"]
[Sat Nov 29 05:35:24.975988 2025] [:error] [pid 53819:tid 53879] [client 121.127.34.120:50504] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/superio/style.css"] [unique_id "aSoVnLrEG0migocqTWe3WwAAAIM"]
[Sat Nov 29 05:35:25.574538 2025] [:error] [pid 53817:tid 53833] [client 121.127.34.120:57298] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/superio/style.css"] [unique_id "aSoVnRUtaHwNb4_nTTSooQAAAAw"]
[Sat Nov 29 05:35:26.172772 2025] [:error] [pid 53906:tid 53919] [client 121.127.34.120:58278] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/superio/style.css"] [unique_id "aSoVnpaQHRVpydtRoVcARwAAAMs"]
[Sat Nov 29 05:35:26.784491 2025] [:error] [pid 22280:tid 22285] [client 121.127.34.120:59413] [client 121.127.34.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/superio/style.css"] [unique_id "aSoVnpFKJ7cA_ndzTYsryAAAAUM"]
[Sat Nov 29 05:41:14.429701 2025] [:error] [pid 53818:tid 53866] [client 138.197.94.71:54994] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSoW-pY2lVKaQoKCJULCfAAAAFE"]
[Sat Nov 29 05:41:15.269080 2025] [:error] [pid 53819:tid 53886] [client 138.197.94.71:49132] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSoW-7rEG0migocqTWe4kwAAAIo"]
[Sat Nov 29 06:03:24.941577 2025] [:error] [pid 53818:tid 53853] [client 217.146.83.115:38346] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aSocLJY2lVKaQoKCJULJLwAAAEQ"]
[Sat Nov 29 06:03:25.455780 2025] [:error] [pid 19562:tid 19573] [client 217.146.83.115:39868] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aSocLV4oDK0S9prYl7lnxwAAAQk"]
[Sat Nov 29 06:03:25.969937 2025] [:error] [pid 53818:tid 53849] [client 217.146.83.115:40106] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aSocLZY2lVKaQoKCJULJOgAAAEA"]
[Sat Nov 29 06:03:26.484212 2025] [:error] [pid 53817:tid 53827] [client 217.146.83.115:40346] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aSocLhUtaHwNb4_nTTSwMwAAAAY"]
[Sat Nov 29 06:03:26.998723 2025] [:error] [pid 53906:tid 53913] [client 217.146.83.115:40972] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aSocLpaQHRVpydtRoVcKPAAAAMU"]
[Sat Nov 29 06:03:27.510508 2025] [:error] [pid 19562:tid 19575] [client 217.146.83.115:41244] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSocL14oDK0S9prYl7ln9AAAAQs"]
[Sat Nov 29 06:03:28.026706 2025] [:error] [pid 53906:tid 53927] [client 217.146.83.115:41556] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSocMJaQHRVpydtRoVcKUwAAANM"]
[Sat Nov 29 06:03:28.540599 2025] [:error] [pid 53819:tid 53884] [client 217.146.83.115:41894] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSocMLrEG0migocqTWe_yQAAAIg"]
[Sat Nov 29 06:03:29.053913 2025] [:error] [pid 22280:tid 22282] [client 217.146.83.115:42186] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSocMZFKJ7cA_ndzTYszvAAAAUA"]
[Sat Nov 29 06:03:29.573762 2025] [:error] [pid 22280:tid 22303] [client 217.146.83.115:42492] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSocMZFKJ7cA_ndzTYszxQAAAVU"]
[Sat Nov 29 06:28:25.662642 2025] [:error] [pid 51061:tid 51086] [client 221.229.106.25:57324] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSoiCRXRwVdNJFgymnSCpgAAAdY"]
[Sat Nov 29 08:23:03.453009 2025] [:error] [pid 20828:tid 20899] [client 45.130.203.140:53721] [client 45.130.203.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aSo85-qW2f0jLRABAOQMAQAAAI4"]
[Sat Nov 29 08:23:04.125041 2025] [:error] [pid 20828:tid 20892] [client 45.130.203.153:22567] [client 45.130.203.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aSo86OqW2f0jLRABAOQMAwAAAIc"]
[Sat Nov 29 09:33:10.009015 2025] [:error] [pid 32136:tid 32144] [client 138.197.94.71:51966] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSpNVsSj_WSVQM1psKoLoQAAAQY"]
[Sat Nov 29 09:33:11.992703 2025] [:error] [pid 20828:tid 20893] [client 138.197.94.71:35752] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSpNV-qW2f0jLRABAOQdywAAAIg"]
[Sat Nov 29 14:41:23.724078 2025] [:error] [pid 20826:tid 20847] [client 138.197.94.71:39324] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSqVk_ABfBqk70vKX9SAfwAAABE"]
[Sat Nov 29 14:41:30.396464 2025] [:error] [pid 25341:tid 25366] [client 138.197.94.71:51362] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSqVmvWK8JdN03Mg7dz4AAAAAdU"]
[Sat Nov 29 15:00:50.265029 2025] [:error] [pid 32136:tid 32154] [client 207.154.216.0:55880] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSqaIsSj_WSVQM1psKpYhAAAARA"]
[Sat Nov 29 15:00:50.857496 2025] [:error] [pid 62619:tid 62624] [client 207.154.216.0:63758] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSqaItk7ZYKT63FfVSUyqQAAAUM"]
[Sat Nov 29 15:00:51.422614 2025] [:error] [pid 62619:tid 62634] [client 207.154.216.0:53704] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSqaI9k7ZYKT63FfVSUy2wAAAU0"]
[Sat Nov 29 15:00:52.408718 2025] [:error] [pid 20826:tid 20844] [client 207.154.216.0:63118] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSqaJPABfBqk70vKX9SDoAAAAA4"]
[Sat Nov 29 15:00:53.473377 2025] [:error] [pid 62619:tid 62642] [client 207.154.216.0:53032] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSqaJdk7ZYKT63FfVSUzKQAAAVU"]
[Sat Nov 29 15:14:23.077726 2025] [:error] [pid 62619:tid 62625] [client 207.154.216.0:56951] [client 207.154.216.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-json/"] [unique_id "aSqdT9k7ZYKT63FfVSU20AAAAUQ"]
[Sat Nov 29 16:19:31.821207 2025] [:error] [pid 62619:tid 62640] [client 138.197.94.71:49294] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSqsk9k7ZYKT63FfVSVASgAAAVM"]
[Sat Nov 29 16:19:34.720350 2025] [:error] [pid 20828:tid 20895] [client 138.197.94.71:56124] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSqsluqW2f0jLRABAORoCAAAAIo"]
[Sat Nov 29 17:07:39.214461 2025] [:error] [pid 25341:tid 25355] [client 96.9.95.92:56080] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSq32_WK8JdN03Mg7dwKRwAAAco"]
[Sat Nov 29 17:07:39.522073 2025] [:error] [pid 32136:tid 32155] [client 96.9.95.92:56093] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSq328Sj_WSVQM1psKp3sQAAARE"]
[Sat Nov 29 17:07:39.895447 2025] [:error] [pid 62619:tid 62633] [client 96.9.95.92:56130] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSq329k7ZYKT63FfVSVK3QAAAUw"]
[Sat Nov 29 17:07:41.512645 2025] [:error] [pid 20828:tid 20901] [client 96.9.95.92:56175] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSq33eqW2f0jLRABAORwzQAAAJA"]
[Sat Nov 29 17:07:42.245858 2025] [:error] [pid 20826:tid 20846] [client 96.9.95.92:56295] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSq33vABfBqk70vKX9SWmgAAABA"]
[Sat Nov 29 17:07:42.956003 2025] [:error] [pid 32136:tid 32145] [client 96.9.95.92:56368] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSq33sSj_WSVQM1psKp3sgAAAQc"]
[Sat Nov 29 18:30:20.224809 2025] [:error] [pid 37490:tid 37503] [client 27.59.119.138:57526] [client 27.59.119.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.59.119.138, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSrLPJjG6OUSCUo6XZ0mCAAAAgs"]
[Sat Nov 29 19:35:08.201774 2025] [:error] [pid 25341:tid 25361] [client 138.197.94.71:42382] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSrabPWK8JdN03Mg7dxIwgAAAdA"]
[Sat Nov 29 19:35:11.180624 2025] [:error] [pid 25341:tid 25347] [client 138.197.94.71:42712] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSrab_WK8JdN03Mg7dxIxAAAAcI"]
[Sat Nov 29 19:45:54.387589 2025] [:error] [pid 20826:tid 20830] [client 101.32.52.164:60128] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aSrc8vABfBqk70vKX9TEoQAAAAA"]
[Sat Nov 29 21:43:22.729377 2025] [:error] [pid 20828:tid 20899] [client 138.197.94.71:59022] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSr4euqW2f0jLRABAOSmyAAAAI4"]
[Sat Nov 29 21:43:25.721788 2025] [:error] [pid 20827:tid 20875] [client 138.197.94.71:57516] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSr4fYR9B7FcLfh1rSGspAAAAFE"]
[Sat Nov 29 23:50:14.422354 2025] [:error] [pid 20915:tid 20939] [client 138.197.94.71:56220] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSsWNlOOtKw1QZ3TPEQp7gAAANY"]
[Sat Nov 29 23:50:16.132305 2025] [:error] [pid 37490:tid 37494] [client 138.197.94.71:48610] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSsWOJjG6OUSCUo6XZ15kwAAAgI"]
[Sun Nov 30 01:20:52.777602 2025] [:error] [pid 58730:tid 58778] [client 35.166.7.143:54006] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSsrdKDQq6rwusUXQKjctwAAAA0"]
[Sun Nov 30 01:20:53.502758 2025] [:error] [pid 42164:tid 42241] [client 35.166.7.143:54014] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aSsrddip8Nhatsq7KxzZ6AAAARM"]
[Sun Nov 30 01:20:54.239303 2025] [:error] [pid 58730:tid 58775] [client 35.166.7.143:54020] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aSsrdqDQq6rwusUXQKjcugAAAAo"]
[Sun Nov 30 01:20:54.972510 2025] [:error] [pid 42162:tid 42188] [client 35.166.7.143:54036] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aSsrdtePpz4Ije-_Ejrt5gAAAJU"]
[Sun Nov 30 01:20:55.698256 2025] [:error] [pid 29714:tid 29726] [client 35.166.7.143:54040] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aSsrd776_KNwefuiUY9xSgAAAEo"]
[Sun Nov 30 01:20:56.438267 2025] [:error] [pid 29714:tid 29725] [client 35.166.7.143:54048] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aSsreL76_KNwefuiUY9xTQAAAEk"]
[Sun Nov 30 01:20:57.169333 2025] [:error] [pid 42163:tid 42197] [client 35.166.7.143:54056] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aSsreZnaEs-eGc51wg2PsAAAAMI"]
[Sun Nov 30 01:20:57.894756 2025] [:error] [pid 42164:tid 42236] [client 35.166.7.143:54070] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env"] [unique_id "aSsredip8Nhatsq7KxzZ7AAAAQ4"]
[Sun Nov 30 01:20:58.622502 2025] [:error] [pid 42252:tid 42264] [client 35.166.7.143:54072] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env.json"] [unique_id "aSsrerweMxCk051n8_-0SAAAAUo"]
[Sun Nov 30 01:20:59.349437 2025] [:error] [pid 29714:tid 29728] [client 35.166.7.143:54086] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env.yaml"] [unique_id "aSsre776_KNwefuiUY9xUQAAAEw"]
[Sun Nov 30 01:21:00.084717 2025] [:error] [pid 29714:tid 29724] [client 35.166.7.143:54102] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env.yml"] [unique_id "aSsrfL76_KNwefuiUY9xUgAAAEg"]
[Sun Nov 30 01:21:00.819462 2025] [:error] [pid 42164:tid 42230] [client 35.166.7.143:54106] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config"] [unique_id "aSsrfNip8Nhatsq7KxzZ7QAAAQg"]
[Sun Nov 30 01:21:01.546517 2025] [:error] [pid 42252:tid 42274] [client 35.166.7.143:54116] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.json"] [unique_id "aSsrfbweMxCk051n8_-0TAAAAVQ"]
[Sun Nov 30 01:21:02.282038 2025] [:error] [pid 58730:tid 58784] [client 35.166.7.143:54132] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.js"] [unique_id "aSsrfqDQq6rwusUXQKjcwQAAABM"]
[Sun Nov 30 01:21:03.023166 2025] [:error] [pid 42164:tid 42244] [client 35.166.7.143:49020] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yaml"] [unique_id "aSsrf9ip8Nhatsq7KxzZ8QAAARY"]
[Sun Nov 30 01:21:03.749565 2025] [:error] [pid 58730:tid 58771] [client 35.166.7.143:49034] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aSsrf6DQq6rwusUXQKjcxgAAAAY"]
[Sun Nov 30 01:21:04.477951 2025] [:error] [pid 58730:tid 58789] [client 35.166.7.143:49042] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.ini"] [unique_id "aSsrgKDQq6rwusUXQKjcyQAAABc"]
[Sun Nov 30 01:21:05.200472 2025] [:error] [pid 29714:tid 29728] [client 35.166.7.143:49050] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aSsrgb76_KNwefuiUY9xWAAAAEw"]
[Sun Nov 30 01:21:05.938311 2025] [:error] [pid 42163:tid 42208] [client 35.166.7.143:49064] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/configuration"] [unique_id "aSsrgZnaEs-eGc51wg2PsQAAAM0"]
[Sun Nov 30 01:21:06.672603 2025] [:error] [pid 42163:tid 42219] [client 35.166.7.143:49076] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings"] [unique_id "aSsrgpnaEs-eGc51wg2PswAAANg"]
[Sun Nov 30 01:21:07.403882 2025] [:error] [pid 29714:tid 29730] [client 35.166.7.143:49084] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.json"] [unique_id "aSsrg776_KNwefuiUY9xXQAAAE4"]
[Sun Nov 30 01:21:08.137175 2025] [:error] [pid 42163:tid 42211] [client 35.166.7.143:49092] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.config.js"] [unique_id "aSsrhJnaEs-eGc51wg2PtwAAANA"]
[Sun Nov 30 01:21:08.876496 2025] [:error] [pid 29714:tid 29731] [client 35.166.7.143:49108] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aSsrhL76_KNwefuiUY9xXwAAAE8"]
[Sun Nov 30 01:21:09.607458 2025] [:error] [pid 58730:tid 58786] [client 35.166.7.143:49112] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aSsrhaDQq6rwusUXQKjc1QAAABQ"]
[Sun Nov 30 01:21:10.335809 2025] [:error] [pid 42252:tid 42267] [client 35.166.7.143:49126] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aSsrhrweMxCk051n8_-0TwAAAU0"]
[Sun Nov 30 01:21:11.066694 2025] [:error] [pid 29714:tid 29718] [client 35.166.7.143:49134] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aSsrh776_KNwefuiUY9xYwAAAEI"]
[Sun Nov 30 01:21:11.789569 2025] [:error] [pid 42163:tid 42217] [client 35.166.7.143:49136] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin"] [unique_id "aSsrh5naEs-eGc51wg2PuwAAANY"]
[Sun Nov 30 01:21:12.514760 2025] [:error] [pid 42252:tid 42278] [client 35.166.7.143:49148] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aSsriLweMxCk051n8_-0VAAAAVg"]
[Sun Nov 30 01:21:13.237533 2025] [:error] [pid 42252:tid 42256] [client 35.166.7.143:55822] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aSsribweMxCk051n8_-0WQAAAUI"]
[Sun Nov 30 01:21:13.962994 2025] [:error] [pid 29714:tid 29735] [client 35.166.7.143:55826] [client 35.166.7.143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/composer.json"] [unique_id "aSsrib76_KNwefuiUY9xaAAAAFM"]
[Sun Nov 30 01:21:14.692539 2025] [:error] [pid 29714:tid 29723] [client 35.166.7.143:55836] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/config"] [unique_id "aSsrir76_KNwefuiUY9xawAAAEc"]
[Sun Nov 30 01:21:15.430829 2025] [:error] [pid 29714:tid 29717] [client 35.166.7.143:55842] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/credentials"] [unique_id "aSsri776_KNwefuiUY9xbgAAAEE"]
[Sun Nov 30 01:21:16.162571 2025] [:error] [pid 29714:tid 29739] [client 35.166.7.143:55852] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/config"] [unique_id "aSsrjL76_KNwefuiUY9xcQAAAFc"]
[Sun Nov 30 01:21:16.886263 2025] [:error] [pid 42252:tid 42273] [client 35.166.7.143:55854] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/credentials"] [unique_id "aSsrjLweMxCk051n8_-0XQAAAVM"]
[Sun Nov 30 01:21:17.614900 2025] [:error] [pid 42162:tid 42188] [client 35.166.7.143:55868] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.json"] [unique_id "aSsrjdePpz4Ije-_Ejrt-AAAAJU"]
[Sun Nov 30 01:21:18.342156 2025] [:error] [pid 29714:tid 29720] [client 35.166.7.143:55878] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/credentials"] [unique_id "aSsrjr76_KNwefuiUY9xdQAAAEQ"]
[Sun Nov 30 01:21:19.070721 2025] [:error] [pid 29714:tid 29732] [client 35.166.7.143:55894] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.json"] [unique_id "aSsrj776_KNwefuiUY9xdgAAAFA"]
[Sun Nov 30 01:21:19.796681 2025] [:error] [pid 29714:tid 29716] [client 35.166.7.143:55896] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keys.js"] [unique_id "aSsrj776_KNwefuiUY9xdwAAAEA"]
[Sun Nov 30 01:21:20.523041 2025] [:error] [pid 58730:tid 58787] [client 35.166.7.143:55910] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws-keys.js"] [unique_id "aSsrkKDQq6rwusUXQKjc2gAAABU"]
[Sun Nov 30 01:21:21.251578 2025] [:error] [pid 58730:tid 58778] [client 35.166.7.143:55914] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailgun"] [unique_id "aSsrkaDQq6rwusUXQKjc3AAAAA0"]
[Sun Nov 30 01:21:21.979084 2025] [:error] [pid 58730:tid 58788] [client 35.166.7.143:55926] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailgun.json"] [unique_id "aSsrkaDQq6rwusUXQKjc3wAAABY"]
[Sun Nov 30 01:21:30.950999 2025] [:error] [pid 58730:tid 58768] [client 35.166.7.143:57176] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php"] [unique_id "aSsrmqDQq6rwusUXQKjdGAAAAAM"]
[Sun Nov 30 01:21:31.681074 2025] [:error] [pid 42252:tid 42274] [client 35.166.7.143:57188] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info"] [unique_id "aSsrm7weMxCk051n8_-0awAAAVQ"]
[Sun Nov 30 01:21:32.409437 2025] [:error] [pid 29714:tid 29730] [client 35.166.7.143:57198] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo"] [unique_id "aSsrnL76_KNwefuiUY9xqwAAAE4"]
[Sun Nov 30 01:21:33.136793 2025] [:error] [pid 58730:tid 58790] [client 35.166.7.143:55224] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSsrnaDQq6rwusUXQKjdHQAAABg"]
[Sun Nov 30 01:21:34.646422 2025] [:error] [pid 58730:tid 58782] [client 35.166.7.143:55244] [client 35.166.7.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js"] [unique_id "aSsrnqDQq6rwusUXQKjdIAAAABE"]
[Sun Nov 30 01:23:42.878724 2025] [:error] [pid 42163:tid 42200] [client 138.197.94.71:59786] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSssHpnaEs-eGc51wg2QUwAAAMU"]
[Sun Nov 30 01:23:46.550328 2025] [:error] [pid 29714:tid 29722] [client 138.197.94.71:53002] [client 138.197.94.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSssIr76_KNwefuiUY9yyQAAAEY"]
[Sun Nov 30 02:47:11.746589 2025] [:error] [pid 42252:tid 42276] [client 18.153.99.0:35822] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSs_r7weMxCk051n8__IMgAAAVY"]
[Sun Nov 30 02:47:12.718592 2025] [:error] [pid 58730:tid 58776] [client 18.153.99.0:35832] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aSs_sKDQq6rwusUXQKjs-AAAAAs"]
[Sun Nov 30 02:47:13.686334 2025] [:error] [pid 42163:tid 42204] [client 18.153.99.0:35842] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aSs_sZnaEs-eGc51wg2gTgAAAMk"]
[Sun Nov 30 02:47:14.657484 2025] [:error] [pid 42162:tid 42172] [client 18.153.99.0:35856] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aSs_stePpz4Ije-_EjoAWQAAAIU"]
[Sun Nov 30 02:47:15.628589 2025] [:error] [pid 33303:tid 33321] [client 18.153.99.0:35870] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aSs_s_vL3Xz3V8uL8l6A0QAAAZA"]
[Sun Nov 30 02:47:16.593565 2025] [:error] [pid 33303:tid 33311] [client 18.153.99.0:35884] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aSs_tPvL3Xz3V8uL8l6A1AAAAYY"]
[Sun Nov 30 02:47:17.566515 2025] [:error] [pid 33376:tid 33379] [client 18.153.99.0:43652] [client 18.153.99.0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aSs_tXpx_7viPEhKF36cxwAAAgA"]
[Sun Nov 30 02:47:18.540643 2025] [:error] [pid 33303:tid 33321] [client 18.153.99.0:43658] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env"] [unique_id "aSs_tvvL3Xz3V8uL8l6A2AAAAZA"]
[Sun Nov 30 02:47:19.504134 2025] [:error] [pid 42252:tid 42271] [client 18.153.99.0:43664] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env.json"] [unique_id "aSs_t7weMxCk051n8__IOAAAAVE"]
[Sun Nov 30 02:47:20.467732 2025] [:error] [pid 33376:tid 33379] [client 18.153.99.0:43674] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env.yaml"] [unique_id "aSs_uHpx_7viPEhKF36czAAAAgA"]
[Sun Nov 30 02:47:21.436501 2025] [:error] [pid 29714:tid 29721] [client 18.153.99.0:43690] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env.yml"] [unique_id "aSs_ub76_KNwefuiUY-EGAAAAEU"]
[Sun Nov 30 02:47:22.399784 2025] [:error] [pid 42164:tid 42236] [client 18.153.99.0:43702] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config"] [unique_id "aSs_utip8Nhatsq7KxzvRwAAAQ4"]
[Sun Nov 30 02:47:23.373051 2025] [:error] [pid 33376:tid 33396] [client 18.153.99.0:43714] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.json"] [unique_id "aSs_u3px_7viPEhKF36c0AAAAhE"]
[Sun Nov 30 02:47:24.343867 2025] [:error] [pid 42163:tid 42206] [client 18.153.99.0:43722] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.js"] [unique_id "aSs_vJnaEs-eGc51wg2gUwAAAMs"]
[Sun Nov 30 02:47:25.306855 2025] [:error] [pid 42163:tid 42202] [client 18.153.99.0:43738] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.yaml"] [unique_id "aSs_vZnaEs-eGc51wg2gVAAAAMc"]
[Sun Nov 30 02:47:26.276632 2025] [:error] [pid 29714:tid 29737] [client 18.153.99.0:43752] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aSs_vr76_KNwefuiUY-EGwAAAFU"]
[Sun Nov 30 02:47:27.241078 2025] [:error] [pid 33337:tid 33353] [client 18.153.99.0:49916] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.ini"] [unique_id "aSs_vz7HzFQftKzaJgKAKwAAAcw"]
[Sun Nov 30 02:47:28.211927 2025] [:error] [pid 29714:tid 29717] [client 18.153.99.0:49922] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aSs_wL76_KNwefuiUY-EHAAAAEE"]
[Sun Nov 30 02:47:29.182042 2025] [:error] [pid 29714:tid 29721] [client 18.153.99.0:49930] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/configuration"] [unique_id "aSs_wb76_KNwefuiUY-EHQAAAEU"]
[Sun Nov 30 02:47:30.144337 2025] [:error] [pid 42163:tid 42214] [client 18.153.99.0:49942] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/settings"] [unique_id "aSs_wpnaEs-eGc51wg2gVwAAANM"]
[Sun Nov 30 02:47:31.112692 2025] [:error] [pid 29714:tid 29735] [client 18.153.99.0:49948] [client 18.153.99.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/settings.json"] [unique_id "aSs_w776_KNwefuiUY-EHwAAAFM"]
[Sun Nov 30 03:05:55.686450 2025] [:error] [pid 29714:tid 29716] [client 18.200.191.190:36070] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aStEE776_KNwefuiUY-GeAAAAEA"]
[Sun Nov 30 03:05:56.756626 2025] [:error] [pid 42164:tid 42241] [client 18.200.191.190:36078] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aStEFNip8Nhatsq7Kxzx8QAAARM"]
[Sun Nov 30 03:05:57.829612 2025] [:error] [pid 33376:tid 33401] [client 18.200.191.190:36086] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aStEFXpx_7viPEhKF36gJwAAAhY"]
[Sun Nov 30 03:05:58.900241 2025] [:error] [pid 29714:tid 29732] [client 18.200.191.190:36088] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aStEFr76_KNwefuiUY-GgAAAAFA"]
[Sun Nov 30 03:05:59.971276 2025] [:error] [pid 42164:tid 42238] [client 18.200.191.190:36098] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aStEF9ip8Nhatsq7Kxzx-AAAARA"]
[Sun Nov 30 03:06:01.039495 2025] [:error] [pid 33376:tid 33399] [client 18.200.191.190:36114] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aStEGXpx_7viPEhKF36gKgAAAhQ"]
[Sun Nov 30 03:06:02.108640 2025] [:error] [pid 33337:tid 33346] [client 18.200.191.190:36116] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aStEGj7HzFQftKzaJgKCqwAAAcU"]
[Sun Nov 30 03:06:03.177090 2025] [:error] [pid 42252:tid 42255] [client 18.200.191.190:36122] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env"] [unique_id "aStEG7weMxCk051n8__LNwAAAUE"]
[Sun Nov 30 03:06:04.245986 2025] [:error] [pid 29714:tid 29734] [client 18.200.191.190:36130] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env.json"] [unique_id "aStEHL76_KNwefuiUY-GhgAAAFI"]
[Sun Nov 30 03:06:12.931447 2025] [:error] [pid 33376:tid 33395] [client 18.200.191.190:35678] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/config.ini"] [unique_id "aStEJHpx_7viPEhKF36gOgAAAhA"]
[Sun Nov 30 03:06:18.350072 2025] [:error] [pid 33337:tid 33349] [client 18.200.191.190:44020] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.config.js"] [unique_id "aStEKj7HzFQftKzaJgKCtwAAAcg"]
[Sun Nov 30 03:06:19.426674 2025] [:error] [pid 42164:tid 42228] [client 18.200.191.190:44026] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aStEK9ip8Nhatsq7KxzyCQAAAQY"]
[Sun Nov 30 03:06:20.506822 2025] [:error] [pid 42164:tid 42232] [client 18.200.191.190:44030] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aStELNip8Nhatsq7KxzyCwAAAQo"]
[Sun Nov 30 03:06:21.576707 2025] [:error] [pid 33376:tid 33389] [client 18.200.191.190:44032] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aStELXpx_7viPEhKF36gRQAAAgo"]
[Sun Nov 30 03:06:22.642727 2025] [:error] [pid 42164:tid 42246] [client 18.200.191.190:44034] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aStELtip8Nhatsq7KxzyDQAAARg"]
[Sun Nov 30 03:06:23.709872 2025] [:error] [pid 33337:tid 33353] [client 18.200.191.190:44046] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin"] [unique_id "aStELz7HzFQftKzaJgKCvgAAAcw"]
[Sun Nov 30 03:06:24.780936 2025] [:error] [pid 33337:tid 33342] [client 18.200.191.190:44048] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aStEMD7HzFQftKzaJgKCwAAAAcE"]
[Sun Nov 30 03:06:25.848142 2025] [:error] [pid 33303:tid 33316] [client 18.200.191.190:47588] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aStEMfvL3Xz3V8uL8l6F-gAAAYs"]
[Sun Nov 30 03:06:26.915240 2025] [:error] [pid 42163:tid 42201] [client 18.200.191.190:47592] [client 18.200.191.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/composer.json"] [unique_id "aStEMpnaEs-eGc51wg2ivwAAAMY"]
[Sun Nov 30 03:06:27.982687 2025] [:error] [pid 29714:tid 29737] [client 18.200.191.190:47602] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/config"] [unique_id "aStEM776_KNwefuiUY-GoQAAAFU"]
[Sun Nov 30 03:06:29.048882 2025] [:error] [pid 58730:tid 58770] [client 18.200.191.190:47616] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/credentials"] [unique_id "aStENaDQq6rwusUXQKjveQAAAAU"]
[Sun Nov 30 03:06:30.115948 2025] [:error] [pid 58730:tid 58782] [client 18.200.191.190:47628] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/config"] [unique_id "aStENqDQq6rwusUXQKjvfwAAABE"]
[Sun Nov 30 03:06:31.182358 2025] [:error] [pid 33376:tid 33396] [client 18.200.191.190:47638] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/credentials"] [unique_id "aStEN3px_7viPEhKF36gUwAAAhE"]
[Sun Nov 30 03:06:32.250237 2025] [:error] [pid 58730:tid 58774] [client 18.200.191.190:47650] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.json"] [unique_id "aStEOKDQq6rwusUXQKjvgQAAAAk"]
[Sun Nov 30 03:06:33.325111 2025] [:error] [pid 58730:tid 58775] [client 18.200.191.190:47658] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/credentials"] [unique_id "aStEOaDQq6rwusUXQKjvggAAAAo"]
[Sun Nov 30 03:06:34.400401 2025] [:error] [pid 33337:tid 33348] [client 18.200.191.190:47670] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.json"] [unique_id "aStEOj7HzFQftKzaJgKCxgAAAcc"]
[Sun Nov 30 03:06:35.468031 2025] [:error] [pid 33376:tid 33402] [client 18.200.191.190:43392] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keys.js"] [unique_id "aStEO3px_7viPEhKF36gWwAAAhc"]
[Sun Nov 30 03:06:36.535038 2025] [:error] [pid 33337:tid 33347] [client 18.200.191.190:43402] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws-keys.js"] [unique_id "aStEPD7HzFQftKzaJgKCzAAAAcY"]
[Sun Nov 30 03:06:37.602011 2025] [:error] [pid 58730:tid 58787] [client 18.200.191.190:43412] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailgun"] [unique_id "aStEPaDQq6rwusUXQKjvhAAAABU"]
[Sun Nov 30 03:06:38.668969 2025] [:error] [pid 33337:tid 33351] [client 18.200.191.190:43414] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailgun.json"] [unique_id "aStEPj7HzFQftKzaJgKCzgAAAco"]
[Sun Nov 30 03:06:39.736669 2025] [:error] [pid 58730:tid 58768] [client 18.200.191.190:43418] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailgun/config"] [unique_id "aStEP6DQq6rwusUXQKjvhgAAAAM"]
[Sun Nov 30 03:06:40.806958 2025] [:error] [pid 33303:tid 33313] [client 18.200.191.190:43420] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailgun.php"] [unique_id "aStEQPvL3Xz3V8uL8l6GBwAAAYg"]
[Sun Nov 30 03:06:41.872944 2025] [:error] [pid 33303:tid 33326] [client 18.200.191.190:43422] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendgrid"] [unique_id "aStEQfvL3Xz3V8uL8l6GCAAAAZU"]
[Sun Nov 30 03:06:42.944912 2025] [:error] [pid 33303:tid 33321] [client 18.200.191.190:43438] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendgrid.json"] [unique_id "aStEQvvL3Xz3V8uL8l6GCgAAAZA"]
[Sun Nov 30 03:06:44.019082 2025] [:error] [pid 33337:tid 33345] [client 18.200.191.190:43452] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendgrid/config"] [unique_id "aStERD7HzFQftKzaJgKC0AAAAcQ"]
[Sun Nov 30 03:06:45.091716 2025] [:error] [pid 33337:tid 33365] [client 18.200.191.190:54754] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendgrid.php"] [unique_id "aStERT7HzFQftKzaJgKC1AAAAdg"]
[Sun Nov 30 03:06:46.160208 2025] [:error] [pid 42164:tid 42229] [client 18.200.191.190:54762] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendgrid.env"] [unique_id "aStERtip8Nhatsq7KxzyFQAAAQc"]
[Sun Nov 30 03:06:47.228851 2025] [:error] [pid 33303:tid 33312] [client 18.200.191.190:54768] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brevo"] [unique_id "aStER_vL3Xz3V8uL8l6GEwAAAYc"]
[Sun Nov 30 03:06:48.300640 2025] [:error] [pid 33303:tid 33305] [client 18.200.191.190:54770] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brevo.json"] [unique_id "aStESPvL3Xz3V8uL8l6GGAAAAYA"]
[Sun Nov 30 03:06:49.367399 2025] [:error] [pid 29714:tid 29732] [client 18.200.191.190:54776] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brevo/config"] [unique_id "aStESb76_KNwefuiUY-GuAAAAFA"]
[Sun Nov 30 03:06:50.433894 2025] [:error] [pid 42163:tid 42214] [client 18.200.191.190:54778] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brevo.php"] [unique_id "aStESpnaEs-eGc51wg2i0AAAANM"]
[Sun Nov 30 03:06:51.501341 2025] [:error] [pid 42163:tid 42204] [client 18.200.191.190:54792] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php"] [unique_id "aStES5naEs-eGc51wg2i0QAAAMk"]
[Sun Nov 30 03:06:52.568610 2025] [:error] [pid 42162:tid 42167] [client 18.200.191.190:54802] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info"] [unique_id "aStETNePpz4Ije-_EjoC8AAAAIA"]
[Sun Nov 30 03:06:53.668565 2025] [:error] [pid 58730:tid 58779] [client 18.200.191.190:54818] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo"] [unique_id "aStETaDQq6rwusUXQKjvigAAAA4"]
[Sun Nov 30 03:06:54.734648 2025] [:error] [pid 42252:tid 42267] [client 18.200.191.190:54822] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aStETrweMxCk051n8__LWwAAAU0"]
[Sun Nov 30 03:06:56.907366 2025] [:error] [pid 33376:tid 33381] [client 18.200.191.190:51868] [client 18.200.191.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js"] [unique_id "aStEUHpx_7viPEhKF36gbQAAAgI"]
[Sun Nov 30 04:11:38.360589 2025] [:error] [pid 44997:tid 45006] [client 35.90.120.27:48922] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aStTekEh8Lr-TH1KlcnNKAAAAQA"]
[Sun Nov 30 04:11:39.103943 2025] [:error] [pid 44843:tid 44895] [client 35.90.120.27:48928] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aStTe7RULm2MqOv1SfmfqwAAAEc"]
[Sun Nov 30 04:11:39.834170 2025] [:error] [pid 44997:tid 45020] [client 35.90.120.27:48944] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aStTe0Eh8Lr-TH1KlcnNLAAAAQ4"]
[Sun Nov 30 04:11:40.560143 2025] [:error] [pid 44844:tid 44935] [client 35.90.120.27:48946] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aStTfBkTTwUoGl70YUDb-gAAAJQ"]
[Sun Nov 30 04:11:41.297589 2025] [:error] [pid 44999:tid 45045] [client 35.90.120.27:48956] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aStTfS9uSNEe69uZ9WRmIgAAAUw"]
[Sun Nov 30 04:11:42.031378 2025] [:error] [pid 44843:tid 44899] [client 35.90.120.27:48968] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aStTfrRULm2MqOv1SfmftQAAAEs"]
[Sun Nov 30 04:11:42.770217 2025] [:error] [pid 44842:tid 44852] [client 35.90.120.27:48982] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aStTfqFM4fJabGrvKRWMegAAAAE"]
[Sun Nov 30 04:11:43.497955 2025] [:error] [pid 44999:tid 45050] [client 35.90.120.27:48994] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env"] [unique_id "aStTfy9uSNEe69uZ9WRmLAAAAVE"]
[Sun Nov 30 04:11:44.245188 2025] [:error] [pid 44951:tid 44955] [client 35.90.120.27:49000] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env.json"] [unique_id "aStTgP9n-K61ohCFHy7BhQAAAMI"]
[Sun Nov 30 04:11:44.976721 2025] [:error] [pid 44844:tid 44932] [client 35.90.120.27:51496] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env.yaml"] [unique_id "aStTgBkTTwUoGl70YUDcAQAAAJE"]
[Sun Nov 30 04:11:45.706608 2025] [:error] [pid 44842:tid 44874] [client 35.90.120.27:51506] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env.yml"] [unique_id "aStTgaFM4fJabGrvKRWMfwAAABc"]
[Sun Nov 30 04:11:46.429837 2025] [:error] [pid 44999:tid 45044] [client 35.90.120.27:51518] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config"] [unique_id "aStTgi9uSNEe69uZ9WRmOAAAAUs"]
[Sun Nov 30 04:11:47.164460 2025] [:error] [pid 44997:tid 45028] [client 35.90.120.27:51526] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.json"] [unique_id "aStTg0Eh8Lr-TH1KlcnNPAAAARY"]
[Sun Nov 30 04:11:47.892075 2025] [:error] [pid 44951:tid 44976] [client 35.90.120.27:51530] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.js"] [unique_id "aStTg_9n-K61ohCFHy7BkAAAANc"]
[Sun Nov 30 04:11:48.624038 2025] [:error] [pid 44842:tid 44862] [client 35.90.120.27:51538] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.yaml"] [unique_id "aStThKFM4fJabGrvKRWMhAAAAAs"]
[Sun Nov 30 04:11:49.361188 2025] [:error] [pid 44843:tid 44904] [client 35.90.120.27:51552] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aStThbRULm2MqOv1SfmfvwAAAFA"]
[Sun Nov 30 04:11:50.099494 2025] [:error] [pid 44951:tid 44972] [client 35.90.120.27:51566] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.ini"] [unique_id "aStThv9n-K61ohCFHy7BmAAAANM"]
[Sun Nov 30 04:11:50.847060 2025] [:error] [pid 44844:tid 44919] [client 35.90.120.27:51572] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aStThhkTTwUoGl70YUDcBwAAAIQ"]
[Sun Nov 30 04:11:51.583667 2025] [:error] [pid 44844:tid 44939] [client 35.90.120.27:51586] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/configuration"] [unique_id "aStThxkTTwUoGl70YUDcCwAAAJg"]
[Sun Nov 30 04:11:52.311264 2025] [:error] [pid 44844:tid 44932] [client 35.90.120.27:51600] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/settings"] [unique_id "aStTiBkTTwUoGl70YUDcDQAAAJE"]
[Sun Nov 30 04:11:53.046711 2025] [:error] [pid 44844:tid 44933] [client 35.90.120.27:51614] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/settings.json"] [unique_id "aStTiRkTTwUoGl70YUDcEQAAAJI"]
[Sun Nov 30 04:11:53.785145 2025] [:error] [pid 44843:tid 44910] [client 35.90.120.27:51616] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/app.config.js"] [unique_id "aStTibRULm2MqOv1SfmfzAAAAFY"]
[Sun Nov 30 04:11:54.526614 2025] [:error] [pid 44844:tid 44917] [client 35.90.120.27:51618] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aStTihkTTwUoGl70YUDcGAAAAII"]
[Sun Nov 30 04:11:55.266308 2025] [:error] [pid 44842:tid 44874] [client 35.90.120.27:36546] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aStTi6FM4fJabGrvKRWMlAAAABc"]
[Sun Nov 30 04:11:55.992136 2025] [:error] [pid 44843:tid 44893] [client 35.90.120.27:36554] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aStTi7RULm2MqOv1Sfmf1QAAAEU"]
[Sun Nov 30 04:11:56.726628 2025] [:error] [pid 44999:tid 45041] [client 35.90.120.27:36564] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/test.php"] [unique_id "aStTjC9uSNEe69uZ9WRmVwAAAUg"]
[Sun Nov 30 04:11:57.459628 2025] [:error] [pid 44951:tid 44970] [client 35.90.120.27:36580] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin"] [unique_id "aStTjf9n-K61ohCFHy7BtgAAANE"]
[Sun Nov 30 04:11:58.191688 2025] [:error] [pid 44997:tid 45008] [client 35.90.120.27:36588] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aStTjkEh8Lr-TH1KlcnNUgAAAQI"]
[Sun Nov 30 04:11:58.921342 2025] [:error] [pid 44842:tid 44860] [client 35.90.120.27:36602] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aStTjqFM4fJabGrvKRWMmQAAAAk"]
[Sun Nov 30 04:11:59.648775 2025] [:error] [pid 44999:tid 45035] [client 35.90.120.27:36616] [client 35.90.120.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/composer.json"] [unique_id "aStTjy9uSNEe69uZ9WRmYgAAAUI"]
[Sun Nov 30 04:12:00.378741 2025] [:error] [pid 44951:tid 44976] [client 35.90.120.27:36628] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.aws/config"] [unique_id "aStTkP9n-K61ohCFHy7BxgAAANc"]
[Sun Nov 30 04:12:01.113508 2025] [:error] [pid 44999:tid 45051] [client 35.90.120.27:36636] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.aws/credentials"] [unique_id "aStTkS9uSNEe69uZ9WRmawAAAVI"]
[Sun Nov 30 04:12:01.850344 2025] [:error] [pid 44999:tid 45046] [client 35.90.120.27:36638] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws/config"] [unique_id "aStTkS9uSNEe69uZ9WRmbgAAAU0"]
[Sun Nov 30 04:12:02.595455 2025] [:error] [pid 44997:tid 45024] [client 35.90.120.27:36650] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws/credentials"] [unique_id "aStTkkEh8Lr-TH1KlcnNXgAAARI"]
[Sun Nov 30 04:12:03.332204 2025] [:error] [pid 44843:tid 44905] [client 35.90.120.27:36666] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws.json"] [unique_id "aStTk7RULm2MqOv1Sfmf6AAAAFE"]
[Sun Nov 30 04:12:04.057896 2025] [:error] [pid 44844:tid 44924] [client 35.90.120.27:36672] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/credentials"] [unique_id "aStTlBkTTwUoGl70YUDcLQAAAIk"]
[Sun Nov 30 04:12:04.788165 2025] [:error] [pid 44844:tid 44925] [client 35.90.120.27:47152] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/secrets.json"] [unique_id "aStTlBkTTwUoGl70YUDcLgAAAIo"]
[Sun Nov 30 04:12:05.520342 2025] [:error] [pid 44843:tid 44890] [client 35.90.120.27:47164] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/keys.js"] [unique_id "aStTlbRULm2MqOv1Sfmf8QAAAEI"]
[Sun Nov 30 04:12:06.256489 2025] [:error] [pid 44997:tid 45024] [client 35.90.120.27:47176] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws-keys.js"] [unique_id "aStTlkEh8Lr-TH1KlcnNaQAAARI"]
[Sun Nov 30 04:12:06.988998 2025] [:error] [pid 44842:tid 44868] [client 35.90.120.27:47188] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mailgun"] [unique_id "aStTlqFM4fJabGrvKRWMngAAABE"]
[Sun Nov 30 04:12:07.720708 2025] [:error] [pid 44999:tid 45049] [client 35.90.120.27:47202] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mailgun.json"] [unique_id "aStTly9uSNEe69uZ9WRmhQAAAVA"]
[Sun Nov 30 04:12:16.745971 2025] [:error] [pid 44999:tid 45034] [client 35.90.120.27:53398] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/php"] [unique_id "aStToC9uSNEe69uZ9WRmrwAAAUE"]
[Sun Nov 30 04:12:17.481617 2025] [:error] [pid 44844:tid 44915] [client 35.90.120.27:53400] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info"] [unique_id "aStToRkTTwUoGl70YUDcWQAAAIA"]
[Sun Nov 30 04:12:18.219213 2025] [:error] [pid 44997:tid 45021] [client 35.90.120.27:53404] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpinfo"] [unique_id "aStTokEh8Lr-TH1KlcnNlQAAAQ8"]
[Sun Nov 30 04:12:18.946956 2025] [:error] [pid 44843:tid 44911] [client 35.90.120.27:53408] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aStTorRULm2MqOv1SfmgCQAAAFc"]
[Sun Nov 30 04:12:20.503030 2025] [:error] [pid 44842:tid 44869] [client 35.90.120.27:53420] [client 35.90.120.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/js"] [unique_id "aStTpKFM4fJabGrvKRWMywAAABI"]
[Sun Nov 30 05:08:12.258502 2025] [:error] [pid 25002:tid 25052] [client 3.39.194.251:46220] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aStgvG2Hykst8BxxTdJU3AAAAVQ"]
[Sun Nov 30 05:08:12.856248 2025] [:error] [pid 60369:tid 60381] [client 3.39.194.251:46230] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aStgvNR1zCWWHJK7KyERpQAAAYo"]
[Sun Nov 30 05:08:13.457690 2025] [:error] [pid 60913:tid 60928] [client 3.39.194.251:46232] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aStgvV4SUvyDn5e4S0JlNgAAAs0"]
[Sun Nov 30 05:08:14.074752 2025] [:error] [pid 63468:tid 63492] [client 3.39.194.251:46240] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aStgvqGdTyPw0PxgJetv9AAAABY"]
[Sun Nov 30 05:08:14.687588 2025] [:error] [pid 60913:tid 60925] [client 3.39.194.251:46252] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aStgvl4SUvyDn5e4S0JlOQAAAso"]
[Sun Nov 30 05:08:15.298216 2025] [:error] [pid 25002:tid 25056] [client 3.39.194.251:46254] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aStgv22Hykst8BxxTdJU4QAAAVg"]
[Sun Nov 30 05:08:15.896565 2025] [:error] [pid 60369:tid 60389] [client 3.39.194.251:58576] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aStgv9R1zCWWHJK7KyERpgAAAZI"]
[Sun Nov 30 05:08:16.505502 2025] [:error] [pid 60913:tid 60935] [client 3.39.194.251:58580] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env"] [unique_id "aStgwF4SUvyDn5e4S0JlPQAAAtQ"]
[Sun Nov 30 05:08:17.102787 2025] [:error] [pid 54236:tid 54268] [client 3.39.194.251:58592] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env.json"] [unique_id "aStgwZLzwJzIgo8dntCDEAAAAQ0"]
[Sun Nov 30 05:08:17.709360 2025] [:error] [pid 63468:tid 63490] [client 3.39.194.251:58604] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env.yaml"] [unique_id "aStgwaGdTyPw0PxgJetv9gAAABQ"]
[Sun Nov 30 05:08:18.304495 2025] [:error] [pid 28588:tid 28609] [client 3.39.194.251:58614] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env.yml"] [unique_id "aStgwiYl5J2n_isyWOlfoQAAAlM"]
[Sun Nov 30 05:08:18.905600 2025] [:error] [pid 54236:tid 54270] [client 3.39.194.251:58624] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config"] [unique_id "aStgwpLzwJzIgo8dntCDEgAAAQ8"]
[Sun Nov 30 05:08:19.497742 2025] [:error] [pid 24971:tid 24978] [client 3.39.194.251:58638] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.json"] [unique_id "aStgwzUZcbcCmcDjhQ_ORQAAAMU"]
[Sun Nov 30 05:08:20.101297 2025] [:error] [pid 25002:tid 25038] [client 3.39.194.251:58654] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.js"] [unique_id "aStgxG2Hykst8BxxTdJU4wAAAUY"]
[Sun Nov 30 05:08:20.711941 2025] [:error] [pid 60913:tid 60926] [client 3.39.194.251:58656] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yaml"] [unique_id "aStgxF4SUvyDn5e4S0JlRAAAAss"]
[Sun Nov 30 05:08:21.318315 2025] [:error] [pid 60913:tid 60924] [client 3.39.194.251:58660] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aStgxV4SUvyDn5e4S0JlRQAAAsk"]
[Sun Nov 30 05:08:21.909003 2025] [:error] [pid 60572:tid 60589] [client 3.39.194.251:58676] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.ini"] [unique_id "aStgxYVcy1tAF6kmNWnoZQAAAg8"]
[Sun Nov 30 05:08:22.508747 2025] [:error] [pid 28588:tid 28610] [client 3.39.194.251:58684] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aStgxiYl5J2n_isyWOlfpwAAAlQ"]
[Sun Nov 30 05:08:23.107009 2025] [:error] [pid 26121:tid 26143] [client 3.39.194.251:58696] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/configuration"] [unique_id "aStgx-3yAGZUIB-ACmA9IQAAAdQ"]
[Sun Nov 30 05:08:23.719850 2025] [:error] [pid 63468:tid 63489] [client 3.39.194.251:58706] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings"] [unique_id "aStgx6GdTyPw0PxgJetv_QAAABM"]
[Sun Nov 30 05:08:24.321528 2025] [:error] [pid 25002:tid 25050] [client 3.39.194.251:58708] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.json"] [unique_id "aStgyG2Hykst8BxxTdJU6gAAAVI"]
[Sun Nov 30 05:08:24.926710 2025] [:error] [pid 63468:tid 63471] [client 3.39.194.251:58716] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.config.js"] [unique_id "aStgyKGdTyPw0PxgJetv_wAAAAE"]
[Sun Nov 30 05:08:25.534772 2025] [:error] [pid 24971:tid 24995] [client 3.39.194.251:60520] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aStgyTUZcbcCmcDjhQ_OTAAAANY"]
[Sun Nov 30 05:08:26.140123 2025] [:error] [pid 60369:tid 60391] [client 3.39.194.251:60534] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aStgytR1zCWWHJK7KyERsAAAAZQ"]
[Sun Nov 30 05:08:26.749236 2025] [:error] [pid 60913:tid 60928] [client 3.39.194.251:60548] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aStgyl4SUvyDn5e4S0JlUAAAAs0"]
[Sun Nov 30 05:08:27.354728 2025] [:error] [pid 63468:tid 63483] [client 3.39.194.251:60554] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aStgy6GdTyPw0PxgJetwAQAAAA0"]
[Sun Nov 30 05:08:27.958651 2025] [:error] [pid 60913:tid 60931] [client 3.39.194.251:60562] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin"] [unique_id "aStgy14SUvyDn5e4S0JlUQAAAtA"]
[Sun Nov 30 05:08:28.567871 2025] [:error] [pid 25002:tid 25046] [client 3.39.194.251:60576] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aStgzG2Hykst8BxxTdJU9QAAAU4"]
[Sun Nov 30 05:08:29.175534 2025] [:error] [pid 60913:tid 60937] [client 3.39.194.251:60592] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aStgzV4SUvyDn5e4S0JlUwAAAtY"]
[Sun Nov 30 05:08:29.778172 2025] [:error] [pid 25002:tid 25042] [client 3.39.194.251:60608] [client 3.39.194.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/composer.json"] [unique_id "aStgzW2Hykst8BxxTdJU9wAAAUo"]
[Sun Nov 30 05:08:30.376907 2025] [:error] [pid 25002:tid 25043] [client 3.39.194.251:60618] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/config"] [unique_id "aStgzm2Hykst8BxxTdJU-QAAAUs"]
[Sun Nov 30 05:08:30.981714 2025] [:error] [pid 28588:tid 28595] [client 3.39.194.251:60626] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/credentials"] [unique_id "aStgziYl5J2n_isyWOlfrgAAAkU"]
[Sun Nov 30 05:08:31.587719 2025] [:error] [pid 60369:tid 60392] [client 3.39.194.251:60642] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/config"] [unique_id "aStgz9R1zCWWHJK7KyERtgAAAZU"]
[Sun Nov 30 05:08:32.191464 2025] [:error] [pid 54236:tid 54262] [client 3.39.194.251:60658] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/credentials"] [unique_id "aStg0JLzwJzIgo8dntCDHwAAAQc"]
[Sun Nov 30 05:08:32.799404 2025] [:error] [pid 51537:tid 51552] [client 3.39.194.251:60670] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.json"] [unique_id "aStg0LcSSdjzCoyn8Vs-lQAAAE0"]
[Sun Nov 30 05:08:33.399719 2025] [:error] [pid 60369:tid 60377] [client 3.39.194.251:60686] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/credentials"] [unique_id "aStg0dR1zCWWHJK7KyERtwAAAYY"]
[Sun Nov 30 05:08:34.003813 2025] [:error] [pid 28588:tid 28596] [client 3.39.194.251:60692] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.json"] [unique_id "aStg0iYl5J2n_isyWOlfuAAAAkY"]
[Sun Nov 30 05:08:34.604821 2025] [:error] [pid 60369:tid 60393] [client 3.39.194.251:60704] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keys.js"] [unique_id "aStg0tR1zCWWHJK7KyERuAAAAZY"]
[Sun Nov 30 05:08:35.212942 2025] [:error] [pid 60572:tid 60581] [client 3.39.194.251:60714] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws-keys.js"] [unique_id "aStg04Vcy1tAF6kmNWnoZgAAAgc"]
[Sun Nov 30 05:08:35.816628 2025] [:error] [pid 54236:tid 54260] [client 3.39.194.251:53434] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailgun"] [unique_id "aStg05LzwJzIgo8dntCDIwAAAQU"]
[Sun Nov 30 05:08:36.427897 2025] [:error] [pid 60572:tid 60595] [client 3.39.194.251:53446] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailgun.json"] [unique_id "aStg1IVcy1tAF6kmNWnoawAAAhU"]
[Sun Nov 30 05:08:37.038876 2025] [:error] [pid 60913:tid 60937] [client 3.39.194.251:53448] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailgun/config"] [unique_id "aStg1V4SUvyDn5e4S0JlXgAAAtY"]
[Sun Nov 30 05:08:37.648141 2025] [:error] [pid 60572:tid 60583] [client 3.39.194.251:53454] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailgun.php"] [unique_id "aStg1YVcy1tAF6kmNWnobgAAAgk"]
[Sun Nov 30 05:08:38.244815 2025] [:error] [pid 26121:tid 26147] [client 3.39.194.251:53468] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendgrid"] [unique_id "aStg1u3yAGZUIB-ACmA9LgAAAdg"]
[Sun Nov 30 05:08:38.856372 2025] [:error] [pid 24971:tid 24984] [client 3.39.194.251:53474] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendgrid.json"] [unique_id "aStg1jUZcbcCmcDjhQ_OWwAAAMs"]
[Sun Nov 30 05:08:39.466279 2025] [:error] [pid 60369:tid 60386] [client 3.39.194.251:53486] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendgrid/config"] [unique_id "aStg19R1zCWWHJK7KyERugAAAY8"]
[Sun Nov 30 05:08:40.070620 2025] [:error] [pid 26121:tid 26144] [client 3.39.194.251:53492] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendgrid.php"] [unique_id "aStg2O3yAGZUIB-ACmA9MgAAAdU"]
[Sun Nov 30 05:08:40.669202 2025] [:error] [pid 63468:tid 63485] [client 3.39.194.251:53506] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendgrid.env"] [unique_id "aStg2KGdTyPw0PxgJetwCQAAAA8"]
[Sun Nov 30 05:08:41.277405 2025] [:error] [pid 54236:tid 54261] [client 3.39.194.251:53520] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brevo"] [unique_id "aStg2ZLzwJzIgo8dntCDKwAAAQY"]
[Sun Nov 30 05:08:41.881465 2025] [:error] [pid 60572:tid 60592] [client 3.39.194.251:53522] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brevo.json"] [unique_id "aStg2YVcy1tAF6kmNWnodAAAAhI"]
[Sun Nov 30 05:08:42.491749 2025] [:error] [pid 24971:tid 24977] [client 3.39.194.251:53536] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brevo/config"] [unique_id "aStg2jUZcbcCmcDjhQ_OYAAAAMQ"]
[Sun Nov 30 05:08:43.104607 2025] [:error] [pid 54236:tid 54277] [client 3.39.194.251:53546] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brevo.php"] [unique_id "aStg25LzwJzIgo8dntCDLQAAARY"]
[Sun Nov 30 05:08:43.713813 2025] [:error] [pid 28588:tid 28605] [client 3.39.194.251:53562] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php"] [unique_id "aStg2yYl5J2n_isyWOlfxAAAAk8"]
[Sun Nov 30 05:08:44.316295 2025] [:error] [pid 60572:tid 60596] [client 3.39.194.251:53564] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info"] [unique_id "aStg3IVcy1tAF6kmNWnoeQAAAhY"]
[Sun Nov 30 05:08:44.917010 2025] [:error] [pid 60369:tid 60375] [client 3.39.194.251:53578] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo"] [unique_id "aStg3NR1zCWWHJK7KyERvwAAAYQ"]
[Sun Nov 30 05:08:45.526150 2025] [:error] [pid 63468:tid 63492] [client 3.39.194.251:44102] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aStg3aGdTyPw0PxgJetwDQAAABY"]
[Sun Nov 30 05:08:46.778098 2025] [:error] [pid 51537:tid 51542] [client 3.39.194.251:44112] [client 3.39.194.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js"] [unique_id "aStg3rcSSdjzCoyn8Vs-nwAAAEM"]
[Sun Nov 30 05:29:42.613523 2025] [:error] [pid 60913:tid 60936] [client 35.158.106.24:45562] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aStlxl4SUvyDn5e4S0JueAAAAtU"]
[Sun Nov 30 05:29:43.586345 2025] [:error] [pid 24971:tid 24991] [client 35.158.106.24:45572] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aStlxzUZcbcCmcDjhQ_TnAAAANI"]
[Sun Nov 30 05:29:44.548499 2025] [:error] [pid 60572:tid 60597] [client 35.158.106.24:45588] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aStlyIVcy1tAF6kmNWntCAAAAhc"]
[Sun Nov 30 05:29:45.511647 2025] [:error] [pid 51537:tid 51547] [client 35.158.106.24:45596] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aStlybcSSdjzCoyn8VtEewAAAEg"]
[Sun Nov 30 05:29:46.482615 2025] [:error] [pid 25002:tid 25037] [client 35.158.106.24:45606] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aStlym2Hykst8BxxTdJbcwAAAUU"]
[Sun Nov 30 05:29:47.452277 2025] [:error] [pid 24971:tid 24987] [client 35.158.106.24:45608] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aStlyzUZcbcCmcDjhQ_TowAAAM4"]
[Sun Nov 30 05:29:48.414889 2025] [:error] [pid 63468:tid 63472] [client 35.158.106.24:45618] [client 35.158.106.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aStlzKGdTyPw0PxgJet0RwAAAAI"]
[Sun Nov 30 05:29:49.377825 2025] [:error] [pid 24971:tid 24992] [client 35.158.106.24:45622] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env"] [unique_id "aStlzTUZcbcCmcDjhQ_TpgAAANM"]
[Sun Nov 30 05:29:50.348241 2025] [:error] [pid 24971:tid 24980] [client 35.158.106.24:37130] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env.json"] [unique_id "aStlzjUZcbcCmcDjhQ_TqQAAAMc"]
[Sun Nov 30 05:29:51.312865 2025] [:error] [pid 25002:tid 25038] [client 35.158.106.24:37140] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env.yaml"] [unique_id "aStlz22Hykst8BxxTdJbdwAAAUY"]
[Sun Nov 30 05:29:52.275637 2025] [:error] [pid 60913:tid 60930] [client 35.158.106.24:37148] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env.yml"] [unique_id "aStl0F4SUvyDn5e4S0JuiAAAAs8"]
[Sun Nov 30 05:29:53.246148 2025] [:error] [pid 60913:tid 60917] [client 35.158.106.24:37160] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config"] [unique_id "aStl0V4SUvyDn5e4S0JulQAAAsI"]
[Sun Nov 30 05:29:54.210766 2025] [:error] [pid 26121:tid 26139] [client 35.158.106.24:37170] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.json"] [unique_id "aStl0u3yAGZUIB-ACmBCvQAAAdA"]
[Sun Nov 30 05:29:55.173729 2025] [:error] [pid 60913:tid 60923] [client 35.158.106.24:37180] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.js"] [unique_id "aStl014SUvyDn5e4S0JungAAAsg"]
[Sun Nov 30 05:29:56.143641 2025] [:error] [pid 60913:tid 60934] [client 35.158.106.24:37184] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.yaml"] [unique_id "aStl1F4SUvyDn5e4S0JunwAAAtM"]
[Sun Nov 30 05:29:57.113095 2025] [:error] [pid 54236:tid 54260] [client 35.158.106.24:37192] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aStl1ZLzwJzIgo8dntCIRAAAAQU"]
[Sun Nov 30 05:29:58.087870 2025] [:error] [pid 54236:tid 54265] [client 35.158.106.24:37196] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.ini"] [unique_id "aStl1pLzwJzIgo8dntCIRQAAAQo"]
[Sun Nov 30 05:29:59.049632 2025] [:error] [pid 25002:tid 25043] [client 35.158.106.24:37208] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aStl122Hykst8BxxTdJbiAAAAUs"]
[Sun Nov 30 05:30:00.012147 2025] [:error] [pid 51537:tid 51552] [client 35.158.106.24:42798] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/configuration"] [unique_id "aStl2LcSSdjzCoyn8VtEjwAAAE0"]
[Sun Nov 30 05:30:00.981908 2025] [:error] [pid 54236:tid 54261] [client 35.158.106.24:42808] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/settings"] [unique_id "aStl2JLzwJzIgo8dntCISwAAAQY"]
[Sun Nov 30 05:30:01.945481 2025] [:error] [pid 54236:tid 54263] [client 35.158.106.24:42816] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/settings.json"] [unique_id "aStl2ZLzwJzIgo8dntCITgAAAQg"]
[Sun Nov 30 05:30:02.916241 2025] [:error] [pid 25002:tid 25054] [client 35.158.106.24:42832] [client 35.158.106.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/app.config.js"] [unique_id "aStl2m2Hykst8BxxTdJbjwAAAVY"]
[Sun Nov 30 09:18:43.558624 2025] [:error] [pid 7121:tid 7129] [client 43.159.135.203:36900] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSubc29opUcfYp4OnkHEogAAAIY"]
[Sun Nov 30 11:21:54.208318 2025] [:error] [pid 10550:tid 10603] [client 159.65.223.216:52328] [client 159.65.223.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.223.216, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSu4Uul_8Vq2nipf7mH1twAAApg"]
[Sun Nov 30 11:21:55.412471 2025] [:error] [pid 10518:tid 10522] [client 159.65.223.216:52670] [client 159.65.223.216] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.223.216, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aSu4Uw8XjrhaEDJ0Rd9ufQAAAUE"]
[Sun Nov 30 14:43:36.209637 2025] [:error] [pid 10550:tid 10599] [client 113.141.91.58:39870] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSvnmOl_8Vq2nipf7mEc3gAAApQ"]
[Sun Nov 30 14:56:02.192358 2025] [:error] [pid 10607:tid 10634] [client 96.9.95.92:58519] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSvqgnMxNFmf1l9xA_F45gAAAtg"]
[Sun Nov 30 14:56:02.617998 2025] [:error] [pid 9694:tid 9699] [client 96.9.95.92:58587] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSvqgsNOaRChkzIC_nVj1QAAAMM"]
[Sun Nov 30 14:56:03.124442 2025] [:error] [pid 12793:tid 12802] [client 96.9.95.92:58710] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSvqg8sEgQeCVydJZ0gIggAAAEc"]
[Sun Nov 30 14:56:04.419043 2025] [:error] [pid 9694:tid 9701] [client 96.9.95.92:58807] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSvqhMNOaRChkzIC_nVj2AAAAMU"]
[Sun Nov 30 14:56:06.077682 2025] [:error] [pid 9375:tid 9406] [client 96.9.95.92:59117] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSvqht-EkWIUe87KIjPVowAAA0I"]
[Sun Nov 30 14:56:06.733743 2025] [:error] [pid 10550:tid 10598] [client 96.9.95.92:59472] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSvqhul_8Vq2nipf7mEf4wAAApM"]
[Sun Nov 30 16:07:38.076514 2025] [:error] [pid 10607:tid 10615] [client 96.9.95.92:58229] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSv7SnMxNFmf1l9xA_GB9gAAAsU"]
[Sun Nov 30 16:07:38.349625 2025] [:error] [pid 12554:tid 12566] [client 96.9.95.92:58258] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSv7Sj7q_kXd01TaAD9TXwAAAAo"]
[Sun Nov 30 16:07:38.627725 2025] [:error] [pid 10608:tid 10640] [client 96.9.95.92:58294] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSv7SuG4qpknNxmxP5da-AAAA8M"]
[Sun Nov 30 16:07:39.214545 2025] [:error] [pid 10518:tid 10544] [client 96.9.95.92:58323] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSv7Sw8XjrhaEDJ0Rd-eKgAAAVc"]
[Sun Nov 30 16:07:39.765619 2025] [:error] [pid 58704:tid 58723] [client 96.9.95.92:58374] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSv7S1gCdnbXMzbONnMCSQAAA5A"]
[Sun Nov 30 16:07:40.401097 2025] [:error] [pid 9694:tid 9719] [client 96.9.95.92:58427] [client 96.9.95.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aSv7TMNOaRChkzIC_nV0HgAAANc"]
[Sun Nov 30 16:10:12.616382 2025] [:error] [pid 58704:tid 58713] [client 209.97.150.126:39740] [client 209.97.150.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSv75FgCdnbXMzbONnMDJQAAA4Y"]
[Sun Nov 30 16:10:16.761503 2025] [:error] [pid 10550:tid 10595] [client 209.97.150.126:49508] [client 209.97.150.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSv76Ol_8Vq2nipf7mEsYAAAApA"]
[Sun Nov 30 18:45:32.550592 2025] [:error] [pid 9374:tid 9379] [client 209.97.150.126:36784] [client 209.97.150.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSwgTIEwr5jt_cokVdxj6wAAAwI"]
[Sun Nov 30 18:45:35.042114 2025] [:error] [pid 10550:tid 10591] [client 209.97.150.126:48334] [client 209.97.150.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aSwgT-l_8Vq2nipf7mFMDAAAAow"]
[Sun Nov 30 19:13:46.794334 2025] [:error] [pid 10608:tid 10651] [client 213.21.239.4:59694] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/build/.svn/wc.db"] [unique_id "aSwm6uG4qpknNxmxP5d57AAAA84"]
[Sun Nov 30 19:13:46.795222 2025] [:error] [pid 10608:tid 10644] [client 213.21.239.4:59714] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/common/.svn/wc.db"] [unique_id "aSwm6uG4qpknNxmxP5d57QAAA8c"]
[Sun Nov 30 19:13:46.796259 2025] [:error] [pid 9694:tid 9698] [client 213.21.239.4:59752] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/demo/.svn/wc.db"] [unique_id "aSwm6sNOaRChkzIC_nWjqgAAAMI"]
[Sun Nov 30 19:13:46.797252 2025] [:error] [pid 9694:tid 9705] [client 213.21.239.4:59716] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/wc.db"] [unique_id "aSwm6sNOaRChkzIC_nWjqQAAAMk"]
[Sun Nov 30 19:13:46.800332 2025] [:error] [pid 10550:tid 10592] [client 213.21.239.4:59754] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/developer/.svn/wc.db"] [unique_id "aSwm6ul_8Vq2nipf7mFRRQAAAo0"]
[Sun Nov 30 19:13:46.800960 2025] [:error] [pid 10608:tid 10645] [client 213.21.239.4:59800] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/a/.svn/wc.db"] [unique_id "aSwm6uG4qpknNxmxP5d57gAAA8g"]
[Sun Nov 30 19:13:46.802644 2025] [:error] [pid 10608:tid 10640] [client 213.21.239.4:59686] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aSwm6uG4qpknNxmxP5d57wAAA8M"]
[Sun Nov 30 19:13:46.803066 2025] [:error] [pid 10550:tid 10597] [client 213.21.239.4:59870] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/beta/.svn/wc.db"] [unique_id "aSwm6ul_8Vq2nipf7mFRRgAAApI"]
[Sun Nov 30 19:13:46.803855 2025] [:error] [pid 10550:tid 10596] [client 213.21.239.4:59824] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.svn/wc.db"] [unique_id "aSwm6ul_8Vq2nipf7mFRRwAAApE"]
[Sun Nov 30 19:13:46.807747 2025] [:error] [pid 10550:tid 10594] [client 213.21.239.4:59720] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/css../.svn/wc.db"] [unique_id "aSwm6ul_8Vq2nipf7mFRSAAAAo8"]
[Sun Nov 30 19:13:46.809410 2025] [:error] [pid 10550:tid 10598] [client 213.21.239.4:59718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/content../.svn/wc.db"] [unique_id "aSwm6ul_8Vq2nipf7mFRSQAAApM"]
[Sun Nov 30 19:13:46.812650 2025] [:error] [pid 10550:tid 10589] [client 213.21.239.4:59838] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.svn/wc.db"] [unique_id "aSwm6ul_8Vq2nipf7mFRSgAAAoo"]
[Sun Nov 30 19:13:46.813825 2025] [:error] [pid 9694:tid 9706] [client 213.21.239.4:59676] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/blog/.svn/wc.db"] [unique_id "aSwm6sNOaRChkzIC_nWjqwAAAMo"]
[Sun Nov 30 19:13:46.815070 2025] [:error] [pid 10608:tid 10646] [client 213.21.239.4:59702] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/cms/.svn/wc.db"] [unique_id "aSwm6uG4qpknNxmxP5d58AAAA8k"]
[Sun Nov 30 19:13:46.816718 2025] [:error] [pid 9694:tid 9718] [client 213.21.239.4:59742] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/data/.svn/wc.db"] [unique_id "aSwm6sNOaRChkzIC_nWjrAAAANY"]
[Sun Nov 30 19:13:46.820027 2025] [:error] [pid 10550:tid 10580] [client 213.21.239.4:59734] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/database/.svn/wc.db"] [unique_id "aSwm6ul_8Vq2nipf7mFRSwAAAoE"]
[Sun Nov 30 19:13:46.820950 2025] [:error] [pid 9375:tid 9410] [client 213.21.239.4:59844] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/application/.svn/wc.db"] [unique_id "aSwm6t-EkWIUe87KIjMQQAAAA0Y"]
[Sun Nov 30 19:13:46.821395 2025] [:error] [pid 10550:tid 10593] [client 213.21.239.4:59818] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/aomanalyzer/.svn/wc.db"] [unique_id "aSwm6ul_8Vq2nipf7mFRTAAAAo4"]
[Sun Nov 30 19:13:46.824737 2025] [:error] [pid 10518:tid 10541] [client 213.21.239.4:59768] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/dev/.svn/wc.db"] [unique_id "aSwm6g8XjrhaEDJ0Rd_AcgAAAVQ"]
[Sun Nov 30 19:13:46.824881 2025] [:error] [pid 10608:tid 10660] [client 213.21.239.4:59776] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause../wc.db"] [unique_id "aSwm6uG4qpknNxmxP5d58QAAA9c"]
[Sun Nov 30 19:13:46.825056 2025] [:error] [pid 12554:tid 12571] [client 213.21.239.4:59880] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backup/.svn/wc.db"] [unique_id "aSwm6j7q_kXd01TaAD90SwAAAA8"]
[Sun Nov 30 19:13:46.828022 2025] [:error] [pid 10608:tid 10658] [client 213.21.239.4:59790] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.svn/wc.db"] [unique_id "aSwm6uG4qpknNxmxP5d58gAAA9U"]
[Sun Nov 30 19:13:46.829135 2025] [:error] [pid 10518:tid 10524] [client 213.21.239.4:59812] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/amphtml/.svn/wc.db"] [unique_id "aSwm6g8XjrhaEDJ0Rd_AcwAAAUM"]
[Sun Nov 30 19:13:46.830017 2025] [:error] [pid 9694:tid 9715] [client 213.21.239.4:59850] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/assets../.svn/wc.db"] [unique_id "aSwm6sNOaRChkzIC_nWjrQAAANM"]
[Sun Nov 30 19:13:46.833134 2025] [:error] [pid 10550:tid 10599] [client 213.21.239.4:59854] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aSwm6ul_8Vq2nipf7mFRTQAAApQ"]
[Sun Nov 30 19:13:49.783205 2025] [:error] [pid 12554:tid 12558] [client 213.21.239.4:60364] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au../.svn/wc.db"] [unique_id "aSwm7T7q_kXd01TaAD90VAAAAAI"]
[Sun Nov 30 19:13:49.790989 2025] [:error] [pid 58704:tid 58722] [client 213.21.239.4:60428] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/events../.svn/wc.db"] [unique_id "aSwm7VgCdnbXMzbONnNFEQAAA48"]
[Sun Nov 30 19:13:49.794105 2025] [:error] [pid 10518:tid 10537] [client 213.21.239.4:60390] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/static../.svn/wc.db"] [unique_id "aSwm7Q8XjrhaEDJ0Rd_AdwAAAVA"]
[Sun Nov 30 19:13:49.796428 2025] [:error] [pid 58704:tid 58726] [client 213.21.239.4:60512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/wc.db;.."] [unique_id "aSwm7VgCdnbXMzbONnNFEwAAA5M"]
[Sun Nov 30 19:13:49.805437 2025] [:error] [pid 9375:tid 9417] [client 213.21.239.4:60408] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/.svn/wc.db;.."] [unique_id "aSwm7d-EkWIUe87KIjMQRAAAA00"]
[Sun Nov 30 19:13:49.810279 2025] [:error] [pid 10607:tid 10622] [client 213.21.239.4:60412] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/.svn;/wc.db"] [unique_id "aSwm7XMxNFmf1l9xA_GeYwAAAsw"]
[Sun Nov 30 19:13:49.810656 2025] [:error] [pid 10518:tid 10538] [client 213.21.239.4:60410] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/dot.svn/wc.db"] [unique_id "aSwm7Q8XjrhaEDJ0Rd_AeAAAAVE"]
[Sun Nov 30 19:13:49.811135 2025] [:error] [pid 10607:tid 10624] [client 213.21.239.4:60564] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/wc.db"] [unique_id "aSwm7XMxNFmf1l9xA_GeZAAAAs4"]
[Sun Nov 30 19:13:49.811771 2025] [:error] [pid 10518:tid 10542] [client 213.21.239.4:60456] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/;/.svn/wc.db"] [unique_id "aSwm7Q8XjrhaEDJ0Rd_AegAAAVU"]
[Sun Nov 30 19:13:49.814080 2025] [:error] [pid 10607:tid 10619] [client 213.21.239.4:60604] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause../.svn/wc.db"] [unique_id "aSwm7XMxNFmf1l9xA_GeZQAAAsk"]
[Sun Nov 30 19:13:49.818198 2025] [:error] [pid 10550:tid 10583] [client 213.21.239.4:60606] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/..;/.svn/wc.db"] [unique_id "aSwm7el_8Vq2nipf7mFRXgAAAoQ"]
[Sun Nov 30 19:13:49.818477 2025] [:error] [pid 12793:tid 12811] [client 213.21.239.4:60400] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/.svn/wc.db"] [unique_id "aSwm7csEgQeCVydJZ0guDQAAAFA"]
[Sun Nov 30 19:13:49.820291 2025] [:error] [pid 12793:tid 12810] [client 213.21.239.4:60486] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/.svn/%0Awc.db"] [unique_id "aSwm7csEgQeCVydJZ0guDgAAAE8"]
[Sun Nov 30 19:13:49.821029 2025] [:error] [pid 10550:tid 10601] [client 213.21.239.4:60502] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/wc.db;"] [unique_id "aSwm7el_8Vq2nipf7mFRXwAAApY"]
[Sun Nov 30 19:13:49.821805 2025] [:error] [pid 10550:tid 10590] [client 213.21.239.4:60404] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/.svn/wc.db;"] [unique_id "aSwm7el_8Vq2nipf7mFRYAAAAos"]
[Sun Nov 30 19:13:49.824791 2025] [:error] [pid 10518:tid 10536] [client 213.21.239.4:60538] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn;/wc.db"] [unique_id "aSwm7Q8XjrhaEDJ0Rd_AewAAAU8"]
[Sun Nov 30 19:13:49.826006 2025] [:error] [pid 10607:tid 10632] [client 213.21.239.4:60558] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/static../.svn/wc.db"] [unique_id "aSwm7XMxNFmf1l9xA_GeZwAAAtY"]
[Sun Nov 30 19:13:49.827012 2025] [:error] [pid 12554:tid 12580] [client 213.21.239.4:60436] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/wc.db"] [unique_id "aSwm7T7q_kXd01TaAD90WwAAABg"]
[Sun Nov 30 19:13:49.828615 2025] [:error] [pid 12793:tid 12799] [client 213.21.239.4:60578] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aSwm7csEgQeCVydJZ0guDwAAAEQ"]
[Sun Nov 30 19:13:49.829247 2025] [:error] [pid 10607:tid 10625] [client 213.21.239.4:60470] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/flock/.svn/wc.db"] [unique_id "aSwm7XMxNFmf1l9xA_GeaAAAAs8"]
[Sun Nov 30 19:13:49.829320 2025] [:error] [pid 58704:tid 58707] [client 213.21.239.4:60446] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause/wc.db"] [unique_id "aSwm7VgCdnbXMzbONnNFFgAAA4A"]
[Sun Nov 30 19:13:49.832733 2025] [:error] [pid 58704:tid 58729] [client 213.21.239.4:60528] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au../wc.db"] [unique_id "aSwm7VgCdnbXMzbONnNFFwAAA5Y"]
[Sun Nov 30 19:13:49.833665 2025] [:error] [pid 12793:tid 12818] [client 213.21.239.4:60590] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/%0Awc.db"] [unique_id "aSwm7csEgQeCVydJZ0guEAAAAFc"]
[Sun Nov 30 19:13:49.834326 2025] [:error] [pid 9375:tid 9418] [client 213.21.239.4:60616] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/..;/.svn/wc.db"] [unique_id "aSwm7d-EkWIUe87KIjMQRQAAA04"]
[Sun Nov 30 19:13:49.834634 2025] [:error] [pid 58704:tid 58721] [client 213.21.239.4:60550] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/;/.svn/wc.db"] [unique_id "aSwm7VgCdnbXMzbONnNFGAAAA44"]
[Sun Nov 30 19:13:52.750445 2025] [:error] [pid 10608:tid 10652] [client 213.21.239.4:43226] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aSwm8OG4qpknNxmxP5d5_QAAA88"]
[Sun Nov 30 19:13:52.766063 2025] [:error] [pid 12793:tid 12812] [client 213.21.239.4:43346] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/img../.svn/wc.db"] [unique_id "aSwm8MsEgQeCVydJZ0guEwAAAFE"]
[Sun Nov 30 19:13:52.766475 2025] [:error] [pid 9694:tid 9700] [client 213.21.239.4:43288] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/.svn;/wc.db"] [unique_id "aSwm8MNOaRChkzIC_nWjtgAAAMQ"]
[Sun Nov 30 19:13:52.768679 2025] [:error] [pid 9374:tid 9397] [client 213.21.239.4:43314] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.svn/wc.db;"] [unique_id "aSwm8IEwr5jt_cokVdxo9gAAAxQ"]
[Sun Nov 30 19:13:52.776575 2025] [:error] [pid 9694:tid 9716] [client 213.21.239.4:43150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aSwm8MNOaRChkzIC_nWjuQAAANQ"]
[Sun Nov 30 19:13:52.782954 2025] [:error] [pid 10607:tid 10618] [client 213.21.239.4:43246] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/images../.svn/wc.db"] [unique_id "aSwm8HMxNFmf1l9xA_GebgAAAsg"]
[Sun Nov 30 19:13:52.784074 2025] [:error] [pid 9694:tid 9704] [client 213.21.239.4:43240] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.svn/wc.db"] [unique_id "aSwm8MNOaRChkzIC_nWjvAAAAMg"]
[Sun Nov 30 19:13:52.795459 2025] [:error] [pid 9374:tid 9388] [client 213.21.239.4:43268] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/svn/.svn/wc.db"] [unique_id "aSwm8IEwr5jt_cokVdxo-AAAAws"]
[Sun Nov 30 19:13:52.799939 2025] [:error] [pid 58704:tid 58716] [client 213.21.239.4:43642] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/__MACOSX/.svn/wc.db"] [unique_id "aSwm8FgCdnbXMzbONnNFGgAAA4k"]
[Sun Nov 30 19:13:52.800522 2025] [:error] [pid 10608:tid 10656] [client 213.21.239.4:43548] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib../.svn/wc.db"] [unique_id "aSwm8OG4qpknNxmxP5d6AwAAA9M"]
[Sun Nov 30 19:13:52.802014 2025] [:error] [pid 58704:tid 58723] [client 213.21.239.4:43550] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/old-cuburn/.svn/wc.db"] [unique_id "aSwm8FgCdnbXMzbONnNFGwAAA5A"]
[Sun Nov 30 19:13:52.813375 2025] [:error] [pid 58704:tid 58730] [client 213.21.239.4:43532] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/new/.svn/wc.db"] [unique_id "aSwm8FgCdnbXMzbONnNFHQAAA5c"]
[Sun Nov 30 19:13:52.817119 2025] [:error] [pid 10608:tid 10649] [client 213.21.239.4:43724] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/prod.svn/wc.db"] [unique_id "aSwm8OG4qpknNxmxP5d6BQAAA8w"]
[Sun Nov 30 19:13:52.817446 2025] [:error] [pid 9374:tid 9380] [client 213.21.239.4:43726] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/media../.svn/wc.db"] [unique_id "aSwm8IEwr5jt_cokVdxo_AAAAwM"]
[Sun Nov 30 19:13:52.821385 2025] [:error] [pid 9694:tid 9712] [client 213.21.239.4:43750] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/prod/.svn/wc.db"] [unique_id "aSwm8MNOaRChkzIC_nWjvgAAANA"]
[Sun Nov 30 19:13:52.821635 2025] [:error] [pid 10608:tid 10655] [client 213.21.239.4:43556] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/live/.svn/wc.db"] [unique_id "aSwm8OG4qpknNxmxP5d6BwAAA9I"]
[Sun Nov 30 19:13:52.822897 2025] [:error] [pid 10608:tid 10659] [client 213.21.239.4:43510] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/js../.svn/wc.db"] [unique_id "aSwm8OG4qpknNxmxP5d6CAAAA9Y"]
[Sun Nov 30 19:13:52.825749 2025] [:error] [pid 9374:tid 9394] [client 213.21.239.4:43778] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/message-api/.svn/wc.db"] [unique_id "aSwm8IEwr5jt_cokVdxo_gAAAxE"]
[Sun Nov 30 19:13:52.826959 2025] [:error] [pid 9374:tid 9393] [client 213.21.239.4:43692] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/m/.svn/wc.db"] [unique_id "aSwm8IEwr5jt_cokVdxo_wAAAxA"]
[Sun Nov 30 19:13:52.830962 2025] [:error] [pid 10608:tid 10643] [client 213.21.239.4:43584] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.svn/wc.db"] [unique_id "aSwm8OG4qpknNxmxP5d6CgAAA8Y"]
[Sun Nov 30 19:13:52.833872 2025] [:error] [pid 10518:tid 10536] [client 213.21.239.4:43790] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au../wc.db"] [unique_id "aSwm8A8XjrhaEDJ0Rd_AgQAAAU8"]
[Sun Nov 30 19:13:52.835899 2025] [:error] [pid 9694:tid 9720] [client 213.21.239.4:43628] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aSwm8MNOaRChkzIC_nWjwAAAANg"]
[Sun Nov 30 19:13:52.837942 2025] [:error] [pid 10608:tid 10637] [client 213.21.239.4:43760] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/qa/.svn/wc.db"] [unique_id "aSwm8OG4qpknNxmxP5d6DAAAA8A"]
[Sun Nov 30 19:13:52.843036 2025] [:error] [pid 9374:tid 9399] [client 213.21.239.4:43796] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/wc.db"] [unique_id "aSwm8IEwr5jt_cokVdxpAQAAAxY"]
[Sun Nov 30 19:13:55.753290 2025] [:error] [pid 10550:tid 10593] [client 213.21.239.4:43846] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aSwm8-l_8Vq2nipf7mFRaQAAAo4"]
[Sun Nov 30 19:13:55.758190 2025] [:error] [pid 10518:tid 10523] [client 213.21.239.4:43824] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/samples/.svn/wc.db"] [unique_id "aSwm8w8XjrhaEDJ0Rd_AggAAAUI"]
[Sun Nov 30 19:13:55.759263 2025] [:error] [pid 10518:tid 10544] [client 213.21.239.4:43930] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/wc.db;"] [unique_id "aSwm8w8XjrhaEDJ0Rd_AhAAAAVc"]
[Sun Nov 30 19:13:55.762236 2025] [:error] [pid 9375:tid 9419] [client 213.21.239.4:43956] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn;/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQUQAAA08"]
[Sun Nov 30 19:13:55.766056 2025] [:error] [pid 10607:tid 10623] [client 213.21.239.4:43870] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au../.svn/wc.db"] [unique_id "aSwm83MxNFmf1l9xA_GedQAAAs0"]
[Sun Nov 30 19:13:55.769342 2025] [:error] [pid 9375:tid 9416] [client 213.21.239.4:44022] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQVAAAA0w"]
[Sun Nov 30 19:13:55.771560 2025] [:error] [pid 9375:tid 9410] [client 213.21.239.4:43960] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/..;/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQVQAAA0Y"]
[Sun Nov 30 19:13:55.771651 2025] [:error] [pid 10607:tid 10612] [client 213.21.239.4:43836] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/wc.db"] [unique_id "aSwm83MxNFmf1l9xA_GedgAAAsI"]
[Sun Nov 30 19:13:55.774054 2025] [core:error] [pid 10607:tid 10611] [client 213.21.239.4:43828] AH10244: invalid URI path (/../wc.db)
[Sun Nov 30 19:13:55.776627 2025] [:error] [pid 9375:tid 9415] [client 213.21.239.4:43990] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/../.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQVgAAA0s"]
[Sun Nov 30 19:13:55.777509 2025] [:error] [pid 10607:tid 10630] [client 213.21.239.4:44080] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/%0Awc.db"] [unique_id "aSwm83MxNFmf1l9xA_GeeQAAAtQ"]
[Sun Nov 30 19:13:55.779813 2025] [:error] [pid 9375:tid 9405] [client 213.21.239.4:44084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQWAAAA0E"]
[Sun Nov 30 19:13:55.785444 2025] [:error] [pid 58704:tid 58724] [client 213.21.239.4:44054] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/wc.db"] [unique_id "aSwm81gCdnbXMzbONnNFIQAAA5E"]
[Sun Nov 30 19:13:55.785697 2025] [:error] [pid 9694:tid 9703] [client 213.21.239.4:44144] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aSwm88NOaRChkzIC_nWjxgAAAMc"]
[Sun Nov 30 19:13:55.786362 2025] [:error] [pid 9375:tid 9407] [client 213.21.239.4:43944] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/repos/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQWgAAA0M"]
[Sun Nov 30 19:13:55.792085 2025] [:error] [pid 9375:tid 9404] [client 213.21.239.4:44032] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/static../.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQXAAAA0A"]
[Sun Nov 30 19:13:55.793983 2025] [:error] [pid 9375:tid 9417] [client 213.21.239.4:44116] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/shop/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQXwAAA00"]
[Sun Nov 30 19:13:55.794156 2025] [:error] [pid 9375:tid 9422] [client 213.21.239.4:43942] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/wc.db;.."] [unique_id "aSwm89-EkWIUe87KIjMQXgAAA1I"]
[Sun Nov 30 19:13:55.799879 2025] [:error] [pid 9694:tid 9713] [client 213.21.239.4:44000] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/measureyourcause.com.au/;/.svn/wc.db"] [unique_id "aSwm88NOaRChkzIC_nWjygAAANE"]
[Sun Nov 30 19:13:55.800297 2025] [:error] [pid 9694:tid 9716] [client 213.21.239.4:44170] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aSwm88NOaRChkzIC_nWjywAAANQ"]
[Sun Nov 30 19:13:55.804995 2025] [:error] [pid 9375:tid 9418] [client 213.21.239.4:44098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/s3/.svn/wc.db"] [unique_id "aSwm89-EkWIUe87KIjMQYAAAA04"]
[Sun Nov 30 19:13:55.807742 2025] [:error] [pid 10518:tid 10537] [client 213.21.239.4:44196] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.svn/wc.db;"] [unique_id "aSwm8w8XjrhaEDJ0Rd_AhwAAAVA"]
[Sun Nov 30 19:13:55.809044 2025] [:error] [pid 9694:tid 9704] [client 213.21.239.4:44044] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aSwm88NOaRChkzIC_nWjzwAAAMg"]
[Sun Nov 30 19:13:55.814137 2025] [:error] [pid 9694:tid 9712] [client 213.21.239.4:44188] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/.svn;/wc.db"] [unique_id "aSwm88NOaRChkzIC_nWj0AAAANA"]
[Sun Nov 30 19:13:55.814882 2025] [:error] [pid 58704:tid 58723] [client 213.21.239.4:44216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/repository/.svn/wc.db"] [unique_id "aSwm81gCdnbXMzbONnNFIwAAA5A"]
[Sun Nov 30 19:13:58.754009 2025] [:error] [pid 10550:tid 10589] [client 213.21.239.4:44498] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wiki/.svn/wc.db"] [unique_id "aSwm9ul_8Vq2nipf7mFRbAAAAoo"]
[Sun Nov 30 19:13:58.759220 2025] [:error] [pid 10607:tid 10611] [client 213.21.239.4:44502] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-content/.svn/wc.db"] [unique_id "aSwm9nMxNFmf1l9xA_GefwAAAsE"]
[Sun Nov 30 19:13:58.763441 2025] [:error] [pid 10550:tid 10592] [client 213.21.239.4:44528] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/.svn/wc.db"] [unique_id "aSwm9ul_8Vq2nipf7mFRbQAAAo0"]
[Sun Nov 30 19:13:58.764563 2025] [:error] [pid 10550:tid 10596] [client 213.21.239.4:44580] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/uat/.svn/wc.db"] [unique_id "aSwm9ul_8Vq2nipf7mFRbgAAApE"]
[Sun Nov 30 19:13:58.766892 2025] [:error] [pid 12554:tid 12573] [client 213.21.239.4:44492] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web/.svn/wc.db"] [unique_id "aSwm9j7q_kXd01TaAD90agAAABE"]
[Sun Nov 30 19:13:58.768800 2025] [:error] [pid 10550:tid 10594] [client 213.21.239.4:44516] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/.svn/wc.db"] [unique_id "aSwm9ul_8Vq2nipf7mFRcQAAAo8"]
[Sun Nov 30 19:13:58.770483 2025] [:error] [pid 10550:tid 10580] [client 213.21.239.4:44564] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/.svn/wc.db"] [unique_id "aSwm9ul_8Vq2nipf7mFRcgAAAoE"]
[Sun Nov 30 19:13:58.771763 2025] [:error] [pid 10607:tid 10621] [client 213.21.239.4:44650] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/staging/.svn/wc.db"] [unique_id "aSwm9nMxNFmf1l9xA_GegAAAAss"]
[Sun Nov 30 19:13:58.777419 2025] [:error] [pid 9374:tid 9388] [client 213.21.239.4:44568] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/static/.svn/wc.db"] [unique_id "aSwm9oEwr5jt_cokVdxpCwAAAws"]
[Sun Nov 30 19:13:58.780151 2025] [:error] [pid 9375:tid 9404] [client 213.21.239.4:44704] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/.svn/wc.db"] [unique_id "aSwm9t-EkWIUe87KIjMQaQAAA0A"]
[Sun Nov 30 19:13:58.781612 2025] [:error] [pid 10607:tid 10630] [client 213.21.239.4:44670] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aSwm9nMxNFmf1l9xA_GegQAAAtQ"]
[Sun Nov 30 19:13:58.783742 2025] [:error] [pid 9374:tid 9377] [client 213.21.239.4:44634] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/site/.svn/wc.db"] [unique_id "aSwm9oEwr5jt_cokVdxpDQAAAwA"]
[Sun Nov 30 19:13:58.787996 2025] [:error] [pid 9375:tid 9422] [client 213.21.239.4:44592] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/store/.svn/wc.db"] [unique_id "aSwm9t-EkWIUe87KIjMQawAAA1I"]
[Sun Nov 30 21:47:36.690790 2025] [:error] [pid 10550:tid 10584] [client 87.121.79.247:45624] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aSxK-Ol_8Vq2nipf7mFtiAAAAoU"]
[Sun Nov 30 21:47:37.731990 2025] [:error] [pid 9374:tid 9383] [client 87.121.79.247:39678] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aSxK-YEwr5jt_cokVdyDDAAAAwY"]
[Sun Nov 30 23:49:33.827937 2025] [:error] [pid 10608:tid 10657] [client 87.121.79.247:45324] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aSxnjeG4qpknNxmxP5ehhAAAA9Q"]
[Sun Nov 30 23:49:34.889761 2025] [:error] [pid 10550:tid 10601] [client 87.121.79.247:48340] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aSxnjul_8Vq2nipf7mGBjwAAApY"]
[Sun Nov 30 23:53:51.800446 2025] [:error] [pid 9694:tid 9712] [client 87.121.79.247:38716] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aSxoj8NOaRChkzIC_nXn0QAAANA"]
[Sun Nov 30 23:53:52.843762 2025] [:error] [pid 10518:tid 10545] [client 87.121.79.247:41308] [client 87.121.79.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aSxokA8XjrhaEDJ0Rd_sugAAAVg"]
[Mon Dec 01 00:27:42.324213 2025] [rewrite:error] [pid 32611:tid 32628] [client 107.172.195.236:51994] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Dec 01 02:05:08.351695 2025] [rewrite:error] [pid 25124:tid 25158] [client 104.252.191.39:7662] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Dec 01 02:05:43.402359 2025] [:error] [pid 32520:tid 32526] [client 198.44.184.31:46624] [client 198.44.184.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.44.184.31, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyHd_vbCMB_T-u6uxlPRQAAA4E"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:05:43.954592 2025] [:error] [pid 22963:tid 22989] [client 198.44.184.31:33766] [client 198.44.184.31] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 198.44.184.31, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyHdygjrTC0kxo5Q-z13gAAAJg"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:12:02.951533 2025] [:error] [pid 32521:tid 32570] [client 77.222.62.198:36308] [client 77.222.62.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.222.62.198, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyI8j-OXioBrWvHoPrSXwAAAxI"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:12:04.430533 2025] [:error] [pid 32521:tid 32575] [client 77.222.62.198:56050] [client 77.222.62.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.222.62.198, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyI9D-OXioBrWvHoPrSYwAAAxc"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:22:23.050256 2025] [:error] [pid 32611:tid 32614] [client 103.169.160.163:39082] [client 103.169.160.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.169.160.163, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyLX6_aT7PlMcEPLmkmzAAAAAE"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:22:23.976565 2025] [:error] [pid 32520:tid 32545] [client 103.169.160.163:48450] [client 103.169.160.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.169.160.163, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyLX_vbCMB_T-u6uxlVBgAAA5Q"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:29:53.529677 2025] [:error] [pid 25124:tid 25159] [client 1.13.18.100:55110] [client 1.13.18.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.13.18.100, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyNIVl826mNLYSD9-3QHwAAAEY"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:29:54.950468 2025] [:error] [pid 25124:tid 25172] [client 1.13.18.100:42242] [client 1.13.18.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 1.13.18.100, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyNIll826mNLYSD9-3QIQAAAFM"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:33:51.023511 2025] [:error] [pid 32611:tid 32633] [client 108.167.159.98:33994] [client 108.167.159.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.167.159.98, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyOD6_aT7PlMcEPLmkqYQAAABQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:33:51.835108 2025] [:error] [pid 32522:tid 32594] [client 108.167.159.98:17484] [client 108.167.159.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 108.167.159.98, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyODyY5g6U7AgYu2cLCZQAAAM8"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:38:03.345688 2025] [:error] [pid 32520:tid 32531] [client 208.109.32.191:49998] [client 208.109.32.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.109.32.191, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyPC_vbCMB_T-u6uxlbewAAA4Y"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:38:04.162615 2025] [:error] [pid 32520:tid 32528] [client 208.109.32.191:43204] [client 208.109.32.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.109.32.191, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyPDPvbCMB_T-u6uxlbfQAAA4M"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:41:30.511467 2025] [:error] [pid 32521:tid 32559] [client 103.65.237.153:56269] [client 103.65.237.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aSyP2j-OXioBrWvHoPrgKgAAAwc"]
[Mon Dec 01 02:41:30.746608 2025] [:error] [pid 32520:tid 32546] [client 103.65.237.153:56299] [client 103.65.237.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSyP2vvbCMB_T-u6uxlcpgAAA5U"]
[Mon Dec 01 02:42:12.180142 2025] [:error] [pid 32520:tid 32545] [client 184.154.168.112:36482] [client 184.154.168.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.154.168.112, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyQBPvbCMB_T-u6uxlc3AAAA5Q"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:42:13.235578 2025] [:error] [pid 32611:tid 32635] [client 184.154.168.112:43178] [client 184.154.168.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.154.168.112, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyQBa_aT7PlMcEPLmksogAAABY"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:46:20.738438 2025] [:error] [pid 25124:tid 25167] [client 50.62.183.174:33028] [client 50.62.183.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.62.183.174, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyQ_Fl826mNLYSD9-3UnwAAAE4"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:46:21.563798 2025] [:error] [pid 32520:tid 32545] [client 50.62.183.174:51036] [client 50.62.183.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.62.183.174, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyQ_fvbCMB_T-u6uxld-QAAA5Q"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:50:27.529540 2025] [:error] [pid 32521:tid 32554] [client 66.119.220.146:60302] [client 66.119.220.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.119.220.146, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyR8z-OXioBrWvHoPrkWwAAAwI"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:50:28.685959 2025] [:error] [pid 32611:tid 32625] [client 66.119.220.146:33112] [client 66.119.220.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 66.119.220.146, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyR9K_aT7PlMcEPLmkudgAAAAw"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:54:30.481764 2025] [:error] [pid 32521:tid 32567] [client 148.251.123.155:53080] [client 148.251.123.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.251.123.155, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyS5j-OXioBrWvHoPrmXAAAAw8"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:54:31.779437 2025] [:error] [pid 22995:tid 23004] [client 148.251.123.155:52454] [client 148.251.123.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.251.123.155, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyS56hgK6YGad0ApM9nLgAAAQY"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:58:33.630332 2025] [:error] [pid 32611:tid 32617] [client 3.94.27.7:33482] [client 3.94.27.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.94.27.7, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyT2a_aT7PlMcEPLmkw6wAAAAQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 02:58:34.921563 2025] [:error] [pid 32522:tid 32579] [client 3.94.27.7:36216] [client 3.94.27.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.94.27.7, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyT2iY5g6U7AgYu2cLHawAAAMA"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:02:40.376346 2025] [:error] [pid 25124:tid 25157] [client 103.75.187.239:60882] [client 103.75.187.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.75.187.239, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyU0Fl826mNLYSD9-3ZgwAAAEQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:02:41.222416 2025] [:error] [pid 22995:tid 23020] [client 103.75.187.239:42740] [client 103.75.187.239] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.75.187.239, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyU0ahgK6YGad0ApM9phQAAARY"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:07:07.379085 2025] [:error] [pid 41526:tid 41538] [client 45.156.185.91:41754] [client 45.156.185.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.156.185.91, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyV210bjN1zt83-HJ0xowAAAUc"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:07:08.962885 2025] [:error] [pid 32520:tid 32535] [client 45.156.185.91:34080] [client 45.156.185.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.156.185.91, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyV3PvbCMB_T-u6uxljmgAAA4o"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:11:47.302304 2025] [:error] [pid 32521:tid 32563] [client 181.215.205.194:53326] [client 181.215.205.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.215.205.194, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyW8z-OXioBrWvHoPrtDgAAAws"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:11:48.065725 2025] [:error] [pid 41526:tid 41543] [client 181.215.205.194:36454] [client 181.215.205.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.215.205.194, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyW9F0bjN1zt83-HJ0zmgAAAUw"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:16:30.730196 2025] [:error] [pid 32520:tid 32528] [client 68.183.135.252:53492] [client 68.183.135.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.135.252, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyYDvvbCMB_T-u6uxlmgQAAA4M"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:16:31.573595 2025] [:error] [pid 32611:tid 32614] [client 68.183.135.252:41550] [client 68.183.135.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 68.183.135.252, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyYD6_aT7PlMcEPLmk1KgAAAAE"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:21:06.644759 2025] [:error] [pid 25124:tid 25162] [client 170.106.196.7:60292] [client 170.106.196.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.106.196.7, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyZIll826mNLYSD9-3epAAAAEk"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:21:07.479298 2025] [:error] [pid 32520:tid 32549] [client 170.106.196.7:53202] [client 170.106.196.7] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.106.196.7, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyZI_vbCMB_T-u6uxlnxwAAA5g"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:25:33.341262 2025] [:error] [pid 25124:tid 25167] [client 148.135.79.162:39454] [client 148.135.79.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.135.79.162, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyaLVl826mNLYSD9-3gVAAAAE4"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:25:33.936256 2025] [:error] [pid 32522:tid 32597] [client 148.135.79.162:50588] [client 148.135.79.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.135.79.162, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyaLSY5g6U7AgYu2cLOOQAAANI"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:30:01.592453 2025] [:error] [pid 6455:tid 6601] [client 13.127.103.128:40726] [client 13.127.103.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.127.103.128, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSybOfuLOgAQFnn0a5vNngAAAJE"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:30:02.238006 2025] [:error] [pid 6455:tid 6588] [client 13.127.103.128:43318] [client 13.127.103.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.127.103.128, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSybOvuLOgAQFnn0a5vNoAAAAIQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:34:56.307217 2025] [:error] [pid 6678:tid 6692] [client 103.82.36.71:48400] [client 103.82.36.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.36.71, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSycYLbK58dmDxrU8Q56OQAAAMw"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:34:56.841047 2025] [:error] [pid 6678:tid 6680] [client 103.82.36.71:38752] [client 103.82.36.71] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.82.36.71, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSycYLbK58dmDxrU8Q56PwAAAMA"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:39:23.302810 2025] [:error] [pid 6453:tid 6531] [client 194.163.153.255:37832] [client 194.163.153.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.163.153.255, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyda0qUJ1kJcx0_-4LFTwAAAAI"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:39:24.710421 2025] [:error] [pid 6678:tid 6687] [client 194.163.153.255:38850] [client 194.163.153.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.163.153.255, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSydbLbK58dmDxrU8Q58xwAAAMc"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:55:52.705194 2025] [:error] [pid 54127:tid 54168] [client 50.6.155.10:11538] [client 50.6.155.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.155.10, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyhSCm_JBgbiuTcGcMB9QAAAEk"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:55:53.744230 2025] [:error] [pid 54226:tid 54249] [client 50.6.155.10:41680] [client 50.6.155.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.155.10, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyhSRCqBVzvYGnz3GOelAAAANQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 03:59:17.202846 2025] [:error] [pid 20219:tid 20262] [client 182.42.105.144:41791] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aSyiFZcCVJSacjuiDNsOzgAAAEw"]
[Mon Dec 01 04:03:19.022806 2025] [:error] [pid 20219:tid 20267] [client 50.6.206.129:37856] [client 50.6.206.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.206.129, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyjB5cCVJSacjuiDNsRQQAAAFE"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:03:20.594928 2025] [:error] [pid 20218:tid 20234] [client 50.6.206.129:42466] [client 50.6.206.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 50.6.206.129, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyjCL1Fj2Rp4FeQshaqeQAAAAs"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:07:10.660525 2025] [:error] [pid 58907:tid 58917] [client 202.174.110.119:48836] [client 202.174.110.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.174.110.119, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyj7kbHRnc7iyYMBh8EAAAAAMg"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:07:10.775305 2025] [:error] [pid 58784:tid 58795] [client 202.174.110.119:50006] [client 202.174.110.119] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.174.110.119, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyj7tvoX0HAeN__aJdR9AAAAAI"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:11:03.360871 2025] [:error] [pid 58786:tid 58852] [client 134.209.118.102:53026] [client 134.209.118.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.118.102, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyk13tVAuR4gXIDq2BFsQAAAIU"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:11:04.199531 2025] [:error] [pid 58907:tid 58931] [client 134.209.118.102:51370] [client 134.209.118.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.209.118.102, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyk2EbHRnc7iyYMBh8GRAAAANY"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:14:57.716645 2025] [:error] [pid 38739:tid 38758] [client 89.207.146.191:32818] [client 89.207.146.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.207.146.191, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSylwRV3AnmLberc_XDHKAAAAA0"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:14:59.128125 2025] [:error] [pid 38741:tid 38809] [client 89.207.146.191:41232] [client 89.207.146.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.207.146.191, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSylw80L1cmP6Y250z3S4gAAAIk"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:22:50.452582 2025] [:error] [pid 39231:tid 39275] [client 72.52.158.156:44864] [client 72.52.158.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.52.158.156, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSynmu7b3R8UMMGv2zIg_AAAAY8"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:22:51.558714 2025] [:error] [pid 39231:tid 39263] [client 72.52.158.156:36616] [client 72.52.158.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.52.158.156, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSynm-7b3R8UMMGv2zIhBAAAAYM"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:26:47.143448 2025] [:error] [pid 38739:tid 38749] [client 47.100.26.247:36040] [client 47.100.26.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.100.26.247, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyohxV3AnmLberc_XDKfQAAAAQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:26:51.970695 2025] [:error] [pid 38833:tid 38835] [client 47.100.26.247:34762] [client 47.100.26.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.100.26.247, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyoi2QclTT5c5spu4YByQAAAMA"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:41:52.780668 2025] [:error] [pid 39189:tid 39214] [client 119.156.243.110:55204] [client 119.156.243.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.156.243.110, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSysEO861-Z71XbzCjwWUgAAARc"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:41:54.142507 2025] [:error] [pid 39230:tid 39244] [client 119.156.243.110:43186] [client 119.156.243.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.156.243.110, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSysEqM8OwMp6GqAH1fDrAAAAUs"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:45:32.198973 2025] [:error] [pid 38833:tid 38838] [client 147.135.5.120:47745] [client 147.135.5.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.135.5.120, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSys7GQclTT5c5spu4YH2QAAAMM"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:45:33.279542 2025] [:error] [pid 38740:tid 38793] [client 147.135.5.120:43049] [client 147.135.5.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.135.5.120, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSys7XhJ8D5KZ4hRdTUqWwAAAFQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:49:13.413376 2025] [:error] [pid 39231:tid 39270] [client 190.210.9.43:33360] [client 190.210.9.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.210.9.43, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSytye7b3R8UMMGv2zIs2wAAAYo"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:49:16.114906 2025] [:error] [pid 38740:tid 38792] [client 190.210.9.43:55666] [client 190.210.9.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.210.9.43, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSytzHhJ8D5KZ4hRdTUrTAAAAFM"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:52:57.144329 2025] [:error] [pid 39230:tid 39257] [client 162.241.217.240:42270] [client 162.241.217.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.217.240, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyuqaM8OwMp6GqAH1fIGwAAAVg"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:52:57.912517 2025] [:error] [pid 39189:tid 39212] [client 162.241.217.240:47412] [client 162.241.217.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.241.217.240, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyuqe861-Z71XbzCjwZswAAARU"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:56:37.800952 2025] [:error] [pid 38740:tid 38787] [client 162.214.208.138:42918] [client 162.214.208.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.214.208.138, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyvhXhJ8D5KZ4hRdTUtqAAAAE4"], referer: http://measureyourcause.com.au
[Mon Dec 01 04:56:38.711433 2025] [:error] [pid 38833:tid 38846] [client 162.214.208.138:36974] [client 162.214.208.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.214.208.138, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyvhmQclTT5c5spu4YLLAAAAMs"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:00:14.724802 2025] [:error] [pid 39231:tid 39280] [client 77.104.73.130:63500] [client 77.104.73.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.104.73.130, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSywXu7b3R8UMMGv2zIyaQAAAZQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:00:15.867957 2025] [:error] [pid 38833:tid 38856] [client 77.104.73.130:64389] [client 77.104.73.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.104.73.130, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSywX2QclTT5c5spu4YMGgAAANU"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:07:44.376371 2025] [:error] [pid 38741:tid 38820] [client 92.205.167.152:40422] [client 92.205.167.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.167.152, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyyIM0L1cmP6Y250z3hDwAAAJQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:07:45.540869 2025] [:error] [pid 38739:tid 38748] [client 92.205.167.152:45472] [client 92.205.167.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.167.152, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyyIRV3AnmLberc_XDV2gAAAAM"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:11:37.542396 2025] [:error] [pid 39231:tid 39261] [client 63.250.38.151:56862] [client 63.250.38.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 63.250.38.151, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyzCe7b3R8UMMGv2zI3owAAAYE"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:11:38.540153 2025] [:error] [pid 39231:tid 39284] [client 63.250.38.151:40892] [client 63.250.38.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 63.250.38.151, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyzCu7b3R8UMMGv2zI3pwAAAZg"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:15:32.261129 2025] [:error] [pid 39230:tid 39236] [client 194.38.135.180:54060] [client 194.38.135.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.38.135.180, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyz9KM8OwMp6GqAH1fPLQAAAUM"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:15:33.609498 2025] [:error] [pid 39231:tid 39275] [client 194.38.135.180:42858] [client 194.38.135.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.38.135.180, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSyz9e7b3R8UMMGv2zI5aQAAAY8"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:23:15.272844 2025] [:error] [pid 39230:tid 39236] [client 78.46.40.28:35228] [client 78.46.40.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.46.40.28, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy1w6M8OwMp6GqAH1fR9wAAAUM"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:23:16.736306 2025] [:error] [pid 39231:tid 39260] [client 78.46.40.28:50676] [client 78.46.40.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.46.40.28, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy1xO7b3R8UMMGv2zI8EgAAAYA"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:27:34.491518 2025] [:error] [pid 38740:tid 38780] [client 135.125.66.80:8260] [client 135.125.66.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.125.66.80, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy2xnhJ8D5KZ4hRdTUz_QAAAEc"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:27:35.462986 2025] [:error] [pid 38739:tid 38752] [client 135.125.66.80:63547] [client 135.125.66.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 135.125.66.80, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy2xxV3AnmLberc_XDZWgAAAAc"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:35:17.221250 2025] [:error] [pid 39189:tid 39213] [client 8.137.149.112:53342] [client 8.137.149.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.137.149.112, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy4le861-Z71XbzCjwlagAAARY"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:35:18.989727 2025] [:error] [pid 39231:tid 39282] [client 8.137.149.112:47084] [client 8.137.149.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.137.149.112, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy4lu7b3R8UMMGv2zJCfwAAAZY"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:42:57.000163 2025] [:error] [pid 38740:tid 38784] [client 184.154.168.112:35570] [client 184.154.168.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.154.168.112, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy6YHhJ8D5KZ4hRdTU3fwAAAEs"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:42:58.061632 2025] [:error] [pid 39230:tid 39253] [client 184.154.168.112:42384] [client 184.154.168.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 184.154.168.112, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy6YqM8OwMp6GqAH1fZUAAAAVQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:47:18.468118 2025] [:error] [pid 38739:tid 38763] [client 173.249.147.100:63187] [client 173.249.147.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.249.147.100, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy7ZhV3AnmLberc_XDeOwAAABI"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:47:19.560340 2025] [:error] [pid 39230:tid 39253] [client 173.249.147.100:46377] [client 173.249.147.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.249.147.100, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy7Z6M8OwMp6GqAH1faRAAAAVQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:51:14.337006 2025] [:error] [pid 38741:tid 38824] [client 89.235.79.29:41688] [client 89.235.79.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.235.79.29, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy8Us0L1cmP6Y250z3rbQAAAJg"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:51:16.375811 2025] [:error] [pid 38740:tid 38782] [client 89.235.79.29:35124] [client 89.235.79.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.235.79.29, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy8VHhJ8D5KZ4hRdTU5XAAAAEk"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:55:04.270367 2025] [:error] [pid 38741:tid 38822] [client 139.99.171.55:58112] [client 139.99.171.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.99.171.55, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy9OM0L1cmP6Y250z3sGQAAAJY"], referer: http://measureyourcause.com.au
[Mon Dec 01 05:55:04.434281 2025] [:error] [pid 38833:tid 38850] [client 139.99.171.55:49570] [client 139.99.171.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.99.171.55, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy9OGQclTT5c5spu4YZBwAAAM8"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:02:48.679421 2025] [:error] [pid 38833:tid 38840] [client 54.176.110.14:38630] [client 54.176.110.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.176.110.14, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy_CGQclTT5c5spu4YbkQAAAMU"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:02:49.353981 2025] [:error] [pid 38739:tid 38746] [client 54.176.110.14:41630] [client 54.176.110.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 54.176.110.14, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSy_CRV3AnmLberc_XDhqAAAAAE"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:10:35.902153 2025] [:error] [pid 38739:tid 38766] [client 51.255.71.164:42975] [client 51.255.71.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.255.71.164, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzA2xV3AnmLberc_XDjQAAAABU"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:10:37.253858 2025] [:error] [pid 39230:tid 39236] [client 51.255.71.164:37401] [client 51.255.71.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.255.71.164, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzA3aM8OwMp6GqAH1fh_QAAAUM"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:14:32.411118 2025] [:error] [pid 39230:tid 39252] [client 159.75.154.150:55984] [client 159.75.154.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.75.154.150, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzByKM8OwMp6GqAH1fj-wAAAVM"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:14:33.696658 2025] [:error] [pid 38739:tid 38747] [client 159.75.154.150:38852] [client 159.75.154.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.75.154.150, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzByRV3AnmLberc_XDlBwAAAAI"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:18:27.189381 2025] [:error] [pid 39231:tid 39277] [client 14.192.25.106:38456] [client 14.192.25.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.192.25.106, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzCs-7b3R8UMMGv2zJU6gAAAZE"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:18:28.276684 2025] [:error] [pid 39230:tid 39248] [client 14.192.25.106:58198] [client 14.192.25.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.192.25.106, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzCtKM8OwMp6GqAH1fllAAAAU8"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:22:22.438301 2025] [:error] [pid 38741:tid 38809] [client 122.51.207.51:53996] [client 122.51.207.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.51.207.51, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzDns0L1cmP6Y250z3znwAAAIk"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:22:23.808179 2025] [:error] [pid 38739:tid 38749] [client 122.51.207.51:48542] [client 122.51.207.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.51.207.51, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzDnxV3AnmLberc_XDmsAAAAAQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:34:10.137668 2025] [:error] [pid 39189:tid 39211] [client 51.81.207.12:36018] [client 51.81.207.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.81.207.12, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzGYu861-Z71XbzCjw32QAAARQ"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:34:11.099830 2025] [:error] [pid 39230:tid 39249] [client 51.81.207.12:41518] [client 51.81.207.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.81.207.12, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzGY6M8OwMp6GqAH1fpmwAAAVA"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:38:04.089360 2025] [:error] [pid 43700:tid 43708] [client 165.227.13.11:47514] [client 165.227.13.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.227.13.11, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzHTFtSNoOp8xThCJURNAAAAcY"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:38:04.749416 2025] [:error] [pid 39230:tid 39239] [client 165.227.13.11:46624] [client 165.227.13.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.227.13.11, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzHTKM8OwMp6GqAH1fqBgAAAUY"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:41:59.472322 2025] [:error] [pid 38739:tid 38753] [client 101.37.75.104:59832] [client 101.37.75.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.37.75.104, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzINxV3AnmLberc_XDswgAAAAg"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:42:00.774320 2025] [:error] [pid 43700:tid 43717] [client 101.37.75.104:57396] [client 101.37.75.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.37.75.104, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzIOFtSNoOp8xThCJURqAAAAc8"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:45:56.182460 2025] [:error] [pid 55812:tid 55846] [client 67.23.225.2:58212] [client 67.23.225.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.23.225.2, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzJJCQZ6RItWIrjCb9iAwAAABM"], referer: http://measureyourcause.com.au
[Mon Dec 01 06:45:57.259186 2025] [:error] [pid 55647:tid 55701] [client 67.23.225.2:45992] [client 67.23.225.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.23.225.2, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aSzJJRohZky6FX62C7u05wAAARg"], referer: http://measureyourcause.com.au
[Mon Dec 01 13:17:44.167164 2025] [rewrite:error] [pid 57714:tid 57733] [client 104.164.126.41:23488] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Dec 01 14:10:39.134389 2025] [:error] [pid 7182:tid 7193] [client 93.123.109.132:37094] [client 93.123.109.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS0xX39TcBzcTIZoEPh7KAAAAMg"]
[Mon Dec 01 15:17:01.051686 2025] [:error] [pid 48512:tid 48531] [client 93.123.109.132:38818] [client 93.123.109.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS1A7TfUq53ndBmkefsLyQAAAE4"]
[Mon Dec 01 17:11:25.101875 2025] [:error] [pid 5254:tid 5260] [client 120.29.78.53:49915] [client 120.29.78.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.29.78.53, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aS1bvc1HJky8HPf_OD9QbgAAAUQ"]
[Mon Dec 01 19:28:54.448206 2025] [autoindex:error] [pid 3384:tid 3396] [client 139.59.37.180:56913] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 01 23:10:22.346727 2025] [:error] [pid 15509:tid 15530] [client 101.91.148.219:46325] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aS2v3toBIyRqTZdPhQFZawAAARM"]
[Tue Dec 02 02:11:17.607314 2025] [:error] [pid 18826:tid 18841] [client 103.65.236.149:55589] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aS3aRc44B8ytyS-T2Ii7HQAAAI0"]
[Tue Dec 02 02:11:18.000351 2025] [:error] [pid 18735:tid 18781] [client 103.65.236.149:59485] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aS3aRSObBdpXdl5ZEt_43wAAARE"]
[Tue Dec 02 03:50:06.228450 2025] [:error] [pid 3649:tid 3730] [client 43.157.147.3:47432] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aS3xbrwjL4uqC6YFjxFt-QAAAJM"]
[Tue Dec 02 05:14:30.336991 2025] [:error] [pid 3647:tid 3659] [client 113.219.218.197:37334] [client 113.219.218.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aS4FNlJaqGDFgh_0XI-6dwAAAAY"]
[Tue Dec 02 06:00:17.283606 2025] [:error] [pid 3648:tid 3698] [client 170.64.172.231:44018] [client 170.64.172.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS4P8eQEp5icp6XOJr3srgAAAE4"]
[Tue Dec 02 06:00:18.290903 2025] [:error] [pid 3649:tid 3735] [client 170.64.172.231:43046] [client 170.64.172.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS4P8rwjL4uqC6YFjxGNNgAAAJg"]
[Tue Dec 02 06:06:41.861003 2025] [:error] [pid 3760:tid 3786] [client 3.108.59.176:49812] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aS4RcVjLYEjdWVcKgVWFawAAANg"]
[Tue Dec 02 06:06:42.496724 2025] [:error] [pid 5273:tid 5314] [client 3.108.59.176:49822] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_version.php"] [unique_id "aS4RciMmXO5H1kNwHHVg8wAAAYw"]
[Tue Dec 02 06:06:43.126641 2025] [:error] [pid 3648:tid 3689] [client 3.108.59.176:49838] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/serverinfo.php"] [unique_id "aS4Rc-QEp5icp6XOJr3uxwAAAEU"]
[Tue Dec 02 06:06:43.761734 2025] [:error] [pid 5272:tid 5277] [client 3.108.59.176:49842] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.php"] [unique_id "aS4Rc-wbFoRzPGfZYVR-GAAAAUI"]
[Tue Dec 02 06:06:44.391453 2025] [:error] [pid 3648:tid 3700] [client 3.108.59.176:49844] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug.php"] [unique_id "aS4RdOQEp5icp6XOJr3uzQAAAFA"]
[Tue Dec 02 06:06:45.039697 2025] [:error] [pid 5272:tid 5288] [client 3.108.59.176:49848] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/diagnostic.php"] [unique_id "aS4RdewbFoRzPGfZYVR-HgAAAU0"]
[Tue Dec 02 06:06:45.668613 2025] [:error] [pid 5232:tid 5235] [client 3.108.59.176:49850] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phptest.php"] [unique_id "aS4RdQApmO-auDy1ob705wAAAQE"]
[Tue Dec 02 06:06:46.302819 2025] [:error] [pid 3648:tid 3699] [client 3.108.59.176:49866] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/check.php"] [unique_id "aS4RduQEp5icp6XOJr3uzgAAAE8"]
[Tue Dec 02 06:06:46.945157 2025] [:error] [pid 5272:tid 5285] [client 3.108.59.176:49874] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/probe.php"] [unique_id "aS4RduwbFoRzPGfZYVR-JQAAAUo"]
[Tue Dec 02 06:06:47.574361 2025] [:error] [pid 5273:tid 5311] [client 3.108.59.176:49890] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aS4RdyMmXO5H1kNwHHVg9AAAAYk"]
[Tue Dec 02 06:06:48.197925 2025] [:error] [pid 3649:tid 3719] [client 3.108.59.176:49898] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aS4ReLwjL4uqC6YFjxGPiQAAAIg"]
[Tue Dec 02 06:06:48.827962 2025] [:error] [pid 5273:tid 5318] [client 3.108.59.176:58506] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aS4ReCMmXO5H1kNwHHVg9gAAAZA"]
[Tue Dec 02 06:06:49.460328 2025] [:error] [pid 3648:tid 3684] [client 3.108.59.176:58514] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aS4ReeQEp5icp6XOJr3u0QAAAEA"]
[Tue Dec 02 06:06:50.103214 2025] [:error] [pid 5272:tid 5280] [client 3.108.59.176:58520] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aS4ReuwbFoRzPGfZYVR-LQAAAUU"]
[Tue Dec 02 06:06:50.733673 2025] [:error] [pid 5273:tid 5316] [client 3.108.59.176:58530] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aS4ReiMmXO5H1kNwHHVg_AAAAY4"]
[Tue Dec 02 06:06:51.369634 2025] [:error] [pid 5232:tid 5240] [client 3.108.59.176:58546] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info_php.php"] [unique_id "aS4RewApmO-auDy1ob707gAAAQY"]
[Tue Dec 02 06:06:51.997411 2025] [:error] [pid 5232:tid 5255] [client 3.108.59.176:58556] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php-info.php"] [unique_id "aS4RewApmO-auDy1ob708AAAARU"]
[Tue Dec 02 06:06:52.635113 2025] [:error] [pid 3648:tid 3688] [client 3.108.59.176:58568] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infophp.php"] [unique_id "aS4RfOQEp5icp6XOJr3u0gAAAEQ"]
[Tue Dec 02 06:06:53.270687 2025] [:error] [pid 5232:tid 5244] [client 3.108.59.176:58572] [client 3.108.59.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testphp.php"] [unique_id "aS4RfQApmO-auDy1ob709wAAAQo"]
[Tue Dec 02 06:06:53.901136 2025] [:error] [pid 3647:tid 3664] [client 3.108.59.176:58582] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS4RfVJaqGDFgh_0XI_GrwAAAAs"]
[Tue Dec 02 06:06:54.530964 2025] [:error] [pid 3647:tid 3658] [client 3.108.59.176:58590] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aS4RflJaqGDFgh_0XI_GsQAAAAU"]
[Tue Dec 02 06:06:55.157771 2025] [:error] [pid 3760:tid 3774] [client 3.108.59.176:58598] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aS4Rf1jLYEjdWVcKgVWFfQAAAMw"]
[Tue Dec 02 06:06:55.795641 2025] [:error] [pid 5272:tid 5297] [client 3.108.59.176:58610] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.remote"] [unique_id "aS4Rf-wbFoRzPGfZYVR-RgAAAVY"]
[Tue Dec 02 06:06:56.425021 2025] [:error] [pid 5232:tid 5246] [client 3.108.59.176:58612] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aS4RgAApmO-auDy1ob70_QAAAQw"]
[Tue Dec 02 06:06:57.052647 2025] [:error] [pid 5272:tid 5284] [client 3.108.59.176:58624] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aS4RgewbFoRzPGfZYVR-TAAAAUk"]
[Tue Dec 02 06:06:57.677776 2025] [:error] [pid 3649:tid 3726] [client 3.108.59.176:58636] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aS4RgbwjL4uqC6YFjxGPjwAAAI8"]
[Tue Dec 02 06:06:58.312002 2025] [:error] [pid 5273:tid 5321] [client 3.108.59.176:58644] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aS4RgiMmXO5H1kNwHHVhCAAAAZM"]
[Tue Dec 02 06:06:58.946152 2025] [:error] [pid 3647:tid 3662] [client 3.108.59.176:34340] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aS4RglJaqGDFgh_0XI_GtgAAAAk"]
[Tue Dec 02 06:07:00.581798 2025] [:error] [pid 3649:tid 3712] [client 3.108.59.176:34352] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aS4RhLwjL4uqC6YFjxGPlgAAAIE"]
[Tue Dec 02 06:07:01.208788 2025] [:error] [pid 5232:tid 5256] [client 3.108.59.176:34356] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aS4RhQApmO-auDy1ob71BQAAARY"]
[Tue Dec 02 06:07:01.835164 2025] [:error] [pid 5272:tid 5287] [client 3.108.59.176:34358] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aS4RhewbFoRzPGfZYVR-YQAAAUw"]
[Tue Dec 02 06:07:02.115119 2025] [:error] [pid 3647:tid 3662] [client 3.108.59.176:34340] [client 3.108.59.176] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "179.160.253.181_4653d473d6ec72d10eb80e05ec511aff887191b4"): Internal error (specific information not available) [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aS4RglJaqGDFgh_0XI_GtgAAAAk"]
[Tue Dec 02 06:07:02.469100 2025] [:error] [pid 3647:tid 3676] [client 3.108.59.176:34370] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.1"] [unique_id "aS4RhlJaqGDFgh_0XI_GuwAAABc"]
[Tue Dec 02 06:07:03.108836 2025] [:error] [pid 3760:tid 3785] [client 3.108.59.176:34372] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.2"] [unique_id "aS4Rh1jLYEjdWVcKgVWFiQAAANc"]
[Tue Dec 02 06:07:03.738906 2025] [:error] [pid 3760:tid 3778] [client 3.108.59.176:34382] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod.local"] [unique_id "aS4Rh1jLYEjdWVcKgVWFjwAAANA"]
[Tue Dec 02 06:07:04.366680 2025] [:error] [pid 3648:tid 3697] [client 3.108.59.176:34390] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev.local"] [unique_id "aS4RiOQEp5icp6XOJr3u2QAAAE0"]
[Tue Dec 02 06:07:05.002730 2025] [:error] [pid 3647:tid 3673] [client 3.108.59.176:34398] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/.env"] [unique_id "aS4RiVJaqGDFgh_0XI_GwwAAABQ"]
[Tue Dec 02 06:07:05.627040 2025] [:error] [pid 5232:tid 5257] [client 3.108.59.176:34412] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib/.env"] [unique_id "aS4RiQApmO-auDy1ob71EAAAARc"]
[Tue Dec 02 06:07:06.253160 2025] [:error] [pid 3649:tid 3727] [client 3.108.59.176:34428] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lab/.env"] [unique_id "aS4RirwjL4uqC6YFjxGPngAAAJA"]
[Tue Dec 02 06:07:06.882274 2025] [:error] [pid 5232:tid 5236] [client 3.108.59.176:34434] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/cronlab/.env"] [unique_id "aS4RigApmO-auDy1ob71EgAAAQI"]
[Tue Dec 02 06:07:07.516920 2025] [:error] [pid 3760:tid 3774] [client 3.108.59.176:34446] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/cron/.env"] [unique_id "aS4Ri1jLYEjdWVcKgVWFlwAAAMw"]
[Tue Dec 02 06:07:08.154306 2025] [:error] [pid 3648:tid 3705] [client 3.108.59.176:34456] [client 3.108.59.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env"] [unique_id "aS4RjOQEp5icp6XOJr3u4wAAAFU"]
[Tue Dec 02 11:00:20.277808 2025] [:error] [pid 3648:tid 3686] [client 170.64.172.231:52412] [client 170.64.172.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS5WROQEp5icp6XOJr1R1wAAAEI"]
[Tue Dec 02 11:00:21.312458 2025] [:error] [pid 3648:tid 3690] [client 170.64.172.231:47886] [client 170.64.172.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS5WReQEp5icp6XOJr1R2AAAAEY"]
[Tue Dec 02 11:15:27.113235 2025] [:error] [pid 5272:tid 5290] [client 125.75.66.97:42037] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aS5Zz-wbFoRzPGfZYVTuXAAAAU8"]
[Tue Dec 02 12:08:16.754326 2025] [rewrite:error] [pid 3760:tid 3768] [client 107.172.195.199:33578] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Tue Dec 02 15:59:24.629558 2025] [:error] [pid 48650:tid 48662] [client 62.60.131.162:50278] [client 62.60.131.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aS6cXIQuWSn3xrJsXbksiwAAAcc"]
[Tue Dec 02 17:11:00.816813 2025] [:error] [pid 48650:tid 48677] [client 170.106.148.137:59800] [client 170.106.148.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aS6tJIQuWSn3xrJsXblLvgAAAdY"]
[Tue Dec 02 18:22:59.996495 2025] [:error] [pid 5232:tid 5255] [client 213.21.239.4:43114] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/data/.svn/wc.db"] [unique_id "aS6-AwApmO-auDy1ob7cJQAAARU"]
[Tue Dec 02 18:22:59.998391 2025] [:error] [pid 5272:tid 5278] [client 213.21.239.4:43190] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/amphtml/.svn/wc.db"] [unique_id "aS6-A-wbFoRzPGfZYVRLDQAAAUM"]
[Tue Dec 02 18:23:00.000558 2025] [:error] [pid 5273:tid 5315] [client 213.21.239.4:43166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/wc.db"] [unique_id "aS6-AyMmXO5H1kNwHHUpdQAAAY0"]
[Tue Dec 02 18:23:00.000815 2025] [:error] [pid 3760:tid 3780] [client 213.21.239.4:43284] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aS6-A1jLYEjdWVcKgVVSYAAAANI"]
[Tue Dec 02 18:23:00.007294 2025] [:error] [pid 5273:tid 5306] [client 213.21.239.4:43154] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/content../.svn/wc.db"] [unique_id "aS6-BCMmXO5H1kNwHHUpdgAAAYQ"]
[Tue Dec 02 18:23:00.008004 2025] [:error] [pid 5272:tid 5283] [client 213.21.239.4:43196] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/admin/.svn/wc.db"] [unique_id "aS6-BOwbFoRzPGfZYVRLDgAAAUg"]
[Tue Dec 02 18:23:00.008944 2025] [:error] [pid 48650:tid 48678] [client 213.21.239.4:43156] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/api/.svn/wc.db"] [unique_id "aS6-BIQuWSn3xrJsXblssgAAAdc"]
[Tue Dec 02 18:23:00.008992 2025] [:error] [pid 3649:tid 3728] [client 213.21.239.4:43192] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/backup/.svn/wc.db"] [unique_id "aS6-BLwjL4uqC6YFjxF69AAAAJE"]
[Tue Dec 02 18:23:00.009904 2025] [:error] [pid 3760:tid 3781] [client 213.21.239.4:43218] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/aomanalyzer/.svn/wc.db"] [unique_id "aS6-BFjLYEjdWVcKgVVSYQAAANM"]
[Tue Dec 02 18:23:00.010073 2025] [:error] [pid 3648:tid 3707] [client 213.21.239.4:43262] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aS6-BOQEp5icp6XOJr3JIAAAAFc"]
[Tue Dec 02 18:23:00.013061 2025] [:error] [pid 3649:tid 3726] [client 213.21.239.4:43294] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/blog/.svn/wc.db"] [unique_id "aS6-BLwjL4uqC6YFjxF69QAAAI8"]
[Tue Dec 02 18:23:00.014193 2025] [:error] [pid 5232:tid 5250] [client 213.21.239.4:43312] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/assets../.svn/wc.db"] [unique_id "aS6-BAApmO-auDy1ob7cJgAAARA"]
[Tue Dec 02 18:23:00.015080 2025] [:error] [pid 3649:tid 3724] [client 213.21.239.4:43316] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/build/.svn/wc.db"] [unique_id "aS6-BLwjL4uqC6YFjxF69gAAAI0"]
[Tue Dec 02 18:23:00.016650 2025] [:error] [pid 3648:tid 3700] [client 213.21.239.4:43100] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause../wc.db"] [unique_id "aS6-BOQEp5icp6XOJr3JIQAAAFA"]
[Tue Dec 02 18:23:00.016793 2025] [:error] [pid 3649:tid 3733] [client 213.21.239.4:43178] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/common/.svn/wc.db"] [unique_id "aS6-BLwjL4uqC6YFjxF69wAAAJY"]
[Tue Dec 02 18:23:00.018219 2025] [:error] [pid 3648:tid 3699] [client 213.21.239.4:43122] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/cms/.svn/wc.db"] [unique_id "aS6-BOQEp5icp6XOJr3JIgAAAE8"]
[Tue Dec 02 18:23:00.019115 2025] [:error] [pid 5232:tid 5245] [client 213.21.239.4:43246] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/beta/.svn/wc.db"] [unique_id "aS6-BAApmO-auDy1ob7cJwAAAQs"]
[Tue Dec 02 18:23:00.019133 2025] [:error] [pid 3647:tid 3655] [client 213.21.239.4:43278] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/application/.svn/wc.db"] [unique_id "aS6-BFJaqGDFgh_0XI-F_QAAAAI"]
[Tue Dec 02 18:23:00.019775 2025] [:error] [pid 5232:tid 5246] [client 213.21.239.4:43302] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/dev/.svn/wc.db"] [unique_id "aS6-BAApmO-auDy1ob7cKAAAAQw"]
[Tue Dec 02 18:23:00.025662 2025] [:error] [pid 3648:tid 3692] [client 213.21.239.4:43180] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.svn/wc.db"] [unique_id "aS6-BOQEp5icp6XOJr3JIwAAAEg"]
[Tue Dec 02 18:23:00.028754 2025] [:error] [pid 3760:tid 3765] [client 213.21.239.4:43134] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/developer/.svn/wc.db"] [unique_id "aS6-BFjLYEjdWVcKgVVSYgAAAMM"]
[Tue Dec 02 18:23:00.029172 2025] [:error] [pid 3648:tid 3706] [client 213.21.239.4:43232] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/demo/.svn/wc.db"] [unique_id "aS6-BOQEp5icp6XOJr3JJAAAAFY"]
[Tue Dec 02 18:23:00.029295 2025] [:error] [pid 3760:tid 3785] [client 213.21.239.4:43146] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/css../.svn/wc.db"] [unique_id "aS6-BFjLYEjdWVcKgVVSYwAAANc"]
[Tue Dec 02 18:23:00.029602 2025] [:error] [pid 5232:tid 5248] [client 213.21.239.4:43212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/a/.svn/wc.db"] [unique_id "aS6-BAApmO-auDy1ob7cKQAAAQ4"]
[Tue Dec 02 18:23:00.030034 2025] [:error] [pid 3648:tid 3685] [client 213.21.239.4:43090] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/database/.svn/wc.db"] [unique_id "aS6-BOQEp5icp6XOJr3JJQAAAEE"]
[Tue Dec 02 18:23:03.799309 2025] [:error] [pid 48650:tid 48660] [client 213.21.239.4:45362] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause/.svn/wc.db"] [unique_id "aS6-B4QuWSn3xrJsXblsxwAAAcU"]
[Tue Dec 02 18:23:03.803736 2025] [:error] [pid 5272:tid 5298] [client 213.21.239.4:45406] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au/..;/.svn/wc.db"] [unique_id "aS6-B-wbFoRzPGfZYVRLEgAAAVc"]
[Tue Dec 02 18:23:03.810141 2025] [:error] [pid 5273:tid 5315] [client 213.21.239.4:45440] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au../.svn/wc.db"] [unique_id "aS6-ByMmXO5H1kNwHHUpfgAAAY0"]
[Tue Dec 02 18:23:03.816170 2025] [:error] [pid 5273:tid 5311] [client 213.21.239.4:45354] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause/wc.db"] [unique_id "aS6-ByMmXO5H1kNwHHUpfwAAAYk"]
[Tue Dec 02 18:23:03.816788 2025] [:error] [pid 5272:tid 5291] [client 213.21.239.4:45372] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause/..;/.svn/wc.db"] [unique_id "aS6-B-wbFoRzPGfZYVRLEwAAAVA"]
[Tue Dec 02 18:23:03.819654 2025] [:error] [pid 3649:tid 3733] [client 213.21.239.4:45484] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au/.svn/wc.db;.."] [unique_id "aS6-B7wjL4uqC6YFjxF7AQAAAJY"]
[Tue Dec 02 18:23:03.820907 2025] [:error] [pid 3760:tid 3778] [client 213.21.239.4:45392] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause/.svn;/wc.db"] [unique_id "aS6-B1jLYEjdWVcKgVVSaAAAANA"]
[Tue Dec 02 18:23:03.821294 2025] [:error] [pid 5273:tid 5306] [client 213.21.239.4:45432] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause/static../.svn/wc.db"] [unique_id "aS6-ByMmXO5H1kNwHHUpgQAAAYQ"]
[Tue Dec 02 18:23:03.823694 2025] [:error] [pid 5232:tid 5234] [client 213.21.239.4:45550] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/flock/.svn/wc.db"] [unique_id "aS6-BwApmO-auDy1ob7cNwAAAQA"]
[Tue Dec 02 18:23:03.824181 2025] [:error] [pid 5232:tid 5252] [client 213.21.239.4:45548] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aS6-BwApmO-auDy1ob7cOAAAARI"]
[Tue Dec 02 18:23:03.825812 2025] [:error] [pid 48650:tid 48666] [client 213.21.239.4:45420] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause/;/.svn/wc.db"] [unique_id "aS6-B4QuWSn3xrJsXblszQAAAcs"]
[Tue Dec 02 18:23:03.830384 2025] [:error] [pid 5232:tid 5247] [client 213.21.239.4:45386] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause/.svn/wc.db;"] [unique_id "aS6-BwApmO-auDy1ob7cOQAAAQ0"]
[Tue Dec 02 18:23:03.831503 2025] [:error] [pid 3760:tid 3772] [client 213.21.239.4:45468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au/.svn/wc.db;"] [unique_id "aS6-B1jLYEjdWVcKgVVSagAAAMo"]
[Tue Dec 02 18:23:03.831507 2025] [:error] [pid 5232:tid 5235] [client 213.21.239.4:45512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au/;/.svn/wc.db"] [unique_id "aS6-BwApmO-auDy1ob7cOgAAAQE"]
[Tue Dec 02 18:23:03.831507 2025] [:error] [pid 5232:tid 5246] [client 213.21.239.4:45466] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause../.svn/wc.db"] [unique_id "aS6-BwApmO-auDy1ob7cOwAAAQw"]
[Tue Dec 02 18:23:03.833773 2025] [:error] [pid 5232:tid 5240] [client 213.21.239.4:45532] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/events../.svn/wc.db"] [unique_id "aS6-BwApmO-auDy1ob7cPAAAAQY"]
[Tue Dec 02 18:23:03.834954 2025] [:error] [pid 5232:tid 5257] [client 213.21.239.4:45390] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause/.svn/wc.db;.."] [unique_id "aS6-BwApmO-auDy1ob7cPQAAARc"]
[Tue Dec 02 18:23:03.837136 2025] [:error] [pid 5232:tid 5243] [client 213.21.239.4:45554] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au../wc.db"] [unique_id "aS6-BwApmO-auDy1ob7cPgAAAQk"]
[Tue Dec 02 18:23:03.839026 2025] [:error] [pid 48650:tid 48662] [client 213.21.239.4:45570] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au/.svn;/wc.db"] [unique_id "aS6-B4QuWSn3xrJsXblszgAAAcc"]
[Tue Dec 02 18:23:03.839716 2025] [:error] [pid 5232:tid 5248] [client 213.21.239.4:45456] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au/.svn/wc.db"] [unique_id "aS6-BwApmO-auDy1ob7cPwAAAQ4"]
[Tue Dec 02 18:23:03.841745 2025] [:error] [pid 5273:tid 5320] [client 213.21.239.4:45528] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au/static../.svn/wc.db"] [unique_id "aS6-ByMmXO5H1kNwHHUpggAAAZI"]
[Tue Dec 02 18:23:03.842056 2025] [:error] [pid 5232:tid 5237] [client 213.21.239.4:45462] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause/.svn/%0Awc.db"] [unique_id "aS6-BwApmO-auDy1ob7cQQAAAQM"]
[Tue Dec 02 18:23:03.843652 2025] [:error] [pid 5232:tid 5239] [client 213.21.239.4:45558] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au/wc.db"] [unique_id "aS6-BwApmO-auDy1ob7cQAAAAQU"]
[Tue Dec 02 18:23:03.845467 2025] [:error] [pid 5232:tid 5249] [client 213.21.239.4:45498] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/dot.svn/wc.db"] [unique_id "aS6-BwApmO-auDy1ob7cQgAAAQ8"]
[Tue Dec 02 18:23:03.845928 2025] [:error] [pid 5232:tid 5242] [client 213.21.239.4:45578] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www.measureyourcause.com.au/.svn/%0Awc.db"] [unique_id "aS6-BwApmO-auDy1ob7cQwAAAQg"]
[Tue Dec 02 18:23:07.804650 2025] [:error] [pid 3649:tid 3734] [client 213.21.239.4:45884] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aS6-C7wjL4uqC6YFjxF7BQAAAJc"]
[Tue Dec 02 18:23:07.805046 2025] [:error] [pid 3760:tid 3775] [client 213.21.239.4:46008] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.svn/wc.db"] [unique_id "aS6-C1jLYEjdWVcKgVVSbQAAAM0"]
[Tue Dec 02 18:23:07.813008 2025] [:error] [pid 3760:tid 3764] [client 213.21.239.4:45872] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.svn/wc.db;"] [unique_id "aS6-C1jLYEjdWVcKgVVScQAAAMI"]
[Tue Dec 02 18:23:07.814880 2025] [:error] [pid 5272:tid 5283] [client 213.21.239.4:46006] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aS6-C-wbFoRzPGfZYVRLGQAAAUg"]
[Tue Dec 02 18:23:07.822287 2025] [:error] [pid 3648:tid 3685] [client 213.21.239.4:45954] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JNQAAAEE"]
[Tue Dec 02 18:23:07.822461 2025] [:error] [pid 5232:tid 5249] [client 213.21.239.4:45916] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/.svn;/wc.db"] [unique_id "aS6-CwApmO-auDy1ob7cRgAAAQ8"]
[Tue Dec 02 18:23:07.827798 2025] [:error] [pid 3648:tid 3693] [client 213.21.239.4:46160] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/__MACOSX/.svn/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JNgAAAEk"]
[Tue Dec 02 18:23:07.829248 2025] [:error] [pid 5273:tid 5316] [client 213.21.239.4:46068] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/images../.svn/wc.db"] [unique_id "aS6-CyMmXO5H1kNwHHUplgAAAY4"]
[Tue Dec 02 18:23:07.833149 2025] [:error] [pid 3647:tid 3672] [client 213.21.239.4:46204] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/new/.svn/wc.db"] [unique_id "aS6-C1JaqGDFgh_0XI-GCwAAABM"]
[Tue Dec 02 18:23:07.834116 2025] [:error] [pid 5272:tid 5280] [client 213.21.239.4:46216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/old-cuburn/.svn/wc.db"] [unique_id "aS6-C-wbFoRzPGfZYVRLGgAAAUU"]
[Tue Dec 02 18:23:07.837748 2025] [:error] [pid 3648:tid 3703] [client 213.21.239.4:46094] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/svn/.svn/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JOgAAAFM"]
[Tue Dec 02 18:23:07.838191 2025] [:error] [pid 3648:tid 3695] [client 213.21.239.4:46088] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/img../.svn/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JOwAAAEs"]
[Tue Dec 02 18:23:07.839408 2025] [:error] [pid 5272:tid 5275] [client 213.21.239.4:46244] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/qa/.svn/wc.db"] [unique_id "aS6-C-wbFoRzPGfZYVRLHQAAAUA"]
[Tue Dec 02 18:23:07.839739 2025] [:error] [pid 5272:tid 5295] [client 213.21.239.4:46220] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/prod.svn/wc.db"] [unique_id "aS6-C-wbFoRzPGfZYVRLHAAAAVQ"]
[Tue Dec 02 18:23:07.840622 2025] [:error] [pid 3760:tid 3786] [client 213.21.239.4:46130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/live/.svn/wc.db"] [unique_id "aS6-C1jLYEjdWVcKgVVScgAAANg"]
[Tue Dec 02 18:23:07.842262 2025] [:error] [pid 3648:tid 3697] [client 213.21.239.4:46172] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/media../.svn/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JPAAAAE0"]
[Tue Dec 02 18:23:07.844422 2025] [:error] [pid 48650:tid 48666] [client 213.21.239.4:46194] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/m/.svn/wc.db"] [unique_id "aS6-C4QuWSn3xrJsXbls3QAAAcs"]
[Tue Dec 02 18:23:07.850465 2025] [:error] [pid 5232:tid 5253] [client 213.21.239.4:46248] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au../wc.db"] [unique_id "aS6-CwApmO-auDy1ob7cSAAAARM"]
[Tue Dec 02 18:23:07.850731 2025] [:error] [pid 48650:tid 48676] [client 213.21.239.4:46124] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/js../.svn/wc.db"] [unique_id "aS6-C4QuWSn3xrJsXbls3gAAAdU"]
[Tue Dec 02 18:23:07.854350 2025] [:error] [pid 5272:tid 5286] [client 213.21.239.4:46148] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/lib../.svn/wc.db"] [unique_id "aS6-C-wbFoRzPGfZYVRLHgAAAUs"]
[Tue Dec 02 18:23:07.854566 2025] [:error] [pid 3648:tid 3687] [client 213.21.239.4:46188] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/message-api/.svn/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JPQAAAEM"]
[Tue Dec 02 18:23:07.855662 2025] [:error] [pid 3649:tid 3716] [client 213.21.239.4:46232] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/prod/.svn/wc.db"] [unique_id "aS6-C7wjL4uqC6YFjxF7DQAAAIU"]
[Tue Dec 02 18:23:07.858747 2025] [:error] [pid 3649:tid 3723] [client 213.21.239.4:46260] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au/wc.db"] [unique_id "aS6-C7wjL4uqC6YFjxF7DgAAAIw"]
[Tue Dec 02 18:23:07.860223 2025] [:error] [pid 3648:tid 3688] [client 213.21.239.4:46234] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/public/.svn/wc.db"] [unique_id "aS6-C-QEp5icp6XOJr3JPgAAAEQ"]
[Tue Dec 02 18:23:11.796724 2025] [:error] [pid 5273:tid 5305] [client 213.21.239.4:46512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www/;/.svn/wc.db"] [unique_id "aS6-DyMmXO5H1kNwHHUpnAAAAYM"]
[Tue Dec 02 18:23:11.802671 2025] [:error] [pid 5273:tid 5312] [client 213.21.239.4:46436] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au/static../.svn/wc.db"] [unique_id "aS6-DyMmXO5H1kNwHHUpnQAAAYo"]
[Tue Dec 02 18:23:11.803883 2025] [:error] [pid 48650:tid 48670] [client 213.21.239.4:46598] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/repository/.svn/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls5QAAAc8"]
[Tue Dec 02 18:23:11.805260 2025] [:error] [pid 48650:tid 48658] [client 213.21.239.4:46634] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www../.svn/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls5wAAAcM"]
[Tue Dec 02 18:23:11.808168 2025] [:error] [pid 48650:tid 48663] [client 213.21.239.4:46636] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/s3/.svn/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls6QAAAcg"]
[Tue Dec 02 18:23:11.808661 2025] [:error] [pid 48650:tid 48666] [client 213.21.239.4:46438] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/www/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls6AAAAcs"]
[Tue Dec 02 18:23:11.808924 2025] [:error] [pid 3648:tid 3706] [client 213.21.239.4:46484] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/www/.svn;/wc.db"] [unique_id "aS6-D-QEp5icp6XOJr3JRAAAAFY"]
[Tue Dec 02 18:23:11.815941 2025] [:error] [pid 48650:tid 48672] [client 213.21.239.4:46744] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/wc.db;.."] [unique_id "aS6-D4QuWSn3xrJsXbls7QAAAdE"]
[Tue Dec 02 18:23:11.816777 2025] [:error] [pid 48650:tid 48667] [client 213.21.239.4:46450] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www/.svn/wc.db;"] [unique_id "aS6-D4QuWSn3xrJsXbls7gAAAcw"]
[Tue Dec 02 18:23:11.817593 2025] [:error] [pid 48650:tid 48674] [client 213.21.239.4:46452] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www/.svn/wc.db;.."] [unique_id "aS6-D4QuWSn3xrJsXbls7wAAAdM"]
[Tue Dec 02 18:23:11.821014 2025] [:error] [pid 48650:tid 48664] [client 213.21.239.4:46468] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/repos/.svn/wc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls8gAAAck"]
[Tue Dec 02 18:23:11.831976 2025] [:error] [pid 48650:tid 48671] [client 213.21.239.4:46478] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www/.svn/%0Awc.db"] [unique_id "aS6-D4QuWSn3xrJsXbls9QAAAdA"]
[Tue Dec 02 18:23:11.832890 2025] [:error] [pid 5232:tid 5237] [client 213.21.239.4:46682] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www/..;/.svn/wc.db"] [unique_id "aS6-DwApmO-auDy1ob7cTwAAAQM"]
[Tue Dec 02 18:23:11.844028 2025] [:error] [pid 5272:tid 5296] [client 213.21.239.4:46764] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/www../wc.db"] [unique_id "aS6-D-wbFoRzPGfZYVRLKwAAAVU"]
[Tue Dec 02 18:23:11.844824 2025] [:error] [pid 5272:tid 5279] [client 213.21.239.4:46872] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au../.svn/wc.db"] [unique_id "aS6-D-wbFoRzPGfZYVRLLAAAAUQ"]
[Tue Dec 02 18:23:11.847592 2025] [:error] [pid 5272:tid 5290] [client 213.21.239.4:46652] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au/..;/.svn/wc.db"] [unique_id "aS6-D-wbFoRzPGfZYVRLLQAAAU8"]
[Tue Dec 02 18:23:11.848230 2025] [:error] [pid 5232:tid 5258] [client 213.21.239.4:46672] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/wc.db"] [unique_id "aS6-DwApmO-auDy1ob7cUAAAARg"]
[Tue Dec 02 18:23:11.852023 2025] [:error] [pid 5232:tid 5249] [client 213.21.239.4:46828] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/shop/.svn/wc.db"] [unique_id "aS6-DwApmO-auDy1ob7cUQAAAQ8"]
[Tue Dec 02 18:23:11.853157 2025] [:error] [pid 5272:tid 5277] [client 213.21.239.4:46674] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/wc.db;"] [unique_id "aS6-D-wbFoRzPGfZYVRLLgAAAUI"]
[Tue Dec 02 18:23:11.854213 2025] [:error] [pid 5272:tid 5292] [client 213.21.239.4:46712] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/samples/.svn/wc.db"] [unique_id "aS6-D-wbFoRzPGfZYVRLLwAAAVE"]
[Tue Dec 02 18:23:11.861937 2025] [:error] [pid 5232:tid 5242] [client 213.21.239.4:46816] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www/.svn/wc.db"] [unique_id "aS6-DwApmO-auDy1ob7cUgAAAQg"]
[Tue Dec 02 18:23:11.863068 2025] [:error] [pid 3649:tid 3713] [client 213.21.239.4:46818] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/www/static../.svn/wc.db"] [unique_id "aS6-D7wjL4uqC6YFjxF7FgAAAII"]
[Tue Dec 02 18:23:11.864173 2025] [:error] [pid 3647:tid 3666] [client 213.21.239.4:46882] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au/;/.svn/wc.db"] [unique_id "aS6-D1JaqGDFgh_0XI-GDgAAAA0"]
[Tue Dec 02 18:23:11.864271 2025] [:error] [pid 5232:tid 5253] [client 213.21.239.4:46854] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn/%0Awc.db"] [unique_id "aS6-DwApmO-auDy1ob7cUwAAARM"]
[Tue Dec 02 18:23:11.867765 2025] [:error] [pid 3647:tid 3654] [client 213.21.239.4:46886] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/measureyourcause.com.au/.svn;/wc.db"] [unique_id "aS6-D1JaqGDFgh_0XI-GDwAAAAE"]
[Tue Dec 02 18:23:16.067680 2025] [:error] [pid 3760:tid 3785] [client 213.21.239.4:35500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/.svn/wc.db"] [unique_id "aS6-FFjLYEjdWVcKgVVShQAAANc"]
[Tue Dec 02 18:23:16.073541 2025] [:error] [pid 5272:tid 5297] [client 213.21.239.4:35432] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/site/.svn/wc.db"] [unique_id "aS6-FOwbFoRzPGfZYVRLOgAAAVY"]
[Tue Dec 02 18:23:16.075320 2025] [:error] [pid 3649:tid 3731] [client 213.21.239.4:35446] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aS6-FLwjL4uqC6YFjxF7HAAAAJQ"]
[Tue Dec 02 18:23:16.076219 2025] [:error] [pid 3649:tid 3711] [client 213.21.239.4:35456] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/static/.svn/wc.db"] [unique_id "aS6-FLwjL4uqC6YFjxF7HQAAAIA"]
[Tue Dec 02 18:23:16.076959 2025] [:error] [pid 3649:tid 3719] [client 213.21.239.4:35492] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/uat/.svn/wc.db"] [unique_id "aS6-FLwjL4uqC6YFjxF7HgAAAIg"]
[Tue Dec 02 18:23:16.085270 2025] [:error] [pid 5273:tid 5316] [client 213.21.239.4:35556] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/.svn/wc.db"] [unique_id "aS6-FCMmXO5H1kNwHHUpqgAAAY4"]
[Tue Dec 02 18:23:16.088493 2025] [:error] [pid 3760:tid 3777] [client 213.21.239.4:35558] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/wiki/.svn/wc.db"] [unique_id "aS6-FFjLYEjdWVcKgVVShgAAAM8"]
[Tue Dec 02 18:23:16.092028 2025] [:error] [pid 3648:tid 3689] [client 213.21.239.4:35612] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/.svn/wc.db"] [unique_id "aS6-FOQEp5icp6XOJr3JUQAAAEU"]
[Tue Dec 02 18:23:16.105316 2025] [:error] [pid 3648:tid 3705] [client 213.21.239.4:35656] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/store/.svn/wc.db"] [unique_id "aS6-FOQEp5icp6XOJr3JUgAAAFU"]
[Tue Dec 02 18:23:16.108273 2025] [:error] [pid 3760:tid 3784] [client 213.21.239.4:35632] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/.svn/wc.db"] [unique_id "aS6-FFjLYEjdWVcKgVVSiAAAANY"]
[Tue Dec 02 18:23:16.110937 2025] [:error] [pid 5272:tid 5281] [client 213.21.239.4:35640] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/staging/.svn/wc.db"] [unique_id "aS6-FOwbFoRzPGfZYVRLPQAAAUY"]
[Tue Dec 02 18:23:16.114034 2025] [:error] [pid 3648:tid 3696] [client 213.21.239.4:35624] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/.svn/wc.db"] [unique_id "aS6-FOQEp5icp6XOJr3JUwAAAEw"]
[Tue Dec 02 18:23:16.119245 2025] [:error] [pid 3648:tid 3702] [client 213.21.239.4:35670] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/web/.svn/wc.db"] [unique_id "aS6-FOQEp5icp6XOJr3JVQAAAFI"]
[Tue Dec 02 20:44:51.931178 2025] [rewrite:error] [pid 3649:tid 3723] [client 103.4.250.101:48804] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Wed Dec 03 00:35:47.484020 2025] [:error] [pid 47158:tid 47184] [client 14.215.163.132:45419] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aS8VY13-jeg4VwJRw7H0ogAAANg"]
[Wed Dec 03 02:11:36.781702 2025] [:error] [pid 47158:tid 47170] [client 165.227.121.227:57710] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS8r2F3-jeg4VwJRw7EwMgAAAMo"]
[Wed Dec 03 02:11:37.979118 2025] [:error] [pid 47067:tid 47077] [client 165.227.121.227:41138] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS8r2QcYJkWYuBnpVapZDwAAAAU"]
[Wed Dec 03 03:13:04.181297 2025] [:error] [pid 47067:tid 47079] [client 135.181.4.161:60654] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aS86QAcYJkWYuBnpVap9OwAAAAc"]
[Wed Dec 03 03:13:04.654768 2025] [:error] [pid 47067:tid 47096] [client 135.181.4.161:60660] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aS86QAcYJkWYuBnpVap9PQAAABg"]
[Wed Dec 03 03:13:05.789796 2025] [:error] [pid 47068:tid 47122] [client 135.181.4.161:55012] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aS86QSDFatpzeF4tcYW_xAAAAFY"]
[Wed Dec 03 05:40:51.555958 2025] [:error] [pid 33526:tid 33548] [client 195.178.110.14:58009] [client 195.178.110.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS9c42kHVvyO7JLEhwYJFgAAApQ"]
[Wed Dec 03 05:40:52.026749 2025] [:error] [pid 36048:tid 36065] [client 195.178.110.10:58508] [client 195.178.110.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS9c5BATOC5ACZsH0EJr6gAAAQ4"]
[Wed Dec 03 05:40:52.056674 2025] [:error] [pid 33336:tid 33359] [client 195.178.110.14:55620] [client 195.178.110.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS9c5F1BwcDaKU65W1UhzAAAAVI"]
[Wed Dec 03 05:40:52.518302 2025] [:error] [pid 33526:tid 33534] [client 195.178.110.10:56319] [client 195.178.110.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS9c5GkHVvyO7JLEhwYJGQAAAoY"]
[Wed Dec 03 05:40:52.770818 2025] [:error] [pid 33336:tid 33357] [client 195.178.110.11:52329] [client 195.178.110.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS9c5F1BwcDaKU65W1UhzQAAAVA"]
[Wed Dec 03 05:40:53.017747 2025] [:error] [pid 33559:tid 33564] [client 195.178.110.10:52902] [client 195.178.110.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS9c5RjwmvaY39XExDtmVgAAAsM"]
[Wed Dec 03 05:41:11.280427 2025] [:error] [pid 33411:tid 33419] [client 165.22.34.189:53310] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/v2/api-docs"] [unique_id "aS9c9waAszyHc_21rY_9BwAAAcI"]
[Wed Dec 03 05:41:12.276907 2025] [:error] [pid 33336:tid 33356] [client 165.22.34.189:53316] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/v3/api-docs"] [unique_id "aS9c-F1BwcDaKU65W1Uh8gAAAU8"]
[Wed Dec 03 05:41:13.285423 2025] [:error] [pid 46995:tid 47078] [client 165.22.34.189:53322] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aS9c-S49R77DGA8IkDAhIgAAAJg"]
[Wed Dec 03 05:41:14.278826 2025] [:error] [pid 33559:tid 33566] [client 165.22.34.189:53336] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/api/swagger.json"] [unique_id "aS9c-hjwmvaY39XExDtmbgAAAsU"]
[Wed Dec 03 05:41:15.281021 2025] [:error] [pid 33336:tid 33346] [client 165.22.34.189:53340] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/@vite/env"] [unique_id "aS9c-11BwcDaKU65W1Uh-AAAAUU"]
[Wed Dec 03 05:41:16.282304 2025] [:error] [pid 33479:tid 33491] [client 165.22.34.189:53342] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/actuator/env"] [unique_id "aS9c_HtPHKTrY8dx_x7D7gAAAko"]
[Wed Dec 03 05:41:17.280451 2025] [:error] [pid 46994:tid 47028] [client 165.22.34.189:53352] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aS9c_QHTXie6yvgtpe5oDQAAAEM"]
[Wed Dec 03 05:41:18.287956 2025] [:error] [pid 47089:tid 47094] [client 165.22.34.189:60618] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/server"] [unique_id "aS9c_gd82EVr621c8CULzAAAAMM"]
[Wed Dec 03 05:41:19.289032 2025] [:error] [pid 33559:tid 33571] [client 165.22.34.189:60624] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aS9c_xjwmvaY39XExDtmdAAAAso"]
[Wed Dec 03 05:41:21.281368 2025] [:error] [pid 46995:tid 47053] [client 165.22.34.189:60636] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about"] [unique_id "aS9dAS49R77DGA8IkDAhJwAAAIA"]
[Wed Dec 03 05:41:22.286616 2025] [:error] [pid 33526:tid 33551] [client 165.22.34.189:60640] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/debug/default/view"] [unique_id "aS9dAmkHVvyO7JLEhwYJVAAAApc"]
[Wed Dec 03 05:41:23.289500 2025] [:error] [pid 47089:tid 47114] [client 165.22.34.189:60642] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/v2/_catalog"] [unique_id "aS9dAwd82EVr621c8CUL0gAAANc"]
[Wed Dec 03 05:41:24.291030 2025] [:error] [pid 33526:tid 33528] [client 165.22.34.189:60656] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aS9dBGkHVvyO7JLEhwYJWAAAAoA"]
[Wed Dec 03 05:41:25.284951 2025] [:error] [pid 33336:tid 33345] [client 165.22.34.189:60662] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/server-status"] [unique_id "aS9dBV1BwcDaKU65W1UiAgAAAUQ"]
[Wed Dec 03 05:41:26.283184 2025] [:error] [pid 33526:tid 33546] [client 165.22.34.189:60676] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/login.action"] [unique_id "aS9dBmkHVvyO7JLEhwYJXAAAApI"]
[Wed Dec 03 05:41:27.291336 2025] [:error] [pid 33559:tid 33564] [client 165.22.34.189:60686] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/_all_dbs"] [unique_id "aS9dBxjwmvaY39XExDtmfQAAAsM"]
[Wed Dec 03 05:41:28.300184 2025] [:error] [pid 33336:tid 33363] [client 165.22.34.189:58396] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.DS_Store"] [unique_id "aS9dCF1BwcDaKU65W1UiBQAAAVY"]
[Wed Dec 03 05:41:29.291609 2025] [:error] [pid 33526:tid 33531] [client 165.22.34.189:58400] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aS9dCWkHVvyO7JLEhwYJYAAAAoM"]
[Wed Dec 03 05:41:31.284566 2025] [:error] [pid 33412:tid 33455] [client 165.22.34.189:58414] [client 165.22.34.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS9dC0cTQQQWx2_k4Fc43wAAAgs"]
[Wed Dec 03 05:41:32.296182 2025] [:error] [pid 33336:tid 33365] [client 165.22.34.189:58430] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aS9dDF1BwcDaKU65W1UiCgAAAVg"]
[Wed Dec 03 05:41:33.290925 2025] [:error] [pid 33479:tid 33489] [client 165.22.34.189:58446] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.json"] [unique_id "aS9dDXtPHKTrY8dx_x7D_wAAAkg"]
[Wed Dec 03 05:41:34.296004 2025] [:error] [pid 33336:tid 33343] [client 165.22.34.189:58458] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/telescope/requests"] [unique_id "aS9dDl1BwcDaKU65W1UiEAAAAUI"]
[Wed Dec 03 05:41:35.295675 2025] [:error] [pid 46995:tid 47075] [client 165.22.34.189:58468] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aS9dDy49R77DGA8IkDAhNAAAAJU"]
[Wed Dec 03 05:41:36.300330 2025] [:error] [pid 33336:tid 33355] [client 165.22.34.189:58480] [client 165.22.34.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aS9dEF1BwcDaKU65W1UiFQAAAU4"]
[Wed Dec 03 06:42:30.183636 2025] [:error] [pid 33479:tid 33482] [client 49.7.227.204:59772] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aS9rVntPHKTrY8dx_x7PsAAAAkE"]
[Wed Dec 03 10:20:37.616426 2025] [:error] [pid 11940:tid 11960] [client 13.38.56.233:48248] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_version.php"] [unique_id "aS-edTcDdx05OuLeesPMOQAAAdI"]
[Wed Dec 03 10:20:38.619382 2025] [:error] [pid 54695:tid 54717] [client 13.38.56.233:48360] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/serverinfo.php"] [unique_id "aS-edmrRT4nTHsfUu07rRgAAAVI"]
[Wed Dec 03 10:20:39.624274 2025] [:error] [pid 24019:tid 24040] [client 13.38.56.233:48490] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.php"] [unique_id "aS-ed5kVRhF9Pu1FX0MhhAAAAJI"]
[Wed Dec 03 10:20:40.630401 2025] [:error] [pid 24019:tid 24036] [client 13.38.56.233:48626] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug.php"] [unique_id "aS-eeJkVRhF9Pu1FX0MhhgAAAI4"]
[Wed Dec 03 10:20:41.634457 2025] [:error] [pid 21970:tid 21973] [client 13.38.56.233:48742] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/diagnostic.php"] [unique_id "aS-eeWYwAeqEfyJIWdSYUgAAAAA"]
[Wed Dec 03 10:20:42.627746 2025] [:error] [pid 21970:tid 21985] [client 13.38.56.233:48866] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phptest.php"] [unique_id "aS-eemYwAeqEfyJIWdSYVQAAAAk"]
[Wed Dec 03 10:20:43.622061 2025] [:error] [pid 11940:tid 11945] [client 13.38.56.233:49004] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/check.php"] [unique_id "aS-eezcDdx05OuLeesPMRQAAAcM"]
[Wed Dec 03 10:20:44.624983 2025] [:error] [pid 22014:tid 22063] [client 13.38.56.233:49122] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/probe.php"] [unique_id "aS-efAgpXEQej7y9Y6Yt_gAAARE"]
[Wed Dec 03 10:20:45.631448 2025] [:error] [pid 64775:tid 64788] [client 13.38.56.233:49252] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aS-efTCfrfdP2K_u39c8sQAAAYs"]
[Wed Dec 03 10:20:46.639878 2025] [:error] [pid 24019:tid 24041] [client 13.38.56.233:49380] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aS-efpkVRhF9Pu1FX0MhkQAAAJM"]
[Wed Dec 03 10:20:47.644637 2025] [:error] [pid 64775:tid 64800] [client 13.38.56.233:49482] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aS-efzCfrfdP2K_u39c8tAAAAZc"]
[Wed Dec 03 10:20:48.638218 2025] [:error] [pid 22014:tid 22061] [client 13.38.56.233:49580] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aS-egAgpXEQej7y9Y6YuAgAAAQ8"]
[Wed Dec 03 10:20:49.643373 2025] [:error] [pid 22014:tid 22065] [client 13.38.56.233:49704] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aS-egQgpXEQej7y9Y6YuBgAAARM"]
[Wed Dec 03 10:20:50.648348 2025] [:error] [pid 22014:tid 22053] [client 13.38.56.233:49810] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aS-egggpXEQej7y9Y6YuCwAAAQc"]
[Wed Dec 03 10:20:51.651567 2025] [:error] [pid 22014:tid 22070] [client 13.38.56.233:49936] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info_php.php"] [unique_id "aS-egwgpXEQej7y9Y6YuEAAAARg"]
[Wed Dec 03 10:20:52.644003 2025] [:error] [pid 21970:tid 21988] [client 13.38.56.233:50066] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php-info.php"] [unique_id "aS-ehGYwAeqEfyJIWdSYWAAAAAw"]
[Wed Dec 03 10:20:53.639907 2025] [:error] [pid 21970:tid 21993] [client 13.38.56.233:50194] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infophp.php"] [unique_id "aS-ehWYwAeqEfyJIWdSYWgAAABE"]
[Wed Dec 03 10:20:54.644390 2025] [:error] [pid 11940:tid 11960] [client 13.38.56.233:50322] [client 13.38.56.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testphp.php"] [unique_id "aS-ehjcDdx05OuLeesPMWwAAAdI"]
[Wed Dec 03 10:20:55.637142 2025] [:error] [pid 24019:tid 24044] [client 13.38.56.233:50468] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS-eh5kVRhF9Pu1FX0MhngAAAJY"]
[Wed Dec 03 10:20:56.641849 2025] [:error] [pid 22014:tid 22062] [client 13.38.56.233:50600] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aS-eiAgpXEQej7y9Y6YuHAAAARA"]
[Wed Dec 03 10:20:57.636093 2025] [:error] [pid 64775:tid 64793] [client 13.38.56.233:50754] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aS-eiTCfrfdP2K_u39c80wAAAZA"]
[Wed Dec 03 10:20:58.630271 2025] [:error] [pid 22014:tid 22051] [client 13.38.56.233:50910] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.remote"] [unique_id "aS-eiggpXEQej7y9Y6YuHwAAAQU"]
[Wed Dec 03 10:20:59.634756 2025] [:error] [pid 11940:tid 11958] [client 13.38.56.233:51048] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aS-eizcDdx05OuLeesPMZgAAAdA"]
[Wed Dec 03 10:21:00.632766 2025] [:error] [pid 21970:tid 21997] [client 13.38.56.233:51174] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aS-ejGYwAeqEfyJIWdSYWwAAABU"]
[Wed Dec 03 10:21:01.629493 2025] [:error] [pid 22014:tid 22049] [client 13.38.56.233:51312] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aS-ejQgpXEQej7y9Y6YuJAAAAQM"]
[Wed Dec 03 10:21:02.623796 2025] [:error] [pid 22083:tid 22094] [client 13.38.56.233:51430] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aS-ejvicvKZCy0M9-zzawwAAAEk"]
[Wed Dec 03 10:21:03.617745 2025] [:error] [pid 64775:tid 64799] [client 13.38.56.233:51554] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aS-ejzCfrfdP2K_u39c82AAAAZY"]
[Wed Dec 03 10:21:04.614467 2025] [:error] [pid 64775:tid 64786] [client 13.38.56.233:51696] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "aS-ekDCfrfdP2K_u39c82gAAAYk"]
[Wed Dec 03 10:21:05.607956 2025] [:error] [pid 22013:tid 22021] [client 13.38.56.233:51816] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aS-ekYpUogO0aqsrpMWYBQAAAMI"]
[Wed Dec 03 10:21:06.603164 2025] [:error] [pid 24019:tid 24035] [client 13.38.56.233:51984] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aS-ekpkVRhF9Pu1FX0MhsAAAAI0"]
[Wed Dec 03 10:21:07.608737 2025] [:error] [pid 24019:tid 24037] [client 13.38.56.233:52184] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aS-ek5kVRhF9Pu1FX0MhtAAAAI8"]
[Wed Dec 03 10:21:08.613469 2025] [:error] [pid 54695:tid 54704] [client 13.38.56.233:52350] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.1"] [unique_id "aS-elGrRT4nTHsfUu07rYQAAAUU"]
[Wed Dec 03 10:21:09.607673 2025] [:error] [pid 11940:tid 11956] [client 13.38.56.233:52568] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.2"] [unique_id "aS-elTcDdx05OuLeesPMbQAAAc4"]
[Wed Dec 03 10:21:10.602204 2025] [:error] [pid 64775:tid 64779] [client 13.38.56.233:52784] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod.local"] [unique_id "aS-eljCfrfdP2K_u39c84wAAAYI"]
[Wed Dec 03 10:21:11.597534 2025] [:error] [pid 64775:tid 64801] [client 13.38.56.233:52902] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev.local"] [unique_id "aS-elzCfrfdP2K_u39c85gAAAZg"]
[Wed Dec 03 10:21:12.593367 2025] [:error] [pid 22013:tid 22024] [client 13.38.56.233:53096] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/.env"] [unique_id "aS-emIpUogO0aqsrpMWYCAAAAMU"]
[Wed Dec 03 10:21:13.602677 2025] [:error] [pid 22013:tid 22036] [client 13.38.56.233:53326] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lib/.env"] [unique_id "aS-emYpUogO0aqsrpMWYCwAAANE"]
[Wed Dec 03 10:21:14.608783 2025] [:error] [pid 11940:tid 11955] [client 13.38.56.233:53522] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/lab/.env"] [unique_id "aS-emjcDdx05OuLeesPMcwAAAc0"]
[Wed Dec 03 10:21:15.602066 2025] [:error] [pid 54695:tid 54711] [client 13.38.56.233:53656] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/cronlab/.env"] [unique_id "aS-em2rRT4nTHsfUu07raQAAAUw"]
[Wed Dec 03 10:21:16.597102 2025] [:error] [pid 11940:tid 11964] [client 13.38.56.233:53798] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/cron/.env"] [unique_id "aS-enDcDdx05OuLeesPMdgAAAdY"]
[Wed Dec 03 10:21:17.593761 2025] [:error] [pid 22013:tid 22032] [client 13.38.56.233:53908] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env"] [unique_id "aS-enYpUogO0aqsrpMWYEQAAAM0"]
[Wed Dec 03 10:21:18.629721 2025] [:error] [pid 54695:tid 54712] [client 13.38.56.233:54000] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/app/.env"] [unique_id "aS-enmrRT4nTHsfUu07ragAAAU0"]
[Wed Dec 03 10:21:19.674303 2025] [:error] [pid 54695:tid 54720] [client 13.38.56.233:54154] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/Datavase/.env"] [unique_id "aS-en2rRT4nTHsfUu07rawAAAVU"]
[Wed Dec 03 10:21:20.679096 2025] [:error] [pid 11940:tid 11958] [client 13.38.56.233:54270] [client 13.38.56.233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/database/.env"] [unique_id "aS-eoDcDdx05OuLeesPMfgAAAdA"]
[Wed Dec 03 10:38:01.363080 2025] [:error] [pid 11940:tid 11948] [client 165.227.121.227:44990] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS-iiTcDdx05OuLeesPVPQAAAcY"]
[Wed Dec 03 10:38:04.959156 2025] [:error] [pid 22013:tid 22029] [client 165.227.121.227:56740] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS-ijIpUogO0aqsrpMWc5wAAAMo"]
[Wed Dec 03 10:47:33.899129 2025] [:error] [pid 22083:tid 22108] [client 73.0.71.236:61190] [client 73.0.71.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 73.0.71.236, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aS-kxficvKZCy0M9-zzjzAAAAFc"]
[Wed Dec 03 11:43:21.227643 2025] [:error] [pid 22014:tid 22054] [client 170.64.159.4:53626] [client 170.64.159.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.159.4, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aS-x2QgpXEQej7y9Y6ZFMwAAAQg"]
[Wed Dec 03 11:43:21.305121 2025] [:error] [pid 22014:tid 22050] [client 170.64.159.4:53629] [client 170.64.159.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.159.4, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aS-x2QgpXEQej7y9Y6ZFNAAAAQQ"]
[Wed Dec 03 12:55:09.210959 2025] [:error] [pid 11940:tid 11964] [client 125.94.144.102:45393] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aS_CrTcDdx05OuLeesMGoQAAAdY"]
[Wed Dec 03 13:50:40.221350 2025] [:error] [pid 10559:tid 10611] [client 165.227.121.227:43822] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS_PsL9PedrrNRd1_z2_kwAAAFE"]
[Wed Dec 03 13:50:43.377243 2025] [:error] [pid 10560:tid 10624] [client 165.227.121.227:54624] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aS_Ps1ICRUmwGLQBIWdAqQAAAIM"]
[Wed Dec 03 18:18:54.760813 2025] [:error] [pid 20607:tid 20618] [client 165.227.121.227:48906] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTAOjvpiIcI2BRWBwqxiygAAAEg"]
[Wed Dec 03 18:18:56.346182 2025] [:error] [pid 20707:tid 20729] [client 165.227.121.227:53136] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTAOkDObjEHgU5ngsxe5GwAAARQ"]
[Wed Dec 03 18:51:12.073462 2025] [:error] [pid 20707:tid 20718] [client 216.118.251.162:60329] [client 216.118.251.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tools/upload_ajax.ashx"] [unique_id "aTAWIDObjEHgU5ngsxfE8gAAAQk"]
[Wed Dec 03 18:51:12.080038 2025] [:error] [pid 20707:tid 20733] [client 216.118.251.162:60337] [client 216.118.251.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Adminbeat/login.asp"] [unique_id "aTAWIDObjEHgU5ngsxfE8wAAARg"]
[Wed Dec 03 21:33:14.696280 2025] [rewrite:error] [pid 20607:tid 20626] [client 104.252.191.124:10346] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Wed Dec 03 22:47:03.817392 2025] [:error] [pid 20707:tid 20733] [client 165.227.121.227:59352] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTBNZzObjEHgU5ngsxcMTwAAARg"]
[Wed Dec 03 22:47:05.324361 2025] [:error] [pid 20608:tid 20643] [client 165.227.121.227:53706] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTBNaU5WGptz5j0ZvYeykgAAAIY"]
[Thu Dec 04 02:00:32.333835 2025] [:error] [pid 3841:tid 3897] [client 203.33.203.148:56965] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTB6wBqrnhYwq_3H8CQXtQAAAVU"]
[Thu Dec 04 02:28:33.871893 2025] [:error] [pid 3938:tid 3954] [client 165.227.121.227:38546] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTCBUSAHKAmSjlzEts4g0AAAAg4"]
[Thu Dec 04 02:28:37.518688 2025] [:error] [pid 63344:tid 63356] [client 165.227.121.227:60120] [client 165.227.121.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTCBVbFn6Z8FbZz0Ijl2SwAAAAc"]
[Thu Dec 04 02:50:54.612541 2025] [autoindex:error] [pid 63344:tid 63350] [client 143.110.180.207:59141] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Dec 04 05:02:27.041156 2025] [:error] [pid 2160:tid 2191] [client 34.44.53.82:52209] [client 34.44.53.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.53.82, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTClY0NDGjl4u2feUD-5bgAAAEE"]
[Thu Dec 04 05:02:27.529848 2025] [:error] [pid 2160:tid 2208] [client 34.44.53.82:52209] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aTClY0NDGjl4u2feUD-5cAAAAFI"]
[Thu Dec 04 05:02:28.443414 2025] [:error] [pid 2160:tid 2194] [client 34.44.53.82:50016] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aTClZENDGjl4u2feUD-5dgAAAEQ"]
[Thu Dec 04 05:02:29.321675 2025] [:error] [pid 38403:tid 38423] [client 34.44.53.82:51125] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aTClZQBCL4g8TXcskwnQkQAAAQ8"]
[Thu Dec 04 05:02:30.212494 2025] [:error] [pid 38403:tid 38431] [client 34.44.53.82:55412] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aTClZgBCL4g8TXcskwnQlQAAARc"]
[Thu Dec 04 05:02:31.093678 2025] [:error] [pid 2161:tid 2227] [client 34.44.53.82:61788] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aTClZyjiGdnP9Am2woVUbwAAAIo"]
[Thu Dec 04 05:02:31.951510 2025] [:error] [pid 2161:tid 2228] [client 34.44.53.82:61994] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aTClZyjiGdnP9Am2woVUdgAAAIs"]
[Thu Dec 04 05:02:32.992869 2025] [:error] [pid 2161:tid 2226] [client 34.44.53.82:52815] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aTClaCjiGdnP9Am2woVUeQAAAIk"]
[Thu Dec 04 05:02:33.905124 2025] [:error] [pid 2159:tid 2182] [client 34.44.53.82:53389] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aTClaT3GVdXg3ORUAG2M8wAAABM"]
[Thu Dec 04 05:02:34.765340 2025] [:error] [pid 38403:tid 38411] [client 34.44.53.82:49310] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aTClagBCL4g8TXcskwnQnAAAAQM"]
[Thu Dec 04 05:02:35.665845 2025] [:error] [pid 2161:tid 2222] [client 34.44.53.82:51916] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTClayjiGdnP9Am2woVUhQAAAIU"]
[Thu Dec 04 05:02:36.630784 2025] [:error] [pid 38403:tid 38431] [client 34.44.53.82:65394] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTClbABCL4g8TXcskwnQoAAAARc"]
[Thu Dec 04 05:02:37.499904 2025] [:error] [pid 2159:tid 2187] [client 34.44.53.82:63502] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTClbT3GVdXg3ORUAG2M-QAAABg"]
[Thu Dec 04 05:02:38.430160 2025] [:error] [pid 2159:tid 2174] [client 34.44.53.82:57314] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTClbj3GVdXg3ORUAG2M_AAAAAs"]
[Thu Dec 04 05:02:39.290346 2025] [:error] [pid 38403:tid 38416] [client 34.44.53.82:50082] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTClbwBCL4g8TXcskwnQpgAAAQg"]
[Thu Dec 04 05:02:40.161848 2025] [:error] [pid 2159:tid 2163] [client 34.44.53.82:61501] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTClcD3GVdXg3ORUAG2NBAAAAAA"]
[Thu Dec 04 05:02:41.068904 2025] [:error] [pid 38403:tid 38419] [client 34.44.53.82:63888] [client 34.44.53.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTClcQBCL4g8TXcskwnQrwAAAQs"]
[Thu Dec 04 05:08:12.474563 2025] [:error] [pid 38403:tid 38419] [client 195.178.110.223:51216] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTCmvABCL4g8TXcskwnTsAAAAQs"]
[Thu Dec 04 05:56:23.747693 2025] [:error] [pid 38403:tid 38426] [client 103.163.208.141:54587] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.measureyourcause.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.measureyourcause.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCyBwBCL4g8TXcskwnwAwAAARI"]
[Thu Dec 04 05:56:48.378736 2025] [:error] [pid 2159:tid 2184] [client 103.163.208.141:58129] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.measureyourcause.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.measureyourcause.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCyID3GVdXg3ORUAG2iBQAAABU"]
[Thu Dec 04 05:57:02.771223 2025] [:error] [pid 2159:tid 2181] [client 103.163.208.141:59725] [client 103.163.208.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||www.measureyourcause.com.au|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "www.measureyourcause.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aTCyLj3GVdXg3ORUAG2iGQAAABI"]
[Thu Dec 04 06:18:40.444369 2025] [:error] [pid 38403:tid 38412] [client 195.178.110.223:59878] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTC3QABCL4g8TXcskwn_TgAAAQQ"]
[Thu Dec 04 06:33:02.688093 2025] [:error] [pid 38403:tid 38425] [client 177.192.9.209:3060] [client 177.192.9.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.192.9.209, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTC6ngBCL4g8TXcskwkFxQAAARE"]
[Thu Dec 04 08:41:10.870494 2025] [:error] [pid 63322:tid 63355] [client 43.130.14.245:51202] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTDYpovm-cfAnelmlGdxygAAAcQ"]
[Thu Dec 04 14:08:17.056226 2025] [:error] [pid 63382:tid 63473] [client 45.77.241.198:55359] [client 45.77.241.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aTElUUvJv09BlzBS6SShigAAAoQ"]
[Thu Dec 04 14:08:17.060249 2025] [:error] [pid 63383:tid 63437] [client 45.77.241.198:55358] [client 45.77.241.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aTElUVJYyG_QEWdAPIUrswAAAtQ"]
[Thu Dec 04 14:08:17.060616 2025] [:error] [pid 2161:tid 2239] [client 45.77.241.198:55343] [client 45.77.241.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aTElUSjiGdnP9Am2woXmEwAAAJY"]
[Thu Dec 04 14:41:58.573120 2025] [:error] [pid 63383:tid 63431] [client 159.89.207.4:57368] [client 159.89.207.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aTEtNlJYyG_QEWdAPIU3ewAAAs4"]
[Fri Dec 05 02:48:53.591927 2025] [:error] [pid 13861:tid 13883] [client 104.154.53.107:51214] [client 104.154.53.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.154.53.107, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTHXlYxoqoAfmVZ3zhy7cgAAAdQ"]
[Fri Dec 05 02:48:53.835524 2025] [:error] [pid 13861:tid 13871] [client 104.154.53.107:51214] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTHXlYxoqoAfmVZ3zhy7dgAAAcg"]
[Fri Dec 05 02:48:54.701586 2025] [:error] [pid 33349:tid 33358] [client 104.154.53.107:52882] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aTHXllmzLHxEoifSuEwrKAAAAEU"]
[Fri Dec 05 02:48:55.615515 2025] [:error] [pid 13768:tid 13775] [client 104.154.53.107:60735] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aTHXl44EjrlerfWi6VMlPgAAAYQ"]
[Fri Dec 05 02:48:56.604655 2025] [:error] [pid 13737:tid 13749] [client 104.154.53.107:56376] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aTHXmMQjHwDazkcdZXKarQAAAUk"]
[Fri Dec 05 02:48:57.536904 2025] [:error] [pid 13768:tid 13778] [client 104.154.53.107:50562] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aTHXmY4EjrlerfWi6VMlQgAAAYc"]
[Fri Dec 05 02:48:58.486608 2025] [:error] [pid 13768:tid 13793] [client 104.154.53.107:53012] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aTHXmo4EjrlerfWi6VMlRgAAAZY"]
[Fri Dec 05 02:48:59.340841 2025] [:error] [pid 4492:tid 4572] [client 104.154.53.107:55949] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aTHXm6ktiJtKB3zqv30C0wAAARg"]
[Fri Dec 05 02:49:00.217439 2025] [:error] [pid 13768:tid 13779] [client 104.154.53.107:64330] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aTHXnI4EjrlerfWi6VMlTQAAAYg"]
[Fri Dec 05 02:49:01.137749 2025] [:error] [pid 13768:tid 13780] [client 104.154.53.107:52067] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aTHXnY4EjrlerfWi6VMlUgAAAYk"]
[Fri Dec 05 02:49:02.008610 2025] [:error] [pid 13768:tid 13787] [client 104.154.53.107:50386] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aTHXno4EjrlerfWi6VMlWgAAAZA"]
[Fri Dec 05 02:49:02.930687 2025] [:error] [pid 13768:tid 13775] [client 104.154.53.107:52233] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTHXno4EjrlerfWi6VMlYAAAAYQ"]
[Fri Dec 05 02:49:04.095179 2025] [:error] [pid 13861:tid 13883] [client 104.154.53.107:54403] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTHXoIxoqoAfmVZ3zhy7fQAAAdQ"]
[Fri Dec 05 02:49:05.131573 2025] [:error] [pid 4490:tid 4516] [client 104.154.53.107:54418] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTHXoWRzE1f_JiXqDpzzrgAAAJY"]
[Fri Dec 05 02:49:06.018123 2025] [:error] [pid 33349:tid 33371] [client 104.154.53.107:62585] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTHXolmzLHxEoifSuEwrLwAAAFI"]
[Fri Dec 05 02:49:06.935831 2025] [:error] [pid 13925:tid 13947] [client 104.154.53.107:53598] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTHXogT9_OOefeJMN1XANwAAAhQ"]
[Fri Dec 05 02:49:07.837729 2025] [:error] [pid 4491:tid 4542] [client 104.154.53.107:58280] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTHXoyUq6tbvu6y_H_HrXgAAANU"]
[Fri Dec 05 02:49:08.721464 2025] [:error] [pid 33349:tid 33373] [client 104.154.53.107:57605] [client 104.154.53.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTHXpFmzLHxEoifSuEwrNAAAAFQ"]
[Fri Dec 05 03:48:52.246740 2025] [:error] [pid 5190:tid 5252] [client 34.68.39.129:63840] [client 34.68.39.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.68.39.129, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTHlpI-wOT9g6VwmWflYmwAAAIM"]
[Fri Dec 05 03:48:54.252243 2025] [:error] [pid 5190:tid 5271] [client 34.68.39.129:63840] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aTHlpo-wOT9g6VwmWflYpgAAAJY"]
[Fri Dec 05 03:48:55.300283 2025] [:error] [pid 5189:tid 5225] [client 34.68.39.129:52105] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aTHlp5twb_eFM3hwqtbhJgAAAEM"]
[Fri Dec 05 03:48:56.386153 2025] [:error] [pid 5190:tid 5252] [client 34.68.39.129:56640] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aTHlqI-wOT9g6VwmWflYqgAAAIM"]
[Fri Dec 05 03:48:57.457354 2025] [:error] [pid 5190:tid 5251] [client 34.68.39.129:58409] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aTHlqY-wOT9g6VwmWflYqwAAAII"]
[Fri Dec 05 03:48:58.508264 2025] [:error] [pid 5190:tid 5264] [client 34.68.39.129:62948] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aTHlqo-wOT9g6VwmWflYsQAAAI8"]
[Fri Dec 05 03:48:59.604447 2025] [:error] [pid 5283:tid 5294] [client 34.68.39.129:58923] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTHlq8rOYoyF7_2EYK6WPgAAAMk"]
[Fri Dec 05 03:49:00.852589 2025] [:error] [pid 5188:tid 5211] [client 34.68.39.129:56235] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTHlrEQDYAFnrrRh0Bo_PwAAABA"]
[Fri Dec 05 03:49:01.900511 2025] [:error] [pid 5190:tid 5267] [client 34.68.39.129:58495] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTHlrY-wOT9g6VwmWflY1QAAAJI"]
[Fri Dec 05 03:49:02.864704 2025] [:error] [pid 5283:tid 5291] [client 34.68.39.129:55604] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTHlrsrOYoyF7_2EYK6WYQAAAMY"]
[Fri Dec 05 03:49:03.813604 2025] [:error] [pid 5189:tid 5233] [client 34.68.39.129:55655] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTHlr5twb_eFM3hwqtbhbAAAAEs"]
[Fri Dec 05 03:49:04.858886 2025] [:error] [pid 5283:tid 5308] [client 34.68.39.129:58132] [client 34.68.39.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTHlsMrOYoyF7_2EYK6WbAAAANc"]
[Fri Dec 05 04:07:37.924760 2025] [:error] [pid 53839:tid 53911] [client 177.37.143.153:29703] [client 177.37.143.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.37.143.153, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTHqCaQOuERg_RN7bn9FygAAAI8"]
[Fri Dec 05 05:24:46.274671 2025] [:error] [pid 24010:tid 24033] [client 34.187.224.241:59198] [client 34.187.224.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTH8HqtjRoDpxa46mwcGVgAAARU"]
[Fri Dec 05 07:23:46.397851 2025] [:error] [pid 53837:tid 53850] [client 18.237.178.203:37666] [client 18.237.178.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/"] [unique_id "aTIYAjbsUyTxys8OiMJCWwAAAAg"]
[Fri Dec 05 07:23:47.345976 2025] [:error] [pid 53839:tid 53914] [client 18.237.178.203:37680] [client 18.237.178.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aTIYA6QOuERg_RN7bn-lqwAAAJI"]
[Fri Dec 05 12:07:22.348900 2025] [:error] [pid 53839:tid 53906] [client 182.44.10.67:47695] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTJaeqQOuERg_RN7bn8piAAAAIo"]
[Fri Dec 05 13:11:02.268256 2025] [:error] [pid 53838:tid 53887] [client 18.182.33.112:40972] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTJpZp8M7CH_vMhLrzKmQQAAAFI"]
[Fri Dec 05 13:11:03.221432 2025] [:error] [pid 62720:tid 62743] [client 18.182.33.112:41004] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aTJpZ2DTJuF6xQ5UsIO0WQAAAZU"]
[Fri Dec 05 13:11:03.680746 2025] [:error] [pid 24010:tid 24021] [client 18.182.33.112:41006] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aTJpZ6tjRoDpxa46mwf8TwAAAQk"]
[Fri Dec 05 13:11:05.574426 2025] [:error] [pid 53839:tid 53908] [client 18.182.33.112:41026] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTJpaaQOuERg_RN7bn9ENQAAAIw"]
[Fri Dec 05 13:11:06.037378 2025] [:error] [pid 35173:tid 35178] [client 18.182.33.112:41032] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aTJpajLwYloPE6LF3uCWcgAAAUM"]
[Fri Dec 05 13:11:06.499138 2025] [:error] [pid 53839:tid 53899] [client 18.182.33.112:34180] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aTJpaqQOuERg_RN7bn9EOAAAAIM"]
[Fri Dec 05 13:11:06.959203 2025] [:error] [pid 24010:tid 24013] [client 18.182.33.112:34184] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aTJpaqtjRoDpxa46mwf8UwAAAQE"]
[Fri Dec 05 13:11:07.418315 2025] [:error] [pid 53839:tid 53914] [client 18.182.33.112:34200] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aTJpa6QOuERg_RN7bn9EPQAAAJI"]
[Fri Dec 05 13:11:07.878923 2025] [:error] [pid 24010:tid 24033] [client 18.182.33.112:34214] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aTJpa6tjRoDpxa46mwf8VQAAARU"]
[Fri Dec 05 13:11:08.338052 2025] [:error] [pid 53923:tid 53930] [client 18.182.33.112:34216] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aTJpbLl8ebZN0VCAVXDf1QAAAMU"]
[Fri Dec 05 13:11:12.141198 2025] [:error] [pid 53839:tid 53917] [client 18.182.33.112:34294] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.rb"] [unique_id "aTJpcKQOuERg_RN7bn9EQQAAAJU"]
[Fri Dec 05 13:11:12.599909 2025] [:error] [pid 53839:tid 53899] [client 18.182.33.112:34310] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yaml"] [unique_id "aTJpcKQOuERg_RN7bn9EQgAAAIM"]
[Fri Dec 05 13:11:13.062013 2025] [:error] [pid 24010:tid 24026] [client 18.182.33.112:34320] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTJpcatjRoDpxa46mwf8ZAAAAQ4"]
[Fri Dec 05 13:11:13.521536 2025] [:error] [pid 53839:tid 53914] [client 18.182.33.112:34330] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.ini"] [unique_id "aTJpcaQOuERg_RN7bn9ERAAAAJI"]
[Fri Dec 05 13:11:13.983157 2025] [:error] [pid 24010:tid 24035] [client 18.182.33.112:34344] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.properties"] [unique_id "aTJpcatjRoDpxa46mwf8ZgAAARc"]
[Fri Dec 05 13:11:14.443865 2025] [:error] [pid 35173:tid 35188] [client 18.182.33.112:34360] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/configuration"] [unique_id "aTJpcjLwYloPE6LF3uCWigAAAUw"]
[Fri Dec 05 13:11:14.902133 2025] [:error] [pid 53839:tid 53920] [client 18.182.33.112:34368] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings"] [unique_id "aTJpcqQOuERg_RN7bn9ERQAAAJg"]
[Fri Dec 05 13:11:15.362214 2025] [:error] [pid 53837:tid 53848] [client 18.182.33.112:34382] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.json"] [unique_id "aTJpczbsUyTxys8OiMK7PAAAAAY"]
[Fri Dec 05 13:11:15.825342 2025] [:error] [pid 53837:tid 53862] [client 18.182.33.112:34384] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTJpczbsUyTxys8OiMK7PQAAABQ"]
[Fri Dec 05 13:11:16.285905 2025] [:error] [pid 24010:tid 24026] [client 18.182.33.112:41700] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.rb"] [unique_id "aTJpdKtjRoDpxa46mwf8bQAAAQ4"]
[Fri Dec 05 13:11:16.744888 2025] [:error] [pid 53838:tid 53891] [client 18.182.33.112:41708] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.config.js"] [unique_id "aTJpdJ8M7CH_vMhLrzKmSQAAAFY"]
[Fri Dec 05 13:11:17.210620 2025] [:error] [pid 53838:tid 53875] [client 18.182.33.112:41720] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/local.settings.json"] [unique_id "aTJpdZ8M7CH_vMhLrzKmTAAAAEY"]
[Fri Dec 05 13:11:17.672011 2025] [:error] [pid 53837:tid 53847] [client 18.182.33.112:41722] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.json"] [unique_id "aTJpdTbsUyTxys8OiMK7PwAAAAU"]
[Fri Dec 05 13:11:18.132414 2025] [:error] [pid 53837:tid 53859] [client 18.182.33.112:41738] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTJpdjbsUyTxys8OiMK7RAAAABE"]
[Fri Dec 05 13:11:18.592054 2025] [:error] [pid 53838:tid 53887] [client 18.182.33.112:41752] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aTJpdp8M7CH_vMhLrzKmTgAAAFI"]
[Fri Dec 05 13:11:19.053389 2025] [:error] [pid 53837:tid 53844] [client 18.182.33.112:41760] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aTJpdzbsUyTxys8OiMK7RQAAAAI"]
[Fri Dec 05 13:11:19.515032 2025] [:error] [pid 53837:tid 53860] [client 18.182.33.112:41774] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aTJpdzbsUyTxys8OiMK7RgAAABI"]
[Fri Dec 05 13:11:19.976463 2025] [:error] [pid 24010:tid 24029] [client 18.182.33.112:41790] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTJpd6tjRoDpxa46mwf8cgAAARE"]
[Fri Dec 05 13:11:20.435773 2025] [:error] [pid 24010:tid 24030] [client 18.182.33.112:41804] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aTJpeKtjRoDpxa46mwf8dAAAARI"]
[Fri Dec 05 13:11:20.893357 2025] [:error] [pid 35173:tid 35184] [client 18.182.33.112:41816] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/composer.json"] [unique_id "aTJpeDLwYloPE6LF3uCWnQAAAUk"]
[Fri Dec 05 13:11:21.350430 2025] [:error] [pid 53839:tid 53909] [client 18.182.33.112:41830] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTJpeaQOuERg_RN7bn9ERgAAAI0"]
[Fri Dec 05 13:11:21.809099 2025] [:error] [pid 62720:tid 62731] [client 18.182.33.112:41838] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.php"] [unique_id "aTJpeWDTJuF6xQ5UsIO0aQAAAYk"]
[Fri Dec 05 13:11:22.272859 2025] [:error] [pid 53838:tid 53876] [client 18.182.33.112:41846] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.php"] [unique_id "aTJpep8M7CH_vMhLrzKmUQAAAEc"]
[Fri Dec 05 13:11:22.732307 2025] [:error] [pid 53838:tid 53884] [client 18.182.33.112:41854] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/config"] [unique_id "aTJpep8M7CH_vMhLrzKmUgAAAE8"]
[Fri Dec 05 13:11:23.190814 2025] [:error] [pid 62720:tid 62727] [client 18.182.33.112:41864] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/credentials"] [unique_id "aTJpe2DTJuF6xQ5UsIO0agAAAYU"]
[Fri Dec 05 13:11:23.647041 2025] [:error] [pid 24010:tid 24023] [client 18.182.33.112:41880] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/config"] [unique_id "aTJpe6tjRoDpxa46mwf8dwAAAQs"]
[Fri Dec 05 13:11:24.106906 2025] [:error] [pid 53923:tid 53934] [client 18.182.33.112:41882] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/credentials"] [unique_id "aTJpfLl8ebZN0VCAVXDf-QAAAMk"]
[Fri Dec 05 13:11:24.567285 2025] [:error] [pid 62720:tid 62745] [client 18.182.33.112:41888] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.json"] [unique_id "aTJpfGDTJuF6xQ5UsIO0awAAAZc"]
[Fri Dec 05 13:11:25.026774 2025] [:error] [pid 62720:tid 62722] [client 18.182.33.112:41906] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws-credentials.json"] [unique_id "aTJpfWDTJuF6xQ5UsIO0bAAAAYA"]
[Fri Dec 05 13:11:25.485570 2025] [:error] [pid 62720:tid 62735] [client 18.182.33.112:41916] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws-config.js"] [unique_id "aTJpfWDTJuF6xQ5UsIO0bgAAAY0"]
[Fri Dec 05 13:11:25.945112 2025] [:error] [pid 53837:tid 53846] [client 18.182.33.112:41922] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws-keys.json"] [unique_id "aTJpfTbsUyTxys8OiMK7SAAAAAQ"]
[Fri Dec 05 13:11:26.406410 2025] [:error] [pid 53837:tid 53848] [client 18.182.33.112:36396] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/secrets.yaml"] [unique_id "aTJpfjbsUyTxys8OiMK7SgAAAAY"]
[Fri Dec 05 13:11:26.867969 2025] [:error] [pid 53839:tid 53912] [client 18.182.33.112:36406] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/access-keys.js"] [unique_id "aTJpfqQOuERg_RN7bn9ETAAAAJA"]
[Fri Dec 05 13:11:27.325231 2025] [:error] [pid 53838:tid 53885] [client 18.182.33.112:36418] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/config.ini"] [unique_id "aTJpf58M7CH_vMhLrzKmWAAAAFA"]
[Fri Dec 05 13:11:27.783658 2025] [:error] [pid 35173:tid 35182] [client 18.182.33.112:36426] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/credentials.bak"] [unique_id "aTJpfzLwYloPE6LF3uCWsQAAAUc"]
[Fri Dec 05 13:11:28.246324 2025] [:error] [pid 53923:tid 53939] [client 18.182.33.112:36432] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/secrets"] [unique_id "aTJpgLl8ebZN0VCAVXDgCgAAAM4"]
[Fri Dec 05 13:11:28.704275 2025] [:error] [pid 35173:tid 35196] [client 18.182.33.112:36446] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws-env.json"] [unique_id "aTJpgDLwYloPE6LF3uCWtQAAAVQ"]
[Fri Dec 05 13:11:29.165935 2025] [:error] [pid 62720:tid 62738] [client 18.182.33.112:36448] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws-keys.env"] [unique_id "aTJpgWDTJuF6xQ5UsIO0cwAAAZA"]
[Fri Dec 05 13:11:29.629067 2025] [:error] [pid 53923:tid 53941] [client 18.182.33.112:36462] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/config.bak"] [unique_id "aTJpgbl8ebZN0VCAVXDgDAAAANA"]
[Fri Dec 05 13:11:30.088380 2025] [:error] [pid 53838:tid 53874] [client 18.182.33.112:36478] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/secrets.json"] [unique_id "aTJpgp8M7CH_vMhLrzKmXQAAAEU"]
[Fri Dec 05 13:11:30.554106 2025] [:error] [pid 35173:tid 35187] [client 18.182.33.112:36484] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws/config.properties"] [unique_id "aTJpgjLwYloPE6LF3uCWuQAAAUs"]
[Fri Dec 05 13:11:31.015704 2025] [:error] [pid 53839:tid 53905] [client 18.182.33.112:36488] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/credentials.json"] [unique_id "aTJpg6QOuERg_RN7bn9EUgAAAIk"]
[Fri Dec 05 13:11:31.476728 2025] [:error] [pid 53837:tid 53864] [client 18.182.33.112:36496] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws_keys.py"] [unique_id "aTJpgzbsUyTxys8OiMK7UAAAABY"]
[Fri Dec 05 13:11:31.936919 2025] [:error] [pid 53839:tid 53908] [client 18.182.33.112:36508] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe/config"] [unique_id "aTJpg6QOuERg_RN7bn9EVQAAAIw"]
[Fri Dec 05 13:11:32.396074 2025] [:error] [pid 53923:tid 53930] [client 18.182.33.112:36512] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe.json"] [unique_id "aTJphLl8ebZN0VCAVXDgFAAAAMU"]
[Fri Dec 05 13:11:32.858670 2025] [:error] [pid 53923:tid 53942] [client 18.182.33.112:36526] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe.js"] [unique_id "aTJphLl8ebZN0VCAVXDgFgAAANE"]
[Fri Dec 05 13:11:33.319124 2025] [:error] [pid 53923:tid 53932] [client 18.182.33.112:36536] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe-config.yaml"] [unique_id "aTJphbl8ebZN0VCAVXDgFwAAAMc"]
[Fri Dec 05 13:11:33.776571 2025] [:error] [pid 53839:tid 53911] [client 18.182.33.112:36544] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe-keys.json"] [unique_id "aTJphaQOuERg_RN7bn9EXgAAAI8"]
[Fri Dec 05 13:11:34.235879 2025] [:error] [pid 53839:tid 53913] [client 18.182.33.112:36556] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe/credentials"] [unique_id "aTJphqQOuERg_RN7bn9EXwAAAJE"]
[Fri Dec 05 13:11:34.699650 2025] [:error] [pid 53923:tid 53925] [client 18.182.33.112:36568] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe/secrets.yml"] [unique_id "aTJphrl8ebZN0VCAVXDgGQAAAMA"]
[Fri Dec 05 13:11:35.160809 2025] [:error] [pid 53923:tid 53935] [client 18.182.33.112:36580] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe.env"] [unique_id "aTJph7l8ebZN0VCAVXDgHAAAAMo"]
[Fri Dec 05 13:11:35.620483 2025] [:error] [pid 62720:tid 62732] [client 18.182.33.112:36594] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe/config.php"] [unique_id "aTJph2DTJuF6xQ5UsIO0eQAAAYo"]
[Fri Dec 05 13:11:36.080105 2025] [:error] [pid 53923:tid 53941] [client 18.182.33.112:36608] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.stripe/keys"] [unique_id "aTJpiLl8ebZN0VCAVXDgHwAAANA"]
[Fri Dec 05 13:11:36.540009 2025] [:error] [pid 62720:tid 62740] [client 18.182.33.112:48574] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe_api.json"] [unique_id "aTJpiGDTJuF6xQ5UsIO0ewAAAZI"]
[Fri Dec 05 13:11:37.000707 2025] [:error] [pid 53839:tid 53896] [client 18.182.33.112:48580] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/stripe.rb"] [unique_id "aTJpiKQOuERg_RN7bn9EZAAAAIA"]
[Fri Dec 05 13:11:37.462246 2025] [:error] [pid 24010:tid 24023] [client 18.182.33.112:48590] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe_keys.py"] [unique_id "aTJpiatjRoDpxa46mwf8kgAAAQs"]
[Fri Dec 05 13:11:37.923700 2025] [:error] [pid 53923:tid 53937] [client 18.182.33.112:48592] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe.ini"] [unique_id "aTJpibl8ebZN0VCAVXDgIgAAAMw"]
[Fri Dec 05 13:11:38.387262 2025] [:error] [pid 53923:tid 53929] [client 18.182.33.112:48606] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe.properties"] [unique_id "aTJpirl8ebZN0VCAVXDgJAAAAMQ"]
[Fri Dec 05 13:11:38.847980 2025] [:error] [pid 53923:tid 53942] [client 18.182.33.112:48610] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe/config.js"] [unique_id "aTJpirl8ebZN0VCAVXDgJgAAANE"]
[Fri Dec 05 13:11:39.314242 2025] [:error] [pid 62720:tid 62730] [client 18.182.33.112:48618] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe/secrets.json"] [unique_id "aTJpi2DTJuF6xQ5UsIO0fgAAAYg"]
[Fri Dec 05 13:11:39.776028 2025] [:error] [pid 53839:tid 53918] [client 18.182.33.112:48632] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.stripe"] [unique_id "aTJpi6QOuERg_RN7bn9EcAAAAJY"]
[Fri Dec 05 13:11:40.234943 2025] [:error] [pid 53923:tid 53934] [client 18.182.33.112:48642] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stripe-credentials.json"] [unique_id "aTJpjLl8ebZN0VCAVXDgKwAAAMk"]
[Fri Dec 05 13:11:40.696691 2025] [:error] [pid 53839:tid 53917] [client 18.182.33.112:48648] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/stripe.js"] [unique_id "aTJpjKQOuERg_RN7bn9EcQAAAJU"]
[Fri Dec 05 13:11:41.157466 2025] [:error] [pid 53838:tid 53892] [client 18.182.33.112:48662] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/local_settings.py"] [unique_id "aTJpjZ8M7CH_vMhLrzKmeAAAAFc"]
[Fri Dec 05 13:11:41.617689 2025] [:error] [pid 24010:tid 24033] [client 18.182.33.112:48672] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/django_settings.json"] [unique_id "aTJpjatjRoDpxa46mwf8mAAAARU"]
[Fri Dec 05 13:11:42.078789 2025] [:error] [pid 53923:tid 53945] [client 18.182.33.112:48678] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.django"] [unique_id "aTJpjrl8ebZN0VCAVXDgNAAAANQ"]
[Fri Dec 05 13:11:42.540897 2025] [:error] [pid 53837:tid 53863] [client 18.182.33.112:48682] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manage.py"] [unique_id "aTJpjjbsUyTxys8OiMK7ZwAAABU"]
[Fri Dec 05 13:11:43.000845 2025] [:error] [pid 24010:tid 24027] [client 18.182.33.112:48684] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/settings/local.py"] [unique_id "aTJpjqtjRoDpxa46mwf8mQAAAQ8"]
[Fri Dec 05 13:11:43.465649 2025] [:error] [pid 24010:tid 24029] [client 18.182.33.112:48698] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.py"] [unique_id "aTJpj6tjRoDpxa46mwf8mwAAARE"]
[Fri Dec 05 13:11:43.926483 2025] [:error] [pid 53923:tid 53936] [client 18.182.33.112:48704] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/django.env"] [unique_id "aTJpj7l8ebZN0VCAVXDgQwAAAMs"]
[Fri Dec 05 13:11:44.386224 2025] [:error] [pid 53839:tid 53916] [client 18.182.33.112:48708] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/python.config.json"] [unique_id "aTJpkKQOuERg_RN7bn9EcwAAAJQ"]
[Fri Dec 05 13:11:44.847172 2025] [:error] [pid 24010:tid 24015] [client 18.182.33.112:48724] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app/settings/production.py"] [unique_id "aTJpkKtjRoDpxa46mwf8nQAAAQM"]
[Fri Dec 05 13:11:45.307644 2025] [:error] [pid 53837:tid 53854] [client 18.182.33.112:48740] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/django/secrets.json"] [unique_id "aTJpkTbsUyTxys8OiMK7bQAAAAw"]
[Fri Dec 05 13:11:45.769608 2025] [:error] [pid 62720:tid 62735] [client 18.182.33.112:48748] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.pythonenv"] [unique_id "aTJpkWDTJuF6xQ5UsIO0gQAAAY0"]
[Fri Dec 05 13:11:46.232750 2025] [:error] [pid 53839:tid 53908] [client 18.182.33.112:48752] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/local.py"] [unique_id "aTJpkqQOuERg_RN7bn9EdgAAAIw"]
[Fri Dec 05 13:11:46.689896 2025] [:error] [pid 62720:tid 62744] [client 18.182.33.112:41596] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/django.ini"] [unique_id "aTJpkmDTJuF6xQ5UsIO0gwAAAZY"]
[Fri Dec 05 13:11:47.147241 2025] [:error] [pid 53837:tid 53848] [client 18.182.33.112:41608] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/database.yml"] [unique_id "aTJpkzbsUyTxys8OiMK7cwAAAAY"]
[Fri Dec 05 13:11:47.604964 2025] [:error] [pid 53837:tid 53852] [client 18.182.33.112:41616] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/secrets.yml"] [unique_id "aTJpkzbsUyTxys8OiMK7dQAAAAo"]
[Fri Dec 05 13:11:48.064735 2025] [:error] [pid 53838:tid 53892] [client 18.182.33.112:41632] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/credentials.yml.enc"] [unique_id "aTJplJ8M7CH_vMhLrzKmhwAAAFc"]
[Fri Dec 05 13:11:48.524733 2025] [:error] [pid 35173:tid 35177] [client 18.182.33.112:41640] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/master.key"] [unique_id "aTJplDLwYloPE6LF3uCWyQAAAUI"]
[Fri Dec 05 13:11:48.993506 2025] [:error] [pid 24010:tid 24021] [client 18.182.33.112:41656] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/application.rb"] [unique_id "aTJplKtjRoDpxa46mwf8qQAAAQk"]
[Fri Dec 05 13:11:49.454050 2025] [:error] [pid 53837:tid 53855] [client 18.182.33.112:41662] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/environment.rb"] [unique_id "aTJplTbsUyTxys8OiMK7egAAAA0"]
[Fri Dec 05 13:11:49.915838 2025] [:error] [pid 53837:tid 53863] [client 18.182.33.112:41678] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.yml"] [unique_id "aTJplTbsUyTxys8OiMK7fgAAABU"]
[Fri Dec 05 13:11:50.378272 2025] [:error] [pid 24010:tid 24012] [client 18.182.33.112:41688] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.rb"] [unique_id "aTJplqtjRoDpxa46mwf8qgAAAQA"]
[Fri Dec 05 13:11:50.835154 2025] [:error] [pid 53837:tid 53854] [client 18.182.33.112:41696] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/local_env.yml"] [unique_id "aTJpljbsUyTxys8OiMK7gAAAAAw"]
[Fri Dec 05 13:11:51.292641 2025] [:error] [pid 53837:tid 53848] [client 18.182.33.112:41706] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rails.env"] [unique_id "aTJplzbsUyTxys8OiMK7hwAAAAY"]
[Fri Dec 05 13:11:51.754929 2025] [:error] [pid 24010:tid 24020] [client 18.182.33.112:41714] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/initializers/secret_token.rb"] [unique_id "aTJpl6tjRoDpxa46mwf8qwAAAQg"]
[Fri Dec 05 13:11:52.214731 2025] [:error] [pid 53839:tid 53912] [client 18.182.33.112:41728] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/cable.yml"] [unique_id "aTJpmKQOuERg_RN7bn9EiQAAAJA"]
[Fri Dec 05 13:11:52.673710 2025] [:error] [pid 53837:tid 53864] [client 18.182.33.112:41730] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gemfile.lock"] [unique_id "aTJpmDbsUyTxys8OiMK7jQAAABY"]
[Fri Dec 05 13:11:53.130488 2025] [:error] [pid 53837:tid 53863] [client 18.182.33.112:41732] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/puma.rb"] [unique_id "aTJpmTbsUyTxys8OiMK7jgAAABU"]
[Fri Dec 05 13:11:53.592167 2025] [:error] [pid 35173:tid 35194] [client 18.182.33.112:41742] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/routes.rb"] [unique_id "aTJpmTLwYloPE6LF3uCWzgAAAVI"]
[Fri Dec 05 13:11:54.052828 2025] [:error] [pid 62720:tid 62740] [client 18.182.33.112:41744] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.ruby-version"] [unique_id "aTJpmmDTJuF6xQ5UsIO0jQAAAZI"]
[Fri Dec 05 13:11:54.512089 2025] [:error] [pid 62720:tid 62735] [client 18.182.33.112:41752] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/application.yml"] [unique_id "aTJpmmDTJuF6xQ5UsIO0jgAAAY0"]
[Fri Dec 05 13:11:54.973371 2025] [:error] [pid 53838:tid 53876] [client 18.182.33.112:41762] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.yml.enc"] [unique_id "aTJpmp8M7CH_vMhLrzKmmAAAAEc"]
[Fri Dec 05 13:11:55.430588 2025] [:error] [pid 35173:tid 35192] [client 18.182.33.112:41764] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/master.key.bak"] [unique_id "aTJpmzLwYloPE6LF3uCW0QAAAVA"]
[Fri Dec 05 13:11:55.890398 2025] [:error] [pid 53838:tid 53869] [client 18.182.33.112:41768] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/database.json"] [unique_id "aTJpm58M7CH_vMhLrzKmngAAAEA"]
[Fri Dec 05 13:11:56.350897 2025] [:error] [pid 53923:tid 53945] [client 18.182.33.112:60124] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.js"] [unique_id "aTJpnLl8ebZN0VCAVXDgXwAAANQ"]
[Fri Dec 05 13:11:56.811569 2025] [:error] [pid 53923:tid 53935] [client 18.182.33.112:60136] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api_keys.js"] [unique_id "aTJpnLl8ebZN0VCAVXDgYQAAAMo"]
[Fri Dec 05 13:11:57.271742 2025] [:error] [pid 53838:tid 53885] [client 18.182.33.112:60150] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.js"] [unique_id "aTJpnZ8M7CH_vMhLrzKmowAAAFA"]
[Fri Dec 05 13:11:57.731631 2025] [:error] [pid 53837:tid 53844] [client 18.182.33.112:60162] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/package.json"] [unique_id "aTJpnTbsUyTxys8OiMK7mwAAAAI"]
[Fri Dec 05 13:11:58.190482 2025] [:error] [pid 53923:tid 53932] [client 18.182.33.112:60168] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.js"] [unique_id "aTJpnrl8ebZN0VCAVXDgYgAAAMc"]
[Fri Dec 05 13:11:58.651715 2025] [:error] [pid 53923:tid 53926] [client 18.182.33.112:60170] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.js"] [unique_id "aTJpnrl8ebZN0VCAVXDgYwAAAME"]
[Fri Dec 05 13:11:59.112184 2025] [:error] [pid 62720:tid 62743] [client 18.182.33.112:60178] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/env.js"] [unique_id "aTJpn2DTJuF6xQ5UsIO0kgAAAZU"]
[Fri Dec 05 13:11:59.568399 2025] [:error] [pid 53923:tid 53927] [client 18.182.33.112:60186] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.js"] [unique_id "aTJpn7l8ebZN0VCAVXDgZgAAAMI"]
[Fri Dec 05 13:12:00.027098 2025] [:error] [pid 53923:tid 53942] [client 18.182.33.112:60192] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/node.config.json"] [unique_id "aTJpoLl8ebZN0VCAVXDgZwAAANE"]
[Fri Dec 05 13:12:00.488766 2025] [:error] [pid 53838:tid 53869] [client 18.182.33.112:60200] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/secrets.json"] [unique_id "aTJpoJ8M7CH_vMhLrzKmrgAAAEA"]
[Fri Dec 05 13:12:00.947922 2025] [:error] [pid 35173:tid 35176] [client 18.182.33.112:60212] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/client/config.js"] [unique_id "aTJpoDLwYloPE6LF3uCW2AAAAUE"]
[Fri Dec 05 13:12:01.405657 2025] [:error] [pid 53923:tid 53939] [client 18.182.33.112:60228] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/config.js"] [unique_id "aTJpobl8ebZN0VCAVXDgagAAAM4"]
[Fri Dec 05 13:12:01.865974 2025] [:error] [pid 53923:tid 53947] [client 18.182.33.112:60232] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/src/config/api.js"] [unique_id "aTJpobl8ebZN0VCAVXDgawAAANY"]
[Fri Dec 05 13:12:02.327254 2025] [:error] [pid 53837:tid 53846] [client 18.182.33.112:60240] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/node_modules/.bin/env"] [unique_id "aTJpojbsUyTxys8OiMK7qAAAAAQ"]
[Fri Dec 05 13:12:02.785776 2025] [:error] [pid 53839:tid 53907] [client 18.182.33.112:60248] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.npmrc"] [unique_id "aTJpoqQOuERg_RN7bn9EoAAAAIs"]
[Fri Dec 05 13:12:03.242917 2025] [:error] [pid 53923:tid 53940] [client 18.182.33.112:60250] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yarn.lock"] [unique_id "aTJpo7l8ebZN0VCAVXDgbwAAAM8"]
[Fri Dec 05 13:12:03.702600 2025] [:error] [pid 62720:tid 62741] [client 18.182.33.112:60256] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/client.js"] [unique_id "aTJpo2DTJuF6xQ5UsIO0lwAAAZM"]
[Fri Dec 05 13:12:04.162268 2025] [:error] [pid 24010:tid 24023] [client 18.182.33.112:60258] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/config.js"] [unique_id "aTJppKtjRoDpxa46mwf8uAAAAQs"]
[Fri Dec 05 13:12:04.623309 2025] [:error] [pid 53923:tid 53938] [client 18.182.33.112:60270] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/frontend/env.json"] [unique_id "aTJppLl8ebZN0VCAVXDgcgAAAM0"]
[Fri Dec 05 13:12:05.084053 2025] [:error] [pid 53839:tid 53917] [client 18.182.33.112:60284] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/backend/secrets.js"] [unique_id "aTJppaQOuERg_RN7bn9EpgAAAJU"]
[Fri Dec 05 13:12:05.545909 2025] [:error] [pid 35173:tid 35180] [client 18.182.33.112:60290] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/application.properties"] [unique_id "aTJppTLwYloPE6LF3uCW4AAAAUU"]
[Fri Dec 05 13:12:06.007102 2025] [:error] [pid 53839:tid 53911] [client 18.182.33.112:60298] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.properties"] [unique_id "aTJppqQOuERg_RN7bn9EqgAAAI8"]
[Fri Dec 05 13:12:06.467580 2025] [:error] [pid 35173:tid 35198] [client 18.182.33.112:48746] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.properties"] [unique_id "aTJppjLwYloPE6LF3uCW4gAAAVY"]
[Fri Dec 05 13:12:06.929186 2025] [:error] [pid 62720:tid 62738] [client 18.182.33.112:48760] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.ini"] [unique_id "aTJppmDTJuF6xQ5UsIO0mgAAAZA"]
[Fri Dec 05 13:12:07.386440 2025] [:error] [pid 53837:tid 53857] [client 18.182.33.112:48768] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/local.ini"] [unique_id "aTJppzbsUyTxys8OiMK7sAAAAA8"]
[Fri Dec 05 13:12:07.846014 2025] [:error] [pid 53838:tid 53881] [client 18.182.33.112:48772] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.ini"] [unique_id "aTJpp58M7CH_vMhLrzKmwAAAAEw"]
[Fri Dec 05 13:12:08.308162 2025] [:error] [pid 35173:tid 35195] [client 18.182.33.112:48778] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.json"] [unique_id "aTJpqDLwYloPE6LF3uCW5gAAAVM"]
[Fri Dec 05 13:12:08.769263 2025] [:error] [pid 24010:tid 24014] [client 18.182.33.112:48794] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/secrets.json"] [unique_id "aTJpqKtjRoDpxa46mwf8vAAAAQI"]
[Fri Dec 05 13:12:09.231164 2025] [:error] [pid 24010:tid 24022] [client 18.182.33.112:48806] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/local.json"] [unique_id "aTJpqatjRoDpxa46mwf8vgAAAQo"]
[Fri Dec 05 13:12:09.690943 2025] [:error] [pid 53838:tid 53876] [client 18.182.33.112:48808] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.json"] [unique_id "aTJpqZ8M7CH_vMhLrzKmxQAAAEc"]
[Fri Dec 05 13:12:10.151362 2025] [:error] [pid 53838:tid 53878] [client 18.182.33.112:48820] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/env.properties"] [unique_id "aTJpqp8M7CH_vMhLrzKmxgAAAEk"]
[Fri Dec 05 13:12:10.608492 2025] [:error] [pid 53838:tid 53879] [client 18.182.33.112:48830] [client 18.182.33.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.properties"] [unique_id "aTJpqp8M7CH_vMhLrzKmyAAAAEo"]
[Fri Dec 05 13:12:11.072175 2025] [:error] [pid 35173:tid 35184] [client 18.182.33.112:48836] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/php.ini"] [unique_id "aTJpqzLwYloPE6LF3uCW6QAAAUk"]
[Fri Dec 05 13:12:12.503606 2025] [:error] [pid 35173:tid 35199] [client 18.182.33.112:48864] [client 18.182.33.112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/system.ini"] [unique_id "aTJprDLwYloPE6LF3uCW6gAAAVc"]
[Fri Dec 05 15:57:25.907338 2025] [:error] [pid 53838:tid 53883] [client 176.65.132.18:50818] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTKQZZ8M7CH_vMhLrzLS3AAAAE4"]
[Fri Dec 05 16:34:07.890882 2025] [:error] [pid 62720:tid 62725] [client 35.167.205.129:54148] [client 35.167.205.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/"] [unique_id "aTKY_2DTJuF6xQ5UsIPz3wAAAYM"]
[Fri Dec 05 16:34:08.616432 2025] [:error] [pid 53839:tid 53898] [client 35.167.205.129:54154] [client 35.167.205.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aTKZAKQOuERg_RN7bn-ODwAAAII"]
[Fri Dec 05 16:59:49.503122 2025] [:error] [pid 53923:tid 53949] [client 143.198.77.240:51778] [client 143.198.77.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.77.240, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTKfBbl8ebZN0VCAVXBLBwAAANg"]
[Fri Dec 05 16:59:50.175958 2025] [:error] [pid 53923:tid 53938] [client 143.198.77.240:62215] [client 143.198.77.240] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.77.240, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTKfBrl8ebZN0VCAVXBLCQAAAM0"]
[Fri Dec 05 18:02:19.237134 2025] [:error] [pid 53837:tid 53859] [client 49.234.192.248:47820] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTKtqzbsUyTxys8OiMIBJgAAABE"]
[Fri Dec 05 21:57:34.216491 2025] [:error] [pid 35962:tid 35966] [client 18.170.50.59:56924] [client 18.170.50.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTLkzp-hnYjbYINfh7HbmwAAAEI"]
[Fri Dec 05 21:59:46.940162 2025] [:error] [pid 18579:tid 18607] [client 54.199.151.45:57288] [client 54.199.151.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTLlUsAUSulJty2JiBq4XwAAABY"]
[Fri Dec 05 22:20:58.280180 2025] [:error] [pid 18614:tid 18629] [client 35.247.143.9:57110] [client 35.247.143.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTLqSnHum9jj9plt7MWAkgAAAU0"]
[Sat Dec 06 00:28:39.216495 2025] [:error] [pid 21789:tid 21813] [client 54.173.91.195:45890] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTMIN_5RGbqUVi6HZ1WFBQAAAFY"]
[Sat Dec 06 00:28:40.880625 2025] [:error] [pid 21789:tid 21808] [client 54.173.91.195:45914] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aTMIOP5RGbqUVi6HZ1WFCQAAAFE"]
[Sat Dec 06 00:28:41.697653 2025] [:error] [pid 21706:tid 21778] [client 54.173.91.195:45924] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aTMIOcgkvG4puA99YgFtLwAAAU8"]
[Sat Dec 06 00:28:45.021472 2025] [:error] [pid 21706:tid 21779] [client 54.173.91.195:45956] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aTMIPcgkvG4puA99YgFtMQAAAVA"]
[Sat Dec 06 00:28:45.845149 2025] [:error] [pid 21706:tid 21777] [client 54.173.91.195:45972] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aTMIPcgkvG4puA99YgFtMgAAAU4"]
[Sat Dec 06 00:28:46.662182 2025] [:error] [pid 21789:tid 21801] [client 54.173.91.195:45984] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aTMIPv5RGbqUVi6HZ1WFGwAAAEo"]
[Sat Dec 06 00:28:47.479834 2025] [:error] [pid 21789:tid 21792] [client 54.173.91.195:55560] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aTMIP_5RGbqUVi6HZ1WFHwAAAEE"]
[Sat Dec 06 00:28:48.298407 2025] [:error] [pid 21789:tid 21803] [client 54.173.91.195:55574] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aTMIQP5RGbqUVi6HZ1WFIgAAAEw"]
[Sat Dec 06 00:28:49.116676 2025] [:error] [pid 21705:tid 21741] [client 54.173.91.195:55578] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aTMIQTnZoS9qagEFj98fZwAAAMU"]
[Sat Dec 06 00:28:49.934501 2025] [:error] [pid 21789:tid 21815] [client 54.173.91.195:55588] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aTMIQf5RGbqUVi6HZ1WFJwAAAFg"]
[Sat Dec 06 00:28:56.595200 2025] [:error] [pid 21706:tid 21778] [client 54.173.91.195:55666] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.rb"] [unique_id "aTMISMgkvG4puA99YgFtOQAAAU8"]
[Sat Dec 06 00:28:57.411722 2025] [:error] [pid 21705:tid 21743] [client 54.173.91.195:41744] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.yaml"] [unique_id "aTMISTnZoS9qagEFj98fbwAAAMc"]
[Sat Dec 06 00:28:58.229252 2025] [:error] [pid 21706:tid 21786] [client 54.173.91.195:41746] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTMISsgkvG4puA99YgFtOwAAAVc"]
[Sat Dec 06 00:28:59.045496 2025] [:error] [pid 21789:tid 21805] [client 54.173.91.195:41762] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.ini"] [unique_id "aTMIS_5RGbqUVi6HZ1WFRAAAAE4"]
[Sat Dec 06 00:28:59.862265 2025] [:error] [pid 21704:tid 21724] [client 54.173.91.195:41774] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.properties"] [unique_id "aTMISzzH7mDgW2-7yVIZbgAAAI8"]
[Sat Dec 06 00:29:00.679178 2025] [:error] [pid 21706:tid 21769] [client 54.173.91.195:41780] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/configuration"] [unique_id "aTMITMgkvG4puA99YgFtPAAAAUY"]
[Sat Dec 06 00:29:01.495411 2025] [:error] [pid 21705:tid 21738] [client 54.173.91.195:41782] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/settings"] [unique_id "aTMITTnZoS9qagEFj98fcQAAAMI"]
[Sat Dec 06 00:29:02.311624 2025] [:error] [pid 21789:tid 21806] [client 54.173.91.195:41798] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/settings.json"] [unique_id "aTMITv5RGbqUVi6HZ1WFSwAAAE8"]
[Sat Dec 06 00:29:03.127453 2025] [:error] [pid 21705:tid 21749] [client 54.173.91.195:41812] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTMITznZoS9qagEFj98fdAAAAM0"]
[Sat Dec 06 00:29:03.942669 2025] [:error] [pid 21706:tid 21764] [client 54.173.91.195:41828] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/settings.rb"] [unique_id "aTMIT8gkvG4puA99YgFtQwAAAUE"]
[Sat Dec 06 00:29:04.760419 2025] [:error] [pid 21789:tid 21812] [client 54.173.91.195:41842] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/app.config.js"] [unique_id "aTMIUP5RGbqUVi6HZ1WFUAAAAFU"]
[Sat Dec 06 00:29:05.577113 2025] [:error] [pid 21704:tid 21731] [client 54.173.91.195:41858] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/local.settings.json"] [unique_id "aTMIUTzH7mDgW2-7yVIZcgAAAJY"]
[Sat Dec 06 00:29:06.393977 2025] [:error] [pid 21789:tid 21813] [client 54.173.91.195:41868] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/secrets.json"] [unique_id "aTMIUv5RGbqUVi6HZ1WFVgAAAFY"]
[Sat Dec 06 00:29:07.213067 2025] [:error] [pid 21706:tid 21780] [client 54.173.91.195:57918] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTMIU8gkvG4puA99YgFtRwAAAVE"]
[Sat Dec 06 00:29:08.029364 2025] [:error] [pid 21789:tid 21805] [client 54.173.91.195:57934] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aTMIVP5RGbqUVi6HZ1WFYgAAAE4"]
[Sat Dec 06 00:29:08.845748 2025] [:error] [pid 21705:tid 21739] [client 54.173.91.195:57946] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aTMIVDnZoS9qagEFj98ffAAAAMM"]
[Sat Dec 06 00:29:09.662586 2025] [:error] [pid 21706:tid 21775] [client 54.173.91.195:57954] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/test.php"] [unique_id "aTMIVcgkvG4puA99YgFtSwAAAUw"]
[Sat Dec 06 00:29:10.479029 2025] [:error] [pid 21704:tid 21733] [client 54.173.91.195:57958] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTMIVjzH7mDgW2-7yVIZeAAAAJg"]
[Sat Dec 06 00:29:11.296297 2025] [:error] [pid 21705:tid 21752] [client 54.173.91.195:57974] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aTMIVznZoS9qagEFj98ffgAAANA"]
[Sat Dec 06 00:29:12.113467 2025] [:error] [pid 21704:tid 21712] [client 54.173.91.195:57988] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/composer.json"] [unique_id "aTMIWDzH7mDgW2-7yVIZfgAAAIM"]
[Sat Dec 06 00:29:12.930741 2025] [:error] [pid 21789:tid 21795] [client 54.173.91.195:57996] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTMIWP5RGbqUVi6HZ1WFcQAAAEQ"]
[Sat Dec 06 00:29:13.746711 2025] [:error] [pid 21706:tid 21785] [client 54.173.91.195:58006] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.php"] [unique_id "aTMIWcgkvG4puA99YgFtVgAAAVY"]
[Sat Dec 06 00:29:14.565416 2025] [:error] [pid 21705:tid 21759] [client 54.173.91.195:58020] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/secrets.php"] [unique_id "aTMIWjnZoS9qagEFj98fgAAAANc"]
[Sat Dec 06 00:29:15.382296 2025] [:error] [pid 21704:tid 21726] [client 54.173.91.195:58026] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.aws/config"] [unique_id "aTMIWzzH7mDgW2-7yVIZgwAAAJE"]
[Sat Dec 06 00:29:16.198741 2025] [:error] [pid 21706:tid 21763] [client 54.173.91.195:58028] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.aws/credentials"] [unique_id "aTMIXMgkvG4puA99YgFtXQAAAUA"]
[Sat Dec 06 00:29:17.015669 2025] [:error] [pid 21704:tid 21729] [client 54.173.91.195:55298] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws/config"] [unique_id "aTMIXTzH7mDgW2-7yVIZhgAAAJQ"]
[Sat Dec 06 00:29:17.833708 2025] [:error] [pid 21789:tid 21811] [client 54.173.91.195:55302] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws/credentials"] [unique_id "aTMIXf5RGbqUVi6HZ1WFeAAAAFQ"]
[Sat Dec 06 00:29:18.648741 2025] [:error] [pid 21789:tid 21815] [client 54.173.91.195:55314] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws.json"] [unique_id "aTMIXv5RGbqUVi6HZ1WFeQAAAFg"]
[Sat Dec 06 00:29:19.465895 2025] [:error] [pid 21789:tid 21806] [client 54.173.91.195:55330] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws-credentials.json"] [unique_id "aTMIX_5RGbqUVi6HZ1WFfwAAAE8"]
[Sat Dec 06 00:29:20.283416 2025] [:error] [pid 21789:tid 21791] [client 54.173.91.195:55334] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws-config.js"] [unique_id "aTMIYP5RGbqUVi6HZ1WFgwAAAEA"]
[Sat Dec 06 00:29:21.100717 2025] [:error] [pid 21789:tid 21795] [client 54.173.91.195:55350] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws-keys.json"] [unique_id "aTMIYf5RGbqUVi6HZ1WFmAAAAEQ"]
[Sat Dec 06 00:29:21.919118 2025] [:error] [pid 21789:tid 21813] [client 54.173.91.195:55364] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws/secrets.yaml"] [unique_id "aTMIYf5RGbqUVi6HZ1WFnQAAAFY"]
[Sat Dec 06 00:29:22.736478 2025] [:error] [pid 21706:tid 21771] [client 54.173.91.195:55370] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws/access-keys.js"] [unique_id "aTMIYsgkvG4puA99YgFtZQAAAUg"]
[Sat Dec 06 00:29:23.551828 2025] [:error] [pid 21789:tid 21798] [client 54.173.91.195:55382] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws/config.ini"] [unique_id "aTMIY_5RGbqUVi6HZ1WFxwAAAEc"]
[Sat Dec 06 00:29:24.368789 2025] [:error] [pid 21705:tid 21738] [client 54.173.91.195:55392] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws/credentials.bak"] [unique_id "aTMIZDnZoS9qagEFj98fjAAAAMI"]
[Sat Dec 06 00:29:25.187623 2025] [:error] [pid 21705:tid 21747] [client 54.173.91.195:55408] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.aws/secrets"] [unique_id "aTMIZTnZoS9qagEFj98fkgAAAMs"]
[Sat Dec 06 00:29:26.005124 2025] [:error] [pid 21704:tid 21713] [client 54.173.91.195:55422] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws-env.json"] [unique_id "aTMIZjzH7mDgW2-7yVIZjQAAAIQ"]
[Sat Dec 06 00:29:26.824088 2025] [:error] [pid 21705:tid 21736] [client 54.173.91.195:55430] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws-keys.env"] [unique_id "aTMIZjnZoS9qagEFj98fmgAAAMA"]
[Sat Dec 06 00:29:27.642631 2025] [:error] [pid 21789:tid 21799] [client 54.173.91.195:36720] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.aws/config.bak"] [unique_id "aTMIZ_5RGbqUVi6HZ1WF5wAAAEg"]
[Sat Dec 06 00:29:28.462451 2025] [:error] [pid 21705:tid 21742] [client 54.173.91.195:36734] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws/secrets.json"] [unique_id "aTMIaDnZoS9qagEFj98fogAAAMY"]
[Sat Dec 06 00:29:29.282743 2025] [:error] [pid 21706:tid 21767] [client 54.173.91.195:36748] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws/config.properties"] [unique_id "aTMIacgkvG4puA99YgFtdwAAAUQ"]
[Sat Dec 06 00:29:30.099814 2025] [:error] [pid 21705:tid 21740] [client 54.173.91.195:36756] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.aws/credentials.json"] [unique_id "aTMIajnZoS9qagEFj98fqAAAAMQ"]
[Sat Dec 06 00:29:30.917182 2025] [:error] [pid 21705:tid 21755] [client 54.173.91.195:36764] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws_keys.py"] [unique_id "aTMIajnZoS9qagEFj98frAAAANM"]
[Sat Dec 06 00:29:31.733686 2025] [:error] [pid 21789:tid 21798] [client 54.173.91.195:36768] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe/config"] [unique_id "aTMIa_5RGbqUVi6HZ1WF7gAAAEc"]
[Sat Dec 06 00:29:32.554509 2025] [:error] [pid 21706:tid 21776] [client 54.173.91.195:36780] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe.json"] [unique_id "aTMIbMgkvG4puA99YgFtfgAAAU0"]
[Sat Dec 06 00:29:33.370659 2025] [:error] [pid 21705:tid 21751] [client 54.173.91.195:36794] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe.js"] [unique_id "aTMIbTnZoS9qagEFj98fswAAAM8"]
[Sat Dec 06 00:29:34.187141 2025] [:error] [pid 21789:tid 21806] [client 54.173.91.195:36806] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe-config.yaml"] [unique_id "aTMIbv5RGbqUVi6HZ1WF9wAAAE8"]
[Sat Dec 06 00:29:35.004863 2025] [:error] [pid 21704:tid 21729] [client 54.173.91.195:36816] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe-keys.json"] [unique_id "aTMIbzzH7mDgW2-7yVIZnwAAAJQ"]
[Sat Dec 06 00:29:35.823258 2025] [:error] [pid 21706:tid 21774] [client 54.173.91.195:36830] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe/credentials"] [unique_id "aTMIb8gkvG4puA99YgFthAAAAUs"]
[Sat Dec 06 00:29:36.641324 2025] [:error] [pid 21704:tid 21727] [client 54.173.91.195:36834] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe/secrets.yml"] [unique_id "aTMIcDzH7mDgW2-7yVIZogAAAJI"]
[Sat Dec 06 00:29:37.458624 2025] [:error] [pid 21705:tid 21742] [client 54.173.91.195:57352] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe.env"] [unique_id "aTMIcTnZoS9qagEFj98fuAAAAMY"]
[Sat Dec 06 00:29:38.274681 2025] [:error] [pid 21706:tid 21766] [client 54.173.91.195:57360] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe/config.php"] [unique_id "aTMIcsgkvG4puA99YgFthgAAAUM"]
[Sat Dec 06 00:29:39.093247 2025] [:error] [pid 21789:tid 21795] [client 54.173.91.195:57372] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.stripe/keys"] [unique_id "aTMIc_5RGbqUVi6HZ1WGAwAAAEQ"]
[Sat Dec 06 00:29:39.909258 2025] [:error] [pid 21704:tid 21720] [client 54.173.91.195:57384] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe_api.json"] [unique_id "aTMIczzH7mDgW2-7yVIZpwAAAIs"]
[Sat Dec 06 00:29:40.724764 2025] [:error] [pid 21789:tid 21794] [client 54.173.91.195:57396] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/stripe.rb"] [unique_id "aTMIdP5RGbqUVi6HZ1WGCgAAAEM"]
[Sat Dec 06 00:29:41.541926 2025] [:error] [pid 21706:tid 21784] [client 54.173.91.195:57398] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe_keys.py"] [unique_id "aTMIdcgkvG4puA99YgFtiQAAAVU"]
[Sat Dec 06 00:29:42.358169 2025] [:error] [pid 21789:tid 21805] [client 54.173.91.195:57406] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe.ini"] [unique_id "aTMIdv5RGbqUVi6HZ1WGFAAAAE4"]
[Sat Dec 06 00:29:43.175903 2025] [:error] [pid 21789:tid 21812] [client 54.173.91.195:57416] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe.properties"] [unique_id "aTMId_5RGbqUVi6HZ1WGGgAAAFU"]
[Sat Dec 06 00:29:43.993383 2025] [:error] [pid 21704:tid 21721] [client 54.173.91.195:57418] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe/config.js"] [unique_id "aTMIdzzH7mDgW2-7yVIZqAAAAIw"]
[Sat Dec 06 00:29:44.812756 2025] [:error] [pid 21706:tid 21772] [client 54.173.91.195:57422] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe/secrets.json"] [unique_id "aTMIeMgkvG4puA99YgFtkgAAAUk"]
[Sat Dec 06 00:29:45.629656 2025] [:error] [pid 21706:tid 21771] [client 54.173.91.195:57430] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.stripe"] [unique_id "aTMIecgkvG4puA99YgFtmQAAAUg"]
[Sat Dec 06 00:29:46.447725 2025] [:error] [pid 21704:tid 21710] [client 54.173.91.195:57442] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/stripe-credentials.json"] [unique_id "aTMIejzH7mDgW2-7yVIZsAAAAIE"]
[Sat Dec 06 00:29:47.264465 2025] [:error] [pid 21705:tid 21747] [client 54.173.91.195:39866] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/api/stripe.js"] [unique_id "aTMIeznZoS9qagEFj98f0wAAAMs"]
[Sat Dec 06 00:29:48.083054 2025] [:error] [pid 21789:tid 21805] [client 54.173.91.195:39878] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/local_settings.py"] [unique_id "aTMIfP5RGbqUVi6HZ1WGTQAAAE4"]
[Sat Dec 06 00:29:48.900281 2025] [:error] [pid 21704:tid 21717] [client 54.173.91.195:39884] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/django_settings.json"] [unique_id "aTMIfDzH7mDgW2-7yVIZuAAAAIg"]
[Sat Dec 06 00:29:49.715891 2025] [:error] [pid 21704:tid 21729] [client 54.173.91.195:39898] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.django"] [unique_id "aTMIfTzH7mDgW2-7yVIZvAAAAJQ"]
[Sat Dec 06 00:29:50.534433 2025] [:error] [pid 21705:tid 21744] [client 54.173.91.195:39910] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manage.py"] [unique_id "aTMIfjnZoS9qagEFj98f2wAAAMg"]
[Sat Dec 06 00:29:51.352914 2025] [:error] [pid 21704:tid 21718] [client 54.173.91.195:39916] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/settings/local.py"] [unique_id "aTMIfzzH7mDgW2-7yVIZxQAAAIk"]
[Sat Dec 06 00:29:52.170176 2025] [:error] [pid 21705:tid 21741] [client 54.173.91.195:39918] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/secrets.py"] [unique_id "aTMIgDnZoS9qagEFj98f3QAAAMU"]
[Sat Dec 06 00:29:52.986942 2025] [:error] [pid 21705:tid 21758] [client 54.173.91.195:39934] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/django.env"] [unique_id "aTMIgDnZoS9qagEFj98f4wAAANY"]
[Sat Dec 06 00:29:53.803396 2025] [:error] [pid 21789:tid 21808] [client 54.173.91.195:39948] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/python.config.json"] [unique_id "aTMIgf5RGbqUVi6HZ1WGXgAAAFE"]
[Sat Dec 06 00:29:54.620439 2025] [:error] [pid 21704:tid 21710] [client 54.173.91.195:39960] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/app/settings/production.py"] [unique_id "aTMIgjzH7mDgW2-7yVIZyAAAAIE"]
[Sat Dec 06 00:29:57.950751 2025] [:error] [pid 21789:tid 21811] [client 54.173.91.195:38244] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/django.ini"] [unique_id "aTMIhf5RGbqUVi6HZ1WGZwAAAFQ"]
[Sat Dec 06 00:30:01.278470 2025] [:error] [pid 21704:tid 21719] [client 54.173.91.195:38286] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.com.au"] [uri "/config/master.key"] [unique_id "aTMIiTzH7mDgW2-7yVIZ3QAAAIo"]
[Sat Dec 06 00:30:06.269410 2025] [:error] [pid 21706:tid 21778] [client 54.173.91.195:38316] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rails.env"] [unique_id "aTMIjsgkvG4puA99YgFt2QAAAU8"]
[Sat Dec 06 00:30:07.084723 2025] [:error] [pid 21704:tid 21718] [client 54.173.91.195:58044] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/initializers/secret_token.rb"] [unique_id "aTMIjzzH7mDgW2-7yVIZ7QAAAIk"]
[Sat Dec 06 00:30:07.901322 2025] [:error] [pid 21705:tid 21750] [client 54.173.91.195:58048] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/cable.yml"] [unique_id "aTMIjznZoS9qagEFj98gBQAAAM4"]
[Sat Dec 06 00:30:08.716854 2025] [:error] [pid 21789:tid 21811] [client 54.173.91.195:58054] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Gemfile.lock"] [unique_id "aTMIkP5RGbqUVi6HZ1WGigAAAFQ"]
[Sat Dec 06 00:30:09.533110 2025] [:error] [pid 21705:tid 21746] [client 54.173.91.195:58068] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/puma.rb"] [unique_id "aTMIkTnZoS9qagEFj98gCwAAAMo"]
[Sat Dec 06 00:30:10.349006 2025] [:error] [pid 21704:tid 21723] [client 54.173.91.195:58080] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/routes.rb"] [unique_id "aTMIkjzH7mDgW2-7yVIZ8AAAAI4"]
[Sat Dec 06 00:30:11.164896 2025] [:error] [pid 21706:tid 21783] [client 54.173.91.195:58082] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.ruby-version"] [unique_id "aTMIk8gkvG4puA99YgFt5QAAAVQ"]
[Sat Dec 06 00:30:11.982429 2025] [:error] [pid 21705:tid 21760] [client 54.173.91.195:58094] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/application.yml"] [unique_id "aTMIkznZoS9qagEFj98gDwAAANg"]
[Sat Dec 06 00:30:12.798480 2025] [:error] [pid 21789:tid 21798] [client 54.173.91.195:58096] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/secrets.yml.enc"] [unique_id "aTMIlP5RGbqUVi6HZ1WGlgAAAEc"]
[Sat Dec 06 00:30:13.617727 2025] [:error] [pid 21704:tid 21729] [client 54.173.91.195:58112] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/master.key.bak"] [unique_id "aTMIlTzH7mDgW2-7yVIZ-AAAAJQ"]
[Sat Dec 06 00:30:14.434649 2025] [:error] [pid 21704:tid 21714] [client 54.173.91.195:58118] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/database.json"] [unique_id "aTMIljzH7mDgW2-7yVIZ-QAAAIU"]
[Sat Dec 06 00:30:15.250634 2025] [:error] [pid 21704:tid 21715] [client 54.173.91.195:58134] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.js"] [unique_id "aTMIlzzH7mDgW2-7yVIZ-wAAAIY"]
[Sat Dec 06 00:30:16.066077 2025] [:error] [pid 21789:tid 21797] [client 54.173.91.195:58138] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/api_keys.js"] [unique_id "aTMImP5RGbqUVi6HZ1WGpAAAAEY"]
[Sat Dec 06 00:30:16.893647 2025] [:error] [pid 21705:tid 21755] [client 54.173.91.195:58140] [client 54.173.91.195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.js"] [unique_id "aTMImDnZoS9qagEFj98gGAAAANM"]
[Sat Dec 06 00:30:17.709341 2025] [:error] [pid 21789:tid 21792] [client 54.173.91.195:45194] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/package.json"] [unique_id "aTMImf5RGbqUVi6HZ1WGrgAAAEE"]
[Sat Dec 06 00:30:18.526733 2025] [:error] [pid 21704:tid 21724] [client 54.173.91.195:45198] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/server.js"] [unique_id "aTMImjzH7mDgW2-7yVIaAQAAAI8"]
[Sat Dec 06 00:30:19.343414 2025] [:error] [pid 21789:tid 21799] [client 54.173.91.195:45208] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/app.js"] [unique_id "aTMIm_5RGbqUVi6HZ1WGtAAAAEg"]
[Sat Dec 06 00:30:20.160520 2025] [:error] [pid 21705:tid 21759] [client 54.173.91.195:45222] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/env.js"] [unique_id "aTMInDnZoS9qagEFj98gHAAAANc"]
[Sat Dec 06 00:30:20.975339 2025] [:error] [pid 21789:tid 21801] [client 54.173.91.195:45230] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/secrets.js"] [unique_id "aTMInP5RGbqUVi6HZ1WGvgAAAEo"]
[Sat Dec 06 00:30:21.793445 2025] [:error] [pid 21789:tid 21810] [client 54.173.91.195:45238] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/node.config.json"] [unique_id "aTMInf5RGbqUVi6HZ1WGwwAAAFM"]
[Sat Dec 06 00:30:22.610204 2025] [:error] [pid 21706:tid 21768] [client 54.173.91.195:45254] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/js/secrets.json"] [unique_id "aTMInsgkvG4puA99YgFt9wAAAUU"]
[Sat Dec 06 00:30:23.428375 2025] [:error] [pid 21706:tid 21763] [client 54.173.91.195:45270] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/client/config.js"] [unique_id "aTMIn8gkvG4puA99YgFt-wAAAUA"]
[Sat Dec 06 00:30:24.261319 2025] [:error] [pid 21706:tid 21771] [client 54.173.91.195:45280] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/config.js"] [unique_id "aTMIoMgkvG4puA99YgFuAAAAAUg"]
[Sat Dec 06 00:30:25.077649 2025] [:error] [pid 21705:tid 21755] [client 54.173.91.195:45286] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/src/config/api.js"] [unique_id "aTMIoTnZoS9qagEFj98gIgAAANM"]
[Sat Dec 06 00:30:25.905047 2025] [:error] [pid 21789:tid 21807] [client 54.173.91.195:45292] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/node_modules/.bin/env"] [unique_id "aTMIof5RGbqUVi6HZ1WG2wAAAFA"]
[Sat Dec 06 00:30:26.722679 2025] [:error] [pid 21706:tid 21767] [client 54.173.91.195:45302] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.npmrc"] [unique_id "aTMIosgkvG4puA99YgFuAgAAAUQ"]
[Sat Dec 06 00:30:27.539281 2025] [:error] [pid 21706:tid 21786] [client 54.173.91.195:33032] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/yarn.lock"] [unique_id "aTMIo8gkvG4puA99YgFuAwAAAVc"]
[Sat Dec 06 00:30:28.358445 2025] [:error] [pid 21706:tid 21763] [client 54.173.91.195:33044] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/client.js"] [unique_id "aTMIpMgkvG4puA99YgFuBQAAAUA"]
[Sat Dec 06 00:30:29.175326 2025] [:error] [pid 21705:tid 21756] [client 54.173.91.195:33058] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/api/config.js"] [unique_id "aTMIpTnZoS9qagEFj98gLgAAANQ"]
[Sat Dec 06 00:30:29.991990 2025] [:error] [pid 21789:tid 21792] [client 54.173.91.195:33060] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/frontend/env.json"] [unique_id "aTMIpf5RGbqUVi6HZ1WG7QAAAEE"]
[Sat Dec 06 00:30:30.808251 2025] [:error] [pid 21706:tid 21764] [client 54.173.91.195:33076] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/backend/secrets.js"] [unique_id "aTMIpsgkvG4puA99YgFuCgAAAUE"]
[Sat Dec 06 00:30:31.628077 2025] [:error] [pid 21705:tid 21751] [client 54.173.91.195:33086] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/application.properties"] [unique_id "aTMIpznZoS9qagEFj98gMQAAAM8"]
[Sat Dec 06 00:30:32.442167 2025] [:error] [pid 21704:tid 21711] [client 54.173.91.195:33098] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/secrets.properties"] [unique_id "aTMIqDzH7mDgW2-7yVIaGwAAAII"]
[Sat Dec 06 00:30:33.259374 2025] [:error] [pid 21705:tid 21750] [client 54.173.91.195:33106] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/database.properties"] [unique_id "aTMIqTnZoS9qagEFj98gOAAAAM4"]
[Sat Dec 06 00:30:34.078074 2025] [:error] [pid 21705:tid 21738] [client 54.173.91.195:33110] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/app.ini"] [unique_id "aTMIqjnZoS9qagEFj98gOwAAAMI"]
[Sat Dec 06 00:30:34.893779 2025] [:error] [pid 21704:tid 21724] [client 54.173.91.195:33126] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/local.ini"] [unique_id "aTMIqjzH7mDgW2-7yVIaJAAAAI8"]
[Sat Dec 06 00:30:35.712813 2025] [:error] [pid 21705:tid 21744] [client 54.173.91.195:33142] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/secrets.ini"] [unique_id "aTMIqznZoS9qagEFj98gPgAAAMg"]
[Sat Dec 06 00:30:36.529191 2025] [:error] [pid 21705:tid 21740] [client 54.173.91.195:33152] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/app.json"] [unique_id "aTMIrDnZoS9qagEFj98gQAAAAMQ"]
[Sat Dec 06 00:30:37.347114 2025] [:error] [pid 21704:tid 21728] [client 54.173.91.195:36658] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/secrets.json"] [unique_id "aTMIrTzH7mDgW2-7yVIaLgAAAJM"]
[Sat Dec 06 00:30:38.166344 2025] [:error] [pid 21789:tid 21804] [client 54.173.91.195:36666] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/local.json"] [unique_id "aTMIrv5RGbqUVi6HZ1WHBwAAAE0"]
[Sat Dec 06 00:30:38.980871 2025] [:error] [pid 21789:tid 21795] [client 54.173.91.195:36676] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/database.json"] [unique_id "aTMIrv5RGbqUVi6HZ1WHCwAAAEQ"]
[Sat Dec 06 00:30:39.798806 2025] [:error] [pid 21706:tid 21782] [client 54.173.91.195:36690] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/env.properties"] [unique_id "aTMIr8gkvG4puA99YgFuIAAAAVM"]
[Sat Dec 06 00:30:40.616371 2025] [:error] [pid 21705:tid 21743] [client 54.173.91.195:36702] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aws.properties"] [unique_id "aTMIsDnZoS9qagEFj98gTwAAAMc"]
[Sat Dec 06 00:30:41.435973 2025] [:error] [pid 21706:tid 21776] [client 54.173.91.195:36716] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/php.ini"] [unique_id "aTMIscgkvG4puA99YgFuIwAAAU0"]
[Sat Dec 06 00:30:42.254860 2025] [:error] [pid 21706:tid 21775] [client 54.173.91.195:36730] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.properties"] [unique_id "aTMIssgkvG4puA99YgFuJgAAAUw"]
[Sat Dec 06 00:30:43.071209 2025] [:error] [pid 21706:tid 21763] [client 54.173.91.195:36736] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/user.properties"] [unique_id "aTMIs8gkvG4puA99YgFuKAAAAUA"]
[Sat Dec 06 00:30:43.887857 2025] [:error] [pid 21706:tid 21766] [client 54.173.91.195:36738] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/system.ini"] [unique_id "aTMIs8gkvG4puA99YgFuLAAAAUM"]
[Sat Dec 06 00:30:44.706315 2025] [:error] [pid 21706:tid 21768] [client 54.173.91.195:36748] [client 54.173.91.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/global.json"] [unique_id "aTMItMgkvG4puA99YgFuNQAAAUU"]
[Sat Dec 06 01:37:32.969684 2025] [:error] [pid 11070:tid 11077] [client 154.198.81.57:45755] [client 154.198.81.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.198.81.57, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTMYXKYvFlJHrPBrjoD0kQAAAAQ"]
[Sat Dec 06 03:26:20.595120 2025] [:error] [pid 14203:tid 14246] [client 34.121.133.167:50617] [client 34.121.133.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.133.167, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTMx3FzVRfH_YiKkV3HuJQAAAEo"]
[Sat Dec 06 03:26:22.633343 2025] [:error] [pid 14203:tid 14245] [client 34.121.133.167:50617] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aTMx3lzVRfH_YiKkV3HuMwAAAEk"]
[Sat Dec 06 03:26:23.709464 2025] [:error] [pid 14204:tid 14273] [client 34.121.133.167:49926] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aTMx38YbaBoUQNJ0vqweZQAAAIk"]
[Sat Dec 06 03:26:24.620477 2025] [:error] [pid 14202:tid 14218] [client 34.121.133.167:53053] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aTMx4F9w0iTK_WWQxnh8IgAAAAw"]
[Sat Dec 06 03:26:25.484609 2025] [:error] [pid 14294:tid 14312] [client 34.121.133.167:51639] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aTMx4ZZf8ISAq1_f2DQA4QAAANA"]
[Sat Dec 06 03:26:26.281780 2025] [:error] [pid 14203:tid 14260] [client 34.121.133.167:51159] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTMx4lzVRfH_YiKkV3HuOgAAAFg"]
[Sat Dec 06 03:26:27.210700 2025] [:error] [pid 14203:tid 14259] [client 34.121.133.167:55502] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTMx41zVRfH_YiKkV3HuPAAAAFc"]
[Sat Dec 06 03:26:28.294649 2025] [:error] [pid 14294:tid 14319] [client 34.121.133.167:56939] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTMx5JZf8ISAq1_f2DQA5QAAANc"]
[Sat Dec 06 03:26:29.174365 2025] [:error] [pid 14202:tid 14225] [client 34.121.133.167:57650] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTMx5V9w0iTK_WWQxnh8LAAAABM"]
[Sat Dec 06 03:26:30.007082 2025] [:error] [pid 14294:tid 14302] [client 34.121.133.167:57170] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTMx5pZf8ISAq1_f2DQA6QAAAMY"]
[Sat Dec 06 03:26:30.817530 2025] [:error] [pid 14294:tid 14306] [client 34.121.133.167:58462] [client 34.121.133.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTMx5pZf8ISAq1_f2DQA7QAAAMo"]
[Sat Dec 06 03:26:50.286776 2025] [:error] [pid 14294:tid 14300] [client 192.166.246.85:10506] [client 192.166.246.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTMx-pZf8ISAq1_f2DQBBAAAAMQ"]
[Sat Dec 06 03:26:50.751421 2025] [:error] [pid 14204:tid 14275] [client 192.166.246.85:6906] [client 192.166.246.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTMx-sYbaBoUQNJ0vqwefAAAAIs"]
[Sat Dec 06 03:26:53.687092 2025] [:error] [pid 14294:tid 14309] [client 192.166.246.85:10524] [client 192.166.246.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aTMx_ZZf8ISAq1_f2DQBBwAAAM0"]
[Sat Dec 06 03:26:54.115464 2025] [:error] [pid 14294:tid 14302] [client 192.166.246.85:6938] [client 192.166.246.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aTMx_pZf8ISAq1_f2DQBCAAAAMY"]
[Sat Dec 06 03:26:57.014380 2025] [:error] [pid 14294:tid 14310] [client 192.166.246.85:31344] [client 192.166.246.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.svn/wc.db"] [unique_id "aTMyAZZf8ISAq1_f2DQBFQAAAM4"]
[Sat Dec 06 06:50:52.690661 2025] [:error] [pid 61215:tid 61232] [client 152.42.243.175:50974] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTNhzOOOZ8nTCBYuI-zdtAAAAA0"]
[Sat Dec 06 06:50:53.033917 2025] [:error] [pid 35622:tid 35661] [client 152.42.243.175:51004] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "aTNhzSOSP_9DVLgFwI4zQwAAAYo"]
[Sat Dec 06 06:50:53.377404 2025] [:error] [pid 35622:tid 35667] [client 152.42.243.175:51042] [client 152.42.243.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feed/"] [unique_id "aTNhzSOSP_9DVLgFwI4zRgAAAZA"]
[Sat Dec 06 10:20:43.340732 2025] [:error] [pid 61215:tid 61234] [client 54.193.134.180:45514] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTOS--OOZ8nTCBYuI-z-TAAAAA8"]
[Sat Dec 06 10:20:44.018379 2025] [:error] [pid 61303:tid 61319] [client 54.193.134.180:45526] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/error.log"] [unique_id "aTOS_NwK_fe00OH7zy4uqwAAAM0"]
[Sat Dec 06 10:20:44.382464 2025] [:error] [pid 61303:tid 61317] [client 54.193.134.180:45526] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "aTOS_NwK_fe00OH7zy4urQAAAMs"]
[Sat Dec 06 10:20:44.558976 2025] [:error] [pid 61303:tid 61312] [client 54.193.134.180:45526] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/database.sql"] [unique_id "aTOS_NwK_fe00OH7zy4urgAAAMY"]
[Sat Dec 06 10:20:44.732582 2025] [:error] [pid 61303:tid 61326] [client 54.193.134.180:45526] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/backup.sql"] [unique_id "aTOS_NwK_fe00OH7zy4urwAAANM"]
[Sat Dec 06 10:20:44.906001 2025] [:error] [pid 61303:tid 61310] [client 54.193.134.180:45526] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/debug.log"] [unique_id "aTOS_NwK_fe00OH7zy4usAAAAMQ"]
[Sat Dec 06 10:20:45.267450 2025] [:error] [pid 61303:tid 61316] [client 54.193.134.180:45526] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/dump.sql"] [unique_id "aTOS_dwK_fe00OH7zy4usgAAAMo"]
[Sat Dec 06 10:20:45.439371 2025] [:error] [pid 61303:tid 61331] [client 54.193.134.180:45526] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aTOS_dwK_fe00OH7zy4uswAAANg"]
[Sat Dec 06 10:20:46.820055 2025] [:error] [pid 35591:tid 35600] [client 54.193.134.180:45538] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aTOS_obmw-7bFvTxc9PFTgAAAQc"]
[Sat Dec 06 10:20:47.691558 2025] [:error] [pid 52809:tid 52819] [client 54.193.134.180:45550] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aTOS_-rRwgsmpIJQ2qYguwAAAgg"]
[Sat Dec 06 10:20:48.369160 2025] [:error] [pid 52809:tid 52812] [client 54.193.134.180:45554] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/db_backup.sql"] [unique_id "aTOTAOrRwgsmpIJQ2qYgvQAAAgE"]
[Sat Dec 06 10:20:49.097831 2025] [:error] [pid 52809:tid 52827] [client 54.193.134.180:45554] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aTOTAerRwgsmpIJQ2qYgwQAAAhA"]
[Sat Dec 06 10:20:49.772621 2025] [:error] [pid 48399:tid 48422] [client 54.193.134.180:45556] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "aTOTAejNPOrIshd8EwdwbAAAAdU"]
[Sat Dec 06 10:20:50.825474 2025] [:error] [pid 61215:tid 61243] [client 54.193.134.180:45564] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aTOTAuOOZ8nTCBYuI-z-VwAAABg"]
[Sat Dec 06 10:20:51.688611 2025] [:error] [pid 35622:tid 35656] [client 54.193.134.180:51642] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aTOTAyOSP_9DVLgFwI5zqwAAAYU"]
[Sat Dec 06 10:20:52.363857 2025] [:error] [pid 35622:tid 35653] [client 54.193.134.180:51658] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docker-compose.yml"] [unique_id "aTOTBCOSP_9DVLgFwI5zrAAAAYI"]
[Sat Dec 06 10:20:53.062326 2025] [:error] [pid 48399:tid 48420] [client 54.193.134.180:51670] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws-config.json"] [unique_id "aTOTBejNPOrIshd8EwdweAAAAdM"]
[Sat Dec 06 10:20:53.758675 2025] [:error] [pid 48399:tid 48417] [client 54.193.134.180:51672] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev.local"] [unique_id "aTOTBejNPOrIshd8EwdwfAAAAdA"]
[Sat Dec 06 10:20:54.443948 2025] [:error] [pid 61216:tid 61256] [client 54.193.134.180:51676] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod.local"] [unique_id "aTOTBjHlXXVdP5ewviWtRgAAAEo"]
[Sat Dec 06 10:20:55.132296 2025] [:error] [pid 61216:tid 61268] [client 54.193.134.180:51678] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.1"] [unique_id "aTOTBzHlXXVdP5ewviWtSQAAAFY"]
[Sat Dec 06 10:20:55.841977 2025] [:error] [pid 35622:tid 35661] [client 54.193.134.180:51692] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aTOTByOSP_9DVLgFwI5zrwAAAYo"]
[Sat Dec 06 10:20:56.519643 2025] [:error] [pid 35622:tid 35655] [client 54.193.134.180:51708] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aTOTCCOSP_9DVLgFwI5zsgAAAYQ"]
[Sat Dec 06 10:20:57.192659 2025] [:error] [pid 61217:tid 61295] [client 54.193.134.180:51712] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.php"] [unique_id "aTOTCVdSKQYfLI3fYo474wAAAJY"]
[Sat Dec 06 10:20:57.876693 2025] [:error] [pid 61217:tid 61293] [client 54.193.134.180:51722] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/v1/config"] [unique_id "aTOTCVdSKQYfLI3fYo475QAAAJQ"]
[Sat Dec 06 10:20:58.550596 2025] [:error] [pid 48399:tid 48425] [client 54.193.134.180:51724] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_error.log"] [unique_id "aTOTCujNPOrIshd8EwdwhQAAAdg"]
[Sat Dec 06 10:20:59.224175 2025] [:error] [pid 61216:tid 61261] [client 54.193.134.180:51736] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/etc/local.xml"] [unique_id "aTOTCzHlXXVdP5ewviWtUQAAAE8"]
[Sat Dec 06 10:20:59.916353 2025] [:error] [pid 61215:tid 61219] [client 54.193.134.180:51750] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/configuration.php"] [unique_id "aTOTC-OOZ8nTCBYuI-z-XAAAAAA"]
[Sat Dec 06 10:21:00.587250 2025] [:error] [pid 61216:tid 61256] [client 54.193.134.180:51632] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sites/default/settings.php"] [unique_id "aTOTDDHlXXVdP5ewviWtUgAAAEo"]
[Sat Dec 06 10:21:01.304046 2025] [:error] [pid 35621:tid 35639] [client 54.193.134.180:51644] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.DS_Store"] [unique_id "aTOTDUQGb3oZH9SdKQVjsgAAAU8"]
[Sat Dec 06 10:21:01.982497 2025] [:error] [pid 35622:tid 35675] [client 54.193.134.180:51660] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.zip"] [unique_id "aTOTDSOSP_9DVLgFwI5zuAAAAZg"]
[Sat Dec 06 10:21:02.668826 2025] [:error] [pid 52809:tid 52825] [client 54.193.134.180:51664] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.txt"] [unique_id "aTOTDurRwgsmpIJQ2qYgywAAAg4"]
[Sat Dec 06 10:21:03.346598 2025] [:error] [pid 61217:tid 61297] [client 54.193.134.180:51678] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.json"] [unique_id "aTOTD1dSKQYfLI3fYo476wAAAJg"]
[Sat Dec 06 10:21:04.042973 2025] [:error] [pid 35591:tid 35594] [client 54.193.134.180:51690] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/credentials"] [unique_id "aTOTEIbmw-7bFvTxc9PFZwAAAQE"]
[Sat Dec 06 10:21:04.733448 2025] [:error] [pid 61303:tid 61326] [client 54.193.134.180:51704] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aTOTENwK_fe00OH7zy4uuwAAANM"]
[Sat Dec 06 10:21:05.442602 2025] [:error] [pid 61217:tid 61291] [client 54.193.134.180:51718] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "aTOTEVdSKQYfLI3fYo478AAAAJI"]
[Sat Dec 06 10:21:06.121406 2025] [:error] [pid 61215:tid 61240] [client 54.193.134.180:51730] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php.php"] [unique_id "aTOTEuOOZ8nTCBYuI-z-ZgAAABU"]
[Sat Dec 06 10:21:06.802456 2025] [:error] [pid 35622:tid 35655] [client 54.193.134.180:51746] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/errors.log"] [unique_id "aTOTEiOSP_9DVLgFwI5zuwAAAYQ"]
[Sat Dec 06 10:21:07.495911 2025] [:error] [pid 61303:tid 61306] [client 54.193.134.180:51748] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app/etc/env.php"] [unique_id "aTOTE9wK_fe00OH7zy4uwAAAAMA"]
[Sat Dec 06 10:21:08.180641 2025] [:error] [pid 35622:tid 35666] [client 54.193.134.180:51762] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs/application.log"] [unique_id "aTOTFCOSP_9DVLgFwI5zvAAAAY8"]
[Sat Dec 06 10:21:08.854341 2025] [:error] [pid 35622:tid 35660] [client 54.193.134.180:51772] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app/logs/dev.log"] [unique_id "aTOTFCOSP_9DVLgFwI5zwAAAAYk"]
[Sat Dec 06 10:21:09.529733 2025] [:error] [pid 61217:tid 61276] [client 54.193.134.180:51778] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app/logs/prod.log"] [unique_id "aTOTFVdSKQYfLI3fYo479gAAAIM"]
[Sat Dec 06 10:21:10.208757 2025] [:error] [pid 61217:tid 61289] [client 54.193.134.180:51780] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Thumbs.db"] [unique_id "aTOTFldSKQYfLI3fYo479wAAAJA"]
[Sat Dec 06 10:21:10.889761 2025] [:error] [pid 35622:tid 35674] [client 54.193.134.180:56498] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site-backup.zip"] [unique_id "aTOTFiOSP_9DVLgFwI5z0QAAAZc"]
[Sat Dec 06 10:21:11.572747 2025] [:error] [pid 35622:tid 35653] [client 54.193.134.180:56514] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/backup.tar.gz"] [unique_id "aTOTFyOSP_9DVLgFwI5z1wAAAYI"]
[Sat Dec 06 10:21:12.267871 2025] [:error] [pid 35622:tid 35670] [client 54.193.134.180:56524] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k8s-config.yml"] [unique_id "aTOTGCOSP_9DVLgFwI5z2gAAAZM"]
[Sat Dec 06 10:21:12.943781 2025] [:error] [pid 61217:tid 61297] [client 54.193.134.180:56538] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kubernetes.yml"] [unique_id "aTOTGFdSKQYfLI3fYo47-QAAAJg"]
[Sat Dec 06 10:21:13.635180 2025] [:error] [pid 61217:tid 61278] [client 54.193.134.180:56552] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dockerignore"] [unique_id "aTOTGVdSKQYfLI3fYo47-wAAAIU"]
[Sat Dec 06 10:21:14.312790 2025] [:error] [pid 35622:tid 35664] [client 54.193.134.180:56566] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.docker/config.json"] [unique_id "aTOTGiOSP_9DVLgFwI5z6AAAAY0"]
[Sat Dec 06 10:21:14.997453 2025] [:error] [pid 35622:tid 35656] [client 54.193.134.180:56578] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dockerenv"] [unique_id "aTOTGiOSP_9DVLgFwI5z7AAAAYU"]
[Sat Dec 06 10:21:15.692020 2025] [:error] [pid 35622:tid 35672] [client 54.193.134.180:56584] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docker-compose.override.yml"] [unique_id "aTOTGyOSP_9DVLgFwI5z8gAAAZU"]
[Sat Dec 06 10:21:16.376046 2025] [:error] [pid 52809:tid 52828] [client 54.193.134.180:56588] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docker-compose.yaml"] [unique_id "aTOTHOrRwgsmpIJQ2qYg1QAAAhE"]
[Sat Dec 06 10:21:17.060369 2025] [:error] [pid 61303:tid 61316] [client 54.193.134.180:56598] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/security.txt"] [unique_id "aTOTHdwK_fe00OH7zy4uxQAAAMo"]
[Sat Dec 06 10:21:17.748798 2025] [:error] [pid 61216:tid 61248] [client 54.193.134.180:56602] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/v2/config"] [unique_id "aTOTHTHlXXVdP5ewviWtWQAAAEI"]
[Sat Dec 06 10:21:18.425534 2025] [:error] [pid 48399:tid 48403] [client 54.193.134.180:56604] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.secrets"] [unique_id "aTOTHujNPOrIshd8EwdwlAAAAcI"]
[Sat Dec 06 10:21:19.107187 2025] [:error] [pid 35622:tid 35673] [client 54.193.134.180:56620] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oauth.json"] [unique_id "aTOTHyOSP_9DVLgFwI5z_AAAAZY"]
[Sat Dec 06 10:21:19.804922 2025] [:error] [pid 35622:tid 35661] [client 54.193.134.180:56624] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tokens.json"] [unique_id "aTOTHyOSP_9DVLgFwI5z_wAAAYo"]
[Sat Dec 06 10:21:20.510665 2025] [:error] [pid 61303:tid 61330] [client 54.193.134.180:42928] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keys.json"] [unique_id "aTOTINwK_fe00OH7zy4uyQAAANc"]
[Sat Dec 06 10:21:21.238472 2025] [:error] [pid 61303:tid 61324] [client 54.193.134.180:42944] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/credentials.json"] [unique_id "aTOTIdwK_fe00OH7zy4u0QAAANE"]
[Sat Dec 06 10:21:21.953193 2025] [:error] [pid 61216:tid 61258] [client 54.193.134.180:42950] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.api_keys"] [unique_id "aTOTITHlXXVdP5ewviWtWwAAAEw"]
[Sat Dec 06 10:21:22.659454 2025] [:error] [pid 52809:tid 52815] [client 54.193.134.180:42960] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apikeys.json"] [unique_id "aTOTIurRwgsmpIJQ2qYg-AAAAgQ"]
[Sat Dec 06 10:21:23.339067 2025] [:error] [pid 52809:tid 52820] [client 54.193.134.180:42962] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api_keys.json"] [unique_id "aTOTI-rRwgsmpIJQ2qYg_gAAAgk"]
[Sat Dec 06 10:21:24.020887 2025] [:error] [pid 61215:tid 61229] [client 54.193.134.180:42964] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.yml"] [unique_id "aTOTJOOOZ8nTCBYuI-z-cgAAAAo"]
[Sat Dec 06 10:21:24.722048 2025] [:error] [pid 35591:tid 35607] [client 54.193.134.180:42972] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/secrets.json"] [unique_id "aTOTJIbmw-7bFvTxc9PFeQAAAQ4"]
[Sat Dec 06 10:21:25.419685 2025] [:error] [pid 35622:tid 35665] [client 54.193.134.180:42974] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.azure/credentials"] [unique_id "aTOTJSOSP_9DVLgFwI50DQAAAY4"]
[Sat Dec 06 10:21:26.098832 2025] [:error] [pid 48399:tid 48401] [client 54.193.134.180:42984] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/azure.json"] [unique_id "aTOTJujNPOrIshd8EwdwpgAAAcA"]
[Sat Dec 06 10:21:26.785491 2025] [:error] [pid 35591:tid 35611] [client 54.193.134.180:42996] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gcp-credentials.json"] [unique_id "aTOTJobmw-7bFvTxc9PFggAAARI"]
[Sat Dec 06 10:21:27.487292 2025] [:error] [pid 35621:tid 35640] [client 54.193.134.180:43004] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.gcloud/credentials"] [unique_id "aTOTJ0QGb3oZH9SdKQVjuQAAAVA"]
[Sat Dec 06 10:21:28.179041 2025] [:error] [pid 52809:tid 52813] [client 54.193.134.180:43016] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s3.yml"] [unique_id "aTOTKOrRwgsmpIJQ2qYhBwAAAgI"]
[Sat Dec 06 10:21:28.910232 2025] [:error] [pid 48399:tid 48417] [client 54.193.134.180:43032] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.s3cfg"] [unique_id "aTOTKOjNPOrIshd8EwdwqgAAAdA"]
[Sat Dec 06 10:21:29.631676 2025] [:error] [pid 52809:tid 52824] [client 54.193.134.180:43038] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.aws/config"] [unique_id "aTOTKerRwgsmpIJQ2qYhCgAAAg0"]
[Sat Dec 06 10:21:30.355843 2025] [:error] [pid 35622:tid 35654] [client 54.193.134.180:43040] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.2"] [unique_id "aTOTKiOSP_9DVLgFwI50IAAAAYM"]
[Sat Dec 06 10:21:31.090446 2025] [:error] [pid 35622:tid 35670] [client 54.193.134.180:42212] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aTOTKyOSP_9DVLgFwI50JQAAAZM"]
[Sat Dec 06 10:21:31.815230 2025] [:error] [pid 48399:tid 48406] [client 54.193.134.180:42222] [client 54.193.134.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.remote"] [unique_id "aTOTK-jNPOrIshd8EwdwrwAAAcU"]
[Sat Dec 06 10:21:32.516026 2025] [:error] [pid 35622:tid 35662] [client 54.193.134.180:42230] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testphp.php"] [unique_id "aTOTLCOSP_9DVLgFwI50LAAAAYs"]
[Sat Dec 06 10:21:33.220123 2025] [:error] [pid 61217:tid 61296] [client 54.193.134.180:42242] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infophp.php"] [unique_id "aTOTLVdSKQYfLI3fYo48AgAAAJc"]
[Sat Dec 06 10:21:33.906708 2025] [:error] [pid 35622:tid 35658] [client 54.193.134.180:42256] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php-info.php"] [unique_id "aTOTLSOSP_9DVLgFwI50MwAAAYc"]
[Sat Dec 06 10:21:34.592700 2025] [:error] [pid 61216:tid 61269] [client 54.193.134.180:42260] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info_php.php"] [unique_id "aTOTLjHlXXVdP5ewviWtYAAAAFc"]
[Sat Dec 06 10:21:35.296332 2025] [:error] [pid 35621:tid 35643] [client 54.193.134.180:42262] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aTOTL0QGb3oZH9SdKQVjxwAAAVM"]
[Sat Dec 06 10:21:36.022943 2025] [:error] [pid 35622:tid 35672] [client 54.193.134.180:42270] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aTOTMCOSP_9DVLgFwI50OgAAAZU"]
[Sat Dec 06 10:21:36.728909 2025] [:error] [pid 52809:tid 52835] [client 54.193.134.180:42272] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aTOTMOrRwgsmpIJQ2qYhEwAAAhg"]
[Sat Dec 06 10:21:37.417940 2025] [:error] [pid 35591:tid 35616] [client 54.193.134.180:42276] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aTOTMYbmw-7bFvTxc9PFjAAAARc"]
[Sat Dec 06 10:21:38.117665 2025] [:error] [pid 61303:tid 61329] [client 54.193.134.180:42286] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTOTMtwK_fe00OH7zy4vBAAAANY"]
[Sat Dec 06 10:21:38.823621 2025] [:error] [pid 61215:tid 61229] [client 54.193.134.180:42300] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/probe.php"] [unique_id "aTOTMuOOZ8nTCBYuI-z-gQAAAAo"]
[Sat Dec 06 10:21:39.517517 2025] [:error] [pid 52809:tid 52820] [client 54.193.134.180:42310] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/check.php"] [unique_id "aTOTM-rRwgsmpIJQ2qYhGgAAAgk"]
[Sat Dec 06 10:21:40.193829 2025] [:error] [pid 52809:tid 52817] [client 54.193.134.180:42314] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phptest.php"] [unique_id "aTOTNOrRwgsmpIJQ2qYhIgAAAgY"]
[Sat Dec 06 10:21:40.882188 2025] [:error] [pid 52809:tid 52812] [client 54.193.134.180:49406] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/diagnostic.php"] [unique_id "aTOTNOrRwgsmpIJQ2qYhIwAAAgE"]
[Sat Dec 06 10:21:41.563987 2025] [:error] [pid 35622:tid 35669] [client 54.193.134.180:49412] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug.php"] [unique_id "aTOTNSOSP_9DVLgFwI50RwAAAZI"]
[Sat Dec 06 10:21:42.249596 2025] [:error] [pid 35622:tid 35656] [client 54.193.134.180:49424] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/serverinfo.php"] [unique_id "aTOTNiOSP_9DVLgFwI50SgAAAYU"]
[Sat Dec 06 10:21:42.941304 2025] [:error] [pid 61303:tid 61327] [client 54.193.134.180:49430] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aTOTNtwK_fe00OH7zy4vCgAAANQ"]
[Sat Dec 06 10:21:43.622885 2025] [:error] [pid 61215:tid 61220] [client 54.193.134.180:49432] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info3.php"] [unique_id "aTOTN-OOZ8nTCBYuI-z-hwAAAAE"]
[Sat Dec 06 10:21:44.310036 2025] [:error] [pid 35591:tid 35612] [client 54.193.134.180:49434] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info2.php"] [unique_id "aTOTOIbmw-7bFvTxc9PFngAAARM"]
[Sat Dec 06 10:21:45.006557 2025] [:error] [pid 61215:tid 61236] [client 54.193.134.180:49436] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info1.php"] [unique_id "aTOTOeOOZ8nTCBYuI-z-jQAAABE"]
[Sat Dec 06 10:21:45.696172 2025] [:error] [pid 48399:tid 48420] [client 54.193.134.180:49446] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_info.php"] [unique_id "aTOTOejNPOrIshd8EwdwvwAAAdM"]
[Sat Dec 06 10:21:46.371730 2025] [:error] [pid 61303:tid 61317] [client 54.193.134.180:49452] [client 54.193.134.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_version.php"] [unique_id "aTOTOtwK_fe00OH7zy4vEAAAAMs"]
[Sat Dec 06 10:45:36.232911 2025] [:error] [pid 61216:tid 61247] [client 34.213.234.20:53828] [client 34.213.234.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/"] [unique_id "aTOY0DHlXXVdP5ewviWx7QAAAEE"]
[Sat Dec 06 10:45:37.191668 2025] [:error] [pid 61216:tid 61256] [client 34.213.234.20:53830] [client 34.213.234.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aTOY0THlXXVdP5ewviWx7gAAAEo"]
[Sat Dec 06 11:48:32.177040 2025] [:error] [pid 61216:tid 61258] [client 192.144.148.122:37176] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTOnkDHlXXVdP5ewviW-lwAAAEw"]
[Sat Dec 06 12:50:49.254974 2025] [:error] [pid 35622:tid 35671] [client 49.51.233.46:32906] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTO2KSOSP_9DVLgFwI6HrgAAAZQ"]
[Sat Dec 06 17:43:10.579804 2025] [:error] [pid 35622:tid 35675] [client 223.244.35.77:52699] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTP6riOSP_9DVLgFwI6tEwAAAZg"]
[Sat Dec 06 23:51:21.964299 2025] [:error] [pid 48399:tid 48416] [client 68.183.147.152:53048] [client 68.183.147.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTRQ-ejNPOrIshd8EwfbXgAAAc8"]
[Sun Dec 07 00:00:02.465719 2025] [:error] [pid 61215:tid 61236] [client 223.244.35.77:35017] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTRTAuOOZ8nTCBYuI-xu-wAAABE"]
[Sun Dec 07 02:25:27.594543 2025] [:error] [pid 44818:tid 44858] [client 68.183.147.152:51046] [client 68.183.147.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTR1F1M8svkkGGrcPqPF1QAAAEc"]
[Sun Dec 07 05:01:29.707938 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.43:37957] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTSZqRrSxOOdwv3vX3w7ywAAAMQ"]
[Sun Dec 07 05:01:31.910687 2025] [:error] [pid 34109:tid 34147] [client 45.146.55.60:44095] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTSZq4jE_vucgM_xD4TdKwAAAEc"]
[Sun Dec 07 05:01:35.337611 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.13:62129] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aTSZrwndtmtsHiXHBO1-qwAAAJg"]
[Sun Dec 07 05:01:37.465588 2025] [:error] [pid 34110:tid 34173] [client 45.146.55.48:22613] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTSZsQndtmtsHiXHBO1-ugAAAIY"]
[Sun Dec 07 05:01:40.915037 2025] [:error] [pid 34108:tid 34126] [client 45.146.55.48:65455] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTSZtKLvdvAppF-gXosOBQAAAA0"]
[Sun Dec 07 05:01:42.191791 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.52:64855] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTSZtojE_vucgM_xD4TdZwAAAFE"]
[Sun Dec 07 05:01:43.046945 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.21:38937] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTSZt_pR7YTD7JcHjhF8KAAAAVc"]
[Sun Dec 07 05:01:43.894386 2025] [:error] [pid 34110:tid 34177] [client 45.146.55.24:33711] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTSZtwndtmtsHiXHBO1-2wAAAIo"]
[Sun Dec 07 05:01:44.741975 2025] [:error] [pid 7089:tid 7114] [client 45.146.55.38:56717] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTSZuIJPZ-pZM-y51NHPogAAARc"]
[Sun Dec 07 05:01:45.591005 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.24:41425] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTSZufpR7YTD7JcHjhF8RgAAAUY"]
[Sun Dec 07 05:01:46.880482 2025] [:error] [pid 7273:tid 7299] [client 45.146.55.23:27373] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTSZuvpR7YTD7JcHjhF8VAAAAVg"]
[Sun Dec 07 05:01:48.596272 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.60:62997] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aTSZvIjE_vucgM_xD4TdnwAAAFA"]
[Sun Dec 07 05:01:50.389623 2025] [:error] [pid 34109:tid 34147] [client 45.146.55.61:28101] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTSZvojE_vucgM_xD4TdrAAAAEc"]
[Sun Dec 07 05:01:51.703354 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.45:28907] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTSZv6LvdvAppF-gXosOXwAAABI"]
[Sun Dec 07 05:01:52.976917 2025] [:error] [pid 34109:tid 34152] [client 45.146.55.11:41201] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTSZwIjE_vucgM_xD4TdvAAAAEw"]
[Sun Dec 07 05:01:56.409692 2025] [:error] [pid 34110:tid 34171] [client 45.146.55.49:43087] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTSZxAndtmtsHiXHBO1_LgAAAIQ"]
[Sun Dec 07 05:01:57.715975 2025] [:error] [pid 7273:tid 7296] [client 45.146.55.47:50871] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTSZxfpR7YTD7JcHjhF8uwAAAVU"]
[Sun Dec 07 05:01:59.421025 2025] [:error] [pid 34195:tid 34206] [client 45.146.55.15:25465] [client 45.146.55.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aTSZxxrSxOOdwv3vX3w8uQAAAMg"]
[Sun Dec 07 05:02:00.798762 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.47:26765] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTSZyIjE_vucgM_xD4TeBgAAAFE"]
[Sun Dec 07 05:02:05.847066 2025] [:error] [pid 34110:tid 34169] [client 45.146.55.47:63677] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTSZzQndtmtsHiXHBO1_cgAAAII"]
[Sun Dec 07 05:02:07.132636 2025] [:error] [pid 7273:tid 7285] [client 45.146.55.45:31749] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTSZz_pR7YTD7JcHjhF9AAAAAUo"]
[Sun Dec 07 05:02:08.430771 2025] [:error] [pid 34195:tid 34204] [client 45.146.55.42:57167] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTSZ0BrSxOOdwv3vX3w9HgAAAMY"]
[Sun Dec 07 05:02:09.282944 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.33:41555] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTSZ0aLvdvAppF-gXosO3gAAABA"]
[Sun Dec 07 05:02:10.146204 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.40:48833] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTSZ0qLvdvAppF-gXosO4wAAABQ"]
[Sun Dec 07 05:02:12.302123 2025] [:error] [pid 34109:tid 34146] [client 45.146.55.47:31675] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aTSZ1IjE_vucgM_xD4TeUAAAAEY"]
[Sun Dec 07 05:02:13.151858 2025] [:error] [pid 7273:tid 7299] [client 45.146.55.58:59965] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aTSZ1fpR7YTD7JcHjhF9OgAAAVg"]
[Sun Dec 07 05:02:14.012146 2025] [:error] [pid 34110:tid 34188] [client 45.146.55.24:44955] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTSZ1gndtmtsHiXHBO1_wgAAAJU"]
[Sun Dec 07 05:02:18.331502 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.18:51249] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aTSZ2ojE_vucgM_xD4TekgAAAEI"]
[Sun Dec 07 05:02:20.477203 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.18:63915] [client 45.146.55.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.18, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTSZ3AndtmtsHiXHBO1_5wAAAJM"]
[Sun Dec 07 05:02:25.663636 2025] [:error] [pid 34110:tid 34189] [client 45.146.55.18:63915] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTSZ4QndtmtsHiXHBO2ADQAAAJY"]
[Sun Dec 07 05:02:27.380077 2025] [:error] [pid 13234:tid 13253] [client 45.146.55.14:24273] [client 45.146.55.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.14, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTSZ4-6_dquQqQ60IZ9_OwAAAYw"]
[Sun Dec 07 05:02:28.259069 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.14:24273] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aTSZ5O6_dquQqQ60IZ9_QAAAAYQ"]
[Sun Dec 07 05:02:32.554320 2025] [:error] [pid 13234:tid 13254] [client 45.146.55.18:23425] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTSZ6O6_dquQqQ60IZ9_ZQAAAY0"]
[Sun Dec 07 05:02:36.876950 2025] [:error] [pid 34109:tid 34161] [client 45.146.55.21:33503] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTSZ7IjE_vucgM_xD4TfSQAAAFU"]
[Sun Dec 07 05:02:38.591613 2025] [:error] [pid 34109:tid 34160] [client 45.146.55.53:56639] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTSZ7ojE_vucgM_xD4TfbwAAAFQ"]
[Sun Dec 07 05:02:40.724603 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.45:40327] [client 45.146.55.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.45, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aTSZ8KLvdvAppF-gXosP8AAAAAQ"]
[Sun Dec 07 05:02:41.152499 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.45:40327] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTSZ8aLvdvAppF-gXosP9wAAAAI"]
[Sun Dec 07 05:02:49.416982 2025] [:error] [pid 13234:tid 13251] [client 45.146.55.14:20267] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTSZ-e6_dquQqQ60IZ9_8wAAAYo"]
[Sun Dec 07 05:02:51.566021 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.60:41159] [client 45.146.55.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.60, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTSZ-wndtmtsHiXHBO2A-gAAAJM"]
[Sun Dec 07 05:02:53.295668 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.60:41159] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTSZ_QndtmtsHiXHBO2BEwAAAIU"]
[Sun Dec 07 05:02:54.583896 2025] [:error] [pid 34110:tid 34169] [client 45.146.55.37:23613] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aTSZ_gndtmtsHiXHBO2BIAAAAII"]
[Sun Dec 07 05:02:56.293484 2025] [:error] [pid 13234:tid 13256] [client 45.146.55.34:45067] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTSaAO6_dquQqQ60IZ-AMgAAAY8"]
[Sun Dec 07 05:02:58.448878 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.38:55875] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTSaAvpR7YTD7JcHjhF-8gAAAUY"]
[Sun Dec 07 05:02:59.320692 2025] [:error] [pid 34195:tid 34214] [client 45.146.55.45:37199] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTSaAxrSxOOdwv3vX3w_5wAAANA"]
[Sun Dec 07 05:03:02.373828 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.34:20409] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTSaBqLvdvAppF-gXosQ2gAAAAQ"]
[Sun Dec 07 05:03:03.658784 2025] [:error] [pid 34109:tid 34158] [client 45.146.55.39:60563] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTSaB4jE_vucgM_xD4TgngAAAFI"]
[Sun Dec 07 05:03:05.845894 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.23:44719] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aTSaCaLvdvAppF-gXosRBgAAAAQ"]
[Sun Dec 07 05:03:08.013656 2025] [:error] [pid 7273:tid 7299] [client 45.146.55.40:23315] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTSaDPpR7YTD7JcHjhF_YQAAAVg"]
[Sun Dec 07 05:03:09.769113 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.62:62815] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aTSaDRrSxOOdwv3vX3xAWAAAANY"]
[Sun Dec 07 05:03:16.161934 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.14:41039] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTSaFO6_dquQqQ60IZ-A-AAAAZg"]
[Sun Dec 07 05:03:20.098924 2025] [:error] [pid 13234:tid 13246] [client 45.146.55.54:35973] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTSaGO6_dquQqQ60IZ-BGAAAAYU"]
[Sun Dec 07 05:03:20.952615 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.31:63551] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aTSaGO6_dquQqQ60IZ-BIAAAAYA"]
[Sun Dec 07 05:03:21.805848 2025] [:error] [pid 34109:tid 34149] [client 45.146.55.50:43317] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTSaGYjE_vucgM_xD4ThSwAAAEk"]
[Sun Dec 07 05:03:22.658974 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.19:40545] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTSaGoJPZ-pZM-y51NHTDgAAAQI"]
[Sun Dec 07 05:03:27.094609 2025] [:error] [pid 34109:tid 34140] [client 45.146.55.53:50707] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTSaH4jE_vucgM_xD4ThhgAAAEA"]
[Sun Dec 07 05:03:27.942317 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.62:33191] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTSaH6LvdvAppF-gXosR3gAAABU"]
[Sun Dec 07 05:03:29.660646 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.38:38367] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTSaIRrSxOOdwv3vX3xBjAAAAMc"]
[Sun Dec 07 05:03:30.518443 2025] [:error] [pid 34109:tid 34164] [client 45.146.55.48:59733] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTSaIojE_vucgM_xD4ThpgAAAFg"]
[Sun Dec 07 05:03:31.380988 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.50:58153] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTSaI-6_dquQqQ60IZ-BhAAAAYg"]
[Sun Dec 07 05:03:32.226772 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.17:62289] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTSaJO6_dquQqQ60IZ-BigAAAYA"]
[Sun Dec 07 05:03:33.519622 2025] [:error] [pid 34109:tid 34146] [client 45.146.55.25:35629] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTSaJYjE_vucgM_xD4ThuwAAAEY"]
[Sun Dec 07 05:03:35.252648 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.46:33773] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTSaJ6LvdvAppF-gXosSFgAAABQ"]
[Sun Dec 07 05:03:37.866402 2025] [:error] [pid 7089:tid 7108] [client 45.146.55.44:29585] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTSaKYJPZ-pZM-y51NHT0QAAARE"]
[Sun Dec 07 05:03:41.772818 2025] [:error] [pid 34195:tid 34217] [client 45.146.55.52:27299] [client 45.146.55.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aTSaLRrSxOOdwv3vX3xCSwAAANM"]
[Sun Dec 07 05:03:43.927735 2025] [:error] [pid 7089:tid 7105] [client 45.146.55.54:37257] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTSaL4JPZ-pZM-y51NHUGwAAAQ4"]
[Sun Dec 07 05:03:44.777267 2025] [:error] [pid 7089:tid 7096] [client 45.146.55.16:60645] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTSaMIJPZ-pZM-y51NHUIgAAAQU"]
[Sun Dec 07 05:03:47.361287 2025] [:error] [pid 34109:tid 34162] [client 45.146.55.16:48877] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTSaM4jE_vucgM_xD4TiKgAAAFY"]
[Sun Dec 07 05:03:49.517635 2025] [proxy_fcgi:error] [pid 34195:tid 34202] [client 45.146.55.55:45489] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:03:49.955604 2025] [proxy_fcgi:error] [pid 34195:tid 34208] [client 45.146.55.55:45489] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:03:50.391629 2025] [proxy_fcgi:error] [pid 34195:tid 34200] [client 45.146.55.55:45489] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:03:52.565004 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.55:45489] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTSaOBrSxOOdwv3vX3xC9AAAAMQ"]
[Sun Dec 07 05:03:53.419134 2025] [:error] [pid 13234:tid 13242] [client 45.146.55.12:41089] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTSaOe6_dquQqQ60IZ-CXgAAAYI"]
[Sun Dec 07 05:03:54.267939 2025] [:error] [pid 13234:tid 13241] [client 45.146.55.47:22011] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTSaOu6_dquQqQ60IZ-CZQAAAYE"]
[Sun Dec 07 05:03:55.114176 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.26:59167] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTSaO_pR7YTD7JcHjhGArgAAAUM"]
[Sun Dec 07 05:03:55.963482 2025] [:error] [pid 34109:tid 34143] [client 45.146.55.49:24637] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTSaO4jE_vucgM_xD4TidgAAAEM"]
[Sun Dec 07 05:03:56.814469 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.16:31259] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTSaPKLvdvAppF-gXosS0AAAABU"]
[Sun Dec 07 05:03:58.109957 2025] [:error] [pid 34110:tid 34180] [client 45.146.55.58:55555] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTSaPgndtmtsHiXHBO2DKQAAAI0"]
[Sun Dec 07 05:03:58.957117 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.42:44413] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTSaPu6_dquQqQ60IZ-CgAAAAZE"]
[Sun Dec 07 05:03:59.811971 2025] [:error] [pid 7089:tid 7095] [client 45.146.55.27:62525] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTSaP4JPZ-pZM-y51NHUzwAAAQQ"]
[Sun Dec 07 05:04:00.690685 2025] [:error] [pid 7273:tid 7294] [client 45.146.55.34:65047] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTSaQPpR7YTD7JcHjhGA4wAAAVM"]
[Sun Dec 07 05:04:02.422979 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.46:24891] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTSaQqLvdvAppF-gXosTIQAAAAg"]
[Sun Dec 07 05:04:03.717043 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.61:41739] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTSaQ6LvdvAppF-gXosTNwAAABY"]
[Sun Dec 07 05:04:05.435737 2025] [:error] [pid 34110:tid 34178] [client 45.146.55.37:46369] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTSaRQndtmtsHiXHBO2DgQAAAIs"]
[Sun Dec 07 05:04:07.236161 2025] [:error] [pid 34108:tid 34127] [client 45.146.55.49:26399] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aTSaR6LvdvAppF-gXosTXgAAAA4"]
[Sun Dec 07 05:04:09.419892 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.58:44627] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTSaSYJPZ-pZM-y51NHVJQAAAQw"]
[Sun Dec 07 05:04:12.039496 2025] [:error] [pid 34195:tid 34200] [client 45.146.55.55:21393] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTSaTBrSxOOdwv3vX3xEDAAAAMI"]
[Sun Dec 07 05:04:13.326532 2025] [:error] [pid 7089:tid 7104] [client 45.146.55.16:22735] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aTSaTYJPZ-pZM-y51NHVSwAAAQ0"]
[Sun Dec 07 05:04:21.194690 2025] [:error] [pid 34110:tid 34173] [client 45.146.55.41:53705] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTSaVQndtmtsHiXHBO2EUwAAAIY"]
[Sun Dec 07 05:04:22.048796 2025] [:error] [pid 34195:tid 34221] [client 45.146.55.27:56237] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTSaVhrSxOOdwv3vX3xEgwAAANc"]
[Sun Dec 07 05:04:22.897699 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.34:31443] [client 45.146.55.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.34, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTSaVoJPZ-pZM-y51NHVuQAAAQw"]
[Sun Dec 07 05:04:23.777085 2025] [:error] [pid 7089:tid 7100] [client 45.146.55.34:31443] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTSaV4JPZ-pZM-y51NHVygAAAQk"]
[Sun Dec 07 05:04:25.509161 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.56:24481] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTSaWfpR7YTD7JcHjhGB3wAAAU4"]
[Sun Dec 07 05:04:26.367900 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.44:52055] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTSaWqLvdvAppF-gXosUbQAAABE"]
[Sun Dec 07 05:04:28.984634 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.51:42895] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTSaXAndtmtsHiXHBO2EvgAAAJg"]
[Sun Dec 07 05:04:29.830517 2025] [:error] [pid 7089:tid 7094] [client 45.146.55.11:39093] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aTSaXYJPZ-pZM-y51NHWGgAAAQM"]
[Sun Dec 07 05:04:32.902269 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.30:48597] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTSaYBrSxOOdwv3vX3xE8AAAAMc"]
[Sun Dec 07 05:04:34.655716 2025] [proxy_fcgi:error] [pid 7273:tid 7286] [client 45.146.55.18:56387] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:04:35.517072 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.18:56387] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aTSaY_pR7YTD7JcHjhGCKgAAAU4"]
[Sun Dec 07 05:04:36.365267 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.46:38227] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aTSaZIjE_vucgM_xD4Tj5AAAAEI"]
[Sun Dec 07 05:04:38.096400 2025] [:error] [pid 34110:tid 34172] [client 45.146.55.13:64747] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTSaZgndtmtsHiXHBO2FHQAAAIU"]
[Sun Dec 07 05:04:38.976587 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.45:49011] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTSaZoJPZ-pZM-y51NHWbAAAARg"]
[Sun Dec 07 05:04:47.894290 2025] [:error] [pid 34109:tid 34143] [client 45.146.55.40:23281] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aTSab4jE_vucgM_xD4TkkQAAAEM"]
[Sun Dec 07 05:04:48.746421 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.37:33743] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTSacBrSxOOdwv3vX3xFiwAAANE"]
[Sun Dec 07 05:04:51.367479 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.43:44563] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTSacxrSxOOdwv3vX3xFpwAAANE"]
[Sun Dec 07 05:04:52.216939 2025] [:error] [pid 13234:tid 13260] [client 45.146.55.48:48579] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTSadO6_dquQqQ60IZ-FMwAAAZM"]
[Sun Dec 07 05:04:53.077605 2025] [:error] [pid 7089:tid 7108] [client 45.146.55.14:46641] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTSadYJPZ-pZM-y51NHXAAAAARE"]
[Sun Dec 07 05:04:56.120898 2025] [:error] [pid 7273:tid 7288] [client 45.146.55.23:47841] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTSaePpR7YTD7JcHjhGDAQAAAU0"]
[Sun Dec 07 05:04:57.420046 2025] [:error] [pid 7273:tid 7291] [client 45.146.55.60:49465] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTSaefpR7YTD7JcHjhGDFgAAAVA"]
[Sun Dec 07 05:05:01.511366 2025] [:error] [pid 34195:tid 34208] [client 45.146.55.21:43649] [client 45.146.55.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.21, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aTSafRrSxOOdwv3vX3xGLwAAAMo"]
[Sun Dec 07 05:05:04.208359 2025] [:error] [pid 34195:tid 34220] [client 45.146.55.21:43649] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTSagBrSxOOdwv3vX3xGWgAAANY"]
[Sun Dec 07 05:05:05.066239 2025] [:error] [pid 13234:tid 13245] [client 45.146.55.34:29563] [client 45.146.55.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.34, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTSage6_dquQqQ60IZ-FvgAAAYQ"]
[Sun Dec 07 05:05:09.968622 2025] [proxy_fcgi:error] [pid 13234:tid 13261] [client 45.146.55.34:29563] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:05:16.541957 2025] [:error] [pid 13234:tid 13252] [client 45.146.55.34:29563] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTSajO6_dquQqQ60IZ-GbAAAAYs"]
[Sun Dec 07 05:05:18.728561 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.19:54339] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTSaju6_dquQqQ60IZ-GnwAAAYM"]
[Sun Dec 07 05:05:20.451937 2025] [:error] [pid 34195:tid 34205] [client 45.146.55.60:28859] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTSakBrSxOOdwv3vX3xHGwAAAMc"]
[Sun Dec 07 05:05:25.187768 2025] [:error] [pid 13234:tid 13249] [client 45.146.55.46:61727] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTSale6_dquQqQ60IZ-HGQAAAYg"]
[Sun Dec 07 05:05:26.918563 2025] [:error] [pid 34195:tid 34212] [client 45.146.55.48:48233] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTSalhrSxOOdwv3vX3xHawAAAM4"]
[Sun Dec 07 05:05:28.212331 2025] [:error] [pid 34110:tid 34171] [client 45.146.55.49:22915] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTSamAndtmtsHiXHBO2HWQAAAIQ"]
[Sun Dec 07 05:05:30.917527 2025] [proxy_fcgi:error] [pid 34109:tid 34149] [client 45.146.55.48:24215] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:05:31.348605 2025] [proxy_fcgi:error] [pid 34109:tid 34151] [client 45.146.55.48:24215] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:05:31.771706 2025] [:error] [pid 34109:tid 34144] [client 45.146.55.48:24215] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTSam4jE_vucgM_xD4TmegAAAEQ"]
[Sun Dec 07 05:05:32.626806 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.12:39007] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTSanIjE_vucgM_xD4TmgQAAAEI"]
[Sun Dec 07 05:05:33.446684 2025] [rewrite:error] [pid 34108:tid 34119] [client 103.4.251.213:58422] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Sun Dec 07 05:05:36.511503 2025] [:error] [pid 34195:tid 34206] [client 45.146.55.40:36713] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTSaoBrSxOOdwv3vX3xH4gAAAMg"]
[Sun Dec 07 05:05:37.846764 2025] [:error] [pid 7089:tid 7097] [client 45.146.55.57:52859] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aTSaoYJPZ-pZM-y51NHZCgAAAQY"]
[Sun Dec 07 05:05:40.015487 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.20:31089] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTSapKLvdvAppF-gXosYewAAAAQ"]
[Sun Dec 07 05:05:43.894575 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.59:49499] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTSapwndtmtsHiXHBO2IXwAAAI4"]
[Sun Dec 07 05:05:44.777651 2025] [proxy_fcgi:error] [pid 34109:tid 34147] [client 45.146.55.44:65507] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:05:46.075150 2025] [:error] [pid 34109:tid 34154] [client 45.146.55.44:65507] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTSaqojE_vucgM_xD4TnZQAAAE4"]
[Sun Dec 07 05:05:49.112616 2025] [proxy_fcgi:error] [pid 34109:tid 34147] [client 45.146.55.34:27049] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:05:49.969770 2025] [:error] [pid 34109:tid 34149] [client 45.146.55.34:27049] [client 45.146.55.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.34, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTSarYjE_vucgM_xD4TnoAAAAEk"]
[Sun Dec 07 05:05:52.211334 2025] [:error] [pid 34109:tid 34161] [client 45.146.55.34:27049] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTSasIjE_vucgM_xD4TnuwAAAFU"]
[Sun Dec 07 05:05:53.484820 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.58:57095] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTSasRrSxOOdwv3vX3xIxgAAAMQ"]
[Sun Dec 07 05:05:56.035505 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.38:34451] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTSatPpR7YTD7JcHjhGGBgAAAVc"]
[Sun Dec 07 05:05:58.612701 2025] [:error] [pid 34109:tid 34152] [client 45.146.55.30:63569] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aTSatojE_vucgM_xD4ToHgAAAEw"]
[Sun Dec 07 05:05:59.896834 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.60:24275] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aTSat_pR7YTD7JcHjhGGIAAAAU4"]
[Sun Dec 07 05:06:02.052974 2025] [:error] [pid 13234:tid 13262] [client 45.146.55.48:59015] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aTSauu6_dquQqQ60IZ-JJgAAAZU"]
[Sun Dec 07 05:06:03.761734 2025] [proxy_fcgi:error] [pid 34110:tid 34181] [client 45.146.55.17:26755] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:06:04.181137 2025] [:error] [pid 34110:tid 34173] [client 45.146.55.17:26755] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aTSavAndtmtsHiXHBO2JcgAAAIY"]
[Sun Dec 07 05:06:05.451921 2025] [:error] [pid 34110:tid 34171] [client 45.146.55.26:32599] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aTSavQndtmtsHiXHBO2JhgAAAIQ"]
[Sun Dec 07 05:06:06.296038 2025] [:error] [pid 34109:tid 34142] [client 45.146.55.30:45969] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aTSavojE_vucgM_xD4TonQAAAEI"]
[Sun Dec 07 05:06:07.136924 2025] [:error] [pid 34195:tid 34207] [client 45.146.55.28:29375] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTSavxrSxOOdwv3vX3xJjQAAAMk"]
[Sun Dec 07 05:06:07.980751 2025] [:error] [pid 7273:tid 7286] [client 45.146.55.34:64213] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aTSav_pR7YTD7JcHjhGGdwAAAUs"]
[Sun Dec 07 05:06:08.839869 2025] [:error] [pid 7089:tid 7098] [client 45.146.55.39:27811] [client 45.146.55.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aTSawIJPZ-pZM-y51NHacQAAAQc"]
[Sun Dec 07 05:06:09.686766 2025] [:error] [pid 7273:tid 7278] [client 45.146.55.26:60683] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aTSawfpR7YTD7JcHjhGGiQAAAUM"]
[Sun Dec 07 05:06:11.389689 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.54:49091] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aTSaw-6_dquQqQ60IZ-JwwAAAYA"]
[Sun Dec 07 05:06:12.229918 2025] [:error] [pid 34110:tid 34181] [client 45.146.55.20:52407] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aTSaxAndtmtsHiXHBO2JzQAAAI4"]
[Sun Dec 07 05:06:13.073530 2025] [:error] [pid 7089:tid 7103] [client 45.146.55.16:35251] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aTSaxYJPZ-pZM-y51NHalQAAAQw"]
[Sun Dec 07 05:06:14.365592 2025] [:error] [pid 13234:tid 13263] [client 45.146.55.30:47965] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aTSaxu6_dquQqQ60IZ-J-AAAAZY"]
[Sun Dec 07 05:06:16.088858 2025] [:error] [pid 34195:tid 34198] [client 45.146.55.25:21109] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aTSayBrSxOOdwv3vX3xJ_gAAAMA"]
[Sun Dec 07 05:06:16.946570 2025] [proxy_fcgi:error] [pid 34110:tid 34188] [client 45.146.55.42:29843] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:06:18.772097 2025] [:error] [pid 34110:tid 34189] [client 45.146.55.42:29843] [client 45.146.55.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.42, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aTSaygndtmtsHiXHBO2KPQAAAJY"]
[Sun Dec 07 05:06:21.346820 2025] [:error] [pid 34110:tid 34183] [client 45.146.55.42:29843] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aTSazQndtmtsHiXHBO2KWwAAAJA"]
[Sun Dec 07 05:06:22.193843 2025] [:error] [pid 34109:tid 34140] [client 45.146.55.11:52699] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aTSazojE_vucgM_xD4TpdAAAAEA"]
[Sun Dec 07 05:06:30.321025 2025] [:error] [pid 34109:tid 34161] [client 45.146.55.31:24275] [client 45.146.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTSa1ojE_vucgM_xD4TqEAAAAFU"]
[Sun Dec 07 05:06:31.289679 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.51:39295] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aTSa16LvdvAppF-gXosbhwAAAAg"]
[Sun Dec 07 05:06:32.141003 2025] [:error] [pid 13234:tid 13257] [client 45.146.55.32:25897] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aTSa2O6_dquQqQ60IZ-K1gAAAZA"]
[Sun Dec 07 05:06:45.447976 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.14:21625] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aTSa5YJPZ-pZM-y51NHcTgAAAQI"]
[Sun Dec 07 05:06:46.297233 2025] [:error] [pid 34108:tid 34134] [client 45.146.55.60:44223] [client 45.146.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aTSa5qLvdvAppF-gXoscRAAAABU"]
[Sun Dec 07 05:06:47.144024 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.20:59729] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aTSa5-6_dquQqQ60IZ-LqQAAAYk"]
[Sun Dec 07 05:06:49.792945 2025] [:error] [pid 7273:tid 7284] [client 45.146.55.20:61225] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aTSa6fpR7YTD7JcHjhGI9AAAAUk"]
[Sun Dec 07 05:06:51.078763 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.36:25247] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aTSa6-6_dquQqQ60IZ-L2AAAAY4"]
[Sun Dec 07 05:06:52.845888 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.62:62177] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aTSa7BrSxOOdwv3vX3xMOAAAAMQ"]
[Sun Dec 07 05:06:58.480818 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.58:52281] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTSa8u6_dquQqQ60IZ-MMQAAAYM"]
[Sun Dec 07 05:07:00.191789 2025] [:error] [pid 34195:tid 34219] [client 45.146.55.46:24629] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aTSa9BrSxOOdwv3vX3xMuAAAANU"]
[Sun Dec 07 05:07:03.703032 2025] [:error] [pid 7089:tid 7091] [client 45.146.55.46:64543] [client 45.146.55.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aTSa94JPZ-pZM-y51NHc4QAAAQA"]
[Sun Dec 07 05:07:05.427683 2025] [:error] [pid 7273:tid 7295] [client 45.146.55.58:53301] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aTSa-fpR7YTD7JcHjhGJtwAAAVQ"]
[Sun Dec 07 05:07:08.062161 2025] [:error] [pid 34109:tid 34162] [client 45.146.55.11:61829] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aTSa_IjE_vucgM_xD4Tr4gAAAFY"]
[Sun Dec 07 05:07:13.929699 2025] [:error] [pid 34109:tid 34156] [client 45.146.55.47:29539] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aTSbAYjE_vucgM_xD4TsJAAAAFA"]
[Sun Dec 07 05:07:15.649216 2025] [:error] [pid 34108:tid 34114] [client 45.146.55.19:55875] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aTSbA6LvdvAppF-gXosdrQAAAAE"]
[Sun Dec 07 05:07:16.507966 2025] [:error] [pid 34110:tid 34191] [client 45.146.55.35:62789] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aTSbBAndtmtsHiXHBO2M8QAAAJg"]
[Sun Dec 07 05:07:19.539969 2025] [:error] [pid 7089:tid 7102] [client 45.146.55.51:37299] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aTSbB4JPZ-pZM-y51NHdiwAAAQs"]
[Sun Dec 07 05:07:22.589703 2025] [:error] [pid 13234:tid 13264] [client 45.146.55.61:21213] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aTSbCu6_dquQqQ60IZ-NpAAAAZc"]
[Sun Dec 07 05:07:25.206478 2025] [:error] [pid 13234:tid 13259] [client 45.146.55.11:51405] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTSbDe6_dquQqQ60IZ-NwQAAAZI"]
[Sun Dec 07 05:07:26.059227 2025] [:error] [pid 13234:tid 13257] [client 45.146.55.53:22857] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aTSbDu6_dquQqQ60IZ-N0QAAAZA"]
[Sun Dec 07 05:07:27.797985 2025] [:error] [pid 7273:tid 7289] [client 45.146.55.37:53485] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aTSbD_pR7YTD7JcHjhGKwQAAAU4"]
[Sun Dec 07 05:07:29.978810 2025] [:error] [pid 34108:tid 34115] [client 45.146.55.48:28343] [client 45.146.55.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aTSbEaLvdvAppF-gXoseUwAAAAI"]
[Sun Dec 07 05:07:30.823830 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.33:58059] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aTSbEojE_vucgM_xD4TtBQAAAEs"]
[Sun Dec 07 05:07:34.333295 2025] [:error] [pid 34109:tid 34162] [client 45.146.55.26:56591] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aTSbFojE_vucgM_xD4TtOwAAAFY"]
[Sun Dec 07 05:07:36.096001 2025] [:error] [pid 34109:tid 34145] [client 45.146.55.11:58777] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aTSbGIjE_vucgM_xD4TtVgAAAEU"]
[Sun Dec 07 05:07:36.951667 2025] [:error] [pid 34110:tid 34178] [client 45.146.55.12:43317] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aTSbGAndtmtsHiXHBO2N2AAAAIs"]
[Sun Dec 07 05:07:38.669504 2025] [:error] [pid 7273:tid 7288] [client 45.146.55.33:42065] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aTSbGvpR7YTD7JcHjhGLVwAAAU0"]
[Sun Dec 07 05:07:39.945740 2025] [:error] [pid 34108:tid 34135] [client 45.146.55.59:50417] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aTSbG6LvdvAppF-gXose_wAAABY"]
[Sun Dec 07 05:07:42.968449 2025] [:error] [pid 34195:tid 34198] [client 45.146.55.19:29335] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aTSbHhrSxOOdwv3vX3xPaAAAAMA"]
[Sun Dec 07 05:07:44.675102 2025] [:error] [pid 7273:tid 7276] [client 45.146.55.28:31641] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aTSbIPpR7YTD7JcHjhGLowAAAUE"]
[Sun Dec 07 05:07:46.391028 2025] [:error] [pid 34195:tid 34209] [client 45.146.55.58:44973] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aTSbIhrSxOOdwv3vX3xPtQAAAMs"]
[Sun Dec 07 05:07:47.678138 2025] [:error] [pid 34110:tid 34173] [client 45.146.55.15:58519] [client 45.146.55.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aTSbIwndtmtsHiXHBO2OawAAAIY"]
[Sun Dec 07 05:07:48.962862 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.37:22901] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aTSbJKLvdvAppF-gXosfbAAAABE"]
[Sun Dec 07 05:07:49.828027 2025] [:error] [pid 34195:tid 34218] [client 45.146.55.35:63219] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aTSbJRrSxOOdwv3vX3xP8wAAANQ"]
[Sun Dec 07 05:07:50.676935 2025] [:error] [pid 13234:tid 13261] [client 45.146.55.27:25219] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aTSbJu6_dquQqQ60IZ-PEwAAAZQ"]
[Sun Dec 07 05:07:54.136918 2025] [:error] [pid 7273:tid 7297] [client 45.146.55.35:44717] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aTSbKvpR7YTD7JcHjhGMHwAAAVY"]
[Sun Dec 07 05:07:56.296652 2025] [:error] [pid 7273:tid 7297] [client 45.146.55.27:52707] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aTSbLPpR7YTD7JcHjhGMRQAAAVY"]
[Sun Dec 07 05:07:58.425997 2025] [:error] [pid 7089:tid 7114] [client 45.146.55.37:35763] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aTSbLoJPZ-pZM-y51NHfcwAAARc"]
[Sun Dec 07 05:08:00.547911 2025] [:error] [pid 7089:tid 7108] [client 45.146.55.24:27915] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aTSbMIJPZ-pZM-y51NHfmwAAARE"]
[Sun Dec 07 05:08:04.010932 2025] [:error] [pid 34109:tid 34147] [client 45.146.55.37:60963] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aTSbNIjE_vucgM_xD4TuugAAAEc"]
[Sun Dec 07 05:08:05.297606 2025] [:error] [pid 7089:tid 7113] [client 45.146.55.30:32611] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aTSbNYJPZ-pZM-y51NHf0gAAARY"]
[Sun Dec 07 05:08:06.582002 2025] [:error] [pid 7273:tid 7280] [client 45.146.55.23:33311] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aTSbNvpR7YTD7JcHjhGM9AAAAUU"]
[Sun Dec 07 05:08:08.305098 2025] [:error] [pid 7273:tid 7282] [client 45.146.55.21:44993] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aTSbOPpR7YTD7JcHjhGNFgAAAUc"]
[Sun Dec 07 05:08:12.596193 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.45:25093] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aTSbPAndtmtsHiXHBO2PdwAAAI8"]
[Sun Dec 07 05:08:13.466446 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.61:49871] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aTSbPfpR7YTD7JcHjhGNZAAAAVc"]
[Sun Dec 07 05:08:15.617835 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.20:21993] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aTSbPxrSxOOdwv3vX3xRjgAAAME"]
[Sun Dec 07 05:08:16.464481 2025] [:error] [pid 34109:tid 34164] [client 45.146.55.41:37507] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTSbQIjE_vucgM_xD4TvYwAAAFg"]
[Sun Dec 07 05:08:18.236557 2025] [:error] [pid 34110:tid 34169] [client 45.146.55.59:37405] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aTSbQgndtmtsHiXHBO2PxQAAAII"]
[Sun Dec 07 05:08:19.092568 2025] [:error] [pid 34110:tid 34179] [client 45.146.55.42:39147] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aTSbQwndtmtsHiXHBO2PygAAAIw"]
[Sun Dec 07 05:08:23.661878 2025] [:error] [pid 34195:tid 34214] [client 45.146.55.16:42741] [client 45.146.55.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.16, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTSbRxrSxOOdwv3vX3xR1gAAANA"]
[Sun Dec 07 05:08:23.690880 2025] [proxy_fcgi:error] [pid 34195:tid 34214] [client 45.146.55.16:42741] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:08:24.111514 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.16:42741] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aTSbSBrSxOOdwv3vX3xR2wAAAM0"]
[Sun Dec 07 05:08:26.247472 2025] [:error] [pid 34195:tid 34218] [client 45.146.55.27:60573] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTSbShrSxOOdwv3vX3xSBgAAANQ"]
[Sun Dec 07 05:08:27.095532 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.11:31473] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aTSbSxrSxOOdwv3vX3xSHQAAANE"]
[Sun Dec 07 05:08:31.042933 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.41:23009] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aTSbT-6_dquQqQ60IZ-R_gAAAZE"]
[Sun Dec 07 05:08:31.894931 2025] [:error] [pid 7089:tid 7099] [client 45.146.55.18:53581] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aTSbT4JPZ-pZM-y51NHhKQAAAQg"]
[Sun Dec 07 05:08:33.648615 2025] [:error] [pid 34109:tid 34151] [client 45.146.55.13:27031] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aTSbUYjE_vucgM_xD4TwVQAAAEs"]
[Sun Dec 07 05:08:34.504170 2025] [:error] [pid 7089:tid 7113] [client 45.146.55.30:20629] [client 45.146.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aTSbUoJPZ-pZM-y51NHhSAAAARY"]
[Sun Dec 07 05:08:35.365639 2025] [proxy_fcgi:error] [pid 34109:tid 34160] [client 45.146.55.61:40245] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:08:35.803858 2025] [:error] [pid 34109:tid 34148] [client 45.146.55.61:40245] [client 45.146.55.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.146.55.61, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aTSbU4jE_vucgM_xD4TwdgAAAEg"]
[Sun Dec 07 05:08:36.668942 2025] [:error] [pid 34109:tid 34155] [client 45.146.55.61:40245] [client 45.146.55.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aTSbVIjE_vucgM_xD4TwgwAAAE8"]
[Sun Dec 07 05:08:39.249572 2025] [:error] [pid 13234:tid 13251] [client 45.146.55.26:57217] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aTSbV-6_dquQqQ60IZ-SnAAAAYo"]
[Sun Dec 07 05:08:40.554604 2025] [:error] [pid 13234:tid 13261] [client 45.146.55.51:31681] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aTSbWO6_dquQqQ60IZ-SsQAAAZQ"]
[Sun Dec 07 05:08:41.409590 2025] [:error] [pid 34110:tid 34177] [client 45.146.55.21:56059] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aTSbWQndtmtsHiXHBO2QzwAAAIo"]
[Sun Dec 07 05:08:47.613454 2025] [:error] [pid 7089:tid 7093] [client 45.146.55.38:36351] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTSbX4JPZ-pZM-y51NHh6QAAAQI"]
[Sun Dec 07 05:08:49.322024 2025] [:error] [pid 7273:tid 7281] [client 45.146.55.50:20233] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aTSbYfpR7YTD7JcHjhGPWQAAAUY"]
[Sun Dec 07 05:08:51.965378 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.23:58215] [client 45.146.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aTSbYxrSxOOdwv3vX3xTWgAAAM0"]
[Sun Dec 07 05:08:52.806811 2025] [:error] [pid 34110:tid 34171] [client 45.146.55.49:47293] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aTSbZAndtmtsHiXHBO2RcwAAAIQ"]
[Sun Dec 07 05:08:54.111486 2025] [:error] [pid 34109:tid 34148] [client 45.146.55.44:51709] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aTSbZojE_vucgM_xD4TxTAAAAEg"]
[Sun Dec 07 05:08:57.591844 2025] [:error] [pid 13234:tid 13246] [client 45.146.55.11:29831] [client 45.146.55.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aTSbae6_dquQqQ60IZ-T9AAAAYU"]
[Sun Dec 07 05:08:59.339272 2025] [:error] [pid 34110:tid 34179] [client 45.146.55.42:45351] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aTSbawndtmtsHiXHBO2RtQAAAIw"]
[Sun Dec 07 05:08:59.765988 2025] [:error] [pid 34110:tid 34178] [client 45.146.55.42:45351] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aTSbawndtmtsHiXHBO2RuQAAAIs"]
[Sun Dec 07 05:09:01.555124 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.36:33873] [client 45.146.55.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aTSbbRrSxOOdwv3vX3xTpwAAANE"]
[Sun Dec 07 05:09:02.421710 2025] [:error] [pid 34195:tid 34221] [client 45.146.55.22:26359] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aTSbbhrSxOOdwv3vX3xTrQAAANc"]
[Sun Dec 07 05:09:05.946630 2025] [:error] [pid 34195:tid 34219] [client 45.146.55.26:60773] [client 45.146.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aTSbcRrSxOOdwv3vX3xT1gAAANU"]
[Sun Dec 07 05:09:07.702905 2025] [:error] [pid 34108:tid 34133] [client 45.146.55.18:64405] [client 45.146.55.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aTSbc6LvdvAppF-gXosjWAAAABQ"]
[Sun Dec 07 05:09:08.989325 2025] [:error] [pid 34109:tid 34163] [client 45.146.55.29:25475] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aTSbdIjE_vucgM_xD4TyKAAAAFc"]
[Sun Dec 07 05:09:12.012814 2025] [:error] [pid 34195:tid 34209] [client 45.146.55.41:49745] [client 45.146.55.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aTSbeBrSxOOdwv3vX3xUMwAAAMs"]
[Sun Dec 07 05:09:13.296623 2025] [:error] [pid 34110:tid 34179] [client 45.146.55.58:55907] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aTSbeQndtmtsHiXHBO2SagAAAIw"]
[Sun Dec 07 05:09:14.574564 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.29:37927] [client 45.146.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aTSbegndtmtsHiXHBO2SfQAAAI8"]
[Sun Dec 07 05:09:15.438347 2025] [:error] [pid 34195:tid 34217] [client 45.146.55.58:34051] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aTSbexrSxOOdwv3vX3xUXAAAANM"]
[Sun Dec 07 05:09:17.169901 2025] [:error] [pid 7273:tid 7285] [client 45.146.55.19:60427] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aTSbffpR7YTD7JcHjhGQ0gAAAUo"]
[Sun Dec 07 05:09:19.780458 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.62:50947] [client 45.146.55.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aTSbfwndtmtsHiXHBO2SrgAAAJM"]
[Sun Dec 07 05:09:20.627892 2025] [:error] [pid 13234:tid 13258] [client 45.146.55.54:37163] [client 45.146.55.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aTSbgO6_dquQqQ60IZ-VoAAAAZE"]
[Sun Dec 07 05:09:23.679802 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.40:33727] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aTSbg4jE_vucgM_xD4Ty1wAAAFE"]
[Sun Dec 07 05:09:25.385885 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.34:49123] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aTSbhaLvdvAppF-gXoskbwAAABI"]
[Sun Dec 07 05:09:27.562184 2025] [:error] [pid 34108:tid 34131] [client 45.146.55.40:31079] [client 45.146.55.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTSbh6LvdvAppF-gXoskiQAAABI"]
[Sun Dec 07 05:09:28.403565 2025] [:error] [pid 34108:tid 34123] [client 45.146.55.19:27779] [client 45.146.55.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aTSbiKLvdvAppF-gXosklQAAAAo"]
[Sun Dec 07 05:09:29.692960 2025] [:error] [pid 34109:tid 34154] [client 45.146.55.45:27049] [client 45.146.55.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aTSbiYjE_vucgM_xD4TzMAAAAE4"]
[Sun Dec 07 05:09:31.449477 2025] [:error] [pid 34195:tid 34221] [client 45.146.55.37:27377] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aTSbixrSxOOdwv3vX3xVUgAAANc"]
[Sun Dec 07 05:09:33.225982 2025] [:error] [pid 7089:tid 7091] [client 45.146.55.25:60669] [client 45.146.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aTSbjYJPZ-pZM-y51NHkQAAAAQA"]
[Sun Dec 07 05:09:34.074793 2025] [:error] [pid 34109:tid 34147] [client 45.146.55.42:38527] [client 45.146.55.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aTSbjojE_vucgM_xD4TzaAAAAEc"]
[Sun Dec 07 05:09:35.356007 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.49:57489] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aTSbjxrSxOOdwv3vX3xVlgAAAM0"]
[Sun Dec 07 05:09:36.235125 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.13:36547] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aTSbkPpR7YTD7JcHjhGR7gAAAVc"]
[Sun Dec 07 05:09:38.019962 2025] [:error] [pid 34108:tid 34121] [client 45.146.55.57:25433] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aTSbkqLvdvAppF-gXoslEAAAAAg"]
[Sun Dec 07 05:09:39.302640 2025] [:error] [pid 7273:tid 7290] [client 45.146.55.24:44999] [client 45.146.55.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aTSbk_pR7YTD7JcHjhGSFgAAAU8"]
[Sun Dec 07 05:09:40.146015 2025] [:error] [pid 13234:tid 13254] [client 45.146.55.12:39409] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aTSblO6_dquQqQ60IZ-W2AAAAY0"]
[Sun Dec 07 05:09:40.996972 2025] [:error] [pid 34110:tid 34175] [client 45.146.55.38:38271] [client 45.146.55.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aTSblAndtmtsHiXHBO2TwAAAAIg"]
[Sun Dec 07 05:09:43.178844 2025] [:error] [pid 34195:tid 34217] [client 45.146.55.35:31633] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aTSblxrSxOOdwv3vX3xWBAAAANM"]
[Sun Dec 07 05:09:44.912425 2025] [:error] [pid 13234:tid 13261] [client 45.146.55.27:33973] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aTSbmO6_dquQqQ60IZ-XJAAAAZQ"]
[Sun Dec 07 05:09:46.230565 2025] [:error] [pid 34108:tid 34130] [client 45.146.55.44:46899] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aTSbmqLvdvAppF-gXoslYQAAABE"]
[Sun Dec 07 05:09:47.546206 2025] [:error] [pid 13234:tid 13261] [client 45.146.55.58:45391] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTSbm-6_dquQqQ60IZ-XYAAAAZQ"]
[Sun Dec 07 05:09:51.047312 2025] [:error] [pid 7273:tid 7276] [client 45.146.55.17:36673] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aTSbn_pR7YTD7JcHjhGSnAAAAUE"]
[Sun Dec 07 05:09:51.939189 2025] [:error] [pid 13234:tid 13262] [client 45.146.55.34:33361] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aTSbn-6_dquQqQ60IZ-XwwAAAZU"]
[Sun Dec 07 05:09:53.691792 2025] [:error] [pid 34109:tid 34149] [client 45.146.55.58:36555] [client 45.146.55.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aTSboYjE_vucgM_xD4T0oQAAAEk"]
[Sun Dec 07 05:09:56.334999 2025] [:error] [pid 13234:tid 13246] [client 45.146.55.16:49191] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aTSbpO6_dquQqQ60IZ-YKQAAAYU"]
[Sun Dec 07 05:09:58.070910 2025] [:error] [pid 13234:tid 13246] [client 45.146.55.50:64141] [client 45.146.55.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aTSbpu6_dquQqQ60IZ-YQwAAAYU"]
[Sun Dec 07 05:09:59.804676 2025] [:error] [pid 13234:tid 13262] [client 45.146.55.44:58011] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aTSbp-6_dquQqQ60IZ-YWAAAAZU"]
[Sun Dec 07 05:10:01.152472 2025] [:error] [pid 13234:tid 13255] [client 45.146.55.16:64799] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aTSbqe6_dquQqQ60IZ-YaQAAAY4"]
[Sun Dec 07 05:10:02.461382 2025] [:error] [pid 34108:tid 34128] [client 45.146.55.33:43257] [client 45.146.55.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aTSbqqLvdvAppF-gXosmGwAAAA8"]
[Sun Dec 07 05:10:05.083918 2025] [:error] [pid 34195:tid 34202] [client 45.146.55.16:39803] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aTSbrRrSxOOdwv3vX3xW6QAAAMQ"]
[Sun Dec 07 05:10:16.653765 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.17:35317] [client 45.146.55.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aTSbuO6_dquQqQ60IZ-ZVQAAAYM"]
[Sun Dec 07 05:10:17.634934 2025] [proxy_fcgi:error] [pid 7273:tid 7287] [client 45.146.55.32:50219] AH01071: Got error 'Primary script unknown'
[Sun Dec 07 05:10:18.059689 2025] [:error] [pid 7273:tid 7291] [client 45.146.55.32:50219] [client 45.146.55.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aTSbuvpR7YTD7JcHjhGUVQAAAVA"]
[Sun Dec 07 05:10:18.902296 2025] [:error] [pid 7089:tid 7106] [client 45.146.55.12:56109] [client 45.146.55.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aTSbuoJPZ-pZM-y51NHmAwAAAQ8"]
[Sun Dec 07 05:10:20.647812 2025] [:error] [pid 34110:tid 34176] [client 45.146.55.27:60227] [client 45.146.55.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aTSbvAndtmtsHiXHBO2V6AAAAIk"]
[Sun Dec 07 05:10:21.494315 2025] [:error] [pid 13234:tid 13265] [client 45.146.55.14:27691] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aTSbve6_dquQqQ60IZ-ZrwAAAZg"]
[Sun Dec 07 05:10:24.972919 2025] [:error] [pid 7089:tid 7110] [client 45.146.55.37:65369] [client 45.146.55.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aTSbwIJPZ-pZM-y51NHmTQAAARM"]
[Sun Dec 07 05:10:25.835196 2025] [:error] [pid 34108:tid 34129] [client 45.146.55.28:31389] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aTSbwaLvdvAppF-gXosnMAAAABA"]
[Sun Dec 07 05:10:27.143271 2025] [:error] [pid 34109:tid 34157] [client 45.146.55.16:58857] [client 45.146.55.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "aTSbw4jE_vucgM_xD4T2JQAAAFE"]
[Sun Dec 07 05:10:27.989037 2025] [:error] [pid 7273:tid 7297] [client 45.146.55.43:53003] [client 45.146.55.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aTSbw_pR7YTD7JcHjhGU9QAAAVY"]
[Sun Dec 07 05:10:28.844679 2025] [:error] [pid 13234:tid 13250] [client 45.146.55.34:65409] [client 45.146.55.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aTSbxO6_dquQqQ60IZ-aPQAAAYk"]
[Sun Dec 07 05:10:29.687603 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.53:57637] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aTSbxRrSxOOdwv3vX3xYBwAAAME"]
[Sun Dec 07 05:10:32.293357 2025] [:error] [pid 7273:tid 7288] [client 45.146.55.56:58055] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aTSbyPpR7YTD7JcHjhGVLgAAAU0"]
[Sun Dec 07 05:10:33.132848 2025] [:error] [pid 7089:tid 7115] [client 45.146.55.59:42585] [client 45.146.55.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aTSbyYJPZ-pZM-y51NHmmgAAARg"]
[Sun Dec 07 05:10:34.833266 2025] [:error] [pid 34195:tid 34216] [client 45.146.55.57:43805] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aTSbyhrSxOOdwv3vX3xYVQAAANI"]
[Sun Dec 07 05:10:35.683513 2025] [:error] [pid 34108:tid 34117] [client 45.146.55.49:45287] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aTSby6LvdvAppF-gXosntgAAAAQ"]
[Sun Dec 07 05:10:37.386560 2025] [:error] [pid 34108:tid 34128] [client 45.146.55.35:27379] [client 45.146.55.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aTSbzaLvdvAppF-gXosnzgAAAA8"]
[Sun Dec 07 05:10:38.237618 2025] [:error] [pid 34195:tid 34212] [client 45.146.55.22:33583] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aTSbzhrSxOOdwv3vX3xYhwAAAM4"]
[Sun Dec 07 05:10:42.126568 2025] [:error] [pid 34110:tid 34186] [client 45.146.55.44:47909] [client 45.146.55.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aTSb0gndtmtsHiXHBO2XMAAAAJM"]
[Sun Dec 07 05:10:42.968489 2025] [:error] [pid 13234:tid 13244] [client 45.146.55.51:51331] [client 45.146.55.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aTSb0u6_dquQqQ60IZ-bOwAAAYM"]
[Sun Dec 07 05:10:44.671192 2025] [:error] [pid 34195:tid 34199] [client 45.146.55.53:44627] [client 45.146.55.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aTSb1BrSxOOdwv3vX3xY5AAAAME"]
[Sun Dec 07 05:10:45.961675 2025] [:error] [pid 7089:tid 7112] [client 45.146.55.49:56803] [client 45.146.55.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aTSb1YJPZ-pZM-y51NHnSgAAARU"]
[Sun Dec 07 05:10:47.271392 2025] [:error] [pid 34195:tid 34221] [client 45.146.55.14:54543] [client 45.146.55.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "aTSb1xrSxOOdwv3vX3xZBwAAANc"]
[Sun Dec 07 05:10:48.128472 2025] [:error] [pid 34110:tid 34182] [client 45.146.55.13:34177] [client 45.146.55.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aTSb2AndtmtsHiXHBO2XhAAAAI8"]
[Sun Dec 07 05:10:48.978759 2025] [:error] [pid 13234:tid 13248] [client 45.146.55.21:58291] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aTSb2O6_dquQqQ60IZ-bqQAAAYc"]
[Sun Dec 07 05:10:51.168682 2025] [:error] [pid 34195:tid 34215] [client 45.146.55.28:38453] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aTSb2xrSxOOdwv3vX3xZOAAAANE"]
[Sun Dec 07 05:10:52.479895 2025] [:error] [pid 34110:tid 34180] [client 45.146.55.21:62725] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTSb3AndtmtsHiXHBO2XrAAAAI0"]
[Sun Dec 07 05:10:54.634594 2025] [:error] [pid 34195:tid 34222] [client 45.146.55.28:50259] [client 45.146.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aTSb3hrSxOOdwv3vX3xZXwAAANg"]
[Sun Dec 07 05:10:55.501103 2025] [:error] [pid 34108:tid 34132] [client 45.146.55.20:22127] [client 45.146.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aTSb36LvdvAppF-gXosoywAAABM"]
[Sun Dec 07 05:10:56.825834 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.57:29453] [client 45.146.55.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aTSb4O6_dquQqQ60IZ-cYwAAAYA"]
[Sun Dec 07 05:11:01.797112 2025] [:error] [pid 34110:tid 34167] [client 45.146.55.56:49891] [client 45.146.55.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aTSb5QndtmtsHiXHBO2YJgAAAIA"]
[Sun Dec 07 05:11:03.105445 2025] [:error] [pid 7273:tid 7298] [client 45.146.55.21:42159] [client 45.146.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aTSb5_pR7YTD7JcHjhGXXgAAAVc"]
[Sun Dec 07 05:11:04.830411 2025] [:error] [pid 34195:tid 34211] [client 45.146.55.22:29419] [client 45.146.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aTSb6BrSxOOdwv3vX3xZxAAAAM0"]
[Sun Dec 07 05:11:05.671618 2025] [:error] [pid 13234:tid 13240] [client 45.146.55.47:42621] [client 45.146.55.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTSb6e6_dquQqQ60IZ-dJgAAAYA"]
[Sun Dec 07 05:11:06.615124 2025] [:error] [pid 34109:tid 34146] [client 45.146.55.55:57429] [client 45.146.55.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aTSb6ojE_vucgM_xD4T4MQAAAEY"]
[Sun Dec 07 05:40:58.507635 2025] [rewrite:error] [pid 7273:tid 7286] [client 103.196.9.214:44914] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Sun Dec 07 05:51:10.947848 2025] [:error] [pid 7273:tid 7291] [client 136.144.43.229:54985] [client 136.144.43.229] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.229, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTSlTvpR7YTD7JcHjhG7QgAAAVA"]
[Sun Dec 07 05:51:16.084678 2025] [:error] [pid 7089:tid 7107] [client 136.144.43.227:48399] [client 136.144.43.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.227, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTSlVIJPZ-pZM-y51NEG0gAAARA"]
[Sun Dec 07 09:28:33.232454 2025] [:error] [pid 25601:tid 25646] [client 5.252.55.178:65336] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTTYQatsSIqGPs4YVxHw0AAAAIs"]
[Sun Dec 07 09:28:34.344164 2025] [:error] [pid 25601:tid 25654] [client 5.252.55.178:58791] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTTYQqtsSIqGPs4YVxHxAwAAAJM"]
[Sun Dec 07 09:28:35.670122 2025] [:error] [pid 25694:tid 25698] [client 5.252.55.178:55593] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTTYQ0f7996cewJ5N2-3EQAAAQI"]
[Sun Dec 07 09:28:36.895667 2025] [:error] [pid 25694:tid 25713] [client 5.252.55.178:52585] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTTYREf7996cewJ5N2-3OAAAARE"]
[Sun Dec 07 09:28:38.045898 2025] [:error] [pid 25694:tid 25700] [client 5.252.55.178:50523] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTTYRkf7996cewJ5N2-3XgAAAQQ"]
[Sun Dec 07 13:16:23.297946 2025] [:error] [pid 25602:tid 25670] [client 98.159.37.31:25961] [client 98.159.37.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.31, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTUNpxMayYLriq9gRdfApAAAAMg"]
[Sun Dec 07 13:46:08.070694 2025] [:error] [pid 25600:tid 25616] [client 85.209.135.111:38048] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTUUoIX3SVrXRURpt5IvlgAAAEk"]
[Sun Dec 07 13:51:38.908175 2025] [:error] [pid 36068:tid 36093] [client 85.209.135.111:44112] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTUV6lGuxqM4ZYob8lPI3gAAABc"]
[Sun Dec 07 16:49:57.718972 2025] [:error] [pid 39560:tid 39586] [client 43.132.214.228:58008] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTU_tStL21FvSzcnpi0r-wAAAVg"]
[Sun Dec 07 17:36:48.598952 2025] [:error] [pid 39560:tid 39571] [client 49.235.136.28:48896] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTVKsCtL21FvSzcnpi07KgAAAUk"]
[Sun Dec 07 18:34:28.166755 2025] [:error] [pid 25694:tid 25706] [client 4.194.76.195:61312] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTVYNEf7996cewJ5N29J5QAAAQo"]
[Sun Dec 07 18:34:32.962795 2025] [:error] [pid 25600:tid 25625] [client 4.194.76.195:49167] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTVYOIX3SVrXRURpt5JjtQAAAFI"]
[Sun Dec 07 18:34:34.492140 2025] [:error] [pid 39560:tid 39571] [client 4.194.76.195:55362] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTVYOitL21FvSzcnpi1LGAAAAUk"]
[Sun Dec 07 18:34:36.497903 2025] [:error] [pid 25602:tid 25671] [client 4.194.76.195:55421] [client 4.194.76.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTVYPBMayYLriq9gRdf5cgAAAMk"]
[Sun Dec 07 21:52:32.427386 2025] [:error] [pid 9961:tid 9980] [client 45.86.202.165:52025] [client 45.86.202.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTWGoGQdnfbgcnzr89JpZQAAAVE"]
[Sun Dec 07 21:52:43.030819 2025] [:error] [pid 5223:tid 5276] [client 45.86.202.170:26169] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aTWGq_oRJa-T0FB0DNryLwAAAJY"]
[Sun Dec 07 21:52:43.653315 2025] [:error] [pid 9961:tid 9982] [client 45.86.202.191:36997] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aTWGq2Qdnfbgcnzr89JpegAAAVM"]
[Sun Dec 07 21:52:45.267080 2025] [:error] [pid 9961:tid 9985] [client 45.86.202.190:38001] [client 45.86.202.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aTWGrWQdnfbgcnzr89JpfwAAAVY"]
[Sun Dec 07 22:34:50.198649 2025] [:error] [pid 9961:tid 9987] [client 136.144.35.229:20501] [client 136.144.35.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTWQimQdnfbgcnzr89J5TAAAAVg"]
[Sun Dec 07 22:35:10.872782 2025] [:error] [pid 5222:tid 5238] [client 136.144.35.236:38099] [client 136.144.35.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aTWQnt8FU0HgkYWmt7tO7wAAAEw"]
[Mon Dec 08 01:50:43.142281 2025] [:error] [pid 55697:tid 55708] [client 4.189.128.201:24254] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aTW-c5CUb4ntL-D8ZJpsZQAAAEU"]
[Mon Dec 08 01:50:43.369901 2025] [:error] [pid 55697:tid 55723] [client 4.189.128.201:23907] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aTW-c5CUb4ntL-D8ZJpsZgAAAFQ"]
[Mon Dec 08 01:50:43.596253 2025] [:error] [pid 55697:tid 55705] [client 4.189.128.201:24246] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aTW-c5CUb4ntL-D8ZJpsZwAAAEI"]
[Mon Dec 08 01:50:43.824146 2025] [:error] [pid 55700:tid 55766] [client 4.189.128.201:23913] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aTW-c08bwbrSb89n9TccMwAAAMk"]
[Mon Dec 08 01:50:44.054481 2025] [:error] [pid 55840:tid 55865] [client 4.189.128.201:23902] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTW-dNXZ-ijN21c_Pr54PgAAABY"]
[Mon Dec 08 01:50:44.283410 2025] [:error] [pid 55699:tid 55740] [client 4.189.128.201:23934] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTW-dHp2c7AdOPMmDENwXAAAAIo"]
[Mon Dec 08 01:50:44.509835 2025] [:error] [pid 55697:tid 55713] [client 4.189.128.201:23932] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTW-dJCUb4ntL-D8ZJpsaAAAAEo"]
[Mon Dec 08 01:50:44.736878 2025] [:error] [pid 55840:tid 55860] [client 4.189.128.201:1153] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTW-dNXZ-ijN21c_Pr54QgAAABE"]
[Mon Dec 08 01:50:44.963336 2025] [:error] [pid 55700:tid 55767] [client 4.189.128.201:24212] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aTW-dE8bwbrSb89n9TccNgAAAMo"]
[Mon Dec 08 01:50:45.190064 2025] [:error] [pid 55700:tid 55773] [client 4.189.128.201:24238] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aTW-dU8bwbrSb89n9TccNwAAANA"]
[Mon Dec 08 01:50:45.416198 2025] [:error] [pid 55700:tid 55769] [client 4.189.128.201:23879] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aTW-dU8bwbrSb89n9TccOAAAAMw"]
[Mon Dec 08 01:50:45.643039 2025] [:error] [pid 55697:tid 55714] [client 4.189.128.201:24226] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aTW-dZCUb4ntL-D8ZJpsagAAAEs"]
[Mon Dec 08 01:50:45.869536 2025] [:error] [pid 55700:tid 55777] [client 4.189.128.201:23935] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTW-dU8bwbrSb89n9TccOwAAANQ"]
[Mon Dec 08 01:50:46.096639 2025] [:error] [pid 55840:tid 55867] [client 4.189.128.201:24264] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTW-dtXZ-ijN21c_Pr54QwAAABg"]
[Mon Dec 08 01:50:46.323944 2025] [:error] [pid 55840:tid 55857] [client 4.189.128.201:23532] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTW-dtXZ-ijN21c_Pr54RAAAAA4"]
[Mon Dec 08 01:50:46.551344 2025] [:error] [pid 55840:tid 55856] [client 4.189.128.201:23931] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTW-dtXZ-ijN21c_Pr54RQAAAA0"]
[Mon Dec 08 01:50:46.778331 2025] [:error] [pid 55840:tid 55846] [client 4.189.128.201:24307] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aTW-dtXZ-ijN21c_Pr54RgAAAAM"]
[Mon Dec 08 01:50:47.005139 2025] [:error] [pid 55697:tid 55715] [client 4.189.128.201:23921] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aTW-d5CUb4ntL-D8ZJpsawAAAEw"]
[Mon Dec 08 01:50:47.231717 2025] [:error] [pid 55840:tid 55851] [client 4.189.128.201:24230] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aTW-d9XZ-ijN21c_Pr54SAAAAAg"]
[Mon Dec 08 01:50:47.459607 2025] [:error] [pid 55700:tid 55756] [client 4.189.128.201:23914] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aTW-d08bwbrSb89n9TccPQAAAMA"]
[Mon Dec 08 01:50:47.686968 2025] [:error] [pid 55840:tid 55862] [client 4.189.128.201:24245] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aTW-d9XZ-ijN21c_Pr54SgAAABM"]
[Mon Dec 08 01:50:47.913994 2025] [:error] [pid 55840:tid 55850] [client 4.189.128.201:1175] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aTW-d9XZ-ijN21c_Pr54TAAAAAc"]
[Mon Dec 08 01:50:48.141296 2025] [:error] [pid 55840:tid 55854] [client 4.189.128.201:24196] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aTW-eNXZ-ijN21c_Pr54TgAAAAs"]
[Mon Dec 08 01:50:48.368787 2025] [:error] [pid 55697:tid 55706] [client 4.189.128.201:24200] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aTW-eJCUb4ntL-D8ZJpsbQAAAEM"]
[Mon Dec 08 01:50:48.595637 2025] [:error] [pid 55700:tid 55776] [client 4.189.128.201:24257] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTW-eE8bwbrSb89n9TccPgAAANM"]
[Mon Dec 08 01:50:48.824542 2025] [:error] [pid 55697:tid 55704] [client 4.189.128.201:23898] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTW-eJCUb4ntL-D8ZJpscAAAAEE"]
[Mon Dec 08 01:50:49.052592 2025] [:error] [pid 55840:tid 55849] [client 4.189.128.201:23904] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTW-edXZ-ijN21c_Pr54UAAAAAY"]
[Mon Dec 08 01:50:49.280489 2025] [:error] [pid 55700:tid 55774] [client 4.189.128.201:24284] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTW-eU8bwbrSb89n9TccPwAAANE"]
[Mon Dec 08 01:50:49.508028 2025] [:error] [pid 55840:tid 55865] [client 4.189.128.201:24211] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTW-edXZ-ijN21c_Pr54UQAAABY"]
[Mon Dec 08 01:50:49.734866 2025] [:error] [pid 55840:tid 55847] [client 4.189.128.201:23877] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTW-edXZ-ijN21c_Pr54UgAAAAQ"]
[Mon Dec 08 01:50:49.961508 2025] [:error] [pid 55699:tid 55754] [client 4.189.128.201:24285] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTW-eXp2c7AdOPMmDENwagAAAJc"]
[Mon Dec 08 01:50:50.188791 2025] [:error] [pid 55697:tid 55710] [client 4.189.128.201:24203] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTW-epCUb4ntL-D8ZJpscQAAAEc"]
[Mon Dec 08 01:50:50.416257 2025] [:error] [pid 55699:tid 55748] [client 4.189.128.201:24201] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aTW-enp2c7AdOPMmDENwawAAAJI"]
[Mon Dec 08 01:50:50.643162 2025] [:error] [pid 55700:tid 55767] [client 4.189.128.201:24252] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aTW-ek8bwbrSb89n9TccQQAAAMo"]
[Mon Dec 08 01:50:50.869599 2025] [:error] [pid 55840:tid 55856] [client 4.189.128.201:24195] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aTW-etXZ-ijN21c_Pr54XAAAAA0"]
[Mon Dec 08 01:50:51.097319 2025] [:error] [pid 55840:tid 55845] [client 4.189.128.201:24247] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aTW-e9XZ-ijN21c_Pr54XgAAAAI"]
[Mon Dec 08 01:50:51.324325 2025] [:error] [pid 55700:tid 55773] [client 4.189.128.201:24276] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aTW-e08bwbrSb89n9TccQgAAANA"]
[Mon Dec 08 01:50:51.551416 2025] [:error] [pid 55699:tid 55749] [client 4.189.128.201:24208] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aTW-e3p2c7AdOPMmDENwbwAAAJM"]
[Mon Dec 08 01:50:51.778779 2025] [:error] [pid 55699:tid 55736] [client 4.189.128.201:1194] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aTW-e3p2c7AdOPMmDENwcAAAAIY"]
[Mon Dec 08 01:50:52.005445 2025] [:error] [pid 55699:tid 55744] [client 4.189.128.201:24273] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aTW-fHp2c7AdOPMmDENwcgAAAI4"]
[Mon Dec 08 01:50:52.233361 2025] [:error] [pid 55699:tid 55740] [client 4.189.128.201:24205] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aTW-fHp2c7AdOPMmDENwcwAAAIo"]
[Mon Dec 08 01:50:52.460464 2025] [:error] [pid 55700:tid 55769] [client 4.189.128.201:24308] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aTW-fE8bwbrSb89n9TccQwAAAMw"]
[Mon Dec 08 01:50:52.686874 2025] [:error] [pid 55840:tid 55859] [client 4.189.128.201:24207] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aTW-fNXZ-ijN21c_Pr54YAAAABA"]
[Mon Dec 08 01:50:52.913790 2025] [:error] [pid 55697:tid 55707] [client 4.189.128.201:24316] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aTW-fJCUb4ntL-D8ZJpscgAAAEQ"]
[Mon Dec 08 01:50:53.141877 2025] [:error] [pid 55840:tid 55854] [client 4.189.128.201:24278] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTW-fdXZ-ijN21c_Pr54YwAAAAs"]
[Mon Dec 08 01:50:53.370372 2025] [:error] [pid 55697:tid 55716] [client 4.189.128.201:24277] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTW-fZCUb4ntL-D8ZJpscwAAAE0"]
[Mon Dec 08 01:50:53.597708 2025] [:error] [pid 55699:tid 55739] [client 4.189.128.201:26516] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTW-fXp2c7AdOPMmDENwdAAAAIk"]
[Mon Dec 08 01:50:53.824202 2025] [:error] [pid 55699:tid 55747] [client 4.189.128.201:26543] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTW-fXp2c7AdOPMmDENwdQAAAJE"]
[Mon Dec 08 01:50:54.051327 2025] [:error] [pid 55699:tid 55746] [client 4.189.128.201:26518] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aTW-fnp2c7AdOPMmDENwdgAAAJA"]
[Mon Dec 08 01:50:54.278656 2025] [:error] [pid 55699:tid 55737] [client 4.189.128.201:24265] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aTW-fnp2c7AdOPMmDENweAAAAIc"]
[Mon Dec 08 01:50:54.505719 2025] [:error] [pid 55700:tid 55763] [client 4.189.128.201:24270] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aTW-fk8bwbrSb89n9TccRgAAAMY"]
[Mon Dec 08 01:50:54.733272 2025] [:error] [pid 55840:tid 55847] [client 4.189.128.201:26522] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aTW-ftXZ-ijN21c_Pr54ZgAAAAQ"]
[Mon Dec 08 01:50:54.960988 2025] [:error] [pid 55840:tid 55860] [client 4.189.128.201:24228] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aTW-ftXZ-ijN21c_Pr54aAAAABE"]
[Mon Dec 08 01:50:55.188081 2025] [:error] [pid 55840:tid 55848] [client 4.189.128.201:24235] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aTW-f9XZ-ijN21c_Pr54aQAAAAU"]
[Mon Dec 08 01:50:55.415799 2025] [:error] [pid 55840:tid 55853] [client 4.189.128.201:24237] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aTW-f9XZ-ijN21c_Pr54agAAAAo"]
[Mon Dec 08 01:50:55.642906 2025] [:error] [pid 55700:tid 55760] [client 4.189.128.201:26500] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aTW-f08bwbrSb89n9TccSAAAAMM"]
[Mon Dec 08 01:50:55.869748 2025] [:error] [pid 55840:tid 55857] [client 4.189.128.201:23908] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uana.php"] [unique_id "aTW-f9XZ-ijN21c_Pr54bQAAAA4"]
[Mon Dec 08 01:50:56.096719 2025] [:error] [pid 55840:tid 55856] [client 4.189.128.201:24304] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uana.php"] [unique_id "aTW-gNXZ-ijN21c_Pr54bgAAAA0"]
[Mon Dec 08 01:50:56.323949 2025] [:error] [pid 55840:tid 55846] [client 4.189.128.201:24222] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uana.php"] [unique_id "aTW-gNXZ-ijN21c_Pr54bwAAAAM"]
[Mon Dec 08 01:50:56.551602 2025] [:error] [pid 55840:tid 55851] [client 4.189.128.201:15574] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uana.php"] [unique_id "aTW-gNXZ-ijN21c_Pr54cAAAAAg"]
[Mon Dec 08 01:50:56.778130 2025] [:error] [pid 55840:tid 55866] [client 4.189.128.201:24281] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTW-gNXZ-ijN21c_Pr54cQAAABc"]
[Mon Dec 08 01:50:57.004603 2025] [:error] [pid 55699:tid 55738] [client 4.189.128.201:24220] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTW-gXp2c7AdOPMmDENweQAAAIg"]
[Mon Dec 08 01:50:57.230306 2025] [:error] [pid 55700:tid 55764] [client 4.189.128.201:1157] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTW-gU8bwbrSb89n9TccSgAAAMc"]
[Mon Dec 08 01:50:57.457618 2025] [:error] [pid 55840:tid 55854] [client 4.189.128.201:24221] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTW-gdXZ-ijN21c_Pr54dgAAAAs"]
[Mon Dec 08 01:50:57.686694 2025] [:error] [pid 55700:tid 55781] [client 4.189.128.201:26557] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aTW-gU8bwbrSb89n9TccSwAAANg"]
[Mon Dec 08 01:50:57.913424 2025] [:error] [pid 55700:tid 55770] [client 4.189.128.201:26531] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aTW-gU8bwbrSb89n9TccTAAAAM0"]
[Mon Dec 08 01:50:58.140015 2025] [:error] [pid 55840:tid 55849] [client 4.189.128.201:24192] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aTW-gtXZ-ijN21c_Pr54eAAAAAY"]
[Mon Dec 08 01:50:58.367573 2025] [:error] [pid 55697:tid 55723] [client 4.189.128.201:24314] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aTW-gpCUb4ntL-D8ZJpsdgAAAFQ"]
[Mon Dec 08 01:50:58.594071 2025] [:error] [pid 55697:tid 55719] [client 4.189.128.201:26515] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aTW-gpCUb4ntL-D8ZJpsdwAAAFA"]
[Mon Dec 08 01:50:58.821071 2025] [:error] [pid 55840:tid 55855] [client 4.189.128.201:24250] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aTW-gtXZ-ijN21c_Pr54eQAAAAw"]
[Mon Dec 08 01:50:59.048199 2025] [:error] [pid 55699:tid 55750] [client 4.189.128.201:23899] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aTW-g3p2c7AdOPMmDENwfAAAAJQ"]
[Mon Dec 08 01:50:59.275130 2025] [:error] [pid 55840:tid 55860] [client 4.189.128.201:24236] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aTW-g9XZ-ijN21c_Pr54ewAAABE"]
[Mon Dec 08 01:50:59.502532 2025] [:error] [pid 55700:tid 55756] [client 4.189.128.201:24198] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aTW-g08bwbrSb89n9TccTQAAAMA"]
[Mon Dec 08 01:50:59.729252 2025] [:error] [pid 55700:tid 55776] [client 4.189.128.201:1163] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aTW-g08bwbrSb89n9TccTgAAANM"]
[Mon Dec 08 01:50:59.956459 2025] [:error] [pid 55840:tid 55857] [client 4.189.128.201:26510] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aTW-g9XZ-ijN21c_Pr54fwAAAA4"]
[Mon Dec 08 01:51:00.184070 2025] [:error] [pid 55697:tid 55705] [client 4.189.128.201:24287] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aTW-hJCUb4ntL-D8ZJpseAAAAEI"]
[Mon Dec 08 01:51:00.412050 2025] [:error] [pid 55840:tid 55856] [client 4.189.128.201:26529] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTW-hNXZ-ijN21c_Pr54ggAAAA0"]
[Mon Dec 08 01:51:00.638126 2025] [:error] [pid 55699:tid 55748] [client 4.189.128.201:26547] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTW-hHp2c7AdOPMmDENwfgAAAJI"]
[Mon Dec 08 01:51:00.865430 2025] [:error] [pid 55840:tid 55845] [client 4.189.128.201:26513] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTW-hNXZ-ijN21c_Pr54hQAAAAI"]
[Mon Dec 08 01:51:01.092609 2025] [:error] [pid 55840:tid 55858] [client 4.189.128.201:24210] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTW-hdXZ-ijN21c_Pr54hgAAAA8"]
[Mon Dec 08 01:51:01.320052 2025] [:error] [pid 55700:tid 55774] [client 4.189.128.201:24260] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTW-hU8bwbrSb89n9TccUQAAANE"]
[Mon Dec 08 01:51:01.548236 2025] [:error] [pid 55697:tid 55713] [client 4.189.128.201:24255] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTW-hZCUb4ntL-D8ZJpsegAAAEo"]
[Mon Dec 08 01:51:01.774310 2025] [:error] [pid 55697:tid 55714] [client 4.189.128.201:24249] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTW-hZCUb4ntL-D8ZJpsewAAAEs"]
[Mon Dec 08 01:51:02.001788 2025] [:error] [pid 55700:tid 55766] [client 4.189.128.201:26553] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aTW-hk8bwbrSb89n9TccUwAAAMk"]
[Mon Dec 08 01:51:02.232563 2025] [:error] [pid 55840:tid 55853] [client 4.189.128.201:23896] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aTW-htXZ-ijN21c_Pr54jAAAAAo"]
[Mon Dec 08 01:51:02.459361 2025] [:error] [pid 55840:tid 55867] [client 4.189.128.201:26542] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aTW-htXZ-ijN21c_Pr54jgAAABg"]
[Mon Dec 08 01:51:02.686793 2025] [:error] [pid 55700:tid 55773] [client 4.189.128.201:24302] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aTW-hk8bwbrSb89n9TccVgAAANA"]
[Mon Dec 08 01:51:02.913114 2025] [:error] [pid 55840:tid 55856] [client 4.189.128.201:24313] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aTW-htXZ-ijN21c_Pr54kwAAAA0"]
[Mon Dec 08 01:51:03.140360 2025] [:error] [pid 55840:tid 55851] [client 4.189.128.201:15608] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "aTW-h9XZ-ijN21c_Pr54lAAAAAg"]
[Mon Dec 08 01:51:03.367488 2025] [:error] [pid 55699:tid 55743] [client 4.189.128.201:1213] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "aTW-h3p2c7AdOPMmDENwfwAAAI0"]
[Mon Dec 08 01:51:03.595018 2025] [:error] [pid 55697:tid 55718] [client 4.189.128.201:23892] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "aTW-h5CUb4ntL-D8ZJpsfwAAAE8"]
[Mon Dec 08 01:51:03.821861 2025] [:error] [pid 55700:tid 55761] [client 4.189.128.201:24261] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "aTW-h08bwbrSb89n9TccXwAAAMQ"]
[Mon Dec 08 01:51:04.050160 2025] [:error] [pid 55699:tid 55736] [client 4.189.128.201:1212] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/warm.PhP7"] [unique_id "aTW-iHp2c7AdOPMmDENwgQAAAIY"]
[Mon Dec 08 01:51:04.283528 2025] [:error] [pid 55700:tid 55776] [client 4.189.128.201:24227] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/warm.PhP7"] [unique_id "aTW-iE8bwbrSb89n9TccYwAAANM"]
[Mon Dec 08 01:51:04.509731 2025] [:error] [pid 55840:tid 55862] [client 4.189.128.201:24271] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/warm.PhP7"] [unique_id "aTW-iNXZ-ijN21c_Pr54nQAAABM"]
[Mon Dec 08 01:51:04.738443 2025] [:error] [pid 55700:tid 55767] [client 4.189.128.201:24216] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/warm.PhP7"] [unique_id "aTW-iE8bwbrSb89n9TccZwAAAMo"]
[Mon Dec 08 01:51:04.966158 2025] [:error] [pid 55699:tid 55739] [client 4.189.128.201:26498] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php7"] [unique_id "aTW-iHp2c7AdOPMmDENwgwAAAIk"]
[Mon Dec 08 01:51:05.192724 2025] [:error] [pid 55697:tid 55727] [client 4.189.128.201:26507] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php7"] [unique_id "aTW-iZCUb4ntL-D8ZJpsgAAAAFg"]
[Mon Dec 08 01:51:05.420093 2025] [:error] [pid 55697:tid 55706] [client 4.189.128.201:23533] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php7"] [unique_id "aTW-iZCUb4ntL-D8ZJpsgQAAAEM"]
[Mon Dec 08 01:51:05.646920 2025] [:error] [pid 55840:tid 55844] [client 4.189.128.201:26551] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php7"] [unique_id "aTW-idXZ-ijN21c_Pr54oQAAAAE"]
[Mon Dec 08 01:51:05.873398 2025] [:error] [pid 55840:tid 55857] [client 4.189.128.201:24193] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTW-idXZ-ijN21c_Pr54ogAAAA4"]
[Mon Dec 08 01:51:06.101369 2025] [:error] [pid 55697:tid 55712] [client 4.189.128.201:15559] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTW-ipCUb4ntL-D8ZJpsggAAAEk"]
[Mon Dec 08 01:51:06.328887 2025] [:error] [pid 55700:tid 55756] [client 4.189.128.201:23886] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTW-ik8bwbrSb89n9TcccwAAAMA"]
[Mon Dec 08 01:51:06.556622 2025] [:error] [pid 55697:tid 55721] [client 4.189.128.201:26501] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTW-ipCUb4ntL-D8ZJpsgwAAAFI"]
[Mon Dec 08 01:51:06.782754 2025] [:error] [pid 55700:tid 55774] [client 4.189.128.201:15552] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pekok.php"] [unique_id "aTW-ik8bwbrSb89n9TccdgAAANE"]
[Mon Dec 08 01:51:07.009426 2025] [:error] [pid 55697:tid 55704] [client 4.189.128.201:24251] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pekok.php"] [unique_id "aTW-i5CUb4ntL-D8ZJpshAAAAEE"]
[Mon Dec 08 01:51:07.235752 2025] [:error] [pid 55697:tid 55726] [client 4.189.128.201:1196] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pekok.php"] [unique_id "aTW-i5CUb4ntL-D8ZJpshQAAAFc"]
[Mon Dec 08 01:51:07.463191 2025] [:error] [pid 55700:tid 55772] [client 4.189.128.201:26525] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pekok.php"] [unique_id "aTW-i08bwbrSb89n9TccfAAAAM8"]
[Mon Dec 08 01:51:07.690708 2025] [:error] [pid 55697:tid 55703] [client 4.189.128.201:24318] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aTW-i5CUb4ntL-D8ZJpshgAAAEA"]
[Mon Dec 08 01:51:07.917181 2025] [:error] [pid 55699:tid 55738] [client 4.189.128.201:23917] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aTW-i3p2c7AdOPMmDENwigAAAIg"]
[Mon Dec 08 01:51:08.144925 2025] [:error] [pid 55840:tid 55867] [client 4.189.128.201:24256] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aTW-jNXZ-ijN21c_Pr54tQAAABg"]
[Mon Dec 08 01:51:08.371836 2025] [:error] [pid 55699:tid 55743] [client 4.189.128.201:26535] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aTW-jHp2c7AdOPMmDENwjQAAAI0"]
[Mon Dec 08 01:51:08.599166 2025] [:error] [pid 55699:tid 55749] [client 4.189.128.201:24305] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aa.php"] [unique_id "aTW-jHp2c7AdOPMmDENwjgAAAJM"]
[Mon Dec 08 01:51:08.826825 2025] [:error] [pid 55699:tid 55736] [client 4.189.128.201:23923] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aa.php"] [unique_id "aTW-jHp2c7AdOPMmDENwjwAAAIY"]
[Mon Dec 08 01:51:09.054306 2025] [:error] [pid 55700:tid 55761] [client 4.189.128.201:26506] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aa.php"] [unique_id "aTW-jU8bwbrSb89n9TccgQAAAMQ"]
[Mon Dec 08 01:51:09.280902 2025] [:error] [pid 55699:tid 55741] [client 4.189.128.201:24223] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aa.php"] [unique_id "aTW-jXp2c7AdOPMmDENwlAAAAIs"]
[Mon Dec 08 01:51:09.508129 2025] [:error] [pid 55700:tid 55771] [client 4.189.128.201:24215] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cart.php"] [unique_id "aTW-jU8bwbrSb89n9TcchAAAAM4"]
[Mon Dec 08 01:51:09.734610 2025] [:error] [pid 55697:tid 55711] [client 4.189.128.201:1198] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cart.php"] [unique_id "aTW-jZCUb4ntL-D8ZJpsiQAAAEg"]
[Mon Dec 08 01:51:09.962437 2025] [:error] [pid 55697:tid 55717] [client 4.189.128.201:24296] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cart.php"] [unique_id "aTW-jZCUb4ntL-D8ZJpsigAAAE4"]
[Mon Dec 08 01:51:10.192424 2025] [:error] [pid 55699:tid 55738] [client 4.189.128.201:1206] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cart.php"] [unique_id "aTW-jnp2c7AdOPMmDENwnQAAAIg"]
[Mon Dec 08 01:51:10.419333 2025] [:error] [pid 55697:tid 55723] [client 4.189.128.201:1183] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/compare.php"] [unique_id "aTW-jpCUb4ntL-D8ZJpsjQAAAFQ"]
[Mon Dec 08 01:51:10.646957 2025] [:error] [pid 55840:tid 55864] [client 4.189.128.201:26524] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/compare.php"] [unique_id "aTW-jtXZ-ijN21c_Pr54vQAAABU"]
[Mon Dec 08 01:51:10.873804 2025] [:error] [pid 55840:tid 55854] [client 4.189.128.201:1192] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/compare.php"] [unique_id "aTW-jtXZ-ijN21c_Pr54vgAAAAs"]
[Mon Dec 08 01:51:11.101118 2025] [:error] [pid 55697:tid 55713] [client 4.189.128.201:26538] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/compare.php"] [unique_id "aTW-j5CUb4ntL-D8ZJpsjwAAAEo"]
[Mon Dec 08 01:51:11.328367 2025] [:error] [pid 55697:tid 55714] [client 4.189.128.201:23903] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTW-j5CUb4ntL-D8ZJpskAAAAEs"]
[Mon Dec 08 01:51:11.556092 2025] [:error] [pid 55697:tid 55725] [client 4.189.128.201:1170] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTW-j5CUb4ntL-D8ZJpskgAAAFY"]
[Mon Dec 08 01:51:11.782246 2025] [:error] [pid 55840:tid 55858] [client 4.189.128.201:23513] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTW-j9XZ-ijN21c_Pr54wAAAAA8"]
[Mon Dec 08 01:51:12.009354 2025] [:error] [pid 55700:tid 55774] [client 4.189.128.201:24213] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTW-kE8bwbrSb89n9TcciAAAANE"]
[Mon Dec 08 01:51:12.237386 2025] [:error] [pid 55700:tid 55778] [client 4.189.128.201:26555] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aTW-kE8bwbrSb89n9TcciQAAANU"]
[Mon Dec 08 01:51:12.465139 2025] [:error] [pid 55840:tid 55843] [client 4.189.128.201:24224] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aTW-kNXZ-ijN21c_Pr54wwAAAAA"]
[Mon Dec 08 01:51:12.692495 2025] [:error] [pid 55700:tid 55767] [client 4.189.128.201:23912] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aTW-kE8bwbrSb89n9TccjAAAAMo"]
[Mon Dec 08 01:51:12.920355 2025] [:error] [pid 55697:tid 55724] [client 4.189.128.201:1899] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aTW-kJCUb4ntL-D8ZJpslAAAAFU"]
[Mon Dec 08 01:51:13.147112 2025] [:error] [pid 55700:tid 55759] [client 4.189.128.201:24232] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTW-kU8bwbrSb89n9TccjgAAAMI"]
[Mon Dec 08 01:51:13.373345 2025] [:error] [pid 55700:tid 55780] [client 4.189.128.201:23887] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTW-kU8bwbrSb89n9TccjwAAANc"]
[Mon Dec 08 01:51:13.601835 2025] [:error] [pid 55700:tid 55763] [client 4.189.128.201:15576] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTW-kU8bwbrSb89n9TcckgAAAMY"]
[Mon Dec 08 01:51:13.829253 2025] [:error] [pid 55840:tid 55867] [client 4.189.128.201:15571] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTW-kdXZ-ijN21c_Pr54xgAAABg"]
[Mon Dec 08 01:51:14.055335 2025] [:error] [pid 55840:tid 55848] [client 4.189.128.201:1176] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atom.php"] [unique_id "aTW-ktXZ-ijN21c_Pr54xwAAAAU"]
[Mon Dec 08 01:51:14.289217 2025] [:error] [pid 55699:tid 55749] [client 4.189.128.201:1184] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atom.php"] [unique_id "aTW-knp2c7AdOPMmDENwowAAAJM"]
[Mon Dec 08 01:51:14.516400 2025] [:error] [pid 55699:tid 55751] [client 4.189.128.201:1158] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atom.php"] [unique_id "aTW-knp2c7AdOPMmDENwpQAAAJU"]
[Mon Dec 08 01:51:14.743835 2025] [:error] [pid 55697:tid 55715] [client 4.189.128.201:24248] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atom.php"] [unique_id "aTW-kpCUb4ntL-D8ZJpslgAAAEw"]
[Mon Dec 08 01:51:14.970967 2025] [:error] [pid 55697:tid 55721] [client 4.189.128.201:1191] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/case.php"] [unique_id "aTW-kpCUb4ntL-D8ZJpslwAAAFI"]
[Mon Dec 08 01:51:15.199132 2025] [:error] [pid 55697:tid 55704] [client 4.189.128.201:24312] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/case.php"] [unique_id "aTW-k5CUb4ntL-D8ZJpsmQAAAEE"]
[Mon Dec 08 01:51:15.426726 2025] [:error] [pid 55840:tid 55854] [client 4.189.128.201:26556] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/case.php"] [unique_id "aTW-k9XZ-ijN21c_Pr54ygAAAAs"]
[Mon Dec 08 01:51:15.653874 2025] [:error] [pid 55699:tid 55739] [client 4.189.128.201:23891] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/case.php"] [unique_id "aTW-k3p2c7AdOPMmDENwpgAAAIk"]
[Mon Dec 08 01:51:15.881753 2025] [:error] [pid 55699:tid 55742] [client 4.189.128.201:24241] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docs.php"] [unique_id "aTW-k3p2c7AdOPMmDENwpwAAAIw"]
[Mon Dec 08 01:51:16.109639 2025] [:error] [pid 55699:tid 55733] [client 4.189.128.201:33624] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docs.php"] [unique_id "aTW-lHp2c7AdOPMmDENwqAAAAIM"]
[Mon Dec 08 01:51:16.337076 2025] [:error] [pid 55700:tid 55776] [client 4.189.128.201:26544] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docs.php"] [unique_id "aTW-lE8bwbrSb89n9TcclgAAANM"]
[Mon Dec 08 01:51:16.563355 2025] [:error] [pid 55700:tid 55770] [client 4.189.128.201:26514] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docs.php"] [unique_id "aTW-lE8bwbrSb89n9TcclwAAAM0"]
[Mon Dec 08 01:51:16.790741 2025] [:error] [pid 55840:tid 55862] [client 4.189.128.201:24263] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ios.php"] [unique_id "aTW-lNXZ-ijN21c_Pr54zAAAABM"]
[Mon Dec 08 01:51:17.018101 2025] [:error] [pid 55700:tid 55773] [client 4.189.128.201:24239] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ios.php"] [unique_id "aTW-lU8bwbrSb89n9TccmgAAANA"]
[Mon Dec 08 01:51:17.244881 2025] [:error] [pid 55699:tid 55747] [client 4.189.128.201:15586] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ios.php"] [unique_id "aTW-lXp2c7AdOPMmDENwqgAAAJE"]
[Mon Dec 08 01:51:17.472059 2025] [:error] [pid 55700:tid 55767] [client 4.189.128.201:30518] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ios.php"] [unique_id "aTW-lU8bwbrSb89n9TccngAAAMo"]
[Mon Dec 08 01:51:17.698707 2025] [:error] [pid 55700:tid 55772] [client 4.189.128.201:26539] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aTW-lU8bwbrSb89n9TccnwAAAM8"]
[Mon Dec 08 01:51:17.925144 2025] [:error] [pid 55840:tid 55866] [client 4.189.128.201:26541] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aTW-ldXZ-ijN21c_Pr54zwAAABc"]
[Mon Dec 08 01:51:18.157617 2025] [:error] [pid 55699:tid 55732] [client 4.189.128.201:24204] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aTW-lnp2c7AdOPMmDENwqwAAAII"]
[Mon Dec 08 01:51:18.385393 2025] [:error] [pid 55840:tid 55855] [client 4.189.128.201:24288] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aTW-ltXZ-ijN21c_Pr540gAAAAw"]
[Mon Dec 08 01:51:18.612830 2025] [:error] [pid 55840:tid 55849] [client 4.189.128.201:33601] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTW-ltXZ-ijN21c_Pr541AAAAAY"]
[Mon Dec 08 01:51:18.839632 2025] [:error] [pid 55699:tid 55745] [client 4.189.128.201:1195] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTW-lnp2c7AdOPMmDENwrQAAAI8"]
[Mon Dec 08 01:51:19.068836 2025] [:error] [pid 55840:tid 55859] [client 4.189.128.201:23529] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTW-l9XZ-ijN21c_Pr541gAAABA"]
[Mon Dec 08 01:51:19.296740 2025] [:error] [pid 55699:tid 55753] [client 4.189.128.201:24209] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTW-l3p2c7AdOPMmDENwrgAAAJY"]
[Mon Dec 08 01:51:19.524994 2025] [:error] [pid 55700:tid 55763] [client 4.189.128.201:23894] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTW-l08bwbrSb89n9TccogAAAMY"]
[Mon Dec 08 01:51:19.752925 2025] [:error] [pid 55700:tid 55765] [client 4.189.128.201:24289] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTW-l08bwbrSb89n9TccowAAAMg"]
[Mon Dec 08 01:51:19.980267 2025] [:error] [pid 55700:tid 55757] [client 4.189.128.201:23889] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTW-l08bwbrSb89n9TccpgAAAME"]
[Mon Dec 08 01:51:20.207110 2025] [:error] [pid 55697:tid 55703] [client 4.189.128.201:15564] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTW-mJCUb4ntL-D8ZJpsmwAAAEA"]
[Mon Dec 08 01:51:20.434823 2025] [:error] [pid 55700:tid 55781] [client 4.189.128.201:23876] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTW-mE8bwbrSb89n9TccqAAAANg"]
[Mon Dec 08 01:51:20.661634 2025] [:error] [pid 55699:tid 55755] [client 4.189.128.201:15595] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTW-mHp2c7AdOPMmDENwrwAAAJg"]
[Mon Dec 08 01:51:20.888387 2025] [:error] [pid 55700:tid 55756] [client 4.189.128.201:23881] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTW-mE8bwbrSb89n9TccqwAAAMA"]
[Mon Dec 08 01:51:21.116037 2025] [:error] [pid 55840:tid 55864] [client 4.189.128.201:1181] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTW-mdXZ-ijN21c_Pr542AAAABU"]
[Mon Dec 08 01:51:21.343150 2025] [:error] [pid 55840:tid 55854] [client 4.189.128.201:23897] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTW-mdXZ-ijN21c_Pr542QAAAAs"]
[Mon Dec 08 01:51:21.570299 2025] [:error] [pid 55697:tid 55710] [client 4.189.128.201:23531] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTW-mZCUb4ntL-D8ZJpsnAAAAEc"]
[Mon Dec 08 01:51:21.805268 2025] [:error] [pid 55700:tid 55770] [client 4.189.128.201:23878] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTW-mU8bwbrSb89n9TccrwAAAM0"]
[Mon Dec 08 01:51:22.031890 2025] [:error] [pid 55840:tid 55858] [client 4.189.128.201:1162] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTW-mtXZ-ijN21c_Pr543AAAAA8"]
[Mon Dec 08 01:51:22.258828 2025] [:error] [pid 55840:tid 55866] [client 4.189.128.201:1215] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "aTW-mtXZ-ijN21c_Pr543wAAABc"]
[Mon Dec 08 01:51:22.486453 2025] [:error] [pid 55699:tid 55746] [client 4.189.128.201:15566] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "aTW-mnp2c7AdOPMmDENwsQAAAJA"]
[Mon Dec 08 01:51:22.713811 2025] [:error] [pid 55700:tid 55773] [client 4.189.128.201:15599] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "aTW-mk8bwbrSb89n9TccsQAAANA"]
[Mon Dec 08 01:51:22.940689 2025] [:error] [pid 55840:tid 55851] [client 4.189.128.201:23918] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "aTW-mtXZ-ijN21c_Pr544wAAAAg"]
[Mon Dec 08 01:51:23.168835 2025] [:error] [pid 55700:tid 55767] [client 4.189.128.201:15594] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f.php"] [unique_id "aTW-m08bwbrSb89n9TccswAAAMo"]
[Mon Dec 08 01:51:23.395236 2025] [:error] [pid 55840:tid 55855] [client 4.189.128.201:15563] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f.php"] [unique_id "aTW-m9XZ-ijN21c_Pr545AAAAAw"]
[Mon Dec 08 01:51:23.622118 2025] [:error] [pid 55697:tid 55711] [client 4.189.128.201:1178] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f.php"] [unique_id "aTW-m5CUb4ntL-D8ZJpsngAAAEg"]
[Mon Dec 08 01:51:23.849205 2025] [:error] [pid 55700:tid 55777] [client 4.189.128.201:15582] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f.php"] [unique_id "aTW-m08bwbrSb89n9TcctwAAANQ"]
[Mon Dec 08 01:51:24.076191 2025] [:error] [pid 55699:tid 55730] [client 4.189.128.201:1186] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aTW-nHp2c7AdOPMmDENwsgAAAIA"]
[Mon Dec 08 01:51:24.304564 2025] [:error] [pid 55699:tid 55754] [client 4.189.128.201:1443] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aTW-nHp2c7AdOPMmDENwtAAAAJc"]
[Mon Dec 08 01:51:24.531664 2025] [:error] [pid 55697:tid 55708] [client 4.189.128.201:1420] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aTW-nJCUb4ntL-D8ZJpsoAAAAEU"]
[Mon Dec 08 01:51:24.758389 2025] [:error] [pid 55699:tid 55748] [client 4.189.128.201:1422] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aTW-nHp2c7AdOPMmDENwtQAAAJI"]
[Mon Dec 08 01:51:24.985933 2025] [:error] [pid 55840:tid 55856] [client 4.189.128.201:1457] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTW-nNXZ-ijN21c_Pr545gAAAA0"]
[Mon Dec 08 01:51:25.213906 2025] [:error] [pid 55840:tid 55859] [client 4.189.128.201:1373] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTW-ndXZ-ijN21c_Pr545wAAABA"]
[Mon Dec 08 01:51:25.441769 2025] [:error] [pid 55697:tid 55716] [client 4.189.128.201:1129] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTW-nZCUb4ntL-D8ZJpsoQAAAE0"]
[Mon Dec 08 01:51:25.668383 2025] [:error] [pid 55697:tid 55719] [client 4.189.128.201:1089] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTW-nZCUb4ntL-D8ZJpsogAAAFA"]
[Mon Dec 08 01:51:25.897634 2025] [:error] [pid 55840:tid 55847] [client 4.189.128.201:1047] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTW-ndXZ-ijN21c_Pr546gAAAAQ"]
[Mon Dec 08 01:51:26.124922 2025] [:error] [pid 55697:tid 55705] [client 4.189.128.201:1060] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTW-npCUb4ntL-D8ZJpspAAAAEI"]
[Mon Dec 08 01:51:26.360820 2025] [:error] [pid 55699:tid 55750] [client 4.189.128.201:1052] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTW-nnp2c7AdOPMmDENwtwAAAJQ"]
[Mon Dec 08 01:51:26.588482 2025] [:error] [pid 55840:tid 55845] [client 4.189.128.201:1071] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTW-ntXZ-ijN21c_Pr546wAAAAI"]
[Mon Dec 08 01:51:26.815758 2025] [:error] [pid 55840:tid 55849] [client 4.189.128.201:1889] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTW-ntXZ-ijN21c_Pr547AAAAAY"]
[Mon Dec 08 01:51:27.043223 2025] [:error] [pid 55699:tid 55736] [client 4.189.128.201:1870] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTW-n3p2c7AdOPMmDENwuAAAAIY"]
[Mon Dec 08 01:51:27.271428 2025] [:error] [pid 55700:tid 55776] [client 4.189.128.201:1119] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTW-n08bwbrSb89n9TccuQAAANM"]
[Mon Dec 08 01:51:27.499903 2025] [:error] [pid 55697:tid 55713] [client 4.189.128.201:1024] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTW-n5CUb4ntL-D8ZJpspgAAAEo"]
[Mon Dec 08 01:51:27.727161 2025] [:error] [pid 55840:tid 55865] [client 4.189.128.201:1405] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTW-n9XZ-ijN21c_Pr547wAAABY"]
[Mon Dec 08 01:51:27.954809 2025] [:error] [pid 55700:tid 55760] [client 4.189.128.201:1134] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTW-n08bwbrSb89n9TccvAAAAMM"]
[Mon Dec 08 01:51:28.182140 2025] [:error] [pid 55700:tid 55773] [client 4.189.128.201:1151] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTW-oE8bwbrSb89n9TccvQAAANA"]
[Mon Dec 08 01:51:28.410003 2025] [:error] [pid 55700:tid 55780] [client 4.189.128.201:1053] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTW-oE8bwbrSb89n9TccvgAAANc"]
[Mon Dec 08 01:51:28.638257 2025] [:error] [pid 55700:tid 55766] [client 4.189.128.201:1371] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "aTW-oE8bwbrSb89n9TccvwAAAMk"]
[Mon Dec 08 01:51:28.866218 2025] [:error] [pid 55840:tid 55861] [client 4.189.128.201:1354] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "aTW-oNXZ-ijN21c_Pr548AAAABI"]
[Mon Dec 08 01:51:29.093636 2025] [:error] [pid 55840:tid 55843] [client 4.189.128.201:1148] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "aTW-odXZ-ijN21c_Pr548gAAAAA"]
[Mon Dec 08 01:51:29.321668 2025] [:error] [pid 55840:tid 55853] [client 4.189.128.201:1406] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "aTW-odXZ-ijN21c_Pr548wAAAAo"]
[Mon Dec 08 01:51:29.549088 2025] [:error] [pid 55697:tid 55718] [client 4.189.128.201:1035] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aTW-oZCUb4ntL-D8ZJpsqAAAAE8"]
[Mon Dec 08 01:51:29.780598 2025] [:error] [pid 55699:tid 55741] [client 4.189.128.201:1055] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aTW-oXp2c7AdOPMmDENwvgAAAIs"]
[Mon Dec 08 01:51:30.008416 2025] [:error] [pid 55840:tid 55855] [client 4.189.128.201:1356] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aTW-otXZ-ijN21c_Pr549gAAAAw"]
[Mon Dec 08 01:51:30.235943 2025] [:error] [pid 55840:tid 55848] [client 4.189.128.201:30523] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aTW-otXZ-ijN21c_Pr54-AAAAAU"]
[Mon Dec 08 01:51:30.463083 2025] [:error] [pid 55699:tid 55735] [client 4.189.128.201:1072] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aTW-onp2c7AdOPMmDENwvwAAAIU"]
[Mon Dec 08 01:51:30.690609 2025] [:error] [pid 55840:tid 55859] [client 4.189.128.201:1364] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aTW-otXZ-ijN21c_Pr54-gAAABA"]
[Mon Dec 08 01:51:30.916824 2025] [:error] [pid 55699:tid 55740] [client 4.189.128.201:1374] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aTW-onp2c7AdOPMmDENwwAAAAIo"]
[Mon Dec 08 01:51:31.144823 2025] [:error] [pid 55697:tid 55722] [client 4.189.128.201:1346] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aTW-o5CUb4ntL-D8ZJpsqQAAAFM"]
[Mon Dec 08 01:51:31.371156 2025] [:error] [pid 55697:tid 55727] [client 4.189.128.201:1381] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aTW-o5CUb4ntL-D8ZJpsrQAAAFg"]
[Mon Dec 08 01:51:31.598226 2025] [:error] [pid 55697:tid 55704] [client 4.189.128.201:1034] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aTW-o5CUb4ntL-D8ZJpsrgAAAEE"]
[Mon Dec 08 01:51:31.824500 2025] [:error] [pid 55699:tid 55737] [client 4.189.128.201:1369] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aTW-o3p2c7AdOPMmDENwwwAAAIc"]
[Mon Dec 08 01:51:32.050517 2025] [:error] [pid 55699:tid 55755] [client 4.189.128.201:1389] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aTW-pHp2c7AdOPMmDENwxQAAAJg"]
[Mon Dec 08 01:51:32.278150 2025] [:error] [pid 55699:tid 55738] [client 4.189.128.201:1880] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aTW-pHp2c7AdOPMmDENwxgAAAIg"]
[Mon Dec 08 01:51:32.505744 2025] [:error] [pid 55699:tid 55730] [client 4.189.128.201:1041] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aTW-pHp2c7AdOPMmDENwxwAAAIA"]
[Mon Dec 08 01:51:32.744771 2025] [:error] [pid 55699:tid 55734] [client 4.189.128.201:1400] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aTW-pHp2c7AdOPMmDENwyAAAAIQ"]
[Mon Dec 08 01:51:32.972146 2025] [:error] [pid 55699:tid 55754] [client 4.189.128.201:1037] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aTW-pHp2c7AdOPMmDENwyQAAAJc"]
[Mon Dec 08 01:51:33.199473 2025] [:error] [pid 55840:tid 55862] [client 4.189.128.201:1111] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTW-pdXZ-ijN21c_Pr54_wAAABM"]
[Mon Dec 08 01:51:33.426228 2025] [:error] [pid 55840:tid 55846] [client 4.189.128.201:1384] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTW-pdXZ-ijN21c_Pr55AAAAAAM"]
[Mon Dec 08 01:51:33.653373 2025] [:error] [pid 55700:tid 55765] [client 4.189.128.201:1026] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTW-pU8bwbrSb89n9TccwQAAAMg"]
[Mon Dec 08 01:51:33.881250 2025] [:error] [pid 55700:tid 55757] [client 4.189.128.201:1388] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTW-pU8bwbrSb89n9TccwwAAAME"]
[Mon Dec 08 01:51:34.108431 2025] [:error] [pid 55840:tid 55858] [client 4.189.128.201:49119] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aTW-ptXZ-ijN21c_Pr55AQAAAA8"]
[Mon Dec 08 01:51:34.335648 2025] [:error] [pid 55840:tid 55866] [client 4.189.128.201:1113] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aTW-ptXZ-ijN21c_Pr55AgAAABc"]
[Mon Dec 08 01:51:34.562786 2025] [:error] [pid 55840:tid 55860] [client 4.189.128.201:49199] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aTW-ptXZ-ijN21c_Pr55AwAAABE"]
[Mon Dec 08 01:51:34.789596 2025] [:error] [pid 55697:tid 55710] [client 4.189.128.201:1222] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aTW-ppCUb4ntL-D8ZJpssAAAAEc"]
[Mon Dec 08 01:51:35.016742 2025] [:error] [pid 55697:tid 55711] [client 4.189.128.201:1403] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aTW-p5CUb4ntL-D8ZJpssQAAAEg"]
[Mon Dec 08 01:51:35.243977 2025] [:error] [pid 55699:tid 55751] [client 4.189.128.201:1383] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aTW-p3p2c7AdOPMmDENwzQAAAJU"]
[Mon Dec 08 01:51:35.471016 2025] [:error] [pid 55840:tid 55855] [client 4.189.128.201:1123] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aTW-p9XZ-ijN21c_Pr55BgAAAAw"]
[Mon Dec 08 01:51:35.697200 2025] [:error] [pid 55840:tid 55851] [client 4.189.128.201:1336] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aTW-p9XZ-ijN21c_Pr55CAAAAAg"]
[Mon Dec 08 01:51:35.924620 2025] [:error] [pid 55699:tid 55747] [client 4.189.128.201:1375] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aTW-p3p2c7AdOPMmDENw1AAAAJE"]
[Mon Dec 08 01:51:36.151625 2025] [:error] [pid 55840:tid 55848] [client 4.189.128.201:1379] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aTW-qNXZ-ijN21c_Pr55CgAAAAU"]
[Mon Dec 08 01:51:36.378557 2025] [:error] [pid 55697:tid 55719] [client 4.189.128.201:1328] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aTW-qJCUb4ntL-D8ZJpstAAAAFA"]
[Mon Dec 08 01:51:36.607161 2025] [:error] [pid 55697:tid 55705] [client 4.189.128.201:1133] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aTW-qJCUb4ntL-D8ZJpstQAAAEI"]
[Mon Dec 08 01:51:36.834481 2025] [:error] [pid 55697:tid 55709] [client 4.189.128.201:1313] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aTW-qJCUb4ntL-D8ZJpstgAAAEY"]
[Mon Dec 08 01:51:37.061693 2025] [:error] [pid 55700:tid 55764] [client 4.189.128.201:1337] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aTW-qU8bwbrSb89n9TccxQAAAMc"]
[Mon Dec 08 01:51:37.288917 2025] [:error] [pid 55697:tid 55723] [client 4.189.128.201:1331] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aTW-qZCUb4ntL-D8ZJpstwAAAFQ"]
[Mon Dec 08 01:51:37.517252 2025] [:error] [pid 55699:tid 55730] [client 4.189.128.201:1084] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aTW-qXp2c7AdOPMmDENw1wAAAIA"]
[Mon Dec 08 01:51:37.744453 2025] [:error] [pid 55699:tid 55734] [client 4.189.128.201:1291] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTW-qXp2c7AdOPMmDENw2AAAAIQ"]
[Mon Dec 08 01:51:37.971769 2025] [:error] [pid 55700:tid 55762] [client 4.189.128.201:1320] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTW-qU8bwbrSb89n9TccxwAAAMU"]
[Mon Dec 08 01:51:38.198726 2025] [:error] [pid 55840:tid 55862] [client 4.189.128.201:49397] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTW-qtXZ-ijN21c_Pr55EAAAABM"]
[Mon Dec 08 01:51:38.425213 2025] [:error] [pid 55840:tid 55864] [client 4.189.128.201:1104] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTW-qtXZ-ijN21c_Pr55EQAAABU"]
[Mon Dec 08 01:51:38.652084 2025] [:error] [pid 55840:tid 55846] [client 4.189.128.201:1117] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTW-qtXZ-ijN21c_Pr55EwAAAAM"]
[Mon Dec 08 01:51:38.878879 2025] [:error] [pid 55700:tid 55770] [client 4.189.128.201:1284] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTW-qk8bwbrSb89n9TccywAAAM0"]
[Mon Dec 08 01:51:39.106259 2025] [:error] [pid 55699:tid 55743] [client 4.189.128.201:1241] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTW-q3p2c7AdOPMmDENw2QAAAI0"]
[Mon Dec 08 01:51:39.334817 2025] [:error] [pid 55699:tid 55751] [client 4.189.128.201:1296] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTW-q3p2c7AdOPMmDENw2gAAAJU"]
[Mon Dec 08 01:51:39.563378 2025] [:error] [pid 55840:tid 55843] [client 4.189.128.201:49363] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aTW-q9XZ-ijN21c_Pr55GAAAAAA"]
[Mon Dec 08 01:51:39.790390 2025] [:error] [pid 55840:tid 55855] [client 4.189.128.201:49348] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aTW-q9XZ-ijN21c_Pr55GQAAAAw"]
[Mon Dec 08 01:51:40.017546 2025] [:error] [pid 55699:tid 55750] [client 4.189.128.201:1143] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aTW-rHp2c7AdOPMmDENw2wAAAJQ"]
[Mon Dec 08 01:51:40.244853 2025] [:error] [pid 55699:tid 55741] [client 4.189.128.201:1087] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aTW-rHp2c7AdOPMmDENw3AAAAIs"]
[Mon Dec 08 01:51:40.472631 2025] [:error] [pid 55700:tid 55780] [client 4.189.128.201:1338] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aTW-rE8bwbrSb89n9TcczQAAANc"]
[Mon Dec 08 01:51:40.698947 2025] [:error] [pid 55840:tid 55853] [client 4.189.128.201:1302] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aTW-rNXZ-ijN21c_Pr55HQAAAAo"]
[Mon Dec 08 01:51:40.926022 2025] [:error] [pid 55840:tid 55852] [client 4.189.128.201:1308] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aTW-rNXZ-ijN21c_Pr55HwAAAAk"]
[Mon Dec 08 01:51:41.153072 2025] [:error] [pid 55700:tid 55772] [client 4.189.128.201:49371] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aTW-rU8bwbrSb89n9TcczwAAAM8"]
[Mon Dec 08 01:51:41.379812 2025] [:error] [pid 55699:tid 55731] [client 4.189.128.201:1028] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aTW-rXp2c7AdOPMmDENw3gAAAIE"]
[Mon Dec 08 01:51:41.609011 2025] [:error] [pid 55699:tid 55744] [client 4.189.128.201:1116] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aTW-rXp2c7AdOPMmDENw3wAAAI4"]
[Mon Dec 08 01:51:41.837320 2025] [:error] [pid 55700:tid 55769] [client 4.189.128.201:1334] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aTW-rU8bwbrSb89n9Tcc0QAAAMw"]
[Mon Dec 08 01:51:42.063918 2025] [:error] [pid 55700:tid 55775] [client 4.189.128.201:1135] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aTW-rk8bwbrSb89n9Tcc0gAAANI"]
[Mon Dec 08 01:51:42.290094 2025] [:error] [pid 55700:tid 55779] [client 4.189.128.201:1092] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aTW-rk8bwbrSb89n9Tcc0wAAANY"]
[Mon Dec 08 01:51:42.517377 2025] [:error] [pid 55700:tid 55765] [client 4.189.128.201:49173] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aTW-rk8bwbrSb89n9Tcc1AAAAMg"]
[Mon Dec 08 01:51:42.744708 2025] [:error] [pid 55700:tid 55757] [client 4.189.128.201:49195] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aTW-rk8bwbrSb89n9Tcc1QAAAME"]
[Mon Dec 08 01:51:42.972282 2025] [:error] [pid 55700:tid 55771] [client 4.189.128.201:49134] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aTW-rk8bwbrSb89n9Tcc1gAAAM4"]
[Mon Dec 08 01:51:46.261221 2025] [:error] [pid 55699:tid 55749] [client 4.189.128.201:49403] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTW-snp2c7AdOPMmDENw-AAAAJM"]
[Mon Dec 08 01:51:46.488583 2025] [:error] [pid 55840:tid 55848] [client 4.189.128.201:49146] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTW-stXZ-ijN21c_Pr55NQAAAAU"]
[Mon Dec 08 01:51:46.715677 2025] [:error] [pid 55697:tid 55724] [client 4.189.128.201:49101] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTW-spCUb4ntL-D8ZJpsugAAAFU"]
[Mon Dec 08 01:51:46.946512 2025] [:error] [pid 55699:tid 55753] [client 4.189.128.201:49124] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTW-snp2c7AdOPMmDENw-QAAAJY"]
[Mon Dec 08 01:51:47.172816 2025] [:error] [pid 55840:tid 55850] [client 4.189.128.201:49142] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/al.php"] [unique_id "aTW-s9XZ-ijN21c_Pr55NgAAAAc"]
[Mon Dec 08 01:51:47.399866 2025] [:error] [pid 55840:tid 55862] [client 4.189.128.201:49121] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/al.php"] [unique_id "aTW-s9XZ-ijN21c_Pr55OAAAABM"]
[Mon Dec 08 01:51:47.628325 2025] [:error] [pid 55700:tid 55776] [client 4.189.128.201:49118] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/al.php"] [unique_id "aTW-s08bwbrSb89n9Tcc2wAAANM"]
[Mon Dec 08 01:51:47.855495 2025] [:error] [pid 55700:tid 55770] [client 4.189.128.201:49088] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/al.php"] [unique_id "aTW-s08bwbrSb89n9Tcc3QAAAM0"]
[Mon Dec 08 01:51:48.082404 2025] [:error] [pid 55697:tid 55712] [client 4.189.128.201:49165] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aTW-tJCUb4ntL-D8ZJpsvgAAAEk"]
[Mon Dec 08 01:51:48.309988 2025] [:error] [pid 55697:tid 55715] [client 4.189.128.201:1704] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aTW-tJCUb4ntL-D8ZJpsvwAAAEw"]
[Mon Dec 08 01:51:48.539034 2025] [:error] [pid 55699:tid 55730] [client 4.189.128.201:49374] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aTW-tHp2c7AdOPMmDENw_AAAAIA"]
[Mon Dec 08 01:51:48.766471 2025] [:error] [pid 55840:tid 55846] [client 4.189.128.201:1029] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aTW-tNXZ-ijN21c_Pr55OwAAAAM"]
[Mon Dec 08 01:51:48.994982 2025] [:error] [pid 55699:tid 55754] [client 4.189.128.201:49405] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aTW-tHp2c7AdOPMmDENw_QAAAJc"]
[Mon Dec 08 01:51:49.223585 2025] [:error] [pid 55697:tid 55704] [client 4.189.128.201:19868] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aTW-tZCUb4ntL-D8ZJpswQAAAEE"]
[Mon Dec 08 01:51:49.451136 2025] [:error] [pid 55840:tid 55861] [client 4.189.128.201:49212] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aTW-tdXZ-ijN21c_Pr55PgAAABI"]
[Mon Dec 08 01:51:49.678170 2025] [:error] [pid 55699:tid 55746] [client 4.189.128.201:1136] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aTW-tXp2c7AdOPMmDENw_gAAAJA"]
[Mon Dec 08 01:51:49.905718 2025] [:error] [pid 55700:tid 55769] [client 4.189.128.201:1103] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aTW-tU8bwbrSb89n9Tcc4QAAAMw"]
[Mon Dec 08 01:51:50.131824 2025] [:error] [pid 55697:tid 55721] [client 4.189.128.201:49355] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aTW-tpCUb4ntL-D8ZJpswgAAAFI"]
[Mon Dec 08 01:51:50.359084 2025] [:error] [pid 55700:tid 55779] [client 4.189.128.201:1045] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aTW-tk8bwbrSb89n9Tcc5AAAANY"]
[Mon Dec 08 01:51:50.586382 2025] [:error] [pid 55840:tid 55853] [client 4.189.128.201:1108] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aTW-ttXZ-ijN21c_Pr55QwAAAAo"]
[Mon Dec 08 01:51:50.813359 2025] [:error] [pid 55840:tid 55852] [client 4.189.128.201:1798] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aTW-ttXZ-ijN21c_Pr55RQAAAAk"]
[Mon Dec 08 01:51:51.040105 2025] [:error] [pid 55840:tid 55857] [client 4.189.128.201:1067] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aTW-t9XZ-ijN21c_Pr55RwAAAA4"]
[Mon Dec 08 01:51:51.266786 2025] [:error] [pid 55700:tid 55757] [client 4.189.128.201:1132] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aTW-t08bwbrSb89n9Tcc5QAAAME"]
[Mon Dec 08 01:51:51.493233 2025] [:error] [pid 55840:tid 55844] [client 4.189.128.201:1994] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aTW-t9XZ-ijN21c_Pr55SQAAAAE"]
[Mon Dec 08 01:51:51.720846 2025] [:error] [pid 55840:tid 55850] [client 4.189.128.201:1268] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aTW-t9XZ-ijN21c_Pr55SwAAAAc"]
[Mon Dec 08 01:51:51.948092 2025] [:error] [pid 55697:tid 55703] [client 4.189.128.201:1267] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aTW-t5CUb4ntL-D8ZJpsxAAAAEA"]
[Mon Dec 08 01:51:52.175068 2025] [:error] [pid 55700:tid 55759] [client 4.189.128.201:1991] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aTW-uE8bwbrSb89n9Tcc5wAAAMI"]
[Mon Dec 08 01:51:52.401476 2025] [:error] [pid 55700:tid 55763] [client 4.189.128.201:1121] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aTW-uE8bwbrSb89n9Tcc6AAAAMY"]
[Mon Dec 08 01:51:52.628829 2025] [:error] [pid 55700:tid 55764] [client 4.189.128.201:1070] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aTW-uE8bwbrSb89n9Tcc6QAAAMc"]
[Mon Dec 08 01:51:52.856136 2025] [:error] [pid 55700:tid 55761] [client 4.189.128.201:1044] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aTW-uE8bwbrSb89n9Tcc6gAAAMQ"]
[Mon Dec 08 01:51:53.082843 2025] [:error] [pid 55700:tid 55768] [client 4.189.128.201:1290] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aTW-uU8bwbrSb89n9Tcc6wAAAMs"]
[Mon Dec 08 01:51:53.308957 2025] [:error] [pid 55697:tid 55717] [client 4.189.128.201:1258] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aTW-uZCUb4ntL-D8ZJpsxgAAAE4"]
[Mon Dec 08 01:51:53.536129 2025] [:error] [pid 55697:tid 55719] [client 4.189.128.201:1093] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aTW-uZCUb4ntL-D8ZJpsxwAAAFA"]
[Mon Dec 08 01:51:53.763722 2025] [:error] [pid 55699:tid 55751] [client 4.189.128.201:1852] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aTW-uXp2c7AdOPMmDENxAAAAAJU"]
[Mon Dec 08 01:51:53.993696 2025] [:error] [pid 55700:tid 55778] [client 4.189.128.201:1081] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aTW-uU8bwbrSb89n9Tcc7AAAANU"]
[Mon Dec 08 01:51:54.221003 2025] [:error] [pid 55700:tid 55770] [client 4.189.128.201:1234] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aTW-uk8bwbrSb89n9Tcc7QAAAM0"]
[Mon Dec 08 01:51:54.447775 2025] [:error] [pid 55700:tid 55760] [client 4.189.128.201:1329] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xo.php"] [unique_id "aTW-uk8bwbrSb89n9Tcc7gAAAMM"]
[Mon Dec 08 01:51:54.674202 2025] [:error] [pid 55700:tid 55774] [client 4.189.128.201:1340] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xo.php"] [unique_id "aTW-uk8bwbrSb89n9Tcc7wAAANE"]
[Mon Dec 08 01:51:54.900943 2025] [:error] [pid 55840:tid 55865] [client 4.189.128.201:1220] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xo.php"] [unique_id "aTW-utXZ-ijN21c_Pr55VQAAABY"]
[Mon Dec 08 01:51:55.127996 2025] [:error] [pid 55697:tid 55714] [client 4.189.128.201:1076] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xo.php"] [unique_id "aTW-u5CUb4ntL-D8ZJpsygAAAEs"]
[Mon Dec 08 01:51:55.357483 2025] [:error] [pid 55840:tid 55863] [client 4.189.128.201:1078] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTW-u9XZ-ijN21c_Pr55WAAAABQ"]
[Mon Dec 08 01:51:55.584887 2025] [:error] [pid 55840:tid 55867] [client 4.189.128.201:1339] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTW-u9XZ-ijN21c_Pr55WgAAABg"]
[Mon Dec 08 01:51:55.813608 2025] [:error] [pid 55699:tid 55733] [client 4.189.128.201:1811] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTW-u3p2c7AdOPMmDENxAgAAAIM"]
[Mon Dec 08 01:51:56.040857 2025] [:error] [pid 55699:tid 55736] [client 4.189.128.201:1265] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTW-vHp2c7AdOPMmDENxBAAAAIY"]
[Mon Dec 08 01:51:56.267695 2025] [:error] [pid 55699:tid 55744] [client 4.189.128.201:1223] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aTW-vHp2c7AdOPMmDENxBQAAAI4"]
[Mon Dec 08 01:51:56.496230 2025] [:error] [pid 55699:tid 55739] [client 4.189.128.201:1853] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aTW-vHp2c7AdOPMmDENxBgAAAIk"]
[Mon Dec 08 01:51:56.723977 2025] [:error] [pid 55840:tid 55848] [client 4.189.128.201:1819] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aTW-vNXZ-ijN21c_Pr55XgAAAAU"]
[Mon Dec 08 01:51:56.951135 2025] [:error] [pid 55697:tid 55713] [client 4.189.128.201:1794] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aTW-vJCUb4ntL-D8ZJpsywAAAEo"]
[Mon Dec 08 01:51:57.178538 2025] [:error] [pid 55697:tid 55725] [client 4.189.128.201:1252] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aTW-vZCUb4ntL-D8ZJpszAAAAFY"]
[Mon Dec 08 01:51:57.405285 2025] [:error] [pid 55700:tid 55775] [client 4.189.128.201:1814] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aTW-vU8bwbrSb89n9Tcc8gAAANI"]
[Mon Dec 08 01:51:57.633488 2025] [:error] [pid 55697:tid 55724] [client 4.189.128.201:1825] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aTW-vZCUb4ntL-D8ZJpszgAAAFU"]
[Mon Dec 08 01:51:57.861142 2025] [:error] [pid 55840:tid 55850] [client 4.189.128.201:1855] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aTW-vdXZ-ijN21c_Pr55YwAAAAc"]
[Mon Dec 08 01:51:58.088566 2025] [:error] [pid 55697:tid 55722] [client 4.189.128.201:1823] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aTW-vpCUb4ntL-D8ZJps0QAAAFM"]
[Mon Dec 08 01:51:58.315670 2025] [:error] [pid 55699:tid 55737] [client 4.189.128.201:1229] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aTW-vnp2c7AdOPMmDENxCQAAAIc"]
[Mon Dec 08 01:51:58.543434 2025] [:error] [pid 55700:tid 55765] [client 4.189.128.201:1992] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aTW-vk8bwbrSb89n9Tcc9AAAAMg"]
[Mon Dec 08 01:51:58.770254 2025] [:error] [pid 55699:tid 55749] [client 4.189.128.201:1837] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aTW-vnp2c7AdOPMmDENxCgAAAJM"]
[Mon Dec 08 01:51:58.997502 2025] [:error] [pid 55697:tid 55715] [client 4.189.128.201:1812] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aTW-vpCUb4ntL-D8ZJps0gAAAEw"]
[Mon Dec 08 01:51:59.225129 2025] [:error] [pid 55699:tid 55753] [client 4.189.128.201:2005] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aTW-v3p2c7AdOPMmDENxCwAAAJY"]
[Mon Dec 08 01:51:59.452459 2025] [:error] [pid 55699:tid 55755] [client 4.189.128.201:1478] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aTW-v3p2c7AdOPMmDENxDAAAAJg"]
[Mon Dec 08 01:51:59.680082 2025] [:error] [pid 55697:tid 55727] [client 4.189.128.201:1731] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aTW-v5CUb4ntL-D8ZJps0wAAAFg"]
[Mon Dec 08 01:51:59.908253 2025] [:error] [pid 55700:tid 55771] [client 4.189.128.201:21579] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aTW-v08bwbrSb89n9Tcc9QAAAM4"]
[Mon Dec 08 01:52:00.135966 2025] [:error] [pid 55697:tid 55721] [client 4.189.128.201:12551] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aTW-wJCUb4ntL-D8ZJps1QAAAFI"]
[Mon Dec 08 01:52:00.362920 2025] [:error] [pid 55697:tid 55703] [client 4.189.128.201:21571] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aTW-wJCUb4ntL-D8ZJps1gAAAEA"]
[Mon Dec 08 01:52:00.591692 2025] [:error] [pid 55700:tid 55759] [client 4.189.128.201:21585] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aTW-wE8bwbrSb89n9Tcc-AAAAMI"]
[Mon Dec 08 01:52:00.820388 2025] [:error] [pid 55700:tid 55777] [client 4.189.128.201:1967] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/406.php"] [unique_id "aTW-wE8bwbrSb89n9Tcc-QAAANQ"]
[Mon Dec 08 01:52:01.047621 2025] [:error] [pid 55840:tid 55863] [client 4.189.128.201:21569] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/406.php"] [unique_id "aTW-wdXZ-ijN21c_Pr55bwAAABQ"]
[Mon Dec 08 01:52:01.275208 2025] [:error] [pid 55697:tid 55711] [client 4.189.128.201:12585] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/406.php"] [unique_id "aTW-wZCUb4ntL-D8ZJps1wAAAEg"]
[Mon Dec 08 01:52:01.510944 2025] [:error] [pid 55699:tid 55745] [client 4.189.128.201:12554] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/406.php"] [unique_id "aTW-wXp2c7AdOPMmDENxDQAAAI8"]
[Mon Dec 08 01:52:01.738706 2025] [:error] [pid 55699:tid 55738] [client 4.189.128.201:21608] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mariju.php"] [unique_id "aTW-wXp2c7AdOPMmDENxDgAAAIg"]
[Mon Dec 08 01:52:01.965888 2025] [:error] [pid 55697:tid 55719] [client 4.189.128.201:1961] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mariju.php"] [unique_id "aTW-wZCUb4ntL-D8ZJps2AAAAFA"]
[Mon Dec 08 01:52:02.192719 2025] [:error] [pid 55840:tid 55852] [client 4.189.128.201:12546] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mariju.php"] [unique_id "aTW-wtXZ-ijN21c_Pr55dAAAAAk"]
[Mon Dec 08 01:52:02.419277 2025] [:error] [pid 55699:tid 55730] [client 4.189.128.201:21628] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mariju.php"] [unique_id "aTW-wnp2c7AdOPMmDENxDwAAAIA"]
[Mon Dec 08 01:52:02.646186 2025] [:error] [pid 55840:tid 55854] [client 4.189.128.201:12563] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aTW-wtXZ-ijN21c_Pr55eAAAAAs"]
[Mon Dec 08 01:52:02.874253 2025] [:error] [pid 55697:tid 55713] [client 4.189.128.201:21629] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aTW-wpCUb4ntL-D8ZJps2gAAAEo"]
[Mon Dec 08 01:52:03.100979 2025] [:error] [pid 55697:tid 55725] [client 4.189.128.201:21598] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aTW-w5CUb4ntL-D8ZJps2wAAAFY"]
[Mon Dec 08 01:52:03.327920 2025] [:error] [pid 55699:tid 55754] [client 4.189.128.201:21622] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aTW-w3p2c7AdOPMmDENxEgAAAJc"]
[Mon Dec 08 01:52:03.554510 2025] [:error] [pid 55699:tid 55746] [client 4.189.128.201:12588] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aTW-w3p2c7AdOPMmDENxEwAAAJA"]
[Mon Dec 08 01:52:03.781756 2025] [:error] [pid 55699:tid 55748] [client 4.189.128.201:12576] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aTW-w3p2c7AdOPMmDENxFAAAAJI"]
[Mon Dec 08 01:52:04.008528 2025] [:error] [pid 55697:tid 55722] [client 4.189.128.201:21625] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aTW-xJCUb4ntL-D8ZJps3gAAAFM"]
[Mon Dec 08 01:52:04.235803 2025] [:error] [pid 55697:tid 55718] [client 4.189.128.201:20122] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aTW-xJCUb4ntL-D8ZJps4AAAAE8"]
[Mon Dec 08 01:52:04.462445 2025] [:error] [pid 55699:tid 55750] [client 4.189.128.201:20153] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aTW-xHp2c7AdOPMmDENxFQAAAJQ"]
[Mon Dec 08 01:52:04.688815 2025] [:error] [pid 55699:tid 55743] [client 4.189.128.201:20099] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aTW-xHp2c7AdOPMmDENxFgAAAI0"]
[Mon Dec 08 01:52:04.919346 2025] [:error] [pid 55697:tid 55721] [client 4.189.128.201:21607] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aTW-xJCUb4ntL-D8ZJps4wAAAFI"]
[Mon Dec 08 01:52:05.147989 2025] [:error] [pid 55697:tid 55726] [client 4.189.128.201:12584] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aTW-xZCUb4ntL-D8ZJps5AAAAFc"]
[Mon Dec 08 01:52:05.376087 2025] [:error] [pid 55699:tid 55733] [client 4.189.128.201:12593] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aTW-xXp2c7AdOPMmDENxGAAAAIM"]
[Mon Dec 08 01:52:05.603260 2025] [:error] [pid 55700:tid 55770] [client 4.189.128.201:21618] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aTW-xU8bwbrSb89n9Tcc_QAAAM0"]
[Mon Dec 08 01:52:05.831030 2025] [:error] [pid 55840:tid 55851] [client 4.189.128.201:12547] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aTW-xdXZ-ijN21c_Pr55hgAAAAg"]
[Mon Dec 08 01:52:06.058954 2025] [:error] [pid 55700:tid 55774] [client 4.189.128.201:21594] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aTW-xk8bwbrSb89n9Tcc_wAAANE"]
[Mon Dec 08 01:52:06.287194 2025] [:error] [pid 55697:tid 55708] [client 4.189.128.201:12556] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTW-xpCUb4ntL-D8ZJps5wAAAEU"]
[Mon Dec 08 01:52:06.515103 2025] [:error] [pid 55840:tid 55859] [client 4.189.128.201:1927] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTW-xtXZ-ijN21c_Pr55iQAAABA"]
[Mon Dec 08 01:52:06.742982 2025] [:error] [pid 55697:tid 55719] [client 4.189.128.201:21568] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTW-xpCUb4ntL-D8ZJps6QAAAFA"]
[Mon Dec 08 01:52:06.972558 2025] [:error] [pid 55697:tid 55723] [client 4.189.128.201:21574] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTW-xpCUb4ntL-D8ZJps6wAAAFQ"]
[Mon Dec 08 01:52:07.199303 2025] [:error] [pid 55840:tid 55848] [client 4.189.128.201:1964] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "aTW-x9XZ-ijN21c_Pr55iwAAAAU"]
[Mon Dec 08 01:52:07.426249 2025] [:error] [pid 55699:tid 55732] [client 4.189.128.201:1973] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "aTW-x3p2c7AdOPMmDENxGQAAAII"]
[Mon Dec 08 01:52:07.653501 2025] [:error] [pid 55840:tid 55865] [client 4.189.128.201:21620] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "aTW-x9XZ-ijN21c_Pr55jQAAABY"]
[Mon Dec 08 01:52:07.880623 2025] [:error] [pid 55700:tid 55767] [client 4.189.128.201:12580] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "aTW-x08bwbrSb89n9TcdAQAAAMo"]
[Mon Dec 08 01:52:08.107360 2025] [:error] [pid 55697:tid 55724] [client 4.189.128.201:1970] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "aTW-yJCUb4ntL-D8ZJps7wAAAFU"]
[Mon Dec 08 01:52:08.335041 2025] [:error] [pid 55700:tid 55765] [client 4.189.128.201:1946] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "aTW-yE8bwbrSb89n9TcdAgAAAMg"]
[Mon Dec 08 01:52:08.562141 2025] [:error] [pid 55840:tid 55845] [client 4.189.128.201:20140] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "aTW-yNXZ-ijN21c_Pr55jwAAAAI"]
[Mon Dec 08 01:52:08.789193 2025] [:error] [pid 55840:tid 55864] [client 4.189.128.201:12574] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "aTW-yNXZ-ijN21c_Pr55kQAAABU"]
[Mon Dec 08 01:52:09.016597 2025] [:error] [pid 55840:tid 55849] [client 4.189.128.201:1956] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aTW-ydXZ-ijN21c_Pr55kwAAAAY"]
[Mon Dec 08 01:52:09.244323 2025] [:error] [pid 55840:tid 55861] [client 4.189.128.201:1577] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aTW-ydXZ-ijN21c_Pr55lQAAABI"]
[Mon Dec 08 01:52:09.472715 2025] [:error] [pid 55840:tid 55863] [client 4.189.128.201:1772] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aTW-ydXZ-ijN21c_Pr55lwAAABQ"]
[Mon Dec 08 01:52:09.699613 2025] [:error] [pid 55699:tid 55731] [client 4.189.128.201:21600] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aTW-yXp2c7AdOPMmDENxHAAAAIE"]
[Mon Dec 08 01:52:09.926445 2025] [:error] [pid 55700:tid 55772] [client 4.189.128.201:1548] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aTW-yU8bwbrSb89n9TcdBwAAAM8"]
[Mon Dec 08 01:52:10.154167 2025] [:error] [pid 55700:tid 55779] [client 4.189.128.201:1953] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aTW-yk8bwbrSb89n9TcdCAAAANY"]
[Mon Dec 08 01:52:10.382378 2025] [:error] [pid 55700:tid 55757] [client 4.189.128.201:12557] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aTW-yk8bwbrSb89n9TcdCgAAAME"]
[Mon Dec 08 01:52:10.609850 2025] [:error] [pid 55699:tid 55737] [client 4.189.128.201:1971] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aTW-ynp2c7AdOPMmDENxHQAAAIc"]
[Mon Dec 08 01:52:10.838244 2025] [:error] [pid 55699:tid 55753] [client 4.189.128.201:21610] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTW-ynp2c7AdOPMmDENxHwAAAJY"]
[Mon Dec 08 01:52:11.066227 2025] [:error] [pid 55700:tid 55768] [client 4.189.128.201:12569] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTW-y08bwbrSb89n9TcdCwAAAMs"]
[Mon Dec 08 01:52:11.294028 2025] [:error] [pid 55700:tid 55762] [client 4.189.128.201:21611] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTW-y08bwbrSb89n9TcdDAAAAMU"]
[Mon Dec 08 01:52:11.521594 2025] [:error] [pid 55700:tid 55756] [client 4.189.128.201:1947] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTW-y08bwbrSb89n9TcdDQAAAMA"]
[Mon Dec 08 01:52:11.748711 2025] [:error] [pid 55840:tid 55848] [client 4.189.128.201:21614] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpc.php"] [unique_id "aTW-y9XZ-ijN21c_Pr55ngAAAAU"]
[Mon Dec 08 01:52:11.976670 2025] [:error] [pid 55840:tid 55856] [client 4.189.128.201:21626] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpc.php"] [unique_id "aTW-y9XZ-ijN21c_Pr55oAAAAA0"]
[Mon Dec 08 01:52:12.203152 2025] [:error] [pid 55700:tid 55778] [client 4.189.128.201:1928] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpc.php"] [unique_id "aTW-zE8bwbrSb89n9TcdDgAAANU"]
[Mon Dec 08 01:52:12.430568 2025] [:error] [pid 55699:tid 55734] [client 4.189.128.201:12603] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpc.php"] [unique_id "aTW-zHp2c7AdOPMmDENxJAAAAIQ"]
[Mon Dec 08 01:52:12.658533 2025] [:error] [pid 55840:tid 55850] [client 4.189.128.201:20107] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aTW-zNXZ-ijN21c_Pr55owAAAAc"]
[Mon Dec 08 01:52:12.885663 2025] [:error] [pid 55700:tid 55770] [client 4.189.128.201:12567] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aTW-zE8bwbrSb89n9TcdDwAAAM0"]
[Mon Dec 08 01:52:13.113262 2025] [:error] [pid 55840:tid 55862] [client 4.189.128.201:1939] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aTW-zdXZ-ijN21c_Pr55pgAAABM"]
[Mon Dec 08 01:52:13.340743 2025] [:error] [pid 55700:tid 55773] [client 4.189.128.201:1556] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aTW-zU8bwbrSb89n9TcdEAAAANA"]
[Mon Dec 08 01:52:13.570240 2025] [:error] [pid 55840:tid 55849] [client 4.189.128.201:1944] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mlex.php"] [unique_id "aTW-zdXZ-ijN21c_Pr55qAAAAAY"]
[Mon Dec 08 01:52:13.798187 2025] [:error] [pid 55699:tid 55750] [client 4.189.128.201:12561] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mlex.php"] [unique_id "aTW-zXp2c7AdOPMmDENxKgAAAJQ"]
[Mon Dec 08 01:52:14.025262 2025] [:error] [pid 55699:tid 55733] [client 4.189.128.201:12589] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mlex.php"] [unique_id "aTW-znp2c7AdOPMmDENxLAAAAIM"]
[Mon Dec 08 01:52:14.252274 2025] [:error] [pid 55700:tid 55767] [client 4.189.128.201:1730] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mlex.php"] [unique_id "aTW-zk8bwbrSb89n9TcdEgAAAMo"]
[Mon Dec 08 01:52:14.479371 2025] [:error] [pid 55840:tid 55855] [client 4.189.128.201:12579] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "aTW-ztXZ-ijN21c_Pr55rAAAAAw"]
[Mon Dec 08 01:52:14.706699 2025] [:error] [pid 55699:tid 55736] [client 4.189.128.201:12600] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "aTW-znp2c7AdOPMmDENxLwAAAIY"]
[Mon Dec 08 01:52:14.934331 2025] [:error] [pid 55840:tid 55858] [client 4.189.128.201:1780] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "aTW-ztXZ-ijN21c_Pr55rQAAAA8"]
[Mon Dec 08 01:52:15.160866 2025] [:error] [pid 55700:tid 55771] [client 4.189.128.201:12598] [client 4.189.128.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "aTW-z08bwbrSb89n9TcdFAAAAM4"]
[Mon Dec 08 05:33:17.499047 2025] [:error] [pid 18636:tid 18697] [client 182.44.10.67:46874] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTXynegdXnohVr6jm71CIwAAAIU"]
[Mon Dec 08 05:42:41.502708 2025] [:error] [pid 18635:tid 18686] [client 92.118.39.32:42582] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "aTX00W4kCC_HamQRuE1xRgAAAFU"]
[Mon Dec 08 05:42:41.515264 2025] [:error] [pid 54705:tid 54738] [client 92.118.39.32:42604] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aTX00adUeDkxwo12SG8fpQAAAYQ"]
[Mon Dec 08 05:42:41.515819 2025] [:error] [pid 18636:tid 18707] [client 92.118.39.32:42682] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "aTX00egdXnohVr6jm71EQgAAAI8"]
[Mon Dec 08 05:42:41.516679 2025] [:error] [pid 54704:tid 54712] [client 92.118.39.32:42614] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aTX00XL1WYsMMmlqjh4PpAAAAUU"]
[Mon Dec 08 05:42:41.520931 2025] [:error] [pid 18634:tid 18646] [client 92.118.39.32:42624] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aTX00Z-H1wCBKPf4vhN6IwAAAAg"]
[Mon Dec 08 05:42:41.522106 2025] [:error] [pid 18636:tid 18699] [client 92.118.39.32:42648] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aTX00egdXnohVr6jm71EQwAAAIc"]
[Mon Dec 08 05:42:41.524067 2025] [:error] [pid 54671:tid 54687] [client 92.118.39.32:42680] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env"] [unique_id "aTX00VqOuiNLLCfVy7-IQQAAAQ0"]
[Mon Dec 08 05:42:41.525420 2025] [:error] [pid 54704:tid 54708] [client 92.118.39.32:42576] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTX00XL1WYsMMmlqjh4PpQAAAUE"]
[Mon Dec 08 05:42:41.549604 2025] [:error] [pid 18636:tid 18693] [client 92.118.39.32:42636] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aTX00egdXnohVr6jm71ERQAAAIE"]
[Mon Dec 08 05:42:41.553516 2025] [:error] [pid 18634:tid 18640] [client 92.118.39.32:42588] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aTX00Z-H1wCBKPf4vhN6JAAAAAI"]
[Mon Dec 08 05:42:41.560714 2025] [:error] [pid 18636:tid 18703] [client 92.118.39.32:42674] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aTX00egdXnohVr6jm71ERgAAAIs"]
[Mon Dec 08 05:42:41.562247 2025] [:error] [pid 54671:tid 54674] [client 92.118.39.32:42664] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.prod"] [unique_id "aTX00VqOuiNLLCfVy7-IQgAAAQA"]
[Mon Dec 08 05:42:41.565279 2025] [:error] [pid 18636:tid 18716] [client 92.118.39.32:42616] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aTX00egdXnohVr6jm71ERwAAAJg"]
[Mon Dec 08 05:42:41.709492 2025] [:error] [pid 18636:tid 18710] [client 92.118.39.32:39606] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aTX00egdXnohVr6jm71ESAAAAJI"]
[Mon Dec 08 05:42:41.710179 2025] [:error] [pid 54705:tid 54740] [client 92.118.39.32:39522] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aTX00adUeDkxwo12SG8fpgAAAYY"]
[Mon Dec 08 05:42:41.728708 2025] [:error] [pid 54671:tid 54675] [client 92.118.39.32:39564] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aTX00VqOuiNLLCfVy7-IRAAAAQE"]
[Mon Dec 08 05:42:41.753084 2025] [:error] [pid 18635:tid 18676] [client 92.118.39.32:39618] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env"] [unique_id "aTX00W4kCC_HamQRuE1xSgAAAEs"]
[Mon Dec 08 05:42:41.800888 2025] [:error] [pid 54704:tid 54716] [client 92.118.39.32:39700] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTX00XL1WYsMMmlqjh4PqQAAAUk"]
[Mon Dec 08 05:42:41.801364 2025] [:error] [pid 54704:tid 54727] [client 92.118.39.32:39692] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTX00XL1WYsMMmlqjh4PqgAAAVQ"]
[Mon Dec 08 05:42:41.802227 2025] [:error] [pid 54705:tid 54735] [client 92.118.39.32:39590] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.prod"] [unique_id "aTX00adUeDkxwo12SG8fqAAAAYE"]
[Mon Dec 08 05:42:41.820562 2025] [:error] [pid 18634:tid 18661] [client 92.118.39.32:39504] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aTX00Z-H1wCBKPf4vhN6JQAAABc"]
[Mon Dec 08 05:42:41.821690 2025] [:error] [pid 54704:tid 54731] [client 92.118.39.32:39510] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aTX00XL1WYsMMmlqjh4PqwAAAVg"]
[Mon Dec 08 05:42:41.830339 2025] [:error] [pid 18635:tid 18689] [client 92.118.39.32:39554] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "aTX00W4kCC_HamQRuE1xTAAAAFg"]
[Mon Dec 08 05:42:41.834158 2025] [:error] [pid 54671:tid 54681] [client 92.118.39.32:39576] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aTX00VqOuiNLLCfVy7-IRwAAAQc"]
[Mon Dec 08 05:42:41.842012 2025] [:error] [pid 54704:tid 54730] [client 92.118.39.32:39584] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aTX00XL1WYsMMmlqjh4PrAAAAVc"]
[Mon Dec 08 05:42:41.843919 2025] [:error] [pid 54705:tid 54737] [client 92.118.39.32:39528] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTX00adUeDkxwo12SG8fqQAAAYM"]
[Mon Dec 08 05:42:41.855567 2025] [:error] [pid 18635:tid 18685] [client 92.118.39.32:39542] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aTX00W4kCC_HamQRuE1xTQAAAFQ"]
[Mon Dec 08 05:42:41.856046 2025] [:error] [pid 54705:tid 54752] [client 92.118.39.32:39632] [client 92.118.39.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "aTX00adUeDkxwo12SG8fqgAAAZI"]
[Mon Dec 08 05:42:41.884741 2025] [:error] [pid 54705:tid 54739] [client 92.118.39.32:39666] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTX00adUeDkxwo12SG8fqwAAAYU"]
[Mon Dec 08 05:42:43.092446 2025] [:error] [pid 18636:tid 18705] [client 92.118.39.32:39726] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTX00-gdXnohVr6jm71ESgAAAI0"]
[Mon Dec 08 05:42:43.166311 2025] [:error] [pid 54704:tid 54710] [client 92.118.39.32:39714] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTX003L1WYsMMmlqjh4PrQAAAUM"]
[Mon Dec 08 05:42:43.219451 2025] [:error] [pid 54704:tid 54724] [client 92.118.39.32:39732] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTX003L1WYsMMmlqjh4PrgAAAVE"]
[Mon Dec 08 05:42:44.452152 2025] [:error] [pid 54671:tid 54683] [client 92.118.39.32:39736] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTX01FqOuiNLLCfVy7-ISwAAAQk"]
[Mon Dec 08 05:42:44.543887 2025] [:error] [pid 54671:tid 54675] [client 92.118.39.32:39742] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTX01FqOuiNLLCfVy7-ITAAAAQE"]
[Mon Dec 08 05:42:44.591013 2025] [:error] [pid 18726:tid 18749] [client 92.118.39.32:39752] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTX01FwVbxmJGL5LHAc1QAAAANU"]
[Mon Dec 08 05:42:45.754722 2025] [:error] [pid 18636:tid 18692] [client 92.118.39.32:38544] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTX01egdXnohVr6jm71ETAAAAIA"]
[Mon Dec 08 05:42:45.916669 2025] [:error] [pid 18726:tid 18731] [client 92.118.39.32:38556] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTX01VwVbxmJGL5LHAc1QgAAAMM"]
[Mon Dec 08 05:42:45.987653 2025] [:error] [pid 54705:tid 54734] [client 92.118.39.32:38564] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTX01adUeDkxwo12SG8frgAAAYA"]
[Mon Dec 08 05:42:47.067015 2025] [:error] [pid 54705:tid 54743] [client 92.118.39.32:38570] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTX016dUeDkxwo12SG8fswAAAYk"]
[Mon Dec 08 05:42:47.195067 2025] [:error] [pid 54671:tid 54689] [client 92.118.39.32:38574] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTX011qOuiNLLCfVy7-IUQAAAQ8"]
[Mon Dec 08 05:42:47.373375 2025] [:error] [pid 54704:tid 54729] [client 92.118.39.32:38588] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTX013L1WYsMMmlqjh4PsQAAAVY"]
[Mon Dec 08 05:42:48.448091 2025] [:error] [pid 18635:tid 18685] [client 92.118.39.32:38598] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTX02G4kCC_HamQRuE1xVQAAAFQ"]
[Mon Dec 08 05:42:48.670457 2025] [:error] [pid 54705:tid 54749] [client 92.118.39.32:38600] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTX02KdUeDkxwo12SG8ftQAAAY8"]
[Mon Dec 08 05:42:48.821868 2025] [:error] [pid 18636:tid 18698] [client 92.118.39.32:38610] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTX02OgdXnohVr6jm71ETwAAAIY"]
[Mon Dec 08 05:42:49.734006 2025] [:error] [pid 54704:tid 54725] [client 92.118.39.32:38616] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTX02XL1WYsMMmlqjh4PtQAAAVI"]
[Mon Dec 08 05:42:49.978546 2025] [:error] [pid 18636:tid 18707] [client 92.118.39.32:38630] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTX02egdXnohVr6jm71EUQAAAI8"]
[Mon Dec 08 05:42:50.189581 2025] [:error] [pid 54704:tid 54710] [client 92.118.39.32:38642] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTX02nL1WYsMMmlqjh4PtwAAAUM"]
[Mon Dec 08 05:42:51.014165 2025] [:error] [pid 54705:tid 54735] [client 92.118.39.32:38650] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTX026dUeDkxwo12SG8fuQAAAYE"]
[Mon Dec 08 05:42:51.353991 2025] [:error] [pid 54671:tid 54683] [client 92.118.39.32:38660] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTX021qOuiNLLCfVy7-IUgAAAQk"]
[Mon Dec 08 05:42:51.468435 2025] [:error] [pid 18636:tid 18706] [client 92.118.39.32:38676] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTX02-gdXnohVr6jm71EVAAAAI4"]
[Mon Dec 08 05:42:52.406823 2025] [:error] [pid 18636:tid 18697] [client 92.118.39.32:38690] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "aTX03OgdXnohVr6jm71EVQAAAIU"]
[Mon Dec 08 05:42:52.655660 2025] [:error] [pid 18726:tid 18746] [client 92.118.39.32:38700] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aTX03FwVbxmJGL5LHAc1SAAAANI"]
[Mon Dec 08 05:42:52.739300 2025] [:error] [pid 18636:tid 18714] [client 92.118.39.32:38710] [client 92.118.39.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.yml"] [unique_id "aTX03OgdXnohVr6jm71EVgAAAJY"]
[Mon Dec 08 07:32:55.172868 2025] [:error] [pid 63058:tid 63119] [client 78.84.169.238:19798] [client 78.84.169.238] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTYOp2eGShynhncwx-az6QAAAII"]
[Mon Dec 08 07:47:55.079500 2025] [:error] [pid 39161:tid 39234] [client 16.171.152.18:33680] [client 16.171.152.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTYSK-QBy-JdpUuZzWek3wAAAI4"]
[Mon Dec 08 11:18:57.131305 2025] [:error] [pid 43324:tid 43340] [client 182.40.104.255:48426] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTZDoWPgmTVXZPILisbZLAAAAU4"]
[Mon Dec 08 11:38:08.694932 2025] [:error] [pid 43324:tid 43327] [client 45.86.202.191:33587] [client 45.86.202.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTZIIGPgmTVXZPILisbeGQAAAUE"]
[Mon Dec 08 11:38:19.292038 2025] [:error] [pid 43361:tid 43382] [client 45.86.202.170:30489] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aTZIK8rZJ_dsPpuIXPnOIQAAAZI"]
[Mon Dec 08 11:38:19.887329 2025] [:error] [pid 39161:tid 39223] [client 45.86.202.202:48931] [client 45.86.202.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aTZIK-QBy-JdpUuZzWf2hgAAAIM"]
[Mon Dec 08 11:38:20.488698 2025] [:error] [pid 39160:tid 39213] [client 45.86.202.192:40053] [client 45.86.202.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aTZILCm5Ndns0p3OT9CHZQAAAFQ"]
[Mon Dec 08 11:46:38.260422 2025] [:error] [pid 39160:tid 39215] [client 45.88.186.148:52265] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTZKHim5Ndns0p3OT9CKIwAAAFY"]
[Mon Dec 08 11:46:38.664294 2025] [:error] [pid 53927:tid 53938] [client 45.88.186.148:52386] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTZKHrTtIvPZ1Cm2r06bHgAAAQk"]
[Mon Dec 08 11:46:39.078191 2025] [:error] [pid 43362:tid 43405] [client 45.88.186.148:52492] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTZKHzoamfxHn2vcwqy4JgAAAc4"]
[Mon Dec 08 11:46:39.497861 2025] [:error] [pid 39161:tid 39243] [client 45.88.186.148:52608] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTZKH-QBy-JdpUuZzWf4DAAAAJc"]
[Mon Dec 08 11:46:39.914837 2025] [:error] [pid 39160:tid 39206] [client 45.88.186.148:52772] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTZKHym5Ndns0p3OT9CKawAAAE4"]
[Mon Dec 08 14:01:26.582688 2025] [:error] [pid 13445:tid 13454] [client 194.61.40.164:31001] [client 194.61.40.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "aTZptsek7sIjbF2WoVbfzgAAAEQ"]
[Mon Dec 08 14:01:26.951284 2025] [:error] [pid 30632:tid 30642] [client 194.61.40.139:63753] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "aTZpthW3Slp5Vnr6sRduwAAAAYY"]
[Mon Dec 08 14:01:27.330127 2025] [:error] [pid 30632:tid 30638] [client 194.61.40.112:20173] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/schema/yanz.php"] [unique_id "aTZptxW3Slp5Vnr6sRduwQAAAYI"]
[Mon Dec 08 14:01:27.696625 2025] [:error] [pid 13447:tid 13515] [client 194.61.40.137:29361] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/js-inc.php"] [unique_id "aTZpt3sXz7UXj3rHK1uwiAAAAMk"]
[Mon Dec 08 14:01:28.063075 2025] [:error] [pid 13445:tid 13450] [client 194.61.40.118:24015] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/init-help/init.php"] [unique_id "aTZpuMek7sIjbF2WoVbf0QAAAEA"]
[Mon Dec 08 14:01:28.431839 2025] [:error] [pid 30632:tid 30644] [client 194.61.40.151:51483] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wpcall-button/button-image.php"] [unique_id "aTZpuBW3Slp5Vnr6sRduxQAAAYg"]
[Mon Dec 08 14:01:28.800659 2025] [:error] [pid 30632:tid 30646] [client 194.61.40.116:48709] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/schema/geckos.php"] [unique_id "aTZpuBW3Slp5Vnr6sRduxgAAAYo"]
[Mon Dec 08 14:01:29.209302 2025] [:error] [pid 30632:tid 30636] [client 194.61.40.162:64825] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/SecurityFin/SecurityFin.php"] [unique_id "aTZpuRW3Slp5Vnr6sRduyQAAAYA"]
[Mon Dec 08 14:01:29.577312 2025] [:error] [pid 13446:tid 13491] [client 194.61.40.165:48333] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aTZpuVPLjuV-KbK89q0CGwAAAIw"]
[Mon Dec 08 14:01:29.941091 2025] [:error] [pid 30632:tid 30651] [client 194.61.40.164:28535] [client 194.61.40.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aTZpuRW3Slp5Vnr6sRduzQAAAY8"]
[Mon Dec 08 14:01:30.305887 2025] [:error] [pid 30632:tid 30654] [client 194.61.40.113:30849] [client 194.61.40.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aTZpuhW3Slp5Vnr6sRduzgAAAZI"]
[Mon Dec 08 14:01:30.670737 2025] [:error] [pid 13446:tid 13482] [client 194.61.40.118:54097] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/dzs-zoomsounds/1877.php"] [unique_id "aTZpulPLjuV-KbK89q0CHAAAAIM"]
[Mon Dec 08 14:01:31.043815 2025] [:error] [pid 13445:tid 13458] [client 194.61.40.157:55285] [client 194.61.40.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aTZpu8ek7sIjbF2WoVbf0wAAAEg"]
[Mon Dec 08 14:01:31.414118 2025] [:error] [pid 30580:tid 30595] [client 194.61.40.137:22607] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aTZpu8EhRKiLBTnel9PobwAAAQ0"]
[Mon Dec 08 14:01:31.775049 2025] [:error] [pid 13533:tid 13544] [client 194.61.40.112:53189] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aTZpu0wxYk7zHgjCNdZtewAAAUk"]
[Mon Dec 08 14:01:32.138058 2025] [:error] [pid 30632:tid 30652] [client 194.61.40.136:22871] [client 194.61.40.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aTZpvBW3Slp5Vnr6sRdu0gAAAZA"]
[Mon Dec 08 14:01:32.500700 2025] [:error] [pid 13533:tid 13538] [client 194.61.40.126:57089] [client 194.61.40.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aTZpvEwxYk7zHgjCNdZtfAAAAUM"]
[Mon Dec 08 14:01:32.861912 2025] [:error] [pid 16888:tid 16905] [client 194.61.40.140:60903] [client 194.61.40.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aTZpvBSZHPLCPHyOpBVbqwAAAA4"]
[Mon Dec 08 14:01:33.226275 2025] [:error] [pid 16888:tid 16897] [client 194.61.40.120:57471] [client 194.61.40.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/yanierin/akcc.php"] [unique_id "aTZpvRSZHPLCPHyOpBVbrAAAAAY"]
[Mon Dec 08 14:01:33.624460 2025] [:error] [pid 30580:tid 30592] [client 194.61.40.129:50569] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "aTZpvcEhRKiLBTnel9PocQAAAQo"]
[Mon Dec 08 14:01:34.052173 2025] [:error] [pid 30632:tid 30636] [client 194.61.40.162:60923] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-mobile-detector/cache/settings_auto.php"] [unique_id "aTZpvhW3Slp5Vnr6sRdu1AAAAYA"]
[Mon Dec 08 14:01:34.424364 2025] [:error] [pid 13446:tid 13479] [client 194.61.40.118:41111] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "aTZpvlPLjuV-KbK89q0CHQAAAIA"]
[Mon Dec 08 14:01:34.789336 2025] [:error] [pid 13445:tid 13462] [client 194.61.40.146:44051] [client 194.61.40.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTZpvsek7sIjbF2WoVbf2AAAAEw"]
[Mon Dec 08 14:01:35.151134 2025] [:error] [pid 13446:tid 13498] [client 194.61.40.135:64347] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aTZpv1PLjuV-KbK89q0CHwAAAJM"]
[Mon Dec 08 14:01:35.520014 2025] [:error] [pid 16888:tid 16900] [client 194.61.40.137:59325] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTZpvxSZHPLCPHyOpBVbrwAAAAk"]
[Mon Dec 08 14:01:35.892745 2025] [:error] [pid 16888:tid 16910] [client 194.61.40.151:54267] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTZpvxSZHPLCPHyOpBVbsAAAABM"]
[Mon Dec 08 14:01:36.284398 2025] [:error] [pid 16888:tid 16912] [client 194.61.40.146:27775] [client 194.61.40.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aTZpwBSZHPLCPHyOpBVbsQAAABU"]
[Mon Dec 08 14:01:36.648084 2025] [:error] [pid 13447:tid 13523] [client 194.61.40.165:53393] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTZpwHsXz7UXj3rHK1uwjAAAANE"]
[Mon Dec 08 14:01:37.012025 2025] [:error] [pid 13447:tid 13529] [client 194.61.40.135:32327] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTZpwXsXz7UXj3rHK1uwjQAAANc"]
[Mon Dec 08 14:01:37.606354 2025] [:error] [pid 13446:tid 13500] [client 194.61.40.150:57817] [client 194.61.40.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "aTZpwVPLjuV-KbK89q0CIwAAAJU"]
[Mon Dec 08 14:01:37.975547 2025] [:error] [pid 16888:tid 16899] [client 194.61.40.157:38417] [client 194.61.40.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aTZpwRSZHPLCPHyOpBVbtAAAAAg"]
[Mon Dec 08 14:01:38.337992 2025] [:error] [pid 16888:tid 16896] [client 194.61.40.161:34427] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/calmly/issue.php"] [unique_id "aTZpwhSZHPLCPHyOpBVbtQAAAAU"]
[Mon Dec 08 14:01:38.700392 2025] [:error] [pid 30632:tid 30642] [client 194.61.40.158:34183] [client 194.61.40.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "aTZpwhW3Slp5Vnr6sRdu2QAAAYY"]
[Mon Dec 08 14:01:39.074041 2025] [:error] [pid 30632:tid 30636] [client 194.61.40.148:37911] [client 194.61.40.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aTZpwxW3Slp5Vnr6sRdu2wAAAYA"]
[Mon Dec 08 14:01:39.436204 2025] [:error] [pid 30580:tid 30582] [client 194.61.40.137:26519] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/fonts/fonts.php"] [unique_id "aTZpw8EhRKiLBTnel9PodgAAAQA"]
[Mon Dec 08 14:01:39.797946 2025] [:error] [pid 13446:tid 13499] [client 194.61.40.154:35359] [client 194.61.40.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aTZpw1PLjuV-KbK89q0CJQAAAJQ"]
[Mon Dec 08 14:01:40.161619 2025] [:error] [pid 16888:tid 16907] [client 194.61.40.157:51909] [client 194.61.40.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "aTZpxBSZHPLCPHyOpBVbtwAAABA"]
[Mon Dec 08 14:01:40.523161 2025] [:error] [pid 30632:tid 30640] [client 194.61.40.116:33003] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aTZpxBW3Slp5Vnr6sRdu3wAAAYQ"]
[Mon Dec 08 14:01:40.885752 2025] [:error] [pid 30632:tid 30656] [client 194.61.40.166:37583] [client 194.61.40.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "aTZpxBW3Slp5Vnr6sRdu4AAAAZQ"]
[Mon Dec 08 14:01:41.251263 2025] [:error] [pid 30632:tid 30653] [client 194.61.40.150:44949] [client 194.61.40.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aTZpxRW3Slp5Vnr6sRdu4QAAAZE"]
[Mon Dec 08 14:01:41.615091 2025] [:error] [pid 13446:tid 13495] [client 194.61.40.165:46295] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTZpxVPLjuV-KbK89q0CJgAAAJA"]
[Mon Dec 08 14:01:41.977950 2025] [:error] [pid 30632:tid 30644] [client 194.61.40.131:54733] [client 194.61.40.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/Divi/404.php"] [unique_id "aTZpxRW3Slp5Vnr6sRdu6QAAAYg"]
[Mon Dec 08 14:01:42.339712 2025] [:error] [pid 30632:tid 30651] [client 194.61.40.156:54149] [client 194.61.40.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aTZpxhW3Slp5Vnr6sRdu6gAAAY8"]
[Mon Dec 08 14:01:42.702474 2025] [:error] [pid 30632:tid 30640] [client 194.61.40.109:20867] [client 194.61.40.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTZpxhW3Slp5Vnr6sRdu7AAAAYQ"]
[Mon Dec 08 14:01:43.067120 2025] [:error] [pid 30632:tid 30656] [client 194.61.40.138:41497] [client 194.61.40.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTZpxxW3Slp5Vnr6sRdu7gAAAZQ"]
[Mon Dec 08 14:01:43.444166 2025] [:error] [pid 30632:tid 30637] [client 194.61.40.125:40805] [client 194.61.40.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aTZpxxW3Slp5Vnr6sRdu9QAAAYE"]
[Mon Dec 08 14:01:43.806866 2025] [:error] [pid 30632:tid 30657] [client 194.61.40.124:42935] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aTZpxxW3Slp5Vnr6sRdvAQAAAZU"]
[Mon Dec 08 14:01:44.170239 2025] [:error] [pid 30632:tid 30655] [client 194.61.40.131:43813] [client 194.61.40.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTZpyBW3Slp5Vnr6sRdvDgAAAZM"]
[Mon Dec 08 14:01:44.538093 2025] [:error] [pid 13446:tid 13483] [client 194.61.40.129:20759] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTZpyFPLjuV-KbK89q0CbQAAAIQ"]
[Mon Dec 08 14:01:44.901323 2025] [:error] [pid 30580:tid 30596] [client 194.61.40.123:61495] [client 194.61.40.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTZpyMEhRKiLBTnel9PoeQAAAQ4"]
[Mon Dec 08 14:01:45.260442 2025] [:error] [pid 13533:tid 13550] [client 194.61.40.113:28749] [client 194.61.40.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTZpyUwxYk7zHgjCNdZthgAAAU8"]
[Mon Dec 08 14:01:45.623976 2025] [:error] [pid 13533:tid 13544] [client 194.61.40.134:29691] [client 194.61.40.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTZpyUwxYk7zHgjCNdZthwAAAUk"]
[Mon Dec 08 14:01:45.988694 2025] [:error] [pid 13446:tid 13488] [client 194.61.40.155:41003] [client 194.61.40.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTZpyVPLjuV-KbK89q0CdQAAAIk"]
[Mon Dec 08 14:01:46.355050 2025] [:error] [pid 30632:tid 30660] [client 194.61.40.120:61145] [client 194.61.40.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTZpyhW3Slp5Vnr6sRdvHQAAAZg"]
[Mon Dec 08 14:01:46.729371 2025] [:error] [pid 30632:tid 30655] [client 194.61.40.111:33549] [client 194.61.40.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aTZpyhW3Slp5Vnr6sRdvHwAAAZM"]
[Mon Dec 08 14:01:47.089485 2025] [:error] [pid 13445:tid 13451] [client 194.61.40.141:48959] [client 194.61.40.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTZpy8ek7sIjbF2WoVbf3QAAAEE"]
[Mon Dec 08 14:01:47.450145 2025] [:error] [pid 13445:tid 13466] [client 194.61.40.138:38639] [client 194.61.40.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTZpy8ek7sIjbF2WoVbf3wAAAFA"]
[Mon Dec 08 14:01:47.815051 2025] [:error] [pid 13447:tid 13512] [client 194.61.40.126:53031] [client 194.61.40.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTZpy3sXz7UXj3rHK1uwjwAAAMY"]
[Mon Dec 08 14:01:48.181390 2025] [:error] [pid 13446:tid 13485] [client 194.61.40.164:60077] [client 194.61.40.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/.well-known/plugins.php"] [unique_id "aTZpzFPLjuV-KbK89q0CfAAAAIY"]
[Mon Dec 08 14:01:48.712857 2025] [:error] [pid 16888:tid 16905] [client 194.61.40.135:37517] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aTZpzBSZHPLCPHyOpBVbvgAAAA4"]
[Mon Dec 08 14:01:49.101840 2025] [:error] [pid 13447:tid 13519] [client 194.61.40.157:30503] [client 194.61.40.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTZpzXsXz7UXj3rHK1uwkQAAAM0"]
[Mon Dec 08 14:01:49.493419 2025] [:error] [pid 30632:tid 30648] [client 194.61.40.122:56203] [client 194.61.40.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/.well-known/about.php"] [unique_id "aTZpzRW3Slp5Vnr6sRdvIgAAAYw"]
[Mon Dec 08 14:01:49.993457 2025] [:error] [pid 13446:tid 13479] [client 194.61.40.157:61993] [client 194.61.40.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "aTZpzVPLjuV-KbK89q0CgAAAAIA"]
[Mon Dec 08 14:01:50.378020 2025] [:error] [pid 16888:tid 16895] [client 194.61.40.129:53445] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aTZpzhSZHPLCPHyOpBVbwQAAAAQ"]
[Mon Dec 08 14:01:50.737999 2025] [:error] [pid 16888:tid 16900] [client 194.61.40.110:51919] [client 194.61.40.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTZpzhSZHPLCPHyOpBVbwwAAAAk"]
[Mon Dec 08 14:01:51.121632 2025] [:error] [pid 13445:tid 13472] [client 194.61.40.161:55299] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTZpz8ek7sIjbF2WoVbf5AAAAFY"]
[Mon Dec 08 14:01:51.486437 2025] [:error] [pid 13445:tid 13456] [client 194.61.40.123:55109] [client 194.61.40.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/fmadmin.php"] [unique_id "aTZpz8ek7sIjbF2WoVbf5QAAAEY"]
[Mon Dec 08 14:01:51.848246 2025] [:error] [pid 30580:tid 30595] [client 194.61.40.121:51095] [client 194.61.40.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/options.php"] [unique_id "aTZpz8EhRKiLBTnel9PojAAAAQ0"]
[Mon Dec 08 14:01:52.210717 2025] [:error] [pid 30632:tid 30647] [client 194.61.40.165:20581] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/about.php"] [unique_id "aTZp0BW3Slp5Vnr6sRdvQwAAAYs"]
[Mon Dec 08 14:01:52.589659 2025] [:error] [pid 13447:tid 13527] [client 194.61.40.149:53749] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aTZp0HsXz7UXj3rHK1uwqwAAANU"]
[Mon Dec 08 14:01:52.955770 2025] [:error] [pid 30580:tid 30591] [client 194.61.40.152:29299] [client 194.61.40.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTZp0MEhRKiLBTnel9PomwAAAQk"]
[Mon Dec 08 14:01:53.324497 2025] [:error] [pid 13445:tid 13462] [client 194.61.40.123:60675] [client 194.61.40.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTZp0cek7sIjbF2WoVbf9AAAAEw"]
[Mon Dec 08 14:01:53.693361 2025] [:error] [pid 13445:tid 13454] [client 194.61.40.115:39169] [client 194.61.40.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "aTZp0cek7sIjbF2WoVbf9QAAAEQ"]
[Mon Dec 08 14:01:54.056381 2025] [:error] [pid 13447:tid 13510] [client 194.61.40.140:51383] [client 194.61.40.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wordfence-waf.php"] [unique_id "aTZp0nsXz7UXj3rHK1uwrAAAAMQ"]
[Mon Dec 08 14:01:54.418348 2025] [:error] [pid 13445:tid 13456] [client 194.61.40.128:65203] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/mah/function.php"] [unique_id "aTZp0sek7sIjbF2WoVbf9wAAAEY"]
[Mon Dec 08 14:01:54.795866 2025] [:error] [pid 30632:tid 30642] [client 194.61.40.148:54593] [client 194.61.40.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/function.php"] [unique_id "aTZp0hW3Slp5Vnr6sRdvUQAAAYY"]
[Mon Dec 08 14:01:55.158898 2025] [:error] [pid 13533:tid 13548] [client 194.61.40.150:38179] [client 194.61.40.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin.php"] [unique_id "aTZp00wxYk7zHgjCNdZtmgAAAU0"]
[Mon Dec 08 14:01:55.521084 2025] [:error] [pid 16888:tid 16899] [client 194.61.40.165:40505] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aTZp0xSZHPLCPHyOpBVb2wAAAAg"]
[Mon Dec 08 14:01:55.885993 2025] [:error] [pid 16888:tid 16909] [client 194.61.40.131:29733] [client 194.61.40.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aTZp0xSZHPLCPHyOpBVb3AAAABI"]
[Mon Dec 08 14:01:56.248306 2025] [:error] [pid 16888:tid 16915] [client 194.61.40.151:39501] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTZp1BSZHPLCPHyOpBVb3wAAABg"]
[Mon Dec 08 14:01:56.613758 2025] [:error] [pid 30632:tid 30642] [client 194.61.40.150:60561] [client 194.61.40.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTZp1BW3Slp5Vnr6sRdvVwAAAYY"]
[Mon Dec 08 14:01:56.977973 2025] [:error] [pid 30580:tid 30593] [client 194.61.40.132:29025] [client 194.61.40.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aTZp1MEhRKiLBTnel9PooAAAAQs"]
[Mon Dec 08 14:01:57.345382 2025] [:error] [pid 30632:tid 30648] [client 194.61.40.152:39467] [client 194.61.40.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/upload.php"] [unique_id "aTZp1RW3Slp5Vnr6sRdvWgAAAYw"]
[Mon Dec 08 14:01:57.705376 2025] [:error] [pid 13446:tid 13502] [client 194.61.40.131:37889] [client 194.61.40.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aTZp1VPLjuV-KbK89q0CkgAAAJc"]
[Mon Dec 08 14:01:58.069782 2025] [:error] [pid 13446:tid 13480] [client 194.61.40.165:38893] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aTZp1lPLjuV-KbK89q0ClAAAAIE"]
[Mon Dec 08 14:01:58.434738 2025] [:error] [pid 30632:tid 30660] [client 194.61.40.155:45049] [client 194.61.40.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTZp1hW3Slp5Vnr6sRdvWwAAAZg"]
[Mon Dec 08 14:01:58.798930 2025] [:error] [pid 13446:tid 13493] [client 194.61.40.109:25381] [client 194.61.40.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/xl2023.php"] [unique_id "aTZp1lPLjuV-KbK89q0ClgAAAI4"]
[Mon Dec 08 14:01:59.170015 2025] [:error] [pid 13446:tid 13496] [client 194.61.40.144:49813] [client 194.61.40.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aTZp11PLjuV-KbK89q0ClwAAAJE"]
[Mon Dec 08 14:01:59.533642 2025] [:error] [pid 30632:tid 30641] [client 194.61.40.112:21839] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/login.php"] [unique_id "aTZp1xW3Slp5Vnr6sRdvXgAAAYU"]
[Mon Dec 08 14:01:59.895076 2025] [:error] [pid 16888:tid 16913] [client 194.61.40.149:58233] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aTZp1xSZHPLCPHyOpBVb4QAAABY"]
[Mon Dec 08 14:02:00.259346 2025] [:error] [pid 13447:tid 13521] [client 194.61.40.112:65287] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aTZp2HsXz7UXj3rHK1uwrwAAAM8"]
[Mon Dec 08 14:02:00.658564 2025] [:error] [pid 30580:tid 30598] [client 194.61.40.120:39565] [client 194.61.40.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aTZp2MEhRKiLBTnel9PopAAAARA"]
[Mon Dec 08 14:02:01.052847 2025] [:error] [pid 13445:tid 13466] [client 194.61.40.121:41591] [client 194.61.40.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "aTZp2cek7sIjbF2WoVbf_QAAAFA"]
[Mon Dec 08 14:02:01.422099 2025] [:error] [pid 30632:tid 30646] [client 194.61.40.147:48903] [client 194.61.40.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTZp2RW3Slp5Vnr6sRdvXwAAAYo"]
[Mon Dec 08 14:02:01.783651 2025] [:error] [pid 13533:tid 13547] [client 194.61.40.161:34991] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aTZp2UwxYk7zHgjCNdZtnQAAAUw"]
[Mon Dec 08 14:02:02.185782 2025] [:error] [pid 13445:tid 13462] [client 194.61.40.162:42421] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/pachr.php"] [unique_id "aTZp2sek7sIjbF2WoVbf_gAAAEw"]
[Mon Dec 08 14:02:02.805027 2025] [:error] [pid 13445:tid 13463] [client 194.61.40.149:46303] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTZp2sek7sIjbF2WoVbf_wAAAE0"]
[Mon Dec 08 14:02:03.484523 2025] [:error] [pid 13447:tid 13511] [client 194.61.40.141:37317] [client 194.61.40.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aTZp23sXz7UXj3rHK1uwtAAAAMU"]
[Mon Dec 08 14:02:03.885556 2025] [:error] [pid 13533:tid 13550] [client 194.61.40.151:58853] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aTZp20wxYk7zHgjCNdZtnwAAAU8"]
[Mon Dec 08 14:02:04.256179 2025] [:error] [pid 13533:tid 13544] [client 194.61.40.140:54329] [client 194.61.40.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aTZp3EwxYk7zHgjCNdZtoAAAAUk"]
[Mon Dec 08 14:02:04.622133 2025] [:error] [pid 13447:tid 13529] [client 194.61.40.156:44423] [client 194.61.40.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/user.php"] [unique_id "aTZp3HsXz7UXj3rHK1uwtQAAANc"]
[Mon Dec 08 14:02:04.996221 2025] [:error] [pid 13533:tid 13557] [client 194.61.40.153:62367] [client 194.61.40.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aTZp3EwxYk7zHgjCNdZtoQAAAVY"]
[Mon Dec 08 14:02:05.392563 2025] [:error] [pid 13446:tid 13497] [client 194.61.40.131:46833] [client 194.61.40.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTZp3VPLjuV-KbK89q0CnAAAAJI"]
[Mon Dec 08 14:02:05.755863 2025] [:error] [pid 13533:tid 13535] [client 194.61.40.163:23341] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/text.php"] [unique_id "aTZp3UwxYk7zHgjCNdZtogAAAUA"]
[Mon Dec 08 14:02:06.117180 2025] [:error] [pid 13447:tid 13522] [client 194.61.40.135:21593] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aTZp3nsXz7UXj3rHK1uwuAAAANA"]
[Mon Dec 08 14:02:06.504105 2025] [:error] [pid 16888:tid 16900] [client 194.61.40.114:56603] [client 194.61.40.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aTZp3hSZHPLCPHyOpBVb6QAAAAk"]
[Mon Dec 08 14:02:06.881531 2025] [:error] [pid 30632:tid 30654] [client 194.61.40.158:56071] [client 194.61.40.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/demo.php"] [unique_id "aTZp3hW3Slp5Vnr6sRdvZAAAAZI"]
[Mon Dec 08 14:02:07.244668 2025] [:error] [pid 13447:tid 13529] [client 194.61.40.120:63873] [client 194.61.40.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aTZp33sXz7UXj3rHK1uwxgAAANc"]
[Mon Dec 08 14:02:07.611297 2025] [:error] [pid 30632:tid 30645] [client 194.61.40.128:63615] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aTZp3xW3Slp5Vnr6sRdvZwAAAYk"]
[Mon Dec 08 14:02:07.974690 2025] [:error] [pid 13533:tid 13552] [client 194.61.40.109:21073] [client 194.61.40.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aTZp30wxYk7zHgjCNdZtuQAAAVE"]
[Mon Dec 08 14:02:08.350469 2025] [:error] [pid 13446:tid 13479] [client 194.61.40.151:58269] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aTZp4FPLjuV-KbK89q0CoQAAAIA"]
[Mon Dec 08 14:02:08.715018 2025] [:error] [pid 16888:tid 16909] [client 194.61.40.138:29775] [client 194.61.40.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTZp4BSZHPLCPHyOpBVb9AAAABI"]
[Mon Dec 08 14:02:09.088694 2025] [:error] [pid 30580:tid 30592] [client 194.61.40.139:22905] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aTZp4cEhRKiLBTnel9PouAAAAQo"]
[Mon Dec 08 14:02:09.450634 2025] [:error] [pid 13446:tid 13496] [client 194.61.40.132:28885] [client 194.61.40.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aTZp4VPLjuV-KbK89q0CogAAAJE"]
[Mon Dec 08 14:02:09.839080 2025] [:error] [pid 13446:tid 13498] [client 194.61.40.166:44621] [client 194.61.40.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aTZp4VPLjuV-KbK89q0CpAAAAJM"]
[Mon Dec 08 14:02:10.202837 2025] [:error] [pid 30580:tid 30588] [client 194.61.40.156:47009] [client 194.61.40.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aTZp4sEhRKiLBTnel9PougAAAQY"]
[Mon Dec 08 14:02:10.566560 2025] [:error] [pid 30632:tid 30656] [client 194.61.40.117:43253] [client 194.61.40.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aTZp4hW3Slp5Vnr6sRdvbgAAAZQ"]
[Mon Dec 08 14:02:10.929260 2025] [:error] [pid 16888:tid 16900] [client 194.61.40.162:53117] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aTZp4hSZHPLCPHyOpBVb9QAAAAk"]
[Mon Dec 08 14:02:11.307617 2025] [:error] [pid 30580:tid 30597] [client 194.61.40.115:58851] [client 194.61.40.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aTZp48EhRKiLBTnel9PovQAAAQ8"]
[Mon Dec 08 14:02:11.669229 2025] [:error] [pid 13533:tid 13536] [client 194.61.40.161:20169] [client 194.61.40.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/up.php"] [unique_id "aTZp40wxYk7zHgjCNdZtugAAAUE"]
[Mon Dec 08 14:02:12.035283 2025] [:error] [pid 16888:tid 16905] [client 194.61.40.121:22955] [client 194.61.40.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aTZp5BSZHPLCPHyOpBVb-AAAAA4"]
[Mon Dec 08 14:02:12.399647 2025] [:error] [pid 30580:tid 30582] [client 194.61.40.124:59263] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTZp5MEhRKiLBTnel9PovwAAAQA"]
[Mon Dec 08 14:02:12.766688 2025] [:error] [pid 13445:tid 13465] [client 194.61.40.137:28995] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTZp5Mek7sIjbF2WoVbgGQAAAE8"]
[Mon Dec 08 14:02:13.129669 2025] [:error] [pid 30632:tid 30649] [client 194.61.40.157:49659] [client 194.61.40.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aTZp5RW3Slp5Vnr6sRdvcQAAAY0"]
[Mon Dec 08 14:02:13.496743 2025] [:error] [pid 30580:tid 30585] [client 194.61.40.139:53081] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/beez/admin.php"] [unique_id "aTZp5cEhRKiLBTnel9PowwAAAQM"]
[Mon Dec 08 14:02:13.858230 2025] [:error] [pid 13446:tid 13480] [client 194.61.40.117:22477] [client 194.61.40.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/administrator/templates/bluestork/error.php"] [unique_id "aTZp5VPLjuV-KbK89q0CswAAAIE"]
[Mon Dec 08 14:02:14.219015 2025] [:error] [pid 13447:tid 13528] [client 194.61.40.130:26509] [client 194.61.40.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Yamato/index.php"] [unique_id "aTZp5nsXz7UXj3rHK1uwyAAAANY"]
[Mon Dec 08 14:02:14.585154 2025] [:error] [pid 13446:tid 13479] [client 194.61.40.153:48565] [client 194.61.40.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/administrator/templates/isis/index.php"] [unique_id "aTZp5lPLjuV-KbK89q0CtAAAAIA"]
[Mon Dec 08 14:02:14.951570 2025] [:error] [pid 13447:tid 13510] [client 194.61.40.129:52799] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/beez3/error.php"] [unique_id "aTZp5nsXz7UXj3rHK1uwyQAAAMQ"]
[Mon Dec 08 14:02:15.316998 2025] [:error] [pid 30632:tid 30650] [client 194.61.40.158:20063] [client 194.61.40.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Globy/index.php"] [unique_id "aTZp5xW3Slp5Vnr6sRdvdwAAAY4"]
[Mon Dec 08 14:02:15.725182 2025] [:error] [pid 13446:tid 13492] [client 194.61.40.166:61793] [client 194.61.40.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "aTZp51PLjuV-KbK89q0CvAAAAI0"]
[Mon Dec 08 14:02:16.087190 2025] [:error] [pid 13446:tid 13491] [client 194.61.40.166:30919] [client 194.61.40.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/atomic/error.php"] [unique_id "aTZp6FPLjuV-KbK89q0CvQAAAIw"]
[Mon Dec 08 14:02:16.453695 2025] [:error] [pid 16888:tid 16900] [client 194.61.40.129:28531] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/beez5/index.php"] [unique_id "aTZp6BSZHPLCPHyOpBVcBQAAAAk"]
[Mon Dec 08 14:02:16.822340 2025] [:error] [pid 13446:tid 13484] [client 194.61.40.133:38709] [client 194.61.40.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Beez3/index.php"] [unique_id "aTZp6FPLjuV-KbK89q0CvgAAAIU"]
[Mon Dec 08 14:02:17.188682 2025] [:error] [pid 13446:tid 13501] [client 194.61.40.134:47665] [client 194.61.40.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/rhuk_solarflare_ii/index.php"] [unique_id "aTZp6VPLjuV-KbK89q0CvwAAAJY"]
[Mon Dec 08 14:02:17.562034 2025] [:error] [pid 30632:tid 30641] [client 194.61.40.149:42537] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Protostar/index.php"] [unique_id "aTZp6RW3Slp5Vnr6sRdvgAAAAYU"]
[Mon Dec 08 14:02:17.924702 2025] [:error] [pid 30632:tid 30650] [client 194.61.40.134:33555] [client 194.61.40.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/rhuk_milkyway/index.php"] [unique_id "aTZp6RW3Slp5Vnr6sRdvggAAAY4"]
[Mon Dec 08 14:02:18.294694 2025] [:error] [pid 16888:tid 16910] [client 194.61.40.130:44219] [client 194.61.40.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/administrator/templates/isis/error.php"] [unique_id "aTZp6hSZHPLCPHyOpBVcCQAAABM"]
[Mon Dec 08 14:02:18.655688 2025] [:error] [pid 13447:tid 13523] [client 194.61.40.139:64597] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/beez_20/index.php"] [unique_id "aTZp6nsXz7UXj3rHK1uwywAAANE"]
[Mon Dec 08 14:02:19.019024 2025] [:error] [pid 30580:tid 30592] [client 194.61.40.131:57025] [client 194.61.40.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Globy/error.php"] [unique_id "aTZp68EhRKiLBTnel9PoywAAAQo"]
[Mon Dec 08 14:02:19.404490 2025] [:error] [pid 13533:tid 13556] [client 194.61.40.157:45119] [client 194.61.40.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Protostar/error.php"] [unique_id "aTZp60wxYk7zHgjCNdZtvwAAAVU"]
[Mon Dec 08 14:02:19.772343 2025] [:error] [pid 13447:tid 13526] [client 194.61.40.150:20843] [client 194.61.40.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/administrator/templates/hathor/error.php"] [unique_id "aTZp63sXz7UXj3rHK1uwzwAAANQ"]
[Mon Dec 08 14:02:20.141850 2025] [:error] [pid 30580:tid 30588] [client 194.61.40.112:25185] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Atomic/error.php"] [unique_id "aTZp7MEhRKiLBTnel9PozgAAAQY"]
[Mon Dec 08 14:02:20.507900 2025] [:error] [pid 30632:tid 30643] [client 194.61.40.110:37171] [client 194.61.40.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/isis/error.php"] [unique_id "aTZp7BW3Slp5Vnr6sRdviQAAAYc"]
[Mon Dec 08 14:02:20.869862 2025] [:error] [pid 30632:tid 30647] [client 194.61.40.121:33687] [client 194.61.40.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Hoxa/error.php"] [unique_id "aTZp7BW3Slp5Vnr6sRdviwAAAYs"]
[Mon Dec 08 14:02:21.245392 2025] [:error] [pid 13446:tid 13486] [client 194.61.40.129:45635] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/BeginDot/error.php"] [unique_id "aTZp7VPLjuV-KbK89q0CxQAAAIc"]
[Mon Dec 08 14:02:21.607052 2025] [:error] [pid 30580:tid 30602] [client 194.61.40.138:28545] [client 194.61.40.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Raees/index.php"] [unique_id "aTZp7cEhRKiLBTnel9Po0AAAARQ"]
[Mon Dec 08 14:02:21.968684 2025] [:error] [pid 13533:tid 13540] [client 194.61.40.139:32913] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/madeyourweb/error.php"] [unique_id "aTZp7UwxYk7zHgjCNdZtwgAAAUU"]
[Mon Dec 08 14:02:22.328224 2025] [:error] [pid 13533:tid 13553] [client 194.61.40.129:26483] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Binv/error.php"] [unique_id "aTZp7kwxYk7zHgjCNdZtxQAAAVI"]
[Mon Dec 08 14:02:22.714808 2025] [:error] [pid 13445:tid 13468] [client 194.61.40.147:53981] [client 194.61.40.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Beez2/index.php"] [unique_id "aTZp7sek7sIjbF2WoVbgMwAAAFI"]
[Mon Dec 08 14:02:23.079891 2025] [:error] [pid 30580:tid 30600] [client 194.61.40.132:26357] [client 194.61.40.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Atum/error.php"] [unique_id "aTZp78EhRKiLBTnel9Po0wAAARI"]
[Mon Dec 08 14:02:23.449643 2025] [:error] [pid 30632:tid 30649] [client 194.61.40.158:46981] [client 194.61.40.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/protostar/error.php"] [unique_id "aTZp7xW3Slp5Vnr6sRdvkgAAAY0"]
[Mon Dec 08 14:02:23.874189 2025] [:error] [pid 13533:tid 13539] [client 194.61.40.163:50529] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/beez_20/error.php"] [unique_id "aTZp70wxYk7zHgjCNdZtzQAAAUQ"]
[Mon Dec 08 14:02:24.294787 2025] [:error] [pid 13445:tid 13472] [client 194.61.40.148:50757] [client 194.61.40.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/cassiopeia/index.php"] [unique_id "aTZp8Mek7sIjbF2WoVbgRgAAAFY"]
[Mon Dec 08 14:02:24.662206 2025] [:error] [pid 13445:tid 13461] [client 194.61.40.138:64749] [client 194.61.40.138] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "aTZp8Mek7sIjbF2WoVbgTQAAAEs"]
[Mon Dec 08 14:02:25.025829 2025] [:error] [pid 16888:tid 16908] [client 194.61.40.120:33521] [client 194.61.40.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/protostar/index.php"] [unique_id "aTZp8RSZHPLCPHyOpBVcEwAAABE"]
[Mon Dec 08 14:02:25.404053 2025] [:error] [pid 13446:tid 13500] [client 194.61.40.116:60535] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Atum/index.php"] [unique_id "aTZp8VPLjuV-KbK89q0C3gAAAJU"]
[Mon Dec 08 14:02:25.784279 2025] [:error] [pid 13447:tid 13511] [client 194.61.40.159:39023] [client 194.61.40.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Beez3/error.php"] [unique_id "aTZp8XsXz7UXj3rHK1uw3QAAAMU"]
[Mon Dec 08 14:02:26.145566 2025] [:error] [pid 30580:tid 30597] [client 194.61.40.144:64943] [client 194.61.40.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Hoxa/index.php"] [unique_id "aTZp8sEhRKiLBTnel9Po2wAAAQ8"]
[Mon Dec 08 14:02:26.505967 2025] [:error] [pid 16888:tid 16913] [client 194.61.40.149:23375] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/isis/index.php"] [unique_id "aTZp8hSZHPLCPHyOpBVcFwAAABY"]
[Mon Dec 08 14:02:26.868010 2025] [:error] [pid 13533:tid 13558] [client 194.61.40.118:32537] [client 194.61.40.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Aaika/error.php"] [unique_id "aTZp8kwxYk7zHgjCNdZt2QAAAVc"]
[Mon Dec 08 14:02:27.236971 2025] [:error] [pid 30580:tid 30600] [client 194.61.40.151:43811] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Binv/index.php"] [unique_id "aTZp88EhRKiLBTnel9Po3QAAARI"]
[Mon Dec 08 14:02:27.599306 2025] [:error] [pid 13447:tid 13506] [client 194.61.40.156:34225] [client 194.61.40.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/JMart/error.php"] [unique_id "aTZp83sXz7UXj3rHK1uw3gAAAMA"]
[Mon Dec 08 14:02:27.959629 2025] [:error] [pid 16888:tid 16897] [client 194.61.40.137:45511] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Cassiopeia/error.php"] [unique_id "aTZp8xSZHPLCPHyOpBVcGgAAAAY"]
[Mon Dec 08 14:02:28.322174 2025] [:error] [pid 16888:tid 16900] [client 194.61.40.163:38391] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/atomic/index.php"] [unique_id "aTZp9BSZHPLCPHyOpBVcHAAAAAk"]
[Mon Dec 08 14:02:28.686276 2025] [:error] [pid 16888:tid 16908] [client 194.61.40.163:39999] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Beez5/error.php"] [unique_id "aTZp9BSZHPLCPHyOpBVcHgAAABE"]
[Mon Dec 08 14:02:29.049379 2025] [:error] [pid 16888:tid 16914] [client 194.61.40.123:47625] [client 194.61.40.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Eatoreh/index.php"] [unique_id "aTZp9RSZHPLCPHyOpBVcIQAAABc"]
[Mon Dec 08 14:02:29.413337 2025] [:error] [pid 30632:tid 30660] [client 194.61.40.129:29945] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/rhuk_milkyway/error.php"] [unique_id "aTZp9RW3Slp5Vnr6sRdvngAAAZg"]
[Mon Dec 08 14:02:29.792649 2025] [:error] [pid 30580:tid 30589] [client 194.61.40.154:30979] [client 194.61.40.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/ja-helio-farsi/index.php"] [unique_id "aTZp9cEhRKiLBTnel9Po3wAAAQc"]
[Mon Dec 08 14:02:30.156583 2025] [:error] [pid 30632:tid 30636] [client 194.61.40.157:59063] [client 194.61.40.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Aaika/index.php"] [unique_id "aTZp9hW3Slp5Vnr6sRdvnwAAAYA"]
[Mon Dec 08 14:02:32.127275 2025] [:error] [pid 13447:tid 13522] [client 194.61.40.113:32571] [client 194.61.40.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/administrator/templates/hathor/index.php"] [unique_id "aTZp-HsXz7UXj3rHK1uw4wAAANA"]
[Mon Dec 08 14:02:32.502653 2025] [:error] [pid 13447:tid 13517] [client 194.61.40.125:64809] [client 194.61.40.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/madeyourweb/index.php"] [unique_id "aTZp-HsXz7UXj3rHK1uw5QAAAMs"]
[Mon Dec 08 14:02:32.886146 2025] [:error] [pid 16888:tid 16901] [client 194.61.40.113:22513] [client 194.61.40.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/hathor/index.php"] [unique_id "aTZp-BSZHPLCPHyOpBVcJgAAAAo"]
[Mon Dec 08 14:02:33.251294 2025] [:error] [pid 30632:tid 30640] [client 194.61.40.109:21965] [client 194.61.40.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Genius/error.php"] [unique_id "aTZp-RW3Slp5Vnr6sRdvogAAAYQ"]
[Mon Dec 08 14:02:33.613521 2025] [:error] [pid 13446:tid 13496] [client 194.61.40.146:47189] [client 194.61.40.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Atomic/index.php"] [unique_id "aTZp-VPLjuV-KbK89q0C7wAAAJE"]
[Mon Dec 08 14:02:33.979617 2025] [:error] [pid 13447:tid 13530] [client 194.61.40.113:34837] [client 194.61.40.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Eatoreh/error.php"] [unique_id "aTZp-XsXz7UXj3rHK1uw5gAAANg"]
[Mon Dec 08 14:02:34.397882 2025] [:error] [pid 16888:tid 16899] [client 194.61.40.117:31695] [client 194.61.40.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/RiverS/error.php"] [unique_id "aTZp-hSZHPLCPHyOpBVcKgAAAAg"]
[Mon Dec 08 14:02:34.771335 2025] [:error] [pid 13447:tid 13525] [client 194.61.40.139:54051] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/hathor/error.php"] [unique_id "aTZp-nsXz7UXj3rHK1uw8AAAANM"]
[Mon Dec 08 14:02:35.144190 2025] [:error] [pid 30580:tid 30606] [client 194.61.40.117:44409] [client 194.61.40.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/RiverS/index.php"] [unique_id "aTZp-8EhRKiLBTnel9Po4wAAARg"]
[Mon Dec 08 14:02:35.517598 2025] [:error] [pid 30580:tid 30594] [client 194.61.40.148:35477] [client 194.61.40.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aTZp-8EhRKiLBTnel9Po5gAAAQw"]
[Mon Dec 08 14:02:35.883613 2025] [:error] [pid 13446:tid 13480] [client 194.61.40.123:44289] [client 194.61.40.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Yamato/error.php"] [unique_id "aTZp-1PLjuV-KbK89q0C9AAAAIE"]
[Mon Dec 08 14:02:36.246226 2025] [:error] [pid 13446:tid 13479] [client 194.61.40.150:34201] [client 194.61.40.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/JMart/index.php"] [unique_id "aTZp_FPLjuV-KbK89q0C9QAAAIA"]
[Mon Dec 08 14:02:36.610357 2025] [:error] [pid 30632:tid 30660] [client 194.61.40.166:53681] [client 194.61.40.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/beez/index.php"] [unique_id "aTZp_BW3Slp5Vnr6sRdvqgAAAZg"]
[Mon Dec 08 14:02:36.977612 2025] [:error] [pid 16888:tid 16894] [client 194.61.40.124:58911] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Cassiopeia/index.php"] [unique_id "aTZp_BSZHPLCPHyOpBVcLAAAAAM"]
[Mon Dec 08 14:02:37.373868 2025] [:error] [pid 30632:tid 30657] [client 194.61.40.128:45281] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/beez5/error.php"] [unique_id "aTZp_RW3Slp5Vnr6sRdvrAAAAZU"]
[Mon Dec 08 14:02:37.746651 2025] [:error] [pid 13446:tid 13488] [client 194.61.40.132:32095] [client 194.61.40.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Genius/index.php"] [unique_id "aTZp_VPLjuV-KbK89q0C9wAAAIk"]
[Mon Dec 08 14:02:38.120607 2025] [:error] [pid 13445:tid 13454] [client 194.61.40.112:22453] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Beez5/index.php"] [unique_id "aTZp_sek7sIjbF2WoVbgZwAAAEQ"]
[Mon Dec 08 14:02:38.627122 2025] [:error] [pid 30580:tid 30588] [client 194.61.40.163:44407] [client 194.61.40.163] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Raees/error.php"] [unique_id "aTZp_sEhRKiLBTnel9Po7gAAAQY"]
[Mon Dec 08 14:02:38.991294 2025] [:error] [pid 30580:tid 30596] [client 194.61.40.134:62185] [client 194.61.40.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/BeginDot/index.php"] [unique_id "aTZp_sEhRKiLBTnel9Po7wAAAQ4"]
[Mon Dec 08 14:02:39.356334 2025] [:error] [pid 30632:tid 30654] [client 194.61.40.147:21509] [client 194.61.40.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/rhuk_solarflare_ii/error.php"] [unique_id "aTZp_xW3Slp5Vnr6sRdvsAAAAZI"]
[Mon Dec 08 14:02:39.723060 2025] [:error] [pid 13446:tid 13492] [client 194.61.40.139:49767] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Beez2/error.php"] [unique_id "aTZp_1PLjuV-KbK89q0C-wAAAI0"]
[Mon Dec 08 14:02:40.096875 2025] [:error] [pid 30632:tid 30658] [client 194.61.40.149:33665] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/cassiopeia/error.php"] [unique_id "aTZqABW3Slp5Vnr6sRdvswAAAZY"]
[Mon Dec 08 14:02:40.456009 2025] [:error] [pid 30632:tid 30660] [client 194.61.40.112:65481] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Jollyany/index.php"] [unique_id "aTZqABW3Slp5Vnr6sRdvtAAAAZg"]
[Mon Dec 08 14:02:40.816868 2025] [:error] [pid 30632:tid 30657] [client 194.61.40.144:36361] [client 194.61.40.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/templates/Jollyany/error.php"] [unique_id "aTZqABW3Slp5Vnr6sRdvtwAAAZU"]
[Mon Dec 08 14:02:41.183814 2025] [:error] [pid 30632:tid 30648] [client 194.61.40.114:49259] [client 194.61.40.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/ets_whatsapp/new.php"] [unique_id "aTZqARW3Slp5Vnr6sRdvuQAAAYw"]
[Mon Dec 08 14:02:41.554161 2025] [:error] [pid 30632:tid 30650] [client 194.61.40.162:55769] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aTZqARW3Slp5Vnr6sRdvugAAAY4"]
[Mon Dec 08 14:02:41.921482 2025] [:error] [pid 13446:tid 13493] [client 194.61.40.149:42397] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aTZqAVPLjuV-KbK89q0C_wAAAI4"]
[Mon Dec 08 14:02:42.283692 2025] [:error] [pid 13533:tid 13547] [client 194.61.40.130:25185] [client 194.61.40.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/ets_whatsapp/security.php"] [unique_id "aTZqAkwxYk7zHgjCNdZt4gAAAUw"]
[Mon Dec 08 14:02:42.877464 2025] [:error] [pid 13446:tid 13497] [client 194.61.40.115:25997] [client 194.61.40.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/mod%20ariimageslidersa/mod%20ariimageslidersa.php"] [unique_id "aTZqAlPLjuV-KbK89q0DAAAAAJI"]
[Mon Dec 08 14:02:43.255434 2025] [:error] [pid 30632:tid 30647] [client 194.61.40.164:43011] [client 194.61.40.164] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/age-restriction/modules/remote_support/remote_init.php"] [unique_id "aTZqAxW3Slp5Vnr6sRdvwAAAAYs"]
[Mon Dec 08 14:02:43.623293 2025] [:error] [pid 30632:tid 30641] [client 194.61.40.134:20811] [client 194.61.40.134] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/mod_ju_articleslider/tmpl/admin.php"] [unique_id "aTZqAxW3Slp5Vnr6sRdvwwAAAYU"]
[Mon Dec 08 14:02:43.983037 2025] [:error] [pid 13446:tid 13484] [client 194.61.40.116:63273] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/mod_rebug/library/index2.php"] [unique_id "aTZqA1PLjuV-KbK89q0DBgAAAIU"]
[Mon Dec 08 14:02:44.348036 2025] [:error] [pid 13445:tid 13460] [client 194.61.40.116:37251] [client 194.61.40.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/mod_ariimageslidersa/mod_ariimageslidersa.php"] [unique_id "aTZqBMek7sIjbF2WoVbgaQAAAEo"]
[Mon Dec 08 14:02:44.715413 2025] [:error] [pid 30632:tid 30637] [client 194.61.40.137:65181] [client 194.61.40.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/modules/modules.php"] [unique_id "aTZqBBW3Slp5Vnr6sRdvxgAAAYE"]
[Mon Dec 08 14:02:45.089185 2025] [:error] [pid 13446:tid 13482] [client 194.61.40.148:29387] [client 194.61.40.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/scrollbottom/anamama-2.php"] [unique_id "aTZqBVPLjuV-KbK89q0DDQAAAIM"]
[Mon Dec 08 14:02:45.454691 2025] [:error] [pid 13445:tid 13455] [client 194.61.40.133:24669] [client 194.61.40.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/modules/sendinblue/mini.php"] [unique_id "aTZqBcek7sIjbF2WoVbgawAAAEU"]
[Mon Dec 08 14:02:45.822013 2025] [:error] [pid 13446:tid 13491] [client 194.61.40.124:50551] [client 194.61.40.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/vendor/htmlawed/htmlawed/gel4y.php"] [unique_id "aTZqBVPLjuV-KbK89q0DEAAAAIw"]
[Mon Dec 08 14:02:46.187316 2025] [:error] [pid 13447:tid 13519] [client 194.61.40.154:28789] [client 194.61.40.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/libraries/joomla/index.php"] [unique_id "aTZqBnsXz7UXj3rHK1uw-gAAAM0"]
[Mon Dec 08 14:02:46.552048 2025] [:error] [pid 16888:tid 16908] [client 194.61.40.135:48409] [client 194.61.40.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/vendor/composer/about.php"] [unique_id "aTZqBhSZHPLCPHyOpBVcLwAAABE"]
[Mon Dec 08 14:02:46.921370 2025] [:error] [pid 13446:tid 13484] [client 194.61.40.131:63927] [client 194.61.40.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/components/com_newsfeeds/models/index.php"] [unique_id "aTZqBlPLjuV-KbK89q0DEgAAAIU"]
[Mon Dec 08 14:02:47.324595 2025] [:error] [pid 30632:tid 30639] [client 194.61.40.132:63089] [client 194.61.40.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/vendor/composer/cache.php"] [unique_id "aTZqBxW3Slp5Vnr6sRdvyAAAAYM"]
[Mon Dec 08 14:02:47.708816 2025] [:error] [pid 13533:tid 13535] [client 194.61.40.130:24537] [client 194.61.40.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/components/com_b2jcontact/izoc.php"] [unique_id "aTZqB0wxYk7zHgjCNdZt5gAAAUA"]
[Mon Dec 08 14:02:48.078844 2025] [:error] [pid 30632:tid 30641] [client 194.61.40.165:27899] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/libraries/joomla/jmail.php"] [unique_id "aTZqCBW3Slp5Vnr6sRdvywAAAYU"]
[Mon Dec 08 14:02:48.449317 2025] [:error] [pid 30580:tid 30582] [client 194.61.40.129:65009] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/libraries/joomla/css.php"] [unique_id "aTZqCMEhRKiLBTnel9Po9wAAAQA"]
[Mon Dec 08 14:02:48.817863 2025] [:error] [pid 13445:tid 13451] [client 194.61.40.136:39841] [client 194.61.40.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/components/com_jbcatalog/libraries/jsupload/server/php/files/up.php"] [unique_id "aTZqCMek7sIjbF2WoVbgbQAAAEE"]
[Mon Dec 08 14:02:49.192390 2025] [:error] [pid 13447:tid 13509] [client 194.61.40.112:57147] [client 194.61.40.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/index2.php"] [unique_id "aTZqCXsXz7UXj3rHK1uw_QAAAMM"]
[Mon Dec 08 14:02:49.556968 2025] [:error] [pid 13533:tid 13542] [client 194.61.40.125:20873] [client 194.61.40.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/administrator/components/com_xcloner-backupandrestore/language/english.php"] [unique_id "aTZqCUwxYk7zHgjCNdZt6AAAAUc"]
[Mon Dec 08 14:02:49.920992 2025] [:error] [pid 30580:tid 30602] [client 194.61.40.133:38999] [client 194.61.40.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/libraries/legacy/updates.php"] [unique_id "aTZqCcEhRKiLBTnel9Po-wAAARQ"]
[Mon Dec 08 14:02:50.287296 2025] [:error] [pid 13446:tid 13497] [client 194.61.40.139:36145] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/libraries/phpmailer/updates.php"] [unique_id "aTZqClPLjuV-KbK89q0DFQAAAJI"]
[Mon Dec 08 14:02:50.651129 2025] [:error] [pid 13447:tid 13510] [client 194.61.40.128:41547] [client 194.61.40.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/libraries/vendor/updates.php"] [unique_id "aTZqCnsXz7UXj3rHK1uxAQAAAMQ"]
[Mon Dec 08 14:02:51.021718 2025] [:error] [pid 30580:tid 30597] [client 194.61.40.144:59923] [client 194.61.40.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/admin/resources/dummy/log.php"] [unique_id "aTZqC8EhRKiLBTnel9Po_AAAAQ8"]
[Mon Dec 08 14:02:51.407503 2025] [:error] [pid 30580:tid 30585] [client 194.61.40.120:65531] [client 194.61.40.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/admin/log.php"] [unique_id "aTZqC8EhRKiLBTnel9Po_QAAAQM"]
[Mon Dec 08 14:02:51.774858 2025] [:error] [pid 13446:tid 13492] [client 194.61.40.139:27673] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/admin/include/student.php"] [unique_id "aTZqC1PLjuV-KbK89q0DFgAAAI0"]
[Mon Dec 08 14:02:52.152300 2025] [:error] [pid 13533:tid 13539] [client 194.61.40.115:58447] [client 194.61.40.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/admin/cache.php"] [unique_id "aTZqDEwxYk7zHgjCNdZt6QAAAUQ"]
[Mon Dec 08 14:02:52.516404 2025] [:error] [pid 13447:tid 13523] [client 194.61.40.155:26559] [client 194.61.40.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/administrator/index.php"] [unique_id "aTZqDHsXz7UXj3rHK1uxBQAAANE"]
[Mon Dec 08 14:02:52.883294 2025] [:error] [pid 30580:tid 30583] [client 194.61.40.136:45975] [client 194.61.40.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/admin/controller/extension/extension/index.php"] [unique_id "aTZqDMEhRKiLBTnel9PpAAAAAQE"]
[Mon Dec 08 14:02:53.247171 2025] [:error] [pid 30580:tid 30601] [client 194.61.40.146:54045] [client 194.61.40.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/local/index.php"] [unique_id "aTZqDcEhRKiLBTnel9PpAQAAARM"]
[Mon Dec 08 14:02:53.607773 2025] [:error] [pid 30580:tid 30596] [client 194.61.40.139:42165] [client 194.61.40.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/themes/classic/x.php"] [unique_id "aTZqDcEhRKiLBTnel9PpAwAAAQ4"]
[Mon Dec 08 14:02:53.970187 2025] [:error] [pid 13533:tid 13543] [client 194.61.40.149:55157] [client 194.61.40.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/assets/images/adriv4.php"] [unique_id "aTZqDUwxYk7zHgjCNdZt6wAAAUg"]
[Mon Dec 08 14:02:54.340037 2025] [:error] [pid 13533:tid 13550] [client 194.61.40.162:63427] [client 194.61.40.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aTZqDkwxYk7zHgjCNdZt7AAAAU8"]
[Mon Dec 08 14:02:54.701947 2025] [:error] [pid 13447:tid 13529] [client 194.61.40.129:60979] [client 194.61.40.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/sites/default/files/index.php"] [unique_id "aTZqDnsXz7UXj3rHK1uxBwAAANc"]
[Mon Dec 08 14:02:55.070614 2025] [:error] [pid 13533:tid 13548] [client 194.61.40.151:40929] [client 194.61.40.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/local/moodle_webshell/index.php"] [unique_id "aTZqD0wxYk7zHgjCNdZt7QAAAU0"]
[Mon Dec 08 14:02:55.434699 2025] [:error] [pid 13533:tid 13549] [client 194.61.40.113:46985] [client 194.61.40.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/plugins/content/apismtp/wp-domain.php"] [unique_id "aTZqD0wxYk7zHgjCNdZt7wAAAU4"]
[Mon Dec 08 14:02:55.798504 2025] [:error] [pid 30632:tid 30656] [client 194.61.40.165:48075] [client 194.61.40.165] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/plugins/content/apismtp/setting-api.php"] [unique_id "aTZqDxW3Slp5Vnr6sRdv1gAAAZQ"]
[Mon Dec 08 14:11:05.003932 2025] [:error] [pid 16888:tid 16910] [client 52.37.253.147:58368] [client 52.37.253.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTZr-RSZHPLCPHyOpBVeIwAAABM"]
[Mon Dec 08 15:33:57.844807 2025] [:error] [pid 63353:tid 63361] [client 129.226.213.145:33088] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTZ_ZRtg8HdYG392GAjSJwAAAIU"]
[Mon Dec 08 17:05:31.823701 2025] [:error] [pid 58760:tid 58820] [client 182.44.9.147:46154] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTaU22qmF_jKbCz9E6lIhgAAAAM"]
[Mon Dec 08 18:33:10.281708 2025] [autoindex:error] [pid 37840:tid 37853] [client 209.97.156.74:49646] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 08 21:39:16.681818 2025] [:error] [pid 48541:tid 48559] [client 162.62.213.187:58020] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTbVBASNhJPArxLCdWEDnAAAARA"]
[Mon Dec 08 23:30:19.512530 2025] [:error] [pid 48541:tid 48563] [client 44.251.239.249:54730] [client 44.251.239.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aTbvCwSNhJPArxLCdWE5XQAAARQ"]
[Tue Dec 09 03:24:08.226470 2025] [proxy_fcgi:error] [pid 17587:tid 17600] [client 20.239.251.133:4068] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Tue Dec 09 03:24:15.935578 2025] [:error] [pid 17587:tid 17607] [client 20.239.251.133:4068] [client 20.239.251.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.239.251.133, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTcl35JbuGn8bV7YLq94fAAAAM8"], referer: https://www.yahoo.com/
[Tue Dec 09 03:24:16.056754 2025] [:error] [pid 59067:tid 59077] [client 20.239.251.133:4071] [client 20.239.251.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.239.251.133, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTcl4HStYKzcfg3q9jfd0wAAAQM"], referer: https://www.yahoo.com/
[Tue Dec 09 03:24:20.470903 2025] [:error] [pid 17587:tid 17609] [client 20.239.251.133:4068] [client 20.239.251.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aTcl5JJbuGn8bV7YLq94iwAAANE"], referer: https://duckduckgo.com/
[Tue Dec 09 05:50:29.631373 2025] [:error] [pid 26689:tid 26737] [client 20.78.176.226:8607] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTdIJdkbfj8nyBvIyRAxpgAAAQI"], referer: https://www.google.co.uk/
[Tue Dec 09 05:50:29.873148 2025] [:error] [pid 26689:tid 26757] [client 20.78.176.226:8603] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTdIJdkbfj8nyBvIyRAxpwAAARU"], referer: https://www.google.co.uk/
[Tue Dec 09 05:50:31.036680 2025] [:error] [pid 62041:tid 62100] [client 20.78.176.226:65068] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTdIJ_OmnJGvfaNPxPNR1gAAAIM"], referer: https://duckduckgo.com/
[Tue Dec 09 05:50:31.279319 2025] [:error] [pid 62124:tid 62150] [client 20.78.176.226:65137] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTdIJ1raBX51GaCVVuVAQgAAANc"], referer: https://www.google.co.uk/
[Tue Dec 09 05:50:31.524092 2025] [:error] [pid 62124:tid 62128] [client 20.78.176.226:65108] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTdIJ1raBX51GaCVVuVAQwAAAME"], referer: https://www.yahoo.com/
[Tue Dec 09 05:50:32.571282 2025] [:error] [pid 62124:tid 62141] [client 20.78.176.226:65025] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aTdIKFraBX51GaCVVuVARwAAAM4"], referer: https://www.google.de/
[Tue Dec 09 05:50:32.817451 2025] [:error] [pid 62124:tid 62143] [client 20.78.176.226:65073] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTdIKFraBX51GaCVVuVASAAAANA"], referer: https://www.google.de/
[Tue Dec 09 05:50:33.850613 2025] [:error] [pid 62039:tid 62061] [client 20.78.176.226:65131] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aTdIKa-WdjFepfLrlW59KQAAABI"], referer: https://www.bing.com/
[Tue Dec 09 05:50:34.357274 2025] [:error] [pid 62040:tid 62087] [client 20.78.176.226:65115] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTdIKvkSVjwLGqZL-9JllgAAAFE"], referer: https://www.google.fr/
[Tue Dec 09 05:50:34.599011 2025] [:error] [pid 26689:tid 26743] [client 20.78.176.226:65137] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTdIKtkbfj8nyBvIyRAxsAAAAQg"], referer: https://www.yahoo.com/
[Tue Dec 09 05:50:34.841215 2025] [:error] [pid 62041:tid 62120] [client 20.78.176.226:65043] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aTdIKvOmnJGvfaNPxPNR2gAAAJc"], referer: https://www.yahoo.com/
[Tue Dec 09 05:50:35.084453 2025] [:error] [pid 62039:tid 62056] [client 20.78.176.226:65113] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTdIK6-WdjFepfLrlW59KwAAAA0"], referer: https://www.bing.com/
[Tue Dec 09 05:50:35.325783 2025] [:error] [pid 26689:tid 26756] [client 20.78.176.226:64578] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTdIK9kbfj8nyBvIyRAxswAAARQ"], referer: https://www.google.com/
[Tue Dec 09 05:50:35.567137 2025] [:error] [pid 34783:tid 34795] [client 20.78.176.226:65124] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTdIK617odLapL7SFcwvWwAAAUo"], referer: https://www.google.fr/
[Tue Dec 09 05:50:36.602145 2025] [:error] [pid 62124:tid 62146] [client 20.78.176.226:65089] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTdILFraBX51GaCVVuVATgAAANM"], referer: https://www.bing.com/
[Tue Dec 09 05:50:36.843908 2025] [:error] [pid 62124:tid 62147] [client 20.78.176.226:65059] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTdILFraBX51GaCVVuVATwAAANQ"], referer: https://duckduckgo.com/
[Tue Dec 09 05:50:37.085087 2025] [:error] [pid 26689:tid 26750] [client 20.78.176.226:65028] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/nxc.php"] [unique_id "aTdILdkbfj8nyBvIyRAxtQAAAQ4"], referer: https://www.bing.com/
[Tue Dec 09 05:50:37.594778 2025] [:error] [pid 62040:tid 62088] [client 20.78.176.226:65125] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTdILfkSVjwLGqZL-9JlmgAAAFI"], referer: https://www.bing.com/
[Tue Dec 09 05:50:38.110595 2025] [:error] [pid 34783:tid 34800] [client 20.78.176.226:65110] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTdILq17odLapL7SFcwvZQAAAU8"], referer: https://www.bing.com/
[Tue Dec 09 05:50:38.619465 2025] [:error] [pid 26689:tid 26737] [client 20.78.176.226:8596] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTdILtkbfj8nyBvIyRAxuQAAAQI"], referer: https://www.google.com/
[Tue Dec 09 05:50:38.861267 2025] [:error] [pid 62039:tid 62065] [client 20.78.176.226:65128] [client 20.78.176.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aTdILq-WdjFepfLrlW59LQAAABY"], referer: https://www.google.de/
[Tue Dec 09 05:50:40.695302 2025] [:error] [pid 26689:tid 26759] [client 20.78.176.226:8604] [client 20.78.176.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.78.176.226, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTdIMNkbfj8nyBvIyRAxwgAAARc"], referer: https://duckduckgo.com/
[Tue Dec 09 05:50:40.819390 2025] [:error] [pid 34783:tid 34792] [client 20.78.176.226:65135] [client 20.78.176.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.78.176.226, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTdIMK17odLapL7SFcwvcQAAAUc"], referer: https://duckduckgo.com/
[Tue Dec 09 05:50:40.965545 2025] [proxy_fcgi:error] [pid 26689:tid 26750] [client 20.78.176.226:8604] AH01071: Got error 'Primary script unknown', referer: https://duckduckgo.com/
[Tue Dec 09 05:50:41.085866 2025] [:error] [pid 26689:tid 26760] [client 20.78.176.226:8604] [client 20.78.176.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.78.176.226, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTdIMdkbfj8nyBvIyRAxxAAAARg"], referer: https://www.bing.com/
[Tue Dec 09 05:50:41.091200 2025] [proxy_fcgi:error] [pid 26689:tid 26760] [client 20.78.176.226:8604] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Tue Dec 09 09:36:49.263008 2025] [:error] [pid 62040:tid 62091] [client 45.86.202.108:56361] [client 45.86.202.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTd9MfkSVjwLGqZL-9KTVwAAAFU"]
[Tue Dec 09 09:36:49.928458 2025] [:error] [pid 6053:tid 6057] [client 45.86.202.106:51729] [client 45.86.202.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aTd9MSHz_Tnml8kdMwzlOgAAAYI"]
[Tue Dec 09 09:36:51.627674 2025] [:error] [pid 34783:tid 34802] [client 45.86.202.102:20305] [client 45.86.202.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aTd9M617odLapL7SFcxoRQAAAVE"]
[Tue Dec 09 09:36:52.297271 2025] [:error] [pid 62040:tid 62081] [client 45.86.202.109:36925] [client 45.86.202.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aTd9NPkSVjwLGqZL-9KTWQAAAEs"]
[Tue Dec 09 09:36:52.965784 2025] [:error] [pid 62041:tid 62106] [client 45.86.202.115:35299] [client 45.86.202.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aTd9NPOmnJGvfaNPxPOEUgAAAIk"]
[Tue Dec 09 11:20:56.924417 2025] [:error] [pid 26689:tid 26758] [client 45.138.16.233:59974] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/postnews.php"] [unique_id "aTeVmNkbfj8nyBvIyRCMnQAAARY"]
[Tue Dec 09 11:20:57.523965 2025] [:error] [pid 6053:tid 6075] [client 45.138.16.233:60128] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aTeVmSHz_Tnml8kdMwz9_AAAAZQ"]
[Tue Dec 09 11:20:58.121390 2025] [:error] [pid 6053:tid 6074] [client 45.138.16.233:60228] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aTeVmiHz_Tnml8kdMwz-AAAAAZM"]
[Tue Dec 09 14:10:38.260225 2025] [:error] [pid 12069:tid 12091] [client 136.158.103.207:39512] [client 136.158.103.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.103.207, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTe9XmwNDNgPF6LHYDTNAwAAAFQ"]
[Tue Dec 09 14:45:41.109219 2025] [:error] [pid 59388:tid 59405] [client 103.77.106.81:60904] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aTfFld7acjYK4IXwCBWcpwAAAI8"]
[Tue Dec 09 14:51:09.479840 2025] [:error] [pid 12069:tid 12076] [client 45.138.16.233:50987] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTfG3WwNDNgPF6LHYDTZ-wAAAEU"]
[Tue Dec 09 14:51:09.483060 2025] [:error] [pid 7325:tid 7372] [client 45.138.16.233:50991] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG3QqEQlZnpyQAsW1YDwAAAZA"], referer: www.google.com
[Tue Dec 09 14:51:09.485027 2025] [:error] [pid 7325:tid 7365] [client 45.138.16.233:64650] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG3QqEQlZnpyQAsW1YEAAAAYk"], referer: www.google.com
[Tue Dec 09 14:51:09.490956 2025] [:error] [pid 7325:tid 7356] [client 45.138.16.233:50990] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "aTfG3QqEQlZnpyQAsW1YEgAAAYA"], referer: www.google.com
[Tue Dec 09 14:51:10.079625 2025] [:error] [pid 7325:tid 7376] [client 45.138.16.233:58309] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTfG3gqEQlZnpyQAsW1YFQAAAZQ"]
[Tue Dec 09 14:51:10.086963 2025] [:error] [pid 7382:tid 7409] [client 45.138.16.233:62661] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG3idEXhamGkzwq-gvfAAAAc8"], referer: www.google.com
[Tue Dec 09 14:51:10.087959 2025] [:error] [pid 7324:tid 7340] [client 45.138.16.233:62433] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG3uf70zXc9zH4rTLSGgAAAUs"], referer: www.google.com
[Tue Dec 09 14:51:10.099962 2025] [:error] [pid 7287:tid 7302] [client 45.138.16.233:62668] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "aTfG3v3UQf3HGDaVS5P7UwAAAA0"], referer: www.google.com
[Tue Dec 09 14:51:10.380439 2025] [:error] [pid 7325:tid 7358] [client 45.138.16.233:50993] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTfG3gqEQlZnpyQAsW1YFwAAAYI"]
[Tue Dec 09 14:51:10.689401 2025] [:error] [pid 7287:tid 7313] [client 45.138.16.233:64073] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG3v3UQf3HGDaVS5P7VgAAABg"], referer: www.google.com
[Tue Dec 09 14:51:10.691715 2025] [:error] [pid 7287:tid 7309] [client 45.138.16.233:64620] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG3v3UQf3HGDaVS5P7VwAAABQ"], referer: www.google.com
[Tue Dec 09 14:51:10.720088 2025] [:error] [pid 7287:tid 7307] [client 45.138.16.233:50319] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "aTfG3v3UQf3HGDaVS5P7WAAAABI"], referer: www.google.com
[Tue Dec 09 14:51:10.982858 2025] [:error] [pid 7287:tid 7299] [client 45.138.16.233:64537] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTfG3v3UQf3HGDaVS5P7XAAAAAo"]
[Tue Dec 09 14:51:11.296850 2025] [:error] [pid 7287:tid 7305] [client 45.138.16.233:50381] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG3_3UQf3HGDaVS5P7XgAAABA"], referer: www.google.com
[Tue Dec 09 14:51:11.313477 2025] [:error] [pid 7287:tid 7311] [client 45.138.16.233:51035] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG3_3UQf3HGDaVS5P7XwAAABY"], referer: www.google.com
[Tue Dec 09 14:51:11.314068 2025] [:error] [pid 7325:tid 7380] [client 45.138.16.233:50331] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "aTfG3wqEQlZnpyQAsW1YGAAAAZg"], referer: www.google.com
[Tue Dec 09 14:51:11.578059 2025] [:error] [pid 59388:tid 59407] [client 45.138.16.233:51138] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTfG397acjYK4IXwCBWfPgAAAJE"]
[Tue Dec 09 14:51:11.891820 2025] [:error] [pid 59388:tid 59400] [client 45.138.16.233:62792] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG397acjYK4IXwCBWfPwAAAIo"], referer: www.google.com
[Tue Dec 09 14:51:11.928012 2025] [:error] [pid 7382:tid 7398] [client 45.138.16.233:62828] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "aTfG3ydEXhamGkzwq-gvfwAAAcQ"], referer: www.google.com
[Tue Dec 09 14:51:11.932177 2025] [:error] [pid 59388:tid 59391] [client 45.138.16.233:62195] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG397acjYK4IXwCBWfQAAAAIE"], referer: www.google.com
[Tue Dec 09 14:51:12.190143 2025] [:error] [pid 7287:tid 7304] [client 45.138.16.233:62061] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG4P3UQf3HGDaVS5P7ZQAAAA8"], referer: www.google.com
[Tue Dec 09 14:51:13.155845 2025] [:error] [pid 7287:tid 7302] [client 45.138.16.233:63931] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG4f3UQf3HGDaVS5P7aAAAAA0"], referer: www.google.com
[Tue Dec 09 14:51:13.401463 2025] [:error] [pid 12069:tid 12090] [client 45.138.16.233:59409] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG4WwNDNgPF6LHYDTaAgAAAFM"], referer: www.google.com
[Tue Dec 09 14:51:14.368910 2025] [:error] [pid 7287:tid 7313] [client 45.138.16.233:50461] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG4v3UQf3HGDaVS5P7aQAAABg"], referer: www.google.com
[Tue Dec 09 14:51:14.614780 2025] [:error] [pid 7324:tid 7333] [client 45.138.16.233:51205] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG4uf70zXc9zH4rTLSIwAAAUQ"], referer: www.google.com
[Tue Dec 09 14:51:15.581429 2025] [:error] [pid 12069:tid 12076] [client 45.138.16.233:64089] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG42wNDNgPF6LHYDTaEQAAAEU"], referer: www.google.com
[Tue Dec 09 14:51:15.807887 2025] [:error] [pid 7287:tid 7296] [client 45.138.16.233:50474] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG4_3UQf3HGDaVS5P7agAAAAc"], referer: www.google.com
[Tue Dec 09 14:51:16.786994 2025] [:error] [pid 7382:tid 7410] [client 45.138.16.233:59956] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG5CdEXhamGkzwq-gvjgAAAdA"], referer: www.google.com
[Tue Dec 09 14:51:16.996683 2025] [:error] [pid 12069:tid 12090] [client 45.138.16.233:61972] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfG5GwNDNgPF6LHYDTaGwAAAFM"], referer: www.google.com
[Tue Dec 09 14:51:17.978491 2025] [:error] [pid 7325:tid 7356] [client 45.138.16.233:61729] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfG5QqEQlZnpyQAsW1YKwAAAYA"], referer: www.google.com
[Tue Dec 09 15:04:26.063210 2025] [:error] [pid 12069:tid 12084] [client 103.77.106.81:52236] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aTfJ-mwNDNgPF6LHYDThngAAAE0"]
[Tue Dec 09 15:04:26.656242 2025] [:error] [pid 59388:tid 59393] [client 103.77.106.81:60056] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aTfJ-t7acjYK4IXwCBWpmwAAAIM"]
[Tue Dec 09 16:34:10.768354 2025] [:error] [pid 30591:tid 30597] [client 182.44.8.254:42365] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTffAhG-g76drVdWQUUo-wAAAEM"]
[Tue Dec 09 19:53:49.488253 2025] [:error] [pid 36456:tid 36458] [client 35.192.77.233:61174] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTgNzR0pAnOyfXl_v40dYwAAAIA"]
[Tue Dec 09 19:53:49.937087 2025] [:error] [pid 36456:tid 36467] [client 35.192.77.233:62965] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTgNzR0pAnOyfXl_v40ddQAAAIk"]
[Tue Dec 09 19:53:50.397705 2025] [:error] [pid 30591:tid 30615] [client 35.192.77.233:57856] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aTgNzhG-g76drVdWQUVtVgAAAFU"]
[Tue Dec 09 20:47:06.939351 2025] [:error] [pid 36456:tid 36479] [client 20.89.212.241:24855] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcd.php"] [unique_id "aTgaSh0pAnOyfXl_v40vsgAAAJU"]
[Tue Dec 09 20:47:08.574980 2025] [:error] [pid 30500:tid 30579] [client 20.89.212.241:12197] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcd.php"] [unique_id "aTgaTK2eIIK3JPWHCXXpzQAAAZY"]
[Tue Dec 09 20:47:09.302472 2025] [:error] [pid 30498:tid 30524] [client 20.89.212.241:12198] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcd.php"] [unique_id "aTgaTR2mcZJQ5qP_RC04hQAAABY"]
[Tue Dec 09 20:47:09.829990 2025] [:error] [pid 36456:tid 36477] [client 20.89.212.241:12076] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcd.php"] [unique_id "aTgaTR0pAnOyfXl_v40vuQAAAJM"]
[Tue Dec 09 20:47:10.692761 2025] [:error] [pid 30591:tid 30600] [client 20.89.212.241:7966] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wo.php"] [unique_id "aTgaThG-g76drVdWQUV_lgAAAEY"]
[Tue Dec 09 20:47:12.202782 2025] [:error] [pid 30591:tid 30594] [client 20.89.212.241:24560] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wo.php"] [unique_id "aTgaUBG-g76drVdWQUV_mAAAAEA"]
[Tue Dec 09 20:47:13.093944 2025] [:error] [pid 30591:tid 30596] [client 20.89.212.241:16896] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wo.php"] [unique_id "aTgaURG-g76drVdWQUV_nQAAAEI"]
[Tue Dec 09 20:47:13.624535 2025] [:error] [pid 30500:tid 30565] [client 20.89.212.241:26763] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wo.php"] [unique_id "aTgaUa2eIIK3JPWHCXXp1QAAAYg"]
[Tue Dec 09 20:47:14.504675 2025] [:error] [pid 5276:tid 5283] [client 20.89.212.241:16929] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/AxAo.php"] [unique_id "aTgaUktSXwbewdwyu-1y2gAAAMU"]
[Tue Dec 09 20:47:15.270457 2025] [:error] [pid 30591:tid 30597] [client 20.89.212.241:24266] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/AxAo.php"] [unique_id "aTgaUxG-g76drVdWQUV_ogAAAEM"]
[Tue Dec 09 20:47:16.920284 2025] [:error] [pid 5276:tid 5280] [client 20.89.212.241:12176] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/AxAo.php"] [unique_id "aTgaVEtSXwbewdwyu-1y3QAAAMI"]
[Tue Dec 09 20:47:17.592607 2025] [:error] [pid 30591:tid 30595] [client 20.89.212.241:12210] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/AxAo.php"] [unique_id "aTgaVRG-g76drVdWQUV_owAAAEE"]
[Tue Dec 09 20:47:18.304408 2025] [:error] [pid 30500:tid 30572] [client 20.89.212.241:20889] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmm.php"] [unique_id "aTgaVq2eIIK3JPWHCXXp3AAAAY8"]
[Tue Dec 09 20:47:18.984247 2025] [:error] [pid 30499:tid 30536] [client 20.89.212.241:7552] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmm.php"] [unique_id "aTgaVk0x3OqZTOPp7cn6oAAAAUY"]
[Tue Dec 09 20:47:19.779695 2025] [:error] [pid 30591:tid 30604] [client 20.89.212.241:12168] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmm.php"] [unique_id "aTgaVxG-g76drVdWQUV_pgAAAEo"]
[Tue Dec 09 20:47:21.124792 2025] [:error] [pid 36456:tid 36466] [client 20.89.212.241:20881] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmm.php"] [unique_id "aTgaWR0pAnOyfXl_v40vvAAAAIg"]
[Tue Dec 09 20:47:22.518511 2025] [:error] [pid 36456:tid 36480] [client 20.89.212.241:20898] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aTgaWh0pAnOyfXl_v40vvgAAAJY"]
[Tue Dec 09 20:47:23.406394 2025] [:error] [pid 36456:tid 36461] [client 20.89.212.241:7770] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aTgaWx0pAnOyfXl_v40vvwAAAIM"]
[Tue Dec 09 20:47:25.371978 2025] [:error] [pid 30500:tid 30572] [client 20.89.212.241:20913] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aTgaXa2eIIK3JPWHCXXp5QAAAY8"]
[Tue Dec 09 20:47:26.180843 2025] [:error] [pid 36456:tid 36476] [client 20.89.212.241:24805] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aTgaXh0pAnOyfXl_v40vwgAAAJI"]
[Tue Dec 09 20:47:27.364140 2025] [:error] [pid 5276:tid 5290] [client 20.89.212.241:17694] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTgaX0tSXwbewdwyu-1y6AAAAMw"]
[Tue Dec 09 20:47:28.066658 2025] [:error] [pid 5276:tid 5289] [client 20.89.212.241:12054] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTgaYEtSXwbewdwyu-1y6QAAAMs"]
[Tue Dec 09 20:47:29.340805 2025] [:error] [pid 30499:tid 30546] [client 20.89.212.241:17693] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTgaYU0x3OqZTOPp7cn6qgAAAVA"]
[Tue Dec 09 20:47:29.959985 2025] [:error] [pid 30500:tid 30580] [client 20.89.212.241:15620] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTgaYa2eIIK3JPWHCXXp6gAAAZc"]
[Tue Dec 09 20:47:32.015846 2025] [:error] [pid 30498:tid 30507] [client 20.89.212.241:24786] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aTgaZB2mcZJQ5qP_RC04jQAAAAU"]
[Tue Dec 09 20:47:32.841912 2025] [:error] [pid 36456:tid 36462] [client 20.89.212.241:13458] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aTgaZB0pAnOyfXl_v40vzwAAAIQ"]
[Tue Dec 09 20:47:33.297242 2025] [:error] [pid 5276:tid 5280] [client 20.89.212.241:46778] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aTgaZUtSXwbewdwyu-1y8wAAAMI"]
[Tue Dec 09 20:47:34.138464 2025] [:error] [pid 30498:tid 30517] [client 20.89.212.241:25800] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aTgaZh2mcZJQ5qP_RC04kQAAAA8"]
[Tue Dec 09 20:47:35.233142 2025] [:error] [pid 36456:tid 36467] [client 20.89.212.241:12399] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aTgaZx0pAnOyfXl_v40v5QAAAIk"]
[Tue Dec 09 20:47:35.685907 2025] [:error] [pid 30498:tid 30515] [client 20.89.212.241:25848] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aTgaZx2mcZJQ5qP_RC04kwAAAA0"]
[Tue Dec 09 20:47:36.360731 2025] [:error] [pid 30591:tid 30603] [client 20.89.212.241:15664] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aTgaaBG-g76drVdWQUV_qQAAAEk"]
[Tue Dec 09 20:47:37.202892 2025] [:error] [pid 30591:tid 30602] [client 20.89.212.241:17714] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aTgaaRG-g76drVdWQUV_qwAAAEg"]
[Tue Dec 09 20:47:37.989697 2025] [:error] [pid 30498:tid 30519] [client 20.89.212.241:25810] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTgaaR2mcZJQ5qP_RC04lQAAABE"]
[Tue Dec 09 20:47:38.905205 2025] [:error] [pid 30591:tid 30599] [client 20.89.212.241:12699] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTgaahG-g76drVdWQUV_rQAAAEU"]
[Tue Dec 09 20:47:40.058232 2025] [:error] [pid 5276:tid 5296] [client 20.89.212.241:46732] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTgabEtSXwbewdwyu-1zEQAAANI"]
[Tue Dec 09 20:47:40.691315 2025] [:error] [pid 30591:tid 30618] [client 20.89.212.241:12369] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTgabBG-g76drVdWQUV_sAAAAFg"]
[Tue Dec 09 20:47:41.708301 2025] [:error] [pid 30498:tid 30506] [client 20.89.212.241:15672] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.php"] [unique_id "aTgabR2mcZJQ5qP_RC04mgAAAAQ"]
[Tue Dec 09 20:47:42.464551 2025] [:error] [pid 36456:tid 36468] [client 20.89.212.241:26824] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.php"] [unique_id "aTgabh0pAnOyfXl_v40v8gAAAIo"]
[Tue Dec 09 20:47:43.308022 2025] [:error] [pid 36456:tid 36463] [client 20.89.212.241:8048] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.php"] [unique_id "aTgabx0pAnOyfXl_v40v8wAAAIU"]
[Tue Dec 09 20:47:45.074125 2025] [:error] [pid 36456:tid 36464] [client 20.89.212.241:21180] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.php"] [unique_id "aTgacR0pAnOyfXl_v40v9gAAAIY"]
[Tue Dec 09 20:47:45.989224 2025] [:error] [pid 30591:tid 30614] [client 20.89.212.241:8043] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aTgacRG-g76drVdWQUV_tQAAAFQ"]
[Tue Dec 09 20:47:47.006833 2025] [:error] [pid 30591:tid 30603] [client 20.89.212.241:8028] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aTgacxG-g76drVdWQUV_tgAAAEk"]
[Tue Dec 09 20:47:49.757509 2025] [:error] [pid 30500:tid 30575] [client 20.89.212.241:53930] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aTgada2eIIK3JPWHCXXp8AAAAZI"]
[Tue Dec 09 20:47:50.438416 2025] [:error] [pid 30500:tid 30579] [client 20.89.212.241:12395] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aTgadq2eIIK3JPWHCXXp8QAAAZY"]
[Tue Dec 09 20:47:51.149341 2025] [:error] [pid 30500:tid 30577] [client 20.89.212.241:53909] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aTgad62eIIK3JPWHCXXp8wAAAZQ"]
[Tue Dec 09 20:47:52.166024 2025] [:error] [pid 30591:tid 30618] [client 20.89.212.241:21143] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aTgaeBG-g76drVdWQUV_uwAAAFg"]
[Tue Dec 09 20:47:54.420586 2025] [:error] [pid 30500:tid 30559] [client 20.89.212.241:14277] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aTgaeq2eIIK3JPWHCXXp-AAAAYI"]
[Tue Dec 09 20:47:55.734028 2025] [:error] [pid 30500:tid 30564] [client 20.89.212.241:32919] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aTgae62eIIK3JPWHCXXp-gAAAYc"]
[Tue Dec 09 20:47:57.310923 2025] [:error] [pid 30498:tid 30503] [client 20.89.212.241:53892] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aTgafR2mcZJQ5qP_RC04oQAAAAE"]
[Tue Dec 09 20:47:58.460029 2025] [:error] [pid 30498:tid 30512] [client 20.89.212.241:14537] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aTgafh2mcZJQ5qP_RC04ogAAAAo"]
[Tue Dec 09 20:47:58.961645 2025] [:error] [pid 30498:tid 30502] [client 193.36.225.90:63789] [client 193.36.225.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.90, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTgafh2mcZJQ5qP_RC04owAAAAA"]
[Tue Dec 09 20:47:59.202297 2025] [:error] [pid 5276:tid 5286] [client 20.89.212.241:17215] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aTgaf0tSXwbewdwyu-1zFwAAAMg"]
[Tue Dec 09 20:47:59.872603 2025] [:error] [pid 5276:tid 5290] [client 20.89.212.241:18953] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aTgaf0tSXwbewdwyu-1zGAAAAMw"]
[Tue Dec 09 20:48:00.779293 2025] [:error] [pid 5276:tid 5285] [client 20.89.212.241:25026] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aTgagEtSXwbewdwyu-1zGQAAAMc"]
[Tue Dec 09 20:48:01.790260 2025] [:error] [pid 30498:tid 30513] [client 20.89.212.241:13227] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aTgagR2mcZJQ5qP_RC04pAAAAAs"]
[Tue Dec 09 20:48:02.501714 2025] [:error] [pid 36456:tid 36462] [client 20.89.212.241:12940] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aTgagh0pAnOyfXl_v40v_QAAAIQ"]
[Tue Dec 09 20:48:03.604484 2025] [:error] [pid 30499:tid 30535] [client 20.89.212.241:25318] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aTgag00x3OqZTOPp7cn6yQAAAUU"]
[Tue Dec 09 20:48:04.642989 2025] [:error] [pid 30499:tid 30549] [client 20.89.212.241:18949] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aTgahE0x3OqZTOPp7cn6ygAAAVM"]
[Tue Dec 09 20:48:05.489031 2025] [:error] [pid 36456:tid 36467] [client 20.89.212.241:22620] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aTgahR0pAnOyfXl_v40v_gAAAIk"]
[Tue Dec 09 20:48:10.437986 2025] [:error] [pid 36456:tid 36460] [client 20.89.212.241:20889] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aTgaih0pAnOyfXl_v40wCwAAAII"]
[Tue Dec 09 20:48:11.007209 2025] [:error] [pid 30498:tid 30514] [client 20.89.212.241:20042] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aTgaix2mcZJQ5qP_RC04qwAAAAw"]
[Tue Dec 09 20:48:11.632888 2025] [:error] [pid 5276:tid 5298] [client 20.89.212.241:16845] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aTgai0tSXwbewdwyu-1zKgAAANQ"]
[Tue Dec 09 20:48:13.377142 2025] [:error] [pid 30500:tid 30565] [client 20.89.212.241:12442] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aTgaja2eIIK3JPWHCXXqCgAAAYg"]
[Tue Dec 09 20:48:14.524685 2025] [:error] [pid 36456:tid 36465] [client 20.89.212.241:27695] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aTgajh0pAnOyfXl_v40wDgAAAIc"]
[Tue Dec 09 20:48:15.629254 2025] [:error] [pid 30591:tid 30602] [client 20.89.212.241:14581] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aTgajxG-g76drVdWQUV_3gAAAEg"]
[Tue Dec 09 20:48:16.409758 2025] [:error] [pid 30499:tid 30541] [client 20.89.212.241:27084] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aTgakE0x3OqZTOPp7cn6zAAAAUs"]
[Tue Dec 09 20:48:17.054762 2025] [:error] [pid 30498:tid 30502] [client 20.89.212.241:22617] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aTgakR2mcZJQ5qP_RC04sAAAAAA"]
[Tue Dec 09 20:48:17.647424 2025] [:error] [pid 30499:tid 30551] [client 20.89.212.241:16873] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aTgakU0x3OqZTOPp7cn6zQAAAVU"]
[Tue Dec 09 20:48:18.247230 2025] [:error] [pid 36456:tid 36461] [client 20.89.212.241:22639] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aTgakh0pAnOyfXl_v40wDwAAAIM"]
[Tue Dec 09 20:48:19.621115 2025] [:error] [pid 30499:tid 30534] [client 20.89.212.241:22635] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aTgak00x3OqZTOPp7cn6zwAAAUQ"]
[Tue Dec 09 20:48:20.395382 2025] [:error] [pid 30499:tid 30552] [client 20.89.212.241:14535] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aTgalE0x3OqZTOPp7cn60QAAAVY"]
[Tue Dec 09 20:48:21.241248 2025] [:error] [pid 30498:tid 30508] [client 20.89.212.241:14054] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTgalR2mcZJQ5qP_RC04sQAAAAY"]
[Tue Dec 09 20:48:22.199246 2025] [:error] [pid 30500:tid 30572] [client 20.89.212.241:8191] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTgalq2eIIK3JPWHCXXqFQAAAY8"]
[Tue Dec 09 20:48:23.545782 2025] [:error] [pid 30498:tid 30526] [client 20.89.212.241:14059] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTgalx2mcZJQ5qP_RC04sgAAABg"]
[Tue Dec 09 20:48:24.216393 2025] [:error] [pid 30591:tid 30595] [client 20.89.212.241:20143] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTgamBG-g76drVdWQUV_5wAAAEE"]
[Tue Dec 09 20:48:25.650252 2025] [:error] [pid 30500:tid 30573] [client 20.89.212.241:7460] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aTgama2eIIK3JPWHCXXqIQAAAZA"]
[Tue Dec 09 20:48:27.574110 2025] [:error] [pid 30591:tid 30599] [client 20.89.212.241:14589] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aTgamxG-g76drVdWQUV_7AAAAEU"]
[Tue Dec 09 20:48:29.810009 2025] [:error] [pid 30591:tid 30609] [client 20.89.212.241:12872] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aTganRG-g76drVdWQUV_8QAAAE8"]
[Tue Dec 09 20:48:30.653391 2025] [:error] [pid 36456:tid 36472] [client 20.89.212.241:22610] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aTganh0pAnOyfXl_v40wFgAAAI4"]
[Tue Dec 09 20:48:32.167492 2025] [:error] [pid 36456:tid 36461] [client 20.89.212.241:18464] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTgaoB0pAnOyfXl_v40wGgAAAIM"]
[Tue Dec 09 20:48:33.106506 2025] [:error] [pid 5276:tid 5279] [client 20.89.212.241:7853] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTgaoUtSXwbewdwyu-1zOAAAAME"]
[Tue Dec 09 20:48:33.833599 2025] [:error] [pid 36456:tid 36462] [client 20.89.212.241:7350] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTgaoR0pAnOyfXl_v40wHAAAAIQ"]
[Tue Dec 09 20:48:35.350406 2025] [:error] [pid 36456:tid 36467] [client 20.89.212.241:13836] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTgaox0pAnOyfXl_v40wHQAAAIk"]
[Tue Dec 09 20:48:36.272696 2025] [:error] [pid 30499:tid 30536] [client 20.89.212.241:26590] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTgapE0x3OqZTOPp7cn62wAAAUY"]
[Tue Dec 09 20:48:37.830864 2025] [:error] [pid 30500:tid 30563] [client 20.89.212.241:26572] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTgapa2eIIK3JPWHCXXqMAAAAYY"]
[Tue Dec 09 20:48:38.941272 2025] [:error] [pid 5276:tid 5290] [client 20.89.212.241:14023] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTgapktSXwbewdwyu-1zPgAAAMw"]
[Tue Dec 09 20:48:40.020234 2025] [:error] [pid 30500:tid 30570] [client 20.89.212.241:13857] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTgaqK2eIIK3JPWHCXXqNQAAAY0"]
[Tue Dec 09 20:48:41.686584 2025] [:error] [pid 30498:tid 30512] [client 20.89.212.241:18474] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aTgaqR2mcZJQ5qP_RC04vQAAAAo"]
[Tue Dec 09 20:48:43.464494 2025] [:error] [pid 30499:tid 30550] [client 20.89.212.241:18480] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aTgaq00x3OqZTOPp7cn66QAAAVQ"]
[Tue Dec 09 20:48:44.652127 2025] [:error] [pid 30500:tid 30568] [client 20.89.212.241:8142] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aTgarK2eIIK3JPWHCXXqOwAAAYs"]
[Tue Dec 09 20:48:45.676291 2025] [:error] [pid 30498:tid 30514] [client 20.89.212.241:33535] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aTgarR2mcZJQ5qP_RC04vwAAAAw"]
[Tue Dec 09 20:48:46.249174 2025] [:error] [pid 30500:tid 30563] [client 20.89.212.241:7818] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTgarq2eIIK3JPWHCXXqPAAAAYY"]
[Tue Dec 09 20:48:47.154908 2025] [:error] [pid 5276:tid 5294] [client 20.89.212.241:12867] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTgar0tSXwbewdwyu-1zRgAAANA"]
[Tue Dec 09 20:48:52.813069 2025] [:error] [pid 30499:tid 30530] [client 20.89.212.241:7338] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTgatE0x3OqZTOPp7cn69AAAAUA"]
[Tue Dec 09 20:48:54.179671 2025] [:error] [pid 30498:tid 30503] [client 20.89.212.241:12864] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTgath2mcZJQ5qP_RC04xAAAAAE"]
[Tue Dec 09 20:48:57.460169 2025] [:error] [pid 30499:tid 30553] [client 20.89.212.241:18463] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTgauU0x3OqZTOPp7cn6-AAAAVc"]
[Tue Dec 09 20:48:58.479564 2025] [:error] [pid 5276:tid 5292] [client 20.89.212.241:7860] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTgauktSXwbewdwyu-1zUAAAAM4"]
[Tue Dec 09 20:48:59.182001 2025] [:error] [pid 5276:tid 5298] [client 20.89.212.241:37219] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTgau0tSXwbewdwyu-1zUQAAANQ"]
[Tue Dec 09 20:49:00.368884 2025] [:error] [pid 5276:tid 5286] [client 20.89.212.241:7306] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTgavEtSXwbewdwyu-1zVQAAAMg"]
[Tue Dec 09 20:49:01.427579 2025] [:error] [pid 5276:tid 5281] [client 20.89.212.241:37197] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aTgavUtSXwbewdwyu-1zVwAAAMM"]
[Tue Dec 09 20:49:02.251901 2025] [:error] [pid 30498:tid 30521] [client 20.89.212.241:18414] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aTgavh2mcZJQ5qP_RC04ygAAABM"]
[Tue Dec 09 20:49:03.959482 2025] [:error] [pid 36456:tid 36459] [client 20.89.212.241:37202] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aTgavx0pAnOyfXl_v40wLwAAAIE"]
[Tue Dec 09 20:49:05.022513 2025] [:error] [pid 30498:tid 30515] [client 20.89.212.241:12125] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aTgawR2mcZJQ5qP_RC04zgAAAA0"]
[Tue Dec 09 20:49:06.551415 2025] [:error] [pid 30591:tid 30605] [client 20.89.212.241:7546] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTgawhG-g76drVdWQUWAGAAAAEs"]
[Tue Dec 09 20:49:07.585169 2025] [:error] [pid 30591:tid 30599] [client 20.89.212.241:21909] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTgawxG-g76drVdWQUWAGgAAAEU"]
[Tue Dec 09 20:49:09.619476 2025] [:error] [pid 30499:tid 30548] [client 20.89.212.241:21906] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTgaxU0x3OqZTOPp7cn6_wAAAVI"]
[Tue Dec 09 20:49:13.106705 2025] [:error] [pid 30591:tid 30611] [client 20.89.212.241:18424] [client 20.89.212.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTgayRG-g76drVdWQUWAKQAAAFE"]
[Tue Dec 09 20:49:17.440144 2025] [:error] [pid 30500:tid 30575] [client 20.89.212.241:7489] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTgaza2eIIK3JPWHCXXqXgAAAZI"]
[Tue Dec 09 20:49:18.675052 2025] [:error] [pid 30499:tid 30537] [client 20.89.212.241:33500] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTgazk0x3OqZTOPp7cn7CwAAAUc"]
[Tue Dec 09 20:49:19.749409 2025] [:error] [pid 30498:tid 30514] [client 20.89.212.241:13673] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTgazx2mcZJQ5qP_RC045wAAAAw"]
[Tue Dec 09 20:49:20.298269 2025] [:error] [pid 30499:tid 30534] [client 20.89.212.241:37236] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTga0E0x3OqZTOPp7cn7DwAAAUQ"]
[Tue Dec 09 20:49:21.546045 2025] [:error] [pid 30498:tid 30505] [client 20.89.212.241:54331] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTga0R2mcZJQ5qP_RC046AAAAAM"]
[Tue Dec 09 20:49:22.846117 2025] [:error] [pid 5276:tid 5295] [client 20.89.212.241:12146] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTga0ktSXwbewdwyu-1zYQAAANE"]
[Tue Dec 09 20:49:24.033898 2025] [:error] [pid 30499:tid 30553] [client 20.89.212.241:7320] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTga1E0x3OqZTOPp7cn7EAAAAVc"]
[Tue Dec 09 20:49:25.082294 2025] [:error] [pid 30591:tid 30602] [client 20.89.212.241:7520] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTga1RG-g76drVdWQUWARgAAAEg"]
[Tue Dec 09 20:49:25.610820 2025] [:error] [pid 30499:tid 30541] [client 20.89.212.241:13642] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aTga1U0x3OqZTOPp7cn7FAAAAUs"]
[Tue Dec 09 20:49:28.656419 2025] [:error] [pid 36456:tid 36474] [client 20.89.212.241:23387] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aTga2B0pAnOyfXl_v40wPAAAAJA"]
[Tue Dec 09 20:49:29.692749 2025] [:error] [pid 30500:tid 30566] [client 20.89.212.241:21895] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aTga2a2eIIK3JPWHCXXqdAAAAYk"]
[Tue Dec 09 20:49:32.652870 2025] [:error] [pid 30499:tid 30537] [client 20.89.212.241:12145] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aTga3E0x3OqZTOPp7cn7IAAAAUc"]
[Tue Dec 09 20:49:35.352295 2025] [:error] [pid 30499:tid 30548] [client 20.89.212.241:23031] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTga300x3OqZTOPp7cn7KQAAAVI"]
[Tue Dec 09 20:49:36.252713 2025] [:error] [pid 36456:tid 36470] [client 20.89.212.241:32896] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTga4B0pAnOyfXl_v40wPQAAAIw"]
[Tue Dec 09 20:49:37.094834 2025] [:error] [pid 30498:tid 30515] [client 20.89.212.241:7205] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTga4R2mcZJQ5qP_RC048QAAAA0"]
[Tue Dec 09 20:49:37.921292 2025] [:error] [pid 30591:tid 30609] [client 20.89.212.241:23463] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTga4RG-g76drVdWQUWATQAAAE8"]
[Tue Dec 09 20:49:38.825054 2025] [:error] [pid 36456:tid 36481] [client 20.89.212.241:32918] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTga4h0pAnOyfXl_v40wPwAAAJc"]
[Tue Dec 09 20:49:39.737565 2025] [:error] [pid 30591:tid 30597] [client 20.89.212.241:23024] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTga4xG-g76drVdWQUWAUQAAAEM"]
[Tue Dec 09 20:49:40.869159 2025] [:error] [pid 30500:tid 30557] [client 20.89.212.241:23391] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTga5K2eIIK3JPWHCXXqeQAAAYA"]
[Tue Dec 09 20:49:42.086887 2025] [:error] [pid 36456:tid 36465] [client 20.89.212.241:23032] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTga5h0pAnOyfXl_v40wQwAAAIc"]
[Tue Dec 09 20:49:43.344596 2025] [:error] [pid 30500:tid 30571] [client 20.89.212.241:23482] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aTga562eIIK3JPWHCXXqewAAAY4"]
[Tue Dec 09 20:49:44.261521 2025] [:error] [pid 30500:tid 30566] [client 20.89.212.241:26353] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aTga6K2eIIK3JPWHCXXqfgAAAYk"]
[Tue Dec 09 20:49:45.608785 2025] [:error] [pid 30500:tid 30558] [client 20.89.212.241:26324] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aTga6a2eIIK3JPWHCXXqgAAAAYE"]
[Tue Dec 09 20:49:47.006766 2025] [:error] [pid 30498:tid 30525] [client 20.89.212.241:24052] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aTga6x2mcZJQ5qP_RC049gAAABc"]
[Tue Dec 09 20:49:48.011043 2025] [:error] [pid 30498:tid 30502] [client 20.89.212.241:22311] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTga7B2mcZJQ5qP_RC049wAAAAA"]
[Tue Dec 09 20:49:51.044645 2025] [:error] [pid 5276:tid 5294] [client 20.89.212.241:24002] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTga70tSXwbewdwyu-1zZwAAANA"]
[Tue Dec 09 20:49:51.691363 2025] [:error] [pid 5276:tid 5287] [client 20.89.212.241:22980] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTga70tSXwbewdwyu-1zaAAAAMk"]
[Tue Dec 09 20:49:53.151921 2025] [:error] [pid 30500:tid 30580] [client 20.89.212.241:24051] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTga8a2eIIK3JPWHCXXqgQAAAZc"]
[Tue Dec 09 20:49:54.407444 2025] [:error] [pid 5276:tid 5279] [client 20.89.212.241:23378] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTga8ktSXwbewdwyu-1zbQAAAME"]
[Tue Dec 09 20:49:55.313488 2025] [:error] [pid 36456:tid 36482] [client 20.89.212.241:22280] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTga8x0pAnOyfXl_v40wSQAAAJg"]
[Tue Dec 09 20:49:57.567734 2025] [:error] [pid 30591:tid 30608] [client 20.89.212.241:57935] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTga9RG-g76drVdWQUWAYQAAAE4"]
[Tue Dec 09 20:49:58.791522 2025] [:error] [pid 30500:tid 30572] [client 20.89.212.241:46718] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTga9q2eIIK3JPWHCXXqhAAAAY8"]
[Tue Dec 09 20:50:00.995522 2025] [:error] [pid 30500:tid 30576] [client 20.89.212.241:17973] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTga-K2eIIK3JPWHCXXqhgAAAZM"]
[Tue Dec 09 20:50:02.064815 2025] [:error] [pid 30591:tid 30605] [client 20.89.212.241:23810] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTga-hG-g76drVdWQUWAaAAAAEs"]
[Tue Dec 09 20:50:05.180172 2025] [:error] [pid 30591:tid 30610] [client 20.89.212.241:57356] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTga_RG-g76drVdWQUWAawAAAFA"]
[Tue Dec 09 20:50:06.691829 2025] [:error] [pid 30591:tid 30618] [client 20.89.212.241:19027] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTga_hG-g76drVdWQUWAbgAAAFg"]
[Tue Dec 09 20:50:10.721990 2025] [:error] [pid 36456:tid 36473] [client 20.89.212.241:15403] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTgbAh0pAnOyfXl_v40wUgAAAI8"]
[Tue Dec 09 20:50:11.617816 2025] [:error] [pid 30499:tid 30550] [client 20.89.212.241:23758] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTgbA00x3OqZTOPp7cn7RAAAAVQ"]
[Tue Dec 09 20:50:14.569368 2025] [:error] [pid 36456:tid 36476] [client 20.89.212.241:19011] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTgbBh0pAnOyfXl_v40wVQAAAJI"]
[Tue Dec 09 20:50:15.483207 2025] [:error] [pid 36456:tid 36462] [client 20.89.212.241:33544] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTgbBx0pAnOyfXl_v40wWQAAAIQ"]
[Tue Dec 09 20:50:16.649229 2025] [:error] [pid 30498:tid 30505] [client 20.89.212.241:33545] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTgbCB2mcZJQ5qP_RC05AQAAAAM"]
[Tue Dec 09 20:50:22.513503 2025] [:error] [pid 30500:tid 30574] [client 20.89.212.241:18206] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTgbDq2eIIK3JPWHCXXqrgAAAZE"]
[Tue Dec 09 20:50:24.140518 2025] [:error] [pid 30591:tid 30596] [client 20.89.212.241:7719] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTgbEBG-g76drVdWQUWAcgAAAEI"]
[Tue Dec 09 20:50:25.006063 2025] [:error] [pid 30499:tid 30545] [client 20.89.212.241:33558] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTgbEU0x3OqZTOPp7cn7hwAAAU8"]
[Tue Dec 09 20:50:25.785922 2025] [:error] [pid 30499:tid 30532] [client 20.89.212.241:15110] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTgbEU0x3OqZTOPp7cn7iAAAAUI"]
[Tue Dec 09 20:50:26.675794 2025] [:error] [pid 30499:tid 30534] [client 20.89.212.241:21461] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aTgbEk0x3OqZTOPp7cn7iQAAAUQ"]
[Tue Dec 09 20:50:27.469756 2025] [:error] [pid 30499:tid 30540] [client 20.89.212.241:15144] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aTgbE00x3OqZTOPp7cn7igAAAUo"]
[Tue Dec 09 20:50:28.607314 2025] [:error] [pid 30500:tid 30575] [client 20.89.212.241:12665] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aTgbFK2eIIK3JPWHCXXquwAAAZI"]
[Tue Dec 09 20:50:29.810983 2025] [:error] [pid 30498:tid 30521] [client 20.89.212.241:15136] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aTgbFR2mcZJQ5qP_RC05BQAAABM"]
[Tue Dec 09 20:50:31.060766 2025] [:error] [pid 30498:tid 30518] [client 20.89.212.241:33592] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aTgbFx2mcZJQ5qP_RC05CwAAABA"]
[Tue Dec 09 20:50:31.833970 2025] [:error] [pid 30498:tid 30510] [client 20.89.212.241:12611] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aTgbFx2mcZJQ5qP_RC05DAAAAAg"]
[Tue Dec 09 20:50:32.806206 2025] [:error] [pid 5276:tid 5285] [client 20.89.212.241:33549] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aTgbGEtSXwbewdwyu-1zfQAAAMc"]
[Tue Dec 09 20:50:33.906275 2025] [:error] [pid 5276:tid 5292] [client 20.89.212.241:33588] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aTgbGUtSXwbewdwyu-1zfgAAAM4"]
[Tue Dec 09 20:50:35.173057 2025] [:error] [pid 30500:tid 30580] [client 20.89.212.241:7372] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTgbG62eIIK3JPWHCXXqygAAAZc"]
[Tue Dec 09 20:50:36.104511 2025] [:error] [pid 30500:tid 30578] [client 20.89.212.241:18229] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTgbHK2eIIK3JPWHCXXqzgAAAZU"]
[Tue Dec 09 20:50:37.277336 2025] [:error] [pid 30498:tid 30514] [client 20.89.212.241:21459] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTgbHR2mcZJQ5qP_RC05DgAAAAw"]
[Tue Dec 09 20:50:38.492961 2025] [:error] [pid 30499:tid 30554] [client 20.89.212.241:22228] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aTgbHk0x3OqZTOPp7cn7jAAAAVg"]
[Tue Dec 09 20:50:40.704515 2025] [:error] [pid 30499:tid 30551] [client 20.89.212.241:21108] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTgbIE0x3OqZTOPp7cn7jgAAAVU"]
[Tue Dec 09 20:50:41.707490 2025] [:error] [pid 30499:tid 30548] [client 20.89.212.241:22246] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTgbIU0x3OqZTOPp7cn7jwAAAVI"]
[Tue Dec 09 20:50:42.821783 2025] [:error] [pid 30500:tid 30560] [client 20.89.212.241:22222] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTgbIq2eIIK3JPWHCXXq4AAAAYM"]
[Tue Dec 09 20:50:43.967874 2025] [:error] [pid 30499:tid 30542] [client 20.89.212.241:21083] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aTgbI00x3OqZTOPp7cn7kQAAAUw"]
[Tue Dec 09 20:50:44.706217 2025] [:error] [pid 30499:tid 30545] [client 20.89.212.241:21869] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTgbJE0x3OqZTOPp7cn7kgAAAU8"]
[Tue Dec 09 20:50:46.389376 2025] [:error] [pid 36456:tid 36463] [client 20.89.212.241:12621] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTgbJh0pAnOyfXl_v40wbAAAAIU"]
[Tue Dec 09 20:50:47.816765 2025] [:error] [pid 30500:tid 30569] [client 20.89.212.241:18120] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTgbJ62eIIK3JPWHCXXq5gAAAYw"]
[Tue Dec 09 20:50:48.544791 2025] [:error] [pid 30499:tid 30552] [client 20.89.212.241:13394] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTgbKE0x3OqZTOPp7cn7lQAAAVY"]
[Tue Dec 09 20:50:49.193091 2025] [:error] [pid 36456:tid 36458] [client 20.89.212.241:13422] [client 20.89.212.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTgbKR0pAnOyfXl_v40wbgAAAIA"]
[Tue Dec 09 20:50:50.448508 2025] [:error] [pid 30499:tid 30540] [client 20.89.212.241:18156] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aTgbKk0x3OqZTOPp7cn7mwAAAUo"]
[Tue Dec 09 20:50:51.008300 2025] [:error] [pid 36456:tid 36480] [client 20.89.212.241:16152] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aTgbKx0pAnOyfXl_v40wbwAAAJY"]
[Tue Dec 09 20:50:53.368996 2025] [:error] [pid 30500:tid 30563] [client 20.89.212.241:7281] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aTgbLa2eIIK3JPWHCXXq6AAAAYY"]
[Tue Dec 09 20:50:54.000000 2025] [:error] [pid 30499:tid 30546] [client 20.89.212.241:16170] [client 20.89.212.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aTgbLU0x3OqZTOPp7cn7ngAAAVA"]
[Tue Dec 09 20:50:55.616292 2025] [:error] [pid 5276:tid 5301] [client 20.89.212.241:21099] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTgbL0tSXwbewdwyu-1zhwAAANc"]
[Tue Dec 09 20:50:57.135667 2025] [:error] [pid 30500:tid 30573] [client 20.89.212.241:27055] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTgbMa2eIIK3JPWHCXXq7wAAAZA"]
[Tue Dec 09 20:51:01.326485 2025] [:error] [pid 36456:tid 36478] [client 20.89.212.241:37151] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTgbNR0pAnOyfXl_v40wcgAAAJQ"]
[Tue Dec 09 20:51:02.635578 2025] [:error] [pid 30498:tid 30504] [client 20.89.212.241:17358] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTgbNh2mcZJQ5qP_RC05GAAAAAI"]
[Tue Dec 09 20:51:03.028423 2025] [:error] [pid 30500:tid 30572] [client 20.89.212.241:19152] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTgbN62eIIK3JPWHCXXq9wAAAY8"]
[Tue Dec 09 20:51:03.808934 2025] [:error] [pid 30500:tid 30571] [client 20.89.212.241:26249] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTgbN62eIIK3JPWHCXXq-gAAAY4"]
[Tue Dec 09 20:51:05.777236 2025] [:error] [pid 36456:tid 36475] [client 20.89.212.241:26557] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTgbOR0pAnOyfXl_v40wdwAAAJE"]
[Tue Dec 09 20:51:08.248459 2025] [:error] [pid 30498:tid 30507] [client 20.89.212.241:15923] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTgbPB2mcZJQ5qP_RC05HAAAAAU"]
[Tue Dec 09 20:51:10.081112 2025] [:error] [pid 30499:tid 30536] [client 20.89.212.241:44194] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTgbPk0x3OqZTOPp7cn7rAAAAUY"]
[Tue Dec 09 20:51:10.793738 2025] [:error] [pid 30500:tid 30570] [client 20.89.212.241:19193] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTgbPq2eIIK3JPWHCXXrCQAAAY0"]
[Tue Dec 09 20:51:13.362818 2025] [:error] [pid 5276:tid 5288] [client 20.89.212.241:19325] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTgbQUtSXwbewdwyu-1zlQAAAMo"]
[Tue Dec 09 20:51:14.074399 2025] [:error] [pid 5276:tid 5285] [client 20.89.212.241:16616] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTgbQktSXwbewdwyu-1zlwAAAMc"]
[Tue Dec 09 20:51:15.528905 2025] [:error] [pid 30591:tid 30615] [client 20.89.212.241:24882] [client 20.89.212.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aTgbQxG-g76drVdWQUWAhQAAAFU"]
[Tue Dec 09 20:51:16.886592 2025] [:error] [pid 5276:tid 5283] [client 20.89.212.241:14110] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTgbREtSXwbewdwyu-1znwAAAMU"]
[Tue Dec 09 20:51:17.537736 2025] [:error] [pid 36456:tid 36480] [client 20.89.212.241:14099] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTgbRR0pAnOyfXl_v40wgwAAAJY"]
[Tue Dec 09 20:51:18.164084 2025] [:error] [pid 5276:tid 5287] [client 20.89.212.241:7556] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTgbRktSXwbewdwyu-1zoQAAAMk"]
[Tue Dec 09 20:51:19.452655 2025] [:error] [pid 30498:tid 30522] [client 20.89.212.241:20487] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTgbRx2mcZJQ5qP_RC05JQAAABQ"]
[Tue Dec 09 20:51:21.555289 2025] [:error] [pid 30499:tid 30550] [client 20.89.212.241:7600] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aTgbSU0x3OqZTOPp7cn7swAAAVQ"]
[Tue Dec 09 20:51:23.398524 2025] [:error] [pid 30499:tid 30549] [client 20.89.212.241:18624] [client 20.89.212.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aTgbS00x3OqZTOPp7cn7vAAAAVM"]
[Tue Dec 09 20:51:27.779278 2025] [proxy_fcgi:error] [pid 5276:tid 5301] [client 20.89.212.241:18649] AH01071: Got error 'Primary script unknown'
[Tue Dec 09 20:51:29.584305 2025] [:error] [pid 5276:tid 5279] [client 20.89.212.241:18649] [client 20.89.212.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTgbUUtSXwbewdwyu-1ztgAAAME"]
[Tue Dec 09 20:51:30.751947 2025] [:error] [pid 30499:tid 30546] [client 20.89.212.241:23068] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTgbUk0x3OqZTOPp7cn7zgAAAVA"]
[Tue Dec 09 20:51:31.644540 2025] [:error] [pid 30498:tid 30522] [client 20.89.212.241:23721] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTgbUx2mcZJQ5qP_RC05LQAAABQ"]
[Tue Dec 09 20:51:32.727521 2025] [:error] [pid 36456:tid 36479] [client 20.89.212.241:20484] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTgbVB0pAnOyfXl_v40wkAAAAJU"]
[Tue Dec 09 20:51:34.935921 2025] [:error] [pid 36456:tid 36475] [client 20.89.212.241:13149] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTgbVh0pAnOyfXl_v40wkgAAAJE"]
[Tue Dec 09 20:51:35.939060 2025] [:error] [pid 30498:tid 30514] [client 20.89.212.241:24284] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTgbVx2mcZJQ5qP_RC05NAAAAAw"]
[Tue Dec 09 20:51:40.592120 2025] [:error] [pid 30500:tid 30576] [client 20.89.212.241:25496] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTgbXK2eIIK3JPWHCXXrNgAAAZM"]
[Tue Dec 09 20:51:41.113369 2025] [:error] [pid 30499:tid 30544] [client 20.89.212.241:25318] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTgbXU0x3OqZTOPp7cn72gAAAU4"]
[Tue Dec 09 20:51:42.216511 2025] [:error] [pid 30499:tid 30535] [client 20.89.212.241:24081] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTgbXk0x3OqZTOPp7cn73QAAAUU"]
[Tue Dec 09 20:51:43.572773 2025] [:error] [pid 36456:tid 36472] [client 20.89.212.241:24349] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTgbXx0pAnOyfXl_v40woAAAAI4"]
[Tue Dec 09 20:51:44.477314 2025] [:error] [pid 30498:tid 30517] [client 20.89.212.241:7757] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTgbYB2mcZJQ5qP_RC05TgAAAA8"]
[Tue Dec 09 20:51:46.137205 2025] [:error] [pid 30591:tid 30618] [client 20.89.212.241:24382] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTgbYhG-g76drVdWQUWAmQAAAFg"]
[Tue Dec 09 20:51:47.121174 2025] [:error] [pid 30500:tid 30569] [client 20.89.212.241:7749] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTgbY62eIIK3JPWHCXXrSgAAAYw"]
[Tue Dec 09 20:51:49.581886 2025] [:error] [pid 36456:tid 36480] [client 20.89.212.241:17699] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTgbZR0pAnOyfXl_v40wqgAAAJY"]
[Tue Dec 09 20:51:50.429411 2025] [:error] [pid 30591:tid 30616] [client 20.89.212.241:20882] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTgbZhG-g76drVdWQUWAngAAAFY"]
[Tue Dec 09 20:51:51.062669 2025] [:error] [pid 30499:tid 30533] [client 20.89.212.241:15346] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTgbZ00x3OqZTOPp7cn76gAAAUM"]
[Tue Dec 09 20:51:52.154501 2025] [:error] [pid 36456:tid 36462] [client 20.89.212.241:20840] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTgbaB0pAnOyfXl_v40wrwAAAIQ"]
[Tue Dec 09 20:51:53.292778 2025] [:error] [pid 30591:tid 30609] [client 20.89.212.241:15330] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTgbaRG-g76drVdWQUWAogAAAE8"]
[Tue Dec 09 20:51:54.278155 2025] [:error] [pid 30499:tid 30531] [client 20.89.212.241:20913] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTgbak0x3OqZTOPp7cn78wAAAUE"]
[Tue Dec 09 20:51:55.407265 2025] [:error] [pid 30591:tid 30602] [client 20.89.212.241:12413] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTgbaxG-g76drVdWQUWAqwAAAEg"]
[Tue Dec 09 20:51:57.616220 2025] [:error] [pid 30499:tid 30545] [client 20.89.212.241:20915] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTgbbU0x3OqZTOPp7cn79QAAAU8"]
[Tue Dec 09 20:51:59.529425 2025] [:error] [pid 30498:tid 30515] [client 20.89.212.241:19666] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aTgbbx2mcZJQ5qP_RC05VgAAAA0"]
[Tue Dec 09 20:52:00.591257 2025] [:error] [pid 30498:tid 30519] [client 20.89.212.241:17973] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aTgbcB2mcZJQ5qP_RC05VwAAABE"]
[Tue Dec 09 20:52:02.659121 2025] [:error] [pid 30591:tid 30610] [client 20.89.212.241:12166] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aTgbchG-g76drVdWQUWAxAAAAFA"]
[Tue Dec 09 20:52:04.756101 2025] [:error] [pid 30591:tid 30618] [client 20.89.212.241:46720] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aTgbdBG-g76drVdWQUWAyAAAAFg"]
[Tue Dec 09 20:52:05.890715 2025] [:error] [pid 5276:tid 5301] [client 20.89.212.241:7918] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aTgbdUtSXwbewdwyu-1z4gAAANc"]
[Tue Dec 09 20:52:06.541242 2025] [:error] [pid 30498:tid 30526] [client 20.89.212.241:19693] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aTgbdh2mcZJQ5qP_RC05ZQAAABg"]
[Tue Dec 09 20:52:09.246130 2025] [:error] [pid 30499:tid 30550] [client 20.89.212.241:12189] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aTgbeU0x3OqZTOPp7cn8DwAAAVQ"]
[Tue Dec 09 20:52:09.938957 2025] [:error] [pid 30500:tid 30578] [client 20.89.212.241:26879] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aTgbea2eIIK3JPWHCXXraQAAAZU"]
[Tue Dec 09 20:52:10.697929 2025] [:error] [pid 30499:tid 30531] [client 20.89.212.241:14281] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aTgbek0x3OqZTOPp7cn8EwAAAUE"]
[Tue Dec 09 20:52:11.960629 2025] [:error] [pid 30498:tid 30523] [client 20.89.212.241:19653] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aTgbex2mcZJQ5qP_RC05agAAABU"]
[Tue Dec 09 20:52:13.435534 2025] [:error] [pid 36456:tid 36466] [client 20.89.212.241:15650] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aTgbfR0pAnOyfXl_v40w7QAAAIg"]
[Tue Dec 09 20:52:15.360668 2025] [:error] [pid 30591:tid 30609] [client 20.89.212.241:13456] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aTgbfxG-g76drVdWQUWAygAAAE8"]
[Tue Dec 09 20:52:17.275019 2025] [:error] [pid 30499:tid 30550] [client 20.89.212.241:26854] [client 20.89.212.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTgbgU0x3OqZTOPp7cn8FwAAAVQ"]
[Tue Dec 09 20:52:17.961893 2025] [:error] [pid 30500:tid 30571] [client 20.89.212.241:24768] [client 20.89.212.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aTgbga2eIIK3JPWHCXXrfAAAAY4"]
[Tue Dec 09 20:52:18.996475 2025] [:error] [pid 30500:tid 30579] [client 20.89.212.241:25842] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTgbgq2eIIK3JPWHCXXrgAAAAZY"]
[Tue Dec 09 20:52:19.556110 2025] [:error] [pid 36456:tid 36475] [client 20.89.212.241:7913] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTgbgx0pAnOyfXl_v40w8wAAAJE"]
[Tue Dec 09 20:52:21.081075 2025] [:error] [pid 36456:tid 36466] [client 20.89.212.241:19698] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTgbhR0pAnOyfXl_v40w-QAAAIg"]
[Tue Dec 09 20:52:22.317913 2025] [:error] [pid 30500:tid 30571] [client 20.89.212.241:26032] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTgbhq2eIIK3JPWHCXXrhAAAAY4"]
[Tue Dec 09 20:52:23.292000 2025] [:error] [pid 30499:tid 30535] [client 20.89.212.241:18952] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aTgbh00x3OqZTOPp7cn8LwAAAUU"]
[Tue Dec 09 20:52:24.013967 2025] [:error] [pid 30500:tid 30561] [client 20.89.212.241:21175] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aTgbiK2eIIK3JPWHCXXriAAAAYQ"]
[Tue Dec 09 20:52:28.055673 2025] [:error] [pid 30498:tid 30508] [client 20.89.212.241:19003] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aTgbjB2mcZJQ5qP_RC05jAAAAAY"]
[Tue Dec 09 20:52:28.469074 2025] [:error] [pid 30500:tid 30575] [client 20.89.212.241:13204] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aTgbjK2eIIK3JPWHCXXrlQAAAZI"]
[Tue Dec 09 20:52:29.608182 2025] [:error] [pid 30498:tid 30511] [client 20.89.212.241:18997] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTgbjR2mcZJQ5qP_RC05kAAAAAk"]
[Tue Dec 09 20:52:39.288619 2025] [:error] [pid 36456:tid 36477] [client 20.89.212.241:25812] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aTgblx0pAnOyfXl_v40xEgAAAJM"]
[Tue Dec 09 20:52:40.097905 2025] [:error] [pid 30591:tid 30597] [client 20.89.212.241:24813] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aTgbmBG-g76drVdWQUWBCQAAAEM"]
[Tue Dec 09 20:52:42.877101 2025] [:error] [pid 30498:tid 30509] [client 20.89.212.241:19002] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aTgbmh2mcZJQ5qP_RC05ngAAAAc"]
[Tue Dec 09 20:52:45.259896 2025] [:error] [pid 36456:tid 36466] [client 20.89.212.241:13217] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aTgbnR0pAnOyfXl_v40xFwAAAIg"]
[Tue Dec 09 20:52:46.666564 2025] [:error] [pid 30591:tid 30594] [client 20.89.212.241:24784] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aTgbnhG-g76drVdWQUWBFgAAAEA"]
[Tue Dec 09 20:52:47.646987 2025] [:error] [pid 30500:tid 30575] [client 20.89.212.241:21166] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aTgbn62eIIK3JPWHCXXruAAAAZI"]
[Tue Dec 09 20:52:48.665255 2025] [:error] [pid 30591:tid 30598] [client 20.89.212.241:12467] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aTgboBG-g76drVdWQUWBGgAAAEQ"]
[Tue Dec 09 20:52:49.220983 2025] [:error] [pid 5276:tid 5300] [client 20.89.212.241:25028] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aTgboUtSXwbewdwyu-10BwAAANY"]
[Tue Dec 09 20:52:49.618301 2025] [:error] [pid 30591:tid 30608] [client 20.89.212.241:16856] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTgboRG-g76drVdWQUWBGwAAAE4"]
[Tue Dec 09 20:52:50.623608 2025] [:error] [pid 30499:tid 30547] [client 20.89.212.241:16860] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTgbok0x3OqZTOPp7cn8VwAAAVE"]
[Tue Dec 09 20:52:52.428802 2025] [:error] [pid 30500:tid 30563] [client 20.89.212.241:16846] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTgbpK2eIIK3JPWHCXXrxwAAAYY"]
[Tue Dec 09 20:52:53.655422 2025] [:error] [pid 30500:tid 30574] [client 20.89.212.241:16864] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTgbpa2eIIK3JPWHCXXr0AAAAZE"]
[Tue Dec 09 20:52:54.316783 2025] [:error] [pid 30500:tid 30566] [client 20.89.212.241:25080] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aTgbpq2eIIK3JPWHCXXr0wAAAYk"]
[Tue Dec 09 20:52:55.669302 2025] [:error] [pid 30500:tid 30579] [client 20.89.212.241:16424] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aTgbp62eIIK3JPWHCXXr1wAAAZY"]
[Tue Dec 09 20:52:56.167504 2025] [:error] [pid 30500:tid 30561] [client 20.89.212.241:16866] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aTgbqK2eIIK3JPWHCXXr2AAAAYQ"]
[Tue Dec 09 20:52:57.008215 2025] [:error] [pid 30500:tid 30580] [client 20.89.212.241:22611] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aTgbqa2eIIK3JPWHCXXr3AAAAZc"]
[Tue Dec 09 20:52:57.783305 2025] [:error] [pid 30500:tid 30566] [client 20.89.212.241:18987] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aTgbqa2eIIK3JPWHCXXr3gAAAYk"]
[Tue Dec 09 20:52:59.448864 2025] [:error] [pid 30500:tid 30569] [client 20.89.212.241:21156] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aTgbq62eIIK3JPWHCXXr6AAAAYw"]
[Tue Dec 09 20:52:59.885271 2025] [:error] [pid 5276:tid 5299] [client 20.89.212.241:22652] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aTgbq0tSXwbewdwyu-10FQAAANU"]
[Tue Dec 09 20:53:01.619188 2025] [:error] [pid 30500:tid 30579] [client 20.89.212.241:25081] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aTgbra2eIIK3JPWHCXXr7QAAAZY"]
[Tue Dec 09 20:53:02.187688 2025] [:error] [pid 30499:tid 30535] [client 20.89.212.241:8000] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aTgbrk0x3OqZTOPp7cn8mAAAAUU"]
[Tue Dec 09 20:53:03.125663 2025] [:error] [pid 30499:tid 30550] [client 20.89.212.241:17202] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aTgbr00x3OqZTOPp7cn8nAAAAVQ"]
[Tue Dec 09 20:53:04.154477 2025] [:error] [pid 36456:tid 36477] [client 20.89.212.241:16891] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aTgbsB0pAnOyfXl_v40xJQAAAJM"]
[Tue Dec 09 20:53:04.522853 2025] [:error] [pid 36456:tid 36460] [client 20.89.212.241:22634] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aTgbsB0pAnOyfXl_v40xJwAAAII"]
[Tue Dec 09 20:53:09.652930 2025] [:error] [pid 30499:tid 30542] [client 20.89.212.241:8022] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aTgbtU0x3OqZTOPp7cn8pwAAAUw"]
[Tue Dec 09 20:53:10.114017 2025] [:error] [pid 30498:tid 30518] [client 20.89.212.241:18988] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aTgbth2mcZJQ5qP_RC05sgAAABA"]
[Tue Dec 09 20:53:10.622429 2025] [:error] [pid 30499:tid 30539] [client 20.89.212.241:12880] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aTgbtk0x3OqZTOPp7cn8qwAAAUk"]
[Tue Dec 09 20:53:13.233636 2025] [:error] [pid 30591:tid 30595] [client 20.89.212.241:17210] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aTgbuRG-g76drVdWQUWBMwAAAEE"]
[Tue Dec 09 20:53:14.938722 2025] [:error] [pid 30499:tid 30553] [client 20.89.212.241:16841] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aTgbuk0x3OqZTOPp7cn8swAAAVc"]
[Tue Dec 09 20:53:15.952849 2025] [:error] [pid 5276:tid 5300] [client 20.89.212.241:27663] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aTgbu0tSXwbewdwyu-10KAAAANY"]
[Tue Dec 09 20:53:16.672356 2025] [:error] [pid 30498:tid 30511] [client 20.89.212.241:17205] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aTgbvB2mcZJQ5qP_RC05ugAAAAk"]
[Tue Dec 09 20:53:17.457946 2025] [:error] [pid 36456:tid 36473] [client 20.89.212.241:27702] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aTgbvR0pAnOyfXl_v40xPAAAAI8"]
[Tue Dec 09 20:53:18.924236 2025] [:error] [pid 30591:tid 30601] [client 20.89.212.241:16396] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aTgbvhG-g76drVdWQUWBQgAAAEc"]
[Tue Dec 09 20:53:19.670933 2025] [:error] [pid 30500:tid 30560] [client 20.89.212.241:12925] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aTgbv62eIIK3JPWHCXXsGwAAAYM"]
[Tue Dec 09 20:53:20.797683 2025] [:error] [pid 30498:tid 30503] [client 20.89.212.241:16394] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aTgbwB2mcZJQ5qP_RC05vQAAAAE"]
[Tue Dec 09 20:53:21.873705 2025] [:error] [pid 5276:tid 5300] [client 20.89.212.241:12927] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aTgbwUtSXwbewdwyu-10PAAAANY"]
[Tue Dec 09 20:53:22.668073 2025] [:error] [pid 30500:tid 30560] [client 20.89.212.241:12872] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aTgbwq2eIIK3JPWHCXXsKQAAAYM"]
[Tue Dec 09 20:53:23.699628 2025] [:error] [pid 5276:tid 5299] [client 20.89.212.241:27704] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aTgbw0tSXwbewdwyu-10PgAAANU"]
[Tue Dec 09 20:53:24.386239 2025] [:error] [pid 30498:tid 30516] [client 20.89.212.241:18206] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aTgbxB2mcZJQ5qP_RC05wAAAAA4"]
[Tue Dec 09 20:53:27.327280 2025] [:error] [pid 30498:tid 30508] [client 20.89.212.241:22625] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aTgbxx2mcZJQ5qP_RC05xAAAAAY"]
[Tue Dec 09 20:53:28.351821 2025] [:error] [pid 5276:tid 5292] [client 20.89.212.241:13868] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aTgbyEtSXwbewdwyu-10RQAAAM4"]
[Tue Dec 09 20:53:31.190079 2025] [:error] [pid 30500:tid 30573] [client 20.89.212.241:16417] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aTgby62eIIK3JPWHCXXsNgAAAZA"]
[Tue Dec 09 20:53:34.103231 2025] [:error] [pid 30591:tid 30607] [client 20.89.212.241:8156] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aTgbzhG-g76drVdWQUWBVAAAAE0"]
[Tue Dec 09 20:53:35.061655 2025] [:error] [pid 30591:tid 30615] [client 20.89.212.241:7468] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aTgbzxG-g76drVdWQUWBWAAAAFU"]
[Tue Dec 09 20:53:35.862617 2025] [:error] [pid 36456:tid 36481] [client 20.89.212.241:27072] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aTgbzx0pAnOyfXl_v40xTgAAAJc"]
[Tue Dec 09 20:53:36.643354 2025] [:error] [pid 30500:tid 30571] [client 20.89.212.241:20095] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aTgb0K2eIIK3JPWHCXXsOgAAAY4"]
[Tue Dec 09 20:53:37.495340 2025] [:error] [pid 30500:tid 30580] [client 20.89.212.241:37212] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aTgb0a2eIIK3JPWHCXXsRwAAAZc"]
[Tue Dec 09 20:53:38.189938 2025] [:error] [pid 30591:tid 30613] [client 20.89.212.241:37243] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aTgb0hG-g76drVdWQUWBXgAAAFM"]
[Tue Dec 09 20:53:47.539927 2025] [:error] [pid 36456:tid 36458] [client 20.89.212.241:12871] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aTgb2x0pAnOyfXl_v40xZgAAAIA"]
[Tue Dec 09 20:53:48.861896 2025] [:error] [pid 30500:tid 30577] [client 20.89.212.241:12125] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aTgb3K2eIIK3JPWHCXXsdgAAAZQ"]
[Tue Dec 09 20:53:50.508620 2025] [:error] [pid 36456:tid 36467] [client 20.89.212.241:22703] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aTgb3h0pAnOyfXl_v40xaAAAAIk"]
[Tue Dec 09 20:53:51.014653 2025] [:error] [pid 30498:tid 30502] [client 20.89.212.241:37186] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aTgb3x2mcZJQ5qP_RC051wAAAAA"]
[Tue Dec 09 20:53:51.981879 2025] [:error] [pid 30499:tid 30530] [client 20.89.212.241:26085] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aTgb300x3OqZTOPp7cn82QAAAUA"]
[Tue Dec 09 20:53:53.250130 2025] [:error] [pid 5276:tid 5281] [client 20.89.212.241:18749] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aTgb4UtSXwbewdwyu-10XQAAAMM"]
[Tue Dec 09 20:53:55.249745 2025] [:error] [pid 30498:tid 30503] [client 20.89.212.241:12113] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aTgb4x2mcZJQ5qP_RC053AAAAAE"]
[Tue Dec 09 20:53:58.780460 2025] [:error] [pid 36456:tid 36482] [client 20.89.212.241:12132] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aTgb5h0pAnOyfXl_v40xbQAAAJg"]
[Tue Dec 09 20:54:00.146330 2025] [:error] [pid 30500:tid 30576] [client 20.89.212.241:23429] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aTgb6K2eIIK3JPWHCXXs8AAAAZM"]
[Tue Dec 09 20:54:01.936969 2025] [:error] [pid 30591:tid 30610] [client 20.89.212.241:26604] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aTgb6RG-g76drVdWQUWBhgAAAFA"]
[Tue Dec 09 20:54:02.626975 2025] [:error] [pid 5276:tid 5285] [client 20.89.212.241:7514] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aTgb6ktSXwbewdwyu-10dgAAAMc"]
[Tue Dec 09 20:54:03.624582 2025] [:error] [pid 36456:tid 36466] [client 20.89.212.241:26585] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aTgb6x0pAnOyfXl_v40xcwAAAIg"]
[Tue Dec 09 20:54:04.741648 2025] [:error] [pid 30498:tid 30515] [client 20.89.212.241:34059] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aTgb7B2mcZJQ5qP_RC056wAAAA0"]
[Tue Dec 09 20:54:05.750191 2025] [:error] [pid 36456:tid 36475] [client 20.89.212.241:14573] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aTgb7R0pAnOyfXl_v40xdgAAAJE"]
[Tue Dec 09 20:54:06.917447 2025] [:error] [pid 30498:tid 30517] [client 20.89.212.241:21936] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aTgb7h2mcZJQ5qP_RC057gAAAA8"]
[Tue Dec 09 20:54:10.535249 2025] [:error] [pid 30591:tid 30596] [client 20.89.212.241:22274] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aTgb8hG-g76drVdWQUWBmgAAAEI"]
[Tue Dec 09 20:54:12.476731 2025] [:error] [pid 30500:tid 30578] [client 20.89.212.241:33495] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aTgb9K2eIIK3JPWHCXXtCgAAAZU"]
[Tue Dec 09 20:54:13.090137 2025] [:error] [pid 30498:tid 30507] [client 20.89.212.241:22312] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aTgb9R2mcZJQ5qP_RC05_QAAAAU"]
[Tue Dec 09 20:54:14.082113 2025] [:error] [pid 30499:tid 30536] [client 20.89.212.241:7182] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aTgb9k0x3OqZTOPp7cn87QAAAUY"]
[Tue Dec 09 20:54:14.874584 2025] [:error] [pid 30500:tid 30563] [client 20.89.212.241:33514] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aTgb9q2eIIK3JPWHCXXtEQAAAYY"]
[Tue Dec 09 20:54:16.363892 2025] [:error] [pid 36456:tid 36480] [client 20.89.212.241:33477] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aTgb-B0pAnOyfXl_v40xkQAAAJY"]
[Tue Dec 09 20:54:17.512645 2025] [:error] [pid 30499:tid 30535] [client 20.89.212.241:57954] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aTgb-U0x3OqZTOPp7cn88gAAAUU"]
[Tue Dec 09 20:54:18.153367 2025] [:error] [pid 30500:tid 30570] [client 20.89.212.241:7306] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aTgb-q2eIIK3JPWHCXXtNgAAAY0"]
[Tue Dec 09 20:54:18.829785 2025] [:error] [pid 30498:tid 30522] [client 20.89.212.241:57955] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aTgb-h2mcZJQ5qP_RC06BgAAABQ"]
[Tue Dec 09 20:54:19.713678 2025] [:error] [pid 30498:tid 30506] [client 20.89.212.241:26306] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aTgb-x2mcZJQ5qP_RC06CgAAAAQ"]
[Tue Dec 09 20:54:21.179626 2025] [:error] [pid 30500:tid 30578] [client 20.89.212.241:15419] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aTgb_a2eIIK3JPWHCXXtZQAAAZU"]
[Tue Dec 09 20:54:22.058655 2025] [:error] [pid 36456:tid 36476] [client 20.89.212.241:7343] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aTgb_h0pAnOyfXl_v40xqQAAAJI"]
[Tue Dec 09 20:54:23.433091 2025] [:error] [pid 5276:tid 5293] [client 20.89.212.241:13653] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aTgb_0tSXwbewdwyu-11CAAAAM8"]
[Tue Dec 09 20:54:24.515034 2025] [:error] [pid 30498:tid 30515] [client 20.89.212.241:26360] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aTgcAB2mcZJQ5qP_RC06GwAAAA0"]
[Tue Dec 09 20:54:25.018995 2025] [:error] [pid 30591:tid 30616] [client 20.89.212.241:7189] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aTgcARG-g76drVdWQUWBuAAAAFY"]
[Tue Dec 09 20:54:26.032008 2025] [:error] [pid 30500:tid 30573] [client 20.89.212.241:22303] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aTgcAq2eIIK3JPWHCXXtrwAAAZA"]
[Tue Dec 09 20:54:27.044138 2025] [:error] [pid 30500:tid 30559] [client 20.89.212.241:57931] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aTgcA62eIIK3JPWHCXXtuwAAAYI"]
[Tue Dec 09 20:54:27.605783 2025] [:error] [pid 30591:tid 30612] [client 20.89.212.241:15395] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aTgcAxG-g76drVdWQUWBwwAAAFI"]
[Tue Dec 09 20:54:28.530889 2025] [:error] [pid 36456:tid 36460] [client 20.89.212.241:32952] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aTgcBB0pAnOyfXl_v40xvQAAAII"]
[Tue Dec 09 20:54:29.639509 2025] [:error] [pid 30499:tid 30532] [client 20.89.212.241:13691] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aTgcBU0x3OqZTOPp7cn9BQAAAUI"]
[Tue Dec 09 20:54:30.105505 2025] [:error] [pid 30499:tid 30549] [client 20.89.212.241:7308] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aTgcBk0x3OqZTOPp7cn9BgAAAVM"]
[Tue Dec 09 20:54:31.059418 2025] [:error] [pid 30498:tid 30511] [client 20.89.212.241:15396] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aTgcBx2mcZJQ5qP_RC06HwAAAAk"]
[Tue Dec 09 20:54:33.104863 2025] [:error] [pid 30500:tid 30573] [client 20.89.212.241:57359] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aTgcCa2eIIK3JPWHCXXt4AAAAZA"]
[Tue Dec 09 20:54:34.261756 2025] [:error] [pid 5276:tid 5287] [client 20.89.212.241:22991] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aTgcCktSXwbewdwyu-11QwAAAMk"]
[Tue Dec 09 20:54:35.750367 2025] [:error] [pid 30499:tid 30545] [client 20.89.212.241:37766] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aTgcC00x3OqZTOPp7cn9CwAAAU8"]
[Tue Dec 09 20:54:36.403994 2025] [:error] [pid 30591:tid 30606] [client 20.89.212.241:7353] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aTgcDBG-g76drVdWQUWB7AAAAEw"]
[Tue Dec 09 20:54:37.988660 2025] [:error] [pid 30499:tid 30546] [client 20.89.212.241:37763] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aTgcDU0x3OqZTOPp7cn9EwAAAVA"]
[Tue Dec 09 20:54:38.897617 2025] [:error] [pid 30500:tid 30568] [client 20.89.212.241:15406] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aTgcDq2eIIK3JPWHCXXuBgAAAYs"]
[Tue Dec 09 20:54:39.866733 2025] [:error] [pid 30500:tid 30571] [client 20.89.212.241:23370] [client 20.89.212.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aTgcD62eIIK3JPWHCXXuDAAAAY4"]
[Tue Dec 09 21:40:49.739795 2025] [:error] [pid 30499:tid 30554] [client 4.147.190.83:34344] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTgm4U0x3OqZTOPp7ckPtwAAAVg"]
[Tue Dec 09 21:40:50.949626 2025] [:error] [pid 30498:tid 30515] [client 4.147.190.83:21577] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTgm4h2mcZJQ5qP_RC1K7AAAAA0"]
[Tue Dec 09 21:40:52.017832 2025] [:error] [pid 30499:tid 30530] [client 4.147.190.83:21618] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTgm5E0x3OqZTOPp7ckPvgAAAUA"]
[Tue Dec 09 21:40:52.951458 2025] [:error] [pid 5276:tid 5302] [client 4.147.190.83:17276] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTgm5EtSXwbewdwyu-2E4gAAANg"]
[Tue Dec 09 21:40:54.332463 2025] [:error] [pid 30498:tid 30526] [client 4.147.190.83:22128] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aTgm5h2mcZJQ5qP_RC1K9wAAABg"]
[Tue Dec 09 21:40:54.679054 2025] [:error] [pid 30498:tid 30511] [client 4.147.190.83:51685] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aTgm5h2mcZJQ5qP_RC1K-QAAAAk"]
[Tue Dec 09 21:40:54.894802 2025] [:error] [pid 30498:tid 30519] [client 4.147.190.83:43368] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aTgm5h2mcZJQ5qP_RC1K-wAAABE"]
[Tue Dec 09 21:40:55.266075 2025] [:error] [pid 30500:tid 30573] [client 4.147.190.83:22585] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aTgm562eIIK3JPWHCXUFZQAAAZA"]
[Tue Dec 09 21:40:55.632609 2025] [:error] [pid 30591:tid 30595] [client 4.147.190.83:51668] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTgm5xG-g76drVdWQUWTdAAAAEE"]
[Tue Dec 09 21:40:56.922564 2025] [:error] [pid 30500:tid 30560] [client 4.147.190.83:43340] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTgm6K2eIIK3JPWHCXUFZgAAAYM"]
[Tue Dec 09 21:40:57.959149 2025] [:error] [pid 30499:tid 30534] [client 4.147.190.83:28630] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTgm6U0x3OqZTOPp7ckPywAAAUQ"]
[Tue Dec 09 21:40:59.297709 2025] [:error] [pid 30500:tid 30565] [client 4.147.190.83:16412] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTgm662eIIK3JPWHCXUFawAAAYg"]
[Tue Dec 09 21:41:00.412028 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:27616] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efile.php"] [unique_id "aTgm7B0pAnOyfXl_v41KqQAAAIs"]
[Tue Dec 09 21:41:01.011034 2025] [:error] [pid 30499:tid 30540] [client 4.147.190.83:16406] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efile.php"] [unique_id "aTgm7U0x3OqZTOPp7ckPzgAAAUo"]
[Tue Dec 09 21:41:01.341711 2025] [:error] [pid 5276:tid 5287] [client 4.147.190.83:28628] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efile.php"] [unique_id "aTgm7UtSXwbewdwyu-2E6wAAAMk"]
[Tue Dec 09 21:41:02.088465 2025] [:error] [pid 30591:tid 30614] [client 4.147.190.83:35999] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efile.php"] [unique_id "aTgm7hG-g76drVdWQUWTgAAAAFQ"]
[Tue Dec 09 21:41:02.828075 2025] [:error] [pid 30499:tid 30551] [client 4.147.190.83:35272] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aTgm7k0x3OqZTOPp7ckP0QAAAVU"]
[Tue Dec 09 21:41:06.083075 2025] [:error] [pid 30591:tid 30613] [client 4.147.190.83:21357] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aTgm8hG-g76drVdWQUWTgwAAAFM"]
[Tue Dec 09 21:41:10.759674 2025] [:error] [pid 30500:tid 30565] [client 4.147.190.83:21356] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aTgm9q2eIIK3JPWHCXUFeQAAAYg"]
[Tue Dec 09 21:41:12.076151 2025] [:error] [pid 5276:tid 5301] [client 4.147.190.83:16812] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aTgm-EtSXwbewdwyu-2E9QAAANc"]
[Tue Dec 09 21:41:13.466359 2025] [:error] [pid 30498:tid 30502] [client 4.147.190.83:35342] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgn.php"] [unique_id "aTgm-R2mcZJQ5qP_RC1LFgAAAAA"]
[Tue Dec 09 21:41:14.200048 2025] [:error] [pid 36456:tid 36482] [client 4.147.190.83:35289] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgn.php"] [unique_id "aTgm-h0pAnOyfXl_v41KwgAAAJg"]
[Tue Dec 09 21:41:14.905133 2025] [:error] [pid 30591:tid 30613] [client 4.147.190.83:35358] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgn.php"] [unique_id "aTgm-hG-g76drVdWQUWTjgAAAFM"]
[Tue Dec 09 21:41:15.521040 2025] [:error] [pid 30499:tid 30544] [client 4.147.190.83:35275] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgn.php"] [unique_id "aTgm-00x3OqZTOPp7ckP3wAAAU4"]
[Tue Dec 09 21:41:16.766585 2025] [:error] [pid 30591:tid 30609] [client 4.147.190.83:16478] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aTgm_BG-g76drVdWQUWTkAAAAE8"]
[Tue Dec 09 21:41:17.564135 2025] [:error] [pid 5276:tid 5296] [client 4.147.190.83:21353] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aTgm_UtSXwbewdwyu-2E-wAAANI"]
[Tue Dec 09 21:41:18.256099 2025] [:error] [pid 30498:tid 30520] [client 4.147.190.83:35346] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aTgm_h2mcZJQ5qP_RC1LHAAAABI"]
[Tue Dec 09 21:41:18.702113 2025] [:error] [pid 30591:tid 30616] [client 4.147.190.83:21323] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aTgm_hG-g76drVdWQUWTkQAAAFY"]
[Tue Dec 09 21:41:19.350981 2025] [:error] [pid 5276:tid 5292] [client 4.147.190.83:21334] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spk.php"] [unique_id "aTgm_0tSXwbewdwyu-2E_AAAAM4"]
[Tue Dec 09 21:41:19.666702 2025] [:error] [pid 30499:tid 30536] [client 4.147.190.83:16511] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spk.php"] [unique_id "aTgm_00x3OqZTOPp7ckP5AAAAUY"]
[Tue Dec 09 21:41:20.462465 2025] [:error] [pid 30498:tid 30502] [client 4.147.190.83:16456] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spk.php"] [unique_id "aTgnAB2mcZJQ5qP_RC1LKQAAAAA"]
[Tue Dec 09 21:41:20.906774 2025] [:error] [pid 30500:tid 30559] [client 4.147.190.83:16785] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spk.php"] [unique_id "aTgnAK2eIIK3JPWHCXUFfwAAAYI"]
[Tue Dec 09 21:41:21.219740 2025] [:error] [pid 30499:tid 30530] [client 4.147.190.83:35334] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aTgnAU0x3OqZTOPp7ckP5gAAAUA"]
[Tue Dec 09 21:41:21.748773 2025] [:error] [pid 5276:tid 5289] [client 4.147.190.83:16799] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aTgnAUtSXwbewdwyu-2E_wAAAMs"]
[Tue Dec 09 21:41:22.062136 2025] [:error] [pid 30499:tid 30549] [client 4.147.190.83:35270] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aTgnAk0x3OqZTOPp7ckP5wAAAVM"]
[Tue Dec 09 21:41:22.789993 2025] [:error] [pid 30500:tid 30580] [client 4.147.190.83:21360] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aTgnAq2eIIK3JPWHCXUFgQAAAZc"]
[Tue Dec 09 21:41:24.684898 2025] [:error] [pid 36456:tid 36465] [client 4.147.190.83:35363] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aTgnBB0pAnOyfXl_v41K0wAAAIc"]
[Tue Dec 09 21:41:25.302514 2025] [:error] [pid 36456:tid 36470] [client 4.147.190.83:16471] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aTgnBR0pAnOyfXl_v41K1AAAAIw"]
[Tue Dec 09 21:41:25.784901 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:35325] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aTgnBR0pAnOyfXl_v41K1gAAAIs"]
[Tue Dec 09 21:41:25.868589 2025] [:error] [pid 5276:tid 5287] [client 4.147.190.83:35973] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aTgnBUtSXwbewdwyu-2FBgAAAMk"]
[Tue Dec 09 21:41:25.986337 2025] [:error] [pid 5276:tid 5285] [client 4.147.190.83:16828] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aTgnBUtSXwbewdwyu-2FBwAAAMc"]
[Tue Dec 09 21:41:26.171507 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:21350] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aTgnBh0pAnOyfXl_v41K2AAAAIY"]
[Tue Dec 09 21:41:26.799093 2025] [:error] [pid 30591:tid 30594] [client 4.147.190.83:35981] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aTgnBhG-g76drVdWQUWTmAAAAEA"]
[Tue Dec 09 21:41:27.298172 2025] [:error] [pid 36456:tid 36473] [client 4.147.190.83:21344] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aTgnBx0pAnOyfXl_v41K3gAAAI8"]
[Tue Dec 09 21:41:27.908674 2025] [:error] [pid 5276:tid 5284] [client 4.147.190.83:35276] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php7"] [unique_id "aTgnB0tSXwbewdwyu-2FCwAAAMY"]
[Tue Dec 09 21:41:28.502679 2025] [:error] [pid 30591:tid 30607] [client 4.147.190.83:36007] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php7"] [unique_id "aTgnCBG-g76drVdWQUWTmQAAAE0"]
[Tue Dec 09 21:41:29.001347 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:36022] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php7"] [unique_id "aTgnCR0pAnOyfXl_v41K5AAAAIY"]
[Tue Dec 09 21:41:29.476357 2025] [:error] [pid 30498:tid 30522] [client 4.147.190.83:17366] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php7"] [unique_id "aTgnCR2mcZJQ5qP_RC1LYAAAABQ"]
[Tue Dec 09 21:41:29.938971 2025] [:error] [pid 30500:tid 30579] [client 4.147.190.83:35344] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aTgnCa2eIIK3JPWHCXUFiQAAAZY"]
[Tue Dec 09 21:41:30.368411 2025] [:error] [pid 36456:tid 36472] [client 4.147.190.83:21342] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aTgnCh0pAnOyfXl_v41K5wAAAI4"]
[Tue Dec 09 21:41:31.086090 2025] [:error] [pid 5276:tid 5281] [client 4.147.190.83:16774] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aTgnC0tSXwbewdwyu-2FDgAAAMM"]
[Tue Dec 09 21:41:32.213123 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:16465] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aTgnDB0pAnOyfXl_v41K6wAAAIg"]
[Tue Dec 09 21:41:32.741547 2025] [:error] [pid 36456:tid 36481] [client 4.147.190.83:21348] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aTgnDB0pAnOyfXl_v41K7gAAAJc"]
[Tue Dec 09 21:41:33.579387 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:16809] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aTgnDR0pAnOyfXl_v41K8wAAAIs"]
[Tue Dec 09 21:41:33.894318 2025] [:error] [pid 30591:tid 30617] [client 4.147.190.83:35326] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aTgnDRG-g76drVdWQUWTngAAAFc"]
[Tue Dec 09 21:41:34.141827 2025] [:error] [pid 30591:tid 30609] [client 4.147.190.83:16806] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aTgnDhG-g76drVdWQUWTnwAAAE8"]
[Tue Dec 09 21:41:34.417727 2025] [:error] [pid 30591:tid 30616] [client 4.147.190.83:21317] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aTgnDhG-g76drVdWQUWTowAAAFY"]
[Tue Dec 09 21:41:34.479106 2025] [:error] [pid 30591:tid 30618] [client 4.147.190.83:35983] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aTgnDhG-g76drVdWQUWTpAAAAFg"]
[Tue Dec 09 21:41:34.605579 2025] [:error] [pid 36456:tid 36472] [client 4.147.190.83:35296] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aTgnDh0pAnOyfXl_v41K9AAAAI4"]
[Tue Dec 09 21:41:34.732438 2025] [:error] [pid 30591:tid 30596] [client 4.147.190.83:21373] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aTgnDhG-g76drVdWQUWTpQAAAEI"]
[Tue Dec 09 21:41:35.043204 2025] [:error] [pid 30499:tid 30535] [client 4.147.190.83:35318] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aTgnD00x3OqZTOPp7ckP7wAAAUU"]
[Tue Dec 09 21:41:35.142742 2025] [:error] [pid 30499:tid 30536] [client 4.147.190.83:16787] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aTgnD00x3OqZTOPp7ckP8AAAAUY"]
[Tue Dec 09 21:41:35.605601 2025] [:error] [pid 30498:tid 30510] [client 4.147.190.83:21352] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aTgnDx2mcZJQ5qP_RC1LjgAAAAg"]
[Tue Dec 09 21:41:36.168137 2025] [:error] [pid 5276:tid 5293] [client 4.147.190.83:16450] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aTgnEEtSXwbewdwyu-2FFQAAAM8"]
[Tue Dec 09 21:41:36.791332 2025] [:error] [pid 5276:tid 5297] [client 4.147.190.83:35970] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x0.php"] [unique_id "aTgnEEtSXwbewdwyu-2FFgAAANM"]
[Tue Dec 09 21:41:38.064519 2025] [:error] [pid 30500:tid 30571] [client 4.147.190.83:35277] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x0.php"] [unique_id "aTgnEq2eIIK3JPWHCXUFkAAAAY4"]
[Tue Dec 09 21:41:39.067761 2025] [:error] [pid 5276:tid 5294] [client 4.147.190.83:35267] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x0.php"] [unique_id "aTgnE0tSXwbewdwyu-2FGgAAANA"]
[Tue Dec 09 21:41:39.763742 2025] [:error] [pid 30499:tid 30537] [client 4.147.190.83:16800] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x0.php"] [unique_id "aTgnE00x3OqZTOPp7ckQCgAAAUc"]
[Tue Dec 09 21:41:40.714647 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:16813] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTgnFB0pAnOyfXl_v41LDgAAAIg"]
[Tue Dec 09 21:41:41.799776 2025] [:error] [pid 5276:tid 5299] [client 4.147.190.83:36002] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTgnFUtSXwbewdwyu-2FHwAAANU"]
[Tue Dec 09 21:41:44.812465 2025] [:error] [pid 30498:tid 30521] [client 4.147.190.83:16805] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTgnGB2mcZJQ5qP_RC1LoQAAABM"]
[Tue Dec 09 21:41:44.892308 2025] [:error] [pid 36456:tid 36472] [client 4.147.190.83:20823] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTgnGB0pAnOyfXl_v41LIwAAAI4"]
[Tue Dec 09 21:41:45.113205 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:20842] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aTgnGR0pAnOyfXl_v41LJAAAAJU"]
[Tue Dec 09 21:41:45.555108 2025] [:error] [pid 30499:tid 30544] [client 4.147.190.83:33338] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aTgnGU0x3OqZTOPp7ckQOQAAAU4"]
[Tue Dec 09 21:41:46.183821 2025] [:error] [pid 36456:tid 36478] [client 4.147.190.83:20831] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aTgnGh0pAnOyfXl_v41LJwAAAJQ"]
[Tue Dec 09 21:41:47.248173 2025] [:error] [pid 30499:tid 30551] [client 4.147.190.83:20857] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aTgnG00x3OqZTOPp7ckQRgAAAVU"]
[Tue Dec 09 21:41:47.724008 2025] [:error] [pid 36456:tid 36481] [client 4.147.190.83:16470] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aTgnGx0pAnOyfXl_v41LLAAAAJc"]
[Tue Dec 09 21:41:48.626433 2025] [:error] [pid 30499:tid 30538] [client 4.147.190.83:16459] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aTgnHE0x3OqZTOPp7ckQUAAAAUg"]
[Tue Dec 09 21:41:48.856247 2025] [:error] [pid 30498:tid 30506] [client 4.147.190.83:33298] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aTgnHB2mcZJQ5qP_RC1LpQAAAAQ"]
[Tue Dec 09 21:41:55.575634 2025] [:error] [pid 36456:tid 36468] [client 4.147.190.83:20832] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aTgnIx0pAnOyfXl_v41LSAAAAIo"]
[Tue Dec 09 21:41:56.251654 2025] [:error] [pid 36456:tid 36462] [client 4.147.190.83:16464] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aTgnJB0pAnOyfXl_v41LSwAAAIQ"]
[Tue Dec 09 21:41:56.873494 2025] [:error] [pid 30498:tid 30521] [client 4.147.190.83:16499] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aTgnJB2mcZJQ5qP_RC1LsAAAABM"]
[Tue Dec 09 21:41:56.975151 2025] [:error] [pid 30499:tid 30554] [client 4.147.190.83:35998] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aTgnJE0x3OqZTOPp7ckQgQAAAVg"]
[Tue Dec 09 21:41:57.354987 2025] [:error] [pid 5276:tid 5293] [client 4.147.190.83:35287] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aTgnJUtSXwbewdwyu-2FMQAAAM8"]
[Tue Dec 09 21:41:57.740813 2025] [:error] [pid 30499:tid 30543] [client 4.147.190.83:27615] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aTgnJU0x3OqZTOPp7ckQhgAAAU0"]
[Tue Dec 09 21:41:58.056469 2025] [:error] [pid 5276:tid 5291] [client 4.147.190.83:16795] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aTgnJktSXwbewdwyu-2FNAAAAM0"]
[Tue Dec 09 21:41:58.107574 2025] [:error] [pid 30591:tid 30608] [client 4.147.190.83:35357] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aTgnJhG-g76drVdWQUWTzwAAAE4"]
[Tue Dec 09 21:41:58.276930 2025] [:error] [pid 5276:tid 5296] [client 4.147.190.83:17407] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aTgnJktSXwbewdwyu-2FNQAAANI"]
[Tue Dec 09 21:41:58.522724 2025] [:error] [pid 36456:tid 36475] [client 4.147.190.83:16430] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aTgnJh0pAnOyfXl_v41LTgAAAJE"]
[Tue Dec 09 21:41:58.636744 2025] [:error] [pid 36456:tid 36472] [client 4.147.190.83:16821] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aTgnJh0pAnOyfXl_v41LTwAAAI4"]
[Tue Dec 09 21:41:58.848934 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:16798] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aTgnJh0pAnOyfXl_v41LUAAAAIY"]
[Tue Dec 09 21:41:59.075393 2025] [:error] [pid 30591:tid 30594] [client 4.147.190.83:35288] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aTgnJxG-g76drVdWQUWT0gAAAEA"]
[Tue Dec 09 21:41:59.282669 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:35985] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aTgnJx0pAnOyfXl_v41LUgAAAJU"]
[Tue Dec 09 21:41:59.377869 2025] [:error] [pid 5276:tid 5284] [client 4.147.190.83:27606] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aTgnJ0tSXwbewdwyu-2FNwAAAMY"]
[Tue Dec 09 21:41:59.451254 2025] [:error] [pid 5276:tid 5294] [client 4.147.190.83:16826] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/led.php"] [unique_id "aTgnJ0tSXwbewdwyu-2FOAAAANA"]
[Tue Dec 09 21:41:59.532776 2025] [:error] [pid 30498:tid 30505] [client 4.147.190.83:16789] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aTgnJx2mcZJQ5qP_RC1LswAAAAM"]
[Tue Dec 09 21:41:59.780621 2025] [:error] [pid 30500:tid 30558] [client 4.147.190.83:35385] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aTgnJ62eIIK3JPWHCXUFyQAAAYE"]
[Tue Dec 09 21:42:00.412016 2025] [:error] [pid 36456:tid 36460] [client 4.147.190.83:16427] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aTgnKB0pAnOyfXl_v41LVQAAAII"]
[Tue Dec 09 21:42:01.248991 2025] [:error] [pid 30500:tid 30580] [client 4.147.190.83:16816] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aTgnKa2eIIK3JPWHCXUF0AAAAZc"]
[Tue Dec 09 21:42:01.981388 2025] [:error] [pid 30500:tid 30573] [client 4.147.190.83:35360] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vast.php"] [unique_id "aTgnKa2eIIK3JPWHCXUF0wAAAZA"]
[Tue Dec 09 21:42:02.310118 2025] [:error] [pid 30499:tid 30536] [client 4.147.190.83:16386] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vast.php"] [unique_id "aTgnKk0x3OqZTOPp7ckQjAAAAUY"]
[Tue Dec 09 21:42:02.708468 2025] [:error] [pid 36456:tid 36458] [client 4.147.190.83:43400] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vast.php"] [unique_id "aTgnKh0pAnOyfXl_v41LWQAAAIA"]
[Tue Dec 09 21:42:03.063105 2025] [:error] [pid 30591:tid 30596] [client 4.147.190.83:28643] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vast.php"] [unique_id "aTgnKxG-g76drVdWQUWT2AAAAEI"]
[Tue Dec 09 21:42:03.373996 2025] [:error] [pid 30498:tid 30515] [client 4.147.190.83:17365] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ea.php"] [unique_id "aTgnKx2mcZJQ5qP_RC1LuwAAAA0"]
[Tue Dec 09 21:42:03.821201 2025] [:error] [pid 30591:tid 30617] [client 4.147.190.83:27597] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ea.php"] [unique_id "aTgnKxG-g76drVdWQUWT2QAAAFc"]
[Tue Dec 09 21:42:03.978764 2025] [:error] [pid 30591:tid 30616] [client 4.147.190.83:43411] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ea.php"] [unique_id "aTgnKxG-g76drVdWQUWT3AAAAFY"]
[Tue Dec 09 21:42:04.097809 2025] [:error] [pid 30591:tid 30601] [client 4.147.190.83:43414] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ea.php"] [unique_id "aTgnLBG-g76drVdWQUWT3QAAAEc"]
[Tue Dec 09 21:42:04.586926 2025] [:error] [pid 5276:tid 5280] [client 4.147.190.83:28644] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php7"] [unique_id "aTgnLEtSXwbewdwyu-2FPQAAAMI"]
[Tue Dec 09 21:42:04.857650 2025] [:error] [pid 5276:tid 5286] [client 4.147.190.83:53960] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php7"] [unique_id "aTgnLEtSXwbewdwyu-2FPgAAAMg"]
[Tue Dec 09 21:42:05.030494 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:54007] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php7"] [unique_id "aTgnLR0pAnOyfXl_v41LXgAAAJU"]
[Tue Dec 09 21:42:05.369746 2025] [:error] [pid 36456:tid 36470] [client 4.147.190.83:54013] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php7"] [unique_id "aTgnLR0pAnOyfXl_v41LXwAAAIw"]
[Tue Dec 09 21:42:05.552017 2025] [:error] [pid 5276:tid 5301] [client 4.147.190.83:43369] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/888.php"] [unique_id "aTgnLUtSXwbewdwyu-2FPwAAANc"]
[Tue Dec 09 21:42:05.892566 2025] [:error] [pid 30498:tid 30504] [client 4.147.190.83:51649] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/888.php"] [unique_id "aTgnLR2mcZJQ5qP_RC1LvQAAAAI"]
[Tue Dec 09 21:42:06.026034 2025] [:error] [pid 30500:tid 30559] [client 4.147.190.83:43331] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/888.php"] [unique_id "aTgnLq2eIIK3JPWHCXUF2wAAAYI"]
[Tue Dec 09 21:42:06.210727 2025] [:error] [pid 30498:tid 30511] [client 4.147.190.83:22120] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/888.php"] [unique_id "aTgnLh2mcZJQ5qP_RC1LvgAAAAk"]
[Tue Dec 09 21:42:06.315051 2025] [:error] [pid 36456:tid 36474] [client 4.147.190.83:22611] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rei.php"] [unique_id "aTgnLh0pAnOyfXl_v41LYgAAAJA"]
[Tue Dec 09 21:42:06.808184 2025] [:error] [pid 30499:tid 30545] [client 4.147.190.83:43348] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rei.php"] [unique_id "aTgnLk0x3OqZTOPp7ckQkQAAAU8"]
[Tue Dec 09 21:42:07.446792 2025] [:error] [pid 30591:tid 30606] [client 4.147.190.83:22652] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rei.php"] [unique_id "aTgnLxG-g76drVdWQUWT4AAAAEw"]
[Tue Dec 09 21:42:07.750322 2025] [:error] [pid 30500:tid 30578] [client 4.147.190.83:34336] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rei.php"] [unique_id "aTgnL62eIIK3JPWHCXUF4AAAAZU"]
[Tue Dec 09 21:42:07.988649 2025] [:error] [pid 30499:tid 30538] [client 4.147.190.83:17256] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aTgnL00x3OqZTOPp7ckQkwAAAUg"]
[Tue Dec 09 21:42:08.905705 2025] [:error] [pid 36456:tid 36461] [client 4.147.190.83:34399] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aTgnMB0pAnOyfXl_v41LbAAAAIM"]
[Tue Dec 09 21:42:09.085739 2025] [:error] [pid 36456:tid 36482] [client 4.147.190.83:34387] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aTgnMR0pAnOyfXl_v41LbgAAAJg"]
[Tue Dec 09 21:42:09.179015 2025] [:error] [pid 30591:tid 30600] [client 4.147.190.83:34415] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aTgnMRG-g76drVdWQUWT4QAAAEY"]
[Tue Dec 09 21:42:09.306431 2025] [:error] [pid 30500:tid 30579] [client 4.147.190.83:32976] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nok.php"] [unique_id "aTgnMa2eIIK3JPWHCXUF5QAAAZY"]
[Tue Dec 09 21:42:09.601077 2025] [:error] [pid 36456:tid 36477] [client 4.147.190.83:48212] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nok.php"] [unique_id "aTgnMR0pAnOyfXl_v41LcAAAAJM"]
[Tue Dec 09 21:42:09.762101 2025] [:error] [pid 30498:tid 30526] [client 4.147.190.83:54653] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nok.php"] [unique_id "aTgnMR2mcZJQ5qP_RC1LwQAAABg"]
[Tue Dec 09 21:42:10.046795 2025] [:error] [pid 30498:tid 30524] [client 4.147.190.83:54620] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nok.php"] [unique_id "aTgnMh2mcZJQ5qP_RC1LwwAAABY"]
[Tue Dec 09 21:42:10.496781 2025] [:error] [pid 30500:tid 30567] [client 4.147.190.83:55233] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asgtt.php"] [unique_id "aTgnMq2eIIK3JPWHCXUF6QAAAYo"]
[Tue Dec 09 21:42:10.810288 2025] [:error] [pid 30500:tid 30574] [client 4.147.190.83:48240] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asgtt.php"] [unique_id "aTgnMq2eIIK3JPWHCXUF7AAAAZE"]
[Tue Dec 09 21:42:11.066151 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:48251] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asgtt.php"] [unique_id "aTgnMx0pAnOyfXl_v41LdwAAAIg"]
[Tue Dec 09 21:42:11.331498 2025] [:error] [pid 36456:tid 36476] [client 4.147.190.83:54596] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asgtt.php"] [unique_id "aTgnMx0pAnOyfXl_v41LeQAAAJI"]
[Tue Dec 09 21:42:11.502174 2025] [:error] [pid 30500:tid 30563] [client 4.147.190.83:54602] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d57.php"] [unique_id "aTgnM62eIIK3JPWHCXUF7gAAAYY"]
[Tue Dec 09 21:42:11.577875 2025] [:error] [pid 5276:tid 5289] [client 4.147.190.83:27549] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d57.php"] [unique_id "aTgnM0tSXwbewdwyu-2FZQAAAMs"]
[Tue Dec 09 21:42:11.996759 2025] [:error] [pid 30498:tid 30522] [client 4.147.190.83:55272] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d57.php"] [unique_id "aTgnMx2mcZJQ5qP_RC1LxwAAABQ"]
[Tue Dec 09 21:42:12.990602 2025] [:error] [pid 36456:tid 36481] [client 4.147.190.83:48235] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d57.php"] [unique_id "aTgnNB0pAnOyfXl_v41LfQAAAJc"]
[Tue Dec 09 21:42:13.449835 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:54606] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTgnNR0pAnOyfXl_v41LgAAAAIs"]
[Tue Dec 09 21:42:13.540297 2025] [:error] [pid 30499:tid 30554] [client 4.147.190.83:27571] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTgnNU0x3OqZTOPp7ckQnAAAAVg"]
[Tue Dec 09 21:42:13.626624 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:54079] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTgnNR0pAnOyfXl_v41LgQAAAIg"]
[Tue Dec 09 21:42:13.764444 2025] [:error] [pid 5276:tid 5296] [client 4.147.190.83:54654] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTgnNUtSXwbewdwyu-2FdQAAANI"]
[Tue Dec 09 21:42:13.895127 2025] [:error] [pid 30499:tid 30539] [client 4.147.190.83:33338] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTgnNU0x3OqZTOPp7ckQnQAAAUk"]
[Tue Dec 09 21:42:14.027661 2025] [:error] [pid 30499:tid 30550] [client 4.147.190.83:54058] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTgnNk0x3OqZTOPp7ckQngAAAVQ"]
[Tue Dec 09 21:42:14.773251 2025] [:error] [pid 30499:tid 30537] [client 4.147.190.83:24351] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTgnNk0x3OqZTOPp7ckQoAAAAUc"]
[Tue Dec 09 21:42:15.676044 2025] [:error] [pid 36456:tid 36478] [client 4.147.190.83:54638] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTgnNx0pAnOyfXl_v41LhgAAAJQ"]
[Tue Dec 09 21:42:16.267695 2025] [:error] [pid 36456:tid 36480] [client 4.147.190.83:24355] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aTgnOB0pAnOyfXl_v41LigAAAJY"]
[Tue Dec 09 21:42:16.569777 2025] [:error] [pid 30500:tid 30572] [client 4.147.190.83:24372] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aTgnOK2eIIK3JPWHCXUF-QAAAY8"]
[Tue Dec 09 21:42:16.901257 2025] [:error] [pid 30499:tid 30549] [client 4.147.190.83:48198] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aTgnOE0x3OqZTOPp7ckQqAAAAVM"]
[Tue Dec 09 21:42:17.058626 2025] [:error] [pid 30499:tid 30541] [client 4.147.190.83:24366] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aTgnOU0x3OqZTOPp7ckQqgAAAUs"]
[Tue Dec 09 21:42:17.210458 2025] [:error] [pid 30498:tid 30502] [client 4.147.190.83:27543] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTgnOR2mcZJQ5qP_RC1LzgAAAAA"]
[Tue Dec 09 21:42:17.336913 2025] [:error] [pid 36456:tid 36477] [client 4.147.190.83:27537] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTgnOR0pAnOyfXl_v41LkAAAAJM"]
[Tue Dec 09 21:42:17.556153 2025] [:error] [pid 30498:tid 30523] [client 4.147.190.83:48205] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTgnOR2mcZJQ5qP_RC1L0AAAABU"]
[Tue Dec 09 21:42:18.367542 2025] [:error] [pid 30498:tid 30520] [client 4.147.190.83:48201] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTgnOh2mcZJQ5qP_RC1L0wAAABI"]
[Tue Dec 09 21:42:18.818827 2025] [:error] [pid 36456:tid 36463] [client 4.147.190.83:48193] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aTgnOh0pAnOyfXl_v41LlgAAAIU"]
[Tue Dec 09 21:42:18.963172 2025] [:error] [pid 30498:tid 30510] [client 4.147.190.83:27539] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aTgnOh2mcZJQ5qP_RC1L1gAAAAg"]
[Tue Dec 09 21:42:19.054977 2025] [:error] [pid 36456:tid 36478] [client 4.147.190.83:54627] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aTgnOx0pAnOyfXl_v41LlwAAAJQ"]
[Tue Dec 09 21:42:19.687697 2025] [:error] [pid 36456:tid 36461] [client 4.147.190.83:54630] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aTgnOx0pAnOyfXl_v41LmgAAAIM"]
[Tue Dec 09 21:42:20.475277 2025] [:error] [pid 30498:tid 30521] [client 4.147.190.83:48192] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aTgnPB2mcZJQ5qP_RC1L2wAAABM"]
[Tue Dec 09 21:42:21.232933 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:55283] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aTgnPR0pAnOyfXl_v41LngAAAIY"]
[Tue Dec 09 21:42:21.380113 2025] [:error] [pid 30500:tid 30578] [client 4.147.190.83:33016] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aTgnPa2eIIK3JPWHCXUF_QAAAZU"]
[Tue Dec 09 21:42:21.698715 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:24330] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aTgnPR0pAnOyfXl_v41LoAAAAJU"]
[Tue Dec 09 21:42:21.846124 2025] [:error] [pid 30498:tid 30509] [client 4.147.190.83:54640] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aTgnPR2mcZJQ5qP_RC1L5wAAAAc"]
[Tue Dec 09 21:42:21.957165 2025] [:error] [pid 30498:tid 30507] [client 4.147.190.83:27576] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aTgnPR2mcZJQ5qP_RC1L6QAAAAU"]
[Tue Dec 09 21:42:22.225188 2025] [:error] [pid 30498:tid 30518] [client 4.147.190.83:24335] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aTgnPh2mcZJQ5qP_RC1L7AAAABA"]
[Tue Dec 09 21:42:22.789795 2025] [:error] [pid 36456:tid 36462] [client 4.147.190.83:55257] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aTgnPh0pAnOyfXl_v41LowAAAIQ"]
[Tue Dec 09 21:42:23.448155 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:17136] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aTgnPx0pAnOyfXl_v41LpgAAAIs"]
[Tue Dec 09 21:42:23.503973 2025] [:error] [pid 30500:tid 30571] [client 4.147.190.83:27572] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aTgnP62eIIK3JPWHCXUF_gAAAY4"]
[Tue Dec 09 21:42:23.723027 2025] [:error] [pid 30498:tid 30525] [client 4.147.190.83:54594] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aTgnPx2mcZJQ5qP_RC1L9gAAABc"]
[Tue Dec 09 21:42:23.967110 2025] [:error] [pid 36456:tid 36459] [client 4.147.190.83:24367] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aTgnPx0pAnOyfXl_v41LqAAAAIE"]
[Tue Dec 09 21:42:24.105640 2025] [:error] [pid 30500:tid 30581] [client 4.147.190.83:24365] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aTgnQK2eIIK3JPWHCXUF_wAAAZg"]
[Tue Dec 09 21:42:24.544122 2025] [:error] [pid 30591:tid 30618] [client 4.147.190.83:32986] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aTgnQBG-g76drVdWQUWT7wAAAFg"]
[Tue Dec 09 21:42:25.496446 2025] [:error] [pid 30499:tid 30542] [client 4.147.190.83:54603] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aTgnQU0x3OqZTOPp7ckQrAAAAUw"]
[Tue Dec 09 21:42:26.130175 2025] [:error] [pid 30499:tid 30532] [client 4.147.190.83:54616] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aTgnQk0x3OqZTOPp7ckQrgAAAUI"]
[Tue Dec 09 21:42:26.383008 2025] [:error] [pid 30499:tid 30553] [client 4.147.190.83:54612] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keu.php"] [unique_id "aTgnQk0x3OqZTOPp7ckQrwAAAVc"]
[Tue Dec 09 21:42:26.547697 2025] [:error] [pid 30499:tid 30538] [client 4.147.190.83:27521] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keu.php"] [unique_id "aTgnQk0x3OqZTOPp7ckQsAAAAUg"]
[Tue Dec 09 21:42:26.670836 2025] [:error] [pid 30498:tid 30507] [client 4.147.190.83:55237] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keu.php"] [unique_id "aTgnQh2mcZJQ5qP_RC1L_AAAAAU"]
[Tue Dec 09 21:42:27.001861 2025] [:error] [pid 30499:tid 30548] [client 4.147.190.83:27526] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keu.php"] [unique_id "aTgnQ00x3OqZTOPp7ckQsQAAAVI"]
[Tue Dec 09 21:42:27.424854 2025] [:error] [pid 36456:tid 36468] [client 4.147.190.83:27570] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTgnQx0pAnOyfXl_v41LqwAAAIo"]
[Tue Dec 09 21:42:27.502911 2025] [:error] [pid 36456:tid 36474] [client 4.147.190.83:24345] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTgnQx0pAnOyfXl_v41LrAAAAJA"]
[Tue Dec 09 21:42:27.762475 2025] [:error] [pid 36456:tid 36475] [client 4.147.190.83:54032] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTgnQx0pAnOyfXl_v41LrQAAAJE"]
[Tue Dec 09 21:42:28.360081 2025] [:error] [pid 30500:tid 30576] [client 4.147.190.83:27540] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTgnRK2eIIK3JPWHCXUGCAAAAZM"]
[Tue Dec 09 21:42:28.963649 2025] [:error] [pid 36456:tid 36481] [client 4.147.190.83:55279] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTgnRB0pAnOyfXl_v41LsAAAAJc"]
[Tue Dec 09 21:42:29.293831 2025] [:error] [pid 30500:tid 30559] [client 4.147.190.83:33013] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTgnRa2eIIK3JPWHCXUGCQAAAYI"]
[Tue Dec 09 21:42:29.428299 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:54057] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTgnRR0pAnOyfXl_v41LsgAAAIg"]
[Tue Dec 09 21:42:29.561420 2025] [:error] [pid 36456:tid 36476] [client 4.147.190.83:48244] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTgnRR0pAnOyfXl_v41LtAAAAJI"]
[Tue Dec 09 21:42:30.023410 2025] [:error] [pid 36456:tid 36463] [client 4.147.190.83:55250] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aTgnRh0pAnOyfXl_v41LtwAAAIU"]
[Tue Dec 09 21:42:30.557662 2025] [:error] [pid 30591:tid 30610] [client 4.147.190.83:54072] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aTgnRhG-g76drVdWQUWT9gAAAFA"]
[Tue Dec 09 21:42:31.149524 2025] [:error] [pid 5276:tid 5299] [client 4.147.190.83:54070] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aTgnR0tSXwbewdwyu-2FqwAAANU"]
[Tue Dec 09 21:42:31.314206 2025] [:error] [pid 30591:tid 30614] [client 4.147.190.83:48233] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aTgnRxG-g76drVdWQUWT-AAAAFQ"]
[Tue Dec 09 21:42:31.588516 2025] [:error] [pid 30591:tid 30616] [client 4.147.190.83:54016] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aTgnRxG-g76drVdWQUWT-QAAAFY"]
[Tue Dec 09 21:42:31.911582 2025] [:error] [pid 30591:tid 30601] [client 4.147.190.83:48253] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aTgnRxG-g76drVdWQUWT-gAAAEc"]
[Tue Dec 09 21:42:32.419315 2025] [:error] [pid 30500:tid 30560] [client 4.147.190.83:55270] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aTgnSK2eIIK3JPWHCXUGCwAAAYM"]
[Tue Dec 09 21:42:32.768582 2025] [:error] [pid 30499:tid 30547] [client 4.147.190.83:27552] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aTgnSE0x3OqZTOPp7ckQtAAAAVE"]
[Tue Dec 09 21:42:32.975980 2025] [:error] [pid 30591:tid 30599] [client 4.147.190.83:24337] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv.php"] [unique_id "aTgnSBG-g76drVdWQUWT-wAAAEU"]
[Tue Dec 09 21:42:33.384030 2025] [:error] [pid 30499:tid 30549] [client 4.147.190.83:54611] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv.php"] [unique_id "aTgnSU0x3OqZTOPp7ckQtQAAAVM"]
[Tue Dec 09 21:42:33.908265 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:55238] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv.php"] [unique_id "aTgnSR0pAnOyfXl_v41LvAAAAJU"]
[Tue Dec 09 21:42:34.173100 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:48236] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv.php"] [unique_id "aTgnSh0pAnOyfXl_v41LvQAAAIY"]
[Tue Dec 09 21:42:34.247179 2025] [:error] [pid 36456:tid 36481] [client 4.147.190.83:48248] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanki.php"] [unique_id "aTgnSh0pAnOyfXl_v41LvwAAAJc"]
[Tue Dec 09 21:42:34.297541 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:54618] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanki.php"] [unique_id "aTgnSh0pAnOyfXl_v41LwAAAAIg"]
[Tue Dec 09 21:42:34.371132 2025] [:error] [pid 36456:tid 36460] [client 4.147.190.83:54593] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanki.php"] [unique_id "aTgnSh0pAnOyfXl_v41LwQAAAII"]
[Tue Dec 09 21:42:34.493317 2025] [:error] [pid 30591:tid 30603] [client 4.147.190.83:55284] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanki.php"] [unique_id "aTgnShG-g76drVdWQUWT_AAAAEk"]
[Tue Dec 09 21:42:34.559110 2025] [:error] [pid 30591:tid 30618] [client 4.147.190.83:55264] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aTgnShG-g76drVdWQUWT_QAAAFg"]
[Tue Dec 09 21:42:34.833968 2025] [:error] [pid 36456:tid 36473] [client 4.147.190.83:55242] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aTgnSh0pAnOyfXl_v41LwwAAAI8"]
[Tue Dec 09 21:42:35.047710 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:34373] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aTgnSx0pAnOyfXl_v41LxAAAAIs"]
[Tue Dec 09 21:42:35.428010 2025] [:error] [pid 36456:tid 36463] [client 4.147.190.83:24341] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aTgnSx0pAnOyfXl_v41LxQAAAIU"]
[Tue Dec 09 21:42:35.982666 2025] [:error] [pid 30498:tid 30511] [client 4.147.190.83:54622] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/555.php"] [unique_id "aTgnSx2mcZJQ5qP_RC1MBwAAAAk"]
[Tue Dec 09 21:42:36.132324 2025] [:error] [pid 30498:tid 30506] [client 4.147.190.83:54632] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/555.php"] [unique_id "aTgnTB2mcZJQ5qP_RC1MCgAAAAQ"]
[Tue Dec 09 21:42:36.225773 2025] [:error] [pid 30591:tid 30604] [client 4.147.190.83:24329] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/555.php"] [unique_id "aTgnTBG-g76drVdWQUWT_wAAAEo"]
[Tue Dec 09 21:42:36.342445 2025] [:error] [pid 30498:tid 30519] [client 4.147.190.83:27578] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/555.php"] [unique_id "aTgnTB2mcZJQ5qP_RC1MDAAAABE"]
[Tue Dec 09 21:42:36.398428 2025] [:error] [pid 30498:tid 30524] [client 4.147.190.83:54648] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTgnTB2mcZJQ5qP_RC1MDQAAABY"]
[Tue Dec 09 21:42:36.736064 2025] [:error] [pid 30498:tid 30507] [client 4.147.190.83:54074] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTgnTB2mcZJQ5qP_RC1MDgAAAAU"]
[Tue Dec 09 21:42:36.925478 2025] [:error] [pid 5276:tid 5301] [client 4.147.190.83:48218] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTgnTEtSXwbewdwyu-2FsAAAANc"]
[Tue Dec 09 21:42:37.477131 2025] [:error] [pid 30591:tid 30594] [client 4.147.190.83:54027] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTgnTRG-g76drVdWQUWUAgAAAEA"]
[Tue Dec 09 21:42:38.728969 2025] [:error] [pid 30499:tid 30540] [client 4.147.190.83:54071] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dds.php"] [unique_id "aTgnTk0x3OqZTOPp7ckQuAAAAUo"]
[Tue Dec 09 21:42:39.443140 2025] [:error] [pid 36456:tid 36475] [client 4.147.190.83:55240] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dds.php"] [unique_id "aTgnTx0pAnOyfXl_v41LzQAAAJE"]
[Tue Dec 09 21:42:39.847020 2025] [:error] [pid 30500:tid 30573] [client 4.147.190.83:27568] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dds.php"] [unique_id "aTgnT62eIIK3JPWHCXUGDgAAAZA"]
[Tue Dec 09 21:42:40.884902 2025] [:error] [pid 36456:tid 36462] [client 4.147.190.83:55247] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dds.php"] [unique_id "aTgnUB0pAnOyfXl_v41L0QAAAIQ"]
[Tue Dec 09 21:42:42.144103 2025] [:error] [pid 5276:tid 5298] [client 4.147.190.83:48243] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NH19T66T.php"] [unique_id "aTgnUktSXwbewdwyu-2FswAAANQ"]
[Tue Dec 09 21:42:42.807071 2025] [:error] [pid 36456:tid 36459] [client 4.147.190.83:54626] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NH19T66T.php"] [unique_id "aTgnUh0pAnOyfXl_v41L1QAAAIE"]
[Tue Dec 09 21:42:43.329978 2025] [:error] [pid 30498:tid 30504] [client 4.147.190.83:27583] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NH19T66T.php"] [unique_id "aTgnUx2mcZJQ5qP_RC1MGAAAAAI"]
[Tue Dec 09 21:42:43.420050 2025] [:error] [pid 36456:tid 36472] [client 4.147.190.83:24327] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NH19T66T.php"] [unique_id "aTgnUx0pAnOyfXl_v41L2QAAAI4"]
[Tue Dec 09 21:42:43.778247 2025] [:error] [pid 36456:tid 36461] [client 4.147.190.83:24354] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aTgnUx0pAnOyfXl_v41L3AAAAIM"]
[Tue Dec 09 21:42:44.167546 2025] [:error] [pid 36456:tid 36462] [client 4.147.190.83:54633] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aTgnVB0pAnOyfXl_v41L3wAAAIQ"]
[Tue Dec 09 21:42:44.494763 2025] [:error] [pid 30498:tid 30507] [client 4.147.190.83:27554] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aTgnVB2mcZJQ5qP_RC1MGgAAAAU"]
[Tue Dec 09 21:42:44.634623 2025] [:error] [pid 36456:tid 36476] [client 4.147.190.83:27574] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aTgnVB0pAnOyfXl_v41L4QAAAJI"]
[Tue Dec 09 21:42:44.784399 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:24382] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aTgnVB0pAnOyfXl_v41L4gAAAIs"]
[Tue Dec 09 21:42:45.621378 2025] [:error] [pid 36456:tid 36465] [client 4.147.190.83:24375] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aTgnVR0pAnOyfXl_v41L5AAAAIc"]
[Tue Dec 09 21:42:46.213642 2025] [:error] [pid 30591:tid 30597] [client 4.147.190.83:55274] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aTgnVhG-g76drVdWQUWUBgAAAEM"]
[Tue Dec 09 21:42:46.491422 2025] [:error] [pid 30500:tid 30577] [client 4.147.190.83:54610] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aTgnVq2eIIK3JPWHCXUGEQAAAZQ"]
[Tue Dec 09 21:42:47.432887 2025] [:error] [pid 30500:tid 30565] [client 4.147.190.83:54641] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aTgnV62eIIK3JPWHCXUGEwAAAYg"]
[Tue Dec 09 21:42:47.523170 2025] [:error] [pid 36456:tid 36467] [client 4.147.190.83:24379] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aTgnVx0pAnOyfXl_v41L6QAAAIk"]
[Tue Dec 09 21:42:47.753822 2025] [:error] [pid 36456:tid 36461] [client 4.147.190.83:55291] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aTgnVx0pAnOyfXl_v41L6wAAAIM"]
[Tue Dec 09 21:42:48.004890 2025] [:error] [pid 36456:tid 36481] [client 4.147.190.83:55285] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aTgnWB0pAnOyfXl_v41L7AAAAJc"]
[Tue Dec 09 21:42:48.099403 2025] [:error] [pid 36456:tid 36460] [client 4.147.190.83:48204] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "aTgnWB0pAnOyfXl_v41L7wAAAII"]
[Tue Dec 09 21:42:48.162293 2025] [:error] [pid 30498:tid 30513] [client 4.147.190.83:48252] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "aTgnWB2mcZJQ5qP_RC1MHgAAAAs"]
[Tue Dec 09 21:42:48.234920 2025] [:error] [pid 36456:tid 36462] [client 4.147.190.83:27577] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "aTgnWB0pAnOyfXl_v41L8AAAAIQ"]
[Tue Dec 09 21:42:48.334045 2025] [:error] [pid 30498:tid 30512] [client 4.147.190.83:48225] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "aTgnWB2mcZJQ5qP_RC1MIAAAAAo"]
[Tue Dec 09 21:42:48.500290 2025] [:error] [pid 30499:tid 30538] [client 4.147.190.83:54043] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTgnWE0x3OqZTOPp7ckQvQAAAUg"]
[Tue Dec 09 21:42:48.586747 2025] [:error] [pid 30499:tid 30535] [client 4.147.190.83:55266] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTgnWE0x3OqZTOPp7ckQvgAAAUU"]
[Tue Dec 09 21:42:48.870211 2025] [:error] [pid 30499:tid 30548] [client 4.147.190.83:35928] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTgnWE0x3OqZTOPp7ckQvwAAAVI"]
[Tue Dec 09 21:42:48.996065 2025] [:error] [pid 36456:tid 36465] [client 4.147.190.83:55252] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTgnWB0pAnOyfXl_v41L9AAAAIc"]
[Tue Dec 09 21:42:49.380051 2025] [:error] [pid 36456:tid 36459] [client 4.147.190.83:24368] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aTgnWR0pAnOyfXl_v41L9QAAAIE"]
[Tue Dec 09 21:42:49.453063 2025] [:error] [pid 36456:tid 36470] [client 4.147.190.83:27529] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aTgnWR0pAnOyfXl_v41L9gAAAIw"]
[Tue Dec 09 21:42:49.551311 2025] [:error] [pid 30499:tid 30552] [client 4.147.190.83:27534] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aTgnWU0x3OqZTOPp7ckQwAAAAVY"]
[Tue Dec 09 21:42:49.621889 2025] [:error] [pid 30498:tid 30514] [client 4.147.190.83:55253] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aTgnWR2mcZJQ5qP_RC1MIQAAAAw"]
[Tue Dec 09 21:42:49.861814 2025] [:error] [pid 30500:tid 30558] [client 4.147.190.83:48207] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aTgnWa2eIIK3JPWHCXUGFAAAAYE"]
[Tue Dec 09 21:42:50.512752 2025] [:error] [pid 30499:tid 30537] [client 4.147.190.83:24364] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aTgnWk0x3OqZTOPp7ckQwQAAAUc"]
[Tue Dec 09 21:42:50.754498 2025] [:error] [pid 30499:tid 30545] [client 4.147.190.83:24348] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aTgnWk0x3OqZTOPp7ckQwgAAAU8"]
[Tue Dec 09 21:42:51.231649 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:48247] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aTgnWx0pAnOyfXl_v41L-wAAAJU"]
[Tue Dec 09 21:42:51.317510 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:48255] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aTgnWx0pAnOyfXl_v41L_AAAAIY"]
[Tue Dec 09 21:42:51.454157 2025] [:error] [pid 30591:tid 30612] [client 4.147.190.83:17121] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aTgnWxG-g76drVdWQUWUCQAAAFI"]
[Tue Dec 09 21:42:51.639764 2025] [:error] [pid 30499:tid 30530] [client 4.147.190.83:24363] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aTgnW00x3OqZTOPp7ckQwwAAAUA"]
[Tue Dec 09 21:42:51.754268 2025] [:error] [pid 36456:tid 36460] [client 4.147.190.83:17147] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aTgnWx0pAnOyfXl_v41L_gAAAII"]
[Tue Dec 09 21:42:52.026773 2025] [:error] [pid 36456:tid 36475] [client 4.147.190.83:48206] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aTgnXB0pAnOyfXl_v41L_wAAAJE"]
[Tue Dec 09 21:42:52.295167 2025] [:error] [pid 36456:tid 36482] [client 4.147.190.83:54045] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aTgnXB0pAnOyfXl_v41MAgAAAJg"]
[Tue Dec 09 21:42:52.588704 2025] [:error] [pid 36456:tid 36470] [client 4.147.190.83:54636] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aTgnXB0pAnOyfXl_v41MBAAAAIw"]
[Tue Dec 09 21:42:52.798242 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:24333] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aTgnXB0pAnOyfXl_v41MBQAAAIg"]
[Tue Dec 09 21:42:52.949917 2025] [:error] [pid 30499:tid 30531] [client 4.147.190.83:24356] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile1.php"] [unique_id "aTgnXE0x3OqZTOPp7ckQxQAAAUE"]
[Tue Dec 09 21:42:52.990659 2025] [:error] [pid 30591:tid 30618] [client 4.147.190.83:55273] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile1.php"] [unique_id "aTgnXBG-g76drVdWQUWUCwAAAFg"]
[Tue Dec 09 21:42:53.064056 2025] [:error] [pid 36456:tid 36458] [client 4.147.190.83:35918] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile1.php"] [unique_id "aTgnXR0pAnOyfXl_v41MCAAAAIA"]
[Tue Dec 09 21:42:53.231322 2025] [:error] [pid 30500:tid 30559] [client 4.147.190.83:24352] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile1.php"] [unique_id "aTgnXa2eIIK3JPWHCXUGFwAAAYI"]
[Tue Dec 09 21:42:53.950529 2025] [:error] [pid 36456:tid 36463] [client 4.147.190.83:35909] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aTgnXR0pAnOyfXl_v41MCgAAAIU"]
[Tue Dec 09 21:42:54.156728 2025] [:error] [pid 30500:tid 30569] [client 4.147.190.83:35945] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aTgnXq2eIIK3JPWHCXUGGAAAAYw"]
[Tue Dec 09 21:42:54.438602 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:54598] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aTgnXh0pAnOyfXl_v41MDQAAAJU"]
[Tue Dec 09 21:42:54.861649 2025] [:error] [pid 30499:tid 30547] [client 4.147.190.83:35927] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aTgnXk0x3OqZTOPp7ckQxwAAAVE"]
[Tue Dec 09 21:42:55.583160 2025] [core:error] [pid 30500:tid 30574] [client 4.147.190.83:54600] AH10244: invalid URI path (/index.php/2%.php)
[Tue Dec 09 21:42:57.754135 2025] [:error] [pid 30500:tid 30579] [client 4.147.190.83:48219] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zgh.php"] [unique_id "aTgnYa2eIIK3JPWHCXUGJwAAAZY"]
[Tue Dec 09 21:42:58.232461 2025] [:error] [pid 36456:tid 36467] [client 4.147.190.83:27580] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zgh.php"] [unique_id "aTgnYh0pAnOyfXl_v41MFgAAAIk"]
[Tue Dec 09 21:42:59.436599 2025] [:error] [pid 30499:tid 30550] [client 4.147.190.83:32992] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zgh.php"] [unique_id "aTgnY00x3OqZTOPp7ckQyQAAAVQ"]
[Tue Dec 09 21:43:00.584602 2025] [:error] [pid 30591:tid 30602] [client 4.147.190.83:48238] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zgh.php"] [unique_id "aTgnZBG-g76drVdWQUWUDQAAAEg"]
[Tue Dec 09 21:43:01.561710 2025] [:error] [pid 30498:tid 30510] [client 4.147.190.83:16984] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTgnZR2mcZJQ5qP_RC1MLgAAAAg"]
[Tue Dec 09 21:43:02.845799 2025] [:error] [pid 5276:tid 5296] [client 4.147.190.83:34431] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTgnZktSXwbewdwyu-2FtQAAANI"]
[Tue Dec 09 21:43:04.484320 2025] [:error] [pid 30591:tid 30610] [client 4.147.190.83:24383] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTgnaBG-g76drVdWQUWUEQAAAFA"]
[Tue Dec 09 21:43:05.709115 2025] [:error] [pid 30500:tid 30568] [client 4.147.190.83:32996] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTgnaa2eIIK3JPWHCXUGLAAAAYs"]
[Tue Dec 09 21:43:06.076384 2025] [:error] [pid 30591:tid 30614] [client 4.147.190.83:27579] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aTgnahG-g76drVdWQUWUFAAAAFQ"]
[Tue Dec 09 21:43:06.663317 2025] [:error] [pid 30498:tid 30518] [client 4.147.190.83:35924] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aTgnah2mcZJQ5qP_RC1MMAAAABA"]
[Tue Dec 09 21:43:07.218663 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:48222] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aTgnax0pAnOyfXl_v41MHwAAAIg"]
[Tue Dec 09 21:43:08.190089 2025] [:error] [pid 30500:tid 30578] [client 4.147.190.83:48221] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aTgnbK2eIIK3JPWHCXUGLwAAAZU"]
[Tue Dec 09 21:43:09.392783 2025] [:error] [pid 30591:tid 30594] [client 4.147.190.83:27566] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell1.php"] [unique_id "aTgnbRG-g76drVdWQUWUGgAAAEA"]
[Tue Dec 09 21:43:10.599029 2025] [:error] [pid 30498:tid 30503] [client 4.147.190.83:29768] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell1.php"] [unique_id "aTgnbh2mcZJQ5qP_RC1MNwAAAAE"]
[Tue Dec 09 21:43:11.495929 2025] [:error] [pid 30591:tid 30600] [client 4.147.190.83:29271] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell1.php"] [unique_id "aTgnbxG-g76drVdWQUWUJwAAAEY"]
[Tue Dec 09 21:43:11.865764 2025] [:error] [pid 30499:tid 30536] [client 4.147.190.83:29272] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell1.php"] [unique_id "aTgnb00x3OqZTOPp7ckQ1QAAAUY"]
[Tue Dec 09 21:43:12.153389 2025] [:error] [pid 30499:tid 30550] [client 4.147.190.83:29822] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aTgncE0x3OqZTOPp7ckQ1wAAAVQ"]
[Tue Dec 09 21:43:12.210247 2025] [:error] [pid 5276:tid 5287] [client 4.147.190.83:16944] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aTgncEtSXwbewdwyu-2FxwAAAMk"]
[Tue Dec 09 21:43:12.442091 2025] [:error] [pid 36456:tid 36477] [client 4.147.190.83:16649] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aTgncB0pAnOyfXl_v41MKgAAAJM"]
[Tue Dec 09 21:43:12.499566 2025] [:error] [pid 30498:tid 30526] [client 4.147.190.83:16661] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aTgncB2mcZJQ5qP_RC1MPQAAABg"]
[Tue Dec 09 21:43:12.623421 2025] [:error] [pid 5276:tid 5284] [client 4.147.190.83:55181] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aTgncEtSXwbewdwyu-2FyQAAAMY"]
[Tue Dec 09 21:43:12.864992 2025] [:error] [pid 30500:tid 30567] [client 4.147.190.83:20770] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aTgncK2eIIK3JPWHCXUGNwAAAYo"]
[Tue Dec 09 21:43:13.204661 2025] [:error] [pid 30500:tid 30569] [client 4.147.190.83:16642] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aTgnca2eIIK3JPWHCXUGOAAAAYw"]
[Tue Dec 09 21:43:13.343470 2025] [:error] [pid 30499:tid 30553] [client 4.147.190.83:55177] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aTgncU0x3OqZTOPp7ckQ2wAAAVc"]
[Tue Dec 09 21:43:13.399356 2025] [:error] [pid 30591:tid 30616] [client 4.147.190.83:36520] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aTgncRG-g76drVdWQUWUNwAAAFY"]
[Tue Dec 09 21:43:13.558844 2025] [:error] [pid 30591:tid 30618] [client 4.147.190.83:16697] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aTgncRG-g76drVdWQUWUOQAAAFg"]
[Tue Dec 09 21:43:14.579254 2025] [:error] [pid 30500:tid 30557] [client 4.147.190.83:16957] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aTgncq2eIIK3JPWHCXUGPAAAAYA"]
[Tue Dec 09 21:43:14.826629 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:22044] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aTgnch0pAnOyfXl_v41MMAAAAJU"]
[Tue Dec 09 21:43:15.396048 2025] [:error] [pid 30500:tid 30571] [client 4.147.190.83:16703] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pent.php"] [unique_id "aTgnc62eIIK3JPWHCXUGPQAAAY4"]
[Tue Dec 09 21:43:15.826359 2025] [:error] [pid 36456:tid 36459] [client 4.147.190.83:29745] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pent.php"] [unique_id "aTgncx0pAnOyfXl_v41MMwAAAIE"]
[Tue Dec 09 21:43:16.737322 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:42802] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pent.php"] [unique_id "aTgndB0pAnOyfXl_v41MNQAAAIY"]
[Tue Dec 09 21:43:17.196889 2025] [:error] [pid 36456:tid 36465] [client 4.147.190.83:22023] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pent.php"] [unique_id "aTgndR0pAnOyfXl_v41MNwAAAIc"]
[Tue Dec 09 21:43:17.456766 2025] [:error] [pid 36456:tid 36476] [client 4.147.190.83:29190] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wfile.php"] [unique_id "aTgndR0pAnOyfXl_v41MOgAAAJI"]
[Tue Dec 09 21:43:18.321158 2025] [:error] [pid 36456:tid 36463] [client 4.147.190.83:42789] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wfile.php"] [unique_id "aTgndh0pAnOyfXl_v41MPAAAAIU"]
[Tue Dec 09 21:43:18.446100 2025] [:error] [pid 30500:tid 30562] [client 4.147.190.83:16870] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wfile.php"] [unique_id "aTgndq2eIIK3JPWHCXUGQgAAAYU"]
[Tue Dec 09 21:43:18.502076 2025] [:error] [pid 30500:tid 30581] [client 4.147.190.83:20746] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wfile.php"] [unique_id "aTgndq2eIIK3JPWHCXUGQwAAAZg"]
[Tue Dec 09 21:43:18.582028 2025] [:error] [pid 30498:tid 30516] [client 4.147.190.83:16878] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hexx.php"] [unique_id "aTgndh2mcZJQ5qP_RC1MRwAAAA4"]
[Tue Dec 09 21:43:19.300257 2025] [:error] [pid 30591:tid 30598] [client 4.147.190.83:16648] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hexx.php"] [unique_id "aTgndxG-g76drVdWQUWUUgAAAEQ"]
[Tue Dec 09 21:43:19.478793 2025] [:error] [pid 30498:tid 30509] [client 4.147.190.83:29712] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hexx.php"] [unique_id "aTgndx2mcZJQ5qP_RC1MSAAAAAc"]
[Tue Dec 09 21:43:19.532001 2025] [:error] [pid 30591:tid 30596] [client 4.147.190.83:20773] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hexx.php"] [unique_id "aTgndxG-g76drVdWQUWUUwAAAEI"]
[Tue Dec 09 21:43:19.596923 2025] [:error] [pid 5276:tid 5283] [client 4.147.190.83:22034] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aTgnd0tSXwbewdwyu-2F3AAAAMU"]
[Tue Dec 09 21:43:19.726518 2025] [:error] [pid 5276:tid 5282] [client 4.147.190.83:22038] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aTgnd0tSXwbewdwyu-2F3QAAAMQ"]
[Tue Dec 09 21:43:19.882430 2025] [:error] [pid 36456:tid 36480] [client 4.147.190.83:42770] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aTgndx0pAnOyfXl_v41MQQAAAJY"]
[Tue Dec 09 21:43:19.929620 2025] [:error] [pid 30498:tid 30521] [client 4.147.190.83:42792] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aTgndx2mcZJQ5qP_RC1MSQAAABM"]
[Tue Dec 09 21:43:20.244017 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:22076] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aTgneB0pAnOyfXl_v41MQgAAAIY"]
[Tue Dec 09 21:43:21.325421 2025] [:error] [pid 5276:tid 5279] [client 4.147.190.83:16887] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aTgneUtSXwbewdwyu-2F4wAAAME"]
[Tue Dec 09 21:43:22.184240 2025] [:error] [pid 30498:tid 30517] [client 4.147.190.83:16874] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aTgneh2mcZJQ5qP_RC1MTAAAAA8"]
[Tue Dec 09 21:43:22.898661 2025] [:error] [pid 30500:tid 30572] [client 4.147.190.83:29203] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aTgneq2eIIK3JPWHCXUGSAAAAY8"]
[Tue Dec 09 21:43:23.791178 2025] [:error] [pid 30498:tid 30523] [client 4.147.190.83:42776] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1%25.php"] [unique_id "aTgnex2mcZJQ5qP_RC1MTgAAABU"]
[Tue Dec 09 21:43:24.110412 2025] [:error] [pid 30498:tid 30511] [client 4.147.190.83:42798] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1%25.php"] [unique_id "aTgnfB2mcZJQ5qP_RC1MTwAAAAk"]
[Tue Dec 09 21:43:24.421194 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:29185] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1%25.php"] [unique_id "aTgnfB0pAnOyfXl_v41MSAAAAJU"]
[Tue Dec 09 21:43:25.102809 2025] [:error] [pid 30498:tid 30508] [client 4.147.190.83:33850] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1%25.php"] [unique_id "aTgnfR2mcZJQ5qP_RC1MUQAAAAY"]
[Tue Dec 09 21:43:25.626159 2025] [:error] [pid 30500:tid 30567] [client 4.147.190.83:16687] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aTgnfa2eIIK3JPWHCXUGSgAAAYo"]
[Tue Dec 09 21:43:25.710286 2025] [:error] [pid 30500:tid 30566] [client 4.147.190.83:33846] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aTgnfa2eIIK3JPWHCXUGSwAAAYk"]
[Tue Dec 09 21:43:25.811351 2025] [:error] [pid 36456:tid 36459] [client 4.147.190.83:33802] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aTgnfR0pAnOyfXl_v41MSgAAAIE"]
[Tue Dec 09 21:43:26.001007 2025] [:error] [pid 30499:tid 30530] [client 4.147.190.83:16676] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aTgnfU0x3OqZTOPp7ckQ8wAAAUA"]
[Tue Dec 09 21:43:26.447593 2025] [:error] [pid 36456:tid 36462] [client 4.147.190.83:29207] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aTgnfh0pAnOyfXl_v41MTAAAAIQ"]
[Tue Dec 09 21:43:26.675831 2025] [:error] [pid 30500:tid 30560] [client 4.147.190.83:16664] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aTgnfq2eIIK3JPWHCXUGTAAAAYM"]
[Tue Dec 09 21:43:27.436241 2025] [:error] [pid 36456:tid 36468] [client 4.147.190.83:33812] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aTgnfx0pAnOyfXl_v41MTgAAAIo"]
[Tue Dec 09 21:43:28.177888 2025] [:error] [pid 30499:tid 30549] [client 4.147.190.83:29188] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aTgngE0x3OqZTOPp7ckQ9wAAAVM"]
[Tue Dec 09 21:43:28.595345 2025] [:error] [pid 30499:tid 30540] [client 4.147.190.83:29200] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aTgngE0x3OqZTOPp7ckQ-gAAAUo"]
[Tue Dec 09 21:43:28.890329 2025] [:error] [pid 30500:tid 30574] [client 4.147.190.83:33793] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aTgngK2eIIK3JPWHCXUGTQAAAZE"]
[Tue Dec 09 21:43:29.664445 2025] [:error] [pid 30591:tid 30602] [client 4.147.190.83:16860] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aTgngRG-g76drVdWQUWUZQAAAEg"]
[Tue Dec 09 21:43:30.500361 2025] [:error] [pid 30500:tid 30568] [client 4.147.190.83:33836] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aTgngq2eIIK3JPWHCXUGTgAAAYs"]
[Tue Dec 09 21:43:31.130464 2025] [:error] [pid 36456:tid 36482] [client 4.147.190.83:29696] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aTgngx0pAnOyfXl_v41MUgAAAJg"]
[Tue Dec 09 21:43:31.487806 2025] [:error] [pid 30500:tid 30575] [client 4.147.190.83:24388] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aTgng62eIIK3JPWHCXUGUQAAAZI"]
[Tue Dec 09 21:43:31.934264 2025] [:error] [pid 36456:tid 36473] [client 4.147.190.83:28605] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aTgngx0pAnOyfXl_v41MUwAAAI8"]
[Tue Dec 09 21:43:33.084101 2025] [:error] [pid 5276:tid 5279] [client 4.147.190.83:27997] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aTgnhUtSXwbewdwyu-2F9AAAAME"]
[Tue Dec 09 21:43:34.063902 2025] [:error] [pid 30500:tid 30562] [client 4.147.190.83:32918] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTgnhq2eIIK3JPWHCXUGVAAAAYU"]
[Tue Dec 09 21:43:34.743365 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:28031] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTgnhh0pAnOyfXl_v41MVgAAAIs"]
[Tue Dec 09 21:43:35.057032 2025] [:error] [pid 30591:tid 30616] [client 4.147.190.83:27983] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTgnhxG-g76drVdWQUWUagAAAFY"]
[Tue Dec 09 21:43:35.837359 2025] [:error] [pid 36456:tid 36459] [client 4.147.190.83:29742] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTgnhx0pAnOyfXl_v41MWQAAAIE"]
[Tue Dec 09 21:43:37.449724 2025] [:error] [pid 30591:tid 30608] [client 4.147.190.83:17059] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aTgniRG-g76drVdWQUWUbgAAAE4"]
[Tue Dec 09 21:43:38.172905 2025] [:error] [pid 36456:tid 36461] [client 4.147.190.83:17027] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aTgnih0pAnOyfXl_v41MWgAAAIM"]
[Tue Dec 09 21:43:38.776518 2025] [:error] [pid 30591:tid 30595] [client 4.147.190.83:29749] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aTgnihG-g76drVdWQUWUbwAAAEE"]
[Tue Dec 09 21:43:39.027922 2025] [:error] [pid 30591:tid 30611] [client 4.147.190.83:17024] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aTgnixG-g76drVdWQUWUcAAAAFE"]
[Tue Dec 09 21:43:39.156330 2025] [:error] [pid 30499:tid 30534] [client 4.147.190.83:28581] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTgni00x3OqZTOPp7ckRAwAAAUQ"]
[Tue Dec 09 21:43:39.296058 2025] [:error] [pid 30591:tid 30615] [client 4.147.190.83:28566] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTgnixG-g76drVdWQUWUcQAAAFU"]
[Tue Dec 09 21:43:39.481071 2025] [:error] [pid 36456:tid 36458] [client 4.147.190.83:27972] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTgnix0pAnOyfXl_v41MXQAAAIA"]
[Tue Dec 09 21:43:39.768192 2025] [:error] [pid 30500:tid 30572] [client 4.147.190.83:21539] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTgni62eIIK3JPWHCXUGVwAAAY8"]
[Tue Dec 09 21:43:40.529962 2025] [:error] [pid 30499:tid 30536] [client 4.147.190.83:29721] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aTgnjE0x3OqZTOPp7ckRBQAAAUY"]
[Tue Dec 09 21:43:41.433203 2025] [:error] [pid 30498:tid 30506] [client 4.147.190.83:29701] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aTgnjR2mcZJQ5qP_RC1MXQAAAAQ"]
[Tue Dec 09 21:43:42.166651 2025] [:error] [pid 5276:tid 5296] [client 4.147.190.83:29702] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aTgnjktSXwbewdwyu-2F-AAAANI"]
[Tue Dec 09 21:43:42.948787 2025] [:error] [pid 30498:tid 30502] [client 4.147.190.83:17042] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aTgnjh2mcZJQ5qP_RC1MYAAAAAA"]
[Tue Dec 09 21:43:43.126727 2025] [:error] [pid 30499:tid 30542] [client 4.147.190.83:27980] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q1.php"] [unique_id "aTgnj00x3OqZTOPp7ckRBwAAAUw"]
[Tue Dec 09 21:43:43.249083 2025] [:error] [pid 30499:tid 30538] [client 4.147.190.83:24384] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q1.php"] [unique_id "aTgnj00x3OqZTOPp7ckRCAAAAUg"]
[Tue Dec 09 21:43:43.571779 2025] [:error] [pid 36456:tid 36473] [client 4.147.190.83:29718] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q1.php"] [unique_id "aTgnjx0pAnOyfXl_v41MYwAAAI8"]
[Tue Dec 09 21:43:43.754375 2025] [:error] [pid 5276:tid 5278] [client 4.147.190.83:17041] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q1.php"] [unique_id "aTgnj0tSXwbewdwyu-2F-QAAAMA"]
[Tue Dec 09 21:43:43.936503 2025] [:error] [pid 5276:tid 5284] [client 4.147.190.83:33894] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aTgnj0tSXwbewdwyu-2F-gAAAMY"]
[Tue Dec 09 21:43:44.103907 2025] [:error] [pid 36456:tid 36465] [client 4.147.190.83:21541] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aTgnkB0pAnOyfXl_v41MZAAAAIc"]
[Tue Dec 09 21:43:44.149648 2025] [:error] [pid 30498:tid 30524] [client 4.147.190.83:27976] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aTgnkB2mcZJQ5qP_RC1MZQAAABY"]
[Tue Dec 09 21:43:44.303853 2025] [:error] [pid 30498:tid 30507] [client 4.147.190.83:28578] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aTgnkB2mcZJQ5qP_RC1MZgAAAAU"]
[Tue Dec 09 21:43:44.444053 2025] [:error] [pid 30498:tid 30513] [client 4.147.190.83:33856] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aTgnkB2mcZJQ5qP_RC1MZwAAAAs"]
[Tue Dec 09 21:43:44.520920 2025] [:error] [pid 30591:tid 30601] [client 4.147.190.83:42731] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aTgnkBG-g76drVdWQUWUdgAAAEc"]
[Tue Dec 09 21:43:44.665145 2025] [:error] [pid 30498:tid 30512] [client 4.147.190.83:21507] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aTgnkB2mcZJQ5qP_RC1MaAAAAAo"]
[Tue Dec 09 21:43:44.769973 2025] [:error] [pid 30498:tid 30516] [client 4.147.190.83:17043] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aTgnkB2mcZJQ5qP_RC1MaQAAAA4"]
[Tue Dec 09 21:43:44.924633 2025] [:error] [pid 30498:tid 30519] [client 4.147.190.83:29723] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTgnkB2mcZJQ5qP_RC1MawAAABE"]
[Tue Dec 09 21:43:46.299705 2025] [:error] [pid 5276:tid 5301] [client 4.147.190.83:21531] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTgnkktSXwbewdwyu-2F_wAAANc"]
[Tue Dec 09 21:43:46.376784 2025] [:error] [pid 36456:tid 36477] [client 4.147.190.83:21546] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTgnkh0pAnOyfXl_v41MZQAAAJM"]
[Tue Dec 09 21:43:46.543084 2025] [:error] [pid 30498:tid 30511] [client 4.147.190.83:28585] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTgnkh2mcZJQ5qP_RC1MbgAAAAk"]
[Tue Dec 09 21:43:46.712434 2025] [:error] [pid 30498:tid 30506] [client 4.147.190.83:48198] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTgnkh2mcZJQ5qP_RC1MbwAAAAQ"]
[Tue Dec 09 21:43:46.817991 2025] [:error] [pid 30498:tid 30514] [client 4.147.190.83:21524] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTgnkh2mcZJQ5qP_RC1McQAAAAw"]
[Tue Dec 09 21:43:47.032560 2025] [:error] [pid 30498:tid 30502] [client 4.147.190.83:42694] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTgnkx2mcZJQ5qP_RC1McgAAAAA"]
[Tue Dec 09 21:43:47.154988 2025] [:error] [pid 30498:tid 30503] [client 4.147.190.83:42700] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTgnkx2mcZJQ5qP_RC1McwAAAAE"]
[Tue Dec 09 21:43:47.671295 2025] [:error] [pid 30499:tid 30552] [client 4.147.190.83:28573] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "aTgnk00x3OqZTOPp7ckRCwAAAVY"]
[Tue Dec 09 21:43:48.269970 2025] [:error] [pid 5276:tid 5286] [client 4.147.190.83:28588] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "aTgnlEtSXwbewdwyu-2GAQAAAMg"]
[Tue Dec 09 21:43:48.592277 2025] [:error] [pid 36456:tid 36468] [client 4.147.190.83:24412] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "aTgnlB0pAnOyfXl_v41MaAAAAIo"]
[Tue Dec 09 21:43:48.844253 2025] [:error] [pid 30498:tid 30525] [client 4.147.190.83:17083] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "aTgnlB2mcZJQ5qP_RC1MdQAAABc"]
[Tue Dec 09 21:43:49.015488 2025] [:error] [pid 36456:tid 36474] [client 4.147.190.83:42729] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTgnlR0pAnOyfXl_v41MaQAAAJA"]
[Tue Dec 09 21:43:49.212266 2025] [:error] [pid 36456:tid 36475] [client 4.147.190.83:42699] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTgnlR0pAnOyfXl_v41MagAAAJE"]
[Tue Dec 09 21:43:49.526231 2025] [:error] [pid 36456:tid 36471] [client 4.147.190.83:42714] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTgnlR0pAnOyfXl_v41MbQAAAI0"]
[Tue Dec 09 21:43:49.599237 2025] [:error] [pid 36456:tid 36482] [client 4.147.190.83:17061] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTgnlR0pAnOyfXl_v41MbgAAAJg"]
[Tue Dec 09 21:43:49.780765 2025] [:error] [pid 36456:tid 36473] [client 4.147.190.83:29725] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aTgnlR0pAnOyfXl_v41MbwAAAI8"]
[Tue Dec 09 21:43:49.952897 2025] [:error] [pid 36456:tid 36463] [client 4.147.190.83:29730] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aTgnlR0pAnOyfXl_v41McAAAAIU"]
[Tue Dec 09 21:43:50.097481 2025] [:error] [pid 30498:tid 30519] [client 4.147.190.83:29716] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aTgnlh2mcZJQ5qP_RC1MeAAAABE"]
[Tue Dec 09 21:43:50.188175 2025] [:error] [pid 36456:tid 36477] [client 4.147.190.83:42746] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aTgnlh0pAnOyfXl_v41McgAAAJM"]
[Tue Dec 09 21:43:50.329706 2025] [:error] [pid 5276:tid 5279] [client 4.147.190.83:42770] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "aTgnlktSXwbewdwyu-2GAgAAAME"]
[Tue Dec 09 21:43:50.504328 2025] [:error] [pid 5276:tid 5294] [client 4.147.190.83:17025] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "aTgnlktSXwbewdwyu-2GAwAAANA"]
[Tue Dec 09 21:43:50.695558 2025] [:error] [pid 30591:tid 30594] [client 4.147.190.83:42737] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "aTgnlhG-g76drVdWQUWUeQAAAEA"]
[Tue Dec 09 21:43:50.780392 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:27529] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "aTgnlh0pAnOyfXl_v41MdAAAAJU"]
[Tue Dec 09 21:43:51.012092 2025] [:error] [pid 30500:tid 30579] [client 4.147.190.83:29758] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aTgnl62eIIK3JPWHCXUGWwAAAZY"]
[Tue Dec 09 21:43:51.107792 2025] [:error] [pid 36456:tid 36470] [client 4.147.190.83:24398] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aTgnlx0pAnOyfXl_v41MdQAAAIw"]
[Tue Dec 09 21:43:51.643275 2025] [:error] [pid 30591:tid 30595] [client 4.147.190.83:48207] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aTgnlxG-g76drVdWQUWUegAAAEE"]
[Tue Dec 09 21:43:52.771196 2025] [:error] [pid 36456:tid 36460] [client 4.147.190.83:28548] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aTgnmB0pAnOyfXl_v41MewAAAII"]
[Tue Dec 09 21:43:53.625124 2025] [:error] [pid 30591:tid 30605] [client 4.147.190.83:48163] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php.php"] [unique_id "aTgnmRG-g76drVdWQUWUfAAAAEs"]
[Tue Dec 09 21:43:53.967689 2025] [:error] [pid 30498:tid 30514] [client 4.147.190.83:42745] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php.php"] [unique_id "aTgnmR2mcZJQ5qP_RC1MegAAAAw"]
[Tue Dec 09 21:43:54.673819 2025] [:error] [pid 30499:tid 30549] [client 4.147.190.83:29717] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php.php"] [unique_id "aTgnmk0x3OqZTOPp7ckRDgAAAVM"]
[Tue Dec 09 21:43:54.960910 2025] [:error] [pid 30500:tid 30577] [client 4.147.190.83:21513] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php.php"] [unique_id "aTgnmq2eIIK3JPWHCXUGYwAAAZQ"]
[Tue Dec 09 21:43:55.059269 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:17186] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xz99.php"] [unique_id "aTgnmx0pAnOyfXl_v41MfgAAAJU"]
[Tue Dec 09 21:43:55.150588 2025] [:error] [pid 36456:tid 36470] [client 4.147.190.83:27978] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xz99.php"] [unique_id "aTgnmx0pAnOyfXl_v41MfwAAAIw"]
[Tue Dec 09 21:43:55.208976 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:21522] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xz99.php"] [unique_id "aTgnmx0pAnOyfXl_v41MgAAAAIs"]
[Tue Dec 09 21:43:55.309417 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:42711] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xz99.php"] [unique_id "aTgnmx0pAnOyfXl_v41MggAAAIg"]
[Tue Dec 09 21:43:55.569659 2025] [:error] [pid 30500:tid 30561] [client 4.147.190.83:17208] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "aTgnm62eIIK3JPWHCXUGZQAAAYQ"]
[Tue Dec 09 21:43:55.646909 2025] [:error] [pid 30500:tid 30564] [client 4.147.190.83:21510] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "aTgnm62eIIK3JPWHCXUGZgAAAYc"]
[Tue Dec 09 21:43:56.077576 2025] [:error] [pid 30500:tid 30572] [client 4.147.190.83:42712] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "aTgnnK2eIIK3JPWHCXUGaQAAAY8"]
[Tue Dec 09 21:43:56.560671 2025] [:error] [pid 30500:tid 30559] [client 4.147.190.83:17170] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "aTgnnK2eIIK3JPWHCXUGbAAAAYI"]
[Tue Dec 09 21:43:56.970202 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:27930] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ifm.php"] [unique_id "aTgnnB0pAnOyfXl_v41MgwAAAIY"]
[Tue Dec 09 21:43:59.848724 2025] [:error] [pid 30498:tid 30509] [client 4.147.190.83:48168] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTgnnx2mcZJQ5qP_RC1MigAAAAc"]
[Tue Dec 09 21:43:59.958897 2025] [:error] [pid 30500:tid 30580] [client 4.147.190.83:17188] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTgnn62eIIK3JPWHCXUGcQAAAZc"]
[Tue Dec 09 21:44:00.146910 2025] [:error] [pid 30498:tid 30506] [client 4.147.190.83:48130] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTgnoB2mcZJQ5qP_RC1MiwAAAAQ"]
[Tue Dec 09 21:44:00.398599 2025] [:error] [pid 36456:tid 36458] [client 4.147.190.83:17171] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTgnoB0pAnOyfXl_v41MhAAAAIA"]
[Tue Dec 09 21:44:00.628833 2025] [:error] [pid 36456:tid 36471] [client 4.147.190.83:17154] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aTgnoB0pAnOyfXl_v41MhQAAAI0"]
[Tue Dec 09 21:44:00.892073 2025] [:error] [pid 30500:tid 30561] [client 4.147.190.83:42718] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aTgnoK2eIIK3JPWHCXUGcwAAAYQ"]
[Tue Dec 09 21:44:01.001211 2025] [:error] [pid 30499:tid 30554] [client 4.147.190.83:55201] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aTgnoU0x3OqZTOPp7ckRDwAAAVg"]
[Tue Dec 09 21:44:01.082264 2025] [:error] [pid 30498:tid 30502] [client 4.147.190.83:33374] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aTgnoR2mcZJQ5qP_RC1MjgAAAAA"]
[Tue Dec 09 21:44:01.198682 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:27909] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mpxct.php"] [unique_id "aTgnoR0pAnOyfXl_v41MiAAAAJU"]
[Tue Dec 09 21:44:01.296021 2025] [:error] [pid 30498:tid 30515] [client 4.147.190.83:27922] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mpxct.php"] [unique_id "aTgnoR2mcZJQ5qP_RC1MjwAAAA0"]
[Tue Dec 09 21:44:01.684750 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:17162] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mpxct.php"] [unique_id "aTgnoR0pAnOyfXl_v41MigAAAIs"]
[Tue Dec 09 21:44:01.927563 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:27955] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mpxct.php"] [unique_id "aTgnoR0pAnOyfXl_v41MjAAAAIg"]
[Tue Dec 09 21:44:02.712637 2025] [:error] [pid 30499:tid 30540] [client 4.147.190.83:27939] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aTgnok0x3OqZTOPp7ckREAAAAUo"]
[Tue Dec 09 21:44:03.291357 2025] [:error] [pid 30499:tid 30542] [client 4.147.190.83:42733] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aTgno00x3OqZTOPp7ckREQAAAUw"]
[Tue Dec 09 21:44:03.702643 2025] [:error] [pid 30498:tid 30510] [client 4.147.190.83:27943] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aTgnox2mcZJQ5qP_RC1MkQAAAAg"]
[Tue Dec 09 21:44:05.069936 2025] [:error] [pid 30499:tid 30550] [client 4.147.190.83:27925] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aTgnpU0x3OqZTOPp7ckRFgAAAVQ"]
[Tue Dec 09 21:44:05.367624 2025] [:error] [pid 30499:tid 30538] [client 4.147.190.83:16759] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kki.php"] [unique_id "aTgnpU0x3OqZTOPp7ckRFwAAAUg"]
[Tue Dec 09 21:44:05.791069 2025] [:error] [pid 30499:tid 30537] [client 4.147.190.83:16624] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kki.php"] [unique_id "aTgnpU0x3OqZTOPp7ckRGgAAAUc"]
[Tue Dec 09 21:44:06.249431 2025] [:error] [pid 30500:tid 30568] [client 4.147.190.83:33372] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kki.php"] [unique_id "aTgnpq2eIIK3JPWHCXUGewAAAYs"]
[Tue Dec 09 21:44:06.607549 2025] [:error] [pid 30498:tid 30517] [client 4.147.190.83:33369] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kki.php"] [unique_id "aTgnph2mcZJQ5qP_RC1MkgAAAA8"]
[Tue Dec 09 21:44:06.934938 2025] [:error] [pid 30499:tid 30539] [client 4.147.190.83:27929] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "aTgnpk0x3OqZTOPp7ckRGwAAAUk"]
[Tue Dec 09 21:44:07.687294 2025] [:error] [pid 30498:tid 30516] [client 4.147.190.83:17212] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "aTgnpx2mcZJQ5qP_RC1MkwAAAA4"]
[Tue Dec 09 21:44:08.647589 2025] [:error] [pid 30500:tid 30569] [client 4.147.190.83:33401] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "aTgnqK2eIIK3JPWHCXUGfgAAAYw"]
[Tue Dec 09 21:44:09.259223 2025] [:error] [pid 30498:tid 30512] [client 4.147.190.83:23179] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "aTgnqR2mcZJQ5qP_RC1MlAAAAAo"]
[Tue Dec 09 21:44:09.349173 2025] [:error] [pid 5276:tid 5281] [client 4.147.190.83:16593] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aTgnqUtSXwbewdwyu-2GEwAAAMM"]
[Tue Dec 09 21:44:09.538375 2025] [:error] [pid 36456:tid 36474] [client 4.147.190.83:33379] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aTgnqR0pAnOyfXl_v41MjwAAAJA"]
[Tue Dec 09 21:44:09.869940 2025] [:error] [pid 30499:tid 30535] [client 4.147.190.83:55221] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aTgnqU0x3OqZTOPp7ckRHQAAAUU"]
[Tue Dec 09 21:44:10.143876 2025] [:error] [pid 30499:tid 30536] [client 4.147.190.83:48189] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aTgnqk0x3OqZTOPp7ckRHgAAAUY"]
[Tue Dec 09 21:44:11.510474 2025] [:error] [pid 36456:tid 36458] [client 4.147.190.83:16621] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTgnqx0pAnOyfXl_v41MkAAAAIA"]
[Tue Dec 09 21:44:12.019184 2025] [:error] [pid 30591:tid 30595] [client 4.147.190.83:23191] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTgnrBG-g76drVdWQUWUiAAAAEE"]
[Tue Dec 09 21:44:12.496679 2025] [:error] [pid 36456:tid 36480] [client 4.147.190.83:23176] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTgnrB0pAnOyfXl_v41MkQAAAJY"]
[Tue Dec 09 21:44:12.705685 2025] [:error] [pid 36456:tid 36471] [client 4.147.190.83:23181] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTgnrB0pAnOyfXl_v41MkgAAAI0"]
[Tue Dec 09 21:44:12.952943 2025] [:error] [pid 36456:tid 36473] [client 4.147.190.83:23205] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fns.php"] [unique_id "aTgnrB0pAnOyfXl_v41MkwAAAI8"]
[Tue Dec 09 21:44:13.558602 2025] [:error] [pid 30498:tid 30503] [client 4.147.190.83:17173] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fns.php"] [unique_id "aTgnrR2mcZJQ5qP_RC1MngAAAAE"]
[Tue Dec 09 21:44:13.824879 2025] [:error] [pid 36456:tid 36477] [client 4.147.190.83:33402] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fns.php"] [unique_id "aTgnrR0pAnOyfXl_v41MlQAAAJM"]
[Tue Dec 09 21:44:13.986009 2025] [:error] [pid 30498:tid 30521] [client 4.147.190.83:55187] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fns.php"] [unique_id "aTgnrR2mcZJQ5qP_RC1MoQAAABM"]
[Tue Dec 09 21:44:14.347421 2025] [:error] [pid 36456:tid 36465] [client 4.147.190.83:16557] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadis.php"] [unique_id "aTgnrh0pAnOyfXl_v41MmAAAAIc"]
[Tue Dec 09 21:44:14.595198 2025] [:error] [pid 36456:tid 36467] [client 4.147.190.83:16549] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadis.php"] [unique_id "aTgnrh0pAnOyfXl_v41MmQAAAIk"]
[Tue Dec 09 21:44:14.723832 2025] [:error] [pid 30498:tid 30524] [client 4.147.190.83:16633] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadis.php"] [unique_id "aTgnrh2mcZJQ5qP_RC1MpAAAABY"]
[Tue Dec 09 21:44:14.884597 2025] [:error] [pid 30499:tid 30545] [client 4.147.190.83:16629] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadis.php"] [unique_id "aTgnrk0x3OqZTOPp7ckRLgAAAU8"]
[Tue Dec 09 21:44:15.072364 2025] [:error] [pid 30499:tid 30547] [client 4.147.190.83:16524] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aTgnr00x3OqZTOPp7ckRMAAAAVE"]
[Tue Dec 09 21:44:15.624798 2025] [:error] [pid 5276:tid 5296] [client 4.147.190.83:16589] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aTgnr0tSXwbewdwyu-2GFgAAANI"]
[Tue Dec 09 21:44:15.696270 2025] [:error] [pid 5276:tid 5288] [client 4.147.190.83:55210] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aTgnr0tSXwbewdwyu-2GFwAAAMo"]
[Tue Dec 09 21:44:15.736308 2025] [:error] [pid 36456:tid 36476] [client 4.147.190.83:20770] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aTgnrx0pAnOyfXl_v41MmwAAAJI"]
[Tue Dec 09 21:44:15.805822 2025] [:error] [pid 30499:tid 30550] [client 4.147.190.83:17160] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "aTgnr00x3OqZTOPp7ckRNQAAAVQ"]
[Tue Dec 09 21:44:16.005237 2025] [:error] [pid 36456:tid 36468] [client 4.147.190.83:16616] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "aTgnsB0pAnOyfXl_v41MnAAAAIo"]
[Tue Dec 09 21:44:16.272215 2025] [:error] [pid 36456:tid 36461] [client 4.147.190.83:16734] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "aTgnsB0pAnOyfXl_v41MngAAAIM"]
[Tue Dec 09 21:44:17.186734 2025] [:error] [pid 30499:tid 30532] [client 4.147.190.83:16585] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "aTgnsU0x3OqZTOPp7ckRPgAAAUI"]
[Tue Dec 09 21:44:17.959515 2025] [:error] [pid 5276:tid 5298] [client 4.147.190.83:55209] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aTgnsUtSXwbewdwyu-2GGAAAANQ"]
[Tue Dec 09 21:44:18.619667 2025] [:error] [pid 5276:tid 5291] [client 4.147.190.83:16580] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aTgnsktSXwbewdwyu-2GGwAAAM0"]
[Tue Dec 09 21:44:19.403265 2025] [:error] [pid 30500:tid 30562] [client 4.147.190.83:23190] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aTgns62eIIK3JPWHCXUGkQAAAYU"]
[Tue Dec 09 21:44:19.760340 2025] [:error] [pid 36456:tid 36474] [client 4.147.190.83:16596] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aTgnsx0pAnOyfXl_v41MoAAAAJA"]
[Tue Dec 09 21:44:19.989642 2025] [:error] [pid 36456:tid 36458] [client 4.147.190.83:23208] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTgnsx0pAnOyfXl_v41MoQAAAIA"]
[Tue Dec 09 21:44:20.141433 2025] [:error] [pid 36456:tid 36471] [client 4.147.190.83:16525] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTgntB0pAnOyfXl_v41MogAAAI0"]
[Tue Dec 09 21:44:20.247385 2025] [:error] [pid 36456:tid 36473] [client 4.147.190.83:16536] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTgntB0pAnOyfXl_v41MpAAAAI8"]
[Tue Dec 09 21:44:20.351032 2025] [:error] [pid 30591:tid 30613] [client 4.147.190.83:23183] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTgntBG-g76drVdWQUWUlgAAAFM"]
[Tue Dec 09 21:44:20.445559 2025] [:error] [pid 30500:tid 30563] [client 4.147.190.83:16514] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aTgntK2eIIK3JPWHCXUGkgAAAYY"]
[Tue Dec 09 21:44:20.732387 2025] [:error] [pid 30591:tid 30612] [client 4.147.190.83:16587] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aTgntBG-g76drVdWQUWUlwAAAFI"]
[Tue Dec 09 21:44:21.057761 2025] [:error] [pid 30500:tid 30575] [client 4.147.190.83:16575] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aTgnta2eIIK3JPWHCXUGlAAAAZI"]
[Tue Dec 09 21:44:21.866332 2025] [:error] [pid 5276:tid 5289] [client 4.147.190.83:33361] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aTgntUtSXwbewdwyu-2GHgAAAMs"]
[Tue Dec 09 21:44:22.412270 2025] [:error] [pid 30499:tid 30554] [client 4.147.190.83:16547] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTgntk0x3OqZTOPp7ckRQgAAAVg"]
[Tue Dec 09 21:44:22.559159 2025] [:error] [pid 30500:tid 30581] [client 4.147.190.83:42706] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTgntq2eIIK3JPWHCXUGlgAAAZg"]
[Tue Dec 09 21:44:22.946444 2025] [:error] [pid 30499:tid 30540] [client 4.147.190.83:16522] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTgntk0x3OqZTOPp7ckRRAAAAUo"]
[Tue Dec 09 21:44:23.017974 2025] [:error] [pid 30591:tid 30611] [client 4.147.190.83:23226] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTgntxG-g76drVdWQUWUmwAAAFE"]
[Tue Dec 09 21:44:23.068793 2025] [:error] [pid 30591:tid 30615] [client 4.147.190.83:23189] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11index.php"] [unique_id "aTgntxG-g76drVdWQUWUnQAAAFU"]
[Tue Dec 09 21:44:23.538232 2025] [:error] [pid 30499:tid 30542] [client 4.147.190.83:16581] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11index.php"] [unique_id "aTgnt00x3OqZTOPp7ckRRQAAAUw"]
[Tue Dec 09 21:44:24.076202 2025] [:error] [pid 30498:tid 30513] [client 4.147.190.83:23199] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11index.php"] [unique_id "aTgnuB2mcZJQ5qP_RC1MugAAAAs"]
[Tue Dec 09 21:44:24.944800 2025] [:error] [pid 30499:tid 30553] [client 4.147.190.83:16521] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11index.php"] [unique_id "aTgnuE0x3OqZTOPp7ckRRwAAAVc"]
[Tue Dec 09 21:44:25.361310 2025] [:error] [pid 36456:tid 36477] [client 4.147.190.83:16569] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "aTgnuR0pAnOyfXl_v41MpQAAAJM"]
[Tue Dec 09 21:44:25.540275 2025] [:error] [pid 30499:tid 30541] [client 4.147.190.83:16766] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "aTgnuU0x3OqZTOPp7ckRSAAAAUs"]
[Tue Dec 09 21:44:25.688344 2025] [:error] [pid 36456:tid 36480] [client 4.147.190.83:33367] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "aTgnuR0pAnOyfXl_v41MpgAAAJY"]
[Tue Dec 09 21:44:25.739601 2025] [:error] [pid 30499:tid 30551] [client 4.147.190.83:23212] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "aTgnuU0x3OqZTOPp7ckRSQAAAVU"]
[Tue Dec 09 21:44:25.793665 2025] [:error] [pid 36456:tid 36463] [client 4.147.190.83:16534] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wan.php"] [unique_id "aTgnuR0pAnOyfXl_v41MpwAAAIU"]
[Tue Dec 09 21:44:25.921244 2025] [:error] [pid 30498:tid 30505] [client 4.147.190.83:33352] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wan.php"] [unique_id "aTgnuR2mcZJQ5qP_RC1MvAAAAAM"]
[Tue Dec 09 21:44:26.140244 2025] [:error] [pid 30498:tid 30516] [client 4.147.190.83:33382] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wan.php"] [unique_id "aTgnuh2mcZJQ5qP_RC1MvQAAAA4"]
[Tue Dec 09 21:44:26.566212 2025] [:error] [pid 30591:tid 30606] [client 4.147.190.83:16538] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wan.php"] [unique_id "aTgnuhG-g76drVdWQUWUnwAAAEw"]
[Tue Dec 09 21:44:26.879164 2025] [:error] [pid 30500:tid 30572] [client 4.147.190.83:16738] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iov.php"] [unique_id "aTgnuq2eIIK3JPWHCXUGmgAAAY8"]
[Tue Dec 09 21:44:26.977896 2025] [:error] [pid 30591:tid 30597] [client 4.147.190.83:27572] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iov.php"] [unique_id "aTgnuhG-g76drVdWQUWUoQAAAEM"]
[Tue Dec 09 21:44:27.098282 2025] [:error] [pid 30499:tid 30531] [client 4.147.190.83:16516] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iov.php"] [unique_id "aTgnu00x3OqZTOPp7ckRSgAAAUE"]
[Tue Dec 09 21:44:27.445982 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:16532] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iov.php"] [unique_id "aTgnux0pAnOyfXl_v41MqQAAAIg"]
[Tue Dec 09 21:44:27.821808 2025] [:error] [pid 36456:tid 36476] [client 4.147.190.83:16590] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aTgnux0pAnOyfXl_v41MqwAAAJI"]
[Tue Dec 09 21:44:28.126692 2025] [:error] [pid 30499:tid 30548] [client 4.147.190.83:55228] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aTgnvE0x3OqZTOPp7ckRSwAAAVI"]
[Tue Dec 09 21:44:28.268578 2025] [:error] [pid 30498:tid 30509] [client 4.147.190.83:23192] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aTgnvB2mcZJQ5qP_RC1MwQAAAAc"]
[Tue Dec 09 21:44:28.390466 2025] [:error] [pid 30591:tid 30603] [client 4.147.190.83:16604] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aTgnvBG-g76drVdWQUWUogAAAEk"]
[Tue Dec 09 21:44:28.731933 2025] [:error] [pid 30500:tid 30579] [client 4.147.190.83:33347] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxq.php"] [unique_id "aTgnvK2eIIK3JPWHCXUGmwAAAZY"]
[Tue Dec 09 21:44:29.201905 2025] [:error] [pid 30500:tid 30578] [client 4.147.190.83:55189] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxq.php"] [unique_id "aTgnva2eIIK3JPWHCXUGnAAAAZU"]
[Tue Dec 09 21:44:29.936776 2025] [:error] [pid 30500:tid 30558] [client 4.147.190.83:55194] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxq.php"] [unique_id "aTgnva2eIIK3JPWHCXUGnwAAAYE"]
[Tue Dec 09 21:44:30.400337 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:16742] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxq.php"] [unique_id "aTgnvh0pAnOyfXl_v41MrwAAAIY"]
[Tue Dec 09 21:44:30.832142 2025] [:error] [pid 5276:tid 5283] [client 4.147.190.83:16591] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTgnvktSXwbewdwyu-2GLQAAAMU"]
[Tue Dec 09 21:44:31.402424 2025] [:error] [pid 30500:tid 30562] [client 4.147.190.83:23206] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTgnv62eIIK3JPWHCXUGoQAAAYU"]
[Tue Dec 09 21:44:31.757473 2025] [:error] [pid 30499:tid 30530] [client 4.147.190.83:21078] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTgnv00x3OqZTOPp7ckRTQAAAUA"]
[Tue Dec 09 21:44:32.846088 2025] [:error] [pid 30500:tid 30570] [client 4.147.190.83:23172] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTgnwK2eIIK3JPWHCXUGpQAAAY0"]
[Tue Dec 09 21:44:33.453647 2025] [:error] [pid 30591:tid 30599] [client 4.147.190.83:16756] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aTgnwRG-g76drVdWQUWUpAAAAEU"]
[Tue Dec 09 21:44:34.494305 2025] [:error] [pid 36456:tid 36477] [client 4.147.190.83:16765] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aTgnwh0pAnOyfXl_v41MtgAAAJM"]
[Tue Dec 09 21:44:36.464247 2025] [:error] [pid 5276:tid 5290] [client 4.147.190.83:21088] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aTgnxEtSXwbewdwyu-2GMQAAAMw"]
[Tue Dec 09 21:44:40.222470 2025] [:error] [pid 30500:tid 30560] [client 4.147.190.83:16561] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aTgnyK2eIIK3JPWHCXUGrAAAAYM"]
[Tue Dec 09 21:44:41.354963 2025] [:error] [pid 30500:tid 30563] [client 4.147.190.83:23196] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/GX.php"] [unique_id "aTgnya2eIIK3JPWHCXUGrgAAAYY"]
[Tue Dec 09 21:44:43.184378 2025] [:error] [pid 36456:tid 36464] [client 4.147.190.83:16711] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/GX.php"] [unique_id "aTgnyx0pAnOyfXl_v41MvQAAAIY"]
[Tue Dec 09 21:44:44.554760 2025] [:error] [pid 30500:tid 30557] [client 4.147.190.83:23269] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/GX.php"] [unique_id "aTgnzK2eIIK3JPWHCXUGsQAAAYA"]
[Tue Dec 09 21:44:45.728113 2025] [:error] [pid 30500:tid 30564] [client 4.147.190.83:23276] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/GX.php"] [unique_id "aTgnza2eIIK3JPWHCXUGsgAAAYc"]
[Tue Dec 09 21:44:46.870711 2025] [:error] [pid 30591:tid 30602] [client 4.147.190.83:21075] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aTgnzhG-g76drVdWQUWUsAAAAEg"]
[Tue Dec 09 21:44:49.021131 2025] [:error] [pid 30498:tid 30511] [client 4.147.190.83:23238] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aTgn0R2mcZJQ5qP_RC1MzwAAAAk"]
[Tue Dec 09 21:44:50.281948 2025] [:error] [pid 30499:tid 30541] [client 4.147.190.83:21084] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aTgn0k0x3OqZTOPp7ckRVQAAAUs"]
[Tue Dec 09 21:44:51.223249 2025] [:error] [pid 36456:tid 36467] [client 4.147.190.83:17287] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aTgn0x0pAnOyfXl_v41MwwAAAIk"]
[Tue Dec 09 21:44:52.037972 2025] [:error] [pid 36456:tid 36462] [client 4.147.190.83:21077] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efa4f.php"] [unique_id "aTgn1B0pAnOyfXl_v41MxQAAAIQ"]
[Tue Dec 09 21:44:52.842877 2025] [:error] [pid 30591:tid 30604] [client 4.147.190.83:23197] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efa4f.php"] [unique_id "aTgn1BG-g76drVdWQUWUtwAAAEo"]
[Tue Dec 09 21:44:54.540235 2025] [:error] [pid 30498:tid 30513] [client 4.147.190.83:17324] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efa4f.php"] [unique_id "aTgn1h2mcZJQ5qP_RC1M1wAAAAs"]
[Tue Dec 09 21:44:56.023673 2025] [:error] [pid 30591:tid 30605] [client 4.147.190.83:21546] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efa4f.php"] [unique_id "aTgn2BG-g76drVdWQUWUuwAAAEs"]
[Tue Dec 09 21:44:57.526402 2025] [:error] [pid 36456:tid 36471] [client 4.147.190.83:23294] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ilex.php"] [unique_id "aTgn2R0pAnOyfXl_v41MygAAAI0"]
[Tue Dec 09 21:44:58.442037 2025] [:error] [pid 36456:tid 36458] [client 4.147.190.83:16613] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ilex.php"] [unique_id "aTgn2h0pAnOyfXl_v41MywAAAIA"]
[Tue Dec 09 21:44:58.583698 2025] [:error] [pid 30499:tid 30532] [client 4.147.190.83:36430] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ilex.php"] [unique_id "aTgn2k0x3OqZTOPp7ckRVwAAAUI"]
[Tue Dec 09 21:44:58.679800 2025] [:error] [pid 36456:tid 36474] [client 4.147.190.83:20773] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ilex.php"] [unique_id "aTgn2h0pAnOyfXl_v41MzAAAAJA"]
[Tue Dec 09 21:44:58.887452 2025] [:error] [pid 36456:tid 36482] [client 4.147.190.83:23168] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aTgn2h0pAnOyfXl_v41MzQAAAJg"]
[Tue Dec 09 21:44:58.943612 2025] [:error] [pid 30591:tid 30606] [client 4.147.190.83:23173] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aTgn2hG-g76drVdWQUWUvwAAAEw"]
[Tue Dec 09 21:45:01.766411 2025] [:error] [pid 36456:tid 36477] [client 4.147.190.83:23207] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTgn3R0pAnOyfXl_v41M5wAAAJM"]
[Tue Dec 09 21:45:01.939394 2025] [:error] [pid 30498:tid 30517] [client 4.147.190.83:16550] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTgn3R2mcZJQ5qP_RC1M2QAAAA8"]
[Tue Dec 09 21:45:02.063217 2025] [:error] [pid 36456:tid 36463] [client 4.147.190.83:21068] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTgn3h0pAnOyfXl_v41M6gAAAIU"]
[Tue Dec 09 21:45:02.402108 2025] [:error] [pid 5276:tid 5289] [client 4.147.190.83:16540] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTgn3ktSXwbewdwyu-2GPgAAAMs"]
[Tue Dec 09 21:45:02.503160 2025] [:error] [pid 30500:tid 30579] [client 4.147.190.83:17342] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aTgn3q2eIIK3JPWHCXUGtQAAAZY"]
[Tue Dec 09 21:45:02.774324 2025] [:error] [pid 30500:tid 30565] [client 4.147.190.83:16529] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aTgn3q2eIIK3JPWHCXUGtwAAAYg"]
[Tue Dec 09 21:45:03.241885 2025] [:error] [pid 30500:tid 30558] [client 4.147.190.83:23278] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aTgn362eIIK3JPWHCXUGuAAAAYE"]
[Tue Dec 09 21:45:03.644894 2025] [:error] [pid 30500:tid 30560] [client 4.147.190.83:23204] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aTgn362eIIK3JPWHCXUGuQAAAYM"]
[Tue Dec 09 21:45:03.713831 2025] [:error] [pid 5276:tid 5284] [client 4.147.190.83:36468] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aTgn30tSXwbewdwyu-2GPwAAAMY"]
[Tue Dec 09 21:45:03.846636 2025] [:error] [pid 30591:tid 30614] [client 4.147.190.83:16520] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aTgn3xG-g76drVdWQUWUxAAAAFQ"]
[Tue Dec 09 21:45:03.986381 2025] [:error] [pid 30500:tid 30566] [client 4.147.190.83:17286] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aTgn362eIIK3JPWHCXUGugAAAYk"]
[Tue Dec 09 21:45:04.298262 2025] [:error] [pid 30499:tid 30530] [client 4.147.190.83:16576] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aTgn4E0x3OqZTOPp7ckRWAAAAUA"]
[Tue Dec 09 21:45:04.741564 2025] [:error] [pid 30591:tid 30599] [client 4.147.190.83:36453] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aTgn4BG-g76drVdWQUWUxwAAAEU"]
[Tue Dec 09 21:45:05.068244 2025] [:error] [pid 30498:tid 30509] [client 4.147.190.83:17300] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aTgn4R2mcZJQ5qP_RC1M3AAAAAc"]
[Tue Dec 09 21:45:05.198056 2025] [:error] [pid 30591:tid 30604] [client 4.147.190.83:23182] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aTgn4RG-g76drVdWQUWUyQAAAEo"]
[Tue Dec 09 21:45:05.238340 2025] [:error] [pid 36456:tid 36471] [client 4.147.190.83:16625] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aTgn4R0pAnOyfXl_v41M9wAAAI0"]
[Tue Dec 09 21:45:05.271184 2025] [:error] [pid 30591:tid 30600] [client 4.147.190.83:23292] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aTgn4RG-g76drVdWQUWUygAAAEY"]
[Tue Dec 09 21:45:05.368784 2025] [:error] [pid 30591:tid 30617] [client 4.147.190.83:23282] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aTgn4RG-g76drVdWQUWUywAAAFc"]
[Tue Dec 09 21:45:05.517609 2025] [:error] [pid 36456:tid 36458] [client 4.147.190.83:55184] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aTgn4R0pAnOyfXl_v41M-AAAAIA"]
[Tue Dec 09 21:45:05.605312 2025] [:error] [pid 30499:tid 30539] [client 4.147.190.83:36460] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aTgn4U0x3OqZTOPp7ckRWgAAAUk"]
[Tue Dec 09 21:45:05.991683 2025] [:error] [pid 30498:tid 30523] [client 4.147.190.83:23274] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aTgn4R2mcZJQ5qP_RC1M3QAAABU"]
[Tue Dec 09 21:45:06.401425 2025] [:error] [pid 5276:tid 5280] [client 4.147.190.83:16471] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aTgn4ktSXwbewdwyu-2GQgAAAMI"]
[Tue Dec 09 21:45:06.556134 2025] [:error] [pid 30499:tid 30552] [client 4.147.190.83:21064] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aTgn4k0x3OqZTOPp7ckRWwAAAVY"]
[Tue Dec 09 21:45:06.783454 2025] [:error] [pid 36456:tid 36482] [client 4.147.190.83:17331] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aTgn4h0pAnOyfXl_v41M-QAAAJg"]
[Tue Dec 09 21:45:07.206164 2025] [:error] [pid 30498:tid 30514] [client 4.147.190.83:17302] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aTgn4x2mcZJQ5qP_RC1M4AAAAAw"]
[Tue Dec 09 21:45:07.289747 2025] [:error] [pid 36456:tid 36478] [client 4.147.190.83:21092] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aTgn4x0pAnOyfXl_v41M-gAAAJQ"]
[Tue Dec 09 21:45:07.328894 2025] [:error] [pid 30500:tid 30562] [client 4.147.190.83:36451] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aTgn462eIIK3JPWHCXUGvQAAAYU"]
[Tue Dec 09 21:45:07.426686 2025] [:error] [pid 36456:tid 36480] [client 4.147.190.83:36473] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aTgn4x0pAnOyfXl_v41M_AAAAJY"]
[Tue Dec 09 21:45:07.499840 2025] [:error] [pid 30500:tid 30575] [client 4.147.190.83:16556] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admir.php"] [unique_id "aTgn462eIIK3JPWHCXUGvgAAAZI"]
[Tue Dec 09 21:45:07.546390 2025] [:error] [pid 30500:tid 30574] [client 4.147.190.83:23291] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admir.php"] [unique_id "aTgn462eIIK3JPWHCXUGvwAAAZE"]
[Tue Dec 09 21:45:07.645691 2025] [:error] [pid 30500:tid 30581] [client 4.147.190.83:36443] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admir.php"] [unique_id "aTgn462eIIK3JPWHCXUGwAAAAZg"]
[Tue Dec 09 21:45:07.714207 2025] [:error] [pid 30500:tid 30569] [client 4.147.190.83:16637] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admir.php"] [unique_id "aTgn462eIIK3JPWHCXUGwQAAAYw"]
[Tue Dec 09 21:45:07.841744 2025] [:error] [pid 30500:tid 30573] [client 4.147.190.83:36417] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsr2.php"] [unique_id "aTgn462eIIK3JPWHCXUGwgAAAZA"]
[Tue Dec 09 21:45:07.921792 2025] [:error] [pid 30500:tid 30561] [client 4.147.190.83:23281] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsr2.php"] [unique_id "aTgn462eIIK3JPWHCXUGwwAAAYQ"]
[Tue Dec 09 21:45:07.972434 2025] [:error] [pid 30500:tid 30567] [client 4.147.190.83:21111] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsr2.php"] [unique_id "aTgn462eIIK3JPWHCXUGyAAAAYo"]
[Tue Dec 09 21:45:08.005760 2025] [:error] [pid 30498:tid 30521] [client 4.147.190.83:16526] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsr2.php"] [unique_id "aTgn5B2mcZJQ5qP_RC1M4gAAABM"]
[Tue Dec 09 21:45:08.087258 2025] [:error] [pid 30500:tid 30572] [client 4.147.190.83:23224] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aTgn5K2eIIK3JPWHCXUGyQAAAY8"]
[Tue Dec 09 21:45:08.142459 2025] [:error] [pid 30500:tid 30559] [client 4.147.190.83:21344] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aTgn5K2eIIK3JPWHCXUGygAAAYI"]
[Tue Dec 09 21:45:08.230645 2025] [:error] [pid 30500:tid 30579] [client 4.147.190.83:36424] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aTgn5K2eIIK3JPWHCXUGywAAAZY"]
[Tue Dec 09 21:45:08.377519 2025] [:error] [pid 30500:tid 30578] [client 4.147.190.83:17294] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aTgn5K2eIIK3JPWHCXUG0QAAAZU"]
[Tue Dec 09 21:45:08.486197 2025] [:error] [pid 30500:tid 30576] [client 4.147.190.83:23193] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aTgn5K2eIIK3JPWHCXUG0gAAAZM"]
[Tue Dec 09 21:45:08.569930 2025] [:error] [pid 30500:tid 30568] [client 4.147.190.83:21100] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aTgn5K2eIIK3JPWHCXUG0wAAAYs"]
[Tue Dec 09 21:45:08.715412 2025] [:error] [pid 30591:tid 30618] [client 4.147.190.83:16731] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aTgn5BG-g76drVdWQUWUzQAAAFg"]
[Tue Dec 09 21:45:08.853693 2025] [:error] [pid 5276:tid 5281] [client 4.147.190.83:17317] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aTgn5EtSXwbewdwyu-2GSAAAAMM"]
[Tue Dec 09 21:45:09.226967 2025] [:error] [pid 30591:tid 30594] [client 4.147.190.83:16737] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aTgn5RG-g76drVdWQUWUzwAAAEA"]
[Tue Dec 09 21:45:09.621648 2025] [:error] [pid 30500:tid 30570] [client 4.147.190.83:36466] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aTgn5a2eIIK3JPWHCXUG4AAAAY0"]
[Tue Dec 09 21:45:10.617202 2025] [:error] [pid 36456:tid 36465] [client 4.147.190.83:21103] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aTgn5h0pAnOyfXl_v41M_wAAAIc"]
[Tue Dec 09 21:45:11.306034 2025] [:error] [pid 30591:tid 30608] [client 4.147.190.83:22596] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aTgn5xG-g76drVdWQUWU0AAAAE4"]
[Tue Dec 09 21:45:11.712326 2025] [:error] [pid 30500:tid 30580] [client 4.147.190.83:17310] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aTgn562eIIK3JPWHCXUG9AAAAZc"]
[Tue Dec 09 21:45:12.674672 2025] [:error] [pid 36456:tid 36472] [client 4.147.190.83:22637] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aTgn6B0pAnOyfXl_v41NBQAAAI4"]
[Tue Dec 09 21:45:13.078612 2025] [:error] [pid 36456:tid 36461] [client 4.147.190.83:16755] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aTgn6R0pAnOyfXl_v41NBgAAAIM"]
[Tue Dec 09 21:45:13.392804 2025] [:error] [pid 36456:tid 36471] [client 4.147.190.83:16513] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aTgn6R0pAnOyfXl_v41NBwAAAI0"]
[Tue Dec 09 21:45:13.684268 2025] [:error] [pid 30591:tid 30610] [client 4.147.190.83:22655] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qlex1.php"] [unique_id "aTgn6RG-g76drVdWQUWU0wAAAFA"]
[Tue Dec 09 21:45:13.939990 2025] [:error] [pid 30500:tid 30580] [client 4.147.190.83:16555] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qlex1.php"] [unique_id "aTgn6a2eIIK3JPWHCXUHCgAAAZc"]
[Tue Dec 09 21:45:14.099965 2025] [:error] [pid 30500:tid 30575] [client 4.147.190.83:36456] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qlex1.php"] [unique_id "aTgn6q2eIIK3JPWHCXUHCwAAAZI"]
[Tue Dec 09 21:45:14.746145 2025] [:error] [pid 36456:tid 36480] [client 4.147.190.83:22612] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qlex1.php"] [unique_id "aTgn6h0pAnOyfXl_v41NDgAAAJY"]
[Tue Dec 09 21:45:15.291007 2025] [:error] [pid 30499:tid 30545] [client 4.147.190.83:17340] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aTgn600x3OqZTOPp7ckRdgAAAU8"]
[Tue Dec 09 21:45:15.346997 2025] [:error] [pid 36456:tid 36462] [client 4.147.190.83:17311] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aTgn6x0pAnOyfXl_v41NEQAAAIQ"]
[Tue Dec 09 21:45:15.427725 2025] [:error] [pid 36456:tid 36473] [client 4.147.190.83:23236] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aTgn6x0pAnOyfXl_v41NEwAAAI8"]
[Tue Dec 09 21:45:15.807564 2025] [:error] [pid 30500:tid 30561] [client 4.147.190.83:23234] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aTgn662eIIK3JPWHCXUHHgAAAYQ"]
[Tue Dec 09 21:45:16.318940 2025] [:error] [pid 30591:tid 30596] [client 4.147.190.83:22594] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redi.php"] [unique_id "aTgn7BG-g76drVdWQUWU1QAAAEI"]
[Tue Dec 09 21:45:16.731621 2025] [:error] [pid 30498:tid 30507] [client 4.147.190.83:21056] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redi.php"] [unique_id "aTgn7B2mcZJQ5qP_RC1M5wAAAAU"]
[Tue Dec 09 21:45:17.047004 2025] [:error] [pid 36456:tid 36481] [client 4.147.190.83:36479] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redi.php"] [unique_id "aTgn7R0pAnOyfXl_v41NFQAAAJc"]
[Tue Dec 09 21:45:17.250711 2025] [:error] [pid 30499:tid 30541] [client 4.147.190.83:22608] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redi.php"] [unique_id "aTgn7U0x3OqZTOPp7ckReAAAAUs"]
[Tue Dec 09 21:45:17.458244 2025] [:error] [pid 30498:tid 30505] [client 4.147.190.83:22634] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php7"] [unique_id "aTgn7R2mcZJQ5qP_RC1M6gAAAAM"]
[Tue Dec 09 21:45:17.497993 2025] [:error] [pid 30499:tid 30551] [client 4.147.190.83:36452] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php7"] [unique_id "aTgn7U0x3OqZTOPp7ckReQAAAVU"]
[Tue Dec 09 21:45:17.633194 2025] [:error] [pid 30500:tid 30562] [client 4.147.190.83:33404] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php7"] [unique_id "aTgn7a2eIIK3JPWHCXUHKgAAAYU"]
[Tue Dec 09 21:45:18.195646 2025] [:error] [pid 30498:tid 30522] [client 4.147.190.83:34387] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php7"] [unique_id "aTgn7h2mcZJQ5qP_RC1M7AAAABQ"]
[Tue Dec 09 21:45:18.398779 2025] [:error] [pid 5276:tid 5287] [client 4.147.190.83:36426] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aTgn7ktSXwbewdwyu-2GXwAAAMk"]
[Tue Dec 09 21:45:18.659464 2025] [:error] [pid 30499:tid 30535] [client 4.147.190.83:36440] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aTgn7k0x3OqZTOPp7ckRewAAAUU"]
[Tue Dec 09 21:45:19.072308 2025] [:error] [pid 30591:tid 30614] [client 4.147.190.83:21106] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aTgn7xG-g76drVdWQUWU2QAAAFQ"]
[Tue Dec 09 21:45:19.282390 2025] [:error] [pid 30500:tid 30575] [client 4.147.190.83:17341] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aTgn762eIIK3JPWHCXUHMgAAAZI"]
[Tue Dec 09 21:45:19.470165 2025] [:error] [pid 5276:tid 5291] [client 4.147.190.83:23198] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aTgn70tSXwbewdwyu-2GYAAAAM0"]
[Tue Dec 09 21:45:19.842960 2025] [:error] [pid 30591:tid 30599] [client 4.147.190.83:22607] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aTgn7xG-g76drVdWQUWU2gAAAEU"]
[Tue Dec 09 21:45:19.982531 2025] [:error] [pid 30498:tid 30523] [client 4.147.190.83:23268] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aTgn7x2mcZJQ5qP_RC1M7QAAABU"]
[Tue Dec 09 21:45:20.396539 2025] [:error] [pid 30499:tid 30548] [client 4.147.190.83:23257] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aTgn8E0x3OqZTOPp7ckRfgAAAVI"]
[Tue Dec 09 21:45:21.013035 2025] [:error] [pid 30498:tid 30514] [client 4.147.190.83:21097] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aTgn8R2mcZJQ5qP_RC1M7wAAAAw"]
[Tue Dec 09 21:45:21.566927 2025] [:error] [pid 30500:tid 30572] [client 4.147.190.83:23249] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aTgn8a2eIIK3JPWHCXUHNgAAAY8"]
[Tue Dec 09 21:45:22.123399 2025] [:error] [pid 30591:tid 30607] [client 4.147.190.83:16515] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aTgn8hG-g76drVdWQUWU3AAAAE0"]
[Tue Dec 09 21:45:22.648180 2025] [:error] [pid 5276:tid 5290] [client 4.147.190.83:23267] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aTgn8ktSXwbewdwyu-2GYwAAAMw"]
[Tue Dec 09 21:45:22.931587 2025] [:error] [pid 5276:tid 5289] [client 4.147.190.83:36418] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTgn8ktSXwbewdwyu-2GZAAAAMs"]
[Tue Dec 09 21:45:23.155709 2025] [:error] [pid 36456:tid 36470] [client 4.147.190.83:21062] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTgn8x0pAnOyfXl_v41NHgAAAIw"]
[Tue Dec 09 21:45:23.346483 2025] [:error] [pid 30591:tid 30613] [client 4.147.190.83:20770] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTgn8xG-g76drVdWQUWU3QAAAFM"]
[Tue Dec 09 21:45:23.835957 2025] [:error] [pid 36456:tid 36472] [client 4.147.190.83:16758] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTgn8x0pAnOyfXl_v41NIQAAAI4"]
[Tue Dec 09 21:45:24.262252 2025] [:error] [pid 36456:tid 36471] [client 4.147.190.83:22623] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0%25.php"] [unique_id "aTgn9B0pAnOyfXl_v41NIwAAAI0"]
[Tue Dec 09 21:45:24.380319 2025] [:error] [pid 36456:tid 36458] [client 4.147.190.83:16544] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0%25.php"] [unique_id "aTgn9B0pAnOyfXl_v41NJQAAAIA"]
[Tue Dec 09 21:45:24.454726 2025] [:error] [pid 30500:tid 30561] [client 4.147.190.83:22619] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0%25.php"] [unique_id "aTgn9K2eIIK3JPWHCXUHPQAAAYQ"]
[Tue Dec 09 21:45:24.546672 2025] [:error] [pid 30500:tid 30560] [client 4.147.190.83:21541] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0%25.php"] [unique_id "aTgn9K2eIIK3JPWHCXUHPgAAAYM"]
[Tue Dec 09 21:45:24.626020 2025] [:error] [pid 30591:tid 30594] [client 4.147.190.83:22606] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aTgn9BG-g76drVdWQUWU4AAAAEA"]
[Tue Dec 09 21:45:24.841627 2025] [:error] [pid 30591:tid 30615] [client 4.147.190.83:36449] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aTgn9BG-g76drVdWQUWU4QAAAFU"]
[Tue Dec 09 21:45:25.300566 2025] [:error] [pid 30500:tid 30557] [client 4.147.190.83:16762] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aTgn9a2eIIK3JPWHCXUHQAAAAYA"]
[Tue Dec 09 21:45:25.439127 2025] [:error] [pid 30498:tid 30507] [client 4.147.190.83:21082] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aTgn9R2mcZJQ5qP_RC1M-AAAAAU"]
[Tue Dec 09 21:45:25.604341 2025] [:error] [pid 36456:tid 36460] [client 4.147.190.83:33370] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTgn9R0pAnOyfXl_v41NKgAAAII"]
[Tue Dec 09 21:45:25.832227 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:55209] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTgn9R0pAnOyfXl_v41NMQAAAJU"]
[Tue Dec 09 21:45:26.604985 2025] [:error] [pid 5276:tid 5285] [client 4.147.190.83:23293] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTgn9ktSXwbewdwyu-2GZwAAAMc"]
[Tue Dec 09 21:45:27.394257 2025] [:error] [pid 36456:tid 36463] [client 4.147.190.83:16714] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTgn9x0pAnOyfXl_v41NVgAAAIU"]
[Tue Dec 09 21:45:27.836889 2025] [:error] [pid 36456:tid 36476] [client 4.147.190.83:42700] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTgn9x0pAnOyfXl_v41NWwAAAJI"]
[Tue Dec 09 21:45:28.673199 2025] [:error] [pid 30500:tid 30568] [client 4.147.190.83:17295] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTgn-K2eIIK3JPWHCXUHRgAAAYs"]
[Tue Dec 09 21:45:30.170719 2025] [:error] [pid 30500:tid 30560] [client 4.147.190.83:23275] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTgn-q2eIIK3JPWHCXUHSQAAAYM"]
[Tue Dec 09 21:45:31.152603 2025] [:error] [pid 30498:tid 30510] [client 4.147.190.83:22631] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTgn-x2mcZJQ5qP_RC1NAwAAAAg"]
[Tue Dec 09 21:45:31.700327 2025] [:error] [pid 36456:tid 36461] [client 4.147.190.83:17320] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aTgn-x0pAnOyfXl_v41NZQAAAIM"]
[Tue Dec 09 21:45:31.916082 2025] [:error] [pid 36456:tid 36474] [client 4.147.190.83:17284] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aTgn-x0pAnOyfXl_v41NaAAAAJA"]
[Tue Dec 09 21:45:32.130317 2025] [:error] [pid 30500:tid 30570] [client 4.147.190.83:23213] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aTgn_K2eIIK3JPWHCXUHTAAAAY0"]
[Tue Dec 09 21:45:33.224985 2025] [:error] [pid 5276:tid 5293] [client 4.147.190.83:55208] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aTgn_UtSXwbewdwyu-2GaQAAAM8"]
[Tue Dec 09 21:45:34.085275 2025] [:error] [pid 30500:tid 30579] [client 4.147.190.83:27934] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aTgn_q2eIIK3JPWHCXUHUAAAAZY"]
[Tue Dec 09 21:45:34.276881 2025] [:error] [pid 30500:tid 30578] [client 4.147.190.83:23266] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aTgn_q2eIIK3JPWHCXUHUgAAAZU"]
[Tue Dec 09 21:45:34.356701 2025] [:error] [pid 30498:tid 30507] [client 4.147.190.83:23263] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aTgn_h2mcZJQ5qP_RC1NBgAAAAU"]
[Tue Dec 09 21:45:34.435118 2025] [:error] [pid 30499:tid 30538] [client 4.147.190.83:36469] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aTgn_k0x3OqZTOPp7ckRgwAAAUg"]
[Tue Dec 09 21:45:34.858731 2025] [:error] [pid 30591:tid 30597] [client 4.147.190.83:23259] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aTgn_hG-g76drVdWQUWU9wAAAEM"]
[Tue Dec 09 21:45:35.096325 2025] [:error] [pid 30591:tid 30611] [client 4.147.190.83:16723] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aTgn_xG-g76drVdWQUWU-AAAAFE"]
[Tue Dec 09 21:45:35.218312 2025] [:error] [pid 30498:tid 30516] [client 4.147.190.83:33406] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aTgn_x2mcZJQ5qP_RC1NBwAAAA4"]
[Tue Dec 09 21:45:35.495595 2025] [:error] [pid 30500:tid 30571] [client 4.147.190.83:16519] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aTgn_62eIIK3JPWHCXUHVAAAAY4"]
[Tue Dec 09 21:45:35.925951 2025] [:error] [pid 30500:tid 30563] [client 4.147.190.83:23180] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aTgn_62eIIK3JPWHCXUHVgAAAYY"]
[Tue Dec 09 21:45:36.572928 2025] [:error] [pid 30499:tid 30540] [client 4.147.190.83:22613] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aTgoAE0x3OqZTOPp7ckRhAAAAUo"]
[Tue Dec 09 21:45:37.245966 2025] [:error] [pid 30498:tid 30517] [client 4.147.190.83:27954] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aTgoAR2mcZJQ5qP_RC1NCgAAAA8"]
[Tue Dec 09 21:45:37.971917 2025] [:error] [pid 30591:tid 30612] [client 4.147.190.83:22647] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aTgoARG-g76drVdWQUWU_gAAAFI"]
[Tue Dec 09 21:45:38.847183 2025] [:error] [pid 30591:tid 30607] [client 4.147.190.83:21108] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTgoAhG-g76drVdWQUWVAAAAAE0"]
[Tue Dec 09 21:45:38.989052 2025] [:error] [pid 36456:tid 36469] [client 4.147.190.83:16551] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTgoAh0pAnOyfXl_v41NcAAAAIs"]
[Tue Dec 09 21:45:39.074178 2025] [:error] [pid 30500:tid 30560] [client 4.147.190.83:22627] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTgoA62eIIK3JPWHCXUHWwAAAYM"]
[Tue Dec 09 21:45:39.751371 2025] [:error] [pid 30500:tid 30557] [client 4.147.190.83:22632] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTgoA62eIIK3JPWHCXUHXQAAAYA"]
[Tue Dec 09 21:45:39.982327 2025] [:error] [pid 30499:tid 30533] [client 4.147.190.83:22625] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTgoA00x3OqZTOPp7ckRiwAAAUM"]
[Tue Dec 09 21:45:41.067797 2025] [:error] [pid 30499:tid 30552] [client 4.147.190.83:22593] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTgoBU0x3OqZTOPp7ckRjQAAAVY"]
[Tue Dec 09 21:45:41.743879 2025] [:error] [pid 30500:tid 30568] [client 4.147.190.83:23228] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTgoBa2eIIK3JPWHCXUHYQAAAYs"]
[Tue Dec 09 21:45:42.963474 2025] [:error] [pid 5276:tid 5278] [client 4.147.190.83:23284] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTgoBktSXwbewdwyu-2GcwAAAMA"]
[Tue Dec 09 21:45:43.662030 2025] [:error] [pid 5276:tid 5294] [client 4.147.190.83:21107] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "aTgoB0tSXwbewdwyu-2GeAAAANA"]
[Tue Dec 09 21:45:44.038303 2025] [:error] [pid 5276:tid 5299] [client 4.147.190.83:21091] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "aTgoCEtSXwbewdwyu-2GegAAANU"]
[Tue Dec 09 21:45:44.565180 2025] [:error] [pid 5276:tid 5287] [client 4.147.190.83:22624] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "aTgoCEtSXwbewdwyu-2GfAAAAMk"]
[Tue Dec 09 21:45:45.094906 2025] [:error] [pid 30500:tid 30569] [client 4.147.190.83:21065] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "aTgoCa2eIIK3JPWHCXUHaQAAAYw"]
[Tue Dec 09 21:45:45.760092 2025] [:error] [pid 36456:tid 36468] [client 4.147.190.83:23220] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r79.php"] [unique_id "aTgoCR0pAnOyfXl_v41NdQAAAIo"]
[Tue Dec 09 21:45:46.067754 2025] [:error] [pid 30500:tid 30566] [client 4.147.190.83:21069] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r79.php"] [unique_id "aTgoCq2eIIK3JPWHCXUHbgAAAYk"]
[Tue Dec 09 21:45:48.431200 2025] [:error] [pid 30500:tid 30559] [client 4.147.190.83:22636] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r79.php"] [unique_id "aTgoDK2eIIK3JPWHCXUHcwAAAYI"]
[Tue Dec 09 21:45:48.676664 2025] [:error] [pid 30591:tid 30597] [client 4.147.190.83:48154] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r79.php"] [unique_id "aTgoDBG-g76drVdWQUWVCgAAAEM"]
[Tue Dec 09 21:45:49.266208 2025] [:error] [pid 5276:tid 5301] [client 4.147.190.83:36420] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/777.php"] [unique_id "aTgoDUtSXwbewdwyu-2GfwAAANc"]
[Tue Dec 09 21:45:49.475491 2025] [:error] [pid 30499:tid 30549] [client 4.147.190.83:16610] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/777.php"] [unique_id "aTgoDU0x3OqZTOPp7ckRkAAAAVM"]
[Tue Dec 09 21:45:49.679939 2025] [:error] [pid 36456:tid 36466] [client 4.147.190.83:17288] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/777.php"] [unique_id "aTgoDR0pAnOyfXl_v41NewAAAIg"]
[Tue Dec 09 21:45:49.765638 2025] [:error] [pid 30498:tid 30517] [client 4.147.190.83:17328] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/777.php"] [unique_id "aTgoDR2mcZJQ5qP_RC1NFAAAAA8"]
[Tue Dec 09 21:45:49.927423 2025] [:error] [pid 36456:tid 36479] [client 4.147.190.83:16717] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aTgoDR0pAnOyfXl_v41NfQAAAJU"]
[Tue Dec 09 21:45:50.064999 2025] [:error] [pid 36456:tid 36461] [client 4.147.190.83:16583] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aTgoDh0pAnOyfXl_v41NfgAAAIM"]
[Tue Dec 09 21:45:50.279715 2025] [:error] [pid 36456:tid 36458] [client 4.147.190.83:16595] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aTgoDh0pAnOyfXl_v41NfwAAAIA"]
[Tue Dec 09 21:45:50.509681 2025] [:error] [pid 36456:tid 36476] [client 4.147.190.83:21113] [client 4.147.190.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aTgoDh0pAnOyfXl_v41NgQAAAJI"]
[Tue Dec 09 22:33:04.277655 2025] [:error] [pid 30500:tid 30568] [client 182.44.67.97:42184] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTgzIK2eIIK3JPWHCXUXFAAAAYs"]
[Tue Dec 09 23:14:30.053607 2025] [:error] [pid 5276:tid 5285] [client 4.189.113.83:14732] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTg81ktSXwbewdwyu-2hOwAAAMc"]
[Tue Dec 09 23:14:30.842785 2025] [:error] [pid 30500:tid 30565] [client 4.189.113.83:33068] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTg81q2eIIK3JPWHCXUnKgAAAYg"]
[Tue Dec 09 23:14:31.197125 2025] [:error] [pid 30500:tid 30560] [client 4.189.113.83:33078] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTg8162eIIK3JPWHCXUnKwAAAYM"]
[Tue Dec 09 23:14:31.826170 2025] [:error] [pid 30500:tid 30578] [client 4.189.113.83:14775] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTg8162eIIK3JPWHCXUnLAAAAZU"]
[Tue Dec 09 23:14:32.635706 2025] [:error] [pid 5276:tid 5293] [client 4.189.113.83:14627] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aTg82EtSXwbewdwyu-2hPAAAAM8"]
[Tue Dec 09 23:14:33.509473 2025] [:error] [pid 5276:tid 5294] [client 4.189.113.83:14749] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aTg82UtSXwbewdwyu-2hPQAAANA"]
[Tue Dec 09 23:14:33.964767 2025] [:error] [pid 30498:tid 30523] [client 4.189.113.83:14839] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aTg82R2mcZJQ5qP_RC1mOAAAABU"]
[Tue Dec 09 23:14:34.511777 2025] [:error] [pid 30591:tid 30606] [client 4.189.113.83:33433] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aTg82hG-g76drVdWQUWxkAAAAEw"]
[Tue Dec 09 23:14:34.864904 2025] [:error] [pid 30498:tid 30507] [client 4.189.113.83:33412] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTg82h2mcZJQ5qP_RC1mOQAAAAU"]
[Tue Dec 09 23:14:35.703913 2025] [:error] [pid 30591:tid 30618] [client 4.189.113.83:35869] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTg82xG-g76drVdWQUWxkwAAAFg"]
[Tue Dec 09 23:14:36.129675 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:35867] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTg83B0pAnOyfXl_v415rAAAAIU"]
[Tue Dec 09 23:14:36.830247 2025] [:error] [pid 30498:tid 30518] [client 4.189.113.83:14778] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTg83B2mcZJQ5qP_RC1mPAAAABA"]
[Tue Dec 09 23:14:37.488981 2025] [:error] [pid 30500:tid 30562] [client 4.189.113.83:33427] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efile.php"] [unique_id "aTg83a2eIIK3JPWHCXUnNQAAAYU"]
[Tue Dec 09 23:14:37.821972 2025] [:error] [pid 30591:tid 30597] [client 4.189.113.83:14647] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efile.php"] [unique_id "aTg83RG-g76drVdWQUWxlgAAAEM"]
[Tue Dec 09 23:14:38.182189 2025] [:error] [pid 30500:tid 30568] [client 4.189.113.83:14632] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efile.php"] [unique_id "aTg83q2eIIK3JPWHCXUnOQAAAYs"]
[Tue Dec 09 23:14:38.468651 2025] [:error] [pid 30500:tid 30565] [client 4.189.113.83:33466] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efile.php"] [unique_id "aTg83q2eIIK3JPWHCXUnOwAAAYg"]
[Tue Dec 09 23:14:38.851734 2025] [:error] [pid 30500:tid 30580] [client 4.189.113.83:14726] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aTg83q2eIIK3JPWHCXUnPgAAAZc"]
[Tue Dec 09 23:14:39.215078 2025] [:error] [pid 30499:tid 30545] [client 4.189.113.83:32192] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aTg8300x3OqZTOPp7ckubgAAAU8"]
[Tue Dec 09 23:14:39.453057 2025] [:error] [pid 30591:tid 30603] [client 4.189.113.83:33421] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aTg83xG-g76drVdWQUWxmQAAAEk"]
[Tue Dec 09 23:14:40.015520 2025] [:error] [pid 30500:tid 30558] [client 4.189.113.83:14755] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aTg84K2eIIK3JPWHCXUnPwAAAYE"]
[Tue Dec 09 23:14:40.369924 2025] [:error] [pid 30498:tid 30514] [client 4.189.113.83:32264] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgn.php"] [unique_id "aTg84B2mcZJQ5qP_RC1mPwAAAAw"]
[Tue Dec 09 23:14:40.637898 2025] [:error] [pid 30500:tid 30563] [client 4.189.113.83:33000] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgn.php"] [unique_id "aTg84K2eIIK3JPWHCXUnQAAAAYY"]
[Tue Dec 09 23:14:40.998227 2025] [:error] [pid 30500:tid 30581] [client 4.189.113.83:33005] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgn.php"] [unique_id "aTg84K2eIIK3JPWHCXUnQQAAAZg"]
[Tue Dec 09 23:14:41.517024 2025] [:error] [pid 30591:tid 30605] [client 4.189.113.83:35865] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgn.php"] [unique_id "aTg84RG-g76drVdWQUWxngAAAEs"]
[Tue Dec 09 23:14:42.085852 2025] [:error] [pid 30591:tid 30614] [client 4.189.113.83:35863] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aTg84hG-g76drVdWQUWxnwAAAFQ"]
[Tue Dec 09 23:14:42.494192 2025] [:error] [pid 30500:tid 30572] [client 4.189.113.83:14610] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aTg84q2eIIK3JPWHCXUnRAAAAY8"]
[Tue Dec 09 23:14:42.971268 2025] [:error] [pid 36456:tid 36458] [client 4.189.113.83:33450] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aTg84h0pAnOyfXl_v415sQAAAIA"]
[Tue Dec 09 23:14:43.475163 2025] [:error] [pid 30498:tid 30515] [client 4.189.113.83:32224] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aTg84x2mcZJQ5qP_RC1mSAAAAA0"]
[Tue Dec 09 23:14:43.963422 2025] [:error] [pid 30591:tid 30607] [client 4.189.113.83:32197] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spk.php"] [unique_id "aTg84xG-g76drVdWQUWxpQAAAE0"]
[Tue Dec 09 23:14:44.367328 2025] [:error] [pid 30498:tid 30513] [client 4.189.113.83:14608] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spk.php"] [unique_id "aTg85B2mcZJQ5qP_RC1mSwAAAAs"]
[Tue Dec 09 23:14:44.756390 2025] [:error] [pid 30498:tid 30518] [client 4.189.113.83:14727] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spk.php"] [unique_id "aTg85B2mcZJQ5qP_RC1mTAAAABA"]
[Tue Dec 09 23:14:45.355501 2025] [:error] [pid 30591:tid 30611] [client 4.189.113.83:32301] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spk.php"] [unique_id "aTg85RG-g76drVdWQUWxqgAAAFE"]
[Tue Dec 09 23:14:45.608490 2025] [:error] [pid 30498:tid 30506] [client 4.189.113.83:33454] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aTg85R2mcZJQ5qP_RC1mTQAAAAQ"]
[Tue Dec 09 23:14:46.028852 2025] [:error] [pid 36456:tid 36482] [client 4.189.113.83:49694] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aTg85h0pAnOyfXl_v415swAAAJg"]
[Tue Dec 09 23:14:46.374532 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:14601] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aTg85h0pAnOyfXl_v415tAAAAIc"]
[Tue Dec 09 23:14:46.837342 2025] [:error] [pid 36456:tid 36459] [client 4.189.113.83:32258] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aTg85h0pAnOyfXl_v415uAAAAIE"]
[Tue Dec 09 23:14:47.243262 2025] [:error] [pid 30499:tid 30544] [client 4.189.113.83:32275] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aTg8500x3OqZTOPp7ckucAAAAU4"]
[Tue Dec 09 23:14:47.638122 2025] [:error] [pid 30591:tid 30602] [client 4.189.113.83:35880] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aTg85xG-g76drVdWQUWxrgAAAEg"]
[Tue Dec 09 23:14:48.084300 2025] [:error] [pid 30499:tid 30542] [client 4.189.113.83:14734] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aTg86E0x3OqZTOPp7ckucQAAAUw"]
[Tue Dec 09 23:14:48.415837 2025] [:error] [pid 30500:tid 30561] [client 4.189.113.83:32206] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aTg86K2eIIK3JPWHCXUnRgAAAYQ"]
[Tue Dec 09 23:14:48.692832 2025] [:error] [pid 30499:tid 30531] [client 4.189.113.83:14606] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aTg86E0x3OqZTOPp7ckucgAAAUE"]
[Tue Dec 09 23:14:48.962564 2025] [:error] [pid 30591:tid 30613] [client 4.189.113.83:32268] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aTg86BG-g76drVdWQUWxsQAAAFM"]
[Tue Dec 09 23:14:49.375014 2025] [:error] [pid 5276:tid 5292] [client 4.189.113.83:14752] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aTg86UtSXwbewdwyu-2hTAAAAM4"]
[Tue Dec 09 23:14:50.001490 2025] [:error] [pid 36456:tid 36464] [client 4.189.113.83:33425] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aTg86h0pAnOyfXl_v415ugAAAIY"]
[Tue Dec 09 23:14:50.471502 2025] [:error] [pid 5276:tid 5288] [client 4.189.113.83:32209] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php7"] [unique_id "aTg86ktSXwbewdwyu-2hTQAAAMo"]
[Tue Dec 09 23:14:51.199836 2025] [:error] [pid 36456:tid 36475] [client 4.189.113.83:33449] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php7"] [unique_id "aTg86x0pAnOyfXl_v415vwAAAJE"]
[Tue Dec 09 23:14:51.580703 2025] [:error] [pid 30499:tid 30534] [client 4.189.113.83:32974] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php7"] [unique_id "aTg8600x3OqZTOPp7ckudgAAAUQ"]
[Tue Dec 09 23:14:51.950894 2025] [:error] [pid 36456:tid 36480] [client 4.189.113.83:35878] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php7"] [unique_id "aTg86x0pAnOyfXl_v415wQAAAJY"]
[Tue Dec 09 23:14:52.551201 2025] [:error] [pid 30500:tid 30577] [client 4.189.113.83:33468] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aTg87K2eIIK3JPWHCXUnSgAAAZQ"]
[Tue Dec 09 23:14:53.017428 2025] [:error] [pid 30499:tid 30533] [client 4.189.113.83:32960] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aTg87U0x3OqZTOPp7ckueAAAAUM"]
[Tue Dec 09 23:14:53.570938 2025] [:error] [pid 36456:tid 36458] [client 4.189.113.83:33021] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aTg87R0pAnOyfXl_v415xgAAAIA"]
[Tue Dec 09 23:14:53.983611 2025] [:error] [pid 36456:tid 36467] [client 4.189.113.83:32248] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aTg87R0pAnOyfXl_v415xwAAAIk"]
[Tue Dec 09 23:14:54.634608 2025] [:error] [pid 30500:tid 30568] [client 4.189.113.83:33030] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aTg87q2eIIK3JPWHCXUnSwAAAYs"]
[Tue Dec 09 23:14:55.003899 2025] [:error] [pid 5276:tid 5295] [client 4.189.113.83:33435] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aTg870tSXwbewdwyu-2hUgAAANE"]
[Tue Dec 09 23:14:55.494872 2025] [:error] [pid 36456:tid 36474] [client 4.189.113.83:14757] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aTg87x0pAnOyfXl_v415ywAAAJA"]
[Tue Dec 09 23:14:55.878860 2025] [:error] [pid 36456:tid 36469] [client 4.189.113.83:33441] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aTg87x0pAnOyfXl_v415zgAAAIs"]
[Tue Dec 09 23:14:56.257357 2025] [:error] [pid 36456:tid 36470] [client 4.189.113.83:33413] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aTg88B0pAnOyfXl_v4150AAAAIw"]
[Tue Dec 09 23:14:56.608264 2025] [:error] [pid 5276:tid 5301] [client 4.189.113.83:33467] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aTg88EtSXwbewdwyu-2hUwAAANc"]
[Tue Dec 09 23:14:56.951003 2025] [:error] [pid 36456:tid 36480] [client 4.189.113.83:33043] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aTg88B0pAnOyfXl_v4150gAAAJY"]
[Tue Dec 09 23:14:57.534208 2025] [:error] [pid 36456:tid 36467] [client 4.189.113.83:15249] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aTg88R0pAnOyfXl_v4152AAAAIk"]
[Tue Dec 09 23:14:58.021241 2025] [:error] [pid 36456:tid 36462] [client 4.189.113.83:33063] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aTg88h0pAnOyfXl_v4153AAAAIQ"]
[Tue Dec 09 23:14:58.774108 2025] [:error] [pid 30500:tid 30565] [client 4.189.113.83:15240] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aTg88q2eIIK3JPWHCXUnTQAAAYg"]
[Tue Dec 09 23:14:59.120851 2025] [:error] [pid 36456:tid 36470] [client 4.189.113.83:14633] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aTg88x0pAnOyfXl_v4154gAAAIw"]
[Tue Dec 09 23:14:59.376005 2025] [:error] [pid 5276:tid 5297] [client 4.189.113.83:49666] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aTg880tSXwbewdwyu-2hVwAAANM"]
[Tue Dec 09 23:15:00.067970 2025] [:error] [pid 30591:tid 30610] [client 4.189.113.83:49685] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x0.php"] [unique_id "aTg89BG-g76drVdWQUWxtgAAAFA"]
[Tue Dec 09 23:15:00.634379 2025] [:error] [pid 30500:tid 30578] [client 4.189.113.83:47429] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x0.php"] [unique_id "aTg89K2eIIK3JPWHCXUnTwAAAZU"]
[Tue Dec 09 23:15:00.973667 2025] [:error] [pid 36456:tid 36464] [client 4.189.113.83:47452] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x0.php"] [unique_id "aTg89B0pAnOyfXl_v4156gAAAIY"]
[Tue Dec 09 23:15:01.341113 2025] [:error] [pid 30499:tid 30550] [client 4.189.113.83:14807] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x0.php"] [unique_id "aTg89U0x3OqZTOPp7ckuegAAAVQ"]
[Tue Dec 09 23:15:01.746480 2025] [:error] [pid 36456:tid 36481] [client 4.189.113.83:15277] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTg89R0pAnOyfXl_v4157gAAAJc"]
[Tue Dec 09 23:15:02.239724 2025] [:error] [pid 5276:tid 5302] [client 4.189.113.83:49724] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTg89ktSXwbewdwyu-2hWAAAANg"]
[Tue Dec 09 23:15:02.604453 2025] [:error] [pid 5276:tid 5299] [client 4.189.113.83:37521] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTg89ktSXwbewdwyu-2hWwAAANU"]
[Tue Dec 09 23:15:03.026763 2025] [:error] [pid 5276:tid 5292] [client 4.189.113.83:37510] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aTg890tSXwbewdwyu-2hXQAAAM4"]
[Tue Dec 09 23:15:03.352622 2025] [:error] [pid 30498:tid 30504] [client 4.189.113.83:15280] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aTg89x2mcZJQ5qP_RC1mUwAAAAI"]
[Tue Dec 09 23:15:03.692650 2025] [:error] [pid 36456:tid 36478] [client 4.189.113.83:15281] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aTg89x0pAnOyfXl_v415-gAAAJQ"]
[Tue Dec 09 23:15:04.541828 2025] [:error] [pid 36456:tid 36474] [client 4.189.113.83:47434] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aTg8-B0pAnOyfXl_v415_wAAAJA"]
[Tue Dec 09 23:15:04.968984 2025] [:error] [pid 5276:tid 5295] [client 4.189.113.83:49643] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aTg8-EtSXwbewdwyu-2hZAAAANE"]
[Tue Dec 09 23:15:05.541288 2025] [:error] [pid 30500:tid 30581] [client 4.189.113.83:62669] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aTg8-a2eIIK3JPWHCXUnUwAAAZg"]
[Tue Dec 09 23:15:05.887333 2025] [:error] [pid 30499:tid 30553] [client 4.189.113.83:49617] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aTg8-U0x3OqZTOPp7ckufgAAAVc"]
[Tue Dec 09 23:15:06.295117 2025] [:error] [pid 36456:tid 36477] [client 4.189.113.83:49659] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aTg8-h0pAnOyfXl_v416BgAAAJM"]
[Tue Dec 09 23:15:07.303561 2025] [:error] [pid 30591:tid 30605] [client 4.189.113.83:35880] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aTg8-xG-g76drVdWQUWxvQAAAEs"]
[Tue Dec 09 23:15:07.732072 2025] [:error] [pid 30499:tid 30542] [client 4.189.113.83:37530] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aTg8-00x3OqZTOPp7ckugQAAAUw"]
[Tue Dec 09 23:15:08.197062 2025] [:error] [pid 30591:tid 30606] [client 4.189.113.83:37543] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aTg8_BG-g76drVdWQUWxvwAAAEw"]
[Tue Dec 09 23:15:08.928245 2025] [:error] [pid 30591:tid 30612] [client 4.189.113.83:50947] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aTg8_BG-g76drVdWQUWxwgAAAFI"]
[Tue Dec 09 23:15:09.508669 2025] [:error] [pid 30498:tid 30507] [client 4.189.113.83:37506] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aTg8_R2mcZJQ5qP_RC1mWAAAAAU"]
[Tue Dec 09 23:15:09.876241 2025] [:error] [pid 30500:tid 30561] [client 4.189.113.83:51006] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aTg8_a2eIIK3JPWHCXUnWAAAAYQ"]
[Tue Dec 09 23:15:10.473818 2025] [:error] [pid 30500:tid 30562] [client 4.189.113.83:37553] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aTg8_q2eIIK3JPWHCXUnWQAAAYU"]
[Tue Dec 09 23:15:10.824955 2025] [:error] [pid 5276:tid 5296] [client 4.189.113.83:60610] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aTg8_ktSXwbewdwyu-2hbQAAANI"]
[Tue Dec 09 23:15:11.188213 2025] [:error] [pid 30498:tid 30505] [client 4.189.113.83:62675] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aTg8_x2mcZJQ5qP_RC1mWgAAAAM"]
[Tue Dec 09 23:15:11.526116 2025] [:error] [pid 30498:tid 30517] [client 4.189.113.83:37529] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTg8_x2mcZJQ5qP_RC1mXgAAAA8"]
[Tue Dec 09 23:15:12.008466 2025] [:error] [pid 30498:tid 30515] [client 4.189.113.83:50983] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTg9AB2mcZJQ5qP_RC1mXwAAAA0"]
[Tue Dec 09 23:15:12.335029 2025] [:error] [pid 36456:tid 36470] [client 4.189.113.83:62706] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTg9AB0pAnOyfXl_v416EgAAAIw"]
[Tue Dec 09 23:15:12.694976 2025] [:error] [pid 30498:tid 30518] [client 4.189.113.83:50954] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTg9AB2mcZJQ5qP_RC1mZQAAABA"]
[Tue Dec 09 23:15:13.004826 2025] [:error] [pid 30500:tid 30575] [client 4.189.113.83:60617] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aTg9Aa2eIIK3JPWHCXUnXAAAAZI"]
[Tue Dec 09 23:15:14.303305 2025] [:error] [pid 30591:tid 30605] [client 4.189.113.83:37519] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aTg9AhG-g76drVdWQUWxywAAAEs"]
[Tue Dec 09 23:15:14.610167 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:37558] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aTg9Ah0pAnOyfXl_v416GwAAAIU"]
[Tue Dec 09 23:15:15.228963 2025] [:error] [pid 30498:tid 30506] [client 4.189.113.83:44052] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aTg9Ax2mcZJQ5qP_RC1maAAAAAQ"]
[Tue Dec 09 23:15:15.537669 2025] [:error] [pid 30591:tid 30604] [client 4.189.113.83:60666] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aTg9AxG-g76drVdWQUWxzAAAAEo"]
[Tue Dec 09 23:15:15.894048 2025] [:error] [pid 36456:tid 36481] [client 4.189.113.83:58998] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aTg9Ax0pAnOyfXl_v416IAAAAJc"]
[Tue Dec 09 23:15:16.557602 2025] [:error] [pid 5276:tid 5294] [client 4.189.113.83:37541] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aTg9BEtSXwbewdwyu-2heQAAANA"]
[Tue Dec 09 23:15:16.973008 2025] [:error] [pid 36456:tid 36482] [client 4.189.113.83:62699] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aTg9BB0pAnOyfXl_v416IwAAAJg"]
[Tue Dec 09 23:15:17.449043 2025] [:error] [pid 5276:tid 5302] [client 4.189.113.83:62674] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aTg9BUtSXwbewdwyu-2hfAAAANg"]
[Tue Dec 09 23:15:17.774610 2025] [:error] [pid 30499:tid 30533] [client 4.189.113.83:60653] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aTg9BU0x3OqZTOPp7ckujwAAAUM"]
[Tue Dec 09 23:15:18.015223 2025] [:error] [pid 5276:tid 5291] [client 4.189.113.83:44074] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aTg9BktSXwbewdwyu-2hfQAAAM0"]
[Tue Dec 09 23:15:18.321700 2025] [:error] [pid 30591:tid 30610] [client 4.189.113.83:62667] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aTg9BhG-g76drVdWQUWx0gAAAFA"]
[Tue Dec 09 23:15:18.687477 2025] [:error] [pid 36456:tid 36480] [client 4.189.113.83:49602] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsx.php"] [unique_id "aTg9Bh0pAnOyfXl_v416JwAAAJY"]
[Tue Dec 09 23:15:18.998220 2025] [:error] [pid 30500:tid 30571] [client 4.189.113.83:50952] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsx.php"] [unique_id "aTg9Bq2eIIK3JPWHCXUnYAAAAY4"]
[Tue Dec 09 23:15:19.370638 2025] [:error] [pid 30591:tid 30605] [client 4.189.113.83:37527] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsx.php"] [unique_id "aTg9BxG-g76drVdWQUWx1wAAAEs"]
[Tue Dec 09 23:15:19.733746 2025] [:error] [pid 30500:tid 30572] [client 4.189.113.83:50992] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsx.php"] [unique_id "aTg9B62eIIK3JPWHCXUnYgAAAY8"]
[Tue Dec 09 23:15:20.104614 2025] [:error] [pid 30499:tid 30544] [client 4.189.113.83:33065] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aTg9CE0x3OqZTOPp7ckulgAAAU4"]
[Tue Dec 09 23:15:20.506726 2025] [:error] [pid 30500:tid 30566] [client 4.189.113.83:62705] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aTg9CK2eIIK3JPWHCXUnZQAAAYk"]
[Tue Dec 09 23:15:20.965256 2025] [:error] [pid 30500:tid 30564] [client 4.189.113.83:60615] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aTg9CK2eIIK3JPWHCXUnZgAAAYc"]
[Tue Dec 09 23:15:21.337897 2025] [:error] [pid 30498:tid 30513] [client 4.189.113.83:44089] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aTg9CR2mcZJQ5qP_RC1mbgAAAAs"]
[Tue Dec 09 23:15:21.840947 2025] [:error] [pid 5276:tid 5284] [client 4.189.113.83:50998] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dop.php"] [unique_id "aTg9CUtSXwbewdwyu-2hgQAAAMY"]
[Tue Dec 09 23:15:22.181107 2025] [:error] [pid 30500:tid 30562] [client 4.189.113.83:44049] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dop.php"] [unique_id "aTg9Cq2eIIK3JPWHCXUnaAAAAYU"]
[Tue Dec 09 23:15:22.553305 2025] [:error] [pid 30591:tid 30597] [client 4.189.113.83:58981] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dop.php"] [unique_id "aTg9ChG-g76drVdWQUWx3wAAAEM"]
[Tue Dec 09 23:15:23.265258 2025] [:error] [pid 30499:tid 30551] [client 4.189.113.83:58945] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dop.php"] [unique_id "aTg9C00x3OqZTOPp7ckunAAAAVU"]
[Tue Dec 09 23:15:23.829003 2025] [:error] [pid 30499:tid 30538] [client 4.189.113.83:60651] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zde.php"] [unique_id "aTg9C00x3OqZTOPp7ckungAAAUg"]
[Tue Dec 09 23:15:24.281080 2025] [:error] [pid 30500:tid 30573] [client 4.189.113.83:62657] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zde.php"] [unique_id "aTg9DK2eIIK3JPWHCXUnbwAAAZA"]
[Tue Dec 09 23:15:24.651839 2025] [:error] [pid 36456:tid 36473] [client 4.189.113.83:58964] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zde.php"] [unique_id "aTg9DB0pAnOyfXl_v416KQAAAI8"]
[Tue Dec 09 23:15:25.051199 2025] [:error] [pid 30499:tid 30553] [client 4.189.113.83:62696] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zde.php"] [unique_id "aTg9DU0x3OqZTOPp7ckuogAAAVc"]
[Tue Dec 09 23:15:25.560389 2025] [:error] [pid 30499:tid 30541] [client 4.189.113.83:49659] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aTg9DU0x3OqZTOPp7ckupAAAAUs"]
[Tue Dec 09 23:15:25.966466 2025] [:error] [pid 30500:tid 30563] [client 4.189.113.83:62679] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aTg9Da2eIIK3JPWHCXUncwAAAYY"]
[Tue Dec 09 23:15:26.283951 2025] [:error] [pid 5276:tid 5300] [client 4.189.113.83:37514] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aTg9DktSXwbewdwyu-2hhQAAANY"]
[Tue Dec 09 23:15:26.683412 2025] [:error] [pid 30500:tid 30572] [client 4.189.113.83:60648] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aTg9Dq2eIIK3JPWHCXUndQAAAY8"]
[Tue Dec 09 23:15:27.409048 2025] [:error] [pid 36456:tid 36469] [client 4.189.113.83:44066] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aTg9Dx0pAnOyfXl_v416LwAAAIs"]
[Tue Dec 09 23:15:27.824530 2025] [:error] [pid 36456:tid 36460] [client 4.189.113.83:37522] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aTg9Dx0pAnOyfXl_v416MAAAAII"]
[Tue Dec 09 23:15:28.154648 2025] [:error] [pid 5276:tid 5278] [client 4.189.113.83:49642] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aTg9EEtSXwbewdwyu-2hiAAAAMA"]
[Tue Dec 09 23:15:28.607482 2025] [:error] [pid 36456:tid 36478] [client 4.189.113.83:49650] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aTg9EB0pAnOyfXl_v416MwAAAJQ"]
[Tue Dec 09 23:15:32.475344 2025] [:error] [pid 5276:tid 5297] [client 4.189.113.83:62702] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d57.php"] [unique_id "aTg9FEtSXwbewdwyu-2hmAAAANM"]
[Tue Dec 09 23:15:32.731950 2025] [:error] [pid 36456:tid 36476] [client 4.189.113.83:50987] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d57.php"] [unique_id "aTg9FB0pAnOyfXl_v416SQAAAJI"]
[Tue Dec 09 23:15:33.052430 2025] [:error] [pid 36456:tid 36482] [client 4.189.113.83:50950] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d57.php"] [unique_id "aTg9FR0pAnOyfXl_v416TAAAAJg"]
[Tue Dec 09 23:15:33.377790 2025] [:error] [pid 36456:tid 36477] [client 4.189.113.83:58980] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d57.php"] [unique_id "aTg9FR0pAnOyfXl_v416TwAAAJM"]
[Tue Dec 09 23:15:33.693077 2025] [:error] [pid 36456:tid 36468] [client 4.189.113.83:58957] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTg9FR0pAnOyfXl_v416UAAAAIo"]
[Tue Dec 09 23:15:33.950918 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:50957] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTg9FR0pAnOyfXl_v416UgAAAIU"]
[Tue Dec 09 23:15:34.205217 2025] [:error] [pid 5276:tid 5282] [client 4.189.113.83:60613] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTg9FktSXwbewdwyu-2hmwAAAMQ"]
[Tue Dec 09 23:15:34.613344 2025] [:error] [pid 30500:tid 30564] [client 4.189.113.83:62660] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTg9Fq2eIIK3JPWHCXUnegAAAYc"]
[Tue Dec 09 23:15:35.121483 2025] [:error] [pid 30499:tid 30542] [client 4.189.113.83:62664] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTg9F00x3OqZTOPp7cku4QAAAUw"]
[Tue Dec 09 23:15:35.394283 2025] [:error] [pid 36456:tid 36478] [client 4.189.113.83:47438] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTg9Fx0pAnOyfXl_v416WgAAAJQ"]
[Tue Dec 09 23:15:35.623784 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:62656] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTg9Fx0pAnOyfXl_v416XAAAAIc"]
[Tue Dec 09 23:15:35.963606 2025] [:error] [pid 30499:tid 30530] [client 4.189.113.83:44551] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTg9F00x3OqZTOPp7cku4gAAAUA"]
[Tue Dec 09 23:15:36.255115 2025] [:error] [pid 5276:tid 5294] [client 4.189.113.83:37508] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aTg9GEtSXwbewdwyu-2hoAAAANA"]
[Tue Dec 09 23:15:36.569120 2025] [:error] [pid 30499:tid 30540] [client 4.189.113.83:50989] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aTg9GE0x3OqZTOPp7cku5QAAAUo"]
[Tue Dec 09 23:15:36.863206 2025] [:error] [pid 30500:tid 30565] [client 4.189.113.83:37564] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aTg9GK2eIIK3JPWHCXUngQAAAYg"]
[Tue Dec 09 23:15:37.436757 2025] [:error] [pid 5276:tid 5284] [client 4.189.113.83:37562] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aTg9GUtSXwbewdwyu-2hogAAAMY"]
[Tue Dec 09 23:15:37.698425 2025] [:error] [pid 5276:tid 5280] [client 4.189.113.83:49631] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTg9GUtSXwbewdwyu-2hpAAAAMI"]
[Tue Dec 09 23:15:37.939721 2025] [:error] [pid 30498:tid 30515] [client 4.189.113.83:44583] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTg9GR2mcZJQ5qP_RC1mlAAAAA0"]
[Tue Dec 09 23:15:38.235880 2025] [:error] [pid 30591:tid 30595] [client 4.189.113.83:60668] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTg9GhG-g76drVdWQUWyDgAAAEE"]
[Tue Dec 09 23:15:38.557437 2025] [:error] [pid 30500:tid 30563] [client 4.189.113.83:49640] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aTg9Gq2eIIK3JPWHCXUnhAAAAYY"]
[Tue Dec 09 23:15:38.891108 2025] [:error] [pid 30498:tid 30512] [client 4.189.113.83:49661] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aTg9Gh2mcZJQ5qP_RC1mlgAAAAo"]
[Tue Dec 09 23:15:39.322411 2025] [:error] [pid 30498:tid 30518] [client 4.189.113.83:58950] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aTg9Gx2mcZJQ5qP_RC1mmAAAABA"]
[Tue Dec 09 23:15:39.645804 2025] [:error] [pid 30499:tid 30534] [client 4.189.113.83:49619] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aTg9G00x3OqZTOPp7cku6QAAAUQ"]
[Tue Dec 09 23:15:39.968841 2025] [:error] [pid 5276:tid 5300] [client 4.189.113.83:59006] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aTg9G0tSXwbewdwyu-2hqQAAANY"]
[Tue Dec 09 23:15:40.232435 2025] [:error] [pid 30500:tid 30569] [client 4.189.113.83:58989] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aTg9HK2eIIK3JPWHCXUnjAAAAYw"]
[Tue Dec 09 23:15:40.501451 2025] [:error] [pid 30498:tid 30523] [client 4.189.113.83:50962] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aTg9HB2mcZJQ5qP_RC1mmQAAABU"]
[Tue Dec 09 23:15:40.837624 2025] [:error] [pid 30498:tid 30509] [client 4.189.113.83:50988] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aTg9HB2mcZJQ5qP_RC1mmgAAAAc"]
[Tue Dec 09 23:15:41.113874 2025] [:error] [pid 30500:tid 30562] [client 4.189.113.83:44068] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aTg9Ha2eIIK3JPWHCXUnjQAAAYU"]
[Tue Dec 09 23:15:41.561192 2025] [:error] [pid 30500:tid 30567] [client 4.189.113.83:60630] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aTg9Ha2eIIK3JPWHCXUnjgAAAYo"]
[Tue Dec 09 23:15:41.803981 2025] [:error] [pid 30500:tid 30561] [client 4.189.113.83:44087] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aTg9Ha2eIIK3JPWHCXUnjwAAAYQ"]
[Tue Dec 09 23:15:42.072875 2025] [:error] [pid 30500:tid 30575] [client 4.189.113.83:37528] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aTg9Hq2eIIK3JPWHCXUnkQAAAZI"]
[Tue Dec 09 23:15:42.549474 2025] [:error] [pid 36456:tid 36478] [client 4.189.113.83:60624] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aTg9Hh0pAnOyfXl_v416ZQAAAJQ"]
[Tue Dec 09 23:15:42.915613 2025] [:error] [pid 36456:tid 36472] [client 4.189.113.83:44043] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aTg9Hh0pAnOyfXl_v416ZgAAAI4"]
[Tue Dec 09 23:15:43.229695 2025] [:error] [pid 5276:tid 5298] [client 4.189.113.83:58968] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aTg9H0tSXwbewdwyu-2hrgAAANQ"]
[Tue Dec 09 23:15:43.527210 2025] [:error] [pid 30500:tid 30577] [client 4.189.113.83:44054] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aTg9H62eIIK3JPWHCXUnkgAAAZQ"]
[Tue Dec 09 23:15:43.943907 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:60631] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aTg9Hx0pAnOyfXl_v416aAAAAIc"]
[Tue Dec 09 23:15:44.184303 2025] [:error] [pid 30499:tid 30530] [client 4.189.113.83:62672] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aTg9IE0x3OqZTOPp7cku8wAAAUA"]
[Tue Dec 09 23:15:44.463537 2025] [:error] [pid 36456:tid 36476] [client 4.189.113.83:14823] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aTg9IB0pAnOyfXl_v416agAAAJI"]
[Tue Dec 09 23:15:44.764606 2025] [:error] [pid 30498:tid 30519] [client 4.189.113.83:44042] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aTg9IB2mcZJQ5qP_RC1mnAAAABE"]
[Tue Dec 09 23:15:45.093686 2025] [:error] [pid 30499:tid 30531] [client 4.189.113.83:62662] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aTg9IU0x3OqZTOPp7cku9QAAAUE"]
[Tue Dec 09 23:15:45.364523 2025] [:error] [pid 30499:tid 30535] [client 4.189.113.83:44598] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keu.php"] [unique_id "aTg9IU0x3OqZTOPp7cku9gAAAUU"]
[Tue Dec 09 23:15:45.673234 2025] [:error] [pid 30500:tid 30576] [client 4.189.113.83:47473] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keu.php"] [unique_id "aTg9Ia2eIIK3JPWHCXUnlwAAAZM"]
[Tue Dec 09 23:15:46.124334 2025] [:error] [pid 36456:tid 36461] [client 4.189.113.83:37535] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keu.php"] [unique_id "aTg9Ih0pAnOyfXl_v416cAAAAIM"]
[Tue Dec 09 23:15:46.458509 2025] [:error] [pid 30498:tid 30524] [client 4.189.113.83:60654] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keu.php"] [unique_id "aTg9Ih2mcZJQ5qP_RC1mngAAABY"]
[Tue Dec 09 23:15:46.725910 2025] [:error] [pid 30498:tid 30526] [client 4.189.113.83:44067] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTg9Ih2mcZJQ5qP_RC1mnwAAABg"]
[Tue Dec 09 23:15:46.998497 2025] [:error] [pid 30498:tid 30520] [client 4.189.113.83:49647] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTg9Ih2mcZJQ5qP_RC1moAAAABI"]
[Tue Dec 09 23:15:47.255019 2025] [:error] [pid 30498:tid 30521] [client 4.189.113.83:60655] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTg9Ix2mcZJQ5qP_RC1mogAAABM"]
[Tue Dec 09 23:15:47.589658 2025] [:error] [pid 30498:tid 30510] [client 4.189.113.83:37532] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTg9Ix2mcZJQ5qP_RC1mowAAAAg"]
[Tue Dec 09 23:15:47.839679 2025] [:error] [pid 30498:tid 30505] [client 4.189.113.83:15283] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTg9Ix2mcZJQ5qP_RC1mpQAAAAM"]
[Tue Dec 09 23:15:48.138527 2025] [:error] [pid 30498:tid 30503] [client 4.189.113.83:50971] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTg9JB2mcZJQ5qP_RC1mpgAAAAE"]
[Tue Dec 09 23:15:48.420661 2025] [:error] [pid 5276:tid 5291] [client 4.189.113.83:62701] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTg9JEtSXwbewdwyu-2htQAAAM0"]
[Tue Dec 09 23:15:48.668296 2025] [:error] [pid 5276:tid 5300] [client 4.189.113.83:37518] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTg9JEtSXwbewdwyu-2htwAAANY"]
[Tue Dec 09 23:15:48.983565 2025] [:error] [pid 30500:tid 30580] [client 4.189.113.83:62700] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aTg9JK2eIIK3JPWHCXUnmQAAAZc"]
[Tue Dec 09 23:15:49.331782 2025] [:error] [pid 30500:tid 30563] [client 4.189.113.83:37504] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aTg9Ja2eIIK3JPWHCXUnmgAAAYY"]
[Tue Dec 09 23:15:49.636352 2025] [:error] [pid 5276:tid 5296] [client 4.189.113.83:50949] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aTg9JUtSXwbewdwyu-2huAAAANI"]
[Tue Dec 09 23:15:49.899729 2025] [:error] [pid 5276:tid 5278] [client 4.189.113.83:44060] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aTg9JUtSXwbewdwyu-2huQAAAMA"]
[Tue Dec 09 23:15:50.212054 2025] [:error] [pid 30591:tid 30601] [client 4.189.113.83:44594] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aTg9JhG-g76drVdWQUWyIgAAAEc"]
[Tue Dec 09 23:15:50.685133 2025] [:error] [pid 30591:tid 30604] [client 4.189.113.83:37563] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aTg9JhG-g76drVdWQUWyIwAAAEo"]
[Tue Dec 09 23:15:51.022343 2025] [:error] [pid 36456:tid 36478] [client 4.189.113.83:60611] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aTg9Jx0pAnOyfXl_v416dgAAAJQ"]
[Tue Dec 09 23:15:51.297466 2025] [:error] [pid 36456:tid 36472] [client 4.189.113.83:49656] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aTg9Jx0pAnOyfXl_v416dwAAAI4"]
[Tue Dec 09 23:15:51.561243 2025] [:error] [pid 30500:tid 30566] [client 4.189.113.83:50946] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv.php"] [unique_id "aTg9J62eIIK3JPWHCXUnnwAAAYk"]
[Tue Dec 09 23:15:51.811197 2025] [:error] [pid 36456:tid 36467] [client 4.189.113.83:58954] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv.php"] [unique_id "aTg9Jx0pAnOyfXl_v416egAAAIk"]
[Tue Dec 09 23:15:52.076034 2025] [:error] [pid 30500:tid 30560] [client 4.189.113.83:50974] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv.php"] [unique_id "aTg9KK2eIIK3JPWHCXUnoQAAAYM"]
[Tue Dec 09 23:15:52.369589 2025] [:error] [pid 30500:tid 30564] [client 4.189.113.83:49648] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv.php"] [unique_id "aTg9KK2eIIK3JPWHCXUnogAAAYc"]
[Tue Dec 09 23:15:52.734061 2025] [:error] [pid 30498:tid 30508] [client 4.189.113.83:58986] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanki.php"] [unique_id "aTg9KB2mcZJQ5qP_RC1mqQAAAAY"]
[Tue Dec 09 23:15:52.977770 2025] [:error] [pid 30498:tid 30523] [client 4.189.113.83:49616] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanki.php"] [unique_id "aTg9KB2mcZJQ5qP_RC1mqgAAABU"]
[Tue Dec 09 23:15:53.250973 2025] [:error] [pid 30500:tid 30561] [client 4.189.113.83:44544] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanki.php"] [unique_id "aTg9Ka2eIIK3JPWHCXUnpQAAAYQ"]
[Tue Dec 09 23:15:53.532575 2025] [:error] [pid 36456:tid 36461] [client 4.189.113.83:49611] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanki.php"] [unique_id "aTg9KR0pAnOyfXl_v416fgAAAIM"]
[Tue Dec 09 23:15:53.814771 2025] [:error] [pid 5276:tid 5295] [client 4.189.113.83:49604] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aTg9KUtSXwbewdwyu-2hvgAAANE"]
[Tue Dec 09 23:15:54.194231 2025] [:error] [pid 30498:tid 30509] [client 4.189.113.83:49638] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aTg9Kh2mcZJQ5qP_RC1mqwAAAAc"]
[Tue Dec 09 23:15:54.500485 2025] [:error] [pid 36456:tid 36469] [client 4.189.113.83:33081] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aTg9Kh0pAnOyfXl_v416ggAAAIs"]
[Tue Dec 09 23:15:54.728025 2025] [:error] [pid 36456:tid 36468] [client 4.189.113.83:49605] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aTg9Kh0pAnOyfXl_v416gwAAAIo"]
[Tue Dec 09 23:15:54.993554 2025] [:error] [pid 30498:tid 30517] [client 4.189.113.83:49663] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/555.php"] [unique_id "aTg9Kh2mcZJQ5qP_RC1mrAAAAA8"]
[Tue Dec 09 23:15:55.247722 2025] [:error] [pid 5276:tid 5299] [client 4.189.113.83:50993] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/555.php"] [unique_id "aTg9K0tSXwbewdwyu-2hvwAAANU"]
[Tue Dec 09 23:15:55.519116 2025] [:error] [pid 5276:tid 5280] [client 4.189.113.83:60659] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/555.php"] [unique_id "aTg9K0tSXwbewdwyu-2hwAAAAMI"]
[Tue Dec 09 23:15:55.764144 2025] [:error] [pid 36456:tid 36475] [client 4.189.113.83:60641] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/555.php"] [unique_id "aTg9Kx0pAnOyfXl_v416hQAAAJE"]
[Tue Dec 09 23:15:55.991931 2025] [:error] [pid 36456:tid 36466] [client 4.189.113.83:62694] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTg9Kx0pAnOyfXl_v416hgAAAIg"]
[Tue Dec 09 23:15:56.261766 2025] [:error] [pid 30499:tid 30540] [client 4.189.113.83:44574] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTg9LE0x3OqZTOPp7cku_wAAAUo"]
[Tue Dec 09 23:15:56.510531 2025] [:error] [pid 5276:tid 5301] [client 4.189.113.83:37524] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTg9LEtSXwbewdwyu-2hwgAAANc"]
[Tue Dec 09 23:15:56.764883 2025] [:error] [pid 30591:tid 30618] [client 4.189.113.83:49641] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aTg9LBG-g76drVdWQUWyLAAAAFg"]
[Tue Dec 09 23:15:57.009394 2025] [:error] [pid 5276:tid 5297] [client 4.189.113.83:58996] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dds.php"] [unique_id "aTg9LUtSXwbewdwyu-2hwwAAANM"]
[Tue Dec 09 23:15:57.246064 2025] [:error] [pid 30500:tid 30570] [client 4.189.113.83:62712] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dds.php"] [unique_id "aTg9La2eIIK3JPWHCXUnqAAAAY0"]
[Tue Dec 09 23:15:57.628918 2025] [:error] [pid 30591:tid 30608] [client 4.189.113.83:49636] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dds.php"] [unique_id "aTg9LRG-g76drVdWQUWyLgAAAE4"]
[Tue Dec 09 23:15:57.940052 2025] [:error] [pid 30500:tid 30559] [client 4.189.113.83:60614] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dds.php"] [unique_id "aTg9La2eIIK3JPWHCXUnqgAAAYI"]
[Tue Dec 09 23:15:58.180527 2025] [:error] [pid 30499:tid 30538] [client 4.189.113.83:62671] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NH19T66T.php"] [unique_id "aTg9Lk0x3OqZTOPp7ckvAwAAAUg"]
[Tue Dec 09 23:15:58.457864 2025] [:error] [pid 5276:tid 5300] [client 4.189.113.83:44571] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NH19T66T.php"] [unique_id "aTg9LktSXwbewdwyu-2hxQAAANY"]
[Tue Dec 09 23:15:58.793579 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:49644] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NH19T66T.php"] [unique_id "aTg9Lh0pAnOyfXl_v416igAAAIc"]
[Tue Dec 09 23:15:59.038240 2025] [:error] [pid 36456:tid 36476] [client 4.189.113.83:50997] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NH19T66T.php"] [unique_id "aTg9Lx0pAnOyfXl_v416jAAAAJI"]
[Tue Dec 09 23:15:59.273942 2025] [:error] [pid 30498:tid 30506] [client 4.189.113.83:47454] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aTg9Lx2mcZJQ5qP_RC1msQAAAAQ"]
[Tue Dec 09 23:15:59.689953 2025] [:error] [pid 36456:tid 36461] [client 4.189.113.83:37516] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aTg9Lx0pAnOyfXl_v416jQAAAIM"]
[Tue Dec 09 23:16:00.091909 2025] [:error] [pid 30500:tid 30580] [client 4.189.113.83:44603] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aTg9MK2eIIK3JPWHCXUnqwAAAZc"]
[Tue Dec 09 23:16:00.338425 2025] [:error] [pid 30591:tid 30602] [client 4.189.113.83:44081] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aTg9MBG-g76drVdWQUWyMgAAAEg"]
[Tue Dec 09 23:16:00.609108 2025] [:error] [pid 5276:tid 5278] [client 4.189.113.83:50956] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aTg9MEtSXwbewdwyu-2hxgAAAMA"]
[Tue Dec 09 23:16:00.848241 2025] [:error] [pid 36456:tid 36470] [client 4.189.113.83:60638] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aTg9MB0pAnOyfXl_v416kAAAAIw"]
[Tue Dec 09 23:16:01.081347 2025] [:error] [pid 36456:tid 36479] [client 4.189.113.83:58956] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aTg9MR0pAnOyfXl_v416kgAAAJU"]
[Tue Dec 09 23:16:01.329250 2025] [:error] [pid 30499:tid 30534] [client 4.189.113.83:49637] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aTg9MU0x3OqZTOPp7ckvBwAAAUQ"]
[Tue Dec 09 23:16:01.619461 2025] [:error] [pid 30500:tid 30572] [client 4.189.113.83:44094] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aTg9Ma2eIIK3JPWHCXUnrAAAAY8"]
[Tue Dec 09 23:16:01.918595 2025] [:error] [pid 30499:tid 30548] [client 4.189.113.83:60646] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aTg9MU0x3OqZTOPp7ckvCQAAAVI"]
[Tue Dec 09 23:16:02.198085 2025] [:error] [pid 30499:tid 30553] [client 4.189.113.83:15258] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aTg9Mk0x3OqZTOPp7ckvCgAAAVc"]
[Tue Dec 09 23:16:02.452417 2025] [:error] [pid 30499:tid 30550] [client 4.189.113.83:60671] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aTg9Mk0x3OqZTOPp7ckvCwAAAVQ"]
[Tue Dec 09 23:16:02.681855 2025] [:error] [pid 30499:tid 30543] [client 4.189.113.83:50972] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "aTg9Mk0x3OqZTOPp7ckvDgAAAU0"]
[Tue Dec 09 23:16:02.968651 2025] [:error] [pid 30499:tid 30547] [client 4.189.113.83:60663] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "aTg9Mk0x3OqZTOPp7ckvDwAAAVE"]
[Tue Dec 09 23:16:03.251723 2025] [:error] [pid 30499:tid 30532] [client 4.189.113.83:44085] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "aTg9M00x3OqZTOPp7ckvEwAAAUI"]
[Tue Dec 09 23:16:03.501061 2025] [:error] [pid 30499:tid 30535] [client 4.189.113.83:62717] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "aTg9M00x3OqZTOPp7ckvFAAAAUU"]
[Tue Dec 09 23:16:03.732419 2025] [:error] [pid 30499:tid 30538] [client 4.189.113.83:44056] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTg9M00x3OqZTOPp7ckvFgAAAUg"]
[Tue Dec 09 23:16:03.978656 2025] [:error] [pid 30499:tid 30549] [client 4.189.113.83:58949] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTg9M00x3OqZTOPp7ckvFwAAAVM"]
[Tue Dec 09 23:16:04.350812 2025] [:error] [pid 30591:tid 30616] [client 4.189.113.83:44600] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTg9NBG-g76drVdWQUWyOQAAAFY"]
[Tue Dec 09 23:16:04.581038 2025] [:error] [pid 30591:tid 30606] [client 4.189.113.83:50977] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aTg9NBG-g76drVdWQUWyOgAAAEw"]
[Tue Dec 09 23:16:04.828129 2025] [:error] [pid 5276:tid 5279] [client 4.189.113.83:49689] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aTg9NEtSXwbewdwyu-2hywAAAME"]
[Tue Dec 09 23:16:05.060092 2025] [:error] [pid 30500:tid 30566] [client 4.189.113.83:62661] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aTg9Na2eIIK3JPWHCXUnrgAAAYk"]
[Tue Dec 09 23:16:05.312077 2025] [:error] [pid 30499:tid 30536] [client 4.189.113.83:33029] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aTg9NU0x3OqZTOPp7ckvHgAAAUY"]
[Tue Dec 09 23:16:05.542131 2025] [:error] [pid 30499:tid 30553] [client 4.189.113.83:50964] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aTg9NU0x3OqZTOPp7ckvIQAAAVc"]
[Tue Dec 09 23:16:05.780093 2025] [:error] [pid 30500:tid 30562] [client 4.189.113.83:58965] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aTg9Na2eIIK3JPWHCXUnswAAAYU"]
[Tue Dec 09 23:16:06.021791 2025] [:error] [pid 30591:tid 30598] [client 4.189.113.83:37555] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aTg9NhG-g76drVdWQUWyOwAAAEQ"]
[Tue Dec 09 23:16:06.262570 2025] [:error] [pid 30591:tid 30611] [client 4.189.113.83:44062] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aTg9NhG-g76drVdWQUWyPAAAAFE"]
[Tue Dec 09 23:16:06.514512 2025] [:error] [pid 30591:tid 30612] [client 4.189.113.83:44075] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aTg9NhG-g76drVdWQUWyPQAAAFI"]
[Tue Dec 09 23:16:06.776119 2025] [:error] [pid 30500:tid 30579] [client 4.189.113.83:58975] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aTg9Nq2eIIK3JPWHCXUntwAAAZY"]
[Tue Dec 09 23:16:07.023800 2025] [:error] [pid 5276:tid 5302] [client 4.189.113.83:62713] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aTg9N0tSXwbewdwyu-2hzAAAANg"]
[Tue Dec 09 23:16:07.412941 2025] [:error] [pid 30591:tid 30618] [client 4.189.113.83:62714] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aTg9NxG-g76drVdWQUWyQAAAAFg"]
[Tue Dec 09 23:16:07.724516 2025] [:error] [pid 30498:tid 30512] [client 4.189.113.83:44069] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aTg9Nx2mcZJQ5qP_RC1muAAAAAo"]
[Tue Dec 09 23:16:08.007861 2025] [:error] [pid 30499:tid 30552] [client 4.189.113.83:58960] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aTg9OE0x3OqZTOPp7ckvOQAAAVY"]
[Tue Dec 09 23:16:08.275213 2025] [:error] [pid 30499:tid 30541] [client 4.189.113.83:50980] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aTg9OE0x3OqZTOPp7ckvPQAAAUs"]
[Tue Dec 09 23:16:08.506265 2025] [:error] [pid 36456:tid 36467] [client 4.189.113.83:47438] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aTg9OB0pAnOyfXl_v416mQAAAIk"]
[Tue Dec 09 23:16:08.746647 2025] [:error] [pid 5276:tid 5284] [client 4.189.113.83:49672] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aTg9OEtSXwbewdwyu-2hzwAAAMY"]
[Tue Dec 09 23:16:09.015859 2025] [:error] [pid 30499:tid 30537] [client 4.189.113.83:44035] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile1.php"] [unique_id "aTg9OU0x3OqZTOPp7ckvRAAAAUc"]
[Tue Dec 09 23:16:09.300745 2025] [:error] [pid 30591:tid 30594] [client 4.189.113.83:49654] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile1.php"] [unique_id "aTg9ORG-g76drVdWQUWyQgAAAEA"]
[Tue Dec 09 23:16:09.555105 2025] [:error] [pid 30499:tid 30552] [client 4.189.113.83:44577] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile1.php"] [unique_id "aTg9OU0x3OqZTOPp7ckvSQAAAVY"]
[Tue Dec 09 23:16:09.881111 2025] [:error] [pid 30591:tid 30603] [client 4.189.113.83:44073] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile1.php"] [unique_id "aTg9ORG-g76drVdWQUWyQwAAAEk"]
[Tue Dec 09 23:16:10.270199 2025] [:error] [pid 5276:tid 5283] [client 4.189.113.83:58979] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aTg9OktSXwbewdwyu-2h1gAAAMU"]
[Tue Dec 09 23:16:10.577565 2025] [:error] [pid 30499:tid 30546] [client 4.189.113.83:44086] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aTg9Ok0x3OqZTOPp7ckvUwAAAVA"]
[Tue Dec 09 23:16:10.809832 2025] [:error] [pid 5276:tid 5288] [client 4.189.113.83:50984] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aTg9OktSXwbewdwyu-2h2AAAAMo"]
[Tue Dec 09 23:16:11.042893 2025] [:error] [pid 30500:tid 30574] [client 4.189.113.83:14787] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aTg9O62eIIK3JPWHCXUnvgAAAZE"]
[Tue Dec 09 23:16:11.318238 2025] [:error] [pid 30500:tid 30566] [client 4.189.113.83:44586] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2%25.php"] [unique_id "aTg9O62eIIK3JPWHCXUnwAAAAYk"]
[Tue Dec 09 23:16:11.689756 2025] [:error] [pid 36456:tid 36464] [client 4.189.113.83:58969] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2%25.php"] [unique_id "aTg9Ox0pAnOyfXl_v416oAAAAIY"]
[Tue Dec 09 23:16:11.994794 2025] [:error] [pid 30591:tid 30610] [client 4.189.113.83:37540] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2%25.php"] [unique_id "aTg9OxG-g76drVdWQUWySAAAAFA"]
[Tue Dec 09 23:16:12.265650 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:60622] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2%25.php"] [unique_id "aTg9PB0pAnOyfXl_v416owAAAIU"]
[Tue Dec 09 23:16:12.497663 2025] [:error] [pid 36456:tid 36458] [client 4.189.113.83:49622] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aTg9PB0pAnOyfXl_v416pQAAAIA"]
[Tue Dec 09 23:16:12.927034 2025] [:error] [pid 36456:tid 36478] [client 4.189.113.83:59004] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aTg9PB0pAnOyfXl_v416pwAAAJQ"]
[Tue Dec 09 23:16:13.178776 2025] [:error] [pid 30591:tid 30601] [client 4.189.113.83:50963] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aTg9PRG-g76drVdWQUWySwAAAEc"]
[Tue Dec 09 23:16:13.471678 2025] [:error] [pid 30591:tid 30604] [client 4.189.113.83:62689] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aTg9PRG-g76drVdWQUWyTAAAAEo"]
[Tue Dec 09 23:16:13.726627 2025] [:error] [pid 30591:tid 30616] [client 4.189.113.83:58944] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/faq.php"] [unique_id "aTg9PRG-g76drVdWQUWyTgAAAFY"]
[Tue Dec 09 23:16:13.965173 2025] [:error] [pid 5276:tid 5290] [client 4.189.113.83:58990] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/faq.php"] [unique_id "aTg9PUtSXwbewdwyu-2h2wAAAMw"]
[Tue Dec 09 23:16:14.229752 2025] [:error] [pid 30500:tid 30573] [client 4.189.113.83:58988] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/faq.php"] [unique_id "aTg9Pq2eIIK3JPWHCXUnxAAAAZA"]
[Tue Dec 09 23:16:14.537757 2025] [:error] [pid 30499:tid 30542] [client 4.189.113.83:44041] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/faq.php"] [unique_id "aTg9Pk0x3OqZTOPp7ckvdwAAAUw"]
[Tue Dec 09 23:16:14.795929 2025] [:error] [pid 30591:tid 30600] [client 4.189.113.83:32971] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x3.php"] [unique_id "aTg9PhG-g76drVdWQUWyUAAAAEY"]
[Tue Dec 09 23:16:15.049724 2025] [:error] [pid 36456:tid 36461] [client 4.189.113.83:62673] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x3.php"] [unique_id "aTg9Px0pAnOyfXl_v416qgAAAIM"]
[Tue Dec 09 23:16:15.391413 2025] [:error] [pid 30499:tid 30531] [client 4.189.113.83:60628] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x3.php"] [unique_id "aTg9P00x3OqZTOPp7ckvfwAAAUE"]
[Tue Dec 09 23:16:15.619722 2025] [:error] [pid 30499:tid 30538] [client 4.189.113.83:60656] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x3.php"] [unique_id "aTg9P00x3OqZTOPp7ckvggAAAUg"]
[Tue Dec 09 23:16:15.851809 2025] [:error] [pid 30591:tid 30607] [client 4.189.113.83:15236] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aTg9PxG-g76drVdWQUWyVAAAAE0"]
[Tue Dec 09 23:16:16.091449 2025] [:error] [pid 30591:tid 30594] [client 4.189.113.83:58953] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aTg9QBG-g76drVdWQUWyVQAAAEA"]
[Tue Dec 09 23:16:16.448679 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:37509] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aTg9QB0pAnOyfXl_v416rgAAAIc"]
[Tue Dec 09 23:16:16.812834 2025] [:error] [pid 30591:tid 30602] [client 4.189.113.83:44605] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nbr.php"] [unique_id "aTg9QBG-g76drVdWQUWyVgAAAEg"]
[Tue Dec 09 23:16:17.050809 2025] [:error] [pid 30498:tid 30512] [client 4.189.113.83:51002] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aTg9QR2mcZJQ5qP_RC1mvQAAAAo"]
[Tue Dec 09 23:16:17.285448 2025] [:error] [pid 30500:tid 30564] [client 4.189.113.83:44573] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aTg9Qa2eIIK3JPWHCXUnywAAAYc"]
[Tue Dec 09 23:16:17.523236 2025] [:error] [pid 5276:tid 5297] [client 4.189.113.83:49600] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aTg9QUtSXwbewdwyu-2h3wAAANM"]
[Tue Dec 09 23:16:17.808713 2025] [:error] [pid 30499:tid 30546] [client 4.189.113.83:59005] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aTg9QU0x3OqZTOPp7ckvmgAAAVA"]
[Tue Dec 09 23:16:18.043699 2025] [:error] [pid 30591:tid 30608] [client 4.189.113.83:62716] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yawa.php"] [unique_id "aTg9QhG-g76drVdWQUWyVwAAAE4"]
[Tue Dec 09 23:16:18.367672 2025] [:error] [pid 30591:tid 30604] [client 4.189.113.83:47433] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yawa.php"] [unique_id "aTg9QhG-g76drVdWQUWyXQAAAEo"]
[Tue Dec 09 23:16:18.710775 2025] [:error] [pid 30591:tid 30616] [client 4.189.113.83:49653] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yawa.php"] [unique_id "aTg9QhG-g76drVdWQUWyXgAAAFY"]
[Tue Dec 09 23:16:19.025716 2025] [:error] [pid 30591:tid 30598] [client 4.189.113.83:44601] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yawa.php"] [unique_id "aTg9QxG-g76drVdWQUWyXwAAAEQ"]
[Tue Dec 09 23:16:19.395912 2025] [:error] [pid 36456:tid 36479] [client 4.189.113.83:44604] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aTg9Qx0pAnOyfXl_v416uAAAAJU"]
[Tue Dec 09 23:16:19.641642 2025] [:error] [pid 36456:tid 36460] [client 4.189.113.83:62698] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aTg9Qx0pAnOyfXl_v416ugAAAII"]
[Tue Dec 09 23:16:19.918660 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:14803] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aTg9Qx0pAnOyfXl_v416vAAAAIU"]
[Tue Dec 09 23:16:20.183080 2025] [:error] [pid 36456:tid 36475] [client 4.189.113.83:44578] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aTg9RB0pAnOyfXl_v416vgAAAJE"]
[Tue Dec 09 23:16:20.495519 2025] [:error] [pid 30591:tid 30597] [client 4.189.113.83:14842] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aTg9RBG-g76drVdWQUWyZQAAAEM"]
[Tue Dec 09 23:16:20.819562 2025] [:error] [pid 30591:tid 30594] [client 4.189.113.83:58987] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aTg9RBG-g76drVdWQUWyZgAAAEA"]
[Tue Dec 09 23:16:21.048249 2025] [:error] [pid 30500:tid 30574] [client 4.189.113.83:50968] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aTg9Ra2eIIK3JPWHCXUnzwAAAZE"]
[Tue Dec 09 23:16:21.302509 2025] [:error] [pid 30591:tid 30614] [client 4.189.113.83:44594] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aTg9RRG-g76drVdWQUWyZwAAAFQ"]
[Tue Dec 09 23:16:21.598473 2025] [:error] [pid 30498:tid 30511] [client 4.189.113.83:47435] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zuk.php"] [unique_id "aTg9RR2mcZJQ5qP_RC1mvgAAAAk"]
[Tue Dec 09 23:16:21.904649 2025] [:error] [pid 30499:tid 30552] [client 4.189.113.83:49651] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zuk.php"] [unique_id "aTg9RU0x3OqZTOPp7ckvnAAAAVY"]
[Tue Dec 09 23:16:22.187327 2025] [:error] [pid 30499:tid 30542] [client 4.189.113.83:49649] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zuk.php"] [unique_id "aTg9Rk0x3OqZTOPp7ckvnQAAAUw"]
[Tue Dec 09 23:16:22.580115 2025] [:error] [pid 30500:tid 30575] [client 4.189.113.83:62709] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zuk.php"] [unique_id "aTg9Rq2eIIK3JPWHCXUn0QAAAZI"]
[Tue Dec 09 23:16:22.871701 2025] [:error] [pid 30500:tid 30557] [client 4.189.113.83:37559] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aTg9Rq2eIIK3JPWHCXUn0gAAAYA"]
[Tue Dec 09 23:16:23.136494 2025] [:error] [pid 30499:tid 30534] [client 4.189.113.83:44576] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aTg9R00x3OqZTOPp7ckvnwAAAUQ"]
[Tue Dec 09 23:16:23.484448 2025] [:error] [pid 36456:tid 36458] [client 4.189.113.83:44044] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aTg9Rx0pAnOyfXl_v416ywAAAIA"]
[Tue Dec 09 23:16:23.752777 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:14822] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aTg9Rx0pAnOyfXl_v416zAAAAIc"]
[Tue Dec 09 23:16:23.986658 2025] [:error] [pid 5276:tid 5281] [client 4.189.113.83:14805] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "aTg9R0tSXwbewdwyu-2h4AAAAMM"]
[Tue Dec 09 23:16:24.266601 2025] [:error] [pid 30500:tid 30559] [client 4.189.113.83:62677] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "aTg9SK2eIIK3JPWHCXUn1QAAAYI"]
[Tue Dec 09 23:16:24.539235 2025] [:error] [pid 30500:tid 30561] [client 4.189.113.83:44588] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "aTg9SK2eIIK3JPWHCXUn1gAAAYQ"]
[Tue Dec 09 23:16:25.008827 2025] [:error] [pid 30498:tid 30509] [client 4.189.113.83:14820] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "aTg9SR2mcZJQ5qP_RC1mwgAAAAc"]
[Tue Dec 09 23:16:25.257375 2025] [:error] [pid 5276:tid 5288] [client 4.189.113.83:49624] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zgh.php"] [unique_id "aTg9SUtSXwbewdwyu-2h4wAAAMo"]
[Tue Dec 09 23:16:25.517214 2025] [:error] [pid 5276:tid 5302] [client 4.189.113.83:62711] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zgh.php"] [unique_id "aTg9SUtSXwbewdwyu-2h5QAAANg"]
[Tue Dec 09 23:16:25.933339 2025] [:error] [pid 30500:tid 30571] [client 4.189.113.83:44084] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zgh.php"] [unique_id "aTg9Sa2eIIK3JPWHCXUn2AAAAY4"]
[Tue Dec 09 23:16:26.204638 2025] [:error] [pid 30500:tid 30580] [client 4.189.113.83:37557] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zgh.php"] [unique_id "aTg9Sq2eIIK3JPWHCXUn2QAAAZc"]
[Tue Dec 09 23:16:26.544321 2025] [:error] [pid 30499:tid 30549] [client 4.189.113.83:44057] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTg9Sk0x3OqZTOPp7ckvqwAAAVM"]
[Tue Dec 09 23:16:26.890228 2025] [:error] [pid 30498:tid 30513] [client 4.189.113.83:49610] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTg9Sh2mcZJQ5qP_RC1mxwAAAAs"]
[Tue Dec 09 23:16:27.490650 2025] [:error] [pid 30591:tid 30602] [client 4.189.113.83:15248] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTg9SxG-g76drVdWQUWycgAAAEg"]
[Tue Dec 09 23:16:27.872265 2025] [:error] [pid 30591:tid 30603] [client 4.189.113.83:44061] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTg9SxG-g76drVdWQUWydQAAAEk"]
[Tue Dec 09 23:16:28.171860 2025] [:error] [pid 30498:tid 30525] [client 4.189.113.83:60658] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aTg9TB2mcZJQ5qP_RC1mzAAAABc"]
[Tue Dec 09 23:16:28.432339 2025] [:error] [pid 30500:tid 30562] [client 4.189.113.83:37552] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aTg9TK2eIIK3JPWHCXUn4wAAAYU"]
[Tue Dec 09 23:16:28.691046 2025] [:error] [pid 30498:tid 30521] [client 4.189.113.83:62683] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aTg9TB2mcZJQ5qP_RC1m0AAAABM"]
[Tue Dec 09 23:16:28.920160 2025] [:error] [pid 30498:tid 30502] [client 4.189.113.83:62691] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aTg9TB2mcZJQ5qP_RC1m0QAAAAA"]
[Tue Dec 09 23:16:29.203389 2025] [:error] [pid 30499:tid 30533] [client 4.189.113.83:14802] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell1.php"] [unique_id "aTg9TU0x3OqZTOPp7ckvtQAAAUM"]
[Tue Dec 09 23:16:29.445457 2025] [:error] [pid 5276:tid 5294] [client 4.189.113.83:15295] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell1.php"] [unique_id "aTg9TUtSXwbewdwyu-2h6wAAANA"]
[Tue Dec 09 23:16:29.720743 2025] [:error] [pid 5276:tid 5282] [client 4.189.113.83:15271] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell1.php"] [unique_id "aTg9TUtSXwbewdwyu-2h7QAAAMQ"]
[Tue Dec 09 23:16:29.978449 2025] [:error] [pid 30591:tid 30607] [client 4.189.113.83:37507] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell1.php"] [unique_id "aTg9TRG-g76drVdWQUWyegAAAE0"]
[Tue Dec 09 23:16:30.229214 2025] [:error] [pid 30500:tid 30573] [client 4.189.113.83:44561] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aTg9Tq2eIIK3JPWHCXUn5wAAAZA"]
[Tue Dec 09 23:16:30.482594 2025] [:error] [pid 30500:tid 30559] [client 4.189.113.83:14789] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aTg9Tq2eIIK3JPWHCXUn6QAAAYI"]
[Tue Dec 09 23:16:30.801492 2025] [:error] [pid 30499:tid 30542] [client 4.189.113.83:33027] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aTg9Tk0x3OqZTOPp7ckvvQAAAUw"]
[Tue Dec 09 23:16:31.220256 2025] [:error] [pid 30498:tid 30522] [client 4.189.113.83:60667] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thoms.php"] [unique_id "aTg9Tx2mcZJQ5qP_RC1m1wAAABQ"]
[Tue Dec 09 23:16:31.487102 2025] [:error] [pid 36456:tid 36461] [client 4.189.113.83:50982] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aTg9Tx0pAnOyfXl_v4161gAAAIM"]
[Tue Dec 09 23:16:31.753072 2025] [:error] [pid 5276:tid 5285] [client 4.189.113.83:60612] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aTg9T0tSXwbewdwyu-2h8gAAAMc"]
[Tue Dec 09 23:16:34.670593 2025] [core:error] [pid 5276:tid 5284] [client 4.189.113.83:62680] AH10244: invalid URI path (/index.php/1%.php)
[Tue Dec 09 23:16:36.314441 2025] [:error] [pid 30591:tid 30614] [client 4.189.113.83:60660] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTg9VBG-g76drVdWQUWyjgAAAFQ"]
[Tue Dec 09 23:16:36.653928 2025] [:error] [pid 30500:tid 30578] [client 4.189.113.83:58952] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTg9VK2eIIK3JPWHCXUn9wAAAZU"]
[Tue Dec 09 23:16:36.972738 2025] [:error] [pid 36456:tid 36475] [client 4.189.113.83:58994] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTg9VB0pAnOyfXl_v4167QAAAJE"]
[Tue Dec 09 23:16:37.214354 2025] [:error] [pid 30499:tid 30536] [client 4.189.113.83:49721] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTg9VU0x3OqZTOPp7ckv1QAAAUY"]
[Tue Dec 09 23:16:37.467447 2025] [:error] [pid 30499:tid 30531] [client 4.189.113.83:49648] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aTg9VU0x3OqZTOPp7ckv1gAAAUE"]
[Tue Dec 09 23:16:37.715363 2025] [:error] [pid 30498:tid 30519] [client 4.189.113.83:58976] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aTg9VR2mcZJQ5qP_RC1m7AAAABE"]
[Tue Dec 09 23:16:37.987622 2025] [:error] [pid 30500:tid 30571] [client 4.189.113.83:35862] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aTg9Va2eIIK3JPWHCXUn_gAAAY4"]
[Tue Dec 09 23:16:38.484933 2025] [:error] [pid 30498:tid 30522] [client 4.189.113.83:50960] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aTg9Vh2mcZJQ5qP_RC1m7gAAABQ"]
[Tue Dec 09 23:16:38.729326 2025] [:error] [pid 30500:tid 30567] [client 4.189.113.83:58959] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTg9Vq2eIIK3JPWHCXUoAwAAAYo"]
[Tue Dec 09 23:16:39.013512 2025] [:error] [pid 36456:tid 36476] [client 4.189.113.83:44556] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTg9Vx0pAnOyfXl_v4169AAAAJI"]
[Tue Dec 09 23:16:39.348882 2025] [:error] [pid 30498:tid 30513] [client 4.189.113.83:60629] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTg9Vx2mcZJQ5qP_RC1m8gAAAAs"]
[Tue Dec 09 23:16:39.612314 2025] [:error] [pid 5276:tid 5291] [client 4.189.113.83:44048] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTg9V0tSXwbewdwyu-2iBgAAAM0"]
[Tue Dec 09 23:16:39.889571 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:62707] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aTg9Vx0pAnOyfXl_v416_QAAAIU"]
[Tue Dec 09 23:16:40.143949 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:60662] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aTg9WB0pAnOyfXl_v416_wAAAIc"]
[Tue Dec 09 23:16:40.387474 2025] [:error] [pid 36456:tid 36481] [client 4.189.113.83:45422] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aTg9WB0pAnOyfXl_v417AQAAAJc"]
[Tue Dec 09 23:16:40.668514 2025] [:error] [pid 30500:tid 30572] [client 4.189.113.83:58972] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aTg9WK2eIIK3JPWHCXUoBwAAAY8"]
[Tue Dec 09 23:16:40.941061 2025] [:error] [pid 36456:tid 36479] [client 4.189.113.83:44040] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q1.php"] [unique_id "aTg9WB0pAnOyfXl_v417BwAAAJU"]
[Tue Dec 09 23:16:41.293544 2025] [:error] [pid 30498:tid 30525] [client 4.189.113.83:15269] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q1.php"] [unique_id "aTg9WR2mcZJQ5qP_RC1m9AAAABc"]
[Tue Dec 09 23:16:41.529560 2025] [:error] [pid 30498:tid 30521] [client 4.189.113.83:60665] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q1.php"] [unique_id "aTg9WR2mcZJQ5qP_RC1m9QAAABM"]
[Tue Dec 09 23:16:41.771922 2025] [:error] [pid 30500:tid 30580] [client 4.189.113.83:47485] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q1.php"] [unique_id "aTg9Wa2eIIK3JPWHCXUoEAAAAZc"]
[Tue Dec 09 23:16:42.006562 2025] [:error] [pid 30500:tid 30562] [client 4.189.113.83:58993] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aTg9Wq2eIIK3JPWHCXUoFQAAAYU"]
[Tue Dec 09 23:16:42.242672 2025] [:error] [pid 5276:tid 5292] [client 4.189.113.83:44055] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aTg9WktSXwbewdwyu-2iCwAAAM4"]
[Tue Dec 09 23:16:42.546300 2025] [:error] [pid 30498:tid 30507] [client 4.189.113.83:62687] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aTg9Wh2mcZJQ5qP_RC1m9wAAAAU"]
[Tue Dec 09 23:16:42.860363 2025] [:error] [pid 36456:tid 36461] [client 4.189.113.83:37542] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aTg9Wh0pAnOyfXl_v417DAAAAIM"]
[Tue Dec 09 23:16:43.133386 2025] [:error] [pid 30499:tid 30532] [client 4.189.113.83:50991] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aTg9W00x3OqZTOPp7ckv2wAAAUI"]
[Tue Dec 09 23:16:43.368244 2025] [:error] [pid 30500:tid 30580] [client 4.189.113.83:15245] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aTg9W62eIIK3JPWHCXUoHQAAAZc"]
[Tue Dec 09 23:16:43.599839 2025] [:error] [pid 5276:tid 5282] [client 4.189.113.83:60643] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aTg9W0tSXwbewdwyu-2iDQAAAMQ"]
[Tue Dec 09 23:16:43.883386 2025] [:error] [pid 30500:tid 30579] [client 4.189.113.83:37566] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aTg9W62eIIK3JPWHCXUoIQAAAZY"]
[Tue Dec 09 23:16:44.116940 2025] [:error] [pid 36456:tid 36466] [client 4.189.113.83:50966] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTg9XB0pAnOyfXl_v417EQAAAIg"]
[Tue Dec 09 23:16:44.372386 2025] [:error] [pid 30500:tid 30567] [client 4.189.113.83:44045] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTg9XK2eIIK3JPWHCXUoJAAAAYo"]
[Tue Dec 09 23:16:44.679875 2025] [:error] [pid 30500:tid 30577] [client 4.189.113.83:15221] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTg9XK2eIIK3JPWHCXUoJwAAAZQ"]
[Tue Dec 09 23:16:44.952570 2025] [:error] [pid 30500:tid 30575] [client 4.189.113.83:44558] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aTg9XK2eIIK3JPWHCXUoKAAAAZI"]
[Tue Dec 09 23:16:45.202605 2025] [:error] [pid 5276:tid 5284] [client 4.189.113.83:45406] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTg9XUtSXwbewdwyu-2iDwAAAMY"]
[Tue Dec 09 23:16:45.459527 2025] [:error] [pid 30500:tid 30578] [client 4.189.113.83:44546] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTg9Xa2eIIK3JPWHCXUoKgAAAZU"]
[Tue Dec 09 23:16:45.690583 2025] [:error] [pid 30500:tid 30559] [client 4.189.113.83:62716] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTg9Xa2eIIK3JPWHCXUoKwAAAYI"]
[Tue Dec 09 23:16:45.925706 2025] [:error] [pid 36456:tid 36478] [client 4.189.113.83:15223] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aTg9XR0pAnOyfXl_v417FAAAAJQ"]
[Tue Dec 09 23:16:46.331960 2025] [:error] [pid 30499:tid 30530] [client 4.189.113.83:58978] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "aTg9Xk0x3OqZTOPp7ckv3wAAAUA"]
[Tue Dec 09 23:16:46.663159 2025] [:error] [pid 30499:tid 30545] [client 4.189.113.83:37565] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "aTg9Xk0x3OqZTOPp7ckv4gAAAU8"]
[Tue Dec 09 23:16:46.891306 2025] [:error] [pid 30500:tid 30571] [client 4.189.113.83:37122] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "aTg9Xq2eIIK3JPWHCXUoLwAAAY4"]
[Tue Dec 09 23:16:47.162004 2025] [:error] [pid 30499:tid 30531] [client 4.189.113.83:49633] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "aTg9X00x3OqZTOPp7ckv4wAAAUE"]
[Tue Dec 09 23:16:47.406857 2025] [:error] [pid 36456:tid 36480] [client 4.189.113.83:32960] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTg9Xx0pAnOyfXl_v417FwAAAJY"]
[Tue Dec 09 23:16:47.682775 2025] [:error] [pid 30499:tid 30553] [client 4.189.113.83:15204] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTg9X00x3OqZTOPp7ckv5QAAAVc"]
[Tue Dec 09 23:16:48.016091 2025] [:error] [pid 5276:tid 5278] [client 4.189.113.83:37148] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTg9YEtSXwbewdwyu-2iEQAAAMA"]
[Tue Dec 09 23:16:48.253089 2025] [:error] [pid 30500:tid 30565] [client 4.189.113.83:45400] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aTg9YK2eIIK3JPWHCXUoMgAAAYg"]
[Tue Dec 09 23:16:48.588636 2025] [:error] [pid 30498:tid 30512] [client 4.189.113.83:15198] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aTg9YB2mcZJQ5qP_RC1m_wAAAAo"]
[Tue Dec 09 23:16:48.892631 2025] [:error] [pid 30498:tid 30510] [client 4.189.113.83:44093] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aTg9YB2mcZJQ5qP_RC1nAgAAAAg"]
[Tue Dec 09 23:16:49.126321 2025] [:error] [pid 30499:tid 30546] [client 4.189.113.83:56069] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aTg9YU0x3OqZTOPp7ckv6gAAAVA"]
[Tue Dec 09 23:16:49.458927 2025] [:error] [pid 30591:tid 30603] [client 4.189.113.83:14592] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aTg9YRG-g76drVdWQUWykQAAAEk"]
[Tue Dec 09 23:16:49.756429 2025] [:error] [pid 30498:tid 30516] [client 4.189.113.83:37183] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "aTg9YR2mcZJQ5qP_RC1nCAAAAA4"]
[Tue Dec 09 23:16:50.037829 2025] [:error] [pid 30498:tid 30524] [client 4.189.113.83:56082] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "aTg9Yh2mcZJQ5qP_RC1nCQAAABY"]
[Tue Dec 09 23:16:50.272824 2025] [:error] [pid 30591:tid 30610] [client 4.189.113.83:58951] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "aTg9YhG-g76drVdWQUWykgAAAFA"]
[Tue Dec 09 23:16:50.793660 2025] [:error] [pid 30591:tid 30615] [client 4.189.113.83:62685] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "aTg9YhG-g76drVdWQUWykwAAAFU"]
[Tue Dec 09 23:16:51.041146 2025] [:error] [pid 30500:tid 30557] [client 4.189.113.83:15171] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aTg9Y62eIIK3JPWHCXUoQAAAAYA"]
[Tue Dec 09 23:16:51.303956 2025] [:error] [pid 30591:tid 30598] [client 4.189.113.83:50917] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aTg9YxG-g76drVdWQUWylQAAAEQ"]
[Tue Dec 09 23:16:51.602013 2025] [:error] [pid 30500:tid 30565] [client 4.189.113.83:15192] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aTg9Y62eIIK3JPWHCXUoRwAAAYg"]
[Tue Dec 09 23:16:51.973752 2025] [:error] [pid 30500:tid 30562] [client 4.189.113.83:15141] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aTg9Y62eIIK3JPWHCXUoSQAAAYU"]
[Tue Dec 09 23:16:52.203632 2025] [:error] [pid 30591:tid 30606] [client 4.189.113.83:41492] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php.php"] [unique_id "aTg9ZBG-g76drVdWQUWymAAAAEw"]
[Tue Dec 09 23:16:52.500034 2025] [:error] [pid 30591:tid 30608] [client 4.189.113.83:50931] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php.php"] [unique_id "aTg9ZBG-g76drVdWQUWymwAAAE4"]
[Tue Dec 09 23:16:52.891817 2025] [:error] [pid 30500:tid 30577] [client 4.189.113.83:56074] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php.php"] [unique_id "aTg9ZK2eIIK3JPWHCXUoTAAAAZQ"]
[Tue Dec 09 23:16:53.278650 2025] [:error] [pid 30500:tid 30568] [client 4.189.113.83:50889] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php.php"] [unique_id "aTg9Za2eIIK3JPWHCXUoUAAAAYs"]
[Tue Dec 09 23:16:53.536634 2025] [:error] [pid 36456:tid 36466] [client 4.189.113.83:62088] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xz99.php"] [unique_id "aTg9ZR0pAnOyfXl_v417HwAAAIg"]
[Tue Dec 09 23:16:53.839812 2025] [:error] [pid 30498:tid 30505] [client 4.189.113.83:50932] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xz99.php"] [unique_id "aTg9ZR2mcZJQ5qP_RC1nCwAAAAM"]
[Tue Dec 09 23:16:54.127396 2025] [:error] [pid 5276:tid 5297] [client 4.189.113.83:40450] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xz99.php"] [unique_id "aTg9ZktSXwbewdwyu-2iEgAAANM"]
[Tue Dec 09 23:16:54.357139 2025] [:error] [pid 30500:tid 30571] [client 4.189.113.83:15111] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xz99.php"] [unique_id "aTg9Zq2eIIK3JPWHCXUoVgAAAY4"]
[Tue Dec 09 23:16:54.778034 2025] [:error] [pid 36456:tid 36481] [client 4.189.113.83:40493] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "aTg9Zh0pAnOyfXl_v417IQAAAJc"]
[Tue Dec 09 23:16:55.019833 2025] [:error] [pid 36456:tid 36475] [client 4.189.113.83:35944] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "aTg9Zx0pAnOyfXl_v417IgAAAJE"]
[Tue Dec 09 23:16:55.263257 2025] [:error] [pid 30500:tid 30562] [client 4.189.113.83:35952] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "aTg9Z62eIIK3JPWHCXUoXQAAAYU"]
[Tue Dec 09 23:16:55.514562 2025] [:error] [pid 30499:tid 30549] [client 4.189.113.83:62122] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "aTg9Z00x3OqZTOPp7ckwBwAAAVM"]
[Tue Dec 09 23:16:55.832147 2025] [:error] [pid 30499:tid 30546] [client 4.189.113.83:14377] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ifm.php"] [unique_id "aTg9Z00x3OqZTOPp7ckwCwAAAVA"]
[Tue Dec 09 23:16:56.106957 2025] [:error] [pid 36456:tid 36471] [client 4.189.113.83:35930] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ifm.php"] [unique_id "aTg9aB0pAnOyfXl_v417JQAAAI0"]
[Tue Dec 09 23:16:56.493747 2025] [:error] [pid 30500:tid 30568] [client 4.189.113.83:15143] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ifm.php"] [unique_id "aTg9aK2eIIK3JPWHCXUoYQAAAYs"]
[Tue Dec 09 23:16:56.784411 2025] [:error] [pid 36456:tid 36480] [client 4.189.113.83:40462] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ifm.php"] [unique_id "aTg9aB0pAnOyfXl_v417KAAAAJY"]
[Tue Dec 09 23:16:57.092143 2025] [:error] [pid 36456:tid 36474] [client 4.189.113.83:62101] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTg9aR0pAnOyfXl_v417KgAAAJA"]
[Tue Dec 09 23:16:57.503287 2025] [:error] [pid 36456:tid 36468] [client 4.189.113.83:35963] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTg9aR0pAnOyfXl_v417LwAAAIo"]
[Tue Dec 09 23:16:57.932430 2025] [:error] [pid 5276:tid 5288] [client 4.189.113.83:44651] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTg9aUtSXwbewdwyu-2iEwAAAMo"]
[Tue Dec 09 23:16:58.175004 2025] [:error] [pid 36456:tid 36466] [client 4.189.113.83:41481] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTg9ah0pAnOyfXl_v417NAAAAIg"]
[Tue Dec 09 23:16:58.438307 2025] [:error] [pid 30499:tid 30549] [client 4.189.113.83:44662] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nfile.php"] [unique_id "aTg9ak0x3OqZTOPp7ckwGQAAAVM"]
[Tue Dec 09 23:16:58.856945 2025] [:error] [pid 5276:tid 5279] [client 4.189.113.83:35928] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nfile.php"] [unique_id "aTg9aktSXwbewdwyu-2iGAAAAME"]
[Tue Dec 09 23:16:59.217064 2025] [:error] [pid 30500:tid 30568] [client 4.189.113.83:44622] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nfile.php"] [unique_id "aTg9a62eIIK3JPWHCXUocQAAAYs"]
[Tue Dec 09 23:16:59.516565 2025] [:error] [pid 30591:tid 30606] [client 4.189.113.83:44661] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nfile.php"] [unique_id "aTg9axG-g76drVdWQUWypwAAAEw"]
[Tue Dec 09 23:16:59.754096 2025] [:error] [pid 30500:tid 30573] [client 4.189.113.83:53716] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaaa.php"] [unique_id "aTg9a62eIIK3JPWHCXUoegAAAZA"]
[Tue Dec 09 23:17:00.048450 2025] [:error] [pid 30499:tid 30541] [client 4.189.113.83:40477] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaaa.php"] [unique_id "aTg9bE0x3OqZTOPp7ckwHwAAAUs"]
[Tue Dec 09 23:17:00.284286 2025] [:error] [pid 30498:tid 30513] [client 4.189.113.83:43377] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaaa.php"] [unique_id "aTg9bB2mcZJQ5qP_RC1nFgAAAAs"]
[Tue Dec 09 23:17:00.535224 2025] [:error] [pid 30500:tid 30560] [client 4.189.113.83:44617] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaaa.php"] [unique_id "aTg9bK2eIIK3JPWHCXUofAAAAYM"]
[Tue Dec 09 23:17:00.814652 2025] [:error] [pid 30498:tid 30521] [client 4.189.113.83:53721] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ker.php"] [unique_id "aTg9bB2mcZJQ5qP_RC1nGgAAABM"]
[Tue Dec 09 23:17:01.160652 2025] [:error] [pid 30591:tid 30596] [client 4.189.113.83:14351] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ker.php"] [unique_id "aTg9bRG-g76drVdWQUWyrgAAAEI"]
[Tue Dec 09 23:17:01.462751 2025] [:error] [pid 36456:tid 36462] [client 4.189.113.83:44634] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ker.php"] [unique_id "aTg9bR0pAnOyfXl_v417RQAAAIQ"]
[Tue Dec 09 23:17:01.744356 2025] [:error] [pid 30499:tid 30543] [client 4.189.113.83:44615] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ker.php"] [unique_id "aTg9bU0x3OqZTOPp7ckwJwAAAU0"]
[Tue Dec 09 23:17:02.029802 2025] [:error] [pid 36456:tid 36472] [client 4.189.113.83:35914] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gul.php"] [unique_id "aTg9bh0pAnOyfXl_v417RgAAAI4"]
[Tue Dec 09 23:17:02.429875 2025] [:error] [pid 36456:tid 36470] [client 4.189.113.83:44613] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gul.php"] [unique_id "aTg9bh0pAnOyfXl_v417SgAAAIw"]
[Tue Dec 09 23:17:02.742041 2025] [:error] [pid 30498:tid 30508] [client 4.189.113.83:43366] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gul.php"] [unique_id "aTg9bh2mcZJQ5qP_RC1nJgAAAAY"]
[Tue Dec 09 23:17:03.102428 2025] [:error] [pid 5276:tid 5282] [client 4.189.113.83:53717] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gul.php"] [unique_id "aTg9b0tSXwbewdwyu-2iIgAAAMQ"]
[Tue Dec 09 23:17:03.343450 2025] [:error] [pid 30591:tid 30615] [client 4.189.113.83:44628] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aTg9bxG-g76drVdWQUWysgAAAFU"]
[Tue Dec 09 23:17:03.958139 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:44616] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aTg9bx0pAnOyfXl_v417UwAAAIc"]
[Tue Dec 09 23:17:04.250763 2025] [:error] [pid 36456:tid 36472] [client 4.189.113.83:62110] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aTg9cB0pAnOyfXl_v417VgAAAI4"]
[Tue Dec 09 23:17:04.632219 2025] [:error] [pid 30499:tid 30543] [client 4.189.113.83:53711] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aTg9cE0x3OqZTOPp7ckwMAAAAU0"]
[Tue Dec 09 23:17:05.117264 2025] [:error] [pid 30498:tid 30522] [client 4.189.113.83:53742] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aTg9cR2mcZJQ5qP_RC1nKAAAABQ"]
[Tue Dec 09 23:17:05.423963 2025] [:error] [pid 30591:tid 30594] [client 4.189.113.83:53704] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aTg9cRG-g76drVdWQUWyugAAAEA"]
[Tue Dec 09 23:17:05.734322 2025] [:error] [pid 30500:tid 30578] [client 4.189.113.83:14392] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aTg9ca2eIIK3JPWHCXUohwAAAZU"]
[Tue Dec 09 23:17:06.056720 2025] [:error] [pid 30500:tid 30579] [client 4.189.113.83:44611] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lok.php"] [unique_id "aTg9cq2eIIK3JPWHCXUoiAAAAZY"]
[Tue Dec 09 23:17:06.286222 2025] [:error] [pid 30499:tid 30538] [client 4.189.113.83:14718] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aTg9ck0x3OqZTOPp7ckwNAAAAUg"]
[Tue Dec 09 23:17:06.555116 2025] [:error] [pid 5276:tid 5281] [client 4.189.113.83:14864] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aTg9cktSXwbewdwyu-2iJwAAAMM"]
[Tue Dec 09 23:17:06.913104 2025] [:error] [pid 30499:tid 30544] [client 4.189.113.83:44631] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aTg9ck0x3OqZTOPp7ckwOAAAAU4"]
[Tue Dec 09 23:17:07.268266 2025] [:error] [pid 30591:tid 30615] [client 4.189.113.83:44655] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aTg9cxG-g76drVdWQUWywQAAAFU"]
[Tue Dec 09 23:17:07.539857 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:14393] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aTg9cx0pAnOyfXl_v417awAAAIU"]
[Tue Dec 09 23:17:08.048954 2025] [:error] [pid 30591:tid 30600] [client 4.189.113.83:14673] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aTg9dBG-g76drVdWQUWyxAAAAEY"]
[Tue Dec 09 23:17:08.530915 2025] [:error] [pid 30500:tid 30564] [client 4.189.113.83:44130] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aTg9dK2eIIK3JPWHCXUojwAAAYc"]
[Tue Dec 09 23:17:08.807798 2025] [:error] [pid 5276:tid 5282] [client 4.189.113.83:62128] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aTg9dEtSXwbewdwyu-2iKwAAAMQ"]
[Tue Dec 09 23:17:09.180499 2025] [:error] [pid 5276:tid 5298] [client 4.189.113.83:43347] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wok.php"] [unique_id "aTg9dUtSXwbewdwyu-2iLQAAANQ"]
[Tue Dec 09 23:17:09.430049 2025] [:error] [pid 30499:tid 30554] [client 4.189.113.83:39297] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wok.php"] [unique_id "aTg9dU0x3OqZTOPp7ckwPQAAAVg"]
[Tue Dec 09 23:17:09.834291 2025] [:error] [pid 5276:tid 5284] [client 4.189.113.83:44121] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wok.php"] [unique_id "aTg9dUtSXwbewdwyu-2iMQAAAMY"]
[Tue Dec 09 23:17:10.178822 2025] [:error] [pid 30498:tid 30512] [client 4.189.113.83:44146] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wok.php"] [unique_id "aTg9dh2mcZJQ5qP_RC1nNgAAAAo"]
[Tue Dec 09 23:17:10.486849 2025] [:error] [pid 30499:tid 30535] [client 4.189.113.83:39939] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTg9dk0x3OqZTOPp7ckwQgAAAUU"]
[Tue Dec 09 23:17:10.819615 2025] [:error] [pid 30500:tid 30581] [client 4.189.113.83:43381] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTg9dq2eIIK3JPWHCXUomAAAAZg"]
[Tue Dec 09 23:17:11.114104 2025] [:error] [pid 30498:tid 30521] [client 4.189.113.83:41445] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTg9dx2mcZJQ5qP_RC1nOQAAABM"]
[Tue Dec 09 23:17:11.448843 2025] [:error] [pid 30498:tid 30506] [client 4.189.113.83:37506] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTg9dx2mcZJQ5qP_RC1nOgAAAAQ"]
[Tue Dec 09 23:17:11.794750 2025] [:error] [pid 5276:tid 5285] [client 4.189.113.83:41413] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aTg9d0tSXwbewdwyu-2iOwAAAMc"]
[Tue Dec 09 23:17:12.063579 2025] [:error] [pid 36456:tid 36471] [client 4.189.113.83:44119] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aTg9eB0pAnOyfXl_v417gQAAAI0"]
[Tue Dec 09 23:17:12.349675 2025] [:error] [pid 30498:tid 30515] [client 4.189.113.83:41450] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aTg9eB2mcZJQ5qP_RC1nQAAAAA0"]
[Tue Dec 09 23:17:12.600629 2025] [:error] [pid 36456:tid 36458] [client 4.189.113.83:44128] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aTg9eB0pAnOyfXl_v417hwAAAIA"]
[Tue Dec 09 23:17:12.829861 2025] [:error] [pid 30498:tid 30508] [client 4.189.113.83:14897] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mpxct.php"] [unique_id "aTg9eB2mcZJQ5qP_RC1nQwAAAAY"]
[Tue Dec 09 23:17:13.139295 2025] [:error] [pid 30500:tid 30576] [client 4.189.113.83:62020] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mpxct.php"] [unique_id "aTg9ea2eIIK3JPWHCXUomgAAAZM"]
[Tue Dec 09 23:17:13.431405 2025] [:error] [pid 36456:tid 36476] [client 4.189.113.83:62052] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mpxct.php"] [unique_id "aTg9eR0pAnOyfXl_v417kAAAAJI"]
[Tue Dec 09 23:17:13.779057 2025] [:error] [pid 36456:tid 36466] [client 4.189.113.83:39986] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mpxct.php"] [unique_id "aTg9eR0pAnOyfXl_v417lAAAAIg"]
[Tue Dec 09 23:17:14.109134 2025] [:error] [pid 30498:tid 30524] [client 4.189.113.83:62055] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aTg9eh2mcZJQ5qP_RC1nTQAAABY"]
[Tue Dec 09 23:17:14.609837 2025] [:error] [pid 30498:tid 30520] [client 4.189.113.83:46754] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aTg9eh2mcZJQ5qP_RC1nUQAAABI"]
[Tue Dec 09 23:17:14.868330 2025] [:error] [pid 30498:tid 30516] [client 4.189.113.83:15054] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aTg9eh2mcZJQ5qP_RC1nUwAAAA4"]
[Tue Dec 09 23:17:15.171356 2025] [:error] [pid 30499:tid 30549] [client 4.189.113.83:60716] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aTg9e00x3OqZTOPp7ckwUAAAAVM"]
[Tue Dec 09 23:17:15.481062 2025] [:error] [pid 30499:tid 30553] [client 4.189.113.83:60686] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kki.php"] [unique_id "aTg9e00x3OqZTOPp7ckwUwAAAVc"]
[Tue Dec 09 23:17:15.921897 2025] [:error] [pid 30499:tid 30552] [client 4.189.113.83:46780] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kki.php"] [unique_id "aTg9e00x3OqZTOPp7ckwVwAAAVY"]
[Tue Dec 09 23:17:16.178589 2025] [:error] [pid 30499:tid 30534] [client 4.189.113.83:46776] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kki.php"] [unique_id "aTg9fE0x3OqZTOPp7ckwWAAAAUQ"]
[Tue Dec 09 23:17:16.447906 2025] [:error] [pid 36456:tid 36475] [client 4.189.113.83:15309] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kki.php"] [unique_id "aTg9fB0pAnOyfXl_v417pAAAAJE"]
[Tue Dec 09 23:17:16.751709 2025] [:error] [pid 30500:tid 30559] [client 4.189.113.83:62035] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "aTg9fK2eIIK3JPWHCXUooQAAAYI"]
[Tue Dec 09 23:17:16.991835 2025] [:error] [pid 36456:tid 36462] [client 4.189.113.83:60722] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "aTg9fB0pAnOyfXl_v417qQAAAIQ"]
[Tue Dec 09 23:17:17.516854 2025] [:error] [pid 30498:tid 30514] [client 4.189.113.83:15074] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "aTg9fR2mcZJQ5qP_RC1nXQAAAAw"]
[Tue Dec 09 23:17:17.962314 2025] [:error] [pid 5276:tid 5278] [client 4.189.113.83:62026] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "aTg9fUtSXwbewdwyu-2iRgAAAMA"]
[Tue Dec 09 23:17:18.315265 2025] [:error] [pid 5276:tid 5279] [client 4.189.113.83:39952] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aTg9fktSXwbewdwyu-2iRwAAAME"]
[Tue Dec 09 23:17:18.749146 2025] [:error] [pid 30499:tid 30540] [client 4.189.113.83:14899] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aTg9fk0x3OqZTOPp7ckwXgAAAUo"]
[Tue Dec 09 23:17:19.128789 2025] [:error] [pid 30500:tid 30557] [client 4.189.113.83:62046] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aTg9f62eIIK3JPWHCXUopgAAAYA"]
[Tue Dec 09 23:17:19.449024 2025] [:error] [pid 30500:tid 30560] [client 4.189.113.83:39992] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aTg9f62eIIK3JPWHCXUoqAAAAYM"]
[Tue Dec 09 23:17:19.771728 2025] [:error] [pid 36456:tid 36458] [client 4.189.113.83:15314] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTg9fx0pAnOyfXl_v417tgAAAIA"]
[Tue Dec 09 23:17:20.086237 2025] [:error] [pid 30499:tid 30545] [client 4.189.113.83:60697] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTg9gE0x3OqZTOPp7ckwYwAAAU8"]
[Tue Dec 09 23:17:20.429027 2025] [:error] [pid 30500:tid 30564] [client 4.189.113.83:14907] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTg9gK2eIIK3JPWHCXUosAAAAYc"]
[Tue Dec 09 23:17:20.882105 2025] [:error] [pid 30498:tid 30516] [client 4.189.113.83:60718] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTg9gB2mcZJQ5qP_RC1nZwAAAA4"]
[Tue Dec 09 23:17:21.356900 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:62045] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fns.php"] [unique_id "aTg9gR0pAnOyfXl_v417uQAAAIc"]
[Tue Dec 09 23:17:21.707171 2025] [:error] [pid 30500:tid 30563] [client 4.189.113.83:41462] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fns.php"] [unique_id "aTg9ga2eIIK3JPWHCXUotAAAAYY"]
[Tue Dec 09 23:17:22.210784 2025] [:error] [pid 30591:tid 30605] [client 4.189.113.83:46734] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fns.php"] [unique_id "aTg9ghG-g76drVdWQUWy4wAAAEs"]
[Tue Dec 09 23:17:22.642604 2025] [:error] [pid 30591:tid 30604] [client 4.189.113.83:15064] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fns.php"] [unique_id "aTg9ghG-g76drVdWQUWy5gAAAEo"]
[Tue Dec 09 23:17:23.002627 2025] [:error] [pid 30499:tid 30553] [client 4.189.113.83:39958] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadis.php"] [unique_id "aTg9g00x3OqZTOPp7ckwbwAAAVc"]
[Tue Dec 09 23:17:23.401025 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:15060] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadis.php"] [unique_id "aTg9gx0pAnOyfXl_v417vgAAAIU"]
[Tue Dec 09 23:17:23.809703 2025] [:error] [pid 30591:tid 30597] [client 4.189.113.83:15331] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadis.php"] [unique_id "aTg9gxG-g76drVdWQUWy7QAAAEM"]
[Tue Dec 09 23:17:24.101987 2025] [:error] [pid 36456:tid 36473] [client 4.189.113.83:15067] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadis.php"] [unique_id "aTg9hB0pAnOyfXl_v417wAAAAI8"]
[Tue Dec 09 23:17:24.514007 2025] [:error] [pid 30498:tid 30516] [client 4.189.113.83:14683] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aTg9hB2mcZJQ5qP_RC1ncgAAAA4"]
[Tue Dec 09 23:17:24.827559 2025] [:error] [pid 36456:tid 36460] [client 4.189.113.83:14893] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aTg9hB0pAnOyfXl_v417xwAAAII"]
[Tue Dec 09 23:17:25.286273 2025] [:error] [pid 30498:tid 30510] [client 4.189.113.83:15303] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aTg9hR2mcZJQ5qP_RC1ndQAAAAg"]
[Tue Dec 09 23:17:25.651011 2025] [:error] [pid 30591:tid 30597] [client 4.189.113.83:62063] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aTg9hRG-g76drVdWQUWy_QAAAEM"]
[Tue Dec 09 23:17:26.047146 2025] [:error] [pid 36456:tid 36459] [client 4.189.113.83:15308] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "aTg9hh0pAnOyfXl_v4171AAAAIE"]
[Tue Dec 09 23:17:26.386786 2025] [:error] [pid 30499:tid 30550] [client 4.189.113.83:39997] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "aTg9hk0x3OqZTOPp7ckwfwAAAVQ"]
[Tue Dec 09 23:17:26.908266 2025] [:error] [pid 30498:tid 30513] [client 4.189.113.83:15083] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "aTg9hh2mcZJQ5qP_RC1nfwAAAAs"]
[Tue Dec 09 23:17:27.213185 2025] [:error] [pid 30498:tid 30502] [client 4.189.113.83:46736] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "aTg9hx2mcZJQ5qP_RC1nhAAAAAA"]
[Tue Dec 09 23:17:27.511056 2025] [:error] [pid 30498:tid 30520] [client 4.189.113.83:46744] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aTg9hx2mcZJQ5qP_RC1nhwAAABI"]
[Tue Dec 09 23:17:28.120566 2025] [:error] [pid 30499:tid 30540] [client 4.189.113.83:33030] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aTg9iE0x3OqZTOPp7ckwjwAAAUo"]
[Tue Dec 09 23:17:28.560251 2025] [:error] [pid 30500:tid 30578] [client 4.189.113.83:34617] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aTg9iK2eIIK3JPWHCXUoxQAAAZU"]
[Tue Dec 09 23:17:28.855348 2025] [:error] [pid 30498:tid 30523] [client 4.189.113.83:46772] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aTg9iB2mcZJQ5qP_RC1njQAAABU"]
[Tue Dec 09 23:17:29.264300 2025] [:error] [pid 36456:tid 36464] [client 4.189.113.83:60731] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTg9iR0pAnOyfXl_v4176AAAAIY"]
[Tue Dec 09 23:17:29.536125 2025] [:error] [pid 36456:tid 36471] [client 4.189.113.83:52231] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTg9iR0pAnOyfXl_v4176wAAAI0"]
[Tue Dec 09 23:17:29.847427 2025] [:error] [pid 36456:tid 36480] [client 4.189.113.83:40514] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTg9iR0pAnOyfXl_v4178AAAAJY"]
[Tue Dec 09 23:17:30.191197 2025] [:error] [pid 30500:tid 30570] [client 4.189.113.83:46777] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aTg9iq2eIIK3JPWHCXUozwAAAY0"]
[Tue Dec 09 23:17:30.672854 2025] [:error] [pid 30499:tid 30541] [client 4.189.113.83:15313] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aTg9ik0x3OqZTOPp7ckwmwAAAUs"]
[Tue Dec 09 23:17:30.960265 2025] [:error] [pid 30498:tid 30507] [client 4.189.113.83:60683] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aTg9ih2mcZJQ5qP_RC1nlAAAAAU"]
[Tue Dec 09 23:17:31.294408 2025] [:error] [pid 36456:tid 36482] [client 4.189.113.83:39949] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aTg9ix0pAnOyfXl_v417_AAAAJg"]
[Tue Dec 09 23:17:31.778356 2025] [:error] [pid 30500:tid 30574] [client 4.189.113.83:52266] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aTg9i62eIIK3JPWHCXUo2AAAAZE"]
[Tue Dec 09 23:17:32.155557 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:52262] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTg9jB0pAnOyfXl_v418BAAAAIU"]
[Tue Dec 09 23:17:32.599711 2025] [:error] [pid 30499:tid 30532] [client 4.189.113.83:60673] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTg9jE0x3OqZTOPp7ckwpgAAAUI"]
[Tue Dec 09 23:17:33.171773 2025] [:error] [pid 30500:tid 30580] [client 4.189.113.83:46738] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTg9ja2eIIK3JPWHCXUo3wAAAZc"]
[Tue Dec 09 23:17:33.443779 2025] [:error] [pid 30500:tid 30581] [client 4.189.113.83:33450] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTg9ja2eIIK3JPWHCXUo4AAAAZg"]
[Tue Dec 09 23:17:33.873320 2025] [:error] [pid 30500:tid 30562] [client 4.189.113.83:60687] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11index.php"] [unique_id "aTg9ja2eIIK3JPWHCXUo4gAAAYU"]
[Tue Dec 09 23:17:34.319453 2025] [:error] [pid 30500:tid 30565] [client 4.189.113.83:40532] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11index.php"] [unique_id "aTg9jq2eIIK3JPWHCXUo5AAAAYg"]
[Tue Dec 09 23:17:34.684084 2025] [:error] [pid 30498:tid 30521] [client 4.189.113.83:39993] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11index.php"] [unique_id "aTg9jh2mcZJQ5qP_RC1nnQAAABM"]
[Tue Dec 09 23:17:35.048267 2025] [:error] [pid 30498:tid 30512] [client 4.189.113.83:34598] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11index.php"] [unique_id "aTg9jx2mcZJQ5qP_RC1noAAAAAo"]
[Tue Dec 09 23:17:35.709807 2025] [:error] [pid 36456:tid 36462] [client 4.189.113.83:15310] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "aTg9jx0pAnOyfXl_v418FQAAAIQ"]
[Tue Dec 09 23:17:39.709158 2025] [:error] [pid 36456:tid 36461] [client 4.189.113.83:39971] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aTg9kx0pAnOyfXl_v418NgAAAIM"]
[Tue Dec 09 23:17:40.332227 2025] [:error] [pid 30499:tid 30554] [client 4.189.113.83:60734] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aTg9lE0x3OqZTOPp7ckwsQAAAVg"]
[Tue Dec 09 23:17:40.661519 2025] [:error] [pid 30499:tid 30536] [client 4.189.113.83:60730] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aTg9lE0x3OqZTOPp7ckwsgAAAUY"]
[Tue Dec 09 23:17:41.178139 2025] [:error] [pid 30498:tid 30506] [client 4.189.113.83:52265] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aTg9lR2mcZJQ5qP_RC1nrwAAAAQ"]
[Tue Dec 09 23:17:41.412537 2025] [:error] [pid 5276:tid 5299] [client 4.189.113.83:14958] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/new2.php"] [unique_id "aTg9lUtSXwbewdwyu-2ilwAAANU"]
[Tue Dec 09 23:17:41.772616 2025] [:error] [pid 5276:tid 5287] [client 4.189.113.83:60694] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/new2.php"] [unique_id "aTg9lUtSXwbewdwyu-2imAAAAMk"]
[Tue Dec 09 23:17:42.172060 2025] [:error] [pid 5276:tid 5278] [client 4.189.113.83:40516] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/new2.php"] [unique_id "aTg9lktSXwbewdwyu-2imgAAAMA"]
[Tue Dec 09 23:17:42.492681 2025] [:error] [pid 30500:tid 30558] [client 4.189.113.83:15320] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/new2.php"] [unique_id "aTg9lq2eIIK3JPWHCXUo8wAAAYE"]
[Tue Dec 09 23:17:42.816617 2025] [:error] [pid 30500:tid 30575] [client 4.189.113.83:34574] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aTg9lq2eIIK3JPWHCXUo9AAAAZI"]
[Tue Dec 09 23:17:43.282437 2025] [:error] [pid 30499:tid 30548] [client 4.189.113.83:14936] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aTg9l00x3OqZTOPp7ckwtwAAAVI"]
[Tue Dec 09 23:17:43.866299 2025] [:error] [pid 5276:tid 5280] [client 4.189.113.83:14933] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aTg9l0tSXwbewdwyu-2ingAAAMI"]
[Tue Dec 09 23:17:44.475387 2025] [:error] [pid 30498:tid 30520] [client 4.189.113.83:56023] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aTg9mB2mcZJQ5qP_RC1nsQAAABI"]
[Tue Dec 09 23:17:44.928168 2025] [:error] [pid 5276:tid 5294] [client 4.189.113.83:34586] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aTg9mEtSXwbewdwyu-2ioAAAANA"]
[Tue Dec 09 23:17:45.366252 2025] [:error] [pid 30499:tid 30542] [client 4.189.113.83:34585] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aTg9mU0x3OqZTOPp7ckwugAAAUw"]
[Tue Dec 09 23:17:45.658138 2025] [:error] [pid 30500:tid 30576] [client 4.189.113.83:15074] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aTg9ma2eIIK3JPWHCXUo9wAAAZM"]
[Tue Dec 09 23:17:45.934746 2025] [:error] [pid 30591:tid 30607] [client 4.189.113.83:37242] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aTg9mRG-g76drVdWQUWzMgAAAE0"]
[Tue Dec 09 23:17:46.374433 2025] [:error] [pid 30500:tid 30580] [client 4.189.113.83:37212] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aTg9mq2eIIK3JPWHCXUo-QAAAZc"]
[Tue Dec 09 23:17:46.912399 2025] [:error] [pid 36456:tid 36482] [client 4.189.113.83:34599] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aTg9mh0pAnOyfXl_v418OAAAAJg"]
[Tue Dec 09 23:17:47.267218 2025] [:error] [pid 36456:tid 36472] [client 4.189.113.83:37216] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aTg9mx0pAnOyfXl_v418OgAAAI4"]
[Tue Dec 09 23:17:47.812385 2025] [:error] [pid 36456:tid 36469] [client 4.189.113.83:40574] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aTg9mx0pAnOyfXl_v418PAAAAIs"]
[Tue Dec 09 23:17:48.141706 2025] [:error] [pid 36456:tid 36462] [client 4.189.113.83:14610] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file6.php"] [unique_id "aTg9nB0pAnOyfXl_v418PwAAAIQ"]
[Tue Dec 09 23:17:48.471255 2025] [:error] [pid 5276:tid 5281] [client 4.189.113.83:37202] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file6.php"] [unique_id "aTg9nEtSXwbewdwyu-2iqQAAAMM"]
[Tue Dec 09 23:17:48.789460 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:40529] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file6.php"] [unique_id "aTg9nB0pAnOyfXl_v418QQAAAIU"]
[Tue Dec 09 23:17:49.580270 2025] [:error] [pid 36456:tid 36474] [client 4.189.113.83:40563] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file6.php"] [unique_id "aTg9nR0pAnOyfXl_v418RAAAAJA"]
[Tue Dec 09 23:17:50.122406 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:45312] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aTg9nh0pAnOyfXl_v418RgAAAIc"]
[Tue Dec 09 23:17:50.628766 2025] [:error] [pid 36456:tid 36472] [client 4.189.113.83:52185] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aTg9nh0pAnOyfXl_v418TAAAAI4"]
[Tue Dec 09 23:17:51.020219 2025] [:error] [pid 30498:tid 30514] [client 4.189.113.83:45354] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aTg9nx2mcZJQ5qP_RC1ntAAAAAw"]
[Tue Dec 09 23:17:51.358096 2025] [:error] [pid 30498:tid 30504] [client 4.189.113.83:40569] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aTg9nx2mcZJQ5qP_RC1ntgAAAAI"]
[Tue Dec 09 23:17:51.642985 2025] [:error] [pid 36456:tid 36466] [client 4.189.113.83:52219] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sow.php"] [unique_id "aTg9nx0pAnOyfXl_v418VAAAAIg"]
[Tue Dec 09 23:17:51.978493 2025] [:error] [pid 36456:tid 36473] [client 4.189.113.83:52162] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sow.php"] [unique_id "aTg9nx0pAnOyfXl_v418WAAAAI8"]
[Tue Dec 09 23:17:52.710839 2025] [:error] [pid 36456:tid 36469] [client 4.189.113.83:56005] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sow.php"] [unique_id "aTg9oB0pAnOyfXl_v418XgAAAIs"]
[Tue Dec 09 23:17:53.119583 2025] [:error] [pid 5276:tid 5299] [client 4.189.113.83:37210] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sow.php"] [unique_id "aTg9oUtSXwbewdwyu-2irwAAANU"]
[Tue Dec 09 23:17:53.423174 2025] [:error] [pid 30591:tid 30601] [client 4.189.113.83:45356] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aTg9oRG-g76drVdWQUWzMwAAAEc"]
[Tue Dec 09 23:17:53.898413 2025] [:error] [pid 36456:tid 36471] [client 4.189.113.83:14920] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aTg9oR0pAnOyfXl_v418ZgAAAI0"]
[Tue Dec 09 23:17:54.268777 2025] [:error] [pid 30500:tid 30557] [client 4.189.113.83:40538] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aTg9oq2eIIK3JPWHCXUo_AAAAYA"]
[Tue Dec 09 23:17:54.694946 2025] [:error] [pid 30591:tid 30616] [client 4.189.113.83:37217] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aTg9ohG-g76drVdWQUWzOAAAAFY"]
[Tue Dec 09 23:17:55.511032 2025] [:error] [pid 30498:tid 30508] [client 4.189.113.83:49653] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55.php"] [unique_id "aTg9ox2mcZJQ5qP_RC1nvgAAAAY"]
[Tue Dec 09 23:17:56.661368 2025] [:error] [pid 5276:tid 5284] [client 4.189.113.83:34596] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55.php"] [unique_id "aTg9pEtSXwbewdwyu-2itgAAAMY"]
[Tue Dec 09 23:17:57.017863 2025] [:error] [pid 30498:tid 30507] [client 4.189.113.83:37226] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55.php"] [unique_id "aTg9pR2mcZJQ5qP_RC1nwAAAAAU"]
[Tue Dec 09 23:17:57.370042 2025] [:error] [pid 30498:tid 30522] [client 4.189.113.83:34356] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55.php"] [unique_id "aTg9pR2mcZJQ5qP_RC1nwQAAABQ"]
[Tue Dec 09 23:17:57.772285 2025] [:error] [pid 36456:tid 36469] [client 4.189.113.83:34249] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cfile.php"] [unique_id "aTg9pR0pAnOyfXl_v418eQAAAIs"]
[Tue Dec 09 23:17:58.250852 2025] [:error] [pid 5276:tid 5300] [client 4.189.113.83:45343] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cfile.php"] [unique_id "aTg9pktSXwbewdwyu-2iuwAAANY"]
[Tue Dec 09 23:17:58.603456 2025] [:error] [pid 30500:tid 30577] [client 4.189.113.83:52169] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cfile.php"] [unique_id "aTg9pq2eIIK3JPWHCXUpAQAAAZQ"]
[Tue Dec 09 23:17:58.994434 2025] [:error] [pid 30498:tid 30509] [client 4.189.113.83:38772] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cfile.php"] [unique_id "aTg9ph2mcZJQ5qP_RC1nxwAAAAc"]
[Tue Dec 09 23:17:59.396633 2025] [:error] [pid 36456:tid 36460] [client 4.189.113.83:45316] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTg9px0pAnOyfXl_v418gAAAAII"]
[Tue Dec 09 23:17:59.736745 2025] [:error] [pid 30499:tid 30553] [client 4.189.113.83:52168] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTg9p00x3OqZTOPp7ckwvQAAAVc"]
[Tue Dec 09 23:18:00.077231 2025] [:error] [pid 30500:tid 30573] [client 4.189.113.83:52223] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTg9qK2eIIK3JPWHCXUpBgAAAZA"]
[Tue Dec 09 23:18:00.684252 2025] [:error] [pid 5276:tid 5284] [client 4.189.113.83:34302] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Tgb5C9.php"] [unique_id "aTg9qEtSXwbewdwyu-2ixQAAAMY"]
[Tue Dec 09 23:18:01.192319 2025] [:error] [pid 36456:tid 36467] [client 4.189.113.83:15018] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aTg9qR0pAnOyfXl_v418gQAAAIk"]
[Tue Dec 09 23:18:01.584026 2025] [:error] [pid 36456:tid 36473] [client 4.189.113.83:14990] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aTg9qR0pAnOyfXl_v418hAAAAI8"]
[Tue Dec 09 23:18:02.320101 2025] [:error] [pid 30591:tid 30610] [client 4.189.113.83:38729] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aTg9qhG-g76drVdWQUWzQgAAAFA"]
[Tue Dec 09 23:18:02.850698 2025] [:error] [pid 30591:tid 30616] [client 4.189.113.83:46830] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aTg9qhG-g76drVdWQUWzRAAAAFY"]
[Tue Dec 09 23:18:03.202583 2025] [:error] [pid 30498:tid 30507] [client 4.189.113.83:34328] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aTg9qx2mcZJQ5qP_RC1nzAAAAAU"]
[Tue Dec 09 23:18:03.507877 2025] [:error] [pid 36456:tid 36459] [client 4.189.113.83:14971] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aTg9qx0pAnOyfXl_v418kAAAAIE"]
[Tue Dec 09 23:18:04.147175 2025] [:error] [pid 5276:tid 5294] [client 4.189.113.83:64948] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aTg9rEtSXwbewdwyu-2iywAAANA"]
[Tue Dec 09 23:18:04.569323 2025] [:error] [pid 30499:tid 30543] [client 4.189.113.83:38737] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aTg9rE0x3OqZTOPp7ckwwwAAAU0"]
[Tue Dec 09 23:18:04.983585 2025] [:error] [pid 30498:tid 30503] [client 4.189.113.83:36414] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aTg9rB2mcZJQ5qP_RC1n0AAAAAE"]
[Tue Dec 09 23:18:05.439620 2025] [:error] [pid 30500:tid 30567] [client 4.189.113.83:37621] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aTg9ra2eIIK3JPWHCXUpHAAAAYo"]
[Tue Dec 09 23:18:06.052663 2025] [:error] [pid 30500:tid 30575] [client 4.189.113.83:37614] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aTg9rq2eIIK3JPWHCXUpHQAAAZI"]
[Tue Dec 09 23:18:06.373260 2025] [:error] [pid 30499:tid 30552] [client 4.189.113.83:34341] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aTg9rk0x3OqZTOPp7ckwxgAAAVY"]
[Tue Dec 09 23:18:06.812039 2025] [:error] [pid 30500:tid 30580] [client 4.189.113.83:36356] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aTg9rq2eIIK3JPWHCXUpHgAAAZc"]
[Tue Dec 09 23:18:07.052646 2025] [:error] [pid 30498:tid 30504] [client 4.189.113.83:14995] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aTg9rx2mcZJQ5qP_RC1n1gAAAAI"]
[Tue Dec 09 23:18:07.391098 2025] [:error] [pid 5276:tid 5299] [client 4.189.113.83:15008] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aTg9r0tSXwbewdwyu-2i1gAAANU"]
[Tue Dec 09 23:18:07.813991 2025] [:error] [pid 30499:tid 30553] [client 4.189.113.83:46798] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aTg9r00x3OqZTOPp7ckwyQAAAVc"]
[Tue Dec 09 23:18:08.262100 2025] [:error] [pid 30499:tid 30545] [client 4.189.113.83:34333] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aTg9sE0x3OqZTOPp7ckwywAAAU8"]
[Tue Dec 09 23:18:08.489839 2025] [:error] [pid 30591:tid 30611] [client 4.189.113.83:37581] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aTg9sBG-g76drVdWQUWzWAAAAFE"]
[Tue Dec 09 23:18:08.837305 2025] [:error] [pid 30498:tid 30513] [client 4.189.113.83:36362] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aTg9sB2mcZJQ5qP_RC1n2QAAAAs"]
[Tue Dec 09 23:18:09.078728 2025] [:error] [pid 36456:tid 36468] [client 4.189.113.83:37575] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aTg9sR0pAnOyfXl_v418nwAAAIo"]
[Tue Dec 09 23:18:09.461815 2025] [:error] [pid 36456:tid 36471] [client 4.189.113.83:36400] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aTg9sR0pAnOyfXl_v418oAAAAI0"]
[Tue Dec 09 23:18:09.864484 2025] [:error] [pid 30499:tid 30534] [client 4.189.113.83:15035] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aTg9sU0x3OqZTOPp7ckw1AAAAUQ"]
[Tue Dec 09 23:18:10.093805 2025] [:error] [pid 30498:tid 30511] [client 4.189.113.83:64922] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aTg9sh2mcZJQ5qP_RC1n3AAAAAk"]
[Tue Dec 09 23:18:10.658164 2025] [:error] [pid 30498:tid 30522] [client 4.189.113.83:53811] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aTg9sh2mcZJQ5qP_RC1n3gAAABQ"]
[Tue Dec 09 23:18:10.978616 2025] [:error] [pid 30499:tid 30551] [client 4.189.113.83:52220] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admir.php"] [unique_id "aTg9sk0x3OqZTOPp7ckw3QAAAVU"]
[Tue Dec 09 23:18:11.317596 2025] [:error] [pid 30498:tid 30504] [client 4.189.113.83:64947] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admir.php"] [unique_id "aTg9sx2mcZJQ5qP_RC1n4gAAAAI"]
[Tue Dec 09 23:18:11.570791 2025] [:error] [pid 30499:tid 30543] [client 4.189.113.83:53762] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admir.php"] [unique_id "aTg9s00x3OqZTOPp7ckw4gAAAU0"]
[Tue Dec 09 23:18:11.934575 2025] [:error] [pid 30499:tid 30544] [client 4.189.113.83:15021] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admir.php"] [unique_id "aTg9s00x3OqZTOPp7ckw5AAAAU4"]
[Tue Dec 09 23:18:12.191970 2025] [:error] [pid 30499:tid 30554] [client 4.189.113.83:36384] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsr2.php"] [unique_id "aTg9tE0x3OqZTOPp7ckw5wAAAVg"]
[Tue Dec 09 23:18:12.467229 2025] [:error] [pid 30499:tid 30536] [client 4.189.113.83:38245] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsr2.php"] [unique_id "aTg9tE0x3OqZTOPp7ckw6AAAAUY"]
[Tue Dec 09 23:18:12.751271 2025] [:error] [pid 30499:tid 30540] [client 4.189.113.83:38257] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsr2.php"] [unique_id "aTg9tE0x3OqZTOPp7ckw6gAAAUo"]
[Tue Dec 09 23:18:13.206841 2025] [:error] [pid 5276:tid 5281] [client 4.189.113.83:50977] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsr2.php"] [unique_id "aTg9tUtSXwbewdwyu-2i3wAAAMM"]
[Tue Dec 09 23:18:13.594785 2025] [:error] [pid 30591:tid 30600] [client 4.189.113.83:64903] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aTg9tRG-g76drVdWQUWzXgAAAEY"]
[Tue Dec 09 23:18:13.920656 2025] [:error] [pid 30591:tid 30596] [client 4.189.113.83:64932] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aTg9tRG-g76drVdWQUWzYAAAAEI"]
[Tue Dec 09 23:18:14.466342 2025] [:error] [pid 30500:tid 30576] [client 4.189.113.83:38175] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aTg9tq2eIIK3JPWHCXUpLAAAAZM"]
[Tue Dec 09 23:18:15.041125 2025] [:error] [pid 36456:tid 36465] [client 4.189.113.83:43305] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aTg9tx0pAnOyfXl_v418rwAAAIc"]
[Tue Dec 09 23:18:15.310253 2025] [:error] [pid 30499:tid 30537] [client 4.189.113.83:38209] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aTg9t00x3OqZTOPp7ckw8QAAAUc"]
[Tue Dec 09 23:18:15.717946 2025] [:error] [pid 36456:tid 36473] [client 4.189.113.83:64958] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aTg9tx0pAnOyfXl_v418sQAAAI8"]
[Tue Dec 09 23:18:16.189634 2025] [:error] [pid 30591:tid 30598] [client 4.189.113.83:14537] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aTg9uBG-g76drVdWQUWzZwAAAEQ"]
[Tue Dec 09 23:18:16.464215 2025] [:error] [pid 30591:tid 30597] [client 4.189.113.83:36363] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aTg9uBG-g76drVdWQUWzaQAAAEM"]
[Tue Dec 09 23:18:16.835001 2025] [:error] [pid 30499:tid 30533] [client 4.189.113.83:35280] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aTg9uE0x3OqZTOPp7ckw9AAAAUM"]
[Tue Dec 09 23:18:17.237135 2025] [:error] [pid 30500:tid 30568] [client 4.189.113.83:57449] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aTg9ua2eIIK3JPWHCXUpNAAAAYs"]
[Tue Dec 09 23:18:17.924478 2025] [:error] [pid 30500:tid 30577] [client 4.189.113.83:57451] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aTg9ua2eIIK3JPWHCXUpNQAAAZQ"]
[Tue Dec 09 23:18:18.286249 2025] [:error] [pid 5276:tid 5290] [client 4.189.113.83:59036] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ink.php"] [unique_id "aTg9uktSXwbewdwyu-2i6QAAAMw"]
[Tue Dec 09 23:18:18.595667 2025] [:error] [pid 30498:tid 30506] [client 4.189.113.83:35326] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aTg9uh2mcZJQ5qP_RC1n8AAAAAQ"]
[Tue Dec 09 23:18:18.906653 2025] [:error] [pid 30500:tid 30558] [client 4.189.113.83:59052] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aTg9uq2eIIK3JPWHCXUpPQAAAYE"]
[Tue Dec 09 23:18:19.270473 2025] [:error] [pid 30500:tid 30557] [client 4.189.113.83:43272] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aTg9u62eIIK3JPWHCXUpPgAAAYA"]
[Tue Dec 09 23:18:19.816352 2025] [:error] [pid 5276:tid 5297] [client 4.189.113.83:43283] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aTg9u0tSXwbewdwyu-2i7QAAANM"]
[Tue Dec 09 23:18:20.125504 2025] [:error] [pid 36456:tid 36473] [client 4.189.113.83:43276] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qlex1.php"] [unique_id "aTg9vB0pAnOyfXl_v418vgAAAI8"]
[Tue Dec 09 23:18:20.486475 2025] [:error] [pid 36456:tid 36461] [client 4.189.113.83:59025] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qlex1.php"] [unique_id "aTg9vB0pAnOyfXl_v418vwAAAIM"]
[Tue Dec 09 23:18:20.982832 2025] [:error] [pid 36456:tid 36478] [client 4.189.113.83:14976] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qlex1.php"] [unique_id "aTg9vB0pAnOyfXl_v418wQAAAJQ"]
[Tue Dec 09 23:18:21.367300 2025] [:error] [pid 36456:tid 36470] [client 4.189.113.83:38182] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qlex1.php"] [unique_id "aTg9vR0pAnOyfXl_v418wwAAAIw"]
[Tue Dec 09 23:18:21.885486 2025] [:error] [pid 36456:tid 36459] [client 4.189.113.83:43282] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aTg9vR0pAnOyfXl_v418yQAAAIE"]
[Tue Dec 09 23:18:22.187755 2025] [:error] [pid 36456:tid 36462] [client 4.189.113.83:48050] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aTg9vh0pAnOyfXl_v418ywAAAIQ"]
[Tue Dec 09 23:18:22.541434 2025] [:error] [pid 36456:tid 36479] [client 4.189.113.83:59057] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aTg9vh0pAnOyfXl_v418zAAAAJU"]
[Tue Dec 09 23:18:22.816566 2025] [:error] [pid 30499:tid 30540] [client 4.189.113.83:38167] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aTg9vk0x3OqZTOPp7ckxAgAAAUo"]
[Tue Dec 09 23:18:23.280109 2025] [:error] [pid 36456:tid 36478] [client 4.189.113.83:57419] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redi.php"] [unique_id "aTg9vx0pAnOyfXl_v418zwAAAJQ"]
[Tue Dec 09 23:18:23.803652 2025] [:error] [pid 30500:tid 30570] [client 4.189.113.83:48017] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redi.php"] [unique_id "aTg9v62eIIK3JPWHCXUpTwAAAY0"]
[Tue Dec 09 23:18:24.239158 2025] [:error] [pid 36456:tid 36469] [client 4.189.113.83:57463] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redi.php"] [unique_id "aTg9wB0pAnOyfXl_v4181AAAAIs"]
[Tue Dec 09 23:18:24.672860 2025] [:error] [pid 5276:tid 5295] [client 4.189.113.83:62679] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redi.php"] [unique_id "aTg9wEtSXwbewdwyu-2i8gAAANE"]
[Tue Dec 09 23:18:25.332115 2025] [:error] [pid 30500:tid 30569] [client 4.189.113.83:48033] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php7"] [unique_id "aTg9wa2eIIK3JPWHCXUpUQAAAYw"]
[Tue Dec 09 23:18:25.700422 2025] [:error] [pid 36456:tid 36463] [client 4.189.113.83:37509] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php7"] [unique_id "aTg9wR0pAnOyfXl_v4183AAAAIU"]
[Tue Dec 09 23:18:26.140182 2025] [:error] [pid 30591:tid 30608] [client 4.189.113.83:48002] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php7"] [unique_id "aTg9whG-g76drVdWQUWzbwAAAE4"]
[Tue Dec 09 23:18:26.440762 2025] [:error] [pid 30498:tid 30519] [client 4.189.113.83:35293] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php7"] [unique_id "aTg9wh2mcZJQ5qP_RC1n9gAAABE"]
[Tue Dec 09 23:18:26.798282 2025] [:error] [pid 36456:tid 36476] [client 4.189.113.83:59070] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aTg9wh0pAnOyfXl_v4186QAAAJI"]
[Tue Dec 09 23:18:27.243878 2025] [:error] [pid 30591:tid 30595] [client 4.189.113.83:57442] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aTg9wxG-g76drVdWQUWzcQAAAEE"]
[Tue Dec 09 23:18:27.532671 2025] [:error] [pid 30500:tid 30567] [client 4.189.113.83:57529] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aTg9w62eIIK3JPWHCXUpWwAAAYo"]
[Tue Dec 09 23:18:27.790336 2025] [:error] [pid 30591:tid 30599] [client 4.189.113.83:59033] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aTg9wxG-g76drVdWQUWzdAAAAEU"]
[Tue Dec 09 23:18:28.184133 2025] [:error] [pid 30500:tid 30573] [client 4.189.113.83:35273] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aTg9xK2eIIK3JPWHCXUpXgAAAZA"]
[Tue Dec 09 23:18:28.511517 2025] [:error] [pid 30591:tid 30607] [client 4.189.113.83:59053] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aTg9xBG-g76drVdWQUWzdgAAAE0"]
[Tue Dec 09 23:18:28.784747 2025] [:error] [pid 36456:tid 36478] [client 4.189.113.83:57517] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aTg9xB0pAnOyfXl_v419AQAAAJQ"]
[Tue Dec 09 23:18:29.133010 2025] [:error] [pid 36456:tid 36458] [client 4.189.113.83:59046] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aTg9xR0pAnOyfXl_v419BgAAAIA"]
[Tue Dec 09 23:18:29.421692 2025] [:error] [pid 30500:tid 30566] [client 4.189.113.83:38189] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aTg9xa2eIIK3JPWHCXUpYwAAAYk"]
[Tue Dec 09 23:18:29.848247 2025] [:error] [pid 30500:tid 30559] [client 4.189.113.83:59045] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aTg9xa2eIIK3JPWHCXUpZQAAAYI"]
[Tue Dec 09 23:18:30.241455 2025] [:error] [pid 30591:tid 30612] [client 4.189.113.83:47378] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aTg9xhG-g76drVdWQUWzewAAAFI"]
[Tue Dec 09 23:18:30.792836 2025] [:error] [pid 30500:tid 30581] [client 4.189.113.83:47372] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aTg9xq2eIIK3JPWHCXUpZwAAAZg"]
[Tue Dec 09 23:18:31.535479 2025] [:error] [pid 30498:tid 30517] [client 4.189.113.83:14476] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTg9xx2mcZJQ5qP_RC1n-AAAAA8"]
[Tue Dec 09 23:18:32.027672 2025] [:error] [pid 30500:tid 30560] [client 4.189.113.83:57503] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTg9yK2eIIK3JPWHCXUpaQAAAYM"]
[Tue Dec 09 23:18:32.331105 2025] [:error] [pid 30591:tid 30608] [client 4.189.113.83:40040] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTg9yBG-g76drVdWQUWzhAAAAE4"]
[Tue Dec 09 23:18:32.630993 2025] [:error] [pid 30591:tid 30602] [client 4.189.113.83:38157] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTg9yBG-g76drVdWQUWzhQAAAEg"]
[Tue Dec 09 23:18:33.044200 2025] [:error] [pid 30498:tid 30525] [client 4.189.113.83:14492] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0%25.php"] [unique_id "aTg9yR2mcZJQ5qP_RC1n-QAAABc"]
[Tue Dec 09 23:18:33.442457 2025] [:error] [pid 30500:tid 30559] [client 4.189.113.83:14524] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0%25.php"] [unique_id "aTg9ya2eIIK3JPWHCXUpawAAAYI"]
[Tue Dec 09 23:18:33.957161 2025] [:error] [pid 30591:tid 30612] [client 4.189.113.83:48026] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0%25.php"] [unique_id "aTg9yRG-g76drVdWQUWziAAAAFI"]
[Tue Dec 09 23:18:34.617586 2025] [:error] [pid 5276:tid 5300] [client 4.189.113.83:57494] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0%25.php"] [unique_id "aTg9yktSXwbewdwyu-2i9gAAANY"]
[Tue Dec 09 23:18:34.980848 2025] [:error] [pid 30500:tid 30576] [client 4.189.113.83:14414] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aTg9yq2eIIK3JPWHCXUpcAAAAZM"]
[Tue Dec 09 23:18:35.321282 2025] [:error] [pid 30498:tid 30513] [client 4.189.113.83:57502] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aTg9yx2mcZJQ5qP_RC1n_QAAAAs"]
[Tue Dec 09 23:18:35.564827 2025] [:error] [pid 5276:tid 5283] [client 4.189.113.83:47419] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aTg9y0tSXwbewdwyu-2i9wAAAMU"]
[Tue Dec 09 23:18:35.814383 2025] [:error] [pid 5276:tid 5278] [client 4.189.113.83:14410] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aTg9y0tSXwbewdwyu-2i-AAAAMA"]
[Tue Dec 09 23:18:36.125117 2025] [:error] [pid 30498:tid 30515] [client 4.189.113.83:48040] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTg9zB2mcZJQ5qP_RC1n_wAAAA0"]
[Tue Dec 09 23:18:36.512534 2025] [:error] [pid 30498:tid 30516] [client 4.189.113.83:57484] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTg9zB2mcZJQ5qP_RC1oAgAAAA4"]
[Tue Dec 09 23:18:36.942893 2025] [:error] [pid 30591:tid 30595] [client 4.189.113.83:57513] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTg9zBG-g76drVdWQUWzigAAAEE"]
[Tue Dec 09 23:18:37.267330 2025] [:error] [pid 5276:tid 5302] [client 4.189.113.83:14802] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aTg9zUtSXwbewdwyu-2i-gAAANg"]
[Tue Dec 09 23:18:37.679504 2025] [:error] [pid 30500:tid 30568] [client 4.189.113.83:48034] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTg9za2eIIK3JPWHCXUphAAAAYs"]
[Tue Dec 09 23:18:37.962610 2025] [:error] [pid 5276:tid 5280] [client 4.189.113.83:57486] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTg9zUtSXwbewdwyu-2i-wAAAMI"]
[Tue Dec 09 23:18:38.212836 2025] [:error] [pid 5276:tid 5293] [client 4.189.113.83:14434] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTg9zktSXwbewdwyu-2i_AAAAM8"]
[Tue Dec 09 23:18:38.452482 2025] [:error] [pid 30499:tid 30534] [client 4.189.113.83:14500] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aTg9zk0x3OqZTOPp7ckxCQAAAUQ"]
[Tue Dec 09 23:18:38.699774 2025] [:error] [pid 30591:tid 30596] [client 4.189.113.83:48016] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aTg9zhG-g76drVdWQUWziwAAAEI"]
[Tue Dec 09 23:18:38.962845 2025] [:error] [pid 30500:tid 30564] [client 4.189.113.83:48012] [client 4.189.113.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aTg9zq2eIIK3JPWHCXUpiQAAAYc"]
[Wed Dec 10 01:07:29.444877 2025] [:error] [pid 37041:tid 37058] [client 20.239.188.199:1915] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aThXUbuffDW8UzBwa1akvQAAAE8"]
[Wed Dec 10 01:07:29.679605 2025] [:error] [pid 2279:tid 2313] [client 20.239.188.199:1892] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aThXUVmpdQscMcJOElWmNQAAAUM"]
[Wed Dec 10 01:07:29.916869 2025] [:error] [pid 2280:tid 2344] [client 20.239.188.199:1917] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aThXUXcqIB-8ALgw4ZpHUQAAAIc"]
[Wed Dec 10 01:07:30.173839 2025] [:error] [pid 37041:tid 37045] [client 20.239.188.199:1888] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aThXUruffDW8UzBwa1akvwAAAEI"]
[Wed Dec 10 01:07:30.419401 2025] [:error] [pid 2280:tid 2354] [client 20.239.188.199:1904] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aThXUncqIB-8ALgw4ZpHUgAAAJE"]
[Wed Dec 10 01:07:30.661048 2025] [:error] [pid 2280:tid 2358] [client 20.239.188.199:2002] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aThXUncqIB-8ALgw4ZpHUwAAAJU"]
[Wed Dec 10 01:07:30.902990 2025] [:error] [pid 2280:tid 2343] [client 20.239.188.199:1880] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aThXUncqIB-8ALgw4ZpHVAAAAIY"]
[Wed Dec 10 01:07:31.136065 2025] [:error] [pid 2279:tid 2326] [client 20.239.188.199:1889] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aThXU1mpdQscMcJOElWmOgAAAVA"]
[Wed Dec 10 01:07:31.370054 2025] [:error] [pid 2279:tid 2320] [client 20.239.188.199:1663] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aThXU1mpdQscMcJOElWmPAAAAUo"]
[Wed Dec 10 01:07:31.610175 2025] [:error] [pid 2280:tid 2356] [client 20.239.188.199:1886] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aThXU3cqIB-8ALgw4ZpHVgAAAJM"]
[Wed Dec 10 01:07:31.854141 2025] [:error] [pid 2277:tid 2304] [client 20.239.188.199:1607] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aThXU4WGo731r6eS-w5N9AAAABU"]
[Wed Dec 10 01:07:32.095985 2025] [:error] [pid 2280:tid 2353] [client 20.239.188.199:1604] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aThXVHcqIB-8ALgw4ZpHVwAAAJA"]
[Wed Dec 10 01:07:32.329180 2025] [:error] [pid 2280:tid 2357] [client 20.239.188.199:1898] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/20.php"] [unique_id "aThXVHcqIB-8ALgw4ZpHWQAAAJQ"]
[Wed Dec 10 01:07:32.567005 2025] [:error] [pid 2366:tid 2391] [client 20.239.188.199:1626] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/20.php"] [unique_id "aThXVEAeBjkmsNRkd1NUuQAAANc"]
[Wed Dec 10 01:07:32.803754 2025] [:error] [pid 37041:tid 37066] [client 20.239.188.199:1897] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/20.php"] [unique_id "aThXVLuffDW8UzBwa1akwgAAAFc"]
[Wed Dec 10 01:07:33.037806 2025] [:error] [pid 2280:tid 2349] [client 20.239.188.199:1859] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/20.php"] [unique_id "aThXVXcqIB-8ALgw4ZpHWwAAAIw"]
[Wed Dec 10 01:07:33.272571 2025] [:error] [pid 2277:tid 2285] [client 20.239.188.199:1611] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aThXVYWGo731r6eS-w5N9gAAAAM"]
[Wed Dec 10 01:07:33.536620 2025] [:error] [pid 2366:tid 2381] [client 20.239.188.199:1918] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aThXVUAeBjkmsNRkd1NUvwAAAM0"]
[Wed Dec 10 01:07:33.784675 2025] [:error] [pid 2366:tid 2376] [client 20.239.188.199:1881] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aThXVUAeBjkmsNRkd1NUwQAAAMg"]
[Wed Dec 10 01:07:34.047511 2025] [:error] [pid 37041:tid 37067] [client 20.239.188.199:1912] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aThXVruffDW8UzBwa1akxQAAAFg"]
[Wed Dec 10 01:07:34.283033 2025] [:error] [pid 2277:tid 2305] [client 20.239.188.199:1907] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aThXVoWGo731r6eS-w5N-gAAABY"]
[Wed Dec 10 01:07:34.516579 2025] [:error] [pid 2366:tid 2380] [client 20.239.188.199:1885] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aThXVkAeBjkmsNRkd1NUxQAAAMw"]
[Wed Dec 10 01:07:34.753357 2025] [:error] [pid 2366:tid 2368] [client 20.239.188.199:1617] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aThXVkAeBjkmsNRkd1NUxwAAAMA"]
[Wed Dec 10 01:07:34.994868 2025] [:error] [pid 37041:tid 37056] [client 20.239.188.199:1908] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aThXVruffDW8UzBwa1akyAAAAE0"]
[Wed Dec 10 01:07:35.230336 2025] [:error] [pid 2277:tid 2282] [client 20.239.188.199:1894] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aThXV4WGo731r6eS-w5OAAAAAAA"]
[Wed Dec 10 01:07:35.473786 2025] [:error] [pid 2366:tid 2378] [client 20.239.188.199:1993] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aThXV0AeBjkmsNRkd1NUzAAAAMo"]
[Wed Dec 10 01:07:35.711006 2025] [:error] [pid 2366:tid 2382] [client 20.239.188.199:1872] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aThXV0AeBjkmsNRkd1NUzQAAAM4"]
[Wed Dec 10 01:07:35.946642 2025] [:error] [pid 2366:tid 2374] [client 20.239.188.199:1624] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aThXV0AeBjkmsNRkd1NUzwAAAMY"]
[Wed Dec 10 01:07:36.181985 2025] [:error] [pid 37041:tid 37047] [client 20.239.188.199:1619] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aThXWLuffDW8UzBwa1akzQAAAEQ"]
[Wed Dec 10 01:07:36.441965 2025] [:error] [pid 2366:tid 2380] [client 20.239.188.199:1652] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aThXWEAeBjkmsNRkd1NU0gAAAMw"]
[Wed Dec 10 01:07:36.689020 2025] [:error] [pid 37041:tid 37063] [client 20.239.188.199:1608] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aThXWLuffDW8UzBwa1ak0AAAAFQ"]
[Wed Dec 10 01:07:36.935272 2025] [:error] [pid 2280:tid 2340] [client 20.239.188.199:2005] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aThXWHcqIB-8ALgw4ZpHXgAAAIM"]
[Wed Dec 10 01:07:37.180789 2025] [:error] [pid 2277:tid 2286] [client 20.239.188.199:1895] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/css.php"] [unique_id "aThXWYWGo731r6eS-w5OEAAAAAQ"]
[Wed Dec 10 01:07:37.484175 2025] [:error] [pid 2280:tid 2339] [client 20.239.188.199:1627] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/css.php"] [unique_id "aThXWXcqIB-8ALgw4ZpHYQAAAII"]
[Wed Dec 10 01:07:37.744844 2025] [:error] [pid 37041:tid 37056] [client 20.239.188.199:1919] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/css.php"] [unique_id "aThXWbuffDW8UzBwa1ak1wAAAE0"]
[Wed Dec 10 01:07:38.024532 2025] [:error] [pid 2277:tid 2290] [client 20.239.188.199:1605] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/css.php"] [unique_id "aThXWoWGo731r6eS-w5OFgAAAAg"]
[Wed Dec 10 01:07:38.263794 2025] [:error] [pid 2280:tid 2350] [client 20.239.188.199:1900] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aThXWncqIB-8ALgw4ZpHYgAAAI0"]
[Wed Dec 10 01:07:38.507321 2025] [:error] [pid 2280:tid 2354] [client 20.239.188.199:1631] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aThXWncqIB-8ALgw4ZpHYwAAAJE"]
[Wed Dec 10 01:07:38.758911 2025] [:error] [pid 2280:tid 2343] [client 20.239.188.199:1878] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aThXWncqIB-8ALgw4ZpHZAAAAIY"]
[Wed Dec 10 01:07:39.000100 2025] [:error] [pid 37041:tid 37061] [client 20.239.188.199:1610] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aThXWruffDW8UzBwa1ak2wAAAFI"]
[Wed Dec 10 01:07:39.236117 2025] [:error] [pid 2279:tid 2325] [client 20.239.188.199:1615] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aThXW1mpdQscMcJOElWmWgAAAU8"]
[Wed Dec 10 01:07:39.527666 2025] [:error] [pid 37041:tid 37057] [client 20.239.188.199:1969] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aThXW7uffDW8UzBwa1ak3QAAAE4"]
[Wed Dec 10 01:07:39.795618 2025] [:error] [pid 37041:tid 37067] [client 20.239.188.199:1641] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aThXW7uffDW8UzBwa1ak3gAAAFg"]
[Wed Dec 10 01:07:40.051398 2025] [:error] [pid 2366:tid 2372] [client 20.239.188.199:1603] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aThXXEAeBjkmsNRkd1NU3QAAAMQ"]
[Wed Dec 10 01:07:40.285908 2025] [:error] [pid 2277:tid 2295] [client 20.239.188.199:2007] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aThXXIWGo731r6eS-w5OIgAAAAw"]
[Wed Dec 10 01:07:40.519752 2025] [:error] [pid 2277:tid 2288] [client 20.239.188.199:1882] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aThXXIWGo731r6eS-w5OJAAAAAY"]
[Wed Dec 10 01:07:40.759230 2025] [:error] [pid 2366:tid 2385] [client 20.239.188.199:1873] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aThXXEAeBjkmsNRkd1NU4AAAANE"]
[Wed Dec 10 01:07:41.002129 2025] [:error] [pid 2366:tid 2369] [client 20.239.188.199:1910] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aThXXUAeBjkmsNRkd1NU4gAAAME"]
[Wed Dec 10 01:07:41.256678 2025] [:error] [pid 2277:tid 2301] [client 20.239.188.199:1877] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r.php"] [unique_id "aThXXYWGo731r6eS-w5OKAAAABI"]
[Wed Dec 10 01:07:41.500671 2025] [:error] [pid 2280:tid 2345] [client 20.239.188.199:1901] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r.php"] [unique_id "aThXXXcqIB-8ALgw4ZpHbAAAAIg"]
[Wed Dec 10 01:07:41.740897 2025] [:error] [pid 37041:tid 37062] [client 20.239.188.199:1868] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r.php"] [unique_id "aThXXbuffDW8UzBwa1ak4wAAAFM"]
[Wed Dec 10 01:07:41.974182 2025] [:error] [pid 37041:tid 37047] [client 20.239.188.199:1863] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r.php"] [unique_id "aThXXbuffDW8UzBwa1ak5gAAAEQ"]
[Wed Dec 10 01:07:42.218329 2025] [:error] [pid 37041:tid 37051] [client 20.239.188.199:1620] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "aThXXruffDW8UzBwa1ak6AAAAEg"]
[Wed Dec 10 01:07:42.452302 2025] [:error] [pid 2279:tid 2312] [client 20.239.188.199:1891] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "aThXXlmpdQscMcJOElWmZAAAAUI"]
[Wed Dec 10 01:07:42.687510 2025] [:error] [pid 2366:tid 2388] [client 20.239.188.199:1640] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "aThXXkAeBjkmsNRkd1NU6QAAANQ"]
[Wed Dec 10 01:07:42.930845 2025] [:error] [pid 37041:tid 37059] [client 20.239.188.199:1883] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "aThXXruffDW8UzBwa1ak7AAAAFA"]
[Wed Dec 10 01:07:43.166674 2025] [:error] [pid 2366:tid 2372] [client 20.239.188.199:1903] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-22.php"] [unique_id "aThXX0AeBjkmsNRkd1NU6wAAAMQ"]
[Wed Dec 10 01:07:43.413650 2025] [:error] [pid 2279:tid 2314] [client 20.239.188.199:2043] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-22.php"] [unique_id "aThXX1mpdQscMcJOElWmZQAAAUQ"]
[Wed Dec 10 01:07:43.651376 2025] [:error] [pid 2280:tid 2360] [client 20.239.188.199:2006] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-22.php"] [unique_id "aThXX3cqIB-8ALgw4ZpHbgAAAJc"]
[Wed Dec 10 01:07:43.891239 2025] [:error] [pid 37041:tid 37050] [client 20.239.188.199:2001] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-22.php"] [unique_id "aThXX7uffDW8UzBwa1ak7wAAAEc"]
[Wed Dec 10 01:07:44.127097 2025] [:error] [pid 2366:tid 2369] [client 20.239.188.199:1642] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aThXYEAeBjkmsNRkd1NU8QAAAME"]
[Wed Dec 10 01:07:44.361697 2025] [:error] [pid 2277:tid 2294] [client 20.239.188.199:2013] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aThXYIWGo731r6eS-w5OLwAAAAs"]
[Wed Dec 10 01:07:44.620680 2025] [:error] [pid 2277:tid 2287] [client 20.239.188.199:1612] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aThXYIWGo731r6eS-w5OMAAAAAU"]
[Wed Dec 10 01:07:44.865389 2025] [:error] [pid 2366:tid 2378] [client 20.239.188.199:1628] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aThXYEAeBjkmsNRkd1NU8wAAAMo"]
[Wed Dec 10 01:07:45.103138 2025] [:error] [pid 2279:tid 2315] [client 20.239.188.199:1629] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "aThXYVmpdQscMcJOElWmZwAAAUU"]
[Wed Dec 10 01:07:45.338328 2025] [:error] [pid 2280:tid 2358] [client 20.239.188.199:1890] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "aThXYXcqIB-8ALgw4ZpHcgAAAJU"]
[Wed Dec 10 01:07:45.577503 2025] [:error] [pid 2280:tid 2342] [client 20.239.188.199:1657] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "aThXYXcqIB-8ALgw4ZpHcwAAAIU"]
[Wed Dec 10 01:07:45.821590 2025] [:error] [pid 2366:tid 2377] [client 20.239.188.199:1869] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "aThXYUAeBjkmsNRkd1NU-AAAAMk"]
[Wed Dec 10 01:07:46.054956 2025] [:error] [pid 2279:tid 2318] [client 20.239.188.199:1661] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aThXYlmpdQscMcJOElWmaQAAAUg"]
[Wed Dec 10 01:07:46.288267 2025] [:error] [pid 2280:tid 2355] [client 20.239.188.199:1862] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aThXYncqIB-8ALgw4ZpHdgAAAJI"]
[Wed Dec 10 01:07:46.519835 2025] [:error] [pid 2279:tid 2322] [client 20.239.188.199:1867] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aThXYlmpdQscMcJOElWmawAAAUw"]
[Wed Dec 10 01:07:46.755095 2025] [:error] [pid 2279:tid 2333] [client 20.239.188.199:2033] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aThXYlmpdQscMcJOElWmbQAAAVc"]
[Wed Dec 10 01:07:47.002464 2025] [:error] [pid 2366:tid 2383] [client 20.239.188.199:1621] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aThXY0AeBjkmsNRkd1NU-wAAAM8"]
[Wed Dec 10 01:07:47.237093 2025] [:error] [pid 2279:tid 2315] [client 20.239.188.199:1858] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aThXY1mpdQscMcJOElWmcgAAAUU"]
[Wed Dec 10 01:07:47.470933 2025] [:error] [pid 2279:tid 2331] [client 20.239.188.199:1600] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aThXY1mpdQscMcJOElWmdAAAAVU"]
[Wed Dec 10 01:07:47.705957 2025] [:error] [pid 2280:tid 2350] [client 20.239.188.199:1906] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aThXY3cqIB-8ALgw4ZpHgQAAAI0"]
[Wed Dec 10 01:07:47.952749 2025] [:error] [pid 2279:tid 2327] [client 20.239.188.199:1623] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ee.php"] [unique_id "aThXY1mpdQscMcJOElWmeAAAAVE"]
[Wed Dec 10 01:07:48.198469 2025] [:error] [pid 2280:tid 2342] [client 20.239.188.199:1864] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ee.php"] [unique_id "aThXZHcqIB-8ALgw4ZpHgwAAAIU"]
[Wed Dec 10 01:07:48.432246 2025] [:error] [pid 2277:tid 2296] [client 20.239.188.199:1630] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ee.php"] [unique_id "aThXZIWGo731r6eS-w5ONwAAAA0"]
[Wed Dec 10 01:07:48.666199 2025] [:error] [pid 2277:tid 2287] [client 20.239.188.199:1635] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ee.php"] [unique_id "aThXZIWGo731r6eS-w5OOAAAAAU"]
[Wed Dec 10 01:07:48.906041 2025] [:error] [pid 2277:tid 2299] [client 20.239.188.199:1911] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aThXZIWGo731r6eS-w5OOgAAABA"]
[Wed Dec 10 01:07:49.139127 2025] [:error] [pid 2280:tid 2355] [client 20.239.188.199:1866] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aThXZXcqIB-8ALgw4ZpHhgAAAJI"]
[Wed Dec 10 01:07:49.372569 2025] [:error] [pid 2279:tid 2329] [client 20.239.188.199:1909] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aThXZVmpdQscMcJOElWmfgAAAVM"]
[Wed Dec 10 01:07:49.607853 2025] [:error] [pid 2277:tid 2300] [client 20.239.188.199:1976] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aThXZYWGo731r6eS-w5OPwAAABE"]
[Wed Dec 10 01:07:49.841619 2025] [:error] [pid 2279:tid 2317] [client 20.239.188.199:2012] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aThXZVmpdQscMcJOElWmgQAAAUc"]
[Wed Dec 10 01:07:50.074137 2025] [:error] [pid 37041:tid 37065] [client 20.239.188.199:21712] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aThXZruffDW8UzBwa1ak_AAAAFY"]
[Wed Dec 10 01:07:50.318505 2025] [:error] [pid 2277:tid 2288] [client 20.239.188.199:1899] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aThXZoWGo731r6eS-w5ORAAAAAY"]
[Wed Dec 10 01:07:50.552840 2025] [:error] [pid 2277:tid 2307] [client 20.239.188.199:1927] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aThXZoWGo731r6eS-w5ORQAAABg"]
[Wed Dec 10 01:07:50.793816 2025] [:error] [pid 37041:tid 37066] [client 20.239.188.199:2042] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aThXZruffDW8UzBwa1ak_wAAAFc"]
[Wed Dec 10 01:07:51.038413 2025] [:error] [pid 2279:tid 2319] [client 20.239.188.199:1609] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aThXZ1mpdQscMcJOElWmhgAAAUk"]
[Wed Dec 10 01:07:51.271477 2025] [:error] [pid 2366:tid 2381] [client 20.239.188.199:1601] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aThXZ0AeBjkmsNRkd1NVAQAAAM0"]
[Wed Dec 10 01:07:51.516752 2025] [:error] [pid 37041:tid 37052] [client 20.239.188.199:1884] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aThXZ7uffDW8UzBwa1alAQAAAEk"]
[Wed Dec 10 01:07:51.750445 2025] [:error] [pid 2366:tid 2372] [client 20.239.188.199:1614] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aThXZ0AeBjkmsNRkd1NVBAAAAMQ"]
[Wed Dec 10 01:07:51.991182 2025] [:error] [pid 37041:tid 37067] [client 20.239.188.199:2027] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aThXZ7uffDW8UzBwa1alAwAAAFg"]
[Wed Dec 10 01:07:52.225776 2025] [:error] [pid 2277:tid 2306] [client 20.239.188.199:1622] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aThXaIWGo731r6eS-w5OSgAAABc"]
[Wed Dec 10 01:07:52.462033 2025] [:error] [pid 2277:tid 2298] [client 20.239.188.199:1871] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aThXaIWGo731r6eS-w5OSwAAAA8"]
[Wed Dec 10 01:07:52.697211 2025] [:error] [pid 2280:tid 2337] [client 20.239.188.199:1618] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aThXaHcqIB-8ALgw4ZpHkAAAAIA"]
[Wed Dec 10 01:07:52.948507 2025] [:error] [pid 2279:tid 2312] [client 20.239.188.199:2029] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aThXaFmpdQscMcJOElWmjAAAAUI"]
[Wed Dec 10 01:07:53.190216 2025] [:error] [pid 2279:tid 2310] [client 20.239.188.199:1636] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aThXaVmpdQscMcJOElWmjQAAAUA"]
[Wed Dec 10 01:07:53.447022 2025] [:error] [pid 2279:tid 2317] [client 20.239.188.199:1896] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aThXaVmpdQscMcJOElWmjgAAAUc"]
[Wed Dec 10 01:07:53.680836 2025] [:error] [pid 2280:tid 2339] [client 20.239.188.199:1662] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThXaXcqIB-8ALgw4ZpHlAAAAII"]
[Wed Dec 10 01:07:53.913727 2025] [:error] [pid 2277:tid 2302] [client 20.239.188.199:1857] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThXaYWGo731r6eS-w5OTgAAABM"]
[Wed Dec 10 01:07:54.182507 2025] [:error] [pid 2280:tid 2359] [client 20.239.188.199:1893] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThXancqIB-8ALgw4ZpHmQAAAJY"]
[Wed Dec 10 01:07:54.421646 2025] [:error] [pid 37041:tid 37061] [client 20.239.188.199:1646] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThXaruffDW8UzBwa1alCgAAAFI"]
[Wed Dec 10 01:07:54.668398 2025] [:error] [pid 2366:tid 2380] [client 20.239.188.199:1994] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/02.php"] [unique_id "aThXakAeBjkmsNRkd1NVBgAAAMw"]
[Wed Dec 10 01:07:54.907502 2025] [:error] [pid 2366:tid 2391] [client 20.239.188.199:1654] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/02.php"] [unique_id "aThXakAeBjkmsNRkd1NVCAAAANc"]
[Wed Dec 10 01:07:55.143299 2025] [:error] [pid 2280:tid 2345] [client 20.239.188.199:1634] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/02.php"] [unique_id "aThXa3cqIB-8ALgw4ZpHnAAAAIg"]
[Wed Dec 10 01:07:55.390312 2025] [:error] [pid 2279:tid 2322] [client 20.239.188.199:1913] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/02.php"] [unique_id "aThXa1mpdQscMcJOElWmlAAAAUw"]
[Wed Dec 10 01:07:55.624777 2025] [:error] [pid 37041:tid 37056] [client 20.239.188.199:2003] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aThXa7uffDW8UzBwa1alDQAAAE0"]
[Wed Dec 10 01:07:55.869754 2025] [:error] [pid 2279:tid 2333] [client 20.239.188.199:1905] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aThXa1mpdQscMcJOElWmlwAAAVc"]
[Wed Dec 10 01:07:56.124041 2025] [:error] [pid 2277:tid 2283] [client 20.239.188.199:1984] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aThXbIWGo731r6eS-w5OUwAAAAE"]
[Wed Dec 10 01:07:56.357572 2025] [:error] [pid 2366:tid 2385] [client 20.239.188.199:2039] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aThXbEAeBjkmsNRkd1NVCwAAANE"]
[Wed Dec 10 01:07:56.600506 2025] [:error] [pid 37041:tid 37067] [client 20.239.188.199:1637] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aThXbLuffDW8UzBwa1alDwAAAFg"]
[Wed Dec 10 01:07:56.835750 2025] [:error] [pid 2366:tid 2374] [client 20.239.188.199:2019] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aThXbEAeBjkmsNRkd1NVDwAAAMY"]
[Wed Dec 10 01:07:57.080881 2025] [:error] [pid 2279:tid 2322] [client 20.239.188.199:1876] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aThXbVmpdQscMcJOElWmoQAAAUw"]
[Wed Dec 10 01:07:57.315317 2025] [:error] [pid 2279:tid 2333] [client 20.239.188.199:1887] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aThXbVmpdQscMcJOElWmpQAAAVc"]
[Wed Dec 10 01:07:57.553620 2025] [:error] [pid 2366:tid 2375] [client 20.239.188.199:1602] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ee.php"] [unique_id "aThXbUAeBjkmsNRkd1NVEgAAAMc"]
[Wed Dec 10 01:07:57.799297 2025] [:error] [pid 2366:tid 2379] [client 20.239.188.199:1992] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ee.php"] [unique_id "aThXbUAeBjkmsNRkd1NVFQAAAMs"]
[Wed Dec 10 01:07:58.033671 2025] [:error] [pid 2277:tid 2303] [client 20.239.188.199:1639] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ee.php"] [unique_id "aThXboWGo731r6eS-w5OVgAAABQ"]
[Wed Dec 10 01:07:58.268256 2025] [:error] [pid 2280:tid 2345] [client 20.239.188.199:2017] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ee.php"] [unique_id "aThXbncqIB-8ALgw4ZpHpQAAAIg"]
[Wed Dec 10 01:07:58.502658 2025] [:error] [pid 2280:tid 2357] [client 20.239.188.199:1638] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aThXbncqIB-8ALgw4ZpHpwAAAJQ"]
[Wed Dec 10 01:07:58.739308 2025] [:error] [pid 2280:tid 2338] [client 20.239.188.199:1632] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aThXbncqIB-8ALgw4ZpHqwAAAIE"]
[Wed Dec 10 01:07:58.975823 2025] [:error] [pid 2277:tid 2297] [client 20.239.188.199:1644] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aThXboWGo731r6eS-w5OXQAAAA4"]
[Wed Dec 10 01:07:59.211629 2025] [:error] [pid 2277:tid 2286] [client 20.239.188.199:2040] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aThXb4WGo731r6eS-w5OYQAAAAQ"]
[Wed Dec 10 01:07:59.451710 2025] [:error] [pid 2277:tid 2296] [client 20.239.188.199:1633] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aThXb4WGo731r6eS-w5OZAAAAA0"]
[Wed Dec 10 01:07:59.696081 2025] [:error] [pid 2277:tid 2287] [client 20.239.188.199:1648] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aThXb4WGo731r6eS-w5OZwAAAAU"]
[Wed Dec 10 01:07:59.930208 2025] [:error] [pid 2366:tid 2391] [client 20.239.188.199:1660] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aThXb0AeBjkmsNRkd1NVGAAAANc"]
[Wed Dec 10 01:08:00.169218 2025] [:error] [pid 2366:tid 2385] [client 20.239.188.199:1914] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aThXcEAeBjkmsNRkd1NVGgAAANE"]
[Wed Dec 10 01:08:00.405561 2025] [:error] [pid 2277:tid 2300] [client 20.239.188.199:1996] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aThXcIWGo731r6eS-w5OagAAABE"]
[Wed Dec 10 01:08:00.643717 2025] [:error] [pid 2280:tid 2354] [client 20.239.188.199:1990] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aThXcHcqIB-8ALgw4ZpHrQAAAJE"]
[Wed Dec 10 01:08:00.883964 2025] [:error] [pid 2280:tid 2343] [client 20.239.188.199:1995] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aThXcHcqIB-8ALgw4ZpHrwAAAIY"]
[Wed Dec 10 01:08:01.117615 2025] [:error] [pid 2366:tid 2382] [client 20.239.188.199:2037] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aThXcUAeBjkmsNRkd1NVHwAAAM4"]
[Wed Dec 10 01:08:01.354132 2025] [:error] [pid 2280:tid 2345] [client 20.239.188.199:1658] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y7.PHP"] [unique_id "aThXcXcqIB-8ALgw4ZpHsQAAAIg"]
[Wed Dec 10 01:08:01.594408 2025] [:error] [pid 2280:tid 2357] [client 20.239.188.199:1921] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y7.PHP"] [unique_id "aThXcXcqIB-8ALgw4ZpHswAAAJQ"]
[Wed Dec 10 01:08:01.828284 2025] [:error] [pid 2366:tid 2384] [client 20.239.188.199:1650] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y7.PHP"] [unique_id "aThXcUAeBjkmsNRkd1NVIwAAANA"]
[Wed Dec 10 01:08:02.073675 2025] [:error] [pid 2280:tid 2348] [client 20.239.188.199:1655] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y7.PHP"] [unique_id "aThXcncqIB-8ALgw4ZpHtgAAAIs"]
[Wed Dec 10 01:08:02.319316 2025] [:error] [pid 2366:tid 2376] [client 20.239.188.199:1879] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yr.PHP"] [unique_id "aThXckAeBjkmsNRkd1NVKQAAAMg"]
[Wed Dec 10 01:08:02.558602 2025] [:error] [pid 2279:tid 2314] [client 20.239.188.199:21725] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yr.PHP"] [unique_id "aThXclmpdQscMcJOElWmrwAAAUQ"]
[Wed Dec 10 01:08:02.815193 2025] [:error] [pid 2280:tid 2341] [client 20.239.188.199:1999] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yr.PHP"] [unique_id "aThXcncqIB-8ALgw4ZpHugAAAIQ"]
[Wed Dec 10 01:08:03.070126 2025] [:error] [pid 2366:tid 2374] [client 20.239.188.199:1945] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yr.PHP"] [unique_id "aThXc0AeBjkmsNRkd1NVLQAAAMY"]
[Wed Dec 10 01:08:03.306962 2025] [:error] [pid 2279:tid 2323] [client 20.239.188.199:2015] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/l3gi0n.php"] [unique_id "aThXc1mpdQscMcJOElWmsAAAAU0"]
[Wed Dec 10 01:08:03.543013 2025] [:error] [pid 2366:tid 2382] [client 20.239.188.199:1865] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/l3gi0n.php"] [unique_id "aThXc0AeBjkmsNRkd1NVLwAAAM4"]
[Wed Dec 10 01:08:03.790638 2025] [:error] [pid 2280:tid 2347] [client 20.239.188.199:2044] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/l3gi0n.php"] [unique_id "aThXc3cqIB-8ALgw4ZpHwwAAAIo"]
[Wed Dec 10 01:08:04.024720 2025] [:error] [pid 2280:tid 2357] [client 20.239.188.199:2020] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/l3gi0n.php"] [unique_id "aThXdHcqIB-8ALgw4ZpHxQAAAJQ"]
[Wed Dec 10 01:08:04.259914 2025] [:error] [pid 2280:tid 2353] [client 20.239.188.199:1902] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loads.PhP"] [unique_id "aThXdHcqIB-8ALgw4ZpHxgAAAJA"]
[Wed Dec 10 01:08:04.496869 2025] [:error] [pid 2280:tid 2341] [client 20.239.188.199:1920] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loads.PhP"] [unique_id "aThXdHcqIB-8ALgw4ZpHywAAAIQ"]
[Wed Dec 10 01:08:04.730893 2025] [:error] [pid 2366:tid 2368] [client 20.239.188.199:1928] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loads.PhP"] [unique_id "aThXdEAeBjkmsNRkd1NVNAAAAMA"]
[Wed Dec 10 01:08:04.964636 2025] [:error] [pid 2277:tid 2300] [client 20.239.188.199:1616] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loads.PhP"] [unique_id "aThXdIWGo731r6eS-w5OeAAAABE"]
[Wed Dec 10 01:08:05.204318 2025] [:error] [pid 2366:tid 2370] [client 20.239.188.199:1965] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mj.php"] [unique_id "aThXdUAeBjkmsNRkd1NVNwAAAMI"]
[Wed Dec 10 01:08:05.440034 2025] [:error] [pid 2280:tid 2357] [client 20.239.188.199:1922] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mj.php"] [unique_id "aThXdXcqIB-8ALgw4ZpH0gAAAJQ"]
[Wed Dec 10 01:08:05.679807 2025] [:error] [pid 2277:tid 2307] [client 20.239.188.199:1860] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mj.php"] [unique_id "aThXdYWGo731r6eS-w5OgAAAABg"]
[Wed Dec 10 01:08:05.919822 2025] [:error] [pid 2277:tid 2298] [client 20.239.188.199:1940] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mj.php"] [unique_id "aThXdYWGo731r6eS-w5OggAAAA8"]
[Wed Dec 10 01:08:06.158751 2025] [:error] [pid 2366:tid 2390] [client 20.239.188.199:21716] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aThXdkAeBjkmsNRkd1NVOgAAANY"]
[Wed Dec 10 01:08:06.394626 2025] [:error] [pid 37041:tid 37063] [client 20.239.188.199:2031] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aThXdruffDW8UzBwa1alFQAAAFQ"]
[Wed Dec 10 01:08:06.638063 2025] [:error] [pid 2279:tid 2313] [client 20.239.188.199:1987] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aThXdlmpdQscMcJOElWmuwAAAUM"]
[Wed Dec 10 01:08:06.874450 2025] [:error] [pid 2279:tid 2325] [client 20.239.188.199:1656] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aThXdlmpdQscMcJOElWmvQAAAU8"]
[Wed Dec 10 01:08:07.110556 2025] [:error] [pid 2280:tid 2341] [client 20.239.188.199:1942] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsz.php"] [unique_id "aThXd3cqIB-8ALgw4ZpH1AAAAIQ"]
[Wed Dec 10 01:08:07.345718 2025] [:error] [pid 2279:tid 2323] [client 20.239.188.199:1986] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsz.php"] [unique_id "aThXd1mpdQscMcJOElWmvgAAAU0"]
[Wed Dec 10 01:08:07.581750 2025] [:error] [pid 2366:tid 2373] [client 20.239.188.199:1613] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsz.php"] [unique_id "aThXd0AeBjkmsNRkd1NVPQAAAMU"]
[Wed Dec 10 01:08:07.816471 2025] [:error] [pid 2366:tid 2383] [client 20.239.188.199:2041] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsz.php"] [unique_id "aThXd0AeBjkmsNRkd1NVPgAAAM8"]
[Wed Dec 10 01:08:08.051385 2025] [:error] [pid 2280:tid 2361] [client 20.239.188.199:1645] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aThXeHcqIB-8ALgw4ZpH1wAAAJg"]
[Wed Dec 10 01:08:08.285158 2025] [:error] [pid 2366:tid 2385] [client 20.239.188.199:1874] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aThXeEAeBjkmsNRkd1NVRAAAANE"]
[Wed Dec 10 01:08:08.518082 2025] [:error] [pid 2366:tid 2375] [client 20.239.188.199:1659] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aThXeEAeBjkmsNRkd1NVSAAAAMc"]
[Wed Dec 10 01:08:08.752345 2025] [:error] [pid 2366:tid 2371] [client 20.239.188.199:21717] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aThXeEAeBjkmsNRkd1NVSQAAAMM"]
[Wed Dec 10 01:08:08.991609 2025] [:error] [pid 2280:tid 2354] [client 20.239.188.199:1929] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aThXeHcqIB-8ALgw4ZpH2wAAAJE"]
[Wed Dec 10 01:08:09.231875 2025] [:error] [pid 2279:tid 2319] [client 20.239.188.199:1991] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aThXeVmpdQscMcJOElWmxwAAAUk"]
[Wed Dec 10 01:08:09.465089 2025] [:error] [pid 2366:tid 2386] [client 20.239.188.199:1953] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aThXeUAeBjkmsNRkd1NVTAAAANI"]
[Wed Dec 10 01:08:09.699884 2025] [:error] [pid 2366:tid 2388] [client 20.239.188.199:1972] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aThXeUAeBjkmsNRkd1NVTQAAANQ"]
[Wed Dec 10 01:08:09.933874 2025] [:error] [pid 2280:tid 2339] [client 20.239.188.199:1975] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aThXeXcqIB-8ALgw4ZpH3gAAAII"]
[Wed Dec 10 01:08:10.172880 2025] [:error] [pid 2279:tid 2314] [client 20.239.188.199:1625] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aThXelmpdQscMcJOElWmzAAAAUQ"]
[Wed Dec 10 01:08:10.407473 2025] [:error] [pid 2279:tid 2329] [client 20.239.188.199:1916] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aThXelmpdQscMcJOElWmzwAAAVM"]
[Wed Dec 10 01:08:10.641435 2025] [:error] [pid 2277:tid 2296] [client 20.239.188.199:1856] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aThXeoWGo731r6eS-w5OkgAAAA0"]
[Wed Dec 10 01:08:10.875771 2025] [:error] [pid 37041:tid 37060] [client 20.239.188.199:21702] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aThXeruffDW8UzBwa1alHQAAAFE"]
[Wed Dec 10 01:08:11.137993 2025] [:error] [pid 2366:tid 2368] [client 20.239.188.199:1961] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aThXe0AeBjkmsNRkd1NVTwAAAMA"]
[Wed Dec 10 01:08:11.371278 2025] [:error] [pid 2279:tid 2332] [client 20.239.188.199:2045] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aThXe1mpdQscMcJOElWm0AAAAVY"]
[Wed Dec 10 01:08:11.633858 2025] [:error] [pid 2277:tid 2305] [client 20.239.188.199:1649] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aThXe4WGo731r6eS-w5OlwAAABY"]
[Wed Dec 10 01:08:11.868696 2025] [:error] [pid 2280:tid 2360] [client 20.239.188.199:2018] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aThXe3cqIB-8ALgw4ZpH5QAAAJc"]
[Wed Dec 10 01:08:12.109740 2025] [:error] [pid 2277:tid 2286] [client 20.239.188.199:2032] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aThXfIWGo731r6eS-w5OmwAAAAQ"]
[Wed Dec 10 01:08:12.344252 2025] [:error] [pid 2277:tid 2282] [client 20.239.188.199:1957] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aThXfIWGo731r6eS-w5OnAAAAAA"]
[Wed Dec 10 01:08:12.577986 2025] [:error] [pid 2280:tid 2350] [client 20.239.188.199:1997] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aThXfHcqIB-8ALgw4ZpH6AAAAI0"]
[Wed Dec 10 01:08:12.812180 2025] [:error] [pid 2280:tid 2356] [client 20.239.188.199:2036] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aThXfHcqIB-8ALgw4ZpH6wAAAJM"]
[Wed Dec 10 01:08:13.048047 2025] [:error] [pid 2277:tid 2293] [client 20.239.188.199:21731] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aThXfYWGo731r6eS-w5OowAAAAo"]
[Wed Dec 10 01:08:13.284052 2025] [:error] [pid 2366:tid 2378] [client 20.239.188.199:1985] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aThXfUAeBjkmsNRkd1NVVQAAAMo"]
[Wed Dec 10 01:08:13.518255 2025] [:error] [pid 2366:tid 2387] [client 20.239.188.199:2011] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aThXfUAeBjkmsNRkd1NVVwAAANM"]
[Wed Dec 10 01:08:13.754487 2025] [:error] [pid 37041:tid 37050] [client 20.239.188.199:1978] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aThXfbuffDW8UzBwa1alIAAAAEc"]
[Wed Dec 10 01:08:13.993621 2025] [:error] [pid 2280:tid 2345] [client 20.239.188.199:1958] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aThXfXcqIB-8ALgw4ZpH7wAAAIg"]
[Wed Dec 10 01:08:14.229727 2025] [:error] [pid 37041:tid 37054] [client 20.239.188.199:1653] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aThXfruffDW8UzBwa1alIgAAAEs"]
[Wed Dec 10 01:08:14.467628 2025] [:error] [pid 2280:tid 2351] [client 20.239.188.199:1977] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aThXfncqIB-8ALgw4ZpH8gAAAI4"]
[Wed Dec 10 01:08:14.704286 2025] [:error] [pid 37041:tid 37066] [client 20.239.188.199:1950] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trplv.php"] [unique_id "aThXfruffDW8UzBwa1alJQAAAFc"]
[Wed Dec 10 01:08:14.939211 2025] [:error] [pid 2280:tid 2344] [client 20.239.188.199:1951] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trplv.php"] [unique_id "aThXfncqIB-8ALgw4ZpH8wAAAIc"]
[Wed Dec 10 01:08:15.178310 2025] [:error] [pid 2280:tid 2358] [client 20.239.188.199:21733] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trplv.php"] [unique_id "aThXf3cqIB-8ALgw4ZpH9gAAAJU"]
[Wed Dec 10 01:08:15.430586 2025] [:error] [pid 2280:tid 2341] [client 20.239.188.199:2014] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trplv.php"] [unique_id "aThXf3cqIB-8ALgw4ZpH-QAAAIQ"]
[Wed Dec 10 01:08:15.663378 2025] [:error] [pid 37041:tid 37067] [client 20.239.188.199:1861] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aThXf7uffDW8UzBwa1alKgAAAFg"]
[Wed Dec 10 01:08:15.897487 2025] [:error] [pid 2366:tid 2373] [client 20.239.188.199:1933] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aThXf0AeBjkmsNRkd1NVWgAAAMU"]
[Wed Dec 10 01:08:16.131176 2025] [:error] [pid 2277:tid 2288] [client 20.239.188.199:2009] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aThXgIWGo731r6eS-w5OpQAAAAY"]
[Wed Dec 10 01:08:16.419576 2025] [:error] [pid 2280:tid 2355] [client 20.239.188.199:2035] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aThXgHcqIB-8ALgw4ZpH_QAAAJI"]
[Wed Dec 10 01:08:16.662039 2025] [:error] [pid 2277:tid 2286] [client 20.239.188.199:21701] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aThXgIWGo731r6eS-w5OpwAAAAQ"]
[Wed Dec 10 01:08:16.895814 2025] [:error] [pid 2366:tid 2372] [client 20.239.188.199:2030] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aThXgEAeBjkmsNRkd1NVXwAAAMQ"]
[Wed Dec 10 01:08:17.132532 2025] [:error] [pid 37041:tid 37065] [client 20.239.188.199:1955] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aThXgbuffDW8UzBwa1alMQAAAFY"]
[Wed Dec 10 01:08:17.398600 2025] [:error] [pid 2366:tid 2385] [client 20.239.188.199:1988] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aThXgUAeBjkmsNRkd1NVYgAAANE"]
[Wed Dec 10 01:08:17.645682 2025] [:error] [pid 37041:tid 37047] [client 20.239.188.199:1418] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aThXgbuffDW8UzBwa1alMgAAAEQ"]
[Wed Dec 10 01:08:17.880063 2025] [:error] [pid 2366:tid 2384] [client 20.239.188.199:21720] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aThXgUAeBjkmsNRkd1NVZgAAANA"]
[Wed Dec 10 01:08:18.133172 2025] [:error] [pid 37041:tid 37063] [client 20.239.188.199:2000] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aThXgruffDW8UzBwa1alMwAAAFQ"]
[Wed Dec 10 01:08:18.372037 2025] [:error] [pid 2366:tid 2386] [client 20.239.188.199:1946] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aThXgkAeBjkmsNRkd1NVaAAAANI"]
[Wed Dec 10 01:08:18.618486 2025] [:error] [pid 2280:tid 2359] [client 20.239.188.199:21737] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aThXgncqIB-8ALgw4ZpIAgAAAJY"]
[Wed Dec 10 01:08:18.852414 2025] [:error] [pid 2280:tid 2349] [client 20.239.188.199:21704] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aThXgncqIB-8ALgw4ZpIBQAAAIw"]
[Wed Dec 10 01:08:19.089645 2025] [:error] [pid 37041:tid 37051] [client 20.239.188.199:1935] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aThXg7uffDW8UzBwa1alNgAAAEg"]
[Wed Dec 10 01:08:19.334388 2025] [:error] [pid 2279:tid 2315] [client 20.239.188.199:2004] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aThXg1mpdQscMcJOElWm3QAAAUU"]
[Wed Dec 10 01:08:19.584279 2025] [:error] [pid 37041:tid 37045] [client 20.239.188.199:1416] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aThXg7uffDW8UzBwa1alOQAAAEI"]
[Wed Dec 10 01:08:19.823014 2025] [:error] [pid 2279:tid 2322] [client 20.239.188.199:1408] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aThXg1mpdQscMcJOElWm4AAAAUw"]
[Wed Dec 10 01:08:20.094480 2025] [:error] [pid 2280:tid 2353] [client 20.239.188.199:2010] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aThXhHcqIB-8ALgw4ZpIBgAAAJA"]
[Wed Dec 10 01:08:20.337487 2025] [:error] [pid 2366:tid 2379] [client 20.239.188.199:1936] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aThXhEAeBjkmsNRkd1NVbAAAAMs"]
[Wed Dec 10 01:08:20.575894 2025] [:error] [pid 37041:tid 37058] [client 20.239.188.199:21746] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aThXhLuffDW8UzBwa1alPwAAAE8"]
[Wed Dec 10 01:08:20.812535 2025] [:error] [pid 2280:tid 2338] [client 20.239.188.199:1966] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aThXhHcqIB-8ALgw4ZpICQAAAIE"]
[Wed Dec 10 01:08:21.050273 2025] [:error] [pid 2279:tid 2333] [client 20.239.188.199:1643] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aThXhVmpdQscMcJOElWm4QAAAVc"]
[Wed Dec 10 01:08:21.350762 2025] [:error] [pid 2366:tid 2371] [client 20.239.188.199:1932] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aThXhUAeBjkmsNRkd1NVcAAAAMM"]
[Wed Dec 10 01:08:21.596450 2025] [:error] [pid 2366:tid 2380] [client 20.239.188.199:2026] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aThXhUAeBjkmsNRkd1NVcgAAAMw"]
[Wed Dec 10 01:08:21.831732 2025] [:error] [pid 2279:tid 2311] [client 20.239.188.199:2047] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aThXhVmpdQscMcJOElWm5AAAAUE"]
[Wed Dec 10 01:08:22.072883 2025] [:error] [pid 2366:tid 2391] [client 20.239.188.199:21734] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aThXhkAeBjkmsNRkd1NVcwAAANc"]
[Wed Dec 10 01:08:22.314419 2025] [:error] [pid 2280:tid 2347] [client 20.239.188.199:21750] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aThXhncqIB-8ALgw4ZpICwAAAIo"]
[Wed Dec 10 01:08:22.562030 2025] [:error] [pid 2280:tid 2344] [client 20.239.188.199:1983] [client 20.239.188.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aThXhncqIB-8ALgw4ZpIDQAAAIc"]
[Wed Dec 10 01:08:22.812062 2025] [:error] [pid 2280:tid 2354] [client 20.239.188.199:1925] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aThXhncqIB-8ALgw4ZpIDwAAAJE"]
[Wed Dec 10 01:08:23.050616 2025] [:error] [pid 2280:tid 2357] [client 20.239.188.199:1968] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aThXh3cqIB-8ALgw4ZpIEAAAAJQ"]
[Wed Dec 10 01:08:23.295368 2025] [:error] [pid 37041:tid 37056] [client 20.239.188.199:1647] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aThXh7uffDW8UzBwa1alSAAAAE0"]
[Wed Dec 10 01:08:23.528502 2025] [:error] [pid 37041:tid 37062] [client 20.239.188.199:1870] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aThXh7uffDW8UzBwa1alSQAAAFM"]
[Wed Dec 10 01:08:23.782763 2025] [:error] [pid 37041:tid 37065] [client 20.239.188.199:2022] [client 20.239.188.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aThXh7uffDW8UzBwa1alSgAAAFY"]
[Wed Dec 10 01:08:24.017442 2025] [:error] [pid 2366:tid 2376] [client 20.239.188.199:1606] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/license.php"] [unique_id "aThXiEAeBjkmsNRkd1NVegAAAMg"]
[Wed Dec 10 01:08:24.253850 2025] [:error] [pid 2280:tid 2353] [client 20.239.188.199:1989] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/license.php"] [unique_id "aThXiHcqIB-8ALgw4ZpIFQAAAJA"]
[Wed Dec 10 01:08:24.488175 2025] [:error] [pid 2280:tid 2342] [client 20.239.188.199:1412] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/license.php"] [unique_id "aThXiHcqIB-8ALgw4ZpIFwAAAIU"]
[Wed Dec 10 01:08:24.722097 2025] [:error] [pid 2280:tid 2351] [client 20.239.188.199:21698] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aThXiHcqIB-8ALgw4ZpIGQAAAI4"]
[Wed Dec 10 01:08:24.964633 2025] [:error] [pid 2366:tid 2379] [client 20.239.188.199:21735] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aThXiEAeBjkmsNRkd1NVfQAAAMs"]
[Wed Dec 10 01:08:25.202953 2025] [:error] [pid 2366:tid 2369] [client 20.239.188.199:1627] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aThXiUAeBjkmsNRkd1NVfwAAAME"]
[Wed Dec 10 01:08:25.436507 2025] [:error] [pid 2280:tid 2347] [client 20.239.188.199:1651] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aThXiXcqIB-8ALgw4ZpIGwAAAIo"]
[Wed Dec 10 01:08:25.678656 2025] [:error] [pid 2280:tid 2357] [client 20.239.188.199:21748] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aThXiXcqIB-8ALgw4ZpIHAAAAJQ"]
[Wed Dec 10 01:08:25.915962 2025] [:error] [pid 2366:tid 2385] [client 20.239.188.199:21696] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aThXiUAeBjkmsNRkd1NVgwAAANE"]
[Wed Dec 10 01:08:26.154734 2025] [:error] [pid 2280:tid 2343] [client 20.239.188.199:1433] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aThXincqIB-8ALgw4ZpIHwAAAIY"]
[Wed Dec 10 01:08:26.392032 2025] [:error] [pid 2366:tid 2391] [client 20.239.188.199:1998] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aThXikAeBjkmsNRkd1NVhQAAANc"]
[Wed Dec 10 01:08:26.643750 2025] [:error] [pid 2366:tid 2392] [client 20.239.188.199:1931] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php"] [unique_id "aThXikAeBjkmsNRkd1NVhgAAANg"]
[Wed Dec 10 01:08:26.885984 2025] [:error] [pid 37041:tid 37062] [client 20.239.188.199:21752] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php"] [unique_id "aThXiruffDW8UzBwa1alVQAAAFM"]
[Wed Dec 10 01:08:27.130097 2025] [:error] [pid 2279:tid 2317] [client 20.239.188.199:21700] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php"] [unique_id "aThXi1mpdQscMcJOElWm6QAAAUc"]
[Wed Dec 10 01:08:27.372392 2025] [:error] [pid 2279:tid 2321] [client 20.239.188.199:1923] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php"] [unique_id "aThXi1mpdQscMcJOElWm6gAAAUs"]
[Wed Dec 10 01:08:27.604840 2025] [:error] [pid 2277:tid 2301] [client 20.239.188.199:1934] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/znz2ra.php"] [unique_id "aThXi4WGo731r6eS-w5OrAAAABI"]
[Wed Dec 10 01:08:27.855446 2025] [:error] [pid 2277:tid 2287] [client 20.239.188.199:1924] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/znz2ra.php"] [unique_id "aThXi4WGo731r6eS-w5OrQAAAAU"]
[Wed Dec 10 01:08:28.092170 2025] [:error] [pid 2366:tid 2383] [client 20.239.188.199:2028] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/znz2ra.php"] [unique_id "aThXjEAeBjkmsNRkd1NVjgAAAM8"]
[Wed Dec 10 01:08:28.349506 2025] [:error] [pid 2279:tid 2332] [client 20.239.188.199:1463] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/znz2ra.php"] [unique_id "aThXjFmpdQscMcJOElWm7QAAAVY"]
[Wed Dec 10 01:08:28.636644 2025] [:error] [pid 2279:tid 2331] [client 20.239.188.199:1625] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aThXjFmpdQscMcJOElWm8AAAAVU"]
[Wed Dec 10 01:08:28.911505 2025] [:error] [pid 2366:tid 2388] [client 20.239.188.199:1963] [client 20.239.188.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aThXjEAeBjkmsNRkd1NVkQAAANQ"]
[Wed Dec 10 03:56:08.628640 2025] [:error] [pid 11266:tid 11283] [client 146.70.112.156:44676] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTh-2CXL_Qb0Ip3FW3lkYgAAAA0"]
[Wed Dec 10 03:56:09.865034 2025] [:error] [pid 11354:tid 11381] [client 146.70.112.156:39458] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTh-2e2TFO6mVSqWP8TRdAAAANg"]
[Wed Dec 10 03:56:11.831319 2025] [:error] [pid 11266:tid 11274] [client 146.70.112.156:39470] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aTh-2yXL_Qb0Ip3FW3lkcwAAAAQ"]
[Wed Dec 10 03:56:13.086241 2025] [:error] [pid 11354:tid 11358] [client 146.70.112.156:39478] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTh-3e2TFO6mVSqWP8TRhAAAAME"]
[Wed Dec 10 03:56:15.178805 2025] [:error] [pid 11354:tid 11362] [client 146.70.112.156:39484] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTh-3-2TFO6mVSqWP8TRlQAAAMU"]
[Wed Dec 10 03:56:15.930403 2025] [:error] [pid 11354:tid 11375] [client 146.70.112.156:41262] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTh-3-2TFO6mVSqWP8TRnAAAANI"]
[Wed Dec 10 03:56:16.416196 2025] [:error] [pid 11266:tid 11293] [client 146.70.112.156:41266] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTh-4CXL_Qb0Ip3FW3lkdwAAABc"]
[Wed Dec 10 03:56:16.924957 2025] [:error] [pid 11266:tid 11282] [client 146.70.112.156:41282] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTh-4CXL_Qb0Ip3FW3lkeQAAAAw"]
[Wed Dec 10 03:56:17.448303 2025] [:error] [pid 11354:tid 11377] [client 146.70.112.156:41298] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTh-4e2TFO6mVSqWP8TRoAAAANQ"]
[Wed Dec 10 03:56:17.954746 2025] [:error] [pid 11268:tid 11333] [client 146.70.112.156:41300] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTh-4bbpLcj9WqyQndzYnQAAAIk"]
[Wed Dec 10 03:56:18.727330 2025] [:error] [pid 11267:tid 11315] [client 146.70.112.156:41316] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTh-4oY2npWNIVl2IDxmuAAAAFI"]
[Wed Dec 10 03:56:19.721329 2025] [:error] [pid 11266:tid 11294] [client 146.70.112.156:41326] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aTh-4yXL_Qb0Ip3FW3lkhAAAABg"]
[Wed Dec 10 03:56:20.703917 2025] [:error] [pid 11268:tid 11337] [client 146.70.112.156:41334] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTh-5LbpLcj9WqyQndzYpgAAAI0"]
[Wed Dec 10 03:56:21.452470 2025] [:error] [pid 11268:tid 11324] [client 146.70.112.156:41342] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTh-5bbpLcj9WqyQndzYrgAAAIA"]
[Wed Dec 10 03:56:22.219710 2025] [:error] [pid 11268:tid 11334] [client 146.70.112.156:41358] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTh-5rbpLcj9WqyQndzYsQAAAIo"]
[Wed Dec 10 03:56:24.329450 2025] [:error] [pid 11267:tid 11308] [client 146.70.112.156:41370] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTh-6IY2npWNIVl2IDxmyAAAAEs"]
[Wed Dec 10 03:56:25.114537 2025] [:error] [pid 11354:tid 11379] [client 146.70.112.156:41380] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTh-6e2TFO6mVSqWP8TRrQAAANY"]
[Wed Dec 10 03:56:26.113945 2025] [:error] [pid 11266:tid 11275] [client 146.70.112.156:41536] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aTh-6iXL_Qb0Ip3FW3lkoQAAAAU"]
[Wed Dec 10 03:56:26.883361 2025] [:error] [pid 11267:tid 11304] [client 146.70.112.156:41550] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTh-6oY2npWNIVl2IDxm1QAAAEc"]
[Wed Dec 10 03:56:28.375257 2025] [:error] [pid 11267:tid 11315] [client 146.70.112.156:41564] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTh-7IY2npWNIVl2IDxm6wAAAFI"]
[Wed Dec 10 03:56:29.114152 2025] [:error] [pid 11354:tid 11369] [client 146.70.112.156:41566] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTh-7e2TFO6mVSqWP8TRuAAAAMw"]
[Wed Dec 10 03:56:29.887395 2025] [:error] [pid 11266:tid 11275] [client 146.70.112.156:41576] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTh-7SXL_Qb0Ip3FW3lkqAAAAAU"]
[Wed Dec 10 03:56:30.427691 2025] [:error] [pid 11267:tid 11307] [client 146.70.112.156:41590] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTh-7oY2npWNIVl2IDxm8QAAAEo"]
[Wed Dec 10 03:56:30.979803 2025] [:error] [pid 11268:tid 11348] [client 146.70.112.156:41592] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTh-7rbpLcj9WqyQndzYwQAAAJg"]
[Wed Dec 10 03:56:32.204040 2025] [:error] [pid 11354:tid 11369] [client 146.70.112.156:41604] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aTh-8O2TFO6mVSqWP8TRxQAAAMw"]
[Wed Dec 10 03:56:32.689730 2025] [:error] [pid 11266:tid 11279] [client 146.70.112.156:41616] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aTh-8CXL_Qb0Ip3FW3lkqQAAAAk"]
[Wed Dec 10 03:56:33.178690 2025] [:error] [pid 11266:tid 11292] [client 146.70.112.156:41628] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTh-8SXL_Qb0Ip3FW3lkqwAAABY"]
[Wed Dec 10 03:56:35.817723 2025] [:error] [pid 11354:tid 11377] [client 146.70.112.156:41636] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aTh-8-2TFO6mVSqWP8TR1QAAANQ"]
[Wed Dec 10 03:56:37.136815 2025] [:error] [pid 11266:tid 11292] [client 146.70.112.156:45692] [client 146.70.112.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.112.156, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTh-9SXL_Qb0Ip3FW3lkvgAAABY"]
[Wed Dec 10 03:56:40.346654 2025] [:error] [pid 11266:tid 11292] [client 146.70.112.156:45692] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTh--CXL_Qb0Ip3FW3lk0gAAABY"]
[Wed Dec 10 03:56:41.345860 2025] [:error] [pid 11268:tid 11332] [client 146.70.112.156:45702] [client 146.70.112.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.112.156, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTh--bbpLcj9WqyQndzY2AAAAIg"]
[Wed Dec 10 03:56:41.845938 2025] [:error] [pid 11268:tid 11342] [client 146.70.112.156:45702] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aTh--bbpLcj9WqyQndzY3AAAAJI"]
[Wed Dec 10 03:56:44.314212 2025] [:error] [pid 11267:tid 11304] [client 146.70.112.156:45708] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTh-_IY2npWNIVl2IDxnGwAAAEc"]
[Wed Dec 10 03:56:46.781014 2025] [:error] [pid 11267:tid 11298] [client 146.70.112.156:45716] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTh-_oY2npWNIVl2IDxnMgAAAEE"]
[Wed Dec 10 03:56:47.758274 2025] [:error] [pid 11266:tid 11278] [client 146.70.112.156:47484] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTh-_yXL_Qb0Ip3FW3lk4QAAAAg"]
[Wed Dec 10 03:56:49.056731 2025] [:error] [pid 11267:tid 11304] [client 146.70.112.156:47486] [client 146.70.112.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.112.156, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aTh_AYY2npWNIVl2IDxnOwAAAEc"]
[Wed Dec 10 03:56:49.324043 2025] [:error] [pid 11267:tid 11313] [client 146.70.112.156:47486] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTh_AYY2npWNIVl2IDxnPAAAAFA"]
[Wed Dec 10 03:56:54.364008 2025] [:error] [pid 11354:tid 11368] [client 146.70.112.156:47488] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTh_Bu2TFO6mVSqWP8TSEgAAAMs"]
[Wed Dec 10 03:56:55.683028 2025] [:error] [pid 11268:tid 11339] [client 146.70.112.156:47500] [client 146.70.112.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.112.156, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTh_B7bpLcj9WqyQndzY-AAAAI8"]
[Wed Dec 10 03:56:56.746331 2025] [:error] [pid 11268:tid 11328] [client 146.70.112.156:47500] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTh_CLbpLcj9WqyQndzY_QAAAIQ"]
[Wed Dec 10 03:56:57.495243 2025] [:error] [pid 11354:tid 11377] [client 146.70.112.156:54250] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aTh_Ce2TFO6mVSqWP8TSFwAAANQ"]
[Wed Dec 10 03:56:58.480698 2025] [:error] [pid 11354:tid 11356] [client 146.70.112.156:54262] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTh_Cu2TFO6mVSqWP8TSIAAAAMA"]
[Wed Dec 10 03:56:59.711996 2025] [:error] [pid 11354:tid 11378] [client 146.70.112.156:54272] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTh_C-2TFO6mVSqWP8TSLAAAANU"]
[Wed Dec 10 03:57:00.216189 2025] [:error] [pid 11354:tid 11363] [client 146.70.112.156:54274] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTh_DO2TFO6mVSqWP8TSMAAAAMY"]
[Wed Dec 10 03:57:01.969610 2025] [:error] [pid 11267:tid 11314] [client 146.70.112.156:54288] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTh_DYY2npWNIVl2IDxnXgAAAFE"]
[Wed Dec 10 03:57:02.736137 2025] [:error] [pid 11268:tid 11333] [client 146.70.112.156:54294] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTh_DrbpLcj9WqyQndzZCwAAAIk"]
[Wed Dec 10 03:57:03.976417 2025] [:error] [pid 11354:tid 11371] [client 146.70.112.156:54296] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aTh_D-2TFO6mVSqWP8TSQgAAAM4"]
[Wed Dec 10 03:57:05.206177 2025] [:error] [pid 11267:tid 11317] [client 146.70.112.156:54298] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTh_EYY2npWNIVl2IDxnaAAAAFQ"]
[Wed Dec 10 03:57:06.240207 2025] [:error] [pid 11268:tid 11338] [client 146.70.112.156:40832] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aTh_ErbpLcj9WqyQndzZFgAAAI4"]
[Wed Dec 10 03:57:07.490449 2025] [:error] [pid 11267:tid 11318] [client 146.70.112.156:40838] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTh_E4Y2npWNIVl2IDxncQAAAFU"]
[Wed Dec 10 03:57:09.722783 2025] [:error] [pid 11268:tid 11338] [client 146.70.112.156:40850] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTh_FbbpLcj9WqyQndzZJAAAAI4"]
[Wed Dec 10 03:57:10.234427 2025] [:error] [pid 11267:tid 11298] [client 146.70.112.156:40866] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aTh_FoY2npWNIVl2IDxndwAAAEE"]
[Wed Dec 10 03:57:10.756638 2025] [:error] [pid 11354:tid 11360] [client 146.70.112.156:40882] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTh_Fu2TFO6mVSqWP8TSWAAAAMM"]
[Wed Dec 10 03:57:11.270807 2025] [:error] [pid 11267:tid 11303] [client 146.70.112.156:40896] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTh_F4Y2npWNIVl2IDxnegAAAEY"]
[Wed Dec 10 03:57:12.045043 2025] [:error] [pid 11268:tid 11337] [client 146.70.112.156:40904] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTh_GLbpLcj9WqyQndzZYQAAAI0"]
[Wed Dec 10 03:57:12.571837 2025] [:error] [pid 11267:tid 11298] [client 146.70.112.156:40908] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTh_GIY2npWNIVl2IDxnggAAAEE"]
[Wed Dec 10 03:57:13.570688 2025] [:error] [pid 11354:tid 11376] [client 146.70.112.156:40922] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTh_Ge2TFO6mVSqWP8TSYgAAANM"]
[Wed Dec 10 03:57:14.057757 2025] [:error] [pid 11266:tid 11287] [client 146.70.112.156:40928] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTh_GiXL_Qb0Ip3FW3llDQAAABE"]
[Wed Dec 10 03:57:14.563852 2025] [:error] [pid 11354:tid 11371] [client 146.70.112.156:40942] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTh_Gu2TFO6mVSqWP8TSZAAAAM4"]
[Wed Dec 10 03:57:15.070492 2025] [:error] [pid 11268:tid 11337] [client 146.70.112.156:40952] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTh_G7bpLcj9WqyQndzZbAAAAI0"]
[Wed Dec 10 03:57:15.802789 2025] [:error] [pid 11266:tid 11287] [client 146.70.112.156:60374] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTh_GyXL_Qb0Ip3FW3llFwAAABE"]
[Wed Dec 10 03:57:16.782642 2025] [:error] [pid 11267:tid 11319] [client 146.70.112.156:60382] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTh_HIY2npWNIVl2IDxnjgAAAFY"]
[Wed Dec 10 03:57:18.257428 2025] [:error] [pid 11266:tid 11280] [client 146.70.112.156:60394] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTh_HiXL_Qb0Ip3FW3llIgAAAAo"]
[Wed Dec 10 03:57:20.617240 2025] [:error] [pid 11266:tid 11284] [client 146.70.112.156:60402] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aTh_ICXL_Qb0Ip3FW3llLwAAAA4"]
[Wed Dec 10 03:57:21.863916 2025] [:error] [pid 11354:tid 11370] [client 146.70.112.156:60412] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTh_Ie2TFO6mVSqWP8TSeQAAAM0"]
[Wed Dec 10 03:57:22.350097 2025] [:error] [pid 11267:tid 11314] [client 146.70.112.156:60422] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTh_IoY2npWNIVl2IDxnmwAAAFE"]
[Wed Dec 10 03:57:23.911818 2025] [:error] [pid 11268:tid 11334] [client 146.70.112.156:60426] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTh_I7bpLcj9WqyQndzZiAAAAIo"]
[Wed Dec 10 03:57:25.237333 2025] [proxy_fcgi:error] [pid 11268:tid 11329] [client 146.70.112.156:60434] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:57:25.502320 2025] [proxy_fcgi:error] [pid 11268:tid 11333] [client 146.70.112.156:60434] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:57:25.769869 2025] [proxy_fcgi:error] [pid 11268:tid 11341] [client 146.70.112.156:60434] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:57:27.090545 2025] [:error] [pid 11268:tid 11348] [client 146.70.112.156:60434] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTh_J7bpLcj9WqyQndzZngAAAJg"]
[Wed Dec 10 03:57:27.612148 2025] [:error] [pid 11354:tid 11370] [client 146.70.112.156:50882] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTh_J-2TFO6mVSqWP8TSgQAAAM0"]
[Wed Dec 10 03:57:28.135323 2025] [:error] [pid 11267:tid 11299] [client 146.70.112.156:50890] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTh_KIY2npWNIVl2IDxnqQAAAEI"]
[Wed Dec 10 03:57:28.659718 2025] [:error] [pid 11266:tid 11279] [client 146.70.112.156:50898] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTh_KCXL_Qb0Ip3FW3llQQAAAAk"]
[Wed Dec 10 03:57:29.164104 2025] [:error] [pid 11354:tid 11363] [client 146.70.112.156:50914] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTh_Ke2TFO6mVSqWP8TShAAAAMY"]
[Wed Dec 10 03:57:29.670485 2025] [:error] [pid 11266:tid 11270] [client 146.70.112.156:50928] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTh_KSXL_Qb0Ip3FW3llRQAAAAA"]
[Wed Dec 10 03:57:30.462935 2025] [:error] [pid 11268:tid 11339] [client 146.70.112.156:50936] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTh_KrbpLcj9WqyQndzZpgAAAI8"]
[Wed Dec 10 03:57:30.987264 2025] [:error] [pid 11267:tid 11300] [client 146.70.112.156:50946] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTh_KoY2npWNIVl2IDxnrwAAAEM"]
[Wed Dec 10 03:57:31.508855 2025] [:error] [pid 11267:tid 11317] [client 146.70.112.156:50962] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTh_K4Y2npWNIVl2IDxnsQAAAFQ"]
[Wed Dec 10 03:57:32.030980 2025] [:error] [pid 11266:tid 11276] [client 146.70.112.156:50970] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTh_LCXL_Qb0Ip3FW3llSAAAAAY"]
[Wed Dec 10 03:57:33.035091 2025] [:error] [pid 11354:tid 11377] [client 146.70.112.156:50982] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTh_Le2TFO6mVSqWP8TSjgAAANQ"]
[Wed Dec 10 03:57:33.806611 2025] [:error] [pid 11267:tid 11315] [client 146.70.112.156:50992] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTh_LYY2npWNIVl2IDxntgAAAFI"]
[Wed Dec 10 03:57:34.863584 2025] [:error] [pid 11354:tid 11379] [client 146.70.112.156:51004] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTh_Lu2TFO6mVSqWP8TSlQAAANY"]
[Wed Dec 10 03:57:35.868633 2025] [:error] [pid 11266:tid 11286] [client 146.70.112.156:51006] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aTh_LyXL_Qb0Ip3FW3llUQAAABA"]
[Wed Dec 10 03:57:37.186102 2025] [:error] [pid 11354:tid 11368] [client 146.70.112.156:48194] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTh_Me2TFO6mVSqWP8TSnQAAAMs"]
[Wed Dec 10 03:57:38.774389 2025] [:error] [pid 11267:tid 11302] [client 146.70.112.156:48198] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTh_MoY2npWNIVl2IDxnvwAAAEU"]
[Wed Dec 10 03:57:39.560318 2025] [:error] [pid 11268:tid 11326] [client 146.70.112.156:48210] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aTh_M7bpLcj9WqyQndzZswAAAII"]
[Wed Dec 10 03:57:45.361147 2025] [:error] [pid 11268:tid 11339] [client 146.70.112.156:48216] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTh_ObbpLcj9WqyQndzZywAAAI8"]
[Wed Dec 10 03:57:45.845881 2025] [:error] [pid 11267:tid 11303] [client 146.70.112.156:49336] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTh_OYY2npWNIVl2IDxnyAAAAEY"]
[Wed Dec 10 03:57:46.331870 2025] [:error] [pid 11354:tid 11370] [client 146.70.112.156:49342] [client 146.70.112.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.112.156, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTh_Ou2TFO6mVSqWP8TSuAAAAM0"]
[Wed Dec 10 03:57:46.827092 2025] [:error] [pid 11354:tid 11371] [client 146.70.112.156:49342] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTh_Ou2TFO6mVSqWP8TSugAAAM4"]
[Wed Dec 10 03:57:47.865106 2025] [:error] [pid 11268:tid 11344] [client 146.70.112.156:49348] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTh_O7bpLcj9WqyQndzZ0AAAAJQ"]
[Wed Dec 10 03:57:48.388234 2025] [:error] [pid 11354:tid 11367] [client 146.70.112.156:49360] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTh_PO2TFO6mVSqWP8TSvgAAAMo"]
[Wed Dec 10 03:57:49.973692 2025] [:error] [pid 11354:tid 11374] [client 146.70.112.156:49372] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTh_Pe2TFO6mVSqWP8TSyAAAANE"]
[Wed Dec 10 03:57:50.476410 2025] [:error] [pid 11354:tid 11368] [client 146.70.112.156:49376] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aTh_Pu2TFO6mVSqWP8TSyQAAAMs"]
[Wed Dec 10 03:57:52.195160 2025] [:error] [pid 11354:tid 11373] [client 146.70.112.156:49392] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTh_QO2TFO6mVSqWP8TS0gAAANA"]
[Wed Dec 10 03:57:53.249259 2025] [proxy_fcgi:error] [pid 11268:tid 11342] [client 146.70.112.156:49402] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:57:53.781889 2025] [:error] [pid 11268:tid 11339] [client 146.70.112.156:49402] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aTh_QbbpLcj9WqyQndzZ4wAAAI8"]
[Wed Dec 10 03:57:54.309062 2025] [:error] [pid 11267:tid 11312] [client 146.70.112.156:49408] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aTh_QoY2npWNIVl2IDxn0QAAAE8"]
[Wed Dec 10 03:57:55.316120 2025] [:error] [pid 11268:tid 11330] [client 146.70.112.156:49420] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTh_Q7bpLcj9WqyQndzZ5gAAAIY"]
[Wed Dec 10 03:57:55.801191 2025] [:error] [pid 11268:tid 11329] [client 146.70.112.156:57598] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTh_Q7bpLcj9WqyQndzZ5wAAAIU"]
[Wed Dec 10 03:57:59.318722 2025] [:error] [pid 11354:tid 11361] [client 146.70.112.156:57608] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aTh_R-2TFO6mVSqWP8TS6gAAAMQ"]
[Wed Dec 10 03:57:59.814755 2025] [:error] [pid 11268:tid 11345] [client 146.70.112.156:57612] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTh_R7bpLcj9WqyQndzZ6QAAAJU"]
[Wed Dec 10 03:58:01.294911 2025] [:error] [pid 11266:tid 11282] [client 146.70.112.156:57620] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTh_SSXL_Qb0Ip3FW3llawAAAAw"]
[Wed Dec 10 03:58:01.784927 2025] [:error] [pid 11354:tid 11368] [client 146.70.112.156:57628] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTh_Se2TFO6mVSqWP8TS7QAAAMs"]
[Wed Dec 10 03:58:02.273875 2025] [:error] [pid 11267:tid 11312] [client 146.70.112.156:57642] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTh_SoY2npWNIVl2IDxn4AAAAE8"]
[Wed Dec 10 03:58:04.114380 2025] [:error] [pid 11268:tid 11345] [client 146.70.112.156:57656] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTh_TLbpLcj9WqyQndzZ_AAAAJU"]
[Wed Dec 10 03:58:04.869606 2025] [:error] [pid 11266:tid 11278] [client 146.70.112.156:57670] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTh_TCXL_Qb0Ip3FW3llcwAAAAg"]
[Wed Dec 10 03:58:07.245571 2025] [:error] [pid 11266:tid 11271] [client 146.70.112.156:57678] [client 146.70.112.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.112.156, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aTh_TyXL_Qb0Ip3FW3llgQAAAAE"]
[Wed Dec 10 03:58:08.845136 2025] [:error] [pid 11266:tid 11277] [client 146.70.112.156:57678] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTh_UCXL_Qb0Ip3FW3lliQAAAAc"]
[Wed Dec 10 03:58:09.363854 2025] [:error] [pid 11354:tid 11358] [client 146.70.112.156:55760] [client 146.70.112.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.112.156, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTh_Ue2TFO6mVSqWP8TS_AAAAME"]
[Wed Dec 10 03:58:13.549769 2025] [proxy_fcgi:error] [pid 11354:tid 11377] [client 146.70.112.156:55760] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:58:17.282924 2025] [:error] [pid 11354:tid 11378] [client 146.70.112.156:55760] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTh_We2TFO6mVSqWP8TTMwAAANU"]
[Wed Dec 10 03:58:18.588387 2025] [:error] [pid 11354:tid 11365] [client 146.70.112.156:42452] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTh_Wu2TFO6mVSqWP8TTOwAAAMg"]
[Wed Dec 10 03:58:19.590742 2025] [:error] [pid 11354:tid 11373] [client 146.70.112.156:42462] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTh_W-2TFO6mVSqWP8TTPgAAANA"]
[Wed Dec 10 03:58:22.304729 2025] [:error] [pid 11268:tid 11329] [client 146.70.112.156:42468] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTh_XrbpLcj9WqyQndzaJAAAAIU"]
[Wed Dec 10 03:58:23.352366 2025] [:error] [pid 11267:tid 11313] [client 146.70.112.156:42474] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTh_X4Y2npWNIVl2IDxn-gAAAFA"]
[Wed Dec 10 03:58:24.108934 2025] [:error] [pid 11267:tid 11314] [client 146.70.112.156:42488] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTh_YIY2npWNIVl2IDxn_AAAAFE"]
[Wed Dec 10 03:58:25.615542 2025] [proxy_fcgi:error] [pid 11268:tid 11333] [client 146.70.112.156:42498] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:58:25.863817 2025] [proxy_fcgi:error] [pid 11268:tid 11325] [client 146.70.112.156:42498] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:58:26.106889 2025] [:error] [pid 11268:tid 11334] [client 146.70.112.156:42498] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTh_YrbpLcj9WqyQndzaNwAAAIo"]
[Wed Dec 10 03:58:26.613610 2025] [:error] [pid 11267:tid 11313] [client 146.70.112.156:56030] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTh_YoY2npWNIVl2IDxoDAAAAFA"]
[Wed Dec 10 03:58:28.850909 2025] [:error] [pid 11354:tid 11358] [client 146.70.112.156:56042] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTh_ZO2TFO6mVSqWP8TTVgAAAME"]
[Wed Dec 10 03:58:29.592637 2025] [:error] [pid 11267:tid 11305] [client 146.70.112.156:56054] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aTh_ZYY2npWNIVl2IDxoHAAAAEg"]
[Wed Dec 10 03:58:30.906862 2025] [:error] [pid 11354:tid 11361] [client 146.70.112.156:56056] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTh_Zu2TFO6mVSqWP8TTXgAAAMQ"]
[Wed Dec 10 03:58:33.159792 2025] [:error] [pid 11266:tid 11288] [client 146.70.112.156:56064] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTh_aSXL_Qb0Ip3FW3lltwAAABI"]
[Wed Dec 10 03:58:33.651815 2025] [proxy_fcgi:error] [pid 11267:tid 11302] [client 146.70.112.156:56080] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:58:34.387893 2025] [:error] [pid 11267:tid 11314] [client 146.70.112.156:56080] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTh_aoY2npWNIVl2IDxoJwAAAFE"]
[Wed Dec 10 03:58:36.224323 2025] [proxy_fcgi:error] [pid 11268:tid 11345] [client 146.70.112.156:56086] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:58:36.751251 2025] [:error] [pid 11268:tid 11344] [client 146.70.112.156:56086] [client 146.70.112.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.112.156, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTh_bLbpLcj9WqyQndzaZgAAAJQ"]
[Wed Dec 10 03:58:38.079521 2025] [:error] [pid 11268:tid 11340] [client 146.70.112.156:56086] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTh_brbpLcj9WqyQndzabQAAAJA"]
[Wed Dec 10 03:58:38.866658 2025] [:error] [pid 11268:tid 11342] [client 146.70.112.156:45470] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTh_brbpLcj9WqyQndzacgAAAJI"]
[Wed Dec 10 03:58:40.376767 2025] [:error] [pid 11268:tid 11335] [client 146.70.112.156:45482] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTh_cLbpLcj9WqyQndzaegAAAIs"]
[Wed Dec 10 03:58:45.074742 2025] [:error] [pid 11354:tid 11379] [client 146.70.112.156:45484] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aTh_de2TFO6mVSqWP8TTbAAAANY"]
[Wed Dec 10 03:58:45.852831 2025] [:error] [pid 11354:tid 11381] [client 146.70.112.156:36102] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aTh_de2TFO6mVSqWP8TTcQAAANg"]
[Wed Dec 10 03:58:47.157067 2025] [:error] [pid 11267:tid 11311] [client 146.70.112.156:36108] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aTh_d4Y2npWNIVl2IDxoMwAAAE4"]
[Wed Dec 10 03:58:48.161394 2025] [proxy_fcgi:error] [pid 11354:tid 11356] [client 146.70.112.156:36110] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:58:48.404322 2025] [:error] [pid 11354:tid 11370] [client 146.70.112.156:36110] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aTh_eO2TFO6mVSqWP8TTdwAAAM0"]
[Wed Dec 10 03:58:49.145389 2025] [:error] [pid 11354:tid 11359] [client 146.70.112.156:36118] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aTh_ee2TFO6mVSqWP8TTeQAAAMI"]
[Wed Dec 10 03:58:49.634008 2025] [:error] [pid 11354:tid 11364] [client 146.70.112.156:36134] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aTh_ee2TFO6mVSqWP8TTegAAAMc"]
[Wed Dec 10 03:58:50.137445 2025] [:error] [pid 11268:tid 11338] [client 146.70.112.156:36150] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTh_erbpLcj9WqyQndzajwAAAI4"]
[Wed Dec 10 03:58:50.659374 2025] [:error] [pid 11267:tid 11321] [client 146.70.112.156:36160] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aTh_eoY2npWNIVl2IDxoNgAAAFg"]
[Wed Dec 10 03:58:51.164068 2025] [:error] [pid 11268:tid 11328] [client 146.70.112.156:36172] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aTh_e7bpLcj9WqyQndzakQAAAIQ"]
[Wed Dec 10 03:58:51.652820 2025] [:error] [pid 11354:tid 11360] [client 146.70.112.156:36182] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aTh_e-2TFO6mVSqWP8TTewAAAMM"]
[Wed Dec 10 03:58:52.694424 2025] [:error] [pid 11354:tid 11370] [client 146.70.112.156:36198] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aTh_fO2TFO6mVSqWP8TTgAAAAM0"]
[Wed Dec 10 03:58:53.200128 2025] [:error] [pid 11268:tid 11326] [client 146.70.112.156:12796] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aTh_fbbpLcj9WqyQndzanAAAAII"]
[Wed Dec 10 03:58:53.704945 2025] [:error] [pid 11354:tid 11359] [client 146.70.112.156:36224] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aTh_fe2TFO6mVSqWP8TThAAAAMI"]
[Wed Dec 10 03:58:54.502670 2025] [:error] [pid 11266:tid 11292] [client 146.70.112.156:36240] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aTh_fiXL_Qb0Ip3FW3llywAAABY"]
[Wed Dec 10 03:58:55.511801 2025] [:error] [pid 11268:tid 11347] [client 146.70.112.156:36246] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aTh_f7bpLcj9WqyQndzaqwAAAJc"]
[Wed Dec 10 03:58:56.005893 2025] [proxy_fcgi:error] [pid 11266:tid 11281] [client 146.70.112.156:44828] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 03:58:56.997323 2025] [:error] [pid 11266:tid 11294] [client 146.70.112.156:44828] [client 146.70.112.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.112.156, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aTh_gCXL_Qb0Ip3FW3ll0wAAABg"]
[Wed Dec 10 03:58:58.484985 2025] [:error] [pid 11266:tid 11273] [client 146.70.112.156:44828] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aTh_giXL_Qb0Ip3FW3ll2QAAAAM"]
[Wed Dec 10 03:58:58.971108 2025] [:error] [pid 11354:tid 11359] [client 146.70.112.156:44838] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aTh_gu2TFO6mVSqWP8TTlQAAAMI"]
[Wed Dec 10 03:59:03.994134 2025] [:error] [pid 11354:tid 11368] [client 146.70.112.156:44840] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTh_h-2TFO6mVSqWP8TT3gAAAMs"]
[Wed Dec 10 03:59:04.821280 2025] [:error] [pid 11266:tid 11287] [client 146.70.112.156:44846] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aTh_iCXL_Qb0Ip3FW3ll3gAAABE"]
[Wed Dec 10 03:59:05.326219 2025] [:error] [pid 11267:tid 11301] [client 146.70.112.156:44848] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aTh_iYY2npWNIVl2IDxoTAAAAEQ"]
[Wed Dec 10 03:59:07.338175 2025] [:error] [pid 11266:tid 11289] [client 146.70.112.156:38012] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aTh_iyXL_Qb0Ip3FW3ll6gAAABM"]
[Wed Dec 10 03:59:07.827008 2025] [:error] [pid 11266:tid 11271] [client 146.70.112.156:38028] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aTh_iyXL_Qb0Ip3FW3ll7AAAAAE"]
[Wed Dec 10 03:59:08.331104 2025] [:error] [pid 11354:tid 11370] [client 146.70.112.156:38042] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aTh_jO2TFO6mVSqWP8TT5wAAAM0"]
[Wed Dec 10 03:59:09.835688 2025] [:error] [pid 11266:tid 11285] [client 146.70.112.156:38044] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aTh_jSXL_Qb0Ip3FW3ll8wAAAA8"]
[Wed Dec 10 03:59:10.573714 2025] [:error] [pid 11268:tid 11331] [client 146.70.112.156:38054] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aTh_jrbpLcj9WqyQndza1QAAAIc"]
[Wed Dec 10 03:59:11.558450 2025] [:error] [pid 11266:tid 11270] [client 146.70.112.156:38062] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aTh_jyXL_Qb0Ip3FW3ll-QAAAAA"]
[Wed Dec 10 03:59:14.804659 2025] [:error] [pid 11354:tid 11356] [client 146.70.112.156:38070] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTh_ku2TFO6mVSqWP8TUAQAAAMA"]
[Wed Dec 10 03:59:15.787796 2025] [:error] [pid 11267:tid 11297] [client 146.70.112.156:38082] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aTh_k4Y2npWNIVl2IDxoWAAAAEA"]
[Wed Dec 10 03:59:17.756538 2025] [:error] [pid 11268:tid 11332] [client 146.70.112.156:52716] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aTh_lbbpLcj9WqyQndza4gAAAIg"]
[Wed Dec 10 03:59:18.736032 2025] [:error] [pid 11354:tid 11370] [client 146.70.112.156:52732] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aTh_lu2TFO6mVSqWP8TUCwAAAM0"]
[Wed Dec 10 03:59:20.227911 2025] [:error] [pid 11354:tid 11363] [client 146.70.112.156:52738] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aTh_mO2TFO6mVSqWP8TUEwAAAMY"]
[Wed Dec 10 03:59:21.960479 2025] [:error] [pid 11354:tid 11369] [client 146.70.112.156:52750] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aTh_me2TFO6mVSqWP8TUHQAAAMw"]
[Wed Dec 10 03:59:22.953858 2025] [:error] [pid 11354:tid 11375] [client 146.70.112.156:52758] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aTh_mu2TFO6mVSqWP8TUIgAAANI"]
[Wed Dec 10 03:59:23.443387 2025] [:error] [pid 11268:tid 11348] [client 146.70.112.156:52772] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aTh_m7bpLcj9WqyQndza7QAAAJg"]
[Wed Dec 10 03:59:25.172936 2025] [:error] [pid 11354:tid 11377] [client 146.70.112.156:55287] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aTh_ne2TFO6mVSqWP8TULgAAANQ"]
[Wed Dec 10 03:59:26.893797 2025] [:error] [pid 11267:tid 11306] [client 146.70.112.156:43294] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aTh_noY2npWNIVl2IDxoZwAAAEk"]
[Wed Dec 10 03:59:28.370685 2025] [:error] [pid 11268:tid 11333] [client 146.70.112.156:43306] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTh_oLbpLcj9WqyQndza9wAAAIk"]
[Wed Dec 10 03:59:28.858012 2025] [:error] [pid 11267:tid 11320] [client 146.70.112.156:43320] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aTh_oIY2npWNIVl2IDxoawAAAFc"]
[Wed Dec 10 03:59:29.836538 2025] [:error] [pid 11354:tid 11362] [client 146.70.112.156:43324] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aTh_oe2TFO6mVSqWP8TUOgAAAMU"]
[Wed Dec 10 03:59:31.132909 2025] [:error] [pid 11266:tid 11278] [client 146.70.112.156:43340] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aTh_oyXL_Qb0Ip3FW3lmBgAAAAg"]
[Wed Dec 10 03:59:31.636506 2025] [:error] [pid 11268:tid 11325] [client 146.70.112.156:43346] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aTh_o7bpLcj9WqyQndza-QAAAIE"]
[Wed Dec 10 03:59:33.611955 2025] [:error] [pid 11267:tid 11301] [client 146.70.112.156:43350] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aTh_pYY2npWNIVl2IDxoeAAAAEQ"]
[Wed Dec 10 03:59:34.646129 2025] [:error] [pid 11267:tid 11298] [client 146.70.112.156:43352] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aTh_poY2npWNIVl2IDxofgAAAEE"]
[Wed Dec 10 03:59:35.167595 2025] [:error] [pid 11266:tid 11276] [client 146.70.112.156:43356] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aTh_pyXL_Qb0Ip3FW3lmDQAAAAY"]
[Wed Dec 10 03:59:36.220874 2025] [:error] [pid 11268:tid 11342] [client 146.70.112.156:47132] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aTh_qLbpLcj9WqyQndzbAQAAAJI"]
[Wed Dec 10 03:59:37.010291 2025] [:error] [pid 11267:tid 11320] [client 146.70.112.156:47138] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aTh_qYY2npWNIVl2IDxoggAAAFc"]
[Wed Dec 10 03:59:38.756054 2025] [:error] [pid 11354:tid 11379] [client 146.70.112.156:47144] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aTh_qu2TFO6mVSqWP8TUTgAAANY"]
[Wed Dec 10 03:59:41.066600 2025] [:error] [pid 11268:tid 11328] [client 146.70.112.156:47148] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aTh_rbbpLcj9WqyQndzbBwAAAIQ"]
[Wed Dec 10 03:59:42.055029 2025] [:error] [pid 11354:tid 11370] [client 146.70.112.156:47156] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aTh_ru2TFO6mVSqWP8TUVgAAAM0"]
[Wed Dec 10 03:59:42.786189 2025] [:error] [pid 11267:tid 11301] [client 146.70.112.156:47170] [client 146.70.112.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aTh_roY2npWNIVl2IDxoiAAAAEQ"]
[Wed Dec 10 03:59:43.555204 2025] [:error] [pid 11354:tid 11369] [client 62.93.167.104:47174] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aTh_r-2TFO6mVSqWP8TUWgAAAMw"]
[Wed Dec 10 03:59:44.091623 2025] [:error] [pid 11267:tid 11316] [client 62.93.167.104:47178] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aTh_sIY2npWNIVl2IDxoiQAAAFM"]
[Wed Dec 10 03:59:44.669924 2025] [:error] [pid 11354:tid 11356] [client 62.93.167.104:47182] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aTh_sO2TFO6mVSqWP8TUXQAAAMA"]
[Wed Dec 10 03:59:46.989390 2025] [:error] [pid 11354:tid 11367] [client 62.93.167.104:47198] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aTh_su2TFO6mVSqWP8TUbAAAAMo"]
[Wed Dec 10 03:59:48.344672 2025] [:error] [pid 11354:tid 11363] [client 62.93.167.104:49372] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aTh_tO2TFO6mVSqWP8TUdwAAAMY"]
[Wed Dec 10 03:59:49.664719 2025] [:error] [pid 11354:tid 11369] [client 62.93.167.104:49386] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aTh_te2TFO6mVSqWP8TUhQAAAMw"]
[Wed Dec 10 03:59:51.093361 2025] [:error] [pid 11354:tid 11361] [client 62.93.167.104:49392] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aTh_t-2TFO6mVSqWP8TUkAAAAMQ"]
[Wed Dec 10 03:59:53.325123 2025] [:error] [pid 11354:tid 11360] [client 62.93.167.104:49394] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aTh_ue2TFO6mVSqWP8TUmAAAAMM"]
[Wed Dec 10 03:59:54.154808 2025] [:error] [pid 11266:tid 11286] [client 62.93.167.104:49396] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aTh_uiXL_Qb0Ip3FW3lmHgAAABA"]
[Wed Dec 10 03:59:55.022810 2025] [:error] [pid 11268:tid 11331] [client 62.93.167.104:49404] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aTh_u7bpLcj9WqyQndzbKQAAAIc"]
[Wed Dec 10 03:59:56.141009 2025] [:error] [pid 11268:tid 11336] [client 62.93.167.104:48460] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aTh_vLbpLcj9WqyQndzbNgAAAIw"]
[Wed Dec 10 03:59:59.090353 2025] [:error] [pid 11354:tid 11369] [client 62.93.167.104:48472] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aTh_v-2TFO6mVSqWP8TUsAAAAMw"]
[Wed Dec 10 03:59:59.631241 2025] [:error] [pid 11268:tid 11324] [client 62.93.167.104:48478] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aTh_v7bpLcj9WqyQndzbVwAAAIA"]
[Wed Dec 10 04:00:01.072622 2025] [:error] [pid 11267:tid 11321] [client 62.93.167.104:48494] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aTh_wYY2npWNIVl2IDxoowAAAFg"]
[Wed Dec 10 04:00:01.619483 2025] [:error] [pid 11267:tid 11306] [client 62.93.167.104:48496] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTh_wYY2npWNIVl2IDxopAAAAEk"]
[Wed Dec 10 04:00:02.775702 2025] [:error] [pid 11266:tid 11280] [client 62.93.167.104:48512] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aTh_wiXL_Qb0Ip3FW3lmKwAAAAo"]
[Wed Dec 10 04:00:03.295826 2025] [:error] [pid 11354:tid 11364] [client 62.93.167.104:48526] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aTh_w-2TFO6mVSqWP8TUxwAAAMc"]
[Wed Dec 10 04:00:03.828014 2025] [:error] [pid 11354:tid 11373] [client 62.93.167.104:48536] [client 62.93.167.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.93.167.104, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTh_w-2TFO6mVSqWP8TUyQAAANA"]
[Wed Dec 10 04:00:03.839124 2025] [proxy_fcgi:error] [pid 11354:tid 11373] [client 62.93.167.104:48536] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 04:00:04.118346 2025] [:error] [pid 11354:tid 11371] [client 62.93.167.104:48536] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aTh_xO2TFO6mVSqWP8TUygAAAM4"]
[Wed Dec 10 04:00:05.519062 2025] [:error] [pid 11354:tid 11365] [client 62.93.167.104:48538] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTh_xe2TFO6mVSqWP8TU1QAAAMg"]
[Wed Dec 10 04:00:06.023613 2025] [:error] [pid 11354:tid 11358] [client 62.93.167.104:41694] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aTh_xu2TFO6mVSqWP8TU1gAAAME"]
[Wed Dec 10 04:00:08.470754 2025] [:error] [pid 11354:tid 11359] [client 62.93.167.104:41702] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aTh_yO2TFO6mVSqWP8TU8QAAAMI"]
[Wed Dec 10 04:00:09.044435 2025] [:error] [pid 11268:tid 11331] [client 62.93.167.104:41710] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aTh_ybbpLcj9WqyQndzbcQAAAIc"]
[Wed Dec 10 04:00:10.207731 2025] [:error] [pid 11266:tid 11294] [client 62.93.167.104:41726] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aTh_yiXL_Qb0Ip3FW3lmMQAAABg"]
[Wed Dec 10 04:00:10.766294 2025] [:error] [pid 11354:tid 11381] [client 62.93.167.104:41736] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aTh_yu2TFO6mVSqWP8TVGQAAANg"]
[Wed Dec 10 04:00:11.315828 2025] [proxy_fcgi:error] [pid 11267:tid 11297] [client 62.93.167.104:41738] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 04:00:11.569996 2025] [:error] [pid 11267:tid 11304] [client 62.93.167.104:41738] [client 62.93.167.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.93.167.104, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aTh_y4Y2npWNIVl2IDxosAAAAEc"]
[Wed Dec 10 04:00:12.096952 2025] [:error] [pid 11267:tid 11315] [client 62.93.167.104:41738] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aTh_zIY2npWNIVl2IDxotAAAAFI"]
[Wed Dec 10 04:00:13.747966 2025] [:error] [pid 11266:tid 11293] [client 62.93.167.104:41744] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aTh_zSXL_Qb0Ip3FW3lmOQAAABc"]
[Wed Dec 10 04:00:14.540564 2025] [:error] [pid 11354:tid 11376] [client 62.93.167.104:41754] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aTh_zu2TFO6mVSqWP8TVLQAAANM"]
[Wed Dec 10 04:00:15.077560 2025] [:error] [pid 11268:tid 11335] [client 62.93.167.104:41764] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aTh_z7bpLcj9WqyQndzbegAAAIs"]
[Wed Dec 10 04:00:16.422456 2025] [:error] [pid 11267:tid 11299] [client 62.93.167.104:59480] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTh_0IY2npWNIVl2IDxougAAAEI"]
[Wed Dec 10 04:00:17.470081 2025] [:error] [pid 11268:tid 11333] [client 62.93.167.104:59490] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aTh_0bbpLcj9WqyQndzbigAAAIk"]
[Wed Dec 10 04:00:19.136079 2025] [:error] [pid 11266:tid 11290] [client 62.93.167.104:59494] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aTh_0yXL_Qb0Ip3FW3lmTwAAABQ"]
[Wed Dec 10 04:00:19.670353 2025] [:error] [pid 11268:tid 11342] [client 62.93.167.104:59498] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aTh_07bpLcj9WqyQndzblwAAAJI"]
[Wed Dec 10 04:00:20.469150 2025] [:error] [pid 11268:tid 11339] [client 62.93.167.104:59510] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aTh_1LbpLcj9WqyQndzbmQAAAI8"]
[Wed Dec 10 04:00:23.965605 2025] [:error] [pid 11267:tid 11319] [client 62.93.167.104:59514] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aTh_14Y2npWNIVl2IDxoxAAAAFY"]
[Wed Dec 10 04:00:25.120502 2025] [:error] [pid 11266:tid 11279] [client 62.93.167.104:59526] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aTh_2SXL_Qb0Ip3FW3lmVwAAAAk"]
[Wed Dec 10 04:00:25.403514 2025] [:error] [pid 11266:tid 11271] [client 62.93.167.104:59526] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aTh_2SXL_Qb0Ip3FW3lmWAAAAAE"]
[Wed Dec 10 04:00:26.551590 2025] [:error] [pid 11267:tid 11306] [client 62.93.167.104:53604] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aTh_2oY2npWNIVl2IDxoyQAAAEk"]
[Wed Dec 10 04:00:27.102226 2025] [:error] [pid 11354:tid 11362] [client 62.93.167.104:53606] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aTh_2-2TFO6mVSqWP8TVXgAAAMU"]
[Wed Dec 10 04:00:29.199330 2025] [:error] [pid 11354:tid 11356] [client 62.93.167.104:53618] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aTh_3e2TFO6mVSqWP8TVZgAAAMA"]
[Wed Dec 10 04:00:30.290403 2025] [:error] [pid 11266:tid 11277] [client 62.93.167.104:53632] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aTh_3iXL_Qb0Ip3FW3lmXQAAAAc"]
[Wed Dec 10 04:00:31.086119 2025] [:error] [pid 11266:tid 11286] [client 62.93.167.104:53644] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aTh_3yXL_Qb0Ip3FW3lmYQAAABA"]
[Wed Dec 10 04:00:33.013600 2025] [:error] [pid 11266:tid 11289] [client 62.93.167.104:53648] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aTh_4SXL_Qb0Ip3FW3lmaAAAABM"]
[Wed Dec 10 04:00:33.846663 2025] [:error] [pid 11266:tid 11284] [client 62.93.167.104:53654] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aTh_4SXL_Qb0Ip3FW3lmawAAAA4"]
[Wed Dec 10 04:00:34.673222 2025] [:error] [pid 11268:tid 11339] [client 62.93.167.104:53660] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aTh_4rbpLcj9WqyQndzboAAAAI8"]
[Wed Dec 10 04:00:35.224425 2025] [:error] [pid 11268:tid 11328] [client 62.93.167.104:53666] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aTh_47bpLcj9WqyQndzbogAAAIQ"]
[Wed Dec 10 04:00:36.294208 2025] [:error] [pid 11267:tid 11305] [client 62.93.167.104:56362] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aTh_5IY2npWNIVl2IDxo1AAAAEg"]
[Wed Dec 10 04:00:37.941216 2025] [:error] [pid 11267:tid 11308] [client 62.93.167.104:56378] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aTh_5YY2npWNIVl2IDxo2wAAAEs"]
[Wed Dec 10 04:00:38.493339 2025] [:error] [pid 11268:tid 11347] [client 62.93.167.104:56394] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aTh_5rbpLcj9WqyQndzbpAAAAJc"]
[Wed Dec 10 04:00:40.407041 2025] [:error] [pid 11266:tid 11293] [client 62.93.167.104:56404] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aTh_6CXL_Qb0Ip3FW3lmewAAABc"]
[Wed Dec 10 04:00:41.540381 2025] [:error] [pid 11354:tid 11376] [client 62.93.167.104:56414] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aTh_6e2TFO6mVSqWP8TVbgAAANM"]
[Wed Dec 10 04:00:42.965030 2025] [:error] [pid 11266:tid 11275] [client 62.93.167.104:56428] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTh_6iXL_Qb0Ip3FW3lmgAAAAAU"]
[Wed Dec 10 04:00:43.511455 2025] [:error] [pid 11354:tid 11360] [client 62.93.167.104:56430] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aTh_6-2TFO6mVSqWP8TVcwAAAMM"]
[Wed Dec 10 04:00:44.334664 2025] [:error] [pid 11268:tid 11324] [client 62.93.167.104:56440] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aTh_7LbpLcj9WqyQndzbrQAAAIA"]
[Wed Dec 10 04:00:45.445215 2025] [:error] [pid 11268:tid 11325] [client 62.93.167.104:56446] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aTh_7bbpLcj9WqyQndzbswAAAIE"]
[Wed Dec 10 04:00:46.600357 2025] [:error] [pid 11354:tid 11379] [client 62.93.167.104:45998] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aTh_7u2TFO6mVSqWP8TVewAAANY"]
[Wed Dec 10 04:00:47.177447 2025] [:error] [pid 11354:tid 11380] [client 62.93.167.104:46010] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aTh_7-2TFO6mVSqWP8TVfAAAANc"]
[Wed Dec 10 04:00:48.025276 2025] [:error] [pid 11267:tid 11313] [client 62.93.167.104:46020] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aTh_8IY2npWNIVl2IDxo6QAAAFA"]
[Wed Dec 10 04:00:48.566770 2025] [:error] [pid 11268:tid 11329] [client 62.93.167.104:46024] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aTh_8LbpLcj9WqyQndzbtgAAAIU"]
[Wed Dec 10 04:00:49.678038 2025] [:error] [pid 11268:tid 11346] [client 62.93.167.104:46036] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aTh_8bbpLcj9WqyQndzbuwAAAJY"]
[Wed Dec 10 04:00:50.520544 2025] [:error] [pid 11354:tid 11375] [client 62.93.167.104:46050] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aTh_8u2TFO6mVSqWP8TVgwAAANI"]
[Wed Dec 10 04:00:51.082775 2025] [:error] [pid 11266:tid 11293] [client 62.93.167.104:46066] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aTh_8yXL_Qb0Ip3FW3lmhQAAABc"]
[Wed Dec 10 04:00:51.645352 2025] [:error] [pid 11266:tid 11277] [client 62.93.167.104:46082] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aTh_8yXL_Qb0Ip3FW3lmiAAAAAc"]
[Wed Dec 10 04:00:53.066593 2025] [:error] [pid 11268:tid 11335] [client 62.93.167.104:46094] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aTh_9bbpLcj9WqyQndzbwwAAAIs"]
[Wed Dec 10 04:00:54.134905 2025] [:error] [pid 11354:tid 11379] [client 62.93.167.104:46108] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aTh_9u2TFO6mVSqWP8TVjAAAANY"]
[Wed Dec 10 04:00:54.984106 2025] [:error] [pid 11268:tid 11340] [client 62.93.167.104:46116] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aTh_9rbpLcj9WqyQndzbxwAAAJA"]
[Wed Dec 10 04:00:55.825723 2025] [:error] [pid 11267:tid 11312] [client 62.93.167.104:49026] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTh_94Y2npWNIVl2IDxo8AAAAE8"]
[Wed Dec 10 04:00:59.099091 2025] [:error] [pid 11266:tid 11277] [client 62.93.167.104:49034] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aTh_-yXL_Qb0Ip3FW3lmlAAAAAc"]
[Wed Dec 10 04:00:59.648202 2025] [:error] [pid 11354:tid 11379] [client 62.93.167.104:49042] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aTh_--2TFO6mVSqWP8TVlAAAANY"]
[Wed Dec 10 04:01:00.713687 2025] [:error] [pid 11267:tid 11311] [client 62.93.167.104:49050] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aTh__IY2npWNIVl2IDxo-gAAAE4"]
[Wed Dec 10 04:01:03.988001 2025] [:error] [pid 11268:tid 11332] [client 62.93.167.104:49058] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aTh__7bpLcj9WqyQndzbzwAAAIg"]
[Wed Dec 10 04:01:05.155396 2025] [:error] [pid 11267:tid 11301] [client 62.93.167.104:49074] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aTiAAYY2npWNIVl2IDxpAQAAAEQ"]
[Wed Dec 10 04:01:06.308121 2025] [:error] [pid 11266:tid 11272] [client 62.93.167.104:43500] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aTiAAiXL_Qb0Ip3FW3lmmQAAAAI"]
[Wed Dec 10 04:01:07.139609 2025] [:error] [pid 11354:tid 11367] [client 62.93.167.104:43506] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aTiAA-2TFO6mVSqWP8TVmwAAAMo"]
[Wed Dec 10 04:01:07.995080 2025] [:error] [pid 11354:tid 11362] [client 62.93.167.104:43516] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aTiAA-2TFO6mVSqWP8TVnQAAAMU"]
[Wed Dec 10 04:01:09.660049 2025] [:error] [pid 11266:tid 11287] [client 62.93.167.104:43532] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aTiABSXL_Qb0Ip3FW3lmoAAAABE"]
[Wed Dec 10 04:01:12.400792 2025] [:error] [pid 11354:tid 11376] [client 62.93.167.104:43548] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aTiACO2TFO6mVSqWP8TVqgAAANM"]
[Wed Dec 10 04:01:12.935123 2025] [proxy_fcgi:error] [pid 11354:tid 11360] [client 62.93.167.104:43550] AH01071: Got error 'Primary script unknown'
[Wed Dec 10 04:01:13.203082 2025] [:error] [pid 11354:tid 11363] [client 62.93.167.104:43550] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aTiACe2TFO6mVSqWP8TVrQAAAMY"]
[Wed Dec 10 04:01:13.740221 2025] [:error] [pid 11268:tid 11326] [client 62.93.167.104:43562] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aTiACbbpLcj9WqyQndzb2wAAAII"]
[Wed Dec 10 04:01:14.919636 2025] [:error] [pid 11354:tid 11367] [client 62.93.167.104:43572] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aTiACu2TFO6mVSqWP8TVswAAAMo"]
[Wed Dec 10 04:01:15.487998 2025] [:error] [pid 11354:tid 11360] [client 62.93.167.104:48734] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aTiAC-2TFO6mVSqWP8TVtQAAAMM"]
[Wed Dec 10 04:01:17.612970 2025] [:error] [pid 11354:tid 11369] [client 62.93.167.104:48750] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aTiADe2TFO6mVSqWP8TVwAAAAMw"]
[Wed Dec 10 04:01:18.157443 2025] [:error] [pid 11267:tid 11306] [client 62.93.167.104:48756] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aTiADoY2npWNIVl2IDxpCQAAAEk"]
[Wed Dec 10 04:01:19.010983 2025] [:error] [pid 11266:tid 11285] [client 62.93.167.104:48772] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "aTiADyXL_Qb0Ip3FW3lmrAAAAA8"]
[Wed Dec 10 04:01:19.584070 2025] [:error] [pid 11267:tid 11321] [client 62.93.167.104:48778] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aTiAD4Y2npWNIVl2IDxpDAAAAFg"]
[Wed Dec 10 04:01:20.166020 2025] [:error] [pid 11267:tid 11308] [client 62.93.167.104:48784] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aTiAEIY2npWNIVl2IDxpDwAAAEs"]
[Wed Dec 10 04:01:21.087486 2025] [:error] [pid 11354:tid 11376] [client 62.93.167.104:48788] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aTiAEe2TFO6mVSqWP8TVwQAAANM"]
[Wed Dec 10 04:01:22.821929 2025] [:error] [pid 11267:tid 11309] [client 62.93.167.104:51280] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aTiAEoY2npWNIVl2IDxpGgAAAEw"]
[Wed Dec 10 04:01:23.367589 2025] [:error] [pid 11354:tid 11369] [client 62.93.167.104:48800] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aTiAE-2TFO6mVSqWP8TVxAAAAMw"]
[Wed Dec 10 04:01:24.444566 2025] [:error] [pid 11354:tid 11370] [client 62.93.167.104:48806] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aTiAFO2TFO6mVSqWP8TVygAAAM0"]
[Wed Dec 10 04:01:24.993402 2025] [:error] [pid 11354:tid 11359] [client 62.93.167.104:48818] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aTiAFO2TFO6mVSqWP8TVzgAAAMI"]
[Wed Dec 10 04:01:26.117181 2025] [:error] [pid 11354:tid 11371] [client 62.93.167.104:48358] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aTiAFu2TFO6mVSqWP8TV1QAAAM4"]
[Wed Dec 10 04:01:26.693493 2025] [:error] [pid 11268:tid 11334] [client 62.93.167.104:48362] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aTiAFrbpLcj9WqyQndzb4AAAAIo"]
[Wed Dec 10 04:01:29.143333 2025] [:error] [pid 11354:tid 11360] [client 62.93.167.104:48376] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aTiAGe2TFO6mVSqWP8TV4gAAAMM"]
[Wed Dec 10 04:01:29.698138 2025] [:error] [pid 11266:tid 11270] [client 62.93.167.104:48382] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aTiAGSXL_Qb0Ip3FW3lmsAAAAAA"]
[Wed Dec 10 04:01:33.620075 2025] [:error] [pid 11266:tid 11292] [client 62.93.167.104:48392] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aTiAHSXL_Qb0Ip3FW3lmtgAAABY"]
[Wed Dec 10 04:01:34.449150 2025] [:error] [pid 11268:tid 11327] [client 62.93.167.104:48404] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aTiAHrbpLcj9WqyQndzb5wAAAIM"]
[Wed Dec 10 04:01:35.274938 2025] [:error] [pid 11354:tid 11361] [client 62.93.167.104:48406] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "aTiAH-2TFO6mVSqWP8TV8QAAAMQ"]
[Wed Dec 10 04:01:35.811615 2025] [:error] [pid 11267:tid 11318] [client 62.93.167.104:55532] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aTiAH4Y2npWNIVl2IDxpHQAAAFU"]
[Wed Dec 10 04:01:36.375919 2025] [:error] [pid 11266:tid 11280] [client 62.93.167.104:55546] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aTiAICXL_Qb0Ip3FW3lmtwAAAAo"]
[Wed Dec 10 04:01:37.740544 2025] [:error] [pid 11354:tid 11372] [client 62.93.167.104:55556] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aTiAIe2TFO6mVSqWP8TV9gAAAM8"]
[Wed Dec 10 04:01:38.584043 2025] [:error] [pid 11354:tid 11364] [client 62.93.167.104:55572] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTiAIu2TFO6mVSqWP8TV-wAAAMc"]
[Wed Dec 10 04:01:39.962660 2025] [:error] [pid 11354:tid 11368] [client 62.93.167.104:55582] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aTiAI-2TFO6mVSqWP8TV_wAAAMs"]
[Wed Dec 10 04:01:40.503607 2025] [:error] [pid 11267:tid 11302] [client 62.93.167.104:55588] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aTiAJIY2npWNIVl2IDxpHwAAAEU"]
[Wed Dec 10 04:01:41.310127 2025] [:error] [pid 11354:tid 11380] [client 62.93.167.104:55600] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aTiAJe2TFO6mVSqWP8TWAgAAANc"]
[Wed Dec 10 04:01:44.331633 2025] [:error] [pid 11266:tid 11283] [client 62.93.167.104:55604] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aTiAKCXL_Qb0Ip3FW3lmxwAAAA0"]
[Wed Dec 10 04:01:45.135908 2025] [:error] [pid 11268:tid 11348] [client 62.93.167.104:55606] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aTiAKbbpLcj9WqyQndzb8wAAAJg"]
[Wed Dec 10 04:01:46.266689 2025] [:error] [pid 11268:tid 11338] [client 62.93.167.104:54782] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aTiAKrbpLcj9WqyQndzb9gAAAI4"]
[Wed Dec 10 04:01:46.831706 2025] [:error] [pid 11268:tid 11339] [client 62.93.167.104:54788] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTiAKrbpLcj9WqyQndzb9wAAAI8"]
[Wed Dec 10 04:01:47.361422 2025] [:error] [pid 11354:tid 11358] [client 62.93.167.104:54804] [client 62.93.167.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aTiAK-2TFO6mVSqWP8TWCgAAAME"]
[Wed Dec 10 04:32:19.366451 2025] [:error] [pid 11267:tid 11313] [client 122.51.236.174:52814] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTiHU4Y2npWNIVl2IDx1hwAAAFA"]
[Wed Dec 10 06:24:49.723786 2025] [:error] [pid 11268:tid 11341] [client 45.148.10.154:57156] [client 45.148.10.154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aTihsbbpLcj9WqyQndwZgwAAAJE"]
[Wed Dec 10 19:23:09.049909 2025] [:error] [pid 36977:tid 37034] [client 193.36.224.14:49603] [client 193.36.224.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aTlYHcc-JLl-uoL-Au6tAAAAAEA"]
[Wed Dec 10 19:23:09.561147 2025] [:error] [pid 37062:tid 37070] [client 136.144.19.207:30327] [client 136.144.19.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/style.php"] [unique_id "aTlYHTB0I62HCw8Z5BRHlQAAAAY"]
[Wed Dec 10 19:23:10.134993 2025] [:error] [pid 49095:tid 49117] [client 136.144.19.199:31977] [client 136.144.19.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aTlYHsorr4Jt2Tfx_EbR2QAAAVQ"]
[Wed Dec 10 19:23:10.637854 2025] [:error] [pid 36976:tid 37026] [client 136.144.19.220:54947] [client 136.144.19.220] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/style.php"] [unique_id "aTlYHiSpHW5KVaY9tJmSgAAAANM"]
[Wed Dec 10 19:23:11.136456 2025] [:error] [pid 36977:tid 37036] [client 136.144.19.205:54195] [client 136.144.19.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style.php"] [unique_id "aTlYH8c-JLl-uoL-Au6tAgAAAEI"]
[Wed Dec 10 19:23:11.671537 2025] [:error] [pid 36976:tid 37007] [client 104.234.19.19:41569] [client 104.234.19.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aTlYHySpHW5KVaY9tJmSgQAAAMA"]
[Wed Dec 10 19:23:12.176459 2025] [:error] [pid 36977:tid 37041] [client 193.36.224.18:50099] [client 193.36.224.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTlYIMc-JLl-uoL-Au6tAwAAAEc"]
[Wed Dec 10 19:23:12.784628 2025] [:error] [pid 46868:tid 46878] [client 136.144.19.243:33103] [client 136.144.19.243] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aTlYII3NdlN2GOOyBjFnLQAAAQg"]
[Wed Dec 10 19:23:13.284537 2025] [:error] [pid 36976:tid 37015] [client 104.234.19.23:54907] [client 104.234.19.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aTlYISSpHW5KVaY9tJmShAAAAMg"]
[Wed Dec 10 19:23:13.904184 2025] [:error] [pid 49095:tid 49112] [client 193.36.224.15:47357] [client 193.36.224.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTlYIcorr4Jt2Tfx_EbR3AAAAU8"]
[Wed Dec 10 19:23:14.501167 2025] [:error] [pid 36975:tid 37003] [client 136.144.19.205:53653] [client 136.144.19.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "aTlYIt_ZNQ3zMmb38BFZigAAAJc"]
[Wed Dec 10 19:23:15.086771 2025] [:error] [pid 36976:tid 37010] [client 136.144.19.199:34657] [client 136.144.19.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/blurbs.php"] [unique_id "aTlYIySpHW5KVaY9tJmShQAAAMM"]
[Wed Dec 10 19:23:15.663376 2025] [:error] [pid 49095:tid 49102] [client 104.234.19.27:63933] [client 104.234.19.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aTlYI8orr4Jt2Tfx_EbR4QAAAUU"]
[Wed Dec 10 19:23:16.653573 2025] [:error] [pid 49095:tid 49110] [client 193.36.224.73:60341] [client 193.36.224.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aTlYJMorr4Jt2Tfx_EbR5QAAAU0"]
[Wed Dec 10 19:23:17.619985 2025] [:error] [pid 49095:tid 49114] [client 136.144.19.207:48873] [client 136.144.19.207] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/shelp.php"] [unique_id "aTlYJcorr4Jt2Tfx_EbR6wAAAVE"]
[Wed Dec 10 19:23:18.121352 2025] [:error] [pid 49095:tid 49107] [client 193.36.224.73:20271] [client 193.36.224.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/cord.php"] [unique_id "aTlYJsorr4Jt2Tfx_EbR8QAAAUo"]
[Wed Dec 10 19:23:19.116045 2025] [:error] [pid 49095:tid 49109] [client 136.144.19.193:62511] [client 136.144.19.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/dex.php"] [unique_id "aTlYJ8orr4Jt2Tfx_EbR-QAAAUw"]
[Wed Dec 10 19:23:19.861067 2025] [:error] [pid 37062:tid 37085] [client 136.144.19.210:24999] [client 136.144.19.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aTlYJzB0I62HCw8Z5BRHswAAABU"]
[Wed Dec 10 19:23:20.622689 2025] [:error] [pid 46868:tid 46879] [client 136.144.19.209:53389] [client 136.144.19.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aTlYKI3NdlN2GOOyBjFnNwAAAQk"]
[Wed Dec 10 19:23:21.269754 2025] [:error] [pid 49095:tid 49107] [client 216.24.219.173:25635] [client 216.24.219.173] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aTlYKcorr4Jt2Tfx_EbSAAAAAUo"]
[Wed Dec 10 19:23:21.858266 2025] [:error] [pid 36977:tid 37041] [client 136.144.19.191:22137] [client 136.144.19.191] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aTlYKcc-JLl-uoL-Au6tEAAAAEc"]
[Wed Dec 10 19:23:22.471624 2025] [:error] [pid 36976:tid 37019] [client 193.36.224.11:22487] [client 193.36.224.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aTlYKiSpHW5KVaY9tJmSjwAAAMw"]
[Wed Dec 10 19:23:22.966883 2025] [:error] [pid 37062:tid 37074] [client 193.36.224.19:40387] [client 193.36.224.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aTlYKjB0I62HCw8Z5BRHuAAAAAo"]
[Wed Dec 10 19:23:23.482440 2025] [:error] [pid 49095:tid 49112] [client 136.144.19.209:51133] [client 136.144.19.209] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/shlo.php"] [unique_id "aTlYK8orr4Jt2Tfx_EbSBAAAAU8"]
[Wed Dec 10 19:23:25.046444 2025] [:error] [pid 49095:tid 49104] [client 193.36.224.10:49591] [client 193.36.224.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aTlYLcorr4Jt2Tfx_EbSBwAAAUc"]
[Wed Dec 10 19:23:25.584697 2025] [:error] [pid 37062:tid 37085] [client 193.36.224.16:22277] [client 193.36.224.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aTlYLTB0I62HCw8Z5BRHuwAAABU"]
[Wed Dec 10 19:23:26.118607 2025] [:error] [pid 37062:tid 37075] [client 136.144.19.208:49017] [client 136.144.19.208] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/php8.php"] [unique_id "aTlYLjB0I62HCw8Z5BRHvgAAAAs"]
[Wed Dec 10 19:23:26.622545 2025] [:error] [pid 36977:tid 37055] [client 104.234.19.20:50447] [client 104.234.19.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/lufix1.php"] [unique_id "aTlYLsc-JLl-uoL-Au6tFAAAAFU"]
[Wed Dec 10 19:23:27.186070 2025] [:error] [pid 36977:tid 37039] [client 136.144.19.201:39055] [client 136.144.19.201] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/witmm.php"] [unique_id "aTlYL8c-JLl-uoL-Au6tFgAAAEU"]
[Wed Dec 10 19:23:27.739089 2025] [:error] [pid 36976:tid 37021] [client 136.144.19.206:33483] [client 136.144.19.206] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aTlYLySpHW5KVaY9tJmSlgAAAM4"]
[Wed Dec 10 19:23:28.307223 2025] [:error] [pid 49095:tid 49118] [client 193.36.224.16:50371] [client 193.36.224.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTlYMMorr4Jt2Tfx_EbSCwAAAVU"]
[Wed Dec 10 19:23:28.899807 2025] [:error] [pid 49095:tid 49105] [client 193.36.224.10:40109] [client 193.36.224.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aTlYMMorr4Jt2Tfx_EbSDgAAAUg"]
[Wed Dec 10 19:23:29.481261 2025] [:error] [pid 37062:tid 37085] [client 193.36.224.13:47839] [client 193.36.224.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aTlYMTB0I62HCw8Z5BRHxAAAABU"]
[Wed Dec 10 19:23:30.067638 2025] [:error] [pid 36976:tid 37009] [client 136.144.19.193:55089] [client 136.144.19.193] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aTlYMiSpHW5KVaY9tJmSmAAAAMI"]
[Wed Dec 10 19:23:30.651514 2025] [:error] [pid 46868:tid 46872] [client 104.234.19.27:39247] [client 104.234.19.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aTlYMo3NdlN2GOOyBjFnQgAAAQI"]
[Wed Dec 10 19:23:31.221360 2025] [:error] [pid 36975:tid 36988] [client 216.24.219.174:44859] [client 216.24.219.174] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-editor.php"] [unique_id "aTlYM9_ZNQ3zMmb38BFZoAAAAIg"]
[Wed Dec 10 19:23:32.281744 2025] [:error] [pid 36975:tid 36986] [client 136.144.19.243:28263] [client 136.144.19.243] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "aTlYNN_ZNQ3zMmb38BFZpAAAAIY"]
[Wed Dec 10 19:23:32.778861 2025] [:error] [pid 49095:tid 49109] [client 193.36.224.14:36505] [client 193.36.224.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/txets.php"] [unique_id "aTlYNMorr4Jt2Tfx_EbSEgAAAUw"]
[Wed Dec 10 19:23:33.270622 2025] [:error] [pid 36976:tid 37015] [client 136.144.19.183:47991] [client 136.144.19.183] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aTlYNSSpHW5KVaY9tJmSmwAAAMg"]
[Wed Dec 10 19:23:33.777864 2025] [:error] [pid 36977:tid 37039] [client 136.144.19.210:58283] [client 136.144.19.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/postnews.php"] [unique_id "aTlYNcc-JLl-uoL-Au6tIAAAAEU"]
[Wed Dec 10 19:23:34.281442 2025] [:error] [pid 49095:tid 49120] [client 136.144.19.202:45107] [client 136.144.19.202] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aTlYNsorr4Jt2Tfx_EbSFAAAAVc"]
[Wed Dec 10 19:23:34.820350 2025] [:error] [pid 36975:tid 36987] [client 136.144.19.172:24185] [client 136.144.19.172] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aTlYNt_ZNQ3zMmb38BFZqQAAAIc"]
[Wed Dec 10 22:03:06.406625 2025] [:error] [pid 37062:tid 37083] [client 172.192.18.135:64788] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aTl9mjB0I62HCw8Z5BRw5gAAABM"]
[Wed Dec 10 22:03:06.640925 2025] [:error] [pid 49095:tid 49121] [client 172.192.18.135:61620] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aTl9msorr4Jt2Tfx_EYQmgAAAVg"]
[Wed Dec 10 22:03:06.871188 2025] [:error] [pid 49095:tid 49107] [client 172.192.18.135:8388] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aTl9msorr4Jt2Tfx_EYQnAAAAUo"]
[Wed Dec 10 22:03:07.097442 2025] [:error] [pid 49095:tid 49098] [client 172.192.18.135:45861] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aTl9m8orr4Jt2Tfx_EYQnQAAAUE"]
[Wed Dec 10 22:03:07.326938 2025] [:error] [pid 49095:tid 49097] [client 172.192.18.135:45846] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aTl9m8orr4Jt2Tfx_EYQngAAAUA"]
[Wed Dec 10 22:03:07.558337 2025] [:error] [pid 36975:tid 36982] [client 172.192.18.135:64827] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aTl9m9_ZNQ3zMmb38BF_JgAAAII"]
[Wed Dec 10 22:03:07.850988 2025] [:error] [pid 36975:tid 36996] [client 172.192.18.135:65232] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aTl9m9_ZNQ3zMmb38BF_JwAAAJA"]
[Wed Dec 10 22:03:08.089104 2025] [:error] [pid 36975:tid 36997] [client 172.192.18.135:49778] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aTl9nN_ZNQ3zMmb38BF_KAAAAJE"]
[Wed Dec 10 22:03:08.366854 2025] [:error] [pid 46868:tid 46877] [client 172.192.18.135:65231] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTl9nI3NdlN2GOOyBjGMHwAAAQc"]
[Wed Dec 10 22:03:08.687320 2025] [:error] [pid 36976:tid 37024] [client 172.192.18.135:8429] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTl9nCSpHW5KVaY9tJnB1QAAANE"]
[Wed Dec 10 22:03:09.043690 2025] [:error] [pid 49095:tid 49115] [client 172.192.18.135:8439] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTl9ncorr4Jt2Tfx_EYQoAAAAVI"]
[Wed Dec 10 22:03:09.280255 2025] [:error] [pid 36976:tid 37016] [client 172.192.18.135:61597] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTl9nSSpHW5KVaY9tJnB1wAAAMk"]
[Wed Dec 10 22:03:09.516011 2025] [:error] [pid 36976:tid 37021] [client 172.192.18.135:63148] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aTl9nSSpHW5KVaY9tJnB2AAAAM4"]
[Wed Dec 10 22:03:09.748783 2025] [:error] [pid 36977:tid 37034] [client 172.192.18.135:63156] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aTl9ncc-JLl-uoL-Au7QuQAAAEA"]
[Wed Dec 10 22:03:09.975631 2025] [:error] [pid 36977:tid 37040] [client 172.192.18.135:64794] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aTl9ncc-JLl-uoL-Au7QugAAAEY"]
[Wed Dec 10 22:03:10.214615 2025] [:error] [pid 36977:tid 37053] [client 172.192.18.135:61628] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aTl9nsc-JLl-uoL-Au7QvAAAAFM"]
[Wed Dec 10 22:03:10.448631 2025] [:error] [pid 36976:tid 37025] [client 172.192.18.135:8402] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTl9niSpHW5KVaY9tJnB2gAAANI"]
[Wed Dec 10 22:03:10.718335 2025] [:error] [pid 36976:tid 37015] [client 172.192.18.135:63108] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTl9niSpHW5KVaY9tJnB2wAAAMg"]
[Wed Dec 10 22:03:10.950975 2025] [:error] [pid 46868:tid 46871] [client 172.192.18.135:63113] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTl9no3NdlN2GOOyBjGMIwAAAQE"]
[Wed Dec 10 22:03:11.180041 2025] [:error] [pid 49095:tid 49103] [client 172.192.18.135:9167] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTl9n8orr4Jt2Tfx_EYQogAAAUY"]
[Wed Dec 10 22:03:11.423743 2025] [:error] [pid 36977:tid 37052] [client 172.192.18.135:47759] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aTl9n8c-JLl-uoL-Au7QvwAAAFI"]
[Wed Dec 10 22:03:11.665428 2025] [:error] [pid 36976:tid 37014] [client 172.192.18.135:64770] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aTl9nySpHW5KVaY9tJnB3gAAAMc"]
[Wed Dec 10 22:03:11.922982 2025] [:error] [pid 36976:tid 37020] [client 172.192.18.135:63158] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aTl9nySpHW5KVaY9tJnB3wAAAM0"]
[Wed Dec 10 22:03:12.174117 2025] [:error] [pid 36977:tid 37057] [client 172.192.18.135:58353] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aTl9oMc-JLl-uoL-Au7QwAAAAFc"]
[Wed Dec 10 22:03:12.419937 2025] [:error] [pid 49095:tid 49106] [client 172.192.18.135:55948] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aTl9oMorr4Jt2Tfx_EYQpAAAAUk"]
[Wed Dec 10 22:03:12.648207 2025] [:error] [pid 49095:tid 49112] [client 172.192.18.135:58310] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aTl9oMorr4Jt2Tfx_EYQpgAAAU8"]
[Wed Dec 10 22:03:12.903288 2025] [:error] [pid 46868:tid 46870] [client 172.192.18.135:48505] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aTl9oI3NdlN2GOOyBjGMJQAAAQA"]
[Wed Dec 10 22:03:13.146031 2025] [:error] [pid 36977:tid 37035] [client 172.192.18.135:48498] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aTl9occ-JLl-uoL-Au7QwwAAAEE"]
[Wed Dec 10 22:03:13.391657 2025] [:error] [pid 36977:tid 37038] [client 172.192.18.135:63136] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTl9occ-JLl-uoL-Au7QxAAAAEQ"]
[Wed Dec 10 22:03:13.633424 2025] [:error] [pid 36977:tid 37051] [client 172.192.18.135:58366] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTl9occ-JLl-uoL-Au7QxQAAAFE"]
[Wed Dec 10 22:03:13.880421 2025] [:error] [pid 36977:tid 37034] [client 172.192.18.135:22560] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTl9occ-JLl-uoL-Au7QxwAAAEA"]
[Wed Dec 10 22:03:14.132344 2025] [:error] [pid 46868:tid 46887] [client 172.192.18.135:58324] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTl9oo3NdlN2GOOyBjGMJwAAARE"]
[Wed Dec 10 22:03:14.394338 2025] [:error] [pid 49095:tid 49107] [client 172.192.18.135:46565] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTl9osorr4Jt2Tfx_EYQpwAAAUo"]
[Wed Dec 10 22:03:14.634794 2025] [:error] [pid 49095:tid 49101] [client 172.192.18.135:8233] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTl9osorr4Jt2Tfx_EYQqAAAAUQ"]
[Wed Dec 10 22:03:14.914417 2025] [:error] [pid 46868:tid 46875] [client 172.192.18.135:61198] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTl9oo3NdlN2GOOyBjGMKQAAAQU"]
[Wed Dec 10 22:03:15.168963 2025] [:error] [pid 49095:tid 49113] [client 172.192.18.135:46562] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aTl9o8orr4Jt2Tfx_EYQqQAAAVA"]
[Wed Dec 10 22:03:15.396790 2025] [:error] [pid 37062:tid 37077] [client 172.192.18.135:56526] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aTl9ozB0I62HCw8Z5BRw6AAAAA0"]
[Wed Dec 10 22:03:15.624891 2025] [:error] [pid 46868:tid 46878] [client 172.192.18.135:44799] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aTl9o43NdlN2GOOyBjGMKwAAAQg"]
[Wed Dec 10 22:03:15.901255 2025] [:error] [pid 37062:tid 37078] [client 172.192.18.135:47319] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aTl9ozB0I62HCw8Z5BRw6gAAAA4"]
[Wed Dec 10 22:03:16.158973 2025] [:error] [pid 36976:tid 37027] [client 172.192.18.135:47323] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aTl9pCSpHW5KVaY9tJnB4wAAANQ"]
[Wed Dec 10 22:03:16.389151 2025] [:error] [pid 36977:tid 37049] [client 172.192.18.135:59187] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aTl9pMc-JLl-uoL-Au7QzAAAAE8"]
[Wed Dec 10 22:03:16.623707 2025] [:error] [pid 46868:tid 46883] [client 172.192.18.135:59138] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aTl9pI3NdlN2GOOyBjGMLAAAAQ0"]
[Wed Dec 10 22:03:16.856184 2025] [:error] [pid 46868:tid 46885] [client 172.192.18.135:56921] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aTl9pI3NdlN2GOOyBjGMLQAAAQ8"]
[Wed Dec 10 22:03:17.097386 2025] [:error] [pid 46868:tid 46880] [client 172.192.18.135:63673] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aTl9pY3NdlN2GOOyBjGMLgAAAQo"]
[Wed Dec 10 22:03:17.363424 2025] [:error] [pid 46868:tid 46876] [client 172.192.18.135:55536] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTl9pY3NdlN2GOOyBjGMMAAAAQY"]
[Wed Dec 10 22:03:17.595821 2025] [:error] [pid 49095:tid 49108] [client 172.192.18.135:64763] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTl9pcorr4Jt2Tfx_EYQrAAAAUs"]
[Wed Dec 10 22:03:17.851217 2025] [:error] [pid 46868:tid 46879] [client 172.192.18.135:26924] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTl9pY3NdlN2GOOyBjGMMQAAAQk"]
[Wed Dec 10 22:03:18.085750 2025] [:error] [pid 46868:tid 46874] [client 172.192.18.135:8651] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTl9po3NdlN2GOOyBjGMMgAAAQQ"]
[Wed Dec 10 22:03:18.327886 2025] [:error] [pid 46868:tid 46887] [client 172.192.18.135:8848] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hoot.php"] [unique_id "aTl9po3NdlN2GOOyBjGMNAAAARE"]
[Wed Dec 10 22:03:18.619458 2025] [:error] [pid 46868:tid 46888] [client 172.192.18.135:8329] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hoot.php"] [unique_id "aTl9po3NdlN2GOOyBjGMNgAAARI"]
[Wed Dec 10 22:03:18.875644 2025] [:error] [pid 36975:tid 36996] [client 172.192.18.135:62603] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hoot.php"] [unique_id "aTl9pt_ZNQ3zMmb38BF_LgAAAJA"]
[Wed Dec 10 22:03:19.136329 2025] [:error] [pid 37062:tid 37074] [client 172.192.18.135:63178] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hoot.php"] [unique_id "aTl9pzB0I62HCw8Z5BRw7gAAAAo"]
[Wed Dec 10 22:03:19.415173 2025] [:error] [pid 46868:tid 46878] [client 172.192.18.135:62645] [client 172.192.18.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aTl9p43NdlN2GOOyBjGMOwAAAQg"]
[Wed Dec 10 22:03:19.648491 2025] [:error] [pid 36976:tid 37025] [client 172.192.18.135:55429] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aTl9pySpHW5KVaY9tJnB5gAAANI"]
[Wed Dec 10 22:03:19.878454 2025] [:error] [pid 36976:tid 37015] [client 172.192.18.135:55470] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aTl9pySpHW5KVaY9tJnB5wAAAMg"]
[Wed Dec 10 22:03:20.155302 2025] [:error] [pid 36976:tid 37023] [client 172.192.18.135:47837] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aTl9qCSpHW5KVaY9tJnB6AAAANA"]
[Wed Dec 10 22:03:20.392265 2025] [:error] [pid 46868:tid 46883] [client 172.192.18.135:62593] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aTl9qI3NdlN2GOOyBjGMPAAAAQ0"]
[Wed Dec 10 22:03:20.623797 2025] [:error] [pid 49095:tid 49118] [client 172.192.18.135:60518] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aTl9qMorr4Jt2Tfx_EYQrgAAAVU"]
[Wed Dec 10 22:03:20.903143 2025] [:error] [pid 37062:tid 37083] [client 172.192.18.135:8838] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aTl9qDB0I62HCw8Z5BRw8QAAABM"]
[Wed Dec 10 22:03:21.133341 2025] [:error] [pid 49095:tid 49116] [client 172.192.18.135:62641] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aTl9qcorr4Jt2Tfx_EYQsQAAAVM"]
[Wed Dec 10 22:03:21.368576 2025] [:error] [pid 49095:tid 49114] [client 172.192.18.135:62612] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aTl9qcorr4Jt2Tfx_EYQsgAAAVE"]
[Wed Dec 10 22:03:21.598285 2025] [:error] [pid 46868:tid 46879] [client 172.192.18.135:52253] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aTl9qY3NdlN2GOOyBjGMPgAAAQk"]
[Wed Dec 10 22:03:21.824736 2025] [:error] [pid 37062:tid 37071] [client 172.192.18.135:65339] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aTl9qTB0I62HCw8Z5BRw8gAAAAc"]
[Wed Dec 10 22:03:22.067267 2025] [:error] [pid 49095:tid 49099] [client 172.192.18.135:63212] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aTl9qsorr4Jt2Tfx_EYQtAAAAUI"]
[Wed Dec 10 22:03:22.315427 2025] [:error] [pid 37062:tid 37076] [client 172.192.18.135:52260] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aTl9qjB0I62HCw8Z5BRw8wAAAAw"]
[Wed Dec 10 22:03:22.543140 2025] [:error] [pid 36977:tid 37041] [client 172.192.18.135:45930] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aTl9qsc-JLl-uoL-Au7Q0AAAAEc"]
[Wed Dec 10 22:03:22.774221 2025] [:error] [pid 46868:tid 46874] [client 172.192.18.135:35595] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aTl9qo3NdlN2GOOyBjGMPwAAAQQ"]
[Wed Dec 10 22:03:23.004076 2025] [:error] [pid 49095:tid 49098] [client 172.192.18.135:47825] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aTl9q8orr4Jt2Tfx_EYQuAAAAUE"]
[Wed Dec 10 22:03:23.235955 2025] [:error] [pid 49095:tid 49119] [client 172.192.18.135:60520] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aTl9q8orr4Jt2Tfx_EYQugAAAVY"]
[Wed Dec 10 22:03:23.462968 2025] [:error] [pid 49095:tid 49105] [client 172.192.18.135:60516] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aTl9q8orr4Jt2Tfx_EYQvAAAAUg"]
[Wed Dec 10 22:03:23.708820 2025] [:error] [pid 36976:tid 37028] [client 172.192.18.135:58951] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aTl9qySpHW5KVaY9tJnB6wAAANU"]
[Wed Dec 10 22:03:23.939151 2025] [:error] [pid 36976:tid 37031] [client 172.192.18.135:47822] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aTl9qySpHW5KVaY9tJnB7QAAANg"]
[Wed Dec 10 22:03:24.170116 2025] [:error] [pid 36976:tid 37010] [client 172.192.18.135:52228] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTl9rCSpHW5KVaY9tJnB7gAAAMM"]
[Wed Dec 10 22:03:24.399596 2025] [:error] [pid 36976:tid 37022] [client 172.192.18.135:47868] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTl9rCSpHW5KVaY9tJnB7wAAAM8"]
[Wed Dec 10 22:03:24.629197 2025] [:error] [pid 37062:tid 37065] [client 172.192.18.135:22190] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTl9rDB0I62HCw8Z5BRw9wAAAAE"]
[Wed Dec 10 22:03:24.900310 2025] [:error] [pid 37062:tid 37070] [client 172.192.18.135:47813] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aTl9rDB0I62HCw8Z5BRw-AAAAAY"]
[Wed Dec 10 22:03:25.134103 2025] [:error] [pid 37062:tid 37072] [client 172.192.18.135:45949] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geju.php"] [unique_id "aTl9rTB0I62HCw8Z5BRw-QAAAAg"]
[Wed Dec 10 22:03:25.367224 2025] [:error] [pid 37062:tid 37074] [client 172.192.18.135:47867] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geju.php"] [unique_id "aTl9rTB0I62HCw8Z5BRw-gAAAAo"]
[Wed Dec 10 22:03:25.606279 2025] [:error] [pid 36976:tid 37024] [client 172.192.18.135:58948] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geju.php"] [unique_id "aTl9rSSpHW5KVaY9tJnB8wAAANE"]
[Wed Dec 10 22:03:25.834639 2025] [:error] [pid 37062:tid 37085] [client 172.192.18.135:22173] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geju.php"] [unique_id "aTl9rTB0I62HCw8Z5BRw_AAAABU"]
[Wed Dec 10 22:03:26.070414 2025] [:error] [pid 37062:tid 37083] [client 172.192.18.135:45944] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aTl9rjB0I62HCw8Z5BRw_gAAABM"]
[Wed Dec 10 22:03:26.366172 2025] [:error] [pid 37062:tid 37084] [client 172.192.18.135:50334] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aTl9rjB0I62HCw8Z5BRw_wAAABQ"]
[Wed Dec 10 22:03:26.611744 2025] [:error] [pid 49095:tid 49116] [client 172.192.18.135:51682] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aTl9rsorr4Jt2Tfx_EYQwQAAAVM"]
[Wed Dec 10 22:03:26.846181 2025] [:error] [pid 37062:tid 37071] [client 172.192.18.135:45925] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aTl9rjB0I62HCw8Z5BRxAAAAAAc"]
[Wed Dec 10 22:03:27.101625 2025] [:error] [pid 49095:tid 49102] [client 172.192.18.135:47823] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTl9r8orr4Jt2Tfx_EYQwgAAAUU"]
[Wed Dec 10 22:03:27.330348 2025] [:error] [pid 49095:tid 49098] [client 172.192.18.135:52249] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTl9r8orr4Jt2Tfx_EYQwwAAAUE"]
[Wed Dec 10 22:03:27.574845 2025] [:error] [pid 36975:tid 36998] [client 172.192.18.135:59490] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTl9r9_ZNQ3zMmb38BF_MgAAAJI"]
[Wed Dec 10 22:03:27.920145 2025] [:error] [pid 36975:tid 37004] [client 172.192.18.135:52275] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aTl9r9_ZNQ3zMmb38BF_MwAAAJg"]
[Wed Dec 10 22:03:28.152081 2025] [:error] [pid 46868:tid 46894] [client 172.192.18.135:50307] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTl9sI3NdlN2GOOyBjGMQQAAARg"]
[Wed Dec 10 22:03:28.406030 2025] [:error] [pid 46868:tid 46883] [client 172.192.18.135:51649] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTl9sI3NdlN2GOOyBjGMQgAAAQ0"]
[Wed Dec 10 22:03:28.637966 2025] [:error] [pid 36975:tid 36994] [client 172.192.18.135:35623] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTl9sN_ZNQ3zMmb38BF_NQAAAI4"]
[Wed Dec 10 22:03:28.877150 2025] [:error] [pid 36975:tid 36984] [client 172.192.18.135:35608] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aTl9sN_ZNQ3zMmb38BF_NgAAAIQ"]
[Wed Dec 10 22:03:29.116680 2025] [:error] [pid 36975:tid 36990] [client 172.192.18.135:59477] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contact.php"] [unique_id "aTl9sd_ZNQ3zMmb38BF_OQAAAIo"]
[Wed Dec 10 22:03:29.419307 2025] [:error] [pid 36975:tid 36993] [client 172.192.18.135:35621] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contact.php"] [unique_id "aTl9sd_ZNQ3zMmb38BF_OwAAAI0"]
[Wed Dec 10 22:03:29.665830 2025] [:error] [pid 36975:tid 36995] [client 172.192.18.135:58992] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contact.php"] [unique_id "aTl9sd_ZNQ3zMmb38BF_PgAAAI8"]
[Wed Dec 10 22:03:29.895918 2025] [:error] [pid 46868:tid 46880] [client 172.192.18.135:58977] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contact.php"] [unique_id "aTl9sY3NdlN2GOOyBjGMQwAAAQo"]
[Wed Dec 10 22:03:30.125974 2025] [:error] [pid 37062:tid 37080] [client 172.192.18.135:50354] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aTl9sjB0I62HCw8Z5BRxAgAAABA"]
[Wed Dec 10 22:03:30.356590 2025] [:error] [pid 46868:tid 46876] [client 172.192.18.135:50350] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aTl9so3NdlN2GOOyBjGMRAAAAQY"]
[Wed Dec 10 22:03:30.586857 2025] [:error] [pid 46868:tid 46877] [client 172.192.18.135:35617] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aTl9so3NdlN2GOOyBjGMRQAAAQc"]
[Wed Dec 10 22:03:30.843255 2025] [:error] [pid 37062:tid 37087] [client 172.192.18.135:56465] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aTl9sjB0I62HCw8Z5BRxBAAAABc"]
[Wed Dec 10 22:03:31.083228 2025] [:error] [pid 37062:tid 37078] [client 172.192.18.135:44854] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lufix.php"] [unique_id "aTl9szB0I62HCw8Z5BRxBQAAAA4"]
[Wed Dec 10 22:03:31.332150 2025] [:error] [pid 37062:tid 37070] [client 172.192.18.135:56450] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lufix.php"] [unique_id "aTl9szB0I62HCw8Z5BRxBwAAAAY"]
[Wed Dec 10 22:03:31.579848 2025] [:error] [pid 37062:tid 37074] [client 172.192.18.135:32416] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lufix.php"] [unique_id "aTl9szB0I62HCw8Z5BRxCQAAAAo"]
[Wed Dec 10 22:03:31.879089 2025] [:error] [pid 36976:tid 37007] [client 172.192.18.135:44825] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lufix.php"] [unique_id "aTl9sySpHW5KVaY9tJnB-AAAAMA"]
[Wed Dec 10 22:03:32.116740 2025] [:error] [pid 37062:tid 37081] [client 172.192.18.135:47759] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aTl9tDB0I62HCw8Z5BRxCwAAABE"]
[Wed Dec 10 22:03:32.365868 2025] [:error] [pid 37062:tid 37083] [client 172.192.18.135:22161] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aTl9tDB0I62HCw8Z5BRxDQAAABM"]
[Wed Dec 10 22:03:32.602742 2025] [:error] [pid 37062:tid 37071] [client 172.192.18.135:44834] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aTl9tDB0I62HCw8Z5BRxDgAAAAc"]
[Wed Dec 10 22:03:32.859741 2025] [:error] [pid 36975:tid 36989] [client 172.192.18.135:56457] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aTl9tN_ZNQ3zMmb38BF_QQAAAIk"]
[Wed Dec 10 22:03:33.106755 2025] [:error] [pid 46868:tid 46874] [client 172.192.18.135:59515] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aTl9tY3NdlN2GOOyBjGMSAAAAQQ"]
[Wed Dec 10 22:03:33.400614 2025] [:error] [pid 37062:tid 37086] [client 172.192.18.135:51679] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aTl9tTB0I62HCw8Z5BRxEAAAABY"]
[Wed Dec 10 22:03:33.629498 2025] [:error] [pid 46868:tid 46881] [client 172.192.18.135:49705] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aTl9tY3NdlN2GOOyBjGMSQAAAQs"]
[Wed Dec 10 22:03:33.893046 2025] [:error] [pid 46868:tid 46888] [client 172.192.18.135:49715] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aTl9tY3NdlN2GOOyBjGMSgAAARI"]
[Wed Dec 10 22:03:34.143601 2025] [:error] [pid 37062:tid 37066] [client 172.192.18.135:32404] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "aTl9tjB0I62HCw8Z5BRxEgAAAAI"]
[Wed Dec 10 22:03:34.393229 2025] [:error] [pid 46868:tid 46872] [client 172.192.18.135:56470] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "aTl9to3NdlN2GOOyBjGMSwAAAQI"]
[Wed Dec 10 22:03:34.678697 2025] [:error] [pid 46868:tid 46886] [client 172.192.18.135:49703] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "aTl9to3NdlN2GOOyBjGMTAAAARA"]
[Wed Dec 10 22:03:34.933428 2025] [:error] [pid 49095:tid 49100] [client 172.192.18.135:8800] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "aTl9tsorr4Jt2Tfx_EYQzwAAAUM"]
[Wed Dec 10 22:03:35.189574 2025] [:error] [pid 37062:tid 37087] [client 172.192.18.135:56508] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aTl9tzB0I62HCw8Z5BRxFQAAABc"]
[Wed Dec 10 22:03:35.440641 2025] [:error] [pid 46868:tid 46893] [client 172.192.18.135:49676] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aTl9t43NdlN2GOOyBjGMTwAAARc"]
[Wed Dec 10 22:03:35.693434 2025] [:error] [pid 37062:tid 37082] [client 172.192.18.135:52903] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aTl9tzB0I62HCw8Z5BRxFgAAABI"]
[Wed Dec 10 22:03:35.957086 2025] [:error] [pid 36977:tid 37058] [client 172.192.18.135:49699] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aTl9t8c-JLl-uoL-Au7Q1AAAAFg"]
[Wed Dec 10 22:03:36.201686 2025] [:error] [pid 36976:tid 37008] [client 172.192.18.135:60892] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTl9uCSpHW5KVaY9tJnB-QAAAME"]
[Wed Dec 10 22:03:36.448000 2025] [:error] [pid 36976:tid 37011] [client 172.192.18.135:44189] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTl9uCSpHW5KVaY9tJnB-gAAAMQ"]
[Wed Dec 10 22:03:36.736423 2025] [:error] [pid 36976:tid 37026] [client 172.192.18.135:52875] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTl9uCSpHW5KVaY9tJnB-wAAANM"]
[Wed Dec 10 22:03:37.099200 2025] [:error] [pid 36977:tid 37056] [client 172.192.18.135:44220] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTl9ucc-JLl-uoL-Au7Q1QAAAFY"]
[Wed Dec 10 22:03:37.347267 2025] [:error] [pid 37062:tid 37088] [client 172.192.18.135:60847] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aTl9uTB0I62HCw8Z5BRxGgAAABg"]
[Wed Dec 10 22:03:37.586075 2025] [:error] [pid 37062:tid 37064] [client 172.192.18.135:49716] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aTl9uTB0I62HCw8Z5BRxGwAAAAA"]
[Wed Dec 10 22:03:37.834025 2025] [:error] [pid 36977:tid 37038] [client 172.192.18.135:60896] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aTl9ucc-JLl-uoL-Au7Q1wAAAEQ"]
[Wed Dec 10 22:03:38.120948 2025] [:error] [pid 36976:tid 37020] [client 172.192.18.135:52911] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aTl9uiSpHW5KVaY9tJnB_AAAAM0"]
[Wed Dec 10 22:03:38.354726 2025] [:error] [pid 49095:tid 49116] [client 172.192.18.135:44821] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTl9usorr4Jt2Tfx_EYQ1QAAAVM"]
[Wed Dec 10 22:03:38.611298 2025] [:error] [pid 36977:tid 37051] [client 172.192.18.135:52913] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTl9usc-JLl-uoL-Au7Q2gAAAFE"]
[Wed Dec 10 22:03:38.849039 2025] [:error] [pid 36976:tid 37016] [client 172.192.18.135:56496] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTl9uiSpHW5KVaY9tJnB_QAAAMk"]
[Wed Dec 10 22:03:39.078905 2025] [:error] [pid 37062:tid 37071] [client 172.192.18.135:60814] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aTl9uzB0I62HCw8Z5BRxHAAAAAc"]
[Wed Dec 10 22:03:39.310899 2025] [:error] [pid 49095:tid 49112] [client 172.192.18.135:56472] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "aTl9u8orr4Jt2Tfx_EYQ2AAAAU8"]
[Wed Dec 10 22:03:39.545205 2025] [:error] [pid 36976:tid 37015] [client 172.192.18.135:56479] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "aTl9uySpHW5KVaY9tJnB_wAAAMg"]
[Wed Dec 10 22:03:39.772762 2025] [:error] [pid 36977:tid 37037] [client 172.192.18.135:60888] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "aTl9u8c-JLl-uoL-Au7Q3QAAAEM"]
[Wed Dec 10 22:03:40.008693 2025] [:error] [pid 49095:tid 49121] [client 172.192.18.135:44190] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "aTl9vMorr4Jt2Tfx_EYQ2QAAAVg"]
[Wed Dec 10 22:03:40.238918 2025] [:error] [pid 49095:tid 49120] [client 172.192.18.135:60830] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTl9vMorr4Jt2Tfx_EYQ2gAAAVc"]
[Wed Dec 10 22:03:40.481099 2025] [:error] [pid 46868:tid 46894] [client 172.192.18.135:60813] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTl9vI3NdlN2GOOyBjGMUAAAARg"]
[Wed Dec 10 22:03:40.733348 2025] [:error] [pid 36976:tid 37014] [client 172.192.18.135:44178] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTl9vCSpHW5KVaY9tJnCAgAAAMc"]
[Wed Dec 10 22:03:40.981422 2025] [:error] [pid 49095:tid 49115] [client 172.192.18.135:56448] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTl9vMorr4Jt2Tfx_EYQ2wAAAVI"]
[Wed Dec 10 22:03:41.216215 2025] [:error] [pid 36977:tid 37053] [client 172.192.18.135:8780] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTl9vcc-JLl-uoL-Au7Q3gAAAFM"]
[Wed Dec 10 22:03:41.449430 2025] [:error] [pid 49095:tid 49111] [client 172.192.18.135:60920] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTl9vcorr4Jt2Tfx_EYQ3QAAAU4"]
[Wed Dec 10 22:03:41.698089 2025] [:error] [pid 36977:tid 37043] [client 172.192.18.135:56471] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTl9vcc-JLl-uoL-Au7Q3wAAAEk"]
[Wed Dec 10 22:03:41.955998 2025] [:error] [pid 37062:tid 37070] [client 172.192.18.135:60826] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aTl9vTB0I62HCw8Z5BRxHwAAAAY"]
[Wed Dec 10 22:03:42.217204 2025] [:error] [pid 37062:tid 37065] [client 172.192.18.135:60802] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTl9vjB0I62HCw8Z5BRxIAAAAAE"]
[Wed Dec 10 22:03:42.491744 2025] [:error] [pid 37062:tid 37064] [client 172.192.18.135:60815] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTl9vjB0I62HCw8Z5BRxIwAAAAA"]
[Wed Dec 10 22:03:42.730347 2025] [:error] [pid 36975:tid 36988] [client 172.192.18.135:60844] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTl9vt_ZNQ3zMmb38BF_QwAAAIg"]
[Wed Dec 10 22:03:42.965366 2025] [:error] [pid 36975:tid 36986] [client 172.192.18.135:32394] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTl9vt_ZNQ3zMmb38BF_RAAAAIY"]
[Wed Dec 10 22:03:43.241618 2025] [:error] [pid 36977:tid 37046] [client 172.192.18.135:59571] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aTl9v8c-JLl-uoL-Au7Q4gAAAEw"]
[Wed Dec 10 22:03:43.485947 2025] [:error] [pid 36975:tid 36992] [client 172.192.18.135:60924] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aTl9v9_ZNQ3zMmb38BF_RgAAAIw"]
[Wed Dec 10 22:03:43.717233 2025] [:error] [pid 36977:tid 37056] [client 172.192.18.135:60927] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aTl9v8c-JLl-uoL-Au7Q4wAAAFY"]
[Wed Dec 10 22:03:43.996174 2025] [:error] [pid 36977:tid 37037] [client 172.192.18.135:59541] [client 172.192.18.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aTl9v8c-JLl-uoL-Au7Q5QAAAEM"]
[Thu Dec 11 05:53:39.986005 2025] [:error] [pid 57990:tid 58002] [client 216.24.219.205:42067] [client 216.24.219.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.205, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTnr4wqZT_dc36fQdXG7HgAAAAc"]
[Thu Dec 11 07:05:14.205004 2025] [proxy_fcgi:error] [pid 57990:tid 58010] [client 4.189.160.147:28620] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Thu Dec 11 07:05:16.218723 2025] [:error] [pid 57990:tid 58019] [client 4.189.160.147:28620] [client 4.189.160.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.160.147, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTn8rAqZT_dc36fQdXHI3wAAABg"], referer: https://www.bing.com/
[Thu Dec 11 07:05:16.227008 2025] [proxy_fcgi:error] [pid 57990:tid 58019] [client 4.189.160.147:28620] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Thu Dec 11 07:05:54.677982 2025] [:error] [pid 57990:tid 58014] [client 4.189.160.147:28547] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTn80gqZT_dc36fQdXHJJgAAABM"], referer: https://www.google.com/
[Thu Dec 11 07:05:55.900614 2025] [:error] [pid 57991:tid 58044] [client 4.189.160.147:28631] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTn806PyGmNXA2ZsETb3YgAAAFY"], referer: https://duckduckgo.com/
[Thu Dec 11 07:05:56.839609 2025] [:error] [pid 58099:tid 58125] [client 4.189.160.147:28661] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTn81MKZVSF_bdPFqRhKDwAAANg"], referer: https://www.yahoo.com/
[Thu Dec 11 07:05:57.841465 2025] [:error] [pid 57990:tid 58004] [client 4.189.160.147:28561] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTn81QqZT_dc36fQdXHJKQAAAAk"], referer: https://www.bing.com/
[Thu Dec 11 07:06:01.086883 2025] [:error] [pid 58099:tid 58122] [client 4.189.160.147:28622] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTn82cKZVSF_bdPFqRhKGQAAANU"], referer: https://www.google.com/
[Thu Dec 11 07:06:03.129057 2025] [:error] [pid 48261:tid 48279] [client 4.189.160.147:28610] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTn82-yPI4WU-4JmiQOZ4wAAAY8"], referer: https://www.bing.com/
[Thu Dec 11 07:06:05.008618 2025] [:error] [pid 57992:tid 58053] [client 4.189.160.147:28663] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTn83eUeau0BMFF2vHn1xgAAAIQ"], referer: https://www.google.com/
[Thu Dec 11 07:06:06.310368 2025] [:error] [pid 35112:tid 35114] [client 4.189.160.147:28646] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTn83p9ZpQ0WIeJhsJeGxQAAAUA"], referer: https://duckduckgo.com/
[Thu Dec 11 07:06:07.142913 2025] [:error] [pid 57991:tid 58036] [client 4.189.160.147:28625] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTn836PyGmNXA2ZsETb3dwAAAE4"], referer: https://www.bing.com/
[Thu Dec 11 07:06:08.333377 2025] [:error] [pid 35112:tid 35129] [client 4.189.160.147:28544] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTn84J9ZpQ0WIeJhsJeGywAAAU8"], referer: https://www.bing.com/
[Thu Dec 11 07:06:09.813461 2025] [:error] [pid 48261:tid 48265] [client 4.189.160.147:28636] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTn84eyPI4WU-4JmiQOZ6gAAAYE"], referer: https://duckduckgo.com/
[Thu Dec 11 07:06:12.223418 2025] [:error] [pid 35112:tid 35132] [client 4.189.160.147:28609] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTn85J9ZpQ0WIeJhsJeG0AAAAVI"], referer: https://www.google.co.uk/
[Thu Dec 11 07:06:13.335199 2025] [:error] [pid 57992:tid 58070] [client 4.189.160.147:28617] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTn85eUeau0BMFF2vHn1zgAAAJU"], referer: https://www.google.fr/
[Thu Dec 11 07:06:14.375151 2025] [:error] [pid 48261:tid 48287] [client 4.189.160.147:28638] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aTn85uyPI4WU-4JmiQOZ8QAAAZc"], referer: https://www.bing.com/
[Thu Dec 11 07:06:15.211766 2025] [:error] [pid 57990:tid 57998] [client 4.189.160.147:28550] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTn85wqZT_dc36fQdXHJQQAAAAM"], referer: https://www.google.fr/
[Thu Dec 11 07:06:16.092206 2025] [:error] [pid 57990:tid 58018] [client 4.189.160.147:28644] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-locale-switcher-less.php"] [unique_id "aTn86AqZT_dc36fQdXHJQwAAABc"], referer: https://www.google.fr/
[Thu Dec 11 07:06:19.309560 2025] [:error] [pid 58099:tid 58110] [client 4.189.160.147:28641] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTn868KZVSF_bdPFqRhKHwAAAMk"], referer: https://www.google.co.uk/
[Thu Dec 11 07:06:21.556028 2025] [:error] [pid 48261:tid 48285] [client 4.189.160.147:28635] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTn87eyPI4WU-4JmiQOaBgAAAZU"], referer: https://www.bing.com/
[Thu Dec 11 07:06:23.947200 2025] [:error] [pid 57990:tid 57995] [client 4.189.160.147:28665] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-media-icon-control.php"] [unique_id "aTn87wqZT_dc36fQdXHJSAAAAAA"], referer: https://www.bing.com/
[Thu Dec 11 07:06:26.562559 2025] [:error] [pid 57992:tid 58072] [client 4.189.160.147:28557] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTn88uUeau0BMFF2vHn17AAAAJc"], referer: https://www.google.fr/
[Thu Dec 11 07:06:28.599674 2025] [:error] [pid 27459:tid 27461] [client 4.189.160.147:28578] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTn89FhPEXihPBKMpROG_QAAAQA"], referer: https://www.google.de/
[Thu Dec 11 07:06:30.504716 2025] [:error] [pid 58099:tid 58109] [client 4.189.160.147:28549] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTn89sKZVSF_bdPFqRhKNwAAAMg"], referer: https://www.google.fr/
[Thu Dec 11 07:06:33.294646 2025] [:error] [pid 48261:tid 48265] [client 4.189.160.147:28567] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTn8-eyPI4WU-4JmiQOaHAAAAYE"], referer: https://www.google.co.uk/
[Thu Dec 11 07:06:35.192991 2025] [:error] [pid 57990:tid 58005] [client 4.189.160.147:28570] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTn8-wqZT_dc36fQdXHJTgAAAAo"], referer: https://duckduckgo.com/
[Thu Dec 11 07:06:37.000114 2025] [:error] [pid 57990:tid 58014] [client 4.189.160.147:28645] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTn8_AqZT_dc36fQdXHJUwAAABM"], referer: https://www.yahoo.com/
[Thu Dec 11 07:06:38.596208 2025] [:error] [pid 35112:tid 35137] [client 4.189.160.147:28628] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTn8_p9ZpQ0WIeJhsJeG8AAAAVc"], referer: https://www.google.fr/
[Thu Dec 11 07:06:39.672618 2025] [:error] [pid 58099:tid 58112] [client 4.189.160.147:28656] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTn8_8KZVSF_bdPFqRhKQgAAAMs"], referer: https://duckduckgo.com/
[Thu Dec 11 07:06:42.324590 2025] [:error] [pid 57990:tid 58005] [client 4.189.160.147:28651] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTn9AgqZT_dc36fQdXHJWAAAAAo"], referer: https://www.bing.com/
[Thu Dec 11 07:06:45.971591 2025] [:error] [pid 57990:tid 58000] [client 4.189.160.147:28642] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTn9BQqZT_dc36fQdXHJWQAAAAU"], referer: https://www.google.com/
[Thu Dec 11 07:06:48.442463 2025] [:error] [pid 58099:tid 58108] [client 4.189.160.147:28615] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTn9CMKZVSF_bdPFqRhKTAAAAMc"], referer: https://duckduckgo.com/
[Thu Dec 11 07:06:51.999829 2025] [:error] [pid 27459:tid 27468] [client 4.189.160.147:28563] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTn9C1hPEXihPBKMpROHDQAAAQc"], referer: https://www.yahoo.com/
[Thu Dec 11 07:06:54.416563 2025] [:error] [pid 57991:tid 58041] [client 4.189.160.147:28545] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-db-array.php"] [unique_id "aTn9DqPyGmNXA2ZsETb3mwAAAFM"], referer: https://duckduckgo.com/
[Thu Dec 11 07:07:03.289290 2025] [:error] [pid 48261:tid 48274] [client 4.189.160.147:28613] [client 4.189.160.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.189.160.147, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTn9F-yPI4WU-4JmiQOaVQAAAYo"], referer: https://www.google.de/
[Thu Dec 11 07:07:04.217738 2025] [:error] [pid 57990:tid 57995] [client 4.189.160.147:28635] [client 4.189.160.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.189.160.147, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTn9GAqZT_dc36fQdXHJaQAAAAA"], referer: https://www.google.de/
[Thu Dec 11 07:07:17.074397 2025] [:error] [pid 48261:tid 48284] [client 4.189.160.147:28613] [client 4.189.160.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.160.147, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTn9JeyPI4WU-4JmiQOagQAAAZQ"], referer: https://www.yahoo.com/
[Thu Dec 11 07:07:17.195876 2025] [:error] [pid 57990:tid 58010] [client 4.189.160.147:28635] [client 4.189.160.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.160.147, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTn9JQqZT_dc36fQdXHJjAAAAA8"], referer: https://www.yahoo.com/
[Thu Dec 11 07:07:39.700047 2025] [:error] [pid 27459:tid 27468] [client 4.189.160.147:28637] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTn9O1hPEXihPBKMpROHXAAAAQc"], referer: https://www.google.co.uk/
[Thu Dec 11 07:07:40.689462 2025] [:error] [pid 58099:tid 58101] [client 4.189.160.147:28580] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aTn9PMKZVSF_bdPFqRhKjAAAAMA"], referer: https://www.google.com/
[Thu Dec 11 07:07:41.212316 2025] [:error] [pid 57990:tid 57996] [client 4.189.160.147:28666] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTn9PQqZT_dc36fQdXHJmAAAAAE"], referer: https://www.google.de/
[Thu Dec 11 07:07:42.304776 2025] [:error] [pid 35112:tid 35124] [client 4.189.160.147:28568] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aTn9Pp9ZpQ0WIeJhsJeHQwAAAUo"], referer: https://www.bing.com/
[Thu Dec 11 07:07:43.646376 2025] [:error] [pid 48261:tid 48286] [client 4.189.160.147:28639] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTn9P-yPI4WU-4JmiQOarwAAAZY"], referer: https://www.yahoo.com/
[Thu Dec 11 07:07:48.633990 2025] [:error] [pid 48261:tid 48288] [client 4.189.160.147:28597] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTn9ROyPI4WU-4JmiQOauAAAAZg"], referer: https://www.google.fr/
[Thu Dec 11 07:07:49.576809 2025] [:error] [pid 57991:tid 58038] [client 4.189.160.147:28612] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTn9RaPyGmNXA2ZsETb32gAAAFA"], referer: https://www.bing.com/
[Thu Dec 11 07:07:50.055560 2025] [:error] [pid 58099:tid 58118] [client 4.189.160.147:28582] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTn9RsKZVSF_bdPFqRhKrwAAANE"], referer: https://www.google.co.uk/
[Thu Dec 11 07:07:50.996478 2025] [:error] [pid 57990:tid 57998] [client 4.189.160.147:28653] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTn9RgqZT_dc36fQdXHJxQAAAAM"], referer: https://www.google.fr/
[Thu Dec 11 07:07:52.811602 2025] [:error] [pid 57990:tid 58016] [client 4.189.160.147:28655] [client 4.189.160.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTn9SAqZT_dc36fQdXHJxwAAABU"], referer: https://duckduckgo.com/
[Thu Dec 11 07:08:04.021489 2025] [autoindex:error] [pid 35112:tid 35136] [client 4.189.160.147:28659] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Dec 11 07:08:05.943415 2025] [autoindex:error] [pid 57992:tid 58051] [client 4.189.160.147:28552] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Dec 11 07:08:09.787873 2025] [autoindex:error] [pid 35112:tid 35129] [client 4.189.160.147:28659] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/vendor/phpunit/phpunit/src/Util/PHP/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Dec 11 07:08:10.301736 2025] [autoindex:error] [pid 35112:tid 35116] [client 4.189.160.147:28659] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Dec 11 07:08:12.400745 2025] [authz_core:error] [pid 57992:tid 58056] [client 4.189.160.147:28552] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/, referer: https://www.bing.com/
[Thu Dec 11 10:15:01.697080 2025] [:error] [pid 57990:tid 58010] [client 182.44.10.67:41827] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTopJQqZT_dc36fQdXHz1gAAAA8"]
[Thu Dec 11 10:40:15.656984 2025] [:error] [pid 57990:tid 58006] [client 45.8.17.82:38353] [client 45.8.17.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.8.17.82, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTovDwqZT_dc36fQdXH48AAAAAs"]
[Thu Dec 11 12:04:35.798325 2025] [:error] [pid 57992:tid 58067] [client 202.176.4.55:59470] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTpC0-Ueau0BMFF2vHk8fQAAAJI"]
[Thu Dec 11 12:04:37.189898 2025] [:error] [pid 58099:tid 58103] [client 202.176.4.55:53450] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTpC1cKZVSF_bdPFqRiVsQAAAMI"]
[Thu Dec 11 12:04:39.467329 2025] [:error] [pid 48261:tid 48267] [client 202.176.4.55:56910] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aTpC1-yPI4WU-4JmiQMLUAAAAYM"]
[Thu Dec 11 12:04:40.858985 2025] [:error] [pid 58099:tid 58106] [client 202.176.4.55:56920] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTpC2MKZVSF_bdPFqRiVtQAAAMU"]
[Thu Dec 11 12:04:44.517917 2025] [:error] [pid 35112:tid 35133] [client 202.176.4.55:56922] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTpC3J9ZpQ0WIeJhsJfcnAAAAVM"]
[Thu Dec 11 12:04:45.355257 2025] [:error] [pid 57990:tid 58017] [client 202.176.4.55:56924] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTpC3QqZT_dc36fQdXENswAAABY"]
[Thu Dec 11 12:04:45.904804 2025] [:error] [pid 27459:tid 27461] [client 202.176.4.55:56940] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTpC3VhPEXihPBKMpRPUfwAAAQA"]
[Thu Dec 11 12:04:46.455473 2025] [:error] [pid 35112:tid 35120] [client 202.176.4.55:39356] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTpC3p9ZpQ0WIeJhsJfc4QAAAUY"]
[Thu Dec 11 12:04:47.008418 2025] [:error] [pid 48261:tid 48286] [client 202.176.4.55:56970] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTpC3-yPI4WU-4JmiQMLbgAAAZY"]
[Thu Dec 11 12:04:47.558764 2025] [:error] [pid 57990:tid 57999] [client 202.176.4.55:54392] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTpC3wqZT_dc36fQdXENtQAAAAQ"]
[Thu Dec 11 12:04:48.386777 2025] [:error] [pid 57991:tid 58033] [client 202.176.4.55:54398] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTpC4KPyGmNXA2ZsETY6iQAAAEs"]
[Thu Dec 11 12:04:49.499921 2025] [:error] [pid 27459:tid 27472] [client 202.176.4.55:54404] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aTpC4VhPEXihPBKMpRPUhgAAAQs"]
[Thu Dec 11 12:04:50.611851 2025] [:error] [pid 35112:tid 35123] [client 202.176.4.55:54416] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTpC4p9ZpQ0WIeJhsJfc7QAAAUk"]
[Thu Dec 11 12:04:51.448657 2025] [:error] [pid 57992:tid 58072] [client 202.176.4.55:54424] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTpC4-Ueau0BMFF2vHk8gwAAAJc"]
[Thu Dec 11 12:04:52.278518 2025] [:error] [pid 57992:tid 58054] [client 202.176.4.55:54426] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTpC5OUeau0BMFF2vHk8hgAAAIU"]
[Thu Dec 11 12:04:54.521087 2025] [:error] [pid 57991:tid 58042] [client 202.176.4.55:54442] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTpC5qPyGmNXA2ZsETY6ngAAAFQ"]
[Thu Dec 11 12:04:55.354753 2025] [:error] [pid 27459:tid 27479] [client 202.176.4.55:54458] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTpC51hPEXihPBKMpRPUjgAAARI"]
[Thu Dec 11 12:04:57.751840 2025] [:error] [pid 58099:tid 58125] [client 202.176.4.55:54464] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aTpC6cKZVSF_bdPFqRiV7AAAANg"]
[Thu Dec 11 12:04:58.605190 2025] [:error] [pid 48261:tid 48273] [client 202.176.4.55:20334] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTpC6uyPI4WU-4JmiQMLegAAAYk"]
[Thu Dec 11 12:05:00.286272 2025] [:error] [pid 57992:tid 58051] [client 202.176.4.55:60468] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTpC7OUeau0BMFF2vHk8kQAAAII"]
[Thu Dec 11 12:05:01.116004 2025] [:error] [pid 58099:tid 58107] [client 202.176.4.55:60470] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTpC7cKZVSF_bdPFqRiV8gAAAMY"]
[Thu Dec 11 12:05:01.985932 2025] [:error] [pid 57991:tid 58040] [client 202.176.4.55:60474] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTpC7aPyGmNXA2ZsETY6sAAAAFI"]
[Thu Dec 11 12:05:02.550368 2025] [:error] [pid 57992:tid 58073] [client 202.176.4.55:60482] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTpC7uUeau0BMFF2vHk8lQAAAJg"]
[Thu Dec 11 12:05:03.106142 2025] [:error] [pid 57991:tid 58039] [client 202.176.4.55:60490] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTpC76PyGmNXA2ZsETY6uAAAAFE"]
[Thu Dec 11 12:05:04.497252 2025] [:error] [pid 57990:tid 58012] [client 202.176.4.55:60492] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aTpC8AqZT_dc36fQdXENwwAAABE"]
[Thu Dec 11 12:05:05.056653 2025] [:error] [pid 35112:tid 35135] [client 202.176.4.55:60498] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aTpC8Z9ZpQ0WIeJhsJfc9gAAAVU"]
[Thu Dec 11 12:05:05.636526 2025] [:error] [pid 57992:tid 58071] [client 202.176.4.55:60510] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTpC8eUeau0BMFF2vHk8mAAAAJY"]
[Thu Dec 11 12:05:08.463819 2025] [:error] [pid 57992:tid 58050] [client 202.176.4.55:60520] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aTpC9OUeau0BMFF2vHk8ogAAAIE"]
[Thu Dec 11 12:05:09.875724 2025] [:error] [pid 57991:tid 58033] [client 202.176.4.55:58276] [client 202.176.4.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.176.4.55, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTpC9aPyGmNXA2ZsETY6yQAAAEs"]
[Thu Dec 11 12:05:13.667741 2025] [:error] [pid 57991:tid 58041] [client 202.176.4.55:58276] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTpC-aPyGmNXA2ZsETY63QAAAFM"]
[Thu Dec 11 12:05:14.774268 2025] [:error] [pid 35112:tid 35126] [client 202.176.4.55:58300] [client 202.176.4.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.176.4.55, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTpC-p9ZpQ0WIeJhsJfdBAAAAUw"]
[Thu Dec 11 12:05:15.342074 2025] [:error] [pid 35112:tid 35116] [client 202.176.4.55:58300] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aTpC-59ZpQ0WIeJhsJfdBgAAAUI"]
[Thu Dec 11 12:05:18.123803 2025] [:error] [pid 35112:tid 35137] [client 202.176.4.55:58302] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTpC_p9ZpQ0WIeJhsJfdFQAAAVc"]
[Thu Dec 11 12:05:20.902662 2025] [:error] [pid 57990:tid 58001] [client 202.176.4.55:40950] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTpDAAqZT_dc36fQdXEN0QAAAAY"]
[Thu Dec 11 12:05:22.016680 2025] [:error] [pid 35112:tid 35116] [client 202.176.4.55:40958] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTpDAp9ZpQ0WIeJhsJfdGwAAAUI"]
[Thu Dec 11 12:05:23.405870 2025] [:error] [pid 27459:tid 27483] [client 202.176.4.55:40962] [client 202.176.4.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.176.4.55, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aTpDA1hPEXihPBKMpRPUqAAAARY"]
[Thu Dec 11 12:05:23.685108 2025] [:error] [pid 27459:tid 27479] [client 202.176.4.55:40962] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTpDA1hPEXihPBKMpRPUqQAAARI"]
[Thu Dec 11 12:05:28.996125 2025] [:error] [pid 57990:tid 58002] [client 202.176.4.55:40966] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTpDCAqZT_dc36fQdXEN5gAAAAc"]
[Thu Dec 11 12:05:31.734856 2025] [:error] [pid 57992:tid 58069] [client 202.176.4.55:37752] [client 202.176.4.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.176.4.55, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTpDC-Ueau0BMFF2vHk8ugAAAJQ"]
[Thu Dec 11 12:05:32.852248 2025] [:error] [pid 57992:tid 58052] [client 202.176.4.55:37752] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTpDDOUeau0BMFF2vHk8vgAAAIM"]
[Thu Dec 11 12:05:33.680440 2025] [:error] [pid 58099:tid 58116] [client 202.176.4.55:37764] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aTpDDcKZVSF_bdPFqRiWCgAAAM8"]
[Thu Dec 11 12:05:34.795619 2025] [:error] [pid 57991:tid 58040] [client 202.176.4.55:37770] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTpDDqPyGmNXA2ZsETY6-QAAAFI"]
[Thu Dec 11 12:05:36.192211 2025] [:error] [pid 35112:tid 35119] [client 202.176.4.55:37786] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTpDEJ9ZpQ0WIeJhsJfdLQAAAUU"]
[Thu Dec 11 12:05:36.746638 2025] [:error] [pid 57992:tid 58056] [client 202.176.4.55:37798] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTpDEOUeau0BMFF2vHk8wQAAAIc"]
[Thu Dec 11 12:05:40.393307 2025] [:error] [pid 58099:tid 58113] [client 202.176.4.55:41950] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTpDFMKZVSF_bdPFqRiWFAAAAMw"]
[Thu Dec 11 12:05:41.227031 2025] [:error] [pid 48261:tid 48288] [client 202.176.4.55:41958] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTpDFeyPI4WU-4JmiQMLpQAAAZg"]
[Thu Dec 11 12:05:42.623957 2025] [:error] [pid 57990:tid 58008] [client 202.176.4.55:5783] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aTpDFgqZT_dc36fQdXEN9wAAAA0"]
[Thu Dec 11 12:05:44.017324 2025] [:error] [pid 57990:tid 58012] [client 202.176.4.55:41974] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTpDGAqZT_dc36fQdXEN_AAAABE"]
[Thu Dec 11 12:05:45.138117 2025] [:error] [pid 35112:tid 35126] [client 202.176.4.55:41984] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aTpDGZ9ZpQ0WIeJhsJfdNQAAAUw"]
[Thu Dec 11 12:05:46.531723 2025] [:error] [pid 57992:tid 58068] [client 202.176.4.55:41994] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTpDGuUeau0BMFF2vHk8ywAAAJM"]
[Thu Dec 11 12:05:49.039821 2025] [:error] [pid 57991:tid 58040] [client 202.176.4.55:42006] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTpDHaPyGmNXA2ZsETY7FgAAAFI"]
[Thu Dec 11 12:05:49.589227 2025] [:error] [pid 57990:tid 58015] [client 202.176.4.55:55788] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aTpDHQqZT_dc36fQdXEN_gAAABQ"]
[Thu Dec 11 12:05:50.152054 2025] [:error] [pid 48261:tid 48284] [client 202.176.4.55:55804] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTpDHuyPI4WU-4JmiQMLrwAAAZQ"]
[Thu Dec 11 12:05:50.705012 2025] [:error] [pid 57991:tid 58046] [client 202.176.4.55:55818] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTpDHqPyGmNXA2ZsETY7FwAAAFg"]
[Thu Dec 11 12:05:51.542835 2025] [:error] [pid 35112:tid 35132] [client 202.176.4.55:55820] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTpDH59ZpQ0WIeJhsJfdPQAAAVI"]
[Thu Dec 11 12:05:52.094997 2025] [:error] [pid 57991:tid 58033] [client 202.176.4.55:55836] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTpDIKPyGmNXA2ZsETY7GwAAAEs"]
[Thu Dec 11 12:05:53.206600 2025] [:error] [pid 35112:tid 35124] [client 202.176.4.55:55844] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTpDIZ9ZpQ0WIeJhsJfdQgAAAUo"]
[Thu Dec 11 12:05:53.764293 2025] [:error] [pid 48261:tid 48265] [client 202.176.4.55:55858] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTpDIeyPI4WU-4JmiQMLswAAAYE"]
[Thu Dec 11 12:05:54.314507 2025] [:error] [pid 58099:tid 58105] [client 202.176.4.55:55870] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTpDIsKZVSF_bdPFqRiWIgAAAMQ"]
[Thu Dec 11 12:05:54.864760 2025] [:error] [pid 57990:tid 58016] [client 202.176.4.55:55884] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTpDIgqZT_dc36fQdXEOBAAAABU"]
[Thu Dec 11 12:05:55.696658 2025] [:error] [pid 27459:tid 27483] [client 202.176.4.55:55886] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTpDI1hPEXihPBKMpRPUxwAAARY"]
[Thu Dec 11 12:05:56.810374 2025] [:error] [pid 57991:tid 58025] [client 202.176.4.55:5464] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTpDJKPyGmNXA2ZsETY7JAAAAEM"]
[Thu Dec 11 12:05:58.488635 2025] [:error] [pid 57992:tid 58049] [client 202.176.4.55:40228] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTpDJuUeau0BMFF2vHk83wAAAIA"]
[Thu Dec 11 12:06:01.068984 2025] [:error] [pid 57990:tid 57998] [client 202.176.4.55:40232] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aTpDKQqZT_dc36fQdXEOEQAAAAM"]
[Thu Dec 11 12:06:02.484806 2025] [:error] [pid 35112:tid 35136] [client 202.176.4.55:40244] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTpDKp9ZpQ0WIeJhsJfdUAAAAVY"]
[Thu Dec 11 12:06:03.039179 2025] [:error] [pid 58099:tid 58111] [client 202.176.4.55:40254] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTpDK8KZVSF_bdPFqRiWLAAAAMo"]
[Thu Dec 11 12:06:04.721958 2025] [:error] [pid 58099:tid 58123] [client 202.176.4.55:40262] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTpDLMKZVSF_bdPFqRiWOQAAANY"]
[Thu Dec 11 12:06:06.147642 2025] [proxy_fcgi:error] [pid 57990:tid 58016] [client 202.176.4.55:40264] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:06:06.432598 2025] [proxy_fcgi:error] [pid 57990:tid 58007] [client 202.176.4.55:40264] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:06:06.713938 2025] [proxy_fcgi:error] [pid 57990:tid 58008] [client 202.176.4.55:40264] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:06:08.121259 2025] [:error] [pid 57990:tid 57995] [client 202.176.4.55:40264] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTpDMAqZT_dc36fQdXEOIgAAAAA"]
[Thu Dec 11 12:06:08.670997 2025] [:error] [pid 27459:tid 27464] [client 202.176.4.55:34128] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTpDMFhPEXihPBKMpRPU3AAAAQM"]
[Thu Dec 11 12:06:09.221769 2025] [:error] [pid 48261:tid 48268] [client 202.176.4.55:34138] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTpDMeyPI4WU-4JmiQMLxwAAAYQ"]
[Thu Dec 11 12:06:09.771571 2025] [:error] [pid 27459:tid 27474] [client 202.176.4.55:34152] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTpDMVhPEXihPBKMpRPU4QAAAQ0"]
[Thu Dec 11 12:06:10.322046 2025] [:error] [pid 48261:tid 48287] [client 202.176.4.55:34156] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTpDMuyPI4WU-4JmiQMLyQAAAZc"]
[Thu Dec 11 12:06:10.873421 2025] [:error] [pid 35112:tid 35123] [client 202.176.4.55:34168] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTpDMp9ZpQ0WIeJhsJfdVwAAAUk"]
[Thu Dec 11 12:06:11.707060 2025] [:error] [pid 57992:tid 58072] [client 202.176.4.55:34178] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTpDM-Ueau0BMFF2vHk85gAAAJc"]
[Thu Dec 11 12:06:12.258198 2025] [:error] [pid 58099:tid 58110] [client 202.176.4.55:34188] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTpDNMKZVSF_bdPFqRiWQQAAAMk"]
[Thu Dec 11 12:06:12.813276 2025] [:error] [pid 27459:tid 27465] [client 202.176.4.55:34192] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTpDNFhPEXihPBKMpRPU5AAAAQQ"]
[Thu Dec 11 12:06:13.364173 2025] [:error] [pid 48261:tid 48275] [client 202.176.4.55:34198] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTpDNeyPI4WU-4JmiQMLzQAAAYs"]
[Thu Dec 11 12:06:14.478300 2025] [:error] [pid 48261:tid 48287] [client 202.176.4.55:34214] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTpDNuyPI4WU-4JmiQML1AAAAZc"]
[Thu Dec 11 12:06:15.303676 2025] [:error] [pid 48261:tid 48285] [client 202.176.4.55:34218] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTpDN-yPI4WU-4JmiQML1wAAAZU"]
[Thu Dec 11 12:06:16.414604 2025] [:error] [pid 35112:tid 35117] [client 202.176.4.55:34232] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTpDOJ9ZpQ0WIeJhsJfdZQAAAUM"]
[Thu Dec 11 12:06:17.526826 2025] [:error] [pid 35112:tid 35116] [client 202.176.4.55:34242] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aTpDOZ9ZpQ0WIeJhsJfddQAAAUI"]
[Thu Dec 11 12:06:18.938452 2025] [:error] [pid 27459:tid 27481] [client 202.176.4.55:54176] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTpDOlhPEXihPBKMpRPU6QAAARQ"]
[Thu Dec 11 12:06:20.608713 2025] [:error] [pid 58099:tid 58118] [client 202.176.4.55:54180] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTpDPMKZVSF_bdPFqRiWUwAAANE"]
[Thu Dec 11 12:06:21.439747 2025] [:error] [pid 27459:tid 27474] [client 202.176.4.55:54190] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aTpDPVhPEXihPBKMpRPU7gAAAQ0"]
[Thu Dec 11 12:06:26.473401 2025] [:error] [pid 27459:tid 27477] [client 202.176.4.55:54204] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTpDQlhPEXihPBKMpRPVCgAAARA"]
[Thu Dec 11 12:06:27.030654 2025] [:error] [pid 58099:tid 58125] [client 202.176.4.55:54210] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTpDQ8KZVSF_bdPFqRiWXAAAANg"]
[Thu Dec 11 12:06:27.605800 2025] [:error] [pid 35112:tid 35121] [client 202.176.4.55:44472] [client 202.176.4.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.176.4.55, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aTpDQ59ZpQ0WIeJhsJfdfAAAAUc"]
[Thu Dec 11 12:06:28.173799 2025] [:error] [pid 35112:tid 35134] [client 202.176.4.55:44472] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTpDRJ9ZpQ0WIeJhsJfdfwAAAVQ"]
[Thu Dec 11 12:06:29.288570 2025] [:error] [pid 57992:tid 58053] [client 202.176.4.55:44474] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTpDReUeau0BMFF2vHk89QAAAIQ"]
[Thu Dec 11 12:06:29.844753 2025] [:error] [pid 48261:tid 48277] [client 202.176.4.55:44482] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTpDReyPI4WU-4JmiQML5AAAAY0"]
[Thu Dec 11 12:06:31.533803 2025] [:error] [pid 57991:tid 58024] [client 202.176.4.55:44484] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTpDR6PyGmNXA2ZsETY7bAAAAEI"]
[Thu Dec 11 12:06:32.097020 2025] [:error] [pid 35112:tid 35120] [client 202.176.4.55:44492] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aTpDSJ9ZpQ0WIeJhsJfdgAAAAUY"]
[Thu Dec 11 12:06:34.078637 2025] [:error] [pid 35112:tid 35117] [client 202.176.4.55:44494] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTpDSp9ZpQ0WIeJhsJfdhwAAAUM"]
[Thu Dec 11 12:06:35.206417 2025] [proxy_fcgi:error] [pid 35112:tid 35127] [client 202.176.4.55:44510] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:06:35.762673 2025] [:error] [pid 35112:tid 35135] [client 202.176.4.55:44510] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aTpDS59ZpQ0WIeJhsJfdjgAAAVU"]
[Thu Dec 11 12:06:36.313383 2025] [:error] [pid 58099:tid 58118] [client 202.176.4.55:44514] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aTpDTMKZVSF_bdPFqRiWZwAAANE"]
[Thu Dec 11 12:06:37.423367 2025] [:error] [pid 27459:tid 27472] [client 202.176.4.55:44522] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTpDTVhPEXihPBKMpRPVEQAAAQs"]
[Thu Dec 11 12:06:37.974465 2025] [:error] [pid 57991:tid 58023] [client 202.176.4.55:52206] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTpDTaPyGmNXA2ZsETY7cAAAAEE"]
[Thu Dec 11 12:06:40.498350 2025] [:error] [pid 35112:tid 35116] [client 202.176.4.55:52222] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aTpDUJ9ZpQ0WIeJhsJfdnwAAAUI"]
[Thu Dec 11 12:06:41.047702 2025] [:error] [pid 58099:tid 58108] [client 202.176.4.55:52234] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTpDUcKZVSF_bdPFqRiWbwAAAMc"]
[Thu Dec 11 12:06:42.718118 2025] [:error] [pid 57991:tid 58033] [client 202.176.4.55:52244] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTpDUqPyGmNXA2ZsETY7dwAAAEs"]
[Thu Dec 11 12:06:43.268860 2025] [:error] [pid 48261:tid 48268] [client 202.176.4.55:52246] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTpDU-yPI4WU-4JmiQML9gAAAYQ"]
[Thu Dec 11 12:06:43.825784 2025] [:error] [pid 57992:tid 58057] [client 202.176.4.55:52258] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTpDU-Ueau0BMFF2vHk8_wAAAIg"]
[Thu Dec 11 12:06:45.779742 2025] [:error] [pid 27459:tid 27477] [client 202.176.4.55:52260] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTpDVVhPEXihPBKMpRPVGQAAARA"]
[Thu Dec 11 12:06:46.610753 2025] [:error] [pid 58099:tid 58106] [client 202.176.4.55:52262] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTpDVsKZVSF_bdPFqRiWcQAAAMU"]
[Thu Dec 11 12:06:49.132362 2025] [:error] [pid 57991:tid 58045] [client 202.176.4.55:52264] [client 202.176.4.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.176.4.55, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aTpDWaPyGmNXA2ZsETY7hQAAAFc"]
[Thu Dec 11 12:06:50.812625 2025] [:error] [pid 57991:tid 58023] [client 202.176.4.55:52264] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTpDWqPyGmNXA2ZsETY7lgAAAEE"]
[Thu Dec 11 12:06:51.362476 2025] [:error] [pid 27459:tid 27481] [client 202.176.4.55:1898] [client 202.176.4.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.176.4.55, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTpDW1hPEXihPBKMpRPVGwAAARQ"]
[Thu Dec 11 12:06:54.459504 2025] [proxy_fcgi:error] [pid 27459:tid 27468] [client 202.176.4.55:1898] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:06:59.999913 2025] [:error] [pid 27459:tid 27468] [client 202.176.4.55:1898] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTpDY1hPEXihPBKMpRPVPAAAAQc"]
[Thu Dec 11 12:07:01.417810 2025] [:error] [pid 57991:tid 58033] [client 202.176.4.55:41054] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTpDZaPyGmNXA2ZsETY79gAAAEs"]
[Thu Dec 11 12:07:02.564039 2025] [:error] [pid 57990:tid 58015] [client 202.176.4.55:41068] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTpDZgqZT_dc36fQdXEOWgAAABQ"]
[Thu Dec 11 12:07:05.640360 2025] [:error] [pid 48261:tid 48268] [client 202.176.4.55:41070] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTpDaeyPI4WU-4JmiQMMdwAAAYQ"]
[Thu Dec 11 12:07:06.754464 2025] [:error] [pid 57992:tid 58060] [client 202.176.4.55:41076] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTpDauUeau0BMFF2vHk9GQAAAIs"]
[Thu Dec 11 12:07:07.590946 2025] [:error] [pid 57992:tid 58052] [client 202.176.4.55:60832] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTpDa-Ueau0BMFF2vHk9HAAAAIM"]
[Thu Dec 11 12:07:09.295943 2025] [proxy_fcgi:error] [pid 48261:tid 48270] [client 202.176.4.55:60846] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:07:09.575959 2025] [proxy_fcgi:error] [pid 48261:tid 48281] [client 202.176.4.55:60846] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:07:09.851369 2025] [:error] [pid 48261:tid 48275] [client 202.176.4.55:60846] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTpDbeyPI4WU-4JmiQMMgwAAAYs"]
[Thu Dec 11 12:07:12.327760 2025] [:error] [pid 58099:tid 58110] [client 202.176.4.55:60850] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTpDcMKZVSF_bdPFqRiWuAAAAMk"]
[Thu Dec 11 12:07:14.861495 2025] [:error] [pid 48261:tid 48273] [client 202.176.4.55:60862] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTpDcuyPI4WU-4JmiQMMjwAAAYk"]
[Thu Dec 11 12:07:15.699279 2025] [:error] [pid 27459:tid 27467] [client 202.176.4.55:60868] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aTpDc1hPEXihPBKMpRPVTwAAAQY"]
[Thu Dec 11 12:07:17.092956 2025] [:error] [pid 35112:tid 35116] [client 202.176.4.55:60870] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTpDdZ9ZpQ0WIeJhsJfdwwAAAUI"]
[Thu Dec 11 12:07:19.651133 2025] [:error] [pid 27459:tid 27472] [client 202.176.4.55:35598] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTpDd1hPEXihPBKMpRPVbAAAAQs"]
[Thu Dec 11 12:07:20.204839 2025] [proxy_fcgi:error] [pid 58099:tid 58103] [client 202.176.4.55:35602] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:07:21.065808 2025] [:error] [pid 58099:tid 58125] [client 202.176.4.55:35602] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTpDecKZVSF_bdPFqRiWwQAAANg"]
[Thu Dec 11 12:07:23.020732 2025] [proxy_fcgi:error] [pid 57991:tid 58037] [client 202.176.4.55:35612] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:07:23.582214 2025] [:error] [pid 57991:tid 58035] [client 202.176.4.55:35612] [client 202.176.4.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 202.176.4.55, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTpDe6PyGmNXA2ZsETY8EAAAAE0"]
[Thu Dec 11 12:07:24.978919 2025] [:error] [pid 57991:tid 58031] [client 202.176.4.55:35612] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTpDfKPyGmNXA2ZsETY8FQAAAEk"]
[Thu Dec 11 12:07:25.813757 2025] [:error] [pid 48261:tid 48271] [client 202.176.4.55:35620] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTpDfeyPI4WU-4JmiQMMzwAAAYc"]
[Thu Dec 11 12:07:27.489148 2025] [:error] [pid 35112:tid 35128] [client 202.176.4.55:3429] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTpDf59ZpQ0WIeJhsJfeCAAAAU4"]
[Thu Dec 11 12:07:29.167788 2025] [:error] [pid 58099:tid 58113] [client 202.176.4.55:49750] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aTpDgcKZVSF_bdPFqRiWzgAAAMw"]
[Thu Dec 11 12:07:31.412297 2025] [:error] [pid 57992:tid 58053] [client 202.176.4.55:49752] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aTpDg-Ueau0BMFF2vHk9NAAAAIQ"]
[Thu Dec 11 12:07:32.818403 2025] [:error] [pid 27459:tid 27465] [client 202.176.4.55:49760] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aTpDhFhPEXihPBKMpRPVqQAAAQQ"]
[Thu Dec 11 12:07:33.935680 2025] [proxy_fcgi:error] [pid 57992:tid 58071] [client 202.176.4.55:49774] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:07:34.211543 2025] [:error] [pid 57992:tid 58053] [client 202.176.4.55:49774] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aTpDhuUeau0BMFF2vHk9PQAAAIQ"]
[Thu Dec 11 12:07:35.049270 2025] [:error] [pid 57991:tid 58028] [client 202.176.4.55:49778] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aTpDh6PyGmNXA2ZsETY8HgAAAEY"]
[Thu Dec 11 12:07:35.612143 2025] [:error] [pid 58099:tid 58119] [client 202.176.4.55:49794] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aTpDh8KZVSF_bdPFqRiW0wAAANI"]
[Thu Dec 11 12:07:36.167605 2025] [:error] [pid 57990:tid 58004] [client 202.176.4.55:49800] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTpDiAqZT_dc36fQdXEOcgAAAAk"]
[Thu Dec 11 12:07:36.716687 2025] [:error] [pid 57991:tid 58040] [client 202.176.4.55:49806] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aTpDiKPyGmNXA2ZsETY8IAAAAFI"]
[Thu Dec 11 12:07:37.269344 2025] [:error] [pid 57990:tid 57999] [client 202.176.4.55:49810] [client 202.176.4.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aTpDiQqZT_dc36fQdXEOcwAAAAQ"]
[Thu Dec 11 12:07:37.762936 2025] [:error] [pid 35112:tid 35120] [client 152.233.3.58:53294] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aTpDiZ9ZpQ0WIeJhsJfeFgAAAUY"]
[Thu Dec 11 12:07:38.567101 2025] [:error] [pid 48261:tid 48288] [client 152.233.3.58:53300] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aTpDiuyPI4WU-4JmiQMM7QAAAZg"]
[Thu Dec 11 12:07:38.957640 2025] [:error] [pid 35112:tid 35122] [client 152.233.3.58:53312] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aTpDip9ZpQ0WIeJhsJfeGAAAAUg"]
[Thu Dec 11 12:07:39.347099 2025] [:error] [pid 35112:tid 35123] [client 152.233.3.58:53316] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aTpDi59ZpQ0WIeJhsJfeGgAAAUk"]
[Thu Dec 11 12:07:39.936235 2025] [:error] [pid 57990:tid 58005] [client 152.233.3.58:38917] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aTpDiwqZT_dc36fQdXEOdgAAAAo"]
[Thu Dec 11 12:07:40.729325 2025] [:error] [pid 57990:tid 58013] [client 152.233.3.58:53336] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aTpDjAqZT_dc36fQdXEOewAAABI"]
[Thu Dec 11 12:07:41.124710 2025] [proxy_fcgi:error] [pid 57990:tid 58001] [client 152.233.3.58:53350] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:07:41.922197 2025] [:error] [pid 57990:tid 58007] [client 152.233.3.58:53350] [client 152.233.3.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.233.3.58, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aTpDjQqZT_dc36fQdXEOggAAAAw"]
[Thu Dec 11 12:07:44.499741 2025] [:error] [pid 57990:tid 58016] [client 152.233.3.58:53350] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aTpDkAqZT_dc36fQdXEOigAAABU"]
[Thu Dec 11 12:07:44.891460 2025] [:error] [pid 58099:tid 58111] [client 152.233.3.58:53364] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aTpDkMKZVSF_bdPFqRiW2gAAAMo"]
[Thu Dec 11 12:07:48.705667 2025] [:error] [pid 57991:tid 58025] [client 152.233.3.58:53366] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTpDlKPyGmNXA2ZsETY8NQAAAEM"]
[Thu Dec 11 12:07:49.097320 2025] [:error] [pid 57991:tid 58045] [client 152.233.3.58:57192] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aTpDlaPyGmNXA2ZsETY8NgAAAFc"]
[Thu Dec 11 12:07:49.496786 2025] [:error] [pid 48261:tid 48288] [client 152.233.3.58:57200] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aTpDleyPI4WU-4JmiQMM-QAAAZg"]
[Thu Dec 11 12:07:51.122629 2025] [:error] [pid 27459:tid 27475] [client 152.233.3.58:57210] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aTpDl1hPEXihPBKMpRPVtgAAAQ4"]
[Thu Dec 11 12:07:51.522609 2025] [:error] [pid 57992:tid 58065] [client 152.233.3.58:57220] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aTpDl-Ueau0BMFF2vHk9TAAAAJA"]
[Thu Dec 11 12:07:51.924285 2025] [:error] [pid 57992:tid 58050] [client 152.233.3.58:57226] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aTpDl-Ueau0BMFF2vHk9TQAAAIE"]
[Thu Dec 11 12:07:54.735737 2025] [:error] [pid 57991:tid 58039] [client 152.233.3.58:57232] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aTpDmqPyGmNXA2ZsETY8QwAAAFE"]
[Thu Dec 11 12:07:55.325146 2025] [:error] [pid 35112:tid 35122] [client 152.233.3.58:57234] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aTpDm59ZpQ0WIeJhsJfeKQAAAUg"]
[Thu Dec 11 12:07:56.127962 2025] [:error] [pid 58099:tid 58113] [client 152.233.3.58:57240] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aTpDnMKZVSF_bdPFqRiW4gAAAMw"]
[Thu Dec 11 12:07:58.763150 2025] [:error] [pid 35112:tid 35135] [client 152.233.3.58:57244] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTpDnp9ZpQ0WIeJhsJfePQAAAVU"]
[Thu Dec 11 12:07:59.565493 2025] [:error] [pid 48261:tid 48266] [client 152.233.3.58:34062] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aTpDn-yPI4WU-4JmiQMNBAAAAYI"]
[Thu Dec 11 12:08:01.207953 2025] [:error] [pid 27459:tid 27461] [client 152.233.3.58:34066] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aTpDoVhPEXihPBKMpRPVzwAAAQA"]
[Thu Dec 11 12:08:02.046713 2025] [:error] [pid 57990:tid 58012] [client 152.233.3.58:34076] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aTpDogqZT_dc36fQdXEOqgAAABE"]
[Thu Dec 11 12:08:03.265228 2025] [:error] [pid 57992:tid 58058] [client 152.233.3.58:34080] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aTpDo-Ueau0BMFF2vHk9ggAAAIk"]
[Thu Dec 11 12:08:04.674720 2025] [:error] [pid 48261:tid 48264] [client 152.233.3.58:34092] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aTpDpOyPI4WU-4JmiQMNEQAAAYA"]
[Thu Dec 11 12:08:05.469940 2025] [:error] [pid 57990:tid 58019] [client 152.233.3.58:34104] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aTpDpQqZT_dc36fQdXEOrQAAABg"]
[Thu Dec 11 12:08:05.865146 2025] [:error] [pid 48261:tid 48284] [client 152.233.3.58:34112] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aTpDpeyPI4WU-4JmiQMNFAAAAZQ"]
[Thu Dec 11 12:08:07.274937 2025] [:error] [pid 48261:tid 48283] [client 152.233.3.58:34126] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aTpDp-yPI4WU-4JmiQMNHQAAAZM"]
[Thu Dec 11 12:08:08.658765 2025] [:error] [pid 27459:tid 27461] [client 152.233.3.58:41218] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aTpDqFhPEXihPBKMpRPV2wAAAQA"]
[Thu Dec 11 12:08:09.864400 2025] [:error] [pid 27459:tid 27478] [client 152.233.3.58:41224] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTpDqVhPEXihPBKMpRPV4wAAARE"]
[Thu Dec 11 12:08:10.259452 2025] [:error] [pid 35112:tid 35114] [client 152.233.3.58:41240] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aTpDqp9ZpQ0WIeJhsJfeWwAAAUA"]
[Thu Dec 11 12:08:11.052122 2025] [:error] [pid 48261:tid 48275] [client 152.233.3.58:41244] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aTpDq-yPI4WU-4JmiQMNJQAAAYs"]
[Thu Dec 11 12:08:12.046730 2025] [:error] [pid 27459:tid 27476] [client 152.233.3.58:41252] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aTpDrFhPEXihPBKMpRPV5wAAAQ8"]
[Thu Dec 11 12:08:12.436999 2025] [:error] [pid 48261:tid 48280] [client 152.233.3.58:41258] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aTpDrOyPI4WU-4JmiQMNJwAAAZA"]
[Thu Dec 11 12:08:14.047388 2025] [:error] [pid 35112:tid 35137] [client 152.233.3.58:41260] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aTpDrp9ZpQ0WIeJhsJfeZQAAAVc"]
[Thu Dec 11 12:08:14.852450 2025] [:error] [pid 48261:tid 48283] [client 152.233.3.58:41262] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aTpDruyPI4WU-4JmiQMNLgAAAZM"]
[Thu Dec 11 12:08:15.242099 2025] [:error] [pid 35112:tid 35135] [client 152.233.3.58:41278] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aTpDr59ZpQ0WIeJhsJfeZwAAAVU"]
[Thu Dec 11 12:08:16.032355 2025] [:error] [pid 35112:tid 35120] [client 152.233.3.58:41292] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aTpDsJ9ZpQ0WIeJhsJfeawAAAUY"]
[Thu Dec 11 12:08:16.641865 2025] [:error] [pid 57992:tid 58051] [client 152.233.3.58:41298] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aTpDsOUeau0BMFF2vHk9jgAAAII"]
[Thu Dec 11 12:08:18.066059 2025] [:error] [pid 27459:tid 27466] [client 152.233.3.58:41304] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aTpDslhPEXihPBKMpRPV7wAAAQU"]
[Thu Dec 11 12:08:18.860795 2025] [:error] [pid 48261:tid 48283] [client 152.233.3.58:55434] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aTpDsuyPI4WU-4JmiQMNNgAAAZM"]
[Thu Dec 11 12:08:19.656481 2025] [:error] [pid 57990:tid 58006] [client 152.233.3.58:55448] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aTpDswqZT_dc36fQdXEOxgAAAAs"]
[Thu Dec 11 12:08:20.263183 2025] [:error] [pid 58099:tid 58105] [client 152.233.3.58:55452] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aTpDtMKZVSF_bdPFqRiXHgAAAMQ"]
[Thu Dec 11 12:08:20.861240 2025] [:error] [pid 35112:tid 35124] [client 152.233.3.58:55456] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aTpDtJ9ZpQ0WIeJhsJfebwAAAUo"]
[Thu Dec 11 12:08:21.251829 2025] [:error] [pid 58099:tid 58110] [client 152.233.3.58:55472] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aTpDtcKZVSF_bdPFqRiXJAAAAMk"]
[Thu Dec 11 12:08:21.650516 2025] [:error] [pid 35112:tid 35136] [client 152.233.3.58:55488] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aTpDtZ9ZpQ0WIeJhsJfedAAAAVY"]
[Thu Dec 11 12:08:23.238597 2025] [:error] [pid 48261:tid 48280] [client 152.233.3.58:55490] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aTpDt-yPI4WU-4JmiQMNQwAAAZA"]
[Thu Dec 11 12:08:24.261713 2025] [:error] [pid 27459:tid 27485] [client 152.233.3.58:55492] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aTpDuFhPEXihPBKMpRPV_wAAARg"]
[Thu Dec 11 12:08:25.262381 2025] [:error] [pid 58099:tid 58109] [client 152.233.3.58:55508] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aTpDucKZVSF_bdPFqRiXMAAAAMg"]
[Thu Dec 11 12:08:26.255369 2025] [:error] [pid 57992:tid 58068] [client 152.233.3.58:55522] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aTpDuuUeau0BMFF2vHk9ngAAAJM"]
[Thu Dec 11 12:08:27.855847 2025] [:error] [pid 35112:tid 35115] [client 152.233.3.58:55534] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aTpDu59ZpQ0WIeJhsJfegwAAAUE"]
[Thu Dec 11 12:08:28.450916 2025] [:error] [pid 35112:tid 35117] [client 152.233.3.58:53374] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aTpDvJ9ZpQ0WIeJhsJfehwAAAUM"]
[Thu Dec 11 12:08:29.041083 2025] [:error] [pid 57992:tid 58060] [client 152.233.3.58:53390] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aTpDveUeau0BMFF2vHk9owAAAIs"]
[Thu Dec 11 12:08:29.841041 2025] [:error] [pid 35112:tid 35130] [client 152.233.3.58:53394] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aTpDvZ9ZpQ0WIeJhsJfejAAAAVA"]
[Thu Dec 11 12:08:33.332325 2025] [:error] [pid 48261:tid 48282] [client 152.233.3.58:53398] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aTpDweyPI4WU-4JmiQMNUAAAAZI"]
[Thu Dec 11 12:08:33.727847 2025] [:error] [pid 58099:tid 58105] [client 152.233.3.58:26266] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aTpDwcKZVSF_bdPFqRiXNAAAAMQ"]
[Thu Dec 11 12:08:34.733034 2025] [:error] [pid 57990:tid 58012] [client 152.233.3.58:49014] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aTpDwgqZT_dc36fQdXEO1AAAABE"]
[Thu Dec 11 12:08:35.122413 2025] [:error] [pid 48261:tid 48288] [client 152.233.3.58:53420] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aTpDw-yPI4WU-4JmiQMNUgAAAZg"]
[Thu Dec 11 12:08:35.915085 2025] [:error] [pid 57990:tid 57997] [client 152.233.3.58:53422] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aTpDwwqZT_dc36fQdXEO1wAAAAI"]
[Thu Dec 11 12:08:36.307129 2025] [:error] [pid 57991:tid 58022] [client 152.233.3.58:53438] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aTpDxKPyGmNXA2ZsETY8pQAAAEA"]
[Thu Dec 11 12:08:36.696986 2025] [:error] [pid 57990:tid 58005] [client 152.233.3.58:53454] [client 152.233.3.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.233.3.58, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTpDxAqZT_dc36fQdXEO2AAAAAo"]
[Thu Dec 11 12:08:36.709310 2025] [proxy_fcgi:error] [pid 57990:tid 58005] [client 152.233.3.58:53454] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:08:36.905090 2025] [:error] [pid 57990:tid 58019] [client 152.233.3.58:53454] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aTpDxAqZT_dc36fQdXEO2QAAABg"]
[Thu Dec 11 12:08:37.897724 2025] [:error] [pid 58099:tid 58101] [client 152.233.3.58:48644] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTpDxcKZVSF_bdPFqRiXOwAAAMA"]
[Thu Dec 11 12:08:38.295669 2025] [:error] [pid 48261:tid 48278] [client 152.233.3.58:48656] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aTpDxuyPI4WU-4JmiQMNVwAAAY4"]
[Thu Dec 11 12:08:40.090168 2025] [:error] [pid 57992:tid 58073] [client 152.233.3.58:48658] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aTpDyOUeau0BMFF2vHk9rQAAAJg"]
[Thu Dec 11 12:08:40.478718 2025] [:error] [pid 58099:tid 58121] [client 152.233.3.58:48660] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aTpDyMKZVSF_bdPFqRiXPQAAANQ"]
[Thu Dec 11 12:08:41.272185 2025] [:error] [pid 27459:tid 27484] [client 152.233.3.58:48674] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aTpDyVhPEXihPBKMpRPWGQAAARc"]
[Thu Dec 11 12:08:41.665183 2025] [:error] [pid 57992:tid 58054] [client 152.233.3.58:48690] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aTpDyeUeau0BMFF2vHk9rgAAAIU"]
[Thu Dec 11 12:08:42.059989 2025] [proxy_fcgi:error] [pid 57991:tid 58039] [client 152.233.3.58:48692] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:08:42.255377 2025] [:error] [pid 57991:tid 58022] [client 152.233.3.58:48692] [client 152.233.3.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 152.233.3.58, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aTpDyqPyGmNXA2ZsETY8rQAAAEA"]
[Thu Dec 11 12:08:42.658263 2025] [:error] [pid 57991:tid 58044] [client 152.233.3.58:48692] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aTpDyqPyGmNXA2ZsETY8rwAAAFY"]
[Thu Dec 11 12:08:43.861321 2025] [:error] [pid 27459:tid 27466] [client 152.233.3.58:48698] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aTpDy1hPEXihPBKMpRPWIQAAAQU"]
[Thu Dec 11 12:08:44.455261 2025] [:error] [pid 35112:tid 35124] [client 152.233.3.58:48708] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aTpDzJ9ZpQ0WIeJhsJfemQAAAUo"]
[Thu Dec 11 12:08:44.858662 2025] [:error] [pid 58099:tid 58115] [client 152.233.3.58:48716] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aTpDzMKZVSF_bdPFqRiXQQAAAM4"]
[Thu Dec 11 12:08:45.862520 2025] [:error] [pid 27459:tid 27470] [client 152.233.3.58:48732] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTpDzVhPEXihPBKMpRPWKAAAAQk"]
[Thu Dec 11 12:08:46.659609 2025] [:error] [pid 57991:tid 58043] [client 152.233.3.58:48736] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aTpDzqPyGmNXA2ZsETY8tAAAAFU"]
[Thu Dec 11 12:08:47.881709 2025] [:error] [pid 57990:tid 57995] [client 152.233.3.58:48744] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aTpDzwqZT_dc36fQdXEO4wAAAAA"]
[Thu Dec 11 12:08:48.273056 2025] [:error] [pid 48261:tid 48283] [client 152.233.3.58:33238] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aTpD0OyPI4WU-4JmiQMNYgAAAZM"]
[Thu Dec 11 12:08:48.875830 2025] [:error] [pid 48261:tid 48281] [client 152.233.3.58:33250] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aTpD0OyPI4WU-4JmiQMNZQAAAZE"]
[Thu Dec 11 12:08:50.488443 2025] [:error] [pid 57992:tid 58050] [client 152.233.3.58:33264] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aTpD0uUeau0BMFF2vHk9vAAAAIE"]
[Thu Dec 11 12:08:51.289114 2025] [:error] [pid 57991:tid 58044] [client 152.233.3.58:33276] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aTpD06PyGmNXA2ZsETY8vAAAAFY"]
[Thu Dec 11 12:08:51.517691 2025] [:error] [pid 57991:tid 58025] [client 152.233.3.58:33276] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aTpD06PyGmNXA2ZsETY8vQAAAEM"]
[Thu Dec 11 12:08:53.796007 2025] [:error] [pid 58099:tid 58107] [client 152.233.3.58:33280] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aTpD1cKZVSF_bdPFqRiXSwAAAMY"]
[Thu Dec 11 12:08:54.187765 2025] [:error] [pid 58099:tid 58102] [client 152.233.3.58:33296] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aTpD1sKZVSF_bdPFqRiXTAAAAME"]
[Thu Dec 11 12:08:55.793539 2025] [:error] [pid 27459:tid 27470] [client 152.233.3.58:33310] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aTpD11hPEXihPBKMpRPWMQAAAQk"]
[Thu Dec 11 12:08:56.594251 2025] [:error] [pid 35112:tid 35121] [client 152.233.3.58:33326] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aTpD2J9ZpQ0WIeJhsJfeoAAAAUc"]
[Thu Dec 11 12:08:57.209506 2025] [:error] [pid 57991:tid 58040] [client 152.233.3.58:33342] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aTpD2aPyGmNXA2ZsETY8wgAAAFI"]
[Thu Dec 11 12:08:58.598813 2025] [:error] [pid 35112:tid 35123] [client 152.233.3.58:42240] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aTpD2p9ZpQ0WIeJhsJfepwAAAUk"]
[Thu Dec 11 12:08:59.203695 2025] [:error] [pid 27459:tid 27477] [client 152.233.3.58:42248] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aTpD21hPEXihPBKMpRPWNgAAARA"]
[Thu Dec 11 12:08:59.801838 2025] [:error] [pid 58099:tid 58114] [client 152.233.3.58:42260] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aTpD28KZVSF_bdPFqRiXUwAAAM0"]
[Thu Dec 11 12:09:00.193114 2025] [:error] [pid 57991:tid 58024] [client 152.233.3.58:42270] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aTpD3KPyGmNXA2ZsETY8xgAAAEI"]
[Thu Dec 11 12:09:01.009345 2025] [:error] [pid 27459:tid 27479] [client 152.233.3.58:42282] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aTpD3VhPEXihPBKMpRPWPAAAARI"]
[Thu Dec 11 12:09:02.453180 2025] [:error] [pid 57991:tid 58028] [client 152.233.3.58:42294] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aTpD3qPyGmNXA2ZsETY8ywAAAEY"]
[Thu Dec 11 12:09:02.847917 2025] [:error] [pid 27459:tid 27482] [client 152.233.3.58:42308] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aTpD3lhPEXihPBKMpRPWPQAAARU"]
[Thu Dec 11 12:09:04.249531 2025] [:error] [pid 57990:tid 57999] [client 152.233.3.58:42320] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aTpD4AqZT_dc36fQdXEO8AAAAAQ"]
[Thu Dec 11 12:09:05.047209 2025] [:error] [pid 57990:tid 57998] [client 152.233.3.58:42334] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aTpD4QqZT_dc36fQdXEO8wAAAAM"]
[Thu Dec 11 12:09:06.038083 2025] [:error] [pid 57992:tid 58066] [client 152.233.3.58:42336] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTpD4uUeau0BMFF2vHk9zgAAAJE"]
[Thu Dec 11 12:09:06.427517 2025] [:error] [pid 35112:tid 35126] [client 152.233.3.58:42348] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aTpD4p9ZpQ0WIeJhsJfeswAAAUw"]
[Thu Dec 11 12:09:07.016623 2025] [:error] [pid 57992:tid 58065] [client 152.233.3.58:42358] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aTpD4-Ueau0BMFF2vHk90QAAAJA"]
[Thu Dec 11 12:09:07.808900 2025] [:error] [pid 58099:tid 58107] [client 152.233.3.58:43374] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aTpD48KZVSF_bdPFqRiXXwAAAMY"]
[Thu Dec 11 12:09:08.605812 2025] [:error] [pid 27459:tid 27467] [client 152.233.3.58:43378] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aTpD5FhPEXihPBKMpRPWQQAAAQY"]
[Thu Dec 11 12:09:08.997949 2025] [:error] [pid 57992:tid 58064] [client 152.233.3.58:43394] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aTpD5OUeau0BMFF2vHk91AAAAI8"]
[Thu Dec 11 12:09:09.586036 2025] [:error] [pid 35112:tid 35132] [client 152.233.3.58:43402] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aTpD5Z9ZpQ0WIeJhsJfeugAAAVI"]
[Thu Dec 11 12:09:09.974546 2025] [:error] [pid 48261:tid 48288] [client 152.233.3.58:43418] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aTpD5eyPI4WU-4JmiQMNcQAAAZg"]
[Thu Dec 11 12:09:10.768624 2025] [:error] [pid 48261:tid 48267] [client 152.233.3.58:43434] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aTpD5uyPI4WU-4JmiQMNdAAAAYM"]
[Thu Dec 11 12:09:11.356675 2025] [:error] [pid 57990:tid 58001] [client 152.233.3.58:43440] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aTpD5wqZT_dc36fQdXEO_QAAAAY"]
[Thu Dec 11 12:09:11.746342 2025] [:error] [pid 57991:tid 58030] [client 152.233.3.58:43442] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aTpD56PyGmNXA2ZsETY8zwAAAEg"]
[Thu Dec 11 12:09:12.139303 2025] [:error] [pid 57992:tid 58053] [client 152.233.3.58:43444] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aTpD6OUeau0BMFF2vHk91QAAAIQ"]
[Thu Dec 11 12:09:13.131646 2025] [:error] [pid 48261:tid 48266] [client 152.233.3.58:43452] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aTpD6eyPI4WU-4JmiQMNewAAAYI"]
[Thu Dec 11 12:09:13.921309 2025] [:error] [pid 48261:tid 48265] [client 152.233.3.58:43456] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aTpD6eyPI4WU-4JmiQMNggAAAYE"]
[Thu Dec 11 12:09:14.513774 2025] [:error] [pid 58099:tid 58102] [client 152.233.3.58:43462] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aTpD6sKZVSF_bdPFqRiXZQAAAME"]
[Thu Dec 11 12:09:15.102088 2025] [:error] [pid 48261:tid 48269] [client 152.233.3.58:43478] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTpD6-yPI4WU-4JmiQMNhgAAAYU"]
[Thu Dec 11 12:09:16.722257 2025] [:error] [pid 58099:tid 58122] [client 152.233.3.58:43494] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aTpD7MKZVSF_bdPFqRiXbwAAANU"]
[Thu Dec 11 12:09:17.117839 2025] [:error] [pid 57990:tid 58006] [client 152.233.3.58:43506] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aTpD7QqZT_dc36fQdXEO_wAAAAs"]
[Thu Dec 11 12:09:17.912753 2025] [:error] [pid 57991:tid 58031] [client 152.233.3.58:54874] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aTpD7aPyGmNXA2ZsETY82AAAAEk"]
[Thu Dec 11 12:09:19.115262 2025] [:error] [pid 57990:tid 58018] [client 152.233.3.58:54882] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aTpD7wqZT_dc36fQdXEPBwAAABc"]
[Thu Dec 11 12:09:19.912099 2025] [:error] [pid 57992:tid 58056] [client 152.233.3.58:54898] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aTpD7-Ueau0BMFF2vHk92QAAAIc"]
[Thu Dec 11 12:09:20.718632 2025] [:error] [pid 57990:tid 58016] [client 152.233.3.58:54906] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aTpD8AqZT_dc36fQdXEPDgAAABU"]
[Thu Dec 11 12:09:21.314662 2025] [:error] [pid 48261:tid 48275] [client 152.233.3.58:10657] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aTpD8eyPI4WU-4JmiQMNlwAAAYs"]
[Thu Dec 11 12:09:21.906761 2025] [:error] [pid 58099:tid 58124] [client 152.233.3.58:54926] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aTpD8cKZVSF_bdPFqRiXdwAAANc"]
[Thu Dec 11 12:09:24.587483 2025] [:error] [pid 27459:tid 27467] [client 152.233.3.58:54936] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aTpD9FhPEXihPBKMpRPWWgAAAQY"]
[Thu Dec 11 12:09:25.583987 2025] [:error] [pid 57991:tid 58039] [client 152.233.3.58:54946] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aTpD9aPyGmNXA2ZsETY84wAAAFE"]
[Thu Dec 11 12:09:25.991284 2025] [proxy_fcgi:error] [pid 48261:tid 48281] [client 152.233.3.58:17880] AH01071: Got error 'Primary script unknown'
[Thu Dec 11 12:09:26.186863 2025] [:error] [pid 48261:tid 48277] [client 152.233.3.58:17880] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aTpD9uyPI4WU-4JmiQMNoAAAAY0"]
[Thu Dec 11 12:09:26.575255 2025] [:error] [pid 57990:tid 58019] [client 152.233.3.58:54964] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aTpD9gqZT_dc36fQdXEPEQAAABg"]
[Thu Dec 11 12:09:27.363860 2025] [:error] [pid 57991:tid 58046] [client 152.233.3.58:54966] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aTpD96PyGmNXA2ZsETY86AAAAFg"]
[Thu Dec 11 12:09:27.755867 2025] [:error] [pid 57991:tid 58029] [client 152.233.3.58:59972] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aTpD96PyGmNXA2ZsETY86QAAAEc"]
[Thu Dec 11 12:09:29.341349 2025] [:error] [pid 57991:tid 58033] [client 152.233.3.58:59974] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aTpD-aPyGmNXA2ZsETY88QAAAEs"]
[Thu Dec 11 12:09:29.733197 2025] [:error] [pid 48261:tid 48284] [client 152.233.3.58:59982] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aTpD-eyPI4WU-4JmiQMNpQAAAZQ"]
[Thu Dec 11 12:09:30.325422 2025] [:error] [pid 57992:tid 58058] [client 152.233.3.58:59994] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "aTpD-uUeau0BMFF2vHk93wAAAIk"]
[Thu Dec 11 12:09:30.717970 2025] [:error] [pid 27459:tid 27477] [client 152.233.3.58:60002] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aTpD-lhPEXihPBKMpRPWXgAAARA"]
[Thu Dec 11 12:09:31.125197 2025] [:error] [pid 48261:tid 48287] [client 152.233.3.58:60014] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aTpD--yPI4WU-4JmiQMNqwAAAZc"]
[Thu Dec 11 12:09:31.517036 2025] [:error] [pid 35112:tid 35134] [client 152.233.3.58:60018] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aTpD-59ZpQ0WIeJhsJfeyAAAAVQ"]
[Thu Dec 11 12:09:32.714790 2025] [:error] [pid 57990:tid 58012] [client 152.233.3.58:60024] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aTpD_AqZT_dc36fQdXEPHgAAABE"]
[Thu Dec 11 12:09:33.113690 2025] [:error] [pid 48261:tid 48286] [client 152.233.3.58:60040] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aTpD_eyPI4WU-4JmiQMNrwAAAZY"]
[Thu Dec 11 12:09:33.910400 2025] [:error] [pid 58099:tid 58117] [client 152.233.3.58:60042] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aTpD_cKZVSF_bdPFqRiXhgAAANA"]
[Thu Dec 11 12:09:34.303605 2025] [:error] [pid 48261:tid 48268] [client 152.233.3.58:60048] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aTpD_uyPI4WU-4JmiQMNsgAAAYQ"]
[Thu Dec 11 12:09:35.099720 2025] [:error] [pid 57992:tid 58056] [client 152.233.3.58:60058] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aTpD_-Ueau0BMFF2vHk94gAAAIc"]
[Thu Dec 11 12:09:35.489917 2025] [:error] [pid 27459:tid 27481] [client 152.233.3.58:60064] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aTpD_1hPEXihPBKMpRPWZQAAARQ"]
[Thu Dec 11 12:09:37.289890 2025] [:error] [pid 57990:tid 58012] [client 152.233.3.58:60080] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aTpEAQqZT_dc36fQdXEPKwAAABE"]
[Thu Dec 11 12:09:37.689123 2025] [:error] [pid 57991:tid 58044] [client 152.233.3.58:41288] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aTpEAaPyGmNXA2ZsETY8_gAAAFY"]
[Thu Dec 11 12:09:38.481844 2025] [:error] [pid 48261:tid 48281] [client 152.233.3.58:41294] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aTpEAuyPI4WU-4JmiQMNzAAAAZE"]
[Thu Dec 11 12:09:39.076186 2025] [:error] [pid 48261:tid 48279] [client 152.233.3.58:41298] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aTpEA-yPI4WU-4JmiQMN1gAAAY8"]
[Thu Dec 11 12:09:39.671773 2025] [:error] [pid 48261:tid 48272] [client 152.233.3.58:41314] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "aTpEA-yPI4WU-4JmiQMN5AAAAYg"]
[Thu Dec 11 12:09:40.072720 2025] [:error] [pid 27459:tid 27472] [client 152.233.3.58:41322] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aTpEBFhPEXihPBKMpRPWagAAAQs"]
[Thu Dec 11 12:09:40.468892 2025] [:error] [pid 57992:tid 58049] [client 152.233.3.58:41324] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aTpEBOUeau0BMFF2vHk97gAAAIA"]
[Thu Dec 11 12:09:41.469585 2025] [:error] [pid 57990:tid 58012] [client 152.233.3.58:41336] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aTpEBQqZT_dc36fQdXEPNwAAABE"]
[Thu Dec 11 12:09:42.063046 2025] [:error] [pid 58099:tid 58104] [client 152.233.3.58:19320] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTpEBsKZVSF_bdPFqRiXkAAAAMM"]
[Thu Dec 11 12:09:43.057981 2025] [:error] [pid 57992:tid 58060] [client 152.233.3.58:41352] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aTpEB-Ueau0BMFF2vHk99QAAAIs"]
[Thu Dec 11 12:09:43.452805 2025] [:error] [pid 57990:tid 58011] [client 152.233.3.58:41364] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aTpEBwqZT_dc36fQdXEPOQAAABA"]
[Thu Dec 11 12:09:44.053850 2025] [:error] [pid 58099:tid 58112] [client 152.233.3.58:41374] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aTpECMKZVSF_bdPFqRiXmwAAAMs"]
[Thu Dec 11 12:09:46.382092 2025] [:error] [pid 57992:tid 58068] [client 152.233.3.58:41384] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aTpECuUeau0BMFF2vHk-AgAAAJM"]
[Thu Dec 11 12:09:46.973316 2025] [:error] [pid 48261:tid 48284] [client 152.233.3.58:41392] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aTpECuyPI4WU-4JmiQMN7gAAAZQ"]
[Thu Dec 11 12:09:47.772168 2025] [:error] [pid 27459:tid 27463] [client 152.233.3.58:56966] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aTpEC1hPEXihPBKMpRPWdgAAAQI"]
[Thu Dec 11 12:09:48.160768 2025] [:error] [pid 57991:tid 58026] [client 152.233.3.58:56978] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTpEDKPyGmNXA2ZsETY9FQAAAEQ"]
[Thu Dec 11 12:09:48.557054 2025] [:error] [pid 35112:tid 35119] [client 152.233.3.58:56984] [client 152.233.3.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aTpEDJ9ZpQ0WIeJhsJfe5wAAAUU"]
[Thu Dec 11 14:15:01.922918 2025] [:error] [pid 27459:tid 27473] [client 206.84.173.173:49452] [client 206.84.173.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.84.173.173, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTphZVhPEXihPBKMpRP4gwAAAQw"]
[Thu Dec 11 21:16:37.582674 2025] [:error] [pid 57990:tid 58004] [client 193.37.32.207:31161] [client 193.37.32.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aTrENQqZT_dc36fQdXGJfwAAAAk"], referer: https://www.google.com/
[Thu Dec 11 21:18:12.776584 2025] [:error] [pid 35112:tid 35126] [client 193.37.32.227:42021] [client 193.37.32.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aTrElJ9ZpQ0WIeJhsJdwkAAAAUw"], referer: https://www.google.com/
[Thu Dec 11 21:47:49.132068 2025] [proxy_fcgi:error] [pid 24483:tid 24486] [client 4.194.97.41:16559] AH01071: Got error 'Primary script unknown', referer: https://www.google.com/
[Thu Dec 11 21:47:49.220250 2025] [:error] [pid 24483:tid 24507] [client 4.194.97.41:16559] [client 4.194.97.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.97.41, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aTrLhVGHKh2d_uVkopRrMwAAAhY"], referer: https://www.google.co.uk/
[Thu Dec 11 21:47:49.224783 2025] [proxy_fcgi:error] [pid 24483:tid 24507] [client 4.194.97.41:16559] AH01071: Got error 'Primary script unknown', referer: https://www.google.co.uk/
[Thu Dec 11 21:48:02.993402 2025] [:error] [pid 24483:tid 24492] [client 4.194.97.41:16559] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTrLklGHKh2d_uVkopRrZQAAAgc"], referer: https://www.google.de/
[Thu Dec 11 21:48:03.176484 2025] [:error] [pid 57990:tid 58008] [client 4.194.97.41:39401] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTrLkwqZT_dc36fQdXGOZQAAAA0"], referer: https://www.yahoo.com/
[Thu Dec 11 21:48:04.871139 2025] [:error] [pid 58099:tid 58105] [client 4.194.97.41:14253] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aTrLlMKZVSF_bdPFqRgklgAAAMQ"], referer: https://duckduckgo.com/
[Thu Dec 11 21:48:05.047566 2025] [:error] [pid 27459:tid 27482] [client 4.194.97.41:53300] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTrLlVhPEXihPBKMpRNtaQAAARU"], referer: https://www.google.co.uk/
[Thu Dec 11 21:48:05.223511 2025] [:error] [pid 24483:tid 24502] [client 4.194.97.41:16516] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTrLlVGHKh2d_uVkopRrZgAAAhE"], referer: https://www.google.fr/
[Thu Dec 11 21:48:05.401846 2025] [:error] [pid 48261:tid 48286] [client 4.194.97.41:21760] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTrLleyPI4WU-4JmiQPLnwAAAZY"], referer: https://www.google.com/
[Thu Dec 11 21:48:05.653739 2025] [:error] [pid 24527:tid 24575] [client 4.194.97.41:16537] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTrLlV9_glvtS5vXiTUXlgAAApM"], referer: https://www.google.fr/
[Thu Dec 11 21:48:05.839620 2025] [:error] [pid 57991:tid 58033] [client 4.194.97.41:16547] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTrLlaPyGmNXA2ZsETbCCgAAAEs"], referer: https://www.google.co.uk/
[Thu Dec 11 21:48:06.014141 2025] [:error] [pid 57990:tid 58015] [client 4.194.97.41:21887] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aTrLlgqZT_dc36fQdXGOZgAAABQ"], referer: https://www.bing.com/
[Thu Dec 11 21:48:06.200272 2025] [:error] [pid 58099:tid 58106] [client 4.194.97.41:16544] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aTrLlsKZVSF_bdPFqRgklwAAAMU"], referer: https://www.google.de/
[Thu Dec 11 21:48:06.381156 2025] [:error] [pid 24527:tid 24560] [client 4.194.97.41:16524] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTrLll9_glvtS5vXiTUXmgAAAoQ"], referer: https://www.google.de/
[Thu Dec 11 21:48:06.558154 2025] [:error] [pid 48261:tid 48264] [client 4.194.97.41:2102] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTrLluyPI4WU-4JmiQPLowAAAYA"], referer: https://duckduckgo.com/
[Thu Dec 11 21:48:06.743797 2025] [:error] [pid 24483:tid 24505] [client 4.194.97.41:11100] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTrLllGHKh2d_uVkopRrZwAAAhQ"], referer: https://www.google.co.uk/
[Thu Dec 11 21:48:06.923044 2025] [:error] [pid 24527:tid 24565] [client 4.194.97.41:21817] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aTrLll9_glvtS5vXiTUXmwAAAok"], referer: https://www.google.fr/
[Thu Dec 11 21:48:07.152402 2025] [:error] [pid 58099:tid 58109] [client 4.194.97.41:21884] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTrLl8KZVSF_bdPFqRgkmQAAAMg"], referer: https://duckduckgo.com/
[Thu Dec 11 21:48:07.335455 2025] [:error] [pid 58099:tid 58116] [client 4.194.97.41:20059] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-locale-switcher-less.php"] [unique_id "aTrLl8KZVSF_bdPFqRgkmwAAAM8"], referer: https://www.bing.com/
[Thu Dec 11 21:48:07.519290 2025] [:error] [pid 24527:tid 24559] [client 4.194.97.41:31277] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTrLl19_glvtS5vXiTUXnAAAAoM"], referer: https://www.yahoo.com/
[Thu Dec 11 21:48:07.706419 2025] [:error] [pid 58814:tid 58830] [client 4.194.97.41:11090] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aTrLl9iz0l9AD_3pkMxKXwAAAc4"], referer: https://www.google.co.uk/
[Thu Dec 11 21:48:07.885755 2025] [:error] [pid 27459:tid 27485] [client 4.194.97.41:14231] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-media-icon-control.php"] [unique_id "aTrLl1hPEXihPBKMpRNtbQAAARg"], referer: https://www.google.de/
[Thu Dec 11 21:48:08.062612 2025] [:error] [pid 57990:tid 58016] [client 4.194.97.41:39365] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTrLmAqZT_dc36fQdXGOaQAAABU"], referer: https://www.bing.com/
[Thu Dec 11 21:48:08.243430 2025] [:error] [pid 58814:tid 58825] [client 4.194.97.41:2760] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aTrLmNiz0l9AD_3pkMxKYAAAAck"], referer: https://www.google.com/
[Thu Dec 11 21:48:08.422032 2025] [:error] [pid 27459:tid 27475] [client 4.194.97.41:15079] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aTrLmFhPEXihPBKMpRNtbgAAAQ4"], referer: https://www.bing.com/
[Thu Dec 11 21:48:08.627612 2025] [:error] [pid 24527:tid 24574] [client 4.194.97.41:25408] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTrLmF9_glvtS5vXiTUXogAAApI"], referer: https://www.yahoo.com/
[Thu Dec 11 21:48:08.802527 2025] [:error] [pid 24483:tid 24486] [client 4.194.97.41:2049] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTrLmFGHKh2d_uVkopRrbAAAAgE"], referer: https://www.google.fr/
[Thu Dec 11 21:48:08.977401 2025] [:error] [pid 35112:tid 35123] [client 4.194.97.41:31243] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aTrLmJ9ZpQ0WIeJhsJd0WAAAAUk"], referer: https://www.bing.com/
[Thu Dec 11 21:48:09.157473 2025] [:error] [pid 24527:tid 24569] [client 4.194.97.41:15053] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTrLmV9_glvtS5vXiTUXpAAAAo0"], referer: https://www.google.com/
[Thu Dec 11 21:48:09.332189 2025] [:error] [pid 48261:tid 48271] [client 4.194.97.41:39393] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTrLmeyPI4WU-4JmiQPLpgAAAYc"], referer: https://www.yahoo.com/
[Thu Dec 11 21:48:09.507775 2025] [:error] [pid 57990:tid 58007] [client 4.194.97.41:23937] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTrLmQqZT_dc36fQdXGObQAAAAw"], referer: https://www.google.com/
[Thu Dec 11 21:48:09.683181 2025] [:error] [pid 48261:tid 48275] [client 4.194.97.41:60109] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTrLmeyPI4WU-4JmiQPLqAAAAYs"], referer: https://www.google.de/
[Thu Dec 11 21:48:09.898838 2025] [:error] [pid 58814:tid 58821] [client 4.194.97.41:31252] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aTrLmdiz0l9AD_3pkMxKYwAAAcU"], referer: https://duckduckgo.com/
[Thu Dec 11 21:48:10.073954 2025] [:error] [pid 58814:tid 58833] [client 4.194.97.41:34683] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTrLmtiz0l9AD_3pkMxKZAAAAdE"], referer: https://www.google.de/
[Thu Dec 11 21:48:10.249442 2025] [:error] [pid 35112:tid 35135] [client 4.194.97.41:15435] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-db-array.php"] [unique_id "aTrLmp9ZpQ0WIeJhsJd0WgAAAVU"], referer: https://www.google.com/
[Thu Dec 11 21:48:13.650834 2025] [:error] [pid 48261:tid 48270] [client 4.194.97.41:25436] [client 4.194.97.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.194.97.41, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTrLneyPI4WU-4JmiQPLswAAAYY"], referer: https://www.google.com/
[Thu Dec 11 21:48:13.751728 2025] [:error] [pid 57991:tid 58045] [client 4.194.97.41:31281] [client 4.194.97.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.194.97.41, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTrLnaPyGmNXA2ZsETbCFgAAAFc"], referer: https://www.google.com/
[Thu Dec 11 21:48:18.571730 2025] [:error] [pid 48261:tid 48271] [client 4.194.97.41:25436] [client 4.194.97.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.97.41, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTrLouyPI4WU-4JmiQPL0QAAAYc"], referer: https://www.bing.com/
[Thu Dec 11 21:48:18.663822 2025] [:error] [pid 57991:tid 58046] [client 4.194.97.41:31281] [client 4.194.97.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.97.41, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTrLoqPyGmNXA2ZsETbCMgAAAFg"], referer: https://www.bing.com/
[Thu Dec 11 21:48:24.869033 2025] [:error] [pid 48261:tid 48285] [client 4.194.97.41:25436] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aTrLqOyPI4WU-4JmiQPL-AAAAZU"], referer: https://duckduckgo.com/
[Thu Dec 11 21:48:25.044088 2025] [:error] [pid 48261:tid 48283] [client 4.194.97.41:11103] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aTrLqeyPI4WU-4JmiQPL-QAAAZM"], referer: https://duckduckgo.com/
[Thu Dec 11 21:48:25.219847 2025] [:error] [pid 24527:tid 24561] [client 4.194.97.41:24336] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTrLqV9_glvtS5vXiTUXuQAAAoU"], referer: https://www.bing.com/
[Thu Dec 11 21:48:25.394639 2025] [:error] [pid 48261:tid 48273] [client 4.194.97.41:14224] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aTrLqeyPI4WU-4JmiQPL-gAAAYk"], referer: https://www.bing.com/
[Thu Dec 11 21:48:25.569799 2025] [:error] [pid 35112:tid 35121] [client 4.194.97.41:50492] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTrLqZ9ZpQ0WIeJhsJd0YAAAAUc"], referer: https://www.google.co.uk/
[Thu Dec 11 21:48:26.145640 2025] [:error] [pid 58814:tid 58820] [client 4.194.97.41:24349] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aTrLqtiz0l9AD_3pkMxKhgAAAcQ"], referer: https://duckduckgo.com/
[Thu Dec 11 21:48:26.320489 2025] [:error] [pid 57992:tid 58054] [client 4.194.97.41:38962] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTrLquUeau0BMFF2vHm7FgAAAIU"], referer: https://www.yahoo.com/
[Thu Dec 11 21:48:26.495432 2025] [:error] [pid 58099:tid 58109] [client 4.194.97.41:11091] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTrLqsKZVSF_bdPFqRgktwAAAMg"], referer: https://www.bing.com/
[Thu Dec 11 21:48:26.673684 2025] [:error] [pid 57991:tid 58044] [client 4.194.97.41:25420] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTrLqqPyGmNXA2ZsETbCVwAAAFY"], referer: https://duckduckgo.com/
[Thu Dec 11 21:48:27.042726 2025] [:error] [pid 57992:tid 58062] [client 4.194.97.41:2269] [client 4.194.97.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aTrLq-Ueau0BMFF2vHm7GAAAAI0"], referer: https://www.google.co.uk/
[Thu Dec 11 21:48:31.636722 2025] [autoindex:error] [pid 57991:tid 58040] [client 4.194.97.41:31281] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Dec 11 21:48:32.136313 2025] [autoindex:error] [pid 58099:tid 58119] [client 4.194.97.41:35609] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Thu Dec 11 21:48:33.767810 2025] [autoindex:error] [pid 57991:tid 58041] [client 4.194.97.41:31281] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/vendor/phpunit/phpunit/src/Util/PHP/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Dec 11 21:48:34.437054 2025] [autoindex:error] [pid 58099:tid 58104] [client 4.194.97.41:31281] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Dec 11 21:48:35.519208 2025] [authz_core:error] [pid 58099:tid 58103] [client 4.194.97.41:35609] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/, referer: https://www.yahoo.com/
[Thu Dec 11 22:40:50.103907 2025] [:error] [pid 4463:tid 4500] [client 125.75.66.97:53284] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTrX8sWRoGq8qZybgKXhOgAAAEQ"]
[Fri Dec 12 02:44:01.754832 2025] [:error] [pid 47935:tid 47941] [client 3.87.182.69:55416] [client 3.87.182.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/actions"] [unique_id "aTsQ8Wbjqz-fIxCXK9eV-wAAAUM"]
[Fri Dec 12 02:44:02.572850 2025] [:error] [pid 53464:tid 53479] [client 3.87.182.69:55462] [client 3.87.182.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_next/data"] [unique_id "aTsQ8o6Oxa1m77UpSzlO5QAAAMs"]
[Fri Dec 12 02:44:03.392005 2025] [:error] [pid 47935:tid 47938] [client 3.87.182.69:55494] [client 3.87.182.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTsQ82bjqz-fIxCXK9eV_QAAAUA"]
[Fri Dec 12 06:06:36.113880 2025] [:error] [pid 26521:tid 26598] [client 170.106.72.93:33554] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTtAbJdhcAPU617AKTBoMgAAAJM"]
[Fri Dec 12 10:29:55.497648 2025] [:error] [pid 27950:tid 27964] [client 36.41.75.167:57141] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTt-I4VLRvkrdsSc1F0GGQAAAUw"]
[Fri Dec 12 12:47:20.154992 2025] [:error] [pid 26519:tid 26543] [client 180.191.160.16:36403] [client 180.191.160.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.160.16, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTueWM8TRgSGOeWqEhejsAAAABQ"]
[Fri Dec 12 14:40:27.270804 2025] [:error] [pid 26521:tid 26583] [client 192.253.209.161:41479] [client 192.253.209.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTu425dhcAPU617AKTASsgAAAIQ"]
[Fri Dec 12 14:40:28.483780 2025] [:error] [pid 26520:tid 26564] [client 192.253.209.135:62971] [client 192.253.209.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTu43EG_frlY5vNXu_DEXgAAAEw"]
[Fri Dec 12 14:40:31.045410 2025] [:error] [pid 27950:tid 27966] [client 192.253.209.149:25447] [client 192.253.209.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aTu434VLRvkrdsSc1F1N5AAAAU4"]
[Fri Dec 12 14:40:33.328297 2025] [:error] [pid 26607:tid 26621] [client 192.253.209.110:55189] [client 192.253.209.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTu44cb_b0tOEWTL2KlbUgAAAMw"]
[Fri Dec 12 14:40:35.458994 2025] [:error] [pid 26521:tid 26583] [client 192.253.209.155:31369] [client 192.253.209.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTu445dhcAPU617AKTASyAAAAIQ"]
[Fri Dec 12 14:40:36.249791 2025] [:error] [pid 60649:tid 60658] [client 192.253.209.152:64673] [client 192.253.209.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTu45FOcUGKU3sgfHP-7LAAAAQY"]
[Fri Dec 12 14:40:36.705604 2025] [:error] [pid 26520:tid 26560] [client 192.253.209.118:37827] [client 192.253.209.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTu45EG_frlY5vNXu_DEYgAAAEg"]
[Fri Dec 12 14:40:37.129727 2025] [:error] [pid 27950:tid 27967] [client 192.253.209.145:53453] [client 192.253.209.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTu45YVLRvkrdsSc1F1N6QAAAU8"]
[Fri Dec 12 14:40:37.632384 2025] [:error] [pid 60649:tid 60670] [client 192.253.209.113:57949] [client 192.253.209.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTu45VOcUGKU3sgfHP-7LwAAARI"]
[Fri Dec 12 14:40:38.180755 2025] [:error] [pid 26607:tid 26630] [client 192.253.209.108:36281] [client 192.253.209.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTu45sb_b0tOEWTL2KlbVAAAANU"]
[Fri Dec 12 14:40:38.915652 2025] [:error] [pid 26519:tid 26536] [client 192.253.209.128:39823] [client 192.253.209.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTu45s8TRgSGOeWqEhe4kwAAAA0"]
[Fri Dec 12 14:40:41.112073 2025] [:error] [pid 60649:tid 60668] [client 192.253.209.139:47719] [client 192.253.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aTu46VOcUGKU3sgfHP-7NAAAARA"]
[Fri Dec 12 14:40:42.191961 2025] [:error] [pid 26607:tid 26618] [client 192.253.209.108:24219] [client 192.253.209.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTu46sb_b0tOEWTL2KlbWQAAAMk"]
[Fri Dec 12 14:40:43.916714 2025] [:error] [pid 26521:tid 26588] [client 192.253.209.149:24327] [client 192.253.209.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTu465dhcAPU617AKTAS0gAAAIk"]
[Fri Dec 12 14:40:45.669116 2025] [:error] [pid 26520:tid 26561] [client 192.253.209.161:31161] [client 192.253.209.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTu47UG_frlY5vNXu_DEbwAAAEk"]
[Fri Dec 12 14:40:47.736813 2025] [:error] [pid 26607:tid 26625] [client 192.253.209.149:46165] [client 192.253.209.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTu478b_b0tOEWTL2KlbfwAAANA"]
[Fri Dec 12 14:40:48.413458 2025] [:error] [pid 26520:tid 26569] [client 192.253.209.150:26939] [client 192.253.209.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTu48EG_frlY5vNXu_DEcQAAAFE"]
[Fri Dec 12 14:40:49.451673 2025] [:error] [pid 26521:tid 26599] [client 192.253.209.162:60727] [client 192.253.209.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aTu48ZdhcAPU617AKTAS2AAAAJQ"]
[Fri Dec 12 14:40:50.169534 2025] [:error] [pid 26521:tid 26596] [client 192.253.209.148:59161] [client 192.253.209.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTu48pdhcAPU617AKTAS2wAAAJE"]
[Fri Dec 12 14:40:51.678749 2025] [:error] [pid 26519:tid 26525] [client 192.253.209.162:35395] [client 192.253.209.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTu4888TRgSGOeWqEhe4pAAAAAI"]
[Fri Dec 12 14:40:52.443517 2025] [:error] [pid 26607:tid 26630] [client 192.253.209.136:53945] [client 192.253.209.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTu49Mb_b0tOEWTL2KlbiwAAANU"]
[Fri Dec 12 14:40:53.187481 2025] [:error] [pid 60649:tid 60670] [client 192.253.209.147:58979] [client 192.253.209.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTu49VOcUGKU3sgfHP-7RwAAARI"]
[Fri Dec 12 14:40:54.722624 2025] [:error] [pid 26520:tid 26566] [client 192.253.209.154:36153] [client 192.253.209.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTu49kG_frlY5vNXu_DEdgAAAE4"]
[Fri Dec 12 14:40:55.226929 2025] [:error] [pid 26519:tid 26541] [client 192.253.209.154:62573] [client 192.253.209.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTu4988TRgSGOeWqEhe4pQAAABI"]
[Fri Dec 12 14:40:56.573660 2025] [:error] [pid 26521:tid 26582] [client 192.253.209.161:64299] [client 192.253.209.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aTu4-JdhcAPU617AKTAS5wAAAIM"]
[Fri Dec 12 14:40:58.140949 2025] [:error] [pid 27950:tid 27962] [client 192.253.209.162:48417] [client 192.253.209.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aTu4-oVLRvkrdsSc1F1ODwAAAUo"]
[Fri Dec 12 14:40:59.628804 2025] [:error] [pid 26521:tid 26598] [client 192.253.209.139:58689] [client 192.253.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTu4-5dhcAPU617AKTAS7wAAAJM"]
[Fri Dec 12 14:41:02.350613 2025] [:error] [pid 26607:tid 26614] [client 192.253.209.147:56683] [client 192.253.209.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aTu4_sb_b0tOEWTL2KlblQAAAMU"]
[Fri Dec 12 14:41:03.605657 2025] [:error] [pid 26521:tid 26593] [client 192.253.209.164:35549] [client 192.253.209.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.253.209.164, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTu4_5dhcAPU617AKTAS-AAAAI4"]
[Fri Dec 12 14:41:06.795965 2025] [:error] [pid 26521:tid 26603] [client 192.253.209.164:35549] [client 192.253.209.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTu5ApdhcAPU617AKTATDAAAAJg"]
[Fri Dec 12 14:41:07.966073 2025] [:error] [pid 27950:tid 27976] [client 192.253.209.120:31011] [client 192.253.209.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.253.209.120, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTu5A4VLRvkrdsSc1F1OGAAAAVg"]
[Fri Dec 12 14:41:08.484865 2025] [:error] [pid 27950:tid 27957] [client 192.253.209.120:31011] [client 192.253.209.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aTu5BIVLRvkrdsSc1F1OGwAAAUU"]
[Fri Dec 12 14:41:11.090701 2025] [:error] [pid 26521:tid 26593] [client 192.253.209.161:49387] [client 192.253.209.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTu5B5dhcAPU617AKTATGgAAAI4"]
[Fri Dec 12 14:41:13.923982 2025] [:error] [pid 26520:tid 26576] [client 192.253.209.133:26411] [client 192.253.209.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTu5CUG_frlY5vNXu_DEgwAAAFg"]
[Fri Dec 12 14:41:14.922341 2025] [:error] [pid 26521:tid 26583] [client 192.253.209.154:45863] [client 192.253.209.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTu5CpdhcAPU617AKTATJQAAAIQ"]
[Fri Dec 12 14:41:16.614589 2025] [:error] [pid 26607:tid 26626] [client 192.253.209.161:33751] [client 192.253.209.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.253.209.161, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aTu5DMb_b0tOEWTL2KlbngAAANE"]
[Fri Dec 12 14:41:16.884798 2025] [:error] [pid 26607:tid 26612] [client 192.253.209.161:33751] [client 192.253.209.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTu5DMb_b0tOEWTL2KlbnwAAAMM"]
[Fri Dec 12 14:41:22.927223 2025] [:error] [pid 26521:tid 26589] [client 192.253.209.143:25571] [client 192.253.209.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTu5EpdhcAPU617AKTATQAAAAIo"]
[Fri Dec 12 14:41:24.199088 2025] [:error] [pid 60649:tid 60657] [client 192.253.209.135:52267] [client 192.253.209.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.253.209.135, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTu5FFOcUGKU3sgfHP-7WgAAAQU"]
[Fri Dec 12 14:41:25.187429 2025] [:error] [pid 60649:tid 60668] [client 192.253.209.135:52267] [client 192.253.209.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTu5FVOcUGKU3sgfHP-7XgAAARA"]
[Fri Dec 12 14:41:25.924127 2025] [:error] [pid 26521:tid 26599] [client 192.253.209.163:56221] [client 192.253.209.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aTu5FZdhcAPU617AKTATRgAAAJQ"]
[Fri Dec 12 14:41:26.876210 2025] [:error] [pid 26607:tid 26630] [client 192.253.209.141:57815] [client 192.253.209.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTu5Fsb_b0tOEWTL2KlbqwAAANU"]
[Fri Dec 12 14:41:29.175739 2025] [:error] [pid 27950:tid 27965] [client 192.253.209.131:22721] [client 192.253.209.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTu5GYVLRvkrdsSc1F1OMgAAAU0"]
[Fri Dec 12 14:41:29.636117 2025] [:error] [pid 26520:tid 26568] [client 192.253.209.114:37419] [client 192.253.209.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTu5GUG_frlY5vNXu_DEiQAAAFA"]
[Fri Dec 12 14:41:32.656351 2025] [:error] [pid 26520:tid 26556] [client 192.253.209.133:52073] [client 192.253.209.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTu5HEG_frlY5vNXu_DEkwAAAEQ"]
[Fri Dec 12 14:41:33.449005 2025] [:error] [pid 60649:tid 60676] [client 192.253.209.143:56535] [client 192.253.209.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTu5HVOcUGKU3sgfHP-7YwAAARg"]
[Fri Dec 12 14:41:35.865921 2025] [:error] [pid 26520:tid 26571] [client 192.253.209.111:60493] [client 192.253.209.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aTu5H0G_frlY5vNXu_DElwAAAFM"]
[Fri Dec 12 14:41:37.168017 2025] [:error] [pid 26520:tid 26559] [client 192.253.209.110:46151] [client 192.253.209.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTu5IUG_frlY5vNXu_DEmwAAAEc"]
[Fri Dec 12 14:41:38.131693 2025] [:error] [pid 60649:tid 60659] [client 192.253.209.121:61467] [client 192.253.209.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aTu5IlOcUGKU3sgfHP-7bgAAAQc"]
[Fri Dec 12 14:41:39.406286 2025] [:error] [pid 27950:tid 27972] [client 192.253.209.150:64849] [client 192.253.209.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTu5I4VLRvkrdsSc1F1OPQAAAVQ"]
[Fri Dec 12 14:41:41.798483 2025] [:error] [pid 26521:tid 26587] [client 192.253.209.160:45743] [client 192.253.209.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTu5JZdhcAPU617AKTATVQAAAIg"]
[Fri Dec 12 14:41:43.327992 2025] [:error] [pid 26519:tid 26546] [client 192.253.209.141:41135] [client 192.253.209.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aTu5J88TRgSGOeWqEhe4pwAAABc"]
[Fri Dec 12 14:41:43.908630 2025] [:error] [pid 27950:tid 27976] [client 192.253.209.141:46603] [client 192.253.209.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTu5J4VLRvkrdsSc1F1OQAAAAVg"]
[Fri Dec 12 14:41:45.407890 2025] [:error] [pid 27950:tid 27959] [client 192.253.209.108:20613] [client 192.253.209.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTu5KYVLRvkrdsSc1F1ORQAAAUc"]
[Fri Dec 12 14:41:46.193696 2025] [:error] [pid 26519:tid 26526] [client 192.253.209.108:59609] [client 192.253.209.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTu5Ks8TRgSGOeWqEhe4qQAAAAM"]
[Fri Dec 12 14:41:46.688200 2025] [:error] [pid 60649:tid 60673] [client 192.253.209.121:52227] [client 192.253.209.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTu5KlOcUGKU3sgfHP-7cQAAARU"]
[Fri Dec 12 14:41:48.734015 2025] [:error] [pid 26607:tid 26631] [client 192.253.209.127:48337] [client 192.253.209.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTu5LMb_b0tOEWTL2KlbugAAANY"]
[Fri Dec 12 14:41:49.232265 2025] [:error] [pid 60649:tid 60665] [client 192.253.209.145:22907] [client 192.253.209.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTu5LVOcUGKU3sgfHP-7dgAAAQ0"]
[Fri Dec 12 14:41:49.730072 2025] [:error] [pid 26520:tid 26555] [client 192.253.209.110:63423] [client 192.253.209.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTu5LUG_frlY5vNXu_DEnAAAAEM"]
[Fri Dec 12 14:41:50.189813 2025] [:error] [pid 26521:tid 26596] [client 192.253.209.139:27295] [client 192.253.209.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTu5LpdhcAPU617AKTATWAAAAJE"]
[Fri Dec 12 14:41:51.946650 2025] [:error] [pid 26519:tid 26532] [client 192.253.209.160:34911] [client 192.253.209.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTu5L88TRgSGOeWqEhe4qwAAAAk"]
[Fri Dec 12 14:41:53.009861 2025] [:error] [pid 26521:tid 26589] [client 192.253.209.129:34261] [client 192.253.209.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTu5MZdhcAPU617AKTATXgAAAIo"]
[Fri Dec 12 14:41:54.474784 2025] [:error] [pid 26520:tid 26572] [client 192.253.209.125:58971] [client 192.253.209.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTu5MkG_frlY5vNXu_DEpAAAAFQ"]
[Fri Dec 12 16:52:47.033253 2025] [:error] [pid 55760:tid 55777] [client 182.42.105.144:40467] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTvX31ObDQlftFDyGazQHAAAAY8"]
[Fri Dec 12 19:14:26.115652 2025] [:error] [pid 27950:tid 27958] [client 3.9.24.182:48748] [client 3.9.24.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/actions"] [unique_id "aTv5EoVLRvkrdsSc1F2CUwAAAUY"]
[Fri Dec 12 19:14:27.205296 2025] [:error] [pid 26519:tid 26529] [client 3.9.24.182:48854] [client 3.9.24.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_next/data"] [unique_id "aTv5E88TRgSGOeWqEhff4gAAAAY"]
[Fri Dec 12 19:14:28.287221 2025] [:error] [pid 26521:tid 26599] [client 3.9.24.182:48908] [client 3.9.24.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTv5FJdhcAPU617AKTBaZwAAAJQ"]
[Fri Dec 12 19:53:18.191051 2025] [:error] [pid 26519:tid 26534] [client 130.33.54.142:7462] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTwCLs8TRgSGOeWqEhfnIgAAAAs"]
[Fri Dec 12 19:53:18.624050 2025] [:error] [pid 26520:tid 26567] [client 130.33.54.142:7456] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTwCLkG_frlY5vNXu_DvCAAAAE8"]
[Fri Dec 12 19:53:19.593847 2025] [:error] [pid 26519:tid 26532] [client 130.33.54.142:7509] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTwCL88TRgSGOeWqEhfnJwAAAAk"]
[Fri Dec 12 19:53:19.890138 2025] [:error] [pid 26607:tid 26630] [client 130.33.54.142:7425] [client 130.33.54.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTwCL8b_b0tOEWTL2KmNAQAAANU"]
[Fri Dec 12 22:23:50.276175 2025] [:error] [pid 26520:tid 26574] [client 4.193.220.87:12098] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/admin.php"] [unique_id "aTwldkG_frlY5vNXu_AK_AAAAFY"]
[Fri Dec 12 22:23:50.790907 2025] [:error] [pid 26521:tid 26585] [client 4.193.220.87:12102] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aTwldpdhcAPU617AKTCdFQAAAIY"]
[Fri Dec 12 22:23:51.581605 2025] [:error] [pid 27950:tid 27956] [client 4.193.220.87:12104] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aTwld4VLRvkrdsSc1F2ztwAAAUQ"]
[Fri Dec 12 22:23:52.773971 2025] [:error] [pid 55760:tid 55767] [client 4.193.220.87:12154] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp.php"] [unique_id "aTwleFObDQlftFDyGawoswAAAYU"]
[Fri Dec 12 22:23:53.656994 2025] [:error] [pid 55760:tid 55780] [client 4.193.220.87:12127] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aTwleVObDQlftFDyGawotwAAAZI"]
[Fri Dec 12 22:23:54.097568 2025] [:error] [pid 26521:tid 26585] [client 4.193.220.87:12132] [client 4.193.220.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.220.87, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/chosen.php/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aTwlepdhcAPU617AKTCdIAAAAIY"]
[Fri Dec 12 22:23:54.210688 2025] [:error] [pid 26521:tid 26591] [client 4.193.220.87:18382] [client 4.193.220.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.220.87, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/chosen.php/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aTwlepdhcAPU617AKTCdIQAAAIw"]
[Fri Dec 12 22:23:54.950345 2025] [:error] [pid 26521:tid 26588] [client 4.193.220.87:12132] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "aTwlepdhcAPU617AKTCdKAAAAIk"]
[Fri Dec 12 22:23:55.816931 2025] [:error] [pid 27950:tid 27959] [client 4.193.220.87:12097] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aTwle4VLRvkrdsSc1F2zvQAAAUc"]
[Fri Dec 12 22:23:56.269866 2025] [:error] [pid 27950:tid 27970] [client 4.193.220.87:12149] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aTwlfIVLRvkrdsSc1F2zvwAAAVI"]
[Fri Dec 12 22:23:56.619299 2025] [:error] [pid 26521:tid 26587] [client 4.193.220.87:12140] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aTwlfJdhcAPU617AKTCdLQAAAIg"]
[Fri Dec 12 22:23:57.373847 2025] [:error] [pid 26607:tid 26626] [client 4.193.220.87:18388] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aTwlfcb_b0tOEWTL2KmtbwAAANE"]
[Fri Dec 12 22:23:58.175579 2025] [:error] [pid 26519:tid 26536] [client 4.193.220.87:12157] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aTwlfs8TRgSGOeWqEhcBrwAAAA0"]
[Fri Dec 12 22:23:58.485389 2025] [:error] [pid 26521:tid 26591] [client 4.193.220.87:18376] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTwlfpdhcAPU617AKTCdLgAAAIw"]
[Fri Dec 12 22:23:59.050277 2025] [:error] [pid 26519:tid 26527] [client 4.193.220.87:18381] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/vuln.php"] [unique_id "aTwlf88TRgSGOeWqEhcBsAAAAAQ"]
[Fri Dec 12 22:23:59.308246 2025] [:error] [pid 26520:tid 26573] [client 4.193.220.87:18387] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTwlf0G_frlY5vNXu_AK_wAAAFU"]
[Fri Dec 12 22:23:59.587088 2025] [:error] [pid 26521:tid 26583] [client 4.193.220.87:12126] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTwlf5dhcAPU617AKTCdMgAAAIQ"]
[Fri Dec 12 22:23:59.840561 2025] [:error] [pid 26519:tid 26537] [client 4.193.220.87:12101] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTwlf88TRgSGOeWqEhcBswAAAA4"]
[Fri Dec 12 22:24:00.428879 2025] [:error] [pid 60649:tid 60664] [client 4.193.220.87:18382] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTwlgFOcUGKU3sgfHP8KjAAAAQw"]
[Fri Dec 12 22:24:01.215619 2025] [:error] [pid 26520:tid 26555] [client 4.193.220.87:18386] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTwlgUG_frlY5vNXu_ALAAAAAEM"]
[Fri Dec 12 22:24:01.615431 2025] [:error] [pid 60649:tid 60674] [client 4.193.220.87:12121] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aTwlgVOcUGKU3sgfHP8KjQAAARY"]
[Fri Dec 12 22:24:02.320003 2025] [:error] [pid 26520:tid 26563] [client 4.193.220.87:18374] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/404.php"] [unique_id "aTwlgkG_frlY5vNXu_ALAQAAAEs"]
[Fri Dec 12 22:24:03.014302 2025] [:error] [pid 26607:tid 26629] [client 4.193.220.87:12133] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/404.php"] [unique_id "aTwlg8b_b0tOEWTL2KmtdQAAANQ"]
[Fri Dec 12 22:24:03.417799 2025] [:error] [pid 26521:tid 26584] [client 4.193.220.87:18398] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/404.php"] [unique_id "aTwlg5dhcAPU617AKTCdOgAAAIU"]
[Fri Dec 12 22:24:03.724915 2025] [:error] [pid 60649:tid 60669] [client 4.193.220.87:12110] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/404.php"] [unique_id "aTwlg1OcUGKU3sgfHP8KjgAAARE"]
[Fri Dec 12 22:24:04.112493 2025] [:error] [pid 55760:tid 55770] [client 4.193.220.87:12153] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTwlhFObDQlftFDyGawovwAAAYg"]
[Fri Dec 12 22:24:04.654146 2025] [:error] [pid 60649:tid 60671] [client 4.193.220.87:12151] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTwlhFOcUGKU3sgfHP8KjwAAARM"]
[Fri Dec 12 22:24:05.162146 2025] [:error] [pid 55760:tid 55776] [client 4.193.220.87:12118] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTwlhVObDQlftFDyGawowQAAAY4"]
[Fri Dec 12 22:24:05.938293 2025] [:error] [pid 26521:tid 26582] [client 4.193.220.87:18384] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aTwlhZdhcAPU617AKTCdPwAAAIM"]
[Fri Dec 12 22:24:06.380930 2025] [:error] [pid 26521:tid 26602] [client 4.193.220.87:12106] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTwlhpdhcAPU617AKTCdQAAAAJc"]
[Fri Dec 12 22:24:07.014643 2025] [:error] [pid 26521:tid 26594] [client 4.193.220.87:18394] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTwlh5dhcAPU617AKTCdRQAAAI8"]
[Fri Dec 12 22:24:07.309633 2025] [:error] [pid 26521:tid 26595] [client 4.193.220.87:18393] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTwlh5dhcAPU617AKTCdRgAAAJA"]
[Fri Dec 12 22:24:07.826451 2025] [:error] [pid 26521:tid 26603] [client 4.193.220.87:18404] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aTwlh5dhcAPU617AKTCdSQAAAJg"]
[Fri Dec 12 22:24:08.208215 2025] [:error] [pid 26521:tid 26582] [client 4.193.220.87:18385] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTwliJdhcAPU617AKTCdTAAAAIM"]
[Fri Dec 12 22:24:08.604779 2025] [:error] [pid 26521:tid 26588] [client 4.193.220.87:12139] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTwliJdhcAPU617AKTCdTwAAAIk"]
[Fri Dec 12 22:24:09.348066 2025] [:error] [pid 26521:tid 26595] [client 4.193.220.87:18401] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTwliZdhcAPU617AKTCdVQAAAJA"]
[Fri Dec 12 22:24:10.011603 2025] [:error] [pid 26521:tid 26582] [client 4.193.220.87:12148] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aTwlipdhcAPU617AKTCdXgAAAIM"]
[Fri Dec 12 22:24:10.370151 2025] [:error] [pid 26521:tid 26590] [client 4.193.220.87:12145] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTwlipdhcAPU617AKTCdZQAAAIs"]
[Fri Dec 12 22:24:11.067258 2025] [:error] [pid 26521:tid 26602] [client 4.193.220.87:18399] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTwli5dhcAPU617AKTCdcQAAAJc"]
[Fri Dec 12 22:24:11.524108 2025] [:error] [pid 26519:tid 26524] [client 4.193.220.87:18392] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTwli88TRgSGOeWqEhcBvAAAAAE"]
[Fri Dec 12 22:24:11.764996 2025] [:error] [pid 27950:tid 27961] [client 4.193.220.87:18372] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTwli4VLRvkrdsSc1F2zyAAAAUk"]
[Fri Dec 12 22:24:12.454757 2025] [:error] [pid 27950:tid 27962] [client 4.193.220.87:12134] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12wudscz.php"] [unique_id "aTwljIVLRvkrdsSc1F2zygAAAUo"]
[Fri Dec 12 22:24:13.289585 2025] [:error] [pid 26519:tid 26530] [client 4.193.220.87:12156] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12wudscz.php"] [unique_id "aTwljc8TRgSGOeWqEhcBvgAAAAc"]
[Fri Dec 12 22:24:13.743135 2025] [:error] [pid 26607:tid 26609] [client 4.193.220.87:18379] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12wudscz.php"] [unique_id "aTwljcb_b0tOEWTL2KmtiwAAAMA"]
[Fri Dec 12 22:24:14.172154 2025] [:error] [pid 26607:tid 26633] [client 4.193.220.87:12124] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12wudscz.php"] [unique_id "aTwljsb_b0tOEWTL2KmtjAAAANg"]
[Fri Dec 12 22:24:14.638423 2025] [:error] [pid 55760:tid 55771] [client 4.193.220.87:12113] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTwljlObDQlftFDyGawo0AAAAYk"]
[Fri Dec 12 22:24:14.825017 2025] [:error] [pid 26519:tid 26531] [client 4.193.220.87:18305] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTwljs8TRgSGOeWqEhcBwwAAAAg"]
[Fri Dec 12 22:24:15.148735 2025] [:error] [pid 26607:tid 26620] [client 4.193.220.87:12103] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTwlj8b_b0tOEWTL2KmtkAAAAMs"]
[Fri Dec 12 22:24:15.659392 2025] [:error] [pid 55760:tid 55762] [client 4.193.220.87:12096] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/admin.php"] [unique_id "aTwlj1ObDQlftFDyGawo0QAAAYA"]
[Fri Dec 12 22:24:15.977080 2025] [:error] [pid 27950:tid 27972] [client 4.193.220.87:12141] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTwlj4VLRvkrdsSc1F2z0AAAAVQ"]
[Fri Dec 12 22:24:16.878538 2025] [:error] [pid 26607:tid 26615] [client 4.193.220.87:12159] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTwlkMb_b0tOEWTL2KmtkwAAAMY"]
[Fri Dec 12 22:24:17.795723 2025] [:error] [pid 26520:tid 26574] [client 4.193.220.87:12120] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTwlkUG_frlY5vNXu_ALAgAAAFY"]
[Fri Dec 12 22:24:18.079680 2025] [:error] [pid 55760:tid 55781] [client 4.193.220.87:12135] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTwlklObDQlftFDyGawo0wAAAZM"]
[Fri Dec 12 22:24:18.366966 2025] [:error] [pid 26519:tid 26536] [client 4.193.220.87:18418] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/background-image-cropper/plugins.php"] [unique_id "aTwlks8TRgSGOeWqEhcBzgAAAA0"]
[Fri Dec 12 22:24:18.724137 2025] [:error] [pid 27950:tid 27969] [client 4.193.220.87:18368] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwlkoVLRvkrdsSc1F2z1wAAAVE"]
[Fri Dec 12 22:24:19.181315 2025] [:error] [pid 60649:tid 60669] [client 4.193.220.87:18425] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwlk1OcUGKU3sgfHP8KnwAAARE"]
[Fri Dec 12 22:24:19.479288 2025] [:error] [pid 26521:tid 26603] [client 4.193.220.87:18414] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwlk5dhcAPU617AKTCdiAAAAJg"]
[Fri Dec 12 22:24:19.851654 2025] [:error] [pid 27950:tid 27972] [client 4.193.220.87:12158] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aTwlk4VLRvkrdsSc1F2z2wAAAVQ"]
[Fri Dec 12 22:24:20.474650 2025] [:error] [pid 55760:tid 55786] [client 4.193.220.87:12107] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/wp-login.php"] [unique_id "aTwllFObDQlftFDyGawo3QAAAZg"]
[Fri Dec 12 22:24:20.840697 2025] [:error] [pid 26607:tid 26617] [client 4.193.220.87:12142] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTwllMb_b0tOEWTL2KmtoAAAAMg"]
[Fri Dec 12 22:24:21.364031 2025] [:error] [pid 60649:tid 60661] [client 4.193.220.87:12112] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTwllVOcUGKU3sgfHP8KogAAAQk"]
[Fri Dec 12 22:24:21.771447 2025] [:error] [pid 26521:tid 26602] [client 4.193.220.87:18383] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTwllZdhcAPU617AKTCdjwAAAJc"]
[Fri Dec 12 22:24:22.100862 2025] [:error] [pid 26521:tid 26581] [client 4.193.220.87:12125] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/users.php"] [unique_id "aTwllpdhcAPU617AKTCdkAAAAII"]
[Fri Dec 12 22:24:22.317629 2025] [:error] [pid 27950:tid 27970] [client 4.193.220.87:12129] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTwlloVLRvkrdsSc1F2z4wAAAVI"]
[Fri Dec 12 22:24:22.576095 2025] [:error] [pid 26520:tid 26557] [client 4.193.220.87:18375] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aTwllkG_frlY5vNXu_ALFAAAAEU"]
[Fri Dec 12 22:24:22.893186 2025] [:error] [pid 26607:tid 26619] [client 4.193.220.87:18373] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/about.php"] [unique_id "aTwllsb_b0tOEWTL2KmtqQAAAMo"]
[Fri Dec 12 22:24:23.355362 2025] [:error] [pid 60649:tid 60676] [client 4.193.220.87:12119] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/about.php"] [unique_id "aTwll1OcUGKU3sgfHP8KqQAAARg"]
[Fri Dec 12 22:24:23.624217 2025] [:error] [pid 26520:tid 26559] [client 4.193.220.87:18391] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/about.php"] [unique_id "aTwll0G_frlY5vNXu_ALGgAAAEc"]
[Fri Dec 12 22:24:23.959832 2025] [:error] [pid 26607:tid 26631] [client 4.193.220.87:18389] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/about.php"] [unique_id "aTwll8b_b0tOEWTL2KmtqgAAANY"]
[Fri Dec 12 22:24:24.212760 2025] [:error] [pid 55760:tid 55768] [client 4.193.220.87:12116] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTwlmFObDQlftFDyGawo6QAAAYY"]
[Fri Dec 12 22:24:24.560964 2025] [:error] [pid 55760:tid 55772] [client 4.193.220.87:18407] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTwlmFObDQlftFDyGawo6gAAAYo"]
[Fri Dec 12 22:24:24.801856 2025] [:error] [pid 26520:tid 26552] [client 4.193.220.87:12130] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTwlmEG_frlY5vNXu_ALHAAAAEA"]
[Fri Dec 12 22:24:24.995606 2025] [:error] [pid 26521:tid 26601] [client 4.193.220.87:18315] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTwlmJdhcAPU617AKTCdmQAAAJY"]
[Fri Dec 12 22:24:25.508792 2025] [:error] [pid 26521:tid 26585] [client 4.193.220.87:18356] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTwlmZdhcAPU617AKTCdnQAAAIY"]
[Fri Dec 12 22:24:25.756579 2025] [:error] [pid 26607:tid 26612] [client 4.193.220.87:18420] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTwlmcb_b0tOEWTL2KmtrgAAAMM"]
[Fri Dec 12 22:24:26.011150 2025] [:error] [pid 60649:tid 60656] [client 4.193.220.87:12136] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTwlmlOcUGKU3sgfHP8KsAAAAQQ"]
[Fri Dec 12 22:24:26.479614 2025] [:error] [pid 55760:tid 55773] [client 4.193.220.87:18377] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/about.php"] [unique_id "aTwlmlObDQlftFDyGawo7QAAAYs"]
[Fri Dec 12 22:24:26.978709 2025] [:error] [pid 27950:tid 27960] [client 4.193.220.87:12115] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTwlmoVLRvkrdsSc1F2z7AAAAUg"]
[Fri Dec 12 22:24:27.611362 2025] [:error] [pid 27950:tid 27968] [client 4.193.220.87:18312] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTwlm4VLRvkrdsSc1F2z7gAAAVA"]
[Fri Dec 12 22:24:28.173825 2025] [:error] [pid 27950:tid 27965] [client 4.193.220.87:18412] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTwlnIVLRvkrdsSc1F2z8AAAAU0"]
[Fri Dec 12 22:24:28.447385 2025] [:error] [pid 27950:tid 27959] [client 4.193.220.87:18396] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/content.php"] [unique_id "aTwlnIVLRvkrdsSc1F2z8QAAAUc"]
[Fri Dec 12 22:24:29.294822 2025] [:error] [pid 26520:tid 26569] [client 4.193.220.87:18430] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aTwlnUG_frlY5vNXu_ALJwAAAFE"]
[Fri Dec 12 22:24:29.782176 2025] [:error] [pid 27950:tid 27964] [client 4.193.220.87:18370] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTwlnYVLRvkrdsSc1F2z9gAAAUw"]
[Fri Dec 12 22:24:30.243706 2025] [:error] [pid 26521:tid 26593] [client 4.193.220.87:18333] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTwlnpdhcAPU617AKTCdpAAAAI4"]
[Fri Dec 12 22:24:30.523861 2025] [:error] [pid 55760:tid 55778] [client 4.193.220.87:18321] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTwlnlObDQlftFDyGawo8QAAAZA"]
[Fri Dec 12 22:24:30.859062 2025] [:error] [pid 26607:tid 26618] [client 4.193.220.87:12152] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aTwlnsb_b0tOEWTL2KmttQAAAMk"]
[Fri Dec 12 22:24:31.218974 2025] [:error] [pid 60649:tid 60670] [client 4.193.220.87:18340] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php"] [unique_id "aTwln1OcUGKU3sgfHP8KtwAAARI"]
[Fri Dec 12 22:24:31.536515 2025] [:error] [pid 26607:tid 26611] [client 4.193.220.87:18426] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTwln8b_b0tOEWTL2KmttwAAAMI"]
[Fri Dec 12 22:24:31.886405 2025] [:error] [pid 27950:tid 27966] [client 4.193.220.87:18317] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTwln4VLRvkrdsSc1F2z-gAAAU4"]
[Fri Dec 12 22:24:32.242359 2025] [:error] [pid 55760:tid 55774] [client 4.193.220.87:12100] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aTwloFObDQlftFDyGawo8wAAAYw"]
[Fri Dec 12 22:24:32.481447 2025] [:error] [pid 26520:tid 26553] [client 4.193.220.87:18316] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTwloEG_frlY5vNXu_ALKwAAAEE"]
[Fri Dec 12 22:24:33.389231 2025] [:error] [pid 26607:tid 26629] [client 4.193.220.87:18419] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTwlocb_b0tOEWTL2KmtuQAAANQ"]
[Fri Dec 12 22:24:34.380904 2025] [:error] [pid 26521:tid 26592] [client 4.193.220.87:18304] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTwlopdhcAPU617AKTCdqAAAAI0"]
[Fri Dec 12 22:24:35.066330 2025] [:error] [pid 26521:tid 26582] [client 4.193.220.87:12239] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTwlo5dhcAPU617AKTCdqwAAAIM"]
[Fri Dec 12 22:24:35.838795 2025] [:error] [pid 26607:tid 26612] [client 4.193.220.87:12150] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTwlo8b_b0tOEWTL2KmtvAAAAMM"]
[Fri Dec 12 22:24:36.298461 2025] [:error] [pid 27950:tid 27971] [client 4.193.220.87:18306] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTwlpIVLRvkrdsSc1F2z_gAAAVM"]
[Fri Dec 12 22:24:36.820789 2025] [:error] [pid 26607:tid 26632] [client 4.193.220.87:18415] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTwlpMb_b0tOEWTL2KmtvQAAANc"]
[Fri Dec 12 22:24:37.296575 2025] [:error] [pid 26607:tid 26626] [client 4.193.220.87:18410] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aTwlpcb_b0tOEWTL2KmtvwAAANE"]
[Fri Dec 12 22:24:37.890453 2025] [:error] [pid 60649:tid 60669] [client 4.193.220.87:12241] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aTwlpVOcUGKU3sgfHP8KvwAAARE"]
[Fri Dec 12 22:24:38.274303 2025] [:error] [pid 26520:tid 26569] [client 4.193.220.87:12144] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aTwlpkG_frlY5vNXu_ALLgAAAFE"]
[Fri Dec 12 22:24:38.572813 2025] [:error] [pid 26519:tid 26535] [client 4.193.220.87:12131] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aTwlps8TRgSGOeWqEhcB4gAAAAw"]
[Fri Dec 12 22:24:38.829215 2025] [:error] [pid 26519:tid 26534] [client 4.193.220.87:18308] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aTwlps8TRgSGOeWqEhcB4wAAAAs"]
[Fri Dec 12 22:24:39.056027 2025] [:error] [pid 26520:tid 26560] [client 4.193.220.87:18330] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTwlp0G_frlY5vNXu_ALMAAAAEg"]
[Fri Dec 12 22:24:39.289101 2025] [:error] [pid 26519:tid 26544] [client 4.193.220.87:18365] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTwlp88TRgSGOeWqEhcB5AAAABU"]
[Fri Dec 12 22:24:39.499940 2025] [:error] [pid 26519:tid 26530] [client 4.193.220.87:12146] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTwlp88TRgSGOeWqEhcB5QAAAAc"]
[Fri Dec 12 22:24:39.730357 2025] [:error] [pid 60649:tid 60674] [client 4.193.220.87:12249] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aTwlp1OcUGKU3sgfHP8KxQAAARY"]
[Fri Dec 12 22:24:40.165775 2025] [:error] [pid 26520:tid 26576] [client 4.193.220.87:18409] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTwlqEG_frlY5vNXu_ALMQAAAFg"]
[Fri Dec 12 22:24:40.533718 2025] [:error] [pid 27950:tid 27961] [client 4.193.220.87:18421] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTwlqIVLRvkrdsSc1F20AAAAAUk"]
[Fri Dec 12 22:24:41.316622 2025] [:error] [pid 55760:tid 55772] [client 4.193.220.87:18403] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTwlqVObDQlftFDyGawo_AAAAYo"]
[Fri Dec 12 22:24:41.817478 2025] [:error] [pid 55760:tid 55771] [client 4.193.220.87:18408] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aTwlqVObDQlftFDyGawo_gAAAYk"]
[Fri Dec 12 22:24:42.081134 2025] [:error] [pid 26520:tid 26553] [client 4.193.220.87:18335] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTwlqkG_frlY5vNXu_ALNAAAAEE"]
[Fri Dec 12 22:24:42.424960 2025] [:error] [pid 27950:tid 27960] [client 4.193.220.87:18345] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTwlqoVLRvkrdsSc1F20AgAAAUg"]
[Fri Dec 12 22:24:42.791100 2025] [:error] [pid 27950:tid 27955] [client 4.193.220.87:12099] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTwlqoVLRvkrdsSc1F20AwAAAUM"]
[Fri Dec 12 22:24:43.455825 2025] [:error] [pid 27950:tid 27959] [client 4.193.220.87:18338] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aTwlq4VLRvkrdsSc1F20BwAAAUc"]
[Fri Dec 12 22:24:43.943148 2025] [:error] [pid 26520:tid 26554] [client 4.193.220.87:18378] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aTwlq0G_frlY5vNXu_ALNgAAAEI"]
[Fri Dec 12 22:24:44.442257 2025] [:error] [pid 55760:tid 55776] [client 4.193.220.87:12242] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aTwlrFObDQlftFDyGawpBgAAAY4"]
[Fri Dec 12 22:24:44.790056 2025] [:error] [pid 27950:tid 27957] [client 4.193.220.87:18369] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aTwlrIVLRvkrdsSc1F20DAAAAUU"]
[Fri Dec 12 22:24:45.031830 2025] [:error] [pid 26519:tid 26538] [client 4.193.220.87:18339] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aTwlrc8TRgSGOeWqEhcB6wAAAA8"]
[Fri Dec 12 22:24:45.297204 2025] [:error] [pid 55760:tid 55783] [client 4.193.220.87:18322] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aTwlrVObDQlftFDyGawpCgAAAZU"]
[Fri Dec 12 22:24:45.820387 2025] [:error] [pid 27950:tid 27962] [client 4.193.220.87:18424] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aTwlrYVLRvkrdsSc1F20EgAAAUo"]
[Fri Dec 12 22:24:46.052298 2025] [:error] [pid 27950:tid 27960] [client 4.193.220.87:18357] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aTwlroVLRvkrdsSc1F20FAAAAUg"]
[Fri Dec 12 22:24:46.341521 2025] [:error] [pid 55760:tid 55764] [client 4.193.220.87:18343] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTwlrlObDQlftFDyGawpEAAAAYI"]
[Fri Dec 12 22:24:46.976041 2025] [:error] [pid 55760:tid 55773] [client 4.193.220.87:18342] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTwlrlObDQlftFDyGawpFQAAAYs"]
[Fri Dec 12 22:24:47.292038 2025] [:error] [pid 26519:tid 26528] [client 4.193.220.87:18367] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTwlr88TRgSGOeWqEhcB8gAAAAU"]
[Fri Dec 12 22:24:47.492012 2025] [:error] [pid 55760:tid 55765] [client 4.193.220.87:12138] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTwlr1ObDQlftFDyGawpGAAAAYM"]
[Fri Dec 12 22:24:48.026426 2025] [:error] [pid 26519:tid 26542] [client 4.193.220.87:18350] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aTwlsM8TRgSGOeWqEhcB9AAAABM"]
[Fri Dec 12 22:24:48.616033 2025] [:error] [pid 26520:tid 26565] [client 4.193.220.87:18314] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aTwlsEG_frlY5vNXu_ALOAAAAE0"]
[Fri Dec 12 22:24:48.991962 2025] [:error] [pid 55760:tid 55786] [client 4.193.220.87:18354] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aTwlsFObDQlftFDyGawpIAAAAZg"]
[Fri Dec 12 22:24:49.550765 2025] [:error] [pid 26519:tid 26535] [client 4.193.220.87:12252] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aTwlsc8TRgSGOeWqEhcB-QAAAAw"]
[Fri Dec 12 22:24:50.166497 2025] [:error] [pid 26607:tid 26621] [client 4.193.220.87:18423] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aTwlssb_b0tOEWTL2KmtxgAAAMw"]
[Fri Dec 12 22:24:50.527749 2025] [:error] [pid 27950:tid 27955] [client 4.193.220.87:12184] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aTwlsoVLRvkrdsSc1F20HgAAAUM"]
[Fri Dec 12 22:24:50.744158 2025] [:error] [pid 26520:tid 26568] [client 4.193.220.87:12224] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aTwlskG_frlY5vNXu_ALOgAAAFA"]
[Fri Dec 12 22:24:51.143458 2025] [:error] [pid 26521:tid 26583] [client 4.193.220.87:12235] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aTwls5dhcAPU617AKTCdtQAAAIQ"]
[Fri Dec 12 22:24:51.362843 2025] [:error] [pid 26519:tid 26529] [client 4.193.220.87:12123] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aTwls88TRgSGOeWqEhcB_wAAAAY"]
[Fri Dec 12 22:24:51.982011 2025] [:error] [pid 27950:tid 27963] [client 4.193.220.87:12234] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aTwls4VLRvkrdsSc1F20IQAAAUs"]
[Fri Dec 12 22:24:52.260156 2025] [:error] [pid 55760:tid 55786] [client 4.193.220.87:18422] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aTwltFObDQlftFDyGawpMAAAAZg"]
[Fri Dec 12 22:24:52.675857 2025] [:error] [pid 60649:tid 60667] [client 4.193.220.87:18310] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aTwltFOcUGKU3sgfHP8K8AAAAQ8"]
[Fri Dec 12 22:24:53.092001 2025] [:error] [pid 26520:tid 26574] [client 4.193.220.87:12155] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aTwltUG_frlY5vNXu_ALPgAAAFY"]
[Fri Dec 12 22:24:53.479384 2025] [:error] [pid 26520:tid 26553] [client 4.193.220.87:12188] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aTwltUG_frlY5vNXu_ALPwAAAEE"]
[Fri Dec 12 22:24:54.079690 2025] [:error] [pid 27950:tid 27971] [client 4.193.220.87:18411] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aTwltoVLRvkrdsSc1F20KQAAAVM"]
[Fri Dec 12 22:24:54.298395 2025] [:error] [pid 26520:tid 26562] [client 4.193.220.87:18326] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/file.php"] [unique_id "aTwltkG_frlY5vNXu_ALQQAAAEo"]
[Fri Dec 12 22:24:54.733905 2025] [:error] [pid 60649:tid 60657] [client 4.193.220.87:12246] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/item.php"] [unique_id "aTwltlOcUGKU3sgfHP8K_QAAAQU"]
[Fri Dec 12 22:24:56.153341 2025] [:error] [pid 26519:tid 26536] [client 4.193.220.87:18397] [client 4.193.220.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.220.87, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aTwluM8TRgSGOeWqEhcCDQAAAA0"]
[Fri Dec 12 22:24:56.249351 2025] [:error] [pid 27950:tid 27968] [client 4.193.220.87:12112] [client 4.193.220.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.220.87, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aTwluIVLRvkrdsSc1F20MwAAAVA"]
[Fri Dec 12 22:24:56.669776 2025] [:error] [pid 26519:tid 26529] [client 4.193.220.87:18397] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "aTwluM8TRgSGOeWqEhcCDwAAAAY"]
[Fri Dec 12 22:24:57.759409 2025] [:error] [pid 55760:tid 55769] [client 4.193.220.87:18380] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTwluVObDQlftFDyGawpRAAAAYc"]
[Fri Dec 12 22:24:58.368955 2025] [:error] [pid 26521:tid 26584] [client 4.193.220.87:18348] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aTwlupdhcAPU617AKTCdyQAAAIU"]
[Fri Dec 12 22:24:59.029317 2025] [:error] [pid 60649:tid 60674] [client 4.193.220.87:18406] [client 4.193.220.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.220.87, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aTwlu1OcUGKU3sgfHP8LBgAAARY"]
[Fri Dec 12 22:24:59.143373 2025] [:error] [pid 27950:tid 27969] [client 4.193.220.87:12112] [client 4.193.220.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.193.220.87, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aTwlu4VLRvkrdsSc1F20OAAAAVE"]
[Fri Dec 12 22:24:59.496328 2025] [:error] [pid 60649:tid 60654] [client 4.193.220.87:18406] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aTwlu1OcUGKU3sgfHP8LCAAAAQI"]
[Fri Dec 12 22:25:00.300034 2025] [:error] [pid 26521:tid 26600] [client 4.193.220.87:12258] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aTwlvJdhcAPU617AKTCdzAAAAJU"]
[Fri Dec 12 22:25:03.079735 2025] [:error] [pid 55760:tid 55782] [client 4.193.220.87:18336] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTwlv1ObDQlftFDyGawpSgAAAZQ"]
[Fri Dec 12 22:25:03.713186 2025] [:error] [pid 55760:tid 55786] [client 4.193.220.87:12254] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aTwlv1ObDQlftFDyGawpTAAAAZg"]
[Fri Dec 12 22:25:04.133655 2025] [:error] [pid 55760:tid 55764] [client 4.193.220.87:12105] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aTwlwFObDQlftFDyGawpTgAAAYI"]
[Fri Dec 12 22:25:04.474525 2025] [:error] [pid 26519:tid 26547] [client 4.193.220.87:18400] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aTwlwM8TRgSGOeWqEhcCFQAAABg"]
[Fri Dec 12 22:25:05.025631 2025] [:error] [pid 60649:tid 60667] [client 4.193.220.87:18324] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aTwlwVOcUGKU3sgfHP8LDAAAAQ8"]
[Fri Dec 12 22:25:05.334479 2025] [:error] [pid 55760:tid 55781] [client 4.193.220.87:18355] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aTwlwVObDQlftFDyGawpUgAAAZM"]
[Fri Dec 12 22:25:05.728704 2025] [:error] [pid 55760:tid 55778] [client 4.193.220.87:18416] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aTwlwVObDQlftFDyGawpVAAAAZA"]
[Fri Dec 12 22:25:05.980622 2025] [:error] [pid 26520:tid 26559] [client 4.193.220.87:18427] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aTwlwUG_frlY5vNXu_ALSAAAAEc"]
[Fri Dec 12 22:25:06.378522 2025] [:error] [pid 26520:tid 26562] [client 4.193.220.87:12191] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aTwlwkG_frlY5vNXu_ALSQAAAEo"]
[Fri Dec 12 22:25:06.577027 2025] [:error] [pid 26521:tid 26579] [client 4.193.220.87:11805] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aTwlwpdhcAPU617AKTCd1AAAAIA"]
[Fri Dec 12 22:25:07.455206 2025] [:error] [pid 26521:tid 26589] [client 4.193.220.87:18319] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aTwlw5dhcAPU617AKTCd2AAAAIo"]
[Fri Dec 12 22:25:08.012405 2025] [:error] [pid 60649:tid 60669] [client 4.193.220.87:18417] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aTwlxFOcUGKU3sgfHP8LEQAAARE"]
[Fri Dec 12 22:25:08.634174 2025] [:error] [pid 26521:tid 26583] [client 4.193.220.87:12200] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aTwlxJdhcAPU617AKTCd3gAAAIQ"]
[Fri Dec 12 22:25:09.151821 2025] [:error] [pid 60649:tid 60653] [client 4.193.220.87:18429] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aTwlxVOcUGKU3sgfHP8LEgAAAQE"]
[Fri Dec 12 22:25:09.585451 2025] [:error] [pid 26607:tid 26618] [client 4.193.220.87:12270] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aTwlxcb_b0tOEWTL2Kmt0AAAAMk"]
[Fri Dec 12 22:25:10.099873 2025] [:error] [pid 26521:tid 26588] [client 4.193.220.87:12284] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aTwlxpdhcAPU617AKTCd3wAAAIk"]
[Fri Dec 12 22:25:10.449013 2025] [:error] [pid 26607:tid 26609] [client 4.193.220.87:12231] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aTwlxsb_b0tOEWTL2Kmt0QAAAMA"]
[Fri Dec 12 22:25:10.782423 2025] [:error] [pid 26520:tid 26566] [client 4.193.220.87:18362] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aTwlxkG_frlY5vNXu_ALSgAAAE4"]
[Fri Dec 12 22:25:11.198703 2025] [:error] [pid 27950:tid 27959] [client 4.193.220.87:18413] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aTwlx4VLRvkrdsSc1F20RAAAAUc"]
[Fri Dec 12 22:25:11.466612 2025] [:error] [pid 26607:tid 26610] [client 4.193.220.87:12122] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aTwlx8b_b0tOEWTL2Kmt0gAAAME"]
[Fri Dec 12 22:25:11.730770 2025] [:error] [pid 26520:tid 26567] [client 4.193.220.87:12232] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/shell.php"] [unique_id "aTwlx0G_frlY5vNXu_ALSwAAAE8"]
[Fri Dec 12 22:25:12.118314 2025] [:error] [pid 26519:tid 26543] [client 4.193.220.87:18390] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aTwlyM8TRgSGOeWqEhcCGAAAABQ"]
[Fri Dec 12 22:25:12.420219 2025] [:error] [pid 26520:tid 26552] [client 4.193.220.87:12277] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aTwlyEG_frlY5vNXu_ALTQAAAEA"]
[Fri Dec 12 22:25:12.762737 2025] [:error] [pid 26520:tid 26569] [client 4.193.220.87:18346] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aTwlyEG_frlY5vNXu_ALTgAAAFE"]
[Fri Dec 12 22:25:13.086456 2025] [:error] [pid 26521:tid 26597] [client 4.193.220.87:12264] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/bak.php"] [unique_id "aTwlyZdhcAPU617AKTCd5QAAAJI"]
[Fri Dec 12 22:25:13.403166 2025] [:error] [pid 27950:tid 27976] [client 4.193.220.87:12147] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTwlyYVLRvkrdsSc1F20RgAAAVg"]
[Fri Dec 12 22:25:13.968119 2025] [:error] [pid 26607:tid 26614] [client 4.193.220.87:12167] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTwlycb_b0tOEWTL2Kmt1QAAAMU"]
[Fri Dec 12 22:25:14.425070 2025] [:error] [pid 26521:tid 26602] [client 4.193.220.87:12170] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTwlypdhcAPU617AKTCd5gAAAJc"]
[Fri Dec 12 22:25:14.807902 2025] [:error] [pid 26521:tid 26591] [client 4.193.220.87:12281] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTwlypdhcAPU617AKTCd5wAAAIw"]
[Fri Dec 12 22:25:15.294749 2025] [:error] [pid 26521:tid 26603] [client 4.193.220.87:12227] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aTwly5dhcAPU617AKTCd6QAAAJg"]
[Fri Dec 12 22:25:15.582934 2025] [:error] [pid 26521:tid 26600] [client 4.193.220.87:18395] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aTwly5dhcAPU617AKTCd7AAAAJU"]
[Fri Dec 12 22:25:15.940750 2025] [:error] [pid 55760:tid 55777] [client 4.193.220.87:12271] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aTwly1ObDQlftFDyGawpdQAAAY8"]
[Fri Dec 12 22:25:16.209223 2025] [:error] [pid 26607:tid 26630] [client 4.193.220.87:12283] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aTwlzMb_b0tOEWTL2Kmt1gAAANU"]
[Fri Dec 12 22:25:16.517543 2025] [:error] [pid 60649:tid 60652] [client 4.193.220.87:18328] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/date.php"] [unique_id "aTwlzFOcUGKU3sgfHP8LEwAAAQA"]
[Fri Dec 12 22:25:16.752107 2025] [:error] [pid 60649:tid 60676] [client 4.193.220.87:18351] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/date.php"] [unique_id "aTwlzFOcUGKU3sgfHP8LFAAAARg"]
[Fri Dec 12 22:25:17.164429 2025] [:error] [pid 60649:tid 60675] [client 4.193.220.87:12128] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/date.php"] [unique_id "aTwlzVOcUGKU3sgfHP8LFQAAARc"]
[Fri Dec 12 22:25:17.629192 2025] [:error] [pid 26519:tid 26540] [client 4.193.220.87:12260] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/date.php"] [unique_id "aTwlzc8TRgSGOeWqEhcCGwAAABE"]
[Fri Dec 12 22:25:18.067886 2025] [:error] [pid 60649:tid 60657] [client 4.193.220.87:12238] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/x.php"] [unique_id "aTwlzlOcUGKU3sgfHP8LFgAAAQU"]
[Fri Dec 12 22:25:18.516896 2025] [:error] [pid 55760:tid 55782] [client 4.193.220.87:12208] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/x.php"] [unique_id "aTwlzlObDQlftFDyGawpeAAAAZQ"]
[Fri Dec 12 22:25:18.944817 2025] [:error] [pid 55760:tid 55780] [client 4.193.220.87:12197] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/x.php"] [unique_id "aTwlzlObDQlftFDyGawpeQAAAZI"]
[Fri Dec 12 22:25:19.317148 2025] [:error] [pid 26607:tid 26627] [client 4.193.220.87:18431] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/x.php"] [unique_id "aTwlz8b_b0tOEWTL2Kmt1wAAANI"]
[Fri Dec 12 22:25:19.708388 2025] [:error] [pid 60649:tid 60672] [client 4.193.220.87:12236] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aTwlz1OcUGKU3sgfHP8LGAAAARQ"]
[Fri Dec 12 22:25:20.109454 2025] [:error] [pid 55760:tid 55776] [client 4.193.220.87:18323] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aTwl0FObDQlftFDyGawpewAAAY4"]
[Fri Dec 12 22:25:20.414991 2025] [:error] [pid 60649:tid 60663] [client 4.193.220.87:12287] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aTwl0FOcUGKU3sgfHP8LGQAAAQs"]
[Fri Dec 12 22:25:20.658422 2025] [:error] [pid 55760:tid 55770] [client 4.193.220.87:18309] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aTwl0FObDQlftFDyGawpfAAAAYg"]
[Fri Dec 12 22:25:21.164102 2025] [:error] [pid 26521:tid 26584] [client 4.193.220.87:12275] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aTwl0ZdhcAPU617AKTCd7QAAAIU"]
[Fri Dec 12 22:25:21.421302 2025] [:error] [pid 26521:tid 26587] [client 4.193.220.87:18320] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "aTwl0ZdhcAPU617AKTCd7gAAAIg"]
[Fri Dec 12 22:25:21.798411 2025] [:error] [pid 55760:tid 55768] [client 4.193.220.87:18363] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aTwl0VObDQlftFDyGawpfgAAAYY"]
[Fri Dec 12 22:25:22.116898 2025] [:error] [pid 26607:tid 26628] [client 4.193.220.87:12137] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aTwl0sb_b0tOEWTL2Kmt2AAAANM"]
[Fri Dec 12 22:25:22.354212 2025] [:error] [pid 60649:tid 60670] [client 4.193.220.87:12163] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aTwl0lOcUGKU3sgfHP8LGgAAARI"]
[Fri Dec 12 22:25:22.572195 2025] [:error] [pid 55760:tid 55767] [client 4.193.220.87:18405] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aTwl0lObDQlftFDyGawpgAAAAYU"]
[Fri Dec 12 22:25:22.830634 2025] [:error] [pid 26520:tid 26554] [client 4.193.220.87:12282] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/cong.php"] [unique_id "aTwl0kG_frlY5vNXu_ALVAAAAEI"]
[Fri Dec 12 22:25:23.364716 2025] [:error] [pid 26607:tid 26619] [client 4.193.220.87:12174] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/cong.php"] [unique_id "aTwl08b_b0tOEWTL2Kmt2wAAAMo"]
[Fri Dec 12 22:25:23.693361 2025] [:error] [pid 26521:tid 26590] [client 4.193.220.87:18332] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/cong.php"] [unique_id "aTwl05dhcAPU617AKTCd8AAAAIs"]
[Fri Dec 12 22:25:23.996644 2025] [:error] [pid 55760:tid 55773] [client 4.193.220.87:18353] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/cong.php"] [unique_id "aTwl01ObDQlftFDyGawpgwAAAYs"]
[Fri Dec 12 22:25:24.260427 2025] [:error] [pid 55760:tid 55781] [client 4.193.220.87:12274] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/shell.php"] [unique_id "aTwl1FObDQlftFDyGawphAAAAZM"]
[Fri Dec 12 22:25:24.490574 2025] [:error] [pid 55760:tid 55772] [client 4.193.220.87:12237] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/mah.php"] [unique_id "aTwl1FObDQlftFDyGawphQAAAYo"]
[Fri Dec 12 22:25:24.798213 2025] [:error] [pid 26521:tid 26602] [client 4.193.220.87:18347] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/mah.php"] [unique_id "aTwl1JdhcAPU617AKTCd9AAAAJc"]
[Fri Dec 12 22:25:25.433411 2025] [:error] [pid 26521:tid 26600] [client 4.193.220.87:18371] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/mah.php"] [unique_id "aTwl1ZdhcAPU617AKTCd9wAAAJU"]
[Fri Dec 12 22:25:25.973246 2025] [:error] [pid 26521:tid 26594] [client 4.193.220.87:12251] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/mah.php"] [unique_id "aTwl1ZdhcAPU617AKTCd-QAAAI8"]
[Fri Dec 12 22:25:26.339685 2025] [:error] [pid 26521:tid 26593] [client 4.193.220.87:18364] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aTwl1pdhcAPU617AKTCd_AAAAI4"]
[Fri Dec 12 22:25:26.775186 2025] [:error] [pid 26521:tid 26584] [client 4.193.220.87:11789] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aTwl1pdhcAPU617AKTCd_QAAAIU"]
[Fri Dec 12 22:25:27.199781 2025] [:error] [pid 27950:tid 27968] [client 4.193.220.87:12195] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aTwl14VLRvkrdsSc1F20SAAAAVA"]
[Fri Dec 12 22:25:27.503124 2025] [:error] [pid 27950:tid 27952] [client 4.193.220.87:12268] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aTwl14VLRvkrdsSc1F20SQAAAUA"]
[Fri Dec 12 22:25:27.802322 2025] [:error] [pid 27950:tid 27958] [client 4.193.220.87:18334] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aTwl14VLRvkrdsSc1F20SwAAAUY"]
[Fri Dec 12 22:25:27.996843 2025] [:error] [pid 26607:tid 26621] [client 4.193.220.87:12278] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aTwl18b_b0tOEWTL2Kmt3QAAAMw"]
[Fri Dec 12 22:25:28.681788 2025] [:error] [pid 55760:tid 55777] [client 4.193.220.87:12244] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aTwl2FObDQlftFDyGawpiQAAAY8"]
[Fri Dec 12 22:25:28.982291 2025] [:error] [pid 55760:tid 55775] [client 4.193.220.87:12257] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aTwl2FObDQlftFDyGawpiwAAAY0"]
[Fri Dec 12 22:25:29.338226 2025] [:error] [pid 60649:tid 60673] [client 4.193.220.87:18318] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTwl2VOcUGKU3sgfHP8LGwAAARU"]
[Fri Dec 12 22:25:29.744029 2025] [:error] [pid 26607:tid 26623] [client 4.193.220.87:12250] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTwl2cb_b0tOEWTL2Kmt3gAAAM4"]
[Fri Dec 12 22:25:30.091849 2025] [:error] [pid 55760:tid 55771] [client 4.193.220.87:12194] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTwl2lObDQlftFDyGawpjwAAAYk"]
[Fri Dec 12 22:25:30.575896 2025] [:error] [pid 26521:tid 26585] [client 4.193.220.87:11811] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aTwl2pdhcAPU617AKTCd_wAAAIY"]
[Fri Dec 12 22:25:30.865395 2025] [:error] [pid 26519:tid 26527] [client 4.193.220.87:18329] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "aTwl2s8TRgSGOeWqEhcCHgAAAAQ"]
[Fri Dec 12 22:25:31.188116 2025] [:error] [pid 26519:tid 26533] [client 4.193.220.87:18358] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "aTwl288TRgSGOeWqEhcCHwAAAAo"]
[Fri Dec 12 22:25:31.667294 2025] [:error] [pid 26521:tid 26591] [client 4.193.220.87:12273] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aTwl25dhcAPU617AKTCeAQAAAIw"]
[Fri Dec 12 22:25:31.923209 2025] [:error] [pid 26521:tid 26589] [client 4.193.220.87:12262] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aTwl25dhcAPU617AKTCeAgAAAIo"]
[Fri Dec 12 22:25:32.263314 2025] [:error] [pid 60649:tid 60654] [client 4.193.220.87:12286] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aTwl3FOcUGKU3sgfHP8LIgAAAQI"]
[Fri Dec 12 22:25:32.617007 2025] [:error] [pid 26519:tid 26544] [client 4.193.220.87:12185] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTwl3M8TRgSGOeWqEhcCIQAAABU"]
[Fri Dec 12 22:25:32.958376 2025] [:error] [pid 26521:tid 26601] [client 4.193.220.87:12279] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTwl3JdhcAPU617AKTCeBAAAAJY"]
[Fri Dec 12 22:25:33.213598 2025] [:error] [pid 26521:tid 26600] [client 4.193.220.87:18311] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTwl3ZdhcAPU617AKTCeBQAAAJU"]
[Fri Dec 12 22:25:33.516213 2025] [:error] [pid 26521:tid 26580] [client 4.193.220.87:18359] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/link.php"] [unique_id "aTwl3ZdhcAPU617AKTCeBgAAAIE"]
[Fri Dec 12 22:25:33.749742 2025] [:error] [pid 26521:tid 26581] [client 4.193.220.87:12285] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aTwl3ZdhcAPU617AKTCeBwAAAII"]
[Fri Dec 12 22:25:34.116822 2025] [:error] [pid 60649:tid 60655] [client 4.193.220.87:12265] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function.php"] [unique_id "aTwl3lOcUGKU3sgfHP8LJQAAAQM"]
[Fri Dec 12 22:25:34.471361 2025] [:error] [pid 26519:tid 26546] [client 4.193.220.87:12160] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function.php"] [unique_id "aTwl3s8TRgSGOeWqEhcCIgAAABc"]
[Fri Dec 12 22:25:34.762794 2025] [:error] [pid 60649:tid 60652] [client 4.193.220.87:18402] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function.php"] [unique_id "aTwl3lOcUGKU3sgfHP8LJgAAAQA"]
[Fri Dec 12 22:25:35.163721 2025] [:error] [pid 60649:tid 60675] [client 4.193.220.87:11801] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aTwl31OcUGKU3sgfHP8LJwAAARc"]
[Fri Dec 12 22:25:35.541532 2025] [:error] [pid 26519:tid 26538] [client 4.193.220.87:12169] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/item.php"] [unique_id "aTwl388TRgSGOeWqEhcCJAAAAA8"]
[Fri Dec 12 22:25:35.887938 2025] [:error] [pid 26520:tid 26566] [client 4.193.220.87:12255] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTwl30G_frlY5vNXu_ALVgAAAE4"]
[Fri Dec 12 22:25:36.372834 2025] [:error] [pid 26607:tid 26617] [client 4.193.220.87:12247] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTwl4Mb_b0tOEWTL2Kmt6QAAAMg"]
[Fri Dec 12 22:25:36.702426 2025] [:error] [pid 60649:tid 60666] [client 4.193.220.87:12256] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTwl4FOcUGKU3sgfHP8LKwAAAQ4"]
[Fri Dec 12 22:25:37.015111 2025] [:error] [pid 26521:tid 26586] [client 4.193.220.87:11836] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aTwl4ZdhcAPU617AKTCeCgAAAIc"]
[Fri Dec 12 22:25:37.257627 2025] [:error] [pid 26521:tid 26584] [client 4.193.220.87:12182] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTwl4ZdhcAPU617AKTCeCwAAAIU"]
[Fri Dec 12 22:25:37.599466 2025] [:error] [pid 26519:tid 26537] [client 4.193.220.87:18360] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTwl4c8TRgSGOeWqEhcCJgAAAA4"]
[Fri Dec 12 22:25:38.012994 2025] [:error] [pid 26607:tid 26628] [client 4.193.220.87:12143] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTwl4sb_b0tOEWTL2Kmt6wAAANM"]
[Fri Dec 12 22:25:38.615698 2025] [:error] [pid 26521:tid 26590] [client 4.193.220.87:12172] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/classic/inc/json.php"] [unique_id "aTwl4pdhcAPU617AKTCeEAAAAIs"]
[Fri Dec 12 22:25:39.052039 2025] [:error] [pid 60649:tid 60669] [client 4.193.220.87:12161] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTwl41OcUGKU3sgfHP8LLgAAARE"]
[Fri Dec 12 22:25:39.347942 2025] [:error] [pid 55760:tid 55766] [client 4.193.220.87:18428] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTwl41ObDQlftFDyGawpkwAAAYQ"]
[Fri Dec 12 22:25:39.864560 2025] [:error] [pid 26607:tid 26625] [client 4.193.220.87:12243] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTwl48b_b0tOEWTL2Kmt7gAAANA"]
[Fri Dec 12 22:25:40.652825 2025] [:error] [pid 26607:tid 26624] [client 4.193.220.87:12109] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seoplugins/wso112233.php"] [unique_id "aTwl5Mb_b0tOEWTL2Kmt8gAAAM8"]
[Fri Dec 12 22:25:40.893076 2025] [:error] [pid 55760:tid 55765] [client 4.193.220.87:12166] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/link.php"] [unique_id "aTwl5FObDQlftFDyGawplgAAAYM"]
[Fri Dec 12 22:25:41.302500 2025] [:error] [pid 26521:tid 26601] [client 4.193.220.87:12114] [client 4.193.220.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wlw/wp-login.php"] [unique_id "aTwl5ZdhcAPU617AKTCeFgAAAJY"]
[Fri Dec 12 22:25:41.729697 2025] [:error] [pid 26607:tid 26620] [client 4.193.220.87:12171] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTwl5cb_b0tOEWTL2Kmt9AAAAMs"]
[Fri Dec 12 22:25:41.950882 2025] [:error] [pid 55760:tid 55780] [client 4.193.220.87:11779] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTwl5VObDQlftFDyGawpmAAAAZI"]
[Fri Dec 12 22:25:42.278684 2025] [:error] [pid 26520:tid 26567] [client 4.193.220.87:18366] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTwl5kG_frlY5vNXu_ALVwAAAE8"]
[Fri Dec 12 22:25:42.507339 2025] [:error] [pid 27950:tid 27971] [client 4.193.220.87:12280] [client 4.193.220.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTwl5oVLRvkrdsSc1F20UgAAAVM"]
[Fri Dec 12 23:18:13.745084 2025] [:error] [pid 60649:tid 60667] [client 119.96.24.54:39884] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTwyNVOcUGKU3sgfHP8WugAAAQ8"]
[Sat Dec 13 01:51:22.403209 2025] [:error] [pid 26520:tid 26566] [client 4.193.186.94:27566] [client 4.193.186.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTxWGkG_frlY5vNXu_A7WQAAAE4"]
[Sat Dec 13 01:51:22.775431 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:27571] [client 4.193.186.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aTxWGpdhcAPU617AKTDiIAAAAJA"]
[Sat Dec 13 01:51:23.555768 2025] [:error] [pid 26519:tid 26541] [client 4.193.186.94:12546] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTxWG88TRgSGOeWqEhcn2gAAABI"]
[Sat Dec 13 01:51:23.766802 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:27524] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTxWG1ObDQlftFDyGaxf1gAAAYc"]
[Sat Dec 13 01:51:23.941838 2025] [:error] [pid 27950:tid 27964] [client 4.193.186.94:27558] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTxWG4VLRvkrdsSc1F3i3gAAAUw"]
[Sat Dec 13 01:51:24.115894 2025] [:error] [pid 26520:tid 26569] [client 4.193.186.94:12572] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aTxWHEG_frlY5vNXu_A7XQAAAFE"]
[Sat Dec 13 01:51:24.301103 2025] [:error] [pid 26520:tid 26556] [client 4.193.186.94:12550] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aTxWHEG_frlY5vNXu_A7XgAAAEQ"]
[Sat Dec 13 01:51:24.488679 2025] [:error] [pid 26519:tid 26533] [client 4.193.186.94:27539] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aTxWHM8TRgSGOeWqEhcn2wAAAAo"]
[Sat Dec 13 01:51:24.690704 2025] [:error] [pid 26520:tid 26561] [client 4.193.186.94:12553] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aTxWHEG_frlY5vNXu_A7YAAAAEk"]
[Sat Dec 13 01:51:24.893354 2025] [:error] [pid 26520:tid 26574] [client 4.193.186.94:12566] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aTxWHEG_frlY5vNXu_A7YQAAAFY"]
[Sat Dec 13 01:51:25.066982 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:27548] [client 4.193.186.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTxWHZdhcAPU617AKTDiIQAAAIA"]
[Sat Dec 13 01:51:25.253299 2025] [:error] [pid 26520:tid 26572] [client 4.193.186.94:12551] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTxWHUG_frlY5vNXu_A7YgAAAFQ"]
[Sat Dec 13 01:51:25.440309 2025] [:error] [pid 26520:tid 26575] [client 4.193.186.94:12583] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTxWHUG_frlY5vNXu_A7ZQAAAFc"]
[Sat Dec 13 01:51:25.616251 2025] [:error] [pid 26520:tid 26562] [client 4.193.186.94:12559] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTxWHUG_frlY5vNXu_A7ZwAAAEo"]
[Sat Dec 13 01:51:25.789222 2025] [:error] [pid 26520:tid 26570] [client 4.193.186.94:12556] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aTxWHUG_frlY5vNXu_A7aAAAAFI"]
[Sat Dec 13 01:51:25.979472 2025] [:error] [pid 26521:tid 26583] [client 4.193.186.94:27541] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTxWHZdhcAPU617AKTDiIgAAAIQ"]
[Sat Dec 13 01:51:26.176979 2025] [:error] [pid 26521:tid 26580] [client 4.193.186.94:12452] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTxWHpdhcAPU617AKTDiIwAAAIE"]
[Sat Dec 13 01:51:26.352319 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:27582] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTxWHpdhcAPU617AKTDiJAAAAJQ"]
[Sat Dec 13 01:51:26.535823 2025] [:error] [pid 26519:tid 26524] [client 4.193.186.94:27529] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aTxWHs8TRgSGOeWqEhcn3QAAAAE"]
[Sat Dec 13 01:51:26.709803 2025] [:error] [pid 26519:tid 26530] [client 4.193.186.94:12582] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTxWHs8TRgSGOeWqEhcn3gAAAAc"]
[Sat Dec 13 01:51:26.894426 2025] [:error] [pid 26521:tid 26582] [client 4.193.186.94:27564] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTxWHpdhcAPU617AKTDiJQAAAIM"]
[Sat Dec 13 01:51:27.091432 2025] [:error] [pid 60649:tid 60672] [client 4.193.186.94:27563] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTxWH1OcUGKU3sgfHP82TwAAARQ"]
[Sat Dec 13 01:51:27.309089 2025] [:error] [pid 26607:tid 26629] [client 4.193.186.94:27576] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aTxWH8b_b0tOEWTL2KnaOAAAANQ"]
[Sat Dec 13 01:51:27.485291 2025] [:error] [pid 60649:tid 60659] [client 4.193.186.94:12580] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTxWH1OcUGKU3sgfHP82UAAAAQc"]
[Sat Dec 13 01:51:27.673998 2025] [:error] [pid 26519:tid 26525] [client 4.193.186.94:27573] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTxWH88TRgSGOeWqEhcn3wAAAAI"]
[Sat Dec 13 01:51:27.856397 2025] [:error] [pid 26519:tid 26543] [client 4.193.186.94:27534] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTxWH88TRgSGOeWqEhcn4AAAABQ"]
[Sat Dec 13 01:51:28.039394 2025] [:error] [pid 26607:tid 26630] [client 4.193.186.94:12570] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTxWIMb_b0tOEWTL2KnaOQAAANU"]
[Sat Dec 13 01:51:28.219898 2025] [:error] [pid 26521:tid 26587] [client 4.193.186.94:27543] [client 4.193.186.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aTxWIJdhcAPU617AKTDiJwAAAIg"]
[Sat Dec 13 01:51:28.394395 2025] [:error] [pid 26521:tid 26588] [client 4.193.186.94:27574] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/403.php"] [unique_id "aTxWIJdhcAPU617AKTDiKAAAAIk"]
[Sat Dec 13 01:51:28.571303 2025] [:error] [pid 26520:tid 26560] [client 4.193.186.94:27557] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/403.php"] [unique_id "aTxWIEG_frlY5vNXu_A7agAAAEg"]
[Sat Dec 13 01:51:28.747042 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:27575] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/403.php"] [unique_id "aTxWIJdhcAPU617AKTDiKQAAAIc"]
[Sat Dec 13 01:51:28.925069 2025] [:error] [pid 55760:tid 55772] [client 4.193.186.94:12548] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTxWIFObDQlftFDyGaxf2gAAAYo"]
[Sat Dec 13 01:51:29.136974 2025] [:error] [pid 26519:tid 26538] [client 4.193.186.94:27549] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTxWIc8TRgSGOeWqEhcn4gAAAA8"]
[Sat Dec 13 01:51:29.322371 2025] [:error] [pid 26520:tid 26569] [client 4.193.186.94:27560] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTxWIUG_frlY5vNXu_A7awAAAFE"]
[Sat Dec 13 01:51:29.497297 2025] [:error] [pid 26520:tid 26568] [client 4.193.186.94:12589] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aTxWIUG_frlY5vNXu_A7bAAAAFA"]
[Sat Dec 13 01:51:29.674301 2025] [:error] [pid 26520:tid 26576] [client 4.193.186.94:27583] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTxWIUG_frlY5vNXu_A7bQAAAFg"]
[Sat Dec 13 01:51:29.851036 2025] [:error] [pid 26607:tid 26623] [client 4.193.186.94:12585] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTxWIcb_b0tOEWTL2KnaOgAAAM4"]
[Sat Dec 13 01:51:30.026188 2025] [:error] [pid 26520:tid 26561] [client 4.193.186.94:27579] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTxWIkG_frlY5vNXu_A7bgAAAEk"]
[Sat Dec 13 01:51:30.210327 2025] [:error] [pid 26520:tid 26567] [client 4.193.186.94:12547] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTxWIkG_frlY5vNXu_A7bwAAAE8"]
[Sat Dec 13 01:51:30.384700 2025] [:error] [pid 26607:tid 26618] [client 4.193.186.94:27545] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aTxWIsb_b0tOEWTL2KnaOwAAAMk"]
[Sat Dec 13 01:51:30.559817 2025] [:error] [pid 55760:tid 55768] [client 4.193.186.94:27570] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aTxWIlObDQlftFDyGaxf2wAAAYY"]
[Sat Dec 13 01:51:30.750600 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:12605] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aTxWIpdhcAPU617AKTDiKwAAAI0"]
[Sat Dec 13 01:51:30.924932 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:12602] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aTxWIpdhcAPU617AKTDiLAAAAJI"]
[Sat Dec 13 01:51:31.101762 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:12586] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTxWI1ObDQlftFDyGaxf3QAAAZE"]
[Sat Dec 13 01:51:31.275749 2025] [:error] [pid 55760:tid 55774] [client 4.193.186.94:12606] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTxWI1ObDQlftFDyGaxf3gAAAYw"]
[Sat Dec 13 01:51:31.450917 2025] [:error] [pid 26607:tid 26624] [client 4.193.186.94:12565] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTxWI8b_b0tOEWTL2KnaPAAAAM8"]
[Sat Dec 13 01:51:31.648344 2025] [:error] [pid 26607:tid 26632] [client 4.193.186.94:12578] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTxWI8b_b0tOEWTL2KnaPQAAANc"]
[Sat Dec 13 01:51:31.830580 2025] [:error] [pid 26607:tid 26611] [client 4.193.186.94:12423] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aTxWI8b_b0tOEWTL2KnaPgAAAMI"]
[Sat Dec 13 01:51:32.005757 2025] [:error] [pid 26519:tid 26531] [client 4.193.186.94:13214] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aTxWJM8TRgSGOeWqEhcn4wAAAAg"]
[Sat Dec 13 01:51:32.215499 2025] [:error] [pid 55760:tid 55784] [client 4.193.186.94:12576] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aTxWJFObDQlftFDyGaxf4AAAAZY"]
[Sat Dec 13 01:51:32.392800 2025] [:error] [pid 27950:tid 27956] [client 4.193.186.94:12562] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aTxWJIVLRvkrdsSc1F3i4wAAAUQ"]
[Sat Dec 13 01:51:32.570712 2025] [:error] [pid 55760:tid 55763] [client 4.193.186.94:27556] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aTxWJFObDQlftFDyGaxf4QAAAYE"]
[Sat Dec 13 01:51:32.744722 2025] [:error] [pid 27950:tid 27967] [client 4.193.186.94:12571] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aTxWJIVLRvkrdsSc1F3i5AAAAU8"]
[Sat Dec 13 01:51:32.923783 2025] [:error] [pid 26521:tid 26591] [client 4.193.186.94:27532] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aTxWJJdhcAPU617AKTDiLQAAAIw"]
[Sat Dec 13 01:51:33.098193 2025] [:error] [pid 26519:tid 26529] [client 4.193.186.94:12567] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aTxWJc8TRgSGOeWqEhcn5AAAAAY"]
[Sat Dec 13 01:51:33.272782 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:27550] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "aTxWJZdhcAPU617AKTDiLgAAAJA"]
[Sat Dec 13 01:51:33.448156 2025] [:error] [pid 60649:tid 60673] [client 4.193.186.94:12427] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "aTxWJVOcUGKU3sgfHP82UgAAARU"]
[Sat Dec 13 01:51:33.621689 2025] [:error] [pid 26521:tid 26585] [client 4.193.186.94:13197] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "aTxWJZdhcAPU617AKTDiLwAAAIY"]
[Sat Dec 13 01:51:33.799897 2025] [:error] [pid 26521:tid 26590] [client 4.193.186.94:27572] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "aTxWJZdhcAPU617AKTDiMAAAAIs"]
[Sat Dec 13 01:51:33.991942 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:12574] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aTxWJZdhcAPU617AKTDiMQAAAIA"]
[Sat Dec 13 01:51:34.166776 2025] [:error] [pid 26521:tid 26594] [client 4.193.186.94:12584] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aTxWJpdhcAPU617AKTDiMgAAAI8"]
[Sat Dec 13 01:51:34.340653 2025] [:error] [pid 55760:tid 55765] [client 4.193.186.94:27546] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aTxWJlObDQlftFDyGaxf4gAAAYM"]
[Sat Dec 13 01:51:34.519369 2025] [:error] [pid 26521:tid 26583] [client 4.193.186.94:27559] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aTxWJpdhcAPU617AKTDiNAAAAIQ"]
[Sat Dec 13 01:51:34.695024 2025] [:error] [pid 55760:tid 55770] [client 4.193.186.94:12448] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aTxWJlObDQlftFDyGaxf4wAAAYg"]
[Sat Dec 13 01:51:34.876504 2025] [:error] [pid 27950:tid 27972] [client 4.193.186.94:12575] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aTxWJoVLRvkrdsSc1F3i5gAAAVQ"]
[Sat Dec 13 01:51:35.078031 2025] [:error] [pid 27950:tid 27952] [client 4.193.186.94:27540] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aTxWJ4VLRvkrdsSc1F3i5wAAAUA"]
[Sat Dec 13 01:51:35.296233 2025] [:error] [pid 27950:tid 27962] [client 4.193.186.94:12555] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aTxWJ4VLRvkrdsSc1F3i6AAAAUo"]
[Sat Dec 13 01:51:35.473941 2025] [:error] [pid 27950:tid 27968] [client 4.193.186.94:27580] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aTxWJ4VLRvkrdsSc1F3i6QAAAVA"]
[Sat Dec 13 01:51:35.647756 2025] [:error] [pid 27950:tid 27961] [client 4.193.186.94:27547] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aTxWJ4VLRvkrdsSc1F3i6wAAAUk"]
[Sat Dec 13 01:51:35.829425 2025] [:error] [pid 26521:tid 26580] [client 4.193.186.94:12417] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aTxWJ5dhcAPU617AKTDiNQAAAIE"]
[Sat Dec 13 01:51:36.003522 2025] [:error] [pid 26519:tid 26523] [client 4.193.186.94:12418] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aTxWKM8TRgSGOeWqEhcn5wAAAAA"]
[Sat Dec 13 01:51:36.220906 2025] [:error] [pid 55760:tid 55777] [client 4.193.186.94:12602] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTxWKFObDQlftFDyGaxf5QAAAY8"]
[Sat Dec 13 01:51:36.396200 2025] [:error] [pid 55760:tid 55775] [client 4.193.186.94:12561] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTxWKFObDQlftFDyGaxf5gAAAY0"]
[Sat Dec 13 01:51:36.582108 2025] [:error] [pid 27950:tid 27976] [client 4.193.186.94:12600] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTxWKIVLRvkrdsSc1F3i7QAAAVg"]
[Sat Dec 13 01:51:36.778680 2025] [:error] [pid 26520:tid 26570] [client 4.193.186.94:12449] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aTxWKEG_frlY5vNXu_A7cgAAAFI"]
[Sat Dec 13 01:51:36.951936 2025] [:error] [pid 60649:tid 60676] [client 4.193.186.94:12465] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aTxWKFOcUGKU3sgfHP82UwAAARg"]
[Sat Dec 13 01:51:37.126779 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:27562] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aTxWKZdhcAPU617AKTDiOAAAAJE"]
[Sat Dec 13 01:51:37.300920 2025] [:error] [pid 27950:tid 27958] [client 4.193.186.94:12601] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aTxWKYVLRvkrdsSc1F3i7gAAAUY"]
[Sat Dec 13 01:51:37.479696 2025] [:error] [pid 27950:tid 27974] [client 4.193.186.94:13189] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aTxWKYVLRvkrdsSc1F3i8AAAAVY"]
[Sat Dec 13 01:51:37.653310 2025] [:error] [pid 27950:tid 27953] [client 4.193.186.94:13199] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-2019.php"] [unique_id "aTxWKYVLRvkrdsSc1F3i8QAAAUE"]
[Sat Dec 13 01:51:37.852204 2025] [:error] [pid 27950:tid 27971] [client 4.193.186.94:27521] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-2019.php"] [unique_id "aTxWKYVLRvkrdsSc1F3i8gAAAVM"]
[Sat Dec 13 01:51:38.035927 2025] [:error] [pid 26521:tid 26601] [client 4.193.186.94:27552] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-2019.php"] [unique_id "aTxWKpdhcAPU617AKTDiOQAAAJY"]
[Sat Dec 13 01:51:38.217267 2025] [:error] [pid 26607:tid 26612] [client 4.193.186.94:27551] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-2019.php"] [unique_id "aTxWKsb_b0tOEWTL2KnaPwAAAMM"]
[Sat Dec 13 01:51:38.395144 2025] [:error] [pid 27950:tid 27965] [client 4.193.186.94:27544] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aTxWKoVLRvkrdsSc1F3i8wAAAU0"]
[Sat Dec 13 01:51:38.581611 2025] [:error] [pid 27950:tid 27960] [client 4.193.186.94:27538] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aTxWKoVLRvkrdsSc1F3i9gAAAUg"]
[Sat Dec 13 01:51:38.770088 2025] [:error] [pid 27950:tid 27957] [client 4.193.186.94:12437] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aTxWKoVLRvkrdsSc1F3i9wAAAUU"]
[Sat Dec 13 01:51:38.986062 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:12604] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aTxWKlObDQlftFDyGaxf5wAAAYc"]
[Sat Dec 13 01:51:39.164335 2025] [:error] [pid 26521:tid 26587] [client 4.193.186.94:27530] [client 4.193.186.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTxWK5dhcAPU617AKTDiOgAAAIg"]
[Sat Dec 13 01:51:39.352408 2025] [:error] [pid 26519:tid 26539] [client 4.193.186.94:12552] [client 4.193.186.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aTxWK88TRgSGOeWqEhcn6AAAABA"]
[Sat Dec 13 01:51:39.538660 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:12421] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aTxWK5dhcAPU617AKTDiOwAAAIc"]
[Sat Dec 13 01:51:39.717144 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:12568] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aTxWK5dhcAPU617AKTDiPAAAAI0"]
[Sat Dec 13 01:51:39.893594 2025] [:error] [pid 26519:tid 26545] [client 4.193.186.94:12443] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aTxWK88TRgSGOeWqEhcn6QAAABY"]
[Sat Dec 13 01:51:40.086709 2025] [:error] [pid 26520:tid 26571] [client 4.193.186.94:12544] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aTxWLEG_frlY5vNXu_A7cwAAAFM"]
[Sat Dec 13 01:51:40.278694 2025] [:error] [pid 55760:tid 55785] [client 4.193.186.94:27578] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aTxWLFObDQlftFDyGaxf6AAAAZc"]
[Sat Dec 13 01:51:40.486031 2025] [:error] [pid 60649:tid 60662] [client 4.193.186.94:27537] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aTxWLFOcUGKU3sgfHP82VgAAAQo"]
[Sat Dec 13 01:51:40.663906 2025] [:error] [pid 26607:tid 26613] [client 4.193.186.94:12573] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aTxWLMb_b0tOEWTL2KnaQQAAAMQ"]
[Sat Dec 13 01:51:40.845069 2025] [:error] [pid 26519:tid 26544] [client 4.193.186.94:12442] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTxWLM8TRgSGOeWqEhcn6gAAABU"]
[Sat Dec 13 01:51:41.027014 2025] [:error] [pid 27950:tid 27973] [client 4.193.186.94:12579] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTxWLYVLRvkrdsSc1F3i-gAAAVU"]
[Sat Dec 13 01:51:41.204945 2025] [:error] [pid 55760:tid 55779] [client 4.193.186.94:27526] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTxWLVObDQlftFDyGaxf6wAAAZE"]
[Sat Dec 13 01:51:41.406705 2025] [:error] [pid 60649:tid 60671] [client 4.193.186.94:27581] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aTxWLVOcUGKU3sgfHP82VwAAARM"]
[Sat Dec 13 01:51:41.580115 2025] [:error] [pid 55760:tid 55784] [client 4.193.186.94:12432] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aTxWLVObDQlftFDyGaxf7QAAAZY"]
[Sat Dec 13 01:51:41.766745 2025] [:error] [pid 60649:tid 60675] [client 4.193.186.94:27561] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aTxWLVOcUGKU3sgfHP82WAAAARc"]
[Sat Dec 13 01:51:41.941347 2025] [:error] [pid 27950:tid 27976] [client 4.193.186.94:12435] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aTxWLYVLRvkrdsSc1F3i_QAAAVg"]
[Sat Dec 13 01:51:42.120424 2025] [:error] [pid 26520:tid 26565] [client 4.193.186.94:12560] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aTxWLkG_frlY5vNXu_A7gQAAAE0"]
[Sat Dec 13 01:51:42.305678 2025] [:error] [pid 26521:tid 26600] [client 4.193.186.94:12592] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTxWLpdhcAPU617AKTDiPQAAAJU"]
[Sat Dec 13 01:51:42.483786 2025] [:error] [pid 26519:tid 26524] [client 4.193.186.94:27523] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTxWLs8TRgSGOeWqEhcn7gAAAAE"]
[Sat Dec 13 01:51:42.666988 2025] [:error] [pid 60649:tid 60652] [client 4.193.186.94:12564] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTxWLlOcUGKU3sgfHP82WQAAAQA"]
[Sat Dec 13 01:51:42.842670 2025] [:error] [pid 26520:tid 26552] [client 4.193.186.94:27542] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTxWLkG_frlY5vNXu_A7iwAAAEA"]
[Sat Dec 13 01:51:43.030612 2025] [:error] [pid 26519:tid 26530] [client 4.193.186.94:12603] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTxWL88TRgSGOeWqEhcn7wAAAAc"]
[Sat Dec 13 01:51:43.210738 2025] [:error] [pid 60649:tid 60658] [client 4.193.186.94:12581] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTxWL1OcUGKU3sgfHP82WgAAAQY"]
[Sat Dec 13 01:51:43.416325 2025] [:error] [pid 60649:tid 60666] [client 4.193.186.94:12433] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTxWL1OcUGKU3sgfHP82WwAAAQ4"]
[Sat Dec 13 01:51:43.590207 2025] [:error] [pid 26607:tid 26623] [client 4.193.186.94:12431] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aTxWL8b_b0tOEWTL2KnaUQAAAM4"]
[Sat Dec 13 01:51:43.779618 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:12420] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTxWL5dhcAPU617AKTDiPgAAAJI"]
[Sat Dec 13 01:51:43.958499 2025] [:error] [pid 26520:tid 26567] [client 4.193.186.94:12594] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTxWL0G_frlY5vNXu_A7lQAAAE8"]
[Sat Dec 13 01:51:44.160255 2025] [:error] [pid 26607:tid 26624] [client 4.193.186.94:12426] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTxWMMb_b0tOEWTL2KnaUwAAAM8"]
[Sat Dec 13 01:51:44.370315 2025] [:error] [pid 26521:tid 26591] [client 4.193.186.94:12557] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTxWMJdhcAPU617AKTDiPwAAAIw"]
[Sat Dec 13 01:51:44.585009 2025] [:error] [pid 55760:tid 55764] [client 4.193.186.94:27565] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTxWMFObDQlftFDyGaxf-wAAAYI"]
[Sat Dec 13 01:51:44.759720 2025] [:error] [pid 26521:tid 26579] [client 4.193.186.94:27528] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTxWMJdhcAPU617AKTDiQQAAAIA"]
[Sat Dec 13 01:51:44.935070 2025] [:error] [pid 55760:tid 55776] [client 4.193.186.94:27563] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTxWMFObDQlftFDyGaxf_AAAAY4"]
[Sat Dec 13 01:51:45.127050 2025] [:error] [pid 26520:tid 26573] [client 4.193.186.94:12467] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aTxWMUG_frlY5vNXu_A7lwAAAFU"]
[Sat Dec 13 01:51:45.301795 2025] [:error] [pid 26520:tid 26562] [client 4.193.186.94:12581] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTxWMUG_frlY5vNXu_A7mAAAAEo"]
[Sat Dec 13 01:51:45.480353 2025] [:error] [pid 26520:tid 26570] [client 4.193.186.94:12425] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTxWMUG_frlY5vNXu_A7mgAAAFI"]
[Sat Dec 13 01:51:45.654669 2025] [:error] [pid 26521:tid 26580] [client 4.193.186.94:13104] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTxWMZdhcAPU617AKTDiQwAAAIE"]
[Sat Dec 13 01:51:45.850250 2025] [:error] [pid 26521:tid 26599] [client 4.193.186.94:12569] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aTxWMZdhcAPU617AKTDiRAAAAJQ"]
[Sat Dec 13 01:51:46.029934 2025] [:error] [pid 26607:tid 26611] [client 4.193.186.94:27535] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aTxWMsb_b0tOEWTL2KnaVQAAAMI"]
[Sat Dec 13 01:51:46.208943 2025] [:error] [pid 26521:tid 26602] [client 4.193.186.94:12549] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aTxWMpdhcAPU617AKTDiRQAAAJc"]
[Sat Dec 13 01:51:46.392776 2025] [:error] [pid 26521:tid 26584] [client 4.193.186.94:27555] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aTxWMpdhcAPU617AKTDiRgAAAIU"]
[Sat Dec 13 01:51:46.572443 2025] [:error] [pid 26607:tid 26612] [client 4.193.186.94:12439] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aTxWMsb_b0tOEWTL2KnaVgAAAMM"]
[Sat Dec 13 01:51:46.748413 2025] [:error] [pid 26520:tid 26559] [client 4.193.186.94:12593] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "aTxWMkG_frlY5vNXu_A7nAAAAEc"]
[Sat Dec 13 01:51:46.922615 2025] [:error] [pid 26607:tid 26626] [client 4.193.186.94:12595] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "aTxWMsb_b0tOEWTL2KnaVwAAANE"]
[Sat Dec 13 01:51:47.098585 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:13202] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "aTxWM5dhcAPU617AKTDiRwAAAJE"]
[Sat Dec 13 01:51:47.272322 2025] [:error] [pid 26520:tid 26571] [client 4.193.186.94:12596] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "aTxWM0G_frlY5vNXu_A7nQAAAFM"]
[Sat Dec 13 01:51:47.447212 2025] [:error] [pid 27950:tid 27957] [client 4.193.186.94:13201] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTxWM4VLRvkrdsSc1F3jAwAAAUU"]
[Sat Dec 13 01:51:47.624439 2025] [:error] [pid 27950:tid 27970] [client 4.193.186.94:13213] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTxWM4VLRvkrdsSc1F3jBAAAAVI"]
[Sat Dec 13 01:51:47.815170 2025] [:error] [pid 55760:tid 55769] [client 4.193.186.94:27577] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTxWM1ObDQlftFDyGaxf_QAAAYc"]
[Sat Dec 13 01:51:47.991516 2025] [:error] [pid 27950:tid 27956] [client 4.193.186.94:12422] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aTxWM4VLRvkrdsSc1F3jBQAAAUQ"]
[Sat Dec 13 01:51:48.165435 2025] [:error] [pid 27950:tid 27967] [client 4.193.186.94:12441] [client 4.193.186.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aTxWNIVLRvkrdsSc1F3jBgAAAU8"]
[Sat Dec 13 01:51:48.354285 2025] [:error] [pid 55760:tid 55785] [client 4.193.186.94:12599] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTxWNFObDQlftFDyGaxf_gAAAZc"]
[Sat Dec 13 01:51:48.528248 2025] [:error] [pid 26521:tid 26582] [client 4.193.186.94:13185] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTxWNJdhcAPU617AKTDiSAAAAIM"]
[Sat Dec 13 01:51:48.703033 2025] [:error] [pid 26521:tid 26581] [client 4.193.186.94:12598] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aTxWNJdhcAPU617AKTDiSQAAAII"]
[Sat Dec 13 01:51:48.906051 2025] [:error] [pid 26519:tid 26532] [client 4.193.186.94:13234] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/fucku.php"] [unique_id "aTxWNM8TRgSGOeWqEhcn8AAAAAk"]
[Sat Dec 13 01:51:49.080733 2025] [:error] [pid 26607:tid 26615] [client 4.193.186.94:12563] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/fucku.php"] [unique_id "aTxWNcb_b0tOEWTL2KnaWQAAAMY"]
[Sat Dec 13 01:51:49.255078 2025] [:error] [pid 26607:tid 26610] [client 4.193.186.94:13233] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/fucku.php"] [unique_id "aTxWNcb_b0tOEWTL2KnaWgAAAME"]
[Sat Dec 13 01:51:49.429308 2025] [:error] [pid 26607:tid 26609] [client 4.193.186.94:13215] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/fucku.php"] [unique_id "aTxWNcb_b0tOEWTL2KnaWwAAAMA"]
[Sat Dec 13 01:51:49.617459 2025] [:error] [pid 26521:tid 26601] [client 4.193.186.94:12438] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload/wp-info.php"] [unique_id "aTxWNZdhcAPU617AKTDiSgAAAJY"]
[Sat Dec 13 01:51:49.793742 2025] [:error] [pid 26521:tid 26593] [client 4.193.186.94:13186] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload/wp-info.php"] [unique_id "aTxWNZdhcAPU617AKTDiSwAAAI4"]
[Sat Dec 13 01:51:49.967971 2025] [:error] [pid 26607:tid 26625] [client 4.193.186.94:12463] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload/wp-info.php"] [unique_id "aTxWNcb_b0tOEWTL2KnaXAAAANA"]
[Sat Dec 13 01:51:50.144898 2025] [:error] [pid 26521:tid 26598] [client 4.193.186.94:12416] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload/wp-info.php"] [unique_id "aTxWNpdhcAPU617AKTDiTQAAAJM"]
[Sat Dec 13 01:51:50.319785 2025] [:error] [pid 26521:tid 26587] [client 4.193.186.94:27527] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aTxWNpdhcAPU617AKTDiTgAAAIg"]
[Sat Dec 13 01:51:50.495394 2025] [:error] [pid 55760:tid 55774] [client 4.193.186.94:12450] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aTxWNlObDQlftFDyGaxf_wAAAYw"]
[Sat Dec 13 01:51:50.711891 2025] [:error] [pid 26607:tid 26631] [client 4.193.186.94:12436] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aTxWNsb_b0tOEWTL2KnaXQAAANY"]
[Sat Dec 13 01:51:50.934843 2025] [:error] [pid 26519:tid 26531] [client 4.193.186.94:13217] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aTxWNs8TRgSGOeWqEhcn8gAAAAg"]
[Sat Dec 13 01:51:51.108923 2025] [:error] [pid 26519:tid 26529] [client 4.193.186.94:12558] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aTxWN88TRgSGOeWqEhcn8wAAAAY"]
[Sat Dec 13 01:51:51.291360 2025] [:error] [pid 26519:tid 26537] [client 4.193.186.94:13193] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aTxWN88TRgSGOeWqEhcn9AAAAA4"]
[Sat Dec 13 01:51:51.475184 2025] [:error] [pid 60649:tid 60653] [client 4.193.186.94:13191] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aTxWN1OcUGKU3sgfHP82XQAAAQE"]
[Sat Dec 13 01:51:51.674933 2025] [:error] [pid 26521:tid 26588] [client 4.193.186.94:13115] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aTxWN5dhcAPU617AKTDiUAAAAIk"]
[Sat Dec 13 01:51:51.853238 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:13226] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loads.PhP"] [unique_id "aTxWN5dhcAPU617AKTDiUQAAAIc"]
[Sat Dec 13 01:51:52.032411 2025] [:error] [pid 60649:tid 60674] [client 4.193.186.94:13220] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loads.PhP"] [unique_id "aTxWOFOcUGKU3sgfHP82XgAAARY"]
[Sat Dec 13 01:51:52.211591 2025] [:error] [pid 26607:tid 26621] [client 4.193.186.94:12577] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loads.PhP"] [unique_id "aTxWOMb_b0tOEWTL2KnaXgAAAMw"]
[Sat Dec 13 01:51:52.400853 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:27567] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loads.PhP"] [unique_id "aTxWOJdhcAPU617AKTDiUwAAAI0"]
[Sat Dec 13 01:51:52.576045 2025] [:error] [pid 26520:tid 26576] [client 4.193.186.94:12472] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mj.php"] [unique_id "aTxWOEG_frlY5vNXu_A7nwAAAFg"]
[Sat Dec 13 01:51:52.786621 2025] [:error] [pid 26607:tid 26629] [client 4.193.186.94:13190] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mj.php"] [unique_id "aTxWOMb_b0tOEWTL2KnaXwAAANQ"]
[Sat Dec 13 01:51:52.972315 2025] [:error] [pid 26520:tid 26567] [client 4.193.186.94:13078] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mj.php"] [unique_id "aTxWOEG_frlY5vNXu_A7oAAAAE8"]
[Sat Dec 13 01:51:53.158929 2025] [:error] [pid 26607:tid 26620] [client 4.193.186.94:12474] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mj.php"] [unique_id "aTxWOcb_b0tOEWTL2KnaYAAAAMs"]
[Sat Dec 13 01:51:53.333274 2025] [:error] [pid 26520:tid 26561] [client 4.193.186.94:12451] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aTxWOUG_frlY5vNXu_A7oQAAAEk"]
[Sat Dec 13 01:51:53.510467 2025] [:error] [pid 55760:tid 55770] [client 4.193.186.94:13194] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aTxWOVObDQlftFDyGaxgAgAAAYg"]
[Sat Dec 13 01:51:53.690236 2025] [:error] [pid 26520:tid 26573] [client 4.193.186.94:13245] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aTxWOUG_frlY5vNXu_A7pQAAAFU"]
[Sat Dec 13 01:51:53.864277 2025] [:error] [pid 26607:tid 26624] [client 4.193.186.94:13108] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dichku.php"] [unique_id "aTxWOcb_b0tOEWTL2KnaYgAAAM8"]
[Sat Dec 13 01:51:54.046140 2025] [:error] [pid 26607:tid 26611] [client 4.193.186.94:12554] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsz.php"] [unique_id "aTxWOsb_b0tOEWTL2KnaYwAAAMI"]
[Sat Dec 13 01:51:54.224226 2025] [:error] [pid 26607:tid 26626] [client 4.193.186.94:27554] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsz.php"] [unique_id "aTxWOsb_b0tOEWTL2KnaZQAAANE"]
[Sat Dec 13 01:51:54.398865 2025] [:error] [pid 26607:tid 26613] [client 4.193.186.94:12464] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsz.php"] [unique_id "aTxWOsb_b0tOEWTL2KnaZwAAAMQ"]
[Sat Dec 13 01:51:54.573671 2025] [:error] [pid 26520:tid 26558] [client 4.193.186.94:27569] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsz.php"] [unique_id "aTxWOkG_frlY5vNXu_A7qAAAAEY"]
[Sat Dec 13 01:51:54.749941 2025] [:error] [pid 26521:tid 26585] [client 4.193.186.94:13086] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTxWOpdhcAPU617AKTDiVQAAAIY"]
[Sat Dec 13 01:51:54.926935 2025] [:error] [pid 26607:tid 26616] [client 4.193.186.94:27536] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTxWOsb_b0tOEWTL2KnaaAAAAMc"]
[Sat Dec 13 01:51:55.103376 2025] [:error] [pid 26520:tid 26554] [client 4.193.186.94:12447] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTxWO0G_frlY5vNXu_A7qgAAAEI"]
[Sat Dec 13 01:51:55.278031 2025] [:error] [pid 26607:tid 26619] [client 4.193.186.94:12588] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2a2ck.php"] [unique_id "aTxWO8b_b0tOEWTL2KnaagAAAMo"]
[Sat Dec 13 01:51:55.452597 2025] [:error] [pid 26520:tid 26560] [client 4.193.186.94:12440] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTxWO0G_frlY5vNXu_A7rAAAAEg"]
[Sat Dec 13 01:51:55.656239 2025] [:error] [pid 60649:tid 60669] [client 4.193.186.94:13205] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTxWO1OcUGKU3sgfHP82ZQAAARE"]
[Sat Dec 13 01:51:55.845988 2025] [:error] [pid 26519:tid 26528] [client 4.193.186.94:12424] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTxWO88TRgSGOeWqEhcn9wAAAAU"]
[Sat Dec 13 01:51:56.021541 2025] [:error] [pid 26607:tid 26617] [client 4.193.186.94:27531] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aTxWPMb_b0tOEWTL2KnabAAAAMg"]
[Sat Dec 13 01:51:56.208703 2025] [:error] [pid 26607:tid 26633] [client 4.193.186.94:13069] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aTxWPMb_b0tOEWTL2KnabQAAANg"]
[Sat Dec 13 01:51:56.386170 2025] [:error] [pid 27950:tid 27952] [client 4.193.186.94:12453] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aTxWPIVLRvkrdsSc1F3jBwAAAUA"]
[Sat Dec 13 01:51:56.562014 2025] [:error] [pid 27950:tid 27962] [client 4.193.186.94:12457] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aTxWPIVLRvkrdsSc1F3jCAAAAUo"]
[Sat Dec 13 01:51:56.735518 2025] [:error] [pid 26607:tid 26625] [client 4.193.186.94:13062] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aTxWPMb_b0tOEWTL2KnabwAAANA"]
[Sat Dec 13 01:51:56.941201 2025] [:error] [pid 26607:tid 26631] [client 4.193.186.94:12469] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTxWPMb_b0tOEWTL2KnacAAAANY"]
[Sat Dec 13 01:51:57.115132 2025] [:error] [pid 27950:tid 27961] [client 4.193.186.94:12288] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTxWPYVLRvkrdsSc1F3jCgAAAUk"]
[Sat Dec 13 01:51:57.315797 2025] [:error] [pid 27950:tid 27966] [client 4.193.186.94:12590] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTxWPYVLRvkrdsSc1F3jCwAAAU4"]
[Sat Dec 13 01:51:57.535173 2025] [:error] [pid 27950:tid 27958] [client 4.193.186.94:13187] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aTxWPYVLRvkrdsSc1F3jDAAAAUY"]
[Sat Dec 13 01:51:57.725546 2025] [:error] [pid 27950:tid 27969] [client 4.193.186.94:12430] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aTxWPYVLRvkrdsSc1F3jDwAAAVE"]
[Sat Dec 13 01:51:57.901835 2025] [:error] [pid 26520:tid 26567] [client 4.193.186.94:12455] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aTxWPUG_frlY5vNXu_A7sAAAAE8"]
[Sat Dec 13 01:51:58.084274 2025] [:error] [pid 26607:tid 26621] [client 4.193.186.94:12419] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aTxWPsb_b0tOEWTL2KnacQAAAMw"]
[Sat Dec 13 01:51:58.259487 2025] [:error] [pid 26520:tid 26561] [client 4.193.186.94:12591] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aTxWPkG_frlY5vNXu_A7sQAAAEk"]
[Sat Dec 13 01:51:58.463109 2025] [:error] [pid 27950:tid 27953] [client 4.193.186.94:12479] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTxWPoVLRvkrdsSc1F3jEgAAAUE"]
[Sat Dec 13 01:51:58.638453 2025] [:error] [pid 27950:tid 27965] [client 4.193.186.94:27522] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTxWPoVLRvkrdsSc1F3jEwAAAU0"]
[Sat Dec 13 01:51:58.813514 2025] [:error] [pid 26519:tid 26527] [client 4.193.186.94:12475] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTxWPs8TRgSGOeWqEhcn-AAAAAQ"]
[Sat Dec 13 01:51:59.022169 2025] [:error] [pid 27950:tid 27957] [client 4.193.186.94:27568] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aTxWP4VLRvkrdsSc1F3jFAAAAUU"]
[Sat Dec 13 01:51:59.212113 2025] [:error] [pid 26607:tid 26623] [client 4.193.186.94:13067] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTxWP8b_b0tOEWTL2KnadAAAAM4"]
[Sat Dec 13 01:51:59.385902 2025] [:error] [pid 26520:tid 26572] [client 4.193.186.94:12468] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTxWP0G_frlY5vNXu_A7tAAAAFQ"]
[Sat Dec 13 01:51:59.576413 2025] [:error] [pid 26520:tid 26573] [client 4.193.186.94:13200] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTxWP0G_frlY5vNXu_A7tQAAAFU"]
[Sat Dec 13 01:51:59.759535 2025] [:error] [pid 26521:tid 26595] [client 4.193.186.94:13195] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aTxWP5dhcAPU617AKTDiWAAAAJA"]
[Sat Dec 13 01:51:59.954912 2025] [:error] [pid 26607:tid 26611] [client 4.193.186.94:13184] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trplv.php"] [unique_id "aTxWP8b_b0tOEWTL2KnaeQAAAMI"]
[Sat Dec 13 01:52:00.161448 2025] [:error] [pid 60649:tid 60675] [client 4.193.186.94:13239] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trplv.php"] [unique_id "aTxWQFOcUGKU3sgfHP82aAAAARc"]
[Sat Dec 13 01:52:00.336877 2025] [:error] [pid 26607:tid 26613] [client 4.193.186.94:13096] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trplv.php"] [unique_id "aTxWQMb_b0tOEWTL2KnaewAAAMQ"]
[Sat Dec 13 01:52:00.521381 2025] [:error] [pid 26607:tid 26616] [client 4.193.186.94:12473] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trplv.php"] [unique_id "aTxWQMb_b0tOEWTL2KnafAAAAMc"]
[Sat Dec 13 01:52:00.700419 2025] [:error] [pid 26607:tid 26622] [client 4.193.186.94:13082] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTxWQMb_b0tOEWTL2KnafQAAAM0"]
[Sat Dec 13 01:52:00.882368 2025] [:error] [pid 26607:tid 26610] [client 4.193.186.94:12477] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTxWQMb_b0tOEWTL2KnafwAAAME"]
[Sat Dec 13 01:52:01.065207 2025] [:error] [pid 26607:tid 26609] [client 4.193.186.94:13077] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTxWQcb_b0tOEWTL2KnagAAAAMA"]
[Sat Dec 13 01:52:01.281645 2025] [:error] [pid 26521:tid 26583] [client 4.193.186.94:12607] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aTxWQZdhcAPU617AKTDiWQAAAIQ"]
[Sat Dec 13 01:52:01.484277 2025] [:error] [pid 27950:tid 27972] [client 4.193.186.94:13188] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aTxWQYVLRvkrdsSc1F3jGQAAAVQ"]
[Sat Dec 13 01:52:01.662608 2025] [:error] [pid 26520:tid 26559] [client 4.193.186.94:12460] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aTxWQUG_frlY5vNXu_A7twAAAEc"]
[Sat Dec 13 01:52:01.853500 2025] [:error] [pid 26607:tid 26625] [client 4.193.186.94:13079] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aTxWQcb_b0tOEWTL2KnagwAAANA"]
[Sat Dec 13 01:52:02.083402 2025] [:error] [pid 26607:tid 26631] [client 4.193.186.94:12513] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aTxWQsb_b0tOEWTL2KnahAAAANY"]
[Sat Dec 13 01:52:02.258935 2025] [:error] [pid 26520:tid 26565] [client 4.193.186.94:12309] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTxWQkG_frlY5vNXu_A7uQAAAE0"]
[Sat Dec 13 01:52:02.446913 2025] [:error] [pid 26521:tid 26602] [client 4.193.186.94:13092] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTxWQpdhcAPU617AKTDiWwAAAJc"]
[Sat Dec 13 01:52:02.644181 2025] [:error] [pid 60649:tid 60658] [client 4.193.186.94:13209] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTxWQlOcUGKU3sgfHP82aQAAAQY"]
[Sat Dec 13 01:52:02.818655 2025] [:error] [pid 60649:tid 60666] [client 4.193.186.94:12466] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aTxWQlOcUGKU3sgfHP82agAAAQ4"]
[Sat Dec 13 01:52:03.004111 2025] [:error] [pid 60649:tid 60655] [client 4.193.186.94:13058] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTxWQ1OcUGKU3sgfHP82awAAAQM"]
[Sat Dec 13 01:52:03.198281 2025] [:error] [pid 26520:tid 26555] [client 4.193.186.94:13090] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTxWQ0G_frlY5vNXu_A7ugAAAEM"]
[Sat Dec 13 01:52:03.378633 2025] [:error] [pid 26521:tid 26584] [client 4.193.186.94:12428] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTxWQ5dhcAPU617AKTDiXQAAAIU"]
[Sat Dec 13 01:52:03.552576 2025] [:error] [pid 26521:tid 26596] [client 4.193.186.94:12471] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aTxWQ5dhcAPU617AKTDiXgAAAJE"]
[Sat Dec 13 01:52:03.729929 2025] [:error] [pid 26519:tid 26540] [client 4.193.186.94:12459] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mc.php"] [unique_id "aTxWQ88TRgSGOeWqEhcn-QAAABE"]
[Sat Dec 13 01:52:03.905953 2025] [:error] [pid 26521:tid 26601] [client 4.193.186.94:13060] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mc.php"] [unique_id "aTxWQ5dhcAPU617AKTDiYAAAAJY"]
[Sat Dec 13 01:52:04.081872 2025] [:error] [pid 60649:tid 60664] [client 4.193.186.94:12295] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mc.php"] [unique_id "aTxWRFOcUGKU3sgfHP82bwAAAQw"]
[Sat Dec 13 01:52:04.268002 2025] [:error] [pid 26607:tid 26623] [client 4.193.186.94:13085] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mc.php"] [unique_id "aTxWRMb_b0tOEWTL2KnahwAAAM4"]
[Sat Dec 13 01:52:04.482136 2025] [:error] [pid 26521:tid 26588] [client 4.193.186.94:13244] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTxWRJdhcAPU617AKTDiYgAAAIk"]
[Sat Dec 13 01:52:04.656233 2025] [:error] [pid 26519:tid 26524] [client 4.193.186.94:13219] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTxWRM8TRgSGOeWqEhcn-gAAAAE"]
[Sat Dec 13 01:52:04.840213 2025] [:error] [pid 26521:tid 26586] [client 4.193.186.94:13212] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTxWRJdhcAPU617AKTDiYwAAAIc"]
[Sat Dec 13 01:52:05.066879 2025] [:error] [pid 26607:tid 26627] [client 4.193.186.94:12462] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/article.php"] [unique_id "aTxWRcb_b0tOEWTL2KnaiAAAANI"]
[Sat Dec 13 01:52:05.242869 2025] [:error] [pid 60649:tid 60654] [client 4.193.186.94:13107] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aTxWRVOcUGKU3sgfHP82cQAAAQI"]
[Sat Dec 13 01:52:05.423113 2025] [:error] [pid 26521:tid 26592] [client 4.193.186.94:13203] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aTxWRZdhcAPU617AKTDiZAAAAI0"]
[Sat Dec 13 01:52:05.602718 2025] [:error] [pid 26521:tid 26597] [client 4.193.186.94:12478] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aTxWRZdhcAPU617AKTDiZQAAAJI"]
[Sat Dec 13 01:52:05.784232 2025] [:error] [pid 26521:tid 26591] [client 4.193.186.94:13089] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aTxWRZdhcAPU617AKTDiZgAAAIw"]
[Sat Dec 13 01:52:06.013037 2025] [:error] [pid 27950:tid 27966] [client 4.193.186.94:13097] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aTxWRoVLRvkrdsSc1F3jHAAAAU4"]
[Sat Dec 13 01:52:06.234276 2025] [:error] [pid 60649:tid 60672] [client 4.193.186.94:13224] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aTxWRlOcUGKU3sgfHP82cgAAARQ"]
[Sat Dec 13 01:52:06.408070 2025] [:error] [pid 26519:tid 26533] [client 4.193.186.94:27533] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aTxWRs8TRgSGOeWqEhcn-wAAAAo"]
[Sat Dec 13 01:52:06.601314 2025] [:error] [pid 26607:tid 26624] [client 4.193.186.94:12429] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aTxWRsb_b0tOEWTL2KnaiQAAAM8"]
[Sat Dec 13 01:52:06.783653 2025] [:error] [pid 26521:tid 26585] [client 4.193.186.94:12444] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/if.php"] [unique_id "aTxWRpdhcAPU617AKTDiZwAAAIY"]
[Sat Dec 13 01:52:06.957850 2025] [:error] [pid 55760:tid 55786] [client 4.193.186.94:12420] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/if.php"] [unique_id "aTxWRlObDQlftFDyGaxgBwAAAZg"]
[Sat Dec 13 01:52:07.140823 2025] [:error] [pid 55760:tid 55767] [client 4.193.186.94:13112] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/if.php"] [unique_id "aTxWR1ObDQlftFDyGaxgCAAAAYU"]
[Sat Dec 13 01:52:07.315654 2025] [:error] [pid 60649:tid 60668] [client 4.193.186.94:12461] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/if.php"] [unique_id "aTxWR1OcUGKU3sgfHP82dAAAARA"]
[Sat Dec 13 01:52:07.495233 2025] [:error] [pid 27950:tid 27958] [client 4.193.186.94:13240] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aTxWR4VLRvkrdsSc1F3jHQAAAUY"]
[Sat Dec 13 01:52:07.670836 2025] [:error] [pid 60649:tid 60660] [client 4.193.186.94:13098] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aTxWR1OcUGKU3sgfHP82dQAAAQg"]
[Sat Dec 13 01:52:07.844985 2025] [:error] [pid 60649:tid 60673] [client 4.193.186.94:27520] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aTxWR1OcUGKU3sgfHP82dwAAARU"]
[Sat Dec 13 01:52:08.023273 2025] [:error] [pid 26520:tid 26568] [client 4.193.186.94:12348] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aTxWSEG_frlY5vNXu_A7vAAAAFA"]
[Sat Dec 13 01:52:08.238294 2025] [:error] [pid 26520:tid 26557] [client 4.193.186.94:27544] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTxWSEG_frlY5vNXu_A7vQAAAEU"]
[Sat Dec 13 01:52:08.412665 2025] [:error] [pid 26520:tid 26575] [client 4.193.186.94:13073] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTxWSEG_frlY5vNXu_A7vwAAAFc"]
[Sat Dec 13 01:52:08.619254 2025] [:error] [pid 60649:tid 60669] [client 4.193.186.94:12456] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTxWSFOcUGKU3sgfHP82eQAAARE"]
[Sat Dec 13 01:52:08.793815 2025] [:error] [pid 27950:tid 27969] [client 4.193.186.94:13059] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aTxWSIVLRvkrdsSc1F3jHgAAAVE"]
[Sat Dec 13 01:52:08.973956 2025] [:error] [pid 26520:tid 26567] [client 4.193.186.94:13101] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geck.php"] [unique_id "aTxWSEG_frlY5vNXu_A7wAAAAE8"]
[Sat Dec 13 01:52:09.181772 2025] [:error] [pid 60649:tid 60675] [client 4.193.186.94:12587] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geck.php"] [unique_id "aTxWSVOcUGKU3sgfHP82ewAAARc"]
[Sat Dec 13 01:52:09.375621 2025] [:error] [pid 60649:tid 60658] [client 4.193.186.94:13074] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geck.php"] [unique_id "aTxWSVOcUGKU3sgfHP82fAAAAQY"]
[Sat Dec 13 01:52:09.552600 2025] [:error] [pid 55760:tid 55783] [client 4.193.186.94:13218] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geck.php"] [unique_id "aTxWSVObDQlftFDyGaxgCQAAAZU"]
[Sat Dec 13 01:52:09.727525 2025] [:error] [pid 26520:tid 26561] [client 4.193.186.94:13247] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/avaa.php"] [unique_id "aTxWSUG_frlY5vNXu_A7wQAAAEk"]
[Sat Dec 13 01:52:09.906749 2025] [:error] [pid 60649:tid 60652] [client 4.193.186.94:13113] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/avaa.php"] [unique_id "aTxWSVOcUGKU3sgfHP82fQAAAQA"]
[Sat Dec 13 01:52:10.099645 2025] [:error] [pid 26607:tid 26616] [client 4.193.186.94:13110] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/avaa.php"] [unique_id "aTxWSsb_b0tOEWTL2KnaiwAAAMc"]
[Sat Dec 13 01:52:10.282714 2025] [:error] [pid 60649:tid 60670] [client 4.193.186.94:12478] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/avaa.php"] [unique_id "aTxWSlOcUGKU3sgfHP82fgAAARI"]
[Sat Dec 13 01:52:10.464415 2025] [:error] [pid 26607:tid 26622] [client 4.193.186.94:12439] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aTxWSsb_b0tOEWTL2KnajAAAAM0"]
[Sat Dec 13 01:52:10.655136 2025] [:error] [pid 60649:tid 60656] [client 4.193.186.94:13071] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aTxWSlOcUGKU3sgfHP82fwAAAQQ"]
[Sat Dec 13 01:52:10.829224 2025] [:error] [pid 26520:tid 26574] [client 4.193.186.94:12300] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aTxWSkG_frlY5vNXu_A7wgAAAFY"]
[Sat Dec 13 01:52:11.003020 2025] [:error] [pid 26520:tid 26564] [client 4.193.186.94:13211] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aTxWS0G_frlY5vNXu_A7wwAAAEw"]
[Sat Dec 13 01:52:11.194353 2025] [:error] [pid 60649:tid 60665] [client 4.193.186.94:13229] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aTxWS1OcUGKU3sgfHP82gAAAAQ0"]
[Sat Dec 13 01:52:11.400787 2025] [:error] [pid 26607:tid 26615] [client 4.193.186.94:13230] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aTxWS8b_b0tOEWTL2KnajQAAAMY"]
[Sat Dec 13 01:52:11.626397 2025] [:error] [pid 26520:tid 26572] [client 4.193.186.94:13064] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aTxWS0G_frlY5vNXu_A7xAAAAFQ"]
[Sat Dec 13 01:52:11.802986 2025] [:error] [pid 26607:tid 26610] [client 4.193.186.94:13068] [client 4.193.186.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aTxWS8b_b0tOEWTL2KnajwAAAME"]
[Sat Dec 13 01:52:11.980624 2025] [:error] [pid 60649:tid 60663] [client 4.193.186.94:12446] [client 4.193.186.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aTxWS1OcUGKU3sgfHP82gQAAAQs"]
[Sat Dec 13 01:52:12.155840 2025] [:error] [pid 60649:tid 60674] [client 4.193.186.94:12454] [client 4.193.186.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/js420.php"] [unique_id "aTxWTFOcUGKU3sgfHP82ggAAARY"]
[Sat Dec 13 03:33:47.299809 2025] [autoindex:error] [pid 26520:tid 26562] [client 38.97.60.82:64340] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 13 04:03:17.269350 2025] [:error] [pid 26442:tid 26463] [client 38.97.60.82:64919] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aTx1BWBpj19eUg1eFUNyMQAAAMo"], referer: binance.com
[Sat Dec 13 04:09:28.179646 2025] [autoindex:error] [pid 26442:tid 26466] [client 38.97.60.82:61501] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Dec 13 04:37:45.588754 2025] [:error] [pid 43747:tid 43774] [client 38.97.60.82:50765] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aTx9GZYw3twBd_JQEHiSFAAAABc"], referer: binance.com
[Sat Dec 13 05:36:29.933794 2025] [:error] [pid 43836:tid 43848] [client 182.42.111.213:52574] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aTyK3WAEOBirsxb11nZ-yQAAAMo"]
[Sat Dec 13 09:48:52.681390 2025] [:error] [pid 43748:tid 43798] [client 106.215.173.30:21675] [client 106.215.173.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.173.30, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aTzGBKrTT0VzE3gYjcBgVwAAAFM"]
[Sat Dec 13 11:32:34.628722 2025] [:error] [pid 43836:tid 43848] [client 182.44.9.147:53370] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzeUmAEOBirsxb11nbG3wAAAMo"]
[Sat Dec 13 13:00:34.214509 2025] [:error] [pid 55037:tid 55052] [client 45.154.98.18:50243] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzy8hyx7iFaaIMvMOFSlwAAAU0"]
[Sat Dec 13 13:00:35.403303 2025] [:error] [pid 55037:tid 55048] [client 45.154.98.18:50656] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzy8xyx7iFaaIMvMOFSsAAAAUk"]
[Sat Dec 13 13:00:36.327683 2025] [:error] [pid 55037:tid 55044] [client 45.154.98.18:49979] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzy9Byx7iFaaIMvMOFS2wAAAUU"]
[Sat Dec 13 13:00:36.600637 2025] [:error] [pid 43747:tid 43760] [client 45.154.98.18:51649] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzy9JYw3twBd_JQEHj0_QAAAAk"]
[Sat Dec 13 13:00:36.926276 2025] [:error] [pid 8242:tid 8261] [client 45.154.98.18:53037] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzy9CNKA7vSGNUfnOEVmwAAAk0"]
[Sat Dec 13 13:00:37.496389 2025] [:error] [pid 8181:tid 8202] [client 45.154.98.18:53363] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzy9YcsztoZQ9y1QdUP-AAAAgw"]
[Sat Dec 13 13:00:37.792036 2025] [:error] [pid 8181:tid 8209] [client 45.154.98.18:53202] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzy9YcsztoZQ9y1QdUP_gAAAhM"]
[Sat Dec 13 13:00:38.103522 2025] [:error] [pid 3418:tid 3421] [client 45.154.98.18:53617] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzy9it8_IWm3g-eIu5EpQAAAcA"]
[Sat Dec 13 13:00:38.679595 2025] [:error] [pid 55071:tid 55087] [client 45.154.98.18:53949] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzy9sHSpNduhEZ_mjeliAAAAY4"]
[Sat Dec 13 13:00:38.919378 2025] [:error] [pid 8243:tid 8276] [client 45.154.98.18:53742] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aTzy9iIrGC80ajIR9nJNbwAAAoA"]
[Sat Dec 13 20:00:33.918771 2025] [:error] [pid 39287:tid 39291] [client 34.148.37.70:59468] [client 34.148.37.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.37.70, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aT1VYTBwBW1JRRoCYqaGuAAAAQI"]
[Sat Dec 13 20:00:35.869821 2025] [:error] [pid 39287:tid 39304] [client 34.148.37.70:59468] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aT1VYzBwBW1JRRoCYqaGyAAAAQ8"]
[Sat Dec 13 20:00:36.737472 2025] [:error] [pid 55071:tid 55096] [client 34.148.37.70:61351] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aT1VZMHSpNduhEZ_mjfSOAAAAZc"]
[Sat Dec 13 20:00:37.629435 2025] [:error] [pid 23013:tid 23036] [client 34.148.37.70:51833] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aT1VZas9bDNWPQXUW1aaUwAAA9U"]
[Sat Dec 13 20:00:38.498855 2025] [:error] [pid 43747:tid 43771] [client 34.148.37.70:64925] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aT1VZpYw3twBd_JQEHgxTAAAABQ"]
[Sat Dec 13 20:00:39.368045 2025] [:error] [pid 55071:tid 55093] [client 34.148.37.70:58820] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aT1VZ8HSpNduhEZ_mjfSOQAAAZQ"]
[Sat Dec 13 20:00:40.272715 2025] [:error] [pid 43748:tid 43784] [client 34.148.37.70:55326] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aT1VaKrTT0VzE3gYjcCqdgAAAEU"]
[Sat Dec 13 20:00:41.164590 2025] [:error] [pid 23013:tid 23031] [client 34.148.37.70:57107] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aT1Vaas9bDNWPQXUW1aaWAAAA9A"]
[Sat Dec 13 20:00:42.151097 2025] [:error] [pid 20799:tid 20809] [client 34.148.37.70:56746] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aT1VaqPz3eVRUTzZpOJ7fQAAAsg"]
[Sat Dec 13 20:00:43.054173 2025] [:error] [pid 43836:tid 43851] [client 34.148.37.70:60719] [client 34.148.37.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aT1Va2AEOBirsxb11nb7ngAAAM0"]
[Sat Dec 13 20:49:39.520710 2025] [:error] [pid 23013:tid 23030] [client 34.172.57.63:63275] [client 34.172.57.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.57.63, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aT1g46s9bDNWPQXUW1afZgAAA88"]
[Sat Dec 13 20:49:42.895109 2025] [:error] [pid 23013:tid 23039] [client 34.172.57.63:63275] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aT1g5qs9bDNWPQXUW1afdAAAA9g"]
[Sat Dec 13 20:49:43.774637 2025] [:error] [pid 20799:tid 20808] [client 34.172.57.63:56911] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aT1g56Pz3eVRUTzZpOKBUQAAAsc"]
[Sat Dec 13 20:49:44.654356 2025] [:error] [pid 55071:tid 55081] [client 34.172.57.63:60891] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aT1g6MHSpNduhEZ_mjfW2QAAAYg"]
[Sat Dec 13 20:49:45.548837 2025] [:error] [pid 55071:tid 55096] [client 34.172.57.63:61768] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aT1g6cHSpNduhEZ_mjfW3AAAAZc"]
[Sat Dec 13 20:49:46.352816 2025] [:error] [pid 20799:tid 20820] [client 34.172.57.63:56775] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aT1g6qPz3eVRUTzZpOKBUwAAAtM"]
[Sat Dec 13 20:49:47.175212 2025] [:error] [pid 23013:tid 23018] [client 34.172.57.63:61858] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aT1g66s9bDNWPQXUW1afewAAA8M"]
[Sat Dec 13 20:49:48.273839 2025] [:error] [pid 20799:tid 20807] [client 34.172.57.63:59763] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aT1g7KPz3eVRUTzZpOKBVgAAAsY"]
[Sat Dec 13 20:49:49.278939 2025] [:error] [pid 43836:tid 43848] [client 34.172.57.63:61463] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aT1g7WAEOBirsxb11nb_ggAAAMo"]
[Sat Dec 13 20:49:50.079014 2025] [:error] [pid 43836:tid 43861] [client 34.172.57.63:58152] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aT1g7mAEOBirsxb11nb_hAAAANc"]
[Sat Dec 13 20:49:50.870212 2025] [:error] [pid 22505:tid 22520] [client 34.172.57.63:64934] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aT1g7jvNI-35hW16TnUdcQAAA40"]
[Sat Dec 13 20:49:51.695350 2025] [:error] [pid 21342:tid 21348] [client 34.172.57.63:62665] [client 34.172.57.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aT1g7_BL0VVSMIEvqst75QAAAwI"]
[Sat Dec 13 21:09:29.575773 2025] [:error] [pid 43748:tid 43785] [client 43.157.98.187:47530] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aT1liarTT0VzE3gYjcCwdQAAAEY"]
[Sun Dec 14 00:06:28.123525 2025] [:error] [pid 22505:tid 22521] [client 43.130.57.46:54098] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aT2PBDvNI-35hW16TnU2XwAAA44"]
[Sun Dec 14 02:39:19.906614 2025] [:error] [pid 14689:tid 14695] [client 20.196.109.137:60865] [client 20.196.109.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT2y10Ecifvaa9I7SnmU_wAAAUI"], referer: https://www.google.com/
[Sun Dec 14 02:56:51.277409 2025] [:error] [pid 14689:tid 14697] [client 4.213.60.65:37665] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT2280Ecifvaa9I7Snma-gAAAUQ"], referer: https://www.google.com/
[Sun Dec 14 02:56:51.849899 2025] [:error] [pid 3720:tid 3736] [client 4.213.60.65:34997] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aT228-7_sgsCEY5RMYrzjQAAAI4"], referer: https://www.google.com/
[Sun Dec 14 02:56:59.598077 2025] [:error] [pid 3636:tid 3702] [client 4.213.60.65:34945] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aT22-94pNg3LXPqKgeZJ_wAAAQo"], referer: https://www.google.fr/
[Sun Dec 14 02:56:59.871659 2025] [:error] [pid 14689:tid 14709] [client 4.213.60.65:33179] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT22-0Ecifvaa9I7SnmbIQAAAVA"], referer: https://www.google.com/
[Sun Dec 14 02:57:00.743100 2025] [:error] [pid 3635:tid 3687] [client 4.213.60.65:37686] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aT22_DqfhzW7OpfKxKz6AQAAANY"], referer: https://www.google.fr/
[Sun Dec 14 02:57:01.637109 2025] [:error] [pid 3635:tid 3667] [client 4.213.60.65:37660] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT22_TqfhzW7OpfKxKz6BgAAAMI"], referer: https://www.bing.com/
[Sun Dec 14 02:57:01.912801 2025] [:error] [pid 14654:tid 14657] [client 4.213.60.65:37694] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT22_TqZP_N7tgSGeZdFdwAAAAA"], referer: https://www.google.fr/
[Sun Dec 14 02:57:02.187306 2025] [:error] [pid 14654:tid 14675] [client 4.213.60.65:64757] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aT22_jqZP_N7tgSGeZdFeAAAABI"], referer: https://www.yahoo.com/
[Sun Dec 14 02:57:02.465014 2025] [:error] [pid 14689:tid 14699] [client 4.213.60.65:65484] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aT22_kEcifvaa9I7SnmbKAAAAUY"], referer: https://www.yahoo.com/
[Sun Dec 14 02:57:02.743077 2025] [:error] [pid 3636:tid 3715] [client 4.213.60.65:33162] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT22_t4pNg3LXPqKgeZKAAAAARc"], referer: https://www.google.co.uk/
[Sun Dec 14 02:57:03.315899 2025] [:error] [pid 14689:tid 14702] [client 4.213.60.65:65514] [client 4.213.60.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT22_0Ecifvaa9I7SnmbKwAAAUk"], referer: https://www.google.com/
[Sun Dec 14 12:55:33.876999 2025] [:error] [pid 40596:tid 40632] [client 49.234.192.248:32904] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aT5DRWvZZo4N2X7WoLzerwAAAcY"]
[Sun Dec 14 19:28:38.815907 2025] [:error] [pid 39525:tid 39584] [client 36.41.75.167:39388] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aT6fZk1fX_pB_BrvE_49eQAAAIE"]
[Sun Dec 14 20:17:40.471542 2025] [:error] [pid 39524:tid 39574] [client 34.63.51.220:64987] [client 34.63.51.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.51.220, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aT6q5GrVGpbDzFtDE9PprAAAAFI"]
[Sun Dec 14 20:17:44.016735 2025] [:error] [pid 39524:tid 39573] [client 34.63.51.220:64987] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aT6q6GrVGpbDzFtDE9PptwAAAFE"]
[Sun Dec 14 20:17:44.838336 2025] [:error] [pid 40595:tid 40606] [client 34.63.51.220:65012] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aT6q6Pjrht6y4RN-xKQfSQAAAYc"]
[Sun Dec 14 20:17:45.665414 2025] [:error] [pid 39524:tid 39578] [client 34.63.51.220:49490] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aT6q6WrVGpbDzFtDE9PpuQAAAFY"]
[Sun Dec 14 20:17:46.465490 2025] [:error] [pid 41600:tid 41625] [client 34.63.51.220:52060] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aT6q6tFLTBZjcwNd_VsPVwAAARY"]
[Sun Dec 14 20:17:47.260725 2025] [:error] [pid 39523:tid 39533] [client 34.63.51.220:52849] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aT6q6zQTQH1raAj2lkjlRQAAAAU"]
[Sun Dec 14 20:17:48.099265 2025] [:error] [pid 41600:tid 41620] [client 34.63.51.220:51143] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aT6q7NFLTBZjcwNd_VsPawAAARE"]
[Sun Dec 14 20:17:48.895717 2025] [:error] [pid 41600:tid 41607] [client 34.63.51.220:63316] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aT6q7NFLTBZjcwNd_VsPcgAAAQQ"]
[Sun Dec 14 20:17:49.706868 2025] [:error] [pid 39524:tid 39559] [client 34.63.51.220:65289] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aT6q7WrVGpbDzFtDE9PpuwAAAEM"]
[Sun Dec 14 20:17:50.517138 2025] [:error] [pid 41600:tid 41609] [client 34.63.51.220:60542] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aT6q7tFLTBZjcwNd_VsPeAAAAQY"]
[Sun Dec 14 20:17:51.319260 2025] [:error] [pid 39523:tid 39534] [client 34.63.51.220:51328] [client 34.63.51.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aT6q7zQTQH1raAj2lkjlRwAAAAY"]
[Sun Dec 14 21:09:25.762410 2025] [:error] [pid 41600:tid 41626] [client 4.197.76.171:29604] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0o0.php"] [unique_id "aT63BdFLTBZjcwNd_VsqTQAAARc"]
[Sun Dec 14 21:09:29.182589 2025] [:error] [pid 41600:tid 41615] [client 4.197.76.171:29588] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0o0.php"] [unique_id "aT63CdFLTBZjcwNd_VsqVwAAAQw"]
[Sun Dec 14 21:09:30.391516 2025] [:error] [pid 40595:tid 40623] [client 4.197.76.171:31197] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0o0.php"] [unique_id "aT63Cvjrht6y4RN-xKQvywAAAZg"]
[Sun Dec 14 21:09:32.487531 2025] [:error] [pid 41600:tid 41611] [client 4.197.76.171:3290] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0o0.php"] [unique_id "aT63DNFLTBZjcwNd_VsqWQAAAQg"]
[Sun Dec 14 21:09:35.421190 2025] [:error] [pid 40595:tid 40618] [client 4.197.76.171:56466] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxl.php"] [unique_id "aT63D_jrht6y4RN-xKQvzwAAAZM"]
[Sun Dec 14 21:09:36.434859 2025] [:error] [pid 39524:tid 39578] [client 4.197.76.171:31205] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxl.php"] [unique_id "aT63EGrVGpbDzFtDE9P9QwAAAFY"]
[Sun Dec 14 21:09:37.680417 2025] [:error] [pid 39523:tid 39551] [client 4.197.76.171:54411] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxl.php"] [unique_id "aT63ETQTQH1raAj2lkjzBAAAABc"]
[Sun Dec 14 21:09:38.512461 2025] [:error] [pid 39525:tid 39594] [client 4.197.76.171:31225] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxl.php"] [unique_id "aT63Ek1fX_pB_BrvE_5aAAAAAIs"]
[Sun Dec 14 21:09:39.241591 2025] [:error] [pid 13799:tid 13808] [client 4.197.76.171:31471] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aT63E3jPEin01ElFTNZOLAAAAgY"]
[Sun Dec 14 21:09:40.716455 2025] [:error] [pid 39524:tid 39572] [client 4.197.76.171:31428] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aT63FGrVGpbDzFtDE9P9SwAAAFA"]
[Sun Dec 14 21:09:41.396629 2025] [:error] [pid 40595:tid 40599] [client 4.197.76.171:25905] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aT63Ffjrht6y4RN-xKQv1wAAAYA"]
[Sun Dec 14 21:09:41.714424 2025] [:error] [pid 39523:tid 39528] [client 4.197.76.171:54416] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aT63FTQTQH1raAj2lkjzCgAAAAA"]
[Sun Dec 14 21:09:42.633418 2025] [:error] [pid 40596:tid 40629] [client 4.197.76.171:31172] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT63FmvZZo4N2X7WoLyikQAAAcM"]
[Sun Dec 14 21:09:43.438393 2025] [:error] [pid 40595:tid 40621] [client 4.197.76.171:25890] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT63F_jrht6y4RN-xKQv2wAAAZY"]
[Sun Dec 14 21:09:44.786566 2025] [:error] [pid 39525:tid 39605] [client 4.197.76.171:3272] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT63GE1fX_pB_BrvE_5aBAAAAJY"]
[Sun Dec 14 21:09:47.209620 2025] [:error] [pid 39523:tid 39550] [client 4.197.76.171:21459] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT63GzQTQH1raAj2lkjzGAAAABY"]
[Sun Dec 14 21:09:47.959671 2025] [:error] [pid 13799:tid 13820] [client 4.197.76.171:21441] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aT63G3jPEin01ElFTNZONAAAAhI"]
[Sun Dec 14 21:09:48.882631 2025] [:error] [pid 13799:tid 13821] [client 4.197.76.171:31430] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aT63HHjPEin01ElFTNZOOAAAAhM"]
[Sun Dec 14 21:09:51.116855 2025] [:error] [pid 40561:tid 40585] [client 4.197.76.171:54430] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aT63H4Y6r869zoqRQkTk9AAAAVQ"]
[Sun Dec 14 21:09:51.815673 2025] [:error] [pid 39614:tid 39621] [client 4.197.76.171:31429] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aT63H_xybG8-9MflbDeAAAAAAMU"]
[Sun Dec 14 21:09:52.682991 2025] [:error] [pid 40595:tid 40599] [client 4.197.76.171:31476] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aT63IPjrht6y4RN-xKQv5AAAAYA"]
[Sun Dec 14 21:09:53.052387 2025] [:error] [pid 39524:tid 39563] [client 4.197.76.171:25864] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aT63IWrVGpbDzFtDE9P9XgAAAEc"]
[Sun Dec 14 21:09:53.544874 2025] [:error] [pid 40596:tid 40641] [client 4.197.76.171:31474] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aT63IWvZZo4N2X7WoLyilwAAAc8"]
[Sun Dec 14 21:09:55.121145 2025] [:error] [pid 39525:tid 39594] [client 4.197.76.171:30685] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aT63I01fX_pB_BrvE_5aCgAAAIs"]
[Sun Dec 14 21:09:55.820078 2025] [:error] [pid 39523:tid 39531] [client 4.197.76.171:31468] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aT63IzQTQH1raAj2lkjzKwAAAAM"]
[Sun Dec 14 21:09:59.623929 2025] [:error] [pid 13799:tid 13814] [client 4.197.76.171:26492] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aT63J3jPEin01ElFTNZORQAAAgw"]
[Sun Dec 14 21:10:01.044401 2025] [:error] [pid 40561:tid 40565] [client 4.197.76.171:31431] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aT63KYY6r869zoqRQkTlBAAAAUA"]
[Sun Dec 14 21:10:04.029684 2025] [:error] [pid 41600:tid 41616] [client 4.197.76.171:30667] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aT63LNFLTBZjcwNd_VsqcQAAAQ0"]
[Sun Dec 14 21:10:06.486914 2025] [:error] [pid 40595:tid 40614] [client 4.197.76.171:26451] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.php"] [unique_id "aT63Lvjrht6y4RN-xKQv7wAAAY8"]
[Sun Dec 14 21:10:07.267487 2025] [:error] [pid 39525:tid 39601] [client 4.197.76.171:21443] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.php"] [unique_id "aT63L01fX_pB_BrvE_5aIgAAAJI"]
[Sun Dec 14 21:10:07.622665 2025] [:error] [pid 40561:tid 40579] [client 4.197.76.171:30967] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.php"] [unique_id "aT63L4Y6r869zoqRQkTlEgAAAU4"]
[Sun Dec 14 21:10:08.542390 2025] [:error] [pid 40561:tid 40577] [client 4.197.76.171:27221] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.php"] [unique_id "aT63MIY6r869zoqRQkTlFQAAAUw"]
[Sun Dec 14 21:10:09.185102 2025] [:error] [pid 40561:tid 40572] [client 4.197.76.171:26490] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aT63MYY6r869zoqRQkTlFgAAAUc"]
[Sun Dec 14 21:10:10.482899 2025] [:error] [pid 39614:tid 39616] [client 4.197.76.171:21483] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aT63MvxybG8-9MflbDeAFAAAAMA"]
[Sun Dec 14 21:10:11.287132 2025] [:error] [pid 39614:tid 39624] [client 4.197.76.171:30699] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aT63M_xybG8-9MflbDeAFgAAAMg"]
[Sun Dec 14 21:10:15.282755 2025] [:error] [pid 40561:tid 40589] [client 4.197.76.171:26482] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fwe.php"] [unique_id "aT63N4Y6r869zoqRQkTlHQAAAVg"]
[Sun Dec 14 21:10:15.884898 2025] [:error] [pid 40595:tid 40615] [client 4.197.76.171:30934] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aT63N_jrht6y4RN-xKQwAgAAAZA"]
[Sun Dec 14 21:10:19.144396 2025] [:error] [pid 39524:tid 39560] [client 4.197.76.171:30718] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aT63O2rVGpbDzFtDE9P9eAAAAEQ"]
[Sun Dec 14 21:10:20.792482 2025] [:error] [pid 13799:tid 13808] [client 4.197.76.171:21468] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aT63PHjPEin01ElFTNZOVAAAAgY"]
[Sun Dec 14 21:10:20.992910 2025] [:error] [pid 39523:tid 39530] [client 4.197.76.171:27254] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aT63PDQTQH1raAj2lkjzRQAAAAI"]
[Sun Dec 14 21:10:22.049063 2025] [:error] [pid 40595:tid 40603] [client 4.197.76.171:27217] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aT63Pvjrht6y4RN-xKQwCQAAAYQ"]
[Sun Dec 14 21:10:23.374610 2025] [:error] [pid 39523:tid 39528] [client 4.197.76.171:30092] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aT63PzQTQH1raAj2lkjzRwAAAAA"]
[Sun Dec 14 21:10:23.745938 2025] [:error] [pid 40595:tid 40602] [client 4.197.76.171:21453] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aT63P_jrht6y4RN-xKQwDAAAAYM"]
[Sun Dec 14 21:10:29.382789 2025] [:error] [pid 39524:tid 39568] [client 4.197.76.171:26440] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aT63RWrVGpbDzFtDE9P9ngAAAEw"]
[Sun Dec 14 21:10:31.560777 2025] [:error] [pid 40595:tid 40603] [client 4.197.76.171:30928] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aT63R_jrht6y4RN-xKQwFAAAAYQ"]
[Sun Dec 14 21:10:32.584129 2025] [:error] [pid 40595:tid 40605] [client 4.197.76.171:30942] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aT63SPjrht6y4RN-xKQwFgAAAYY"]
[Sun Dec 14 21:10:33.403820 2025] [:error] [pid 41600:tid 41605] [client 4.197.76.171:31020] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aT63SdFLTBZjcwNd_VsqkQAAAQI"]
[Sun Dec 14 21:10:36.207819 2025] [:error] [pid 41600:tid 41619] [client 4.197.76.171:30956] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aT63TNFLTBZjcwNd_VsqnQAAARA"]
[Sun Dec 14 21:10:39.518535 2025] [:error] [pid 41600:tid 41608] [client 4.197.76.171:28340] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aT63T9FLTBZjcwNd_VsqpQAAAQU"]
[Sun Dec 14 21:10:40.926150 2025] [:error] [pid 41600:tid 41606] [client 4.197.76.171:30916] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aT63UNFLTBZjcwNd_VsqpgAAAQM"]
[Sun Dec 14 21:10:41.867460 2025] [:error] [pid 40595:tid 40611] [client 4.197.76.171:28328] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aT63Ufjrht6y4RN-xKQwIgAAAYw"]
[Sun Dec 14 21:10:44.068039 2025] [:error] [pid 39523:tid 39544] [client 4.197.76.171:30142] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aT63VDQTQH1raAj2lkjzXQAAABA"]
[Sun Dec 14 21:10:44.853164 2025] [:error] [pid 13799:tid 13819] [client 4.197.76.171:22847] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aT63VHjPEin01ElFTNZOYQAAAhE"]
[Sun Dec 14 21:10:46.147618 2025] [:error] [pid 13799:tid 13811] [client 4.197.76.171:22839] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aT63VnjPEin01ElFTNZOYgAAAgk"]
[Sun Dec 14 21:10:47.136967 2025] [:error] [pid 40561:tid 40568] [client 4.197.76.171:3698] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aT63V4Y6r869zoqRQkTlPgAAAUM"]
[Sun Dec 14 21:11:08.639617 2025] [:error] [pid 39524:tid 39579] [client 4.197.76.171:29349] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aT63bGrVGpbDzFtDE9P9ugAAAFc"]
[Sun Dec 14 21:11:11.495615 2025] [:error] [pid 39524:tid 39575] [client 4.197.76.171:22901] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aT63b2rVGpbDzFtDE9P9vQAAAFM"]
[Sun Dec 14 21:11:12.991046 2025] [:error] [pid 39524:tid 39572] [client 4.197.76.171:31616] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aT63cGrVGpbDzFtDE9P9wAAAAFA"]
[Sun Dec 14 21:11:13.179792 2025] [:error] [pid 39523:tid 39539] [client 4.197.76.171:22302] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aT63cTQTQH1raAj2lkjzkAAAAAs"]
[Sun Dec 14 21:11:14.166316 2025] [:error] [pid 40596:tid 40627] [client 4.197.76.171:31644] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aT63cmvZZo4N2X7WoLyi8QAAAcE"]
[Sun Dec 14 21:11:18.802039 2025] [:error] [pid 41600:tid 41619] [client 4.197.76.171:31630] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aT63dtFLTBZjcwNd_VsqxwAAARA"]
[Sun Dec 14 21:11:21.104624 2025] [:error] [pid 39614:tid 39620] [client 4.197.76.171:21941] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aT63efxybG8-9MflbDeAQAAAAMQ"]
[Sun Dec 14 21:11:24.399731 2025] [:error] [pid 39524:tid 39562] [client 4.197.76.171:22303] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aT63fGrVGpbDzFtDE9P9ywAAAEY"]
[Sun Dec 14 21:11:25.064374 2025] [:error] [pid 39614:tid 39617] [client 4.197.76.171:30443] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aT63ffxybG8-9MflbDeARwAAAME"]
[Sun Dec 14 21:11:26.148146 2025] [:error] [pid 41600:tid 41611] [client 4.197.76.171:31639] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aT63ftFLTBZjcwNd_Vsq0QAAAQg"]
[Sun Dec 14 21:11:35.910490 2025] [:error] [pid 39524:tid 39570] [client 4.197.76.171:29324] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aT63h2rVGpbDzFtDE9P95AAAAE4"]
[Sun Dec 14 21:11:39.024379 2025] [:error] [pid 39614:tid 39640] [client 4.197.76.171:3992] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aT63i_xybG8-9MflbDeAYQAAANg"]
[Sun Dec 14 21:11:40.284217 2025] [:error] [pid 39524:tid 39572] [client 4.197.76.171:3978] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aT63jGrVGpbDzFtDE9P96QAAAFA"]
[Sun Dec 14 21:11:42.643027 2025] [:error] [pid 41600:tid 41612] [client 4.197.76.171:25956] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aT63jtFLTBZjcwNd_VsrHwAAAQk"]
[Sun Dec 14 21:11:45.640385 2025] [:error] [pid 39525:tid 39593] [client 4.197.76.171:22864] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aT63kU1fX_pB_BrvE_5bFAAAAIo"]
[Sun Dec 14 21:11:46.509905 2025] [:error] [pid 40596:tid 40635] [client 4.197.76.171:22873] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aT63kmvZZo4N2X7WoLyjGwAAAck"]
[Sun Dec 14 21:11:47.418839 2025] [:error] [pid 40595:tid 40612] [client 4.197.76.171:3997] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aT63k_jrht6y4RN-xKQwUQAAAY0"]
[Sun Dec 14 21:11:48.212573 2025] [:error] [pid 13799:tid 13816] [client 4.197.76.171:3983] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aT63lHjPEin01ElFTNZOswAAAg4"]
[Sun Dec 14 21:11:48.957240 2025] [:error] [pid 40561:tid 40567] [client 4.197.76.171:25944] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aT63lIY6r869zoqRQkTlowAAAUI"]
[Sun Dec 14 21:11:50.343848 2025] [:error] [pid 40561:tid 40588] [client 4.197.76.171:3994] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aT63loY6r869zoqRQkTlpAAAAVc"]
[Sun Dec 14 21:11:51.442415 2025] [:error] [pid 40596:tid 40636] [client 4.197.76.171:3258] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aT63l2vZZo4N2X7WoLyjIwAAAco"]
[Sun Dec 14 21:11:52.460256 2025] [:error] [pid 41600:tid 41610] [client 4.197.76.171:3256] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aT63mNFLTBZjcwNd_VsrJwAAAQc"]
[Sun Dec 14 21:11:56.948784 2025] [:error] [pid 39524:tid 39565] [client 4.197.76.171:3255] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aT63nGrVGpbDzFtDE9P-FgAAAEk"]
[Sun Dec 14 21:11:59.605015 2025] [:error] [pid 39524:tid 39560] [client 4.197.76.171:21208] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aT63n2rVGpbDzFtDE9P-KAAAAEQ"]
[Sun Dec 14 21:12:00.974338 2025] [:error] [pid 40596:tid 40638] [client 4.197.76.171:30782] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aT63oGvZZo4N2X7WoLyjKwAAAcw"]
[Sun Dec 14 21:12:01.898116 2025] [:error] [pid 40596:tid 40636] [client 4.197.76.171:54587] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aT63oWvZZo4N2X7WoLyjLAAAAco"]
[Sun Dec 14 21:12:04.096430 2025] [:error] [pid 41600:tid 41619] [client 4.197.76.171:3972] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aT63pNFLTBZjcwNd_VsraAAAARA"]
[Sun Dec 14 21:12:04.639082 2025] [:error] [pid 40595:tid 40600] [client 4.197.76.171:24851] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aT63pPjrht6y4RN-xKQwfwAAAYE"]
[Sun Dec 14 21:12:05.757574 2025] [:error] [pid 39614:tid 39636] [client 4.197.76.171:30781] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aT63pfxybG8-9MflbDeAeQAAANQ"]
[Sun Dec 14 21:12:07.117936 2025] [:error] [pid 41600:tid 41622] [client 4.197.76.171:24868] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aT63p9FLTBZjcwNd_VsrawAAARM"]
[Sun Dec 14 21:12:07.605641 2025] [:error] [pid 39524:tid 39556] [client 4.197.76.171:24890] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aT63p2rVGpbDzFtDE9P-WAAAAEA"]
[Sun Dec 14 21:12:08.292596 2025] [:error] [pid 39524:tid 39572] [client 4.197.76.171:24888] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT63qGrVGpbDzFtDE9P-WgAAAFA"]
[Sun Dec 14 21:12:08.827859 2025] [:error] [pid 40596:tid 40628] [client 4.197.76.171:25943] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT63qGvZZo4N2X7WoLyjMQAAAcI"]
[Sun Dec 14 21:12:12.593022 2025] [:error] [pid 39523:tid 39552] [client 4.197.76.171:3252] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT63rDQTQH1raAj2lkjz0QAAABg"]
[Sun Dec 14 21:12:14.326195 2025] [:error] [pid 41600:tid 41603] [client 4.197.76.171:24870] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT63rtFLTBZjcwNd_VsrggAAAQA"]
[Sun Dec 14 21:12:17.284072 2025] [:error] [pid 39523:tid 39533] [client 4.197.76.171:23401] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aT63sTQTQH1raAj2lkjz1QAAAAU"]
[Sun Dec 14 21:12:19.388835 2025] [:error] [pid 39523:tid 39543] [client 4.197.76.171:23364] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aT63szQTQH1raAj2lkjz2AAAAA8"]
[Sun Dec 14 21:12:20.390003 2025] [:error] [pid 39614:tid 39634] [client 4.197.76.171:29090] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aT63tPxybG8-9MflbDeAggAAANI"]
[Sun Dec 14 21:12:21.181449 2025] [:error] [pid 40596:tid 40647] [client 4.197.76.171:29061] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aT63tWvZZo4N2X7WoLyjOAAAAdU"]
[Sun Dec 14 21:12:22.537136 2025] [:error] [pid 39614:tid 39620] [client 4.197.76.171:23392] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "aT63tvxybG8-9MflbDeAhAAAAMQ"]
[Sun Dec 14 21:12:23.449326 2025] [:error] [pid 40595:tid 40616] [client 4.197.76.171:29056] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "aT63t_jrht6y4RN-xKQwqQAAAZE"]
[Sun Dec 14 21:12:24.326847 2025] [:error] [pid 39524:tid 39577] [client 4.197.76.171:54539] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "aT63uGrVGpbDzFtDE9P-jQAAAFU"]
[Sun Dec 14 21:12:26.452835 2025] [:error] [pid 13799:tid 13804] [client 4.197.76.171:59775] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "aT63unjPEin01ElFTNZOxgAAAgI"]
[Sun Dec 14 21:12:27.174155 2025] [:error] [pid 40595:tid 40606] [client 4.197.76.171:3336] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aT63u_jrht6y4RN-xKQwqwAAAYc"]
[Sun Dec 14 21:12:29.978211 2025] [:error] [pid 39525:tid 39585] [client 4.197.76.171:21174] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aT63vU1fX_pB_BrvE_5bNwAAAII"]
[Sun Dec 14 21:12:31.399056 2025] [:error] [pid 40561:tid 40569] [client 4.197.76.171:21701] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aT63v4Y6r869zoqRQkTlugAAAUQ"]
[Sun Dec 14 21:12:32.917799 2025] [:error] [pid 13799:tid 13822] [client 4.197.76.171:31539] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aT63wHjPEin01ElFTNZOzAAAAhQ"]
[Sun Dec 14 21:12:35.542323 2025] [:error] [pid 40596:tid 40648] [client 4.197.76.171:27925] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aT63w2vZZo4N2X7WoLyjQAAAAdY"]
[Sun Dec 14 21:12:37.326775 2025] [:error] [pid 41600:tid 41619] [client 4.197.76.171:20962] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aT63xdFLTBZjcwNd_VsrlQAAARA"]
[Sun Dec 14 21:12:43.043786 2025] [:error] [pid 39523:tid 39528] [client 4.197.76.171:3461] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aT63yzQTQH1raAj2lkjz_AAAAAA"]
[Sun Dec 14 21:12:44.038434 2025] [:error] [pid 39525:tid 39607] [client 4.197.76.171:30506] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aT63zE1fX_pB_BrvE_5bRwAAAJg"]
[Sun Dec 14 21:12:44.824861 2025] [:error] [pid 40561:tid 40570] [client 4.197.76.171:3500] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aT63zIY6r869zoqRQkTlwAAAAUU"]
[Sun Dec 14 21:12:47.436114 2025] [:error] [pid 41600:tid 41604] [client 4.197.76.171:31689] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aT63z9FLTBZjcwNd_VsroQAAAQE"]
[Sun Dec 14 21:12:47.897062 2025] [:error] [pid 39525:tid 39602] [client 4.197.76.171:3506] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aT63z01fX_pB_BrvE_5bTQAAAJM"]
[Sun Dec 14 21:12:48.724134 2025] [:error] [pid 39614:tid 39630] [client 4.197.76.171:31713] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aT630PxybG8-9MflbDeAlwAAAM4"]
[Sun Dec 14 21:12:52.827642 2025] [:error] [pid 39614:tid 39632] [client 4.197.76.171:3515] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aT631PxybG8-9MflbDeAnQAAANA"]
[Sun Dec 14 21:12:56.185078 2025] [:error] [pid 41600:tid 41619] [client 4.197.76.171:29863] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aT632NFLTBZjcwNd_VsrqwAAARA"]
[Sun Dec 14 21:12:57.420051 2025] [:error] [pid 40595:tid 40602] [client 4.197.76.171:26807] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aT632fjrht6y4RN-xKQwuQAAAYM"]
[Sun Dec 14 21:12:57.755723 2025] [:error] [pid 40596:tid 40628] [client 4.197.76.171:25415] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aT632WvZZo4N2X7WoLyjRwAAAcI"]
[Sun Dec 14 21:12:59.143681 2025] [:error] [pid 13799:tid 13824] [client 4.197.76.171:29885] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aT6323jPEin01ElFTNZO3gAAAhY"]
[Sun Dec 14 21:12:59.980572 2025] [:error] [pid 13799:tid 13816] [client 4.197.76.171:3131] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aT6323jPEin01ElFTNZO3wAAAg4"]
[Sun Dec 14 21:13:01.900661 2025] [:error] [pid 40561:tid 40589] [client 4.197.76.171:30928] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aT633YY6r869zoqRQkTlxwAAAVg"]
[Sun Dec 14 21:13:02.891435 2025] [:error] [pid 39614:tid 39624] [client 4.197.76.171:26773] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aT633vxybG8-9MflbDeAqQAAAMg"]
[Sun Dec 14 21:13:04.788448 2025] [:error] [pid 40561:tid 40571] [client 4.197.76.171:25463] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aT634IY6r869zoqRQkTlyAAAAUY"]
[Sun Dec 14 21:13:08.831603 2025] [:error] [pid 13799:tid 13815] [client 4.197.76.171:31686] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aT635HjPEin01ElFTNZO5AAAAg0"]
[Sun Dec 14 21:13:09.341058 2025] [:error] [pid 39614:tid 39630] [client 4.197.76.171:61727] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aT635fxybG8-9MflbDeArQAAAM4"]
[Sun Dec 14 21:13:11.058560 2025] [:error] [pid 40595:tid 40611] [client 4.197.76.171:31476] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aT635_jrht6y4RN-xKQwwAAAAYw"]
[Sun Dec 14 21:13:12.017642 2025] [:error] [pid 39523:tid 39534] [client 4.197.76.171:24926] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aT636DQTQH1raAj2lkj0CgAAAAY"]
[Sun Dec 14 21:13:17.198940 2025] [:error] [pid 39525:tid 39607] [client 4.197.76.171:61731] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aT637U1fX_pB_BrvE_5bZQAAAJg"]
[Sun Dec 14 21:13:20.104472 2025] [:error] [pid 13799:tid 13815] [client 4.197.76.171:26781] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aT638HjPEin01ElFTNZO9AAAAg0"]
[Sun Dec 14 21:13:22.244925 2025] [:error] [pid 39525:tid 39600] [client 4.197.76.171:61748] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aT638k1fX_pB_BrvE_5bbAAAAJE"]
[Sun Dec 14 21:13:24.171122 2025] [:error] [pid 39524:tid 39573] [client 4.197.76.171:29846] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aT639GrVGpbDzFtDE9P-0AAAAFE"]
[Sun Dec 14 21:13:29.887919 2025] [:error] [pid 13799:tid 13803] [client 4.197.76.171:24927] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aT63-XjPEin01ElFTNZO-AAAAgE"]
[Sun Dec 14 21:13:31.873846 2025] [:error] [pid 39614:tid 39626] [client 4.197.76.171:3373] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aT63-_xybG8-9MflbDeAwAAAAMo"]
[Sun Dec 14 21:13:33.618671 2025] [:error] [pid 39614:tid 39624] [client 4.197.76.171:21731] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aT63_fxybG8-9MflbDeAxAAAAMg"]
[Sun Dec 14 21:13:35.380064 2025] [:error] [pid 39525:tid 39597] [client 4.197.76.171:3253] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aT63_01fX_pB_BrvE_5beAAAAI4"]
[Sun Dec 14 21:13:38.724012 2025] [:error] [pid 39525:tid 39603] [client 4.197.76.171:24858] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aT64Ak1fX_pB_BrvE_5bewAAAJQ"]
[Sun Dec 14 21:13:44.450292 2025] [:error] [pid 13799:tid 13806] [client 4.197.76.171:22838] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aT64CHjPEin01ElFTNZPAgAAAgQ"]
[Sun Dec 14 21:13:49.762144 2025] [:error] [pid 39525:tid 39597] [client 4.197.76.171:3692] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aT64DU1fX_pB_BrvE_5biAAAAI4"]
[Sun Dec 14 21:13:52.228874 2025] [:error] [pid 40561:tid 40570] [client 4.197.76.171:3933] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aT64EIY6r869zoqRQkTl4gAAAUU"]
[Sun Dec 14 21:13:53.492200 2025] [:error] [pid 41600:tid 41618] [client 4.197.76.171:3945] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aT64EdFLTBZjcwNd_Vsr2wAAAQ8"]
[Sun Dec 14 21:13:54.591354 2025] [proxy_fcgi:error] [pid 41600:tid 41607] [client 4.197.76.171:30045] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 21:13:54.868931 2025] [:error] [pid 41600:tid 41620] [client 4.197.76.171:30045] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aT64EtFLTBZjcwNd_Vsr5wAAARE"]
[Sun Dec 14 21:13:55.826188 2025] [:error] [pid 39524:tid 39579] [client 4.197.76.171:25351] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aT64E2rVGpbDzFtDE9P-3gAAAFc"]
[Sun Dec 14 21:13:59.047702 2025] [:error] [pid 40596:tid 40641] [client 4.197.76.171:3586] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aT64F2vZZo4N2X7WoLyjYQAAAc8"]
[Sun Dec 14 21:14:00.657180 2025] [:error] [pid 39524:tid 39571] [client 4.197.76.171:30047] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aT64GGrVGpbDzFtDE9P-5gAAAE8"]
[Sun Dec 14 21:14:04.502601 2025] [:error] [pid 40596:tid 40627] [client 4.197.76.171:25404] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aT64HGvZZo4N2X7WoLyjZAAAAcE"]
[Sun Dec 14 21:14:06.216566 2025] [:error] [pid 39525:tid 39597] [client 4.197.76.171:3658] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aT64Hk1fX_pB_BrvE_5blgAAAI4"]
[Sun Dec 14 21:14:11.847492 2025] [:error] [pid 41600:tid 41625] [client 4.197.76.171:21935] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aT64I9FLTBZjcwNd_Vsr8gAAARY"]
[Sun Dec 14 21:14:12.090798 2025] [:error] [pid 41600:tid 41606] [client 4.197.76.171:21951] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aT64JNFLTBZjcwNd_Vsr8wAAAQM"]
[Sun Dec 14 21:14:13.188746 2025] [:error] [pid 41600:tid 41612] [client 4.197.76.171:25396] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aT64JdFLTBZjcwNd_Vsr9AAAAQk"]
[Sun Dec 14 21:14:15.837838 2025] [:error] [pid 39614:tid 39639] [client 4.197.76.171:21892] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aT64J_xybG8-9MflbDeBAAAAANc"]
[Sun Dec 14 21:14:17.969099 2025] [:error] [pid 41600:tid 41608] [client 4.197.76.171:30042] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aT64KdFLTBZjcwNd_VssAgAAAQU"]
[Sun Dec 14 21:14:18.536875 2025] [:error] [pid 13799:tid 13819] [client 4.197.76.171:30077] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aT64KnjPEin01ElFTNZPHQAAAhE"]
[Sun Dec 14 21:14:20.011627 2025] [:error] [pid 40596:tid 40646] [client 4.197.76.171:25391] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aT64LGvZZo4N2X7WoLyjogAAAdQ"]
[Sun Dec 14 21:14:22.734796 2025] [:error] [pid 40596:tid 40648] [client 4.197.76.171:3589] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aT64LmvZZo4N2X7WoLyjpgAAAdY"]
[Sun Dec 14 21:14:23.692850 2025] [:error] [pid 39524:tid 39559] [client 4.197.76.171:3910] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aT64L2rVGpbDzFtDE9P_EAAAAEM"]
[Sun Dec 14 21:14:25.403859 2025] [:error] [pid 40561:tid 40572] [client 4.197.76.171:25368] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aT64MYY6r869zoqRQkTmDwAAAUc"]
[Sun Dec 14 21:14:33.524481 2025] [:error] [pid 13799:tid 13808] [client 4.197.76.171:30016] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aT64OXjPEin01ElFTNZPMAAAAgY"]
[Sun Dec 14 21:14:34.728798 2025] [:error] [pid 41600:tid 41619] [client 4.197.76.171:21930] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aT64OtFLTBZjcwNd_VssEAAAARA"]
[Sun Dec 14 21:14:36.310544 2025] [:error] [pid 39524:tid 39570] [client 4.197.76.171:25374] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aT64PGrVGpbDzFtDE9P_LgAAAE4"]
[Sun Dec 14 21:14:36.860127 2025] [:error] [pid 41600:tid 41616] [client 4.197.76.171:30078] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aT64PNFLTBZjcwNd_VssFwAAAQ0"]
[Sun Dec 14 21:14:39.399387 2025] [:error] [pid 39525:tid 39604] [client 4.197.76.171:3966] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aT64P01fX_pB_BrvE_5btQAAAJU"]
[Sun Dec 14 21:14:41.655114 2025] [:error] [pid 13799:tid 13824] [client 4.197.76.171:21920] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aT64QXjPEin01ElFTNZPNAAAAhY"]
[Sun Dec 14 21:14:42.020768 2025] [:error] [pid 39614:tid 39621] [client 4.197.76.171:22807] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aT64QvxybG8-9MflbDeBJgAAAMU"]
[Sun Dec 14 21:14:43.076507 2025] [:error] [pid 40595:tid 40617] [client 4.197.76.171:22788] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aT64Q_jrht6y4RN-xKQw8gAAAZI"]
[Sun Dec 14 21:14:46.314282 2025] [:error] [pid 41600:tid 41624] [client 4.197.76.171:3947] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aT64RtFLTBZjcwNd_VssIQAAARU"]
[Sun Dec 14 21:14:49.614467 2025] [:error] [pid 39614:tid 39634] [client 4.197.76.171:30072] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aT64SfxybG8-9MflbDeBLgAAANI"]
[Sun Dec 14 21:14:51.981635 2025] [:error] [pid 39524:tid 39576] [client 4.197.76.171:21933] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aT64S2rVGpbDzFtDE9P_OwAAAFQ"]
[Sun Dec 14 21:14:52.813463 2025] [:error] [pid 40561:tid 40567] [client 4.197.76.171:3294] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aT64TIY6r869zoqRQkTmJgAAAUI"]
[Sun Dec 14 21:14:57.529701 2025] [:error] [pid 13799:tid 13812] [client 4.197.76.171:3299] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aT64UXjPEin01ElFTNZPSAAAAgo"]
[Sun Dec 14 21:14:58.203826 2025] [:error] [pid 41600:tid 41620] [client 4.197.76.171:25866] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aT64UtFLTBZjcwNd_VssLwAAARE"]
[Sun Dec 14 21:15:08.078864 2025] [:error] [pid 39614:tid 39626] [client 4.197.76.171:28336] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aT64XPxybG8-9MflbDeBQwAAAMo"]
[Sun Dec 14 21:15:09.004543 2025] [:error] [pid 41600:tid 41622] [client 4.197.76.171:27239] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aT64XdFLTBZjcwNd_VssOwAAARM"]
[Sun Dec 14 21:15:09.641430 2025] [:error] [pid 41600:tid 41614] [client 4.197.76.171:31039] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aT64XdFLTBZjcwNd_VssPAAAAQs"]
[Sun Dec 14 21:15:10.740390 2025] [:error] [pid 39614:tid 39619] [client 4.197.76.171:31011] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aT64XvxybG8-9MflbDeBRQAAAMM"]
[Sun Dec 14 21:15:12.089909 2025] [:error] [pid 39524:tid 39571] [client 4.197.76.171:3910] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aT64YGrVGpbDzFtDE9P_bwAAAE8"]
[Sun Dec 14 21:15:19.598351 2025] [:error] [pid 41600:tid 41619] [client 4.197.76.171:31460] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aT64Z9FLTBZjcwNd_VssRAAAARA"]
[Sun Dec 14 21:15:20.169849 2025] [:error] [pid 39523:tid 39537] [client 4.197.76.171:25914] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aT64aDQTQH1raAj2lkj0ZwAAAAk"]
[Sun Dec 14 21:15:20.694642 2025] [:error] [pid 13799:tid 13807] [client 4.197.76.171:30985] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aT64aHjPEin01ElFTNZPUQAAAgU"]
[Sun Dec 14 21:15:22.166569 2025] [:error] [pid 40561:tid 40574] [client 4.197.76.171:30997] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aT64aoY6r869zoqRQkTmNwAAAUk"]
[Sun Dec 14 21:15:23.485727 2025] [:error] [pid 39524:tid 39558] [client 4.197.76.171:28306] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aT64a2rVGpbDzFtDE9P_lgAAAEI"]
[Sun Dec 14 21:15:23.700689 2025] [:error] [pid 40596:tid 40630] [client 4.197.76.171:30140] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aT64a2vZZo4N2X7WoLyjxwAAAcQ"]
[Sun Dec 14 21:15:24.613186 2025] [:error] [pid 40595:tid 40610] [client 4.197.76.171:31002] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aT64bPjrht6y4RN-xKQxGQAAAYs"]
[Sun Dec 14 21:15:31.142298 2025] [:error] [pid 39524:tid 39572] [client 4.197.76.171:28326] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aT64c2rVGpbDzFtDE9P_oQAAAFA"]
[Sun Dec 14 21:15:32.608871 2025] [:error] [pid 40561:tid 40572] [client 4.197.76.171:28304] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aT64dIY6r869zoqRQkTmQQAAAUc"]
[Sun Dec 14 21:15:35.401238 2025] [:error] [pid 41600:tid 41606] [client 4.197.76.171:27245] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aT64d9FLTBZjcwNd_VssUwAAAQM"]
[Sun Dec 14 21:15:47.833157 2025] [:error] [pid 41600:tid 41627] [client 4.197.76.171:3149] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aT64g9FLTBZjcwNd_VssagAAARg"]
[Sun Dec 14 21:15:51.218119 2025] [:error] [pid 40595:tid 40603] [client 4.197.76.171:3141] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aT64h_jrht6y4RN-xKQxLAAAAYQ"]
[Sun Dec 14 21:15:52.136313 2025] [:error] [pid 13799:tid 13808] [client 4.197.76.171:30972] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aT64iHjPEin01ElFTNZPcAAAAgY"]
[Sun Dec 14 21:15:58.194326 2025] [:error] [pid 39614:tid 39616] [client 4.197.76.171:29817] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aT64jvxybG8-9MflbDeBbgAAAMA"]
[Sun Dec 14 21:16:04.472688 2025] [:error] [pid 41600:tid 41620] [client 4.197.76.171:3197] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aT64lNFLTBZjcwNd_VsslQAAARE"]
[Sun Dec 14 21:16:05.516500 2025] [:error] [pid 13799:tid 13804] [client 4.197.76.171:56464] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aT64lXjPEin01ElFTNZPiwAAAgI"]
[Sun Dec 14 21:16:05.817619 2025] [:error] [pid 39614:tid 39639] [client 4.197.76.171:29786] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aT64lfxybG8-9MflbDeBgwAAANc"]
[Sun Dec 14 21:16:07.540081 2025] [:error] [pid 40561:tid 40566] [client 4.197.76.171:29611] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aT64l4Y6r869zoqRQkTmXQAAAUE"]
[Sun Dec 14 21:16:14.193038 2025] [:error] [pid 40561:tid 40588] [client 4.197.76.171:3751] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aT64noY6r869zoqRQkTmcAAAAVc"]
[Sun Dec 14 21:16:14.680170 2025] [:error] [pid 13799:tid 13823] [client 4.197.76.171:26827] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aT64nnjPEin01ElFTNZPowAAAhU"]
[Sun Dec 14 21:16:17.099933 2025] [:error] [pid 40595:tid 40603] [client 4.197.76.171:29787] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aT64ofjrht6y4RN-xKQxhQAAAYQ"]
[Sun Dec 14 21:16:17.771360 2025] [:error] [pid 41600:tid 41613] [client 4.197.76.171:3553] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aT64odFLTBZjcwNd_VsspgAAAQo"]
[Sun Dec 14 21:16:18.844917 2025] [:error] [pid 39523:tid 39535] [client 4.197.76.171:3738] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aT64ojQTQH1raAj2lkj0pAAAAAc"]
[Sun Dec 14 21:16:23.458426 2025] [:error] [pid 39525:tid 39586] [client 4.197.76.171:25973] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aT64p01fX_pB_BrvE_5cUgAAAIM"]
[Sun Dec 14 21:16:29.721092 2025] [:error] [pid 39524:tid 39560] [client 4.197.76.171:31623] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aT64rWrVGpbDzFtDE9P_5AAAAEQ"]
[Sun Dec 14 21:16:31.326279 2025] [:error] [pid 40561:tid 40586] [client 4.197.76.171:21184] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aT64r4Y6r869zoqRQkTmhwAAAVU"]
[Sun Dec 14 21:16:38.535469 2025] [:error] [pid 39614:tid 39636] [client 4.197.76.171:3528] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aT64tvxybG8-9MflbDeBtAAAANQ"]
[Sun Dec 14 21:16:41.993446 2025] [:error] [pid 39524:tid 39563] [client 4.197.76.171:30405] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aT64uWrVGpbDzFtDE9P_9gAAAEc"]
[Sun Dec 14 21:16:42.590347 2025] [:error] [pid 13799:tid 13809] [client 4.197.76.171:61748] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aT64unjPEin01ElFTNZPxwAAAgc"]
[Sun Dec 14 21:16:44.931698 2025] [:error] [pid 13799:tid 13818] [client 4.197.76.171:4087] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aT64vHjPEin01ElFTNZP1AAAAhA"]
[Sun Dec 14 21:16:48.124602 2025] [:error] [pid 40596:tid 40647] [client 4.197.76.171:4085] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aT64wGvZZo4N2X7WoLykLQAAAdU"]
[Sun Dec 14 21:16:49.894154 2025] [:error] [pid 13799:tid 13809] [client 4.197.76.171:3435] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aT64wXjPEin01ElFTNZP2wAAAgc"]
[Sun Dec 14 21:16:52.225942 2025] [:error] [pid 13799:tid 13803] [client 4.197.76.171:29099] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aT64xHjPEin01ElFTNZP3QAAAgE"]
[Sun Dec 14 21:16:52.640112 2025] [:error] [pid 39524:tid 39571] [client 4.197.76.171:29074] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aT64xGrVGpbDzFtDE9MABgAAAE8"]
[Sun Dec 14 21:16:54.179610 2025] [:error] [pid 39525:tid 39595] [client 4.197.76.171:29077] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aT64xk1fX_pB_BrvE_5ccQAAAIw"]
[Sun Dec 14 21:16:58.400602 2025] [:error] [pid 39523:tid 39549] [client 4.197.76.171:20951] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aT64yjQTQH1raAj2lkj0wQAAABU"]
[Sun Dec 14 21:17:00.043667 2025] [:error] [pid 39524:tid 39574] [client 4.197.76.171:31535] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aT64zGrVGpbDzFtDE9MAEQAAAFI"]
[Sun Dec 14 21:17:06.425285 2025] [:error] [pid 40596:tid 40627] [client 4.197.76.171:31488] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aT640mvZZo4N2X7WoLykPgAAAcE"]
[Sun Dec 14 21:17:08.891115 2025] [:error] [pid 39614:tid 39631] [client 4.197.76.171:30470] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aT641PxybG8-9MflbDeBxwAAAM8"]
[Sun Dec 14 21:17:12.615873 2025] [:error] [pid 39614:tid 39635] [client 4.197.76.171:29374] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aT642PxybG8-9MflbDeB4gAAANM"]
[Sun Dec 14 21:17:24.917046 2025] [:error] [pid 41600:tid 41605] [client 4.197.76.171:3995] [client 4.197.76.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.76.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aT645NFLTBZjcwNd_VstKQAAAQI"]
[Sun Dec 14 21:17:24.922337 2025] [proxy_fcgi:error] [pid 41600:tid 41605] [client 4.197.76.171:3995] AH01071: Got error 'Primary script unknown'
[Sun Dec 14 21:17:25.061484 2025] [:error] [pid 41600:tid 41612] [client 4.197.76.171:3995] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aT645dFLTBZjcwNd_VstLAAAAQk"]
[Sun Dec 14 21:17:25.718706 2025] [:error] [pid 40596:tid 40627] [client 4.197.76.171:3094] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aT645WvZZo4N2X7WoLykSAAAAcE"]
[Sun Dec 14 21:17:33.990115 2025] [:error] [pid 40596:tid 40647] [client 4.197.76.171:31726] [client 4.197.76.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.76.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aT647WvZZo4N2X7WoLykTwAAAdU"]
[Sun Dec 14 21:17:40.562534 2025] [:error] [pid 39525:tid 39589] [client 4.197.76.171:29880] [client 4.197.76.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.76.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aT649E1fX_pB_BrvE_5cuAAAAIY"]
[Sun Dec 14 21:17:41.565260 2025] [:error] [pid 41600:tid 41625] [client 4.197.76.171:21163] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aT649dFLTBZjcwNd_VstQwAAARY"]
[Sun Dec 14 21:17:42.478840 2025] [:error] [pid 40595:tid 40616] [client 4.197.76.171:21155] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aT649vjrht6y4RN-xKQyTwAAAZE"]
[Sun Dec 14 21:17:44.767799 2025] [:error] [pid 39525:tid 39604] [client 4.197.76.171:24870] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aT64-E1fX_pB_BrvE_5c0AAAAJU"]
[Sun Dec 14 21:17:47.327306 2025] [:error] [pid 40595:tid 40612] [client 4.197.76.171:26808] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aT64-_jrht6y4RN-xKQyVAAAAY0"]
[Sun Dec 14 21:17:57.091608 2025] [:error] [pid 39524:tid 39572] [client 4.197.76.171:29878] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aT65BWrVGpbDzFtDE9MBKAAAAFA"]
[Sun Dec 14 21:17:58.511223 2025] [:error] [pid 41600:tid 41619] [client 4.197.76.171:3194] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signin.php"] [unique_id "aT65BtFLTBZjcwNd_VstYwAAARA"]
[Sun Dec 14 21:18:02.020009 2025] [:error] [pid 39523:tid 39532] [client 4.197.76.171:56510] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signin.php"] [unique_id "aT65CjQTQH1raAj2lkj1LgAAAAQ"]
[Sun Dec 14 21:18:03.357703 2025] [:error] [pid 40596:tid 40635] [client 4.197.76.171:3163] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signin.php"] [unique_id "aT65C2vZZo4N2X7WoLykdAAAAck"]
[Sun Dec 14 21:18:04.594336 2025] [:error] [pid 39525:tid 39587] [client 4.197.76.171:3154] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aT65DE1fX_pB_BrvE_5c3QAAAIQ"]
[Sun Dec 14 21:18:05.664908 2025] [:error] [pid 13799:tid 13803] [client 4.197.76.171:29615] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aT65DXjPEin01ElFTNZQZwAAAgE"]
[Sun Dec 14 21:18:06.964272 2025] [:error] [pid 39523:tid 39552] [client 4.197.76.171:56475] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shoyo.php"] [unique_id "aT65DjQTQH1raAj2lkj1LwAAABg"]
[Sun Dec 14 21:18:10.891756 2025] [:error] [pid 41600:tid 41622] [client 4.197.76.171:26842] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shoyo.php"] [unique_id "aT65EtFLTBZjcwNd_VstZQAAARM"]
[Sun Dec 14 21:18:18.416306 2025] [:error] [pid 41600:tid 41610] [client 4.197.76.171:29614] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shoyo.php"] [unique_id "aT65GtFLTBZjcwNd_VstbgAAAQc"]
[Sun Dec 14 21:18:20.044242 2025] [:error] [pid 39524:tid 39567] [client 4.197.76.171:26817] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shoyo.php"] [unique_id "aT65HGrVGpbDzFtDE9MBXQAAAEs"]
[Sun Dec 14 21:18:20.597661 2025] [:error] [pid 39525:tid 39605] [client 4.197.76.171:31517] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aT65HE1fX_pB_BrvE_5c7gAAAJY"]
[Sun Dec 14 21:18:21.688064 2025] [:error] [pid 41600:tid 41622] [client 4.197.76.171:3181] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aT65HdFLTBZjcwNd_VstcQAAARM"]
[Sun Dec 14 21:18:23.495564 2025] [:error] [pid 41600:tid 41611] [client 4.197.76.171:27239] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aT65H9FLTBZjcwNd_VstcwAAAQg"]
[Sun Dec 14 21:18:24.260752 2025] [:error] [pid 41600:tid 41615] [client 4.197.76.171:31490] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aT65INFLTBZjcwNd_VstdQAAAQw"]
[Sun Dec 14 21:18:26.783135 2025] [:error] [pid 40561:tid 40583] [client 4.197.76.171:56499] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waq.php"] [unique_id "aT65IoY6r869zoqRQkTnTwAAAVI"]
[Sun Dec 14 21:18:27.883675 2025] [:error] [pid 39523:tid 39541] [client 4.197.76.171:26822] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waq.php"] [unique_id "aT65IzQTQH1raAj2lkj1OgAAAA0"]
[Sun Dec 14 21:18:28.601041 2025] [:error] [pid 39614:tid 39628] [client 4.197.76.171:29600] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waq.php"] [unique_id "aT65JPxybG8-9MflbDeChQAAAMw"]
[Sun Dec 14 21:18:29.006275 2025] [:error] [pid 40595:tid 40608] [client 4.197.76.171:26832] [client 4.197.76.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waq.php"] [unique_id "aT65Jfjrht6y4RN-xKQyagAAAYk"]
[Sun Dec 14 21:18:41.891161 2025] [:error] [pid 40595:tid 40611] [client 4.197.76.171:26844] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aT65Mfjrht6y4RN-xKQyfQAAAYw"]
[Sun Dec 14 21:18:42.476740 2025] [:error] [pid 39614:tid 39623] [client 4.197.76.171:29598] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aT65MvxybG8-9MflbDeClgAAAMc"]
[Sun Dec 14 21:18:45.794862 2025] [:error] [pid 39525:tid 39591] [client 4.197.76.171:30920] [client 4.197.76.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.76.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/img/wp-login.php"] [unique_id "aT65NU1fX_pB_BrvE_5dBQAAAIg"]
[Sun Dec 14 21:18:45.816475 2025] [:error] [pid 13799:tid 13810] [client 4.197.76.171:3192] [client 4.197.76.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.197.76.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/img/wp-login.php"] [unique_id "aT65NXjPEin01ElFTNZQ6AAAAgg"]
[Sun Dec 14 21:18:45.966032 2025] [:error] [pid 39525:tid 39589] [client 4.197.76.171:30920] [client 4.197.76.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/0.php"] [unique_id "aT65NU1fX_pB_BrvE_5dCAAAAIY"]
[Mon Dec 15 01:51:12.636029 2025] [:error] [pid 8430:tid 8444] [client 125.75.66.97:39573] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aT75EFk7yXaRc6dQclgwnQAAAMs"]
[Mon Dec 15 06:50:26.139629 2025] [:error] [pid 9882:tid 9900] [client 170.106.110.146:38200] [client 170.106.110.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aT8_MnNmFf4TNOnZQ07pagAAARA"]
[Mon Dec 15 10:57:35.929872 2025] [:error] [pid 44555:tid 44571] [client 177.73.202.96:11326] [client 177.73.202.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.73.202.96, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aT95H2DHW0g-e9AKPr6ewwAAAE4"]
[Mon Dec 15 15:01:08.788801 2025] [:error] [pid 39826:tid 39845] [client 34.227.172.142:34354] [client 34.227.172.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/actions"] [unique_id "aT-yNIdXWIOU_2oL0XZwXQAAAI4"]
[Mon Dec 15 15:01:09.606180 2025] [:error] [pid 39829:tid 39886] [client 34.227.172.142:34476] [client 34.227.172.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_next/data"] [unique_id "aT-yNWegGfxg5ldkNeiWVQAAAYE"]
[Mon Dec 15 15:01:10.424140 2025] [:error] [pid 39828:tid 39879] [client 34.227.172.142:34504] [client 34.227.172.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aT-yNu0Kj9XWFkRmVbQRwgAAANU"]
[Mon Dec 15 23:38:15.204741 2025] [:error] [pid 31459:tid 31477] [client 34.168.8.133:60951] [client 34.168.8.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.8.133, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUArZzqerS0TDpViRzvCVQAAABA"]
[Mon Dec 15 23:38:16.751854 2025] [:error] [pid 31459:tid 31481] [client 34.168.8.133:60951] [client 34.168.8.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aUAraDqerS0TDpViRzvCXQAAABQ"]
[Mon Dec 15 23:38:17.495620 2025] [:error] [pid 31372:tid 31398] [client 34.168.8.133:60441] [client 34.168.8.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aUAraQN06qRtpJxyxHjvBgAAAJY"]
[Mon Dec 15 23:38:18.215018 2025] [:error] [pid 31459:tid 31478] [client 34.168.8.133:51470] [client 34.168.8.133] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aUArajqerS0TDpViRzvCYQAAABE"]
[Tue Dec 16 00:39:45.580624 2025] [:error] [pid 34409:tid 34417] [client 52.169.205.102:4001] [client 52.169.205.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pu.php"] [unique_id "aUA50Ywgv-_jDvPU81FwkwAAAMM"]
[Tue Dec 16 03:16:41.231282 2025] [:error] [pid 34409:tid 34426] [client 129.226.93.214:40142] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUBemYwgv-_jDvPU81GnNAAAAMw"]
[Tue Dec 16 09:37:00.392297 2025] [:error] [pid 18323:tid 18372] [client 187.45.59.9:27182] [client 187.45.59.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.45.59.9, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUC3vDJB6UFxIutsA8aTtAAAAFM"]
[Tue Dec 16 09:37:21.269213 2025] [:error] [pid 18322:tid 18344] [client 201.42.217.212:51310] [client 201.42.217.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.42.217.212, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUC30ZsCeWBjrw28XtxcwgAAABI"]
[Tue Dec 16 13:05:33.049444 2025] [:error] [pid 53940:tid 53965] [client 216.24.210.42:40603] [client 216.24.210.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.210.42, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUDonV91PNbcXLVkpR6OvAAAAdY"]
[Tue Dec 16 17:32:54.326958 2025] [:error] [pid 18324:tid 18383] [client 137.184.119.58:55778] [client 137.184.119.58] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 137.184.119.58, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUEnRqG4um2mD1VpJHJ-3gAAAIM"]
[Tue Dec 16 17:32:56.320820 2025] [:error] [pid 18324:tid 18384] [client 137.184.119.58:55778] [client 137.184.119.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aUEnSKG4um2mD1VpJHJ-6QAAAIQ"]
[Tue Dec 16 17:32:56.976848 2025] [:error] [pid 18323:tid 18366] [client 137.184.119.58:58554] [client 137.184.119.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aUEnSDJB6UFxIutsA8YSoAAAAE0"]
[Tue Dec 16 17:32:57.631633 2025] [:error] [pid 18323:tid 18377] [client 137.184.119.58:59183] [client 137.184.119.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aUEnSTJB6UFxIutsA8YSowAAAFg"]
[Tue Dec 16 17:32:58.284623 2025] [:error] [pid 18322:tid 18341] [client 137.184.119.58:59778] [client 137.184.119.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aUEnSpsCeWBjrw28XtzuBQAAAA8"]
[Tue Dec 16 17:32:58.937452 2025] [:error] [pid 18323:tid 18370] [client 137.184.119.58:60366] [client 137.184.119.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aUEnSjJB6UFxIutsA8YSpQAAAFE"]
[Tue Dec 16 17:32:59.589899 2025] [:error] [pid 18324:tid 18399] [client 137.184.119.58:61037] [client 137.184.119.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aUEnS6G4um2mD1VpJHJ-7QAAAJM"]
[Tue Dec 16 17:33:00.244914 2025] [:error] [pid 18324:tid 18396] [client 137.184.119.58:61651] [client 137.184.119.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aUEnTKG4um2mD1VpJHJ-8AAAAJA"]
[Tue Dec 16 21:07:43.503423 2025] [:error] [pid 18323:tid 18369] [client 36.41.75.167:43149] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUFZnzJB6UFxIutsA8Y9jgAAAFA"]
[Tue Dec 16 21:45:27.424578 2025] [:error] [pid 18323:tid 18360] [client 49.51.233.46:44238] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUFidzJB6UFxIutsA8ZGzQAAAEc"]
[Wed Dec 17 03:19:06.818174 2025] [:error] [pid 64835:tid 64857] [client 114.96.103.33:55082] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUGwqu0_iNx32Sz58ML69QAAABI"]
[Wed Dec 17 05:08:08.636716 2025] [:error] [pid 13302:tid 13306] [client 179.131.141.115:59330] [client 179.131.141.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.131.141.115, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUHKOBDfKV-_W5RvJZ9jNQAAAMI"]
[Wed Dec 17 09:16:05.915196 2025] [:error] [pid 45531:tid 45583] [client 49.233.45.47:58136] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUIEVYjuE-Fd-sBWjvWSgwAAAFQ"]
[Wed Dec 17 15:20:46.118976 2025] [:error] [pid 45530:tid 45535] [client 106.54.62.156:55334] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUJZzm4IsXcKlf7LWf-YjgAAAAA"]
[Wed Dec 17 16:52:40.154831 2025] [:error] [pid 45530:tid 45541] [client 48.210.86.124:25317] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "aUJvWG4IsXcKlf7LWf_RaAAAAAY"]
[Wed Dec 17 16:52:41.921047 2025] [:error] [pid 11733:tid 11756] [client 48.210.86.124:25339] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "aUJvWTzmtBRXExJb1PHdXgAAARU"]
[Wed Dec 17 16:52:43.397669 2025] [:error] [pid 45532:tid 45607] [client 48.210.86.124:25327] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "aUJvWweWB-JXOyTKNs3-4wAAAJE"]
[Wed Dec 17 16:52:45.022305 2025] [:error] [pid 45621:tid 45650] [client 48.210.86.124:5071] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "aUJvXeVNGQfJ1rR90pQbswAAANg"]
[Wed Dec 17 16:52:46.908719 2025] [:error] [pid 45532:tid 45611] [client 48.210.86.124:5079] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sid.php"] [unique_id "aUJvXgeWB-JXOyTKNs3-5wAAAJU"]
[Wed Dec 17 16:52:47.523354 2025] [:error] [pid 45531:tid 45574] [client 48.210.86.124:25294] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sid.php"] [unique_id "aUJvX4juE-Fd-sBWjvVB8AAAAEs"]
[Wed Dec 17 16:52:48.596255 2025] [:error] [pid 45621:tid 45642] [client 48.210.86.124:5073] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sid.php"] [unique_id "aUJvYOVNGQfJ1rR90pQbwwAAANA"]
[Wed Dec 17 16:52:50.139664 2025] [:error] [pid 45530:tid 45540] [client 48.210.86.124:25329] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sid.php"] [unique_id "aUJvYm4IsXcKlf7LWf_RjAAAAAU"]
[Wed Dec 17 16:52:51.044566 2025] [:error] [pid 45530:tid 45539] [client 48.210.86.124:25291] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aUJvY24IsXcKlf7LWf_RjwAAAAQ"]
[Wed Dec 17 16:52:52.104039 2025] [:error] [pid 45531:tid 45583] [client 48.210.86.124:25287] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aUJvZIjuE-Fd-sBWjvVB-AAAAFQ"]
[Wed Dec 17 16:52:52.976925 2025] [:error] [pid 45531:tid 45566] [client 48.210.86.124:25298] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aUJvZIjuE-Fd-sBWjvVB-wAAAEM"]
[Wed Dec 17 16:52:53.442721 2025] [:error] [pid 45531:tid 45567] [client 48.210.86.124:25303] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aUJvZYjuE-Fd-sBWjvVB_QAAAEQ"]
[Wed Dec 17 16:52:54.533219 2025] [:error] [pid 45530:tid 45538] [client 48.210.86.124:5063] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUJvZm4IsXcKlf7LWf_RlQAAAAM"]
[Wed Dec 17 16:52:55.643090 2025] [:error] [pid 45621:tid 45646] [client 48.210.86.124:25289] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUJvZ-VNGQfJ1rR90pQb3gAAANQ"]
[Wed Dec 17 16:52:56.910641 2025] [:error] [pid 45532:tid 45605] [client 48.210.86.124:4998] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUJvaAeWB-JXOyTKNs3-8AAAAI8"]
[Wed Dec 17 16:52:58.178622 2025] [:error] [pid 45530:tid 45545] [client 48.210.86.124:5009] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUJvam4IsXcKlf7LWf_RnwAAAAo"]
[Wed Dec 17 16:52:59.802978 2025] [:error] [pid 11733:tid 11736] [client 48.210.86.124:25306] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUJvazzmtBRXExJb1PHdzQAAAQE"]
[Wed Dec 17 16:53:01.439446 2025] [:error] [pid 45621:tid 45635] [client 48.210.86.124:25314] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUJvbeVNGQfJ1rR90pQb6gAAAMk"]
[Wed Dec 17 16:53:02.424501 2025] [:error] [pid 45532:tid 45593] [client 48.210.86.124:25342] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUJvbgeWB-JXOyTKNs3-9wAAAIM"]
[Wed Dec 17 16:53:03.603934 2025] [:error] [pid 45532:tid 45592] [client 48.210.86.124:25332] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUJvbweWB-JXOyTKNs3-_wAAAII"]
[Wed Dec 17 16:53:04.547670 2025] [:error] [pid 45621:tid 45632] [client 48.210.86.124:25341] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-title.php"] [unique_id "aUJvcOVNGQfJ1rR90pQb9wAAAMY"]
[Wed Dec 17 16:53:06.507955 2025] [:error] [pid 45530:tid 45559] [client 48.210.86.124:25338] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-title.php"] [unique_id "aUJvcm4IsXcKlf7LWf_RtAAAABg"]
[Wed Dec 17 16:53:07.577513 2025] [:error] [pid 45621:tid 45627] [client 48.210.86.124:5066] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-title.php"] [unique_id "aUJvc-VNGQfJ1rR90pQcAQAAAME"]
[Wed Dec 17 16:53:08.865623 2025] [:error] [pid 11733:tid 11744] [client 48.210.86.124:5074] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-title.php"] [unique_id "aUJvdDzmtBRXExJb1PHd7wAAAQk"]
[Wed Dec 17 16:53:10.331256 2025] [:error] [pid 45621:tid 45639] [client 48.210.86.124:5113] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aUJvduVNGQfJ1rR90pQcCAAAAM0"]
[Wed Dec 17 16:53:12.009313 2025] [:error] [pid 45532:tid 45592] [client 48.210.86.124:25343] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aUJveAeWB-JXOyTKNs3_BwAAAII"]
[Wed Dec 17 16:53:13.888590 2025] [:error] [pid 45532:tid 45610] [client 48.210.86.124:25304] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aUJveQeWB-JXOyTKNs3_CwAAAJQ"]
[Wed Dec 17 16:53:14.765034 2025] [:error] [pid 45531:tid 45566] [client 48.210.86.124:25292] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aUJveojuE-Fd-sBWjvVCGgAAAEM"]
[Wed Dec 17 16:53:15.360067 2025] [:error] [pid 45531:tid 45577] [client 48.210.86.124:5110] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-home.php"] [unique_id "aUJve4juE-Fd-sBWjvVCHgAAAE4"]
[Wed Dec 17 16:53:16.245858 2025] [:error] [pid 45531:tid 45584] [client 48.210.86.124:25300] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-home.php"] [unique_id "aUJvfIjuE-Fd-sBWjvVCKwAAAFU"]
[Wed Dec 17 16:53:17.330925 2025] [:error] [pid 45532:tid 45592] [client 48.210.86.124:25313] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-home.php"] [unique_id "aUJvfQeWB-JXOyTKNs3_FwAAAII"]
[Wed Dec 17 16:53:18.065151 2025] [:error] [pid 45530:tid 45546] [client 48.210.86.124:5042] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-home.php"] [unique_id "aUJvfm4IsXcKlf7LWf_R0wAAAAs"]
[Wed Dec 17 16:53:19.521097 2025] [:error] [pid 45530:tid 45559] [client 48.210.86.124:5096] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aUJvf24IsXcKlf7LWf_R2AAAABg"]
[Wed Dec 17 16:53:20.962698 2025] [:error] [pid 45531:tid 45571] [client 48.210.86.124:25321] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aUJvgIjuE-Fd-sBWjvVCYwAAAEg"]
[Wed Dec 17 16:53:22.890856 2025] [:error] [pid 45621:tid 45636] [client 48.210.86.124:5069] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aUJvguVNGQfJ1rR90pQcHQAAAMo"]
[Wed Dec 17 16:53:24.132111 2025] [:error] [pid 45530:tid 45551] [client 48.210.86.124:5111] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aUJvhG4IsXcKlf7LWf_R5AAAABA"]
[Wed Dec 17 16:53:25.141373 2025] [:error] [pid 45532:tid 45599] [client 48.210.86.124:25295] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atex1.php"] [unique_id "aUJvhQeWB-JXOyTKNs3_agAAAIk"]
[Wed Dec 17 16:53:25.942944 2025] [:error] [pid 45531:tid 45573] [client 48.210.86.124:5056] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atex1.php"] [unique_id "aUJvhYjuE-Fd-sBWjvVCjQAAAEo"]
[Wed Dec 17 16:53:27.833750 2025] [:error] [pid 11733:tid 11739] [client 48.210.86.124:25320] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atex1.php"] [unique_id "aUJvhzzmtBRXExJb1PHeMQAAAQQ"]
[Wed Dec 17 16:53:28.632134 2025] [:error] [pid 45531:tid 45577] [client 48.210.86.124:5106] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atex1.php"] [unique_id "aUJviIjuE-Fd-sBWjvVCpwAAAE4"]
[Wed Dec 17 16:53:30.321887 2025] [:error] [pid 11733:tid 11754] [client 48.210.86.124:25307] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdgok.php"] [unique_id "aUJvijzmtBRXExJb1PHePgAAARM"]
[Wed Dec 17 16:53:31.620583 2025] [:error] [pid 45532:tid 45609] [client 48.210.86.124:4995] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdgok.php"] [unique_id "aUJviweWB-JXOyTKNs3_gAAAAJM"]
[Wed Dec 17 16:53:32.991037 2025] [:error] [pid 45532:tid 45600] [client 48.210.86.124:5076] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdgok.php"] [unique_id "aUJvjAeWB-JXOyTKNs3_hwAAAIo"]
[Wed Dec 17 16:53:34.288464 2025] [:error] [pid 45621:tid 45637] [client 48.210.86.124:25284] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdgok.php"] [unique_id "aUJvjuVNGQfJ1rR90pQcSwAAAMs"]
[Wed Dec 17 16:53:35.952835 2025] [:error] [pid 45530:tid 45551] [client 48.210.86.124:25288] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "aUJvj24IsXcKlf7LWf_SRQAAABA"]
[Wed Dec 17 16:53:38.049845 2025] [:error] [pid 45621:tid 45628] [client 48.210.86.124:5080] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "aUJvkuVNGQfJ1rR90pQcWgAAAMI"]
[Wed Dec 17 16:53:44.750508 2025] [:error] [pid 45530:tid 45555] [client 48.210.86.124:5107] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUJvmG4IsXcKlf7LWf_SagAAABQ"]
[Wed Dec 17 16:53:45.693617 2025] [:error] [pid 11733:tid 11754] [client 48.210.86.124:5077] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUJvmTzmtBRXExJb1PHeZgAAARM"]
[Wed Dec 17 16:53:47.414992 2025] [:error] [pid 11733:tid 11755] [client 48.210.86.124:25328] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUJvmzzmtBRXExJb1PHebAAAARQ"]
[Wed Dec 17 16:53:48.152504 2025] [:error] [pid 45530:tid 45546] [client 48.210.86.124:25340] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-securitiy.php"] [unique_id "aUJvnG4IsXcKlf7LWf_ScwAAAAs"]
[Wed Dec 17 16:53:48.686332 2025] [:error] [pid 11733:tid 11759] [client 48.210.86.124:5004] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUJvnDzmtBRXExJb1PHecAAAARg"]
[Wed Dec 17 16:53:49.195002 2025] [:error] [pid 45532:tid 45595] [client 48.210.86.124:5061] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUJvnQeWB-JXOyTKNs3_qgAAAIU"]
[Wed Dec 17 16:53:50.414879 2025] [:error] [pid 11733:tid 11736] [client 48.210.86.124:5097] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUJvnjzmtBRXExJb1PHedwAAAQE"]
[Wed Dec 17 16:53:51.336986 2025] [:error] [pid 11733:tid 11748] [client 48.210.86.124:25324] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUJvnzzmtBRXExJb1PHefQAAAQ0"]
[Wed Dec 17 16:53:53.356904 2025] [:error] [pid 45621:tid 45646] [client 48.210.86.124:25334] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ac.php"] [unique_id "aUJvoeVNGQfJ1rR90pQcdwAAANQ"]
[Wed Dec 17 16:53:54.496832 2025] [:error] [pid 45531:tid 45587] [client 48.210.86.124:25299] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ac.php"] [unique_id "aUJvoojuE-Fd-sBWjvVC0AAAAFg"]
[Wed Dec 17 16:53:55.015546 2025] [:error] [pid 45530:tid 45546] [client 48.210.86.124:25283] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ac.php"] [unique_id "aUJvo24IsXcKlf7LWf_SjgAAAAs"]
[Wed Dec 17 16:53:56.230929 2025] [:error] [pid 45530:tid 45556] [client 48.210.86.124:25333] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ac.php"] [unique_id "aUJvpG4IsXcKlf7LWf_SlAAAABU"]
[Wed Dec 17 16:53:56.829268 2025] [:error] [pid 45530:tid 45536] [client 48.210.86.124:5099] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/krypton.php"] [unique_id "aUJvpG4IsXcKlf7LWf_SmAAAAAE"]
[Wed Dec 17 16:53:57.450633 2025] [:error] [pid 45530:tid 45537] [client 48.210.86.124:25312] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/krypton.php"] [unique_id "aUJvpW4IsXcKlf7LWf_SmQAAAAI"]
[Wed Dec 17 16:53:57.887916 2025] [:error] [pid 45532:tid 45606] [client 48.210.86.124:25318] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/krypton.php"] [unique_id "aUJvpQeWB-JXOyTKNs3_tAAAAJA"]
[Wed Dec 17 16:53:58.857044 2025] [:error] [pid 11733:tid 11743] [client 48.210.86.124:5078] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/krypton.php"] [unique_id "aUJvpjzmtBRXExJb1PHejwAAAQg"]
[Wed Dec 17 16:54:01.168107 2025] [:error] [pid 45530:tid 45538] [client 48.210.86.124:5065] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUJvqW4IsXcKlf7LWf_SogAAAAM"]
[Wed Dec 17 16:54:03.321320 2025] [:error] [pid 45532:tid 45613] [client 48.210.86.124:25281] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUJvqweWB-JXOyTKNs3_vwAAAJc"]
[Wed Dec 17 16:54:06.789628 2025] [:error] [pid 45530:tid 45558] [client 48.210.86.124:25316] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUJvrm4IsXcKlf7LWf_SrwAAABc"]
[Wed Dec 17 16:54:07.233274 2025] [:error] [pid 45530:tid 45539] [client 48.210.86.124:25325] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUJvr24IsXcKlf7LWf_SsAAAAAQ"]
[Wed Dec 17 16:54:07.779563 2025] [:error] [pid 45530:tid 45538] [client 48.210.86.124:5011] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fc72f.php"] [unique_id "aUJvr24IsXcKlf7LWf_SsgAAAAM"]
[Wed Dec 17 16:54:08.422615 2025] [:error] [pid 45530:tid 45540] [client 48.210.86.124:5012] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fc72f.php"] [unique_id "aUJvsG4IsXcKlf7LWf_StgAAAAU"]
[Wed Dec 17 16:54:09.867664 2025] [:error] [pid 45530:tid 45545] [client 48.210.86.124:4954] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fc72f.php"] [unique_id "aUJvsW4IsXcKlf7LWf_StwAAAAo"]
[Wed Dec 17 16:54:12.261760 2025] [:error] [pid 45621:tid 45627] [client 48.210.86.124:5095] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fc72f.php"] [unique_id "aUJvtOVNGQfJ1rR90pQcgQAAAME"]
[Wed Dec 17 16:54:14.715585 2025] [:error] [pid 45530:tid 45535] [client 48.210.86.124:5098] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUJvtm4IsXcKlf7LWf_SyAAAAAA"]
[Wed Dec 17 16:54:17.135232 2025] [:error] [pid 45530:tid 45552] [client 48.210.86.124:4997] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUJvuW4IsXcKlf7LWf_SzgAAABE"]
[Wed Dec 17 16:54:19.283539 2025] [:error] [pid 45530:tid 45535] [client 48.210.86.124:4994] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUJvu24IsXcKlf7LWf_S1QAAAAA"]
[Wed Dec 17 16:54:21.119124 2025] [:error] [pid 45530:tid 45559] [client 48.210.86.124:25280] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUJvvW4IsXcKlf7LWf_S3AAAABg"]
[Wed Dec 17 16:54:22.228302 2025] [:error] [pid 45531:tid 45572] [client 48.210.86.124:5115] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jjrpo.php"] [unique_id "aUJvvojuE-Fd-sBWjvVC-wAAAEk"]
[Wed Dec 17 16:54:23.634564 2025] [:error] [pid 45532:tid 45591] [client 48.210.86.124:4943] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jjrpo.php"] [unique_id "aUJvvweWB-JXOyTKNs3_4QAAAIE"]
[Wed Dec 17 16:54:25.052097 2025] [:error] [pid 45531:tid 45581] [client 48.210.86.124:5059] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jjrpo.php"] [unique_id "aUJvwYjuE-Fd-sBWjvVDCQAAAFI"]
[Wed Dec 17 16:54:26.488615 2025] [:error] [pid 45532:tid 45595] [client 48.210.86.124:25330] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jjrpo.php"] [unique_id "aUJvwgeWB-JXOyTKNs3_6AAAAIU"]
[Wed Dec 17 16:54:27.946885 2025] [:error] [pid 45621:tid 45634] [client 48.210.86.124:5087] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aUJvw-VNGQfJ1rR90pQclwAAAMg"]
[Wed Dec 17 16:54:28.566126 2025] [:error] [pid 45530:tid 45540] [client 48.210.86.124:25315] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aUJvxG4IsXcKlf7LWf_S5QAAAAU"]
[Wed Dec 17 16:54:29.579165 2025] [:error] [pid 45530:tid 45557] [client 48.210.86.124:5070] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aUJvxW4IsXcKlf7LWf_S5wAAABY"]
[Wed Dec 17 16:54:31.694872 2025] [:error] [pid 45530:tid 45558] [client 48.210.86.124:25323] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aUJvx24IsXcKlf7LWf_S6QAAABc"]
[Wed Dec 17 16:54:34.556005 2025] [:error] [pid 45530:tid 45545] [client 48.210.86.124:5030] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-advaced.php"] [unique_id "aUJvym4IsXcKlf7LWf_S8QAAAAo"]
[Wed Dec 17 16:54:35.766879 2025] [:error] [pid 11733:tid 11742] [client 48.210.86.124:5003] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-advaced.php"] [unique_id "aUJvyzzmtBRXExJb1PHe1wAAAQc"]
[Wed Dec 17 16:54:36.936076 2025] [:error] [pid 11733:tid 11736] [client 48.210.86.124:5017] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-advaced.php"] [unique_id "aUJvzDzmtBRXExJb1PHe2gAAAQE"]
[Wed Dec 17 16:54:37.486047 2025] [:error] [pid 45530:tid 45552] [client 48.210.86.124:5016] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-advaced.php"] [unique_id "aUJvzW4IsXcKlf7LWf_S9gAAABE"]
[Wed Dec 17 16:54:38.451365 2025] [:error] [pid 45532:tid 45614] [client 48.210.86.124:25301] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "aUJvzgeWB-JXOyTKNs0ACQAAAJg"]
[Wed Dec 17 16:54:40.174349 2025] [:error] [pid 45530:tid 45536] [client 48.210.86.124:5033] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "aUJv0G4IsXcKlf7LWf_S_wAAAAE"]
[Wed Dec 17 16:54:41.734458 2025] [:error] [pid 45531:tid 45571] [client 48.210.86.124:5101] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "aUJv0YjuE-Fd-sBWjvVDHQAAAEg"]
[Wed Dec 17 16:54:43.474843 2025] [:error] [pid 45530:tid 45553] [client 48.210.86.124:25311] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "aUJv024IsXcKlf7LWf_TCgAAABI"]
[Wed Dec 17 16:54:50.294286 2025] [:error] [pid 45532:tid 45601] [client 48.210.86.124:5116] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm18.php"] [unique_id "aUJv2geWB-JXOyTKNs0ANwAAAIs"]
[Wed Dec 17 16:54:52.724259 2025] [:error] [pid 45530:tid 45548] [client 48.210.86.124:5062] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm18.php"] [unique_id "aUJv3G4IsXcKlf7LWf_TKQAAAA0"]
[Wed Dec 17 16:54:56.001328 2025] [:error] [pid 45532:tid 45610] [client 48.210.86.124:25322] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm18.php"] [unique_id "aUJv4AeWB-JXOyTKNs0ARQAAAJQ"]
[Wed Dec 17 16:54:57.150708 2025] [:error] [pid 45530:tid 45542] [client 48.210.86.124:4949] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm18.php"] [unique_id "aUJv4W4IsXcKlf7LWf_TQwAAAAc"]
[Wed Dec 17 16:55:00.144860 2025] [:error] [pid 45531:tid 45565] [client 48.210.86.124:25337] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "aUJv5IjuE-Fd-sBWjvVDUQAAAEI"]
[Wed Dec 17 16:55:01.904762 2025] [:error] [pid 45530:tid 45536] [client 48.210.86.124:5068] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "aUJv5W4IsXcKlf7LWf_TSgAAAAE"]
[Wed Dec 17 16:55:06.992047 2025] [:error] [pid 45621:tid 45640] [client 48.210.86.124:25302] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "aUJv6uVNGQfJ1rR90pQc5gAAAM4"]
[Wed Dec 17 16:55:15.271857 2025] [:error] [pid 45530:tid 45539] [client 48.210.86.124:5118] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aUJv824IsXcKlf7LWf_TdgAAAAQ"]
[Wed Dec 17 16:55:18.049055 2025] [:error] [pid 45530:tid 45558] [client 48.210.86.124:25297] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aUJv9m4IsXcKlf7LWf_ThQAAABc"]
[Wed Dec 17 16:55:19.400999 2025] [:error] [pid 45530:tid 45547] [client 48.210.86.124:5064] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aUJv924IsXcKlf7LWf_TkQAAAAw"]
[Wed Dec 17 16:55:21.718223 2025] [:error] [pid 45532:tid 45599] [client 48.210.86.124:5119] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aUJv-QeWB-JXOyTKNs0AaAAAAIk"]
[Wed Dec 17 16:55:23.556690 2025] [:error] [pid 45532:tid 45598] [client 48.210.86.124:5092] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "aUJv-weWB-JXOyTKNs0AbQAAAIg"]
[Wed Dec 17 16:55:25.964950 2025] [:error] [pid 45531:tid 45584] [client 48.210.86.124:5082] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "aUJv_YjuE-Fd-sBWjvVDbgAAAFU"]
[Wed Dec 17 16:55:28.312709 2025] [:error] [pid 45621:tid 45629] [client 48.210.86.124:5117] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "aUJwAOVNGQfJ1rR90pQdAQAAAMM"]
[Wed Dec 17 16:55:30.407784 2025] [:error] [pid 11733:tid 11737] [client 48.210.86.124:5075] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "aUJwAjzmtBRXExJb1PHfaAAAAQI"]
[Wed Dec 17 16:55:32.186380 2025] [:error] [pid 45531:tid 45578] [client 48.210.86.124:5023] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ce.php"] [unique_id "aUJwBIjuE-Fd-sBWjvVDewAAAE8"]
[Wed Dec 17 16:55:33.278699 2025] [:error] [pid 45531:tid 45573] [client 48.210.86.124:4960] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ce.php"] [unique_id "aUJwBYjuE-Fd-sBWjvVDfQAAAEo"]
[Wed Dec 17 16:55:34.644538 2025] [:error] [pid 45531:tid 45574] [client 48.210.86.124:5057] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ce.php"] [unique_id "aUJwBojuE-Fd-sBWjvVDhAAAAEs"]
[Wed Dec 17 16:55:35.239683 2025] [:error] [pid 45530:tid 45559] [client 48.210.86.124:5040] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ce.php"] [unique_id "aUJwB24IsXcKlf7LWf_T1QAAABg"]
[Wed Dec 17 16:55:36.347521 2025] [:error] [pid 45531:tid 45580] [client 48.210.86.124:5029] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "aUJwCIjuE-Fd-sBWjvVDiQAAAFE"]
[Wed Dec 17 16:55:38.722094 2025] [:error] [pid 45532:tid 45590] [client 48.210.86.124:5008] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "aUJwCgeWB-JXOyTKNs0AlAAAAIA"]
[Wed Dec 17 16:55:40.992547 2025] [:error] [pid 45530:tid 45554] [client 48.210.86.124:4933] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "aUJwDG4IsXcKlf7LWf_T4AAAABM"]
[Wed Dec 17 16:55:42.889984 2025] [:error] [pid 45530:tid 45556] [client 48.210.86.124:25305] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "aUJwDm4IsXcKlf7LWf_T7wAAABU"]
[Wed Dec 17 16:55:44.965419 2025] [:error] [pid 45621:tid 45630] [client 48.210.86.124:5014] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "aUJwEOVNGQfJ1rR90pQdFgAAAMQ"]
[Wed Dec 17 16:55:46.733941 2025] [:error] [pid 11733:tid 11737] [client 48.210.86.124:4934] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "aUJwEjzmtBRXExJb1PHfjgAAAQI"]
[Wed Dec 17 16:55:47.736419 2025] [:error] [pid 45531:tid 45582] [client 48.210.86.124:5024] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "aUJwE4juE-Fd-sBWjvVDlAAAAFM"]
[Wed Dec 17 16:55:49.093122 2025] [:error] [pid 45530:tid 45542] [client 48.210.86.124:4866] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "aUJwFW4IsXcKlf7LWf_T9AAAAAc"]
[Wed Dec 17 16:55:56.661323 2025] [:error] [pid 45530:tid 45553] [client 48.210.86.124:25293] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUJwHG4IsXcKlf7LWf_UEwAAABI"]
[Wed Dec 17 16:55:57.443940 2025] [:error] [pid 11733:tid 11749] [client 48.210.86.124:5060] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUJwHTzmtBRXExJb1PHfwgAAAQ4"]
[Wed Dec 17 16:55:58.818892 2025] [:error] [pid 45530:tid 45543] [client 48.210.86.124:5006] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUJwHm4IsXcKlf7LWf_UFgAAAAg"]
[Wed Dec 17 16:56:01.389171 2025] [:error] [pid 45530:tid 45541] [client 48.210.86.124:5026] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUJwIW4IsXcKlf7LWf_UIAAAAAY"]
[Wed Dec 17 16:56:04.070830 2025] [:error] [pid 45532:tid 45595] [client 48.210.86.124:5072] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUJwJAeWB-JXOyTKNs0A_QAAAIU"]
[Wed Dec 17 16:56:06.234493 2025] [:error] [pid 45530:tid 45542] [client 48.210.86.124:5005] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUJwJm4IsXcKlf7LWf_UNgAAAAc"]
[Wed Dec 17 16:56:07.029438 2025] [:error] [pid 45621:tid 45637] [client 48.210.86.124:5103] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUJwJ-VNGQfJ1rR90pQdRgAAAMs"]
[Wed Dec 17 16:56:08.520240 2025] [:error] [pid 45531:tid 45572] [client 48.210.86.124:4808] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUJwKIjuE-Fd-sBWjvVD8AAAAEk"]
[Wed Dec 17 16:56:09.307210 2025] [:error] [pid 11733:tid 11749] [client 48.210.86.124:4938] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/783de.php"] [unique_id "aUJwKTzmtBRXExJb1PHf4AAAAQ4"]
[Wed Dec 17 16:56:11.574523 2025] [:error] [pid 45531:tid 45567] [client 48.210.86.124:5045] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/783de.php"] [unique_id "aUJwK4juE-Fd-sBWjvVD_AAAAEQ"]
[Wed Dec 17 16:56:13.458718 2025] [:error] [pid 11733:tid 11736] [client 48.210.86.124:5088] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/783de.php"] [unique_id "aUJwLTzmtBRXExJb1PHf6AAAAQE"]
[Wed Dec 17 16:56:17.087707 2025] [:error] [pid 45532:tid 45613] [client 48.210.86.124:5114] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/783de.php"] [unique_id "aUJwMQeWB-JXOyTKNs0BHAAAAJc"]
[Wed Dec 17 16:56:19.484337 2025] [:error] [pid 45530:tid 45538] [client 48.210.86.124:4936] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "aUJwM24IsXcKlf7LWf_UXAAAAAM"]
[Wed Dec 17 16:56:25.709204 2025] [:error] [pid 45530:tid 45536] [client 48.210.86.124:4932] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "aUJwOW4IsXcKlf7LWf_UcgAAAAE"]
[Wed Dec 17 16:56:31.666607 2025] [:error] [pid 11733:tid 11739] [client 48.210.86.124:25309] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "aUJwPzzmtBRXExJb1PHgHgAAAQQ"]
[Wed Dec 17 16:56:34.683328 2025] [:error] [pid 45531:tid 45584] [client 48.210.86.124:5043] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aUJwQojuE-Fd-sBWjvVEQwAAAFU"]
[Wed Dec 17 16:56:36.933701 2025] [:error] [pid 45530:tid 45542] [client 48.210.86.124:5037] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aUJwRG4IsXcKlf7LWf_UyQAAAAc"]
[Wed Dec 17 16:56:40.278796 2025] [:error] [pid 45531:tid 45579] [client 48.210.86.124:4890] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aUJwSIjuE-Fd-sBWjvVEVQAAAFA"]
[Wed Dec 17 16:56:42.685207 2025] [:error] [pid 45531:tid 45563] [client 48.210.86.124:5093] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aUJwSojuE-Fd-sBWjvVEYQAAAEA"]
[Wed Dec 17 16:56:43.875103 2025] [:error] [pid 45531:tid 45579] [client 48.210.86.124:25296] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUJwS4juE-Fd-sBWjvVEZQAAAFA"]
[Wed Dec 17 16:56:46.251814 2025] [:error] [pid 45530:tid 45548] [client 48.210.86.124:5083] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUJwTm4IsXcKlf7LWf_U5wAAAA0"]
[Wed Dec 17 16:56:48.736204 2025] [:error] [pid 11733:tid 11738] [client 48.210.86.124:4982] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUJwUDzmtBRXExJb1PHgQAAAAQM"]
[Wed Dec 17 16:56:50.488275 2025] [:error] [pid 11733:tid 11754] [client 48.210.86.124:4935] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUJwUjzmtBRXExJb1PHgQwAAARM"]
[Wed Dec 17 16:56:52.049407 2025] [:error] [pid 45621:tid 45648] [client 48.210.86.124:5112] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUJwVOVNGQfJ1rR90pQdqwAAANY"]
[Wed Dec 17 16:56:52.934070 2025] [:error] [pid 45530:tid 45544] [client 48.210.86.124:5102] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUJwVG4IsXcKlf7LWf_VDAAAAAk"]
[Wed Dec 17 16:56:54.639813 2025] [:error] [pid 11733:tid 11759] [client 48.210.86.124:5001] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUJwVjzmtBRXExJb1PHgSgAAARg"]
[Wed Dec 17 16:57:02.450832 2025] [:error] [pid 45530:tid 45559] [client 48.210.86.124:5025] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aUJwXm4IsXcKlf7LWf_VLgAAABg"]
[Wed Dec 17 16:57:05.051134 2025] [:error] [pid 45621:tid 45638] [client 48.210.86.124:4929] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aUJwYeVNGQfJ1rR90pQdtQAAAMw"]
[Wed Dec 17 16:57:07.110166 2025] [:error] [pid 45530:tid 45556] [client 48.210.86.124:25308] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aUJwY24IsXcKlf7LWf_VMwAAABU"]
[Wed Dec 17 16:57:08.749304 2025] [:error] [pid 11733:tid 11739] [client 48.210.86.124:25335] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qV9GbcJwZgK.php"] [unique_id "aUJwZDzmtBRXExJb1PHgbQAAAQQ"]
[Wed Dec 17 16:57:10.526320 2025] [:error] [pid 45530:tid 45538] [client 48.210.86.124:4996] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qsntqiho.php"] [unique_id "aUJwZm4IsXcKlf7LWf_VOAAAAAM"]
[Wed Dec 17 16:57:11.524564 2025] [:error] [pid 45531:tid 45568] [client 48.210.86.124:5052] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qsntqiho.php"] [unique_id "aUJwZ4juE-Fd-sBWjvVEhQAAAEU"]
[Wed Dec 17 16:57:13.084067 2025] [:error] [pid 45532:tid 45597] [client 48.210.86.124:25319] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qsntqiho.php"] [unique_id "aUJwaQeWB-JXOyTKNs0BhgAAAIc"]
[Wed Dec 17 16:57:15.620927 2025] [:error] [pid 45530:tid 45559] [client 48.210.86.124:5071] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qsntqiho.php"] [unique_id "aUJwa24IsXcKlf7LWf_VQgAAABg"]
[Wed Dec 17 16:57:17.039817 2025] [:error] [pid 45532:tid 45605] [client 48.210.86.124:5108] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUJwbQeWB-JXOyTKNs0BiQAAAI8"]
[Wed Dec 17 16:57:18.448833 2025] [:error] [pid 11733:tid 11737] [client 48.210.86.124:25287] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUJwbjzmtBRXExJb1PHgegAAAQI"]
[Wed Dec 17 16:57:20.676675 2025] [:error] [pid 45531:tid 45578] [client 48.210.86.124:5089] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUJwcIjuE-Fd-sBWjvVEjgAAAE8"]
[Wed Dec 17 16:57:22.717243 2025] [:error] [pid 45531:tid 45572] [client 48.210.86.124:5074] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUJwcojuE-Fd-sBWjvVEmAAAAEk"]
[Wed Dec 17 16:57:23.738454 2025] [:error] [pid 45532:tid 45600] [client 48.210.86.124:25291] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUJwcweWB-JXOyTKNs0BkgAAAIo"]
[Wed Dec 17 16:57:25.353954 2025] [:error] [pid 45530:tid 45537] [client 48.210.86.124:4975] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUJwdW4IsXcKlf7LWf_VUAAAAAI"]
[Wed Dec 17 16:57:27.650100 2025] [:error] [pid 45531:tid 45573] [client 48.210.86.124:5041] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUJwd4juE-Fd-sBWjvVEoQAAAEo"]
[Wed Dec 17 16:57:28.866093 2025] [:error] [pid 45621:tid 45630] [client 48.210.86.124:4930] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUJweOVNGQfJ1rR90pQdywAAAMQ"]
[Wed Dec 17 16:57:31.396567 2025] [:error] [pid 11733:tid 11740] [client 48.210.86.124:5044] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUJwezzmtBRXExJb1PHgjAAAAQU"]
[Wed Dec 17 16:57:32.208365 2025] [:error] [pid 45530:tid 45537] [client 48.210.86.124:5066] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUJwfG4IsXcKlf7LWf_VWAAAAAI"]
[Wed Dec 17 16:57:33.958765 2025] [:error] [pid 45531:tid 45575] [client 48.210.86.124:25326] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUJwfYjuE-Fd-sBWjvVErwAAAEw"]
[Wed Dec 17 16:57:36.002009 2025] [:error] [pid 45621:tid 45631] [client 48.210.86.124:25294] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUJwgOVNGQfJ1rR90pQd0wAAAMU"]
[Wed Dec 17 16:57:37.254237 2025] [:error] [pid 45621:tid 45646] [client 48.210.86.124:25342] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUJwgeVNGQfJ1rR90pQd1AAAANQ"]
[Wed Dec 17 16:57:38.129587 2025] [:error] [pid 45621:tid 45648] [client 48.210.86.124:25338] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUJwguVNGQfJ1rR90pQd2AAAANY"]
[Wed Dec 17 16:57:40.732224 2025] [:error] [pid 11733:tid 11754] [client 48.210.86.124:25339] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUJwhDzmtBRXExJb1PHgpQAAARM"]
[Wed Dec 17 16:57:43.216801 2025] [:error] [pid 45530:tid 45538] [client 48.210.86.124:4953] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUJwh24IsXcKlf7LWf_VcwAAAAM"]
[Wed Dec 17 16:57:45.927226 2025] [:error] [pid 45531:tid 45573] [client 48.210.86.124:25295] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUJwiYjuE-Fd-sBWjvVEyAAAAEo"]
[Wed Dec 17 16:57:47.605282 2025] [:error] [pid 45531:tid 45566] [client 48.210.86.124:5091] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUJwi4juE-Fd-sBWjvVEygAAAEM"]
[Wed Dec 17 16:57:48.657960 2025] [:error] [pid 45531:tid 45584] [client 48.210.86.124:5063] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUJwjIjuE-Fd-sBWjvVEzAAAAFU"]
[Wed Dec 17 16:57:50.085952 2025] [:error] [pid 11733:tid 11750] [client 48.210.86.124:5027] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUJwjjzmtBRXExJb1PHgsgAAAQ8"]
[Wed Dec 17 16:57:52.784482 2025] [:error] [pid 45531:tid 45571] [client 48.210.86.124:25300] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oc460l3x.php"] [unique_id "aUJwkIjuE-Fd-sBWjvVEzwAAAEg"]
[Wed Dec 17 16:57:54.793676 2025] [:error] [pid 11733:tid 11741] [client 48.210.86.124:4875] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oc460l3x.php"] [unique_id "aUJwkjzmtBRXExJb1PHg0QAAAQY"]
[Wed Dec 17 16:57:57.081177 2025] [:error] [pid 11733:tid 11737] [client 48.210.86.124:25310] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oc460l3x.php"] [unique_id "aUJwlTzmtBRXExJb1PHg3AAAAQI"]
[Wed Dec 17 16:58:00.195642 2025] [:error] [pid 45532:tid 45604] [client 48.210.86.124:5081] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oc460l3x.php"] [unique_id "aUJwmAeWB-JXOyTKNs0BzQAAAI4"]
[Wed Dec 17 16:58:07.228082 2025] [:error] [pid 45532:tid 45601] [client 48.210.86.124:25286] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUJwnweWB-JXOyTKNs0B8AAAAIs"]
[Wed Dec 17 16:58:08.949062 2025] [:error] [pid 11733:tid 11739] [client 48.210.86.124:25324] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUJwoDzmtBRXExJb1PHg7QAAAQQ"]
[Wed Dec 17 16:58:11.865662 2025] [:error] [pid 45530:tid 45542] [client 48.210.86.124:25317] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUJwo24IsXcKlf7LWf_VoQAAAAc"]
[Wed Dec 17 16:58:13.695947 2025] [:error] [pid 45621:tid 45627] [client 48.210.86.124:25334] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUJwpeVNGQfJ1rR90pQeEQAAAME"]
[Wed Dec 17 16:58:14.063562 2025] [:error] [pid 45531:tid 45568] [client 48.210.86.124:5036] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUJwpojuE-Fd-sBWjvVE8QAAAEU"]
[Wed Dec 17 16:58:14.652077 2025] [:error] [pid 45531:tid 45580] [client 48.210.86.124:5078] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUJwpojuE-Fd-sBWjvVE8wAAAFE"]
[Wed Dec 17 16:58:15.663918 2025] [:error] [pid 45531:tid 45567] [client 48.210.86.124:5077] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUJwp4juE-Fd-sBWjvVE9gAAAEQ"]
[Wed Dec 17 16:58:17.496812 2025] [:error] [pid 45531:tid 45579] [client 48.210.86.124:4992] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUJwqYjuE-Fd-sBWjvVE_AAAAFA"]
[Wed Dec 17 16:58:18.889135 2025] [:error] [pid 45530:tid 45558] [client 48.210.86.124:25327] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aUJwqm4IsXcKlf7LWf_VrAAAABc"]
[Wed Dec 17 16:58:21.269525 2025] [:error] [pid 45621:tid 45646] [client 48.210.86.124:5094] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aUJwreVNGQfJ1rR90pQeFwAAANQ"]
[Wed Dec 17 16:58:22.375796 2025] [:error] [pid 45532:tid 45592] [client 48.210.86.124:5069] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aUJwrgeWB-JXOyTKNs0B-AAAAII"]
[Wed Dec 17 16:58:23.713294 2025] [:error] [pid 45621:tid 45630] [client 48.210.86.124:5080] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aUJwr-VNGQfJ1rR90pQeGgAAAMQ"]
[Wed Dec 17 16:58:25.220577 2025] [:error] [pid 11733:tid 11748] [client 48.210.86.124:25340] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aUJwsTzmtBRXExJb1PHg-gAAAQ0"]
[Wed Dec 17 16:58:26.413189 2025] [:error] [pid 11733:tid 11747] [client 48.210.86.124:5099] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aUJwsjzmtBRXExJb1PHg_QAAAQw"]
[Wed Dec 17 16:58:27.882980 2025] [:error] [pid 11733:tid 11745] [client 48.210.86.124:5002] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aUJwszzmtBRXExJb1PHhAQAAAQo"]
[Wed Dec 17 16:58:28.739606 2025] [:error] [pid 45621:tid 45626] [client 48.210.86.124:25321] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aUJwtOVNGQfJ1rR90pQeJAAAAMA"]
[Wed Dec 17 16:58:29.668070 2025] [:error] [pid 45621:tid 45638] [client 48.210.86.124:5110] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUJwteVNGQfJ1rR90pQeJwAAAMw"]
[Wed Dec 17 16:58:30.615543 2025] [:error] [pid 45532:tid 45613] [client 48.210.86.124:25343] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUJwtgeWB-JXOyTKNs0B_QAAAJc"]
[Wed Dec 17 16:58:32.382632 2025] [:error] [pid 45530:tid 45541] [client 48.210.86.124:4963] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUJwuG4IsXcKlf7LWf_VtAAAAAY"]
[Wed Dec 17 16:58:34.652890 2025] [:error] [pid 45530:tid 45536] [client 48.210.86.124:5096] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUJwum4IsXcKlf7LWf_VvAAAAAE"]
[Wed Dec 17 16:58:38.189461 2025] [:error] [pid 45621:tid 45635] [client 48.210.86.124:25284] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUJwvuVNGQfJ1rR90pQeLAAAAMk"]
[Wed Dec 17 16:58:39.737620 2025] [:error] [pid 45531:tid 45574] [client 48.210.86.124:25333] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUJwv4juE-Fd-sBWjvVFDQAAAEs"]
[Wed Dec 17 16:58:42.270633 2025] [:error] [pid 45621:tid 45631] [client 48.210.86.124:25313] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUJwwuVNGQfJ1rR90pQeNAAAAMU"]
[Wed Dec 17 16:58:45.715590 2025] [:error] [pid 45621:tid 45634] [client 48.210.86.124:5056] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUJwxeVNGQfJ1rR90pQePQAAAMg"]
[Wed Dec 17 16:58:47.432078 2025] [:error] [pid 45530:tid 45546] [client 48.210.86.124:25318] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aUJwx24IsXcKlf7LWf_VzgAAAAs"]
[Wed Dec 17 16:58:50.229000 2025] [:error] [pid 45530:tid 45537] [client 48.210.86.124:5115] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aUJwym4IsXcKlf7LWf_V1gAAAAI"]
[Wed Dec 17 16:58:54.644184 2025] [:error] [pid 45530:tid 45551] [client 48.210.86.124:5085] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aUJwzm4IsXcKlf7LWf_V4AAAABA"]
[Wed Dec 17 16:58:56.917446 2025] [:error] [pid 45530:tid 45557] [client 48.210.86.124:25288] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aUJw0G4IsXcKlf7LWf_V5QAAABY"]
[Wed Dec 17 16:59:01.362647 2025] [:error] [pid 45531:tid 45563] [client 48.210.86.124:5015] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aUJw1YjuE-Fd-sBWjvVFGQAAAEA"]
[Wed Dec 17 16:59:02.749739 2025] [:error] [pid 45531:tid 45580] [client 48.210.86.124:5035] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aUJw1ojuE-Fd-sBWjvVFIwAAAFE"]
[Wed Dec 17 16:59:04.708655 2025] [:error] [pid 45530:tid 45540] [client 48.210.86.124:5111] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aUJw2G4IsXcKlf7LWf_WSwAAAAU"]
[Wed Dec 17 16:59:06.394571 2025] [:error] [pid 45530:tid 45547] [client 48.210.86.124:25281] [client 48.210.86.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aUJw2m4IsXcKlf7LWf_WWwAAAAw"]
[Wed Dec 17 19:01:20.398524 2025] [:error] [pid 45532:tid 45613] [client 103.77.107.57:50193] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aUKNgAeWB-JXOyTKNs04LwAAAJc"]
[Wed Dec 17 19:24:38.596955 2025] [:error] [pid 11733:tid 11737] [client 104.209.173.99:35052] [client 104.209.173.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUKS9jzmtBRXExJb1PEcAQAAAQI"]
[Thu Dec 18 02:17:13.213704 2025] [:error] [pid 26117:tid 26157] [client 93.56.168.167:52320] [client 93.56.168.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "![!+ ]\\\\[\\\\]" at ARGS:0. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "173"] [id "213070"] [rev "1"] [msg "COMODO WAF: JSFuck / Hieroglyphy obfuscation detected||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aULzqDGiVc9lQS6PcL3pwgAAAUg"]
[Thu Dec 18 03:42:59.680053 2025] [:error] [pid 5222:tid 5238] [client 110.166.71.39:35187] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUMHw5PfRQQwR32SSiXZTAAAAAs"]
[Thu Dec 18 05:31:22.862831 2025] [:error] [pid 21013:tid 21065] [client 83.165.117.215:11763] [client 83.165.117.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.165.117.215, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUMhKk0TTmwxNsSeIa4slwAAAFU"]
[Thu Dec 18 06:49:56.966232 2025] [:error] [pid 23645:tid 23660] [client 193.19.109.209:58509] [client 193.19.109.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUMzlDf_Rx0Y0ao_QJiHvQAAAI0"]
[Thu Dec 18 18:36:29.670134 2025] [:error] [pid 12035:tid 12066] [client 98.70.102.89:1177] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aUPZLbcVHrNSHjCo-0p8ewAAAhc"]
[Thu Dec 18 18:36:30.106168 2025] [:error] [pid 24958:tid 24977] [client 98.70.102.89:1994] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aUPZLskDOrUkd0wNm2GxDwAAAZA"]
[Thu Dec 18 18:36:30.494660 2025] [:error] [pid 24433:tid 24445] [client 98.70.102.89:1985] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aUPZLp4pN9ycmipm8Ti79QAAAQk"]
[Thu Dec 18 18:36:30.899844 2025] [:error] [pid 24542:tid 24553] [client 98.70.102.89:1154] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aUPZLktQz4H2oS3NrDbgaAAAAUk"]
[Thu Dec 18 18:36:31.332410 2025] [:error] [pid 24958:tid 24975] [client 98.70.102.89:1192] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aUPZL8kDOrUkd0wNm2GxEQAAAY4"]
[Thu Dec 18 18:36:31.926224 2025] [:error] [pid 24542:tid 24550] [client 98.70.102.89:1176] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aUPZL0tQz4H2oS3NrDbgawAAAUY"]
[Thu Dec 18 18:36:32.403094 2025] [:error] [pid 12383:tid 12390] [client 98.70.102.89:1182] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aUPZMPdgllo9h1cyxGapDQAAAsQ"]
[Thu Dec 18 18:36:32.822178 2025] [:error] [pid 23558:tid 23626] [client 98.70.102.89:1999] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aUPZMOHam9NbgPQa9ub1rAAAAMs"]
[Thu Dec 18 18:36:33.350401 2025] [:error] [pid 12383:tid 12388] [client 98.70.102.89:1198] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/minik.php"] [unique_id "aUPZMfdgllo9h1cyxGapEAAAAsI"]
[Thu Dec 18 18:36:33.812015 2025] [:error] [pid 12383:tid 12387] [client 98.70.102.89:1214] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/minik.php"] [unique_id "aUPZMfdgllo9h1cyxGapEQAAAsE"]
[Thu Dec 18 18:36:34.362700 2025] [:error] [pid 12383:tid 12386] [client 98.70.102.89:1209] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/minik.php"] [unique_id "aUPZMvdgllo9h1cyxGapEwAAAsA"]
[Thu Dec 18 18:36:34.986386 2025] [:error] [pid 25357:tid 25359] [client 98.70.102.89:1196] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/minik.php"] [unique_id "aUPZMoaT7bsEXnJVfJdFmgAAAcA"]
[Thu Dec 18 18:36:35.374314 2025] [:error] [pid 24542:tid 24557] [client 98.70.102.89:1211] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OK.php"] [unique_id "aUPZM0tQz4H2oS3NrDbgbAAAAU0"]
[Thu Dec 18 18:36:35.728480 2025] [:error] [pid 23558:tid 23620] [client 98.70.102.89:1157] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OK.php"] [unique_id "aUPZM-Ham9NbgPQa9ub1rgAAAMU"]
[Thu Dec 18 18:36:36.149302 2025] [:error] [pid 12035:tid 12063] [client 98.70.102.89:1212] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OK.php"] [unique_id "aUPZNLcVHrNSHjCo-0p8fQAAAhQ"]
[Thu Dec 18 18:36:36.584426 2025] [:error] [pid 23558:tid 23617] [client 98.70.102.89:2014] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OK.php"] [unique_id "aUPZNOHam9NbgPQa9ub1sAAAAMI"]
[Thu Dec 18 18:36:37.058349 2025] [:error] [pid 23558:tid 23616] [client 98.70.102.89:1155] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php"] [unique_id "aUPZNeHam9NbgPQa9ub1sgAAAME"]
[Thu Dec 18 18:36:37.548197 2025] [:error] [pid 12383:tid 12391] [client 98.70.102.89:1202] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php"] [unique_id "aUPZNfdgllo9h1cyxGapFgAAAsU"]
[Thu Dec 18 18:36:38.034895 2025] [:error] [pid 23556:tid 23581] [client 98.70.102.89:2008] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php"] [unique_id "aUPZNhnmLlk3u5yt9kHH8wAAABU"]
[Thu Dec 18 18:36:38.466841 2025] [:error] [pid 24958:tid 24963] [client 98.70.102.89:11341] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php"] [unique_id "aUPZNskDOrUkd0wNm2GxGwAAAYI"]
[Thu Dec 18 18:36:38.925437 2025] [:error] [pid 24958:tid 24966] [client 98.70.102.89:1989] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsec.php"] [unique_id "aUPZNskDOrUkd0wNm2GxHwAAAYU"]
[Thu Dec 18 18:36:39.277402 2025] [:error] [pid 12035:tid 12042] [client 98.70.102.89:1987] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsec.php"] [unique_id "aUPZN7cVHrNSHjCo-0p8ggAAAgA"]
[Thu Dec 18 18:36:39.642467 2025] [:error] [pid 23558:tid 23639] [client 98.70.102.89:1998] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsec.php"] [unique_id "aUPZN-Ham9NbgPQa9ub1ugAAANg"]
[Thu Dec 18 18:36:40.095315 2025] [:error] [pid 25357:tid 25361] [client 98.70.102.89:1152] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zsec.php"] [unique_id "aUPZOIaT7bsEXnJVfJdFnQAAAcI"]
[Thu Dec 18 18:36:40.787124 2025] [:error] [pid 23645:tid 23660] [client 98.70.102.89:1159] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/arig.php"] [unique_id "aUPZODf_Rx0Y0ao_QJg95gAAAI0"]
[Thu Dec 18 18:36:41.298783 2025] [:error] [pid 24433:tid 24438] [client 98.70.102.89:1170] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/arig.php"] [unique_id "aUPZOZ4pN9ycmipm8Ti8AQAAAQI"]
[Thu Dec 18 18:36:41.758605 2025] [:error] [pid 25357:tid 25368] [client 98.70.102.89:1153] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/arig.php"] [unique_id "aUPZOYaT7bsEXnJVfJdFoAAAAck"]
[Thu Dec 18 18:36:42.671284 2025] [:error] [pid 24542:tid 24562] [client 98.70.102.89:2000] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/arig.php"] [unique_id "aUPZOktQz4H2oS3NrDbgfgAAAVI"]
[Thu Dec 18 18:36:43.129320 2025] [:error] [pid 23556:tid 23567] [client 98.70.102.89:2001] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aUPZOxnmLlk3u5yt9kHH_gAAAAc"]
[Thu Dec 18 18:36:43.560179 2025] [:error] [pid 23556:tid 23561] [client 98.70.102.89:2041] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aUPZOxnmLlk3u5yt9kHH_wAAAAE"]
[Thu Dec 18 18:36:44.043818 2025] [:error] [pid 12239:tid 12244] [client 98.70.102.89:2010] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aUPZPNNnXxfGIuWO6anq9QAAAoA"]
[Thu Dec 18 18:36:44.595417 2025] [:error] [pid 23558:tid 23637] [client 98.70.102.89:2009] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aUPZPOHam9NbgPQa9ub1vgAAANY"]
[Thu Dec 18 18:36:45.124639 2025] [:error] [pid 12239:tid 12266] [client 98.70.102.89:2046] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUPZPdNnXxfGIuWO6anq_QAAApY"]
[Thu Dec 18 18:36:45.547493 2025] [:error] [pid 25357:tid 25366] [client 98.70.102.89:1167] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUPZPYaT7bsEXnJVfJdFsgAAAcc"]
[Thu Dec 18 18:36:45.978278 2025] [:error] [pid 24433:tid 24446] [client 98.70.102.89:1995] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUPZPZ4pN9ycmipm8Ti8BQAAAQo"]
[Thu Dec 18 18:36:46.375075 2025] [:error] [pid 24542:tid 24566] [client 98.70.102.89:1984] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUPZPktQz4H2oS3NrDbgggAAAVY"]
[Thu Dec 18 18:36:46.875739 2025] [:error] [pid 24542:tid 24544] [client 98.70.102.89:1163] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/af32.php"] [unique_id "aUPZPktQz4H2oS3NrDbggwAAAUA"]
[Thu Dec 18 18:36:47.666150 2025] [:error] [pid 12383:tid 12407] [client 98.70.102.89:2018] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/af32.php"] [unique_id "aUPZP_dgllo9h1cyxGapHAAAAtU"]
[Thu Dec 18 18:36:48.175978 2025] [:error] [pid 24542:tid 24552] [client 98.70.102.89:2012] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/af32.php"] [unique_id "aUPZQEtQz4H2oS3NrDbghgAAAUg"]
[Thu Dec 18 18:36:48.617425 2025] [:error] [pid 12035:tid 12047] [client 98.70.102.89:11353] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/af32.php"] [unique_id "aUPZQLcVHrNSHjCo-0p8iAAAAgU"]
[Thu Dec 18 18:36:49.002142 2025] [:error] [pid 12239:tid 12265] [client 98.70.102.89:1166] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rz.php"] [unique_id "aUPZQdNnXxfGIuWO6anrDAAAApU"]
[Thu Dec 18 18:36:49.414696 2025] [:error] [pid 24958:tid 24974] [client 98.70.102.89:1213] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rz.php"] [unique_id "aUPZQckDOrUkd0wNm2GxIgAAAY0"]
[Thu Dec 18 18:36:49.772712 2025] [:error] [pid 24542:tid 24562] [client 98.70.102.89:2039] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rz.php"] [unique_id "aUPZQUtQz4H2oS3NrDbgjQAAAVI"]
[Thu Dec 18 18:36:50.182152 2025] [:error] [pid 23558:tid 23621] [client 98.70.102.89:1178] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rz.php"] [unique_id "aUPZQuHam9NbgPQa9ub1wQAAAMY"]
[Thu Dec 18 18:36:50.614242 2025] [:error] [pid 24542:tid 24568] [client 98.70.102.89:11362] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hugo.php"] [unique_id "aUPZQktQz4H2oS3NrDbgkQAAAVg"]
[Thu Dec 18 18:36:51.059824 2025] [:error] [pid 25357:tid 25368] [client 98.70.102.89:1992] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hugo.php"] [unique_id "aUPZQ4aT7bsEXnJVfJdFvwAAAck"]
[Thu Dec 18 18:36:51.678912 2025] [:error] [pid 23556:tid 23582] [client 98.70.102.89:1194] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hugo.php"] [unique_id "aUPZQxnmLlk3u5yt9kHIBwAAABY"]
[Thu Dec 18 18:36:52.077261 2025] [:error] [pid 23558:tid 23625] [client 98.70.102.89:2044] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hugo.php"] [unique_id "aUPZROHam9NbgPQa9ub1xAAAAMo"]
[Thu Dec 18 18:36:52.531747 2025] [:error] [pid 24542:tid 24550] [client 98.70.102.89:1173] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aUPZREtQz4H2oS3NrDbgnAAAAUY"]
[Thu Dec 18 18:36:52.957776 2025] [:error] [pid 12239:tid 12264] [client 98.70.102.89:1180] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aUPZRNNnXxfGIuWO6anrDwAAApQ"]
[Thu Dec 18 18:36:53.408940 2025] [:error] [pid 23556:tid 23566] [client 98.70.102.89:1210] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aUPZRRnmLlk3u5yt9kHICQAAAAY"]
[Thu Dec 18 18:36:53.788799 2025] [:error] [pid 12383:tid 12409] [client 98.70.102.89:1158] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aUPZRfdgllo9h1cyxGapIQAAAtc"]
[Thu Dec 18 18:36:54.268101 2025] [:error] [pid 24958:tid 24983] [client 98.70.102.89:2004] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lzyrj.php"] [unique_id "aUPZRskDOrUkd0wNm2GxIwAAAZY"]
[Thu Dec 18 18:36:54.672745 2025] [:error] [pid 23645:tid 23659] [client 98.70.102.89:11356] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lzyrj.php"] [unique_id "aUPZRjf_Rx0Y0ao_QJg99wAAAIw"]
[Thu Dec 18 18:36:55.072050 2025] [:error] [pid 24542:tid 24554] [client 98.70.102.89:11358] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lzyrj.php"] [unique_id "aUPZR0tQz4H2oS3NrDbgoAAAAUo"]
[Thu Dec 18 18:36:55.600845 2025] [:error] [pid 24542:tid 24544] [client 98.70.102.89:1179] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lzyrj.php"] [unique_id "aUPZR0tQz4H2oS3NrDbgogAAAUA"]
[Thu Dec 18 18:36:56.028736 2025] [:error] [pid 24958:tid 24979] [client 98.70.102.89:11334] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/laudq.php"] [unique_id "aUPZSMkDOrUkd0wNm2GxKAAAAZI"]
[Thu Dec 18 18:36:56.490801 2025] [:error] [pid 23556:tid 23571] [client 98.70.102.89:1794] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/laudq.php"] [unique_id "aUPZSBnmLlk3u5yt9kHICwAAAAs"]
[Thu Dec 18 18:36:56.993766 2025] [:error] [pid 12383:tid 12403] [client 98.70.102.89:1195] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/laudq.php"] [unique_id "aUPZSPdgllo9h1cyxGapJAAAAtE"]
[Thu Dec 18 18:36:57.425511 2025] [:error] [pid 23556:tid 23561] [client 98.70.102.89:2016] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/laudq.php"] [unique_id "aUPZSRnmLlk3u5yt9kHIDgAAAAE"]
[Thu Dec 18 18:36:57.842749 2025] [:error] [pid 23645:tid 23658] [client 98.70.102.89:1191] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anjay.php"] [unique_id "aUPZSTf_Rx0Y0ao_QJg9_AAAAIs"]
[Thu Dec 18 18:36:58.251578 2025] [:error] [pid 23645:tid 23648] [client 98.70.102.89:11351] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anjay.php"] [unique_id "aUPZSjf_Rx0Y0ao_QJg-AAAAAIE"]
[Thu Dec 18 18:36:58.757915 2025] [:error] [pid 12383:tid 12402] [client 98.70.102.89:1199] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anjay.php"] [unique_id "aUPZSvdgllo9h1cyxGapJwAAAtA"]
[Thu Dec 18 18:36:59.128254 2025] [:error] [pid 24958:tid 24968] [client 98.70.102.89:2003] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anjay.php"] [unique_id "aUPZS8kDOrUkd0wNm2GxLQAAAYc"]
[Thu Dec 18 18:36:59.571170 2025] [:error] [pid 23556:tid 23584] [client 98.70.102.89:1160] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/let.php"] [unique_id "aUPZSxnmLlk3u5yt9kHIEAAAABg"]
[Thu Dec 18 18:37:00.180144 2025] [:error] [pid 23558:tid 23638] [client 98.70.102.89:2047] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/let.php"] [unique_id "aUPZTOHam9NbgPQa9ub1zwAAANc"]
[Thu Dec 18 18:37:00.612949 2025] [:error] [pid 23558:tid 23632] [client 98.70.102.89:1208] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/let.php"] [unique_id "aUPZTOHam9NbgPQa9ub10AAAANE"]
[Thu Dec 18 18:37:01.139044 2025] [:error] [pid 23558:tid 23633] [client 98.70.102.89:2020] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/let.php"] [unique_id "aUPZTeHam9NbgPQa9ub10wAAANI"]
[Thu Dec 18 18:37:01.543152 2025] [:error] [pid 23558:tid 23624] [client 98.70.102.89:2026] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUPZTeHam9NbgPQa9ub11QAAAMk"]
[Thu Dec 18 18:37:01.952211 2025] [:error] [pid 23645:tid 23649] [client 98.70.102.89:1165] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUPZTTf_Rx0Y0ao_QJg-BgAAAII"]
[Thu Dec 18 18:37:02.467909 2025] [:error] [pid 23645:tid 23664] [client 98.70.102.89:2023] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUPZTjf_Rx0Y0ao_QJg-BwAAAJE"]
[Thu Dec 18 18:37:02.836678 2025] [:error] [pid 25357:tid 25365] [client 98.70.102.89:1162] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUPZToaT7bsEXnJVfJdFwAAAAcY"]
[Thu Dec 18 18:37:03.218646 2025] [:error] [pid 24958:tid 24975] [client 98.70.102.89:1161] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUPZT8kDOrUkd0wNm2GxMwAAAY4"]
[Thu Dec 18 18:37:03.614039 2025] [:error] [pid 24433:tid 24452] [client 98.70.102.89:1993] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUPZT54pN9ycmipm8Ti8DgAAARA"]
[Thu Dec 18 18:37:04.030628 2025] [:error] [pid 12383:tid 12399] [client 98.70.102.89:1203] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUPZUPdgllo9h1cyxGapLwAAAs0"]
[Thu Dec 18 18:37:04.417093 2025] [:error] [pid 25357:tid 25371] [client 98.70.102.89:1156] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUPZUIaT7bsEXnJVfJdFyAAAAcw"]
[Thu Dec 18 18:37:04.886341 2025] [:error] [pid 12383:tid 12401] [client 98.70.102.89:1990] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aUPZUPdgllo9h1cyxGapMQAAAs8"]
[Thu Dec 18 18:37:05.356768 2025] [:error] [pid 12035:tid 12056] [client 98.70.102.89:1200] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aUPZUbcVHrNSHjCo-0p8mQAAAg0"]
[Thu Dec 18 18:37:05.740112 2025] [:error] [pid 12383:tid 12396] [client 98.70.102.89:1183] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aUPZUfdgllo9h1cyxGapMgAAAso"]
[Thu Dec 18 18:37:06.156938 2025] [:error] [pid 25357:tid 25382] [client 98.70.102.89:11363] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aUPZUoaT7bsEXnJVfJdFzwAAAdc"]
[Thu Dec 18 18:37:06.618406 2025] [:error] [pid 12383:tid 12402] [client 98.70.102.89:2011] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aUPZUvdgllo9h1cyxGapNAAAAtA"]
[Thu Dec 18 18:37:07.055656 2025] [:error] [pid 23556:tid 23571] [client 98.70.102.89:1986] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aUPZUxnmLlk3u5yt9kHIHAAAAAs"]
[Thu Dec 18 18:37:07.467177 2025] [:error] [pid 23645:tid 23655] [client 98.70.102.89:2024] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aUPZUzf_Rx0Y0ao_QJg-DAAAAIg"]
[Thu Dec 18 18:37:07.875839 2025] [:error] [pid 25357:tid 25365] [client 98.70.102.89:11339] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aUPZU4aT7bsEXnJVfJdF1QAAAcY"]
[Thu Dec 18 18:37:08.292466 2025] [:error] [pid 12383:tid 12388] [client 98.70.102.89:1184] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aUPZVPdgllo9h1cyxGapOAAAAsI"]
[Thu Dec 18 18:37:08.702919 2025] [:error] [pid 12383:tid 12407] [client 98.70.102.89:1852] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aUPZVPdgllo9h1cyxGapOQAAAtU"]
[Thu Dec 18 18:37:09.128023 2025] [:error] [pid 23556:tid 23562] [client 98.70.102.89:2038] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aUPZVRnmLlk3u5yt9kHIIwAAAAI"]
[Thu Dec 18 18:37:09.488609 2025] [:error] [pid 25357:tid 25360] [client 98.70.102.89:11331] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aUPZVYaT7bsEXnJVfJdF2wAAAcE"]
[Thu Dec 18 18:37:09.943435 2025] [:error] [pid 25357:tid 25380] [client 98.70.102.89:2035] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aUPZVYaT7bsEXnJVfJdF3AAAAdU"]
[Thu Dec 18 18:37:10.328426 2025] [:error] [pid 24958:tid 24972] [client 98.70.102.89:1997] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aUPZVskDOrUkd0wNm2GxOgAAAYs"]
[Thu Dec 18 18:37:10.701528 2025] [:error] [pid 24433:tid 24447] [client 98.70.102.89:2006] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aUPZVp4pN9ycmipm8Ti8FwAAAQs"]
[Thu Dec 18 18:37:11.257235 2025] [:error] [pid 24958:tid 24975] [client 98.70.102.89:2034] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aUPZV8kDOrUkd0wNm2GxPQAAAY4"]
[Thu Dec 18 18:37:11.605816 2025] [:error] [pid 24958:tid 24976] [client 98.70.102.89:11367] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUPZV8kDOrUkd0wNm2GxPgAAAY8"]
[Thu Dec 18 18:37:11.993654 2025] [:error] [pid 24958:tid 24962] [client 98.70.102.89:11343] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUPZV8kDOrUkd0wNm2GxQgAAAYE"]
[Thu Dec 18 18:37:12.378854 2025] [:error] [pid 12383:tid 12410] [client 98.70.102.89:11342] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUPZWPdgllo9h1cyxGapQQAAAtg"]
[Thu Dec 18 18:37:12.838259 2025] [:error] [pid 25357:tid 25374] [client 98.70.102.89:1204] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUPZWIaT7bsEXnJVfJdF3wAAAc8"]
[Thu Dec 18 18:37:13.208365 2025] [:error] [pid 24958:tid 24985] [client 98.70.102.89:1817] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUPZWckDOrUkd0wNm2GxRwAAAZg"]
[Thu Dec 18 18:37:13.607446 2025] [:error] [pid 23558:tid 23629] [client 98.70.102.89:1185] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUPZWeHam9NbgPQa9ub14AAAAM4"]
[Thu Dec 18 18:37:13.982801 2025] [:error] [pid 24958:tid 24972] [client 98.70.102.89:1796] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUPZWckDOrUkd0wNm2GxTQAAAYs"]
[Thu Dec 18 18:37:14.500774 2025] [:error] [pid 24542:tid 24559] [client 98.70.102.89:2033] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUPZWktQz4H2oS3NrDbgqwAAAU8"]
[Thu Dec 18 18:37:14.949627 2025] [:error] [pid 24958:tid 24981] [client 98.70.102.89:11330] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aUPZWskDOrUkd0wNm2GxUAAAAZQ"]
[Thu Dec 18 18:37:15.419606 2025] [:error] [pid 23645:tid 23663] [client 98.70.102.89:1991] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aUPZWzf_Rx0Y0ao_QJg-FQAAAJA"]
[Thu Dec 18 18:37:15.991062 2025] [:error] [pid 12239:tid 12258] [client 98.70.102.89:11365] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aUPZW9NnXxfGIuWO6anrLAAAAo4"]
[Thu Dec 18 18:37:16.375032 2025] [:error] [pid 23645:tid 23670] [client 98.70.102.89:1215] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cloud.php"] [unique_id "aUPZXDf_Rx0Y0ao_QJg-FwAAAJc"]
[Thu Dec 18 18:37:16.729616 2025] [:error] [pid 24542:tid 24567] [client 98.70.102.89:1996] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUPZXEtQz4H2oS3NrDbgsQAAAVc"]
[Thu Dec 18 18:37:17.258684 2025] [:error] [pid 24542:tid 24561] [client 98.70.102.89:2027] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUPZXUtQz4H2oS3NrDbgsgAAAVE"]
[Thu Dec 18 18:37:17.742046 2025] [:error] [pid 24433:tid 24448] [client 98.70.102.89:2028] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUPZXZ4pN9ycmipm8Ti8GgAAAQw"]
[Thu Dec 18 18:37:18.174671 2025] [:error] [pid 23645:tid 23657] [client 98.70.102.89:11352] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUPZXjf_Rx0Y0ao_QJg-GwAAAIo"]
[Thu Dec 18 18:37:18.652985 2025] [:error] [pid 24433:tid 24445] [client 98.70.102.89:11379] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUPZXp4pN9ycmipm8Ti8GwAAAQk"]
[Thu Dec 18 18:37:19.460836 2025] [:error] [pid 24542:tid 24544] [client 98.70.102.89:11378] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUPZX0tQz4H2oS3NrDbguAAAAUA"]
[Thu Dec 18 18:37:20.000942 2025] [:error] [pid 24958:tid 24982] [client 98.70.102.89:11355] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUPZX8kDOrUkd0wNm2GxXQAAAZU"]
[Thu Dec 18 18:37:20.501708 2025] [:error] [pid 24958:tid 24978] [client 98.70.102.89:1201] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUPZYMkDOrUkd0wNm2GxXgAAAZE"]
[Thu Dec 18 18:37:21.169162 2025] [:error] [pid 24958:tid 24985] [client 98.70.102.89:11349] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUPZYckDOrUkd0wNm2GxYgAAAZg"]
[Thu Dec 18 18:37:21.668759 2025] [:error] [pid 23645:tid 23649] [client 98.70.102.89:11377] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUPZYTf_Rx0Y0ao_QJg-KAAAAII"]
[Thu Dec 18 18:37:22.568466 2025] [:error] [pid 24542:tid 24560] [client 98.70.102.89:2029] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUPZYktQz4H2oS3NrDbgvwAAAVA"]
[Thu Dec 18 18:37:23.080983 2025] [:error] [pid 12035:tid 12061] [client 98.70.102.89:1804] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUPZY7cVHrNSHjCo-0p8oAAAAhI"]
[Thu Dec 18 18:37:23.716254 2025] [:error] [pid 24542:tid 24544] [client 98.70.102.89:11366] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aUPZY0tQz4H2oS3NrDbgwAAAAUA"]
[Thu Dec 18 18:37:24.121493 2025] [:error] [pid 23645:tid 23655] [client 98.70.102.89:11354] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aUPZZDf_Rx0Y0ao_QJg-LQAAAIg"]
[Thu Dec 18 18:37:24.520030 2025] [:error] [pid 24542:tid 24546] [client 98.70.102.89:2015] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aUPZZEtQz4H2oS3NrDbgwgAAAUI"]
[Thu Dec 18 18:37:24.981477 2025] [:error] [pid 12239:tid 12259] [client 98.70.102.89:2005] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aUPZZNNnXxfGIuWO6anrOgAAAo8"]
[Thu Dec 18 18:37:25.519443 2025] [:error] [pid 24433:tid 24453] [client 98.70.102.89:1855] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aUPZZZ4pN9ycmipm8Ti8IAAAARE"]
[Thu Dec 18 18:37:25.982567 2025] [:error] [pid 12239:tid 12260] [client 98.70.102.89:1206] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aUPZZdNnXxfGIuWO6anrPAAAApA"]
[Thu Dec 18 18:37:26.599438 2025] [:error] [pid 23645:tid 23669] [client 98.70.102.89:11346] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aUPZZjf_Rx0Y0ao_QJg-MQAAAJY"]
[Thu Dec 18 18:37:27.207198 2025] [:error] [pid 12239:tid 12265] [client 98.70.102.89:1811] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aUPZZ9NnXxfGIuWO6anrQQAAApU"]
[Thu Dec 18 18:37:27.964833 2025] [:error] [pid 24433:tid 24440] [client 98.70.102.89:2021] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUPZZ54pN9ycmipm8Ti8JQAAAQQ"]
[Thu Dec 18 18:37:28.383875 2025] [:error] [pid 23556:tid 23568] [client 98.70.102.89:1186] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUPZaBnmLlk3u5yt9kHIMQAAAAg"]
[Thu Dec 18 18:37:28.851365 2025] [:error] [pid 24542:tid 24557] [client 98.70.102.89:1988] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUPZaEtQz4H2oS3NrDbgxgAAAU0"]
[Thu Dec 18 18:37:34.583237 2025] [:error] [pid 12383:tid 12397] [client 98.70.102.89:1169] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aUPZbvdgllo9h1cyxGapTwAAAss"]
[Thu Dec 18 18:37:35.016473 2025] [:error] [pid 24958:tid 24961] [client 98.70.102.89:2022] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aUPZb8kDOrUkd0wNm2GxdAAAAYA"]
[Thu Dec 18 18:37:35.734690 2025] [:error] [pid 12239:tid 12258] [client 98.70.102.89:1164] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aUPZb9NnXxfGIuWO6anrUQAAAo4"]
[Thu Dec 18 18:37:36.474406 2025] [:error] [pid 25357:tid 25371] [client 98.70.102.89:11369] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aUPZcIaT7bsEXnJVfJdF6AAAAcw"]
[Thu Dec 18 18:37:36.956280 2025] [:error] [pid 25357:tid 25378] [client 98.70.102.89:1172] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUPZcIaT7bsEXnJVfJdF6gAAAdM"]
[Thu Dec 18 18:37:37.482220 2025] [:error] [pid 23556:tid 23579] [client 98.70.102.89:11345] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUPZcRnmLlk3u5yt9kHIPQAAABM"]
[Thu Dec 18 18:37:38.842236 2025] [:error] [pid 25357:tid 25375] [client 98.70.102.89:2007] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUPZcoaT7bsEXnJVfJdF8AAAAdA"]
[Thu Dec 18 18:37:39.510992 2025] [:error] [pid 12239:tid 12263] [client 98.70.102.89:11384] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUPZc9NnXxfGIuWO6anrWAAAApM"]
[Thu Dec 18 18:37:43.283643 2025] [:error] [pid 24433:tid 24456] [client 98.70.102.89:1188] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aUPZd54pN9ycmipm8Ti8QQAAARQ"]
[Thu Dec 18 18:37:43.872056 2025] [:error] [pid 12383:tid 12386] [client 98.70.102.89:2043] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aUPZd_dgllo9h1cyxGapUwAAAsA"]
[Thu Dec 18 18:37:44.336852 2025] [:error] [pid 23645:tid 23649] [client 98.70.102.89:2042] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aUPZeDf_Rx0Y0ao_QJg-TwAAAII"]
[Thu Dec 18 18:37:44.863442 2025] [:error] [pid 12239:tid 12248] [client 98.70.102.89:11340] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aUPZeNNnXxfGIuWO6anrYwAAAoQ"]
[Thu Dec 18 18:37:45.383975 2025] [:error] [pid 24958:tid 24965] [client 98.70.102.89:11390] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "aUPZeckDOrUkd0wNm2GxgQAAAYQ"]
[Thu Dec 18 18:37:45.723655 2025] [:error] [pid 24958:tid 24979] [client 98.70.102.89:11336] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "aUPZeckDOrUkd0wNm2GxggAAAZI"]
[Thu Dec 18 18:37:46.261842 2025] [:error] [pid 24958:tid 24981] [client 98.70.102.89:11371] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "aUPZeskDOrUkd0wNm2GxgwAAAZQ"]
[Thu Dec 18 18:37:46.707956 2025] [:error] [pid 24542:tid 24546] [client 98.70.102.89:1181] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "aUPZektQz4H2oS3NrDbg0QAAAUI"]
[Thu Dec 18 18:37:47.292375 2025] [:error] [pid 12239:tid 12247] [client 98.70.102.89:1168] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/warm.PhP7"] [unique_id "aUPZe9NnXxfGIuWO6anrZAAAAoM"]
[Thu Dec 18 18:37:47.948738 2025] [:error] [pid 12239:tid 12258] [client 98.70.102.89:11347] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/warm.PhP7"] [unique_id "aUPZe9NnXxfGIuWO6anrZQAAAo4"]
[Thu Dec 18 18:37:48.418498 2025] [:error] [pid 12035:tid 12051] [client 98.70.102.89:11382] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/warm.PhP7"] [unique_id "aUPZfLcVHrNSHjCo-0p8swAAAgk"]
[Thu Dec 18 18:37:48.913389 2025] [:error] [pid 24542:tid 24550] [client 98.70.102.89:2045] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/warm.PhP7"] [unique_id "aUPZfEtQz4H2oS3NrDbg1gAAAUY"]
[Thu Dec 18 18:37:49.293242 2025] [:error] [pid 23558:tid 23621] [client 98.70.102.89:1838] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php7"] [unique_id "aUPZfeHam9NbgPQa9ub19QAAAMY"]
[Thu Dec 18 18:37:49.775705 2025] [:error] [pid 24542:tid 24565] [client 98.70.102.89:1828] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php7"] [unique_id "aUPZfUtQz4H2oS3NrDbg2QAAAVU"]
[Thu Dec 18 18:37:50.423342 2025] [:error] [pid 24433:tid 24446] [client 98.70.102.89:1795] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php7"] [unique_id "aUPZfp4pN9ycmipm8Ti8RQAAAQo"]
[Thu Dec 18 18:37:50.894852 2025] [:error] [pid 12239:tid 12255] [client 98.70.102.89:11279] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php7"] [unique_id "aUPZftNnXxfGIuWO6anrawAAAos"]
[Thu Dec 18 18:37:51.492257 2025] [:error] [pid 23558:tid 23623] [client 98.70.102.89:11386] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aUPZf-Ham9NbgPQa9ub1-AAAAMg"]
[Thu Dec 18 18:37:51.930038 2025] [:error] [pid 12035:tid 12054] [client 98.70.102.89:2013] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aUPZf7cVHrNSHjCo-0p8xAAAAgs"]
[Thu Dec 18 18:37:52.407508 2025] [:error] [pid 23558:tid 23639] [client 98.70.102.89:1818] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aUPZgOHam9NbgPQa9ub1-wAAANg"]
[Thu Dec 18 18:37:53.022192 2025] [:error] [pid 24433:tid 24437] [client 98.70.102.89:1190] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "aUPZgZ4pN9ycmipm8Ti8SgAAAQE"]
[Thu Dec 18 18:37:53.736762 2025] [:error] [pid 24433:tid 24451] [client 98.70.102.89:11387] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pekok.php"] [unique_id "aUPZgZ4pN9ycmipm8Ti8TQAAAQ8"]
[Thu Dec 18 18:37:54.279353 2025] [:error] [pid 12035:tid 12064] [client 98.70.102.89:11297] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pekok.php"] [unique_id "aUPZgrcVHrNSHjCo-0p8yQAAAhU"]
[Thu Dec 18 18:37:54.922485 2025] [:error] [pid 12035:tid 12055] [client 98.70.102.89:1848] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pekok.php"] [unique_id "aUPZgrcVHrNSHjCo-0p8zAAAAgw"]
[Thu Dec 18 18:37:55.387158 2025] [:error] [pid 24433:tid 24444] [client 98.70.102.89:1990] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pekok.php"] [unique_id "aUPZg54pN9ycmipm8Ti8UQAAAQg"]
[Thu Dec 18 18:37:55.882175 2025] [:error] [pid 12035:tid 12049] [client 98.70.102.89:11344] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aUPZg7cVHrNSHjCo-0p8zgAAAgc"]
[Thu Dec 18 18:37:56.366167 2025] [:error] [pid 23556:tid 23584] [client 98.70.102.89:2017] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aUPZhBnmLlk3u5yt9kHIWAAAABg"]
[Thu Dec 18 18:37:56.993524 2025] [:error] [pid 23645:tid 23651] [client 98.70.102.89:2019] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aUPZhDf_Rx0Y0ao_QJg-WgAAAIQ"]
[Thu Dec 18 18:37:57.526102 2025] [:error] [pid 24542:tid 24568] [client 98.70.102.89:11373] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aUPZhUtQz4H2oS3NrDbg4QAAAVg"]
[Thu Dec 18 18:37:58.065164 2025] [:error] [pid 25357:tid 25368] [client 98.70.102.89:11333] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aa.php"] [unique_id "aUPZhoaT7bsEXnJVfJdF-wAAAck"]
[Thu Dec 18 18:37:58.722648 2025] [:error] [pid 23558:tid 23624] [client 98.70.102.89:11364] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aa.php"] [unique_id "aUPZhuHam9NbgPQa9ub2BAAAAMk"]
[Thu Dec 18 18:37:59.072805 2025] [:error] [pid 23556:tid 23574] [client 98.70.102.89:2032] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aa.php"] [unique_id "aUPZhxnmLlk3u5yt9kHIWgAAAA4"]
[Thu Dec 18 18:37:59.988686 2025] [:error] [pid 23556:tid 23560] [client 98.70.102.89:11361] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aa.php"] [unique_id "aUPZhxnmLlk3u5yt9kHIWwAAAAA"]
[Thu Dec 18 18:38:00.659209 2025] [:error] [pid 23558:tid 23639] [client 98.70.102.89:11335] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cart.php"] [unique_id "aUPZiOHam9NbgPQa9ub2BwAAANg"]
[Thu Dec 18 18:38:01.266894 2025] [:error] [pid 12035:tid 12058] [client 98.70.102.89:11385] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cart.php"] [unique_id "aUPZibcVHrNSHjCo-0p80wAAAg8"]
[Thu Dec 18 18:38:02.075274 2025] [:error] [pid 24958:tid 24974] [client 98.70.102.89:2037] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cart.php"] [unique_id "aUPZiskDOrUkd0wNm2GxkAAAAY0"]
[Thu Dec 18 18:38:02.680601 2025] [:error] [pid 24542:tid 24545] [client 98.70.102.89:11357] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cart.php"] [unique_id "aUPZiktQz4H2oS3NrDbg7QAAAUE"]
[Thu Dec 18 18:38:03.394436 2025] [:error] [pid 23558:tid 23615] [client 98.70.102.89:2002] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/compare.php"] [unique_id "aUPZi-Ham9NbgPQa9ub2CwAAAMA"]
[Thu Dec 18 18:38:04.395438 2025] [:error] [pid 23558:tid 23616] [client 98.70.102.89:1815] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/compare.php"] [unique_id "aUPZjOHam9NbgPQa9ub2DAAAAME"]
[Thu Dec 18 18:38:05.789760 2025] [:error] [pid 24433:tid 24447] [client 98.70.102.89:11269] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/compare.php"] [unique_id "aUPZjZ4pN9ycmipm8Ti8WgAAAQs"]
[Thu Dec 18 18:38:06.853886 2025] [:error] [pid 12239:tid 12249] [client 98.70.102.89:1839] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/compare.php"] [unique_id "aUPZjtNnXxfGIuWO6anrfwAAAoU"]
[Thu Dec 18 18:38:08.323541 2025] [:error] [pid 24542:tid 24561] [client 98.70.102.89:11337] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aUPZkEtQz4H2oS3NrDbg-gAAAVE"]
[Thu Dec 18 18:38:09.879473 2025] [:error] [pid 24958:tid 24984] [client 98.70.102.89:1193] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aUPZkckDOrUkd0wNm2GxlAAAAZc"]
[Thu Dec 18 18:38:10.538236 2025] [:error] [pid 12239:tid 12255] [client 98.70.102.89:1853] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aUPZktNnXxfGIuWO6anrhAAAAos"]
[Thu Dec 18 18:38:11.028700 2025] [:error] [pid 23556:tid 23576] [client 98.70.102.89:11372] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aUPZkxnmLlk3u5yt9kHIYgAAABA"]
[Thu Dec 18 18:38:12.077883 2025] [:error] [pid 23556:tid 23564] [client 98.70.102.89:2036] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aUPZlBnmLlk3u5yt9kHIZAAAAAQ"]
[Thu Dec 18 18:38:13.079645 2025] [:error] [pid 24433:tid 24454] [client 98.70.102.89:1823] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aUPZlZ4pN9ycmipm8Ti8ZQAAARI"]
[Thu Dec 18 18:38:13.579331 2025] [:error] [pid 23556:tid 23580] [client 98.70.102.89:11270] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aUPZlRnmLlk3u5yt9kHIZgAAABQ"]
[Thu Dec 18 18:38:14.258747 2025] [:error] [pid 24542:tid 24566] [client 98.70.102.89:11277] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aUPZlktQz4H2oS3NrDbhBgAAAVY"]
[Thu Dec 18 18:38:14.714489 2025] [:error] [pid 23558:tid 23626] [client 98.70.102.89:1809] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUPZluHam9NbgPQa9ub2FQAAAMs"]
[Thu Dec 18 18:38:15.187601 2025] [:error] [pid 12239:tid 12253] [client 98.70.102.89:11380] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUPZl9NnXxfGIuWO6anriQAAAok"]
[Thu Dec 18 18:38:15.714381 2025] [:error] [pid 24542:tid 24562] [client 98.70.102.89:1824] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUPZl0tQz4H2oS3NrDbhJQAAAVI"]
[Thu Dec 18 18:38:16.346421 2025] [:error] [pid 23645:tid 23662] [client 98.70.102.89:1189] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUPZmDf_Rx0Y0ao_QJg-cQAAAI8"]
[Thu Dec 18 18:38:16.981709 2025] [:error] [pid 23645:tid 23656] [client 98.70.102.89:1171] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atom.php"] [unique_id "aUPZmDf_Rx0Y0ao_QJg-dAAAAIk"]
[Thu Dec 18 18:38:17.652999 2025] [:error] [pid 24542:tid 24562] [client 98.70.102.89:11307] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atom.php"] [unique_id "aUPZmUtQz4H2oS3NrDbhNwAAAVI"]
[Thu Dec 18 18:38:18.389439 2025] [:error] [pid 25357:tid 25366] [client 98.70.102.89:11368] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atom.php"] [unique_id "aUPZmoaT7bsEXnJVfJdGCgAAAcc"]
[Thu Dec 18 18:38:18.794249 2025] [:error] [pid 23556:tid 23569] [client 98.70.102.89:11381] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atom.php"] [unique_id "aUPZmhnmLlk3u5yt9kHIaAAAAAk"]
[Thu Dec 18 18:38:19.332683 2025] [:error] [pid 24433:tid 24441] [client 98.70.102.89:11375] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/case.php"] [unique_id "aUPZm54pN9ycmipm8Ti8bQAAAQU"]
[Thu Dec 18 18:38:19.642334 2025] [:error] [pid 25357:tid 25371] [client 98.70.102.89:1837] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/case.php"] [unique_id "aUPZm4aT7bsEXnJVfJdGDgAAAcw"]
[Thu Dec 18 18:38:20.025089 2025] [:error] [pid 23558:tid 23635] [client 98.70.102.89:1187] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/case.php"] [unique_id "aUPZnOHam9NbgPQa9ub2HQAAANQ"]
[Thu Dec 18 18:38:20.362064 2025] [:error] [pid 12239:tid 12244] [client 98.70.102.89:11350] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/case.php"] [unique_id "aUPZnNNnXxfGIuWO6anrkQAAAoA"]
[Thu Dec 18 18:38:21.080412 2025] [:error] [pid 23558:tid 23637] [client 98.70.102.89:1816] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docs.php"] [unique_id "aUPZneHam9NbgPQa9ub2HgAAANY"]
[Thu Dec 18 18:38:21.711181 2025] [:error] [pid 24542:tid 24552] [client 98.70.102.89:11295] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docs.php"] [unique_id "aUPZnUtQz4H2oS3NrDbhQQAAAUg"]
[Thu Dec 18 18:38:22.505205 2025] [:error] [pid 12239:tid 12268] [client 98.70.102.89:1821] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docs.php"] [unique_id "aUPZntNnXxfGIuWO6anrlgAAApg"]
[Thu Dec 18 18:38:23.279812 2025] [:error] [pid 24958:tid 24978] [client 98.70.102.89:1174] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docs.php"] [unique_id "aUPZn8kDOrUkd0wNm2GxoQAAAZE"]
[Thu Dec 18 18:38:24.058692 2025] [:error] [pid 25357:tid 25372] [client 98.70.102.89:1810] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ios.php"] [unique_id "aUPZoIaT7bsEXnJVfJdGEgAAAc0"]
[Thu Dec 18 18:38:24.711561 2025] [:error] [pid 25357:tid 25377] [client 98.70.102.89:1846] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ios.php"] [unique_id "aUPZoIaT7bsEXnJVfJdGEwAAAdI"]
[Thu Dec 18 18:38:25.103289 2025] [:error] [pid 24542:tid 24546] [client 98.70.102.89:11348] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ios.php"] [unique_id "aUPZoUtQz4H2oS3NrDbhSgAAAUI"]
[Thu Dec 18 18:38:25.620647 2025] [:error] [pid 12239:tid 12263] [client 98.70.102.89:1197] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ios.php"] [unique_id "aUPZodNnXxfGIuWO6anrmQAAApM"]
[Thu Dec 18 18:38:26.311513 2025] [:error] [pid 23558:tid 23617] [client 98.70.102.89:11338] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUPZouHam9NbgPQa9ub2JAAAAMI"]
[Thu Dec 18 18:38:26.796450 2025] [:error] [pid 23645:tid 23661] [client 98.70.102.89:11383] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUPZojf_Rx0Y0ao_QJg-ewAAAI4"]
[Thu Dec 18 18:38:27.366977 2025] [:error] [pid 24542:tid 24562] [client 98.70.102.89:1832] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUPZo0tQz4H2oS3NrDbhTwAAAVI"]
[Thu Dec 18 18:38:27.762067 2025] [:error] [pid 24958:tid 24966] [client 98.70.102.89:11289] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUPZo8kDOrUkd0wNm2GxpQAAAYU"]
[Thu Dec 18 18:38:28.314237 2025] [:error] [pid 24542:tid 24568] [client 98.70.102.89:1207] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUPZpEtQz4H2oS3NrDbhUwAAAVg"]
[Thu Dec 18 18:38:28.800058 2025] [:error] [pid 12383:tid 12407] [client 98.70.102.89:11267] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUPZpPdgllo9h1cyxGapawAAAtU"]
[Thu Dec 18 18:38:29.357449 2025] [:error] [pid 12383:tid 12405] [client 98.70.102.89:11284] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUPZpfdgllo9h1cyxGapbwAAAtM"]
[Thu Dec 18 18:38:30.915612 2025] [:error] [pid 12383:tid 12398] [client 98.70.102.89:2025] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUPZpvdgllo9h1cyxGapewAAAsw"]
[Thu Dec 18 18:38:32.021710 2025] [:error] [pid 24542:tid 24544] [client 98.70.102.89:1812] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aUPZqEtQz4H2oS3NrDbhWAAAAUA"]
[Thu Dec 18 18:38:32.829351 2025] [:error] [pid 25357:tid 25363] [client 98.70.102.89:1798] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aUPZqIaT7bsEXnJVfJdGGgAAAcQ"]
[Thu Dec 18 18:38:33.374538 2025] [:error] [pid 12239:tid 12267] [client 98.70.102.89:11276] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aUPZqdNnXxfGIuWO6anrpgAAApc"]
[Thu Dec 18 18:38:41.311534 2025] [:error] [pid 25357:tid 25367] [client 98.70.102.89:1844] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aUPZsYaT7bsEXnJVfJdGNQAAAcg"]
[Thu Dec 18 18:38:41.772178 2025] [:error] [pid 12239:tid 12264] [client 98.70.102.89:11312] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aUPZsdNnXxfGIuWO6anrrQAAApQ"]
[Thu Dec 18 18:38:42.201990 2025] [:error] [pid 24958:tid 24981] [client 98.70.102.89:1833] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aUPZsskDOrUkd0wNm2GxrgAAAZQ"]
[Thu Dec 18 18:38:42.717099 2025] [:error] [pid 24542:tid 24567] [client 98.70.102.89:1205] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aUPZsktQz4H2oS3NrDbhgAAAAVc"]
[Thu Dec 18 18:38:43.505568 2025] [:error] [pid 23645:tid 23648] [client 98.70.102.89:11388] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aUPZszf_Rx0Y0ao_QJg-kQAAAIE"]
[Thu Dec 18 18:38:43.985688 2025] [:error] [pid 24542:tid 24566] [client 98.70.102.89:1829] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aUPZs0tQz4H2oS3NrDbhhAAAAVY"]
[Thu Dec 18 18:38:44.603178 2025] [:error] [pid 24433:tid 24439] [client 98.70.102.89:1734] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aUPZtJ4pN9ycmipm8Ti8fQAAAQM"]
[Thu Dec 18 18:38:45.753744 2025] [:error] [pid 23556:tid 23577] [client 98.70.102.89:11287] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aUPZtRnmLlk3u5yt9kHIjgAAABE"]
[Thu Dec 18 18:38:46.885854 2025] [:error] [pid 23645:tid 23668] [client 98.70.102.89:1822] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aUPZtjf_Rx0Y0ao_QJg-nAAAAJU"]
[Thu Dec 18 18:38:47.325592 2025] [:error] [pid 12035:tid 12055] [client 98.70.102.89:11391] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aUPZt7cVHrNSHjCo-0p8-gAAAgw"]
[Thu Dec 18 18:38:48.480317 2025] [:error] [pid 24542:tid 24561] [client 98.70.102.89:2040] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aUPZuEtQz4H2oS3NrDbhkwAAAVE"]
[Thu Dec 18 18:38:49.810238 2025] [:error] [pid 23558:tid 23615] [client 98.70.102.89:11329] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aUPZueHam9NbgPQa9ub2PgAAAMA"]
[Thu Dec 18 18:38:50.402419 2025] [:error] [pid 12383:tid 12397] [client 98.70.102.89:1836] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aUPZuvdgllo9h1cyxGapkQAAAss"]
[Thu Dec 18 18:38:51.226952 2025] [:error] [pid 23645:tid 23647] [client 98.70.102.89:11359] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aUPZuzf_Rx0Y0ao_QJg-pwAAAIA"]
[Thu Dec 18 18:38:52.318424 2025] [:error] [pid 12035:tid 12059] [client 98.70.102.89:11376] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aUPZvLcVHrNSHjCo-0p8_gAAAhA"]
[Thu Dec 18 18:38:53.376635 2025] [:error] [pid 24542:tid 24564] [client 98.70.102.89:1813] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aUPZvUtQz4H2oS3NrDbhpQAAAVQ"]
[Thu Dec 18 18:38:54.618188 2025] [:error] [pid 25357:tid 25382] [client 98.70.102.89:11288] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aUPZvoaT7bsEXnJVfJdGRgAAAdc"]
[Thu Dec 18 18:38:55.664004 2025] [:error] [pid 24542:tid 24554] [client 98.70.102.89:11282] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aUPZv0tQz4H2oS3NrDbhqwAAAUo"]
[Thu Dec 18 18:38:57.383620 2025] [:error] [pid 23645:tid 23670] [client 98.70.102.89:1728] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aUPZwTf_Rx0Y0ao_QJg-tQAAAJc"]
[Thu Dec 18 18:38:58.342776 2025] [:error] [pid 25357:tid 25365] [client 98.70.102.89:1826] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aUPZwoaT7bsEXnJVfJdGSQAAAcY"]
[Thu Dec 18 18:38:59.211871 2025] [:error] [pid 23556:tid 23560] [client 98.70.102.89:1842] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aUPZwxnmLlk3u5yt9kHIwQAAAAA"]
[Thu Dec 18 18:39:00.278614 2025] [:error] [pid 23558:tid 23617] [client 98.70.102.89:1737] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aUPZxOHam9NbgPQa9ub2awAAAMI"]
[Thu Dec 18 18:39:00.881102 2025] [:error] [pid 25357:tid 25362] [client 98.70.102.89:11311] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aUPZxIaT7bsEXnJVfJdGSwAAAcM"]
[Thu Dec 18 18:39:01.612614 2025] [:error] [pid 12035:tid 12066] [client 98.70.102.89:1929] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aUPZxbcVHrNSHjCo-0p9HQAAAhc"]
[Thu Dec 18 18:39:02.271952 2025] [:error] [pid 23645:tid 23667] [client 98.70.102.89:1825] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUPZxjf_Rx0Y0ao_QJg-uQAAAJQ"]
[Thu Dec 18 18:39:02.652258 2025] [:error] [pid 24433:tid 24458] [client 98.70.102.89:1768] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUPZxp4pN9ycmipm8Ti8rAAAARY"]
[Thu Dec 18 18:39:03.438833 2025] [:error] [pid 23558:tid 23619] [client 98.70.102.89:11332] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUPZx-Ham9NbgPQa9ub2ewAAAMQ"]
[Thu Dec 18 18:39:04.480972 2025] [:error] [pid 12239:tid 12249] [client 98.70.102.89:1738] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUPZyNNnXxfGIuWO6anr9QAAAoU"]
[Thu Dec 18 18:39:05.353495 2025] [:error] [pid 23645:tid 23647] [client 98.70.102.89:11278] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aUPZyTf_Rx0Y0ao_QJg-vgAAAIA"]
[Thu Dec 18 18:39:06.036871 2025] [:error] [pid 23556:tid 23564] [client 98.70.102.89:11274] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aUPZyhnmLlk3u5yt9kHI4AAAAAQ"]
[Thu Dec 18 18:39:07.285184 2025] [:error] [pid 23645:tid 23657] [client 98.70.102.89:11292] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aUPZyzf_Rx0Y0ao_QJg-wAAAAIo"]
[Thu Dec 18 18:39:07.768280 2025] [:error] [pid 24958:tid 24980] [client 98.70.102.89:11308] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aUPZy8kDOrUkd0wNm2GxzgAAAZM"]
[Thu Dec 18 18:39:08.284196 2025] [:error] [pid 25357:tid 25377] [client 98.70.102.89:11286] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aUPZzIaT7bsEXnJVfJdGTAAAAdI"]
[Thu Dec 18 18:39:08.840989 2025] [:error] [pid 24433:tid 24451] [client 98.70.102.89:11328] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aUPZzJ4pN9ycmipm8Ti8rgAAAQ8"]
[Thu Dec 18 18:39:09.549911 2025] [:error] [pid 12383:tid 12409] [client 98.70.102.89:11291] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aUPZzfdgllo9h1cyxGapugAAAtc"]
[Thu Dec 18 18:39:10.527954 2025] [:error] [pid 23558:tid 23619] [client 98.70.102.89:1755] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aUPZzuHam9NbgPQa9ub2ggAAAMQ"]
[Thu Dec 18 18:39:11.060993 2025] [:error] [pid 24958:tid 24968] [client 98.70.102.89:1800] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUPZz8kDOrUkd0wNm2Gx0AAAAYc"]
[Thu Dec 18 18:39:11.692669 2025] [:error] [pid 25357:tid 25381] [client 98.70.102.89:1806] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUPZz4aT7bsEXnJVfJdGUQAAAdY"]
[Thu Dec 18 18:39:12.400589 2025] [:error] [pid 24542:tid 24551] [client 98.70.102.89:1754] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUPZ0EtQz4H2oS3NrDbh4gAAAUc"]
[Thu Dec 18 18:39:12.860630 2025] [:error] [pid 23558:tid 23635] [client 98.70.102.89:11296] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUPZ0OHam9NbgPQa9ub2hwAAANQ"]
[Thu Dec 18 18:39:13.610826 2025] [:error] [pid 24542:tid 24553] [client 98.70.102.89:1786] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aUPZ0UtQz4H2oS3NrDbh6AAAAUk"]
[Thu Dec 18 18:39:14.573219 2025] [:error] [pid 24958:tid 24962] [client 98.70.102.89:11268] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aUPZ0skDOrUkd0wNm2Gx0QAAAYE"]
[Thu Dec 18 18:39:16.406792 2025] [:error] [pid 24433:tid 24450] [client 98.70.102.89:11360] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aUPZ1J4pN9ycmipm8Ti8uwAAAQ4"]
[Thu Dec 18 18:39:18.309223 2025] [:error] [pid 24542:tid 24563] [client 98.70.102.89:1854] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aUPZ1ktQz4H2oS3NrDbh-wAAAVM"]
[Thu Dec 18 18:39:19.258313 2025] [:error] [pid 25357:tid 25371] [client 98.70.102.89:11313] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aUPZ14aT7bsEXnJVfJdGXgAAAcw"]
[Thu Dec 18 18:39:20.050595 2025] [:error] [pid 25357:tid 25370] [client 98.70.102.89:1799] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aUPZ2IaT7bsEXnJVfJdGXwAAAcs"]
[Thu Dec 18 18:39:21.102090 2025] [:error] [pid 24542:tid 24545] [client 98.70.102.89:11317] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aUPZ2UtQz4H2oS3NrDbiAgAAAUE"]
[Thu Dec 18 18:39:22.841729 2025] [:error] [pid 23558:tid 23615] [client 98.70.102.89:1819] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aUPZ2uHam9NbgPQa9ub2oQAAAMA"]
[Thu Dec 18 18:39:24.453927 2025] [:error] [pid 23558:tid 23623] [client 98.70.102.89:1737] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aUPZ3OHam9NbgPQa9ub2twAAAMg"]
[Thu Dec 18 18:39:25.303612 2025] [:error] [pid 23558:tid 23632] [client 98.70.102.89:11321] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aUPZ3eHam9NbgPQa9ub2vgAAANE"]
[Thu Dec 18 18:39:26.896015 2025] [:error] [pid 12239:tid 12245] [client 98.70.102.89:11272] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aUPZ3tNnXxfGIuWO6ansDAAAAoE"]
[Thu Dec 18 18:39:28.008056 2025] [:error] [pid 24433:tid 24453] [client 98.70.102.89:1803] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aUPZ4J4pN9ycmipm8Ti8xwAAARE"]
[Thu Dec 18 18:39:29.844270 2025] [:error] [pid 24958:tid 24976] [client 98.70.102.89:1759] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aUPZ4ckDOrUkd0wNm2Gx4QAAAY8"]
[Thu Dec 18 18:39:30.841508 2025] [:error] [pid 24958:tid 24965] [client 98.70.102.89:11323] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aUPZ4skDOrUkd0wNm2Gx4wAAAYQ"]
[Thu Dec 18 18:39:31.472181 2025] [:error] [pid 23645:tid 23662] [client 98.70.102.89:11319] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aUPZ4zf_Rx0Y0ao_QJg-9AAAAI8"]
[Thu Dec 18 18:39:32.488913 2025] [:error] [pid 12035:tid 12060] [client 98.70.102.89:11303] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aUPZ5LcVHrNSHjCo-0p9OQAAAhE"]
[Thu Dec 18 18:39:32.914403 2025] [:error] [pid 24433:tid 24445] [client 98.70.102.89:1790] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUPZ5J4pN9ycmipm8Ti8zQAAAQk"]
[Thu Dec 18 18:39:34.006772 2025] [:error] [pid 24542:tid 24551] [client 98.70.102.89:1753] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUPZ5ktQz4H2oS3NrDbiLAAAAUc"]
[Thu Dec 18 18:39:34.874996 2025] [:error] [pid 12383:tid 12398] [client 98.70.102.89:11326] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUPZ5vdgllo9h1cyxGap1AAAAsw"]
[Thu Dec 18 18:39:35.461973 2025] [:error] [pid 24542:tid 24551] [client 98.70.102.89:1840] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUPZ50tQz4H2oS3NrDbiNwAAAUc"]
[Thu Dec 18 18:39:36.680869 2025] [:error] [pid 12383:tid 12395] [client 98.70.102.89:11280] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUPZ6Pdgllo9h1cyxGap1wAAAsk"]
[Thu Dec 18 18:39:37.083936 2025] [:error] [pid 25357:tid 25375] [client 98.70.102.89:1797] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUPZ6YaT7bsEXnJVfJdGcgAAAdA"]
[Thu Dec 18 18:39:37.792279 2025] [:error] [pid 23556:tid 23573] [client 98.70.102.89:1850] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUPZ6RnmLlk3u5yt9kHJBwAAAA0"]
[Thu Dec 18 18:39:38.534915 2025] [:error] [pid 23645:tid 23671] [client 98.70.102.89:11264] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUPZ6jf_Rx0Y0ao_QJg--QAAAJg"]
[Thu Dec 18 18:39:39.216241 2025] [:error] [pid 12383:tid 12407] [client 98.70.102.89:1955] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aUPZ6_dgllo9h1cyxGap2QAAAtU"]
[Thu Dec 18 18:39:39.735843 2025] [:error] [pid 23558:tid 23624] [client 98.70.102.89:1827] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aUPZ6-Ham9NbgPQa9ub2yAAAAMk"]
[Thu Dec 18 18:39:40.247311 2025] [:error] [pid 23558:tid 23617] [client 98.70.102.89:1154] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aUPZ7OHam9NbgPQa9ub2yQAAAMI"]
[Thu Dec 18 18:39:40.593205 2025] [:error] [pid 25357:tid 25380] [client 98.70.102.89:2031] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aUPZ7IaT7bsEXnJVfJdGdAAAAdU"]
[Thu Dec 18 18:39:48.467459 2025] [:error] [pid 24433:tid 24452] [client 98.70.102.89:11370] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUPZ9J4pN9ycmipm8Ti83gAAARA"]
[Thu Dec 18 18:39:49.085414 2025] [:error] [pid 24542:tid 24556] [client 98.70.102.89:1730] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUPZ9UtQz4H2oS3NrDbiVAAAAUw"]
[Thu Dec 18 18:39:49.663445 2025] [:error] [pid 24542:tid 24557] [client 98.70.102.89:11266] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUPZ9UtQz4H2oS3NrDbiVwAAAU0"]
[Thu Dec 18 18:39:50.156770 2025] [:error] [pid 12035:tid 12044] [client 98.70.102.89:11307] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUPZ9rcVHrNSHjCo-0p9PwAAAgI"]
[Thu Dec 18 18:39:50.891034 2025] [:error] [pid 23645:tid 23658] [client 98.70.102.89:1788] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aUPZ9jf_Rx0Y0ao_QJg-_QAAAIs"]
[Thu Dec 18 18:39:52.166831 2025] [:error] [pid 23558:tid 23618] [client 98.70.102.89:1841] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aUPZ-OHam9NbgPQa9ub22QAAAMM"]
[Thu Dec 18 18:39:53.611674 2025] [:error] [pid 24542:tid 24546] [client 98.70.102.89:1834] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aUPZ-UtQz4H2oS3NrDbiYQAAAUI"]
[Thu Dec 18 18:39:55.246945 2025] [:error] [pid 24958:tid 24972] [client 98.70.102.89:1175] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aUPZ-8kDOrUkd0wNm2Gx8AAAAYs"]
[Thu Dec 18 18:39:56.252514 2025] [:error] [pid 23645:tid 23648] [client 98.70.102.89:1733] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aUPZ_Df_Rx0Y0ao_QJg_AQAAAIE"]
[Thu Dec 18 18:39:57.224496 2025] [:error] [pid 12383:tid 12391] [client 98.70.102.89:1814] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aUPZ_fdgllo9h1cyxGap6gAAAsU"]
[Thu Dec 18 18:39:58.238455 2025] [:error] [pid 23556:tid 23563] [client 98.70.102.89:11299] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aUPZ_hnmLlk3u5yt9kHJOgAAAAM"]
[Thu Dec 18 18:39:59.335763 2025] [:error] [pid 23556:tid 23568] [client 98.70.102.89:1761] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aUPZ_xnmLlk3u5yt9kHJOwAAAAg"]
[Thu Dec 18 18:40:00.439368 2025] [:error] [pid 24542:tid 24563] [client 98.70.102.89:11374] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aUPaAEtQz4H2oS3NrDbibwAAAVM"]
[Thu Dec 18 18:40:01.002182 2025] [:error] [pid 23558:tid 23633] [client 98.70.102.89:1920] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aUPaAeHam9NbgPQa9ub26QAAANI"]
[Thu Dec 18 18:40:01.950638 2025] [:error] [pid 24958:tid 24970] [client 98.70.102.89:1771] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aUPaAckDOrUkd0wNm2GyAgAAAYk"]
[Thu Dec 18 18:40:02.365107 2025] [:error] [pid 23558:tid 23637] [client 98.70.102.89:11304] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aUPaAuHam9NbgPQa9ub28QAAANY"]
[Thu Dec 18 18:40:02.926691 2025] [:error] [pid 24433:tid 24460] [client 98.70.102.89:1802] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aUPaAp4pN9ycmipm8Ti87QAAARg"]
[Thu Dec 18 18:40:03.508857 2025] [:error] [pid 24958:tid 24965] [client 98.70.102.89:11314] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aUPaA8kDOrUkd0wNm2GyBAAAAYQ"]
[Thu Dec 18 18:40:04.024504 2025] [:error] [pid 12383:tid 12410] [client 98.70.102.89:1959] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aUPaBPdgllo9h1cyxGap8gAAAtg"]
[Thu Dec 18 18:40:05.208600 2025] [:error] [pid 23645:tid 23657] [client 98.70.102.89:1736] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aUPaBTf_Rx0Y0ao_QJg_CwAAAIo"]
[Thu Dec 18 18:40:06.178273 2025] [:error] [pid 23558:tid 23626] [client 98.70.102.89:1751] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aUPaBuHam9NbgPQa9ub3AAAAAMs"]
[Thu Dec 18 18:40:06.772473 2025] [:error] [pid 24542:tid 24558] [client 98.70.102.89:2030] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aUPaBktQz4H2oS3NrDbiiQAAAU4"]
[Thu Dec 18 18:40:07.220562 2025] [:error] [pid 24542:tid 24565] [client 98.70.102.89:11275] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aUPaB0tQz4H2oS3NrDbijAAAAVU"]
[Thu Dec 18 18:40:07.917468 2025] [:error] [pid 23558:tid 23623] [client 98.70.102.89:1746] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aUPaB-Ham9NbgPQa9ub3BgAAAMg"]
[Thu Dec 18 18:40:08.543696 2025] [:error] [pid 24958:tid 24977] [client 98.70.102.89:1756] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aUPaCMkDOrUkd0wNm2GyDAAAAZA"]
[Thu Dec 18 18:40:09.243947 2025] [:error] [pid 25357:tid 25383] [client 98.70.102.89:11281] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aUPaCYaT7bsEXnJVfJdGoQAAAdg"]
[Thu Dec 18 18:40:10.076986 2025] [:error] [pid 24542:tid 24561] [client 98.70.102.89:1766] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aUPaCktQz4H2oS3NrDbilAAAAVE"]
[Thu Dec 18 18:40:11.461242 2025] [:error] [pid 24542:tid 24564] [client 98.70.102.89:1983] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aUPaC0tQz4H2oS3NrDbinwAAAVQ"]
[Thu Dec 18 18:40:12.035615 2025] [:error] [pid 12239:tid 12250] [client 98.70.102.89:1808] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xo.php"] [unique_id "aUPaDNNnXxfGIuWO6ansMwAAAoY"]
[Thu Dec 18 18:40:12.644545 2025] [:error] [pid 24542:tid 24565] [client 98.70.102.89:1764] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xo.php"] [unique_id "aUPaDEtQz4H2oS3NrDbiqQAAAVU"]
[Thu Dec 18 18:40:13.252946 2025] [:error] [pid 24958:tid 24985] [client 98.70.102.89:1953] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xo.php"] [unique_id "aUPaDckDOrUkd0wNm2GyEQAAAZg"]
[Thu Dec 18 18:40:13.866564 2025] [:error] [pid 12383:tid 12391] [client 98.70.102.89:1970] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xo.php"] [unique_id "aUPaDfdgllo9h1cyxGap9wAAAsU"]
[Thu Dec 18 18:40:14.386000 2025] [:error] [pid 12383:tid 12386] [client 98.70.102.89:1781] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aUPaDvdgllo9h1cyxGap-AAAAsA"]
[Thu Dec 18 18:40:14.876932 2025] [:error] [pid 23558:tid 23636] [client 98.70.102.89:11273] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aUPaDuHam9NbgPQa9ub3MQAAANU"]
[Thu Dec 18 18:40:15.519285 2025] [:error] [pid 12035:tid 12046] [client 98.70.102.89:1830] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aUPaD7cVHrNSHjCo-0p9bQAAAgQ"]
[Thu Dec 18 18:40:16.083782 2025] [:error] [pid 25357:tid 25360] [client 98.70.102.89:1773] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aUPaEIaT7bsEXnJVfJdGqgAAAcE"]
[Thu Dec 18 18:40:16.678698 2025] [:error] [pid 12383:tid 12395] [client 98.70.102.89:1792] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aUPaEPdgllo9h1cyxGap-QAAAsk"]
[Thu Dec 18 18:40:17.336748 2025] [:error] [pid 25357:tid 25362] [client 98.70.102.89:1780] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aUPaEYaT7bsEXnJVfJdGqwAAAcM"]
[Thu Dec 18 18:40:17.814786 2025] [:error] [pid 25357:tid 25361] [client 98.70.102.89:1807] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aUPaEYaT7bsEXnJVfJdGrAAAAcI"]
[Thu Dec 18 18:40:18.924354 2025] [:error] [pid 23556:tid 23571] [client 98.70.102.89:11324] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aUPaEhnmLlk3u5yt9kHJSgAAAAs"]
[Thu Dec 18 18:40:19.937888 2025] [:error] [pid 12239:tid 12257] [client 98.70.102.89:1762] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUPaE9NnXxfGIuWO6ansQQAAAo0"]
[Thu Dec 18 18:40:20.475084 2025] [:error] [pid 23558:tid 23634] [client 98.70.102.89:1772] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUPaFOHam9NbgPQa9ub3OQAAANM"]
[Thu Dec 18 18:40:21.977851 2025] [:error] [pid 24433:tid 24436] [client 98.70.102.89:1843] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUPaFZ4pN9ycmipm8Ti9CQAAAQA"]
[Thu Dec 18 18:40:22.783855 2025] [:error] [pid 12239:tid 12251] [client 98.70.102.89:1765] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUPaFtNnXxfGIuWO6ansRQAAAoc"]
[Thu Dec 18 18:40:24.013681 2025] [:error] [pid 23645:tid 23657] [client 98.70.102.89:1801] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aUPaGDf_Rx0Y0ao_QJg_FQAAAIo"]
[Thu Dec 18 18:40:24.682821 2025] [:error] [pid 25357:tid 25382] [client 98.70.102.89:1956] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aUPaGIaT7bsEXnJVfJdGtAAAAdc"]
[Thu Dec 18 18:40:25.436308 2025] [:error] [pid 12035:tid 12061] [client 98.70.102.89:11305] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aUPaGbcVHrNSHjCo-0p9dAAAAhI"]
[Thu Dec 18 18:40:26.097515 2025] [:error] [pid 12035:tid 12067] [client 98.70.102.89:11301] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aUPaGrcVHrNSHjCo-0p9dQAAAhg"]
[Thu Dec 18 18:40:26.722282 2025] [:error] [pid 23645:tid 23648] [client 98.70.102.89:1795] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aUPaGjf_Rx0Y0ao_QJg_HQAAAIE"]
[Thu Dec 18 18:40:27.360209 2025] [:error] [pid 23645:tid 23649] [client 98.70.102.89:1777] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aUPaGzf_Rx0Y0ao_QJg_HgAAAII"]
[Thu Dec 18 18:40:27.959727 2025] [:error] [pid 23645:tid 23668] [client 98.70.102.89:1748] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aUPaGzf_Rx0Y0ao_QJg_IAAAAJU"]
[Thu Dec 18 18:40:28.432187 2025] [:error] [pid 24958:tid 24982] [client 98.70.102.89:1744] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aUPaHMkDOrUkd0wNm2GyKAAAAZU"]
[Thu Dec 18 18:40:28.791239 2025] [:error] [pid 12239:tid 12268] [client 98.70.102.89:11294] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aUPaHNNnXxfGIuWO6ansSgAAApg"]
[Thu Dec 18 18:40:29.552959 2025] [:error] [pid 12383:tid 12392] [client 98.70.102.89:1763] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aUPaHfdgllo9h1cyxGaqAAAAAsY"]
[Thu Dec 18 18:40:30.071741 2025] [:error] [pid 23558:tid 23626] [client 98.70.102.89:1809] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aUPaHuHam9NbgPQa9ub3RQAAAMs"]
[Thu Dec 18 18:40:30.494681 2025] [:error] [pid 12239:tid 12244] [client 98.70.102.89:1954] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aUPaHtNnXxfGIuWO6ansTgAAAoA"]
[Thu Dec 18 18:40:31.027950 2025] [:error] [pid 24542:tid 24553] [client 98.70.102.89:1930] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/406.php"] [unique_id "aUPaH0tQz4H2oS3NrDbixQAAAUk"]
[Thu Dec 18 18:40:31.405652 2025] [:error] [pid 12239:tid 12264] [client 98.70.102.89:1741] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/406.php"] [unique_id "aUPaH9NnXxfGIuWO6ansUgAAApQ"]
[Thu Dec 18 18:40:32.025412 2025] [:error] [pid 12239:tid 12251] [client 98.70.102.89:1770] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/406.php"] [unique_id "aUPaINNnXxfGIuWO6ansVAAAAoc"]
[Thu Dec 18 18:40:32.547542 2025] [:error] [pid 24958:tid 24975] [client 98.70.102.89:1805] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/406.php"] [unique_id "aUPaIMkDOrUkd0wNm2GyLQAAAY4"]
[Thu Dec 18 18:40:33.091099 2025] [:error] [pid 12035:tid 12065] [client 98.70.102.89:1731] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mariju.php"] [unique_id "aUPaIbcVHrNSHjCo-0p9fgAAAhY"]
[Thu Dec 18 18:40:33.645749 2025] [:error] [pid 12239:tid 12253] [client 98.70.102.89:1769] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mariju.php"] [unique_id "aUPaIdNnXxfGIuWO6ansVwAAAok"]
[Thu Dec 18 18:40:34.167228 2025] [:error] [pid 24433:tid 24442] [client 98.70.102.89:1729] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mariju.php"] [unique_id "aUPaIp4pN9ycmipm8Ti9FQAAAQY"]
[Thu Dec 18 18:40:34.921041 2025] [:error] [pid 24958:tid 24968] [client 98.70.102.89:1735] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mariju.php"] [unique_id "aUPaIskDOrUkd0wNm2GyMQAAAYc"]
[Thu Dec 18 18:40:35.734520 2025] [:error] [pid 25357:tid 25374] [client 98.70.102.89:11283] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUPaI4aT7bsEXnJVfJdGvgAAAc8"]
[Thu Dec 18 18:40:36.740737 2025] [:error] [pid 24542:tid 24561] [client 98.70.102.89:1957] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUPaJEtQz4H2oS3NrDbi0QAAAVE"]
[Thu Dec 18 18:40:37.278823 2025] [:error] [pid 24542:tid 24566] [client 98.70.102.89:11389] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUPaJUtQz4H2oS3NrDbi1AAAAVY"]
[Thu Dec 18 18:40:38.523745 2025] [:error] [pid 12239:tid 12259] [client 98.70.102.89:1923] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUPaJtNnXxfGIuWO6ansXAAAAo8"]
[Thu Dec 18 18:40:39.319438 2025] [:error] [pid 23558:tid 23630] [client 98.70.102.89:11285] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aUPaJ-Ham9NbgPQa9ub3UAAAAM8"]
[Thu Dec 18 18:40:40.133875 2025] [:error] [pid 24542:tid 24547] [client 98.70.102.89:1927] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aUPaKEtQz4H2oS3NrDbi3gAAAUM"]
[Thu Dec 18 18:40:40.755475 2025] [:error] [pid 23645:tid 23669] [client 98.70.102.89:1931] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aUPaKDf_Rx0Y0ao_QJg_JQAAAJY"]
[Thu Dec 18 18:40:41.161860 2025] [:error] [pid 25357:tid 25360] [client 98.70.102.89:1847] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aUPaKYaT7bsEXnJVfJdGxAAAAcE"]
[Thu Dec 18 18:40:41.626219 2025] [:error] [pid 23558:tid 23617] [client 98.70.102.89:1851] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aUPaKeHam9NbgPQa9ub3UgAAAMI"]
[Thu Dec 18 18:40:42.131291 2025] [:error] [pid 23558:tid 23625] [client 98.70.102.89:1775] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aUPaKuHam9NbgPQa9ub3VAAAAMo"]
[Thu Dec 18 18:40:42.499009 2025] [:error] [pid 24542:tid 24553] [client 98.70.102.89:1971] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aUPaKktQz4H2oS3NrDbi4wAAAUk"]
[Thu Dec 18 18:40:43.080969 2025] [:error] [pid 23556:tid 23566] [client 98.70.102.89:11316] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aUPaKxnmLlk3u5yt9kHJWgAAAAY"]
[Thu Dec 18 18:40:43.506487 2025] [:error] [pid 12383:tid 12396] [client 98.70.102.89:1982] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aUPaK_dgllo9h1cyxGaqCAAAAso"]
[Thu Dec 18 18:40:43.953107 2025] [:error] [pid 23645:tid 23665] [client 98.70.102.89:1793] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aUPaKzf_Rx0Y0ao_QJg_KwAAAJI"]
[Thu Dec 18 18:40:44.440904 2025] [:error] [pid 24542:tid 24557] [client 98.70.102.89:1750] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aUPaLEtQz4H2oS3NrDbi5wAAAU0"]
[Thu Dec 18 18:40:44.869066 2025] [:error] [pid 24433:tid 24458] [client 98.70.102.89:11290] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aUPaLJ4pN9ycmipm8Ti9JwAAARY"]
[Thu Dec 18 18:40:45.514191 2025] [:error] [pid 23558:tid 23634] [client 98.70.102.89:1845] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aUPaLeHam9NbgPQa9ub3VwAAANM"]
[Thu Dec 18 18:40:46.081129 2025] [:error] [pid 23556:tid 23562] [client 98.70.102.89:1677] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aUPaLhnmLlk3u5yt9kHJXQAAAAI"]
[Thu Dec 18 18:40:46.628935 2025] [:error] [pid 12239:tid 12268] [client 98.70.102.89:1831] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aUPaLtNnXxfGIuWO6ansYAAAApg"]
[Thu Dec 18 18:40:47.018686 2025] [:error] [pid 12239:tid 12265] [client 98.70.102.89:1968] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aUPaL9NnXxfGIuWO6ansYQAAApU"]
[Thu Dec 18 18:40:47.531220 2025] [:error] [pid 25357:tid 25382] [client 98.70.102.89:1941] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "aUPaL4aT7bsEXnJVfJdGywAAAdc"]
[Thu Dec 18 18:40:47.974480 2025] [:error] [pid 25357:tid 25381] [client 98.70.102.89:1672] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "aUPaL4aT7bsEXnJVfJdGzAAAAdY"]
[Thu Dec 18 18:40:53.241704 2025] [:error] [pid 24433:tid 24447] [client 98.70.102.89:1688] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v1.php"] [unique_id "aUPaNZ4pN9ycmipm8Ti9OgAAAQs"]
[Thu Dec 18 18:40:53.624436 2025] [:error] [pid 12035:tid 12067] [client 98.70.102.89:1752] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v1.php"] [unique_id "aUPaNbcVHrNSHjCo-0p9mwAAAhg"]
[Thu Dec 18 18:40:53.994405 2025] [:error] [pid 23645:tid 23654] [client 98.70.102.89:1928] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v1.php"] [unique_id "aUPaNTf_Rx0Y0ao_QJg_MgAAAIc"]
[Thu Dec 18 18:40:54.450772 2025] [:error] [pid 12383:tid 12394] [client 98.70.102.89:1924] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v1.php"] [unique_id "aUPaNvdgllo9h1cyxGaqEgAAAsg"]
[Thu Dec 18 18:40:54.820191 2025] [:error] [pid 23556:tid 23564] [client 98.70.102.89:1948] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aUPaNhnmLlk3u5yt9kHJXwAAAAQ"]
[Thu Dec 18 18:40:55.192201 2025] [:error] [pid 24542:tid 24558] [client 98.70.102.89:1973] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aUPaN0tQz4H2oS3NrDbi9AAAAU4"]
[Thu Dec 18 18:40:55.605919 2025] [:error] [pid 12239:tid 12267] [client 98.70.102.89:11306] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aUPaN9NnXxfGIuWO6anscQAAApc"]
[Thu Dec 18 18:40:56.073159 2025] [:error] [pid 24433:tid 24459] [client 98.70.102.89:1946] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aUPaOJ4pN9ycmipm8Ti9QAAAARc"]
[Thu Dec 18 18:40:56.512292 2025] [:error] [pid 23558:tid 23625] [client 98.70.102.89:1757] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dex.php"] [unique_id "aUPaOOHam9NbgPQa9ub3XAAAAMo"]
[Thu Dec 18 18:40:57.125996 2025] [:error] [pid 24542:tid 24562] [client 98.70.102.89:1743] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dex.php"] [unique_id "aUPaOUtQz4H2oS3NrDbi-AAAAVI"]
[Thu Dec 18 18:40:57.628058 2025] [:error] [pid 12239:tid 12266] [client 98.70.102.89:1835] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dex.php"] [unique_id "aUPaOdNnXxfGIuWO6ansdAAAApY"]
[Thu Dec 18 18:40:58.048249 2025] [:error] [pid 23556:tid 23560] [client 98.70.102.89:1740] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dex.php"] [unique_id "aUPaOhnmLlk3u5yt9kHJYQAAAAA"]
[Thu Dec 18 18:40:58.530009 2025] [:error] [pid 12035:tid 12044] [client 98.70.102.89:1943] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/angelV2.php"] [unique_id "aUPaOrcVHrNSHjCo-0p9nQAAAgI"]
[Thu Dec 18 18:40:58.976687 2025] [:error] [pid 23558:tid 23616] [client 98.70.102.89:1974] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/angelV2.php"] [unique_id "aUPaOuHam9NbgPQa9ub3XwAAAME"]
[Thu Dec 18 18:40:59.421417 2025] [:error] [pid 12383:tid 12401] [client 98.70.102.89:1784] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/angelV2.php"] [unique_id "aUPaO_dgllo9h1cyxGaqFAAAAs8"]
[Thu Dec 18 18:40:59.761444 2025] [:error] [pid 24542:tid 24548] [client 98.70.102.89:1778] [client 98.70.102.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/angelV2.php"] [unique_id "aUPaO0tQz4H2oS3NrDbi-wAAAUQ"]
[Thu Dec 18 21:11:51.810777 2025] [:error] [pid 25357:tid 25370] [client 4.189.96.146:19943] [client 4.189.96.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "aUP9l4aT7bsEXnJVfJdo1AAAAcs"]
[Thu Dec 18 21:11:53.423953 2025] [:error] [pid 12383:tid 12405] [client 4.189.96.146:19946] [client 4.189.96.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/zxl.php"] [unique_id "aUP9mfdgllo9h1cyxGbFEgAAAtM"]
[Thu Dec 18 21:11:55.651100 2025] [:error] [pid 12239:tid 12246] [client 4.189.96.146:19841] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUP9m9NnXxfGIuWO6akTQQAAAoI"]
[Thu Dec 18 21:11:57.930798 2025] [:error] [pid 12035:tid 12057] [client 4.189.96.146:19904] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUP9nbcVHrNSHjCo-0qXQQAAAg4"]
[Thu Dec 18 21:11:59.109677 2025] [:error] [pid 24542:tid 24568] [client 4.189.96.146:19869] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUP9n0tQz4H2oS3NrDYdRwAAAVg"]
[Thu Dec 18 21:12:00.207338 2025] [:error] [pid 25357:tid 25373] [client 4.189.96.146:19947] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aUP9oIaT7bsEXnJVfJdo1wAAAc4"]
[Thu Dec 18 21:12:02.917517 2025] [:error] [pid 12239:tid 12265] [client 4.189.96.146:19865] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pu.php"] [unique_id "aUP9otNnXxfGIuWO6akTTAAAApU"]
[Thu Dec 18 21:12:03.422935 2025] [:error] [pid 23645:tid 23669] [client 4.189.96.146:19948] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pu.php"] [unique_id "aUP9ozf_Rx0Y0ao_QJhdBgAAAJY"]
[Thu Dec 18 21:12:03.834995 2025] [:error] [pid 25357:tid 25381] [client 4.189.96.146:19961] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pu.php"] [unique_id "aUP9o4aT7bsEXnJVfJdo2gAAAdY"]
[Thu Dec 18 21:12:04.952077 2025] [:error] [pid 24433:tid 24443] [client 4.189.96.146:19840] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pu.php"] [unique_id "aUP9pJ4pN9ycmipm8TjY5AAAAQc"]
[Thu Dec 18 21:12:05.737345 2025] [:error] [pid 24542:tid 24560] [client 4.189.96.146:19916] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sfcl.php"] [unique_id "aUP9pUtQz4H2oS3NrDYdUgAAAVA"]
[Thu Dec 18 21:12:06.637040 2025] [:error] [pid 12239:tid 12258] [client 4.189.96.146:19933] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sfcl.php"] [unique_id "aUP9ptNnXxfGIuWO6akTVQAAAo4"]
[Thu Dec 18 21:12:08.455127 2025] [:error] [pid 23558:tid 23623] [client 4.189.96.146:19853] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sfcl.php"] [unique_id "aUP9qOHam9NbgPQa9uYjSwAAAMg"]
[Thu Dec 18 21:12:09.708051 2025] [:error] [pid 24542:tid 24550] [client 4.189.96.146:19949] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sfcl.php"] [unique_id "aUP9qUtQz4H2oS3NrDYdWgAAAUY"]
[Thu Dec 18 21:12:13.023756 2025] [:error] [pid 24542:tid 24544] [client 4.189.96.146:19925] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/npcs7k.php"] [unique_id "aUP9rUtQz4H2oS3NrDYdXwAAAUA"]
[Thu Dec 18 21:12:15.571977 2025] [:error] [pid 12239:tid 12261] [client 4.189.96.146:19909] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/npcs7k.php"] [unique_id "aUP9r9NnXxfGIuWO6akTXAAAApE"]
[Thu Dec 18 21:12:20.059660 2025] [:error] [pid 25357:tid 25365] [client 4.189.96.146:19848] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/npcs7k.php"] [unique_id "aUP9tIaT7bsEXnJVfJdo7wAAAcY"]
[Thu Dec 18 21:12:21.556821 2025] [:error] [pid 23558:tid 23637] [client 4.189.96.146:19966] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/npcs7k.php"] [unique_id "aUP9teHam9NbgPQa9uYjXAAAANY"]
[Thu Dec 18 21:12:22.022019 2025] [:error] [pid 23558:tid 23615] [client 4.189.96.146:19842] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aUP9tuHam9NbgPQa9uYjXgAAAMA"]
[Thu Dec 18 21:12:24.793194 2025] [:error] [pid 24958:tid 24966] [client 4.189.96.146:19852] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aUP9uMkDOrUkd0wNm2HMzAAAAYU"]
[Thu Dec 18 21:12:26.269630 2025] [:error] [pid 24958:tid 24972] [client 4.189.96.146:19923] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aUP9uskDOrUkd0wNm2HMzQAAAYs"]
[Thu Dec 18 21:12:29.772617 2025] [:error] [pid 24433:tid 24459] [client 4.189.96.146:19936] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aUP9vZ4pN9ycmipm8TjY7gAAARc"]
[Thu Dec 18 21:12:34.131239 2025] [:error] [pid 23558:tid 23621] [client 4.189.96.146:19964] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "aUP9wuHam9NbgPQa9uYjZQAAAMY"]
[Thu Dec 18 21:12:37.007607 2025] [:error] [pid 12239:tid 12244] [client 4.189.96.146:9152] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "aUP9xdNnXxfGIuWO6akTagAAAoA"]
[Thu Dec 18 21:12:38.446001 2025] [:error] [pid 12239:tid 12249] [client 4.189.96.146:19862] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "aUP9xtNnXxfGIuWO6akTbAAAAoU"]
[Thu Dec 18 21:12:41.085680 2025] [:error] [pid 23556:tid 23574] [client 4.189.96.146:19944] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "aUP9yRnmLlk3u5yt9kHoEAAAAA4"]
[Thu Dec 18 21:12:42.127781 2025] [:error] [pid 23558:tid 23638] [client 4.189.96.146:19941] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/egu.php"] [unique_id "aUP9yuHam9NbgPQa9uYjbQAAANc"]
[Thu Dec 18 21:12:43.175999 2025] [:error] [pid 12035:tid 12064] [client 4.189.96.146:19889] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/egu.php"] [unique_id "aUP9y7cVHrNSHjCo-0qXTwAAAhU"]
[Thu Dec 18 21:12:44.930224 2025] [:error] [pid 24958:tid 24985] [client 4.189.96.146:19871] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/egu.php"] [unique_id "aUP9zMkDOrUkd0wNm2HM1QAAAZg"]
[Thu Dec 18 21:12:46.124913 2025] [:error] [pid 23558:tid 23619] [client 4.189.96.146:19931] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/egu.php"] [unique_id "aUP9zuHam9NbgPQa9uYjcQAAAMQ"]
[Thu Dec 18 21:12:46.721597 2025] [:error] [pid 23556:tid 23579] [client 4.189.96.146:19940] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doo.php"] [unique_id "aUP9zhnmLlk3u5yt9kHoFAAAABM"]
[Thu Dec 18 21:12:48.459318 2025] [:error] [pid 12383:tid 12407] [client 4.189.96.146:19870] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doo.php"] [unique_id "aUP90Pdgllo9h1cyxGbFNAAAAtU"]
[Thu Dec 18 21:12:49.978581 2025] [:error] [pid 25357:tid 25382] [client 4.189.96.146:19930] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doo.php"] [unique_id "aUP90YaT7bsEXnJVfJdpAAAAAdc"]
[Thu Dec 18 21:12:50.682679 2025] [:error] [pid 24958:tid 24967] [client 4.189.96.146:19857] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doo.php"] [unique_id "aUP90skDOrUkd0wNm2HM6QAAAYY"]
[Thu Dec 18 21:12:51.596986 2025] [:error] [pid 24958:tid 24966] [client 4.189.96.146:19883] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aUP908kDOrUkd0wNm2HM7AAAAYU"]
[Thu Dec 18 21:12:53.554025 2025] [:error] [pid 23556:tid 23583] [client 4.189.96.146:19890] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aUP91RnmLlk3u5yt9kHoFgAAABc"]
[Thu Dec 18 21:13:00.872103 2025] [:error] [pid 23645:tid 23650] [client 4.189.96.146:19935] [client 4.189.96.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUP93Df_Rx0Y0ao_QJhdGwAAAIM"]
[Thu Dec 18 21:13:05.694940 2025] [:error] [pid 23556:tid 23561] [client 4.189.96.146:19952] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/chosen.php"] [unique_id "aUP94RnmLlk3u5yt9kHoNQAAAAE"]
[Thu Dec 18 21:13:08.004311 2025] [:error] [pid 24958:tid 24963] [client 4.189.96.146:19850] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/chosen.php"] [unique_id "aUP95MkDOrUkd0wNm2HNAQAAAYI"]
[Thu Dec 18 21:13:09.600315 2025] [:error] [pid 24433:tid 24455] [client 4.189.96.146:19917] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/chosen.php"] [unique_id "aUP95Z4pN9ycmipm8TjZEwAAARM"]
[Thu Dec 18 21:13:10.344082 2025] [:error] [pid 23558:tid 23627] [client 4.189.96.146:19955] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/chosen.php"] [unique_id "aUP95uHam9NbgPQa9uYjgQAAAMw"]
[Thu Dec 18 21:13:14.145772 2025] [:error] [pid 24433:tid 24447] [client 4.189.96.146:19878] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aUP96p4pN9ycmipm8TjZGgAAAQs"]
[Thu Dec 18 21:13:15.533796 2025] [:error] [pid 12239:tid 12267] [client 4.189.96.146:19846] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aUP969NnXxfGIuWO6akTmwAAApc"]
[Thu Dec 18 21:13:16.144449 2025] [:error] [pid 24958:tid 24975] [client 4.189.96.146:19895] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aUP97MkDOrUkd0wNm2HNBwAAAY4"]
[Thu Dec 18 21:13:17.712829 2025] [:error] [pid 24958:tid 24969] [client 4.189.96.146:19863] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aUP97ckDOrUkd0wNm2HNCAAAAYg"]
[Thu Dec 18 21:13:18.847257 2025] [:error] [pid 12239:tid 12251] [client 4.189.96.146:19908] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manage.php"] [unique_id "aUP97tNnXxfGIuWO6akToAAAAoc"]
[Thu Dec 18 21:13:21.689836 2025] [:error] [pid 24542:tid 24552] [client 4.189.96.146:19924] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manage.php"] [unique_id "aUP98UtQz4H2oS3NrDYdnQAAAUg"]
[Thu Dec 18 21:13:22.313471 2025] [:error] [pid 12035:tid 12049] [client 4.189.96.146:19892] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manage.php"] [unique_id "aUP98rcVHrNSHjCo-0qXZAAAAgc"]
[Thu Dec 18 21:13:24.645350 2025] [:error] [pid 25357:tid 25370] [client 4.189.96.146:19934] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manage.php"] [unique_id "aUP99IaT7bsEXnJVfJdpLgAAAcs"]
[Thu Dec 18 21:13:25.649371 2025] [:error] [pid 23645:tid 23655] [client 4.189.96.146:9171] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aUP99Tf_Rx0Y0ao_QJhdOgAAAIg"]
[Thu Dec 18 21:13:27.954454 2025] [:error] [pid 23645:tid 23658] [client 4.189.96.146:19967] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aUP99zf_Rx0Y0ao_QJhdPAAAAIs"]
[Thu Dec 18 21:13:31.116240 2025] [:error] [pid 25357:tid 25373] [client 4.189.96.146:19928] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aUP9-4aT7bsEXnJVfJdpMQAAAc4"]
[Thu Dec 18 21:13:33.631188 2025] [:error] [pid 25357:tid 25359] [client 4.189.96.146:19919] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aUP9_YaT7bsEXnJVfJdpNgAAAcA"]
[Thu Dec 18 21:13:35.371156 2025] [:error] [pid 12239:tid 12250] [client 4.189.96.146:19844] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aUP9_9NnXxfGIuWO6akTvQAAAoY"]
[Thu Dec 18 21:13:35.747273 2025] [:error] [pid 24958:tid 24965] [client 4.189.96.146:19897] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aUP9_8kDOrUkd0wNm2HNFAAAAYQ"]
[Thu Dec 18 21:13:37.169731 2025] [:error] [pid 24433:tid 24453] [client 4.189.96.146:19896] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aUP-AZ4pN9ycmipm8TjZTgAAARE"]
[Thu Dec 18 21:13:38.271217 2025] [:error] [pid 24958:tid 24972] [client 4.189.96.146:19950] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aUP-AskDOrUkd0wNm2HNGAAAAYs"]
[Thu Dec 18 21:13:39.727070 2025] [:error] [pid 25357:tid 25369] [client 4.189.96.146:19956] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aUP-A4aT7bsEXnJVfJdpPAAAAco"]
[Thu Dec 18 21:13:41.288282 2025] [:error] [pid 12239:tid 12261] [client 4.189.96.146:19906] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aUP-BdNnXxfGIuWO6akTygAAApE"]
[Thu Dec 18 21:13:42.209661 2025] [:error] [pid 12383:tid 12389] [client 4.189.96.146:9215] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aUP-Bvdgllo9h1cyxGbFSQAAAsM"]
[Thu Dec 18 21:13:43.319344 2025] [:error] [pid 12239:tid 12248] [client 4.189.96.146:19963] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aUP-B9NnXxfGIuWO6akTzwAAAoQ"]
[Thu Dec 18 21:13:44.641460 2025] [:error] [pid 23645:tid 23649] [client 4.189.96.146:19867] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUP-CDf_Rx0Y0ao_QJhdQwAAAII"]
[Thu Dec 18 21:13:45.485229 2025] [:error] [pid 23556:tid 23582] [client 4.189.96.146:19951] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUP-CRnmLlk3u5yt9kHoWgAAABY"]
[Thu Dec 18 21:13:46.127080 2025] [:error] [pid 25357:tid 25364] [client 4.189.96.146:9167] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUP-CoaT7bsEXnJVfJdpQAAAAcU"]
[Thu Dec 18 21:13:47.270919 2025] [:error] [pid 23556:tid 23581] [client 4.189.96.146:19927] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUP-CxnmLlk3u5yt9kHoWwAAABU"]
[Thu Dec 18 21:13:49.367479 2025] [:error] [pid 12239:tid 12250] [client 4.189.96.146:19856] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aUP-DdNnXxfGIuWO6akT1wAAAoY"]
[Thu Dec 18 21:13:50.017597 2025] [:error] [pid 12239:tid 12258] [client 4.189.96.146:19912] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aUP-DtNnXxfGIuWO6akT2AAAAo4"]
[Thu Dec 18 21:13:51.850987 2025] [:error] [pid 25357:tid 25359] [client 4.189.96.146:19866] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aUP-D4aT7bsEXnJVfJdpRgAAAcA"]
[Thu Dec 18 21:13:53.072605 2025] [:error] [pid 12035:tid 12062] [client 4.189.96.146:19914] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aUP-EbcVHrNSHjCo-0qXigAAAhM"]
[Thu Dec 18 21:13:55.214347 2025] [:error] [pid 23556:tid 23583] [client 4.189.96.146:19921] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aUP-ExnmLlk3u5yt9kHoYgAAABc"]
[Thu Dec 18 21:13:56.047027 2025] [:error] [pid 23645:tid 23661] [client 4.189.96.146:9179] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aUP-FDf_Rx0Y0ao_QJhdTwAAAI4"]
[Thu Dec 18 21:13:57.086229 2025] [:error] [pid 23556:tid 23568] [client 4.189.96.146:19875] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aUP-FRnmLlk3u5yt9kHoZwAAAAg"]
[Thu Dec 18 21:14:00.818951 2025] [:error] [pid 12239:tid 12252] [client 4.189.96.146:19898] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aUP-GNNnXxfGIuWO6akT5QAAAog"]
[Thu Dec 18 21:14:01.920759 2025] [:error] [pid 12239:tid 12260] [client 4.189.96.146:9165] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUP-GdNnXxfGIuWO6akT5wAAApA"]
[Thu Dec 18 21:14:03.671750 2025] [:error] [pid 24958:tid 24978] [client 4.189.96.146:9209] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUP-G8kDOrUkd0wNm2HNMAAAAZE"]
[Thu Dec 18 21:14:04.604615 2025] [:error] [pid 24542:tid 24548] [client 4.189.96.146:19920] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUP-HEtQz4H2oS3NrDYd5gAAAUQ"]
[Thu Dec 18 21:14:14.923212 2025] [:error] [pid 12383:tid 12404] [client 4.189.96.146:19953] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aUP-Jvdgllo9h1cyxGbFdAAAAtI"]
[Thu Dec 18 21:14:17.115113 2025] [:error] [pid 25357:tid 25373] [client 4.189.96.146:9158] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aUP-KYaT7bsEXnJVfJdpfgAAAc4"]
[Thu Dec 18 21:14:19.736673 2025] [:error] [pid 23645:tid 23652] [client 4.189.96.146:19847] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aUP-Kzf_Rx0Y0ao_QJhdZgAAAIU"]
[Thu Dec 18 21:14:22.191762 2025] [:error] [pid 23645:tid 23650] [client 4.189.96.146:19893] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpls.php"] [unique_id "aUP-Ljf_Rx0Y0ao_QJhdaQAAAIM"]
[Thu Dec 18 21:14:23.484307 2025] [:error] [pid 24542:tid 24564] [client 4.189.96.146:19876] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aUP-L0tQz4H2oS3NrDYeDQAAAVQ"]
[Thu Dec 18 21:14:24.813435 2025] [:error] [pid 23645:tid 23659] [client 4.189.96.146:19903] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aUP-MDf_Rx0Y0ao_QJhdcAAAAIw"]
[Thu Dec 18 21:14:25.609105 2025] [:error] [pid 23645:tid 23655] [client 4.189.96.146:19907] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aUP-MTf_Rx0Y0ao_QJhdcgAAAIg"]
[Thu Dec 18 21:14:26.775131 2025] [:error] [pid 23556:tid 23562] [client 4.189.96.146:19849] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aUP-MhnmLlk3u5yt9kHojQAAAAI"]
[Thu Dec 18 21:14:28.168771 2025] [:error] [pid 23556:tid 23584] [client 4.189.96.146:9187] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aUP-NBnmLlk3u5yt9kHokAAAABg"]
[Thu Dec 18 21:14:28.996233 2025] [:error] [pid 12383:tid 12406] [client 4.189.96.146:9176] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aUP-NPdgllo9h1cyxGbFhQAAAtQ"]
[Thu Dec 18 21:14:29.674184 2025] [:error] [pid 23556:tid 23576] [client 4.189.96.146:19922] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aUP-NRnmLlk3u5yt9kHolAAAABA"]
[Thu Dec 18 21:14:31.954334 2025] [:error] [pid 23556:tid 23581] [client 4.189.96.146:9162] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aUP-NxnmLlk3u5yt9kHolwAAABU"]
[Thu Dec 18 21:14:33.825783 2025] [:error] [pid 23556:tid 23571] [client 4.189.96.146:19926] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aUP-ORnmLlk3u5yt9kHomQAAAAs"]
[Thu Dec 18 21:14:35.384307 2025] [:error] [pid 12239:tid 12264] [client 4.189.96.146:9186] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aUP-O9NnXxfGIuWO6akURAAAApQ"]
[Thu Dec 18 21:14:36.014089 2025] [:error] [pid 12383:tid 12408] [client 4.189.96.146:19962] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aUP-PPdgllo9h1cyxGbFmAAAAtY"]
[Thu Dec 18 21:14:37.814220 2025] [:error] [pid 24542:tid 24568] [client 4.189.96.146:19859] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aUP-PUtQz4H2oS3NrDYeJQAAAVg"]
[Thu Dec 18 21:14:38.471704 2025] [:error] [pid 23558:tid 23625] [client 4.189.96.146:9097] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aUP-PuHam9NbgPQa9uYkGwAAAMo"]
[Thu Dec 18 21:14:39.604342 2025] [:error] [pid 12239:tid 12259] [client 4.189.96.146:19872] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aUP-P9NnXxfGIuWO6akUTgAAAo8"]
[Thu Dec 18 21:14:40.194808 2025] [:error] [pid 23556:tid 23560] [client 4.189.96.146:19854] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aUP-QBnmLlk3u5yt9kHonwAAAAA"]
[Thu Dec 18 21:14:41.732362 2025] [:error] [pid 25357:tid 25360] [client 4.189.96.146:19860] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aUP-QYaT7bsEXnJVfJdpoQAAAcE"]
[Thu Dec 18 21:14:42.216945 2025] [:error] [pid 12035:tid 12047] [client 4.189.96.146:19910] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aUP-QrcVHrNSHjCo-0qXuAAAAgU"]
[Thu Dec 18 21:14:43.227411 2025] [:error] [pid 24542:tid 24557] [client 4.189.96.146:9180] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aUP-Q0tQz4H2oS3NrDYeKgAAAU0"]
[Thu Dec 18 21:14:44.449707 2025] [:error] [pid 23556:tid 23568] [client 4.189.96.146:19845] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aUP-RBnmLlk3u5yt9kHopQAAAAg"]
[Thu Dec 18 21:14:45.193674 2025] [:error] [pid 24542:tid 24552] [client 4.189.96.146:9184] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aUP-RUtQz4H2oS3NrDYeLwAAAUg"]
[Thu Dec 18 21:14:46.006507 2025] [:error] [pid 23558:tid 23626] [client 4.189.96.146:19874] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aUP-RuHam9NbgPQa9uYkKgAAAMs"]
[Thu Dec 18 21:14:46.633860 2025] [:error] [pid 12239:tid 12258] [client 4.189.96.146:9109] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aUP-RtNnXxfGIuWO6akUZAAAAo4"]
[Thu Dec 18 21:14:47.301269 2025] [:error] [pid 12383:tid 12408] [client 4.189.96.146:9166] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aUP-R_dgllo9h1cyxGbFpAAAAtY"]
[Thu Dec 18 21:14:48.216198 2025] [:error] [pid 23558:tid 23632] [client 4.189.96.146:9153] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aUP-SOHam9NbgPQa9uYkLwAAANE"]
[Thu Dec 18 21:14:49.663076 2025] [:error] [pid 12239:tid 12259] [client 4.189.96.146:19932] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aUP-SdNnXxfGIuWO6akUawAAAo8"]
[Thu Dec 18 21:14:50.674729 2025] [:error] [pid 25357:tid 25361] [client 4.189.96.146:19959] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aUP-SoaT7bsEXnJVfJdprgAAAcI"]
[Thu Dec 18 21:14:52.642107 2025] [:error] [pid 12383:tid 12387] [client 4.189.96.146:19884] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aUP-TPdgllo9h1cyxGbFqQAAAsE"]
[Thu Dec 18 21:14:53.430612 2025] [:error] [pid 23556:tid 23583] [client 4.189.96.146:19945] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aUP-TRnmLlk3u5yt9kHorAAAABc"]
[Thu Dec 18 21:14:55.191771 2025] [:error] [pid 24542:tid 24563] [client 4.189.96.146:9199] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUP-T0tQz4H2oS3NrDYePwAAAVM"]
[Thu Dec 18 21:14:56.681215 2025] [:error] [pid 24542:tid 24567] [client 4.189.96.146:19880] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUP-UEtQz4H2oS3NrDYeQgAAAVc"]
[Thu Dec 18 21:14:58.087807 2025] [:error] [pid 12035:tid 12064] [client 4.189.96.146:9206] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUP-UrcVHrNSHjCo-0qXwwAAAhU"]
[Thu Dec 18 21:14:59.316451 2025] [:error] [pid 12239:tid 12248] [client 4.189.96.146:9092] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUP-U9NnXxfGIuWO6akUgwAAAoQ"]
[Thu Dec 18 21:15:00.288813 2025] [:error] [pid 24958:tid 24962] [client 4.189.96.146:9095] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/"] [unique_id "aUP-VMkDOrUkd0wNm2HNdgAAAYE"]
[Thu Dec 18 21:15:00.972470 2025] [:error] [pid 24433:tid 24457] [client 4.189.96.146:9157] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/"] [unique_id "aUP-VJ4pN9ycmipm8TjZjgAAARU"]
[Thu Dec 18 21:15:02.001167 2025] [:error] [pid 12239:tid 12253] [client 4.189.96.146:19851] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/"] [unique_id "aUP-VtNnXxfGIuWO6akUhgAAAok"]
[Thu Dec 18 21:15:03.165825 2025] [:error] [pid 25357:tid 25376] [client 4.189.96.146:19902] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/"] [unique_id "aUP-V4aT7bsEXnJVfJdptwAAAdE"]
[Thu Dec 18 21:15:04.204654 2025] [:error] [pid 23645:tid 23661] [client 4.189.96.146:9102] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUP-WDf_Rx0Y0ao_QJhdrQAAAI4"]
[Thu Dec 18 21:15:05.287287 2025] [:error] [pid 23556:tid 23574] [client 4.189.96.146:19855] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUP-WRnmLlk3u5yt9kHovwAAAA4"]
[Thu Dec 18 21:15:06.341250 2025] [:error] [pid 23558:tid 23632] [client 4.189.96.146:9189] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUP-WuHam9NbgPQa9uYkPQAAANE"]
[Thu Dec 18 21:15:08.274622 2025] [:error] [pid 24542:tid 24556] [client 4.189.96.146:9200] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aUP-XEtQz4H2oS3NrDYeRwAAAUw"]
[Thu Dec 18 21:15:09.578641 2025] [:error] [pid 24542:tid 24561] [client 4.189.96.146:19911] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUP-XUtQz4H2oS3NrDYeSAAAAVE"]
[Thu Dec 18 21:15:10.688669 2025] [:error] [pid 12239:tid 12261] [client 4.189.96.146:9143] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUP-XtNnXxfGIuWO6akUmwAAApE"]
[Thu Dec 18 21:15:11.546921 2025] [:error] [pid 24958:tid 24967] [client 4.189.96.146:19873] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUP-X8kDOrUkd0wNm2HNfQAAAYY"]
[Thu Dec 18 21:15:13.413788 2025] [:error] [pid 23645:tid 23647] [client 4.189.96.146:19915] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUP-YTf_Rx0Y0ao_QJhdtgAAAIA"]
[Thu Dec 18 21:15:19.975972 2025] [:error] [pid 12239:tid 12248] [client 4.189.96.146:9093] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aUP-Z9NnXxfGIuWO6akUwQAAAoQ"]
[Thu Dec 18 21:15:20.697081 2025] [:error] [pid 25357:tid 25368] [client 4.189.96.146:9164] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aUP-aIaT7bsEXnJVfJdpwQAAAck"]
[Thu Dec 18 21:15:21.833775 2025] [:error] [pid 12383:tid 12401] [client 4.189.96.146:9125] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aUP-afdgllo9h1cyxGbFyAAAAs8"]
[Thu Dec 18 21:15:22.835190 2025] [:error] [pid 12239:tid 12268] [client 4.189.96.146:19960] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aUP-atNnXxfGIuWO6akUwgAAApg"]
[Thu Dec 18 21:15:23.646977 2025] [:error] [pid 12035:tid 12046] [client 4.189.96.146:19938] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aUP-a7cVHrNSHjCo-0qX1wAAAgQ"]
[Thu Dec 18 21:15:26.087440 2025] [:error] [pid 12383:tid 12394] [client 4.189.96.146:9172] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aUP-bvdgllo9h1cyxGbFzwAAAsg"]
[Thu Dec 18 21:15:27.553063 2025] [:error] [pid 24958:tid 24976] [client 4.189.96.146:19864] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aUP-b8kDOrUkd0wNm2HNiwAAAY8"]
[Thu Dec 18 21:15:28.486419 2025] [:error] [pid 12239:tid 12248] [client 4.189.96.146:19861] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2r.php"] [unique_id "aUP-cNNnXxfGIuWO6akU0QAAAoQ"]
[Thu Dec 18 21:15:32.049699 2025] [:error] [pid 25357:tid 25371] [client 4.189.96.146:19899] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUP-dIaT7bsEXnJVfJdpzwAAAcw"]
[Thu Dec 18 21:15:33.805648 2025] [:error] [pid 24958:tid 24967] [client 4.189.96.146:9107] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUP-dckDOrUkd0wNm2HNmgAAAYY"]
[Thu Dec 18 21:15:35.131611 2025] [:error] [pid 24958:tid 24984] [client 4.189.96.146:19858] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUP-d8kDOrUkd0wNm2HNnwAAAZc"]
[Thu Dec 18 21:15:37.066840 2025] [:error] [pid 24542:tid 24567] [client 4.189.96.146:9213] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUP-eUtQz4H2oS3NrDYeXgAAAVc"]
[Thu Dec 18 21:15:38.497529 2025] [:error] [pid 12239:tid 12247] [client 4.189.96.146:19954] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUP-etNnXxfGIuWO6akU4gAAAoM"]
[Thu Dec 18 21:15:40.285777 2025] [:error] [pid 12035:tid 12051] [client 4.189.96.146:19957] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUP-fLcVHrNSHjCo-0qX7AAAAgk"]
[Thu Dec 18 21:15:41.571641 2025] [:error] [pid 24542:tid 24562] [client 4.189.96.146:19894] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUP-fUtQz4H2oS3NrDYecwAAAVI"]
[Thu Dec 18 21:15:44.598759 2025] [:error] [pid 25357:tid 25367] [client 4.189.96.146:9101] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUP-gIaT7bsEXnJVfJdp7AAAAcg"]
[Thu Dec 18 21:15:45.709283 2025] [:error] [pid 25357:tid 25362] [client 4.189.96.146:9190] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUP-gYaT7bsEXnJVfJdp7wAAAcM"]
[Thu Dec 18 21:15:47.358655 2025] [:error] [pid 24542:tid 24545] [client 4.189.96.146:19901] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUP-g0tQz4H2oS3NrDYehgAAAUE"]
[Thu Dec 18 21:15:48.073077 2025] [:error] [pid 24542:tid 24564] [client 4.189.96.146:9169] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUP-hEtQz4H2oS3NrDYeiQAAAVQ"]
[Thu Dec 18 21:15:50.346841 2025] [:error] [pid 12383:tid 12398] [client 4.189.96.146:9161] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUP-hvdgllo9h1cyxGbF9AAAAsw"]
[Thu Dec 18 21:15:51.635282 2025] [:error] [pid 12239:tid 12268] [client 4.189.96.146:9156] [client 4.189.96.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUP-h9NnXxfGIuWO6akVBQAAApg"]
[Thu Dec 18 21:15:52.990332 2025] [:error] [pid 12239:tid 12251] [client 4.189.96.146:9197] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aUP-iNNnXxfGIuWO6akVCQAAAoc"]
[Thu Dec 18 21:15:54.289283 2025] [:error] [pid 12239:tid 12248] [client 4.189.96.146:9114] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aUP-itNnXxfGIuWO6akVEwAAAoQ"]
[Thu Dec 18 21:15:55.647057 2025] [:error] [pid 12239:tid 12249] [client 4.189.96.146:9182] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aUP-i9NnXxfGIuWO6akVGAAAAoU"]
[Thu Dec 18 21:15:56.898613 2025] [:error] [pid 12035:tid 12057] [client 4.189.96.146:19958] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aUP-jLcVHrNSHjCo-0qYDgAAAg4"]
[Thu Dec 18 21:15:58.721967 2025] [:error] [pid 12383:tid 12388] [client 4.189.96.146:9151] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUP-jvdgllo9h1cyxGbF_gAAAsI"]
[Thu Dec 18 21:16:04.355773 2025] [:error] [pid 24542:tid 24554] [client 4.189.96.146:19886] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUP-lEtQz4H2oS3NrDYenQAAAUo"]
[Thu Dec 18 21:16:05.382024 2025] [:error] [pid 24958:tid 24984] [client 4.189.96.146:9210] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUP-lckDOrUkd0wNm2HNwQAAAZc"]
[Thu Dec 18 21:16:08.420963 2025] [:error] [pid 12239:tid 12244] [client 4.189.96.146:9115] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUP-mNNnXxfGIuWO6akVPwAAAoA"]
[Thu Dec 18 21:16:16.485022 2025] [:error] [pid 23645:tid 23658] [client 4.189.96.146:9028] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUP-oDf_Rx0Y0ao_QJhd7wAAAIs"]
[Thu Dec 18 21:16:17.511641 2025] [:error] [pid 23558:tid 23635] [client 4.189.96.146:9119] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUP-oeHam9NbgPQa9uYk1wAAANQ"]
[Thu Dec 18 21:16:20.260960 2025] [:error] [pid 23558:tid 23632] [client 4.189.96.146:19918] [client 4.189.96.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.96.146, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUP-pOHam9NbgPQa9uYk3wAAANE"]
[Thu Dec 18 21:16:22.183257 2025] [:error] [pid 12383:tid 12410] [client 4.189.96.146:19926] [client 4.189.96.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.96.146, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUP-pvdgllo9h1cyxGbGJQAAAtg"]
[Thu Dec 18 21:16:24.837274 2025] [:error] [pid 23558:tid 23630] [client 4.189.96.146:19918] [client 4.189.96.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUP-qOHam9NbgPQa9uYk6QAAAM8"]
[Thu Dec 18 21:16:35.230801 2025] [:error] [pid 12035:tid 12060] [client 4.189.96.146:19868] [client 4.189.96.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aUP-s7cVHrNSHjCo-0qYRgAAAhE"]
[Thu Dec 18 21:16:36.068164 2025] [:error] [pid 23558:tid 23623] [client 4.189.96.146:9106] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aUP-tOHam9NbgPQa9uYk-gAAAMg"]
[Thu Dec 18 21:16:37.198307 2025] [:error] [pid 23645:tid 23648] [client 4.189.96.146:19887] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aUP-tTf_Rx0Y0ao_QJhd_wAAAIE"]
[Thu Dec 18 21:16:39.362620 2025] [:error] [pid 23558:tid 23627] [client 4.189.96.146:9030] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aUP-t-Ham9NbgPQa9uYk_AAAAMw"]
[Thu Dec 18 21:16:40.474193 2025] [:error] [pid 24958:tid 24970] [client 4.189.96.146:19937] [client 4.189.96.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aUP-uMkDOrUkd0wNm2HN3wAAAYk"]
[Thu Dec 18 22:09:33.198051 2025] [:error] [pid 24542:tid 24564] [client 223.244.35.77:39414] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUQLHUtQz4H2oS3NrDYuQAAAAVQ"]
[Fri Dec 19 01:01:05.752863 2025] [:error] [pid 45737:tid 45765] [client 43.153.85.46:33104] [client 43.153.85.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUQzUVAGdb8SXm6CLHiN5AAAABg"]
[Fri Dec 19 01:43:13.999023 2025] [:error] [pid 37418:tid 37439] [client 4.190.218.85:9201] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aUQ9Ma0VAcRIm10OnozF7AAAAJM"]
[Fri Dec 19 01:43:14.448775 2025] [:error] [pid 65011:tid 65065] [client 4.190.218.85:9176] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aUQ9MtqlBhOfWMNHM-7JdAAAAVQ"]
[Fri Dec 19 01:43:14.843995 2025] [:error] [pid 65011:tid 65061] [client 4.190.218.85:9148] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aUQ9MtqlBhOfWMNHM-7JdQAAAVA"]
[Fri Dec 19 01:43:15.279064 2025] [:error] [pid 65011:tid 65044] [client 4.190.218.85:9172] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aUQ9M9qlBhOfWMNHM-7JdwAAAUA"]
[Fri Dec 19 01:43:15.733005 2025] [:error] [pid 65011:tid 65055] [client 4.190.218.85:9095] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aUQ9M9qlBhOfWMNHM-7JeQAAAUo"]
[Fri Dec 19 01:43:16.548062 2025] [:error] [pid 37418:tid 37430] [client 4.190.218.85:9153] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aUQ9NK0VAcRIm10OnozF8AAAAIo"]
[Fri Dec 19 01:43:17.027081 2025] [:error] [pid 37418:tid 37431] [client 4.190.218.85:9166] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aUQ9Na0VAcRIm10OnozF8gAAAIs"]
[Fri Dec 19 01:43:17.423906 2025] [:error] [pid 45825:tid 45829] [client 4.190.218.85:9209] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aUQ9NdES1ifyzuzFwz8kZAAAAEI"]
[Fri Dec 19 01:43:17.833764 2025] [:error] [pid 45738:tid 45781] [client 4.190.218.85:9161] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aUQ9NXnw52b7ekJTIU3G7gAAAM0"]
[Fri Dec 19 01:43:18.160473 2025] [:error] [pid 45739:tid 45811] [client 4.190.218.85:9168] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aUQ9NuIfOvWlLwqW0X3u9gAAARA"]
[Fri Dec 19 01:43:18.594203 2025] [:error] [pid 45738:tid 45789] [client 4.190.218.85:9182] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aUQ9Nnnw52b7ekJTIU3G7wAAANU"]
[Fri Dec 19 01:43:19.001425 2025] [:error] [pid 45738:tid 45791] [client 4.190.218.85:9187] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aUQ9N3nw52b7ekJTIU3G8AAAANc"]
[Fri Dec 19 01:43:19.501570 2025] [:error] [pid 45738:tid 45785] [client 4.190.218.85:9212] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aUQ9N3nw52b7ekJTIU3G9QAAANE"]
[Fri Dec 19 01:43:20.026472 2025] [:error] [pid 45825:tid 45832] [client 4.190.218.85:9213] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aUQ9ONES1ifyzuzFwz8kawAAAEU"]
[Fri Dec 19 01:43:20.439624 2025] [:error] [pid 45737:tid 45757] [client 4.190.218.85:9171] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aUQ9OFAGdb8SXm6CLHibAgAAABA"]
[Fri Dec 19 01:43:20.902148 2025] [:error] [pid 65011:tid 65049] [client 4.190.218.85:9113] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aUQ9ONqlBhOfWMNHM-7JfgAAAUQ"]
[Fri Dec 19 01:43:21.454214 2025] [:error] [pid 45825:tid 45831] [client 4.190.218.85:9102] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aUQ9OdES1ifyzuzFwz8kcAAAAEQ"]
[Fri Dec 19 01:43:21.912601 2025] [:error] [pid 45825:tid 45829] [client 4.190.218.85:9164] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aUQ9OdES1ifyzuzFwz8kcgAAAEI"]
[Fri Dec 19 01:43:22.470713 2025] [:error] [pid 45738:tid 45781] [client 4.190.218.85:9203] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aUQ9Onnw52b7ekJTIU3HBAAAAM0"]
[Fri Dec 19 01:43:22.876773 2025] [:error] [pid 37418:tid 37423] [client 4.190.218.85:9180] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aUQ9Oq0VAcRIm10OnozGBQAAAIM"]
[Fri Dec 19 01:43:23.289569 2025] [:error] [pid 37418:tid 37425] [client 4.190.218.85:9170] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aUQ9O60VAcRIm10OnozGBgAAAIU"]
[Fri Dec 19 01:43:23.896114 2025] [:error] [pid 45737:tid 45744] [client 4.190.218.85:9094] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aUQ9O1AGdb8SXm6CLHibCQAAAAM"]
[Fri Dec 19 01:43:24.653389 2025] [:error] [pid 65011:tid 65065] [client 4.190.218.85:9162] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aUQ9PNqlBhOfWMNHM-7JgwAAAVQ"]
[Fri Dec 19 01:43:25.424918 2025] [:error] [pid 45737:tid 45765] [client 4.190.218.85:9185] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aUQ9PVAGdb8SXm6CLHibCwAAABg"]
[Fri Dec 19 01:43:26.052693 2025] [:error] [pid 37418:tid 37436] [client 4.190.218.85:9197] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aUQ9Pq0VAcRIm10OnozGCgAAAJA"]
[Fri Dec 19 01:43:26.546610 2025] [:error] [pid 45825:tid 45833] [client 4.190.218.85:9152] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aUQ9PtES1ifyzuzFwz8keAAAAEY"]
[Fri Dec 19 01:43:26.916187 2025] [:error] [pid 65011:tid 65058] [client 4.190.218.85:9108] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aUQ9PtqlBhOfWMNHM-7JhwAAAU0"]
[Fri Dec 19 01:43:27.447597 2025] [:error] [pid 45739:tid 45797] [client 4.190.218.85:9099] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aUQ9P-IfOvWlLwqW0X3vAwAAAQI"]
[Fri Dec 19 01:43:27.792019 2025] [:error] [pid 45825:tid 45835] [client 4.190.218.85:9103] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aUQ9P9ES1ifyzuzFwz8kfQAAAEg"]
[Fri Dec 19 01:43:28.818916 2025] [:error] [pid 65011:tid 65067] [client 4.190.218.85:9192] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aUQ9QNqlBhOfWMNHM-7JiQAAAVY"]
[Fri Dec 19 01:43:29.348841 2025] [:error] [pid 45825:tid 45841] [client 4.190.218.85:9136] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aUQ9QdES1ifyzuzFwz8kfwAAAE4"]
[Fri Dec 19 01:43:30.845241 2025] [:error] [pid 45825:tid 45838] [client 4.190.218.85:9200] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aUQ9QtES1ifyzuzFwz8kgQAAAEs"]
[Fri Dec 19 01:43:31.295883 2025] [:error] [pid 37418:tid 37434] [client 4.190.218.85:9105] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aUQ9Q60VAcRIm10OnozGDwAAAI4"]
[Fri Dec 19 01:43:31.634627 2025] [:error] [pid 37418:tid 37431] [client 4.190.218.85:9097] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aUQ9Q60VAcRIm10OnozGEAAAAIs"]
[Fri Dec 19 01:43:32.188705 2025] [:error] [pid 37418:tid 37421] [client 4.190.218.85:9117] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aUQ9RK0VAcRIm10OnozGEwAAAIE"]
[Fri Dec 19 01:43:32.616438 2025] [:error] [pid 45737:tid 45761] [client 4.190.218.85:9157] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aUQ9RFAGdb8SXm6CLHibEQAAABQ"]
[Fri Dec 19 01:43:33.036997 2025] [:error] [pid 45737:tid 45741] [client 4.190.218.85:9058] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aUQ9RVAGdb8SXm6CLHibEgAAAAA"]
[Fri Dec 19 01:43:34.032989 2025] [:error] [pid 45825:tid 45836] [client 4.190.218.85:9188] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aUQ9RtES1ifyzuzFwz8kggAAAEk"]
[Fri Dec 19 01:43:34.554775 2025] [:error] [pid 45737:tid 45760] [client 4.190.218.85:9186] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aUQ9RlAGdb8SXm6CLHibFgAAABM"]
[Fri Dec 19 01:43:34.941012 2025] [:error] [pid 45825:tid 45848] [client 4.190.218.85:9195] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aUQ9RtES1ifyzuzFwz8kiQAAAFU"]
[Fri Dec 19 01:43:35.649226 2025] [:error] [pid 45825:tid 45850] [client 4.190.218.85:9098] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aUQ9R9ES1ifyzuzFwz8kjAAAAFc"]
[Fri Dec 19 01:43:36.010499 2025] [:error] [pid 37418:tid 37426] [client 4.190.218.85:9093] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aUQ9SK0VAcRIm10OnozGGQAAAIY"]
[Fri Dec 19 01:43:36.528400 2025] [:error] [pid 37418:tid 37420] [client 4.190.218.85:9190] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aUQ9SK0VAcRIm10OnozGGgAAAIA"]
[Fri Dec 19 01:43:36.971257 2025] [:error] [pid 37418:tid 37444] [client 4.190.218.85:9196] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aUQ9SK0VAcRIm10OnozGHAAAAJg"]
[Fri Dec 19 01:43:37.698903 2025] [:error] [pid 45737:tid 45747] [client 4.190.218.85:9183] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aUQ9SVAGdb8SXm6CLHibHAAAAAY"]
[Fri Dec 19 01:43:38.080154 2025] [:error] [pid 37418:tid 37427] [client 4.190.218.85:9175] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aUQ9Sq0VAcRIm10OnozGHgAAAIc"]
[Fri Dec 19 01:43:38.841402 2025] [:error] [pid 65011:tid 65065] [client 4.190.218.85:9061] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aUQ9StqlBhOfWMNHM-7JowAAAVQ"]
[Fri Dec 19 01:43:39.532284 2025] [:error] [pid 37418:tid 37431] [client 4.190.218.85:9145] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aUQ9S60VAcRIm10OnozGIwAAAIs"]
[Fri Dec 19 01:43:39.993820 2025] [:error] [pid 45825:tid 45845] [client 4.190.218.85:9205] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aUQ9S9ES1ifyzuzFwz8klAAAAFI"]
[Fri Dec 19 01:43:40.399686 2025] [:error] [pid 45738:tid 45791] [client 4.190.218.85:9179] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aUQ9THnw52b7ekJTIU3HEgAAANc"]
[Fri Dec 19 01:43:40.870377 2025] [:error] [pid 65011:tid 65066] [client 4.190.218.85:9101] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aUQ9TNqlBhOfWMNHM-7JqAAAAVU"]
[Fri Dec 19 01:43:41.570055 2025] [:error] [pid 65011:tid 65051] [client 4.190.218.85:9177] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aUQ9TdqlBhOfWMNHM-7JqgAAAUY"]
[Fri Dec 19 01:43:42.078526 2025] [:error] [pid 45825:tid 45851] [client 4.190.218.85:9055] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aUQ9TtES1ifyzuzFwz8kpAAAAFg"]
[Fri Dec 19 01:43:42.624797 2025] [:error] [pid 37418:tid 37429] [client 4.190.218.85:9091] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aUQ9Tq0VAcRIm10OnozGJwAAAIk"]
[Fri Dec 19 01:43:42.991255 2025] [:error] [pid 45739:tid 45811] [client 4.190.218.85:9174] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aUQ9TuIfOvWlLwqW0X3vBwAAARA"]
[Fri Dec 19 01:43:43.355402 2025] [:error] [pid 45825:tid 45839] [client 4.190.218.85:9137] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aUQ9T9ES1ifyzuzFwz8kpQAAAEw"]
[Fri Dec 19 01:43:43.753947 2025] [:error] [pid 45739:tid 45796] [client 4.190.218.85:9204] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUQ9T-IfOvWlLwqW0X3vCAAAAQE"]
[Fri Dec 19 01:43:44.283249 2025] [:error] [pid 45739:tid 45803] [client 4.190.218.85:9154] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUQ9UOIfOvWlLwqW0X3vDQAAAQg"]
[Fri Dec 19 01:43:44.608048 2025] [:error] [pid 45738:tid 45776] [client 4.190.218.85:9088] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUQ9UHnw52b7ekJTIU3HGgAAAMg"]
[Fri Dec 19 01:43:45.290373 2025] [:error] [pid 37418:tid 37428] [client 4.190.218.85:9106] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUQ9Ua0VAcRIm10OnozGKwAAAIg"]
[Fri Dec 19 01:43:45.876821 2025] [:error] [pid 37418:tid 37427] [client 4.190.218.85:9104] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUQ9Ua0VAcRIm10OnozGMAAAAIc"]
[Fri Dec 19 01:43:46.301179 2025] [:error] [pid 45825:tid 45838] [client 4.190.218.85:9189] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUQ9UtES1ifyzuzFwz8ktgAAAEs"]
[Fri Dec 19 01:43:46.669767 2025] [:error] [pid 45737:tid 45751] [client 4.190.218.85:9135] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUQ9UlAGdb8SXm6CLHibJgAAAAo"]
[Fri Dec 19 01:43:47.075820 2025] [:error] [pid 45738:tid 45777] [client 4.190.218.85:9207] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUQ9U3nw52b7ekJTIU3HHwAAAMk"]
[Fri Dec 19 01:43:47.670361 2025] [:error] [pid 37418:tid 37425] [client 4.190.218.85:9054] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aUQ9U60VAcRIm10OnozGOAAAAIU"]
[Fri Dec 19 01:43:48.073125 2025] [:error] [pid 45739:tid 45804] [client 4.190.218.85:9130] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aUQ9VOIfOvWlLwqW0X3vEAAAAQk"]
[Fri Dec 19 01:43:48.586130 2025] [:error] [pid 65011:tid 65059] [client 4.190.218.85:9208] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aUQ9VNqlBhOfWMNHM-7JsQAAAU4"]
[Fri Dec 19 01:43:49.128729 2025] [:error] [pid 45737:tid 45756] [client 4.190.218.85:9046] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aUQ9VVAGdb8SXm6CLHibLgAAAA8"]
[Fri Dec 19 01:43:49.821318 2025] [:error] [pid 45738:tid 45788] [client 4.190.218.85:9193] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUQ9VXnw52b7ekJTIU3HIAAAANQ"]
[Fri Dec 19 01:43:50.457569 2025] [:error] [pid 45739:tid 45805] [client 4.190.218.85:9112] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUQ9VuIfOvWlLwqW0X3vFAAAAQo"]
[Fri Dec 19 01:43:50.901119 2025] [:error] [pid 45825:tid 45844] [client 4.190.218.85:9089] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUQ9VtES1ifyzuzFwz8k0wAAAFE"]
[Fri Dec 19 01:43:51.418631 2025] [:error] [pid 45739:tid 45801] [client 4.190.218.85:9034] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUQ9V-IfOvWlLwqW0X3vFgAAAQY"]
[Fri Dec 19 01:43:51.917595 2025] [:error] [pid 65011:tid 65063] [client 4.190.218.85:9028] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUQ9V9qlBhOfWMNHM-7JtgAAAVI"]
[Fri Dec 19 01:43:52.307453 2025] [:error] [pid 65011:tid 65044] [client 4.190.218.85:9092] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUQ9WNqlBhOfWMNHM-7JuAAAAUA"]
[Fri Dec 19 01:43:52.750642 2025] [:error] [pid 45825:tid 45849] [client 4.190.218.85:9090] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUQ9WNES1ifyzuzFwz8k3gAAAFY"]
[Fri Dec 19 01:43:53.168175 2025] [:error] [pid 45738:tid 45791] [client 4.190.218.85:9115] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUQ9WXnw52b7ekJTIU3HIwAAANc"]
[Fri Dec 19 01:43:53.693510 2025] [:error] [pid 45737:tid 45760] [client 4.190.218.85:9184] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUQ9WVAGdb8SXm6CLHibOQAAABM"]
[Fri Dec 19 01:43:54.041206 2025] [:error] [pid 45825:tid 45832] [client 4.190.218.85:9040] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUQ9WtES1ifyzuzFwz8k5wAAAEU"]
[Fri Dec 19 01:43:54.412782 2025] [:error] [pid 45825:tid 45831] [client 4.190.218.85:9126] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUQ9WtES1ifyzuzFwz8k6gAAAEQ"]
[Fri Dec 19 01:43:55.036534 2025] [:error] [pid 45825:tid 45851] [client 4.190.218.85:9079] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUQ9W9ES1ifyzuzFwz8k8QAAAFg"]
[Fri Dec 19 01:43:55.471363 2025] [:error] [pid 45825:tid 45849] [client 4.190.218.85:9191] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUQ9W9ES1ifyzuzFwz8k9QAAAFY"]
[Fri Dec 19 01:43:55.971700 2025] [:error] [pid 45739:tid 45809] [client 4.190.218.85:9025] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUQ9W-IfOvWlLwqW0X3vGgAAAQ4"]
[Fri Dec 19 01:43:56.638310 2025] [:error] [pid 45737:tid 45755] [client 4.190.218.85:9211] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUQ9XFAGdb8SXm6CLHibPAAAAA4"]
[Fri Dec 19 01:43:57.222640 2025] [:error] [pid 37418:tid 37428] [client 4.190.218.85:9167] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUQ9Xa0VAcRIm10OnozGPwAAAIg"]
[Fri Dec 19 01:43:57.612088 2025] [:error] [pid 45737:tid 45749] [client 4.190.218.85:9096] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUQ9XVAGdb8SXm6CLHibPQAAAAg"]
[Fri Dec 19 01:43:58.255463 2025] [:error] [pid 37418:tid 37436] [client 4.190.218.85:9144] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUQ9Xq0VAcRIm10OnozGSQAAAJA"]
[Fri Dec 19 01:43:58.738707 2025] [:error] [pid 37418:tid 37426] [client 4.190.218.85:9119] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUQ9Xq0VAcRIm10OnozGSwAAAIY"]
[Fri Dec 19 01:43:59.279528 2025] [:error] [pid 45738:tid 45769] [client 4.190.218.85:9048] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUQ9X3nw52b7ekJTIU3HKAAAAME"]
[Fri Dec 19 01:43:59.829517 2025] [:error] [pid 37418:tid 37444] [client 4.190.218.85:9041] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aUQ9X60VAcRIm10OnozGTQAAAJg"]
[Fri Dec 19 01:44:00.218677 2025] [:error] [pid 37418:tid 37433] [client 4.190.218.85:9064] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aUQ9YK0VAcRIm10OnozGTgAAAI0"]
[Fri Dec 19 01:44:00.699293 2025] [:error] [pid 45737:tid 45762] [client 4.190.218.85:9042] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aUQ9YFAGdb8SXm6CLHibPwAAABU"]
[Fri Dec 19 01:44:01.068065 2025] [:error] [pid 45825:tid 45849] [client 4.190.218.85:9173] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aUQ9YdES1ifyzuzFwz8lHAAAAFY"]
[Fri Dec 19 01:44:01.419895 2025] [:error] [pid 45738:tid 45774] [client 4.190.218.85:8964] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUQ9YXnw52b7ekJTIU3HKwAAAMY"]
[Fri Dec 19 01:44:01.746066 2025] [:error] [pid 37418:tid 37432] [client 4.190.218.85:9076] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUQ9Ya0VAcRIm10OnozGUAAAAIw"]
[Fri Dec 19 01:44:02.138294 2025] [:error] [pid 45825:tid 45836] [client 4.190.218.85:9128] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUQ9YtES1ifyzuzFwz8lJQAAAEk"]
[Fri Dec 19 01:44:02.482410 2025] [:error] [pid 37418:tid 37421] [client 4.190.218.85:9045] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUQ9Yq0VAcRIm10OnozGUQAAAIE"]
[Fri Dec 19 01:44:02.886150 2025] [:error] [pid 45825:tid 45842] [client 4.190.218.85:9214] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUQ9YtES1ifyzuzFwz8lKwAAAE8"]
[Fri Dec 19 01:44:03.198657 2025] [:error] [pid 65011:tid 65049] [client 4.190.218.85:9100] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUQ9Y9qlBhOfWMNHM-7JwQAAAUQ"]
[Fri Dec 19 01:44:03.573638 2025] [:error] [pid 37418:tid 37442] [client 4.190.218.85:9178] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUQ9Y60VAcRIm10OnozGUgAAAJY"]
[Fri Dec 19 01:44:03.961719 2025] [:error] [pid 65011:tid 65057] [client 4.190.218.85:9053] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUQ9Y9qlBhOfWMNHM-7JxQAAAUw"]
[Fri Dec 19 01:44:04.304854 2025] [:error] [pid 45737:tid 45755] [client 4.190.218.85:9038] [client 4.190.218.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUQ9ZFAGdb8SXm6CLHibRgAAAA4"]
[Fri Dec 19 01:44:04.676120 2025] [:error] [pid 45825:tid 45844] [client 4.190.218.85:8961] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUQ9ZNES1ifyzuzFwz8lNQAAAFE"]
[Fri Dec 19 01:44:05.134661 2025] [:error] [pid 37418:tid 37422] [client 4.190.218.85:9063] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUQ9Za0VAcRIm10OnozGUwAAAII"]
[Fri Dec 19 01:44:05.732310 2025] [:error] [pid 37418:tid 37429] [client 4.190.218.85:9202] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUQ9Za0VAcRIm10OnozGVAAAAIk"]
[Fri Dec 19 01:44:06.126522 2025] [:error] [pid 37418:tid 37441] [client 4.190.218.85:9125] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUQ9Zq0VAcRIm10OnozGVgAAAJU"]
[Fri Dec 19 01:44:06.569695 2025] [:error] [pid 45737:tid 45765] [client 4.190.218.85:9047] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUQ9ZlAGdb8SXm6CLHibSQAAABg"]
[Fri Dec 19 01:44:06.991201 2025] [:error] [pid 45825:tid 45836] [client 4.190.218.85:9078] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUQ9ZtES1ifyzuzFwz8lOQAAAEk"]
[Fri Dec 19 01:44:07.406351 2025] [:error] [pid 37418:tid 37436] [client 4.190.218.85:8970] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUQ9Z60VAcRIm10OnozGWQAAAJA"]
[Fri Dec 19 01:44:07.848769 2025] [:error] [pid 45737:tid 45751] [client 4.190.218.85:9127] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUQ9Z1AGdb8SXm6CLHibSwAAAAo"]
[Fri Dec 19 01:44:08.263713 2025] [:error] [pid 45737:tid 45757] [client 4.190.218.85:9109] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUQ9aFAGdb8SXm6CLHibTQAAABA"]
[Fri Dec 19 01:44:08.720503 2025] [:error] [pid 37418:tid 37420] [client 4.190.218.85:9049] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUQ9aK0VAcRIm10OnozGWgAAAIA"]
[Fri Dec 19 01:44:09.105188 2025] [:error] [pid 45738:tid 45787] [client 4.190.218.85:9024] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUQ9aXnw52b7ekJTIU3HLQAAANM"]
[Fri Dec 19 01:44:09.509138 2025] [:error] [pid 45737:tid 45749] [client 4.190.218.85:9083] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQ9aVAGdb8SXm6CLHibUQAAAAg"]
[Fri Dec 19 01:44:09.959881 2025] [:error] [pid 45825:tid 45839] [client 4.190.218.85:9111] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQ9adES1ifyzuzFwz8lPwAAAEw"]
[Fri Dec 19 01:44:10.324515 2025] [:error] [pid 45737:tid 45750] [client 4.190.218.85:9163] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQ9alAGdb8SXm6CLHibVAAAAAk"]
[Fri Dec 19 01:44:10.888330 2025] [:error] [pid 45737:tid 45748] [client 4.190.218.85:9129] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUQ9alAGdb8SXm6CLHibVQAAAAc"]
[Fri Dec 19 01:44:11.315269 2025] [:error] [pid 45825:tid 45848] [client 4.190.218.85:9080] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aUQ9a9ES1ifyzuzFwz8lRAAAAFU"]
[Fri Dec 19 01:44:11.738290 2025] [:error] [pid 45737:tid 45765] [client 4.190.218.85:9146] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aUQ9a1AGdb8SXm6CLHibVgAAABg"]
[Fri Dec 19 01:44:12.177848 2025] [:error] [pid 45737:tid 45752] [client 4.190.218.85:9210] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aUQ9bFAGdb8SXm6CLHibWAAAAAs"]
[Fri Dec 19 01:44:12.614707 2025] [:error] [pid 45737:tid 45747] [client 4.190.218.85:9182] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aUQ9bFAGdb8SXm6CLHibWQAAAAY"]
[Fri Dec 19 01:44:12.988487 2025] [:error] [pid 45738:tid 45783] [client 4.190.218.85:9158] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUQ9bHnw52b7ekJTIU3HMAAAAM8"]
[Fri Dec 19 01:44:20.575182 2025] [:error] [pid 45825:tid 45827] [client 4.190.218.85:9071] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUQ9dNES1ifyzuzFwz8lZgAAAEA"]
[Fri Dec 19 01:44:20.971433 2025] [:error] [pid 45737:tid 45744] [client 4.190.218.85:9075] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUQ9dFAGdb8SXm6CLHibYQAAAAM"]
[Fri Dec 19 01:44:21.470872 2025] [:error] [pid 65011:tid 65062] [client 4.190.218.85:9198] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUQ9ddqlBhOfWMNHM-7KIQAAAVE"]
[Fri Dec 19 01:44:21.902370 2025] [:error] [pid 65011:tid 65058] [client 4.190.218.85:8960] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUQ9ddqlBhOfWMNHM-7KJQAAAU0"]
[Fri Dec 19 01:44:22.324018 2025] [:error] [pid 45737:tid 45761] [client 4.190.218.85:9033] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQ9dlAGdb8SXm6CLHibYgAAABQ"]
[Fri Dec 19 01:44:22.705920 2025] [:error] [pid 45737:tid 45758] [client 4.190.218.85:9085] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQ9dlAGdb8SXm6CLHibZAAAABE"]
[Fri Dec 19 01:44:23.032444 2025] [:error] [pid 45825:tid 45834] [client 4.190.218.85:9036] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQ9d9ES1ifyzuzFwz8lagAAAEc"]
[Fri Dec 19 01:44:23.576324 2025] [:error] [pid 37418:tid 37438] [client 4.190.218.85:8992] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUQ9d60VAcRIm10OnozGagAAAJI"]
[Fri Dec 19 01:44:24.221762 2025] [:error] [pid 45738:tid 45773] [client 4.190.218.85:9121] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUQ9eHnw52b7ekJTIU3HOQAAAMU"]
[Fri Dec 19 01:44:24.564891 2025] [:error] [pid 45738:tid 45768] [client 4.190.218.85:8982] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUQ9eHnw52b7ekJTIU3HOwAAAMA"]
[Fri Dec 19 01:44:24.950847 2025] [:error] [pid 45825:tid 45836] [client 4.190.218.85:9114] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUQ9eNES1ifyzuzFwz8ldAAAAEk"]
[Fri Dec 19 01:44:25.336781 2025] [:error] [pid 45738:tid 45777] [client 4.190.218.85:9134] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUQ9eXnw52b7ekJTIU3HPAAAAMk"]
[Fri Dec 19 01:44:25.713912 2025] [:error] [pid 45737:tid 45763] [client 4.190.218.85:9138] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUQ9eVAGdb8SXm6CLHibZwAAABY"]
[Fri Dec 19 01:44:26.037376 2025] [:error] [pid 45825:tid 45842] [client 4.190.218.85:9070] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUQ9etES1ifyzuzFwz8lfgAAAE8"]
[Fri Dec 19 01:44:26.359930 2025] [:error] [pid 45825:tid 45832] [client 4.190.218.85:9050] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUQ9etES1ifyzuzFwz8lgQAAAEU"]
[Fri Dec 19 01:44:26.650254 2025] [:error] [pid 45737:tid 45747] [client 4.190.218.85:9058] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUQ9elAGdb8SXm6CLHibaAAAAAY"]
[Fri Dec 19 01:44:27.042953 2025] [:error] [pid 45738:tid 45780] [client 4.190.218.85:9147] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aUQ9e3nw52b7ekJTIU3HPgAAAMw"]
[Fri Dec 19 01:44:27.374926 2025] [:error] [pid 45737:tid 45753] [client 4.190.218.85:9139] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aUQ9e1AGdb8SXm6CLHibaQAAAAw"]
[Fri Dec 19 01:44:27.786072 2025] [:error] [pid 45737:tid 45757] [client 4.190.218.85:8987] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aUQ9e1AGdb8SXm6CLHibagAAABA"]
[Fri Dec 19 01:44:28.101407 2025] [:error] [pid 45737:tid 45746] [client 4.190.218.85:9084] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aUQ9fFAGdb8SXm6CLHibawAAAAU"]
[Fri Dec 19 01:44:28.594175 2025] [:error] [pid 65011:tid 65056] [client 4.190.218.85:9149] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aUQ9fNqlBhOfWMNHM-7KOAAAAUs"]
[Fri Dec 19 01:44:28.961607 2025] [:error] [pid 45739:tid 45808] [client 4.190.218.85:9150] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aUQ9fOIfOvWlLwqW0X3vOwAAAQ0"]
[Fri Dec 19 01:44:29.318979 2025] [:error] [pid 45739:tid 45811] [client 4.190.218.85:9082] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aUQ9feIfOvWlLwqW0X3vPAAAARA"]
[Fri Dec 19 01:44:29.650870 2025] [:error] [pid 45739:tid 45806] [client 4.190.218.85:9169] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aUQ9feIfOvWlLwqW0X3vPgAAAQs"]
[Fri Dec 19 01:44:30.118658 2025] [:error] [pid 45737:tid 45744] [client 4.190.218.85:9015] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUQ9flAGdb8SXm6CLHibcQAAAAM"]
[Fri Dec 19 01:44:30.553059 2025] [:error] [pid 45737:tid 45755] [client 4.190.218.85:9068] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUQ9flAGdb8SXm6CLHibcgAAAA4"]
[Fri Dec 19 01:44:31.006362 2025] [:error] [pid 45738:tid 45791] [client 4.190.218.85:9133] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUQ9f3nw52b7ekJTIU3HQAAAANc"]
[Fri Dec 19 01:44:31.423285 2025] [:error] [pid 45825:tid 45848] [client 4.190.218.85:9039] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUQ9f9ES1ifyzuzFwz8ljQAAAFU"]
[Fri Dec 19 01:44:31.756654 2025] [:error] [pid 45739:tid 45807] [client 4.190.218.85:9032] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUQ9f-IfOvWlLwqW0X3vQQAAAQw"]
[Fri Dec 19 01:44:32.133783 2025] [:error] [pid 45825:tid 45829] [client 4.190.218.85:9131] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUQ9gNES1ifyzuzFwz8lkgAAAEI"]
[Fri Dec 19 01:44:32.426502 2025] [:error] [pid 45825:tid 45846] [client 4.190.218.85:9044] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUQ9gNES1ifyzuzFwz8lkwAAAFM"]
[Fri Dec 19 01:44:32.726005 2025] [:error] [pid 45737:tid 45758] [client 4.190.218.85:9065] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aUQ9gFAGdb8SXm6CLHibdAAAABE"]
[Fri Dec 19 01:44:33.104875 2025] [:error] [pid 45737:tid 45752] [client 4.190.218.85:9120] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUQ9gVAGdb8SXm6CLHibdwAAAAs"]
[Fri Dec 19 01:44:33.586784 2025] [:error] [pid 37418:tid 37442] [client 4.190.218.85:8981] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUQ9ga0VAcRIm10OnozGcgAAAJY"]
[Fri Dec 19 01:44:33.927684 2025] [:error] [pid 45738:tid 45790] [client 4.190.218.85:9067] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUQ9gXnw52b7ekJTIU3HQQAAANY"]
[Fri Dec 19 01:44:34.251884 2025] [:error] [pid 45825:tid 45845] [client 4.190.218.85:9107] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUQ9gtES1ifyzuzFwz8llgAAAFI"]
[Fri Dec 19 01:44:34.721780 2025] [:error] [pid 45825:tid 45839] [client 4.190.218.85:9060] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUQ9gtES1ifyzuzFwz8llwAAAEw"]
[Fri Dec 19 01:44:35.021993 2025] [:error] [pid 45825:tid 45827] [client 4.190.218.85:9159] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUQ9g9ES1ifyzuzFwz8lmAAAAEA"]
[Fri Dec 19 01:44:35.343339 2025] [:error] [pid 45739:tid 45800] [client 4.190.218.85:8962] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUQ9g-IfOvWlLwqW0X3vRQAAAQU"]
[Fri Dec 19 01:44:35.843314 2025] [:error] [pid 45738:tid 45778] [client 4.190.218.85:9012] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUQ9g3nw52b7ekJTIU3HSgAAAMo"]
[Fri Dec 19 01:44:36.293675 2025] [:error] [pid 45738:tid 45768] [client 4.190.218.85:9037] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aUQ9hHnw52b7ekJTIU3HTwAAAMA"]
[Fri Dec 19 01:44:36.639299 2025] [:error] [pid 45825:tid 45832] [client 4.190.218.85:9077] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aUQ9hNES1ifyzuzFwz8lmwAAAEU"]
[Fri Dec 19 01:44:37.093202 2025] [:error] [pid 45738:tid 45790] [client 4.190.218.85:8993] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aUQ9hXnw52b7ekJTIU3HVQAAANY"]
[Fri Dec 19 01:44:38.404988 2025] [:error] [pid 45737:tid 45764] [client 4.190.218.85:9140] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aUQ9hlAGdb8SXm6CLHibfwAAABc"]
[Fri Dec 19 01:44:39.742295 2025] [:error] [pid 45825:tid 45831] [client 4.190.218.85:9069] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUQ9h9ES1ifyzuzFwz8logAAAEQ"]
[Fri Dec 19 01:44:41.429705 2025] [:error] [pid 45825:tid 45848] [client 4.190.218.85:8986] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUQ9idES1ifyzuzFwz8lpQAAAFU"]
[Fri Dec 19 01:44:42.216687 2025] [:error] [pid 45737:tid 45759] [client 4.190.218.85:9194] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUQ9ilAGdb8SXm6CLHibhwAAABI"]
[Fri Dec 19 01:44:42.602900 2025] [:error] [pid 45737:tid 45752] [client 4.190.218.85:8998] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUQ9ilAGdb8SXm6CLHibiQAAAAs"]
[Fri Dec 19 01:44:42.974318 2025] [:error] [pid 45825:tid 45828] [client 4.190.218.85:9031] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUQ9itES1ifyzuzFwz8lqQAAAEE"]
[Fri Dec 19 01:44:43.266895 2025] [:error] [pid 45825:tid 45849] [client 4.190.218.85:8983] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUQ9i9ES1ifyzuzFwz8lqgAAAFY"]
[Fri Dec 19 01:44:43.576819 2025] [:error] [pid 45739:tid 45813] [client 4.190.218.85:9102] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUQ9i-IfOvWlLwqW0X3vTgAAARI"]
[Fri Dec 19 01:44:44.482520 2025] [:error] [pid 45825:tid 45851] [client 4.190.218.85:9199] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUQ9jNES1ifyzuzFwz8lrwAAAFg"]
[Fri Dec 19 01:44:44.840265 2025] [:error] [pid 45739:tid 45801] [client 4.190.218.85:9122] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUQ9jOIfOvWlLwqW0X3vTwAAAQY"]
[Fri Dec 19 01:44:45.232571 2025] [:error] [pid 45825:tid 45848] [client 4.190.218.85:9116] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUQ9jdES1ifyzuzFwz8lswAAAFU"]
[Fri Dec 19 01:44:45.647060 2025] [:error] [pid 45737:tid 45742] [client 4.190.218.85:9110] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUQ9jVAGdb8SXm6CLHibkwAAAAE"]
[Fri Dec 19 01:44:46.292559 2025] [:error] [pid 45738:tid 45773] [client 4.190.218.85:9027] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUQ9jnnw52b7ekJTIU3HXQAAAMU"]
[Fri Dec 19 01:44:46.772053 2025] [:error] [pid 45825:tid 45837] [client 4.190.218.85:8980] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aUQ9jtES1ifyzuzFwz8ltwAAAEo"]
[Fri Dec 19 01:44:47.163510 2025] [:error] [pid 45825:tid 45849] [client 4.190.218.85:8944] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aUQ9j9ES1ifyzuzFwz8luAAAAFY"]
[Fri Dec 19 01:44:47.492783 2025] [:error] [pid 45825:tid 45830] [client 4.190.218.85:9030] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aUQ9j9ES1ifyzuzFwz8lugAAAEM"]
[Fri Dec 19 01:44:47.846754 2025] [:error] [pid 45739:tid 45818] [client 4.190.218.85:8923] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aUQ9j-IfOvWlLwqW0X3vUwAAARc"]
[Fri Dec 19 01:44:48.228984 2025] [:error] [pid 45739:tid 45799] [client 4.190.218.85:8979] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aUQ9kOIfOvWlLwqW0X3vVAAAAQQ"]
[Fri Dec 19 01:44:48.585127 2025] [:error] [pid 37418:tid 37435] [client 4.190.218.85:9014] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aUQ9kK0VAcRIm10OnozGdwAAAI8"]
[Fri Dec 19 01:44:49.080627 2025] [:error] [pid 45738:tid 45768] [client 4.190.218.85:8898] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aUQ9kXnw52b7ekJTIU3HXwAAAMA"]
[Fri Dec 19 01:44:49.429238 2025] [:error] [pid 45738:tid 45774] [client 4.190.218.85:9126] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aUQ9kXnw52b7ekJTIU3HYAAAAMY"]
[Fri Dec 19 01:44:49.856256 2025] [:error] [pid 45825:tid 45850] [client 4.190.218.85:9001] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aUQ9kdES1ifyzuzFwz8lwgAAAFc"]
[Fri Dec 19 01:44:50.261617 2025] [:error] [pid 45738:tid 45791] [client 4.190.218.85:8904] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aUQ9knnw52b7ekJTIU3HYwAAANc"]
[Fri Dec 19 01:44:50.646305 2025] [:error] [pid 45738:tid 45772] [client 4.190.218.85:9073] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aUQ9knnw52b7ekJTIU3HZAAAAMQ"]
[Fri Dec 19 01:44:51.107220 2025] [:error] [pid 65011:tid 65059] [client 4.190.218.85:8896] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aUQ9k9qlBhOfWMNHM-7KRgAAAU4"]
[Fri Dec 19 01:44:51.523424 2025] [:error] [pid 45825:tid 45829] [client 4.190.218.85:8975] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUQ9k9ES1ifyzuzFwz8lxwAAAEI"]
[Fri Dec 19 01:44:52.131727 2025] [:error] [pid 37418:tid 37424] [client 4.190.218.85:9086] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUQ9lK0VAcRIm10OnozGfwAAAIQ"]
[Fri Dec 19 01:44:52.543870 2025] [:error] [pid 45825:tid 45834] [client 4.190.218.85:9074] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUQ9lNES1ifyzuzFwz8lzAAAAEc"]
[Fri Dec 19 01:44:53.157122 2025] [:error] [pid 45738:tid 45786] [client 4.190.218.85:8918] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUQ9lXnw52b7ekJTIU3HZgAAANI"]
[Fri Dec 19 01:44:53.594634 2025] [:error] [pid 45738:tid 45776] [client 4.190.218.85:9144] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUQ9lXnw52b7ekJTIU3HaQAAAMg"]
[Fri Dec 19 01:44:54.155633 2025] [:error] [pid 65011:tid 65064] [client 4.190.218.85:8972] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUQ9ltqlBhOfWMNHM-7KSgAAAVM"]
[Fri Dec 19 01:44:54.494028 2025] [:error] [pid 45737:tid 45757] [client 4.190.218.85:9181] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUQ9llAGdb8SXm6CLHibnQAAABA"]
[Fri Dec 19 01:44:55.006669 2025] [:error] [pid 45825:tid 45844] [client 4.190.218.85:8902] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUQ9l9ES1ifyzuzFwz8l0AAAAFE"]
[Fri Dec 19 01:44:55.371687 2025] [:error] [pid 37418:tid 37425] [client 4.190.218.85:9057] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aUQ9l60VAcRIm10OnozGhAAAAIU"]
[Fri Dec 19 01:44:56.206155 2025] [:error] [pid 45739:tid 45800] [client 4.190.218.85:8984] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aUQ9mOIfOvWlLwqW0X3vYAAAAQU"]
[Fri Dec 19 01:44:56.592182 2025] [:error] [pid 45825:tid 45849] [client 4.190.218.85:9132] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aUQ9mNES1ifyzuzFwz8l1AAAAFY"]
[Fri Dec 19 01:44:57.033735 2025] [:error] [pid 45737:tid 45760] [client 4.190.218.85:9056] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aUQ9mVAGdb8SXm6CLHibowAAABM"]
[Fri Dec 19 01:44:57.439779 2025] [:error] [pid 37418:tid 37437] [client 4.190.218.85:8965] [client 4.190.218.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUQ9ma0VAcRIm10OnozGhgAAAJE"]
[Fri Dec 19 01:44:57.951335 2025] [:error] [pid 45738:tid 45772] [client 4.190.218.85:9035] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aUQ9mXnw52b7ekJTIU3HdAAAAMQ"]
[Fri Dec 19 01:44:58.588958 2025] [:error] [pid 37418:tid 37430] [client 4.190.218.85:8919] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aUQ9mq0VAcRIm10OnozGigAAAIo"]
[Fri Dec 19 01:44:59.020403 2025] [:error] [pid 45737:tid 45759] [client 4.190.218.85:9000] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aUQ9m1AGdb8SXm6CLHibpQAAABI"]
[Fri Dec 19 01:44:59.417271 2025] [:error] [pid 65011:tid 65066] [client 4.190.218.85:8988] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aUQ9m9qlBhOfWMNHM-7KTgAAAVU"]
[Fri Dec 19 01:45:00.160667 2025] [:error] [pid 45825:tid 45830] [client 4.190.218.85:9123] [client 4.190.218.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUQ9nNES1ifyzuzFwz8l2gAAAEM"]
[Fri Dec 19 01:45:00.639194 2025] [:error] [pid 45738:tid 45775] [client 4.190.218.85:9206] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUQ9nHnw52b7ekJTIU3HdgAAAMc"]
[Fri Dec 19 01:45:01.129330 2025] [:error] [pid 45739:tid 45807] [client 4.190.218.85:9051] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUQ9neIfOvWlLwqW0X3vaAAAAQw"]
[Fri Dec 19 01:45:01.636003 2025] [:error] [pid 45738:tid 45776] [client 4.190.218.85:9068] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUQ9nXnw52b7ekJTIU3HeAAAAMg"]
[Fri Dec 19 01:45:02.033683 2025] [:error] [pid 45737:tid 45752] [client 4.190.218.85:9062] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUQ9nlAGdb8SXm6CLHibpwAAAAs"]
[Fri Dec 19 01:45:02.553499 2025] [:error] [pid 65011:tid 65069] [client 4.190.218.85:8910] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUQ9ntqlBhOfWMNHM-7KUQAAAVg"]
[Fri Dec 19 01:45:03.094056 2025] [:error] [pid 45739:tid 45813] [client 4.190.218.85:8968] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUQ9n-IfOvWlLwqW0X3vbAAAARI"]
[Fri Dec 19 01:45:03.571044 2025] [:error] [pid 45738:tid 45792] [client 4.190.218.85:8999] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUQ9n3nw52b7ekJTIU3HegAAANg"]
[Fri Dec 19 01:45:03.980610 2025] [:error] [pid 65011:tid 65059] [client 4.190.218.85:8946] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUQ9n9qlBhOfWMNHM-7KVAAAAU4"]
[Fri Dec 19 01:45:04.351205 2025] [:error] [pid 45738:tid 45773] [client 4.190.218.85:9019] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUQ9oHnw52b7ekJTIU3HfQAAAMU"]
[Fri Dec 19 01:45:04.887725 2025] [:error] [pid 45738:tid 45768] [client 4.190.218.85:9059] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUQ9oHnw52b7ekJTIU3HfgAAAMA"]
[Fri Dec 19 01:45:05.225829 2025] [:error] [pid 37418:tid 37425] [client 4.190.218.85:8925] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUQ9oa0VAcRIm10OnozGlAAAAIU"]
[Fri Dec 19 01:45:05.720635 2025] [:error] [pid 37418:tid 37439] [client 4.190.218.85:8928] [client 4.190.218.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUQ9oa0VAcRIm10OnozGlQAAAJM"]
[Fri Dec 19 01:45:06.077729 2025] [:error] [pid 45825:tid 45828] [client 4.190.218.85:8997] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUQ9otES1ifyzuzFwz8l6AAAAEE"]
[Fri Dec 19 01:45:06.484158 2025] [:error] [pid 37418:tid 37440] [client 4.190.218.85:8973] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUQ9oq0VAcRIm10OnozGlwAAAJQ"]
[Fri Dec 19 01:45:06.785963 2025] [:error] [pid 45825:tid 45840] [client 4.190.218.85:9003] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUQ9otES1ifyzuzFwz8l6wAAAE0"]
[Fri Dec 19 01:45:07.263887 2025] [:error] [pid 45825:tid 45851] [client 4.190.218.85:8843] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUQ9o9ES1ifyzuzFwz8l8AAAAFg"]
[Fri Dec 19 01:45:07.614617 2025] [:error] [pid 45825:tid 45837] [client 4.190.218.85:8929] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUQ9o9ES1ifyzuzFwz8l8gAAAEo"]
[Fri Dec 19 01:45:07.960739 2025] [:error] [pid 45738:tid 45786] [client 4.190.218.85:8974] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUQ9o3nw52b7ekJTIU3HiQAAANI"]
[Fri Dec 19 01:45:08.395016 2025] [:error] [pid 37418:tid 37426] [client 4.190.218.85:8945] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUQ9pK0VAcRIm10OnozGmwAAAIY"]
[Fri Dec 19 01:45:08.752520 2025] [:error] [pid 45737:tid 45752] [client 4.190.218.85:8985] [client 4.190.218.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUQ9pFAGdb8SXm6CLHibuwAAAAs"]
[Fri Dec 19 01:45:09.097257 2025] [:error] [pid 45738:tid 45792] [client 4.190.218.85:8954] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aUQ9pXnw52b7ekJTIU3HjQAAANg"]
[Fri Dec 19 01:45:09.544366 2025] [:error] [pid 45739:tid 45803] [client 4.190.218.85:8963] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aUQ9peIfOvWlLwqW0X3vcQAAAQg"]
[Fri Dec 19 01:45:09.868158 2025] [:error] [pid 37418:tid 37442] [client 4.190.218.85:9072] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aUQ9pa0VAcRIm10OnozGnQAAAJY"]
[Fri Dec 19 01:45:10.179955 2025] [:error] [pid 37418:tid 37431] [client 4.190.218.85:9143] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aUQ9pq0VAcRIm10OnozGnwAAAIs"]
[Fri Dec 19 01:45:10.541419 2025] [:error] [pid 45738:tid 45771] [client 4.190.218.85:8916] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aUQ9pnnw52b7ekJTIU3HkQAAAMM"]
[Fri Dec 19 01:45:10.864234 2025] [:error] [pid 45738:tid 45777] [client 4.190.218.85:9023] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aUQ9pnnw52b7ekJTIU3HkgAAAMk"]
[Fri Dec 19 01:45:11.307583 2025] [:error] [pid 45737:tid 45763] [client 4.190.218.85:8842] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aUQ9p1AGdb8SXm6CLHibvgAAABY"]
[Fri Dec 19 01:45:11.953204 2025] [:error] [pid 45738:tid 45782] [client 4.190.218.85:9022] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aUQ9p3nw52b7ekJTIU3HkwAAAM4"]
[Fri Dec 19 01:45:12.555812 2025] [:error] [pid 45739:tid 45795] [client 4.190.218.85:9020] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aUQ9qOIfOvWlLwqW0X3vdgAAAQA"]
[Fri Dec 19 01:45:12.897147 2025] [:error] [pid 45739:tid 45813] [client 4.190.218.85:9066] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aUQ9qOIfOvWlLwqW0X3vdwAAARI"]
[Fri Dec 19 01:45:13.228570 2025] [:error] [pid 45737:tid 45755] [client 4.190.218.85:9016] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aUQ9qVAGdb8SXm6CLHibwAAAAA4"]
[Fri Dec 19 01:45:13.590036 2025] [:error] [pid 37418:tid 37437] [client 4.190.218.85:8971] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUQ9qa0VAcRIm10OnozGogAAAJE"]
[Fri Dec 19 01:45:13.964360 2025] [:error] [pid 37418:tid 37420] [client 4.190.218.85:9008] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUQ9qa0VAcRIm10OnozGowAAAIA"]
[Fri Dec 19 01:45:14.339266 2025] [:error] [pid 45737:tid 45742] [client 4.190.218.85:8903] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUQ9qlAGdb8SXm6CLHibwgAAAAE"]
[Fri Dec 19 01:45:14.759127 2025] [:error] [pid 45737:tid 45765] [client 4.190.218.85:9151] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUQ9qlAGdb8SXm6CLHibxgAAABg"]
[Fri Dec 19 01:45:15.070525 2025] [:error] [pid 45737:tid 45744] [client 4.190.218.85:8907] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUQ9q1AGdb8SXm6CLHibyQAAAAM"]
[Fri Dec 19 01:45:15.441369 2025] [:error] [pid 45737:tid 45753] [client 4.190.218.85:9021] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUQ9q1AGdb8SXm6CLHibywAAAAw"]
[Fri Dec 19 01:45:15.840036 2025] [:error] [pid 45739:tid 45815] [client 4.190.218.85:9005] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUQ9q-IfOvWlLwqW0X3veAAAARQ"]
[Fri Dec 19 01:45:16.335050 2025] [:error] [pid 45738:tid 45792] [client 4.190.218.85:8996] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUQ9rHnw52b7ekJTIU3HmQAAANg"]
[Fri Dec 19 01:45:16.797752 2025] [:error] [pid 37418:tid 37430] [client 4.190.218.85:8947] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aUQ9rK0VAcRIm10OnozGpgAAAIo"]
[Fri Dec 19 01:45:17.542233 2025] [:error] [pid 37418:tid 37433] [client 4.190.218.85:9013] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aUQ9ra0VAcRIm10OnozGqAAAAI0"]
[Fri Dec 19 01:45:18.155789 2025] [:error] [pid 37418:tid 37434] [client 4.190.218.85:8901] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aUQ9rq0VAcRIm10OnozGrAAAAI4"]
[Fri Dec 19 01:45:18.603216 2025] [:error] [pid 37418:tid 37429] [client 4.190.218.85:8857] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aUQ9rq0VAcRIm10OnozGrQAAAIk"]
[Fri Dec 19 01:45:18.969001 2025] [:error] [pid 45825:tid 45847] [client 4.190.218.85:8978] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUQ9rtES1ifyzuzFwz8l-wAAAFQ"]
[Fri Dec 19 01:45:19.328775 2025] [:error] [pid 45739:tid 45797] [client 4.190.218.85:9118] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUQ9r-IfOvWlLwqW0X3vfAAAAQI"]
[Fri Dec 19 01:45:19.874327 2025] [:error] [pid 45825:tid 45850] [client 4.190.218.85:9141] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUQ9r9ES1ifyzuzFwz8l_QAAAFc"]
[Fri Dec 19 01:45:21.555863 2025] [:error] [pid 65011:tid 65063] [client 4.190.218.85:8991] [client 4.190.218.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUQ9sdqlBhOfWMNHM-7KaAAAAVI"]
[Fri Dec 19 01:45:24.557213 2025] [:error] [pid 65011:tid 65056] [client 4.190.218.85:9142] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aUQ9tNqlBhOfWMNHM-7KdAAAAUs"]
[Fri Dec 19 01:45:25.067633 2025] [:error] [pid 65011:tid 65060] [client 4.190.218.85:8995] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aUQ9tdqlBhOfWMNHM-7KdQAAAU8"]
[Fri Dec 19 01:45:25.510624 2025] [:error] [pid 65011:tid 65069] [client 4.190.218.85:9002] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aUQ9tdqlBhOfWMNHM-7KdgAAAVg"]
[Fri Dec 19 01:45:25.998825 2025] [:error] [pid 45825:tid 45843] [client 4.190.218.85:9057] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aUQ9tdES1ifyzuzFwz8mEQAAAFA"]
[Fri Dec 19 01:45:26.545937 2025] [:error] [pid 45739:tid 45812] [client 4.190.218.85:9007] [client 4.190.218.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUQ9tuIfOvWlLwqW0X3vjAAAARE"]
[Fri Dec 19 01:45:29.378905 2025] [:error] [pid 45738:tid 45788] [client 4.190.218.85:8937] [client 4.190.218.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aUQ9uXnw52b7ekJTIU3HtAAAANQ"]
[Fri Dec 19 01:45:29.954421 2025] [:error] [pid 45825:tid 45829] [client 4.190.218.85:8864] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUQ9udES1ifyzuzFwz8mHwAAAEI"]
[Fri Dec 19 01:45:30.598064 2025] [:error] [pid 45737:tid 45751] [client 4.190.218.85:8850] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUQ9ulAGdb8SXm6CLHib4AAAAAo"]
[Fri Dec 19 01:45:30.912405 2025] [:error] [pid 45738:tid 45781] [client 4.190.218.85:8908] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUQ9unnw52b7ekJTIU3HwQAAAM0"]
[Fri Dec 19 01:45:31.272396 2025] [:error] [pid 45738:tid 45786] [client 4.190.218.85:8909] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUQ9u3nw52b7ekJTIU3HxAAAANI"]
[Fri Dec 19 01:45:31.651802 2025] [:error] [pid 45825:tid 45840] [client 4.190.218.85:8977] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aUQ9u9ES1ifyzuzFwz8mLQAAAE0"]
[Fri Dec 19 01:45:32.158285 2025] [:error] [pid 65011:tid 65056] [client 4.190.218.85:8895] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aUQ9vNqlBhOfWMNHM-7KhAAAAUs"]
[Fri Dec 19 01:45:32.681178 2025] [:error] [pid 45739:tid 45817] [client 4.190.218.85:8933] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aUQ9vOIfOvWlLwqW0X3vqQAAARY"]
[Fri Dec 19 01:45:33.340479 2025] [:error] [pid 45737:tid 45751] [client 4.190.218.85:9004] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aUQ9vVAGdb8SXm6CLHib9gAAAAo"]
[Fri Dec 19 01:45:34.009972 2025] [:error] [pid 45825:tid 45841] [client 4.190.218.85:8862] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUQ9vtES1ifyzuzFwz8mNwAAAE4"]
[Fri Dec 19 01:45:34.418172 2025] [:error] [pid 45737:tid 45750] [client 4.190.218.85:8848] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUQ9vlAGdb8SXm6CLHib-QAAAAk"]
[Fri Dec 19 01:45:34.791221 2025] [:error] [pid 45737:tid 45759] [client 4.190.218.85:8912] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUQ9vlAGdb8SXm6CLHib-wAAABI"]
[Fri Dec 19 01:45:35.184381 2025] [:error] [pid 65011:tid 65058] [client 4.190.218.85:8885] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUQ9v9qlBhOfWMNHM-7KhwAAAU0"]
[Fri Dec 19 01:45:35.634844 2025] [:error] [pid 65011:tid 65059] [client 4.190.218.85:8935] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aUQ9v9qlBhOfWMNHM-7KiAAAAU4"]
[Fri Dec 19 01:45:36.129318 2025] [:error] [pid 45825:tid 45850] [client 4.190.218.85:8996] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aUQ9wNES1ifyzuzFwz8mPgAAAFc"]
[Fri Dec 19 01:45:37.177586 2025] [:error] [pid 45825:tid 45846] [client 4.190.218.85:8948] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aUQ9wdES1ifyzuzFwz8mQQAAAFM"]
[Fri Dec 19 01:45:37.650062 2025] [:error] [pid 45825:tid 45843] [client 4.190.218.85:8906] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aUQ9wdES1ifyzuzFwz8mQwAAAFA"]
[Fri Dec 19 01:45:38.212615 2025] [:error] [pid 45738:tid 45791] [client 4.190.218.85:9043] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aUQ9wnnw52b7ekJTIU3H3QAAANc"]
[Fri Dec 19 01:45:38.627821 2025] [:error] [pid 45737:tid 45746] [client 4.190.218.85:9052] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aUQ9wlAGdb8SXm6CLHicBAAAAAU"]
[Fri Dec 19 01:45:39.005731 2025] [:error] [pid 65011:tid 65061] [client 4.190.218.85:8949] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aUQ9w9qlBhOfWMNHM-7KjQAAAVA"]
[Fri Dec 19 01:45:39.307365 2025] [:error] [pid 65011:tid 65056] [client 4.190.218.85:8921] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aUQ9w9qlBhOfWMNHM-7KjgAAAUs"]
[Fri Dec 19 01:45:39.763285 2025] [:error] [pid 45737:tid 45765] [client 4.190.218.85:9124] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aUQ9w1AGdb8SXm6CLHicCQAAABg"]
[Fri Dec 19 01:45:40.156659 2025] [:error] [pid 37418:tid 37430] [client 4.190.218.85:8839] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aUQ9xK0VAcRIm10OnozHUAAAAIo"]
[Fri Dec 19 01:45:40.464869 2025] [:error] [pid 45825:tid 45834] [client 4.190.218.85:9010] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aUQ9xNES1ifyzuzFwz8mTQAAAEc"]
[Fri Dec 19 01:45:40.913003 2025] [:error] [pid 45825:tid 45835] [client 4.190.218.85:9006] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aUQ9xNES1ifyzuzFwz8mTwAAAEg"]
[Fri Dec 19 01:45:41.405077 2025] [:error] [pid 45825:tid 45842] [client 4.190.218.85:8953] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUQ9xdES1ifyzuzFwz8mUAAAAE8"]
[Fri Dec 19 01:45:41.866508 2025] [:error] [pid 65011:tid 65054] [client 4.190.218.85:8900] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUQ9xdqlBhOfWMNHM-7KkwAAAUk"]
[Fri Dec 19 01:45:42.379212 2025] [:error] [pid 45825:tid 45848] [client 4.190.218.85:8768] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUQ9xtES1ifyzuzFwz8mWAAAAFU"]
[Fri Dec 19 01:45:42.732502 2025] [:error] [pid 45739:tid 45812] [client 4.190.218.85:9081] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUQ9xuIfOvWlLwqW0X3vtwAAARE"]
[Fri Dec 19 01:45:43.181397 2025] [:error] [pid 45737:tid 45762] [client 4.190.218.85:8958] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aUQ9x1AGdb8SXm6CLHicEgAAABU"]
[Fri Dec 19 01:45:43.556408 2025] [:error] [pid 45737:tid 45757] [client 4.190.218.85:8854] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aUQ9x1AGdb8SXm6CLHicFAAAABA"]
[Fri Dec 19 01:45:44.286389 2025] [:error] [pid 45738:tid 45786] [client 4.190.218.85:8989] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aUQ9yHnw52b7ekJTIU3H5gAAANI"]
[Fri Dec 19 01:45:44.603321 2025] [:error] [pid 45737:tid 45751] [client 4.190.218.85:8966] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aUQ9yFAGdb8SXm6CLHicFQAAAAo"]
[Fri Dec 19 01:45:45.056421 2025] [:error] [pid 45737:tid 45742] [client 4.190.218.85:8915] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aUQ9yVAGdb8SXm6CLHicGAAAAAE"]
[Fri Dec 19 01:45:45.439657 2025] [:error] [pid 37418:tid 37442] [client 4.190.218.85:8994] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aUQ9ya0VAcRIm10OnozHVAAAAJY"]
[Fri Dec 19 01:45:45.928577 2025] [:error] [pid 45738:tid 45773] [client 4.190.218.85:9029] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aUQ9yXnw52b7ekJTIU3H5wAAAMU"]
[Fri Dec 19 01:45:46.664411 2025] [:error] [pid 45738:tid 45785] [client 4.190.218.85:8860] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aUQ9ynnw52b7ekJTIU3H6QAAANE"]
[Fri Dec 19 01:45:47.167910 2025] [:error] [pid 37418:tid 37435] [client 4.190.218.85:9011] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aUQ9y60VAcRIm10OnozHVwAAAI8"]
[Fri Dec 19 01:45:47.657231 2025] [:error] [pid 37418:tid 37441] [client 4.190.218.85:9053] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aUQ9y60VAcRIm10OnozHWQAAAJU"]
[Fri Dec 19 01:45:48.068610 2025] [:error] [pid 45825:tid 45845] [client 4.190.218.85:9017] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aUQ9zNES1ifyzuzFwz8mYwAAAFI"]
[Fri Dec 19 01:45:48.558003 2025] [:error] [pid 37418:tid 37423] [client 4.190.218.85:8957] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aUQ9zK0VAcRIm10OnozHWwAAAIM"]
[Fri Dec 19 01:45:49.160529 2025] [:error] [pid 45737:tid 45753] [client 4.190.218.85:8917] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aUQ9zVAGdb8SXm6CLHicHAAAAAw"]
[Fri Dec 19 01:45:49.872417 2025] [:error] [pid 45737:tid 45762] [client 4.190.218.85:8899] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aUQ9zVAGdb8SXm6CLHicHgAAABU"]
[Fri Dec 19 01:45:50.213220 2025] [:error] [pid 45737:tid 45761] [client 4.190.218.85:8859] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aUQ9zlAGdb8SXm6CLHicHwAAABQ"]
[Fri Dec 19 01:45:50.547565 2025] [:error] [pid 45825:tid 45844] [client 4.190.218.85:9215] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aUQ9ztES1ifyzuzFwz8maQAAAFE"]
[Fri Dec 19 01:45:51.061855 2025] [:error] [pid 45739:tid 45805] [client 4.190.218.85:8934] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUQ9z-IfOvWlLwqW0X3vvgAAAQo"]
[Fri Dec 19 01:45:51.379795 2025] [:error] [pid 45825:tid 45830] [client 4.190.218.85:8858] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUQ9z9ES1ifyzuzFwz8mbAAAAEM"]
[Fri Dec 19 01:45:51.909218 2025] [:error] [pid 45825:tid 45840] [client 4.190.218.85:9026] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUQ9z9ES1ifyzuzFwz8mbwAAAE0"]
[Fri Dec 19 01:45:52.242544 2025] [:error] [pid 45737:tid 45745] [client 4.190.218.85:8927] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUQ90FAGdb8SXm6CLHicJQAAAAQ"]
[Fri Dec 19 01:45:52.728920 2025] [:error] [pid 65011:tid 65050] [client 4.190.218.85:8769] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUQ90NqlBhOfWMNHM-7KpQAAAUU"]
[Fri Dec 19 01:45:53.160878 2025] [:error] [pid 45738:tid 45788] [client 4.190.218.85:8804] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUQ90Xnw52b7ekJTIU3H6wAAANQ"]
[Fri Dec 19 01:45:53.504765 2025] [:error] [pid 37418:tid 37420] [client 4.190.218.85:8930] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUQ90a0VAcRIm10OnozHZwAAAIA"]
[Fri Dec 19 01:45:53.774960 2025] [:error] [pid 45738:tid 45782] [client 4.190.218.85:8920] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aUQ90Xnw52b7ekJTIU3H7QAAAM4"]
[Fri Dec 19 01:45:54.021672 2025] [:error] [pid 45738:tid 45779] [client 4.190.218.85:8855] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aUQ90nnw52b7ekJTIU3H7gAAAMs"]
[Fri Dec 19 01:45:54.336017 2025] [:error] [pid 45738:tid 45789] [client 4.190.218.85:8891] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aUQ90nnw52b7ekJTIU3H8AAAANU"]
[Fri Dec 19 01:45:54.619610 2025] [:error] [pid 45825:tid 45833] [client 4.190.218.85:8865] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aUQ90tES1ifyzuzFwz8mdAAAAEY"]
[Fri Dec 19 01:45:54.878758 2025] [:error] [pid 45825:tid 45850] [client 4.190.218.85:8792] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aUQ90tES1ifyzuzFwz8mdgAAAFc"]
[Fri Dec 19 01:45:55.220784 2025] [:error] [pid 45737:tid 45762] [client 4.190.218.85:9009] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aUQ901AGdb8SXm6CLHicLwAAABU"]
[Fri Dec 19 01:45:55.575696 2025] [:error] [pid 45738:tid 45787] [client 4.190.218.85:8931] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aUQ903nw52b7ekJTIU3H8wAAANM"]
[Fri Dec 19 01:45:55.914281 2025] [:error] [pid 45738:tid 45784] [client 4.190.218.85:8924] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aUQ903nw52b7ekJTIU3H9QAAANA"]
[Fri Dec 19 01:45:56.306032 2025] [:error] [pid 37418:tid 37430] [client 4.190.218.85:8990] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aUQ91K0VAcRIm10OnozHaQAAAIo"]
[Fri Dec 19 01:45:56.586254 2025] [:error] [pid 45738:tid 45790] [client 4.190.218.85:8969] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aUQ91Hnw52b7ekJTIU3H-AAAANY"]
[Fri Dec 19 01:45:56.916455 2025] [:error] [pid 45738:tid 45786] [client 4.190.218.85:8864] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aUQ91Hnw52b7ekJTIU3H-gAAANI"]
[Fri Dec 19 01:45:57.226653 2025] [:error] [pid 37418:tid 37438] [client 4.190.218.85:8808] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aUQ91a0VAcRIm10OnozHagAAAJI"]
[Fri Dec 19 01:45:57.500699 2025] [:error] [pid 45737:tid 45741] [client 4.190.218.85:9087] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aUQ91VAGdb8SXm6CLHicNAAAAAA"]
[Fri Dec 19 01:45:57.858084 2025] [:error] [pid 45737:tid 45751] [client 4.190.218.85:8805] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aUQ91VAGdb8SXm6CLHicNQAAAAo"]
[Fri Dec 19 01:45:58.283049 2025] [:error] [pid 45737:tid 45765] [client 4.190.218.85:8842] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aUQ91lAGdb8SXm6CLHicNwAAABg"]
[Fri Dec 19 01:45:58.573905 2025] [:error] [pid 45825:tid 45842] [client 4.190.218.85:8851] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aUQ91tES1ifyzuzFwz8mdwAAAE8"]
[Fri Dec 19 01:45:58.881385 2025] [:error] [pid 45737:tid 45744] [client 4.190.218.85:8940] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aUQ91lAGdb8SXm6CLHicOwAAAAM"]
[Fri Dec 19 01:45:59.192318 2025] [:error] [pid 45739:tid 45796] [client 4.190.218.85:8943] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aUQ91-IfOvWlLwqW0X3vwgAAAQE"]
[Fri Dec 19 01:45:59.483181 2025] [:error] [pid 45739:tid 45798] [client 4.190.218.85:9160] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aUQ91-IfOvWlLwqW0X3vwwAAAQM"]
[Fri Dec 19 01:45:59.780489 2025] [:error] [pid 65011:tid 65068] [client 4.190.218.85:8772] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aUQ919qlBhOfWMNHM-7KqQAAAVc"]
[Fri Dec 19 01:46:00.032732 2025] [:error] [pid 37418:tid 37439] [client 4.190.218.85:8887] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aUQ92K0VAcRIm10OnozHbwAAAJM"]
[Fri Dec 19 01:46:00.393647 2025] [:error] [pid 45825:tid 45827] [client 4.190.218.85:8976] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUQ92NES1ifyzuzFwz8mewAAAEA"]
[Fri Dec 19 01:46:00.678847 2025] [:error] [pid 45739:tid 45819] [client 4.190.218.85:8952] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUQ92OIfOvWlLwqW0X3vxgAAARg"]
[Fri Dec 19 01:46:01.037758 2025] [:error] [pid 45737:tid 45753] [client 4.190.218.85:8778] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUQ92VAGdb8SXm6CLHicPwAAAAw"]
[Fri Dec 19 01:46:01.363241 2025] [:error] [pid 45737:tid 45741] [client 4.190.218.85:8914] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUQ92VAGdb8SXm6CLHicQQAAAAA"]
[Fri Dec 19 01:46:01.729213 2025] [:error] [pid 45825:tid 45851] [client 4.190.218.85:8727] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aUQ92dES1ifyzuzFwz8mfQAAAFg"]
[Fri Dec 19 01:46:02.139005 2025] [:error] [pid 65011:tid 65044] [client 4.190.218.85:8875] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aUQ92tqlBhOfWMNHM-7KqgAAAUA"]
[Fri Dec 19 01:46:02.498307 2025] [:error] [pid 37418:tid 37427] [client 4.190.218.85:8833] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aUQ92q0VAcRIm10OnozHcQAAAIc"]
[Fri Dec 19 01:46:02.819671 2025] [:error] [pid 65011:tid 65050] [client 4.190.218.85:9018] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aUQ92tqlBhOfWMNHM-7KsAAAAUU"]
[Fri Dec 19 01:46:03.134862 2025] [:error] [pid 45737:tid 45746] [client 4.190.218.85:8844] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aUQ921AGdb8SXm6CLHicRwAAAAU"]
[Fri Dec 19 01:46:03.415436 2025] [:error] [pid 65011:tid 65064] [client 4.190.218.85:8959] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aUQ929qlBhOfWMNHM-7KsgAAAVM"]
[Fri Dec 19 01:46:03.688534 2025] [:error] [pid 45737:tid 45764] [client 4.190.218.85:8845] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aUQ921AGdb8SXm6CLHicSQAAABc"]
[Fri Dec 19 01:46:04.085433 2025] [:error] [pid 45737:tid 45743] [client 4.190.218.85:8840] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aUQ93FAGdb8SXm6CLHicSgAAAAI"]
[Fri Dec 19 01:46:04.420718 2025] [:error] [pid 65011:tid 65047] [client 4.190.218.85:8745] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aUQ93NqlBhOfWMNHM-7KtQAAAUM"]
[Fri Dec 19 01:46:04.798852 2025] [:error] [pid 45739:tid 45811] [client 4.190.218.85:8863] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aUQ93OIfOvWlLwqW0X3vygAAARA"]
[Fri Dec 19 01:46:05.098518 2025] [:error] [pid 65011:tid 65053] [client 4.190.218.85:9165] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aUQ93dqlBhOfWMNHM-7KuAAAAUg"]
[Fri Dec 19 01:46:05.404647 2025] [:error] [pid 65011:tid 65054] [client 4.190.218.85:8955] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aUQ93dqlBhOfWMNHM-7KugAAAUk"]
[Fri Dec 19 01:46:05.690064 2025] [:error] [pid 45738:tid 45788] [client 4.190.218.85:8788] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUQ93Xnw52b7ekJTIU3IBwAAANQ"]
[Fri Dec 19 01:46:05.952160 2025] [:error] [pid 45739:tid 45815] [client 4.190.218.85:8785] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUQ93eIfOvWlLwqW0X3vzQAAARQ"]
[Fri Dec 19 01:46:06.253296 2025] [:error] [pid 45737:tid 45748] [client 4.190.218.85:8783] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUQ93lAGdb8SXm6CLHicTQAAAAc"]
[Fri Dec 19 01:46:06.591237 2025] [:error] [pid 45737:tid 45742] [client 4.190.218.85:8872] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUQ93lAGdb8SXm6CLHicUQAAAAE"]
[Fri Dec 19 01:46:06.912697 2025] [:error] [pid 65011:tid 65052] [client 4.190.218.85:8932] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aUQ93tqlBhOfWMNHM-7KuwAAAUc"]
[Fri Dec 19 01:46:07.170394 2025] [:error] [pid 37418:tid 37426] [client 4.190.218.85:8911] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aUQ9360VAcRIm10OnozHdAAAAIY"]
[Fri Dec 19 01:46:07.465500 2025] [:error] [pid 45737:tid 45760] [client 4.190.218.85:8884] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aUQ931AGdb8SXm6CLHicUwAAABM"]
[Fri Dec 19 01:46:07.866111 2025] [:error] [pid 37418:tid 37440] [client 4.190.218.85:8841] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aUQ9360VAcRIm10OnozHeQAAAJQ"]
[Fri Dec 19 01:46:08.221048 2025] [:error] [pid 65011:tid 65050] [client 4.190.218.85:8905] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aUQ94NqlBhOfWMNHM-7KvQAAAUU"]
[Fri Dec 19 01:46:08.647175 2025] [:error] [pid 65011:tid 65062] [client 4.190.218.85:8861] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aUQ94NqlBhOfWMNHM-7KvgAAAVE"]
[Fri Dec 19 01:46:09.015414 2025] [:error] [pid 65011:tid 65065] [client 4.190.218.85:8876] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aUQ94dqlBhOfWMNHM-7KwAAAAVQ"]
[Fri Dec 19 01:46:09.329909 2025] [:error] [pid 45738:tid 45791] [client 4.190.218.85:8644] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aUQ94Xnw52b7ekJTIU3ICwAAANc"]
[Fri Dec 19 01:46:09.693073 2025] [:error] [pid 37418:tid 37426] [client 4.190.218.85:8834] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUQ94a0VAcRIm10OnozHhQAAAIY"]
[Fri Dec 19 01:46:10.050902 2025] [:error] [pid 45739:tid 45810] [client 4.190.218.85:8922] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUQ94uIfOvWlLwqW0X3v1wAAAQ8"]
[Fri Dec 19 01:46:10.384887 2025] [:error] [pid 45737:tid 45752] [client 4.190.218.85:8782] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUQ94lAGdb8SXm6CLHicXwAAAAs"]
[Fri Dec 19 01:46:10.721392 2025] [:error] [pid 45825:tid 45838] [client 4.190.218.85:8890] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUQ94tES1ifyzuzFwz8migAAAEs"]
[Fri Dec 19 01:46:10.967060 2025] [:error] [pid 45825:tid 45847] [client 4.190.218.85:8847] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aUQ94tES1ifyzuzFwz8mkAAAAFQ"]
[Fri Dec 19 01:46:11.318577 2025] [:error] [pid 45738:tid 45781] [client 4.190.218.85:8897] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aUQ943nw52b7ekJTIU3IDwAAAM0"]
[Fri Dec 19 01:46:11.877233 2025] [:error] [pid 65011:tid 65049] [client 4.190.218.85:8853] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aUQ949qlBhOfWMNHM-7KwgAAAUQ"]
[Fri Dec 19 01:46:12.177315 2025] [:error] [pid 65011:tid 65068] [client 4.190.218.85:8786] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aUQ95NqlBhOfWMNHM-7KxQAAAVc"]
[Fri Dec 19 01:46:12.559659 2025] [:error] [pid 45739:tid 45816] [client 4.190.218.85:8956] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aUQ95OIfOvWlLwqW0X3v4gAAARU"]
[Fri Dec 19 01:46:13.205647 2025] [:error] [pid 65011:tid 65058] [client 4.190.218.85:8951] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aUQ95dqlBhOfWMNHM-7KxgAAAU0"]
[Fri Dec 19 01:46:13.562842 2025] [:error] [pid 45738:tid 45768] [client 4.190.218.85:8806] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aUQ95Xnw52b7ekJTIU3IEQAAAMA"]
[Fri Dec 19 01:46:13.823897 2025] [:error] [pid 45739:tid 45800] [client 4.190.218.85:8793] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aUQ95eIfOvWlLwqW0X3v4wAAAQU"]
[Fri Dec 19 01:46:14.208015 2025] [:error] [pid 45825:tid 45835] [client 4.190.218.85:8836] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aUQ95tES1ifyzuzFwz8mlgAAAEg"]
[Fri Dec 19 01:46:14.534283 2025] [:error] [pid 45739:tid 45814] [client 4.190.218.85:8849] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aUQ95uIfOvWlLwqW0X3v5AAAARM"]
[Fri Dec 19 01:46:15.052238 2025] [:error] [pid 45739:tid 45803] [client 4.190.218.85:8835] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aUQ95-IfOvWlLwqW0X3v5QAAAQg"]
[Fri Dec 19 01:46:15.397176 2025] [:error] [pid 45737:tid 45747] [client 4.190.218.85:8779] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aUQ951AGdb8SXm6CLHicZwAAAAY"]
[Fri Dec 19 01:46:15.749923 2025] [:error] [pid 45737:tid 45741] [client 4.190.218.85:8870] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aUQ951AGdb8SXm6CLHicaAAAAAA"]
[Fri Dec 19 01:46:16.047402 2025] [:error] [pid 65011:tid 65063] [client 4.190.218.85:8714] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aUQ96NqlBhOfWMNHM-7KyQAAAVI"]
[Fri Dec 19 01:46:16.470308 2025] [:error] [pid 45739:tid 45796] [client 4.190.218.85:8837] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aUQ96OIfOvWlLwqW0X3v5gAAAQE"]
[Fri Dec 19 01:46:16.957964 2025] [:error] [pid 45739:tid 45808] [client 4.190.218.85:8939] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aUQ96OIfOvWlLwqW0X3v5wAAAQ0"]
[Fri Dec 19 01:46:17.324929 2025] [:error] [pid 45738:tid 45791] [client 4.190.218.85:8789] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aUQ96Xnw52b7ekJTIU3IFgAAANc"]
[Fri Dec 19 01:46:17.648406 2025] [:error] [pid 45825:tid 45836] [client 4.190.218.85:8784] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aUQ96dES1ifyzuzFwz8mnQAAAEk"]
[Fri Dec 19 01:46:18.049073 2025] [:error] [pid 45738:tid 45769] [client 4.190.218.85:9202] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aUQ96nnw52b7ekJTIU3IGAAAAME"]
[Fri Dec 19 01:46:18.344264 2025] [:error] [pid 37418:tid 37427] [client 4.190.218.85:8816] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aUQ96q0VAcRIm10OnozHnwAAAIc"]
[Fri Dec 19 01:46:18.695234 2025] [:error] [pid 37418:tid 37421] [client 4.190.218.85:8799] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUQ96q0VAcRIm10OnozHoQAAAIE"]
[Fri Dec 19 01:46:19.064363 2025] [:error] [pid 37418:tid 37441] [client 4.190.218.85:8827] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUQ9660VAcRIm10OnozHogAAAJU"]
[Fri Dec 19 01:46:19.475852 2025] [:error] [pid 45825:tid 45843] [client 4.190.218.85:8874] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUQ969ES1ifyzuzFwz8mpQAAAFA"]
[Fri Dec 19 01:46:19.912900 2025] [:error] [pid 65011:tid 65046] [client 4.190.218.85:8877] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUQ969qlBhOfWMNHM-7K0AAAAUI"]
[Fri Dec 19 01:46:20.573820 2025] [:error] [pid 45825:tid 45836] [client 4.190.218.85:8838] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aUQ97NES1ifyzuzFwz8mqwAAAEk"]
[Fri Dec 19 01:46:21.209154 2025] [:error] [pid 65011:tid 65055] [client 4.190.218.85:8790] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aUQ97dqlBhOfWMNHM-7K0gAAAUo"]
[Fri Dec 19 01:46:21.560389 2025] [:error] [pid 45825:tid 45837] [client 4.190.218.85:8889] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aUQ97dES1ifyzuzFwz8mrgAAAEo"]
[Fri Dec 19 01:46:21.998636 2025] [:error] [pid 45738:tid 45768] [client 4.190.218.85:8832] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aUQ97Xnw52b7ekJTIU3IHwAAAMA"]
[Fri Dec 19 01:46:22.625200 2025] [:error] [pid 45737:tid 45760] [client 4.190.218.85:8856] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aUQ97lAGdb8SXm6CLHicbQAAABM"]
[Fri Dec 19 01:46:23.102112 2025] [:error] [pid 37418:tid 37430] [client 4.190.218.85:8867] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aUQ9760VAcRIm10OnozHpAAAAIo"]
[Fri Dec 19 01:46:23.518279 2025] [:error] [pid 45737:tid 45753] [client 4.190.218.85:8705] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aUQ971AGdb8SXm6CLHiccAAAAAw"]
[Fri Dec 19 01:46:23.842011 2025] [:error] [pid 45739:tid 45807] [client 4.190.218.85:8807] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aUQ97-IfOvWlLwqW0X3v6QAAAQw"]
[Fri Dec 19 01:46:28.525840 2025] [:error] [pid 45739:tid 45797] [client 4.190.218.85:9087] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUQ99OIfOvWlLwqW0X3v-QAAAQI"]
[Fri Dec 19 01:46:28.861821 2025] [:error] [pid 45825:tid 45846] [client 4.190.218.85:8791] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUQ99NES1ifyzuzFwz8muQAAAFM"]
[Fri Dec 19 01:46:29.261776 2025] [:error] [pid 45825:tid 45842] [client 4.190.218.85:8888] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUQ99dES1ifyzuzFwz8muwAAAE8"]
[Fri Dec 19 01:46:29.622631 2025] [:error] [pid 65011:tid 65055] [client 4.190.218.85:8822] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUQ99dqlBhOfWMNHM-7K3AAAAUo"]
[Fri Dec 19 01:46:29.932940 2025] [:error] [pid 45737:tid 45745] [client 4.190.218.85:8878] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aUQ99VAGdb8SXm6CLHichgAAAAQ"]
[Fri Dec 19 01:46:30.209276 2025] [:error] [pid 45738:tid 45774] [client 4.190.218.85:8868] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aUQ99nnw52b7ekJTIU3IJQAAAMY"]
[Fri Dec 19 01:46:30.520838 2025] [:error] [pid 45825:tid 45845] [client 4.190.218.85:8950] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aUQ99tES1ifyzuzFwz8mvQAAAFI"]
[Fri Dec 19 01:46:30.836863 2025] [:error] [pid 45737:tid 45764] [client 4.190.218.85:8893] [client 4.190.218.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aUQ99lAGdb8SXm6CLHiciAAAABc"]
[Fri Dec 19 02:46:41.621867 2025] [:error] [pid 65011:tid 65051] [client 54.178.86.26:39132] [client 54.178.86.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aURMEdqlBhOfWMNHM-7agQAAAUY"]
[Fri Dec 19 04:08:26.674689 2025] [:error] [pid 64979:tid 64999] [client 43.131.253.14:37348] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aURfOsTf9GnU9RkPzittUQAAARI"]
[Fri Dec 19 04:10:05.582896 2025] [:error] [pid 64979:tid 65000] [client 209.38.89.131:2676] [client 209.38.89.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aURfncTf9GnU9RkPzittrQAAARM"]
[Fri Dec 19 04:10:06.278887 2025] [:error] [pid 61923:tid 61983] [client 209.38.89.131:2716] [client 209.38.89.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vendor/laravel-filemanager/js/script.js"] [unique_id "aURfnuIJyAkgoURyh1i-_wAAAIQ"]
[Fri Dec 19 04:10:06.666089 2025] [:error] [pid 61922:tid 61978] [client 209.38.89.131:2756] [client 209.38.89.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aURfnhsDXYvsvN0FFlAclAAAAFc"]
[Fri Dec 19 04:10:06.941334 2025] [:error] [pid 61922:tid 61963] [client 209.38.89.131:2786] [client 209.38.89.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_ignition/execute-solution"] [unique_id "aURfnhsDXYvsvN0FFlAclQAAAEs"]
[Fri Dec 19 04:10:07.226184 2025] [:error] [pid 61921:tid 61942] [client 209.38.89.131:2804] [client 209.38.89.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/_ignition/execute-solution"] [unique_id "aURfnyI5bruBgrPWiCCrUwAAABE"]
[Fri Dec 19 04:10:07.468864 2025] [:error] [pid 62008:tid 62032] [client 209.38.89.131:2836] [client 209.38.89.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aURfn5JCOG7NAlbm_ORAxAAAANU"]
[Fri Dec 19 04:30:23.506938 2025] [:error] [pid 64979:tid 64998] [client 182.44.12.37:44066] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aURkX8Tf9GnU9RkPzit07AAAARE"]
[Fri Dec 19 10:27:12.376689 2025] [:error] [pid 41956:tid 41960] [client 182.42.105.144:36348] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUS4AJFF_rXxx-Pv5gm6kAAAAYI"]
[Fri Dec 19 12:41:49.382020 2025] [:error] [pid 20580:tid 20588] [client 43.165.69.68:57362] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUTXjUmd1op_YdAdgR0ISQAAAEI"]
[Fri Dec 19 14:22:00.196763 2025] [autoindex:error] [pid 20675:tid 20694] [client 62.171.144.198:52638] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Dec 19 20:57:15.675623 2025] [:error] [pid 41451:tid 41475] [client 4.193.235.247:17639] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aUVLqwYXFn-DbZghZBHfmgAAABU"]
[Fri Dec 19 20:57:17.974952 2025] [:error] [pid 20675:tid 20712] [client 4.193.235.247:17630] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aUVLrbMyJ3XqeDRsbQmhYAAAARg"]
[Fri Dec 19 20:57:18.886270 2025] [:error] [pid 20581:tid 20629] [client 4.193.235.247:17560] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aUVLrvxEv7WXNhnFD1mIlgAAAI4"]
[Fri Dec 19 20:57:19.848087 2025] [:error] [pid 18438:tid 18444] [client 4.193.235.247:17553] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aUVLr5RArClWV1iij_SUngAAAYM"]
[Fri Dec 19 20:57:20.343994 2025] [:error] [pid 20582:tid 20652] [client 4.193.235.247:17609] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUVLsMpAnrkQKZ4b5gY59gAAAMo"]
[Fri Dec 19 20:57:21.176144 2025] [:error] [pid 20582:tid 20660] [client 4.193.235.247:17537] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUVLscpAnrkQKZ4b5gY59wAAANI"]
[Fri Dec 19 20:57:22.035485 2025] [:error] [pid 16026:tid 16040] [client 4.193.235.247:17650] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUVLskLVfhf4Jb3enmM7LQAAAUs"]
[Fri Dec 19 20:57:22.536040 2025] [:error] [pid 16026:tid 16048] [client 4.193.235.247:17616] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aUVLskLVfhf4Jb3enmM7LwAAAVM"]
[Fri Dec 19 20:57:24.100320 2025] [:error] [pid 20581:tid 20635] [client 4.193.235.247:17611] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUVLtPxEv7WXNhnFD1mIlwAAAJQ"]
[Fri Dec 19 20:57:25.823043 2025] [:error] [pid 18438:tid 18459] [client 4.193.235.247:17618] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUVLtZRArClWV1iij_SUowAAAZI"]
[Fri Dec 19 20:57:29.695266 2025] [:error] [pid 20582:tid 20648] [client 4.193.235.247:17637] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUVLucpAnrkQKZ4b5gY5_wAAAMY"]
[Fri Dec 19 20:57:32.566862 2025] [:error] [pid 20580:tid 20593] [client 4.193.235.247:17619] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aUVLvEmd1op_YdAdgR2jFgAAAEc"]
[Fri Dec 19 20:57:35.769096 2025] [:error] [pid 20581:tid 20624] [client 4.193.235.247:17626] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aUVLv_xEv7WXNhnFD1mImwAAAIk"]
[Fri Dec 19 20:57:37.433962 2025] [:error] [pid 20582:tid 20661] [client 4.193.235.247:17558] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aUVLwcpAnrkQKZ4b5gY6BQAAANM"]
[Fri Dec 19 20:57:39.283885 2025] [:error] [pid 41451:tid 41468] [client 4.193.235.247:17632] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aUVLwwYXFn-DbZghZBHfogAAAA4"]
[Fri Dec 19 20:57:39.679058 2025] [:error] [pid 41451:tid 41475] [client 4.193.235.247:17621] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aUVLwwYXFn-DbZghZBHfowAAABU"]
[Fri Dec 19 20:57:40.386968 2025] [:error] [pid 20580:tid 20596] [client 4.193.235.247:17663] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUVLxEmd1op_YdAdgR2jHAAAAEo"]
[Fri Dec 19 20:57:42.763568 2025] [:error] [pid 41451:tid 41463] [client 4.193.235.247:17572] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUVLxgYXFn-DbZghZBHfqwAAAAk"]
[Fri Dec 19 20:57:44.129268 2025] [:error] [pid 20675:tid 20706] [client 4.193.235.247:17556] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUVLyLMyJ3XqeDRsbQmhdwAAARI"]
[Fri Dec 19 20:57:45.470007 2025] [:error] [pid 20580:tid 20610] [client 4.193.235.247:17605] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aUVLyUmd1op_YdAdgR2jIAAAAFg"]
[Fri Dec 19 20:57:46.777994 2025] [:error] [pid 18438:tid 18445] [client 4.193.235.247:17555] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUVLypRArClWV1iij_SUtgAAAYQ"]
[Fri Dec 19 20:57:47.302029 2025] [:error] [pid 20581:tid 20623] [client 4.193.235.247:17643] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUVLy_xEv7WXNhnFD1mInwAAAIg"]
[Fri Dec 19 20:57:47.992951 2025] [:error] [pid 20582:tid 20652] [client 4.193.235.247:17629] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUVLy8pAnrkQKZ4b5gY6DgAAAMo"]
[Fri Dec 19 20:57:48.466075 2025] [:error] [pid 41451:tid 41467] [client 4.193.235.247:17623] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aUVLzAYXFn-DbZghZBHfsAAAAA0"]
[Fri Dec 19 20:57:49.994760 2025] [:error] [pid 16026:tid 16047] [client 4.193.235.247:17579] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUVLzULVfhf4Jb3enmM7SgAAAVI"]
[Fri Dec 19 20:57:50.980821 2025] [:error] [pid 20580:tid 20590] [client 4.193.235.247:17607] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUVLzkmd1op_YdAdgR2jJwAAAEQ"]
[Fri Dec 19 20:57:51.508638 2025] [:error] [pid 18438:tid 18455] [client 4.193.235.247:17610] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUVLz5RArClWV1iij_SUtwAAAY4"]
[Fri Dec 19 20:57:52.574897 2025] [:error] [pid 20580:tid 20588] [client 4.193.235.247:17552] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aUVL0Emd1op_YdAdgR2jKQAAAEI"]
[Fri Dec 19 20:57:53.299897 2025] [:error] [pid 20582:tid 20654] [client 4.193.235.247:17550] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aUVL0cpAnrkQKZ4b5gY6EwAAAMw"]
[Fri Dec 19 20:57:53.658600 2025] [:error] [pid 20582:tid 20658] [client 4.193.235.247:17606] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aUVL0cpAnrkQKZ4b5gY6FAAAANA"]
[Fri Dec 19 20:57:53.943755 2025] [:error] [pid 41451:tid 41473] [client 4.193.235.247:17657] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aUVL0QYXFn-DbZghZBHftwAAABM"]
[Fri Dec 19 20:57:54.309938 2025] [:error] [pid 20581:tid 20622] [client 4.193.235.247:17574] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aUVL0vxEv7WXNhnFD1mIpAAAAIc"]
[Fri Dec 19 20:57:54.659397 2025] [:error] [pid 16026:tid 16042] [client 4.193.235.247:17589] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aUVL0kLVfhf4Jb3enmM7UwAAAU0"]
[Fri Dec 19 20:57:55.092494 2025] [:error] [pid 41451:tid 41474] [client 4.193.235.247:17595] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aUVL0wYXFn-DbZghZBHfuAAAABQ"]
[Fri Dec 19 20:57:55.663812 2025] [:error] [pid 20580:tid 20605] [client 4.193.235.247:17649] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aUVL00md1op_YdAdgR2jKwAAAFM"]
[Fri Dec 19 20:57:55.995725 2025] [:error] [pid 41451:tid 41476] [client 4.193.235.247:17567] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aUVL0wYXFn-DbZghZBHfvQAAABY"]
[Fri Dec 19 20:57:56.403747 2025] [:error] [pid 20582:tid 20652] [client 4.193.235.247:17554] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUVL1MpAnrkQKZ4b5gY6GQAAAMo"]
[Fri Dec 19 20:57:57.099341 2025] [:error] [pid 18438:tid 18449] [client 4.193.235.247:4073] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUVL1ZRArClWV1iij_SUvQAAAYg"]
[Fri Dec 19 20:57:57.811720 2025] [:error] [pid 20582:tid 20644] [client 4.193.235.247:17536] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUVL1cpAnrkQKZ4b5gY6GwAAAMI"]
[Fri Dec 19 20:57:58.230577 2025] [:error] [pid 18438:tid 18451] [client 4.193.235.247:17549] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUVL1pRArClWV1iij_SUvgAAAYo"]
[Fri Dec 19 20:57:58.819564 2025] [:error] [pid 18438:tid 18460] [client 4.193.235.247:17593] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUVL1pRArClWV1iij_SUwgAAAZM"]
[Fri Dec 19 20:57:59.403122 2025] [:error] [pid 41451:tid 41477] [client 4.193.235.247:4057] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUVL1wYXFn-DbZghZBHfwAAAABc"]
[Fri Dec 19 20:57:59.780447 2025] [:error] [pid 20582:tid 20661] [client 4.193.235.247:17591] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUVL18pAnrkQKZ4b5gY6IAAAANM"]
[Fri Dec 19 20:58:00.278102 2025] [:error] [pid 20582:tid 20657] [client 4.193.235.247:17565] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aUVL2MpAnrkQKZ4b5gY6IQAAAM8"]
[Fri Dec 19 20:58:01.462245 2025] [:error] [pid 20581:tid 20620] [client 4.193.235.247:17634] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aUVL2fxEv7WXNhnFD1mIqQAAAIU"]
[Fri Dec 19 20:58:02.911021 2025] [:error] [pid 20580:tid 20593] [client 4.193.235.247:17548] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aUVL2kmd1op_YdAdgR2jLgAAAEc"]
[Fri Dec 19 20:58:04.387477 2025] [:error] [pid 18438:tid 18441] [client 4.193.235.247:4056] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aUVL3JRArClWV1iij_SUxwAAAYA"]
[Fri Dec 19 20:58:05.657149 2025] [:error] [pid 16026:tid 16053] [client 4.193.235.247:4063] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "aUVL3ULVfhf4Jb3enmM7WgAAAVg"]
[Fri Dec 19 20:58:06.402775 2025] [:error] [pid 20580:tid 20591] [client 4.193.235.247:4084] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x7.php"] [unique_id "aUVL3kmd1op_YdAdgR2jMQAAAEU"]
[Fri Dec 19 20:58:07.582873 2025] [:error] [pid 18438:tid 18464] [client 4.193.235.247:17564] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x7.php"] [unique_id "aUVL35RArClWV1iij_SUzAAAAZc"]
[Fri Dec 19 20:58:08.354217 2025] [:error] [pid 20581:tid 20621] [client 4.193.235.247:17571] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x7.php"] [unique_id "aUVL4PxEv7WXNhnFD1mIqwAAAIY"]
[Fri Dec 19 20:58:09.504314 2025] [:error] [pid 18438:tid 18465] [client 4.193.235.247:17635] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x7.php"] [unique_id "aUVL4ZRArClWV1iij_SU0AAAAZg"]
[Fri Dec 19 20:58:10.735920 2025] [:error] [pid 16026:tid 16046] [client 4.193.235.247:17642] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aUVL4kLVfhf4Jb3enmM7XQAAAVE"]
[Fri Dec 19 20:58:11.519523 2025] [:error] [pid 20675:tid 20710] [client 4.193.235.247:17655] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aUVL47MyJ3XqeDRsbQmhhwAAARY"]
[Fri Dec 19 20:58:12.681788 2025] [:error] [pid 20675:tid 20712] [client 4.193.235.247:17644] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aUVL5LMyJ3XqeDRsbQmhigAAARg"]
[Fri Dec 19 20:58:13.637246 2025] [:error] [pid 20580:tid 20608] [client 4.193.235.247:4036] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aUVL5Umd1op_YdAdgR2jMwAAAFY"]
[Fri Dec 19 20:58:14.956790 2025] [:error] [pid 41451:tid 41474] [client 4.193.235.247:17647] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "aUVL5gYXFn-DbZghZBHfzQAAABQ"]
[Fri Dec 19 20:58:17.667493 2025] [:error] [pid 16026:tid 16043] [client 4.193.235.247:17624] [client 4.193.235.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUVL6ULVfhf4Jb3enmM7YAAAAU4"]
[Fri Dec 19 20:58:22.814565 2025] [:error] [pid 16026:tid 16046] [client 4.193.235.247:17578] [client 4.193.235.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUVL7kLVfhf4Jb3enmM7cgAAAVE"]
[Fri Dec 19 20:58:24.563616 2025] [:error] [pid 20582:tid 20646] [client 4.193.235.247:17612] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aUVL8MpAnrkQKZ4b5gY6QgAAAMQ"]
[Fri Dec 19 20:58:25.462537 2025] [:error] [pid 20582:tid 20642] [client 4.193.235.247:4035] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aUVL8cpAnrkQKZ4b5gY6RQAAAMA"]
[Fri Dec 19 20:58:26.645855 2025] [:error] [pid 18438:tid 18450] [client 4.193.235.247:17541] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aUVL8pRArClWV1iij_SU2gAAAYk"]
[Fri Dec 19 20:58:28.308566 2025] [:error] [pid 20582:tid 20653] [client 4.193.235.247:17585] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sto.php"] [unique_id "aUVL9MpAnrkQKZ4b5gY6SAAAAMs"]
[Fri Dec 19 20:58:29.531165 2025] [:error] [pid 20581:tid 20631] [client 4.193.235.247:17638] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sto.php"] [unique_id "aUVL9fxEv7WXNhnFD1mIugAAAJA"]
[Fri Dec 19 20:58:30.553450 2025] [:error] [pid 20582:tid 20658] [client 4.193.235.247:4062] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sto.php"] [unique_id "aUVL9spAnrkQKZ4b5gY6TAAAANA"]
[Fri Dec 19 20:58:32.295269 2025] [:error] [pid 20581:tid 20638] [client 4.193.235.247:17542] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sto.php"] [unique_id "aUVL-PxEv7WXNhnFD1mIvAAAAJc"]
[Fri Dec 19 20:58:33.208212 2025] [:error] [pid 20580:tid 20586] [client 4.193.235.247:4059] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aUVL-Umd1op_YdAdgR2jQgAAAEA"]
[Fri Dec 19 20:58:34.782952 2025] [:error] [pid 20582:tid 20656] [client 4.193.235.247:17601] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aUVL-spAnrkQKZ4b5gY6VQAAAM4"]
[Fri Dec 19 20:58:35.851969 2025] [:error] [pid 41451:tid 41474] [client 4.193.235.247:17543] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aUVL-wYXFn-DbZghZBHf2wAAABQ"]
[Fri Dec 19 20:58:36.536405 2025] [:error] [pid 18438:tid 18449] [client 4.193.235.247:3970] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aUVL_JRArClWV1iij_SU4QAAAYg"]
[Fri Dec 19 20:58:37.678930 2025] [:error] [pid 20675:tid 20710] [client 4.193.235.247:17608] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUVL_bMyJ3XqeDRsbQmhkwAAARY"]
[Fri Dec 19 20:58:38.632218 2025] [:error] [pid 41451:tid 41466] [client 4.193.235.247:17662] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUVL_gYXFn-DbZghZBHf3wAAAAw"]
[Fri Dec 19 20:58:39.163391 2025] [:error] [pid 20582:tid 20662] [client 4.193.235.247:17559] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUVL_8pAnrkQKZ4b5gY6WAAAANQ"]
[Fri Dec 19 20:58:40.321806 2025] [:error] [pid 20580:tid 20588] [client 4.193.235.247:17652] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUVMAEmd1op_YdAdgR2jRQAAAEI"]
[Fri Dec 19 20:58:41.184458 2025] [:error] [pid 20581:tid 20625] [client 4.193.235.247:17604] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aUVMAfxEv7WXNhnFD1mIwQAAAIo"]
[Fri Dec 19 20:58:41.842021 2025] [:error] [pid 18438:tid 18456] [client 4.193.235.247:17540] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aUVMAZRArClWV1iij_SU5AAAAY8"]
[Fri Dec 19 20:58:42.504635 2025] [:error] [pid 18438:tid 18461] [client 4.193.235.247:17581] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aUVMApRArClWV1iij_SU5QAAAZQ"]
[Fri Dec 19 20:58:43.627341 2025] [:error] [pid 20582:tid 20666] [client 4.193.235.247:17631] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aUVMA8pAnrkQKZ4b5gY6WgAAANg"]
[Fri Dec 19 20:58:45.588744 2025] [:error] [pid 16026:tid 16042] [client 4.193.235.247:17568] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/up.php"] [unique_id "aUVMBULVfhf4Jb3enmM7fwAAAU0"]
[Fri Dec 19 20:58:46.528633 2025] [:error] [pid 20580:tid 20599] [client 4.193.235.247:17544] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/up.php"] [unique_id "aUVMBkmd1op_YdAdgR2jSAAAAE0"]
[Fri Dec 19 20:58:47.047783 2025] [:error] [pid 16026:tid 16049] [client 4.193.235.247:17603] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/up.php"] [unique_id "aUVMB0LVfhf4Jb3enmM7gAAAAVQ"]
[Fri Dec 19 20:58:48.523365 2025] [:error] [pid 41451:tid 41461] [client 4.193.235.247:4089] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/up.php"] [unique_id "aUVMCAYXFn-DbZghZBHf5QAAAAc"]
[Fri Dec 19 20:58:49.638415 2025] [:error] [pid 41451:tid 41458] [client 4.193.235.247:17641] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aUVMCQYXFn-DbZghZBHf5gAAAAQ"]
[Fri Dec 19 20:58:50.424333 2025] [:error] [pid 16026:tid 16036] [client 4.193.235.247:4042] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aUVMCkLVfhf4Jb3enmM7gwAAAUc"]
[Fri Dec 19 20:58:51.571491 2025] [:error] [pid 20582:tid 20664] [client 4.193.235.247:3908] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aUVMC8pAnrkQKZ4b5gY6YwAAANY"]
[Fri Dec 19 20:58:52.586628 2025] [:error] [pid 41451:tid 41474] [client 4.193.235.247:17598] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aUVMDAYXFn-DbZghZBHf6AAAABQ"]
[Fri Dec 19 20:58:53.973714 2025] [:error] [pid 18438:tid 18457] [client 4.193.235.247:17570] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aUVMDZRArClWV1iij_SU6QAAAZA"]
[Fri Dec 19 20:58:54.879697 2025] [:error] [pid 18438:tid 18460] [client 4.193.235.247:4046] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aUVMDpRArClWV1iij_SU7AAAAZM"]
[Fri Dec 19 20:58:55.963271 2025] [:error] [pid 41451:tid 41473] [client 4.193.235.247:4079] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aUVMDwYXFn-DbZghZBHf6QAAABM"]
[Fri Dec 19 20:58:57.193209 2025] [:error] [pid 18438:tid 18461] [client 4.193.235.247:17658] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aUVMEZRArClWV1iij_SU7gAAAZQ"]
[Fri Dec 19 20:58:58.696188 2025] [:error] [pid 18438:tid 18442] [client 4.193.235.247:17661] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wb.php"] [unique_id "aUVMEpRArClWV1iij_SU8AAAAYE"]
[Fri Dec 19 20:58:59.116098 2025] [:error] [pid 20580:tid 20610] [client 4.193.235.247:17563] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wb.php"] [unique_id "aUVME0md1op_YdAdgR2jSwAAAFg"]
[Fri Dec 19 20:58:59.594984 2025] [:error] [pid 18438:tid 18445] [client 4.193.235.247:17651] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wb.php"] [unique_id "aUVME5RArClWV1iij_SU8wAAAYQ"]
[Fri Dec 19 20:59:00.319005 2025] [:error] [pid 41451:tid 41467] [client 4.193.235.247:17625] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wb.php"] [unique_id "aUVMFAYXFn-DbZghZBHf6gAAAA0"]
[Fri Dec 19 20:59:01.014610 2025] [:error] [pid 16026:tid 16042] [client 4.193.235.247:17592] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aUVMFULVfhf4Jb3enmM7iwAAAU0"]
[Fri Dec 19 20:59:01.652056 2025] [:error] [pid 41451:tid 41476] [client 4.193.235.247:17599] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aUVMFQYXFn-DbZghZBHf6wAAABY"]
[Fri Dec 19 20:59:02.243089 2025] [:error] [pid 20582:tid 20648] [client 4.193.235.247:17659] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aUVMFspAnrkQKZ4b5gY6ZwAAAMY"]
[Fri Dec 19 20:59:02.950022 2025] [:error] [pid 20582:tid 20655] [client 4.193.235.247:17566] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aUVMFspAnrkQKZ4b5gY6agAAAM0"]
[Fri Dec 19 20:59:04.164713 2025] [:error] [pid 41451:tid 41465] [client 4.193.235.247:4055] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aUVMGAYXFn-DbZghZBHf7QAAAAs"]
[Fri Dec 19 20:59:05.078155 2025] [:error] [pid 20580:tid 20587] [client 4.193.235.247:17538] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aUVMGUmd1op_YdAdgR2jTgAAAEE"]
[Fri Dec 19 20:59:06.557238 2025] [:error] [pid 20581:tid 20616] [client 4.193.235.247:4049] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aUVMGvxEv7WXNhnFD1mIzQAAAIE"]
[Fri Dec 19 20:59:07.221595 2025] [:error] [pid 20580:tid 20609] [client 4.193.235.247:17602] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aUVMG0md1op_YdAdgR2jTwAAAFc"]
[Fri Dec 19 20:59:07.954964 2025] [:error] [pid 18438:tid 18455] [client 4.193.235.247:4034] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aUVMG5RArClWV1iij_SU9QAAAY4"]
[Fri Dec 19 20:59:08.460404 2025] [:error] [pid 18438:tid 18457] [client 4.193.235.247:4080] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aUVMHJRArClWV1iij_SU9gAAAZA"]
[Fri Dec 19 20:59:10.507534 2025] [:error] [pid 20582:tid 20666] [client 4.193.235.247:3999] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aUVMHspAnrkQKZ4b5gY6bAAAANg"]
[Fri Dec 19 20:59:12.890011 2025] [:error] [pid 16026:tid 16043] [client 4.193.235.247:17617] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aUVMIELVfhf4Jb3enmM7jAAAAU4"]
[Fri Dec 19 20:59:14.265929 2025] [:error] [pid 20582:tid 20642] [client 4.193.235.247:3985] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aUVMIspAnrkQKZ4b5gY6bgAAAMA"]
[Fri Dec 19 20:59:15.552048 2025] [:error] [pid 20582:tid 20656] [client 4.193.235.247:4092] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aUVMI8pAnrkQKZ4b5gY6cwAAAM4"]
[Fri Dec 19 20:59:17.259194 2025] [:error] [pid 20582:tid 20642] [client 4.193.235.247:17627] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aUVMJcpAnrkQKZ4b5gY6fwAAAMA"]
[Fri Dec 19 20:59:19.493161 2025] [:error] [pid 16026:tid 16031] [client 4.193.235.247:4050] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aUVMJ0LVfhf4Jb3enmM7kQAAAUI"]
[Fri Dec 19 20:59:21.019796 2025] [:error] [pid 20582:tid 20665] [client 4.193.235.247:4058] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aUVMKcpAnrkQKZ4b5gY6gQAAANc"]
[Fri Dec 19 20:59:28.156492 2025] [proxy_fcgi:error] [pid 20675:tid 20699] [client 4.193.235.247:4067] AH01071: Got error 'Primary script unknown'
[Fri Dec 19 20:59:28.246010 2025] [:error] [pid 20675:tid 20707] [client 4.193.235.247:4067] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aUVMMLMyJ3XqeDRsbQmhpwAAARM"]
[Fri Dec 19 20:59:28.999257 2025] [:error] [pid 16026:tid 16053] [client 4.193.235.247:17582] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aUVMMELVfhf4Jb3enmM7lwAAAVg"]
[Fri Dec 19 20:59:30.153781 2025] [:error] [pid 16026:tid 16029] [client 4.193.235.247:4047] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aUVMMkLVfhf4Jb3enmM7mQAAAUA"]
[Fri Dec 19 20:59:30.792502 2025] [:error] [pid 16026:tid 16043] [client 4.193.235.247:4091] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aUVMMkLVfhf4Jb3enmM7mwAAAU4"]
[Fri Dec 19 20:59:31.579503 2025] [:error] [pid 20581:tid 20636] [client 4.193.235.247:17590] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the1me.php"] [unique_id "aUVMM_xEv7WXNhnFD1mI3AAAAJU"]
[Fri Dec 19 20:59:32.309127 2025] [:error] [pid 18438:tid 18458] [client 4.193.235.247:17628] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the1me.php"] [unique_id "aUVMNJRArClWV1iij_SVHwAAAZE"]
[Fri Dec 19 20:59:33.147378 2025] [:error] [pid 18438:tid 18463] [client 4.193.235.247:17613] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the1me.php"] [unique_id "aUVMNZRArClWV1iij_SVIgAAAZY"]
[Fri Dec 19 20:59:33.865896 2025] [:error] [pid 16026:tid 16052] [client 4.193.235.247:4051] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the1me.php"] [unique_id "aUVMNULVfhf4Jb3enmM7nAAAAVc"]
[Fri Dec 19 20:59:34.149540 2025] [:error] [pid 18438:tid 18452] [client 4.193.235.247:17547] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aUVMNpRArClWV1iij_SVJQAAAYs"]
[Fri Dec 19 20:59:34.613644 2025] [:error] [pid 18438:tid 18443] [client 4.193.235.247:17569] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aUVMNpRArClWV1iij_SVKAAAAYI"]
[Fri Dec 19 20:59:35.705708 2025] [:error] [pid 18438:tid 18456] [client 4.193.235.247:3974] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aUVMN5RArClWV1iij_SVLAAAAY8"]
[Fri Dec 19 20:59:37.149688 2025] [:error] [pid 20675:tid 20693] [client 4.193.235.247:4061] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aUVMObMyJ3XqeDRsbQmhqwAAAQU"]
[Fri Dec 19 20:59:37.687719 2025] [:error] [pid 16026:tid 16051] [client 4.193.235.247:17551] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUVMOULVfhf4Jb3enmM7nwAAAVY"]
[Fri Dec 19 20:59:38.359842 2025] [:error] [pid 16026:tid 16030] [client 4.193.235.247:17573] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUVMOkLVfhf4Jb3enmM7oAAAAUE"]
[Fri Dec 19 20:59:38.942069 2025] [:error] [pid 20675:tid 20697] [client 4.193.235.247:17653] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUVMOrMyJ3XqeDRsbQmhsQAAAQk"]
[Fri Dec 19 20:59:39.584950 2025] [:error] [pid 41451:tid 41462] [client 4.193.235.247:4009] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aUVMOwYXFn-DbZghZBHf_wAAAAg"]
[Fri Dec 19 20:59:40.225611 2025] [:error] [pid 20581:tid 20623] [client 4.193.235.247:17588] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUVMPPxEv7WXNhnFD1mI5gAAAIg"]
[Fri Dec 19 20:59:40.789094 2025] [:error] [pid 20580:tid 20599] [client 4.193.235.247:4085] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUVMPEmd1op_YdAdgR2jVgAAAE0"]
[Fri Dec 19 20:59:42.034123 2025] [:error] [pid 20581:tid 20632] [client 4.193.235.247:4004] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUVMPvxEv7WXNhnFD1mI5wAAAJE"]
[Fri Dec 19 20:59:42.900214 2025] [:error] [pid 20582:tid 20648] [client 4.193.235.247:17640] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUVMPspAnrkQKZ4b5gY6kgAAAMY"]
[Fri Dec 19 20:59:44.052989 2025] [:error] [pid 20581:tid 20621] [client 4.193.235.247:4075] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUVMQPxEv7WXNhnFD1mI6wAAAIY"]
[Fri Dec 19 20:59:44.839319 2025] [:error] [pid 16026:tid 16029] [client 4.193.235.247:17660] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUVMQELVfhf4Jb3enmM7qgAAAUA"]
[Fri Dec 19 20:59:46.025161 2025] [:error] [pid 20582:tid 20655] [client 4.193.235.247:3934] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUVMQspAnrkQKZ4b5gY6lgAAAM0"]
[Fri Dec 19 20:59:47.247360 2025] [:error] [pid 20581:tid 20627] [client 4.193.235.247:4014] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUVMQ_xEv7WXNhnFD1mI7wAAAIw"]
[Fri Dec 19 20:59:48.048531 2025] [:error] [pid 16026:tid 16049] [client 4.193.235.247:4087] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUVMRELVfhf4Jb3enmM7rQAAAVQ"]
[Fri Dec 19 20:59:49.880621 2025] [:error] [pid 20582:tid 20657] [client 4.193.235.247:4033] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUVMRcpAnrkQKZ4b5gY6lwAAAM8"]
[Fri Dec 19 20:59:50.799059 2025] [:error] [pid 20582:tid 20662] [client 4.193.235.247:4039] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUVMRspAnrkQKZ4b5gY6mAAAANQ"]
[Fri Dec 19 20:59:51.662764 2025] [:error] [pid 20581:tid 20626] [client 4.193.235.247:3981] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUVMR_xEv7WXNhnFD1mI8AAAAIs"]
[Fri Dec 19 20:59:52.968691 2025] [:error] [pid 20580:tid 20609] [client 4.193.235.247:3971] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aUVMSEmd1op_YdAdgR2jXAAAAFc"]
[Fri Dec 19 20:59:53.334788 2025] [:error] [pid 20581:tid 20629] [client 4.193.235.247:4054] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aUVMSfxEv7WXNhnFD1mI9gAAAI4"]
[Fri Dec 19 20:59:54.118932 2025] [:error] [pid 20581:tid 20630] [client 4.193.235.247:17636] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aUVMSvxEv7WXNhnFD1mI-AAAAI8"]
[Fri Dec 19 20:59:55.296453 2025] [:error] [pid 20581:tid 20621] [client 4.193.235.247:4043] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aUVMS_xEv7WXNhnFD1mI-wAAAIY"]
[Fri Dec 19 20:59:56.480234 2025] [:error] [pid 20580:tid 20591] [client 4.193.235.247:17584] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aUVMTEmd1op_YdAdgR2jXQAAAEU"]
[Fri Dec 19 20:59:57.352120 2025] [:error] [pid 16026:tid 16041] [client 4.193.235.247:4052] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aUVMTULVfhf4Jb3enmM7sAAAAUw"]
[Fri Dec 19 20:59:58.326720 2025] [:error] [pid 18438:tid 18459] [client 4.193.235.247:3919] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aUVMTpRArClWV1iij_SVOAAAAZI"]
[Fri Dec 19 20:59:59.428697 2025] [:error] [pid 41451:tid 41456] [client 4.193.235.247:4032] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aUVMTwYXFn-DbZghZBHgAgAAAAI"]
[Fri Dec 19 21:00:00.317529 2025] [:error] [pid 20580:tid 20608] [client 4.193.235.247:17648] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hk.php"] [unique_id "aUVMUEmd1op_YdAdgR2jYQAAAFY"]
[Fri Dec 19 21:00:00.976812 2025] [:error] [pid 18438:tid 18454] [client 4.193.235.247:4038] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hk.php"] [unique_id "aUVMUJRArClWV1iij_SVPQAAAY0"]
[Fri Dec 19 21:00:01.905469 2025] [:error] [pid 20582:tid 20658] [client 4.193.235.247:3995] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hk.php"] [unique_id "aUVMUcpAnrkQKZ4b5gY6nAAAANA"]
[Fri Dec 19 21:00:03.227369 2025] [:error] [pid 20582:tid 20647] [client 4.193.235.247:4020] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hk.php"] [unique_id "aUVMU8pAnrkQKZ4b5gY6nwAAAMU"]
[Fri Dec 19 21:00:03.899144 2025] [:error] [pid 41451:tid 41471] [client 4.193.235.247:4072] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aUVMUwYXFn-DbZghZBHgBgAAABE"]
[Fri Dec 19 21:00:04.419053 2025] [:error] [pid 41451:tid 41463] [client 4.193.235.247:3958] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aUVMVAYXFn-DbZghZBHgBwAAAAk"]
[Fri Dec 19 21:00:05.237618 2025] [:error] [pid 18438:tid 18449] [client 4.193.235.247:4002] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aUVMVZRArClWV1iij_SVQQAAAYg"]
[Fri Dec 19 21:00:06.024442 2025] [:error] [pid 18438:tid 18455] [client 4.193.235.247:17576] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aUVMVpRArClWV1iij_SVQgAAAY4"]
[Fri Dec 19 21:00:06.434354 2025] [:error] [pid 20580:tid 20594] [client 4.193.235.247:3986] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aUVMVkmd1op_YdAdgR2jZgAAAEg"]
[Fri Dec 19 21:00:06.796064 2025] [:error] [pid 16026:tid 16029] [client 4.193.235.247:3994] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aUVMVkLVfhf4Jb3enmM7tgAAAUA"]
[Fri Dec 19 21:00:07.484969 2025] [:error] [pid 41451:tid 41457] [client 4.193.235.247:4045] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aUVMVwYXFn-DbZghZBHgCwAAAAM"]
[Fri Dec 19 21:00:08.290995 2025] [:error] [pid 20675:tid 20702] [client 4.193.235.247:4078] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aUVMWLMyJ3XqeDRsbQmhuQAAAQ4"]
[Fri Dec 19 21:00:09.436204 2025] [:error] [pid 41451:tid 41455] [client 4.193.235.247:17546] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-gr.php"] [unique_id "aUVMWQYXFn-DbZghZBHgDQAAAAE"]
[Fri Dec 19 21:00:10.503795 2025] [:error] [pid 41451:tid 41478] [client 4.193.235.247:4040] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-gr.php"] [unique_id "aUVMWgYXFn-DbZghZBHgDwAAABg"]
[Fri Dec 19 21:00:11.105490 2025] [:error] [pid 18438:tid 18458] [client 4.193.235.247:3979] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-gr.php"] [unique_id "aUVMW5RArClWV1iij_SVRwAAAZE"]
[Fri Dec 19 21:00:12.135783 2025] [:error] [pid 16026:tid 16052] [client 4.193.235.247:17620] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-gr.php"] [unique_id "aUVMXELVfhf4Jb3enmM7uQAAAVc"]
[Fri Dec 19 21:00:12.497687 2025] [:error] [pid 20582:tid 20642] [client 4.193.235.247:3936] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/owl.php"] [unique_id "aUVMXMpAnrkQKZ4b5gY6pAAAAMA"]
[Fri Dec 19 21:00:12.881582 2025] [:error] [pid 16026:tid 16049] [client 4.193.235.247:3938] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/owl.php"] [unique_id "aUVMXELVfhf4Jb3enmM7ugAAAVQ"]
[Fri Dec 19 21:00:13.287362 2025] [:error] [pid 20582:tid 20654] [client 4.193.235.247:4011] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/owl.php"] [unique_id "aUVMXcpAnrkQKZ4b5gY6pwAAAMw"]
[Fri Dec 19 21:00:14.697831 2025] [:error] [pid 20581:tid 20638] [client 4.193.235.247:3909] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/owl.php"] [unique_id "aUVMXvxEv7WXNhnFD1mI_QAAAJc"]
[Fri Dec 19 21:00:15.290642 2025] [:error] [pid 20675:tid 20697] [client 4.193.235.247:4016] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aUVMX7MyJ3XqeDRsbQmhvAAAAQk"]
[Fri Dec 19 21:00:16.281104 2025] [:error] [pid 18438:tid 18461] [client 4.193.235.247:4048] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aUVMYJRArClWV1iij_SVSgAAAZQ"]
[Fri Dec 19 21:00:17.093346 2025] [:error] [pid 20580:tid 20596] [client 4.193.235.247:4095] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aUVMYUmd1op_YdAdgR2jaQAAAEo"]
[Fri Dec 19 21:00:17.758347 2025] [:error] [pid 18438:tid 18457] [client 4.193.235.247:4005] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aUVMYZRArClWV1iij_SVTgAAAZA"]
[Fri Dec 19 21:00:18.327241 2025] [:error] [pid 18438:tid 18455] [client 4.193.235.247:17654] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aUVMYpRArClWV1iij_SVUAAAAY4"]
[Fri Dec 19 21:00:18.608459 2025] [:error] [pid 20582:tid 20650] [client 4.193.235.247:3993] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aUVMYspAnrkQKZ4b5gY6qgAAAMg"]
[Fri Dec 19 21:00:18.972443 2025] [:error] [pid 20582:tid 20648] [client 4.193.235.247:17645] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aUVMYspAnrkQKZ4b5gY6qwAAAMY"]
[Fri Dec 19 21:00:19.770104 2025] [:error] [pid 18438:tid 18441] [client 4.193.235.247:4060] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aUVMY5RArClWV1iij_SVUgAAAYA"]
[Fri Dec 19 21:00:20.360739 2025] [:error] [pid 18438:tid 18453] [client 4.193.235.247:3988] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aUVMZJRArClWV1iij_SVVAAAAYw"]
[Fri Dec 19 21:00:20.702322 2025] [:error] [pid 20580:tid 20588] [client 4.193.235.247:17587] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aUVMZEmd1op_YdAdgR2jawAAAEI"]
[Fri Dec 19 21:00:21.223424 2025] [:error] [pid 16026:tid 16036] [client 4.193.235.247:4065] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aUVMZULVfhf4Jb3enmM7vQAAAUc"]
[Fri Dec 19 21:00:21.974616 2025] [:error] [pid 16026:tid 16034] [client 4.193.235.247:17561] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aUVMZULVfhf4Jb3enmM7vgAAAUU"]
[Fri Dec 19 21:00:22.220367 2025] [:error] [pid 18438:tid 18445] [client 4.193.235.247:4066] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aUVMZpRArClWV1iij_SVVwAAAYQ"]
[Fri Dec 19 21:00:22.621533 2025] [:error] [pid 18438:tid 18454] [client 4.193.235.247:17577] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aUVMZpRArClWV1iij_SVWAAAAY0"]
[Fri Dec 19 21:00:23.041597 2025] [:error] [pid 18438:tid 18444] [client 4.193.235.247:17580] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aUVMZ5RArClWV1iij_SVWQAAAYM"]
[Fri Dec 19 21:00:23.558895 2025] [:error] [pid 18438:tid 18457] [client 4.193.235.247:4037] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aUVMZ5RArClWV1iij_SVXAAAAZA"]
[Fri Dec 19 21:00:24.163676 2025] [:error] [pid 18438:tid 18447] [client 4.193.235.247:17633] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-903.php"] [unique_id "aUVMaJRArClWV1iij_SVXgAAAYY"]
[Fri Dec 19 21:00:24.732103 2025] [:error] [pid 41451:tid 41471] [client 4.193.235.247:4088] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-903.php"] [unique_id "aUVMaAYXFn-DbZghZBHgEwAAABE"]
[Fri Dec 19 21:00:25.244988 2025] [:error] [pid 20580:tid 20602] [client 4.193.235.247:3948] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-903.php"] [unique_id "aUVMaUmd1op_YdAdgR2jbQAAAFA"]
[Fri Dec 19 21:00:26.241414 2025] [:error] [pid 18438:tid 18462] [client 4.193.235.247:17539] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-903.php"] [unique_id "aUVMapRArClWV1iij_SVYQAAAZU"]
[Fri Dec 19 21:00:26.990932 2025] [:error] [pid 20582:tid 20660] [client 4.193.235.247:3906] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUVMaspAnrkQKZ4b5gY6rAAAANI"]
[Fri Dec 19 21:00:27.640058 2025] [:error] [pid 20582:tid 20656] [client 4.193.235.247:3945] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUVMa8pAnrkQKZ4b5gY6rQAAAM4"]
[Fri Dec 19 21:00:32.954780 2025] [:error] [pid 16026:tid 16045] [client 4.193.235.247:3907] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/777.php"] [unique_id "aUVMcELVfhf4Jb3enmM72QAAAVA"]
[Fri Dec 19 21:00:34.130042 2025] [:error] [pid 20580:tid 20599] [client 4.193.235.247:3975] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/777.php"] [unique_id "aUVMckmd1op_YdAdgR2jcQAAAE0"]
[Fri Dec 19 21:00:35.920563 2025] [:error] [pid 20580:tid 20606] [client 4.193.235.247:4015] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/777.php"] [unique_id "aUVMc0md1op_YdAdgR2jcgAAAFQ"]
[Fri Dec 19 21:00:36.759839 2025] [:error] [pid 20582:tid 20653] [client 4.193.235.247:3991] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/777.php"] [unique_id "aUVMdMpAnrkQKZ4b5gY6rwAAAMs"]
[Fri Dec 19 21:00:38.311965 2025] [:error] [pid 18438:tid 18459] [client 4.193.235.247:4044] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luxe.php"] [unique_id "aUVMdpRArClWV1iij_SVbAAAAZI"]
[Fri Dec 19 21:00:39.512470 2025] [:error] [pid 18438:tid 18443] [client 4.193.235.247:17545] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luxe.php"] [unique_id "aUVMd5RArClWV1iij_SVcAAAAYI"]
[Fri Dec 19 21:00:40.835877 2025] [:error] [pid 20580:tid 20604] [client 4.193.235.247:17622] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luxe.php"] [unique_id "aUVMeEmd1op_YdAdgR2jdwAAAFI"]
[Fri Dec 19 21:00:41.926138 2025] [:error] [pid 41451:tid 41455] [client 4.193.235.247:4017] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luxe.php"] [unique_id "aUVMeQYXFn-DbZghZBHgGQAAAAE"]
[Fri Dec 19 21:00:42.389565 2025] [:error] [pid 18438:tid 18452] [client 4.193.235.247:3916] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aUVMepRArClWV1iij_SVdQAAAYs"]
[Fri Dec 19 21:00:43.295821 2025] [:error] [pid 18438:tid 18465] [client 4.193.235.247:3969] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aUVMe5RArClWV1iij_SVdgAAAZg"]
[Fri Dec 19 21:00:44.079331 2025] [:error] [pid 18438:tid 18460] [client 4.193.235.247:3922] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aUVMfJRArClWV1iij_SVeQAAAZM"]
[Fri Dec 19 21:00:44.581017 2025] [:error] [pid 41451:tid 41464] [client 4.193.235.247:4022] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aUVMfAYXFn-DbZghZBHgGgAAAAo"]
[Fri Dec 19 21:00:45.255890 2025] [:error] [pid 18438:tid 18445] [client 4.193.235.247:3841] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aUVMfZRArClWV1iij_SVfwAAAYQ"]
[Fri Dec 19 21:00:46.699799 2025] [:error] [pid 20580:tid 20599] [client 4.193.235.247:4041] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aUVMfkmd1op_YdAdgR2jfwAAAE0"]
[Fri Dec 19 21:00:47.303559 2025] [:error] [pid 20675:tid 20711] [client 4.193.235.247:4095] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aUVMf7MyJ3XqeDRsbQmhxgAAARc"]
[Fri Dec 19 21:00:48.422341 2025] [:error] [pid 41451:tid 41469] [client 4.193.235.247:4010] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aUVMgAYXFn-DbZghZBHgHgAAAA8"]
[Fri Dec 19 21:00:49.283219 2025] [:error] [pid 18438:tid 18462] [client 4.193.235.247:4064] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "aUVMgZRArClWV1iij_SVjwAAAZU"]
[Fri Dec 19 21:00:50.810644 2025] [:error] [pid 20581:tid 20634] [client 4.193.235.247:4007] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "aUVMgvxEv7WXNhnFD1mI_wAAAJM"]
[Fri Dec 19 21:00:52.550472 2025] [:error] [pid 18438:tid 18446] [client 4.193.235.247:17594] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "aUVMhJRArClWV1iij_SVlgAAAYU"]
[Fri Dec 19 21:00:53.638601 2025] [:error] [pid 20582:tid 20665] [client 4.193.235.247:4070] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "aUVMhcpAnrkQKZ4b5gY6tAAAANc"]
[Fri Dec 19 21:00:54.461698 2025] [:error] [pid 20582:tid 20654] [client 4.193.235.247:3957] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUVMhspAnrkQKZ4b5gY6tgAAAMw"]
[Fri Dec 19 21:00:55.179431 2025] [:error] [pid 41451:tid 41457] [client 4.193.235.247:4090] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUVMhwYXFn-DbZghZBHgIwAAAAM"]
[Fri Dec 19 21:00:55.938467 2025] [:error] [pid 20581:tid 20630] [client 4.193.235.247:3976] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUVMh_xEv7WXNhnFD1mJAgAAAI8"]
[Fri Dec 19 21:00:56.727746 2025] [:error] [pid 41451:tid 41464] [client 4.193.235.247:3987] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUVMiAYXFn-DbZghZBHgJwAAAAo"]
[Fri Dec 19 21:00:58.720541 2025] [:error] [pid 20580:tid 20608] [client 4.193.235.247:3978] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/noe.php"] [unique_id "aUVMikmd1op_YdAdgR2jgwAAAFY"]
[Fri Dec 19 21:00:59.604123 2025] [:error] [pid 16026:tid 16047] [client 4.193.235.247:17557] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/noe.php"] [unique_id "aUVMi0LVfhf4Jb3enmM78wAAAVI"]
[Fri Dec 19 21:01:00.492240 2025] [:error] [pid 20580:tid 20592] [client 4.193.235.247:4093] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/noe.php"] [unique_id "aUVMjEmd1op_YdAdgR2jhAAAAEY"]
[Fri Dec 19 21:01:01.056401 2025] [:error] [pid 18438:tid 18441] [client 4.193.235.247:3954] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/noe.php"] [unique_id "aUVMjZRArClWV1iij_SVqAAAAYA"]
[Fri Dec 19 21:01:01.791337 2025] [:error] [pid 18438:tid 18442] [client 4.193.235.247:3926] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aUVMjZRArClWV1iij_SVqgAAAYE"]
[Fri Dec 19 21:01:02.540263 2025] [:error] [pid 20582:tid 20661] [client 4.193.235.247:3989] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aUVMjspAnrkQKZ4b5gY6ugAAANM"]
[Fri Dec 19 21:01:03.078383 2025] [:error] [pid 20582:tid 20653] [client 4.193.235.247:4021] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aUVMj8pAnrkQKZ4b5gY6uwAAAMs"]
[Fri Dec 19 21:01:03.510011 2025] [:error] [pid 18438:tid 18445] [client 4.193.235.247:3933] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aUVMj5RArClWV1iij_SVrgAAAYQ"]
[Fri Dec 19 21:01:04.346220 2025] [:error] [pid 41451:tid 41477] [client 4.193.235.247:3914] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellalfa.php"] [unique_id "aUVMkAYXFn-DbZghZBHgKQAAABc"]
[Fri Dec 19 21:01:05.434211 2025] [:error] [pid 20582:tid 20644] [client 4.193.235.247:3972] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellalfa.php"] [unique_id "aUVMkcpAnrkQKZ4b5gY6vgAAAMI"]
[Fri Dec 19 21:01:05.914314 2025] [:error] [pid 16026:tid 16035] [client 4.193.235.247:3918] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellalfa.php"] [unique_id "aUVMkULVfhf4Jb3enmM79wAAAUY"]
[Fri Dec 19 21:01:07.588954 2025] [:error] [pid 41451:tid 41456] [client 4.193.235.247:17597] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellalfa.php"] [unique_id "aUVMkwYXFn-DbZghZBHgKgAAAAI"]
[Fri Dec 19 21:01:08.662359 2025] [:error] [pid 20675:tid 20689] [client 4.193.235.247:3956] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aUVMlLMyJ3XqeDRsbQmhzQAAAQE"]
[Fri Dec 19 21:01:09.362343 2025] [:error] [pid 20675:tid 20690] [client 4.193.235.247:3939] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aUVMlbMyJ3XqeDRsbQmhzwAAAQI"]
[Fri Dec 19 21:01:09.751158 2025] [:error] [pid 20581:tid 20637] [client 4.193.235.247:17646] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aUVMlfxEv7WXNhnFD1mJEgAAAJY"]
[Fri Dec 19 21:01:10.372465 2025] [:error] [pid 20581:tid 20630] [client 4.193.235.247:17656] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "aUVMlvxEv7WXNhnFD1mJEwAAAI8"]
[Fri Dec 19 21:01:11.418377 2025] [:error] [pid 16026:tid 16041] [client 4.193.235.247:3874] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aUVMl0LVfhf4Jb3enmM7-gAAAUw"]
[Fri Dec 19 21:01:12.243884 2025] [:error] [pid 41451:tid 41458] [client 4.193.235.247:4094] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aUVMmAYXFn-DbZghZBHgLAAAAAQ"]
[Fri Dec 19 21:01:12.471479 2025] [:error] [pid 20581:tid 20632] [client 4.193.235.247:4082] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aUVMmPxEv7WXNhnFD1mJFQAAAJE"]
[Fri Dec 19 21:01:12.830822 2025] [:error] [pid 16026:tid 16039] [client 4.193.235.247:3984] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aUVMmELVfhf4Jb3enmM7_AAAAUo"]
[Fri Dec 19 21:01:13.357037 2025] [:error] [pid 16026:tid 16040] [client 4.193.235.247:4081] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aUVMmULVfhf4Jb3enmM7_QAAAUs"]
[Fri Dec 19 21:01:14.190597 2025] [:error] [pid 41451:tid 41466] [client 4.193.235.247:4074] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aUVMmgYXFn-DbZghZBHgLgAAAAw"]
[Fri Dec 19 21:01:14.834876 2025] [:error] [pid 20582:tid 20657] [client 4.193.235.247:3980] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aUVMmspAnrkQKZ4b5gY6wQAAAM8"]
[Fri Dec 19 21:01:15.512907 2025] [:error] [pid 20675:tid 20693] [client 4.193.235.247:3920] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aUVMm7MyJ3XqeDRsbQmh0gAAAQU"]
[Fri Dec 19 21:01:15.927656 2025] [:error] [pid 20580:tid 20593] [client 4.193.235.247:4006] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aUVMm0md1op_YdAdgR2jigAAAEc"]
[Fri Dec 19 21:01:16.489524 2025] [:error] [pid 18438:tid 18462] [client 4.193.235.247:3813] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aUVMnJRArClWV1iij_SVxgAAAZU"]
[Fri Dec 19 21:01:17.770904 2025] [:error] [pid 20581:tid 20617] [client 4.193.235.247:4000] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aUVMnfxEv7WXNhnFD1mJGwAAAII"]
[Fri Dec 19 21:01:18.895797 2025] [:error] [pid 16026:tid 16045] [client 4.193.235.247:4019] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aUVMnkLVfhf4Jb3enmM7_gAAAVA"]
[Fri Dec 19 21:01:19.246358 2025] [:error] [pid 18438:tid 18442] [client 4.193.235.247:4083] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aUVMn5RArClWV1iij_SVzgAAAYE"]
[Fri Dec 19 21:01:19.854530 2025] [:error] [pid 18438:tid 18447] [client 4.193.235.247:17586] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aUVMn5RArClWV1iij_SV0AAAAYY"]
[Fri Dec 19 21:01:20.353393 2025] [:error] [pid 41451:tid 41471] [client 4.193.235.247:3851] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aUVMoAYXFn-DbZghZBHgMQAAABE"]
[Fri Dec 19 21:01:20.885068 2025] [:error] [pid 18438:tid 18454] [client 4.193.235.247:4086] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aUVMoJRArClWV1iij_SV0wAAAY0"]
[Fri Dec 19 21:01:21.527357 2025] [:error] [pid 16026:tid 16044] [client 4.193.235.247:4068] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aUVMoULVfhf4Jb3enmM8AQAAAU8"]
[Fri Dec 19 21:01:22.697091 2025] [:error] [pid 16026:tid 16049] [client 4.193.235.247:4053] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aUVMokLVfhf4Jb3enmM8BAAAAVQ"]
[Fri Dec 19 21:01:23.121759 2025] [:error] [pid 20581:tid 20629] [client 4.193.235.247:4024] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aUVMo_xEv7WXNhnFD1mJJgAAAI4"]
[Fri Dec 19 21:01:23.417891 2025] [:error] [pid 20581:tid 20623] [client 4.193.235.247:3928] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aUVMo_xEv7WXNhnFD1mJJwAAAIg"]
[Fri Dec 19 21:01:26.407758 2025] [:error] [pid 20675:tid 20700] [client 4.193.235.247:3955] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "aUVMprMyJ3XqeDRsbQmh2AAAAQw"]
[Fri Dec 19 21:01:26.864645 2025] [:error] [pid 20582:tid 20648] [client 4.193.235.247:3960] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "aUVMpspAnrkQKZ4b5gY6xQAAAMY"]
[Fri Dec 19 21:01:28.929612 2025] [:error] [pid 41451:tid 41475] [client 4.193.235.247:3924] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "aUVMqAYXFn-DbZghZBHgNAAAABU"]
[Fri Dec 19 21:01:31.003822 2025] [:error] [pid 20580:tid 20597] [client 4.193.235.247:4012] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "aUVMq0md1op_YdAdgR2jmQAAAEs"]
[Fri Dec 19 21:01:36.732868 2025] [:error] [pid 18438:tid 18449] [client 4.193.235.247:3959] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUVMsJRArClWV1iij_SWEgAAAYg"]
[Fri Dec 19 21:01:37.505174 2025] [:error] [pid 20582:tid 20651] [client 4.193.235.247:3869] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUVMscpAnrkQKZ4b5gY6zgAAAMk"]
[Fri Dec 19 21:01:38.511957 2025] [:error] [pid 20582:tid 20657] [client 4.193.235.247:17562] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUVMsspAnrkQKZ4b5gY6zwAAAM8"]
[Fri Dec 19 21:01:40.130795 2025] [:error] [pid 20580:tid 20587] [client 4.193.235.247:3853] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUVMtEmd1op_YdAdgR2jnAAAAEE"]
[Fri Dec 19 21:01:41.617711 2025] [:error] [pid 20675:tid 20709] [client 4.193.235.247:3943] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aUVMtbMyJ3XqeDRsbQmh3QAAARU"]
[Fri Dec 19 21:01:42.226201 2025] [:error] [pid 16026:tid 16033] [client 4.193.235.247:4076] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aUVMtkLVfhf4Jb3enmM8DQAAAUQ"]
[Fri Dec 19 21:01:43.084065 2025] [:error] [pid 20675:tid 20707] [client 4.193.235.247:3879] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aUVMt7MyJ3XqeDRsbQmh3gAAARM"]
[Fri Dec 19 21:01:44.006949 2025] [:error] [pid 20580:tid 20594] [client 4.193.235.247:3935] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aUVMuEmd1op_YdAdgR2jnwAAAEg"]
[Fri Dec 19 21:01:44.409485 2025] [:error] [pid 20675:tid 20693] [client 4.193.235.247:3911] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aUVMuLMyJ3XqeDRsbQmh3wAAAQU"]
[Fri Dec 19 21:01:44.863443 2025] [:error] [pid 20582:tid 20664] [client 4.193.235.247:3941] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aUVMuMpAnrkQKZ4b5gY60wAAANY"]
[Fri Dec 19 21:01:45.343820 2025] [:error] [pid 41451:tid 41473] [client 4.193.235.247:3982] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aUVMuQYXFn-DbZghZBHgPAAAABM"]
[Fri Dec 19 21:01:45.725673 2025] [:error] [pid 20675:tid 20702] [client 4.193.235.247:3923] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aUVMubMyJ3XqeDRsbQmh4AAAAQ4"]
[Fri Dec 19 21:01:47.189864 2025] [:error] [pid 18438:tid 18455] [client 4.193.235.247:3953] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/static/as.php"] [unique_id "aUVMu5RArClWV1iij_SWOgAAAY4"]
[Fri Dec 19 21:01:47.707366 2025] [:error] [pid 41451:tid 41462] [client 4.193.235.247:4029] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/static/as.php"] [unique_id "aUVMuwYXFn-DbZghZBHgPwAAAAg"]
[Fri Dec 19 21:01:48.096003 2025] [:error] [pid 20675:tid 20711] [client 4.193.235.247:3858] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/static/as.php"] [unique_id "aUVMvLMyJ3XqeDRsbQmh4wAAARc"]
[Fri Dec 19 21:01:48.918477 2025] [:error] [pid 20582:tid 20659] [client 4.193.235.247:3845] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/static/as.php"] [unique_id "aUVMvMpAnrkQKZ4b5gY61QAAANE"]
[Fri Dec 19 21:01:50.487860 2025] [:error] [pid 18438:tid 18441] [client 4.193.235.247:3890] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aUVMvpRArClWV1iij_SWSAAAAYA"]
[Fri Dec 19 21:01:50.979989 2025] [:error] [pid 18438:tid 18448] [client 4.193.235.247:3912] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aUVMvpRArClWV1iij_SWSgAAAYc"]
[Fri Dec 19 21:01:51.614724 2025] [:error] [pid 41451:tid 41475] [client 4.193.235.247:17553] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aUVMvwYXFn-DbZghZBHgQAAAABU"]
[Fri Dec 19 21:01:52.059938 2025] [:error] [pid 20582:tid 20656] [client 4.193.235.247:3873] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aUVMwMpAnrkQKZ4b5gY61wAAAM4"]
[Fri Dec 19 21:01:53.047348 2025] [:error] [pid 20675:tid 20695] [client 4.193.235.247:3963] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aUVMwbMyJ3XqeDRsbQmh5QAAAQc"]
[Fri Dec 19 21:01:54.196090 2025] [:error] [pid 18438:tid 18459] [client 4.193.235.247:4025] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aUVMwpRArClWV1iij_SWVAAAAZI"]
[Fri Dec 19 21:01:55.577768 2025] [:error] [pid 20582:tid 20653] [client 4.193.235.247:4003] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aUVMw8pAnrkQKZ4b5gY62AAAAMs"]
[Fri Dec 19 21:01:56.026388 2025] [:error] [pid 20675:tid 20699] [client 4.193.235.247:17560] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aUVMxLMyJ3XqeDRsbQmh6AAAAQs"]
[Fri Dec 19 21:01:56.629763 2025] [:error] [pid 20581:tid 20625] [client 4.193.235.247:3877] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVMxPxEv7WXNhnFD1mJNAAAAIo"]
[Fri Dec 19 21:01:58.201944 2025] [:error] [pid 20581:tid 20629] [client 4.193.235.247:3996] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVMxvxEv7WXNhnFD1mJNQAAAI4"]
[Fri Dec 19 21:01:59.122004 2025] [:error] [pid 20581:tid 20623] [client 4.193.235.247:3862] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVMx_xEv7WXNhnFD1mJNgAAAIg"]
[Fri Dec 19 21:02:00.182930 2025] [:error] [pid 41451:tid 41458] [client 4.193.235.247:3998] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUVMyAYXFn-DbZghZBHgRgAAAAQ"]
[Fri Dec 19 21:02:00.884298 2025] [:error] [pid 20675:tid 20693] [client 4.193.235.247:3966] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aUVMyLMyJ3XqeDRsbQmh7QAAAQU"]
[Fri Dec 19 21:02:01.292480 2025] [:error] [pid 16026:tid 16049] [client 4.193.235.247:3921] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aUVMyULVfhf4Jb3enmM8GgAAAVQ"]
[Fri Dec 19 21:02:01.774538 2025] [:error] [pid 18438:tid 18451] [client 4.193.235.247:4023] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aUVMyZRArClWV1iij_SWWAAAAYo"]
[Fri Dec 19 21:02:02.557733 2025] [:error] [pid 20581:tid 20618] [client 4.193.235.247:3944] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aUVMyvxEv7WXNhnFD1mJOgAAAIM"]
[Fri Dec 19 21:02:03.093402 2025] [:error] [pid 41451:tid 41461] [client 4.193.235.247:17637] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "aUVMywYXFn-DbZghZBHgSgAAAAc"]
[Fri Dec 19 21:02:03.486010 2025] [:error] [pid 20581:tid 20615] [client 4.193.235.247:3990] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "aUVMy_xEv7WXNhnFD1mJPQAAAIA"]
[Fri Dec 19 21:02:03.753476 2025] [:error] [pid 41451:tid 41457] [client 4.193.235.247:3977] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "aUVMywYXFn-DbZghZBHgTAAAAAM"]
[Fri Dec 19 21:02:04.549069 2025] [:error] [pid 20675:tid 20706] [client 4.193.235.247:17619] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "aUVMzLMyJ3XqeDRsbQmh7wAAARI"]
[Fri Dec 19 21:02:05.168912 2025] [:error] [pid 20582:tid 20665] [client 4.193.235.247:3983] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wcas.php"] [unique_id "aUVMzcpAnrkQKZ4b5gY63wAAANc"]
[Fri Dec 19 21:02:05.590190 2025] [:error] [pid 20675:tid 20694] [client 4.193.235.247:3905] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wcas.php"] [unique_id "aUVMzbMyJ3XqeDRsbQmh8AAAAQY"]
[Fri Dec 19 21:02:06.246925 2025] [:error] [pid 20582:tid 20646] [client 4.193.235.247:3793] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wcas.php"] [unique_id "aUVMzspAnrkQKZ4b5gY64QAAAMQ"]
[Fri Dec 19 21:02:07.510561 2025] [:error] [pid 20582:tid 20663] [client 4.193.235.247:3931] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wcas.php"] [unique_id "aUVMz8pAnrkQKZ4b5gY65AAAANU"]
[Fri Dec 19 21:02:08.483060 2025] [:error] [pid 20582:tid 20659] [client 4.193.235.247:3856] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUVM0MpAnrkQKZ4b5gY65wAAANE"]
[Fri Dec 19 21:02:10.742238 2025] [:error] [pid 20582:tid 20643] [client 4.193.235.247:3865] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUVM0spAnrkQKZ4b5gY66wAAAME"]
[Fri Dec 19 21:02:11.856844 2025] [:error] [pid 16026:tid 16032] [client 4.193.235.247:3942] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUVM00LVfhf4Jb3enmM8IwAAAUM"]
[Fri Dec 19 21:02:12.692433 2025] [:error] [pid 18438:tid 18462] [client 4.193.235.247:17611] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aUVM1JRArClWV1iij_SWXQAAAZU"]
[Fri Dec 19 21:02:13.243264 2025] [:error] [pid 20581:tid 20637] [client 4.193.235.247:4001] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aUVM1fxEv7WXNhnFD1mJQwAAAJY"]
[Fri Dec 19 21:02:13.653899 2025] [:error] [pid 20580:tid 20607] [client 4.193.235.247:17663] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aUVM1Umd1op_YdAdgR2jpQAAAFU"]
[Fri Dec 19 21:02:13.966167 2025] [:error] [pid 20581:tid 20618] [client 4.193.235.247:17600] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aUVM1fxEv7WXNhnFD1mJRAAAAIM"]
[Fri Dec 19 21:02:14.277987 2025] [:error] [pid 20582:tid 20645] [client 4.193.235.247:17632] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aUVM1spAnrkQKZ4b5gY68QAAAMM"]
[Fri Dec 19 21:02:14.645567 2025] [:error] [pid 20580:tid 20610] [client 4.193.235.247:4069] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aUVM1kmd1op_YdAdgR2jpwAAAFg"]
[Fri Dec 19 21:02:15.387867 2025] [:error] [pid 20675:tid 20688] [client 4.193.235.247:17615] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aUVM17MyJ3XqeDRsbQmh9QAAAQA"]
[Fri Dec 19 21:02:16.687191 2025] [:error] [pid 41451:tid 41472] [client 4.193.235.247:3870] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aUVM2AYXFn-DbZghZBHgUgAAABI"]
[Fri Dec 19 21:02:17.935014 2025] [:error] [pid 20675:tid 20705] [client 4.193.235.247:3951] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aUVM2bMyJ3XqeDRsbQmh9wAAARE"]
[Fri Dec 19 21:02:18.675201 2025] [:error] [pid 41451:tid 41478] [client 4.193.235.247:17614] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUVM2gYXFn-DbZghZBHgVQAAABg"]
[Fri Dec 19 21:02:19.397031 2025] [:error] [pid 41451:tid 41466] [client 4.193.235.247:4030] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUVM2wYXFn-DbZghZBHgVgAAAAw"]
[Fri Dec 19 21:02:20.019999 2025] [:error] [pid 20582:tid 20650] [client 4.193.235.247:3861] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUVM3MpAnrkQKZ4b5gY7BgAAAMg"]
[Fri Dec 19 21:02:20.640391 2025] [:error] [pid 41451:tid 41474] [client 4.193.235.247:3800] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUVM3AYXFn-DbZghZBHgVwAAABQ"]
[Fri Dec 19 21:02:20.942823 2025] [:error] [pid 20581:tid 20625] [client 4.193.235.247:17639] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lol.php"] [unique_id "aUVM3PxEv7WXNhnFD1mJUQAAAIo"]
[Fri Dec 19 21:02:21.236930 2025] [:error] [pid 16026:tid 16039] [client 4.193.235.247:3992] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lol.php"] [unique_id "aUVM3ULVfhf4Jb3enmM8KwAAAUo"]
[Fri Dec 19 21:02:21.640069 2025] [:error] [pid 20675:tid 20689] [client 4.193.235.247:3968] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lol.php"] [unique_id "aUVM3bMyJ3XqeDRsbQmh-AAAAQE"]
[Fri Dec 19 21:02:22.485673 2025] [:error] [pid 41451:tid 41473] [client 4.193.235.247:3887] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lol.php"] [unique_id "aUVM3gYXFn-DbZghZBHgYQAAABM"]
[Fri Dec 19 21:02:23.572361 2025] [:error] [pid 20675:tid 20692] [client 4.193.235.247:17629] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fileas.php"] [unique_id "aUVM37MyJ3XqeDRsbQmh-gAAAQQ"]
[Fri Dec 19 21:02:24.418127 2025] [:error] [pid 20582:tid 20653] [client 4.193.235.247:3895] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fileas.php"] [unique_id "aUVM4MpAnrkQKZ4b5gY7HgAAAMs"]
[Fri Dec 19 21:02:25.290415 2025] [:error] [pid 20675:tid 20702] [client 4.193.235.247:3961] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fileas.php"] [unique_id "aUVM4bMyJ3XqeDRsbQmh_QAAAQ4"]
[Fri Dec 19 21:02:25.960107 2025] [:error] [pid 20581:tid 20635] [client 4.193.235.247:17579] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fileas.php"] [unique_id "aUVM4fxEv7WXNhnFD1mJWQAAAJQ"]
[Fri Dec 19 21:02:26.455664 2025] [:error] [pid 20582:tid 20654] [client 4.193.235.247:4077] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aUVM4spAnrkQKZ4b5gY7IAAAAMw"]
[Fri Dec 19 21:02:26.795703 2025] [:error] [pid 20675:tid 20698] [client 4.193.235.247:17626] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aUVM4rMyJ3XqeDRsbQmh_gAAAQo"]
[Fri Dec 19 21:02:27.548697 2025] [:error] [pid 20582:tid 20647] [client 4.193.235.247:3842] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aUVM48pAnrkQKZ4b5gY7IwAAAMU"]
[Fri Dec 19 21:02:27.979928 2025] [:error] [pid 20582:tid 20645] [client 4.193.235.247:17556] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aUVM48pAnrkQKZ4b5gY7JQAAAMM"]
[Fri Dec 19 21:02:28.548937 2025] [:error] [pid 20582:tid 20650] [client 4.193.235.247:3930] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aUVM5MpAnrkQKZ4b5gY7JgAAAMg"]
[Fri Dec 19 21:02:28.945910 2025] [:error] [pid 41451:tid 41454] [client 4.193.235.247:17555] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aUVM5AYXFn-DbZghZBHgZwAAAAA"]
[Fri Dec 19 21:02:29.390516 2025] [:error] [pid 16026:tid 16029] [client 4.193.235.247:17567] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aUVM5ULVfhf4Jb3enmM8LgAAAUA"]
[Fri Dec 19 21:02:29.680855 2025] [:error] [pid 20675:tid 20711] [client 4.193.235.247:3932] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aUVM5bMyJ3XqeDRsbQmh_wAAARc"]
[Fri Dec 19 21:02:30.176885 2025] [:error] [pid 16026:tid 16040] [client 4.193.235.247:17609] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aUVM5kLVfhf4Jb3enmM8LwAAAUs"]
[Fri Dec 19 21:02:30.936141 2025] [:error] [pid 20675:tid 20703] [client 4.193.235.247:3872] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aUVM5rMyJ3XqeDRsbQmiAQAAAQ8"]
[Fri Dec 19 21:02:31.879876 2025] [:error] [pid 20582:tid 20643] [client 4.193.235.247:3864] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aUVM58pAnrkQKZ4b5gY7KAAAAME"]
[Fri Dec 19 21:02:32.946251 2025] [:error] [pid 18438:tid 18462] [client 4.193.235.247:3917] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aUVM6JRArClWV1iij_SWegAAAZU"]
[Fri Dec 19 21:02:33.435317 2025] [:error] [pid 20582:tid 20660] [client 4.193.235.247:17593] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aUVM6cpAnrkQKZ4b5gY7KQAAANI"]
[Fri Dec 19 21:02:34.030395 2025] [:error] [pid 20582:tid 20655] [client 4.193.235.247:3871] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aUVM6spAnrkQKZ4b5gY7KwAAAM0"]
[Fri Dec 19 21:02:34.565145 2025] [:error] [pid 20580:tid 20604] [client 4.193.235.247:3902] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aUVM6kmd1op_YdAdgR2jwgAAAFI"]
[Fri Dec 19 21:02:35.015146 2025] [:error] [pid 18438:tid 18449] [client 4.193.235.247:17591] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aUVM65RArClWV1iij_SWgAAAAYg"]
[Fri Dec 19 21:02:35.309752 2025] [:error] [pid 20580:tid 20588] [client 4.193.235.247:3927] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-is.php"] [unique_id "aUVM60md1op_YdAdgR2jwwAAAEI"]
[Fri Dec 19 21:02:35.636457 2025] [:error] [pid 16026:tid 16050] [client 4.193.235.247:3940] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-is.php"] [unique_id "aUVM60LVfhf4Jb3enmM8MQAAAVU"]
[Fri Dec 19 21:02:35.942273 2025] [:error] [pid 20675:tid 20712] [client 4.193.235.247:3894] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-is.php"] [unique_id "aUVM67MyJ3XqeDRsbQmiAwAAARg"]
[Fri Dec 19 21:02:39.336492 2025] [:error] [pid 20581:tid 20615] [client 4.193.235.247:3997] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aUVM7_xEv7WXNhnFD1mJawAAAIA"]
[Fri Dec 19 21:02:39.819833 2025] [:error] [pid 20580:tid 20601] [client 4.193.235.247:17537] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aUVM70md1op_YdAdgR2j0AAAAE8"]
[Fri Dec 19 21:02:40.968480 2025] [:error] [pid 18438:tid 18465] [client 4.193.235.247:4013] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aUVM8JRArClWV1iij_SWgwAAAZg"]
[Fri Dec 19 21:02:41.424818 2025] [:error] [pid 18438:tid 18457] [client 4.193.235.247:3937] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aUVM8ZRArClWV1iij_SWhgAAAZA"]
[Fri Dec 19 21:02:41.647343 2025] [:error] [pid 18438:tid 18459] [client 4.193.235.247:17596] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/auth.php"] [unique_id "aUVM8ZRArClWV1iij_SWhwAAAZI"]
[Fri Dec 19 21:02:42.157647 2025] [:error] [pid 20582:tid 20649] [client 4.193.235.247:17605] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/auth.php"] [unique_id "aUVM8spAnrkQKZ4b5gY7MAAAAMc"]
[Fri Dec 19 21:02:42.748793 2025] [:error] [pid 18438:tid 18448] [client 4.193.235.247:3863] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/auth.php"] [unique_id "aUVM8pRArClWV1iij_SWigAAAYc"]
[Fri Dec 19 21:02:43.653943 2025] [:error] [pid 20582:tid 20665] [client 4.193.235.247:17616] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/auth.php"] [unique_id "aUVM88pAnrkQKZ4b5gY7MgAAANc"]
[Fri Dec 19 21:02:44.225314 2025] [:error] [pid 20582:tid 20652] [client 4.193.235.247:17630] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUVM9MpAnrkQKZ4b5gY7NAAAAMo"]
[Fri Dec 19 21:02:45.103679 2025] [:error] [pid 16026:tid 16036] [client 4.193.235.247:17643] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUVM9ULVfhf4Jb3enmM8OAAAAUc"]
[Fri Dec 19 21:02:46.106428 2025] [:error] [pid 16026:tid 16035] [client 4.193.235.247:17536] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUVM9kLVfhf4Jb3enmM8OQAAAUY"]
[Fri Dec 19 21:02:46.859578 2025] [:error] [pid 16026:tid 16042] [client 4.193.235.247:17565] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/packed.php"] [unique_id "aUVM9kLVfhf4Jb3enmM8PAAAAU0"]
[Fri Dec 19 21:02:47.211567 2025] [:error] [pid 16026:tid 16040] [client 4.193.235.247:17571] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aUVM90LVfhf4Jb3enmM8PgAAAUs"]
[Fri Dec 19 21:02:47.624076 2025] [:error] [pid 20582:tid 20658] [client 4.193.235.247:3866] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aUVM98pAnrkQKZ4b5gY7OAAAANA"]
[Fri Dec 19 21:02:48.104159 2025] [:error] [pid 16026:tid 16030] [client 4.193.235.247:3778] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aUVM-ELVfhf4Jb3enmM8QAAAAUE"]
[Fri Dec 19 21:02:48.518340 2025] [:error] [pid 18438:tid 18443] [client 4.193.235.247:3880] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aUVM-JRArClWV1iij_SWjwAAAYI"]
[Fri Dec 19 21:02:49.034263 2025] [:error] [pid 20582:tid 20661] [client 4.193.235.247:17574] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abt.php"] [unique_id "aUVM-cpAnrkQKZ4b5gY7PAAAANM"]
[Fri Dec 19 21:02:50.070304 2025] [:error] [pid 20580:tid 20604] [client 4.193.235.247:3859] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abt.php"] [unique_id "aUVM-kmd1op_YdAdgR2j1QAAAFI"]
[Fri Dec 19 21:02:50.572642 2025] [:error] [pid 16026:tid 16038] [client 4.193.235.247:3854] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abt.php"] [unique_id "aUVM-kLVfhf4Jb3enmM8RQAAAUk"]
[Fri Dec 19 21:02:51.535092 2025] [:error] [pid 20582:tid 20650] [client 4.193.235.247:3860] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abt.php"] [unique_id "aUVM-8pAnrkQKZ4b5gY7QgAAAMg"]
[Fri Dec 19 21:02:52.126276 2025] [:error] [pid 18438:tid 18457] [client 4.193.235.247:17575] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aUVM_JRArClWV1iij_SWkwAAAZA"]
[Fri Dec 19 21:02:52.435719 2025] [:error] [pid 18438:tid 18453] [client 4.193.235.247:3875] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aUVM_JRArClWV1iij_SWlAAAAYw"]
[Fri Dec 19 21:02:52.794271 2025] [:error] [pid 18438:tid 18459] [client 4.193.235.247:4063] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aUVM_JRArClWV1iij_SWlgAAAZI"]
[Fri Dec 19 21:02:53.406893 2025] [:error] [pid 18438:tid 18455] [client 4.193.235.247:3883] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aUVM_ZRArClWV1iij_SWmAAAAY4"]
[Fri Dec 19 21:02:53.926123 2025] [:error] [pid 20580:tid 20605] [client 4.193.235.247:17578] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "aUVM_Umd1op_YdAdgR2j2QAAAFM"]
[Fri Dec 19 21:02:54.178850 2025] [:error] [pid 20580:tid 20607] [client 4.193.235.247:17548] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "aUVM_kmd1op_YdAdgR2j2gAAAFU"]
[Fri Dec 19 21:02:54.508227 2025] [:error] [pid 20580:tid 20603] [client 4.193.235.247:3781] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "aUVM_kmd1op_YdAdgR2j2wAAAFE"]
[Fri Dec 19 21:02:54.918497 2025] [:error] [pid 41451:tid 41458] [client 4.193.235.247:17564] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "aUVM_gYXFn-DbZghZBHgewAAAAQ"]
[Fri Dec 19 21:02:55.734792 2025] [:error] [pid 20582:tid 20660] [client 4.193.235.247:3809] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up.php"] [unique_id "aUVM_8pAnrkQKZ4b5gY7RAAAANI"]
[Fri Dec 19 21:02:57.062677 2025] [:error] [pid 18438:tid 18454] [client 4.193.235.247:17610] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up.php"] [unique_id "aUVNAZRArClWV1iij_SWmgAAAY0"]
[Fri Dec 19 21:02:58.369405 2025] [:error] [pid 16026:tid 16036] [client 4.193.235.247:4031] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up.php"] [unique_id "aUVNAkLVfhf4Jb3enmM8SAAAAUc"]
[Fri Dec 19 21:02:59.419615 2025] [:error] [pid 20582:tid 20649] [client 4.193.235.247:3840] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up.php"] [unique_id "aUVNA8pAnrkQKZ4b5gY7SQAAAMc"]
[Fri Dec 19 21:03:01.068865 2025] [:error] [pid 20582:tid 20645] [client 4.193.235.247:3794] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aUVNBcpAnrkQKZ4b5gY7SgAAAMM"]
[Fri Dec 19 21:03:02.219276 2025] [:error] [pid 20580:tid 20588] [client 4.193.235.247:17558] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aUVNBkmd1op_YdAdgR2j4wAAAEI"]
[Fri Dec 19 21:03:02.854037 2025] [:error] [pid 20582:tid 20665] [client 4.193.235.247:3965] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aUVNBspAnrkQKZ4b5gY7TAAAANc"]
[Fri Dec 19 21:03:03.781368 2025] [:error] [pid 20582:tid 20654] [client 4.193.235.247:17541] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aUVNB8pAnrkQKZ4b5gY7TQAAAMw"]
[Fri Dec 19 21:03:04.934320 2025] [:error] [pid 20581:tid 20633] [client 4.193.235.247:3925] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aUVNCPxEv7WXNhnFD1mJdwAAAJI"]
[Fri Dec 19 21:03:05.786336 2025] [:error] [pid 16026:tid 16041] [client 4.193.235.247:17554] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aUVNCULVfhf4Jb3enmM8UQAAAUw"]
[Fri Dec 19 21:03:07.025650 2025] [:error] [pid 41451:tid 41456] [client 4.193.235.247:3802] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aUVNCwYXFn-DbZghZBHgfQAAAAI"]
[Fri Dec 19 21:03:07.951378 2025] [:error] [pid 41451:tid 41469] [client 4.193.235.247:17621] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aUVNCwYXFn-DbZghZBHgfgAAAA8"]
[Fri Dec 19 21:03:08.845416 2025] [:error] [pid 16026:tid 16033] [client 4.193.235.247:3803] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "aUVNDELVfhf4Jb3enmM8VAAAAUQ"]
[Fri Dec 19 21:03:09.313172 2025] [:error] [pid 20675:tid 20701] [client 4.193.235.247:17572] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "aUVNDbMyJ3XqeDRsbQmiDAAAAQ0"]
[Fri Dec 19 21:03:09.803026 2025] [:error] [pid 20675:tid 20703] [client 4.193.235.247:3973] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "aUVNDbMyJ3XqeDRsbQmiDQAAAQ8"]
[Fri Dec 19 21:03:10.252429 2025] [:error] [pid 20582:tid 20662] [client 4.193.235.247:3786] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "aUVNDspAnrkQKZ4b5gY7UgAAANQ"]
[Fri Dec 19 21:03:10.854127 2025] [:error] [pid 16026:tid 16052] [client 4.193.235.247:3816] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUVNDkLVfhf4Jb3enmM8VQAAAVc"]
[Fri Dec 19 21:03:11.663159 2025] [:error] [pid 16026:tid 16050] [client 4.193.235.247:3804] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUVND0LVfhf4Jb3enmM8VwAAAVU"]
[Fri Dec 19 21:03:11.928076 2025] [:error] [pid 20580:tid 20591] [client 4.193.235.247:3869] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUVND0md1op_YdAdgR2j7QAAAEU"]
[Fri Dec 19 21:03:12.297038 2025] [:error] [pid 20675:tid 20700] [client 4.193.235.247:17647] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aUVNELMyJ3XqeDRsbQmiDwAAAQw"]
[Fri Dec 19 21:03:12.712917 2025] [:error] [pid 20582:tid 20655] [client 4.193.235.247:17642] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media.php"] [unique_id "aUVNEMpAnrkQKZ4b5gY7VQAAAM0"]
[Fri Dec 19 21:03:13.128666 2025] [:error] [pid 16026:tid 16044] [client 4.193.235.247:17638] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media.php"] [unique_id "aUVNEULVfhf4Jb3enmM8WQAAAU8"]
[Fri Dec 19 21:03:13.882872 2025] [:error] [pid 41451:tid 41462] [client 4.193.235.247:3814] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media.php"] [unique_id "aUVNEQYXFn-DbZghZBHggAAAAAg"]
[Fri Dec 19 21:03:14.804618 2025] [:error] [pid 20580:tid 20589] [client 4.193.235.247:3839] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media.php"] [unique_id "aUVNEkmd1op_YdAdgR2j7gAAAEM"]
[Fri Dec 19 21:03:15.695043 2025] [:error] [pid 16026:tid 16053] [client 4.193.235.247:17618] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aUVNE0LVfhf4Jb3enmM8WwAAAVg"]
[Fri Dec 19 21:03:16.422310 2025] [:error] [pid 16026:tid 16040] [client 4.193.235.247:3901] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aUVNFELVfhf4Jb3enmM8XAAAAUs"]
[Fri Dec 19 21:03:16.766129 2025] [:error] [pid 16026:tid 16039] [client 4.193.235.247:17623] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aUVNFELVfhf4Jb3enmM8XQAAAUo"]
[Fri Dec 19 21:03:17.124219 2025] [:error] [pid 16026:tid 16043] [client 4.193.235.247:17603] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aUVNFULVfhf4Jb3enmM8XgAAAU4"]
[Fri Dec 19 21:03:17.498646 2025] [:error] [pid 16026:tid 16051] [client 4.193.235.247:17607] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aUVNFULVfhf4Jb3enmM8XwAAAVY"]
[Fri Dec 19 21:03:17.974958 2025] [:error] [pid 18438:tid 18447] [client 4.193.235.247:3776] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aUVNFZRArClWV1iij_SWpQAAAYY"]
[Fri Dec 19 21:03:18.682218 2025] [:error] [pid 20581:tid 20638] [client 4.193.235.247:17631] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aUVNFvxEv7WXNhnFD1mJfgAAAJc"]
[Fri Dec 19 21:03:19.050801 2025] [:error] [pid 41451:tid 41464] [client 4.193.235.247:3915] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aUVNFwYXFn-DbZghZBHggwAAAAo"]
[Fri Dec 19 21:03:19.485987 2025] [:error] [pid 18438:tid 18448] [client 4.193.235.247:17581] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUVNF5RArClWV1iij_SWpgAAAYc"]
[Fri Dec 19 21:03:19.790080 2025] [:error] [pid 20581:tid 20625] [client 4.193.235.247:4036] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUVNF_xEv7WXNhnFD1mJfwAAAIo"]
[Fri Dec 19 21:03:20.126391 2025] [:error] [pid 16026:tid 16049] [client 4.193.235.247:17559] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUVNGELVfhf4Jb3enmM8YgAAAVQ"]
[Fri Dec 19 21:03:20.446789 2025] [:error] [pid 20581:tid 20639] [client 4.193.235.247:17550] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aUVNGPxEv7WXNhnFD1mJgAAAAJg"]
[Fri Dec 19 21:03:21.037791 2025] [:error] [pid 20580:tid 20603] [client 4.193.235.247:4026] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aUVNGUmd1op_YdAdgR2j8AAAAFE"]
[Fri Dec 19 21:03:21.509062 2025] [:error] [pid 16026:tid 16038] [client 4.193.235.247:3828] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aUVNGULVfhf4Jb3enmM8ZQAAAUk"]
[Fri Dec 19 21:03:21.885169 2025] [:error] [pid 16026:tid 16029] [client 4.193.235.247:17601] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aUVNGULVfhf4Jb3enmM8ZgAAAUA"]
[Fri Dec 19 21:03:22.197386 2025] [:error] [pid 20580:tid 20595] [client 4.193.235.247:17615] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aUVNGkmd1op_YdAdgR2j8gAAAEk"]
[Fri Dec 19 21:03:22.569720 2025] [:error] [pid 16026:tid 16045] [client 4.193.235.247:17649] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aUVNGkLVfhf4Jb3enmM8ZwAAAVA"]
[Fri Dec 19 21:03:23.117132 2025] [:error] [pid 41451:tid 41475] [client 4.193.235.247:3808] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aUVNGwYXFn-DbZghZBHghQAAABU"]
[Fri Dec 19 21:03:23.847053 2025] [:error] [pid 20581:tid 20623] [client 4.193.235.247:3949] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aUVNG_xEv7WXNhnFD1mJhAAAAIg"]
[Fri Dec 19 21:03:24.225739 2025] [:error] [pid 16026:tid 16031] [client 4.193.235.247:17657] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aUVNHELVfhf4Jb3enmM8awAAAUI"]
[Fri Dec 19 21:03:24.785611 2025] [:error] [pid 20675:tid 20706] [client 4.193.235.247:3736] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aUVNHLMyJ3XqeDRsbQmiFwAAARI"]
[Fri Dec 19 21:03:25.161223 2025] [:error] [pid 41451:tid 41474] [client 4.193.235.247:17644] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aUVNHQYXFn-DbZghZBHgjwAAABQ"]
[Fri Dec 19 21:03:25.492627 2025] [:error] [pid 20580:tid 20587] [client 4.193.235.247:3889] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aUVNHUmd1op_YdAdgR2j9gAAAEE"]
[Fri Dec 19 21:03:26.077541 2025] [:error] [pid 16026:tid 16052] [client 4.193.235.247:17598] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aUVNHkLVfhf4Jb3enmM8bAAAAVc"]
[Fri Dec 19 21:03:26.320063 2025] [:error] [pid 41451:tid 41465] [client 4.193.235.247:17589] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUVNHgYXFn-DbZghZBHglAAAAAs"]
[Fri Dec 19 21:03:27.533137 2025] [:error] [pid 20582:tid 20664] [client 4.193.235.247:17604] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUVNH8pAnrkQKZ4b5gY7XwAAANY"]
[Fri Dec 19 21:03:28.035932 2025] [:error] [pid 20582:tid 20655] [client 4.193.235.247:3838] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUVNIMpAnrkQKZ4b5gY7YAAAAM0"]
[Fri Dec 19 21:03:28.579972 2025] [:error] [pid 20582:tid 20646] [client 4.193.235.247:3913] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aUVNIMpAnrkQKZ4b5gY7YgAAAMQ"]
[Fri Dec 19 21:03:29.238477 2025] [:error] [pid 20675:tid 20701] [client 4.193.235.247:3747] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "aUVNIbMyJ3XqeDRsbQmiGQAAAQ0"]
[Fri Dec 19 21:03:30.073943 2025] [:error] [pid 20581:tid 20637] [client 4.193.235.247:3970] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "aUVNIvxEv7WXNhnFD1mJhgAAAJY"]
[Fri Dec 19 21:03:30.892593 2025] [:error] [pid 20581:tid 20635] [client 4.193.235.247:17544] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "aUVNIvxEv7WXNhnFD1mJhwAAAJQ"]
[Fri Dec 19 21:03:31.730027 2025] [:error] [pid 41451:tid 41464] [client 4.193.235.247:3876] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "aUVNIwYXFn-DbZghZBHglwAAAAo"]
[Fri Dec 19 21:03:32.760080 2025] [:error] [pid 20580:tid 20591] [client 4.193.235.247:17635] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aUVNJEmd1op_YdAdgR2j-wAAAEU"]
[Fri Dec 19 21:03:33.124686 2025] [:error] [pid 41451:tid 41475] [client 4.193.235.247:4084] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aUVNJQYXFn-DbZghZBHgmQAAABU"]
[Fri Dec 19 21:03:33.700626 2025] [:error] [pid 20581:tid 20615] [client 4.193.235.247:3805] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aUVNJfxEv7WXNhnFD1mJiAAAAIA"]
[Fri Dec 19 21:03:34.661661 2025] [:error] [pid 20675:tid 20696] [client 4.193.235.247:3819] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aUVNJrMyJ3XqeDRsbQmiHQAAAQg"]
[Fri Dec 19 21:03:35.501171 2025] [:error] [pid 41451:tid 41459] [client 4.193.235.247:17592] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aUVNJwYXFn-DbZghZBHgmgAAAAU"]
[Fri Dec 19 21:03:35.896289 2025] [:error] [pid 20581:tid 20638] [client 4.193.235.247:3832] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aUVNJ_xEv7WXNhnFD1mJjgAAAJc"]
[Fri Dec 19 21:03:36.662877 2025] [:error] [pid 20580:tid 20608] [client 4.193.235.247:17650] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aUVNKEmd1op_YdAdgR2kAQAAAFY"]
[Fri Dec 19 21:03:37.116710 2025] [:error] [pid 20582:tid 20663] [client 4.193.235.247:17538] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aUVNKcpAnrkQKZ4b5gY7awAAANU"]
[Fri Dec 19 21:03:37.580065 2025] [:error] [pid 20580:tid 20599] [client 4.193.235.247:17608] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "aUVNKUmd1op_YdAdgR2kAgAAAE0"]
[Fri Dec 19 21:03:38.271694 2025] [:error] [pid 16026:tid 16051] [client 4.193.235.247:3796] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "aUVNKkLVfhf4Jb3enmM8cQAAAVY"]
[Fri Dec 19 21:03:38.659023 2025] [:error] [pid 20581:tid 20625] [client 4.193.235.247:3758] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "aUVNKvxEv7WXNhnFD1mJjwAAAIo"]
[Fri Dec 19 21:03:38.961130 2025] [:error] [pid 20675:tid 20689] [client 4.193.235.247:4035] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "aUVNKrMyJ3XqeDRsbQmiIAAAAQE"]
[Fri Dec 19 21:03:43.666214 2025] [:error] [pid 41451:tid 41464] [client 4.193.235.247:4042] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUVNLwYXFn-DbZghZBHgrQAAAAo"]
[Fri Dec 19 21:03:44.055798 2025] [:error] [pid 20675:tid 20707] [client 4.193.235.247:4008] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUVNMLMyJ3XqeDRsbQmiIwAAARM"]
[Fri Dec 19 21:03:44.336402 2025] [:error] [pid 20675:tid 20702] [client 4.193.235.247:4046] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUVNMLMyJ3XqeDRsbQmiJQAAAQ4"]
[Fri Dec 19 21:03:44.621468 2025] [:error] [pid 20580:tid 20587] [client 4.193.235.247:17602] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aUVNMEmd1op_YdAdgR2kBQAAAEE"]
[Fri Dec 19 21:03:44.865138 2025] [:error] [pid 41451:tid 41459] [client 4.193.235.247:17641] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aUVNMAYXFn-DbZghZBHgrgAAAAU"]
[Fri Dec 19 21:03:45.205229 2025] [:error] [pid 20580:tid 20605] [client 4.193.235.247:3847] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aUVNMUmd1op_YdAdgR2kBgAAAFM"]
[Fri Dec 19 21:03:45.496947 2025] [:error] [pid 41451:tid 41471] [client 4.193.235.247:3884] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aUVNMQYXFn-DbZghZBHgsAAAABE"]
[Fri Dec 19 21:03:45.780891 2025] [:error] [pid 20581:tid 20621] [client 4.193.235.247:4057] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aUVNMfxEv7WXNhnFD1mJngAAAIY"]
[Fri Dec 19 21:03:46.403036 2025] [:error] [pid 41451:tid 41472] [client 4.193.235.247:3779] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aUVNMgYXFn-DbZghZBHgsQAAABI"]
[Fri Dec 19 21:03:46.696480 2025] [:error] [pid 20580:tid 20592] [client 4.193.235.247:17606] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aUVNMkmd1op_YdAdgR2kCwAAAEY"]
[Fri Dec 19 21:03:47.164430 2025] [:error] [pid 20580:tid 20588] [client 4.193.235.247:4028] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aUVNM0md1op_YdAdgR2kDAAAAEI"]
[Fri Dec 19 21:03:47.643099 2025] [:error] [pid 20580:tid 20607] [client 4.193.235.247:4050] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aUVNM0md1op_YdAdgR2kDQAAAFU"]
[Fri Dec 19 21:03:47.938107 2025] [:error] [pid 41451:tid 41474] [client 4.193.235.247:4080] [client 4.193.235.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUVNMwYXFn-DbZghZBHgtQAAABQ"]
[Fri Dec 19 21:03:48.595967 2025] [:error] [pid 20580:tid 20603] [client 4.193.235.247:3946] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aUVNNEmd1op_YdAdgR2kDwAAAFE"]
[Fri Dec 19 21:03:49.256030 2025] [:error] [pid 16026:tid 16044] [client 4.193.235.247:17563] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aUVNNULVfhf4Jb3enmM8fAAAAU8"]
[Fri Dec 19 21:03:49.877605 2025] [:error] [pid 16026:tid 16034] [client 4.193.235.247:17627] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aUVNNULVfhf4Jb3enmM8fQAAAUU"]
[Fri Dec 19 21:03:50.402314 2025] [:error] [pid 20580:tid 20590] [client 4.193.235.247:3964] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aUVNNkmd1op_YdAdgR2kEAAAAEQ"]
[Fri Dec 19 21:03:50.876042 2025] [:error] [pid 20581:tid 20636] [client 4.193.235.247:17549] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aUVNNvxEv7WXNhnFD1mJowAAAJU"]
[Fri Dec 19 21:03:51.155291 2025] [:error] [pid 20580:tid 20600] [client 4.193.235.247:3885] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aUVNN0md1op_YdAdgR2kEgAAAE4"]
[Fri Dec 19 21:03:51.462281 2025] [:error] [pid 41451:tid 41466] [client 4.193.235.247:4062] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aUVNNwYXFn-DbZghZBHgtgAAAAw"]
[Fri Dec 19 21:03:51.785035 2025] [:error] [pid 20580:tid 20602] [client 4.193.235.247:17652] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aUVNN0md1op_YdAdgR2kFAAAAFA"]
[Fri Dec 19 21:03:52.150201 2025] [:error] [pid 20581:tid 20623] [client 4.193.235.247:3773] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aUVNOPxEv7WXNhnFD1mJpAAAAIg"]
[Fri Dec 19 21:03:52.568865 2025] [:error] [pid 20580:tid 20593] [client 4.193.235.247:3782] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aUVNOEmd1op_YdAdgR2kFQAAAEc"]
[Fri Dec 19 21:03:52.869793 2025] [:error] [pid 16026:tid 16036] [client 4.193.235.247:3836] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aUVNOELVfhf4Jb3enmM8fgAAAUc"]
[Fri Dec 19 21:03:53.441082 2025] [:error] [pid 16026:tid 16053] [client 4.193.235.247:17566] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aUVNOULVfhf4Jb3enmM8fwAAAVg"]
[Fri Dec 19 21:03:53.982366 2025] [:error] [pid 18438:tid 18445] [client 4.193.235.247:17612] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aUVNOZRArClWV1iij_SWqQAAAYQ"]
[Fri Dec 19 21:03:54.244516 2025] [:error] [pid 20675:tid 20701] [client 4.193.235.247:3831] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aUVNOrMyJ3XqeDRsbQmiMwAAAQ0"]
[Fri Dec 19 21:03:54.714495 2025] [:error] [pid 20582:tid 20666] [client 4.193.235.247:3962] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aUVNOspAnrkQKZ4b5gY7bwAAANg"]
[Fri Dec 19 21:03:54.922164 2025] [:error] [pid 20582:tid 20645] [client 4.193.235.247:17624] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aUVNOspAnrkQKZ4b5gY7cAAAAMM"]
[Fri Dec 19 21:03:55.169404 2025] [:error] [pid 20580:tid 20605] [client 4.193.235.247:3891] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUVNO0md1op_YdAdgR2kFwAAAFM"]
[Fri Dec 19 21:03:55.951827 2025] [:error] [pid 18438:tid 18452] [client 4.193.235.247:3843] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUVNO5RArClWV1iij_SWqwAAAYs"]
[Fri Dec 19 21:03:56.429899 2025] [:error] [pid 18438:tid 18458] [client 4.193.235.247:3950] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUVNPJRArClWV1iij_SWrAAAAZE"]
[Fri Dec 19 21:03:56.776009 2025] [:error] [pid 20582:tid 20652] [client 4.193.235.247:3720] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aUVNPMpAnrkQKZ4b5gY7cgAAAMo"]
[Fri Dec 19 21:03:57.217109 2025] [:error] [pid 20582:tid 20650] [client 4.193.235.247:3765] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp.php"] [unique_id "aUVNPcpAnrkQKZ4b5gY7cwAAAMg"]
[Fri Dec 19 21:03:57.644680 2025] [:error] [pid 20581:tid 20624] [client 4.193.235.247:3952] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp.php"] [unique_id "aUVNPfxEv7WXNhnFD1mJpwAAAIk"]
[Fri Dec 19 21:03:57.929608 2025] [:error] [pid 20581:tid 20633] [client 4.193.235.247:3867] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp.php"] [unique_id "aUVNPfxEv7WXNhnFD1mJqgAAAJI"]
[Fri Dec 19 21:03:58.308675 2025] [:error] [pid 20581:tid 20626] [client 4.193.235.247:3999] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp.php"] [unique_id "aUVNPvxEv7WXNhnFD1mJqwAAAIs"]
[Fri Dec 19 21:03:58.794830 2025] [:error] [pid 20581:tid 20620] [client 4.193.235.247:3785] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUVNPvxEv7WXNhnFD1mJrAAAAIU"]
[Fri Dec 19 21:03:59.412144 2025] [:error] [pid 18438:tid 18449] [client 4.193.235.247:3795] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUVNP5RArClWV1iij_SWrwAAAYg"]
[Fri Dec 19 21:03:59.687685 2025] [:error] [pid 18438:tid 18451] [client 4.193.235.247:4055] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUVNP5RArClWV1iij_SWsAAAAYo"]
[Fri Dec 19 21:04:00.004974 2025] [:error] [pid 20582:tid 20654] [client 4.193.235.247:3834] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUVNQMpAnrkQKZ4b5gY7dQAAAMw"]
[Fri Dec 19 21:04:00.285949 2025] [:error] [pid 18438:tid 18443] [client 4.193.235.247:17661] [client 4.193.235.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aUVNQJRArClWV1iij_SWsQAAAYI"]
[Fri Dec 19 21:04:00.593689 2025] [:error] [pid 20582:tid 20663] [client 4.193.235.247:3806] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o2.php"] [unique_id "aUVNQMpAnrkQKZ4b5gY7dwAAANU"]
[Fri Dec 19 21:04:01.046272 2025] [:error] [pid 20580:tid 20610] [client 4.193.235.247:17582] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o2.php"] [unique_id "aUVNQUmd1op_YdAdgR2kGwAAAFg"]
[Fri Dec 19 21:04:01.727481 2025] [:error] [pid 18438:tid 18463] [client 4.193.235.247:3787] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o2.php"] [unique_id "aUVNQZRArClWV1iij_SWswAAAZY"]
[Fri Dec 19 21:04:02.539530 2025] [:error] [pid 20582:tid 20664] [client 4.193.235.247:4092] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o2.php"] [unique_id "aUVNQspAnrkQKZ4b5gY7eQAAANY"]
[Fri Dec 19 21:04:03.072480 2025] [:error] [pid 20582:tid 20653] [client 4.193.235.247:3904] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aUVNQ8pAnrkQKZ4b5gY7egAAAMs"]
[Fri Dec 19 21:04:03.564823 2025] [:error] [pid 20580:tid 20599] [client 4.193.235.247:3788] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aUVNQ0md1op_YdAdgR2kIgAAAE0"]
[Fri Dec 19 21:04:04.015191 2025] [:error] [pid 20581:tid 20616] [client 4.193.235.247:17634] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aUVNRPxEv7WXNhnFD1mJrgAAAIE"]
[Fri Dec 19 21:04:05.147401 2025] [:error] [pid 18438:tid 18446] [client 4.193.235.247:17658] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aUVNRZRArClWV1iij_SWuQAAAYU"]
[Fri Dec 19 21:04:06.082341 2025] [:error] [pid 20582:tid 20646] [client 4.193.235.247:17542] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUVNRspAnrkQKZ4b5gY7fQAAAMQ"]
[Fri Dec 19 21:04:06.693583 2025] [:error] [pid 18438:tid 18441] [client 4.193.235.247:3727] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUVNRpRArClWV1iij_SWugAAAYA"]
[Fri Dec 19 21:04:07.241920 2025] [:error] [pid 20582:tid 20658] [client 4.193.235.247:3857] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUVNR8pAnrkQKZ4b5gY7fgAAANA"]
[Fri Dec 19 21:04:07.689872 2025] [:error] [pid 20582:tid 20648] [client 4.193.235.247:17547] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aUVNR8pAnrkQKZ4b5gY7fwAAAMY"]
[Fri Dec 19 21:04:08.008803 2025] [:error] [pid 16026:tid 16047] [client 4.193.235.247:17651] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aUVNSELVfhf4Jb3enmM8hgAAAVI"]
[Fri Dec 19 21:04:08.654194 2025] [:error] [pid 20582:tid 20644] [client 4.193.235.247:3852] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aUVNSMpAnrkQKZ4b5gY7gAAAAMI"]
[Fri Dec 19 21:04:09.421935 2025] [:error] [pid 18438:tid 18451] [client 4.193.235.247:3783] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aUVNSZRArClWV1iij_SWvQAAAYo"]
[Fri Dec 19 21:04:10.362071 2025] [:error] [pid 20581:tid 20629] [client 4.193.235.247:3764] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aUVNSvxEv7WXNhnFD1mJswAAAI4"]
[Fri Dec 19 21:04:11.326207 2025] [:error] [pid 16026:tid 16031] [client 4.193.235.247:4093] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aUVNS0LVfhf4Jb3enmM8iQAAAUI"]
[Fri Dec 19 21:04:11.896948 2025] [:error] [pid 41451:tid 41454] [client 4.193.235.247:17569] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aUVNSwYXFn-DbZghZBHgvwAAAAA"]
[Fri Dec 19 21:04:12.556767 2025] [:error] [pid 20675:tid 20698] [client 4.193.235.247:17625] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aUVNTLMyJ3XqeDRsbQmiQAAAAQo"]
[Fri Dec 19 21:04:13.827915 2025] [:error] [pid 41451:tid 41472] [client 4.193.235.247:17599] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aUVNTQYXFn-DbZghZBHgwAAAABI"]
[Fri Dec 19 21:04:14.287685 2025] [:error] [pid 20675:tid 20708] [client 4.193.235.247:3835] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aUVNTrMyJ3XqeDRsbQmiQgAAARQ"]
[Fri Dec 19 21:04:14.814139 2025] [:error] [pid 20581:tid 20637] [client 4.193.235.247:4067] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aUVNTvxEv7WXNhnFD1mJtQAAAJY"]
[Fri Dec 19 21:04:15.295157 2025] [:error] [pid 20581:tid 20615] [client 4.193.235.247:17628] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aUVNT_xEv7WXNhnFD1mJtwAAAIA"]
[Fri Dec 19 21:04:15.966661 2025] [:error] [pid 20581:tid 20626] [client 4.193.235.247:3737] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ouh.php"] [unique_id "aUVNT_xEv7WXNhnFD1mJuAAAAIs"]
[Fri Dec 19 21:04:16.570435 2025] [:error] [pid 18438:tid 18455] [client 4.193.235.247:17617] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aUVNUJRArClWV1iij_SWwwAAAY4"]
[Fri Dec 19 21:04:17.506020 2025] [:error] [pid 18438:tid 18462] [client 4.193.235.247:17570] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aUVNUZRArClWV1iij_SWxAAAAZU"]
[Fri Dec 19 21:04:18.879845 2025] [:error] [pid 16026:tid 16034] [client 4.193.235.247:17660] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aUVNUkLVfhf4Jb3enmM8jgAAAUU"]
[Fri Dec 19 21:04:19.335547 2025] [:error] [pid 20675:tid 20711] [client 4.193.235.247:17551] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aUVNU7MyJ3XqeDRsbQmiQwAAARc"]
[Fri Dec 19 21:04:19.673229 2025] [:error] [pid 41451:tid 41460] [client 4.193.235.247:3801] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aUVNUwYXFn-DbZghZBHgxQAAAAY"]
[Fri Dec 19 21:04:20.069004 2025] [:error] [pid 20580:tid 20587] [client 4.193.235.247:3824] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aUVNVEmd1op_YdAdgR2kLgAAAEE"]
[Fri Dec 19 21:04:20.612240 2025] [:error] [pid 20581:tid 20621] [client 4.193.235.247:4073] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aUVNVPxEv7WXNhnFD1mJuwAAAIY"]
[Fri Dec 19 21:04:20.970815 2025] [:error] [pid 20581:tid 20635] [client 4.193.235.247:3897] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aUVNVPxEv7WXNhnFD1mJvQAAAJQ"]
[Fri Dec 19 21:04:21.507320 2025] [:error] [pid 18438:tid 18461] [client 4.193.235.247:17590] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tgrs.php"] [unique_id "aUVNVZRArClWV1iij_SWzAAAAZQ"]
[Fri Dec 19 21:04:22.213680 2025] [:error] [pid 41451:tid 41457] [client 4.193.235.247:4085] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tgrs.php"] [unique_id "aUVNVgYXFn-DbZghZBHgxwAAAAM"]
[Fri Dec 19 21:04:22.797520 2025] [:error] [pid 20675:tid 20705] [client 4.193.235.247:3760] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tgrs.php"] [unique_id "aUVNVrMyJ3XqeDRsbQmiRgAAARE"]
[Fri Dec 19 21:04:26.409475 2025] [:error] [pid 20580:tid 20590] [client 4.193.235.247:3844] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tgrs.php"] [unique_id "aUVNWkmd1op_YdAdgR2kPwAAAEQ"]
[Fri Dec 19 21:04:27.435752 2025] [:error] [pid 16026:tid 16047] [client 4.193.235.247:4075] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "aUVNW0LVfhf4Jb3enmM8lQAAAVI"]
[Fri Dec 19 21:04:27.846639 2025] [:error] [pid 20580:tid 20599] [client 4.193.235.247:17583] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "aUVNW0md1op_YdAdgR2kQAAAAE0"]
[Fri Dec 19 21:04:28.769868 2025] [:error] [pid 18438:tid 18453] [client 4.193.235.247:3791] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "aUVNXJRArClWV1iij_SWzgAAAYw"]
[Fri Dec 19 21:04:29.732779 2025] [:error] [pid 20582:tid 20653] [client 4.193.235.247:17543] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "aUVNXcpAnrkQKZ4b5gY7mQAAAMs"]
[Fri Dec 19 21:04:30.005238 2025] [:error] [pid 20582:tid 20659] [client 4.193.235.247:17552] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aUVNXspAnrkQKZ4b5gY7mwAAANE"]
[Fri Dec 19 21:04:30.389935 2025] [:error] [pid 18438:tid 18455] [client 4.193.235.247:4051] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aUVNXpRArClWV1iij_SW0AAAAY4"]
[Fri Dec 19 21:04:31.285602 2025] [:error] [pid 16026:tid 16050] [client 4.193.235.247:3934] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aUVNX0LVfhf4Jb3enmM8mQAAAVU"]
[Fri Dec 19 21:04:32.274740 2025] [:error] [pid 41451:tid 41471] [client 4.193.235.247:4091] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aUVNYAYXFn-DbZghZBHgzgAAABE"]
[Fri Dec 19 21:04:33.166794 2025] [:error] [pid 20581:tid 20637] [client 4.193.235.247:3723] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aUVNYfxEv7WXNhnFD1mJxQAAAJY"]
[Fri Dec 19 21:04:34.579136 2025] [:error] [pid 20582:tid 20666] [client 4.193.235.247:4020] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aUVNYspAnrkQKZ4b5gY7nwAAANg"]
[Fri Dec 19 21:04:35.360675 2025] [:error] [pid 16026:tid 16040] [client 4.193.235.247:3726] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aUVNY0LVfhf4Jb3enmM8oAAAAUs"]
[Fri Dec 19 21:04:35.639067 2025] [:error] [pid 41451:tid 41466] [client 4.193.235.247:17568] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aUVNYwYXFn-DbZghZBHg0gAAAAw"]
[Fri Dec 19 21:04:35.932175 2025] [:error] [pid 20582:tid 20642] [client 4.193.235.247:3995] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aUVNY8pAnrkQKZ4b5gY7oQAAAMA"]
[Fri Dec 19 21:04:36.516240 2025] [:error] [pid 18438:tid 18458] [client 4.193.235.247:3716] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aUVNZJRArClWV1iij_SW2QAAAZE"]
[Fri Dec 19 21:04:37.076392 2025] [:error] [pid 20581:tid 20631] [client 4.193.235.247:4047] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aUVNZfxEv7WXNhnFD1mJyAAAAJA"]
[Fri Dec 19 21:04:37.597850 2025] [:error] [pid 20582:tid 20657] [client 4.193.235.247:3929] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aUVNZcpAnrkQKZ4b5gY7pgAAAM8"]
[Fri Dec 19 21:04:38.067396 2025] [:error] [pid 20581:tid 20618] [client 4.193.235.247:3721] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxz.php"] [unique_id "aUVNZvxEv7WXNhnFD1mJyQAAAIM"]
[Fri Dec 19 21:04:38.740429 2025] [:error] [pid 16026:tid 16039] [client 4.193.235.247:3868] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxz.php"] [unique_id "aUVNZkLVfhf4Jb3enmM8ogAAAUo"]
[Fri Dec 19 21:04:39.496666 2025] [:error] [pid 41451:tid 41460] [client 4.193.235.247:3713] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxz.php"] [unique_id "aUVNZwYXFn-DbZghZBHg1QAAAAY"]
[Fri Dec 19 21:04:39.748987 2025] [:error] [pid 41451:tid 41461] [client 4.193.235.247:3821] [client 4.193.235.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxz.php"] [unique_id "aUVNZwYXFn-DbZghZBHg1gAAAAc"]
[Fri Dec 19 22:19:29.792413 2025] [:error] [pid 20581:tid 20630] [client 4.213.154.99:42299] [client 4.213.154.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aUVe8fxEv7WXNhnFD1mcVwAAAI8"]
[Fri Dec 19 22:19:32.950682 2025] [:error] [pid 16026:tid 16030] [client 4.213.154.99:42191] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/er.php"] [unique_id "aUVe9ELVfhf4Jb3enmNRxAAAAUE"]
[Fri Dec 19 22:19:37.872222 2025] [:error] [pid 16026:tid 16032] [client 4.213.154.99:52823] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/er.php"] [unique_id "aUVe-ULVfhf4Jb3enmNRyAAAAUM"]
[Fri Dec 19 22:19:39.751382 2025] [:error] [pid 20675:tid 20705] [client 4.213.154.99:52834] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/er.php"] [unique_id "aUVe-7MyJ3XqeDRsbQm0zwAAARE"]
[Fri Dec 19 22:19:44.211899 2025] [:error] [pid 20580:tid 20593] [client 4.213.154.99:52808] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/er.php"] [unique_id "aUVfAEmd1op_YdAdgR22qAAAAEc"]
[Fri Dec 19 22:19:47.938056 2025] [:error] [pid 20582:tid 20643] [client 4.213.154.99:12795] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aUVfA8pAnrkQKZ4b5gZVogAAAME"]
[Fri Dec 19 22:19:49.455919 2025] [:error] [pid 20582:tid 20651] [client 4.213.154.99:5969] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aUVfBcpAnrkQKZ4b5gZVqAAAAMk"]
[Fri Dec 19 22:19:51.947706 2025] [:error] [pid 20675:tid 20712] [client 4.213.154.99:42214] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aUVfB7MyJ3XqeDRsbQm06QAAARg"]
[Fri Dec 19 22:19:53.232175 2025] [:error] [pid 18438:tid 18462] [client 4.213.154.99:12772] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aUVfCZRArClWV1iij_S0vgAAAZU"]
[Fri Dec 19 22:20:17.173313 2025] [:error] [pid 18438:tid 18457] [client 4.213.154.99:39163] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testphp.php"] [unique_id "aUVfIZRArClWV1iij_S1FAAAAZA"]
[Fri Dec 19 22:20:18.293172 2025] [:error] [pid 18438:tid 18464] [client 4.213.154.99:39137] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testphp.php"] [unique_id "aUVfIpRArClWV1iij_S1GQAAAZc"]
[Fri Dec 19 22:20:27.661656 2025] [:error] [pid 18438:tid 18455] [client 4.213.154.99:15673] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logo_img.php"] [unique_id "aUVfK5RArClWV1iij_S1OQAAAY4"]
[Fri Dec 19 22:21:20.009659 2025] [:error] [pid 20675:tid 20692] [client 4.213.154.99:5352] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aUVfYLMyJ3XqeDRsbQm1YwAAAQQ"]
[Fri Dec 19 22:21:26.739719 2025] [:error] [pid 20675:tid 20707] [client 4.213.154.99:13075] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aUVfZrMyJ3XqeDRsbQm1ZgAAARM"]
[Fri Dec 19 22:21:28.332156 2025] [:error] [pid 41451:tid 41469] [client 4.213.154.99:17584] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aUVfaAYXFn-DbZghZBHzSQAAAA8"]
[Fri Dec 19 22:21:52.587412 2025] [:error] [pid 20580:tid 20595] [client 4.213.154.99:52505] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mob.php"] [unique_id "aUVfgEmd1op_YdAdgR23aAAAAEk"]
[Fri Dec 19 22:22:04.040807 2025] [:error] [pid 16026:tid 16053] [client 4.213.154.99:12522] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mob.php"] [unique_id "aUVfjELVfhf4Jb3enmNTEwAAAVg"]
[Fri Dec 19 22:22:05.482710 2025] [:error] [pid 20581:tid 20633] [client 4.213.154.99:52482] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mob.php"] [unique_id "aUVfjfxEv7WXNhnFD1mdRAAAAJI"]
[Fri Dec 19 22:22:36.522370 2025] [:error] [pid 20582:tid 20646] [client 4.213.154.99:6021] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer-4.7.1.php"] [unique_id "aUVfrMpAnrkQKZ4b5gZXAgAAAMQ"]
[Fri Dec 19 22:22:39.031916 2025] [:error] [pid 20581:tid 20623] [client 4.213.154.99:11690] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer-4.7.1.php"] [unique_id "aUVfr_xEv7WXNhnFD1mdZwAAAIg"]
[Fri Dec 19 22:22:53.013223 2025] [:error] [pid 18438:tid 18443] [client 4.213.154.99:42300] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer-4.7.2.php"] [unique_id "aUVfvZRArClWV1iij_S2jwAAAYI"]
[Fri Dec 19 22:23:12.312463 2025] [:error] [pid 20580:tid 20597] [client 4.213.154.99:11655] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer-4.7.3.php"] [unique_id "aUVf0Emd1op_YdAdgR23vAAAAEs"]
[Sat Dec 20 00:16:49.794989 2025] [:error] [pid 35711:tid 35717] [client 38.127.60.228:52415] [client 38.127.60.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 38.127.60.228, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUV6cSxTWUmlILwAM_ea-QAAAAQ"]
[Sat Dec 20 03:44:55.295909 2025] [:error] [pid 57408:tid 57485] [client 43.135.183.82:60156] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUWrNwL22NmTLiOJ8nOozAAAAJI"]
[Sat Dec 20 05:34:03.362842 2025] [:error] [pid 18807:tid 18823] [client 121.229.185.160:36601] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUXEy2RP9n5OCTllYeXYgAAAAY4"]
[Sat Dec 20 07:35:53.930855 2025] [:error] [pid 14286:tid 14306] [client 45.86.202.81:24949] [client 45.86.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUXhWZ7rbXIrw6rGSda6agAAAVA"]
[Sat Dec 20 07:35:55.370577 2025] [:error] [pid 39493:tid 39551] [client 45.86.202.84:58493] [client 45.86.202.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUXhW2hjL2VG_FmIHqAb_wAAAII"]
[Sat Dec 20 07:35:57.825861 2025] [:error] [pid 39491:tid 39514] [client 45.86.202.85:45679] [client 45.86.202.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUXhXVtw2ggYvDxu2EDRkQAAABM"]
[Sat Dec 20 07:35:59.341190 2025] [:error] [pid 39577:tid 39598] [client 45.86.202.63:24247] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUXhX7viRnt1rJiSOfyVCgAAANM"]
[Sat Dec 20 07:36:02.080869 2025] [:error] [pid 39492:tid 39545] [client 45.86.202.65:33779] [client 45.86.202.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUXhYos_ZYP1UQNM9hammwAAAFc"]
[Sat Dec 20 07:36:03.055756 2025] [:error] [pid 39491:tid 39517] [client 45.86.202.83:34435] [client 45.86.202.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUXhY1tw2ggYvDxu2EDRrgAAABY"]
[Sat Dec 20 07:36:03.704400 2025] [:error] [pid 39577:tid 39603] [client 45.86.202.71:44539] [client 45.86.202.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUXhY7viRnt1rJiSOfyVHgAAANg"]
[Sat Dec 20 07:36:04.350909 2025] [:error] [pid 14286:tid 14296] [client 45.86.202.86:27931] [client 45.86.202.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUXhZJ7rbXIrw6rGSda6wQAAAUY"]
[Sat Dec 20 07:36:06.130625 2025] [:error] [pid 39492:tid 39531] [client 45.86.202.83:39635] [client 45.86.202.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUXhZos_ZYP1UQNM9hampwAAAEk"]
[Sat Dec 20 07:36:07.859643 2025] [:error] [pid 39491:tid 39516] [client 45.86.202.60:61179] [client 45.86.202.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUXhZ1tw2ggYvDxu2EDRwQAAABU"]
[Sat Dec 20 07:36:08.878503 2025] [:error] [pid 18807:tid 18814] [client 45.86.202.75:48115] [client 45.86.202.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUXhaGRP9n5OCTllYeUDXwAAAYU"]
[Sat Dec 20 07:36:10.179447 2025] [:error] [pid 18807:tid 18828] [client 45.86.202.64:45685] [client 45.86.202.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aUXhamRP9n5OCTllYeUDagAAAZM"]
[Sat Dec 20 07:44:30.006455 2025] [:error] [pid 18807:tid 18819] [client 45.86.202.63:53187] [client 45.86.202.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUXjXmRP9n5OCTllYeUg1AAAAYo"]
[Sat Dec 20 07:44:31.531598 2025] [:error] [pid 39577:tid 39586] [client 45.86.202.52:39105] [client 45.86.202.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUXjX7viRnt1rJiSOfyxJQAAAMc"]
[Sat Dec 20 09:32:15.591369 2025] [:error] [pid 39492:tid 39533] [client 43.135.145.73:36624] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUX8n4s_ZYP1UQNM9hbjKwAAAEs"]
[Sat Dec 20 11:31:01.817490 2025] [:error] [pid 39493:tid 39551] [client 180.110.203.108:39511] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUYYdWhjL2VG_FmIHqB3owAAAII"]
[Sat Dec 20 11:55:43.672031 2025] [:error] [pid 18807:tid 18822] [client 56.125.9.19:44688] [client 56.125.9.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_next/data"] [unique_id "aUYeP2RP9n5OCTllYeV7bwAAAY0"]
[Sat Dec 20 11:55:45.294334 2025] [:error] [pid 39493:tid 39569] [client 56.125.9.19:44772] [client 56.125.9.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUYeQWhjL2VG_FmIHqB8vgAAAJQ"]
[Sat Dec 20 19:59:15.710312 2025] [:error] [pid 33570:tid 33577] [client 43.164.197.177:46024] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUaPk4TNveA-c6YcSrL8kQAAAcE"]
[Sat Dec 20 21:48:12.512268 2025] [:error] [pid 33570:tid 33579] [client 85.203.34.43:43843] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUapHITNveA-c6YcSrIaBwAAAcM"]
[Sat Dec 20 21:48:13.624155 2025] [:error] [pid 39577:tid 39585] [client 85.203.34.12:45333] [client 85.203.34.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUapHbviRnt1rJiSOfxzvAAAAMY"]
[Sat Dec 20 21:48:16.108063 2025] [:error] [pid 62124:tid 62131] [client 185.92.25.139:60155] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aUapIFs94zPA9ULQOjmLPAAAAAU"]
[Sat Dec 20 21:48:17.365957 2025] [:error] [pid 33844:tid 33865] [client 85.203.34.25:40009] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aUapISaNtwGsyqqVmQEC3QAAAxM"]
[Sat Dec 20 21:48:17.958041 2025] [:error] [pid 39577:tid 39585] [client 185.92.25.139:37217] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aUapIbviRnt1rJiSOfxz-wAAAMY"]
[Sat Dec 20 21:48:18.549184 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.13:63045] [client 85.203.34.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aUapItoInXJnb96wei9wiwAAAoI"]
[Sat Dec 20 21:48:19.505331 2025] [:error] [pid 33687:tid 33707] [client 85.203.34.44:28845] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUapIzYMR4qK1N4g7vjbagAAAlE"]
[Sat Dec 20 21:48:20.390098 2025] [:error] [pid 33793:tid 33817] [client 85.203.34.22:65379] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUapJFSicyB0BFmbRMze4wAAAtY"]
[Sat Dec 20 21:48:22.883806 2025] [:error] [pid 33687:tid 33704] [client 85.203.34.33:62137] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUapJjYMR4qK1N4g7vjbgQAAAk4"]
[Sat Dec 20 21:48:23.476060 2025] [:error] [pid 33687:tid 33692] [client 85.203.34.24:61237] [client 85.203.34.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUapJzYMR4qK1N4g7vjbhAAAAkI"]
[Sat Dec 20 21:48:33.232611 2025] [:error] [pid 33749:tid 33769] [client 85.203.34.11:44285] [client 85.203.34.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sigunq.php"] [unique_id "aUapMdoInXJnb96wei9xuwAAApI"]
[Sat Dec 20 21:48:34.161873 2025] [:error] [pid 33749:tid 33766] [client 85.203.34.47:55763] [client 85.203.34.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso112233.php"] [unique_id "aUapMtoInXJnb96wei9xyAAAAo8"]
[Sat Dec 20 21:48:36.937194 2025] [:error] [pid 33687:tid 33708] [client 85.203.34.17:40117] [client 85.203.34.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.17, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUapNDYMR4qK1N4g7vjb_gAAAlI"]
[Sat Dec 20 21:48:38.474500 2025] [:error] [pid 33687:tid 33712] [client 85.203.34.17:40117] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aUapNjYMR4qK1N4g7vjcFgAAAlY"]
[Sat Dec 20 21:48:39.126084 2025] [:error] [pid 33570:tid 33585] [client 85.203.34.26:64655] [client 85.203.34.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olux.php"] [unique_id "aUapN4TNveA-c6YcSrIbhQAAAck"]
[Sat Dec 20 21:48:42.794498 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.35:45495] [client 85.203.34.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yoi.php"] [unique_id "aUapOtoInXJnb96wei9ymwAAApA"]
[Sat Dec 20 21:48:43.943630 2025] [:error] [pid 39493:tid 39573] [client 85.203.34.10:25443] [client 85.203.34.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aUapO2hjL2VG_FmIHqAJkAAAAJg"]
[Sat Dec 20 21:48:47.370116 2025] [:error] [pid 39493:tid 39564] [client 85.203.34.36:62455] [client 85.203.34.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/old-index.php"] [unique_id "aUapP2hjL2VG_FmIHqAJwAAAAI8"]
[Sat Dec 20 21:48:54.494947 2025] [:error] [pid 33687:tid 33713] [client 85.203.34.16:43359] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aUapRjYMR4qK1N4g7vjdEgAAAlc"]
[Sat Dec 20 21:49:06.395787 2025] [:error] [pid 14286:tid 14309] [client 85.203.34.6:45785] [client 85.203.34.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "aUapUp7rbXIrw6rGSdaTUwAAAVM"]
[Sat Dec 20 21:49:21.513768 2025] [:error] [pid 14247:tid 14251] [client 85.203.34.44:43345] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aUapYSDv9TtKKdJQn9ki5QAAAQI"]
[Sat Dec 20 21:49:30.674012 2025] [:error] [pid 14286:tid 14311] [client 85.203.34.8:38875] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUapap7rbXIrw6rGSdaVLAAAAVU"]
[Sat Dec 20 21:49:31.327830 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.49:37297] [client 85.203.34.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.34.49, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUapa9oInXJnb96wei94cwAAAoQ"]
[Sat Dec 20 21:49:32.225511 2025] [:error] [pid 33749:tid 33766] [client 85.203.34.49:37297] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUapbNoInXJnb96wei94ngAAAo8"]
[Sat Dec 20 21:49:35.289676 2025] [:error] [pid 39577:tid 39580] [client 85.203.34.46:51191] [client 85.203.34.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aUapb7viRnt1rJiSOfx4ggAAAME"]
[Sat Dec 20 21:49:36.207371 2025] [:error] [pid 39493:tid 39554] [client 85.203.34.28:36809] [client 85.203.34.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUapcGhjL2VG_FmIHqALqgAAAIU"]
[Sat Dec 20 21:49:36.810137 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.17:37269] [client 85.203.34.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gebase.php"] [unique_id "aUapcNoInXJnb96wei95GQAAAok"]
[Sat Dec 20 21:49:55.443185 2025] [autoindex:error] [pid 33749:tid 33771] [client 85.203.34.46:63095] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:50:19.894089 2025] [:error] [pid 33749:tid 33756] [client 85.203.34.46:63095] [client 85.203.34.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mt/"] [unique_id "aUapm9oInXJnb96wei98fQAAAoU"]
[Sat Dec 20 21:50:23.133586 2025] [:error] [pid 33749:tid 33769] [client 85.203.34.26:45337] [client 85.203.34.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aUapn9oInXJnb96wei98oAAAApI"]
[Sat Dec 20 21:50:58.046903 2025] [:error] [pid 33793:tid 33808] [client 85.203.34.23:21771] [client 85.203.34.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/patriotic/wp-includes/images/smilies/"] [unique_id "aUapwlSicyB0BFmbRMzkigAAAs0"]
[Sat Dec 20 21:51:02.265603 2025] [:error] [pid 14247:tid 14263] [client 85.203.34.8:28515] [client 85.203.34.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/simple-file-list/"] [unique_id "aUapxiDv9TtKKdJQn9kmVQAAAQ4"]
[Sat Dec 20 21:51:21.861184 2025] [:error] [pid 62124:tid 62148] [client 85.203.34.30:55015] [client 85.203.34.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/pridmag/"] [unique_id "aUap2Vs94zPA9ULQOjmTAQAAABY"]
[Sat Dec 20 21:51:32.642467 2025] [:error] [pid 33687:tid 33708] [client 85.203.34.7:27381] [client 85.203.34.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/"] [unique_id "aUap5DYMR4qK1N4g7vjidQAAAlI"]
[Sat Dec 20 21:51:46.917991 2025] [:error] [pid 33687:tid 33697] [client 85.203.34.11:36179] [client 85.203.34.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-content/"] [unique_id "aUap8jYMR4qK1N4g7vjjDAAAAkc"]
[Sat Dec 20 21:51:59.208638 2025] [:error] [pid 33687:tid 33690] [client 85.203.34.30:27101] [client 85.203.34.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/exe/"] [unique_id "aUap_zYMR4qK1N4g7vjjigAAAkA"]
[Sat Dec 20 21:52:29.120710 2025] [authz_core:error] [pid 33749:tid 33756] [client 85.203.34.40:60281] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/
[Sun Dec 21 00:22:12.215253 2025] [:error] [pid 8641:tid 8680] [client 182.43.70.143:54267] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUbNNHE703usYSvQGLRJ0QAAAMI"]
[Sun Dec 21 01:13:56.812823 2025] [:error] [pid 8640:tid 8653] [client 45.88.186.197:58104] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUbZVPVclzlEWWhvYtlgCAAAAIM"]
[Sun Dec 21 01:13:57.241210 2025] [:error] [pid 8640:tid 8653] [client 45.88.186.197:58233] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUbZVfVclzlEWWhvYtlgGgAAAIM"]
[Sun Dec 21 01:13:57.667621 2025] [:error] [pid 8641:tid 8709] [client 45.88.186.197:58392] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUbZVXE703usYSvQGLRX0gAAANg"]
[Sun Dec 21 01:13:58.093772 2025] [:error] [pid 8751:tid 8771] [client 45.88.186.197:58561] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUbZVmvrnuGjNP7vtDQXlAAAABI"]
[Sun Dec 21 01:13:58.504617 2025] [:error] [pid 8641:tid 8695] [client 45.88.186.197:58737] [client 45.88.186.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUbZVnE703usYSvQGLRYCwAAANA"]
[Sun Dec 21 01:24:39.402320 2025] [:error] [pid 8751:tid 8763] [client 31.171.130.134:44807] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbb12vrnuGjNP7vtDQjEQAAAAo"]
[Sun Dec 21 01:24:41.360917 2025] [:error] [pid 8751:tid 8761] [client 31.171.130.118:52623] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbb2WvrnuGjNP7vtDQjIQAAAAg"]
[Sun Dec 21 01:24:44.823162 2025] [:error] [pid 8642:tid 8710] [client 31.171.130.144:31849] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUbb3CJkiik8k41igp0M7wAAAQY"]
[Sun Dec 21 01:24:46.827837 2025] [:error] [pid 8751:tid 8761] [client 31.171.130.150:31513] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUbb3mvrnuGjNP7vtDQjRAAAAAg"]
[Sun Dec 21 02:33:15.948776 2025] [:error] [pid 8642:tid 8722] [client 31.171.130.115:65457] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbr6yJkiik8k41igp0qowAAARE"]
[Sun Dec 21 02:33:24.642431 2025] [:error] [pid 8640:tid 8659] [client 31.171.130.135:30481] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbr9PVclzlEWWhvYtmCOwAAAIk"]
[Sun Dec 21 02:33:27.322238 2025] [:error] [pid 8640:tid 8658] [client 31.171.130.158:32975] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUbr9_VclzlEWWhvYtmCWgAAAIg"]
[Sun Dec 21 02:33:28.896457 2025] [:error] [pid 8641:tid 8687] [client 31.171.130.158:30183] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUbr-HE703usYSvQGLR6AAAAAMk"]
[Sun Dec 21 02:33:31.401225 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.137:52873] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUbr-3GYQSUt-opKpSI5ywAAAEE"]
[Sun Dec 21 02:33:32.276524 2025] [:error] [pid 8642:tid 8728] [client 31.171.130.108:65109] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUbr_CJkiik8k41igp0rJQAAARc"]
[Sun Dec 21 02:33:32.847948 2025] [:error] [pid 8642:tid 8706] [client 31.171.130.154:43083] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUbr_CJkiik8k41igp0rKQAAAQQ"]
[Sun Dec 21 02:33:33.462016 2025] [:error] [pid 22338:tid 22386] [client 31.171.130.151:26025] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUbr_XGYQSUt-opKpSI53AAAAEI"]
[Sun Dec 21 02:33:36.304188 2025] [:error] [pid 8751:tid 8754] [client 31.171.130.119:36211] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUbsAGvrnuGjNP7vtDRSZwAAAAE"]
[Sun Dec 21 02:33:37.924610 2025] [:error] [pid 8640:tid 8657] [client 31.171.130.113:32813] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUbsAfVclzlEWWhvYtmCoAAAAIc"]
[Sun Dec 21 02:33:38.944196 2025] [:error] [pid 8642:tid 8711] [client 31.171.130.140:23611] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUbsAiJkiik8k41igp0rVQAAAQc"]
[Sun Dec 21 02:33:40.631676 2025] [:error] [pid 8640:tid 8656] [client 31.171.130.152:20629] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aUbsBPVclzlEWWhvYtmCtQAAAIY"]
[Sun Dec 21 02:33:43.152174 2025] [:error] [pid 8751:tid 8757] [client 31.171.130.141:55137] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUbsB2vrnuGjNP7vtDRStQAAAAQ"]
[Sun Dec 21 03:56:11.872773 2025] [:error] [pid 4234:tid 4280] [client 4.217.198.247:40053] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUb_W6s5ui4Qy27_hFvDyQAAAE0"], referer: https://www.google.co.uk/
[Sun Dec 21 03:56:12.438501 2025] [:error] [pid 4233:tid 4245] [client 4.217.198.247:28449] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aUb_XAXlvcWfhZ1lUYDGGwAAAAY"], referer: https://www.google.de/
[Sun Dec 21 03:56:22.624870 2025] [:error] [pid 4233:tid 4248] [client 4.217.198.247:50280] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUb_ZgXlvcWfhZ1lUYDGYAAAAAk"], referer: https://www.google.co.uk/
[Sun Dec 21 03:56:22.958669 2025] [:error] [pid 4234:tid 4270] [client 4.217.198.247:40039] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUb_Zqs5ui4Qy27_hFvDzQAAAEM"], referer: https://duckduckgo.com/
[Sun Dec 21 03:56:23.930308 2025] [:error] [pid 4234:tid 4278] [client 4.217.198.247:8981] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aUb_Z6s5ui4Qy27_hFvD0QAAAEs"], referer: https://www.google.fr/
[Sun Dec 21 03:56:24.913970 2025] [:error] [pid 4235:tid 4298] [client 4.217.198.247:40016] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUb_aNLhWAOVeq6dz8jFZwAAAIQ"], referer: https://www.google.fr/
[Sun Dec 21 03:56:25.260248 2025] [:error] [pid 4327:tid 4335] [client 4.217.198.247:8527] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aUb_aRQRtObbdSDBjAqQKwAAAMY"], referer: https://www.google.de/
[Sun Dec 21 03:56:25.609709 2025] [:error] [pid 4327:tid 4338] [client 4.217.198.247:28447] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUb_aRQRtObbdSDBjAqQLAAAAMk"], referer: https://www.google.com/
[Sun Dec 21 03:56:25.962706 2025] [:error] [pid 4235:tid 4308] [client 4.217.198.247:9040] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aUb_adLhWAOVeq6dz8jFaAAAAI4"], referer: https://duckduckgo.com/
[Sun Dec 21 03:56:26.300126 2025] [:error] [pid 4234:tid 4268] [client 4.217.198.247:57602] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUb_aqs5ui4Qy27_hFvD0gAAAEE"], referer: https://www.google.co.uk/
[Sun Dec 21 03:56:27.016327 2025] [:error] [pid 4235:tid 4295] [client 4.217.198.247:8571] [client 4.217.198.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUb_a9LhWAOVeq6dz8jFagAAAIE"], referer: https://www.google.fr/
[Sun Dec 21 06:08:57.620723 2025] [:error] [pid 12191:tid 12207] [client 223.185.27.64:31755] [client 223.185.27.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.27.64, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUceeQM0m463UZmqdiD1UAAAAQ4"]
[Sun Dec 21 06:43:24.902105 2025] [:error] [pid 20674:tid 20682] [client 103.65.236.149:63279] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aUcmjNhSbhHOCK6TAw8lFAAAAAQ"]
[Sun Dec 21 06:43:25.480479 2025] [:error] [pid 16016:tid 16029] [client 103.65.236.149:53533] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aUcmjcHQ_KQh3iINaCOgWAAAAUs"]
[Sun Dec 21 07:34:17.535515 2025] [:error] [pid 20760:tid 20778] [client 185.223.152.179:41327] [client 185.223.152.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.179, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUcyeeXEVvRTAtWo3gnKYAAAAM8"]
[Sun Dec 21 12:20:33.500856 2025] [:error] [pid 20760:tid 20777] [client 43.138.68.113:51060] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUd1keXEVvRTAtWo3gkH4gAAAM4"]
[Sun Dec 21 14:20:20.671314 2025] [autoindex:error] [pid 60191:tid 60211] [client 83.171.248.79:55332] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 21 14:30:33.466619 2025] [:error] [pid 16016:tid 16041] [client 16.146.22.21:55520] [client 16.146.22.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 16.146.22.21, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUeUCcHQ_KQh3iINaCM2aAAAAVc"]
[Sun Dec 21 14:30:37.727626 2025] [:error] [pid 16016:tid 16023] [client 16.146.22.21:55520] [client 16.146.22.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aUeUDcHQ_KQh3iINaCM2dgAAAUU"]
[Sun Dec 21 14:30:39.184791 2025] [:error] [pid 20676:tid 20737] [client 16.146.22.21:53381] [client 16.146.22.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aUeUD6pSa967F4pOO5w33QAAAIQ"]
[Sun Dec 21 14:30:41.606619 2025] [:error] [pid 20675:tid 20720] [client 16.146.22.21:57889] [client 16.146.22.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aUeUEbyUvZnd3bHSR3Z1sAAAAE4"]
[Sun Dec 21 14:30:42.562092 2025] [:error] [pid 60191:tid 60203] [client 16.146.22.21:61617] [client 16.146.22.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aUeUEqklhK29C3vVvLVHygAAAYo"]
[Sun Dec 21 14:30:43.479979 2025] [:error] [pid 20674:tid 20689] [client 16.146.22.21:53739] [client 16.146.22.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aUeUE9hSbhHOCK6TAw-CfAAAAAs"]
[Sun Dec 21 14:30:44.944986 2025] [:error] [pid 20674:tid 20699] [client 16.146.22.21:52584] [client 16.146.22.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aUeUFNhSbhHOCK6TAw-CfwAAABU"]
[Sun Dec 21 14:30:45.785138 2025] [:error] [pid 20675:tid 20713] [client 16.146.22.21:57897] [client 16.146.22.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aUeUFbyUvZnd3bHSR3Z1uQAAAEc"]
[Sun Dec 21 18:40:34.062500 2025] [:error] [pid 59068:tid 59102] [client 49.233.45.47:59840] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUfOohmLyLqWUlrjwydCXwAAAEE"]
[Sun Dec 21 21:02:31.900671 2025] [:error] [pid 42755:tid 42762] [client 129.226.213.145:55032] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUfv5-W0XvxgXMTJJbvCIQAAAUU"]
[Mon Dec 22 01:08:08.689299 2025] [:error] [pid 45309:tid 45374] [client 192.144.148.122:60004] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUgpeIitmFVpLjGlR3i_rAAAAMM"]
[Mon Dec 22 06:50:37.925755 2025] [:error] [pid 33472:tid 33505] [client 125.165.109.159:27950] [client 125.165.109.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aUh5vZ5p2WQpPIK8HAknRQAAAYQ"]
[Mon Dec 22 07:37:29.319262 2025] [:error] [pid 33565:tid 33600] [client 52.13.171.147:65118] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUiEudOWX69q8T0m_yKGHQAAAkY"]
[Mon Dec 22 07:37:30.102053 2025] [:error] [pid 58172:tid 58175] [client 52.13.171.147:62141] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEuuSVKDT5jWOcnSUIxQAAAME"]
[Mon Dec 22 07:37:31.332080 2025] [:error] [pid 33472:tid 33505] [client 52.13.171.147:63398] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUiEu55p2WQpPIK8HAkwjQAAAYQ"]
[Mon Dec 22 07:37:31.718936 2025] [:error] [pid 58172:tid 58186] [client 52.13.171.147:50553] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUiEu-SVKDT5jWOcnSUI8QAAAMw"]
[Mon Dec 22 07:37:32.106000 2025] [:error] [pid 58172:tid 58185] [client 52.13.171.147:49499] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEvOSVKDT5jWOcnSUI9QAAAMs"]
[Mon Dec 22 10:20:12.249140 2025] [:error] [pid 33472:tid 33507] [client 2.58.56.27:56451] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3J5p2WQpPIK8HAlR0QAAAYY"], referer: www.google.com
[Mon Dec 22 10:20:12.261957 2025] [:error] [pid 33471:tid 33488] [client 2.58.56.27:58481] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3L5BeNE7regJ7izFgAAAAU4"], referer: www.google.com
[Mon Dec 22 10:20:12.274513 2025] [:error] [pid 33472:tid 33511] [client 2.58.56.27:56409] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUiq3J5p2WQpPIK8HAlR0gAAAYo"]
[Mon Dec 22 10:20:12.643821 2025] [:error] [pid 58079:tid 58130] [client 2.58.56.27:56453] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3HxLB7WYaNS5A7j3ogAAAFE"], referer: www.google.com
[Mon Dec 22 10:20:12.730940 2025] [:error] [pid 33564:tid 33577] [client 2.58.56.27:58483] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUiq3ASHeG6oLmMnKY4GPAAAAgo"]
[Mon Dec 22 10:20:12.971857 2025] [:error] [pid 58078:tid 58100] [client 2.58.56.27:56076] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3JWKg9Bf8njHlB6lvAAAABE"], referer: www.google.com
[Mon Dec 22 10:20:13.262148 2025] [:error] [pid 33440:tid 33454] [client 2.58.56.27:54574] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3ZOsUWKqgxu6QTSVhwAAAQw"], referer: www.google.com
[Mon Dec 22 10:20:13.351987 2025] [:error] [pid 33564:tid 33576] [client 2.58.56.27:55668] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUiq3QSHeG6oLmMnKY4GTAAAAgk"]
[Mon Dec 22 10:20:13.452724 2025] [:error] [pid 33471:tid 33478] [client 2.58.56.27:51139] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq3b5BeNE7regJ7izFkQAAAUQ"], referer: www.google.com
[Mon Dec 22 10:20:13.599334 2025] [:error] [pid 33535:tid 33540] [client 2.58.56.27:62220] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3WOCI8D9Xtn-n7QcUgAAAcM"], referer: www.google.com
[Mon Dec 22 10:20:13.935448 2025] [:error] [pid 33471:tid 33490] [client 2.58.56.27:56749] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3b5BeNE7regJ7izFngAAAVA"], referer: www.google.com
[Mon Dec 22 10:20:14.029672 2025] [:error] [pid 33471:tid 33489] [client 2.58.56.27:57843] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUiq3r5BeNE7regJ7izFogAAAU8"]
[Mon Dec 22 10:20:14.274710 2025] [:error] [pid 33440:tid 33454] [client 2.58.56.27:57293] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3pOsUWKqgxu6QTSVlwAAAQw"], referer: www.google.com
[Mon Dec 22 10:20:14.534111 2025] [:error] [pid 33643:tid 33663] [client 2.58.56.27:56766] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq3koNwyN4xVhAvNOm3AAAApE"], referer: www.google.com
[Mon Dec 22 10:20:14.582271 2025] [:error] [pid 33565:tid 33611] [client 2.58.56.27:52172] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUiq3tOWX69q8T0m_yKfMgAAAlE"]
[Mon Dec 22 10:20:14.719964 2025] [:error] [pid 33643:tid 33654] [client 2.58.56.27:65194] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq3koNwyN4xVhAvNOm4AAAAog"], referer: www.google.com
[Mon Dec 22 10:20:14.985219 2025] [:error] [pid 58079:tid 58125] [client 2.58.56.27:64461] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq3nxLB7WYaNS5A7j3yQAAAEw"], referer: www.google.com
[Mon Dec 22 10:20:15.064926 2025] [:error] [pid 33565:tid 33611] [client 2.58.56.27:63174] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq39OWX69q8T0m_yKfNQAAAlE"], referer: www.google.com
[Mon Dec 22 10:20:16.323940 2025] [:error] [pid 58172:tid 58193] [client 2.58.56.27:52172] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq4OSVKDT5jWOcnSUleAAAANM"], referer: www.google.com
[Mon Dec 22 10:20:16.726863 2025] [:error] [pid 33643:tid 33658] [client 2.58.56.27:65184] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4EoNwyN4xVhAvNOnFwAAAow"], referer: www.google.com
[Mon Dec 22 10:20:16.815115 2025] [:error] [pid 33472:tid 33516] [client 2.58.56.27:61187] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4J5p2WQpPIK8HAlSGgAAAY8"], referer: www.google.com
[Mon Dec 22 10:20:18.109035 2025] [:error] [pid 33564:tid 33589] [client 2.58.56.27:62893] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq4gSHeG6oLmMnKY4GvQAAAhY"], referer: www.google.com
[Mon Dec 22 10:20:18.404590 2025] [:error] [pid 33564:tid 33583] [client 2.58.56.27:65190] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq4gSHeG6oLmMnKY4GzAAAAhA"], referer: www.google.com
[Mon Dec 22 10:20:18.510094 2025] [:error] [pid 33535:tid 33542] [client 2.58.56.27:58478] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq4mOCI8D9Xtn-n7QcpwAAAcU"], referer: www.google.com
[Mon Dec 22 10:20:19.776805 2025] [:error] [pid 33535:tid 33544] [client 2.58.56.27:59885] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "aUiq42OCI8D9Xtn-n7QcyQAAAcc"], referer: www.google.com
[Mon Dec 22 10:20:20.113323 2025] [:error] [pid 58079:tid 58133] [client 2.58.56.27:63450] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5HxLB7WYaNS5A7j4RQAAAFQ"], referer: www.google.com
[Mon Dec 22 10:20:20.126747 2025] [:error] [pid 58078:tid 58084] [client 2.58.56.27:52525] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5JWKg9Bf8njHlB6mXAAAAAE"], referer: www.google.com
[Mon Dec 22 10:20:21.292341 2025] [:error] [pid 33564:tid 33574] [client 2.58.56.27:52053] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aUiq5QSHeG6oLmMnKY4HJgAAAgc"], referer: www.google.com
[Mon Dec 22 10:20:21.336802 2025] [:error] [pid 33535:tid 33544] [client 2.58.56.27:51543] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5WOCI8D9Xtn-n7QdAAAAAcc"], referer: www.google.com
[Mon Dec 22 10:20:22.572087 2025] [:error] [pid 58079:tid 58130] [client 2.58.56.27:58774] [client 2.58.56.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aUiq5nxLB7WYaNS5A7j4kwAAAFE"], referer: www.google.com
[Mon Dec 22 10:37:06.718833 2025] [:error] [pid 58172:tid 58189] [client 116.206.202.84:58856] [client 116.206.202.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 116.206.202.84, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUiu0uSVKDT5jWOcnSUvHAAAAM8"]
[Mon Dec 22 19:47:10.866174 2025] [:error] [pid 56155:tid 56242] [client 43.133.220.37:48646] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUkvvmG8a3wQucsuN67oyQAAA5Q"]
[Mon Dec 22 20:53:52.946167 2025] [:error] [pid 33564:tid 33569] [client 103.65.236.153:56244] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aUk_YASHeG6oLmMnKY7H9wAAAgI"]
[Mon Dec 22 22:38:06.930103 2025] [:error] [pid 33471:tid 33491] [client 185.238.231.20:44347] [client 185.238.231.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.20, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUlXzr5BeNE7regJ7ixeowAAAVE"]
[Tue Dec 23 02:48:51.837514 2025] [:error] [pid 40361:tid 40365] [client 195.24.236.147:55961] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUmSk-xiDEK95vL2EDr4owAAAEI"]
[Tue Dec 23 02:48:53.150245 2025] [:error] [pid 40268:tid 40319] [client 195.24.236.147:56198] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUmSlZWtCyS5tdJAiFx1eQAAANE"]
[Tue Dec 23 02:48:54.473387 2025] [:error] [pid 12110:tid 12115] [client 195.24.236.147:56475] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUmSlgYatzD_WebWpOrrNAAAAIM"]
[Tue Dec 23 02:48:55.760627 2025] [:error] [pid 40268:tid 40323] [client 195.24.236.147:56758] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUmSl5WtCyS5tdJAiFx14wAAANU"]
[Tue Dec 23 02:48:57.091182 2025] [:error] [pid 12110:tid 12118] [client 195.24.236.147:56998] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUmSmQYatzD_WebWpOrrggAAAIY"]
[Tue Dec 23 10:03:14.910421 2025] [:error] [pid 49150:tid 49152] [client 189.37.71.218:60338] [client 189.37.71.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.37.71.218, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUn4YkuL91O4jNPzb4EEugAAAMA"]
[Tue Dec 23 14:07:07.953206 2025] [:error] [pid 3497:tid 3503] [client 182.42.110.255:60314] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUoxi-zUE6hZ8LJecSu4BwAAAMM"]
[Tue Dec 23 19:53:10.700820 2025] [:error] [pid 3405:tid 3460] [client 68.218.118.62:22570] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "aUqCprdHHpIDpQ39rwktTAAAABc"]
[Tue Dec 23 19:53:22.719177 2025] [:error] [pid 3497:tid 3521] [client 68.218.118.62:22330] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "aUqCsuzUE6hZ8LJecSsElAAAANU"]
[Tue Dec 23 19:53:29.108964 2025] [:error] [pid 11812:tid 11817] [client 68.218.118.62:22056] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUqCubBkIQ4nTXm4A3UOAAAAAIM"]
[Tue Dec 23 19:53:33.067248 2025] [:error] [pid 25976:tid 25997] [client 68.218.118.62:21464] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUqCvbF6LaWzQScE-xNymwAAARM"]
[Tue Dec 23 19:53:33.818259 2025] [:error] [pid 11812:tid 11825] [client 68.218.118.62:2351] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUqCvbBkIQ4nTXm4A3UOGgAAAIs"]
[Tue Dec 23 19:53:37.701266 2025] [:error] [pid 3497:tid 3516] [client 68.218.118.62:32431] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUqCwezUE6hZ8LJecSsFYQAAANA"]
[Tue Dec 23 19:53:42.626466 2025] [:error] [pid 54408:tid 54426] [client 68.218.118.62:2489] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aUqCxmup4YbWx_MWvp1JZQAAAo8"]
[Tue Dec 23 19:53:56.244658 2025] [:error] [pid 11812:tid 11821] [client 68.218.118.62:2311] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aUqC1LBkIQ4nTXm4A3UOqwAAAIc"]
[Tue Dec 23 19:54:09.136721 2025] [:error] [pid 54340:tid 54344] [client 68.218.118.62:2966] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aUqC4Zye8-oij4iGhogbZQAAAgI"]
[Tue Dec 23 19:54:23.867908 2025] [:error] [pid 25976:tid 26001] [client 68.218.118.62:2408] [client 68.218.118.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aUqC77F6LaWzQScE-xNzEgAAARc"]
[Tue Dec 23 19:54:25.383747 2025] [:error] [pid 11812:tid 11826] [client 68.218.118.62:23061] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUqC8bBkIQ4nTXm4A3UOxQAAAIw"]
[Tue Dec 23 19:54:29.679936 2025] [:error] [pid 3405:tid 3442] [client 68.218.118.62:24262] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUqC9bdHHpIDpQ39rwkuBAAAAAU"]
[Tue Dec 23 19:54:34.908268 2025] [:error] [pid 54297:tid 54320] [client 68.218.118.62:22585] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUqC-kZMNime0caoKPKZ-gAAAZM"]
[Tue Dec 23 19:54:36.474605 2025] [:error] [pid 3497:tid 3520] [client 68.218.118.62:22865] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUqC_OzUE6hZ8LJecSsGDwAAANQ"]
[Tue Dec 23 19:54:40.956907 2025] [:error] [pid 11812:tid 11822] [client 68.218.118.62:2935] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manage.php"] [unique_id "aUqDALBkIQ4nTXm4A3UOzQAAAIg"]
[Tue Dec 23 19:54:43.493201 2025] [:error] [pid 3404:tid 3413] [client 68.218.118.62:20373] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manage.php"] [unique_id "aUqDA8JGbPWZNlrhVJdIgAAAAcQ"]
[Tue Dec 23 19:54:54.250928 2025] [:error] [pid 3405:tid 3461] [client 68.218.118.62:23687] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUqDDrdHHpIDpQ39rwkuHQAAABg"]
[Tue Dec 23 19:54:57.491647 2025] [:error] [pid 25976:tid 25984] [client 68.218.118.62:20634] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUqDEbF6LaWzQScE-xNzJQAAAQY"]
[Tue Dec 23 19:54:58.352041 2025] [:error] [pid 11812:tid 11820] [client 68.218.118.62:36193] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUqDErBkIQ4nTXm4A3UO0QAAAIY"]
[Tue Dec 23 19:54:58.908607 2025] [:error] [pid 3405:tid 3444] [client 68.218.118.62:2589] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aUqDErdHHpIDpQ39rwkuIQAAAAc"]
[Tue Dec 23 19:55:01.615051 2025] [:error] [pid 54340:tid 54366] [client 68.218.118.62:20666] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aUqDFZye8-oij4iGhogbgQAAAhg"]
[Tue Dec 23 19:55:04.514534 2025] [:error] [pid 54375:tid 54386] [client 68.218.118.62:18894] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aUqDGJ1Yro3O5R2WY-Bl7gAAAkk"]
[Tue Dec 23 19:55:21.754296 2025] [:error] [pid 3406:tid 3471] [client 68.218.118.62:22591] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aUqDKfn8DLWxW7TPzpHb2wAAAEc"]
[Tue Dec 23 19:55:24.952911 2025] [:error] [pid 54408:tid 54433] [client 68.218.118.62:21436] [client 68.218.118.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aUqDLGup4YbWx_MWvp1J8wAAApY"]
[Wed Dec 24 02:47:49.629261 2025] [:error] [pid 10374:tid 10391] [client 106.119.167.146:50747] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUrj1fgeiZmmnSvZBQ1TNgAAAM8"]
[Wed Dec 24 09:27:04.892655 2025] [:error] [pid 54139:tid 54160] [client 187.19.156.176:30885] [client 187.19.156.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.19.156.176, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUtBaMrYCZenIDzgXuLNvAAAARM"]
[Wed Dec 24 10:45:02.441668 2025] [:error] [pid 16550:tid 16558] [client 104.234.53.222:60459] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUtTrqYYcdD-LuO7vrBRsQAAAMY"]
[Wed Dec 24 10:45:03.794533 2025] [:error] [pid 16468:tid 16546] [client 63.135.161.65:24313] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUtTr4dyfuSTFLkCbP8RVwAAAJY"]
[Wed Dec 24 10:45:05.615625 2025] [:error] [pid 16466:tid 16470] [client 104.234.53.213:20593] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUtTsbu0JcuKJMjJn6yyBgAAAAA"]
[Wed Dec 24 10:45:06.809235 2025] [:error] [pid 54139:tid 54145] [client 104.234.53.219:36755] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUtTssrYCZenIDzgXuLtbAAAAQQ"]
[Wed Dec 24 10:45:08.750871 2025] [:error] [pid 16468:tid 16539] [client 104.234.53.215:49631] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUtTtIdyfuSTFLkCbP8RgQAAAI8"]
[Wed Dec 24 10:45:09.409871 2025] [:error] [pid 16466:tid 16471] [client 63.135.161.74:49909] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUtTtbu0JcuKJMjJn6yyHwAAAAE"]
[Wed Dec 24 10:45:09.933179 2025] [:error] [pid 16467:tid 16509] [client 104.234.53.209:45723] [client 104.234.53.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUtTtY0TJMcBxX5slgrNTAAAAEw"]
[Wed Dec 24 10:45:10.364096 2025] [:error] [pid 16468:tid 16533] [client 104.234.53.216:40383] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUtTtodyfuSTFLkCbP8RlQAAAIk"]
[Wed Dec 24 10:45:10.798690 2025] [:error] [pid 16466:tid 16481] [client 63.135.161.74:65151] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUtTtru0JcuKJMjJn6yyKwAAAAs"]
[Wed Dec 24 10:45:11.299812 2025] [:error] [pid 16468:tid 16532] [client 104.234.53.208:22961] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUtTt4dyfuSTFLkCbP8RnQAAAIg"]
[Wed Dec 24 10:45:12.081463 2025] [:error] [pid 16550:tid 16557] [client 63.135.161.47:33019] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUtTuKYYcdD-LuO7vrBSGgAAAMU"]
[Wed Dec 24 10:45:13.135073 2025] [:error] [pid 54139:tid 54162] [client 63.135.161.58:36765] [client 63.135.161.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aUtTucrYCZenIDzgXuLt3wAAARU"]
[Wed Dec 24 10:45:14.186708 2025] [:error] [pid 16468:tid 16534] [client 63.135.161.59:28047] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUtTuodyfuSTFLkCbP8RzAAAAIo"]
[Wed Dec 24 10:45:14.882905 2025] [:error] [pid 16466:tid 16478] [client 63.135.161.69:25597] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUtTuru0JcuKJMjJn6yyYgAAAAg"]
[Wed Dec 24 10:45:15.589532 2025] [:error] [pid 16466:tid 16481] [client 63.135.161.75:51609] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUtTu7u0JcuKJMjJn6yycQAAAAs"]
[Wed Dec 24 10:45:17.781396 2025] [:error] [pid 16468:tid 16527] [client 63.135.161.48:29045] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUtTvYdyfuSTFLkCbP8SAAAAAIM"]
[Wed Dec 24 10:45:18.660535 2025] [:error] [pid 54139:tid 54152] [client 63.135.161.76:35659] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUtTvsrYCZenIDzgXuLuNgAAAQs"]
[Wed Dec 24 10:45:19.641396 2025] [:error] [pid 16550:tid 16556] [client 104.234.53.207:30119] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUtTv6YYcdD-LuO7vrBSdQAAAMQ"]
[Wed Dec 24 10:45:20.308519 2025] [:error] [pid 16468:tid 16536] [client 63.135.161.67:44925] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUtTwIdyfuSTFLkCbP8SIQAAAIw"]
[Wed Dec 24 10:45:22.013696 2025] [:error] [pid 16468:tid 16531] [client 63.135.161.59:62003] [client 63.135.161.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUtTwodyfuSTFLkCbP8SMgAAAIc"]
[Wed Dec 24 10:45:22.739780 2025] [:error] [pid 16467:tid 16503] [client 104.234.53.218:39827] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUtTwo0TJMcBxX5slgrN7gAAAEY"]
[Wed Dec 24 10:45:23.440008 2025] [:error] [pid 16467:tid 16504] [client 63.135.161.53:46741] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUtTw40TJMcBxX5slgrOAgAAAEc"]
[Wed Dec 24 10:45:23.884592 2025] [:error] [pid 16468:tid 16547] [client 63.135.161.52:64897] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUtTw4dyfuSTFLkCbP8SRAAAAJc"]
[Wed Dec 24 10:45:24.341923 2025] [:error] [pid 16468:tid 16537] [client 63.135.161.56:45705] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUtTxIdyfuSTFLkCbP8SSAAAAI0"]
[Wed Dec 24 10:45:25.564655 2025] [:error] [pid 16550:tid 16558] [client 63.135.161.48:20037] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUtTxaYYcdD-LuO7vrBSsgAAAMY"]
[Wed Dec 24 10:45:25.998744 2025] [:error] [pid 16550:tid 16570] [client 104.234.53.225:54553] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUtTxaYYcdD-LuO7vrBStwAAANI"]
[Wed Dec 24 10:45:26.459663 2025] [:error] [pid 54139:tid 54150] [client 63.135.161.60:52277] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUtTxsrYCZenIDzgXuLusAAAAQk"]
[Wed Dec 24 10:45:28.915611 2025] [:error] [pid 16550:tid 16555] [client 63.135.161.47:56669] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUtTyKYYcdD-LuO7vrBS0wAAAMM"]
[Wed Dec 24 10:45:30.158954 2025] [:error] [pid 16466:tid 16478] [client 63.135.161.48:63271] [client 63.135.161.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.48, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUtTyru0JcuKJMjJn6yzBQAAAAg"]
[Wed Dec 24 10:45:33.359408 2025] [:error] [pid 16466:tid 16487] [client 63.135.161.48:63271] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUtTzbu0JcuKJMjJn6yzNgAAABE"]
[Wed Dec 24 10:45:34.457277 2025] [:error] [pid 54139:tid 54146] [client 63.135.161.48:39389] [client 63.135.161.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.48, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUtTzsrYCZenIDzgXuLvHwAAAQU"]
[Wed Dec 24 10:45:35.003779 2025] [:error] [pid 54139:tid 54153] [client 63.135.161.48:39389] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aUtTz8rYCZenIDzgXuLvKQAAAQw"]
[Wed Dec 24 10:45:37.559223 2025] [:error] [pid 16468:tid 16541] [client 63.135.161.53:57925] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUtT0YdyfuSTFLkCbP8TCgAAAJE"]
[Wed Dec 24 10:45:40.084073 2025] [:error] [pid 16550:tid 16572] [client 104.234.53.219:34773] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUtT1KYYcdD-LuO7vrBTgAAAANQ"]
[Wed Dec 24 10:45:41.111739 2025] [:error] [pid 16550:tid 16572] [client 104.234.53.226:31653] [client 104.234.53.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUtT1aYYcdD-LuO7vrBTjQAAANQ"]
[Wed Dec 24 10:45:42.447847 2025] [:error] [pid 16466:tid 16483] [client 63.135.161.62:54507] [client 63.135.161.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.62, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUtT1ru0JcuKJMjJn6yzngAAAA0"]
[Wed Dec 24 10:45:42.713629 2025] [:error] [pid 16466:tid 16487] [client 63.135.161.62:54507] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUtT1ru0JcuKJMjJn6yzogAAABE"]
[Wed Dec 24 10:45:47.536376 2025] [:error] [pid 16466:tid 16493] [client 104.234.53.220:42825] [client 104.234.53.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUtT27u0JcuKJMjJn6yz5AAAABc"]
[Wed Dec 24 10:45:48.731535 2025] [:error] [pid 54139:tid 54161] [client 63.135.161.71:58271] [client 63.135.161.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.71, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUtT3MrYCZenIDzgXuLv8QAAARQ"]
[Wed Dec 24 10:45:49.946309 2025] [:error] [pid 54139:tid 54152] [client 63.135.161.71:58271] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUtT3crYCZenIDzgXuLwBwAAAQs"]
[Wed Dec 24 10:45:50.761463 2025] [:error] [pid 16466:tid 16479] [client 63.135.161.62:64685] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aUtT3ru0JcuKJMjJn6y0CgAAAAk"]
[Wed Dec 24 10:45:51.696097 2025] [:error] [pid 16467:tid 16504] [client 104.234.53.208:45745] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUtT340TJMcBxX5slgrPwAAAAEc"]
[Wed Dec 24 10:45:52.863628 2025] [:error] [pid 16550:tid 16567] [client 104.234.53.211:51961] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUtT4KYYcdD-LuO7vrBUNAAAAM8"]
[Wed Dec 24 10:45:53.299312 2025] [:error] [pid 54139:tid 54151] [client 63.135.161.50:23533] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUtT4crYCZenIDzgXuLwRgAAAQo"]
[Wed Dec 24 10:45:54.828322 2025] [:error] [pid 16466:tid 16482] [client 104.234.53.210:27719] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUtT4ru0JcuKJMjJn6y0PQAAAAw"]
[Wed Dec 24 10:45:55.521249 2025] [:error] [pid 16467:tid 16508] [client 63.135.161.47:47059] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUtT440TJMcBxX5slgrQBwAAAEs"]
[Wed Dec 24 10:45:56.672643 2025] [:error] [pid 16466:tid 16486] [client 104.234.53.215:40499] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aUtT5Lu0JcuKJMjJn6y0WAAAABA"]
[Wed Dec 24 10:45:57.935039 2025] [:error] [pid 16466:tid 16491] [client 63.135.161.64:21963] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUtT5bu0JcuKJMjJn6y0aQAAABU"]
[Wed Dec 24 10:45:59.074586 2025] [:error] [pid 16467:tid 16508] [client 104.234.53.208:22319] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aUtT540TJMcBxX5slgrQPwAAAEs"]
[Wed Dec 24 10:46:00.333035 2025] [:error] [pid 54139:tid 54156] [client 104.234.53.217:35337] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUtT6MrYCZenIDzgXuLwwwAAAQ8"]
[Wed Dec 24 10:46:02.566986 2025] [:error] [pid 16466:tid 16474] [client 63.135.161.50:46037] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUtT6ru0JcuKJMjJn6y0vwAAAAQ"]
[Wed Dec 24 10:46:03.090560 2025] [:error] [pid 54139:tid 54163] [client 63.135.161.52:63511] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aUtT68rYCZenIDzgXuLw4AAAARY"]
[Wed Dec 24 10:46:03.575088 2025] [:error] [pid 54139:tid 54152] [client 63.135.161.67:24231] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUtT68rYCZenIDzgXuLw5gAAAQs"]
[Wed Dec 24 10:46:04.024884 2025] [:error] [pid 16468:tid 16547] [client 63.135.161.47:50389] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUtT7IdyfuSTFLkCbP8UrAAAAJc"]
[Wed Dec 24 10:46:04.719881 2025] [:error] [pid 16466:tid 16482] [client 63.135.161.61:26465] [client 63.135.161.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUtT7Lu0JcuKJMjJn6y07gAAAAw"]
[Wed Dec 24 10:46:05.148608 2025] [:error] [pid 16467:tid 16508] [client 104.234.53.214:57371] [client 104.234.53.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUtT7Y0TJMcBxX5slgrQogAAAEs"]
[Wed Dec 24 10:46:06.100060 2025] [:error] [pid 16550:tid 16568] [client 63.135.161.75:60381] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUtT7qYYcdD-LuO7vrBVFgAAANA"]
[Wed Dec 24 10:46:06.633485 2025] [:error] [pid 54139:tid 54141] [client 63.135.161.70:43109] [client 63.135.161.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUtT7srYCZenIDzgXuLxCAAAAQA"]
[Wed Dec 24 10:46:07.081689 2025] [:error] [pid 54139:tid 54165] [client 63.135.161.52:30397] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUtT78rYCZenIDzgXuLxDgAAARg"]
[Wed Dec 24 10:46:07.601490 2025] [:error] [pid 16550:tid 16567] [client 63.135.161.65:30253] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUtT76YYcdD-LuO7vrBVJQAAAM8"]
[Wed Dec 24 10:46:08.317979 2025] [:error] [pid 16466:tid 16476] [client 63.135.161.57:47395] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUtT8Lu0JcuKJMjJn6y1HgAAAAY"]
[Wed Dec 24 10:46:09.364266 2025] [:error] [pid 16466:tid 16475] [client 63.135.161.45:30703] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUtT8bu0JcuKJMjJn6y1MAAAAAU"]
[Wed Dec 24 10:46:10.796505 2025] [:error] [pid 54139:tid 54157] [client 63.135.161.64:42435] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUtT8srYCZenIDzgXuLxUAAAARA"]
[Wed Dec 24 10:46:13.337679 2025] [:error] [pid 28405:tid 28430] [client 63.135.161.54:47223] [client 63.135.161.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aUtT9cKkTWlhmfdXFqbbGgAAAVQ"]
[Wed Dec 24 10:46:14.537783 2025] [:error] [pid 16467:tid 16520] [client 63.135.161.45:40999] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUtT9o0TJMcBxX5slgrRMwAAAFc"]
[Wed Dec 24 10:46:15.059595 2025] [:error] [pid 16550:tid 16573] [client 63.135.161.45:49833] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUtT96YYcdD-LuO7vrBVagAAANU"]
[Wed Dec 24 10:46:16.489491 2025] [:error] [pid 54139:tid 54142] [client 63.135.161.69:23051] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUtT-MrYCZenIDzgXuLxpAAAAQE"]
[Wed Dec 24 10:46:17.795616 2025] [proxy_fcgi:error] [pid 16466:tid 16474] [client 63.135.161.49:45769] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:46:18.035629 2025] [proxy_fcgi:error] [pid 16466:tid 16491] [client 63.135.161.49:45769] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:46:18.410616 2025] [proxy_fcgi:error] [pid 16466:tid 16475] [client 63.135.161.49:45769] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:46:19.768107 2025] [:error] [pid 16466:tid 16480] [client 63.135.161.49:45769] [client 63.135.161.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUtT-7u0JcuKJMjJn6y16AAAAAo"]
[Wed Dec 24 10:46:20.320775 2025] [:error] [pid 16550:tid 16559] [client 63.135.161.67:64519] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUtT_KYYcdD-LuO7vrBVlwAAAMc"]
[Wed Dec 24 10:46:20.774015 2025] [:error] [pid 28405:tid 28433] [client 63.135.161.66:31201] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUtT_MKkTWlhmfdXFqbblQAAAVc"]
[Wed Dec 24 10:46:21.297561 2025] [:error] [pid 54139:tid 54156] [client 63.135.161.67:63745] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aUtT_crYCZenIDzgXuLx2AAAAQ8"]
[Wed Dec 24 10:46:21.742651 2025] [:error] [pid 16468:tid 16542] [client 104.234.53.225:22265] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUtT_YdyfuSTFLkCbP8VqAAAAJI"]
[Wed Dec 24 10:46:22.238797 2025] [:error] [pid 16468:tid 16529] [client 63.135.161.57:58597] [client 63.135.161.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUtT_odyfuSTFLkCbP8VsAAAAIU"]
[Wed Dec 24 10:46:22.992447 2025] [:error] [pid 16550:tid 16571] [client 104.234.53.207:42607] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aUtT_qYYcdD-LuO7vrBVswAAANM"]
[Wed Dec 24 10:46:23.452569 2025] [:error] [pid 28405:tid 28425] [client 63.135.161.56:40255] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aUtT_8KkTWlhmfdXFqbbvAAAAU8"]
[Wed Dec 24 10:46:23.898679 2025] [:error] [pid 16467:tid 16505] [client 63.135.161.48:32055] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aUtT_40TJMcBxX5slgrRzgAAAEg"]
[Wed Dec 24 10:46:24.376235 2025] [:error] [pid 16468:tid 16527] [client 63.135.161.76:60801] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aUtUAIdyfuSTFLkCbP8V1gAAAIM"]
[Wed Dec 24 10:46:25.354392 2025] [:error] [pid 16467:tid 16505] [client 63.135.161.76:45515] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUtUAY0TJMcBxX5slgrR2gAAAEg"]
[Wed Dec 24 10:46:26.133923 2025] [:error] [pid 28405:tid 28425] [client 63.135.161.47:29929] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aUtUAsKkTWlhmfdXFqbb3wAAAU8"]
[Wed Dec 24 10:46:27.203718 2025] [:error] [pid 16467:tid 16508] [client 63.135.161.60:44485] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aUtUA40TJMcBxX5slgrR-AAAAEs"]
[Wed Dec 24 10:46:28.309805 2025] [:error] [pid 16550:tid 16574] [client 63.135.161.50:58821] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aUtUBKYYcdD-LuO7vrBV2QAAANY"]
[Wed Dec 24 10:46:29.619884 2025] [:error] [pid 16550:tid 16563] [client 63.135.161.53:24259] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUtUBaYYcdD-LuO7vrBV6QAAAMs"]
[Wed Dec 24 10:46:31.335216 2025] [:error] [pid 16466:tid 16480] [client 63.135.161.65:45531] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUtUB7u0JcuKJMjJn6y2eQAAAAo"]
[Wed Dec 24 10:46:32.113737 2025] [:error] [pid 28405:tid 28417] [client 63.135.161.52:42875] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aUtUCMKkTWlhmfdXFqbcGQAAAUg"]
[Wed Dec 24 10:46:36.512750 2025] [:error] [pid 16550:tid 16561] [client 104.234.53.211:23745] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aUtUDKYYcdD-LuO7vrBWOAAAAMk"]
[Wed Dec 24 10:46:37.001702 2025] [:error] [pid 28405:tid 28427] [client 63.135.161.48:39149] [client 63.135.161.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUtUDcKkTWlhmfdXFqbcTwAAAVE"]
[Wed Dec 24 10:46:37.450760 2025] [:error] [pid 16466:tid 16492] [client 63.135.161.56:26811] [client 63.135.161.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 63.135.161.56, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUtUDbu0JcuKJMjJn6y2tQAAABY"]
[Wed Dec 24 10:46:38.003055 2025] [:error] [pid 16466:tid 16474] [client 63.135.161.56:26811] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUtUDru0JcuKJMjJn6y2vgAAAAQ"]
[Wed Dec 24 10:46:39.139339 2025] [:error] [pid 54139:tid 54149] [client 63.135.161.49:23117] [client 63.135.161.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aUtUD8rYCZenIDzgXuLyWQAAAQg"]
[Wed Dec 24 10:46:39.642369 2025] [:error] [pid 16467:tid 16507] [client 63.135.161.74:45821] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aUtUD40TJMcBxX5slgrSnQAAAEo"]
[Wed Dec 24 10:46:41.081710 2025] [:error] [pid 54139:tid 54164] [client 63.135.161.74:41499] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUtUEcrYCZenIDzgXuLyfQAAARc"]
[Wed Dec 24 10:46:42.563606 2025] [:error] [pid 16467:tid 16500] [client 63.135.161.50:33093] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aUtUEo0TJMcBxX5slgrSvAAAAEM"]
[Wed Dec 24 10:46:44.302814 2025] [:error] [pid 16550:tid 16571] [client 104.234.53.223:65117] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aUtUFKYYcdD-LuO7vrBWowAAANM"]
[Wed Dec 24 10:46:45.298640 2025] [proxy_fcgi:error] [pid 16466:tid 16494] [client 63.135.161.68:20219] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:46:45.854118 2025] [:error] [pid 16466:tid 16481] [client 63.135.161.68:20219] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aUtUFbu0JcuKJMjJn6y3KQAAAAs"]
[Wed Dec 24 10:46:46.369895 2025] [:error] [pid 16550:tid 16561] [client 63.135.161.69:46077] [client 63.135.161.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aUtUFqYYcdD-LuO7vrBWygAAAMk"]
[Wed Dec 24 10:46:47.324383 2025] [:error] [pid 54139:tid 54146] [client 63.135.161.71:36149] [client 63.135.161.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aUtUF8rYCZenIDzgXuLyzAAAAQU"]
[Wed Dec 24 10:46:47.876854 2025] [:error] [pid 16466:tid 16493] [client 63.135.161.66:43229] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aUtUF7u0JcuKJMjJn6y3MwAAABc"]
[Wed Dec 24 10:46:50.188885 2025] [:error] [pid 54139:tid 54141] [client 63.135.161.67:52063] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aUtUGsrYCZenIDzgXuLy9QAAAQA"]
[Wed Dec 24 10:46:50.702963 2025] [:error] [pid 16468:tid 16544] [client 63.135.161.52:32983] [client 63.135.161.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUtUGodyfuSTFLkCbP8XsAAAAJQ"]
[Wed Dec 24 10:46:52.234138 2025] [:error] [pid 28405:tid 28431] [client 63.135.161.63:65343] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUtUHMKkTWlhmfdXFqbdQwAAAVU"]
[Wed Dec 24 10:46:52.861517 2025] [:error] [pid 16468:tid 16535] [client 63.135.161.68:40785] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUtUHIdyfuSTFLkCbP8X0QAAAIs"]
[Wed Dec 24 10:46:53.347684 2025] [:error] [pid 16468:tid 16540] [client 63.135.161.46:51989] [client 63.135.161.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUtUHYdyfuSTFLkCbP8X2QAAAJA"]
[Wed Dec 24 10:46:54.961172 2025] [:error] [pid 16466:tid 16490] [client 104.234.53.207:42551] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aUtUHru0JcuKJMjJn6y3jAAAABQ"]
[Wed Dec 24 10:46:55.646557 2025] [:error] [pid 28405:tid 28420] [client 63.135.161.56:61899] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUtUH8KkTWlhmfdXFqbdZgAAAUo"]
[Wed Dec 24 10:46:57.664630 2025] [:error] [pid 54139:tid 54143] [client 104.234.53.208:55175] [client 104.234.53.208] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.208, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aUtUIcrYCZenIDzgXuLzjwAAAQI"]
[Wed Dec 24 10:46:59.250990 2025] [:error] [pid 54139:tid 54150] [client 104.234.53.208:55175] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUtUI8rYCZenIDzgXuLztQAAAQk"]
[Wed Dec 24 10:46:59.679650 2025] [:error] [pid 28405:tid 28414] [client 104.234.53.225:32819] [client 104.234.53.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.225, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aUtUI8KkTWlhmfdXFqbdkwAAAUU"]
[Wed Dec 24 10:47:02.670913 2025] [proxy_fcgi:error] [pid 28405:tid 28409] [client 104.234.53.225:32819] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:06.254743 2025] [:error] [pid 28405:tid 28412] [client 104.234.53.225:32819] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aUtUKsKkTWlhmfdXFqbeHwAAAUM"]
[Wed Dec 24 10:47:07.377511 2025] [:error] [pid 16466:tid 16478] [client 63.135.161.67:30175] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUtUK7u0JcuKJMjJn6y4HgAAAAg"]
[Wed Dec 24 10:47:08.316547 2025] [:error] [pid 16468:tid 16538] [client 104.234.53.222:56311] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aUtULIdyfuSTFLkCbP8Y-gAAAI4"]
[Wed Dec 24 10:47:11.041146 2025] [:error] [pid 16468:tid 16531] [client 104.234.53.223:37251] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUtUL4dyfuSTFLkCbP8ZOwAAAIc"]
[Wed Dec 24 10:47:12.080402 2025] [:error] [pid 16550:tid 16557] [client 104.234.53.211:31767] [client 104.234.53.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUtUMKYYcdD-LuO7vrBYQAAAAMU"]
[Wed Dec 24 10:47:12.757866 2025] [:error] [pid 16468:tid 16535] [client 63.135.161.50:38755] [client 63.135.161.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUtUMIdyfuSTFLkCbP8ZVQAAAIs"]
[Wed Dec 24 10:47:14.251864 2025] [proxy_fcgi:error] [pid 28405:tid 28430] [client 63.135.161.67:57715] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:14.517642 2025] [proxy_fcgi:error] [pid 28405:tid 28409] [client 63.135.161.67:57715] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:14.793798 2025] [:error] [pid 28405:tid 28414] [client 63.135.161.67:57715] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUtUMsKkTWlhmfdXFqbe9AAAAUU"]
[Wed Dec 24 10:47:15.267566 2025] [:error] [pid 16550:tid 16574] [client 104.234.53.213:61205] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUtUM6YYcdD-LuO7vrBYZgAAANY"]
[Wed Dec 24 10:47:17.341069 2025] [:error] [pid 16467:tid 16520] [client 104.234.53.212:51393] [client 104.234.53.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aUtUNY0TJMcBxX5slgrUnwAAAFc"]
[Wed Dec 24 10:47:18.023199 2025] [:error] [pid 28405:tid 28419] [client 63.135.161.55:20649] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aUtUNsKkTWlhmfdXFqbfRAAAAUk"]
[Wed Dec 24 10:47:19.276511 2025] [:error] [pid 54139:tid 54160] [client 63.135.161.66:60895] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aUtUN8rYCZenIDzgXuL0qQAAARM"]
[Wed Dec 24 10:47:21.394096 2025] [:error] [pid 54139:tid 54152] [client 104.234.53.213:49509] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aUtUOcrYCZenIDzgXuL00QAAAQs"]
[Wed Dec 24 10:47:21.842625 2025] [proxy_fcgi:error] [pid 16466:tid 16484] [client 104.234.53.222:48897] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:22.558250 2025] [:error] [pid 16466:tid 16472] [client 104.234.53.222:48897] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aUtUOru0JcuKJMjJn6y4_wAAAAI"]
[Wed Dec 24 10:47:24.303633 2025] [proxy_fcgi:error] [pid 16467:tid 16502] [client 104.234.53.225:56513] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:24.815242 2025] [:error] [pid 16467:tid 16498] [client 104.234.53.225:56513] [client 104.234.53.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.225, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aUtUPI0TJMcBxX5slgrVGwAAAEE"]
[Wed Dec 24 10:47:25.985190 2025] [:error] [pid 16467:tid 16519] [client 104.234.53.225:56513] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aUtUPY0TJMcBxX5slgrVMAAAAFY"]
[Wed Dec 24 10:47:26.714147 2025] [:error] [pid 16467:tid 16504] [client 63.135.161.53:53235] [client 63.135.161.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUtUPo0TJMcBxX5slgrVPgAAAEc"]
[Wed Dec 24 10:47:28.216808 2025] [:error] [pid 16468:tid 16537] [client 63.135.161.61:59339] [client 63.135.161.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aUtUQIdyfuSTFLkCbP8aQwAAAI0"]
[Wed Dec 24 10:47:29.724384 2025] [:error] [pid 28777:tid 28794] [client 63.135.161.58:23047] [client 63.135.161.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aUtUQZBVBcZ34cSqz8q3iAAAAY8"]
[Wed Dec 24 10:47:30.514675 2025] [:error] [pid 28405:tid 28411] [client 104.234.53.208:62761] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUtUQsKkTWlhmfdXFqbgLQAAAUI"]
[Wed Dec 24 10:47:31.731884 2025] [:error] [pid 16550:tid 16558] [client 63.135.161.74:60333] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aUtUQ6YYcdD-LuO7vrBZNAAAAMY"]
[Wed Dec 24 10:47:32.780893 2025] [proxy_fcgi:error] [pid 16468:tid 16525] [client 63.135.161.67:30191] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:33.009818 2025] [:error] [pid 16468:tid 16534] [client 63.135.161.67:30191] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aUtURYdyfuSTFLkCbP8acAAAAIo"]
[Wed Dec 24 10:47:33.693466 2025] [:error] [pid 28405:tid 28420] [client 104.234.53.212:54167] [client 104.234.53.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aUtURcKkTWlhmfdXFqbgYAAAAUo"]
[Wed Dec 24 10:47:34.209516 2025] [:error] [pid 16467:tid 16521] [client 63.135.161.75:23857] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aUtURo0TJMcBxX5slgrVoAAAAFg"]
[Wed Dec 24 10:47:34.647749 2025] [:error] [pid 16466:tid 16482] [client 104.234.53.216:56473] [client 104.234.53.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUtURru0JcuKJMjJn6y5ngAAAAw"]
[Wed Dec 24 10:47:35.139652 2025] [:error] [pid 28777:tid 28784] [client 63.135.161.58:35627] [client 63.135.161.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aUtUR5BVBcZ34cSqz8q33gAAAYU"]
[Wed Dec 24 10:47:35.674057 2025] [:error] [pid 16550:tid 16559] [client 63.135.161.67:26197] [client 63.135.161.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aUtUR6YYcdD-LuO7vrBZZAAAAMc"]
[Wed Dec 24 10:47:36.139659 2025] [:error] [pid 16468:tid 16532] [client 63.135.161.54:42287] [client 63.135.161.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aUtUSIdyfuSTFLkCbP8alAAAAIg"]
[Wed Dec 24 10:47:37.155975 2025] [:error] [pid 16467:tid 16501] [client 63.135.161.56:55257] [client 63.135.161.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aUtUSY0TJMcBxX5slgrVzQAAAEQ"]
[Wed Dec 24 10:47:37.691911 2025] [:error] [pid 28405:tid 28420] [client 63.135.161.62:60387] [client 63.135.161.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aUtUScKkTWlhmfdXFqbgjAAAAUo"]
[Wed Dec 24 10:47:38.185950 2025] [:error] [pid 16550:tid 16567] [client 63.135.161.55:28321] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aUtUSqYYcdD-LuO7vrBZfgAAAM8"]
[Wed Dec 24 10:47:38.854356 2025] [:error] [pid 16550:tid 16576] [client 63.135.161.54:44905] [client 63.135.161.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aUtUSqYYcdD-LuO7vrBZiwAAANg"]
[Wed Dec 24 10:47:39.798407 2025] [:error] [pid 16468:tid 16543] [client 104.234.53.225:36219] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aUtUS4dyfuSTFLkCbP8axwAAAJM"]
[Wed Dec 24 10:47:40.302647 2025] [proxy_fcgi:error] [pid 54139:tid 54153] [client 104.234.53.207:42127] AH01071: Got error 'Primary script unknown'
[Wed Dec 24 10:47:41.307640 2025] [:error] [pid 54139:tid 54151] [client 104.234.53.207:42127] [client 104.234.53.207] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.207, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aUtUTcrYCZenIDzgXuL1owAAAQo"]
[Wed Dec 24 10:47:42.901489 2025] [:error] [pid 54139:tid 54155] [client 104.234.53.207:42127] [client 104.234.53.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aUtUTsrYCZenIDzgXuL1vQAAAQ4"]
[Wed Dec 24 10:47:43.523176 2025] [:error] [pid 16466:tid 16492] [client 63.135.161.58:54441] [client 63.135.161.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aUtUT7u0JcuKJMjJn6y6JQAAABY"]
[Wed Dec 24 10:47:48.361653 2025] [:error] [pid 16550:tid 16563] [client 104.234.53.218:39891] [client 104.234.53.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUtUVKYYcdD-LuO7vrBaUQAAAMs"]
[Wed Dec 24 10:47:48.801336 2025] [:error] [pid 54139:tid 54157] [client 63.135.161.76:63135] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aUtUVMrYCZenIDzgXuL2CwAAARA"]
[Wed Dec 24 10:47:49.337459 2025] [:error] [pid 54139:tid 54141] [client 63.135.161.47:25323] [client 63.135.161.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUtUVcrYCZenIDzgXuL2FgAAAQA"]
[Wed Dec 24 10:47:51.366812 2025] [:error] [pid 28405:tid 28433] [client 63.135.161.72:49389] [client 63.135.161.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aUtUV8KkTWlhmfdXFqbhWgAAAVc"]
[Wed Dec 24 10:47:51.830810 2025] [:error] [pid 16468:tid 16541] [client 63.135.161.74:23559] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aUtUV4dyfuSTFLkCbP8bWwAAAJE"]
[Wed Dec 24 10:47:52.293112 2025] [:error] [pid 16467:tid 16506] [client 63.135.161.49:48007] [client 63.135.161.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aUtUWI0TJMcBxX5slgrWuAAAAEk"]
[Wed Dec 24 10:47:53.786848 2025] [:error] [pid 16550:tid 16552] [client 63.135.161.74:36329] [client 63.135.161.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aUtUWaYYcdD-LuO7vrBaugAAAMA"]
[Wed Dec 24 10:47:54.536908 2025] [:error] [pid 16550:tid 16570] [client 104.234.53.219:43829] [client 104.234.53.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aUtUWqYYcdD-LuO7vrBa0QAAANI"]
[Wed Dec 24 10:47:55.486295 2025] [:error] [pid 16466:tid 16475] [client 63.135.161.76:23565] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aUtUW7u0JcuKJMjJn6y62AAAAAU"]
[Wed Dec 24 10:47:58.759274 2025] [:error] [pid 54139:tid 54145] [client 63.135.161.58:63595] [client 63.135.161.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aUtUXsrYCZenIDzgXuL2qgAAAQQ"]
[Wed Dec 24 10:47:59.856097 2025] [:error] [pid 16467:tid 16509] [client 63.135.161.73:62325] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aUtUX40TJMcBxX5slgrXAQAAAEw"]
[Wed Dec 24 10:48:01.877839 2025] [:error] [pid 16467:tid 16507] [client 104.234.53.217:61707] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aUtUYY0TJMcBxX5slgrXIQAAAEo"]
[Wed Dec 24 10:48:02.777664 2025] [:error] [pid 16467:tid 16510] [client 63.135.161.63:50731] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aUtUYo0TJMcBxX5slgrXMgAAAE0"]
[Wed Dec 24 10:48:04.226974 2025] [:error] [pid 16468:tid 16539] [client 104.234.53.217:59169] [client 104.234.53.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aUtUZIdyfuSTFLkCbP8b9AAAAI8"]
[Wed Dec 24 10:48:07.086078 2025] [:error] [pid 16550:tid 16571] [client 63.135.161.60:37477] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aUtUZ6YYcdD-LuO7vrBb3AAAANM"]
[Wed Dec 24 10:48:08.009464 2025] [:error] [pid 28777:tid 28785] [client 63.135.161.65:60283] [client 63.135.161.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aUtUaJBVBcZ34cSqz8q59wAAAYY"]
[Wed Dec 24 10:48:08.513928 2025] [:error] [pid 16468:tid 16528] [client 63.135.161.45:59295] [client 63.135.161.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aUtUaIdyfuSTFLkCbP8cEgAAAIQ"]
[Wed Dec 24 10:48:10.323774 2025] [:error] [pid 28777:tid 28802] [client 104.234.53.215:42775] [client 104.234.53.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aUtUapBVBcZ34cSqz8q6KwAAAZc"]
[Wed Dec 24 10:48:12.340576 2025] [:error] [pid 16467:tid 16517] [client 104.234.53.209:52425] [client 104.234.53.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aUtUbI0TJMcBxX5slgrXswAAAFQ"]
[Wed Dec 24 10:48:14.867279 2025] [:error] [pid 16466:tid 16487] [client 63.135.161.73:57999] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aUtUbru0JcuKJMjJn6y8JAAAABE"]
[Wed Dec 24 10:48:15.306919 2025] [:error] [pid 16550:tid 16568] [client 63.135.161.60:49957] [client 63.135.161.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aUtUb6YYcdD-LuO7vrBctgAAANA"]
[Wed Dec 24 10:48:16.386311 2025] [:error] [pid 16468:tid 16546] [client 63.135.161.55:25313] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aUtUcIdyfuSTFLkCbP8cpQAAAJY"]
[Wed Dec 24 10:48:27.872395 2025] [:error] [pid 16468:tid 16533] [client 63.135.161.75:26853] [client 63.135.161.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aUtUe4dyfuSTFLkCbP8dWQAAAIk"]
[Wed Dec 24 10:52:59.034111 2025] [:error] [pid 28777:tid 28789] [client 63.135.161.63:54883] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUtVipBVBcZ34cSqz8rMuQAAAYo"]
[Wed Dec 24 10:53:00.148346 2025] [:error] [pid 16467:tid 16510] [client 104.234.53.222:43695] [client 104.234.53.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUtVjI0TJMcBxX5slgrrLgAAAE0"]
[Wed Dec 24 10:53:02.917962 2025] [:error] [pid 16550:tid 16575] [client 104.234.53.221:52381] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUtVjqYYcdD-LuO7vrB5DQAAANc"]
[Wed Dec 24 10:53:05.137143 2025] [:error] [pid 16550:tid 16562] [client 63.135.161.66:52159] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUtVkaYYcdD-LuO7vrB5KgAAAMo"]
[Wed Dec 24 10:53:07.332992 2025] [:error] [pid 16467:tid 16497] [client 63.135.161.61:57037] [client 63.135.161.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUtVk40TJMcBxX5slgrr7wAAAEA"]
[Wed Dec 24 10:53:09.146201 2025] [:error] [pid 54139:tid 54142] [client 104.234.53.208:57871] [client 104.234.53.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUtVlcrYCZenIDzgXuIMvgAAAQE"]
[Wed Dec 24 10:53:10.648435 2025] [:error] [pid 54139:tid 54141] [client 104.234.53.210:40337] [client 104.234.53.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUtVlsrYCZenIDzgXuIM3QAAAQA"]
[Wed Dec 24 10:53:12.129794 2025] [:error] [pid 16466:tid 16485] [client 63.135.161.64:36555] [client 63.135.161.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUtVmLu0JcuKJMjJn6zNegAAAA8"]
[Wed Dec 24 10:53:12.580091 2025] [:error] [pid 28777:tid 28800] [client 104.234.53.212:57285] [client 104.234.53.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUtVmJBVBcZ34cSqz8rNlwAAAZU"]
[Wed Dec 24 10:53:13.018475 2025] [:error] [pid 28777:tid 28779] [client 104.234.53.226:41323] [client 104.234.53.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUtVmZBVBcZ34cSqz8rNnAAAAYA"]
[Wed Dec 24 10:53:14.708409 2025] [:error] [pid 16467:tid 16497] [client 63.135.161.49:65121] [client 63.135.161.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUtVmo0TJMcBxX5slgrsYgAAAEA"]
[Wed Dec 24 10:53:15.662565 2025] [:error] [pid 28405:tid 28419] [client 63.135.161.63:53587] [client 63.135.161.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aUtVm8KkTWlhmfdXFqb1KwAAAUk"]
[Wed Dec 24 10:53:16.698586 2025] [:error] [pid 16550:tid 16553] [client 104.234.53.220:39705] [client 104.234.53.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUtVnKYYcdD-LuO7vrB51QAAAME"]
[Wed Dec 24 10:53:17.400922 2025] [:error] [pid 16467:tid 16509] [client 104.234.53.225:31289] [client 104.234.53.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUtVnY0TJMcBxX5slgrsjgAAAEw"]
[Wed Dec 24 10:53:18.094134 2025] [:error] [pid 16467:tid 16498] [client 63.135.161.68:31417] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUtVno0TJMcBxX5slgrslwAAAEE"]
[Wed Dec 24 14:58:59.271455 2025] [:error] [pid 28405:tid 28430] [client 182.40.104.255:43302] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUuPM8KkTWlhmfdXFqYmpAAAAVQ"]
[Wed Dec 24 17:46:50.735360 2025] [:error] [pid 54139:tid 54143] [client 4.193.209.111:21450] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dng.php"] [unique_id "aUu2isrYCZenIDzgXuKGxgAAAQI"]
[Wed Dec 24 17:46:51.029884 2025] [:error] [pid 16468:tid 16530] [client 4.193.209.111:21476] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dng.php"] [unique_id "aUu2i4dyfuSTFLkCbP9-UgAAAIY"]
[Wed Dec 24 17:46:53.924513 2025] [:error] [pid 28777:tid 28790] [client 4.193.209.111:21378] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dng.php"] [unique_id "aUu2jZBVBcZ34cSqz8okLQAAAYs"]
[Wed Dec 24 17:46:55.851020 2025] [:error] [pid 29371:tid 29389] [client 4.193.209.111:21458] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dng.php"] [unique_id "aUu2j3s-DlKLysSq5L-DhgAAAdA"]
[Wed Dec 24 17:46:57.201462 2025] [:error] [pid 16550:tid 16563] [client 4.193.209.111:21449] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh1.php"] [unique_id "aUu2kaYYcdD-LuO7vrDnfAAAAMs"]
[Wed Dec 24 17:46:58.726879 2025] [:error] [pid 16466:tid 16478] [client 4.193.209.111:21470] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh1.php"] [unique_id "aUu2kru0JcuKJMjJn6wfegAAAAg"]
[Wed Dec 24 17:46:59.639624 2025] [:error] [pid 16468:tid 16540] [client 4.193.209.111:21471] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh1.php"] [unique_id "aUu2k4dyfuSTFLkCbP9-XAAAAJA"]
[Wed Dec 24 17:47:01.910029 2025] [:error] [pid 16466:tid 16492] [client 4.193.209.111:21493] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh1.php"] [unique_id "aUu2lbu0JcuKJMjJn6wffQAAABY"]
[Wed Dec 24 17:47:03.923565 2025] [:error] [pid 54139:tid 54149] [client 4.193.209.111:21486] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w3llstore.php"] [unique_id "aUu2l8rYCZenIDzgXuKGzwAAAQg"]
[Wed Dec 24 17:47:05.354152 2025] [:error] [pid 16466:tid 16484] [client 4.193.209.111:21379] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w3llstore.php"] [unique_id "aUu2mbu0JcuKJMjJn6wffgAAAA4"]
[Wed Dec 24 17:47:06.288351 2025] [:error] [pid 54139:tid 54156] [client 4.193.209.111:21474] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w3llstore.php"] [unique_id "aUu2msrYCZenIDzgXuKG0gAAAQ8"]
[Wed Dec 24 17:47:07.020877 2025] [:error] [pid 16466:tid 16481] [client 4.193.209.111:21451] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w3llstore.php"] [unique_id "aUu2m7u0JcuKJMjJn6wfggAAAAs"]
[Wed Dec 24 17:47:07.456827 2025] [:error] [pid 16466:tid 16482] [client 4.193.209.111:21402] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s12.php"] [unique_id "aUu2m7u0JcuKJMjJn6wfhQAAAAw"]
[Wed Dec 24 17:47:08.188629 2025] [:error] [pid 16466:tid 16477] [client 4.193.209.111:21413] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s12.php"] [unique_id "aUu2nLu0JcuKJMjJn6wfiAAAAAc"]
[Wed Dec 24 17:47:09.419639 2025] [:error] [pid 29371:tid 29374] [client 4.193.209.111:21467] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s12.php"] [unique_id "aUu2nXs-DlKLysSq5L-DmQAAAcE"]
[Wed Dec 24 17:47:10.499903 2025] [:error] [pid 28405:tid 28422] [client 4.193.209.111:21462] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s12.php"] [unique_id "aUu2nsKkTWlhmfdXFqZWtgAAAUw"]
[Wed Dec 24 17:47:12.118150 2025] [:error] [pid 28777:tid 28783] [client 4.193.209.111:21484] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUu2oJBVBcZ34cSqz8okOQAAAYQ"]
[Wed Dec 24 17:47:14.535212 2025] [:error] [pid 28777:tid 28785] [client 4.193.209.111:21389] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUu2opBVBcZ34cSqz8okQAAAAYY"]
[Wed Dec 24 17:47:15.483617 2025] [:error] [pid 16468:tid 16526] [client 4.193.209.111:21447] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUu2o4dyfuSTFLkCbP9-XwAAAII"]
[Wed Dec 24 17:47:17.817989 2025] [:error] [pid 16550:tid 16570] [client 4.193.209.111:21490] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUu2paYYcdD-LuO7vrDnlAAAANI"]
[Wed Dec 24 17:47:18.921029 2025] [:error] [pid 16550:tid 16565] [client 4.193.209.111:21455] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aUu2pqYYcdD-LuO7vrDnlwAAAM0"]
[Wed Dec 24 17:47:19.837227 2025] [:error] [pid 16466:tid 16492] [client 4.193.209.111:21489] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aUu2p7u0JcuKJMjJn6wflQAAABY"]
[Wed Dec 24 17:47:21.284079 2025] [:error] [pid 28777:tid 28803] [client 4.193.209.111:21404] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aUu2qZBVBcZ34cSqz8okRgAAAZg"]
[Wed Dec 24 17:47:23.638442 2025] [:error] [pid 16466:tid 16484] [client 4.193.209.111:21317] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aUu2q7u0JcuKJMjJn6wfpAAAAA4"]
[Wed Dec 24 17:47:25.467918 2025] [:error] [pid 29371:tid 29395] [client 4.193.209.111:21499] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aUu2rXs-DlKLysSq5L-DpQAAAdY"]
[Wed Dec 24 17:47:27.762279 2025] [:error] [pid 54139:tid 54158] [client 4.193.209.111:21377] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aUu2r8rYCZenIDzgXuKG4AAAARE"]
[Wed Dec 24 17:47:30.672584 2025] [:error] [pid 29371:tid 29394] [client 4.193.209.111:21397] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aUu2sns-DlKLysSq5L-DqgAAAdU"]
[Wed Dec 24 17:47:34.591368 2025] [:error] [pid 16468:tid 16542] [client 4.193.209.111:21494] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aUu2todyfuSTFLkCbP9-YQAAAJI"]
[Wed Dec 24 17:47:35.736843 2025] [:error] [pid 16467:tid 16517] [client 4.193.209.111:21482] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g7y.php"] [unique_id "aUu2t40TJMcBxX5slgo4ygAAAFQ"]
[Wed Dec 24 17:47:37.759319 2025] [:error] [pid 29371:tid 29391] [client 4.193.209.111:21440] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g7y.php"] [unique_id "aUu2uXs-DlKLysSq5L-DtgAAAdI"]
[Wed Dec 24 17:47:39.793806 2025] [:error] [pid 16468:tid 16548] [client 4.193.209.111:21498] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g7y.php"] [unique_id "aUu2u4dyfuSTFLkCbP9-ZgAAAJg"]
[Wed Dec 24 17:47:40.294923 2025] [:error] [pid 29371:tid 29392] [client 4.193.209.111:21415] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g7y.php"] [unique_id "aUu2vHs-DlKLysSq5L-DwgAAAdM"]
[Wed Dec 24 17:47:40.950147 2025] [:error] [pid 29371:tid 29382] [client 4.193.209.111:21430] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ging.php"] [unique_id "aUu2vHs-DlKLysSq5L-DxQAAAck"]
[Wed Dec 24 17:47:42.834167 2025] [:error] [pid 16550:tid 16573] [client 4.193.209.111:21392] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ging.php"] [unique_id "aUu2vqYYcdD-LuO7vrDnqwAAANU"]
[Wed Dec 24 17:47:43.383499 2025] [:error] [pid 16468:tid 16543] [client 4.193.209.111:21479] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ging.php"] [unique_id "aUu2v4dyfuSTFLkCbP9-aAAAAJM"]
[Wed Dec 24 17:47:43.858214 2025] [:error] [pid 16468:tid 16546] [client 4.193.209.111:21384] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ging.php"] [unique_id "aUu2v4dyfuSTFLkCbP9-bAAAAJY"]
[Wed Dec 24 17:47:44.530769 2025] [:error] [pid 29371:tid 29394] [client 4.193.209.111:21433] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/veuntzdf.php"] [unique_id "aUu2wHs-DlKLysSq5L-D1AAAAdU"]
[Wed Dec 24 17:47:45.152485 2025] [:error] [pid 54139:tid 54143] [client 4.193.209.111:21387] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/veuntzdf.php"] [unique_id "aUu2wcrYCZenIDzgXuKG9wAAAQI"]
[Wed Dec 24 17:47:45.926903 2025] [:error] [pid 16466:tid 16474] [client 4.193.209.111:21396] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/veuntzdf.php"] [unique_id "aUu2wbu0JcuKJMjJn6wf1wAAAAQ"]
[Wed Dec 24 17:47:47.551753 2025] [:error] [pid 28777:tid 28788] [client 4.193.209.111:21500] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/veuntzdf.php"] [unique_id "aUu2w5BVBcZ34cSqz8okWgAAAYk"]
[Wed Dec 24 17:47:49.432325 2025] [:error] [pid 28405:tid 28426] [client 4.193.209.111:21393] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xenium4.php"] [unique_id "aUu2xcKkTWlhmfdXFqZW4wAAAVA"]
[Wed Dec 24 17:47:56.654778 2025] [:error] [pid 16550:tid 16554] [client 4.193.209.111:21502] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-729.php"] [unique_id "aUu2zKYYcdD-LuO7vrDn4AAAAMI"]
[Wed Dec 24 17:47:57.289917 2025] [:error] [pid 28405:tid 28420] [client 4.193.209.111:21492] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-729.php"] [unique_id "aUu2zcKkTWlhmfdXFqZXCwAAAUo"]
[Wed Dec 24 17:47:58.875984 2025] [:error] [pid 29371:tid 29387] [client 4.193.209.111:51196] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-729.php"] [unique_id "aUu2zns-DlKLysSq5L-D_AAAAc4"]
[Wed Dec 24 17:48:00.323697 2025] [:error] [pid 28405:tid 28430] [client 4.193.209.111:21444] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-729.php"] [unique_id "aUu20MKkTWlhmfdXFqZXFAAAAVQ"]
[Wed Dec 24 17:48:01.276015 2025] [:error] [pid 28405:tid 28429] [client 4.193.209.111:51145] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aUu20cKkTWlhmfdXFqZXHQAAAVM"]
[Wed Dec 24 17:48:02.121696 2025] [:error] [pid 54139:tid 54148] [client 4.193.209.111:51157] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aUu20srYCZenIDzgXuKHRQAAAQc"]
[Wed Dec 24 17:48:03.478360 2025] [:error] [pid 28405:tid 28409] [client 4.193.209.111:51141] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aUu208KkTWlhmfdXFqZXKAAAAUA"]
[Wed Dec 24 17:48:04.715661 2025] [:error] [pid 54139:tid 54144] [client 4.193.209.111:51143] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aUu21MrYCZenIDzgXuKHTQAAAQM"]
[Wed Dec 24 17:48:05.802107 2025] [:error] [pid 16466:tid 16485] [client 4.193.209.111:51170] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aUu21bu0JcuKJMjJn6wgEQAAAA8"]
[Wed Dec 24 17:48:07.081506 2025] [:error] [pid 16468:tid 16530] [client 4.193.209.111:51184] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aUu214dyfuSTFLkCbP9-egAAAIY"]
[Wed Dec 24 17:48:08.017103 2025] [:error] [pid 28405:tid 28423] [client 4.193.209.111:21454] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aUu22MKkTWlhmfdXFqZXNgAAAU0"]
[Wed Dec 24 17:48:08.866014 2025] [:error] [pid 16467:tid 16502] [client 4.193.209.111:51165] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aUu22I0TJMcBxX5slgo5BwAAAEU"]
[Wed Dec 24 17:48:10.195301 2025] [:error] [pid 16550:tid 16574] [client 4.193.209.111:51198] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aUu22qYYcdD-LuO7vrDn5AAAANY"]
[Wed Dec 24 17:48:11.045107 2025] [:error] [pid 28405:tid 28409] [client 4.193.209.111:51197] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aUu228KkTWlhmfdXFqZXQQAAAUA"]
[Wed Dec 24 17:48:12.174184 2025] [:error] [pid 16467:tid 16518] [client 4.193.209.111:51153] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aUu23I0TJMcBxX5slgo5DwAAAFU"]
[Wed Dec 24 17:48:12.817761 2025] [:error] [pid 28405:tid 28424] [client 4.193.209.111:51177] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aUu23MKkTWlhmfdXFqZXUAAAAU4"]
[Wed Dec 24 17:48:14.735118 2025] [:error] [pid 16468:tid 16546] [client 4.193.209.111:51172] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "aUu23odyfuSTFLkCbP9-igAAAJY"]
[Wed Dec 24 17:48:16.519950 2025] [:error] [pid 16468:tid 16544] [client 4.193.209.111:51193] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "aUu24IdyfuSTFLkCbP9-lAAAAJQ"]
[Wed Dec 24 17:48:17.094204 2025] [:error] [pid 28405:tid 28424] [client 4.193.209.111:51158] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "aUu24cKkTWlhmfdXFqZXbwAAAU4"]
[Wed Dec 24 17:48:17.495641 2025] [:error] [pid 28777:tid 28802] [client 4.193.209.111:51144] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "aUu24ZBVBcZ34cSqz8okjwAAAZc"]
[Wed Dec 24 17:48:18.428388 2025] [:error] [pid 28405:tid 28429] [client 4.193.209.111:51185] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aUu24sKkTWlhmfdXFqZXfAAAAVM"]
[Wed Dec 24 17:48:19.748454 2025] [:error] [pid 54139:tid 54155] [client 4.193.209.111:21468] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aUu248rYCZenIDzgXuKHZgAAAQ4"]
[Wed Dec 24 17:48:20.758669 2025] [:error] [pid 54139:tid 54149] [client 4.193.209.111:21457] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aUu25MrYCZenIDzgXuKHbAAAAQg"]
[Wed Dec 24 17:48:21.786304 2025] [:error] [pid 16466:tid 16478] [client 4.193.209.111:21464] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aUu25bu0JcuKJMjJn6wgJQAAAAg"]
[Wed Dec 24 17:48:24.315781 2025] [:error] [pid 54139:tid 54161] [client 4.193.209.111:21445] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUu26MrYCZenIDzgXuKHfQAAARQ"]
[Wed Dec 24 17:48:25.889500 2025] [:error] [pid 16466:tid 16471] [client 4.193.209.111:51191] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUu26bu0JcuKJMjJn6wgKwAAAAE"]
[Wed Dec 24 17:48:26.984394 2025] [:error] [pid 16467:tid 16504] [client 4.193.209.111:21465] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUu26o0TJMcBxX5slgo5GwAAAEc"]
[Wed Dec 24 17:48:27.828368 2025] [:error] [pid 16468:tid 16536] [client 4.193.209.111:51192] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aUu264dyfuSTFLkCbP9-pwAAAIw"]
[Wed Dec 24 17:48:29.147817 2025] [:error] [pid 29371:tid 29381] [client 4.193.209.111:21448] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aUu27Xs-DlKLysSq5L-EOQAAAcg"]
[Wed Dec 24 17:48:30.161635 2025] [:error] [pid 16550:tid 16572] [client 4.193.209.111:51149] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aUu27qYYcdD-LuO7vrDn9AAAANQ"]
[Wed Dec 24 17:48:31.365900 2025] [:error] [pid 16467:tid 16516] [client 4.193.209.111:21463] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aUu2740TJMcBxX5slgo5KAAAAFM"]
[Wed Dec 24 17:48:33.446287 2025] [:error] [pid 16550:tid 16565] [client 4.193.209.111:21453] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aUu28aYYcdD-LuO7vrDn_QAAAM0"]
[Wed Dec 24 17:48:34.592049 2025] [:error] [pid 28405:tid 28411] [client 4.193.209.111:51189] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aUu28sKkTWlhmfdXFqZXlwAAAUI"]
[Wed Dec 24 17:48:35.352247 2025] [:error] [pid 54139:tid 54159] [client 4.193.209.111:51180] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aUu288rYCZenIDzgXuKHiQAAARI"]
[Wed Dec 24 17:48:36.162939 2025] [:error] [pid 29371:tid 29394] [client 4.193.209.111:21442] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aUu29Hs-DlKLysSq5L-ERwAAAdU"]
[Wed Dec 24 17:48:37.289526 2025] [:error] [pid 29371:tid 29397] [client 4.193.209.111:21456] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aUu29Xs-DlKLysSq5L-ESQAAAdg"]
[Wed Dec 24 17:48:39.091481 2025] [:error] [pid 16550:tid 16562] [client 4.193.209.111:21497] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUu296YYcdD-LuO7vrDoBwAAAMo"]
[Wed Dec 24 17:48:39.996333 2025] [:error] [pid 16466:tid 16481] [client 4.193.209.111:51190] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUu297u0JcuKJMjJn6wgTQAAAAs"]
[Wed Dec 24 17:48:40.839302 2025] [:error] [pid 28777:tid 28784] [client 4.193.209.111:21480] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUu2-JBVBcZ34cSqz8oknQAAAYU"]
[Wed Dec 24 17:48:41.610335 2025] [:error] [pid 16466:tid 16493] [client 4.193.209.111:21437] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aUu2-bu0JcuKJMjJn6wgUAAAABc"]
[Wed Dec 24 17:48:42.716911 2025] [:error] [pid 54139:tid 54153] [client 4.193.209.111:21421] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atex1.php"] [unique_id "aUu2-srYCZenIDzgXuKHnAAAAQw"]
[Wed Dec 24 17:48:44.184676 2025] [:error] [pid 16550:tid 16573] [client 4.193.209.111:21495] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atex1.php"] [unique_id "aUu2_KYYcdD-LuO7vrDoDQAAANU"]
[Wed Dec 24 17:48:45.088445 2025] [:error] [pid 16467:tid 16521] [client 4.193.209.111:51174] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atex1.php"] [unique_id "aUu2_Y0TJMcBxX5slgo5LAAAAFg"]
[Wed Dec 24 17:48:46.160041 2025] [:error] [pid 29371:tid 29380] [client 4.193.209.111:51194] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atex1.php"] [unique_id "aUu2_ns-DlKLysSq5L-EUwAAAcc"]
[Wed Dec 24 17:48:48.377321 2025] [:error] [pid 28405:tid 28430] [client 4.193.209.111:51199] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-advaced.php"] [unique_id "aUu3AMKkTWlhmfdXFqZXpQAAAVQ"]
[Wed Dec 24 17:48:48.672150 2025] [:error] [pid 54139:tid 54147] [client 4.193.209.111:21428] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-advaced.php"] [unique_id "aUu3AMrYCZenIDzgXuKHpgAAAQY"]
[Wed Dec 24 17:48:49.224508 2025] [:error] [pid 54139:tid 54149] [client 4.193.209.111:21438] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-advaced.php"] [unique_id "aUu3AcrYCZenIDzgXuKHpwAAAQg"]
[Wed Dec 24 17:48:49.988720 2025] [:error] [pid 28777:tid 28797] [client 4.193.209.111:51155] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-advaced.php"] [unique_id "aUu3AZBVBcZ34cSqz8okpAAAAZI"]
[Wed Dec 24 17:48:50.561164 2025] [:error] [pid 16467:tid 16515] [client 4.193.209.111:21425] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUu3Ao0TJMcBxX5slgo5NQAAAFI"]
[Wed Dec 24 17:48:51.388300 2025] [:error] [pid 28405:tid 28417] [client 4.193.209.111:51179] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUu3A8KkTWlhmfdXFqZXpgAAAUg"]
[Wed Dec 24 17:48:52.065065 2025] [:error] [pid 28405:tid 28429] [client 4.193.209.111:51136] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUu3BMKkTWlhmfdXFqZXqQAAAVM"]
[Wed Dec 24 17:48:53.006112 2025] [:error] [pid 29371:tid 29388] [client 4.193.209.111:21491] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aUu3BXs-DlKLysSq5L-EVwAAAc8"]
[Wed Dec 24 17:48:53.949679 2025] [:error] [pid 16550:tid 16569] [client 4.193.209.111:21483] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aUu3BaYYcdD-LuO7vrDoFAAAANE"]
[Wed Dec 24 17:48:54.673907 2025] [:error] [pid 29371:tid 29374] [client 4.193.209.111:21487] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aUu3Bns-DlKLysSq5L-EWAAAAcE"]
[Wed Dec 24 17:49:02.338033 2025] [:error] [pid 16550:tid 16569] [client 4.193.209.111:51163] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "aUu3DqYYcdD-LuO7vrDoJQAAANE"]
[Wed Dec 24 17:49:04.014448 2025] [:error] [pid 16550:tid 16552] [client 4.193.209.111:21460] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "aUu3EKYYcdD-LuO7vrDoKAAAAMA"]
[Wed Dec 24 17:49:06.190596 2025] [:error] [pid 29371:tid 29383] [client 4.193.209.111:51188] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "aUu3Ens-DlKLysSq5L-EYQAAAco"]
[Wed Dec 24 17:49:08.813805 2025] [:error] [pid 29371:tid 29396] [client 4.193.209.111:51173] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "aUu3FHs-DlKLysSq5L-EZQAAAdc"]
[Wed Dec 24 17:49:09.387632 2025] [:error] [pid 28777:tid 28794] [client 4.193.209.111:51160] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ghreshttryu.php"] [unique_id "aUu3FZBVBcZ34cSqz8oktQAAAY8"]
[Wed Dec 24 17:49:09.885591 2025] [:error] [pid 16550:tid 16575] [client 4.193.209.111:21388] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ghreshttryu.php"] [unique_id "aUu3FaYYcdD-LuO7vrDoLgAAANc"]
[Wed Dec 24 17:49:11.364481 2025] [:error] [pid 28405:tid 28420] [client 4.193.209.111:21409] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ghreshttryu.php"] [unique_id "aUu3F8KkTWlhmfdXFqZXwQAAAUo"]
[Wed Dec 24 17:49:12.965812 2025] [:error] [pid 16466:tid 16481] [client 4.193.209.111:51161] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ghreshttryu.php"] [unique_id "aUu3GLu0JcuKJMjJn6wgfgAAAAs"]
[Wed Dec 24 17:49:14.669778 2025] [:error] [pid 16468:tid 16537] [client 4.193.209.111:21443] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/krypton.php"] [unique_id "aUu3GodyfuSTFLkCbP9-8wAAAI0"]
[Wed Dec 24 17:49:16.495283 2025] [:error] [pid 16468:tid 16530] [client 4.193.209.111:51140] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/krypton.php"] [unique_id "aUu3HIdyfuSTFLkCbP9-9gAAAIY"]
[Wed Dec 24 17:49:17.731512 2025] [:error] [pid 16468:tid 16531] [client 4.193.209.111:21485] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/krypton.php"] [unique_id "aUu3HYdyfuSTFLkCbP9-9wAAAIc"]
[Wed Dec 24 17:49:18.937938 2025] [:error] [pid 29371:tid 29393] [client 4.193.209.111:21503] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/krypton.php"] [unique_id "aUu3Hns-DlKLysSq5L-EcAAAAdQ"]
[Wed Dec 24 17:49:20.364271 2025] [:error] [pid 29371:tid 29375] [client 4.193.209.111:51137] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aUu3IHs-DlKLysSq5L-EcwAAAcI"]
[Wed Dec 24 17:49:21.504407 2025] [:error] [pid 28777:tid 28790] [client 4.193.209.111:21461] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aUu3IZBVBcZ34cSqz8okwQAAAYs"]
[Wed Dec 24 17:49:22.613220 2025] [:error] [pid 16467:tid 16512] [client 4.193.209.111:21376] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aUu3Io0TJMcBxX5slgo5UgAAAE8"]
[Wed Dec 24 17:49:23.445706 2025] [:error] [pid 28405:tid 28415] [client 4.193.209.111:51178] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aUu3I8KkTWlhmfdXFqZXxgAAAUY"]
[Wed Dec 24 17:49:24.163406 2025] [:error] [pid 16467:tid 16500] [client 4.193.209.111:51156] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "aUu3JI0TJMcBxX5slgo5UwAAAEM"]
[Wed Dec 24 17:49:25.104299 2025] [:error] [pid 29371:tid 29393] [client 4.193.209.111:51176] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "aUu3JXs-DlKLysSq5L-EewAAAdQ"]
[Wed Dec 24 17:49:25.757418 2025] [:error] [pid 16467:tid 16506] [client 4.193.209.111:51167] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "aUu3JY0TJMcBxX5slgo5WgAAAEk"]
[Wed Dec 24 17:49:26.177454 2025] [:error] [pid 28777:tid 28791] [client 4.193.209.111:51181] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "aUu3JpBVBcZ34cSqz8okwwAAAYw"]
[Wed Dec 24 17:49:27.136511 2025] [:error] [pid 16466:tid 16470] [client 4.193.209.111:21381] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-header.php"] [unique_id "aUu3J7u0JcuKJMjJn6wghAAAAAA"]
[Wed Dec 24 17:49:27.949738 2025] [:error] [pid 16550:tid 16557] [client 4.193.209.111:21395] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-header.php"] [unique_id "aUu3J6YYcdD-LuO7vrDoOgAAAMU"]
[Wed Dec 24 17:49:28.381673 2025] [:error] [pid 28405:tid 28429] [client 4.193.209.111:21478] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-header.php"] [unique_id "aUu3KMKkTWlhmfdXFqZX0gAAAVM"]
[Wed Dec 24 17:49:29.762299 2025] [:error] [pid 28405:tid 28412] [client 4.193.209.111:21475] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-header.php"] [unique_id "aUu3KcKkTWlhmfdXFqZX1wAAAUM"]
[Wed Dec 24 17:49:30.562247 2025] [:error] [pid 28405:tid 28433] [client 4.193.209.111:51195] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aUu3KsKkTWlhmfdXFqZX2gAAAVc"]
[Wed Dec 24 17:49:30.980798 2025] [:error] [pid 28405:tid 28431] [client 4.193.209.111:21390] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aUu3KsKkTWlhmfdXFqZX3AAAAVU"]
[Wed Dec 24 17:49:31.672697 2025] [:error] [pid 29371:tid 29394] [client 4.193.209.111:21431] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aUu3K3s-DlKLysSq5L-EfwAAAdU"]
[Wed Dec 24 17:49:32.991030 2025] [:error] [pid 16466:tid 16484] [client 4.193.209.111:51159] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aUu3LLu0JcuKJMjJn6wgiAAAAA4"]
[Wed Dec 24 17:49:34.356143 2025] [:error] [pid 16466:tid 16488] [client 4.193.209.111:21407] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aUu3Lru0JcuKJMjJn6wgigAAABI"]
[Wed Dec 24 17:49:35.754454 2025] [:error] [pid 28777:tid 28779] [client 4.193.209.111:21401] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aUu3L5BVBcZ34cSqz8okyQAAAYA"]
[Wed Dec 24 17:49:36.743362 2025] [:error] [pid 16467:tid 16517] [client 4.193.209.111:51171] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aUu3MI0TJMcBxX5slgo5ZgAAAFQ"]
[Wed Dec 24 17:49:37.853272 2025] [:error] [pid 29371:tid 29393] [client 4.193.209.111:21473] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aUu3MXs-DlKLysSq5L-EhAAAAdQ"]
[Wed Dec 24 17:49:39.111620 2025] [:error] [pid 16550:tid 16568] [client 4.193.209.111:21346] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aUu3M6YYcdD-LuO7vrDoRwAAANA"]
[Wed Dec 24 17:49:39.885674 2025] [:error] [pid 16468:tid 16544] [client 4.193.209.111:21432] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aUu3M4dyfuSTFLkCbP9_CAAAAJQ"]
[Wed Dec 24 17:49:40.470864 2025] [:error] [pid 28405:tid 28425] [client 4.193.209.111:21466] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aUu3NMKkTWlhmfdXFqZX7AAAAU8"]
[Wed Dec 24 17:49:41.345670 2025] [:error] [pid 29371:tid 29380] [client 4.193.209.111:21321] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aUu3NXs-DlKLysSq5L-EhQAAAcc"]
[Wed Dec 24 17:49:41.831310 2025] [:error] [pid 29371:tid 29383] [client 4.193.209.111:21446] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aUu3NXs-DlKLysSq5L-EiQAAAco"]
[Wed Dec 24 17:49:42.473724 2025] [:error] [pid 16550:tid 16565] [client 4.193.209.111:21412] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aUu3NqYYcdD-LuO7vrDoSgAAAM0"]
[Wed Dec 24 17:49:43.127991 2025] [:error] [pid 29371:tid 29388] [client 4.193.209.111:51150] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aUu3N3s-DlKLysSq5L-EigAAAc8"]
[Wed Dec 24 17:49:43.925142 2025] [:error] [pid 28405:tid 28426] [client 4.193.209.111:21452] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aUu3N8KkTWlhmfdXFqZX8QAAAVA"]
[Wed Dec 24 17:49:45.010132 2025] [:error] [pid 16467:tid 16520] [client 4.193.209.111:21333] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tesTyuj.php"] [unique_id "aUu3OY0TJMcBxX5slgo5aQAAAFc"]
[Wed Dec 24 17:49:45.901639 2025] [:error] [pid 28405:tid 28414] [client 4.193.209.111:21281] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tesTyuj.php"] [unique_id "aUu3OcKkTWlhmfdXFqZX9gAAAUU"]
[Wed Dec 24 17:49:46.862096 2025] [:error] [pid 16466:tid 16485] [client 4.193.209.111:21434] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tesTyuj.php"] [unique_id "aUu3Oru0JcuKJMjJn6wglwAAAA8"]
[Wed Dec 24 17:49:47.465489 2025] [:error] [pid 54139:tid 54161] [client 4.193.209.111:21398] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tesTyuj.php"] [unique_id "aUu3O8rYCZenIDzgXuKH5QAAARQ"]
[Wed Dec 24 17:49:48.964565 2025] [:error] [pid 28777:tid 28790] [client 4.193.209.111:21332] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUu3PJBVBcZ34cSqz8okywAAAYs"]
[Wed Dec 24 17:49:49.900612 2025] [:error] [pid 16550:tid 16554] [client 4.193.209.111:21410] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUu3PaYYcdD-LuO7vrDoUwAAAMI"]
[Wed Dec 24 17:49:51.016115 2025] [:error] [pid 54139:tid 54143] [client 4.193.209.111:51187] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUu3P8rYCZenIDzgXuKH6AAAAQI"]
[Wed Dec 24 17:49:51.885025 2025] [:error] [pid 16467:tid 16501] [client 4.193.209.111:21313] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUu3P40TJMcBxX5slgo5dAAAAEQ"]
[Wed Dec 24 17:49:52.416459 2025] [:error] [pid 54139:tid 54159] [client 4.193.209.111:21351] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aUu3QMrYCZenIDzgXuKH6gAAARI"]
[Wed Dec 24 17:49:52.986478 2025] [:error] [pid 16467:tid 16514] [client 4.193.209.111:51138] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aUu3QI0TJMcBxX5slgo5eAAAAFE"]
[Wed Dec 24 17:49:53.828143 2025] [:error] [pid 16550:tid 16555] [client 4.193.209.111:21323] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aUu3QaYYcdD-LuO7vrDoWAAAAMM"]
[Wed Dec 24 17:49:54.734850 2025] [:error] [pid 54139:tid 54152] [client 4.193.209.111:21353] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aUu3QsrYCZenIDzgXuKH8AAAAQs"]
[Wed Dec 24 17:49:55.966375 2025] [:error] [pid 16550:tid 16553] [client 4.193.209.111:21386] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sid.php"] [unique_id "aUu3Q6YYcdD-LuO7vrDoXwAAAME"]
[Wed Dec 24 17:49:57.013556 2025] [:error] [pid 54139:tid 54147] [client 4.193.209.111:51148] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sid.php"] [unique_id "aUu3RcrYCZenIDzgXuKH8wAAAQY"]
[Wed Dec 24 17:49:57.794006 2025] [:error] [pid 16550:tid 16562] [client 4.193.209.111:51151] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sid.php"] [unique_id "aUu3RaYYcdD-LuO7vrDoZgAAAMo"]
[Wed Dec 24 17:49:58.982451 2025] [:error] [pid 54139:tid 54156] [client 4.193.209.111:21418] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sid.php"] [unique_id "aUu3RsrYCZenIDzgXuKH_AAAAQ8"]
[Wed Dec 24 17:49:59.556436 2025] [:error] [pid 54139:tid 54153] [client 4.193.209.111:21469] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-title.php"] [unique_id "aUu3R8rYCZenIDzgXuKH_QAAAQw"]
[Wed Dec 24 17:50:00.079362 2025] [:error] [pid 16467:tid 16501] [client 4.193.209.111:21328] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-title.php"] [unique_id "aUu3SI0TJMcBxX5slgo5ewAAAEQ"]
[Wed Dec 24 17:50:00.612137 2025] [:error] [pid 16467:tid 16502] [client 4.193.209.111:21481] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-title.php"] [unique_id "aUu3SI0TJMcBxX5slgo5fAAAAEU"]
[Wed Dec 24 17:50:01.377256 2025] [:error] [pid 54139:tid 54142] [client 4.193.209.111:21264] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-title.php"] [unique_id "aUu3ScrYCZenIDzgXuKIAgAAAQE"]
[Wed Dec 24 17:50:07.448734 2025] [:error] [pid 28405:tid 28434] [client 4.193.209.111:21325] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ac.php"] [unique_id "aUu3T8KkTWlhmfdXFqZYJAAAAVg"]
[Wed Dec 24 17:50:08.499874 2025] [:error] [pid 16467:tid 16508] [client 4.193.209.111:51186] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ac.php"] [unique_id "aUu3UI0TJMcBxX5slgo5vAAAAEs"]
[Wed Dec 24 17:50:08.968186 2025] [:error] [pid 54139:tid 54147] [client 4.193.209.111:21355] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ac.php"] [unique_id "aUu3UMrYCZenIDzgXuKIMQAAAQY"]
[Wed Dec 24 17:50:09.489666 2025] [:error] [pid 16466:tid 16480] [client 4.193.209.111:21316] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ac.php"] [unique_id "aUu3Ubu0JcuKJMjJn6wgxAAAAAo"]
[Wed Dec 24 17:50:09.900984 2025] [:error] [pid 28777:tid 28789] [client 4.193.209.111:21382] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUu3UZBVBcZ34cSqz8olBQAAAYo"]
[Wed Dec 24 17:50:10.266634 2025] [:error] [pid 28405:tid 28431] [client 4.193.209.111:51183] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUu3UsKkTWlhmfdXFqZYNwAAAVU"]
[Wed Dec 24 17:50:11.246319 2025] [:error] [pid 28777:tid 28781] [client 4.193.209.111:21441] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUu3U5BVBcZ34cSqz8olBwAAAYI"]
[Wed Dec 24 17:50:11.717358 2025] [:error] [pid 28405:tid 28424] [client 4.193.209.111:21343] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_57c3d4.php"] [unique_id "aUu3U8KkTWlhmfdXFqZYWwAAAU4"]
[Wed Dec 24 17:50:12.692313 2025] [:error] [pid 28405:tid 28409] [client 4.193.209.111:21459] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fc72f.php"] [unique_id "aUu3VMKkTWlhmfdXFqZYcgAAAUA"]
[Wed Dec 24 17:50:13.666744 2025] [:error] [pid 16467:tid 16518] [client 4.193.209.111:21383] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fc72f.php"] [unique_id "aUu3VY0TJMcBxX5slgo5wAAAAFU"]
[Wed Dec 24 17:50:14.572860 2025] [:error] [pid 28405:tid 28430] [client 4.193.209.111:21361] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fc72f.php"] [unique_id "aUu3VsKkTWlhmfdXFqZYgwAAAVQ"]
[Wed Dec 24 17:50:15.252023 2025] [:error] [pid 28777:tid 28797] [client 4.193.209.111:51166] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fc72f.php"] [unique_id "aUu3V5BVBcZ34cSqz8olLwAAAZI"]
[Wed Dec 24 17:50:16.153294 2025] [:error] [pid 16466:tid 16478] [client 4.193.209.111:51146] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUu3WLu0JcuKJMjJn6wg6QAAAAg"]
[Wed Dec 24 17:50:17.924001 2025] [:error] [pid 16550:tid 16572] [client 4.193.209.111:21472] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUu3WaYYcdD-LuO7vrDoyQAAANQ"]
[Wed Dec 24 17:50:18.720370 2025] [:error] [pid 16550:tid 16556] [client 4.193.209.111:21261] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUu3WqYYcdD-LuO7vrDoywAAAMQ"]
[Wed Dec 24 17:50:20.458939 2025] [:error] [pid 54139:tid 54141] [client 4.193.209.111:51182] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aUu3XMrYCZenIDzgXuKIXgAAAQA"]
[Wed Dec 24 17:50:21.602770 2025] [:error] [pid 54139:tid 54157] [client 4.193.209.111:21416] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jjrpo.php"] [unique_id "aUu3XcrYCZenIDzgXuKIYQAAARA"]
[Wed Dec 24 17:50:22.924470 2025] [:error] [pid 16550:tid 16557] [client 4.193.209.111:21408] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jjrpo.php"] [unique_id "aUu3XqYYcdD-LuO7vrDozwAAAMU"]
[Wed Dec 24 17:50:23.965843 2025] [:error] [pid 16550:tid 16561] [client 4.193.209.111:21291] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jjrpo.php"] [unique_id "aUu3X6YYcdD-LuO7vrDo0AAAAMk"]
[Wed Dec 24 17:50:25.580631 2025] [:error] [pid 54139:tid 54147] [client 4.193.209.111:21347] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jjrpo.php"] [unique_id "aUu3YcrYCZenIDzgXuKIZgAAAQY"]
[Wed Dec 24 17:50:26.586055 2025] [:error] [pid 54139:tid 54161] [client 4.193.209.111:21322] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "aUu3YsrYCZenIDzgXuKIbAAAARQ"]
[Wed Dec 24 17:50:28.656640 2025] [:error] [pid 16467:tid 16500] [client 4.193.209.111:21411] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "aUu3ZI0TJMcBxX5slgo54wAAAEM"]
[Wed Dec 24 17:50:29.574155 2025] [:error] [pid 28405:tid 28426] [client 4.193.209.111:21429] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "aUu3ZcKkTWlhmfdXFqZYmwAAAVA"]
[Wed Dec 24 17:50:31.183050 2025] [:error] [pid 54139:tid 54146] [client 4.193.209.111:21422] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "aUu3Z8rYCZenIDzgXuKIfAAAAQU"]
[Wed Dec 24 17:50:31.975453 2025] [:error] [pid 28405:tid 28412] [client 4.193.209.111:51152] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "aUu3Z8KkTWlhmfdXFqZYngAAAUM"]
[Wed Dec 24 17:50:33.172330 2025] [:error] [pid 16550:tid 16570] [client 4.193.209.111:21414] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "aUu3aaYYcdD-LuO7vrDo4wAAANI"]
[Wed Dec 24 17:50:33.738589 2025] [:error] [pid 16550:tid 16569] [client 4.193.209.111:21270] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "aUu3aaYYcdD-LuO7vrDo5AAAANE"]
[Wed Dec 24 17:50:34.338062 2025] [:error] [pid 28405:tid 28430] [client 4.193.209.111:21405] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "aUu3asKkTWlhmfdXFqZYogAAAVQ"]
[Wed Dec 24 17:50:34.791435 2025] [:error] [pid 28777:tid 28798] [client 4.193.209.111:51147] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aUu3apBVBcZ34cSqz8olSAAAAZM"]
[Wed Dec 24 17:50:37.400128 2025] [:error] [pid 54139:tid 54159] [client 4.193.209.111:21420] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aUu3bcrYCZenIDzgXuKIigAAARI"]
[Wed Dec 24 17:50:39.177304 2025] [:error] [pid 16550:tid 16574] [client 4.193.209.111:21380] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aUu3b6YYcdD-LuO7vrDo7AAAANY"]
[Wed Dec 24 17:50:40.715648 2025] [:error] [pid 16468:tid 16524] [client 4.193.209.111:21339] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aUu3cIdyfuSTFLkCbP9_TAAAAIA"]
[Wed Dec 24 17:50:41.648672 2025] [:error] [pid 28405:tid 28426] [client 4.193.209.111:51175] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aUu3ccKkTWlhmfdXFqZYtQAAAVA"]
[Wed Dec 24 17:50:42.553612 2025] [:error] [pid 54139:tid 54143] [client 4.193.209.111:21403] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aUu3csrYCZenIDzgXuKIjwAAAQI"]
[Wed Dec 24 17:50:43.795874 2025] [:error] [pid 29371:tid 29375] [client 4.193.209.111:21362] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aUu3c3s-DlKLysSq5L-E1QAAAcI"]
[Wed Dec 24 17:50:44.854383 2025] [:error] [pid 54139:tid 54152] [client 4.193.209.111:21426] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aUu3dMrYCZenIDzgXuKIkwAAAQs"]
[Wed Dec 24 17:50:45.410119 2025] [:error] [pid 16466:tid 16471] [client 4.193.209.111:21423] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUu3dbu0JcuKJMjJn6whCQAAAAE"]
[Wed Dec 24 17:50:46.706758 2025] [:error] [pid 28405:tid 28432] [client 4.193.209.111:21406] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUu3dsKkTWlhmfdXFqZYuAAAAVY"]
[Wed Dec 24 17:50:49.591217 2025] [:error] [pid 28405:tid 28422] [client 4.193.209.111:21391] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUu3ecKkTWlhmfdXFqZYuQAAAUw"]
[Wed Dec 24 17:50:50.326519 2025] [:error] [pid 28777:tid 28785] [client 4.193.209.111:21488] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aUu3epBVBcZ34cSqz8olXgAAAYY"]
[Wed Dec 24 17:50:50.795447 2025] [:error] [pid 16550:tid 16564] [client 4.193.209.111:21342] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jdlqi.php"] [unique_id "aUu3eqYYcdD-LuO7vrDo-QAAAMw"]
[Wed Dec 24 17:50:51.435984 2025] [:error] [pid 28777:tid 28794] [client 4.193.209.111:21501] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jdlqi.php"] [unique_id "aUu3e5BVBcZ34cSqz8olYAAAAY8"]
[Wed Dec 24 17:50:51.696443 2025] [:error] [pid 28777:tid 28781] [client 4.193.209.111:21253] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jdlqi.php"] [unique_id "aUu3e5BVBcZ34cSqz8olYQAAAYI"]
[Wed Dec 24 17:50:52.060171 2025] [:error] [pid 16468:tid 16525] [client 4.193.209.111:21336] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jdlqi.php"] [unique_id "aUu3fIdyfuSTFLkCbP9_VgAAAIE"]
[Wed Dec 24 17:50:52.392320 2025] [:error] [pid 16468:tid 16533] [client 4.193.209.111:21338] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/khgdl.php"] [unique_id "aUu3fIdyfuSTFLkCbP9_VwAAAIk"]
[Wed Dec 24 17:50:53.252385 2025] [:error] [pid 16550:tid 16565] [client 4.193.209.111:21435] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/khgdl.php"] [unique_id "aUu3faYYcdD-LuO7vrDo-gAAAM0"]
[Wed Dec 24 17:50:53.778911 2025] [:error] [pid 29371:tid 29381] [client 4.193.209.111:21496] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/khgdl.php"] [unique_id "aUu3fXs-DlKLysSq5L-E3QAAAcg"]
[Wed Dec 24 17:50:54.231662 2025] [:error] [pid 16550:tid 16560] [client 4.193.209.111:21312] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/khgdl.php"] [unique_id "aUu3fqYYcdD-LuO7vrDo-wAAAMg"]
[Wed Dec 24 17:50:54.846441 2025] [:error] [pid 16466:tid 16476] [client 4.193.209.111:21417] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "aUu3fru0JcuKJMjJn6whFgAAAAY"]
[Wed Dec 24 17:50:56.765763 2025] [:error] [pid 54139:tid 54142] [client 4.193.209.111:21419] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "aUu3gMrYCZenIDzgXuKImwAAAQE"]
[Wed Dec 24 17:50:57.385726 2025] [:error] [pid 54139:tid 54159] [client 4.193.209.111:21271] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "aUu3gcrYCZenIDzgXuKInwAAARI"]
[Wed Dec 24 17:50:58.600749 2025] [:error] [pid 54139:tid 54152] [client 4.193.209.111:21265] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "aUu3gsrYCZenIDzgXuKIoQAAAQs"]
[Wed Dec 24 17:50:59.483293 2025] [:error] [pid 54139:tid 54144] [client 4.193.209.111:51168] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xopvne.php"] [unique_id "aUu3g8rYCZenIDzgXuKIowAAAQM"]
[Wed Dec 24 17:50:59.840809 2025] [:error] [pid 16468:tid 16532] [client 4.193.209.111:21340] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xopvne.php"] [unique_id "aUu3g4dyfuSTFLkCbP9_YQAAAIg"]
[Wed Dec 24 17:51:00.436913 2025] [:error] [pid 16468:tid 16543] [client 4.193.209.111:51169] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xopvne.php"] [unique_id "aUu3hIdyfuSTFLkCbP9_ZAAAAJM"]
[Wed Dec 24 17:51:01.828501 2025] [:error] [pid 16466:tid 16481] [client 4.193.209.111:21284] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xopvne.php"] [unique_id "aUu3hbu0JcuKJMjJn6whHwAAAAs"]
[Wed Dec 24 17:51:02.365611 2025] [:error] [pid 16550:tid 16553] [client 4.193.209.111:21262] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm18.php"] [unique_id "aUu3hqYYcdD-LuO7vrDo_wAAAME"]
[Wed Dec 24 17:51:03.537980 2025] [:error] [pid 28405:tid 28427] [client 4.193.209.111:21477] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm18.php"] [unique_id "aUu3h8KkTWlhmfdXFqZYxAAAAVE"]
[Wed Dec 24 17:51:04.312114 2025] [:error] [pid 28405:tid 28426] [client 4.193.209.111:21458] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm18.php"] [unique_id "aUu3iMKkTWlhmfdXFqZYyAAAAVA"]
[Wed Dec 24 17:51:06.140413 2025] [:error] [pid 16550:tid 16566] [client 4.193.209.111:21320] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm18.php"] [unique_id "aUu3iqYYcdD-LuO7vrDpAQAAAM4"]
[Wed Dec 24 17:51:12.921401 2025] [:error] [pid 28405:tid 28427] [client 4.193.209.111:21398] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qaez.php56"] [unique_id "aUu3kMKkTWlhmfdXFqZY4wAAAVE"]
[Wed Dec 24 17:51:14.821287 2025] [:error] [pid 54139:tid 54141] [client 4.193.209.111:21400] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qaez.php56"] [unique_id "aUu3ksrYCZenIDzgXuKIuAAAAQA"]
[Wed Dec 24 17:51:16.224948 2025] [:error] [pid 29371:tid 29378] [client 4.193.209.111:21357] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qaez.php56"] [unique_id "aUu3lHs-DlKLysSq5L-E7wAAAcU"]
[Wed Dec 24 17:51:18.152990 2025] [:error] [pid 16468:tid 16548] [client 4.193.209.111:21385] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qaez.php56"] [unique_id "aUu3lodyfuSTFLkCbP9_bwAAAJg"]
[Wed Dec 24 17:51:19.515676 2025] [:error] [pid 16467:tid 16519] [client 4.193.209.111:21331] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aUu3l40TJMcBxX5slgo5_AAAAFY"]
[Wed Dec 24 17:51:20.980455 2025] [:error] [pid 28405:tid 28425] [client 4.193.209.111:21350] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aUu3mMKkTWlhmfdXFqZY5gAAAU8"]
[Wed Dec 24 17:51:21.830077 2025] [:error] [pid 28405:tid 28429] [client 4.193.209.111:21484] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aUu3mcKkTWlhmfdXFqZY6AAAAVM"]
[Wed Dec 24 17:51:23.111261 2025] [:error] [pid 16550:tid 16553] [client 4.193.209.111:21378] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aUu3m6YYcdD-LuO7vrDpHAAAAME"]
[Wed Dec 24 17:51:24.573490 2025] [:error] [pid 28777:tid 28790] [client 4.193.209.111:21292] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUu3nJBVBcZ34cSqz8olcQAAAYs"]
[Wed Dec 24 17:51:25.871350 2025] [:error] [pid 28777:tid 28799] [client 4.193.209.111:51164] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUu3nZBVBcZ34cSqz8oldAAAAZQ"]
[Wed Dec 24 17:51:27.528207 2025] [:error] [pid 28405:tid 28416] [client 4.193.209.111:21360] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUu3n8KkTWlhmfdXFqZY7gAAAUc"]
[Wed Dec 24 17:51:28.972944 2025] [:error] [pid 28405:tid 28429] [client 4.193.209.111:21260] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUu3oMKkTWlhmfdXFqZY8gAAAVM"]
[Wed Dec 24 17:51:29.655865 2025] [:error] [pid 16466:tid 16488] [client 4.193.209.111:21490] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s121ws2s.php"] [unique_id "aUu3obu0JcuKJMjJn6whQQAAABI"]
[Wed Dec 24 17:51:30.938383 2025] [:error] [pid 29371:tid 29396] [client 4.193.209.111:21348] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s121ws2s.php"] [unique_id "aUu3ons-DlKLysSq5L-E8wAAAdc"]
[Wed Dec 24 17:51:31.802643 2025] [:error] [pid 16466:tid 16480] [client 4.193.209.111:21258] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s121ws2s.php"] [unique_id "aUu3o7u0JcuKJMjJn6whQwAAAAo"]
[Wed Dec 24 17:51:33.705166 2025] [:error] [pid 16467:tid 16517] [client 4.193.209.111:21462] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s121ws2s.php"] [unique_id "aUu3pY0TJMcBxX5slgo6BAAAAFQ"]
[Wed Dec 24 17:51:35.202884 2025] [:error] [pid 29371:tid 29391] [client 4.193.209.111:21458] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aUu3p3s-DlKLysSq5L-E9gAAAdI"]
[Wed Dec 24 17:51:36.896258 2025] [:error] [pid 16467:tid 16516] [client 4.193.209.111:21330] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aUu3qI0TJMcBxX5slgo6BwAAAFM"]
[Wed Dec 24 17:51:37.500215 2025] [:error] [pid 28777:tid 28798] [client 4.193.209.111:21447] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aUu3qZBVBcZ34cSqz8oldgAAAZM"]
[Wed Dec 24 17:51:38.695988 2025] [:error] [pid 16466:tid 16491] [client 4.193.209.111:21273] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aUu3qru0JcuKJMjJn6whSwAAABU"]
[Wed Dec 24 17:51:40.666132 2025] [:error] [pid 29371:tid 29384] [client 4.193.209.111:21427] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUu3rHs-DlKLysSq5L-E_AAAAcs"]
[Wed Dec 24 17:51:43.153097 2025] [:error] [pid 16466:tid 16482] [client 4.193.209.111:21349] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUu3r7u0JcuKJMjJn6whUgAAAAw"]
[Wed Dec 24 17:51:45.222406 2025] [:error] [pid 16550:tid 16566] [client 4.193.209.111:21470] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUu3saYYcdD-LuO7vrDpJgAAAM4"]
[Wed Dec 24 17:51:46.605290 2025] [:error] [pid 28777:tid 28786] [client 4.193.209.111:21451] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aUu3spBVBcZ34cSqz8olgAAAAYc"]
[Wed Dec 24 17:51:48.604147 2025] [:error] [pid 29371:tid 29376] [client 4.193.209.111:21440] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUu3tHs-DlKLysSq5L-FAAAAAcM"]
[Wed Dec 24 17:51:49.639512 2025] [:error] [pid 28405:tid 28416] [client 4.193.209.111:51154] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUu3tcKkTWlhmfdXFqZZDAAAAUc"]
[Wed Dec 24 17:51:50.750872 2025] [:error] [pid 28777:tid 28785] [client 4.193.209.111:21471] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUu3tpBVBcZ34cSqz8oligAAAYY"]
[Wed Dec 24 17:51:51.555186 2025] [:error] [pid 29371:tid 29375] [client 4.193.209.111:21365] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww3.php"] [unique_id "aUu3t3s-DlKLysSq5L-FBQAAAcI"]
[Wed Dec 24 17:51:52.515448 2025] [:error] [pid 29371:tid 29384] [client 4.193.209.111:21389] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/783de.php"] [unique_id "aUu3uHs-DlKLysSq5L-FBgAAAcs"]
[Wed Dec 24 17:51:52.817982 2025] [:error] [pid 16468:tid 16533] [client 4.193.209.111:21455] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/783de.php"] [unique_id "aUu3uIdyfuSTFLkCbP9_jgAAAIk"]
[Wed Dec 24 17:51:53.480504 2025] [:error] [pid 16550:tid 16552] [client 4.193.209.111:21293] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/783de.php"] [unique_id "aUu3uaYYcdD-LuO7vrDpMQAAAMA"]
[Wed Dec 24 17:51:54.047204 2025] [:error] [pid 29371:tid 29395] [client 4.193.209.111:21267] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/783de.php"] [unique_id "aUu3uns-DlKLysSq5L-FCQAAAdY"]
[Wed Dec 24 17:51:54.565012 2025] [:error] [pid 28405:tid 28420] [client 4.193.209.111:21476] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "aUu3usKkTWlhmfdXFqZZEwAAAUo"]
[Wed Dec 24 17:51:55.133283 2025] [:error] [pid 16467:tid 16515] [client 4.193.209.111:21370] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "aUu3u40TJMcBxX5slgo6EwAAAFI"]
[Wed Dec 24 17:51:55.774174 2025] [:error] [pid 29371:tid 29376] [client 4.193.209.111:21415] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "aUu3u3s-DlKLysSq5L-FEAAAAcM"]
[Wed Dec 24 17:51:56.772417 2025] [:error] [pid 29371:tid 29380] [client 4.193.209.111:21392] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "aUu3vHs-DlKLysSq5L-FEgAAAcc"]
[Wed Dec 24 17:51:57.441500 2025] [:error] [pid 16466:tid 16494] [client 4.193.209.111:21439] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aUu3vbu0JcuKJMjJn6whagAAABg"]
[Wed Dec 24 17:51:58.318979 2025] [:error] [pid 16467:tid 16501] [client 4.193.209.111:14278] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aUu3vo0TJMcBxX5slgo6FQAAAEQ"]
[Wed Dec 24 17:51:59.462792 2025] [:error] [pid 16466:tid 16479] [client 4.193.209.111:21287] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aUu3v7u0JcuKJMjJn6whbgAAAAk"]
[Wed Dec 24 17:52:00.955810 2025] [:error] [pid 16467:tid 16503] [client 4.193.209.111:14276] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aUu3wI0TJMcBxX5slgo6FwAAAEY"]
[Wed Dec 24 17:52:01.715055 2025] [:error] [pid 54139:tid 54143] [client 4.193.209.111:21250] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUu3wcrYCZenIDzgXuKI1QAAAQI"]
[Wed Dec 24 17:52:02.614722 2025] [:error] [pid 29371:tid 29373] [client 4.193.209.111:21393] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUu3wns-DlKLysSq5L-FGwAAAcA"]
[Wed Dec 24 17:52:03.484586 2025] [:error] [pid 29371:tid 29386] [client 4.193.209.111:21394] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUu3w3s-DlKLysSq5L-FHwAAAc0"]
[Wed Dec 24 17:52:03.959896 2025] [:error] [pid 28405:tid 28409] [client 4.193.209.111:21282] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aUu3w8KkTWlhmfdXFqZZIAAAAUA"]
[Wed Dec 24 17:52:04.916152 2025] [:error] [pid 29371:tid 29376] [client 4.193.209.111:21379] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUu3xHs-DlKLysSq5L-FJQAAAcM"]
[Wed Dec 24 17:52:05.989390 2025] [:error] [pid 54139:tid 54156] [client 4.193.209.111:21256] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUu3xcrYCZenIDzgXuKI2QAAAQ8"]
[Wed Dec 24 17:52:06.774715 2025] [:error] [pid 28405:tid 28412] [client 4.193.209.111:21474] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUu3xsKkTWlhmfdXFqZZJwAAAUM"]
[Wed Dec 24 17:52:08.235790 2025] [:error] [pid 54139:tid 54148] [client 4.193.209.111:21498] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUu3yMrYCZenIDzgXuKI3AAAAQc"]
[Wed Dec 24 17:52:08.599578 2025] [:error] [pid 28405:tid 28422] [client 4.193.209.111:21492] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "aUu3yMKkTWlhmfdXFqZZLAAAAUw"]
[Wed Dec 24 17:52:09.078213 2025] [:error] [pid 28405:tid 28423] [client 4.193.209.111:21251] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "aUu3ycKkTWlhmfdXFqZZLwAAAU0"]
[Wed Dec 24 17:52:10.664266 2025] [:error] [pid 16467:tid 16499] [client 4.193.209.111:21318] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "aUu3yo0TJMcBxX5slgo6JAAAAEI"]
[Wed Dec 24 17:52:17.771777 2025] [:error] [pid 54139:tid 54155] [client 4.193.209.111:21296] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUu30crYCZenIDzgXuKJIQAAAQ4"]
[Wed Dec 24 17:52:18.540425 2025] [:error] [pid 16468:tid 16544] [client 4.193.209.111:21317] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUu30odyfuSTFLkCbP9_lQAAAJQ"]
[Wed Dec 24 17:52:19.432750 2025] [:error] [pid 16468:tid 16546] [client 4.193.209.111:21430] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUu304dyfuSTFLkCbP9_mAAAAJY"]
[Wed Dec 24 17:52:19.974711 2025] [:error] [pid 16550:tid 16569] [client 4.193.209.111:21263] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUu306YYcdD-LuO7vrDpPwAAANE"]
[Wed Dec 24 17:52:20.567609 2025] [:error] [pid 28405:tid 28431] [client 4.193.209.111:21356] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUu31MKkTWlhmfdXFqZZcQAAAVU"]
[Wed Dec 24 17:52:21.542108 2025] [:error] [pid 54139:tid 54161] [client 4.193.209.111:51170] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUu31crYCZenIDzgXuKJKAAAARQ"]
[Wed Dec 24 17:52:23.342322 2025] [:error] [pid 16550:tid 16562] [client 4.193.209.111:21454] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUu316YYcdD-LuO7vrDpQAAAAMo"]
[Wed Dec 24 17:52:25.481727 2025] [:error] [pid 29371:tid 29385] [client 4.193.209.111:21401] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUu32Xs-DlKLysSq5L-FSAAAAcw"]
[Wed Dec 24 17:52:26.275623 2025] [:error] [pid 16468:tid 16529] [client 4.193.209.111:51143] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUu32odyfuSTFLkCbP9_ngAAAIU"]
[Wed Dec 24 17:52:27.449066 2025] [:error] [pid 16550:tid 16555] [client 4.193.209.111:21397] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUu326YYcdD-LuO7vrDpQwAAAMM"]
[Wed Dec 24 17:52:29.652262 2025] [:error] [pid 16466:tid 16485] [client 4.193.209.111:21500] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUu33bu0JcuKJMjJn6whqwAAAA8"]
[Wed Dec 24 17:52:31.690280 2025] [:error] [pid 16550:tid 16575] [client 4.193.209.111:51184] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUu336YYcdD-LuO7vrDpTgAAANc"]
[Wed Dec 24 17:52:32.991319 2025] [:error] [pid 54139:tid 54164] [client 4.193.209.111:21352] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUu34MrYCZenIDzgXuKJLwAAARc"]
[Wed Dec 24 17:52:34.580583 2025] [:error] [pid 54139:tid 54163] [client 4.193.209.111:51193] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUu34srYCZenIDzgXuKJMwAAARY"]
[Wed Dec 24 17:52:35.715755 2025] [:error] [pid 16468:tid 16539] [client 4.193.209.111:21493] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUu344dyfuSTFLkCbP9_owAAAI8"]
[Wed Dec 24 17:52:36.534479 2025] [:error] [pid 16466:tid 16473] [client 4.193.209.111:21464] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUu35Lu0JcuKJMjJn6whuwAAAAM"]
[Wed Dec 24 17:52:37.395746 2025] [:error] [pid 29371:tid 29374] [client 4.193.209.111:21436] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oc460l3x.php"] [unique_id "aUu35Xs-DlKLysSq5L-FUAAAAcE"]
[Wed Dec 24 17:52:38.708094 2025] [:error] [pid 16468:tid 16541] [client 4.193.209.111:51191] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oc460l3x.php"] [unique_id "aUu35odyfuSTFLkCbP9_qAAAAJE"]
[Wed Dec 24 17:52:40.227114 2025] [:error] [pid 16468:tid 16538] [client 4.193.209.111:21404] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oc460l3x.php"] [unique_id "aUu36IdyfuSTFLkCbP9_rgAAAI4"]
[Wed Dec 24 17:52:41.576464 2025] [:error] [pid 16466:tid 16494] [client 4.193.209.111:21413] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oc460l3x.php"] [unique_id "aUu36bu0JcuKJMjJn6whwAAAABg"]
[Wed Dec 24 17:52:42.132367 2025] [:error] [pid 29371:tid 29389] [client 4.193.209.111:21453] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUu36ns-DlKLysSq5L-FVgAAAdA"]
[Wed Dec 24 17:52:42.463004 2025] [:error] [pid 28405:tid 28415] [client 4.193.209.111:21249] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUu36sKkTWlhmfdXFqZZjAAAAUY"]
[Wed Dec 24 17:52:44.578221 2025] [:error] [pid 54139:tid 54164] [client 4.193.209.111:21315] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUu37MrYCZenIDzgXuKJOAAAARc"]
[Wed Dec 24 17:52:45.005697 2025] [:error] [pid 54139:tid 54147] [client 4.193.209.111:51185] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NWqz649FIe7.php"] [unique_id "aUu37crYCZenIDzgXuKJOQAAAQY"]
[Wed Dec 24 17:52:46.580766 2025] [:error] [pid 16467:tid 16500] [client 4.193.209.111:21359] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUu37o0TJMcBxX5slgo6QgAAAEM"]
[Wed Dec 24 17:52:47.194129 2025] [:error] [pid 16467:tid 16520] [client 4.193.209.111:14289] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUu3740TJMcBxX5slgo6QwAAAFc"]
[Wed Dec 24 17:52:47.870781 2025] [:error] [pid 54139:tid 54145] [client 4.193.209.111:21456] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUu378rYCZenIDzgXuKJPgAAAQQ"]
[Wed Dec 24 17:52:48.705052 2025] [:error] [pid 16550:tid 16571] [client 4.193.209.111:21499] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nucqsqeg.php"] [unique_id "aUu38KYYcdD-LuO7vrDpWQAAANM"]
[Wed Dec 24 17:52:55.512916 2025] [:error] [pid 28405:tid 28421] [client 4.193.209.111:51157] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mhpglaje.php"] [unique_id "aUu398KkTWlhmfdXFqZZkwAAAUs"]
[Wed Dec 24 17:52:56.808408 2025] [:error] [pid 29371:tid 29379] [client 4.193.209.111:51196] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mhpglaje.php"] [unique_id "aUu3-Hs-DlKLysSq5L-FYAAAAcY"]
[Wed Dec 24 17:52:57.175862 2025] [:error] [pid 54139:tid 54150] [client 4.193.209.111:14302] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mhpglaje.php"] [unique_id "aUu3-crYCZenIDzgXuKJQwAAAQk"]
[Wed Dec 24 17:52:57.617133 2025] [:error] [pid 16467:tid 16514] [client 4.193.209.111:21448] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mhpglaje.php"] [unique_id "aUu3-Y0TJMcBxX5slgo6SgAAAFE"]
[Wed Dec 24 17:52:58.188705 2025] [:error] [pid 16466:tid 16471] [client 4.193.209.111:21444] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUu3-ru0JcuKJMjJn6wh1AAAAAE"]
[Wed Dec 24 17:52:59.116159 2025] [:error] [pid 16466:tid 16479] [client 4.193.209.111:21495] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUu3-7u0JcuKJMjJn6wh1gAAAAk"]
[Wed Dec 24 17:53:00.197909 2025] [:error] [pid 16550:tid 16563] [client 4.193.209.111:21364] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUu3_KYYcdD-LuO7vrDpaAAAAMs"]
[Wed Dec 24 17:53:01.342154 2025] [:error] [pid 16467:tid 16501] [client 4.193.209.111:21375] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/LvCBeZWaSgQ.php"] [unique_id "aUu3_Y0TJMcBxX5slgo6UQAAAEQ"]
[Wed Dec 24 17:53:02.124920 2025] [:error] [pid 16467:tid 16503] [client 4.193.209.111:51194] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUu3_o0TJMcBxX5slgo6UgAAAEY"]
[Wed Dec 24 17:53:03.133175 2025] [:error] [pid 28405:tid 28423] [client 4.193.209.111:21482] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUu3_8KkTWlhmfdXFqZZngAAAU0"]
[Wed Dec 24 17:53:03.448074 2025] [:error] [pid 16550:tid 16566] [client 4.193.209.111:51139] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUu3_6YYcdD-LuO7vrDpbQAAAM4"]
[Wed Dec 24 17:53:04.254229 2025] [:error] [pid 54139:tid 54149] [client 4.193.209.111:21255] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/KV7EGJmhHzX.php"] [unique_id "aUu4AMrYCZenIDzgXuKJSwAAAQg"]
[Wed Dec 24 17:53:06.009704 2025] [:error] [pid 28405:tid 28413] [client 4.193.209.111:21442] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUu4AsKkTWlhmfdXFqZZpgAAAUQ"]
[Wed Dec 24 17:53:07.142053 2025] [:error] [pid 28405:tid 28416] [client 4.193.209.111:21254] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUu4A8KkTWlhmfdXFqZZqgAAAUc"]
[Wed Dec 24 17:53:07.905308 2025] [:error] [pid 16550:tid 16559] [client 4.193.209.111:21424] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUu4A6YYcdD-LuO7vrDpcAAAAMc"]
[Wed Dec 24 17:53:08.840910 2025] [:error] [pid 16466:tid 16470] [client 4.193.209.111:51158] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ijNdPI1Orya.php"] [unique_id "aUu4BLu0JcuKJMjJn6wh4QAAAAA"]
[Wed Dec 24 17:53:09.284476 2025] [:error] [pid 16550:tid 16554] [client 4.193.209.111:21295] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUu4BaYYcdD-LuO7vrDpcgAAAMI"]
[Wed Dec 24 17:53:09.938630 2025] [:error] [pid 54139:tid 54153] [client 4.193.209.111:21483] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUu4BcrYCZenIDzgXuKJTgAAAQw"]
[Wed Dec 24 17:53:10.412727 2025] [:error] [pid 16468:tid 16538] [client 4.193.209.111:21428] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUu4BodyfuSTFLkCbP9_wgAAAI4"]
[Wed Dec 24 17:53:10.841473 2025] [:error] [pid 29371:tid 29389] [client 4.193.209.111:14286] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HPum4ZEBJRC.php"] [unique_id "aUu4Bns-DlKLysSq5L-FZwAAAdA"]
[Wed Dec 24 17:53:11.470386 2025] [:error] [pid 28405:tid 28419] [client 4.193.209.111:14290] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUu4B8KkTWlhmfdXFqZZsAAAAUk"]
[Wed Dec 24 17:53:12.667562 2025] [:error] [pid 29371:tid 29388] [client 4.193.209.111:14293] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUu4CHs-DlKLysSq5L-FbAAAAc8"]
[Wed Dec 24 17:53:13.135236 2025] [:error] [pid 28405:tid 28431] [client 4.193.209.111:21327] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUu4CcKkTWlhmfdXFqZZsQAAAVU"]
[Wed Dec 24 17:53:14.300212 2025] [:error] [pid 16550:tid 16572] [client 4.193.209.111:51141] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aUu4CqYYcdD-LuO7vrDpdgAAANQ"]
[Wed Dec 24 17:53:14.787565 2025] [:error] [pid 28777:tid 28799] [client 4.193.209.111:51198] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUu4CpBVBcZ34cSqz8olugAAAZQ"]
[Wed Dec 24 17:53:15.291179 2025] [:error] [pid 29371:tid 29395] [client 4.193.209.111:51180] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xg5Bv6XIUw.php"] [unique_id "aUu4C3s-DlKLysSq5L-FcQAAAdY"]
[Wed Dec 24 17:53:20.980885 2025] [:error] [pid 16550:tid 16565] [client 4.193.209.111:21337] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aUu4EKYYcdD-LuO7vrDpmgAAAM0"]
[Wed Dec 24 17:53:21.911111 2025] [:error] [pid 16468:tid 16538] [client 4.193.209.111:51189] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aUu4EYdyfuSTFLkCbP9_xwAAAI4"]
[Wed Dec 24 17:53:22.958947 2025] [:error] [pid 28405:tid 28420] [client 4.193.209.111:21314] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aUu4EsKkTWlhmfdXFqZZuAAAAUo"]
[Wed Dec 24 17:53:23.495785 2025] [:error] [pid 16466:tid 16482] [client 4.193.209.111:21445] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aUu4E7u0JcuKJMjJn6wh7gAAAAw"]
[Wed Dec 24 17:53:24.331735 2025] [:error] [pid 28405:tid 28424] [client 4.193.209.111:21402] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sikma.php"] [unique_id "aUu4FMKkTWlhmfdXFqZZuwAAAU4"]
[Wed Dec 24 17:53:24.658506 2025] [:error] [pid 29371:tid 29378] [client 4.193.209.111:21491] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sikma.php"] [unique_id "aUu4FHs-DlKLysSq5L-FdgAAAcU"]
[Wed Dec 24 17:53:24.987987 2025] [:error] [pid 28777:tid 28796] [client 4.193.209.111:51165] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sikma.php"] [unique_id "aUu4FJBVBcZ34cSqz8olzAAAAZE"]
[Wed Dec 24 17:53:26.415364 2025] [:error] [pid 54139:tid 54155] [client 4.193.209.111:14327] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sikma.php"] [unique_id "aUu4FsrYCZenIDzgXuKJXAAAAQ4"]
[Wed Dec 24 17:53:27.787808 2025] [:error] [pid 28405:tid 28417] [client 4.193.209.111:51197] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "aUu4F8KkTWlhmfdXFqZZwAAAAUg"]
[Wed Dec 24 17:53:28.507350 2025] [:error] [pid 28405:tid 28416] [client 4.193.209.111:51145] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "aUu4GMKkTWlhmfdXFqZZwwAAAUc"]
[Wed Dec 24 17:53:29.294937 2025] [:error] [pid 28405:tid 28423] [client 4.193.209.111:51199] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "aUu4GcKkTWlhmfdXFqZZxQAAAU0"]
[Wed Dec 24 17:53:29.930059 2025] [:error] [pid 28405:tid 28431] [client 4.193.209.111:21409] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "aUu4GcKkTWlhmfdXFqZZxwAAAVU"]
[Wed Dec 24 17:53:30.415639 2025] [:error] [pid 28405:tid 28412] [client 4.193.209.111:51177] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "aUu4GsKkTWlhmfdXFqZZygAAAUM"]
[Wed Dec 24 17:53:31.846077 2025] [:error] [pid 16468:tid 16526] [client 4.193.209.111:21354] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "aUu4G4dyfuSTFLkCbP9_zQAAAII"]
[Wed Dec 24 17:53:32.571795 2025] [:error] [pid 28777:tid 28783] [client 4.193.209.111:21457] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "aUu4HJBVBcZ34cSqz8ol2AAAAYQ"]
[Wed Dec 24 17:53:32.863747 2025] [:error] [pid 54139:tid 54148] [client 4.193.209.111:21461] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "aUu4HMrYCZenIDzgXuKJYgAAAQc"]
[Wed Dec 24 17:53:33.625396 2025] [:error] [pid 16468:tid 16524] [client 4.193.209.111:14295] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aUu4HYdyfuSTFLkCbP9_0AAAAIA"]
[Wed Dec 24 17:53:34.071586 2025] [:error] [pid 29371:tid 29374] [client 4.193.209.111:21279] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aUu4Hns-DlKLysSq5L-FeQAAAcE"]
[Wed Dec 24 17:53:35.091150 2025] [:error] [pid 28405:tid 28413] [client 4.193.209.111:51144] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aUu4H8KkTWlhmfdXFqZZ1QAAAUQ"]
[Wed Dec 24 17:53:35.902818 2025] [:error] [pid 28405:tid 28417] [client 4.193.209.111:51163] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aUu4H8KkTWlhmfdXFqZZ2QAAAUg"]
[Wed Dec 24 17:53:36.175431 2025] [:error] [pid 16468:tid 16525] [client 4.193.209.111:21494] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "aUu4IIdyfuSTFLkCbP9_1wAAAIE"]
[Wed Dec 24 17:53:36.663868 2025] [:error] [pid 29371:tid 29391] [client 4.193.209.111:14299] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "aUu4IHs-DlKLysSq5L-FhAAAAdI"]
[Wed Dec 24 17:53:37.724663 2025] [:error] [pid 16467:tid 16518] [client 4.193.209.111:51174] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "aUu4IY0TJMcBxX5slgo6ZAAAAFU"]
[Wed Dec 24 17:53:38.223829 2025] [:error] [pid 54139:tid 54151] [client 4.193.209.111:21486] [client 4.193.209.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "aUu4IsrYCZenIDzgXuKJeAAAAQo"]
[Wed Dec 24 19:47:40.033997 2025] [:error] [pid 16466:tid 16470] [client 4.247.132.0:23212] [client 4.247.132.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUvS3Lu0JcuKJMjJn6w98AAAAAA"]
[Wed Dec 24 19:47:41.026871 2025] [:error] [pid 16550:tid 16573] [client 4.247.132.0:53551] [client 4.247.132.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUvS3aYYcdD-LuO7vrABsQAAANU"]
[Wed Dec 24 19:47:41.755393 2025] [:error] [pid 28777:tid 28781] [client 4.247.132.0:60137] [client 4.247.132.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUvS3ZBVBcZ34cSqz8o5iAAAAYI"]
[Wed Dec 24 19:47:43.263059 2025] [:error] [pid 16467:tid 16505] [client 4.247.132.0:53605] [client 4.247.132.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUvS340TJMcBxX5slgpN1gAAAEg"]
[Thu Dec 25 00:31:22.331234 2025] [ssl:error] [pid 38611:tid 38618] [client 159.65.24.22:53442] AH02032: Hostname rahtash.ae provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup
[Thu Dec 25 04:11:16.076707 2025] [:error] [pid 31569:tid 31593] [client 4.189.160.56:52771] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13k.php"] [unique_id "aUxI5GiSFBH7Ee_uldW_tgAAABQ"]
[Thu Dec 25 04:11:19.091671 2025] [:error] [pid 31571:tid 31639] [client 4.189.160.56:57098] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13k.php"] [unique_id "aUxI5-7e_lLK2X5wU8ndugAAAIw"]
[Thu Dec 25 04:11:20.916836 2025] [:error] [pid 31655:tid 31672] [client 4.189.160.56:58899] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13k.php"] [unique_id "aUxI6JozPMk9HPtIJPPMUgAAAM8"]
[Thu Dec 25 04:11:23.805101 2025] [:error] [pid 31571:tid 31629] [client 4.189.160.56:46419] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13k.php"] [unique_id "aUxI6-7e_lLK2X5wU8ndwAAAAII"]
[Thu Dec 25 04:11:26.251954 2025] [:error] [pid 31569:tid 31576] [client 4.189.160.56:50166] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/423_index.php"] [unique_id "aUxI7miSFBH7Ee_uldW_xgAAAAM"]
[Thu Dec 25 04:11:29.883359 2025] [:error] [pid 31569:tid 31578] [client 4.189.160.56:61630] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/423_index.php"] [unique_id "aUxI8WiSFBH7Ee_uldW_zgAAAAU"]
[Thu Dec 25 04:11:30.830045 2025] [:error] [pid 31569:tid 31576] [client 4.189.160.56:61627] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/423_index.php"] [unique_id "aUxI8miSFBH7Ee_uldW_0gAAAAM"]
[Thu Dec 25 04:11:35.746666 2025] [:error] [pid 31569:tid 31578] [client 4.189.160.56:56009] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/423_index.php"] [unique_id "aUxI92iSFBH7Ee_uldW_3AAAAAU"]
[Thu Dec 25 04:11:39.947505 2025] [:error] [pid 31655:tid 31670] [client 4.189.160.56:46803] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aUxI-5ozPMk9HPtIJPPMaAAAAM0"]
[Thu Dec 25 04:11:52.384806 2025] [:error] [pid 31655:tid 31663] [client 4.189.160.56:51254] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aUxJCJozPMk9HPtIJPPMdwAAAMY"]
[Thu Dec 25 04:12:28.898040 2025] [:error] [pid 31571:tid 31636] [client 4.189.160.56:51246] [client 4.189.160.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.160.56, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUxJLO7e_lLK2X5wU8nd9QAAAIk"]
[Thu Dec 25 04:12:29.093566 2025] [:error] [pid 31655:tid 31679] [client 4.189.160.56:57013] [client 4.189.160.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.160.56, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aUxJLZozPMk9HPtIJPPMvAAAANY"]
[Thu Dec 25 04:12:29.272279 2025] [:error] [pid 31571:tid 31647] [client 4.189.160.56:51246] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aUxJLe7e_lLK2X5wU8nd9gAAAJQ"]
[Thu Dec 25 04:12:35.660810 2025] [:error] [pid 31655:tid 31677] [client 4.189.160.56:47143] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aUxJM5ozPMk9HPtIJPPMwwAAANQ"]
[Thu Dec 25 04:12:37.652983 2025] [:error] [pid 31570:tid 31619] [client 4.189.160.56:7199] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aUxJNWPy2DpAzW_4a2iBjAAAAFM"]
[Thu Dec 25 04:12:38.190419 2025] [:error] [pid 31571:tid 31635] [client 4.189.160.56:51224] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aUxJNu7e_lLK2X5wU8nd-AAAAIg"]
[Thu Dec 25 04:12:43.127624 2025] [:error] [pid 31571:tid 31627] [client 4.189.160.56:47125] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aUxJO-7e_lLK2X5wU8nd-gAAAIA"]
[Thu Dec 25 04:12:45.243050 2025] [:error] [pid 31569:tid 31573] [client 4.189.160.56:52794] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aUxJPWiSFBH7Ee_uldXACAAAAAA"]
[Thu Dec 25 04:12:48.318482 2025] [:error] [pid 31569:tid 31577] [client 4.189.160.56:51843] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aUxJQGiSFBH7Ee_uldXAEAAAAAQ"]
[Thu Dec 25 04:12:49.957746 2025] [:error] [pid 31571:tid 31644] [client 4.189.160.56:50118] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aUxJQe7e_lLK2X5wU8neAgAAAJE"]
[Thu Dec 25 04:12:51.162459 2025] [:error] [pid 31569:tid 31585] [client 4.189.160.56:51894] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUxJQ2iSFBH7Ee_uldXAFAAAAAw"]
[Thu Dec 25 04:12:58.700749 2025] [:error] [pid 31570:tid 31607] [client 4.189.160.56:7948] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUxJSmPy2DpAzW_4a2iBkgAAAEc"]
[Thu Dec 25 04:13:00.048172 2025] [:error] [pid 31655:tid 31671] [client 4.189.160.56:52766] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUxJTJozPMk9HPtIJPPM2AAAAM4"]
[Thu Dec 25 04:13:00.804490 2025] [:error] [pid 31569:tid 31592] [client 4.189.160.56:48311] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aUxJTGiSFBH7Ee_uldXAFgAAABM"]
[Thu Dec 25 04:13:04.169066 2025] [:error] [pid 31655:tid 31672] [client 4.189.160.56:54628] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aUxJUJozPMk9HPtIJPPM3AAAAM8"]
[Thu Dec 25 04:13:17.750140 2025] [:error] [pid 31655:tid 31667] [client 4.189.160.56:64232] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/text.php"] [unique_id "aUxJXZozPMk9HPtIJPPM4QAAAMo"]
[Thu Dec 25 04:13:20.349355 2025] [:error] [pid 31570:tid 31614] [client 4.189.160.56:52757] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/text.php"] [unique_id "aUxJYGPy2DpAzW_4a2iBnQAAAE4"]
[Thu Dec 25 04:13:27.325461 2025] [:error] [pid 31571:tid 31633] [client 4.189.160.56:59356] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/text.php"] [unique_id "aUxJZ-7e_lLK2X5wU8neEAAAAIY"]
[Thu Dec 25 04:14:01.242104 2025] [:error] [pid 31655:tid 31671] [client 4.189.160.56:62095] [client 4.189.160.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aUxJiZozPMk9HPtIJPPNCQAAAM4"]
[Thu Dec 25 04:14:03.433346 2025] [:error] [pid 31655:tid 31678] [client 4.189.160.56:46720] [client 4.189.160.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aUxJi5ozPMk9HPtIJPPNEgAAANU"]
[Thu Dec 25 04:14:06.153689 2025] [:error] [pid 31655:tid 31662] [client 4.189.160.56:63060] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUxJjpozPMk9HPtIJPPNFAAAAMU"]
[Thu Dec 25 04:14:07.051633 2025] [:error] [pid 31655:tid 31671] [client 4.189.160.56:46740] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUxJj5ozPMk9HPtIJPPNGAAAAM4"]
[Thu Dec 25 04:14:11.289398 2025] [:error] [pid 31655:tid 31657] [client 4.189.160.56:51452] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUxJk5ozPMk9HPtIJPPNHAAAAMA"]
[Thu Dec 25 04:14:12.254178 2025] [:error] [pid 31571:tid 31627] [client 4.189.160.56:56576] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aUxJlO7e_lLK2X5wU8neJwAAAIA"]
[Thu Dec 25 04:14:17.346995 2025] [:error] [pid 31569:tid 31596] [client 4.189.160.56:46439] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUxJmWiSFBH7Ee_uldXAMwAAABc"]
[Thu Dec 25 04:14:18.175475 2025] [:error] [pid 31570:tid 31604] [client 4.189.160.56:58863] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUxJmmPy2DpAzW_4a2iBuQAAAEQ"]
[Thu Dec 25 04:14:27.270455 2025] [:error] [pid 31571:tid 31633] [client 4.189.160.56:51458] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aUxJo-7e_lLK2X5wU8neMgAAAIY"]
[Thu Dec 25 04:14:30.735059 2025] [:error] [pid 31570:tid 31604] [client 4.189.160.56:61693] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUxJpmPy2DpAzW_4a2iBwwAAAEQ"]
[Thu Dec 25 04:14:36.566233 2025] [:error] [pid 31571:tid 31627] [client 4.189.160.56:63058] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUxJrO7e_lLK2X5wU8neOQAAAIA"]
[Thu Dec 25 04:14:42.486706 2025] [:error] [pid 31655:tid 31680] [client 4.189.160.56:47737] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUxJspozPMk9HPtIJPPNPAAAANc"]
[Thu Dec 25 04:14:46.130516 2025] [:error] [pid 31569:tid 31576] [client 4.189.160.56:47688] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aUxJtmiSFBH7Ee_uldXARQAAAAM"]
[Thu Dec 25 04:14:47.360184 2025] [:error] [pid 31569:tid 31595] [client 4.189.160.56:51411] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aUxJt2iSFBH7Ee_uldXARgAAABY"]
[Thu Dec 25 04:14:53.841929 2025] [:error] [pid 31655:tid 31659] [client 4.189.160.56:56523] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aUxJvZozPMk9HPtIJPPNQQAAAMI"]
[Thu Dec 25 04:14:55.423119 2025] [:error] [pid 31655:tid 31681] [client 4.189.160.56:8170] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aUxJv5ozPMk9HPtIJPPNQgAAANg"]
[Thu Dec 25 04:15:00.427399 2025] [:error] [pid 31570:tid 31601] [client 4.189.160.56:7793] [client 4.189.160.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upfile.php"] [unique_id "aUxJxGPy2DpAzW_4a2iB0QAAAEE"]
[Thu Dec 25 09:36:41.028366 2025] [:error] [pid 31569:tid 31584] [client 43.153.87.54:41436] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUyVKWiSFBH7Ee_uldUo2AAAAAs"]
[Thu Dec 25 09:56:58.368200 2025] [:error] [pid 31569:tid 31595] [client 182.43.70.143:37971] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUyZ6miSFBH7Ee_uldUunAAAABY"]
[Thu Dec 25 11:05:40.196053 2025] [:error] [pid 31569:tid 31595] [client 49.146.222.227:59812] [client 49.146.222.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.146.222.227, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aUyqBGiSFBH7Ee_uldVHLwAAABY"]
[Thu Dec 25 14:25:55.001223 2025] [:error] [pid 31571:tid 31651] [client 43.135.36.201:58504] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aUzY8u7e_lLK2X5wU8l1cwAAAJg"]
[Thu Dec 25 15:37:19.011534 2025] [:error] [pid 2996:tid 3020] [client 4.217.192.251:43616] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qual.php"] [unique_id "aUzpr6rrTp0EWNyhaIQAbAAAARY"]
[Thu Dec 25 15:37:21.273059 2025] [:error] [pid 31655:tid 31675] [client 4.217.192.251:15415] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qual.php"] [unique_id "aUzpsZozPMk9HPtIJPNo_QAAANI"]
[Thu Dec 25 15:37:22.539622 2025] [:error] [pid 31570:tid 31604] [client 4.217.192.251:34761] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qual.php"] [unique_id "aUzpsmPy2DpAzW_4a2gQ6AAAAEQ"]
[Thu Dec 25 15:37:24.730451 2025] [:error] [pid 2996:tid 3006] [client 4.217.192.251:16020] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qual.php"] [unique_id "aUzptKrrTp0EWNyhaIQAcwAAAQg"]
[Thu Dec 25 15:37:26.508184 2025] [:error] [pid 2996:tid 3020] [client 4.217.192.251:15427] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/udnkq.php"] [unique_id "aUzptqrrTp0EWNyhaIQAdgAAARY"]
[Thu Dec 25 15:37:27.699507 2025] [:error] [pid 31571:tid 31641] [client 4.217.192.251:16051] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/udnkq.php"] [unique_id "aUzpt-7e_lLK2X5wU8mDgwAAAI4"]
[Thu Dec 25 15:37:28.573049 2025] [:error] [pid 31571:tid 31644] [client 4.217.192.251:15476] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/udnkq.php"] [unique_id "aUzpuO7e_lLK2X5wU8mDiQAAAJE"]
[Thu Dec 25 15:37:29.844045 2025] [:error] [pid 31569:tid 31586] [client 4.217.192.251:15708] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/udnkq.php"] [unique_id "aUzpuWiSFBH7Ee_uldWZfgAAAA0"]
[Thu Dec 25 15:37:30.536538 2025] [:error] [pid 2996:tid 3015] [client 4.217.192.251:43937] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aUzpuqrrTp0EWNyhaIQAhgAAARE"]
[Thu Dec 25 15:37:31.144692 2025] [:error] [pid 2996:tid 3017] [client 4.217.192.251:16034] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aUzpu6rrTp0EWNyhaIQAhwAAARM"]
[Thu Dec 25 15:37:32.108171 2025] [:error] [pid 31571:tid 31651] [client 4.217.192.251:15416] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aUzpvO7e_lLK2X5wU8mDigAAAJg"]
[Thu Dec 25 15:37:33.293684 2025] [:error] [pid 2996:tid 3003] [client 4.217.192.251:46650] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aUzpvarrTp0EWNyhaIQAiwAAAQU"]
[Thu Dec 25 15:37:34.548472 2025] [:error] [pid 31569:tid 31589] [client 4.217.192.251:16036] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z4qmm5.php"] [unique_id "aUzpvmiSFBH7Ee_uldWZggAAABA"]
[Thu Dec 25 15:37:35.543253 2025] [:error] [pid 31571:tid 31646] [client 4.217.192.251:41268] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z4qmm5.php"] [unique_id "aUzpv-7e_lLK2X5wU8mDjwAAAJM"]
[Thu Dec 25 15:37:36.509623 2025] [:error] [pid 31570:tid 31611] [client 4.217.192.251:46654] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z4qmm5.php"] [unique_id "aUzpwGPy2DpAzW_4a2gQ8wAAAEs"]
[Thu Dec 25 15:37:37.617693 2025] [:error] [pid 31569:tid 31588] [client 4.217.192.251:15464] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z4qmm5.php"] [unique_id "aUzpwWiSFBH7Ee_uldWZgwAAAA8"]
[Thu Dec 25 15:37:38.187879 2025] [:error] [pid 31655:tid 31678] [client 4.217.192.251:43954] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no3.php"] [unique_id "aUzpwpozPMk9HPtIJPNpDwAAANU"]
[Thu Dec 25 15:37:38.921879 2025] [:error] [pid 31570:tid 31619] [client 4.217.192.251:46651] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no3.php"] [unique_id "aUzpwmPy2DpAzW_4a2gQ9wAAAFM"]
[Thu Dec 25 15:37:40.472770 2025] [:error] [pid 31569:tid 31573] [client 4.217.192.251:43614] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no3.php"] [unique_id "aUzpxGiSFBH7Ee_uldWZhAAAAAA"]
[Thu Dec 25 15:37:41.666309 2025] [:error] [pid 2996:tid 3022] [client 4.217.192.251:15371] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no3.php"] [unique_id "aUzpxarrTp0EWNyhaIQAlAAAARg"]
[Thu Dec 25 15:37:42.766924 2025] [:error] [pid 31569:tid 31594] [client 4.217.192.251:43930] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "aUzpxmiSFBH7Ee_uldWZiAAAABU"]
[Thu Dec 25 15:37:45.082647 2025] [:error] [pid 31655:tid 31673] [client 4.217.192.251:15374] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "aUzpyZozPMk9HPtIJPNpFgAAANA"]
[Thu Dec 25 15:37:45.852233 2025] [:error] [pid 31570:tid 31608] [client 4.217.192.251:41266] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "aUzpyWPy2DpAzW_4a2gQ_gAAAEg"]
[Thu Dec 25 15:37:46.791940 2025] [:error] [pid 31569:tid 31596] [client 4.217.192.251:15698] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "aUzpymiSFBH7Ee_uldWZiwAAABc"]
[Thu Dec 25 15:37:47.781953 2025] [:error] [pid 31570:tid 31611] [client 4.217.192.251:43606] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webix.php"] [unique_id "aUzpy2Py2DpAzW_4a2gRAAAAAEs"]
[Thu Dec 25 15:37:48.859454 2025] [:error] [pid 31570:tid 31619] [client 4.217.192.251:15385] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webix.php"] [unique_id "aUzpzGPy2DpAzW_4a2gRAwAAAFM"]
[Thu Dec 25 15:37:49.936952 2025] [:error] [pid 31571:tid 31649] [client 4.217.192.251:46609] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webix.php"] [unique_id "aUzpze7e_lLK2X5wU8mDmQAAAJY"]
[Thu Dec 25 15:37:51.587509 2025] [:error] [pid 31655:tid 31668] [client 4.217.192.251:16004] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webix.php"] [unique_id "aUzpz5ozPMk9HPtIJPNpGwAAAMs"]
[Thu Dec 25 15:37:52.507837 2025] [:error] [pid 31655:tid 31678] [client 4.217.192.251:16003] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aUzp0JozPMk9HPtIJPNpHgAAANU"]
[Thu Dec 25 15:37:53.536373 2025] [:error] [pid 2996:tid 2998] [client 4.217.192.251:15384] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aUzp0arrTp0EWNyhaIQAowAAAQA"]
[Thu Dec 25 15:37:54.335901 2025] [:error] [pid 31655:tid 31674] [client 4.217.192.251:41273] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aUzp0pozPMk9HPtIJPNpIgAAANE"]
[Thu Dec 25 15:37:55.516689 2025] [:error] [pid 2996:tid 3004] [client 4.217.192.251:43966] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aUzp06rrTp0EWNyhaIQAqQAAAQY"]
[Thu Dec 25 15:37:57.772241 2025] [:error] [pid 2996:tid 2998] [client 4.217.192.251:46598] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cka.php"] [unique_id "aUzp1arrTp0EWNyhaIQArwAAAQA"]
[Thu Dec 25 15:37:59.503872 2025] [:error] [pid 2996:tid 3013] [client 4.217.192.251:15361] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cka.php"] [unique_id "aUzp16rrTp0EWNyhaIQAsgAAAQ8"]
[Thu Dec 25 15:38:00.379795 2025] [:error] [pid 31655:tid 31664] [client 4.217.192.251:46642] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cka.php"] [unique_id "aUzp2JozPMk9HPtIJPNpJAAAAMc"]
[Thu Dec 25 15:38:00.918247 2025] [:error] [pid 31655:tid 31667] [client 4.217.192.251:16042] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cka.php"] [unique_id "aUzp2JozPMk9HPtIJPNpJQAAAMo"]
[Thu Dec 25 15:38:02.631695 2025] [:error] [pid 31655:tid 31662] [client 4.217.192.251:46643] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aUzp2pozPMk9HPtIJPNpKQAAAMU"]
[Thu Dec 25 15:38:03.930064 2025] [:error] [pid 31571:tid 31647] [client 4.217.192.251:43941] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aUzp2-7e_lLK2X5wU8mDpAAAAJQ"]
[Thu Dec 25 15:38:04.681788 2025] [:error] [pid 31571:tid 31638] [client 4.217.192.251:43587] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aUzp3O7e_lLK2X5wU8mDpQAAAIs"]
[Thu Dec 25 15:38:05.137118 2025] [:error] [pid 31655:tid 31670] [client 4.217.192.251:15994] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aUzp3ZozPMk9HPtIJPNpLQAAAM0"]
[Thu Dec 25 15:38:05.584140 2025] [:error] [pid 31655:tid 31675] [client 4.217.192.251:15370] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aUzp3ZozPMk9HPtIJPNpMAAAANI"]
[Thu Dec 25 15:38:06.964626 2025] [:error] [pid 2996:tid 3014] [client 4.217.192.251:46631] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aUzp3qrrTp0EWNyhaIQAvAAAARA"]
[Thu Dec 25 15:38:08.357869 2025] [:error] [pid 31569:tid 31595] [client 4.217.192.251:15695] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aUzp4GiSFBH7Ee_uldWZlwAAABY"]
[Thu Dec 25 15:38:08.919525 2025] [:error] [pid 31655:tid 31660] [client 4.217.192.251:41257] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aUzp4JozPMk9HPtIJPNpMwAAAMM"]
[Thu Dec 25 15:38:09.484116 2025] [:error] [pid 31655:tid 31679] [client 4.217.192.251:46627] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aUzp4ZozPMk9HPtIJPNpNAAAANY"]
[Thu Dec 25 15:38:10.278703 2025] [:error] [pid 31570:tid 31618] [client 4.217.192.251:15631] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aUzp4mPy2DpAzW_4a2gREQAAAFI"]
[Thu Dec 25 15:38:11.462725 2025] [:error] [pid 31571:tid 31649] [client 4.217.192.251:44270] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aUzp4-7e_lLK2X5wU8mDqAAAAJY"]
[Thu Dec 25 15:38:12.163467 2025] [:error] [pid 31571:tid 31630] [client 4.217.192.251:46595] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aUzp5O7e_lLK2X5wU8mDqQAAAIM"]
[Thu Dec 25 15:38:12.553216 2025] [:error] [pid 2996:tid 3020] [client 4.217.192.251:41279] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aUzp5KrrTp0EWNyhaIQAwAAAARY"]
[Thu Dec 25 15:38:13.716590 2025] [:error] [pid 2996:tid 3016] [client 4.217.192.251:15736] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aUzp5arrTp0EWNyhaIQAxAAAARI"]
[Thu Dec 25 15:38:14.625830 2025] [:error] [pid 2996:tid 2998] [client 4.217.192.251:43928] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aUzp5qrrTp0EWNyhaIQAxwAAAQA"]
[Thu Dec 25 15:38:14.973136 2025] [:error] [pid 2996:tid 3013] [client 4.217.192.251:15771] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aUzp5qrrTp0EWNyhaIQAyQAAAQ8"]
[Thu Dec 25 15:38:15.894058 2025] [:error] [pid 31569:tid 31574] [client 4.217.192.251:15835] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUzp52iSFBH7Ee_uldWZnAAAAAE"]
[Thu Dec 25 15:38:16.495812 2025] [:error] [pid 31570:tid 31610] [client 4.217.192.251:15823] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUzp6GPy2DpAzW_4a2gRFQAAAEo"]
[Thu Dec 25 15:38:16.931868 2025] [:error] [pid 31571:tid 31643] [client 4.217.192.251:15717] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUzp6O7e_lLK2X5wU8mDrAAAAJA"]
[Thu Dec 25 15:38:17.292270 2025] [:error] [pid 31571:tid 31642] [client 4.217.192.251:15702] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aUzp6e7e_lLK2X5wU8mDrgAAAI8"]
[Thu Dec 25 15:38:17.689844 2025] [:error] [pid 31570:tid 31615] [client 4.217.192.251:15497] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aUzp6WPy2DpAzW_4a2gRGAAAAE8"]
[Thu Dec 25 15:38:23.718002 2025] [:error] [pid 31571:tid 31640] [client 4.217.192.251:46630] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aUzp7-7e_lLK2X5wU8mD0AAAAI0"]
[Thu Dec 25 15:38:24.532101 2025] [:error] [pid 31569:tid 31576] [client 4.217.192.251:44839] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aUzp8GiSFBH7Ee_uldWZpgAAAAM"]
[Thu Dec 25 15:38:25.295222 2025] [:error] [pid 31570:tid 31620] [client 4.217.192.251:42348] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aUzp8WPy2DpAzW_4a2gRHQAAAFQ"]
[Thu Dec 25 15:38:25.828362 2025] [:error] [pid 2996:tid 2998] [client 4.217.192.251:15551] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aUzp8arrTp0EWNyhaIQA0gAAAQA"]
[Thu Dec 25 15:38:26.483711 2025] [:error] [pid 31569:tid 31594] [client 4.217.192.251:42330] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUzp8miSFBH7Ee_uldWZqgAAABU"]
[Thu Dec 25 15:38:27.373497 2025] [:error] [pid 31569:tid 31586] [client 4.217.192.251:15495] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUzp82iSFBH7Ee_uldWZrQAAAA0"]
[Thu Dec 25 15:38:28.220086 2025] [:error] [pid 31655:tid 31659] [client 4.217.192.251:16100] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUzp9JozPMk9HPtIJPNpOAAAAMI"]
[Thu Dec 25 15:38:29.243208 2025] [:error] [pid 31569:tid 31583] [client 4.217.192.251:43979] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUzp9WiSFBH7Ee_uldWZrgAAAAo"]
[Thu Dec 25 15:38:30.116244 2025] [:error] [pid 31569:tid 31580] [client 4.217.192.251:44203] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aUzp9miSFBH7Ee_uldWZsQAAAAc"]
[Thu Dec 25 15:38:31.117848 2025] [:error] [pid 31569:tid 31584] [client 4.217.192.251:43974] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aUzp92iSFBH7Ee_uldWZswAAAAs"]
[Thu Dec 25 15:38:32.300633 2025] [:error] [pid 31571:tid 31638] [client 4.217.192.251:43980] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aUzp-O7e_lLK2X5wU8mD1QAAAIs"]
[Thu Dec 25 15:38:33.408547 2025] [:error] [pid 2996:tid 3003] [client 4.217.192.251:44818] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aUzp-arrTp0EWNyhaIQA2QAAAQU"]
[Thu Dec 25 15:38:34.800024 2025] [:error] [pid 31655:tid 31661] [client 4.217.192.251:44496] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aUzp-pozPMk9HPtIJPNpOwAAAMQ"]
[Thu Dec 25 15:38:35.703135 2025] [:error] [pid 31569:tid 31597] [client 4.217.192.251:44844] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aUzp-2iSFBH7Ee_uldWZvQAAABg"]
[Thu Dec 25 15:38:36.649863 2025] [:error] [pid 31571:tid 31643] [client 4.217.192.251:16113] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aUzp_O7e_lLK2X5wU8mD2QAAAJA"]
[Thu Dec 25 15:38:38.077861 2025] [:error] [pid 31571:tid 31651] [client 4.217.192.251:44162] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aUzp_u7e_lLK2X5wU8mD3AAAAJg"]
[Thu Dec 25 15:38:39.336076 2025] [:error] [pid 31655:tid 31672] [client 4.217.192.251:16091] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aUzp_5ozPMk9HPtIJPNpPgAAAM8"]
[Thu Dec 25 15:38:39.962737 2025] [:error] [pid 31655:tid 31678] [client 4.217.192.251:43999] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aUzp_5ozPMk9HPtIJPNpPwAAANU"]
[Thu Dec 25 15:38:40.449884 2025] [:error] [pid 31570:tid 31619] [client 4.217.192.251:52395] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aUzqAGPy2DpAzW_4a2gRJAAAAFM"]
[Thu Dec 25 15:38:41.291679 2025] [:error] [pid 2996:tid 3017] [client 4.217.192.251:44238] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aUzqAarrTp0EWNyhaIQA4gAAARM"]
[Thu Dec 25 15:38:42.256649 2025] [:error] [pid 31570:tid 31613] [client 4.217.192.251:52412] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aUzqAmPy2DpAzW_4a2gRJQAAAE0"]
[Thu Dec 25 15:38:43.546845 2025] [:error] [pid 31571:tid 31649] [client 4.217.192.251:49462] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aUzqA-7e_lLK2X5wU8mD5QAAAJY"]
[Thu Dec 25 15:38:44.555253 2025] [:error] [pid 31570:tid 31622] [client 4.217.192.251:52392] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aUzqBGPy2DpAzW_4a2gRKQAAAFY"]
[Thu Dec 25 15:38:45.110198 2025] [:error] [pid 31569:tid 31594] [client 4.217.192.251:49426] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aUzqBWiSFBH7Ee_uldWZwwAAABU"]
[Thu Dec 25 15:38:45.948242 2025] [:error] [pid 2996:tid 3006] [client 4.217.192.251:55007] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aUzqBarrTp0EWNyhaIQA6AAAAQg"]
[Thu Dec 25 15:38:46.641266 2025] [:error] [pid 31569:tid 31575] [client 4.217.192.251:52409] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aUzqBmiSFBH7Ee_uldWZxQAAAAI"]
[Thu Dec 25 15:38:47.080213 2025] [:error] [pid 31569:tid 31597] [client 4.217.192.251:54915] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aUzqB2iSFBH7Ee_uldWZyQAAABg"]
[Thu Dec 25 15:38:47.605589 2025] [:error] [pid 31570:tid 31608] [client 4.217.192.251:54964] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aUzqB2Py2DpAzW_4a2gRLAAAAEg"]
[Thu Dec 25 15:38:48.121779 2025] [:error] [pid 2996:tid 3020] [client 4.217.192.251:42339] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aUzqCKrrTp0EWNyhaIQA6QAAARY"]
[Thu Dec 25 15:38:48.694338 2025] [:error] [pid 31571:tid 31629] [client 4.217.192.251:49431] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aUzqCO7e_lLK2X5wU8mD5wAAAII"]
[Thu Dec 25 15:38:49.206253 2025] [:error] [pid 31570:tid 31610] [client 4.217.192.251:55000] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aUzqCWPy2DpAzW_4a2gRLgAAAEo"]
[Thu Dec 25 15:38:49.966211 2025] [:error] [pid 31570:tid 31615] [client 4.217.192.251:52325] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aUzqCWPy2DpAzW_4a2gRLwAAAE8"]
[Thu Dec 25 15:38:50.816472 2025] [:error] [pid 31571:tid 31643] [client 4.217.192.251:52389] [client 4.217.192.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUzqCu7e_lLK2X5wU8mD6AAAAJA"]
[Thu Dec 25 15:38:51.210625 2025] [:error] [pid 31571:tid 31639] [client 4.217.192.251:42350] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUzqC-7e_lLK2X5wU8mD6QAAAIw"]
[Thu Dec 25 15:38:51.556853 2025] [:error] [pid 31655:tid 31675] [client 4.217.192.251:52369] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUzqC5ozPMk9HPtIJPNpRwAAANI"]
[Thu Dec 25 15:38:51.887655 2025] [:error] [pid 31571:tid 31651] [client 4.217.192.251:49468] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUzqC-7e_lLK2X5wU8mD6gAAAJg"]
[Thu Dec 25 15:38:52.325795 2025] [:error] [pid 31570:tid 31617] [client 4.217.192.251:43559] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aUzqDGPy2DpAzW_4a2gRMwAAAFE"]
[Thu Dec 25 15:38:52.716717 2025] [:error] [pid 2996:tid 3013] [client 4.217.192.251:42362] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUzqDKrrTp0EWNyhaIQA8AAAAQ8"]
[Thu Dec 25 15:38:53.460357 2025] [:error] [pid 31570:tid 31613] [client 4.217.192.251:52315] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUzqDWPy2DpAzW_4a2gRNAAAAE0"]
[Thu Dec 25 15:38:53.901063 2025] [:error] [pid 31570:tid 31600] [client 4.217.192.251:52305] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUzqDWPy2DpAzW_4a2gRNQAAAEA"]
[Thu Dec 25 15:38:54.293737 2025] [:error] [pid 31569:tid 31586] [client 4.217.192.251:49470] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUzqDmiSFBH7Ee_uldWZ0wAAAA0"]
[Thu Dec 25 15:38:54.903254 2025] [:error] [pid 2996:tid 3014] [client 4.217.192.251:49880] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aUzqDqrrTp0EWNyhaIQA8gAAARA"]
[Thu Dec 25 15:38:56.800846 2025] [:error] [pid 2996:tid 3012] [client 4.217.192.251:49451] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aUzqEKrrTp0EWNyhaIQA9AAAAQ4"]
[Thu Dec 25 15:38:57.646833 2025] [:error] [pid 31571:tid 31633] [client 4.217.192.251:52336] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aUzqEe7e_lLK2X5wU8mD8AAAAIY"]
[Thu Dec 25 15:38:57.988821 2025] [:error] [pid 31571:tid 31628] [client 4.217.192.251:52402] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aUzqEe7e_lLK2X5wU8mD8QAAAIE"]
[Thu Dec 25 15:38:58.646739 2025] [:error] [pid 31571:tid 31647] [client 4.217.192.251:52302] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUzqEu7e_lLK2X5wU8mD9AAAAJQ"]
[Thu Dec 25 15:38:59.261690 2025] [:error] [pid 31571:tid 31641] [client 4.217.192.251:49457] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUzqE-7e_lLK2X5wU8mD9QAAAI4"]
[Thu Dec 25 15:38:59.966996 2025] [:error] [pid 31655:tid 31662] [client 4.217.192.251:42311] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUzqE5ozPMk9HPtIJPNpSwAAAMU"]
[Thu Dec 25 15:39:00.778773 2025] [:error] [pid 31569:tid 31576] [client 4.217.192.251:42338] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUzqFGiSFBH7Ee_uldWZ2gAAAAM"]
[Thu Dec 25 15:39:01.403085 2025] [:error] [pid 31569:tid 31574] [client 4.217.192.251:43565] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aUzqFWiSFBH7Ee_uldWZ3AAAAAE"]
[Thu Dec 25 15:39:02.024326 2025] [:error] [pid 31569:tid 31578] [client 4.217.192.251:52356] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aUzqFmiSFBH7Ee_uldWZ3QAAAAU"]
[Thu Dec 25 15:39:02.964153 2025] [:error] [pid 2996:tid 3013] [client 4.217.192.251:54941] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aUzqFqrrTp0EWNyhaIQA_AAAAQ8"]
[Thu Dec 25 15:39:04.281131 2025] [:error] [pid 31571:tid 31643] [client 4.217.192.251:43569] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aUzqGO7e_lLK2X5wU8mD-AAAAJA"]
[Thu Dec 25 15:39:05.454181 2025] [:error] [pid 31655:tid 31668] [client 4.217.192.251:49449] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aUzqGZozPMk9HPtIJPNpTAAAAMs"]
[Thu Dec 25 15:39:05.918775 2025] [:error] [pid 2996:tid 3003] [client 4.217.192.251:49872] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aUzqGarrTp0EWNyhaIQBBQAAAQU"]
[Thu Dec 25 15:39:06.418803 2025] [:error] [pid 2996:tid 3019] [client 4.217.192.251:43525] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aUzqGqrrTp0EWNyhaIQBBgAAARU"]
[Thu Dec 25 15:39:07.180453 2025] [:error] [pid 31569:tid 31575] [client 4.217.192.251:49914] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aUzqG2iSFBH7Ee_uldWZ3gAAAAI"]
[Thu Dec 25 15:39:07.857121 2025] [:error] [pid 31571:tid 31635] [client 4.217.192.251:42316] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUzqG-7e_lLK2X5wU8mD_QAAAIg"]
[Thu Dec 25 15:39:09.515215 2025] [:error] [pid 31571:tid 31629] [client 4.217.192.251:49861] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUzqHe7e_lLK2X5wU8mEAwAAAII"]
[Thu Dec 25 15:39:10.714168 2025] [:error] [pid 31570:tid 31624] [client 4.217.192.251:43566] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUzqHmPy2DpAzW_4a2gRNgAAAFg"]
[Thu Dec 25 15:39:12.424511 2025] [:error] [pid 31571:tid 31637] [client 4.217.192.251:49876] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUzqIO7e_lLK2X5wU8mECAAAAIo"]
[Thu Dec 25 15:39:13.918634 2025] [:error] [pid 31569:tid 31588] [client 4.217.192.251:49429] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUzqIWiSFBH7Ee_uldWZ5AAAAA8"]
[Thu Dec 25 15:39:15.015398 2025] [:error] [pid 31570:tid 31620] [client 4.217.192.251:49916] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUzqI2Py2DpAzW_4a2gROgAAAFQ"]
[Thu Dec 25 15:39:15.797954 2025] [:error] [pid 31569:tid 31574] [client 4.217.192.251:52521] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUzqI2iSFBH7Ee_uldWZ5wAAAAE"]
[Thu Dec 25 15:39:16.860959 2025] [:error] [pid 31569:tid 31578] [client 4.217.192.251:52511] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUzqJGiSFBH7Ee_uldWZ6wAAAAU"]
[Thu Dec 25 15:39:17.247300 2025] [:error] [pid 31655:tid 31657] [client 4.217.192.251:52323] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aUzqJZozPMk9HPtIJPNpUQAAAMA"]
[Thu Dec 25 15:39:18.048398 2025] [:error] [pid 31571:tid 31634] [client 4.217.192.251:49463] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aUzqJu7e_lLK2X5wU8mECgAAAIc"]
[Thu Dec 25 15:39:18.647243 2025] [:error] [pid 31571:tid 31642] [client 4.217.192.251:52746] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aUzqJu7e_lLK2X5wU8mECwAAAI8"]
[Thu Dec 25 15:39:19.263621 2025] [:error] [pid 31571:tid 31630] [client 4.217.192.251:44002] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aUzqJ-7e_lLK2X5wU8mEDAAAAIM"]
[Thu Dec 25 15:39:19.709446 2025] [:error] [pid 31655:tid 31667] [client 4.217.192.251:52398] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUzqJ5ozPMk9HPtIJPNpVAAAAMo"]
[Thu Dec 25 15:39:20.034603 2025] [:error] [pid 31571:tid 31641] [client 4.217.192.251:52781] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUzqKO7e_lLK2X5wU8mEDwAAAI4"]
[Thu Dec 25 15:39:20.631588 2025] [:error] [pid 31655:tid 31672] [client 4.217.192.251:52798] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUzqKJozPMk9HPtIJPNpVQAAAM8"]
[Thu Dec 25 15:39:21.447675 2025] [:error] [pid 31655:tid 31668] [client 4.217.192.251:52759] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aUzqKZozPMk9HPtIJPNpVwAAAMs"]
[Thu Dec 25 15:39:21.975288 2025] [:error] [pid 31655:tid 31679] [client 4.217.192.251:52377] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUzqKZozPMk9HPtIJPNpWgAAANY"]
[Thu Dec 25 15:39:22.348593 2025] [:error] [pid 2996:tid 3008] [client 4.217.192.251:43523] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUzqKqrrTp0EWNyhaIQBDwAAAQo"]
[Thu Dec 25 15:39:22.721530 2025] [:error] [pid 2996:tid 3015] [client 4.217.192.251:54995] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aUzqKqrrTp0EWNyhaIQBEQAAARE"]
[Thu Dec 25 15:39:27.752008 2025] [:error] [pid 31655:tid 31677] [client 4.217.192.251:54956] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aUzqL5ozPMk9HPtIJPNpdgAAANQ"]
[Thu Dec 25 15:39:28.555822 2025] [:error] [pid 31571:tid 31643] [client 4.217.192.251:49440] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aUzqMO7e_lLK2X5wU8mEEQAAAJA"]
[Thu Dec 25 15:39:29.048605 2025] [:error] [pid 31571:tid 31636] [client 4.217.192.251:52490] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aUzqMe7e_lLK2X5wU8mEEwAAAIk"]
[Thu Dec 25 15:39:30.018300 2025] [:error] [pid 31570:tid 31608] [client 4.217.192.251:49455] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aUzqMmPy2DpAzW_4a2gRSAAAAEg"]
[Thu Dec 25 15:39:30.866341 2025] [:error] [pid 31570:tid 31614] [client 4.217.192.251:55031] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUzqMmPy2DpAzW_4a2gRSgAAAE4"]
[Thu Dec 25 15:39:31.415029 2025] [:error] [pid 31569:tid 31575] [client 4.217.192.251:52411] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUzqM2iSFBH7Ee_uldWZ9QAAAAI"]
[Thu Dec 25 15:39:32.015186 2025] [:error] [pid 2996:tid 3009] [client 4.217.192.251:52767] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUzqNKrrTp0EWNyhaIQBGgAAAQs"]
[Thu Dec 25 15:39:32.773187 2025] [:error] [pid 2996:tid 2999] [client 4.217.192.251:42350] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUzqNKrrTp0EWNyhaIQBGwAAAQE"]
[Thu Dec 25 15:39:33.166235 2025] [:error] [pid 31569:tid 31582] [client 4.217.192.251:44501] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUzqNWiSFBH7Ee_uldWZ9gAAAAk"]
[Thu Dec 25 15:39:33.827213 2025] [:error] [pid 2996:tid 3008] [client 4.217.192.251:49418] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUzqNarrTp0EWNyhaIQBHgAAAQo"]
[Thu Dec 25 15:39:34.841622 2025] [:error] [pid 2996:tid 3003] [client 4.217.192.251:54933] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUzqNqrrTp0EWNyhaIQBHwAAAQU"]
[Thu Dec 25 15:39:35.562191 2025] [:error] [pid 31571:tid 31632] [client 4.217.192.251:52322] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUzqN-7e_lLK2X5wU8mEGQAAAIU"]
[Thu Dec 25 15:39:36.269986 2025] [:error] [pid 31655:tid 31661] [client 4.217.192.251:52762] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aUzqOJozPMk9HPtIJPNpeAAAAMQ"]
[Thu Dec 25 15:39:37.001256 2025] [:error] [pid 2996:tid 3019] [client 4.217.192.251:49414] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aUzqOarrTp0EWNyhaIQBIQAAARU"]
[Thu Dec 25 15:39:38.447108 2025] [:error] [pid 31569:tid 31584] [client 4.217.192.251:52494] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aUzqOmiSFBH7Ee_uldWZ_QAAAAs"]
[Thu Dec 25 15:39:38.921996 2025] [:error] [pid 2996:tid 3020] [client 4.217.192.251:54919] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aUzqOqrrTp0EWNyhaIQBJwAAARY"]
[Thu Dec 25 15:39:39.326777 2025] [:error] [pid 2996:tid 3012] [client 4.217.192.251:55024] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUzqO6rrTp0EWNyhaIQBKQAAAQ4"]
[Thu Dec 25 15:39:40.053182 2025] [:error] [pid 31569:tid 31581] [client 4.217.192.251:54949] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUzqPGiSFBH7Ee_uldWZ_wAAAAg"]
[Thu Dec 25 15:39:40.669701 2025] [:error] [pid 31570:tid 31603] [client 4.217.192.251:49877] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUzqPGPy2DpAzW_4a2gRTgAAAEM"]
[Thu Dec 25 15:39:41.084927 2025] [:error] [pid 31655:tid 31664] [client 4.217.192.251:52776] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUzqPZozPMk9HPtIJPNpeQAAAMc"]
[Thu Dec 25 15:39:41.807096 2025] [:error] [pid 31571:tid 31643] [client 4.217.192.251:44814] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUzqPe7e_lLK2X5wU8mEHAAAAJA"]
[Thu Dec 25 15:39:42.466407 2025] [:error] [pid 31570:tid 31621] [client 4.217.192.251:52537] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUzqPmPy2DpAzW_4a2gRTwAAAFU"]
[Thu Dec 25 15:39:43.089219 2025] [:error] [pid 2996:tid 2998] [client 4.217.192.251:49863] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUzqP6rrTp0EWNyhaIQBLAAAAQA"]
[Thu Dec 25 15:39:44.208868 2025] [:error] [pid 31571:tid 31636] [client 4.217.192.251:52794] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUzqQO7e_lLK2X5wU8mEHgAAAIk"]
[Thu Dec 25 15:39:44.872994 2025] [:error] [pid 2996:tid 3022] [client 4.217.192.251:55970] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aUzqQKrrTp0EWNyhaIQBMgAAARg"]
[Thu Dec 25 15:39:45.644994 2025] [:error] [pid 2996:tid 3009] [client 4.217.192.251:49903] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aUzqQarrTp0EWNyhaIQBNQAAAQs"]
[Thu Dec 25 15:39:46.823321 2025] [:error] [pid 2996:tid 2998] [client 4.217.192.251:49856] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aUzqQqrrTp0EWNyhaIQBOgAAAQA"]
[Thu Dec 25 15:39:47.381629 2025] [:error] [pid 2996:tid 3004] [client 4.217.192.251:52344] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aUzqQ6rrTp0EWNyhaIQBPQAAAQY"]
[Thu Dec 25 15:39:47.801292 2025] [:error] [pid 2996:tid 3005] [client 4.217.192.251:54924] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aUzqQ6rrTp0EWNyhaIQBPgAAAQc"]
[Thu Dec 25 15:39:48.243451 2025] [:error] [pid 31569:tid 31573] [client 4.217.192.251:54925] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aUzqRGiSFBH7Ee_uldWaBgAAAAA"]
[Thu Dec 25 15:39:48.573263 2025] [:error] [pid 2996:tid 3022] [client 4.217.192.251:55986] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aUzqRKrrTp0EWNyhaIQBPwAAARg"]
[Thu Dec 25 15:39:48.961590 2025] [:error] [pid 31570:tid 31608] [client 4.217.192.251:52384] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aUzqRGPy2DpAzW_4a2gRVQAAAEg"]
[Thu Dec 25 15:39:49.462769 2025] [:error] [pid 2996:tid 3007] [client 4.217.192.251:49411] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUzqRarrTp0EWNyhaIQBQAAAAQk"]
[Thu Dec 25 15:39:50.105822 2025] [:error] [pid 2996:tid 3018] [client 4.217.192.251:44248] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUzqRqrrTp0EWNyhaIQBRAAAARQ"]
[Thu Dec 25 15:39:50.769861 2025] [:error] [pid 31569:tid 31589] [client 4.217.192.251:55983] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUzqRmiSFBH7Ee_uldWaCgAAABA"]
[Thu Dec 25 15:39:51.283689 2025] [:error] [pid 2996:tid 3002] [client 4.217.192.251:55980] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUzqR6rrTp0EWNyhaIQBRQAAAQQ"]
[Thu Dec 25 15:39:51.742822 2025] [:error] [pid 31570:tid 31617] [client 4.217.192.251:16065] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aUzqR2Py2DpAzW_4a2gRWwAAAFE"]
[Thu Dec 25 15:39:52.257988 2025] [:error] [pid 31571:tid 31645] [client 4.217.192.251:55017] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aUzqSO7e_lLK2X5wU8mEIAAAAJI"]
[Thu Dec 25 15:39:52.706368 2025] [:error] [pid 31571:tid 31637] [client 4.217.192.251:55981] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aUzqSO7e_lLK2X5wU8mEIgAAAIo"]
[Thu Dec 25 15:39:53.270864 2025] [:error] [pid 31570:tid 31605] [client 4.217.192.251:44485] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aUzqSWPy2DpAzW_4a2gRXgAAAEU"]
[Thu Dec 25 15:39:53.666733 2025] [:error] [pid 2996:tid 3005] [client 4.217.192.251:52522] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUzqSarrTp0EWNyhaIQBSgAAAQc"]
[Thu Dec 25 15:39:54.119581 2025] [:error] [pid 2996:tid 3012] [client 4.217.192.251:54951] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUzqSqrrTp0EWNyhaIQBTQAAAQ4"]
[Thu Dec 25 15:39:54.413970 2025] [:error] [pid 2996:tid 3021] [client 4.217.192.251:52480] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUzqSqrrTp0EWNyhaIQBUAAAARc"]
[Thu Dec 25 15:39:54.756054 2025] [:error] [pid 2996:tid 3006] [client 4.217.192.251:52501] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aUzqSqrrTp0EWNyhaIQBUQAAAQg"]
[Thu Dec 25 15:39:55.384590 2025] [:error] [pid 2996:tid 3002] [client 4.217.192.251:44497] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aUzqS6rrTp0EWNyhaIQBUwAAAQQ"]
[Thu Dec 25 15:39:55.886720 2025] [:error] [pid 31571:tid 31642] [client 4.217.192.251:52407] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aUzqS-7e_lLK2X5wU8mEKAAAAI8"]
[Thu Dec 25 15:39:56.763437 2025] [:error] [pid 31571:tid 31630] [client 4.217.192.251:52516] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aUzqTO7e_lLK2X5wU8mEKQAAAIM"]
[Thu Dec 25 15:39:57.593216 2025] [:error] [pid 31569:tid 31586] [client 4.217.192.251:52741] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/m.php"] [unique_id "aUzqTWiSFBH7Ee_uldWaEgAAAA0"]
[Thu Dec 25 15:39:58.097194 2025] [:error] [pid 31569:tid 31583] [client 4.217.192.251:56017] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUzqTmiSFBH7Ee_uldWaFAAAAAo"]
[Thu Dec 25 15:39:58.528596 2025] [:error] [pid 2996:tid 3008] [client 4.217.192.251:49892] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUzqTqrrTp0EWNyhaIQBaAAAAQo"]
[Thu Dec 25 15:39:59.292126 2025] [:error] [pid 2996:tid 3009] [client 4.217.192.251:55030] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUzqT6rrTp0EWNyhaIQBcwAAAQs"]
[Thu Dec 25 15:39:59.899208 2025] [:error] [pid 2996:tid 3020] [client 4.217.192.251:49422] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aUzqT6rrTp0EWNyhaIQBegAAARY"]
[Thu Dec 25 15:40:00.387366 2025] [:error] [pid 2996:tid 3022] [client 4.217.192.251:55974] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUzqUKrrTp0EWNyhaIQBfQAAARg"]
[Thu Dec 25 15:40:01.285054 2025] [:error] [pid 31569:tid 31580] [client 4.217.192.251:49409] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUzqUWiSFBH7Ee_uldWaLAAAAAc"]
[Thu Dec 25 15:40:02.386394 2025] [:error] [pid 31655:tid 31679] [client 4.217.192.251:52792] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUzqUpozPMk9HPtIJPNpfgAAANY"]
[Thu Dec 25 15:40:03.202614 2025] [:error] [pid 31571:tid 31632] [client 4.217.192.251:49883] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aUzqU-7e_lLK2X5wU8mEQAAAAIU"]
[Thu Dec 25 15:40:03.942410 2025] [:error] [pid 2996:tid 3010] [client 4.217.192.251:49918] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUzqU6rrTp0EWNyhaIQBjQAAAQw"]
[Thu Dec 25 15:40:04.447863 2025] [:error] [pid 31571:tid 31640] [client 4.217.192.251:54912] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUzqVO7e_lLK2X5wU8mEQQAAAI0"]
[Thu Dec 25 15:40:04.891490 2025] [:error] [pid 31570:tid 31607] [client 4.217.192.251:56041] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUzqVGPy2DpAzW_4a2gRjQAAAEc"]
[Thu Dec 25 15:40:05.845470 2025] [:error] [pid 31571:tid 31644] [client 4.217.192.251:52752] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUzqVe7e_lLK2X5wU8mEQgAAAJE"]
[Thu Dec 25 15:40:06.995703 2025] [:error] [pid 31571:tid 31635] [client 4.217.192.251:56013] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUzqVu7e_lLK2X5wU8mERgAAAIg"]
[Thu Dec 25 15:40:07.690868 2025] [:error] [pid 2996:tid 3006] [client 4.217.192.251:42325] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUzqV6rrTp0EWNyhaIQBkQAAAQg"]
[Thu Dec 25 15:40:08.224977 2025] [:error] [pid 31569:tid 31575] [client 4.217.192.251:52387] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUzqWGiSFBH7Ee_uldWaLwAAAAI"]
[Thu Dec 25 15:40:08.756071 2025] [:error] [pid 31570:tid 31608] [client 4.217.192.251:49858] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aUzqWGPy2DpAzW_4a2gRjgAAAEg"]
[Thu Dec 25 15:40:09.284478 2025] [:error] [pid 2996:tid 3015] [client 4.217.192.251:56002] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aUzqWarrTp0EWNyhaIQBkwAAARE"]
[Thu Dec 25 15:40:09.764439 2025] [:error] [pid 31655:tid 31659] [client 4.217.192.251:55037] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aUzqWZozPMk9HPtIJPNpggAAAMI"]
[Thu Dec 25 15:40:10.268903 2025] [:error] [pid 31569:tid 31588] [client 4.217.192.251:52293] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aUzqWmiSFBH7Ee_uldWaNQAAAA8"]
[Thu Dec 25 15:40:10.673707 2025] [:error] [pid 31570:tid 31617] [client 4.217.192.251:52372] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aUzqWmPy2DpAzW_4a2gRkQAAAFE"]
[Thu Dec 25 15:40:12.521772 2025] [:error] [pid 31655:tid 31677] [client 4.217.192.251:54994] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aUzqXJozPMk9HPtIJPNphAAAANQ"]
[Thu Dec 25 15:40:13.589356 2025] [:error] [pid 2996:tid 3001] [client 4.217.192.251:49889] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aUzqXarrTp0EWNyhaIQBmQAAAQM"]
[Thu Dec 25 15:40:14.137817 2025] [:error] [pid 31569:tid 31597] [client 4.217.192.251:55978] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aUzqXmiSFBH7Ee_uldWaOgAAABg"]
[Thu Dec 25 15:40:14.747704 2025] [:error] [pid 31571:tid 31631] [client 4.217.192.251:56520] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aUzqXu7e_lLK2X5wU8mESwAAAIQ"]
[Thu Dec 25 15:40:15.257385 2025] [:error] [pid 2996:tid 2999] [client 4.217.192.251:55012] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aUzqX6rrTp0EWNyhaIQBnAAAAQE"]
[Thu Dec 25 15:40:16.027706 2025] [:error] [pid 31569:tid 31593] [client 4.217.192.251:56465] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aUzqYGiSFBH7Ee_uldWaPAAAABQ"]
[Thu Dec 25 15:40:16.659241 2025] [:error] [pid 31569:tid 31588] [client 4.217.192.251:44203] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aUzqYGiSFBH7Ee_uldWaPgAAAA8"]
[Thu Dec 25 15:40:17.195505 2025] [:error] [pid 31655:tid 31676] [client 4.217.192.251:56459] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aUzqYZozPMk9HPtIJPNphgAAANM"]
[Thu Dec 25 15:40:18.082625 2025] [:error] [pid 31570:tid 31609] [client 4.217.192.251:54913] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUzqYmPy2DpAzW_4a2gRlQAAAEk"]
[Thu Dec 25 15:40:18.451908 2025] [:error] [pid 31570:tid 31611] [client 4.217.192.251:56561] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUzqYmPy2DpAzW_4a2gRlgAAAEs"]
[Thu Dec 25 15:40:18.873126 2025] [:error] [pid 31655:tid 31664] [client 4.217.192.251:54986] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUzqYpozPMk9HPtIJPNpiAAAAMc"]
[Thu Dec 25 15:40:19.425608 2025] [:error] [pid 2996:tid 3019] [client 4.217.192.251:56507] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUzqY6rrTp0EWNyhaIQBowAAARU"]
[Thu Dec 25 15:40:20.322395 2025] [:error] [pid 31571:tid 31635] [client 4.217.192.251:52740] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUzqZO7e_lLK2X5wU8mEUgAAAIg"]
[Thu Dec 25 15:40:20.781954 2025] [:error] [pid 31570:tid 31619] [client 4.217.192.251:55964] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUzqZGPy2DpAzW_4a2gRmQAAAFM"]
[Thu Dec 25 15:40:21.602390 2025] [:error] [pid 31571:tid 31650] [client 4.217.192.251:54989] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUzqZe7e_lLK2X5wU8mEUwAAAJc"]
[Thu Dec 25 15:40:22.229804 2025] [:error] [pid 31655:tid 31665] [client 4.217.192.251:55951] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aUzqZpozPMk9HPtIJPNpkAAAAMg"]
[Thu Dec 25 15:40:22.717877 2025] [:error] [pid 31655:tid 31669] [client 4.217.192.251:55022] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUzqZpozPMk9HPtIJPNpkwAAAMw"]
[Thu Dec 25 15:40:23.247600 2025] [:error] [pid 31571:tid 31631] [client 4.217.192.251:55952] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUzqZ-7e_lLK2X5wU8mEVgAAAIQ"]
[Thu Dec 25 15:40:23.853179 2025] [:error] [pid 31571:tid 31629] [client 4.217.192.251:52532] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUzqZ-7e_lLK2X5wU8mEWQAAAII"]
[Thu Dec 25 15:40:24.374384 2025] [:error] [pid 31570:tid 31617] [client 4.217.192.251:52413] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUzqaGPy2DpAzW_4a2gRmwAAAFE"]
[Thu Dec 25 15:40:25.422200 2025] [:error] [pid 31570:tid 31616] [client 4.217.192.251:49884] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aUzqaWPy2DpAzW_4a2gRngAAAFA"]
[Thu Dec 25 15:40:26.274382 2025] [:error] [pid 31569:tid 31585] [client 4.217.192.251:44800] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aUzqamiSFBH7Ee_uldWaRQAAAAw"]
[Thu Dec 25 15:40:26.857893 2025] [:error] [pid 31655:tid 31677] [client 4.217.192.251:16331] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aUzqapozPMk9HPtIJPNplQAAANQ"]
[Thu Dec 25 15:40:31.853049 2025] [:error] [pid 31571:tid 31630] [client 4.217.192.251:52497] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aUzqb-7e_lLK2X5wU8mEaAAAAIM"]
[Thu Dec 25 15:40:32.436742 2025] [:error] [pid 31655:tid 31662] [client 4.217.192.251:56514] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aUzqcJozPMk9HPtIJPNpmwAAAMU"]
[Thu Dec 25 15:40:33.170802 2025] [:error] [pid 31569:tid 31583] [client 4.217.192.251:45637] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aUzqcWiSFBH7Ee_uldWaTwAAAAo"]
[Thu Dec 25 15:40:33.828631 2025] [:error] [pid 31569:tid 31576] [client 4.217.192.251:56516] [client 4.217.192.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aUzqcWiSFBH7Ee_uldWaUQAAAAM"]
[Thu Dec 25 16:18:57.000119 2025] [:error] [pid 31655:tid 31671] [client 223.15.245.170:59854] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aUzzcJozPMk9HPtIJPNyJQAAAM4"]
[Thu Dec 25 17:12:41.824299 2025] [:error] [pid 2996:tid 3012] [client 43.133.66.51:53228] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aU0ACarrTp0EWNyhaIQkSQAAAQ4"]
[Thu Dec 25 20:33:54.779780 2025] [autoindex:error] [pid 64971:tid 64979] [client 174.138.85.139:60441] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Dec 25 21:35:42.729982 2025] [:error] [pid 27869:tid 27879] [client 4.196.91.63:8234] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aU09rhNK7_n86kBD7qfJvAAAAIg"]
[Thu Dec 25 21:35:44.312094 2025] [:error] [pid 22045:tid 22124] [client 4.196.91.63:17704] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aU09sKsGGmXjDnvlmHtioAAAAVY"]
[Thu Dec 25 21:35:48.630544 2025] [:error] [pid 22043:tid 22066] [client 4.196.91.63:23816] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aU09tD4YVtlb2Iz_QE5G3AAAABI"]
[Thu Dec 25 21:35:49.299268 2025] [:error] [pid 22131:tid 22158] [client 4.196.91.63:30825] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aU09tZvVMtSTB4lX2fYpdAAAAFY"]
[Thu Dec 25 21:35:54.425058 2025] [:error] [pid 22131:tid 22143] [client 4.196.91.63:30135] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/npi.php"] [unique_id "aU09upvVMtSTB4lX2fYpfQAAAEk"]
[Thu Dec 25 21:35:55.443862 2025] [:error] [pid 27869:tid 27881] [client 4.196.91.63:17702] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/npi.php"] [unique_id "aU09uxNK7_n86kBD7qfJzQAAAIo"]
[Thu Dec 25 21:35:58.080373 2025] [:error] [pid 22045:tid 22103] [client 4.196.91.63:30802] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/npi.php"] [unique_id "aU09vqsGGmXjDnvlmHtirAAAAUE"]
[Thu Dec 25 21:36:00.464701 2025] [:error] [pid 22045:tid 22113] [client 4.196.91.63:9008] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/npi.php"] [unique_id "aU09wKsGGmXjDnvlmHtisAAAAUs"]
[Thu Dec 25 21:36:01.492984 2025] [:error] [pid 22045:tid 22123] [client 4.196.91.63:33640] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aU09wasGGmXjDnvlmHtitAAAAVU"]
[Thu Dec 25 21:36:04.606000 2025] [:error] [pid 27869:tid 27890] [client 4.196.91.63:33645] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aU09xBNK7_n86kBD7qfJ1QAAAJM"]
[Thu Dec 25 21:36:08.653535 2025] [:error] [pid 22044:tid 22079] [client 4.196.91.63:30121] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aU09yHPTC5rQKTB0FQ-QwAAAAMQ"]
[Thu Dec 25 21:36:11.229655 2025] [:error] [pid 27869:tid 27895] [client 4.196.91.63:30139] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aU09yxNK7_n86kBD7qfJ5AAAAJg"]
[Thu Dec 25 21:36:12.508201 2025] [:error] [pid 22043:tid 22063] [client 4.196.91.63:22074] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aU09zD4YVtlb2Iz_QE5G-wAAAA8"]
[Thu Dec 25 21:36:21.861195 2025] [:error] [pid 22045:tid 22113] [client 4.196.91.63:33622] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aU091asGGmXjDnvlmHti0wAAAUs"]
[Thu Dec 25 21:36:25.888739 2025] [:error] [pid 22044:tid 22075] [client 4.196.91.63:31251] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aU092XPTC5rQKTB0FQ-Q5QAAAMA"]
[Thu Dec 25 21:36:27.124600 2025] [:error] [pid 22045:tid 22112] [client 4.196.91.63:31248] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aU0926sGGmXjDnvlmHti5QAAAUo"]
[Thu Dec 25 21:36:28.118293 2025] [:error] [pid 22045:tid 22117] [client 4.196.91.63:30100] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aU093KsGGmXjDnvlmHti6AAAAU8"]
[Thu Dec 25 21:36:31.133798 2025] [:error] [pid 22043:tid 22067] [client 4.196.91.63:30833] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aU093z4YVtlb2Iz_QE5HCgAAABM"]
[Thu Dec 25 21:36:34.461750 2025] [:error] [pid 22043:tid 22054] [client 4.196.91.63:31264] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aU094j4YVtlb2Iz_QE5HEwAAAAY"]
[Thu Dec 25 21:36:35.340213 2025] [:error] [pid 27869:tid 27875] [client 4.196.91.63:17703] [client 4.196.91.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aU094xNK7_n86kBD7qfKFgAAAIQ"]
[Thu Dec 25 21:36:36.058632 2025] [:error] [pid 22043:tid 22059] [client 4.196.91.63:31277] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aU095D4YVtlb2Iz_QE5HGAAAAAs"]
[Thu Dec 25 21:36:39.078983 2025] [:error] [pid 27869:tid 27889] [client 4.196.91.63:32448] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aU095xNK7_n86kBD7qfKKgAAAJI"]
[Thu Dec 25 21:36:40.326797 2025] [:error] [pid 27869:tid 27887] [client 4.196.91.63:22072] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aU096BNK7_n86kBD7qfKLwAAAJA"]
[Thu Dec 25 21:36:41.419827 2025] [:error] [pid 27869:tid 27878] [client 4.196.91.63:22058] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aU096RNK7_n86kBD7qfKNwAAAIc"]
[Thu Dec 25 21:36:46.309735 2025] [:error] [pid 22131:tid 22140] [client 4.196.91.63:31253] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aU097pvVMtSTB4lX2fYpzAAAAEY"]
[Thu Dec 25 21:36:47.560535 2025] [:error] [pid 22043:tid 22054] [client 4.196.91.63:28455] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aU097z4YVtlb2Iz_QE5HJAAAAAY"]
[Thu Dec 25 21:36:48.194609 2025] [:error] [pid 22043:tid 22053] [client 4.196.91.63:31237] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aU098D4YVtlb2Iz_QE5HJwAAAAU"]
[Thu Dec 25 21:36:49.876943 2025] [:error] [pid 22131:tid 22153] [client 4.196.91.63:8981] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aU098ZvVMtSTB4lX2fYp1gAAAFI"]
[Thu Dec 25 21:36:50.544916 2025] [:error] [pid 27869:tid 27895] [client 4.196.91.63:9174] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mek.php"] [unique_id "aU098hNK7_n86kBD7qfKWAAAAJg"]
[Thu Dec 25 21:36:51.244630 2025] [:error] [pid 27869:tid 27881] [client 4.196.91.63:8993] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mek.php"] [unique_id "aU098xNK7_n86kBD7qfKXgAAAIo"]
[Thu Dec 25 21:36:52.624467 2025] [:error] [pid 27869:tid 27888] [client 4.196.91.63:30795] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mek.php"] [unique_id "aU099BNK7_n86kBD7qfKZAAAAJE"]
[Thu Dec 25 21:36:53.175891 2025] [:error] [pid 27869:tid 27882] [client 4.196.91.63:41999] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mek.php"] [unique_id "aU099RNK7_n86kBD7qfKaAAAAIs"]
[Thu Dec 25 21:36:54.941631 2025] [:error] [pid 27869:tid 27885] [client 4.196.91.63:9183] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fjpeb.php"] [unique_id "aU099hNK7_n86kBD7qfKcAAAAI4"]
[Thu Dec 25 21:36:55.396937 2025] [:error] [pid 27869:tid 27871] [client 4.196.91.63:28464] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fjpeb.php"] [unique_id "aU099xNK7_n86kBD7qfKcwAAAIA"]
[Thu Dec 25 21:36:58.156507 2025] [:error] [pid 22043:tid 22053] [client 4.196.91.63:17726] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fjpeb.php"] [unique_id "aU09-j4YVtlb2Iz_QE5HNwAAAAU"]
[Thu Dec 25 21:36:58.959838 2025] [:error] [pid 27869:tid 27883] [client 4.196.91.63:25625] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fjpeb.php"] [unique_id "aU09-hNK7_n86kBD7qfKeQAAAIw"]
[Thu Dec 25 21:37:09.436782 2025] [:error] [pid 22045:tid 22115] [client 4.196.91.63:32500] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aU0-BasGGmXjDnvlmHtjHQAAAU0"]
[Thu Dec 25 21:37:12.406563 2025] [:error] [pid 22045:tid 22120] [client 4.196.91.63:28453] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aU0-CKsGGmXjDnvlmHtjMwAAAVI"]
[Thu Dec 25 21:37:19.357653 2025] [:error] [pid 27869:tid 27872] [client 4.196.91.63:18185] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aU0-DxNK7_n86kBD7qfKoAAAAIE"]
[Thu Dec 25 21:37:20.993561 2025] [:error] [pid 22045:tid 22106] [client 4.196.91.63:33546] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aU0-EKsGGmXjDnvlmHtjOwAAAUQ"]
[Thu Dec 25 21:37:23.272458 2025] [:error] [pid 22043:tid 22057] [client 4.196.91.63:18772] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aU0-Ez4YVtlb2Iz_QE5HWQAAAAk"]
[Thu Dec 25 21:37:29.831184 2025] [:error] [pid 27869:tid 27875] [client 4.196.91.63:8902] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aU0-GRNK7_n86kBD7qfK0gAAAIQ"]
[Thu Dec 25 21:37:36.335299 2025] [:error] [pid 27869:tid 27878] [client 4.196.91.63:33119] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aU0-IBNK7_n86kBD7qfK7AAAAIc"]
[Thu Dec 25 21:37:37.841306 2025] [:error] [pid 22045:tid 22105] [client 4.196.91.63:27317] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aU0-IasGGmXjDnvlmHtjXwAAAUM"]
[Thu Dec 25 21:37:39.336961 2025] [:error] [pid 22043:tid 22059] [client 4.196.91.63:25721] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aU0-Iz4YVtlb2Iz_QE5HegAAAAs"]
[Thu Dec 25 21:37:39.992412 2025] [:error] [pid 22131:tid 22151] [client 4.196.91.63:38990] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aU0-I5vVMtSTB4lX2fYqHgAAAFA"]
[Thu Dec 25 21:37:41.123475 2025] [:error] [pid 22045:tid 22112] [client 4.196.91.63:15372] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aU0-JasGGmXjDnvlmHtjYgAAAUo"]
[Thu Dec 25 21:37:42.542477 2025] [:error] [pid 27869:tid 27891] [client 4.196.91.63:25683] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aU0-JhNK7_n86kBD7qfK8wAAAJQ"]
[Thu Dec 25 21:37:44.828013 2025] [:error] [pid 22131:tid 22148] [client 4.196.91.63:25692] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aU0-KJvVMtSTB4lX2fYqMwAAAE0"]
[Thu Dec 25 21:37:45.873222 2025] [:error] [pid 22043:tid 22065] [client 4.196.91.63:60741] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aU0-KT4YVtlb2Iz_QE5HiAAAABE"]
[Thu Dec 25 21:38:08.261745 2025] [:error] [pid 27869:tid 27890] [client 4.196.91.63:29747] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aU0-QBNK7_n86kBD7qfLVgAAAJM"]
[Thu Dec 25 21:38:09.136970 2025] [:error] [pid 22044:tid 22076] [client 4.196.91.63:9077] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aU0-QXPTC5rQKTB0FQ-RWQAAAME"]
[Thu Dec 25 21:38:10.167239 2025] [:error] [pid 22131:tid 22158] [client 4.196.91.63:32411] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aU0-QpvVMtSTB4lX2fYqYAAAAFY"]
[Thu Dec 25 21:38:11.853976 2025] [:error] [pid 22043:tid 22051] [client 4.196.91.63:32397] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aU0-Qz4YVtlb2Iz_QE5HoQAAAAM"]
[Thu Dec 25 21:38:13.155124 2025] [:error] [pid 22044:tid 22081] [client 4.196.91.63:20265] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aU0-RXPTC5rQKTB0FQ-RaAAAAMY"]
[Thu Dec 25 21:38:17.878498 2025] [:error] [pid 22131:tid 22139] [client 4.196.91.63:41012] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aU0-SZvVMtSTB4lX2fYqeAAAAEU"]
[Thu Dec 25 21:38:21.491753 2025] [:error] [pid 27869:tid 27874] [client 4.196.91.63:21006] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aU0-TRNK7_n86kBD7qfLdQAAAIM"]
[Thu Dec 25 21:38:22.694186 2025] [:error] [pid 22131:tid 22143] [client 4.196.91.63:23296] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aU0-TpvVMtSTB4lX2fYqgwAAAEk"]
[Thu Dec 25 21:38:27.240470 2025] [:error] [pid 22045:tid 22108] [client 4.196.91.63:43864] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sfvul.php"] [unique_id "aU0-U6sGGmXjDnvlmHtjhwAAAUY"]
[Thu Dec 25 21:38:28.440299 2025] [:error] [pid 22131:tid 22151] [client 4.196.91.63:30348] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sfvul.php"] [unique_id "aU0-VJvVMtSTB4lX2fYqrQAAAFA"]
[Thu Dec 25 21:38:29.359369 2025] [:error] [pid 22131:tid 22148] [client 4.196.91.63:29088] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sfvul.php"] [unique_id "aU0-VZvVMtSTB4lX2fYqsAAAAE0"]
[Thu Dec 25 21:38:30.174977 2025] [:error] [pid 27869:tid 27878] [client 4.196.91.63:25891] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sfvul.php"] [unique_id "aU0-VhNK7_n86kBD7qfLiAAAAIc"]
[Thu Dec 25 21:38:30.779510 2025] [:error] [pid 27869:tid 27881] [client 4.196.91.63:25856] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/icdwb.php"] [unique_id "aU0-VhNK7_n86kBD7qfLigAAAIo"]
[Thu Dec 25 21:38:32.450102 2025] [:error] [pid 22044:tid 22097] [client 4.196.91.63:31966] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/icdwb.php"] [unique_id "aU0-WHPTC5rQKTB0FQ-RmgAAANY"]
[Thu Dec 25 21:38:34.821230 2025] [:error] [pid 22044:tid 22080] [client 4.196.91.63:20626] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/icdwb.php"] [unique_id "aU0-WnPTC5rQKTB0FQ-RpgAAAMU"]
[Thu Dec 25 21:38:37.315139 2025] [:error] [pid 22045:tid 22126] [client 4.196.91.63:28525] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/icdwb.php"] [unique_id "aU0-XasGGmXjDnvlmHtjlwAAAVg"]
[Thu Dec 25 21:38:38.016629 2025] [:error] [pid 22045:tid 22115] [client 4.196.91.63:31991] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ticket.php"] [unique_id "aU0-XqsGGmXjDnvlmHtjmQAAAU0"]
[Thu Dec 25 21:38:38.973258 2025] [:error] [pid 27869:tid 27879] [client 4.196.91.63:28540] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ticket.php"] [unique_id "aU0-XhNK7_n86kBD7qfLpAAAAIg"]
[Thu Dec 25 21:38:43.316306 2025] [:error] [pid 22043:tid 22065] [client 4.196.91.63:20669] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ticket.php"] [unique_id "aU0-Yz4YVtlb2Iz_QE5H3gAAABE"]
[Thu Dec 25 21:38:43.802242 2025] [:error] [pid 22043:tid 22048] [client 4.196.91.63:30370] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ticket.php"] [unique_id "aU0-Yz4YVtlb2Iz_QE5H4AAAAAA"]
[Thu Dec 25 21:38:47.068789 2025] [:error] [pid 27869:tid 27884] [client 4.196.91.63:26263] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aU0-ZxNK7_n86kBD7qfLuQAAAI0"]
[Thu Dec 25 21:38:48.323363 2025] [:error] [pid 22043:tid 22052] [client 4.196.91.63:25880] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aU0-aD4YVtlb2Iz_QE5H8wAAAAQ"]
[Thu Dec 25 21:38:49.072844 2025] [:error] [pid 22131:tid 22157] [client 4.196.91.63:30376] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aU0-aZvVMtSTB4lX2fYq1wAAAFU"]
[Thu Dec 25 21:38:50.751119 2025] [:error] [pid 27869:tid 27887] [client 4.196.91.63:17202] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aU0-ahNK7_n86kBD7qfLxQAAAJA"]
[Thu Dec 25 21:38:52.596969 2025] [:error] [pid 22045:tid 22102] [client 4.196.91.63:17201] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aU0-bKsGGmXjDnvlmHtjuwAAAUA"]
[Thu Dec 25 21:38:53.531105 2025] [:error] [pid 22131:tid 22150] [client 4.196.91.63:17190] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aU0-bZvVMtSTB4lX2fYq3QAAAE8"]
[Thu Dec 25 21:38:54.826483 2025] [:error] [pid 27869:tid 27882] [client 4.196.91.63:17221] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aU0-bhNK7_n86kBD7qfL0wAAAIs"]
[Thu Dec 25 21:38:56.603816 2025] [:error] [pid 22044:tid 22077] [client 4.196.91.63:33078] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aU0-cHPTC5rQKTB0FQ-RxgAAAMI"]
[Thu Dec 25 21:38:57.926729 2025] [:error] [pid 22131:tid 22153] [client 4.196.91.63:27954] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amphicyon.php"] [unique_id "aU0-cZvVMtSTB4lX2fYq4wAAAFI"]
[Thu Dec 25 21:39:00.923167 2025] [:error] [pid 27869:tid 27890] [client 4.196.91.63:17192] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amphicyon.php"] [unique_id "aU0-dBNK7_n86kBD7qfL3AAAAJM"]
[Thu Dec 25 21:39:05.394828 2025] [:error] [pid 27869:tid 27877] [client 4.196.91.63:17246] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amphicyon.php"] [unique_id "aU0-eRNK7_n86kBD7qfL6wAAAIY"]
[Thu Dec 25 21:39:14.561792 2025] [:error] [pid 22043:tid 22053] [client 4.196.91.63:41061] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aU0-gj4YVtlb2Iz_QE5ILwAAAAU"]
[Thu Dec 25 21:39:17.724954 2025] [:error] [pid 27869:tid 27888] [client 4.196.91.63:32428] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aU0-hRNK7_n86kBD7qfL_AAAAJE"]
[Thu Dec 25 21:39:23.041734 2025] [:error] [pid 27869:tid 27894] [client 4.196.91.63:29152] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aU0-ixNK7_n86kBD7qfMBQAAAJc"]
[Thu Dec 25 21:39:25.155644 2025] [:error] [pid 27869:tid 27883] [client 4.196.91.63:19271] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aU0-jRNK7_n86kBD7qfMCgAAAIw"]
[Thu Dec 25 21:39:27.098458 2025] [:error] [pid 22131:tid 22158] [client 4.196.91.63:8529] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpw.php"] [unique_id "aU0-j5vVMtSTB4lX2fYrHwAAAFY"]
[Thu Dec 25 21:39:28.041817 2025] [:error] [pid 22044:tid 22083] [client 4.196.91.63:27372] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpw.php"] [unique_id "aU0-kHPTC5rQKTB0FQ-SHAAAAMg"]
[Thu Dec 25 21:39:29.346561 2025] [:error] [pid 22044:tid 22088] [client 4.196.91.63:60846] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpw.php"] [unique_id "aU0-kXPTC5rQKTB0FQ-SIgAAAM0"]
[Thu Dec 25 21:39:52.953120 2025] [:error] [pid 22131:tid 22150] [client 4.196.91.63:15480] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lufix.php"] [unique_id "aU0-qJvVMtSTB4lX2fYrYwAAAE8"]
[Thu Dec 25 21:39:58.157257 2025] [:error] [pid 22131:tid 22144] [client 4.196.91.63:16809] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akp.php"] [unique_id "aU0-rpvVMtSTB4lX2fYrawAAAEo"]
[Thu Dec 25 21:39:58.512333 2025] [:error] [pid 22043:tid 22064] [client 4.196.91.63:24431] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akp.php"] [unique_id "aU0-rj4YVtlb2Iz_QE5IegAAABA"]
[Thu Dec 25 21:39:58.907567 2025] [:error] [pid 22044:tid 22090] [client 4.196.91.63:18270] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akp.php"] [unique_id "aU0-rnPTC5rQKTB0FQ-SZAAAAM8"]
[Thu Dec 25 21:39:59.823565 2025] [:error] [pid 22044:tid 22099] [client 4.196.91.63:24412] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akp.php"] [unique_id "aU0-r3PTC5rQKTB0FQ-SZgAAANg"]
[Thu Dec 25 21:40:04.846883 2025] [:error] [pid 22043:tid 22049] [client 4.196.91.63:23411] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwsd.php"] [unique_id "aU0-tD4YVtlb2Iz_QE5IhwAAAAE"]
[Thu Dec 25 21:40:07.486957 2025] [:error] [pid 22044:tid 22079] [client 4.196.91.63:20695] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwsd.php"] [unique_id "aU0-t3PTC5rQKTB0FQ-SgAAAAMQ"]
[Thu Dec 25 21:40:07.666358 2025] [:error] [pid 27869:tid 27879] [client 4.196.91.63:23390] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwsd.php"] [unique_id "aU0-txNK7_n86kBD7qfMdgAAAIg"]
[Thu Dec 25 21:40:07.911500 2025] [:error] [pid 27869:tid 27876] [client 4.196.91.63:16821] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwsd.php"] [unique_id "aU0-txNK7_n86kBD7qfMeAAAAIU"]
[Thu Dec 25 21:40:11.121147 2025] [:error] [pid 22131:tid 22145] [client 4.196.91.63:16827] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tll.php"] [unique_id "aU0-u5vVMtSTB4lX2fYrjwAAAEs"]
[Thu Dec 25 21:40:13.334707 2025] [:error] [pid 22044:tid 22085] [client 4.196.91.63:20684] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tll.php"] [unique_id "aU0-vXPTC5rQKTB0FQ-SkgAAAMo"]
[Thu Dec 25 21:40:23.588143 2025] [:error] [pid 22043:tid 22054] [client 4.196.91.63:30193] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ucp.php"] [unique_id "aU0-xz4YVtlb2Iz_QE5IzwAAAAY"]
[Thu Dec 25 21:40:34.487280 2025] [:error] [pid 22044:tid 22099] [client 4.196.91.63:39727] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ucp.php"] [unique_id "aU0-0nPTC5rQKTB0FQ-S3AAAANg"]
[Thu Dec 25 21:40:35.747173 2025] [:error] [pid 27869:tid 27881] [client 4.196.91.63:8305] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ucp.php"] [unique_id "aU0-0xNK7_n86kBD7qfMxQAAAIo"]
[Thu Dec 25 21:40:37.049458 2025] [:error] [pid 22045:tid 22114] [client 4.196.91.63:18292] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ucp.php"] [unique_id "aU0-1asGGmXjDnvlmHtkgQAAAUw"]
[Thu Dec 25 21:40:38.120023 2025] [:error] [pid 22043:tid 22068] [client 4.196.91.63:30100] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zse.php"] [unique_id "aU0-1j4YVtlb2Iz_QE5I5gAAABQ"]
[Thu Dec 25 21:40:42.718403 2025] [:error] [pid 22044:tid 22093] [client 4.196.91.63:16826] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zse.php"] [unique_id "aU0-2nPTC5rQKTB0FQ-TDgAAANI"]
[Thu Dec 25 21:40:46.764884 2025] [:error] [pid 22045:tid 22108] [client 4.196.91.63:23815] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zse.php"] [unique_id "aU0-3qsGGmXjDnvlmHtkkAAAAUY"]
[Thu Dec 25 21:40:47.994608 2025] [:error] [pid 22045:tid 22119] [client 4.196.91.63:30146] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zse.php"] [unique_id "aU0-36sGGmXjDnvlmHtklgAAAVE"]
[Thu Dec 25 21:40:48.766509 2025] [:error] [pid 22043:tid 22054] [client 4.196.91.63:23810] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aU0-4D4YVtlb2Iz_QE5I-gAAAAY"]
[Thu Dec 25 21:40:52.343662 2025] [:error] [pid 22044:tid 22081] [client 4.196.91.63:23858] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aU0-5HPTC5rQKTB0FQ-TFQAAAMY"]
[Thu Dec 25 21:40:54.215813 2025] [:error] [pid 22045:tid 22112] [client 4.196.91.63:39739] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aU0-5qsGGmXjDnvlmHtkrgAAAUo"]
[Thu Dec 25 21:40:55.583859 2025] [:error] [pid 22045:tid 22114] [client 4.196.91.63:23880] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aU0-56sGGmXjDnvlmHtksgAAAUw"]
[Thu Dec 25 21:40:58.366827 2025] [:error] [pid 27869:tid 27892] [client 4.196.91.63:24394] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aU0-6hNK7_n86kBD7qfNFwAAAJU"]
[Thu Dec 25 21:41:00.267611 2025] [:error] [pid 22131:tid 22141] [client 4.196.91.63:20288] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aU0-7JvVMtSTB4lX2fYr7wAAAEc"]
[Thu Dec 25 21:41:02.458377 2025] [:error] [pid 22044:tid 22092] [client 4.196.91.63:8291] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aU0-7nPTC5rQKTB0FQ-TKQAAANE"]
[Thu Dec 25 21:41:04.258719 2025] [:error] [pid 22045:tid 22107] [client 4.196.91.63:60851] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aU0-8KsGGmXjDnvlmHtkwwAAAUU"]
[Thu Dec 25 21:41:05.358824 2025] [:error] [pid 22131:tid 22140] [client 4.196.91.63:18723] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aU0-8ZvVMtSTB4lX2fYr9wAAAEY"]
[Thu Dec 25 21:41:08.210223 2025] [:error] [pid 27869:tid 27877] [client 4.196.91.63:21515] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aU0-9BNK7_n86kBD7qfNKgAAAIY"]
[Thu Dec 25 21:41:09.451045 2025] [:error] [pid 27869:tid 27874] [client 4.196.91.63:25412] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aU0-9RNK7_n86kBD7qfNMgAAAIM"]
[Thu Dec 25 21:41:10.621707 2025] [:error] [pid 27869:tid 27875] [client 4.196.91.63:60079] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aU0-9hNK7_n86kBD7qfNNwAAAIQ"]
[Thu Dec 25 21:41:12.979154 2025] [:error] [pid 27869:tid 27874] [client 4.196.91.63:31276] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aU0--BNK7_n86kBD7qfNPwAAAIM"]
[Thu Dec 25 21:41:19.078542 2025] [:error] [pid 22131:tid 22158] [client 4.196.91.63:8970] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aU0-_5vVMtSTB4lX2fYsBAAAAFY"]
[Thu Dec 25 21:41:20.449978 2025] [:error] [pid 27869:tid 27876] [client 4.196.91.63:8335] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aU0_ABNK7_n86kBD7qfNRwAAAIU"]
[Thu Dec 25 21:41:21.967223 2025] [:error] [pid 22044:tid 22090] [client 4.196.91.63:17691] [client 4.196.91.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aU0_AXPTC5rQKTB0FQ-TgQAAAM8"]
[Thu Dec 25 21:49:23.551043 2025] [:error] [pid 22044:tid 22077] [client 43.155.129.131:55008] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aU1A43PTC5rQKTB0FQ-WdgAAAMI"]
[Fri Dec 26 00:35:53.773125 2025] [:error] [pid 24863:tid 24896] [client 43.153.96.79:47914] [client 43.153.96.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aU1n6R8SaH2KMpp43vfX4gAAAMM"]
[Fri Dec 26 01:11:53.722917 2025] [:error] [pid 24946:tid 24949] [client 174.138.24.56:61017] [client 174.138.24.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aU1wWVfyLYxv3Jn9S71AAgAAAEE"]
[Fri Dec 26 01:11:54.063809 2025] [:error] [pid 24863:tid 24915] [client 174.138.24.56:61066] [client 174.138.24.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "aU1wWh8SaH2KMpp43vfoAAAAANY"]
[Fri Dec 26 01:11:54.404232 2025] [:error] [pid 24863:tid 24895] [client 174.138.24.56:61114] [client 174.138.24.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feed/"] [unique_id "aU1wWh8SaH2KMpp43vfoAQAAAMI"]
[Fri Dec 26 01:24:09.925305 2025] [proxy_fcgi:error] [pid 24863:tid 24902] [client 68.218.20.72:9745] AH01071: Got error 'Primary script unknown', referer: https://www.google.fr/
[Fri Dec 26 01:24:09.974394 2025] [:error] [pid 24863:tid 24898] [client 68.218.20.72:9745] [client 68.218.20.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.218.20.72, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aU1zOR8SaH2KMpp43vfuGAAAAMU"], referer: https://www.bing.com/
[Fri Dec 26 01:24:09.979802 2025] [proxy_fcgi:error] [pid 24863:tid 24898] [client 68.218.20.72:9745] AH01071: Got error 'Primary script unknown', referer: https://www.bing.com/
[Fri Dec 26 01:24:10.420379 2025] [:error] [pid 24863:tid 24901] [client 68.218.20.72:9745] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aU1zOh8SaH2KMpp43vfuHQAAAMg"], referer: https://www.bing.com/
[Fri Dec 26 01:24:10.465667 2025] [:error] [pid 24864:tid 24928] [client 68.218.20.72:20798] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aU1zOsu59XOK5DpQQdCZiQAAAUg"], referer: https://www.google.de/
[Fri Dec 26 01:24:10.549922 2025] [:error] [pid 24862:tid 24866] [client 68.218.20.72:20748] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aU1zOrt-eeEEuo-2JKgx0gAAAAA"], referer: https://www.google.co.uk/
[Fri Dec 26 01:24:10.762503 2025] [:error] [pid 24864:tid 24924] [client 68.218.20.72:20752] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aU1zOsu59XOK5DpQQdCZiwAAAUQ"], referer: https://www.google.fr/
[Fri Dec 26 01:24:10.852314 2025] [:error] [pid 24862:tid 24874] [client 68.218.20.72:41536] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aU1zOrt-eeEEuo-2JKgx1AAAAAg"], referer: https://www.bing.com/
[Fri Dec 26 01:24:10.931339 2025] [:error] [pid 24864:tid 24939] [client 68.218.20.72:35900] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aU1zOsu59XOK5DpQQdCZjAAAAVM"], referer: https://www.google.com/
[Fri Dec 26 01:24:10.969356 2025] [:error] [pid 24862:tid 24886] [client 68.218.20.72:35890] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aU1zOrt-eeEEuo-2JKgx1gAAABQ"], referer: https://www.google.com/
[Fri Dec 26 01:24:11.037114 2025] [:error] [pid 24864:tid 24926] [client 68.218.20.72:9398] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aU1zO8u59XOK5DpQQdCZjQAAAUY"], referer: https://duckduckgo.com/
[Fri Dec 26 01:24:11.111252 2025] [:error] [pid 24862:tid 24879] [client 68.218.20.72:53258] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aU1zO7t-eeEEuo-2JKgx1wAAAA0"], referer: https://www.google.fr/
[Fri Dec 26 01:24:14.573089 2025] [autoindex:error] [pid 24946:tid 24966] [client 68.218.20.72:61985] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Fri Dec 26 01:24:21.031713 2025] [:error] [pid 24864:tid 24932] [client 68.218.20.72:43922] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aU1zRcu59XOK5DpQQdCZ7gAAAUw"], referer: https://www.google.de/
[Fri Dec 26 01:24:21.117244 2025] [:error] [pid 24946:tid 24949] [client 68.218.20.72:41549] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aU1zRVfyLYxv3Jn9S71IqgAAAEE"], referer: https://www.google.de/
[Fri Dec 26 01:24:21.235779 2025] [:error] [pid 24946:tid 24968] [client 68.218.20.72:41575] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aU1zRVfyLYxv3Jn9S71IqwAAAFQ"], referer: https://www.yahoo.com/
[Fri Dec 26 01:24:21.339925 2025] [:error] [pid 24864:tid 24938] [client 68.218.20.72:61975] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aU1zRcu59XOK5DpQQdCZ8AAAAVI"], referer: https://www.google.com/
[Fri Dec 26 01:24:21.433350 2025] [:error] [pid 24864:tid 24930] [client 68.218.20.72:53289] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aU1zRcu59XOK5DpQQdCZ8gAAAUo"], referer: https://www.bing.com/
[Fri Dec 26 01:24:21.524198 2025] [:error] [pid 24864:tid 24928] [client 68.218.20.72:43918] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aU1zRcu59XOK5DpQQdCZ8wAAAUg"], referer: https://www.google.fr/
[Fri Dec 26 01:24:21.642994 2025] [:error] [pid 24946:tid 24957] [client 68.218.20.72:53279] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aU1zRVfyLYxv3Jn9S71IrQAAAEk"], referer: https://www.google.de/
[Fri Dec 26 01:24:21.727953 2025] [:error] [pid 24946:tid 24951] [client 68.218.20.72:53298] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aU1zRVfyLYxv3Jn9S71IrgAAAEM"], referer: https://www.google.fr/
[Fri Dec 26 01:24:21.816925 2025] [:error] [pid 24864:tid 24924] [client 68.218.20.72:9396] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aU1zRcu59XOK5DpQQdCZ9gAAAUQ"], referer: https://www.google.de/
[Fri Dec 26 01:24:21.912433 2025] [:error] [pid 24946:tid 24960] [client 68.218.20.72:9492] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aU1zRVfyLYxv3Jn9S71IrwAAAEw"], referer: https://www.google.fr/
[Fri Dec 26 01:24:22.016540 2025] [:error] [pid 24946:tid 24970] [client 68.218.20.72:20758] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aU1zRlfyLYxv3Jn9S71IsAAAAFY"], referer: https://www.google.de/
[Fri Dec 26 01:24:23.491049 2025] [:error] [pid 24946:tid 24965] [client 68.218.20.72:41564] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aU1zR1fyLYxv3Jn9S71IzAAAAFE"], referer: https://www.google.de/
[Fri Dec 26 01:24:23.610173 2025] [:error] [pid 24864:tid 24925] [client 68.218.20.72:61967] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aU1zR8u59XOK5DpQQdCaBgAAAUU"], referer: https://www.google.de/
[Fri Dec 26 01:24:23.707944 2025] [:error] [pid 24864:tid 24936] [client 68.218.20.72:41551] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aU1zR8u59XOK5DpQQdCaBwAAAVA"], referer: https://www.google.de/
[Fri Dec 26 01:24:23.797683 2025] [:error] [pid 24864:tid 24923] [client 68.218.20.72:35870] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aU1zR8u59XOK5DpQQdCaCQAAAUM"], referer: https://www.google.de/
[Fri Dec 26 01:24:23.886929 2025] [:error] [pid 24864:tid 24934] [client 68.218.20.72:20778] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aU1zR8u59XOK5DpQQdCaCgAAAU4"], referer: https://duckduckgo.com/
[Fri Dec 26 01:24:24.169416 2025] [:error] [pid 24863:tid 24912] [client 68.218.20.72:9755] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aU1zSB8SaH2KMpp43vfuOwAAANM"], referer: https://www.yahoo.com/
[Fri Dec 26 01:24:24.349160 2025] [:error] [pid 24946:tid 24957] [client 68.218.20.72:53306] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aU1zSFfyLYxv3Jn9S71I0gAAAEk"], referer: https://duckduckgo.com/
[Fri Dec 26 01:24:24.424290 2025] [:error] [pid 24862:tid 24874] [client 68.218.20.72:43928] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aU1zSLt-eeEEuo-2JKgx3wAAAAg"], referer: https://www.yahoo.com/
[Fri Dec 26 01:24:24.494310 2025] [:error] [pid 24862:tid 24876] [client 68.218.20.72:9914] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aU1zSLt-eeEEuo-2JKgx4AAAAAo"], referer: https://www.google.com/
[Fri Dec 26 01:24:24.579845 2025] [:error] [pid 24864:tid 24944] [client 68.218.20.72:56544] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aU1zSMu59XOK5DpQQdCaDwAAAVg"], referer: https://www.bing.com/
[Fri Dec 26 01:24:24.786471 2025] [:error] [pid 24946:tid 24960] [client 68.218.20.72:9529] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aU1zSFfyLYxv3Jn9S71I1QAAAEw"], referer: https://www.google.com/
[Fri Dec 26 01:24:24.874008 2025] [:error] [pid 24863:tid 24916] [client 68.218.20.72:35875] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aU1zSB8SaH2KMpp43vfuPQAAANc"], referer: https://www.bing.com/
[Fri Dec 26 01:24:25.258930 2025] [:error] [pid 24863:tid 24908] [client 68.218.20.72:41570] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aU1zSR8SaH2KMpp43vfuQAAAAM8"], referer: https://www.google.de/
[Fri Dec 26 01:24:25.446291 2025] [:error] [pid 24862:tid 24881] [client 68.218.20.72:41591] [client 68.218.20.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aU1zSbt-eeEEuo-2JKgx4gAAAA8"], referer: https://duckduckgo.com/
[Fri Dec 26 07:05:35.267517 2025] [:error] [pid 28269:tid 28322] [client 216.81.248.5:56570] [client 216.81.248.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aU3DP53ZK8bJ-c9-kjNW-QAAAFQ"]
[Fri Dec 26 10:54:48.820504 2025] [:error] [pid 28269:tid 28324] [client 182.44.2.148:55219] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aU34-J3ZK8bJ-c9-kjOb1QAAAFY"]
[Fri Dec 26 14:37:01.627697 2025] [:error] [pid 28268:tid 28297] [client 203.159.81.5:39383] [client 203.159.81.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aU4tDXc_KuO_55-uPTRT0AAAABY"]
[Fri Dec 26 14:37:03.953733 2025] [:error] [pid 28269:tid 28319] [client 203.159.81.16:53037] [client 203.159.81.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aU4tD53ZK8bJ-c9-kjPomgAAAFE"]
[Fri Dec 26 14:37:09.767923 2025] [:error] [pid 28270:tid 28353] [client 203.159.81.37:53093] [client 203.159.81.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aU4tFV9Ac79_ckdPN5L4ZAAAAJg"]
[Fri Dec 26 14:37:12.183820 2025] [:error] [pid 28355:tid 28364] [client 203.159.81.12:39461] [client 203.159.81.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aU4tGLsFqKXf7ADZcTa51AAAAMc"]
[Fri Dec 26 14:37:20.837680 2025] [:error] [pid 28269:tid 28312] [client 203.159.81.4:28495] [client 203.159.81.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aU4tIJ3ZK8bJ-c9-kjPpcwAAAEo"]
[Fri Dec 26 20:01:24.133632 2025] [:error] [pid 28269:tid 28305] [client 106.219.178.193:13746] [client 106.219.178.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.178.193, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aU55FJ3ZK8bJ-c9-kjNtFAAAAEM"]
[Fri Dec 26 22:24:14.751703 2025] [:error] [pid 28269:tid 28309] [client 170.106.192.208:40814] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aU6ajp3ZK8bJ-c9-kjOfVAAAAEc"]
[Sat Dec 27 05:41:55.490005 2025] [:error] [pid 32193:tid 32254] [client 182.44.8.254:57467] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aU8BIxgw0eCOc2qYqaIZkAAAAIQ"]
[Sat Dec 27 17:51:54.816995 2025] [:error] [pid 15939:tid 15944] [client 49.7.227.204:33514] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aU-sOuZ7qdnFxikanMLLxAAAAQM"]
[Sat Dec 27 21:11:05.962305 2025] [:error] [pid 15939:tid 15941] [client 185.213.25.145:53838] [client 185.213.25.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aU_a6eZ7qdnFxikanMLriQAAAQA"]
[Sat Dec 27 21:20:58.041982 2025] [:error] [pid 31933:tid 31939] [client 96.242.29.137:59108] [client 96.242.29.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 96.242.29.137, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aU_dOsGr1WIJr39uqar0vgAAAcQ"]
[Sun Dec 28 04:08:53.995702 2025] [:error] [pid 42378:tid 42381] [client 45.159.246.110:23027] [client 45.159.246.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aVA81TgtcN-KHAjWrX-SYwAAAME"]
[Sun Dec 28 04:08:58.223988 2025] [:error] [pid 43789:tid 43804] [client 45.159.246.110:49549] [client 45.159.246.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env"] [unique_id "aVA82ga-tUppni4CcCatGQAAAQ0"]
[Sun Dec 28 06:16:46.940032 2025] [:error] [pid 29388:tid 29398] [client 106.54.62.156:40938] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVBaztoLv2L2zI_SpdVh3wAAAUI"]
[Sun Dec 28 08:51:58.963157 2025] [:error] [pid 29436:tid 29439] [client 170.106.35.153:36074] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVB_LrchzOOtNL9VPNJe8AAAAYA"]
[Sun Dec 28 15:58:44.960859 2025] [autoindex:error] [pid 42292:tid 42313] [client 159.89.181.56:60375] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Dec 28 16:32:21.871808 2025] [:error] [pid 29437:tid 29470] [client 138.0.75.70:38073] [client 138.0.75.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVDrFRhDotAbVk6pZLeOlQAAAcQ"]
[Sun Dec 28 16:32:22.314071 2025] [:error] [pid 29436:tid 29456] [client 180.252.84.11:36140] [client 180.252.84.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVDrFrchzOOtNL9VPNKlWgAAAZE"]
[Sun Dec 28 22:06:30.552894 2025] [:error] [pid 43789:tid 43804] [client 4.190.188.171:65168] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVE5Zga-tUppni4CcCZTpAAAAQ0"]
[Sun Dec 28 22:06:33.134751 2025] [:error] [pid 29388:tid 29404] [client 4.190.188.171:65013] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVE5adoLv2L2zI_SpdUFggAAAUg"]
[Sun Dec 28 22:06:37.238098 2025] [:error] [pid 42293:tid 42325] [client 4.190.188.171:64999] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVE5bcvc9B-5cwN385IK-QAAAEI"]
[Sun Dec 28 22:06:39.152116 2025] [:error] [pid 42292:tid 42298] [client 4.190.188.171:65020] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aVE5b5yOrM_vaFx1osZntQAAAAI"]
[Sun Dec 28 22:06:40.875980 2025] [:error] [pid 29388:tid 29420] [client 4.190.188.171:65019] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aVE5cNoLv2L2zI_SpdUFiwAAAVg"]
[Sun Dec 28 22:06:41.929033 2025] [:error] [pid 29388:tid 29417] [client 4.190.188.171:64965] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aVE5cdoLv2L2zI_SpdUFjAAAAVU"]
[Sun Dec 28 22:06:44.421428 2025] [:error] [pid 42378:tid 42386] [client 4.190.188.171:64976] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aVE5dDgtcN-KHAjWrX842QAAAMY"]
[Sun Dec 28 22:06:47.143967 2025] [:error] [pid 42378:tid 42387] [client 4.190.188.171:64988] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aVE5dzgtcN-KHAjWrX843AAAAMc"]
[Sun Dec 28 22:06:48.569010 2025] [:error] [pid 43789:tid 43792] [client 4.190.188.171:65190] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aVE5eAa-tUppni4CcCZTrQAAAQE"]
[Sun Dec 28 22:06:51.335230 2025] [:error] [pid 29436:tid 29443] [client 4.190.188.171:64270] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aVE5e7chzOOtNL9VPNIehAAAAYQ"]
[Sun Dec 28 22:06:53.394582 2025] [:error] [pid 42293:tid 42337] [client 4.190.188.171:65008] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aVE5fcvc9B-5cwN385ILEgAAAE4"]
[Sun Dec 28 22:06:54.250735 2025] [:error] [pid 42293:tid 42327] [client 4.190.188.171:65162] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aVE5fsvc9B-5cwN385ILFAAAAEQ"]
[Sun Dec 28 22:06:55.367801 2025] [:error] [pid 29388:tid 29419] [client 4.190.188.171:64264] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aVE5f9oLv2L2zI_SpdUFlAAAAVc"]
[Sun Dec 28 22:06:57.337528 2025] [:error] [pid 42378:tid 42385] [client 4.190.188.171:65018] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aVE5gTgtcN-KHAjWrX844AAAAMU"]
[Sun Dec 28 22:06:58.838475 2025] [:error] [pid 29388:tid 29407] [client 4.190.188.171:65206] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aVE5gtoLv2L2zI_SpdUFlgAAAUs"]
[Sun Dec 28 22:07:08.823409 2025] [:error] [pid 42293:tid 42327] [client 4.190.188.171:65191] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aVE5jMvc9B-5cwN385ILIQAAAEQ"]
[Sun Dec 28 22:07:10.461530 2025] [:error] [pid 29436:tid 29458] [client 4.190.188.171:65155] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aVE5jrchzOOtNL9VPNIejgAAAZM"]
[Sun Dec 28 22:07:19.626132 2025] [:error] [pid 29388:tid 29408] [client 4.190.188.171:64282] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/xmrlpc.php"] [unique_id "aVE5l9oLv2L2zI_SpdUFpgAAAUw"]
[Sun Dec 28 22:07:21.279076 2025] [:error] [pid 42294:tid 42367] [client 4.190.188.171:64283] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/xmrlpc.php"] [unique_id "aVE5mdTE5kYcYCOzl9HaFgAAAJE"]
[Sun Dec 28 22:07:22.467793 2025] [:error] [pid 42292:tid 42296] [client 4.190.188.171:64301] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/xmrlpc.php"] [unique_id "aVE5mpyOrM_vaFx1osZnygAAAAA"]
[Sun Dec 28 22:07:23.593833 2025] [:error] [pid 29388:tid 29415] [client 4.190.188.171:65023] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/xmrlpc.php"] [unique_id "aVE5m9oLv2L2zI_SpdUFqwAAAVM"]
[Sun Dec 28 22:07:24.376658 2025] [:error] [pid 29388:tid 29396] [client 4.190.188.171:65208] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aVE5nNoLv2L2zI_SpdUFrAAAAUA"]
[Sun Dec 28 22:07:26.820951 2025] [:error] [pid 29388:tid 29399] [client 4.190.188.171:65199] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aVE5ntoLv2L2zI_SpdUFsAAAAUM"]
[Sun Dec 28 22:07:27.651346 2025] [:error] [pid 42378:tid 42402] [client 4.190.188.171:65170] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aVE5nzgtcN-KHAjWrX846gAAANY"]
[Sun Dec 28 22:07:29.267273 2025] [:error] [pid 42378:tid 42403] [client 4.190.188.171:64987] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aVE5oTgtcN-KHAjWrX847gAAANc"]
[Sun Dec 28 22:07:30.882412 2025] [:error] [pid 43789:tid 43793] [client 4.190.188.171:64277] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aVE5oga-tUppni4CcCZTugAAAQI"]
[Sun Dec 28 22:07:36.799191 2025] [:error] [pid 29437:tid 29483] [client 4.190.188.171:64308] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aVE5qBhDotAbVk6pZLfmYAAAAdE"]
[Sun Dec 28 22:07:41.728150 2025] [:error] [pid 29437:tid 29478] [client 4.190.188.171:64309] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aVE5rRhDotAbVk6pZLfmZwAAAcw"]
[Sun Dec 28 22:07:42.321710 2025] [:error] [pid 42292:tid 42312] [client 4.190.188.171:64216] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aVE5rpyOrM_vaFx1osZn1AAAABA"]
[Sun Dec 28 22:07:43.802941 2025] [:error] [pid 42293:tid 42333] [client 4.190.188.171:65184] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aVE5r8vc9B-5cwN385ILQwAAAEo"]
[Sun Dec 28 22:07:45.525672 2025] [:error] [pid 29436:tid 29439] [client 4.190.188.171:64303] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aVE5sbchzOOtNL9VPNIepQAAAYA"]
[Sun Dec 28 22:07:46.615787 2025] [:error] [pid 42378:tid 42392] [client 4.190.188.171:65178] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aVE5sjgtcN-KHAjWrX84_QAAAMw"]
[Sun Dec 28 22:07:49.051127 2025] [:error] [pid 42378:tid 42383] [client 4.190.188.171:64315] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aVE5tTgtcN-KHAjWrX84_wAAAMM"]
[Sun Dec 28 22:07:52.069324 2025] [:error] [pid 29388:tid 29418] [client 4.190.188.171:64997] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aVE5uNoLv2L2zI_SpdUFxQAAAVY"]
[Sun Dec 28 22:07:52.640384 2025] [:error] [pid 29388:tid 29399] [client 4.190.188.171:64265] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aVE5uNoLv2L2zI_SpdUFxgAAAUM"]
[Sun Dec 28 22:07:53.592680 2025] [:error] [pid 29436:tid 29461] [client 4.190.188.171:64975] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aVE5ubchzOOtNL9VPNIeqgAAAZY"]
[Sun Dec 28 22:07:55.258615 2025] [:error] [pid 29388:tid 29413] [client 4.190.188.171:65005] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aVE5u9oLv2L2zI_SpdUFywAAAVE"]
[Sun Dec 28 22:07:56.010273 2025] [:error] [pid 42293:tid 42333] [client 4.190.188.171:64201] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aVE5vMvc9B-5cwN385ILTwAAAEo"]
[Sun Dec 28 22:07:59.025950 2025] [:error] [pid 29388:tid 29404] [client 4.190.188.171:64989] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aVE5v9oLv2L2zI_SpdUF0QAAAUg"]
[Sun Dec 28 22:07:59.967542 2025] [:error] [pid 43789:tid 43800] [client 4.190.188.171:64274] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVE5vwa-tUppni4CcCZTzQAAAQk"]
[Sun Dec 28 22:08:01.005594 2025] [:error] [pid 43789:tid 43812] [client 4.190.188.171:49337] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVE5wQa-tUppni4CcCZTzwAAARU"]
[Sun Dec 28 22:08:02.239008 2025] [:error] [pid 43789:tid 43798] [client 4.190.188.171:64289] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVE5wga-tUppni4CcCZT0QAAAQc"]
[Sun Dec 28 22:08:05.192019 2025] [:error] [pid 42293:tid 42324] [client 4.190.188.171:64259] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aVE5xcvc9B-5cwN385ILUgAAAEE"]
[Sun Dec 28 22:08:07.871472 2025] [:error] [pid 29437:tid 29476] [client 4.190.188.171:65007] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aVE5xxhDotAbVk6pZLfmdQAAAco"]
[Sun Dec 28 22:08:11.459116 2025] [:error] [pid 29436:tid 29439] [client 4.190.188.171:64978] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aVE5y7chzOOtNL9VPNIetAAAAYA"]
[Sun Dec 28 22:08:12.432810 2025] [:error] [pid 29437:tid 29484] [client 4.190.188.171:64276] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aVE5zBhDotAbVk6pZLfmgQAAAdI"]
[Sun Dec 28 22:08:13.814022 2025] [:error] [pid 29436:tid 29441] [client 4.190.188.171:65000] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aVE5zbchzOOtNL9VPNIetQAAAYI"]
[Sun Dec 28 22:08:15.294316 2025] [:error] [pid 29388:tid 29396] [client 4.190.188.171:64237] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVE5z9oLv2L2zI_SpdUF3QAAAUA"]
[Sun Dec 28 22:08:22.711960 2025] [:error] [pid 42293:tid 42329] [client 4.190.188.171:64312] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVE51svc9B-5cwN385ILXAAAAEY"]
[Sun Dec 28 22:08:26.797591 2025] [:error] [pid 29388:tid 29401] [client 4.190.188.171:64961] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVE52toLv2L2zI_SpdUF9QAAAUU"]
[Sun Dec 28 22:08:27.850812 2025] [:error] [pid 42378:tid 42389] [client 4.190.188.171:65015] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVE52zgtcN-KHAjWrX85CAAAAMk"]
[Sun Dec 28 22:08:36.757001 2025] [:error] [pid 42294:tid 42368] [client 4.190.188.171:64314] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aVE55NTE5kYcYCOzl9HaKAAAAJI"]
[Sun Dec 28 22:09:02.027898 2025] [:error] [pid 29437:tid 29486] [client 4.190.188.171:65202] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aVE5_hhDotAbVk6pZLfmrgAAAdQ"]
[Sun Dec 28 22:09:05.500218 2025] [:error] [pid 29388:tid 29408] [client 4.190.188.171:65192] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVE6AdoLv2L2zI_SpdUGGQAAAUw"]
[Sun Dec 28 22:09:06.298145 2025] [:error] [pid 42293:tid 42345] [client 4.190.188.171:64286] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVE6Asvc9B-5cwN385ILcQAAAFY"]
[Sun Dec 28 22:09:07.844860 2025] [:error] [pid 43789:tid 43811] [client 4.190.188.171:64306] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVE6Awa-tUppni4CcCZT5wAAARQ"]
[Sun Dec 28 22:09:12.330000 2025] [:error] [pid 42293:tid 42339] [client 4.190.188.171:65193] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVE6CMvc9B-5cwN385ILdQAAAFA"]
[Sun Dec 28 22:09:14.421839 2025] [:error] [pid 43789:tid 43804] [client 4.190.188.171:64311] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aVE6Cga-tUppni4CcCZT7wAAAQ0"]
[Sun Dec 28 22:09:18.373654 2025] [:error] [pid 42292:tid 42305] [client 4.190.188.171:64293] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aVE6DpyOrM_vaFx1osZn_AAAAAk"]
[Sun Dec 28 22:09:21.870964 2025] [:error] [pid 42294:tid 42358] [client 4.190.188.171:65186] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aVE6EdTE5kYcYCOzl9HaQwAAAIg"]
[Sun Dec 28 22:09:23.275881 2025] [:error] [pid 42293:tid 42332] [client 4.190.188.171:65169] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aVE6E8vc9B-5cwN385ILewAAAEk"]
[Sun Dec 28 22:09:26.249229 2025] [:error] [pid 29437:tid 29477] [client 4.190.188.171:49319] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sidwso.php"] [unique_id "aVE6FhhDotAbVk6pZLfmtQAAAcs"]
[Sun Dec 28 22:09:29.013532 2025] [:error] [pid 42294:tid 42368] [client 4.190.188.171:65172] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sidwso.php"] [unique_id "aVE6GdTE5kYcYCOzl9HaRwAAAJI"]
[Sun Dec 28 22:09:30.001945 2025] [:error] [pid 42292:tid 42313] [client 4.190.188.171:64291] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sidwso.php"] [unique_id "aVE6GpyOrM_vaFx1osZoCQAAABE"]
[Sun Dec 28 22:09:30.686881 2025] [:error] [pid 29388:tid 29402] [client 4.190.188.171:64284] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sidwso.php"] [unique_id "aVE6GtoLv2L2zI_SpdUGKwAAAUY"]
[Sun Dec 28 22:09:33.372276 2025] [:error] [pid 42378:tid 42388] [client 4.190.188.171:65189] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aVE6HTgtcN-KHAjWrX85KgAAAMg"]
[Sun Dec 28 22:09:37.313158 2025] [:error] [pid 42294:tid 42371] [client 4.190.188.171:64993] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aVE6IdTE5kYcYCOzl9HaSgAAAJU"]
[Sun Dec 28 22:09:39.547206 2025] [:error] [pid 43789:tid 43802] [client 4.190.188.171:65182] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aVE6Iwa-tUppni4CcCZUAQAAAQs"]
[Sun Dec 28 22:09:43.601693 2025] [:error] [pid 29437:tid 29490] [client 4.190.188.171:64217] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aVE6JxhDotAbVk6pZLfmwAAAAdg"]
[Sun Dec 28 22:09:44.238678 2025] [:error] [pid 29437:tid 29474] [client 4.190.188.171:64198] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aVE6KBhDotAbVk6pZLfmwgAAAcg"]
[Sun Dec 28 22:09:47.738355 2025] [:error] [pid 29436:tid 29449] [client 4.190.188.171:64983] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aVE6K7chzOOtNL9VPNIe7AAAAYo"]
[Sun Dec 28 22:09:49.443460 2025] [:error] [pid 42378:tid 42392] [client 4.190.188.171:64963] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aVE6LTgtcN-KHAjWrX85MAAAAMw"]
[Sun Dec 28 22:09:55.296518 2025] [:error] [pid 29437:tid 29473] [client 4.190.188.171:64297] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aVE6MxhDotAbVk6pZLfm0AAAAcc"]
[Sun Dec 28 22:09:56.887860 2025] [:error] [pid 43789:tid 43798] [client 4.190.188.171:65166] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/index.php"] [unique_id "aVE6NAa-tUppni4CcCZUBwAAAQc"]
[Sun Dec 28 22:09:58.153303 2025] [:error] [pid 29437:tid 29471] [client 4.190.188.171:64203] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/index.php"] [unique_id "aVE6NhhDotAbVk6pZLfm1QAAAcU"]
[Sun Dec 28 22:10:03.915934 2025] [:error] [pid 29388:tid 29414] [client 4.190.188.171:64313] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aVE6O9oLv2L2zI_SpdUGXgAAAVI"]
[Sun Dec 28 22:10:08.351706 2025] [:error] [pid 42293:tid 42327] [client 4.190.188.171:49088] [client 4.190.188.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.188.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aVE6QMvc9B-5cwN385ILoQAAAEQ"]
[Sun Dec 28 22:10:08.501186 2025] [:error] [pid 29388:tid 29400] [client 4.190.188.171:64972] [client 4.190.188.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.188.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aVE6QNoLv2L2zI_SpdUGbQAAAUQ"]
[Sun Dec 28 22:10:08.655077 2025] [:error] [pid 42293:tid 42347] [client 4.190.188.171:49088] [client 4.190.188.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.188.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aVE6QMvc9B-5cwN385ILogAAAFg"]
[Sun Dec 28 22:10:08.905390 2025] [:error] [pid 29388:tid 29397] [client 4.190.188.171:64972] [client 4.190.188.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.188.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aVE6QNoLv2L2zI_SpdUGbgAAAUE"]
[Sun Dec 28 22:10:09.079178 2025] [:error] [pid 42293:tid 42342] [client 4.190.188.171:49088] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVE6Qcvc9B-5cwN385ILpQAAAFM"]
[Sun Dec 28 22:10:09.532287 2025] [:error] [pid 43789:tid 43793] [client 4.190.188.171:49135] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVE6QQa-tUppni4CcCZUCQAAAQI"]
[Sun Dec 28 22:10:12.258488 2025] [:error] [pid 29388:tid 29418] [client 4.190.188.171:65173] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVE6RNoLv2L2zI_SpdUGdAAAAVY"]
[Sun Dec 28 22:10:14.183809 2025] [:error] [pid 29436:tid 29460] [client 4.190.188.171:65215] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVE6RrchzOOtNL9VPNIfCQAAAZU"]
[Sun Dec 28 22:10:15.722787 2025] [:error] [pid 29388:tid 29407] [client 4.190.188.171:49306] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aVE6R9oLv2L2zI_SpdUGeQAAAUs"]
[Sun Dec 28 22:10:35.938343 2025] [:error] [pid 43789:tid 43796] [client 4.190.188.171:49132] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVE6Wwa-tUppni4CcCZUHQAAAQU"]
[Sun Dec 28 22:10:40.024241 2025] [:error] [pid 29388:tid 29400] [client 4.190.188.171:65171] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVE6YNoLv2L2zI_SpdUGiAAAAUQ"]
[Sun Dec 28 22:10:45.657184 2025] [:error] [pid 29437:tid 29475] [client 4.190.188.171:64199] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-file.php"] [unique_id "aVE6ZRhDotAbVk6pZLfm7wAAAck"]
[Sun Dec 28 22:10:50.384666 2025] [:error] [pid 42293:tid 42334] [client 4.190.188.171:64960] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-file.php"] [unique_id "aVE6asvc9B-5cwN385ILvAAAAEs"]
[Sun Dec 28 22:10:53.779117 2025] [:error] [pid 29388:tid 29418] [client 4.190.188.171:64302] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-file.php"] [unique_id "aVE6bdoLv2L2zI_SpdUGjgAAAVY"]
[Sun Dec 28 22:10:56.470749 2025] [:error] [pid 29437:tid 29490] [client 4.190.188.171:59343] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-file.php"] [unique_id "aVE6cBhDotAbVk6pZLfm_QAAAdg"]
[Sun Dec 28 22:11:03.085279 2025] [:error] [pid 29388:tid 29420] [client 4.190.188.171:65174] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aVE6d9oLv2L2zI_SpdUGmQAAAVg"]
[Sun Dec 28 22:11:05.764594 2025] [:error] [pid 43789:tid 43804] [client 4.190.188.171:64988] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aVE6eQa-tUppni4CcCZUMgAAAQ0"]
[Sun Dec 28 22:11:06.734143 2025] [:error] [pid 42293:tid 42326] [client 4.190.188.171:49097] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aVE6esvc9B-5cwN385ILxAAAAEM"]
[Sun Dec 28 22:11:15.397780 2025] [:error] [pid 29437:tid 29487] [client 4.190.188.171:64200] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aVE6gxhDotAbVk6pZLfnDgAAAdU"]
[Sun Dec 28 22:11:17.734484 2025] [:error] [pid 43789:tid 43794] [client 4.190.188.171:64298] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aVE6hQa-tUppni4CcCZUQwAAAQM"]
[Sun Dec 28 22:11:21.296614 2025] [:error] [pid 42378:tid 42385] [client 4.190.188.171:65180] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/dropdown.php"] [unique_id "aVE6iTgtcN-KHAjWrX85YgAAAMU"]
[Sun Dec 28 22:11:22.341752 2025] [:error] [pid 29437:tid 29478] [client 4.190.188.171:64256] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/dropdown.php"] [unique_id "aVE6ihhDotAbVk6pZLfnEgAAAcw"]
[Sun Dec 28 22:11:23.943638 2025] [:error] [pid 29436:tid 29450] [client 4.190.188.171:49121] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/dropdown.php"] [unique_id "aVE6i7chzOOtNL9VPNIfQQAAAYs"]
[Sun Dec 28 22:11:25.875455 2025] [:error] [pid 29436:tid 29453] [client 4.190.188.171:64234] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/dropdown.php"] [unique_id "aVE6jbchzOOtNL9VPNIfQgAAAY4"]
[Sun Dec 28 22:11:28.708772 2025] [:error] [pid 29388:tid 29415] [client 4.190.188.171:65203] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signup.php"] [unique_id "aVE6kNoLv2L2zI_SpdUGvQAAAVM"]
[Sun Dec 28 22:11:39.362210 2025] [:error] [pid 42293:tid 42329] [client 4.190.188.171:65001] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signup.php"] [unique_id "aVE6m8vc9B-5cwN385IL2wAAAEY"]
[Sun Dec 28 22:11:40.845113 2025] [:error] [pid 29436:tid 29439] [client 4.190.188.171:64264] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signup.php"] [unique_id "aVE6nLchzOOtNL9VPNIfXwAAAYA"]
[Sun Dec 28 22:11:43.050511 2025] [:error] [pid 29437:tid 29466] [client 4.190.188.171:64991] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVE6nxhDotAbVk6pZLfnGgAAAcA"]
[Sun Dec 28 22:11:47.443640 2025] [:error] [pid 29436:tid 29446] [client 4.190.188.171:49099] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVE6o7chzOOtNL9VPNIfZwAAAYc"]
[Sun Dec 28 22:11:50.265622 2025] [:error] [pid 29437:tid 29488] [client 4.190.188.171:64261] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVE6phhDotAbVk6pZLfnHwAAAdY"]
[Sun Dec 28 22:11:51.380733 2025] [:error] [pid 42294:tid 42367] [client 4.190.188.171:49125] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVE6p9TE5kYcYCOzl9HahQAAAJE"]
[Sun Dec 28 22:11:56.355294 2025] [:error] [pid 29436:tid 29462] [client 4.190.188.171:64966] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-market/inc/class-envato-market-github.php"] [unique_id "aVE6rLchzOOtNL9VPNIfdwAAAZc"]
[Sun Dec 28 22:11:57.230187 2025] [:error] [pid 42293:tid 42337] [client 4.190.188.171:64980] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-market/inc/class-envato-market-github.php"] [unique_id "aVE6rcvc9B-5cwN385IL4AAAAE4"]
[Sun Dec 28 22:12:04.544648 2025] [:error] [pid 29388:tid 29403] [client 4.190.188.171:64299] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-market/inc/class-envato-market-github.php"] [unique_id "aVE6tNoLv2L2zI_SpdUHCgAAAUc"]
[Sun Dec 28 22:12:05.669040 2025] [:error] [pid 29388:tid 29411] [client 4.190.188.171:64305] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-market/inc/class-envato-market-github.php"] [unique_id "aVE6tdoLv2L2zI_SpdUHCwAAAU8"]
[Sun Dec 28 22:12:06.679867 2025] [:error] [pid 29388:tid 29418] [client 4.190.188.171:64986] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aVE6ttoLv2L2zI_SpdUHDgAAAVY"]
[Sun Dec 28 22:12:09.860114 2025] [:error] [pid 43789:tid 43813] [client 4.190.188.171:65011] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aVE6uQa-tUppni4CcCZUbAAAARY"]
[Sun Dec 28 22:12:12.616852 2025] [:error] [pid 43789:tid 43807] [client 4.190.188.171:64221] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aVE6vAa-tUppni4CcCZUcQAAARA"]
[Sun Dec 28 22:12:15.516599 2025] [:error] [pid 42294:tid 42363] [client 4.190.188.171:64975] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aVE6v9TE5kYcYCOzl9HajQAAAI0"]
[Sun Dec 28 22:12:17.047177 2025] [:error] [pid 29437:tid 29480] [client 4.190.188.171:64317] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aVE6wRhDotAbVk6pZLfnKQAAAc4"]
[Sun Dec 28 22:12:18.741151 2025] [:error] [pid 29437:tid 29483] [client 4.190.188.171:65017] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aVE6whhDotAbVk6pZLfnLAAAAdE"]
[Sun Dec 28 22:12:19.623437 2025] [:error] [pid 29388:tid 29407] [client 4.190.188.171:64192] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aVE6w9oLv2L2zI_SpdUHHQAAAUs"]
[Sun Dec 28 22:12:26.343413 2025] [:error] [pid 42292:tid 42306] [client 4.190.188.171:64269] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVE6ypyOrM_vaFx1osZopQAAAAo"]
[Sun Dec 28 22:12:35.340457 2025] [:error] [pid 42293:tid 42337] [client 4.190.188.171:64279] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVE608vc9B-5cwN385IL-AAAAE4"]
[Sun Dec 28 22:12:36.390958 2025] [:error] [pid 42378:tid 42401] [client 4.190.188.171:65210] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-load.php"] [unique_id "aVE61DgtcN-KHAjWrX85oQAAANU"]
[Sun Dec 28 22:12:51.335063 2025] [:error] [pid 43789:tid 43804] [client 4.190.188.171:49111] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aVE64wa-tUppni4CcCZUggAAAQ0"]
[Sun Dec 28 22:12:52.408431 2025] [:error] [pid 43789:tid 43792] [client 4.190.188.171:65012] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aVE65Aa-tUppni4CcCZUgwAAAQE"]
[Sun Dec 28 22:12:55.435017 2025] [:error] [pid 42292:tid 42309] [client 4.190.188.171:65008] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aVE655yOrM_vaFx1osZouQAAAA0"]
[Sun Dec 28 22:12:55.887813 2025] [:error] [pid 43789:tid 43812] [client 4.190.188.171:64319] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aVE65wa-tUppni4CcCZUhAAAARU"]
[Sun Dec 28 22:12:58.268302 2025] [:error] [pid 42294:tid 42371] [client 4.190.188.171:64982] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/IXR/allez.php"] [unique_id "aVE66tTE5kYcYCOzl9HaoQAAAJU"]
[Sun Dec 28 22:13:00.801455 2025] [:error] [pid 42378:tid 42397] [client 4.190.188.171:64260] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/IXR/allez.php"] [unique_id "aVE67DgtcN-KHAjWrX85sQAAANE"]
[Sun Dec 28 22:13:03.144626 2025] [:error] [pid 42378:tid 42384] [client 4.190.188.171:65185] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/IXR/allez.php"] [unique_id "aVE67zgtcN-KHAjWrX85sgAAAMQ"]
[Sun Dec 28 22:13:07.094309 2025] [:error] [pid 42294:tid 42374] [client 4.190.188.171:64989] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/IXR/allez.php"] [unique_id "aVE689TE5kYcYCOzl9HapgAAAJg"]
[Sun Dec 28 22:13:08.938913 2025] [:error] [pid 42293:tid 42334] [client 4.190.188.171:65196] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aVE69Mvc9B-5cwN385IMDwAAAEs"]
[Sun Dec 28 22:13:10.543016 2025] [:error] [pid 29436:tid 29448] [client 4.190.188.171:65194] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aVE69rchzOOtNL9VPNIfuwAAAYk"]
[Sun Dec 28 22:13:12.255887 2025] [:error] [pid 29388:tid 29413] [client 4.190.188.171:65004] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aVE6-NoLv2L2zI_SpdUHVAAAAVE"]
[Sun Dec 28 22:13:14.466659 2025] [:error] [pid 42293:tid 42346] [client 4.190.188.171:65205] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aVE6-svc9B-5cwN385IMFAAAAFc"]
[Sun Dec 28 22:13:15.567080 2025] [:error] [pid 29437:tid 29472] [client 4.190.188.171:64272] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/404.php"] [unique_id "aVE6-xhDotAbVk6pZLfnVgAAAcY"]
[Sun Dec 28 22:13:17.270046 2025] [:error] [pid 42294:tid 42353] [client 4.190.188.171:65006] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/404.php"] [unique_id "aVE6_dTE5kYcYCOzl9HaqwAAAIM"]
[Sun Dec 28 22:13:18.301991 2025] [:error] [pid 42293:tid 42323] [client 4.190.188.171:64243] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/404.php"] [unique_id "aVE6_svc9B-5cwN385IMFQAAAEA"]
[Sun Dec 28 22:13:20.913424 2025] [:error] [pid 42378:tid 42396] [client 4.190.188.171:64980] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/404.php"] [unique_id "aVE7ADgtcN-KHAjWrX85vAAAANA"]
[Sun Dec 28 22:13:21.917992 2025] [:error] [pid 43789:tid 43795] [client 4.190.188.171:65197] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aVE7AQa-tUppni4CcCZUkAAAAQQ"]
[Sun Dec 28 22:13:22.532761 2025] [:error] [pid 29437:tid 29473] [client 4.190.188.171:65184] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aVE7AhhDotAbVk6pZLfnWgAAAcc"]
[Sun Dec 28 22:13:23.501765 2025] [:error] [pid 42293:tid 42347] [client 4.190.188.171:49327] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aVE7A8vc9B-5cwN385IMGgAAAFg"]
[Sun Dec 28 22:13:25.784737 2025] [:error] [pid 42292:tid 42316] [client 4.190.188.171:65170] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aVE7BZyOrM_vaFx1osZowQAAABQ"]
[Sun Dec 28 22:13:27.252508 2025] [:error] [pid 42292:tid 42309] [client 4.190.188.171:64259] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE7B5yOrM_vaFx1osZowwAAAA0"]
[Sun Dec 28 22:13:29.888602 2025] [:error] [pid 43789:tid 43815] [client 4.190.188.171:49119] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE7CQa-tUppni4CcCZUlAAAARg"]
[Sun Dec 28 22:13:31.223346 2025] [:error] [pid 29437:tid 29477] [client 4.190.188.171:65155] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE7CxhDotAbVk6pZLfnXwAAAcs"]
[Sun Dec 28 22:13:39.162563 2025] [:error] [pid 43789:tid 43813] [client 4.190.188.171:64282] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVE7Ewa-tUppni4CcCZUmAAAARY"]
[Sun Dec 28 22:13:41.010408 2025] [:error] [pid 29388:tid 29419] [client 4.190.188.171:49310] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aVE7FdoLv2L2zI_SpdUHeQAAAVc"]
[Sun Dec 28 22:13:42.747496 2025] [:error] [pid 42378:tid 42392] [client 4.190.188.171:65178] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aVE7FjgtcN-KHAjWrX85wgAAAMw"]
[Sun Dec 28 22:13:44.164742 2025] [:error] [pid 29436:tid 29440] [client 4.190.188.171:64212] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aVE7GLchzOOtNL9VPNIfxQAAAYE"]
[Sun Dec 28 22:13:47.749356 2025] [:error] [pid 29388:tid 29400] [client 4.190.188.171:65002] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aVE7G9oLv2L2zI_SpdUHggAAAUQ"]
[Sun Dec 28 22:13:59.707136 2025] [:error] [pid 42294:tid 42366] [client 4.190.188.171:64278] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/themes.php"] [unique_id "aVE7J9TE5kYcYCOzl9HawQAAAJA"]
[Sun Dec 28 22:14:01.698662 2025] [:error] [pid 29436:tid 29443] [client 4.190.188.171:64273] [client 4.190.188.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.188.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aVE7KbchzOOtNL9VPNIf2wAAAYQ"]
[Sun Dec 28 22:14:01.834767 2025] [:error] [pid 29388:tid 29412] [client 4.190.188.171:64192] [client 4.190.188.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.190.188.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aVE7KdoLv2L2zI_SpdUH8QAAAVA"]
[Sun Dec 28 22:14:02.106056 2025] [proxy_fcgi:error] [pid 29436:tid 29455] [client 4.190.188.171:64273] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 22:14:02.512693 2025] [:error] [pid 29436:tid 29459] [client 4.190.188.171:64273] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/xmrlpc.php"] [unique_id "aVE7KrchzOOtNL9VPNIf4AAAAZQ"]
[Sun Dec 28 22:14:03.512671 2025] [:error] [pid 29436:tid 29453] [client 4.190.188.171:64306] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/xmrlpc.php"] [unique_id "aVE7K7chzOOtNL9VPNIf4gAAAY4"]
[Sun Dec 28 22:14:05.054122 2025] [:error] [pid 29436:tid 29448] [client 4.190.188.171:65190] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/xmrlpc.php"] [unique_id "aVE7LbchzOOtNL9VPNIf6QAAAYk"]
[Sun Dec 28 22:14:07.240097 2025] [:error] [pid 42378:tid 42380] [client 4.190.188.171:65188] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/xmrlpc.php"] [unique_id "aVE7LzgtcN-KHAjWrX85yQAAAMA"]
[Sun Dec 28 22:14:13.045624 2025] [:error] [pid 29437:tid 29475] [client 4.190.188.171:64998] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cong.php"] [unique_id "aVE7NRhDotAbVk6pZLfnhgAAAck"]
[Sun Dec 28 22:14:14.142652 2025] [:error] [pid 29436:tid 29449] [client 4.190.188.171:65200] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cong.php"] [unique_id "aVE7NrchzOOtNL9VPNIf7AAAAYo"]
[Sun Dec 28 22:14:15.824437 2025] [:error] [pid 42293:tid 42326] [client 4.190.188.171:64219] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cong.php"] [unique_id "aVE7N8vc9B-5cwN385IMNgAAAEM"]
[Sun Dec 28 22:14:17.175749 2025] [:error] [pid 42293:tid 42327] [client 4.190.188.171:64297] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cong.php"] [unique_id "aVE7Ocvc9B-5cwN385IMNwAAAEQ"]
[Sun Dec 28 22:14:19.244879 2025] [:error] [pid 29437:tid 29476] [client 4.190.188.171:64294] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/makeasmtp.php"] [unique_id "aVE7OxhDotAbVk6pZLfniwAAAco"]
[Sun Dec 28 22:14:21.185987 2025] [:error] [pid 29436:tid 29453] [client 4.190.188.171:64284] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/makeasmtp.php"] [unique_id "aVE7PbchzOOtNL9VPNIf7QAAAY4"]
[Sun Dec 28 22:14:23.372980 2025] [:error] [pid 29437:tid 29490] [client 4.190.188.171:64295] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/makeasmtp.php"] [unique_id "aVE7PxhDotAbVk6pZLfnkAAAAdg"]
[Sun Dec 28 22:14:24.862377 2025] [:error] [pid 29388:tid 29407] [client 4.190.188.171:64311] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/makeasmtp.php"] [unique_id "aVE7QNoLv2L2zI_SpdUIAAAAAUs"]
[Sun Dec 28 22:14:25.856953 2025] [:error] [pid 29437:tid 29469] [client 4.190.188.171:65018] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aVE7QRhDotAbVk6pZLfnkQAAAcM"]
[Sun Dec 28 22:14:27.023176 2025] [:error] [pid 29436:tid 29456] [client 4.190.188.171:64314] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aVE7Q7chzOOtNL9VPNIf9AAAAZE"]
[Sun Dec 28 22:14:28.409107 2025] [:error] [pid 43789:tid 43796] [client 4.190.188.171:64292] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aVE7RAa-tUppni4CcCZUtgAAAQU"]
[Sun Dec 28 22:14:31.518989 2025] [:error] [pid 42378:tid 42397] [client 4.190.188.171:64990] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aVE7RzgtcN-KHAjWrX852gAAANE"]
[Sun Dec 28 22:14:33.626599 2025] [:error] [pid 29388:tid 29399] [client 4.190.188.171:65183] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aVE7SdoLv2L2zI_SpdUIAwAAAUM"]
[Sun Dec 28 22:14:36.511888 2025] [:error] [pid 42293:tid 42330] [client 4.190.188.171:49118] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aVE7TMvc9B-5cwN385IMQQAAAEc"]
[Sun Dec 28 22:14:37.154150 2025] [:error] [pid 42293:tid 42328] [client 4.190.188.171:49337] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aVE7Tcvc9B-5cwN385IMQgAAAEU"]
[Sun Dec 28 22:14:38.203510 2025] [:error] [pid 42293:tid 42334] [client 4.190.188.171:64300] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aVE7Tsvc9B-5cwN385IMRgAAAEs"]
[Sun Dec 28 22:14:41.797477 2025] [:error] [pid 42378:tid 42395] [client 4.190.188.171:64283] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sidwsi.php"] [unique_id "aVE7UTgtcN-KHAjWrX854QAAAM8"]
[Sun Dec 28 22:14:45.592695 2025] [:error] [pid 29437:tid 29467] [client 4.190.188.171:65206] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sidwsi.php"] [unique_id "aVE7VRhDotAbVk6pZLfnngAAAcE"]
[Sun Dec 28 22:14:46.861868 2025] [:error] [pid 29437:tid 29473] [client 4.190.188.171:64267] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sidwsi.php"] [unique_id "aVE7VhhDotAbVk6pZLfnoAAAAcc"]
[Sun Dec 28 22:14:48.450981 2025] [:error] [pid 42292:tid 42311] [client 4.190.188.171:64310] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sidwsi.php"] [unique_id "aVE7WJyOrM_vaFx1osZo_wAAAA8"]
[Sun Dec 28 22:14:49.295299 2025] [:error] [pid 29437:tid 29476] [client 4.190.188.171:65215] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aVE7WRhDotAbVk6pZLfnoQAAAco"]
[Sun Dec 28 22:14:51.854828 2025] [:error] [pid 43789:tid 43803] [client 4.190.188.171:65016] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aVE7Wwa-tUppni4CcCZUuwAAAQw"]
[Sun Dec 28 22:14:52.785014 2025] [:error] [pid 42378:tid 42395] [client 4.190.188.171:64194] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aVE7XDgtcN-KHAjWrX857QAAAM8"]
[Sun Dec 28 22:14:53.735478 2025] [:error] [pid 42294:tid 42356] [client 4.190.188.171:64962] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aVE7XdTE5kYcYCOzl9Ha0gAAAIY"]
[Sun Dec 28 22:14:57.432865 2025] [:error] [pid 43789:tid 43806] [client 4.190.188.171:65202] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aVE7YQa-tUppni4CcCZUwAAAAQ8"]
[Sun Dec 28 22:14:58.492597 2025] [:error] [pid 43789:tid 43807] [client 4.190.188.171:64255] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/mariju.php"] [unique_id "aVE7Yga-tUppni4CcCZUwgAAARA"]
[Sun Dec 28 22:15:03.580744 2025] [proxy_fcgi:error] [pid 43789:tid 43802] [client 4.190.188.171:64987] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 22:15:10.793135 2025] [proxy_fcgi:error] [pid 43789:tid 43807] [client 4.190.188.171:64987] AH01071: Got error 'Primary script unknown'
[Sun Dec 28 22:15:11.487979 2025] [:error] [pid 43789:tid 43801] [client 4.190.188.171:64987] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVE7bwa-tUppni4CcCZU3AAAAQo"]
[Sun Dec 28 22:15:14.020988 2025] [:error] [pid 29436:tid 29439] [client 4.190.188.171:65198] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aVE7crchzOOtNL9VPNIgAQAAAYA"]
[Sun Dec 28 22:15:16.463618 2025] [:error] [pid 29437:tid 29471] [client 4.190.188.171:64992] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aVE7dBhDotAbVk6pZLfnsAAAAcU"]
[Sun Dec 28 22:15:20.002316 2025] [:error] [pid 43789:tid 43807] [client 4.190.188.171:64303] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aVE7eAa-tUppni4CcCZU5gAAARA"]
[Sun Dec 28 22:15:21.433269 2025] [:error] [pid 29437:tid 29483] [client 4.190.188.171:64244] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aVE7eRhDotAbVk6pZLfnsgAAAdE"]
[Sun Dec 28 22:15:22.434038 2025] [:error] [pid 43789:tid 43791] [client 4.190.188.171:64235] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aVE7ega-tUppni4CcCZU6wAAAQA"]
[Sun Dec 28 22:15:23.872906 2025] [:error] [pid 42293:tid 42339] [client 4.190.188.171:65177] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aVE7e8vc9B-5cwN385IMUQAAAFA"]
[Sun Dec 28 22:15:28.849975 2025] [:error] [pid 29436:tid 29451] [client 4.190.188.171:49333] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aVE7gLchzOOtNL9VPNIgCgAAAYw"]
[Sun Dec 28 22:15:29.420348 2025] [:error] [pid 42292:tid 42296] [client 4.190.188.171:65168] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aVE7gZyOrM_vaFx1osZpDQAAAAA"]
[Sun Dec 28 22:15:31.555183 2025] [:error] [pid 29437:tid 29479] [client 4.190.188.171:64981] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aVE7gxhDotAbVk6pZLfnuQAAAc0"]
[Sun Dec 28 22:15:35.497829 2025] [:error] [pid 42378:tid 42390] [client 4.190.188.171:64302] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aVE7hzgtcN-KHAjWrX86AQAAAMo"]
[Sun Dec 28 22:15:37.021797 2025] [:error] [pid 29388:tid 29402] [client 4.190.188.171:65187] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVE7idoLv2L2zI_SpdUIKAAAAUY"]
[Sun Dec 28 22:15:39.428271 2025] [:error] [pid 42294:tid 42356] [client 4.190.188.171:64287] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVE7i9TE5kYcYCOzl9Ha5wAAAIY"]
[Sun Dec 28 22:15:40.028182 2025] [:error] [pid 29436:tid 29460] [client 4.190.188.171:65157] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVE7jLchzOOtNL9VPNIgEAAAAZU"]
[Sun Dec 28 22:15:40.917863 2025] [:error] [pid 43789:tid 43792] [client 4.190.188.171:65000] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVE7jAa-tUppni4CcCZU9gAAAQE"]
[Sun Dec 28 22:15:42.034761 2025] [:error] [pid 29388:tid 29413] [client 4.190.188.171:64247] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aVE7jtoLv2L2zI_SpdUILwAAAVE"]
[Sun Dec 28 22:15:44.461924 2025] [:error] [pid 29436:tid 29459] [client 4.190.188.171:49326] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aVE7kLchzOOtNL9VPNIgGAAAAZQ"]
[Sun Dec 28 22:15:45.119179 2025] [:error] [pid 42293:tid 42331] [client 4.190.188.171:64197] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aVE7kcvc9B-5cwN385IMXAAAAEg"]
[Sun Dec 28 22:15:45.643821 2025] [:error] [pid 29388:tid 29402] [client 4.190.188.171:65200] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aVE7kdoLv2L2zI_SpdUIMQAAAUY"]
[Sun Dec 28 22:15:46.738458 2025] [:error] [pid 29388:tid 29410] [client 4.190.188.171:64271] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/block-support.php"] [unique_id "aVE7ktoLv2L2zI_SpdUIMgAAAU4"]
[Sun Dec 28 22:15:51.720126 2025] [:error] [pid 29388:tid 29408] [client 4.190.188.171:49106] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/block-support.php"] [unique_id "aVE7l9oLv2L2zI_SpdUINQAAAUw"]
[Sun Dec 28 22:15:52.704666 2025] [:error] [pid 42292:tid 42298] [client 4.190.188.171:65015] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/block-support.php"] [unique_id "aVE7mJyOrM_vaFx1osZpHwAAAAI"]
[Sun Dec 28 22:15:53.555217 2025] [:error] [pid 43789:tid 43809] [client 4.190.188.171:65023] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/block-support.php"] [unique_id "aVE7mQa-tUppni4CcCZVAQAAARI"]
[Sun Dec 28 22:15:54.945122 2025] [:error] [pid 42294:tid 42352] [client 4.190.188.171:64268] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aVE7mtTE5kYcYCOzl9Ha9QAAAII"]
[Sun Dec 28 22:15:58.284459 2025] [:error] [pid 42293:tid 42344] [client 4.190.188.171:49324] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aVE7nsvc9B-5cwN385IMYwAAAFU"]
[Sun Dec 28 22:16:10.617672 2025] [:error] [pid 42294:tid 42374] [client 4.190.188.171:64196] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVE7qtTE5kYcYCOzl9Ha_QAAAJg"]
[Sun Dec 28 22:16:11.354286 2025] [:error] [pid 42378:tid 42390] [client 4.190.188.171:64275] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aVE7qzgtcN-KHAjWrX86HQAAAMo"]
[Sun Dec 28 22:16:12.883959 2025] [:error] [pid 42294:tid 42350] [client 4.190.188.171:64226] [client 4.190.188.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aVE7rNTE5kYcYCOzl9Ha_wAAAIA"]
[Sun Dec 28 22:16:24.271010 2025] [:error] [pid 43789:tid 43797] [client 4.190.188.171:64234] [client 4.190.188.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/wp-login.php"] [unique_id "aVE7uAa-tUppni4CcCZVEgAAAQY"]
[Mon Dec 29 00:48:43.186823 2025] [:error] [pid 8692:tid 8711] [client 117.33.163.216:49508] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVFfa2qutRVJ-mCjpmJ-LgAAApE"]
[Mon Dec 29 02:23:04.116154 2025] [:error] [pid 8692:tid 8709] [client 38.127.60.95:54872] [client 38.127.60.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.127.60.95, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVF1iGqutRVJ-mCjpmKHEQAAAo8"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Dec 29 02:23:11.613058 2025] [:error] [pid 46537:tid 46592] [client 38.127.60.95:61119] [client 38.127.60.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.127.60.95, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVF1jxIwkdHOre8AuwA4bgAAAJg"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Dec 29 02:23:14.738013 2025] [:error] [pid 46537:tid 46569] [client 38.127.60.95:58022] [client 38.127.60.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.127.60.95, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVF1khIwkdHOre8AuwA4cwAAAIE"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Dec 29 02:23:17.962688 2025] [:error] [pid 46622:tid 46640] [client 38.127.60.95:62344] [client 38.127.60.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.127.60.95, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVF1lSZDJSVZN5_8UUODbQAAAVA"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Dec 29 02:23:20.690461 2025] [:error] [pid 46536:tid 46543] [client 38.127.60.95:52316] [client 38.127.60.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.127.60.95, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVF1mN72_BregW2fmRYEHAAAAAM"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Dec 29 02:23:23.279307 2025] [:error] [pid 62278:tid 62282] [client 38.127.60.95:62104] [client 38.127.60.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.127.60.95, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVF1m7XlQgY5k1TX4Y1N6gAAAEI"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Dec 29 03:26:36.307961 2025] [autoindex:error] [pid 18218:tid 18274] [client 4.218.10.83:7154] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Mon Dec 29 03:26:57.522703 2025] [:error] [pid 18218:tid 18262] [client 4.218.10.83:7137] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aVGEgf9xdMzRH4jrTPoA8QAAAE0"], referer: https://www.google.co.uk/
[Mon Dec 29 03:26:58.084722 2025] [:error] [pid 18219:tid 18292] [client 4.218.10.83:7060] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aVGEgs7-FIIB2_mDS5QFOAAAAJA"], referer: https://www.google.co.uk/
[Mon Dec 29 03:26:58.357047 2025] [:error] [pid 18219:tid 18300] [client 4.218.10.83:7108] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aVGEgs7-FIIB2_mDS5QFOQAAAJg"], referer: https://www.google.de/
[Mon Dec 29 03:26:58.628327 2025] [:error] [pid 18310:tid 18318] [client 4.218.10.83:7156] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aVGEglzOeV9SWBV5HTh2-gAAAMY"], referer: https://www.google.de/
[Mon Dec 29 03:26:58.899816 2025] [:error] [pid 18217:tid 18246] [client 4.218.10.83:7105] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aVGEgqR9HpgDrnHErsdukAAAABg"], referer: https://www.google.fr/
[Mon Dec 29 03:26:59.769096 2025] [:error] [pid 18310:tid 18334] [client 4.218.10.83:7160] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aVGEg1zOeV9SWBV5HTh2_wAAANY"], referer: https://www.google.com/
[Mon Dec 29 03:27:00.042600 2025] [:error] [pid 18219:tid 18278] [client 4.218.10.83:7110] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aVGEhM7-FIIB2_mDS5QFPAAAAII"], referer: https://www.yahoo.com/
[Mon Dec 29 03:27:00.316565 2025] [:error] [pid 18218:tid 18252] [client 4.218.10.83:7051] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aVGEhP9xdMzRH4jrTPoA-AAAAEM"], referer: https://duckduckgo.com/
[Mon Dec 29 03:27:01.761018 2025] [:error] [pid 18217:tid 18243] [client 4.218.10.83:7134] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aVGEhaR9HpgDrnHErsdulwAAABU"], referer: https://www.google.co.uk/
[Mon Dec 29 03:27:02.032370 2025] [:error] [pid 18219:tid 18298] [client 4.218.10.83:6983] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aVGEhs7-FIIB2_mDS5QFQAAAAJY"], referer: https://www.bing.com/
[Mon Dec 29 03:27:02.304192 2025] [:error] [pid 18219:tid 18296] [client 4.218.10.83:7103] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aVGEhs7-FIIB2_mDS5QFQQAAAJQ"], referer: https://www.yahoo.com/
[Mon Dec 29 03:27:02.866027 2025] [:error] [pid 18219:tid 18284] [client 4.218.10.83:7153] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVGEhs7-FIIB2_mDS5QFRAAAAIg"], referer: https://www.google.fr/
[Mon Dec 29 03:27:03.138576 2025] [:error] [pid 18219:tid 18276] [client 4.218.10.83:7106] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVGEh87-FIIB2_mDS5QFRQAAAIA"], referer: https://duckduckgo.com/
[Mon Dec 29 03:27:04.289465 2025] [:error] [pid 18219:tid 18297] [client 4.218.10.83:7161] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVGEiM7-FIIB2_mDS5QFTQAAAJU"], referer: https://www.bing.com/
[Mon Dec 29 03:27:04.562368 2025] [:error] [pid 18217:tid 18229] [client 4.218.10.83:7080] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aVGEiKR9HpgDrnHErsdumAAAAAc"], referer: https://www.google.com/
[Mon Dec 29 03:27:04.833236 2025] [:error] [pid 18218:tid 18253] [client 4.218.10.83:7113] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aVGEiP9xdMzRH4jrTPoBCAAAAEQ"], referer: https://www.google.fr/
[Mon Dec 29 03:27:05.398185 2025] [:error] [pid 18218:tid 18263] [client 4.218.10.83:7121] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aVGEif9xdMzRH4jrTPoBDgAAAE4"], referer: https://www.google.fr/
[Mon Dec 29 03:27:05.682916 2025] [:error] [pid 18217:tid 18235] [client 4.218.10.83:7163] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aVGEiaR9HpgDrnHErsdumQAAAA0"], referer: https://www.google.de/
[Mon Dec 29 03:27:05.961632 2025] [:error] [pid 18310:tid 18332] [client 4.218.10.83:7165] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aVGEiVzOeV9SWBV5HTh3BwAAANQ"], referer: https://www.google.com/
[Mon Dec 29 03:27:06.232609 2025] [:error] [pid 18310:tid 18312] [client 4.218.10.83:7157] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aVGEilzOeV9SWBV5HTh3CAAAAMA"], referer: https://www.google.com/
[Mon Dec 29 03:27:06.504359 2025] [:error] [pid 18310:tid 18329] [client 4.218.10.83:7122] [client 4.218.10.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aVGEilzOeV9SWBV5HTh3CQAAANE"], referer: https://www.yahoo.com/
[Mon Dec 29 03:27:07.066708 2025] [:error] [pid 18217:tid 18230] [client 4.218.10.83:7128] [client 4.218.10.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.218.10.83, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVGEi6R9HpgDrnHErsdunAAAAAg"], referer: https://www.bing.com/
[Mon Dec 29 03:27:07.205613 2025] [:error] [pid 18218:tid 18268] [client 4.218.10.83:7154] [client 4.218.10.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.218.10.83, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVGEi_9xdMzRH4jrTPoBEgAAAFM"], referer: https://www.bing.com/
[Mon Dec 29 03:27:08.223623 2025] [:error] [pid 18217:tid 18227] [client 4.218.10.83:7128] [client 4.218.10.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.218.10.83, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVGEjKR9HpgDrnHErsduoQAAAAU"], referer: https://www.bing.com/
[Mon Dec 29 03:27:08.361860 2025] [:error] [pid 18218:tid 18264] [client 4.218.10.83:7154] [client 4.218.10.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.218.10.83, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVGEjP9xdMzRH4jrTPoBFgAAAE8"], referer: https://www.bing.com/
[Mon Dec 29 04:26:01.626546 2025] [autoindex:error] [pid 11453:tid 11514] [client 167.99.61.218:50332] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Dec 29 05:07:58.646675 2025] [proxy_fcgi:error] [pid 11452:tid 11483] [client 4.196.74.191:14027] AH01071: Got error 'Primary script unknown', referer: https://www.google.de/
[Mon Dec 29 05:07:59.934798 2025] [:error] [pid 11452:tid 11494] [client 4.196.74.191:14027] [client 4.196.74.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.74.191, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aVGcL6hBUmuWsliUNqTgtQAAAEw"], referer: https://www.google.co.uk/
[Mon Dec 29 05:07:59.953458 2025] [:error] [pid 11452:tid 11484] [client 4.196.74.191:14028] [client 4.196.74.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.196.74.191, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aVGcL6hBUmuWsliUNqTgtgAAAEI"], referer: https://www.google.co.uk/
[Mon Dec 29 05:48:27.878049 2025] [:error] [pid 37389:tid 37461] [client 92.44.25.175:4300] [client 92.44.25.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aVGlq8EYrQKI4GZ26QaRxQAAAQc"]
[Mon Dec 29 06:49:38.775633 2025] [:error] [pid 11452:tid 11491] [client 43.138.68.113:60014] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVG0AqhBUmuWsliUNqT6GQAAAEk"]
[Tue Dec 30 02:33:45.221826 2025] [:error] [pid 42521:tid 42526] [client 124.156.179.141:40482] [client 124.156.179.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVLJiczHehU4LDeKEzowjQAAAUI"]
[Tue Dec 30 04:20:37.604108 2025] [:error] [pid 55721:tid 55751] [client 4.217.250.2:16903] [client 4.217.250.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.217.250.2, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVLilT7Pjf1FlL091oWZGAAAABQ"], referer: https://www.google.fr/
[Tue Dec 30 04:20:37.769038 2025] [:error] [pid 21424:tid 21442] [client 4.217.250.2:26003] [client 4.217.250.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.217.250.2, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVLilf6vZjHcdZm1ozCWNAAAARA"], referer: https://www.google.fr/
[Tue Dec 30 04:20:44.230888 2025] [:error] [pid 55721:tid 55732] [client 4.217.250.2:16903] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVLinD7Pjf1FlL091oWZKwAAAAE"], referer: https://duckduckgo.com/
[Tue Dec 30 04:20:44.566616 2025] [:error] [pid 21424:tid 21437] [client 4.217.250.2:39378] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aVLinP6vZjHcdZm1ozCWRgAAAQs"], referer: https://www.yahoo.com/
[Tue Dec 30 04:20:44.902417 2025] [:error] [pid 21424:tid 21429] [client 4.217.250.2:37782] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aVLinP6vZjHcdZm1ozCWRwAAAQM"], referer: https://www.google.co.uk/
[Tue Dec 30 04:20:45.240401 2025] [:error] [pid 21424:tid 21449] [client 4.217.250.2:45398] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aVLinf6vZjHcdZm1ozCWSAAAARc"], referer: https://www.google.fr/
[Tue Dec 30 04:20:45.579907 2025] [:error] [pid 55724:tid 55805] [client 4.217.250.2:45330] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aVLinf2xaJh1srfKTGRRHQAAAJQ"], referer: https://www.google.co.uk/
[Tue Dec 30 04:20:45.912892 2025] [:error] [pid 55722:tid 55782] [client 4.217.250.2:36751] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVLindAPH64hQFBaDRiGTAAAAFg"], referer: https://www.yahoo.com/
[Tue Dec 30 04:20:46.247031 2025] [:error] [pid 21424:tid 21435] [client 4.217.250.2:2937] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aVLinv6vZjHcdZm1ozCWSQAAAQk"], referer: https://www.yahoo.com/
[Tue Dec 30 04:20:46.555251 2025] [:error] [pid 21424:tid 21439] [client 4.217.250.2:39402] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aVLinv6vZjHcdZm1ozCWSgAAAQ0"], referer: https://www.google.com/
[Tue Dec 30 04:20:46.867026 2025] [:error] [pid 55827:tid 55850] [client 4.217.250.2:16912] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aVLinjGIC-EorhVIeG_JiwAAANU"], referer: https://www.google.de/
[Tue Dec 30 04:20:47.199320 2025] [:error] [pid 55827:tid 55840] [client 4.217.250.2:36763] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aVLinzGIC-EorhVIeG_JjAAAAMs"], referer: https://www.bing.com/
[Tue Dec 30 04:20:47.548095 2025] [:error] [pid 55827:tid 55843] [client 4.217.250.2:45386] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aVLinzGIC-EorhVIeG_JjQAAAM4"], referer: https://www.google.fr/
[Tue Dec 30 04:20:49.969013 2025] [autoindex:error] [pid 21424:tid 21445] [client 4.217.250.2:26003] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Tue Dec 30 04:20:50.128404 2025] [autoindex:error] [pid 55724:tid 55805] [client 4.217.250.2:39403] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Tue Dec 30 04:43:14.745660 2025] [:error] [pid 55827:tid 55831] [client 3.66.219.191:36972] [client 3.66.219.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_next/data"] [unique_id "aVLn4jGIC-EorhVIeG_OWAAAAMI"]
[Tue Dec 30 04:43:15.962842 2025] [:error] [pid 55721:tid 55739] [client 3.66.219.191:37488] [client 3.66.219.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVLn4z7Pjf1FlL091oWcaQAAAAg"]
[Tue Dec 30 09:51:10.121334 2025] [:error] [pid 28824:tid 28866] [client 43.133.66.51:50666] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVMwDn8FhtgLvBhuCR3VVwAAAJU"]
[Tue Dec 30 13:13:17.788752 2025] [:error] [pid 28825:tid 28895] [client 103.77.107.57:64025] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aVNfbT6dbc1G2hX-KfQO2gAAANA"]
[Tue Dec 30 13:13:18.372150 2025] [:error] [pid 28954:tid 28966] [client 103.77.107.57:61013] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aVNfbqRZgqk7uuu8M0zl9gAAAAo"]
[Tue Dec 30 13:14:11.450087 2025] [:error] [pid 38777:tid 38789] [client 49.7.227.204:43092] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVNfo2Ln9GPxJXPhnHawqQAAAEk"]
[Tue Dec 30 14:40:55.308601 2025] [:error] [pid 28825:tid 28896] [client 43.165.67.57:41110] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVNz9z6dbc1G2hX-KfQg7wAAANE"]
[Tue Dec 30 15:28:36.990335 2025] [:error] [pid 28825:tid 28894] [client 194.26.192.112:52387] [client 194.26.192.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.26.192.112, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVN_JD6dbc1G2hX-KfQqBAAAAM8"]
[Tue Dec 30 15:38:04.363082 2025] [:error] [pid 28824:tid 28855] [client 103.65.236.149:65445] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aVOBXH8FhtgLvBhuCR0cfwAAAIo"]
[Tue Dec 30 19:19:09.174870 2025] [:error] [pid 28824:tid 28845] [client 106.54.62.156:34798] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVO1LX8FhtgLvBhuCR0-dwAAAIA"]
[Tue Dec 30 20:54:14.747424 2025] [:error] [pid 47441:tid 47461] [client 103.77.106.57:54016] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/postnews.php"] [unique_id "aVPLdi6d2esGSN6Ne3NZbwAAAVE"]
[Tue Dec 30 20:54:17.518995 2025] [:error] [pid 28825:tid 28890] [client 103.77.106.57:54418] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVPLeT6dbc1G2hX-KfRbfAAAAMs"]
[Tue Dec 30 20:54:19.081506 2025] [:error] [pid 47553:tid 47567] [client 103.77.106.57:54658] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLe7vhy9HerwSnwIQQxgAAAYw"]
[Tue Dec 30 23:02:41.989092 2025] [:error] [pid 28825:tid 28886] [client 41.142.64.129:59628] [client 41.142.64.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.142.64.129, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVPpkT6dbc1G2hX-KfRycwAAAMc"]
[Wed Dec 31 00:28:28.693792 2025] [:error] [pid 50266:tid 50285] [client 129.226.93.214:49202] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVP9rPw6SPY9puCUnH9jGwAAAFE"]
[Wed Dec 31 02:55:23.847289 2025] [:error] [pid 49981:tid 49997] [client 159.89.181.56:64033] [client 159.89.181.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aVQgG5CCXHPw9uuzhEyDFgAAAIw"], referer: binance.com
[Wed Dec 31 03:36:01.565309 2025] [:error] [pid 29282:tid 29313] [client 195.178.110.190:59950] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aVQpoc9cX31LoVGcDynL4AAAAAQ"]
[Wed Dec 31 07:37:41.559894 2025] [:error] [pid 57070:tid 57078] [client 223.244.35.77:36181] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVRiRWH9Bg9ixJObtDSY6gAAAEY"]
[Wed Dec 31 07:51:48.457486 2025] [:error] [pid 57205:tid 57216] [client 52.141.42.203:64664] [client 52.141.42.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.141.42.203, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVRllN_4-Smo-jE-MHqdIAAAAAk"], referer: https://www.bing.com/
[Wed Dec 31 07:51:48.599321 2025] [:error] [pid 57143:tid 57162] [client 52.141.42.203:64678] [client 52.141.42.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.141.42.203, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVRllJaPGzW-sFdGwAk5ZAAAANA"], referer: https://www.bing.com/
[Wed Dec 31 07:51:54.803496 2025] [:error] [pid 57205:tid 57230] [client 52.141.42.203:64664] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVRlmt_4-Smo-jE-MHqdRAAAABc"], referer: https://www.bing.com/
[Wed Dec 31 07:51:55.200804 2025] [:error] [pid 57144:tid 57186] [client 52.141.42.203:64644] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVRlm4oIYDHY2wNlFkoITgAAAU0"], referer: https://www.google.com/
[Wed Dec 31 07:51:57.507794 2025] [:error] [pid 57205:tid 57217] [client 52.141.42.203:64649] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aVRlnd_4-Smo-jE-MHqdWQAAAAo"], referer: https://www.bing.com/
[Wed Dec 31 07:51:57.777561 2025] [:error] [pid 57070:tid 57072] [client 52.141.42.203:64703] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVRlnWH9Bg9ixJObtDSd_AAAAEA"], referer: https://www.google.com/
[Wed Dec 31 07:51:58.338565 2025] [:error] [pid 57144:tid 57175] [client 52.141.42.203:64584] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aVRlnooIYDHY2wNlFkoIUwAAAUI"], referer: https://www.google.co.uk/
[Wed Dec 31 07:51:58.624388 2025] [:error] [pid 57143:tid 57157] [client 52.141.42.203:64589] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aVRlnpaPGzW-sFdGwAk5hwAAAMs"], referer: https://duckduckgo.com/
[Wed Dec 31 13:44:44.756564 2025] [:error] [pid 48713:tid 48740] [client 221.229.106.25:42584] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVS4TEyNMVAGtWvMliOpqAAAANY"]
[Wed Dec 31 15:13:49.586789 2025] [:error] [pid 48713:tid 48733] [client 43.135.138.128:53564] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVTNLUyNMVAGtWvMliO6QgAAAM8"]
[Wed Dec 31 16:27:20.938950 2025] [autoindex:error] [pid 48715:tid 48772] [client 138.197.17.1:62356] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Dec 31 19:47:23.974365 2025] [:error] [pid 8068:tid 8072] [client 43.130.16.140:33712] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVUNSySVtzoWnijCxFZdggAAAcI"]
[Wed Dec 31 19:50:39.339895 2025] [:error] [pid 7576:tid 7591] [client 182.44.9.147:36777] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVUOD6FUpQkpGJNxC_-5lgAAAU0"]
[Wed Dec 31 22:15:37.132700 2025] [:error] [pid 48713:tid 48732] [client 101.33.55.204:56328] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVUwCUyNMVAGtWvMliP92wAAAM4"]
[Thu Jan 01 02:01:25.148689 2026] [:error] [pid 7576:tid 7599] [client 111.172.249.49:33457] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVVk9aFUpQkpGJNxC___gAAAAVU"]
[Thu Jan 01 03:09:54.604843 2026] [:error] [pid 7800:tid 7812] [client 43.154.250.181:42808] [client 43.154.250.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVV1AiN6RFoECeReAPWkVwAAAYk"]
[Thu Jan 01 07:51:12.991050 2026] [:error] [pid 58924:tid 58946] [client 43.140.247.223:41660] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVW28DYXM8NvhWQPUGvOYQAAANQ"]
[Thu Jan 01 11:04:07.675809 2026] [:error] [pid 58818:tid 58870] [client 43.166.132.142:52462] [client 43.166.132.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVXkJ2r6b3Nsqkrqu80a5AAAAFE"]
[Thu Jan 01 13:53:18.369352 2026] [:error] [pid 58924:tid 58942] [client 125.94.144.102:37939] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVYLzjYXM8NvhWQPUGssdgAAANA"]
[Thu Jan 01 18:13:41.751961 2026] [:error] [pid 36395:tid 36410] [client 170.106.147.63:37690] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVZI1WQHG4-J0nOXDr7jawAAAA0"]
[Thu Jan 01 20:13:36.874367 2026] [:error] [pid 63889:tid 63970] [client 36.41.75.167:34706] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVZk8NU3sRpsUcz9MOBn3wAAABg"]
[Thu Jan 01 20:44:41.833044 2026] [:error] [pid 63889:tid 63955] [client 101.33.66.34:53066] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVZsOdU3sRpsUcz9MOBumAAAAAk"]
[Fri Jan 02 01:15:56.748447 2026] [:error] [pid 19496:tid 19539] [client 43.157.175.122:34178] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVarzGM9BBPu2JyEzYsLlwAAAIs"]
[Fri Jan 02 04:06:38.616431 2026] [:error] [pid 63100:tid 63174] [client 13.77.106.80:2063] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aVbTzjuUXUKd3KTnKl9ysgAAAI0"]
[Fri Jan 02 04:06:39.277109 2026] [:error] [pid 63099:tid 63144] [client 13.77.106.80:2173] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aVbTz8mCZokRPYUhzvj4mgAAAEo"]
[Fri Jan 02 04:06:40.106018 2026] [:error] [pid 63099:tid 63154] [client 13.77.106.80:2150] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aVbT0MmCZokRPYUhzvj4mwAAAFQ"]
[Fri Jan 02 04:06:40.964967 2026] [:error] [pid 63098:tid 63130] [client 13.77.106.80:2078] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aVbT0Mez9k78gUs48kp1PQAAABc"]
[Fri Jan 02 04:06:41.528912 2026] [:error] [pid 63100:tid 63175] [client 13.77.106.80:2137] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aVbT0TuUXUKd3KTnKl9ytAAAAI4"]
[Fri Jan 02 04:06:42.039412 2026] [:error] [pid 63098:tid 63116] [client 13.77.106.80:2149] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aVbT0sez9k78gUs48kp1PwAAAAk"]
[Fri Jan 02 04:06:42.577700 2026] [:error] [pid 63098:tid 63129] [client 13.77.106.80:2132] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aVbT0sez9k78gUs48kp1QQAAABY"]
[Fri Jan 02 04:06:43.577472 2026] [:error] [pid 63100:tid 63163] [client 13.77.106.80:2135] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aVbT0zuUXUKd3KTnKl9ytgAAAII"]
[Fri Jan 02 04:06:44.115675 2026] [:error] [pid 63099:tid 63138] [client 13.77.106.80:2140] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aVbT1MmCZokRPYUhzvj4oAAAAEQ"]
[Fri Jan 02 04:06:44.767019 2026] [:error] [pid 63099:tid 63155] [client 13.77.106.80:2121] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aVbT1MmCZokRPYUhzvj4ogAAAFU"]
[Fri Jan 02 04:06:45.687132 2026] [:error] [pid 63100:tid 63179] [client 13.77.106.80:2076] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aVbT1TuUXUKd3KTnKl9yuAAAAJI"]
[Fri Jan 02 04:06:46.217745 2026] [:error] [pid 63208:tid 63225] [client 13.77.106.80:2172] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aVbT1nKLI9INGPLzfndQSwAAAM4"]
[Fri Jan 02 04:06:46.705370 2026] [:error] [pid 63208:tid 63224] [client 13.77.106.80:2143] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aVbT1nKLI9INGPLzfndQTQAAAM0"]
[Fri Jan 02 04:06:47.394298 2026] [:error] [pid 63098:tid 63122] [client 13.77.106.80:2055] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aVbT18ez9k78gUs48kp1QwAAAA8"]
[Fri Jan 02 04:06:48.077628 2026] [:error] [pid 63099:tid 63147] [client 13.77.106.80:2051] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aVbT2MmCZokRPYUhzvj4pQAAAE0"]
[Fri Jan 02 04:06:48.620136 2026] [:error] [pid 63208:tid 63231] [client 13.77.106.80:2057] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aVbT2HKLI9INGPLzfndQUQAAANQ"]
[Fri Jan 02 04:06:49.340670 2026] [:error] [pid 63099:tid 63137] [client 13.77.106.80:2122] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aVbT2cmCZokRPYUhzvj4qAAAAEM"]
[Fri Jan 02 04:06:49.890304 2026] [:error] [pid 63208:tid 63215] [client 13.77.106.80:2064] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aVbT2XKLI9INGPLzfndQUwAAAMQ"]
[Fri Jan 02 04:06:50.381179 2026] [:error] [pid 63100:tid 63182] [client 13.77.106.80:2152] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aVbT2juUXUKd3KTnKl9yugAAAJU"]
[Fri Jan 02 04:06:51.207598 2026] [:error] [pid 63208:tid 63217] [client 13.77.106.80:2010] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aVbT23KLI9INGPLzfndQVgAAAMY"]
[Fri Jan 02 04:06:51.843499 2026] [:error] [pid 63098:tid 63131] [client 13.77.106.80:2128] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aVbT28ez9k78gUs48kp1RAAAABg"]
[Fri Jan 02 04:06:52.679031 2026] [:error] [pid 63208:tid 63223] [client 13.77.106.80:2089] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aVbT3HKLI9INGPLzfndQWwAAAMw"]
[Fri Jan 02 04:06:53.200632 2026] [:error] [pid 63098:tid 63120] [client 13.77.106.80:2115] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aVbT3cez9k78gUs48kp1SAAAAA0"]
[Fri Jan 02 04:06:53.767813 2026] [:error] [pid 63100:tid 63161] [client 13.77.106.80:2144] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aVbT3TuUXUKd3KTnKl9yvAAAAIA"]
[Fri Jan 02 04:06:54.212889 2026] [:error] [pid 63100:tid 63165] [client 13.77.106.80:2053] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aVbT3juUXUKd3KTnKl9yvQAAAIQ"]
[Fri Jan 02 04:06:54.845471 2026] [:error] [pid 63100:tid 63180] [client 13.77.106.80:2060] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aVbT3juUXUKd3KTnKl9ywAAAAJM"]
[Fri Jan 02 04:06:55.479649 2026] [:error] [pid 63208:tid 63231] [client 13.77.106.80:2171] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aVbT33KLI9INGPLzfndQXwAAANQ"]
[Fri Jan 02 04:06:56.319396 2026] [:error] [pid 63098:tid 63117] [client 13.77.106.80:2174] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aVbT4Mez9k78gUs48kp1SwAAAAo"]
[Fri Jan 02 04:06:56.898232 2026] [:error] [pid 63099:tid 63153] [client 13.77.106.80:2139] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aVbT4MmCZokRPYUhzvj4qQAAAFM"]
[Fri Jan 02 04:06:57.643849 2026] [:error] [pid 63208:tid 63227] [client 13.77.106.80:2134] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aVbT4XKLI9INGPLzfndQYAAAANA"]
[Fri Jan 02 04:06:58.786501 2026] [:error] [pid 63100:tid 63170] [client 13.77.106.80:2142] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aVbT4juUXUKd3KTnKl9yyQAAAIk"]
[Fri Jan 02 04:06:59.591313 2026] [:error] [pid 63100:tid 63167] [client 13.77.106.80:2133] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aVbT4zuUXUKd3KTnKl9yywAAAIY"]
[Fri Jan 02 04:07:00.161367 2026] [:error] [pid 63100:tid 63183] [client 13.77.106.80:2059] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aVbT5DuUXUKd3KTnKl9yzQAAAJY"]
[Fri Jan 02 04:07:00.840069 2026] [:error] [pid 63098:tid 63127] [client 13.77.106.80:2138] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aVbT5Mez9k78gUs48kp1TAAAABQ"]
[Fri Jan 02 04:07:01.518793 2026] [:error] [pid 63100:tid 63169] [client 13.77.106.80:2073] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aVbT5TuUXUKd3KTnKl9yzgAAAIg"]
[Fri Jan 02 04:07:02.129348 2026] [:error] [pid 63098:tid 63114] [client 13.77.106.80:2072] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aVbT5sez9k78gUs48kp1TgAAAAc"]
[Fri Jan 02 04:07:02.612174 2026] [:error] [pid 63208:tid 63226] [client 13.77.106.80:1984] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aVbT5nKLI9INGPLzfndQZAAAAM8"]
[Fri Jan 02 04:07:03.076167 2026] [:error] [pid 63208:tid 63220] [client 13.77.106.80:2156] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aVbT53KLI9INGPLzfndQZgAAAMk"]
[Fri Jan 02 04:07:03.823106 2026] [:error] [pid 63099:tid 63154] [client 13.77.106.80:2056] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aVbT58mCZokRPYUhzvj4rgAAAFQ"]
[Fri Jan 02 04:07:04.258696 2026] [:error] [pid 63099:tid 63143] [client 13.77.106.80:2116] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aVbT6MmCZokRPYUhzvj4rwAAAEk"]
[Fri Jan 02 04:07:04.825863 2026] [:error] [pid 63208:tid 63225] [client 13.77.106.80:2147] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aVbT6HKLI9INGPLzfndQbAAAAM4"]
[Fri Jan 02 04:07:05.910491 2026] [:error] [pid 63100:tid 63185] [client 13.77.106.80:2148] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aVbT6TuUXUKd3KTnKl9y2gAAAJg"]
[Fri Jan 02 04:07:06.838177 2026] [:error] [pid 63098:tid 63121] [client 13.77.106.80:2169] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aVbT6sez9k78gUs48kp1UAAAAA4"]
[Fri Jan 02 04:07:07.998172 2026] [:error] [pid 63100:tid 63176] [client 13.77.106.80:2165] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aVbT6zuUXUKd3KTnKl9y4QAAAI8"]
[Fri Jan 02 04:07:09.310375 2026] [:error] [pid 63098:tid 63118] [client 13.77.106.80:2155] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aVbT7cez9k78gUs48kp1UgAAAAs"]
[Fri Jan 02 04:07:09.946501 2026] [:error] [pid 63099:tid 63150] [client 13.77.106.80:2096] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aVbT7cmCZokRPYUhzvj4sgAAAFA"]
[Fri Jan 02 04:07:10.556255 2026] [:error] [pid 63100:tid 63175] [client 13.77.106.80:2153] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aVbT7juUXUKd3KTnKl9y6wAAAI4"]
[Fri Jan 02 04:07:11.124622 2026] [:error] [pid 63098:tid 63113] [client 13.77.106.80:2166] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aVbT78ez9k78gUs48kp1UwAAAAY"]
[Fri Jan 02 04:07:11.593936 2026] [:error] [pid 63100:tid 63164] [client 13.77.106.80:2112] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aVbT7zuUXUKd3KTnKl9y8AAAAIM"]
[Fri Jan 02 04:07:12.409447 2026] [:error] [pid 63100:tid 63176] [client 13.77.106.80:2175] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aVbT8DuUXUKd3KTnKl9y9QAAAI8"]
[Fri Jan 02 04:07:13.561429 2026] [:error] [pid 63208:tid 63221] [client 13.77.106.80:2012] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aVbT8XKLI9INGPLzfndQhwAAAMo"]
[Fri Jan 02 04:07:14.265965 2026] [:error] [pid 63208:tid 63214] [client 13.77.106.80:2161] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aVbT8nKLI9INGPLzfndQiwAAAMM"]
[Fri Jan 02 04:07:14.875588 2026] [:error] [pid 63100:tid 63170] [client 13.77.106.80:2085] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aVbT8juUXUKd3KTnKl9zBwAAAIk"]
[Fri Jan 02 04:07:15.336210 2026] [:error] [pid 63098:tid 63125] [client 13.77.106.80:2106] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aVbT88ez9k78gUs48kp1WAAAABI"]
[Fri Jan 02 04:07:15.847106 2026] [:error] [pid 63208:tid 63222] [client 13.77.106.80:2070] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aVbT83KLI9INGPLzfndQlgAAAMs"]
[Fri Jan 02 04:07:16.289369 2026] [:error] [pid 63100:tid 63171] [client 13.77.106.80:2081] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aVbT9DuUXUKd3KTnKl9zEgAAAIo"]
[Fri Jan 02 04:07:17.215172 2026] [:error] [pid 63100:tid 63170] [client 13.77.106.80:2127] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aVbT9TuUXUKd3KTnKl9zHAAAAIk"]
[Fri Jan 02 04:07:17.783306 2026] [:error] [pid 63208:tid 63233] [client 13.77.106.80:2151] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aVbT9XKLI9INGPLzfndQoQAAANY"]
[Fri Jan 02 04:07:18.242814 2026] [:error] [pid 63100:tid 63180] [client 13.77.106.80:2058] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aVbT9juUXUKd3KTnKl9zJgAAAJM"]
[Fri Jan 02 04:07:18.756325 2026] [:error] [pid 63099:tid 63156] [client 13.77.106.80:2168] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aVbT9smCZokRPYUhzvj4tAAAAFY"]
[Fri Jan 02 04:07:19.354712 2026] [:error] [pid 63100:tid 63181] [client 13.77.106.80:1990] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aVbT9zuUXUKd3KTnKl9zLQAAAJQ"]
[Fri Jan 02 04:07:20.006134 2026] [:error] [pid 63208:tid 63212] [client 13.77.106.80:2061] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aVbT-HKLI9INGPLzfndQqgAAAME"]
[Fri Jan 02 04:07:20.606282 2026] [:error] [pid 63208:tid 63228] [client 13.77.106.80:2126] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aVbT-HKLI9INGPLzfndQrAAAANE"]
[Fri Jan 02 04:07:21.267757 2026] [:error] [pid 63100:tid 63168] [client 13.77.106.80:2154] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aVbT-TuUXUKd3KTnKl9zMAAAAIc"]
[Fri Jan 02 04:07:22.227885 2026] [:error] [pid 63099:tid 63153] [client 13.77.106.80:2068] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aVbT-smCZokRPYUhzvj4twAAAFM"]
[Fri Jan 02 04:07:22.716182 2026] [:error] [pid 63208:tid 63221] [client 13.77.106.80:2145] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aVbT-nKLI9INGPLzfndQrgAAAMo"]
[Fri Jan 02 04:07:23.232920 2026] [:error] [pid 63208:tid 63219] [client 13.77.106.80:2054] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aVbT-3KLI9INGPLzfndQsAAAAMg"]
[Fri Jan 02 04:07:23.678793 2026] [:error] [pid 63208:tid 63233] [client 13.77.106.80:1988] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aVbT-3KLI9INGPLzfndQsQAAANY"]
[Fri Jan 02 04:07:24.301415 2026] [:error] [pid 63098:tid 63130] [client 13.77.106.80:2170] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVbT_Mez9k78gUs48kp1YAAAABc"]
[Fri Jan 02 04:07:24.777633 2026] [:error] [pid 63208:tid 63214] [client 13.77.106.80:2090] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVbT_HKLI9INGPLzfndQsgAAAMM"]
[Fri Jan 02 04:07:25.223963 2026] [:error] [pid 63100:tid 63171] [client 13.77.106.80:1991] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVbT_TuUXUKd3KTnKl9zNQAAAIo"]
[Fri Jan 02 04:07:25.698684 2026] [:error] [pid 63099:tid 63139] [client 13.77.106.80:2004] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVbT_cmCZokRPYUhzvj4uAAAAEU"]
[Fri Jan 02 04:07:26.178338 2026] [:error] [pid 63208:tid 63226] [client 13.77.106.80:2123] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVbT_nKLI9INGPLzfndQswAAAM8"]
[Fri Jan 02 04:07:26.762280 2026] [:error] [pid 63208:tid 63216] [client 13.77.106.80:2074] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVbT_nKLI9INGPLzfndQtAAAAMU"]
[Fri Jan 02 04:07:27.319391 2026] [:error] [pid 63208:tid 63211] [client 13.77.106.80:2119] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVbT_3KLI9INGPLzfndQtgAAAMA"]
[Fri Jan 02 04:07:27.760359 2026] [:error] [pid 63100:tid 63168] [client 13.77.106.80:2118] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVbT_zuUXUKd3KTnKl9zPAAAAIc"]
[Fri Jan 02 04:07:28.579777 2026] [:error] [pid 63100:tid 63161] [client 13.77.106.80:2095] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aVbUADuUXUKd3KTnKl9zRQAAAIA"]
[Fri Jan 02 04:07:29.585787 2026] [:error] [pid 63098:tid 63127] [client 13.77.106.80:2008] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aVbUAcez9k78gUs48kp1cgAAABQ"]
[Fri Jan 02 04:07:30.204741 2026] [:error] [pid 63100:tid 63161] [client 13.77.106.80:2069] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aVbUAjuUXUKd3KTnKl9zUgAAAIA"]
[Fri Jan 02 04:07:30.702707 2026] [:error] [pid 63208:tid 63231] [client 13.77.106.80:2067] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aVbUAnKLI9INGPLzfndQwgAAANQ"]
[Fri Jan 02 04:07:31.157063 2026] [:error] [pid 63100:tid 63166] [client 13.77.106.80:1995] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aVbUAzuUXUKd3KTnKl9zWwAAAIU"]
[Fri Jan 02 04:07:31.644291 2026] [:error] [pid 63098:tid 63111] [client 13.77.106.80:2077] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aVbUA8ez9k78gUs48kp1fAAAAAQ"]
[Fri Jan 02 04:07:32.102846 2026] [:error] [pid 63208:tid 63226] [client 13.77.106.80:2136] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aVbUBHKLI9INGPLzfndQxgAAAM8"]
[Fri Jan 02 04:07:32.995815 2026] [:error] [pid 63098:tid 63117] [client 13.77.106.80:1949] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aVbUBMez9k78gUs48kp1hgAAAAo"]
[Fri Jan 02 04:07:33.452347 2026] [:error] [pid 63208:tid 63223] [client 13.77.106.80:2030] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aVbUBXKLI9INGPLzfndQzQAAAMw"]
[Fri Jan 02 04:07:33.921128 2026] [:error] [pid 63208:tid 63234] [client 13.77.106.80:2036] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aVbUBXKLI9INGPLzfndQ0AAAANc"]
[Fri Jan 02 04:07:34.366089 2026] [:error] [pid 63208:tid 63220] [client 13.77.106.80:2040] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aVbUBnKLI9INGPLzfndQ0gAAAMk"]
[Fri Jan 02 04:07:34.831582 2026] [:error] [pid 63098:tid 63121] [client 13.77.106.80:2114] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aVbUBsez9k78gUs48kp1jwAAAA4"]
[Fri Jan 02 04:07:35.487640 2026] [:error] [pid 63208:tid 63216] [client 13.77.106.80:2013] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aVbUB3KLI9INGPLzfndQ1QAAAMU"]
[Fri Jan 02 04:07:36.093872 2026] [:error] [pid 63100:tid 63162] [client 13.77.106.80:2062] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aVbUCDuUXUKd3KTnKl9zfAAAAIE"]
[Fri Jan 02 04:07:36.516316 2026] [:error] [pid 63208:tid 63230] [client 13.77.106.80:2117] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aVbUCHKLI9INGPLzfndQ2AAAANM"]
[Fri Jan 02 04:07:36.993459 2026] [:error] [pid 63099:tid 63142] [client 13.77.106.80:2079] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aVbUCMmCZokRPYUhzvj4vwAAAEg"]
[Fri Jan 02 04:07:37.525312 2026] [:error] [pid 63099:tid 63137] [client 13.77.106.80:2047] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aVbUCcmCZokRPYUhzvj4wAAAAEM"]
[Fri Jan 02 04:07:37.962864 2026] [:error] [pid 63098:tid 63118] [client 13.77.106.80:2026] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aVbUCcez9k78gUs48kp1nwAAAAs"]
[Fri Jan 02 04:07:40.158164 2026] [:error] [pid 63208:tid 63219] [client 13.77.106.80:2094] [client 13.77.106.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVbUDHKLI9INGPLzfndQ5AAAAMg"]
[Fri Jan 02 04:07:45.630442 2026] [:error] [pid 63208:tid 63229] [client 13.77.106.80:2082] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVbUEXKLI9INGPLzfndQ_QAAANI"]
[Fri Jan 02 04:07:46.225911 2026] [:error] [pid 63208:tid 63212] [client 13.77.106.80:2146] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVbUEnKLI9INGPLzfndQ_gAAAME"]
[Fri Jan 02 04:07:46.675208 2026] [:error] [pid 63208:tid 63230] [client 13.77.106.80:2080] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVbUEnKLI9INGPLzfndQ_wAAANM"]
[Fri Jan 02 04:07:47.139159 2026] [:error] [pid 63099:tid 63143] [client 13.77.106.80:2103] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aVbUE8mCZokRPYUhzvj4xgAAAEk"]
[Fri Jan 02 04:07:47.750689 2026] [:error] [pid 63208:tid 63217] [client 13.77.106.80:2071] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aVbUE3KLI9INGPLzfndRBQAAAMY"]
[Fri Jan 02 04:07:48.394233 2026] [:error] [pid 63099:tid 63155] [client 13.77.106.80:2160] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aVbUFMmCZokRPYUhzvj4ygAAAFU"]
[Fri Jan 02 04:07:48.901183 2026] [:error] [pid 63098:tid 63111] [client 13.77.106.80:2097] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aVbUFMez9k78gUs48kp1tAAAAAQ"]
[Fri Jan 02 04:07:49.319082 2026] [:error] [pid 63099:tid 63157] [client 13.77.106.80:2023] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aVbUFcmCZokRPYUhzvj4ywAAAFc"]
[Fri Jan 02 04:07:49.805340 2026] [:error] [pid 63208:tid 63226] [client 13.77.106.80:1924] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aVbUFXKLI9INGPLzfndRDAAAAM8"]
[Fri Jan 02 04:07:50.334877 2026] [:error] [pid 63100:tid 63171] [client 13.77.106.80:2029] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aVbUFjuUXUKd3KTnKl9zoAAAAIo"]
[Fri Jan 02 04:07:50.825544 2026] [:error] [pid 63208:tid 63223] [client 13.77.106.80:2163] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aVbUFnKLI9INGPLzfndREQAAAMw"]
[Fri Jan 02 04:07:51.308756 2026] [:error] [pid 63098:tid 63121] [client 13.77.106.80:2027] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aVbUF8ez9k78gUs48kp1tgAAAA4"]
[Fri Jan 02 04:07:51.742409 2026] [:error] [pid 63099:tid 63135] [client 13.77.106.80:2167] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVbUF8mCZokRPYUhzvj4zQAAAEE"]
[Fri Jan 02 04:07:52.209359 2026] [:error] [pid 63099:tid 63154] [client 13.77.106.80:2006] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVbUGMmCZokRPYUhzvj4zwAAAFQ"]
[Fri Jan 02 04:07:52.775678 2026] [:error] [pid 63098:tid 63109] [client 13.77.106.80:2125] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVbUGMez9k78gUs48kp1uAAAAAI"]
[Fri Jan 02 04:07:53.212953 2026] [:error] [pid 63099:tid 63147] [client 13.77.106.80:1993] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVbUGcmCZokRPYUhzvj40AAAAE0"]
[Fri Jan 02 04:07:53.794408 2026] [:error] [pid 63208:tid 63233] [client 13.77.106.80:2107] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aVbUGXKLI9INGPLzfndRFwAAANY"]
[Fri Jan 02 04:07:54.467811 2026] [:error] [pid 63098:tid 63113] [client 13.77.106.80:1967] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aVbUGsez9k78gUs48kp1vAAAAAY"]
[Fri Jan 02 04:07:55.056630 2026] [:error] [pid 63208:tid 63216] [client 13.77.106.80:2120] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aVbUG3KLI9INGPLzfndRGAAAAMU"]
[Fri Jan 02 04:07:55.635740 2026] [:error] [pid 63099:tid 63142] [client 13.77.106.80:2016] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aVbUG8mCZokRPYUhzvj40gAAAEg"]
[Fri Jan 02 04:07:56.233516 2026] [:error] [pid 63099:tid 63137] [client 13.77.106.80:2044] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aVbUHMmCZokRPYUhzvj40wAAAEM"]
[Fri Jan 02 04:07:56.751389 2026] [:error] [pid 63208:tid 63229] [client 13.77.106.80:2001] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aVbUHHKLI9INGPLzfndRGgAAANI"]
[Fri Jan 02 04:07:57.173657 2026] [:error] [pid 63208:tid 63211] [client 13.77.106.80:1960] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aVbUHXKLI9INGPLzfndRGwAAAMA"]
[Fri Jan 02 04:07:57.801310 2026] [:error] [pid 63100:tid 63170] [client 13.77.106.80:2032] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aVbUHTuUXUKd3KTnKl9zpAAAAIk"]
[Fri Jan 02 04:07:58.870494 2026] [:error] [pid 63100:tid 63174] [client 13.77.106.80:2052] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVbUHjuUXUKd3KTnKl9zpwAAAI0"]
[Fri Jan 02 04:07:59.394487 2026] [:error] [pid 63208:tid 63231] [client 13.77.106.80:2003] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVbUH3KLI9INGPLzfndRIQAAANQ"]
[Fri Jan 02 04:08:00.065829 2026] [:error] [pid 63098:tid 63108] [client 13.77.106.80:2098] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVbUIMez9k78gUs48kp1wQAAAAE"]
[Fri Jan 02 04:08:00.540842 2026] [:error] [pid 63099:tid 63157] [client 13.77.106.80:2049] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVbUIMmCZokRPYUhzvj42AAAAFc"]
[Fri Jan 02 04:08:01.259290 2026] [:error] [pid 63099:tid 63150] [client 13.77.106.80:2101] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVbUIcmCZokRPYUhzvj42gAAAFA"]
[Fri Jan 02 04:08:01.949351 2026] [:error] [pid 63098:tid 63117] [client 13.77.106.80:2075] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVbUIcez9k78gUs48kp1xAAAAAo"]
[Fri Jan 02 04:08:02.646309 2026] [:error] [pid 63098:tid 63118] [client 13.77.106.80:2091] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVbUIsez9k78gUs48kp1xQAAAAs"]
[Fri Jan 02 04:08:03.468530 2026] [:error] [pid 63100:tid 63185] [client 13.77.106.80:2109] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVbUIzuUXUKd3KTnKl9zrQAAAJg"]
[Fri Jan 02 04:08:04.047618 2026] [:error] [pid 63100:tid 63163] [client 13.77.106.80:1939] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVbUJDuUXUKd3KTnKl9zrwAAAII"]
[Fri Jan 02 04:08:04.799977 2026] [:error] [pid 63099:tid 63137] [client 13.77.106.80:2020] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVbUJMmCZokRPYUhzvj44gAAAEM"]
[Fri Jan 02 04:08:05.325073 2026] [:error] [pid 63098:tid 63109] [client 13.77.106.80:2011] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVbUJcez9k78gUs48kp1xwAAAAI"]
[Fri Jan 02 04:08:06.155716 2026] [:error] [pid 63099:tid 63141] [client 13.77.106.80:2084] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVbUJsmCZokRPYUhzvj44wAAAEc"]
[Fri Jan 02 04:08:06.886336 2026] [:error] [pid 63208:tid 63233] [client 13.77.106.80:2018] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVbUJnKLI9INGPLzfndRIwAAANY"]
[Fri Jan 02 04:08:07.425831 2026] [:error] [pid 63099:tid 63146] [client 13.77.106.80:2104] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVbUJ8mCZokRPYUhzvj45gAAAEw"]
[Fri Jan 02 04:08:07.954112 2026] [:error] [pid 63099:tid 63155] [client 13.77.106.80:1989] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVbUJ8mCZokRPYUhzvj45wAAAFU"]
[Fri Jan 02 04:08:08.550843 2026] [:error] [pid 63099:tid 63150] [client 13.77.106.80:2141] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVbUKMmCZokRPYUhzvj46gAAAFA"]
[Fri Jan 02 04:08:09.343421 2026] [:error] [pid 63098:tid 63122] [client 13.77.106.80:1973] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVbUKcez9k78gUs48kp1zAAAAA8"]
[Fri Jan 02 04:08:10.399839 2026] [:error] [pid 63100:tid 63176] [client 13.77.106.80:1945] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVbUKjuUXUKd3KTnKl9zuAAAAI8"]
[Fri Jan 02 04:08:11.046246 2026] [:error] [pid 63100:tid 63183] [client 13.77.106.80:2083] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVbUKzuUXUKd3KTnKl9zvAAAAJY"]
[Fri Jan 02 04:08:11.576035 2026] [:error] [pid 63208:tid 63219] [client 13.77.106.80:2131] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVbUK3KLI9INGPLzfndRJgAAAMg"]
[Fri Jan 02 04:08:12.052240 2026] [:error] [pid 63100:tid 63168] [client 13.77.106.80:1920] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aVbULDuUXUKd3KTnKl9zwgAAAIc"]
[Fri Jan 02 04:08:12.655777 2026] [:error] [pid 63100:tid 63180] [client 13.77.106.80:2056] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aVbULDuUXUKd3KTnKl9zxAAAAJM"]
[Fri Jan 02 04:08:13.359653 2026] [:error] [pid 63100:tid 63181] [client 13.77.106.80:2037] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aVbULTuUXUKd3KTnKl9zxwAAAJQ"]
[Fri Jan 02 04:08:14.220200 2026] [:error] [pid 63100:tid 63172] [client 13.77.106.80:2025] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aVbULjuUXUKd3KTnKl9zyAAAAIs"]
[Fri Jan 02 04:08:15.276038 2026] [:error] [pid 63098:tid 63124] [client 13.77.106.80:1948] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aVbUL8ez9k78gUs48kp10wAAABE"]
[Fri Jan 02 04:08:17.832279 2026] [:error] [pid 63100:tid 63185] [client 13.77.106.80:2033] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aVbUMTuUXUKd3KTnKl9z0QAAAJg"]
[Fri Jan 02 04:08:18.412378 2026] [:error] [pid 63099:tid 63157] [client 13.77.106.80:2019] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aVbUMsmCZokRPYUhzvj49AAAAFc"]
[Fri Jan 02 04:08:18.954428 2026] [:error] [pid 63099:tid 63152] [client 13.77.106.80:1937] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aVbUMsmCZokRPYUhzvj49gAAAFI"]
[Fri Jan 02 04:08:20.188758 2026] [:error] [pid 63099:tid 63149] [client 13.77.106.80:2160] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVbUNMmCZokRPYUhzvj4-wAAAE8"]
[Fri Jan 02 04:08:21.026093 2026] [:error] [pid 63208:tid 63230] [client 13.77.106.80:2162] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVbUNXKLI9INGPLzfndRKgAAANM"]
[Fri Jan 02 04:08:21.984677 2026] [:error] [pid 63208:tid 63225] [client 13.77.106.80:2093] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVbUNXKLI9INGPLzfndRLQAAAM4"]
[Fri Jan 02 04:08:23.194116 2026] [:error] [pid 63208:tid 63217] [client 13.77.106.80:1971] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVbUN3KLI9INGPLzfndRMwAAAMY"]
[Fri Jan 02 04:08:24.899868 2026] [:error] [pid 63208:tid 63216] [client 13.77.106.80:2050] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aVbUOHKLI9INGPLzfndROgAAAMU"]
[Fri Jan 02 04:08:25.889624 2026] [:error] [pid 63208:tid 63225] [client 13.77.106.80:2092] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aVbUOXKLI9INGPLzfndRPgAAAM4"]
[Fri Jan 02 04:08:26.503880 2026] [:error] [pid 63208:tid 63223] [client 13.77.106.80:1987] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aVbUOnKLI9INGPLzfndRQAAAAMw"]
[Fri Jan 02 04:08:27.303663 2026] [:error] [pid 63098:tid 63119] [client 13.77.106.80:1925] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aVbUO8ez9k78gUs48kp13QAAAAw"]
[Fri Jan 02 04:08:27.926900 2026] [:error] [pid 63208:tid 63216] [client 13.77.106.80:1986] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aVbUO3KLI9INGPLzfndRRgAAAMU"]
[Fri Jan 02 04:08:28.523626 2026] [:error] [pid 63098:tid 63123] [client 13.77.106.80:1927] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aVbUPMez9k78gUs48kp13gAAABA"]
[Fri Jan 02 04:08:29.176569 2026] [:error] [pid 63208:tid 63230] [client 13.77.106.80:1951] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aVbUPXKLI9INGPLzfndRSgAAANM"]
[Fri Jan 02 04:08:29.816597 2026] [:error] [pid 63098:tid 63117] [client 13.77.106.80:1926] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aVbUPcez9k78gUs48kp14wAAAAo"]
[Fri Jan 02 04:08:30.315814 2026] [:error] [pid 63099:tid 63136] [client 13.77.106.80:2041] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVbUPsmCZokRPYUhzvj4_wAAAEI"]
[Fri Jan 02 04:08:31.013960 2026] [:error] [pid 63099:tid 63146] [client 13.77.106.80:2000] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVbUP8mCZokRPYUhzvj5AQAAAEw"]
[Fri Jan 02 04:08:31.626489 2026] [:error] [pid 63099:tid 63145] [client 13.77.106.80:2014] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVbUP8mCZokRPYUhzvj5AgAAAEs"]
[Fri Jan 02 04:08:32.145527 2026] [:error] [pid 63208:tid 63215] [client 13.77.106.80:2031] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVbUQHKLI9INGPLzfndRVQAAAMQ"]
[Fri Jan 02 04:08:32.792651 2026] [:error] [pid 63100:tid 63163] [client 13.77.106.80:2065] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aVbUQDuUXUKd3KTnKl9z1QAAAII"]
[Fri Jan 02 04:08:33.327097 2026] [:error] [pid 63100:tid 63162] [client 13.77.106.80:1921] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aVbUQTuUXUKd3KTnKl9z1gAAAIE"]
[Fri Jan 02 04:08:33.905678 2026] [:error] [pid 63208:tid 63220] [client 13.77.106.80:1981] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aVbUQXKLI9INGPLzfndRWwAAAMk"]
[Fri Jan 02 04:08:34.506149 2026] [:error] [pid 63098:tid 63121] [client 13.77.106.80:1934] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aVbUQsez9k78gUs48kp15gAAAA4"]
[Fri Jan 02 04:08:35.079075 2026] [:error] [pid 63099:tid 63155] [client 13.77.106.80:2066] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVbUQ8mCZokRPYUhzvj5BAAAAFU"]
[Fri Jan 02 04:08:35.646953 2026] [:error] [pid 63100:tid 63181] [client 13.77.106.80:2158] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVbUQzuUXUKd3KTnKl9z2QAAAJQ"]
[Fri Jan 02 04:08:36.250413 2026] [:error] [pid 63100:tid 63170] [client 13.77.106.80:1980] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVbURDuUXUKd3KTnKl9z2gAAAIk"]
[Fri Jan 02 04:08:37.087451 2026] [:error] [pid 63100:tid 63177] [client 13.77.106.80:1975] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVbURTuUXUKd3KTnKl9z2wAAAJA"]
[Fri Jan 02 04:08:37.727535 2026] [:error] [pid 63100:tid 63173] [client 13.77.106.80:1796] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVbURTuUXUKd3KTnKl9z3gAAAIw"]
[Fri Jan 02 04:08:39.206394 2026] [:error] [pid 63208:tid 63235] [client 13.77.106.80:2015] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVbUR3KLI9INGPLzfndRbAAAANg"]
[Fri Jan 02 04:08:39.911106 2026] [:error] [pid 63208:tid 63217] [client 13.77.106.80:2042] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVbUR3KLI9INGPLzfndRbwAAAMY"]
[Fri Jan 02 04:08:40.878755 2026] [:error] [pid 63208:tid 63211] [client 13.77.106.80:2038] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aVbUSHKLI9INGPLzfndRcgAAAMA"]
[Fri Jan 02 04:08:41.697818 2026] [:error] [pid 63208:tid 63221] [client 13.77.106.80:2087] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aVbUSXKLI9INGPLzfndReAAAAMo"]
[Fri Jan 02 04:08:42.190632 2026] [:error] [pid 63098:tid 63117] [client 13.77.106.80:2159] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aVbUSsez9k78gUs48kp18QAAAAo"]
[Fri Jan 02 04:08:42.800177 2026] [:error] [pid 63098:tid 63116] [client 13.77.106.80:1954] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aVbUSsez9k78gUs48kp19AAAAAk"]
[Fri Jan 02 04:08:43.427101 2026] [:error] [pid 63098:tid 63114] [client 13.77.106.80:2035] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aVbUS8ez9k78gUs48kp1-QAAAAc"]
[Fri Jan 02 04:08:43.971893 2026] [:error] [pid 63100:tid 63173] [client 13.77.106.80:2100] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aVbUSzuUXUKd3KTnKl90CwAAAIw"]
[Fri Jan 02 04:08:44.588456 2026] [:error] [pid 63100:tid 63161] [client 13.77.106.80:1932] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aVbUTDuUXUKd3KTnKl90EwAAAIA"]
[Fri Jan 02 04:08:49.811601 2026] [:error] [pid 63208:tid 63217] [client 13.77.106.80:2129] [client 13.77.106.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVbUUXKLI9INGPLzfndRjgAAAMY"]
[Fri Jan 02 04:08:51.195642 2026] [:error] [pid 63208:tid 63225] [client 13.77.106.80:1859] [client 13.77.106.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVbUU3KLI9INGPLzfndRkwAAAM4"]
[Fri Jan 02 04:08:53.606465 2026] [:error] [pid 63208:tid 63223] [client 13.77.106.80:1965] [client 13.77.106.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVbUVXKLI9INGPLzfndRnQAAAMw"]
[Fri Jan 02 04:08:54.854046 2026] [:error] [pid 63099:tid 63156] [client 13.77.106.80:2005] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVbUVsmCZokRPYUhzvj5EAAAAFY"]
[Fri Jan 02 04:08:55.527221 2026] [:error] [pid 63208:tid 63222] [client 13.77.106.80:2088] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVbUV3KLI9INGPLzfndRnwAAAMs"]
[Fri Jan 02 04:08:56.388254 2026] [:error] [pid 63208:tid 63226] [client 13.77.106.80:2102] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVbUWHKLI9INGPLzfndRoAAAAM8"]
[Fri Jan 02 04:08:56.967614 2026] [:error] [pid 63208:tid 63231] [client 13.77.106.80:1943] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aVbUWHKLI9INGPLzfndRogAAANQ"]
[Fri Jan 02 04:08:57.414842 2026] [:error] [pid 63208:tid 63225] [client 13.77.106.80:2086] [client 13.77.106.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVbUWXKLI9INGPLzfndRowAAAM4"]
[Fri Jan 02 04:08:57.977672 2026] [:error] [pid 63098:tid 63117] [client 13.77.106.80:1895] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aVbUWcez9k78gUs48kp2DwAAAAo"]
[Fri Jan 02 04:08:58.506878 2026] [:error] [pid 63098:tid 63120] [client 13.77.106.80:1899] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aVbUWsez9k78gUs48kp2EAAAAA0"]
[Fri Jan 02 04:08:59.152128 2026] [:error] [pid 63208:tid 63214] [client 13.77.106.80:2028] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aVbUW3KLI9INGPLzfndRpgAAAMM"]
[Fri Jan 02 04:08:59.905963 2026] [:error] [pid 63100:tid 63172] [client 13.77.106.80:1997] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aVbUWzuUXUKd3KTnKl90IgAAAIs"]
[Fri Jan 02 04:09:00.417186 2026] [:error] [pid 63100:tid 63165] [client 13.77.106.80:2110] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aVbUXDuUXUKd3KTnKl90JAAAAIQ"]
[Fri Jan 02 04:09:00.882106 2026] [:error] [pid 63100:tid 63175] [client 13.77.106.80:1963] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aVbUXDuUXUKd3KTnKl90JgAAAI4"]
[Fri Jan 02 04:09:01.413250 2026] [:error] [pid 63100:tid 63162] [client 13.77.106.80:1938] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aVbUXTuUXUKd3KTnKl90KQAAAIE"]
[Fri Jan 02 04:09:02.279128 2026] [:error] [pid 63208:tid 63223] [client 13.77.106.80:1912] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aVbUXnKLI9INGPLzfndRqQAAAMw"]
[Fri Jan 02 04:09:03.336458 2026] [:error] [pid 63208:tid 63229] [client 13.77.106.80:1964] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aVbUX3KLI9INGPLzfndRqgAAANI"]
[Fri Jan 02 04:09:04.089971 2026] [:error] [pid 63208:tid 63231] [client 13.77.106.80:1972] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aVbUYHKLI9INGPLzfndRrgAAANQ"]
[Fri Jan 02 04:09:04.655298 2026] [:error] [pid 63208:tid 63211] [client 13.77.106.80:1994] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aVbUYHKLI9INGPLzfndRsQAAAMA"]
[Fri Jan 02 04:09:05.332233 2026] [:error] [pid 63208:tid 63214] [client 13.77.106.80:1930] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVbUYXKLI9INGPLzfndRtAAAAMM"]
[Fri Jan 02 04:09:05.986322 2026] [:error] [pid 63100:tid 63176] [client 13.77.106.80:1982] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVbUYTuUXUKd3KTnKl90LwAAAI8"]
[Fri Jan 02 04:09:06.493905 2026] [:error] [pid 63099:tid 63140] [client 13.77.106.80:1933] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVbUYsmCZokRPYUhzvj5GgAAAEY"]
[Fri Jan 02 04:09:07.097662 2026] [:error] [pid 63208:tid 63215] [client 13.77.106.80:1999] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aVbUY3KLI9INGPLzfndRtgAAAMQ"]
[Fri Jan 02 04:09:07.727750 2026] [:error] [pid 63208:tid 63233] [client 13.77.106.80:2111] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVbUY3KLI9INGPLzfndRuQAAANY"]
[Fri Jan 02 04:09:08.313814 2026] [:error] [pid 63208:tid 63232] [client 13.77.106.80:2021] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVbUZHKLI9INGPLzfndRugAAANU"]
[Fri Jan 02 04:09:09.229782 2026] [:error] [pid 63098:tid 63109] [client 13.77.106.80:1889] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVbUZcez9k78gUs48kp2FAAAAAI"]
[Fri Jan 02 04:09:09.687910 2026] [:error] [pid 63208:tid 63216] [client 13.77.106.80:1950] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVbUZXKLI9INGPLzfndRuwAAAMU"]
[Fri Jan 02 04:09:10.216051 2026] [:error] [pid 63208:tid 63222] [client 13.77.106.80:1959] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aVbUZnKLI9INGPLzfndRvgAAAMs"]
[Fri Jan 02 04:09:10.888588 2026] [:error] [pid 63100:tid 63172] [client 13.77.106.80:1894] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aVbUZjuUXUKd3KTnKl90NQAAAIs"]
[Fri Jan 02 04:09:11.582682 2026] [:error] [pid 63099:tid 63142] [client 13.77.106.80:1956] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aVbUZ8mCZokRPYUhzvj5IAAAAEg"]
[Fri Jan 02 04:09:12.358332 2026] [:error] [pid 63208:tid 63218] [client 13.77.106.80:2099] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aVbUaHKLI9INGPLzfndRwgAAAMc"]
[Fri Jan 02 04:09:12.868331 2026] [:error] [pid 63100:tid 63182] [client 13.77.106.80:2105] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVbUaDuUXUKd3KTnKl90OAAAAJU"]
[Fri Jan 02 04:09:13.456675 2026] [:error] [pid 63208:tid 63211] [client 13.77.106.80:1875] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVbUaXKLI9INGPLzfndRwwAAAMA"]
[Fri Jan 02 04:09:13.985340 2026] [:error] [pid 63208:tid 63234] [client 13.77.106.80:1947] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVbUaXKLI9INGPLzfndRxQAAANc"]
[Fri Jan 02 04:09:14.416610 2026] [:error] [pid 63208:tid 63226] [client 13.77.106.80:1985] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVbUanKLI9INGPLzfndRxgAAAM8"]
[Fri Jan 02 04:09:14.903541 2026] [:error] [pid 63208:tid 63227] [client 13.77.106.80:1946] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVbUanKLI9INGPLzfndRyAAAANA"]
[Fri Jan 02 04:09:15.915830 2026] [:error] [pid 63098:tid 63129] [client 13.77.106.80:1862] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVbUa8ez9k78gUs48kp2FQAAABY"]
[Fri Jan 02 04:09:16.443203 2026] [:error] [pid 63100:tid 63180] [client 13.77.106.80:1998] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVbUbDuUXUKd3KTnKl90OwAAAJM"]
[Fri Jan 02 04:09:17.301691 2026] [:error] [pid 63099:tid 63149] [client 13.77.106.80:1940] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVbUbcmCZokRPYUhzvj5MgAAAE8"]
[Fri Jan 02 04:09:17.991046 2026] [:error] [pid 63208:tid 63219] [client 13.77.106.80:1882] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVbUbXKLI9INGPLzfndRzQAAAMg"]
[Fri Jan 02 04:09:18.557480 2026] [:error] [pid 63098:tid 63113] [client 13.77.106.80:1961] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVbUbsez9k78gUs48kp2HAAAAAY"]
[Fri Jan 02 04:09:19.110395 2026] [:error] [pid 63098:tid 63122] [client 13.77.106.80:1896] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVbUb8ez9k78gUs48kp2HgAAAA8"]
[Fri Jan 02 04:09:19.996181 2026] [:error] [pid 63208:tid 63216] [client 13.77.106.80:1996] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVbUb3KLI9INGPLzfndR0AAAAMU"]
[Fri Jan 02 04:09:20.676724 2026] [:error] [pid 63098:tid 63127] [client 13.77.106.80:1822] [client 13.77.106.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVbUcMez9k78gUs48kp2IwAAABQ"]
[Fri Jan 02 04:09:21.234305 2026] [:error] [pid 63208:tid 63223] [client 13.77.106.80:1974] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVbUcXKLI9INGPLzfndR0QAAAMw"]
[Fri Jan 02 04:09:21.929483 2026] [:error] [pid 63208:tid 63211] [client 13.77.106.80:1929] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVbUcXKLI9INGPLzfndR1gAAAMA"]
[Fri Jan 02 04:09:22.430596 2026] [:error] [pid 63098:tid 63114] [client 13.77.106.80:2024] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVbUcsez9k78gUs48kp2JAAAAAc"]
[Fri Jan 02 04:09:23.045657 2026] [:error] [pid 63100:tid 63181] [client 13.77.106.80:1831] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVbUczuUXUKd3KTnKl90QAAAAJQ"]
[Fri Jan 02 04:09:23.709108 2026] [:error] [pid 63208:tid 63215] [client 13.77.106.80:1962] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVbUc3KLI9INGPLzfndR2QAAAMQ"]
[Fri Jan 02 04:09:24.720275 2026] [:error] [pid 63099:tid 63148] [client 13.77.106.80:1907] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVbUdMmCZokRPYUhzvj5OwAAAE4"]
[Fri Jan 02 04:09:25.276744 2026] [:error] [pid 63099:tid 63153] [client 13.77.106.80:1955] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVbUdcmCZokRPYUhzvj5PQAAAFM"]
[Fri Jan 02 04:09:25.861320 2026] [:error] [pid 63099:tid 63151] [client 13.77.106.80:1860] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVbUdcmCZokRPYUhzvj5PwAAAFE"]
[Fri Jan 02 04:09:26.611792 2026] [:error] [pid 63098:tid 63113] [client 13.77.106.80:1983] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVbUdsez9k78gUs48kp2JwAAAAY"]
[Fri Jan 02 04:09:27.480825 2026] [:error] [pid 63100:tid 63182] [client 13.77.106.80:1865] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVbUdzuUXUKd3KTnKl90SAAAAJU"]
[Fri Jan 02 04:09:28.170927 2026] [:error] [pid 63098:tid 63117] [client 13.77.106.80:1887] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVbUeMez9k78gUs48kp2KQAAAAo"]
[Fri Jan 02 04:09:28.723982 2026] [:error] [pid 63098:tid 63110] [client 13.77.106.80:2034] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVbUeMez9k78gUs48kp2KwAAAAM"]
[Fri Jan 02 04:09:29.392294 2026] [:error] [pid 63208:tid 63216] [client 13.77.106.80:1898] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVbUeXKLI9INGPLzfndR3gAAAMU"]
[Fri Jan 02 04:09:29.843657 2026] [:error] [pid 63098:tid 63115] [client 13.77.106.80:1866] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVbUecez9k78gUs48kp2LAAAAAg"]
[Fri Jan 02 04:09:30.583479 2026] [:error] [pid 63208:tid 63223] [client 13.77.106.80:1867] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVbUenKLI9INGPLzfndR4gAAAMw"]
[Fri Jan 02 04:09:31.388170 2026] [:error] [pid 63208:tid 63222] [client 13.77.106.80:1963] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVbUe3KLI9INGPLzfndR5AAAAMs"]
[Fri Jan 02 04:09:32.165419 2026] [:error] [pid 63098:tid 63116] [client 13.77.106.80:2039] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVbUfMez9k78gUs48kp2LwAAAAk"]
[Fri Jan 02 04:09:32.707793 2026] [:error] [pid 63099:tid 63158] [client 13.77.106.80:1941] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVbUfMmCZokRPYUhzvj5RgAAAFg"]
[Fri Jan 02 04:09:33.554073 2026] [:error] [pid 63208:tid 63211] [client 13.77.106.80:1931] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVbUfXKLI9INGPLzfndR5wAAAMA"]
[Fri Jan 02 04:09:34.312010 2026] [:error] [pid 63100:tid 63168] [client 13.77.106.80:1970] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVbUfjuUXUKd3KTnKl90UAAAAIc"]
[Fri Jan 02 04:09:34.905227 2026] [:error] [pid 63208:tid 63225] [client 13.77.106.80:2009] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVbUfnKLI9INGPLzfndR6gAAAM4"]
[Fri Jan 02 04:09:35.595207 2026] [:error] [pid 63100:tid 63181] [client 13.77.106.80:1861] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVbUfzuUXUKd3KTnKl90UQAAAJQ"]
[Fri Jan 02 04:09:36.070009 2026] [:error] [pid 63099:tid 63137] [client 13.77.106.80:1857] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVbUgMmCZokRPYUhzvj5SAAAAEM"]
[Fri Jan 02 04:09:36.568169 2026] [:error] [pid 63099:tid 63148] [client 13.77.106.80:1922] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aVbUgMmCZokRPYUhzvj5SgAAAE4"]
[Fri Jan 02 04:09:37.063743 2026] [:error] [pid 63099:tid 63136] [client 13.77.106.80:1891] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aVbUgcmCZokRPYUhzvj5TAAAAEI"]
[Fri Jan 02 04:09:37.474214 2026] [:error] [pid 63208:tid 63216] [client 13.77.106.80:1797] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aVbUgXKLI9INGPLzfndR8AAAAMU"]
[Fri Jan 02 04:09:38.065895 2026] [:error] [pid 63208:tid 63220] [client 13.77.106.80:1976] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aVbUgnKLI9INGPLzfndR8QAAAMk"]
[Fri Jan 02 04:09:38.536609 2026] [:error] [pid 63208:tid 63233] [client 13.77.106.80:1884] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aVbUgnKLI9INGPLzfndR8wAAANY"]
[Fri Jan 02 04:09:39.056007 2026] [:error] [pid 63099:tid 63138] [client 13.77.106.80:1892] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aVbUg8mCZokRPYUhzvj5TwAAAEQ"]
[Fri Jan 02 04:09:39.556150 2026] [:error] [pid 63099:tid 63155] [client 13.77.106.80:1992] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aVbUg8mCZokRPYUhzvj5UAAAAFU"]
[Fri Jan 02 04:09:40.034984 2026] [:error] [pid 63099:tid 63150] [client 13.77.106.80:2085] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aVbUhMmCZokRPYUhzvj5UgAAAFA"]
[Fri Jan 02 04:09:40.463033 2026] [:error] [pid 63099:tid 63147] [client 13.77.106.80:1904] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aVbUhMmCZokRPYUhzvj5VQAAAE0"]
[Fri Jan 02 04:09:40.993119 2026] [:error] [pid 63099:tid 63143] [client 13.77.106.80:1968] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aVbUhMmCZokRPYUhzvj5VwAAAEk"]
[Fri Jan 02 04:09:41.502623 2026] [:error] [pid 63099:tid 63142] [client 13.77.106.80:1858] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aVbUhcmCZokRPYUhzvj5WgAAAEg"]
[Fri Jan 02 04:09:42.120460 2026] [:error] [pid 63208:tid 63219] [client 13.77.106.80:2108] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aVbUhnKLI9INGPLzfndR9AAAAMg"]
[Fri Jan 02 04:09:42.589043 2026] [:error] [pid 63208:tid 63222] [client 13.77.106.80:1874] [client 13.77.106.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVbUhnKLI9INGPLzfndR9wAAAMs"]
[Fri Jan 02 04:09:43.195969 2026] [:error] [pid 63098:tid 63123] [client 13.77.106.80:2046] [client 13.77.106.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aVbUh8ez9k78gUs48kp2OQAAABA"]
[Fri Jan 02 04:09:43.727713 2026] [:error] [pid 63100:tid 63161] [client 13.77.106.80:2007] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aVbUhzuUXUKd3KTnKl90VAAAAIA"]
[Fri Jan 02 04:09:44.368702 2026] [:error] [pid 63208:tid 63218] [client 13.77.106.80:2167] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aVbUiHKLI9INGPLzfndR-QAAAMc"]
[Fri Jan 02 04:09:45.434461 2026] [:error] [pid 63208:tid 63235] [client 13.77.106.80:1901] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aVbUiXKLI9INGPLzfndR_QAAANg"]
[Fri Jan 02 04:09:46.544428 2026] [:error] [pid 63098:tid 63109] [client 13.77.106.80:1883] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aVbUisez9k78gUs48kp2PwAAAAI"]
[Fri Jan 02 04:09:47.147748 2026] [:error] [pid 63208:tid 63221] [client 13.77.106.80:1881] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aVbUi3KLI9INGPLzfndSAgAAAMo"]
[Fri Jan 02 04:09:47.763778 2026] [:error] [pid 63208:tid 63214] [client 13.77.106.80:1944] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aVbUi3KLI9INGPLzfndSAwAAAMM"]
[Fri Jan 02 04:09:48.324319 2026] [:error] [pid 63100:tid 63182] [client 13.77.106.80:1830] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aVbUjDuUXUKd3KTnKl90WQAAAJU"]
[Fri Jan 02 04:09:49.071023 2026] [:error] [pid 63098:tid 63128] [client 13.77.106.80:1868] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVbUjcez9k78gUs48kp2QgAAABU"]
[Fri Jan 02 04:09:49.887007 2026] [:error] [pid 63098:tid 63112] [client 13.77.106.80:2022] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVbUjcez9k78gUs48kp2RAAAAAU"]
[Fri Jan 02 04:09:50.565291 2026] [:error] [pid 63098:tid 63131] [client 13.77.106.80:1807] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVbUjsez9k78gUs48kp2RwAAABg"]
[Fri Jan 02 04:09:51.131339 2026] [:error] [pid 63098:tid 63122] [client 13.77.106.80:1850] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVbUj8ez9k78gUs48kp2SQAAAA8"]
[Fri Jan 02 04:09:51.755510 2026] [:error] [pid 63208:tid 63225] [client 13.77.106.80:1953] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aVbUj3KLI9INGPLzfndSCgAAAM4"]
[Fri Jan 02 04:09:52.338836 2026] [:error] [pid 63099:tid 63147] [client 13.77.106.80:1801] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aVbUkMmCZokRPYUhzvj5ZgAAAE0"]
[Fri Jan 02 04:09:52.932955 2026] [:error] [pid 63098:tid 63108] [client 13.77.106.80:1923] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aVbUkMez9k78gUs48kp2TAAAAAE"]
[Fri Jan 02 04:09:53.452614 2026] [:error] [pid 63098:tid 63109] [client 13.77.106.80:1872] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aVbUkcez9k78gUs48kp2TgAAAAI"]
[Fri Jan 02 04:10:00.053251 2026] [:error] [pid 63098:tid 63131] [client 13.77.106.80:1871] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aVbUmMez9k78gUs48kp2bgAAABg"]
[Fri Jan 02 04:10:01.240661 2026] [:error] [pid 63099:tid 63149] [client 13.77.106.80:1733] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aVbUmcmCZokRPYUhzvj5dwAAAE8"]
[Fri Jan 02 04:10:01.854611 2026] [:error] [pid 63208:tid 63219] [client 13.77.106.80:1900] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aVbUmXKLI9INGPLzfndSEwAAAMg"]
[Fri Jan 02 04:10:02.692996 2026] [:error] [pid 63100:tid 63185] [client 13.77.106.80:1885] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aVbUmjuUXUKd3KTnKl90bwAAAJg"]
[Fri Jan 02 04:10:03.235253 2026] [:error] [pid 63099:tid 63141] [client 13.77.106.80:1812] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aVbUm8mCZokRPYUhzvj5egAAAEc"]
[Fri Jan 02 04:10:03.749281 2026] [:error] [pid 63208:tid 63212] [client 13.77.106.80:1805] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aVbUm3KLI9INGPLzfndSFgAAAME"]
[Fri Jan 02 04:10:04.463005 2026] [:error] [pid 63098:tid 63116] [client 13.77.106.80:1897] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aVbUnMez9k78gUs48kp2dgAAAAk"]
[Fri Jan 02 04:10:05.164813 2026] [:error] [pid 63208:tid 63218] [client 13.77.106.80:1957] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aVbUnXKLI9INGPLzfndSGAAAAMc"]
[Fri Jan 02 04:10:05.908992 2026] [:error] [pid 63208:tid 63234] [client 13.77.106.80:1847] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aVbUnXKLI9INGPLzfndSGgAAANc"]
[Fri Jan 02 04:10:06.582835 2026] [:error] [pid 63100:tid 63161] [client 13.77.106.80:1913] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aVbUnjuUXUKd3KTnKl90dgAAAIA"]
[Fri Jan 02 04:10:07.245192 2026] [:error] [pid 63100:tid 63178] [client 13.77.106.80:2002] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aVbUnzuUXUKd3KTnKl90eQAAAJE"]
[Fri Jan 02 04:10:07.775134 2026] [:error] [pid 63099:tid 63136] [client 13.77.106.80:1905] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aVbUn8mCZokRPYUhzvj5fAAAAEI"]
[Fri Jan 02 04:10:08.491273 2026] [:error] [pid 63100:tid 63169] [client 13.77.106.80:1873] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aVbUoDuUXUKd3KTnKl90ewAAAIg"]
[Fri Jan 02 04:10:09.220779 2026] [:error] [pid 63099:tid 63139] [client 13.77.106.80:2130] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aVbUocmCZokRPYUhzvj5fwAAAEU"]
[Fri Jan 02 04:10:10.117938 2026] [:error] [pid 63208:tid 63215] [client 13.77.106.80:1810] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aVbUonKLI9INGPLzfndSIQAAAMQ"]
[Fri Jan 02 04:10:11.194457 2026] [:error] [pid 63100:tid 63180] [client 13.77.106.80:1903] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aVbUozuUXUKd3KTnKl90fwAAAJM"]
[Fri Jan 02 04:10:11.960930 2026] [:error] [pid 63100:tid 63175] [client 13.77.106.80:1877] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aVbUozuUXUKd3KTnKl90ggAAAI4"]
[Fri Jan 02 04:10:12.700279 2026] [:error] [pid 63099:tid 63154] [client 13.77.106.80:1942] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aVbUpMmCZokRPYUhzvj5hQAAAFQ"]
[Fri Jan 02 04:10:13.222027 2026] [:error] [pid 63099:tid 63134] [client 13.77.106.80:2043] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aVbUpcmCZokRPYUhzvj5hwAAAEA"]
[Fri Jan 02 04:10:13.669780 2026] [:error] [pid 63098:tid 63125] [client 13.77.106.80:1906] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aVbUpcez9k78gUs48kp2fAAAABI"]
[Fri Jan 02 04:10:14.245217 2026] [:error] [pid 63098:tid 63118] [client 13.77.106.80:1821] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aVbUpsez9k78gUs48kp2fQAAAAs"]
[Fri Jan 02 04:10:14.740760 2026] [:error] [pid 63208:tid 63235] [client 13.77.106.80:1828] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aVbUpnKLI9INGPLzfndSLgAAANg"]
[Fri Jan 02 04:10:15.335775 2026] [:error] [pid 63208:tid 63221] [client 13.77.106.80:1890] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aVbUp3KLI9INGPLzfndSNAAAAMo"]
[Fri Jan 02 04:10:15.858344 2026] [:error] [pid 63099:tid 63147] [client 13.77.106.80:1978] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aVbUp8mCZokRPYUhzvj5iQAAAE0"]
[Fri Jan 02 04:10:16.657165 2026] [:error] [pid 63098:tid 63113] [client 13.77.106.80:1879] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aVbUqMez9k78gUs48kp2gAAAAAY"]
[Fri Jan 02 04:10:17.325295 2026] [:error] [pid 63100:tid 63176] [client 13.77.106.80:1809] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aVbUqTuUXUKd3KTnKl90hgAAAI8"]
[Fri Jan 02 04:10:17.968285 2026] [:error] [pid 63099:tid 63137] [client 13.77.106.80:1823] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aVbUqcmCZokRPYUhzvj5jAAAAEM"]
[Fri Jan 02 04:10:19.404604 2026] [:error] [pid 63100:tid 63183] [client 13.77.106.80:1952] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aVbUqzuUXUKd3KTnKl90iAAAAJY"]
[Fri Jan 02 04:10:20.174474 2026] [:error] [pid 63100:tid 63165] [client 13.77.106.80:1870] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVbUrDuUXUKd3KTnKl90iwAAAIQ"]
[Fri Jan 02 04:10:20.672135 2026] [:error] [pid 63208:tid 63235] [client 13.77.106.80:1730] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVbUrHKLI9INGPLzfndSQgAAANg"]
[Fri Jan 02 04:10:21.287761 2026] [:error] [pid 63208:tid 63213] [client 13.77.106.80:1799] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVbUrXKLI9INGPLzfndSRgAAAMI"]
[Fri Jan 02 04:10:21.872256 2026] [:error] [pid 63208:tid 63214] [client 13.77.106.80:1918] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVbUrXKLI9INGPLzfndSSAAAAMM"]
[Fri Jan 02 04:10:22.439522 2026] [:error] [pid 63208:tid 63212] [client 13.77.106.80:1977] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVbUrnKLI9INGPLzfndSTgAAAME"]
[Fri Jan 02 04:10:23.111868 2026] [:error] [pid 63098:tid 63116] [client 13.77.106.80:1841] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVbUr8ez9k78gUs48kp2hQAAAAk"]
[Fri Jan 02 04:10:23.933770 2026] [:error] [pid 63208:tid 63234] [client 13.77.106.80:1815] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVbUr3KLI9INGPLzfndSUgAAANc"]
[Fri Jan 02 04:10:24.417147 2026] [:error] [pid 63099:tid 63135] [client 13.77.106.80:2157] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVbUsMmCZokRPYUhzvj5kwAAAEE"]
[Fri Jan 02 04:10:25.267434 2026] [:error] [pid 63098:tid 63115] [client 13.77.106.80:1917] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aVbUscez9k78gUs48kp2iwAAAAg"]
[Fri Jan 02 04:10:26.328779 2026] [:error] [pid 63098:tid 63129] [client 13.77.106.80:1910] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aVbUssez9k78gUs48kp2jQAAABY"]
[Fri Jan 02 04:10:26.808088 2026] [:error] [pid 63100:tid 63170] [client 13.77.106.80:1739] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aVbUsjuUXUKd3KTnKl90kwAAAIk"]
[Fri Jan 02 04:10:27.260330 2026] [:error] [pid 63208:tid 63223] [client 13.77.106.80:1806] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aVbUs3KLI9INGPLzfndSVQAAAMw"]
[Fri Jan 02 04:10:28.176096 2026] [:error] [pid 63100:tid 63164] [client 13.77.106.80:1966] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aVbUtDuUXUKd3KTnKl90lwAAAIM"]
[Fri Jan 02 04:10:29.141937 2026] [:error] [pid 63100:tid 63166] [client 13.77.106.80:1728] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aVbUtTuUXUKd3KTnKl90mgAAAIU"]
[Fri Jan 02 04:10:30.063895 2026] [:error] [pid 63098:tid 63125] [client 13.77.106.80:1928] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aVbUtsez9k78gUs48kp2jwAAABI"]
[Fri Jan 02 04:10:30.913500 2026] [:error] [pid 63099:tid 63149] [client 13.77.106.80:1813] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aVbUtsmCZokRPYUhzvj5nAAAAE8"]
[Fri Jan 02 04:10:32.098693 2026] [:error] [pid 63099:tid 63148] [client 13.77.106.80:1738] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aVbUuMmCZokRPYUhzvj5nwAAAE4"]
[Fri Jan 02 04:10:32.700926 2026] [:error] [pid 63208:tid 63234] [client 13.77.106.80:1836] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aVbUuHKLI9INGPLzfndSXQAAANc"]
[Fri Jan 02 04:10:33.224583 2026] [:error] [pid 63100:tid 63172] [client 13.77.106.80:2164] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aVbUuTuUXUKd3KTnKl90nQAAAIs"]
[Fri Jan 02 04:10:33.856785 2026] [:error] [pid 63099:tid 63156] [client 13.77.106.80:1876] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aVbUucmCZokRPYUhzvj5ogAAAFY"]
[Fri Jan 02 04:10:34.373019 2026] [:error] [pid 63100:tid 63163] [client 13.77.106.80:1909] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aVbUujuUXUKd3KTnKl90oQAAAII"]
[Fri Jan 02 04:10:34.837785 2026] [:error] [pid 63100:tid 63171] [client 13.77.106.80:1839] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aVbUujuUXUKd3KTnKl90owAAAIo"]
[Fri Jan 02 04:10:35.322038 2026] [:error] [pid 63208:tid 63233] [client 13.77.106.80:1818] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aVbUu3KLI9INGPLzfndSZgAAANY"]
[Fri Jan 02 04:10:35.895538 2026] [:error] [pid 63208:tid 63226] [client 13.77.106.80:1878] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aVbUu3KLI9INGPLzfndSaAAAAM8"]
[Fri Jan 02 04:10:36.501079 2026] [:error] [pid 63208:tid 63219] [client 13.77.106.80:2048] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aVbUvHKLI9INGPLzfndSagAAAMg"]
[Fri Jan 02 04:10:36.993239 2026] [:error] [pid 63208:tid 63230] [client 13.77.106.80:1678] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aVbUvHKLI9INGPLzfndSawAAANM"]
[Fri Jan 02 04:10:37.578080 2026] [:error] [pid 63098:tid 63116] [client 13.77.106.80:1855] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aVbUvcez9k78gUs48kp2lgAAAAk"]
[Fri Jan 02 04:10:38.259492 2026] [:error] [pid 63100:tid 63181] [client 13.77.106.80:1853] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aVbUvjuUXUKd3KTnKl90pwAAAJQ"]
[Fri Jan 02 04:10:39.057521 2026] [:error] [pid 63100:tid 63164] [client 13.77.106.80:1886] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aVbUvzuUXUKd3KTnKl90qQAAAIM"]
[Fri Jan 02 04:10:39.873222 2026] [:error] [pid 63098:tid 63120] [client 13.77.106.80:1798] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aVbUv8ez9k78gUs48kp2mQAAAA0"]
[Fri Jan 02 04:10:40.545983 2026] [:error] [pid 63098:tid 63112] [client 13.77.106.80:1911] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aVbUwMez9k78gUs48kp2nQAAAAU"]
[Fri Jan 02 04:10:41.002192 2026] [:error] [pid 63098:tid 63126] [client 13.77.106.80:1824] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aVbUwcez9k78gUs48kp2oAAAABM"]
[Fri Jan 02 04:10:41.490837 2026] [:error] [pid 63099:tid 63134] [client 13.77.106.80:1670] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aVbUwcmCZokRPYUhzvj5pwAAAEA"]
[Fri Jan 02 04:10:42.051388 2026] [:error] [pid 63100:tid 63183] [client 13.77.106.80:1784] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aVbUwjuUXUKd3KTnKl90rAAAAJY"]
[Fri Jan 02 04:10:42.725765 2026] [:error] [pid 63099:tid 63150] [client 13.77.106.80:1792] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aVbUwsmCZokRPYUhzvj5qAAAAFA"]
[Fri Jan 02 04:10:43.293137 2026] [:error] [pid 63099:tid 63152] [client 13.77.106.80:1935] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aVbUw8mCZokRPYUhzvj5qQAAAFI"]
[Fri Jan 02 04:10:43.896244 2026] [:error] [pid 63100:tid 63163] [client 13.77.106.80:1827] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aVbUwzuUXUKd3KTnKl90rgAAAII"]
[Fri Jan 02 04:10:44.456146 2026] [:error] [pid 63100:tid 63161] [client 13.77.106.80:1835] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aVbUxDuUXUKd3KTnKl90rwAAAIA"]
[Fri Jan 02 04:10:44.904514 2026] [:error] [pid 63100:tid 63171] [client 13.77.106.80:1734] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aVbUxDuUXUKd3KTnKl90sAAAAIo"]
[Fri Jan 02 04:10:45.450288 2026] [:error] [pid 63100:tid 63165] [client 13.77.106.80:1893] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aVbUxTuUXUKd3KTnKl90sgAAAIQ"]
[Fri Jan 02 04:10:46.067367 2026] [:error] [pid 63098:tid 63120] [client 13.77.106.80:1851] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aVbUxsez9k78gUs48kp2pgAAAA0"]
[Fri Jan 02 04:10:46.671294 2026] [:error] [pid 63100:tid 63185] [client 13.77.106.80:2017] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aVbUxjuUXUKd3KTnKl90tQAAAJg"]
[Fri Jan 02 04:10:47.243331 2026] [:error] [pid 63208:tid 63215] [client 13.77.106.80:1854] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aVbUx3KLI9INGPLzfndSfQAAAMQ"]
[Fri Jan 02 04:10:47.676487 2026] [:error] [pid 63098:tid 63121] [client 13.77.106.80:1863] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aVbUx8ez9k78gUs48kp2qgAAAA4"]
[Fri Jan 02 04:10:48.219365 2026] [:error] [pid 63098:tid 63126] [client 13.77.106.80:1795] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aVbUyMez9k78gUs48kp2qwAAABM"]
[Fri Jan 02 04:10:48.750300 2026] [:error] [pid 63100:tid 63164] [client 13.77.106.80:1979] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aVbUyDuUXUKd3KTnKl90uAAAAIM"]
[Fri Jan 02 04:10:49.297181 2026] [:error] [pid 63099:tid 63158] [client 13.77.106.80:1693] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aVbUycmCZokRPYUhzvj5rQAAAFg"]
[Fri Jan 02 04:10:49.816698 2026] [:error] [pid 63099:tid 63136] [client 13.77.106.80:1804] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aVbUycmCZokRPYUhzvj5rgAAAEI"]
[Fri Jan 02 04:10:50.336299 2026] [:error] [pid 63100:tid 63166] [client 13.77.106.80:1848] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aVbUyjuUXUKd3KTnKl90ugAAAIU"]
[Fri Jan 02 04:10:50.747966 2026] [:error] [pid 63100:tid 63183] [client 13.77.106.80:1825] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aVbUyjuUXUKd3KTnKl90uwAAAJY"]
[Fri Jan 02 04:10:51.200331 2026] [:error] [pid 63098:tid 63108] [client 13.77.106.80:1817] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aVbUy8ez9k78gUs48kp2rgAAAAE"]
[Fri Jan 02 04:10:51.634055 2026] [:error] [pid 63100:tid 63176] [client 13.77.106.80:1731] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aVbUyzuUXUKd3KTnKl90vgAAAI8"]
[Fri Jan 02 04:10:52.196968 2026] [:error] [pid 63100:tid 63163] [client 13.77.106.80:1902] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aVbUzDuUXUKd3KTnKl90wAAAAII"]
[Fri Jan 02 04:10:52.733484 2026] [:error] [pid 63100:tid 63171] [client 13.77.106.80:1766] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aVbUzDuUXUKd3KTnKl90wwAAAIo"]
[Fri Jan 02 04:10:53.376819 2026] [:error] [pid 63100:tid 63184] [client 13.77.106.80:1837] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aVbUzTuUXUKd3KTnKl90xgAAAJc"]
[Fri Jan 02 04:10:53.951450 2026] [:error] [pid 63208:tid 63228] [client 13.77.106.80:1786] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aVbUzXKLI9INGPLzfndShgAAANE"]
[Fri Jan 02 04:10:54.391471 2026] [:error] [pid 63100:tid 63180] [client 13.77.106.80:1802] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aVbUzjuUXUKd3KTnKl90yAAAAJM"]
[Fri Jan 02 04:10:54.887251 2026] [:error] [pid 63099:tid 63134] [client 13.77.106.80:2113] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aVbUzsmCZokRPYUhzvj5tAAAAEA"]
[Fri Jan 02 04:10:55.395139 2026] [:error] [pid 63208:tid 63224] [client 13.77.106.80:1969] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aVbUz3KLI9INGPLzfndSiwAAAM0"]
[Fri Jan 02 04:10:56.102622 2026] [:error] [pid 63099:tid 63152] [client 13.77.106.80:1958] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aVbU0MmCZokRPYUhzvj5uAAAAFI"]
[Fri Jan 02 04:10:56.630151 2026] [:error] [pid 63100:tid 63177] [client 13.77.106.80:1888] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aVbU0DuUXUKd3KTnKl90zAAAAJA"]
[Fri Jan 02 04:10:57.202935 2026] [:error] [pid 63098:tid 63110] [client 13.77.106.80:1803] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aVbU0cez9k78gUs48kp2twAAAAM"]
[Fri Jan 02 04:10:57.633718 2026] [:error] [pid 63099:tid 63144] [client 13.77.106.80:1737] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aVbU0cmCZokRPYUhzvj5uQAAAEo"]
[Fri Jan 02 04:10:58.055797 2026] [:error] [pid 63099:tid 63148] [client 13.77.106.80:1840] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aVbU0smCZokRPYUhzvj5ugAAAE4"]
[Fri Jan 02 04:10:58.487993 2026] [:error] [pid 63099:tid 63155] [client 13.77.106.80:1751] [client 13.77.106.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aVbU0smCZokRPYUhzvj5vgAAAFU"]
[Fri Jan 02 04:19:52.894461 2026] [:error] [pid 63099:tid 63142] [client 43.157.158.178:52638] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVbW6MmCZokRPYUhzvj7gwAAAEg"]
[Fri Jan 02 06:17:13.171411 2026] [:error] [pid 63100:tid 63178] [client 4.193.190.39:14331] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVbyaTuUXUKd3KTnKl-h0wAAAJE"], referer: https://www.yahoo.com/
[Fri Jan 02 06:17:15.125428 2026] [:error] [pid 63208:tid 63213] [client 4.193.190.39:14302] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/about.php"] [unique_id "aVbya3KLI9INGPLzfneKAQAAAMI"], referer: https://www.google.de/
[Fri Jan 02 06:17:15.300472 2026] [:error] [pid 63208:tid 63227] [client 4.193.190.39:14333] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVbya3KLI9INGPLzfneKAgAAANA"], referer: https://duckduckgo.com/
[Fri Jan 02 06:17:15.475194 2026] [:error] [pid 63100:tid 63181] [client 4.193.190.39:14288] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aVbyazuUXUKd3KTnKl-h2AAAAJQ"], referer: https://duckduckgo.com/
[Fri Jan 02 06:17:16.322095 2026] [autoindex:error] [pid 63208:tid 63232] [client 4.193.190.39:14332] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.co.uk/
[Fri Jan 02 06:17:20.066931 2026] [:error] [pid 63208:tid 63219] [client 4.193.190.39:14311] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aVbycHKLI9INGPLzfneKNAAAAMg"], referer: https://www.google.co.uk/
[Fri Jan 02 08:21:35.529865 2026] [:error] [pid 63100:tid 63180] [client 191.177.191.213:16274] [client 191.177.191.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.177.191.213, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVcPjzuUXUKd3KTnKl_VwgAAAJM"]
[Fri Jan 02 14:38:02.484218 2026] [:error] [pid 43358:tid 43375] [client 182.42.111.156:34223] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVdnygncbHK9auzvrA8XgwAAAc8"]
[Fri Jan 02 21:01:04.463629 2026] [:error] [pid 43358:tid 43369] [client 101.91.148.219:43859] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVfBkAncbHK9auzvrA9W4QAAAck"]
[Sat Jan 03 01:10:08.142680 2026] [:error] [pid 24749:tid 24761] [client 4.190.220.252:54515] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bras.php"] [unique_id "aVf78Eiv6Q9UlqwBJkZPdQAAAMo"]
[Sat Jan 03 01:10:12.096539 2026] [:error] [pid 24661:tid 24727] [client 4.190.220.252:48987] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bras.php"] [unique_id "aVf79Bfxsu5kmLDAcZuJgQAAAIc"]
[Sat Jan 03 01:10:15.763707 2026] [:error] [pid 24749:tid 24769] [client 4.190.220.252:49004] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bras.php"] [unique_id "aVf790iv6Q9UlqwBJkZPjwAAANI"]
[Sat Jan 03 01:10:19.400758 2026] [:error] [pid 24661:tid 24727] [client 4.190.220.252:48188] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bras.php"] [unique_id "aVf7-xfxsu5kmLDAcZuJjwAAAIc"]
[Sat Jan 03 01:10:20.436081 2026] [:error] [pid 24661:tid 24740] [client 4.190.220.252:48977] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "aVf7_Bfxsu5kmLDAcZuJkgAAAJQ"]
[Sat Jan 03 01:10:23.698107 2026] [:error] [pid 24660:tid 24701] [client 4.190.220.252:51907] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "aVf7_2ZwWsLNsJ3ZH7bFtgAAAEg"]
[Sat Jan 03 01:10:29.017484 2026] [:error] [pid 24749:tid 24759] [client 4.190.220.252:48993] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "aVf8BUiv6Q9UlqwBJkZPqQAAAMg"]
[Sat Jan 03 01:10:31.280383 2026] [:error] [pid 24661:tid 24728] [client 4.190.220.252:12730] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "aVf8Bxfxsu5kmLDAcZuJqAAAAIg"]
[Sat Jan 03 01:10:32.381465 2026] [:error] [pid 24659:tid 24683] [client 4.190.220.252:48161] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/esp.php"] [unique_id "aVf8CGucj-rXdFUnVEsrzwAAABM"]
[Sat Jan 03 01:10:34.589959 2026] [:error] [pid 24660:tid 24699] [client 4.190.220.252:51965] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/esp.php"] [unique_id "aVf8CmZwWsLNsJ3ZH7bFwwAAAEY"]
[Sat Jan 03 01:10:37.785953 2026] [:error] [pid 24661:tid 24742] [client 4.190.220.252:12699] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/esp.php"] [unique_id "aVf8DRfxsu5kmLDAcZuJswAAAJY"]
[Sat Jan 03 01:10:40.000611 2026] [:error] [pid 24660:tid 24707] [client 4.190.220.252:48185] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/esp.php"] [unique_id "aVf8D2ZwWsLNsJ3ZH7bFywAAAE4"]
[Sat Jan 03 01:10:41.597697 2026] [:error] [pid 24749:tid 24768] [client 4.190.220.252:48984] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/21x.php"] [unique_id "aVf8EUiv6Q9UlqwBJkZP1wAAANE"]
[Sat Jan 03 01:10:58.264146 2026] [:error] [pid 24661:tid 24735] [client 4.190.220.252:57017] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/out.php"] [unique_id "aVf8Ihfxsu5kmLDAcZuJuwAAAI8"]
[Sat Jan 03 01:10:59.815658 2026] [:error] [pid 24749:tid 24767] [client 4.190.220.252:50812] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/out.php"] [unique_id "aVf8I0iv6Q9UlqwBJkZP8wAAANA"]
[Sat Jan 03 01:11:01.041640 2026] [:error] [pid 24749:tid 24764] [client 4.190.220.252:50806] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/out.php"] [unique_id "aVf8JUiv6Q9UlqwBJkZP9wAAAM0"]
[Sat Jan 03 01:11:03.352562 2026] [:error] [pid 24660:tid 24697] [client 4.190.220.252:13014] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/out.php"] [unique_id "aVf8J2ZwWsLNsJ3ZH7bF9AAAAEQ"]
[Sat Jan 03 01:11:03.954161 2026] [:error] [pid 24660:tid 24712] [client 4.190.220.252:57016] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aVf8J2ZwWsLNsJ3ZH7bF9QAAAFM"]
[Sat Jan 03 01:11:05.250348 2026] [:error] [pid 24661:tid 24735] [client 4.190.220.252:50768] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aVf8KRfxsu5kmLDAcZuJyAAAAI8"]
[Sat Jan 03 01:11:20.073345 2026] [:error] [pid 24659:tid 24686] [client 4.190.220.252:51910] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVf8OGucj-rXdFUnVEssDgAAABY"]
[Sat Jan 03 01:11:22.364611 2026] [:error] [pid 24661:tid 24734] [client 4.190.220.252:54401] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVf8Ohfxsu5kmLDAcZuJ_QAAAI4"]
[Sat Jan 03 01:11:26.276925 2026] [:error] [pid 24660:tid 24715] [client 4.190.220.252:50766] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVf8PmZwWsLNsJ3ZH7bGIwAAAFY"]
[Sat Jan 03 01:11:30.164295 2026] [:error] [pid 24661:tid 24740] [client 4.190.220.252:57022] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVf8Qhfxsu5kmLDAcZuKDQAAAJQ"]
[Sat Jan 03 01:11:36.514912 2026] [:error] [pid 24749:tid 24769] [client 4.190.220.252:13004] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVf8SEiv6Q9UlqwBJkZQSAAAANI"]
[Sat Jan 03 01:11:38.777789 2026] [:error] [pid 24749:tid 24751] [client 4.190.220.252:57009] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVf8Skiv6Q9UlqwBJkZQUAAAAMA"]
[Sat Jan 03 01:11:42.329531 2026] [:error] [pid 24749:tid 24767] [client 4.190.220.252:57711] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVf8Tkiv6Q9UlqwBJkZQYgAAANA"]
[Sat Jan 03 01:11:43.861607 2026] [:error] [pid 24660:tid 24705] [client 4.190.220.252:57702] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVf8T2ZwWsLNsJ3ZH7bGRQAAAEw"]
[Sat Jan 03 01:11:44.728572 2026] [:error] [pid 24660:tid 24710] [client 4.190.220.252:12920] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/990.php"] [unique_id "aVf8UGZwWsLNsJ3ZH7bGRwAAAFE"]
[Sat Jan 03 01:11:47.427165 2026] [:error] [pid 24749:tid 24765] [client 4.190.220.252:12888] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/990.php"] [unique_id "aVf8U0iv6Q9UlqwBJkZQjwAAAM4"]
[Sat Jan 03 01:11:48.237923 2026] [:error] [pid 24659:tid 24669] [client 4.190.220.252:12899] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/990.php"] [unique_id "aVf8VGucj-rXdFUnVEssPgAAAAU"]
[Sat Jan 03 01:11:49.738512 2026] [:error] [pid 24660:tid 24706] [client 4.190.220.252:12720] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/990.php"] [unique_id "aVf8VWZwWsLNsJ3ZH7bGTgAAAE0"]
[Sat Jan 03 01:11:51.709677 2026] [:error] [pid 24659:tid 24687] [client 4.190.220.252:13133] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d996699999.php"] [unique_id "aVf8V2ucj-rXdFUnVEssQwAAABc"]
[Sat Jan 03 01:11:58.088845 2026] [:error] [pid 24660:tid 24715] [client 4.190.220.252:13135] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d996699999.php"] [unique_id "aVf8XmZwWsLNsJ3ZH7bGWQAAAFY"]
[Sat Jan 03 01:12:06.905057 2026] [:error] [pid 24659:tid 24670] [client 4.190.220.252:12871] [client 4.190.220.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ierne.php"] [unique_id "aVf8Zmucj-rXdFUnVEssTAAAAAY"]
[Sat Jan 03 02:57:13.535047 2026] [:error] [pid 24661:tid 24728] [client 4.241.216.136:54558] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVgVCRfxsu5kmLDAcZu3WgAAAIg"]
[Sat Jan 03 02:57:17.269098 2026] [:error] [pid 24659:tid 24671] [client 4.241.216.136:55177] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVgVDWucj-rXdFUnVEtUeQAAAAc"]
[Sat Jan 03 02:57:23.397078 2026] [:error] [pid 24661:tid 24720] [client 4.241.216.136:55230] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVgVExfxsu5kmLDAcZu3YgAAAIA"]
[Sat Jan 03 02:57:28.572425 2026] [:error] [pid 24659:tid 24679] [client 4.241.216.136:16262] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVgVGGucj-rXdFUnVEtUhwAAAA8"]
[Sat Jan 03 02:57:33.719709 2026] [:error] [pid 24749:tid 24754] [client 4.241.216.136:16310] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aVgVHUiv6Q9UlqwBJkaLzAAAAMM"]
[Sat Jan 03 02:57:39.655000 2026] [:error] [pid 47234:tid 47238] [client 4.241.216.136:54580] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aVgVIx2w_O5NbPWiWO_vkAAAAQI"]
[Sat Jan 03 02:57:51.202962 2026] [:error] [pid 24749:tid 24771] [client 4.241.216.136:51925] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acwfihfh.php"] [unique_id "aVgVL0iv6Q9UlqwBJkaL2gAAANQ"]
[Sat Jan 03 02:58:08.457076 2026] [:error] [pid 24660:tid 24697] [client 4.241.216.136:54575] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f8.php"] [unique_id "aVgVQGZwWsLNsJ3ZH7bxhAAAAEQ"]
[Sat Jan 03 02:58:19.377854 2026] [:error] [pid 24661:tid 24740] [client 4.241.216.136:54549] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeeex.php"] [unique_id "aVgVSxfxsu5kmLDAcZu3ngAAAJQ"]
[Sat Jan 03 02:58:22.046714 2026] [:error] [pid 24660:tid 24695] [client 4.241.216.136:54545] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeeex.php"] [unique_id "aVgVTmZwWsLNsJ3ZH7bxmgAAAEI"]
[Sat Jan 03 02:58:25.039964 2026] [:error] [pid 47234:tid 47257] [client 4.241.216.136:51907] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeeex.php"] [unique_id "aVgVUR2w_O5NbPWiWO_v1AAAARU"]
[Sat Jan 03 02:58:28.054967 2026] [:error] [pid 47234:tid 47248] [client 4.241.216.136:15419] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeeex.php"] [unique_id "aVgVVB2w_O5NbPWiWO_v3QAAAQw"]
[Sat Jan 03 02:58:28.963823 2026] [:error] [pid 24749:tid 24764] [client 4.241.216.136:54563] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tons.php"] [unique_id "aVgVVEiv6Q9UlqwBJkaMDQAAAM0"]
[Sat Jan 03 02:58:29.842217 2026] [:error] [pid 24749:tid 24772] [client 4.241.216.136:15391] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tons.php"] [unique_id "aVgVVUiv6Q9UlqwBJkaMDwAAANU"]
[Sat Jan 03 02:58:31.101450 2026] [:error] [pid 24659:tid 24683] [client 4.241.216.136:16299] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tons.php"] [unique_id "aVgVV2ucj-rXdFUnVEtUsgAAABM"]
[Sat Jan 03 02:58:35.163565 2026] [:error] [pid 24661:tid 24736] [client 4.241.216.136:15364] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tons.php"] [unique_id "aVgVWxfxsu5kmLDAcZu3rAAAAJA"]
[Sat Jan 03 02:58:36.249665 2026] [:error] [pid 24659:tid 24684] [client 4.241.216.136:54574] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpup.php"] [unique_id "aVgVXGucj-rXdFUnVEtUtQAAABQ"]
[Sat Jan 03 02:58:38.791975 2026] [:error] [pid 24659:tid 24674] [client 4.241.216.136:16263] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpup.php"] [unique_id "aVgVXmucj-rXdFUnVEtUtwAAAAo"]
[Sat Jan 03 02:58:40.732727 2026] [:error] [pid 24660:tid 24715] [client 4.241.216.136:55174] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpup.php"] [unique_id "aVgVYGZwWsLNsJ3ZH7bxqgAAAFY"]
[Sat Jan 03 02:58:42.661338 2026] [:error] [pid 24660:tid 24706] [client 4.241.216.136:60662] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpup.php"] [unique_id "aVgVYmZwWsLNsJ3ZH7bxsAAAAE0"]
[Sat Jan 03 02:58:43.232376 2026] [:error] [pid 24660:tid 24708] [client 4.241.216.136:54535] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aVgVY2ZwWsLNsJ3ZH7bxsgAAAE8"]
[Sat Jan 03 02:58:44.536010 2026] [:error] [pid 24659:tid 24664] [client 4.241.216.136:51941] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aVgVZGucj-rXdFUnVEtUwAAAAAA"]
[Sat Jan 03 02:58:46.887098 2026] [:error] [pid 24749:tid 24754] [client 4.241.216.136:51935] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aVgVZkiv6Q9UlqwBJkaMIAAAAMM"]
[Sat Jan 03 02:58:52.311668 2026] [:error] [pid 24661:tid 24740] [client 4.241.216.136:51934] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aVgVbBfxsu5kmLDAcZu3uwAAAJQ"]
[Sat Jan 03 02:58:54.548259 2026] [:error] [pid 24660:tid 24717] [client 4.241.216.136:54578] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2f.php"] [unique_id "aVgVbmZwWsLNsJ3ZH7bxzQAAAFg"]
[Sat Jan 03 02:58:56.158296 2026] [:error] [pid 47234:tid 47241] [client 4.241.216.136:55173] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2f.php"] [unique_id "aVgVcB2w_O5NbPWiWO_v-wAAAQU"]
[Sat Jan 03 02:58:57.727827 2026] [:error] [pid 47234:tid 47254] [client 4.241.216.136:54536] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2f.php"] [unique_id "aVgVcR2w_O5NbPWiWO_v_QAAARI"]
[Sat Jan 03 02:59:00.603511 2026] [:error] [pid 47234:tid 47244] [client 4.241.216.136:16280] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2f.php"] [unique_id "aVgVdB2w_O5NbPWiWO_wCAAAAQg"]
[Sat Jan 03 02:59:06.754190 2026] [:error] [pid 24660:tid 24702] [client 4.241.216.136:55209] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVgVemZwWsLNsJ3ZH7bx1gAAAEk"]
[Sat Jan 03 02:59:07.770957 2026] [:error] [pid 24659:tid 24666] [client 4.241.216.136:15386] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVgVe2ucj-rXdFUnVEtUzAAAAAI"]
[Sat Jan 03 02:59:09.679515 2026] [:error] [pid 47234:tid 47258] [client 4.241.216.136:51928] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVgVfR2w_O5NbPWiWO_wGwAAARY"]
[Sat Jan 03 02:59:11.840370 2026] [:error] [pid 24659:tid 24683] [client 4.241.216.136:16281] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVgVf2ucj-rXdFUnVEtU0QAAABM"]
[Sat Jan 03 02:59:13.704944 2026] [:error] [pid 24660:tid 24696] [client 4.241.216.136:51950] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVgVgWZwWsLNsJ3ZH7bx2wAAAEM"]
[Sat Jan 03 02:59:16.288440 2026] [:error] [pid 24749:tid 24772] [client 4.241.216.136:51921] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVgVhEiv6Q9UlqwBJkaMOwAAANU"]
[Sat Jan 03 02:59:18.857926 2026] [:error] [pid 24749:tid 24762] [client 4.241.216.136:55194] [client 4.241.216.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVgVhkiv6Q9UlqwBJkaMQwAAAMs"]
[Sat Jan 03 03:21:02.843179 2026] [:error] [pid 36691:tid 36748] [client 106.227.49.113:39917] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVganpng3GFV32xB-PfzNAAAAIE"]
[Sat Jan 03 03:47:11.964044 2026] [:error] [pid 34260:tid 34263] [client 4.189.161.129:48093] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aVggv0WWhyvZ0O9KNVRxBQAAAQE"]
[Sat Jan 03 03:47:13.685129 2026] [:error] [pid 1931:tid 2036] [client 4.189.161.129:48115] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aVggwR8Tyw7ZoIdXlcbgIwAAAIw"]
[Sat Jan 03 03:47:15.358973 2026] [:error] [pid 34260:tid 34264] [client 4.189.161.129:62073] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aVggw0WWhyvZ0O9KNVRxCwAAAQI"]
[Sat Jan 03 03:47:16.109588 2026] [:error] [pid 2083:tid 2087] [client 4.189.161.129:48098] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aVggxDVlR_BmlMPnhV6iZQAAAMI"]
[Sat Jan 03 03:47:20.792616 2026] [:error] [pid 1931:tid 2034] [client 4.189.161.129:62044] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aVggyB8Tyw7ZoIdXlcbgJgAAAIo"]
[Sat Jan 03 03:47:22.281852 2026] [:error] [pid 34260:tid 34285] [client 4.189.161.129:62076] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aVggykWWhyvZ0O9KNVRxGwAAARc"]
[Sat Jan 03 03:47:29.094957 2026] [:error] [pid 1929:tid 1956] [client 4.189.161.129:62047] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aVgg0ecFqdpu6TNsuWq2dAAAABI"]
[Sat Jan 03 03:47:30.170891 2026] [:error] [pid 2083:tid 2109] [client 4.189.161.129:48105] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aVgg0jVlR_BmlMPnhV6ifgAAANg"]
[Sat Jan 03 03:47:32.232474 2026] [:error] [pid 34260:tid 34267] [client 4.189.161.129:62043] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aVgg1EWWhyvZ0O9KNVRxKAAAAQU"]
[Sat Jan 03 03:47:33.000401 2026] [:error] [pid 34260:tid 34278] [client 4.189.161.129:48072] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aVgg1EWWhyvZ0O9KNVRxKgAAARA"]
[Sat Jan 03 03:47:33.873949 2026] [:error] [pid 34260:tid 34270] [client 4.189.161.129:62032] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aVgg1UWWhyvZ0O9KNVRxLQAAAQg"]
[Sat Jan 03 03:47:35.974215 2026] [:error] [pid 1929:tid 1944] [client 4.189.161.129:45270] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aVgg1-cFqdpu6TNsuWq2dwAAAAY"]
[Sat Jan 03 03:47:37.579001 2026] [:error] [pid 2083:tid 2102] [client 4.189.161.129:48083] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVgg2TVlR_BmlMPnhV6ihwAAANE"]
[Sat Jan 03 03:47:40.732935 2026] [:error] [pid 1929:tid 1950] [client 4.189.161.129:48102] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVgg3OcFqdpu6TNsuWq2hAAAAAw"]
[Sat Jan 03 03:47:43.060491 2026] [:error] [pid 1929:tid 1940] [client 4.189.161.129:62063] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVgg3-cFqdpu6TNsuWq2jwAAAAI"]
[Sat Jan 03 03:47:44.709148 2026] [:error] [pid 1931:tid 1993] [client 4.189.161.129:48086] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVgg4B8Tyw7ZoIdXlcbgUQAAAIA"]
[Sat Jan 03 03:47:46.535914 2026] [:error] [pid 34260:tid 34271] [client 4.189.161.129:48121] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgg4kWWhyvZ0O9KNVRxNwAAAQk"]
[Sat Jan 03 03:47:47.218060 2026] [:error] [pid 1930:tid 1980] [client 4.189.161.129:48088] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgg45P-6mqhfUDa89y_MwAAAE4"]
[Sat Jan 03 03:47:52.426241 2026] [:error] [pid 34260:tid 34283] [client 4.189.161.129:62048] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgg6EWWhyvZ0O9KNVRxRQAAARU"]
[Sat Jan 03 03:47:53.494222 2026] [:error] [pid 2083:tid 2102] [client 4.189.161.129:45283] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aVgg6TVlR_BmlMPnhV6ilQAAANE"]
[Sat Jan 03 03:47:55.083777 2026] [:error] [pid 34260:tid 34282] [client 4.189.161.129:62068] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aVgg60WWhyvZ0O9KNVRxSAAAARQ"]
[Sat Jan 03 03:47:56.620647 2026] [:error] [pid 1929:tid 1938] [client 4.189.161.129:48074] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aVgg7OcFqdpu6TNsuWq2oAAAAAA"]
[Sat Jan 03 03:48:02.705924 2026] [:error] [pid 1931:tid 2036] [client 4.189.161.129:45290] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aVgg8h8Tyw7ZoIdXlcbgcAAAAIw"]
[Sat Jan 03 03:48:05.404284 2026] [:error] [pid 34260:tid 34282] [client 4.189.161.129:62026] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aVgg9UWWhyvZ0O9KNVRxVgAAARQ"]
[Sat Jan 03 03:48:07.564077 2026] [:error] [pid 1929:tid 1959] [client 4.189.161.129:65157] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "aVgg9-cFqdpu6TNsuWq2rQAAABU"]
[Sat Jan 03 03:48:09.701311 2026] [:error] [pid 1931:tid 2037] [client 4.189.161.129:62027] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "aVgg-R8Tyw7ZoIdXlcbgggAAAI0"]
[Sat Jan 03 03:48:16.812753 2026] [:error] [pid 1931:tid 2043] [client 4.189.161.129:48116] [client 4.189.161.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.161.129, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVghAB8Tyw7ZoIdXlcbgmAAAAJM"]
[Sat Jan 03 03:48:16.953827 2026] [:error] [pid 1931:tid 2031] [client 4.189.161.129:48084] [client 4.189.161.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.189.161.129, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVghAB8Tyw7ZoIdXlcbgmQAAAIc"]
[Sat Jan 03 03:48:17.393891 2026] [:error] [pid 1931:tid 2033] [client 4.189.161.129:48116] [client 4.189.161.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aVghAR8Tyw7ZoIdXlcbgnQAAAIk"]
[Sat Jan 03 03:48:34.208937 2026] [:error] [pid 1931:tid 2032] [client 4.189.161.129:48087] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVghEh8Tyw7ZoIdXlcbgtAAAAIg"]
[Sat Jan 03 03:48:43.360123 2026] [:error] [pid 34260:tid 34280] [client 4.189.161.129:48111] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVghG0WWhyvZ0O9KNVRxdQAAARI"]
[Sat Jan 03 03:48:47.201841 2026] [:error] [pid 34260:tid 34265] [client 4.189.161.129:48092] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVghH0WWhyvZ0O9KNVRxgAAAAQM"]
[Sat Jan 03 03:48:48.826663 2026] [:error] [pid 1930:tid 1975] [client 4.189.161.129:62054] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVghIJP-6mqhfUDa89y_dwAAAEk"]
[Sat Jan 03 03:48:49.256297 2026] [:error] [pid 34260:tid 34267] [client 4.189.161.129:62041] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "aVghIUWWhyvZ0O9KNVRxjwAAAQU"]
[Sat Jan 03 03:48:49.946620 2026] [:error] [pid 1931:tid 1993] [client 4.189.161.129:62070] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "aVghIR8Tyw7ZoIdXlcbgxwAAAIA"]
[Sat Jan 03 03:48:51.630962 2026] [:error] [pid 2083:tid 2090] [client 4.189.161.129:45268] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "aVghIzVlR_BmlMPnhV6jDAAAAMU"]
[Sat Jan 03 03:48:53.267174 2026] [:error] [pid 2083:tid 2102] [client 4.189.161.129:48073] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "aVghJTVlR_BmlMPnhV6jDQAAANE"]
[Sat Jan 03 03:48:55.547958 2026] [:error] [pid 34260:tid 34262] [client 4.189.161.129:62057] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aVghJ0WWhyvZ0O9KNVRxpgAAAQA"]
[Sat Jan 03 03:48:56.745822 2026] [:error] [pid 1930:tid 1990] [client 4.189.161.129:62042] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aVghKJP-6mqhfUDa89y_gAAAAFg"]
[Sat Jan 03 03:48:58.692682 2026] [:error] [pid 1930:tid 1986] [client 4.189.161.129:48106] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aVghKpP-6mqhfUDa89y_ggAAAFQ"]
[Sat Jan 03 03:49:00.796497 2026] [:error] [pid 2083:tid 2102] [client 4.189.161.129:62037] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aVghLDVlR_BmlMPnhV6jIAAAANE"]
[Sat Jan 03 03:49:02.804949 2026] [:error] [pid 34260:tid 34267] [client 4.189.161.129:62030] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aVghLkWWhyvZ0O9KNVRxuAAAAQU"]
[Sat Jan 03 03:49:04.183141 2026] [:error] [pid 1931:tid 2046] [client 4.189.161.129:48095] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aVghMB8Tyw7ZoIdXlcbg4QAAAJY"]
[Sat Jan 03 03:49:09.414740 2026] [:error] [pid 2083:tid 2109] [client 4.189.161.129:48071] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aVghNTVlR_BmlMPnhV6jPgAAANg"]
[Sat Jan 03 03:49:10.796756 2026] [:error] [pid 1929:tid 1958] [client 4.189.161.129:62018] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aVghNucFqdpu6TNsuWq3AQAAABQ"]
[Sat Jan 03 03:49:11.854649 2026] [:error] [pid 1931:tid 2027] [client 4.189.161.129:62051] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links.php"] [unique_id "aVghNx8Tyw7ZoIdXlcbhBAAAAIQ"]
[Sat Jan 03 03:49:12.945146 2026] [:error] [pid 1929:tid 1943] [client 4.189.161.129:62049] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links.php"] [unique_id "aVghOOcFqdpu6TNsuWq3BAAAAAU"]
[Sat Jan 03 03:49:14.518198 2026] [:error] [pid 1931:tid 2045] [client 4.189.161.129:62017] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links.php"] [unique_id "aVghOh8Tyw7ZoIdXlcbhDwAAAJU"]
[Sat Jan 03 03:49:19.247521 2026] [:error] [pid 2083:tid 2087] [client 4.189.161.129:48067] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links.php"] [unique_id "aVghPzVlR_BmlMPnhV6jUgAAAMI"]
[Sat Jan 03 03:49:22.070476 2026] [:error] [pid 34260:tid 34274] [client 4.189.161.129:48110] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aVghQkWWhyvZ0O9KNVRx4AAAAQw"]
[Sat Jan 03 03:49:22.941175 2026] [:error] [pid 1931:tid 2046] [client 4.189.161.129:48114] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aVghQh8Tyw7ZoIdXlcbhGwAAAJY"]
[Sat Jan 03 03:49:25.414172 2026] [:error] [pid 1929:tid 1952] [client 4.189.161.129:48096] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aVghRecFqdpu6TNsuWq3HAAAAA4"]
[Sat Jan 03 03:49:29.169454 2026] [:error] [pid 1931:tid 2043] [client 4.189.161.129:62019] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aVghSR8Tyw7ZoIdXlcbhKQAAAJM"]
[Sat Jan 03 03:49:31.118772 2026] [:error] [pid 1931:tid 2032] [client 4.189.161.129:65175] [client 4.189.161.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aVghSx8Tyw7ZoIdXlcbhOgAAAIg"]
[Sat Jan 03 03:49:33.348364 2026] [:error] [pid 1931:tid 2042] [client 4.189.161.129:48075] [client 4.189.161.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manage.php"] [unique_id "aVghTR8Tyw7ZoIdXlcbhRQAAAJI"]
[Sat Jan 03 07:08:22.631929 2026] [:error] [pid 19639:tid 19652] [client 43.135.182.43:35994] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVhP5iQ7fWZUytnlHEw1awAAAUs"]
[Sat Jan 03 09:12:40.739756 2026] [:error] [pid 2083:tid 2092] [client 182.44.8.254:55277] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVhtCDVlR_BmlMPnhV5A4wAAAMc"]
[Sat Jan 03 18:19:58.724355 2026] [:error] [pid 31630:tid 31644] [client 43.173.1.69:57258] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVjtTvUV_PU2SWgLPugt5gAAAYw"]
[Sat Jan 03 21:34:03.659756 2026] [:error] [pid 19639:tid 19646] [client 182.42.105.144:54326] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVkayyQ7fWZUytnlHEwAPQAAAUU"]
[Sat Jan 03 22:05:10.197948 2026] [:error] [pid 34260:tid 34267] [client 104.215.23.56:38616] [client 104.215.23.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVkiFkWWhyvZ0O9KNVQsiQAAAQU"]
[Sat Jan 03 22:05:11.285157 2026] [:error] [pid 1931:tid 2032] [client 104.215.23.56:38639] [client 104.215.23.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVkiFx8Tyw7ZoIdXlcYLSgAAAIg"]
[Sat Jan 03 22:05:12.860795 2026] [:error] [pid 1929:tid 1942] [client 104.215.23.56:38626] [client 104.215.23.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVkiGOcFqdpu6TNsuWr2twAAAAQ"]
[Sat Jan 03 22:05:13.899563 2026] [:error] [pid 1929:tid 1938] [client 104.215.23.56:38629] [client 104.215.23.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVkiGecFqdpu6TNsuWr2ugAAAAA"]
[Sat Jan 03 23:28:01.331241 2026] [:error] [pid 1931:tid 2046] [client 43.167.232.38:38290] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVk1gR8Tyw7ZoIdXlcYqCAAAAJY"]
[Sun Jan 04 00:19:58.075737 2026] [:error] [pid 49229:tid 49269] [client 154.26.129.117:52524] [client 154.26.129.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aVlBrlCM4R1akb8JNI6O7wAAAEg"]
[Sun Jan 04 02:22:39.400214 2026] [:error] [pid 49230:tid 49305] [client 103.77.106.81:55794] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aVleb32klmw7JRfgM3jdjgAAAJE"]
[Sun Jan 04 02:22:42.980119 2026] [:error] [pid 49229:tid 49267] [client 103.77.106.81:56208] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aVleclCM4R1akb8JNI7MoQAAAEY"]
[Sun Jan 04 05:23:37.554154 2026] [:error] [pid 37537:tid 37577] [client 103.77.107.178:49424] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aVmI2QjHz7EQ5p_4u2pfHAAAAEQ"]
[Sun Jan 04 05:23:38.093668 2026] [:error] [pid 37537:tid 37585] [client 103.77.107.178:49488] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aVmI2gjHz7EQ5p_4u2pfHQAAAEw"]
[Sun Jan 04 09:42:30.840903 2026] [:error] [pid 21773:tid 21782] [client 43.157.148.38:38628] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVnFhnvK0K5woa_VhGVTOwAAAcY"]
[Sun Jan 04 13:11:31.662396 2026] [:error] [pid 1020:tid 1030] [client 170.106.152.218:37282] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVn2g1zz6-t0R3_Ito0MVwAAAUc"]
[Sun Jan 04 17:39:33.155195 2026] [:error] [pid 1020:tid 1046] [client 138.197.13.155:62644] [client 138.197.13.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aVo1VVzz6-t0R3_Ito00wwAAAVc"], referer: binance.com
[Sun Jan 04 18:38:06.228473 2026] [:error] [pid 50418:tid 50438] [client 43.130.12.43:40146] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVpDDhuiZ6RPOP-rMN9JagAAABI"]
[Sun Jan 04 19:48:29.717688 2026] [:error] [pid 5072:tid 5141] [client 20.27.219.75:15733] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aVpTjb2pfHYIoX6NUv0AIAAAA4w"]
[Sun Jan 04 19:48:30.015421 2026] [:error] [pid 1297:tid 1318] [client 20.27.219.75:15622] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aVpTjhf98x0RBG23PjfS2wAAABM"]
[Sun Jan 04 19:48:30.412399 2026] [:error] [pid 58432:tid 58443] [client 20.27.219.75:15687] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aVpTjs5iX5mcgQLNlcgXzwAAAMY"]
[Sun Jan 04 19:48:30.754880 2026] [:error] [pid 5010:tid 5053] [client 20.27.219.75:15713] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aVpTjrV9sNJtnPnkkz-UQAAAAow"]
[Sun Jan 04 19:48:31.102595 2026] [:error] [pid 58432:tid 58457] [client 20.27.219.75:15711] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oo.php"] [unique_id "aVpTj85iX5mcgQLNlcgX0QAAANQ"]
[Sun Jan 04 19:48:31.563592 2026] [:error] [pid 58432:tid 58460] [client 20.27.219.75:15717] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oo.php"] [unique_id "aVpTj85iX5mcgQLNlcgX0wAAANc"]
[Sun Jan 04 19:48:32.192601 2026] [:error] [pid 1297:tid 1309] [client 20.27.219.75:15703] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oo.php"] [unique_id "aVpTkBf98x0RBG23PjfS3gAAAAo"]
[Sun Jan 04 19:48:32.570495 2026] [:error] [pid 1328:tid 1355] [client 20.27.219.75:15740] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oo.php"] [unique_id "aVpTkE_-FkByL1SGKiTPrgAAAVg"]
[Sun Jan 04 19:48:32.905349 2026] [:error] [pid 5072:tid 5151] [client 20.27.219.75:15721] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aVpTkL2pfHYIoX6NUv0AIwAAA5Y"]
[Sun Jan 04 19:48:33.295064 2026] [:error] [pid 58432:tid 58446] [client 20.27.219.75:15642] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aVpTkc5iX5mcgQLNlcgX1gAAAMk"]
[Sun Jan 04 19:48:33.709364 2026] [:error] [pid 5727:tid 5761] [client 20.27.219.75:15635] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aVpTkew4wd_I9FHn6_-rHAAAAwI"]
[Sun Jan 04 19:48:34.090260 2026] [:error] [pid 5072:tid 5143] [client 20.27.219.75:15637] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aVpTkr2pfHYIoX6NUv0AJQAAA44"]
[Sun Jan 04 19:48:34.526606 2026] [:error] [pid 5010:tid 5048] [client 20.27.219.75:15693] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lisa.php"] [unique_id "aVpTkrV9sNJtnPnkkz-USQAAAoc"]
[Sun Jan 04 19:48:34.929416 2026] [:error] [pid 58433:tid 58470] [client 20.27.219.75:15638] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lisa.php"] [unique_id "aVpTkk5m7bkw35zhUNblagAAAQY"]
[Sun Jan 04 19:48:35.284954 2026] [:error] [pid 5727:tid 5783] [client 20.27.219.75:15639] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lisa.php"] [unique_id "aVpTk-w4wd_I9FHn6_-rHwAAAxg"]
[Sun Jan 04 19:48:35.821383 2026] [:error] [pid 1297:tid 1312] [client 20.27.219.75:15723] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lisa.php"] [unique_id "aVpTkxf98x0RBG23PjfS3wAAAA0"]
[Sun Jan 04 19:48:36.690169 2026] [:error] [pid 5072:tid 5136] [client 20.27.219.75:15695] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aVpTlL2pfHYIoX6NUv0AJgAAA4c"]
[Sun Jan 04 19:48:37.221350 2026] [:error] [pid 1297:tid 1305] [client 20.27.219.75:15646] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aVpTlRf98x0RBG23PjfS4QAAAAY"]
[Sun Jan 04 19:48:37.748521 2026] [:error] [pid 58433:tid 58474] [client 20.27.219.75:15725] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aVpTlU5m7bkw35zhUNblawAAAQo"]
[Sun Jan 04 19:48:38.198273 2026] [:error] [pid 58433:tid 58464] [client 20.27.219.75:15621] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aVpTlk5m7bkw35zhUNblbgAAAQA"]
[Sun Jan 04 19:48:38.618444 2026] [:error] [pid 58433:tid 58469] [client 20.27.219.75:15618] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxx.php"] [unique_id "aVpTlk5m7bkw35zhUNblbwAAAQU"]
[Sun Jan 04 19:48:39.358889 2026] [:error] [pid 5629:tid 5639] [client 20.27.219.75:15741] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxx.php"] [unique_id "aVpTl55cwu3wbyCj4doMdwAAAIg"]
[Sun Jan 04 19:48:39.792972 2026] [:error] [pid 5727:tid 5772] [client 20.27.219.75:15634] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxx.php"] [unique_id "aVpTl-w4wd_I9FHn6_-rLAAAAw0"]
[Sun Jan 04 19:48:40.298035 2026] [:error] [pid 5727:tid 5773] [client 20.27.219.75:15729] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxx.php"] [unique_id "aVpTmOw4wd_I9FHn6_-rLQAAAw4"]
[Sun Jan 04 19:48:40.689890 2026] [:error] [pid 58432:tid 58450] [client 20.27.219.75:15623] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless14.php"] [unique_id "aVpTmM5iX5mcgQLNlcgX3AAAAM0"]
[Sun Jan 04 19:48:41.217002 2026] [:error] [pid 4979:tid 4982] [client 20.27.219.75:15643] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless14.php"] [unique_id "aVpTmf02GTWzaEAF5mqRNwAAAYA"]
[Sun Jan 04 19:48:41.606172 2026] [:error] [pid 1297:tid 1316] [client 20.27.219.75:4072] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless14.php"] [unique_id "aVpTmRf98x0RBG23PjfS5wAAABE"]
[Sun Jan 04 19:48:42.029839 2026] [:error] [pid 5072:tid 5132] [client 20.27.219.75:15629] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless14.php"] [unique_id "aVpTmr2pfHYIoX6NUv0ALAAAA4M"]
[Sun Jan 04 19:48:42.444583 2026] [:error] [pid 4979:tid 5006] [client 20.27.219.75:15628] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/87.php"] [unique_id "aVpTmv02GTWzaEAF5mqROQAAAZg"]
[Sun Jan 04 19:48:42.831640 2026] [:error] [pid 5727:tid 5766] [client 20.27.219.75:4050] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/87.php"] [unique_id "aVpTmuw4wd_I9FHn6_-rMAAAAwc"]
[Sun Jan 04 19:48:43.229029 2026] [:error] [pid 1297:tid 1308] [client 20.27.219.75:15640] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/87.php"] [unique_id "aVpTmxf98x0RBG23PjfS6wAAAAk"]
[Sun Jan 04 19:48:43.754852 2026] [:error] [pid 4979:tid 5003] [client 20.27.219.75:15688] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/87.php"] [unique_id "aVpTm_02GTWzaEAF5mqROwAAAZU"]
[Sun Jan 04 19:48:44.145085 2026] [:error] [pid 5010:tid 5045] [client 20.27.219.75:15710] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVpTnLV9sNJtnPnkkz-UUwAAAoQ"]
[Sun Jan 04 19:48:44.807541 2026] [:error] [pid 1328:tid 1346] [client 20.27.219.75:15716] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVpTnE_-FkByL1SGKiTPtAAAAU8"]
[Sun Jan 04 19:48:45.123816 2026] [:error] [pid 1328:tid 1350] [client 20.27.219.75:15644] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVpTnU_-FkByL1SGKiTPtQAAAVM"]
[Sun Jan 04 19:48:45.501792 2026] [:error] [pid 58432:tid 58461] [client 20.27.219.75:15672] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aVpTnc5iX5mcgQLNlcgX4QAAANg"]
[Sun Jan 04 19:48:45.940426 2026] [:error] [pid 1297:tid 1313] [client 20.27.219.75:15719] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aVpTnRf98x0RBG23PjfS7AAAAA4"]
[Sun Jan 04 19:48:46.259115 2026] [:error] [pid 1328:tid 1334] [client 20.27.219.75:15698] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aVpTnk_-FkByL1SGKiTPtwAAAUM"]
[Sun Jan 04 19:48:46.666794 2026] [:error] [pid 5661:tid 5701] [client 20.27.219.75:15707] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aVpTnrsKeIMjMZCmSEny8wAAAgs"]
[Sun Jan 04 19:48:46.996357 2026] [:error] [pid 1328:tid 1340] [client 20.27.219.75:15736] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aVpTnk_-FkByL1SGKiTPuAAAAUk"]
[Sun Jan 04 19:48:47.349488 2026] [:error] [pid 4979:tid 5002] [client 20.27.219.75:4057] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acwfihfh.php"] [unique_id "aVpTn_02GTWzaEAF5mqRQgAAAZQ"]
[Sun Jan 04 19:48:47.696510 2026] [:error] [pid 58432:tid 58448] [client 20.27.219.75:15627] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acwfihfh.php"] [unique_id "aVpTn85iX5mcgQLNlcgX5AAAAMs"]
[Sun Jan 04 19:48:48.649448 2026] [:error] [pid 5010:tid 5059] [client 20.27.219.75:4047] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acwfihfh.php"] [unique_id "aVpToLV9sNJtnPnkkz-UWAAAApI"]
[Sun Jan 04 19:48:49.616397 2026] [:error] [pid 5661:tid 5704] [client 20.27.219.75:4071] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acwfihfh.php"] [unique_id "aVpTobsKeIMjMZCmSEny_QAAAg4"]
[Sun Jan 04 19:48:50.146376 2026] [:error] [pid 5661:tid 5713] [client 20.27.219.75:15632] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bras.php"] [unique_id "aVpTorsKeIMjMZCmSEny_wAAAhc"]
[Sun Jan 04 19:48:50.456460 2026] [:error] [pid 5629:tid 5647] [client 20.27.219.75:4053] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bras.php"] [unique_id "aVpTop5cwu3wbyCj4doMgAAAAJA"]
[Sun Jan 04 19:48:50.891781 2026] [:error] [pid 1328:tid 1331] [client 20.27.219.75:15683] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bras.php"] [unique_id "aVpTok_-FkByL1SGKiTPvwAAAUA"]
[Sun Jan 04 19:48:51.296983 2026] [:error] [pid 5661:tid 5697] [client 20.27.219.75:15657] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bras.php"] [unique_id "aVpTo7sKeIMjMZCmSEnzAAAAAgc"]
[Sun Jan 04 19:48:51.687766 2026] [:error] [pid 1328:tid 1342] [client 20.27.219.75:4062] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "aVpTo0_-FkByL1SGKiTPwQAAAUs"]
[Sun Jan 04 19:48:52.320513 2026] [:error] [pid 5727:tid 5772] [client 20.27.219.75:4048] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "aVpTpOw4wd_I9FHn6_-rOAAAAw0"]
[Sun Jan 04 19:48:52.915832 2026] [:error] [pid 58433:tid 58474] [client 20.27.219.75:15682] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "aVpTpE5m7bkw35zhUNblegAAAQo"]
[Sun Jan 04 19:48:53.319701 2026] [:error] [pid 4979:tid 4986] [client 20.27.219.75:15617] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "aVpTpf02GTWzaEAF5mqRSgAAAYQ"]
[Sun Jan 04 19:48:54.169775 2026] [:error] [pid 5727:tid 5762] [client 20.27.219.75:15743] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/esp.php"] [unique_id "aVpTpuw4wd_I9FHn6_-rOgAAAwM"]
[Sun Jan 04 19:48:54.535844 2026] [:error] [pid 5629:tid 5651] [client 20.27.219.75:15631] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/esp.php"] [unique_id "aVpTpp5cwu3wbyCj4doMiwAAAJQ"]
[Sun Jan 04 19:48:55.128195 2026] [:error] [pid 5010:tid 5052] [client 20.27.219.75:15652] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/esp.php"] [unique_id "aVpTp7V9sNJtnPnkkz-UWgAAAos"]
[Sun Jan 04 19:48:55.808651 2026] [:error] [pid 1297:tid 1318] [client 20.27.219.75:15626] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/esp.php"] [unique_id "aVpTpxf98x0RBG23PjfS9AAAABM"]
[Sun Jan 04 19:48:56.438473 2026] [:error] [pid 5072:tid 5133] [client 20.27.219.75:15728] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/21x.php"] [unique_id "aVpTqL2pfHYIoX6NUv0AOAAAA4Q"]
[Sun Jan 04 19:48:56.798817 2026] [:error] [pid 5629:tid 5631] [client 20.27.219.75:15636] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/21x.php"] [unique_id "aVpTqJ5cwu3wbyCj4doMkAAAAIA"]
[Sun Jan 04 19:48:57.104020 2026] [:error] [pid 1297:tid 1305] [client 20.27.219.75:15715] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/21x.php"] [unique_id "aVpTqRf98x0RBG23PjfS-wAAAAY"]
[Sun Jan 04 19:48:57.494903 2026] [:error] [pid 1297:tid 1311] [client 20.27.219.75:15742] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/21x.php"] [unique_id "aVpTqRf98x0RBG23PjfS_QAAAAw"]
[Sun Jan 04 19:48:57.928013 2026] [:error] [pid 5629:tid 5635] [client 20.27.219.75:4049] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/out.php"] [unique_id "aVpTqZ5cwu3wbyCj4doMlAAAAIQ"]
[Sun Jan 04 19:48:58.596266 2026] [:error] [pid 1297:tid 1307] [client 20.27.219.75:15690] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/out.php"] [unique_id "aVpTqhf98x0RBG23PjfTAQAAAAg"]
[Sun Jan 04 19:48:59.082873 2026] [:error] [pid 5727:tid 5778] [client 20.27.219.75:4046] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/out.php"] [unique_id "aVpTq-w4wd_I9FHn6_-rPQAAAxM"]
[Sun Jan 04 19:48:59.569596 2026] [:error] [pid 58433:tid 58464] [client 20.27.219.75:15669] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/out.php"] [unique_id "aVpTq05m7bkw35zhUNblewAAAQA"]
[Sun Jan 04 19:48:59.882198 2026] [:error] [pid 58432:tid 58456] [client 20.27.219.75:15647] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aVpTq85iX5mcgQLNlcgX7AAAANM"]
[Sun Jan 04 19:49:00.167315 2026] [:error] [pid 5072:tid 5142] [client 20.27.219.75:15731] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aVpTrL2pfHYIoX6NUv0APQAAA40"]
[Sun Jan 04 19:49:00.481873 2026] [:error] [pid 1297:tid 1308] [client 20.27.219.75:4055] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aVpTrBf98x0RBG23PjfTBQAAAAk"]
[Sun Jan 04 19:49:00.937008 2026] [:error] [pid 5072:tid 5137] [client 20.27.219.75:4050] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aVpTrL2pfHYIoX6NUv0AQAAAA4g"]
[Sun Jan 04 19:49:01.332727 2026] [:error] [pid 58432:tid 58437] [client 20.27.219.75:15737] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/family.php"] [unique_id "aVpTrc5iX5mcgQLNlcgX8QAAAMA"]
[Sun Jan 04 19:49:01.916922 2026] [:error] [pid 5072:tid 5149] [client 20.27.219.75:4074] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/family.php"] [unique_id "aVpTrb2pfHYIoX6NUv0AQwAAA5Q"]
[Sun Jan 04 19:49:02.416933 2026] [:error] [pid 58433:tid 58466] [client 20.27.219.75:15651] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/family.php"] [unique_id "aVpTrk5m7bkw35zhUNblfwAAAQI"]
[Sun Jan 04 19:49:02.696913 2026] [:error] [pid 5072:tid 5152] [client 20.27.219.75:15686] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/family.php"] [unique_id "aVpTrr2pfHYIoX6NUv0ARgAAA5c"]
[Sun Jan 04 19:49:03.072891 2026] [:error] [pid 4979:tid 4999] [client 20.27.219.75:15697] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aVpTr_02GTWzaEAF5mqRTgAAAZE"]
[Sun Jan 04 19:49:03.412218 2026] [:error] [pid 4979:tid 5004] [client 20.27.219.75:4064] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aVpTr_02GTWzaEAF5mqRUAAAAZY"]
[Sun Jan 04 19:49:03.756729 2026] [:error] [pid 58433:tid 58473] [client 20.27.219.75:15633] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aVpTr05m7bkw35zhUNblhAAAAQk"]
[Sun Jan 04 19:49:04.060176 2026] [:error] [pid 58432:tid 58446] [client 20.27.219.75:15708] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aVpTsM5iX5mcgQLNlcgX9QAAAMk"]
[Sun Jan 04 19:49:04.839429 2026] [:error] [pid 4979:tid 4990] [client 20.27.219.75:15694] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanz.php"] [unique_id "aVpTsP02GTWzaEAF5mqRUwAAAYg"]
[Sun Jan 04 19:49:05.156756 2026] [:error] [pid 58433:tid 58468] [client 20.27.219.75:15624] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanz.php"] [unique_id "aVpTsU5m7bkw35zhUNblhgAAAQQ"]
[Sun Jan 04 19:49:05.520603 2026] [:error] [pid 5072:tid 5132] [client 20.27.219.75:15645] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanz.php"] [unique_id "aVpTsb2pfHYIoX6NUv0ATQAAA4M"]
[Sun Jan 04 19:49:05.836616 2026] [:error] [pid 58432:tid 58441] [client 20.27.219.75:15670] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanz.php"] [unique_id "aVpTsc5iX5mcgQLNlcgX-gAAAMQ"]
[Sun Jan 04 19:49:06.212687 2026] [:error] [pid 5072:tid 5144] [client 20.27.219.75:15727] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeeex.php"] [unique_id "aVpTsr2pfHYIoX6NUv0AUAAAA48"]
[Sun Jan 04 19:49:06.525741 2026] [:error] [pid 4979:tid 4997] [client 20.27.219.75:4060] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeeex.php"] [unique_id "aVpTsv02GTWzaEAF5mqRVQAAAY8"]
[Sun Jan 04 19:49:06.886649 2026] [:error] [pid 5072:tid 5130] [client 20.27.219.75:15726] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeeex.php"] [unique_id "aVpTsr2pfHYIoX6NUv0AUQAAA4E"]
[Sun Jan 04 19:49:07.623373 2026] [:error] [pid 5727:tid 5782] [client 20.27.219.75:3976] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeeex.php"] [unique_id "aVpTs-w4wd_I9FHn6_-rQQAAAxc"]
[Sun Jan 04 19:49:07.937776 2026] [:error] [pid 1297:tid 1304] [client 20.27.219.75:4038] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tons.php"] [unique_id "aVpTsxf98x0RBG23PjfTEQAAAAU"]
[Sun Jan 04 19:49:08.264193 2026] [:error] [pid 1297:tid 1312] [client 20.27.219.75:4063] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tons.php"] [unique_id "aVpTtBf98x0RBG23PjfTFgAAAA0"]
[Sun Jan 04 19:49:08.621032 2026] [:error] [pid 5010:tid 5047] [client 20.27.219.75:4036] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tons.php"] [unique_id "aVpTtLV9sNJtnPnkkz-UdAAAAoY"]
[Sun Jan 04 19:49:08.990738 2026] [:error] [pid 5629:tid 5639] [client 20.27.219.75:15689] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tons.php"] [unique_id "aVpTtJ5cwu3wbyCj4doMpwAAAIg"]
[Sun Jan 04 19:49:09.257004 2026] [:error] [pid 5629:tid 5642] [client 20.27.219.75:15676] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpup.php"] [unique_id "aVpTtZ5cwu3wbyCj4doMqAAAAIs"]
[Sun Jan 04 19:49:09.669885 2026] [:error] [pid 5661:tid 5706] [client 20.27.219.75:15720] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpup.php"] [unique_id "aVpTtbsKeIMjMZCmSEnzDQAAAhA"]
[Sun Jan 04 19:49:10.209860 2026] [:error] [pid 4979:tid 5003] [client 20.27.219.75:4003] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpup.php"] [unique_id "aVpTtv02GTWzaEAF5mqRWQAAAZU"]
[Sun Jan 04 19:49:10.598764 2026] [:error] [pid 5727:tid 5781] [client 20.27.219.75:15702] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpup.php"] [unique_id "aVpTtuw4wd_I9FHn6_-rRQAAAxY"]
[Sun Jan 04 19:49:11.088138 2026] [:error] [pid 5727:tid 5767] [client 20.27.219.75:15714] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2f.php"] [unique_id "aVpTt-w4wd_I9FHn6_-rSQAAAwg"]
[Sun Jan 04 19:49:11.657624 2026] [:error] [pid 5629:tid 5641] [client 20.27.219.75:15734] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2f.php"] [unique_id "aVpTt55cwu3wbyCj4doMrQAAAIo"]
[Sun Jan 04 19:49:12.406217 2026] [:error] [pid 58433:tid 58466] [client 20.27.219.75:15641] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2f.php"] [unique_id "aVpTuE5m7bkw35zhUNbljAAAAQI"]
[Sun Jan 04 19:49:12.891464 2026] [:error] [pid 5727:tid 5763] [client 20.27.219.75:4043] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2f.php"] [unique_id "aVpTuOw4wd_I9FHn6_-rTAAAAwQ"]
[Sun Jan 04 19:49:13.180926 2026] [:error] [pid 5072:tid 5149] [client 20.27.219.75:15659] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVpTub2pfHYIoX6NUv0AXQAAA5Q"]
[Sun Jan 04 19:49:13.650456 2026] [:error] [pid 5629:tid 5644] [client 20.27.219.75:4069] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVpTuZ5cwu3wbyCj4doMsQAAAI0"]
[Sun Jan 04 19:49:14.164136 2026] [:error] [pid 58432:tid 58459] [client 20.27.219.75:4086] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVpTus5iX5mcgQLNlcgYDQAAANY"]
[Sun Jan 04 19:49:14.534837 2026] [:error] [pid 5661:tid 5713] [client 20.27.219.75:15724] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ths.php"] [unique_id "aVpTursKeIMjMZCmSEnzEAAAAhc"]
[Sun Jan 04 19:49:14.864173 2026] [:error] [pid 5661:tid 5691] [client 20.27.219.75:15650] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVpTursKeIMjMZCmSEnzEQAAAgE"]
[Sun Jan 04 19:49:15.365594 2026] [:error] [pid 5629:tid 5635] [client 20.27.219.75:4059] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVpTu55cwu3wbyCj4doMuAAAAIQ"]
[Sun Jan 04 19:49:15.769232 2026] [:error] [pid 1328:tid 1355] [client 20.27.219.75:15739] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVpTu0_-FkByL1SGKiTPzAAAAVg"]
[Sun Jan 04 19:49:16.281706 2026] [:error] [pid 5727:tid 5764] [client 20.27.219.75:4040] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVpTvOw4wd_I9FHn6_-rTwAAAwU"]
[Sun Jan 04 19:49:16.698266 2026] [:error] [pid 5661:tid 5702] [client 20.27.219.75:3935] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aVpTvLsKeIMjMZCmSEnzFAAAAgw"]
[Sun Jan 04 19:49:17.112179 2026] [:error] [pid 5629:tid 5649] [client 20.27.219.75:3986] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aVpTvZ5cwu3wbyCj4doMuwAAAJI"]
[Sun Jan 04 19:49:17.712687 2026] [:error] [pid 1328:tid 1333] [client 20.27.219.75:4033] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aVpTvU_-FkByL1SGKiTP0QAAAUI"]
[Sun Jan 04 19:49:18.143753 2026] [:error] [pid 5661:tid 5706] [client 20.27.219.75:15673] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aVpTvrsKeIMjMZCmSEnzGQAAAhA"]
[Sun Jan 04 19:49:18.518019 2026] [:error] [pid 5010:tid 5046] [client 20.27.219.75:15666] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z57.php"] [unique_id "aVpTvrV9sNJtnPnkkz-UjgAAAoU"]
[Sun Jan 04 19:49:18.955493 2026] [:error] [pid 5661:tid 5701] [client 20.27.219.75:4068] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z57.php"] [unique_id "aVpTvrsKeIMjMZCmSEnzGgAAAgs"]
[Sun Jan 04 19:49:19.314692 2026] [:error] [pid 5727:tid 5771] [client 20.27.219.75:3972] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z57.php"] [unique_id "aVpTv-w4wd_I9FHn6_-rUAAAAww"]
[Sun Jan 04 19:49:19.633006 2026] [:error] [pid 1297:tid 1321] [client 20.27.219.75:15722] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z57.php"] [unique_id "aVpTvxf98x0RBG23PjfTGQAAABY"]
[Sun Jan 04 19:49:20.175209 2026] [:error] [pid 58433:tid 58476] [client 20.27.219.75:4088] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aVpTwE5m7bkw35zhUNbljgAAAQw"]
[Sun Jan 04 19:49:20.641756 2026] [:error] [pid 1297:tid 1320] [client 20.27.219.75:4094] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aVpTwBf98x0RBG23PjfTGgAAABU"]
[Sun Jan 04 19:49:21.108128 2026] [:error] [pid 5661:tid 5694] [client 20.27.219.75:15649] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aVpTwbsKeIMjMZCmSEnzGwAAAgQ"]
[Sun Jan 04 19:49:21.420912 2026] [:error] [pid 58433:tid 58482] [client 20.27.219.75:15696] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o2.php"] [unique_id "aVpTwU5m7bkw35zhUNbljwAAARI"]
[Sun Jan 04 19:49:21.792862 2026] [:error] [pid 4979:tid 4999] [client 20.27.219.75:15661] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/new2.php"] [unique_id "aVpTwf02GTWzaEAF5mqRXgAAAZE"]
[Sun Jan 04 19:49:22.198444 2026] [:error] [pid 1297:tid 1301] [client 20.27.219.75:15704] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/new2.php"] [unique_id "aVpTwhf98x0RBG23PjfTHAAAAAI"]
[Sun Jan 04 19:49:22.569353 2026] [:error] [pid 5727:tid 5781] [client 20.27.219.75:4056] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/new2.php"] [unique_id "aVpTwuw4wd_I9FHn6_-rUQAAAxY"]
[Sun Jan 04 19:49:22.881428 2026] [:error] [pid 4979:tid 5004] [client 20.27.219.75:15699] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/new2.php"] [unique_id "aVpTwv02GTWzaEAF5mqRYAAAAZY"]
[Sun Jan 04 19:49:23.260117 2026] [:error] [pid 5072:tid 5130] [client 20.27.219.75:15663] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nae.php"] [unique_id "aVpTw72pfHYIoX6NUv0AagAAA4E"]
[Sun Jan 04 19:49:23.547794 2026] [:error] [pid 1328:tid 1348] [client 20.27.219.75:3982] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nae.php"] [unique_id "aVpTw0_-FkByL1SGKiTP1QAAAVE"]
[Sun Jan 04 19:49:23.918733 2026] [:error] [pid 58432:tid 58438] [client 20.27.219.75:4084] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nae.php"] [unique_id "aVpTw85iX5mcgQLNlcgYFQAAAME"]
[Sun Jan 04 19:49:24.732440 2026] [:error] [pid 4979:tid 4990] [client 20.27.219.75:4008] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nae.php"] [unique_id "aVpTxP02GTWzaEAF5mqRYwAAAYg"]
[Sun Jan 04 19:49:25.152567 2026] [:error] [pid 1328:tid 1339] [client 20.27.219.75:3985] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aVpTxU_-FkByL1SGKiTP1wAAAUg"]
[Sun Jan 04 19:49:25.652361 2026] [:error] [pid 1297:tid 1302] [client 20.27.219.75:4073] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aVpTxRf98x0RBG23PjfTIAAAAAM"]
[Sun Jan 04 19:49:26.028663 2026] [:error] [pid 1297:tid 1312] [client 20.27.219.75:15718] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aVpTxhf98x0RBG23PjfTIQAAAA0"]
[Sun Jan 04 19:49:26.451655 2026] [:error] [pid 5727:tid 5767] [client 20.27.219.75:15679] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eru.php"] [unique_id "aVpTxuw4wd_I9FHn6_-rVwAAAwg"]
[Sun Jan 04 19:49:26.723871 2026] [:error] [pid 1328:tid 1350] [client 20.27.219.75:4083] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aVpTxk_-FkByL1SGKiTP2AAAAVM"]
[Sun Jan 04 19:49:27.198911 2026] [:error] [pid 5661:tid 5708] [client 20.27.219.75:4078] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aVpTx7sKeIMjMZCmSEnzHgAAAhI"]
[Sun Jan 04 19:49:27.514102 2026] [:error] [pid 1328:tid 1343] [client 20.27.219.75:4032] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aVpTx0_-FkByL1SGKiTP2QAAAUw"]
[Sun Jan 04 19:49:27.905739 2026] [:error] [pid 5629:tid 5637] [client 20.27.219.75:15732] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/JPG.php"] [unique_id "aVpTx55cwu3wbyCj4doMyAAAAIY"]
[Sun Jan 04 19:49:28.222654 2026] [:error] [pid 5661:tid 5713] [client 20.27.219.75:4070] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsz.php"] [unique_id "aVpTyLsKeIMjMZCmSEnzIQAAAhc"]
[Sun Jan 04 19:49:28.827467 2026] [:error] [pid 1328:tid 1334] [client 20.27.219.75:4042] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsz.php"] [unique_id "aVpTyE_-FkByL1SGKiTP2wAAAUM"]
[Sun Jan 04 19:49:34.484965 2026] [:error] [pid 5010:tid 5058] [client 20.27.219.75:15730] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aVpTzrV9sNJtnPnkkz-U1QAAApE"]
[Sun Jan 04 19:49:34.964945 2026] [:error] [pid 5629:tid 5651] [client 20.27.219.75:15616] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aVpTzp5cwu3wbyCj4doM2AAAAJQ"]
[Sun Jan 04 19:49:35.331017 2026] [:error] [pid 5629:tid 5644] [client 20.27.219.75:15685] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aVpTz55cwu3wbyCj4doM2gAAAI0"]
[Sun Jan 04 19:49:35.673915 2026] [:error] [pid 5727:tid 5773] [client 20.27.219.75:15692] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pn.php"] [unique_id "aVpTz-w4wd_I9FHn6_-rfgAAAw4"]
[Sun Jan 04 19:49:36.066344 2026] [:error] [pid 5629:tid 5653] [client 20.27.219.75:4058] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aVpT0J5cwu3wbyCj4doM3QAAAJY"]
[Sun Jan 04 19:49:36.660985 2026] [:error] [pid 5072:tid 5139] [client 20.27.219.75:15700] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aVpT0L2pfHYIoX6NUv0AeQAAA4o"]
[Sun Jan 04 19:49:37.025286 2026] [:error] [pid 4979:tid 4988] [client 20.27.219.75:15664] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aVpT0f02GTWzaEAF5mqRdwAAAYY"]
[Sun Jan 04 19:49:37.561923 2026] [:error] [pid 5661:tid 5704] [client 20.27.219.75:3989] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7f8c8.php"] [unique_id "aVpT0bsKeIMjMZCmSEnzLgAAAg4"]
[Sun Jan 04 19:49:38.166678 2026] [:error] [pid 1297:tid 1310] [client 20.27.219.75:15668] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aVpT0hf98x0RBG23PjfTMAAAAAs"]
[Sun Jan 04 19:49:38.595341 2026] [:error] [pid 1328:tid 1338] [client 20.27.219.75:4014] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aVpT0k_-FkByL1SGKiTP4QAAAUc"]
[Sun Jan 04 19:49:38.935676 2026] [:error] [pid 5661:tid 5714] [client 20.27.219.75:15620] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aVpT0rsKeIMjMZCmSEnzNQAAAhg"]
[Sun Jan 04 19:49:39.379566 2026] [:error] [pid 5727:tid 5766] [client 20.27.219.75:4067] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tua.php"] [unique_id "aVpT0-w4wd_I9FHn6_-riAAAAwc"]
[Sun Jan 04 19:49:39.774107 2026] [:error] [pid 1297:tid 1312] [client 20.27.219.75:4092] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aVpT0xf98x0RBG23PjfTMwAAAA0"]
[Sun Jan 04 19:49:40.270324 2026] [:error] [pid 1328:tid 1354] [client 20.27.219.75:4065] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aVpT1E_-FkByL1SGKiTP4wAAAVc"]
[Sun Jan 04 19:49:40.728221 2026] [:error] [pid 58432:tid 58440] [client 20.27.219.75:15671] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aVpT1M5iX5mcgQLNlcgYHQAAAMM"]
[Sun Jan 04 19:49:41.026340 2026] [:error] [pid 1328:tid 1345] [client 20.27.219.75:4085] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-db.php"] [unique_id "aVpT1U_-FkByL1SGKiTP5QAAAU4"]
[Sun Jan 04 19:49:41.381619 2026] [:error] [pid 5727:tid 5782] [client 20.27.219.75:4024] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/set.php"] [unique_id "aVpT1ew4wd_I9FHn6_-rjAAAAxc"]
[Sun Jan 04 19:49:41.788837 2026] [:error] [pid 1328:tid 1344] [client 20.27.219.75:4089] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/set.php"] [unique_id "aVpT1U_-FkByL1SGKiTP5wAAAU0"]
[Sun Jan 04 19:49:42.166174 2026] [:error] [pid 58432:tid 58461] [client 20.27.219.75:15619] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/set.php"] [unique_id "aVpT1s5iX5mcgQLNlcgYIAAAANg"]
[Sun Jan 04 19:49:42.468673 2026] [:error] [pid 58432:tid 58437] [client 20.27.219.75:3951] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/set.php"] [unique_id "aVpT1s5iX5mcgQLNlcgYIgAAAMA"]
[Sun Jan 04 19:49:42.897274 2026] [:error] [pid 58432:tid 58448] [client 20.27.219.75:15658] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aVpT1s5iX5mcgQLNlcgYIwAAAMs"]
[Sun Jan 04 19:49:43.219589 2026] [:error] [pid 1328:tid 1339] [client 20.27.219.75:3978] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aVpT10_-FkByL1SGKiTP6AAAAUg"]
[Sun Jan 04 19:49:43.543901 2026] [:error] [pid 4979:tid 5006] [client 20.27.219.75:4011] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aVpT1_02GTWzaEAF5mqRfQAAAZg"]
[Sun Jan 04 19:49:43.986739 2026] [:error] [pid 58432:tid 58445] [client 20.27.219.75:4035] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aVpT185iX5mcgQLNlcgYJAAAAMg"]
[Sun Jan 04 19:49:44.300207 2026] [:error] [pid 5629:tid 5652] [client 20.27.219.75:4012] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aVpT2J5cwu3wbyCj4doM6QAAAJU"]
[Sun Jan 04 19:49:44.716877 2026] [:error] [pid 1297:tid 1303] [client 20.27.219.75:4044] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aVpT2Bf98x0RBG23PjfTNQAAAAQ"]
[Sun Jan 04 19:49:45.111979 2026] [:error] [pid 5010:tid 5046] [client 20.27.219.75:4082] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aVpT2bV9sNJtnPnkkz-U5wAAAoU"]
[Sun Jan 04 19:49:45.377828 2026] [:error] [pid 58433:tid 58481] [client 20.27.219.75:3933] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aVpT2U5m7bkw35zhUNblpgAAARE"]
[Sun Jan 04 19:49:45.669378 2026] [:error] [pid 1328:tid 1351] [client 20.27.219.75:3995] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aVpT2U_-FkByL1SGKiTP6gAAAVQ"]
[Sun Jan 04 19:49:46.007180 2026] [:error] [pid 5010:tid 5055] [client 20.27.219.75:15689] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aVpT2rV9sNJtnPnkkz-U6QAAAo4"]
[Sun Jan 04 19:49:46.342110 2026] [:error] [pid 4979:tid 4996] [client 20.27.219.75:4079] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aVpT2v02GTWzaEAF5mqRgAAAAY4"]
[Sun Jan 04 19:49:46.635327 2026] [:error] [pid 1328:tid 1350] [client 20.27.219.75:4026] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aVpT2k_-FkByL1SGKiTP7AAAAVM"]
[Sun Jan 04 19:49:46.946007 2026] [:error] [pid 4979:tid 4983] [client 20.27.219.75:15681] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aVpT2v02GTWzaEAF5mqRggAAAYE"]
[Sun Jan 04 19:49:47.442240 2026] [:error] [pid 5010:tid 5057] [client 20.27.219.75:4091] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aVpT27V9sNJtnPnkkz-U6wAAApA"]
[Sun Jan 04 19:49:47.860967 2026] [:error] [pid 1297:tid 1317] [client 20.27.219.75:15709] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aVpT2xf98x0RBG23PjfTOAAAABI"]
[Sun Jan 04 19:49:48.312311 2026] [:error] [pid 5727:tid 5783] [client 20.27.219.75:15680] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zil.php"] [unique_id "aVpT3Ow4wd_I9FHn6_-rlAAAAxg"]
[Sun Jan 04 19:49:48.702172 2026] [:error] [pid 1297:tid 1323] [client 20.27.219.75:15662] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/l.php"] [unique_id "aVpT3Bf98x0RBG23PjfTOQAAABg"]
[Sun Jan 04 19:49:49.048695 2026] [:error] [pid 5010:tid 5052] [client 20.27.219.75:3928] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/l.php"] [unique_id "aVpT3bV9sNJtnPnkkz-U7QAAAos"]
[Sun Jan 04 19:49:49.298635 2026] [:error] [pid 1297:tid 1319] [client 20.27.219.75:3977] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/l.php"] [unique_id "aVpT3Rf98x0RBG23PjfTOgAAABQ"]
[Sun Jan 04 19:49:49.612948 2026] [:error] [pid 5727:tid 5769] [client 20.27.219.75:4045] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/l.php"] [unique_id "aVpT3ew4wd_I9FHn6_-rmgAAAwo"]
[Sun Jan 04 19:49:50.157457 2026] [:error] [pid 5727:tid 5779] [client 20.27.219.75:3971] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Eva.php"] [unique_id "aVpT3uw4wd_I9FHn6_-rnAAAAxQ"]
[Sun Jan 04 19:49:50.711515 2026] [:error] [pid 5629:tid 5642] [client 20.27.219.75:4002] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Eva.php"] [unique_id "aVpT3p5cwu3wbyCj4doM_QAAAIs"]
[Sun Jan 04 19:49:51.065197 2026] [:error] [pid 5010:tid 5045] [client 20.27.219.75:4066] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Eva.php"] [unique_id "aVpT37V9sNJtnPnkkz-U8gAAAoQ"]
[Sun Jan 04 19:49:51.325091 2026] [:error] [pid 1297:tid 1307] [client 20.27.219.75:4009] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Eva.php"] [unique_id "aVpT3xf98x0RBG23PjfTOwAAAAg"]
[Sun Jan 04 19:49:51.742244 2026] [:error] [pid 5010:tid 5051] [client 20.27.219.75:4037] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dop.php"] [unique_id "aVpT37V9sNJtnPnkkz-U9QAAAoo"]
[Sun Jan 04 19:49:52.059630 2026] [:error] [pid 5629:tid 5652] [client 20.27.219.75:15705] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dop.php"] [unique_id "aVpT4J5cwu3wbyCj4doNAAAAAJU"]
[Sun Jan 04 19:49:52.594571 2026] [:error] [pid 5629:tid 5651] [client 20.27.219.75:15735] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dop.php"] [unique_id "aVpT4J5cwu3wbyCj4doNAQAAAJQ"]
[Sun Jan 04 19:49:52.955023 2026] [:error] [pid 4979:tid 4999] [client 20.27.219.75:3908] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dop.php"] [unique_id "aVpT4P02GTWzaEAF5mqRhgAAAZE"]
[Sun Jan 04 19:49:53.524487 2026] [:error] [pid 5629:tid 5643] [client 20.27.219.75:15738] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aVpT4Z5cwu3wbyCj4doNBAAAAIw"]
[Sun Jan 04 19:49:54.112834 2026] [:error] [pid 58432:tid 58439] [client 20.27.219.75:3937] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aVpT4s5iX5mcgQLNlcgYLgAAAMI"]
[Sun Jan 04 19:49:54.498991 2026] [:error] [pid 5072:tid 5144] [client 20.27.219.75:4080] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aVpT4r2pfHYIoX6NUv0AfQAAA48"]
[Sun Jan 04 19:49:54.906482 2026] [:error] [pid 5661:tid 5700] [client 20.27.219.75:15667] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ula.php"] [unique_id "aVpT4rsKeIMjMZCmSEnzOwAAAgo"]
[Sun Jan 04 19:49:55.198324 2026] [:error] [pid 5727:tid 5772] [client 20.27.219.75:3999] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aVpT4-w4wd_I9FHn6_-rogAAAw0"]
[Sun Jan 04 19:49:55.891036 2026] [:error] [pid 4979:tid 4990] [client 20.27.219.75:4054] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aVpT4_02GTWzaEAF5mqRigAAAYg"]
[Sun Jan 04 19:49:56.211670 2026] [:error] [pid 5010:tid 5065] [client 20.27.219.75:3916] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aVpT5LV9sNJtnPnkkz-U-wAAApg"]
[Sun Jan 04 19:49:56.494713 2026] [:error] [pid 1328:tid 1335] [client 20.27.219.75:15677] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3.php"] [unique_id "aVpT5E_-FkByL1SGKiTP8gAAAUQ"]
[Sun Jan 04 19:49:56.967326 2026] [:error] [pid 4979:tid 4985] [client 20.27.219.75:3983] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aVpT5P02GTWzaEAF5mqRiwAAAYM"]
[Sun Jan 04 19:49:57.296082 2026] [:error] [pid 1297:tid 1300] [client 20.27.219.75:4087] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aVpT5Rf98x0RBG23PjfTPgAAAAE"]
[Sun Jan 04 19:49:57.626461 2026] [:error] [pid 5072:tid 5145] [client 20.27.219.75:15675] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aVpT5b2pfHYIoX6NUv0AgAAAA5A"]
[Sun Jan 04 19:49:57.952676 2026] [:error] [pid 5072:tid 5134] [client 20.27.219.75:4081] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/card.php"] [unique_id "aVpT5b2pfHYIoX6NUv0AggAAA4U"]
[Sun Jan 04 19:49:58.663651 2026] [:error] [pid 5629:tid 5636] [client 20.27.219.75:3994] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aVpT5p5cwu3wbyCj4doNCwAAAIU"]
[Sun Jan 04 19:49:58.933925 2026] [:error] [pid 5727:tid 5780] [client 20.27.219.75:3962] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aVpT5uw4wd_I9FHn6_-rpAAAAxU"]
[Sun Jan 04 19:49:59.421935 2026] [:error] [pid 4979:tid 4995] [client 20.27.219.75:15655] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aVpT5_02GTWzaEAF5mqRjgAAAY0"]
[Sun Jan 04 19:49:59.720625 2026] [:error] [pid 4979:tid 4986] [client 20.27.219.75:15630] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hum.php"] [unique_id "aVpT5_02GTWzaEAF5mqRjwAAAYQ"]
[Sun Jan 04 19:50:00.143586 2026] [:error] [pid 1328:tid 1342] [client 20.27.219.75:3938] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aVpT6E_-FkByL1SGKiTP-wAAAUs"]
[Sun Jan 04 19:50:00.739626 2026] [:error] [pid 58433:tid 58471] [client 20.27.219.75:4021] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aVpT6E5m7bkw35zhUNblsAAAAQc"]
[Sun Jan 04 19:50:01.161068 2026] [:error] [pid 5072:tid 5137] [client 20.27.219.75:4039] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aVpT6b2pfHYIoX6NUv0AhQAAA4g"]
[Sun Jan 04 19:50:01.504871 2026] [:error] [pid 5661:tid 5705] [client 20.27.219.75:4005] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bq.php"] [unique_id "aVpT6bsKeIMjMZCmSEnzRAAAAg8"]
[Sun Jan 04 19:50:01.828208 2026] [:error] [pid 5661:tid 5714] [client 20.27.219.75:3915] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xm.php"] [unique_id "aVpT6bsKeIMjMZCmSEnzRgAAAhg"]
[Sun Jan 04 19:50:02.148884 2026] [:error] [pid 5072:tid 5152] [client 20.27.219.75:3958] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xm.php"] [unique_id "aVpT6r2pfHYIoX6NUv0AhgAAA5c"]
[Sun Jan 04 19:50:02.533089 2026] [:error] [pid 58433:tid 58465] [client 20.27.219.75:4076] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xm.php"] [unique_id "aVpT6k5m7bkw35zhUNbltQAAAQE"]
[Sun Jan 04 19:50:02.829471 2026] [:error] [pid 1297:tid 1314] [client 20.27.219.75:15648] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xm.php"] [unique_id "aVpT6hf98x0RBG23PjfTQwAAAA8"]
[Sun Jan 04 19:50:03.230466 2026] [:error] [pid 5010:tid 5045] [client 20.27.219.75:15684] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1.php"] [unique_id "aVpT67V9sNJtnPnkkz-VBAAAAoQ"]
[Sun Jan 04 19:50:03.589651 2026] [:error] [pid 5661:tid 5690] [client 20.27.219.75:4023] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1.php"] [unique_id "aVpT67sKeIMjMZCmSEnzSAAAAgA"]
[Sun Jan 04 19:50:03.845019 2026] [:error] [pid 5661:tid 5712] [client 20.27.219.75:3913] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1.php"] [unique_id "aVpT67sKeIMjMZCmSEnzSQAAAhY"]
[Sun Jan 04 19:50:04.182901 2026] [:error] [pid 58432:tid 58455] [client 20.27.219.75:15656] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1.php"] [unique_id "aVpT7M5iX5mcgQLNlcgYNAAAANI"]
[Sun Jan 04 19:50:04.500035 2026] [:error] [pid 5661:tid 5706] [client 20.27.219.75:4061] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aVpT7LsKeIMjMZCmSEnzSwAAAhA"]
[Sun Jan 04 19:50:04.807751 2026] [:error] [pid 1297:tid 1303] [client 20.27.219.75:4013] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aVpT7Bf98x0RBG23PjfTRwAAAAQ"]
[Sun Jan 04 19:50:05.088983 2026] [:error] [pid 58433:tid 58466] [client 20.27.219.75:3930] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aVpT7U5m7bkw35zhUNbltgAAAQI"]
[Sun Jan 04 19:50:05.394804 2026] [:error] [pid 5010:tid 5042] [client 20.27.219.75:15706] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/73106.php"] [unique_id "aVpT7bV9sNJtnPnkkz-VBwAAAoE"]
[Sun Jan 04 19:50:05.730593 2026] [:error] [pid 1328:tid 1353] [client 20.27.219.75:3907] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aVpT7U_-FkByL1SGKiTQAwAAAVY"]
[Sun Jan 04 19:50:06.052584 2026] [:error] [pid 5072:tid 5142] [client 20.27.219.75:4016] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aVpT7r2pfHYIoX6NUv0AjwAAA40"]
[Sun Jan 04 19:50:06.449393 2026] [:error] [pid 4979:tid 4999] [client 20.27.219.75:4018] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aVpT7v02GTWzaEAF5mqRlwAAAZE"]
[Sun Jan 04 19:50:06.884761 2026] [:error] [pid 1297:tid 1315] [client 20.27.219.75:3998] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aVpT7hf98x0RBG23PjfTSwAAABA"]
[Sun Jan 04 19:50:07.148666 2026] [:error] [pid 4979:tid 5004] [client 20.27.219.75:3944] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aVpT7_02GTWzaEAF5mqRmgAAAZY"]
[Sun Jan 04 19:50:07.499043 2026] [:error] [pid 4979:tid 5005] [client 20.27.219.75:3979] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aVpT7_02GTWzaEAF5mqRnAAAAZc"]
[Sun Jan 04 19:50:07.786358 2026] [:error] [pid 58432:tid 58445] [client 20.27.219.75:4093] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aVpT785iX5mcgQLNlcgYOAAAAMg"]
[Sun Jan 04 19:50:08.120642 2026] [:error] [pid 5010:tid 5044] [client 20.27.219.75:3974] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aVpT8LV9sNJtnPnkkz-VCwAAAoM"]
[Sun Jan 04 19:50:08.449790 2026] [:error] [pid 5727:tid 5779] [client 20.27.219.75:3941] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1254.php"] [unique_id "aVpT8Ow4wd_I9FHn6_-rpwAAAxQ"]
[Sun Jan 04 19:50:08.761968 2026] [:error] [pid 5072:tid 5149] [client 20.27.219.75:4007] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1254.php"] [unique_id "aVpT8L2pfHYIoX6NUv0AkgAAA5Q"]
[Sun Jan 04 19:50:09.015253 2026] [:error] [pid 4979:tid 4992] [client 20.27.219.75:3996] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1254.php"] [unique_id "aVpT8f02GTWzaEAF5mqRoQAAAYo"]
[Sun Jan 04 19:50:09.336430 2026] [:error] [pid 1297:tid 1323] [client 20.27.219.75:3939] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1254.php"] [unique_id "aVpT8Rf98x0RBG23PjfTTgAAABg"]
[Sun Jan 04 19:50:09.692342 2026] [:error] [pid 5010:tid 5054] [client 20.27.219.75:15660] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aVpT8bV9sNJtnPnkkz-VDgAAAo0"]
[Sun Jan 04 19:50:10.018945 2026] [:error] [pid 5010:tid 5053] [client 20.27.219.75:4052] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aVpT8rV9sNJtnPnkkz-VEQAAAow"]
[Sun Jan 04 19:50:10.440539 2026] [:error] [pid 5661:tid 5707] [client 20.27.219.75:4090] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aVpT8rsKeIMjMZCmSEnzTgAAAhE"]
[Sun Jan 04 19:50:10.744887 2026] [:error] [pid 4979:tid 5005] [client 20.27.219.75:3934] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aVpT8v02GTWzaEAF5mqRrwAAAZc"]
[Sun Jan 04 19:50:11.094725 2026] [:error] [pid 5072:tid 5146] [client 20.27.219.75:4077] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aVpT872pfHYIoX6NUv0AkwAAA5E"]
[Sun Jan 04 19:50:11.492680 2026] [:error] [pid 5661:tid 5696] [client 20.27.219.75:3925] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aVpT87sKeIMjMZCmSEnzUQAAAgY"]
[Sun Jan 04 19:50:11.882590 2026] [:error] [pid 5629:tid 5649] [client 20.27.219.75:3927] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aVpT855cwu3wbyCj4doNJAAAAJI"]
[Sun Jan 04 19:50:12.252738 2026] [:error] [pid 1328:tid 1348] [client 20.27.219.75:3981] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hob.php"] [unique_id "aVpT9E_-FkByL1SGKiTQEAAAAVE"]
[Sun Jan 04 19:50:12.599488 2026] [:error] [pid 58433:tid 58484] [client 20.27.219.75:4004] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aVpT9E5m7bkw35zhUNblwAAAARQ"]
[Sun Jan 04 19:50:13.005910 2026] [:error] [pid 5072:tid 5147] [client 20.27.219.75:15674] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aVpT9b2pfHYIoX6NUv0AlgAAA5I"]
[Sun Jan 04 19:50:13.355841 2026] [:error] [pid 5727:tid 5783] [client 20.27.219.75:3912] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aVpT9ew4wd_I9FHn6_-rsAAAAxg"]
[Sun Jan 04 19:50:13.689762 2026] [:error] [pid 1297:tid 1312] [client 20.27.219.75:15625] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/poj.php"] [unique_id "aVpT9Rf98x0RBG23PjfTUgAAAA0"]
[Sun Jan 04 19:50:14.032190 2026] [:error] [pid 5661:tid 5701] [client 20.27.219.75:3918] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/show/asa.php"] [unique_id "aVpT9rsKeIMjMZCmSEnzWgAAAgs"]
[Sun Jan 04 19:50:14.420425 2026] [:error] [pid 5629:tid 5643] [client 20.27.219.75:4030] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/show/asa.php"] [unique_id "aVpT9p5cwu3wbyCj4doNLAAAAIw"]
[Sun Jan 04 19:50:14.684752 2026] [:error] [pid 5629:tid 5641] [client 20.27.219.75:3926] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/show/asa.php"] [unique_id "aVpT9p5cwu3wbyCj4doNLQAAAIo"]
[Sun Jan 04 19:50:15.013967 2026] [:error] [pid 5072:tid 5131] [client 20.27.219.75:4000] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/show/asa.php"] [unique_id "aVpT972pfHYIoX6NUv0AmQAAA4I"]
[Sun Jan 04 19:50:15.304455 2026] [:error] [pid 5661:tid 5698] [client 20.27.219.75:3866] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.an5.php"] [unique_id "aVpT97sKeIMjMZCmSEnzXAAAAgg"]
[Sun Jan 04 19:50:15.637629 2026] [:error] [pid 5629:tid 5653] [client 20.27.219.75:4075] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.an5.php"] [unique_id "aVpT955cwu3wbyCj4doNMwAAAJY"]
[Sun Jan 04 19:50:16.083010 2026] [:error] [pid 5010:tid 5062] [client 20.27.219.75:4022] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.an5.php"] [unique_id "aVpT-LV9sNJtnPnkkz-VGwAAApU"]
[Sun Jan 04 19:50:16.554833 2026] [:error] [pid 5727:tid 5771] [client 20.27.219.75:3853] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.an5.php"] [unique_id "aVpT-Ow4wd_I9FHn6_-rugAAAww"]
[Sun Jan 04 19:50:16.997550 2026] [:error] [pid 5661:tid 5704] [client 20.27.219.75:15691] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aVpT-LsKeIMjMZCmSEnzXwAAAg4"]
[Sun Jan 04 19:50:17.293079 2026] [:error] [pid 5629:tid 5632] [client 20.27.219.75:3993] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aVpT-Z5cwu3wbyCj4doNNgAAAIE"]
[Sun Jan 04 19:50:17.593229 2026] [:error] [pid 58433:tid 58469] [client 20.27.219.75:4020] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aVpT-U5m7bkw35zhUNblxQAAAQU"]
[Sun Jan 04 19:50:17.860130 2026] [:error] [pid 5072:tid 5145] [client 20.27.219.75:3991] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aVpT-b2pfHYIoX6NUv0AoAAAA5A"]
[Sun Jan 04 19:50:18.179575 2026] [:error] [pid 5629:tid 5637] [client 20.27.219.75:3990] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/twso.php"] [unique_id "aVpT-p5cwu3wbyCj4doNOwAAAIY"]
[Sun Jan 04 19:50:18.442789 2026] [:error] [pid 58433:tid 58476] [client 20.27.219.75:3961] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/twso.php"] [unique_id "aVpT-k5m7bkw35zhUNblygAAAQw"]
[Sun Jan 04 19:50:18.813709 2026] [:error] [pid 58432:tid 58437] [client 20.27.219.75:3910] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/twso.php"] [unique_id "aVpT-s5iX5mcgQLNlcgYSAAAAMA"]
[Sun Jan 04 19:50:19.233751 2026] [:error] [pid 58433:tid 58481] [client 20.27.219.75:3909] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/twso.php"] [unique_id "aVpT-05m7bkw35zhUNblzAAAARE"]
[Sun Jan 04 19:50:19.574807 2026] [:error] [pid 1328:tid 1336] [client 20.27.219.75:3777] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aVpT-0_-FkByL1SGKiTQGwAAAUU"]
[Sun Jan 04 19:50:19.871049 2026] [:error] [pid 1297:tid 1313] [client 20.27.219.75:15653] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aVpT-xf98x0RBG23PjfTWAAAAA4"]
[Sun Jan 04 19:50:20.255048 2026] [:error] [pid 1328:tid 1333] [client 20.27.219.75:4051] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aVpT_E_-FkByL1SGKiTQHQAAAUI"]
[Sun Jan 04 19:50:20.594492 2026] [:error] [pid 4979:tid 4994] [client 20.27.219.75:4034] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pes.php"] [unique_id "aVpT_P02GTWzaEAF5mqRvAAAAYw"]
[Sun Jan 04 19:50:20.893445 2026] [:error] [pid 4979:tid 4998] [client 20.27.219.75:3929] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aVpT_P02GTWzaEAF5mqRwAAAAZA"]
[Sun Jan 04 19:50:21.238060 2026] [:error] [pid 4979:tid 5002] [client 20.27.219.75:4084] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aVpT_f02GTWzaEAF5mqRxgAAAZQ"]
[Sun Jan 04 19:50:21.749166 2026] [:error] [pid 4979:tid 5005] [client 20.27.219.75:3949] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aVpT_f02GTWzaEAF5mqRyAAAAZc"]
[Sun Jan 04 19:50:22.051325 2026] [:error] [pid 5010:tid 5062] [client 20.27.219.75:3931] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "aVpT_rV9sNJtnPnkkz-VLAAAApU"]
[Sun Jan 04 19:50:22.413819 2026] [:error] [pid 5727:tid 5759] [client 20.27.219.75:3973] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cliner.php"] [unique_id "aVpT_uw4wd_I9FHn6_-rxwAAAwA"]
[Sun Jan 04 19:50:22.707594 2026] [:error] [pid 5629:tid 5633] [client 20.27.219.75:3859] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cliner.php"] [unique_id "aVpT_p5cwu3wbyCj4doNSQAAAII"]
[Sun Jan 04 19:50:23.044812 2026] [:error] [pid 5727:tid 5781] [client 20.27.219.75:3852] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cliner.php"] [unique_id "aVpT_-w4wd_I9FHn6_-ryQAAAxY"]
[Sun Jan 04 19:50:23.375702 2026] [:error] [pid 58433:tid 58475] [client 20.27.219.75:3988] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cliner.php"] [unique_id "aVpT_05m7bkw35zhUNbl0wAAAQs"]
[Sun Jan 04 19:50:23.692271 2026] [:error] [pid 5072:tid 5131] [client 20.27.219.75:4027] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdrex.php"] [unique_id "aVpT_72pfHYIoX6NUv0AqAAAA4I"]
[Sun Jan 04 19:50:24.000338 2026] [:error] [pid 5010:tid 5058] [client 20.27.219.75:3846] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdrex.php"] [unique_id "aVpT_7V9sNJtnPnkkz-VMgAAApE"]
[Sun Jan 04 19:50:24.306143 2026] [:error] [pid 5661:tid 5707] [client 20.27.219.75:3924] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdrex.php"] [unique_id "aVpUALsKeIMjMZCmSEnzZwAAAhE"]
[Sun Jan 04 19:50:24.588222 2026] [:error] [pid 1297:tid 1317] [client 20.27.219.75:3871] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kdrex.php"] [unique_id "aVpUABf98x0RBG23PjfTWgAAABI"]
[Sun Jan 04 19:50:24.959231 2026] [:error] [pid 5072:tid 5138] [client 20.27.219.75:3921] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "aVpUAL2pfHYIoX6NUv0ArAAAA4k"]
[Sun Jan 04 19:50:25.314491 2026] [:error] [pid 58432:tid 58446] [client 20.27.219.75:3970] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "aVpUAc5iX5mcgQLNlcgYTgAAAMk"]
[Sun Jan 04 19:50:25.604294 2026] [:error] [pid 4979:tid 4990] [client 20.27.219.75:3942] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "aVpUAf02GTWzaEAF5mqRzQAAAYg"]
[Sun Jan 04 19:50:25.999612 2026] [:error] [pid 58432:tid 58447] [client 20.27.219.75:3848] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "aVpUAc5iX5mcgQLNlcgYUAAAAMo"]
[Sun Jan 04 19:50:26.268434 2026] [:error] [pid 5072:tid 5134] [client 20.27.219.75:3968] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aVpUAr2pfHYIoX6NUv0AsgAAA4U"]
[Sun Jan 04 19:50:26.584101 2026] [:error] [pid 5727:tid 5774] [client 20.27.219.75:3887] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aVpUAuw4wd_I9FHn6_-r1AAAAw8"]
[Sun Jan 04 19:50:26.953687 2026] [:error] [pid 58433:tid 58469] [client 20.27.219.75:3959] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aVpUAk5m7bkw35zhUNbl1gAAAQU"]
[Sun Jan 04 19:50:27.294966 2026] [:error] [pid 5727:tid 5781] [client 20.27.219.75:3980] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aVpUA-w4wd_I9FHn6_-r2gAAAxY"]
[Sun Jan 04 19:50:27.788536 2026] [:error] [pid 58432:tid 58459] [client 20.27.219.75:3966] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moo.php"] [unique_id "aVpUA85iX5mcgQLNlcgYUgAAANY"]
[Sun Jan 04 19:50:28.136931 2026] [:error] [pid 5010:tid 5061] [client 20.27.219.75:3923] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moo.php"] [unique_id "aVpUBLV9sNJtnPnkkz-VOgAAApQ"]
[Sun Jan 04 19:50:28.490763 2026] [:error] [pid 1297:tid 1307] [client 20.27.219.75:3843] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moo.php"] [unique_id "aVpUBBf98x0RBG23PjfTWwAAAAg"]
[Sun Jan 04 19:50:28.977683 2026] [:error] [pid 5010:tid 5041] [client 20.27.219.75:3867] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moo.php"] [unique_id "aVpUBLV9sNJtnPnkkz-VPQAAAoA"]
[Sun Jan 04 19:50:29.395418 2026] [:error] [pid 5661:tid 5691] [client 20.27.219.75:3879] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aVpUBbsKeIMjMZCmSEnzbgAAAgE"]
[Sun Jan 04 19:50:29.781901 2026] [:error] [pid 5072:tid 5139] [client 20.27.219.75:3844] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aVpUBb2pfHYIoX6NUv0AtgAAA4o"]
[Sun Jan 04 19:50:30.114186 2026] [:error] [pid 5727:tid 5761] [client 20.27.219.75:3905] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aVpUBuw4wd_I9FHn6_-r4gAAAwI"]
[Sun Jan 04 19:50:30.560017 2026] [:error] [pid 58432:tid 58439] [client 20.27.219.75:3854] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haf.php"] [unique_id "aVpUBs5iX5mcgQLNlcgYVAAAAMI"]
[Sun Jan 04 19:50:30.948129 2026] [:error] [pid 1328:tid 1347] [client 20.27.219.75:3992] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aVpUBk_-FkByL1SGKiTQJQAAAVA"]
[Sun Jan 04 19:50:31.328121 2026] [:error] [pid 58432:tid 58454] [client 20.27.219.75:3954] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aVpUB85iX5mcgQLNlcgYVwAAANE"]
[Sun Jan 04 19:50:31.691375 2026] [:error] [pid 58432:tid 58450] [client 20.27.219.75:3987] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aVpUB85iX5mcgQLNlcgYWQAAAM0"]
[Sun Jan 04 19:50:32.019791 2026] [:error] [pid 4979:tid 4984] [client 20.27.219.75:3885] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aVpUCP02GTWzaEAF5mqR0QAAAYI"]
[Sun Jan 04 19:50:32.391171 2026] [:error] [pid 4979:tid 4996] [client 20.27.219.75:15712] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aVpUCP02GTWzaEAF5mqR1AAAAY4"]
[Sun Jan 04 19:50:32.806346 2026] [:error] [pid 4979:tid 5000] [client 20.27.219.75:4006] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aVpUCP02GTWzaEAF5mqR1wAAAZI"]
[Sun Jan 04 19:50:33.272817 2026] [:error] [pid 5010:tid 5047] [client 20.27.219.75:4029] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aVpUCbV9sNJtnPnkkz-VRwAAAoY"]
[Sun Jan 04 19:50:33.596510 2026] [:error] [pid 58433:tid 58477] [client 20.27.219.75:3800] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sec.php"] [unique_id "aVpUCU5m7bkw35zhUNbl3gAAAQ0"]
[Sun Jan 04 19:50:33.897799 2026] [:error] [pid 1297:tid 1304] [client 20.27.219.75:3872] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gul.php"] [unique_id "aVpUCRf98x0RBG23PjfTYwAAAAU"]
[Sun Jan 04 19:50:38.020053 2026] [:error] [pid 5661:tid 5705] [client 20.27.219.75:3805] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efa4f.php"] [unique_id "aVpUDrsKeIMjMZCmSEnzgwAAAg8"]
[Sun Jan 04 19:50:38.638139 2026] [:error] [pid 58432:tid 58440] [client 20.27.219.75:3881] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efa4f.php"] [unique_id "aVpUDs5iX5mcgQLNlcgYaAAAAMM"]
[Sun Jan 04 19:50:39.026434 2026] [:error] [pid 5010:tid 5046] [client 20.27.219.75:3953] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efa4f.php"] [unique_id "aVpUD7V9sNJtnPnkkz-VTwAAAoU"]
[Sun Jan 04 19:50:39.378800 2026] [:error] [pid 1297:tid 1323] [client 20.27.219.75:4010] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/efa4f.php"] [unique_id "aVpUDxf98x0RBG23PjfTagAAABg"]
[Sun Jan 04 19:50:39.633023 2026] [:error] [pid 4979:tid 4989] [client 20.27.219.75:3841] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zuk.php"] [unique_id "aVpUD_02GTWzaEAF5mqR8QAAAYc"]
[Sun Jan 04 19:50:39.960464 2026] [:error] [pid 1328:tid 1347] [client 20.27.219.75:4019] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zuk.php"] [unique_id "aVpUD0_-FkByL1SGKiTQMwAAAVA"]
[Sun Jan 04 19:50:40.295721 2026] [:error] [pid 4979:tid 4998] [client 20.27.219.75:3902] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zuk.php"] [unique_id "aVpUEP02GTWzaEAF5mqR9AAAAZA"]
[Sun Jan 04 19:50:40.711715 2026] [:error] [pid 58432:tid 58443] [client 20.27.219.75:3947] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zuk.php"] [unique_id "aVpUEM5iX5mcgQLNlcgYbAAAAMY"]
[Sun Jan 04 19:50:41.082609 2026] [:error] [pid 5629:tid 5654] [client 20.27.219.75:3786] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aVpUEZ5cwu3wbyCj4doNZgAAAJc"]
[Sun Jan 04 19:50:41.928380 2026] [:error] [pid 5661:tid 5712] [client 20.27.219.75:3922] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aVpUEbsKeIMjMZCmSEnzigAAAhY"]
[Sun Jan 04 19:50:42.212714 2026] [:error] [pid 58432:tid 58444] [client 20.27.219.75:3969] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aVpUEs5iX5mcgQLNlcgYcQAAAMc"]
[Sun Jan 04 19:50:42.603751 2026] [:error] [pid 1297:tid 1299] [client 20.27.219.75:4041] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tro.php"] [unique_id "aVpUEhf98x0RBG23PjfTbgAAAAA"]
[Sun Jan 04 19:50:42.865370 2026] [:error] [pid 1297:tid 1300] [client 20.27.219.75:3957] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aVpUEhf98x0RBG23PjfTbwAAAAE"]
[Sun Jan 04 19:50:43.303960 2026] [:error] [pid 58432:tid 58438] [client 20.27.219.75:3783] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aVpUE85iX5mcgQLNlcgYdwAAAME"]
[Sun Jan 04 19:50:43.599975 2026] [:error] [pid 1297:tid 1318] [client 20.27.219.75:3840] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aVpUExf98x0RBG23PjfTcQAAABM"]
[Sun Jan 04 19:50:43.872891 2026] [:error] [pid 58433:tid 58467] [client 20.27.219.75:3920] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skj.php"] [unique_id "aVpUE05m7bkw35zhUNbl8gAAAQM"]
[Sun Jan 04 19:50:44.234897 2026] [:error] [pid 5727:tid 5782] [client 20.27.219.75:3984] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aVpUFOw4wd_I9FHn6_-r6gAAAxc"]
[Sun Jan 04 19:50:44.559736 2026] [:error] [pid 58432:tid 58455] [client 20.27.219.75:3904] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aVpUFM5iX5mcgQLNlcgYeQAAANI"]
[Sun Jan 04 19:50:44.943182 2026] [:error] [pid 1328:tid 1343] [client 20.27.219.75:3855] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aVpUFE_-FkByL1SGKiTQNgAAAUw"]
[Sun Jan 04 19:50:45.283381 2026] [:error] [pid 1297:tid 1310] [client 20.27.219.75:4028] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aol7.php"] [unique_id "aVpUFRf98x0RBG23PjfTdwAAAAs"]
[Sun Jan 04 19:50:45.680905 2026] [:error] [pid 1328:tid 1338] [client 20.27.219.75:15678] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aVpUFU_-FkByL1SGKiTQOAAAAUc"]
[Sun Jan 04 19:50:45.993196 2026] [:error] [pid 5629:tid 5632] [client 20.27.219.75:3869] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aVpUFZ5cwu3wbyCj4doNbwAAAIE"]
[Sun Jan 04 19:50:46.289902 2026] [:error] [pid 5661:tid 5702] [client 20.27.219.75:3884] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aVpUFrsKeIMjMZCmSEnzkQAAAgw"]
[Sun Jan 04 19:50:46.578518 2026] [:error] [pid 1297:tid 1303] [client 20.27.219.75:3782] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad24f.php"] [unique_id "aVpUFhf98x0RBG23PjfTewAAAAQ"]
[Sun Jan 04 19:50:46.924070 2026] [:error] [pid 5010:tid 5061] [client 20.27.219.75:3847] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waff.php"] [unique_id "aVpUFrV9sNJtnPnkkz-VWwAAApQ"]
[Sun Jan 04 19:50:47.271038 2026] [:error] [pid 1297:tid 1313] [client 20.27.219.75:3914] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waff.php"] [unique_id "aVpUFxf98x0RBG23PjfTfQAAAA4"]
[Sun Jan 04 19:50:47.637065 2026] [:error] [pid 1297:tid 1323] [client 20.27.219.75:4015] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waff.php"] [unique_id "aVpUFxf98x0RBG23PjfTgAAAABg"]
[Sun Jan 04 19:50:48.119019 2026] [:error] [pid 58432:tid 58444] [client 20.27.219.75:3829] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/waff.php"] [unique_id "aVpUGM5iX5mcgQLNlcgYgwAAAMc"]
[Sun Jan 04 19:50:48.437938 2026] [:error] [pid 4979:tid 4986] [client 20.27.219.75:3780] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aVpUGP02GTWzaEAF5mqR-AAAAYQ"]
[Sun Jan 04 19:50:48.827949 2026] [:error] [pid 1328:tid 1331] [client 20.27.219.75:3906] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aVpUGE_-FkByL1SGKiTQPAAAAUA"]
[Sun Jan 04 19:50:49.145467 2026] [:error] [pid 1328:tid 1339] [client 20.27.219.75:3864] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aVpUGU_-FkByL1SGKiTQQAAAAUg"]
[Sun Jan 04 19:50:49.488702 2026] [:error] [pid 1328:tid 1346] [client 20.27.219.75:3882] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/klwc.php"] [unique_id "aVpUGU_-FkByL1SGKiTQQgAAAU8"]
[Sun Jan 04 19:50:49.944050 2026] [:error] [pid 5010:tid 5051] [client 20.27.219.75:3911] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aVpUGbV9sNJtnPnkkz-VZgAAAoo"]
[Sun Jan 04 19:50:50.859472 2026] [:error] [pid 5629:tid 5631] [client 20.27.219.75:15665] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aVpUGp5cwu3wbyCj4doNkQAAAIA"]
[Sun Jan 04 19:50:51.172016 2026] [:error] [pid 5072:tid 5140] [client 20.27.219.75:3776] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aVpUG72pfHYIoX6NUv0AwQAAA4s"]
[Sun Jan 04 19:50:51.555747 2026] [:error] [pid 5727:tid 5778] [client 20.27.219.75:3919] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aVpUG-w4wd_I9FHn6_-r8AAAAxM"]
[Sun Jan 04 19:50:51.829867 2026] [:error] [pid 5010:tid 5056] [client 20.27.219.75:3858] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aVpUG7V9sNJtnPnkkz-VawAAAo8"]
[Sun Jan 04 19:50:52.110038 2026] [:error] [pid 5629:tid 5644] [client 20.27.219.75:3787] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aVpUHJ5cwu3wbyCj4doNmQAAAI0"]
[Sun Jan 04 19:50:52.492791 2026] [:error] [pid 5629:tid 5635] [client 20.27.219.75:3863] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aVpUHJ5cwu3wbyCj4doNnwAAAIQ"]
[Sun Jan 04 19:50:53.032140 2026] [:error] [pid 5010:tid 5045] [client 20.27.219.75:3778] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aVpUHbV9sNJtnPnkkz-VbgAAAoQ"]
[Sun Jan 04 19:50:53.573505 2026] [:error] [pid 5727:tid 5780] [client 20.27.219.75:3932] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aVpUHew4wd_I9FHn6_-r9QAAAxU"]
[Sun Jan 04 19:50:53.893528 2026] [:error] [pid 5010:tid 5044] [client 20.27.219.75:4017] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aVpUHbV9sNJtnPnkkz-VcwAAAoM"]
[Sun Jan 04 19:50:54.318262 2026] [:error] [pid 5661:tid 5698] [client 20.27.219.75:3981] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aVpUHrsKeIMjMZCmSEnzmwAAAgg"]
[Sun Jan 04 19:50:54.629559 2026] [:error] [pid 5727:tid 5777] [client 20.27.219.75:3964] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aVpUHuw4wd_I9FHn6_-r_AAAAxI"]
[Sun Jan 04 19:50:54.939436 2026] [:error] [pid 5727:tid 5762] [client 20.27.219.75:3878] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aVpUHuw4wd_I9FHn6_-r_wAAAwM"]
[Sun Jan 04 19:50:55.321364 2026] [:error] [pid 58433:tid 58482] [client 20.27.219.75:3856] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aVpUH05m7bkw35zhUNbl-wAAARI"]
[Sun Jan 04 19:50:55.701901 2026] [:error] [pid 5072:tid 5130] [client 20.27.219.75:3803] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aVpUH72pfHYIoX6NUv0AygAAA4E"]
[Sun Jan 04 19:50:56.023244 2026] [:error] [pid 1328:tid 1335] [client 20.27.219.75:3801] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "aVpUIE_-FkByL1SGKiTQSQAAAUQ"]
[Sun Jan 04 19:50:56.643277 2026] [:error] [pid 5727:tid 5783] [client 20.27.219.75:3897] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc.php"] [unique_id "aVpUIOw4wd_I9FHn6_-sAwAAAxg"]
[Sun Jan 04 19:50:56.939397 2026] [:error] [pid 5072:tid 5135] [client 20.27.219.75:3851] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc.php"] [unique_id "aVpUIL2pfHYIoX6NUv0AzwAAA4Y"]
[Sun Jan 04 19:50:57.238109 2026] [:error] [pid 5072:tid 5129] [client 20.27.219.75:3857] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc.php"] [unique_id "aVpUIb2pfHYIoX6NUv0A0AAAA4A"]
[Sun Jan 04 19:50:57.735071 2026] [:error] [pid 5072:tid 5143] [client 20.27.219.75:3946] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc.php"] [unique_id "aVpUIb2pfHYIoX6NUv0A0QAAA44"]
[Sun Jan 04 19:50:58.204520 2026] [:error] [pid 5727:tid 5780] [client 20.27.219.75:3808] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aVpUIuw4wd_I9FHn6_-sCQAAAxU"]
[Sun Jan 04 19:50:58.721010 2026] [:error] [pid 4979:tid 5000] [client 20.27.219.75:3943] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aVpUIv02GTWzaEAF5mqSBAAAAZI"]
[Sun Jan 04 19:50:59.070977 2026] [:error] [pid 1328:tid 1333] [client 20.27.219.75:3948] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aVpUI0_-FkByL1SGKiTQTQAAAUI"]
[Sun Jan 04 19:50:59.593666 2026] [:error] [pid 58432:tid 58449] [client 20.27.219.75:3874] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aVpUI85iX5mcgQLNlcgYkwAAAMw"]
[Sun Jan 04 19:50:59.978213 2026] [:error] [pid 5010:tid 5045] [client 20.27.219.75:3965] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aVpUI7V9sNJtnPnkkz-VfQAAAoQ"]
[Sun Jan 04 19:51:00.342831 2026] [:error] [pid 1328:tid 1348] [client 20.27.219.75:3779] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aVpUJE_-FkByL1SGKiTQUQAAAVE"]
[Sun Jan 04 19:51:00.657304 2026] [:error] [pid 5010:tid 5062] [client 20.27.219.75:3785] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aVpUJLV9sNJtnPnkkz-VfwAAApU"]
[Sun Jan 04 19:51:01.438954 2026] [:error] [pid 58432:tid 58454] [client 20.27.219.75:3880] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wui.php"] [unique_id "aVpUJc5iX5mcgQLNlcgYlgAAANE"]
[Sun Jan 04 19:51:01.776059 2026] [:error] [pid 1297:tid 1301] [client 20.27.219.75:3898] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aVpUJRf98x0RBG23PjfThQAAAAI"]
[Sun Jan 04 19:51:02.257371 2026] [:error] [pid 5072:tid 5130] [client 20.27.219.75:3791] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aVpUJr2pfHYIoX6NUv0A1wAAA4E"]
[Sun Jan 04 19:51:02.670457 2026] [:error] [pid 5661:tid 5714] [client 20.27.219.75:3793] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aVpUJrsKeIMjMZCmSEnzpQAAAhg"]
[Sun Jan 04 19:51:03.072953 2026] [:error] [pid 5661:tid 5690] [client 20.27.219.75:3730] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "aVpUJ7sKeIMjMZCmSEnzpgAAAgA"]
[Sun Jan 04 19:51:03.559319 2026] [:error] [pid 5072:tid 5134] [client 20.27.219.75:3997] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aVpUJ72pfHYIoX6NUv0A2AAAA4U"]
[Sun Jan 04 19:51:03.868808 2026] [:error] [pid 1297:tid 1305] [client 20.27.219.75:3790] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aVpUJxf98x0RBG23PjfThwAAAAY"]
[Sun Jan 04 19:51:04.505873 2026] [:error] [pid 5072:tid 5149] [client 20.27.219.75:3960] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aVpUKL2pfHYIoX6NUv0A2gAAA5Q"]
[Sun Jan 04 19:51:04.803522 2026] [:error] [pid 1297:tid 1315] [client 20.27.219.75:3820] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ryuk.php"] [unique_id "aVpUKBf98x0RBG23PjfTigAAABA"]
[Sun Jan 04 19:51:05.089676 2026] [:error] [pid 5072:tid 5136] [client 20.27.219.75:3842] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoro.php"] [unique_id "aVpUKb2pfHYIoX6NUv0A3AAAA4c"]
[Sun Jan 04 19:51:05.400871 2026] [:error] [pid 4979:tid 4993] [client 20.27.219.75:3900] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoro.php"] [unique_id "aVpUKf02GTWzaEAF5mqSGQAAAYs"]
[Sun Jan 04 19:51:05.695761 2026] [:error] [pid 5072:tid 5151] [client 20.27.219.75:3952] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoro.php"] [unique_id "aVpUKb2pfHYIoX6NUv0A3gAAA5Y"]
[Sun Jan 04 19:51:06.040589 2026] [:error] [pid 5727:tid 5783] [client 20.27.219.75:15701] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoro.php"] [unique_id "aVpUKuw4wd_I9FHn6_-sFgAAAxg"]
[Sun Jan 04 19:51:06.400770 2026] [:error] [pid 58433:tid 58482] [client 20.27.219.75:3812] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aVpUKk5m7bkw35zhUNbmCQAAARI"]
[Sun Jan 04 19:51:06.743661 2026] [:error] [pid 5661:tid 5709] [client 20.27.219.75:3827] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aVpUKrsKeIMjMZCmSEnzqQAAAhM"]
[Sun Jan 04 19:51:07.285197 2026] [:error] [pid 1297:tid 1299] [client 20.27.219.75:3788] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aVpUKxf98x0RBG23PjfTkQAAAAA"]
[Sun Jan 04 19:51:07.642446 2026] [:error] [pid 1328:tid 1336] [client 20.27.219.75:4095] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kal.php"] [unique_id "aVpUK0_-FkByL1SGKiTQVgAAAUU"]
[Sun Jan 04 19:51:07.918412 2026] [:error] [pid 5727:tid 5770] [client 20.27.219.75:3893] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aVpUK-w4wd_I9FHn6_-sHgAAAws"]
[Sun Jan 04 19:51:08.318397 2026] [:error] [pid 58432:tid 58454] [client 20.27.219.75:3825] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aVpULM5iX5mcgQLNlcgYpwAAANE"]
[Sun Jan 04 19:51:08.690684 2026] [:error] [pid 58432:tid 58460] [client 20.27.219.75:3798] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aVpULM5iX5mcgQLNlcgYqQAAANc"]
[Sun Jan 04 19:51:09.034793 2026] [:error] [pid 58432:tid 58445] [client 20.27.219.75:3799] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aVpULc5iX5mcgQLNlcgYrAAAAMg"]
[Sun Jan 04 19:51:09.410021 2026] [:error] [pid 5072:tid 5152] [client 20.27.219.75:3967] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/racs3.php"] [unique_id "aVpULb2pfHYIoX6NUv0A4QAAA5c"]
[Sun Jan 04 19:51:09.764619 2026] [:error] [pid 1297:tid 1318] [client 20.27.219.75:3940] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/racs3.php"] [unique_id "aVpULRf98x0RBG23PjfTlAAAABM"]
[Sun Jan 04 19:51:10.194959 2026] [:error] [pid 5072:tid 5153] [client 20.27.219.75:3824] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/racs3.php"] [unique_id "aVpULr2pfHYIoX6NUv0A5AAAA5g"]
[Sun Jan 04 19:51:10.619603 2026] [:error] [pid 5661:tid 5702] [client 20.27.219.75:3873] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/racs3.php"] [unique_id "aVpULrsKeIMjMZCmSEnzsAAAAgw"]
[Sun Jan 04 19:51:11.107870 2026] [:error] [pid 5072:tid 5143] [client 20.27.219.75:3896] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aVpUL72pfHYIoX6NUv0A7wAAA44"]
[Sun Jan 04 19:51:11.463207 2026] [:error] [pid 5010:tid 5041] [client 20.27.219.75:3917] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aVpUL7V9sNJtnPnkkz-VjAAAAoA"]
[Sun Jan 04 19:51:11.747345 2026] [:error] [pid 5727:tid 5761] [client 20.27.219.75:3870] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aVpUL-w4wd_I9FHn6_-sKAAAAwI"]
[Sun Jan 04 19:51:12.072173 2026] [:error] [pid 58432:tid 58451] [client 20.27.219.75:4001] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ed35f.php"] [unique_id "aVpUMM5iX5mcgQLNlcgYswAAAM4"]
[Sun Jan 04 19:51:12.377849 2026] [:error] [pid 1328:tid 1347] [client 20.27.219.75:3717] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aVpUME_-FkByL1SGKiTQXQAAAVA"]
[Sun Jan 04 19:51:12.779082 2026] [:error] [pid 5727:tid 5765] [client 20.27.219.75:3950] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aVpUMOw4wd_I9FHn6_-sKgAAAwY"]
[Sun Jan 04 19:51:13.334913 2026] [:error] [pid 1328:tid 1355] [client 20.27.219.75:3811] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aVpUMU_-FkByL1SGKiTQXwAAAVg"]
[Sun Jan 04 19:51:13.651186 2026] [:error] [pid 1297:tid 1303] [client 20.27.219.75:3862] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aVpUMRf98x0RBG23PjfTmQAAAAQ"]
[Sun Jan 04 19:51:13.950356 2026] [:error] [pid 5010:tid 5053] [client 20.27.219.75:3681] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aVpUMbV9sNJtnPnkkz-VlwAAAow"]
[Sun Jan 04 19:51:14.302422 2026] [:error] [pid 58433:tid 58475] [client 20.27.219.75:3757] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aVpUMk5m7bkw35zhUNbmDwAAAQs"]
[Sun Jan 04 19:51:14.562619 2026] [:error] [pid 5010:tid 5044] [client 20.27.219.75:3889] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aVpUMrV9sNJtnPnkkz-VmQAAAoM"]
[Sun Jan 04 19:51:14.896769 2026] [:error] [pid 5727:tid 5773] [client 20.27.219.75:4031] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aVpUMuw4wd_I9FHn6_-sLwAAAw4"]
[Sun Jan 04 19:51:15.300173 2026] [:error] [pid 5727:tid 5776] [client 20.27.219.75:3678] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aVpUM-w4wd_I9FHn6_-sMQAAAxE"]
[Sun Jan 04 19:51:15.667628 2026] [:error] [pid 5727:tid 5765] [client 20.27.219.75:3901] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aVpUM-w4wd_I9FHn6_-sNAAAAwY"]
[Sun Jan 04 19:51:16.125456 2026] [:error] [pid 5727:tid 5778] [client 20.27.219.75:3718] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aVpUNOw4wd_I9FHn6_-sNwAAAxM"]
[Sun Jan 04 19:51:16.505982 2026] [:error] [pid 5010:tid 5046] [client 20.27.219.75:3715] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hey.php"] [unique_id "aVpUNLV9sNJtnPnkkz-VnQAAAoU"]
[Sun Jan 04 19:51:16.807688 2026] [:error] [pid 5010:tid 5065] [client 20.27.219.75:3936] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aVpUNLV9sNJtnPnkkz-VngAAApg"]
[Sun Jan 04 19:51:17.129922 2026] [:error] [pid 1297:tid 1319] [client 20.27.219.75:3875] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aVpUNRf98x0RBG23PjfTogAAABQ"]
[Sun Jan 04 19:51:17.461534 2026] [:error] [pid 5629:tid 5647] [client 20.27.219.75:3764] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aVpUNZ5cwu3wbyCj4doNxgAAAJA"]
[Sun Jan 04 19:51:17.776923 2026] [:error] [pid 58432:tid 58441] [client 20.27.219.75:3830] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/suy.php"] [unique_id "aVpUNc5iX5mcgQLNlcgYuwAAAMQ"]
[Sun Jan 04 19:51:18.117333 2026] [:error] [pid 58432:tid 58437] [client 20.27.219.75:4025] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/giclass.php"] [unique_id "aVpUNs5iX5mcgQLNlcgYvQAAAMA"]
[Sun Jan 04 19:51:18.493286 2026] [:error] [pid 1328:tid 1337] [client 20.27.219.75:3850] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/giclass.php"] [unique_id "aVpUNk_-FkByL1SGKiTQYwAAAUY"]
[Sun Jan 04 19:51:18.793065 2026] [:error] [pid 1297:tid 1308] [client 20.27.219.75:3899] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/giclass.php"] [unique_id "aVpUNhf98x0RBG23PjfTqAAAAAk"]
[Sun Jan 04 19:51:19.303457 2026] [:error] [pid 4979:tid 5006] [client 20.27.219.75:3975] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/giclass.php"] [unique_id "aVpUN_02GTWzaEAF5mqSIgAAAZg"]
[Sun Jan 04 19:51:19.559774 2026] [:error] [pid 5661:tid 5701] [client 20.27.219.75:3713] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aVpUN7sKeIMjMZCmSEnzuwAAAgs"]
[Sun Jan 04 19:51:19.849638 2026] [:error] [pid 5629:tid 5651] [client 20.27.219.75:3810] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aVpUN55cwu3wbyCj4doNyAAAAJQ"]
[Sun Jan 04 19:51:20.355281 2026] [:error] [pid 5010:tid 5045] [client 20.27.219.75:3831] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aVpUOLV9sNJtnPnkkz-VowAAAoQ"]
[Sun Jan 04 19:51:20.793004 2026] [:error] [pid 58433:tid 58466] [client 20.27.219.75:3890] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhitrgp.php"] [unique_id "aVpUOE5m7bkw35zhUNbmGQAAAQI"]
[Sun Jan 04 19:51:21.374413 2026] [:error] [pid 5010:tid 5048] [client 20.27.219.75:3828] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aVpUObV9sNJtnPnkkz-VpAAAAoc"]
[Sun Jan 04 19:51:22.027608 2026] [:error] [pid 1328:tid 1348] [client 20.27.219.75:15668] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aVpUOk_-FkByL1SGKiTQaQAAAVE"]
[Sun Jan 04 19:51:22.515326 2026] [:error] [pid 5010:tid 5051] [client 20.27.219.75:3807] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aVpUOrV9sNJtnPnkkz-VpwAAAoo"]
[Sun Jan 04 19:51:22.855769 2026] [:error] [pid 5010:tid 5065] [client 20.27.219.75:3789] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nas.php"] [unique_id "aVpUOrV9sNJtnPnkkz-VqAAAApg"]
[Sun Jan 04 19:51:23.339044 2026] [:error] [pid 1297:tid 1311] [client 20.27.219.75:3876] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aVpUOxf98x0RBG23PjfTswAAAAw"]
[Sun Jan 04 19:51:23.939758 2026] [:error] [pid 58433:tid 58488] [client 20.27.219.75:3838] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aVpUO05m7bkw35zhUNbmIQAAARg"]
[Sun Jan 04 19:51:24.325148 2026] [:error] [pid 1297:tid 1318] [client 20.27.219.75:3716] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aVpUPBf98x0RBG23PjfTuAAAABM"]
[Sun Jan 04 19:51:24.865536 2026] [:error] [pid 58432:tid 58444] [client 20.27.219.75:3892] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reyha.php"] [unique_id "aVpUPM5iX5mcgQLNlcgYygAAAMc"]
[Sun Jan 04 19:51:25.323404 2026] [:error] [pid 58433:tid 58481] [client 20.27.219.75:3888] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "aVpUPU5m7bkw35zhUNbmIwAAARE"]
[Sun Jan 04 19:51:25.659362 2026] [:error] [pid 58433:tid 58468] [client 20.27.219.75:3758] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "aVpUPU5m7bkw35zhUNbmJQAAAQQ"]
[Sun Jan 04 19:51:25.964657 2026] [:error] [pid 1297:tid 1310] [client 20.27.219.75:3728] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "aVpUPRf98x0RBG23PjfTvgAAAAs"]
[Sun Jan 04 19:51:26.260133 2026] [:error] [pid 58433:tid 58485] [client 20.27.219.75:3860] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "aVpUPk5m7bkw35zhUNbmJwAAARU"]
[Sun Jan 04 19:51:26.696516 2026] [:error] [pid 5010:tid 5064] [client 20.27.219.75:3849] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aVpUPrV9sNJtnPnkkz-VsQAAApc"]
[Sun Jan 04 19:51:27.071461 2026] [:error] [pid 58432:tid 58452] [client 20.27.219.75:3861] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aVpUP85iX5mcgQLNlcgYzAAAAM8"]
[Sun Jan 04 19:51:27.508585 2026] [:error] [pid 1328:tid 1334] [client 20.27.219.75:3712] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aVpUP0_-FkByL1SGKiTQcgAAAUM"]
[Sun Jan 04 19:51:27.820419 2026] [:error] [pid 4979:tid 4994] [client 20.27.219.75:3960] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/law.php"] [unique_id "aVpUP_02GTWzaEAF5mqSJwAAAYw"]
[Sun Jan 04 19:51:28.390150 2026] [:error] [pid 1328:tid 1349] [client 20.27.219.75:3814] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admi.php"] [unique_id "aVpUQE_-FkByL1SGKiTQdAAAAVI"]
[Sun Jan 04 19:51:28.679830 2026] [:error] [pid 1328:tid 1337] [client 20.27.219.75:3956] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admi.php"] [unique_id "aVpUQE_-FkByL1SGKiTQdgAAAUY"]
[Sun Jan 04 19:51:29.099009 2026] [:error] [pid 5629:tid 5640] [client 20.27.219.75:3804] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admi.php"] [unique_id "aVpUQZ5cwu3wbyCj4doN0gAAAIk"]
[Sun Jan 04 19:51:29.487689 2026] [:error] [pid 58433:tid 58488] [client 20.27.219.75:3868] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admi.php"] [unique_id "aVpUQU5m7bkw35zhUNbmLAAAARg"]
[Sun Jan 04 19:51:29.929763 2026] [:error] [pid 5010:tid 5051] [client 20.27.219.75:3895] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nok.php"] [unique_id "aVpUQbV9sNJtnPnkkz-VtQAAAoo"]
[Sun Jan 04 19:51:30.246234 2026] [:error] [pid 5661:tid 5708] [client 20.27.219.75:3815] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nok.php"] [unique_id "aVpUQrsKeIMjMZCmSEnzwgAAAhI"]
[Sun Jan 04 19:51:30.692564 2026] [:error] [pid 58432:tid 58454] [client 20.27.219.75:3822] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nok.php"] [unique_id "aVpUQs5iX5mcgQLNlcgY1AAAANE"]
[Sun Jan 04 19:51:31.070110 2026] [:error] [pid 58433:tid 58487] [client 20.27.219.75:3796] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nok.php"] [unique_id "aVpUQ05m7bkw35zhUNbmMAAAARc"]
[Sun Jan 04 19:51:31.582061 2026] [:error] [pid 1328:tid 1345] [client 20.27.219.75:3722] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aVpUQ0_-FkByL1SGKiTQfAAAAU4"]
[Sun Jan 04 19:51:32.142654 2026] [:error] [pid 5727:tid 5770] [client 20.27.219.75:3836] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aVpUROw4wd_I9FHn6_-sQQAAAws"]
[Sun Jan 04 19:51:32.689630 2026] [:error] [pid 4979:tid 5000] [client 20.27.219.75:3821] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aVpURP02GTWzaEAF5mqSMgAAAZI"]
[Sun Jan 04 19:51:33.289081 2026] [:error] [pid 1297:tid 1304] [client 20.27.219.75:3759] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c451f.php"] [unique_id "aVpURRf98x0RBG23PjfTxAAAAAU"]
[Sun Jan 04 19:51:33.719507 2026] [:error] [pid 5727:tid 5761] [client 20.27.219.75:3736] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aVpURew4wd_I9FHn6_-sSgAAAwI"]
[Sun Jan 04 19:51:33.985272 2026] [:error] [pid 5727:tid 5765] [client 20.27.219.75:3784] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aVpURew4wd_I9FHn6_-sTAAAAwY"]
[Sun Jan 04 19:51:34.256983 2026] [:error] [pid 5727:tid 5776] [client 20.27.219.75:3734] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aVpURuw4wd_I9FHn6_-sTgAAAxE"]
[Sun Jan 04 19:51:34.929075 2026] [:error] [pid 5629:tid 5652] [client 20.27.219.75:3903] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zasd.php"] [unique_id "aVpURp5cwu3wbyCj4doN3QAAAJU"]
[Sun Jan 04 19:51:35.616050 2026] [:error] [pid 5727:tid 5778] [client 20.27.219.75:3719] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aVpUR-w4wd_I9FHn6_-sTwAAAxM"]
[Sun Jan 04 19:51:35.936904 2026] [:error] [pid 5010:tid 5060] [client 20.27.219.75:3781] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aVpUR7V9sNJtnPnkkz-VugAAApM"]
[Sun Jan 04 19:51:36.397277 2026] [:error] [pid 5727:tid 5759] [client 20.27.219.75:3963] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aVpUSOw4wd_I9FHn6_-sUgAAAwA"]
[Sun Jan 04 19:51:36.874076 2026] [:error] [pid 1328:tid 1338] [client 20.27.219.75:3746] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aVpUSE_-FkByL1SGKiTQhAAAAUc"]
[Sun Jan 04 19:51:41.395499 2026] [:error] [pid 4979:tid 4994] [client 20.27.219.75:3762] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aVpUTf02GTWzaEAF5mqSRwAAAYw"]
[Sun Jan 04 19:51:41.897595 2026] [:error] [pid 5072:tid 5137] [client 20.27.219.75:3797] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aVpUTb2pfHYIoX6NUv0BEAAAA4g"]
[Sun Jan 04 19:51:42.277376 2026] [:error] [pid 5629:tid 5639] [client 20.27.219.75:15623] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aVpUTp5cwu3wbyCj4doN4wAAAIg"]
[Sun Jan 04 19:51:42.653521 2026] [:error] [pid 1297:tid 1315] [client 20.27.219.75:15654] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aVpUThf98x0RBG23PjfTygAAABA"]
[Sun Jan 04 19:51:43.166807 2026] [:error] [pid 58432:tid 58443] [client 20.27.219.75:3691] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ppp.php"] [unique_id "aVpUT85iX5mcgQLNlcgY5wAAAMY"]
[Sun Jan 04 19:51:43.464836 2026] [:error] [pid 1297:tid 1302] [client 20.27.219.75:3945] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ppp.php"] [unique_id "aVpUTxf98x0RBG23PjfTywAAAAM"]
[Sun Jan 04 19:51:43.842200 2026] [:error] [pid 5661:tid 5709] [client 20.27.219.75:3649] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ppp.php"] [unique_id "aVpUT7sKeIMjMZCmSEnzzgAAAhM"]
[Sun Jan 04 19:51:44.345799 2026] [:error] [pid 5629:tid 5634] [client 20.27.219.75:3754] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ppp.php"] [unique_id "aVpUUJ5cwu3wbyCj4doN7AAAAIM"]
[Sun Jan 04 19:51:44.761705 2026] [:error] [pid 4979:tid 5001] [client 20.27.219.75:3883] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aVpUUP02GTWzaEAF5mqSTAAAAZM"]
[Sun Jan 04 19:51:45.251727 2026] [:error] [pid 5072:tid 5143] [client 20.27.219.75:3675] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aVpUUb2pfHYIoX6NUv0BFQAAA44"]
[Sun Jan 04 19:51:45.748281 2026] [:error] [pid 5072:tid 5140] [client 20.27.219.75:3818] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aVpUUb2pfHYIoX6NUv0BGgAAA4s"]
[Sun Jan 04 19:51:46.105607 2026] [:error] [pid 5010:tid 5051] [client 20.27.219.75:3813] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aVpUUrV9sNJtnPnkkz-V1wAAAoo"]
[Sun Jan 04 19:51:46.431352 2026] [:error] [pid 1297:tid 1311] [client 20.27.219.75:3670] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aVpUUhf98x0RBG23PjfTzQAAAAw"]
[Sun Jan 04 19:51:46.812475 2026] [:error] [pid 5629:tid 5654] [client 20.27.219.75:3763] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aVpUUp5cwu3wbyCj4doN7wAAAJc"]
[Sun Jan 04 19:51:47.160629 2026] [:error] [pid 58432:tid 58456] [client 20.27.219.75:3689] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aVpUU85iX5mcgQLNlcgY6QAAANM"]
[Sun Jan 04 19:51:47.554645 2026] [:error] [pid 5727:tid 5763] [client 20.27.219.75:3955] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wto.php"] [unique_id "aVpUU-w4wd_I9FHn6_-ssQAAAwQ"]
[Sun Jan 04 19:51:48.296305 2026] [:error] [pid 4979:tid 4993] [client 20.27.219.75:3726] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aVpUVP02GTWzaEAF5mqSUQAAAYs"]
[Sun Jan 04 19:51:48.633153 2026] [:error] [pid 1328:tid 1349] [client 20.27.219.75:3733] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aVpUVE_-FkByL1SGKiTQkgAAAVI"]
[Sun Jan 04 19:51:49.097073 2026] [:error] [pid 5072:tid 5132] [client 20.27.219.75:3833] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aVpUVb2pfHYIoX6NUv0BJQAAA4M"]
[Sun Jan 04 19:51:49.591467 2026] [:error] [pid 5072:tid 5129] [client 20.27.219.75:3756] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aVpUVb2pfHYIoX6NUv0BKQAAA4A"]
[Sun Jan 04 19:51:50.095121 2026] [:error] [pid 5072:tid 5143] [client 20.27.219.75:3744] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tech5pr.php"] [unique_id "aVpUVr2pfHYIoX6NUv0BLgAAA44"]
[Sun Jan 04 19:51:50.604224 2026] [:error] [pid 5629:tid 5647] [client 20.27.219.75:3835] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tech5pr.php"] [unique_id "aVpUVp5cwu3wbyCj4doN9wAAAJA"]
[Sun Jan 04 19:51:51.190520 2026] [:error] [pid 5072:tid 5145] [client 20.27.219.75:3731] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tech5pr.php"] [unique_id "aVpUV72pfHYIoX6NUv0BNgAAA5A"]
[Sun Jan 04 19:51:51.728161 2026] [:error] [pid 4979:tid 5000] [client 20.27.219.75:3749] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tech5pr.php"] [unique_id "aVpUV_02GTWzaEAF5mqSWAAAAZI"]
[Sun Jan 04 19:51:52.152672 2026] [:error] [pid 5661:tid 5697] [client 20.27.219.75:3774] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aVpUWLsKeIMjMZCmSEnz2wAAAgc"]
[Sun Jan 04 19:51:52.719803 2026] [:error] [pid 58433:tid 58486] [client 20.27.219.75:3931] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aVpUWE5m7bkw35zhUNbmTAAAARY"]
[Sun Jan 04 19:51:53.012617 2026] [:error] [pid 58432:tid 58453] [client 20.27.219.75:3973] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aVpUWc5iX5mcgQLNlcgY8gAAANA"]
[Sun Jan 04 19:51:53.466254 2026] [:error] [pid 5661:tid 5703] [client 20.27.219.75:3877] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "aVpUWbsKeIMjMZCmSEnz4QAAAg0"]
[Sun Jan 04 19:51:53.926884 2026] [:error] [pid 5661:tid 5704] [client 20.27.219.75:3767] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc.php"] [unique_id "aVpUWbsKeIMjMZCmSEnz5AAAAg4"]
[Sun Jan 04 19:51:54.279252 2026] [:error] [pid 5629:tid 5636] [client 20.27.219.75:3894] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc.php"] [unique_id "aVpUWp5cwu3wbyCj4doOAAAAAIU"]
[Sun Jan 04 19:51:54.629879 2026] [:error] [pid 5072:tid 5151] [client 20.27.219.75:3600] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc.php"] [unique_id "aVpUWr2pfHYIoX6NUv0BVAAAA5Y"]
[Sun Jan 04 19:51:55.038759 2026] [:error] [pid 1297:tid 1315] [client 20.27.219.75:3823] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc.php"] [unique_id "aVpUWxf98x0RBG23PjfT3AAAABA"]
[Sun Jan 04 19:51:55.350616 2026] [:error] [pid 5072:tid 5152] [client 20.27.219.75:3700] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "aVpUW72pfHYIoX6NUv0BXAAAA5c"]
[Sun Jan 04 19:51:55.903311 2026] [:error] [pid 5629:tid 5646] [client 20.27.219.75:3654] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "aVpUW55cwu3wbyCj4doOBwAAAI8"]
[Sun Jan 04 19:51:56.389213 2026] [:error] [pid 1297:tid 1311] [client 20.27.219.75:3652] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "aVpUXBf98x0RBG23PjfT3wAAAAw"]
[Sun Jan 04 19:51:56.759714 2026] [:error] [pid 5072:tid 5144] [client 20.27.219.75:3665] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "aVpUXL2pfHYIoX6NUv0BYgAAA48"]
[Sun Jan 04 19:51:57.091465 2026] [:error] [pid 5072:tid 5135] [client 20.27.219.75:3775] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aVpUXb2pfHYIoX6NUv0BYwAAA4Y"]
[Sun Jan 04 19:51:57.411028 2026] [:error] [pid 5072:tid 5148] [client 20.27.219.75:3735] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aVpUXb2pfHYIoX6NUv0BZgAAA5M"]
[Sun Jan 04 19:51:57.774122 2026] [:error] [pid 5629:tid 5650] [client 20.27.219.75:3727] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aVpUXZ5cwu3wbyCj4doOFwAAAJM"]
[Sun Jan 04 19:51:58.294309 2026] [:error] [pid 5727:tid 5759] [client 20.27.219.75:3816] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aVpUXuw4wd_I9FHn6_-swAAAAwA"]
[Sun Jan 04 19:51:58.662400 2026] [:error] [pid 5661:tid 5693] [client 20.27.219.75:3834] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aVpUXrsKeIMjMZCmSEnz5wAAAgM"]
[Sun Jan 04 19:51:58.996055 2026] [:error] [pid 5629:tid 5634] [client 20.27.219.75:3618] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aVpUXp5cwu3wbyCj4doOHwAAAIM"]
[Sun Jan 04 19:51:59.413238 2026] [:error] [pid 5629:tid 5643] [client 20.27.219.75:3826] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aVpUX55cwu3wbyCj4doOJQAAAIw"]
[Sun Jan 04 19:52:00.110807 2026] [:error] [pid 5727:tid 5774] [client 20.27.219.75:3658] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aVpUYOw4wd_I9FHn6_-syAAAAw8"]
[Sun Jan 04 19:52:00.523581 2026] [:error] [pid 5072:tid 5135] [client 20.27.219.75:3739] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skk.php"] [unique_id "aVpUYL2pfHYIoX6NUv0BcwAAA4Y"]
[Sun Jan 04 19:52:01.062180 2026] [:error] [pid 5072:tid 5151] [client 20.27.219.75:3845] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skk.php"] [unique_id "aVpUYb2pfHYIoX6NUv0BdQAAA5Y"]
[Sun Jan 04 19:52:01.417644 2026] [:error] [pid 1297:tid 1318] [client 20.27.219.75:3837] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skk.php"] [unique_id "aVpUYRf98x0RBG23PjfT5AAAABM"]
[Sun Jan 04 19:52:01.721275 2026] [:error] [pid 5661:tid 5714] [client 20.27.219.75:3737] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/skk.php"] [unique_id "aVpUYbsKeIMjMZCmSEnz7gAAAhg"]
[Sun Jan 04 19:52:02.156637 2026] [:error] [pid 5727:tid 5782] [client 20.27.219.75:3787] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testas.php"] [unique_id "aVpUYuw4wd_I9FHn6_-szQAAAxc"]
[Sun Jan 04 19:52:02.502914 2026] [:error] [pid 4979:tid 4985] [client 20.27.219.75:3721] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testas.php"] [unique_id "aVpUYv02GTWzaEAF5mqSZgAAAYM"]
[Sun Jan 04 19:52:03.075220 2026] [:error] [pid 1297:tid 1304] [client 20.27.219.75:3742] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testas.php"] [unique_id "aVpUYxf98x0RBG23PjfT6AAAAAU"]
[Sun Jan 04 19:52:03.568710 2026] [:error] [pid 5727:tid 5763] [client 20.27.219.75:3704] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/testas.php"] [unique_id "aVpUY-w4wd_I9FHn6_-s0gAAAwQ"]
[Sun Jan 04 19:52:04.052659 2026] [:error] [pid 5727:tid 5775] [client 20.27.219.75:3614] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ma1.php"] [unique_id "aVpUZOw4wd_I9FHn6_-s1gAAAxA"]
[Sun Jan 04 19:52:04.498882 2026] [:error] [pid 1328:tid 1354] [client 20.27.219.75:3792] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ma1.php"] [unique_id "aVpUZE_-FkByL1SGKiTQnQAAAVc"]
[Sun Jan 04 19:52:04.849615 2026] [:error] [pid 1328:tid 1350] [client 20.27.219.75:3817] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ma1.php"] [unique_id "aVpUZE_-FkByL1SGKiTQoAAAAVM"]
[Sun Jan 04 19:52:05.539837 2026] [:error] [pid 5072:tid 5152] [client 20.27.219.75:3663] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ma1.php"] [unique_id "aVpUZb2pfHYIoX6NUv0BiQAAA5c"]
[Sun Jan 04 19:52:05.932255 2026] [:error] [pid 1328:tid 1346] [client 20.27.219.75:3802] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aVpUZU_-FkByL1SGKiTQpQAAAU8"]
[Sun Jan 04 19:52:06.333732 2026] [:error] [pid 4979:tid 4990] [client 20.27.219.75:3819] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aVpUZv02GTWzaEAF5mqSaQAAAYg"]
[Sun Jan 04 19:52:06.693338 2026] [:error] [pid 4979:tid 5002] [client 20.27.219.75:3809] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aVpUZv02GTWzaEAF5mqSawAAAZQ"]
[Sun Jan 04 19:52:07.256773 2026] [:error] [pid 5629:tid 5648] [client 20.27.219.75:3806] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/loi.php"] [unique_id "aVpUZ55cwu3wbyCj4doOLAAAAJE"]
[Sun Jan 04 19:52:07.704211 2026] [:error] [pid 5727:tid 5763] [client 20.27.219.75:3755] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aVpUZ-w4wd_I9FHn6_-s4QAAAwQ"]
[Sun Jan 04 19:52:08.375181 2026] [:error] [pid 5629:tid 5637] [client 20.27.219.75:3632] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aVpUaJ5cwu3wbyCj4doOMgAAAIY"]
[Sun Jan 04 19:52:08.760894 2026] [:error] [pid 58432:tid 58449] [client 20.27.219.75:3738] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aVpUaM5iX5mcgQLNlcgY_AAAAMw"]
[Sun Jan 04 19:52:09.279299 2026] [:error] [pid 4979:tid 4983] [client 20.27.219.75:3743] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "aVpUaf02GTWzaEAF5mqSdQAAAYE"]
[Sun Jan 04 19:52:09.683815 2026] [:error] [pid 1297:tid 1317] [client 20.27.219.75:3677] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aVpUaRf98x0RBG23PjfT9gAAABI"]
[Sun Jan 04 19:52:10.316496 2026] [:error] [pid 4979:tid 5002] [client 20.27.219.75:3723] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aVpUav02GTWzaEAF5mqSfQAAAZQ"]
[Sun Jan 04 19:52:11.001385 2026] [:error] [pid 4979:tid 5001] [client 20.27.219.75:3794] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aVpUa_02GTWzaEAF5mqSggAAAZM"]
[Sun Jan 04 19:52:11.832030 2026] [:error] [pid 4979:tid 4999] [client 20.27.219.75:3753] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aVpUa_02GTWzaEAF5mqShQAAAZE"]
[Sun Jan 04 19:52:12.270361 2026] [:error] [pid 4979:tid 5004] [client 20.27.219.75:3758] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aVpUbP02GTWzaEAF5mqSiQAAAZY"]
[Sun Jan 04 19:52:12.796061 2026] [:error] [pid 58432:tid 58454] [client 20.27.219.75:3720] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aVpUbM5iX5mcgQLNlcgY_gAAANE"]
[Sun Jan 04 19:52:13.316004 2026] [:error] [pid 5661:tid 5697] [client 20.27.219.75:3585] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aVpUbbsKeIMjMZCmSEnz-QAAAgc"]
[Sun Jan 04 19:52:14.013112 2026] [:error] [pid 5661:tid 5709] [client 20.27.219.75:3766] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4ff11.php"] [unique_id "aVpUbrsKeIMjMZCmSEnz_gAAAhM"]
[Sun Jan 04 19:52:14.397411 2026] [:error] [pid 58432:tid 58438] [client 20.27.219.75:3750] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aVpUbs5iX5mcgQLNlcgZAgAAAME"]
[Sun Jan 04 19:52:14.794605 2026] [:error] [pid 5629:tid 5638] [client 20.27.219.75:3760] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aVpUbp5cwu3wbyCj4doOOAAAAIc"]
[Sun Jan 04 19:52:15.146136 2026] [:error] [pid 5010:tid 5052] [client 20.27.219.75:3667] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aVpUb7V9sNJtnPnkkz-V7AAAAos"]
[Sun Jan 04 19:52:15.649728 2026] [:error] [pid 5661:tid 5695] [client 20.27.219.75:3661] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kla.php"] [unique_id "aVpUb7sKeIMjMZCmSEn0AwAAAgU"]
[Sun Jan 04 19:52:15.983150 2026] [:error] [pid 5727:tid 5771] [client 20.27.219.75:3761] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aVpUb-w4wd_I9FHn6_-s5wAAAww"]
[Sun Jan 04 19:52:16.642181 2026] [:error] [pid 1297:tid 1314] [client 20.27.219.75:4044] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aVpUcBf98x0RBG23PjfUDAAAAA8"]
[Sun Jan 04 19:52:17.134630 2026] [:error] [pid 5629:tid 5643] [client 20.27.219.75:3593] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aVpUcZ5cwu3wbyCj4doORAAAAIw"]
[Sun Jan 04 19:52:17.914759 2026] [:error] [pid 5629:tid 5652] [client 20.27.219.75:3740] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aVpUcZ5cwu3wbyCj4doOTQAAAJU"]
[Sun Jan 04 19:52:18.265375 2026] [:error] [pid 5629:tid 5649] [client 20.27.219.75:3832] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mtvcrew.php"] [unique_id "aVpUcp5cwu3wbyCj4doOTwAAAJI"]
[Sun Jan 04 19:52:18.631065 2026] [:error] [pid 5629:tid 5653] [client 20.27.219.75:3865] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mtvcrew.php"] [unique_id "aVpUcp5cwu3wbyCj4doOUQAAAJY"]
[Sun Jan 04 19:52:19.110761 2026] [:error] [pid 5010:tid 5051] [client 20.27.219.75:3622] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mtvcrew.php"] [unique_id "aVpUc7V9sNJtnPnkkz-V9gAAAoo"]
[Sun Jan 04 19:52:19.619335 2026] [:error] [pid 5727:tid 5763] [client 20.27.219.75:3729] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mtvcrew.php"] [unique_id "aVpUc-w4wd_I9FHn6_-s6wAAAwQ"]
[Sun Jan 04 19:52:19.903317 2026] [:error] [pid 1297:tid 1322] [client 20.27.219.75:3886] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aVpUcxf98x0RBG23PjfUFAAAABc"]
[Sun Jan 04 19:52:20.246011 2026] [:error] [pid 1297:tid 1304] [client 20.27.219.75:3773] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aVpUdBf98x0RBG23PjfUFQAAAAU"]
[Sun Jan 04 19:52:20.585935 2026] [:error] [pid 58433:tid 58475] [client 20.27.219.75:3768] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aVpUdE5m7bkw35zhUNbmYgAAAQs"]
[Sun Jan 04 19:52:21.312755 2026] [:error] [pid 5629:tid 5650] [client 20.27.219.75:3684] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z58.php"] [unique_id "aVpUdZ5cwu3wbyCj4doOWQAAAJM"]
[Sun Jan 04 19:52:21.602310 2026] [:error] [pid 5629:tid 5638] [client 20.27.219.75:4001] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aVpUdZ5cwu3wbyCj4doOXQAAAIc"]
[Sun Jan 04 19:52:21.978679 2026] [:error] [pid 58433:tid 58476] [client 20.27.219.75:3891] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aVpUdU5m7bkw35zhUNbmYwAAAQw"]
[Sun Jan 04 19:52:22.403124 2026] [:error] [pid 58433:tid 58474] [client 20.27.219.75:3685] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aVpUdk5m7bkw35zhUNbmZAAAAQo"]
[Sun Jan 04 19:52:22.714130 2026] [:error] [pid 5010:tid 5060] [client 20.27.219.75:3653] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wle.php"] [unique_id "aVpUdrV9sNJtnPnkkz-V-gAAApM"]
[Sun Jan 04 19:52:23.026678 2026] [:error] [pid 5727:tid 5780] [client 20.27.219.75:3706] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aVpUd-w4wd_I9FHn6_-s8QAAAxU"]
[Sun Jan 04 19:52:23.427183 2026] [:error] [pid 5727:tid 5768] [client 20.27.219.75:3657] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aVpUd-w4wd_I9FHn6_-s8wAAAwk"]
[Sun Jan 04 19:52:23.706878 2026] [:error] [pid 1328:tid 1331] [client 20.27.219.75:3659] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aVpUd0_-FkByL1SGKiTQugAAAUA"]
[Sun Jan 04 19:52:23.967346 2026] [:error] [pid 58433:tid 58488] [client 20.27.219.75:3616] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/new2.php"] [unique_id "aVpUd05m7bkw35zhUNbmZQAAARg"]
[Sun Jan 04 19:52:24.280076 2026] [:error] [pid 5661:tid 5691] [client 20.27.219.75:3770] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aVpUeLsKeIMjMZCmSEn0DQAAAgE"]
[Sun Jan 04 19:52:24.716953 2026] [:error] [pid 1328:tid 1332] [client 20.27.219.75:3594] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aVpUeE_-FkByL1SGKiTQvQAAAUE"]
[Sun Jan 04 19:52:25.094125 2026] [:error] [pid 5010:tid 5063] [client 20.27.219.75:3651] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aVpUebV9sNJtnPnkkz-WAQAAApY"]
[Sun Jan 04 19:52:25.500565 2026] [:error] [pid 5629:tid 5647] [client 20.27.219.75:3648] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/09fa6.php"] [unique_id "aVpUeZ5cwu3wbyCj4doOZAAAAJA"]
[Sun Jan 04 19:52:26.066678 2026] [:error] [pid 5727:tid 5762] [client 20.27.219.75:3694] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/89.php"] [unique_id "aVpUeuw4wd_I9FHn6_-s-QAAAwM"]
[Sun Jan 04 19:52:26.722742 2026] [:error] [pid 5661:tid 5690] [client 20.27.219.75:3747] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/89.php"] [unique_id "aVpUersKeIMjMZCmSEn0FAAAAgA"]
[Sun Jan 04 19:52:27.104764 2026] [:error] [pid 5661:tid 5701] [client 20.27.219.75:3627] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/89.php"] [unique_id "aVpUe7sKeIMjMZCmSEn0FwAAAgs"]
[Sun Jan 04 19:52:27.418883 2026] [:error] [pid 5629:tid 5651] [client 20.27.219.75:3714] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/89.php"] [unique_id "aVpUe55cwu3wbyCj4doObwAAAJQ"]
[Sun Jan 04 19:52:27.762785 2026] [:error] [pid 4979:tid 4989] [client 20.27.219.75:3748] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aVpUe_02GTWzaEAF5mqSkgAAAYc"]
[Sun Jan 04 19:52:28.406022 2026] [:error] [pid 5661:tid 5692] [client 20.27.219.75:3546] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aVpUfLsKeIMjMZCmSEn0GAAAAgI"]
[Sun Jan 04 19:52:28.817426 2026] [:error] [pid 5661:tid 5700] [client 20.27.219.75:3532] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aVpUfLsKeIMjMZCmSEn0GQAAAgo"]
[Sun Jan 04 19:52:29.150078 2026] [:error] [pid 5661:tid 5706] [client 20.27.219.75:3795] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aVpUfbsKeIMjMZCmSEn0HAAAAhA"]
[Sun Jan 04 19:52:29.878585 2026] [:error] [pid 58433:tid 58481] [client 20.27.219.75:4087] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aVpUfU5m7bkw35zhUNbmbgAAARE"]
[Sun Jan 04 19:52:30.575688 2026] [:error] [pid 5629:tid 5643] [client 20.27.219.75:3698] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aVpUfp5cwu3wbyCj4doOdgAAAIw"]
[Sun Jan 04 19:52:30.937615 2026] [:error] [pid 5661:tid 5714] [client 20.27.219.75:3692] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aVpUfrsKeIMjMZCmSEn0IAAAAhg"]
[Sun Jan 04 19:52:31.485490 2026] [:error] [pid 58432:tid 58451] [client 20.27.219.75:3679] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/has.php"] [unique_id "aVpUf85iX5mcgQLNlcgZDQAAAM4"]
[Sun Jan 04 19:52:31.935167 2026] [:error] [pid 5727:tid 5771] [client 20.27.219.75:3660] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nax.php"] [unique_id "aVpUf-w4wd_I9FHn6_-s-gAAAww"]
[Sun Jan 04 19:52:32.377916 2026] [:error] [pid 5010:tid 5054] [client 20.27.219.75:3650] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nax.php"] [unique_id "aVpUgLV9sNJtnPnkkz-WCwAAAo0"]
[Sun Jan 04 19:52:32.750830 2026] [:error] [pid 5010:tid 5053] [client 20.27.219.75:3655] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nax.php"] [unique_id "aVpUgLV9sNJtnPnkkz-WDQAAAow"]
[Sun Jan 04 19:52:33.091751 2026] [:error] [pid 5629:tid 5651] [client 20.27.219.75:3604] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nax.php"] [unique_id "aVpUgZ5cwu3wbyCj4doOegAAAJQ"]
[Sun Jan 04 19:52:33.477442 2026] [:error] [pid 5629:tid 5650] [client 20.27.219.75:3615] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aVpUgZ5cwu3wbyCj4doOewAAAJM"]
[Sun Jan 04 19:52:33.828149 2026] [:error] [pid 5629:tid 5644] [client 20.27.219.75:3680] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aVpUgZ5cwu3wbyCj4doOfAAAAI0"]
[Sun Jan 04 19:52:34.212464 2026] [:error] [pid 5661:tid 5706] [client 20.27.219.75:3598] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aVpUgrsKeIMjMZCmSEn0KgAAAhA"]
[Sun Jan 04 19:52:34.559604 2026] [:error] [pid 5010:tid 5051] [client 20.27.219.75:3582] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooj.php"] [unique_id "aVpUgrV9sNJtnPnkkz-WEgAAAoo"]
[Sun Jan 04 19:52:34.905889 2026] [:error] [pid 5072:tid 5130] [client 20.27.219.75:3695] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/orm.php"] [unique_id "aVpUgr2pfHYIoX6NUv0BsgAAA4E"]
[Sun Jan 04 19:52:35.253102 2026] [:error] [pid 5629:tid 5641] [client 20.27.219.75:3741] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/orm.php"] [unique_id "aVpUg55cwu3wbyCj4doOggAAAIo"]
[Sun Jan 04 19:52:35.604578 2026] [:error] [pid 58433:tid 58477] [client 20.27.219.75:3683] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/orm.php"] [unique_id "aVpUg05m7bkw35zhUNbmcQAAAQ0"]
[Sun Jan 04 19:52:36.106277 2026] [:error] [pid 1328:tid 1343] [client 20.27.219.75:3703] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/orm.php"] [unique_id "aVpUhE_-FkByL1SGKiTQygAAAUw"]
[Sun Jan 04 19:52:36.390282 2026] [:error] [pid 5072:tid 5129] [client 20.27.219.75:3745] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aVpUhL2pfHYIoX6NUv0BtgAAA4A"]
[Sun Jan 04 19:52:36.765788 2026] [:error] [pid 1297:tid 1321] [client 20.27.219.75:3610] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aVpUhBf98x0RBG23PjfUGwAAABY"]
[Sun Jan 04 19:52:37.151159 2026] [:error] [pid 4979:tid 4985] [client 20.27.219.75:3711] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aVpUhf02GTWzaEAF5mqSnQAAAYM"]
[Sun Jan 04 19:52:37.447238 2026] [:error] [pid 1297:tid 1310] [client 20.27.219.75:3673] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aVpUhRf98x0RBG23PjfUHAAAAAs"]
[Sun Jan 04 19:52:38.113716 2026] [:error] [pid 4979:tid 4990] [client 20.27.219.75:3751] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yep.php"] [unique_id "aVpUhv02GTWzaEAF5mqSnwAAAYg"]
[Sun Jan 04 19:52:38.606361 2026] [:error] [pid 1297:tid 1303] [client 20.27.219.75:3611] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yep.php"] [unique_id "aVpUhhf98x0RBG23PjfUHQAAAAQ"]
[Sun Jan 04 19:52:39.129964 2026] [:error] [pid 58432:tid 58438] [client 20.27.219.75:3662] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yep.php"] [unique_id "aVpUh85iX5mcgQLNlcgZFgAAAME"]
[Sun Jan 04 19:52:39.463627 2026] [:error] [pid 5727:tid 5768] [client 20.27.219.75:3771] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yep.php"] [unique_id "aVpUh-w4wd_I9FHn6_-tAgAAAwk"]
[Sun Jan 04 19:52:39.901123 2026] [:error] [pid 1328:tid 1337] [client 20.27.219.75:3545] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x3.php"] [unique_id "aVpUh0_-FkByL1SGKiTQzgAAAUY"]
[Sun Jan 04 19:52:40.211890 2026] [:error] [pid 5727:tid 5783] [client 20.27.219.75:3608] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x3.php"] [unique_id "aVpUiOw4wd_I9FHn6_-tBQAAAxg"]
[Sun Jan 04 19:52:40.588662 2026] [:error] [pid 4979:tid 4998] [client 20.27.219.75:3693] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x3.php"] [unique_id "aVpUiP02GTWzaEAF5mqSoQAAAZA"]
[Sun Jan 04 19:52:45.425567 2026] [:error] [pid 4979:tid 4986] [client 20.27.219.75:3620] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lol.php"] [unique_id "aVpUjf02GTWzaEAF5mqSsQAAAYQ"]
[Sun Jan 04 19:52:46.102810 2026] [:error] [pid 5727:tid 5767] [client 20.27.219.75:3697] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lol.php"] [unique_id "aVpUjuw4wd_I9FHn6_-tDQAAAwg"]
[Sun Jan 04 19:52:46.409391 2026] [:error] [pid 5010:tid 5063] [client 20.27.219.75:3705] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lol.php"] [unique_id "aVpUjrV9sNJtnPnkkz-WFwAAApY"]
[Sun Jan 04 19:52:46.858617 2026] [:error] [pid 5072:tid 5137] [client 20.27.219.75:3638] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lol.php"] [unique_id "aVpUjr2pfHYIoX6NUv0BxwAAA4g"]
[Sun Jan 04 19:52:47.167213 2026] [:error] [pid 5072:tid 5139] [client 20.27.219.75:3676] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aVpUj72pfHYIoX6NUv0ByAAAA4o"]
[Sun Jan 04 19:52:47.497689 2026] [:error] [pid 5010:tid 5044] [client 20.27.219.75:3631] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aVpUj7V9sNJtnPnkkz-WGQAAAoM"]
[Sun Jan 04 19:52:47.943022 2026] [:error] [pid 5010:tid 5047] [client 20.27.219.75:3664] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aVpUj7V9sNJtnPnkkz-WGgAAAoY"]
[Sun Jan 04 19:52:48.265327 2026] [:error] [pid 1297:tid 1323] [client 20.27.219.75:3637] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aVpUkBf98x0RBG23PjfUJQAAABg"]
[Sun Jan 04 19:52:48.757845 2026] [:error] [pid 5629:tid 5634] [client 20.27.219.75:3597] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aVpUkJ5cwu3wbyCj4doOnAAAAIM"]
[Sun Jan 04 19:52:49.299084 2026] [:error] [pid 5727:tid 5775] [client 20.27.219.75:3839] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aVpUkew4wd_I9FHn6_-tEAAAAxA"]
[Sun Jan 04 19:52:49.859519 2026] [:error] [pid 5010:tid 5050] [client 20.27.219.75:3469] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aVpUkbV9sNJtnPnkkz-WGwAAAok"]
[Sun Jan 04 19:52:50.251261 2026] [:error] [pid 5010:tid 5058] [client 20.27.219.75:3590] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aVpUkrV9sNJtnPnkkz-WHQAAApE"]
[Sun Jan 04 19:52:50.583644 2026] [:error] [pid 5629:tid 5639] [client 20.27.219.75:3674] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVpUkp5cwu3wbyCj4doOngAAAIg"]
[Sun Jan 04 19:52:51.340617 2026] [:error] [pid 58432:tid 58437] [client 20.27.219.75:3599] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVpUk85iX5mcgQLNlcgZHAAAAMA"]
[Sun Jan 04 19:52:51.945436 2026] [:error] [pid 58433:tid 58480] [client 20.27.219.75:3769] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVpUk05m7bkw35zhUNbmdwAAARA"]
[Sun Jan 04 19:52:52.401417 2026] [:error] [pid 58433:tid 58482] [client 20.27.219.75:3595] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aVpUlE5m7bkw35zhUNbmeAAAARI"]
[Sun Jan 04 19:52:52.803994 2026] [:error] [pid 5661:tid 5698] [client 20.27.219.75:3588] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq.php"] [unique_id "aVpUlLsKeIMjMZCmSEn0QAAAAgg"]
[Sun Jan 04 19:52:53.103764 2026] [:error] [pid 5629:tid 5632] [client 20.27.219.75:3709] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq.php"] [unique_id "aVpUlZ5cwu3wbyCj4doOnwAAAIE"]
[Sun Jan 04 19:52:53.408510 2026] [:error] [pid 58432:tid 58441] [client 20.27.219.75:3710] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq.php"] [unique_id "aVpUlc5iX5mcgQLNlcgZHgAAAMQ"]
[Sun Jan 04 19:52:53.730839 2026] [:error] [pid 5072:tid 5148] [client 20.27.219.75:3668] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq.php"] [unique_id "aVpUlb2pfHYIoX6NUv0B0wAAA5M"]
[Sun Jan 04 19:52:54.032153 2026] [:error] [pid 58433:tid 58485] [client 20.27.219.75:15711] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aVpUlk5m7bkw35zhUNbmegAAARU"]
[Sun Jan 04 19:52:54.303435 2026] [:error] [pid 4979:tid 4988] [client 20.27.219.75:3707] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aVpUlv02GTWzaEAF5mqStgAAAYY"]
[Sun Jan 04 19:52:54.650132 2026] [:error] [pid 5661:tid 5704] [client 20.27.219.75:3520] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aVpUlrsKeIMjMZCmSEn0QgAAAg4"]
[Sun Jan 04 19:52:54.987935 2026] [:error] [pid 5727:tid 5765] [client 20.27.219.75:3639] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aVpUluw4wd_I9FHn6_-tEgAAAwY"]
[Sun Jan 04 19:52:55.300757 2026] [:error] [pid 4979:tid 4993] [client 20.27.219.75:3724] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aVpUl_02GTWzaEAF5mqSugAAAYs"]
[Sun Jan 04 19:52:55.604677 2026] [:error] [pid 5661:tid 5708] [client 20.27.219.75:3521] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aVpUl7sKeIMjMZCmSEn0RgAAAhI"]
[Sun Jan 04 19:52:55.985872 2026] [:error] [pid 4979:tid 4991] [client 20.27.219.75:3672] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aVpUl_02GTWzaEAF5mqSvQAAAYk"]
[Sun Jan 04 19:52:56.362649 2026] [:error] [pid 5661:tid 5702] [client 20.27.219.75:3725] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aVpUmLsKeIMjMZCmSEn0SAAAAgw"]
[Sun Jan 04 19:52:56.663332 2026] [:error] [pid 5727:tid 5782] [client 20.27.219.75:3553] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ana.php"] [unique_id "aVpUmOw4wd_I9FHn6_-tFQAAAxc"]
[Sun Jan 04 19:52:57.190923 2026] [:error] [pid 4979:tid 4983] [client 20.27.219.75:3592] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ana.php"] [unique_id "aVpUmf02GTWzaEAF5mqSwAAAAYE"]
[Sun Jan 04 19:52:57.548441 2026] [:error] [pid 5661:tid 5694] [client 20.27.219.75:3557] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ana.php"] [unique_id "aVpUmbsKeIMjMZCmSEn0SQAAAgQ"]
[Sun Jan 04 19:52:57.880007 2026] [:error] [pid 4979:tid 5003] [client 20.27.219.75:3682] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ana.php"] [unique_id "aVpUmf02GTWzaEAF5mqSxQAAAZU"]
[Sun Jan 04 19:52:58.164225 2026] [:error] [pid 4979:tid 4990] [client 20.27.219.75:3686] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aVpUmv02GTWzaEAF5mqSxgAAAYg"]
[Sun Jan 04 19:52:58.466442 2026] [:error] [pid 5661:tid 5710] [client 20.27.219.75:3644] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aVpUmrsKeIMjMZCmSEn0TAAAAhQ"]
[Sun Jan 04 19:52:58.813910 2026] [:error] [pid 58432:tid 58454] [client 20.27.219.75:3765] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aVpUms5iX5mcgQLNlcgZHwAAANE"]
[Sun Jan 04 19:52:59.209088 2026] [:error] [pid 4979:tid 4998] [client 20.27.219.75:3561] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aVpUm_02GTWzaEAF5mqSxwAAAZA"]
[Sun Jan 04 19:52:59.530669 2026] [:error] [pid 5661:tid 5701] [client 20.27.219.75:3528] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/she.php"] [unique_id "aVpUm7sKeIMjMZCmSEn0TwAAAgs"]
[Sun Jan 04 19:52:59.822534 2026] [:error] [pid 58432:tid 58457] [client 20.27.219.75:3701] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/she.php"] [unique_id "aVpUm85iX5mcgQLNlcgZIAAAANQ"]
[Sun Jan 04 19:53:00.104578 2026] [:error] [pid 5661:tid 5692] [client 20.27.219.75:3526] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/she.php"] [unique_id "aVpUnLsKeIMjMZCmSEn0UgAAAgI"]
[Sun Jan 04 19:53:00.415400 2026] [:error] [pid 4979:tid 4988] [client 20.27.219.75:3601] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/she.php"] [unique_id "aVpUnP02GTWzaEAF5mqSyAAAAYY"]
[Sun Jan 04 19:53:00.800114 2026] [:error] [pid 1328:tid 1353] [client 20.27.219.75:3628] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aVpUnE_-FkByL1SGKiTQ1QAAAVY"]
[Sun Jan 04 19:53:01.092227 2026] [:error] [pid 5661:tid 5691] [client 20.27.219.75:3464] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aVpUnbsKeIMjMZCmSEn0VAAAAgE"]
[Sun Jan 04 19:53:01.487809 2026] [:error] [pid 5661:tid 5708] [client 20.27.219.75:3613] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aVpUnbsKeIMjMZCmSEn0VgAAAhI"]
[Sun Jan 04 19:53:01.820528 2026] [:error] [pid 5661:tid 5713] [client 20.27.219.75:3688] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aVpUnbsKeIMjMZCmSEn0VwAAAhc"]
[Sun Jan 04 19:53:02.225972 2026] [:error] [pid 4979:tid 4987] [client 20.27.219.75:3752] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/excel.php"] [unique_id "aVpUnv02GTWzaEAF5mqSyQAAAYU"]
[Sun Jan 04 19:53:02.554051 2026] [:error] [pid 5629:tid 5647] [client 20.27.219.75:3646] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/excel.php"] [unique_id "aVpUnp5cwu3wbyCj4doOqAAAAJA"]
[Sun Jan 04 19:53:02.861002 2026] [:error] [pid 5072:tid 5139] [client 20.27.219.75:3640] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/excel.php"] [unique_id "aVpUnr2pfHYIoX6NUv0B2wAAA4o"]
[Sun Jan 04 19:53:03.293796 2026] [:error] [pid 5072:tid 5144] [client 20.27.219.75:3535] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/excel.php"] [unique_id "aVpUn72pfHYIoX6NUv0B3AAAA48"]
[Sun Jan 04 19:53:03.584002 2026] [:error] [pid 58432:tid 58440] [client 20.27.219.75:3629] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aVpUn85iX5mcgQLNlcgZJAAAAMM"]
[Sun Jan 04 19:53:03.925157 2026] [:error] [pid 58432:tid 58460] [client 20.27.219.75:3587] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aVpUn85iX5mcgQLNlcgZJQAAANc"]
[Sun Jan 04 19:53:04.229178 2026] [:error] [pid 5661:tid 5714] [client 20.27.219.75:3605] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aVpUoLsKeIMjMZCmSEn0WgAAAhg"]
[Sun Jan 04 19:53:04.596202 2026] [:error] [pid 1328:tid 1336] [client 20.27.219.75:3699] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aVpUoE_-FkByL1SGKiTQ2QAAAUU"]
[Sun Jan 04 19:53:04.943045 2026] [:error] [pid 5727:tid 5775] [client 20.27.219.75:3565] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ap.php"] [unique_id "aVpUoOw4wd_I9FHn6_-tGwAAAxA"]
[Sun Jan 04 19:53:05.225536 2026] [:error] [pid 5661:tid 5694] [client 20.27.219.75:3642] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ap.php"] [unique_id "aVpUobsKeIMjMZCmSEn0WwAAAgQ"]
[Sun Jan 04 19:53:05.484196 2026] [:error] [pid 5727:tid 5766] [client 20.27.219.75:3656] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ap.php"] [unique_id "aVpUoew4wd_I9FHn6_-tHAAAAwc"]
[Sun Jan 04 19:53:05.785260 2026] [:error] [pid 5661:tid 5690] [client 20.27.219.75:3467] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ap.php"] [unique_id "aVpUobsKeIMjMZCmSEn0XwAAAgA"]
[Sun Jan 04 19:53:06.053303 2026] [:error] [pid 5661:tid 5696] [client 20.27.219.75:3458] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "aVpUorsKeIMjMZCmSEn0YAAAAgY"]
[Sun Jan 04 19:53:06.401085 2026] [:error] [pid 58432:tid 58445] [client 20.27.219.75:3603] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "aVpUos5iX5mcgQLNlcgZJgAAAMg"]
[Sun Jan 04 19:53:06.667322 2026] [:error] [pid 1297:tid 1303] [client 20.27.219.75:3690] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "aVpUohf98x0RBG23PjfUJwAAAAQ"]
[Sun Jan 04 19:53:07.005917 2026] [:error] [pid 58433:tid 58473] [client 20.27.219.75:3708] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "aVpUo05m7bkw35zhUNbmfgAAAQk"]
[Sun Jan 04 19:53:07.338023 2026] [:error] [pid 4979:tid 5004] [client 20.27.219.75:3566] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/love.php"] [unique_id "aVpUo_02GTWzaEAF5mqSzQAAAZY"]
[Sun Jan 04 19:53:07.697202 2026] [:error] [pid 58433:tid 58467] [client 20.27.219.75:3536] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/love.php"] [unique_id "aVpUo05m7bkw35zhUNbmfwAAAQM"]
[Sun Jan 04 19:53:08.053241 2026] [:error] [pid 4979:tid 5005] [client 20.27.219.75:3589] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/love.php"] [unique_id "aVpUpP02GTWzaEAF5mqSzwAAAZc"]
[Sun Jan 04 19:53:08.413191 2026] [:error] [pid 58433:tid 58484] [client 20.27.219.75:3554] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/love.php"] [unique_id "aVpUpE5m7bkw35zhUNbmgQAAARQ"]
[Sun Jan 04 19:53:08.782764 2026] [:error] [pid 5727:tid 5773] [client 20.27.219.75:3562] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso3.php"] [unique_id "aVpUpOw4wd_I9FHn6_-tHQAAAw4"]
[Sun Jan 04 19:53:09.328442 2026] [:error] [pid 58433:tid 58475] [client 20.27.219.75:4005] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso3.php"] [unique_id "aVpUpU5m7bkw35zhUNbmggAAAQs"]
[Sun Jan 04 19:53:09.658618 2026] [:error] [pid 4979:tid 4996] [client 20.27.219.75:3552] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso3.php"] [unique_id "aVpUpf02GTWzaEAF5mqS0gAAAY4"]
[Sun Jan 04 19:53:10.062853 2026] [:error] [pid 5010:tid 5041] [client 20.27.219.75:3772] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso3.php"] [unique_id "aVpUprV9sNJtnPnkkz-WIQAAAoA"]
[Sun Jan 04 19:53:10.418649 2026] [:error] [pid 58432:tid 58450] [client 20.27.219.75:3636] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aVpUps5iX5mcgQLNlcgZKQAAAM0"]
[Sun Jan 04 19:53:10.737903 2026] [:error] [pid 5661:tid 5698] [client 20.27.219.75:3534] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aVpUprsKeIMjMZCmSEn0YQAAAgg"]
[Sun Jan 04 19:53:11.075172 2026] [:error] [pid 58433:tid 58479] [client 20.27.219.75:3575] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aVpUp05m7bkw35zhUNbmgwAAAQ8"]
[Sun Jan 04 19:53:11.456735 2026] [:error] [pid 4979:tid 4992] [client 20.27.219.75:3623] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aVpUp_02GTWzaEAF5mqS0wAAAYo"]
[Sun Jan 04 19:53:11.717828 2026] [:error] [pid 58432:tid 58447] [client 20.27.219.75:15740] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxl.php"] [unique_id "aVpUp85iX5mcgQLNlcgZKgAAAMo"]
[Sun Jan 04 19:53:12.022525 2026] [:error] [pid 5072:tid 5143] [client 20.27.219.75:15733] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxl.php"] [unique_id "aVpUqL2pfHYIoX6NUv0B6gAAA44"]
[Sun Jan 04 19:53:12.352357 2026] [:error] [pid 58432:tid 58452] [client 20.27.219.75:15693] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxl.php"] [unique_id "aVpUqM5iX5mcgQLNlcgZLQAAAM8"]
[Sun Jan 04 19:53:12.644985 2026] [:error] [pid 5661:tid 5692] [client 20.27.219.75:15703] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxl.php"] [unique_id "aVpUqLsKeIMjMZCmSEn0YgAAAgI"]
[Sun Jan 04 19:53:13.010319 2026] [:error] [pid 5661:tid 5708] [client 20.27.219.75:3568] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aVpUqbsKeIMjMZCmSEn0ZQAAAhI"]
[Sun Jan 04 19:53:13.425084 2026] [:error] [pid 5010:tid 5064] [client 20.27.219.75:3645] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aVpUqbV9sNJtnPnkkz-WIgAAApc"]
[Sun Jan 04 19:53:13.742338 2026] [:error] [pid 4979:tid 5000] [client 20.27.219.75:3696] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aVpUqf02GTWzaEAF5mqS1QAAAZI"]
[Sun Jan 04 19:53:14.084870 2026] [:error] [pid 5727:tid 5774] [client 20.27.219.75:3483] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aVpUquw4wd_I9FHn6_-tHwAAAw8"]
[Sun Jan 04 19:53:14.478031 2026] [:error] [pid 5727:tid 5779] [client 20.27.219.75:3462] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aVpUquw4wd_I9FHn6_-tIQAAAxQ"]
[Sun Jan 04 19:53:14.777845 2026] [:error] [pid 5727:tid 5762] [client 20.27.219.75:3471] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aVpUquw4wd_I9FHn6_-tIgAAAwM"]
[Sun Jan 04 19:53:15.075985 2026] [:error] [pid 58433:tid 58480] [client 20.27.219.75:3619] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aVpUq05m7bkw35zhUNbmiQAAARA"]
[Sun Jan 04 19:53:15.401262 2026] [:error] [pid 5629:tid 5634] [client 20.27.219.75:15637] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aVpUq55cwu3wbyCj4doOrQAAAIM"]
[Sun Jan 04 19:53:15.652016 2026] [:error] [pid 5727:tid 5761] [client 20.27.219.75:15621] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aVpUq-w4wd_I9FHn6_-tJQAAAwI"]
[Sun Jan 04 19:53:15.990873 2026] [:error] [pid 1328:tid 1350] [client 20.27.219.75:15743] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aVpUq0_-FkByL1SGKiTQ3QAAAVM"]
[Sun Jan 04 19:53:16.282915 2026] [:error] [pid 4979:tid 4990] [client 20.27.219.75:3556] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aVpUrP02GTWzaEAF5mqS2AAAAYg"]
[Sun Jan 04 19:53:16.536574 2026] [:error] [pid 4979:tid 5002] [client 20.27.219.75:3602] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aVpUrP02GTWzaEAF5mqS2QAAAZQ"]
[Sun Jan 04 19:53:16.817045 2026] [:error] [pid 58433:tid 58481] [client 20.27.219.75:3461] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aVpUrE5m7bkw35zhUNbmjQAAARE"]
[Sun Jan 04 19:53:17.113157 2026] [:error] [pid 5727:tid 5782] [client 20.27.219.75:3583] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aVpUrew4wd_I9FHn6_-tJgAAAxc"]
[Sun Jan 04 19:53:17.482690 2026] [:error] [pid 5010:tid 5054] [client 20.27.219.75:3397] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aVpUrbV9sNJtnPnkkz-WIwAAAo0"]
[Sun Jan 04 19:53:17.753726 2026] [:error] [pid 1297:tid 1304] [client 20.27.219.75:15635] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aVpUrRf98x0RBG23PjfULQAAAAU"]
[Sun Jan 04 19:53:18.224906 2026] [:error] [pid 5727:tid 5767] [client 20.27.219.75:15643] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gold.php"] [unique_id "aVpUruw4wd_I9FHn6_-tKQAAAwg"]
[Sun Jan 04 19:53:18.615741 2026] [:error] [pid 5010:tid 5045] [client 20.27.219.75:3523] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gold.php"] [unique_id "aVpUrrV9sNJtnPnkkz-WJAAAAoQ"]
[Sun Jan 04 19:53:18.926105 2026] [:error] [pid 58432:tid 58437] [client 20.27.219.75:3624] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gold.php"] [unique_id "aVpUrs5iX5mcgQLNlcgZLgAAAMA"]
[Sun Jan 04 19:53:19.224559 2026] [:error] [pid 1297:tid 1320] [client 20.27.219.75:15622] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gold.php"] [unique_id "aVpUrxf98x0RBG23PjfULwAAABU"]
[Sun Jan 04 19:53:19.512832 2026] [:error] [pid 5629:tid 5631] [client 20.27.219.75:3537] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aua.php"] [unique_id "aVpUr55cwu3wbyCj4doOsQAAAIA"]
[Sun Jan 04 19:53:19.875262 2026] [:error] [pid 5010:tid 5053] [client 20.27.219.75:3513] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aua.php"] [unique_id "aVpUr7V9sNJtnPnkkz-WJQAAAow"]
[Sun Jan 04 19:53:20.151494 2026] [:error] [pid 1328:tid 1351] [client 20.27.219.75:3559] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aua.php"] [unique_id "aVpUsE_-FkByL1SGKiTQ4QAAAVQ"]
[Sun Jan 04 19:53:20.565509 2026] [:error] [pid 1328:tid 1349] [client 20.27.219.75:3555] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aua.php"] [unique_id "aVpUsE_-FkByL1SGKiTQ4wAAAVI"]
[Sun Jan 04 19:53:21.053065 2026] [:error] [pid 1328:tid 1331] [client 20.27.219.75:3606] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aVpUsU_-FkByL1SGKiTQ5gAAAUA"]
[Sun Jan 04 19:53:21.434501 2026] [:error] [pid 1328:tid 1353] [client 20.27.219.75:4072] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aVpUsU_-FkByL1SGKiTQ6AAAAVY"]
[Sun Jan 04 19:53:21.736500 2026] [:error] [pid 1328:tid 1337] [client 20.27.219.75:3522] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aVpUsU_-FkByL1SGKiTQ6gAAAUY"]
[Sun Jan 04 19:53:22.144761 2026] [:error] [pid 1297:tid 1319] [client 20.27.219.75:3577] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aVpUshf98x0RBG23PjfUMQAAABQ"]
[Sun Jan 04 19:53:22.431751 2026] [:error] [pid 5629:tid 5649] [client 20.27.219.75:3671] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/great.php"] [unique_id "aVpUsp5cwu3wbyCj4doOtAAAAJI"]
[Sun Jan 04 19:53:22.751079 2026] [:error] [pid 4979:tid 4995] [client 20.27.219.75:15642] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/great.php"] [unique_id "aVpUsv02GTWzaEAF5mqS3AAAAY0"]
[Sun Jan 04 19:53:23.067156 2026] [:error] [pid 1328:tid 1348] [client 20.27.219.75:15719] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/great.php"] [unique_id "aVpUs0_-FkByL1SGKiTQ7wAAAVE"]
[Sun Jan 04 19:53:23.458594 2026] [:error] [pid 58432:tid 58438] [client 20.27.219.75:3634] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/great.php"] [unique_id "aVpUs85iX5mcgQLNlcgZNQAAAME"]
[Sun Jan 04 19:53:23.767563 2026] [:error] [pid 5629:tid 5651] [client 20.27.219.75:3570] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aVpUs55cwu3wbyCj4doOtwAAAJQ"]
[Sun Jan 04 19:53:24.095363 2026] [:error] [pid 58433:tid 58483] [client 20.27.219.75:3527] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aVpUtE5m7bkw35zhUNbmjwAAARM"]
[Sun Jan 04 19:53:24.426254 2026] [:error] [pid 58432:tid 58455] [client 20.27.219.75:15729] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aVpUtM5iX5mcgQLNlcgZNgAAANI"]
[Sun Jan 04 19:53:24.798567 2026] [:error] [pid 58433:tid 58484] [client 20.27.219.75:15688] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aVpUtE5m7bkw35zhUNbmkAAAARQ"]
[Sun Jan 04 19:53:25.134517 2026] [:error] [pid 58432:tid 58440] [client 20.27.219.75:3579] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass.php"] [unique_id "aVpUtc5iX5mcgQLNlcgZOAAAAMM"]
[Sun Jan 04 19:53:25.462961 2026] [:error] [pid 58433:tid 58475] [client 20.27.219.75:3543] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass.php"] [unique_id "aVpUtU5m7bkw35zhUNbmkQAAAQs"]
[Sun Jan 04 19:53:25.851591 2026] [:error] [pid 5629:tid 5635] [client 20.27.219.75:3578] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass.php"] [unique_id "aVpUtZ5cwu3wbyCj4doOuAAAAIQ"]
[Sun Jan 04 19:53:26.146411 2026] [:error] [pid 4979:tid 5006] [client 20.27.219.75:4057] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass.php"] [unique_id "aVpUtv02GTWzaEAF5mqS4AAAAZg"]
[Sun Jan 04 19:53:26.414734 2026] [:error] [pid 58433:tid 58469] [client 20.27.219.75:3468] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aVpUtk5m7bkw35zhUNbmkwAAAQU"]
[Sun Jan 04 19:53:26.756702 2026] [:error] [pid 5727:tid 5779] [client 20.27.219.75:15639] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aVpUtuw4wd_I9FHn6_-tNAAAAxQ"]
[Sun Jan 04 19:53:27.006708 2026] [:error] [pid 5727:tid 5765] [client 20.27.219.75:15640] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aVpUt-w4wd_I9FHn6_-tOAAAAwY"]
[Sun Jan 04 19:53:27.325282 2026] [:error] [pid 1297:tid 1303] [client 20.27.219.75:3702] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aVpUtxf98x0RBG23PjfUNwAAAAQ"]
[Sun Jan 04 19:53:27.673546 2026] [:error] [pid 1297:tid 1310] [client 20.27.219.75:3633] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/witmm.php"] [unique_id "aVpUtxf98x0RBG23PjfUOAAAAAs"]
[Sun Jan 04 19:53:28.091470 2026] [:error] [pid 5727:tid 5759] [client 20.27.219.75:3710] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/witmm.php"] [unique_id "aVpUuOw4wd_I9FHn6_-tOwAAAwA"]
[Sun Jan 04 19:53:28.466403 2026] [:error] [pid 5727:tid 5781] [client 20.27.219.75:15725] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/witmm.php"] [unique_id "aVpUuOw4wd_I9FHn6_-tPQAAAxY"]
[Sun Jan 04 19:53:28.786650 2026] [:error] [pid 1297:tid 1308] [client 20.27.219.75:15628] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/witmm.php"] [unique_id "aVpUuBf98x0RBG23PjfUOgAAAAk"]
[Sun Jan 04 19:53:29.368679 2026] [:error] [pid 5072:tid 5131] [client 20.27.219.75:15716] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rxzx.php"] [unique_id "aVpUub2pfHYIoX6NUv0B8wAAA4I"]
[Sun Jan 04 19:53:29.708144 2026] [:error] [pid 5072:tid 5145] [client 20.27.219.75:3419] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rxzx.php"] [unique_id "aVpUub2pfHYIoX6NUv0B9AAAA5A"]
[Sun Jan 04 19:53:30.229897 2026] [:error] [pid 58433:tid 58488] [client 20.27.219.75:15698] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rxzx.php"] [unique_id "aVpUuk5m7bkw35zhUNbmlQAAARg"]
[Sun Jan 04 19:53:30.490428 2026] [:error] [pid 5727:tid 5769] [client 20.27.219.75:3474] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rxzx.php"] [unique_id "aVpUuuw4wd_I9FHn6_-tQAAAAwo"]
[Sun Jan 04 19:53:30.835208 2026] [:error] [pid 58433:tid 58487] [client 20.27.219.75:15682] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aVpUuk5m7bkw35zhUNbmlgAAARc"]
[Sun Jan 04 19:53:31.148492 2026] [:error] [pid 5072:tid 5142] [client 20.27.219.75:3666] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aVpUu72pfHYIoX6NUv0B-QAAA40"]
[Sun Jan 04 19:53:31.483728 2026] [:error] [pid 5727:tid 5768] [client 20.27.219.75:3483] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aVpUu-w4wd_I9FHn6_-tQgAAAwk"]
[Sun Jan 04 19:53:31.748079 2026] [:error] [pid 58433:tid 58472] [client 20.27.219.75:3576] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aVpUu05m7bkw35zhUNbmmAAAAQg"]
[Sun Jan 04 19:53:32.064600 2026] [:error] [pid 5727:tid 5780] [client 20.27.219.75:15629] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aVpUvOw4wd_I9FHn6_-tRAAAAxU"]
[Sun Jan 04 19:53:32.576339 2026] [:error] [pid 5072:tid 5133] [client 20.27.219.75:15652] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aVpUvL2pfHYIoX6NUv0B-gAAA4Q"]
[Sun Jan 04 19:53:32.906251 2026] [:error] [pid 5661:tid 5692] [client 20.27.219.75:3466] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aVpUvLsKeIMjMZCmSEn0bgAAAgI"]
[Sun Jan 04 19:53:33.250273 2026] [:error] [pid 5629:tid 5643] [client 20.27.219.75:3571] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aVpUvZ5cwu3wbyCj4doOvAAAAIw"]
[Sun Jan 04 19:53:33.761328 2026] [:error] [pid 4979:tid 4986] [client 20.27.219.75:15717] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aVpUvf02GTWzaEAF5mqS6QAAAYQ"]
[Sun Jan 04 19:53:34.228520 2026] [:error] [pid 4979:tid 5001] [client 20.27.219.75:3626] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aVpUvv02GTWzaEAF5mqS6gAAAZM"]
[Sun Jan 04 19:53:34.491666 2026] [:error] [pid 4979:tid 4998] [client 20.27.219.75:15631] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aVpUvv02GTWzaEAF5mqS6wAAAZA"]
[Sun Jan 04 19:53:34.947753 2026] [:error] [pid 5010:tid 5047] [client 20.27.219.75:3687] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aVpUvrV9sNJtnPnkkz-WKwAAAoY"]
[Sun Jan 04 19:53:35.214789 2026] [:error] [pid 5010:tid 5050] [client 20.27.219.75:3635] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "aVpUv7V9sNJtnPnkkz-WLAAAAok"]
[Sun Jan 04 19:53:35.506984 2026] [:error] [pid 58432:tid 58449] [client 20.27.219.75:3558] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "aVpUv85iX5mcgQLNlcgZQwAAAMw"]
[Sun Jan 04 19:53:35.814130 2026] [:error] [pid 4979:tid 4995] [client 20.27.219.75:15705] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "aVpUv_02GTWzaEAF5mqS7AAAAY0"]
[Sun Jan 04 19:53:36.113002 2026] [:error] [pid 4979:tid 4987] [client 20.27.219.75:3504] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "aVpUwP02GTWzaEAF5mqS7QAAAYU"]
[Sun Jan 04 19:53:36.447623 2026] [:error] [pid 58432:tid 58457] [client 20.27.219.75:4047] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aVpUwM5iX5mcgQLNlcgZRgAAANQ"]
[Sun Jan 04 19:53:36.727397 2026] [:error] [pid 1328:tid 1332] [client 20.27.219.75:4048] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aVpUwE_-FkByL1SGKiTQ8gAAAUE"]
[Sun Jan 04 19:53:37.030593 2026] [:error] [pid 58432:tid 58455] [client 20.27.219.75:15632] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aVpUwc5iX5mcgQLNlcgZSQAAANI"]
[Sun Jan 04 19:53:37.275850 2026] [:error] [pid 58432:tid 58442] [client 20.27.219.75:3540] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aVpUwc5iX5mcgQLNlcgZSwAAAMU"]
[Sun Jan 04 19:53:37.621485 2026] [:error] [pid 1328:tid 1334] [client 20.27.219.75:3488] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aVpUwU_-FkByL1SGKiTQ9QAAAUM"]
[Sun Jan 04 19:53:37.978434 2026] [:error] [pid 58433:tid 58466] [client 20.27.219.75:3465] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aVpUwU5m7bkw35zhUNbmmgAAAQI"]
[Sun Jan 04 19:53:38.324332 2026] [:error] [pid 1297:tid 1303] [client 20.27.219.75:15646] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aVpUwhf98x0RBG23PjfUPgAAAAQ"]
[Sun Jan 04 19:53:38.578601 2026] [:error] [pid 5010:tid 5049] [client 20.27.219.75:3630] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aVpUwrV9sNJtnPnkkz-WMgAAAog"]
[Sun Jan 04 19:53:38.949724 2026] [:error] [pid 5661:tid 5705] [client 20.27.219.75:3584] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wqqs.php"] [unique_id "aVpUwrsKeIMjMZCmSEn0bwAAAg8"]
[Sun Jan 04 19:53:39.215716 2026] [:error] [pid 5072:tid 5144] [client 20.27.219.75:15683] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wqqs.php"] [unique_id "aVpUw72pfHYIoX6NUv0B_QAAA48"]
[Sun Jan 04 19:53:39.543804 2026] [:error] [pid 5661:tid 5708] [client 20.27.219.75:15741] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wqqs.php"] [unique_id "aVpUw7sKeIMjMZCmSEn0cQAAAhI"]
[Sun Jan 04 19:53:39.805512 2026] [:error] [pid 5010:tid 5053] [client 20.27.219.75:15707] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wqqs.php"] [unique_id "aVpUw7V9sNJtnPnkkz-WNAAAAow"]
[Sun Jan 04 19:53:40.117655 2026] [:error] [pid 58432:tid 58456] [client 20.27.219.75:4046] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "aVpUxM5iX5mcgQLNlcgZUgAAANM"]
[Sun Jan 04 19:53:40.411744 2026] [:error] [pid 58432:tid 58454] [client 20.27.219.75:3505] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "aVpUxM5iX5mcgQLNlcgZVAAAANE"]
[Sun Jan 04 19:53:40.676265 2026] [:error] [pid 58433:tid 58465] [client 20.27.219.75:15710] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "aVpUxE5m7bkw35zhUNbmnAAAAQE"]
[Sun Jan 04 19:53:40.997693 2026] [:error] [pid 58433:tid 58483] [client 20.27.219.75:15728] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "aVpUxE5m7bkw35zhUNbmngAAARM"]
[Sun Jan 04 19:53:41.265144 2026] [:error] [pid 4979:tid 4991] [client 20.27.219.75:3625] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rtx.php"] [unique_id "aVpUxf02GTWzaEAF5mqS8AAAAYk"]
[Sun Jan 04 19:53:41.652065 2026] [:error] [pid 5661:tid 5713] [client 20.27.219.75:3547] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rtx.php"] [unique_id "aVpUxbsKeIMjMZCmSEn0dAAAAhc"]
[Sun Jan 04 19:53:42.103137 2026] [:error] [pid 58433:tid 58480] [client 20.27.219.75:15627] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rtx.php"] [unique_id "aVpUxk5m7bkw35zhUNbmowAAARA"]
[Sun Jan 04 19:53:42.419916 2026] [:error] [pid 58433:tid 58476] [client 20.27.219.75:3530] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rtx.php"] [unique_id "aVpUxk5m7bkw35zhUNbmqAAAAQw"]
[Sun Jan 04 19:53:42.712380 2026] [:error] [pid 58433:tid 58465] [client 20.27.219.75:15669] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aVpUxk5m7bkw35zhUNbmqQAAAQE"]
[Sun Jan 04 19:53:43.022060 2026] [:error] [pid 5072:tid 5140] [client 20.27.219.75:4062] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aVpUx72pfHYIoX6NUv0B_gAAA4s"]
[Sun Jan 04 19:53:43.500346 2026] [:error] [pid 1297:tid 1321] [client 20.27.219.75:15742] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aVpUxxf98x0RBG23PjfUPwAAABY"]
[Sun Jan 04 19:53:43.799530 2026] [:error] [pid 58433:tid 58467] [client 20.27.219.75:3549] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aVpUx05m7bkw35zhUNbmrwAAAQM"]
[Sun Jan 04 19:53:44.174843 2026] [:error] [pid 5072:tid 5147] [client 20.27.219.75:3643] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aVpUyL2pfHYIoX6NUv0B_wAAA5I"]
[Sun Jan 04 19:53:44.508915 2026] [:error] [pid 1328:tid 1341] [client 20.27.219.75:4053] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aVpUyE_-FkByL1SGKiTQ9wAAAUo"]
[Sun Jan 04 19:53:44.785342 2026] [:error] [pid 1328:tid 1348] [client 20.27.219.75:15644] [client 20.27.219.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "aVpUyE_-FkByL1SGKiTQ-AAAAVE"]
[Sun Jan 04 22:04:23.854128 2026] [:error] [pid 43584:tid 43651] [client 34.11.252.49:52360] [client 34.11.252.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.252.49, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVpzZ_eSyQA9K25-AlzzAQAAA1c"]
[Sun Jan 04 22:04:25.275341 2026] [:error] [pid 43584:tid 43649] [client 34.11.252.49:52360] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aVpzafeSyQA9K25-AlzzCAAAA1Y"]
[Sun Jan 04 22:04:26.022142 2026] [:error] [pid 43467:tid 43481] [client 34.11.252.49:54189] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aVpzainfieJppNajUV1RPwAAAIw"]
[Sun Jan 04 22:04:26.773536 2026] [:error] [pid 30985:tid 31036] [client 34.11.252.49:58662] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aVpzakisiM0XfzVcTWCxagAAAdY"]
[Sun Jan 04 22:04:27.481513 2026] [:error] [pid 43512:tid 43522] [client 34.11.252.49:56411] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aVpza-oJ6wvm29_hxYyTGQAAAMc"]
[Sun Jan 04 22:04:28.235281 2026] [:error] [pid 42665:tid 42692] [client 34.11.252.49:52085] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aVpzbBRwYwWkN__L8BWS3QAAApc"]
[Sun Jan 04 22:04:28.983113 2026] [:error] [pid 43512:tid 43532] [client 34.11.252.49:53158] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aVpzbOoJ6wvm29_hxYyTHAAAANE"]
[Sun Jan 04 22:04:29.720613 2026] [:error] [pid 29351:tid 29408] [client 34.11.252.49:54180] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aVpzbZtGiMsRmNcKXvpFNAAAAtg"]
[Sun Jan 04 22:04:30.446510 2026] [:error] [pid 43512:tid 43529] [client 34.11.252.49:64885] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aVpzbuoJ6wvm29_hxYyTIQAAAM4"]
[Sun Jan 04 22:04:31.178896 2026] [:error] [pid 30985:tid 31026] [client 34.11.252.49:62889] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aVpzb0isiM0XfzVcTWCxbgAAAcw"]
[Sun Jan 04 22:04:31.891378 2026] [:error] [pid 42665:tid 42693] [client 34.11.252.49:62730] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aVpzbxRwYwWkN__L8BWS6QAAApg"]
[Sun Jan 04 22:04:32.602731 2026] [:error] [pid 43583:tid 43603] [client 34.11.252.49:62376] [client 34.11.252.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aVpzcOZbrSRUiJ-RX9ZALQAAAU4"]
[Sun Jan 04 22:10:46.898033 2026] [:error] [pid 45949:tid 45972] [client 43.138.68.113:60986] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVp05qWUhIYCdxgkhpBPCQAAAhI"]
[Sun Jan 04 23:03:50.578770 2026] [:error] [pid 48633:tid 48635] [client 20.205.97.96:64553] [client 20.205.97.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVqBVnpmEoQIuLH2aWhO-QAAAEA"]
[Sun Jan 04 23:04:00.703765 2026] [:error] [pid 50286:tid 50304] [client 20.205.97.96:65238] [client 20.205.97.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVqBYIsZ42BFbcA1SgEJsgAAAk4"]
[Sun Jan 04 23:04:01.467326 2026] [:error] [pid 50198:tid 50201] [client 20.205.97.96:43933] [client 20.205.97.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVqBYWdhZ-F4hMTchPgTzgAAAIE"]
[Mon Jan 05 02:03:39.474454 2026] [:error] [pid 11570:tid 11576] [client 212.30.37.102:60033] [client 212.30.37.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVqre1pq_sPZb-JYukUPowAAAsQ"]
[Mon Jan 05 02:03:41.223612 2026] [:error] [pid 6937:tid 6972] [client 212.30.37.91:29801] [client 212.30.37.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aVqrfQfTYSkMJzNSH4Vq8QAAAUk"]
[Mon Jan 05 02:03:44.344918 2026] [:error] [pid 7626:tid 7644] [client 212.30.37.73:55159] [client 212.30.37.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aVqrgFjhVzHrevQ2GQzmLQAAAcU"]
[Mon Jan 05 02:03:46.297810 2026] [:error] [pid 11570:tid 11575] [client 212.30.37.112:63533] [client 212.30.37.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aVqrglpq_sPZb-JYukUPqwAAAsM"]
[Mon Jan 05 02:03:50.101636 2026] [:error] [pid 6937:tid 6987] [client 212.30.37.108:31245] [client 212.30.37.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aVqrhgfTYSkMJzNSH4VrFwAAAVI"]
[Mon Jan 05 02:03:52.328318 2026] [:error] [pid 8447:tid 8462] [client 212.30.37.71:26831] [client 212.30.37.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVqriLlwvJttJsvQpd_jqAAAAow"]
[Mon Jan 05 02:03:53.975346 2026] [:error] [pid 7716:tid 7726] [client 212.30.37.75:53115] [client 212.30.37.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aVqriTZZYbEubuUOjjbkVAAAAkM"]
[Mon Jan 05 02:03:54.614863 2026] [:error] [pid 22540:tid 22586] [client 212.30.37.101:59287] [client 212.30.37.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aVqrijQAa5AoSeJHBNqEiAAAAAw"]
[Mon Jan 05 02:03:55.233095 2026] [:error] [pid 7155:tid 7160] [client 212.30.37.72:57039] [client 212.30.37.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aVqriyD_CRsWjWrSXNJG-wAAAYM"]
[Mon Jan 05 02:03:55.877998 2026] [:error] [pid 1221:tid 1257] [client 212.30.37.73:57149] [client 212.30.37.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aVqri5_3f4CdEKVLTXUPHgAAAII"]
[Mon Jan 05 02:03:56.851679 2026] [:error] [pid 1221:tid 1278] [client 212.30.37.67:23865] [client 212.30.37.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aVqrjJ_3f4CdEKVLTXUPIgAAAJc"]
[Mon Jan 05 02:03:58.162478 2026] [:error] [pid 7155:tid 7165] [client 212.30.37.95:47927] [client 212.30.37.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aVqrjiD_CRsWjWrSXNJHAQAAAYg"]
[Mon Jan 05 02:03:59.491462 2026] [:error] [pid 6613:tid 6626] [client 212.30.37.84:62135] [client 212.30.37.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aVqrj8W2a9pc2Efh4D0NCwAAAQs"]
[Mon Jan 05 02:04:02.576781 2026] [:error] [pid 22541:tid 22621] [client 212.30.37.70:24469] [client 212.30.37.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVqrkkkjzS6tgkL3JEu0PgAAAhQ"]
[Mon Jan 05 02:04:03.597465 2026] [:error] [pid 11570:tid 11594] [client 212.30.37.75:54349] [client 212.30.37.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aVqrk1pq_sPZb-JYukUPsAAAAtY"]
[Mon Jan 05 02:04:07.049480 2026] [:error] [pid 7716:tid 7726] [client 212.30.37.112:39521] [client 212.30.37.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aVqrlzZZYbEubuUOjjbkYQAAAkM"]
[Mon Jan 05 02:04:08.046789 2026] [:error] [pid 8447:tid 8454] [client 212.30.37.86:38935] [client 212.30.37.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aVqrmLlwvJttJsvQpd_jsAAAAoQ"]
[Mon Jan 05 02:04:09.635219 2026] [:error] [pid 7155:tid 7162] [client 212.30.37.70:31353] [client 212.30.37.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aVqrmSD_CRsWjWrSXNJHCgAAAYU"]
[Mon Jan 05 02:04:11.667159 2026] [:error] [pid 1221:tid 1259] [client 212.30.37.100:52637] [client 212.30.37.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aVqrm5_3f4CdEKVLTXUPLQAAAIQ"]
[Mon Jan 05 02:04:14.864280 2026] [:error] [pid 7716:tid 7727] [client 212.30.37.78:21395] [client 212.30.37.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aVqrnjZZYbEubuUOjjbkaAAAAkQ"]
[Mon Jan 05 02:04:15.850463 2026] [:error] [pid 22541:tid 22614] [client 212.30.37.95:31185] [client 212.30.37.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aVqrn0kjzS6tgkL3JEu0TAAAAg0"]
[Mon Jan 05 02:04:16.851148 2026] [:error] [pid 8447:tid 8465] [client 212.30.37.95:57117] [client 212.30.37.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aVqroLlwvJttJsvQpd_jugAAAo8"]
[Mon Jan 05 02:04:17.500375 2026] [:error] [pid 6613:tid 6621] [client 212.30.37.68:58317] [client 212.30.37.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aVqrocW2a9pc2Efh4D0NFQAAAQY"]
[Mon Jan 05 02:04:18.174022 2026] [:error] [pid 7716:tid 7735] [client 212.30.37.72:35615] [client 212.30.37.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVqrojZZYbEubuUOjjbkbQAAAks"]
[Mon Jan 05 02:04:19.873783 2026] [:error] [pid 6937:tid 6989] [client 212.30.37.80:37365] [client 212.30.37.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aVqrowfTYSkMJzNSH4VrQgAAAVQ"]
[Mon Jan 05 02:04:20.517530 2026] [:error] [pid 7155:tid 7180] [client 212.30.37.104:52851] [client 212.30.37.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aVqrpCD_CRsWjWrSXNJHFQAAAZc"]
[Mon Jan 05 02:04:21.205621 2026] [:error] [pid 22541:tid 22623] [client 212.30.37.68:22411] [client 212.30.37.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVqrpUkjzS6tgkL3JEu0UgAAAhY"]
[Mon Jan 05 02:04:24.524616 2026] [:error] [pid 6937:tid 6991] [client 212.30.37.83:27567] [client 212.30.37.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aVqrqAfTYSkMJzNSH4VrUAAAAVU"]
[Mon Jan 05 02:04:26.181298 2026] [:error] [pid 22540:tid 22596] [client 212.30.37.103:27847] [client 212.30.37.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.37.103, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aVqrqjQAa5AoSeJHBNqElwAAABY"]
[Mon Jan 05 02:04:30.166429 2026] [:error] [pid 22540:tid 22577] [client 212.30.37.103:27847] [client 212.30.37.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aVqrrjQAa5AoSeJHBNqEpQAAAAM"]
[Mon Jan 05 02:04:31.556950 2026] [:error] [pid 1221:tid 1271] [client 212.30.37.99:27071] [client 212.30.37.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.37.99, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aVqrr5_3f4CdEKVLTXUPQwAAAJA"]
[Mon Jan 05 02:04:32.191205 2026] [:error] [pid 1221:tid 1267] [client 212.30.37.99:27071] [client 212.30.37.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aVqrsJ_3f4CdEKVLTXUPTAAAAIw"]
[Mon Jan 05 02:04:35.462438 2026] [:error] [pid 22540:tid 22589] [client 212.30.37.114:55177] [client 212.30.37.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aVqrszQAa5AoSeJHBNqEsAAAAA8"]
[Mon Jan 05 02:04:38.957853 2026] [:error] [pid 6937:tid 6963] [client 212.30.37.81:33945] [client 212.30.37.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aVqrtgfTYSkMJzNSH4VrbAAAAUE"]
[Mon Jan 05 02:04:47.613645 2026] [:error] [pid 22541:tid 22616] [client 212.30.37.107:24523] [client 212.30.37.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aVqrv0kjzS6tgkL3JEu0YgAAAg8"]
[Mon Jan 05 02:04:49.330614 2026] [:error] [pid 1221:tid 1256] [client 212.30.37.73:56377] [client 212.30.37.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.37.73, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aVqrwZ_3f4CdEKVLTXUPVgAAAIE"]
[Mon Jan 05 02:04:49.650668 2026] [:error] [pid 1221:tid 1267] [client 212.30.37.73:56377] [client 212.30.37.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aVqrwZ_3f4CdEKVLTXUPWAAAAIw"]
[Mon Jan 05 02:04:57.253681 2026] [:error] [pid 1221:tid 1271] [client 212.30.37.109:62087] [client 212.30.37.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aVqryZ_3f4CdEKVLTXUPcQAAAJA"]
[Mon Jan 05 02:04:59.175690 2026] [:error] [pid 8447:tid 8466] [client 212.30.37.76:49543] [client 212.30.37.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.37.76, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aVqry7lwvJttJsvQpd_j1QAAApA"]
[Mon Jan 05 02:05:00.515771 2026] [:error] [pid 8447:tid 8463] [client 212.30.37.76:49543] [client 212.30.37.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aVqrzLlwvJttJsvQpd_j2gAAAo0"]
[Mon Jan 05 02:05:02.594630 2026] [:error] [pid 11570:tid 11578] [client 212.30.37.111:25697] [client 212.30.37.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aVqrzlpq_sPZb-JYukUP5wAAAsY"]
[Mon Jan 05 02:05:04.193760 2026] [:error] [pid 8447:tid 8474] [client 212.30.37.65:32125] [client 212.30.37.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aVqr0LlwvJttJsvQpd_j4AAAApg"]
[Mon Jan 05 02:05:06.336334 2026] [:error] [pid 7626:tid 7652] [client 212.30.37.111:55097] [client 212.30.37.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aVqr0ljhVzHrevQ2GQzmVQAAAc0"]
[Mon Jan 05 02:05:06.965101 2026] [:error] [pid 22541:tid 22615] [client 212.30.37.81:26773] [client 212.30.37.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aVqr0kkjzS6tgkL3JEu0hgAAAg4"]
[Mon Jan 05 02:05:09.455303 2026] [:error] [pid 22540:tid 22581] [client 212.30.37.74:55811] [client 212.30.37.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aVqr1TQAa5AoSeJHBNqE4gAAAAc"]
[Mon Jan 05 02:05:11.472062 2026] [:error] [pid 22540:tid 22590] [client 212.30.37.97:48269] [client 212.30.37.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aVqr1zQAa5AoSeJHBNqE5gAAABA"]
[Mon Jan 05 02:05:13.145648 2026] [:error] [pid 11570:tid 11585] [client 212.30.37.96:23739] [client 212.30.37.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aVqr2Vpq_sPZb-JYukUP9gAAAs0"]
[Mon Jan 05 02:05:14.763398 2026] [:error] [pid 22541:tid 22613] [client 212.30.37.90:26287] [client 212.30.37.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aVqr2kkjzS6tgkL3JEu0kAAAAgw"]
[Mon Jan 05 02:05:16.142596 2026] [:error] [pid 7155:tid 7170] [client 212.30.37.100:26013] [client 212.30.37.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aVqr3CD_CRsWjWrSXNJHQwAAAY0"]
[Mon Jan 05 02:05:17.720608 2026] [:error] [pid 6937:tid 6989] [client 212.30.37.101:52397] [client 212.30.37.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aVqr3QfTYSkMJzNSH4VrqgAAAVQ"]
[Mon Jan 05 02:05:20.712437 2026] [:error] [pid 7626:tid 7653] [client 212.30.37.93:62569] [client 212.30.37.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aVqr4FjhVzHrevQ2GQzmaQAAAc4"]
[Mon Jan 05 02:05:21.403631 2026] [:error] [pid 22541:tid 22607] [client 212.30.37.75:39189] [client 212.30.37.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aVqr4UkjzS6tgkL3JEu0lwAAAgY"]
[Mon Jan 05 02:05:22.089135 2026] [:error] [pid 11570:tid 11576] [client 212.30.37.91:48919] [client 212.30.37.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aVqr4lpq_sPZb-JYukUP-AAAAsQ"]
[Mon Jan 05 02:05:23.745117 2026] [:error] [pid 22540:tid 22575] [client 212.30.37.100:46583] [client 212.30.37.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aVqr4zQAa5AoSeJHBNqE7gAAAAE"]
[Mon Jan 05 02:05:24.746960 2026] [:error] [pid 11570:tid 11577] [client 212.30.37.73:45309] [client 212.30.37.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aVqr5Fpq_sPZb-JYukUQAAAAAsU"]
[Mon Jan 05 02:05:25.438775 2026] [:error] [pid 8447:tid 8457] [client 212.30.37.87:42049] [client 212.30.37.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVqr5blwvJttJsvQpd_j7gAAAoc"]
[Mon Jan 05 02:05:27.231396 2026] [:error] [pid 22541:tid 22613] [client 212.30.37.100:64497] [client 212.30.37.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aVqr50kjzS6tgkL3JEu0mwAAAgw"]
[Mon Jan 05 03:09:53.059394 2026] [:error] [pid 22541:tid 22618] [client 104.234.53.144:55581] [client 104.234.53.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.144, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7AUkjzS6tgkL3JEu-iQAAAhE"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:09:55.927044 2026] [:error] [pid 1221:tid 1257] [client 104.234.53.100:49155] [client 104.234.53.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.100, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7A5_3f4CdEKVLTXUZ1wAAAII"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:10:01.352377 2026] [:error] [pid 7626:tid 7646] [client 104.234.53.141:24077] [client 104.234.53.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.141, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7CVjhVzHrevQ2GQzu3wAAAcc"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:10:02.736508 2026] [:error] [pid 6613:tid 6638] [client 104.234.53.115:31781] [client 104.234.53.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.115, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7CsW2a9pc2Efh4D0a1QAAARc"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:10:06.900070 2026] [:error] [pid 7716:tid 7740] [client 104.234.53.119:53239] [client 104.234.53.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.119, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7DjZZYbEubuUOjjbtjQAAAlA"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:10:28.248944 2026] [:error] [pid 6613:tid 6632] [client 104.234.53.121:22291] [client 104.234.53.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.121, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7JMW2a9pc2Efh4D0a-QAAARE"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:10:38.385722 2026] [:error] [pid 22540:tid 22584] [client 104.234.53.251:20549] [client 104.234.53.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.251, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7LjQAa5AoSeJHBNqQtwAAAAo"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:10:52.430531 2026] [:error] [pid 22541:tid 22620] [client 104.234.53.104:33001] [client 104.234.53.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.104, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7PEkjzS6tgkL3JEu-ugAAAhM"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:10:53.779154 2026] [:error] [pid 7155:tid 7170] [client 104.234.53.104:47933] [client 104.234.53.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.104, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7PSD_CRsWjWrSXNJPZgAAAY0"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:11:27.530513 2026] [:error] [pid 6937:tid 6992] [client 104.234.53.249:43515] [client 104.234.53.249] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.249, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7XwfTYSkMJzNSH4V--QAAAVY"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:11:36.900266 2026] [:error] [pid 1221:tid 1255] [client 104.234.53.102:55399] [client 104.234.53.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.102, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7aJ_3f4CdEKVLTXUaDAAAAIA"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:11:52.449621 2026] [:error] [pid 6937:tid 6994] [client 104.234.53.119:56065] [client 104.234.53.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.119, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7eAfTYSkMJzNSH4V_BQAAAVg"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:11:55.844058 2026] [:error] [pid 8447:tid 8468] [client 104.234.53.251:54379] [client 104.234.53.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.251, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7e7lwvJttJsvQpd_t9AAAApI"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:12:14.241470 2026] [:error] [pid 22540:tid 22578] [client 104.234.53.141:29545] [client 104.234.53.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.141, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7jjQAa5AoSeJHBNqQ_QAAAAQ"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:12:15.465133 2026] [:error] [pid 11570:tid 11574] [client 104.234.53.103:47699] [client 104.234.53.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.103, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7j1pq_sPZb-JYukUbXAAAAsI"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:12:37.692484 2026] [:error] [pid 22541:tid 22602] [client 104.234.53.105:50927] [client 104.234.53.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.105, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7pUkjzS6tgkL3JEu-_gAAAgE"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:13:19.024308 2026] [:error] [pid 22541:tid 22615] [client 104.234.53.131:52767] [client 104.234.53.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.131, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq7z0kjzS6tgkL3JEu_CQAAAg4"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:13:29.487170 2026] [:error] [pid 7716:tid 7724] [client 104.234.53.102:32643] [client 104.234.53.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.102, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq72TZZYbEubuUOjjbuDAAAAkE"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:13:38.680081 2026] [:error] [pid 1221:tid 1266] [client 104.234.53.119:61761] [client 104.234.53.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.119, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq74p_3f4CdEKVLTXUaegAAAIs"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:13:40.452166 2026] [:error] [pid 6613:tid 6616] [client 104.234.53.129:50731] [client 104.234.53.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.129, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq75MW2a9pc2Efh4D0bigAAAQE"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:13:50.432792 2026] [:error] [pid 22540:tid 22576] [client 104.234.53.108:36153] [client 104.234.53.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.108, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq77jQAa5AoSeJHBNqRSwAAAAI"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:14:09.402692 2026] [:error] [pid 7626:tid 7661] [client 104.234.53.117:29233] [client 104.234.53.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.117, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8AVjhVzHrevQ2GQzvWwAAAdY"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:14:11.398803 2026] [:error] [pid 7626:tid 7662] [client 104.234.53.98:27301] [client 104.234.53.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.98, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8A1jhVzHrevQ2GQzvXwAAAdc"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:14:28.903501 2026] [:error] [pid 7155:tid 7177] [client 104.234.53.112:25697] [client 104.234.53.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.112, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8FCD_CRsWjWrSXNJP-AAAAZQ"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:14:31.260609 2026] [:error] [pid 1221:tid 1272] [client 104.234.53.96:33425] [client 104.234.53.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.96, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8F5_3f4CdEKVLTXUaqwAAAJE"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:04.897804 2026] [:error] [pid 22540:tid 22585] [client 104.234.53.138:46873] [client 104.234.53.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.138, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8ODQAa5AoSeJHBNqR4wAAAAs"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:09.443026 2026] [:error] [pid 22540:tid 22585] [client 104.234.53.99:49245] [client 104.234.53.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.99, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8PTQAa5AoSeJHBNqR8wAAAAs"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:19.413145 2026] [:error] [pid 8447:tid 8471] [client 104.234.53.101:43117] [client 104.234.53.101] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.101, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8R7lwvJttJsvQpd_u3AAAApU"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:22.724606 2026] [:error] [pid 61735:tid 61762] [client 104.234.53.143:20865] [client 104.234.53.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.143, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8Sn3pNySJ-X6LhYmrzgAAAFg"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:29.399489 2026] [:error] [pid 7716:tid 7745] [client 104.234.53.247:51063] [client 104.234.53.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.247, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8UTZZYbEubuUOjjbueQAAAlU"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:31.630635 2026] [:error] [pid 1221:tid 1265] [client 104.234.53.113:58723] [client 104.234.53.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.113, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8U5_3f4CdEKVLTXUbEwAAAIo"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:35.168096 2026] [:error] [pid 22541:tid 22612] [client 104.234.53.121:63375] [client 104.234.53.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.121, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8V0kjzS6tgkL3JEu_9wAAAgs"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:43.047457 2026] [:error] [pid 7155:tid 7181] [client 104.234.53.130:56103] [client 104.234.53.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.130, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8XyD_CRsWjWrSXNJQawAAAZg"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:44.323064 2026] [:error] [pid 11570:tid 11594] [client 104.234.53.251:64791] [client 104.234.53.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.251, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8YFpq_sPZb-JYukUb_wAAAtY"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:53.958237 2026] [:error] [pid 6937:tid 6991] [client 104.234.53.139:22397] [client 104.234.53.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.139, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8aQfTYSkMJzNSH4WAcwAAAVU"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:15:55.736004 2026] [:error] [pid 7626:tid 7653] [client 104.234.53.248:54317] [client 104.234.53.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.248, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8a1jhVzHrevQ2GQzwEQAAAc4"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:16:01.416756 2026] [:error] [pid 22541:tid 22625] [client 104.234.53.135:22577] [client 104.234.53.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.135, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8cUkjzS6tgkL3JEvADwAAAhg"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:16:24.650849 2026] [:error] [pid 22541:tid 22619] [client 104.234.53.118:53217] [client 104.234.53.118] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.118, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8iEkjzS6tgkL3JEvARgAAAhI"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:16:26.234645 2026] [:error] [pid 6613:tid 6636] [client 104.234.53.134:60493] [client 104.234.53.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.134, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8isW2a9pc2Efh4D0clwAAARU"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:17:00.515750 2026] [:error] [pid 8447:tid 8452] [client 104.234.53.130:48443] [client 104.234.53.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.130, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8rLlwvJttJsvQpd_vYgAAAoI"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:17:08.656050 2026] [:error] [pid 7626:tid 7644] [client 104.234.53.117:55829] [client 104.234.53.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.117, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8tFjhVzHrevQ2GQzwKgAAAcU"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:17:09.877096 2026] [:error] [pid 7716:tid 7741] [client 104.234.53.129:49095] [client 104.234.53.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.129, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8tTZZYbEubuUOjjbutwAAAlE"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:17:59.959118 2026] [:error] [pid 1221:tid 1274] [client 104.234.53.122:23097] [client 104.234.53.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.122, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq855_3f4CdEKVLTXUbVAAAAJM"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:18:19.044314 2026] [:error] [pid 22541:tid 22622] [client 104.234.53.135:59987] [client 104.234.53.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.135, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8-0kjzS6tgkL3JEvAtAAAAhU"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:18:22.816812 2026] [:error] [pid 7716:tid 7735] [client 104.234.53.99:23209] [client 104.234.53.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.99, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq8_jZZYbEubuUOjjbu3gAAAks"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:18:24.687349 2026] [:error] [pid 22541:tid 22614] [client 104.234.53.142:53339] [client 104.234.53.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.142, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq9AEkjzS6tgkL3JEvAvQAAAg0"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:18:55.992354 2026] [:error] [pid 7716:tid 7739] [client 104.234.53.122:54283] [client 104.234.53.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.122, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq9HzZZYbEubuUOjjbvAAAAAk8"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:19:32.156179 2026] [:error] [pid 22541:tid 22622] [client 104.234.53.250:50661] [client 104.234.53.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.250, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq9REkjzS6tgkL3JEvBBQAAAhU"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:19:34.654194 2026] [:error] [pid 6937:tid 6981] [client 104.234.53.99:35247] [client 104.234.53.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.99, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq9RgfTYSkMJzNSH4WBOAAAAUw"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:19:42.908741 2026] [:error] [pid 6937:tid 6988] [client 104.234.53.145:51827] [client 104.234.53.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.145, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq9TgfTYSkMJzNSH4WBPAAAAVM"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:19:44.533170 2026] [:error] [pid 22540:tid 22578] [client 104.234.53.120:22437] [client 104.234.53.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.120, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq9UDQAa5AoSeJHBNqStgAAAAQ"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:19:55.346542 2026] [:error] [pid 6937:tid 6963] [client 104.234.53.136:46017] [client 104.234.53.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.136, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq9WwfTYSkMJzNSH4WBTAAAAUE"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:19:56.636389 2026] [:error] [pid 6613:tid 6624] [client 104.234.53.95:24035] [client 104.234.53.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.95, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq9XMW2a9pc2Efh4D0dDAAAAQk"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:20:08.784083 2026] [:error] [pid 6613:tid 6621] [client 104.234.53.129:45317] [client 104.234.53.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.129, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq9aMW2a9pc2Efh4D0dDwAAAQY"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 03:20:10.938071 2026] [:error] [pid 6613:tid 6616] [client 104.234.53.108:43373] [client 104.234.53.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.108, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVq9asW2a9pc2Efh4D0dFAAAAQE"], referer: http://measureyourcause.com.au/wp-admin/
[Mon Jan 05 04:52:45.551938 2026] [:error] [pid 5535:tid 5574] [client 43.157.150.69:57504] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVrTHWnkedMjhVX0PTV8GgAAAEQ"]
[Mon Jan 05 09:38:53.506879 2026] [:error] [pid 5632:tid 5645] [client 150.109.46.88:51914] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVsWLYN3ZWvlOh-nbt8D4QAAAME"]
[Mon Jan 05 10:10:17.757749 2026] [:error] [pid 5536:tid 5618] [client 36.41.75.167:42895] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVsdiQRtMZNG6xI8yDwotQAAAJU"]
[Mon Jan 05 14:58:40.235844 2026] [:error] [pid 5534:tid 5562] [client 193.200.229.243:37318] [client 193.200.229.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/index"] [unique_id "aVthIJNs9XmbR6unB0xJHwAAABM"]
[Mon Jan 05 16:58:58.990039 2026] [:error] [pid 28407:tid 28415] [client 43.166.240.231:43980] [client 43.166.240.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVt9Utercd3ptydUzM0QRwAAAYU"]
[Mon Jan 05 17:17:47.226319 2026] [:error] [pid 5534:tid 5565] [client 94.130.222.48:59721] [client 94.130.222.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aVuBu5Ns9XmbR6unB0x-IwAAABY"], referer: www.google.com
[Mon Jan 05 19:30:45.011959 2026] [:error] [pid 5632:tid 5653] [client 172.192.68.8:16697] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aVug5YN3ZWvlOh-nbt-7VQAAAMk"]
[Mon Jan 05 19:30:45.825774 2026] [:error] [pid 6680:tid 6696] [client 172.192.68.8:16602] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aVug5aE58uNoazzTmx3k9AAAAQ4"]
[Mon Jan 05 19:30:51.429368 2026] [:error] [pid 5534:tid 5543] [client 172.192.68.8:16591] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aVug65Ns9XmbR6unB0y1UgAAAAA"]
[Mon Jan 05 19:30:52.712090 2026] [:error] [pid 5536:tid 5621] [client 172.192.68.8:16599] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aVug7ARtMZNG6xI8yDzb5QAAAJg"]
[Mon Jan 05 19:30:54.953136 2026] [:error] [pid 28407:tid 28424] [client 172.192.68.8:16582] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "aVug7tercd3ptydUzM06_AAAAY0"]
[Mon Jan 05 19:30:59.364736 2026] [:error] [pid 5534:tid 5558] [client 172.192.68.8:16315] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "aVug85Ns9XmbR6unB0y1YQAAAA8"]
[Mon Jan 05 19:31:09.769009 2026] [:error] [pid 5632:tid 5651] [client 172.192.68.8:40897] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aVug_YN3ZWvlOh-nbt-7agAAAMc"]
[Mon Jan 05 19:31:20.066413 2026] [:error] [pid 5632:tid 5645] [client 172.192.68.8:40179] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aVuhCIN3ZWvlOh-nbt-7cAAAAME"]
[Mon Jan 05 19:31:26.313818 2026] [:error] [pid 5536:tid 5620] [client 172.192.68.8:16370] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aVuhDgRtMZNG6xI8yDzcHQAAAJc"]
[Mon Jan 05 19:31:27.126358 2026] [:error] [pid 28407:tid 28411] [client 172.192.68.8:46298] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aVuhD9ercd3ptydUzM07MAAAAYE"]
[Mon Jan 05 19:31:28.722917 2026] [:error] [pid 28407:tid 28417] [client 172.192.68.8:16326] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aVuhENercd3ptydUzM07NQAAAYc"]
[Mon Jan 05 19:31:33.260967 2026] [:error] [pid 6680:tid 6706] [client 172.192.68.8:46095] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aVuhFaE58uNoazzTmx3lMAAAARg"]
[Mon Jan 05 19:31:40.010331 2026] [:error] [pid 5535:tid 5574] [client 172.192.68.8:16433] [client 172.192.68.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "aVuhHGnkedMjhVX0PTVmVgAAAEQ"]
[Mon Jan 05 19:39:38.612264 2026] [:error] [pid 5536:tid 5612] [client 195.250.31.127:16764] [client 195.250.31.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aVui-gRtMZNG6xI8yDze2AAAAI8"]
[Mon Jan 05 21:16:10.410151 2026] [:error] [pid 5535:tid 5575] [client 68.218.64.76:64095] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aVu5mmnkedMjhVX0PTV_lgAAAEU"]
[Mon Jan 05 21:16:11.239519 2026] [:error] [pid 5534:tid 5560] [client 68.218.64.76:65279] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aVu5m5Ns9XmbR6unB0zj4AAAABE"]
[Mon Jan 05 21:16:12.177214 2026] [:error] [pid 5534:tid 5556] [client 68.218.64.76:34503] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aVu5nJNs9XmbR6unB0zj4wAAAA0"]
[Mon Jan 05 21:16:12.643272 2026] [:error] [pid 5534:tid 5555] [client 68.218.64.76:7210] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aVu5nJNs9XmbR6unB0zj5QAAAAw"]
[Mon Jan 05 21:16:13.335396 2026] [:error] [pid 5536:tid 5598] [client 68.218.64.76:34525] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "aVu5nQRtMZNG6xI8yDz_rwAAAIE"]
[Mon Jan 05 21:16:15.844045 2026] [:error] [pid 5536:tid 5613] [client 68.218.64.76:64100] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "aVu5nwRtMZNG6xI8yDz_swAAAJA"]
[Mon Jan 05 21:16:18.236373 2026] [:error] [pid 5535:tid 5594] [client 68.218.64.76:65239] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "aVu5omnkedMjhVX0PTV_ogAAAFg"]
[Mon Jan 05 21:16:21.089193 2026] [:error] [pid 5536:tid 5616] [client 68.218.64.76:7170] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "aVu5pQRtMZNG6xI8yDz_wgAAAJM"]
[Mon Jan 05 21:16:22.525600 2026] [:error] [pid 54081:tid 54102] [client 68.218.64.76:34534] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aVu5plL4jLgtF-b9w4eTEwAAAVI"]
[Mon Jan 05 21:16:26.228676 2026] [:error] [pid 5536:tid 5609] [client 68.218.64.76:7208] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aVu5qgRtMZNG6xI8yDz_2QAAAIw"]
[Mon Jan 05 21:16:27.243813 2026] [:error] [pid 6680:tid 6694] [client 68.218.64.76:34557] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aVu5q6E58uNoazzTmx0FngAAAQw"]
[Mon Jan 05 21:16:29.376029 2026] [:error] [pid 5632:tid 5649] [client 68.218.64.76:55000] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aVu5rYN3ZWvlOh-nbt_WbQAAAMU"]
[Mon Jan 05 21:16:30.151363 2026] [:error] [pid 5535:tid 5579] [client 68.218.64.76:65272] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aVu5rmnkedMjhVX0PTV_vQAAAEk"]
[Mon Jan 05 21:16:35.819752 2026] [:error] [pid 5536:tid 5613] [client 68.218.64.76:34529] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aVu5swRtMZNG6xI8yDwAEAAAAJA"]
[Mon Jan 05 21:16:38.971090 2026] [:error] [pid 6680:tid 6698] [client 68.218.64.76:34065] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aVu5tqE58uNoazzTmx0FuwAAARA"]
[Mon Jan 05 21:16:39.871681 2026] [:error] [pid 5536:tid 5612] [client 68.218.64.76:64074] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aVu5twRtMZNG6xI8yDwALgAAAI8"]
[Mon Jan 05 21:16:40.764947 2026] [:error] [pid 5536:tid 5610] [client 68.218.64.76:34556] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "aVu5uARtMZNG6xI8yDwANQAAAI0"]
[Mon Jan 05 21:16:42.301672 2026] [:error] [pid 5536:tid 5618] [client 68.218.64.76:64094] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "aVu5ugRtMZNG6xI8yDwAOQAAAJU"]
[Mon Jan 05 21:16:44.161345 2026] [:error] [pid 5536:tid 5611] [client 68.218.64.76:34508] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "aVu5vARtMZNG6xI8yDwAPQAAAI4"]
[Mon Jan 05 21:16:44.711273 2026] [:error] [pid 5536:tid 5612] [client 68.218.64.76:65241] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "aVu5vARtMZNG6xI8yDwAPgAAAI8"]
[Mon Jan 05 21:16:46.037645 2026] [:error] [pid 5535:tid 5588] [client 68.218.64.76:65265] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaje.php"] [unique_id "aVu5vmnkedMjhVX0PTV_2gAAAFI"]
[Mon Jan 05 21:16:49.352446 2026] [:error] [pid 54081:tid 54102] [client 68.218.64.76:39180] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaje.php"] [unique_id "aVu5wVL4jLgtF-b9w4eTOAAAAVI"]
[Mon Jan 05 21:16:51.509792 2026] [:error] [pid 5536:tid 5604] [client 68.218.64.76:65221] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaje.php"] [unique_id "aVu5wwRtMZNG6xI8yDwATQAAAIc"]
[Mon Jan 05 21:16:52.101186 2026] [:error] [pid 5536:tid 5620] [client 68.218.64.76:13470] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaje.php"] [unique_id "aVu5xARtMZNG6xI8yDwAVgAAAJc"]
[Mon Jan 05 21:16:54.217868 2026] [:error] [pid 5632:tid 5668] [client 68.218.64.76:13475] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "aVu5xoN3ZWvlOh-nbt_WhgAAANg"]
[Mon Jan 05 21:16:56.070469 2026] [:error] [pid 5536:tid 5619] [client 68.218.64.76:35049] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "aVu5yARtMZNG6xI8yDwAYgAAAJY"]
[Mon Jan 05 21:16:58.469264 2026] [:error] [pid 5534:tid 5567] [client 68.218.64.76:7219] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "aVu5ypNs9XmbR6unB0zkZAAAABg"]
[Mon Jan 05 21:17:00.027484 2026] [:error] [pid 6680:tid 6700] [client 68.218.64.76:34055] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "aVu5zKE58uNoazzTmx0FzwAAARI"]
[Mon Jan 05 21:17:01.132164 2026] [:error] [pid 5535:tid 5594] [client 68.218.64.76:7231] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "aVu5zWnkedMjhVX0PTV_7wAAAFg"]
[Mon Jan 05 21:17:01.920025 2026] [:error] [pid 6680:tid 6688] [client 68.218.64.76:65229] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "aVu5zaE58uNoazzTmx0F3AAAAQY"]
[Mon Jan 05 21:17:02.778394 2026] [:error] [pid 6680:tid 6700] [client 68.218.64.76:34552] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "aVu5zqE58uNoazzTmx0F4gAAARI"]
[Mon Jan 05 21:17:03.474445 2026] [:error] [pid 28407:tid 28417] [client 68.218.64.76:7178] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "aVu5z9ercd3ptydUzM1WzwAAAYc"]
[Mon Jan 05 21:17:03.800640 2026] [:error] [pid 28407:tid 28429] [client 68.218.64.76:34064] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/msy.php"] [unique_id "aVu5z9ercd3ptydUzM1W0gAAAZI"]
[Mon Jan 05 21:17:03.924731 2026] [:error] [pid 5536:tid 5604] [client 68.218.64.76:13484] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/msy.php"] [unique_id "aVu5zwRtMZNG6xI8yDwAbwAAAIc"]
[Mon Jan 05 21:17:05.699638 2026] [:error] [pid 5534:tid 5565] [client 68.218.64.76:34067] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/msy.php"] [unique_id "aVu50ZNs9XmbR6unB0zkcgAAABY"]
[Mon Jan 05 21:17:07.396936 2026] [:error] [pid 28407:tid 28431] [client 68.218.64.76:35031] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/msy.php"] [unique_id "aVu509ercd3ptydUzM1W2gAAAZQ"]
[Mon Jan 05 21:17:08.146061 2026] [:error] [pid 5534:tid 5548] [client 68.218.64.76:65240] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alog.php"] [unique_id "aVu51JNs9XmbR6unB0zkdgAAAAU"]
[Mon Jan 05 21:17:08.476448 2026] [:error] [pid 5534:tid 5543] [client 68.218.64.76:64076] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alog.php"] [unique_id "aVu51JNs9XmbR6unB0zkeQAAAAA"]
[Mon Jan 05 21:17:08.950641 2026] [:error] [pid 5534:tid 5544] [client 68.218.64.76:7196] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alog.php"] [unique_id "aVu51JNs9XmbR6unB0zkfAAAAAE"]
[Mon Jan 05 21:17:09.800867 2026] [:error] [pid 5536:tid 5621] [client 68.218.64.76:64108] [client 68.218.64.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alog.php"] [unique_id "aVu51QRtMZNG6xI8yDwAfAAAAJg"]
[Mon Jan 05 21:42:52.360714 2026] [autoindex:error] [pid 6680:tid 6692] [client 167.71.91.83:61587] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 06 00:29:14.276320 2026] [:error] [pid 60514:tid 60596] [client 203.25.124.114:28929] [client 203.25.124.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVvm2m70C0kefOIBEs9QxAAAANU"]
[Tue Jan 06 00:29:15.268933 2026] [:error] [pid 60510:tid 60565] [client 203.25.124.120:30535] [client 203.25.124.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aVvm223HNEkuMRrTL0L_cwAAAJE"]
[Tue Jan 06 00:29:17.859708 2026] [:error] [pid 60510:tid 60558] [client 203.25.124.122:40121] [client 203.25.124.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aVvm3W3HNEkuMRrTL0L_egAAAIo"]
[Tue Jan 06 00:29:19.863040 2026] [:error] [pid 60514:tid 60582] [client 212.32.76.37:31035] [client 212.32.76.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aVvm3270C0kefOIBEs9QywAAAMc"]
[Tue Jan 06 00:29:21.517744 2026] [:error] [pid 60510:tid 60562] [client 203.25.124.124:41921] [client 203.25.124.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aVvm4W3HNEkuMRrTL0L_ggAAAI4"]
[Tue Jan 06 00:29:22.160426 2026] [:error] [pid 60510:tid 60569] [client 203.25.124.228:38545] [client 203.25.124.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVvm4m3HNEkuMRrTL0L_hAAAAJU"]
[Tue Jan 06 00:29:22.665895 2026] [:error] [pid 60514:tid 60594] [client 203.25.124.105:43917] [client 203.25.124.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aVvm4m70C0kefOIBEs9Q0QAAANM"]
[Tue Jan 06 00:29:24.446697 2026] [:error] [pid 60605:tid 60607] [client 203.25.124.108:54751] [client 203.25.124.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aVvm5JGdDsTlcaRtgxQ2aAAAAQA"]
[Tue Jan 06 00:29:25.863834 2026] [:error] [pid 29187:tid 29202] [client 212.32.76.28:35641] [client 212.32.76.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aVvm5YSYYRtfmMXGZCp8DwAAAA0"]
[Tue Jan 06 00:29:26.272486 2026] [:error] [pid 60514:tid 60586] [client 203.25.124.106:50495] [client 203.25.124.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aVvm5m70C0kefOIBEs9Q2QAAAMs"]
[Tue Jan 06 00:29:26.901560 2026] [:error] [pid 60514:tid 60583] [client 212.32.76.29:23123] [client 212.32.76.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aVvm5m70C0kefOIBEs9Q3AAAAMg"]
[Tue Jan 06 00:29:28.949041 2026] [:error] [pid 60605:tid 60622] [client 203.25.124.134:61069] [client 203.25.124.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aVvm6JGdDsTlcaRtgxQ2dAAAAQ8"]
[Tue Jan 06 00:29:29.787176 2026] [:error] [pid 60605:tid 60618] [client 203.25.124.131:62509] [client 203.25.124.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aVvm6ZGdDsTlcaRtgxQ2dwAAAQs"]
[Tue Jan 06 00:29:30.439460 2026] [:error] [pid 60509:tid 60530] [client 203.25.124.227:55107] [client 203.25.124.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVvm6qBSiT1_wVwKSvQX5gAAAEk"]
[Tue Jan 06 00:29:31.261628 2026] [:error] [pid 60509:tid 60535] [client 203.25.124.116:37525] [client 203.25.124.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aVvm66BSiT1_wVwKSvQX6AAAAE4"]
[Tue Jan 06 00:29:32.794442 2026] [:error] [pid 60510:tid 60550] [client 203.25.124.230:55625] [client 203.25.124.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aVvm7G3HNEkuMRrTL0L_mAAAAII"]
[Tue Jan 06 00:29:33.402902 2026] [:error] [pid 60509:tid 60524] [client 212.32.76.38:40417] [client 212.32.76.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aVvm7aBSiT1_wVwKSvQX9QAAAEM"]
[Tue Jan 06 00:29:34.204734 2026] [:error] [pid 60605:tid 60612] [client 203.25.124.137:48735] [client 203.25.124.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aVvm7pGdDsTlcaRtgxQ2fQAAAQU"]
[Tue Jan 06 00:29:34.796820 2026] [:error] [pid 60509:tid 60523] [client 203.25.124.109:37309] [client 203.25.124.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aVvm7qBSiT1_wVwKSvQX-wAAAEI"]
[Tue Jan 06 00:29:36.074600 2026] [:error] [pid 29187:tid 29197] [client 212.32.76.34:45123] [client 212.32.76.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aVvm8ISYYRtfmMXGZCp8JAAAAAg"]
[Tue Jan 06 00:29:36.704597 2026] [:error] [pid 60514:tid 60587] [client 212.32.76.32:33487] [client 212.32.76.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aVvm8G70C0kefOIBEs9Q8wAAAMw"]
[Tue Jan 06 00:32:44.742078 2026] [:error] [pid 29187:tid 29201] [client 43.128.156.124:60706] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVvnrISYYRtfmMXGZCp_VgAAAAw"]
[Tue Jan 06 03:10:17.170873 2026] [:error] [pid 53108:tid 53130] [client 43.166.240.231:49526] [client 43.166.240.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVwMmbBx3HO3OwSCI0hMZAAAAVQ"]
[Tue Jan 06 05:04:59.846759 2026] [:error] [pid 44905:tid 44980] [client 142.132.180.39:59464] [client 142.132.180.39] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "34.106.231.39_d0e9f26f8af0f67bc2c8e10469701bf5018a270a"): Internal error (specific information not available) [hostname "measureyourcause.com.au"] [uri "/index.php"] [unique_id "aVwnebu7ufwWVst9EAva2QAAAIw"], referer: https://measureyourcause.com.au/
[Tue Jan 06 07:44:17.164016 2026] [:error] [pid 45959:tid 45970] [client 43.156.228.27:34272] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVxM0Vajdn8P3hjgMYy5fgAAAUg"]
[Tue Jan 06 08:00:22.110913 2026] [:error] [pid 35140:tid 35166] [client 160.30.136.16:52690] [client 160.30.136.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.30.136.16, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVxQlnoQaIDFMbT-XMwo2AAAARg"]
[Tue Jan 06 08:00:22.748756 2026] [:error] [pid 45959:tid 45964] [client 160.30.136.16:52759] [client 160.30.136.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.30.136.16, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVxQllajdn8P3hjgMYy_6wAAAUI"], referer: https://duckduckgo.com/
[Tue Jan 06 08:00:22.953988 2026] [:error] [pid 35140:tid 35143] [client 160.30.136.16:52690] [client 160.30.136.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 160.30.136.16, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVxQlnoQaIDFMbT-XMwo_QAAAQE"], referer: https://duckduckgo.com/
[Tue Jan 06 08:44:41.288316 2026] [:error] [pid 44905:tid 44990] [client 3.83.129.12:42122] [client 3.83.129.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aVxa-bu7ufwWVst9EAsZrgAAAJY"]
[Tue Jan 06 11:02:07.264006 2026] [:error] [pid 44903:tid 44918] [client 117.33.163.216:37174] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVx7L9hHqjs38zbkQPCPOAAAAAs"]
[Tue Jan 06 11:49:46.988689 2026] [:error] [pid 45012:tid 45034] [client 3.83.129.12:55714] [client 3.83.129.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aVyGWhaMAxCuju1d0uZhigAAANQ"]
[Tue Jan 06 12:42:07.359653 2026] [:error] [pid 44904:tid 44944] [client 142.93.131.181:56735] [client 142.93.131.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.131.181, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVySnztieuI1BJEZcvfKaQAAAEM"]
[Tue Jan 06 12:42:08.564221 2026] [:error] [pid 44905:tid 44984] [client 142.93.131.181:56924] [client 142.93.131.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.131.181, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aVySoLu7ufwWVst9EAtovAAAAJA"]
[Tue Jan 06 15:05:16.557718 2026] [:error] [pid 45012:tid 45032] [client 91.94.100.166:28821] [client 91.94.100.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.94.100.166, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aVy0LBaMAxCuju1d0uaa4wAAANI"]
[Tue Jan 06 15:40:49.734588 2026] [:error] [pid 45012:tid 45031] [client 43.157.53.115:50496] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aVy8gRaMAxCuju1d0uaiywAAANE"]
[Tue Jan 06 17:41:52.737402 2026] [:error] [pid 44903:tid 44912] [client 45.148.10.250:46346] [client 45.148.10.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aVzY4NhHqjs38zbkQPDnTgAAAAU"]
[Tue Jan 06 18:20:46.995999 2026] [:error] [pid 44904:tid 44963] [client 170.106.197.109:48516] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aVzh_jtieuI1BJEZcvcNrQAAAFY"]
[Tue Jan 06 19:33:13.723921 2026] [:error] [pid 44903:tid 44911] [client 20.239.71.136:56465] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aVzy-dhHqjs38zbkQPAASAAAAAQ"]
[Tue Jan 06 19:33:16.687469 2026] [:error] [pid 45012:tid 45033] [client 20.239.71.136:56101] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aVzy_BaMAxCuju1d0ubgLQAAANM"]
[Tue Jan 06 19:33:21.762628 2026] [:error] [pid 44903:tid 44926] [client 20.239.71.136:38672] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aVzzAdhHqjs38zbkQPAASwAAABM"]
[Tue Jan 06 19:33:33.677681 2026] [:error] [pid 44905:tid 44976] [client 20.239.71.136:38711] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aVzzDbu7ufwWVst9EAvIdgAAAIg"]
[Tue Jan 06 19:33:49.525993 2026] [:error] [pid 45012:tid 45015] [client 20.239.71.136:40764] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aVzzHRaMAxCuju1d0ubgSgAAAME"]
[Tue Jan 06 19:34:01.895689 2026] [:error] [pid 35140:tid 35143] [client 20.239.71.136:39256] [client 20.239.71.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aVzzKXoQaIDFMbT-XMy6eAAAAQE"]
[Tue Jan 06 19:42:15.788805 2026] [:error] [pid 45959:tid 45984] [client 155.117.98.117:63001] [client 155.117.98.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/e/data/js/ajax.js"] [unique_id "aVz1F1ajdn8P3hjgMYy5NQAAAVY"]
[Tue Jan 06 20:12:13.125057 2026] [:error] [pid 44905:tid 44987] [client 111.68.9.66:58576] [client 111.68.9.66] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/js/welcome.min.js"] [unique_id "aVz8Hbu7ufwWVst9EAvVcQAAAJM"]
[Tue Jan 06 22:08:11.509170 2026] [:error] [pid 44903:tid 44908] [client 173.244.55.96:33507] [client 173.244.55.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aV0XS9hHqjs38zbkQPArZAAAAAE"]
[Tue Jan 06 22:08:14.234039 2026] [:error] [pid 44905:tid 44975] [client 173.244.55.99:39841] [client 173.244.55.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aV0XTru7ufwWVst9EAv3wwAAAIc"]
[Tue Jan 06 22:47:39.183882 2026] [:error] [pid 45959:tid 45976] [client 43.131.23.154:46462] [client 43.131.23.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aV0gi1ajdn8P3hjgMYwM9QAAAU4"]
[Tue Jan 06 23:19:43.506006 2026] [:error] [pid 44903:tid 44910] [client 4.247.167.136:4533] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oD9hHqjs38zbkQPA9tgAAAAM"]
[Tue Jan 06 23:19:46.852371 2026] [:error] [pid 44905:tid 44978] [client 4.247.167.136:4531] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oEru7ufwWVst9EAsN2QAAAIo"]
[Tue Jan 06 23:19:47.804160 2026] [:error] [pid 44904:tid 44954] [client 4.247.167.136:5072] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oEztieuI1BJEZcvdZ6gAAAE0"]
[Tue Jan 06 23:19:48.915481 2026] [:error] [pid 44904:tid 44952] [client 4.247.167.136:5110] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oFDtieuI1BJEZcvdZ9wAAAEs"]
[Tue Jan 06 23:50:05.837184 2026] [:error] [pid 44903:tid 44915] [client 34.56.111.168:53163] [client 34.56.111.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.56.111.168, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aV0vLdhHqjs38zbkQPBJHQAAAAg"]
[Tue Jan 06 23:50:08.510975 2026] [:error] [pid 44903:tid 44917] [client 34.56.111.168:53163] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aV0vMNhHqjs38zbkQPBJKwAAAAo"]
[Tue Jan 06 23:50:09.469164 2026] [:error] [pid 44904:tid 44951] [client 34.56.111.168:55782] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aV0vMTtieuI1BJEZcvdjOAAAAEo"]
[Tue Jan 06 23:50:10.286958 2026] [:error] [pid 44903:tid 44926] [client 34.56.111.168:60589] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aV0vMthHqjs38zbkQPBJLgAAABM"]
[Tue Jan 06 23:50:11.138762 2026] [:error] [pid 44905:tid 44984] [client 34.56.111.168:59154] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aV0vM7u7ufwWVst9EAsYogAAAJA"]
[Tue Jan 06 23:50:11.953497 2026] [:error] [pid 45012:tid 45015] [client 34.56.111.168:52642] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aV0vMxaMAxCuju1d0uY4RgAAAME"]
[Tue Jan 06 23:50:12.791740 2026] [:error] [pid 44903:tid 44918] [client 34.56.111.168:60825] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aV0vNNhHqjs38zbkQPBJMAAAAAs"]
[Tue Jan 06 23:50:13.611413 2026] [:error] [pid 45959:tid 45970] [client 34.56.111.168:63247] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aV0vNVajdn8P3hjgMYwnbwAAAUg"]
[Tue Jan 06 23:50:14.438379 2026] [:error] [pid 35140:tid 35154] [client 34.56.111.168:63356] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aV0vNnoQaIDFMbT-XMwAsQAAAQw"]
[Tue Jan 06 23:50:15.308895 2026] [:error] [pid 45012:tid 45021] [client 34.56.111.168:63810] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aV0vNxaMAxCuju1d0uY4TQAAAMc"]
[Tue Jan 06 23:50:16.104346 2026] [:error] [pid 44903:tid 44914] [client 34.56.111.168:52915] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aV0vONhHqjs38zbkQPBJOgAAAAc"]
[Tue Jan 06 23:50:16.914844 2026] [:error] [pid 35140:tid 35146] [client 34.56.111.168:55423] [client 34.56.111.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aV0vOHoQaIDFMbT-XMwAtQAAAQQ"]
[Wed Jan 07 01:34:33.881266 2026] [:error] [pid 44903:tid 44908] [client 101.33.80.42:54890] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aV1HqdhHqjs38zbkQPBsNwAAAAE"]
[Wed Jan 07 08:56:01.907633 2026] [:error] [pid 58330:tid 58340] [client 170.106.180.153:54980] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aV2vIQ8kGngKGK7_wnc3ZAAAAQg"]
[Wed Jan 07 09:59:19.856347 2026] [:error] [pid 30720:tid 30724] [client 195.178.110.161:38284] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aV2994dgcpQjqzUi9WYRXAAAAUI"]
[Wed Jan 07 11:48:17.107997 2026] [:error] [pid 30633:tid 30675] [client 3.36.128.239:57570] [client 3.36.128.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_next/data"] [unique_id "aV3XgfZiVWlF7303nMhBVQAAAEw"]
[Wed Jan 07 11:48:17.703527 2026] [:error] [pid 30720:tid 30734] [client 3.36.128.239:57620] [client 3.36.128.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aV3XgYdgcpQjqzUi9WYpBAAAAUw"]
[Wed Jan 07 12:43:47.456103 2026] [:error] [pid 30634:tid 30710] [client 195.178.110.161:58906] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aV3kg4CIPBibObtmZtuOsAAAANQ"]
[Wed Jan 07 13:50:20.376652 2026] [:error] [pid 30634:tid 30693] [client 43.153.7.191:48366] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aV30HICIPBibObtmZtujyAAAAMM"]
[Wed Jan 07 18:45:48.590544 2026] [:error] [pid 30632:tid 30646] [client 103.180.179.86:64692] [client 103.180.179.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.180.179.86, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aV45XOd3_LCpBJzo02fqdgAAAAo"]
[Wed Jan 07 19:00:41.141881 2026] [autoindex:error] [pid 30720:tid 30736] [client 167.71.90.72:64554] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 07 21:02:04.915505 2026] [:error] [pid 30720:tid 30744] [client 49.51.233.95:50908] [client 49.51.233.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aV5ZTIdgcpQjqzUi9WaLrgAAAVY"]
[Wed Jan 07 23:47:35.240699 2026] [:error] [pid 58330:tid 58350] [client 43.157.52.37:40798] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aV6AFw8kGngKGK7_wncdlwAAARI"]
[Thu Jan 08 00:27:12.196126 2026] [:error] [pid 50936:tid 50944] [client 114.96.103.33:43637] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aV6JYLDlg80QUdd5qc4sIQAAAoY"]
[Thu Jan 08 01:19:43.995493 2026] [autoindex:error] [pid 30633:tid 30666] [client 138.197.32.240:62953] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Jan 08 02:27:58.049912 2026] [autoindex:error] [pid 58330:tid 58345] [client 138.197.32.240:59628] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Jan 08 05:04:31.134165 2026] [:error] [pid 15264:tid 15314] [client 170.106.193.108:52766] [client 170.106.193.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aV7KX4ov6_kvS0Owh-ptsAAAAE8"]
[Thu Jan 08 06:32:24.534656 2026] [:error] [pid 15265:tid 15332] [client 122.51.236.174:60722] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aV7e-KE6VBKhew2LTFSp5AAAAIY"]
[Thu Jan 08 10:30:02.207195 2026] [:error] [pid 2424:tid 2436] [client 103.77.107.178:58277] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aV8WqrTDJR8aofkBk9SWkgAAAQo"]
[Thu Jan 08 10:30:02.750748 2026] [:error] [pid 7586:tid 7593] [client 103.77.107.178:58561] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aV8WqsJyk37GdXP5TmUEkQAAAcU"]
[Thu Jan 08 12:48:27.124729 2026] [:error] [pid 2484:tid 2497] [client 43.157.170.126:58882] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aV83GziDlnlaQQK_AEMANAAAAUo"]
[Thu Jan 08 19:38:25.434232 2026] [:error] [pid 2484:tid 2486] [client 106.203.207.203:63003] [client 106.203.207.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.203.207.203, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aV-XMTiDlnlaQQK_AENzHAAAAUA"]
[Thu Jan 08 22:44:26.720849 2026] [:error] [pid 15358:tid 15372] [client 4.190.211.79:14801] [client 4.190.211.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assacc.php"] [unique_id "aV_CyioRk9xWJ3toSBKTjgAAAMI"]
[Thu Jan 08 22:44:31.988252 2026] [:error] [pid 17404:tid 17411] [client 4.190.211.79:31483] [client 4.190.211.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assacc.php"] [unique_id "aV_Cz2Vd_oH193N6AnXSBwAAAYU"]
[Thu Jan 08 22:44:33.852996 2026] [:error] [pid 2484:tid 2494] [client 4.190.211.79:30536] [client 4.190.211.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assacc.php"] [unique_id "aV_C0TiDlnlaQQK_AEOobQAAAUc"]
[Thu Jan 08 22:44:51.463558 2026] [:error] [pid 15358:tid 15388] [client 4.190.211.79:36693] [client 4.190.211.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6y7t.php"] [unique_id "aV_C4yoRk9xWJ3toSBKTlAAAANI"]
[Thu Jan 08 22:45:16.964015 2026] [:error] [pid 2424:tid 2440] [client 4.190.211.79:36504] [client 4.190.211.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/monso.php"] [unique_id "aV_C_LTDJR8aofkBk9RD3AAAAQ4"]
[Thu Jan 08 22:45:21.870401 2026] [:error] [pid 7586:tid 7607] [client 4.190.211.79:45611] [client 4.190.211.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnnof6.php"] [unique_id "aV_DAcJyk37GdXP5TmV_-AAAAdE"]
[Thu Jan 08 22:45:24.389021 2026] [:error] [pid 15263:tid 15275] [client 4.190.211.79:36009] [client 4.190.211.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnnof6.php"] [unique_id "aV_DBNv61bxum7WG_e8V4QAAAAM"]
[Thu Jan 08 22:53:29.771322 2026] [:error] [pid 15358:tid 15379] [client 34.48.253.34:51513] [client 34.48.253.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.48.253.34, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aV_E6SoRk9xWJ3toSBKV5gAAAMk"]
[Thu Jan 08 22:53:30.314281 2026] [:error] [pid 15358:tid 15376] [client 34.48.253.34:51513] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aV_E6ioRk9xWJ3toSBKV6AAAAMY"]
[Thu Jan 08 22:53:31.210417 2026] [:error] [pid 2484:tid 2490] [client 34.48.253.34:54380] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aV_E6ziDlnlaQQK_AEOq9QAAAUQ"]
[Thu Jan 08 22:53:32.111422 2026] [:error] [pid 2484:tid 2508] [client 34.48.253.34:63430] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aV_E7DiDlnlaQQK_AEOq_QAAAVQ"]
[Thu Jan 08 22:53:33.106593 2026] [:error] [pid 15263:tid 15274] [client 34.48.253.34:57868] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aV_E7dv61bxum7WG_e8XbwAAAAI"]
[Thu Jan 08 22:53:34.050578 2026] [:error] [pid 2484:tid 2501] [client 34.48.253.34:52554] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aV_E7jiDlnlaQQK_AEOrAQAAAU0"]
[Thu Jan 08 22:53:34.916388 2026] [:error] [pid 15265:tid 15327] [client 34.48.253.34:54055] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aV_E7qE6VBKhew2LTFRg5AAAAIE"]
[Thu Jan 08 22:53:35.934509 2026] [:error] [pid 15264:tid 15323] [client 34.48.253.34:56312] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aV_E74ov6_kvS0Owh-olhQAAAFg"]
[Thu Jan 08 22:53:36.853918 2026] [:error] [pid 15264:tid 15316] [client 34.48.253.34:49303] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aV_E8Iov6_kvS0Owh-oliQAAAFE"]
[Thu Jan 08 22:53:37.794201 2026] [:error] [pid 15263:tid 15281] [client 34.48.253.34:55639] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aV_E8dv61bxum7WG_e8XcgAAAAk"]
[Thu Jan 08 22:53:38.881641 2026] [:error] [pid 17404:tid 17416] [client 34.48.253.34:55656] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aV_E8mVd_oH193N6AnXT2AAAAYo"]
[Thu Jan 08 22:53:39.888897 2026] [:error] [pid 2484:tid 2486] [client 34.48.253.34:50993] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aV_E8ziDlnlaQQK_AEOrAgAAAUA"]
[Thu Jan 08 22:53:40.807267 2026] [:error] [pid 15264:tid 15312] [client 34.48.253.34:53977] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aV_E9Iov6_kvS0Owh-oljQAAAE0"]
[Thu Jan 08 22:53:41.743776 2026] [:error] [pid 15264:tid 15308] [client 34.48.253.34:53573] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aV_E9Yov6_kvS0Owh-oljwAAAEk"]
[Thu Jan 08 22:53:42.657830 2026] [:error] [pid 17404:tid 17407] [client 34.48.253.34:53304] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aV_E9mVd_oH193N6AnXT2wAAAYE"]
[Thu Jan 08 22:53:43.560746 2026] [:error] [pid 15264:tid 15302] [client 34.48.253.34:58072] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aV_E94ov6_kvS0Owh-olkQAAAEM"]
[Thu Jan 08 22:53:44.534491 2026] [:error] [pid 17404:tid 17418] [client 34.48.253.34:50919] [client 34.48.253.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aV_E-GVd_oH193N6AnXT3QAAAYw"]
[Fri Jan 09 01:58:56.773164 2026] [:error] [pid 13673:tid 13675] [client 114.96.103.33:42818] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aV_wYID4ue0-noJ7SHPBZAAAAgA"]
[Fri Jan 09 10:20:26.200086 2026] [autoindex:error] [pid 44848:tid 44852] [client 143.244.141.160:54663] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 09 12:43:23.572707 2026] [:error] [pid 1366:tid 1389] [client 43.153.104.196:33852] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWCHaxmasveKu8_ec1XaggAAAZQ"]
[Fri Jan 09 13:25:28.277628 2026] [autoindex:error] [pid 30019:tid 30036] [client 143.244.141.160:54746] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 09 14:22:26.073970 2026] [:error] [pid 1366:tid 1379] [client 119.96.24.54:37900] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWCeohmasveKu8_ec1X-UQAAAYo"]
[Fri Jan 09 20:36:25.709093 2026] [:error] [pid 44848:tid 44866] [client 117.33.163.216:49284] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWD2SajajoTJAbEk87zMWQAAAFA"]
[Fri Jan 09 21:18:56.672533 2026] [:error] [pid 44848:tid 44852] [client 182.48.210.100:54097] [client 182.48.210.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.48.210.100, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWEAQKjajoTJAbEk87zUmwAAAEI"]
[Fri Jan 09 21:19:28.233100 2026] [:error] [pid 14770:tid 14787] [client 78.134.45.121:60412] [client 78.134.45.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.134.45.121, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWEAYB5QbaVZ-6newJZDtAAAAg8"]
[Fri Jan 09 21:45:07.471863 2026] [:error] [pid 30020:tid 30061] [client 4.230.24.44:10523] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aWEGY8rjc66qOisG6L3jTQAAAIc"]
[Fri Jan 09 21:45:08.071684 2026] [:error] [pid 44848:tid 44863] [client 4.230.24.44:10575] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aWEGZKjajoTJAbEk87zZ3QAAAE0"]
[Fri Jan 09 21:45:08.883057 2026] [:error] [pid 30019:tid 30038] [client 4.230.24.44:10573] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aWEGZEz3igHGwX5f7Ir1HgAAAA4"]
[Fri Jan 09 21:45:09.268893 2026] [:error] [pid 30021:tid 30089] [client 4.230.24.44:10583] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aWEGZQ_M8aRtsTog5J-tBQAAAMg"]
[Fri Jan 09 21:45:09.630311 2026] [:error] [pid 14770:tid 14784] [client 4.230.24.44:10514] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aWEGZR5QbaVZ-6newJZHZgAAAgw"]
[Fri Jan 09 21:45:09.951757 2026] [:error] [pid 30021:tid 30099] [client 4.230.24.44:10581] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aWEGZQ_M8aRtsTog5J-tBgAAANI"]
[Fri Jan 09 21:45:10.428834 2026] [:error] [pid 1366:tid 1371] [client 4.230.24.44:10497] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aWEGZhmasveKu8_ec1WBkwAAAYM"]
[Fri Jan 09 21:45:10.802951 2026] [:error] [pid 1366:tid 1385] [client 4.230.24.44:10512] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aWEGZhmasveKu8_ec1WBlAAAAZA"]
[Fri Jan 09 21:45:11.312458 2026] [:error] [pid 14770:tid 14786] [client 4.230.24.44:10561] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aWEGZx5QbaVZ-6newJZHawAAAg4"]
[Fri Jan 09 21:45:11.835249 2026] [:error] [pid 14831:tid 14847] [client 4.230.24.44:10564] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aWEGZ_aKOMCmJcAyBm1EmgAAAo4"]
[Fri Jan 09 21:45:12.259313 2026] [:error] [pid 1366:tid 1386] [client 4.230.24.44:10516] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aWEGaBmasveKu8_ec1WBlQAAAZE"]
[Fri Jan 09 21:45:12.697453 2026] [:error] [pid 1366:tid 1392] [client 4.230.24.44:10545] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aWEGaBmasveKu8_ec1WBlgAAAZc"]
[Fri Jan 09 21:45:13.529646 2026] [:error] [pid 1366:tid 1383] [client 4.230.24.44:10566] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aWEGaRmasveKu8_ec1WBmAAAAY4"]
[Fri Jan 09 21:45:14.017713 2026] [:error] [pid 44848:tid 44864] [client 4.230.24.44:10602] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aWEGaqjajoTJAbEk87zZ4AAAAE4"]
[Fri Jan 09 21:45:14.543749 2026] [:error] [pid 1366:tid 1380] [client 4.230.24.44:10582] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aWEGahmasveKu8_ec1WBoQAAAYs"]
[Fri Jan 09 21:45:15.256413 2026] [:error] [pid 30021:tid 30085] [client 4.230.24.44:10572] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aWEGaw_M8aRtsTog5J-tCQAAAMQ"]
[Fri Jan 09 21:45:16.169663 2026] [:error] [pid 30021:tid 30104] [client 4.230.24.44:10542] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aWEGbA_M8aRtsTog5J-tCwAAANc"]
[Fri Jan 09 21:45:16.853023 2026] [:error] [pid 14770:tid 14789] [client 4.230.24.44:10519] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aWEGbB5QbaVZ-6newJZHbwAAAhE"]
[Fri Jan 09 21:45:17.314643 2026] [:error] [pid 14831:tid 14837] [client 4.230.24.44:10504] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aWEGbfaKOMCmJcAyBm1EnQAAAoQ"]
[Fri Jan 09 21:45:17.814911 2026] [:error] [pid 14739:tid 14754] [client 4.230.24.44:10608] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aWEGbV63M6_PkLt_IJJzhgAAAc0"]
[Fri Jan 09 21:45:18.369635 2026] [:error] [pid 14770:tid 14778] [client 4.230.24.44:10615] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aWEGbh5QbaVZ-6newJZHcgAAAgY"]
[Fri Jan 09 21:45:18.810099 2026] [:error] [pid 14739:tid 14760] [client 4.230.24.44:10559] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aWEGbl63M6_PkLt_IJJziAAAAdM"]
[Fri Jan 09 21:45:19.237824 2026] [:error] [pid 14770:tid 14785] [client 4.230.24.44:10511] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aWEGbx5QbaVZ-6newJZHdQAAAg0"]
[Fri Jan 09 21:45:19.640714 2026] [:error] [pid 30019:tid 30046] [client 4.230.24.44:10517] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aWEGb0z3igHGwX5f7Ir1IgAAABY"]
[Fri Jan 09 21:45:19.977327 2026] [:error] [pid 1366:tid 1389] [client 4.230.24.44:10595] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aWEGbxmasveKu8_ec1WBrAAAAZQ"]
[Fri Jan 09 21:45:20.699187 2026] [:error] [pid 1366:tid 1375] [client 4.230.24.44:4067] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aWEGcBmasveKu8_ec1WBrgAAAYY"]
[Fri Jan 09 21:45:21.168490 2026] [:error] [pid 14739:tid 14752] [client 4.230.24.44:10618] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aWEGcV63M6_PkLt_IJJziwAAAcs"]
[Fri Jan 09 21:45:21.567748 2026] [:error] [pid 14831:tid 14857] [client 4.230.24.44:10525] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aWEGcfaKOMCmJcAyBm1EoQAAApg"]
[Fri Jan 09 21:45:22.107111 2026] [:error] [pid 14831:tid 14854] [client 4.230.24.44:10500] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aWEGcvaKOMCmJcAyBm1EogAAApU"]
[Fri Jan 09 21:45:22.476725 2026] [:error] [pid 30021:tid 30094] [client 4.230.24.44:10593] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aWEGcg_M8aRtsTog5J-tDAAAAM0"]
[Fri Jan 09 21:45:22.760649 2026] [:error] [pid 14801:tid 14805] [client 4.230.24.44:10604] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aWEGct8UWXrz_OQYgF1ucgAAAkI"]
[Fri Jan 09 21:45:23.158183 2026] [:error] [pid 14739:tid 14763] [client 4.230.24.44:10580] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aWEGc163M6_PkLt_IJJzjAAAAdY"]
[Fri Jan 09 21:45:23.486484 2026] [:error] [pid 14831:tid 14841] [client 4.230.24.44:10521] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aWEGc_aKOMCmJcAyBm1EpAAAAog"]
[Fri Jan 09 21:45:23.828234 2026] [:error] [pid 44848:tid 44861] [client 4.230.24.44:10515] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aWEGc6jajoTJAbEk87zZ4gAAAEs"]
[Fri Jan 09 21:45:24.167652 2026] [:error] [pid 14801:tid 14827] [client 4.230.24.44:10619] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aWEGdN8UWXrz_OQYgF1udAAAAlg"]
[Fri Jan 09 21:45:24.608522 2026] [:error] [pid 30019:tid 30036] [client 4.230.24.44:10553] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aWEGdEz3igHGwX5f7Ir1JgAAAAw"]
[Fri Jan 09 21:45:24.967721 2026] [:error] [pid 30021:tid 30101] [client 4.230.24.44:10501] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aWEGdA_M8aRtsTog5J-tDwAAANQ"]
[Fri Jan 09 21:45:25.250133 2026] [:error] [pid 14872:tid 14885] [client 4.230.24.44:10510] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aWEGdaIUELhgYLNp1sZEPwAAAss"]
[Fri Jan 09 21:45:25.728698 2026] [:error] [pid 14739:tid 14750] [client 4.230.24.44:10563] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aWEGdV63M6_PkLt_IJJzjQAAAck"]
[Fri Jan 09 21:45:26.251785 2026] [:error] [pid 30020:tid 30058] [client 4.230.24.44:10601] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aWEGdsrjc66qOisG6L3jUQAAAIQ"]
[Fri Jan 09 21:45:26.520920 2026] [:error] [pid 14770:tid 14795] [client 4.230.24.44:4037] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aWEGdh5QbaVZ-6newJZHfgAAAhc"]
[Fri Jan 09 21:45:26.812500 2026] [:error] [pid 14739:tid 14747] [client 4.230.24.44:10609] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aWEGdl63M6_PkLt_IJJzjgAAAcY"]
[Fri Jan 09 21:45:27.156433 2026] [:error] [pid 14739:tid 14748] [client 4.230.24.44:10597] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aWEGd163M6_PkLt_IJJzjwAAAcc"]
[Fri Jan 09 21:45:27.521170 2026] [:error] [pid 1366:tid 1392] [client 4.230.24.44:4072] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aWEGdxmasveKu8_ec1WBtwAAAZc"]
[Fri Jan 09 21:45:27.825685 2026] [:error] [pid 30021:tid 30090] [client 4.230.24.44:10509] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aWEGdw_M8aRtsTog5J-tEAAAAMk"]
[Fri Jan 09 21:45:28.357747 2026] [:error] [pid 14739:tid 14742] [client 4.230.24.44:4056] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aWEGeF63M6_PkLt_IJJzkAAAAcE"]
[Fri Jan 09 21:45:28.783247 2026] [:error] [pid 14739:tid 14745] [client 4.230.24.44:10578] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aWEGeF63M6_PkLt_IJJzkwAAAcQ"]
[Fri Jan 09 21:45:29.160128 2026] [:error] [pid 14739:tid 14753] [client 4.230.24.44:4044] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aWEGeV63M6_PkLt_IJJzlQAAAcw"]
[Fri Jan 09 21:45:29.744409 2026] [:error] [pid 14739:tid 14741] [client 4.230.24.44:10568] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aWEGeV63M6_PkLt_IJJzmQAAAcA"]
[Fri Jan 09 21:45:30.545031 2026] [:error] [pid 30019:tid 30043] [client 4.230.24.44:10587] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aWEGekz3igHGwX5f7Ir1JwAAABM"]
[Fri Jan 09 21:45:31.028968 2026] [:error] [pid 30021:tid 30100] [client 4.230.24.44:10508] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aWEGew_M8aRtsTog5J-tEQAAANM"]
[Fri Jan 09 21:45:31.369035 2026] [:error] [pid 30019:tid 30047] [client 4.230.24.44:4047] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aWEGe0z3igHGwX5f7Ir1KgAAABc"]
[Fri Jan 09 21:45:31.813088 2026] [:error] [pid 1366:tid 1391] [client 4.230.24.44:10506] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWEGexmasveKu8_ec1WBuAAAAZY"]
[Fri Jan 09 21:45:32.146722 2026] [:error] [pid 14770:tid 14776] [client 4.230.24.44:10529] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWEGfB5QbaVZ-6newJZHggAAAgQ"]
[Fri Jan 09 21:45:32.443966 2026] [:error] [pid 14831:tid 14851] [client 4.230.24.44:10622] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWEGfPaKOMCmJcAyBm1EqgAAApI"]
[Fri Jan 09 21:45:32.737048 2026] [:error] [pid 14801:tid 14814] [client 4.230.24.44:10554] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWEGfN8UWXrz_OQYgF1udQAAAks"]
[Fri Jan 09 21:45:33.145669 2026] [:error] [pid 14770:tid 14779] [client 4.230.24.44:4060] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWEGfR5QbaVZ-6newJZHhAAAAgc"]
[Fri Jan 09 21:45:33.618824 2026] [:error] [pid 1366:tid 1373] [client 4.230.24.44:10606] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWEGfRmasveKu8_ec1WBuwAAAYQ"]
[Fri Jan 09 21:45:34.000559 2026] [:error] [pid 30021:tid 30097] [client 4.230.24.44:10539] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWEGfQ_M8aRtsTog5J-tEwAAANA"]
[Fri Jan 09 21:45:34.662066 2026] [:error] [pid 14831:tid 14855] [client 4.230.24.44:10598] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWEGfvaKOMCmJcAyBm1ErgAAApY"]
[Fri Jan 09 21:45:35.096185 2026] [:error] [pid 30021:tid 30092] [client 4.230.24.44:10502] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aWEGfw_M8aRtsTog5J-tFAAAAMs"]
[Fri Jan 09 21:45:35.534929 2026] [:error] [pid 14770:tid 14785] [client 4.230.24.44:10536] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aWEGfx5QbaVZ-6newJZHhQAAAg0"]
[Fri Jan 09 21:45:35.915154 2026] [:error] [pid 14872:tid 14892] [client 4.230.24.44:10524] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aWEGf6IUELhgYLNp1sZERAAAAtI"]
[Fri Jan 09 21:45:36.321075 2026] [:error] [pid 1366:tid 1382] [client 4.230.24.44:10599] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aWEGgBmasveKu8_ec1WBvQAAAY0"]
[Fri Jan 09 21:45:36.606275 2026] [:error] [pid 1366:tid 1371] [client 4.230.24.44:10591] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aWEGgBmasveKu8_ec1WBvgAAAYM"]
[Fri Jan 09 21:45:36.889333 2026] [:error] [pid 1366:tid 1393] [client 4.230.24.44:10565] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aWEGgBmasveKu8_ec1WBvwAAAZg"]
[Fri Jan 09 21:45:37.399625 2026] [:error] [pid 30020:tid 30061] [client 4.230.24.44:10498] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aWEGgcrjc66qOisG6L3jWAAAAIc"]
[Fri Jan 09 21:45:37.899153 2026] [:error] [pid 14872:tid 14887] [client 4.230.24.44:10585] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aWEGgaIUELhgYLNp1sZERQAAAs0"]
[Fri Jan 09 21:45:38.399082 2026] [:error] [pid 30020:tid 30063] [client 4.230.24.44:10588] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWEGgsrjc66qOisG6L3jWQAAAIk"]
[Fri Jan 09 21:45:38.906460 2026] [:error] [pid 14770:tid 14793] [client 4.230.24.44:4089] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWEGgh5QbaVZ-6newJZHiwAAAhU"]
[Fri Jan 09 21:45:39.617281 2026] [:error] [pid 14770:tid 14780] [client 4.230.24.44:10610] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWEGgx5QbaVZ-6newJZHjAAAAgg"]
[Fri Jan 09 21:45:40.580109 2026] [:error] [pid 1366:tid 1383] [client 4.230.24.44:4065] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWEGhBmasveKu8_ec1WBxQAAAY4"]
[Fri Jan 09 21:45:40.988694 2026] [:error] [pid 30020:tid 30076] [client 4.230.24.44:10569] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWEGhMrjc66qOisG6L3jXAAAAJY"]
[Fri Jan 09 21:45:41.567480 2026] [:error] [pid 14739:tid 14754] [client 4.230.24.44:10538] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWEGhV63M6_PkLt_IJJzoAAAAc0"]
[Fri Jan 09 21:45:42.030426 2026] [:error] [pid 30020:tid 30058] [client 4.230.24.44:10526] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWEGhsrjc66qOisG6L3jXgAAAIQ"]
[Fri Jan 09 21:45:42.452151 2026] [:error] [pid 14872:tid 14874] [client 4.230.24.44:10532] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWEGhqIUELhgYLNp1sZESwAAAsA"]
[Fri Jan 09 21:45:42.750771 2026] [:error] [pid 14872:tid 14879] [client 4.230.24.44:10620] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aWEGhqIUELhgYLNp1sZETAAAAsU"]
[Fri Jan 09 21:45:43.240670 2026] [:error] [pid 14872:tid 14883] [client 4.230.24.44:10586] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aWEGh6IUELhgYLNp1sZETwAAAsk"]
[Fri Jan 09 21:45:43.758483 2026] [:error] [pid 14770:tid 14779] [client 4.230.24.44:10499] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aWEGhx5QbaVZ-6newJZHlAAAAgc"]
[Fri Jan 09 21:45:44.154840 2026] [:error] [pid 14872:tid 14876] [client 4.230.24.44:10590] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aWEGiKIUELhgYLNp1sZEUgAAAsI"]
[Fri Jan 09 21:45:44.516125 2026] [:error] [pid 14739:tid 14741] [client 4.230.24.44:10537] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aWEGiF63M6_PkLt_IJJzoQAAAcA"]
[Fri Jan 09 21:45:44.962746 2026] [:error] [pid 1366:tid 1376] [client 4.230.24.44:4040] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aWEGiBmasveKu8_ec1WBxwAAAYc"]
[Fri Jan 09 21:45:45.368394 2026] [:error] [pid 30020:tid 30078] [client 4.230.24.44:4035] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aWEGicrjc66qOisG6L3jYwAAAJg"]
[Fri Jan 09 21:45:45.734152 2026] [:error] [pid 14872:tid 14894] [client 4.230.24.44:10518] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aWEGiaIUELhgYLNp1sZEVQAAAtQ"]
[Fri Jan 09 21:45:46.056542 2026] [:error] [pid 30021:tid 30086] [client 4.230.24.44:10505] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aWEGig_M8aRtsTog5J-tGQAAAMU"]
[Fri Jan 09 21:45:46.445003 2026] [:error] [pid 30021:tid 30098] [client 4.230.24.44:10548] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aWEGig_M8aRtsTog5J-tGwAAANE"]
[Fri Jan 09 21:45:46.850447 2026] [:error] [pid 14739:tid 14760] [client 4.230.24.44:10570] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aWEGil63M6_PkLt_IJJzpQAAAdM"]
[Fri Jan 09 21:45:47.168112 2026] [:error] [pid 30021:tid 30104] [client 4.230.24.44:10522] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aWEGiw_M8aRtsTog5J-tHAAAANc"]
[Fri Jan 09 21:45:47.467218 2026] [:error] [pid 14770:tid 14777] [client 4.230.24.44:10550] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aWEGix5QbaVZ-6newJZHlwAAAgU"]
[Fri Jan 09 21:45:47.975830 2026] [:error] [pid 30019:tid 30028] [client 4.230.24.44:10611] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aWEGi0z3igHGwX5f7Ir1KwAAAAQ"]
[Fri Jan 09 21:45:48.409684 2026] [:error] [pid 14801:tid 14825] [client 4.230.24.44:4054] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aWEGjN8UWXrz_OQYgF1ueAAAAlY"]
[Fri Jan 09 21:45:48.730036 2026] [:error] [pid 14801:tid 14826] [client 4.230.24.44:4033] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aWEGjN8UWXrz_OQYgF1uegAAAlc"]
[Fri Jan 09 21:45:49.032487 2026] [:error] [pid 14872:tid 14887] [client 4.230.24.44:10579] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWEGjaIUELhgYLNp1sZEVgAAAs0"]
[Fri Jan 09 21:45:49.488620 2026] [:error] [pid 30019:tid 30031] [client 4.230.24.44:10612] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWEGjUz3igHGwX5f7Ir1LAAAAAc"]
[Fri Jan 09 21:45:49.914534 2026] [:error] [pid 30020:tid 30054] [client 4.230.24.44:4048] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWEGjcrjc66qOisG6L3jZwAAAIA"]
[Fri Jan 09 21:45:50.395799 2026] [:error] [pid 14872:tid 14882] [client 4.230.24.44:4058] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWEGjqIUELhgYLNp1sZEWAAAAsg"]
[Fri Jan 09 21:45:50.892629 2026] [:error] [pid 14801:tid 14810] [client 4.230.24.44:4043] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWEGjt8UWXrz_OQYgF1ufAAAAkc"]
[Fri Jan 09 21:45:51.219362 2026] [:error] [pid 14739:tid 14764] [client 4.230.24.44:4057] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWEGj163M6_PkLt_IJJzqAAAAdc"]
[Fri Jan 09 21:45:51.561594 2026] [:error] [pid 14872:tid 14888] [client 4.230.24.44:10577] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWEGj6IUELhgYLNp1sZEWQAAAs4"]
[Fri Jan 09 21:45:51.948183 2026] [:error] [pid 1366:tid 1373] [client 4.230.24.44:10540] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWEGjxmasveKu8_ec1WBygAAAYQ"]
[Fri Jan 09 21:45:52.752995 2026] [:error] [pid 1366:tid 1384] [client 4.230.24.44:4042] [client 4.230.24.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aWEGkBmasveKu8_ec1WBywAAAY8"]
[Fri Jan 09 21:45:53.192324 2026] [:error] [pid 30020:tid 30058] [client 4.230.24.44:4007] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWEGkcrjc66qOisG6L3jagAAAIQ"]
[Fri Jan 09 21:45:53.512921 2026] [:error] [pid 14872:tid 14879] [client 4.230.24.44:3994] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWEGkaIUELhgYLNp1sZEWwAAAsU"]
[Fri Jan 09 21:45:54.018213 2026] [:error] [pid 30019:tid 30046] [client 4.230.24.44:10592] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWEGkkz3igHGwX5f7Ir1MQAAABY"]
[Fri Jan 09 21:45:54.358382 2026] [:error] [pid 14739:tid 14745] [client 4.230.24.44:4093] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWEGkl63M6_PkLt_IJJzrQAAAcQ"]
[Fri Jan 09 21:45:54.982025 2026] [:error] [pid 14872:tid 14882] [client 4.230.24.44:4083] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aWEGkqIUELhgYLNp1sZEcAAAAsg"]
[Fri Jan 09 21:45:55.976293 2026] [:error] [pid 14872:tid 14888] [client 4.230.24.44:10613] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aWEGk6IUELhgYLNp1sZEhQAAAs4"]
[Fri Jan 09 21:45:56.678821 2026] [:error] [pid 14872:tid 14876] [client 4.230.24.44:10620] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aWEGlKIUELhgYLNp1sZEkAAAAsI"]
[Fri Jan 09 21:45:57.058005 2026] [:error] [pid 44848:tid 44859] [client 4.230.24.44:10594] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aWEGlajajoTJAbEk87zZ6QAAAEk"]
[Fri Jan 09 21:45:57.453524 2026] [:error] [pid 14801:tid 14817] [client 4.230.24.44:4045] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWEGld8UWXrz_OQYgF1uhAAAAk4"]
[Fri Jan 09 21:45:57.804488 2026] [:error] [pid 44848:tid 44855] [client 4.230.24.44:10535] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWEGlajajoTJAbEk87zZ6gAAAEU"]
[Fri Jan 09 21:45:58.269956 2026] [:error] [pid 14831:tid 14844] [client 4.230.24.44:10557] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWEGlvaKOMCmJcAyBm1EsQAAAos"]
[Fri Jan 09 21:45:58.708745 2026] [:error] [pid 14739:tid 14761] [client 4.230.24.44:10556] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWEGll63M6_PkLt_IJJz2wAAAdQ"]
[Fri Jan 09 21:45:59.095415 2026] [:error] [pid 30019:tid 30039] [client 4.230.24.44:4053] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aWEGl0z3igHGwX5f7Ir1NAAAAA8"]
[Fri Jan 09 21:45:59.783983 2026] [:error] [pid 14739:tid 14754] [client 4.230.24.44:10558] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aWEGl163M6_PkLt_IJJz3QAAAc0"]
[Fri Jan 09 21:46:00.136294 2026] [:error] [pid 1366:tid 1390] [client 4.230.24.44:4011] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aWEGmBmasveKu8_ec1WB_AAAAZU"]
[Fri Jan 09 21:46:00.541970 2026] [:error] [pid 14831:tid 14838] [client 4.230.24.44:4051] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aWEGmPaKOMCmJcAyBm1EsgAAAoU"]
[Fri Jan 09 21:46:00.926296 2026] [:error] [pid 14831:tid 14845] [client 4.230.24.44:10533] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aWEGmPaKOMCmJcAyBm1EswAAAow"]
[Fri Jan 09 21:46:01.229059 2026] [:error] [pid 44848:tid 44851] [client 4.230.24.44:10534] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aWEGmajajoTJAbEk87zZ7QAAAEE"]
[Fri Jan 09 21:46:01.648207 2026] [:error] [pid 14872:tid 14893] [client 4.230.24.44:10507] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aWEGmaIUELhgYLNp1sZEqAAAAtM"]
[Fri Jan 09 21:46:02.072359 2026] [:error] [pid 30019:tid 30038] [client 4.230.24.44:3976] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aWEGmkz3igHGwX5f7Ir1NwAAAA4"]
[Fri Jan 09 21:46:02.357289 2026] [:error] [pid 30019:tid 30031] [client 4.230.24.44:10576] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWEGmkz3igHGwX5f7Ir1OQAAAAc"]
[Fri Jan 09 21:46:02.645093 2026] [:error] [pid 14831:tid 14849] [client 4.230.24.44:10617] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWEGmvaKOMCmJcAyBm1EtQAAApA"]
[Fri Jan 09 21:46:02.960848 2026] [:error] [pid 14831:tid 14839] [client 4.230.24.44:10616] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWEGmvaKOMCmJcAyBm1EtgAAAoY"]
[Fri Jan 09 21:46:03.353334 2026] [:error] [pid 14801:tid 14824] [client 4.230.24.44:10513] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWEGm98UWXrz_OQYgF1uiQAAAlU"]
[Fri Jan 09 21:46:03.643386 2026] [:error] [pid 30021:tid 30087] [client 4.230.24.44:4059] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aWEGmw_M8aRtsTog5J-tPAAAAMY"]
[Fri Jan 09 21:46:04.191925 2026] [:error] [pid 30019:tid 30030] [client 4.230.24.44:3977] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aWEGnEz3igHGwX5f7Ir1PwAAAAY"]
[Fri Jan 09 21:46:04.524880 2026] [:error] [pid 14739:tid 14743] [client 4.230.24.44:4032] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aWEGnF63M6_PkLt_IJJz3gAAAcI"]
[Fri Jan 09 21:46:04.990965 2026] [:error] [pid 30021:tid 30104] [client 4.230.24.44:4090] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aWEGnA_M8aRtsTog5J-tPQAAANc"]
[Fri Jan 09 21:46:05.807083 2026] [:error] [pid 14770:tid 14773] [client 4.230.24.44:10546] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aWEGnR5QbaVZ-6newJZHpwAAAgE"]
[Fri Jan 09 21:46:06.135750 2026] [:error] [pid 14770:tid 14793] [client 4.230.24.44:3971] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aWEGnh5QbaVZ-6newJZHqQAAAhU"]
[Fri Jan 09 21:46:06.609320 2026] [:error] [pid 30021:tid 30101] [client 4.230.24.44:4073] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aWEGng_M8aRtsTog5J-tQQAAANQ"]
[Fri Jan 09 21:46:11.236075 2026] [:error] [pid 30019:tid 30046] [client 4.230.24.44:3991] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWEGo0z3igHGwX5f7Ir1YAAAABY"]
[Fri Jan 09 21:46:11.969270 2026] [:error] [pid 14801:tid 14825] [client 4.230.24.44:3974] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWEGo98UWXrz_OQYgF1ukAAAAlY"]
[Fri Jan 09 21:46:12.477477 2026] [:error] [pid 14739:tid 14761] [client 4.230.24.44:4086] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWEGpF63M6_PkLt_IJJz5gAAAdQ"]
[Fri Jan 09 21:46:12.945181 2026] [:error] [pid 1366:tid 1389] [client 4.230.24.44:3969] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWEGpBmasveKu8_ec1WCBwAAAZQ"]
[Fri Jan 09 21:46:13.464884 2026] [:error] [pid 14872:tid 14878] [client 4.230.24.44:10562] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWEGpaIUELhgYLNp1sZEsAAAAsQ"]
[Fri Jan 09 21:46:14.051610 2026] [:error] [pid 14801:tid 14803] [client 4.230.24.44:4085] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWEGpt8UWXrz_OQYgF1ukQAAAkA"]
[Fri Jan 09 21:46:14.795010 2026] [:error] [pid 14770:tid 14794] [client 4.230.24.44:10543] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWEGph5QbaVZ-6newJZHtAAAAhY"]
[Fri Jan 09 21:46:15.701433 2026] [:error] [pid 30021:tid 30084] [client 4.230.24.44:10549] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aWEGpw_M8aRtsTog5J-tUAAAAMM"]
[Fri Jan 09 21:46:16.671152 2026] [:error] [pid 1366:tid 1393] [client 4.230.24.44:3916] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aWEGqBmasveKu8_ec1WCCwAAAZg"]
[Fri Jan 09 21:46:17.181326 2026] [:error] [pid 14770:tid 14795] [client 4.230.24.44:10555] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aWEGqR5QbaVZ-6newJZHtwAAAhc"]
[Fri Jan 09 21:46:17.942150 2026] [:error] [pid 30020:tid 30056] [client 4.230.24.44:4061] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aWEGqcrjc66qOisG6L3jogAAAII"]
[Fri Jan 09 21:46:18.469392 2026] [:error] [pid 14801:tid 14805] [client 4.230.24.44:4006] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aWEGqt8UWXrz_OQYgF1ulwAAAkI"]
[Fri Jan 09 21:46:21.864496 2026] [:error] [pid 14801:tid 14812] [client 4.230.24.44:3970] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aWEGrd8UWXrz_OQYgF1umQAAAkk"]
[Fri Jan 09 21:46:22.248027 2026] [:error] [pid 30019:tid 30033] [client 4.230.24.44:4036] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aWEGrkz3igHGwX5f7Ir1dgAAAAk"]
[Fri Jan 09 21:46:23.108012 2026] [:error] [pid 30021:tid 30103] [client 4.230.24.44:10547] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aWEGrw_M8aRtsTog5J-tVQAAANY"]
[Fri Jan 09 21:46:23.581674 2026] [:error] [pid 30019:tid 30043] [client 4.230.24.44:4038] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aWEGr0z3igHGwX5f7Ir1eAAAABM"]
[Fri Jan 09 21:46:24.384452 2026] [:error] [pid 1366:tid 1382] [client 4.230.24.44:10603] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aWEGsBmasveKu8_ec1WCGAAAAY0"]
[Fri Jan 09 21:46:25.141336 2026] [:error] [pid 14872:tid 14888] [client 4.230.24.44:4041] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aWEGsaIUELhgYLNp1sZEvgAAAs4"]
[Fri Jan 09 21:46:25.931647 2026] [:error] [pid 14801:tid 14824] [client 4.230.24.44:4055] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aWEGsd8UWXrz_OQYgF1ungAAAlU"]
[Fri Jan 09 21:46:26.586650 2026] [:error] [pid 30021:tid 30090] [client 4.230.24.44:10527] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aWEGsg_M8aRtsTog5J-tVwAAAMk"]
[Fri Jan 09 21:46:27.115424 2026] [:error] [pid 30021:tid 30082] [client 4.230.24.44:10544] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWEGsw_M8aRtsTog5J-tWAAAAME"]
[Fri Jan 09 21:46:28.045638 2026] [:error] [pid 14831:tid 14839] [client 4.230.24.44:10530] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWEGtPaKOMCmJcAyBm1E0AAAAoY"]
[Fri Jan 09 21:46:28.637534 2026] [:error] [pid 14801:tid 14815] [client 4.230.24.44:4019] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWEGtN8UWXrz_OQYgF1uoAAAAkw"]
[Fri Jan 09 21:46:29.182608 2026] [:error] [pid 30021:tid 30092] [client 4.230.24.44:4088] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWEGtQ_M8aRtsTog5J-tWwAAAMs"]
[Fri Jan 09 21:46:29.595303 2026] [:error] [pid 14739:tid 14741] [client 4.230.24.44:4087] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aWEGtV63M6_PkLt_IJJz9wAAAcA"]
[Fri Jan 09 21:46:29.877058 2026] [:error] [pid 14831:tid 14853] [client 4.230.24.44:10551] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aWEGtfaKOMCmJcAyBm1E1QAAApQ"]
[Fri Jan 09 21:46:30.398802 2026] [:error] [pid 14872:tid 14876] [client 4.230.24.44:3913] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aWEGtqIUELhgYLNp1sZExAAAAsI"]
[Fri Jan 09 21:46:31.140471 2026] [:error] [pid 44848:tid 44873] [client 4.230.24.44:10520] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aWEGt6jajoTJAbEk87zaAgAAAFc"]
[Fri Jan 09 21:46:32.065776 2026] [:error] [pid 30021:tid 30085] [client 4.230.24.44:10596] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aWEGuA_M8aRtsTog5J-tXgAAAMQ"]
[Fri Jan 09 21:46:32.847757 2026] [:error] [pid 14801:tid 14805] [client 4.230.24.44:4075] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aWEGuN8UWXrz_OQYgF1upAAAAkI"]
[Fri Jan 09 21:46:33.560979 2026] [:error] [pid 1366:tid 1377] [client 4.230.24.44:3938] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aWEGuRmasveKu8_ec1WCKQAAAYg"]
[Fri Jan 09 21:46:34.071692 2026] [:error] [pid 14739:tid 14760] [client 4.230.24.44:4064] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aWEGul63M6_PkLt_IJJz-QAAAdM"]
[Fri Jan 09 21:46:34.625934 2026] [:error] [pid 44848:tid 44856] [client 4.230.24.44:4081] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aWEGuqjajoTJAbEk87zaBwAAAEY"]
[Fri Jan 09 21:46:35.026468 2026] [:error] [pid 44848:tid 44850] [client 4.230.24.44:4063] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aWEGu6jajoTJAbEk87zaCQAAAEA"]
[Fri Jan 09 21:46:35.476557 2026] [:error] [pid 44848:tid 44852] [client 4.230.24.44:4018] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aWEGu6jajoTJAbEk87zaDAAAAEI"]
[Fri Jan 09 21:46:35.910838 2026] [:error] [pid 14831:tid 14833] [client 4.230.24.44:3978] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aWEGu_aKOMCmJcAyBm1E3gAAAoA"]
[Fri Jan 09 21:46:36.389321 2026] [:error] [pid 30020:tid 30064] [client 4.230.24.44:10623] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aWEGvMrjc66qOisG6L3jrQAAAIo"]
[Fri Jan 09 21:46:37.438359 2026] [:error] [pid 1366:tid 1385] [client 4.230.24.44:3997] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aWEGvRmasveKu8_ec1WCLwAAAZA"]
[Fri Jan 09 21:46:38.728528 2026] [:error] [pid 14872:tid 14891] [client 4.230.24.44:4068] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aWEGvqIUELhgYLNp1sZEyQAAAtE"]
[Fri Jan 09 21:46:40.096989 2026] [:error] [pid 14770:tid 14790] [client 4.230.24.44:4076] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aWEGwB5QbaVZ-6newJZH2AAAAhI"]
[Fri Jan 09 21:46:41.032830 2026] [:error] [pid 1366:tid 1379] [client 4.230.24.44:3993] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aWEGwRmasveKu8_ec1WCMwAAAYo"]
[Fri Jan 09 21:46:41.543597 2026] [:error] [pid 30020:tid 30070] [client 4.230.24.44:4012] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aWEGwcrjc66qOisG6L3jsgAAAJA"]
[Fri Jan 09 21:46:42.078027 2026] [:error] [pid 30021:tid 30092] [client 4.230.24.44:4000] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aWEGwg_M8aRtsTog5J-tZwAAAMs"]
[Fri Jan 09 21:46:42.572376 2026] [:error] [pid 14801:tid 14819] [client 4.230.24.44:3982] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aWEGwt8UWXrz_OQYgF1uqgAAAlA"]
[Fri Jan 09 21:46:43.302984 2026] [:error] [pid 30019:tid 30037] [client 4.230.24.44:3926] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWEGw0z3igHGwX5f7Ir1hQAAAA0"]
[Fri Jan 09 21:46:43.800398 2026] [:error] [pid 14739:tid 14756] [client 4.230.24.44:4021] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWEGw163M6_PkLt_IJJ0BAAAAc8"]
[Fri Jan 09 21:46:44.455842 2026] [:error] [pid 1366:tid 1383] [client 4.230.24.44:4094] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWEGxBmasveKu8_ec1WCNgAAAY4"]
[Fri Jan 09 21:46:44.880765 2026] [:error] [pid 14801:tid 14813] [client 4.230.24.44:4002] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWEGxN8UWXrz_OQYgF1urQAAAko"]
[Fri Jan 09 21:46:45.338958 2026] [:error] [pid 1366:tid 1374] [client 4.230.24.44:4028] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aWEGxRmasveKu8_ec1WCOwAAAYU"]
[Fri Jan 09 21:46:45.897398 2026] [:error] [pid 14739:tid 14764] [client 4.230.24.44:4077] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aWEGxV63M6_PkLt_IJJ0BQAAAdc"]
[Fri Jan 09 21:46:46.268415 2026] [:error] [pid 44848:tid 44869] [client 4.230.24.44:4079] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aWEGxqjajoTJAbEk87zaGwAAAFM"]
[Fri Jan 09 21:46:46.791358 2026] [:error] [pid 30020:tid 30075] [client 4.230.24.44:3968] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aWEGxsrjc66qOisG6L3jtgAAAJU"]
[Fri Jan 09 21:46:47.337960 2026] [:error] [pid 30019:tid 30039] [client 4.230.24.44:10552] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aWEGx0z3igHGwX5f7Ir1kwAAAA8"]
[Fri Jan 09 21:46:47.648459 2026] [:error] [pid 44848:tid 44865] [client 4.230.24.44:3911] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aWEGx6jajoTJAbEk87zaLwAAAE8"]
[Fri Jan 09 21:46:48.068166 2026] [:error] [pid 30019:tid 30037] [client 4.230.24.44:4080] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aWEGyEz3igHGwX5f7Ir1mAAAAA0"]
[Fri Jan 09 21:46:48.468440 2026] [:error] [pid 1366:tid 1378] [client 4.230.24.44:3996] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aWEGyBmasveKu8_ec1WCSQAAAYk"]
[Fri Jan 09 21:46:48.747634 2026] [:error] [pid 1366:tid 1376] [client 4.230.24.44:3910] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aWEGyBmasveKu8_ec1WCTAAAAYc"]
[Fri Jan 09 21:46:49.169956 2026] [:error] [pid 14739:tid 14751] [client 4.230.24.44:3980] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aWEGyV63M6_PkLt_IJJ0BgAAAco"]
[Fri Jan 09 21:46:50.040622 2026] [:error] [pid 14831:tid 14848] [client 4.230.24.44:3920] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aWEGyvaKOMCmJcAyBm1E7AAAAo8"]
[Fri Jan 09 21:46:50.504232 2026] [:error] [pid 30020:tid 30076] [client 4.230.24.44:3921] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aWEGysrjc66qOisG6L3juAAAAJY"]
[Fri Jan 09 21:46:50.847146 2026] [:error] [pid 30020:tid 30064] [client 4.230.24.44:4039] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWEGysrjc66qOisG6L3juQAAAIo"]
[Fri Jan 09 21:46:51.226446 2026] [:error] [pid 14872:tid 14885] [client 4.230.24.44:3906] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWEGy6IUELhgYLNp1sZE1gAAAss"]
[Fri Jan 09 21:46:51.514095 2026] [:error] [pid 30019:tid 30029] [client 4.230.24.44:4062] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWEGy0z3igHGwX5f7Ir1nwAAAAU"]
[Fri Jan 09 21:46:51.893017 2026] [:error] [pid 14770:tid 14777] [client 4.230.24.44:3849] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWEGyx5QbaVZ-6newJZH3QAAAgU"]
[Fri Jan 09 21:46:52.328234 2026] [:error] [pid 30020:tid 30060] [client 4.230.24.44:3850] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWEGzMrjc66qOisG6L3juwAAAIY"]
[Fri Jan 09 21:46:53.273628 2026] [:error] [pid 44848:tid 44874] [client 4.230.24.44:10528] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWEGzajajoTJAbEk87zaNAAAAFg"]
[Fri Jan 09 21:46:54.333328 2026] [:error] [pid 30021:tid 30081] [client 4.230.24.44:4025] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWEGzg_M8aRtsTog5J-tbgAAAMA"]
[Fri Jan 09 21:46:54.739829 2026] [:error] [pid 14801:tid 14814] [client 4.230.24.44:10605] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWEGzt8UWXrz_OQYgF1utwAAAks"]
[Fri Jan 09 21:46:55.213773 2026] [:error] [pid 14739:tid 14762] [client 4.230.24.44:3867] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aWEGz163M6_PkLt_IJJ0CwAAAdU"]
[Fri Jan 09 21:46:55.722117 2026] [:error] [pid 14770:tid 14783] [client 4.230.24.44:4066] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aWEGzx5QbaVZ-6newJZH3wAAAgs"]
[Fri Jan 09 21:46:56.183752 2026] [:error] [pid 14872:tid 14876] [client 4.230.24.44:3904] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aWEG0KIUELhgYLNp1sZE2AAAAsI"]
[Fri Jan 09 21:46:56.745239 2026] [:error] [pid 44848:tid 44865] [client 4.230.24.44:3988] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aWEG0KjajoTJAbEk87zaNwAAAE8"]
[Fri Jan 09 21:46:57.234147 2026] [:error] [pid 14831:tid 14850] [client 4.230.24.44:3937] [client 4.230.24.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aWEG0faKOMCmJcAyBm1E9AAAApE"]
[Fri Jan 09 21:46:58.140123 2026] [:error] [pid 14831:tid 14851] [client 4.230.24.44:4023] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aWEG0vaKOMCmJcAyBm1E9QAAApI"]
[Fri Jan 09 21:46:58.491057 2026] [:error] [pid 44848:tid 44862] [client 4.230.24.44:10541] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aWEG0qjajoTJAbEk87zaOQAAAEw"]
[Fri Jan 09 21:46:59.054485 2026] [:error] [pid 14801:tid 14809] [client 4.230.24.44:4013] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aWEG098UWXrz_OQYgF1uuwAAAkY"]
[Fri Jan 09 21:46:59.858594 2026] [:error] [pid 14801:tid 14811] [client 4.230.24.44:3922] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aWEG098UWXrz_OQYgF1uvAAAAkg"]
[Fri Jan 09 21:47:00.373538 2026] [:error] [pid 1366:tid 1383] [client 4.230.24.44:3928] [client 4.230.24.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aWEG1BmasveKu8_ec1WCUAAAAY4"]
[Fri Jan 09 21:47:00.831208 2026] [:error] [pid 14770:tid 14790] [client 4.230.24.44:10589] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWEG1B5QbaVZ-6newJZH4wAAAhI"]
[Fri Jan 09 21:47:01.125681 2026] [:error] [pid 14872:tid 14893] [client 4.230.24.44:3930] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWEG1aIUELhgYLNp1sZE3gAAAtM"]
[Fri Jan 09 21:47:01.467925 2026] [:error] [pid 14739:tid 14753] [client 4.230.24.44:10607] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWEG1V63M6_PkLt_IJJ0DwAAAcw"]
[Fri Jan 09 21:47:01.776073 2026] [:error] [pid 1366:tid 1382] [client 4.230.24.44:3979] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWEG1RmasveKu8_ec1WCUQAAAY0"]
[Fri Jan 09 21:47:02.212390 2026] [:error] [pid 30020:tid 30071] [client 4.230.24.44:4008] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWEG1srjc66qOisG6L3jwgAAAJE"]
[Fri Jan 09 21:47:02.482217 2026] [:error] [pid 30021:tid 30081] [client 4.230.24.44:3859] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWEG1g_M8aRtsTog5J-teQAAAMA"]
[Fri Jan 09 21:47:02.751422 2026] [:error] [pid 14872:tid 14889] [client 4.230.24.44:3949] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWEG1qIUELhgYLNp1sZE4QAAAs8"]
[Fri Jan 09 21:47:03.026953 2026] [:error] [pid 14872:tid 14891] [client 4.230.24.44:4049] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWEG16IUELhgYLNp1sZE4gAAAtE"]
[Fri Jan 09 21:47:03.353671 2026] [:error] [pid 44848:tid 44866] [client 4.230.24.44:3909] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWEG16jajoTJAbEk87zaQwAAAFA"]
[Fri Jan 09 21:47:03.745261 2026] [:error] [pid 14770:tid 14776] [client 4.230.24.44:4027] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWEG1x5QbaVZ-6newJZH6gAAAgQ"]
[Fri Jan 09 21:47:04.064750 2026] [:error] [pid 1366:tid 1392] [client 4.230.24.44:3995] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWEG2BmasveKu8_ec1WCVgAAAZc"]
[Fri Jan 09 21:47:04.488036 2026] [:error] [pid 1366:tid 1388] [client 4.230.24.44:4082] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWEG2BmasveKu8_ec1WCWAAAAZM"]
[Fri Jan 09 21:47:04.893989 2026] [:error] [pid 30021:tid 30097] [client 4.230.24.44:3999] [client 4.230.24.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aWEG2A_M8aRtsTog5J-tegAAANA"]
[Fri Jan 09 21:47:05.325783 2026] [:error] [pid 14770:tid 14788] [client 4.230.24.44:4052] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aWEG2R5QbaVZ-6newJZH7gAAAhA"]
[Fri Jan 09 21:47:05.750337 2026] [:error] [pid 14770:tid 14785] [client 4.230.24.44:4020] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aWEG2R5QbaVZ-6newJZH7wAAAg0"]
[Fri Jan 09 21:47:06.068322 2026] [:error] [pid 14831:tid 14848] [client 4.230.24.44:3905] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aWEG2vaKOMCmJcAyBm1E-QAAAo8"]
[Fri Jan 09 21:47:06.424758 2026] [:error] [pid 14739:tid 14755] [client 4.230.24.44:3972] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aWEG2l63M6_PkLt_IJJ0FQAAAc4"]
[Fri Jan 09 21:47:06.905441 2026] [:error] [pid 30020:tid 30068] [client 4.230.24.44:4029] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWEG2srjc66qOisG6L3jxQAAAI4"]
[Fri Jan 09 21:47:07.564629 2026] [:error] [pid 30019:tid 30031] [client 4.230.24.44:3987] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWEG20z3igHGwX5f7Ir1owAAAAc"]
[Fri Jan 09 21:47:08.073320 2026] [:error] [pid 14872:tid 14892] [client 4.230.24.44:3878] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWEG3KIUELhgYLNp1sZE5QAAAtI"]
[Fri Jan 09 21:47:08.473105 2026] [:error] [pid 14739:tid 14747] [client 4.230.24.44:4004] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWEG3F63M6_PkLt_IJJ0FwAAAcY"]
[Fri Jan 09 21:47:08.941396 2026] [:error] [pid 30020:tid 30060] [client 4.230.24.44:3925] [client 4.230.24.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aWEG3Mrjc66qOisG6L3jxgAAAIY"]
[Fri Jan 09 21:47:09.971596 2026] [:error] [pid 14872:tid 14894] [client 4.230.24.44:3908] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aWEG3aIUELhgYLNp1sZE6QAAAtQ"]
[Fri Jan 09 21:47:13.703542 2026] [proxy_fcgi:error] [pid 30020:tid 30067] [client 4.230.24.44:4024] AH01071: Got error 'Primary script unknown'
[Fri Jan 09 21:47:16.133299 2026] [:error] [pid 30020:tid 30073] [client 4.230.24.44:4024] [client 4.230.24.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aWEG5Mrjc66qOisG6L3j0wAAAJM"]
[Fri Jan 09 21:47:18.121067 2026] [:error] [pid 44848:tid 44862] [client 4.230.24.44:3935] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWEG5qjajoTJAbEk87zaXAAAAEw"]
[Fri Jan 09 21:47:18.551282 2026] [:error] [pid 14831:tid 14847] [client 4.230.24.44:3919] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWEG5vaKOMCmJcAyBm1FDAAAAo4"]
[Fri Jan 09 21:47:19.125626 2026] [:error] [pid 30019:tid 30037] [client 4.230.24.44:3981] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWEG50z3igHGwX5f7Ir1rAAAAA0"]
[Fri Jan 09 21:47:19.672482 2026] [:error] [pid 14770:tid 14786] [client 4.230.24.44:3989] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWEG5x5QbaVZ-6newJZH-gAAAg4"]
[Fri Jan 09 21:47:20.756128 2026] [:error] [pid 44848:tid 44851] [client 4.230.24.44:3782] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWEG6KjajoTJAbEk87zaXgAAAEE"]
[Fri Jan 09 21:47:22.200775 2026] [:error] [pid 30019:tid 30040] [client 4.230.24.44:3907] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWEG6kz3igHGwX5f7Ir1rwAAABA"]
[Fri Jan 09 21:47:23.403390 2026] [:error] [pid 14831:tid 14853] [client 4.230.24.44:3955] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWEG6_aKOMCmJcAyBm1FEwAAApQ"]
[Fri Jan 09 21:47:24.892754 2026] [:error] [pid 14770:tid 14781] [client 4.230.24.44:4092] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWEG7B5QbaVZ-6newJZIAgAAAgk"]
[Fri Jan 09 21:47:26.032220 2026] [:error] [pid 44848:tid 44867] [client 4.230.24.44:3934] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWEG7qjajoTJAbEk87zaYQAAAFE"]
[Fri Jan 09 21:47:26.904813 2026] [:error] [pid 30020:tid 30066] [client 4.230.24.44:10503] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWEG7srjc66qOisG6L3j1gAAAIw"]
[Fri Jan 09 21:47:28.472410 2026] [:error] [pid 1366:tid 1381] [client 4.230.24.44:3953] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWEG8BmasveKu8_ec1WCawAAAYw"]
[Fri Jan 09 21:47:29.691631 2026] [:error] [pid 30021:tid 30099] [client 4.230.24.44:3863] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWEG8Q_M8aRtsTog5J-tlQAAANI"]
[Fri Jan 09 21:47:30.643758 2026] [:error] [pid 14770:tid 14779] [client 4.230.24.44:3962] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWEG8h5QbaVZ-6newJZICAAAAgc"]
[Fri Jan 09 21:47:31.554419 2026] [:error] [pid 30019:tid 30048] [client 4.230.24.44:3956] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWEG80z3igHGwX5f7Ir1sgAAABg"]
[Fri Jan 09 21:47:32.194534 2026] [:error] [pid 30020:tid 30071] [client 4.230.24.44:3917] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWEG9Mrjc66qOisG6L3j3wAAAJE"]
[Fri Jan 09 21:47:32.804450 2026] [:error] [pid 14739:tid 14756] [client 4.230.24.44:3848] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWEG9F63M6_PkLt_IJJ0LgAAAc8"]
[Fri Jan 09 21:47:33.126338 2026] [:error] [pid 14739:tid 14746] [client 4.230.24.44:4050] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aWEG9V63M6_PkLt_IJJ0MAAAAcU"]
[Fri Jan 09 21:47:34.104643 2026] [:error] [pid 44848:tid 44857] [client 4.230.24.44:3985] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aWEG9qjajoTJAbEk87zaagAAAEc"]
[Fri Jan 09 21:47:34.946648 2026] [:error] [pid 14739:tid 14765] [client 4.230.24.44:10600] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aWEG9l63M6_PkLt_IJJ0MwAAAdg"]
[Fri Jan 09 21:47:36.037511 2026] [:error] [pid 14801:tid 14807] [client 4.230.24.44:4014] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aWEG-N8UWXrz_OQYgF1u3QAAAkQ"]
[Fri Jan 09 21:47:36.569023 2026] [:error] [pid 14801:tid 14815] [client 4.230.24.44:4084] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aWEG-N8UWXrz_OQYgF1u3gAAAkw"]
[Fri Jan 09 21:47:37.403212 2026] [:error] [pid 30020:tid 30055] [client 4.230.24.44:3860] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aWEG-crjc66qOisG6L3j4wAAAIE"]
[Fri Jan 09 21:47:38.586412 2026] [:error] [pid 30019:tid 30024] [client 4.230.24.44:10621] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aWEG-kz3igHGwX5f7Ir1tgAAAAA"]
[Fri Jan 09 21:47:39.538435 2026] [:error] [pid 30020:tid 30078] [client 4.230.24.44:4034] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aWEG-8rjc66qOisG6L3j5wAAAJg"]
[Fri Jan 09 21:47:40.369197 2026] [:error] [pid 30019:tid 30032] [client 4.230.24.44:3963] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aWEG_Ez3igHGwX5f7Ir1uAAAAAg"]
[Fri Jan 09 21:47:40.710654 2026] [:error] [pid 1366:tid 1373] [client 4.230.24.44:3957] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aWEG_BmasveKu8_ec1WCdgAAAYQ"]
[Fri Jan 09 21:47:41.432357 2026] [:error] [pid 14801:tid 14809] [client 4.230.24.44:3866] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aWEG_d8UWXrz_OQYgF1u4QAAAkY"]
[Fri Jan 09 21:47:42.250712 2026] [:error] [pid 30021:tid 30089] [client 4.230.24.44:4003] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aWEG_g_M8aRtsTog5J-tngAAAMg"]
[Fri Jan 09 21:47:42.870446 2026] [:error] [pid 1366:tid 1388] [client 4.230.24.44:10584] [client 4.230.24.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWEG_hmasveKu8_ec1WCewAAAZM"]
[Fri Jan 09 21:47:43.190136 2026] [:error] [pid 30019:tid 30025] [client 4.230.24.44:10614] [client 4.230.24.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aWEG_0z3igHGwX5f7Ir1uwAAAAE"]
[Fri Jan 09 21:47:43.671091 2026] [:error] [pid 30019:tid 30044] [client 4.230.24.44:4009] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aWEG_0z3igHGwX5f7Ir1vQAAABQ"]
[Fri Jan 09 21:47:44.728415 2026] [:error] [pid 44848:tid 44864] [client 4.230.24.44:4031] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aWEHAKjajoTJAbEk87zaegAAAE4"]
[Fri Jan 09 21:47:45.211306 2026] [:error] [pid 1366:tid 1380] [client 4.230.24.44:4015] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aWEHARmasveKu8_ec1WCfAAAAYs"]
[Fri Jan 09 21:47:46.138853 2026] [:error] [pid 44848:tid 44868] [client 4.230.24.44:4001] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aWEHAqjajoTJAbEk87zaewAAAFI"]
[Fri Jan 09 21:47:46.781950 2026] [:error] [pid 14801:tid 14823] [client 4.230.24.44:3878] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aWEHAt8UWXrz_OQYgF1u6AAAAlQ"]
[Fri Jan 09 21:47:47.093142 2026] [:error] [pid 44848:tid 44873] [client 4.230.24.44:3912] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aWEHA6jajoTJAbEk87zafQAAAFc"]
[Fri Jan 09 21:47:47.582987 2026] [:error] [pid 30021:tid 30086] [client 4.230.24.44:3792] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aWEHAw_M8aRtsTog5J-tpQAAAMU"]
[Fri Jan 09 21:47:48.661064 2026] [:error] [pid 30019:tid 30041] [client 4.230.24.44:3975] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aWEHBEz3igHGwX5f7Ir1wwAAABE"]
[Fri Jan 09 21:47:49.009776 2026] [:error] [pid 14770:tid 14794] [client 4.230.24.44:4022] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWEHBR5QbaVZ-6newJZIEAAAAhY"]
[Fri Jan 09 21:47:49.475319 2026] [:error] [pid 14801:tid 14807] [client 4.230.24.44:4071] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWEHBd8UWXrz_OQYgF1u6QAAAkQ"]
[Fri Jan 09 21:47:50.295194 2026] [:error] [pid 14739:tid 14759] [client 4.230.24.44:3858] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWEHBl63M6_PkLt_IJJ0PgAAAdI"]
[Fri Jan 09 21:47:50.863834 2026] [:error] [pid 44848:tid 44861] [client 4.230.24.44:3939] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWEHBqjajoTJAbEk87zaggAAAEs"]
[Fri Jan 09 21:47:51.348498 2026] [:error] [pid 44848:tid 44862] [client 4.230.24.44:3986] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aWEHB6jajoTJAbEk87zagwAAAEw"]
[Fri Jan 09 21:47:52.295137 2026] [:error] [pid 14801:tid 14817] [client 4.230.24.44:10574] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aWEHCN8UWXrz_OQYgF1u7QAAAk4"]
[Fri Jan 09 21:47:52.740776 2026] [:error] [pid 1366:tid 1379] [client 4.230.24.44:3984] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aWEHCBmasveKu8_ec1WCgQAAAYo"]
[Fri Jan 09 21:47:53.400484 2026] [:error] [pid 44848:tid 44865] [client 4.230.24.44:3950] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aWEHCajajoTJAbEk87zahQAAAE8"]
[Fri Jan 09 21:47:53.770834 2026] [:error] [pid 30020:tid 30062] [client 4.230.24.44:4095] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aWEHCcrjc66qOisG6L3j8QAAAIg"]
[Fri Jan 09 21:47:54.369686 2026] [:error] [pid 14739:tid 14741] [client 4.230.24.44:3854] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aWEHCl63M6_PkLt_IJJ0QwAAAcA"]
[Fri Jan 09 21:47:54.751352 2026] [:error] [pid 1366:tid 1374] [client 4.230.24.44:3843] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aWEHChmasveKu8_ec1WCigAAAYU"]
[Fri Jan 09 21:47:55.871111 2026] [:error] [pid 1366:tid 1393] [client 4.230.24.44:3966] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aWEHCxmasveKu8_ec1WCnQAAAZg"]
[Fri Jan 09 21:47:56.583018 2026] [:error] [pid 14831:tid 14833] [client 4.230.24.44:3954] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aWEHDPaKOMCmJcAyBm1FKwAAAoA"]
[Fri Jan 09 21:47:57.139858 2026] [:error] [pid 44848:tid 44860] [client 4.230.24.44:10560] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aWEHDajajoTJAbEk87zakAAAAEo"]
[Fri Jan 09 21:47:57.798361 2026] [:error] [pid 30021:tid 30081] [client 4.230.24.44:3868] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aWEHDQ_M8aRtsTog5J-tugAAAMA"]
[Fri Jan 09 21:47:58.081454 2026] [:error] [pid 14739:tid 14746] [client 4.230.24.44:3845] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aWEHDl63M6_PkLt_IJJ0RQAAAcU"]
[Fri Jan 09 21:47:58.486468 2026] [:error] [pid 14770:tid 14787] [client 4.230.24.44:4016] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aWEHDh5QbaVZ-6newJZIFwAAAg8"]
[Fri Jan 09 21:47:58.992815 2026] [:error] [pid 30020:tid 30077] [client 4.230.24.44:3965] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aWEHDsrjc66qOisG6L3j8gAAAJc"]
[Fri Jan 09 21:47:59.525924 2026] [:error] [pid 14770:tid 14789] [client 4.230.24.44:3778] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aWEHDx5QbaVZ-6newJZIGQAAAhE"]
[Fri Jan 09 21:48:00.004410 2026] [:error] [pid 30020:tid 30074] [client 4.230.24.44:3945] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aWEHEMrjc66qOisG6L3j8wAAAJQ"]
[Fri Jan 09 21:48:00.833384 2026] [:error] [pid 14872:tid 14891] [client 4.230.24.44:3948] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aWEHEKIUELhgYLNp1sZE_QAAAtE"]
[Fri Jan 09 21:48:01.381947 2026] [:error] [pid 14831:tid 14840] [client 4.230.24.44:4069] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aWEHEfaKOMCmJcAyBm1FLwAAAoc"]
[Fri Jan 09 21:48:01.751704 2026] [:error] [pid 14872:tid 14884] [client 4.230.24.44:3834] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aWEHEaIUELhgYLNp1sZFAAAAAso"]
[Fri Jan 09 21:48:02.069939 2026] [:error] [pid 14739:tid 14763] [client 4.230.24.44:3895] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aWEHEl63M6_PkLt_IJJ0RwAAAdY"]
[Fri Jan 09 21:48:02.443140 2026] [:error] [pid 14770:tid 14795] [client 4.230.24.44:3799] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aWEHEh5QbaVZ-6newJZIHQAAAhc"]
[Fri Jan 09 21:48:02.882177 2026] [:error] [pid 30019:tid 30038] [client 4.230.24.44:3874] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aWEHEkz3igHGwX5f7Ir1zwAAAA4"]
[Fri Jan 09 21:48:03.576630 2026] [:error] [pid 30021:tid 30087] [client 4.230.24.44:3784] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aWEHEw_M8aRtsTog5J-twwAAAMY"]
[Fri Jan 09 21:48:04.133079 2026] [:error] [pid 14872:tid 14898] [client 4.230.24.44:3944] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aWEHFKIUELhgYLNp1sZFAgAAAtg"]
[Fri Jan 09 21:48:04.522207 2026] [:error] [pid 30021:tid 30105] [client 4.230.24.44:3933] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aWEHFA_M8aRtsTog5J-txAAAANg"]
[Fri Jan 09 21:48:04.810009 2026] [:error] [pid 14872:tid 14878] [client 4.230.24.44:4030] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aWEHFKIUELhgYLNp1sZFBAAAAsQ"]
[Fri Jan 09 21:48:05.213088 2026] [:error] [pid 30020:tid 30060] [client 4.230.24.44:4070] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aWEHFcrjc66qOisG6L3j-AAAAIY"]
[Fri Jan 09 21:48:05.586756 2026] [:error] [pid 30019:tid 30026] [client 4.230.24.44:3931] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aWEHFUz3igHGwX5f7Ir10gAAAAI"]
[Fri Jan 09 21:48:06.318024 2026] [:error] [pid 30021:tid 30093] [client 4.230.24.44:4010] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aWEHFg_M8aRtsTog5J-txwAAAMw"]
[Fri Jan 09 21:48:06.913889 2026] [:error] [pid 44848:tid 44857] [client 4.230.24.44:3883] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aWEHFqjajoTJAbEk87zanAAAAEc"]
[Fri Jan 09 21:48:07.316632 2026] [:error] [pid 14831:tid 14845] [client 4.230.24.44:3927] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aWEHF_aKOMCmJcAyBm1FNQAAAow"]
[Fri Jan 09 21:48:07.709142 2026] [:error] [pid 14831:tid 14834] [client 4.230.24.44:3871] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aWEHF_aKOMCmJcAyBm1FNgAAAoE"]
[Fri Jan 09 21:48:08.325719 2026] [:error] [pid 14872:tid 14875] [client 4.230.24.44:4091] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aWEHGKIUELhgYLNp1sZFBgAAAsE"]
[Fri Jan 09 21:48:08.639947 2026] [:error] [pid 1366:tid 1386] [client 4.230.24.44:10571] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aWEHGBmasveKu8_ec1WCyQAAAZE"]
[Fri Jan 09 21:48:08.964570 2026] [:error] [pid 14739:tid 14756] [client 4.230.24.44:3952] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aWEHGF63M6_PkLt_IJJ0TwAAAc8"]
[Fri Jan 09 21:48:09.334767 2026] [:error] [pid 1366:tid 1376] [client 4.230.24.44:3876] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aWEHGRmasveKu8_ec1WCygAAAYc"]
[Fri Jan 09 21:48:09.758042 2026] [:error] [pid 14872:tid 14894] [client 4.230.24.44:3998] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aWEHGaIUELhgYLNp1sZFCAAAAtQ"]
[Fri Jan 09 21:48:10.386735 2026] [:error] [pid 14831:tid 14848] [client 4.230.24.44:10567] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aWEHGvaKOMCmJcAyBm1FOAAAAo8"]
[Fri Jan 09 21:48:10.800215 2026] [:error] [pid 30021:tid 30088] [client 4.230.24.44:3940] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aWEHGg_M8aRtsTog5J-tyQAAAMc"]
[Fri Jan 09 21:48:11.466203 2026] [:error] [pid 14770:tid 14783] [client 4.230.24.44:3958] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aWEHGx5QbaVZ-6newJZIIwAAAgs"]
[Fri Jan 09 21:48:11.904940 2026] [:error] [pid 44848:tid 44850] [client 4.230.24.44:3990] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aWEHG6jajoTJAbEk87zanwAAAEA"]
[Fri Jan 09 21:48:12.482982 2026] [:error] [pid 44848:tid 44862] [client 4.230.24.44:3892] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aWEHHKjajoTJAbEk87zaoQAAAEw"]
[Fri Jan 09 21:48:13.095702 2026] [:error] [pid 14770:tid 14789] [client 4.230.24.44:3964] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aWEHHR5QbaVZ-6newJZIJQAAAhE"]
[Fri Jan 09 21:48:13.410107 2026] [:error] [pid 14831:tid 14852] [client 4.230.24.44:3816] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aWEHHfaKOMCmJcAyBm1FOgAAApM"]
[Fri Jan 09 21:48:13.978635 2026] [:error] [pid 14831:tid 14844] [client 4.230.24.44:3803] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aWEHHfaKOMCmJcAyBm1FOwAAAos"]
[Fri Jan 09 21:48:14.564256 2026] [:error] [pid 14770:tid 14791] [client 4.230.24.44:10496] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aWEHHh5QbaVZ-6newJZIJwAAAhM"]
[Fri Jan 09 21:48:14.967061 2026] [:error] [pid 44848:tid 44868] [client 4.230.24.44:4046] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aWEHHqjajoTJAbEk87zapwAAAFI"]
[Fri Jan 09 21:48:15.685402 2026] [:error] [pid 14801:tid 14809] [client 4.230.24.44:3823] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aWEHH98UWXrz_OQYgF1u_gAAAkY"]
[Fri Jan 09 21:48:16.434759 2026] [:error] [pid 1366:tid 1374] [client 4.230.24.44:3853] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aWEHIBmasveKu8_ec1WC1gAAAYU"]
[Fri Jan 09 21:48:24.429388 2026] [:error] [pid 44848:tid 44872] [client 4.230.24.44:3713] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aWEHKKjajoTJAbEk87zavQAAAFY"]
[Fri Jan 09 21:48:24.949473 2026] [:error] [pid 14770:tid 14783] [client 4.230.24.44:3936] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aWEHKB5QbaVZ-6newJZIPQAAAgs"]
[Fri Jan 09 21:48:25.595867 2026] [:error] [pid 30021:tid 30103] [client 4.230.24.44:3875] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aWEHKQ_M8aRtsTog5J-t1QAAANY"]
[Fri Jan 09 21:48:25.913082 2026] [:error] [pid 30019:tid 30038] [client 4.230.24.44:3947] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aWEHKUz3igHGwX5f7Ir14gAAAA4"]
[Fri Jan 09 21:48:26.369939 2026] [:error] [pid 30020:tid 30066] [client 4.230.24.44:3960] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aWEHKsrjc66qOisG6L3j_wAAAIw"]
[Fri Jan 09 21:48:26.823853 2026] [:error] [pid 30020:tid 30069] [client 4.230.24.44:3844] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aWEHKsrjc66qOisG6L3kAgAAAI8"]
[Fri Jan 09 21:48:27.316782 2026] [:error] [pid 30019:tid 30027] [client 4.230.24.44:3888] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aWEHK0z3igHGwX5f7Ir14wAAAAM"]
[Fri Jan 09 21:48:27.853138 2026] [:error] [pid 30019:tid 30026] [client 4.230.24.44:3951] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aWEHK0z3igHGwX5f7Ir15gAAAAI"]
[Fri Jan 09 21:48:28.220664 2026] [:error] [pid 14831:tid 14849] [client 4.230.24.44:3841] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aWEHLPaKOMCmJcAyBm1FPwAAApA"]
[Fri Jan 09 21:48:29.013377 2026] [:error] [pid 44848:tid 44868] [client 4.230.24.44:3946] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aWEHLajajoTJAbEk87zawAAAAFI"]
[Fri Jan 09 21:48:29.359968 2026] [:error] [pid 44848:tid 44871] [client 4.230.24.44:3862] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aWEHLajajoTJAbEk87zawQAAAFU"]
[Fri Jan 09 21:48:29.692915 2026] [:error] [pid 30021:tid 30100] [client 4.230.24.44:3776] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aWEHLQ_M8aRtsTog5J-t3AAAANM"]
[Fri Jan 09 21:48:30.131295 2026] [:error] [pid 30020:tid 30072] [client 4.230.24.44:3881] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aWEHLsrjc66qOisG6L3kAwAAAJI"]
[Fri Jan 09 21:48:30.590189 2026] [:error] [pid 14801:tid 14824] [client 4.230.24.44:3918] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aWEHLt8UWXrz_OQYgF1vBgAAAlU"]
[Fri Jan 09 21:48:31.092252 2026] [:error] [pid 30019:tid 30031] [client 4.230.24.44:3847] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aWEHL0z3igHGwX5f7Ir16wAAAAc"]
[Fri Jan 09 21:48:31.418559 2026] [:error] [pid 30020:tid 30065] [client 4.230.24.44:3887] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aWEHL8rjc66qOisG6L3kBgAAAIs"]
[Fri Jan 09 21:48:31.852778 2026] [:error] [pid 14739:tid 14764] [client 4.230.24.44:4005] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aWEHL163M6_PkLt_IJJ0WwAAAdc"]
[Fri Jan 09 21:48:32.276255 2026] [:error] [pid 1366:tid 1382] [client 4.230.24.44:3942] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aWEHMBmasveKu8_ec1WC5gAAAY0"]
[Fri Jan 09 21:48:32.565152 2026] [:error] [pid 30019:tid 30025] [client 4.230.24.44:3891] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aWEHMEz3igHGwX5f7Ir17QAAAAE"]
[Fri Jan 09 21:48:32.939268 2026] [:error] [pid 14801:tid 14809] [client 4.230.24.44:3900] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aWEHMN8UWXrz_OQYgF1vCwAAAkY"]
[Fri Jan 09 21:48:33.411433 2026] [:error] [pid 14831:tid 14835] [client 4.230.24.44:3893] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWEHMfaKOMCmJcAyBm1FRwAAAoI"]
[Fri Jan 09 21:48:33.843708 2026] [:error] [pid 14770:tid 14793] [client 4.230.24.44:3777] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWEHMR5QbaVZ-6newJZIQgAAAhU"]
[Fri Jan 09 21:48:34.379062 2026] [:error] [pid 30020:tid 30078] [client 4.230.24.44:3819] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWEHMsrjc66qOisG6L3kCQAAAJg"]
[Fri Jan 09 21:48:35.039072 2026] [:error] [pid 14770:tid 14777] [client 4.230.24.44:3869] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWEHMx5QbaVZ-6newJZIQwAAAgU"]
[Fri Jan 09 21:48:35.373086 2026] [:error] [pid 14872:tid 14878] [client 4.230.24.44:4017] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aWEHM6IUELhgYLNp1sZFFwAAAsQ"]
[Fri Jan 09 21:48:35.771436 2026] [:error] [pid 14770:tid 14782] [client 4.230.24.44:3880] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aWEHMx5QbaVZ-6newJZIRAAAAgo"]
[Fri Jan 09 21:48:36.245157 2026] [:error] [pid 1366:tid 1387] [client 4.230.24.44:3787] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aWEHNBmasveKu8_ec1WC6AAAAZI"]
[Fri Jan 09 21:48:36.820910 2026] [:error] [pid 14831:tid 14840] [client 4.230.24.44:3842] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aWEHNPaKOMCmJcAyBm1FTwAAAoc"]
[Fri Jan 09 21:48:37.268381 2026] [:error] [pid 14831:tid 14857] [client 4.230.24.44:3786] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aWEHNfaKOMCmJcAyBm1FUAAAApg"]
[Fri Jan 09 21:48:37.590707 2026] [:error] [pid 14801:tid 14825] [client 4.230.24.44:3929] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aWEHNd8UWXrz_OQYgF1vDgAAAlY"]
[Fri Jan 09 21:48:38.045836 2026] [:error] [pid 14770:tid 14787] [client 4.230.24.44:3914] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aWEHNh5QbaVZ-6newJZISQAAAg8"]
[Fri Jan 09 21:48:38.430263 2026] [:error] [pid 30020:tid 30074] [client 4.230.24.44:3826] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aWEHNsrjc66qOisG6L3kCwAAAJQ"]
[Fri Jan 09 21:48:39.192354 2026] [:error] [pid 30021:tid 30097] [client 4.230.24.44:3857] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aWEHNw_M8aRtsTog5J-t4AAAANA"]
[Fri Jan 09 21:48:39.607080 2026] [:error] [pid 14872:tid 14886] [client 4.230.24.44:3983] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aWEHN6IUELhgYLNp1sZFGgAAAsw"]
[Fri Jan 09 21:48:40.252016 2026] [:error] [pid 14831:tid 14841] [client 4.230.24.44:3877] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aWEHOPaKOMCmJcAyBm1FUgAAAog"]
[Fri Jan 09 21:48:40.916232 2026] [:error] [pid 14739:tid 14750] [client 4.230.24.44:3835] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aWEHOF63M6_PkLt_IJJ0YAAAAck"]
[Fri Jan 09 21:48:41.806532 2026] [:error] [pid 14770:tid 14790] [client 4.230.24.44:3924] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aWEHOR5QbaVZ-6newJZISwAAAhI"]
[Fri Jan 09 21:48:42.570713 2026] [:error] [pid 44848:tid 44862] [client 4.230.24.44:3865] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aWEHOqjajoTJAbEk87za0gAAAEw"]
[Fri Jan 09 21:48:43.126658 2026] [:error] [pid 1366:tid 1373] [client 4.230.24.44:3932] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aWEHOxmasveKu8_ec1WC7wAAAYQ"]
[Fri Jan 09 21:48:43.817451 2026] [:error] [pid 14739:tid 14743] [client 4.230.24.44:3793] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aWEHO163M6_PkLt_IJJ0YwAAAcI"]
[Fri Jan 09 21:48:44.928107 2026] [:error] [pid 14801:tid 14809] [client 4.230.24.44:3861] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aWEHPN8UWXrz_OQYgF1vEwAAAkY"]
[Fri Jan 09 21:48:45.575294 2026] [:error] [pid 14801:tid 14817] [client 4.230.24.44:10531] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aWEHPd8UWXrz_OQYgF1vFAAAAk4"]
[Fri Jan 09 21:48:46.705704 2026] [:error] [pid 14801:tid 14812] [client 4.230.24.44:10497] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aWEHPt8UWXrz_OQYgF1vFgAAAkk"]
[Fri Jan 09 21:48:47.151608 2026] [:error] [pid 14801:tid 14808] [client 4.230.24.44:3790] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aWEHP98UWXrz_OQYgF1vGAAAAkU"]
[Fri Jan 09 21:48:47.505547 2026] [:error] [pid 14739:tid 14752] [client 4.230.24.44:3795] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aWEHP163M6_PkLt_IJJ0aAAAAcs"]
[Fri Jan 09 21:48:47.900773 2026] [:error] [pid 14872:tid 14882] [client 4.230.24.44:3915] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aWEHP6IUELhgYLNp1sZFHgAAAsg"]
[Fri Jan 09 21:48:48.516415 2026] [:error] [pid 14801:tid 14827] [client 4.230.24.44:3814] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aWEHQN8UWXrz_OQYgF1vGwAAAlg"]
[Fri Jan 09 21:48:49.202596 2026] [:error] [pid 14801:tid 14820] [client 4.230.24.44:3943] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aWEHQd8UWXrz_OQYgF1vHAAAAlE"]
[Fri Jan 09 21:48:50.395164 2026] [:error] [pid 30021:tid 30093] [client 4.230.24.44:3872] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aWEHQg_M8aRtsTog5J-t6QAAAMw"]
[Fri Jan 09 21:48:50.877085 2026] [:error] [pid 14739:tid 14758] [client 4.230.24.44:3898] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aWEHQl63M6_PkLt_IJJ0bAAAAdE"]
[Fri Jan 09 21:48:51.333158 2026] [:error] [pid 30020:tid 30068] [client 4.230.24.44:3761] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aWEHQ8rjc66qOisG6L3kFQAAAI4"]
[Fri Jan 09 21:48:52.170692 2026] [:error] [pid 30021:tid 30097] [client 4.230.24.44:3856] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aWEHRA_M8aRtsTog5J-t6gAAANA"]
[Fri Jan 09 21:48:53.180830 2026] [:error] [pid 14872:tid 14876] [client 4.230.24.44:3873] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aWEHRaIUELhgYLNp1sZFJQAAAsI"]
[Fri Jan 09 21:48:53.785145 2026] [:error] [pid 1366:tid 1377] [client 4.230.24.44:4026] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aWEHRRmasveKu8_ec1WC9gAAAYg"]
[Fri Jan 09 21:48:54.196031 2026] [:error] [pid 14801:tid 14818] [client 4.230.24.44:3791] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aWEHRt8UWXrz_OQYgF1vIAAAAk8"]
[Fri Jan 09 21:48:54.567874 2026] [:error] [pid 1366:tid 1392] [client 4.230.24.44:3821] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aWEHRhmasveKu8_ec1WC9wAAAZc"]
[Fri Jan 09 21:48:54.926300 2026] [:error] [pid 14739:tid 14747] [client 4.230.24.44:3923] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aWEHRl63M6_PkLt_IJJ0bwAAAcY"]
[Fri Jan 09 21:48:55.401977 2026] [:error] [pid 30019:tid 30036] [client 4.230.24.44:3879] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aWEHR0z3igHGwX5f7Ir2DQAAAAw"]
[Fri Jan 09 21:48:55.904418 2026] [:error] [pid 1366:tid 1381] [client 4.230.24.44:3788] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aWEHRxmasveKu8_ec1WC-gAAAYw"]
[Fri Jan 09 21:48:56.355563 2026] [:error] [pid 44848:tid 44874] [client 4.230.24.44:3882] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aWEHSKjajoTJAbEk87za2AAAAFg"]
[Fri Jan 09 21:48:56.769208 2026] [:error] [pid 30019:tid 30048] [client 4.230.24.44:4078] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aWEHSEz3igHGwX5f7Ir2EAAAABg"]
[Fri Jan 09 21:48:57.132102 2026] [:error] [pid 1366:tid 1379] [client 4.230.24.44:3801] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aWEHSRmasveKu8_ec1WC_gAAAYo"]
[Fri Jan 09 21:48:57.418994 2026] [:error] [pid 1366:tid 1390] [client 4.230.24.44:3750] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aWEHSRmasveKu8_ec1WDAAAAAZU"]
[Fri Jan 09 21:48:57.831727 2026] [:error] [pid 1366:tid 1371] [client 4.230.24.44:3798] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aWEHSRmasveKu8_ec1WDAQAAAYM"]
[Fri Jan 09 21:48:58.256246 2026] [:error] [pid 44848:tid 44850] [client 4.230.24.44:3726] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aWEHSqjajoTJAbEk87za3AAAAEA"]
[Fri Jan 09 21:48:59.065970 2026] [:error] [pid 1366:tid 1378] [client 4.230.24.44:3806] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aWEHSxmasveKu8_ec1WDBAAAAYk"]
[Fri Jan 09 21:48:59.936444 2026] [:error] [pid 30021:tid 30091] [client 4.230.24.44:3973] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aWEHSw_M8aRtsTog5J-t8wAAAMo"]
[Fri Jan 09 21:49:00.290365 2026] [:error] [pid 14770:tid 14772] [client 4.230.24.44:3851] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aWEHTB5QbaVZ-6newJZIUwAAAgA"]
[Fri Jan 09 21:49:01.788922 2026] [:error] [pid 14801:tid 14813] [client 4.230.24.44:3864] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aWEHTd8UWXrz_OQYgF1vJwAAAko"]
[Fri Jan 09 21:49:02.744074 2026] [:error] [pid 30019:tid 30031] [client 4.230.24.44:3813] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aWEHTkz3igHGwX5f7Ir2FwAAAAc"]
[Fri Jan 09 21:49:03.509593 2026] [:error] [pid 14801:tid 14816] [client 4.230.24.44:3732] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aWEHT98UWXrz_OQYgF1vKQAAAk0"]
[Fri Jan 09 21:49:04.451675 2026] [:error] [pid 44848:tid 44857] [client 4.230.24.44:3852] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aWEHUKjajoTJAbEk87za4gAAAEc"]
[Fri Jan 09 21:49:05.384966 2026] [:error] [pid 14770:tid 14790] [client 4.230.24.44:3992] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aWEHUR5QbaVZ-6newJZIVQAAAhI"]
[Fri Jan 09 21:49:06.712277 2026] [:error] [pid 1366:tid 1373] [client 4.230.24.44:3836] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aWEHUhmasveKu8_ec1WDDwAAAYQ"]
[Fri Jan 09 21:49:07.320200 2026] [:error] [pid 14739:tid 14751] [client 4.230.24.44:3736] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aWEHU163M6_PkLt_IJJ0cwAAAco"]
[Fri Jan 09 21:49:07.859612 2026] [:error] [pid 14831:tid 14849] [client 4.230.24.44:3941] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aWEHU_aKOMCmJcAyBm1FYAAAApA"]
[Fri Jan 09 21:49:08.417743 2026] [:error] [pid 14831:tid 14838] [client 4.230.24.44:3805] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aWEHVPaKOMCmJcAyBm1FYQAAAoU"]
[Fri Jan 09 21:49:09.012706 2026] [:error] [pid 14872:tid 14890] [client 4.230.24.44:3733] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aWEHVaIUELhgYLNp1sZFLgAAAtA"]
[Fri Jan 09 21:49:09.488234 2026] [:error] [pid 30019:tid 30031] [client 4.230.24.44:4074] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aWEHVUz3igHGwX5f7Ir2JAAAAAc"]
[Fri Jan 09 21:49:10.238134 2026] [:error] [pid 14831:tid 14852] [client 4.230.24.44:3903] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aWEHVvaKOMCmJcAyBm1FZQAAApM"]
[Fri Jan 09 21:49:11.132107 2026] [:error] [pid 30020:tid 30076] [client 4.230.24.44:3727] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aWEHV8rjc66qOisG6L3kHQAAAJY"]
[Fri Jan 09 21:49:11.990398 2026] [:error] [pid 1366:tid 1377] [client 4.230.24.44:3808] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aWEHVxmasveKu8_ec1WDEwAAAYg"]
[Fri Jan 09 21:49:12.671307 2026] [:error] [pid 14801:tid 14826] [client 4.230.24.44:3797] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aWEHWN8UWXrz_OQYgF1vNQAAAlc"]
[Fri Jan 09 21:49:12.995498 2026] [:error] [pid 14801:tid 14803] [client 4.230.24.44:3725] [client 4.230.24.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aWEHWN8UWXrz_OQYgF1vNgAAAkA"]
[Fri Jan 09 23:00:55.076403 2026] [:error] [pid 44848:tid 44856] [client 43.135.186.135:51274] [client 43.135.186.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWEYJ6jajoTJAbEk87zr7gAAAEY"]
[Sat Jan 10 01:45:23.326099 2026] [:error] [pid 1366:tid 1371] [client 161.118.211.239:56347] [client 161.118.211.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWE-sxmasveKu8_ec1XFiAAAAYM"], referer: http://measureyourcause.com.au
[Sat Jan 10 01:45:24.709463 2026] [:error] [pid 14801:tid 14807] [client 161.118.211.239:58820] [client 161.118.211.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWE-tN8UWXrz_OQYgF2SRQAAAkQ"], referer: http://measureyourcause.com.au
[Sat Jan 10 03:02:30.982720 2026] [:error] [pid 1366:tid 1384] [client 13.71.36.82:13425] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aWFQxhmasveKu8_ec1XXigAAAY8"]
[Sat Jan 10 03:02:31.267513 2026] [:error] [pid 30021:tid 30083] [client 13.71.36.82:13401] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aWFQxw_M8aRtsTog5J_gcAAAAMI"]
[Sat Jan 10 03:02:31.555714 2026] [:error] [pid 44848:tid 44867] [client 13.71.36.82:13377] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aWFQx6jajoTJAbEk87wZMAAAAFE"]
[Sat Jan 10 03:02:31.845217 2026] [:error] [pid 14739:tid 14759] [client 13.71.36.82:13384] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aWFQx163M6_PkLt_IJKaRAAAAdI"]
[Sat Jan 10 03:02:32.179016 2026] [:error] [pid 14872:tid 14888] [client 13.71.36.82:13417] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aWFQyKIUELhgYLNp1sZzgAAAAs4"]
[Sat Jan 10 03:02:32.649002 2026] [:error] [pid 44848:tid 44861] [client 13.71.36.82:13329] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aWFQyKjajoTJAbEk87wZMQAAAEs"]
[Sat Jan 10 03:02:33.103708 2026] [:error] [pid 44848:tid 44869] [client 13.71.36.82:13402] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aWFQyajajoTJAbEk87wZMgAAAFM"]
[Sat Jan 10 03:02:33.461303 2026] [:error] [pid 44848:tid 44851] [client 13.71.36.82:13331] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aWFQyajajoTJAbEk87wZMwAAAEE"]
[Sat Jan 10 03:02:33.815002 2026] [:error] [pid 14831:tid 14856] [client 13.71.36.82:13382] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aWFQyfaKOMCmJcAyBm1vowAAApc"]
[Sat Jan 10 03:02:34.162618 2026] [:error] [pid 14831:tid 14835] [client 13.71.36.82:13398] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aWFQyvaKOMCmJcAyBm1vpAAAAoI"]
[Sat Jan 10 03:02:34.512788 2026] [:error] [pid 1366:tid 1376] [client 13.71.36.82:13400] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aWFQyhmasveKu8_ec1XXkwAAAYc"]
[Sat Jan 10 03:02:34.859861 2026] [:error] [pid 30021:tid 30081] [client 13.71.36.82:13323] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aWFQyg_M8aRtsTog5J_gcgAAAMA"]
[Sat Jan 10 03:02:35.163664 2026] [:error] [pid 30019:tid 30030] [client 13.71.36.82:13321] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aWFQy0z3igHGwX5f7IotWgAAAAY"]
[Sat Jan 10 03:02:35.471144 2026] [:error] [pid 30021:tid 30099] [client 13.71.36.82:13318] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aWFQyw_M8aRtsTog5J_gcwAAANI"]
[Sat Jan 10 03:02:35.841193 2026] [:error] [pid 14801:tid 14815] [client 13.71.36.82:13360] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aWFQy98UWXrz_OQYgF2aPQAAAkw"]
[Sat Jan 10 03:02:36.204904 2026] [:error] [pid 1366:tid 1392] [client 13.71.36.82:13406] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aWFQzBmasveKu8_ec1XXlQAAAZc"]
[Sat Jan 10 03:02:36.611060 2026] [:error] [pid 1366:tid 1369] [client 13.71.36.82:13378] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aWFQzBmasveKu8_ec1XXlwAAAYE"]
[Sat Jan 10 03:02:36.985073 2026] [:error] [pid 14739:tid 14760] [client 13.71.36.82:13387] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aWFQzF63M6_PkLt_IJKaSgAAAdM"]
[Sat Jan 10 03:02:37.306976 2026] [:error] [pid 44848:tid 44850] [client 13.71.36.82:13437] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aWFQzajajoTJAbEk87wZNQAAAEA"]
[Sat Jan 10 03:02:37.630368 2026] [:error] [pid 14872:tid 14891] [client 13.71.36.82:13313] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aWFQzaIUELhgYLNp1sZzggAAAtE"]
[Sat Jan 10 03:02:37.936507 2026] [:error] [pid 44848:tid 44857] [client 13.71.36.82:13319] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aWFQzajajoTJAbEk87wZNgAAAEc"]
[Sat Jan 10 03:02:38.262544 2026] [:error] [pid 1366:tid 1386] [client 13.71.36.82:13333] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aWFQzhmasveKu8_ec1XXmAAAAZE"]
[Sat Jan 10 03:02:38.571714 2026] [:error] [pid 14831:tid 14838] [client 13.71.36.82:13380] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aWFQzvaKOMCmJcAyBm1vpgAAAoU"]
[Sat Jan 10 03:02:38.944292 2026] [:error] [pid 1366:tid 1375] [client 13.71.36.82:13312] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aWFQzhmasveKu8_ec1XXmQAAAYY"]
[Sat Jan 10 03:02:39.244159 2026] [:error] [pid 30020:tid 30071] [client 13.71.36.82:13338] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aWFQz8rjc66qOisG6L0LpQAAAJE"]
[Sat Jan 10 03:02:39.536870 2026] [:error] [pid 14801:tid 14811] [client 13.71.36.82:13393] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aWFQz98UWXrz_OQYgF2aQQAAAkg"]
[Sat Jan 10 03:02:39.853700 2026] [:error] [pid 14801:tid 14825] [client 13.71.36.82:13392] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aWFQz98UWXrz_OQYgF2aQgAAAlY"]
[Sat Jan 10 03:02:40.209810 2026] [:error] [pid 30019:tid 30039] [client 13.71.36.82:4069] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aWFQ0Ez3igHGwX5f7IotYwAAAA8"]
[Sat Jan 10 03:02:40.645454 2026] [:error] [pid 30020:tid 30069] [client 13.71.36.82:13435] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aWFQ0Mrjc66qOisG6L0LpgAAAI8"]
[Sat Jan 10 03:02:40.963873 2026] [:error] [pid 14770:tid 14781] [client 13.71.36.82:13412] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aWFQ0B5QbaVZ-6newJZzJgAAAgk"]
[Sat Jan 10 03:02:41.264086 2026] [:error] [pid 14831:tid 14854] [client 13.71.36.82:13317] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aWFQ0faKOMCmJcAyBm1vqAAAApU"]
[Sat Jan 10 03:02:41.591170 2026] [:error] [pid 14770:tid 14790] [client 13.71.36.82:13426] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aWFQ0R5QbaVZ-6newJZzJwAAAhI"]
[Sat Jan 10 03:02:41.903896 2026] [:error] [pid 14770:tid 14778] [client 13.71.36.82:13327] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aWFQ0R5QbaVZ-6newJZzKAAAAgY"]
[Sat Jan 10 03:02:42.221865 2026] [:error] [pid 14770:tid 14782] [client 13.71.36.82:13422] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aWFQ0h5QbaVZ-6newJZzKQAAAgo"]
[Sat Jan 10 03:02:42.573619 2026] [:error] [pid 14770:tid 14780] [client 13.71.36.82:13408] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aWFQ0h5QbaVZ-6newJZzKwAAAgg"]
[Sat Jan 10 03:02:42.881921 2026] [:error] [pid 14770:tid 14772] [client 13.71.36.82:13316] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aWFQ0h5QbaVZ-6newJZzLAAAAgA"]
[Sat Jan 10 03:02:43.176025 2026] [:error] [pid 30021:tid 30094] [client 13.71.36.82:13346] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aWFQ0w_M8aRtsTog5J_geAAAAM0"]
[Sat Jan 10 03:02:43.509608 2026] [:error] [pid 30019:tid 30045] [client 13.71.36.82:13404] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aWFQ00z3igHGwX5f7IotawAAABU"]
[Sat Jan 10 03:02:43.830657 2026] [:error] [pid 14831:tid 14853] [client 13.71.36.82:13391] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aWFQ0_aKOMCmJcAyBm1vrAAAApQ"]
[Sat Jan 10 03:02:44.110248 2026] [:error] [pid 14831:tid 14839] [client 13.71.36.82:13419] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aWFQ1PaKOMCmJcAyBm1vrgAAAoY"]
[Sat Jan 10 03:02:44.421288 2026] [:error] [pid 30021:tid 30098] [client 13.71.36.82:4045] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aWFQ1A_M8aRtsTog5J_gegAAANE"]
[Sat Jan 10 03:02:44.722608 2026] [:error] [pid 30019:tid 30031] [client 13.71.36.82:13337] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aWFQ1Ez3igHGwX5f7IotbgAAAAc"]
[Sat Jan 10 03:02:45.031366 2026] [:error] [pid 14801:tid 14822] [client 13.71.36.82:13431] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aWFQ1d8UWXrz_OQYgF2aRgAAAlM"]
[Sat Jan 10 03:02:45.314719 2026] [:error] [pid 14770:tid 14785] [client 13.71.36.82:13413] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aWFQ1R5QbaVZ-6newJZzLQAAAg0"]
[Sat Jan 10 03:02:45.634306 2026] [:error] [pid 30019:tid 30035] [client 13.71.36.82:13438] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aWFQ1Uz3igHGwX5f7IotcQAAAAs"]
[Sat Jan 10 03:02:45.937375 2026] [:error] [pid 14831:tid 14847] [client 13.71.36.82:13325] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aWFQ1faKOMCmJcAyBm1vrwAAAo4"]
[Sat Jan 10 03:02:46.234044 2026] [:error] [pid 14801:tid 14817] [client 13.71.36.82:13405] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aWFQ1t8UWXrz_OQYgF2aSAAAAk4"]
[Sat Jan 10 03:02:46.511092 2026] [:error] [pid 30021:tid 30105] [client 13.71.36.82:4033] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aWFQ1g_M8aRtsTog5J_gfQAAANg"]
[Sat Jan 10 03:02:47.086253 2026] [:error] [pid 14770:tid 14774] [client 13.71.36.82:4020] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aWFQ1x5QbaVZ-6newJZzLwAAAgI"]
[Sat Jan 10 03:02:47.375934 2026] [:error] [pid 14801:tid 14805] [client 13.71.36.82:4046] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aWFQ198UWXrz_OQYgF2aSwAAAkI"]
[Sat Jan 10 03:02:47.713830 2026] [:error] [pid 14770:tid 14783] [client 13.71.36.82:13418] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aWFQ1x5QbaVZ-6newJZzMQAAAgs"]
[Sat Jan 10 03:02:48.019701 2026] [:error] [pid 44848:tid 44873] [client 13.71.36.82:13361] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aWFQ2KjajoTJAbEk87wZOQAAAFc"]
[Sat Jan 10 03:02:48.440796 2026] [:error] [pid 44848:tid 44854] [client 13.71.36.82:13370] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWFQ2KjajoTJAbEk87wZPAAAAEQ"]
[Sat Jan 10 03:02:48.719078 2026] [:error] [pid 44848:tid 44874] [client 13.71.36.82:13416] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWFQ2KjajoTJAbEk87wZPQAAAFg"]
[Sat Jan 10 03:02:49.065101 2026] [:error] [pid 44848:tid 44859] [client 13.71.36.82:13397] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWFQ2ajajoTJAbEk87wZPgAAAEk"]
[Sat Jan 10 03:02:49.382141 2026] [:error] [pid 14739:tid 14753] [client 13.71.36.82:13399] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWFQ2V63M6_PkLt_IJKaUAAAAcw"]
[Sat Jan 10 03:02:49.715777 2026] [:error] [pid 30019:tid 30024] [client 13.71.36.82:13335] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWFQ2Uz3igHGwX5f7IotcwAAAAA"]
[Sat Jan 10 03:02:50.073416 2026] [:error] [pid 1366:tid 1373] [client 13.71.36.82:13376] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWFQ2hmasveKu8_ec1XXmgAAAYQ"]
[Sat Jan 10 03:02:50.365158 2026] [:error] [pid 1366:tid 1383] [client 13.71.36.82:13423] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWFQ2hmasveKu8_ec1XXmwAAAY4"]
[Sat Jan 10 03:02:50.684438 2026] [:error] [pid 1366:tid 1385] [client 13.71.36.82:13439] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWFQ2hmasveKu8_ec1XXnAAAAZA"]
[Sat Jan 10 03:02:50.962097 2026] [:error] [pid 44848:tid 44858] [client 13.71.36.82:4036] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aWFQ2qjajoTJAbEk87wZQAAAAEg"]
[Sat Jan 10 03:02:51.274716 2026] [:error] [pid 14801:tid 14809] [client 13.71.36.82:13415] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aWFQ298UWXrz_OQYgF2aTAAAAkY"]
[Sat Jan 10 03:02:51.604759 2026] [:error] [pid 44848:tid 44864] [client 13.71.36.82:13404] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aWFQ26jajoTJAbEk87wZQgAAAE4"]
[Sat Jan 10 03:02:51.981132 2026] [:error] [pid 14831:tid 14857] [client 13.71.36.82:13379] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aWFQ2_aKOMCmJcAyBm1vsAAAApg"]
[Sat Jan 10 03:02:52.308878 2026] [:error] [pid 30020:tid 30055] [client 13.71.36.82:13342] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aWFQ3Mrjc66qOisG6L0LrQAAAIE"]
[Sat Jan 10 03:02:52.630586 2026] [:error] [pid 14770:tid 14792] [client 13.71.36.82:13341] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aWFQ3B5QbaVZ-6newJZzNAAAAhQ"]
[Sat Jan 10 03:02:52.964181 2026] [:error] [pid 30020:tid 30063] [client 13.71.36.82:13330] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aWFQ3Mrjc66qOisG6L0LrgAAAIk"]
[Sat Jan 10 03:02:53.247561 2026] [:error] [pid 44848:tid 44857] [client 13.71.36.82:13354] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aWFQ3ajajoTJAbEk87wZSQAAAEc"]
[Sat Jan 10 03:02:53.709767 2026] [:error] [pid 44848:tid 44859] [client 13.71.36.82:13396] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWFQ3ajajoTJAbEk87wZUAAAAEk"]
[Sat Jan 10 03:02:54.084797 2026] [:error] [pid 44848:tid 44867] [client 13.71.36.82:13366] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWFQ3qjajoTJAbEk87wZWAAAAFE"]
[Sat Jan 10 03:02:54.431665 2026] [:error] [pid 30021:tid 30104] [client 13.71.36.82:13434] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWFQ3g_M8aRtsTog5J_ggQAAANc"]
[Sat Jan 10 03:02:54.732239 2026] [:error] [pid 44848:tid 44857] [client 13.71.36.82:13350] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aWFQ3qjajoTJAbEk87wZYQAAAEc"]
[Sat Jan 10 03:02:55.084443 2026] [:error] [pid 44848:tid 44854] [client 13.71.36.82:13339] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWFQ36jajoTJAbEk87wZaQAAAEQ"]
[Sat Jan 10 03:02:55.359993 2026] [:error] [pid 14801:tid 14804] [client 13.71.36.82:4047] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWFQ398UWXrz_OQYgF2aTQAAAkE"]
[Sat Jan 10 03:02:55.711942 2026] [:error] [pid 14801:tid 14812] [client 13.71.36.82:13344] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWFQ398UWXrz_OQYgF2aTgAAAkk"]
[Sat Jan 10 03:02:56.139773 2026] [:error] [pid 30019:tid 30041] [client 13.71.36.82:13428] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aWFQ4Ez3igHGwX5f7IotdAAAABE"]
[Sat Jan 10 03:02:56.452511 2026] [:error] [pid 30021:tid 30081] [client 13.71.36.82:4051] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aWFQ4A_M8aRtsTog5J_ggwAAAMA"]
[Sat Jan 10 03:02:56.787557 2026] [:error] [pid 30020:tid 30064] [client 13.71.36.82:4057] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aWFQ4Mrjc66qOisG6L0LzQAAAIo"]
[Sat Jan 10 03:02:57.069808 2026] [:error] [pid 1366:tid 1380] [client 13.71.36.82:13356] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aWFQ4RmasveKu8_ec1XXnwAAAYs"]
[Sat Jan 10 03:02:57.396984 2026] [:error] [pid 1366:tid 1384] [client 13.71.36.82:4041] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aWFQ4RmasveKu8_ec1XXoAAAAY8"]
[Sat Jan 10 03:02:57.683144 2026] [:error] [pid 1366:tid 1371] [client 13.71.36.82:3977] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aWFQ4RmasveKu8_ec1XXogAAAYM"]
[Sat Jan 10 03:02:57.998617 2026] [:error] [pid 30020:tid 30060] [client 13.71.36.82:13433] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aWFQ4crjc66qOisG6L0LzgAAAIY"]
[Sat Jan 10 03:02:58.406099 2026] [:error] [pid 30021:tid 30091] [client 13.71.36.82:13432] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aWFQ4g_M8aRtsTog5J_ghAAAAMo"]
[Sat Jan 10 03:02:58.708352 2026] [:error] [pid 30021:tid 30097] [client 13.71.36.82:13324] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aWFQ4g_M8aRtsTog5J_ghQAAANA"]
[Sat Jan 10 03:02:59.099486 2026] [:error] [pid 1366:tid 1377] [client 13.71.36.82:4061] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aWFQ4xmasveKu8_ec1XXpQAAAYg"]
[Sat Jan 10 03:02:59.409140 2026] [:error] [pid 1366:tid 1393] [client 13.71.36.82:13343] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aWFQ4xmasveKu8_ec1XXpgAAAZg"]
[Sat Jan 10 03:02:59.772217 2026] [:error] [pid 30021:tid 30092] [client 13.71.36.82:13334] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aWFQ4w_M8aRtsTog5J_ghwAAAMs"]
[Sat Jan 10 03:03:00.077450 2026] [:error] [pid 1366:tid 1376] [client 13.71.36.82:13436] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aWFQ5BmasveKu8_ec1XXqQAAAYc"]
[Sat Jan 10 03:03:00.449813 2026] [:error] [pid 1366:tid 1390] [client 13.71.36.82:13389] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aWFQ5BmasveKu8_ec1XXrAAAAZU"]
[Sat Jan 10 03:03:00.792259 2026] [:error] [pid 30019:tid 30042] [client 13.71.36.82:4043] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aWFQ5Ez3igHGwX5f7IotdQAAABI"]
[Sat Jan 10 03:03:01.115038 2026] [:error] [pid 30019:tid 30033] [client 13.71.36.82:13411] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aWFQ5Uz3igHGwX5f7IotdgAAAAk"]
[Sat Jan 10 03:03:01.413747 2026] [:error] [pid 14801:tid 14819] [client 13.71.36.82:4071] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aWFQ5d8UWXrz_OQYgF2aUQAAAlA"]
[Sat Jan 10 03:03:01.714474 2026] [:error] [pid 1366:tid 1384] [client 13.71.36.82:4054] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWFQ5RmasveKu8_ec1XXuAAAAY8"]
[Sat Jan 10 03:03:01.992118 2026] [:error] [pid 1366:tid 1370] [client 13.71.36.82:13358] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWFQ5RmasveKu8_ec1XXuwAAAYI"]
[Sat Jan 10 03:03:02.272242 2026] [:error] [pid 14801:tid 14820] [client 13.71.36.82:3997] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWFQ5t8UWXrz_OQYgF2aUgAAAlE"]
[Sat Jan 10 03:03:02.562825 2026] [:error] [pid 44848:tid 44868] [client 13.71.36.82:13403] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWFQ5qjajoTJAbEk87wZdAAAAFI"]
[Sat Jan 10 03:03:02.874683 2026] [:error] [pid 30019:tid 30029] [client 13.71.36.82:4060] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWFQ5kz3igHGwX5f7IotdwAAAAU"]
[Sat Jan 10 03:03:03.234148 2026] [:error] [pid 14770:tid 14796] [client 13.71.36.82:13348] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWFQ5x5QbaVZ-6newJZzNgAAAhg"]
[Sat Jan 10 03:03:03.555378 2026] [:error] [pid 30019:tid 30034] [client 13.71.36.82:13421] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWFQ50z3igHGwX5f7IoteAAAAAo"]
[Sat Jan 10 03:03:03.866763 2026] [:error] [pid 14770:tid 14794] [client 13.71.36.82:4056] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWFQ5x5QbaVZ-6newJZzNwAAAhY"]
[Sat Jan 10 03:03:04.164213 2026] [:error] [pid 14801:tid 14814] [client 13.71.36.82:13383] [client 13.71.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aWFQ6N8UWXrz_OQYgF2aUwAAAks"]
[Sat Jan 10 03:03:04.451223 2026] [:error] [pid 14801:tid 14811] [client 13.71.36.82:13385] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWFQ6N8UWXrz_OQYgF2aVQAAAkg"]
[Sat Jan 10 03:03:04.736037 2026] [:error] [pid 1366:tid 1377] [client 13.71.36.82:13363] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWFQ6BmasveKu8_ec1XX1gAAAYg"]
[Sat Jan 10 03:03:05.043655 2026] [:error] [pid 44848:tid 44866] [client 13.71.36.82:13351] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aWFQ6ajajoTJAbEk87wZdgAAAFA"]
[Sat Jan 10 03:03:05.358734 2026] [:error] [pid 30019:tid 30046] [client 13.71.36.82:13349] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aWFQ6Uz3igHGwX5f7IotewAAABY"]
[Sat Jan 10 03:03:05.655067 2026] [:error] [pid 30019:tid 30036] [client 13.71.36.82:13369] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aWFQ6Uz3igHGwX5f7IotfAAAAAw"]
[Sat Jan 10 03:03:06.011207 2026] [:error] [pid 14801:tid 14806] [client 13.71.36.82:13340] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aWFQ6t8UWXrz_OQYgF2aWQAAAkM"]
[Sat Jan 10 03:03:06.392271 2026] [:error] [pid 30021:tid 30084] [client 13.71.36.82:13322] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aWFQ6g_M8aRtsTog5J_giAAAAMM"]
[Sat Jan 10 03:03:06.704051 2026] [:error] [pid 30019:tid 30044] [client 13.71.36.82:4080] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWFQ6kz3igHGwX5f7IotfgAAABQ"]
[Sat Jan 10 03:03:07.032904 2026] [:error] [pid 14801:tid 14816] [client 13.71.36.82:13315] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWFQ698UWXrz_OQYgF2aWwAAAk0"]
[Sat Jan 10 03:03:07.345240 2026] [:error] [pid 14831:tid 14846] [client 13.71.36.82:13375] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWFQ6_aKOMCmJcAyBm1vtwAAAo0"]
[Sat Jan 10 03:03:07.683482 2026] [:error] [pid 14831:tid 14851] [client 13.71.36.82:13407] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aWFQ6_aKOMCmJcAyBm1vuAAAApI"]
[Sat Jan 10 03:03:08.095183 2026] [:error] [pid 1366:tid 1377] [client 13.71.36.82:13394] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aWFQ7BmasveKu8_ec1XX6gAAAYg"]
[Sat Jan 10 03:03:08.406814 2026] [:error] [pid 1366:tid 1379] [client 13.71.36.82:4077] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aWFQ7BmasveKu8_ec1XX7AAAAYo"]
[Sat Jan 10 03:03:08.705266 2026] [:error] [pid 14801:tid 14805] [client 13.71.36.82:3975] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aWFQ7N8UWXrz_OQYgF2aXwAAAkI"]
[Sat Jan 10 03:03:09.001840 2026] [:error] [pid 30021:tid 30082] [client 13.71.36.82:13362] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aWFQ7Q_M8aRtsTog5J_giQAAAME"]
[Sat Jan 10 03:03:09.281126 2026] [:error] [pid 44848:tid 44859] [client 13.71.36.82:13320] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aWFQ7ajajoTJAbEk87wZeAAAAEk"]
[Sat Jan 10 03:03:09.654374 2026] [:error] [pid 14770:tid 14788] [client 13.71.36.82:13371] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aWFQ7R5QbaVZ-6newJZzOQAAAhA"]
[Sat Jan 10 03:03:10.013137 2026] [:error] [pid 44848:tid 44854] [client 13.71.36.82:4073] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aWFQ7qjajoTJAbEk87wZeQAAAEQ"]
[Sat Jan 10 03:03:10.335646 2026] [:error] [pid 30020:tid 30071] [client 13.71.36.82:13388] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aWFQ7srjc66qOisG6L0LzwAAAJE"]
[Sat Jan 10 03:03:10.699455 2026] [:error] [pid 14739:tid 14752] [client 13.71.36.82:4035] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWFQ7l63M6_PkLt_IJKaWAAAAcs"]
[Sat Jan 10 03:03:11.008177 2026] [:error] [pid 44848:tid 44858] [client 13.71.36.82:13359] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWFQ76jajoTJAbEk87wZewAAAEg"]
[Sat Jan 10 03:03:11.294479 2026] [:error] [pid 44848:tid 44862] [client 13.71.36.82:13326] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWFQ76jajoTJAbEk87wZfwAAAEw"]
[Sat Jan 10 03:03:11.595063 2026] [:error] [pid 44848:tid 44851] [client 13.71.36.82:3985] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aWFQ76jajoTJAbEk87wZgQAAAEE"]
[Sat Jan 10 03:03:11.893598 2026] [:error] [pid 1366:tid 1376] [client 13.71.36.82:4049] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aWFQ7xmasveKu8_ec1XX7gAAAYc"]
[Sat Jan 10 03:03:12.252489 2026] [:error] [pid 1366:tid 1375] [client 13.71.36.82:3973] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aWFQ8BmasveKu8_ec1XX7wAAAYY"]
[Sat Jan 10 03:03:12.544125 2026] [:error] [pid 1366:tid 1374] [client 13.71.36.82:13373] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aWFQ8BmasveKu8_ec1XX8QAAAYU"]
[Sat Jan 10 03:03:12.837507 2026] [:error] [pid 1366:tid 1389] [client 13.71.36.82:4072] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aWFQ8BmasveKu8_ec1XX8gAAAZQ"]
[Sat Jan 10 03:03:13.147018 2026] [:error] [pid 1366:tid 1373] [client 13.71.36.82:13328] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aWFQ8RmasveKu8_ec1XX9AAAAYQ"]
[Sat Jan 10 03:03:13.438409 2026] [:error] [pid 1366:tid 1385] [client 13.71.36.82:4037] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aWFQ8RmasveKu8_ec1XX9wAAAZA"]
[Sat Jan 10 03:03:13.715030 2026] [:error] [pid 30019:tid 30043] [client 13.71.36.82:4027] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aWFQ8Uz3igHGwX5f7IotgwAAABM"]
[Sat Jan 10 03:03:13.992817 2026] [:error] [pid 1366:tid 1371] [client 13.71.36.82:3980] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aWFQ8RmasveKu8_ec1XX-gAAAYM"]
[Sat Jan 10 03:03:14.330632 2026] [:error] [pid 30019:tid 30027] [client 13.71.36.82:13345] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aWFQ8kz3igHGwX5f7IothAAAAAM"]
[Sat Jan 10 03:03:14.610068 2026] [:error] [pid 14801:tid 14822] [client 13.71.36.82:3996] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aWFQ8t8UWXrz_OQYgF2acAAAAlM"]
[Sat Jan 10 03:03:14.885588 2026] [:error] [pid 44848:tid 44870] [client 13.71.36.82:13420] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aWFQ8qjajoTJAbEk87wZhQAAAFQ"]
[Sat Jan 10 03:03:15.159412 2026] [:error] [pid 14739:tid 14765] [client 13.71.36.82:13395] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aWFQ8163M6_PkLt_IJKaWQAAAdg"]
[Sat Jan 10 03:03:15.465720 2026] [:error] [pid 14739:tid 14748] [client 13.71.36.82:4067] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWFQ8163M6_PkLt_IJKaWwAAAcc"]
[Sat Jan 10 03:03:15.759127 2026] [:error] [pid 30019:tid 30040] [client 13.71.36.82:13414] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWFQ80z3igHGwX5f7IothgAAABA"]
[Sat Jan 10 03:03:16.037138 2026] [:error] [pid 14801:tid 14809] [client 13.71.36.82:3970] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWFQ9N8UWXrz_OQYgF2adAAAAkY"]
[Sat Jan 10 03:03:16.320070 2026] [:error] [pid 14801:tid 14804] [client 13.71.36.82:4083] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aWFQ9N8UWXrz_OQYgF2adQAAAkE"]
[Sat Jan 10 03:03:16.604380 2026] [:error] [pid 14770:tid 14776] [client 13.71.36.82:13332] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aWFQ9B5QbaVZ-6newJZzPQAAAgQ"]
[Sat Jan 10 03:03:16.878239 2026] [:error] [pid 44848:tid 44853] [client 13.71.36.82:13381] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aWFQ9KjajoTJAbEk87wZhwAAAEM"]
[Sat Jan 10 03:03:17.152509 2026] [:error] [pid 44848:tid 44868] [client 13.71.36.82:4040] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aWFQ9ajajoTJAbEk87wZiAAAAFI"]
[Sat Jan 10 03:03:17.450417 2026] [:error] [pid 1366:tid 1377] [client 13.71.36.82:3932] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aWFQ9RmasveKu8_ec1XX_QAAAYg"]
[Sat Jan 10 03:03:17.783855 2026] [:error] [pid 14872:tid 14881] [client 13.71.36.82:3914] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aWFQ9aIUELhgYLNp1sZz6gAAAsc"]
[Sat Jan 10 03:03:18.080763 2026] [:error] [pid 14801:tid 14821] [client 13.71.36.82:3993] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aWFQ9t8UWXrz_OQYgF2aeAAAAlI"]
[Sat Jan 10 03:03:18.375602 2026] [:error] [pid 1366:tid 1388] [client 13.71.36.82:3988] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aWFQ9hmasveKu8_ec1XYAAAAAZM"]
[Sat Jan 10 03:03:18.670051 2026] [:error] [pid 1366:tid 1386] [client 13.71.36.82:4090] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aWFQ9hmasveKu8_ec1XYAgAAAZE"]
[Sat Jan 10 03:03:18.943881 2026] [:error] [pid 14872:tid 14887] [client 13.71.36.82:13374] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWFQ9qIUELhgYLNp1sZz6wAAAs0"]
[Sat Jan 10 03:03:19.274567 2026] [:error] [pid 14831:tid 14850] [client 13.71.36.82:4068] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWFQ9_aKOMCmJcAyBm1vvQAAApE"]
[Sat Jan 10 03:03:19.646856 2026] [:error] [pid 44848:tid 44863] [client 13.71.36.82:4050] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWFQ96jajoTJAbEk87wZjAAAAE0"]
[Sat Jan 10 03:03:19.931343 2026] [:error] [pid 44848:tid 44872] [client 13.71.36.82:13367] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWFQ96jajoTJAbEk87wZjgAAAFY"]
[Sat Jan 10 03:03:20.276000 2026] [:error] [pid 44848:tid 44864] [client 13.71.36.82:3974] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aWFQ-KjajoTJAbEk87wZkAAAAE4"]
[Sat Jan 10 03:03:20.977340 2026] [:error] [pid 14831:tid 14841] [client 13.71.36.82:4095] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aWFQ-PaKOMCmJcAyBm1vvwAAAog"]
[Sat Jan 10 03:03:21.295750 2026] [:error] [pid 30021:tid 30090] [client 13.71.36.82:4044] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aWFQ-Q_M8aRtsTog5J_gjQAAAMk"]
[Sat Jan 10 03:03:21.617288 2026] [:error] [pid 30021:tid 30098] [client 13.71.36.82:4062] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aWFQ-Q_M8aRtsTog5J_gjgAAANE"]
[Sat Jan 10 03:03:22.016995 2026] [:error] [pid 30021:tid 30085] [client 13.71.36.82:13357] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aWFQ-g_M8aRtsTog5J_gjwAAAMQ"]
[Sat Jan 10 03:03:22.515198 2026] [:error] [pid 30019:tid 30033] [client 13.71.36.82:3984] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aWFQ-kz3igHGwX5f7IotigAAAAk"]
[Sat Jan 10 03:03:22.826335 2026] [:error] [pid 30019:tid 30029] [client 13.71.36.82:3995] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aWFQ-kz3igHGwX5f7IotiwAAAAU"]
[Sat Jan 10 03:03:23.186574 2026] [:error] [pid 1366:tid 1385] [client 13.71.36.82:13410] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aWFQ-xmasveKu8_ec1XYBQAAAZA"]
[Sat Jan 10 03:03:23.527848 2026] [:error] [pid 30019:tid 30038] [client 13.71.36.82:3968] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aWFQ-0z3igHGwX5f7IotjgAAAA4"]
[Sat Jan 10 03:03:24.046947 2026] [:error] [pid 14801:tid 14827] [client 13.71.36.82:3911] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aWFQ_N8UWXrz_OQYgF2afAAAAlg"]
[Sat Jan 10 03:03:24.375110 2026] [:error] [pid 44848:tid 44865] [client 13.71.36.82:4032] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aWFQ_KjajoTJAbEk87wZmAAAAE8"]
[Sat Jan 10 03:03:24.712125 2026] [:error] [pid 44848:tid 44868] [client 13.71.36.82:4042] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aWFQ_KjajoTJAbEk87wZmQAAAFI"]
[Sat Jan 10 03:03:25.136609 2026] [:error] [pid 1366:tid 1380] [client 13.71.36.82:3915] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWFQ_RmasveKu8_ec1XYBwAAAYs"]
[Sat Jan 10 03:03:25.602668 2026] [:error] [pid 30021:tid 30102] [client 13.71.36.82:4048] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWFQ_Q_M8aRtsTog5J_gkQAAANU"]
[Sat Jan 10 03:03:26.063406 2026] [:error] [pid 44848:tid 44859] [client 13.71.36.82:4039] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWFQ_qjajoTJAbEk87wZngAAAEk"]
[Sat Jan 10 03:03:26.486627 2026] [:error] [pid 30021:tid 30100] [client 13.71.36.82:4058] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aWFQ_g_M8aRtsTog5J_glAAAANM"]
[Sat Jan 10 03:03:26.914346 2026] [:error] [pid 1366:tid 1391] [client 13.71.36.82:3969] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWFQ_hmasveKu8_ec1XYCQAAAZY"]
[Sat Jan 10 03:03:27.275238 2026] [:error] [pid 30019:tid 30047] [client 13.71.36.82:3992] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWFQ_0z3igHGwX5f7IotkQAAABc"]
[Sat Jan 10 03:03:27.716670 2026] [:error] [pid 1366:tid 1368] [client 13.71.36.82:4081] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWFQ_xmasveKu8_ec1XYDAAAAYA"]
[Sat Jan 10 03:03:28.319060 2026] [:error] [pid 14801:tid 14818] [client 13.71.36.82:3971] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aWFRAN8UWXrz_OQYgF2agAAAAk8"]
[Sat Jan 10 03:03:28.631620 2026] [:error] [pid 30021:tid 30086] [client 13.71.36.82:4018] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWFRAA_M8aRtsTog5J_gmAAAAMU"]
[Sat Jan 10 03:03:29.031755 2026] [:error] [pid 14739:tid 14759] [client 13.71.36.82:13336] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWFRAV63M6_PkLt_IJKaYgAAAdI"]
[Sat Jan 10 03:03:29.462240 2026] [:error] [pid 30021:tid 30097] [client 13.71.36.82:4078] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aWFRAQ_M8aRtsTog5J_gmwAAANA"]
[Sat Jan 10 03:03:35.206794 2026] [:error] [pid 30020:tid 30072] [client 13.71.36.82:4010] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWFRB8rjc66qOisG6L0L3gAAAJI"]
[Sat Jan 10 03:03:35.532458 2026] [:error] [pid 30019:tid 30040] [client 13.71.36.82:3930] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWFRB0z3igHGwX5f7IotmQAAABA"]
[Sat Jan 10 03:03:35.865180 2026] [:error] [pid 14801:tid 14805] [client 13.71.36.82:13427] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWFRB98UWXrz_OQYgF2agQAAAkI"]
[Sat Jan 10 03:03:36.164331 2026] [:error] [pid 1366:tid 1369] [client 13.71.36.82:3978] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWFRCBmasveKu8_ec1XYHgAAAYE"]
[Sat Jan 10 03:03:36.492196 2026] [:error] [pid 14739:tid 14751] [client 13.71.36.82:4089] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aWFRCF63M6_PkLt_IJKaZwAAAco"]
[Sat Jan 10 03:03:36.777238 2026] [:error] [pid 14739:tid 14744] [client 13.71.36.82:3986] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aWFRCF63M6_PkLt_IJKaaAAAAcM"]
[Sat Jan 10 03:03:37.143309 2026] [:error] [pid 14801:tid 14816] [client 13.71.36.82:13372] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aWFRCd8UWXrz_OQYgF2agwAAAk0"]
[Sat Jan 10 03:03:37.463866 2026] [:error] [pid 1366:tid 1378] [client 13.71.36.82:13386] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aWFRCRmasveKu8_ec1XYIwAAAYk"]
[Sat Jan 10 03:03:37.883364 2026] [:error] [pid 44848:tid 44855] [client 13.71.36.82:3921] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aWFRCajajoTJAbEk87wZrgAAAEU"]
[Sat Jan 10 03:03:38.207326 2026] [:error] [pid 30019:tid 30028] [client 13.71.36.82:4084] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aWFRCkz3igHGwX5f7IotnQAAAAQ"]
[Sat Jan 10 03:03:38.531398 2026] [:error] [pid 14831:tid 14837] [client 13.71.36.82:4004] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aWFRCvaKOMCmJcAyBm1vwgAAAoQ"]
[Sat Jan 10 03:03:38.943386 2026] [:error] [pid 1366:tid 1375] [client 13.71.36.82:4086] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aWFRChmasveKu8_ec1XYJwAAAYY"]
[Sat Jan 10 03:03:39.316080 2026] [:error] [pid 14872:tid 14886] [client 13.71.36.82:3925] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aWFRC6IUELhgYLNp1sZz7wAAAsw"]
[Sat Jan 10 03:03:39.712758 2026] [:error] [pid 30019:tid 30039] [client 13.71.36.82:4064] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aWFRC0z3igHGwX5f7IotoAAAAA8"]
[Sat Jan 10 03:03:40.072780 2026] [:error] [pid 30021:tid 30086] [client 13.71.36.82:4063] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aWFRDA_M8aRtsTog5J_gqgAAAMU"]
[Sat Jan 10 03:03:40.387280 2026] [:error] [pid 14739:tid 14765] [client 13.71.36.82:13409] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aWFRDF63M6_PkLt_IJKaagAAAdg"]
[Sat Jan 10 03:03:40.790197 2026] [:error] [pid 14831:tid 14840] [client 13.71.36.82:4008] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWFRDPaKOMCmJcAyBm1vwwAAAoc"]
[Sat Jan 10 03:03:41.110962 2026] [:error] [pid 30021:tid 30081] [client 13.71.36.82:4003] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWFRDQ_M8aRtsTog5J_gqwAAAMA"]
[Sat Jan 10 03:03:41.544998 2026] [:error] [pid 30021:tid 30095] [client 13.71.36.82:3942] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWFRDQ_M8aRtsTog5J_grQAAAM4"]
[Sat Jan 10 03:03:41.857733 2026] [:error] [pid 1366:tid 1380] [client 13.71.36.82:13390] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aWFRDRmasveKu8_ec1XYLQAAAYs"]
[Sat Jan 10 03:03:42.404657 2026] [:error] [pid 44848:tid 44853] [client 13.71.36.82:13368] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWFRDqjajoTJAbEk87wZuQAAAEM"]
[Sat Jan 10 03:03:42.822158 2026] [:error] [pid 1366:tid 1391] [client 13.71.36.82:3983] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWFRDhmasveKu8_ec1XYLwAAAZY"]
[Sat Jan 10 03:03:43.170668 2026] [:error] [pid 30019:tid 30047] [client 13.71.36.82:3919] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWFRD0z3igHGwX5f7IotpAAAABc"]
[Sat Jan 10 03:03:43.492109 2026] [:error] [pid 30019:tid 30044] [client 13.71.36.82:13355] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aWFRD0z3igHGwX5f7IotpQAAABQ"]
[Sat Jan 10 03:03:43.819341 2026] [:error] [pid 14872:tid 14877] [client 13.71.36.82:3989] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aWFRD6IUELhgYLNp1sZz8gAAAsM"]
[Sat Jan 10 03:03:44.164470 2026] [:error] [pid 30020:tid 30066] [client 13.71.36.82:4082] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aWFREMrjc66qOisG6L0L3wAAAIw"]
[Sat Jan 10 03:03:44.470110 2026] [:error] [pid 30020:tid 30064] [client 13.71.36.82:4038] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aWFREMrjc66qOisG6L0L4AAAAIo"]
[Sat Jan 10 03:03:44.894597 2026] [:error] [pid 14739:tid 14748] [client 13.71.36.82:4053] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aWFREF63M6_PkLt_IJKabAAAAcc"]
[Sat Jan 10 03:03:45.290499 2026] [:error] [pid 14872:tid 14892] [client 13.71.36.82:3941] [client 13.71.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aWFREaIUELhgYLNp1sZz9QAAAtI"]
[Sat Jan 10 03:03:45.715617 2026] [:error] [pid 44848:tid 44869] [client 13.71.36.82:3976] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aWFREajajoTJAbEk87wZwQAAAFM"]
[Sat Jan 10 03:03:46.086579 2026] [:error] [pid 1366:tid 1371] [client 13.71.36.82:4009] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aWFREhmasveKu8_ec1XYMAAAAYM"]
[Sat Jan 10 03:03:46.616718 2026] [:error] [pid 44848:tid 44861] [client 13.71.36.82:4017] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aWFREqjajoTJAbEk87wZwwAAAEs"]
[Sat Jan 10 03:03:46.924877 2026] [:error] [pid 30020:tid 30062] [client 13.71.36.82:4000] [client 13.71.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aWFREsrjc66qOisG6L0L4wAAAIg"]
[Sat Jan 10 03:03:47.250651 2026] [:error] [pid 30021:tid 30088] [client 13.71.36.82:4006] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWFREw_M8aRtsTog5J_grgAAAMc"]
[Sat Jan 10 03:03:47.646387 2026] [:error] [pid 30021:tid 30096] [client 13.71.36.82:3943] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWFREw_M8aRtsTog5J_gsAAAAM8"]
[Sat Jan 10 03:03:48.057465 2026] [:error] [pid 30021:tid 30084] [client 13.71.36.82:3905] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWFRFA_M8aRtsTog5J_gsQAAAMM"]
[Sat Jan 10 03:03:48.437005 2026] [:error] [pid 30021:tid 30103] [client 13.71.36.82:3994] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aWFRFA_M8aRtsTog5J_gswAAANY"]
[Sat Jan 10 03:03:48.948248 2026] [:error] [pid 14739:tid 14741] [client 13.71.36.82:3855] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWFRFF63M6_PkLt_IJKabwAAAcA"]
[Sat Jan 10 03:03:49.237846 2026] [:error] [pid 14872:tid 14874] [client 13.71.36.82:4001] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWFRFaIUELhgYLNp1sZz9wAAAsA"]
[Sat Jan 10 03:03:49.724525 2026] [:error] [pid 14739:tid 14743] [client 13.71.36.82:3999] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWFRFV63M6_PkLt_IJKacAAAAcI"]
[Sat Jan 10 03:03:50.018763 2026] [:error] [pid 14739:tid 14756] [client 13.71.36.82:3909] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aWFRFl63M6_PkLt_IJKacgAAAc8"]
[Sat Jan 10 03:03:50.539172 2026] [:error] [pid 44848:tid 44860] [client 13.71.36.82:3939] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWFRFqjajoTJAbEk87wZyAAAAEo"]
[Sat Jan 10 03:03:50.870234 2026] [:error] [pid 30019:tid 30032] [client 13.71.36.82:4028] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWFRFkz3igHGwX5f7IotpwAAAAg"]
[Sat Jan 10 03:03:51.203572 2026] [:error] [pid 44848:tid 44862] [client 13.71.36.82:3990] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWFRF6jajoTJAbEk87wZyQAAAEw"]
[Sat Jan 10 03:03:51.540530 2026] [:error] [pid 44848:tid 44868] [client 13.71.36.82:3864] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aWFRF6jajoTJAbEk87wZywAAAFI"]
[Sat Jan 10 03:03:51.859691 2026] [:error] [pid 30021:tid 30085] [client 13.71.36.82:4026] [client 13.71.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aWFRFw_M8aRtsTog5J_guAAAAMQ"]
[Sat Jan 10 03:03:52.208779 2026] [:error] [pid 30020:tid 30065] [client 13.71.36.82:3956] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aWFRGMrjc66qOisG6L0L5gAAAIs"]
[Sat Jan 10 03:03:52.583338 2026] [:error] [pid 14872:tid 14898] [client 13.71.36.82:13353] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aWFRGKIUELhgYLNp1sZz-gAAAtg"]
[Sat Jan 10 03:03:52.943057 2026] [:error] [pid 30019:tid 30042] [client 13.71.36.82:3955] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aWFRGEz3igHGwX5f7IotqgAAABI"]
[Sat Jan 10 03:03:53.468634 2026] [:error] [pid 44848:tid 44871] [client 13.71.36.82:13424] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aWFRGajajoTJAbEk87wZ0AAAAFU"]
[Sat Jan 10 03:03:53.792819 2026] [:error] [pid 1366:tid 1378] [client 13.71.36.82:3926] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWFRGRmasveKu8_ec1XYMQAAAYk"]
[Sat Jan 10 03:03:54.155984 2026] [:error] [pid 14801:tid 14820] [client 13.71.36.82:3979] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWFRGt8UWXrz_OQYgF2amAAAAlE"]
[Sat Jan 10 03:03:54.488292 2026] [:error] [pid 14770:tid 14794] [client 13.71.36.82:3872] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWFRGh5QbaVZ-6newJZzSAAAAhY"]
[Sat Jan 10 03:03:55.033066 2026] [:error] [pid 44848:tid 44864] [client 13.71.36.82:3906] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aWFRG6jajoTJAbEk87wZ1AAAAE4"]
[Sat Jan 10 03:03:55.335360 2026] [:error] [pid 30019:tid 30024] [client 13.71.36.82:3940] [client 13.71.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aWFRG0z3igHGwX5f7IotrQAAAAA"]
[Sat Jan 10 03:03:55.714955 2026] [:error] [pid 30019:tid 30041] [client 13.71.36.82:3870] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aWFRG0z3igHGwX5f7IotrwAAABE"]
[Sat Jan 10 03:03:56.023022 2026] [:error] [pid 30019:tid 30029] [client 13.71.36.82:4079] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aWFRHEz3igHGwX5f7IotsQAAAAU"]
[Sat Jan 10 03:03:56.336952 2026] [:error] [pid 14801:tid 14807] [client 13.71.36.82:4016] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aWFRHN8UWXrz_OQYgF2anwAAAkQ"]
[Sat Jan 10 03:03:56.663209 2026] [:error] [pid 14801:tid 14827] [client 13.71.36.82:4092] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aWFRHN8UWXrz_OQYgF2aoQAAAlg"]
[Sat Jan 10 03:03:56.965634 2026] [:error] [pid 44848:tid 44854] [client 13.71.36.82:4087] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aWFRHKjajoTJAbEk87wZ2AAAAEQ"]
[Sat Jan 10 03:03:57.310446 2026] [:error] [pid 44848:tid 44862] [client 13.71.36.82:4074] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aWFRHajajoTJAbEk87wZ2QAAAEw"]
[Sat Jan 10 03:03:57.629229 2026] [:error] [pid 1366:tid 1386] [client 13.71.36.82:3965] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aWFRHRmasveKu8_ec1XYNAAAAZE"]
[Sat Jan 10 03:03:57.943784 2026] [:error] [pid 14872:tid 14890] [client 13.71.36.82:3987] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aWFRHaIUELhgYLNp1sZz_gAAAtA"]
[Sat Jan 10 03:03:58.249438 2026] [:error] [pid 14872:tid 14885] [client 13.71.36.82:4029] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aWFRHqIUELhgYLNp1sZz_wAAAss"]
[Sat Jan 10 03:03:58.547568 2026] [:error] [pid 14872:tid 14889] [client 13.71.36.82:13379] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aWFRHqIUELhgYLNp1sZ0AQAAAs8"]
[Sat Jan 10 03:03:58.871330 2026] [:error] [pid 14770:tid 14775] [client 13.71.36.82:3981] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aWFRHh5QbaVZ-6newJZzTQAAAgM"]
[Sat Jan 10 03:03:59.257505 2026] [:error] [pid 14770:tid 14776] [client 13.71.36.82:13352] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aWFRHx5QbaVZ-6newJZzTwAAAgQ"]
[Sat Jan 10 03:03:59.574277 2026] [:error] [pid 14801:tid 14818] [client 13.71.36.82:4013] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWFRH98UWXrz_OQYgF2aogAAAk8"]
[Sat Jan 10 03:03:59.992490 2026] [:error] [pid 14872:tid 14875] [client 13.71.36.82:4031] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWFRH6IUELhgYLNp1sZ0AwAAAsE"]
[Sat Jan 10 03:04:00.269527 2026] [:error] [pid 14801:tid 14813] [client 13.71.36.82:13314] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWFRIN8UWXrz_OQYgF2aowAAAko"]
[Sat Jan 10 03:04:00.598249 2026] [:error] [pid 14831:tid 14856] [client 13.71.36.82:4066] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aWFRIPaKOMCmJcAyBm1vyQAAApc"]
[Sat Jan 10 03:04:00.940692 2026] [:error] [pid 1366:tid 1376] [client 13.71.36.82:3868] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWFRIBmasveKu8_ec1XYOQAAAYc"]
[Sat Jan 10 03:04:01.228823 2026] [:error] [pid 14801:tid 14825] [client 13.71.36.82:3991] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWFRId8UWXrz_OQYgF2apAAAAlY"]
[Sat Jan 10 03:04:01.552904 2026] [:error] [pid 44848:tid 44870] [client 13.71.36.82:3950] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWFRIajajoTJAbEk87wZ3AAAAFQ"]
[Sat Jan 10 03:04:01.848523 2026] [:error] [pid 44848:tid 44865] [client 13.71.36.82:4076] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aWFRIajajoTJAbEk87wZ3gAAAE8"]
[Sat Jan 10 03:04:02.198627 2026] [:error] [pid 44848:tid 44858] [client 13.71.36.82:3862] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aWFRIqjajoTJAbEk87wZ3wAAAEg"]
[Sat Jan 10 03:04:02.490429 2026] [:error] [pid 1366:tid 1389] [client 13.71.36.82:4023] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aWFRIhmasveKu8_ec1XYOgAAAZQ"]
[Sat Jan 10 03:04:02.765318 2026] [:error] [pid 1366:tid 1392] [client 13.71.36.82:3777] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aWFRIhmasveKu8_ec1XYOwAAAZc"]
[Sat Jan 10 03:04:03.056369 2026] [:error] [pid 1366:tid 1380] [client 13.71.36.82:3954] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aWFRIxmasveKu8_ec1XYPAAAAYs"]
[Sat Jan 10 03:04:03.375780 2026] [:error] [pid 1366:tid 1382] [client 13.71.36.82:3849] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWFRIxmasveKu8_ec1XYPQAAAY0"]
[Sat Jan 10 03:04:03.674917 2026] [:error] [pid 44848:tid 44850] [client 13.71.36.82:3949] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWFRI6jajoTJAbEk87wZ4wAAAEA"]
[Sat Jan 10 03:04:03.965388 2026] [:error] [pid 44848:tid 44871] [client 13.71.36.82:3945] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWFRI6jajoTJAbEk87wZ5AAAAFU"]
[Sat Jan 10 03:04:04.254080 2026] [:error] [pid 14831:tid 14835] [client 13.71.36.82:3918] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aWFRJPaKOMCmJcAyBm1vywAAAoI"]
[Sat Jan 10 03:04:04.552489 2026] [:error] [pid 44848:tid 44863] [client 13.71.36.82:4088] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWFRJKjajoTJAbEk87wZ5QAAAE0"]
[Sat Jan 10 03:04:04.905544 2026] [:error] [pid 14739:tid 14754] [client 13.71.36.82:3952] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWFRJF63M6_PkLt_IJKadAAAAc0"]
[Sat Jan 10 03:04:05.197086 2026] [:error] [pid 1366:tid 1373] [client 13.71.36.82:4007] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWFRJRmasveKu8_ec1XYPgAAAYQ"]
[Sat Jan 10 03:04:05.471255 2026] [:error] [pid 1366:tid 1384] [client 13.71.36.82:3957] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aWFRJRmasveKu8_ec1XYQAAAAY8"]
[Sat Jan 10 03:04:05.785185 2026] [:error] [pid 30021:tid 30095] [client 13.71.36.82:4094] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWFRJQ_M8aRtsTog5J_gwAAAAM4"]
[Sat Jan 10 03:04:07.147763 2026] [:error] [pid 44848:tid 44869] [client 13.71.36.82:13429] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWFRJ6jajoTJAbEk87wZ5wAAAFM"]
[Sat Jan 10 03:04:07.498505 2026] [:error] [pid 44848:tid 44864] [client 13.71.36.82:4070] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWFRJ6jajoTJAbEk87wZ6AAAAE4"]
[Sat Jan 10 03:04:07.848345 2026] [:error] [pid 1366:tid 1371] [client 13.71.36.82:3880] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aWFRJxmasveKu8_ec1XYRQAAAYM"]
[Sat Jan 10 03:04:08.164395 2026] [:error] [pid 14770:tid 14774] [client 13.71.36.82:3853] [client 13.71.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aWFRKB5QbaVZ-6newJZzUQAAAgI"]
[Sat Jan 10 03:04:08.440334 2026] [:error] [pid 44848:tid 44867] [client 13.71.36.82:3904] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aWFRKKjajoTJAbEk87wZ7QAAAFE"]
[Sat Jan 10 03:04:08.762087 2026] [:error] [pid 1366:tid 1379] [client 13.71.36.82:13347] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aWFRKBmasveKu8_ec1XYRwAAAYo"]
[Sat Jan 10 03:04:09.160155 2026] [:error] [pid 14831:tid 14855] [client 13.71.36.82:3907] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aWFRKfaKOMCmJcAyBm1vzQAAApY"]
[Sat Jan 10 03:04:09.457077 2026] [:error] [pid 14801:tid 14817] [client 13.71.36.82:3938] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWFRKd8UWXrz_OQYgF2apwAAAk4"]
[Sat Jan 10 03:04:09.802605 2026] [:error] [pid 14831:tid 14854] [client 13.71.36.82:3873] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWFRKfaKOMCmJcAyBm1vzwAAApU"]
[Sat Jan 10 03:04:10.104692 2026] [:error] [pid 44848:tid 44853] [client 13.71.36.82:3786] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWFRKqjajoTJAbEk87wZ8AAAAEM"]
[Sat Jan 10 03:04:10.412085 2026] [:error] [pid 14831:tid 14849] [client 13.71.36.82:3896] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWFRKvaKOMCmJcAyBm1v0gAAApA"]
[Sat Jan 10 03:04:10.713610 2026] [:error] [pid 44848:tid 44870] [client 13.71.36.82:3924] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWFRKqjajoTJAbEk87wZ8gAAAFQ"]
[Sat Jan 10 03:04:10.999290 2026] [:error] [pid 14770:tid 14795] [client 13.71.36.82:3819] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWFRKh5QbaVZ-6newJZzVAAAAhc"]
[Sat Jan 10 03:04:11.374146 2026] [:error] [pid 30021:tid 30096] [client 13.71.36.82:13365] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWFRKw_M8aRtsTog5J_gwgAAAM8"]
[Sat Jan 10 03:04:11.675712 2026] [:error] [pid 14872:tid 14883] [client 13.71.36.82:4005] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aWFRK6IUELhgYLNp1sZ0CAAAAsk"]
[Sat Jan 10 03:04:12.015532 2026] [:error] [pid 14770:tid 14773] [client 13.71.36.82:3972] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWFRLB5QbaVZ-6newJZzVQAAAgE"]
[Sat Jan 10 03:04:12.306689 2026] [:error] [pid 14872:tid 14894] [client 13.71.36.82:3912] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWFRLKIUELhgYLNp1sZ0CQAAAtQ"]
[Sat Jan 10 03:04:12.619339 2026] [:error] [pid 30021:tid 30082] [client 13.71.36.82:3929] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWFRLA_M8aRtsTog5J_gxAAAAME"]
[Sat Jan 10 03:04:12.897135 2026] [:error] [pid 1366:tid 1376] [client 13.71.36.82:3936] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aWFRLBmasveKu8_ec1XYSgAAAYc"]
[Sat Jan 10 03:04:13.352375 2026] [:error] [pid 14831:tid 14839] [client 13.71.36.82:3861] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWFRLfaKOMCmJcAyBm1v0wAAAoY"]
[Sat Jan 10 03:04:13.769980 2026] [:error] [pid 30019:tid 30047] [client 13.71.36.82:3840] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWFRLUz3igHGwX5f7IottQAAABc"]
[Sat Jan 10 03:04:14.062966 2026] [:error] [pid 30019:tid 30044] [client 13.71.36.82:4021] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWFRLkz3igHGwX5f7IottgAAABQ"]
[Sat Jan 10 03:04:14.443429 2026] [:error] [pid 30020:tid 30059] [client 13.71.36.82:3903] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aWFRLsrjc66qOisG6L0L6AAAAIU"]
[Sat Jan 10 03:04:14.734570 2026] [:error] [pid 14872:tid 14898] [client 13.71.36.82:4085] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWFRLqIUELhgYLNp1sZ0CwAAAtg"]
[Sat Jan 10 03:04:15.034002 2026] [:error] [pid 30021:tid 30091] [client 13.71.36.82:3797] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWFRLw_M8aRtsTog5J_gxgAAAMo"]
[Sat Jan 10 03:04:15.381145 2026] [:error] [pid 30020:tid 30073] [client 13.71.36.82:3884] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWFRL8rjc66qOisG6L0L6QAAAJM"]
[Sat Jan 10 03:04:15.728732 2026] [:error] [pid 14831:tid 14847] [client 13.71.36.82:3934] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aWFRL_aKOMCmJcAyBm1v1AAAAo4"]
[Sat Jan 10 03:04:16.020971 2026] [:error] [pid 30019:tid 30032] [client 13.71.36.82:4011] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aWFRMEz3igHGwX5f7IotuAAAAAg"]
[Sat Jan 10 03:04:16.323751 2026] [:error] [pid 44848:tid 44866] [client 13.71.36.82:3846] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aWFRMKjajoTJAbEk87wZ-AAAAFA"]
[Sat Jan 10 03:04:16.647860 2026] [:error] [pid 30020:tid 30058] [client 13.71.36.82:3844] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aWFRMMrjc66qOisG6L0L7AAAAIQ"]
[Sat Jan 10 03:04:16.926502 2026] [:error] [pid 30019:tid 30036] [client 13.71.36.82:3982] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aWFRMEz3igHGwX5f7IotuQAAAAw"]
[Sat Jan 10 03:04:17.245660 2026] [:error] [pid 30021:tid 30102] [client 13.71.36.82:4022] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aWFRMQ_M8aRtsTog5J_gzAAAANU"]
[Sat Jan 10 03:04:17.532882 2026] [:error] [pid 30021:tid 30083] [client 13.71.36.82:3845] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aWFRMQ_M8aRtsTog5J_gzgAAAMI"]
[Sat Jan 10 03:04:17.876745 2026] [:error] [pid 14770:tid 14788] [client 13.71.36.82:3856] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aWFRMR5QbaVZ-6newJZzWQAAAhA"]
[Sat Jan 10 03:04:18.192974 2026] [:error] [pid 14801:tid 14816] [client 13.71.36.82:3893] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aWFRMt8UWXrz_OQYgF2aqgAAAk0"]
[Sat Jan 10 03:04:18.526008 2026] [:error] [pid 30021:tid 30089] [client 13.71.36.82:4075] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aWFRMg_M8aRtsTog5J_gzwAAAMg"]
[Sat Jan 10 03:04:18.834652 2026] [:error] [pid 44848:tid 44872] [client 13.71.36.82:3958] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aWFRMqjajoTJAbEk87wZ_AAAAFY"]
[Sat Jan 10 03:04:19.157852 2026] [:error] [pid 30020:tid 30078] [client 13.71.36.82:3883] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aWFRM8rjc66qOisG6L0L8AAAAJg"]
[Sat Jan 10 03:04:19.453752 2026] [:error] [pid 30021:tid 30104] [client 13.71.36.82:3920] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aWFRMw_M8aRtsTog5J_g0AAAANc"]
[Sat Jan 10 03:04:19.786448 2026] [:error] [pid 1366:tid 1374] [client 13.71.36.82:3917] [client 13.71.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWFRMxmasveKu8_ec1XYTwAAAYU"]
[Sat Jan 10 03:04:20.397862 2026] [:error] [pid 14831:tid 14837] [client 13.71.36.82:3792] [client 13.71.36.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aWFRNPaKOMCmJcAyBm1v1gAAAoQ"]
[Sat Jan 10 03:04:20.706257 2026] [:error] [pid 14831:tid 14836] [client 13.71.36.82:4059] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aWFRNPaKOMCmJcAyBm1v1wAAAoM"]
[Sat Jan 10 03:04:21.037869 2026] [:error] [pid 30019:tid 30025] [client 13.71.36.82:3922] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aWFRNUz3igHGwX5f7IotvQAAAAE"]
[Sat Jan 10 03:04:21.369411 2026] [:error] [pid 14831:tid 14840] [client 13.71.36.82:4012] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aWFRNfaKOMCmJcAyBm1v2AAAAoc"]
[Sat Jan 10 03:04:21.711186 2026] [:error] [pid 30019:tid 30035] [client 13.71.36.82:3781] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aWFRNUz3igHGwX5f7IotvwAAAAs"]
[Sat Jan 10 03:04:22.037191 2026] [:error] [pid 1366:tid 1368] [client 13.71.36.82:3827] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aWFRNhmasveKu8_ec1XYUgAAAYA"]
[Sat Jan 10 03:04:22.557635 2026] [:error] [pid 14801:tid 14809] [client 13.71.36.82:13402] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aWFRNt8UWXrz_OQYgF2arQAAAkY"]
[Sat Jan 10 03:04:22.935594 2026] [:error] [pid 30019:tid 30040] [client 13.71.36.82:4065] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aWFRNkz3igHGwX5f7IotwQAAABA"]
[Sat Jan 10 03:04:23.232148 2026] [:error] [pid 44848:tid 44870] [client 13.71.36.82:4091] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aWFRN6jajoTJAbEk87waAgAAAFQ"]
[Sat Jan 10 03:04:23.588836 2026] [:error] [pid 44848:tid 44874] [client 13.71.36.82:3963] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWFRN6jajoTJAbEk87waBQAAAFg"]
[Sat Jan 10 03:04:23.972641 2026] [:error] [pid 30019:tid 30037] [client 13.71.36.82:3819] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWFRN0z3igHGwX5f7IotwgAAAA0"]
[Sat Jan 10 03:04:24.303375 2026] [:error] [pid 30019:tid 30028] [client 13.71.36.82:3885] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWFROEz3igHGwX5f7IotxAAAAAQ"]
[Sat Jan 10 03:04:24.594657 2026] [:error] [pid 14801:tid 14815] [client 13.71.36.82:3876] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aWFRON8UWXrz_OQYgF2argAAAkw"]
[Sat Jan 10 03:04:24.971787 2026] [:error] [pid 14801:tid 14814] [client 13.71.36.82:3948] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aWFRON8UWXrz_OQYgF2arwAAAks"]
[Sat Jan 10 03:04:25.359932 2026] [:error] [pid 14872:tid 14879] [client 13.71.36.82:3841] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aWFROaIUELhgYLNp1sZ0DgAAAsU"]
[Sat Jan 10 03:04:25.771616 2026] [:error] [pid 14831:tid 14852] [client 13.71.36.82:4015] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aWFROfaKOMCmJcAyBm1v2wAAApM"]
[Sat Jan 10 03:04:26.123531 2026] [:error] [pid 14801:tid 14810] [client 13.71.36.82:3959] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aWFROt8UWXrz_OQYgF2asQAAAkc"]
[Sat Jan 10 03:04:26.586877 2026] [:error] [pid 30019:tid 30048] [client 13.71.36.82:13430] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aWFROkz3igHGwX5f7IotyAAAABg"]
[Sat Jan 10 03:04:26.891810 2026] [:error] [pid 1366:tid 1376] [client 13.71.36.82:3937] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aWFROhmasveKu8_ec1XYVwAAAYc"]
[Sat Jan 10 03:04:27.266659 2026] [:error] [pid 44848:tid 44872] [client 13.71.36.82:4024] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aWFRO6jajoTJAbEk87waCAAAAFY"]
[Sat Jan 10 03:04:27.658279 2026] [:error] [pid 1366:tid 1377] [client 13.71.36.82:3953] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aWFROxmasveKu8_ec1XYWQAAAYg"]
[Sat Jan 10 03:04:28.000369 2026] [:error] [pid 14801:tid 14803] [client 13.71.36.82:3783] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aWFRO98UWXrz_OQYgF2atAAAAkA"]
[Sat Jan 10 03:04:28.475712 2026] [:error] [pid 30019:tid 30036] [client 13.71.36.82:3871] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aWFRPEz3igHGwX5f7IotzAAAAAw"]
[Sat Jan 10 03:04:28.780782 2026] [:error] [pid 30019:tid 30026] [client 13.71.36.82:3946] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aWFRPEz3igHGwX5f7IotzQAAAAI"]
[Sat Jan 10 03:04:29.177342 2026] [:error] [pid 1366:tid 1393] [client 13.71.36.82:3866] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aWFRPRmasveKu8_ec1XYWwAAAZg"]
[Sat Jan 10 03:04:29.480065 2026] [:error] [pid 14801:tid 14811] [client 13.71.36.82:4025] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aWFRPd8UWXrz_OQYgF2atQAAAkg"]
[Sat Jan 10 03:04:29.768465 2026] [:error] [pid 14831:tid 14834] [client 13.71.36.82:3878] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aWFRPfaKOMCmJcAyBm1v4QAAAoE"]
[Sat Jan 10 03:04:30.082097 2026] [:error] [pid 14831:tid 14854] [client 13.71.36.82:3927] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aWFRPvaKOMCmJcAyBm1v4wAAApU"]
[Sat Jan 10 03:04:30.423200 2026] [:error] [pid 1366:tid 1389] [client 13.71.36.82:3860] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aWFRPhmasveKu8_ec1XYXAAAAZQ"]
[Sat Jan 10 03:04:30.723212 2026] [:error] [pid 14739:tid 14747] [client 13.71.36.82:3847] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aWFRPl63M6_PkLt_IJKahAAAAcY"]
[Sat Jan 10 03:04:31.095904 2026] [:error] [pid 14801:tid 14825] [client 13.71.36.82:3877] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aWFRP98UWXrz_OQYgF2atwAAAlY"]
[Sat Jan 10 03:04:31.779961 2026] [:error] [pid 30019:tid 30031] [client 13.71.36.82:3961] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aWFRP0z3igHGwX5f7Iot0QAAAAc"]
[Sat Jan 10 03:04:32.159428 2026] [:error] [pid 30019:tid 30025] [client 13.71.36.82:3803] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aWFRQEz3igHGwX5f7Iot0gAAAAE"]
[Sat Jan 10 03:04:32.474431 2026] [:error] [pid 30019:tid 30040] [client 13.71.36.82:3998] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aWFRQEz3igHGwX5f7Iot0wAAABA"]
[Sat Jan 10 03:04:32.796213 2026] [:error] [pid 30020:tid 30071] [client 13.71.36.82:3962] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aWFRQMrjc66qOisG6L0L8QAAAJE"]
[Sat Jan 10 03:04:33.209172 2026] [:error] [pid 14739:tid 14754] [client 13.71.36.82:3910] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aWFRQV63M6_PkLt_IJKahgAAAc0"]
[Sat Jan 10 03:04:34.230747 2026] [:error] [pid 30019:tid 30037] [client 13.71.36.82:3916] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aWFRQkz3igHGwX5f7Iot1QAAAA0"]
[Sat Jan 10 03:04:34.682380 2026] [:error] [pid 44848:tid 44861] [client 13.71.36.82:4093] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aWFRQqjajoTJAbEk87waDwAAAEs"]
[Sat Jan 10 03:04:39.659268 2026] [:error] [pid 14739:tid 14760] [client 13.71.36.82:3898] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aWFRR163M6_PkLt_IJKaqAAAAdM"]
[Sat Jan 10 03:04:39.998931 2026] [:error] [pid 14831:tid 14845] [client 13.71.36.82:3806] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aWFRR_aKOMCmJcAyBm1v6AAAAow"]
[Sat Jan 10 03:04:40.433766 2026] [:error] [pid 30020:tid 30058] [client 13.71.36.82:3852] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aWFRSMrjc66qOisG6L0L9gAAAIQ"]
[Sat Jan 10 03:04:40.858374 2026] [:error] [pid 44848:tid 44850] [client 13.71.36.82:3714] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aWFRSKjajoTJAbEk87waFgAAAEA"]
[Sat Jan 10 03:04:42.188118 2026] [:error] [pid 14831:tid 14846] [client 13.71.36.82:3848] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aWFRSvaKOMCmJcAyBm1v7gAAAo0"]
[Sat Jan 10 03:04:42.716430 2026] [:error] [pid 44848:tid 44859] [client 13.71.36.82:3891] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aWFRSqjajoTJAbEk87waGAAAAEk"]
[Sat Jan 10 03:04:43.651333 2026] [:error] [pid 30020:tid 30061] [client 13.71.36.82:3816] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aWFRS8rjc66qOisG6L0L_AAAAIc"]
[Sat Jan 10 03:04:43.967884 2026] [:error] [pid 30020:tid 30064] [client 13.71.36.82:4030] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aWFRS8rjc66qOisG6L0L_QAAAIo"]
[Sat Jan 10 03:04:44.320416 2026] [:error] [pid 14831:tid 14855] [client 13.71.36.82:3778] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWFRTPaKOMCmJcAyBm1v8gAAApY"]
[Sat Jan 10 03:04:44.638775 2026] [:error] [pid 14801:tid 14804] [client 13.71.36.82:3854] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWFRTN8UWXrz_OQYgF2avgAAAkE"]
[Sat Jan 10 03:04:44.994908 2026] [:error] [pid 14801:tid 14820] [client 13.71.36.82:4019] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWFRTN8UWXrz_OQYgF2avwAAAlE"]
[Sat Jan 10 03:04:45.360666 2026] [:error] [pid 14770:tid 14784] [client 13.71.36.82:3716] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aWFRTR5QbaVZ-6newJZzWgAAAgw"]
[Sat Jan 10 03:04:45.715657 2026] [:error] [pid 14831:tid 14835] [client 13.71.36.82:3784] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aWFRTfaKOMCmJcAyBm1v8wAAAoI"]
[Sat Jan 10 03:04:46.025501 2026] [:error] [pid 14831:tid 14854] [client 13.71.36.82:4014] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aWFRTvaKOMCmJcAyBm1v9AAAApU"]
[Sat Jan 10 03:04:46.364128 2026] [:error] [pid 14872:tid 14889] [client 13.71.36.82:3850] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aWFRTqIUELhgYLNp1sZ0EQAAAs8"]
[Sat Jan 10 03:04:46.716308 2026] [:error] [pid 30021:tid 30096] [client 13.71.36.82:3865] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aWFRTg_M8aRtsTog5J_g1QAAAM8"]
[Sat Jan 10 03:04:47.119764 2026] [:error] [pid 1366:tid 1368] [client 13.71.36.82:3720] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aWFRTxmasveKu8_ec1XYYwAAAYA"]
[Sat Jan 10 03:04:47.443853 2026] [:error] [pid 14770:tid 14782] [client 13.71.36.82:4033] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aWFRTx5QbaVZ-6newJZzXQAAAgo"]
[Sat Jan 10 03:04:47.746915 2026] [:error] [pid 30021:tid 30082] [client 13.71.36.82:3843] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aWFRTw_M8aRtsTog5J_g1gAAAME"]
[Sat Jan 10 03:04:48.032420 2026] [:error] [pid 30019:tid 30028] [client 13.71.36.82:3886] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aWFRUEz3igHGwX5f7Iot5QAAAAQ"]
[Sat Jan 10 03:04:48.393139 2026] [:error] [pid 30019:tid 30029] [client 13.71.36.82:4052] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aWFRUEz3igHGwX5f7Iot6AAAAAU"]
[Sat Jan 10 03:04:48.801021 2026] [:error] [pid 30019:tid 30033] [client 13.71.36.82:3858] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aWFRUEz3igHGwX5f7Iot6QAAAAk"]
[Sat Jan 10 03:04:49.099889 2026] [:error] [pid 30020:tid 30074] [client 13.71.36.82:3944] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aWFRUcrjc66qOisG6L0L_gAAAJQ"]
[Sat Jan 10 03:04:49.536960 2026] [:error] [pid 1366:tid 1371] [client 13.71.36.82:4055] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aWFRURmasveKu8_ec1XYZgAAAYM"]
[Sat Jan 10 03:04:49.835977 2026] [:error] [pid 14801:tid 14815] [client 13.71.36.82:3923] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aWFRUd8UWXrz_OQYgF2awQAAAkw"]
[Sat Jan 10 03:04:50.189217 2026] [:error] [pid 30021:tid 30093] [client 13.71.36.82:3869] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aWFRUg_M8aRtsTog5J_g2AAAAMw"]
[Sat Jan 10 03:04:50.468489 2026] [:error] [pid 30020:tid 30062] [client 13.71.36.82:3859] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aWFRUsrjc66qOisG6L0L_wAAAIg"]
[Sat Jan 10 03:04:50.781802 2026] [:error] [pid 14831:tid 14849] [client 13.71.36.82:3890] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aWFRUvaKOMCmJcAyBm1v9gAAApA"]
[Sat Jan 10 03:04:51.112939 2026] [:error] [pid 14801:tid 14814] [client 13.71.36.82:3881] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aWFRU98UWXrz_OQYgF2awgAAAks"]
[Sat Jan 10 03:04:51.417997 2026] [:error] [pid 14831:tid 14848] [client 13.71.36.82:3804] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aWFRU_aKOMCmJcAyBm1v9wAAAo8"]
[Sat Jan 10 03:04:51.869682 2026] [:error] [pid 14872:tid 14877] [client 13.71.36.82:3800] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aWFRU6IUELhgYLNp1sZ0EgAAAsM"]
[Sat Jan 10 03:04:52.246378 2026] [:error] [pid 14801:tid 14818] [client 13.71.36.82:3900] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aWFRVN8UWXrz_OQYgF2axQAAAk8"]
[Sat Jan 10 03:04:52.664589 2026] [:error] [pid 1366:tid 1381] [client 13.71.36.82:3726] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aWFRVBmasveKu8_ec1XYaQAAAYw"]
[Sat Jan 10 03:04:53.007825 2026] [:error] [pid 30021:tid 30091] [client 13.71.36.82:3814] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aWFRVQ_M8aRtsTog5J_g2wAAAMo"]
[Sat Jan 10 03:04:53.328197 2026] [:error] [pid 14831:tid 14853] [client 13.71.36.82:3821] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aWFRVfaKOMCmJcAyBm1v-AAAApQ"]
[Sat Jan 10 03:04:53.629702 2026] [:error] [pid 1366:tid 1380] [client 13.71.36.82:3782] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aWFRVRmasveKu8_ec1XYbAAAAYs"]
[Sat Jan 10 03:04:53.933832 2026] [:error] [pid 1366:tid 1374] [client 13.71.36.82:4034] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aWFRVRmasveKu8_ec1XYbgAAAYU"]
[Sat Jan 10 03:04:54.272683 2026] [:error] [pid 14872:tid 14875] [client 13.71.36.82:3754] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aWFRVqIUELhgYLNp1sZ0EwAAAsE"]
[Sat Jan 10 03:04:54.560405 2026] [:error] [pid 30021:tid 30103] [client 13.71.36.82:3790] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aWFRVg_M8aRtsTog5J_g3QAAANY"]
[Sat Jan 10 03:04:54.856194 2026] [:error] [pid 30021:tid 30087] [client 13.71.36.82:13364] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aWFRVg_M8aRtsTog5J_g3gAAAMY"]
[Sat Jan 10 03:04:55.312672 2026] [:error] [pid 44848:tid 44865] [client 13.71.36.82:3798] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aWFRV6jajoTJAbEk87waJwAAAE8"]
[Sat Jan 10 03:04:55.746067 2026] [:error] [pid 14801:tid 14826] [client 13.71.36.82:3863] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aWFRV98UWXrz_OQYgF2axwAAAlc"]
[Sat Jan 10 03:04:56.032408 2026] [:error] [pid 44848:tid 44874] [client 13.71.36.82:3964] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aWFRWKjajoTJAbEk87waKAAAAFg"]
[Sat Jan 10 03:04:56.330969 2026] [:error] [pid 14831:tid 14839] [client 13.71.36.82:3815] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aWFRWPaKOMCmJcAyBm1v-QAAAoY"]
[Sat Jan 10 03:04:56.660432 2026] [:error] [pid 14770:tid 14778] [client 13.71.36.82:3723] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWFRWB5QbaVZ-6newJZzXwAAAgY"]
[Sat Jan 10 03:04:56.978345 2026] [:error] [pid 14801:tid 14806] [client 13.71.36.82:3818] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWFRWN8UWXrz_OQYgF2ayQAAAkM"]
[Sat Jan 10 03:04:57.316211 2026] [:error] [pid 14872:tid 14880] [client 13.71.36.82:3888] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWFRWaIUELhgYLNp1sZ0FQAAAsY"]
[Sat Jan 10 03:04:57.627902 2026] [:error] [pid 1366:tid 1370] [client 13.71.36.82:3739] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aWFRWRmasveKu8_ec1XYcwAAAYI"]
[Sat Jan 10 03:04:57.976683 2026] [:error] [pid 1366:tid 1375] [client 13.71.36.82:3839] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aWFRWRmasveKu8_ec1XYdAAAAYY"]
[Sat Jan 10 03:04:58.270421 2026] [:error] [pid 14770:tid 14779] [client 13.71.36.82:4002] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aWFRWh5QbaVZ-6newJZzYAAAAgc"]
[Sat Jan 10 03:04:58.587913 2026] [:error] [pid 14739:tid 14741] [client 13.71.36.82:3908] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aWFRWl63M6_PkLt_IJKaugAAAcA"]
[Sat Jan 10 03:04:58.957911 2026] [:error] [pid 14739:tid 14747] [client 13.71.36.82:3788] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aWFRWl63M6_PkLt_IJKauwAAAcY"]
[Sat Jan 10 03:04:59.239335 2026] [:error] [pid 1366:tid 1376] [client 13.71.36.82:3791] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aWFRWxmasveKu8_ec1XYdQAAAYc"]
[Sat Jan 10 03:04:59.622581 2026] [:error] [pid 30020:tid 30065] [client 13.71.36.82:3887] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aWFRW8rjc66qOisG6L0MAwAAAIs"]
[Sat Jan 10 03:04:59.957866 2026] [:error] [pid 44848:tid 44852] [client 13.71.36.82:3817] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aWFRW6jajoTJAbEk87waLAAAAEI"]
[Sat Jan 10 03:05:00.246328 2026] [:error] [pid 30019:tid 30044] [client 13.71.36.82:3822] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aWFRXEz3igHGwX5f7Iot7QAAABQ"]
[Sat Jan 10 03:05:00.554259 2026] [:error] [pid 14739:tid 14754] [client 13.71.36.82:3951] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aWFRXF63M6_PkLt_IJKavwAAAc0"]
[Sat Jan 10 03:05:01.102032 2026] [:error] [pid 14801:tid 14809] [client 13.71.36.82:3779] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aWFRXd8UWXrz_OQYgF2a0AAAAkY"]
[Sat Jan 10 03:05:01.385843 2026] [:error] [pid 14739:tid 14750] [client 13.71.36.82:3830] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aWFRXV63M6_PkLt_IJKawQAAAck"]
[Sat Jan 10 03:05:01.722675 2026] [:error] [pid 14770:tid 14772] [client 13.71.36.82:3826] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aWFRXR5QbaVZ-6newJZzYgAAAgA"]
[Sat Jan 10 03:05:02.102849 2026] [:error] [pid 30021:tid 30087] [client 13.71.36.82:3931] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aWFRXg_M8aRtsTog5J_g7gAAAMY"]
[Sat Jan 10 03:05:02.457560 2026] [:error] [pid 30021:tid 30102] [client 13.71.36.82:3794] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aWFRXg_M8aRtsTog5J_g7wAAANU"]
[Sat Jan 10 03:05:02.773788 2026] [:error] [pid 30019:tid 30037] [client 13.71.36.82:3889] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aWFRXkz3igHGwX5f7Iot7wAAAA0"]
[Sat Jan 10 03:05:03.052607 2026] [:error] [pid 14872:tid 14888] [client 13.71.36.82:3719] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aWFRX6IUELhgYLNp1sZ0FgAAAs4"]
[Sat Jan 10 03:05:03.325905 2026] [:error] [pid 30019:tid 30029] [client 13.71.36.82:3731] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aWFRX0z3igHGwX5f7Iot8AAAAAU"]
[Sat Jan 10 03:05:03.608451 2026] [:error] [pid 1366:tid 1384] [client 13.71.36.82:3737] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aWFRXxmasveKu8_ec1XYfgAAAY8"]
[Sat Jan 10 03:05:03.893858 2026] [:error] [pid 1366:tid 1368] [client 13.71.36.82:3892] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aWFRXxmasveKu8_ec1XYgQAAAYA"]
[Sat Jan 10 03:05:04.167376 2026] [:error] [pid 14872:tid 14883] [client 13.71.36.82:3857] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aWFRYKIUELhgYLNp1sZ0FwAAAsk"]
[Sat Jan 10 03:05:04.451079 2026] [:error] [pid 14872:tid 14882] [client 13.71.36.82:3967] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aWFRYKIUELhgYLNp1sZ0GAAAAsg"]
[Sat Jan 10 03:05:04.726962 2026] [:error] [pid 1366:tid 1390] [client 13.71.36.82:3867] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aWFRYBmasveKu8_ec1XYhAAAAZU"]
[Sat Jan 10 03:05:05.245760 2026] [:error] [pid 30021:tid 30092] [client 13.71.36.82:3895] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aWFRYQ_M8aRtsTog5J_g8AAAAMs"]
[Sat Jan 10 03:05:05.666308 2026] [:error] [pid 14872:tid 14894] [client 13.71.36.82:3836] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aWFRYaIUELhgYLNp1sZ0GQAAAtQ"]
[Sat Jan 10 03:05:05.985919 2026] [:error] [pid 14872:tid 14881] [client 13.71.36.82:3882] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aWFRYaIUELhgYLNp1sZ0GwAAAsc"]
[Sat Jan 10 03:05:06.427219 2026] [:error] [pid 44848:tid 44854] [client 13.71.36.82:3734] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aWFRYqjajoTJAbEk87waMwAAAEQ"]
[Sat Jan 10 03:05:06.809125 2026] [:error] [pid 14872:tid 14898] [client 13.71.36.82:3812] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aWFRYqIUELhgYLNp1sZ0HQAAAtg"]
[Sat Jan 10 03:05:07.212525 2026] [:error] [pid 14770:tid 14777] [client 13.71.36.82:3825] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aWFRYx5QbaVZ-6newJZzYwAAAgU"]
[Sat Jan 10 03:05:07.529624 2026] [:error] [pid 14872:tid 14887] [client 13.71.36.82:3894] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aWFRY6IUELhgYLNp1sZ0HgAAAs0"]
[Sat Jan 10 03:05:07.839764 2026] [:error] [pid 14831:tid 14836] [client 13.71.36.82:3789] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aWFRY_aKOMCmJcAyBm1wAwAAAoM"]
[Sat Jan 10 03:05:08.156972 2026] [:error] [pid 44848:tid 44867] [client 13.71.36.82:3738] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aWFRZKjajoTJAbEk87waOAAAAFE"]
[Sat Jan 10 03:05:08.446883 2026] [:error] [pid 44848:tid 44874] [client 13.71.36.82:3829] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aWFRZKjajoTJAbEk87waOgAAAFg"]
[Sat Jan 10 03:05:08.870933 2026] [:error] [pid 30021:tid 30105] [client 13.71.36.82:3838] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aWFRZA_M8aRtsTog5J_g8gAAANg"]
[Sat Jan 10 03:05:09.161500 2026] [:error] [pid 14872:tid 14884] [client 13.71.36.82:3935] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aWFRZaIUELhgYLNp1sZ0HwAAAso"]
[Sat Jan 10 03:05:09.461828 2026] [:error] [pid 14872:tid 14879] [client 13.71.36.82:3715] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aWFRZaIUELhgYLNp1sZ0IQAAAsU"]
[Sat Jan 10 03:05:09.760542 2026] [:error] [pid 30019:tid 30047] [client 13.71.36.82:3813] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aWFRZUz3igHGwX5f7Iot9AAAABc"]
[Sat Jan 10 03:05:10.044848 2026] [:error] [pid 30020:tid 30061] [client 13.71.36.82:3732] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aWFRZsrjc66qOisG6L0MCQAAAIc"]
[Sat Jan 10 03:05:10.563953 2026] [:error] [pid 30021:tid 30086] [client 13.71.36.82:4010] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aWFRZg_M8aRtsTog5J_g9AAAAMU"]
[Sat Jan 10 03:05:10.968085 2026] [:error] [pid 30020:tid 30074] [client 13.71.36.82:3824] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aWFRZsrjc66qOisG6L0MDQAAAJQ"]
[Sat Jan 10 03:05:11.397129 2026] [:error] [pid 30020:tid 30075] [client 13.71.36.82:3742] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aWFRZ8rjc66qOisG6L0MDwAAAJU"]
[Sat Jan 10 03:05:11.746524 2026] [:error] [pid 30019:tid 30036] [client 13.71.36.82:3833] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aWFRZ0z3igHGwX5f7Iot9QAAAAw"]
[Sat Jan 10 03:05:12.104253 2026] [:error] [pid 30019:tid 30034] [client 13.71.36.82:3672] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aWFRaEz3igHGwX5f7Iot9gAAAAo"]
[Sat Jan 10 03:05:12.418064 2026] [:error] [pid 30020:tid 30077] [client 13.71.36.82:3730] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aWFRaMrjc66qOisG6L0MEwAAAJc"]
[Sat Jan 10 03:05:12.737628 2026] [:error] [pid 1366:tid 1383] [client 13.71.36.82:3902] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aWFRaBmasveKu8_ec1XYiwAAAY4"]
[Sat Jan 10 03:05:13.079845 2026] [:error] [pid 30019:tid 30025] [client 13.71.36.82:3828] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aWFRaUz3igHGwX5f7Iot-QAAAAE"]
[Sat Jan 10 03:05:13.380261 2026] [:error] [pid 1366:tid 1380] [client 13.71.36.82:3733] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aWFRaRmasveKu8_ec1XYjQAAAYs"]
[Sat Jan 10 03:05:13.738054 2026] [:error] [pid 1366:tid 1392] [client 13.71.36.82:3735] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aWFRaRmasveKu8_ec1XYkgAAAZc"]
[Sat Jan 10 03:05:14.032308 2026] [:error] [pid 1366:tid 1382] [client 13.71.36.82:3947] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aWFRahmasveKu8_ec1XYkwAAAY0"]
[Sat Jan 10 03:05:14.363014 2026] [:error] [pid 1366:tid 1369] [client 13.71.36.82:3913] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aWFRahmasveKu8_ec1XYlQAAAYE"]
[Sat Jan 10 03:05:14.722769 2026] [:error] [pid 30021:tid 30088] [client 13.71.36.82:3755] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aWFRag_M8aRtsTog5J_g9wAAAMc"]
[Sat Jan 10 03:05:14.997195 2026] [:error] [pid 14739:tid 14758] [client 13.71.36.82:3802] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aWFRal63M6_PkLt_IJKaxQAAAdE"]
[Sat Jan 10 03:05:15.326265 2026] [:error] [pid 1366:tid 1371] [client 13.71.36.82:3832] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aWFRaxmasveKu8_ec1XYmgAAAYM"]
[Sat Jan 10 03:05:15.601971 2026] [:error] [pid 14739:tid 14752] [client 13.71.36.82:3665] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aWFRa163M6_PkLt_IJKaxgAAAcs"]
[Sat Jan 10 03:05:16.020059 2026] [:error] [pid 14872:tid 14877] [client 13.71.36.82:3727] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aWFRbKIUELhgYLNp1sZ0JQAAAsM"]
[Sat Jan 10 03:05:16.412584 2026] [:error] [pid 14831:tid 14835] [client 13.71.36.82:3761] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aWFRbPaKOMCmJcAyBm1wBQAAAoI"]
[Sat Jan 10 03:05:16.703908 2026] [:error] [pid 14872:tid 14886] [client 13.71.36.82:3805] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aWFRbKIUELhgYLNp1sZ0JgAAAsw"]
[Sat Jan 10 03:05:17.014609 2026] [:error] [pid 30019:tid 30037] [client 13.71.36.82:3721] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aWFRbUz3igHGwX5f7Iot_AAAAA0"]
[Sat Jan 10 03:05:17.323454 2026] [:error] [pid 30020:tid 30061] [client 13.71.36.82:3780] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aWFRbcrjc66qOisG6L0MFwAAAIc"]
[Sat Jan 10 03:05:17.607398 2026] [:error] [pid 30019:tid 30028] [client 13.71.36.82:3751] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aWFRbUz3igHGwX5f7Iot_QAAAAQ"]
[Sat Jan 10 03:05:18.018860 2026] [:error] [pid 14872:tid 14883] [client 13.71.36.82:3820] [client 13.71.36.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aWFRbqIUELhgYLNp1sZ0KQAAAsk"]
[Sat Jan 10 03:45:43.681352 2026] [:error] [pid 54957:tid 54973] [client 4.214.0.92:21017] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-front.php"] [unique_id "aWFa53LA6Jii4o063sbtqAAAAAM"]
[Sat Jan 10 03:45:44.895379 2026] [:error] [pid 54958:tid 55013] [client 4.214.0.92:3840] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-front.php"] [unique_id "aWFa6Bc_v209EloaNy0KfAAAAFA"]
[Sat Jan 10 03:45:54.449456 2026] [:error] [pid 54960:tid 55033] [client 4.214.0.92:30618] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-front.php"] [unique_id "aWFa8onXUFE8TC7F9KwJ5AAAAIk"]
[Sat Jan 10 03:46:04.352298 2026] [:error] [pid 54957:tid 54994] [client 4.214.0.92:30602] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xenium4.php"] [unique_id "aWFa_HLA6Jii4o063sbt6wAAABg"]
[Sat Jan 10 03:46:05.740544 2026] [:error] [pid 54957:tid 54970] [client 4.214.0.92:25581] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xenium4.php"] [unique_id "aWFa_XLA6Jii4o063sbt7gAAAAA"]
[Sat Jan 10 03:46:13.128961 2026] [:error] [pid 55054:tid 55072] [client 4.214.0.92:26327] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xenium4.php"] [unique_id "aWFbBaIBi6SjlnFF51e7bgAAANA"]
[Sat Jan 10 03:46:25.473978 2026] [:error] [pid 54958:tid 55005] [client 4.214.0.92:54958] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid-file.php"] [unique_id "aWFbERc_v209EloaNy0K8AAAAEg"]
[Sat Jan 10 03:46:27.529850 2026] [:error] [pid 54958:tid 55013] [client 4.214.0.92:25401] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid-file.php"] [unique_id "aWFbExc_v209EloaNy0K9QAAAFA"]
[Sat Jan 10 03:46:28.930468 2026] [:error] [pid 55054:tid 55079] [client 4.214.0.92:3423] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid-file.php"] [unique_id "aWFbFKIBi6SjlnFF51e7hQAAANc"]
[Sat Jan 10 03:46:31.231172 2026] [:error] [pid 54957:tid 54977] [client 4.214.0.92:25278] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-user.php"] [unique_id "aWFbF3LA6Jii4o063sbuRgAAAAc"]
[Sat Jan 10 03:46:34.362437 2026] [:error] [pid 55054:tid 55057] [client 4.214.0.92:22580] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-user.php"] [unique_id "aWFbGqIBi6SjlnFF51e7lgAAAME"]
[Sat Jan 10 03:46:39.823505 2026] [:error] [pid 54957:tid 54973] [client 4.214.0.92:3374] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-user.php"] [unique_id "aWFbH3LA6Jii4o063sbuZgAAAAM"]
[Sat Jan 10 03:46:40.546883 2026] [:error] [pid 54957:tid 54975] [client 4.214.0.92:31999] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-user.php"] [unique_id "aWFbIHLA6Jii4o063sbuZwAAAAU"]
[Sat Jan 10 03:46:49.151813 2026] [:error] [pid 54958:tid 55010] [client 4.214.0.92:19484] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dout.php"] [unique_id "aWFbKRc_v209EloaNy0LFQAAAE0"]
[Sat Jan 10 03:46:50.225898 2026] [:error] [pid 54958:tid 55000] [client 4.214.0.92:26951] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dout.php"] [unique_id "aWFbKhc_v209EloaNy0LFwAAAEM"]
[Sat Jan 10 03:46:53.159145 2026] [:error] [pid 55054:tid 55062] [client 4.214.0.92:25381] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dout.php"] [unique_id "aWFbLaIBi6SjlnFF51e7zAAAAMY"]
[Sat Jan 10 03:46:55.547700 2026] [:error] [pid 55054:tid 55070] [client 4.214.0.92:3095] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dout.php"] [unique_id "aWFbL6IBi6SjlnFF51e70AAAAM4"]
[Sat Jan 10 03:47:06.288585 2026] [:error] [pid 55054:tid 55076] [client 4.214.0.92:26543] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin836.php"] [unique_id "aWFbOqIBi6SjlnFF51e74wAAANQ"]
[Sat Jan 10 03:47:08.723456 2026] [:error] [pid 55054:tid 55064] [client 4.214.0.92:20638] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin836.php"] [unique_id "aWFbPKIBi6SjlnFF51e77gAAAMg"]
[Sat Jan 10 03:47:09.581724 2026] [:error] [pid 55054:tid 55056] [client 4.214.0.92:26360] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin836.php"] [unique_id "aWFbPaIBi6SjlnFF51e78QAAAMA"]
[Sat Jan 10 03:47:13.573285 2026] [:error] [pid 55054:tid 55058] [client 4.214.0.92:25407] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWFbQaIBi6SjlnFF51e7-QAAAMI"]
[Sat Jan 10 03:47:15.342621 2026] [:error] [pid 54958:tid 55003] [client 4.214.0.92:3668] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWFbQxc_v209EloaNy0LSQAAAEY"]
[Sat Jan 10 03:47:21.541930 2026] [:error] [pid 54958:tid 55002] [client 4.214.0.92:3119] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWFbSRc_v209EloaNy0LVAAAAEU"]
[Sat Jan 10 03:47:22.992671 2026] [:error] [pid 55054:tid 55061] [client 4.214.0.92:25598] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aWFbSqIBi6SjlnFF51e8DwAAAMU"]
[Sat Jan 10 03:47:26.932627 2026] [:error] [pid 54957:tid 54973] [client 4.214.0.92:25377] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aWFbTnLA6Jii4o063sbuvAAAAAM"]
[Sat Jan 10 03:47:31.029150 2026] [:error] [pid 55054:tid 55075] [client 4.214.0.92:27322] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aWFbU6IBi6SjlnFF51e8IgAAANM"]
[Sat Jan 10 03:47:40.305895 2026] [:error] [pid 54958:tid 55002] [client 4.214.0.92:25586] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aWFbXBc_v209EloaNy0LdwAAAEU"]
[Sat Jan 10 03:47:41.386240 2026] [:error] [pid 54958:tid 55011] [client 4.214.0.92:3703] [client 4.214.0.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aWFbXRc_v209EloaNy0LeQAAAE4"]
[Sat Jan 10 09:00:02.178956 2026] [:error] [pid 19926:tid 19935] [client 182.44.2.148:47708] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWGkkiS03bq9jOoBYpNJgQAAAQc"]
[Sat Jan 10 12:38:09.246664 2026] [:error] [pid 56852:tid 56869] [client 43.166.245.120:50364] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWHXsXYqmLUNT8pxJ0hoygAAAc0"]
[Sat Jan 10 12:57:09.584828 2026] [:error] [pid 57649:tid 57657] [client 159.223.72.96:57009] [client 159.223.72.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.72.96, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWHcJVcvIwrych3kBnoLtgAAAoY"]
[Sat Jan 10 12:57:10.542348 2026] [:error] [pid 57649:tid 57660] [client 159.223.72.96:57009] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aWHcJlcvIwrych3kBnoLuwAAAok"]
[Sat Jan 10 12:57:11.238220 2026] [:error] [pid 64708:tid 64716] [client 159.223.72.96:57076] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWHcJ9RO36izwpUe5nD70gAAA0Y"]
[Sat Jan 10 12:57:11.934709 2026] [:error] [pid 1188:tid 1204] [client 159.223.72.96:57094] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWHcJ0IMgh0zEyVof4_AGwAAAI0"]
[Sat Jan 10 12:57:12.616748 2026] [:error] [pid 56730:tid 56745] [client 159.223.72.96:57121] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWHcKAzG4vzhoZZC6YkGYgAAAY0"]
[Sat Jan 10 12:57:13.298465 2026] [:error] [pid 20646:tid 20664] [client 159.223.72.96:57136] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWHcKSKwdq_UhOM64b7nbgAAAAk"]
[Sat Jan 10 12:57:13.981328 2026] [:error] [pid 57088:tid 57099] [client 159.223.72.96:57154] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWHcKUGS_UStbgMYQWjlEAAAAgk"]
[Sat Jan 10 12:57:14.665261 2026] [:error] [pid 64708:tid 64722] [client 159.223.72.96:57172] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWHcKtRO36izwpUe5nD71gAAA0w"]
[Sat Jan 10 12:57:15.345907 2026] [:error] [pid 1383:tid 1389] [client 159.223.72.96:57186] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWHcKySbzyQbm27sbcIESAAAA8Q"]
[Sat Jan 10 12:57:16.026039 2026] [:error] [pid 1188:tid 1212] [client 159.223.72.96:57203] [client 159.223.72.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWHcLEIMgh0zEyVof4_AHAAAAJU"]
[Sat Jan 10 15:13:42.288453 2026] [:error] [pid 1125:tid 1134] [client 101.42.46.71:50758] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWH8JnqAWYc4UwRgeOdIBAAAAEc"]
[Sat Jan 10 17:56:28.474926 2026] [autoindex:error] [pid 1125:tid 1139] [client 143.244.141.160:54395] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 18:33:47.795055 2026] [:error] [pid 57649:tid 57652] [client 49.51.253.26:33850] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWIrC1cvIwrych3kBnoqkAAAAoE"]
[Sat Jan 10 21:00:49.820597 2026] [autoindex:error] [pid 1339:tid 1344] [client 143.244.141.160:61867] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Jan 10 23:59:09.118632 2026] [:error] [pid 1383:tid 1400] [client 110.235.219.130:62388] [client 110.235.219.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.235.219.130, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWJ3TSSbzyQbm27sbcKE-gAAA8s"]
[Sun Jan 11 01:57:22.077242 2026] [:error] [pid 1383:tid 1403] [client 138.197.13.155:53925] [client 138.197.13.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aWKTAiSbzyQbm27sbcKaFgAAA84"], referer: binance.com
[Sun Jan 11 06:58:48.409133 2026] [:error] [pid 5272:tid 5282] [client 49.51.195.195:46556] [client 49.51.195.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWLZqFp55bCsukUvYGbQRwAAAMg"]
[Sun Jan 11 16:07:24.616006 2026] [:error] [pid 40191:tid 40196] [client 175.6.217.4:45806] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWNaPEm2BH1CV1p0EUGp9wAAAsM"]
[Sun Jan 11 16:43:48.600719 2026] [:error] [pid 11748:tid 11785] [client 43.135.140.225:45480] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWNixAC5xybrWOCNnobdOgAAAYc"]
[Sun Jan 11 18:27:06.243658 2026] [:error] [pid 35730:tid 35742] [client 4.241.208.191:24953] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aWN6-ji7U_mfHtESQHk2mgAAAco"], referer: https://www.google.de/
[Sun Jan 11 18:27:07.717633 2026] [:error] [pid 11748:tid 11799] [client 4.241.208.191:16206] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aWN6-wC5xybrWOCNnobsfwAAAZU"], referer: https://www.google.com/
[Sun Jan 11 18:27:09.936140 2026] [:error] [pid 5155:tid 5234] [client 4.241.208.191:16193] [client 4.241.208.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.241.208.191, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWN6_VgEKFpNs0_zLGkGtQAAAJI"], referer: https://www.bing.com/
[Sun Jan 11 18:27:10.053136 2026] [:error] [pid 35977:tid 35987] [client 4.241.208.191:16195] [client 4.241.208.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.241.208.191, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWN6_rDST5RMqStLeP1fQwAAAgc"], referer: https://www.bing.com/
[Sun Jan 11 18:27:10.671900 2026] [:error] [pid 5155:tid 5225] [client 4.241.208.191:16193] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aWN6_lgEKFpNs0_zLGkGuAAAAIk"], referer: https://www.google.com/
[Sun Jan 11 18:27:14.696502 2026] [:error] [pid 35730:tid 35750] [client 4.241.208.191:50090] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aWN7Aji7U_mfHtESQHk2qwAAAdI"], referer: https://www.google.de/
[Sun Jan 11 18:27:14.922941 2026] [:error] [pid 11747:tid 11761] [client 4.241.208.191:50768] [client 4.241.208.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aWN7AqRFw84LNpZSk7nP6gAAAUo"], referer: https://www.bing.com/
[Sun Jan 11 21:36:37.705036 2026] [:error] [pid 35730:tid 35735] [client 43.130.131.18:44086] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWOnZTi7U_mfHtESQHlrGwAAAcM"]
[Mon Jan 12 00:13:35.289815 2026] [:error] [pid 11748:tid 11797] [client 43.157.82.252:41182] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWPMLwC5xybrWOCNnoYdAAAAAZM"]
[Mon Jan 12 01:11:51.410048 2026] [:error] [pid 36611:tid 36630] [client 68.218.59.25:1202] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aWPZ1z8oZoZHsoTdjhiHsQAAAlE"]
[Mon Jan 12 01:12:03.437956 2026] [:error] [pid 35977:tid 35990] [client 68.218.59.25:1251] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aWPZ47DST5RMqStLeP2fSAAAAgo"]
[Mon Jan 12 01:12:04.229652 2026] [:error] [pid 35977:tid 35985] [client 68.218.59.25:13212] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aWPZ5LDST5RMqStLeP2fSwAAAgU"]
[Mon Jan 12 01:12:08.263619 2026] [:error] [pid 5272:tid 5287] [client 68.218.59.25:10863] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWPZ6Fp55bCsukUvYGailAAAAM0"]
[Mon Jan 12 01:12:09.558384 2026] [:error] [pid 60999:tid 61022] [client 68.218.59.25:8104] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWPZ6VqLNvGnTVjR-ZVrCgAAApU"]
[Mon Jan 12 01:12:10.675299 2026] [:error] [pid 60999:tid 61021] [client 68.218.59.25:8070] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWPZ6lqLNvGnTVjR-ZVrCwAAApQ"]
[Mon Jan 12 01:12:13.177594 2026] [:error] [pid 5272:tid 5279] [client 68.218.59.25:10822] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aWPZ7Vp55bCsukUvYGailgAAAMU"]
[Mon Jan 12 01:12:15.205269 2026] [:error] [pid 5152:tid 5178] [client 68.218.59.25:8105] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/check.php"] [unique_id "aWPZ7xm0axGMFrpuXHDBkAAAABA"]
[Mon Jan 12 01:12:25.014854 2026] [:error] [pid 5153:tid 5209] [client 68.218.59.25:7371] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/check.php"] [unique_id "aWPZ-c1QbNSPD9bRi77tfwAAAFQ"]
[Mon Jan 12 01:12:27.344955 2026] [:error] [pid 35977:tid 35989] [client 68.218.59.25:1870] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/check.php"] [unique_id "aWPZ-7DST5RMqStLeP2fVAAAAgk"]
[Mon Jan 12 01:12:34.960109 2026] [:error] [pid 5272:tid 5290] [client 68.218.59.25:30815] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aWPaAlp55bCsukUvYGainAAAANA"]
[Mon Jan 12 01:12:37.008338 2026] [:error] [pid 35730:tid 35738] [client 68.218.59.25:12745] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aWPaBTi7U_mfHtESQHmJqgAAAcY"]
[Mon Jan 12 01:12:39.054410 2026] [:error] [pid 35730:tid 35744] [client 68.218.59.25:12790] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aWPaBzi7U_mfHtESQHmJrAAAAcw"]
[Mon Jan 12 01:12:40.615215 2026] [:error] [pid 35730:tid 35739] [client 68.218.59.25:11346] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aWPaCDi7U_mfHtESQHmJrQAAAcc"]
[Mon Jan 12 01:12:41.162580 2026] [:error] [pid 36611:tid 36628] [client 68.218.59.25:8698] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inject.php"] [unique_id "aWPaCT8oZoZHsoTdjhiHzAAAAk8"]
[Mon Jan 12 01:12:41.523383 2026] [:error] [pid 36611:tid 36634] [client 68.218.59.25:30790] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inject.php"] [unique_id "aWPaCT8oZoZHsoTdjhiHzgAAAlU"]
[Mon Jan 12 01:12:46.520269 2026] [:error] [pid 60999:tid 61025] [client 68.218.59.25:11379] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inject.php"] [unique_id "aWPaDlqLNvGnTVjR-ZVrGQAAApg"]
[Mon Jan 12 01:12:48.896020 2026] [:error] [pid 55541:tid 55616] [client 68.218.59.25:8688] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inject.php"] [unique_id "aWPaEMfkoYofAPYb0XYL1wAAAQQ"]
[Mon Jan 12 01:12:50.474402 2026] [:error] [pid 5152:tid 5168] [client 68.218.59.25:7538] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aWPaEhm0axGMFrpuXHDBrAAAAAY"]
[Mon Jan 12 01:12:53.695075 2026] [:error] [pid 60999:tid 61013] [client 68.218.59.25:30943] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aWPaFVqLNvGnTVjR-ZVrKgAAAow"]
[Mon Jan 12 01:12:55.082165 2026] [:error] [pid 5153:tid 5213] [client 68.218.59.25:1528] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aWPaF81QbNSPD9bRi77tpgAAAFg"]
[Mon Jan 12 01:12:56.079181 2026] [:error] [pid 35730:tid 35749] [client 68.218.59.25:12003] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aWPaGDi7U_mfHtESQHmJsQAAAdE"]
[Mon Jan 12 01:12:58.486745 2026] [:error] [pid 5152:tid 5185] [client 68.218.59.25:8655] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aWPaGhm0axGMFrpuXHDBrwAAABc"]
[Mon Jan 12 01:13:00.483673 2026] [:error] [pid 60999:tid 61010] [client 68.218.59.25:8644] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aWPaHFqLNvGnTVjR-ZVrLQAAAok"]
[Mon Jan 12 01:13:01.910676 2026] [:error] [pid 5152:tid 5174] [client 68.218.59.25:13033] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aWPaHRm0axGMFrpuXHDBsQAAAAw"]
[Mon Jan 12 01:13:02.786295 2026] [:error] [pid 60999:tid 61020] [client 68.218.59.25:8727] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aWPaHlqLNvGnTVjR-ZVrLgAAApM"]
[Mon Jan 12 01:13:05.441957 2026] [:error] [pid 5153:tid 5209] [client 68.218.59.25:13879] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aWPaIc1QbNSPD9bRi77trAAAAFQ"]
[Mon Jan 12 01:13:05.940083 2026] [:error] [pid 55541:tid 55619] [client 68.218.59.25:8930] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/999.php"] [unique_id "aWPaIcfkoYofAPYb0XYL2wAAAQc"]
[Mon Jan 12 01:13:17.170070 2026] [:error] [pid 60999:tid 61015] [client 68.218.59.25:30995] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/999.php"] [unique_id "aWPaLVqLNvGnTVjR-ZVrMAAAAo4"]
[Mon Jan 12 01:13:26.830308 2026] [:error] [pid 35730:tid 35754] [client 68.218.59.25:13453] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aWPaNji7U_mfHtESQHmJuQAAAdY"]
[Mon Jan 12 01:13:31.514226 2026] [:error] [pid 5153:tid 5204] [client 68.218.59.25:12972] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aWPaO81QbNSPD9bRi77txgAAAE8"]
[Mon Jan 12 01:13:33.348004 2026] [:error] [pid 55541:tid 55612] [client 68.218.59.25:29096] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aWPaPcfkoYofAPYb0XYL3QAAAQA"]
[Mon Jan 12 01:13:37.827969 2026] [:error] [pid 36611:tid 36613] [client 68.218.59.25:11019] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aWPaQT8oZoZHsoTdjhiH3wAAAkA"]
[Mon Jan 12 01:13:42.069081 2026] [:error] [pid 60999:tid 61003] [client 68.218.59.25:12935] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/data.php"] [unique_id "aWPaRlqLNvGnTVjR-ZVrRAAAAoI"]
[Mon Jan 12 01:13:45.297266 2026] [:error] [pid 60999:tid 61007] [client 68.218.59.25:12930] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/data.php"] [unique_id "aWPaSVqLNvGnTVjR-ZVrRQAAAoY"]
[Mon Jan 12 01:13:48.567926 2026] [:error] [pid 36611:tid 36622] [client 68.218.59.25:11026] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/data.php"] [unique_id "aWPaTD8oZoZHsoTdjhiH5wAAAkk"]
[Mon Jan 12 01:14:08.875601 2026] [:error] [pid 60999:tid 61022] [client 68.218.59.25:10765] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aWPaYFqLNvGnTVjR-ZVrWgAAApU"]
[Mon Jan 12 01:14:09.567074 2026] [:error] [pid 5153:tid 5190] [client 68.218.59.25:9941] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aWPaYc1QbNSPD9bRi77t1gAAAEE"]
[Mon Jan 12 01:14:10.499943 2026] [:error] [pid 35730:tid 35753] [client 68.218.59.25:9243] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aWPaYji7U_mfHtESQHmJwwAAAdU"]
[Mon Jan 12 01:14:11.841399 2026] [:error] [pid 60999:tid 61013] [client 68.218.59.25:1665] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aWPaY1qLNvGnTVjR-ZVrWwAAAow"]
[Mon Jan 12 01:14:13.480278 2026] [:error] [pid 35730:tid 35754] [client 68.218.59.25:7484] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.exe"] [unique_id "aWPaZTi7U_mfHtESQHmJxAAAAdY"]
[Mon Jan 12 01:14:14.181449 2026] [:error] [pid 36611:tid 36619] [client 68.218.59.25:7465] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.exe"] [unique_id "aWPaZj8oZoZHsoTdjhiIFQAAAkY"]
[Mon Jan 12 01:14:14.715249 2026] [:error] [pid 36611:tid 36618] [client 68.218.59.25:1670] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.exe"] [unique_id "aWPaZj8oZoZHsoTdjhiIGAAAAkU"]
[Mon Jan 12 01:14:15.314468 2026] [:error] [pid 60999:tid 61023] [client 68.218.59.25:9249] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.exe"] [unique_id "aWPaZ1qLNvGnTVjR-ZVrXQAAApY"]
[Mon Jan 12 01:14:30.169066 2026] [:error] [pid 5152:tid 5183] [client 68.218.59.25:7436] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "aWPadhm0axGMFrpuXHDBywAAABU"]
[Mon Jan 12 01:14:45.007868 2026] [:error] [pid 5155:tid 5223] [client 68.218.59.25:1304] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aWPahVgEKFpNs0_zLGlDtQAAAIc"]
[Mon Jan 12 01:15:00.895677 2026] [:error] [pid 5153:tid 5204] [client 68.218.59.25:10250] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.phpquebecoils.com"] [unique_id "aWPalM1QbNSPD9bRi77uAAAAAE8"]
[Mon Jan 12 01:15:05.403676 2026] [:error] [pid 60999:tid 61016] [client 68.218.59.25:8565] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.phpquebecoils.com"] [unique_id "aWPamVqLNvGnTVjR-ZVrbQAAAo8"]
[Mon Jan 12 01:15:07.377350 2026] [:error] [pid 36611:tid 36629] [client 68.218.59.25:8438] [client 68.218.59.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.phpquebecoils.com"] [unique_id "aWPamz8oZoZHsoTdjhiIRQAAAlA"]
[Mon Jan 12 01:15:09.138407 2026] [:error] [pid 35730:tid 35733] [client 68.218.59.25:10255] [client 68.218.59.25] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".phpquebecoils.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/info.phpquebecoils.com"] [unique_id "aWPanTi7U_mfHtESQHmJ5wAAAcE"]
[Mon Jan 12 01:51:29.656432 2026] [:error] [pid 5272:tid 5286] [client 34.132.119.42:50217] [client 34.132.119.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.132.119.42, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWPjIVp55bCsukUvYGamFgAAAMw"]
[Mon Jan 12 01:51:29.867769 2026] [:error] [pid 5272:tid 5293] [client 34.132.119.42:50217] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWPjIVp55bCsukUvYGamGQAAANM"]
[Mon Jan 12 01:51:30.834219 2026] [:error] [pid 55541:tid 55629] [client 34.132.119.42:65165] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aWPjIsfkoYofAPYb0XYQVgAAARE"]
[Mon Jan 12 01:51:31.811331 2026] [:error] [pid 35977:tid 35992] [client 34.132.119.42:56984] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aWPjI7DST5RMqStLeP2jEAAAAgw"]
[Mon Jan 12 01:51:32.609786 2026] [:error] [pid 5152:tid 5168] [client 34.132.119.42:61167] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aWPjJBm0axGMFrpuXHDFlAAAAAY"]
[Mon Jan 12 01:51:33.427642 2026] [:error] [pid 55541:tid 55636] [client 34.132.119.42:56374] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aWPjJcfkoYofAPYb0XYQYQAAARg"]
[Mon Jan 12 01:51:34.298158 2026] [:error] [pid 40191:tid 40204] [client 34.132.119.42:60417] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWPjJkm2BH1CV1p0EUH5CgAAAss"]
[Mon Jan 12 01:51:35.241272 2026] [:error] [pid 5272:tid 5283] [client 34.132.119.42:57143] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWPjJ1p55bCsukUvYGamHgAAAMk"]
[Mon Jan 12 01:51:36.216205 2026] [:error] [pid 5272:tid 5296] [client 34.132.119.42:54854] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWPjKFp55bCsukUvYGamIAAAANY"]
[Mon Jan 12 01:51:37.217957 2026] [:error] [pid 35730:tid 35750] [client 34.132.119.42:62085] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWPjKTi7U_mfHtESQHmNaAAAAdI"]
[Mon Jan 12 01:51:38.121140 2026] [:error] [pid 35730:tid 35732] [client 34.132.119.42:49156] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWPjKji7U_mfHtESQHmNbAAAAcA"]
[Mon Jan 12 01:51:39.035895 2026] [:error] [pid 5153:tid 5202] [client 34.132.119.42:56914] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWPjK81QbNSPD9bRi771GAAAAE0"]
[Mon Jan 12 01:51:39.991756 2026] [:error] [pid 5153:tid 5198] [client 34.132.119.42:56421] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWPjK81QbNSPD9bRi771HAAAAEk"]
[Mon Jan 12 01:51:40.911641 2026] [:error] [pid 5272:tid 5282] [client 34.132.119.42:61071] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWPjLFp55bCsukUvYGamJAAAAMg"]
[Mon Jan 12 01:51:41.736013 2026] [:error] [pid 5272:tid 5294] [client 34.132.119.42:50696] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWPjLVp55bCsukUvYGamJgAAANQ"]
[Mon Jan 12 01:51:42.565645 2026] [:error] [pid 35977:tid 35986] [client 34.132.119.42:62718] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWPjLrDST5RMqStLeP2jFQAAAgY"]
[Mon Jan 12 01:51:43.471075 2026] [:error] [pid 5152:tid 5178] [client 34.132.119.42:59065] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWPjLxm0axGMFrpuXHDFoAAAABA"]
[Mon Jan 12 01:51:44.334174 2026] [:error] [pid 5153:tid 5207] [client 34.132.119.42:64098] [client 34.132.119.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWPjMM1QbNSPD9bRi771HwAAAFI"]
[Mon Jan 12 05:09:11.602812 2026] [:error] [pid 48213:tid 48238] [client 43.157.170.13:32912] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWQRd2RmaItaLCBvAhgnKQAAANc"]
[Mon Jan 12 05:34:43.563752 2026] [:error] [pid 48213:tid 48228] [client 152.249.9.145:49706] [client 152.249.9.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.249.9.145, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWQXc2RmaItaLCBvAhgx3AAAAM0"]
[Mon Jan 12 15:12:29.321335 2026] [:error] [pid 51956:tid 51975] [client 43.153.73.200:32928] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWSe3Ub_j3zpZfEgGM8BfQAAAtE"]
[Mon Jan 12 17:00:40.559665 2026] [:error] [pid 9303:tid 9309] [client 182.42.110.255:52639] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWS4ONEoWhpeQ69gVtHDRAAAAUM"]
[Mon Jan 12 20:03:23.335049 2026] [:error] [pid 51863:tid 51886] [client 167.172.235.216:57240] [client 167.172.235.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aWTjCz2-QXSEuiZdYYZqkwAAAhM"], referer: binance.com
[Mon Jan 12 21:24:39.822599 2026] [:error] [pid 51637:tid 51654] [client 34.148.104.49:51658] [client 34.148.104.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.104.49, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWT2F3rTvTmO_ovDgVDkJAAAAYs"]
[Mon Jan 12 21:24:41.373308 2026] [:error] [pid 51637:tid 51655] [client 34.148.104.49:51658] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWT2GXrTvTmO_ovDgVDkLAAAAYw"]
[Mon Jan 12 21:24:42.219790 2026] [:error] [pid 51863:tid 51883] [client 34.148.104.49:54341] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWT2Gj2-QXSEuiZdYYZx_wAAAhA"]
[Mon Jan 12 21:24:43.098251 2026] [:error] [pid 51956:tid 51975] [client 34.148.104.49:54543] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWT2G0b_j3zpZfEgGM8q0gAAAtE"]
[Mon Jan 12 21:24:43.983907 2026] [:error] [pid 51986:tid 52029] [client 34.148.104.49:58355] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWT2GxiI5CoFGIbwGZZ0mQAAA04"]
[Mon Jan 12 21:24:44.863855 2026] [:error] [pid 51897:tid 51934] [client 34.148.104.49:59232] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWT2HNwDOJmYnFxYfDUB5AAAAog"]
[Mon Jan 12 21:24:45.733455 2026] [:error] [pid 48213:tid 48231] [client 34.148.104.49:52141] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWT2HWRmaItaLCBvAhgIYAAAANA"]
[Mon Jan 12 21:24:46.592529 2026] [:error] [pid 51863:tid 51874] [client 34.148.104.49:63444] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWT2Hj2-QXSEuiZdYYZyAwAAAgc"]
[Mon Jan 12 21:24:47.432157 2026] [:error] [pid 51863:tid 51889] [client 34.148.104.49:58809] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWT2Hz2-QXSEuiZdYYZyBAAAAhY"]
[Mon Jan 12 21:24:48.284522 2026] [:error] [pid 48106:tid 48180] [client 34.148.104.49:61668] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWT2IO_rz8jTZY4aXpR-BQAAAI0"]
[Mon Jan 12 21:24:49.132657 2026] [:error] [pid 51637:tid 51645] [client 34.148.104.49:50266] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWT2IXrTvTmO_ovDgVDkMgAAAYI"]
[Mon Jan 12 21:24:50.006274 2026] [:error] [pid 9303:tid 9328] [client 34.148.104.49:51448] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWT2ItEoWhpeQ69gVtH44gAAAVY"]
[Mon Jan 12 21:24:50.863759 2026] [:error] [pid 51637:tid 51657] [client 34.148.104.49:60845] [client 34.148.104.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWT2InrTvTmO_ovDgVDkNAAAAY4"]
[Mon Jan 12 22:47:37.128219 2026] [:error] [pid 48105:tid 48148] [client 92.44.24.45:60751] [client 92.44.24.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aWUJiTbe4SdLfSmtJe2kEQAAAEg"]
[Mon Jan 12 22:47:40.640592 2026] [:error] [pid 51863:tid 51889] [client 92.44.24.45:60355] [client 92.44.24.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aWUJjD2-QXSEuiZdYYZ8YAAAAhY"]
[Tue Jan 13 01:58:40.303403 2026] [:error] [pid 48106:tid 48168] [client 136.107.86.209:59141] [client 136.107.86.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.86.209, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWU2UO_rz8jTZY4aXpSbNwAAAIE"]
[Tue Jan 13 01:58:42.163208 2026] [:error] [pid 48106:tid 48186] [client 136.107.86.209:59141] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWU2Uu_rz8jTZY4aXpSbRQAAAJM"]
[Tue Jan 13 01:58:43.063176 2026] [:error] [pid 51897:tid 51946] [client 136.107.86.209:59636] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWU2U9wDOJmYnFxYfDUc8AAAApQ"]
[Tue Jan 13 01:58:43.991837 2026] [:error] [pid 51637:tid 51659] [client 136.107.86.209:65208] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWU2U3rTvTmO_ovDgVAiIwAAAZA"]
[Tue Jan 13 01:58:45.007182 2026] [:error] [pid 48213:tid 48222] [client 136.107.86.209:52247] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWU2VWRmaItaLCBvAhgqfQAAAMc"]
[Tue Jan 13 01:58:45.901650 2026] [:error] [pid 51897:tid 51940] [client 136.107.86.209:51619] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWU2VdwDOJmYnFxYfDUc8gAAAo4"]
[Tue Jan 13 01:58:46.793494 2026] [:error] [pid 9303:tid 9311] [client 136.107.86.209:51820] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWU2VtEoWhpeQ69gVtEiWQAAAUU"]
[Tue Jan 13 01:58:47.886492 2026] [:error] [pid 51896:tid 51906] [client 136.107.86.209:64501] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWU2V92Y52W2afNXn_W0ygAAAkc"]
[Tue Jan 13 01:58:48.814821 2026] [:error] [pid 9303:tid 9326] [client 136.107.86.209:55497] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWU2WNEoWhpeQ69gVtEiWgAAAVQ"]
[Tue Jan 13 01:58:49.748519 2026] [:error] [pid 48106:tid 48177] [client 136.107.86.209:64980] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWU2We_rz8jTZY4aXpSbSgAAAIo"]
[Tue Jan 13 01:58:50.621374 2026] [:error] [pid 51863:tid 51891] [client 136.107.86.209:62806] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWU2Wj2-QXSEuiZdYYaMCgAAAhg"]
[Tue Jan 13 01:58:51.669454 2026] [:error] [pid 51896:tid 51903] [client 136.107.86.209:49928] [client 136.107.86.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWU2W92Y52W2afNXn_W0zgAAAkQ"]
[Tue Jan 13 02:46:50.006023 2026] [:error] [pid 48105:tid 48151] [client 43.167.232.38:40556] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWVBmjbe4SdLfSmtJe3AsAAAAEs"]
[Tue Jan 13 03:37:51.471532 2026] [autoindex:error] [pid 57653:tid 57669] [client 64.225.13.143:58961] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Jan 13 05:26:55.352822 2026] [:error] [pid 57660:tid 57737] [client 43.157.52.37:44076] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWVnH9MDflPZjoqTTeFJWwAAAJQ"]
[Tue Jan 13 05:41:20.244191 2026] [:error] [pid 57653:tid 57673] [client 1.15.52.154:36952] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWVqgIVjCK8w3mABKuGb_wAAAAs"]
[Tue Jan 13 08:53:41.357967 2026] [:error] [pid 26395:tid 26419] [client 112.202.111.177:59055] [client 112.202.111.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.202.111.177, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWWXlZhRkuVub9GmnFg7swAAARY"]
[Tue Jan 13 11:41:55.035786 2026] [:error] [pid 22485:tid 22499] [client 180.110.203.108:35692] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWW_AxzzbghmKib9ie9y8gAAAYw"]
[Tue Jan 13 12:35:05.481761 2026] [:error] [pid 22425:tid 22433] [client 43.164.197.209:50872] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWXLeXLEE_SEuOZ0WBRsYwAAAII"]
[Tue Jan 13 19:35:06.948774 2026] [:error] [pid 33727:tid 33752] [client 104.28.235.60:45933] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aWYt6qHONsygso2w0OPO0QAAARc"]
[Tue Jan 13 19:35:07.362624 2026] [:error] [pid 22425:tid 22447] [client 104.28.235.60:45934] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/style.php"] [unique_id "aWYt63LEE_SEuOZ0WBTh5QAAAJA"]
[Tue Jan 13 19:35:10.783816 2026] [:error] [pid 33727:tid 33743] [client 104.28.235.60:45941] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aWYt7qHONsygso2w0OPO2gAAAQ4"]
[Tue Jan 13 19:35:14.209934 2026] [:error] [pid 22389:tid 22405] [client 104.28.235.60:45757] [client 104.28.235.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/style.php"] [unique_id "aWYt8iLIB_8b411qalJERAAAAU4"]
[Tue Jan 13 19:43:24.522342 2026] [:error] [pid 22425:tid 22432] [client 150.109.119.38:43324] [client 150.109.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWYv3HLEE_SEuOZ0WBTjwwAAAIE"]
[Wed Jan 14 00:18:35.776895 2026] [:error] [pid 63844:tid 63904] [client 119.96.24.54:60034] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWZwW0L9rjD8EK1UiLn_7gAAAMM"]
[Wed Jan 14 00:55:00.585601 2026] [:error] [pid 25809:tid 25834] [client 172.68.194.152:11045] [client 172.68.194.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aWZ45I9SDqNJ9R9VfZDzZQAAAFc"]
[Wed Jan 14 01:12:07.901691 2026] [:error] [pid 63843:tid 63876] [client 140.245.117.185:64553] [client 140.245.117.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWZ854qxEwB7D1-DxXfccgAAAII"]
[Wed Jan 14 01:12:08.289371 2026] [:error] [pid 63843:tid 63876] [client 140.245.117.185:61959] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aWZ86IqxEwB7D1-DxXfcfAAAAII"]
[Wed Jan 14 01:12:08.675199 2026] [:error] [pid 63842:tid 63858] [client 140.245.117.185:65241] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "aWZ86G0zPTD54ET7u1kmSgAAAUw"]
[Wed Jan 14 02:01:00.313402 2026] [:error] [pid 63843:tid 63877] [client 4.194.112.230:56087] [client 4.194.112.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWaIXIqxEwB7D1-DxXfrQAAAAIM"], referer: https://www.google.co.uk/
[Wed Jan 14 02:01:00.681842 2026] [:error] [pid 25809:tid 25834] [client 4.194.112.230:61777] [client 4.194.112.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWaIXI9SDqNJ9R9VfZAH8wAAAFc"], referer: https://www.google.de/
[Wed Jan 14 02:01:00.856475 2026] [:error] [pid 63931:tid 63957] [client 4.194.112.230:56102] [client 4.194.112.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWaIXNVnG0cQj3cwmW9VdwAAABg"], referer: https://www.google.de/
[Wed Jan 14 02:35:55.728768 2026] [autoindex:error] [pid 63842:tid 63856] [client 4.214.0.249:7559] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/assets/images/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Wed Jan 14 02:36:08.250702 2026] [:error] [pid 63842:tid 63869] [client 4.214.0.249:17314] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aWaQmG0zPTD54ET7u1k5-QAAAVc"], referer: https://www.yahoo.com/
[Wed Jan 14 02:36:08.734890 2026] [:error] [pid 43494:tid 43519] [client 4.214.0.249:15556] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWaQmMiBIyHKw4YELOkWXwAAAZA"], referer: https://www.google.de/
[Wed Jan 14 02:36:09.213474 2026] [:error] [pid 43385:tid 43411] [client 4.214.0.249:39379] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aWaQmcFJIMneckmN0mr7agAAAQ8"], referer: https://www.google.com/
[Wed Jan 14 02:36:09.439971 2026] [:error] [pid 43385:tid 43417] [client 4.214.0.249:64716] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWaQmcFJIMneckmN0mr7awAAARU"], referer: https://www.bing.com/
[Wed Jan 14 02:36:09.918511 2026] [:error] [pid 63931:tid 63950] [client 4.214.0.249:18718] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aWaQmdVnG0cQj3cwmW9kPgAAABE"], referer: https://www.google.de/
[Wed Jan 14 02:36:10.147810 2026] [:error] [pid 63842:tid 63858] [client 4.214.0.249:8114] [client 4.214.0.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aWaQmm0zPTD54ET7u1k5_QAAAUw"], referer: https://duckduckgo.com/
[Wed Jan 14 02:36:11.120320 2026] [:error] [pid 63931:tid 63957] [client 4.214.0.249:41801] [client 4.214.0.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.214.0.249, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWaQm9VnG0cQj3cwmW9kRgAAABg"], referer: https://duckduckgo.com/
[Wed Jan 14 02:36:11.237743 2026] [:error] [pid 63842:tid 63862] [client 4.214.0.249:7559] [client 4.214.0.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.214.0.249, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWaQm20zPTD54ET7u1k6AQAAAVA"], referer: https://duckduckgo.com/
[Wed Jan 14 04:39:20.869985 2026] [:error] [pid 24601:tid 24631] [client 4.217.232.162:15745] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWateECtWkZ9rlKW5n9-BwAAABU"], referer: https://www.google.co.uk/
[Wed Jan 14 04:39:21.457250 2026] [:error] [pid 59074:tid 59083] [client 4.217.232.162:15761] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWateU_KrJ818pzhB3xfnQAAAkc"], referer: https://www.yahoo.com/
[Wed Jan 14 04:39:21.732076 2026] [:error] [pid 58699:tid 58724] [client 4.217.232.162:15760] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWateeYdPBtkMLK2SdqkjwAAARY"], referer: https://www.google.co.uk/
[Wed Jan 14 04:39:22.016741 2026] [:error] [pid 24602:tid 24659] [client 4.217.232.162:15874] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/list-item/index.php"] [unique_id "aWatekooYwabcb9R9fw0awAAAFU"], referer: https://www.yahoo.com/
[Wed Jan 14 04:39:23.687476 2026] [:error] [pid 24710:tid 24736] [client 4.217.232.162:15909] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aWate2XBo5bEhDEEhs1WbQAAANg"], referer: https://www.google.co.uk/
[Wed Jan 14 04:39:23.969216 2026] [:error] [pid 58699:tid 58719] [client 4.217.232.162:15891] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aWate-YdPBtkMLK2SdqklAAAARE"], referer: https://duckduckgo.com/
[Wed Jan 14 04:39:24.240260 2026] [:error] [pid 24710:tid 24714] [client 4.217.232.162:15763] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/search/index.php"] [unique_id "aWatfGXBo5bEhDEEhs1WcAAAAMI"], referer: https://duckduckgo.com/
[Wed Jan 14 04:39:24.513188 2026] [:error] [pid 24603:tid 24679] [client 4.217.232.162:15911] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aWatfJPBJGFGN8VT8_SbzAAAAI4"], referer: https://www.google.fr/
[Wed Jan 14 04:39:24.785918 2026] [:error] [pid 58699:tid 58725] [client 4.217.232.162:15828] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aWatfOYdPBtkMLK2SdqkngAAARc"], referer: https://www.google.co.uk/
[Wed Jan 14 04:39:25.058290 2026] [:error] [pid 58977:tid 58983] [client 4.217.232.162:15877] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aWatfblT6ggZLRx9QvD8dwAAAgM"], referer: https://www.yahoo.com/
[Wed Jan 14 06:22:51.259798 2026] [:error] [pid 24601:tid 24621] [client 106.54.62.156:37200] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWbFu0CtWkZ9rlKW5n-JKQAAAAs"]
[Wed Jan 14 07:16:25.297432 2026] [:error] [pid 58901:tid 58932] [client 104.208.97.94:55184] [client 104.208.97.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWbSSb3kQSrcqIWtO0pITgAAAcI"], referer: https://www.google.fr/
[Wed Jan 14 07:16:25.802047 2026] [:error] [pid 24710:tid 24714] [client 104.208.97.94:62319] [client 104.208.97.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/index.php"] [unique_id "aWbSSWXBo5bEhDEEhs1_IAAAAMI"], referer: https://www.bing.com/
[Wed Jan 14 07:16:26.039742 2026] [:error] [pid 58901:tid 58933] [client 104.208.97.94:62303] [client 104.208.97.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/gallery/index.php"] [unique_id "aWbSSr3kQSrcqIWtO0pITwAAAcM"], referer: https://www.bing.com/
[Wed Jan 14 07:45:20.571973 2026] [autoindex:error] [pid 24603:tid 24680] [client 4.217.232.162:38706] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Wed Jan 14 07:45:31.140606 2026] [:error] [pid 24603:tid 24665] [client 4.217.232.162:38706] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWbZG5PBJGFGN8VT8_TAtQAAAIA"], referer: https://duckduckgo.com/
[Wed Jan 14 07:45:31.417818 2026] [:error] [pid 3142:tid 3155] [client 4.217.232.162:59752] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aWbZGxFwJ2_Y5g3eTSqLewAAAsg"], referer: https://www.yahoo.com/
[Wed Jan 14 07:45:31.687744 2026] [:error] [pid 58868:tid 58879] [client 4.217.232.162:52073] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWbZG067yj8PZAmdsbl7sgAAAUk"], referer: https://www.yahoo.com/
[Wed Jan 14 07:45:31.958452 2026] [:error] [pid 3142:tid 3163] [client 4.217.232.162:38757] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aWbZGxFwJ2_Y5g3eTSqLfAAAAtA"], referer: https://www.google.com/
[Wed Jan 14 07:45:38.629076 2026] [:error] [pid 58868:tid 58875] [client 4.217.232.162:44281] [client 4.217.232.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aWbZIk67yj8PZAmdsbl7zAAAAUU"], referer: https://duckduckgo.com/
[Wed Jan 14 07:45:42.155645 2026] [:error] [pid 24602:tid 24662] [client 4.217.232.162:38711] [client 4.217.232.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.217.232.162, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWbZJkooYwabcb9R9fxJrAAAAFg"], referer: https://www.google.de/
[Wed Jan 14 07:45:42.294343 2026] [:error] [pid 24603:tid 24688] [client 4.217.232.162:58936] [client 4.217.232.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.217.232.162, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWbZJpPBJGFGN8VT8_TA2QAAAJc"], referer: https://www.google.de/
[Wed Jan 14 10:13:36.128890 2026] [:error] [pid 37225:tid 37233] [client 43.164.197.209:49152] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWb70OYdRPDSEpBLRUPa6gAAAQU"]
[Wed Jan 14 11:26:56.712005 2026] [:error] [pid 37034:tid 37045] [client 159.89.172.62:63144] [client 159.89.172.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.172.62, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aWcNAPpIliqezwCf6Q0zYAAAAMk"]
[Wed Jan 14 11:26:57.635335 2026] [:error] [pid 19188:tid 19228] [client 159.89.172.62:63265] [client 159.89.172.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.89.172.62, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aWcNAZ4gjaoWMKiTtXtu3gAAAUg"]
[Wed Jan 14 12:32:28.105320 2026] [:error] [pid 19188:tid 19239] [client 46.101.228.196:51946] [client 46.101.228.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.228.196, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aWccXJ4gjaoWMKiTtXt6GwAAAVM"]
[Wed Jan 14 12:32:29.198024 2026] [:error] [pid 37034:tid 37052] [client 46.101.228.196:51990] [client 46.101.228.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.228.196, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aWccXfpIliqezwCf6Q1BeAAAANA"]
[Wed Jan 14 12:46:14.244381 2026] [:error] [pid 37225:tid 37229] [client 59.90.29.203:59689] [client 59.90.29.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.90.29.203, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWcfluYdRPDSEpBLRUMG_wAAAQE"]
[Wed Jan 14 14:48:16.400832 2026] [:error] [pid 8057:tid 8071] [client 43.130.72.177:37074] [client 43.130.72.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWc8MLFNJ5k8MCPHoPXS9QAAAMw"]
[Wed Jan 14 17:24:46.189485 2026] [:error] [pid 21490:tid 21511] [client 43.153.58.28:37570] [client 43.153.58.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWdg3u26AHzy1muKyuciJAAAARI"]
[Wed Jan 14 18:38:04.740997 2026] [:error] [pid 8057:tid 8064] [client 182.42.111.213:37033] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWdyDLFNJ5k8MCPHoPUAaAAAAMU"]
[Wed Jan 14 21:46:47.353006 2026] [:error] [pid 7961:tid 7980] [client 43.164.197.209:57872] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWeeR5jhjzEJ3QX9HuYPYwAAAFE"]
[Wed Jan 14 23:29:18.142328 2026] [:error] [pid 61377:tid 61413] [client 35.227.166.238:56793] [client 35.227.166.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.227.166.238, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWe2Tsx0Xs4tcq6R-WihjQAAAcM"]
[Wed Jan 14 23:29:19.904172 2026] [:error] [pid 61377:tid 61428] [client 35.227.166.238:56793] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWe2T8x0Xs4tcq6R-WihlgAAAdI"]
[Wed Jan 14 23:29:20.665670 2026] [:error] [pid 8057:tid 8068] [client 35.227.166.238:55093] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWe2ULFNJ5k8MCPHoPU0GQAAAMk"]
[Wed Jan 14 23:29:21.414698 2026] [:error] [pid 61468:tid 61491] [client 35.227.166.238:54439] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWe2UdfEBBL2jp9TJvLaKAAAAJQ"]
[Wed Jan 14 23:29:22.150722 2026] [:error] [pid 61468:tid 61484] [client 35.227.166.238:51927] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWe2UtfEBBL2jp9TJvLaKgAAAI0"]
[Wed Jan 14 23:29:22.897454 2026] [:error] [pid 61377:tid 61429] [client 35.227.166.238:62509] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWe2Usx0Xs4tcq6R-WihmQAAAdM"]
[Wed Jan 14 23:29:23.681542 2026] [:error] [pid 7961:tid 7978] [client 35.227.166.238:54456] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWe2U5jhjzEJ3QX9HuYf4QAAAE8"]
[Wed Jan 14 23:29:24.477201 2026] [:error] [pid 7961:tid 7977] [client 35.227.166.238:57699] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWe2VJjhjzEJ3QX9HuYf5QAAAE4"]
[Wed Jan 14 23:29:25.223613 2026] [:error] [pid 7961:tid 7982] [client 35.227.166.238:59021] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWe2VZjhjzEJ3QX9HuYf5wAAAFM"]
[Wed Jan 14 23:29:26.042966 2026] [:error] [pid 7961:tid 7975] [client 35.227.166.238:64483] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWe2VpjhjzEJ3QX9HuYf6gAAAEw"]
[Wed Jan 14 23:29:26.817174 2026] [:error] [pid 61468:tid 61471] [client 35.227.166.238:63286] [client 35.227.166.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWe2VtfEBBL2jp9TJvLaLgAAAIA"]
[Wed Jan 14 23:57:12.068058 2026] [autoindex:error] [pid 7961:tid 7967] [client 38.242.213.228:57353] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Jan 15 00:16:04.251992 2026] [:error] [pid 23266:tid 23326] [client 43.166.224.244:41914] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWfBRHBtBrkcKkbU8Y6ZHAAAAEQ"]
[Thu Jan 15 03:35:21.767479 2026] [:error] [pid 1605:tid 1632] [client 62.171.152.107:11510] [client 62.171.152.107] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWfv-ZPuLPOlGooY_d4LWAAAABY"]
[Thu Jan 15 06:59:36.033031 2026] [:error] [pid 51807:tid 51833] [client 106.54.62.156:35566] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWgf2MMrH4_ge4gLwN0dEAAAARg"]
[Thu Jan 15 15:42:40.139703 2026] [:error] [pid 5291:tid 5350] [client 103.211.133.142:11898] [client 103.211.133.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.133.142, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWiacDp5twZ54fay3RdiyQAAAFc"]
[Thu Jan 15 19:15:24.595344 2026] [:error] [pid 5292:tid 5359] [client 122.51.236.174:37734] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWjMTGWxK-ai3L9DjxYNXAAAAIQ"]
[Thu Jan 15 20:13:16.829776 2026] [:error] [pid 5292:tid 5375] [client 43.130.72.40:51424] [client 43.130.72.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWjZ3GWxK-ai3L9DjxYkUwAAAJQ"]
[Fri Jan 16 00:25:05.904631 2026] [:error] [pid 5291:tid 5330] [client 34.75.65.25:60389] [client 34.75.65.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.65.25, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWkU4Tp5twZ54fay3RcAIQAAAEM"]
[Fri Jan 16 00:25:07.115861 2026] [:error] [pid 5291:tid 5345] [client 34.75.65.25:60389] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aWkU4zp5twZ54fay3RcAJwAAAFI"]
[Fri Jan 16 00:25:08.014276 2026] [:error] [pid 21666:tid 21680] [client 34.75.65.25:56545] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWkU5KM9zD2y6IZZ4RSZxAAAAYk"]
[Fri Jan 16 00:25:08.959468 2026] [:error] [pid 5291:tid 5338] [client 34.75.65.25:55901] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWkU5Dp5twZ54fay3RcAKgAAAEs"]
[Fri Jan 16 00:25:09.923272 2026] [:error] [pid 51857:tid 51878] [client 34.75.65.25:52623] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWkU5XDlXoqhkNNyf_zxZwAAAVM"]
[Fri Jan 16 00:25:10.761087 2026] [:error] [pid 5290:tid 5303] [client 34.75.65.25:61271] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWkU5jiQRfcmyoePXPfx0gAAAAQ"]
[Fri Jan 16 00:25:11.598959 2026] [:error] [pid 5292:tid 5362] [client 34.75.65.25:57724] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWkU52WxK-ai3L9DjxZZegAAAIc"]
[Fri Jan 16 00:25:12.620152 2026] [:error] [pid 5291:tid 5348] [client 34.75.65.25:51972] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWkU6Dp5twZ54fay3RcALwAAAFU"]
[Fri Jan 16 00:25:13.671177 2026] [:error] [pid 5389:tid 5396] [client 34.75.65.25:60164] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWkU6UkzfklDSWCNrVK1igAAAMU"]
[Fri Jan 16 00:25:14.558977 2026] [:error] [pid 51857:tid 51874] [client 34.75.65.25:49926] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWkU6nDlXoqhkNNyf_zxbgAAAU8"]
[Fri Jan 16 00:25:15.735869 2026] [:error] [pid 21666:tid 21681] [client 34.75.65.25:57417] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWkU66M9zD2y6IZZ4RSZzwAAAYo"]
[Fri Jan 16 00:25:16.672624 2026] [:error] [pid 5389:tid 5414] [client 34.75.65.25:53452] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWkU7EkzfklDSWCNrVK1jgAAANc"]
[Fri Jan 16 00:25:17.937907 2026] [:error] [pid 5292:tid 5355] [client 34.75.65.25:61551] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWkU7WWxK-ai3L9DjxZZfAAAAIA"]
[Fri Jan 16 00:25:18.911631 2026] [:error] [pid 51857:tid 51865] [client 34.75.65.25:53912] [client 34.75.65.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWkU7nDlXoqhkNNyf_zxdwAAAUY"]
[Fri Jan 16 01:40:24.010230 2026] [:error] [pid 51857:tid 51860] [client 117.62.235.53:35314] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWkmiHDlXoqhkNNyf_wL8gAAAUE"]
[Fri Jan 16 03:40:02.127434 2026] [:error] [pid 39127:tid 39183] [client 43.130.106.18:36078] [client 43.130.106.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWlCklvbLl0_TM-dZIfL0gAAAFg"]
[Fri Jan 16 07:40:25.895401 2026] [:error] [pid 43435:tid 43439] [client 223.244.35.77:33909] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWl66cTShPLPoPKNBO1pGAAAAQI"]
[Fri Jan 16 12:10:57.525637 2026] [:error] [pid 9260:tid 9268] [client 43.130.15.147:46042] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWm6UV3AAooR8oZsCwlpcQAAAAY"]
[Fri Jan 16 13:45:04.017377 2026] [:error] [pid 6094:tid 6102] [client 182.44.2.148:53267] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWnQYKXDCegasQDb2u7vXAAAAIU"]
[Fri Jan 16 17:01:23.761177 2026] [:error] [pid 30957:tid 30968] [client 84.247.169.220:54049] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWn-Y92pbRtnni7K9w8qGwAAAEg"]
[Fri Jan 16 17:01:24.980782 2026] [:error] [pid 30925:tid 30934] [client 84.247.169.220:54175] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-json/wc/v3/payment_gateways"] [unique_id "aWn-ZLPyx6TwF5dNaFqiGAAAAYc"]
[Fri Jan 16 17:01:26.255032 2026] [:error] [pid 30957:tid 30964] [client 84.247.169.220:54336] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "aWn-Zt2pbRtnni7K9w8qIgAAAEQ"]
[Fri Jan 16 17:01:27.665208 2026] [:error] [pid 30866:tid 30918] [client 84.247.169.220:54581] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aWn-Zyfb83E1Tbd0nr9rMAAAABc"]
[Fri Jan 16 17:01:29.022625 2026] [:error] [pid 54008:tid 54027] [client 84.247.169.220:54742] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aWn-aceowS6CyLOmCzOi9QAAAJE"]
[Fri Jan 16 19:07:34.685217 2026] [:error] [pid 54008:tid 54026] [client 157.32.129.75:55354] [client 157.32.129.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.32.129.75, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWob9seowS6CyLOmCzPTXQAAAJA"]
[Fri Jan 16 19:53:59.881288 2026] [:error] [pid 54008:tid 54031] [client 106.227.49.113:44791] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWom18eowS6CyLOmCzPj2QAAAJU"]
[Sat Jan 17 02:16:46.579987 2026] [:error] [pid 30925:tid 30931] [client 182.42.105.144:60711] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWqAjrPyx6TwF5dNaForQwAAAYQ"]
[Sat Jan 17 05:47:10.266984 2026] [:error] [pid 31698:tid 31713] [client 43.153.35.128:36112] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWqx3rjKZJSxKAfZqrIYOQAAAQs"]
[Sat Jan 17 08:16:31.589945 2026] [:error] [pid 31223:tid 31233] [client 49.7.227.204:42586] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWrU30Mnpeq0T1sEOlJvdgAAAAA"]
[Sat Jan 17 10:18:38.502497 2026] [:error] [pid 31322:tid 31338] [client 45.159.246.110:35371] [client 45.159.246.110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aWrxfnxOW98yk2MBlypg6AAAAMQ"]
[Sat Jan 17 11:06:46.294734 2026] [:error] [pid 31223:tid 31250] [client 43.159.128.237:57226] [client 43.159.128.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWr8xkMnpeq0T1sEOlKIwgAAABE"]
[Sat Jan 17 17:18:46.033436 2026] [:error] [pid 31223:tid 31244] [client 43.167.239.66:60470] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWtT9kMnpeq0T1sEOlLKqQAAAAs"]
[Sat Jan 17 23:31:03.903229 2026] [:error] [pid 31224:tid 31276] [client 223.185.134.40:32631] [client 223.185.134.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.134.40, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWurNzgpVpEMk8-OQkhXvwAAAE8"]
[Sun Jan 18 00:55:51.096795 2026] [:error] [pid 31224:tid 31285] [client 43.159.149.56:33300] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWu_FzgpVpEMk8-OQkhslQAAAFg"]
[Sun Jan 18 04:55:55.371831 2026] [:error] [pid 12925:tid 13004] [client 170.106.84.136:55080] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWv3W_sBL-4pnmSbzigt8QAAAJA"]
[Sun Jan 18 15:29:45.750752 2026] [:error] [pid 12924:tid 12983] [client 114.96.103.33:53370] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aWyL6Suv3PUo9LR6V6bZ_wAAAFc"]
[Sun Jan 18 18:39:44.385034 2026] [:error] [pid 12923:tid 12941] [client 89.187.187.72:58858] [client 89.187.187.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.187.187.72, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWy4cOsWURrrC-4Rx5J3GQAAAAk"]
[Sun Jan 18 18:39:46.497751 2026] [:error] [pid 12923:tid 12946] [client 89.187.187.72:58858] [client 89.187.187.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWy4cusWURrrC-4Rx5J3JQAAAA4"]
[Sun Jan 18 18:39:47.309613 2026] [:error] [pid 12924:tid 12968] [client 89.187.187.72:58874] [client 89.187.187.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWy4cyuv3PUo9LR6V6YgkQAAAEg"]
[Sun Jan 18 18:39:47.909320 2026] [:error] [pid 12925:tid 13001] [client 89.187.187.72:58880] [client 89.187.187.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWy4c_sBL-4pnmSbzihD5gAAAI0"]
[Sun Jan 18 18:39:48.507121 2026] [:error] [pid 12925:tid 13007] [client 89.187.187.72:58882] [client 89.187.187.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWy4dPsBL-4pnmSbzihD6QAAAJM"]
[Sun Jan 18 18:39:49.115917 2026] [:error] [pid 12923:tid 12954] [client 89.187.187.72:58888] [client 89.187.187.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWy4desWURrrC-4Rx5J3JgAAABY"]
[Sun Jan 18 18:39:49.712111 2026] [:error] [pid 12923:tid 12934] [client 89.187.187.72:58902] [client 89.187.187.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWy4desWURrrC-4Rx5J3JwAAAAI"]
[Sun Jan 18 18:39:50.309767 2026] [:error] [pid 33494:tid 33504] [client 89.187.187.72:58916] [client 89.187.187.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWy4drxmLR_50TtKxDIGNQAAAQY"]
[Sun Jan 18 21:20:32.610263 2026] [:error] [pid 33494:tid 33504] [client 34.121.205.153:54183] [client 34.121.205.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.205.153, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aWzeILxmLR_50TtKxDIzJAAAAQY"]
[Sun Jan 18 21:20:33.354254 2026] [:error] [pid 33494:tid 33520] [client 34.121.205.153:54183] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aWzeIbxmLR_50TtKxDIzJwAAARY"]
[Sun Jan 18 21:20:34.184684 2026] [:error] [pid 37885:tid 37901] [client 34.121.205.153:53422] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aWzeIoIjOL7XA82H72WjQwAAAU0"]
[Sun Jan 18 21:20:34.996469 2026] [:error] [pid 11711:tid 11797] [client 34.121.205.153:62672] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aWzeIutTMvs-MBCRKgcwiwAAA0I"]
[Sun Jan 18 21:20:35.837941 2026] [:error] [pid 11620:tid 11640] [client 34.121.205.153:56809] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aWzeI2CcXLNx7aML8kEzigAAAdE"]
[Sun Jan 18 21:20:36.643607 2026] [:error] [pid 11650:tid 11666] [client 34.121.205.153:60142] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aWzeJEJ_hGOO27rOLtGVfgAAAgw"]
[Sun Jan 18 21:20:37.454478 2026] [:error] [pid 11710:tid 11772] [client 34.121.205.153:63980] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aWzeJWCouWwzZ0YcmFZc8AAAAwQ"]
[Sun Jan 18 21:20:38.267473 2026] [:error] [pid 12925:tid 12994] [client 34.121.205.153:55078] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aWzeJvsBL-4pnmSbzihm0gAAAIY"]
[Sun Jan 18 21:20:39.091698 2026] [:error] [pid 12923:tid 12949] [client 34.121.205.153:61077] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aWzeJ-sWURrrC-4Rx5KZSgAAABE"]
[Sun Jan 18 21:20:39.891664 2026] [:error] [pid 12923:tid 12951] [client 34.121.205.153:55573] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWzeJ-sWURrrC-4Rx5KZTQAAABM"]
[Sun Jan 18 21:20:40.698183 2026] [:error] [pid 11710:tid 11777] [client 34.121.205.153:57642] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWzeKGCouWwzZ0YcmFZc8wAAAwk"]
[Sun Jan 18 21:20:41.514980 2026] [:error] [pid 11650:tid 11675] [client 34.121.205.153:56568] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWzeKUJ_hGOO27rOLtGVhAAAAhU"]
[Sun Jan 18 21:20:42.311127 2026] [:error] [pid 11711:tid 11816] [client 34.121.205.153:55355] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWzeKutTMvs-MBCRKgcwkgAAA1U"]
[Sun Jan 18 21:20:43.122437 2026] [:error] [pid 11711:tid 11809] [client 34.121.205.153:60320] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWzeK-tTMvs-MBCRKgcwlAAAA04"]
[Sun Jan 18 21:20:43.926887 2026] [:error] [pid 11711:tid 11818] [client 34.121.205.153:62165] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWzeK-tTMvs-MBCRKgcwlwAAA1c"]
[Sun Jan 18 21:20:44.764101 2026] [:error] [pid 12923:tid 12937] [client 34.121.205.153:64990] [client 34.121.205.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWzeLOsWURrrC-4Rx5KZUAAAAAU"]
[Sun Jan 18 21:47:40.790902 2026] [:error] [pid 11710:tid 11784] [client 182.42.111.213:59398] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aWzkfGCouWwzZ0YcmFZjHwAAAxA"]
[Mon Jan 19 04:39:12.597293 2026] [:error] [pid 55203:tid 55221] [client 35.196.202.209:49974] [client 35.196.202.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.196.202.209, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aW1E8C-AaXI6_wL-5XwmawAAANA"]
[Mon Jan 19 04:39:13.667567 2026] [:error] [pid 55203:tid 55224] [client 35.196.202.209:49974] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aW1E8S-AaXI6_wL-5XwmbwAAANM"]
[Mon Jan 19 04:39:14.564390 2026] [:error] [pid 55094:tid 55164] [client 35.196.202.209:54929] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aW1E8jQDy8tSKykl7U6hFAAAAIg"]
[Mon Jan 19 04:39:15.487617 2026] [:error] [pid 55203:tid 55210] [client 35.196.202.209:60564] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aW1E8y-AaXI6_wL-5XwmcwAAAMU"]
[Mon Jan 19 04:39:16.403722 2026] [:error] [pid 55203:tid 55220] [client 35.196.202.209:54156] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aW1E9C-AaXI6_wL-5XwmdQAAAM8"]
[Mon Jan 19 04:39:17.334758 2026] [:error] [pid 55094:tid 55173] [client 35.196.202.209:53798] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aW1E9TQDy8tSKykl7U6hGwAAAJE"]
[Mon Jan 19 04:39:18.347720 2026] [:error] [pid 55092:tid 55101] [client 35.196.202.209:55749] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aW1E9s2DE_yLQhxnvwy0XwAAAAA"]
[Mon Jan 19 04:39:19.216772 2026] [:error] [pid 55094:tid 55163] [client 35.196.202.209:58244] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aW1E9zQDy8tSKykl7U6hHgAAAIc"]
[Mon Jan 19 04:39:20.075384 2026] [:error] [pid 27680:tid 27707] [client 35.196.202.209:65501] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aW1E-D8azMyLC3TiDG3n3wAAARA"]
[Mon Jan 19 04:39:21.001228 2026] [:error] [pid 55094:tid 55165] [client 35.196.202.209:49312] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aW1E-TQDy8tSKykl7U6hIQAAAIk"]
[Mon Jan 19 04:39:21.916643 2026] [:error] [pid 55094:tid 55168] [client 35.196.202.209:57799] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aW1E-TQDy8tSKykl7U6hIwAAAIw"]
[Mon Jan 19 04:39:22.805952 2026] [:error] [pid 55094:tid 55176] [client 35.196.202.209:57733] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aW1E-jQDy8tSKykl7U6hJwAAAJQ"]
[Mon Jan 19 04:39:23.646222 2026] [:error] [pid 55093:tid 55151] [client 35.196.202.209:63062] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aW1E-1vejPZGx2OquyX56AAAAFY"]
[Mon Jan 19 04:39:24.544593 2026] [:error] [pid 27680:tid 27709] [client 35.196.202.209:59276] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aW1E_D8azMyLC3TiDG3n4wAAARI"]
[Mon Jan 19 04:39:25.455131 2026] [:error] [pid 55203:tid 55205] [client 35.196.202.209:50857] [client 35.196.202.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aW1E_S-AaXI6_wL-5XwmdwAAAMA"]
[Mon Jan 19 06:03:19.253825 2026] [:error] [pid 55092:tid 55121] [client 101.32.15.141:52740] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aW1Yp82DE_yLQhxnvwzHgwAAABQ"]
[Mon Jan 19 10:00:54.692785 2026] [:error] [pid 1540:tid 1553] [client 1.15.52.154:44376] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aW2QVsXMVWEs9OcVpliNsAAAAAg"]
[Mon Jan 19 10:06:14.855774 2026] [:error] [pid 1540:tid 1549] [client 173.214.167.46:60004] [client 173.214.167.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aW2RlsXMVWEs9OcVpliPTwAAAAQ"]
[Mon Jan 19 10:56:26.280330 2026] [:error] [pid 26604:tid 26617] [client 170.106.163.48:49206] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aW2dWrlAs5zRa8359s29vgAAAMo"]
[Mon Jan 19 12:48:48.588411 2026] [:error] [pid 45563:tid 45621] [client 103.77.106.118:51295] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aW23sJI4--OKA-PqumwOFwAAAIA"]
[Mon Jan 19 12:48:48.964829 2026] [:error] [pid 47089:tid 47105] [client 103.77.106.118:51866] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aW23sBlIzijVNfdIsZ419gAAAQ4"]
[Mon Jan 19 16:06:21.560656 2026] [:error] [pid 47089:tid 47093] [client 49.234.192.248:35644] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aW3l_RlIzijVNfdIsZ6drAAAAQI"]
[Mon Jan 19 16:51:11.943640 2026] [:error] [pid 45562:tid 45595] [client 103.197.240.59:56622] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3wfzoUil_kwpvtDW6ksgAAAEE"]
[Mon Jan 19 16:51:12.551030 2026] [:error] [pid 45562:tid 45607] [client 103.197.240.59:57504] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3wgDoUil_kwpvtDW6ktAAAAE0"]
[Mon Jan 19 16:51:13.150644 2026] [:error] [pid 47089:tid 47106] [client 103.197.240.59:52277] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3wgRlIzijVNfdIsZ6z5QAAAQ8"]
[Mon Jan 19 16:51:14.662845 2026] [:error] [pid 45561:tid 45566] [client 103.197.240.59:57240] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3wgq4ONSZn4nkTayIspgAAAAA"]
[Mon Jan 19 16:51:15.812869 2026] [:error] [pid 47089:tid 47095] [client 103.197.240.59:64309] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3wgxlIzijVNfdIsZ6z7QAAAQQ"]
[Mon Jan 19 16:51:17.025213 2026] [:error] [pid 45563:tid 45622] [client 103.197.240.59:60739] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3whZI4--OKA-PqumxgmwAAAIE"]
[Mon Jan 19 16:54:46.635264 2026] [:error] [pid 45657:tid 45659] [client 103.197.240.59:63659] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3xVg4XFYp2OcwCx-BLXQAAAMA"]
[Mon Jan 19 16:54:47.194520 2026] [:error] [pid 45561:tid 45572] [client 103.197.240.59:61889] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3xV64ONSZn4nkTayItcQAAAAY"]
[Mon Jan 19 16:54:47.750564 2026] [:error] [pid 45657:tid 45678] [client 103.197.240.59:65102] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3xVw4XFYp2OcwCx-BLXwAAANM"]
[Mon Jan 19 16:54:48.879819 2026] [:error] [pid 45562:tid 45608] [client 103.197.240.59:61459] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3xWDoUil_kwpvtDW6lrQAAAE4"]
[Mon Jan 19 16:54:49.984958 2026] [:error] [pid 47089:tid 47097] [client 103.197.240.59:52987] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3xWRlIzijVNfdIsZ61xwAAAQY"]
[Mon Jan 19 16:54:51.134047 2026] [:error] [pid 45561:tid 45583] [client 103.197.240.59:65330] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3xW64ONSZn4nkTayItdQAAABE"]
[Mon Jan 19 16:57:39.172496 2026] [:error] [pid 47089:tid 47095] [client 103.197.240.59:65447] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3yAxlIzijVNfdIsZ64yQAAAQQ"]
[Mon Jan 19 16:57:39.740028 2026] [:error] [pid 45561:tid 45570] [client 103.197.240.59:61003] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3yA64ONSZn4nkTayIvFQAAAAQ"]
[Mon Jan 19 16:57:40.289510 2026] [:error] [pid 47089:tid 47115] [client 103.197.240.59:52870] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3yBBlIzijVNfdIsZ64zAAAARg"]
[Mon Jan 19 16:57:41.438388 2026] [:error] [pid 47089:tid 47099] [client 103.197.240.59:56740] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3yBRlIzijVNfdIsZ64zwAAAQg"]
[Mon Jan 19 16:57:42.554879 2026] [:error] [pid 45563:tid 45627] [client 103.197.240.59:62224] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3yBpI4--OKA-PqumxjUQAAAIY"]
[Mon Jan 19 16:57:43.656982 2026] [:error] [pid 45561:tid 45567] [client 103.197.240.59:58740] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW3yB64ONSZn4nkTayIvHAAAAAE"]
[Mon Jan 19 17:16:32.083372 2026] [:error] [pid 47089:tid 47109] [client 216.118.251.70:54332] [client 216.118.251.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/apps/admin/view/default/images/logo.png"] [unique_id "aW32cBlIzijVNfdIsZ7CaAAAARI"]
[Mon Jan 19 17:16:32.311019 2026] [:error] [pid 45563:tid 45632] [client 112.121.183.178:63343] [client 112.121.183.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Public/ckeditor/styles.js"] [unique_id "aW32cJI4--OKA-PqumxpdwAAAIs"]
[Mon Jan 19 17:25:40.292168 2026] [:error] [pid 45562:tid 45608] [client 112.121.183.178:51211] [client 112.121.183.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Public/ckeditor/styles.js"] [unique_id "aW34lDoUil_kwpvtDW6v0QAAAE4"]
[Mon Jan 19 17:26:52.799966 2026] [:error] [pid 45563:tid 45637] [client 216.118.251.70:60656] [client 216.118.251.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/apps/admin/view/default/images/logo.png"] [unique_id "aW343JI4--OKA-PqumxsQAAAAJA"]
[Mon Jan 19 18:01:20.111475 2026] [:error] [pid 36216:tid 36238] [client 103.197.240.59:64245] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW4A8MIpfKKs9fzB-yBZ_AAAAVQ"]
[Mon Jan 19 18:01:20.678598 2026] [:error] [pid 36216:tid 36239] [client 103.197.240.59:56076] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW4A8MIpfKKs9fzB-yBZ_wAAAVU"]
[Mon Jan 19 18:01:21.258777 2026] [:error] [pid 36216:tid 36233] [client 103.197.240.59:58887] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW4A8cIpfKKs9fzB-yBaAAAAAU8"]
[Mon Jan 19 18:01:22.392838 2026] [:error] [pid 45563:tid 45636] [client 103.197.240.59:58651] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW4A8pI4--OKA-Pqumx4DAAAAI8"]
[Mon Jan 19 18:01:23.502972 2026] [:error] [pid 45561:tid 45581] [client 103.197.240.59:64041] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW4A864ONSZn4nkTayJBeAAAAA8"]
[Mon Jan 19 18:01:24.623665 2026] [:error] [pid 47089:tid 47102] [client 103.197.240.59:58678] [client 103.197.240.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|read)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open|call_user_func)|\\\\$_(?:(?:pos|ge)t|session))\\\\b" at ARGS:<?php $sp2b9876 . [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "70"] [id "211230"] [rev "1"] [msg "COMODO WAF: PHP Injection Attack||www.measureyourcause.com.au|F|2"] [data "Matched Data: proc_open found within ARGS:<?php $sp2b9876 :  proc_open('uname -a', array(0 => array('pipe', 'r'), 1 => array('pipe', 'w'), 2 => array('pipe', 'r')), $sp71a4e7); echo stream_get_contents($sp71a4e7[1]);?>"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aW4A9BlIzijVNfdIsZ7S1AAAAQs"]
[Mon Jan 19 18:20:16.497168 2026] [:error] [pid 36216:tid 36235] [client 103.70.76.30:51791] [client 103.70.76.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/yseoa/login.php"] [unique_id "aW4FYMIpfKKs9fzB-yBl2gAAAVE"]
[Mon Jan 19 22:41:00.172783 2026] [:error] [pid 45657:tid 45677] [client 194.5.83.48:35017] [client 194.5.83.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aW5CfA4XFYp2OcwCx-CndAAAANI"]
[Tue Jan 20 01:05:09.936146 2026] [:error] [pid 45563:tid 45639] [client 101.33.81.73:55764] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aW5kRZI4--OKA-Pqumzv3gAAAJI"]
[Tue Jan 20 02:02:00.205445 2026] [:error] [pid 45657:tid 45677] [client 84.247.169.220:63880] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aW5xmA4XFYp2OcwCx-DPxwAAANI"]
[Tue Jan 20 02:02:01.465463 2026] [:error] [pid 36216:tid 36239] [client 84.247.169.220:63933] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aW5xmcIpfKKs9fzB-yD51QAAAVU"]
[Tue Jan 20 07:44:42.904100 2026] [autoindex:error] [pid 48976:tid 49002] [client 4.190.155.219:32250] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 07:44:46.308247 2026] [:error] [pid 48976:tid 48982] [client 4.190.155.219:32250] [client 4.190.155.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aW7B7hXWmk4jsnRVwQeQcAAAAUQ"]
[Tue Jan 20 07:44:46.842465 2026] [:error] [pid 52634:tid 52655] [client 4.190.155.219:29917] [client 4.190.155.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aW7B7iKLj3OHzdi5v7mwGgAAAdI"]
[Tue Jan 20 07:44:47.392621 2026] [:error] [pid 17622:tid 17689] [client 4.190.155.219:6862] [client 4.190.155.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aW7B7y4cbbp8XKl0AhmCTgAAAIQ"]
[Tue Jan 20 07:44:47.902886 2026] [:error] [pid 52634:tid 52657] [client 4.190.155.219:6844] [client 4.190.155.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aW7B7yKLj3OHzdi5v7mwHAAAAdQ"]
[Tue Jan 20 10:20:12.789816 2026] [:error] [pid 10815:tid 10892] [client 111.172.249.49:47764] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aW7mXA9T_LZs_dIvNQGfKQAAARQ"]
[Tue Jan 20 11:01:41.131778 2026] [:error] [pid 54382:tid 54406] [client 43.157.168.43:55974] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aW7wFUTJlZ9SJ6sBOEtGhwAAABU"]
[Tue Jan 20 13:31:22.236909 2026] [:error] [pid 8416:tid 8422] [client 103.77.107.178:55222] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aW8TKjN6cbQyA2ecQV2ZnQAAAwQ"]
[Tue Jan 20 13:31:22.604747 2026] [:error] [pid 8416:tid 8438] [client 103.77.107.178:56730] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aW8TKjN6cbQyA2ecQV2ZnwAAAxQ"]
[Tue Jan 20 15:26:56.400690 2026] [:error] [pid 8455:tid 8464] [client 43.157.170.126:38406] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aW8uQIJiHdPVtruynXCAxwAAA0c"]
[Tue Jan 20 18:02:46.920897 2026] [:error] [pid 54382:tid 54402] [client 49.51.183.75:47012] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aW9SxkTJlZ9SJ6sBOEuKpQAAABE"]
[Tue Jan 20 21:49:39.775733 2026] [:error] [pid 56326:tid 56341] [client 78.46.215.1:29372] [client 78.46.215.1] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "57.141.14.1_bb694759cd2c22a01c1316c1c32e166b75850636"): Internal error (specific information not available) [hostname "measureyourcause.com.au"] [uri "/index.php"] [unique_id "aW-H8RA6mi8Uwf45Uy8-ngAAAM0"], referer: https://measureyourcause.com.au/
[Tue Jan 20 22:18:40.241508 2026] [:error] [pid 63647:tid 63666] [client 43.167.245.18:53174] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aW-OwFUaYw1xHOoaFFIejQAAAhE"]
[Tue Jan 20 22:57:46.981894 2026] [:error] [pid 56360:tid 56366] [client 223.15.245.170:59139] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aW-X6k1J8CD1rR-wXXttdwAAAQQ"]
[Tue Jan 20 23:03:05.929363 2026] [:error] [pid 63647:tid 63672] [client 64.225.8.2:58858] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aW-ZKVUaYw1xHOoaFFItywAAAhc"]
[Tue Jan 20 23:03:08.345884 2026] [:error] [pid 54259:tid 54294] [client 64.225.8.2:56085] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sftp.json"] [unique_id "aW-ZLA2q1USrePnOoFQKpgAAAJE"]
[Tue Jan 20 23:03:10.705822 2026] [:error] [pid 17295:tid 17301] [client 64.225.8.2:49269] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sftp.json"] [unique_id "aW-ZLvZJhGdrcqZICT-c5QAAAYM"]
[Tue Jan 20 23:03:13.611489 2026] [:error] [pid 17340:tid 17380] [client 64.225.8.2:57738] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ftp-sync.json"] [unique_id "aW-ZMfAsOSYVgw_35t24PQAAAlg"]
[Tue Jan 20 23:03:16.032294 2026] [:error] [pid 54260:tid 54326] [client 64.225.8.2:49717] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ftp.json"] [unique_id "aW-ZNNg7jS3jmpUN0WAuawAAAVI"]
[Tue Jan 20 23:03:18.380684 2026] [:error] [pid 17295:tid 17306] [client 64.225.8.2:58613] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ftp.json"] [unique_id "aW-ZNvZJhGdrcqZICT-c8gAAAYg"]
[Tue Jan 20 23:03:20.571259 2026] [:error] [pid 8455:tid 8465] [client 64.225.8.2:51402] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ftp-config.json"] [unique_id "aW-ZOIJiHdPVtruynXDOtgAAA0g"]
[Tue Jan 20 23:03:22.895709 2026] [:error] [pid 17295:tid 17306] [client 64.225.8.2:59950] [client 64.225.8.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ftp-config.json"] [unique_id "aW-ZOvZJhGdrcqZICT-dAQAAAYg"]
[Tue Jan 20 23:03:25.666373 2026] [:error] [pid 63647:tid 63663] [client 64.225.8.2:52150] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aW-ZPVUaYw1xHOoaFFIt0wAAAg4"]
[Wed Jan 21 00:48:40.414203 2026] [:error] [pid 56326:tid 56341] [client 4.188.251.0:16328] [client 4.188.251.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aW-x6BA6mi8Uwf45Uy9epQAAAM0"]
[Wed Jan 21 00:48:41.320762 2026] [:error] [pid 56360:tid 56368] [client 4.188.251.0:16355] [client 4.188.251.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aW-x6U1J8CD1rR-wXXuFegAAAQY"]
[Wed Jan 21 00:48:42.122438 2026] [:error] [pid 56360:tid 56363] [client 4.188.251.0:16263] [client 4.188.251.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aW-x6k1J8CD1rR-wXXuFfAAAAQE"]
[Wed Jan 21 00:48:44.875089 2026] [:error] [pid 56291:tid 56305] [client 4.188.251.0:16264] [client 4.188.251.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aW-x7LXgW_1T5Nikxa0ccAAAAEo"]
[Wed Jan 21 00:53:20.117801 2026] [:error] [pid 56326:tid 56347] [client 43.157.191.20:52466] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aW-zABA6mi8Uwf45Uy9faAAAANM"]
[Wed Jan 21 03:05:35.088373 2026] [:error] [pid 56291:tid 56299] [client 154.16.49.90:15558] [client 154.16.49.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.16.49.90, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aW_R_7XgW_1T5Nikxa0qJgAAAEQ"]
[Wed Jan 21 03:05:38.615141 2026] [:error] [pid 56291:tid 56311] [client 154.16.49.90:15558] [client 154.16.49.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aW_SArXgW_1T5Nikxa0qLwAAAFA"]
[Wed Jan 21 03:05:39.578159 2026] [:error] [pid 17340:tid 17368] [client 154.16.49.90:16594] [client 154.16.49.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aW_SA_AsOSYVgw_35t3rfwAAAkw"]
[Wed Jan 21 03:05:40.535259 2026] [:error] [pid 17340:tid 17378] [client 154.16.49.90:16799] [client 154.16.49.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aW_SBPAsOSYVgw_35t3rgAAAAlY"]
[Wed Jan 21 03:05:41.492447 2026] [:error] [pid 17340:tid 17371] [client 154.16.49.90:16992] [client 154.16.49.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aW_SBfAsOSYVgw_35t3rggAAAk8"]
[Wed Jan 21 05:05:35.149617 2026] [:error] [pid 21456:tid 21520] [client 182.42.111.156:42573] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aW_uHwKyVQ9Ob2YxRAp-OwAAAII"]
[Wed Jan 21 05:36:48.067595 2026] [:error] [pid 21454:tid 21477] [client 43.157.158.178:33906] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aW_1cDwp5UZmMFzY2bpZ4gAAAA0"]
[Wed Jan 21 05:58:06.407698 2026] [:error] [pid 21455:tid 21506] [client 4.194.34.171:64251] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aW_6bopOKALCSo1URZFK-AAAAE8"]
[Wed Jan 21 05:58:06.760355 2026] [:error] [pid 21454:tid 21469] [client 4.194.34.171:65492] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aW_6bjwp5UZmMFzY2bpdzQAAAAU"]
[Wed Jan 21 05:58:07.122117 2026] [:error] [pid 21454:tid 21471] [client 4.194.34.171:63870] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aW_6bzwp5UZmMFzY2bpd0gAAAAc"]
[Wed Jan 21 05:58:07.472280 2026] [:error] [pid 59863:tid 59878] [client 4.194.34.171:21965] [client 4.194.34.171] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aW_6b7HQ1zVZ4yLuI-zjlAAAAQs"]
[Wed Jan 21 06:05:58.269748 2026] [:error] [pid 21456:tid 21525] [client 103.65.236.149:61056] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aW_8RgKyVQ9Ob2YxRAqNgwAAAIc"]
[Wed Jan 21 12:56:09.528595 2026] [:error] [pid 21455:tid 21509] [client 43.131.45.213:42800] [client 43.131.45.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXBcaYpOKALCSo1URZG8nQAAAFI"]
[Wed Jan 21 15:38:42.516834 2026] [:error] [pid 21563:tid 21584] [client 43.166.238.12:33010] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXCCghZq__dTorabEoxMYAAAANM"]
[Wed Jan 21 17:26:12.296356 2026] [:error] [pid 21456:tid 21522] [client 182.40.104.255:40122] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXCbtAKyVQ9Ob2YxRApW0wAAAIQ"]
[Wed Jan 21 20:12:53.696356 2026] [:error] [pid 21455:tid 21503] [client 35.237.247.32:57862] [client 35.237.247.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.247.32, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXDCxYpOKALCSo1URZEpOAAAAEw"]
[Wed Jan 21 20:12:55.269659 2026] [:error] [pid 21455:tid 21515] [client 35.237.247.32:57862] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aXDCx4pOKALCSo1URZEpPwAAAFg"]
[Wed Jan 21 20:12:56.183980 2026] [:error] [pid 21455:tid 21497] [client 35.237.247.32:51766] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aXDCyIpOKALCSo1URZEpQQAAAEY"]
[Wed Jan 21 20:12:57.097236 2026] [:error] [pid 21455:tid 21513] [client 35.237.247.32:56864] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aXDCyYpOKALCSo1URZEpRAAAAFY"]
[Wed Jan 21 20:12:58.046752 2026] [:error] [pid 59863:tid 59872] [client 35.237.247.32:62288] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aXDCyrHQ1zVZ4yLuI-zOhQAAAQU"]
[Wed Jan 21 20:12:58.992595 2026] [:error] [pid 21563:tid 21585] [client 35.237.247.32:64432] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aXDCyhZq__dTorabEoyDAwAAANQ"]
[Wed Jan 21 20:12:59.993612 2026] [:error] [pid 59863:tid 59880] [client 35.237.247.32:63393] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXDCy7HQ1zVZ4yLuI-zOiwAAAQ0"]
[Wed Jan 21 20:13:00.928991 2026] [:error] [pid 21563:tid 21582] [client 35.237.247.32:51741] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXDCzBZq__dTorabEoyDBQAAANE"]
[Wed Jan 21 20:13:01.907373 2026] [:error] [pid 4382:tid 4408] [client 35.237.247.32:55875] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXDCzZHg0falVG3JFbBLXAAAAZg"]
[Wed Jan 21 20:13:02.939071 2026] [:error] [pid 21454:tid 21465] [client 35.237.247.32:57726] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXDCzjwp5UZmMFzY2bpAawAAAAE"]
[Wed Jan 21 20:13:03.803801 2026] [:error] [pid 4382:tid 4403] [client 35.237.247.32:64825] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXDCz5Hg0falVG3JFbBLYAAAAZM"]
[Wed Jan 21 20:13:04.687190 2026] [:error] [pid 21563:tid 21566] [client 35.237.247.32:60956] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXDC0BZq__dTorabEoyDDAAAAME"]
[Wed Jan 21 20:13:05.550630 2026] [:error] [pid 56352:tid 56375] [client 35.237.247.32:65374] [client 35.237.247.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXDC0dWN6wYNPTU3efUNUAAAAVU"]
[Wed Jan 21 22:42:42.808779 2026] [:error] [pid 21563:tid 21578] [client 43.135.145.77:51666] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXDl4hZq__dTorabEoykXAAAAM0"]
[Thu Jan 22 05:47:46.965408 2026] [:error] [pid 52556:tid 52562] [client 117.62.235.53:33711] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXFJgug4y1NKM4AgfjBqSAAAAMQ"]
[Thu Jan 22 11:47:45.927798 2026] [:error] [pid 52446:tid 52505] [client 182.44.10.67:47376] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXGd4bJ6clMw4kdrHYGk2gAAAFc"]
[Thu Jan 22 11:50:14.599691 2026] [:error] [pid 52447:tid 52531] [client 43.153.10.83:52404] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXGednRLA2NsdGqJzovRlgAAAJY"]
[Thu Jan 22 14:38:38.269273 2026] [:error] [pid 20418:tid 20445] [client 119.28.140.106:59212] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXHF7hahoKEa6eS4cSopQAAAAZc"]
[Thu Jan 22 17:59:15.665397 2026] [:error] [pid 52447:tid 52518] [client 182.42.104.32:60980] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXH083RLA2NsdGqJzosyNwAAAIk"]
[Thu Jan 22 21:16:04.223121 2026] [:error] [pid 52447:tid 52522] [client 152.59.147.70:60450] [client 152.59.147.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.147.70, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXIjFHRLA2NsdGqJzotiAgAAAI0"]
[Thu Jan 22 22:33:01.463115 2026] [proxy_fcgi:error] [pid 52556:tid 52558] [client 95.216.63.67:58384] AH01071: Got error 'Primary script unknown', referer: www.google.com
[Thu Jan 22 23:34:56.880823 2026] [:error] [pid 36083:tid 36109] [client 95.216.63.67:59915] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/woocommerce-payments/readme.txt"] [unique_id "aXJDoJCng2nQoR5iqwrIRAAAAVc"], referer: www.google.com
[Thu Jan 22 23:45:36.938862 2026] [:error] [pid 52445:tid 52473] [client 95.216.63.67:49843] [client 95.216.63.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aXJGIOvMmsFgpSSb5L2k1wAAABM"], referer: www.google.com
[Fri Jan 23 01:42:07.091712 2026] [:error] [pid 27550:tid 27561] [client 34.50.190.13:60154] [client 34.50.190.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aXJhb-OQDPzfV5R2LYR9EQAAAQk"]
[Fri Jan 23 10:27:10.470355 2026] [:error] [pid 11606:tid 11625] [client 162.62.231.139:60378] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXLcflnjAJqfHEQLcsjvPAAAAAo"]
[Fri Jan 23 12:30:55.369377 2026] [:error] [pid 62368:tid 62372] [client 182.44.10.67:49625] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXL5fyeMzKRnyYLMANMVlQAAAQE"]
[Fri Jan 23 13:00:30.564933 2026] [:error] [pid 11606:tid 11615] [client 129.212.186.67:63692] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/administrator/"] [unique_id "aXMAblnjAJqfHEQLcsgc6gAAAAA"]
[Fri Jan 23 13:00:30.959053 2026] [:error] [pid 11606:tid 11617] [client 129.212.186.67:63746] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/administrator/index.php"] [unique_id "aXMAblnjAJqfHEQLcsgc6wAAAAI"]
[Fri Jan 23 13:00:31.353519 2026] [:error] [pid 62368:tid 62384] [client 129.212.186.67:63806] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/administrator/index2.php"] [unique_id "aXMAbyeMzKRnyYLMANMeeAAAAQ0"]
[Fri Jan 23 13:00:31.746068 2026] [:error] [pid 62368:tid 62393] [client 129.212.186.67:63881] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/administrator/index3.php"] [unique_id "aXMAbyeMzKRnyYLMANMeegAAARY"]
[Fri Jan 23 13:00:32.136091 2026] [:error] [pid 11732:tid 11756] [client 129.212.186.67:63988] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/joomla/administrator/"] [unique_id "aXMAcOfd54xxq04JKuMLJQAAANY"]
[Fri Jan 23 13:00:32.528880 2026] [:error] [pid 62368:tid 62374] [client 129.212.186.67:64059] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/administrator/"] [unique_id "aXMAcCeMzKRnyYLMANMefgAAAQM"]
[Fri Jan 23 13:00:32.919645 2026] [:error] [pid 11607:tid 11664] [client 129.212.186.67:64118] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/administrator/"] [unique_id "aXMAcAucTAUsUUzKw5et8wAAAFM"]
[Fri Jan 23 13:00:33.314123 2026] [:error] [pid 11732:tid 11734] [client 129.212.186.67:64174] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/administrator/"] [unique_id "aXMAcefd54xxq04JKuMLKQAAAMA"]
[Fri Jan 23 13:00:33.688279 2026] [:error] [pid 11608:tid 11675] [client 129.212.186.67:64253] [client 129.212.186.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/panel/administrator/"] [unique_id "aXMAcb4alK6RZLlMcto8fQAAAIM"]
[Fri Jan 23 14:36:20.981361 2026] [:error] [pid 11607:tid 11646] [client 212.227.175.43:62719] [client 212.227.175.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aXMW5AucTAUsUUzKw5fHoAAAAEI"], referer: www.google.com
[Fri Jan 23 18:42:44.372079 2026] [:error] [pid 64912:tid 64926] [client 117.62.235.53:38761] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXNQpLem6jVGKqodwtLiHgAAAYw"]
[Fri Jan 23 21:37:40.423374 2026] [:error] [pid 11732:tid 11754] [client 196.177.114.215:56412] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aXN5pOfd54xxq04JKuOP2gAAANQ"]
[Fri Jan 23 21:37:40.436342 2026] [:error] [pid 11608:tid 11680] [client 196.177.114.215:56411] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aXN5pL4alK6RZLlMctrWsgAAAIg"]
[Sat Jan 24 02:55:32.155766 2026] [:error] [pid 1517:tid 1540] [client 119.28.140.106:38068] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXPEJCZNw8-8ydKHCJvu7wAAAdQ"]
[Sat Jan 24 03:22:49.684333 2026] [:error] [pid 41009:tid 41027] [client 179.125.162.202:38112] [client 179.125.162.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.125.162.202, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXPKiWrewfoFUDD3TM0w_QAAANA"]
[Sat Jan 24 07:13:03.322990 2026] [:error] [pid 41009:tid 41014] [client 182.44.10.67:53741] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXQAf2rewfoFUDD3TM2OOgAAAMM"]
[Sat Jan 24 15:39:52.271214 2026] [:error] [pid 22900:tid 22918] [client 43.130.67.33:60844] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXR3SFr6h1PpdlYV7gXN3wAAAQ8"]
[Sat Jan 24 18:39:38.886040 2026] [:error] [pid 41009:tid 41032] [client 43.153.19.83:38142] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXShamrewfoFUDD3TM2P-AAAANU"]
[Sat Jan 24 23:28:53.800458 2026] [:error] [pid 40905:tid 40972] [client 119.28.177.175:47928] [client 119.28.177.175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXTlNV3rUAneNkh7mXDlBwAAAIY"]
[Sun Jan 25 00:57:04.840501 2026] [:error] [pid 40902:tid 40918] [client 64.89.163.25:58481] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXT54ASCceZpurDgOesedQAAAAY"]
[Sun Jan 25 00:57:05.484054 2026] [:error] [pid 60761:tid 60777] [client 64.89.163.25:58696] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXT54VZQvxLvEbXXh9KgQQAAAU0"]
[Sun Jan 25 00:57:06.121588 2026] [:error] [pid 14976:tid 14995] [client 64.89.163.25:58947] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXT54mvdigydYOB2KS-kSgAAAZE"]
[Sun Jan 25 00:57:06.758607 2026] [:error] [pid 40902:tid 40918] [client 64.89.163.25:59161] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXT54gSCceZpurDgOesevwAAAAY"]
[Sun Jan 25 00:57:07.400643 2026] [:error] [pid 60761:tid 60772] [client 64.89.163.25:59425] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXT541ZQvxLvEbXXh9KgpAAAAUg"]
[Sun Jan 25 02:15:24.942026 2026] [:error] [pid 41009:tid 41011] [client 36.41.75.167:53808] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXUMPGrewfoFUDD3TM0WkgAAAMA"]
[Sun Jan 25 02:44:37.822744 2026] [:error] [pid 41009:tid 41022] [client 43.164.195.17:58314] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXUTFWrewfoFUDD3TM0fPQAAAMs"]
[Sun Jan 25 08:17:27.019779 2026] [:error] [pid 53419:tid 53435] [client 117.62.235.53:57240] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXVhFyNxBUypy_ALgwNsKQAAAAc"]
[Sun Jan 25 10:38:31.146448 2026] [:error] [pid 33687:tid 33703] [client 103.77.106.81:50087] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aXWCJ4c6VUyZP5DZSy4aVAAAAQ0"]
[Sun Jan 25 10:38:31.521620 2026] [:error] [pid 53420:tid 53465] [client 103.77.106.81:50301] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXWCJ45y-t2ZKNqnnbXCygAAAEk"]
[Sun Jan 25 13:12:14.616007 2026] [:error] [pid 33687:tid 33704] [client 122.161.50.13:7571] [client 122.161.50.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.161.50.13, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXWmLoc6VUyZP5DZSy5D4QAAAQ4"]
[Sun Jan 25 13:12:23.965951 2026] [:error] [pid 53421:tid 53495] [client 152.58.187.114:49545] [client 152.58.187.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.187.114, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXWmN5KP_6Rogdk6hdExxAAAAIw"]
[Mon Jan 26 00:22:23.375558 2026] [rewrite:error] [pid 48920:tid 49004] [client 103.4.250.146:2140] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Jan 26 01:04:52.339061 2026] [rewrite:error] [pid 48919:tid 48963] [client 104.164.173.5:26916] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Jan 26 01:15:07.789044 2026] [rewrite:error] [pid 6738:tid 6766] [client 154.28.229.150:6698] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Jan 26 02:11:26.439177 2026] [rewrite:error] [pid 48918:tid 48946] [client 104.164.173.108:53920] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Mon Jan 26 03:14:16.432501 2026] [:error] [pid 48918:tid 48952] [client 101.91.148.219:39127] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXZriLFdNV6RkULOt6FA9wAAAJg"]
[Mon Jan 26 04:30:16.446870 2026] [:error] [pid 24557:tid 24616] [client 159.203.3.128:65397] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXZ9WOrlG7Vm9pxV14xHagAAAFY"]
[Mon Jan 26 04:30:16.881928 2026] [:error] [pid 24558:tid 24643] [client 159.203.3.128:49210] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXZ9WAo1PXqeJqIMTQbsbAAAAJY"]
[Mon Jan 26 04:30:17.316673 2026] [:error] [pid 61252:tid 61258] [client 159.203.3.128:49431] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aXZ9WbrGlf8FG2etxUCq4gAAAQQ"]
[Mon Jan 26 12:17:47.090937 2026] [:error] [pid 61252:tid 61268] [client 43.133.14.237:34446] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXbq67rGlf8FG2etxUAntwAAAQ4"]
[Mon Jan 26 21:24:04.399229 2026] [:error] [pid 61286:tid 61300] [client 157.51.1.40:53849] [client 157.51.1.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.51.1.40, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXdq9MnVt687wYGMPn8phQAAAUo"]
[Mon Jan 26 23:14:12.457428 2026] [:error] [pid 24556:tid 24578] [client 45.133.5.89:27639] [client 45.133.5.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.89, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aXeExEyDW1_EbgDa3XKFmgAAAA0"]
[Tue Jan 27 00:53:12.415303 2026] [authz_core:error] [pid 57173:tid 57238] [client 64.225.75.246:54010] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/server-status
[Tue Jan 27 00:53:19.093156 2026] [:error] [pid 44849:tid 44856] [client 64.225.75.246:44726] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aXeb_xvM0vcShMgZVmTvNwAAAUU"]
[Tue Jan 27 00:53:22.408894 2026] [:error] [pid 44588:tid 44820] [client 64.225.75.246:44758] [client 64.225.75.246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aXecAjHRQD80UhqYrcAPGgAAAQE"]
[Tue Jan 27 01:48:41.340876 2026] [:error] [pid 44588:tid 44819] [client 203.25.124.246:28005] [client 203.25.124.246] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.25.124.246, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aXeo-THRQD80UhqYrcAbhwAAAQA"]
[Tue Jan 27 02:10:06.435327 2026] [rewrite:error] [pid 44587:tid 44805] [client 104.252.191.77:50472] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Tue Jan 27 04:24:20.688799 2026] [:error] [pid 41780:tid 41797] [client 144.172.117.131:40440] [client 144.172.117.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aXfNdFvu-XLQ0TaZ4FFQBQAAAQ8"]
[Tue Jan 27 05:37:28.981826 2026] [:error] [pid 7452:tid 7476] [client 95.111.225.234:43024] [client 95.111.225.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aXfemGlXocEpHDB6FUZp4gAAAA8"]
[Tue Jan 27 10:04:42.106752 2026] [:error] [pid 48412:tid 48423] [client 170.106.167.214:60802] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXgdOnbJMfAKlln88JFr0gAAAUk"]
[Tue Jan 27 11:42:11.065717 2026] [:error] [pid 7453:tid 7511] [client 64.225.49.30:61481] [client 64.225.49.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aXg0ExfsyA2ws_ADqugVJgAAAFY"], referer: binance.com
[Tue Jan 27 15:13:35.439439 2026] [:error] [pid 41780:tid 41796] [client 49.51.204.74:51572] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXhln1vu-XLQ0TaZ4FHlfAAAAQ4"]
[Tue Jan 27 22:48:19.030986 2026] [:error] [pid 7561:tid 7581] [client 43.131.36.84:36818] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXjQM7XGI6mgvHQqkXzpuQAAANE"]
[Tue Jan 27 22:49:02.990221 2026] [:error] [pid 48446:tid 48499] [client 43.138.68.113:35960] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXjQXsDRSaZ8F8aaLxmyWwAAAdU"]
[Wed Jan 28 00:38:48.190666 2026] [:error] [pid 24425:tid 24431] [client 93.123.109.175:43296] [client 93.123.109.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aXjqGB_qUCA3SusVe0t2hwAAAQE"]
[Wed Jan 28 01:27:56.626998 2026] [:error] [pid 24511:tid 24518] [client 43.130.131.18:55324] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXj1nGmoieLyDzs0AST9OgAAAIM"]
[Wed Jan 28 02:09:27.819741 2026] [:error] [pid 24426:tid 24479] [client 189.37.71.5:18139] [client 189.37.71.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.37.71.5, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXj_V_bw8B_M5J5XrXQFjgAAAVU"]
[Wed Jan 28 02:15:54.262340 2026] [:error] [pid 24426:tid 24470] [client 20.214.234.67:4354] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXkA2vbw8B_M5J5XrXQIHAAAAUw"]
[Wed Jan 28 02:15:59.157641 2026] [:error] [pid 41678:tid 41709] [client 20.214.234.67:25880] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXkA36ja89ZyPVwMdig9RAAAABA"]
[Wed Jan 28 02:16:01.953613 2026] [:error] [pid 24427:tid 24507] [client 20.214.234.67:17784] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXkA4U5-wqSNb5f_hOINBAAAAZY"]
[Wed Jan 28 02:16:09.568513 2026] [:error] [pid 24427:tid 24491] [client 20.214.234.67:17729] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/win.php"] [unique_id "aXkA6U5-wqSNb5f_hOINGwAAAYY"]
[Wed Jan 28 02:16:10.618689 2026] [:error] [pid 41678:tid 41696] [client 20.214.234.67:23635] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/win.php"] [unique_id "aXkA6qja89ZyPVwMdig9bQAAAAM"]
[Wed Jan 28 02:16:12.246820 2026] [:error] [pid 24425:tid 24452] [client 20.214.234.67:25212] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/win.php"] [unique_id "aXkA7B_qUCA3SusVe0uS8gAAARY"]
[Wed Jan 28 02:16:13.231829 2026] [:error] [pid 24425:tid 24433] [client 20.214.234.67:19775] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/win.php"] [unique_id "aXkA7R_qUCA3SusVe0uS9gAAAQM"]
[Wed Jan 28 02:16:14.351263 2026] [:error] [pid 24427:tid 24502] [client 20.214.234.67:27207] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ut.php"] [unique_id "aXkA7k5-wqSNb5f_hOINIAAAAZE"]
[Wed Jan 28 02:16:15.672739 2026] [:error] [pid 24511:tid 24536] [client 20.214.234.67:25206] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ut.php"] [unique_id "aXkA72moieLyDzs0ASQRnAAAAJU"]
[Wed Jan 28 02:16:18.167478 2026] [:error] [pid 24427:tid 24487] [client 20.214.234.67:24694] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ut.php"] [unique_id "aXkA8k5-wqSNb5f_hOINJQAAAYI"]
[Wed Jan 28 02:16:19.586586 2026] [:error] [pid 24511:tid 24525] [client 20.214.234.67:20076] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ut.php"] [unique_id "aXkA82moieLyDzs0ASQRoQAAAIo"]
[Wed Jan 28 02:16:21.147751 2026] [:error] [pid 24511:tid 24533] [client 20.214.234.67:26804] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooaiyc.php"] [unique_id "aXkA9WmoieLyDzs0ASQRpAAAAJI"]
[Wed Jan 28 02:16:23.150156 2026] [:error] [pid 41678:tid 41713] [client 20.214.234.67:25205] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooaiyc.php"] [unique_id "aXkA96ja89ZyPVwMdig9fwAAABQ"]
[Wed Jan 28 02:16:23.829476 2026] [:error] [pid 24427:tid 24500] [client 20.214.234.67:23659] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooaiyc.php"] [unique_id "aXkA905-wqSNb5f_hOINLgAAAY8"]
[Wed Jan 28 02:16:25.806959 2026] [:error] [pid 24427:tid 24497] [client 20.214.234.67:23669] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ooaiyc.php"] [unique_id "aXkA-U5-wqSNb5f_hOINMAAAAYw"]
[Wed Jan 28 02:16:26.905679 2026] [:error] [pid 41678:tid 41700] [client 20.214.234.67:24660] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nx1.php"] [unique_id "aXkA-qja89ZyPVwMdig9igAAAAc"]
[Wed Jan 28 02:16:28.189689 2026] [:error] [pid 24427:tid 24486] [client 20.214.234.67:24699] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nx1.php"] [unique_id "aXkA_E5-wqSNb5f_hOINMQAAAYE"]
[Wed Jan 28 02:16:30.638344 2026] [:error] [pid 41678:tid 41709] [client 20.214.234.67:22873] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nx1.php"] [unique_id "aXkA_qja89ZyPVwMdig9kgAAABA"]
[Wed Jan 28 02:16:31.311910 2026] [:error] [pid 41678:tid 41716] [client 20.214.234.67:22589] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nx1.php"] [unique_id "aXkA_6ja89ZyPVwMdig9lgAAABc"]
[Wed Jan 28 02:16:32.642830 2026] [:error] [pid 24426:tid 24460] [client 20.214.234.67:22581] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/avtst.php"] [unique_id "aXkBAPbw8B_M5J5XrXQIRQAAAUI"]
[Wed Jan 28 02:16:33.464265 2026] [:error] [pid 24511:tid 24527] [client 20.214.234.67:23024] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/avtst.php"] [unique_id "aXkBAWmoieLyDzs0ASQRtQAAAIw"]
[Wed Jan 28 02:16:34.445181 2026] [:error] [pid 41678:tid 41708] [client 20.214.234.67:28084] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/avtst.php"] [unique_id "aXkBAqja89ZyPVwMdig9nAAAAA8"]
[Wed Jan 28 02:16:35.259834 2026] [:error] [pid 24511:tid 24534] [client 20.214.234.67:28078] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/avtst.php"] [unique_id "aXkBA2moieLyDzs0ASQRtwAAAJM"]
[Wed Jan 28 02:16:37.655759 2026] [:error] [pid 24426:tid 24480] [client 20.214.234.67:24807] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "aXkBBfbw8B_M5J5XrXQITgAAAVY"]
[Wed Jan 28 02:16:38.407022 2026] [:error] [pid 24427:tid 24502] [client 20.214.234.67:17705] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "aXkBBk5-wqSNb5f_hOINPwAAAZE"]
[Wed Jan 28 02:16:40.239204 2026] [:error] [pid 24511:tid 24518] [client 20.214.234.67:25165] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "aXkBCGmoieLyDzs0ASQRuQAAAIM"]
[Wed Jan 28 02:16:42.223135 2026] [:error] [pid 24427:tid 24491] [client 20.214.234.67:4883] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "aXkBCk5-wqSNb5f_hOINRQAAAYY"]
[Wed Jan 28 02:16:44.654471 2026] [:error] [pid 24425:tid 24438] [client 20.214.234.67:5037] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "aXkBDB_qUCA3SusVe0uTJgAAAQg"]
[Wed Jan 28 02:16:45.063369 2026] [:error] [pid 24427:tid 24488] [client 20.214.234.67:25519] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "aXkBDU5-wqSNb5f_hOINSQAAAYM"]
[Wed Jan 28 02:16:45.937603 2026] [:error] [pid 41678:tid 41697] [client 20.214.234.67:4886] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "aXkBDaja89ZyPVwMdig9uAAAAAQ"]
[Wed Jan 28 02:16:46.484458 2026] [:error] [pid 24511:tid 24518] [client 20.214.234.67:25116] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "aXkBDmmoieLyDzs0ASQRxQAAAIM"]
[Wed Jan 28 02:16:47.670338 2026] [:error] [pid 41678:tid 41693] [client 20.214.234.67:4871] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lx.php"] [unique_id "aXkBD6ja89ZyPVwMdig9wAAAAAA"]
[Wed Jan 28 02:16:49.252509 2026] [:error] [pid 41678:tid 41711] [client 20.214.234.67:33258] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lx.php"] [unique_id "aXkBEaja89ZyPVwMdig9yAAAABI"]
[Wed Jan 28 02:16:50.729365 2026] [:error] [pid 41678:tid 41714] [client 20.214.234.67:33257] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lx.php"] [unique_id "aXkBEqja89ZyPVwMdig90AAAABU"]
[Wed Jan 28 02:16:51.865247 2026] [:error] [pid 41678:tid 41693] [client 20.214.234.67:4901] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lx.php"] [unique_id "aXkBE6ja89ZyPVwMdig91gAAAAA"]
[Wed Jan 28 02:16:52.497672 2026] [:error] [pid 41678:tid 41707] [client 20.214.234.67:22852] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/die.php"] [unique_id "aXkBFKja89ZyPVwMdig93AAAAA4"]
[Wed Jan 28 02:16:53.272658 2026] [:error] [pid 24427:tid 24485] [client 20.214.234.67:26154] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/die.php"] [unique_id "aXkBFU5-wqSNb5f_hOINTwAAAYA"]
[Wed Jan 28 02:16:54.302238 2026] [:error] [pid 24426:tid 24473] [client 20.214.234.67:26115] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/die.php"] [unique_id "aXkBFvbw8B_M5J5XrXQIWAAAAU8"]
[Wed Jan 28 02:16:58.043373 2026] [:error] [pid 24427:tid 24490] [client 20.214.234.67:26175] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/die.php"] [unique_id "aXkBGk5-wqSNb5f_hOINVAAAAYU"]
[Wed Jan 28 02:17:01.077769 2026] [:error] [pid 24425:tid 24453] [client 20.214.234.67:25801] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaaa.php"] [unique_id "aXkBHR_qUCA3SusVe0uTRQAAARc"]
[Wed Jan 28 02:17:02.584599 2026] [:error] [pid 41678:tid 41696] [client 20.214.234.67:25149] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaaa.php"] [unique_id "aXkBHqja89ZyPVwMdig9_gAAAAM"]
[Wed Jan 28 02:17:04.067171 2026] [:error] [pid 24427:tid 24491] [client 20.214.234.67:23014] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaaa.php"] [unique_id "aXkBIE5-wqSNb5f_hOINWwAAAYY"]
[Wed Jan 28 02:17:05.549390 2026] [:error] [pid 24425:tid 24452] [client 20.214.234.67:19867] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaaa.php"] [unique_id "aXkBIR_qUCA3SusVe0uTUwAAARY"]
[Wed Jan 28 02:17:07.373731 2026] [:error] [pid 24427:tid 24505] [client 20.214.234.67:19876] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bbbb.php"] [unique_id "aXkBI05-wqSNb5f_hOINXQAAAZQ"]
[Wed Jan 28 02:17:08.775997 2026] [:error] [pid 24427:tid 24502] [client 20.214.234.67:33425] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bbbb.php"] [unique_id "aXkBJE5-wqSNb5f_hOINYAAAAZE"]
[Wed Jan 28 02:17:17.554291 2026] [:error] [pid 41678:tid 41714] [client 20.214.234.67:27455] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aXkBLaja89ZyPVwMdig-NAAAABU"]
[Wed Jan 28 02:17:19.582391 2026] [:error] [pid 24425:tid 24441] [client 20.214.234.67:26205] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aXkBLx_qUCA3SusVe0uTXQAAAQs"]
[Wed Jan 28 02:17:20.981300 2026] [:error] [pid 41678:tid 41710] [client 20.214.234.67:24321] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aXkBMKja89ZyPVwMdig-OwAAABE"]
[Wed Jan 28 02:17:22.696278 2026] [:error] [pid 41678:tid 41709] [client 20.214.234.67:24383] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aXkBMqja89ZyPVwMdig-QgAAABA"]
[Wed Jan 28 02:17:23.690796 2026] [:error] [pid 24425:tid 24432] [client 20.214.234.67:25843] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3406.php"] [unique_id "aXkBMx_qUCA3SusVe0uTZwAAAQI"]
[Wed Jan 28 02:17:25.604993 2026] [:error] [pid 24426:tid 24462] [client 20.214.234.67:33434] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3406.php"] [unique_id "aXkBNfbw8B_M5J5XrXQIjwAAAUQ"]
[Wed Jan 28 02:17:27.624424 2026] [:error] [pid 24511:tid 24533] [client 20.214.234.67:19874] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3406.php"] [unique_id "aXkBN2moieLyDzs0ASQR9gAAAJI"]
[Wed Jan 28 02:17:28.540040 2026] [:error] [pid 24511:tid 24536] [client 20.214.234.67:24330] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3406.php"] [unique_id "aXkBOGmoieLyDzs0ASQR-gAAAJU"]
[Wed Jan 28 02:17:29.798685 2026] [:error] [pid 24427:tid 24506] [client 20.214.234.67:33466] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/963e.php"] [unique_id "aXkBOU5-wqSNb5f_hOINcAAAAZU"]
[Wed Jan 28 02:17:31.128311 2026] [:error] [pid 24427:tid 24490] [client 20.214.234.67:29128] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/963e.php"] [unique_id "aXkBO05-wqSNb5f_hOINdQAAAYU"]
[Wed Jan 28 02:17:32.570464 2026] [:error] [pid 24426:tid 24472] [client 20.214.234.67:33445] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/963e.php"] [unique_id "aXkBPPbw8B_M5J5XrXQInQAAAU4"]
[Wed Jan 28 02:17:33.647376 2026] [:error] [pid 24427:tid 24492] [client 20.214.234.67:29124] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/963e.php"] [unique_id "aXkBPU5-wqSNb5f_hOINfAAAAYc"]
[Wed Jan 28 02:17:35.096044 2026] [:error] [pid 41678:tid 41698] [client 20.214.234.67:23486] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hk.php"] [unique_id "aXkBP6ja89ZyPVwMdig-XAAAAAU"]
[Wed Jan 28 02:17:36.839476 2026] [:error] [pid 24511:tid 24516] [client 20.214.234.67:26135] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hk.php"] [unique_id "aXkBQGmoieLyDzs0ASQSDQAAAIE"]
[Wed Jan 28 02:17:37.937758 2026] [:error] [pid 24425:tid 24433] [client 20.214.234.67:25829] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hk.php"] [unique_id "aXkBQR_qUCA3SusVe0uTjwAAAQM"]
[Wed Jan 28 02:17:39.996220 2026] [:error] [pid 24511:tid 24528] [client 20.214.234.67:4438] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hk.php"] [unique_id "aXkBQ2moieLyDzs0ASQSFgAAAI0"]
[Wed Jan 28 02:17:42.218984 2026] [:error] [pid 41678:tid 41695] [client 20.214.234.67:29148] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cjfuns.php"] [unique_id "aXkBRqja89ZyPVwMdig-iAAAAAI"]
[Wed Jan 28 02:17:42.816010 2026] [:error] [pid 24427:tid 24487] [client 20.214.234.67:26125] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cjfuns.php"] [unique_id "aXkBRk5-wqSNb5f_hOINlQAAAYI"]
[Wed Jan 28 02:17:43.909056 2026] [:error] [pid 41678:tid 41704] [client 20.214.234.67:27453] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cjfuns.php"] [unique_id "aXkBR6ja89ZyPVwMdig-iwAAAAs"]
[Wed Jan 28 02:17:44.831289 2026] [:error] [pid 24427:tid 24497] [client 20.214.234.67:27947] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cjfuns.php"] [unique_id "aXkBSE5-wqSNb5f_hOINmwAAAYw"]
[Wed Jan 28 02:17:46.531135 2026] [:error] [pid 24511:tid 24535] [client 20.214.234.67:26124] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akk.php"] [unique_id "aXkBSmmoieLyDzs0ASQSIAAAAJQ"]
[Wed Jan 28 02:17:47.525990 2026] [:error] [pid 24425:tid 24443] [client 20.214.234.67:23476] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akk.php"] [unique_id "aXkBSx_qUCA3SusVe0uTnAAAAQ0"]
[Wed Jan 28 02:17:48.199011 2026] [:error] [pid 24425:tid 24445] [client 20.214.234.67:27411] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akk.php"] [unique_id "aXkBTB_qUCA3SusVe0uTnQAAAQ8"]
[Wed Jan 28 02:17:49.271352 2026] [:error] [pid 24425:tid 24450] [client 20.214.234.67:33433] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/akk.php"] [unique_id "aXkBTR_qUCA3SusVe0uToAAAARQ"]
[Wed Jan 28 02:17:49.607871 2026] [:error] [pid 24427:tid 24487] [client 20.214.234.67:25804] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpa.php"] [unique_id "aXkBTU5-wqSNb5f_hOINoQAAAYI"]
[Wed Jan 28 02:17:49.987056 2026] [:error] [pid 24511:tid 24537] [client 20.214.234.67:29129] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpa.php"] [unique_id "aXkBTWmoieLyDzs0ASQSKwAAAJY"]
[Wed Jan 28 02:17:50.664200 2026] [:error] [pid 24425:tid 24447] [client 20.214.234.67:29328] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpa.php"] [unique_id "aXkBTh_qUCA3SusVe0uTowAAARE"]
[Wed Jan 28 02:17:52.413242 2026] [:error] [pid 24427:tid 24496] [client 20.214.234.67:24320] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpa.php"] [unique_id "aXkBUE5-wqSNb5f_hOINpQAAAYs"]
[Wed Jan 28 02:17:53.658095 2026] [:error] [pid 41678:tid 41701] [client 20.214.234.67:29132] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrr.php"] [unique_id "aXkBUaja89ZyPVwMdig-kwAAAAg"]
[Wed Jan 28 02:17:55.344830 2026] [:error] [pid 41678:tid 41716] [client 20.214.234.67:24370] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrr.php"] [unique_id "aXkBU6ja89ZyPVwMdig-lQAAABc"]
[Wed Jan 28 02:17:57.714117 2026] [:error] [pid 24427:tid 24498] [client 20.214.234.67:24354] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrr.php"] [unique_id "aXkBVU5-wqSNb5f_hOINrQAAAY0"]
[Wed Jan 28 02:17:59.884228 2026] [:error] [pid 24427:tid 24506] [client 20.214.234.67:26214] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrr.php"] [unique_id "aXkBV05-wqSNb5f_hOINsQAAAZU"]
[Wed Jan 28 02:18:01.158675 2026] [:error] [pid 24425:tid 24430] [client 20.214.234.67:25855] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aXkBWR_qUCA3SusVe0uTrgAAAQA"]
[Wed Jan 28 02:18:02.339248 2026] [:error] [pid 24425:tid 24442] [client 20.214.234.67:26223] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aXkBWh_qUCA3SusVe0uTrwAAAQw"]
[Wed Jan 28 02:18:02.929845 2026] [:error] [pid 24511:tid 24517] [client 20.214.234.67:28801] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aXkBWmmoieLyDzs0ASQSNgAAAII"]
[Wed Jan 28 02:18:04.571160 2026] [:error] [pid 24425:tid 24450] [client 20.214.234.67:23464] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aXkBXB_qUCA3SusVe0uTtgAAARQ"]
[Wed Jan 28 02:18:05.758252 2026] [:error] [pid 24427:tid 24485] [client 20.214.234.67:24333] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x0x.php"] [unique_id "aXkBXU5-wqSNb5f_hOINugAAAYA"]
[Wed Jan 28 02:18:06.577713 2026] [:error] [pid 24425:tid 24433] [client 20.214.234.67:33463] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x0x.php"] [unique_id "aXkBXh_qUCA3SusVe0uTvQAAAQM"]
[Wed Jan 28 02:18:08.041522 2026] [:error] [pid 24511:tid 24537] [client 20.214.234.67:4422] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x0x.php"] [unique_id "aXkBYGmoieLyDzs0ASQSRwAAAJY"]
[Wed Jan 28 02:18:09.648949 2026] [:error] [pid 24425:tid 24451] [client 20.214.234.67:28843] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x0x.php"] [unique_id "aXkBYR_qUCA3SusVe0uTwgAAARU"]
[Wed Jan 28 02:18:11.195982 2026] [:error] [pid 24427:tid 24500] [client 20.214.234.67:26203] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aXkBY05-wqSNb5f_hOINvgAAAY8"]
[Wed Jan 28 02:18:11.622303 2026] [:error] [pid 41678:tid 41707] [client 20.214.234.67:26237] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aXkBY6ja89ZyPVwMdig-uQAAAA4"]
[Wed Jan 28 02:18:13.159491 2026] [:error] [pid 24427:tid 24508] [client 20.214.234.67:29142] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aXkBZU5-wqSNb5f_hOINwQAAAZc"]
[Wed Jan 28 02:18:15.315832 2026] [:error] [pid 24425:tid 24447] [client 20.214.234.67:25818] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aXkBZx_qUCA3SusVe0uTxAAAARE"]
[Wed Jan 28 02:18:24.155930 2026] [:error] [pid 41678:tid 41707] [client 20.214.234.67:27921] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aXkBcKja89ZyPVwMdig-6wAAAA4"]
[Wed Jan 28 02:18:25.930359 2026] [:error] [pid 24426:tid 24474] [client 20.214.234.67:27914] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aXkBcfbw8B_M5J5XrXQJBgAAAVA"]
[Wed Jan 28 02:18:29.414354 2026] [:error] [pid 24427:tid 24499] [client 20.214.234.67:25485] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aXkBdU5-wqSNb5f_hOIN0wAAAY4"]
[Wed Jan 28 02:18:33.358763 2026] [:error] [pid 24427:tid 24486] [client 20.214.234.67:23431] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aXkBeU5-wqSNb5f_hOIN2gAAAYE"]
[Wed Jan 28 02:18:34.797042 2026] [:error] [pid 24511:tid 24517] [client 20.214.234.67:25477] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aXkBemmoieLyDzs0ASQSawAAAII"]
[Wed Jan 28 02:18:36.273036 2026] [:error] [pid 24511:tid 24533] [client 20.214.234.67:26555] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aXkBfGmoieLyDzs0ASQScgAAAJI"]
[Wed Jan 28 02:18:39.241211 2026] [:error] [pid 24511:tid 24520] [client 20.214.234.67:24359] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aXkBf2moieLyDzs0ASQSfQAAAIU"]
[Wed Jan 28 02:18:40.652259 2026] [:error] [pid 41678:tid 41693] [client 20.214.234.67:24340] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aXkBgKja89ZyPVwMdig_GwAAAAA"]
[Wed Jan 28 02:18:42.358646 2026] [:error] [pid 41678:tid 41711] [client 20.214.234.67:25490] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aXkBgqja89ZyPVwMdig_HwAAABI"]
[Wed Jan 28 02:18:45.241376 2026] [:error] [pid 24425:tid 24441] [client 20.214.234.67:4572] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aXkBhR_qUCA3SusVe0uUEgAAAQs"]
[Wed Jan 28 02:18:47.055856 2026] [:error] [pid 24427:tid 24492] [client 20.214.234.67:23465] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aXkBh05-wqSNb5f_hOIN6QAAAYc"]
[Wed Jan 28 02:18:48.433954 2026] [:error] [pid 24425:tid 24445] [client 20.214.234.67:4607] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aXkBiB_qUCA3SusVe0uUFwAAAQ8"]
[Wed Jan 28 02:18:49.064414 2026] [:error] [pid 24511:tid 24535] [client 20.214.234.67:28303] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aXkBiWmoieLyDzs0ASQSlgAAAJQ"]
[Wed Jan 28 02:18:50.695508 2026] [:error] [pid 24426:tid 24463] [client 20.214.234.67:4545] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aXkBivbw8B_M5J5XrXQJHgAAAUU"]
[Wed Jan 28 02:18:51.903447 2026] [:error] [pid 24427:tid 24500] [client 20.214.234.67:26181] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aXkBi05-wqSNb5f_hOIN9AAAAY8"]
[Wed Jan 28 02:18:53.613150 2026] [:error] [pid 41678:tid 41696] [client 20.214.234.67:25805] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aXkBjaja89ZyPVwMdig_OgAAAAM"]
[Wed Jan 28 02:18:55.740546 2026] [:error] [pid 41678:tid 41706] [client 20.214.234.67:24373] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aXkBj6ja89ZyPVwMdig_RgAAAA0"]
[Wed Jan 28 02:18:57.088656 2026] [:error] [pid 24427:tid 24506] [client 20.214.234.67:26225] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aXkBkU5-wqSNb5f_hOIN-gAAAZU"]
[Wed Jan 28 02:18:58.495783 2026] [:error] [pid 41678:tid 41706] [client 20.214.234.67:28350] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aXkBkqja89ZyPVwMdig_TAAAAA0"]
[Wed Jan 28 02:19:00.357601 2026] [:error] [pid 24425:tid 24435] [client 20.214.234.67:4586] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aXkBlB_qUCA3SusVe0uUJwAAAQU"]
[Wed Jan 28 02:19:02.589466 2026] [:error] [pid 24427:tid 24509] [client 20.214.234.67:28346] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aXkBlk5-wqSNb5f_hOIOAQAAAZg"]
[Wed Jan 28 02:19:03.807591 2026] [:error] [pid 24425:tid 24434] [client 20.214.234.67:23484] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aXkBlx_qUCA3SusVe0uUKAAAAQQ"]
[Wed Jan 28 02:19:04.965238 2026] [:error] [pid 24425:tid 24450] [client 20.214.234.67:33429] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aXkBmB_qUCA3SusVe0uUKwAAARQ"]
[Wed Jan 28 02:19:06.674920 2026] [:error] [pid 24427:tid 24502] [client 20.214.234.67:27419] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/conflg.php"] [unique_id "aXkBmk5-wqSNb5f_hOIOBQAAAZE"]
[Wed Jan 28 02:19:07.769723 2026] [:error] [pid 24511:tid 24520] [client 20.214.234.67:24343] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aXkBm2moieLyDzs0ASQStgAAAIU"]
[Wed Jan 28 02:19:08.558286 2026] [:error] [pid 24425:tid 24435] [client 20.214.234.67:23462] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aXkBnB_qUCA3SusVe0uUNAAAAQU"]
[Wed Jan 28 02:19:09.351613 2026] [:error] [pid 24427:tid 24490] [client 20.214.234.67:24379] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aXkBnU5-wqSNb5f_hOIODQAAAYU"]
[Wed Jan 28 02:19:10.446010 2026] [:error] [pid 41678:tid 41717] [client 20.214.234.67:24327] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aXkBnqja89ZyPVwMdig_ZwAAABg"]
[Wed Jan 28 02:19:12.859151 2026] [:error] [pid 41678:tid 41712] [client 20.214.234.67:27437] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aXkBoKja89ZyPVwMdig_awAAABM"]
[Wed Jan 28 02:19:15.019898 2026] [:error] [pid 41678:tid 41710] [client 20.214.234.67:19861] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aXkBo6ja89ZyPVwMdig_dwAAABE"]
[Wed Jan 28 02:19:16.084416 2026] [:error] [pid 24426:tid 24469] [client 20.214.234.67:4462] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aXkBpPbw8B_M5J5XrXQJMAAAAUs"]
[Wed Jan 28 02:19:16.935608 2026] [:error] [pid 24426:tid 24472] [client 20.214.234.67:27446] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aXkBpPbw8B_M5J5XrXQJMwAAAU4"]
[Wed Jan 28 02:19:19.012422 2026] [:error] [pid 24426:tid 24464] [client 20.214.234.67:19859] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aXkBp_bw8B_M5J5XrXQJNwAAAUY"]
[Wed Jan 28 02:19:22.881744 2026] [:error] [pid 24425:tid 24454] [client 20.214.234.67:33220] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aXkBqh_qUCA3SusVe0uUQwAAARg"]
[Wed Jan 28 02:19:34.249592 2026] [:error] [pid 24425:tid 24431] [client 20.214.234.67:27407] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aXkBth_qUCA3SusVe0uUUgAAAQE"]
[Wed Jan 28 02:19:36.899785 2026] [:error] [pid 24511:tid 24531] [client 20.214.234.67:27405] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aXkBuGmoieLyDzs0ASQS6wAAAJA"]
[Wed Jan 28 02:19:40.109395 2026] [:error] [pid 24427:tid 24500] [client 20.214.234.67:26161] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aXkBvE5-wqSNb5f_hOIOMgAAAY8"]
[Wed Jan 28 02:19:46.517814 2026] [:error] [pid 24427:tid 24491] [client 20.214.234.67:27409] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aXkBwk5-wqSNb5f_hOIOOwAAAYY"]
[Wed Jan 28 02:19:46.925196 2026] [:error] [pid 41678:tid 41702] [client 20.214.234.67:33444] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aXkBwqja89ZyPVwMdihAAwAAAAk"]
[Wed Jan 28 02:19:47.307660 2026] [:error] [pid 24427:tid 24492] [client 20.214.234.67:23011] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aXkBw05-wqSNb5f_hOIOPwAAAYc"]
[Wed Jan 28 02:19:47.852934 2026] [:error] [pid 41678:tid 41717] [client 20.214.234.67:33238] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aXkBw6ja89ZyPVwMdihACQAAABg"]
[Wed Jan 28 02:19:49.352490 2026] [:error] [pid 24511:tid 24533] [client 20.214.234.67:4918] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asas.php"] [unique_id "aXkBxWmoieLyDzs0ASQS_QAAAJI"]
[Wed Jan 28 02:19:50.256372 2026] [:error] [pid 41678:tid 41716] [client 20.214.234.67:22908] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aXkBxqja89ZyPVwMdihADAAAABc"]
[Wed Jan 28 02:19:51.531223 2026] [:error] [pid 24511:tid 24534] [client 20.214.234.67:4435] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aXkBx2moieLyDzs0ASQTAAAAAJM"]
[Wed Jan 28 02:19:52.393719 2026] [:error] [pid 24426:tid 24459] [client 20.214.234.67:26143] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aXkByPbw8B_M5J5XrXQJaQAAAUE"]
[Wed Jan 28 02:19:53.060074 2026] [:error] [pid 24426:tid 24461] [client 20.214.234.67:26154] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rk2.php"] [unique_id "aXkByfbw8B_M5J5XrXQJagAAAUM"]
[Wed Jan 28 02:19:53.576221 2026] [:error] [pid 24426:tid 24478] [client 20.214.234.67:24817] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aXkByfbw8B_M5J5XrXQJbQAAAVQ"]
[Wed Jan 28 02:19:54.521032 2026] [:error] [pid 24425:tid 24439] [client 20.214.234.67:26794] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aXkByh_qUCA3SusVe0uUfgAAAQk"]
[Wed Jan 28 02:19:55.203312 2026] [:error] [pid 24425:tid 24450] [client 20.214.234.67:33279] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aXkByx_qUCA3SusVe0uUgQAAARQ"]
[Wed Jan 28 02:19:56.807906 2026] [:error] [pid 41678:tid 41714] [client 20.214.234.67:22876] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aXkBzKja89ZyPVwMdihADgAAABU"]
[Wed Jan 28 02:19:58.770448 2026] [:error] [pid 41678:tid 41694] [client 20.214.234.67:23020] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aXkBzqja89ZyPVwMdihAEwAAAAE"]
[Wed Jan 28 02:19:59.415105 2026] [:error] [pid 41678:tid 41697] [client 20.214.234.67:23626] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aXkBz6ja89ZyPVwMdihAFQAAAAQ"]
[Wed Jan 28 02:20:00.399637 2026] [:error] [pid 41678:tid 41712] [client 20.214.234.67:24818] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aXkB0Kja89ZyPVwMdihAGQAAABM"]
[Wed Jan 28 02:20:01.443896 2026] [:error] [pid 41678:tid 41716] [client 20.214.234.67:25870] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aXkB0aja89ZyPVwMdihAIAAAABc"]
[Wed Jan 28 02:20:02.554756 2026] [:error] [pid 24426:tid 24467] [client 20.214.234.67:23666] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aespa.php"] [unique_id "aXkB0vbw8B_M5J5XrXQJdQAAAUk"]
[Wed Jan 28 02:20:04.263515 2026] [:error] [pid 24511:tid 24527] [client 20.214.234.67:24780] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aespa.php"] [unique_id "aXkB1GmoieLyDzs0ASQTGwAAAIw"]
[Wed Jan 28 02:20:04.652277 2026] [:error] [pid 24426:tid 24474] [client 20.214.234.67:23032] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aespa.php"] [unique_id "aXkB1Pbw8B_M5J5XrXQJeQAAAVA"]
[Wed Jan 28 02:20:05.429634 2026] [:error] [pid 24511:tid 24531] [client 20.214.234.67:24678] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aespa.php"] [unique_id "aXkB1WmoieLyDzs0ASQTHgAAAJA"]
[Wed Jan 28 02:20:06.460331 2026] [:error] [pid 24427:tid 24498] [client 20.214.234.67:25862] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aXkB1k5-wqSNb5f_hOIOVQAAAY0"]
[Wed Jan 28 02:20:06.980456 2026] [:error] [pid 41678:tid 41693] [client 20.214.234.67:24655] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aXkB1qja89ZyPVwMdihAMQAAAAA"]
[Wed Jan 28 02:20:08.324973 2026] [:error] [pid 24426:tid 24473] [client 20.214.234.67:28063] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aXkB2Pbw8B_M5J5XrXQJgQAAAU8"]
[Wed Jan 28 02:20:09.185086 2026] [:error] [pid 41678:tid 41713] [client 20.214.234.67:23657] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aXkB2aja89ZyPVwMdihAOAAAABQ"]
[Wed Jan 28 02:20:10.229334 2026] [:error] [pid 41678:tid 41696] [client 20.214.234.67:25871] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aXkB2qja89ZyPVwMdihAPgAAAAM"]
[Wed Jan 28 02:20:11.391707 2026] [:error] [pid 24511:tid 24521] [client 20.214.234.67:23026] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aXkB22moieLyDzs0ASQTIQAAAIY"]
[Wed Jan 28 02:20:12.836817 2026] [:error] [pid 24427:tid 24492] [client 20.214.234.67:4887] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aXkB3E5-wqSNb5f_hOIOXAAAAYc"]
[Wed Jan 28 02:20:14.384960 2026] [:error] [pid 24427:tid 24497] [client 20.214.234.67:23917] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aXkB3k5-wqSNb5f_hOIOXwAAAYw"]
[Wed Jan 28 02:20:15.078770 2026] [:error] [pid 24427:tid 24508] [client 20.214.234.67:23037] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aXkB305-wqSNb5f_hOIOYAAAAZc"]
[Wed Jan 28 02:20:16.068759 2026] [:error] [pid 41678:tid 41717] [client 20.214.234.67:24795] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aXkB4Kja89ZyPVwMdihAQwAAABg"]
[Wed Jan 28 02:20:17.004693 2026] [:error] [pid 41678:tid 41707] [client 20.214.234.67:23899] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aXkB4aja89ZyPVwMdihARgAAAA4"]
[Wed Jan 28 02:20:18.072842 2026] [:error] [pid 24511:tid 24538] [client 20.214.234.67:23875] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aXkB4mmoieLyDzs0ASQTKwAAAJc"]
[Wed Jan 28 02:20:20.553008 2026] [:error] [pid 24511:tid 24528] [client 20.214.234.67:23003] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aXkB5GmoieLyDzs0ASQTLQAAAI0"]
[Wed Jan 28 02:20:22.412925 2026] [:error] [pid 41678:tid 41699] [client 20.214.234.67:17730] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aXkB5qja89ZyPVwMdihAUwAAAAY"]
[Wed Jan 28 02:20:25.947459 2026] [:error] [pid 41678:tid 41699] [client 20.214.234.67:24320] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aXkB6aja89ZyPVwMdihAWgAAAAY"]
[Wed Jan 28 02:20:29.155012 2026] [:error] [pid 24426:tid 24461] [client 20.214.234.67:23001] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aXkB7fbw8B_M5J5XrXQJmwAAAUM"]
[Wed Jan 28 02:20:30.689205 2026] [:error] [pid 24427:tid 24493] [client 20.214.234.67:23670] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aXkB7k5-wqSNb5f_hOIOaQAAAYg"]
[Wed Jan 28 02:20:40.916834 2026] [:error] [pid 24426:tid 24481] [client 20.214.234.67:22897] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1337.php"] [unique_id "aXkB-Pbw8B_M5J5XrXQJtQAAAVc"]
[Wed Jan 28 02:20:42.085383 2026] [:error] [pid 24427:tid 24498] [client 20.214.234.67:26768] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1337.php"] [unique_id "aXkB-k5-wqSNb5f_hOIOdwAAAY0"]
[Wed Jan 28 02:20:43.929401 2026] [:error] [pid 24426:tid 24474] [client 20.214.234.67:25091] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1337.php"] [unique_id "aXkB-_bw8B_M5J5XrXQJuAAAAVA"]
[Wed Jan 28 02:20:44.981010 2026] [:error] [pid 41678:tid 41703] [client 20.214.234.67:24790] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1337.php"] [unique_id "aXkB_Kja89ZyPVwMdihAjAAAAAo"]
[Wed Jan 28 02:20:46.336250 2026] [:error] [pid 24425:tid 24447] [client 20.214.234.67:19721] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aXkB_h_qUCA3SusVe0uUrQAAARE"]
[Wed Jan 28 02:20:47.760536 2026] [:error] [pid 24427:tid 24501] [client 20.214.234.67:24652] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aXkB_05-wqSNb5f_hOIOfAAAAZA"]
[Wed Jan 28 02:20:50.772774 2026] [:error] [pid 24426:tid 24459] [client 20.214.234.67:25887] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aXkCAvbw8B_M5J5XrXQJvgAAAUE"]
[Wed Jan 28 02:20:52.763323 2026] [:error] [pid 24427:tid 24486] [client 20.214.234.67:25206] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aXkCBE5-wqSNb5f_hOIOgQAAAYE"]
[Wed Jan 28 02:20:55.047380 2026] [:error] [pid 24427:tid 24498] [client 20.214.234.67:20056] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web.php"] [unique_id "aXkCB05-wqSNb5f_hOIOgwAAAY0"]
[Wed Jan 28 02:20:57.693610 2026] [:error] [pid 41678:tid 41707] [client 20.214.234.67:24509] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web.php"] [unique_id "aXkCCaja89ZyPVwMdihAlQAAAA4"]
[Wed Jan 28 02:21:00.850997 2026] [:error] [pid 24427:tid 24509] [client 20.214.234.67:20049] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web.php"] [unique_id "aXkCDE5-wqSNb5f_hOIOiQAAAZg"]
[Wed Jan 28 02:21:02.355696 2026] [:error] [pid 24427:tid 24491] [client 20.214.234.67:17232] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web.php"] [unique_id "aXkCDk5-wqSNb5f_hOIOiwAAAYY"]
[Wed Jan 28 02:21:03.796962 2026] [:error] [pid 24426:tid 24466] [client 20.214.234.67:17256] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aXkCD_bw8B_M5J5XrXQJwQAAAUg"]
[Wed Jan 28 02:21:05.321753 2026] [:error] [pid 24511:tid 24525] [client 20.214.234.67:24228] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aXkCEWmoieLyDzs0ASQTXwAAAIo"]
[Wed Jan 28 02:21:06.718881 2026] [:error] [pid 41678:tid 41698] [client 20.214.234.67:22028] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aXkCEqja89ZyPVwMdihAnQAAAAU"]
[Wed Jan 28 02:21:08.101916 2026] [:error] [pid 24427:tid 24493] [client 20.214.234.67:27312] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aXkCFE5-wqSNb5f_hOIOkAAAAYg"]
[Wed Jan 28 02:21:10.406519 2026] [:error] [pid 41678:tid 41709] [client 20.214.234.67:4619] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aXkCFqja89ZyPVwMdihApQAAABA"]
[Wed Jan 28 02:21:12.431609 2026] [:error] [pid 41678:tid 41701] [client 20.214.234.67:27279] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aXkCGKja89ZyPVwMdihArAAAAAg"]
[Wed Jan 28 02:21:13.769415 2026] [:error] [pid 41678:tid 41698] [client 20.214.234.67:22041] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aXkCGaja89ZyPVwMdihAsAAAAAU"]
[Wed Jan 28 02:21:15.042287 2026] [:error] [pid 24511:tid 24536] [client 20.214.234.67:28164] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aXkCG2moieLyDzs0ASQTZAAAAJU"]
[Wed Jan 28 02:21:16.411464 2026] [:error] [pid 24426:tid 24472] [client 20.214.234.67:4490] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aXkCHPbw8B_M5J5XrXQJygAAAU4"]
[Wed Jan 28 02:21:17.739095 2026] [:error] [pid 24511:tid 24539] [client 20.214.234.67:4506] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aXkCHWmoieLyDzs0ASQTZwAAAJg"]
[Wed Jan 28 02:21:18.988832 2026] [:error] [pid 24511:tid 24522] [client 20.214.234.67:22776] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aXkCHmmoieLyDzs0ASQTagAAAIc"]
[Wed Jan 28 02:21:20.087482 2026] [:error] [pid 24426:tid 24476] [client 20.214.234.67:25554] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aXkCIPbw8B_M5J5XrXQJzwAAAVI"]
[Wed Jan 28 02:21:21.570246 2026] [:error] [pid 24511:tid 24521] [client 20.214.234.67:25988] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aXkCIWmoieLyDzs0ASQTcgAAAIY"]
[Wed Jan 28 02:21:22.557468 2026] [:error] [pid 41678:tid 41708] [client 20.214.234.67:22061] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aXkCIqja89ZyPVwMdihAuwAAAA8"]
[Wed Jan 28 02:21:23.698889 2026] [:error] [pid 24511:tid 24520] [client 20.214.234.67:33513] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aXkCI2moieLyDzs0ASQTdQAAAIU"]
[Wed Jan 28 02:21:25.454959 2026] [:error] [pid 24427:tid 24506] [client 20.214.234.67:19568] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aXkCJU5-wqSNb5f_hOIOoQAAAZU"]
[Wed Jan 28 02:21:27.841005 2026] [:error] [pid 24426:tid 24465] [client 20.214.234.67:19563] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w-1.php"] [unique_id "aXkCJ_bw8B_M5J5XrXQJ1gAAAUc"]
[Wed Jan 28 02:21:29.564486 2026] [:error] [pid 24427:tid 24504] [client 20.214.234.67:33153] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w-1.php"] [unique_id "aXkCKU5-wqSNb5f_hOIOogAAAZM"]
[Wed Jan 28 02:21:30.704021 2026] [:error] [pid 24427:tid 24486] [client 20.214.234.67:11952] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w-1.php"] [unique_id "aXkCKk5-wqSNb5f_hOIOpAAAAYE"]
[Wed Jan 28 02:21:32.266458 2026] [:error] [pid 24511:tid 24535] [client 20.214.234.67:24892] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w-1.php"] [unique_id "aXkCLGmoieLyDzs0ASQTgQAAAJQ"]
[Wed Jan 28 02:21:34.194223 2026] [:error] [pid 24511:tid 24539] [client 20.214.234.67:5004] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aXkCLmmoieLyDzs0ASQThAAAAJg"]
[Wed Jan 28 02:21:35.788365 2026] [:error] [pid 24511:tid 24523] [client 20.214.234.67:24615] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aXkCL2moieLyDzs0ASQThgAAAIg"]
[Wed Jan 28 02:21:38.112237 2026] [:error] [pid 24427:tid 24497] [client 20.214.234.67:5027] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aXkCMk5-wqSNb5f_hOIOrQAAAYw"]
[Wed Jan 28 02:21:45.893461 2026] [:error] [pid 41678:tid 41697] [client 20.214.234.67:33178] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aXkCOaja89ZyPVwMdihA9QAAAAQ"]
[Wed Jan 28 02:21:49.060822 2026] [:error] [pid 24426:tid 24473] [client 20.214.234.67:18455] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aXkCPfbw8B_M5J5XrXQJ5AAAAU8"]
[Wed Jan 28 02:21:52.077299 2026] [:error] [pid 24511:tid 24517] [client 20.214.234.67:15849] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aXkCQGmoieLyDzs0ASQTlwAAAII"]
[Wed Jan 28 02:21:55.802007 2026] [:error] [pid 41678:tid 41713] [client 20.214.234.67:29102] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aXkCQ6ja89ZyPVwMdihBAwAAABQ"]
[Wed Jan 28 02:21:56.623693 2026] [:error] [pid 24426:tid 24482] [client 20.214.234.67:27003] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aXkCRPbw8B_M5J5XrXQJ6wAAAVg"]
[Wed Jan 28 02:21:57.704220 2026] [:error] [pid 24426:tid 24471] [client 20.214.234.67:4164] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aXkCRfbw8B_M5J5XrXQJ7gAAAU0"]
[Wed Jan 28 02:21:58.430905 2026] [:error] [pid 24426:tid 24459] [client 20.214.234.67:26949] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aXkCRvbw8B_M5J5XrXQJ8gAAAUE"]
[Wed Jan 28 02:21:59.728882 2026] [:error] [pid 24426:tid 24469] [client 20.214.234.67:26630] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aXkCR_bw8B_M5J5XrXQJ9QAAAUs"]
[Wed Jan 28 02:22:02.121952 2026] [:error] [pid 24426:tid 24467] [client 20.214.234.67:24764] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aXkCSvbw8B_M5J5XrXQJ-QAAAUk"]
[Wed Jan 28 02:22:03.653238 2026] [:error] [pid 24426:tid 24472] [client 20.214.234.67:24422] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aXkCS_bw8B_M5J5XrXQJ_gAAAU4"]
[Wed Jan 28 02:22:04.807713 2026] [:error] [pid 24511:tid 24517] [client 20.214.234.67:4171] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aXkCTGmoieLyDzs0ASQTpgAAAII"]
[Wed Jan 28 02:22:05.863700 2026] [:error] [pid 24511:tid 24524] [client 20.214.234.67:4184] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aXkCTWmoieLyDzs0ASQTqAAAAIk"]
[Wed Jan 28 02:22:07.150776 2026] [:error] [pid 41678:tid 41715] [client 20.214.234.67:18939] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cache/"] [unique_id "aXkCT6ja89ZyPVwMdihBHgAAABY"]
[Wed Jan 28 02:22:08.040271 2026] [:error] [pid 24427:tid 24494] [client 20.214.234.67:32868] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cache/"] [unique_id "aXkCUE5-wqSNb5f_hOIOwAAAAYk"]
[Wed Jan 28 02:22:09.085713 2026] [:error] [pid 41678:tid 41705] [client 20.214.234.67:28380] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cache/"] [unique_id "aXkCUaja89ZyPVwMdihBIgAAAAw"]
[Wed Jan 28 02:22:10.379407 2026] [:error] [pid 41678:tid 41717] [client 20.214.234.67:4202] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cache/"] [unique_id "aXkCUqja89ZyPVwMdihBJAAAABg"]
[Wed Jan 28 02:22:12.596478 2026] [:error] [pid 24511:tid 24535] [client 20.214.234.67:32841] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXkCVGmoieLyDzs0ASQTrAAAAJQ"]
[Wed Jan 28 02:22:13.776643 2026] [:error] [pid 24427:tid 24494] [client 20.214.234.67:32848] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXkCVU5-wqSNb5f_hOIO0QAAAYk"]
[Wed Jan 28 02:22:14.517083 2026] [:error] [pid 41678:tid 41705] [client 20.214.234.67:28378] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXkCVqja89ZyPVwMdihBLwAAAAw"]
[Wed Jan 28 02:22:15.089120 2026] [:error] [pid 24425:tid 24438] [client 20.214.234.67:23346] [client 20.214.234.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXkCVx_qUCA3SusVe0uU6QAAAQg"]
[Wed Jan 28 03:33:40.699696 2026] [:error] [pid 7491:tid 7512] [client 130.12.182.150:47964] [client 130.12.182.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aXkTFI1dhx8rf42W1S1QqgAAANE"]
[Wed Jan 28 03:33:41.654571 2026] [:error] [pid 7491:tid 7519] [client 130.12.182.150:44190] [client 130.12.182.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.ftpconfig"] [unique_id "aXkTFY1dhx8rf42W1S1QsgAAANg"]
[Wed Jan 28 03:33:41.663027 2026] [:error] [pid 24425:tid 24450] [client 130.12.182.150:44194] [client 130.12.182.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aXkTFR_qUCA3SusVe0ulrAAAARQ"]
[Wed Jan 28 03:33:41.663509 2026] [:error] [pid 7491:tid 7511] [client 130.12.182.150:44208] [client 130.12.182.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXkTFY1dhx8rf42W1S1QtAAAANA"]
[Wed Jan 28 05:04:15.200340 2026] [:error] [pid 58254:tid 58268] [client 36.111.67.189:60608] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXkoT_F8nSyBg9wOsa_zwwAAAQw"]
[Wed Jan 28 05:09:40.015999 2026] [:error] [pid 17535:tid 17544] [client 45.154.138.5:31613] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXkplK3QiSMgVscnN5L_PwAAAMY"]
[Wed Jan 28 05:09:41.403678 2026] [:error] [pid 17424:tid 17445] [client 45.154.138.36:65305] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aXkplWRvtDRvGDe-pIsxawAAAAw"]
[Wed Jan 28 05:09:45.115623 2026] [:error] [pid 17425:tid 17476] [client 45.154.138.49:56909] [client 45.154.138.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXkpmarcODKH1Dl7aZAOPwAAAE4"]
[Wed Jan 28 05:09:47.012386 2026] [:error] [pid 64842:tid 64864] [client 45.154.138.3:51433] [client 45.154.138.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aXkpm1uAAQZ5AN_SnDbiVAAAAVQ"]
[Wed Jan 28 05:09:47.933464 2026] [:error] [pid 17425:tid 17462] [client 45.154.138.22:45971] [client 45.154.138.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aXkpm6rcODKH1Dl7aZAOWQAAAEA"]
[Wed Jan 28 05:09:48.853244 2026] [:error] [pid 58254:tid 58275] [client 45.154.138.23:64915] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aXkpnPF8nSyBg9wOsa_3SgAAARM"]
[Wed Jan 28 05:09:50.332083 2026] [:error] [pid 17425:tid 17472] [client 45.154.138.14:34363] [client 45.154.138.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aXkpnqrcODKH1Dl7aZAOZAAAAEo"]
[Wed Jan 28 05:09:51.721943 2026] [:error] [pid 64842:tid 64855] [client 45.154.138.20:36159] [client 45.154.138.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aXkpn1uAAQZ5AN_SnDbiiwAAAUs"]
[Wed Jan 28 05:09:55.456459 2026] [:error] [pid 17535:tid 17562] [client 45.154.138.34:41469] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aXkpo63QiSMgVscnN5L_ogAAANg"]
[Wed Jan 28 05:09:56.383700 2026] [:error] [pid 17535:tid 17539] [client 45.154.138.42:35747] [client 45.154.138.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aXkppK3QiSMgVscnN5L_rgAAAME"]
[Wed Jan 28 05:10:13.288116 2026] [:error] [pid 17426:tid 17506] [client 45.154.138.10:20599] [client 45.154.138.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aXkptU8zvf_03BnziRfoTgAAAJE"]
[Wed Jan 28 05:10:15.178488 2026] [:error] [pid 17426:tid 17492] [client 45.154.138.10:20599] [client 45.154.138.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aXkpt08zvf_03BnziRfoXQAAAIM"]
[Wed Jan 28 05:10:21.290136 2026] [:error] [pid 17426:tid 17494] [client 45.154.138.17:52401] [client 45.154.138.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aXkpvU8zvf_03BnziRfoqwAAAIU"]
[Wed Jan 28 05:10:35.783508 2026] [:error] [pid 64842:tid 64866] [client 45.154.138.9:40985] [client 45.154.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aXkpy1uAAQZ5AN_SnDbjxgAAAVY"]
[Wed Jan 28 05:11:00.088991 2026] [:error] [pid 17426:tid 17507] [client 45.154.138.39:46571] [client 45.154.138.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aXkp5E8zvf_03BnziRfp6wAAAJI"]
[Wed Jan 28 05:11:14.123136 2026] [:error] [pid 17426:tid 17490] [client 45.154.138.20:26095] [client 45.154.138.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aXkp8k8zvf_03BnziRfqUgAAAIE"]
[Wed Jan 28 05:11:15.042625 2026] [:error] [pid 17424:tid 17434] [client 45.154.138.12:22769] [client 45.154.138.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.154.138.12, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXkp82RvtDRvGDe-pIsz0QAAAAE"]
[Wed Jan 28 05:11:16.465833 2026] [:error] [pid 17424:tid 17451] [client 45.154.138.12:22769] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXkp9GRvtDRvGDe-pIsz3wAAABI"]
[Wed Jan 28 05:11:22.595530 2026] [:error] [pid 17535:tid 17560] [client 45.154.138.2:37879] [client 45.154.138.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aXkp-q3QiSMgVscnN5ICggAAANY"]
[Wed Jan 28 05:11:30.510125 2026] [:error] [pid 17424:tid 17442] [client 45.154.138.44:60039] [client 45.154.138.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aXkqAmRvtDRvGDe-pIs0PQAAAAk"]
[Wed Jan 28 05:11:31.470987 2026] [:error] [pid 17535:tid 17557] [client 45.154.138.26:45735] [client 45.154.138.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aXkqA63QiSMgVscnN5IC0wAAANM"]
[Wed Jan 28 05:11:32.390593 2026] [:error] [pid 17424:tid 17439] [client 45.154.138.8:58341] [client 45.154.138.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aXkqBGRvtDRvGDe-pIs0RQAAAAY"]
[Wed Jan 28 05:11:33.309932 2026] [:error] [pid 17426:tid 17510] [client 45.154.138.43:49463] [client 45.154.138.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aXkqBU8zvf_03BnziRfrAwAAAJU"]
[Wed Jan 28 05:11:35.743494 2026] [:error] [pid 17424:tid 17451] [client 45.154.138.37:40293] [client 45.154.138.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.37, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aXkqB2RvtDRvGDe-pIs0WgAAABI"]
[Wed Jan 28 05:11:42.421629 2026] [:error] [pid 17424:tid 17448] [client 45.154.138.37:40293] [client 45.154.138.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aXkqDmRvtDRvGDe-pIs0nQAAAA8"]
[Wed Jan 28 05:11:46.929775 2026] [:error] [pid 17535:tid 17562] [client 45.154.138.44:26897] [client 45.154.138.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.44, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aXkqEq3QiSMgVscnN5IDfQAAANg"]
[Wed Jan 28 05:11:52.291338 2026] [:error] [pid 17535:tid 17556] [client 45.154.138.44:26897] [client 45.154.138.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aXkqGK3QiSMgVscnN5IDsgAAANI"]
[Wed Jan 28 05:11:53.219938 2026] [:error] [pid 64842:tid 64862] [client 45.154.138.25:26167] [client 45.154.138.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aXkqGVuAAQZ5AN_SnDbmcAAAAVI"]
[Wed Jan 28 05:11:55.078385 2026] [proxy_fcgi:error] [pid 17424:tid 17449] [client 45.154.138.48:23883] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:11:58.390604 2026] [proxy_fcgi:error] [pid 17424:tid 17433] [client 45.154.138.48:23883] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:12:04.585790 2026] [:error] [pid 17424:tid 17437] [client 45.154.138.48:23883] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aXkqJGRvtDRvGDe-pIs1bwAAAAQ"]
[Wed Jan 28 05:12:07.433027 2026] [:error] [pid 17426:tid 17505] [client 45.154.138.31:40599] [client 45.154.138.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aXkqJ08zvf_03BnziRfsRAAAAJA"]
[Wed Jan 28 05:12:08.822535 2026] [:error] [pid 17426:tid 17509] [client 45.154.138.48:20169] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aXkqKE8zvf_03BnziRfsUAAAAJQ"]
[Wed Jan 28 05:12:12.080640 2026] [:error] [pid 58254:tid 58278] [client 45.154.138.11:23957] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aXkqLPF8nSyBg9wOsa_9RAAAARY"]
[Wed Jan 28 05:12:13.004774 2026] [:error] [pid 58254:tid 58280] [client 45.154.138.34:30441] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aXkqLfF8nSyBg9wOsa_9VgAAARg"]
[Wed Jan 28 05:12:13.925214 2026] [:error] [pid 17535:tid 17560] [client 45.154.138.4:36723] [client 45.154.138.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.4, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aXkqLa3QiSMgVscnN5IEtgAAANY"]
[Wed Jan 28 05:12:15.326828 2026] [:error] [pid 17535:tid 17546] [client 45.154.138.4:36723] [client 45.154.138.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aXkqL63QiSMgVscnN5IEzAAAAMg"]
[Wed Jan 28 05:12:19.519653 2026] [:error] [pid 17424:tid 17442] [client 45.154.138.20:36229] [client 45.154.138.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aXkqM2RvtDRvGDe-pIs2TwAAAAk"]
[Wed Jan 28 05:12:21.390483 2026] [:error] [pid 17425:tid 17483] [client 45.154.138.24:28557] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aXkqNarcODKH1Dl7aZAUeAAAAFU"]
[Wed Jan 28 05:12:23.243045 2026] [:error] [pid 17535:tid 17546] [client 45.154.138.14:50483] [client 45.154.138.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aXkqN63QiSMgVscnN5IFKgAAAMg"]
[Wed Jan 28 05:12:25.575660 2026] [:error] [pid 58254:tid 58278] [client 45.154.138.3:26629] [client 45.154.138.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.3, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aXkqOfF8nSyBg9wOsa_-IwAAARY"]
[Wed Jan 28 05:12:26.970848 2026] [:error] [pid 58254:tid 58273] [client 45.154.138.3:26629] [client 45.154.138.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aXkqOvF8nSyBg9wOsa_-NQAAARE"]
[Wed Jan 28 05:12:27.888669 2026] [:error] [pid 17535:tid 17538] [client 45.154.138.19:37575] [client 45.154.138.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXkqO63QiSMgVscnN5IFRgAAAMA"]
[Wed Jan 28 05:12:33.971491 2026] [:error] [pid 17424:tid 17445] [client 45.154.138.5:56177] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aXkqQWRvtDRvGDe-pIs20wAAAAw"]
[Wed Jan 28 05:12:35.824367 2026] [:error] [pid 17424:tid 17444] [client 45.154.138.38:63911] [client 45.154.138.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aXkqQ2RvtDRvGDe-pIs28AAAAAs"]
[Wed Jan 28 05:12:36.751144 2026] [:error] [pid 17425:tid 17481] [client 45.154.138.33:44819] [client 45.154.138.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aXkqRKrcODKH1Dl7aZAVMAAAAFM"]
[Wed Jan 28 05:12:37.680262 2026] [:error] [pid 17424:tid 17451] [client 45.154.138.9:43495] [client 45.154.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aXkqRWRvtDRvGDe-pIs3BQAAABI"]
[Wed Jan 28 05:12:38.600955 2026] [:error] [pid 17425:tid 17471] [client 45.154.138.31:40355] [client 45.154.138.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aXkqRqrcODKH1Dl7aZAVTgAAAEk"]
[Wed Jan 28 05:12:44.248013 2026] [:error] [pid 17425:tid 17469] [client 45.154.138.11:57055] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aXkqTKrcODKH1Dl7aZAVpAAAAEc"]
[Wed Jan 28 05:12:46.573439 2026] [:error] [pid 17426:tid 17506] [client 45.154.138.50:53297] [client 45.154.138.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aXkqTk8zvf_03BnziRft7gAAAJE"]
[Wed Jan 28 05:12:48.422723 2026] [:error] [pid 64842:tid 64854] [client 45.154.138.6:21705] [client 45.154.138.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aXkqUFuAAQZ5AN_SnDbotwAAAUo"]
[Wed Jan 28 05:12:49.808301 2026] [:error] [pid 17426:tid 17503] [client 45.154.138.10:62893] [client 45.154.138.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aXkqUU8zvf_03BnziRfuFgAAAI4"]
[Wed Jan 28 05:12:52.121690 2026] [:error] [pid 17425:tid 17478] [client 45.154.138.12:20883] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aXkqVKrcODKH1Dl7aZAV4QAAAFA"]
[Wed Jan 28 05:12:54.050992 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.7:49295] [client 45.154.138.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aXkqVluAAQZ5AN_SnDbpDAAAAUk"]
[Wed Jan 28 05:12:55.450586 2026] [:error] [pid 17425:tid 17487] [client 45.154.138.40:27681] [client 45.154.138.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aXkqV6rcODKH1Dl7aZAWAwAAAFg"]
[Wed Jan 28 05:12:57.780761 2026] [:error] [pid 58254:tid 58276] [client 45.154.138.48:50831] [client 45.154.138.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.48, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aXkqWfF8nSyBg9wOsa__mQAAARQ"]
[Wed Jan 28 05:12:58.719782 2026] [:error] [pid 58254:tid 58273] [client 45.154.138.48:50831] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aXkqWvF8nSyBg9wOsa__owAAARE"]
[Wed Jan 28 05:12:59.640045 2026] [:error] [pid 17425:tid 17471] [client 45.154.138.10:35013] [client 45.154.138.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aXkqW6rcODKH1Dl7aZAWJQAAAEk"]
[Wed Jan 28 05:13:04.378609 2026] [:error] [pid 58254:tid 58271] [client 45.154.138.20:48873] [client 45.154.138.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.20, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aXkqYPF8nSyBg9wOsa__3AAAAQ8"]
[Wed Jan 28 05:13:04.849393 2026] [:error] [pid 58254:tid 58273] [client 45.154.138.20:48873] [client 45.154.138.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aXkqYPF8nSyBg9wOsa__4QAAARE"]
[Wed Jan 28 05:13:08.152379 2026] [:error] [pid 17426:tid 17511] [client 45.154.138.2:20135] [client 45.154.138.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aXkqZE8zvf_03BnziRfu3wAAAJY"]
[Wed Jan 28 05:13:09.111130 2026] [:error] [pid 58254:tid 58272] [client 45.154.138.41:25985] [client 45.154.138.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aXkqZfF8nSyBg9wOsa8ACgAAARA"]
[Wed Jan 28 05:13:11.918778 2026] [:error] [pid 58254:tid 58274] [client 45.154.138.6:38243] [client 45.154.138.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aXkqZ_F8nSyBg9wOsa8ALQAAARI"]
[Wed Jan 28 05:13:17.562805 2026] [:error] [pid 17535:tid 17558] [client 45.154.138.36:36151] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aXkqba3QiSMgVscnN5IH1AAAANQ"]
[Wed Jan 28 05:13:19.880276 2026] [:error] [pid 17424:tid 17439] [client 45.154.138.20:30699] [client 45.154.138.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aXkqb2RvtDRvGDe-pIs5NAAAAAY"]
[Wed Jan 28 05:13:22.671900 2026] [:error] [pid 17424:tid 17440] [client 45.154.138.15:23805] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aXkqcmRvtDRvGDe-pIs5aQAAAAc"]
[Wed Jan 28 05:13:24.056472 2026] [:error] [pid 17425:tid 17464] [client 45.154.138.23:45367] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aXkqdKrcODKH1Dl7aZAXGAAAAEI"]
[Wed Jan 28 05:13:25.441974 2026] [:error] [pid 17424:tid 17457] [client 45.154.138.29:44539] [client 45.154.138.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aXkqdWRvtDRvGDe-pIs5hAAAABg"]
[Wed Jan 28 05:13:26.858520 2026] [:error] [pid 17424:tid 17436] [client 45.154.138.101:29097] [client 45.154.138.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aXkqdmRvtDRvGDe-pIs5kgAAAAM"]
[Wed Jan 28 05:13:28.243867 2026] [:error] [pid 17425:tid 17467] [client 45.154.138.35:53523] [client 45.154.138.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aXkqeKrcODKH1Dl7aZAXRQAAAEU"]
[Wed Jan 28 05:13:30.108942 2026] [:error] [pid 17535:tid 17548] [client 45.154.138.46:28743] [client 45.154.138.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aXkqeq3QiSMgVscnN5IIYQAAAMo"]
[Wed Jan 28 05:13:32.433860 2026] [:error] [pid 64842:tid 64862] [client 45.154.138.1:52671] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aXkqfFuAAQZ5AN_SnDbq2wAAAVI"]
[Wed Jan 28 05:13:34.777315 2026] [:error] [pid 17425:tid 17477] [client 45.154.138.23:47165] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aXkqfqrcODKH1Dl7aZAXfQAAAE8"]
[Wed Jan 28 05:13:36.628567 2026] [:error] [pid 17425:tid 17474] [client 45.154.138.30:64261] [client 45.154.138.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aXkqgKrcODKH1Dl7aZAXkgAAAEw"]
[Wed Jan 28 05:13:38.520617 2026] [proxy_fcgi:error] [pid 64842:tid 64861] [client 45.154.138.50:49973] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:13:39.922130 2026] [:error] [pid 64842:tid 64867] [client 45.154.138.50:49973] [client 45.154.138.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aXkqg1uAAQZ5AN_SnDbrTgAAAVc"]
[Wed Jan 28 05:13:47.391970 2026] [:error] [pid 17535:tid 17552] [client 45.154.138.23:59005] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aXkqi63QiSMgVscnN5IJJAAAAM4"]
[Wed Jan 28 05:13:48.315805 2026] [:error] [pid 58254:tid 58264] [client 45.154.138.101:40177] [client 45.154.138.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aXkqjPF8nSyBg9wOsa8CCQAAAQg"]
[Wed Jan 28 05:13:50.662123 2026] [:error] [pid 64842:tid 64861] [client 45.154.138.29:30949] [client 45.154.138.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aXkqjluAAQZ5AN_SnDbr_AAAAVE"]
[Wed Jan 28 05:13:51.583574 2026] [:error] [pid 17535:tid 17552] [client 45.154.138.44:37305] [client 45.154.138.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aXkqj63QiSMgVscnN5IJUAAAAM4"]
[Wed Jan 28 05:13:52.975952 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.38:56579] [client 45.154.138.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aXkqkFuAAQZ5AN_SnDbsFwAAAUk"]
[Wed Jan 28 05:13:59.177958 2026] [:error] [pid 17425:tid 17470] [client 45.154.138.47:32613] [client 45.154.138.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aXkql6rcODKH1Dl7aZAYuwAAAEg"]
[Wed Jan 28 05:14:00.562565 2026] [:error] [pid 17535:tid 17549] [client 45.154.138.10:36705] [client 45.154.138.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aXkqmK3QiSMgVscnN5IJyAAAAMs"]
[Wed Jan 28 05:14:01.617845 2026] [:error] [pid 17535:tid 17549] [client 45.154.138.10:36705] [client 45.154.138.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aXkqma3QiSMgVscnN5IJ2AAAAMs"]
[Wed Jan 28 05:14:02.539959 2026] [:error] [pid 17535:tid 17562] [client 45.154.138.6:41037] [client 45.154.138.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aXkqmq3QiSMgVscnN5IJ7AAAANg"]
[Wed Jan 28 05:14:04.899993 2026] [:error] [pid 17426:tid 17496] [client 45.154.138.12:38155] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aXkqnE8zvf_03BnziRfxZQAAAIc"]
[Wed Jan 28 05:14:06.299712 2026] [:error] [pid 64842:tid 64864] [client 45.154.138.24:58683] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aXkqnluAAQZ5AN_SnDbs5AAAAVQ"]
[Wed Jan 28 05:14:08.665619 2026] [proxy_fcgi:error] [pid 17424:tid 17449] [client 45.154.138.28:55925] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:14:11.525879 2026] [proxy_fcgi:error] [pid 17424:tid 17454] [client 45.154.138.28:55925] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:14:12.466493 2026] [:error] [pid 17424:tid 17435] [client 45.154.138.28:55925] [client 45.154.138.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aXkqpGRvtDRvGDe-pIs7TQAAAAI"]
[Wed Jan 28 05:14:14.793504 2026] [:error] [pid 58254:tid 58274] [client 45.154.138.12:36085] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aXkqpvF8nSyBg9wOsa8DTAAAARI"]
[Wed Jan 28 05:14:17.142184 2026] [:error] [pid 17535:tid 17548] [client 45.154.138.29:25509] [client 45.154.138.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.29, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aXkqqa3QiSMgVscnN5IKrQAAAMo"]
[Wed Jan 28 05:14:17.153616 2026] [proxy_fcgi:error] [pid 17535:tid 17548] [client 45.154.138.29:25509] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:14:19.961011 2026] [:error] [pid 17535:tid 17551] [client 45.154.138.29:25509] [client 45.154.138.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aXkqq63QiSMgVscnN5IK1AAAAM0"]
[Wed Jan 28 05:14:20.881761 2026] [:error] [pid 17425:tid 17482] [client 45.154.138.11:39271] [client 45.154.138.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.11, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aXkqrKrcODKH1Dl7aZAZcwAAAFQ"]
[Wed Jan 28 05:14:21.351475 2026] [:error] [pid 17425:tid 17485] [client 45.154.138.11:39271] [client 45.154.138.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aXkqrarcODKH1Dl7aZAZewAAAFY"]
[Wed Jan 28 05:14:25.137134 2026] [proxy_fcgi:error] [pid 64842:tid 64862] [client 45.154.138.45:34355] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:14:26.528666 2026] [:error] [pid 64842:tid 64848] [client 45.154.138.45:34355] [client 45.154.138.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aXkqsluAAQZ5AN_SnDbuAAAAAUQ"]
[Wed Jan 28 05:14:28.390001 2026] [:error] [pid 17426:tid 17491] [client 45.154.138.2:46251] [client 45.154.138.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aXkqtE8zvf_03BnziRfySQAAAII"]
[Wed Jan 28 05:14:29.797950 2026] [:error] [pid 17535:tid 17555] [client 45.154.138.8:28321] [client 45.154.138.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.8, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aXkqta3QiSMgVscnN5ILcAAAANE"]
[Wed Jan 28 05:14:33.591462 2026] [:error] [pid 17535:tid 17547] [client 45.154.138.8:28321] [client 45.154.138.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aXkqua3QiSMgVscnN5ILnQAAAMk"]
[Wed Jan 28 05:14:34.989641 2026] [:error] [pid 17426:tid 17500] [client 45.154.138.24:50087] [client 45.154.138.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aXkquk8zvf_03BnziRfykwAAAIs"]
[Wed Jan 28 05:14:39.707727 2026] [:error] [pid 58254:tid 58263] [client 45.154.138.1:21431] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aXkqv_F8nSyBg9wOsa8E9gAAAQc"]
[Wed Jan 28 05:14:41.095713 2026] [:error] [pid 17425:tid 17467] [client 45.154.138.9:22609] [client 45.154.138.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aXkqwarcODKH1Dl7aZAaUAAAAEU"]
[Wed Jan 28 05:14:42.508757 2026] [:error] [pid 64842:tid 64856] [client 45.154.138.7:40919] [client 45.154.138.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aXkqwluAAQZ5AN_SnDbu3wAAAUw"]
[Wed Jan 28 05:14:45.437949 2026] [:error] [pid 17426:tid 17508] [client 45.154.138.15:49861] [client 45.154.138.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.15, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aXkqxU8zvf_03BnziRfzBgAAAJM"]
[Wed Jan 28 05:14:45.921326 2026] [:error] [pid 17426:tid 17493] [client 45.154.138.15:49861] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aXkqxU8zvf_03BnziRfzDgAAAIQ"]
[Wed Jan 28 05:14:49.691075 2026] [:error] [pid 17426:tid 17508] [client 45.154.138.30:29017] [client 45.154.138.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXkqyU8zvf_03BnziRfzQgAAAJM"]
[Wed Jan 28 05:14:50.616876 2026] [:error] [pid 64842:tid 64851] [client 45.154.138.12:56133] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aXkqyluAAQZ5AN_SnDbvNQAAAUc"]
[Wed Jan 28 05:14:53.464664 2026] [proxy_fcgi:error] [pid 58254:tid 58257] [client 45.154.138.1:30575] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:14:56.591523 2026] [proxy_fcgi:error] [pid 58254:tid 58277] [client 45.154.138.1:30575] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:14:57.053067 2026] [:error] [pid 58254:tid 58275] [client 45.154.138.1:30575] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aXkq0fF8nSyBg9wOsa8GVgAAARM"]
[Wed Jan 28 05:14:59.383935 2026] [:error] [pid 17425:tid 17483] [client 45.154.138.39:58323] [client 45.154.138.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aXkq06rcODKH1Dl7aZAbSwAAAFU"]
[Wed Jan 28 05:15:03.350617 2026] [proxy_fcgi:error] [pid 17426:tid 17493] [client 45.154.138.12:62547] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:04.287000 2026] [:error] [pid 17426:tid 17494] [client 45.154.138.12:62547] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aXkq2E8zvf_03BnziRfzzwAAAIU"]
[Wed Jan 28 05:15:07.115385 2026] [:error] [pid 17426:tid 17497] [client 45.154.138.45:50345] [client 45.154.138.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aXkq208zvf_03BnziRfz8QAAAIg"]
[Wed Jan 28 05:15:11.876603 2026] [proxy_fcgi:error] [pid 17426:tid 17507] [client 45.154.138.7:41911] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:12.350126 2026] [:error] [pid 17426:tid 17490] [client 45.154.138.7:41911] [client 45.154.138.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aXkq4E8zvf_03BnziRf0NgAAAIE"]
[Wed Jan 28 05:15:13.280646 2026] [proxy_fcgi:error] [pid 17424:tid 17434] [client 45.154.138.38:25237] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:15.637896 2026] [:error] [pid 17424:tid 17447] [client 45.154.138.38:25237] [client 45.154.138.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aXkq42RvtDRvGDe-pIs9ZAAAAA4"]
[Wed Jan 28 05:15:20.359128 2026] [:error] [pid 58254:tid 58266] [client 45.154.138.39:47905] [client 45.154.138.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aXkq6PF8nSyBg9wOsa8IBQAAAQo"]
[Wed Jan 28 05:15:30.223338 2026] [:error] [pid 58254:tid 58269] [client 45.154.138.43:56573] [client 45.154.138.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.43, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aXkq8vF8nSyBg9wOsa8IzwAAAQ0"]
[Wed Jan 28 05:15:30.688354 2026] [:error] [pid 58254:tid 58258] [client 45.154.138.43:56573] [client 45.154.138.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.43, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aXkq8vF8nSyBg9wOsa8I2wAAAQI"]
[Wed Jan 28 05:15:31.200156 2026] [:error] [pid 58254:tid 58271] [client 45.154.138.43:56573] [client 45.154.138.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aXkq8_F8nSyBg9wOsa8I5gAAAQ8"]
[Wed Jan 28 05:15:35.884873 2026] [:error] [pid 58254:tid 58269] [client 45.154.138.30:25385] [client 45.154.138.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aXkq9_F8nSyBg9wOsa8JbgAAAQ0"]
[Wed Jan 28 05:15:37.755311 2026] [:error] [pid 58254:tid 58278] [client 45.154.138.25:54653] [client 45.154.138.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aXkq-fF8nSyBg9wOsa8JmwAAARY"]
[Wed Jan 28 05:15:40.607633 2026] [proxy_fcgi:error] [pid 58254:tid 58267] [client 45.154.138.48:59721] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:42.014614 2026] [proxy_fcgi:error] [pid 58254:tid 58270] [client 45.154.138.48:59721] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:42.992023 2026] [:error] [pid 58254:tid 58262] [client 45.154.138.48:59721] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aXkq_vF8nSyBg9wOsa8KAgAAAQY"]
[Wed Jan 28 05:15:43.914063 2026] [:error] [pid 17535:tid 17553] [client 45.154.138.27:47933] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aXkq_63QiSMgVscnN5IPKwAAAM8"]
[Wed Jan 28 05:15:46.768192 2026] [:error] [pid 17425:tid 17470] [client 45.154.138.50:56635] [client 45.154.138.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.50, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aXkrAqrcODKH1Dl7aZAeQQAAAEg"]
[Wed Jan 28 05:15:48.653946 2026] [:error] [pid 17425:tid 17471] [client 45.154.138.50:56635] [client 45.154.138.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aXkrBKrcODKH1Dl7aZAeYwAAAEk"]
[Wed Jan 28 05:15:50.042638 2026] [:error] [pid 17424:tid 17434] [client 45.154.138.32:31097] [client 45.154.138.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aXkrBmRvtDRvGDe-pIs_RQAAAAE"]
[Wed Jan 28 05:15:50.962589 2026] [:error] [pid 17425:tid 17486] [client 45.154.138.3:28511] [client 45.154.138.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aXkrBqrcODKH1Dl7aZAekAAAAFc"]
[Wed Jan 28 05:15:52.367494 2026] [:error] [pid 17425:tid 17467] [client 45.154.138.1:47497] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aXkrCKrcODKH1Dl7aZAeoAAAAEU"]
[Wed Jan 28 05:15:55.841598 2026] [proxy_fcgi:error] [pid 17535:tid 17547] [client 45.154.138.46:59847] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:15:56.789286 2026] [:error] [pid 17535:tid 17543] [client 45.154.138.46:59847] [client 45.154.138.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aXkrDK3QiSMgVscnN5IP5wAAAMU"]
[Wed Jan 28 05:15:58.188623 2026] [proxy_fcgi:error] [pid 64842:tid 64855] [client 45.154.138.28:59137] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:04.447703 2026] [:error] [pid 64842:tid 64844] [client 45.154.138.28:59137] [client 45.154.138.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aXkrFFuAAQZ5AN_SnDbzAgAAAUA"]
[Wed Jan 28 05:16:09.895649 2026] [:error] [pid 64842:tid 64866] [client 45.154.138.13:33979] [client 45.154.138.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aXkrGVuAAQZ5AN_SnDbzTAAAAVY"]
[Wed Jan 28 05:16:13.172062 2026] [:error] [pid 58254:tid 58265] [client 45.154.138.101:25591] [client 45.154.138.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aXkrHfF8nSyBg9wOsa8L4AAAAQk"]
[Wed Jan 28 05:16:14.578514 2026] [:error] [pid 58254:tid 58266] [client 45.154.138.16:52227] [client 45.154.138.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aXkrHvF8nSyBg9wOsa8L_AAAAQo"]
[Wed Jan 28 05:16:18.756994 2026] [:error] [pid 17426:tid 17501] [client 45.154.138.10:58207] [client 45.154.138.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aXkrIk8zvf_03BnziRf37AAAAIw"]
[Wed Jan 28 05:16:19.680629 2026] [:error] [pid 17424:tid 17443] [client 45.154.138.31:25501] [client 45.154.138.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aXkrI2RvtDRvGDe-pItBAgAAAAo"]
[Wed Jan 28 05:16:21.602358 2026] [:error] [pid 17425:tid 17487] [client 45.154.138.28:24679] [client 45.154.138.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aXkrJarcODKH1Dl7aZAgJQAAAFg"]
[Wed Jan 28 05:16:35.916621 2026] [proxy_fcgi:error] [pid 17424:tid 17454] [client 45.154.138.48:35321] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:16:36.910379 2026] [:error] [pid 17424:tid 17441] [client 45.154.138.48:35321] [client 45.154.138.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aXkrNGRvtDRvGDe-pItCVwAAAAg"]
[Wed Jan 28 05:16:42.576392 2026] [:error] [pid 58254:tid 58264] [client 45.154.138.27:35681] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aXkrOvF8nSyBg9wOsa8N0wAAAQg"]
[Wed Jan 28 05:16:54.512119 2026] [:error] [pid 17426:tid 17507] [client 45.154.138.1:37025] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aXkrRk8zvf_03BnziRf5nAAAAJI"]
[Wed Jan 28 05:16:55.433718 2026] [:error] [pid 17535:tid 17552] [client 45.154.138.26:22719] [client 45.154.138.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aXkrR63QiSMgVscnN5ITdAAAAM4"]
[Wed Jan 28 05:17:02.357424 2026] [:error] [pid 17425:tid 17482] [client 45.154.138.15:37087] [client 45.154.138.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aXkrTqrcODKH1Dl7aZAiiwAAAFQ"]
[Wed Jan 28 05:17:03.744599 2026] [:error] [pid 58254:tid 58268] [client 45.154.138.5:41607] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aXkrT_F8nSyBg9wOsa8O3gAAAQw"]
[Wed Jan 28 05:17:11.313844 2026] [:error] [pid 64842:tid 64856] [client 45.154.138.27:64607] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aXkrV1uAAQZ5AN_SnDb2WQAAAUw"]
[Wed Jan 28 05:17:12.254306 2026] [:error] [pid 58254:tid 58260] [client 45.154.138.36:65009] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aXkrWPF8nSyBg9wOsa8PQQAAAQQ"]
[Wed Jan 28 05:17:13.702567 2026] [:error] [pid 58254:tid 58264] [client 45.154.138.235:57595] [client 45.154.138.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aXkrWfF8nSyBg9wOsa8PVQAAAQg"]
[Wed Jan 28 05:17:15.563451 2026] [:error] [pid 2454:tid 2475] [client 45.154.138.35:61345] [client 45.154.138.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aXkrW5vv4I21Ywd7NNbl8gAAAZE"]
[Wed Jan 28 05:17:16.484875 2026] [:error] [pid 17535:tid 17555] [client 45.154.138.4:43709] [client 45.154.138.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aXkrXK3QiSMgVscnN5IUhQAAANE"]
[Wed Jan 28 05:17:18.362564 2026] [:error] [pid 2454:tid 2467] [client 45.154.138.4:48187] [client 45.154.138.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.4, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/images/wp-login.php"] [unique_id "aXkrXpvv4I21Ywd7NNbmKAAAAYk"]
[Wed Jan 28 05:17:20.269197 2026] [:error] [pid 2454:tid 2458] [client 45.154.138.4:48187] [client 45.154.138.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aXkrYJvv4I21Ywd7NNbmRwAAAYA"]
[Wed Jan 28 05:17:23.092560 2026] [:error] [pid 58254:tid 58276] [client 45.154.138.10:56181] [client 45.154.138.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aXkrY_F8nSyBg9wOsa8PwgAAARQ"]
[Wed Jan 28 05:17:24.012485 2026] [:error] [pid 17425:tid 17486] [client 45.154.138.45:58469] [client 45.154.138.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aXkrZKrcODKH1Dl7aZAjJwAAAFc"]
[Wed Jan 28 05:17:24.939751 2026] [proxy_fcgi:error] [pid 64842:tid 64845] [client 45.154.138.1:60967] AH01071: Got error 'Primary script unknown'
[Wed Jan 28 05:17:25.415911 2026] [:error] [pid 64842:tid 64855] [client 45.154.138.1:60967] [client 45.154.138.1] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.1, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aXkrZVuAAQZ5AN_SnDb22AAAAUs"]
[Wed Jan 28 05:17:26.349665 2026] [:error] [pid 64842:tid 64844] [client 45.154.138.1:60967] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aXkrZluAAQZ5AN_SnDb24gAAAUA"]
[Wed Jan 28 05:17:29.218296 2026] [:error] [pid 17425:tid 17463] [client 45.154.138.41:20691] [client 45.154.138.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aXkraarcODKH1Dl7aZAjVQAAAEE"]
[Wed Jan 28 05:17:53.150973 2026] [:error] [pid 58254:tid 58265] [client 45.154.138.45:57523] [client 45.154.138.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.45, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aXkrgfF8nSyBg9wOsa8RTQAAAQk"]
[Wed Jan 28 05:17:55.084907 2026] [:error] [pid 58254:tid 58266] [client 45.154.138.45:57523] [client 45.154.138.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.45, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aXkrg_F8nSyBg9wOsa8RZAAAAQo"]
[Wed Jan 28 05:17:56.488890 2026] [:error] [pid 58254:tid 58279] [client 45.154.138.45:57523] [client 45.154.138.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aXkrhPF8nSyBg9wOsa8RdgAAARc"]
[Wed Jan 28 05:17:57.424615 2026] [:error] [pid 17535:tid 17556] [client 45.154.138.8:34663] [client 45.154.138.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aXkrha3QiSMgVscnN5IWngAAANI"]
[Wed Jan 28 05:17:58.342750 2026] [:error] [pid 17424:tid 17454] [client 45.154.138.17:54997] [client 45.154.138.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aXkrhmRvtDRvGDe-pItGzwAAABU"]
[Wed Jan 28 05:18:04.632645 2026] [:error] [pid 17424:tid 17449] [client 45.154.138.44:28271] [client 45.154.138.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.44, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aXkrjGRvtDRvGDe-pItHFAAAABA"]
[Wed Jan 28 05:18:05.117971 2026] [:error] [pid 17424:tid 17437] [client 45.154.138.44:28271] [client 45.154.138.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aXkrjWRvtDRvGDe-pItHGAAAAAQ"]
[Wed Jan 28 05:18:06.999595 2026] [:error] [pid 58254:tid 58267] [client 45.154.138.50:49365] [client 45.154.138.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.50, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aXkrjvF8nSyBg9wOsa8R8AAAAQs"]
[Wed Jan 28 05:18:14.542028 2026] [:error] [pid 58254:tid 58261] [client 45.154.138.50:49365] [client 45.154.138.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aXkrlvF8nSyBg9wOsa8SVgAAAQU"]
[Wed Jan 28 05:18:20.757771 2026] [:error] [pid 17424:tid 17436] [client 45.154.138.1:60551] [client 45.154.138.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aXkrnGRvtDRvGDe-pItH2wAAAAM"]
[Wed Jan 28 05:18:27.794330 2026] [:error] [pid 17425:tid 17480] [client 45.154.138.38:21603] [client 45.154.138.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.38, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aXkro6rcODKH1Dl7aZAlsQAAAFI"]
[Wed Jan 28 05:18:34.357885 2026] [autoindex:error] [pid 17425:tid 17481] [client 45.154.138.38:21603] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:20:24.954563 2026] [:error] [pid 17535:tid 17560] [client 45.154.138.48:62667] [client 45.154.138.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/update/"] [unique_id "aXksGK3QiSMgVscnN5IetAAAANY"]
[Wed Jan 28 05:21:14.355783 2026] [authz_core:error] [pid 17424:tid 17441] [client 45.154.138.22:32827] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/
[Wed Jan 28 07:09:01.762794 2026] [:error] [pid 2454:tid 2473] [client 141.98.11.239:55557] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aXlFjZvv4I21Ywd7NNY7swAAAY8"]
[Wed Jan 28 07:09:03.005139 2026] [:error] [pid 26993:tid 27010] [client 141.98.11.239:51011] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aXlFj2nuZQRiIvPvxUtZ2QAAAc0"], referer: http://measureyourcause.com.au/wp-login.php
[Wed Jan 28 07:09:03.005215 2026] [:error] [pid 26993:tid 27010] [client 141.98.11.239:51011] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.239 on wp-login.php, counter = 68"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aXlFj2nuZQRiIvPvxUtZ2QAAAc0"], referer: http://measureyourcause.com.au/wp-login.php
[Wed Jan 28 08:18:44.022256 2026] [autoindex:error] [pid 64842:tid 64844] [client 167.99.118.47:58319] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Jan 28 08:48:13.708380 2026] [:error] [pid 17426:tid 17488] [client 170.106.167.214:57730] [client 170.106.167.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXlczU8zvf_03BnziRdc0QAAAIA"]
[Wed Jan 28 13:22:56.114888 2026] [:error] [pid 33636:tid 33651] [client 45.137.126.18:26629] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aXmdMNIVZAudQH0BSC7g4QAAAg0"]
[Wed Jan 28 13:22:57.031593 2026] [:error] [pid 33491:tid 33573] [client 45.137.126.12:40637] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aXmdMWP9UY0x3irkINC29gAAANY"]
[Wed Jan 28 17:20:15.113463 2026] [:error] [pid 33489:tid 33501] [client 60.188.57.0:43770] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXnUzxZrVZwQUFWC7_8n4AAAAAg"]
[Wed Jan 28 19:54:50.845821 2026] [:error] [pid 33490:tid 33524] [client 35.87.165.99:42542] [client 35.87.165.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXn5Cmjexcy58gsBPJGe8wAAAEA"]
[Wed Jan 28 20:15:46.729245 2026] [:error] [pid 33489:tid 33508] [client 3.12.163.221:48836] [client 3.12.163.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/_next/data"] [unique_id "aXn98hZrVZwQUFWC7_9IyQAAAA8"]
[Wed Jan 28 20:15:47.528201 2026] [:error] [pid 33490:tid 33537] [client 3.12.163.221:37430] [client 3.12.163.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXn982jexcy58gsBPJGmRgAAAE0"]
[Wed Jan 28 23:15:50.779960 2026] [:error] [pid 42740:tid 42755] [client 213.209.159.151:45540] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXooJlnjAS34srJlXgTGDgAAAI0"]
[Thu Jan 29 03:33:54.702816 2026] [:error] [pid 15950:tid 16038] [client 47.90.227.150:53948] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXpkooJOXwUqBC55abQrqwAAAJM"]
[Thu Jan 29 03:33:55.343139 2026] [:error] [pid 15950:tid 16037] [client 47.90.227.150:57916] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXpko4JOXwUqBC55abQrsQAAAJI"]
[Thu Jan 29 05:59:39.864836 2026] [:error] [pid 20486:tid 20504] [client 182.43.70.143:46871] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXqGy3gqSZb6GBx5nnPp0gAAAQ8"]
[Thu Jan 29 06:47:36.540259 2026] [:error] [pid 20580:tid 20691] [client 43.153.7.191:50032] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXqSCJCZ5HHdXPmeL59cBQAAApc"]
[Thu Jan 29 11:57:57.643307 2026] [:error] [pid 19070:tid 19117] [client 120.71.59.24:58300] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXraxbou83lIon_aKgZzvwAAAEs"]
[Thu Jan 29 12:05:30.684128 2026] [ssl:error] [pid 20579:tid 20646] [client 15.204.182.106:10284] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourcause.com/
[Thu Jan 29 13:00:03.681846 2026] [ssl:error] [pid 20486:tid 20498] [client 15.204.182.106:34068] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourcause.com/
[Thu Jan 29 17:50:58.653313 2026] [:error] [pid 19069:tid 19086] [client 136.113.133.140:50609] [client 136.113.133.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.133.140, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXstgvDHsRM4BJ9a4QsjtgAAAAg"]
[Thu Jan 29 17:51:02.652364 2026] [:error] [pid 19069:tid 19088] [client 136.113.133.140:50609] [client 136.113.133.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXsthvDHsRM4BJ9a4QsjxgAAAAo"]
[Thu Jan 29 17:51:03.456470 2026] [:error] [pid 19071:tid 19140] [client 136.113.133.140:59664] [client 136.113.133.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXsth5fa8Ix5wWmtmJxheQAAAIc"]
[Thu Jan 29 17:51:04.257947 2026] [:error] [pid 20579:tid 20651] [client 136.113.133.140:62162] [client 136.113.133.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXstiDVXNopcNyjJc9X4WQAAAko"]
[Thu Jan 29 17:51:05.079074 2026] [:error] [pid 19177:tid 19193] [client 136.113.133.140:55461] [client 136.113.133.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXstiXipGz0PT8TrQv5wdwAAAM4"]
[Thu Jan 29 17:51:05.870705 2026] [:error] [pid 19069:tid 19089] [client 136.113.133.140:56934] [client 136.113.133.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXstifDHsRM4BJ9a4Qsj0gAAAAs"]
[Thu Jan 29 17:51:06.663158 2026] [:error] [pid 19069:tid 19101] [client 136.113.133.140:50522] [client 136.113.133.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXstivDHsRM4BJ9a4Qsj0wAAABc"]
[Thu Jan 29 17:51:07.482369 2026] [:error] [pid 20579:tid 20641] [client 136.113.133.140:56064] [client 136.113.133.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXstizVXNopcNyjJc9X4XQAAAkA"]
[Thu Jan 29 20:55:14.736064 2026] [:error] [pid 20576:tid 20601] [client 34.134.138.112:56996] [client 34.134.138.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.134.138.112, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXtYsirDZws_FlQGi9d0QAAAAc8"]
[Thu Jan 29 20:55:17.525378 2026] [:error] [pid 20576:tid 20607] [client 34.134.138.112:56996] [client 34.134.138.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXtYtSrDZws_FlQGi9d0TQAAAdU"]
[Thu Jan 29 20:55:18.425209 2026] [:error] [pid 19070:tid 19108] [client 34.134.138.112:55785] [client 34.134.138.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXtYtrou83lIon_aKgbqrwAAAEI"]
[Thu Jan 29 20:55:19.238293 2026] [:error] [pid 19070:tid 19122] [client 34.134.138.112:64651] [client 34.134.138.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXtYt7ou83lIon_aKgbqsQAAAFA"]
[Thu Jan 29 20:55:20.064518 2026] [:error] [pid 20580:tid 20677] [client 34.134.138.112:55563] [client 34.134.138.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXtYuJCZ5HHdXPmeL581nwAAAok"]
[Thu Jan 29 20:55:20.868441 2026] [:error] [pid 19071:tid 19150] [client 34.134.138.112:49466] [client 34.134.138.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXtYuJfa8Ix5wWmtmJyMHQAAAJE"]
[Thu Jan 29 20:55:21.680692 2026] [:error] [pid 20486:tid 20509] [client 34.134.138.112:63328] [client 34.134.138.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXtYuXgqSZb6GBx5nnP90QAAARQ"]
[Thu Jan 29 20:55:22.603768 2026] [:error] [pid 20486:tid 20512] [client 34.134.138.112:55195] [client 34.134.138.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXtYungqSZb6GBx5nnP91AAAARc"]
[Thu Jan 29 22:28:27.498169 2026] [:error] [pid 19069:tid 19080] [client 47.90.227.150:38016] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXtui_DHsRM4BJ9a4QuBrgAAAAI"]
[Thu Jan 29 22:28:28.135671 2026] [:error] [pid 20519:tid 20556] [client 47.90.227.150:60474] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXtujAo4s4fyROrkyRn93QAAAYg"]
[Fri Jan 30 00:13:54.186117 2026] [ssl:error] [pid 39501:tid 39518] [client 15.204.183.221:32094] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourcause.com/
[Fri Jan 30 00:16:51.300120 2026] [:error] [pid 39503:tid 39566] [client 44.204.65.216:60780] [client 44.204.65.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||measureyourcause.com.au|F|4"] [data "grub-client"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXuH8zzoHqvQcupFdnbcmwAAAQM"]
[Fri Jan 30 00:47:12.795538 2026] [:error] [pid 39592:tid 39619] [client 85.203.21.93:31731] [client 85.203.21.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aXuPEJlnGYODSsJUyHkySwAAANY"]
[Fri Jan 30 00:47:14.290090 2026] [:error] [pid 39592:tid 39613] [client 85.203.21.137:61677] [client 85.203.21.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aXuPEplnGYODSsJUyHkyTwAAANA"]
[Fri Jan 30 01:01:30.814231 2026] [ssl:error] [pid 39783:tid 39789] [client 15.204.183.221:43146] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourcause.com/
[Fri Jan 30 01:03:40.709492 2026] [rewrite:error] [pid 39503:tid 39582] [client 103.4.250.144:10950] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Fri Jan 30 01:38:20.792605 2026] [:error] [pid 39502:tid 39542] [client 144.172.112.54:47360] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aXubDACUcXwXieepEYj2RAAAAIY"]
[Fri Jan 30 02:49:45.171982 2026] [:error] [pid 13797:tid 13814] [client 159.223.41.157:62369] [client 159.223.41.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.41.157, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXuryUZz78bylh5pU4SKLQAAAc8"]
[Fri Jan 30 02:49:46.031892 2026] [:error] [pid 13797:tid 13801] [client 159.223.41.157:62369] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aXurykZz78bylh5pU4SKMgAAAcI"]
[Fri Jan 30 02:49:46.715209 2026] [:error] [pid 39783:tid 39787] [client 159.223.41.157:62964] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aXuryq51RNfzhKG5ppPeZwAAAEI"]
[Fri Jan 30 02:49:47.409753 2026] [:error] [pid 39813:tid 39828] [client 159.223.41.157:63208] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aXury9_AaZSBkqpNK00HlQAAAU0"]
[Fri Jan 30 02:49:48.107099 2026] [:error] [pid 13797:tid 13820] [client 159.223.41.157:63354] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aXurzEZz78bylh5pU4SKNwAAAdU"]
[Fri Jan 30 02:49:48.789754 2026] [:error] [pid 39783:tid 39802] [client 159.223.41.157:63511] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "aXurzK51RNfzhKG5ppPeawAAAFE"]
[Fri Jan 30 02:49:49.473248 2026] [:error] [pid 13765:tid 13787] [client 159.223.41.157:63761] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aXurzbU6eEFCVbA7WHS_wwAAAZQ"]
[Fri Jan 30 02:49:50.171318 2026] [:error] [pid 13828:tid 13833] [client 159.223.41.157:63909] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXurzug30BgRfEx7ROHpqwAAAgM"]
[Fri Jan 30 02:49:50.855032 2026] [:error] [pid 26945:tid 26975] [client 159.223.41.157:64082] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXurzgW-EMYAck0PyR4x1QAAAlI"]
[Fri Jan 30 02:49:51.538957 2026] [:error] [pid 39502:tid 39543] [client 159.223.41.157:53982] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXurzwCUcXwXieepEYgKjwAAAIc"]
[Fri Jan 30 02:49:52.236221 2026] [:error] [pid 13797:tid 13806] [client 159.223.41.157:54113] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXur0EZz78bylh5pU4SKPAAAAcc"]
[Fri Jan 30 03:07:58.961828 2026] [ssl:error] [pid 39501:tid 39510] [client 15.204.161.7:12228] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourcause.com/
[Fri Jan 30 03:47:16.659323 2026] [ssl:error] [pid 46912:tid 46925] [client 15.204.161.7:62706] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourcause.com/
[Fri Jan 30 03:49:32.300043 2026] [:error] [pid 46912:tid 46930] [client 85.203.21.77:38581] [client 85.203.21.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aXu5zD6yiVW7A9NwFFncawAAAAY"]
[Fri Jan 30 03:49:35.303029 2026] [:error] [pid 46914:tid 47002] [client 85.203.21.115:28565] [client 85.203.21.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aXu5z1gSfJ4kZxNKlb-LAgAAAJg"]
[Fri Jan 30 05:03:18.806515 2026] [:error] [pid 46913:tid 46951] [client 5.182.17.127:65296] [client 5.182.17.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aXvLFjMWmKL8hOfC3uQI9gAAAEA"], referer: binance.com
[Fri Jan 30 05:12:59.937477 2026] [ssl:error] [pid 46913:tid 46971] [client 40.160.16.154:44230] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourcause.com/
[Fri Jan 30 05:39:35.936592 2026] [ssl:error] [pid 24681:tid 24687] [client 40.160.16.154:21296] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourcause.com/
[Fri Jan 30 05:50:57.237579 2026] [:error] [pid 46912:tid 46936] [client 144.172.112.54:46224] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aXvWQT6yiVW7A9NwFFkFogAAAAw"]
[Fri Jan 30 05:57:22.790424 2026] [autoindex:error] [pid 24712:tid 24762] [client 164.90.142.198:52268] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Jan 30 12:13:10.642398 2026] [:error] [pid 38980:tid 38998] [client 16.28.59.79:46200] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aXwv1rYByxUZEaKXdHo-9gAAAgs"], referer: https://www.google.com/
[Fri Jan 30 12:13:11.482174 2026] [:error] [pid 24712:tid 24764] [client 16.28.59.79:46206] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/credentials"] [unique_id "aXwv14RLQrFiQF3h9-vCcwAAAZY"], referer: https://www.google.com/
[Fri Jan 30 12:13:12.322801 2026] [:error] [pid 24711:tid 24724] [client 16.28.59.79:46222] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aXwv2K5Gwh4var6T23LYNAAAAUo"], referer: https://www.google.com/
[Fri Jan 30 12:13:13.153630 2026] [:error] [pid 47663:tid 47665] [client 16.28.59.79:46224] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aXwv2UHGTrgIKCqEYbU_WAAAAkA"], referer: https://www.google.com/
[Fri Jan 30 12:13:13.982483 2026] [:error] [pid 24711:tid 24737] [client 16.28.59.79:46226] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aXwv2a5Gwh4var6T23LYNwAAAVc"], referer: https://www.google.com/
[Fri Jan 30 12:13:14.818736 2026] [:error] [pid 46912:tid 46928] [client 16.28.59.79:47052] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aXwv2j6yiVW7A9NwFFlwVwAAAAQ"], referer: https://www.google.com/
[Fri Jan 30 12:13:15.653998 2026] [:error] [pid 24681:tid 24692] [client 16.28.59.79:47054] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aXwv24E368IXQpahn0IjkgAAAQk"], referer: https://www.google.com/
[Fri Jan 30 12:13:16.499171 2026] [:error] [pid 46913:tid 46961] [client 16.28.59.79:47056] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aXwv3DMWmKL8hOfC3uRyHQAAAEo"], referer: https://www.google.com/
[Fri Jan 30 12:13:17.332789 2026] [:error] [pid 38686:tid 38695] [client 16.28.59.79:47072] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "aXwv3QoE8BAjgw1_sAUHUwAAAcU"], referer: https://www.google.com/
[Fri Jan 30 12:13:18.163255 2026] [:error] [pid 24712:tid 24746] [client 16.28.59.79:47088] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "aXwv3oRLQrFiQF3h9-vCegAAAYU"], referer: https://www.google.com/
[Fri Jan 30 12:13:18.995335 2026] [:error] [pid 24711:tid 24722] [client 16.28.59.79:47092] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aXwv3q5Gwh4var6T23LYQQAAAUg"], referer: https://www.google.com/
[Fri Jan 30 12:13:19.966417 2026] [:error] [pid 46913:tid 46962] [client 16.28.59.79:47100] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aXwv3zMWmKL8hOfC3uRyHwAAAEs"], referer: https://www.google.com/
[Fri Jan 30 12:13:20.856256 2026] [:error] [pid 38980:tid 39010] [client 16.28.59.79:47106] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aXwv4LYByxUZEaKXdHo_AAAAAhc"], referer: https://www.google.com/
[Fri Jan 30 12:13:21.881085 2026] [:error] [pid 47021:tid 47029] [client 16.28.59.79:47116] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aXwv4dap1k13UdZUNSTNZQAAAMY"], referer: https://www.google.com/
[Fri Jan 30 12:13:22.735150 2026] [:error] [pid 24711:tid 24730] [client 16.28.59.79:47124] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aXwv4q5Gwh4var6T23LYRwAAAVA"], referer: https://www.google.com/
[Fri Jan 30 12:13:23.564243 2026] [:error] [pid 46912:tid 46947] [client 16.28.59.79:47132] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "aXwv4z6yiVW7A9NwFFlwYAAAABc"], referer: https://www.google.com/
[Fri Jan 30 12:13:24.396845 2026] [:error] [pid 47663:tid 47689] [client 16.28.59.79:47148] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aXwv5EHGTrgIKCqEYbU_YgAAAlg"], referer: https://www.google.com/
[Fri Jan 30 12:13:25.227231 2026] [:error] [pid 47663:tid 47670] [client 16.28.59.79:56554] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "aXwv5UHGTrgIKCqEYbU_ZgAAAkU"], referer: https://www.google.com/
[Fri Jan 30 12:13:26.053735 2026] [:error] [pid 47663:tid 47674] [client 16.28.59.79:56570] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod.local"] [unique_id "aXwv5kHGTrgIKCqEYbU_awAAAkk"], referer: https://www.google.com/
[Fri Jan 30 12:13:26.887362 2026] [:error] [pid 24711:tid 24722] [client 16.28.59.79:56586] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev.local"] [unique_id "aXwv5q5Gwh4var6T23LYVAAAAUg"], referer: https://www.google.com/
[Fri Jan 30 12:13:27.726233 2026] [:error] [pid 24712:tid 24743] [client 16.28.59.79:56600] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.remote"] [unique_id "aXwv54RLQrFiQF3h9-vCgwAAAYI"], referer: https://www.google.com/
[Fri Jan 30 12:13:28.554492 2026] [:error] [pid 24711:tid 24735] [client 16.28.59.79:56606] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.1"] [unique_id "aXwv6K5Gwh4var6T23LYVwAAAVU"], referer: https://www.google.com/
[Fri Jan 30 12:13:29.385701 2026] [:error] [pid 24712:tid 24760] [client 16.28.59.79:56620] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.2"] [unique_id "aXwv6YRLQrFiQF3h9-vCjgAAAZI"], referer: https://www.google.com/
[Fri Jan 30 12:13:30.366911 2026] [:error] [pid 47021:tid 47027] [client 16.28.59.79:56628] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aXwv6tap1k13UdZUNSTNfQAAAMQ"], referer: https://www.google.com/
[Fri Jan 30 12:13:31.255977 2026] [:error] [pid 38686:tid 38693] [client 16.28.59.79:56642] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/v1/.env"] [unique_id "aXwv6woE8BAjgw1_sAUHXAAAAcM"], referer: https://www.google.com/
[Fri Jan 30 12:13:32.163872 2026] [:error] [pid 46913:tid 46962] [client 16.28.59.79:56644] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/v2/.env"] [unique_id "aXwv7DMWmKL8hOfC3uRyKAAAAEs"], referer: https://www.google.com/
[Fri Jan 30 12:13:33.075768 2026] [:error] [pid 24712:tid 24747] [client 16.28.59.79:56652] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "aXwv7YRLQrFiQF3h9-vCnAAAAYY"], referer: https://www.google.com/
[Fri Jan 30 12:13:33.976743 2026] [:error] [pid 46913:tid 46966] [client 16.28.59.79:56664] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/server/.env"] [unique_id "aXwv7TMWmKL8hOfC3uRyKQAAAE8"], referer: https://www.google.com/
[Fri Jan 30 12:13:35.013903 2026] [:error] [pid 47663:tid 47670] [client 16.28.59.79:55266] [client 16.28.59.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "aXwv70HGTrgIKCqEYbU_bgAAAkU"], referer: https://www.google.com/
[Fri Jan 30 12:57:11.367843 2026] [:error] [pid 24712:tid 24765] [client 111.172.249.49:37771] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXw6J4RLQrFiQF3h9-vSRAAAAZc"]
[Fri Jan 30 17:15:27.130398 2026] [:error] [pid 38686:tid 38697] [client 47.128.116.116:43562] [client 47.128.116.116] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "114.119.132.159_2f20390f4bf2c71a212308cf7c6fbb784b1f8cbf"): Internal error (specific information not available) [hostname "measureyourcause.com.au"] [uri "/index.php"] [unique_id "aXx2rAoE8BAjgw1_sAVEIwAAAcc"]
[Fri Jan 30 19:40:17.801977 2026] [:error] [pid 24712:tid 24747] [client 74.248.24.238:51574] [client 74.248.24.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aXyYoYRLQrFiQF3h9-s3RwAAAYY"]
[Fri Jan 30 20:53:35.854417 2026] [:error] [pid 24681:tid 24684] [client 43.152.72.244:38662] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aXypz4E368IXQpahn0J_FQAAAQE"]
[Fri Jan 30 22:07:15.195928 2026] [:error] [pid 46914:tid 46993] [client 45.137.126.5:31339] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXy7E1gSfJ4kZxNKlb_Z3wAAAI8"]
[Fri Jan 30 22:07:18.068738 2026] [:error] [pid 47021:tid 47046] [client 45.137.126.51:28289] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aXy7Ftap1k13UdZUNSRUHgAAANc"]
[Fri Jan 30 22:07:22.585445 2026] [:error] [pid 24712:tid 24748] [client 45.137.126.3:27589] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aXy7GoRLQrFiQF3h9-tYjwAAAYc"]
[Fri Jan 30 22:07:25.438863 2026] [:error] [pid 38686:tid 38703] [client 45.137.126.31:34623] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aXy7HQoE8BAjgw1_sAVzbQAAAc0"]
[Fri Jan 30 22:07:29.893437 2026] [:error] [pid 46914:tid 46998] [client 45.137.126.23:44209] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aXy7IVgSfJ4kZxNKlb_aGgAAAJQ"]
[Fri Jan 30 22:07:31.568387 2026] [:error] [pid 24681:tid 24693] [client 45.137.126.43:30885] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXy7I4E368IXQpahn0KL4QAAAQo"]
[Fri Jan 30 23:12:46.410666 2026] [:error] [pid 46913:tid 46955] [client 69.5.22.189:35768] [client 69.5.22.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/"] [unique_id "aXzKbjMWmKL8hOfC3uTyuQAAAEQ"]
[Fri Jan 30 23:12:47.135602 2026] [:error] [pid 47663:tid 47669] [client 69.5.22.189:35780] [client 69.5.22.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aXzKb0HGTrgIKCqEYbW8igAAAkQ"]
[Sat Jan 31 00:56:47.660872 2026] [rewrite:error] [pid 59660:tid 59672] [client 103.4.250.115:41354] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Sat Jan 31 00:56:59.389852 2026] [rewrite:error] [pid 59660:tid 59677] [client 104.164.126.233:34280] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Sat Jan 31 01:21:31.791980 2026] [:error] [pid 59662:tid 59732] [client 20.199.113.235:13247] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doko.php"] [unique_id "aXzomw7k73dlTgySEchVQgAAAI4"]
[Sat Jan 31 01:21:34.571725 2026] [:error] [pid 59660:tid 59684] [client 20.199.113.235:13217] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doko.php"] [unique_id "aXzoniwTX33V6TPUqxPr_wAAABQ"]
[Sat Jan 31 01:21:35.617279 2026] [:error] [pid 59660:tid 59676] [client 20.199.113.235:6959] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doko.php"] [unique_id "aXzonywTX33V6TPUqxPsAQAAAAw"]
[Sat Jan 31 01:21:37.040845 2026] [:error] [pid 59661:tid 59698] [client 20.199.113.235:39493] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doko.php"] [unique_id "aXzooZw_qINw5Uk-43XYsQAAAEc"]
[Sat Jan 31 01:21:37.992955 2026] [:error] [pid 59660:tid 59687] [client 20.199.113.235:32962] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sst.php"] [unique_id "aXzooSwTX33V6TPUqxPsIgAAABc"]
[Sat Jan 31 01:21:41.834933 2026] [:error] [pid 59661:tid 59696] [client 20.199.113.235:12207] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sst.php"] [unique_id "aXzopZw_qINw5Uk-43XYzQAAAEU"]
[Sat Jan 31 01:21:44.107992 2026] [:error] [pid 59748:tid 59766] [client 20.199.113.235:17178] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sst.php"] [unique_id "aXzoqGlxTen-ziDxotR_EQAAAM8"]
[Sat Jan 31 01:21:45.038599 2026] [:error] [pid 59748:tid 59770] [client 20.199.113.235:33013] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sst.php"] [unique_id "aXzoqWlxTen-ziDxotR_FAAAANM"]
[Sat Jan 31 01:22:00.017041 2026] [:error] [pid 60001:tid 60014] [client 20.199.113.235:35583] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/easy.php"] [unique_id "aXzouKM2ziQ7JN4IjDxPKgAAAQs"]
[Sat Jan 31 01:22:01.225255 2026] [:error] [pid 59660:tid 59685] [client 20.199.113.235:35565] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-rss4.php"] [unique_id "aXzouSwTX33V6TPUqxPsbQAAABU"]
[Sat Jan 31 01:22:03.659824 2026] [:error] [pid 59660:tid 59682] [client 20.199.113.235:25579] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-rss4.php"] [unique_id "aXzouywTX33V6TPUqxPsgAAAABI"]
[Sat Jan 31 01:22:11.539382 2026] [:error] [pid 59748:tid 59768] [client 20.199.113.235:32987] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-rss4.php"] [unique_id "aXzow2lxTen-ziDxotR_MwAAANE"]
[Sat Jan 31 01:22:13.394642 2026] [:error] [pid 59661:tid 59699] [client 20.199.113.235:40175] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-rss4.php"] [unique_id "aXzoxZw_qINw5Uk-43XZFAAAAEg"]
[Sat Jan 31 01:22:18.099960 2026] [:error] [pid 59748:tid 59775] [client 20.199.113.235:6707] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nlvbr.php"] [unique_id "aXzoymlxTen-ziDxotR_QAAAANg"]
[Sat Jan 31 01:22:20.712616 2026] [:error] [pid 59660:tid 59670] [client 20.199.113.235:24330] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nlvbr.php"] [unique_id "aXzozCwTX33V6TPUqxPspwAAAAY"]
[Sat Jan 31 01:22:24.262615 2026] [:error] [pid 59748:tid 59766] [client 20.199.113.235:31585] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nlvbr.php"] [unique_id "aXzo0GlxTen-ziDxotR_TwAAAM8"]
[Sat Jan 31 01:22:24.984822 2026] [:error] [pid 59748:tid 59770] [client 20.199.113.235:40202] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nlvbr.php"] [unique_id "aXzo0GlxTen-ziDxotR_UgAAANM"]
[Sat Jan 31 01:22:26.507405 2026] [:error] [pid 59748:tid 59771] [client 20.199.113.235:24992] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aXzo0mlxTen-ziDxotR_WgAAANQ"]
[Sat Jan 31 01:22:28.172944 2026] [:error] [pid 60001:tid 60021] [client 20.199.113.235:40176] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aXzo1KM2ziQ7JN4IjDxPUAAAARI"]
[Sat Jan 31 01:22:52.072360 2026] [:error] [pid 59660:tid 59684] [client 20.199.113.235:6684] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1.php"] [unique_id "aXzo7CwTX33V6TPUqxPs9AAAABQ"]
[Sat Jan 31 01:22:53.459455 2026] [:error] [pid 59660:tid 59682] [client 20.199.113.235:12455] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1.php"] [unique_id "aXzo7SwTX33V6TPUqxPs9QAAABI"]
[Sat Jan 31 01:22:55.301244 2026] [:error] [pid 60001:tid 60024] [client 20.199.113.235:24335] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1.php"] [unique_id "aXzo76M2ziQ7JN4IjDxPcwAAARU"]
[Sat Jan 31 01:23:24.870499 2026] [:error] [pid 59660:tid 59665] [client 20.199.113.235:28675] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXzpDCwTX33V6TPUqxPtOgAAAAE"]
[Sat Jan 31 01:23:28.820086 2026] [:error] [pid 59661:tid 59711] [client 20.199.113.235:24357] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXzpEJw_qINw5Uk-43XZtAAAAFQ"]
[Sat Jan 31 01:23:30.098790 2026] [:error] [pid 59748:tid 59751] [client 20.199.113.235:38088] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXzpEmlxTen-ziDxotR_2QAAAMA"]
[Sat Jan 31 01:23:31.337933 2026] [:error] [pid 59748:tid 59758] [client 20.199.113.235:12375] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrhbdzdz.php"] [unique_id "aXzpE2lxTen-ziDxotR_4AAAAMc"]
[Sat Jan 31 01:23:34.087723 2026] [:error] [pid 59661:tid 59704] [client 20.199.113.235:40164] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aXzpFpw_qINw5Uk-43XZugAAAE0"]
[Sat Jan 31 01:23:36.327816 2026] [:error] [pid 59662:tid 59724] [client 20.199.113.235:28695] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aXzpGA7k73dlTgySEchWBAAAAIY"]
[Sat Jan 31 01:23:41.964145 2026] [:error] [pid 59660:tid 59679] [client 20.199.113.235:40234] [client 20.199.113.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aXzpHSwTX33V6TPUqxPtVQAAAA8"]
[Sat Jan 31 01:30:11.341178 2026] [:error] [pid 59661:tid 59715] [client 34.122.167.240:61778] [client 34.122.167.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.122.167.240, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzqo5w_qINw5Uk-43Xb7wAAAFg"]
[Sat Jan 31 01:30:12.040650 2026] [:error] [pid 59661:tid 59692] [client 34.122.167.240:61778] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aXzqpJw_qINw5Uk-43Xb9gAAAEE"]
[Sat Jan 31 01:30:12.851141 2026] [:error] [pid 60001:tid 60022] [client 34.122.167.240:57206] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aXzqpKM2ziQ7JN4IjDxSDwAAARM"]
[Sat Jan 31 01:30:13.686779 2026] [:error] [pid 59661:tid 59691] [client 34.122.167.240:61430] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aXzqpZw_qINw5Uk-43Xb-gAAAEA"]
[Sat Jan 31 01:30:14.494312 2026] [:error] [pid 59660:tid 59673] [client 34.122.167.240:59519] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aXzqpiwTX33V6TPUqxPwfAAAAAk"]
[Sat Jan 31 01:30:15.329633 2026] [:error] [pid 59661:tid 59693] [client 34.122.167.240:62895] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aXzqp5w_qINw5Uk-43XcAgAAAEI"]
[Sat Jan 31 01:30:16.132932 2026] [:error] [pid 59662:tid 59724] [client 34.122.167.240:64033] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aXzqqA7k73dlTgySEchYBAAAAIY"]
[Sat Jan 31 01:30:17.013587 2026] [:error] [pid 59661:tid 59706] [client 34.122.167.240:56568] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aXzqqZw_qINw5Uk-43XcBwAAAE8"]
[Sat Jan 31 01:30:17.844499 2026] [:error] [pid 59660:tid 59684] [client 34.122.167.240:55605] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aXzqqSwTX33V6TPUqxPwgAAAABQ"]
[Sat Jan 31 01:30:18.684838 2026] [:error] [pid 59748:tid 59751] [client 34.122.167.240:62336] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXzqqmlxTen-ziDxotSCdgAAAMA"]
[Sat Jan 31 01:30:19.562076 2026] [:error] [pid 60001:tid 60013] [client 34.122.167.240:54655] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXzqq6M2ziQ7JN4IjDxSFQAAAQo"]
[Sat Jan 31 01:30:20.379927 2026] [:error] [pid 59748:tid 59752] [client 34.122.167.240:59275] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aXzqrGlxTen-ziDxotSCeQAAAME"]
[Sat Jan 31 01:30:21.224461 2026] [:error] [pid 59662:tid 59728] [client 34.122.167.240:61183] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXzqrQ7k73dlTgySEchYDQAAAIo"]
[Sat Jan 31 01:30:22.061884 2026] [:error] [pid 59661:tid 59707] [client 34.122.167.240:53481] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXzqrpw_qINw5Uk-43XcDgAAAFA"]
[Sat Jan 31 01:30:22.858954 2026] [:error] [pid 59662:tid 59727] [client 34.122.167.240:54935] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXzqrg7k73dlTgySEchYDwAAAIk"]
[Sat Jan 31 01:30:23.654105 2026] [:error] [pid 59662:tid 59720] [client 34.122.167.240:52627] [client 34.122.167.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXzqrw7k73dlTgySEchYEQAAAII"]
[Sat Jan 31 02:10:35.734693 2026] [:error] [pid 59660:tid 59688] [client 121.229.185.160:60773] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aXz0GywTX33V6TPUqxMB0QAAABg"]
[Sat Jan 31 03:29:20.407842 2026] [:error] [pid 7999:tid 8064] [client 162.62.213.187:58928] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aX0GkB44Pt5VkBPGzznyigAAAIE"]
[Sat Jan 31 06:42:24.490508 2026] [:error] [pid 52520:tid 52531] [client 2.57.122.173:41422] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aX0z0GS_bInnwm0xKSqdAAAAAkk"]
[Sat Jan 31 08:20:05.945581 2026] [:error] [pid 39242:tid 39265] [client 20.211.164.12:27700] [client 20.211.164.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.211.164.12, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aX1KtdOgXnkKGGSSCIOQdQAAAAs"]
[Sat Jan 31 08:20:06.261423 2026] [:error] [pid 39242:tid 39274] [client 20.211.164.12:27700] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/"] [unique_id "aX1KttOgXnkKGGSSCIOQfgAAABQ"]
[Sat Jan 31 08:20:06.337324 2026] [:error] [pid 52451:tid 52467] [client 20.211.164.12:28067] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/"] [unique_id "aX1KtnubVy7MGYWM2NY1DgAAAc0"]
[Sat Jan 31 08:20:06.399262 2026] [:error] [pid 52451:tid 52468] [client 20.211.164.12:32034] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/"] [unique_id "aX1KtnubVy7MGYWM2NY1DwAAAc4"]
[Sat Jan 31 08:20:06.462981 2026] [:error] [pid 52520:tid 52535] [client 20.211.164.12:26557] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/"] [unique_id "aX1KtmS_bInnwm0xKSq-ygAAAk0"]
[Sat Jan 31 08:54:37.706879 2026] [:error] [pid 52415:tid 52439] [client 20.211.164.12:10139] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2022/07/"] [unique_id "aX1SzZ-DUxb_li2fU6I1_gAAAZY"]
[Sat Jan 31 08:54:37.773863 2026] [:error] [pid 52484:tid 52509] [client 20.211.164.12:61141] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2022/07/"] [unique_id "aX1SzUpwiaulxucQh7XoJgAAAhc"]
[Sat Jan 31 08:54:37.839229 2026] [:error] [pid 52520:tid 52535] [client 20.211.164.12:62273] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2022/07/"] [unique_id "aX1SzWS_bInnwm0xKSrPuwAAAk0"]
[Sat Jan 31 08:54:37.906421 2026] [:error] [pid 39244:tid 39316] [client 20.211.164.12:16513] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2022/07/"] [unique_id "aX1SzXo-KRTvg3jHEDwF1wAAAIY"]
[Sat Jan 31 09:16:04.096915 2026] [:error] [pid 20836:tid 20850] [client 43.157.181.189:44792] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aX1X1IACllgWRWVrYIQa8AAAAUk"]
[Sat Jan 31 19:29:03.895981 2026] [:error] [pid 59582:tid 59619] [client 43.165.70.220:57918] [client 43.165.70.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aX3nf45dwpvvp1Lc6f1tKQAAA8g"]
[Sun Feb 01 01:52:55.009916 2026] [:error] [pid 59523:tid 59550] [client 20.205.208.88:12533] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wikindex.php"] [unique_id "aX5Bd5EkxOIGmVhqUWKuowAAAxc"]
[Sun Feb 01 01:52:55.474641 2026] [:error] [pid 18803:tid 18821] [client 20.205.208.88:10400] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wikindex.php"] [unique_id "aX5Bdy2kTcRk9EBIxOHM0QAAAg8"]
[Sun Feb 01 01:52:55.850806 2026] [:error] [pid 39339:tid 39356] [client 20.205.208.88:12513] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wikindex.php"] [unique_id "aX5Bd8Wi-IjigR3oHY7BfAAAAM8"]
[Sun Feb 01 01:52:56.052087 2026] [:error] [pid 39339:tid 39348] [client 20.205.208.88:3253] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wikindex.php"] [unique_id "aX5BeMWi-IjigR3oHY7BfQAAAMc"]
[Sun Feb 01 01:52:56.379126 2026] [:error] [pid 44532:tid 44559] [client 20.205.208.88:20400] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aX5BeMH-68uYbAtfrZ26GgAAAVc"]
[Sun Feb 01 01:52:57.290780 2026] [:error] [pid 39242:tid 39269] [client 20.205.208.88:15950] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aX5BedOgXnkKGGSSCIN1cgAAAA8"]
[Sun Feb 01 01:52:57.669200 2026] [:error] [pid 18803:tid 18806] [client 20.205.208.88:21574] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aX5BeS2kTcRk9EBIxOHM0wAAAgA"]
[Sun Feb 01 01:52:57.903643 2026] [:error] [pid 44532:tid 44536] [client 20.205.208.88:15997] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aX5BecH-68uYbAtfrZ26HQAAAUA"]
[Sun Feb 01 01:52:58.175817 2026] [:error] [pid 44532:tid 44546] [client 20.205.208.88:12541] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/py.php"] [unique_id "aX5BesH-68uYbAtfrZ26HgAAAUo"]
[Sun Feb 01 01:52:58.421779 2026] [:error] [pid 44532:tid 44548] [client 20.205.208.88:22739] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/py.php"] [unique_id "aX5BesH-68uYbAtfrZ26HwAAAUw"]
[Sun Feb 01 01:52:58.638094 2026] [:error] [pid 18773:tid 18797] [client 20.205.208.88:10405] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/py.php"] [unique_id "aX5BetHy21j24IPrB1UXnwAAAZY"]
[Sun Feb 01 01:52:59.064496 2026] [:error] [pid 59523:tid 59548] [client 20.205.208.88:20395] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/py.php"] [unique_id "aX5Be5EkxOIGmVhqUWKupgAAAxU"]
[Sun Feb 01 01:52:59.637115 2026] [:error] [pid 44532:tid 44554] [client 20.205.208.88:9033] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aX5Be8H-68uYbAtfrZ26IQAAAVI"]
[Sun Feb 01 01:53:00.239434 2026] [:error] [pid 31430:tid 31457] [client 20.205.208.88:22057] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aX5BfMcb14YPxXg_g5F59wAAAFc"]
[Sun Feb 01 01:53:00.822588 2026] [:error] [pid 31430:tid 31443] [client 20.205.208.88:10391] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aX5BfMcb14YPxXg_g5F5-gAAAEk"]
[Sun Feb 01 01:53:01.463335 2026] [:error] [pid 59523:tid 59546] [client 20.205.208.88:22781] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aX5BfZEkxOIGmVhqUWKuqAAAAxM"]
[Sun Feb 01 01:53:01.841531 2026] [:error] [pid 31430:tid 31442] [client 20.205.208.88:9084] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sym404.php"] [unique_id "aX5Bfccb14YPxXg_g5F5_QAAAEg"]
[Sun Feb 01 01:53:02.377501 2026] [:error] [pid 31430:tid 31439] [client 20.205.208.88:10422] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sym404.php"] [unique_id "aX5Bfscb14YPxXg_g5F6AAAAAEU"]
[Sun Feb 01 01:53:02.604933 2026] [:error] [pid 18773:tid 18794] [client 20.205.208.88:22749] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sym404.php"] [unique_id "aX5BftHy21j24IPrB1UXoQAAAZM"]
[Sun Feb 01 01:53:03.037183 2026] [:error] [pid 59523:tid 59539] [client 20.205.208.88:11597] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sym404.php"] [unique_id "aX5Bf5EkxOIGmVhqUWKurgAAAww"]
[Sun Feb 01 01:53:03.452102 2026] [:error] [pid 39339:tid 39361] [client 20.205.208.88:22029] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aX5Bf8Wi-IjigR3oHY7BgwAAANQ"]
[Sun Feb 01 01:53:03.767286 2026] [:error] [pid 44533:tid 44563] [client 20.205.208.88:20366] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aX5Bf4Njc98kHMNVmnt65wAAAcA"]
[Sun Feb 01 01:53:04.305627 2026] [:error] [pid 59523:tid 59528] [client 20.205.208.88:22060] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aX5BgJEkxOIGmVhqUWKurwAAAwE"]
[Sun Feb 01 01:53:04.743747 2026] [:error] [pid 44533:tid 44569] [client 20.205.208.88:9082] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aX5BgINjc98kHMNVmnt66AAAAcY"]
[Sun Feb 01 01:53:05.583812 2026] [:error] [pid 18803:tid 18815] [client 20.205.208.88:22762] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "aX5BgS2kTcRk9EBIxOHM2gAAAgk"]
[Sun Feb 01 01:53:06.397519 2026] [:error] [pid 31430:tid 31434] [client 20.205.208.88:16381] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "aX5Bgscb14YPxXg_g5F6BwAAAEA"]
[Sun Feb 01 01:53:06.790244 2026] [:error] [pid 31430:tid 31447] [client 20.205.208.88:11595] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "aX5Bgscb14YPxXg_g5F6CQAAAE0"]
[Sun Feb 01 01:53:07.217672 2026] [:error] [pid 31430:tid 31439] [client 20.205.208.88:17295] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "aX5Bg8cb14YPxXg_g5F6CgAAAEU"]
[Sun Feb 01 01:53:08.015261 2026] [:error] [pid 31465:tid 31504] [client 20.205.208.88:3254] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "aX5BhDkaGp475ez0mlxjmAAAAko"]
[Sun Feb 01 01:53:08.636457 2026] [:error] [pid 39242:tid 39266] [client 20.205.208.88:17284] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "aX5BhNOgXnkKGGSSCIN1egAAAAw"]
[Sun Feb 01 01:53:08.907006 2026] [:error] [pid 31430:tid 31444] [client 20.205.208.88:10395] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "aX5BhMcb14YPxXg_g5F6EAAAAEo"]
[Sun Feb 01 01:53:09.121766 2026] [:error] [pid 39242:tid 39255] [client 20.205.208.88:9054] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "aX5BhdOgXnkKGGSSCIN1ewAAAAE"]
[Sun Feb 01 01:53:09.597908 2026] [:error] [pid 44532:tid 44551] [client 20.205.208.88:3257] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aX5BhcH-68uYbAtfrZ26JQAAAU8"]
[Sun Feb 01 01:53:10.045772 2026] [:error] [pid 39339:tid 39342] [client 20.205.208.88:20372] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aX5BhsWi-IjigR3oHY7BiAAAAME"]
[Sun Feb 01 01:53:10.539351 2026] [:error] [pid 31465:tid 31494] [client 20.205.208.88:22733] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aX5BhjkaGp475ez0mlxjnwAAAkA"]
[Sun Feb 01 01:53:11.120411 2026] [:error] [pid 44533:tid 44583] [client 20.205.208.88:10431] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aX5Bh4Njc98kHMNVmnt67AAAAdQ"]
[Sun Feb 01 01:53:11.582239 2026] [:error] [pid 31430:tid 31438] [client 20.205.208.88:4083] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aX5Bh8cb14YPxXg_g5F6FQAAAEQ"]
[Sun Feb 01 01:53:12.615906 2026] [:error] [pid 44533:tid 44584] [client 20.205.208.88:4053] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aX5BiINjc98kHMNVmnt67gAAAdU"]
[Sun Feb 01 01:53:13.349743 2026] [:error] [pid 18773:tid 18786] [client 20.205.208.88:4048] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aX5BidHy21j24IPrB1UXpwAAAYs"]
[Sun Feb 01 01:53:13.946963 2026] [:error] [pid 31430:tid 31444] [client 20.205.208.88:20041] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aX5Biccb14YPxXg_g5F6GwAAAEo"]
[Sun Feb 01 01:53:14.237177 2026] [:error] [pid 44533:tid 44585] [client 20.205.208.88:17325] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aX5BioNjc98kHMNVmnt6-QAAAdY"]
[Sun Feb 01 01:53:14.506786 2026] [:error] [pid 44533:tid 44579] [client 20.205.208.88:22079] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aX5BioNjc98kHMNVmnt6_AAAAdA"]
[Sun Feb 01 01:53:14.775213 2026] [:error] [pid 39242:tid 39273] [client 20.205.208.88:20088] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aX5BitOgXnkKGGSSCIN1gAAAABM"]
[Sun Feb 01 01:53:15.249606 2026] [:error] [pid 44532:tid 44539] [client 20.205.208.88:20063] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aX5Bi8H-68uYbAtfrZ26JwAAAUM"]
[Sun Feb 01 01:53:16.284386 2026] [:error] [pid 18773:tid 18779] [client 20.205.208.88:9040] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lkj.php"] [unique_id "aX5BjNHy21j24IPrB1UXqwAAAYQ"]
[Sun Feb 01 01:53:17.413541 2026] [:error] [pid 39242:tid 39259] [client 20.205.208.88:17327] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lkj.php"] [unique_id "aX5BjdOgXnkKGGSSCIN1gwAAAAU"]
[Sun Feb 01 01:53:18.868426 2026] [:error] [pid 59523:tid 59542] [client 20.205.208.88:16370] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lkj.php"] [unique_id "aX5BjpEkxOIGmVhqUWKuuAAAAw8"]
[Sun Feb 01 01:53:19.633648 2026] [:error] [pid 39242:tid 39256] [client 20.205.208.88:4037] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lkj.php"] [unique_id "aX5Bj9OgXnkKGGSSCIN1iwAAAAI"]
[Sun Feb 01 01:53:19.909416 2026] [:error] [pid 18803:tid 18815] [client 20.205.208.88:16348] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aX5Bjy2kTcRk9EBIxOHM5AAAAgk"]
[Sun Feb 01 01:53:20.453038 2026] [:error] [pid 44532:tid 44536] [client 20.205.208.88:20085] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aX5BkMH-68uYbAtfrZ26KgAAAUA"]
[Sun Feb 01 01:53:20.990926 2026] [:error] [pid 44532:tid 44546] [client 20.205.208.88:22062] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aX5BkMH-68uYbAtfrZ26KwAAAUo"]
[Sun Feb 01 01:53:21.442271 2026] [:error] [pid 39339:tid 39352] [client 20.205.208.88:20057] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aX5BkcWi-IjigR3oHY7BjQAAAMs"]
[Sun Feb 01 01:53:22.215996 2026] [:error] [pid 39242:tid 39276] [client 20.205.208.88:25382] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX5BktOgXnkKGGSSCIN1jgAAABY"]
[Sun Feb 01 01:53:22.641584 2026] [:error] [pid 39339:tid 39351] [client 20.205.208.88:4090] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX5BksWi-IjigR3oHY7BkAAAAMo"]
[Sun Feb 01 01:53:23.287222 2026] [:error] [pid 44532:tid 44558] [client 20.205.208.88:11700] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX5Bk8H-68uYbAtfrZ26LQAAAVY"]
[Sun Feb 01 01:53:23.621237 2026] [:error] [pid 39339:tid 39348] [client 20.205.208.88:18627] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX5Bk8Wi-IjigR3oHY7BkgAAAMc"]
[Sun Feb 01 01:53:24.049750 2026] [:error] [pid 18773:tid 18786] [client 20.205.208.88:28393] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aX5BlNHy21j24IPrB1UXsgAAAYs"]
[Sun Feb 01 01:53:24.587215 2026] [:error] [pid 39242:tid 39262] [client 20.205.208.88:4045] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aX5BlNOgXnkKGGSSCIN1kAAAAAg"]
[Sun Feb 01 01:53:25.005978 2026] [:error] [pid 18773:tid 18791] [client 20.205.208.88:20051] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aX5BldHy21j24IPrB1UXtAAAAZA"]
[Sun Feb 01 01:53:25.525947 2026] [:error] [pid 18773:tid 18793] [client 20.205.208.88:4038] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aX5BldHy21j24IPrB1UXtQAAAZI"]
[Sun Feb 01 01:53:26.757711 2026] [:error] [pid 44532:tid 44541] [client 20.205.208.88:11705] [client 20.205.208.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aX5BlsH-68uYbAtfrZ26MgAAAUU"]
[Sun Feb 01 01:53:27.174201 2026] [:error] [pid 18803:tid 18827] [client 20.205.208.88:28387] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aX5Bly2kTcRk9EBIxOHM6wAAAhU"]
[Sun Feb 01 01:53:27.783767 2026] [:error] [pid 18803:tid 18814] [client 20.205.208.88:19254] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aX5Bly2kTcRk9EBIxOHM7QAAAgg"]
[Sun Feb 01 01:53:28.514641 2026] [:error] [pid 31430:tid 31452] [client 20.205.208.88:13598] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aX5BmMcb14YPxXg_g5F6IwAAAFI"]
[Sun Feb 01 01:53:28.980513 2026] [:error] [pid 59523:tid 59537] [client 20.205.208.88:28373] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aX5BmJEkxOIGmVhqUWKuvwAAAwo"]
[Sun Feb 01 01:53:29.577306 2026] [:error] [pid 44533:tid 44571] [client 20.205.208.88:17806] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aX5BmYNjc98kHMNVmnt7GAAAAcg"]
[Sun Feb 01 01:53:30.465560 2026] [:error] [pid 18803:tid 18824] [client 20.205.208.88:3343] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aX5Bmi2kTcRk9EBIxOHM7gAAAhI"]
[Sun Feb 01 01:53:30.960584 2026] [:error] [pid 18773:tid 18787] [client 20.205.208.88:25407] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aX5BmtHy21j24IPrB1UXvQAAAYw"]
[Sun Feb 01 01:53:31.155841 2026] [:error] [pid 31430:tid 31437] [client 20.205.208.88:24362] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aX5Bm8cb14YPxXg_g5F6JgAAAEM"]
[Sun Feb 01 01:53:31.548252 2026] [:error] [pid 44533:tid 44582] [client 20.205.208.88:24336] [client 20.205.208.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aX5Bm4Njc98kHMNVmnt7GgAAAdM"]
[Sun Feb 01 01:53:31.825327 2026] [:error] [pid 31465:tid 31515] [client 20.205.208.88:24335] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aX5BmzkaGp475ez0mlxjqQAAAlU"]
[Sun Feb 01 01:53:32.143586 2026] [:error] [pid 31430:tid 31443] [client 20.205.208.88:3389] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aX5BnMcb14YPxXg_g5F6KAAAAEk"]
[Sun Feb 01 01:53:32.465273 2026] [:error] [pid 59582:tid 59633] [client 20.205.208.88:20044] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aX5BnI5dwpvvp1Lc6f2kBAAAA9Q"]
[Sun Feb 01 01:53:33.014873 2026] [:error] [pid 39242:tid 39266] [client 20.205.208.88:13621] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aX5BndOgXnkKGGSSCIN1kQAAAAw"]
[Sun Feb 01 01:53:33.755146 2026] [:error] [pid 18803:tid 18820] [client 20.205.208.88:17824] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aX5BnS2kTcRk9EBIxOHM-AAAAg4"]
[Sun Feb 01 01:53:34.354643 2026] [:error] [pid 44532:tid 44547] [client 20.205.208.88:3327] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aX5BnsH-68uYbAtfrZ26QAAAAUs"]
[Sun Feb 01 01:53:34.617958 2026] [:error] [pid 59523:tid 59530] [client 20.205.208.88:17812] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aX5BnpEkxOIGmVhqUWKuwwAAAwM"]
[Sun Feb 01 01:53:35.508444 2026] [:error] [pid 31465:tid 31518] [client 20.205.208.88:13604] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aX5BnzkaGp475ez0mlxjrQAAAlg"]
[Sun Feb 01 01:53:35.765841 2026] [:error] [pid 18773:tid 18780] [client 20.205.208.88:22310] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aX5Bn9Hy21j24IPrB1UXxQAAAYU"]
[Sun Feb 01 01:53:36.052183 2026] [:error] [pid 18773:tid 18779] [client 20.205.208.88:3347] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aX5BoNHy21j24IPrB1UXxgAAAYQ"]
[Sun Feb 01 01:53:36.624624 2026] [:error] [pid 31465:tid 31507] [client 20.205.208.88:19235] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aX5BoDkaGp475ez0mlxjsAAAAk0"]
[Sun Feb 01 01:53:37.001013 2026] [:error] [pid 31465:tid 31499] [client 20.205.208.88:28395] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aX5BoDkaGp475ez0mlxjsgAAAkU"]
[Sun Feb 01 01:53:37.208893 2026] [:error] [pid 31465:tid 31497] [client 20.205.208.88:19229] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aX5BoTkaGp475ez0mlxjtAAAAkM"]
[Sun Feb 01 01:53:37.590256 2026] [:error] [pid 31465:tid 31500] [client 20.205.208.88:23034] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aX5BoTkaGp475ez0mlxjtgAAAkY"]
[Sun Feb 01 01:53:38.677732 2026] [:error] [pid 44532:tid 44560] [client 20.205.208.88:17845] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aX5BosH-68uYbAtfrZ26RgAAAVg"]
[Sun Feb 01 01:53:38.991868 2026] [:error] [pid 18773:tid 18797] [client 20.205.208.88:24379] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aX5BotHy21j24IPrB1UXyQAAAZY"]
[Sun Feb 01 01:53:39.487807 2026] [:error] [pid 59523:tid 59531] [client 20.205.208.88:24323] [client 20.205.208.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aX5Bo5EkxOIGmVhqUWKuxQAAAwQ"]
[Sun Feb 01 01:53:39.805811 2026] [:error] [pid 31430:tid 31444] [client 20.205.208.88:22273] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aX5Bo8cb14YPxXg_g5F6KwAAAEo"]
[Sun Feb 01 01:53:40.320911 2026] [:error] [pid 18803:tid 18827] [client 20.205.208.88:13593] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aX5BpC2kTcRk9EBIxOHM_wAAAhU"]
[Sun Feb 01 01:53:40.605963 2026] [:error] [pid 44533:tid 44569] [client 20.205.208.88:11136] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aX5BpINjc98kHMNVmnt7HQAAAcY"]
[Sun Feb 01 01:53:41.239758 2026] [:error] [pid 18803:tid 18816] [client 20.205.208.88:13607] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aX5BpS2kTcRk9EBIxOHNAAAAAgo"]
[Sun Feb 01 01:53:42.242547 2026] [:error] [pid 39339:tid 39349] [client 20.205.208.88:11148] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aX5BpsWi-IjigR3oHY7BnAAAAMg"]
[Sun Feb 01 01:53:42.559332 2026] [:error] [pid 18803:tid 18826] [client 20.205.208.88:11195] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aX5Bpi2kTcRk9EBIxOHNAwAAAhQ"]
[Sun Feb 01 01:53:43.082163 2026] [:error] [pid 39339:tid 39358] [client 20.205.208.88:16624] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aX5Bp8Wi-IjigR3oHY7BngAAANE"]
[Sun Feb 01 01:53:43.455643 2026] [:error] [pid 39242:tid 39255] [client 20.205.208.88:19251] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aX5Bp9OgXnkKGGSSCIN1kwAAAAE"]
[Sun Feb 01 01:53:44.035889 2026] [:error] [pid 59523:tid 59541] [client 20.205.208.88:3317] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aX5BqJEkxOIGmVhqUWKuyQAAAw4"]
[Sun Feb 01 01:53:44.815567 2026] [:error] [pid 18803:tid 18829] [client 20.205.208.88:23007] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aX5BqC2kTcRk9EBIxOHNCgAAAhc"]
[Sun Feb 01 01:53:45.321794 2026] [:error] [pid 39339:tid 39350] [client 20.205.208.88:17802] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aX5BqcWi-IjigR3oHY7BoQAAAMk"]
[Sun Feb 01 01:53:45.916837 2026] [:error] [pid 39339:tid 39353] [client 20.205.208.88:23023] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aX5BqcWi-IjigR3oHY7BogAAAMw"]
[Sun Feb 01 01:53:46.223560 2026] [:error] [pid 39339:tid 39357] [client 20.205.208.88:17807] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aX5BqsWi-IjigR3oHY7BpAAAANA"]
[Sun Feb 01 01:53:46.581565 2026] [:error] [pid 44533:tid 44566] [client 20.205.208.88:16622] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aX5BqoNjc98kHMNVmnt7HwAAAcM"]
[Sun Feb 01 01:53:46.995643 2026] [:error] [pid 31430:tid 31454] [client 20.205.208.88:19238] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aX5Bqscb14YPxXg_g5F6MQAAAFQ"]
[Sun Feb 01 01:53:48.410188 2026] [:error] [pid 31430:tid 31446] [client 20.205.208.88:11166] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aX5BrMcb14YPxXg_g5F6MgAAAEw"]
[Sun Feb 01 01:53:49.339193 2026] [:error] [pid 39339:tid 39344] [client 20.205.208.88:3388] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aX5BrcWi-IjigR3oHY7BpwAAAMM"]
[Sun Feb 01 01:53:50.618025 2026] [:error] [pid 44532:tid 44540] [client 20.205.208.88:22204] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aX5BrsH-68uYbAtfrZ26VQAAAUQ"]
[Sun Feb 01 01:53:51.663140 2026] [:error] [pid 44532:tid 44552] [client 20.205.208.88:3189] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aX5Br8H-68uYbAtfrZ26VwAAAVA"]
[Sun Feb 01 01:53:52.494386 2026] [:error] [pid 31430:tid 31453] [client 20.205.208.88:14497] [client 20.205.208.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aX5BsMcb14YPxXg_g5F6OwAAAFM"]
[Sun Feb 01 06:21:31.012286 2026] [:error] [pid 10509:tid 10585] [client 45.155.68.142:34652] [client 45.155.68.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aX6Aa1MNpJBihOJgwVvr_gAAAI4"]
[Sun Feb 01 14:40:04.231059 2026] [:error] [pid 51610:tid 51623] [client 43.130.174.37:50534] [client 43.130.174.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aX71RN7GFdNFAqImMQDHNQAAAUk"]
[Sun Feb 01 17:48:34.027256 2026] [:error] [pid 10508:tid 10545] [client 37.139.53.245:50157] [client 37.139.53.245] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "measureyourcause.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aX8hcgFwdoMQv5EWp9szRQAAAEE"]
[Sun Feb 01 18:45:50.803256 2026] [:error] [pid 10508:tid 10561] [client 35.229.75.96:50421] [client 35.229.75.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.75.96, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aX8u3gFwdoMQv5EWp9tDRwAAAFE"]
[Sun Feb 01 18:45:52.235942 2026] [:error] [pid 10508:tid 10568] [client 35.229.75.96:50421] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aX8u4AFwdoMQv5EWp9tDUAAAAFg"]
[Sun Feb 01 18:45:53.188510 2026] [:error] [pid 29578:tid 29582] [client 35.229.75.96:50881] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aX8u4Uwa4IUBrS8Q04GN2AAAAYA"]
[Sun Feb 01 18:45:54.171148 2026] [:error] [pid 10506:tid 10528] [client 35.229.75.96:56288] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aX8u4q32IC2Db4uwFyN_NAAAAAw"]
[Sun Feb 01 18:45:55.126640 2026] [:error] [pid 29578:tid 29606] [client 35.229.75.96:54442] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aX8u40wa4IUBrS8Q04GN4QAAAZg"]
[Sun Feb 01 18:45:56.107455 2026] [:error] [pid 2033:tid 2052] [client 35.229.75.96:53219] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aX8u5PF7B4oR5nK3T_P3cQAAARE"]
[Sun Feb 01 18:45:57.103784 2026] [:error] [pid 2033:tid 2037] [client 35.229.75.96:64402] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aX8u5fF7B4oR5nK3T_P3cwAAAQI"]
[Sun Feb 01 18:45:58.065710 2026] [:error] [pid 29578:tid 29588] [client 35.229.75.96:49591] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aX8u5kwa4IUBrS8Q04GN5wAAAYY"]
[Sun Feb 01 18:45:59.010786 2026] [:error] [pid 10506:tid 10534] [client 35.229.75.96:53902] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aX8u5632IC2Db4uwFyN_OAAAABI"]
[Sun Feb 01 18:46:00.036376 2026] [:error] [pid 2033:tid 2064] [client 35.229.75.96:55218] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aX8u6PF7B4oR5nK3T_P3eAAAARc"]
[Sun Feb 01 18:46:01.025628 2026] [:error] [pid 10506:tid 10539] [client 35.229.75.96:54880] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aX8u6a32IC2Db4uwFyN_QAAAABc"]
[Sun Feb 01 18:46:02.014679 2026] [:error] [pid 10506:tid 10532] [client 35.229.75.96:63444] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aX8u6q32IC2Db4uwFyN_RAAAABA"]
[Sun Feb 01 18:46:02.998114 2026] [:error] [pid 2033:tid 2052] [client 35.229.75.96:53773] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aX8u6vF7B4oR5nK3T_P3fAAAARE"]
[Sun Feb 01 18:46:04.007868 2026] [:error] [pid 10508:tid 10555] [client 35.229.75.96:53862] [client 35.229.75.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aX8u7AFwdoMQv5EWp9tDXAAAAEs"]
[Sun Feb 01 19:57:19.376790 2026] [:error] [pid 51610:tid 51614] [client 43.130.174.37:50672] [client 43.130.174.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aX8_n97GFdNFAqImMQAWogAAAUA"]
[Sun Feb 01 22:47:46.648819 2026] [:error] [pid 10508:tid 10566] [client 106.227.49.113:60864] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aX9nkgFwdoMQv5EWp9t-yAAAAFY"]
[Mon Feb 02 03:35:13.972839 2026] [:error] [pid 54464:tid 54490] [client 43.159.128.155:52522] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aX-q8Xz5wlbByzCBBGQ0kQAAABg"]
[Mon Feb 02 04:47:49.867603 2026] [:error] [pid 63032:tid 63087] [client 45.130.83.167:48335] [client 45.130.83.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aX-79XyEQ1PkpebvdRgOzgAAABg"]
[Mon Feb 02 04:47:50.481764 2026] [:error] [pid 63033:tid 63095] [client 45.92.229.235:36199] [client 45.92.229.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aX-79veMX2QyIh3K16oWBwAAAEQ"]
[Mon Feb 02 04:47:51.439067 2026] [:error] [pid 63032:tid 63080] [client 45.130.83.176:57509] [client 45.130.83.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.130.83.176, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-793yEQ1PkpebvdRgO1gAAABE"]
[Mon Feb 02 04:47:52.104630 2026] [:error] [pid 33612:tid 33620] [client 45.130.83.172:33829] [client 45.130.83.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.130.83.172, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-7-MtFn80qQEmo5QooPAAAAQY"]
[Mon Feb 02 06:25:33.064245 2026] [:error] [pid 63032:tid 63073] [client 43.159.135.203:38338] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aX_S3XyEQ1PkpebvdRglKQAAAAo"]
[Mon Feb 02 09:34:43.068402 2026] [:error] [pid 63032:tid 63071] [client 69.5.7.169:36130] [client 69.5.7.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aX__M3yEQ1PkpebvdRhclQAAAAg"]
[Mon Feb 02 09:34:57.206792 2026] [:error] [pid 33612:tid 33618] [client 69.5.7.169:34074] [client 69.5.7.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aX__QctFn80qQEmo5QqHXAAAAQQ"]
[Mon Feb 02 09:35:04.709084 2026] [:error] [pid 46008:tid 46012] [client 69.5.7.169:42536] [client 69.5.7.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aX__SCRa52iYn7SlSMkXegAAAUI"]
[Mon Feb 02 09:37:39.321259 2026] [:error] [pid 63153:tid 63174] [client 69.5.7.169:60588] [client 69.5.7.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aX__43C9GXHnmLkdgdkCBwAAAM0"]
[Mon Feb 02 11:49:13.239040 2026] [:error] [pid 33612:tid 33623] [client 185.241.211.8:64203] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYAeuctFn80qQEmo5QqkRgAAAQk"]
[Mon Feb 02 11:49:13.434793 2026] [:error] [pid 33612:tid 33638] [client 185.241.211.8:64213] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYAeuctFn80qQEmo5QqkTAAAARg"]
[Mon Feb 02 11:49:14.105899 2026] [:error] [pid 63153:tid 63161] [client 185.241.211.8:64344] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYAeunC9GXHnmLkdgdkZpwAAAMA"]
[Mon Feb 02 11:49:14.309661 2026] [:error] [pid 63034:tid 63128] [client 185.241.211.8:64419] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYAeuuKXlgw75_wfbHpx1wAAAIo"]
[Mon Feb 02 11:49:14.968078 2026] [:error] [pid 57021:tid 57037] [client 185.241.211.8:64696] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYAeuv7AEpx7VcmYK3GoTwAAAkw"]
[Mon Feb 02 11:49:15.175110 2026] [:error] [pid 46008:tid 46021] [client 185.241.211.8:64793] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYAeuyRa52iYn7SlSMk4QwAAAUo"]
[Mon Feb 02 11:49:15.836147 2026] [:error] [pid 46008:tid 46015] [client 185.241.211.8:65081] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYAeuyRa52iYn7SlSMk4SgAAAUU"]
[Mon Feb 02 11:49:16.038734 2026] [:error] [pid 57021:tid 57038] [client 185.241.211.8:65151] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYAevP7AEpx7VcmYK3GoXQAAAk0"]
[Mon Feb 02 11:49:16.693783 2026] [:error] [pid 63034:tid 63130] [client 185.241.211.8:65317] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYAevOKXlgw75_wfbHpyCgAAAIw"]
[Mon Feb 02 11:49:16.895668 2026] [:error] [pid 57081:tid 57124] [client 185.241.211.8:65336] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYAevGvouJ2Jkm6HfBjYMAAAAwk"]
[Mon Feb 02 13:44:58.794109 2026] [:error] [pid 57022:tid 57059] [client 193.36.225.27:54745] [client 193.36.225.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.27, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYA52hnEgLMzfcurxfkJogAAAoc"]
[Mon Feb 02 14:03:52.331013 2026] [:error] [pid 33612:tid 33621] [client 43.130.91.95:53060] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYA-SMtFn80qQEmo5QrATQAAAQc"]
[Mon Feb 02 15:34:16.298173 2026] [:error] [pid 63032:tid 63078] [client 143.105.49.48:60767] [client 143.105.49.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.49.48, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYBTeHyEQ1PkpebvdRiitgAAAA8"]
[Mon Feb 02 18:38:31.397200 2026] [:error] [pid 46008:tid 46031] [client 124.156.157.91:48434] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYB-pyRa52iYn7SlSMmRTAAAAVQ"]
[Mon Feb 02 19:50:45.515308 2026] [:error] [pid 46008:tid 46013] [client 35.225.191.120:54825] [client 35.225.191.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.191.120, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYCPlSRa52iYn7SlSMmdHwAAAUM"]
[Mon Feb 02 19:50:46.289443 2026] [:error] [pid 46008:tid 46034] [client 35.225.191.120:54825] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aYCPliRa52iYn7SlSMmdIgAAAVc"]
[Mon Feb 02 19:50:47.106137 2026] [:error] [pid 57080:tid 57094] [client 35.225.191.120:55145] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aYCPl49Utn0ZlfnF10NUagAAAsc"]
[Mon Feb 02 19:50:47.907792 2026] [:error] [pid 63034:tid 63134] [client 35.225.191.120:50835] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aYCPl-KXlgw75_wfbHrVngAAAJA"]
[Mon Feb 02 19:50:48.707642 2026] [:error] [pid 33612:tid 33628] [client 35.225.191.120:55028] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYCPmMtFn80qQEmo5Qr71gAAAQ4"]
[Mon Feb 02 19:50:49.501679 2026] [:error] [pid 63153:tid 63177] [client 35.225.191.120:60128] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYCPmXC9GXHnmLkdgdl9vgAAANA"]
[Mon Feb 02 19:50:50.340126 2026] [:error] [pid 56989:tid 57003] [client 35.225.191.120:63128] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYCPmkp44HnChN-GZlgF9gAAAgw"]
[Mon Feb 02 19:50:51.170737 2026] [:error] [pid 56989:tid 56994] [client 35.225.191.120:50074] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYCPm0p44HnChN-GZlgF-gAAAgM"]
[Mon Feb 02 19:50:51.993209 2026] [:error] [pid 63153:tid 63178] [client 35.225.191.120:49481] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYCPm3C9GXHnmLkdgdl9xAAAANE"]
[Mon Feb 02 19:50:52.795149 2026] [:error] [pid 56989:tid 57000] [client 35.225.191.120:63116] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYCPnEp44HnChN-GZlgF-wAAAgk"]
[Mon Feb 02 19:50:53.608155 2026] [:error] [pid 57081:tid 57124] [client 35.225.191.120:62945] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYCPnWvouJ2Jkm6HfBg0xQAAAwk"]
[Mon Feb 02 19:50:54.393948 2026] [:error] [pid 63034:tid 63130] [client 35.225.191.120:57451] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYCPnuKXlgw75_wfbHrVpQAAAIw"]
[Mon Feb 02 19:50:55.191687 2026] [:error] [pid 63032:tid 63064] [client 35.225.191.120:57578] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYCPn3yEQ1PkpebvdRjcwAAAAAE"]
[Mon Feb 02 19:50:55.993258 2026] [:error] [pid 57021:tid 57030] [client 35.225.191.120:49729] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYCPn_7AEpx7VcmYK3H2oQAAAkU"]
[Mon Feb 02 19:50:56.848607 2026] [:error] [pid 57021:tid 57046] [client 35.225.191.120:55951] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYCPoP7AEpx7VcmYK3H2pgAAAlU"]
[Mon Feb 02 19:50:57.641092 2026] [:error] [pid 63034:tid 63138] [client 35.225.191.120:51599] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYCPoeKXlgw75_wfbHrVqwAAAJQ"]
[Mon Feb 02 20:55:53.357898 2026] [:error] [pid 57022:tid 57052] [client 34.41.38.65:61611] [client 34.41.38.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.41.38.65, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYCe2RnEgLMzfcurxflQ1QAAAoA"]
[Mon Feb 02 20:55:54.016817 2026] [:error] [pid 57022:tid 57073] [client 34.41.38.65:61611] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aYCe2hnEgLMzfcurxflQ2gAAApU"]
[Mon Feb 02 20:55:54.814808 2026] [:error] [pid 63032:tid 63069] [client 34.41.38.65:54041] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aYCe2nyEQ1PkpebvdRjq1wAAAAY"]
[Mon Feb 02 20:55:55.635821 2026] [:error] [pid 56989:tid 56994] [client 34.41.38.65:52376] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aYCe20p44HnChN-GZlgWGQAAAgM"]
[Mon Feb 02 20:55:56.446710 2026] [:error] [pid 63032:tid 63076] [client 34.41.38.65:61900] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYCe3HyEQ1PkpebvdRjq2wAAAA0"]
[Mon Feb 02 20:55:57.252108 2026] [:error] [pid 46008:tid 46013] [client 34.41.38.65:57882] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYCe3SRa52iYn7SlSMmp3wAAAUM"]
[Mon Feb 02 20:55:58.053369 2026] [:error] [pid 63032:tid 63075] [client 34.41.38.65:54709] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYCe3nyEQ1PkpebvdRjq3gAAAAw"]
[Mon Feb 02 20:55:58.848624 2026] [:error] [pid 56989:tid 57005] [client 34.41.38.65:62638] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYCe3kp44HnChN-GZlgWHAAAAg4"]
[Mon Feb 02 20:55:59.647878 2026] [:error] [pid 56989:tid 57007] [client 34.41.38.65:61624] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYCe30p44HnChN-GZlgWHQAAAhA"]
[Mon Feb 02 20:56:00.492949 2026] [:error] [pid 46008:tid 46021] [client 34.41.38.65:49863] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYCe4CRa52iYn7SlSMmp4gAAAUo"]
[Mon Feb 02 20:56:01.287967 2026] [:error] [pid 46008:tid 46032] [client 34.41.38.65:62515] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYCe4SRa52iYn7SlSMmp5AAAAVU"]
[Mon Feb 02 20:56:02.085625 2026] [:error] [pid 57080:tid 57101] [client 34.41.38.65:54295] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYCe4o9Utn0ZlfnF10NfhwAAAs4"]
[Mon Feb 02 20:56:02.914442 2026] [:error] [pid 63153:tid 63180] [client 34.41.38.65:51057] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYCe4nC9GXHnmLkdgdmSkQAAANM"]
[Mon Feb 02 20:56:03.708789 2026] [:error] [pid 63034:tid 63130] [client 34.41.38.65:60056] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYCe4-KXlgw75_wfbHrjpgAAAIw"]
[Mon Feb 02 20:56:04.527847 2026] [:error] [pid 56989:tid 57002] [client 34.41.38.65:50677] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYCe5Ep44HnChN-GZlgWIwAAAgs"]
[Mon Feb 02 20:56:05.336643 2026] [:error] [pid 63153:tid 63164] [client 34.41.38.65:50120] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYCe5XC9GXHnmLkdgdmSmwAAAMM"]
[Mon Feb 02 23:05:29.720184 2026] [:error] [pid 57022:tid 57068] [client 34.135.158.103:52239] [client 34.135.158.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.158.103, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYC9ORnEgLMzfcurxflk5wAAApA"]
[Mon Feb 02 23:05:31.167565 2026] [:error] [pid 57022:tid 57067] [client 34.135.158.103:52239] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYC9OxnEgLMzfcurxflk7QAAAo8"]
[Mon Feb 02 23:05:32.045865 2026] [:error] [pid 63153:tid 63165] [client 34.135.158.103:61509] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYC9PHC9GXHnmLkdgdm9LgAAAMQ"]
[Mon Feb 02 23:05:32.913295 2026] [:error] [pid 57021:tid 57041] [client 34.135.158.103:52610] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYC9PP7AEpx7VcmYK3EXJwAAAlA"]
[Mon Feb 02 23:05:33.732416 2026] [:error] [pid 57021:tid 57030] [client 34.135.158.103:52821] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Pf7AEpx7VcmYK3EXKwAAAkU"]
[Mon Feb 02 23:05:34.533607 2026] [:error] [pid 57021:tid 57042] [client 34.135.158.103:61117] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Pv7AEpx7VcmYK3EXLQAAAlE"]
[Mon Feb 02 23:05:35.334277 2026] [:error] [pid 57021:tid 57027] [client 34.135.158.103:60833] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYC9P_7AEpx7VcmYK3EXMAAAAkI"]
[Mon Feb 02 23:05:36.129687 2026] [:error] [pid 57021:tid 57035] [client 34.135.158.103:60470] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYC9QP7AEpx7VcmYK3EXMwAAAko"]
[Mon Feb 02 23:05:36.944244 2026] [:error] [pid 56989:tid 56994] [client 34.135.158.103:65501] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYC9QEp44HnChN-GZlg1MwAAAgM"]
[Mon Feb 02 23:05:37.750601 2026] [:error] [pid 63034:tid 63127] [client 34.135.158.103:61433] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYC9QeKXlgw75_wfbHr9BwAAAIk"]
[Mon Feb 02 23:05:38.544995 2026] [:error] [pid 56989:tid 57001] [client 34.135.158.103:53901] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Qkp44HnChN-GZlg1OgAAAgo"]
[Mon Feb 02 23:05:39.336819 2026] [:error] [pid 56989:tid 56991] [client 34.135.158.103:61321] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Q0p44HnChN-GZlg1PwAAAgA"]
[Mon Feb 02 23:05:40.168069 2026] [:error] [pid 56989:tid 57008] [client 34.135.158.103:57885] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYC9REp44HnChN-GZlg1QQAAAhE"]
[Mon Feb 02 23:31:51.280100 2026] [:error] [pid 63153:tid 63175] [client 20.89.111.141:4349] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anna.php"] [unique_id "aYDDZ3C9GXHnmLkdgdnFdgAAAM4"]
[Mon Feb 02 23:31:52.578647 2026] [:error] [pid 57081:tid 57119] [client 20.89.111.141:5002] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anna.php"] [unique_id "aYDDaGvouJ2Jkm6HfBhfjwAAAwQ"]
[Mon Feb 02 23:31:53.583752 2026] [:error] [pid 57080:tid 57092] [client 20.89.111.141:58763] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anna.php"] [unique_id "aYDDaY9Utn0ZlfnF10N5KAAAAsU"]
[Mon Feb 02 23:31:54.592784 2026] [:error] [pid 63153:tid 63176] [client 20.89.111.141:53476] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anna.php"] [unique_id "aYDDanC9GXHnmLkdgdnFfAAAAM8"]
[Mon Feb 02 23:31:57.248857 2026] [:error] [pid 57081:tid 57120] [client 20.89.111.141:58804] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aYDDbWvouJ2Jkm6HfBhfkgAAAwU"]
[Mon Feb 02 23:31:58.355039 2026] [:error] [pid 63032:tid 63073] [client 20.89.111.141:22733] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aYDDbnyEQ1PkpebvdRgL1wAAAAo"]
[Mon Feb 02 23:32:00.357465 2026] [:error] [pid 63153:tid 63183] [client 20.89.111.141:58802] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aYDDcHC9GXHnmLkdgdnFhQAAANY"]
[Mon Feb 02 23:32:01.007783 2026] [:error] [pid 56989:tid 57013] [client 20.89.111.141:29208] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aYDDcUp44HnChN-GZlg7LQAAAhY"]
[Mon Feb 02 23:32:01.866857 2026] [:error] [pid 33612:tid 33626] [client 20.89.111.141:53447] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qasu.php"] [unique_id "aYDDcctFn80qQEmo5QoiGwAAAQw"]
[Mon Feb 02 23:32:03.247240 2026] [:error] [pid 56989:tid 57010] [client 20.89.111.141:5000] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qasu.php"] [unique_id "aYDDc0p44HnChN-GZlg7NQAAAhM"]
[Mon Feb 02 23:32:04.402928 2026] [:error] [pid 33612:tid 33632] [client 20.89.111.141:18660] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qasu.php"] [unique_id "aYDDdMtFn80qQEmo5QoiIwAAARI"]
[Mon Feb 02 23:32:07.636008 2026] [:error] [pid 63032:tid 63071] [client 20.89.111.141:24137] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qasu.php"] [unique_id "aYDDd3yEQ1PkpebvdRgL2AAAAAg"]
[Mon Feb 02 23:32:08.551297 2026] [:error] [pid 63153:tid 63171] [client 20.89.111.141:18665] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gi8.php"] [unique_id "aYDDeHC9GXHnmLkdgdnFjQAAAMo"]
[Mon Feb 02 23:32:09.691457 2026] [:error] [pid 57081:tid 57130] [client 20.89.111.141:18669] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gi8.php"] [unique_id "aYDDeWvouJ2Jkm6HfBhfmQAAAw8"]
[Mon Feb 02 23:32:10.546023 2026] [:error] [pid 63153:tid 63177] [client 20.89.111.141:24187] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gi8.php"] [unique_id "aYDDenC9GXHnmLkdgdnFjgAAANA"]
[Mon Feb 02 23:32:11.383251 2026] [:error] [pid 63153:tid 63183] [client 20.89.111.141:22769] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gi8.php"] [unique_id "aYDDe3C9GXHnmLkdgdnFkAAAANY"]
[Mon Feb 02 23:32:12.409658 2026] [:error] [pid 57022:tid 57063] [client 20.89.111.141:59246] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admiin.php"] [unique_id "aYDDfBnEgLMzfcurxflpDgAAAos"]
[Mon Feb 02 23:32:13.936155 2026] [:error] [pid 57021:tid 57049] [client 20.89.111.141:24170] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admiin.php"] [unique_id "aYDDff7AEpx7VcmYK3EbQAAAAlg"]
[Mon Feb 02 23:32:14.620190 2026] [:error] [pid 57021:tid 57042] [client 20.89.111.141:18120] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admiin.php"] [unique_id "aYDDfv7AEpx7VcmYK3EbQgAAAlE"]
[Mon Feb 02 23:32:15.002287 2026] [:error] [pid 57021:tid 57034] [client 20.89.111.141:5051] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admiin.php"] [unique_id "aYDDf_7AEpx7VcmYK3EbRAAAAkk"]
[Mon Feb 02 23:32:16.710691 2026] [:error] [pid 57021:tid 57031] [client 20.89.111.141:53480] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aYDDgP7AEpx7VcmYK3EbSAAAAkY"]
[Mon Feb 02 23:32:20.596377 2026] [:error] [pid 57021:tid 57032] [client 20.89.111.141:18144] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aYDDhP7AEpx7VcmYK3EbTQAAAkc"]
[Mon Feb 02 23:32:21.818114 2026] [:error] [pid 56989:tid 56991] [client 20.89.111.141:5046] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aYDDhUp44HnChN-GZlg7QQAAAgA"]
[Mon Feb 02 23:32:24.311665 2026] [:error] [pid 57080:tid 57102] [client 20.89.111.141:59290] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aYDDiI9Utn0ZlfnF10N5NwAAAs8"]
[Mon Feb 02 23:32:24.809698 2026] [:error] [pid 57080:tid 57111] [client 20.89.111.141:59280] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aYDDiI9Utn0ZlfnF10N5OQAAAtg"]
[Mon Feb 02 23:32:26.138421 2026] [:error] [pid 57021:tid 57044] [client 20.89.111.141:53458] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aYDDiv7AEpx7VcmYK3EbUQAAAlM"]
[Mon Feb 02 23:32:30.994961 2026] [:error] [pid 63153:tid 63185] [client 20.89.111.141:53500] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aYDDjnC9GXHnmLkdgdnFnQAAANg"]
[Mon Feb 02 23:32:33.051376 2026] [:error] [pid 63153:tid 63163] [client 20.89.111.141:59260] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aYDDkXC9GXHnmLkdgdnFnwAAAMI"]
[Mon Feb 02 23:32:34.762528 2026] [:error] [pid 57080:tid 57089] [client 20.89.111.141:48125] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ez.php"] [unique_id "aYDDko9Utn0ZlfnF10N5RAAAAsI"]
[Mon Feb 02 23:32:35.970843 2026] [:error] [pid 57022:tid 57073] [client 20.89.111.141:18153] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ez.php"] [unique_id "aYDDkxnEgLMzfcurxflpGQAAApU"]
[Mon Feb 02 23:32:36.751294 2026] [:error] [pid 57081:tid 57120] [client 20.89.111.141:59318] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ez.php"] [unique_id "aYDDlGvouJ2Jkm6HfBhfpQAAAwU"]
[Mon Feb 02 23:32:39.362047 2026] [:error] [pid 57081:tid 57139] [client 20.89.111.141:59233] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ez.php"] [unique_id "aYDDl2vouJ2Jkm6HfBhfqAAAAxg"]
[Mon Feb 02 23:32:40.051095 2026] [:error] [pid 57081:tid 57127] [client 20.89.111.141:18126] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "aYDDmGvouJ2Jkm6HfBhfqgAAAww"]
[Mon Feb 02 23:32:41.655542 2026] [:error] [pid 57080:tid 57097] [client 20.89.111.141:59315] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "aYDDmY9Utn0ZlfnF10N5TAAAAso"]
[Mon Feb 02 23:32:43.862032 2026] [:error] [pid 33612:tid 33633] [client 20.89.111.141:48108] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "aYDDm8tFn80qQEmo5QoiLgAAARM"]
[Mon Feb 02 23:32:44.383667 2026] [:error] [pid 57021:tid 57031] [client 20.89.111.141:59232] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "aYDDnP7AEpx7VcmYK3EbUwAAAkY"]
[Mon Feb 02 23:32:45.662659 2026] [:error] [pid 46008:tid 46027] [client 20.89.111.141:59212] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aYDDnSRa52iYn7SlSMnE-wAAAVA"]
[Mon Feb 02 23:32:46.441226 2026] [:error] [pid 63153:tid 63182] [client 20.89.111.141:22743] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aYDDnnC9GXHnmLkdgdnFpAAAANU"]
[Mon Feb 02 23:32:47.269476 2026] [:error] [pid 57080:tid 57101] [client 20.89.111.141:48082] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aYDDn49Utn0ZlfnF10N5TgAAAs4"]
[Mon Feb 02 23:32:48.130382 2026] [:error] [pid 57081:tid 57118] [client 20.89.111.141:59229] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aYDDoGvouJ2Jkm6HfBhfrQAAAwM"]
[Mon Feb 02 23:32:49.146161 2026] [:error] [pid 33612:tid 33629] [client 20.89.111.141:48091] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aYDDoctFn80qQEmo5QoiMQAAAQ8"]
[Mon Feb 02 23:32:50.175857 2026] [:error] [pid 57081:tid 57136] [client 20.89.111.141:4376] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aYDDomvouJ2Jkm6HfBhfsAAAAxU"]
[Mon Feb 02 23:32:58.470694 2026] [:error] [pid 57022:tid 57067] [client 20.89.111.141:53459] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsback.php"] [unique_id "aYDDqhnEgLMzfcurxflpOgAAAo8"]
[Mon Feb 02 23:32:59.152615 2026] [:error] [pid 63034:tid 63128] [client 20.89.111.141:53460] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsback.php"] [unique_id "aYDDq-KXlgw75_wfbHoCIwAAAIo"]
[Mon Feb 02 23:32:59.912729 2026] [:error] [pid 63153:tid 63185] [client 20.89.111.141:58752] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsback.php"] [unique_id "aYDDq3C9GXHnmLkdgdnFswAAANg"]
[Mon Feb 02 23:33:00.790000 2026] [:error] [pid 33612:tid 33620] [client 20.89.111.141:5011] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsback.php"] [unique_id "aYDDrMtFn80qQEmo5QoiNwAAAQY"]
[Mon Feb 02 23:33:01.582738 2026] [:error] [pid 63034:tid 63124] [client 20.89.111.141:18162] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm.php"] [unique_id "aYDDreKXlgw75_wfbHoCJgAAAIY"]
[Mon Feb 02 23:33:02.610421 2026] [:error] [pid 46008:tid 46024] [client 20.89.111.141:22727] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm.php"] [unique_id "aYDDriRa52iYn7SlSMnFCQAAAU0"]
[Mon Feb 02 23:33:03.982483 2026] [:error] [pid 63034:tid 63120] [client 20.89.111.141:48103] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm.php"] [unique_id "aYDDr-KXlgw75_wfbHoCKAAAAII"]
[Mon Feb 02 23:33:04.921195 2026] [:error] [pid 57081:tid 57122] [client 20.89.111.141:58814] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm.php"] [unique_id "aYDDsGvouJ2Jkm6HfBhfuAAAAwc"]
[Mon Feb 02 23:33:05.742143 2026] [:error] [pid 46008:tid 46011] [client 20.89.111.141:24190] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aYDDsSRa52iYn7SlSMnFDgAAAUE"]
[Mon Feb 02 23:33:06.924971 2026] [:error] [pid 63034:tid 63118] [client 20.89.111.141:59288] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aYDDsuKXlgw75_wfbHoCKQAAAIA"]
[Mon Feb 02 23:33:07.660484 2026] [:error] [pid 63034:tid 63133] [client 20.89.111.141:53488] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aYDDs-KXlgw75_wfbHoCKgAAAI8"]
[Mon Feb 02 23:33:08.568011 2026] [:error] [pid 56989:tid 57015] [client 20.89.111.141:24171] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aYDDtEp44HnChN-GZlg7WgAAAhg"]
[Mon Feb 02 23:33:10.041591 2026] [:error] [pid 63153:tid 63185] [client 20.89.111.141:24156] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trd.php"] [unique_id "aYDDtnC9GXHnmLkdgdnFvgAAANg"]
[Mon Feb 02 23:33:10.729944 2026] [:error] [pid 33612:tid 33621] [client 20.89.111.141:51906] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trd.php"] [unique_id "aYDDtstFn80qQEmo5QoiQAAAAQc"]
[Mon Feb 02 23:33:12.358478 2026] [:error] [pid 33612:tid 33618] [client 20.89.111.141:59230] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trd.php"] [unique_id "aYDDuMtFn80qQEmo5QoiQwAAAQQ"]
[Mon Feb 02 23:33:13.552638 2026] [:error] [pid 56989:tid 57013] [client 20.89.111.141:51928] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trd.php"] [unique_id "aYDDuUp44HnChN-GZlg7YAAAAhY"]
[Mon Feb 02 23:33:14.650188 2026] [:error] [pid 57021:tid 57035] [client 20.89.111.141:51962] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/past.php"] [unique_id "aYDDuv7AEpx7VcmYK3EbVgAAAko"]
[Mon Feb 02 23:33:15.192222 2026] [:error] [pid 56989:tid 56994] [client 20.89.111.141:24182] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/past.php"] [unique_id "aYDDu0p44HnChN-GZlg7YgAAAgM"]
[Mon Feb 02 23:33:16.655117 2026] [:error] [pid 63153:tid 63161] [client 20.89.111.141:51964] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/past.php"] [unique_id "aYDDvHC9GXHnmLkdgdnFyAAAAMA"]
[Mon Feb 02 23:33:17.845606 2026] [:error] [pid 63153:tid 63167] [client 20.89.111.141:48071] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/past.php"] [unique_id "aYDDvXC9GXHnmLkdgdnFzAAAAMY"]
[Mon Feb 02 23:33:21.108521 2026] [:error] [pid 57022:tid 57069] [client 20.89.111.141:51938] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aYDDwRnEgLMzfcurxflpQgAAApE"]
[Mon Feb 02 23:33:22.111511 2026] [:error] [pid 63034:tid 63129] [client 20.89.111.141:53496] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aYDDwuKXlgw75_wfbHoCMgAAAIs"]
[Mon Feb 02 23:33:24.485572 2026] [:error] [pid 57021:tid 57049] [client 20.89.111.141:22777] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aYDDxP7AEpx7VcmYK3EbWgAAAlg"]
[Mon Feb 02 23:33:25.905611 2026] [:error] [pid 56989:tid 57003] [client 20.89.111.141:53490] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aYDDxUp44HnChN-GZlg7bwAAAgw"]
[Mon Feb 02 23:33:26.563186 2026] [:error] [pid 57022:tid 57060] [client 20.89.111.141:5033] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "aYDDxhnEgLMzfcurxflpRAAAAog"]
[Mon Feb 02 23:33:27.287732 2026] [:error] [pid 57080:tid 57109] [client 20.89.111.141:59312] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "aYDDx49Utn0ZlfnF10N5WAAAAtY"]
[Mon Feb 02 23:33:27.782275 2026] [:error] [pid 57021:tid 57042] [client 20.89.111.141:24150] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "aYDDx_7AEpx7VcmYK3EbWwAAAlE"]
[Mon Feb 02 23:33:29.578451 2026] [:error] [pid 56989:tid 57001] [client 20.89.111.141:18157] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "aYDDyUp44HnChN-GZlg7cgAAAgo"]
[Mon Feb 02 23:33:30.224733 2026] [:error] [pid 57081:tid 57118] [client 20.89.111.141:18168] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYDDymvouJ2Jkm6HfBhfxgAAAwM"]
[Mon Feb 02 23:33:32.413850 2026] [:error] [pid 57081:tid 57120] [client 20.89.111.141:22734] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYDDzGvouJ2Jkm6HfBhfzAAAAwU"]
[Mon Feb 02 23:33:33.068093 2026] [:error] [pid 57081:tid 57129] [client 20.89.111.141:24163] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYDDzWvouJ2Jkm6HfBhfzwAAAw4"]
[Mon Feb 02 23:33:34.618993 2026] [:error] [pid 57080:tid 57088] [client 20.89.111.141:5042] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYDDzo9Utn0ZlfnF10N5WwAAAsE"]
[Mon Feb 02 23:33:35.694703 2026] [:error] [pid 56989:tid 57015] [client 20.89.111.141:59258] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cron.php"] [unique_id "aYDDz0p44HnChN-GZlg7dgAAAhg"]
[Mon Feb 02 23:33:38.388280 2026] [:error] [pid 63153:tid 63179] [client 20.89.111.141:48075] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cron.php"] [unique_id "aYDD0nC9GXHnmLkdgdnF0gAAANI"]
[Mon Feb 02 23:33:39.492590 2026] [:error] [pid 33612:tid 33625] [client 20.89.111.141:59316] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cron.php"] [unique_id "aYDD08tFn80qQEmo5QoiVAAAAQs"]
[Mon Feb 02 23:33:40.517688 2026] [:error] [pid 63032:tid 63065] [client 20.89.111.141:48097] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cron.php"] [unique_id "aYDD1HyEQ1PkpebvdRgL9QAAAAI"]
[Mon Feb 02 23:33:43.053185 2026] [:error] [pid 33612:tid 33630] [client 20.89.111.141:18133] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/super.php"] [unique_id "aYDD18tFn80qQEmo5QoiVQAAARA"]
[Mon Feb 02 23:33:43.652770 2026] [:error] [pid 33612:tid 33622] [client 20.89.111.141:22720] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/super.php"] [unique_id "aYDD18tFn80qQEmo5QoiVgAAAQg"]
[Mon Feb 02 23:33:44.657104 2026] [:error] [pid 46008:tid 46020] [client 20.89.111.141:51930] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/super.php"] [unique_id "aYDD2CRa52iYn7SlSMnFIQAAAUk"]
[Mon Feb 02 23:33:46.158630 2026] [:error] [pid 46008:tid 46010] [client 20.89.111.141:5053] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/super.php"] [unique_id "aYDD2iRa52iYn7SlSMnFJAAAAUA"]
[Mon Feb 02 23:33:47.227640 2026] [:error] [pid 57022:tid 57054] [client 20.89.111.141:5045] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aYDD2xnEgLMzfcurxflpSwAAAoI"]
[Mon Feb 02 23:33:48.365232 2026] [:error] [pid 57081:tid 57138] [client 20.89.111.141:18119] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aYDD3GvouJ2Jkm6HfBhf1wAAAxc"]
[Mon Feb 02 23:33:49.371017 2026] [:error] [pid 57022:tid 57068] [client 20.89.111.141:18167] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aYDD3RnEgLMzfcurxflpTgAAApA"]
[Mon Feb 02 23:33:49.838367 2026] [:error] [pid 63034:tid 63120] [client 20.89.111.141:5044] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aYDD3eKXlgw75_wfbHoCNQAAAII"]
[Mon Feb 02 23:33:50.680403 2026] [:error] [pid 57022:tid 57071] [client 20.89.111.141:16696] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aYDD3hnEgLMzfcurxflpUAAAApM"]
[Mon Feb 02 23:33:51.723028 2026] [:error] [pid 57080:tid 57099] [client 20.89.111.141:59222] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aYDD349Utn0ZlfnF10N5bQAAAsw"]
[Mon Feb 02 23:33:52.698632 2026] [:error] [pid 33612:tid 33619] [client 20.89.111.141:18160] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aYDD4MtFn80qQEmo5QoiXgAAAQU"]
[Mon Feb 02 23:33:53.633450 2026] [:error] [pid 57081:tid 57137] [client 20.89.111.141:22349] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aYDD4WvouJ2Jkm6HfBhf2gAAAxY"]
[Mon Feb 02 23:33:54.286923 2026] [:error] [pid 63034:tid 63132] [client 20.89.111.141:34325] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aYDD4uKXlgw75_wfbHoCNwAAAI4"]
[Mon Feb 02 23:33:55.183030 2026] [:error] [pid 56989:tid 57003] [client 20.89.111.141:34340] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aYDD40p44HnChN-GZlg7egAAAgw"]
[Mon Feb 02 23:33:55.934509 2026] [:error] [pid 57081:tid 57135] [client 20.89.111.141:51316] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aYDD42vouJ2Jkm6HfBhf3AAAAxQ"]
[Mon Feb 02 23:33:56.659076 2026] [:error] [pid 46008:tid 46018] [client 20.89.111.141:18560] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aYDD5CRa52iYn7SlSMnFKgAAAUc"]
[Mon Feb 02 23:34:02.718760 2026] [:error] [pid 63153:tid 63169] [client 20.89.111.141:19128] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ov.php"] [unique_id "aYDD6nC9GXHnmLkdgdnF8gAAAMg"]
[Mon Feb 02 23:34:03.504375 2026] [:error] [pid 57081:tid 57139] [client 20.89.111.141:4616] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ov.php"] [unique_id "aYDD62vouJ2Jkm6HfBhf4QAAAxg"]
[Mon Feb 02 23:34:04.715783 2026] [:error] [pid 57022:tid 57076] [client 20.89.111.141:47070] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ov.php"] [unique_id "aYDD7BnEgLMzfcurxflpUgAAApg"]
[Mon Feb 02 23:34:05.613625 2026] [:error] [pid 63034:tid 63136] [client 20.89.111.141:19156] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ov.php"] [unique_id "aYDD7eKXlgw75_wfbHoCPgAAAJI"]
[Mon Feb 02 23:34:07.100917 2026] [:error] [pid 63032:tid 63076] [client 20.89.111.141:47057] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aYDD73yEQ1PkpebvdRgL_gAAAA0"]
[Mon Feb 02 23:34:08.824361 2026] [:error] [pid 33612:tid 33634] [client 20.89.111.141:23124] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aYDD8MtFn80qQEmo5QoiZgAAARQ"]
[Mon Feb 02 23:34:10.159829 2026] [:error] [pid 57022:tid 57059] [client 20.89.111.141:21328] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aYDD8hnEgLMzfcurxflpUwAAAoc"]
[Mon Feb 02 23:34:11.552609 2026] [:error] [pid 57021:tid 57035] [client 20.89.111.141:59044] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aYDD8_7AEpx7VcmYK3EbbAAAAko"]
[Mon Feb 02 23:34:12.528275 2026] [:error] [pid 57021:tid 57028] [client 20.89.111.141:54283] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYDD9P7AEpx7VcmYK3EbbQAAAkM"]
[Mon Feb 02 23:34:13.065752 2026] [:error] [pid 57081:tid 57128] [client 20.89.111.141:33465] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYDD9WvouJ2Jkm6HfBhf6AAAAw0"]
[Mon Feb 02 23:34:14.394673 2026] [:error] [pid 63032:tid 63073] [client 20.89.111.141:26639] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYDD9nyEQ1PkpebvdRgMBQAAAAo"]
[Mon Feb 02 23:34:15.395392 2026] [:error] [pid 57081:tid 57126] [client 20.89.111.141:21322] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aYDD92vouJ2Jkm6HfBhf7QAAAws"]
[Mon Feb 02 23:34:17.055220 2026] [:error] [pid 57022:tid 57055] [client 20.89.111.141:23149] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aYDD-RnEgLMzfcurxflpWAAAAoM"]
[Mon Feb 02 23:34:17.914339 2026] [:error] [pid 63034:tid 63126] [client 20.89.111.141:54273] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aYDD-eKXlgw75_wfbHoCPwAAAIg"]
[Mon Feb 02 23:34:19.088810 2026] [:error] [pid 56989:tid 56994] [client 20.89.111.141:54298] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aYDD-0p44HnChN-GZlg7jQAAAgM"]
[Mon Feb 02 23:34:21.049441 2026] [:error] [pid 46008:tid 46030] [client 20.89.111.141:30031] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aYDD_SRa52iYn7SlSMnFMAAAAVM"]
[Mon Feb 02 23:34:25.564645 2026] [:error] [pid 63153:tid 63169] [client 20.89.111.141:21331] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/weo.php"] [unique_id "aYDEAXC9GXHnmLkdgdnF_QAAAMg"]
[Mon Feb 02 23:34:26.649322 2026] [:error] [pid 63153:tid 63167] [client 20.89.111.141:56083] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/weo.php"] [unique_id "aYDEAnC9GXHnmLkdgdnGAQAAAMY"]
[Mon Feb 02 23:34:27.531498 2026] [:error] [pid 57081:tid 57137] [client 20.89.111.141:24646] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/weo.php"] [unique_id "aYDEA2vouJ2Jkm6HfBhf8wAAAxY"]
[Mon Feb 02 23:34:28.131474 2026] [:error] [pid 57081:tid 57128] [client 20.89.111.141:20969] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/weo.php"] [unique_id "aYDEBGvouJ2Jkm6HfBhf9AAAAw0"]
[Mon Feb 02 23:34:29.530730 2026] [:error] [pid 63153:tid 63170] [client 20.89.111.141:26667] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aYDEBXC9GXHnmLkdgdnGBwAAAMk"]
[Mon Feb 02 23:34:31.024395 2026] [:error] [pid 63153:tid 63180] [client 20.89.111.141:56389] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aYDEB3C9GXHnmLkdgdnGCgAAANM"]
[Mon Feb 02 23:34:33.217790 2026] [:error] [pid 63153:tid 63178] [client 20.89.111.141:30139] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aYDECXC9GXHnmLkdgdnGCwAAANE"]
[Mon Feb 02 23:34:34.148157 2026] [:error] [pid 33612:tid 33627] [client 20.89.111.141:17044] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aYDECstFn80qQEmo5QoiagAAAQ0"]
[Mon Feb 02 23:34:35.001362 2026] [:error] [pid 63034:tid 63142] [client 20.89.111.141:24220] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aYDEC-KXlgw75_wfbHoCRgAAAJg"]
[Mon Feb 02 23:34:35.626247 2026] [:error] [pid 57081:tid 57128] [client 20.89.111.141:25598] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aYDEC2vouJ2Jkm6HfBhf_gAAAw0"]
[Mon Feb 02 23:34:38.423521 2026] [:error] [pid 56989:tid 57013] [client 20.89.111.141:56422] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aYDEDkp44HnChN-GZlg7mAAAAhY"]
[Mon Feb 02 23:34:40.974699 2026] [:error] [pid 33612:tid 33636] [client 20.89.111.141:17080] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi2.php"] [unique_id "aYDEEMtFn80qQEmo5QoibwAAARY"]
[Mon Feb 02 23:34:42.310157 2026] [:error] [pid 57081:tid 57136] [client 20.89.111.141:23119] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aYDEEmvouJ2Jkm6HfBhgBQAAAxU"]
[Mon Feb 02 23:34:42.937248 2026] [:error] [pid 57022:tid 57054] [client 20.89.111.141:54301] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aYDEEhnEgLMzfcurxflpYwAAAoI"]
[Mon Feb 02 23:34:43.953400 2026] [:error] [pid 63034:tid 63127] [client 20.89.111.141:20968] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aYDEE-KXlgw75_wfbHoCSgAAAIk"]
[Mon Feb 02 23:34:44.912741 2026] [:error] [pid 57081:tid 57132] [client 20.89.111.141:23142] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "aYDEFGvouJ2Jkm6HfBhgBwAAAxE"]
[Mon Feb 02 23:34:45.927895 2026] [:error] [pid 46008:tid 46029] [client 20.89.111.141:23141] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aYDEFSRa52iYn7SlSMnFOQAAAVI"]
[Mon Feb 02 23:34:47.285741 2026] [:error] [pid 63153:tid 63168] [client 20.89.111.141:54295] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aYDEF3C9GXHnmLkdgdnGGAAAAMc"]
[Mon Feb 02 23:34:48.522135 2026] [:error] [pid 57021:tid 57029] [client 20.89.111.141:20978] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aYDEGP7AEpx7VcmYK3EbdAAAAkQ"]
[Mon Feb 02 23:34:49.489106 2026] [:error] [pid 63032:tid 63067] [client 20.89.111.141:23148] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aYDEGXyEQ1PkpebvdRgMFAAAAAQ"]
[Mon Feb 02 23:34:51.167881 2026] [:error] [pid 57080:tid 57105] [client 20.89.111.141:23159] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aYDEG49Utn0ZlfnF10N5gQAAAtI"]
[Mon Feb 02 23:34:52.092495 2026] [:error] [pid 63153:tid 63174] [client 20.89.111.141:17593] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aYDEHHC9GXHnmLkdgdnGHwAAAM0"]
[Mon Feb 02 23:34:53.565528 2026] [:error] [pid 63032:tid 63063] [client 20.89.111.141:30053] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aYDEHXyEQ1PkpebvdRgMGQAAAAA"]
[Mon Feb 02 23:34:56.139293 2026] [:error] [pid 57021:tid 57025] [client 20.89.111.141:23137] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aYDEIP7AEpx7VcmYK3EbdQAAAkA"]
[Mon Feb 02 23:35:07.951016 2026] [:error] [pid 56989:tid 56999] [client 20.89.111.141:59012] [client 20.89.111.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aYDEK0p44HnChN-GZlg7rgAAAgg"]
[Mon Feb 02 23:35:08.691725 2026] [:error] [pid 63153:tid 63175] [client 20.89.111.141:19121] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aYDELHC9GXHnmLkdgdnGNAAAAM4"]
[Mon Feb 02 23:35:10.339617 2026] [:error] [pid 57080:tid 57092] [client 20.89.111.141:4644] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aYDELo9Utn0ZlfnF10N5hwAAAsU"]
[Mon Feb 02 23:35:15.766348 2026] [:error] [pid 46008:tid 46034] [client 20.89.111.141:33905] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aYDEMyRa52iYn7SlSMnFUgAAAVc"]
[Mon Feb 02 23:35:17.052951 2026] [:error] [pid 57021:tid 57027] [client 20.89.111.141:33861] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aYDENf7AEpx7VcmYK3EbewAAAkI"]
[Mon Feb 02 23:35:17.858231 2026] [:error] [pid 63153:tid 63184] [client 20.89.111.141:4551] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ova-Simple.php"] [unique_id "aYDENXC9GXHnmLkdgdnGOQAAANc"]
[Mon Feb 02 23:35:18.844540 2026] [:error] [pid 46008:tid 46012] [client 20.89.111.141:51289] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ova-Simple.php"] [unique_id "aYDENiRa52iYn7SlSMnFWAAAAUI"]
[Mon Feb 02 23:35:20.244848 2026] [:error] [pid 57080:tid 57090] [client 20.89.111.141:51327] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ova-Simple.php"] [unique_id "aYDEOI9Utn0ZlfnF10N5jQAAAsM"]
[Mon Feb 02 23:35:23.408810 2026] [:error] [pid 33612:tid 33615] [client 20.89.111.141:17143] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ova-Simple.php"] [unique_id "aYDEO8tFn80qQEmo5QoidQAAAQE"]
[Mon Feb 02 23:35:24.961662 2026] [:error] [pid 63153:tid 63162] [client 20.89.111.141:33893] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aYDEPHC9GXHnmLkdgdnGOwAAAME"]
[Mon Feb 02 23:35:27.934834 2026] [:error] [pid 63153:tid 63178] [client 20.89.111.141:51285] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aYDEP3C9GXHnmLkdgdnGPgAAANE"]
[Mon Feb 02 23:35:31.041831 2026] [:error] [pid 57021:tid 57029] [client 20.89.111.141:15920] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aYDEQ_7AEpx7VcmYK3EbgQAAAkQ"]
[Mon Feb 02 23:35:32.876995 2026] [:error] [pid 33612:tid 33635] [client 20.89.111.141:48099] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aYDERMtFn80qQEmo5QoiewAAARU"]
[Mon Feb 02 23:35:34.779480 2026] [:error] [pid 63034:tid 63120] [client 20.89.111.141:24184] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r4f_1.php"] [unique_id "aYDERuKXlgw75_wfbHoCZAAAAII"]
[Mon Feb 02 23:35:35.681665 2026] [:error] [pid 57021:tid 57025] [client 20.89.111.141:22756] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r4f_1.php"] [unique_id "aYDER_7AEpx7VcmYK3EbgwAAAkA"]
[Mon Feb 02 23:35:37.734478 2026] [:error] [pid 56989:tid 56994] [client 20.89.111.141:15902] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r4f_1.php"] [unique_id "aYDESUp44HnChN-GZlg7wQAAAgM"]
[Mon Feb 02 23:35:38.501489 2026] [:error] [pid 57080:tid 57092] [client 20.89.111.141:48090] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r4f_1.php"] [unique_id "aYDESo9Utn0ZlfnF10N5lAAAAsU"]
[Mon Feb 02 23:35:39.167136 2026] [:error] [pid 63034:tid 63142] [client 20.89.111.141:22377] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hexx.php"] [unique_id "aYDES-KXlgw75_wfbHoCaAAAAJg"]
[Mon Feb 02 23:35:40.409932 2026] [:error] [pid 33612:tid 33620] [client 20.89.111.141:59207] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hexx.php"] [unique_id "aYDETMtFn80qQEmo5QoifgAAAQY"]
[Mon Feb 02 23:35:41.713867 2026] [:error] [pid 57021:tid 57028] [client 20.89.111.141:56271] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hexx.php"] [unique_id "aYDETf7AEpx7VcmYK3EbhwAAAkM"]
[Mon Feb 02 23:35:43.048487 2026] [:error] [pid 56989:tid 57003] [client 20.89.111.141:34304] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hexx.php"] [unique_id "aYDET0p44HnChN-GZlg7xgAAAgw"]
[Mon Feb 02 23:35:44.138563 2026] [:error] [pid 46008:tid 46013] [client 20.89.111.141:27635] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aYDEUCRa52iYn7SlSMnFZwAAAUM"]
[Mon Feb 02 23:35:46.598636 2026] [:error] [pid 63153:tid 63185] [client 20.89.111.141:59215] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aYDEUnC9GXHnmLkdgdnGSwAAANg"]
[Mon Feb 02 23:35:47.213094 2026] [:error] [pid 33612:tid 33626] [client 20.89.111.141:34316] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aYDEU8tFn80qQEmo5QoigwAAAQw"]
[Mon Feb 02 23:35:47.911297 2026] [:error] [pid 57081:tid 57118] [client 20.89.111.141:27586] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aYDEU2vouJ2Jkm6HfBhgIgAAAwM"]
[Mon Feb 02 23:35:48.812970 2026] [:error] [pid 57080:tid 57105] [client 20.89.111.141:51927] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aYDEVI9Utn0ZlfnF10N5mQAAAtI"]
[Mon Feb 02 23:35:49.491812 2026] [:error] [pid 57081:tid 57132] [client 20.89.111.141:22363] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aYDEVWvouJ2Jkm6HfBhgJAAAAxE"]
[Mon Feb 02 23:35:51.134521 2026] [:error] [pid 57081:tid 57116] [client 20.89.111.141:27614] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aYDEV2vouJ2Jkm6HfBhgKQAAAwE"]
[Mon Feb 02 23:35:52.547047 2026] [:error] [pid 57081:tid 57130] [client 20.89.111.141:18160] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aYDEWGvouJ2Jkm6HfBhgLAAAAw8"]
[Mon Feb 02 23:35:53.109616 2026] [:error] [pid 63032:tid 63085] [client 20.89.111.141:56273] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jquery.php"] [unique_id "aYDEWXyEQ1PkpebvdRgMMAAAABY"]
[Mon Feb 02 23:35:54.786625 2026] [:error] [pid 63032:tid 63087] [client 20.89.111.141:18575] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jquery.php"] [unique_id "aYDEWnyEQ1PkpebvdRgMNAAAABg"]
[Mon Feb 02 23:35:57.856432 2026] [:error] [pid 57022:tid 57064] [client 20.89.111.141:24155] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jquery.php"] [unique_id "aYDEXRnEgLMzfcurxflpgwAAAow"]
[Mon Feb 02 23:35:58.274349 2026] [:error] [pid 63153:tid 63183] [client 20.89.111.141:24172] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jquery.php"] [unique_id "aYDEXnC9GXHnmLkdgdnGVAAAANY"]
[Mon Feb 02 23:36:01.083440 2026] [:error] [pid 56989:tid 57014] [client 20.89.111.141:18562] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aYDEYUp44HnChN-GZlg71wAAAhc"]
[Mon Feb 02 23:36:02.208832 2026] [:error] [pid 63032:tid 63081] [client 20.89.111.141:56301] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aYDEYnyEQ1PkpebvdRgMOQAAABI"]
[Mon Feb 02 23:36:03.449927 2026] [:error] [pid 63153:tid 63161] [client 20.89.111.141:48073] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aYDEY3C9GXHnmLkdgdnGYQAAAMA"]
[Mon Feb 02 23:36:04.479875 2026] [:error] [pid 57081:tid 57129] [client 20.89.111.141:34350] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aYDEZGvouJ2Jkm6HfBhgMgAAAw4"]
[Mon Feb 02 23:36:11.211300 2026] [:error] [pid 57021:tid 57048] [client 20.89.111.141:27598] [client 20.89.111.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYDEa_7AEpx7VcmYK3EbmQAAAlc"]
[Mon Feb 02 23:36:16.819339 2026] [:error] [pid 57021:tid 57038] [client 20.89.111.141:27599] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aYDEcP7AEpx7VcmYK3EbpwAAAk0"]
[Mon Feb 02 23:36:17.431008 2026] [:error] [pid 63034:tid 63139] [client 20.89.111.141:18611] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aYDEceKXlgw75_wfbHoCggAAAJU"]
[Mon Feb 02 23:36:19.431742 2026] [:error] [pid 63032:tid 63076] [client 20.89.111.141:34347] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aYDEc3yEQ1PkpebvdRgMRgAAAA0"]
[Mon Feb 02 23:36:19.926462 2026] [:error] [pid 57022:tid 57065] [client 20.89.111.141:56315] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aYDEcxnEgLMzfcurxflpjQAAAo0"]
[Mon Feb 02 23:36:20.666863 2026] [:error] [pid 57021:tid 57049] [client 20.89.111.141:22373] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f355.php"] [unique_id "aYDEdP7AEpx7VcmYK3EbqgAAAlg"]
[Mon Feb 02 23:36:21.352118 2026] [:error] [pid 46008:tid 46012] [client 20.89.111.141:56258] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f355.php"] [unique_id "aYDEdSRa52iYn7SlSMnFdQAAAUI"]
[Mon Feb 02 23:36:22.156841 2026] [:error] [pid 46008:tid 46024] [client 20.89.111.141:20574] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f355.php"] [unique_id "aYDEdiRa52iYn7SlSMnFdgAAAU0"]
[Mon Feb 02 23:36:23.536521 2026] [:error] [pid 56989:tid 57006] [client 20.89.111.141:22398] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f355.php"] [unique_id "aYDEd0p44HnChN-GZlg77AAAAg8"]
[Mon Feb 02 23:36:25.867405 2026] [:error] [pid 57021:tid 57045] [client 20.89.111.141:20590] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aYDEef7AEpx7VcmYK3EbsQAAAlQ"]
[Mon Feb 02 23:36:28.240215 2026] [:error] [pid 63032:tid 63081] [client 20.89.111.141:25601] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aYDEfHyEQ1PkpebvdRgMUAAAABI"]
[Mon Feb 02 23:36:30.063863 2026] [:error] [pid 63153:tid 63185] [client 20.89.111.141:25619] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aYDEfnC9GXHnmLkdgdnGewAAANg"]
[Mon Feb 02 23:36:31.053263 2026] [:error] [pid 63032:tid 63063] [client 20.89.111.141:25605] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aYDEf3yEQ1PkpebvdRgMVQAAAAA"]
[Mon Feb 02 23:36:31.437949 2026] [:error] [pid 63032:tid 63072] [client 20.89.111.141:22351] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "aYDEf3yEQ1PkpebvdRgMVgAAAAk"]
[Mon Feb 02 23:36:34.156465 2026] [:error] [pid 57080:tid 57110] [client 20.89.111.141:4454] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "aYDEgo9Utn0ZlfnF10N5owAAAtc"]
[Mon Feb 02 23:36:35.135125 2026] [:error] [pid 46008:tid 46032] [client 20.89.111.141:18582] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "aYDEgyRa52iYn7SlSMnFhQAAAVU"]
[Mon Feb 02 23:36:37.232798 2026] [:error] [pid 63032:tid 63077] [client 20.89.111.141:56295] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "aYDEhXyEQ1PkpebvdRgMXQAAAA4"]
[Mon Feb 02 23:36:40.482782 2026] [:error] [pid 57080:tid 57106] [client 20.89.111.141:56311] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aYDEiI9Utn0ZlfnF10N5qAAAAtM"]
[Mon Feb 02 23:36:41.445969 2026] [:error] [pid 46008:tid 46022] [client 20.89.111.141:18587] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aYDEiSRa52iYn7SlSMnFjwAAAUs"]
[Mon Feb 02 23:36:44.512392 2026] [:error] [pid 57081:tid 57137] [client 20.89.111.141:5038] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aYDEjGvouJ2Jkm6HfBhgRAAAAxY"]
[Mon Feb 02 23:36:51.332392 2026] [:error] [pid 57080:tid 57100] [client 20.89.111.141:25086] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aYDEk49Utn0ZlfnF10N5rwAAAs0"]
[Mon Feb 02 23:36:53.703239 2026] [:error] [pid 57080:tid 57087] [client 20.89.111.141:18597] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aYDElY9Utn0ZlfnF10N5tAAAAsA"]
[Mon Feb 02 23:36:55.799359 2026] [:error] [pid 57022:tid 57072] [client 20.89.111.141:20587] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aYDElxnEgLMzfcurxflpnAAAApQ"]
[Mon Feb 02 23:36:58.343783 2026] [:error] [pid 63032:tid 63070] [client 20.89.111.141:25608] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aYDEmnyEQ1PkpebvdRgMawAAAAc"]
[Mon Feb 02 23:36:59.624000 2026] [:error] [pid 46008:tid 46010] [client 20.89.111.141:25035] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aYDEmyRa52iYn7SlSMnFoAAAAUA"]
[Mon Feb 02 23:37:00.413980 2026] [:error] [pid 56989:tid 57001] [client 20.89.111.141:20563] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "aYDEnEp44HnChN-GZlg8BgAAAgo"]
[Mon Feb 02 23:37:01.335730 2026] [:error] [pid 57022:tid 57070] [client 20.89.111.141:21805] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "aYDEnRnEgLMzfcurxflppAAAApI"]
[Mon Feb 02 23:37:03.622449 2026] [:error] [pid 63153:tid 63162] [client 20.89.111.141:25082] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "aYDEn3C9GXHnmLkdgdnGtwAAAME"]
[Mon Feb 02 23:37:05.776070 2026] [:error] [pid 57080:tid 57105] [client 20.89.111.141:25024] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "aYDEoY9Utn0ZlfnF10N5wgAAAtI"]
[Mon Feb 02 23:37:06.117478 2026] [:error] [pid 57080:tid 57087] [client 20.89.111.141:19644] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aYDEoo9Utn0ZlfnF10N5xAAAAsA"]
[Mon Feb 02 23:37:07.846877 2026] [:error] [pid 63153:tid 63177] [client 20.89.111.141:19991] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aYDEo3C9GXHnmLkdgdnGvQAAANA"]
[Mon Feb 02 23:37:08.594014 2026] [:error] [pid 57021:tid 57034] [client 20.89.111.141:18576] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aYDEpP7AEpx7VcmYK3EbyQAAAkk"]
[Mon Feb 02 23:37:10.354833 2026] [:error] [pid 63153:tid 63171] [client 20.89.111.141:21781] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aYDEpnC9GXHnmLkdgdnGxQAAAMo"]
[Mon Feb 02 23:37:12.066352 2026] [:error] [pid 63153:tid 63164] [client 20.89.111.141:19983] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYDEqHC9GXHnmLkdgdnGzgAAAMM"]
[Mon Feb 02 23:37:13.172505 2026] [:error] [pid 33612:tid 33638] [client 20.89.111.141:25029] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYDEqctFn80qQEmo5QoiqwAAARg"]
[Mon Feb 02 23:37:15.011010 2026] [:error] [pid 57022:tid 57072] [client 20.89.111.141:46360] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYDEqxnEgLMzfcurxflpqgAAApQ"]
[Mon Feb 02 23:37:15.852083 2026] [:error] [pid 63034:tid 63123] [client 20.89.111.141:21766] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYDEq-KXlgw75_wfbHoCowAAAIU"]
[Mon Feb 02 23:37:22.632790 2026] [:error] [pid 63153:tid 63177] [client 20.89.111.141:4429] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aYDEsnC9GXHnmLkdgdnG4QAAANA"]
[Mon Feb 02 23:37:23.171889 2026] [:error] [pid 57081:tid 57117] [client 20.89.111.141:25061] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aYDEs2vouJ2Jkm6HfBhgTwAAAwI"]
[Mon Feb 02 23:37:23.767679 2026] [:error] [pid 57081:tid 57120] [client 20.89.111.141:20001] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aYDEs2vouJ2Jkm6HfBhgUQAAAwU"]
[Mon Feb 02 23:37:24.955236 2026] [:error] [pid 63034:tid 63136] [client 20.89.111.141:19996] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aYDEtOKXlgw75_wfbHoCtQAAAJI"]
[Mon Feb 02 23:37:25.590235 2026] [:error] [pid 57081:tid 57133] [client 20.89.111.141:25610] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYDEtWvouJ2Jkm6HfBhgUgAAAxI"]
[Mon Feb 02 23:37:26.433733 2026] [:error] [pid 63032:tid 63067] [client 20.89.111.141:17560] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYDEtnyEQ1PkpebvdRgMhgAAAAQ"]
[Mon Feb 02 23:37:27.177487 2026] [:error] [pid 56989:tid 57013] [client 20.89.111.141:25026] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYDEt0p44HnChN-GZlg8GgAAAhY"]
[Mon Feb 02 23:37:28.159171 2026] [:error] [pid 56989:tid 57011] [client 20.89.111.141:21787] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aYDEuEp44HnChN-GZlg8HQAAAhQ"]
[Mon Feb 02 23:37:28.768913 2026] [:error] [pid 63153:tid 63168] [client 20.89.111.141:46368] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aYDEuHC9GXHnmLkdgdnG7gAAAMc"]
[Mon Feb 02 23:37:29.944154 2026] [:error] [pid 63153:tid 63164] [client 20.89.111.141:19634] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aYDEuXC9GXHnmLkdgdnG8QAAAMM"]
[Mon Feb 02 23:37:31.022009 2026] [:error] [pid 33612:tid 33636] [client 20.89.111.141:47456] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aYDEu8tFn80qQEmo5QoiuwAAARY"]
[Mon Feb 02 23:37:33.830932 2026] [:error] [pid 63153:tid 63169] [client 20.89.111.141:25616] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aYDEvXC9GXHnmLkdgdnG9wAAAMg"]
[Mon Feb 02 23:37:34.392882 2026] [:error] [pid 63032:tid 63070] [client 20.89.111.141:19979] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYDEvnyEQ1PkpebvdRgMiwAAAAc"]
[Mon Feb 02 23:37:36.807180 2026] [:error] [pid 33612:tid 33625] [client 20.89.111.141:19627] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYDEwMtFn80qQEmo5QoixQAAAQs"]
[Mon Feb 02 23:37:42.115242 2026] [:error] [pid 63032:tid 63074] [client 20.89.111.141:4459] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYDExnyEQ1PkpebvdRgMkgAAAAs"]
[Mon Feb 02 23:37:42.568373 2026] [:error] [pid 63034:tid 63124] [client 20.89.111.141:4432] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYDExuKXlgw75_wfbHoCxwAAAIY"]
[Mon Feb 02 23:37:45.442480 2026] [:error] [pid 56989:tid 57006] [client 20.89.111.141:21765] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "aYDEyUp44HnChN-GZlg8KgAAAg8"]
[Mon Feb 02 23:37:46.451241 2026] [:error] [pid 57021:tid 57047] [client 20.89.111.141:58868] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "aYDEyv7AEpx7VcmYK3Eb1QAAAlY"]
[Mon Feb 02 23:37:52.339024 2026] [:error] [pid 57081:tid 57118] [client 20.89.111.141:20545] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "aYDE0GvouJ2Jkm6HfBhgbwAAAwM"]
[Mon Feb 02 23:37:55.010145 2026] [:error] [pid 63153:tid 63178] [client 20.89.111.141:21817] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "aYDE03C9GXHnmLkdgdnHCwAAANE"]
[Mon Feb 02 23:38:00.096499 2026] [:error] [pid 46008:tid 46013] [client 20.89.111.141:46378] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aYDE2CRa52iYn7SlSMnFxgAAAUM"]
[Mon Feb 02 23:38:03.597596 2026] [:error] [pid 63032:tid 63085] [client 20.89.111.141:21792] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aYDE23yEQ1PkpebvdRgMrgAAABY"]
[Mon Feb 02 23:38:04.049247 2026] [:error] [pid 56989:tid 57015] [client 20.89.111.141:25638] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aYDE3Ep44HnChN-GZlg8QwAAAhg"]
[Mon Feb 02 23:38:05.027580 2026] [:error] [pid 57080:tid 57092] [client 20.89.111.141:25631] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aYDE3Y9Utn0ZlfnF10N56QAAAsU"]
[Mon Feb 02 23:38:07.785133 2026] [:error] [pid 57080:tid 57107] [client 20.89.111.141:19636] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aYDE349Utn0ZlfnF10N58AAAAtQ"]
[Mon Feb 02 23:38:11.171246 2026] [:error] [pid 63032:tid 63071] [client 20.89.111.141:30080] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aYDE43yEQ1PkpebvdRgMsAAAAAg"]
[Mon Feb 02 23:38:11.953136 2026] [:error] [pid 63153:tid 63175] [client 20.89.111.141:46361] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aYDE43C9GXHnmLkdgdnHJQAAAM4"]
[Mon Feb 02 23:38:13.477575 2026] [:error] [pid 57080:tid 57093] [client 20.89.111.141:25066] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aYDE5Y9Utn0ZlfnF10N59gAAAsY"]
[Mon Feb 02 23:38:14.158239 2026] [:error] [pid 63153:tid 63167] [client 20.89.111.141:58853] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aYDE5nC9GXHnmLkdgdnHLQAAAMY"]
[Mon Feb 02 23:38:15.590622 2026] [:error] [pid 63032:tid 63075] [client 20.89.111.141:46345] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aYDE53yEQ1PkpebvdRgMvQAAAAw"]
[Mon Feb 02 23:38:17.012633 2026] [:error] [pid 63153:tid 63170] [client 20.89.111.141:20022] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aYDE6XC9GXHnmLkdgdnHNQAAAMk"]
[Mon Feb 02 23:38:17.961529 2026] [:error] [pid 63153:tid 63176] [client 20.89.111.141:19625] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aYDE6XC9GXHnmLkdgdnHOwAAAM8"]
[Mon Feb 02 23:38:19.340958 2026] [:error] [pid 63032:tid 63084] [client 20.89.111.141:54295] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aYDE63yEQ1PkpebvdRgMwQAAABU"]
[Mon Feb 02 23:38:20.074431 2026] [:error] [pid 63153:tid 63163] [client 20.89.111.141:19629] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aYDE7HC9GXHnmLkdgdnHRAAAAMI"]
[Mon Feb 02 23:38:20.849888 2026] [:error] [pid 57081:tid 57125] [client 20.89.111.141:25632] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aYDE7GvouJ2Jkm6HfBhgeAAAAwo"]
[Mon Feb 02 23:38:28.297226 2026] [:error] [pid 57021:tid 57036] [client 20.89.111.141:4442] [client 20.89.111.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYDE9P7AEpx7VcmYK3Eb-QAAAks"]
[Mon Feb 02 23:38:34.446574 2026] [:error] [pid 46008:tid 46019] [client 20.89.111.141:21801] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aYDE-iRa52iYn7SlSMnF6wAAAUg"]
[Mon Feb 02 23:38:35.230621 2026] [:error] [pid 57080:tid 57101] [client 20.89.111.141:58834] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aYDE-49Utn0ZlfnF10N5-wAAAs4"]
[Mon Feb 02 23:38:36.035837 2026] [:error] [pid 57081:tid 57125] [client 20.89.111.141:21822] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aYDE_GvouJ2Jkm6HfBhghwAAAwo"]
[Mon Feb 02 23:38:37.161707 2026] [:error] [pid 57080:tid 57103] [client 20.89.111.141:25084] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aYDE_Y9Utn0ZlfnF10N5_gAAAtA"]
[Mon Feb 02 23:38:38.633859 2026] [:error] [pid 57080:tid 57110] [client 20.89.111.141:25630] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aYDE_o9Utn0ZlfnF10N6AQAAAtc"]
[Mon Feb 02 23:38:39.721012 2026] [:error] [pid 63153:tid 63173] [client 20.89.111.141:19643] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aYDE_3C9GXHnmLkdgdnHXAAAAMw"]
[Mon Feb 02 23:38:40.331881 2026] [:error] [pid 57022:tid 57053] [client 20.89.111.141:46346] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aYDFABnEgLMzfcurxflpwQAAAoE"]
[Mon Feb 02 23:38:41.685379 2026] [:error] [pid 56989:tid 57008] [client 20.89.111.141:21772] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aYDFAUp44HnChN-GZlg8ZwAAAhE"]
[Mon Feb 02 23:38:42.862658 2026] [:error] [pid 56989:tid 56999] [client 20.89.111.141:58871] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYDFAkp44HnChN-GZlg8agAAAgg"]
[Mon Feb 02 23:38:45.988460 2026] [:error] [pid 46008:tid 46028] [client 20.89.111.141:58870] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYDFBSRa52iYn7SlSMnF9QAAAVE"]
[Mon Feb 02 23:38:47.507130 2026] [:error] [pid 57081:tid 57132] [client 20.89.111.141:24224] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYDFB2vouJ2Jkm6HfBhgjwAAAxE"]
[Mon Feb 02 23:38:48.280916 2026] [:error] [pid 57022:tid 57056] [client 20.89.111.141:32943] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYDFCBnEgLMzfcurxflpxQAAAoQ"]
[Mon Feb 02 23:38:48.728668 2026] [:error] [pid 63153:tid 63171] [client 20.89.111.141:16709] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aYDFCHC9GXHnmLkdgdnHbgAAAMo"]
[Mon Feb 02 23:38:49.680968 2026] [:error] [pid 63153:tid 63180] [client 20.89.111.141:16721] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aYDFCXC9GXHnmLkdgdnHcQAAANM"]
[Mon Feb 02 23:38:53.314792 2026] [:error] [pid 57080:tid 57111] [client 20.89.111.141:30133] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aYDFDY9Utn0ZlfnF10N6GgAAAtg"]
[Mon Feb 02 23:38:53.896583 2026] [:error] [pid 56989:tid 57013] [client 20.89.111.141:32959] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aYDFDUp44HnChN-GZlg8fAAAAhY"]
[Mon Feb 02 23:38:55.050906 2026] [:error] [pid 63153:tid 63178] [client 20.89.111.141:24238] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYDFD3C9GXHnmLkdgdnHdwAAANE"]
[Mon Feb 02 23:38:56.111602 2026] [:error] [pid 63153:tid 63173] [client 20.89.111.141:24216] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYDFEHC9GXHnmLkdgdnHeAAAAMw"]
[Mon Feb 02 23:38:56.826808 2026] [:error] [pid 57021:tid 57032] [client 20.89.111.141:25538] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYDFEP7AEpx7VcmYK3EcDgAAAkc"]
[Mon Feb 02 23:38:57.865404 2026] [:error] [pid 57081:tid 57136] [client 20.89.111.141:16727] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYDFEWvouJ2Jkm6HfBhgmgAAAxU"]
[Mon Feb 02 23:39:00.464967 2026] [:error] [pid 57021:tid 57041] [client 20.89.111.141:56123] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "aYDFFP7AEpx7VcmYK3EcEwAAAlA"]
[Mon Feb 02 23:39:01.429038 2026] [:error] [pid 57022:tid 57058] [client 20.89.111.141:24660] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "aYDFFRnEgLMzfcurxflpzAAAAoY"]
[Mon Feb 02 23:39:01.994794 2026] [:error] [pid 56989:tid 57003] [client 20.89.111.141:16741] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "aYDFFUp44HnChN-GZlg8gwAAAgw"]
[Mon Feb 02 23:39:02.826762 2026] [:error] [pid 57080:tid 57110] [client 20.89.111.141:20937] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "aYDFFo9Utn0ZlfnF10N6IQAAAtc"]
[Mon Feb 02 23:39:03.526597 2026] [:error] [pid 57081:tid 57131] [client 20.89.111.141:32899] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blurbs18.php"] [unique_id "aYDFF2vouJ2Jkm6HfBhgoQAAAxA"]
[Mon Feb 02 23:39:05.071759 2026] [:error] [pid 63153:tid 63162] [client 20.89.111.141:26684] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blurbs18.php"] [unique_id "aYDFGXC9GXHnmLkdgdnHfwAAAME"]
[Mon Feb 02 23:39:05.632596 2026] [:error] [pid 56989:tid 57008] [client 20.89.111.141:26663] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blurbs18.php"] [unique_id "aYDFGUp44HnChN-GZlg8iQAAAhE"]
[Mon Feb 02 23:39:09.160112 2026] [:error] [pid 46008:tid 46020] [client 20.89.111.141:54279] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blurbs18.php"] [unique_id "aYDFHSRa52iYn7SlSMnGCwAAAUk"]
[Mon Feb 02 23:39:10.484506 2026] [:error] [pid 33612:tid 33621] [client 20.89.111.141:33445] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aYDFHstFn80qQEmo5QojAQAAAQc"]
[Mon Feb 02 23:39:11.449782 2026] [:error] [pid 63153:tid 63177] [client 20.89.111.141:33466] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aYDFH3C9GXHnmLkdgdnHhAAAANA"]
[Mon Feb 02 23:39:12.878898 2026] [:error] [pid 56989:tid 56995] [client 20.89.111.141:16718] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aYDFIEp44HnChN-GZlg8kQAAAgQ"]
[Mon Feb 02 23:39:13.807021 2026] [:error] [pid 33612:tid 33634] [client 20.89.111.141:54310] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aYDFIctFn80qQEmo5QojAwAAARQ"]
[Mon Feb 02 23:39:14.304727 2026] [:error] [pid 63032:tid 63066] [client 20.89.111.141:30029] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYDFInyEQ1PkpebvdRgM-QAAAAM"]
[Mon Feb 02 23:39:15.926612 2026] [:error] [pid 63153:tid 63165] [client 20.89.111.141:23167] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYDFI3C9GXHnmLkdgdnHiQAAAMQ"]
[Mon Feb 02 23:39:18.962089 2026] [:error] [pid 56989:tid 57002] [client 20.89.111.141:26631] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYDFJkp44HnChN-GZlg8mQAAAgs"]
[Mon Feb 02 23:39:20.768992 2026] [:error] [pid 46008:tid 46032] [client 20.89.111.141:59463] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYDFKCRa52iYn7SlSMnGFgAAAVU"]
[Mon Feb 02 23:39:22.447869 2026] [:error] [pid 57022:tid 57064] [client 20.89.111.141:21357] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYDFKhnEgLMzfcurxflp1gAAAow"]
[Mon Feb 02 23:39:23.394275 2026] [:error] [pid 33612:tid 33633] [client 20.89.111.141:27079] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYDFK8tFn80qQEmo5QojCwAAARM"]
[Mon Feb 02 23:39:32.297768 2026] [:error] [pid 56989:tid 56991] [client 20.89.111.141:33871] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYDFNEp44HnChN-GZlg8qQAAAgA"]
[Mon Feb 02 23:39:33.080008 2026] [:error] [pid 56989:tid 57009] [client 20.89.111.141:19183] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYDFNUp44HnChN-GZlg8rAAAAhI"]
[Mon Feb 02 23:39:33.617224 2026] [:error] [pid 57021:tid 57026] [client 20.89.111.141:17142] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aYDFNf7AEpx7VcmYK3EcJAAAAkE"]
[Mon Feb 02 23:39:41.676926 2026] [:error] [pid 63153:tid 63161] [client 20.89.111.141:19091] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aYDFPXC9GXHnmLkdgdnHsgAAAMA"]
[Mon Feb 02 23:39:43.452471 2026] [:error] [pid 33612:tid 33630] [client 20.89.111.141:17146] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aYDFP8tFn80qQEmo5QojGQAAARA"]
[Mon Feb 02 23:39:44.967275 2026] [:error] [pid 56989:tid 56999] [client 20.89.111.141:27073] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aYDFQEp44HnChN-GZlg8ugAAAgg"]
[Mon Feb 02 23:39:45.994322 2026] [:error] [pid 46008:tid 46024] [client 20.89.111.141:59008] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aYDFQSRa52iYn7SlSMnGIwAAAU0"]
[Mon Feb 02 23:39:47.914333 2026] [:error] [pid 57021:tid 57025] [client 20.89.111.141:4626] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYDFQ_7AEpx7VcmYK3EcMAAAAkA"]
[Mon Feb 02 23:39:49.017439 2026] [:error] [pid 46008:tid 46012] [client 20.89.111.141:4633] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYDFRSRa52iYn7SlSMnGKgAAAUI"]
[Mon Feb 02 23:39:49.916126 2026] [:error] [pid 63153:tid 63163] [client 20.89.111.141:58720] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYDFRXC9GXHnmLkdgdnHuAAAAMI"]
[Mon Feb 02 23:39:50.915353 2026] [:error] [pid 57080:tid 57092] [client 20.89.111.141:33840] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYDFRo9Utn0ZlfnF10N6QgAAAsU"]
[Mon Feb 02 23:39:51.755812 2026] [:error] [pid 57080:tid 57101] [client 20.89.111.141:58751] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aYDFR49Utn0ZlfnF10N6RAAAAs4"]
[Mon Feb 02 23:39:53.092094 2026] [:error] [pid 63153:tid 63168] [client 20.89.111.141:59012] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aYDFSXC9GXHnmLkdgdnHvQAAAMc"]
[Mon Feb 02 23:39:54.332959 2026] [:error] [pid 63034:tid 63134] [client 20.89.111.141:4648] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aYDFSuKXlgw75_wfbHoDPgAAAJA"]
[Mon Feb 02 23:39:55.589306 2026] [:error] [pid 63153:tid 63175] [client 20.89.111.141:33807] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aYDFS3C9GXHnmLkdgdnHwgAAAM4"]
[Mon Feb 02 23:39:57.319180 2026] [:error] [pid 46008:tid 46013] [client 20.89.111.141:4622] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admins.php"] [unique_id "aYDFTSRa52iYn7SlSMnGMAAAAUM"]
[Mon Feb 02 23:39:58.716204 2026] [:error] [pid 63153:tid 63168] [client 20.89.111.141:47073] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admins.php"] [unique_id "aYDFTnC9GXHnmLkdgdnHywAAAMc"]
[Mon Feb 02 23:39:59.342322 2026] [:error] [pid 63153:tid 63167] [client 20.89.111.141:27130] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admins.php"] [unique_id "aYDFT3C9GXHnmLkdgdnHzgAAAMY"]
[Mon Feb 02 23:40:00.226764 2026] [:error] [pid 46008:tid 46011] [client 20.89.111.141:59500] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admins.php"] [unique_id "aYDFUCRa52iYn7SlSMnGMwAAAUE"]
[Mon Feb 02 23:40:01.536345 2026] [:error] [pid 63032:tid 63082] [client 20.89.111.141:59495] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aYDFUXyEQ1PkpebvdRgNNgAAABM"]
[Mon Feb 02 23:40:02.095599 2026] [:error] [pid 57021:tid 57048] [client 20.89.111.141:17104] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aYDFUv7AEpx7VcmYK3EcPgAAAlc"]
[Mon Feb 02 23:40:02.646744 2026] [:error] [pid 63153:tid 63171] [client 20.89.111.141:59063] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aYDFUnC9GXHnmLkdgdnH0gAAAMo"]
[Mon Feb 02 23:40:03.926281 2026] [:error] [pid 57081:tid 57133] [client 20.89.111.141:58742] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aYDFU2vouJ2Jkm6HfBhg1wAAAxI"]
[Mon Feb 02 23:40:04.755922 2026] [:error] [pid 63153:tid 63174] [client 20.89.111.141:59060] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/main.php"] [unique_id "aYDFVHC9GXHnmLkdgdnH0wAAAM0"]
[Mon Feb 02 23:40:05.763395 2026] [:error] [pid 56989:tid 57010] [client 20.89.111.141:30068] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/main.php"] [unique_id "aYDFVUp44HnChN-GZlg8wAAAAhM"]
[Mon Feb 02 23:40:06.566627 2026] [:error] [pid 57021:tid 57041] [client 20.89.111.141:15925] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/main.php"] [unique_id "aYDFVv7AEpx7VcmYK3EcQgAAAlA"]
[Mon Feb 02 23:40:08.106630 2026] [:error] [pid 63153:tid 63165] [client 20.89.111.141:47078] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/main.php"] [unique_id "aYDFWHC9GXHnmLkdgdnH1gAAAMQ"]
[Mon Feb 02 23:40:10.668249 2026] [:error] [pid 63153:tid 63167] [client 20.89.111.141:30061] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aYDFWnC9GXHnmLkdgdnH3gAAAMY"]
[Mon Feb 02 23:40:16.396806 2026] [:error] [pid 33612:tid 33623] [client 20.89.111.141:59467] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aYDFYMtFn80qQEmo5QojJgAAAQk"]
[Mon Feb 02 23:40:17.842801 2026] [:error] [pid 57022:tid 57070] [client 20.89.111.141:59039] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aYDFYRnEgLMzfcurxflp7AAAApI"]
[Mon Feb 02 23:40:20.189754 2026] [:error] [pid 63153:tid 63176] [client 20.89.111.141:59464] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aYDFZHC9GXHnmLkdgdnH6wAAAM8"]
[Mon Feb 02 23:40:22.484852 2026] [:error] [pid 63153:tid 63171] [client 20.89.111.141:59047] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aYDFZnC9GXHnmLkdgdnH7QAAAMo"]
[Mon Feb 02 23:40:24.032369 2026] [:error] [pid 33612:tid 33618] [client 20.89.111.141:26624] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aYDFaMtFn80qQEmo5QojKgAAAQQ"]
[Mon Feb 02 23:40:25.103460 2026] [:error] [pid 33612:tid 33614] [client 20.89.111.141:33432] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aYDFactFn80qQEmo5QojLgAAAQA"]
[Mon Feb 02 23:40:26.791436 2026] [:error] [pid 33612:tid 33631] [client 20.89.111.141:56093] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aYDFastFn80qQEmo5QojMgAAARE"]
[Mon Feb 02 23:40:28.208259 2026] [:error] [pid 63153:tid 63179] [client 20.89.111.141:59506] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aYDFbHC9GXHnmLkdgdnH8AAAANI"]
[Mon Feb 02 23:40:30.328460 2026] [:error] [pid 46008:tid 46010] [client 20.89.111.141:24667] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aYDFbiRa52iYn7SlSMnGRwAAAUA"]
[Mon Feb 02 23:40:33.232566 2026] [:error] [pid 56989:tid 57010] [client 20.89.111.141:24674] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aYDFcUp44HnChN-GZlg8zgAAAhM"]
[Mon Feb 02 23:40:34.351312 2026] [:error] [pid 63153:tid 63173] [client 20.89.111.141:33439] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aYDFcnC9GXHnmLkdgdnH9wAAAMw"]
[Mon Feb 02 23:40:35.612971 2026] [:error] [pid 63034:tid 63119] [client 20.89.111.141:17082] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aYDFc-KXlgw75_wfbHoDTwAAAIE"]
[Mon Feb 02 23:40:36.665747 2026] [:error] [pid 57080:tid 57088] [client 20.89.111.141:26679] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aYDFdI9Utn0ZlfnF10N6VQAAAsE"]
[Mon Feb 02 23:40:39.417125 2026] [:error] [pid 57081:tid 57139] [client 20.89.111.141:20974] [client 20.89.111.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aYDFd2vouJ2Jkm6HfBhg6gAAAxg"]
[Mon Feb 02 23:40:43.128188 2026] [:error] [pid 56989:tid 57010] [client 20.89.111.141:16758] [client 20.89.111.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYDFe0p44HnChN-GZlg82QAAAhM"]
[Tue Feb 03 00:23:48.899534 2026] [:error] [pid 57021:tid 57034] [client 193.36.225.76:53309] [client 193.36.225.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.76, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYDPlP7AEpx7VcmYK3EiPgAAAkk"]
[Tue Feb 03 00:43:42.311481 2026] [:error] [pid 63153:tid 63162] [client 20.198.94.228:6887] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aYDUPnC9GXHnmLkdgdnZ_AAAAME"]
[Tue Feb 03 00:43:47.072133 2026] [:error] [pid 57080:tid 57097] [client 20.198.94.228:8126] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aYDUQ49Utn0ZlfnF10OCUAAAAso"]
[Tue Feb 03 00:43:49.263039 2026] [:error] [pid 63153:tid 63167] [client 20.198.94.228:7336] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aYDURXC9GXHnmLkdgdnaAQAAAMY"]
[Tue Feb 03 00:43:56.265774 2026] [:error] [pid 33612:tid 33620] [client 20.198.94.228:2620] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aYDUTMtFn80qQEmo5Qos2gAAAQY"]
[Tue Feb 03 00:44:03.744271 2026] [:error] [pid 46008:tid 46010] [client 20.198.94.228:11230] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYDUUyRa52iYn7SlSMnQZQAAAUA"]
[Tue Feb 03 00:44:08.352790 2026] [:error] [pid 56989:tid 57000] [client 20.198.94.228:18075] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYDUWEp44HnChN-GZlhLLAAAAgk"]
[Tue Feb 03 00:44:15.126099 2026] [:error] [pid 63032:tid 63082] [client 20.198.94.228:6849] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aYDUX3yEQ1PkpebvdRgY0AAAABM"]
[Tue Feb 03 00:44:19.015434 2026] [:error] [pid 63032:tid 63063] [client 20.198.94.228:11218] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aYDUY3yEQ1PkpebvdRgY0gAAAAA"]
[Tue Feb 03 00:44:21.244593 2026] [:error] [pid 57081:tid 57128] [client 20.198.94.228:6903] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aYDUZWvouJ2Jkm6HfBhrBgAAAw0"]
[Tue Feb 03 00:44:23.327384 2026] [:error] [pid 57022:tid 57063] [client 20.198.94.228:2586] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aYDUZxnEgLMzfcurxfly7gAAAos"]
[Tue Feb 03 00:44:25.516416 2026] [:error] [pid 63032:tid 63083] [client 20.198.94.228:2527] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aYDUaXyEQ1PkpebvdRgY2AAAABQ"]
[Tue Feb 03 00:44:27.672797 2026] [:error] [pid 57021:tid 57049] [client 20.198.94.228:6841] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aYDUa_7AEpx7VcmYK3ElzQAAAlg"]
[Tue Feb 03 00:44:34.492325 2026] [:error] [pid 56989:tid 56999] [client 20.198.94.228:11249] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aYDUckp44HnChN-GZlhLTgAAAgg"]
[Tue Feb 03 00:44:35.596122 2026] [:error] [pid 63034:tid 63129] [client 20.198.94.228:6094] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aYDUc-KXlgw75_wfbHoONAAAAIs"]
[Tue Feb 03 00:44:37.670674 2026] [:error] [pid 63153:tid 63166] [client 20.198.94.228:2504] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/990.php"] [unique_id "aYDUdXC9GXHnmLkdgdnaRgAAAMU"]
[Tue Feb 03 00:44:39.910297 2026] [:error] [pid 57021:tid 57028] [client 20.198.94.228:6085] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/990.php"] [unique_id "aYDUd_7AEpx7VcmYK3El4wAAAkM"]
[Tue Feb 03 00:44:52.596694 2026] [:error] [pid 63032:tid 63083] [client 20.198.94.228:10129] [client 20.198.94.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYDUhHyEQ1PkpebvdRgY-wAAABQ"]
[Tue Feb 03 00:45:48.761622 2026] [:error] [pid 57022:tid 57063] [client 20.198.94.228:2786] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aYDUvBnEgLMzfcurxflzLAAAAos"]
[Tue Feb 03 00:45:56.973326 2026] [:error] [pid 57081:tid 57131] [client 20.198.94.228:2400] [client 20.198.94.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.198.94.228, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYDUxGvouJ2Jkm6HfBhrTwAAAxA"]
[Tue Feb 03 00:45:57.189482 2026] [:error] [pid 63153:tid 63178] [client 20.198.94.228:10688] [client 20.198.94.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.198.94.228, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYDUxXC9GXHnmLkdgdna0QAAANE"]
[Tue Feb 03 00:46:00.455823 2026] [:error] [pid 57081:tid 57138] [client 20.198.94.228:2400] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aYDUyGvouJ2Jkm6HfBhrWwAAAxc"]
[Tue Feb 03 00:46:03.946352 2026] [:error] [pid 63153:tid 63185] [client 20.198.94.228:7866] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aYDUy3C9GXHnmLkdgdna5wAAANg"]
[Tue Feb 03 00:46:06.978775 2026] [:error] [pid 63034:tid 63140] [client 20.198.94.228:2454] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aYDUzuKXlgw75_wfbHoOjQAAAJY"]
[Tue Feb 03 00:46:07.797216 2026] [:error] [pid 63153:tid 63176] [client 20.198.94.228:9610] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aYDUz3C9GXHnmLkdgdna7AAAAM8"]
[Tue Feb 03 00:46:33.628005 2026] [:error] [pid 46008:tid 46013] [client 20.198.94.228:10683] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file56.php"] [unique_id "aYDU6SRa52iYn7SlSMnQwQAAAUM"]
[Tue Feb 03 00:46:38.471896 2026] [:error] [pid 63032:tid 63065] [client 20.198.94.228:2878] [client 20.198.94.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file56.php"] [unique_id "aYDU7nyEQ1PkpebvdRgZTgAAAAI"]
[Tue Feb 03 02:02:05.607948 2026] [:error] [pid 57081:tid 57136] [client 60.188.57.0:34319] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYDmnWvouJ2Jkm6HfBh3HQAAAxU"]
[Tue Feb 03 08:41:00.625905 2026] [:error] [pid 43028:tid 43049] [client 175.6.217.4:37950] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYFEHFnHWnJD4cJC5DvOYQAAANM"]
[Tue Feb 03 12:06:32.477293 2026] [:error] [pid 43028:tid 43040] [client 170.106.65.93:34700] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYF0SFnHWnJD4cJC5DsLzwAAAMo"]
[Tue Feb 03 16:51:45.823957 2026] [:error] [pid 42921:tid 42963] [client 43.130.72.40:35726] [client 43.130.72.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYG3IYblShffGl-01oc68gAAAEU"]
[Tue Feb 03 19:01:27.425221 2026] [:error] [pid 43028:tid 43033] [client 185.194.178.4:48305] [client 185.194.178.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.4, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYHVh1nHWnJD4cJC5Dt2pgAAAMM"]
[Tue Feb 03 19:33:11.545316 2026] [:error] [pid 5229:tid 5234] [client 103.65.236.149:61665] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aYHc90KmEgmJub93yUrfTAAAAYM"]
[Tue Feb 03 19:33:11.855429 2026] [:error] [pid 5148:tid 5170] [client 103.65.236.149:61725] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aYHc9783HCHLtUIbS7LNhQAAAVM"]
[Tue Feb 03 21:18:40.636914 2026] [:error] [pid 42921:tid 42974] [client 136.119.163.194:50788] [client 136.119.163.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.163.194, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYH1sIblShffGl-01od9YwAAAFA"]
[Tue Feb 03 21:18:42.166684 2026] [:error] [pid 42921:tid 42967] [client 136.119.163.194:50788] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYH1soblShffGl-01od9bAAAAEk"]
[Tue Feb 03 21:18:42.983839 2026] [:error] [pid 28720:tid 28736] [client 136.119.163.194:56364] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYH1smmRXm2bmr_sYibVCwAAAQ4"]
[Tue Feb 03 21:18:43.772517 2026] [:error] [pid 5229:tid 5234] [client 136.119.163.194:56495] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYH1s0KmEgmJub93yUoCQgAAAYM"]
[Tue Feb 03 21:18:44.577231 2026] [:error] [pid 42920:tid 42939] [client 136.119.163.194:62693] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYH1tCix3YKltG4EU0mIxgAAAAo"]
[Tue Feb 03 21:18:45.368118 2026] [:error] [pid 43028:tid 43031] [client 136.119.163.194:59172] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYH1tVnHWnJD4cJC5DuvBAAAAME"]
[Tue Feb 03 21:18:46.159021 2026] [:error] [pid 42920:tid 42945] [client 136.119.163.194:61019] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYH1tiix3YKltG4EU0mIyAAAABA"]
[Tue Feb 03 21:18:47.034053 2026] [:error] [pid 43028:tid 43042] [client 136.119.163.194:51942] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYH1t1nHWnJD4cJC5DuvBwAAAMw"]
[Tue Feb 03 21:18:47.833809 2026] [:error] [pid 5148:tid 5172] [client 136.119.163.194:60749] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYH1t783HCHLtUIbS7LsaAAAAVU"]
[Tue Feb 03 21:18:48.685019 2026] [:error] [pid 5229:tid 5252] [client 136.119.163.194:59808] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYH1uEKmEgmJub93yUoCRwAAAZU"]
[Tue Feb 03 21:18:49.483961 2026] [:error] [pid 43028:tid 43052] [client 136.119.163.194:56317] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYH1uVnHWnJD4cJC5DuvCwAAANY"]
[Tue Feb 03 21:18:50.278740 2026] [:error] [pid 5229:tid 5239] [client 136.119.163.194:60154] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYH1ukKmEgmJub93yUoCTAAAAYg"]
[Tue Feb 03 22:16:52.120658 2026] [:error] [pid 42922:tid 42987] [client 180.191.23.231:56584] [client 180.191.23.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.23.231, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYIDVGazX4WPS_dQRkiw-QAAAII"]
[Tue Feb 03 22:30:36.822469 2026] [:error] [pid 43028:tid 43054] [client 106.54.62.156:37838] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYIGjFnHWnJD4cJC5DvO0QAAANg"]
[Tue Feb 03 23:06:22.964460 2026] [:error] [pid 28720:tid 28724] [client 20.194.44.29:5890] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYIO7mmRXm2bmr_sYibzMQAAAQI"]
[Tue Feb 03 23:06:27.576416 2026] [:error] [pid 5229:tid 5232] [client 20.194.44.29:54994] [client 20.194.44.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYIO80KmEgmJub93yUoqLAAAAYE"]
[Tue Feb 03 23:58:24.276742 2026] [:error] [pid 5229:tid 5245] [client 34.168.244.58:58358] [client 34.168.244.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYIbIEKmEgmJub93yUo7EAAAAY4"]
[Wed Feb 04 03:26:27.171391 2026] [:error] [pid 16860:tid 16876] [client 193.36.225.29:55219] [client 193.36.225.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.29, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYJL4z18YldW5ODbQKT-NgAAAAU"]
[Wed Feb 04 05:19:42.728093 2026] [:error] [pid 47578:tid 47622] [client 182.44.67.97:38050] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYJmbp5oatM9u8-yDv_r5gAAAEc"]
[Wed Feb 04 08:32:21.253732 2026] [:error] [pid 55445:tid 55459] [client 45.92.1.79:54050] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYKTlVnd043q8WHuhu338gAAAUw"]
[Wed Feb 04 08:32:21.262619 2026] [:error] [pid 47676:tid 47699] [client 45.92.1.79:54051] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYKTlQrYSkTgZEfUDqGkOwAAANU"]
[Wed Feb 04 08:32:22.470915 2026] [:error] [pid 47676:tid 47685] [client 45.92.1.79:54556] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYKTlgrYSkTgZEfUDqGkZwAAAMc"]
[Wed Feb 04 08:32:22.484267 2026] [:error] [pid 47578:tid 47628] [client 45.92.1.79:54564] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYKTlp5oatM9u8-yDv8mKQAAAE0"]
[Wed Feb 04 08:32:23.672740 2026] [:error] [pid 55445:tid 55466] [client 45.92.1.79:55126] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYKTl1nd043q8WHuhu34LQAAAVM"]
[Wed Feb 04 08:32:23.680074 2026] [:error] [pid 47578:tid 47630] [client 45.92.1.79:55137] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYKTl55oatM9u8-yDv8mUwAAAE8"]
[Wed Feb 04 08:32:24.857875 2026] [:error] [pid 18816:tid 18837] [client 45.92.1.79:55639] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYKTmMszZcOol_Iv-0V88gAAARI"]
[Wed Feb 04 08:32:24.860730 2026] [:error] [pid 47579:tid 47659] [client 45.92.1.79:55638] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYKTmPuxWks846_Vi2z1xwAAAI8"]
[Wed Feb 04 08:32:26.041135 2026] [:error] [pid 18816:tid 18834] [client 45.92.1.79:55975] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYKTmsszZcOol_Iv-0V8_AAAAQ8"]
[Wed Feb 04 08:32:26.056490 2026] [:error] [pid 47579:tid 47661] [client 45.92.1.79:55973] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYKTmvuxWks846_Vi2z10wAAAJE"]
[Wed Feb 04 10:18:08.109333 2026] [:error] [pid 47405:tid 47446] [client 43.157.22.57:46768] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYKsYKTmhSrwHQTn6I7HJAAAAMY"]
[Wed Feb 04 14:50:48.833868 2026] [:error] [pid 47405:tid 47441] [client 43.153.71.132:37558] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYLsSKTmhSrwHQTn6I4XIAAAAME"]
[Wed Feb 04 17:27:36.887631 2026] [:error] [pid 55160:tid 55171] [client 43.135.182.43:56148] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYMRCOTAiAYDLSDaxdf-VgAAAYk"]
[Wed Feb 04 17:53:16.037177 2026] [:error] [pid 47500:tid 47506] [client 34.11.242.165:44324] [client 34.11.242.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYMXDLrUat0rhPdY3A3jdQAAAUI"]
[Wed Feb 04 18:25:18.224423 2026] [:error] [pid 55160:tid 55165] [client 120.71.59.24:40516] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYMejuTAiAYDLSDaxdcWhwAAAYM"]
[Wed Feb 04 20:34:59.009767 2026] [:error] [pid 47500:tid 47512] [client 165.154.254.143:55850] [client 165.154.254.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYM887rUat0rhPdY3A0EHQAAAUg"], referer: https://www.google.com
[Wed Feb 04 21:00:38.937041 2026] [autoindex:error] [pid 47404:tid 47426] [client 167.86.83.231:64247] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Feb 04 21:15:05.980488 2026] [ssl:error] [pid 55160:tid 55181] [client 107.172.180.205:45972] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourcause.com/
[Thu Feb 05 00:18:32.975778 2026] [:error] [pid 6490:tid 6510] [client 43.157.147.3:45460] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYNxWPjiJaSp2OpoDUlgowAAAFE"]
[Thu Feb 05 01:41:19.848238 2026] [ssl:error] [pid 63685:tid 63732] [client 143.110.174.190:55402] AH02032: Hostname it-auf-den-punkt.de provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup
[Thu Feb 05 02:56:05.682806 2026] [:error] [pid 63777:tid 63799] [client 217.77.10.74:56876] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/graphql"] [unique_id "aYOWRfQ-YVerd_zSVS-nEwAAABQ"]
[Thu Feb 05 02:56:06.480171 2026] [:error] [pid 3156:tid 3162] [client 217.77.10.74:57335] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/catalogsearch/advanced/result/"] [unique_id "aYOWRmFkBP84nEvT5IhY1gAAAYE"]
[Thu Feb 05 02:56:07.298165 2026] [:error] [pid 63686:tid 63751] [client 217.77.10.74:57438] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rest/V1/search"] [unique_id "aYOWRxyaRl9O5jmngTw05gAAAQg"]
[Thu Feb 05 02:56:08.110564 2026] [:error] [pid 6490:tid 6517] [client 217.77.10.74:57622] [client 217.77.10.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aYOWSPjiJaSp2OpoDUmaWwAAAFg"]
[Thu Feb 05 05:39:14.014345 2026] [:error] [pid 12187:tid 12218] [client 193.36.225.171:20377] [client 193.36.225.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYO8gonHiwpamEOSyaPtLgAAABY"]
[Thu Feb 05 05:40:53.054910 2026] [:error] [pid 10901:tid 10909] [client 43.135.148.92:39554] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYO85WuRF4wGmEFQVY0N4AAAAQM"]
[Thu Feb 05 08:31:32.794726 2026] [:error] [pid 50182:tid 50208] [client 43.131.45.213:34252] [client 43.131.45.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYPk5Jb6zPs3SP7NHoMhzwAAABY"]
[Thu Feb 05 10:30:53.310909 2026] [:error] [pid 33122:tid 33136] [client 45.92.1.79:62674] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQA3fW0IebAnFB9KDCTnAAAAEw"]
[Thu Feb 05 10:30:53.331819 2026] [:error] [pid 31833:tid 31857] [client 45.92.1.79:62677] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQA3RzypZt5yekRAkGjDAAAAZY"]
[Thu Feb 05 10:30:54.593953 2026] [:error] [pid 31739:tid 31742] [client 45.92.1.79:63431] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQA3gGrHl_5BvMstJIxBQAAAAE"]
[Thu Feb 05 10:30:54.606008 2026] [:error] [pid 31739:tid 31757] [client 45.92.1.79:63449] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQA3gGrHl_5BvMstJIxBgAAABA"]
[Thu Feb 05 10:30:56.051981 2026] [:error] [pid 31739:tid 31753] [client 45.92.1.79:64374] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQA4AGrHl_5BvMstJIxSwAAAAw"]
[Thu Feb 05 10:30:56.136021 2026] [:error] [pid 33122:tid 33144] [client 45.92.1.79:64365] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQA4PW0IebAnFB9KDCT8QAAAFQ"]
[Thu Feb 05 10:30:57.327680 2026] [:error] [pid 31775:tid 31819] [client 45.92.1.79:65118] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQA4RNlTj92HTKsJN1uLAAAAQ4"]
[Thu Feb 05 10:30:57.457773 2026] [:error] [pid 33122:tid 33141] [client 45.92.1.79:65185] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQA4fW0IebAnFB9KDCUAQAAAFE"]
[Thu Feb 05 10:30:58.669341 2026] [:error] [pid 31833:tid 31839] [client 45.92.1.79:49791] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQA4hzypZt5yekRAkGjcgAAAYQ"]
[Thu Feb 05 10:30:58.757121 2026] [:error] [pid 33396:tid 33424] [client 45.92.1.79:49845] [client 45.92.1.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQA4vTgp_Ev6LiSSgApywAAANU"]
[Thu Feb 05 13:09:09.490388 2026] [:error] [pid 33396:tid 33414] [client 43.130.67.6:53386] [client 43.130.67.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQl9fTgp_Ev6LiSSgBfaAAAAMs"]
[Thu Feb 05 14:05:23.498104 2026] [:error] [pid 31739:tid 31765] [client 37.27.119.185:55551] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQzIwGrHl_5BvMstJJt2wAAABg"], referer: https://www.yahoo.com
[Thu Feb 05 14:05:24.202307 2026] [:error] [pid 31774:tid 31787] [client 37.27.119.185:56237] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQzJKjDlLg1NOhSOXXW_AAAAIk"], referer: https://www.tripadvisor.com
[Thu Feb 05 14:05:25.851727 2026] [:error] [pid 31775:tid 31829] [client 37.27.119.185:56822] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQzJRNlTj92HTKsJN2sPgAAARg"], referer: https://www.hulu.com
[Thu Feb 05 14:05:26.530015 2026] [:error] [pid 31833:tid 31839] [client 37.27.119.185:57545] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYQzJhzypZt5yekRAkH6kQAAAYQ"], referer: https://www.reddit.com/r/IAmA
[Thu Feb 05 15:57:30.161981 2026] [:error] [pid 33122:tid 33130] [client 143.198.162.218:52073] [client 143.198.162.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.com.au"] [uri "/wp-json/wc/store/cart"] [unique_id "aYRNavW0IebAnFB9KDDx_AAAAEY"]
[Thu Feb 05 20:06:10.951033 2026] [:error] [pid 33122:tid 33124] [client 170.106.148.137:54050] [client 170.106.148.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYSHsvW0IebAnFB9KDAsugAAAEA"]
[Thu Feb 05 22:35:31.555790 2026] [:error] [pid 33396:tid 33411] [client 43.173.1.69:46636] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYSqs_Tgp_Ev6LiSSgDlIwAAAMg"]
[Fri Feb 06 01:22:40.897702 2026] [:error] [pid 11459:tid 11531] [client 34.172.87.158:52864] [client 34.172.87.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.172.87.158, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYTR4Jn3t_QGiBnEMgMNWQAAAFQ"]
[Fri Feb 06 01:22:43.423909 2026] [:error] [pid 11459:tid 11511] [client 34.172.87.158:52864] [client 34.172.87.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYTR45n3t_QGiBnEMgMNcAAAAEE"]
[Fri Feb 06 01:22:44.266613 2026] [:error] [pid 11121:tid 11132] [client 34.172.87.158:51059] [client 34.172.87.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYTR5BEsbmrTJ-7kOtboBAAAAAY"]
[Fri Feb 06 01:22:45.062143 2026] [:error] [pid 11122:tid 11157] [client 34.172.87.158:53947] [client 34.172.87.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYTR5T0RBzI4cnzjYXKwDgAAAIE"]
[Fri Feb 06 01:22:45.852673 2026] [:error] [pid 64116:tid 64136] [client 34.172.87.158:52929] [client 34.172.87.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYTR5bq-pUXYJUX2oz_-MwAAAM0"]
[Fri Feb 06 01:22:46.697782 2026] [:error] [pid 11121:tid 11133] [client 34.172.87.158:52100] [client 34.172.87.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYTR5hEsbmrTJ-7kOtboDAAAAAc"]
[Fri Feb 06 01:22:47.549784 2026] [:error] [pid 11122:tid 11160] [client 34.172.87.158:57902] [client 34.172.87.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYTR5z0RBzI4cnzjYXKwFQAAAIQ"]
[Fri Feb 06 01:22:48.393950 2026] [:error] [pid 11122:tid 11165] [client 34.172.87.158:54380] [client 34.172.87.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYTR6D0RBzI4cnzjYXKwFwAAAIg"]
[Fri Feb 06 03:13:04.474047 2026] [:error] [pid 64543:tid 64554] [client 192.144.148.122:60988] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYTrwKsW4UOzVv5iUbdWjgAAAMk"]
[Fri Feb 06 11:12:14.791079 2026] [:error] [pid 3477:tid 3500] [client 94.247.172.129:20425] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYVcDrL0Hdh40C7HYgWRFgAAANU"]
[Fri Feb 06 12:59:47.436278 2026] [:error] [pid 3477:tid 3484] [client 54.204.70.144:60792] [client 54.204.70.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYV1Q7L0Hdh40C7HYgXBAwAAAMU"]
[Fri Feb 06 13:10:42.515025 2026] [:error] [pid 3513:tid 3537] [client 56.125.5.34:41102] [client 56.125.5.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/_next/data"] [unique_id "aYV30jSw3-HAlzpqSxwyVgAAAVY"]
[Fri Feb 06 13:10:44.108689 2026] [:error] [pid 3380:tid 3404] [client 56.125.5.34:47890] [client 56.125.5.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYV31BFAlUvBGSBK2jephAAAABQ"]
[Fri Feb 06 14:31:41.088713 2026] [:error] [pid 3513:tid 3524] [client 43.130.228.73:33482] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYWKzTSw3-HAlzpqSxxY1wAAAUk"]
[Fri Feb 06 15:33:07.901951 2026] [:error] [pid 3382:tid 3463] [client 3.113.181.128:53376] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/animation.css"] [unique_id "aYWZM8IgU1HR0rhYrE_jzgAAAJc"]
[Fri Feb 06 15:33:08.686246 2026] [:error] [pid 3477:tid 3489] [client 3.113.181.128:53386] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/dist/css/skins/_all-skins.min.css"] [unique_id "aYWZNLL0Hdh40C7HYgULqwAAAMo"]
[Fri Feb 06 15:33:09.165518 2026] [:error] [pid 3380:tid 3395] [client 3.113.181.128:53390] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/style.css"] [unique_id "aYWZNRFAlUvBGSBK2jcF2gAAAAs"]
[Fri Feb 06 15:33:09.643661 2026] [:error] [pid 3477:tid 3498] [client 3.113.181.128:53398] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/animate.css"] [unique_id "aYWZNbL0Hdh40C7HYgULsgAAANM"]
[Fri Feb 06 15:33:10.185797 2026] [:error] [pid 3380:tid 3402] [client 3.113.181.128:53404] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/dist/css/AdminLTE.min.css"] [unique_id "aYWZNhFAlUvBGSBK2jcF3wAAABI"]
[Fri Feb 06 15:33:10.669738 2026] [:error] [pid 3382:tid 3456] [client 3.113.181.128:53408] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/bower_components/select2/dist/css/select2.min.css"] [unique_id "aYWZNsIgU1HR0rhYrE_j0wAAAJA"]
[Fri Feb 06 15:33:11.146436 2026] [:error] [pid 3382:tid 3451] [client 3.113.181.128:53420] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/bower_components/Ionicons/css/ionicons.min.css"] [unique_id "aYWZN8IgU1HR0rhYrE_j1wAAAIs"]
[Fri Feb 06 15:33:11.623523 2026] [:error] [pid 3513:tid 3517] [client 3.113.181.128:53422] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/bower_components/font-awesome/css/font-awesome.min.css"] [unique_id "aYWZNzSw3-HAlzpqSxx51wAAAUI"]
[Fri Feb 06 15:33:12.106599 2026] [:error] [pid 3381:tid 3435] [client 3.113.181.128:53430] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/responsive.css"] [unique_id "aYWZOC81zqRg96ZREggG8AAAAFY"]
[Fri Feb 06 15:33:12.779164 2026] [:error] [pid 3382:tid 3454] [client 3.113.181.128:36952] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYWZOMIgU1HR0rhYrE_j2wAAAI4"]
[Fri Feb 06 15:33:13.256494 2026] [:error] [pid 3382:tid 3445] [client 3.113.181.128:36968] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aYWZOcIgU1HR0rhYrE_j4AAAAIU"]
[Fri Feb 06 15:33:13.738505 2026] [:error] [pid 3382:tid 3464] [client 3.113.181.128:36976] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/credentials"] [unique_id "aYWZOcIgU1HR0rhYrE_j5AAAAJg"]
[Fri Feb 06 15:33:14.216973 2026] [:error] [pid 3382:tid 3449] [client 3.113.181.128:36992] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config.bak"] [unique_id "aYWZOsIgU1HR0rhYrE_j5QAAAIk"]
[Fri Feb 06 15:33:14.705447 2026] [:error] [pid 3380:tid 3405] [client 3.113.181.128:37002] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config.old"] [unique_id "aYWZOhFAlUvBGSBK2jcF5QAAABU"]
[Fri Feb 06 15:33:15.189049 2026] [:error] [pid 3380:tid 3393] [client 3.113.181.128:37018] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.git-credentials"] [unique_id "aYWZOxFAlUvBGSBK2jcF6QAAAAk"]
[Fri Feb 06 15:33:15.666152 2026] [:error] [pid 3381:tid 3415] [client 3.113.181.128:37024] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.gitconfig"] [unique_id "aYWZOy81zqRg96ZREggG-QAAAEI"]
[Fri Feb 06 15:33:16.146271 2026] [:error] [pid 3382:tid 3452] [client 3.113.181.128:37028] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.bitbucket/config"] [unique_id "aYWZPMIgU1HR0rhYrE_j6AAAAIw"]
[Fri Feb 06 15:33:16.623972 2026] [:error] [pid 3380:tid 3394] [client 3.113.181.128:37036] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.bitbucket/credentials"] [unique_id "aYWZPBFAlUvBGSBK2jcF-AAAAAo"]
[Fri Feb 06 15:33:17.112783 2026] [:error] [pid 3381:tid 3436] [client 3.113.181.128:37044] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bitbucket/config"] [unique_id "aYWZPS81zqRg96ZREggHBAAAAFc"]
[Fri Feb 06 15:33:17.595832 2026] [:error] [pid 3382:tid 3464] [client 3.113.181.128:37048] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bitbucket/credentials"] [unique_id "aYWZPcIgU1HR0rhYrE_j7AAAAJg"]
[Fri Feb 06 15:33:18.076851 2026] [:error] [pid 3382:tid 3453] [client 3.113.181.128:37052] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bitbucket-pipelines.yml"] [unique_id "aYWZPsIgU1HR0rhYrE_j7gAAAI0"]
[Fri Feb 06 15:33:18.556636 2026] [:error] [pid 3380:tid 3398] [client 3.113.181.128:37068] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.github/dependabot.yml"] [unique_id "aYWZPhFAlUvBGSBK2jcGAQAAAA4"]
[Fri Feb 06 15:33:19.051662 2026] [:error] [pid 3382:tid 3441] [client 3.113.181.128:37082] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.github/settings.yml"] [unique_id "aYWZP8IgU1HR0rhYrE_j8QAAAIE"]
[Fri Feb 06 15:33:19.529605 2026] [:error] [pid 3477:tid 3492] [client 3.113.181.128:37088] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.github/workflows/main.yml"] [unique_id "aYWZP7L0Hdh40C7HYgUL2AAAAM0"]
[Fri Feb 06 15:33:20.006320 2026] [:error] [pid 3380:tid 3388] [client 3.113.181.128:37098] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aYWZQBFAlUvBGSBK2jcGCAAAAAQ"]
[Fri Feb 06 15:33:20.487475 2026] [:error] [pid 3477:tid 3498] [client 3.113.181.128:37112] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aYWZQLL0Hdh40C7HYgUL2gAAANM"]
[Fri Feb 06 15:33:20.966146 2026] [:error] [pid 3513:tid 3537] [client 3.113.181.128:37124] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aYWZQDSw3-HAlzpqSxx6IAAAAVY"]
[Fri Feb 06 15:33:21.447178 2026] [:error] [pid 3513:tid 3535] [client 3.113.181.128:37126] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aYWZQTSw3-HAlzpqSxx6JAAAAVQ"]
[Fri Feb 06 15:33:21.926254 2026] [:error] [pid 3477:tid 3482] [client 3.113.181.128:37140] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aYWZQbL0Hdh40C7HYgUL3wAAAMM"]
[Fri Feb 06 15:33:22.404490 2026] [:error] [pid 3382:tid 3464] [client 3.113.181.128:33086] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aYWZQsIgU1HR0rhYrE_j9gAAAJg"]
[Fri Feb 06 15:33:22.884519 2026] [:error] [pid 3513:tid 3533] [client 3.113.181.128:33098] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aYWZQjSw3-HAlzpqSxx6JwAAAVI"]
[Fri Feb 06 15:33:23.367394 2026] [:error] [pid 3513:tid 3521] [client 3.113.181.128:33102] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aYWZQzSw3-HAlzpqSxx6KwAAAUY"]
[Fri Feb 06 15:33:23.845971 2026] [:error] [pid 3477:tid 3487] [client 3.113.181.128:33108] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "aYWZQ7L0Hdh40C7HYgUL4QAAAMg"]
[Fri Feb 06 15:33:24.325355 2026] [:error] [pid 3513:tid 3518] [client 3.113.181.128:33110] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aYWZRDSw3-HAlzpqSxx6LgAAAUM"]
[Fri Feb 06 15:33:24.803616 2026] [:error] [pid 3380:tid 3387] [client 3.113.181.128:33112] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.php"] [unique_id "aYWZRBFAlUvBGSBK2jcGDgAAAAM"]
[Fri Feb 06 15:33:25.282249 2026] [:error] [pid 3477:tid 3479] [client 3.113.181.128:33118] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aYWZRbL0Hdh40C7HYgUL5QAAAMA"]
[Fri Feb 06 15:33:25.766107 2026] [:error] [pid 3381:tid 3429] [client 3.113.181.128:33120] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "aYWZRS81zqRg96ZREggHHgAAAFA"]
[Fri Feb 06 15:33:26.247481 2026] [:error] [pid 3513:tid 3530] [client 3.113.181.128:33130] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "aYWZRjSw3-HAlzpqSxx6NwAAAU8"]
[Fri Feb 06 15:33:26.725419 2026] [:error] [pid 3513:tid 3536] [client 3.113.181.128:33132] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "aYWZRjSw3-HAlzpqSxx6OgAAAVU"]
[Fri Feb 06 15:33:27.204718 2026] [:error] [pid 3477:tid 3479] [client 3.113.181.128:33142] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.stage"] [unique_id "aYWZR7L0Hdh40C7HYgUL6gAAAMA"]
[Fri Feb 06 15:33:27.686593 2026] [:error] [pid 3380:tid 3384] [client 3.113.181.128:33144] [client 3.113.181.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.live"] [unique_id "aYWZRxFAlUvBGSBK2jcGFAAAAAA"]
[Fri Feb 06 15:33:28.164356 2026] [:error] [pid 3477:tid 3482] [client 3.113.181.128:33158] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config/bitbucket.json"] [unique_id "aYWZSLL0Hdh40C7HYgUL8AAAAMM"]
[Fri Feb 06 15:33:28.650949 2026] [:error] [pid 3380:tid 3408] [client 3.113.181.128:33164] [client 3.113.181.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bitbucket_keys.json"] [unique_id "aYWZSBFAlUvBGSBK2jcGGQAAABg"]
[Fri Feb 06 16:04:30.880406 2026] [:error] [pid 3381:tid 3414] [client 54.244.70.21:47220] [client 54.244.70.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/animation.css"] [unique_id "aYWgji81zqRg96ZREggUZQAAAEE"]
[Fri Feb 06 16:04:31.601864 2026] [:error] [pid 3380:tid 3405] [client 54.244.70.21:47228] [client 54.244.70.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/bower_components/font-awesome/css/font-awesome.min.css"] [unique_id "aYWgjxFAlUvBGSBK2jcaRwAAABU"]
[Fri Feb 06 16:04:32.325055 2026] [:error] [pid 3380:tid 3394] [client 54.244.70.21:47232] [client 54.244.70.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/dist/css/skins/_all-skins.min.css"] [unique_id "aYWgkBFAlUvBGSBK2jcaSwAAAAo"]
[Fri Feb 06 16:04:33.047969 2026] [:error] [pid 3381:tid 3434] [client 54.244.70.21:47244] [client 54.244.70.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/style.css"] [unique_id "aYWgkS81zqRg96ZREggUaQAAAFU"]
[Fri Feb 06 16:04:33.823368 2026] [:error] [pid 3477:tid 3485] [client 54.244.70.21:47254] [client 54.244.70.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/dist/css/AdminLTE.min.css"] [unique_id "aYWgkbL0Hdh40C7HYgUawgAAAMY"]
[Fri Feb 06 21:45:17.343656 2026] [:error] [pid 37019:tid 37032] [client 101.33.55.204:36606] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYXwbQkAjqd3bcgYBrtsjAAAAgs"]
[Fri Feb 06 21:54:39.424798 2026] [:error] [pid 15821:tid 15839] [client 146.70.250.132:55872] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/graphql"] [unique_id "aYXyn3ARQa67J4c772kVsgAAAQ4"]
[Fri Feb 06 21:54:40.298223 2026] [:error] [pid 36928:tid 36938] [client 146.70.250.132:56956] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/catalogsearch/advanced/result/"] [unique_id "aYXyoJs7fyU8D36r-Op3MwAAAcY"]
[Fri Feb 06 21:54:41.178755 2026] [:error] [pid 3513:tid 3533] [client 146.70.250.132:57188] [client 146.70.250.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rest/V1/search"] [unique_id "aYXyoTSw3-HAlzpqSxzZyQAAAVI"]
[Fri Feb 06 22:17:54.137414 2026] [:error] [pid 37019:tid 37031] [client 157.245.108.89:49813] [client 157.245.108.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.108.89, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYX4EgkAjqd3bcgYBrtwgAAAAgo"]
[Fri Feb 06 22:17:55.118751 2026] [:error] [pid 3477:tid 3479] [client 157.245.108.89:49867] [client 157.245.108.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.245.108.89, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYX4E7L0Hdh40C7HYgWBUgAAAMA"]
[Fri Feb 06 23:46:10.380094 2026] [:error] [pid 3381:tid 3421] [client 64.227.127.111:53135] [client 64.227.127.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.127.111, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYYMwi81zqRg96ZREgiLXwAAAEg"]
[Fri Feb 06 23:46:11.481338 2026] [:error] [pid 3382:tid 3446] [client 64.227.127.111:53185] [client 64.227.127.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.127.111, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYYMw8IgU1HR0rhYrE906gAAAIY"]
[Sat Feb 07 02:53:18.347132 2026] [:error] [pid 50881:tid 50959] [client 134.149.17.140:20546] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aYY4nl8TBLsqJpkSDKX0IQAAAZQ"]
[Sat Feb 07 02:53:19.416078 2026] [:error] [pid 35307:tid 35376] [client 134.149.17.140:15186] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aYY4n-sb9VwRNUckGgviLAAAAAo"]
[Sat Feb 07 02:53:20.186978 2026] [:error] [pid 35309:tid 35473] [client 134.149.17.140:12152] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aYY4oIjeM9w-4dKewm_l9AAAANI"]
[Sat Feb 07 02:53:21.272384 2026] [:error] [pid 35537:tid 35554] [client 134.149.17.140:16017] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/444.php"] [unique_id "aYY4oc1jKVeByUo420D3lQAAAQ8"]
[Sat Feb 07 02:53:22.274743 2026] [:error] [pid 50881:tid 50960] [client 134.149.17.140:20113] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aYY4ol8TBLsqJpkSDKX0KQAAAZU"]
[Sat Feb 07 02:53:24.244904 2026] [:error] [pid 55616:tid 55622] [client 134.149.17.140:21982] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aYY4pOzxeKHfFD-B2b34egAAAEM"]
[Sat Feb 07 02:53:26.767348 2026] [:error] [pid 35537:tid 35540] [client 134.149.17.140:8189] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aYY4ps1jKVeByUo420D3mwAAAQE"]
[Sat Feb 07 02:53:34.805927 2026] [:error] [pid 35537:tid 35555] [client 134.149.17.140:17798] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aYY4rs1jKVeByUo420D3oQAAARA"]
[Sat Feb 07 02:54:08.208232 2026] [:error] [pid 50881:tid 50963] [client 134.149.17.140:17076] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "aYY40F8TBLsqJpkSDKX0qgAAAZg"]
[Sat Feb 07 02:55:28.203672 2026] [:error] [pid 35537:tid 35550] [client 134.149.17.140:15697] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "aYY5IM1jKVeByUo420D4wgAAAQs"]
[Sat Feb 07 02:55:43.664979 2026] [:error] [pid 50881:tid 50948] [client 134.149.17.140:11782] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "aYY5L18TBLsqJpkSDKX1WwAAAYk"]
[Sat Feb 07 02:56:01.586063 2026] [:error] [pid 35307:tid 35388] [client 134.149.17.140:18930] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "aYY5Qesb9VwRNUckGgvjMAAAABY"]
[Sat Feb 07 02:57:20.917207 2026] [:error] [pid 55701:tid 55778] [client 134.149.17.140:9877] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aYY5kMDNf5Dni-14pBDrvAAAAVY"]
[Sat Feb 07 02:57:21.858434 2026] [:error] [pid 50881:tid 50952] [client 134.149.17.140:7974] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aYY5kV8TBLsqJpkSDKX2JAAAAY0"]
[Sat Feb 07 02:57:22.633847 2026] [:error] [pid 55701:tid 55760] [client 134.149.17.140:13422] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aYY5ksDNf5Dni-14pBDrvwAAAUU"]
[Sat Feb 07 02:57:23.580333 2026] [:error] [pid 50881:tid 50953] [client 134.149.17.140:13030] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aYY5k18TBLsqJpkSDKX2KwAAAY4"]
[Sat Feb 07 02:57:25.362050 2026] [:error] [pid 35309:tid 35477] [client 134.149.17.140:7797] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aYY5lYjeM9w-4dKewm_nMQAAANY"]
[Sat Feb 07 02:57:27.025235 2026] [:error] [pid 35309:tid 35469] [client 134.149.17.140:16814] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aYY5l4jeM9w-4dKewm_nNQAAAM4"]
[Sat Feb 07 02:57:27.828539 2026] [:error] [pid 35307:tid 35386] [client 134.149.17.140:13681] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aYY5l-sb9VwRNUckGgvjsQAAABQ"]
[Sat Feb 07 02:57:29.396508 2026] [:error] [pid 35308:tid 35442] [client 134.149.17.140:19105] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/usep.php"] [unique_id "aYY5mQUnbRgf4hlvwiyzLwAAAI8"]
[Sat Feb 07 02:57:30.340869 2026] [:error] [pid 55701:tid 55774] [client 134.149.17.140:17328] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aYY5msDNf5Dni-14pBDryQAAAVI"]
[Sat Feb 07 02:57:31.017079 2026] [:error] [pid 55701:tid 55773] [client 134.149.17.140:19082] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aYY5m8DNf5Dni-14pBDrywAAAVE"]
[Sat Feb 07 02:57:32.883014 2026] [:error] [pid 55701:tid 55766] [client 134.149.17.140:24569] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aYY5nMDNf5Dni-14pBDrzQAAAUo"]
[Sat Feb 07 02:57:34.941056 2026] [:error] [pid 50881:tid 50963] [client 134.149.17.140:22695] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wa.php"] [unique_id "aYY5nl8TBLsqJpkSDKX2PwAAAZg"]
[Sat Feb 07 02:57:37.136287 2026] [:error] [pid 35307:tid 35374] [client 134.149.17.140:22672] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wb.php"] [unique_id "aYY5oesb9VwRNUckGgvjvgAAAAk"]
[Sat Feb 07 02:57:38.114419 2026] [:error] [pid 55616:tid 55619] [client 134.149.17.140:7756] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wb.php"] [unique_id "aYY5ouzxeKHfFD-B2b35mwAAAEA"]
[Sat Feb 07 02:57:39.667080 2026] [:error] [pid 35307:tid 35379] [client 134.149.17.140:24549] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wb.php"] [unique_id "aYY5o-sb9VwRNUckGgvjxAAAAA0"]
[Sat Feb 07 02:57:40.751007 2026] [:error] [pid 35307:tid 35370] [client 134.149.17.140:15756] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wb.php"] [unique_id "aYY5pOsb9VwRNUckGgvjxgAAAAU"]
[Sat Feb 07 02:57:42.731565 2026] [:error] [pid 50881:tid 50945] [client 134.149.17.140:22708] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aYY5pl8TBLsqJpkSDKX2VAAAAYY"]
[Sat Feb 07 02:57:44.428728 2026] [:error] [pid 50881:tid 50949] [client 134.149.17.140:18614] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aYY5qF8TBLsqJpkSDKX2VwAAAYo"]
[Sat Feb 07 02:57:45.942082 2026] [:error] [pid 55616:tid 55623] [client 134.149.17.140:11287] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aYY5qezxeKHfFD-B2b35pQAAAEQ"]
[Sat Feb 07 02:57:47.184327 2026] [:error] [pid 55616:tid 55639] [client 134.149.17.140:7968] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "aYY5q-zxeKHfFD-B2b35qAAAAFQ"]
[Sat Feb 07 02:57:48.908871 2026] [:error] [pid 35537:tid 35555] [client 134.149.17.140:24519] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aYY5rM1jKVeByUo420D5WgAAARA"]
[Sat Feb 07 02:57:50.037316 2026] [:error] [pid 55616:tid 55634] [client 134.149.17.140:7967] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aYY5ruzxeKHfFD-B2b35rwAAAE8"]
[Sat Feb 07 02:57:51.409749 2026] [:error] [pid 55701:tid 55772] [client 134.149.17.140:19377] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aYY5r8DNf5Dni-14pBDr4QAAAVA"]
[Sat Feb 07 02:57:53.116143 2026] [:error] [pid 35308:tid 35446] [client 134.149.17.140:19341] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aYY5sQUnbRgf4hlvwiyzTgAAAJM"]
[Sat Feb 07 02:57:54.248178 2026] [:error] [pid 35309:tid 35473] [client 134.149.17.140:17580] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aYY5sojeM9w-4dKewm_nXwAAANI"]
[Sat Feb 07 02:57:55.259723 2026] [:error] [pid 35309:tid 35475] [client 134.149.17.140:11765] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aYY5s4jeM9w-4dKewm_nYwAAANQ"]
[Sat Feb 07 02:57:56.177349 2026] [:error] [pid 55701:tid 55770] [client 134.149.17.140:22714] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aYY5tMDNf5Dni-14pBDr5QAAAU4"]
[Sat Feb 07 02:57:57.028444 2026] [:error] [pid 35307:tid 35369] [client 134.149.17.140:16594] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aYY5tesb9VwRNUckGgvj2QAAAAQ"]
[Sat Feb 07 02:57:58.063224 2026] [:error] [pid 35308:tid 35431] [client 134.149.17.140:15755] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aYY5tgUnbRgf4hlvwiyzUgAAAIQ"]
[Sat Feb 07 02:57:59.010260 2026] [:error] [pid 35309:tid 35467] [client 134.149.17.140:12545] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aYY5t4jeM9w-4dKewm_nZQAAAMw"]
[Sat Feb 07 02:57:59.740215 2026] [:error] [pid 35537:tid 35550] [client 134.149.17.140:19353] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aYY5t81jKVeByUo420D5YAAAAQs"]
[Sat Feb 07 02:58:00.573967 2026] [:error] [pid 35309:tid 35466] [client 134.149.17.140:11274] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aYY5uIjeM9w-4dKewm_nagAAAMs"]
[Sat Feb 07 02:58:01.549421 2026] [:error] [pid 50881:tid 50957] [client 134.149.17.140:18101] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aYY5uV8TBLsqJpkSDKX2cgAAAZI"]
[Sat Feb 07 02:58:02.533497 2026] [:error] [pid 50881:tid 50953] [client 134.149.17.140:18139] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aYY5ul8TBLsqJpkSDKX2dgAAAY4"]
[Sat Feb 07 02:58:03.294429 2026] [:error] [pid 55701:tid 55780] [client 134.149.17.140:31478] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aYY5u8DNf5Dni-14pBDr8AAAAVg"]
[Sat Feb 07 02:58:04.072541 2026] [:error] [pid 35537:tid 35542] [client 134.149.17.140:22705] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aYY5vM1jKVeByUo420D5ZQAAAQM"]
[Sat Feb 07 02:58:04.884539 2026] [:error] [pid 35537:tid 35563] [client 134.149.17.140:15847] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aYY5vM1jKVeByUo420D5ZgAAARg"]
[Sat Feb 07 02:58:05.707158 2026] [:error] [pid 35309:tid 35455] [client 134.149.17.140:17579] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aYY5vYjeM9w-4dKewm_nbgAAAMA"]
[Sat Feb 07 02:58:07.066288 2026] [:error] [pid 35537:tid 35562] [client 134.149.17.140:18132] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aYY5v81jKVeByUo420D5bAAAARc"]
[Sat Feb 07 02:58:08.013427 2026] [:error] [pid 35309:tid 35464] [client 134.149.17.140:22679] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aYY5wIjeM9w-4dKewm_ncgAAAMk"]
[Sat Feb 07 02:58:08.991095 2026] [:error] [pid 35307:tid 35373] [client 134.149.17.140:19363] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aYY5wOsb9VwRNUckGgvj9gAAAAg"]
[Sat Feb 07 02:58:09.892938 2026] [:error] [pid 35309:tid 35466] [client 134.149.17.140:18087] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aYY5wYjeM9w-4dKewm_neAAAAMs"]
[Sat Feb 07 02:58:10.773481 2026] [:error] [pid 35309:tid 35474] [client 134.149.17.140:19361] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aYY5wojeM9w-4dKewm_newAAANM"]
[Sat Feb 07 02:58:11.780922 2026] [:error] [pid 35537:tid 35544] [client 134.149.17.140:15858] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aYY5w81jKVeByUo420D5bwAAAQU"]
[Sat Feb 07 02:58:13.066959 2026] [:error] [pid 35309:tid 35459] [client 134.149.17.140:18074] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aYY5xYjeM9w-4dKewm_nfwAAAMQ"]
[Sat Feb 07 02:58:14.626385 2026] [:error] [pid 55616:tid 55642] [client 134.149.17.140:16834] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aYY5xuzxeKHfFD-B2b35xgAAAFc"]
[Sat Feb 07 02:58:15.494705 2026] [:error] [pid 35537:tid 35554] [client 134.149.17.140:23507] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aYY5x81jKVeByUo420D5dAAAAQ8"]
[Sat Feb 07 02:58:16.319032 2026] [:error] [pid 55616:tid 55637] [client 134.149.17.140:17539] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aYY5yOzxeKHfFD-B2b35zAAAAFI"]
[Sat Feb 07 02:58:17.233700 2026] [:error] [pid 35308:tid 35431] [client 134.149.17.140:16880] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYY5yQUnbRgf4hlvwiyzYQAAAIQ"]
[Sat Feb 07 02:58:18.634676 2026] [:error] [pid 35537:tid 35561] [client 134.149.17.140:17592] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYY5ys1jKVeByUo420D5eQAAARY"]
[Sat Feb 07 02:58:19.770079 2026] [:error] [pid 55701:tid 55780] [client 134.149.17.140:18117] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYY5y8DNf5Dni-14pBDr-gAAAVg"]
[Sat Feb 07 02:58:29.512456 2026] [:error] [pid 35309:tid 35468] [client 134.149.17.140:16555] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aYY51YjeM9w-4dKewm_nmgAAAM0"]
[Sat Feb 07 02:58:31.591168 2026] [:error] [pid 55616:tid 55640] [client 134.149.17.140:11122] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aYY51-zxeKHfFD-B2b352AAAAFU"]
[Sat Feb 07 02:58:32.626498 2026] [:error] [pid 50881:tid 50953] [client 134.149.17.140:21000] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aYY52F8TBLsqJpkSDKX2vwAAAY4"]
[Sat Feb 07 02:58:34.322316 2026] [:error] [pid 50881:tid 50957] [client 134.149.17.140:11638] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aYY52l8TBLsqJpkSDKX2xAAAAZI"]
[Sat Feb 07 02:58:35.290862 2026] [:error] [pid 35309:tid 35477] [client 134.149.17.140:20464] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aYY524jeM9w-4dKewm_noAAAANY"]
[Sat Feb 07 02:58:36.434603 2026] [:error] [pid 55701:tid 55757] [client 134.149.17.140:19164] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aYY53MDNf5Dni-14pBDsCwAAAUI"]
[Sat Feb 07 02:58:37.140928 2026] [:error] [pid 50881:tid 50939] [client 134.149.17.140:17812] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aYY53V8TBLsqJpkSDKX2ywAAAYA"]
[Sat Feb 07 02:58:38.077108 2026] [:error] [pid 55616:tid 55633] [client 134.149.17.140:11646] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cccc.php"] [unique_id "aYY53uzxeKHfFD-B2b353QAAAE4"]
[Sat Feb 07 02:58:39.910523 2026] [:error] [pid 55701:tid 55760] [client 134.149.17.140:19182] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aYY538DNf5Dni-14pBDsFQAAAUU"]
[Sat Feb 07 02:58:41.011358 2026] [:error] [pid 50881:tid 50944] [client 134.149.17.140:14501] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aYY54V8TBLsqJpkSDKX23gAAAYU"]
[Sat Feb 07 02:58:41.900734 2026] [:error] [pid 50881:tid 50953] [client 134.149.17.140:19176] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aYY54V8TBLsqJpkSDKX25AAAAY4"]
[Sat Feb 07 02:58:42.559287 2026] [:error] [pid 35307:tid 35387] [client 134.149.17.140:20441] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "aYY54usb9VwRNUckGgvkLAAAABU"]
[Sat Feb 07 02:58:43.273843 2026] [:error] [pid 35537:tid 35541] [client 134.149.17.140:16518] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aYY5481jKVeByUo420D5pAAAAQI"]
[Sat Feb 07 02:58:44.371818 2026] [:error] [pid 35309:tid 35473] [client 134.149.17.140:8136] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aYY55IjeM9w-4dKewm_nuwAAANI"]
[Sat Feb 07 02:58:45.535163 2026] [:error] [pid 55701:tid 55757] [client 134.149.17.140:23786] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aYY55cDNf5Dni-14pBDsGAAAAUI"]
[Sat Feb 07 02:58:47.096989 2026] [:error] [pid 35537:tid 35560] [client 134.149.17.140:11605] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aYY5581jKVeByUo420D5rAAAARU"]
[Sat Feb 07 02:58:48.487645 2026] [:error] [pid 55616:tid 55625] [client 134.149.17.140:8169] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aYY56OzxeKHfFD-B2b359AAAAEY"]
[Sat Feb 07 02:58:49.654123 2026] [:error] [pid 55616:tid 55642] [client 134.149.17.140:22240] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aYY56ezxeKHfFD-B2b359wAAAFc"]
[Sat Feb 07 02:58:50.354669 2026] [:error] [pid 55616:tid 55624] [client 134.149.17.140:13139] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aYY56uzxeKHfFD-B2b35-QAAAEU"]
[Sat Feb 07 02:58:51.352531 2026] [:error] [pid 55701:tid 55772] [client 134.149.17.140:21728] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "aYY568DNf5Dni-14pBDsIAAAAVA"]
[Sat Feb 07 02:58:52.465540 2026] [:error] [pid 35537:tid 35557] [client 134.149.17.140:13487] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aYY57M1jKVeByUo420D5rwAAARI"]
[Sat Feb 07 02:58:53.540814 2026] [:error] [pid 50881:tid 50948] [client 134.149.17.140:8157] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aYY57V8TBLsqJpkSDKX29wAAAYk"]
[Sat Feb 07 02:58:54.773086 2026] [:error] [pid 35309:tid 35469] [client 134.149.17.140:8156] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aYY57ojeM9w-4dKewm_nxAAAAM4"]
[Sat Feb 07 02:58:55.594331 2026] [:error] [pid 55701:tid 55756] [client 134.149.17.140:22930] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aYY578DNf5Dni-14pBDsJAAAAUE"]
[Sat Feb 07 02:58:56.614846 2026] [:error] [pid 35308:tid 35433] [client 134.149.17.140:18849] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aYY58AUnbRgf4hlvwiyzgwAAAIY"]
[Sat Feb 07 02:58:57.384301 2026] [:error] [pid 55701:tid 55776] [client 134.149.17.140:22940] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aYY58cDNf5Dni-14pBDsJQAAAVQ"]
[Sat Feb 07 02:58:58.548895 2026] [:error] [pid 35537:tid 35561] [client 134.149.17.140:20589] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aYY58s1jKVeByUo420D5tAAAARY"]
[Sat Feb 07 02:58:59.853865 2026] [:error] [pid 55701:tid 55778] [client 134.149.17.140:11691] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffile.php"] [unique_id "aYY588DNf5Dni-14pBDsKAAAAVY"]
[Sat Feb 07 02:59:04.172830 2026] [:error] [pid 55616:tid 55622] [client 134.149.17.140:13121] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aYY5-OzxeKHfFD-B2b36EAAAAEM"]
[Sat Feb 07 02:59:05.818950 2026] [:error] [pid 35308:tid 35444] [client 134.149.17.140:14896] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aYY5-QUnbRgf4hlvwiyziQAAAJE"]
[Sat Feb 07 02:59:13.598628 2026] [:error] [pid 50881:tid 50947] [client 134.149.17.140:21189] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aYY6AV8TBLsqJpkSDKX3IQAAAYg"]
[Sat Feb 07 02:59:14.654332 2026] [:error] [pid 35307:tid 35368] [client 134.149.17.140:20619] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aYY6Ausb9VwRNUckGgvkRgAAAAM"]
[Sat Feb 07 02:59:15.389274 2026] [:error] [pid 35308:tid 35427] [client 134.149.17.140:24795] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aYY6AwUnbRgf4hlvwiyzlQAAAIA"]
[Sat Feb 07 02:59:16.009193 2026] [:error] [pid 35537:tid 35563] [client 134.149.17.140:20635] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aYY6BM1jKVeByUo420D5zAAAARg"]
[Sat Feb 07 02:59:16.786826 2026] [:error] [pid 35307:tid 35386] [client 134.149.17.140:12539] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aYY6BOsb9VwRNUckGgvkSwAAABQ"]
[Sat Feb 07 02:59:17.923321 2026] [:error] [pid 55701:tid 55760] [client 134.149.17.140:20880] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aYY6BcDNf5Dni-14pBDsRAAAAUU"]
[Sat Feb 07 02:59:19.693637 2026] [:error] [pid 35537:tid 35546] [client 134.149.17.140:24791] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aYY6B81jKVeByUo420D51QAAAQc"]
[Sat Feb 07 02:59:21.340909 2026] [:error] [pid 50881:tid 50944] [client 134.149.17.140:22731] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aYY6CV8TBLsqJpkSDKX3MAAAAYU"]
[Sat Feb 07 02:59:22.831069 2026] [:error] [pid 35307:tid 35379] [client 134.149.17.140:12107] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aYY6Cusb9VwRNUckGgvkUgAAAA0"]
[Sat Feb 07 02:59:24.765357 2026] [:error] [pid 50881:tid 50959] [client 134.149.17.140:18087] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aYY6DF8TBLsqJpkSDKX3PgAAAZQ"]
[Sat Feb 07 02:59:26.234620 2026] [:error] [pid 35309:tid 35461] [client 134.149.17.140:17855] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aYY6DojeM9w-4dKewm_n8AAAAMY"]
[Sat Feb 07 02:59:27.728226 2026] [:error] [pid 35307:tid 35366] [client 134.149.17.140:16237] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aYY6D-sb9VwRNUckGgvkWgAAAAE"]
[Sat Feb 07 02:59:37.732592 2026] [:error] [pid 55616:tid 55640] [client 134.149.17.140:14382] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haikh.php"] [unique_id "aYY6GezxeKHfFD-B2b36QwAAAFU"]
[Sat Feb 07 02:59:38.472748 2026] [:error] [pid 35307:tid 35366] [client 134.149.17.140:21209] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haikh.php"] [unique_id "aYY6Gusb9VwRNUckGgvkZgAAAAE"]
[Sat Feb 07 02:59:39.418961 2026] [:error] [pid 55701:tid 55772] [client 134.149.17.140:16206] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haikh.php"] [unique_id "aYY6G8DNf5Dni-14pBDsZAAAAVA"]
[Sat Feb 07 02:59:40.569847 2026] [:error] [pid 50881:tid 50946] [client 134.149.17.140:24777] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haikh.php"] [unique_id "aYY6HF8TBLsqJpkSDKX3bQAAAYc"]
[Sat Feb 07 02:59:41.870026 2026] [:error] [pid 50881:tid 50944] [client 134.149.17.140:7911] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/135.php"] [unique_id "aYY6HV8TBLsqJpkSDKX3dgAAAYU"]
[Sat Feb 07 02:59:43.420802 2026] [:error] [pid 35537:tid 35541] [client 134.149.17.140:17884] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/135.php"] [unique_id "aYY6H81jKVeByUo420D6HgAAAQI"]
[Sat Feb 07 02:59:45.962243 2026] [:error] [pid 35309:tid 35472] [client 134.149.17.140:11919] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/135.php"] [unique_id "aYY6IYjeM9w-4dKewm_oIQAAANE"]
[Sat Feb 07 02:59:47.512182 2026] [:error] [pid 35307:tid 35377] [client 134.149.17.140:21238] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/135.php"] [unique_id "aYY6I-sb9VwRNUckGgvkbQAAAAs"]
[Sat Feb 07 02:59:49.494778 2026] [:error] [pid 55701:tid 55755] [client 134.149.17.140:12105] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/enclas.php"] [unique_id "aYY6JcDNf5Dni-14pBDsggAAAUA"]
[Sat Feb 07 02:59:51.590450 2026] [:error] [pid 50881:tid 50956] [client 134.149.17.140:17047] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/enclas.php"] [unique_id "aYY6J18TBLsqJpkSDKX3mwAAAZE"]
[Sat Feb 07 02:59:53.250216 2026] [:error] [pid 55701:tid 55769] [client 134.149.17.140:17064] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/enclas.php"] [unique_id "aYY6KcDNf5Dni-14pBDsjQAAAU0"]
[Sat Feb 07 02:59:54.312235 2026] [:error] [pid 35309:tid 35459] [client 134.149.17.140:21899] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/enclas.php"] [unique_id "aYY6KojeM9w-4dKewm_oOwAAAMQ"]
[Sat Feb 07 02:59:55.625514 2026] [:error] [pid 50881:tid 50955] [client 134.149.17.140:17053] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aYY6K18TBLsqJpkSDKX3twAAAZA"]
[Sat Feb 07 02:59:56.962280 2026] [:error] [pid 50881:tid 50941] [client 134.149.17.140:17887] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aYY6LF8TBLsqJpkSDKX3wQAAAYI"]
[Sat Feb 07 02:59:57.700648 2026] [:error] [pid 55616:tid 55619] [client 134.149.17.140:7408] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aYY6LezxeKHfFD-B2b36WwAAAEA"]
[Sat Feb 07 02:59:58.370981 2026] [:error] [pid 50881:tid 50941] [client 134.149.17.140:24301] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aYY6Ll8TBLsqJpkSDKX3xwAAAYI"]
[Sat Feb 07 02:59:59.277450 2026] [:error] [pid 35308:tid 35429] [client 134.149.17.140:17879] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYY6LwUnbRgf4hlvwiyzzAAAAII"]
[Sat Feb 07 03:00:00.484267 2026] [:error] [pid 55616:tid 55622] [client 134.149.17.140:12790] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYY6MOzxeKHfFD-B2b36XgAAAEM"]
[Sat Feb 07 03:00:01.564703 2026] [:error] [pid 35307:tid 35386] [client 134.149.17.140:25156] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYY6Mesb9VwRNUckGgvkigAAABQ"]
[Sat Feb 07 03:00:02.461384 2026] [:error] [pid 55616:tid 55637] [client 134.149.17.140:10402] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aYY6MuzxeKHfFD-B2b36YAAAAFI"]
[Sat Feb 07 03:00:03.254339 2026] [:error] [pid 35307:tid 35390] [client 134.149.17.140:24276] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aYY6M-sb9VwRNUckGgvkjQAAABg"]
[Sat Feb 07 03:00:04.172645 2026] [:error] [pid 55616:tid 55629] [client 134.149.17.140:21901] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aYY6NOzxeKHfFD-B2b36YgAAAEo"]
[Sat Feb 07 03:00:05.291420 2026] [:error] [pid 35537:tid 35543] [client 134.149.17.140:12759] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aYY6Nc1jKVeByUo420D6UQAAAQQ"]
[Sat Feb 07 03:00:06.405855 2026] [:error] [pid 35309:tid 35480] [client 134.149.17.140:11886] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aYY6NojeM9w-4dKewm_oZQAAANg"]
[Sat Feb 07 03:00:07.202428 2026] [:error] [pid 35307:tid 35383] [client 134.149.17.140:24284] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aYY6N-sb9VwRNUckGgvklAAAABE"]
[Sat Feb 07 03:00:08.156508 2026] [:error] [pid 35308:tid 35449] [client 134.149.17.140:13955] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aYY6OAUnbRgf4hlvwiyz1QAAAJY"]
[Sat Feb 07 03:00:08.901849 2026] [:error] [pid 50881:tid 50959] [client 134.149.17.140:21481] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aYY6OF8TBLsqJpkSDKX32QAAAZQ"]
[Sat Feb 07 03:00:09.534723 2026] [:error] [pid 35537:tid 35548] [client 134.149.17.140:25152] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "aYY6Oc1jKVeByUo420D6WgAAAQk"]
[Sat Feb 07 03:00:10.154135 2026] [:error] [pid 50881:tid 50960] [client 134.149.17.140:14558] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYY6Ol8TBLsqJpkSDKX33gAAAZU"]
[Sat Feb 07 03:00:10.819563 2026] [:error] [pid 35537:tid 35558] [client 134.149.17.140:24287] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYY6Os1jKVeByUo420D6WwAAARM"]
[Sat Feb 07 03:00:11.371782 2026] [:error] [pid 35537:tid 35549] [client 134.149.17.140:11887] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYY6O81jKVeByUo420D6XAAAAQo"]
[Sat Feb 07 03:00:12.181153 2026] [:error] [pid 35537:tid 35554] [client 134.149.17.140:17890] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aYY6PM1jKVeByUo420D6XwAAAQ8"]
[Sat Feb 07 03:00:12.982952 2026] [:error] [pid 55701:tid 55757] [client 134.149.17.140:14003] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aYY6PMDNf5Dni-14pBDs1AAAAUI"]
[Sat Feb 07 03:00:14.001231 2026] [:error] [pid 35307:tid 35368] [client 134.149.17.140:11892] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aYY6Pesb9VwRNUckGgvknwAAAAM"]
[Sat Feb 07 03:00:15.023531 2026] [:error] [pid 35308:tid 35446] [client 134.149.17.140:25153] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aYY6PwUnbRgf4hlvwiyz2QAAAJM"]
[Sat Feb 07 03:00:16.054658 2026] [:error] [pid 35308:tid 35442] [client 134.149.17.140:22445] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aYY6QAUnbRgf4hlvwiyz3QAAAI8"]
[Sat Feb 07 03:00:16.787588 2026] [:error] [pid 55701:tid 55775] [client 134.149.17.140:14196] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aYY6QMDNf5Dni-14pBDs1gAAAVM"]
[Sat Feb 07 03:00:17.648598 2026] [:error] [pid 35309:tid 35458] [client 134.149.17.140:10604] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aYY6QYjeM9w-4dKewm_oegAAAMM"]
[Sat Feb 07 03:00:18.533762 2026] [:error] [pid 35308:tid 35440] [client 134.149.17.140:13959] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aYY6QgUnbRgf4hlvwiyz5wAAAI0"]
[Sat Feb 07 03:00:19.722316 2026] [:error] [pid 55701:tid 55760] [client 134.149.17.140:10565] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aYY6Q8DNf5Dni-14pBDs2gAAAUU"]
[Sat Feb 07 03:00:20.780854 2026] [:error] [pid 55616:tid 55634] [client 134.149.17.140:22409] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aYY6ROzxeKHfFD-B2b36cwAAAE8"]
[Sat Feb 07 03:00:21.426648 2026] [:error] [pid 50881:tid 50956] [client 134.149.17.140:22430] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aYY6RV8TBLsqJpkSDKX39QAAAZE"]
[Sat Feb 07 03:00:22.145604 2026] [:error] [pid 35309:tid 35459] [client 134.149.17.140:14554] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aYY6RojeM9w-4dKewm_ojwAAAMQ"]
[Sat Feb 07 03:00:24.021876 2026] [:error] [pid 35307:tid 35383] [client 134.149.17.140:22418] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/max.php"] [unique_id "aYY6SOsb9VwRNUckGgvkpwAAABE"]
[Sat Feb 07 03:00:24.813174 2026] [:error] [pid 55616:tid 55642] [client 134.149.17.140:14153] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "aYY6SOzxeKHfFD-B2b36eQAAAFc"]
[Sat Feb 07 03:00:26.664689 2026] [:error] [pid 35307:tid 35378] [client 134.149.17.140:21911] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "aYY6Susb9VwRNUckGgvkrwAAAAw"]
[Sat Feb 07 03:00:29.100061 2026] [:error] [pid 35309:tid 35468] [client 134.149.17.140:7861] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "aYY6TYjeM9w-4dKewm_ooAAAAM0"]
[Sat Feb 07 03:00:31.691129 2026] [:error] [pid 35308:tid 35429] [client 134.149.17.140:21444] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "aYY6TwUnbRgf4hlvwiyz7QAAAII"]
[Sat Feb 07 03:00:33.608819 2026] [:error] [pid 35309:tid 35459] [client 134.149.17.140:7428] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mpxct.php"] [unique_id "aYY6UYjeM9w-4dKewm_oqwAAAMQ"]
[Sat Feb 07 03:00:35.248675 2026] [:error] [pid 35309:tid 35458] [client 134.149.17.140:13957] [client 134.149.17.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mpxct.php"] [unique_id "aYY6U4jeM9w-4dKewm_orwAAAMM"]
[Sat Feb 07 05:43:51.768584 2026] [autoindex:error] [pid 50671:tid 50695] [client 143.198.16.166:56685] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 07 06:05:32.932777 2026] [:error] [pid 50671:tid 50694] [client 194.5.82.63:41187] [client 194.5.82.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYZlrLvqLohWBI_mqBPnxQAAAA4"]
[Sat Feb 07 15:58:12.798826 2026] [:error] [pid 58058:tid 58070] [client 101.32.52.164:49072] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYbwlLz-Qlvs65S4DP_YqgAAAYk"]
[Sat Feb 07 21:59:21.986870 2026] [:error] [pid 30684:tid 30710] [client 31.171.130.135:51705] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYdFObqwdxwowLt-_LwcmwAAAdc"]
[Sat Feb 07 21:59:24.430683 2026] [:error] [pid 50673:tid 50751] [client 31.171.130.119:45525] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYdFPGVwLsaZ7aKO2ckbrQAAAJA"]
[Sat Feb 07 21:59:28.347198 2026] [:error] [pid 50673:tid 50743] [client 31.171.130.164:52035] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYdFQGVwLsaZ7aKO2ckb1QAAAIg"]
[Sat Feb 07 21:59:30.994858 2026] [:error] [pid 50671:tid 50693] [client 31.171.130.140:44857] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aYdFQrvqLohWBI_mqBOxzwAAAA0"]
[Sat Feb 07 21:59:35.047803 2026] [:error] [pid 50672:tid 50722] [client 31.171.130.164:21273] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYdFRw9o0jq1XS8Nv7NU4AAAAE4"]
[Sat Feb 07 21:59:36.553746 2026] [:error] [pid 55157:tid 55165] [client 31.171.130.118:32719] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYdFSH36JdtTn2bTEozYNQAAAQM"]
[Sat Feb 07 21:59:37.531230 2026] [:error] [pid 50673:tid 50738] [client 31.171.130.118:25509] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYdFSWVwLsaZ7aKO2ckcAgAAAIM"]
[Sat Feb 07 21:59:38.595471 2026] [:error] [pid 55157:tid 55186] [client 31.171.130.149:53275] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYdFSn36JdtTn2bTEozYPgAAARg"]
[Sat Feb 07 21:59:39.570478 2026] [:error] [pid 58058:tid 58073] [client 31.171.130.130:32405] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYdFS7z-Qlvs65S4DP8xKQAAAYw"]
[Sat Feb 07 21:59:40.617560 2026] [:error] [pid 58058:tid 58084] [client 31.171.130.152:56971] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYdFTLz-Qlvs65S4DP8xMgAAAZc"]
[Sat Feb 07 21:59:42.105983 2026] [:error] [pid 50671:tid 50698] [client 31.171.130.110:24795] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYdFTrvqLohWBI_mqBOyDgAAABI"]
[Sat Feb 07 21:59:44.074330 2026] [:error] [pid 50671:tid 50695] [client 31.171.130.134:41977] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aYdFULvqLohWBI_mqBOyGgAAAA8"]
[Sat Feb 07 21:59:46.098523 2026] [:error] [pid 43182:tid 43202] [client 31.171.130.149:53303] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYdFUvEC82JnxmrnFYnZWwAAAVI"]
[Sat Feb 07 21:59:47.566762 2026] [:error] [pid 58058:tid 58085] [client 31.171.130.155:41617] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYdFU7z-Qlvs65S4DP8xUQAAAZg"]
[Sat Feb 07 21:59:49.104629 2026] [:error] [pid 50673:tid 50745] [client 31.171.130.107:45511] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYdFVWVwLsaZ7aKO2ckcOQAAAIo"]
[Sat Feb 07 21:59:53.099147 2026] [:error] [pid 55157:tid 55182] [client 31.171.130.165:44235] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYdFWX36JdtTn2bTEozYgwAAARQ"]
[Sat Feb 07 21:59:54.552533 2026] [:error] [pid 50672:tid 50719] [client 31.171.130.115:21593] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYdFWg9o0jq1XS8Nv7NVPAAAAEs"]
[Sat Feb 07 21:59:56.573667 2026] [:error] [pid 43182:tid 43186] [client 31.171.130.148:25163] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aYdFXPEC82JnxmrnFYnZiQAAAUI"]
[Sat Feb 07 21:59:58.051623 2026] [:error] [pid 50671:tid 50680] [client 31.171.130.142:24747] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aYdFXrvqLohWBI_mqBOyZQAAAAA"]
[Sat Feb 07 22:00:01.105027 2026] [:error] [pid 50671:tid 50687] [client 31.171.130.164:50357] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYdFYbvqLohWBI_mqBOyeQAAAAc"]
[Sat Feb 07 22:00:02.639863 2026] [:error] [pid 43182:tid 43200] [client 31.171.130.137:58195] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYdFYvEC82JnxmrnFYnZrwAAAVA"]
[Sat Feb 07 22:00:04.118789 2026] [:error] [pid 50671:tid 50704] [client 31.171.130.109:41229] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYdFZLvqLohWBI_mqBOyhwAAABg"]
[Sat Feb 07 22:00:05.093028 2026] [:error] [pid 50671:tid 50699] [client 31.171.130.158:58049] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYdFZbvqLohWBI_mqBOyjgAAABM"]
[Sat Feb 07 22:00:06.087596 2026] [:error] [pid 43182:tid 43188] [client 31.171.130.164:61617] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYdFZvEC82JnxmrnFYnZxAAAAUQ"]
[Sat Feb 07 22:00:08.630465 2026] [:error] [pid 55157:tid 55177] [client 31.171.130.119:64555] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aYdFaH36JdtTn2bTEozY1AAAAQ8"]
[Sat Feb 07 22:00:09.613512 2026] [:error] [pid 50673:tid 50736] [client 31.171.130.120:36231] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aYdFaWVwLsaZ7aKO2ckcgAAAAIE"]
[Sat Feb 07 22:00:10.616962 2026] [:error] [pid 30684:tid 30711] [client 31.171.130.138:29633] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYdFarqwdxwowLt-_LwdXAAAAdg"]
[Sat Feb 07 22:00:15.762331 2026] [:error] [pid 50671:tid 50684] [client 31.171.130.132:45611] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aYdFb7vqLohWBI_mqBOyyAAAAAQ"]
[Sat Feb 07 22:00:18.268908 2026] [:error] [pid 50673:tid 50758] [client 31.171.130.164:65249] [client 31.171.130.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.164, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aYdFcmVwLsaZ7aKO2ckcsAAAAJc"]
[Sat Feb 07 22:00:24.271796 2026] [:error] [pid 50673:tid 50741] [client 31.171.130.164:65249] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYdFeGVwLsaZ7aKO2ckc9AAAAIY"]
[Sat Feb 07 22:00:26.214422 2026] [:error] [pid 50673:tid 50741] [client 31.171.130.147:59589] [client 31.171.130.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.147, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aYdFemVwLsaZ7aKO2ckdAgAAAIY"]
[Sat Feb 07 22:00:27.179637 2026] [:error] [pid 50673:tid 50753] [client 31.171.130.147:59589] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aYdFe2VwLsaZ7aKO2ckdCgAAAJI"]
[Sat Feb 07 22:00:32.182144 2026] [:error] [pid 50780:tid 50793] [client 31.171.130.152:24315] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aYdFgOtUmIu2JHM2CrvLrAAAAMs"]
[Sat Feb 07 22:00:37.169230 2026] [:error] [pid 50780:tid 50791] [client 31.171.130.123:43149] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aYdFhetUmIu2JHM2CrvL4gAAAMk"]
[Sat Feb 07 22:00:39.124896 2026] [:error] [pid 50671:tid 50683] [client 31.171.130.149:52503] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aYdFh7vqLohWBI_mqBOzGAAAAAM"]
[Sat Feb 07 22:00:41.574102 2026] [:error] [pid 30684:tid 30694] [client 31.171.130.130:36025] [client 31.171.130.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.130, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aYdFibqwdxwowLt-_LweHQAAAcc"]
[Sat Feb 07 22:00:42.063462 2026] [:error] [pid 30684:tid 30698] [client 31.171.130.130:36025] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aYdFirqwdxwowLt-_LweIAAAAcs"]
[Sat Feb 07 22:00:55.054607 2026] [:error] [pid 30684:tid 30703] [client 31.171.130.108:29653] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aYdFl7qwdxwowLt-_LwedwAAAdA"]
[Sat Feb 07 22:00:57.605525 2026] [:error] [pid 30684:tid 30701] [client 31.171.130.157:41785] [client 31.171.130.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.157, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aYdFmbqwdxwowLt-_LwehwAAAc4"]
[Sat Feb 07 22:00:59.708407 2026] [:error] [pid 30684:tid 30688] [client 31.171.130.157:41785] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aYdFm7qwdxwowLt-_LwekgAAAcE"]
[Sat Feb 07 22:01:01.172774 2026] [:error] [pid 50780:tid 50787] [client 31.171.130.120:48761] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aYdFnetUmIu2JHM2CrvMpwAAAMU"]
[Sat Feb 07 22:01:03.219423 2026] [:error] [pid 58058:tid 58062] [client 31.171.130.118:22529] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aYdFn7z-Qlvs65S4DP8yRgAAAYE"]
[Sat Feb 07 22:01:05.693978 2026] [:error] [pid 50673:tid 50750] [client 31.171.130.116:58619] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYdFoWVwLsaZ7aKO2ckeLQAAAI8"]
[Sat Feb 07 22:01:06.694712 2026] [:error] [pid 50673:tid 50756] [client 31.171.130.145:32279] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aYdFomVwLsaZ7aKO2ckeNQAAAJU"]
[Sat Feb 07 22:01:10.325759 2026] [:error] [pid 50672:tid 50712] [client 31.171.130.143:57513] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYdFpg9o0jq1XS8Nv7NWxAAAAEQ"]
[Sat Feb 07 22:01:11.777435 2026] [:error] [pid 50672:tid 50724] [client 31.171.130.113:38257] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYdFpw9o0jq1XS8Nv7NW0AAAAFA"]
[Sat Feb 07 22:01:14.346007 2026] [:error] [pid 55157:tid 55181] [client 31.171.130.129:32749] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aYdFqn36JdtTn2bTEozZ9gAAARM"]
[Sat Feb 07 22:01:16.830467 2026] [:error] [pid 50672:tid 50720] [client 31.171.130.162:23487] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aYdFrA9o0jq1XS8Nv7NW7gAAAEw"]
[Sat Feb 07 22:01:18.888810 2026] [:error] [pid 58058:tid 58069] [client 31.171.130.111:32479] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aYdFrrz-Qlvs65S4DP8yoQAAAYg"]
[Sat Feb 07 22:01:21.384307 2026] [:error] [pid 50671:tid 50700] [client 31.171.130.116:55797] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aYdFsbvqLohWBI_mqBO0CwAAABQ"]
[Sat Feb 07 22:01:25.870056 2026] [:error] [pid 58058:tid 58075] [client 31.171.130.112:43755] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aYdFtbz-Qlvs65S4DP8y1gAAAY4"]
[Sat Feb 07 22:01:26.838350 2026] [:error] [pid 43182:tid 43194] [client 31.171.130.132:50759] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aYdFtvEC82JnxmrnFYnb4AAAAUo"]
[Sat Feb 07 22:01:27.869943 2026] [:error] [pid 30684:tid 30687] [client 31.171.130.116:29671] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aYdFt7qwdxwowLt-_LwfMwAAAcA"]
[Sat Feb 07 22:01:28.901507 2026] [:error] [pid 50671:tid 50684] [client 31.171.130.146:39501] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aYdFuLvqLohWBI_mqBO0MQAAAAQ"]
[Sat Feb 07 22:01:30.375565 2026] [:error] [pid 50780:tid 50795] [client 31.171.130.116:30937] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aYdFuutUmIu2JHM2CrvNrQAAAM0"]
[Sat Feb 07 22:01:31.419725 2026] [:error] [pid 43182:tid 43188] [client 31.171.130.159:61333] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYdFu_EC82JnxmrnFYncCgAAAUQ"]
[Sat Feb 07 22:01:33.369698 2026] [:error] [pid 58058:tid 58069] [client 31.171.130.143:43637] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aYdFvbz-Qlvs65S4DP8zEAAAAYg"]
[Sat Feb 07 22:01:34.329875 2026] [:error] [pid 43182:tid 43200] [client 31.171.130.151:32373] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYdFvvEC82JnxmrnFYncHQAAAVA"]
[Sat Feb 07 22:01:35.292819 2026] [:error] [pid 43182:tid 43187] [client 31.171.130.144:35199] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aYdFv_EC82JnxmrnFYncIgAAAUM"]
[Sat Feb 07 22:01:36.260947 2026] [:error] [pid 50673:tid 50744] [client 31.171.130.110:22607] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aYdFwGVwLsaZ7aKO2cketAAAAIk"]
[Sat Feb 07 22:01:37.732506 2026] [:error] [pid 30684:tid 30694] [client 31.171.130.119:55679] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aYdFwbqwdxwowLt-_LwfegAAAcc"]
[Sat Feb 07 22:01:39.676955 2026] [:error] [pid 30684:tid 30701] [client 31.171.130.165:65347] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aYdFw7qwdxwowLt-_LwfkAAAAc4"]
[Sat Feb 07 22:01:42.644933 2026] [:error] [pid 58058:tid 58062] [client 31.171.130.112:62681] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aYdFxrz-Qlvs65S4DP8zYAAAAYE"]
[Sat Feb 07 22:01:47.144565 2026] [:error] [pid 50672:tid 50710] [client 31.171.130.157:42711] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aYdFyw9o0jq1XS8Nv7NXOwAAAEI"]
[Sat Feb 07 22:01:49.604608 2026] [:error] [pid 55157:tid 55169] [client 31.171.130.150:49703] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aYdFzX36JdtTn2bTEoza9AAAAQc"]
[Sat Feb 07 22:01:50.578959 2026] [:error] [pid 55157:tid 55165] [client 31.171.130.164:37199] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aYdFzn36JdtTn2bTEoza_AAAAQM"]
[Sat Feb 07 22:01:53.529520 2026] [:error] [pid 50673:tid 50743] [client 31.171.130.157:41985] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYdF0WVwLsaZ7aKO2ckfPgAAAIg"]
[Sat Feb 07 22:01:56.041850 2026] [proxy_fcgi:error] [pid 58058:tid 58064] [client 31.171.130.129:38865] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:01:56.530617 2026] [proxy_fcgi:error] [pid 58058:tid 58085] [client 31.171.130.129:38865] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:01:57.042157 2026] [proxy_fcgi:error] [pid 58058:tid 58074] [client 31.171.130.129:38865] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:01:59.531449 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.129:38865] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYdF17z-Qlvs65S4DP8z0gAAAYs"]
[Sat Feb 07 22:02:00.486957 2026] [:error] [pid 55157:tid 55175] [client 31.171.130.119:62279] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aYdF2H36JdtTn2bTEozbQgAAAQ0"]
[Sat Feb 07 22:02:01.535447 2026] [:error] [pid 58058:tid 58077] [client 31.171.130.158:40587] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aYdF2bz-Qlvs65S4DP8z2QAAAZA"]
[Sat Feb 07 22:02:02.522891 2026] [:error] [pid 50671:tid 50690] [client 31.171.130.163:58233] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aYdF2rvqLohWBI_mqBO00AAAAAo"]
[Sat Feb 07 22:02:03.479825 2026] [:error] [pid 50673:tid 50739] [client 31.171.130.129:22485] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aYdF22VwLsaZ7aKO2ckfkQAAAIQ"]
[Sat Feb 07 22:02:04.502645 2026] [:error] [pid 43182:tid 43197] [client 31.171.130.149:25043] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aYdF3PEC82JnxmrnFYndXQAAAU0"]
[Sat Feb 07 22:02:06.075545 2026] [:error] [pid 50673:tid 50757] [client 31.171.130.159:31879] [client 31.171.130.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aYdF3mVwLsaZ7aKO2ckfogAAAJY"]
[Sat Feb 07 22:02:07.060627 2026] [:error] [pid 43182:tid 43193] [client 31.171.130.163:53821] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aYdF3_EC82JnxmrnFYndfAAAAUk"]
[Sat Feb 07 22:02:08.062800 2026] [:error] [pid 50671:tid 50689] [client 31.171.130.151:53875] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYdF4LvqLohWBI_mqBO05gAAAAk"]
[Sat Feb 07 22:02:09.030732 2026] [:error] [pid 50673:tid 50745] [client 31.171.130.144:33095] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aYdF4WVwLsaZ7aKO2ckfqQAAAIo"]
[Sat Feb 07 22:02:11.021457 2026] [:error] [pid 50780:tid 50805] [client 31.171.130.143:41311] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aYdF4-tUmIu2JHM2CrvPKwAAANc"]
[Sat Feb 07 22:02:12.504570 2026] [:error] [pid 55157:tid 55165] [client 31.171.130.160:64379] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aYdF5H36JdtTn2bTEozboAAAAQM"]
[Sat Feb 07 22:02:14.465479 2026] [:error] [pid 50673:tid 50735] [client 31.171.130.154:46427] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aYdF5mVwLsaZ7aKO2ckf0AAAAIA"]
[Sat Feb 07 22:02:16.432389 2026] [:error] [pid 50673:tid 50738] [client 31.171.130.120:38857] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aYdF6GVwLsaZ7aKO2ckf4gAAAIM"]
[Sat Feb 07 22:02:18.854609 2026] [:error] [pid 50673:tid 50749] [client 31.171.130.144:32763] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aYdF6mVwLsaZ7aKO2ckf8wAAAI4"]
[Sat Feb 07 22:02:21.855492 2026] [:error] [pid 50671:tid 50682] [client 31.171.130.150:39377] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aYdF7bvqLohWBI_mqBO1GwAAAAI"]
[Sat Feb 07 22:02:23.360936 2026] [:error] [pid 50671:tid 50689] [client 31.171.130.150:33257] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aYdF77vqLohWBI_mqBO1HwAAAAk"]
[Sat Feb 07 22:02:32.150633 2026] [:error] [pid 55157:tid 55174] [client 31.171.130.145:31203] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aYdF-H36JdtTn2bTEozcYwAAAQw"]
[Sat Feb 07 22:02:33.113693 2026] [:error] [pid 30684:tid 30709] [client 31.171.130.135:25157] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYdF-bqwdxwowLt-_LwhAwAAAdY"]
[Sat Feb 07 22:02:34.109135 2026] [:error] [pid 50672:tid 50727] [client 31.171.130.163:27615] [client 31.171.130.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.163, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYdF-g9o0jq1XS8Nv7NYIAAAAFM"]
[Sat Feb 07 22:02:35.081235 2026] [:error] [pid 50672:tid 50716] [client 31.171.130.163:27615] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aYdF-w9o0jq1XS8Nv7NYJwAAAEg"]
[Sat Feb 07 22:02:37.017757 2026] [:error] [pid 50780:tid 50804] [client 31.171.130.110:62151] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aYdF_etUmIu2JHM2CrvQAgAAANY"]
[Sat Feb 07 22:02:37.997160 2026] [:error] [pid 50673:tid 50749] [client 31.171.130.164:29737] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aYdF_WVwLsaZ7aKO2ckgWQAAAI4"]
[Sat Feb 07 22:02:40.922731 2026] [:error] [pid 50671:tid 50682] [client 31.171.130.146:28697] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYdGALvqLohWBI_mqBO1ewAAAAI"]
[Sat Feb 07 22:02:41.887882 2026] [:error] [pid 50673:tid 50751] [client 31.171.130.130:40193] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aYdGAWVwLsaZ7aKO2ckgewAAAJA"]
[Sat Feb 07 22:02:45.302195 2026] [:error] [pid 30684:tid 30692] [client 31.171.130.121:63123] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aYdGBbqwdxwowLt-_LwhaQAAAcU"]
[Sat Feb 07 22:02:47.402655 2026] [proxy_fcgi:error] [pid 50672:tid 50716] [client 31.171.130.149:20355] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:02:48.361844 2026] [:error] [pid 50672:tid 50727] [client 31.171.130.149:20355] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aYdGCA9o0jq1XS8Nv7NYagAAAFM"]
[Sat Feb 07 22:02:49.340828 2026] [:error] [pid 50673:tid 50738] [client 31.171.130.123:60755] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aYdGCWVwLsaZ7aKO2ckgtwAAAIM"]
[Sat Feb 07 22:02:51.309728 2026] [:error] [pid 50780:tid 50801] [client 31.171.130.132:21783] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aYdGC-tUmIu2JHM2CrvQmAAAANM"]
[Sat Feb 07 22:02:52.285851 2026] [:error] [pid 50671:tid 50691] [client 31.171.130.147:22725] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aYdGDLvqLohWBI_mqBO1vAAAAAs"]
[Sat Feb 07 22:02:56.638800 2026] [:error] [pid 50672:tid 50725] [client 31.171.130.113:20257] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aYdGEA9o0jq1XS8Nv7NYkAAAAFE"]
[Sat Feb 07 22:02:57.598559 2026] [:error] [pid 50780:tid 50782] [client 31.171.130.154:52559] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aYdGEetUmIu2JHM2CrvQ1gAAAMA"]
[Sat Feb 07 22:03:00.529328 2026] [:error] [pid 50780:tid 50799] [client 31.171.130.149:55819] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aYdGFOtUmIu2JHM2CrvQ8gAAANE"]
[Sat Feb 07 22:03:01.524027 2026] [:error] [pid 50780:tid 50806] [client 31.171.130.113:27869] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYdGFetUmIu2JHM2CrvQ-wAAANg"]
[Sat Feb 07 22:03:02.480972 2026] [:error] [pid 50780:tid 50805] [client 31.171.130.122:49257] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYdGFutUmIu2JHM2CrvRAQAAANc"]
[Sat Feb 07 22:03:07.673601 2026] [:error] [pid 50673:tid 50737] [client 31.171.130.150:54143] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aYdGG2VwLsaZ7aKO2ckhVgAAAII"]
[Sat Feb 07 22:03:09.127854 2026] [:error] [pid 50671:tid 50680] [client 31.171.130.151:30077] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aYdGHbvqLohWBI_mqBO2MgAAAAA"]
[Sat Feb 07 22:03:13.543895 2026] [:error] [pid 30684:tid 30708] [client 31.171.130.158:39371] [client 31.171.130.158] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.158, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aYdGIbqwdxwowLt-_LwiFQAAAdU"]
[Sat Feb 07 22:03:16.498076 2026] [:error] [pid 30684:tid 30695] [client 31.171.130.158:39371] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aYdGJLqwdxwowLt-_LwiMgAAAcg"]
[Sat Feb 07 22:03:17.455606 2026] [:error] [pid 43182:tid 43186] [client 31.171.130.123:65447] [client 31.171.130.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.123, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aYdGJfEC82JnxmrnFYngZgAAAUI"]
[Sat Feb 07 22:03:24.457259 2026] [proxy_fcgi:error] [pid 43182:tid 43206] [client 31.171.130.123:65447] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:03:31.870651 2026] [:error] [pid 43182:tid 43190] [client 31.171.130.123:65447] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aYdGM_EC82JnxmrnFYnhMgAAAUY"]
[Sat Feb 07 22:03:34.326027 2026] [:error] [pid 43182:tid 43191] [client 31.171.130.140:60419] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aYdGNvEC82JnxmrnFYnhTAAAAUc"]
[Sat Feb 07 22:03:36.288897 2026] [:error] [pid 30684:tid 30707] [client 31.171.130.107:38485] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aYdGOLqwdxwowLt-_LwiqQAAAdQ"]
[Sat Feb 07 22:03:41.743733 2026] [:error] [pid 50671:tid 50687] [client 31.171.130.135:52051] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYdGPbvqLohWBI_mqBO3WQAAAAc"]
[Sat Feb 07 22:03:43.754255 2026] [:error] [pid 43182:tid 43195] [client 31.171.130.154:53113] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYdGP_EC82JnxmrnFYnhnwAAAUs"]
[Sat Feb 07 22:03:45.245799 2026] [:error] [pid 50780:tid 50785] [client 31.171.130.133:60453] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aYdGQetUmIu2JHM2CrvRxgAAAMM"]
[Sat Feb 07 22:03:48.220619 2026] [proxy_fcgi:error] [pid 55157:tid 55180] [client 31.171.130.161:47877] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:03:48.707619 2026] [proxy_fcgi:error] [pid 55157:tid 55173] [client 31.171.130.161:47877] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:03:49.193855 2026] [:error] [pid 55157:tid 55183] [client 31.171.130.161:47877] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aYdGRX36JdtTn2bTEozdoQAAARU"]
[Sat Feb 07 22:03:50.203368 2026] [:error] [pid 30684:tid 30700] [client 31.171.130.162:54065] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aYdGRrqwdxwowLt-_Lwi6wAAAc0"]
[Sat Feb 07 22:03:54.552472 2026] [:error] [pid 43182:tid 43195] [client 31.171.130.123:54381] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aYdGSvEC82JnxmrnFYnh_QAAAUs"]
[Sat Feb 07 22:03:55.962470 2026] [:error] [pid 30684:tid 30708] [client 31.171.130.150:37951] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aYdGS7qwdxwowLt-_LwjCAAAAdU"]
[Sat Feb 07 22:03:58.326612 2026] [:error] [pid 43182:tid 43203] [client 31.171.130.119:43207] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aYdGTvEC82JnxmrnFYniHgAAAVM"]
[Sat Feb 07 22:04:02.633697 2026] [:error] [pid 55157:tid 55164] [client 31.171.130.111:22179] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aYdGUn36JdtTn2bTEozd7wAAAQI"]
[Sat Feb 07 22:04:03.582608 2026] [proxy_fcgi:error] [pid 50780:tid 50803] [client 31.171.130.133:24273] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:05.031946 2026] [:error] [pid 50780:tid 50791] [client 31.171.130.133:24273] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aYdGVetUmIu2JHM2CrvSWwAAAMk"]
[Sat Feb 07 22:04:08.404688 2026] [proxy_fcgi:error] [pid 30684:tid 30700] [client 31.171.130.154:20139] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:09.360053 2026] [:error] [pid 30684:tid 30689] [client 31.171.130.154:20139] [client 31.171.130.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.154, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aYdGWbqwdxwowLt-_LwjNAAAAcI"]
[Sat Feb 07 22:04:11.800690 2026] [:error] [pid 30684:tid 30698] [client 31.171.130.154:20139] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aYdGW7qwdxwowLt-_LwjPgAAAcs"]
[Sat Feb 07 22:04:13.223664 2026] [:error] [pid 43182:tid 43191] [client 31.171.130.146:41445] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aYdGXfEC82JnxmrnFYnirAAAAUc"]
[Sat Feb 07 22:04:16.100407 2026] [:error] [pid 50672:tid 50712] [client 31.171.130.149:54789] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aYdGYA9o0jq1XS8Nv7NaSwAAAEQ"]
[Sat Feb 07 22:04:18.952388 2026] [:error] [pid 30684:tid 30693] [client 31.171.130.139:44981] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aYdGYrqwdxwowLt-_LwjcgAAAcY"]
[Sat Feb 07 22:04:20.400926 2026] [:error] [pid 50673:tid 50743] [client 31.171.130.152:47619] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aYdGZGVwLsaZ7aKO2ckjGAAAAIg"]
[Sat Feb 07 22:04:22.799667 2026] [:error] [pid 58058:tid 58061] [client 31.171.130.158:59213] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aYdGZrz-Qlvs65S4DP83IwAAAYA"]
[Sat Feb 07 22:04:24.746615 2026] [proxy_fcgi:error] [pid 55157:tid 55181] [client 31.171.130.162:59961] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:25.232698 2026] [:error] [pid 55157:tid 55169] [client 31.171.130.162:59961] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aYdGaX36JdtTn2bTEozeVQAAAQc"]
[Sat Feb 07 22:04:26.658473 2026] [:error] [pid 30684:tid 30689] [client 31.171.130.134:56509] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aYdGarqwdxwowLt-_LwjowAAAcI"]
[Sat Feb 07 22:04:27.608475 2026] [:error] [pid 50671:tid 50695] [client 31.171.130.154:42111] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aYdGa7vqLohWBI_mqBO4VwAAAA8"]
[Sat Feb 07 22:04:28.550590 2026] [:error] [pid 55157:tid 55166] [client 31.171.130.163:45873] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aYdGbH36JdtTn2bTEozeZgAAAQQ"]
[Sat Feb 07 22:04:29.513344 2026] [:error] [pid 50672:tid 50713] [client 31.171.130.112:47275] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aYdGbQ9o0jq1XS8Nv7NarQAAAEU"]
[Sat Feb 07 22:04:30.453861 2026] [:error] [pid 50671:tid 50692] [client 31.171.130.109:25627] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aYdGbrvqLohWBI_mqBO4YwAAAAw"]
[Sat Feb 07 22:04:34.138847 2026] [:error] [pid 55157:tid 55168] [client 31.171.130.157:36099] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aYdGcn36JdtTn2bTEozegQAAAQY"]
[Sat Feb 07 22:04:36.028452 2026] [:error] [pid 43182:tid 43199] [client 31.171.130.152:64175] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aYdGdPEC82JnxmrnFYnjmwAAAU8"]
[Sat Feb 07 22:04:36.976409 2026] [:error] [pid 55157:tid 55163] [client 31.171.130.139:46703] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aYdGdH36JdtTn2bTEozejwAAAQE"]
[Sat Feb 07 22:04:37.926589 2026] [:error] [pid 50780:tid 50800] [client 31.171.130.158:55997] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aYdGdetUmIu2JHM2CrvTgQAAANI"]
[Sat Feb 07 22:04:39.363616 2026] [:error] [pid 50671:tid 50689] [client 31.171.130.149:30155] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aYdGd7vqLohWBI_mqBO4lAAAAAk"]
[Sat Feb 07 22:04:41.271630 2026] [:error] [pid 30684:tid 30702] [client 31.171.130.149:40429] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aYdGebqwdxwowLt-_LwkBQAAAc8"]
[Sat Feb 07 22:04:42.271625 2026] [proxy_fcgi:error] [pid 55157:tid 55166] [client 31.171.130.151:51487] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:04:44.186245 2026] [:error] [pid 55157:tid 55164] [client 31.171.130.151:51487] [client 31.171.130.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.151, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aYdGfH36JdtTn2bTEoze1AAAAQI"]
[Sat Feb 07 22:04:47.086442 2026] [:error] [pid 55157:tid 55185] [client 31.171.130.151:51487] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aYdGf336JdtTn2bTEoze6AAAARc"]
[Sat Feb 07 22:04:48.036605 2026] [:error] [pid 58058:tid 58074] [client 31.171.130.116:33013] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aYdGgLz-Qlvs65S4DP84BQAAAY0"]
[Sat Feb 07 22:04:57.206671 2026] [:error] [pid 58058:tid 58065] [client 31.171.130.145:53935] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYdGibz-Qlvs65S4DP84TgAAAYQ"]
[Sat Feb 07 22:04:58.156415 2026] [:error] [pid 55157:tid 55171] [client 31.171.130.161:28993] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aYdGin36JdtTn2bTEozfMwAAAQk"]
[Sat Feb 07 22:04:59.106593 2026] [:error] [pid 50673:tid 50735] [client 31.171.130.110:62789] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aYdGi2VwLsaZ7aKO2ckkbQAAAIA"]
[Sat Feb 07 22:05:03.002385 2026] [:error] [pid 30684:tid 30692] [client 31.171.130.140:46749] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aYdGj7qwdxwowLt-_Lwk1AAAAcU"]
[Sat Feb 07 22:05:06.285029 2026] [:error] [pid 58058:tid 58068] [client 31.171.130.162:48869] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aYdGkrz-Qlvs65S4DP84ewAAAYc"]
[Sat Feb 07 22:05:07.227671 2026] [:error] [pid 58058:tid 58079] [client 31.171.130.142:26603] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aYdGk7z-Qlvs65S4DP84gQAAAZI"]
[Sat Feb 07 22:05:10.130488 2026] [:error] [pid 43182:tid 43202] [client 31.171.130.107:58623] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aYdGlvEC82JnxmrnFYnkrwAAAVI"]
[Sat Feb 07 22:05:11.577801 2026] [:error] [pid 30684:tid 30707] [client 31.171.130.122:64495] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aYdGl7qwdxwowLt-_LwlBQAAAdQ"]
[Sat Feb 07 22:05:13.475848 2026] [:error] [pid 55157:tid 55178] [client 31.171.130.137:37923] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aYdGmX36JdtTn2bTEozfoQAAARA"]
[Sat Feb 07 22:05:19.707910 2026] [:error] [pid 43182:tid 43201] [client 31.171.130.130:31355] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aYdGn_EC82JnxmrnFYnk9AAAAVE"]
[Sat Feb 07 22:05:20.673041 2026] [:error] [pid 30684:tid 30694] [client 31.171.130.146:25987] [client 31.171.130.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "aYdGoLqwdxwowLt-_LwlOAAAAcc"]
[Sat Feb 07 22:05:22.614611 2026] [:error] [pid 50672:tid 50732] [client 31.171.130.163:31819] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aYdGog9o0jq1XS8Nv7NcAwAAAFg"]
[Sat Feb 07 22:05:26.440769 2026] [:error] [pid 30684:tid 30710] [client 31.171.130.110:27627] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aYdGprqwdxwowLt-_LwlbgAAAdc"]
[Sat Feb 07 22:05:28.416137 2026] [:error] [pid 43182:tid 43199] [client 31.171.130.154:30833] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aYdGqPEC82JnxmrnFYnlPgAAAU8"]
[Sat Feb 07 22:05:31.294699 2026] [:error] [pid 30684:tid 30704] [client 31.171.130.151:36669] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aYdGq7qwdxwowLt-_LwlowAAAdE"]
[Sat Feb 07 22:05:34.673510 2026] [:error] [pid 50780:tid 50782] [client 31.171.130.152:52321] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aYdGrutUmIu2JHM2CrvVGAAAAMA"]
[Sat Feb 07 22:05:36.578658 2026] [:error] [pid 50780:tid 50798] [client 31.171.130.144:64261] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aYdGsOtUmIu2JHM2CrvVJgAAANA"]
[Sat Feb 07 22:05:37.540632 2026] [:error] [pid 50671:tid 50698] [client 31.171.130.161:51273] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aYdGsbvqLohWBI_mqBO6BAAAABI"]
[Sat Feb 07 22:05:40.936883 2026] [:error] [pid 50671:tid 50686] [client 31.171.130.129:32883] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aYdGtLvqLohWBI_mqBO6GgAAAAY"]
[Sat Feb 07 22:05:44.317155 2026] [:error] [pid 50672:tid 50725] [client 31.171.130.107:58821] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aYdGuA9o0jq1XS8Nv7NcXQAAAFE"]
[Sat Feb 07 22:05:47.218105 2026] [:error] [pid 55157:tid 55177] [client 31.171.130.123:60791] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYdGu336JdtTn2bTEozglgAAAQ8"]
[Sat Feb 07 22:05:48.163952 2026] [:error] [pid 50780:tid 50798] [client 31.171.130.148:50891] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aYdGvOtUmIu2JHM2CrvVaQAAANA"]
[Sat Feb 07 22:05:50.084838 2026] [:error] [pid 50672:tid 50717] [client 31.171.130.133:47251] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aYdGvg9o0jq1XS8Nv7NcbQAAAEk"]
[Sat Feb 07 22:05:52.486429 2026] [:error] [pid 30684:tid 30690] [client 31.171.130.163:47463] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aYdGwLqwdxwowLt-_LwmQQAAAcM"]
[Sat Feb 07 22:05:53.427194 2026] [:error] [pid 43182:tid 43194] [client 31.171.130.149:21273] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aYdGwfEC82JnxmrnFYnmGAAAAUo"]
[Sat Feb 07 22:05:57.295525 2026] [:error] [pid 50671:tid 50691] [client 31.171.130.163:40311] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aYdGxbvqLohWBI_mqBO6ZwAAAAs"]
[Sat Feb 07 22:05:59.263938 2026] [:error] [pid 50671:tid 50697] [client 31.171.130.119:53265] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aYdGx7vqLohWBI_mqBO6eQAAABE"]
[Sat Feb 07 22:06:00.211080 2026] [:error] [pid 50671:tid 50687] [client 31.171.130.137:47911] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aYdGyLvqLohWBI_mqBO6fwAAAAc"]
[Sat Feb 07 22:06:02.276219 2026] [:error] [pid 50780:tid 50797] [client 31.171.130.114:46439] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aYdGyutUmIu2JHM2CrvVyQAAAM8"]
[Sat Feb 07 22:06:03.709476 2026] [:error] [pid 55157:tid 55171] [client 31.171.130.157:61505] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aYdGy336JdtTn2bTEozg5QAAAQk"]
[Sat Feb 07 22:06:07.076800 2026] [:error] [pid 58058:tid 58084] [client 31.171.130.161:49397] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aYdGz7z-Qlvs65S4DP86CQAAAZc"]
[Sat Feb 07 22:06:08.976576 2026] [:error] [pid 50672:tid 50729] [client 31.171.130.141:42153] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aYdG0A9o0jq1XS8Nv7Nc8wAAAFU"]
[Sat Feb 07 22:06:10.869856 2026] [:error] [pid 58058:tid 58080] [client 31.171.130.136:44411] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aYdG0rz-Qlvs65S4DP86KAAAAZM"]
[Sat Feb 07 22:06:14.218642 2026] [:error] [pid 43182:tid 43199] [client 31.171.130.147:33335] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aYdG1vEC82JnxmrnFYnm0gAAAU8"]
[Sat Feb 07 22:06:15.667956 2026] [:error] [pid 50671:tid 50703] [client 31.171.130.112:35009] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aYdG17vqLohWBI_mqBO63wAAABc"]
[Sat Feb 07 22:06:16.613802 2026] [:error] [pid 50780:tid 50797] [client 31.171.130.137:31265] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aYdG2OtUmIu2JHM2CrvWDQAAAM8"]
[Sat Feb 07 22:06:17.582949 2026] [:error] [pid 30684:tid 30697] [client 31.171.130.140:55917] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aYdG2bqwdxwowLt-_Lwm2gAAAco"]
[Sat Feb 07 22:06:21.416994 2026] [:error] [pid 55157:tid 55177] [client 31.171.130.165:65053] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aYdG3X36JdtTn2bTEozhJQAAAQ8"]
[Sat Feb 07 22:06:23.792800 2026] [:error] [pid 50673:tid 50738] [client 31.171.130.115:43519] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aYdG32VwLsaZ7aKO2cknigAAAIM"]
[Sat Feb 07 22:06:26.171879 2026] [:error] [pid 55157:tid 55173] [client 31.171.130.109:64149] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aYdG4n36JdtTn2bTEozhQgAAAQs"]
[Sat Feb 07 22:06:28.586471 2026] [:error] [pid 50780:tid 50783] [client 31.171.130.146:50857] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aYdG5OtUmIu2JHM2CrvWSgAAAME"]
[Sat Feb 07 22:06:32.430564 2026] [:error] [pid 50673:tid 50740] [client 31.171.130.129:57857] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aYdG6GVwLsaZ7aKO2ckn2AAAAIU"]
[Sat Feb 07 22:06:33.862811 2026] [:error] [pid 50671:tid 50683] [client 31.171.130.112:40805] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aYdG6bvqLohWBI_mqBO7PQAAAAM"]
[Sat Feb 07 22:06:35.281705 2026] [:error] [pid 50780:tid 50788] [client 31.171.130.110:48119] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aYdG6-tUmIu2JHM2CrvWfQAAAMY"]
[Sat Feb 07 22:06:37.226378 2026] [:error] [pid 50672:tid 50708] [client 31.171.130.112:36889] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aYdG7Q9o0jq1XS8Nv7NdugAAAEA"]
[Sat Feb 07 22:06:42.032095 2026] [:error] [pid 50672:tid 50723] [client 31.171.130.111:31885] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aYdG8g9o0jq1XS8Nv7Nd6gAAAE8"]
[Sat Feb 07 22:06:42.982599 2026] [:error] [pid 50671:tid 50683] [client 31.171.130.113:41965] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aYdG8rvqLohWBI_mqBO7dgAAAAM"]
[Sat Feb 07 22:06:45.429427 2026] [:error] [pid 50673:tid 50742] [client 31.171.130.149:63255] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aYdG9WVwLsaZ7aKO2ckoLQAAAIc"]
[Sat Feb 07 22:06:46.366442 2026] [:error] [pid 30684:tid 30690] [client 31.171.130.154:39087] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYdG9rqwdxwowLt-_LwnXAAAAcM"]
[Sat Feb 07 22:06:48.291521 2026] [:error] [pid 50780:tid 50803] [client 31.171.130.143:48607] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aYdG-OtUmIu2JHM2CrvW0wAAANU"]
[Sat Feb 07 22:06:49.244690 2026] [:error] [pid 43182:tid 43200] [client 31.171.130.113:33547] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aYdG-fEC82JnxmrnFYnn0QAAAVA"]
[Sat Feb 07 22:06:50.205690 2026] [:error] [pid 50673:tid 50757] [client 31.171.130.131:32837] [client 31.171.130.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.131, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aYdG-mVwLsaZ7aKO2ckoUQAAAJY"]
[Sat Feb 07 22:06:50.214609 2026] [proxy_fcgi:error] [pid 50673:tid 50757] [client 31.171.130.131:32837] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:06:50.701458 2026] [:error] [pid 50673:tid 50745] [client 31.171.130.131:32837] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aYdG-mVwLsaZ7aKO2ckoVAAAAIo"]
[Sat Feb 07 22:06:53.108540 2026] [:error] [pid 43182:tid 43196] [client 31.171.130.158:59723] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aYdG_fEC82JnxmrnFYnn7gAAAUw"]
[Sat Feb 07 22:06:54.080656 2026] [:error] [pid 50780:tid 50806] [client 31.171.130.111:54141] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aYdG_utUmIu2JHM2CrvXAAAAANg"]
[Sat Feb 07 22:06:58.368980 2026] [:error] [pid 30684:tid 30689] [client 31.171.130.113:31813] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aYdHArqwdxwowLt-_LwnrQAAAcI"]
[Sat Feb 07 22:06:59.322787 2026] [:error] [pid 50671:tid 50700] [client 31.171.130.129:53889] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aYdHA7vqLohWBI_mqBO7wAAAABQ"]
[Sat Feb 07 22:07:02.706504 2026] [:error] [pid 55157:tid 55174] [client 31.171.130.118:55081] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aYdHBn36JdtTn2bTEoziEgAAAQw"]
[Sat Feb 07 22:07:03.668630 2026] [:error] [pid 55157:tid 55177] [client 31.171.130.148:58261] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aYdHB336JdtTn2bTEoziGAAAAQ8"]
[Sat Feb 07 22:07:04.622791 2026] [proxy_fcgi:error] [pid 50671:tid 50703] [client 31.171.130.151:64195] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:07:05.097044 2026] [:error] [pid 50671:tid 50692] [client 31.171.130.151:64195] [client 31.171.130.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.151, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aYdHCbvqLohWBI_mqBO72QAAAAw"]
[Sat Feb 07 22:07:06.102704 2026] [:error] [pid 50671:tid 50693] [client 31.171.130.151:64195] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aYdHCrvqLohWBI_mqBO73wAAAA0"]
[Sat Feb 07 22:07:10.642708 2026] [:error] [pid 58058:tid 58071] [client 31.171.130.120:32959] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aYdHDrz-Qlvs65S4DP87zwAAAYo"]
[Sat Feb 07 22:07:12.056898 2026] [:error] [pid 50673:tid 50759] [client 31.171.130.155:47065] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aYdHEGVwLsaZ7aKO2cko3wAAAJg"]
[Sat Feb 07 22:07:12.994891 2026] [:error] [pid 50673:tid 50739] [client 31.171.130.151:21053] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aYdHEGVwLsaZ7aKO2cko4wAAAIQ"]
[Sat Feb 07 22:07:15.416764 2026] [:error] [pid 50671:tid 50693] [client 31.171.130.144:45877] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aYdHE7vqLohWBI_mqBO8CwAAAA0"]
[Sat Feb 07 22:07:17.317484 2026] [:error] [pid 50780:tid 50802] [client 31.171.130.158:43725] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aYdHFetUmIu2JHM2CrvXjAAAANQ"]
[Sat Feb 07 22:07:20.186762 2026] [:error] [pid 50672:tid 50725] [client 31.171.130.154:41079] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aYdHGA9o0jq1XS8Nv7Ne6gAAAFE"]
[Sat Feb 07 22:07:21.129632 2026] [:error] [pid 43182:tid 43184] [client 31.171.130.154:60977] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aYdHGfEC82JnxmrnFYnopAAAAUA"]
[Sat Feb 07 22:07:22.584336 2026] [:error] [pid 30684:tid 30705] [client 31.171.130.134:27845] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aYdHGrqwdxwowLt-_LwoLgAAAdI"]
[Sat Feb 07 22:07:26.458716 2026] [:error] [pid 50780:tid 50788] [client 31.171.130.165:24387] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aYdHHutUmIu2JHM2CrvXwQAAAMY"]
[Sat Feb 07 22:07:28.353518 2026] [:error] [pid 50780:tid 50784] [client 31.171.130.131:32453] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aYdHIOtUmIu2JHM2CrvX0wAAAMI"]
[Sat Feb 07 22:07:28.824530 2026] [:error] [pid 50780:tid 50794] [client 31.171.130.131:32453] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aYdHIOtUmIu2JHM2CrvX2gAAAMw"]
[Sat Feb 07 22:07:30.731722 2026] [:error] [pid 50672:tid 50720] [client 31.171.130.108:41767] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aYdHIg9o0jq1XS8Nv7NfEQAAAEw"]
[Sat Feb 07 22:07:31.671768 2026] [:error] [pid 50780:tid 50788] [client 31.171.130.129:47207] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aYdHI-tUmIu2JHM2CrvX-wAAAMY"]
[Sat Feb 07 22:07:35.541615 2026] [:error] [pid 50780:tid 50802] [client 31.171.130.112:40481] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aYdHJ-tUmIu2JHM2CrvYHgAAANQ"]
[Sat Feb 07 22:07:40.603846 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.107:50129] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aYdHLOtUmIu2JHM2CrvYTQAAAMc"]
[Sat Feb 07 22:07:42.416537 2026] [:error] [pid 50780:tid 50805] [client 31.171.130.145:21275] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aYdHLutUmIu2JHM2CrvYXAAAANc"]
[Sat Feb 07 22:07:46.029401 2026] [:error] [pid 43182:tid 43195] [client 31.171.130.136:23655] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aYdHMvEC82JnxmrnFYnpWQAAAUs"]
[Sat Feb 07 22:07:47.473564 2026] [:error] [pid 50671:tid 50684] [client 31.171.130.130:59635] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aYdHM7vqLohWBI_mqBO89wAAAAQ"]
[Sat Feb 07 22:07:48.960044 2026] [:error] [pid 58058:tid 58070] [client 31.171.130.158:25257] [client 31.171.130.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aYdHNLz-Qlvs65S4DP885wAAAYk"]
[Sat Feb 07 22:07:50.041797 2026] [:error] [pid 50671:tid 50694] [client 31.171.130.131:44253] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aYdHNrvqLohWBI_mqBO9DAAAAA4"]
[Sat Feb 07 22:07:52.144587 2026] [:error] [pid 50671:tid 50695] [client 31.171.130.145:42415] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aYdHOLvqLohWBI_mqBO9HwAAAA8"]
[Sat Feb 07 22:07:55.159563 2026] [:error] [pid 58058:tid 58073] [client 31.171.130.150:39137] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aYdHO7z-Qlvs65S4DP89HQAAAYw"]
[Sat Feb 07 22:07:56.107648 2026] [:error] [pid 50780:tid 50787] [client 31.171.130.110:29283] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aYdHPOtUmIu2JHM2CrvYrgAAAMU"]
[Sat Feb 07 22:07:59.578852 2026] [:error] [pid 30684:tid 30703] [client 31.171.130.136:57171] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aYdHP7qwdxwowLt-_LwpKAAAAdA"]
[Sat Feb 07 23:22:54.841059 2026] [:error] [pid 50671:tid 50687] [client 43.157.95.239:53476] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYdYzrvqLohWBI_mqBPb7AAAAAc"]
[Sun Feb 08 00:16:14.275787 2026] [:error] [pid 50672:tid 50718] [client 103.77.107.178:49662] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aYdlTg9o0jq1XS8Nv7OG3AAAAEo"]
[Sun Feb 08 00:16:14.953471 2026] [:error] [pid 50780:tid 50805] [client 103.77.107.178:50016] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aYdlTutUmIu2JHM2CrsIWgAAANc"]
[Sun Feb 08 04:21:16.290853 2026] [:error] [pid 24423:tid 24489] [client 20.215.184.141:2296] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "aYeevE3f9n1Y0TpV5YZsfAAAAIQ"]
[Sun Feb 08 04:21:19.508705 2026] [:error] [pid 24423:tid 24508] [client 20.215.184.141:29774] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "aYeev03f9n1Y0TpV5YZsgwAAAJc"]
[Sun Feb 08 04:21:20.930415 2026] [:error] [pid 24422:tid 24478] [client 20.215.184.141:37806] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "aYeewCNNjcLoSCLKhTdvlAAAAFQ"]
[Sun Feb 08 04:21:23.626617 2026] [:error] [pid 24530:tid 24545] [client 20.215.184.141:2268] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "aYeew0azNRCs1GRWrh7iMgAAAM0"]
[Sun Feb 08 04:21:25.900439 2026] [:error] [pid 56906:tid 56908] [client 20.215.184.141:32029] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aYeexfxl3WX27-WXfDh08wAAAQA"]
[Sun Feb 08 04:21:26.585689 2026] [:error] [pid 24423:tid 24490] [client 20.215.184.141:24375] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aYeexk3f9n1Y0TpV5YZskQAAAIU"]
[Sun Feb 08 04:21:28.336649 2026] [:error] [pid 24422:tid 24475] [client 20.215.184.141:2291] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aYeeyCNNjcLoSCLKhTdvqAAAAFE"]
[Sun Feb 08 04:21:32.754844 2026] [:error] [pid 56906:tid 56915] [client 20.215.184.141:39892] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aYeezPxl3WX27-WXfDh0-QAAAQc"]
[Sun Feb 08 04:21:38.772060 2026] [:error] [pid 56906:tid 56919] [client 20.215.184.141:37773] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byel.php"] [unique_id "aYee0vxl3WX27-WXfDh1AAAAAQs"]
[Sun Feb 08 04:21:40.396585 2026] [:error] [pid 24422:tid 24475] [client 20.215.184.141:29804] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byel.php"] [unique_id "aYee1CNNjcLoSCLKhTdvvgAAAFE"]
[Sun Feb 08 04:21:41.077144 2026] [:error] [pid 24423:tid 24487] [client 20.215.184.141:24328] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byel.php"] [unique_id "aYee1U3f9n1Y0TpV5YZstQAAAII"]
[Sun Feb 08 04:21:43.537838 2026] [:error] [pid 24421:tid 24454] [client 20.215.184.141:2146] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byel.php"] [unique_id "aYee16p7cTzhX5M1IP8CKgAAABc"]
[Sun Feb 08 04:21:44.532805 2026] [:error] [pid 24423:tid 24507] [client 20.215.184.141:29799] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layou.php"] [unique_id "aYee2E3f9n1Y0TpV5YZsuQAAAJY"]
[Sun Feb 08 04:21:45.417002 2026] [:error] [pid 24421:tid 24445] [client 20.215.184.141:26137] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layou.php"] [unique_id "aYee2ap7cTzhX5M1IP8CLAAAAA4"]
[Sun Feb 08 04:21:46.397887 2026] [:error] [pid 24423:tid 24491] [client 20.215.184.141:37812] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layou.php"] [unique_id "aYee2k3f9n1Y0TpV5YZsvQAAAIY"]
[Sun Feb 08 04:21:48.404676 2026] [:error] [pid 24530:tid 24543] [client 20.215.184.141:24351] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layou.php"] [unique_id "aYee3EazNRCs1GRWrh7iXgAAAMs"]
[Sun Feb 08 04:21:49.283474 2026] [:error] [pid 24422:tid 24460] [client 20.215.184.141:32054] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lgsts.php"] [unique_id "aYee3SNNjcLoSCLKhTdvyQAAAEI"]
[Sun Feb 08 04:21:51.464707 2026] [:error] [pid 24421:tid 24455] [client 20.215.184.141:32063] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lgsts.php"] [unique_id "aYee36p7cTzhX5M1IP8CNAAAABg"]
[Sun Feb 08 04:21:52.924491 2026] [:error] [pid 24423:tid 24490] [client 20.215.184.141:23730] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lgsts.php"] [unique_id "aYee4E3f9n1Y0TpV5YZswwAAAIU"]
[Sun Feb 08 04:22:00.391514 2026] [:error] [pid 24423:tid 24489] [client 20.215.184.141:37788] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lgsts.php"] [unique_id "aYee6E3f9n1Y0TpV5YZsyAAAAIQ"]
[Sun Feb 08 04:22:02.568974 2026] [:error] [pid 24422:tid 24458] [client 20.215.184.141:37793] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tourpa.php"] [unique_id "aYee6iNNjcLoSCLKhTdv3AAAAEA"]
[Sun Feb 08 04:22:04.231083 2026] [:error] [pid 24423:tid 24492] [client 20.215.184.141:23743] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tourpa.php"] [unique_id "aYee7E3f9n1Y0TpV5YZszgAAAIc"]
[Sun Feb 08 04:22:05.375991 2026] [:error] [pid 24421:tid 24440] [client 20.215.184.141:43975] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tourpa.php"] [unique_id "aYee7ap7cTzhX5M1IP8CSwAAAAk"]
[Sun Feb 08 04:22:06.574656 2026] [:error] [pid 24530:tid 24553] [client 20.215.184.141:24371] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tourpa.php"] [unique_id "aYee7kazNRCs1GRWrh7ieQAAANU"]
[Sun Feb 08 04:22:09.475087 2026] [:error] [pid 24530:tid 24551] [client 20.215.184.141:37375] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yvtuizub.php"] [unique_id "aYee8UazNRCs1GRWrh7iggAAANM"]
[Sun Feb 08 04:22:10.557334 2026] [:error] [pid 24423:tid 24494] [client 20.215.184.141:32015] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yvtuizub.php"] [unique_id "aYee8k3f9n1Y0TpV5YZs0gAAAIk"]
[Sun Feb 08 04:22:12.120150 2026] [:error] [pid 24421:tid 24438] [client 20.215.184.141:26117] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yvtuizub.php"] [unique_id "aYee9Kp7cTzhX5M1IP8CTwAAAAc"]
[Sun Feb 08 04:22:13.745206 2026] [:error] [pid 24421:tid 24441] [client 20.215.184.141:32018] [client 20.215.184.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yvtuizub.php"] [unique_id "aYee9ap7cTzhX5M1IP8CUgAAAAo"]
[Sun Feb 08 06:19:28.590416 2026] [:error] [pid 24422:tid 24465] [client 106.54.62.156:33926] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYe6cCNNjcLoSCLKhTeZTwAAAEc"]
[Sun Feb 08 08:22:06.337901 2026] [:error] [pid 24423:tid 24508] [client 172.213.16.138:19790] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aYfXLk3f9n1Y0TpV5Ya-JwAAAJc"]
[Sun Feb 08 08:22:07.744649 2026] [:error] [pid 24421:tid 24445] [client 172.213.16.138:19825] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aYfXL6p7cTzhX5M1IP9nkAAAAA4"]
[Sun Feb 08 08:22:08.972104 2026] [:error] [pid 24421:tid 24450] [client 172.213.16.138:19827] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aYfXMKp7cTzhX5M1IP9nkQAAABM"]
[Sun Feb 08 08:22:10.330022 2026] [:error] [pid 24422:tid 24464] [client 172.213.16.138:19792] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aYfXMiNNjcLoSCLKhTfIvgAAAEY"]
[Sun Feb 08 08:22:10.916954 2026] [:error] [pid 24423:tid 24490] [client 172.213.16.138:6799] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aYfXMk3f9n1Y0TpV5Ya-LAAAAIU"]
[Sun Feb 08 08:22:11.581305 2026] [:error] [pid 24530:tid 24532] [client 172.213.16.138:6568] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aYfXM0azNRCs1GRWrh4zHAAAAMA"]
[Sun Feb 08 08:22:12.441109 2026] [:error] [pid 24422:tid 24470] [client 172.213.16.138:6581] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aYfXNCNNjcLoSCLKhTfIwwAAAEw"]
[Sun Feb 08 08:22:13.377424 2026] [:error] [pid 56906:tid 56913] [client 172.213.16.138:11771] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aYfXNfxl3WX27-WXfDj1MAAAAQU"]
[Sun Feb 08 08:22:14.184297 2026] [:error] [pid 24423:tid 24492] [client 172.213.16.138:6561] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aYfXNk3f9n1Y0TpV5Ya-LQAAAIc"]
[Sun Feb 08 08:22:14.792852 2026] [:error] [pid 56906:tid 56923] [client 172.213.16.138:6553] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aYfXNvxl3WX27-WXfDj1NQAAAQ8"]
[Sun Feb 08 08:22:15.605258 2026] [:error] [pid 24423:tid 24508] [client 172.213.16.138:6551] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aYfXN03f9n1Y0TpV5Ya-MgAAAJc"]
[Sun Feb 08 08:22:17.264004 2026] [:error] [pid 56906:tid 56915] [client 172.213.16.138:6564] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aYfXOfxl3WX27-WXfDj1PAAAAQc"]
[Sun Feb 08 08:22:18.187930 2026] [:error] [pid 56906:tid 56913] [client 172.213.16.138:19837] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aYfXOvxl3WX27-WXfDj1PgAAAQU"]
[Sun Feb 08 08:22:19.085598 2026] [:error] [pid 24423:tid 24506] [client 172.213.16.138:11723] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aYfXO03f9n1Y0TpV5Ya-NAAAAJU"]
[Sun Feb 08 08:22:20.393354 2026] [:error] [pid 24421:tid 24455] [client 172.213.16.138:6579] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aYfXPKp7cTzhX5M1IP9nogAAABg"]
[Sun Feb 08 08:22:22.182714 2026] [:error] [pid 24422:tid 24467] [client 172.213.16.138:11749] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aYfXPiNNjcLoSCLKhTfIzQAAAEk"]
[Sun Feb 08 08:22:22.898064 2026] [:error] [pid 24423:tid 24497] [client 172.213.16.138:11743] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aYfXPk3f9n1Y0TpV5Ya-PwAAAIw"]
[Sun Feb 08 08:22:24.508381 2026] [:error] [pid 24421:tid 24441] [client 172.213.16.138:11761] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aYfXQKp7cTzhX5M1IP9npgAAAAo"]
[Sun Feb 08 08:22:25.509432 2026] [:error] [pid 24422:tid 24481] [client 172.213.16.138:6578] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aYfXQSNNjcLoSCLKhTfI1gAAAFc"]
[Sun Feb 08 08:22:26.439764 2026] [:error] [pid 24422:tid 24472] [client 172.213.16.138:11752] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aYfXQiNNjcLoSCLKhTfI1wAAAE4"]
[Sun Feb 08 08:22:27.006357 2026] [:error] [pid 24421:tid 24454] [client 172.213.16.138:6529] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aYfXQ6p7cTzhX5M1IP9nrgAAABc"]
[Sun Feb 08 08:22:27.548958 2026] [:error] [pid 24422:tid 24473] [client 172.213.16.138:11735] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aYfXQyNNjcLoSCLKhTfI2wAAAE8"]
[Sun Feb 08 08:22:28.257418 2026] [:error] [pid 24530:tid 24547] [client 172.213.16.138:11714] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aYfXREazNRCs1GRWrh4zNQAAAM8"]
[Sun Feb 08 08:22:28.879884 2026] [:error] [pid 24530:tid 24550] [client 172.213.16.138:6588] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aYfXREazNRCs1GRWrh4zNgAAANI"]
[Sun Feb 08 08:22:29.382789 2026] [:error] [pid 24530:tid 24548] [client 172.213.16.138:19804] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aYfXRUazNRCs1GRWrh4zNwAAANA"]
[Sun Feb 08 08:22:29.960993 2026] [:error] [pid 24530:tid 24546] [client 172.213.16.138:11768] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aYfXRUazNRCs1GRWrh4zOAAAAM4"]
[Sun Feb 08 08:22:30.571051 2026] [:error] [pid 24423:tid 24508] [client 172.213.16.138:11763] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aYfXRk3f9n1Y0TpV5Ya-RgAAAJc"]
[Sun Feb 08 08:22:31.223200 2026] [:error] [pid 24530:tid 24544] [client 172.213.16.138:6789] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aYfXR0azNRCs1GRWrh4zOwAAAMw"]
[Sun Feb 08 08:22:31.911209 2026] [:error] [pid 24423:tid 24500] [client 172.213.16.138:11755] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aYfXR03f9n1Y0TpV5Ya-RwAAAI8"]
[Sun Feb 08 08:22:32.470715 2026] [:error] [pid 24422:tid 24468] [client 172.213.16.138:6560] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aYfXSCNNjcLoSCLKhTfI4AAAAEo"]
[Sun Feb 08 08:22:33.100688 2026] [:error] [pid 24422:tid 24473] [client 172.213.16.138:6449] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aYfXSSNNjcLoSCLKhTfI4gAAAE8"]
[Sun Feb 08 08:22:33.737702 2026] [:error] [pid 24423:tid 24488] [client 172.213.16.138:6821] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aYfXSU3f9n1Y0TpV5Ya-SwAAAIM"]
[Sun Feb 08 08:22:34.552782 2026] [:error] [pid 24421:tid 24450] [client 172.213.16.138:19833] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aYfXSqp7cTzhX5M1IP9nwAAAABM"]
[Sun Feb 08 08:22:35.042449 2026] [:error] [pid 24423:tid 24503] [client 172.213.16.138:19836] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aYfXS03f9n1Y0TpV5Ya-TQAAAJI"]
[Sun Feb 08 08:22:35.569629 2026] [:error] [pid 24530:tid 24549] [client 172.213.16.138:6785] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aYfXS0azNRCs1GRWrh4zQQAAANE"]
[Sun Feb 08 08:22:36.145750 2026] [:error] [pid 56906:tid 56920] [client 172.213.16.138:19807] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aYfXTPxl3WX27-WXfDj1VQAAAQw"]
[Sun Feb 08 08:22:36.705628 2026] [:error] [pid 56906:tid 56932] [client 172.213.16.138:11760] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aYfXTPxl3WX27-WXfDj1VwAAARg"]
[Sun Feb 08 08:22:37.280204 2026] [:error] [pid 24421:tid 24455] [client 172.213.16.138:6791] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aYfXTap7cTzhX5M1IP9nwwAAABg"]
[Sun Feb 08 08:22:37.786862 2026] [:error] [pid 24423:tid 24491] [client 172.213.16.138:6795] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aYfXTU3f9n1Y0TpV5Ya-UQAAAIY"]
[Sun Feb 08 08:22:38.435285 2026] [:error] [pid 24422:tid 24464] [client 172.213.16.138:19823] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aYfXTiNNjcLoSCLKhTfI5QAAAEY"]
[Sun Feb 08 08:22:39.079756 2026] [:error] [pid 24423:tid 24508] [client 172.213.16.138:19830] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aYfXT03f9n1Y0TpV5Ya-VAAAAJc"]
[Sun Feb 08 08:22:39.756594 2026] [:error] [pid 56906:tid 56924] [client 172.213.16.138:6544] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aYfXT_xl3WX27-WXfDj1YQAAARA"]
[Sun Feb 08 08:22:40.749222 2026] [:error] [pid 56906:tid 56913] [client 172.213.16.138:6559] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aYfXUPxl3WX27-WXfDj1ZwAAAQU"]
[Sun Feb 08 08:22:41.443024 2026] [:error] [pid 24422:tid 24466] [client 172.213.16.138:11747] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aYfXUSNNjcLoSCLKhTfI7wAAAEg"]
[Sun Feb 08 08:22:42.371115 2026] [:error] [pid 24530:tid 24551] [client 172.213.16.138:6542] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aYfXUkazNRCs1GRWrh4zRQAAANM"]
[Sun Feb 08 08:22:43.941725 2026] [:error] [pid 24421:tid 24452] [client 172.213.16.138:6793] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aYfXU6p7cTzhX5M1IP9nyQAAABU"]
[Sun Feb 08 08:22:44.509692 2026] [:error] [pid 24423:tid 24493] [client 172.213.16.138:19826] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aYfXVE3f9n1Y0TpV5Ya-WgAAAIg"]
[Sun Feb 08 08:22:45.026145 2026] [:error] [pid 24423:tid 24497] [client 172.213.16.138:19802] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aYfXVU3f9n1Y0TpV5Ya-WwAAAIw"]
[Sun Feb 08 08:22:45.719517 2026] [:error] [pid 24423:tid 24489] [client 172.213.16.138:6556] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aYfXVU3f9n1Y0TpV5Ya-XAAAAIQ"]
[Sun Feb 08 08:22:46.461524 2026] [:error] [pid 24530:tid 24535] [client 172.213.16.138:6454] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aYfXVkazNRCs1GRWrh4zTAAAAMM"]
[Sun Feb 08 08:22:47.348738 2026] [:error] [pid 24423:tid 24500] [client 172.213.16.138:11754] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aYfXV03f9n1Y0TpV5Ya-YAAAAI8"]
[Sun Feb 08 08:22:48.001136 2026] [:error] [pid 24421:tid 24454] [client 172.213.16.138:19818] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aYfXWKp7cTzhX5M1IP9nzAAAABc"]
[Sun Feb 08 08:22:48.757442 2026] [:error] [pid 24421:tid 24444] [client 172.213.16.138:19800] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aYfXWKp7cTzhX5M1IP9nzQAAAA0"]
[Sun Feb 08 08:22:49.455952 2026] [:error] [pid 24530:tid 24542] [client 172.213.16.138:19791] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aYfXWUazNRCs1GRWrh4zVwAAAMo"]
[Sun Feb 08 08:22:50.214316 2026] [:error] [pid 56906:tid 56912] [client 172.213.16.138:11721] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aYfXWvxl3WX27-WXfDj1eQAAAQQ"]
[Sun Feb 08 08:22:50.850595 2026] [:error] [pid 24422:tid 24470] [client 172.213.16.138:19787] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aYfXWiNNjcLoSCLKhTfI_wAAAEw"]
[Sun Feb 08 08:22:51.381071 2026] [:error] [pid 24530:tid 24546] [client 172.213.16.138:11769] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aYfXW0azNRCs1GRWrh4zWwAAAM4"]
[Sun Feb 08 08:22:51.920093 2026] [:error] [pid 56906:tid 56932] [client 172.213.16.138:6833] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aYfXW_xl3WX27-WXfDj1fgAAARg"]
[Sun Feb 08 08:22:52.557061 2026] [:error] [pid 56906:tid 56910] [client 172.213.16.138:6539] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aYfXXPxl3WX27-WXfDj1gwAAAQI"]
[Sun Feb 08 08:22:53.167913 2026] [:error] [pid 24422:tid 24462] [client 172.213.16.138:11713] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aYfXXSNNjcLoSCLKhTfJAwAAAEQ"]
[Sun Feb 08 08:22:53.703082 2026] [:error] [pid 24421:tid 24431] [client 172.213.16.138:6539] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aYfXXap7cTzhX5M1IP9n_AAAAAA"]
[Sun Feb 08 08:22:54.244466 2026] [:error] [pid 24530:tid 24536] [client 172.213.16.138:6404] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aYfXXkazNRCs1GRWrh4zawAAAMQ"]
[Sun Feb 08 08:22:55.300879 2026] [:error] [pid 24421:tid 24440] [client 172.213.16.138:6832] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aYfXX6p7cTzhX5M1IP9oBwAAAAk"]
[Sun Feb 08 08:22:56.006143 2026] [:error] [pid 24530:tid 24549] [client 172.213.16.138:6547] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aYfXYEazNRCs1GRWrh4zcQAAANE"]
[Sun Feb 08 08:22:57.158964 2026] [:error] [pid 24421:tid 24453] [client 172.213.16.138:19788] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aYfXYap7cTzhX5M1IP9oCgAAABY"]
[Sun Feb 08 08:22:57.865463 2026] [:error] [pid 24422:tid 24465] [client 172.213.16.138:6410] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aYfXYSNNjcLoSCLKhTfJDAAAAEc"]
[Sun Feb 08 08:22:58.343042 2026] [:error] [pid 24530:tid 24545] [client 172.213.16.138:6460] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aYfXYkazNRCs1GRWrh4zdgAAAM0"]
[Sun Feb 08 08:22:58.855920 2026] [:error] [pid 24530:tid 24552] [client 172.213.16.138:19822] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aYfXYkazNRCs1GRWrh4zeAAAANQ"]
[Sun Feb 08 08:22:59.621271 2026] [:error] [pid 24421:tid 24452] [client 172.213.16.138:11729] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYfXY6p7cTzhX5M1IP9oCwAAABU"]
[Sun Feb 08 08:23:00.887456 2026] [:error] [pid 56906:tid 56910] [client 172.213.16.138:6557] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYfXZPxl3WX27-WXfDj1sQAAAQI"]
[Sun Feb 08 08:23:01.813406 2026] [:error] [pid 24421:tid 24438] [client 172.213.16.138:6582] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYfXZap7cTzhX5M1IP9oDwAAAAc"]
[Sun Feb 08 08:23:02.706704 2026] [:error] [pid 24423:tid 24496] [client 172.213.16.138:19778] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aYfXZk3f9n1Y0TpV5Ya-gQAAAIs"]
[Sun Feb 08 08:23:03.510704 2026] [:error] [pid 24421:tid 24453] [client 172.213.16.138:19834] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYfXZ6p7cTzhX5M1IP9oFQAAABY"]
[Sun Feb 08 08:23:04.354136 2026] [:error] [pid 56906:tid 56929] [client 172.213.16.138:19783] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYfXaPxl3WX27-WXfDj1vAAAARU"]
[Sun Feb 08 08:23:05.041654 2026] [:error] [pid 24530:tid 24550] [client 172.213.16.138:6585] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYfXaUazNRCs1GRWrh4zggAAANI"]
[Sun Feb 08 08:23:05.577838 2026] [:error] [pid 56906:tid 56918] [client 172.213.16.138:11737] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aYfXafxl3WX27-WXfDj1vgAAAQo"]
[Sun Feb 08 08:23:10.845712 2026] [:error] [pid 24422:tid 24476] [client 172.213.16.138:6558] [client 172.213.16.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYfXbiNNjcLoSCLKhTfJkgAAAFI"]
[Sun Feb 08 08:23:14.721983 2026] [:error] [pid 24422:tid 24458] [client 172.213.16.138:19816] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aYfXciNNjcLoSCLKhTfJpQAAAEA"]
[Sun Feb 08 08:23:15.527666 2026] [:error] [pid 24530:tid 24535] [client 172.213.16.138:19785] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aYfXc0azNRCs1GRWrh4zmgAAAMM"]
[Sun Feb 08 08:23:16.157849 2026] [:error] [pid 24421:tid 24443] [client 172.213.16.138:7104] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aYfXdKp7cTzhX5M1IP9oRAAAAAw"]
[Sun Feb 08 08:23:16.667917 2026] [:error] [pid 24530:tid 24536] [client 172.213.16.138:11762] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aYfXdEazNRCs1GRWrh4znwAAAMQ"]
[Sun Feb 08 08:23:17.779873 2026] [:error] [pid 24421:tid 24435] [client 172.213.16.138:11726] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aYfXdap7cTzhX5M1IP9oRwAAAAQ"]
[Sun Feb 08 08:23:19.015431 2026] [:error] [pid 24422:tid 24478] [client 172.213.16.138:6837] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aYfXdyNNjcLoSCLKhTfJrQAAAFQ"]
[Sun Feb 08 08:23:19.790252 2026] [:error] [pid 24423:tid 24502] [client 172.213.16.138:19810] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aYfXd03f9n1Y0TpV5Ya-nAAAAJE"]
[Sun Feb 08 08:23:20.691730 2026] [:error] [pid 24422:tid 24458] [client 172.213.16.138:11719] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aYfXeCNNjcLoSCLKhTfJsgAAAEA"]
[Sun Feb 08 08:23:21.343802 2026] [:error] [pid 24530:tid 24539] [client 172.213.16.138:19805] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aYfXeUazNRCs1GRWrh4zoQAAAMc"]
[Sun Feb 08 08:23:21.848914 2026] [:error] [pid 24421:tid 24445] [client 172.213.16.138:11733] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aYfXeap7cTzhX5M1IP9oTwAAAA4"]
[Sun Feb 08 08:23:23.164556 2026] [:error] [pid 56906:tid 56931] [client 172.213.16.138:11759] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aYfXe_xl3WX27-WXfDj2UgAAARc"]
[Sun Feb 08 08:23:24.800402 2026] [:error] [pid 24421:tid 24439] [client 172.213.16.138:6809] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aYfXfKp7cTzhX5M1IP9oVAAAAAg"]
[Sun Feb 08 08:23:25.832721 2026] [:error] [pid 24530:tid 24544] [client 172.213.16.138:19838] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYfXfUazNRCs1GRWrh4zpQAAAMw"]
[Sun Feb 08 08:23:26.710701 2026] [:error] [pid 24530:tid 24551] [client 172.213.16.138:6576] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYfXfkazNRCs1GRWrh4zpwAAANM"]
[Sun Feb 08 08:23:27.841794 2026] [:error] [pid 56906:tid 56908] [client 172.213.16.138:11751] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYfXf_xl3WX27-WXfDj2XQAAAQA"]
[Sun Feb 08 08:23:28.661442 2026] [:error] [pid 24530:tid 24546] [client 172.213.16.138:6411] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYfXgEazNRCs1GRWrh4zrAAAAM4"]
[Sun Feb 08 08:23:29.315630 2026] [:error] [pid 24530:tid 24550] [client 172.213.16.138:6815] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aYfXgUazNRCs1GRWrh4zsAAAANI"]
[Sun Feb 08 08:23:29.905911 2026] [:error] [pid 24422:tid 24475] [client 172.213.16.138:6537] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aYfXgSNNjcLoSCLKhTfJugAAAFE"]
[Sun Feb 08 08:23:30.565751 2026] [:error] [pid 56906:tid 56927] [client 172.213.16.138:6554] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aYfXgvxl3WX27-WXfDj2YQAAARM"]
[Sun Feb 08 08:23:31.683944 2026] [:error] [pid 24421:tid 24454] [client 172.213.16.138:19814] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aYfXg6p7cTzhX5M1IP9oWAAAABc"]
[Sun Feb 08 08:23:32.568253 2026] [:error] [pid 56906:tid 56918] [client 172.213.16.138:11767] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aYfXhPxl3WX27-WXfDj2ZwAAAQo"]
[Sun Feb 08 08:23:33.314185 2026] [:error] [pid 24422:tid 24478] [client 172.213.16.138:6580] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aYfXhSNNjcLoSCLKhTfJwAAAAFQ"]
[Sun Feb 08 08:23:34.152226 2026] [:error] [pid 24422:tid 24479] [client 172.213.16.138:11746] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aYfXhiNNjcLoSCLKhTfJwwAAAFU"]
[Sun Feb 08 08:23:35.072758 2026] [:error] [pid 56906:tid 56912] [client 172.213.16.138:6671] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aYfXh_xl3WX27-WXfDj2bAAAAQQ"]
[Sun Feb 08 08:23:36.035086 2026] [:error] [pid 56906:tid 56910] [client 172.213.16.138:19780] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYfXiPxl3WX27-WXfDj2bwAAAQI"]
[Sun Feb 08 08:23:37.674825 2026] [:error] [pid 56906:tid 56927] [client 172.213.16.138:6530] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYfXifxl3WX27-WXfDj2dwAAARM"]
[Sun Feb 08 08:23:38.600337 2026] [:error] [pid 24423:tid 24498] [client 172.213.16.138:11738] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYfXik3f9n1Y0TpV5Ya-qAAAAI0"]
[Sun Feb 08 08:23:39.408806 2026] [:error] [pid 24421:tid 24446] [client 172.213.16.138:6812] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYfXi6p7cTzhX5M1IP9oZgAAAA8"]
[Sun Feb 08 08:23:40.161861 2026] [:error] [pid 56906:tid 56926] [client 172.213.16.138:6410] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aYfXjPxl3WX27-WXfDj2ewAAARI"]
[Sun Feb 08 08:23:41.930874 2026] [:error] [pid 56906:tid 56915] [client 172.213.16.138:19835] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aYfXjfxl3WX27-WXfDj2fgAAAQc"]
[Sun Feb 08 08:23:42.630483 2026] [:error] [pid 56906:tid 56931] [client 172.213.16.138:6591] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aYfXjvxl3WX27-WXfDj2gwAAARc"]
[Sun Feb 08 08:23:43.317617 2026] [:error] [pid 24421:tid 24441] [client 172.213.16.138:6803] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aYfXj6p7cTzhX5M1IP9obQAAAAo"]
[Sun Feb 08 08:23:43.974388 2026] [:error] [pid 24422:tid 24466] [client 172.213.16.138:6540] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYfXjyNNjcLoSCLKhTfJxgAAAEg"]
[Sun Feb 08 08:23:44.681302 2026] [:error] [pid 56906:tid 56913] [client 172.213.16.138:6447] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYfXkPxl3WX27-WXfDj2igAAAQU"]
[Sun Feb 08 08:23:45.639698 2026] [:error] [pid 24423:tid 24487] [client 172.213.16.138:11715] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYfXkU3f9n1Y0TpV5Ya-qQAAAII"]
[Sun Feb 08 08:23:46.243636 2026] [:error] [pid 24421:tid 24446] [client 172.213.16.138:19799] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aYfXkqp7cTzhX5M1IP9ocQAAAA8"]
[Sun Feb 08 08:23:46.812274 2026] [:error] [pid 24422:tid 24478] [client 172.213.16.138:7045] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aYfXkiNNjcLoSCLKhTfJyAAAAFQ"]
[Sun Feb 08 08:23:47.455096 2026] [:error] [pid 56906:tid 56917] [client 172.213.16.138:6432] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aYfXk_xl3WX27-WXfDj2kQAAAQk"]
[Sun Feb 08 08:23:48.221119 2026] [:error] [pid 24422:tid 24462] [client 172.213.16.138:11745] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aYfXlCNNjcLoSCLKhTfJyQAAAEQ"]
[Sun Feb 08 08:24:01.085758 2026] [:error] [pid 24421:tid 24455] [client 172.213.16.138:6550] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aYfXoap7cTzhX5M1IP9oeQAAABg"]
[Sun Feb 08 08:24:04.966484 2026] [:error] [pid 56906:tid 56922] [client 172.213.16.138:19831] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aYfXpPxl3WX27-WXfDj2vQAAAQ4"]
[Sun Feb 08 08:25:08.868342 2026] [:error] [pid 56906:tid 56930] [client 172.213.16.138:6584] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aYfX5Pxl3WX27-WXfDj3PwAAARY"]
[Sun Feb 08 08:25:28.231781 2026] [:error] [pid 24422:tid 24481] [client 172.213.16.138:19828] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aYfX-CNNjcLoSCLKhTfKOQAAAFc"]
[Sun Feb 08 08:25:38.806317 2026] [:error] [pid 24421:tid 24453] [client 172.213.16.138:6424] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aYfYAqp7cTzhX5M1IP9pCQAAABY"]
[Sun Feb 08 08:26:36.141239 2026] [:error] [pid 24421:tid 24444] [client 172.213.16.138:6543] [client 172.213.16.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYfYPKp7cTzhX5M1IP9pdAAAAA0"]
[Sun Feb 08 08:26:37.630221 2026] [:error] [pid 24422:tid 24477] [client 172.213.16.138:6541] [client 172.213.16.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYfYPSNNjcLoSCLKhTfKxwAAAFM"]
[Sun Feb 08 08:26:40.399498 2026] [:error] [pid 24423:tid 24485] [client 172.213.16.138:19786] [client 172.213.16.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYfYQE3f9n1Y0TpV5Ya_pQAAAIA"]
[Sun Feb 08 08:26:43.344687 2026] [:error] [pid 24422:tid 24477] [client 172.213.16.138:11758] [client 172.213.16.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYfYQyNNjcLoSCLKhTfK1gAAAFM"]
[Sun Feb 08 08:26:45.764140 2026] [:error] [pid 24423:tid 24509] [client 172.213.16.138:6577] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aYfYRU3f9n1Y0TpV5Ya_qwAAAJg"]
[Sun Feb 08 08:26:46.476258 2026] [:error] [pid 56906:tid 56917] [client 172.213.16.138:6569] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aYfYRvxl3WX27-WXfDj4NgAAAQk"]
[Sun Feb 08 08:26:47.370100 2026] [:error] [pid 24423:tid 24486] [client 172.213.16.138:6561] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aYfYR03f9n1Y0TpV5Ya_sgAAAIE"]
[Sun Feb 08 08:26:48.179950 2026] [:error] [pid 56906:tid 56928] [client 172.213.16.138:11725] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aYfYSPxl3WX27-WXfDj4OwAAARQ"]
[Sun Feb 08 08:26:48.884237 2026] [:error] [pid 24423:tid 24505] [client 172.213.16.138:6553] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aYfYSE3f9n1Y0TpV5Ya_tQAAAJQ"]
[Sun Feb 08 08:26:49.778628 2026] [:error] [pid 24422:tid 24476] [client 172.213.16.138:6819] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aYfYSSNNjcLoSCLKhTfK2QAAAFI"]
[Sun Feb 08 08:26:51.089806 2026] [:error] [pid 24421:tid 24436] [client 172.213.16.138:11766] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aYfYS6p7cTzhX5M1IP9pggAAAAU"]
[Sun Feb 08 08:26:51.747070 2026] [:error] [pid 24421:tid 24444] [client 172.213.16.138:6566] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aYfYS6p7cTzhX5M1IP9phAAAAA0"]
[Sun Feb 08 08:26:52.480778 2026] [:error] [pid 24421:tid 24446] [client 172.213.16.138:6567] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYfYTKp7cTzhX5M1IP9phwAAAA8"]
[Sun Feb 08 08:26:53.877802 2026] [:error] [pid 24423:tid 24490] [client 172.213.16.138:19779] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYfYTU3f9n1Y0TpV5Ya_vAAAAIU"]
[Sun Feb 08 08:26:54.742701 2026] [:error] [pid 24423:tid 24508] [client 172.213.16.138:7116] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYfYTk3f9n1Y0TpV5Ya_vwAAAJc"]
[Sun Feb 08 08:26:55.599180 2026] [:error] [pid 24422:tid 24480] [client 172.213.16.138:11754] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aYfYTyNNjcLoSCLKhTfK5AAAAFY"]
[Sun Feb 08 08:26:57.369212 2026] [:error] [pid 24421:tid 24439] [client 172.213.16.138:11763] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aYfYUap7cTzhX5M1IP9pjAAAAAg"]
[Sun Feb 08 08:26:58.582861 2026] [:error] [pid 56906:tid 56919] [client 172.213.16.138:11730] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aYfYUvxl3WX27-WXfDj4VwAAAQs"]
[Sun Feb 08 08:26:59.756401 2026] [:error] [pid 24421:tid 24437] [client 172.213.16.138:11731] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aYfYU6p7cTzhX5M1IP9pkgAAAAY"]
[Sun Feb 08 08:27:00.897812 2026] [:error] [pid 56906:tid 56915] [client 172.213.16.138:6789] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aYfYVPxl3WX27-WXfDj4XwAAAQc"]
[Sun Feb 08 08:27:01.839184 2026] [:error] [pid 24530:tid 24542] [client 172.213.16.138:6794] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aYfYVUazNRCs1GRWrh41FAAAAMo"]
[Sun Feb 08 08:27:03.093086 2026] [:error] [pid 24423:tid 24489] [client 172.213.16.138:6579] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aYfYV03f9n1Y0TpV5Ya_wwAAAIQ"]
[Sun Feb 08 08:27:03.704796 2026] [:error] [pid 24423:tid 24505] [client 172.213.16.138:6462] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aYfYV03f9n1Y0TpV5Ya_xAAAAJQ"]
[Sun Feb 08 08:27:04.807717 2026] [:error] [pid 56906:tid 56930] [client 172.213.16.138:19800] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aYfYWPxl3WX27-WXfDj4awAAARY"]
[Sun Feb 08 08:27:05.663543 2026] [:error] [pid 56906:tid 56914] [client 172.213.16.138:6414] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYfYWfxl3WX27-WXfDj4bgAAAQY"]
[Sun Feb 08 08:27:06.729139 2026] [:error] [pid 56906:tid 56922] [client 172.213.16.138:11773] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYfYWvxl3WX27-WXfDj4cQAAAQ4"]
[Sun Feb 08 08:27:07.603648 2026] [:error] [pid 56906:tid 56917] [client 172.213.16.138:11721] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYfYW_xl3WX27-WXfDj4cgAAAQk"]
[Sun Feb 08 08:27:08.475398 2026] [:error] [pid 24421:tid 24439] [client 172.213.16.138:19790] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aYfYXKp7cTzhX5M1IP9pswAAAAg"]
[Sun Feb 08 08:27:09.448082 2026] [:error] [pid 24422:tid 24481] [client 172.213.16.138:11775] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYfYXSNNjcLoSCLKhTfK8gAAAFc"]
[Sun Feb 08 08:27:10.287607 2026] [:error] [pid 24422:tid 24459] [client 172.213.16.138:11761] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYfYXiNNjcLoSCLKhTfK-gAAAEE"]
[Sun Feb 08 08:27:10.976537 2026] [:error] [pid 24422:tid 24479] [client 172.213.16.138:11772] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYfYXiNNjcLoSCLKhTfLAgAAAFU"]
[Sun Feb 08 08:27:12.630699 2026] [:error] [pid 56906:tid 56910] [client 172.213.16.138:19794] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aYfYYPxl3WX27-WXfDj4eAAAAQI"]
[Sun Feb 08 08:27:15.286684 2026] [:error] [pid 24422:tid 24475] [client 172.213.16.138:6575] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYfYYyNNjcLoSCLKhTfLDgAAAFE"]
[Sun Feb 08 08:27:16.825440 2026] [:error] [pid 24530:tid 24536] [client 172.213.16.138:6821] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYfYZEazNRCs1GRWrh41HgAAAMQ"]
[Sun Feb 08 08:27:18.075448 2026] [:error] [pid 24422:tid 24458] [client 172.213.16.138:19801] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYfYZiNNjcLoSCLKhTfLGgAAAEA"]
[Sun Feb 08 08:27:18.714128 2026] [:error] [pid 24423:tid 24500] [client 172.213.16.138:19815] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aYfYZk3f9n1Y0TpV5Ya_1wAAAI8"]
[Sun Feb 08 08:27:19.508106 2026] [:error] [pid 24530:tid 24545] [client 172.213.16.138:6529] [client 172.213.16.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYfYZ0azNRCs1GRWrh41IQAAAM0"]
[Sun Feb 08 08:27:20.053974 2026] [:error] [pid 56906:tid 56913] [client 172.213.16.138:6408] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYfYaPxl3WX27-WXfDj4ggAAAQU"]
[Sun Feb 08 08:27:21.092724 2026] [:error] [pid 24423:tid 24493] [client 172.213.16.138:19833] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYfYaU3f9n1Y0TpV5Ya_4AAAAIg"]
[Sun Feb 08 08:27:21.737290 2026] [:error] [pid 24421:tid 24443] [client 172.213.16.138:19826] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYfYaap7cTzhX5M1IP9pxQAAAAw"]
[Sun Feb 08 08:27:22.336860 2026] [:error] [pid 24530:tid 24556] [client 172.213.16.138:19829] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYfYakazNRCs1GRWrh41JgAAANg"]
[Sun Feb 08 08:27:23.008446 2026] [:error] [pid 56906:tid 56914] [client 172.213.16.138:11735] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYfYa_xl3WX27-WXfDj4iwAAAQY"]
[Sun Feb 08 08:27:24.116637 2026] [:error] [pid 24422:tid 24468] [client 172.213.16.138:6420] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYfYbCNNjcLoSCLKhTfLHwAAAEo"]
[Sun Feb 08 08:27:24.905346 2026] [:error] [pid 24421:tid 24450] [client 172.213.16.138:7043] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYfYbKp7cTzhX5M1IP9pygAAABM"]
[Sun Feb 08 08:27:25.835844 2026] [:error] [pid 24530:tid 24540] [client 172.213.16.138:19788] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYfYbUazNRCs1GRWrh41LwAAAMg"]
[Sun Feb 08 08:27:26.863213 2026] [:error] [pid 24421:tid 24445] [client 172.213.16.138:19818] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYfYbqp7cTzhX5M1IP9pzwAAAA4"]
[Sun Feb 08 08:27:27.965388 2026] [:error] [pid 24422:tid 24478] [client 172.213.16.138:19827] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYfYbyNNjcLoSCLKhTfLJgAAAFQ"]
[Sun Feb 08 08:27:28.815150 2026] [:error] [pid 24530:tid 24546] [client 172.213.16.138:19776] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYfYcEazNRCs1GRWrh41NQAAAM4"]
[Sun Feb 08 08:27:30.045658 2026] [:error] [pid 24530:tid 24536] [client 172.213.16.138:19778] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYfYckazNRCs1GRWrh41OAAAAMQ"]
[Sun Feb 08 08:27:30.543632 2026] [:error] [pid 24423:tid 24494] [client 172.213.16.138:6531] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYfYck3f9n1Y0TpV5Ya_7AAAAIk"]
[Sun Feb 08 08:27:31.158745 2026] [:error] [pid 24423:tid 24486] [client 172.213.16.138:6588] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYfYc03f9n1Y0TpV5Ya_7gAAAIE"]
[Sun Feb 08 08:27:31.845085 2026] [:error] [pid 24422:tid 24459] [client 172.213.16.138:19796] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYfYcyNNjcLoSCLKhTfLJwAAAEE"]
[Sun Feb 08 08:27:32.454329 2026] [:error] [pid 24530:tid 24555] [client 172.213.16.138:6589] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYfYdEazNRCs1GRWrh41PAAAANc"]
[Sun Feb 08 08:27:33.071338 2026] [:error] [pid 24421:tid 24453] [client 172.213.16.138:11760] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYfYdap7cTzhX5M1IP9p2wAAABY"]
[Sun Feb 08 08:27:33.593766 2026] [:error] [pid 24530:tid 24546] [client 172.213.16.138:6544] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYfYdUazNRCs1GRWrh41QQAAAM4"]
[Sun Feb 08 08:27:34.175261 2026] [:error] [pid 56906:tid 56918] [client 172.213.16.138:6536] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYfYdvxl3WX27-WXfDj4pgAAAQo"]
[Sun Feb 08 08:27:35.103693 2026] [:error] [pid 24421:tid 24442] [client 172.213.16.138:6409] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYfYd6p7cTzhX5M1IP9p3QAAAAs"]
[Sun Feb 08 08:27:35.756257 2026] [:error] [pid 56906:tid 56914] [client 172.213.16.138:11768] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYfYd_xl3WX27-WXfDj4qwAAAQY"]
[Sun Feb 08 08:27:36.418478 2026] [:error] [pid 24423:tid 24507] [client 172.213.16.138:19817] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYfYeE3f9n1Y0TpV5Ya_8gAAAJY"]
[Sun Feb 08 08:27:37.009296 2026] [:error] [pid 24422:tid 24464] [client 172.213.16.138:11722] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYfYeSNNjcLoSCLKhTfLKwAAAEY"]
[Sun Feb 08 08:27:37.660840 2026] [:error] [pid 56906:tid 56921] [client 172.213.16.138:11732] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYfYefxl3WX27-WXfDj4tgAAAQ0"]
[Sun Feb 08 08:27:38.415356 2026] [:error] [pid 56906:tid 56923] [client 172.213.16.138:6568] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aYfYevxl3WX27-WXfDj4uAAAAQ8"]
[Sun Feb 08 08:27:39.246559 2026] [:error] [pid 24422:tid 24466] [client 172.213.16.138:6787] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aYfYeyNNjcLoSCLKhTfLLQAAAEg"]
[Sun Feb 08 08:27:39.913695 2026] [:error] [pid 24421:tid 24431] [client 172.213.16.138:19787] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aYfYe6p7cTzhX5M1IP9p5gAAAAA"]
[Sun Feb 08 08:27:40.674335 2026] [:error] [pid 56906:tid 56913] [client 172.213.16.138:6796] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aYfYfPxl3WX27-WXfDj4xQAAAQU"]
[Sun Feb 08 08:27:41.833979 2026] [:error] [pid 24421:tid 24442] [client 172.213.16.138:11714] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aYfYfap7cTzhX5M1IP9p6AAAAAs"]
[Sun Feb 08 08:27:42.570096 2026] [:error] [pid 24423:tid 24486] [client 172.213.16.138:6571] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aYfYfk3f9n1Y0TpV5Ya_-gAAAIE"]
[Sun Feb 08 08:27:44.011996 2026] [:error] [pid 24530:tid 24536] [client 172.213.16.138:11765] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aYfYgEazNRCs1GRWrh41TAAAAMQ"]
[Sun Feb 08 08:27:44.580684 2026] [:error] [pid 24421:tid 24445] [client 172.213.16.138:19811] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aYfYgKp7cTzhX5M1IP9p6wAAAA4"]
[Sun Feb 08 08:27:46.678514 2026] [:error] [pid 24422:tid 24467] [client 172.213.16.138:6797] [client 172.213.16.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYfYgiNNjcLoSCLKhTfLPgAAAEk"]
[Sun Feb 08 08:27:47.207595 2026] [:error] [pid 24530:tid 24550] [client 172.213.16.138:11770] [client 172.213.16.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYfYg0azNRCs1GRWrh41UgAAANI"]
[Sun Feb 08 08:27:53.413780 2026] [:error] [pid 56906:tid 56909] [client 172.213.16.138:11748] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aYfYifxl3WX27-WXfDj5AgAAAQE"]
[Sun Feb 08 08:27:53.998975 2026] [:error] [pid 24421:tid 24447] [client 172.213.16.138:19785] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aYfYiap7cTzhX5M1IP9qCQAAABA"]
[Sun Feb 08 08:27:54.757541 2026] [:error] [pid 24421:tid 24439] [client 172.213.16.138:6557] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aYfYiqp7cTzhX5M1IP9qCwAAAAg"]
[Sun Feb 08 08:27:55.366482 2026] [:error] [pid 24421:tid 24445] [client 172.213.16.138:6556] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aYfYi6p7cTzhX5M1IP9qDAAAAA4"]
[Sun Feb 08 08:27:56.003719 2026] [:error] [pid 24423:tid 24508] [client 172.213.16.138:11726] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aYfYjE3f9n1Y0TpV5YbABwAAAJc"]
[Sun Feb 08 08:27:56.534742 2026] [:error] [pid 56906:tid 56922] [client 172.213.16.138:19797] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aYfYjPxl3WX27-WXfDj5BwAAAQ4"]
[Sun Feb 08 08:27:57.081796 2026] [:error] [pid 24530:tid 24540] [client 172.213.16.138:11712] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aYfYjUazNRCs1GRWrh41awAAAMg"]
[Sun Feb 08 08:27:57.736706 2026] [:error] [pid 24423:tid 24509] [client 172.213.16.138:6415] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aYfYjU3f9n1Y0TpV5YbAEAAAAJg"]
[Sun Feb 08 08:27:58.470199 2026] [:error] [pid 24421:tid 24444] [client 172.213.16.138:6452] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aYfYjqp7cTzhX5M1IP9qEwAAAA0"]
[Sun Feb 08 08:27:59.234114 2026] [:error] [pid 24423:tid 24485] [client 172.213.16.138:6801] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aYfYj03f9n1Y0TpV5YbAFwAAAIA"]
[Sun Feb 08 08:27:59.776885 2026] [:error] [pid 24421:tid 24449] [client 172.213.16.138:11745] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aYfYj6p7cTzhX5M1IP9qFgAAABI"]
[Sun Feb 08 08:28:00.482485 2026] [:error] [pid 56906:tid 56916] [client 172.213.16.138:19819] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aYfYkPxl3WX27-WXfDj5DgAAAQg"]
[Sun Feb 08 08:28:01.037303 2026] [:error] [pid 24530:tid 24541] [client 172.213.16.138:6792] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aYfYkUazNRCs1GRWrh41bwAAAMk"]
[Sun Feb 08 08:28:01.543803 2026] [:error] [pid 24422:tid 24471] [client 172.213.16.138:6542] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aYfYkSNNjcLoSCLKhTfLRgAAAE0"]
[Sun Feb 08 08:28:02.386189 2026] [:error] [pid 56906:tid 56928] [client 172.213.16.138:11756] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aYfYkvxl3WX27-WXfDj5FQAAARQ"]
[Sun Feb 08 08:28:02.936502 2026] [:error] [pid 24421:tid 24441] [client 172.213.16.138:6582] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aYfYkqp7cTzhX5M1IP9qGwAAAAo"]
[Sun Feb 08 08:28:03.811761 2026] [:error] [pid 24422:tid 24459] [client 172.213.16.138:7132] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aYfYkyNNjcLoSCLKhTfLSQAAAEE"]
[Sun Feb 08 08:28:04.720000 2026] [:error] [pid 24421:tid 24439] [client 172.213.16.138:11753] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aYfYlKp7cTzhX5M1IP9qHwAAAAg"]
[Sun Feb 08 08:28:05.652965 2026] [:error] [pid 24422:tid 24469] [client 172.213.16.138:6537] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aYfYlSNNjcLoSCLKhTfLTAAAAEs"]
[Sun Feb 08 08:28:06.541291 2026] [:error] [pid 24421:tid 24448] [client 172.213.16.138:6834] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aYfYlqp7cTzhX5M1IP9qIgAAABE"]
[Sun Feb 08 08:28:07.623749 2026] [:error] [pid 24421:tid 24433] [client 172.213.16.138:19837] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aYfYl6p7cTzhX5M1IP9qIwAAAAI"]
[Sun Feb 08 08:28:08.747913 2026] [:error] [pid 24422:tid 24478] [client 172.213.16.138:11713] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aYfYmCNNjcLoSCLKhTfLUgAAAFQ"]
[Sun Feb 08 08:28:10.635131 2026] [:error] [pid 56906:tid 56911] [client 172.213.16.138:7135] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aYfYmvxl3WX27-WXfDj5KQAAAQM"]
[Sun Feb 08 08:28:13.048452 2026] [:error] [pid 56906:tid 56917] [client 172.213.16.138:6554] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aYfYnfxl3WX27-WXfDj5NgAAAQk"]
[Sun Feb 08 08:28:15.020155 2026] [:error] [pid 56906:tid 56917] [client 172.213.16.138:6793] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aYfYn_xl3WX27-WXfDj5QgAAAQk"]
[Sun Feb 08 08:28:16.553564 2026] [:error] [pid 24530:tid 24536] [client 172.213.16.138:6791] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aYfYoEazNRCs1GRWrh41gAAAAMQ"]
[Sun Feb 08 08:28:17.497854 2026] [:error] [pid 24423:tid 24491] [client 172.213.16.138:6587] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aYfYoU3f9n1Y0TpV5YbAJgAAAIY"]
[Sun Feb 08 08:28:18.450850 2026] [:error] [pid 24530:tid 24534] [client 172.213.16.138:6552] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aYfYokazNRCs1GRWrh41ggAAAMI"]
[Sun Feb 08 08:28:19.583848 2026] [:error] [pid 24423:tid 24490] [client 172.213.16.138:11749] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aYfYo03f9n1Y0TpV5YbAKwAAAIU"]
[Sun Feb 08 08:28:20.981051 2026] [:error] [pid 24421:tid 24455] [client 172.213.16.138:19809] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aYfYpKp7cTzhX5M1IP9qMQAAABg"]
[Sun Feb 08 08:28:21.803974 2026] [:error] [pid 24530:tid 24551] [client 172.213.16.138:19825] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aYfYpUazNRCs1GRWrh41gwAAANM"]
[Sun Feb 08 08:28:22.548518 2026] [:error] [pid 24421:tid 24447] [client 172.213.16.138:19803] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aYfYpqp7cTzhX5M1IP9qNQAAABA"]
[Sun Feb 08 08:28:23.152442 2026] [:error] [pid 24421:tid 24439] [client 172.213.16.138:6662] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aYfYp6p7cTzhX5M1IP9qNgAAAAg"]
[Sun Feb 08 08:28:23.833415 2026] [:error] [pid 24530:tid 24548] [client 172.213.16.138:6795] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aYfYp0azNRCs1GRWrh41hwAAANA"]
[Sun Feb 08 08:28:24.618349 2026] [:error] [pid 24421:tid 24442] [client 172.213.16.138:11723] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aYfYqKp7cTzhX5M1IP9qOQAAAAs"]
[Sun Feb 08 08:28:25.227426 2026] [:error] [pid 24421:tid 24455] [client 172.213.16.138:7106] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aYfYqap7cTzhX5M1IP9qPQAAABg"]
[Sun Feb 08 08:28:25.830372 2026] [:error] [pid 24423:tid 24502] [client 172.213.16.138:6825] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aYfYqU3f9n1Y0TpV5YbANgAAAJE"]
[Sun Feb 08 08:28:26.400063 2026] [:error] [pid 24423:tid 24507] [client 172.213.16.138:11767] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aYfYqk3f9n1Y0TpV5YbAOAAAAJY"]
[Sun Feb 08 08:28:27.011668 2026] [:error] [pid 24530:tid 24549] [client 172.213.16.138:6823] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aYfYq0azNRCs1GRWrh41jwAAANE"]
[Sun Feb 08 08:28:27.583798 2026] [:error] [pid 24530:tid 24553] [client 172.213.16.138:6530] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aYfYq0azNRCs1GRWrh41kQAAANU"]
[Sun Feb 08 08:28:28.327891 2026] [:error] [pid 24422:tid 24479] [client 172.213.16.138:6546] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aYfYrCNNjcLoSCLKhTfLawAAAFU"]
[Sun Feb 08 08:28:29.796954 2026] [:error] [pid 24423:tid 24508] [client 172.213.16.138:6540] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aYfYrU3f9n1Y0TpV5YbARAAAAJc"]
[Sun Feb 08 08:28:30.313003 2026] [:error] [pid 56906:tid 56930] [client 172.213.16.138:19814] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aYfYrvxl3WX27-WXfDj5XgAAARY"]
[Sun Feb 08 08:28:30.947216 2026] [:error] [pid 24423:tid 24500] [client 172.213.16.138:6417] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aYfYrk3f9n1Y0TpV5YbASAAAAI8"]
[Sun Feb 08 08:28:32.144147 2026] [:error] [pid 24423:tid 24499] [client 172.213.16.138:6528] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYfYsE3f9n1Y0TpV5YbASwAAAI4"]
[Sun Feb 08 08:28:32.894000 2026] [:error] [pid 56906:tid 56911] [client 172.213.16.138:11734] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYfYsPxl3WX27-WXfDj5YwAAAQM"]
[Sun Feb 08 08:28:33.425384 2026] [:error] [pid 56906:tid 56918] [client 172.213.16.138:11724] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYfYsfxl3WX27-WXfDj5ZgAAAQo"]
[Sun Feb 08 08:28:34.247444 2026] [:error] [pid 24422:tid 24462] [client 172.213.16.138:7111] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYfYsiNNjcLoSCLKhTfLbwAAAEQ"]
[Sun Feb 08 08:28:35.151351 2026] [:error] [pid 24530:tid 24545] [client 172.213.16.138:19834] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aYfYs0azNRCs1GRWrh41mAAAAM0"]
[Sun Feb 08 08:28:36.967755 2026] [:error] [pid 56906:tid 56911] [client 172.213.16.138:7119] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aYfYtPxl3WX27-WXfDj5cAAAAQM"]
[Sun Feb 08 08:28:38.894318 2026] [:error] [pid 24530:tid 24532] [client 172.213.16.138:6820] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aYfYtkazNRCs1GRWrh41ngAAAMA"]
[Sun Feb 08 08:28:40.020392 2026] [:error] [pid 24421:tid 24442] [client 172.213.16.138:19798] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aYfYuKp7cTzhX5M1IP9qUgAAAAs"]
[Sun Feb 08 08:28:41.321591 2026] [:error] [pid 24423:tid 24509] [client 172.213.16.138:7139] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aYfYuU3f9n1Y0TpV5YbAUwAAAJg"]
[Sun Feb 08 08:28:42.245413 2026] [:error] [pid 56906:tid 56913] [client 172.213.16.138:6570] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aYfYuvxl3WX27-WXfDj5eAAAAQU"]
[Sun Feb 08 08:28:43.220653 2026] [:error] [pid 24423:tid 24501] [client 172.213.16.138:7164] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aYfYu03f9n1Y0TpV5YbAVQAAAJA"]
[Sun Feb 08 08:28:44.230816 2026] [:error] [pid 24423:tid 24494] [client 172.213.16.138:6425] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aYfYvE3f9n1Y0TpV5YbAVwAAAIk"]
[Sun Feb 08 08:28:44.825076 2026] [:error] [pid 24422:tid 24472] [client 172.213.16.138:19839] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aYfYvCNNjcLoSCLKhTfLcwAAAE4"]
[Sun Feb 08 08:28:45.557972 2026] [:error] [pid 24422:tid 24476] [client 172.213.16.138:11727] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aYfYvSNNjcLoSCLKhTfLdAAAAFI"]
[Sun Feb 08 08:28:46.472921 2026] [:error] [pid 24530:tid 24541] [client 172.213.16.138:19835] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aYfYvkazNRCs1GRWrh41qgAAAMk"]
[Sun Feb 08 08:28:47.030618 2026] [:error] [pid 24422:tid 24458] [client 172.213.16.138:11740] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aYfYvyNNjcLoSCLKhTfLdwAAAEA"]
[Sun Feb 08 08:28:48.777555 2026] [:error] [pid 56906:tid 56932] [client 172.213.16.138:6784] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aYfYwPxl3WX27-WXfDj5ewAAARg"]
[Sun Feb 08 08:28:49.664483 2026] [:error] [pid 24422:tid 24466] [client 172.213.16.138:6402] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aYfYwSNNjcLoSCLKhTfLfwAAAEg"]
[Sun Feb 08 08:28:50.629034 2026] [:error] [pid 24421:tid 24451] [client 172.213.16.138:19806] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aYfYwqp7cTzhX5M1IP9qXwAAABQ"]
[Sun Feb 08 08:28:51.313032 2026] [:error] [pid 24530:tid 24554] [client 172.213.16.138:6855] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aYfYw0azNRCs1GRWrh41rgAAANY"]
[Sun Feb 08 08:28:52.174319 2026] [:error] [pid 24530:tid 24533] [client 172.213.16.138:6560] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aYfYxEazNRCs1GRWrh41sAAAAME"]
[Sun Feb 08 08:29:02.230727 2026] [:error] [pid 24530:tid 24549] [client 172.213.16.138:19780] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aYfYzkazNRCs1GRWrh41xwAAANE"]
[Sun Feb 08 08:29:03.626450 2026] [:error] [pid 56906:tid 56921] [client 172.213.16.138:6559] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aYfYz_xl3WX27-WXfDj5mQAAAQ0"]
[Sun Feb 08 08:29:04.201656 2026] [:error] [pid 24422:tid 24471] [client 172.213.16.138:11739] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aYfY0CNNjcLoSCLKhTfLlgAAAE0"]
[Sun Feb 08 08:29:05.054647 2026] [:error] [pid 24422:tid 24477] [client 172.213.16.138:7149] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aYfY0SNNjcLoSCLKhTfLmgAAAFM"]
[Sun Feb 08 08:29:06.105169 2026] [:error] [pid 56906:tid 56924] [client 172.213.16.138:6836] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aYfY0vxl3WX27-WXfDj5oQAAARA"]
[Sun Feb 08 08:29:07.054565 2026] [:error] [pid 24422:tid 24458] [client 172.213.16.138:6583] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aYfY0yNNjcLoSCLKhTfLngAAAEA"]
[Sun Feb 08 08:29:08.854355 2026] [:error] [pid 24421:tid 24441] [client 172.213.16.138:11717] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aYfY1Kp7cTzhX5M1IP9qbwAAAAo"]
[Sun Feb 08 08:29:09.915396 2026] [:error] [pid 24421:tid 24453] [client 172.213.16.138:19783] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aYfY1ap7cTzhX5M1IP9qcQAAABY"]
[Sun Feb 08 08:29:10.818038 2026] [:error] [pid 24421:tid 24440] [client 172.213.16.138:6565] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aYfY1qp7cTzhX5M1IP9qdAAAAAk"]
[Sun Feb 08 08:29:11.829875 2026] [:error] [pid 24421:tid 24446] [client 172.213.16.138:19832] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aYfY16p7cTzhX5M1IP9qfAAAAA8"]
[Sun Feb 08 08:29:12.797634 2026] [:error] [pid 24421:tid 24441] [client 172.213.16.138:19781] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aYfY2Kp7cTzhX5M1IP9qfgAAAAo"]
[Sun Feb 08 08:29:13.558018 2026] [:error] [pid 56906:tid 56922] [client 172.213.16.138:6786] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aYfY2fxl3WX27-WXfDj5pQAAAQ4"]
[Sun Feb 08 08:29:14.764735 2026] [:error] [pid 24422:tid 24471] [client 172.213.16.138:6806] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aYfY2iNNjcLoSCLKhTfLqgAAAE0"]
[Sun Feb 08 08:29:15.386562 2026] [:error] [pid 24422:tid 24460] [client 172.213.16.138:6586] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aYfY2yNNjcLoSCLKhTfLqwAAAEI"]
[Sun Feb 08 08:29:16.483065 2026] [:error] [pid 24422:tid 24475] [client 172.213.16.138:11764] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aYfY3CNNjcLoSCLKhTfLrQAAAFE"]
[Sun Feb 08 08:29:17.599615 2026] [:error] [pid 24421:tid 24434] [client 172.213.16.138:19816] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aYfY3ap7cTzhX5M1IP9qkAAAAAM"]
[Sun Feb 08 08:29:18.376242 2026] [:error] [pid 56906:tid 56925] [client 172.213.16.138:6551] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aYfY3vxl3WX27-WXfDj5qwAAARE"]
[Sun Feb 08 08:29:18.906622 2026] [:error] [pid 56906:tid 56909] [client 172.213.16.138:6590] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aYfY3vxl3WX27-WXfDj5rQAAAQE"]
[Sun Feb 08 08:29:20.101969 2026] [:error] [pid 56906:tid 56929] [client 172.213.16.138:6808] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aYfY4Pxl3WX27-WXfDj5sgAAARU"]
[Sun Feb 08 08:29:20.839669 2026] [:error] [pid 56906:tid 56932] [client 172.213.16.138:6443] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aYfY4Pxl3WX27-WXfDj5tgAAARg"]
[Sun Feb 08 08:29:21.484598 2026] [:error] [pid 24530:tid 24553] [client 172.213.16.138:6534] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aYfY4UazNRCs1GRWrh413gAAANU"]
[Sun Feb 08 08:29:22.093532 2026] [:error] [pid 56906:tid 56931] [client 172.213.16.138:19821] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aYfY4vxl3WX27-WXfDj5ugAAARc"]
[Sun Feb 08 08:29:22.625746 2026] [:error] [pid 56906:tid 56915] [client 172.213.16.138:6580] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aYfY4vxl3WX27-WXfDj5vwAAAQc"]
[Sun Feb 08 08:29:23.129083 2026] [:error] [pid 24421:tid 24440] [client 172.213.16.138:6837] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aYfY46p7cTzhX5M1IP9qqgAAAAk"]
[Sun Feb 08 08:29:23.656764 2026] [:error] [pid 56906:tid 56911] [client 172.213.16.138:6457] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aYfY4_xl3WX27-WXfDj5wQAAAQM"]
[Sun Feb 08 08:29:24.281782 2026] [:error] [pid 56906:tid 56932] [client 172.213.16.138:6550] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aYfY5Pxl3WX27-WXfDj5xQAAARg"]
[Sun Feb 08 08:29:24.848399 2026] [:error] [pid 56906:tid 56922] [client 172.213.16.138:6401] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aYfY5Pxl3WX27-WXfDj5yAAAAQ4"]
[Sun Feb 08 08:29:25.416987 2026] [:error] [pid 24422:tid 24482] [client 172.213.16.138:6802] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aYfY5SNNjcLoSCLKhTfLtQAAAFg"]
[Sun Feb 08 08:29:25.994612 2026] [:error] [pid 24422:tid 24478] [client 172.213.16.138:6447] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aYfY5SNNjcLoSCLKhTfLuQAAAFQ"]
[Sun Feb 08 08:29:26.612207 2026] [:error] [pid 24421:tid 24434] [client 172.213.16.138:6585] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aYfY5qp7cTzhX5M1IP9qugAAAAM"]
[Sun Feb 08 08:29:27.732918 2026] [:error] [pid 56906:tid 56920] [client 172.213.16.138:11747] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aYfY5_xl3WX27-WXfDj5zwAAAQw"]
[Sun Feb 08 08:29:28.544737 2026] [:error] [pid 24421:tid 24431] [client 172.213.16.138:6407] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aYfY6Kp7cTzhX5M1IP9qxQAAAAA"]
[Sun Feb 08 08:29:29.538527 2026] [:error] [pid 56906:tid 56908] [client 172.213.16.138:6558] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aYfY6fxl3WX27-WXfDj51AAAAQA"]
[Sun Feb 08 08:29:31.094088 2026] [:error] [pid 24422:tid 24461] [client 172.213.16.138:6451] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aYfY6yNNjcLoSCLKhTfLvgAAAEM"]
[Sun Feb 08 08:29:32.075421 2026] [:error] [pid 24422:tid 24468] [client 172.213.16.138:7144] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aYfY7CNNjcLoSCLKhTfLvwAAAEo"]
[Sun Feb 08 08:29:32.780635 2026] [:error] [pid 56906:tid 56912] [client 172.213.16.138:6785] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aYfY7Pxl3WX27-WXfDj53QAAAQQ"]
[Sun Feb 08 08:29:33.573598 2026] [:error] [pid 24422:tid 24472] [client 172.213.16.138:6715] [client 172.213.16.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aYfY7SNNjcLoSCLKhTfLwQAAAE4"]
[Sun Feb 08 08:29:34.896848 2026] [:error] [pid 24423:tid 24494] [client 172.213.16.138:19782] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aYfY7k3f9n1Y0TpV5YbAhgAAAIk"]
[Sun Feb 08 08:29:35.937882 2026] [:error] [pid 24530:tid 24536] [client 172.213.16.138:11737] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aYfY70azNRCs1GRWrh416AAAAMQ"]
[Sun Feb 08 08:29:36.506265 2026] [:error] [pid 24530:tid 24546] [client 172.213.16.138:6423] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aYfY8EazNRCs1GRWrh416QAAAM4"]
[Sun Feb 08 08:29:37.054942 2026] [:error] [pid 24422:tid 24468] [client 172.213.16.138:19808] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/gravity_forms/g/e/e/a/Casper.php"] [unique_id "aYfY8SNNjcLoSCLKhTfLyQAAAEo"]
[Sun Feb 08 08:29:37.703428 2026] [:error] [pid 24530:tid 24551] [client 172.213.16.138:7050] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spip.php"] [unique_id "aYfY8UazNRCs1GRWrh416wAAANM"]
[Sun Feb 08 08:29:38.265918 2026] [:error] [pid 24423:tid 24498] [client 172.213.16.138:11755] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spip.php"] [unique_id "aYfY8k3f9n1Y0TpV5YbAjQAAAI0"]
[Sun Feb 08 08:29:39.326238 2026] [:error] [pid 24421:tid 24439] [client 172.213.16.138:7110] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spip.php"] [unique_id "aYfY86p7cTzhX5M1IP9q_AAAAAg"]
[Sun Feb 08 08:29:39.955529 2026] [:error] [pid 56906:tid 56923] [client 172.213.16.138:11771] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spip.php"] [unique_id "aYfY8_xl3WX27-WXfDj55AAAAQ8"]
[Sun Feb 08 08:29:40.481032 2026] [:error] [pid 24422:tid 24472] [client 172.213.16.138:6572] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scripts/wpup.php"] [unique_id "aYfY9CNNjcLoSCLKhTfLywAAAE4"]
[Sun Feb 08 08:29:41.079851 2026] [:error] [pid 56906:tid 56920] [client 172.213.16.138:11757] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scripts/wpup.php"] [unique_id "aYfY9fxl3WX27-WXfDj55gAAAQw"]
[Sun Feb 08 08:29:41.643479 2026] [:error] [pid 24422:tid 24476] [client 172.213.16.138:6824] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scripts/wpup.php"] [unique_id "aYfY9SNNjcLoSCLKhTfLzgAAAFI"]
[Sun Feb 08 08:29:42.229636 2026] [:error] [pid 24422:tid 24458] [client 172.213.16.138:19830] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scripts/wpup.php"] [unique_id "aYfY9iNNjcLoSCLKhTfLzwAAAEA"]
[Sun Feb 08 08:29:42.723903 2026] [:error] [pid 24421:tid 24446] [client 172.213.16.138:6426] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aYfY9qp7cTzhX5M1IP9rDwAAAA8"]
[Sun Feb 08 08:29:43.304872 2026] [:error] [pid 56906:tid 56920] [client 172.213.16.138:11762] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aYfY9_xl3WX27-WXfDj5-QAAAQw"]
[Sun Feb 08 08:29:43.831435 2026] [:error] [pid 24421:tid 24431] [client 172.213.16.138:11729] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aYfY96p7cTzhX5M1IP9rIwAAAAA"]
[Sun Feb 08 08:29:44.386236 2026] [:error] [pid 24530:tid 24541] [client 172.213.16.138:6814] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/update/wpupex.php"] [unique_id "aYfY-EazNRCs1GRWrh41_AAAAMk"]
[Sun Feb 08 08:29:45.178749 2026] [:error] [pid 24421:tid 24446] [client 172.213.16.138:6811] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ho/wpup.php"] [unique_id "aYfY-ap7cTzhX5M1IP9rJQAAAA8"]
[Sun Feb 08 08:29:46.051651 2026] [:error] [pid 24423:tid 24490] [client 172.213.16.138:7159] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ho/wpup.php"] [unique_id "aYfY-k3f9n1Y0TpV5YbApAAAAIU"]
[Sun Feb 08 08:29:46.728340 2026] [:error] [pid 24421:tid 24455] [client 172.213.16.138:6412] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ho/wpup.php"] [unique_id "aYfY-qp7cTzhX5M1IP9rKQAAABg"]
[Sun Feb 08 08:29:47.230035 2026] [:error] [pid 24530:tid 24547] [client 172.213.16.138:6545] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ho/wpup.php"] [unique_id "aYfY-0azNRCs1GRWrh42AwAAAM8"]
[Sun Feb 08 08:29:47.886150 2026] [:error] [pid 24530:tid 24539] [client 172.213.16.138:7167] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/"] [unique_id "aYfY-0azNRCs1GRWrh42BQAAAMc"]
[Sun Feb 08 08:29:48.402401 2026] [:error] [pid 56906:tid 56917] [client 172.213.16.138:6549] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/"] [unique_id "aYfY_Pxl3WX27-WXfDj6BAAAAQk"]
[Sun Feb 08 08:29:49.038915 2026] [:error] [pid 24530:tid 24536] [client 172.213.16.138:6809] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/"] [unique_id "aYfY_UazNRCs1GRWrh42CgAAAMQ"]
[Sun Feb 08 08:29:49.629787 2026] [:error] [pid 24530:tid 24541] [client 172.213.16.138:19799] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/"] [unique_id "aYfY_UazNRCs1GRWrh42DQAAAMk"]
[Sun Feb 08 08:29:50.306805 2026] [:error] [pid 24530:tid 24548] [client 172.213.16.138:11751] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aYfY_kazNRCs1GRWrh42DwAAANA"]
[Sun Feb 08 08:29:51.213010 2026] [:error] [pid 56906:tid 56921] [client 172.213.16.138:6800] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aYfY__xl3WX27-WXfDj6CQAAAQ0"]
[Sun Feb 08 08:29:51.844174 2026] [:error] [pid 56906:tid 56909] [client 172.213.16.138:7131] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aYfY__xl3WX27-WXfDj6DAAAAQE"]
[Sun Feb 08 08:29:52.402950 2026] [:error] [pid 24423:tid 24500] [client 172.213.16.138:6533] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-content/plugins/classic-editor/js/geido.php"] [unique_id "aYfZAE3f9n1Y0TpV5YbAvQAAAI8"]
[Sun Feb 08 08:29:53.024644 2026] [:error] [pid 24423:tid 24488] [client 172.213.16.138:6695] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myy.php"] [unique_id "aYfZAU3f9n1Y0TpV5YbAwwAAAIM"]
[Sun Feb 08 08:29:53.691545 2026] [:error] [pid 24423:tid 24493] [client 172.213.16.138:7124] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myy.php"] [unique_id "aYfZAU3f9n1Y0TpV5YbAyQAAAIg"]
[Sun Feb 08 08:29:54.769097 2026] [:error] [pid 56906:tid 56912] [client 172.213.16.138:6790] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myy.php"] [unique_id "aYfZAvxl3WX27-WXfDj6GwAAAQQ"]
[Sun Feb 08 08:29:55.459103 2026] [:error] [pid 24421:tid 24442] [client 172.213.16.138:7089] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myy.php"] [unique_id "aYfZA6p7cTzhX5M1IP9rNgAAAAs"]
[Sun Feb 08 08:29:56.291751 2026] [:error] [pid 24421:tid 24448] [client 172.213.16.138:7150] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/halo.php"] [unique_id "aYfZBKp7cTzhX5M1IP9rNwAAABE"]
[Sun Feb 08 08:29:57.547493 2026] [:error] [pid 24421:tid 24453] [client 172.213.16.138:7064] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/halo.php"] [unique_id "aYfZBap7cTzhX5M1IP9rOgAAABY"]
[Sun Feb 08 08:29:58.426965 2026] [:error] [pid 56906:tid 56926] [client 172.213.16.138:7136] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/halo.php"] [unique_id "aYfZBvxl3WX27-WXfDj6IgAAARI"]
[Sun Feb 08 08:29:59.536595 2026] [:error] [pid 24421:tid 24452] [client 172.213.16.138:6459] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/halo.php"] [unique_id "aYfZB6p7cTzhX5M1IP9rQgAAABU"]
[Sun Feb 08 08:30:00.423494 2026] [:error] [pid 56906:tid 56920] [client 172.213.16.138:19789] [client 172.213.16.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfour/assets/css/geido.php"] [unique_id "aYfZCPxl3WX27-WXfDj6JgAAAQw"]
[Sun Feb 08 08:30:03.220078 2026] [:error] [pid 24423:tid 24488] [client 172.213.16.138:19812] [client 172.213.16.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/upload.php"] [unique_id "aYfZC03f9n1Y0TpV5YbA7wAAAIM"]
[Sun Feb 08 09:09:04.288538 2026] [:error] [pid 24423:tid 24506] [client 217.77.10.74:60348] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aYfiME3f9n1Y0TpV5YbOxQAAAJU"]
[Sun Feb 08 09:22:35.724817 2026] [:error] [pid 24530:tid 24545] [client 43.133.220.37:46940] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYflW0azNRCs1GRWrh5H7wAAAM0"]
[Sun Feb 08 11:35:52.046236 2026] [:error] [pid 56906:tid 56927] [client 142.93.215.112:54190] [client 142.93.215.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.215.112, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYgEmPxl3WX27-WXfDhbcgAAARM"]
[Sun Feb 08 11:35:52.924819 2026] [:error] [pid 24421:tid 24440] [client 142.93.215.112:54322] [client 142.93.215.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.215.112, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYgEmKp7cTzhX5M1IP-2ZQAAAAk"]
[Sun Feb 08 13:50:24.293662 2026] [:error] [pid 24421:tid 24437] [client 188.166.125.226:58018] [client 188.166.125.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.125.226, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYgkIKp7cTzhX5M1IP_dBQAAAAY"]
[Sun Feb 08 13:50:25.321927 2026] [:error] [pid 56906:tid 56926] [client 188.166.125.226:58097] [client 188.166.125.226] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.125.226, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aYgkIfxl3WX27-WXfDh-swAAARI"]
[Sun Feb 08 19:18:57.303978 2026] [:error] [pid 54609:tid 54626] [client 114.80.36.40:49064] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYhxIaRRnRH9N52BW9KfXgAAAY8"]
[Sun Feb 08 21:09:47.374105 2026] [:error] [pid 24422:tid 24469] [client 105.159.186.253:55557] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aYiLGyNNjcLoSCLKhTeQZwAAAEs"], referer: https://medium.com/
[Sun Feb 08 21:09:48.789831 2026] [:error] [pid 54609:tid 54628] [client 105.159.186.253:56231] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aYiLHKRRnRH9N52BW9K0lgAAAZE"], referer: https://search.yahoo.com/search?p=learn+spanish+online+free&fr=yfp-t
[Sun Feb 08 21:09:50.187278 2026] [:error] [pid 24423:tid 24497] [client 105.159.186.253:57151] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aYiLHk3f9n1Y0TpV5YZvgwAAAIw"], referer: https://www.bing.com/search?q=
[Sun Feb 08 21:09:52.342382 2026] [:error] [pid 24530:tid 24545] [client 105.159.186.253:57956] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aYiLIEazNRCs1GRWrh4gTwAAAM0"], referer: https://t.co/
[Sun Feb 08 21:09:55.226357 2026] [:error] [pid 54609:tid 54615] [client 105.159.186.253:59104] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web.config"] [unique_id "aYiLI6RRnRH9N52BW9K0nwAAAYQ"], referer: https://duckduckgo.com/?q=best+hiking+trails+near+me&ia=web
[Sun Feb 08 21:09:59.605600 2026] [:error] [pid 56906:tid 56908] [client 105.159.186.253:60616] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/config.ini"] [unique_id "aYiLJ_xl3WX27-WXfDjQVAAAAQA"], referer: https://www.aliexpress.com/wholesale?SearchText=phone+case&catId=0
[Sun Feb 08 21:10:03.051117 2026] [:error] [pid 54609:tid 54628] [client 105.159.186.253:64459] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aYiLK6RRnRH9N52BW9K0oQAAAZE"], referer: https://www.wolframalpha.com/input?i=population+of+japan
[Sun Feb 08 21:10:03.761844 2026] [:error] [pid 24530:tid 24546] [client 105.159.186.253:64774] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aYiLK0azNRCs1GRWrh4gWgAAAM4"], referer: https://search.yahoo.com/search?p=home+decor+ideas&ei=UTF-8
[Sun Feb 08 21:10:04.476422 2026] [:error] [pid 56906:tid 56924] [client 105.159.186.253:65157] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aYiLLPxl3WX27-WXfDjQXgAAARA"], referer: https://github.com/
[Sun Feb 08 21:10:05.969607 2026] [:error] [pid 54609:tid 54623] [client 105.159.186.253:49200] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aYiLLaRRnRH9N52BW9K0pQAAAYw"], referer: https://www.facebook.com/
[Sun Feb 08 21:10:08.212613 2026] [:error] [pid 24421:tid 24447] [client 105.159.186.253:50344] [client 105.159.186.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web.config"] [unique_id "aYiLMKp7cTzhX5M1IP84pwAAABA"], referer: https://github.com/
[Sun Feb 08 21:45:44.623817 2026] [:error] [pid 24422:tid 24465] [client 103.62.232.34:59258] [client 103.62.232.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYiTiCNNjcLoSCLKhTeZugAAAEc"]
[Sun Feb 08 21:45:45.357847 2026] [:error] [pid 24422:tid 24469] [client 103.62.232.34:59262] [client 103.62.232.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYiTiSNNjcLoSCLKhTeZuwAAAEs"]
[Sun Feb 08 22:24:30.454712 2026] [:error] [pid 9422:tid 9436] [client 35.203.172.121:46816] [client 35.203.172.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYicnq9DqDJC68qBbywiVAAAAYs"]
[Mon Feb 09 02:24:16.602455 2026] [:error] [pid 6663:tid 6709] [client 81.206.32.142:33195] [client 81.206.32.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.206.32.142, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYjU0GGI3uHqWdeZM76xoQAAApA"]
[Mon Feb 09 02:33:51.312341 2026] [:error] [pid 6630:tid 6656] [client 20.62.114.0:59688] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aYjXD52jf0FBTEb_cWQkFAAAAhc"]
[Mon Feb 09 02:33:51.714287 2026] [:error] [pid 6723:tid 6794] [client 20.62.114.0:11453] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aYjXDzkiu6gHwS33P0qodAAAA0k"]
[Mon Feb 09 02:33:52.140596 2026] [:error] [pid 24423:tid 24493] [client 20.62.114.0:61023] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aYjXEE3f9n1Y0TpV5YaZggAAAIg"]
[Mon Feb 09 02:33:52.545500 2026] [:error] [pid 43900:tid 43926] [client 20.62.114.0:60998] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aYjXEOWrhnpm_Csk3kneIAAAAVc"]
[Mon Feb 09 02:33:52.947355 2026] [:error] [pid 43900:tid 43918] [client 20.62.114.0:59696] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aYjXEOWrhnpm_Csk3kneIwAAAU8"]
[Mon Feb 09 02:33:53.352462 2026] [:error] [pid 6663:tid 6701] [client 20.62.114.0:37463] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aYjXEWGI3uHqWdeZM76z5wAAAog"]
[Mon Feb 09 02:33:53.752888 2026] [:error] [pid 6663:tid 6695] [client 20.62.114.0:37457] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aYjXEWGI3uHqWdeZM76z6QAAAoI"]
[Mon Feb 09 02:33:54.152496 2026] [:error] [pid 6663:tid 6712] [client 20.62.114.0:59657] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aYjXEmGI3uHqWdeZM76z6wAAApM"]
[Mon Feb 09 03:39:48.836663 2026] [:error] [pid 44679:tid 44788] [client 170.106.180.246:53294] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYjmhNWGxdA_kZzX7n2o2gAAAIA"]
[Mon Feb 09 05:58:24.869092 2026] [:error] [pid 47938:tid 48003] [client 34.82.223.73:54808] [client 34.82.223.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYkHALVCzWE6fQJEkNIlVAAAAFg"]
[Mon Feb 09 06:04:26.315013 2026] [:error] [pid 48044:tid 48066] [client 195.178.110.223:36504] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYkIapvmvsMP5E03sZLYQwAAANQ"]
[Mon Feb 09 06:33:01.450270 2026] [:error] [pid 47939:tid 48016] [client 195.178.110.223:45196] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYkPHdkpZei8M7cJ2z1WDQAAAIo"]
[Mon Feb 09 08:06:27.953218 2026] [:error] [pid 60676:tid 60699] [client 60.188.57.0:49400] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYklA3hKcn7mJYMx5_AclgAAAo8"]
[Mon Feb 09 12:09:22.422285 2026] [:error] [pid 60676:tid 60688] [client 49.51.132.100:41020] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYld8nhKcn7mJYMx5_BNtwAAAoQ"]
[Mon Feb 09 14:36:03.489878 2026] [:error] [pid 60619:tid 60671] [client 101.109.41.163:64507] [client 101.109.41.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 101.109.41.163, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYmAU3Epg0UoeR8kJ-3t8QAAAlU"]
[Mon Feb 09 14:36:05.789611 2026] [:error] [pid 60619:tid 60672] [client 101.109.41.163:64507] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYmAVXEpg0UoeR8kJ-3t-AAAAlY"]
[Mon Feb 09 14:36:07.241777 2026] [:error] [pid 60589:tid 60614] [client 101.109.41.163:50163] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYmAVzIJyhPWC0JyMLw_2wAAAdc"]
[Mon Feb 09 14:36:08.689941 2026] [:error] [pid 60619:tid 60646] [client 101.109.41.163:51599] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aYmAWHEpg0UoeR8kJ-3t-gAAAkU"]
[Mon Feb 09 14:36:10.153631 2026] [:error] [pid 60589:tid 60611] [client 101.109.41.163:52910] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYmAWjIJyhPWC0JyMLw_6gAAAdQ"]
[Mon Feb 09 14:36:11.611012 2026] [:error] [pid 60678:tid 60787] [client 101.109.41.163:53998] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYmAW-8Gd_fDFrcNu4N3pgAAAxY"]
[Mon Feb 09 14:36:13.065786 2026] [:error] [pid 18303:tid 18324] [client 101.109.41.163:54950] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYmAXUY7TEaZkFrGG4lh_QAAARM"]
[Mon Feb 09 14:36:14.526585 2026] [:error] [pid 47938:tid 47986] [client 101.109.41.163:55884] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYmAXrVCzWE6fQJEkNLNmQAAAEc"]
[Mon Feb 09 14:36:15.996572 2026] [:error] [pid 60508:tid 60519] [client 101.109.41.163:56896] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYmAX-XDvLC4ADfnEzOISwAAAYk"]
[Mon Feb 09 14:36:18.840588 2026] [:error] [pid 60619:tid 60640] [client 101.109.41.163:57763] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYmAYnEpg0UoeR8kJ-3uEAAAAkA"]
[Mon Feb 09 14:36:20.286808 2026] [:error] [pid 60508:tid 60516] [client 101.109.41.163:59286] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYmAZOXDvLC4ADfnEzOIVAAAAYY"]
[Mon Feb 09 14:36:21.729090 2026] [:error] [pid 60508:tid 60527] [client 101.109.41.163:60059] [client 101.109.41.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYmAZeXDvLC4ADfnEzOIVwAAAZE"]
[Mon Feb 09 16:35:58.422721 2026] [:error] [pid 60589:tid 60603] [client 43.153.102.138:60284] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYmcbjIJyhPWC0JyMLxdkgAAAcw"]
[Mon Feb 09 19:02:05.271425 2026] [:error] [pid 60619:tid 60645] [client 170.106.73.216:44806] [client 170.106.73.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYm-rXEpg0UoeR8kJ-0zMgAAAkQ"]
[Mon Feb 09 22:55:57.661448 2026] [:error] [pid 60589:tid 60615] [client 104.28.160.81:18766] [client 104.28.160.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aYn1fTIJyhPWC0JyMLyt9QAAAdg"]
[Tue Feb 10 01:12:08.039624 2026] [autoindex:error] [pid 34044:tid 34057] [client 167.86.83.231:63617] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Feb 10 03:05:21.848652 2026] [:error] [pid 34044:tid 34061] [client 167.86.83.231:62971] [client 167.86.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aYov8XKt48XODNt-cM-aHAAAAA0"], referer: binance.com
[Tue Feb 10 11:36:32.646169 2026] [ssl:error] [pid 47837:tid 47907] [client 72.11.155.223:52442] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourcause.com/
[Tue Feb 10 13:26:05.960446 2026] [:error] [pid 59544:tid 59569] [client 43.133.66.51:47866] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYrBbaZySR9mFY4BaimQpgAAAZI"]
[Tue Feb 10 14:29:23.800636 2026] [:error] [pid 30054:tid 30064] [client 106.200.18.213:4868] [client 106.200.18.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.200.18.213, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYrQQ2ecgOOXCu-GgYXr2QAAAQg"]
[Tue Feb 10 15:54:07.688000 2026] [:error] [pid 59544:tid 59557] [client 43.153.87.54:54084] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYrkH6ZySR9mFY4Baim2nwAAAYk"]
[Tue Feb 10 16:56:30.692125 2026] [:error] [pid 47837:tid 47910] [client 114.96.103.33:50198] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYryvnFY8KYFPX79Z4m02gAAAIo"]
[Wed Feb 11 00:41:12.561708 2026] [:error] [pid 46779:tid 46842] [client 74.248.130.28:2203] [client 74.248.130.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aYtfqNZrCpVdS6yMMkc7eAAAAI4"]
[Wed Feb 11 00:41:13.616687 2026] [:error] [pid 14803:tid 14927] [client 74.248.130.28:2858] [client 74.248.130.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aYtfqbwzY9_NIasL_OXFiwAAAQo"]
[Wed Feb 11 00:41:14.668377 2026] [:error] [pid 46779:tid 46845] [client 74.248.130.28:30563] [client 74.248.130.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aYtfqtZrCpVdS6yMMkc7gAAAAJE"]
[Wed Feb 11 00:41:15.752771 2026] [:error] [pid 46635:tid 46655] [client 74.248.130.28:30573] [client 74.248.130.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aYtfq0sK6EAyFtFakLo2QAAAAFI"]
[Wed Feb 11 03:28:57.591546 2026] [:error] [pid 14803:tid 14923] [client 43.135.182.43:41036] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYuG-bwzY9_NIasL_OXrYQAAAQY"]
[Wed Feb 11 04:19:48.224735 2026] [:error] [pid 27966:tid 28042] [client 108.165.145.107:55437] [client 108.165.145.107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aYuS5F8HJ9ydyf0SPu6TlwAAAIw"]
[Wed Feb 11 04:19:49.867732 2026] [:error] [pid 27964:tid 27990] [client 108.165.145.115:29087] [client 108.165.145.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aYuS5cp0XgWYHLcQtEi1_QAAAA8"]
[Wed Feb 11 05:14:19.824232 2026] [:error] [pid 27965:tid 28006] [client 194.5.82.22:57525] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYufq9HLAUAIo8qpZyE_hwAAAEM"]
[Wed Feb 11 05:14:20.670983 2026] [:error] [pid 28073:tid 28093] [client 194.5.82.44:42527] [client 194.5.82.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.44, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYufrIeHYIlOlF-DsMyBPwAAANI"]
[Wed Feb 11 05:14:22.048707 2026] [proxy_fcgi:error] [pid 28073:tid 28084] [client 194.5.82.44:42527] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:14:23.181603 2026] [:error] [pid 28073:tid 28081] [client 194.5.82.44:42527] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aYufr4eHYIlOlF-DsMyBYAAAAMY"]
[Wed Feb 11 05:14:23.583696 2026] [:error] [pid 28073:tid 28092] [client 194.5.82.4:58475] [client 194.5.82.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYufr4eHYIlOlF-DsMyBZAAAANE"]
[Wed Feb 11 05:14:24.944830 2026] [:error] [pid 27964:tid 27986] [client 194.5.82.19:22353] [client 194.5.82.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYufsMp0XgWYHLcQtEjKugAAAAs"]
[Wed Feb 11 05:14:25.320901 2026] [:error] [pid 27966:tid 28035] [client 194.5.82.40:23293] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-atom.php"] [unique_id "aYufsV8HJ9ydyf0SPu6rFAAAAIU"]
[Wed Feb 11 05:14:26.197895 2026] [:error] [pid 27966:tid 28046] [client 194.5.82.40:24861] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aYufsl8HJ9ydyf0SPu6rHQAAAJA"]
[Wed Feb 11 05:14:28.106472 2026] [:error] [pid 28073:tid 28085] [client 194.5.82.40:25141] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aYuftIeHYIlOlF-DsMyBfwAAAMo"]
[Wed Feb 11 05:14:29.407146 2026] [:error] [pid 27966:tid 28030] [client 194.5.82.35:24863] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYuftV8HJ9ydyf0SPu6rMAAAAIA"]
[Wed Feb 11 05:14:30.029890 2026] [:error] [pid 28073:tid 28083] [client 194.5.82.31:37985] [client 194.5.82.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYuftoeHYIlOlF-DsMyBhwAAAMg"]
[Wed Feb 11 05:14:30.719813 2026] [proxy_fcgi:error] [pid 27966:tid 28038] [client 194.5.82.27:62803] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:14:31.510872 2026] [:error] [pid 27966:tid 28033] [client 194.5.82.27:62803] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYuft18HJ9ydyf0SPu6rRQAAAIM"]
[Wed Feb 11 05:14:31.795155 2026] [:error] [pid 27965:tid 28022] [client 194.5.82.29:43813] [client 194.5.82.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYuft9HLAUAIo8qpZyE_owAAAFM"]
[Wed Feb 11 05:14:33.489410 2026] [:error] [pid 27966:tid 28049] [client 194.5.82.34:27875] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYufuV8HJ9ydyf0SPu6rYAAAAJM"]
[Wed Feb 11 05:14:33.805176 2026] [:error] [pid 28073:tid 28079] [client 194.5.82.21:24475] [client 194.5.82.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYufuYeHYIlOlF-DsMyBrwAAAMQ"]
[Wed Feb 11 05:14:34.296399 2026] [:error] [pid 27965:tid 28006] [client 194.5.82.6:27845] [client 194.5.82.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aYufutHLAUAIo8qpZyE_rwAAAEM"]
[Wed Feb 11 05:14:35.094647 2026] [:error] [pid 27964:tid 27999] [client 194.5.82.16:30615] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aYufu8p0XgWYHLcQtEjK3wAAABg"]
[Wed Feb 11 05:14:35.795874 2026] [:error] [pid 28073:tid 28075] [client 194.5.82.50:52485] [client 194.5.82.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYufu4eHYIlOlF-DsMyBvQAAAMA"]
[Wed Feb 11 05:14:36.688996 2026] [:error] [pid 27964:tid 27983] [client 194.5.82.7:28593] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aYufvMp0XgWYHLcQtEjK-gAAAAg"]
[Wed Feb 11 05:14:36.988990 2026] [:error] [pid 28073:tid 28079] [client 194.5.82.46:56693] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aYufvIeHYIlOlF-DsMyBxgAAAMQ"]
[Wed Feb 11 05:14:37.736591 2026] [:error] [pid 27966:tid 28051] [client 194.5.82.6:43421] [client 194.5.82.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aYufvV8HJ9ydyf0SPu6rhgAAAJU"]
[Wed Feb 11 05:14:37.968623 2026] [:error] [pid 28073:tid 28096] [client 194.5.82.7:43973] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aYufvYeHYIlOlF-DsMyBygAAANU"]
[Wed Feb 11 05:14:38.288962 2026] [:error] [pid 28073:tid 28092] [client 194.5.82.44:20947] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aYufvoeHYIlOlF-DsMyBzwAAANE"]
[Wed Feb 11 05:14:40.805623 2026] [:error] [pid 27966:tid 28042] [client 194.5.82.18:27463] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aYufwF8HJ9ydyf0SPu6rpQAAAIw"]
[Wed Feb 11 05:14:41.111387 2026] [:error] [pid 28073:tid 28090] [client 194.5.82.7:29523] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYufwYeHYIlOlF-DsMyB2gAAAM8"]
[Wed Feb 11 05:14:41.622325 2026] [:error] [pid 27965:tid 28025] [client 194.5.82.12:38513] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aYufwdHLAUAIo8qpZyE_vAAAAFY"]
[Wed Feb 11 05:14:41.924653 2026] [:error] [pid 27964:tid 27981] [client 194.5.82.166:23611] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aYufwcp0XgWYHLcQtEjLCQAAAAY"]
[Wed Feb 11 05:14:42.992734 2026] [:error] [pid 27964:tid 27978] [client 194.5.82.166:65061] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aYufwsp0XgWYHLcQtEjLEwAAAAM"]
[Wed Feb 11 05:14:44.020529 2026] [:error] [pid 27966:tid 28040] [client 194.5.82.26:38999] [client 194.5.82.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aYufxF8HJ9ydyf0SPu6rtAAAAIo"]
[Wed Feb 11 05:14:44.936306 2026] [:error] [pid 27966:tid 28039] [client 194.5.82.47:40111] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aYufxF8HJ9ydyf0SPu6rwAAAAIk"]
[Wed Feb 11 05:14:47.400649 2026] [:error] [pid 27966:tid 28052] [client 194.5.82.53:48133] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYufx18HJ9ydyf0SPu6r0AAAAJY"]
[Wed Feb 11 05:14:48.707906 2026] [:error] [pid 28073:tid 28077] [client 194.5.82.6:32621] [client 194.5.82.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aYufyIeHYIlOlF-DsMyB8wAAAMI"]
[Wed Feb 11 05:14:49.200652 2026] [:error] [pid 27964:tid 27992] [client 194.5.82.7:21989] [client 194.5.82.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "aYufycp0XgWYHLcQtEjLIQAAABE"]
[Wed Feb 11 05:14:51.204267 2026] [:error] [pid 27964:tid 27984] [client 194.5.82.20:62359] [client 194.5.82.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/layout.php"] [unique_id "aYufy8p0XgWYHLcQtEjLNwAAAAk"]
[Wed Feb 11 05:14:51.490099 2026] [:error] [pid 28073:tid 28080] [client 194.5.82.6:60935] [client 194.5.82.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aYufy4eHYIlOlF-DsMyB-gAAAMU"]
[Wed Feb 11 05:14:51.674379 2026] [:error] [pid 27966:tid 28035] [client 194.5.82.8:42513] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aYufy18HJ9ydyf0SPu6r1gAAAIU"]
[Wed Feb 11 05:14:52.090833 2026] [:error] [pid 27965:tid 28003] [client 194.5.82.43:44709] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aYufzNHLAUAIo8qpZyE_0QAAAEA"]
[Wed Feb 11 05:14:53.009284 2026] [:error] [pid 27965:tid 28027] [client 194.5.82.18:38193] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aYufzdHLAUAIo8qpZyE_2QAAAFg"]
[Wed Feb 11 05:14:53.308622 2026] [:error] [pid 27965:tid 28006] [client 194.5.82.40:21841] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/generated-classname.php"] [unique_id "aYufzdHLAUAIo8qpZyE_3AAAAEM"]
[Wed Feb 11 05:14:56.090039 2026] [:error] [pid 27965:tid 28006] [client 194.5.82.47:54091] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/dashboard.php"] [unique_id "aYuf0NHLAUAIo8qpZyE_6QAAAEM"]
[Wed Feb 11 05:14:56.596896 2026] [proxy_fcgi:error] [pid 27964:tid 27991] [client 194.5.82.22:33273] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:14:57.214896 2026] [proxy_fcgi:error] [pid 27964:tid 27998] [client 194.5.82.22:33273] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:14:58.097801 2026] [:error] [pid 27964:tid 27983] [client 194.5.82.22:33273] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/chosen.php"] [unique_id "aYuf0sp0XgWYHLcQtEjLVQAAAAg"]
[Wed Feb 11 05:14:58.391251 2026] [:error] [pid 27964:tid 27984] [client 194.5.82.4:46337] [client 194.5.82.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/bala.php"] [unique_id "aYuf0sp0XgWYHLcQtEjLVwAAAAk"]
[Wed Feb 11 05:14:58.595520 2026] [:error] [pid 27964:tid 27989] [client 194.5.82.35:51109] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aYuf0sp0XgWYHLcQtEjLWAAAAA4"]
[Wed Feb 11 05:15:01.289822 2026] [:error] [pid 27964:tid 27996] [client 194.5.82.31:64317] [client 194.5.82.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aYuf1cp0XgWYHLcQtEjLagAAABU"]
[Wed Feb 11 05:15:02.842198 2026] [:error] [pid 27966:tid 28049] [client 194.5.82.12:64359] [client 194.5.82.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYuf1l8HJ9ydyf0SPu6r8QAAAJM"]
[Wed Feb 11 05:15:03.117329 2026] [:error] [pid 27965:tid 28005] [client 194.5.82.45:65239] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-load.php"] [unique_id "aYuf19HLAUAIo8qpZyE_8wAAAEI"]
[Wed Feb 11 05:15:04.016543 2026] [:error] [pid 27966:tid 28050] [client 194.5.82.8:28791] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aYuf2F8HJ9ydyf0SPu6r-gAAAJQ"]
[Wed Feb 11 05:15:04.297138 2026] [proxy_fcgi:error] [pid 27964:tid 27989] [client 194.5.82.51:34459] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:15:05.186887 2026] [:error] [pid 27964:tid 27987] [client 194.5.82.51:34459] [client 194.5.82.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "aYuf2cp0XgWYHLcQtEjLfgAAAAw"]
[Wed Feb 11 05:15:05.990733 2026] [:error] [pid 27964:tid 27979] [client 194.5.82.18:38069] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Proxy/HTTP.term.php"] [unique_id "aYuf2cp0XgWYHLcQtEjLhwAAAAQ"]
[Wed Feb 11 05:15:06.680891 2026] [:error] [pid 27966:tid 28048] [client 194.5.82.35:37143] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/utils.php"] [unique_id "aYuf2l8HJ9ydyf0SPu6sAwAAAJI"]
[Wed Feb 11 05:15:07.949845 2026] [:error] [pid 27965:tid 28011] [client 194.5.82.17:48981] [client 194.5.82.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/db-update.php"] [unique_id "aYuf29HLAUAIo8qpZyFACgAAAEg"]
[Wed Feb 11 05:15:08.899573 2026] [:error] [pid 27966:tid 28043] [client 194.5.82.29:20073] [client 194.5.82.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/ini_db_model.php"] [unique_id "aYuf3F8HJ9ydyf0SPu6sEAAAAI0"]
[Wed Feb 11 05:15:10.091920 2026] [:error] [pid 27965:tid 28012] [client 194.5.82.35:34255] [client 194.5.82.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aYuf3tHLAUAIo8qpZyFAFgAAAEk"]
[Wed Feb 11 05:15:13.697370 2026] [proxy_fcgi:error] [pid 28073:tid 28083] [client 194.5.82.24:45033] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:15:15.191231 2026] [:error] [pid 28073:tid 28077] [client 194.5.82.24:45033] [client 194.5.82.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/custom-classname.php"] [unique_id "aYuf44eHYIlOlF-DsMyCdwAAAMI"]
[Wed Feb 11 05:15:15.493642 2026] [proxy_fcgi:error] [pid 28073:tid 28088] [client 194.5.82.50:56785] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:15:15.987220 2026] [:error] [pid 28073:tid 28089] [client 194.5.82.50:56785] [client 194.5.82.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYuf44eHYIlOlF-DsMyCfwAAAM4"]
[Wed Feb 11 05:15:16.282535 2026] [:error] [pid 27964:tid 27982] [client 194.5.82.43:47497] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/db_model.php"] [unique_id "aYuf5Mp0XgWYHLcQtEjLqAAAAAc"]
[Wed Feb 11 05:15:16.784706 2026] [:error] [pid 27964:tid 27999] [client 194.5.82.36:28751] [client 194.5.82.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aYuf5Mp0XgWYHLcQtEjLrgAAABg"]
[Wed Feb 11 05:15:17.877100 2026] [:error] [pid 27964:tid 27979] [client 194.5.82.48:29715] [client 194.5.82.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aYuf5cp0XgWYHLcQtEjLugAAAAQ"]
[Wed Feb 11 05:15:18.689532 2026] [:error] [pid 27966:tid 28046] [client 194.5.82.10:59815] [client 194.5.82.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aYuf5l8HJ9ydyf0SPu6sLQAAAJA"]
[Wed Feb 11 05:15:18.882036 2026] [:error] [pid 27965:tid 28013] [client 194.5.82.22:54357] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aYuf5tHLAUAIo8qpZyFAKAAAAEo"]
[Wed Feb 11 05:15:20.388017 2026] [:error] [pid 28073:tid 28084] [client 194.5.82.39:20395] [client 194.5.82.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Hooks.php"] [unique_id "aYuf6IeHYIlOlF-DsMyCmwAAAMk"]
[Wed Feb 11 05:15:20.883529 2026] [:error] [pid 27965:tid 28020] [client 194.5.82.22:24797] [client 194.5.82.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYuf6NHLAUAIo8qpZyFAMgAAAFE"]
[Wed Feb 11 05:15:23.080404 2026] [:error] [pid 27965:tid 28006] [client 194.5.82.9:57809] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aYuf69HLAUAIo8qpZyFAPgAAAEM"]
[Wed Feb 11 05:15:23.382857 2026] [:error] [pid 27965:tid 28010] [client 194.5.82.14:44521] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aYuf69HLAUAIo8qpZyFAQwAAAEc"]
[Wed Feb 11 05:15:23.714747 2026] [proxy_fcgi:error] [pid 27964:tid 27998] [client 194.5.82.10:54147] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:15:26.004744 2026] [:error] [pid 27964:tid 27997] [client 194.5.82.10:54147] [client 194.5.82.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/db_model.php"] [unique_id "aYuf7sp0XgWYHLcQtEjL0QAAABY"]
[Wed Feb 11 05:15:26.984569 2026] [:error] [pid 27966:tid 28048] [client 194.5.82.43:63965] [client 194.5.82.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aYuf7l8HJ9ydyf0SPu6sQgAAAJI"]
[Wed Feb 11 05:15:29.195371 2026] [:error] [pid 27966:tid 28050] [client 194.5.82.32:48959] [client 194.5.82.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aYuf8V8HJ9ydyf0SPu6sSQAAAJQ"]
[Wed Feb 11 05:15:31.084876 2026] [:error] [pid 28073:tid 28082] [client 194.5.82.44:39435] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aYuf84eHYIlOlF-DsMyCtgAAAMc"]
[Wed Feb 11 05:15:31.594249 2026] [:error] [pid 27965:tid 28023] [client 194.5.82.21:23199] [client 194.5.82.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aYuf89HLAUAIo8qpZyFAXQAAAFQ"]
[Wed Feb 11 05:15:32.096806 2026] [:error] [pid 27964:tid 27989] [client 194.5.82.45:59685] [client 194.5.82.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/tag-cloud/about.php"] [unique_id "aYuf9Mp0XgWYHLcQtEjL4QAAAA4"]
[Wed Feb 11 05:15:32.287368 2026] [:error] [pid 27966:tid 28054] [client 194.5.82.49:61963] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/bru.php"] [unique_id "aYuf9F8HJ9ydyf0SPu6sUAAAAJg"]
[Wed Feb 11 05:15:32.590055 2026] [proxy_fcgi:error] [pid 28073:tid 28098] [client 194.5.82.34:29463] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:15:35.887049 2026] [:error] [pid 28073:tid 28092] [client 194.5.82.34:29463] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYuf94eHYIlOlF-DsMyC1gAAANE"]
[Wed Feb 11 05:15:36.076889 2026] [:error] [pid 27965:tid 28011] [client 194.5.82.27:22033] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/PHPMailer.php"] [unique_id "aYuf-NHLAUAIo8qpZyFAYgAAAEg"]
[Wed Feb 11 05:15:36.278879 2026] [:error] [pid 27966:tid 28041] [client 194.5.82.44:29877] [client 194.5.82.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aYuf-F8HJ9ydyf0SPu6sWQAAAIs"]
[Wed Feb 11 05:15:37.888601 2026] [:error] [pid 27964:tid 27983] [client 194.5.82.49:53555] [client 194.5.82.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.49, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYuf-cp0XgWYHLcQtEjL7gAAAAg"]
[Wed Feb 11 05:15:38.393679 2026] [:error] [pid 27964:tid 27993] [client 194.5.82.49:53555] [client 194.5.82.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aYuf-sp0XgWYHLcQtEjL8wAAABI"]
[Wed Feb 11 05:15:38.591720 2026] [:error] [pid 28073:tid 28087] [client 194.5.82.40:42427] [client 194.5.82.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/HookManager.php"] [unique_id "aYuf-oeHYIlOlF-DsMyC4AAAAMw"]
[Wed Feb 11 05:15:38.885113 2026] [:error] [pid 27965:tid 28022] [client 194.5.82.9:29093] [client 194.5.82.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/chosen.php"] [unique_id "aYuf-tHLAUAIo8qpZyFAZwAAAFM"]
[Wed Feb 11 05:15:40.695277 2026] [:error] [pid 27964:tid 27988] [client 194.5.82.19:35509] [client 194.5.82.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/admin.php"] [unique_id "aYuf_Mp0XgWYHLcQtEjL_QAAAA0"]
[Wed Feb 11 05:15:40.882409 2026] [:error] [pid 27965:tid 28011] [client 194.5.82.13:24445] [client 194.5.82.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/ini_user-info.php"] [unique_id "aYuf_NHLAUAIo8qpZyFAaQAAAEg"]
[Wed Feb 11 05:15:41.484294 2026] [:error] [pid 27966:tid 28049] [client 194.5.82.46:62007] [client 194.5.82.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/500.php"] [unique_id "aYuf_V8HJ9ydyf0SPu6saAAAAJM"]
[Wed Feb 11 05:15:42.185875 2026] [:error] [pid 27966:tid 28052] [client 194.5.82.34:60009] [client 194.5.82.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aYuf_l8HJ9ydyf0SPu6scwAAAJY"]
[Wed Feb 11 05:15:42.495960 2026] [proxy_fcgi:error] [pid 27964:tid 27989] [client 194.5.82.166:57713] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:15:43.213339 2026] [:error] [pid 27964:tid 27985] [client 194.5.82.166:57713] [client 194.5.82.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/user-info.php"] [unique_id "aYuf_8p0XgWYHLcQtEjMCgAAAAo"]
[Wed Feb 11 05:15:43.599962 2026] [proxy_fcgi:error] [pid 27966:tid 28031] [client 194.5.82.23:28583] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:15:43.991240 2026] [:error] [pid 27966:tid 28040] [client 194.5.82.23:28583] [client 194.5.82.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Utility/about.php"] [unique_id "aYuf_18HJ9ydyf0SPu6sgwAAAIo"]
[Wed Feb 11 05:15:44.283319 2026] [:error] [pid 27965:tid 28019] [client 194.5.82.17:35799] [client 194.5.82.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aYugANHLAUAIo8qpZyFAbgAAAFA"]
[Wed Feb 11 05:15:44.587270 2026] [:error] [pid 27964:tid 27983] [client 194.5.82.19:32283] [client 194.5.82.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aYugAMp0XgWYHLcQtEjMEAAAAAg"]
[Wed Feb 11 05:15:44.769407 2026] [:error] [pid 28073:tid 28081] [client 194.5.82.20:43839] [client 194.5.82.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYugAIeHYIlOlF-DsMyC7QAAAMY"]
[Wed Feb 11 05:15:44.975928 2026] [:error] [pid 27964:tid 27989] [client 194.5.82.18:55721] [client 194.5.82.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry.php"] [unique_id "aYugAMp0XgWYHLcQtEjMEQAAAA4"]
[Wed Feb 11 05:15:45.997680 2026] [:error] [pid 27966:tid 28049] [client 194.5.82.5:24087] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aYugAV8HJ9ydyf0SPu6sjQAAAJM"]
[Wed Feb 11 05:15:48.629071 2026] [:error] [pid 27964:tid 27976] [client 194.5.82.42:24225] [client 194.5.82.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aYugBMp0XgWYHLcQtEjMHQAAAAE"]
[Wed Feb 11 05:15:52.596292 2026] [:error] [pid 27964:tid 27984] [client 194.5.82.24:60649] [client 194.5.82.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aYugCMp0XgWYHLcQtEjMSAAAAAk"]
[Wed Feb 11 05:15:53.294912 2026] [:error] [pid 28073:tid 28078] [client 194.5.82.8:39181] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aYugCYeHYIlOlF-DsMyDIgAAAMM"]
[Wed Feb 11 05:15:54.595039 2026] [:error] [pid 27966:tid 28049] [client 194.5.82.32:63543] [client 194.5.82.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/about.php"] [unique_id "aYugCl8HJ9ydyf0SPu6svAAAAJM"]
[Wed Feb 11 05:16:00.612182 2026] [:error] [pid 27965:tid 28006] [client 194.5.82.8:24257] [client 194.5.82.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aYugENHLAUAIo8qpZyFAoAAAAEM"]
[Wed Feb 11 05:16:03.334700 2026] [:error] [pid 27966:tid 28034] [client 194.5.82.28:26373] [client 194.5.82.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aYugE18HJ9ydyf0SPu6tBQAAAIQ"]
[Wed Feb 11 05:16:03.618515 2026] [:error] [pid 27965:tid 28016] [client 194.5.82.11:56597] [client 194.5.82.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYugE9HLAUAIo8qpZyFApwAAAE0"]
[Wed Feb 11 05:16:03.930803 2026] [:error] [pid 27965:tid 28015] [client 194.5.82.20:20549] [client 194.5.82.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aYugE9HLAUAIo8qpZyFAqQAAAEw"]
[Wed Feb 11 05:16:04.397978 2026] [:error] [pid 27966:tid 28053] [client 194.5.82.24:22859] [client 194.5.82.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/404.php"] [unique_id "aYugFF8HJ9ydyf0SPu6tCQAAAJc"]
[Wed Feb 11 05:16:04.793437 2026] [:error] [pid 28073:tid 28089] [client 194.5.82.13:20677] [client 194.5.82.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Requests.php"] [unique_id "aYugFIeHYIlOlF-DsMyDjQAAAM4"]
[Wed Feb 11 05:16:05.409115 2026] [proxy_fcgi:error] [pid 27964:tid 27979] [client 194.5.82.53:34845] AH01071: Got error 'Primary script unknown'
[Wed Feb 11 05:16:05.499022 2026] [:error] [pid 27964:tid 27975] [client 194.5.82.53:34845] [client 194.5.82.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/HTTP/Parser.php"] [unique_id "aYugFcp0XgWYHLcQtEjMuwAAAAA"]
[Wed Feb 11 05:16:06.289800 2026] [:error] [pid 27966:tid 28041] [client 194.5.82.5:37089] [client 194.5.82.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/radio.php"] [unique_id "aYugFl8HJ9ydyf0SPu6tEwAAAIs"]
[Wed Feb 11 05:16:06.984481 2026] [:error] [pid 27966:tid 28047] [client 194.5.82.4:50651] [client 194.5.82.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYugFl8HJ9ydyf0SPu6tGQAAAJE"]
[Wed Feb 11 05:16:07.283112 2026] [:error] [pid 28073:tid 28089] [client 194.5.82.27:53931] [client 194.5.82.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aYugF4eHYIlOlF-DsMyDlAAAAM4"]
[Wed Feb 11 05:16:07.686122 2026] [:error] [pid 28073:tid 28096] [client 194.5.82.14:33621] [client 194.5.82.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aYugF4eHYIlOlF-DsMyDmQAAANU"]
[Wed Feb 11 05:16:07.982105 2026] [:error] [pid 28073:tid 28084] [client 194.5.82.16:54883] [client 194.5.82.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/wptextpattern/about.php"] [unique_id "aYugF4eHYIlOlF-DsMyDmwAAAMk"]
[Wed Feb 11 05:16:16.792285 2026] [autoindex:error] [pid 27964:tid 27993] [client 194.5.82.21:35249] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Feb 11 05:16:21.387513 2026] [:error] [pid 28073:tid 28087] [client 194.5.82.47:34949] [client 194.5.82.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager"] [unique_id "aYugJYeHYIlOlF-DsMyDuAAAAMw"]
[Wed Feb 11 05:16:23.884984 2026] [authz_core:error] [pid 28073:tid 28086] [client 194.5.82.37:29931] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/
[Wed Feb 11 05:57:04.432682 2026] [:error] [pid 27964:tid 27975] [client 170.64.198.35:46974] [client 170.64.198.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYupsMp0XgWYHLcQtEjbaAAAAAA"]
[Wed Feb 11 05:57:04.508455 2026] [:error] [pid 27964:tid 27997] [client 170.64.198.35:37206] [client 170.64.198.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYupsMp0XgWYHLcQtEjbaQAAABY"]
[Wed Feb 11 06:20:40.428088 2026] [:error] [pid 22569:tid 22586] [client 217.77.10.74:64836] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/graphql"] [unique_id "aYuvOMAhSI7iX9G3enhZ-AAAAY0"]
[Wed Feb 11 06:20:41.235162 2026] [:error] [pid 27966:tid 28034] [client 217.77.10.74:64905] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/graphql"] [unique_id "aYuvOV8HJ9ydyf0SPu7D3gAAAIQ"]
[Wed Feb 11 06:20:42.040003 2026] [:error] [pid 22570:tid 22618] [client 217.77.10.74:64976] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/catalogsearch/advanced/result/"] [unique_id "aYuvOiE5uSe043FXwQqT5AAAAdI"]
[Wed Feb 11 06:20:42.809863 2026] [:error] [pid 22570:tid 22620] [client 217.77.10.74:65062] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rest/V1/search"] [unique_id "aYuvOiE5uSe043FXwQqT6AAAAdQ"]
[Wed Feb 11 06:20:43.603500 2026] [:error] [pid 17401:tid 17427] [client 217.77.10.74:65185] [client 217.77.10.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aYuvOw0lHeayTY40t36mngAAARg"]
[Wed Feb 11 10:41:50.241370 2026] [ssl:error] [pid 22570:tid 22602] [client 3.139.242.79:36620] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourcause.com/
[Wed Feb 11 11:11:19.932459 2026] [:error] [pid 27966:tid 28046] [client 49.51.233.46:56110] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYvzV18HJ9ydyf0SPu4g0wAAAJA"]
[Wed Feb 11 12:29:21.301882 2026] [:error] [pid 28073:tid 28081] [client 170.64.198.35:52928] [client 170.64.198.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYwFoYeHYIlOlF-DsMwN_AAAAMY"]
[Wed Feb 11 12:29:21.471546 2026] [:error] [pid 28073:tid 28096] [client 170.64.198.35:48296] [client 170.64.198.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYwFoYeHYIlOlF-DsMwN_QAAANU"]
[Wed Feb 11 13:19:37.710013 2026] [:error] [pid 22569:tid 22579] [client 170.64.198.35:41640] [client 170.64.198.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYwRacAhSI7iX9G3enjM_wAAAYY"]
[Wed Feb 11 13:19:40.789828 2026] [:error] [pid 22570:tid 22622] [client 170.64.198.35:39692] [client 170.64.198.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYwRbCE5uSe043FXwQoH0AAAAdY"]
[Wed Feb 11 13:55:00.611768 2026] [:error] [pid 27966:tid 28036] [client 43.153.36.110:51460] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aYwZtF8HJ9ydyf0SPu5NuAAAAIY"]
[Wed Feb 11 18:21:35.608206 2026] [:error] [pid 27966:tid 28038] [client 43.133.220.37:50066] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aYxYL18HJ9ydyf0SPu6XaAAAAIg"]
[Wed Feb 11 21:14:01.967250 2026] [:error] [pid 27964:tid 27989] [client 165.227.188.58:58536] [client 165.227.188.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYyAmcp0XgWYHLcQtEjvuwAAAA4"]
[Wed Feb 11 21:14:05.864514 2026] [:error] [pid 22569:tid 22585] [client 165.227.188.58:42508] [client 165.227.188.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aYyAncAhSI7iX9G3enhAeQAAAYw"]
[Thu Feb 12 01:40:59.508161 2026] [:error] [pid 49095:tid 49177] [client 136.113.193.208:58472] [client 136.113.193.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.193.208, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYy_K4DzbTIrmslQGKTkZwAAARg"]
[Thu Feb 12 01:40:59.541738 2026] [:error] [pid 49093:tid 49101] [client 136.113.193.208:62358] [client 136.113.193.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.193.208, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aYy_KwYzxX9Zu4qZ-D2EMAAAAEM"]
[Thu Feb 12 01:41:00.178325 2026] [:error] [pid 49095:tid 49171] [client 136.113.193.208:58472] [client 136.113.193.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aYy_LIDzbTIrmslQGKTkawAAARI"]
[Thu Feb 12 01:41:00.204071 2026] [:error] [pid 49093:tid 49119] [client 136.113.193.208:62358] [client 136.113.193.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aYy_LAYzxX9Zu4qZ-D2ENAAAAFU"]
[Thu Feb 12 01:41:01.076611 2026] [:error] [pid 49180:tid 49191] [client 136.113.193.208:55566] [client 136.113.193.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aYy_LXD8wAezUtqGiU5oxAAAAUk"]
[Thu Feb 12 01:41:01.096005 2026] [:error] [pid 49180:tid 49204] [client 136.113.193.208:64169] [client 136.113.193.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aYy_LXD8wAezUtqGiU5oxQAAAVY"]
[Thu Feb 12 09:02:21.088631 2026] [:error] [pid 50254:tid 50277] [client 110.166.71.39:48034] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aY0mnVXkZ-o2G0C1rDFsHgAAAhI"]
[Thu Feb 12 09:17:59.999942 2026] [ssl:error] [pid 50168:tid 50216] [client 107.173.171.201:44130] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourcause.com/
[Thu Feb 12 09:35:19.774929 2026] [:error] [pid 50254:tid 50276] [client 170.106.82.209:45526] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aY0uV1XkZ-o2G0C1rDGAkwAAAhE"]
[Thu Feb 12 20:08:25.890649 2026] [:error] [pid 65064:tid 65077] [client 104.28.234.179:61155] [client 104.28.234.179] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aY3CuROvRgscTcqsMBngsQAAAMo"]
[Thu Feb 12 20:08:48.722277 2026] [:error] [pid 65064:tid 65079] [client 104.28.163.222:39085] [client 104.28.163.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/style.php"] [unique_id "aY3C0BOvRgscTcqsMBng5QAAAMw"]
[Thu Feb 12 21:09:45.531435 2026] [:error] [pid 65064:tid 65090] [client 20.215.248.189:63915] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY3RGROvRgscTcqsMBkBXAAAANc"]
[Thu Feb 12 21:09:49.464456 2026] [:error] [pid 63417:tid 63473] [client 20.215.248.189:63369] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY3RHf8gSb97qRMtXCLyvAAAAFg"]
[Thu Feb 12 21:09:50.490778 2026] [:error] [pid 46718:tid 46724] [client 20.215.248.189:63365] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY3RHkdfX45LelQwruQbrwAAAcM"]
[Thu Feb 12 21:09:51.222145 2026] [:error] [pid 46718:tid 46730] [client 20.215.248.189:63414] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY3RH0dfX45LelQwruQbsQAAAck"]
[Thu Feb 12 21:09:52.499477 2026] [:error] [pid 63417:tid 63460] [client 20.215.248.189:63880] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aY3RIP8gSb97qRMtXCLywQAAAEs"]
[Thu Feb 12 21:09:53.190675 2026] [:error] [pid 63416:tid 63430] [client 20.215.248.189:63894] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aY3RIb2wmecPaCHcM2_OQgAAAYk"]
[Thu Feb 12 21:09:53.863669 2026] [:error] [pid 63416:tid 63439] [client 20.215.248.189:63380] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aY3RIb2wmecPaCHcM2_OQwAAAZI"]
[Thu Feb 12 21:09:54.636164 2026] [:error] [pid 46675:tid 46687] [client 20.215.248.189:63400] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aY3RIjuaQILPonWFiQlsdQAAAUk"]
[Thu Feb 12 21:09:55.315278 2026] [:error] [pid 46718:tid 46722] [client 20.215.248.189:60166] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aY3RI0dfX45LelQwruQbtQAAAcE"]
[Thu Feb 12 21:09:55.965608 2026] [:error] [pid 63511:tid 63515] [client 20.215.248.189:63407] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aY3RI6QCQbD5BgeyIk0lmwAAAAI"]
[Thu Feb 12 21:09:56.510075 2026] [:error] [pid 63416:tid 63433] [client 20.215.248.189:63904] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aY3RJL2wmecPaCHcM2_ORgAAAYw"]
[Thu Feb 12 21:09:59.436472 2026] [:error] [pid 46603:tid 46614] [client 20.215.248.189:63881] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aY3RJ_Ei6O39v05JNJd6aQAAAQk"]
[Thu Feb 12 21:09:59.961265 2026] [:error] [pid 46675:tid 46686] [client 20.215.248.189:63396] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aY3RJzuaQILPonWFiQlsfAAAAUg"]
[Thu Feb 12 21:10:00.898453 2026] [:error] [pid 63416:tid 63426] [client 20.215.248.189:60184] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aY3RKL2wmecPaCHcM2_OTAAAAYU"]
[Thu Feb 12 21:10:01.764694 2026] [:error] [pid 46603:tid 46613] [client 20.215.248.189:63381] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aY3RKfEi6O39v05JNJd6bQAAAQg"]
[Thu Feb 12 21:10:02.339529 2026] [:error] [pid 46603:tid 46626] [client 20.215.248.189:60168] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aY3RKvEi6O39v05JNJd6bgAAARU"]
[Thu Feb 12 21:10:03.609557 2026] [:error] [pid 63511:tid 63536] [client 20.215.248.189:60169] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aY3RK6QCQbD5BgeyIk0lpgAAABc"]
[Thu Feb 12 21:10:04.158304 2026] [:error] [pid 46603:tid 46612] [client 20.215.248.189:63413] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aY3RLPEi6O39v05JNJd6cAAAAQc"]
[Thu Feb 12 21:10:04.964454 2026] [:error] [pid 46675:tid 46688] [client 20.215.248.189:63389] [client 20.215.248.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aY3RLDuaQILPonWFiQlsfwAAAUo"]
[Thu Feb 12 21:10:06.227438 2026] [:error] [pid 46603:tid 46611] [client 20.215.248.189:63388] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY3RLvEi6O39v05JNJd6cgAAAQY"]
[Thu Feb 12 21:10:07.535397 2026] [:error] [pid 46718:tid 46725] [client 20.215.248.189:63912] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY3RL0dfX45LelQwruQbwAAAAcQ"]
[Thu Feb 12 21:10:09.523952 2026] [:error] [pid 63417:tid 63472] [client 20.215.248.189:63421] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aY3RMf8gSb97qRMtXCLy2QAAAFc"]
[Thu Feb 12 21:10:11.299432 2026] [:error] [pid 46718:tid 46745] [client 20.215.248.189:63364] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aY3RM0dfX45LelQwruQbxwAAAdg"]
[Thu Feb 12 21:10:13.957328 2026] [:error] [pid 46675:tid 46688] [client 20.215.248.189:63932] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aY3RNTuaQILPonWFiQlsiwAAAUo"]
[Thu Feb 12 21:10:16.151460 2026] [:error] [pid 63417:tid 63450] [client 20.215.248.189:63371] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aY3ROP8gSb97qRMtXCLy4QAAAEE"]
[Thu Feb 12 21:10:17.072152 2026] [:error] [pid 63418:tid 63495] [client 20.215.248.189:63422] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aY3ROdzjh-bbJnStPZLtvgAAAJM"]
[Thu Feb 12 21:10:19.240939 2026] [:error] [pid 46718:tid 46725] [client 20.215.248.189:63890] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aY3RO0dfX45LelQwruQbzwAAAcQ"]
[Thu Feb 12 21:10:20.038690 2026] [:error] [pid 63418:tid 63490] [client 20.215.248.189:63883] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aY3RPNzjh-bbJnStPZLtwgAAAI4"]
[Thu Feb 12 21:10:21.572539 2026] [:error] [pid 63417:tid 63466] [client 20.215.248.189:63390] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aY3RPf8gSb97qRMtXCLy6QAAAFE"]
[Thu Feb 12 21:10:22.717473 2026] [:error] [pid 46603:tid 46619] [client 20.215.248.189:63383] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aY3RPvEi6O39v05JNJd6fgAAAQ4"]
[Thu Feb 12 21:10:23.880978 2026] [:error] [pid 63416:tid 63436] [client 20.215.248.189:63924] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aY3RP72wmecPaCHcM2_OXgAAAY8"]
[Thu Feb 12 21:10:24.653404 2026] [:error] [pid 65064:tid 65067] [client 20.215.248.189:63895] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aY3RQBOvRgscTcqsMBkBfQAAAMA"]
[Thu Feb 12 21:10:25.391351 2026] [:error] [pid 63417:tid 63471] [client 20.215.248.189:63374] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aY3RQf8gSb97qRMtXCLy7AAAAFY"]
[Thu Feb 12 21:10:26.547658 2026] [:error] [pid 63417:tid 63459] [client 20.215.248.189:63917] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aY3RQv8gSb97qRMtXCLy7wAAAEo"]
[Thu Feb 12 21:10:27.804591 2026] [:error] [pid 63418:tid 63500] [client 20.215.248.189:63402] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aY3RQ9zjh-bbJnStPZLtygAAAJg"]
[Thu Feb 12 21:10:29.515036 2026] [:error] [pid 65064:tid 65069] [client 20.215.248.189:63366] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aY3RRROvRgscTcqsMBkBggAAAMI"]
[Thu Feb 12 21:10:32.120624 2026] [:error] [pid 46718:tid 46732] [client 20.215.248.189:60198] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aY3RSEdfX45LelQwruQb1QAAAcs"]
[Thu Feb 12 21:10:33.241084 2026] [:error] [pid 65064:tid 65086] [client 20.215.248.189:63375] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "aY3RSROvRgscTcqsMBkBhgAAANM"]
[Thu Feb 12 21:10:34.819857 2026] [:error] [pid 46603:tid 46618] [client 20.215.248.189:58261] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aY3RSvEi6O39v05JNJd6gwAAAQ0"]
[Thu Feb 12 21:10:36.627529 2026] [:error] [pid 46718:tid 46735] [client 20.215.248.189:63382] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aY3RTEdfX45LelQwruQb2gAAAc4"]
[Thu Feb 12 21:10:37.543775 2026] [:error] [pid 46718:tid 46731] [client 20.215.248.189:60215] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aY3RTUdfX45LelQwruQb3QAAAco"]
[Thu Feb 12 21:10:38.548911 2026] [:error] [pid 46675:tid 46686] [client 20.215.248.189:63403] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "aY3RTjuaQILPonWFiQlsogAAAUg"]
[Thu Feb 12 21:10:39.676965 2026] [:error] [pid 63511:tid 63528] [client 20.215.248.189:63916] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aY3RT6QCQbD5BgeyIk0ltAAAAA8"]
[Thu Feb 12 21:10:40.712317 2026] [:error] [pid 65064:tid 65071] [client 20.215.248.189:60192] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aY3RUBOvRgscTcqsMBkBiwAAAMQ"]
[Thu Feb 12 21:10:42.061879 2026] [:error] [pid 46603:tid 46617] [client 20.215.248.189:60161] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aY3RUvEi6O39v05JNJd6jwAAAQw"]
[Thu Feb 12 21:10:42.962037 2026] [:error] [pid 46675:tid 46682] [client 20.215.248.189:60206] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aY3RUjuaQILPonWFiQlspwAAAUQ"]
[Thu Feb 12 21:10:43.816985 2026] [:error] [pid 63416:tid 63422] [client 20.215.248.189:63399] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aY3RU72wmecPaCHcM2_OegAAAYE"]
[Thu Feb 12 21:10:44.570174 2026] [:error] [pid 63416:tid 63431] [client 20.215.248.189:63918] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aY3RVL2wmecPaCHcM2_OewAAAYo"]
[Thu Feb 12 21:10:45.410131 2026] [:error] [pid 46718:tid 46731] [client 20.215.248.189:63909] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aY3RVUdfX45LelQwruQb6AAAAco"]
[Thu Feb 12 21:10:46.304790 2026] [:error] [pid 46675:tid 46679] [client 20.215.248.189:63874] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aY3RVjuaQILPonWFiQlsqgAAAUE"]
[Thu Feb 12 21:10:47.226982 2026] [:error] [pid 46718:tid 46726] [client 20.215.248.189:60172] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aY3RV0dfX45LelQwruQb8gAAAcU"]
[Thu Feb 12 21:10:47.900729 2026] [:error] [pid 63511:tid 63522] [client 20.215.248.189:63901] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aY3RV6QCQbD5BgeyIk0luwAAAAk"]
[Thu Feb 12 21:10:48.464917 2026] [:error] [pid 46603:tid 46624] [client 20.215.248.189:63908] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aY3RWPEi6O39v05JNJd6lAAAARM"]
[Thu Feb 12 21:10:57.851471 2026] [:error] [pid 65064:tid 65068] [client 20.215.248.189:63372] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3RYROvRgscTcqsMBkBnQAAAME"]
[Thu Feb 12 21:10:59.542427 2026] [:error] [pid 63416:tid 63443] [client 20.215.248.189:63420] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3RY72wmecPaCHcM2_OhgAAAZY"]
[Thu Feb 12 21:11:00.677854 2026] [:error] [pid 46718:tid 46729] [client 20.215.248.189:60179] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3RZEdfX45LelQwruQcBQAAAcg"]
[Thu Feb 12 21:11:02.322689 2026] [:error] [pid 63511:tid 63532] [client 20.215.248.189:63418] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aY3RZqQCQbD5BgeyIk0l0gAAABM"]
[Thu Feb 12 21:11:04.115443 2026] [:error] [pid 46718:tid 46721] [client 20.215.248.189:63925] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aY3RaEdfX45LelQwruQcEAAAAcA"]
[Thu Feb 12 21:11:07.148928 2026] [:error] [pid 63416:tid 63428] [client 20.215.248.189:63913] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aY3Ra72wmecPaCHcM2_OigAAAYc"]
[Thu Feb 12 21:11:07.985849 2026] [:error] [pid 46718:tid 46745] [client 20.215.248.189:63416] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aY3Ra0dfX45LelQwruQcKQAAAdg"]
[Thu Feb 12 21:11:08.795369 2026] [:error] [pid 46603:tid 46622] [client 20.215.248.189:58244] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "aY3RbPEi6O39v05JNJd64QAAARE"]
[Thu Feb 12 21:11:09.523428 2026] [:error] [pid 63511:tid 63528] [client 20.215.248.189:60162] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aY3RbaQCQbD5BgeyIk0l2gAAAA8"]
[Thu Feb 12 21:11:10.340878 2026] [:error] [pid 46675:tid 46692] [client 20.215.248.189:63384] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aY3RbjuaQILPonWFiQls4wAAAU4"]
[Thu Feb 12 21:11:11.170114 2026] [:error] [pid 46718:tid 46721] [client 20.215.248.189:63919] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aY3Rb0dfX45LelQwruQcLwAAAcA"]
[Thu Feb 12 21:11:11.827132 2026] [:error] [pid 63511:tid 63525] [client 20.215.248.189:60187] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aY3Rb6QCQbD5BgeyIk0l3wAAAAw"]
[Thu Feb 12 21:11:12.679207 2026] [:error] [pid 46718:tid 46742] [client 20.215.248.189:60177] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aY3RcEdfX45LelQwruQcNAAAAdU"]
[Thu Feb 12 21:11:13.303591 2026] [:error] [pid 63511:tid 63515] [client 20.215.248.189:60208] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aY3RcaQCQbD5BgeyIk0l4AAAAAI"]
[Thu Feb 12 21:11:13.966991 2026] [:error] [pid 63511:tid 63529] [client 20.215.248.189:60191] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aY3RcaQCQbD5BgeyIk0l4gAAABA"]
[Thu Feb 12 21:11:14.852445 2026] [:error] [pid 46603:tid 46625] [client 20.215.248.189:57046] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aY3RcvEi6O39v05JNJd66wAAARQ"]
[Thu Feb 12 21:11:15.674330 2026] [:error] [pid 65064:tid 65085] [client 20.215.248.189:63395] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aY3RcxOvRgscTcqsMBkB4QAAANI"]
[Thu Feb 12 21:11:16.582372 2026] [:error] [pid 46675:tid 46699] [client 20.215.248.189:58269] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aY3RdDuaQILPonWFiQls5wAAAVU"]
[Thu Feb 12 21:11:17.346404 2026] [:error] [pid 63416:tid 63421] [client 20.215.248.189:60189] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aY3Rdb2wmecPaCHcM2_OkgAAAYA"]
[Thu Feb 12 21:11:18.004407 2026] [:error] [pid 63418:tid 63480] [client 20.215.248.189:60174] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aY3Rdtzjh-bbJnStPZLt-gAAAIQ"]
[Thu Feb 12 21:11:18.815793 2026] [:error] [pid 63511:tid 63529] [client 20.215.248.189:60210] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aY3RdqQCQbD5BgeyIk0l8AAAABA"]
[Thu Feb 12 21:11:20.052723 2026] [:error] [pid 63511:tid 63516] [client 20.215.248.189:58286] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aY3ReKQCQbD5BgeyIk0l8wAAAAM"]
[Thu Feb 12 21:11:25.750139 2026] [:error] [pid 63416:tid 63433] [client 20.215.248.189:63409] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aY3Rfb2wmecPaCHcM2_OmwAAAYw"]
[Thu Feb 12 21:11:30.887169 2026] [:error] [pid 46718:tid 46739] [client 20.215.248.189:60171] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aY3RgkdfX45LelQwruQcRgAAAdI"]
[Thu Feb 12 21:11:33.724236 2026] [:error] [pid 65064:tid 65079] [client 20.215.248.189:60173] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aY3RhROvRgscTcqsMBkB-AAAAMw"]
[Thu Feb 12 21:11:35.696255 2026] [:error] [pid 46718:tid 46734] [client 20.215.248.189:60160] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aY3Rh0dfX45LelQwruQcVwAAAc0"]
[Thu Feb 12 21:11:36.492594 2026] [:error] [pid 63418:tid 63495] [client 20.215.248.189:63886] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aY3RiNzjh-bbJnStPZLuOgAAAJM"]
[Thu Feb 12 21:11:37.795779 2026] [:error] [pid 63418:tid 63488] [client 20.215.248.189:63410] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aY3Ridzjh-bbJnStPZLuQwAAAIw"]
[Thu Feb 12 21:11:38.706340 2026] [:error] [pid 63418:tid 63483] [client 20.215.248.189:60180] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aY3Ritzjh-bbJnStPZLuSQAAAIc"]
[Thu Feb 12 21:11:39.517919 2026] [:error] [pid 65064:tid 65087] [client 20.215.248.189:63367] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aY3RixOvRgscTcqsMBkCAwAAANQ"]
[Thu Feb 12 21:11:40.352232 2026] [:error] [pid 63417:tid 63473] [client 20.215.248.189:60182] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aY3RjP8gSb97qRMtXCLzLwAAAFg"]
[Thu Feb 12 21:11:41.214242 2026] [:error] [pid 65064:tid 65088] [client 20.215.248.189:58250] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aY3RjROvRgscTcqsMBkCBwAAANU"]
[Thu Feb 12 21:11:42.118284 2026] [:error] [pid 65064:tid 65072] [client 20.215.248.189:58296] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aY3RjhOvRgscTcqsMBkCCQAAAMU"]
[Thu Feb 12 21:11:43.019163 2026] [:error] [pid 46603:tid 46621] [client 20.215.248.189:63879] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aY3Rj_Ei6O39v05JNJd7EQAAARA"]
[Thu Feb 12 21:11:44.434803 2026] [:error] [pid 65064:tid 65075] [client 20.215.248.189:58246] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aY3RkBOvRgscTcqsMBkCCwAAAMg"]
[Thu Feb 12 21:11:45.308763 2026] [:error] [pid 65064:tid 65076] [client 20.215.248.189:60205] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aY3RkROvRgscTcqsMBkCDgAAAMk"]
[Thu Feb 12 21:11:46.226718 2026] [:error] [pid 65064:tid 65070] [client 20.215.248.189:63377] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aY3RkhOvRgscTcqsMBkCEQAAAMM"]
[Thu Feb 12 21:11:47.064742 2026] [:error] [pid 63511:tid 63531] [client 20.215.248.189:63401] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aY3Rk6QCQbD5BgeyIk0mFgAAABI"]
[Thu Feb 12 21:11:47.821993 2026] [:error] [pid 65064:tid 65078] [client 20.215.248.189:63897] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aY3RkxOvRgscTcqsMBkCFgAAAMs"]
[Thu Feb 12 21:11:48.510916 2026] [:error] [pid 63511:tid 63525] [client 20.215.248.189:63899] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aY3RlKQCQbD5BgeyIk0mFwAAAAw"]
[Thu Feb 12 21:11:49.342453 2026] [:error] [pid 65064:tid 65077] [client 20.215.248.189:63914] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aY3RlROvRgscTcqsMBkCGgAAAMo"]
[Thu Feb 12 21:11:50.200630 2026] [:error] [pid 46603:tid 46613] [client 20.215.248.189:63891] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aY3RlvEi6O39v05JNJd7HQAAAQg"]
[Thu Feb 12 21:11:50.795466 2026] [:error] [pid 46675:tid 46692] [client 20.215.248.189:57028] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aY3RljuaQILPonWFiQltAAAAAU4"]
[Thu Feb 12 21:11:51.727048 2026] [:error] [pid 46675:tid 46695] [client 20.215.248.189:63398] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aY3RlzuaQILPonWFiQltAQAAAVE"]
[Thu Feb 12 21:11:54.505862 2026] [:error] [pid 63417:tid 63462] [client 20.215.248.189:60195] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aY3Rmv8gSb97qRMtXCLzOAAAAE0"]
[Thu Feb 12 21:11:56.805855 2026] [:error] [pid 46675:tid 46695] [client 20.215.248.189:63903] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aY3RnDuaQILPonWFiQltGAAAAVE"]
[Thu Feb 12 21:12:10.707286 2026] [:error] [pid 63511:tid 63528] [client 20.215.248.189:60164] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aY3RqqQCQbD5BgeyIk0mSgAAAA8"]
[Thu Feb 12 21:12:11.789156 2026] [:error] [pid 63416:tid 63440] [client 20.215.248.189:57035] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aY3Rq72wmecPaCHcM2_OwwAAAZM"]
[Thu Feb 12 21:12:13.466473 2026] [:error] [pid 63416:tid 63441] [client 20.215.248.189:63379] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aY3Rrb2wmecPaCHcM2_OyAAAAZQ"]
[Thu Feb 12 21:12:14.380578 2026] [:error] [pid 63416:tid 63436] [client 20.215.248.189:60223] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aY3Rrr2wmecPaCHcM2_OyQAAAY8"]
[Thu Feb 12 21:12:15.938070 2026] [:error] [pid 46603:tid 46625] [client 20.215.248.189:63893] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aY3Rr_Ei6O39v05JNJd7OAAAARQ"]
[Thu Feb 12 21:12:18.108004 2026] [:error] [pid 46675:tid 46691] [client 20.215.248.189:60170] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aY3RsjuaQILPonWFiQltLgAAAU0"]
[Thu Feb 12 21:12:19.397864 2026] [:error] [pid 63417:tid 63451] [client 20.215.248.189:57055] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aY3Rs_8gSb97qRMtXCLzVQAAAEI"]
[Thu Feb 12 21:12:21.704039 2026] [:error] [pid 46718:tid 46721] [client 20.215.248.189:58254] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aY3RtUdfX45LelQwruQcugAAAcA"]
[Thu Feb 12 21:12:23.323717 2026] [:error] [pid 46603:tid 46620] [client 20.215.248.189:63411] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aY3Rt_Ei6O39v05JNJd7QAAAAQ8"]
[Thu Feb 12 21:12:26.229035 2026] [:error] [pid 46718:tid 46744] [client 20.215.248.189:63404] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aY3RukdfX45LelQwruQcvgAAAdc"]
[Thu Feb 12 21:12:27.546205 2026] [:error] [pid 63417:tid 63454] [client 20.215.248.189:63928] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aY3Ru_8gSb97qRMtXCLzXAAAAEU"]
[Thu Feb 12 21:12:28.765455 2026] [:error] [pid 46675:tid 46702] [client 20.215.248.189:58243] [client 20.215.248.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aY3RvDuaQILPonWFiQltOQAAAVg"]
[Thu Feb 12 21:43:55.609042 2026] [:error] [pid 65064:tid 65068] [client 159.65.140.53:63670] [client 159.65.140.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.140.53, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aY3ZGxOvRgscTcqsMBkKpgAAAME"], referer: https://duckduckgo.com/
[Thu Feb 12 21:44:07.265614 2026] [:error] [pid 63417:tid 63462] [client 159.65.140.53:64749] [client 159.65.140.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.140.53, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aY3ZJ_8gSb97qRMtXCL6pwAAAE0"], referer: https://www.facebook.com/
[Thu Feb 12 21:44:22.707500 2026] [:error] [pid 46718:tid 46737] [client 159.65.140.53:49808] [client 159.65.140.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.140.53, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aY3ZNkdfX45LelQwruQoogAAAdA"], referer: https://www.facebook.com/
[Thu Feb 12 22:48:27.821159 2026] [:error] [pid 63416:tid 63430] [client 103.77.107.222:65520] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aY3oO72wmecPaCHcM2_j1wAAAYk"]
[Thu Feb 12 22:48:28.040992 2026] [:error] [pid 46603:tid 46626] [client 103.77.107.222:49171] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aY3oPPEi6O39v05JNJeY2gAAARU"]
[Thu Feb 12 23:43:33.101992 2026] [:error] [pid 46675:tid 46679] [client 43.130.53.252:34658] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aY31JTuaQILPonWFiQmcRwAAAUE"]
[Fri Feb 13 00:33:58.816204 2026] [:error] [pid 37511:tid 37603] [client 64.89.163.24:57774] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aY4A9u8EBJ86uZdxpA1pIAAAAFY"]
[Fri Feb 13 00:34:00.742905 2026] [:error] [pid 37511:tid 37605] [client 64.89.163.24:59073] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aY4A-O8EBJ86uZdxpA1pVwAAAFg"]
[Fri Feb 13 00:34:02.787197 2026] [:error] [pid 37510:tid 37538] [client 64.89.163.24:60163] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aY4A-sUrqDPNSf1wYBWCEwAAAZY"]
[Fri Feb 13 00:34:05.242161 2026] [:error] [pid 37511:tid 37605] [client 64.89.163.24:62127] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aY4A_e8EBJ86uZdxpA1p3wAAAFg"]
[Fri Feb 13 00:34:07.779684 2026] [:error] [pid 37510:tid 37517] [client 64.89.163.24:63784] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aY4A_8UrqDPNSf1wYBWCWQAAAYE"]
[Fri Feb 13 02:40:48.142914 2026] [:error] [pid 37510:tid 37541] [client 34.67.117.238:53326] [client 34.67.117.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.67.117.238, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aY4esMUrqDPNSf1wYBWwhAAAAZg"]
[Fri Feb 13 02:40:50.788784 2026] [:error] [pid 37510:tid 37521] [client 34.67.117.238:53326] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY4essUrqDPNSf1wYBWwlwAAAYU"]
[Fri Feb 13 02:40:51.698375 2026] [:error] [pid 37512:tid 37624] [client 34.67.117.238:60282] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY4es9De69znS-f6vSZjzQAAAA4"]
[Fri Feb 13 02:40:52.603960 2026] [:error] [pid 37511:tid 37600] [client 34.67.117.238:52140] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aY4etO8EBJ86uZdxpA2X4gAAAFM"]
[Fri Feb 13 02:40:53.474207 2026] [:error] [pid 37511:tid 37595] [client 34.67.117.238:57102] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY4ete8EBJ86uZdxpA2X5AAAAE4"]
[Fri Feb 13 02:40:54.371913 2026] [:error] [pid 37512:tid 37625] [client 34.67.117.238:64790] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY4ettDe69znS-f6vSZj1AAAAA8"]
[Fri Feb 13 02:40:55.228713 2026] [:error] [pid 37856:tid 37867] [client 34.67.117.238:62203] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY4et5UcWP4qWM7hWsknJQAAAMg"]
[Fri Feb 13 02:40:56.074315 2026] [:error] [pid 37856:tid 37870] [client 34.67.117.238:49464] [client 34.67.117.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY4euJUcWP4qWM7hWsknKgAAAMs"]
[Fri Feb 13 02:48:50.373070 2026] [:error] [pid 37510:tid 37530] [client 35.193.19.255:60404] [client 35.193.19.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.193.19.255, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aY4gksUrqDPNSf1wYBW0JQAAAY4"]
[Fri Feb 13 02:48:52.789443 2026] [:error] [pid 37510:tid 37529] [client 35.193.19.255:60404] [client 35.193.19.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY4glMUrqDPNSf1wYBW0MAAAAY0"]
[Fri Feb 13 02:48:53.595616 2026] [:error] [pid 23410:tid 23432] [client 35.193.19.255:60673] [client 35.193.19.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY4glRXZP6NFBacuW_1P2wAAAJQ"]
[Fri Feb 13 02:48:54.502454 2026] [:error] [pid 37512:tid 37618] [client 35.193.19.255:64786] [client 35.193.19.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aY4gltDe69znS-f6vSZnWAAAAAk"]
[Fri Feb 13 02:48:55.559639 2026] [:error] [pid 23410:tid 23436] [client 35.193.19.255:49953] [client 35.193.19.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY4glxXZP6NFBacuW_1P3gAAAJg"]
[Fri Feb 13 02:48:56.433837 2026] [:error] [pid 37512:tid 37630] [client 35.193.19.255:65382] [client 35.193.19.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY4gmNDe69znS-f6vSZnWwAAABM"]
[Fri Feb 13 02:48:57.476816 2026] [:error] [pid 23410:tid 23418] [client 35.193.19.255:63642] [client 35.193.19.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY4gmRXZP6NFBacuW_1P4AAAAIY"]
[Fri Feb 13 02:48:58.333116 2026] [:error] [pid 23410:tid 23417] [client 35.193.19.255:53473] [client 35.193.19.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY4gmhXZP6NFBacuW_1P5AAAAIU"]
[Fri Feb 13 04:25:49.331389 2026] [:error] [pid 49223:tid 49244] [client 177.223.244.99:28071] [client 177.223.244.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.223.244.99, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aY43TR8A_fZBamNLnfUVnwAAAAw"]
[Fri Feb 13 13:32:15.125761 2026] [:error] [pid 49224:tid 49269] [client 104.28.164.218:22112] [client 104.28.164.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aY63X9iAvPoWmw5YhwmGsQAAAEI"]
[Fri Feb 13 13:58:46.547759 2026] [:error] [pid 49224:tid 49268] [client 37.140.223.52:33181] [client 37.140.223.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.52, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aY69ltiAvPoWmw5YhwmQRQAAAEE"]
[Fri Feb 13 13:58:48.471988 2026] [:error] [pid 46821:tid 46844] [client 193.36.225.178:34907] [client 193.36.225.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.178, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aY69mI6G1N5YSq0J0gfMEwAAAVU"]
[Fri Feb 13 14:34:49.172371 2026] [:error] [pid 47080:tid 47089] [client 209.50.169.134:17293] [client 209.50.169.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aY7GCUbWJwYCVF39z6vS8wAAAcE"]
[Fri Feb 13 14:34:49.358912 2026] [:error] [pid 47575:tid 47600] [client 216.26.250.60:45989] [client 216.26.250.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aY7GCQIPBuXb07mA_mR9YQAAAtM"]
[Fri Feb 13 14:34:49.935620 2026] [:error] [pid 49225:tid 49316] [client 65.111.25.121:17119] [client 65.111.25.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aY7GCTwH8-zGxtAd3jvCoQAAAJY"]
[Fri Feb 13 14:34:50.652254 2026] [:error] [pid 49225:tid 49308] [client 209.50.171.135:38697] [client 209.50.171.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aY7GCjwH8-zGxtAd3jvCowAAAI4"]
[Fri Feb 13 14:34:51.672184 2026] [:error] [pid 47575:tid 47580] [client 65.111.22.78:38953] [client 65.111.22.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aY7GCwIPBuXb07mA_mR9agAAAsE"]
[Fri Feb 13 14:34:51.989041 2026] [:error] [pid 47080:tid 47109] [client 65.111.10.114:11983] [client 65.111.10.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aY7GC0bWJwYCVF39z6vS-QAAAdU"]
[Fri Feb 13 14:34:52.872003 2026] [:error] [pid 47080:tid 47102] [client 104.207.63.137:40575] [client 104.207.63.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aY7GDEbWJwYCVF39z6vS_QAAAc4"]
[Fri Feb 13 14:34:53.427022 2026] [:error] [pid 49223:tid 49243] [client 209.50.180.187:28001] [client 209.50.180.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aY7GDR8A_fZBamNLnfX9oAAAAAs"]
[Fri Feb 13 14:34:54.120089 2026] [:error] [pid 49335:tid 49354] [client 209.50.166.103:40311] [client 209.50.166.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "aY7GDqp--SFY2nwOiqkqjQAAANE"]
[Fri Feb 13 14:34:54.865668 2026] [:error] [pid 51243:tid 51269] [client 154.213.160.232:31021] [client 154.213.160.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "aY7GDsim7ZTAHzi7xZuRXAAAARg"]
[Fri Feb 13 14:34:55.953747 2026] [:error] [pid 51243:tid 51262] [client 104.207.52.148:16535] [client 104.207.52.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aY7GD8im7ZTAHzi7xZuRYAAAARE"]
[Fri Feb 13 14:34:56.011611 2026] [:error] [pid 51243:tid 51254] [client 216.26.241.186:63113] [client 216.26.241.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aY7GEMim7ZTAHzi7xZuRYQAAAQk"]
[Fri Feb 13 14:34:56.711755 2026] [:error] [pid 47358:tid 47375] [client 45.3.46.167:54971] [client 45.3.46.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aY7GEMQFBuVVUQTESUzRSgAAAok"]
[Fri Feb 13 14:34:57.746143 2026] [:error] [pid 49225:tid 49314] [client 104.207.35.80:32057] [client 104.207.35.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aY7GETwH8-zGxtAd3jvCrgAAAJQ"]
[Fri Feb 13 14:34:58.660114 2026] [:error] [pid 49225:tid 49301] [client 209.50.183.79:54123] [client 209.50.183.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "aY7GEjwH8-zGxtAd3jvCsQAAAIc"]
[Fri Feb 13 14:35:00.228230 2026] [:error] [pid 51243:tid 51258] [client 65.111.14.31:48345] [client 65.111.14.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "aY7GFMim7ZTAHzi7xZuRaAAAAQ0"]
[Fri Feb 13 14:35:00.788424 2026] [:error] [pid 18097:tid 18114] [client 209.50.183.204:54297] [client 209.50.183.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/frontend/.env"] [unique_id "aY7GFHFzYiQ_BfaDDlbdCwAAAY8"]
[Fri Feb 13 14:35:01.710423 2026] [:error] [pid 49223:tid 49244] [client 65.111.3.108:42683] [client 65.111.3.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/frontend/.env"] [unique_id "aY7GFR8A_fZBamNLnfX9uwAAAAw"]
[Fri Feb 13 14:35:02.263306 2026] [:error] [pid 47080:tid 47110] [client 209.50.190.31:55203] [client 209.50.190.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aY7GFkbWJwYCVF39z6vTEQAAAdY"]
[Fri Feb 13 14:35:02.811332 2026] [:error] [pid 47080:tid 47104] [client 45.3.42.88:57159] [client 45.3.42.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aY7GFkbWJwYCVF39z6vTFAAAAdA"]
[Fri Feb 13 14:35:03.360666 2026] [:error] [pid 18097:tid 18103] [client 216.26.254.224:16167] [client 216.26.254.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aY7GF3FzYiQ_BfaDDlbdDgAAAYQ"]
[Fri Feb 13 14:35:03.897114 2026] [:error] [pid 18097:tid 18102] [client 154.213.160.244:30307] [client 154.213.160.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aY7GF3FzYiQ_BfaDDlbdEQAAAYM"]
[Fri Feb 13 14:35:04.582352 2026] [:error] [pid 49335:tid 49341] [client 65.111.1.95:18069] [client 65.111.1.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aY7GGKp--SFY2nwOiqkqmgAAAMQ"]
[Fri Feb 13 14:35:05.000261 2026] [:error] [pid 47080:tid 47092] [client 209.50.183.213:15085] [client 209.50.183.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aY7GGEbWJwYCVF39z6vTGAAAAcQ"]
[Fri Feb 13 14:35:05.664327 2026] [:error] [pid 47575:tid 47603] [client 65.111.14.31:51171] [client 65.111.14.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/dev/.git/config"] [unique_id "aY7GGQIPBuXb07mA_mR9ewAAAtY"]
[Fri Feb 13 14:35:06.095518 2026] [:error] [pid 51243:tid 51249] [client 154.213.165.81:46585] [client 154.213.165.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/dev/.git/config"] [unique_id "aY7GGsim7ZTAHzi7xZuRawAAAQQ"]
[Fri Feb 13 14:35:06.792622 2026] [:error] [pid 18097:tid 18123] [client 193.56.28.182:44193] [client 193.56.28.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.git/config"] [unique_id "aY7GGnFzYiQ_BfaDDlbdEwAAAZg"]
[Fri Feb 13 14:35:07.361229 2026] [:error] [pid 49225:tid 49299] [client 104.207.41.229:34375] [client 104.207.41.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.git/config"] [unique_id "aY7GGzwH8-zGxtAd3jvCvwAAAIU"]
[Fri Feb 13 14:35:08.261663 2026] [:error] [pid 47575:tid 47599] [client 209.50.187.185:55979] [client 209.50.187.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/v2/.git/config"] [unique_id "aY7GHAIPBuXb07mA_mR9gAAAAtI"]
[Fri Feb 13 14:35:08.617895 2026] [:error] [pid 46821:tid 46824] [client 65.111.9.81:17601] [client 65.111.9.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/v2/.git/config"] [unique_id "aY7GHI6G1N5YSq0J0gfT2wAAAUE"]
[Fri Feb 13 14:35:09.752213 2026] [:error] [pid 47080:tid 47102] [client 45.3.33.202:21251] [client 45.3.33.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp/.git/config"] [unique_id "aY7GHUbWJwYCVF39z6vTHwAAAc4"]
[Fri Feb 13 14:35:10.355544 2026] [:error] [pid 49223:tid 49232] [client 209.50.161.157:16553] [client 209.50.161.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp/.git/config"] [unique_id "aY7GHh8A_fZBamNLnfX9xQAAAAA"]
[Fri Feb 13 14:35:11.036250 2026] [:error] [pid 47080:tid 47098] [client 65.111.15.142:33547] [client 65.111.15.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/test/.git/config"] [unique_id "aY7GH0bWJwYCVF39z6vTJQAAAco"]
[Fri Feb 13 14:35:11.627812 2026] [:error] [pid 47080:tid 47095] [client 104.207.32.76:28887] [client 104.207.32.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/test/.git/config"] [unique_id "aY7GH0bWJwYCVF39z6vTKQAAAcc"]
[Fri Feb 13 14:35:12.174074 2026] [:error] [pid 18097:tid 18103] [client 216.26.252.115:40751] [client 216.26.252.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.git/config"] [unique_id "aY7GIHFzYiQ_BfaDDlbdGAAAAYQ"]
[Fri Feb 13 14:35:12.937441 2026] [:error] [pid 47575:tid 47590] [client 216.26.239.68:12611] [client 216.26.239.68] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.git/config"] [unique_id "aY7GIAIPBuXb07mA_mR9iQAAAso"]
[Fri Feb 13 14:35:13.509443 2026] [:error] [pid 47358:tid 47382] [client 209.50.186.185:62325] [client 209.50.186.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backup/.git/config"] [unique_id "aY7GIcQFBuVVUQTESUzRWAAAApA"]
[Fri Feb 13 14:35:14.042556 2026] [:error] [pid 47358:tid 47370] [client 216.26.246.75:29597] [client 216.26.246.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backup/.git/config"] [unique_id "aY7GIsQFBuVVUQTESUzRWgAAAoU"]
[Fri Feb 13 14:35:14.597469 2026] [:error] [pid 47358:tid 47379] [client 209.50.181.20:33177] [client 209.50.181.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/site/.git/config"] [unique_id "aY7GIsQFBuVVUQTESUzRWwAAAo0"]
[Fri Feb 13 14:35:15.135001 2026] [:error] [pid 47575:tid 47581] [client 65.111.28.23:43795] [client 65.111.28.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/site/.git/config"] [unique_id "aY7GIwIPBuXb07mA_mR9jwAAAsI"]
[Fri Feb 13 14:35:15.821219 2026] [:error] [pid 47575:tid 47598] [client 209.50.178.39:9719] [client 209.50.178.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.git/config"] [unique_id "aY7GIwIPBuXb07mA_mR9kAAAAtE"]
[Fri Feb 13 14:35:16.221266 2026] [:error] [pid 47575:tid 47601] [client 45.3.55.253:38339] [client 45.3.55.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.git/config"] [unique_id "aY7GJAIPBuXb07mA_mR9kQAAAtQ"]
[Fri Feb 13 14:35:16.877073 2026] [:error] [pid 47143:tid 47234] [client 209.50.165.47:58369] [client 209.50.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/new/.git/config"] [unique_id "aY7GJMhV30NbMarHJLsIZQAAAlQ"]
[Fri Feb 13 14:35:17.319048 2026] [:error] [pid 47575:tid 47590] [client 154.213.160.71:20773] [client 154.213.160.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/new/.git/config"] [unique_id "aY7GJQIPBuXb07mA_mR9lAAAAso"]
[Fri Feb 13 17:54:40.051029 2026] [:error] [pid 49223:tid 49243] [client 43.135.140.225:48756] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aY704B8A_fZBamNLnfU5-QAAAAs"]
[Fri Feb 13 18:56:20.724711 2026] [:error] [pid 47080:tid 47089] [client 34.73.172.230:59016] [client 34.73.172.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.172.230, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8DVEbWJwYCVF39z6syAAAAAcE"]
[Fri Feb 13 18:56:21.722174 2026] [:error] [pid 47080:tid 47099] [client 34.73.172.230:59016] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aY8DVUbWJwYCVF39z6syBAAAAcs"]
[Fri Feb 13 18:56:22.668034 2026] [:error] [pid 18097:tid 18108] [client 34.73.172.230:63929] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aY8DVnFzYiQ_BfaDDlYhRQAAAYk"]
[Fri Feb 13 18:56:23.625275 2026] [:error] [pid 49223:tid 49241] [client 34.73.172.230:63146] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aY8DVx8A_fZBamNLnfVLNwAAAAk"]
[Fri Feb 13 18:56:24.463848 2026] [:error] [pid 49225:tid 49315] [client 34.73.172.230:52830] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWDwH8-zGxtAd3jv89wAAAJU"]
[Fri Feb 13 18:56:25.396898 2026] [:error] [pid 47143:tid 47220] [client 34.73.172.230:54102] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWchV30NbMarHJLs4-AAAAkY"]
[Fri Feb 13 18:56:26.338670 2026] [:error] [pid 49335:tid 49344] [client 34.73.172.230:55711] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWqp--SFY2nwOiqlepQAAAMc"]
[Fri Feb 13 18:56:27.302974 2026] [:error] [pid 46821:tid 46839] [client 34.73.172.230:64257] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aY8DW46G1N5YSq0J0gcHZwAAAVA"]
[Fri Feb 13 18:56:28.234040 2026] [:error] [pid 18097:tid 18121] [client 34.73.172.230:60258] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXHFzYiQ_BfaDDlYhSwAAAZY"]
[Fri Feb 13 18:56:29.079440 2026] [:error] [pid 49225:tid 49295] [client 34.73.172.230:50985] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXTwH8-zGxtAd3jv9BAAAAIE"]
[Fri Feb 13 18:56:30.012983 2026] [:error] [pid 47080:tid 47107] [client 34.73.172.230:49466] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXkbWJwYCVF39z6syEAAAAdM"]
[Fri Feb 13 18:56:30.950588 2026] [:error] [pid 47080:tid 47102] [client 34.73.172.230:60782] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXkbWJwYCVF39z6syEwAAAc4"]
[Fri Feb 13 18:56:31.885675 2026] [:error] [pid 49223:tid 49234] [client 34.73.172.230:57918] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXx8A_fZBamNLnfVLQAAAAAI"]
[Fri Feb 13 18:56:32.831627 2026] [:error] [pid 49335:tid 49361] [client 34.73.172.230:59973] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY8DYKp--SFY2nwOiqlepgAAANg"]
[Fri Feb 13 22:28:24.796166 2026] [:error] [pid 49223:tid 49250] [client 136.113.227.115:59262] [client 136.113.227.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.227.115, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aY81CB8A_fZBamNLnfWAUQAAABI"]
[Fri Feb 13 22:28:25.768294 2026] [:error] [pid 49223:tid 49236] [client 136.113.227.115:59262] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aY81CR8A_fZBamNLnfWAVgAAAAQ"]
[Fri Feb 13 22:28:26.634643 2026] [:error] [pid 47143:tid 47227] [client 136.113.227.115:55577] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aY81CshV30NbMarHJLtaygAAAk0"]
[Fri Feb 13 22:28:27.484656 2026] [:error] [pid 18097:tid 18100] [client 136.113.227.115:58046] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aY81C3FzYiQ_BfaDDlZOdQAAAYE"]
[Fri Feb 13 22:28:28.463690 2026] [:error] [pid 47575:tid 47590] [client 136.113.227.115:57377] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aY81DAIPBuXb07mA_mTlEwAAAso"]
[Fri Feb 13 22:28:29.323035 2026] [:error] [pid 47080:tid 47102] [client 136.113.227.115:62537] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aY81DUbWJwYCVF39z6twDgAAAc4"]
[Sat Feb 14 05:25:11.193623 2026] [:error] [pid 21785:tid 21830] [client 182.42.111.213:44968] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aY-WtwOBjP5pmZ2xNN4wBwAAAZA"]
[Sat Feb 14 11:37:46.551578 2026] [autoindex:error] [pid 28883:tid 28912] [client 139.59.24.163:51525] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 14:12:23.194854 2026] [:error] [pid 21195:tid 21239] [client 43.130.150.80:55872] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZASR9_2sARdLQ6dpsWX9QAAAEg"]
[Sat Feb 14 14:25:41.887908 2026] [autoindex:error] [pid 63327:tid 63376] [client 139.59.24.163:61602] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 17:58:57.408721 2026] [:error] [pid 56719:tid 56772] [client 103.214.61.25:54717] [client 103.214.61.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.214.61.25, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZBHYUBVs8LiCmFJP0C60gAAAtY"]
[Sat Feb 14 21:47:09.563147 2026] [:error] [pid 36219:tid 36251] [client 170.106.113.235:39196] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZB83Ze-m2OpEy0FNjhkGAAAA4M"]
[Sun Feb 15 00:37:54.614296 2026] [:error] [pid 26742:tid 26753] [client 114.80.36.40:43868] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZCk4qhZQ4eRM9eKYDJw9QAAAEg"]
[Sun Feb 15 00:51:48.094049 2026] [:error] [pid 15954:tid 15991] [client 52.138.250.181:6938] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/88.php"] [unique_id "aZCoJO2YplA3pz7MAbWEiAAAAcc"]
[Sun Feb 15 00:51:48.593864 2026] [:error] [pid 27251:tid 27455] [client 52.138.250.181:8778] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/88.php"] [unique_id "aZCoJOmZvA7hw1HTD8h8tgAAAlg"]
[Sun Feb 15 00:51:49.109304 2026] [:error] [pid 26742:tid 26747] [client 52.138.250.181:10996] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/88.php"] [unique_id "aZCoJahZQ4eRM9eKYDJ0-gAAAEI"]
[Sun Feb 15 00:51:49.642858 2026] [:error] [pid 11800:tid 11861] [client 52.138.250.181:10307] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/88.php"] [unique_id "aZCoJXFcWMbg_UEt9SEu_wAAA1g"]
[Sun Feb 15 00:51:50.161962 2026] [:error] [pid 26742:tid 26750] [client 52.138.250.181:4171] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aZCoJqhZQ4eRM9eKYDJ0_wAAAEU"]
[Sun Feb 15 00:51:50.660758 2026] [:error] [pid 11800:tid 11836] [client 52.138.250.181:4627] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aZCoJnFcWMbg_UEt9SEvAAAAA0s"]
[Sun Feb 15 00:51:51.160810 2026] [:error] [pid 53980:tid 54034] [client 52.138.250.181:9271] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aZCoJ9posYBT7xU8oxTrvwAAAtg"]
[Sun Feb 15 00:51:51.659453 2026] [:error] [pid 27251:tid 27439] [client 52.138.250.181:4379] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aZCoJ-mZvA7hw1HTD8h8vAAAAkk"]
[Sun Feb 15 00:51:52.191646 2026] [:error] [pid 26742:tid 26748] [client 52.138.250.181:11866] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php8.php"] [unique_id "aZCoKKhZQ4eRM9eKYDJ1CwAAAEM"]
[Sun Feb 15 00:51:52.690974 2026] [:error] [pid 26742:tid 26754] [client 52.138.250.181:14466] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php8.php"] [unique_id "aZCoKKhZQ4eRM9eKYDJ1DgAAAEk"]
[Sun Feb 15 00:51:53.191780 2026] [:error] [pid 26742:tid 26749] [client 52.138.250.181:11418] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php8.php"] [unique_id "aZCoKahZQ4eRM9eKYDJ1EAAAAEQ"]
[Sun Feb 15 00:51:53.709457 2026] [:error] [pid 11800:tid 11829] [client 52.138.250.181:4079] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php8.php"] [unique_id "aZCoKXFcWMbg_UEt9SEvAQAAA0Q"]
[Sun Feb 15 00:51:54.226439 2026] [:error] [pid 53980:tid 54024] [client 52.138.250.181:8782] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cvtcosue.php"] [unique_id "aZCoKtposYBT7xU8oxTrxgAAAs4"]
[Sun Feb 15 00:51:54.757310 2026] [:error] [pid 28512:tid 28565] [client 52.138.250.181:8789] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cvtcosue.php"] [unique_id "aZCoKjzHOANQDtWwQYqZ8QAAAZg"]
[Sun Feb 15 00:51:55.256321 2026] [:error] [pid 27251:tid 27441] [client 52.138.250.181:8949] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cvtcosue.php"] [unique_id "aZCoK-mZvA7hw1HTD8h8wAAAAks"]
[Sun Feb 15 00:51:55.799137 2026] [:error] [pid 27515:tid 27658] [client 52.138.250.181:4041] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cvtcosue.php"] [unique_id "aZCoK1IvkRoe5SsSyWz3bQAAA8k"]
[Sun Feb 15 00:51:56.299110 2026] [:error] [pid 53980:tid 54013] [client 52.138.250.181:10329] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aZCoLNposYBT7xU8oxTryAAAAsM"]
[Sun Feb 15 00:51:56.798640 2026] [:error] [pid 28512:tid 28547] [client 52.138.250.181:4195] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aZCoLDzHOANQDtWwQYqZ9AAAAYY"]
[Sun Feb 15 00:51:57.298004 2026] [:error] [pid 11800:tid 11830] [client 52.138.250.181:9247] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aZCoLXFcWMbg_UEt9SEvBwAAA0U"]
[Sun Feb 15 00:51:57.805340 2026] [:error] [pid 28479:tid 28490] [client 52.138.250.181:6948] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aZCoLYyrlZ0IAq0j37ja8QAAAAk"]
[Sun Feb 15 00:51:58.322312 2026] [:error] [pid 11800:tid 11850] [client 52.138.250.181:11862] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aZCoLnFcWMbg_UEt9SEvDAAAA1I"]
[Sun Feb 15 00:51:58.840217 2026] [:error] [pid 11800:tid 11848] [client 52.138.250.181:8921] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aZCoLnFcWMbg_UEt9SEvDQAAA1A"]
[Sun Feb 15 00:51:59.372088 2026] [:error] [pid 27515:tid 27662] [client 52.138.250.181:3475] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aZCoL1IvkRoe5SsSyWz3cgAAA80"]
[Sun Feb 15 00:51:59.872168 2026] [:error] [pid 28512:tid 28563] [client 52.138.250.181:5785] [client 52.138.250.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aZCoLzzHOANQDtWwQYqZ-wAAAZY"]
[Sun Feb 15 01:42:28.945507 2026] [:error] [pid 53980:tid 54014] [client 217.216.74.224:64384] [client 217.216.74.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZC0BNposYBT7xU8oxTz0AAAAsQ"]
[Sun Feb 15 01:42:30.104159 2026] [:error] [pid 53980:tid 54021] [client 217.216.74.224:65031] [client 217.216.74.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aZC0BtposYBT7xU8oxTz0wAAAss"]
[Sun Feb 15 01:42:30.366165 2026] [:error] [pid 28512:tid 28555] [client 217.216.74.224:60911] [client 217.216.74.224] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/media/system/js/core.js"] [unique_id "aZC0BjzHOANQDtWwQYqiRwAAAY4"]
[Sun Feb 15 02:56:32.789604 2026] [:error] [pid 15954:tid 16000] [client 43.153.123.3:42096] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZDFYO2YplA3pz7MAbWWDQAAAdA"]
[Sun Feb 15 13:02:53.693109 2026] [:error] [pid 35560:tid 35638] [client 174.138.81.28:49940] [client 174.138.81.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aZFTfQZSChHPc3occZ4HWwAAAxU"]
[Sun Feb 15 13:02:54.816271 2026] [:error] [pid 35560:tid 35630] [client 174.138.81.28:46746] [client 174.138.81.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aZFTfgZSChHPc3occZ4HXgAAAw0"]
[Sun Feb 15 20:29:44.429078 2026] [:error] [pid 14577:tid 14582] [client 43.130.14.245:47898] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZG8OHTqrkuce6u39HtMAQAAAQI"]
[Sun Feb 15 22:59:10.548650 2026] [:error] [pid 42752:tid 42778] [client 43.153.119.119:36858] [client 43.153.119.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZHfPsClY05C-Gq9l0h5mAAAAtM"]
[Mon Feb 16 03:32:22.310954 2026] [autoindex:error] [pid 1335:tid 1448] [client 207.180.241.56:60769] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Feb 16 07:50:03.552133 2026] [:error] [pid 4347:tid 4368] [client 182.44.10.67:53369] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZJbqzFcjv6pEAnSEifAtgAAAAA"]
[Mon Feb 16 09:09:29.935676 2026] [:error] [pid 4348:tid 4403] [client 177.10.226.192:10044] [client 177.10.226.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.10.226.192, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZJuSXxbK-cCGKg9ayvHLAAAAEg"]
[Mon Feb 16 11:53:26.760268 2026] [:error] [pid 4347:tid 4392] [client 43.133.69.37:33550] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZKUtjFcjv6pEAnSEicc4QAAABg"]
[Mon Feb 16 14:08:28.092481 2026] [:error] [pid 37004:tid 37016] [client 49.235.136.28:53058] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZK0XFXWqA9gxE5oGmbLwgAAAQo"]
[Mon Feb 16 20:21:02.603891 2026] [:error] [pid 4349:tid 4427] [client 182.40.104.255:53414] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZMLrsrbZYafUL_3Qfz5yAAAAIU"]
[Tue Feb 17 01:20:58.854120 2026] [:error] [pid 4348:tid 4416] [client 43.157.95.131:44614] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZNR-nxbK-cCGKg9aysCbwAAAFU"]
[Tue Feb 17 02:48:27.345152 2026] [:error] [pid 4347:tid 4377] [client 20.111.62.157:31006] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aZNmezFcjv6pEAnSEidFgQAAAAk"]
[Tue Feb 17 02:48:28.645790 2026] [:error] [pid 26648:tid 26653] [client 20.111.62.157:19997] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aZNmfDT55fUixS3gmyiOgQAAAYA"]
[Tue Feb 17 02:49:03.040894 2026] [:error] [pid 34932:tid 34940] [client 20.111.62.157:32114] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZNmn0KCWyYIg5P1IPfX0gAAAgE"]
[Tue Feb 17 02:49:06.714522 2026] [:error] [pid 34932:tid 34939] [client 20.111.62.157:30688] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZNmokKCWyYIg5P1IPfX1QAAAgA"]
[Tue Feb 17 02:49:09.029341 2026] [:error] [pid 26648:tid 26674] [client 20.111.62.157:8940] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZNmpTT55fUixS3gmyiOqgAAAZU"]
[Tue Feb 17 02:49:17.202706 2026] [:error] [pid 34904:tid 34925] [client 20.111.62.157:8990] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asax.php"] [unique_id "aZNmrRoDUNgfYrSP5-uDnwAAAdM"]
[Tue Feb 17 02:49:19.887215 2026] [:error] [pid 4455:tid 4464] [client 20.111.62.157:9004] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asax.php"] [unique_id "aZNmrwNa-4dvQCL0rurfxgAAAMc"]
[Tue Feb 17 02:49:21.209507 2026] [:error] [pid 34932:tid 34943] [client 20.111.62.157:33803] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asax.php"] [unique_id "aZNmsUKCWyYIg5P1IPfX3gAAAgQ"]
[Tue Feb 17 02:49:21.953415 2026] [:error] [pid 4348:tid 4403] [client 20.111.62.157:35405] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asax.php"] [unique_id "aZNmsXxbK-cCGKg9aysQogAAAEg"]
[Tue Feb 17 02:49:23.903795 2026] [:error] [pid 4348:tid 4411] [client 20.111.62.157:34010] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aZNms3xbK-cCGKg9aysQpAAAAFA"]
[Tue Feb 17 02:49:26.630010 2026] [:error] [pid 34904:tid 34913] [client 20.111.62.157:18483] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aZNmthoDUNgfYrSP5-uDqQAAAcc"]
[Tue Feb 17 02:49:32.037198 2026] [:error] [pid 26648:tid 26655] [client 20.111.62.157:32336] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aZNmvDT55fUixS3gmyiOwAAAAYI"]
[Tue Feb 17 02:49:32.871854 2026] [:error] [pid 4349:tid 4425] [client 20.111.62.157:35870] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aZNmvMrbZYafUL_3QfxTSQAAAIM"]
[Tue Feb 17 02:49:39.549638 2026] [:error] [pid 38888:tid 38901] [client 20.111.62.157:33996] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aZNmw6mDoBJWPvV4pcOumwAAAUo"]
[Tue Feb 17 02:49:41.976920 2026] [:error] [pid 34932:tid 34940] [client 20.111.62.157:9015] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aZNmxUKCWyYIg5P1IPfX6QAAAgE"]
[Tue Feb 17 02:49:42.719979 2026] [:error] [pid 38888:tid 38909] [client 20.111.62.157:8964] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acfdr.php"] [unique_id "aZNmxqmDoBJWPvV4pcOuowAAAVI"]
[Tue Feb 17 02:49:47.284627 2026] [:error] [pid 38888:tid 38901] [client 20.111.62.157:35866] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acfdr.php"] [unique_id "aZNmy6mDoBJWPvV4pcOuqAAAAUo"]
[Tue Feb 17 02:49:55.334735 2026] [:error] [pid 4348:tid 4410] [client 20.111.62.157:31386] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acfdr.php"] [unique_id "aZNm03xbK-cCGKg9aysQvAAAAE8"]
[Tue Feb 17 02:49:57.171083 2026] [:error] [pid 4455:tid 4480] [client 20.111.62.157:35430] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acfdr.php"] [unique_id "aZNm1QNa-4dvQCL0rurf6gAAANc"]
[Tue Feb 17 02:50:00.867544 2026] [:error] [pid 34933:tid 34986] [client 20.111.62.157:18458] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZNm2MubrqI4iEJPNFmWgwAAAlQ"]
[Tue Feb 17 02:50:02.962284 2026] [:error] [pid 4455:tid 4479] [client 20.111.62.157:34591] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZNm2gNa-4dvQCL0rurf7wAAANY"]
[Tue Feb 17 02:50:11.965253 2026] [:error] [pid 26648:tid 26673] [client 20.111.62.157:34021] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZNm4zT55fUixS3gmyiO0QAAAZQ"]
[Tue Feb 17 02:50:14.397044 2026] [:error] [pid 26648:tid 26660] [client 20.111.62.157:30034] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZNm5jT55fUixS3gmyiO2AAAAYc"]
[Tue Feb 17 02:50:17.113102 2026] [:error] [pid 4347:tid 4382] [client 20.111.62.157:8965] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZNm6TFcjv6pEAnSEidF9QAAAA4"]
[Tue Feb 17 02:50:19.020291 2026] [:error] [pid 4348:tid 4400] [client 20.111.62.157:35419] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZNm63xbK-cCGKg9aysQywAAAEU"]
[Tue Feb 17 02:50:22.788201 2026] [:error] [pid 4349:tid 4432] [client 20.111.62.157:8942] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZNm7srbZYafUL_3QfxThwAAAIo"]
[Tue Feb 17 02:50:28.281844 2026] [:error] [pid 35004:tid 35025] [client 20.111.62.157:26455] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aZNm9GX1hIIv5l_K_Ouc_gAAApM"]
[Tue Feb 17 02:50:45.328979 2026] [:error] [pid 4347:tid 4382] [client 20.111.62.157:9020] [client 20.111.62.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZNnBTFcjv6pEAnSEidGMQAAAA4"]
[Tue Feb 17 02:50:47.759926 2026] [:error] [pid 34904:tid 34917] [client 20.111.62.157:8963] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aZNnBxoDUNgfYrSP5-uD2AAAAcs"]
[Tue Feb 17 02:50:50.722040 2026] [:error] [pid 38888:tid 38891] [client 20.111.62.157:8914] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aZNnCqmDoBJWPvV4pcOu3gAAAUA"]
[Tue Feb 17 02:50:54.226293 2026] [:error] [pid 4455:tid 4466] [client 20.111.62.157:8916] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aZNnDgNa-4dvQCL0rurgFwAAAMk"]
[Tue Feb 17 02:50:55.985671 2026] [:error] [pid 34933:tid 34972] [client 20.111.62.157:35842] [client 20.111.62.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aZNnD8ubrqI4iEJPNFmWuQAAAkY"]
[Tue Feb 17 04:58:48.959455 2026] [:error] [pid 32790:tid 32815] [client 40.112.95.11:21003] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOFCHs3HJP9ozPHsN60VwAAARU"]
[Tue Feb 17 04:58:52.024406 2026] [:error] [pid 58551:tid 58572] [client 40.112.95.11:2779] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOFDK1t8eWr-MgFsppQgwAAAAw"]
[Tue Feb 17 04:58:53.480017 2026] [:error] [pid 58552:tid 58599] [client 40.112.95.11:14395] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOFDTBHVJP2Oz3yR5fMAwAAAEQ"]
[Tue Feb 17 04:58:54.934432 2026] [:error] [pid 58659:tid 58670] [client 40.112.95.11:16671] [client 40.112.95.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOFDsDX32iTEO4jt2_PqwAAAMk"]
[Tue Feb 17 05:04:10.324712 2026] [:error] [pid 58558:tid 58640] [client 20.100.191.215:62337] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOGSimIxlfUL2nViZybgQAAAJI"]
[Tue Feb 17 05:04:14.435670 2026] [:error] [pid 32790:tid 32797] [client 20.100.191.215:54883] [client 20.100.191.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZOGTns3HJP9ozPHsN624gAAAQM"]
[Tue Feb 17 07:45:00.286693 2026] [:error] [pid 32790:tid 32818] [client 45.149.173.233:55211] [client 45.149.173.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.149.173.233, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZOr_Hs3HJP9ozPHsN4XtgAAARg"]
[Tue Feb 17 07:45:02.146630 2026] [:error] [pid 32790:tid 32809] [client 45.149.173.233:55211] [client 45.149.173.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aZOr_ns3HJP9ozPHsN4XxQAAAQ8"]
[Tue Feb 17 07:45:02.743199 2026] [:error] [pid 32790:tid 32799] [client 45.149.173.233:36662] [client 45.149.173.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aZOr_ns3HJP9ozPHsN4XxwAAAQU"]
[Tue Feb 17 07:45:03.551795 2026] [:error] [pid 32790:tid 32798] [client 45.149.173.233:36668] [client 45.149.173.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aZOr_3s3HJP9ozPHsN4XywAAAQQ"]
[Tue Feb 17 07:45:04.162277 2026] [:error] [pid 58551:tid 58577] [client 45.149.173.233:36680] [client 45.149.173.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aZOsAK1t8eWr-MgFspqTcwAAABE"]
[Tue Feb 17 07:45:04.775011 2026] [:error] [pid 58552:tid 58597] [client 45.149.173.233:36682] [client 45.149.173.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aZOsADBHVJP2Oz3yR5cQ3AAAAEI"]
[Tue Feb 17 07:45:05.370467 2026] [:error] [pid 32790:tid 32815] [client 45.149.173.233:36690] [client 45.149.173.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aZOsAXs3HJP9ozPHsN4X0QAAARU"]
[Tue Feb 17 07:45:05.968742 2026] [:error] [pid 32790:tid 32799] [client 45.149.173.233:36706] [client 45.149.173.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aZOsAXs3HJP9ozPHsN4X1wAAAQU"]
[Tue Feb 17 08:41:34.413037 2026] [:error] [pid 58558:tid 58634] [client 49.234.192.248:46094] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZO5PimIxlfUL2nViZz7vgAAAIw"]
[Tue Feb 17 11:12:23.697894 2026] [:error] [pid 32790:tid 32805] [client 43.153.135.208:44054] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZPcl3s3HJP9ozPHsN6YJgAAAQs"]
[Tue Feb 17 12:18:40.857129 2026] [:error] [pid 58659:tid 58672] [client 167.71.244.81:49918] [client 167.71.244.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZPsIMDX32iTEO4jt2-tgwAAAMs"]
[Tue Feb 17 18:04:40.852810 2026] [:error] [pid 58552:tid 58600] [client 43.154.127.188:41026] [client 43.154.127.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZQ9ODBHVJP2Oz3yR5cJaAAAAEU"]
[Tue Feb 17 20:31:52.719336 2026] [:error] [pid 58551:tid 58570] [client 182.71.123.174:61648] [client 182.71.123.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.71.123.174, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZRfuK1t8eWr-MgFspqnKAAAAAo"]
[Tue Feb 17 21:03:34.967996 2026] [:error] [pid 13106:tid 13116] [client 175.6.217.4:56302] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZRnJrBEWrYCV-0FRdocowAAAUY"]
[Tue Feb 17 22:12:27.363956 2026] [:error] [pid 58552:tid 58605] [client 150.109.46.88:34340] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZR3SzBHVJP2Oz3yR5dPYwAAAEo"]
[Wed Feb 18 08:48:41.531538 2026] [:error] [pid 21849:tid 21924] [client 45.67.97.54:53381] [client 45.67.97.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZUMabx9a1XrfTYnuzKtoQAAAIg"]
[Wed Feb 18 10:42:13.071363 2026] [:error] [pid 21848:tid 21902] [client 165.245.187.140:56874] [client 165.245.187.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZUnBfbG91VRkVidT5eJkwAAAE0"]
[Wed Feb 18 12:46:12.759333 2026] [:error] [pid 21847:tid 21879] [client 43.132.214.228:50284] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZVEFPy9A5wy4LuXmJ2DRQAAABU"]
[Wed Feb 18 16:03:07.706252 2026] [:error] [pid 21847:tid 21873] [client 223.15.245.170:36342] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZVyO_y9A5wy4LuXmJ3TZwAAAA8"]
[Wed Feb 18 16:03:36.575188 2026] [:error] [pid 21961:tid 21984] [client 190.95.10.196:56564] [client 190.95.10.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.95.10.196, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZVyWMUBDt_-H0ms3gVX9wAAANU"]
[Wed Feb 18 19:37:08.098965 2026] [:error] [pid 11512:tid 11519] [client 49.51.166.228:33106] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZWkZBGamu0xQuQ-jbFPEQAAAYI"]
[Wed Feb 18 22:00:33.273808 2026] [:error] [pid 5561:tid 5579] [client 43.156.232.190:47378] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZXGAUoQssCZYQ4NexbkiAAAAU8"]
[Thu Feb 19 02:16:45.116759 2026] [:error] [pid 57014:tid 57020] [client 103.65.236.149:64843] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aZYCDRNZnhS5qKtVIMJllAAAAQM"]
[Thu Feb 19 04:10:11.820746 2026] [:error] [pid 49002:tid 49029] [client 104.46.236.39:16231] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aZYco1fcBtQ6hSJuEQllWAAAAM8"]
[Thu Feb 19 04:10:12.069955 2026] [:error] [pid 48903:tid 48985] [client 104.46.236.39:16212] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aZYcpI6aTgKrpAR115vntgAAAJQ"]
[Thu Feb 19 04:10:12.317233 2026] [:error] [pid 49002:tid 49031] [client 104.46.236.39:30478] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aZYcpFfcBtQ6hSJuEQllWgAAANE"]
[Thu Feb 19 04:10:12.592310 2026] [:error] [pid 15513:tid 15530] [client 104.46.236.39:30488] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aZYcpMGTRTE022JWg1902QAAAQ8"]
[Thu Feb 19 04:10:12.841670 2026] [:error] [pid 48901:tid 48919] [client 104.46.236.39:30482] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aZYcpMixYz-lHbN0WBKmNgAAAAk"]
[Thu Feb 19 04:10:13.095208 2026] [:error] [pid 48902:tid 48956] [client 104.46.236.39:30484] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aZYcpWcJ-6aYRpRRFsUouAAAAFI"]
[Thu Feb 19 04:10:13.338627 2026] [:error] [pid 48902:tid 48939] [client 104.46.236.39:30469] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aZYcpWcJ-6aYRpRRFsUouQAAAEE"]
[Thu Feb 19 04:10:13.583346 2026] [:error] [pid 15513:tid 15523] [client 104.46.236.39:16204] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aZYcpcGTRTE022JWg1902wAAAQg"]
[Thu Feb 19 04:10:13.830160 2026] [:error] [pid 48903:tid 48975] [client 104.46.236.39:30492] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aZYcpY6aTgKrpAR115vnuwAAAIo"]
[Thu Feb 19 04:10:14.085335 2026] [:error] [pid 48903:tid 48970] [client 104.46.236.39:30477] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aZYcpo6aTgKrpAR115vnvAAAAIU"]
[Thu Feb 19 04:10:14.325762 2026] [:error] [pid 15513:tid 15527] [client 104.46.236.39:30500] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aZYcpsGTRTE022JWg1904AAAAQw"]
[Thu Feb 19 04:10:14.568953 2026] [:error] [pid 48901:tid 48912] [client 104.46.236.39:30466] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aZYcpsixYz-lHbN0WBKmOwAAAAI"]
[Thu Feb 19 04:10:14.811633 2026] [:error] [pid 15513:tid 15535] [client 104.46.236.39:30496] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aZYcpsGTRTE022JWg1904gAAARQ"]
[Thu Feb 19 04:10:15.056851 2026] [:error] [pid 15513:tid 15517] [client 104.46.236.39:61252] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aZYcp8GTRTE022JWg1905AAAAQI"]
[Thu Feb 19 04:10:15.309094 2026] [:error] [pid 48901:tid 48921] [client 104.46.236.39:30471] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aZYcp8ixYz-lHbN0WBKmPAAAAAs"]
[Thu Feb 19 04:10:15.553794 2026] [:error] [pid 48903:tid 48988] [client 104.46.236.39:30481] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aZYcp46aTgKrpAR115vnvgAAAJc"]
[Thu Feb 19 04:10:15.796919 2026] [:error] [pid 48903:tid 48974] [client 104.46.236.39:16239] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aZYcp46aTgKrpAR115vnvwAAAIk"]
[Thu Feb 19 04:10:16.054584 2026] [:error] [pid 49002:tid 49024] [client 104.46.236.39:30464] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aZYcqFfcBtQ6hSJuEQllXAAAAMo"]
[Thu Feb 19 04:10:16.348917 2026] [:error] [pid 49002:tid 49016] [client 104.46.236.39:16208] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aZYcqFfcBtQ6hSJuEQllXQAAAMI"]
[Thu Feb 19 04:10:16.593323 2026] [:error] [pid 15513:tid 15536] [client 104.46.236.39:30519] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aZYcqMGTRTE022JWg1905gAAARU"]
[Thu Feb 19 04:10:16.836060 2026] [:error] [pid 48901:tid 48928] [client 104.46.236.39:30483] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZYcqMixYz-lHbN0WBKmPgAAABI"]
[Thu Feb 19 04:10:17.079069 2026] [:error] [pid 48903:tid 48989] [client 104.46.236.39:16233] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZYcqY6aTgKrpAR115vnwQAAAJg"]
[Thu Feb 19 04:10:17.326570 2026] [:error] [pid 48902:tid 48943] [client 104.46.236.39:30504] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZYcqWcJ-6aYRpRRFsUovAAAAEU"]
[Thu Feb 19 04:10:17.569760 2026] [:error] [pid 48902:tid 48948] [client 104.46.236.39:61265] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZYcqWcJ-6aYRpRRFsUovQAAAEo"]
[Thu Feb 19 04:10:17.832003 2026] [:error] [pid 49002:tid 49035] [client 104.46.236.39:61251] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aZYcqVfcBtQ6hSJuEQllYQAAANU"]
[Thu Feb 19 04:10:18.078831 2026] [:error] [pid 49002:tid 49036] [client 104.46.236.39:16236] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aZYcqlfcBtQ6hSJuEQllYwAAANY"]
[Thu Feb 19 04:10:18.322084 2026] [:error] [pid 49002:tid 49022] [client 104.46.236.39:30470] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aZYcqlfcBtQ6hSJuEQllZAAAAMg"]
[Thu Feb 19 04:10:18.575607 2026] [:error] [pid 48903:tid 48972] [client 104.46.236.39:30468] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aZYcqo6aTgKrpAR115vnwwAAAIc"]
[Thu Feb 19 04:10:18.829172 2026] [:error] [pid 49002:tid 49025] [client 104.46.236.39:16202] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aZYcqlfcBtQ6hSJuEQllZQAAAMs"]
[Thu Feb 19 04:10:19.073876 2026] [:error] [pid 48902:tid 48961] [client 104.46.236.39:16255] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aZYcq2cJ-6aYRpRRFsUowQAAAFc"]
[Thu Feb 19 04:10:19.319364 2026] [:error] [pid 48902:tid 48952] [client 104.46.236.39:52393] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aZYcq2cJ-6aYRpRRFsUowgAAAE4"]
[Thu Feb 19 04:10:19.561763 2026] [:error] [pid 49002:tid 49017] [client 104.46.236.39:16232] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aZYcq1fcBtQ6hSJuEQllZgAAAMM"]
[Thu Feb 19 04:10:19.809819 2026] [:error] [pid 49002:tid 49029] [client 104.46.236.39:52367] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZYcq1fcBtQ6hSJuEQllZwAAAM8"]
[Thu Feb 19 04:10:20.074764 2026] [:error] [pid 15513:tid 15534] [client 104.46.236.39:30508] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZYcrMGTRTE022JWg1907gAAARM"]
[Thu Feb 19 04:10:20.323905 2026] [:error] [pid 48903:tid 48973] [client 104.46.236.39:30497] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZYcrI6aTgKrpAR115vnxgAAAIg"]
[Thu Feb 19 04:10:20.564723 2026] [:error] [pid 15513:tid 15537] [client 104.46.236.39:30489] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZYcrMGTRTE022JWg1908AAAARY"]
[Thu Feb 19 04:10:20.815027 2026] [:error] [pid 48903:tid 48987] [client 104.46.236.39:30491] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shas.php"] [unique_id "aZYcrI6aTgKrpAR115vnyAAAAJY"]
[Thu Feb 19 04:10:21.060713 2026] [:error] [pid 48902:tid 48944] [client 104.46.236.39:52366] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shas.php"] [unique_id "aZYcrWcJ-6aYRpRRFsUoxAAAAEY"]
[Thu Feb 19 04:10:21.311627 2026] [:error] [pid 49002:tid 49019] [client 104.46.236.39:30517] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shas.php"] [unique_id "aZYcrVfcBtQ6hSJuEQllbAAAAMU"]
[Thu Feb 19 04:10:21.556697 2026] [:error] [pid 48901:tid 48915] [client 104.46.236.39:16196] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shas.php"] [unique_id "aZYcrcixYz-lHbN0WBKmRAAAAAU"]
[Thu Feb 19 04:10:21.798607 2026] [:error] [pid 48902:tid 48950] [client 104.46.236.39:52369] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aZYcrWcJ-6aYRpRRFsUoxwAAAEw"]
[Thu Feb 19 04:10:22.041681 2026] [:error] [pid 48902:tid 48951] [client 104.46.236.39:30473] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aZYcrmcJ-6aYRpRRFsUoyAAAAE0"]
[Thu Feb 19 04:10:22.284118 2026] [:error] [pid 48901:tid 48924] [client 104.46.236.39:16234] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aZYcrsixYz-lHbN0WBKmRwAAAA4"]
[Thu Feb 19 04:10:22.526635 2026] [:error] [pid 48903:tid 48981] [client 104.46.236.39:16237] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aZYcro6aTgKrpAR115vnygAAAJA"]
[Thu Feb 19 04:10:22.768705 2026] [:error] [pid 48901:tid 48913] [client 104.46.236.39:30510] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aZYcrsixYz-lHbN0WBKmSAAAAAM"]
[Thu Feb 19 04:10:23.009994 2026] [:error] [pid 48901:tid 48933] [client 104.46.236.39:16253] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aZYcr8ixYz-lHbN0WBKmSQAAABc"]
[Thu Feb 19 04:10:23.250967 2026] [:error] [pid 15513:tid 15519] [client 104.46.236.39:30513] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aZYcr8GTRTE022JWg1908wAAAQQ"]
[Thu Feb 19 04:10:23.493472 2026] [:error] [pid 48903:tid 48977] [client 104.46.236.39:16254] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aZYcr46aTgKrpAR115vnzQAAAIw"]
[Thu Feb 19 04:10:23.737229 2026] [:error] [pid 48903:tid 48969] [client 104.46.236.39:30526] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/er.php"] [unique_id "aZYcr46aTgKrpAR115vnzwAAAIQ"]
[Thu Feb 19 04:10:23.980644 2026] [:error] [pid 49002:tid 49026] [client 104.46.236.39:30502] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/er.php"] [unique_id "aZYcr1fcBtQ6hSJuEQllbwAAAMw"]
[Thu Feb 19 04:10:24.222716 2026] [:error] [pid 48901:tid 48926] [client 104.46.236.39:30509] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/er.php"] [unique_id "aZYcsMixYz-lHbN0WBKmTAAAABA"]
[Thu Feb 19 04:10:24.463999 2026] [:error] [pid 48901:tid 48920] [client 104.46.236.39:52394] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/er.php"] [unique_id "aZYcsMixYz-lHbN0WBKmTQAAAAo"]
[Thu Feb 19 04:10:24.706669 2026] [:error] [pid 48901:tid 48922] [client 104.46.236.39:16211] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fault.php"] [unique_id "aZYcsMixYz-lHbN0WBKmTwAAAAw"]
[Thu Feb 19 04:10:24.945645 2026] [:error] [pid 49002:tid 49036] [client 104.46.236.39:30521] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fault.php"] [unique_id "aZYcsFfcBtQ6hSJuEQllcAAAANY"]
[Thu Feb 19 04:10:25.186719 2026] [:error] [pid 15513:tid 15529] [client 104.46.236.39:52353] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fault.php"] [unique_id "aZYcscGTRTE022JWg1909gAAAQ4"]
[Thu Feb 19 04:10:25.428124 2026] [:error] [pid 49002:tid 49015] [client 104.46.236.39:52357] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fault.php"] [unique_id "aZYcsVfcBtQ6hSJuEQllcgAAAME"]
[Thu Feb 19 04:10:25.672644 2026] [:error] [pid 49002:tid 49017] [client 104.46.236.39:16235] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aZYcsVfcBtQ6hSJuEQlldAAAAMM"]
[Thu Feb 19 04:10:25.925111 2026] [:error] [pid 15513:tid 15539] [client 104.46.236.39:16193] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aZYcscGTRTE022JWg1909wAAARg"]
[Thu Feb 19 04:10:26.170501 2026] [:error] [pid 49002:tid 49023] [client 104.46.236.39:30522] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aZYcslfcBtQ6hSJuEQlldQAAAMk"]
[Thu Feb 19 04:10:26.413981 2026] [:error] [pid 15513:tid 15525] [client 104.46.236.39:61248] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aZYcssGTRTE022JWg190-QAAAQo"]
[Thu Feb 19 04:10:26.660754 2026] [:error] [pid 15513:tid 15534] [client 104.46.236.39:30515] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aZYcssGTRTE022JWg190-gAAARM"]
[Thu Feb 19 04:10:26.906663 2026] [:error] [pid 15513:tid 15522] [client 104.46.236.39:61289] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aZYcssGTRTE022JWg190-wAAAQc"]
[Thu Feb 19 04:10:27.147215 2026] [:error] [pid 49002:tid 49037] [client 104.46.236.39:61252] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aZYcs1fcBtQ6hSJuEQllegAAANc"]
[Thu Feb 19 04:10:27.388629 2026] [:error] [pid 49002:tid 49034] [client 104.46.236.39:61272] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aZYcs1fcBtQ6hSJuEQllfAAAANQ"]
[Thu Feb 19 04:10:27.628705 2026] [:error] [pid 48901:tid 48924] [client 104.46.236.39:16247] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leuk.php"] [unique_id "aZYcs8ixYz-lHbN0WBKmVAAAAA4"]
[Thu Feb 19 04:10:27.880998 2026] [:error] [pid 15513:tid 15531] [client 104.46.236.39:30474] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leuk.php"] [unique_id "aZYcs8GTRTE022JWg190_QAAARA"]
[Thu Feb 19 04:10:28.126049 2026] [:error] [pid 48901:tid 48916] [client 104.46.236.39:61260] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leuk.php"] [unique_id "aZYctMixYz-lHbN0WBKmVQAAAAY"]
[Thu Feb 19 04:10:28.373076 2026] [:error] [pid 48903:tid 48970] [client 104.46.236.39:16220] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leuk.php"] [unique_id "aZYctI6aTgKrpAR115vn1AAAAIU"]
[Thu Feb 19 04:10:28.614094 2026] [:error] [pid 49002:tid 49024] [client 104.46.236.39:52364] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aZYctFfcBtQ6hSJuEQllfQAAAMo"]
[Thu Feb 19 04:10:28.855853 2026] [:error] [pid 48903:tid 48975] [client 104.46.236.39:30486] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aZYctI6aTgKrpAR115vn1gAAAIo"]
[Thu Feb 19 04:10:29.104443 2026] [:error] [pid 15513:tid 15521] [client 104.46.236.39:16222] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aZYctcGTRTE022JWg191AAAAAQY"]
[Thu Feb 19 04:10:29.350854 2026] [:error] [pid 48901:tid 48930] [client 104.46.236.39:30503] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aZYctcixYz-lHbN0WBKmVwAAABQ"]
[Thu Feb 19 04:10:29.601394 2026] [:error] [pid 49002:tid 49025] [client 104.46.236.39:16249] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "aZYctVfcBtQ6hSJuEQllfwAAAMs"]
[Thu Feb 19 04:10:29.843651 2026] [:error] [pid 48901:tid 48911] [client 104.46.236.39:61255] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "aZYctcixYz-lHbN0WBKmWQAAAAE"]
[Thu Feb 19 04:10:30.085393 2026] [:error] [pid 48901:tid 48925] [client 104.46.236.39:30507] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "aZYctsixYz-lHbN0WBKmWwAAAA8"]
[Thu Feb 19 04:10:30.326100 2026] [:error] [pid 48901:tid 48910] [client 104.46.236.39:30525] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "aZYctsixYz-lHbN0WBKmXAAAAAA"]
[Thu Feb 19 04:10:30.567913 2026] [:error] [pid 48901:tid 48915] [client 104.46.236.39:30520] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aZYctsixYz-lHbN0WBKmXQAAAAU"]
[Thu Feb 19 04:10:30.809303 2026] [:error] [pid 15513:tid 15518] [client 104.46.236.39:52381] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aZYctsGTRTE022JWg191AgAAAQM"]
[Thu Feb 19 04:10:31.050217 2026] [:error] [pid 49002:tid 49035] [client 104.46.236.39:52415] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aZYct1fcBtQ6hSJuEQllgwAAANU"]
[Thu Feb 19 04:10:31.294389 2026] [:error] [pid 15513:tid 15529] [client 104.46.236.39:30487] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aZYct8GTRTE022JWg191AwAAAQ4"]
[Thu Feb 19 04:10:31.543248 2026] [:error] [pid 48901:tid 48933] [client 104.46.236.39:30516] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aZYct8ixYz-lHbN0WBKmXgAAABc"]
[Thu Feb 19 04:10:31.785476 2026] [:error] [pid 49002:tid 49038] [client 104.46.236.39:52371] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aZYct1fcBtQ6hSJuEQllhAAAANg"]
[Thu Feb 19 04:10:32.025929 2026] [:error] [pid 49002:tid 49030] [client 104.46.236.39:52355] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aZYcuFfcBtQ6hSJuEQllhQAAANA"]
[Thu Feb 19 04:10:32.272802 2026] [:error] [pid 49002:tid 49032] [client 104.46.236.39:30506] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aZYcuFfcBtQ6hSJuEQllhwAAANI"]
[Thu Feb 19 04:10:32.522039 2026] [:error] [pid 48903:tid 48972] [client 104.46.236.39:61254] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZYcuI6aTgKrpAR115vn2gAAAIc"]
[Thu Feb 19 04:10:32.765386 2026] [:error] [pid 48902:tid 48949] [client 104.46.236.39:61291] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZYcuGcJ-6aYRpRRFsUozQAAAEs"]
[Thu Feb 19 04:10:33.009820 2026] [:error] [pid 48902:tid 48945] [client 104.46.236.39:30501] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZYcuWcJ-6aYRpRRFsUozgAAAEc"]
[Thu Feb 19 04:10:33.278465 2026] [:error] [pid 48903:tid 48980] [client 104.46.236.39:16240] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZYcuY6aTgKrpAR115vn3AAAAI8"]
[Thu Feb 19 04:10:33.518628 2026] [:error] [pid 48902:tid 48955] [client 104.46.236.39:61275] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aZYcuWcJ-6aYRpRRFsUo0AAAAFE"]
[Thu Feb 19 04:10:33.758693 2026] [:error] [pid 48902:tid 48958] [client 104.46.236.39:61286] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aZYcuWcJ-6aYRpRRFsUo0wAAAFQ"]
[Thu Feb 19 04:10:34.000036 2026] [:error] [pid 15513:tid 15525] [client 104.46.236.39:52410] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aZYcucGTRTE022JWg191BwAAAQo"]
[Thu Feb 19 04:10:34.240892 2026] [:error] [pid 48903:tid 48966] [client 104.46.236.39:16241] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aZYcuo6aTgKrpAR115vn3gAAAIE"]
[Thu Feb 19 04:10:34.485458 2026] [:error] [pid 48903:tid 48970] [client 104.46.236.39:52401] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aZYcuo6aTgKrpAR115vn4QAAAIU"]
[Thu Feb 19 04:10:34.727329 2026] [:error] [pid 15513:tid 15515] [client 104.46.236.39:52397] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aZYcusGTRTE022JWg191CwAAAQA"]
[Thu Feb 19 04:10:34.969607 2026] [:error] [pid 48903:tid 48987] [client 104.46.236.39:52395] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aZYcuo6aTgKrpAR115vn4gAAAJY"]
[Thu Feb 19 04:10:35.212246 2026] [:error] [pid 48903:tid 48981] [client 104.46.236.39:16242] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aZYcu46aTgKrpAR115vn5AAAAJA"]
[Thu Feb 19 04:10:35.457739 2026] [:error] [pid 48903:tid 48977] [client 104.46.236.39:61273] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZYcu46aTgKrpAR115vn6AAAAIw"]
[Thu Feb 19 04:10:35.703627 2026] [:error] [pid 48903:tid 48982] [client 104.46.236.39:16192] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZYcu46aTgKrpAR115vn6gAAAJE"]
[Thu Feb 19 04:10:35.945640 2026] [:error] [pid 48903:tid 48972] [client 104.46.236.39:61296] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZYcu46aTgKrpAR115vn6wAAAIc"]
[Thu Feb 19 04:10:36.197271 2026] [:error] [pid 48902:tid 48957] [client 104.46.236.39:16217] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZYcvGcJ-6aYRpRRFsUo2wAAAFM"]
[Thu Feb 19 04:10:36.443881 2026] [:error] [pid 49002:tid 49027] [client 104.46.236.39:49784] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZYcvFfcBtQ6hSJuEQllkAAAAM0"]
[Thu Feb 19 04:10:36.688707 2026] [:error] [pid 15513:tid 15533] [client 104.46.236.39:30490] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZYcvMGTRTE022JWg191DgAAARI"]
[Thu Feb 19 04:10:36.940188 2026] [:error] [pid 49002:tid 49023] [client 104.46.236.39:52385] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZYcvFfcBtQ6hSJuEQllkQAAAMk"]
[Thu Feb 19 04:10:37.185755 2026] [:error] [pid 48901:tid 48912] [client 104.46.236.39:30476] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZYcvcixYz-lHbN0WBKmZAAAAAI"]
[Thu Feb 19 04:10:37.426682 2026] [:error] [pid 15513:tid 15529] [client 104.46.236.39:61290] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/login8.php"] [unique_id "aZYcvcGTRTE022JWg191EQAAAQ4"]
[Thu Feb 19 04:10:37.675663 2026] [:error] [pid 15513:tid 15530] [client 104.46.236.39:30495] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/login8.php"] [unique_id "aZYcvcGTRTE022JWg191EgAAAQ8"]
[Thu Feb 19 04:10:37.917940 2026] [:error] [pid 48902:tid 48962] [client 104.46.236.39:52391] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/login8.php"] [unique_id "aZYcvWcJ-6aYRpRRFsUo3QAAAFg"]
[Thu Feb 19 04:10:38.156479 2026] [:error] [pid 48902:tid 48945] [client 104.46.236.39:52414] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/login8.php"] [unique_id "aZYcvmcJ-6aYRpRRFsUo3wAAAEc"]
[Thu Feb 19 04:10:38.397446 2026] [:error] [pid 15513:tid 15516] [client 104.46.236.39:16216] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nnyvn.php"] [unique_id "aZYcvsGTRTE022JWg191EwAAAQE"]
[Thu Feb 19 04:10:38.638641 2026] [:error] [pid 15513:tid 15537] [client 104.46.236.39:16197] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nnyvn.php"] [unique_id "aZYcvsGTRTE022JWg191FAAAARY"]
[Thu Feb 19 04:10:38.879637 2026] [:error] [pid 48903:tid 48983] [client 104.46.236.39:30511] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nnyvn.php"] [unique_id "aZYcvo6aTgKrpAR115vn8gAAAJI"]
[Thu Feb 19 04:10:39.121389 2026] [:error] [pid 49002:tid 49021] [client 104.46.236.39:30512] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nnyvn.php"] [unique_id "aZYcv1fcBtQ6hSJuEQlllgAAAMc"]
[Thu Feb 19 04:10:39.362525 2026] [:error] [pid 49002:tid 49026] [client 104.46.236.39:30498] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aZYcv1fcBtQ6hSJuEQlllwAAAMw"]
[Thu Feb 19 04:10:39.606761 2026] [:error] [pid 49002:tid 49024] [client 104.46.236.39:52389] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aZYcv1fcBtQ6hSJuEQllmAAAAMo"]
[Thu Feb 19 04:10:39.850380 2026] [:error] [pid 48902:tid 48941] [client 104.46.236.39:16244] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aZYcv2cJ-6aYRpRRFsUo4QAAAEM"]
[Thu Feb 19 04:10:40.093124 2026] [:error] [pid 49002:tid 49015] [client 104.46.236.39:61261] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aZYcwFfcBtQ6hSJuEQllmwAAAME"]
[Thu Feb 19 04:10:40.341318 2026] [:error] [pid 49002:tid 49027] [client 104.46.236.39:16223] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aZYcwFfcBtQ6hSJuEQllnAAAAM0"]
[Thu Feb 19 04:10:40.582288 2026] [:error] [pid 15513:tid 15527] [client 104.46.236.39:16243] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aZYcwMGTRTE022JWg191GgAAAQw"]
[Thu Feb 19 04:10:40.827762 2026] [:error] [pid 15513:tid 15519] [client 104.46.236.39:52404] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aZYcwMGTRTE022JWg191GwAAAQQ"]
[Thu Feb 19 04:10:41.070254 2026] [:error] [pid 15513:tid 15536] [client 104.46.236.39:30493] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aZYcwcGTRTE022JWg191HAAAARU"]
[Thu Feb 19 04:10:41.311536 2026] [:error] [pid 15513:tid 15529] [client 104.46.236.39:16218] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aZYcwcGTRTE022JWg191HwAAAQ4"]
[Thu Feb 19 04:10:41.563490 2026] [:error] [pid 15513:tid 15539] [client 104.46.236.39:16195] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aZYcwcGTRTE022JWg191IQAAARg"]
[Thu Feb 19 04:10:41.806840 2026] [:error] [pid 48903:tid 48979] [client 104.46.236.39:52392] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aZYcwY6aTgKrpAR115vn9QAAAI4"]
[Thu Feb 19 04:10:42.048779 2026] [:error] [pid 49002:tid 49023] [client 104.46.236.39:61302] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aZYcwlfcBtQ6hSJuEQllngAAAMk"]
[Thu Feb 19 04:10:42.291291 2026] [:error] [pid 48903:tid 48970] [client 104.46.236.39:16219] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aZYcwo6aTgKrpAR115vn9wAAAIU"]
[Thu Feb 19 04:10:42.539035 2026] [:error] [pid 15513:tid 15522] [client 104.46.236.39:49733] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aZYcwsGTRTE022JWg191JQAAAQc"]
[Thu Feb 19 04:10:42.798362 2026] [:error] [pid 49002:tid 49030] [client 104.46.236.39:49788] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aZYcwlfcBtQ6hSJuEQlloAAAANA"]
[Thu Feb 19 04:10:43.039033 2026] [:error] [pid 49002:tid 49025] [client 104.46.236.39:16221] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aZYcw1fcBtQ6hSJuEQlloQAAAMs"]
[Thu Feb 19 04:10:43.285950 2026] [:error] [pid 15513:tid 15533] [client 104.46.236.39:16199] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aZYcw8GTRTE022JWg191JwAAARI"]
[Thu Feb 19 04:10:43.532689 2026] [:error] [pid 15513:tid 15536] [client 104.46.236.39:30524] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aZYcw8GTRTE022JWg191KAAAARU"]
[Thu Feb 19 04:10:43.776151 2026] [:error] [pid 15513:tid 15529] [client 104.46.236.39:16251] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aZYcw8GTRTE022JWg191KwAAAQ4"]
[Thu Feb 19 04:10:44.018799 2026] [:error] [pid 48903:tid 48980] [client 104.46.236.39:30480] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aZYcxI6aTgKrpAR115vn-gAAAI8"]
[Thu Feb 19 04:10:44.261893 2026] [:error] [pid 15513:tid 15520] [client 104.46.236.39:61293] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZYcxMGTRTE022JWg191MAAAAQU"]
[Thu Feb 19 04:10:44.506594 2026] [:error] [pid 15513:tid 15515] [client 104.46.236.39:16206] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZYcxMGTRTE022JWg191MQAAAQA"]
[Thu Feb 19 04:10:44.759092 2026] [:error] [pid 49002:tid 49034] [client 104.46.236.39:49779] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZYcxFfcBtQ6hSJuEQllpAAAANQ"]
[Thu Feb 19 04:10:45.001326 2026] [:error] [pid 48903:tid 48973] [client 104.46.236.39:52362] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZYcxY6aTgKrpAR115vn-wAAAIg"]
[Thu Feb 19 04:10:45.241855 2026] [:error] [pid 48902:tid 48953] [client 104.46.236.39:61256] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aZYcxWcJ-6aYRpRRFsUo5QAAAE8"]
[Thu Feb 19 04:10:45.488598 2026] [:error] [pid 48903:tid 48979] [client 104.46.236.39:16243] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aZYcxY6aTgKrpAR115vn_AAAAI4"]
[Thu Feb 19 04:10:45.729562 2026] [:error] [pid 15513:tid 15535] [client 104.46.236.39:16245] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aZYcxcGTRTE022JWg191NAAAARQ"]
[Thu Feb 19 04:10:45.969884 2026] [:error] [pid 48902:tid 48950] [client 104.46.236.39:16207] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aZYcxWcJ-6aYRpRRFsUo5wAAAEw"]
[Thu Feb 19 04:10:46.213109 2026] [:error] [pid 49002:tid 49024] [client 104.46.236.39:16201] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aZYcxlfcBtQ6hSJuEQllqAAAAMo"]
[Thu Feb 19 04:10:46.455498 2026] [:error] [pid 49002:tid 49015] [client 104.46.236.39:16213] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aZYcxlfcBtQ6hSJuEQllqQAAAME"]
[Thu Feb 19 04:10:46.697060 2026] [:error] [pid 15513:tid 15526] [client 104.46.236.39:52365] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aZYcxsGTRTE022JWg191NgAAAQs"]
[Thu Feb 19 04:10:46.939194 2026] [:error] [pid 15513:tid 15520] [client 104.46.236.39:30475] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aZYcxsGTRTE022JWg191NwAAAQU"]
[Thu Feb 19 04:10:47.179636 2026] [:error] [pid 48901:tid 48927] [client 104.46.236.39:30465] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aZYcx8ixYz-lHbN0WBKmbAAAABE"]
[Thu Feb 19 04:10:47.421281 2026] [:error] [pid 48903:tid 48966] [client 104.46.236.39:52399] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aZYcx46aTgKrpAR115vn_gAAAIE"]
[Thu Feb 19 04:10:47.664391 2026] [:error] [pid 48901:tid 48923] [client 104.46.236.39:52370] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aZYcx8ixYz-lHbN0WBKmbQAAAA0"]
[Thu Feb 19 04:10:47.904390 2026] [:error] [pid 48903:tid 48984] [client 104.46.236.39:61262] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aZYcx46aTgKrpAR115vn_wAAAJM"]
[Thu Feb 19 04:10:48.146693 2026] [:error] [pid 48902:tid 48939] [client 104.46.236.39:52390] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aZYcyGcJ-6aYRpRRFsUo7QAAAEE"]
[Thu Feb 19 04:10:48.387225 2026] [:error] [pid 48903:tid 48983] [client 104.46.236.39:52398] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aZYcyI6aTgKrpAR115voAgAAAJI"]
[Thu Feb 19 04:10:48.628304 2026] [:error] [pid 48903:tid 48965] [client 104.46.236.39:52406] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aZYcyI6aTgKrpAR115voBAAAAIA"]
[Thu Feb 19 04:10:48.869224 2026] [:error] [pid 48903:tid 48975] [client 104.46.236.39:52380] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aZYcyI6aTgKrpAR115voBwAAAIo"]
[Thu Feb 19 04:10:49.111811 2026] [:error] [pid 15513:tid 15535] [client 104.46.236.39:52354] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aZYcycGTRTE022JWg191OwAAARQ"]
[Thu Feb 19 04:10:49.366966 2026] [:error] [pid 15513:tid 15531] [client 104.46.236.39:61264] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aZYcycGTRTE022JWg191PAAAARA"]
[Thu Feb 19 04:10:49.609217 2026] [:error] [pid 48901:tid 48914] [client 104.46.236.39:52386] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aZYcycixYz-lHbN0WBKmbwAAAAQ"]
[Thu Feb 19 04:10:49.857022 2026] [:error] [pid 48901:tid 48919] [client 104.46.236.39:52411] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aZYcycixYz-lHbN0WBKmcQAAAAk"]
[Thu Feb 19 04:10:50.101085 2026] [:error] [pid 48901:tid 48930] [client 104.46.236.39:52361] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aZYcysixYz-lHbN0WBKmcgAAABQ"]
[Thu Feb 19 04:10:50.346450 2026] [:error] [pid 49002:tid 49017] [client 104.46.236.39:61278] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aZYcylfcBtQ6hSJuEQllrAAAAMM"]
[Thu Feb 19 04:10:50.594123 2026] [:error] [pid 49002:tid 49025] [client 104.46.236.39:61279] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aZYcylfcBtQ6hSJuEQllrQAAAMs"]
[Thu Feb 19 04:10:50.833852 2026] [:error] [pid 48901:tid 48922] [client 104.46.236.39:52363] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aZYcysixYz-lHbN0WBKmdAAAAAw"]
[Thu Feb 19 04:10:51.075481 2026] [:error] [pid 49002:tid 49020] [client 104.46.236.39:49741] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aZYcy1fcBtQ6hSJuEQllsAAAAMY"]
[Thu Feb 19 04:10:51.316856 2026] [:error] [pid 48901:tid 48931] [client 104.46.236.39:52379] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aZYcy8ixYz-lHbN0WBKmdgAAABU"]
[Thu Feb 19 04:10:51.573976 2026] [:error] [pid 48902:tid 48958] [client 104.46.236.39:30476] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aZYcy2cJ-6aYRpRRFsUo9AAAAFQ"]
[Thu Feb 19 04:10:51.828281 2026] [:error] [pid 49002:tid 49036] [client 104.46.236.39:61270] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aZYcy1fcBtQ6hSJuEQllsgAAANY"]
[Thu Feb 19 04:10:52.074313 2026] [:error] [pid 48902:tid 48948] [client 104.46.236.39:30505] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aZYczGcJ-6aYRpRRFsUo9wAAAEo"]
[Thu Feb 19 04:10:52.326629 2026] [:error] [pid 49002:tid 49035] [client 104.46.236.39:16210] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aZYczFfcBtQ6hSJuEQllswAAANU"]
[Thu Feb 19 04:10:52.588507 2026] [:error] [pid 49002:tid 49038] [client 104.46.236.39:16228] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aZYczFfcBtQ6hSJuEQlltAAAANg"]
[Thu Feb 19 04:10:52.845157 2026] [:error] [pid 48901:tid 48921] [client 104.46.236.39:52358] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aZYczMixYz-lHbN0WBKmdwAAAAs"]
[Thu Feb 19 04:10:53.087034 2026] [:error] [pid 48903:tid 48969] [client 104.46.236.39:49755] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aZYczY6aTgKrpAR115voDAAAAIQ"]
[Thu Feb 19 04:10:53.332129 2026] [:error] [pid 48901:tid 48924] [client 104.46.236.39:61285] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aZYczcixYz-lHbN0WBKmegAAAA4"]
[Thu Feb 19 04:10:53.581664 2026] [:error] [pid 49002:tid 49025] [client 104.46.236.39:30518] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aZYczVfcBtQ6hSJuEQlluQAAAMs"]
[Thu Feb 19 04:10:53.831714 2026] [:error] [pid 49002:tid 49034] [client 104.46.236.39:61305] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aZYczVfcBtQ6hSJuEQlluwAAANQ"]
[Thu Feb 19 04:10:54.081301 2026] [:error] [pid 48902:tid 48957] [client 104.46.236.39:16215] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aZYczmcJ-6aYRpRRFsUo-QAAAFM"]
[Thu Feb 19 04:10:54.329744 2026] [:error] [pid 49002:tid 49020] [client 104.46.236.39:52405] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aZYczlfcBtQ6hSJuEQllvgAAAMY"]
[Thu Feb 19 04:10:54.583994 2026] [:error] [pid 49002:tid 49032] [client 104.46.236.39:30472] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aZYczlfcBtQ6hSJuEQllvwAAANI"]
[Thu Feb 19 04:10:54.856217 2026] [:error] [pid 15513:tid 15531] [client 104.46.236.39:49772] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aZYczsGTRTE022JWg191RAAAARA"]
[Thu Feb 19 04:10:55.098012 2026] [:error] [pid 15513:tid 15518] [client 104.46.236.39:52352] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aZYcz8GTRTE022JWg191RQAAAQM"]
[Thu Feb 19 04:10:55.340473 2026] [:error] [pid 15513:tid 15521] [client 104.46.236.39:49746] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aZYcz8GTRTE022JWg191SAAAAQY"]
[Thu Feb 19 04:10:55.581935 2026] [:error] [pid 15513:tid 15526] [client 104.46.236.39:61263] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aZYcz8GTRTE022JWg191SQAAAQs"]
[Thu Feb 19 04:10:55.829678 2026] [:error] [pid 15513:tid 15525] [client 104.46.236.39:30523] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aZYcz8GTRTE022JWg191SgAAAQo"]
[Thu Feb 19 04:10:56.070158 2026] [:error] [pid 15513:tid 15520] [client 104.46.236.39:49742] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev1s.php"] [unique_id "aZYc0MGTRTE022JWg191SwAAAQU"]
[Thu Feb 19 04:10:56.313446 2026] [:error] [pid 15513:tid 15528] [client 104.46.236.39:49749] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev1s.php"] [unique_id "aZYc0MGTRTE022JWg191TgAAAQ0"]
[Thu Feb 19 04:10:56.561891 2026] [:error] [pid 15513:tid 15527] [client 104.46.236.39:49739] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev1s.php"] [unique_id "aZYc0MGTRTE022JWg191UQAAAQw"]
[Thu Feb 19 04:10:56.810507 2026] [:error] [pid 15513:tid 15522] [client 104.46.236.39:16224] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev1s.php"] [unique_id "aZYc0MGTRTE022JWg191VAAAAQc"]
[Thu Feb 19 04:10:57.054656 2026] [:error] [pid 15513:tid 15538] [client 104.46.236.39:61282] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffd.php"] [unique_id "aZYc0cGTRTE022JWg191VQAAARc"]
[Thu Feb 19 04:10:57.296153 2026] [:error] [pid 15513:tid 15531] [client 104.46.236.39:61304] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffd.php"] [unique_id "aZYc0cGTRTE022JWg191VwAAARA"]
[Thu Feb 19 04:10:57.536254 2026] [:error] [pid 15513:tid 15518] [client 104.46.236.39:16203] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffd.php"] [unique_id "aZYc0cGTRTE022JWg191WQAAAQM"]
[Thu Feb 19 04:10:57.776668 2026] [:error] [pid 48902:tid 48948] [client 104.46.236.39:30467] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffd.php"] [unique_id "aZYc0WcJ-6aYRpRRFsUo-wAAAEo"]
[Thu Feb 19 04:10:58.019746 2026] [:error] [pid 49002:tid 49038] [client 104.46.236.39:61274] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admiin.php"] [unique_id "aZYc0lfcBtQ6hSJuEQllwwAAANg"]
[Thu Feb 19 04:10:58.259933 2026] [:error] [pid 49002:tid 49025] [client 104.46.236.39:61277] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admiin.php"] [unique_id "aZYc0lfcBtQ6hSJuEQllxgAAAMs"]
[Thu Feb 19 04:10:58.500957 2026] [:error] [pid 15513:tid 15536] [client 104.46.236.39:61276] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admiin.php"] [unique_id "aZYc0sGTRTE022JWg191WgAAARU"]
[Thu Feb 19 04:10:58.743065 2026] [:error] [pid 15513:tid 15534] [client 104.46.236.39:30527] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admiin.php"] [unique_id "aZYc0sGTRTE022JWg191XAAAARM"]
[Thu Feb 19 04:10:58.988185 2026] [:error] [pid 15513:tid 15525] [client 104.46.236.39:52407] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aZYc0sGTRTE022JWg191XgAAAQo"]
[Thu Feb 19 04:10:59.241003 2026] [:error] [pid 48902:tid 48939] [client 104.46.236.39:61267] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aZYc02cJ-6aYRpRRFsUo_QAAAEE"]
[Thu Feb 19 04:10:59.483168 2026] [:error] [pid 48902:tid 48957] [client 104.46.236.39:61249] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aZYc02cJ-6aYRpRRFsUo_wAAAFM"]
[Thu Feb 19 04:10:59.724868 2026] [:error] [pid 49002:tid 49028] [client 104.46.236.39:52378] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aZYc01fcBtQ6hSJuEQllywAAAM4"]
[Thu Feb 19 04:10:59.969913 2026] [:error] [pid 15513:tid 15520] [client 104.46.236.39:16200] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aZYc08GTRTE022JWg191YAAAAQU"]
[Thu Feb 19 04:11:00.244072 2026] [:error] [pid 15513:tid 15529] [client 104.46.236.39:52388] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aZYc1MGTRTE022JWg191YgAAAQ4"]
[Thu Feb 19 04:11:00.492220 2026] [:error] [pid 49002:tid 49015] [client 104.46.236.39:49754] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aZYc1FfcBtQ6hSJuEQllzAAAAME"]
[Thu Feb 19 04:11:00.733385 2026] [:error] [pid 49002:tid 49016] [client 104.46.236.39:61259] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aZYc1FfcBtQ6hSJuEQllzQAAAMI"]
[Thu Feb 19 04:11:00.979324 2026] [:error] [pid 48902:tid 48961] [client 104.46.236.39:52359] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZYc1GcJ-6aYRpRRFsUpAgAAAFc"]
[Thu Feb 19 04:11:01.219446 2026] [:error] [pid 48902:tid 48945] [client 104.46.236.39:61281] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZYc1WcJ-6aYRpRRFsUpAwAAAEc"]
[Thu Feb 19 04:11:01.459407 2026] [:error] [pid 48902:tid 48953] [client 104.46.236.39:30499] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZYc1WcJ-6aYRpRRFsUpBQAAAE8"]
[Thu Feb 19 04:11:01.701140 2026] [:error] [pid 15513:tid 15539] [client 104.46.236.39:49771] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZYc1cGTRTE022JWg191aQAAARg"]
[Thu Feb 19 04:11:01.943832 2026] [:error] [pid 48902:tid 48958] [client 104.46.236.39:52360] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aZYc1WcJ-6aYRpRRFsUpBgAAAFQ"]
[Thu Feb 19 04:11:02.187560 2026] [:error] [pid 49002:tid 49038] [client 104.46.236.39:49773] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aZYc1lfcBtQ6hSJuEQll0AAAANg"]
[Thu Feb 19 04:11:02.426939 2026] [:error] [pid 49002:tid 49021] [client 104.46.236.39:16248] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aZYc1lfcBtQ6hSJuEQll0QAAAMc"]
[Thu Feb 19 04:11:02.669135 2026] [:error] [pid 49002:tid 49033] [client 104.46.236.39:52373] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aZYc1lfcBtQ6hSJuEQll0gAAANM"]
[Thu Feb 19 04:11:02.927931 2026] [:error] [pid 49002:tid 49030] [client 104.46.236.39:16194] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZYc1lfcBtQ6hSJuEQll1AAAANA"]
[Thu Feb 19 04:11:03.176895 2026] [:error] [pid 49002:tid 49017] [client 104.46.236.39:52372] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZYc11fcBtQ6hSJuEQll1QAAAMM"]
[Thu Feb 19 04:11:03.418971 2026] [:error] [pid 49002:tid 49028] [client 104.46.236.39:49766] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZYc11fcBtQ6hSJuEQll1wAAAM4"]
[Thu Feb 19 04:11:03.669487 2026] [:error] [pid 48901:tid 48921] [client 104.46.236.39:61301] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZYc18ixYz-lHbN0WBKmggAAAAs"]
[Thu Feb 19 04:11:03.915691 2026] [:error] [pid 48901:tid 48925] [client 104.46.236.39:49786] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aZYc18ixYz-lHbN0WBKmgwAAAA8"]
[Thu Feb 19 04:11:04.162924 2026] [:error] [pid 48902:tid 48959] [client 104.46.236.39:49761] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aZYc2GcJ-6aYRpRRFsUpCgAAAFU"]
[Thu Feb 19 04:11:04.409297 2026] [:error] [pid 48901:tid 48924] [client 104.46.236.39:49759] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aZYc2MixYz-lHbN0WBKmhgAAAA4"]
[Thu Feb 19 04:11:04.655080 2026] [:error] [pid 49002:tid 49037] [client 104.46.236.39:17730] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aZYc2FfcBtQ6hSJuEQll2wAAANc"]
[Thu Feb 19 04:11:04.903003 2026] [:error] [pid 48901:tid 48913] [client 104.46.236.39:17728] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZYc2MixYz-lHbN0WBKmhwAAAAM"]
[Thu Feb 19 04:11:05.145251 2026] [:error] [pid 48901:tid 48918] [client 104.46.236.39:16199] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZYc2cixYz-lHbN0WBKmiAAAAAg"]
[Thu Feb 19 04:11:05.389167 2026] [:error] [pid 48901:tid 48912] [client 104.46.236.39:61300] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZYc2cixYz-lHbN0WBKmigAAAAI"]
[Thu Feb 19 04:11:05.634446 2026] [:error] [pid 48902:tid 48949] [client 104.46.236.39:52396] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZYc2WcJ-6aYRpRRFsUpCwAAAEs"]
[Thu Feb 19 04:11:05.884819 2026] [:error] [pid 48902:tid 48954] [client 104.46.236.39:16226] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aZYc2WcJ-6aYRpRRFsUpDQAAAFA"]
[Thu Feb 19 04:11:06.137945 2026] [:error] [pid 15513:tid 15534] [client 104.46.236.39:17740] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aZYc2sGTRTE022JWg191bQAAARM"]
[Thu Feb 19 04:11:06.384219 2026] [:error] [pid 15513:tid 15525] [client 104.46.236.39:30514] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aZYc2sGTRTE022JWg191bgAAAQo"]
[Thu Feb 19 04:11:06.670366 2026] [:error] [pid 15513:tid 15537] [client 104.46.236.39:52387] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aZYc2sGTRTE022JWg191cAAAARY"]
[Thu Feb 19 04:11:06.936180 2026] [:error] [pid 15513:tid 15528] [client 104.46.236.39:17349] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZYc2sGTRTE022JWg191cQAAAQ0"]
[Thu Feb 19 04:11:07.180316 2026] [:error] [pid 48901:tid 48929] [client 104.46.236.39:16252] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZYc28ixYz-lHbN0WBKmjwAAABM"]
[Thu Feb 19 04:11:07.432023 2026] [:error] [pid 48902:tid 48953] [client 104.46.236.39:61309] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZYc22cJ-6aYRpRRFsUpDgAAAE8"]
[Thu Feb 19 04:11:07.756783 2026] [:error] [pid 15513:tid 15522] [client 104.46.236.39:17731] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZYc28GTRTE022JWg191dAAAAQc"]
[Thu Feb 19 04:11:08.009229 2026] [:error] [pid 15513:tid 15518] [client 104.46.236.39:61298] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZYc3MGTRTE022JWg191dgAAAQM"]
[Thu Feb 19 04:11:08.278618 2026] [:error] [pid 48901:tid 48920] [client 104.46.236.39:61283] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZYc3MixYz-lHbN0WBKmkgAAAAo"]
[Thu Feb 19 04:11:08.532482 2026] [:error] [pid 49002:tid 49014] [client 104.46.236.39:49731] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZYc3FfcBtQ6hSJuEQll3wAAAMA"]
[Thu Feb 19 04:11:08.935638 2026] [:error] [pid 48901:tid 48934] [client 104.46.236.39:16214] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZYc3MixYz-lHbN0WBKmlQAAABg"]
[Thu Feb 19 04:11:09.249033 2026] [:error] [pid 48901:tid 48918] [client 104.46.236.39:52356] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZYc3cixYz-lHbN0WBKmlgAAAAg"]
[Thu Feb 19 04:11:09.497431 2026] [:error] [pid 48901:tid 48927] [client 104.46.236.39:17761] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZYc3cixYz-lHbN0WBKmmAAAABE"]
[Thu Feb 19 04:11:09.897476 2026] [:error] [pid 15513:tid 15521] [client 104.46.236.39:17732] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZYc3cGTRTE022JWg191eQAAAQY"]
[Thu Feb 19 04:11:10.283462 2026] [:error] [pid 48902:tid 48950] [client 104.46.236.39:49745] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZYc3mcJ-6aYRpRRFsUpEwAAAEw"]
[Thu Feb 19 04:11:10.727347 2026] [:error] [pid 48901:tid 48923] [client 104.46.236.39:17746] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aZYc3sixYz-lHbN0WBKmmgAAAA0"]
[Thu Feb 19 04:11:12.571494 2026] [:error] [pid 48901:tid 48934] [client 104.46.236.39:61310] [client 104.46.236.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.46.236.39, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZYc4MixYz-lHbN0WBKmpQAAABg"]
[Thu Feb 19 04:11:12.694751 2026] [:error] [pid 48901:tid 48927] [client 104.46.236.39:30516] [client 104.46.236.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.46.236.39, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZYc4MixYz-lHbN0WBKmpgAAABE"]
[Thu Feb 19 04:11:14.419289 2026] [:error] [pid 48901:tid 48934] [client 104.46.236.39:61310] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aZYc4sixYz-lHbN0WBKmswAAABg"]
[Thu Feb 19 04:11:14.664985 2026] [:error] [pid 49002:tid 49027] [client 104.46.236.39:49751] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aZYc4lfcBtQ6hSJuEQll4gAAAM0"]
[Thu Feb 19 04:11:14.905278 2026] [:error] [pid 48903:tid 48982] [client 104.46.236.39:49730] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aZYc4o6aTgKrpAR115voGQAAAJE"]
[Thu Feb 19 04:11:15.146203 2026] [:error] [pid 49002:tid 49038] [client 104.46.236.39:61294] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aZYc41fcBtQ6hSJuEQll4wAAANg"]
[Thu Feb 19 04:11:15.396866 2026] [:error] [pid 15513:tid 15534] [client 104.46.236.39:49740] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZYc48GTRTE022JWg191igAAARM"]
[Thu Feb 19 04:11:15.638561 2026] [:error] [pid 15513:tid 15538] [client 104.46.236.39:49732] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZYc48GTRTE022JWg191iwAAARc"]
[Thu Feb 19 04:11:15.878232 2026] [:error] [pid 49002:tid 49033] [client 104.46.236.39:17744] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZYc41fcBtQ6hSJuEQll5QAAANM"]
[Thu Feb 19 04:11:16.136651 2026] [:error] [pid 48903:tid 48977] [client 104.46.236.39:49769] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZYc5I6aTgKrpAR115voGwAAAIw"]
[Thu Feb 19 04:11:16.379489 2026] [:error] [pid 48903:tid 48980] [client 104.46.236.39:61297] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZYc5I6aTgKrpAR115voHAAAAI8"]
[Thu Feb 19 04:11:16.626850 2026] [:error] [pid 15513:tid 15524] [client 104.46.236.39:16205] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZYc5MGTRTE022JWg191jQAAAQk"]
[Thu Feb 19 04:11:16.867155 2026] [:error] [pid 48902:tid 48947] [client 104.46.236.39:17748] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZYc5GcJ-6aYRpRRFsUpFwAAAEk"]
[Thu Feb 19 04:11:17.108521 2026] [:error] [pid 48902:tid 48944] [client 104.46.236.39:16198] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZYc5WcJ-6aYRpRRFsUpGgAAAEY"]
[Thu Feb 19 04:11:17.391318 2026] [:error] [pid 49002:tid 49023] [client 104.46.236.39:49756] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aZYc5VfcBtQ6hSJuEQll6gAAAMk"]
[Thu Feb 19 04:11:17.667151 2026] [:error] [pid 48903:tid 48985] [client 104.46.236.39:49776] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aZYc5Y6aTgKrpAR115voHgAAAJQ"]
[Thu Feb 19 04:11:17.910512 2026] [:error] [pid 49002:tid 49028] [client 104.46.236.39:49778] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aZYc5VfcBtQ6hSJuEQll7AAAAM4"]
[Thu Feb 19 04:11:18.158652 2026] [:error] [pid 48901:tid 48923] [client 104.46.236.39:61268] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aZYc5sixYz-lHbN0WBKmtgAAAA0"]
[Thu Feb 19 04:11:18.414742 2026] [:error] [pid 49002:tid 49022] [client 104.46.236.39:61295] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ov.php"] [unique_id "aZYc5lfcBtQ6hSJuEQll7gAAAMg"]
[Thu Feb 19 04:11:18.656104 2026] [:error] [pid 48903:tid 48987] [client 104.46.236.39:30494] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ov.php"] [unique_id "aZYc5o6aTgKrpAR115voHwAAAJY"]
[Thu Feb 19 04:11:18.896999 2026] [:error] [pid 15513:tid 15529] [client 104.46.236.39:49764] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ov.php"] [unique_id "aZYc5sGTRTE022JWg191jwAAAQ4"]
[Thu Feb 19 04:11:19.149541 2026] [:error] [pid 49002:tid 49015] [client 104.46.236.39:49753] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ov.php"] [unique_id "aZYc51fcBtQ6hSJuEQll8wAAAME"]
[Thu Feb 19 04:11:19.393144 2026] [:error] [pid 15513:tid 15523] [client 104.46.236.39:30485] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZYc58GTRTE022JWg191kAAAAQg"]
[Thu Feb 19 04:11:19.641145 2026] [:error] [pid 15513:tid 15518] [client 104.46.236.39:61258] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZYc58GTRTE022JWg191kQAAAQM"]
[Thu Feb 19 04:11:19.883190 2026] [:error] [pid 49002:tid 49035] [client 104.46.236.39:49737] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZYc51fcBtQ6hSJuEQll9QAAANU"]
[Thu Feb 19 04:11:20.129637 2026] [:error] [pid 48903:tid 48978] [client 104.46.236.39:16246] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZYc6I6aTgKrpAR115voIAAAAI0"]
[Thu Feb 19 04:11:20.375935 2026] [:error] [pid 48901:tid 48929] [client 104.46.236.39:49770] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aZYc6MixYz-lHbN0WBKmuwAAABM"]
[Thu Feb 19 04:11:20.622840 2026] [:error] [pid 48903:tid 48965] [client 104.46.236.39:49748] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aZYc6I6aTgKrpAR115voIQAAAIA"]
[Thu Feb 19 04:11:20.865645 2026] [:error] [pid 48903:tid 48982] [client 104.46.236.39:17359] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aZYc6I6aTgKrpAR115voIwAAAJE"]
[Thu Feb 19 04:11:21.107921 2026] [:error] [pid 49002:tid 49038] [client 104.46.236.39:61303] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aZYc6VfcBtQ6hSJuEQll9wAAANg"]
[Thu Feb 19 04:11:21.361221 2026] [:error] [pid 48901:tid 48931] [client 104.46.236.39:30510] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aZYc6cixYz-lHbN0WBKmvQAAABU"]
[Thu Feb 19 04:11:21.602812 2026] [:error] [pid 48902:tid 48951] [client 104.46.236.39:17363] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aZYc6WcJ-6aYRpRRFsUpHwAAAE0"]
[Thu Feb 19 04:11:21.844826 2026] [:error] [pid 49002:tid 49030] [client 104.46.236.39:49757] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aZYc6VfcBtQ6hSJuEQll-QAAANA"]
[Thu Feb 19 04:11:22.087367 2026] [:error] [pid 48903:tid 48977] [client 104.46.236.39:52412] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aZYc6o6aTgKrpAR115voJgAAAIw"]
[Thu Feb 19 04:11:22.327925 2026] [:error] [pid 48903:tid 48976] [client 104.46.236.39:17765] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aZYc6o6aTgKrpAR115voJwAAAIs"]
[Thu Feb 19 04:11:22.570461 2026] [:error] [pid 15513:tid 15537] [client 104.46.236.39:16227] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aZYc6sGTRTE022JWg191lAAAARY"]
[Thu Feb 19 04:11:22.812180 2026] [:error] [pid 48902:tid 48954] [client 104.46.236.39:17768] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aZYc6mcJ-6aYRpRRFsUpIQAAAFA"]
[Thu Feb 19 04:11:23.057995 2026] [:error] [pid 48901:tid 48918] [client 104.46.236.39:49774] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aZYc68ixYz-lHbN0WBKmwgAAAAg"]
[Thu Feb 19 04:11:23.304733 2026] [:error] [pid 48901:tid 48927] [client 104.46.236.39:17755] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aZYc68ixYz-lHbN0WBKmxAAAABE"]
[Thu Feb 19 04:11:23.572617 2026] [:error] [pid 48902:tid 48957] [client 104.46.236.39:17759] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aZYc62cJ-6aYRpRRFsUpIgAAAFM"]
[Thu Feb 19 04:11:23.813594 2026] [:error] [pid 48903:tid 48986] [client 104.46.236.39:17361] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aZYc646aTgKrpAR115voKgAAAJU"]
[Thu Feb 19 04:11:24.062068 2026] [:error] [pid 15513:tid 15530] [client 104.46.236.39:16229] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.1.php"] [unique_id "aZYc7MGTRTE022JWg191lgAAAQ8"]
[Thu Feb 19 04:11:24.303341 2026] [:error] [pid 48901:tid 48910] [client 104.46.236.39:52400] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/async.php"] [unique_id "aZYc7MixYz-lHbN0WBKmxwAAAAA"]
[Thu Feb 19 04:11:24.543005 2026] [:error] [pid 48902:tid 48940] [client 104.46.236.39:17351] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/async.php"] [unique_id "aZYc7GcJ-6aYRpRRFsUpIwAAAEI"]
[Thu Feb 19 04:11:24.783265 2026] [:error] [pid 15513:tid 15518] [client 104.46.236.39:30479] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/async.php"] [unique_id "aZYc7MGTRTE022JWg191mQAAAQM"]
[Thu Feb 19 04:11:25.024206 2026] [:error] [pid 15513:tid 15526] [client 104.46.236.39:17360] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/async.php"] [unique_id "aZYc7cGTRTE022JWg191mgAAAQs"]
[Thu Feb 19 04:11:25.265667 2026] [:error] [pid 48901:tid 48929] [client 104.46.236.39:49738] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aZYc7cixYz-lHbN0WBKmyQAAABM"]
[Thu Feb 19 04:11:25.506712 2026] [:error] [pid 15513:tid 15531] [client 104.46.236.39:49763] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aZYc7cGTRTE022JWg191mwAAARA"]
[Thu Feb 19 04:11:25.747629 2026] [:error] [pid 49002:tid 49020] [client 104.46.236.39:49750] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aZYc7VfcBtQ6hSJuEQll_AAAAMY"]
[Thu Feb 19 04:11:25.987482 2026] [:error] [pid 48902:tid 48958] [client 104.46.236.39:17402] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aZYc7WcJ-6aYRpRRFsUpJQAAAFQ"]
[Thu Feb 19 04:11:26.228859 2026] [:error] [pid 48901:tid 48917] [client 104.46.236.39:17745] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZYc7sixYz-lHbN0WBKmygAAAAc"]
[Thu Feb 19 04:11:26.477150 2026] [:error] [pid 48903:tid 48968] [client 104.46.236.39:17375] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZYc7o6aTgKrpAR115voLAAAAIM"]
[Thu Feb 19 04:11:26.719977 2026] [:error] [pid 15513:tid 15532] [client 104.46.236.39:52375] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZYc7sGTRTE022JWg191ngAAARE"]
[Thu Feb 19 04:11:26.970063 2026] [:error] [pid 48901:tid 48934] [client 104.46.236.39:61288] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZYc7sixYz-lHbN0WBKmzwAAABg"]
[Thu Feb 19 04:11:27.259349 2026] [:error] [pid 48903:tid 48987] [client 104.46.236.39:52383] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aZYc746aTgKrpAR115voLQAAAJY"]
[Thu Feb 19 04:11:27.501317 2026] [:error] [pid 48903:tid 48966] [client 104.46.236.39:17781] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aZYc746aTgKrpAR115voLwAAAIE"]
[Thu Feb 19 04:11:27.741899 2026] [:error] [pid 49002:tid 49019] [client 104.46.236.39:17393] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aZYc71fcBtQ6hSJuEQlmAAAAAMU"]
[Thu Feb 19 04:11:28.015845 2026] [:error] [pid 49002:tid 49026] [client 104.46.236.39:49760] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aZYc8FfcBtQ6hSJuEQlmAQAAAMw"]
[Thu Feb 19 04:11:28.257316 2026] [:error] [pid 48902:tid 48962] [client 104.46.236.39:49743] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aZYc8GcJ-6aYRpRRFsUpJwAAAFg"]
[Thu Feb 19 04:11:28.501890 2026] [:error] [pid 48902:tid 48943] [client 104.46.236.39:52384] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aZYc8GcJ-6aYRpRRFsUpKAAAAEU"]
[Thu Feb 19 04:11:28.745341 2026] [:error] [pid 48902:tid 48955] [client 104.46.236.39:17756] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aZYc8GcJ-6aYRpRRFsUpKQAAAFE"]
[Thu Feb 19 04:11:28.992393 2026] [:error] [pid 48902:tid 48939] [client 104.46.236.39:61299] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aZYc8GcJ-6aYRpRRFsUpKgAAAEE"]
[Thu Feb 19 04:11:29.238600 2026] [:error] [pid 48902:tid 48946] [client 104.46.236.39:16238] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aZYc8WcJ-6aYRpRRFsUpLQAAAEg"]
[Thu Feb 19 04:11:29.491911 2026] [:error] [pid 48902:tid 48949] [client 104.46.236.39:52413] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aZYc8WcJ-6aYRpRRFsUpLwAAAEs"]
[Thu Feb 19 04:11:29.736812 2026] [:error] [pid 48902:tid 48945] [client 104.46.236.39:17370] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aZYc8WcJ-6aYRpRRFsUpMQAAAEc"]
[Thu Feb 19 04:11:29.981117 2026] [:error] [pid 48902:tid 48953] [client 104.46.236.39:52403] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aZYc8WcJ-6aYRpRRFsUpMwAAAE8"]
[Thu Feb 19 04:11:30.221590 2026] [:error] [pid 15513:tid 15516] [client 104.46.236.39:61306] [client 104.46.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aZYc8sGTRTE022JWg191ogAAAQE"]
[Thu Feb 19 04:11:30.465106 2026] [:error] [pid 48902:tid 48938] [client 104.46.236.39:17379] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aZYc8mcJ-6aYRpRRFsUpNgAAAEA"]
[Thu Feb 19 04:11:30.706575 2026] [:error] [pid 15513:tid 15515] [client 104.46.236.39:61311] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aZYc8sGTRTE022JWg191owAAAQA"]
[Thu Feb 19 04:11:30.947753 2026] [:error] [pid 15513:tid 15530] [client 104.46.236.39:61292] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aZYc8sGTRTE022JWg191pAAAAQ8"]
[Thu Feb 19 04:11:31.189651 2026] [:error] [pid 15513:tid 15538] [client 104.46.236.39:17394] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aZYc88GTRTE022JWg191pQAAARc"]
[Thu Feb 19 04:11:31.431446 2026] [:error] [pid 48901:tid 48934] [client 104.46.236.39:17374] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aZYc88ixYz-lHbN0WBKm1AAAABg"]
[Thu Feb 19 04:11:31.678811 2026] [:error] [pid 48901:tid 48923] [client 104.46.236.39:49736] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aZYc88ixYz-lHbN0WBKm1QAAAA0"]
[Thu Feb 19 04:11:31.919074 2026] [:error] [pid 49002:tid 49034] [client 104.46.236.39:49744] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aZYc81fcBtQ6hSJuEQlmBgAAANQ"]
[Thu Feb 19 04:11:32.167727 2026] [:error] [pid 15513:tid 15519] [client 104.46.236.39:61301] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aZYc9MGTRTE022JWg191qQAAAQQ"]
[Thu Feb 19 04:11:32.407147 2026] [:error] [pid 48901:tid 48911] [client 104.46.236.39:17782] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aZYc9MixYz-lHbN0WBKm2AAAAAE"]
[Thu Feb 19 04:11:32.647766 2026] [:error] [pid 48903:tid 48974] [client 104.46.236.39:49783] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aZYc9I6aTgKrpAR115voNQAAAIk"]
[Thu Feb 19 04:11:32.890969 2026] [:error] [pid 48901:tid 48930] [client 104.46.236.39:17790] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aZYc9MixYz-lHbN0WBKm2gAAABQ"]
[Thu Feb 19 04:11:33.143987 2026] [:error] [pid 48901:tid 48931] [client 104.46.236.39:17739] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aZYc9cixYz-lHbN0WBKm2wAAABU"]
[Thu Feb 19 04:11:33.393293 2026] [:error] [pid 48903:tid 48969] [client 104.46.236.39:17764] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aZYc9Y6aTgKrpAR115voOQAAAIQ"]
[Thu Feb 19 04:11:33.649817 2026] [:error] [pid 15513:tid 15521] [client 104.46.236.39:17743] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aZYc9cGTRTE022JWg191qwAAAQY"]
[Thu Feb 19 04:11:33.889560 2026] [:error] [pid 48903:tid 48968] [client 104.46.236.39:49782] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aZYc9Y6aTgKrpAR115voOgAAAIM"]
[Thu Feb 19 04:11:34.145069 2026] [:error] [pid 48901:tid 48924] [client 104.46.236.39:16225] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aZYc9sixYz-lHbN0WBKm3gAAAA4"]
[Thu Feb 19 04:11:34.385073 2026] [:error] [pid 15513:tid 15516] [client 104.46.236.39:49729] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aZYc9sGTRTE022JWg191rQAAAQE"]
[Thu Feb 19 04:11:34.626259 2026] [:error] [pid 48903:tid 48981] [client 104.46.236.39:52402] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aZYc9o6aTgKrpAR115voPAAAAJA"]
[Thu Feb 19 04:11:34.868460 2026] [:error] [pid 48901:tid 48913] [client 104.46.236.39:16230] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aZYc9sixYz-lHbN0WBKm3wAAAAM"]
[Thu Feb 19 04:11:35.111132 2026] [:error] [pid 48903:tid 48975] [client 104.46.236.39:17786] [client 104.46.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZYc946aTgKrpAR115voPQAAAIo"]
[Thu Feb 19 04:11:35.366718 2026] [:error] [pid 48903:tid 48982] [client 104.46.236.39:17344] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aZYc946aTgKrpAR115voPgAAAJE"]
[Thu Feb 19 04:11:35.613090 2026] [:error] [pid 48902:tid 48957] [client 104.46.236.39:17779] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aZYc92cJ-6aYRpRRFsUpOgAAAFM"]
[Thu Feb 19 04:11:35.863614 2026] [:error] [pid 48901:tid 48934] [client 104.46.236.39:17372] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aZYc98ixYz-lHbN0WBKm5AAAABg"]
[Thu Feb 19 04:11:36.104531 2026] [:error] [pid 48903:tid 48980] [client 104.46.236.39:16209] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aZYc-I6aTgKrpAR115voPwAAAI8"]
[Thu Feb 19 04:11:36.344334 2026] [:error] [pid 15513:tid 15538] [client 104.46.236.39:17358] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aZYc-MGTRTE022JWg191sQAAARc"]
[Thu Feb 19 04:11:36.584451 2026] [:error] [pid 49002:tid 49022] [client 104.46.236.39:8190] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aZYc-FfcBtQ6hSJuEQlmCQAAAMg"]
[Thu Feb 19 04:11:36.837194 2026] [:error] [pid 48903:tid 48976] [client 104.46.236.39:17734] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aZYc-I6aTgKrpAR115voQAAAAIs"]
[Thu Feb 19 04:11:37.077629 2026] [:error] [pid 48902:tid 48959] [client 104.46.236.39:17749] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aZYc-WcJ-6aYRpRRFsUpPQAAAFU"]
[Thu Feb 19 04:11:37.318804 2026] [:error] [pid 48901:tid 48932] [client 104.46.236.39:61266] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aZYc-cixYz-lHbN0WBKm6QAAABY"]
[Thu Feb 19 04:11:37.559103 2026] [:error] [pid 48903:tid 48972] [client 104.46.236.39:52414] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aZYc-Y6aTgKrpAR115voQQAAAIc"]
[Thu Feb 19 04:11:37.798815 2026] [:error] [pid 49002:tid 49025] [client 104.46.236.39:17777] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aZYc-VfcBtQ6hSJuEQlmDQAAAMs"]
[Thu Feb 19 04:11:38.039888 2026] [:error] [pid 48903:tid 48989] [client 104.46.236.39:17753] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aZYc-o6aTgKrpAR115voQwAAAJg"]
[Thu Feb 19 04:11:38.282213 2026] [:error] [pid 49002:tid 49017] [client 104.46.236.39:16196] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/muzu.php"] [unique_id "aZYc-lfcBtQ6hSJuEQlmDwAAAMM"]
[Thu Feb 19 04:11:38.522089 2026] [:error] [pid 48902:tid 48948] [client 104.46.236.39:61269] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/muzu.php"] [unique_id "aZYc-mcJ-6aYRpRRFsUpPgAAAEo"]
[Thu Feb 19 04:11:38.761979 2026] [:error] [pid 48902:tid 48955] [client 104.46.236.39:49780] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/muzu.php"] [unique_id "aZYc-mcJ-6aYRpRRFsUpQQAAAFE"]
[Thu Feb 19 04:11:39.000860 2026] [:error] [pid 15513:tid 15526] [client 104.46.236.39:17735] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/muzu.php"] [unique_id "aZYc-sGTRTE022JWg191sgAAAQs"]
[Thu Feb 19 04:11:39.239992 2026] [:error] [pid 49002:tid 49030] [client 104.46.236.39:49773] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reze.php"] [unique_id "aZYc-1fcBtQ6hSJuEQlmEQAAANA"]
[Thu Feb 19 04:11:39.496082 2026] [:error] [pid 15513:tid 15519] [client 104.46.236.39:61280] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reze.php"] [unique_id "aZYc-8GTRTE022JWg191swAAAQQ"]
[Thu Feb 19 04:11:39.736764 2026] [:error] [pid 48902:tid 48960] [client 104.46.236.39:17751] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reze.php"] [unique_id "aZYc-2cJ-6aYRpRRFsUpQgAAAFY"]
[Thu Feb 19 04:11:39.981943 2026] [:error] [pid 49002:tid 49026] [client 104.46.236.39:17774] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reze.php"] [unique_id "aZYc-1fcBtQ6hSJuEQlmEwAAAMw"]
[Thu Feb 19 04:11:40.226285 2026] [:error] [pid 48901:tid 48920] [client 104.46.236.39:52408] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aZYc_MixYz-lHbN0WBKm6gAAAAo"]
[Thu Feb 19 04:11:40.466497 2026] [:error] [pid 48901:tid 48915] [client 104.46.236.39:17783] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aZYc_MixYz-lHbN0WBKm6wAAAAU"]
[Thu Feb 19 04:11:40.726304 2026] [:error] [pid 49002:tid 49022] [client 104.46.236.39:16250] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aZYc_FfcBtQ6hSJuEQlmFgAAAMg"]
[Thu Feb 19 04:11:40.968358 2026] [:error] [pid 49002:tid 49032] [client 104.46.236.39:17778] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aZYc_FfcBtQ6hSJuEQlmFwAAANI"]
[Thu Feb 19 04:11:41.207806 2026] [:error] [pid 48901:tid 48930] [client 104.46.236.39:17791] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aZYc_cixYz-lHbN0WBKm7gAAABQ"]
[Thu Feb 19 04:11:41.447353 2026] [:error] [pid 49002:tid 49018] [client 104.46.236.39:61253] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aZYc_VfcBtQ6hSJuEQlmGgAAAMQ"]
[Thu Feb 19 04:11:41.687801 2026] [:error] [pid 48901:tid 48921] [client 104.46.236.39:49789] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aZYc_cixYz-lHbN0WBKm8AAAAAs"]
[Thu Feb 19 04:11:41.929834 2026] [:error] [pid 48903:tid 48965] [client 104.46.236.39:17352] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aZYc_Y6aTgKrpAR115voSQAAAIA"]
[Thu Feb 19 04:11:42.172870 2026] [:error] [pid 48901:tid 48924] [client 104.46.236.39:17389] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thebe.php"] [unique_id "aZYc_sixYz-lHbN0WBKm8QAAAA4"]
[Thu Feb 19 04:11:42.412011 2026] [:error] [pid 48901:tid 48918] [client 104.46.236.39:61287] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thebe.php"] [unique_id "aZYc_sixYz-lHbN0WBKm8gAAAAg"]
[Thu Feb 19 04:11:42.652013 2026] [:error] [pid 48901:tid 48928] [client 104.46.236.39:17346] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thebe.php"] [unique_id "aZYc_sixYz-lHbN0WBKm9AAAABI"]
[Thu Feb 19 04:11:42.891701 2026] [:error] [pid 48903:tid 48977] [client 104.46.236.39:17788] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thebe.php"] [unique_id "aZYc_o6aTgKrpAR115voTAAAAIw"]
[Thu Feb 19 04:11:43.139197 2026] [:error] [pid 15513:tid 15517] [client 104.46.236.39:49790] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ddd.php"] [unique_id "aZYc_8GTRTE022JWg191tgAAAQI"]
[Thu Feb 19 04:11:43.379365 2026] [:error] [pid 48901:tid 48920] [client 104.46.236.39:17377] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ddd.php"] [unique_id "aZYc_8ixYz-lHbN0WBKm9QAAAAo"]
[Thu Feb 19 04:11:43.621403 2026] [:error] [pid 48902:tid 48947] [client 104.46.236.39:17767] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ddd.php"] [unique_id "aZYc_2cJ-6aYRpRRFsUpRAAAAEk"]
[Thu Feb 19 04:11:43.861151 2026] [:error] [pid 15513:tid 15537] [client 104.46.236.39:17747] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ddd.php"] [unique_id "aZYc_8GTRTE022JWg191ugAAARY"]
[Thu Feb 19 04:11:44.102593 2026] [:error] [pid 48901:tid 48916] [client 104.46.236.39:17769] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aZYdAMixYz-lHbN0WBKm9gAAAAY"]
[Thu Feb 19 04:11:44.346496 2026] [:error] [pid 48902:tid 48959] [client 104.46.236.39:49785] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aZYdAGcJ-6aYRpRRFsUpRgAAAFU"]
[Thu Feb 19 04:11:44.589387 2026] [:error] [pid 48902:tid 48956] [client 104.46.236.39:49734] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aZYdAGcJ-6aYRpRRFsUpRwAAAFI"]
[Thu Feb 19 04:11:44.830535 2026] [:error] [pid 48902:tid 48943] [client 104.46.236.39:49775] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aZYdAGcJ-6aYRpRRFsUpSQAAAEU"]
[Thu Feb 19 04:11:45.070844 2026] [:error] [pid 48902:tid 48962] [client 104.46.236.39:17752] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "aZYdAWcJ-6aYRpRRFsUpSwAAAFg"]
[Thu Feb 19 04:11:45.310321 2026] [:error] [pid 48901:tid 48914] [client 104.46.236.39:49752] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "aZYdAcixYz-lHbN0WBKm-QAAAAQ"]
[Thu Feb 19 04:11:45.549642 2026] [:error] [pid 49002:tid 49022] [client 104.46.236.39:17406] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "aZYdAVfcBtQ6hSJuEQlmHwAAAMg"]
[Thu Feb 19 04:11:45.791022 2026] [:error] [pid 48901:tid 48923] [client 104.46.236.39:49758] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "aZYdAcixYz-lHbN0WBKm-wAAAA0"]
[Thu Feb 19 04:11:46.029355 2026] [:error] [pid 15513:tid 15530] [client 104.46.236.39:17762] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZYdAsGTRTE022JWg191vQAAAQ8"]
[Thu Feb 19 04:11:46.268465 2026] [:error] [pid 15513:tid 15538] [client 104.46.236.39:17345] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZYdAsGTRTE022JWg191vgAAARc"]
[Thu Feb 19 04:11:46.510752 2026] [:error] [pid 15513:tid 15523] [client 104.46.236.39:49768] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZYdAsGTRTE022JWg191wAAAAQg"]
[Thu Feb 19 04:11:46.751901 2026] [:error] [pid 48902:tid 48939] [client 104.46.236.39:17787] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZYdAmcJ-6aYRpRRFsUpTgAAAEE"]
[Thu Feb 19 04:11:46.997016 2026] [:error] [pid 48903:tid 48973] [client 104.46.236.39:8180] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "aZYdAo6aTgKrpAR115voUgAAAIg"]
[Thu Feb 19 04:11:47.236260 2026] [:error] [pid 15513:tid 15531] [client 104.46.236.39:17743] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "aZYdA8GTRTE022JWg191wwAAARA"]
[Thu Feb 19 04:11:47.476968 2026] [:error] [pid 49002:tid 49029] [client 104.46.236.39:17365] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "aZYdA1fcBtQ6hSJuEQlmIgAAAM8"]
[Thu Feb 19 04:11:47.717853 2026] [:error] [pid 48902:tid 48952] [client 104.46.236.39:17380] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "aZYdA2cJ-6aYRpRRFsUpUQAAAE4"]
[Thu Feb 19 04:11:47.958055 2026] [:error] [pid 48902:tid 48957] [client 104.46.236.39:17757] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aZYdA2cJ-6aYRpRRFsUpVAAAAFM"]
[Thu Feb 19 04:11:48.204059 2026] [:error] [pid 48902:tid 48953] [client 104.46.236.39:8164] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aZYdBGcJ-6aYRpRRFsUpVgAAAE8"]
[Thu Feb 19 04:11:48.445931 2026] [:error] [pid 48902:tid 48950] [client 104.46.236.39:17407] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aZYdBGcJ-6aYRpRRFsUpVwAAAEw"]
[Thu Feb 19 04:11:48.689282 2026] [:error] [pid 48902:tid 48944] [client 104.46.236.39:17398] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aZYdBGcJ-6aYRpRRFsUpWQAAAEY"]
[Thu Feb 19 04:11:48.929830 2026] [:error] [pid 48901:tid 48924] [client 104.46.236.39:49735] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aZYdBMixYz-lHbN0WBKm_AAAAA4"]
[Thu Feb 19 04:11:49.170876 2026] [:error] [pid 48902:tid 48956] [client 104.46.236.39:17378] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aZYdBWcJ-6aYRpRRFsUpWwAAAFI"]
[Thu Feb 19 04:11:49.424705 2026] [:error] [pid 48902:tid 48961] [client 104.46.236.39:17736] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aZYdBWcJ-6aYRpRRFsUpXAAAAFc"]
[Thu Feb 19 04:11:49.672289 2026] [:error] [pid 48901:tid 48918] [client 104.46.236.39:8154] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aZYdBcixYz-lHbN0WBKm_gAAAAg"]
[Thu Feb 19 04:11:49.919501 2026] [:error] [pid 48902:tid 48958] [client 104.46.236.39:52409] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZYdBWcJ-6aYRpRRFsUpXwAAAFQ"]
[Thu Feb 19 04:11:50.160256 2026] [:error] [pid 48902:tid 48960] [client 104.46.236.39:17772] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZYdBmcJ-6aYRpRRFsUpYQAAAFY"]
[Thu Feb 19 04:11:50.416733 2026] [:error] [pid 48902:tid 48952] [client 104.46.236.39:49747] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZYdBmcJ-6aYRpRRFsUpYgAAAE4"]
[Thu Feb 19 04:11:50.664631 2026] [:error] [pid 48902:tid 48957] [client 104.46.236.39:17763] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZYdBmcJ-6aYRpRRFsUpZQAAAFM"]
[Thu Feb 19 04:11:50.903948 2026] [:error] [pid 48903:tid 48977] [client 104.46.236.39:61284] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZYdBo6aTgKrpAR115voUwAAAIw"]
[Thu Feb 19 04:11:51.143159 2026] [:error] [pid 15513:tid 15516] [client 104.46.236.39:52368] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZYdB8GTRTE022JWg191xQAAAQE"]
[Thu Feb 19 04:11:51.417112 2026] [:error] [pid 15513:tid 15521] [client 104.46.236.39:17355] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZYdB8GTRTE022JWg191xgAAAQY"]
[Thu Feb 19 04:11:51.656728 2026] [:error] [pid 15513:tid 15520] [client 104.46.236.39:17386] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZYdB8GTRTE022JWg191xwAAAQU"]
[Thu Feb 19 04:11:51.896546 2026] [:error] [pid 48903:tid 48984] [client 104.46.236.39:49728] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZYdB46aTgKrpAR115voVQAAAJM"]
[Thu Feb 19 04:11:52.153054 2026] [:error] [pid 15513:tid 15538] [client 104.46.236.39:17373] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZYdCMGTRTE022JWg191yQAAARc"]
[Thu Feb 19 04:11:52.393292 2026] [:error] [pid 48901:tid 48919] [client 104.46.236.39:17760] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZYdCMixYz-lHbN0WBKnAAAAAAk"]
[Thu Feb 19 04:11:52.649970 2026] [:error] [pid 48903:tid 48983] [client 104.46.236.39:8173] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZYdCI6aTgKrpAR115voVgAAAJI"]
[Thu Feb 19 04:11:52.890425 2026] [:error] [pid 48903:tid 48985] [client 104.46.236.39:17348] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZYdCI6aTgKrpAR115voVwAAAJQ"]
[Thu Feb 19 04:11:53.131097 2026] [:error] [pid 48901:tid 48930] [client 104.46.236.39:8184] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZYdCcixYz-lHbN0WBKnAwAAABQ"]
[Thu Feb 19 04:11:53.373113 2026] [:error] [pid 15513:tid 15528] [client 104.46.236.39:8182] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZYdCcGTRTE022JWg191ywAAAQ0"]
[Thu Feb 19 04:11:53.616564 2026] [:error] [pid 15513:tid 15535] [client 104.46.236.39:52382] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZYdCcGTRTE022JWg191zAAAARQ"]
[Thu Feb 19 04:11:53.857029 2026] [:error] [pid 15513:tid 15522] [client 104.46.236.39:8153] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aZYdCcGTRTE022JWg191zQAAAQc"]
[Thu Feb 19 04:11:54.102043 2026] [:error] [pid 48903:tid 48974] [client 104.46.236.39:17738] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aZYdCo6aTgKrpAR115voWQAAAIk"]
[Thu Feb 19 04:11:54.341717 2026] [:error] [pid 48903:tid 48967] [client 104.46.236.39:17775] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aZYdCo6aTgKrpAR115voWwAAAII"]
[Thu Feb 19 04:11:54.581121 2026] [:error] [pid 48903:tid 48970] [client 104.46.236.39:61308] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aZYdCo6aTgKrpAR115voXQAAAIU"]
[Thu Feb 19 04:11:54.822245 2026] [:error] [pid 48903:tid 48972] [client 104.46.236.39:17385] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aZYdCo6aTgKrpAR115voXgAAAIc"]
[Thu Feb 19 04:11:55.062152 2026] [:error] [pid 48903:tid 48973] [client 104.46.236.39:17734] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aZYdC46aTgKrpAR115voXwAAAIg"]
[Thu Feb 19 04:11:55.303448 2026] [:error] [pid 15513:tid 15538] [client 104.46.236.39:17367] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aZYdC8GTRTE022JWg1911AAAARc"]
[Thu Feb 19 04:11:55.543935 2026] [:error] [pid 15513:tid 15537] [client 104.46.236.39:17750] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aZYdC8GTRTE022JWg1911QAAARY"]
[Thu Feb 19 04:11:55.784261 2026] [:error] [pid 48902:tid 48953] [client 104.46.236.39:17771] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aZYdC2cJ-6aYRpRRFsUpaQAAAE8"]
[Thu Feb 19 04:11:56.025958 2026] [:error] [pid 15513:tid 15523] [client 104.46.236.39:17397] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aZYdDMGTRTE022JWg1911wAAAQg"]
[Thu Feb 19 04:11:56.266955 2026] [:error] [pid 48902:tid 48949] [client 104.46.236.39:17384] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aZYdDGcJ-6aYRpRRFsUpbAAAAEs"]
[Thu Feb 19 04:11:56.506782 2026] [:error] [pid 15513:tid 15530] [client 104.46.236.39:8068] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aZYdDMGTRTE022JWg1912AAAAQ8"]
[Thu Feb 19 04:11:56.748587 2026] [:error] [pid 15513:tid 15531] [client 104.46.236.39:17396] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aZYdDMGTRTE022JWg1912gAAARA"]
[Thu Feb 19 04:11:56.990869 2026] [:error] [pid 15513:tid 15534] [client 104.46.236.39:8158] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aZYdDMGTRTE022JWg1912wAAARM"]
[Thu Feb 19 04:11:57.234132 2026] [:error] [pid 15513:tid 15533] [client 104.46.236.39:8136] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aZYdDcGTRTE022JWg1913QAAARI"]
[Thu Feb 19 04:11:57.474755 2026] [:error] [pid 48901:tid 48921] [client 104.46.236.39:8162] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aZYdDcixYz-lHbN0WBKnBgAAAAs"]
[Thu Feb 19 04:11:57.717237 2026] [:error] [pid 48902:tid 48939] [client 104.46.236.39:17353] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aZYdDWcJ-6aYRpRRFsUpbwAAAEE"]
[Thu Feb 19 04:11:57.958399 2026] [:error] [pid 48902:tid 48960] [client 104.46.236.39:17382] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aZYdDWcJ-6aYRpRRFsUpcAAAAFY"]
[Thu Feb 19 04:11:58.201318 2026] [:error] [pid 48901:tid 48932] [client 104.46.236.39:17773] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aZYdDsixYz-lHbN0WBKnBwAAABY"]
[Thu Feb 19 04:11:58.442759 2026] [:error] [pid 49002:tid 49021] [client 104.46.236.39:8140] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aZYdDlfcBtQ6hSJuEQlmJQAAAMc"]
[Thu Feb 19 04:11:58.681597 2026] [:error] [pid 49002:tid 49019] [client 104.46.236.39:8130] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZYdDlfcBtQ6hSJuEQlmJwAAAMU"]
[Thu Feb 19 04:11:58.922126 2026] [:error] [pid 48902:tid 48952] [client 104.46.236.39:17404] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZYdDmcJ-6aYRpRRFsUpcgAAAE4"]
[Thu Feb 19 04:11:59.161723 2026] [:error] [pid 48903:tid 48965] [client 104.46.236.39:17395] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZYdD46aTgKrpAR115voYQAAAIA"]
[Thu Feb 19 04:11:59.402035 2026] [:error] [pid 49002:tid 49037] [client 104.46.236.39:8166] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZYdD1fcBtQ6hSJuEQlmKQAAANc"]
[Thu Feb 19 04:11:59.642227 2026] [:error] [pid 15513:tid 15538] [client 104.46.236.39:17405] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aZYdD8GTRTE022JWg1915AAAARc"]
[Thu Feb 19 04:11:59.882972 2026] [:error] [pid 48903:tid 48979] [client 104.46.236.39:17381] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aZYdD46aTgKrpAR115voYgAAAI4"]
[Thu Feb 19 04:12:00.124439 2026] [:error] [pid 48901:tid 48920] [client 104.46.236.39:52377] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aZYdEMixYz-lHbN0WBKnCgAAAAo"]
[Thu Feb 19 04:12:00.366051 2026] [:error] [pid 48902:tid 48959] [client 104.46.236.39:8095] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aZYdEGcJ-6aYRpRRFsUpdgAAAFU"]
[Thu Feb 19 04:12:00.607834 2026] [:error] [pid 49002:tid 49029] [client 104.46.236.39:17754] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZYdEFfcBtQ6hSJuEQlmLAAAAM8"]
[Thu Feb 19 04:12:00.849885 2026] [:error] [pid 48902:tid 48949] [client 104.46.236.39:8160] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZYdEGcJ-6aYRpRRFsUpdwAAAEs"]
[Thu Feb 19 04:12:01.089638 2026] [:error] [pid 48902:tid 48956] [client 104.46.236.39:61307] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZYdEWcJ-6aYRpRRFsUpeAAAAFI"]
[Thu Feb 19 04:12:01.329995 2026] [:error] [pid 48902:tid 48947] [client 104.46.236.39:49762] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZYdEWcJ-6aYRpRRFsUpegAAAEk"]
[Thu Feb 19 04:12:01.571194 2026] [:error] [pid 48901:tid 48930] [client 104.46.236.39:61271] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "aZYdEcixYz-lHbN0WBKnEAAAABQ"]
[Thu Feb 19 04:12:01.818382 2026] [:error] [pid 48901:tid 48910] [client 104.46.236.39:8094] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "aZYdEcixYz-lHbN0WBKnEgAAAAA"]
[Thu Feb 19 04:12:02.060384 2026] [:error] [pid 48901:tid 48927] [client 104.46.236.39:17347] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "aZYdEsixYz-lHbN0WBKnEwAAABE"]
[Thu Feb 19 04:12:02.302373 2026] [:error] [pid 49002:tid 49017] [client 104.46.236.39:17390] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "aZYdElfcBtQ6hSJuEQlmLgAAAMM"]
[Thu Feb 19 04:12:02.544598 2026] [:error] [pid 49002:tid 49033] [client 104.46.236.39:17362] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aZYdElfcBtQ6hSJuEQlmMAAAANM"]
[Thu Feb 19 04:12:02.785048 2026] [:error] [pid 49002:tid 49023] [client 104.46.236.39:8171] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aZYdElfcBtQ6hSJuEQlmMQAAAMk"]
[Thu Feb 19 04:12:03.024993 2026] [:error] [pid 48903:tid 48968] [client 104.46.236.39:8155] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aZYdE46aTgKrpAR115voZwAAAIM"]
[Thu Feb 19 04:12:03.265915 2026] [:error] [pid 49002:tid 49030] [client 104.46.236.39:8161] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aZYdE1fcBtQ6hSJuEQlmMwAAANA"]
[Thu Feb 19 04:12:03.509352 2026] [:error] [pid 49002:tid 49024] [client 104.46.236.39:8174] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aZYdE1fcBtQ6hSJuEQlmNAAAAMo"]
[Thu Feb 19 04:12:03.751817 2026] [:error] [pid 49002:tid 49032] [client 104.46.236.39:8159] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aZYdE1fcBtQ6hSJuEQlmNQAAANI"]
[Thu Feb 19 04:12:03.993998 2026] [:error] [pid 48902:tid 48957] [client 104.46.236.39:8177] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aZYdE2cJ-6aYRpRRFsUpfQAAAFM"]
[Thu Feb 19 04:12:04.235194 2026] [:error] [pid 48903:tid 48970] [client 104.46.236.39:52374] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aZYdFI6aTgKrpAR115voaAAAAIU"]
[Thu Feb 19 04:12:04.476089 2026] [:error] [pid 15513:tid 15515] [client 104.46.236.39:49777] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aZYdFMGTRTE022JWg1915gAAAQA"]
[Thu Feb 19 04:12:04.717245 2026] [:error] [pid 15513:tid 15520] [client 104.46.236.39:8065] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aZYdFMGTRTE022JWg1916QAAAQU"]
[Thu Feb 19 04:12:04.959534 2026] [:error] [pid 48901:tid 48920] [client 104.46.236.39:8144] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aZYdFMixYz-lHbN0WBKnGgAAAAo"]
[Thu Feb 19 04:12:05.201332 2026] [:error] [pid 48903:tid 48969] [client 104.46.236.39:8134] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aZYdFY6aTgKrpAR115voaQAAAIQ"]
[Thu Feb 19 04:12:05.441749 2026] [:error] [pid 48903:tid 48971] [client 104.46.236.39:17357] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aZYdFY6aTgKrpAR115vobAAAAIY"]
[Thu Feb 19 04:12:05.682842 2026] [:error] [pid 48903:tid 48987] [client 104.46.236.39:8139] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aZYdFY6aTgKrpAR115vobQAAAJY"]
[Thu Feb 19 04:12:05.923452 2026] [:error] [pid 48901:tid 48914] [client 104.46.236.39:17369] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aZYdFcixYz-lHbN0WBKnGwAAAAQ"]
[Thu Feb 19 04:12:06.164455 2026] [:error] [pid 49002:tid 49026] [client 104.46.236.39:17758] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aZYdFlfcBtQ6hSJuEQlmOQAAAMw"]
[Thu Feb 19 04:12:06.409245 2026] [:error] [pid 15513:tid 15533] [client 104.46.236.39:17780] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aZYdFsGTRTE022JWg1916gAAARI"]
[Thu Feb 19 04:12:06.672212 2026] [:error] [pid 15513:tid 15522] [client 104.46.236.39:17354] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aZYdFsGTRTE022JWg1916wAAAQc"]
[Thu Feb 19 04:12:06.912895 2026] [:error] [pid 48901:tid 48915] [client 104.46.236.39:8191] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aZYdFsixYz-lHbN0WBKnHQAAAAU"]
[Thu Feb 19 04:12:07.152513 2026] [:error] [pid 48901:tid 48928] [client 104.46.236.39:8143] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aZYdF8ixYz-lHbN0WBKnHgAAABI"]
[Thu Feb 19 04:12:07.396031 2026] [:error] [pid 48902:tid 48941] [client 104.46.236.39:61250] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aZYdF2cJ-6aYRpRRFsUphAAAAEM"]
[Thu Feb 19 04:12:07.640723 2026] [:error] [pid 48903:tid 48977] [client 104.46.236.39:8093] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aZYdF46aTgKrpAR115vobwAAAIw"]
[Thu Feb 19 04:12:07.879757 2026] [:error] [pid 48903:tid 48984] [client 104.46.236.39:8145] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aZYdF46aTgKrpAR115vocAAAAJM"]
[Thu Feb 19 04:12:08.118824 2026] [:error] [pid 48903:tid 48989] [client 104.46.236.39:17772] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aZYdGI6aTgKrpAR115vocgAAAJg"]
[Thu Feb 19 04:12:08.359059 2026] [:error] [pid 48903:tid 48976] [client 104.46.236.39:8007] [client 104.46.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZYdGI6aTgKrpAR115vodQAAAIs"]
[Thu Feb 19 04:12:08.600208 2026] [:error] [pid 49002:tid 49033] [client 104.46.236.39:49781] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aZYdGFfcBtQ6hSJuEQlmPgAAANM"]
[Thu Feb 19 04:12:08.840068 2026] [:error] [pid 48903:tid 48968] [client 104.46.236.39:17392] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aZYdGI6aTgKrpAR115vodwAAAIM"]
[Thu Feb 19 04:12:09.079810 2026] [:error] [pid 48901:tid 48912] [client 104.46.236.39:8031] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aZYdGcixYz-lHbN0WBKnIgAAAAI"]
[Thu Feb 19 04:12:09.320792 2026] [:error] [pid 48903:tid 48969] [client 104.46.236.39:52376] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jane.php"] [unique_id "aZYdGY6aTgKrpAR115voegAAAIQ"]
[Thu Feb 19 04:12:09.563225 2026] [:error] [pid 48902:tid 48948] [client 104.46.236.39:8128] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jane.php"] [unique_id "aZYdGWcJ-6aYRpRRFsUphgAAAEo"]
[Thu Feb 19 04:12:09.810871 2026] [:error] [pid 48902:tid 48945] [client 104.46.236.39:49767] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jane.php"] [unique_id "aZYdGWcJ-6aYRpRRFsUphwAAAEc"]
[Thu Feb 19 04:12:10.052838 2026] [:error] [pid 15513:tid 15536] [client 104.46.236.39:49791] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jane.php"] [unique_id "aZYdGsGTRTE022JWg1917wAAARU"]
[Thu Feb 19 04:12:10.293441 2026] [:error] [pid 15513:tid 15525] [client 104.46.236.39:8069] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aZYdGsGTRTE022JWg1918AAAAQo"]
[Thu Feb 19 04:12:10.533624 2026] [:error] [pid 49002:tid 49032] [client 104.46.236.39:49785] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aZYdGlfcBtQ6hSJuEQlmPwAAANI"]
[Thu Feb 19 04:12:10.775735 2026] [:error] [pid 15513:tid 15517] [client 104.46.236.39:8021] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aZYdGsGTRTE022JWg1918QAAAQI"]
[Thu Feb 19 04:12:11.017160 2026] [:error] [pid 49002:tid 49020] [client 104.46.236.39:8003] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aZYdG1fcBtQ6hSJuEQlmQQAAAMY"]
[Thu Feb 19 04:12:11.257701 2026] [:error] [pid 15513:tid 15515] [client 104.46.236.39:8191] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZYdG8GTRTE022JWg1918wAAAQA"]
[Thu Feb 19 04:12:11.497250 2026] [:error] [pid 48901:tid 48928] [client 104.46.236.39:8076] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZYdG8ixYz-lHbN0WBKnJwAAABI"]
[Thu Feb 19 04:12:11.738661 2026] [:error] [pid 48903:tid 48989] [client 104.46.236.39:17391] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZYdG46aTgKrpAR115vogQAAAJg"]
[Thu Feb 19 04:12:11.981445 2026] [:error] [pid 15513:tid 15516] [client 104.46.236.39:8087] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZYdG8GTRTE022JWg1919QAAAQE"]
[Thu Feb 19 04:12:12.224074 2026] [:error] [pid 15513:tid 15523] [client 104.46.236.39:49765] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aZYdHMGTRTE022JWg1919gAAAQg"]
[Thu Feb 19 04:12:12.465163 2026] [:error] [pid 48901:tid 48932] [client 104.46.236.39:8148] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aZYdHMixYz-lHbN0WBKnKwAAABY"]
[Thu Feb 19 04:12:12.708486 2026] [:error] [pid 48901:tid 48913] [client 104.46.236.39:8101] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aZYdHMixYz-lHbN0WBKnLAAAAAM"]
[Thu Feb 19 04:12:12.951643 2026] [:error] [pid 48902:tid 48949] [client 104.46.236.39:8165] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aZYdHGcJ-6aYRpRRFsUpigAAAEs"]
[Thu Feb 19 04:12:13.193502 2026] [:error] [pid 48902:tid 48952] [client 104.46.236.39:8138] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aZYdHWcJ-6aYRpRRFsUpiwAAAE4"]
[Thu Feb 19 04:12:13.446060 2026] [:error] [pid 49002:tid 49034] [client 104.46.236.39:17403] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aZYdHVfcBtQ6hSJuEQlmRAAAANQ"]
[Thu Feb 19 04:12:13.687665 2026] [:error] [pid 49002:tid 49031] [client 104.46.236.39:7938] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aZYdHVfcBtQ6hSJuEQlmRQAAANE"]
[Thu Feb 19 04:12:13.928634 2026] [:error] [pid 49002:tid 49027] [client 104.46.236.39:8033] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aZYdHVfcBtQ6hSJuEQlmRgAAAM0"]
[Thu Feb 19 04:12:17.847333 2026] [:error] [pid 48901:tid 48922] [client 104.46.236.39:8133] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZYdIcixYz-lHbN0WBKnQQAAAAw"]
[Thu Feb 19 04:12:18.099715 2026] [:error] [pid 48903:tid 48965] [client 104.46.236.39:8122] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZYdIo6aTgKrpAR115vohgAAAIA"]
[Thu Feb 19 04:12:18.342619 2026] [:error] [pid 15513:tid 15535] [client 104.46.236.39:8075] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZYdIsGTRTE022JWg192AwAAARQ"]
[Thu Feb 19 04:12:18.596647 2026] [:error] [pid 49002:tid 49033] [client 104.46.236.39:8135] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZYdIlfcBtQ6hSJuEQlmWwAAANM"]
[Thu Feb 19 04:12:18.836666 2026] [:error] [pid 48902:tid 48941] [client 104.46.236.39:8073] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZYdImcJ-6aYRpRRFsUpjwAAAEM"]
[Thu Feb 19 04:12:19.077676 2026] [:error] [pid 15513:tid 15526] [client 104.46.236.39:8151] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZYdI8GTRTE022JWg192BAAAAQs"]
[Thu Feb 19 04:12:19.318674 2026] [:error] [pid 15513:tid 15533] [client 104.46.236.39:8155] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZYdI8GTRTE022JWg192BQAAARI"]
[Thu Feb 19 04:12:19.560229 2026] [:error] [pid 15513:tid 15522] [client 104.46.236.39:8124] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZYdI8GTRTE022JWg192BgAAAQc"]
[Thu Feb 19 04:12:19.801368 2026] [:error] [pid 48903:tid 48976] [client 104.46.236.39:8071] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZYdI46aTgKrpAR115vohwAAAIs"]
[Thu Feb 19 04:12:20.044515 2026] [:error] [pid 15513:tid 15539] [client 104.46.236.39:8176] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZYdJMGTRTE022JWg192CAAAARg"]
[Thu Feb 19 04:12:20.298377 2026] [:error] [pid 15513:tid 15519] [client 104.46.236.39:17770] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZYdJMGTRTE022JWg192CgAAAQQ"]
[Thu Feb 19 04:12:20.540077 2026] [:error] [pid 49002:tid 49020] [client 104.46.236.39:8002] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZYdJFfcBtQ6hSJuEQlmYAAAAMY"]
[Thu Feb 19 04:12:20.781244 2026] [:error] [pid 49002:tid 49026] [client 104.46.236.39:8104] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aZYdJFfcBtQ6hSJuEQlmYQAAAMw"]
[Thu Feb 19 04:12:21.021838 2026] [:error] [pid 49002:tid 49018] [client 104.46.236.39:8187] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aZYdJVfcBtQ6hSJuEQlmYgAAAMQ"]
[Thu Feb 19 04:12:21.263131 2026] [:error] [pid 48901:tid 48934] [client 104.46.236.39:17729] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aZYdJcixYz-lHbN0WBKnRgAAABg"]
[Thu Feb 19 04:12:21.504893 2026] [:error] [pid 48903:tid 48969] [client 104.46.236.39:17784] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aZYdJY6aTgKrpAR115voiQAAAIQ"]
[Thu Feb 19 04:12:21.754950 2026] [:error] [pid 48901:tid 48928] [client 104.46.236.39:17364] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZYdJcixYz-lHbN0WBKnSAAAABI"]
[Thu Feb 19 04:12:21.998999 2026] [:error] [pid 15513:tid 15520] [client 104.46.236.39:17356] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZYdJcGTRTE022JWg192EAAAAQU"]
[Thu Feb 19 04:12:22.247259 2026] [:error] [pid 15513:tid 15531] [client 104.46.236.39:17766] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZYdJsGTRTE022JWg192EQAAARA"]
[Thu Feb 19 04:12:22.487226 2026] [:error] [pid 48903:tid 48967] [client 104.46.236.39:17366] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZYdJo6aTgKrpAR115voiwAAAII"]
[Thu Feb 19 04:12:22.730116 2026] [:error] [pid 48902:tid 48950] [client 104.46.236.39:8169] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZYdJmcJ-6aYRpRRFsUplgAAAEw"]
[Thu Feb 19 04:12:22.976532 2026] [:error] [pid 15513:tid 15522] [client 104.46.236.39:8083] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZYdJsGTRTE022JWg192EwAAAQc"]
[Thu Feb 19 04:12:23.218108 2026] [:error] [pid 48902:tid 48944] [client 104.46.236.39:8011] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZYdJ2cJ-6aYRpRRFsUpmQAAAEY"]
[Thu Feb 19 04:12:23.459860 2026] [:error] [pid 49002:tid 49032] [client 104.46.236.39:8018] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZYdJ1fcBtQ6hSJuEQlmZwAAANI"]
[Thu Feb 19 04:12:23.701456 2026] [:error] [pid 48902:tid 48953] [client 104.46.236.39:8185] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aZYdJ2cJ-6aYRpRRFsUpmgAAAE8"]
[Thu Feb 19 04:12:23.943009 2026] [:error] [pid 48902:tid 48940] [client 104.46.236.39:8112] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aZYdJ2cJ-6aYRpRRFsUpnQAAAEI"]
[Thu Feb 19 04:12:24.185450 2026] [:error] [pid 49002:tid 49014] [client 104.46.236.39:17368] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aZYdKFfcBtQ6hSJuEQlmaQAAAMA"]
[Thu Feb 19 04:12:24.431901 2026] [:error] [pid 15513:tid 15529] [client 104.46.236.39:8043] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aZYdKMGTRTE022JWg192FgAAAQ4"]
[Thu Feb 19 04:12:24.674753 2026] [:error] [pid 48901:tid 48930] [client 104.46.236.39:8089] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aZYdKMixYz-lHbN0WBKnSgAAABQ"]
[Thu Feb 19 04:12:24.923918 2026] [:error] [pid 49002:tid 49037] [client 104.46.236.39:8156] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aZYdKFfcBtQ6hSJuEQlmagAAANc"]
[Thu Feb 19 04:12:25.180590 2026] [:error] [pid 15513:tid 15517] [client 104.46.236.39:8170] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aZYdKcGTRTE022JWg192GQAAAQI"]
[Thu Feb 19 04:12:25.428747 2026] [:error] [pid 15513:tid 15523] [client 104.46.236.39:8110] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aZYdKcGTRTE022JWg192GgAAAQg"]
[Thu Feb 19 04:12:25.684827 2026] [:error] [pid 49002:tid 49034] [client 104.46.236.39:8036] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X7x.php"] [unique_id "aZYdKVfcBtQ6hSJuEQlmbQAAANQ"]
[Thu Feb 19 04:12:25.944332 2026] [:error] [pid 15513:tid 15518] [client 104.46.236.39:8023] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X7x.php"] [unique_id "aZYdKcGTRTE022JWg192GwAAAQM"]
[Thu Feb 19 04:12:26.192525 2026] [:error] [pid 49002:tid 49028] [client 104.46.236.39:8163] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X7x.php"] [unique_id "aZYdKlfcBtQ6hSJuEQlmbwAAAM4"]
[Thu Feb 19 04:12:26.432617 2026] [:error] [pid 48901:tid 48931] [client 104.46.236.39:8183] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X7x.php"] [unique_id "aZYdKsixYz-lHbN0WBKnSwAAABU"]
[Thu Feb 19 04:12:26.672793 2026] [:error] [pid 48903:tid 48979] [client 104.46.236.39:17733] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aZYdKo6aTgKrpAR115vokAAAAI4"]
[Thu Feb 19 04:12:26.926452 2026] [:error] [pid 48903:tid 48976] [client 104.46.236.39:49787] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aZYdKo6aTgKrpAR115vokgAAAIs"]
[Thu Feb 19 04:12:27.167757 2026] [:error] [pid 15513:tid 15532] [client 104.46.236.39:17388] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aZYdK8GTRTE022JWg192HQAAARE"]
[Thu Feb 19 04:12:27.412793 2026] [:error] [pid 15513:tid 15530] [client 104.46.236.39:8074] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aZYdK8GTRTE022JWg192HgAAAQ8"]
[Thu Feb 19 04:12:27.653648 2026] [:error] [pid 15513:tid 15534] [client 104.46.236.39:8142] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aZYdK8GTRTE022JWg192IAAAARM"]
[Thu Feb 19 04:12:27.893892 2026] [:error] [pid 15513:tid 15525] [client 104.46.236.39:8157] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aZYdK8GTRTE022JWg192IQAAAQo"]
[Thu Feb 19 04:12:28.134295 2026] [:error] [pid 15513:tid 15516] [client 104.46.236.39:8010] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aZYdLMGTRTE022JWg192IgAAAQE"]
[Thu Feb 19 04:12:28.376553 2026] [:error] [pid 15513:tid 15517] [client 104.46.236.39:17737] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aZYdLMGTRTE022JWg192IwAAAQI"]
[Thu Feb 19 04:12:28.618404 2026] [:error] [pid 15513:tid 15535] [client 104.46.236.39:8115] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZYdLMGTRTE022JWg192JQAAARQ"]
[Thu Feb 19 04:12:28.857946 2026] [:error] [pid 15513:tid 15518] [client 104.46.236.39:17387] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZYdLMGTRTE022JWg192JgAAAQM"]
[Thu Feb 19 04:12:29.097653 2026] [:error] [pid 15513:tid 15533] [client 104.46.236.39:8079] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZYdLcGTRTE022JWg192KAAAARI"]
[Thu Feb 19 04:12:29.338876 2026] [:error] [pid 48902:tid 48957] [client 104.46.236.39:8167] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZYdLWcJ-6aYRpRRFsUpnwAAAFM"]
[Thu Feb 19 04:12:29.581355 2026] [:error] [pid 48902:tid 48943] [client 104.46.236.39:8129] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admins.php"] [unique_id "aZYdLWcJ-6aYRpRRFsUpogAAAEU"]
[Thu Feb 19 04:12:29.825304 2026] [:error] [pid 48902:tid 48953] [client 104.46.236.39:7974] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admins.php"] [unique_id "aZYdLWcJ-6aYRpRRFsUpowAAAE8"]
[Thu Feb 19 04:12:30.070916 2026] [:error] [pid 48901:tid 48921] [client 104.46.236.39:17383] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admins.php"] [unique_id "aZYdLsixYz-lHbN0WBKnUQAAAAs"]
[Thu Feb 19 04:12:30.312413 2026] [:error] [pid 15513:tid 15534] [client 104.46.236.39:8028] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admins.php"] [unique_id "aZYdLsGTRTE022JWg192KgAAARM"]
[Thu Feb 19 04:12:30.553871 2026] [:error] [pid 48901:tid 48914] [client 104.46.236.39:8178] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aZYdLsixYz-lHbN0WBKnUgAAAAQ"]
[Thu Feb 19 04:12:30.794851 2026] [:error] [pid 48901:tid 48928] [client 104.46.236.39:8175] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aZYdLsixYz-lHbN0WBKnVAAAABI"]
[Thu Feb 19 04:12:31.039658 2026] [:error] [pid 48901:tid 48917] [client 104.46.236.39:8067] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aZYdL8ixYz-lHbN0WBKnVwAAAAc"]
[Thu Feb 19 04:12:31.285704 2026] [:error] [pid 49002:tid 49037] [client 104.46.236.39:7999] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aZYdL1fcBtQ6hSJuEQlmdAAAANc"]
[Thu Feb 19 04:12:31.528900 2026] [:error] [pid 49002:tid 49024] [client 104.46.236.39:8005] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/main.php"] [unique_id "aZYdL1fcBtQ6hSJuEQlmdgAAAMo"]
[Thu Feb 19 04:12:31.774239 2026] [:error] [pid 48902:tid 48941] [client 104.46.236.39:8035] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/main.php"] [unique_id "aZYdL2cJ-6aYRpRRFsUppgAAAEM"]
[Thu Feb 19 04:12:32.018401 2026] [:error] [pid 48901:tid 48932] [client 104.46.236.39:8108] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/main.php"] [unique_id "aZYdMMixYz-lHbN0WBKnXQAAABY"]
[Thu Feb 19 04:12:32.270162 2026] [:error] [pid 48901:tid 48918] [client 104.46.236.39:52410] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/main.php"] [unique_id "aZYdMMixYz-lHbN0WBKnXgAAAAg"]
[Thu Feb 19 04:12:32.517670 2026] [:error] [pid 48901:tid 48912] [client 104.46.236.39:8064] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aZYdMMixYz-lHbN0WBKnXwAAAAI"]
[Thu Feb 19 04:12:32.766634 2026] [:error] [pid 15513:tid 15536] [client 104.46.236.39:8117] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aZYdMMGTRTE022JWg192KwAAARU"]
[Thu Feb 19 04:12:33.017086 2026] [:error] [pid 48903:tid 48968] [client 104.46.236.39:8168] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aZYdMY6aTgKrpAR115volQAAAIM"]
[Thu Feb 19 04:12:33.258227 2026] [:error] [pid 48902:tid 48962] [client 104.46.236.39:8150] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aZYdMWcJ-6aYRpRRFsUpqwAAAFg"]
[Thu Feb 19 04:12:33.500523 2026] [:error] [pid 48903:tid 48981] [client 104.46.236.39:17785] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aZYdMY6aTgKrpAR115volgAAAJA"]
[Thu Feb 19 04:12:33.740835 2026] [:error] [pid 15513:tid 15535] [client 104.46.236.39:8004] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aZYdMcGTRTE022JWg192LQAAARQ"]
[Thu Feb 19 04:12:33.983066 2026] [:error] [pid 48902:tid 48954] [client 104.46.236.39:8113] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aZYdMWcJ-6aYRpRRFsUprQAAAFA"]
[Thu Feb 19 04:12:34.225865 2026] [:error] [pid 48902:tid 48960] [client 104.46.236.39:8137] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aZYdMmcJ-6aYRpRRFsUprwAAAFY"]
[Thu Feb 19 04:12:34.469001 2026] [:error] [pid 48903:tid 48965] [client 104.46.236.39:8066] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aZYdMo6aTgKrpAR115vomQAAAIA"]
[Thu Feb 19 04:12:34.710834 2026] [:error] [pid 48902:tid 48944] [client 104.46.236.39:7991] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aZYdMmcJ-6aYRpRRFsUpsAAAAEY"]
[Thu Feb 19 04:12:34.951513 2026] [:error] [pid 48902:tid 48958] [client 104.46.236.39:7982] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aZYdMmcJ-6aYRpRRFsUpswAAAFQ"]
[Thu Feb 19 04:12:35.196800 2026] [:error] [pid 15513:tid 15518] [client 104.46.236.39:61282] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aZYdM8GTRTE022JWg192MAAAAQM"]
[Thu Feb 19 04:12:35.439203 2026] [:error] [pid 15513:tid 15531] [client 104.46.236.39:7886] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aZYdM8GTRTE022JWg192MQAAARA"]
[Thu Feb 19 04:12:35.681233 2026] [:error] [pid 48902:tid 48941] [client 104.46.236.39:8081] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aZYdM2cJ-6aYRpRRFsUptgAAAEM"]
[Thu Feb 19 04:12:35.926395 2026] [:error] [pid 48902:tid 48955] [client 104.46.236.39:8061] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aZYdM2cJ-6aYRpRRFsUptwAAAFE"]
[Thu Feb 19 04:12:36.168464 2026] [:error] [pid 15513:tid 15537] [client 104.46.236.39:8062] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aZYdNMGTRTE022JWg192MgAAARY"]
[Thu Feb 19 04:12:36.414164 2026] [:error] [pid 48902:tid 48945] [client 104.46.236.39:8039] [client 104.46.236.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZYdNGcJ-6aYRpRRFsUpuAAAAEc"]
[Thu Feb 19 04:12:36.672419 2026] [:error] [pid 49002:tid 49032] [client 104.46.236.39:17399] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jsond.php"] [unique_id "aZYdNFfcBtQ6hSJuEQlmeAAAANI"]
[Thu Feb 19 04:12:36.937521 2026] [:error] [pid 15513:tid 15539] [client 104.46.236.39:8147] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jsond.php"] [unique_id "aZYdNMGTRTE022JWg192NAAAARg"]
[Thu Feb 19 04:12:37.179452 2026] [:error] [pid 15513:tid 15527] [client 104.46.236.39:7965] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jsond.php"] [unique_id "aZYdNcGTRTE022JWg192NQAAAQw"]
[Thu Feb 19 04:12:37.422368 2026] [:error] [pid 48901:tid 48930] [client 104.46.236.39:17350] [client 104.46.236.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jsond.php"] [unique_id "aZYdNcixYz-lHbN0WBKnagAAABQ"]
[Thu Feb 19 04:42:50.456635 2026] [:error] [pid 15513:tid 15529] [client 125.75.66.97:53430] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZYkSsGTRTE022JWg1-DXQAAAQ4"]
[Thu Feb 19 10:23:31.932445 2026] [:error] [pid 48902:tid 48958] [client 20.24.197.43:5506] [client 20.24.197.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.24.197.43, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZZ0I2cJ-6aYRpRRFsWjdAAAAFQ"]
[Thu Feb 19 10:23:32.721213 2026] [:error] [pid 48902:tid 48953] [client 20.24.197.43:5506] [client 20.24.197.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conten/uploads/"] [unique_id "aZZ0JGcJ-6aYRpRRFsWjewAAAE8"]
[Thu Feb 19 10:23:33.213240 2026] [:error] [pid 15513:tid 15527] [client 20.24.197.43:5516] [client 20.24.197.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conten/uploads/"] [unique_id "aZZ0JcGTRTE022JWg18QCgAAAQw"]
[Thu Feb 19 10:23:33.707393 2026] [:error] [pid 49002:tid 49027] [client 20.24.197.43:6047] [client 20.24.197.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conten/uploads/"] [unique_id "aZZ0JVfcBtQ6hSJuEQnuwAAAAM0"]
[Thu Feb 19 10:23:34.221477 2026] [:error] [pid 48901:tid 48928] [client 20.24.197.43:5515] [client 20.24.197.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conten/uploads/"] [unique_id "aZZ0JsixYz-lHbN0WBIaoAAAABI"]
[Thu Feb 19 10:32:37.812319 2026] [:error] [pid 49002:tid 49016] [client 49.51.252.146:55260] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZZ2RVfcBtQ6hSJuEQnyagAAAMI"]
[Thu Feb 19 10:47:09.164857 2026] [:error] [pid 48903:tid 48978] [client 43.138.68.113:46570] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZZ5rY6aTgKrpAR115trUgAAAI0"]
[Thu Feb 19 12:57:55.024820 2026] [:error] [pid 49002:tid 49030] [client 43.154.250.181:36058] [client 43.154.250.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZaYU1fcBtQ6hSJuEQkUzQAAANA"]
[Thu Feb 19 17:03:08.130672 2026] [:error] [pid 15513:tid 15534] [client 106.54.62.156:40450] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZbRzMGTRTE022JWg1-e4wAAARM"]
[Thu Feb 19 17:21:32.499469 2026] [:error] [pid 15513:tid 15520] [client 43.128.156.124:37238] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZbWHMGTRTE022JWg1-mcQAAAQU"]
[Thu Feb 19 19:46:23.369856 2026] [:error] [pid 5581:tid 5622] [client 43.157.172.39:44152] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZb4D3IfW0xlXmrVd3rEagAAAgs"]
[Thu Feb 19 22:39:52.485095 2026] [:error] [pid 5581:tid 5616] [client 45.138.135.10:54499] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZcguHIfW0xlXmrVd3rkXAAAAgU"], referer: https://www.google.com
[Thu Feb 19 22:39:55.152372 2026] [:error] [pid 48902:tid 48954] [client 45.138.135.10:54752] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZcgu2cJ-6aYRpRRFsVEKwAAAFA"], referer: https://www.google.com
[Thu Feb 19 22:52:06.500825 2026] [:error] [pid 5580:tid 5600] [client 45.138.135.10:63753] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp/wp-login.php"] [unique_id "aZcjloV24kZpmf6nh3AdowAAAdA"], referer: https://www.google.com
[Thu Feb 19 22:52:18.687961 2026] [:error] [pid 48903:tid 48971] [client 45.138.135.10:64164] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp/wp-login.php"] [unique_id "aZcjoo6aTgKrpAR115sLGQAAAIY"], referer: https://www.google.com
[Thu Feb 19 23:04:23.463897 2026] [:error] [pid 5580:tid 5590] [client 45.138.135.10:57624] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aZcmd4V24kZpmf6nh3AfqQAAAcc"], referer: https://www.google.com
[Thu Feb 19 23:04:24.757308 2026] [:error] [pid 48903:tid 48974] [client 45.138.135.10:57705] [client 45.138.135.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.138.135.10, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aZcmeI6aTgKrpAR115sNfQAAAIk"], referer: https://www.google.com
[Thu Feb 19 23:30:48.747446 2026] [:error] [pid 5548:tid 5564] [client 193.37.32.141:25961] [client 193.37.32.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZcsqJMpsAkdKxbTbsPYCwAAAY0"]
[Thu Feb 19 23:30:49.111146 2026] [:error] [pid 48903:tid 48974] [client 193.37.32.154:44923] [client 193.37.32.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZcsqY6aTgKrpAR115sSUAAAAIk"]
[Fri Feb 20 02:37:56.662493 2026] [:error] [pid 15513:tid 15539] [client 49.51.47.100:58404] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZdYhMGTRTE022JWg19GcgAAARg"]
[Fri Feb 20 07:13:57.117806 2026] [:error] [pid 64403:tid 64436] [client 115.190.188.4:49398] [client 115.190.188.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/env/.env"] [unique_id "aZeZNWsY-w3EIXaNGw6WowAAABc"]
[Fri Feb 20 07:13:57.118034 2026] [:error] [pid 417:tid 432] [client 115.190.188.4:49390] [client 115.190.188.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aZeZNWZ8vv9H56paZ2AYHwAAAQ0"]
[Fri Feb 20 07:13:58.337946 2026] [:error] [pid 64510:tid 64524] [client 115.190.188.4:43134] [client 115.190.188.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aZeZNixwOnmwqVfn93VqBgAAAMw"]
[Fri Feb 20 07:13:58.339701 2026] [:error] [pid 64404:tid 64458] [client 115.190.188.4:43142] [client 115.190.188.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/env/.env"] [unique_id "aZeZNsg5Wkqq1wjajcCjdwAAAFI"]
[Fri Feb 20 07:42:43.746262 2026] [:error] [pid 22083:tid 22104] [client 43.163.206.70:42972] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZef8_K5OtWAzFVJ_9KGegAAAVM"]
[Fri Feb 20 08:29:34.022897 2026] [:error] [pid 64404:tid 64462] [client 218.146.244.189:51134] [client 218.146.244.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 218.146.244.189, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZeq7sg5Wkqq1wjajcC5awAAAFY"]
[Fri Feb 20 08:31:29.567453 2026] [:error] [pid 22200:tid 22214] [client 124.217.18.34:27566] [client 124.217.18.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.18.34, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZerYSR0iwS_xZvYegCH3wAAAYs"]
[Fri Feb 20 15:15:48.596970 2026] [:error] [pid 54461:tid 54503] [client 43.135.130.202:53494] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZgKJC372fkN0w39NDNhagAAAEs"]
[Fri Feb 20 17:32:32.880983 2026] [:error] [pid 59127:tid 59131] [client 223.15.245.170:56517] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZgqMHSltzl55Qz-09gR-QAAAQI"]
[Fri Feb 20 22:09:56.830021 2026] [:error] [pid 46012:tid 46019] [client 43.132.214.228:42096] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZhrNDXz-GTvuxLwgUF0GAAAAUU"]
[Fri Feb 20 22:43:04.296625 2026] [:error] [pid 54460:tid 54479] [client 112.196.183.151:10319] [client 112.196.183.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.196.183.151, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZhy-MoUiaZ-Z7V-F9-vggAAAA4"]
[Fri Feb 20 22:45:47.272091 2026] [:error] [pid 54460:tid 54482] [client 103.239.173.6:63592] [client 103.239.173.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.239.173.6, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZhzm8oUiaZ-Z7V-F9-wsgAAABE"]
[Fri Feb 20 22:48:42.659249 2026] [:error] [pid 54460:tid 54470] [client 14.139.242.82:45226] [client 14.139.242.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.139.242.82, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZh0SsoUiaZ-Z7V-F9-x1QAAAAU"]
[Sat Feb 21 00:55:22.628179 2026] [:error] [pid 54552:tid 54570] [client 43.159.152.187:54282] [client 43.159.152.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZiR-se4t0F-_sbWepZ8JwAAAM8"]
[Sat Feb 21 02:31:27.486342 2026] [:error] [pid 46012:tid 46038] [client 103.65.237.124:60353] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aZiofzXz-GTvuxLwgUG7eQAAAVg"]
[Sat Feb 21 02:31:27.722733 2026] [:error] [pid 54552:tid 54557] [client 103.65.237.124:60392] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aZiof8e4t0F-_sbWepaYfQAAAMI"]
[Sat Feb 21 05:10:52.955111 2026] [:error] [pid 40756:tid 40775] [client 20.210.88.198:52936] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Update/f35.php"] [unique_id "aZjN3ANlDP60sLYgqXLAfwAAAAk"]
[Sat Feb 21 05:10:54.201180 2026] [:error] [pid 40758:tid 40840] [client 20.210.88.198:51651] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Update/f35.php"] [unique_id "aZjN3kBAHxvBM3i9iKGN0wAAAJI"]
[Sat Feb 21 05:10:54.710183 2026] [:error] [pid 40757:tid 40798] [client 20.210.88.198:52246] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Update/f35.php"] [unique_id "aZjN3qg_MKVL7zhH7dwe0wAAAEM"]
[Sat Feb 21 05:10:55.872759 2026] [:error] [pid 40871:tid 40886] [client 20.210.88.198:57768] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Update/f35.php"] [unique_id "aZjN3zqDikjdiOZeJyWovAAAAM0"]
[Sat Feb 21 05:10:56.928330 2026] [:error] [pid 40757:tid 40814] [client 20.210.88.198:57751] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aZjN4Kg_MKVL7zhH7dwe2AAAAFM"]
[Sat Feb 21 05:10:58.687463 2026] [:error] [pid 22558:tid 22562] [client 20.210.88.198:51710] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aZjN4irVaIb2gXsVbDoSuwAAAQI"]
[Sat Feb 21 05:11:00.557866 2026] [:error] [pid 40757:tid 40799] [client 20.210.88.198:57766] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aZjN5Kg_MKVL7zhH7dwe3wAAAEQ"]
[Sat Feb 21 05:11:01.181784 2026] [:error] [pid 40871:tid 40897] [client 20.210.88.198:60250] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "aZjN5TqDikjdiOZeJyWovwAAANg"]
[Sat Feb 21 05:11:02.760712 2026] [:error] [pid 40757:tid 40819] [client 20.210.88.198:57789] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Wp-good.php"] [unique_id "aZjN5qg_MKVL7zhH7dwe5QAAAFg"]
[Sat Feb 21 05:11:03.259318 2026] [:error] [pid 40871:tid 40895] [client 20.210.88.198:60278] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Wp-good.php"] [unique_id "aZjN5zqDikjdiOZeJyWoygAAANY"]
[Sat Feb 21 05:11:03.866708 2026] [:error] [pid 40756:tid 40782] [client 20.210.88.198:52968] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Wp-good.php"] [unique_id "aZjN5wNlDP60sLYgqXLAlAAAABA"]
[Sat Feb 21 05:11:04.599919 2026] [:error] [pid 22558:tid 22582] [client 20.210.88.198:48739] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Wp-good.php"] [unique_id "aZjN6CrVaIb2gXsVbDoSwgAAARY"]
[Sat Feb 21 05:11:05.431333 2026] [:error] [pid 40757:tid 40797] [client 20.210.88.198:60175] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tphp.php"] [unique_id "aZjN6ag_MKVL7zhH7dwe7wAAAEI"]
[Sat Feb 21 05:11:05.877659 2026] [:error] [pid 22558:tid 22578] [client 20.210.88.198:59746] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tphp.php"] [unique_id "aZjN6SrVaIb2gXsVbDoSxQAAARI"]
[Sat Feb 21 05:11:06.254500 2026] [:error] [pid 40758:tid 40824] [client 20.210.88.198:59727] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tphp.php"] [unique_id "aZjN6kBAHxvBM3i9iKGN5QAAAII"]
[Sat Feb 21 05:11:06.851851 2026] [:error] [pid 40757:tid 40815] [client 20.210.88.198:48760] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tphp.php"] [unique_id "aZjN6qg_MKVL7zhH7dwe9QAAAFQ"]
[Sat Feb 21 05:11:07.753410 2026] [:error] [pid 40871:tid 40882] [client 20.210.88.198:59687] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aZjN6zqDikjdiOZeJyWo2QAAAMk"]
[Sat Feb 21 05:11:08.663129 2026] [:error] [pid 40758:tid 40829] [client 20.210.88.198:51678] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aZjN7EBAHxvBM3i9iKGN7QAAAIc"]
[Sat Feb 21 05:11:09.136820 2026] [:error] [pid 40871:tid 40896] [client 20.210.88.198:51694] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aZjN7TqDikjdiOZeJyWo2wAAANc"]
[Sat Feb 21 05:11:09.675776 2026] [:error] [pid 22558:tid 22584] [client 20.210.88.198:52969] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aZjN7SrVaIb2gXsVbDoSzwAAARg"]
[Sat Feb 21 05:11:10.239201 2026] [:error] [pid 22558:tid 22571] [client 20.210.88.198:48715] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nyan.php"] [unique_id "aZjN7irVaIb2gXsVbDoS0AAAAQs"]
[Sat Feb 21 05:11:10.957342 2026] [:error] [pid 40757:tid 40797] [client 20.210.88.198:52970] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nyan.php"] [unique_id "aZjN7qg_MKVL7zhH7dwe_QAAAEI"]
[Sat Feb 21 05:11:13.056238 2026] [:error] [pid 22558:tid 22578] [client 20.210.88.198:52227] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nyan.php"] [unique_id "aZjN8SrVaIb2gXsVbDoS3wAAARI"]
[Sat Feb 21 05:11:15.185821 2026] [:error] [pid 40757:tid 40809] [client 20.210.88.198:52967] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nyan.php"] [unique_id "aZjN86g_MKVL7zhH7dwfBgAAAE4"]
[Sat Feb 21 05:11:15.743586 2026] [:error] [pid 22558:tid 22581] [client 20.210.88.198:60274] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZjN8yrVaIb2gXsVbDoS6wAAARU"]
[Sat Feb 21 05:11:16.786520 2026] [:error] [pid 40756:tid 40786] [client 20.210.88.198:51705] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZjN9ANlDP60sLYgqXLAqQAAABQ"]
[Sat Feb 21 05:11:18.018471 2026] [:error] [pid 40757:tid 40817] [client 20.210.88.198:59665] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZjN9qg_MKVL7zhH7dwfEQAAAFY"]
[Sat Feb 21 05:11:18.489949 2026] [:error] [pid 40756:tid 40777] [client 20.210.88.198:51677] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZjN9gNlDP60sLYgqXLArQAAAAs"]
[Sat Feb 21 05:11:18.843039 2026] [:error] [pid 40756:tid 40775] [client 20.210.88.198:52934] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZjN9gNlDP60sLYgqXLArwAAAAk"]
[Sat Feb 21 05:11:19.335797 2026] [:error] [pid 40871:tid 40877] [client 20.210.88.198:60260] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZjN9zqDikjdiOZeJyWo9QAAAMQ"]
[Sat Feb 21 05:11:19.939239 2026] [:error] [pid 40871:tid 40897] [client 20.210.88.198:52928] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZjN9zqDikjdiOZeJyWo9gAAANg"]
[Sat Feb 21 05:11:20.362697 2026] [:error] [pid 22558:tid 22578] [client 20.210.88.198:60227] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZjN-CrVaIb2gXsVbDoS9gAAARI"]
[Sat Feb 21 05:11:21.114357 2026] [:error] [pid 40756:tid 40790] [client 20.210.88.198:51676] [client 20.210.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZjN-QNlDP60sLYgqXLAtQAAABg"]
[Sat Feb 21 05:11:22.298134 2026] [:error] [pid 40758:tid 40838] [client 20.210.88.198:59695] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luxe.php"] [unique_id "aZjN-kBAHxvBM3i9iKGN_QAAAJA"]
[Sat Feb 21 05:11:23.452568 2026] [:error] [pid 40756:tid 40776] [client 20.210.88.198:60270] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luxe.php"] [unique_id "aZjN-wNlDP60sLYgqXLAvwAAAAo"]
[Sat Feb 21 05:11:23.826152 2026] [:error] [pid 40756:tid 40767] [client 20.210.88.198:57778] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luxe.php"] [unique_id "aZjN-wNlDP60sLYgqXLAwQAAAAE"]
[Sat Feb 21 05:11:25.041972 2026] [:error] [pid 40758:tid 40830] [client 20.210.88.198:51708] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luxe.php"] [unique_id "aZjN_UBAHxvBM3i9iKGOBAAAAIg"]
[Sat Feb 21 05:11:25.503056 2026] [:error] [pid 40757:tid 40802] [client 20.210.88.198:59744] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/wpupex.php/"] [unique_id "aZjN_ag_MKVL7zhH7dwfHwAAAEc"]
[Sat Feb 21 05:11:25.978199 2026] [:error] [pid 40757:tid 40807] [client 20.210.88.198:48766] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/wpupex.php/"] [unique_id "aZjN_ag_MKVL7zhH7dwfIwAAAEw"]
[Sat Feb 21 05:11:27.082242 2026] [:error] [pid 40756:tid 40787] [client 20.210.88.198:48762] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/wpupex.php/"] [unique_id "aZjN_wNlDP60sLYgqXLAxwAAABU"]
[Sat Feb 21 05:11:28.358408 2026] [:error] [pid 40871:tid 40879] [client 20.210.88.198:60208] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/wpupex.php/"] [unique_id "aZjOADqDikjdiOZeJyWpAgAAAMY"]
[Sat Feb 21 05:11:28.827003 2026] [:error] [pid 22558:tid 22568] [client 20.210.88.198:57702] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rezor.php"] [unique_id "aZjOACrVaIb2gXsVbDoTCAAAAQg"]
[Sat Feb 21 05:11:29.639353 2026] [:error] [pid 40756:tid 40778] [client 20.210.88.198:57670] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rezor.php"] [unique_id "aZjOAQNlDP60sLYgqXLAygAAAAw"]
[Sat Feb 21 05:11:30.268545 2026] [:error] [pid 22558:tid 22575] [client 20.210.88.198:60224] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rezor.php"] [unique_id "aZjOAirVaIb2gXsVbDoTDAAAAQ8"]
[Sat Feb 21 05:11:31.014218 2026] [:error] [pid 40871:tid 40897] [client 20.210.88.198:59757] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rezor.php"] [unique_id "aZjOAzqDikjdiOZeJyWpCgAAANg"]
[Sat Feb 21 05:11:31.413941 2026] [:error] [pid 22558:tid 22572] [client 20.210.88.198:51699] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aZjOAyrVaIb2gXsVbDoTEAAAAQw"]
[Sat Feb 21 05:11:31.879340 2026] [:error] [pid 40757:tid 40814] [client 20.210.88.198:59661] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aZjOA6g_MKVL7zhH7dwfMAAAAFM"]
[Sat Feb 21 05:11:32.396162 2026] [:error] [pid 40871:tid 40895] [client 20.210.88.198:53879] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aZjOBDqDikjdiOZeJyWpDQAAANY"]
[Sat Feb 21 05:11:32.911772 2026] [:error] [pid 40758:tid 40822] [client 20.210.88.198:57696] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aZjOBEBAHxvBM3i9iKGOEwAAAIA"]
[Sat Feb 21 05:11:33.380654 2026] [:error] [pid 40756:tid 40766] [client 20.210.88.198:59662] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aZjOBQNlDP60sLYgqXLAzwAAAAA"]
[Sat Feb 21 05:11:34.018912 2026] [:error] [pid 22558:tid 22573] [client 20.210.88.198:3523] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aZjOBirVaIb2gXsVbDoTFQAAAQ0"]
[Sat Feb 21 05:11:34.739643 2026] [:error] [pid 22558:tid 22568] [client 20.210.88.198:51650] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aZjOBirVaIb2gXsVbDoTGAAAAQg"]
[Sat Feb 21 05:11:35.376086 2026] [:error] [pid 40757:tid 40819] [client 20.210.88.198:53887] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aZjOB6g_MKVL7zhH7dwfNAAAAFg"]
[Sat Feb 21 05:11:35.775077 2026] [:error] [pid 22558:tid 22561] [client 20.210.88.198:60229] [client 20.210.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZjOByrVaIb2gXsVbDoTGwAAAQE"]
[Sat Feb 21 05:11:36.094602 2026] [:error] [pid 40758:tid 40840] [client 20.210.88.198:51672] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aZjOCEBAHxvBM3i9iKGOGAAAAJI"]
[Sat Feb 21 05:11:36.765470 2026] [:error] [pid 40757:tid 40814] [client 20.210.88.198:52940] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aZjOCKg_MKVL7zhH7dwfOwAAAFM"]
[Sat Feb 21 05:11:37.427038 2026] [:error] [pid 40756:tid 40766] [client 20.210.88.198:57698] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aZjOCQNlDP60sLYgqXLA3QAAAAA"]
[Sat Feb 21 05:11:39.199053 2026] [:error] [pid 40871:tid 40874] [client 20.210.88.198:48748] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aZjOCzqDikjdiOZeJyWpFQAAAME"]
[Sat Feb 21 05:11:40.261600 2026] [:error] [pid 40758:tid 40836] [client 20.210.88.198:57744] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/~norapump/hah.php"] [unique_id "aZjODEBAHxvBM3i9iKGOIgAAAI4"]
[Sat Feb 21 05:11:41.261104 2026] [:error] [pid 40756:tid 40766] [client 20.210.88.198:60275] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/~norapump/hah.php"] [unique_id "aZjODQNlDP60sLYgqXLA4wAAAAA"]
[Sat Feb 21 05:11:42.481672 2026] [:error] [pid 40757:tid 40805] [client 20.210.88.198:3441] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/~norapump/hah.php"] [unique_id "aZjODqg_MKVL7zhH7dwfRAAAAEo"]
[Sat Feb 21 05:11:43.191445 2026] [:error] [pid 40757:tid 40811] [client 20.210.88.198:52959] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/~norapump/hah.php"] [unique_id "aZjOD6g_MKVL7zhH7dwfRgAAAFA"]
[Sat Feb 21 05:11:43.828928 2026] [:error] [pid 40757:tid 40816] [client 20.210.88.198:52988] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sto.php"] [unique_id "aZjOD6g_MKVL7zhH7dwfSQAAAFU"]
[Sat Feb 21 05:11:44.452069 2026] [:error] [pid 22558:tid 22569] [client 20.210.88.198:60232] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sto.php"] [unique_id "aZjOECrVaIb2gXsVbDoTMAAAAQk"]
[Sat Feb 21 05:11:44.985504 2026] [:error] [pid 40757:tid 40800] [client 20.210.88.198:53827] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sto.php"] [unique_id "aZjOEKg_MKVL7zhH7dwfTAAAAEU"]
[Sat Feb 21 05:11:45.524600 2026] [:error] [pid 22558:tid 22564] [client 20.210.88.198:59672] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sto.php"] [unique_id "aZjOESrVaIb2gXsVbDoTOQAAAQQ"]
[Sat Feb 21 05:11:45.828753 2026] [:error] [pid 40756:tid 40785] [client 20.210.88.198:57786] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aZjOEQNlDP60sLYgqXLA8wAAABM"]
[Sat Feb 21 05:11:47.024864 2026] [:error] [pid 40757:tid 40813] [client 20.210.88.198:53826] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aZjOE6g_MKVL7zhH7dwfVQAAAFI"]
[Sat Feb 21 05:11:47.307257 2026] [:error] [pid 40757:tid 40818] [client 20.210.88.198:48733] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aZjOE6g_MKVL7zhH7dwfVgAAAFc"]
[Sat Feb 21 05:11:47.650068 2026] [:error] [pid 22558:tid 22582] [client 20.210.88.198:57700] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aZjOEyrVaIb2gXsVbDoTQQAAARY"]
[Sat Feb 21 05:11:48.025568 2026] [:error] [pid 40756:tid 40779] [client 20.210.88.198:51680] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aZjOFANlDP60sLYgqXLA9wAAAA0"]
[Sat Feb 21 05:11:48.396385 2026] [:error] [pid 22558:tid 22580] [client 20.210.88.198:57742] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aZjOFCrVaIb2gXsVbDoTSQAAARQ"]
[Sat Feb 21 05:11:48.876852 2026] [:error] [pid 40871:tid 40897] [client 20.210.88.198:51696] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aZjOFDqDikjdiOZeJyWpJwAAANg"]
[Sat Feb 21 05:11:49.813462 2026] [:error] [pid 40871:tid 40883] [client 20.210.88.198:60240] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "aZjOFTqDikjdiOZeJyWpKwAAAMo"]
[Sat Feb 21 05:11:50.528133 2026] [:error] [pid 40758:tid 40844] [client 20.210.88.198:59750] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aZjOFkBAHxvBM3i9iKGOLwAAAJY"]
[Sat Feb 21 05:11:51.213084 2026] [:error] [pid 40758:tid 40823] [client 20.210.88.198:57764] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aZjOF0BAHxvBM3i9iKGONAAAAIE"]
[Sat Feb 21 05:11:55.263972 2026] [:error] [pid 22558:tid 22572] [client 20.210.88.198:60242] [client 20.210.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZjOGyrVaIb2gXsVbDoTbwAAAQw"]
[Sat Feb 21 05:11:56.715568 2026] [:error] [pid 40757:tid 40817] [client 20.210.88.198:60246] [client 20.210.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZjOHKg_MKVL7zhH7dwfYgAAAFY"]
[Sat Feb 21 05:12:00.521575 2026] [:error] [pid 40756:tid 40778] [client 20.210.88.198:57688] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aZjOIANlDP60sLYgqXLBEwAAAAw"]
[Sat Feb 21 05:12:01.178724 2026] [:error] [pid 22558:tid 22566] [client 20.210.88.198:60265] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aZjOISrVaIb2gXsVbDoTjAAAAQY"]
[Sat Feb 21 05:12:01.561015 2026] [:error] [pid 40758:tid 40833] [client 20.210.88.198:52971] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aZjOIUBAHxvBM3i9iKGOQwAAAIs"]
[Sat Feb 21 05:12:02.765833 2026] [:error] [pid 22558:tid 22584] [client 20.210.88.198:3401] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aZjOIirVaIb2gXsVbDoTlQAAARg"]
[Sat Feb 21 05:12:03.533292 2026] [:error] [pid 40758:tid 40844] [client 20.210.88.198:60259] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/"] [unique_id "aZjOI0BAHxvBM3i9iKGORgAAAJY"]
[Sat Feb 21 05:12:03.945742 2026] [:error] [pid 40758:tid 40829] [client 20.210.88.198:51711] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/"] [unique_id "aZjOI0BAHxvBM3i9iKGOSAAAAIc"]
[Sat Feb 21 05:12:05.486255 2026] [:error] [pid 22558:tid 22572] [client 20.210.88.198:60218] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/"] [unique_id "aZjOJSrVaIb2gXsVbDoTmQAAAQw"]
[Sat Feb 21 05:12:07.017063 2026] [:error] [pid 40871:tid 40874] [client 20.210.88.198:57669] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/"] [unique_id "aZjOJzqDikjdiOZeJyWpPwAAAME"]
[Sat Feb 21 05:12:08.575994 2026] [:error] [pid 40756:tid 40774] [client 20.210.88.198:50872] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/c99.php"] [unique_id "aZjOKANlDP60sLYgqXLBJQAAAAg"]
[Sat Feb 21 05:12:09.459345 2026] [:error] [pid 22558:tid 22572] [client 20.210.88.198:3530] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/c99.php"] [unique_id "aZjOKSrVaIb2gXsVbDoToQAAAQw"]
[Sat Feb 21 05:12:10.358287 2026] [:error] [pid 22558:tid 22584] [client 20.210.88.198:53881] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/c99.php"] [unique_id "aZjOKirVaIb2gXsVbDoTqQAAARg"]
[Sat Feb 21 05:12:11.302094 2026] [:error] [pid 40871:tid 40887] [client 20.210.88.198:3359] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/c99.php"] [unique_id "aZjOKzqDikjdiOZeJyWpRAAAAM4"]
[Sat Feb 21 05:12:11.759411 2026] [:error] [pid 22558:tid 22583] [client 20.210.88.198:52229] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "aZjOKyrVaIb2gXsVbDoTsAAAARc"]
[Sat Feb 21 05:12:16.502965 2026] [:error] [pid 40758:tid 40833] [client 20.210.88.198:59748] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "aZjOMEBAHxvBM3i9iKGOYAAAAIs"]
[Sat Feb 21 05:12:16.836024 2026] [:error] [pid 40758:tid 40843] [client 20.210.88.198:51701] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "aZjOMEBAHxvBM3i9iKGOYwAAAJU"]
[Sat Feb 21 05:12:17.943034 2026] [:error] [pid 40758:tid 40846] [client 20.210.88.198:59681] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "aZjOMUBAHxvBM3i9iKGOZwAAAJg"]
[Sat Feb 21 05:12:19.244719 2026] [:error] [pid 40756:tid 40779] [client 20.210.88.198:60233] [client 20.210.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZjOMwNlDP60sLYgqXLBMgAAAA0"]
[Sat Feb 21 05:12:20.465873 2026] [:error] [pid 22558:tid 22571] [client 20.210.88.198:57779] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZjONCrVaIb2gXsVbDoTxAAAAQs"]
[Sat Feb 21 05:12:22.146270 2026] [:error] [pid 40756:tid 40780] [client 20.210.88.198:3559] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZjONgNlDP60sLYgqXLBNAAAAA4"]
[Sat Feb 21 05:12:24.115727 2026] [:error] [pid 40756:tid 40766] [client 20.210.88.198:60256] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZjOOANlDP60sLYgqXLBNgAAAAA"]
[Sat Feb 21 05:12:25.610205 2026] [:error] [pid 22558:tid 22561] [client 20.210.88.198:50817] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aZjOOSrVaIb2gXsVbDoTzgAAAQE"]
[Sat Feb 21 05:12:27.098860 2026] [:error] [pid 22558:tid 22572] [client 20.210.88.198:59724] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aZjOOyrVaIb2gXsVbDoT0wAAAQw"]
[Sat Feb 21 05:12:27.999217 2026] [:error] [pid 40871:tid 40885] [client 20.210.88.198:60196] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aZjOOzqDikjdiOZeJyWpfAAAAMw"]
[Sat Feb 21 05:12:28.972020 2026] [:error] [pid 40758:tid 40841] [client 20.210.88.198:59668] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aZjOPEBAHxvBM3i9iKGOhQAAAJM"]
[Sat Feb 21 05:12:29.731262 2026] [:error] [pid 40871:tid 40893] [client 20.210.88.198:60225] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZjOPTqDikjdiOZeJyWphwAAANQ"]
[Sat Feb 21 05:12:30.365301 2026] [:error] [pid 40757:tid 40808] [client 20.210.88.198:52247] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZjOPqg_MKVL7zhH7dwfjgAAAE0"]
[Sat Feb 21 05:12:31.512356 2026] [:error] [pid 40757:tid 40813] [client 20.210.88.198:57724] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZjOP6g_MKVL7zhH7dwfkgAAAFI"]
[Sat Feb 21 05:12:32.141402 2026] [:error] [pid 40871:tid 40873] [client 20.210.88.198:57750] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZjOQDqDikjdiOZeJyWpjQAAAMA"]
[Sat Feb 21 05:12:33.589811 2026] [:error] [pid 22558:tid 22574] [client 20.210.88.198:59697] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aZjOQSrVaIb2gXsVbDoT3gAAAQ4"]
[Sat Feb 21 05:12:34.278012 2026] [:error] [pid 40758:tid 40824] [client 20.210.88.198:59709] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aZjOQkBAHxvBM3i9iKGOjgAAAII"]
[Sat Feb 21 05:12:34.870914 2026] [:error] [pid 40758:tid 40834] [client 20.210.88.198:60236] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aZjOQkBAHxvBM3i9iKGOjwAAAIw"]
[Sat Feb 21 05:12:35.214693 2026] [:error] [pid 40757:tid 40809] [client 20.210.88.198:59698] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes//index.php"] [unique_id "aZjOQ6g_MKVL7zhH7dwfoAAAAE4"]
[Sat Feb 21 05:12:35.537146 2026] [:error] [pid 40757:tid 40795] [client 20.210.88.198:60284] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aZjOQ6g_MKVL7zhH7dwfogAAAEA"]
[Sat Feb 21 05:12:36.194811 2026] [:error] [pid 40758:tid 40828] [client 20.210.88.198:57745] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aZjOREBAHxvBM3i9iKGOkwAAAIY"]
[Sat Feb 21 05:12:36.718782 2026] [:error] [pid 40757:tid 40819] [client 20.210.88.198:52977] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aZjORKg_MKVL7zhH7dwfpQAAAFg"]
[Sat Feb 21 05:12:37.402947 2026] [:error] [pid 40756:tid 40788] [client 20.210.88.198:52255] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aZjORQNlDP60sLYgqXLBSgAAABY"]
[Sat Feb 21 05:12:38.035397 2026] [:error] [pid 22558:tid 22573] [client 20.210.88.198:59675] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aZjORirVaIb2gXsVbDoT5wAAAQ0"]
[Sat Feb 21 05:12:38.423309 2026] [:error] [pid 40871:tid 40887] [client 20.210.88.198:57715] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aZjORjqDikjdiOZeJyWpnAAAAM4"]
[Sat Feb 21 05:12:38.771288 2026] [:error] [pid 40756:tid 40772] [client 20.210.88.198:60244] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aZjORgNlDP60sLYgqXLBTwAAAAY"]
[Sat Feb 21 05:12:40.120630 2026] [:error] [pid 40757:tid 40816] [client 20.210.88.198:53843] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aZjOSKg_MKVL7zhH7dwfrgAAAFU"]
[Sat Feb 21 05:12:40.782422 2026] [:error] [pid 40758:tid 40838] [client 20.210.88.198:48726] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/fk2e3/"] [unique_id "aZjOSEBAHxvBM3i9iKGOnAAAAJA"]
[Sat Feb 21 05:12:41.461895 2026] [:error] [pid 40758:tid 40826] [client 20.210.88.198:59674] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/fk2e3/"] [unique_id "aZjOSUBAHxvBM3i9iKGOnwAAAIQ"]
[Sat Feb 21 05:12:42.283054 2026] [:error] [pid 40756:tid 40779] [client 20.210.88.198:48706] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/fk2e3/"] [unique_id "aZjOSgNlDP60sLYgqXLBVwAAAA0"]
[Sat Feb 21 05:12:42.662792 2026] [:error] [pid 40758:tid 40831] [client 20.210.88.198:59763] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/fk2e3/"] [unique_id "aZjOSkBAHxvBM3i9iKGOoQAAAIk"]
[Sat Feb 21 05:12:42.972802 2026] [:error] [pid 22558:tid 22562] [client 20.210.88.198:52249] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aZjOSirVaIb2gXsVbDoT9AAAAQI"]
[Sat Feb 21 05:12:43.805349 2026] [:error] [pid 22558:tid 22561] [client 20.210.88.198:52961] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aZjOSyrVaIb2gXsVbDoT_AAAAQE"]
[Sat Feb 21 05:12:44.588378 2026] [:error] [pid 22558:tid 22563] [client 20.210.88.198:3455] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aZjOTCrVaIb2gXsVbDoT_wAAAQM"]
[Sat Feb 21 05:12:44.968566 2026] [:error] [pid 40756:tid 40778] [client 20.210.88.198:59680] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aZjOTANlDP60sLYgqXLBWAAAAAw"]
[Sat Feb 21 05:12:45.444107 2026] [:error] [pid 40871:tid 40875] [client 20.210.88.198:52981] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aZjOTTqDikjdiOZeJyWpowAAAMI"]
[Sat Feb 21 05:12:45.877948 2026] [:error] [pid 40871:tid 40885] [client 20.210.88.198:53870] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aZjOTTqDikjdiOZeJyWpqQAAAMw"]
[Sat Feb 21 05:12:46.226002 2026] [:error] [pid 40871:tid 40896] [client 20.210.88.198:48330] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aZjOTjqDikjdiOZeJyWpqgAAANc"]
[Sat Feb 21 05:12:46.599339 2026] [:error] [pid 40871:tid 40878] [client 20.210.88.198:3655] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aZjOTjqDikjdiOZeJyWprgAAAMU"]
[Sat Feb 21 05:12:48.653872 2026] [:error] [pid 40758:tid 40835] [client 20.210.88.198:50834] [client 20.210.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aZjOUEBAHxvBM3i9iKGOrgAAAI0"]
[Sat Feb 21 05:12:50.722338 2026] [:error] [pid 40757:tid 40817] [client 20.210.88.198:59723] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxo.php"] [unique_id "aZjOUqg_MKVL7zhH7dwfwAAAAFY"]
[Sat Feb 21 05:12:52.112287 2026] [:error] [pid 40758:tid 40822] [client 20.210.88.198:48720] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxo.php"] [unique_id "aZjOVEBAHxvBM3i9iKGOtAAAAIA"]
[Sat Feb 21 05:12:53.113603 2026] [:error] [pid 40758:tid 40827] [client 20.210.88.198:57734] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxo.php"] [unique_id "aZjOVUBAHxvBM3i9iKGOtgAAAIU"]
[Sat Feb 21 05:12:54.000881 2026] [:error] [pid 40758:tid 40836] [client 20.210.88.198:51689] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "aZjOVUBAHxvBM3i9iKGOuAAAAI4"]
[Sat Feb 21 05:12:54.892505 2026] [:error] [pid 40756:tid 40766] [client 20.210.88.198:57720] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "aZjOVgNlDP60sLYgqXLBZgAAAAA"]
[Sat Feb 21 05:12:55.726450 2026] [:error] [pid 40757:tid 40796] [client 20.210.88.198:60173] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "aZjOV6g_MKVL7zhH7dwfzgAAAEE"]
[Sat Feb 21 05:12:57.017404 2026] [:error] [pid 40758:tid 40838] [client 20.210.88.198:52943] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "aZjOWUBAHxvBM3i9iKGOuwAAAJA"]
[Sat Feb 21 05:12:57.735752 2026] [:error] [pid 40756:tid 40771] [client 20.210.88.198:60163] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZjOWQNlDP60sLYgqXLBaQAAAAU"]
[Sat Feb 21 05:12:59.107162 2026] [:error] [pid 40757:tid 40802] [client 20.210.88.198:51690] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZjOW6g_MKVL7zhH7dwf0QAAAEc"]
[Sat Feb 21 05:13:08.695788 2026] [:error] [pid 40756:tid 40777] [client 20.210.88.198:60280] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mds.php"] [unique_id "aZjOZANlDP60sLYgqXLBiAAAAAs"]
[Sat Feb 21 05:13:10.101499 2026] [:error] [pid 40756:tid 40770] [client 20.210.88.198:51653] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mds.php"] [unique_id "aZjOZgNlDP60sLYgqXLBjAAAAAQ"]
[Sat Feb 21 05:13:10.787003 2026] [:error] [pid 22558:tid 22572] [client 20.210.88.198:57787] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mds.php"] [unique_id "aZjOZirVaIb2gXsVbDoURwAAAQw"]
[Sat Feb 21 05:13:11.705041 2026] [:error] [pid 40758:tid 40827] [client 20.210.88.198:60165] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mds.php"] [unique_id "aZjOZ0BAHxvBM3i9iKGPFQAAAIU"]
[Sat Feb 21 05:13:12.683734 2026] [:error] [pid 22558:tid 22572] [client 20.210.88.198:52955] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aZjOaCrVaIb2gXsVbDoUUQAAAQw"]
[Sat Feb 21 05:13:13.525882 2026] [:error] [pid 40758:tid 40824] [client 20.210.88.198:60263] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aZjOaUBAHxvBM3i9iKGPGQAAAII"]
[Sat Feb 21 05:13:14.188632 2026] [:error] [pid 40756:tid 40783] [client 20.210.88.198:57758] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aZjOagNlDP60sLYgqXLBmAAAABE"]
[Sat Feb 21 05:13:15.132643 2026] [:error] [pid 40756:tid 40771] [client 20.210.88.198:60216] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aZjOawNlDP60sLYgqXLBmgAAAAU"]
[Sat Feb 21 05:13:16.276283 2026] [:error] [pid 22558:tid 22576] [client 20.210.88.198:52942] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aZjObCrVaIb2gXsVbDoUWgAAARA"]
[Sat Feb 21 05:13:17.264353 2026] [:error] [pid 40871:tid 40884] [client 20.210.88.198:48756] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aZjObTqDikjdiOZeJyWqKQAAAMs"]
[Sat Feb 21 05:13:17.634131 2026] [:error] [pid 40756:tid 40790] [client 20.210.88.198:57729] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aZjObQNlDP60sLYgqXLBnwAAABg"]
[Sat Feb 21 05:13:17.972613 2026] [:error] [pid 40756:tid 40782] [client 20.210.88.198:51659] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aZjObQNlDP60sLYgqXLBoQAAABA"]
[Sat Feb 21 05:13:18.675125 2026] [:error] [pid 40758:tid 40840] [client 20.210.88.198:59729] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cool.php"] [unique_id "aZjObkBAHxvBM3i9iKGPKAAAAJI"]
[Sat Feb 21 05:13:19.179662 2026] [:error] [pid 40757:tid 40796] [client 20.210.88.198:59760] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cool.php"] [unique_id "aZjOb6g_MKVL7zhH7dwf8wAAAEE"]
[Sat Feb 21 05:13:19.617698 2026] [:error] [pid 40757:tid 40819] [client 20.210.88.198:48758] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cool.php"] [unique_id "aZjOb6g_MKVL7zhH7dwf9AAAAFg"]
[Sat Feb 21 05:13:19.992200 2026] [:error] [pid 40756:tid 40770] [client 20.210.88.198:52244] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cool.php"] [unique_id "aZjObwNlDP60sLYgqXLBqAAAAAQ"]
[Sat Feb 21 05:13:20.607947 2026] [:error] [pid 40756:tid 40766] [client 20.210.88.198:59755] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aZjOcANlDP60sLYgqXLBqQAAAAA"]
[Sat Feb 21 05:13:21.225608 2026] [:error] [pid 40756:tid 40784] [client 20.210.88.198:59692] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aZjOcQNlDP60sLYgqXLBqwAAABI"]
[Sat Feb 21 05:13:21.961274 2026] [:error] [pid 22558:tid 22579] [client 20.210.88.198:51700] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aZjOcSrVaIb2gXsVbDoUagAAARM"]
[Sat Feb 21 05:13:22.762428 2026] [:error] [pid 40757:tid 40795] [client 20.210.88.198:51698] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "aZjOcqg_MKVL7zhH7dwf-wAAAEA"]
[Sat Feb 21 05:13:23.566361 2026] [:error] [pid 40871:tid 40894] [client 20.210.88.198:60167] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZjOczqDikjdiOZeJyWqQwAAANU"]
[Sat Feb 21 05:13:23.903900 2026] [:error] [pid 40757:tid 40819] [client 20.210.88.198:48765] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZjOc6g_MKVL7zhH7dwf_gAAAFg"]
[Sat Feb 21 05:13:25.722820 2026] [:error] [pid 22558:tid 22560] [client 20.210.88.198:57748] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZjOdSrVaIb2gXsVbDoUdQAAAQA"]
[Sat Feb 21 05:13:27.297764 2026] [:error] [pid 40758:tid 40834] [client 20.210.88.198:53869] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZjOd0BAHxvBM3i9iKGPNAAAAIw"]
[Sat Feb 21 05:13:28.582531 2026] [:error] [pid 40871:tid 40876] [client 20.210.88.198:52957] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aZjOeDqDikjdiOZeJyWqUAAAAMM"]
[Sat Feb 21 05:13:30.498480 2026] [:error] [pid 40871:tid 40874] [client 20.210.88.198:59752] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aZjOejqDikjdiOZeJyWqVQAAAME"]
[Sat Feb 21 05:13:31.935781 2026] [:error] [pid 40757:tid 40816] [client 20.210.88.198:48707] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aZjOe6g_MKVL7zhH7dwgCwAAAFU"]
[Sat Feb 21 05:13:33.042139 2026] [:error] [pid 40756:tid 40771] [client 20.210.88.198:48709] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aZjOfQNlDP60sLYgqXLB1wAAAAU"]
[Sat Feb 21 05:13:34.342307 2026] [:error] [pid 40758:tid 40844] [client 20.210.88.198:57781] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aZjOfkBAHxvBM3i9iKGPPgAAAJY"]
[Sat Feb 21 05:13:35.996592 2026] [:error] [pid 22558:tid 22565] [client 20.210.88.198:52274] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aZjOfyrVaIb2gXsVbDoUlQAAAQU"]
[Sat Feb 21 05:13:38.268845 2026] [:error] [pid 40871:tid 40897] [client 20.210.88.198:60166] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aZjOgjqDikjdiOZeJyWqXgAAANg"]
[Sat Feb 21 05:13:39.895342 2026] [:error] [pid 40757:tid 40803] [client 20.210.88.198:3550] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aZjOg6g_MKVL7zhH7dwgDgAAAEg"]
[Sat Feb 21 05:13:40.875763 2026] [:error] [pid 40871:tid 40894] [client 20.210.88.198:51675] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aZjOhDqDikjdiOZeJyWqaAAAANU"]
[Sat Feb 21 05:13:41.369294 2026] [:error] [pid 40757:tid 40812] [client 20.210.88.198:52261] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aZjOhag_MKVL7zhH7dwgEAAAAFE"]
[Sat Feb 21 05:13:42.052161 2026] [:error] [pid 40756:tid 40771] [client 20.210.88.198:60272] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aZjOhgNlDP60sLYgqXLB3gAAAAU"]
[Sat Feb 21 05:13:42.509188 2026] [:error] [pid 40871:tid 40885] [client 20.210.88.198:59696] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aZjOhjqDikjdiOZeJyWqawAAAMw"]
[Sat Feb 21 05:13:42.982306 2026] [:error] [pid 40871:tid 40897] [client 20.210.88.198:59663] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZjOhjqDikjdiOZeJyWqbQAAANg"]
[Sat Feb 21 05:13:43.395110 2026] [:error] [pid 40756:tid 40777] [client 20.210.88.198:51678] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZjOhwNlDP60sLYgqXLB3wAAAAs"]
[Sat Feb 21 05:13:43.773440 2026] [:error] [pid 40871:tid 40889] [client 20.210.88.198:57732] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZjOhzqDikjdiOZeJyWqcQAAANA"]
[Sat Feb 21 05:13:44.124224 2026] [:error] [pid 40757:tid 40819] [client 20.210.88.198:48717] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZjOiKg_MKVL7zhH7dwgFQAAAFg"]
[Sat Feb 21 05:13:44.600628 2026] [:error] [pid 40756:tid 40770] [client 20.210.88.198:53847] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/fafa/"] [unique_id "aZjOiANlDP60sLYgqXLB4gAAAAQ"]
[Sat Feb 21 05:13:45.206630 2026] [:error] [pid 40757:tid 40815] [client 20.210.88.198:57710] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/fafa/"] [unique_id "aZjOiag_MKVL7zhH7dwgGgAAAFQ"]
[Sat Feb 21 05:13:45.663346 2026] [:error] [pid 40757:tid 40804] [client 20.210.88.198:51703] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/fafa/"] [unique_id "aZjOiag_MKVL7zhH7dwgGwAAAEk"]
[Sat Feb 21 05:13:46.003722 2026] [:error] [pid 40756:tid 40789] [client 20.210.88.198:59756] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/fafa/"] [unique_id "aZjOigNlDP60sLYgqXLB5wAAABc"]
[Sat Feb 21 05:13:46.316941 2026] [:error] [pid 40756:tid 40784] [client 20.210.88.198:57752] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aZjOigNlDP60sLYgqXLB6AAAABI"]
[Sat Feb 21 05:13:46.650388 2026] [:error] [pid 40757:tid 40806] [client 20.210.88.198:60178] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aZjOiqg_MKVL7zhH7dwgHwAAAEs"]
[Sat Feb 21 05:13:46.975766 2026] [:error] [pid 40756:tid 40772] [client 20.210.88.198:52962] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aZjOigNlDP60sLYgqXLB6gAAAAY"]
[Sat Feb 21 05:13:47.243872 2026] [:error] [pid 40757:tid 40813] [client 20.210.88.198:4036] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aZjOi6g_MKVL7zhH7dwgIQAAAFI"]
[Sat Feb 21 05:13:48.643531 2026] [:error] [pid 22558:tid 22567] [client 20.210.88.198:60206] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZjOjCrVaIb2gXsVbDoUnAAAAQc"]
[Sat Feb 21 05:13:49.610184 2026] [:error] [pid 40871:tid 40881] [client 20.210.88.198:53841] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZjOjTqDikjdiOZeJyWqdgAAAMg"]
[Sat Feb 21 05:13:50.337368 2026] [:error] [pid 40758:tid 40839] [client 20.210.88.198:57783] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZjOjkBAHxvBM3i9iKGPTgAAAJE"]
[Sat Feb 21 05:13:50.718369 2026] [:error] [pid 40871:tid 40889] [client 20.210.88.198:48723] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/"] [unique_id "aZjOjjqDikjdiOZeJyWqeAAAANA"]
[Sat Feb 21 05:13:50.969509 2026] [:error] [pid 40757:tid 40801] [client 20.210.88.198:57730] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/"] [unique_id "aZjOjqg_MKVL7zhH7dwgMgAAAEY"]
[Sat Feb 21 05:13:51.363215 2026] [:error] [pid 40757:tid 40811] [client 20.210.88.198:57716] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/"] [unique_id "aZjOj6g_MKVL7zhH7dwgNAAAAFA"]
[Sat Feb 21 05:13:51.983804 2026] [:error] [pid 40757:tid 40816] [client 20.210.88.198:48337] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/"] [unique_id "aZjOj6g_MKVL7zhH7dwgNwAAAFU"]
[Sat Feb 21 05:13:52.813067 2026] [:error] [pid 40757:tid 40815] [client 20.210.88.198:48763] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/"] [unique_id "aZjOkKg_MKVL7zhH7dwgOwAAAFQ"]
[Sat Feb 21 05:13:53.667391 2026] [:error] [pid 40756:tid 40789] [client 20.210.88.198:53868] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/museu/yhweq.php"] [unique_id "aZjOkQNlDP60sLYgqXLB7QAAABc"]
[Sat Feb 21 05:13:54.570810 2026] [:error] [pid 40757:tid 40800] [client 20.210.88.198:60261] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/museu/yhweq.php"] [unique_id "aZjOkqg_MKVL7zhH7dwgQgAAAEU"]
[Sat Feb 21 05:13:55.030916 2026] [:error] [pid 22558:tid 22574] [client 20.210.88.198:57697] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/museu/yhweq.php"] [unique_id "aZjOkyrVaIb2gXsVbDoUoAAAAQ4"]
[Sat Feb 21 05:13:55.605829 2026] [:error] [pid 40757:tid 40817] [client 20.210.88.198:48336] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/museu/yhweq.php"] [unique_id "aZjOk6g_MKVL7zhH7dwgRQAAAFY"]
[Sat Feb 21 05:13:56.212535 2026] [:error] [pid 40758:tid 40843] [client 20.210.88.198:60198] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aZjOlEBAHxvBM3i9iKGPVAAAAJU"]
[Sat Feb 21 05:13:56.654985 2026] [:error] [pid 40758:tid 40822] [client 20.210.88.198:59722] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aZjOlEBAHxvBM3i9iKGPVQAAAIA"]
[Sat Feb 21 05:13:57.285794 2026] [:error] [pid 40756:tid 40767] [client 20.210.88.198:3570] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aZjOlQNlDP60sLYgqXLB9wAAAAE"]
[Sat Feb 21 05:13:57.754165 2026] [:error] [pid 40758:tid 40826] [client 20.210.88.198:57749] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aZjOlUBAHxvBM3i9iKGPVgAAAIQ"]
[Sat Feb 21 05:13:58.021709 2026] [:error] [pid 40758:tid 40833] [client 20.210.88.198:52947] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aZjOlkBAHxvBM3i9iKGPWAAAAIs"]
[Sat Feb 21 05:13:58.455724 2026] [:error] [pid 40757:tid 40799] [client 20.210.88.198:59669] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aZjOlqg_MKVL7zhH7dwgTQAAAEQ"]
[Sat Feb 21 05:13:58.842215 2026] [:error] [pid 40756:tid 40782] [client 20.210.88.198:51679] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aZjOlgNlDP60sLYgqXLB-wAAABA"]
[Sat Feb 21 05:13:59.255436 2026] [:error] [pid 40757:tid 40815] [client 20.210.88.198:60185] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aZjOl6g_MKVL7zhH7dwgTgAAAFQ"]
[Sat Feb 21 05:13:59.627128 2026] [:error] [pid 40756:tid 40779] [client 20.210.88.198:59656] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aZjOlwNlDP60sLYgqXLB_gAAAA0"]
[Sat Feb 21 05:13:59.937722 2026] [:error] [pid 40758:tid 40844] [client 20.210.88.198:59655] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aZjOl0BAHxvBM3i9iKGPXgAAAJY"]
[Sat Feb 21 05:14:01.258213 2026] [:error] [pid 22558:tid 22570] [client 20.210.88.198:60209] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aZjOmSrVaIb2gXsVbDoUoQAAAQo"]
[Sat Feb 21 05:14:02.367705 2026] [:error] [pid 40756:tid 40782] [client 20.210.88.198:53871] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aZjOmgNlDP60sLYgqXLCAwAAABA"]
[Sat Feb 21 05:14:03.605100 2026] [:error] [pid 40871:tid 40874] [client 20.210.88.198:60164] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aZjOmzqDikjdiOZeJyWqgwAAAME"]
[Sat Feb 21 05:14:05.124990 2026] [:error] [pid 40757:tid 40809] [client 20.210.88.198:52954] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aZjOnag_MKVL7zhH7dwgYQAAAE4"]
[Sat Feb 21 05:14:06.141925 2026] [:error] [pid 40871:tid 40895] [client 20.210.88.198:3417] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aZjOnjqDikjdiOZeJyWqigAAANY"]
[Sat Feb 21 05:14:06.721081 2026] [:error] [pid 40871:tid 40873] [client 20.210.88.198:52966] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gib.php"] [unique_id "aZjOnjqDikjdiOZeJyWqjQAAAMA"]
[Sat Feb 21 05:14:07.098272 2026] [:error] [pid 40756:tid 40769] [client 20.210.88.198:57665] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aZjOnwNlDP60sLYgqXLCGAAAAAM"]
[Sat Feb 21 05:14:07.703854 2026] [:error] [pid 40757:tid 40802] [client 20.210.88.198:3665] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aZjOn6g_MKVL7zhH7dwgbAAAAEc"]
[Sat Feb 21 05:14:13.093868 2026] [:error] [pid 40871:tid 40874] [client 20.210.88.198:57690] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aZjOpTqDikjdiOZeJyWqpwAAAME"]
[Sat Feb 21 05:14:14.048778 2026] [:error] [pid 40756:tid 40779] [client 20.210.88.198:60249] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aZjOpgNlDP60sLYgqXLCMwAAAA0"]
[Sat Feb 21 05:14:14.439693 2026] [:error] [pid 40757:tid 40796] [client 20.210.88.198:59716] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aZjOpqg_MKVL7zhH7dwgdwAAAEE"]
[Sat Feb 21 05:14:15.152977 2026] [:error] [pid 40757:tid 40803] [client 20.210.88.198:53836] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jmfi2.php"] [unique_id "aZjOp6g_MKVL7zhH7dwgeQAAAEg"]
[Sat Feb 21 05:14:16.459327 2026] [:error] [pid 40871:tid 40894] [client 20.210.88.198:59738] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aZjOqDqDikjdiOZeJyWqrgAAANU"]
[Sat Feb 21 05:14:29.519287 2026] [:error] [pid 40871:tid 40879] [client 20.210.88.198:59702] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aZjOtTqDikjdiOZeJyWqygAAAMY"]
[Sat Feb 21 05:14:30.257466 2026] [:error] [pid 40756:tid 40775] [client 20.210.88.198:59689] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aZjOtgNlDP60sLYgqXLCWgAAAAk"]
[Sat Feb 21 05:14:31.586206 2026] [:error] [pid 40756:tid 40768] [client 20.210.88.198:57755] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "aZjOtwNlDP60sLYgqXLCWwAAAAI"]
[Sat Feb 21 05:14:32.965378 2026] [:error] [pid 40757:tid 40798] [client 20.210.88.198:50873] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "aZjOuKg_MKVL7zhH7dwgkgAAAEM"]
[Sat Feb 21 05:14:34.247439 2026] [:error] [pid 40871:tid 40893] [client 20.210.88.198:57667] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "aZjOujqDikjdiOZeJyWq0QAAANQ"]
[Sat Feb 21 05:14:34.590803 2026] [:error] [pid 22558:tid 22567] [client 20.210.88.198:59667] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "aZjOuirVaIb2gXsVbDoUzwAAAQc"]
[Sat Feb 21 05:14:34.937008 2026] [:error] [pid 40757:tid 40797] [client 20.210.88.198:52231] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/json.php"] [unique_id "aZjOuqg_MKVL7zhH7dwglAAAAEI"]
[Sat Feb 21 05:14:36.649421 2026] [:error] [pid 22558:tid 22584] [client 20.210.88.198:3335] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/json.php"] [unique_id "aZjOvCrVaIb2gXsVbDoU1AAAARg"]
[Sat Feb 21 05:14:37.691539 2026] [:error] [pid 40871:tid 40874] [client 20.210.88.198:57753] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/json.php"] [unique_id "aZjOvTqDikjdiOZeJyWq0wAAAME"]
[Sat Feb 21 05:14:38.103905 2026] [:error] [pid 40757:tid 40818] [client 20.210.88.198:52990] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/json.php"] [unique_id "aZjOvqg_MKVL7zhH7dwgmgAAAFc"]
[Sat Feb 21 05:14:39.370674 2026] [:error] [pid 40756:tid 40771] [client 20.210.88.198:60228] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aZjOvwNlDP60sLYgqXLCZwAAAAU"]
[Sat Feb 21 05:14:40.719098 2026] [:error] [pid 40871:tid 40881] [client 20.210.88.198:48374] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aZjOwDqDikjdiOZeJyWq1wAAAMg"]
[Sat Feb 21 05:14:41.328495 2026] [:error] [pid 40756:tid 40784] [client 20.210.88.198:52253] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aZjOwQNlDP60sLYgqXLCbQAAABI"]
[Sat Feb 21 05:14:42.039090 2026] [:error] [pid 40756:tid 40782] [client 20.210.88.198:52945] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hzz.php"] [unique_id "aZjOwgNlDP60sLYgqXLCcAAAABA"]
[Sat Feb 21 05:14:43.553088 2026] [:error] [pid 22558:tid 22565] [client 20.210.88.198:59720] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "aZjOwyrVaIb2gXsVbDoU6AAAAQU"]
[Sat Feb 21 05:14:44.155599 2026] [:error] [pid 22558:tid 22582] [client 20.210.88.198:52948] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "aZjOxCrVaIb2gXsVbDoU7AAAARY"]
[Sat Feb 21 05:14:45.320668 2026] [:error] [pid 40871:tid 40886] [client 20.210.88.198:52937] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "aZjOxTqDikjdiOZeJyWq3wAAAM0"]
[Sat Feb 21 05:14:46.487619 2026] [:error] [pid 40758:tid 40824] [client 20.210.88.198:52235] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "aZjOxkBAHxvBM3i9iKGPhwAAAII"]
[Sat Feb 21 05:14:47.543819 2026] [:error] [pid 40871:tid 40895] [client 20.210.88.198:60222] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aZjOxzqDikjdiOZeJyWq4wAAANY"]
[Sat Feb 21 05:14:47.979619 2026] [:error] [pid 40758:tid 40841] [client 20.210.88.198:53885] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aZjOx0BAHxvBM3i9iKGPjQAAAJM"]
[Sat Feb 21 05:14:48.423458 2026] [:error] [pid 40757:tid 40800] [client 20.210.88.198:51678] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aZjOyKg_MKVL7zhH7dwgnwAAAEU"]
[Sat Feb 21 05:14:49.227256 2026] [:error] [pid 40756:tid 40789] [client 20.210.88.198:48713] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aZjOyQNlDP60sLYgqXLCeAAAABc"]
[Sat Feb 21 05:14:49.529832 2026] [:error] [pid 40756:tid 40768] [client 20.210.88.198:53830] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZjOyQNlDP60sLYgqXLCegAAAAI"]
[Sat Feb 21 05:14:49.934511 2026] [:error] [pid 40871:tid 40885] [client 20.210.88.198:59718] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZjOyTqDikjdiOZeJyWq5QAAAMw"]
[Sat Feb 21 05:14:51.108412 2026] [:error] [pid 40871:tid 40888] [client 20.210.88.198:53872] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZjOyzqDikjdiOZeJyWq5gAAAM8"]
[Sat Feb 21 05:14:52.197213 2026] [:error] [pid 22558:tid 22571] [client 20.210.88.198:48742] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZjOzCrVaIb2gXsVbDoU-AAAAQs"]
[Sat Feb 21 05:14:52.843482 2026] [:error] [pid 40758:tid 40839] [client 20.210.88.198:60202] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ps.php"] [unique_id "aZjOzEBAHxvBM3i9iKGPlgAAAJE"]
[Sat Feb 21 05:14:53.605793 2026] [:error] [pid 40871:tid 40883] [client 20.210.88.198:3560] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ps.php"] [unique_id "aZjOzTqDikjdiOZeJyWq6AAAAMo"]
[Sat Feb 21 05:14:53.909077 2026] [:error] [pid 22558:tid 22575] [client 20.210.88.198:53845] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ps.php"] [unique_id "aZjOzSrVaIb2gXsVbDoU-gAAAQ8"]
[Sat Feb 21 05:14:54.601029 2026] [:error] [pid 40756:tid 40770] [client 20.210.88.198:52952] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ps.php"] [unique_id "aZjOzgNlDP60sLYgqXLChAAAAAQ"]
[Sat Feb 21 05:14:54.970172 2026] [:error] [pid 40871:tid 40895] [client 20.210.88.198:60281] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZjOzjqDikjdiOZeJyWq7gAAANY"]
[Sat Feb 21 05:14:55.800668 2026] [:error] [pid 40758:tid 40822] [client 20.210.88.198:60188] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZjOz0BAHxvBM3i9iKGPnAAAAIA"]
[Sat Feb 21 05:14:56.430306 2026] [:error] [pid 40758:tid 40832] [client 20.210.88.198:3415] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZjO0EBAHxvBM3i9iKGPngAAAIo"]
[Sat Feb 21 05:14:56.779129 2026] [:error] [pid 40757:tid 40802] [client 20.210.88.198:53866] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZjO0Kg_MKVL7zhH7dwgrgAAAEc"]
[Sat Feb 21 05:14:57.203734 2026] [:error] [pid 22558:tid 22584] [client 20.210.88.198:57727] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/dd/"] [unique_id "aZjO0SrVaIb2gXsVbDoU_gAAARg"]
[Sat Feb 21 05:14:57.664985 2026] [:error] [pid 40758:tid 40834] [client 20.210.88.198:59693] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/dd/"] [unique_id "aZjO0UBAHxvBM3i9iKGPowAAAIw"]
[Sat Feb 21 05:14:58.418520 2026] [:error] [pid 40757:tid 40809] [client 20.210.88.198:60217] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/dd/"] [unique_id "aZjO0qg_MKVL7zhH7dwgsgAAAE4"]
[Sat Feb 21 05:14:58.916967 2026] [:error] [pid 40871:tid 40887] [client 20.210.88.198:60245] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/dd/"] [unique_id "aZjO0jqDikjdiOZeJyWq8gAAAM4"]
[Sat Feb 21 05:14:59.728424 2026] [:error] [pid 40757:tid 40797] [client 20.210.88.198:3560] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aZjO06g_MKVL7zhH7dwgtgAAAEI"]
[Sat Feb 21 05:15:00.140762 2026] [:error] [pid 40871:tid 40890] [client 20.210.88.198:59712] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aZjO1DqDikjdiOZeJyWq9wAAANE"]
[Sat Feb 21 05:15:00.607304 2026] [:error] [pid 40758:tid 40830] [client 20.210.88.198:3385] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aZjO1EBAHxvBM3i9iKGPpwAAAIg"]
[Sat Feb 21 05:15:00.897146 2026] [:error] [pid 40758:tid 40837] [client 20.210.88.198:60221] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aZjO1EBAHxvBM3i9iKGPqAAAAI8"]
[Sat Feb 21 05:15:02.469243 2026] [:error] [pid 40756:tid 40776] [client 20.210.88.198:57674] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aZjO1gNlDP60sLYgqXLChwAAAAo"]
[Sat Feb 21 05:15:03.366133 2026] [:error] [pid 40756:tid 40772] [client 20.210.88.198:52974] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aZjO1wNlDP60sLYgqXLCiQAAAAY"]
[Sat Feb 21 05:15:03.925920 2026] [:error] [pid 40871:tid 40873] [client 20.210.88.198:50860] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aZjO1zqDikjdiOZeJyWq_QAAAMA"]
[Sat Feb 21 05:15:04.750642 2026] [:error] [pid 40758:tid 40844] [client 20.210.88.198:52252] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aZjO2EBAHxvBM3i9iKGPsQAAAJY"]
[Sat Feb 21 05:15:05.559079 2026] [:error] [pid 40871:tid 40891] [client 20.210.88.198:59713] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aZjO2TqDikjdiOZeJyWrAAAAANI"]
[Sat Feb 21 05:15:05.962287 2026] [:error] [pid 40871:tid 40881] [client 20.210.88.198:60276] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aZjO2TqDikjdiOZeJyWrAgAAAMg"]
[Sat Feb 21 05:15:06.270623 2026] [:error] [pid 40756:tid 40774] [client 20.210.88.198:50873] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aZjO2gNlDP60sLYgqXLCjwAAAAg"]
[Sat Feb 21 05:15:06.569260 2026] [:error] [pid 40871:tid 40892] [client 20.210.88.198:60171] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aZjO2jqDikjdiOZeJyWrBAAAANM"]
[Sat Feb 21 05:15:06.895461 2026] [:error] [pid 40757:tid 40819] [client 20.210.88.198:3361] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aZjO2qg_MKVL7zhH7dwguQAAAFg"]
[Sat Feb 21 05:15:07.381110 2026] [:error] [pid 22558:tid 22560] [client 20.210.88.198:51649] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aZjO2yrVaIb2gXsVbDoVCgAAAQA"]
[Sat Feb 21 05:15:08.079638 2026] [:error] [pid 40757:tid 40808] [client 20.210.88.198:60199] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aZjO3Kg_MKVL7zhH7dwguwAAAE0"]
[Sat Feb 21 05:15:08.773476 2026] [:error] [pid 40871:tid 40879] [client 20.210.88.198:53880] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aZjO3DqDikjdiOZeJyWrCAAAAMY"]
[Sat Feb 21 05:15:09.079727 2026] [:error] [pid 40758:tid 40844] [client 20.210.88.198:48710] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user.php"] [unique_id "aZjO3UBAHxvBM3i9iKGPuwAAAJY"]
[Sat Feb 21 05:15:09.463178 2026] [:error] [pid 40758:tid 40841] [client 20.210.88.198:48730] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user.php"] [unique_id "aZjO3UBAHxvBM3i9iKGPvgAAAJM"]
[Sat Feb 21 05:15:10.268606 2026] [:error] [pid 40871:tid 40889] [client 20.210.88.198:60223] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user.php"] [unique_id "aZjO3jqDikjdiOZeJyWrDAAAANA"]
[Sat Feb 21 05:15:10.745466 2026] [:error] [pid 22558:tid 22579] [client 20.210.88.198:60265] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user.php"] [unique_id "aZjO3irVaIb2gXsVbDoVDwAAARM"]
[Sat Feb 21 05:15:11.081866 2026] [:error] [pid 22558:tid 22567] [client 20.210.88.198:57735] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aZjO3yrVaIb2gXsVbDoVEQAAAQc"]
[Sat Feb 21 05:15:11.655965 2026] [:error] [pid 40871:tid 40896] [client 20.210.88.198:52228] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aZjO3zqDikjdiOZeJyWrEQAAANc"]
[Sat Feb 21 05:15:19.767254 2026] [:error] [pid 40756:tid 40781] [client 20.210.88.198:3336] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aZjO5wNlDP60sLYgqXLCpAAAAA8"]
[Sat Feb 21 05:15:21.388066 2026] [:error] [pid 40757:tid 40797] [client 20.210.88.198:59727] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aZjO6ag_MKVL7zhH7dwgzQAAAEI"]
[Sat Feb 21 05:15:23.420864 2026] [:error] [pid 40758:tid 40824] [client 20.210.88.198:48711] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aZjO60BAHxvBM3i9iKGP7gAAAII"]
[Sat Feb 21 05:15:24.135847 2026] [:error] [pid 40756:tid 40766] [client 20.210.88.198:60190] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aZjO7ANlDP60sLYgqXLCqgAAAAA"]
[Sat Feb 21 05:15:24.432747 2026] [:error] [pid 40757:tid 40800] [client 20.210.88.198:53828] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aZjO7Kg_MKVL7zhH7dwg0QAAAEU"]
[Sat Feb 21 05:15:24.688508 2026] [:error] [pid 22558:tid 22573] [client 20.210.88.198:60251] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aZjO7CrVaIb2gXsVbDoVLwAAAQ0"]
[Sat Feb 21 05:15:25.563178 2026] [:error] [pid 40756:tid 40782] [client 20.210.88.198:51667] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aZjO7QNlDP60sLYgqXLCrgAAABA"]
[Sat Feb 21 05:15:26.070138 2026] [:error] [pid 40757:tid 40818] [client 20.210.88.198:51652] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aZjO7qg_MKVL7zhH7dwg1AAAAFc"]
[Sat Feb 21 05:15:26.623897 2026] [:error] [pid 22558:tid 22580] [client 20.210.88.198:57789] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZjO7irVaIb2gXsVbDoVOAAAARQ"]
[Sat Feb 21 05:15:27.501871 2026] [:error] [pid 22558:tid 22574] [client 20.210.88.198:52269] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZjO7yrVaIb2gXsVbDoVQAAAAQ4"]
[Sat Feb 21 05:15:28.185773 2026] [:error] [pid 40871:tid 40877] [client 20.210.88.198:52968] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZjO8DqDikjdiOZeJyWrKQAAAMQ"]
[Sat Feb 21 05:15:28.766745 2026] [:error] [pid 40757:tid 40815] [client 20.210.88.198:3703] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZjO8Kg_MKVL7zhH7dwg1wAAAFQ"]
[Sat Feb 21 05:15:29.321920 2026] [:error] [pid 22558:tid 22580] [client 20.210.88.198:59730] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aZjO8SrVaIb2gXsVbDoVQwAAARQ"]
[Sat Feb 21 05:15:29.738811 2026] [:error] [pid 40757:tid 40796] [client 20.210.88.198:51704] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aZjO8ag_MKVL7zhH7dwg2gAAAEE"]
[Sat Feb 21 05:15:30.362814 2026] [:error] [pid 40871:tid 40875] [client 20.210.88.198:3407] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aZjO8jqDikjdiOZeJyWrMAAAAMI"]
[Sat Feb 21 05:15:30.706493 2026] [:error] [pid 40756:tid 40789] [client 20.210.88.198:51684] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aZjO8gNlDP60sLYgqXLCuwAAABc"]
[Sat Feb 21 05:15:31.263888 2026] [:error] [pid 22558:tid 22582] [client 20.210.88.198:53310] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.cache/x.php"] [unique_id "aZjO8yrVaIb2gXsVbDoVRQAAARY"]
[Sat Feb 21 05:15:32.000118 2026] [:error] [pid 40758:tid 40841] [client 20.210.88.198:52978] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.cache/x.php"] [unique_id "aZjO80BAHxvBM3i9iKGP9wAAAJM"]
[Sat Feb 21 05:15:32.543671 2026] [:error] [pid 22558:tid 22567] [client 20.210.88.198:48759] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.cache/x.php"] [unique_id "aZjO9CrVaIb2gXsVbDoVTAAAAQc"]
[Sat Feb 21 05:15:33.125467 2026] [:error] [pid 40756:tid 40783] [client 20.210.88.198:52985] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.cache/x.php"] [unique_id "aZjO9QNlDP60sLYgqXLCwwAAABE"]
[Sat Feb 21 05:15:33.735807 2026] [:error] [pid 40758:tid 40827] [client 20.210.88.198:48712] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dr.php"] [unique_id "aZjO9UBAHxvBM3i9iKGP_AAAAIU"]
[Sat Feb 21 05:15:34.249120 2026] [:error] [pid 22558:tid 22582] [client 20.210.88.198:3450] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dr.php"] [unique_id "aZjO9irVaIb2gXsVbDoVUQAAARY"]
[Sat Feb 21 05:15:35.484391 2026] [:error] [pid 22558:tid 22569] [client 20.210.88.198:52231] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dr.php"] [unique_id "aZjO9yrVaIb2gXsVbDoVVwAAAQk"]
[Sat Feb 21 05:15:36.150428 2026] [:error] [pid 40871:tid 40873] [client 20.210.88.198:59736] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dr.php"] [unique_id "aZjO-DqDikjdiOZeJyWrOAAAAMA"]
[Sat Feb 21 05:15:36.553032 2026] [:error] [pid 40756:tid 40786] [client 20.210.88.198:59742] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aZjO-ANlDP60sLYgqXLCywAAABQ"]
[Sat Feb 21 05:15:37.235781 2026] [:error] [pid 40871:tid 40887] [client 20.210.88.198:57743] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aZjO-TqDikjdiOZeJyWrPQAAAM4"]
[Sat Feb 21 05:15:37.923176 2026] [:error] [pid 22558:tid 22582] [client 20.210.88.198:3364] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aZjO-SrVaIb2gXsVbDoVXQAAARY"]
[Sat Feb 21 05:15:38.324997 2026] [:error] [pid 40758:tid 40834] [client 20.210.88.198:59775] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aZjO-kBAHxvBM3i9iKGQAAAAAIw"]
[Sat Feb 21 05:15:39.269302 2026] [:error] [pid 22558:tid 22567] [client 20.210.88.198:52273] [client 20.210.88.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZjO-yrVaIb2gXsVbDoVagAAAQc"]
[Sat Feb 21 05:15:40.163840 2026] [:error] [pid 40757:tid 40805] [client 20.210.88.198:51694] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aZjO_Kg_MKVL7zhH7dwg5gAAAEo"]
[Sat Feb 21 05:15:42.233040 2026] [:error] [pid 40871:tid 40885] [client 20.210.88.198:53863] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aZjO_jqDikjdiOZeJyWrXQAAAMw"]
[Sat Feb 21 05:15:42.910453 2026] [:error] [pid 40871:tid 40882] [client 20.210.88.198:52930] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aZjO_jqDikjdiOZeJyWrYgAAAMk"]
[Sat Feb 21 05:15:43.576906 2026] [:error] [pid 40871:tid 40875] [client 20.210.88.198:48722] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aZjO_zqDikjdiOZeJyWrZQAAAMI"]
[Sat Feb 21 05:15:44.546241 2026] [:error] [pid 40871:tid 40881] [client 20.210.88.198:60264] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o2.php"] [unique_id "aZjPADqDikjdiOZeJyWrZgAAAMg"]
[Sat Feb 21 05:15:45.847901 2026] [:error] [pid 40756:tid 40785] [client 20.210.88.198:50827] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o2.php"] [unique_id "aZjPAQNlDP60sLYgqXLC3gAAABM"]
[Sat Feb 21 05:15:47.080968 2026] [:error] [pid 40756:tid 40779] [client 20.210.88.198:52950] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o2.php"] [unique_id "aZjPAwNlDP60sLYgqXLC4QAAAA0"]
[Sat Feb 21 05:15:48.573208 2026] [:error] [pid 40757:tid 40814] [client 20.210.88.198:3555] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o2.php"] [unique_id "aZjPBKg_MKVL7zhH7dwg9AAAAFM"]
[Sat Feb 21 05:15:49.947382 2026] [:error] [pid 40758:tid 40838] [client 20.210.88.198:48338] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aZjPBUBAHxvBM3i9iKGQFwAAAJA"]
[Sat Feb 21 05:15:50.775657 2026] [:error] [pid 40758:tid 40837] [client 20.210.88.198:57764] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aZjPBkBAHxvBM3i9iKGQGgAAAI8"]
[Sat Feb 21 05:15:51.306706 2026] [:error] [pid 40871:tid 40894] [client 20.210.88.198:4015] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aZjPBzqDikjdiOZeJyWrfgAAANU"]
[Sat Feb 21 05:15:51.731832 2026] [:error] [pid 22558:tid 22584] [client 20.210.88.198:57694] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aZjPByrVaIb2gXsVbDoVhAAAARg"]
[Sat Feb 21 05:15:52.084657 2026] [:error] [pid 40757:tid 40799] [client 20.210.88.198:50835] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aZjPCKg_MKVL7zhH7dwhDQAAAEQ"]
[Sat Feb 21 05:15:52.556819 2026] [:error] [pid 40758:tid 40825] [client 20.210.88.198:59670] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aZjPCEBAHxvBM3i9iKGQIAAAAIM"]
[Sat Feb 21 05:15:53.522810 2026] [:error] [pid 40757:tid 40800] [client 20.210.88.198:51709] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aZjPCag_MKVL7zhH7dwhGgAAAEU"]
[Sat Feb 21 05:15:55.411472 2026] [:error] [pid 40871:tid 40894] [client 20.210.88.198:59715] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dlu.php"] [unique_id "aZjPCzqDikjdiOZeJyWrigAAANU"]
[Sat Feb 21 05:15:56.692592 2026] [:error] [pid 40871:tid 40891] [client 20.210.88.198:57780] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/about.php"] [unique_id "aZjPDDqDikjdiOZeJyWrlAAAANI"]
[Sat Feb 21 05:15:57.162889 2026] [:error] [pid 40871:tid 40875] [client 20.210.88.198:59739] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/about.php"] [unique_id "aZjPDTqDikjdiOZeJyWrlgAAAMI"]
[Sat Feb 21 05:15:58.630874 2026] [:error] [pid 40758:tid 40830] [client 20.210.88.198:53290] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/about.php"] [unique_id "aZjPDkBAHxvBM3i9iKGQKQAAAIg"]
[Sat Feb 21 05:15:59.236595 2026] [:error] [pid 40758:tid 40822] [client 20.210.88.198:53883] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/about.php"] [unique_id "aZjPD0BAHxvBM3i9iKGQLAAAAIA"]
[Sat Feb 21 05:16:00.150826 2026] [:error] [pid 22558:tid 22580] [client 20.210.88.198:52965] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aZjPECrVaIb2gXsVbDoVjQAAARQ"]
[Sat Feb 21 05:16:02.542527 2026] [:error] [pid 40871:tid 40882] [client 20.210.88.198:48725] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aZjPEjqDikjdiOZeJyWrnAAAAMk"]
[Sat Feb 21 05:16:05.484137 2026] [:error] [pid 22558:tid 22570] [client 20.210.88.198:52256] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aZjPFSrVaIb2gXsVbDoVmQAAAQo"]
[Sat Feb 21 05:16:07.711680 2026] [:error] [pid 22558:tid 22581] [client 20.210.88.198:59664] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aZjPFyrVaIb2gXsVbDoVnAAAARU"]
[Sat Feb 21 05:16:09.223693 2026] [:error] [pid 40756:tid 40776] [client 20.210.88.198:60285] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "aZjPGQNlDP60sLYgqXLDHQAAAAo"]
[Sat Feb 21 05:16:10.480811 2026] [:error] [pid 40871:tid 40885] [client 20.210.88.198:57679] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "aZjPGjqDikjdiOZeJyWrpgAAAMw"]
[Sat Feb 21 05:16:12.869346 2026] [:error] [pid 40756:tid 40788] [client 20.210.88.198:52935] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "aZjPHANlDP60sLYgqXLDLgAAABY"]
[Sat Feb 21 05:16:14.616956 2026] [:error] [pid 40757:tid 40806] [client 20.210.88.198:57681] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "aZjPHqg_MKVL7zhH7dwhJwAAAEs"]
[Sat Feb 21 05:16:17.891350 2026] [:error] [pid 40756:tid 40775] [client 20.210.88.198:57788] [client 20.210.88.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "aZjPIQNlDP60sLYgqXLDSAAAAAk"]
[Sat Feb 21 05:54:22.745186 2026] [:error] [pid 22558:tid 22562] [client 117.62.235.53:37468] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZjYDirVaIb2gXsVbDoriwAAAQI"]
[Sat Feb 21 07:05:04.516385 2026] [:error] [pid 40757:tid 40795] [client 104.46.216.98:59072] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZjooKg_MKVL7zhH7dxM9gAAAEA"]
[Sat Feb 21 07:05:07.759867 2026] [:error] [pid 40756:tid 40773] [client 104.46.216.98:59192] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aZjoowNlDP60sLYgqXLt2wAAAAc"]
[Sat Feb 21 07:05:08.230954 2026] [:error] [pid 40758:tid 40825] [client 104.46.216.98:59149] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZjopEBAHxvBM3i9iKG-KwAAAIM"]
[Sat Feb 21 07:05:08.549358 2026] [:error] [pid 40871:tid 40897] [client 104.46.216.98:59142] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZjopDqDikjdiOZeJyXcTgAAANg"]
[Sat Feb 21 07:05:09.047591 2026] [:error] [pid 40757:tid 40814] [client 104.46.216.98:59190] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZjopag_MKVL7zhH7dxM_QAAAFM"]
[Sat Feb 21 07:05:09.655677 2026] [:error] [pid 22558:tid 22564] [client 104.46.216.98:59191] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aZjopSrVaIb2gXsVbDpPzQAAAQQ"]
[Sat Feb 21 07:05:10.033250 2026] [:error] [pid 40758:tid 40837] [client 104.46.216.98:59197] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aZjopkBAHxvBM3i9iKG-MAAAAI8"]
[Sat Feb 21 07:05:10.329145 2026] [:error] [pid 22558:tid 22561] [client 104.46.216.98:59161] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aZjopirVaIb2gXsVbDpP0QAAAQE"]
[Sat Feb 21 07:05:10.648125 2026] [:error] [pid 40756:tid 40787] [client 104.46.216.98:59193] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aZjopgNlDP60sLYgqXLt4AAAABU"]
[Sat Feb 21 07:05:11.200773 2026] [:error] [pid 40757:tid 40801] [client 104.46.216.98:59074] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aZjop6g_MKVL7zhH7dxM_gAAAEY"]
[Sat Feb 21 07:05:11.940249 2026] [:error] [pid 40757:tid 40813] [client 104.46.216.98:59078] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aZjop6g_MKVL7zhH7dxNAwAAAFI"]
[Sat Feb 21 07:05:13.216639 2026] [:error] [pid 22558:tid 22564] [client 104.46.216.98:59145] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aZjoqSrVaIb2gXsVbDpP3gAAAQQ"]
[Sat Feb 21 07:05:13.998154 2026] [:error] [pid 22558:tid 22582] [client 104.46.216.98:59144] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aZjoqSrVaIb2gXsVbDpP4wAAARY"]
[Sat Feb 21 07:05:14.368062 2026] [:error] [pid 40756:tid 40776] [client 104.46.216.98:59086] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aZjoqgNlDP60sLYgqXLt5wAAAAo"]
[Sat Feb 21 07:05:14.618034 2026] [:error] [pid 40756:tid 40766] [client 104.46.216.98:59075] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aZjoqgNlDP60sLYgqXLt6AAAAAA"]
[Sat Feb 21 07:05:14.902747 2026] [:error] [pid 22558:tid 22562] [client 104.46.216.98:59150] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aZjoqirVaIb2gXsVbDpP5wAAAQI"]
[Sat Feb 21 07:05:15.165536 2026] [:error] [pid 40871:tid 40896] [client 104.46.216.98:59141] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aZjoqzqDikjdiOZeJyXcVgAAANc"]
[Sat Feb 21 07:05:15.618635 2026] [:error] [pid 40871:tid 40890] [client 104.46.216.98:59195] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/FII.php"] [unique_id "aZjoqzqDikjdiOZeJyXcWAAAANE"]
[Sat Feb 21 07:05:16.492044 2026] [:error] [pid 40758:tid 40846] [client 104.46.216.98:59126] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/FII.php"] [unique_id "aZjorEBAHxvBM3i9iKG-OwAAAJg"]
[Sat Feb 21 07:05:16.879727 2026] [:error] [pid 40757:tid 40796] [client 104.46.216.98:59083] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/FII.php"] [unique_id "aZjorKg_MKVL7zhH7dxNEgAAAEE"]
[Sat Feb 21 07:05:17.140351 2026] [:error] [pid 40758:tid 40829] [client 104.46.216.98:59167] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/FII.php"] [unique_id "aZjorUBAHxvBM3i9iKG-PwAAAIc"]
[Sat Feb 21 07:05:17.484871 2026] [:error] [pid 22558:tid 22578] [client 104.46.216.98:59079] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/images/about.php"] [unique_id "aZjorSrVaIb2gXsVbDpP7QAAARI"]
[Sat Feb 21 07:05:18.022405 2026] [:error] [pid 22558:tid 22572] [client 104.46.216.98:59182] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/images/about.php"] [unique_id "aZjorirVaIb2gXsVbDpP8AAAAQw"]
[Sat Feb 21 07:05:18.256903 2026] [:error] [pid 40757:tid 40808] [client 104.46.216.98:59165] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/images/about.php"] [unique_id "aZjorqg_MKVL7zhH7dxNGAAAAE0"]
[Sat Feb 21 07:05:18.615467 2026] [:error] [pid 40758:tid 40827] [client 104.46.216.98:59168] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/images/about.php"] [unique_id "aZjorkBAHxvBM3i9iKG-SAAAAIU"]
[Sat Feb 21 07:05:19.017464 2026] [:error] [pid 22558:tid 22580] [client 104.46.216.98:59163] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aZjoryrVaIb2gXsVbDpP9gAAARQ"]
[Sat Feb 21 07:05:19.383647 2026] [:error] [pid 40758:tid 40825] [client 104.46.216.98:59166] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aZjor0BAHxvBM3i9iKG-SQAAAIM"]
[Sat Feb 21 07:05:20.738733 2026] [:error] [pid 22558:tid 22582] [client 104.46.216.98:59104] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aZjosCrVaIb2gXsVbDpQAwAAARY"]
[Sat Feb 21 07:05:21.803476 2026] [:error] [pid 22558:tid 22579] [client 104.46.216.98:59139] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aZjosSrVaIb2gXsVbDpQCQAAARM"]
[Sat Feb 21 07:05:22.848452 2026] [:error] [pid 40871:tid 40891] [client 104.46.216.98:59183] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aZjosjqDikjdiOZeJyXcXgAAANI"]
[Sat Feb 21 07:05:23.606616 2026] [:error] [pid 40758:tid 40842] [client 104.46.216.98:59076] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aZjos0BAHxvBM3i9iKG-VgAAAJQ"]
[Sat Feb 21 07:05:23.932615 2026] [:error] [pid 40758:tid 40825] [client 104.46.216.98:59011] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aZjos0BAHxvBM3i9iKG-WAAAAIM"]
[Sat Feb 21 07:05:24.369752 2026] [:error] [pid 22558:tid 22584] [client 104.46.216.98:59187] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aZjotCrVaIb2gXsVbDpQDgAAARg"]
[Sat Feb 21 07:05:25.460116 2026] [:error] [pid 40758:tid 40836] [client 104.46.216.98:59174] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aZjotUBAHxvBM3i9iKG-XgAAAI4"]
[Sat Feb 21 07:05:26.996948 2026] [:error] [pid 40871:tid 40897] [client 104.46.216.98:59188] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aZjotjqDikjdiOZeJyXcagAAANg"]
[Sat Feb 21 07:05:27.719493 2026] [:error] [pid 40871:tid 40880] [client 104.46.216.98:59189] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aZjotzqDikjdiOZeJyXccAAAAMc"]
[Sat Feb 21 07:05:28.387648 2026] [:error] [pid 40757:tid 40801] [client 104.46.216.98:59106] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api.php"] [unique_id "aZjouKg_MKVL7zhH7dxNIgAAAEY"]
[Sat Feb 21 07:05:28.637566 2026] [:error] [pid 40757:tid 40817] [client 104.46.216.98:59155] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aZjouKg_MKVL7zhH7dxNIwAAAFY"]
[Sat Feb 21 07:05:28.912731 2026] [:error] [pid 40871:tid 40881] [client 104.46.216.98:59109] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aZjouDqDikjdiOZeJyXccgAAAMg"]
[Sat Feb 21 07:05:29.180861 2026] [:error] [pid 22558:tid 22563] [client 104.46.216.98:59180] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aZjouSrVaIb2gXsVbDpQIQAAAQM"]
[Sat Feb 21 07:05:29.454987 2026] [:error] [pid 40871:tid 40895] [client 104.46.216.98:59073] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aZjouTqDikjdiOZeJyXcdQAAANY"]
[Sat Feb 21 07:05:30.043727 2026] [:error] [pid 40756:tid 40777] [client 104.46.216.98:59102] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aZjougNlDP60sLYgqXLuAAAAAAs"]
[Sat Feb 21 07:05:30.410710 2026] [:error] [pid 22558:tid 22583] [client 104.46.216.98:59137] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aZjouirVaIb2gXsVbDpQJQAAARc"]
[Sat Feb 21 07:05:30.770341 2026] [:error] [pid 22558:tid 22578] [client 104.46.216.98:59178] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aZjouirVaIb2gXsVbDpQKAAAARI"]
[Sat Feb 21 07:05:31.129210 2026] [:error] [pid 40871:tid 40896] [client 104.46.216.98:59172] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aZjouzqDikjdiOZeJyXceQAAANc"]
[Sat Feb 21 07:05:32.641199 2026] [:error] [pid 40756:tid 40778] [client 104.46.216.98:59099] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aZjovANlDP60sLYgqXLuCAAAAAw"]
[Sat Feb 21 07:05:33.531846 2026] [:error] [pid 40757:tid 40798] [client 104.46.216.98:59115] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aZjovag_MKVL7zhH7dxNLQAAAEM"]
[Sat Feb 21 07:05:34.073629 2026] [:error] [pid 40758:tid 40829] [client 104.46.216.98:59132] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aZjovkBAHxvBM3i9iKG-ZQAAAIc"]
[Sat Feb 21 07:05:34.631332 2026] [:error] [pid 40758:tid 40838] [client 104.46.216.98:59159] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aZjovkBAHxvBM3i9iKG-ZgAAAJA"]
[Sat Feb 21 07:05:35.090870 2026] [:error] [pid 40871:tid 40893] [client 104.46.216.98:59089] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aZjovzqDikjdiOZeJyXcfAAAANQ"]
[Sat Feb 21 07:05:35.434851 2026] [:error] [pid 40756:tid 40786] [client 104.46.216.98:59138] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aZjovwNlDP60sLYgqXLuDQAAABQ"]
[Sat Feb 21 07:05:35.762270 2026] [:error] [pid 40757:tid 40801] [client 104.46.216.98:59077] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aZjov6g_MKVL7zhH7dxNOAAAAEY"]
[Sat Feb 21 07:05:36.266225 2026] [:error] [pid 22558:tid 22560] [client 104.46.216.98:59116] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aZjowCrVaIb2gXsVbDpQMgAAAQA"]
[Sat Feb 21 07:05:36.666922 2026] [:error] [pid 22558:tid 22570] [client 104.46.216.98:59085] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aZjowCrVaIb2gXsVbDpQNAAAAQo"]
[Sat Feb 21 07:05:37.755010 2026] [:error] [pid 40871:tid 40891] [client 104.46.216.98:59146] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aZjowTqDikjdiOZeJyXcgAAAANI"]
[Sat Feb 21 07:05:38.278659 2026] [:error] [pid 40871:tid 40895] [client 104.46.216.98:59110] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aZjowjqDikjdiOZeJyXchAAAANY"]
[Sat Feb 21 07:05:39.524457 2026] [:error] [pid 40871:tid 40897] [client 104.46.216.98:59088] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aZjowzqDikjdiOZeJyXcjgAAANg"]
[Sat Feb 21 07:05:39.876620 2026] [:error] [pid 40871:tid 40880] [client 104.46.216.98:59154] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-file.php"] [unique_id "aZjowzqDikjdiOZeJyXckQAAAMc"]
[Sat Feb 21 07:05:40.434195 2026] [:error] [pid 40757:tid 40819] [client 104.46.216.98:59160] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-file.php"] [unique_id "aZjoxKg_MKVL7zhH7dxNQAAAAFg"]
[Sat Feb 21 07:05:41.151799 2026] [:error] [pid 40756:tid 40782] [client 104.46.216.98:59152] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-file.php"] [unique_id "aZjoxQNlDP60sLYgqXLuFAAAABA"]
[Sat Feb 21 07:05:41.959308 2026] [:error] [pid 22558:tid 22579] [client 104.46.216.98:59122] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-file.php"] [unique_id "aZjoxSrVaIb2gXsVbDpQOwAAARM"]
[Sat Feb 21 07:05:42.536632 2026] [:error] [pid 40871:tid 40885] [client 104.46.216.98:59176] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aZjoxjqDikjdiOZeJyXcngAAAMw"]
[Sat Feb 21 07:05:42.848446 2026] [:error] [pid 22558:tid 22569] [client 104.46.216.98:59098] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aZjoxirVaIb2gXsVbDpQQAAAAQk"]
[Sat Feb 21 07:05:43.275123 2026] [:error] [pid 40757:tid 40801] [client 104.46.216.98:59156] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aZjox6g_MKVL7zhH7dxNSwAAAEY"]
[Sat Feb 21 07:05:43.702266 2026] [:error] [pid 22558:tid 22580] [client 104.46.216.98:59108] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php"] [unique_id "aZjoxyrVaIb2gXsVbDpQQQAAARQ"]
[Sat Feb 21 07:05:44.063438 2026] [:error] [pid 22558:tid 22564] [client 104.46.216.98:59181] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZjoyCrVaIb2gXsVbDpQQgAAAQQ"]
[Sat Feb 21 07:05:44.354088 2026] [:error] [pid 40757:tid 40807] [client 104.46.216.98:59179] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZjoyKg_MKVL7zhH7dxNVgAAAEw"]
[Sat Feb 21 07:05:44.683323 2026] [:error] [pid 22558:tid 22562] [client 104.46.216.98:59091] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZjoyCrVaIb2gXsVbDpQRAAAAQI"]
[Sat Feb 21 07:05:45.324964 2026] [:error] [pid 22558:tid 22570] [client 104.46.216.98:59136] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZjoySrVaIb2gXsVbDpQRgAAAQo"]
[Sat Feb 21 07:05:47.027041 2026] [:error] [pid 40757:tid 40798] [client 104.46.216.98:59097] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aZjoy6g_MKVL7zhH7dxNXwAAAEM"]
[Sat Feb 21 07:05:47.813710 2026] [:error] [pid 40871:tid 40892] [client 104.46.216.98:59173] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aZjoyzqDikjdiOZeJyXcrQAAANM"]
[Sat Feb 21 07:05:48.696656 2026] [:error] [pid 22558:tid 22565] [client 104.46.216.98:59010] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aZjozCrVaIb2gXsVbDpQUAAAAQU"]
[Sat Feb 21 07:05:49.718513 2026] [:error] [pid 40758:tid 40845] [client 104.46.216.98:59009] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aZjozUBAHxvBM3i9iKG-cwAAAJc"]
[Sat Feb 21 07:05:50.254376 2026] [:error] [pid 22558:tid 22568] [client 104.46.216.98:59047] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aZjozirVaIb2gXsVbDpQVAAAAQg"]
[Sat Feb 21 07:05:50.569962 2026] [:error] [pid 40758:tid 40834] [client 104.46.216.98:59130] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aZjozkBAHxvBM3i9iKG-dQAAAIw"]
[Sat Feb 21 07:05:50.956371 2026] [:error] [pid 40756:tid 40773] [client 104.46.216.98:59081] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aZjozgNlDP60sLYgqXLuIAAAAAc"]
[Sat Feb 21 07:05:51.340334 2026] [:error] [pid 22558:tid 22583] [client 104.46.216.98:59111] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aZjozyrVaIb2gXsVbDpQVgAAARc"]
[Sat Feb 21 07:05:51.695708 2026] [:error] [pid 40757:tid 40799] [client 104.46.216.98:59196] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aZjoz6g_MKVL7zhH7dxNYgAAAEQ"]
[Sat Feb 21 07:05:52.057016 2026] [:error] [pid 40758:tid 40837] [client 104.46.216.98:59171] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aZjo0EBAHxvBM3i9iKG-egAAAI8"]
[Sat Feb 21 07:05:52.552986 2026] [:error] [pid 40758:tid 40835] [client 104.46.216.98:59198] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aZjo0EBAHxvBM3i9iKG-fQAAAI0"]
[Sat Feb 21 07:05:54.258708 2026] [:error] [pid 40758:tid 40839] [client 104.46.216.98:59019] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aZjo0kBAHxvBM3i9iKG-fgAAAJE"]
[Sat Feb 21 07:05:55.130621 2026] [:error] [pid 40758:tid 40822] [client 104.46.216.98:59040] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/file.php"] [unique_id "aZjo00BAHxvBM3i9iKG-gAAAAIA"]
[Sat Feb 21 07:05:56.380452 2026] [:error] [pid 40757:tid 40799] [client 104.46.216.98:59184] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/file.php"] [unique_id "aZjo1Kg_MKVL7zhH7dxNcQAAAEQ"]
[Sat Feb 21 07:05:58.124198 2026] [:error] [pid 22558:tid 22580] [client 104.46.216.98:49689] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/file.php"] [unique_id "aZjo1irVaIb2gXsVbDpQYgAAARQ"]
[Sat Feb 21 07:05:59.251430 2026] [:error] [pid 40871:tid 40881] [client 104.46.216.98:49716] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/file.php"] [unique_id "aZjo1zqDikjdiOZeJyXcvAAAAMg"]
[Sat Feb 21 07:06:00.905615 2026] [:error] [pid 22558:tid 22574] [client 104.46.216.98:49513] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aZjo2CrVaIb2gXsVbDpQaQAAAQ4"]
[Sat Feb 21 07:06:01.192771 2026] [:error] [pid 40758:tid 40840] [client 104.46.216.98:49486] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aZjo2UBAHxvBM3i9iKG-jQAAAJI"]
[Sat Feb 21 07:06:01.552429 2026] [:error] [pid 22558:tid 22569] [client 104.46.216.98:59010] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aZjo2SrVaIb2gXsVbDpQbQAAAQk"]
[Sat Feb 21 07:06:01.925148 2026] [:error] [pid 22558:tid 22566] [client 104.46.216.98:49494] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aZjo2SrVaIb2gXsVbDpQbgAAAQY"]
[Sat Feb 21 07:06:02.518084 2026] [:error] [pid 40871:tid 40882] [client 104.46.216.98:49667] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aZjo2jqDikjdiOZeJyXcyQAAAMk"]
[Sat Feb 21 07:06:03.153406 2026] [:error] [pid 40758:tid 40842] [client 104.46.216.98:49474] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aZjo20BAHxvBM3i9iKG-jwAAAJQ"]
[Sat Feb 21 07:06:04.529482 2026] [:error] [pid 40871:tid 40886] [client 104.46.216.98:49679] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aZjo3DqDikjdiOZeJyXczAAAAM0"]
[Sat Feb 21 07:06:05.489737 2026] [:error] [pid 22558:tid 22572] [client 104.46.216.98:49686] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aZjo3SrVaIb2gXsVbDpQegAAAQw"]
[Sat Feb 21 07:06:06.158675 2026] [:error] [pid 40756:tid 40773] [client 104.46.216.98:49496] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZjo3gNlDP60sLYgqXLuKwAAAAc"]
[Sat Feb 21 07:06:06.631039 2026] [:error] [pid 40758:tid 40828] [client 104.46.216.98:49472] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZjo3kBAHxvBM3i9iKG-ogAAAIY"]
[Sat Feb 21 07:06:09.474271 2026] [:error] [pid 40757:tid 40802] [client 104.46.216.98:49495] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZjo4ag_MKVL7zhH7dxNhAAAAEc"]
[Sat Feb 21 07:06:12.151565 2026] [proxy_fcgi:error] [pid 22558:tid 22576] [client 104.46.216.98:49481] AH01071: Got error 'Primary script unknown'
[Sat Feb 21 07:06:12.267862 2026] [:error] [pid 22558:tid 22582] [client 104.46.216.98:49481] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZjo5CrVaIb2gXsVbDpQoQAAARY"]
[Sat Feb 21 07:06:13.161020 2026] [:error] [pid 22558:tid 22584] [client 104.46.216.98:49501] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZjo5SrVaIb2gXsVbDpQpgAAARg"]
[Sat Feb 21 07:06:13.578095 2026] [:error] [pid 40871:tid 40888] [client 104.46.216.98:49669] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZjo5TqDikjdiOZeJyXc3wAAAM8"]
[Sat Feb 21 07:06:14.019436 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:49721] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZjo5irVaIb2gXsVbDpQqgAAAQs"]
[Sat Feb 21 07:06:14.305477 2026] [:error] [pid 22558:tid 22577] [client 104.46.216.98:49473] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aZjo5irVaIb2gXsVbDpQqwAAARE"]
[Sat Feb 21 07:06:14.580324 2026] [:error] [pid 40871:tid 40881] [client 104.46.216.98:49488] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aZjo5jqDikjdiOZeJyXc4gAAAMg"]
[Sat Feb 21 07:06:14.900438 2026] [:error] [pid 40757:tid 40809] [client 104.46.216.98:49691] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aZjo5qg_MKVL7zhH7dxNjQAAAE4"]
[Sat Feb 21 07:06:15.299709 2026] [:error] [pid 40758:tid 40843] [client 104.46.216.98:59164] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aZjo50BAHxvBM3i9iKG-qAAAAJU"]
[Sat Feb 21 07:06:16.533230 2026] [:error] [pid 40757:tid 40807] [client 104.46.216.98:49687] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aZjo6Kg_MKVL7zhH7dxNkgAAAEw"]
[Sat Feb 21 07:06:16.950737 2026] [:error] [pid 40871:tid 40877] [client 104.46.216.98:49695] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aZjo6DqDikjdiOZeJyXc5AAAAMQ"]
[Sat Feb 21 07:06:17.419085 2026] [:error] [pid 40757:tid 40814] [client 104.46.216.98:49707] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aZjo6ag_MKVL7zhH7dxNlQAAAFM"]
[Sat Feb 21 07:06:17.718521 2026] [:error] [pid 22558:tid 22582] [client 104.46.216.98:49671] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aZjo6SrVaIb2gXsVbDpQrwAAARY"]
[Sat Feb 21 07:06:18.140710 2026] [:error] [pid 40871:tid 40873] [client 104.46.216.98:49690] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aZjo6jqDikjdiOZeJyXc5QAAAMA"]
[Sat Feb 21 07:06:18.453159 2026] [:error] [pid 40757:tid 40796] [client 104.46.216.98:49714] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aZjo6qg_MKVL7zhH7dxNmAAAAEE"]
[Sat Feb 21 07:06:18.703402 2026] [:error] [pid 40871:tid 40874] [client 104.46.216.98:49710] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aZjo6jqDikjdiOZeJyXc5gAAAME"]
[Sat Feb 21 07:06:18.986607 2026] [:error] [pid 22558:tid 22575] [client 104.46.216.98:59162] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aZjo6irVaIb2gXsVbDpQsgAAAQ8"]
[Sat Feb 21 07:06:19.288626 2026] [:error] [pid 22558:tid 22578] [client 104.46.216.98:49477] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/theme.php"] [unique_id "aZjo6yrVaIb2gXsVbDpQtAAAARI"]
[Sat Feb 21 07:06:19.816895 2026] [:error] [pid 40756:tid 40775] [client 104.46.216.98:49497] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/theme.php"] [unique_id "aZjo6wNlDP60sLYgqXLuQwAAAAk"]
[Sat Feb 21 07:06:20.566410 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:49675] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/theme.php"] [unique_id "aZjo7CrVaIb2gXsVbDpQuQAAAQs"]
[Sat Feb 21 07:06:20.979063 2026] [:error] [pid 22558:tid 22574] [client 104.46.216.98:49713] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/theme.php"] [unique_id "aZjo7CrVaIb2gXsVbDpQvQAAAQ4"]
[Sat Feb 21 07:06:21.461208 2026] [:error] [pid 40756:tid 40783] [client 104.46.216.98:49704] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aZjo7QNlDP60sLYgqXLuSAAAABE"]
[Sat Feb 21 07:06:22.036856 2026] [:error] [pid 40871:tid 40890] [client 104.46.216.98:49673] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aZjo7jqDikjdiOZeJyXc7QAAANE"]
[Sat Feb 21 07:06:22.282133 2026] [:error] [pid 40758:tid 40839] [client 104.46.216.98:49701] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aZjo7kBAHxvBM3i9iKG-swAAAJE"]
[Sat Feb 21 07:06:22.728933 2026] [:error] [pid 40756:tid 40784] [client 104.46.216.98:49528] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aZjo7gNlDP60sLYgqXLuTQAAABI"]
[Sat Feb 21 07:06:23.363124 2026] [:error] [pid 40758:tid 40822] [client 104.46.216.98:49703] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aZjo70BAHxvBM3i9iKG-tAAAAIA"]
[Sat Feb 21 07:06:23.679251 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:49672] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/st.php"] [unique_id "aZjo7yrVaIb2gXsVbDpQyAAAAQs"]
[Sat Feb 21 07:06:24.145635 2026] [:error] [pid 40758:tid 40845] [client 104.46.216.98:49727] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/st.php"] [unique_id "aZjo8EBAHxvBM3i9iKG-twAAAJc"]
[Sat Feb 21 07:06:24.884846 2026] [:error] [pid 40871:tid 40893] [client 104.46.216.98:49697] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/st.php"] [unique_id "aZjo8DqDikjdiOZeJyXc-AAAANQ"]
[Sat Feb 21 07:06:25.301689 2026] [:error] [pid 22558:tid 22572] [client 104.46.216.98:59119] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/st.php"] [unique_id "aZjo8SrVaIb2gXsVbDpQzAAAAQw"]
[Sat Feb 21 07:06:25.570909 2026] [:error] [pid 40758:tid 40824] [client 104.46.216.98:49702] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZjo8UBAHxvBM3i9iKG-vwAAAII"]
[Sat Feb 21 07:06:25.846613 2026] [:error] [pid 40756:tid 40773] [client 104.46.216.98:49480] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZjo8QNlDP60sLYgqXLuUgAAAAc"]
[Sat Feb 21 07:06:26.212903 2026] [:error] [pid 40757:tid 40797] [client 104.46.216.98:49711] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZjo8qg_MKVL7zhH7dxNoAAAAEI"]
[Sat Feb 21 07:06:26.584528 2026] [:error] [pid 40871:tid 40897] [client 104.46.216.98:49724] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aZjo8jqDikjdiOZeJyXdAQAAANg"]
[Sat Feb 21 07:06:26.844825 2026] [:error] [pid 40871:tid 40885] [client 104.46.216.98:59096] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aZjo8jqDikjdiOZeJyXdAgAAAMw"]
[Sat Feb 21 07:06:27.178915 2026] [:error] [pid 40757:tid 40801] [client 104.46.216.98:49696] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aZjo86g_MKVL7zhH7dxNowAAAEY"]
[Sat Feb 21 07:06:27.611307 2026] [:error] [pid 40758:tid 40830] [client 104.46.216.98:49521] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aZjo80BAHxvBM3i9iKG-wgAAAIg"]
[Sat Feb 21 07:06:28.305737 2026] [:error] [pid 22558:tid 22578] [client 104.46.216.98:49514] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aZjo9CrVaIb2gXsVbDpQ0QAAARI"]
[Sat Feb 21 07:06:28.758705 2026] [:error] [pid 40758:tid 40834] [client 104.46.216.98:59029] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aZjo9EBAHxvBM3i9iKG-xgAAAIw"]
[Sat Feb 21 07:06:29.513416 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:49676] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aZjo9SrVaIb2gXsVbDpQ1QAAAQs"]
[Sat Feb 21 07:06:31.023834 2026] [:error] [pid 40756:tid 40779] [client 104.46.216.98:50787] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aZjo9wNlDP60sLYgqXLuVQAAAA0"]
[Sat Feb 21 07:06:36.530705 2026] [:error] [pid 40758:tid 40835] [client 104.46.216.98:50942] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aZjo_EBAHxvBM3i9iKG-2QAAAI0"]
[Sat Feb 21 07:06:37.298447 2026] [:error] [pid 22558:tid 22582] [client 104.46.216.98:50903] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZjo_SrVaIb2gXsVbDpQ6gAAARY"]
[Sat Feb 21 07:06:38.692211 2026] [:error] [pid 40871:tid 40896] [client 104.46.216.98:50759] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZjo_jqDikjdiOZeJyXdGgAAANc"]
[Sat Feb 21 07:06:39.161999 2026] [:error] [pid 40758:tid 40830] [client 104.46.216.98:50915] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZjo_0BAHxvBM3i9iKG-2gAAAIg"]
[Sat Feb 21 07:06:39.769590 2026] [:error] [pid 40758:tid 40843] [client 104.46.216.98:50921] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZjo_0BAHxvBM3i9iKG-3gAAAJU"]
[Sat Feb 21 07:06:40.209917 2026] [:error] [pid 22558:tid 22582] [client 104.46.216.98:50897] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZjpACrVaIb2gXsVbDpQ8QAAARY"]
[Sat Feb 21 07:06:41.057685 2026] [:error] [pid 40756:tid 40777] [client 104.46.216.98:50777] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aZjpAQNlDP60sLYgqXLuWQAAAAs"]
[Sat Feb 21 07:06:41.504222 2026] [:error] [pid 40756:tid 40790] [client 104.46.216.98:50889] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aZjpAQNlDP60sLYgqXLuWgAAABg"]
[Sat Feb 21 07:06:41.899077 2026] [:error] [pid 40756:tid 40766] [client 104.46.216.98:50892] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aZjpAQNlDP60sLYgqXLuWwAAAAA"]
[Sat Feb 21 07:06:42.269974 2026] [:error] [pid 40871:tid 40894] [client 104.46.216.98:50938] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aZjpAjqDikjdiOZeJyXdHwAAANU"]
[Sat Feb 21 07:06:42.659362 2026] [:error] [pid 22558:tid 22573] [client 104.46.216.98:50789] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-signup.php"] [unique_id "aZjpAirVaIb2gXsVbDpQ-gAAAQ0"]
[Sat Feb 21 07:06:43.150661 2026] [:error] [pid 40871:tid 40890] [client 104.46.216.98:50780] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-signup.php"] [unique_id "aZjpAzqDikjdiOZeJyXdIAAAANE"]
[Sat Feb 21 07:06:44.106608 2026] [:error] [pid 40871:tid 40895] [client 104.46.216.98:50805] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-signup.php"] [unique_id "aZjpBDqDikjdiOZeJyXdJwAAANY"]
[Sat Feb 21 07:06:44.660332 2026] [:error] [pid 40756:tid 40783] [client 104.46.216.98:50761] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-signup.php"] [unique_id "aZjpBANlDP60sLYgqXLuYAAAABE"]
[Sat Feb 21 07:06:45.181336 2026] [:error] [pid 40871:tid 40879] [client 104.46.216.98:50932] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signup.php"] [unique_id "aZjpBTqDikjdiOZeJyXdKQAAAMY"]
[Sat Feb 21 07:06:45.507613 2026] [:error] [pid 40756:tid 40772] [client 104.46.216.98:50881] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signup.php"] [unique_id "aZjpBQNlDP60sLYgqXLuZAAAAAY"]
[Sat Feb 21 07:06:45.924630 2026] [:error] [pid 40871:tid 40873] [client 104.46.216.98:50779] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signup.php"] [unique_id "aZjpBTqDikjdiOZeJyXdLQAAAMA"]
[Sat Feb 21 07:06:46.166461 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:49699] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signup.php"] [unique_id "aZjpBirVaIb2gXsVbDpRBAAAAQs"]
[Sat Feb 21 07:06:46.444028 2026] [:error] [pid 22558:tid 22573] [client 104.46.216.98:50924] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aZjpBirVaIb2gXsVbDpRBgAAAQ0"]
[Sat Feb 21 07:06:46.728386 2026] [:error] [pid 22558:tid 22583] [client 104.46.216.98:49710] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aZjpBirVaIb2gXsVbDpRCAAAARc"]
[Sat Feb 21 07:06:46.976232 2026] [:error] [pid 40756:tid 40767] [client 104.46.216.98:50788] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aZjpBgNlDP60sLYgqXLuaQAAAAE"]
[Sat Feb 21 07:06:47.575046 2026] [:error] [pid 22558:tid 22578] [client 104.46.216.98:50901] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aZjpByrVaIb2gXsVbDpRCgAAARI"]
[Sat Feb 21 07:06:47.988931 2026] [:error] [pid 40757:tid 40815] [client 104.46.216.98:50773] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aZjpB6g_MKVL7zhH7dxNyAAAAFQ"]
[Sat Feb 21 07:06:48.293144 2026] [:error] [pid 40758:tid 40839] [client 104.46.216.98:50804] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aZjpCEBAHxvBM3i9iKG-5QAAAJE"]
[Sat Feb 21 07:06:48.631223 2026] [:error] [pid 40757:tid 40802] [client 104.46.216.98:49668] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aZjpCKg_MKVL7zhH7dxNywAAAEc"]
[Sat Feb 21 07:06:49.103272 2026] [:error] [pid 40757:tid 40801] [client 104.46.216.98:49708] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aZjpCag_MKVL7zhH7dxNzQAAAEY"]
[Sat Feb 21 07:06:49.394298 2026] [:error] [pid 40757:tid 40803] [client 104.46.216.98:50798] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aZjpCag_MKVL7zhH7dxNzgAAAEg"]
[Sat Feb 21 07:06:49.822279 2026] [:error] [pid 40756:tid 40783] [client 104.46.216.98:50917] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aZjpCQNlDP60sLYgqXLucwAAABE"]
[Sat Feb 21 07:06:50.669375 2026] [:error] [pid 40757:tid 40808] [client 104.46.216.98:50900] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aZjpCqg_MKVL7zhH7dxN0gAAAE0"]
[Sat Feb 21 07:06:52.301935 2026] [:error] [pid 40756:tid 40774] [client 104.46.216.98:50885] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aZjpDANlDP60sLYgqXLueQAAAAg"]
[Sat Feb 21 07:06:53.450081 2026] [:error] [pid 22558:tid 22578] [client 104.46.216.98:50928] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aZjpDSrVaIb2gXsVbDpRFgAAARI"]
[Sat Feb 21 07:06:54.050449 2026] [:error] [pid 40757:tid 40816] [client 104.46.216.98:50916] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aZjpDqg_MKVL7zhH7dxN1AAAAFU"]
[Sat Feb 21 07:06:54.588140 2026] [:error] [pid 40757:tid 40807] [client 104.46.216.98:50774] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aZjpDqg_MKVL7zhH7dxN1QAAAEw"]
[Sat Feb 21 07:06:55.366230 2026] [:error] [pid 22558:tid 22576] [client 104.46.216.98:50898] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aZjpDyrVaIb2gXsVbDpRGgAAARA"]
[Sat Feb 21 07:06:55.795305 2026] [:error] [pid 40756:tid 40775] [client 104.46.216.98:50772] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aZjpDwNlDP60sLYgqXLugQAAAAk"]
[Sat Feb 21 07:06:56.239639 2026] [:error] [pid 40758:tid 40827] [client 104.46.216.98:50758] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aZjpEEBAHxvBM3i9iKG-7AAAAIU"]
[Sat Feb 21 07:06:56.701809 2026] [:error] [pid 40758:tid 40833] [client 104.46.216.98:50782] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aZjpEEBAHxvBM3i9iKG-7gAAAIs"]
[Sat Feb 21 07:06:57.071081 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:50754] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aZjpESrVaIb2gXsVbDpRIAAAAQs"]
[Sat Feb 21 07:06:57.931074 2026] [:error] [pid 40757:tid 40809] [client 104.46.216.98:50765] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aZjpEag_MKVL7zhH7dxN3QAAAE4"]
[Sat Feb 21 07:06:58.493290 2026] [:error] [pid 40756:tid 40774] [client 104.46.216.98:50812] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aZjpEgNlDP60sLYgqXLuhwAAAAg"]
[Sat Feb 21 07:06:59.557945 2026] [:error] [pid 40758:tid 40825] [client 104.46.216.98:50776] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aZjpE0BAHxvBM3i9iKG-8QAAAIM"]
[Sat Feb 21 07:07:00.369243 2026] [:error] [pid 40756:tid 40767] [client 104.46.216.98:59157] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aZjpFANlDP60sLYgqXLuiQAAAAE"]
[Sat Feb 21 07:07:01.760329 2026] [:error] [pid 22558:tid 22563] [client 104.46.216.98:50933] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZjpFSrVaIb2gXsVbDpRKAAAAQM"]
[Sat Feb 21 07:07:02.631163 2026] [:error] [pid 40758:tid 40842] [client 104.46.216.98:54187] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZjpFkBAHxvBM3i9iKG-9wAAAJQ"]
[Sat Feb 21 07:07:03.177367 2026] [:error] [pid 40757:tid 40800] [client 104.46.216.98:54201] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aZjpF6g_MKVL7zhH7dxN5QAAAEU"]
[Sat Feb 21 07:07:03.664592 2026] [:error] [pid 40758:tid 40830] [client 104.46.216.98:54197] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aZjpF0BAHxvBM3i9iKG--AAAAIg"]
[Sat Feb 21 07:07:04.087130 2026] [:error] [pid 22558:tid 22570] [client 104.46.216.98:53835] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aZjpGCrVaIb2gXsVbDpRLAAAAQo"]
[Sat Feb 21 07:07:04.572867 2026] [:error] [pid 40871:tid 40896] [client 104.46.216.98:54171] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aZjpGDqDikjdiOZeJyXdNgAAANc"]
[Sat Feb 21 07:07:05.039169 2026] [:error] [pid 40871:tid 40891] [client 104.46.216.98:53848] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aZjpGTqDikjdiOZeJyXdOAAAANI"]
[Sat Feb 21 07:07:06.384878 2026] [:error] [pid 22558:tid 22567] [client 104.46.216.98:54170] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aZjpGirVaIb2gXsVbDpRNAAAAQc"]
[Sat Feb 21 07:07:06.953449 2026] [:error] [pid 22558:tid 22560] [client 104.46.216.98:53828] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aZjpGirVaIb2gXsVbDpRNQAAAQA"]
[Sat Feb 21 07:07:08.239843 2026] [:error] [pid 40871:tid 40893] [client 104.46.216.98:50805] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aZjpHDqDikjdiOZeJyXdOgAAANQ"]
[Sat Feb 21 07:07:09.038380 2026] [:error] [pid 40757:tid 40813] [client 104.46.216.98:53866] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aZjpHag_MKVL7zhH7dxN6wAAAFI"]
[Sat Feb 21 07:07:09.769719 2026] [:error] [pid 40757:tid 40819] [client 104.46.216.98:53836] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aZjpHag_MKVL7zhH7dxN7AAAAFg"]
[Sat Feb 21 07:07:10.107144 2026] [:error] [pid 40758:tid 40843] [client 104.46.216.98:54158] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aZjpHkBAHxvBM3i9iKG--wAAAJU"]
[Sat Feb 21 07:07:11.057748 2026] [:error] [pid 40758:tid 40838] [client 104.46.216.98:53831] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aZjpH0BAHxvBM3i9iKG-_QAAAJA"]
[Sat Feb 21 07:07:11.527191 2026] [:error] [pid 40756:tid 40784] [client 104.46.216.98:54156] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aZjpHwNlDP60sLYgqXLukQAAABI"]
[Sat Feb 21 07:07:13.271982 2026] [:error] [pid 40871:tid 40895] [client 104.46.216.98:54176] [client 104.46.216.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.46.216.98, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZjpITqDikjdiOZeJyXdQQAAANY"]
[Sat Feb 21 07:07:14.747044 2026] [:error] [pid 22558:tid 22580] [client 104.46.216.98:53838] [client 104.46.216.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.46.216.98, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZjpIirVaIb2gXsVbDpRPQAAARQ"]
[Sat Feb 21 07:07:14.990901 2026] [:error] [pid 40871:tid 40886] [client 104.46.216.98:54176] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZjpIjqDikjdiOZeJyXdRAAAAM0"]
[Sat Feb 21 07:07:18.588611 2026] [:error] [pid 40871:tid 40894] [client 104.46.216.98:54202] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZjpJjqDikjdiOZeJyXdUAAAANU"]
[Sat Feb 21 07:07:20.561229 2026] [:error] [pid 40871:tid 40880] [client 104.46.216.98:54190] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZjpKDqDikjdiOZeJyXdUwAAAMc"]
[Sat Feb 21 07:07:23.695597 2026] [:error] [pid 40757:tid 40809] [client 104.46.216.98:53845] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aZjpK6g_MKVL7zhH7dxN9gAAAE4"]
[Sat Feb 21 07:07:24.879320 2026] [:error] [pid 22558:tid 22572] [client 104.46.216.98:53857] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aZjpLCrVaIb2gXsVbDpRWgAAAQw"]
[Sat Feb 21 07:07:25.212945 2026] [:error] [pid 22558:tid 22567] [client 104.46.216.98:50927] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aZjpLSrVaIb2gXsVbDpRXAAAAQc"]
[Sat Feb 21 07:07:25.632656 2026] [:error] [pid 40871:tid 40891] [client 104.46.216.98:53859] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aZjpLTqDikjdiOZeJyXdVQAAANI"]
[Sat Feb 21 07:07:26.056645 2026] [:error] [pid 40756:tid 40789] [client 104.46.216.98:54178] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aZjpLgNlDP60sLYgqXLuoQAAABc"]
[Sat Feb 21 07:07:26.413121 2026] [:error] [pid 40871:tid 40878] [client 104.46.216.98:49671] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aZjpLjqDikjdiOZeJyXdVgAAAMU"]
[Sat Feb 21 07:07:26.974483 2026] [:error] [pid 22558:tid 22562] [client 104.46.216.98:54148] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aZjpLirVaIb2gXsVbDpRXwAAAQI"]
[Sat Feb 21 07:07:27.383454 2026] [:error] [pid 40871:tid 40889] [client 104.46.216.98:50800] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aZjpLzqDikjdiOZeJyXdWQAAANA"]
[Sat Feb 21 07:07:28.138112 2026] [:error] [pid 40757:tid 40801] [client 104.46.216.98:54181] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aZjpMKg_MKVL7zhH7dxN9wAAAEY"]
[Sat Feb 21 07:07:28.478257 2026] [:error] [pid 40756:tid 40778] [client 104.46.216.98:53837] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aZjpMANlDP60sLYgqXLupQAAAAw"]
[Sat Feb 21 07:07:28.806829 2026] [:error] [pid 40756:tid 40790] [client 104.46.216.98:53858] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aZjpMANlDP60sLYgqXLupgAAABg"]
[Sat Feb 21 07:07:29.639234 2026] [:error] [pid 40758:tid 40833] [client 104.46.216.98:54186] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aZjpMUBAHxvBM3i9iKG_CgAAAIs"]
[Sat Feb 21 07:07:30.152873 2026] [:error] [pid 40757:tid 40811] [client 104.46.216.98:54188] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aZjpMqg_MKVL7zhH7dxN-AAAAFA"]
[Sat Feb 21 07:07:30.413638 2026] [:error] [pid 40757:tid 40798] [client 104.46.216.98:53843] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aZjpMqg_MKVL7zhH7dxN-QAAAEM"]
[Sat Feb 21 07:07:30.802530 2026] [:error] [pid 40756:tid 40782] [client 104.46.216.98:53867] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aZjpMgNlDP60sLYgqXLupwAAABA"]
[Sat Feb 21 07:07:31.241320 2026] [:error] [pid 22558:tid 22561] [client 104.46.216.98:53841] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aZjpMyrVaIb2gXsVbDpRYAAAAQE"]
[Sat Feb 21 07:07:31.739735 2026] [:error] [pid 40871:tid 40873] [client 104.46.216.98:53852] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko-new.php"] [unique_id "aZjpMzqDikjdiOZeJyXdWwAAAMA"]
[Sat Feb 21 07:07:32.126172 2026] [:error] [pid 40871:tid 40892] [client 104.46.216.98:59118] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko-new.php"] [unique_id "aZjpNDqDikjdiOZeJyXdXAAAANM"]
[Sat Feb 21 07:07:32.540651 2026] [:error] [pid 22558:tid 22573] [client 104.46.216.98:54189] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko-new.php"] [unique_id "aZjpNCrVaIb2gXsVbDpRYgAAAQ0"]
[Sat Feb 21 07:07:33.224399 2026] [:error] [pid 40758:tid 40824] [client 104.46.216.98:50905] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko-new.php"] [unique_id "aZjpNUBAHxvBM3i9iKG_DAAAAII"]
[Sat Feb 21 07:07:33.733873 2026] [:error] [pid 22558:tid 22584] [client 104.46.216.98:53830] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aZjpNSrVaIb2gXsVbDpRYwAAARg"]
[Sat Feb 21 07:07:34.831098 2026] [:error] [pid 22558:tid 22567] [client 104.46.216.98:55539] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aZjpNirVaIb2gXsVbDpRaAAAAQc"]
[Sat Feb 21 07:07:35.704345 2026] [:error] [pid 40757:tid 40812] [client 104.46.216.98:55533] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aZjpN6g_MKVL7zhH7dxOAAAAAFE"]
[Sat Feb 21 07:07:36.310300 2026] [:error] [pid 40756:tid 40771] [client 104.46.216.98:55498] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aZjpOANlDP60sLYgqXLuqAAAAAU"]
[Sat Feb 21 07:07:36.677883 2026] [:error] [pid 40756:tid 40772] [client 104.46.216.98:55538] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZjpOANlDP60sLYgqXLuqQAAAAY"]
[Sat Feb 21 07:07:37.205365 2026] [:error] [pid 22558:tid 22581] [client 104.46.216.98:55509] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZjpOSrVaIb2gXsVbDpRagAAARU"]
[Sat Feb 21 07:07:38.501347 2026] [:error] [pid 40758:tid 40828] [client 104.46.216.98:55235] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZjpOkBAHxvBM3i9iKG_EgAAAIY"]
[Sat Feb 21 07:07:39.443306 2026] [:error] [pid 40758:tid 40837] [client 104.46.216.98:55260] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZjpO0BAHxvBM3i9iKG_FgAAAI8"]
[Sat Feb 21 07:07:40.590215 2026] [:error] [pid 40757:tid 40797] [client 104.46.216.98:55243] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aZjpPKg_MKVL7zhH7dxOBwAAAEI"]
[Sat Feb 21 07:07:41.788416 2026] [:error] [pid 40757:tid 40819] [client 104.46.216.98:55546] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aZjpPag_MKVL7zhH7dxOCgAAAFg"]
[Sat Feb 21 07:07:42.660743 2026] [:error] [pid 22558:tid 22562] [client 104.46.216.98:55288] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aZjpPirVaIb2gXsVbDpRbQAAAQI"]
[Sat Feb 21 07:07:43.997366 2026] [:error] [pid 22558:tid 22578] [client 104.46.216.98:55530] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aZjpPyrVaIb2gXsVbDpRcwAAARI"]
[Sat Feb 21 07:07:44.977619 2026] [:error] [pid 40757:tid 40810] [client 104.46.216.98:55251] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZjpQKg_MKVL7zhH7dxODgAAAE8"]
[Sat Feb 21 07:07:45.697430 2026] [:error] [pid 40871:tid 40887] [client 104.46.216.98:55239] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZjpQTqDikjdiOZeJyXdZgAAAM4"]
[Sat Feb 21 07:07:47.092006 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:55518] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZjpQyrVaIb2gXsVbDpRegAAAQs"]
[Sat Feb 21 07:07:48.191229 2026] [:error] [pid 40758:tid 40825] [client 104.46.216.98:55540] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZjpREBAHxvBM3i9iKG_GwAAAIM"]
[Sat Feb 21 07:07:49.373908 2026] [:error] [pid 40758:tid 40823] [client 104.46.216.98:55291] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aZjpRUBAHxvBM3i9iKG_HQAAAIE"]
[Sat Feb 21 07:07:50.013288 2026] [:error] [pid 40871:tid 40880] [client 104.46.216.98:55236] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aZjpRjqDikjdiOZeJyXdaQAAAMc"]
[Sat Feb 21 07:07:50.798358 2026] [:error] [pid 40757:tid 40802] [client 104.46.216.98:55496] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aZjpRqg_MKVL7zhH7dxOGgAAAEc"]
[Sat Feb 21 07:07:51.721197 2026] [:error] [pid 40758:tid 40839] [client 104.46.216.98:55543] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aZjpR0BAHxvBM3i9iKG_IQAAAJE"]
[Sat Feb 21 07:07:52.022710 2026] [:error] [pid 40871:tid 40875] [client 104.46.216.98:55551] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aZjpSDqDikjdiOZeJyXdagAAAMI"]
[Sat Feb 21 07:07:52.456983 2026] [:error] [pid 40871:tid 40874] [client 104.46.216.98:55502] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aZjpSDqDikjdiOZeJyXdbAAAAME"]
[Sat Feb 21 07:07:52.784872 2026] [:error] [pid 40871:tid 40897] [client 104.46.216.98:53833] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aZjpSDqDikjdiOZeJyXdbgAAANg"]
[Sat Feb 21 07:07:53.666992 2026] [:error] [pid 40756:tid 40776] [client 104.46.216.98:55293] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aZjpSQNlDP60sLYgqXLusgAAAAo"]
[Sat Feb 21 07:07:53.997126 2026] [:error] [pid 22558:tid 22560] [client 104.46.216.98:55273] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aZjpSSrVaIb2gXsVbDpRggAAAQA"]
[Sat Feb 21 07:07:54.340025 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:55287] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aZjpSirVaIb2gXsVbDpRhgAAAQs"]
[Sat Feb 21 07:07:54.654774 2026] [:error] [pid 40758:tid 40845] [client 104.46.216.98:55252] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aZjpSkBAHxvBM3i9iKG_IwAAAJc"]
[Sat Feb 21 07:07:55.446701 2026] [:error] [pid 40756:tid 40778] [client 104.46.216.98:55259] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aZjpSwNlDP60sLYgqXLutQAAAAw"]
[Sat Feb 21 07:07:56.272794 2026] [:error] [pid 40757:tid 40819] [client 104.46.216.98:55493] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aZjpTKg_MKVL7zhH7dxOIQAAAFg"]
[Sat Feb 21 07:07:57.198181 2026] [:error] [pid 40871:tid 40888] [client 104.46.216.98:55249] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aZjpTTqDikjdiOZeJyXdcgAAAM8"]
[Sat Feb 21 07:07:58.198777 2026] [:error] [pid 40758:tid 40840] [client 104.46.216.98:50895] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aZjpTkBAHxvBM3i9iKG_KgAAAJI"]
[Sat Feb 21 07:07:59.171924 2026] [:error] [pid 40756:tid 40770] [client 104.46.216.98:55507] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aZjpTwNlDP60sLYgqXLutgAAAAQ"]
[Sat Feb 21 07:07:59.771005 2026] [:error] [pid 40757:tid 40802] [client 104.46.216.98:55282] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aZjpT6g_MKVL7zhH7dxOJgAAAEc"]
[Sat Feb 21 07:08:01.428508 2026] [:error] [pid 40871:tid 40877] [client 104.46.216.98:54144] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aZjpUTqDikjdiOZeJyXddQAAAMQ"]
[Sat Feb 21 07:08:02.547064 2026] [:error] [pid 40756:tid 40767] [client 104.46.216.98:55519] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aZjpUgNlDP60sLYgqXLuugAAAAE"]
[Sat Feb 21 07:08:03.055584 2026] [:error] [pid 40756:tid 40781] [client 104.46.216.98:55269] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aZjpUwNlDP60sLYgqXLuvgAAAA8"]
[Sat Feb 21 07:08:03.355474 2026] [:error] [pid 40756:tid 40777] [client 104.46.216.98:55290] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aZjpUwNlDP60sLYgqXLuvwAAAAs"]
[Sat Feb 21 07:08:03.648822 2026] [:error] [pid 22558:tid 22567] [client 104.46.216.98:55517] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aZjpUyrVaIb2gXsVbDpRlQAAAQc"]
[Sat Feb 21 07:08:04.441752 2026] [:error] [pid 22558:tid 22565] [client 104.46.216.98:55294] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aZjpVCrVaIb2gXsVbDpRlwAAAQU"]
[Sat Feb 21 07:08:05.467422 2026] [:error] [pid 22558:tid 22562] [client 104.46.216.98:55248] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aZjpVSrVaIb2gXsVbDpRmgAAAQI"]
[Sat Feb 21 07:08:06.195636 2026] [:error] [pid 40758:tid 40826] [client 104.46.216.98:48848] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aZjpVkBAHxvBM3i9iKG_MAAAAIQ"]
[Sat Feb 21 07:08:06.686761 2026] [:error] [pid 40758:tid 40831] [client 104.46.216.98:48860] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aZjpVkBAHxvBM3i9iKG_MQAAAIk"]
[Sat Feb 21 07:08:07.285713 2026] [:error] [pid 40758:tid 40836] [client 104.46.216.98:48874] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aZjpV0BAHxvBM3i9iKG_NAAAAI4"]
[Sat Feb 21 07:08:07.669196 2026] [:error] [pid 40758:tid 40846] [client 104.46.216.98:48839] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aZjpV0BAHxvBM3i9iKG_NwAAAJg"]
[Sat Feb 21 07:08:08.095154 2026] [:error] [pid 22558:tid 22584] [client 104.46.216.98:57824] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aZjpWCrVaIb2gXsVbDpRngAAARg"]
[Sat Feb 21 07:08:08.648530 2026] [:error] [pid 22558:tid 22579] [client 104.46.216.98:57816] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aZjpWCrVaIb2gXsVbDpRoAAAARM"]
[Sat Feb 21 07:08:09.049326 2026] [:error] [pid 22558:tid 22565] [client 104.46.216.98:57792] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aZjpWSrVaIb2gXsVbDpRoQAAAQU"]
[Sat Feb 21 07:08:09.466464 2026] [:error] [pid 40756:tid 40772] [client 104.46.216.98:48885] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aZjpWQNlDP60sLYgqXLuxwAAAAY"]
[Sat Feb 21 07:08:09.770318 2026] [:error] [pid 40756:tid 40766] [client 104.46.216.98:57802] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZjpWQNlDP60sLYgqXLuygAAAAA"]
[Sat Feb 21 07:08:10.152853 2026] [:error] [pid 40757:tid 40799] [client 104.46.216.98:48857] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZjpWqg_MKVL7zhH7dxOMgAAAEQ"]
[Sat Feb 21 07:08:10.566372 2026] [:error] [pid 22558:tid 22561] [client 104.46.216.98:48864] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZjpWirVaIb2gXsVbDpRvQAAAQE"]
[Sat Feb 21 07:08:11.146469 2026] [:error] [pid 22558:tid 22584] [client 104.46.216.98:55246] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZjpWyrVaIb2gXsVbDpRxAAAARg"]
[Sat Feb 21 07:08:11.907327 2026] [:error] [pid 40871:tid 40878] [client 104.46.216.98:57806] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aZjpWzqDikjdiOZeJyXdmwAAAMU"]
[Sat Feb 21 07:08:12.931307 2026] [:error] [pid 22558:tid 22569] [client 104.46.216.98:55495] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aZjpXCrVaIb2gXsVbDpR3QAAAQk"]
[Sat Feb 21 07:08:13.965821 2026] [:error] [pid 40871:tid 40893] [client 104.46.216.98:48869] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aZjpXTqDikjdiOZeJyXdqwAAANQ"]
[Sat Feb 21 07:08:15.242770 2026] [:error] [pid 40871:tid 40878] [client 104.46.216.98:55499] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aZjpXzqDikjdiOZeJyXdsQAAAMU"]
[Sat Feb 21 07:08:17.138645 2026] [:error] [pid 40756:tid 40782] [client 104.46.216.98:48866] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aZjpYQNlDP60sLYgqXLu7AAAABA"]
[Sat Feb 21 07:08:18.909503 2026] [:error] [pid 40758:tid 40836] [client 104.46.216.98:48888] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aZjpYkBAHxvBM3i9iKG_YgAAAI4"]
[Sat Feb 21 07:08:20.905588 2026] [:error] [pid 40757:tid 40817] [client 104.46.216.98:57813] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aZjpZKg_MKVL7zhH7dxOUAAAAFY"]
[Sat Feb 21 07:08:26.364647 2026] [:error] [pid 40871:tid 40885] [client 104.46.216.98:57843] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aZjpajqDikjdiOZeJyXdxQAAAMw"]
[Sat Feb 21 07:08:28.830725 2026] [:error] [pid 40756:tid 40768] [client 104.46.216.98:57852] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ab.php"] [unique_id "aZjpbANlDP60sLYgqXLvFQAAAAI"]
[Sat Feb 21 07:08:31.038325 2026] [:error] [pid 40871:tid 40892] [client 104.46.216.98:48862] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ab.php"] [unique_id "aZjpbzqDikjdiOZeJyXdzQAAANM"]
[Sat Feb 21 07:08:31.398661 2026] [:error] [pid 22558:tid 22567] [client 104.46.216.98:57817] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ab.php"] [unique_id "aZjpbyrVaIb2gXsVbDpSAwAAAQc"]
[Sat Feb 21 07:08:31.736291 2026] [:error] [pid 40871:tid 40890] [client 104.46.216.98:48875] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ab.php"] [unique_id "aZjpbzqDikjdiOZeJyXd0QAAANE"]
[Sat Feb 21 07:08:32.118024 2026] [:error] [pid 22558:tid 22566] [client 104.46.216.98:48841] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aZjpcCrVaIb2gXsVbDpSBQAAAQY"]
[Sat Feb 21 07:08:32.513487 2026] [:error] [pid 40757:tid 40799] [client 104.46.216.98:48881] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aZjpcKg_MKVL7zhH7dxOaAAAAEQ"]
[Sat Feb 21 07:08:33.039342 2026] [:error] [pid 40756:tid 40775] [client 104.46.216.98:55488] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aZjpcQNlDP60sLYgqXLvIgAAAAk"]
[Sat Feb 21 07:08:33.663865 2026] [:error] [pid 40871:tid 40882] [client 104.46.216.98:57837] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aZjpcTqDikjdiOZeJyXd1AAAAMk"]
[Sat Feb 21 07:08:34.138647 2026] [:error] [pid 40871:tid 40894] [client 104.46.216.98:55497] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/"] [unique_id "aZjpcjqDikjdiOZeJyXd1QAAANU"]
[Sat Feb 21 07:08:34.706032 2026] [:error] [pid 40758:tid 40829] [client 104.46.216.98:50896] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/"] [unique_id "aZjpckBAHxvBM3i9iKG_dQAAAIc"]
[Sat Feb 21 07:08:35.411830 2026] [:error] [pid 40758:tid 40828] [client 104.46.216.98:48871] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/"] [unique_id "aZjpc0BAHxvBM3i9iKG_eQAAAIY"]
[Sat Feb 21 07:08:35.935539 2026] [:error] [pid 40871:tid 40881] [client 104.46.216.98:57830] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/"] [unique_id "aZjpczqDikjdiOZeJyXd2gAAAMg"]
[Sat Feb 21 07:08:37.045473 2026] [:error] [pid 40757:tid 40811] [client 104.46.216.98:57833] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "aZjpdag_MKVL7zhH7dxObgAAAFA"]
[Sat Feb 21 07:08:51.225285 2026] [:error] [pid 22558:tid 22578] [client 104.46.216.98:48834] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "aZjpgyrVaIb2gXsVbDpSIgAAARI"]
[Sat Feb 21 07:08:55.472157 2026] [:error] [pid 22558:tid 22580] [client 104.46.216.98:63548] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/"] [unique_id "aZjphyrVaIb2gXsVbDpSLAAAARQ"]
[Sat Feb 21 07:09:21.826561 2026] [:error] [pid 40757:tid 40819] [client 104.46.216.98:63502] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/"] [unique_id "aZjpoag_MKVL7zhH7dxOmQAAAFg"]
[Sat Feb 21 07:14:48.865218 2026] [:error] [pid 40757:tid 40799] [client 104.46.216.98:57798] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/lv.php"] [unique_id "aZjq6Kg_MKVL7zhH7dxQJAAAAEQ"]
[Sat Feb 21 07:14:52.610742 2026] [:error] [pid 40757:tid 40800] [client 104.46.216.98:63517] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aZjq7Kg_MKVL7zhH7dxQOQAAAEU"]
[Sat Feb 21 07:14:54.503266 2026] [:error] [pid 22558:tid 22579] [client 104.46.216.98:63534] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aZjq7irVaIb2gXsVbDpVKgAAARM"]
[Sat Feb 21 07:14:55.782926 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:55514] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aZjq7yrVaIb2gXsVbDpVMQAAAQs"]
[Sat Feb 21 07:14:56.247616 2026] [:error] [pid 40871:tid 40882] [client 104.46.216.98:57806] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aZjq8DqDikjdiOZeJyXgbAAAAMk"]
[Sat Feb 21 07:14:56.807444 2026] [:error] [pid 22558:tid 22572] [client 104.46.216.98:63523] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aZjq8CrVaIb2gXsVbDpVNgAAAQw"]
[Sat Feb 21 07:14:57.468945 2026] [:error] [pid 22558:tid 22575] [client 104.46.216.98:63537] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aZjq8SrVaIb2gXsVbDpVOQAAAQ8"]
[Sat Feb 21 07:14:58.438270 2026] [:error] [pid 22558:tid 22561] [client 104.46.216.98:62930] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aZjq8irVaIb2gXsVbDpVQAAAAQE"]
[Sat Feb 21 07:14:58.892222 2026] [:error] [pid 40871:tid 40880] [client 104.46.216.98:57796] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/block-library/"] [unique_id "aZjq8jqDikjdiOZeJyXgcgAAAMc"]
[Sat Feb 21 07:14:59.197396 2026] [:error] [pid 22558:tid 22572] [client 104.46.216.98:63540] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aZjq8yrVaIb2gXsVbDpVSQAAAQw"]
[Sat Feb 21 07:14:59.610846 2026] [:error] [pid 40871:tid 40885] [client 104.46.216.98:62936] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aZjq8zqDikjdiOZeJyXghwAAAMw"]
[Sat Feb 21 07:14:59.962019 2026] [:error] [pid 40871:tid 40890] [client 104.46.216.98:62963] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aZjq8zqDikjdiOZeJyXgkwAAANE"]
[Sat Feb 21 07:15:00.528688 2026] [:error] [pid 40871:tid 40892] [client 104.46.216.98:63506] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aZjq9DqDikjdiOZeJyXgoAAAANM"]
[Sat Feb 21 07:15:01.495402 2026] [:error] [pid 40757:tid 40811] [client 104.46.216.98:62920] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aZjq9ag_MKVL7zhH7dxQRQAAAFA"]
[Sat Feb 21 07:15:01.853566 2026] [:error] [pid 40871:tid 40886] [client 104.46.216.98:62944] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/index.php"] [unique_id "aZjq9TqDikjdiOZeJyXgpQAAAM0"]
[Sat Feb 21 07:15:02.616847 2026] [:error] [pid 40756:tid 40776] [client 104.46.216.98:62927] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/index.php"] [unique_id "aZjq9gNlDP60sLYgqXLxHAAAAAo"]
[Sat Feb 21 07:15:03.464263 2026] [:error] [pid 22558:tid 22582] [client 104.46.216.98:62975] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/index.php"] [unique_id "aZjq9yrVaIb2gXsVbDpVggAAARY"]
[Sat Feb 21 07:15:03.964647 2026] [:error] [pid 22558:tid 22570] [client 104.46.216.98:62931] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/index.php"] [unique_id "aZjq9yrVaIb2gXsVbDpVhgAAAQo"]
[Sat Feb 21 07:15:04.820486 2026] [:error] [pid 40758:tid 40841] [client 104.46.216.98:62953] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/index.php"] [unique_id "aZjq-EBAHxvBM3i9iKHBiAAAAJM"]
[Sat Feb 21 07:15:05.365455 2026] [:error] [pid 40758:tid 40832] [client 104.46.216.98:63490] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/index.php"] [unique_id "aZjq-UBAHxvBM3i9iKHBjAAAAIo"]
[Sat Feb 21 07:15:06.173929 2026] [:error] [pid 40871:tid 40880] [client 104.46.216.98:57813] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/index.php"] [unique_id "aZjq-jqDikjdiOZeJyXgtQAAAMc"]
[Sat Feb 21 07:15:07.124108 2026] [:error] [pid 40871:tid 40895] [client 104.46.216.98:63543] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/index.php"] [unique_id "aZjq-zqDikjdiOZeJyXgtwAAANY"]
[Sat Feb 21 07:15:07.715670 2026] [:error] [pid 22558:tid 22563] [client 104.46.216.98:62933] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/edit.php"] [unique_id "aZjq-yrVaIb2gXsVbDpVjwAAAQM"]
[Sat Feb 21 07:15:08.298602 2026] [:error] [pid 22558:tid 22564] [client 104.46.216.98:62946] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/edit.php"] [unique_id "aZjq_CrVaIb2gXsVbDpVlAAAAQQ"]
[Sat Feb 21 07:15:08.896533 2026] [:error] [pid 22558:tid 22568] [client 104.46.216.98:62954] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/edit.php"] [unique_id "aZjq_CrVaIb2gXsVbDpVlgAAAQg"]
[Sat Feb 21 07:15:09.698519 2026] [:error] [pid 40756:tid 40790] [client 104.46.216.98:63522] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/edit.php"] [unique_id "aZjq_QNlDP60sLYgqXLxLgAAABg"]
[Sat Feb 21 07:15:10.069129 2026] [:error] [pid 22558:tid 22584] [client 104.46.216.98:62914] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aZjq_irVaIb2gXsVbDpVmAAAARg"]
[Sat Feb 21 07:15:10.439183 2026] [:error] [pid 22558:tid 22576] [client 104.46.216.98:63549] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZjq_irVaIb2gXsVbDpVmwAAARA"]
[Sat Feb 21 07:15:10.863924 2026] [:error] [pid 40758:tid 40825] [client 104.46.216.98:62924] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/defaults.php"] [unique_id "aZjq_kBAHxvBM3i9iKHBkgAAAIM"]
[Sat Feb 21 07:15:11.160979 2026] [:error] [pid 40871:tid 40882] [client 104.46.216.98:48860] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/defaults.php"] [unique_id "aZjq_zqDikjdiOZeJyXgvQAAAMk"]
[Sat Feb 21 07:15:11.428419 2026] [:error] [pid 40757:tid 40803] [client 104.46.216.98:62961] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/defaults.php"] [unique_id "aZjq_6g_MKVL7zhH7dxQaQAAAEg"]
[Sat Feb 21 07:15:11.687081 2026] [:error] [pid 40757:tid 40810] [client 104.46.216.98:62947] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/defaults.php"] [unique_id "aZjq_6g_MKVL7zhH7dxQawAAAE8"]
[Sat Feb 21 07:15:11.981069 2026] [:error] [pid 40871:tid 40887] [client 104.46.216.98:63503] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZjq_zqDikjdiOZeJyXgwgAAAM4"]
[Sat Feb 21 07:15:12.289275 2026] [:error] [pid 40871:tid 40890] [client 104.46.216.98:62937] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZjrADqDikjdiOZeJyXgxAAAANE"]
[Sat Feb 21 07:15:12.618074 2026] [:error] [pid 40871:tid 40892] [client 104.46.216.98:57802] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZjrADqDikjdiOZeJyXgxgAAANM"]
[Sat Feb 21 07:15:13.090554 2026] [:error] [pid 40758:tid 40837] [client 104.46.216.98:57818] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZjrAUBAHxvBM3i9iKHBlQAAAI8"]
[Sat Feb 21 07:15:13.968747 2026] [:error] [pid 40757:tid 40816] [client 104.46.216.98:62943] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aZjrAag_MKVL7zhH7dxQcgAAAFU"]
[Sat Feb 21 07:15:14.354085 2026] [:error] [pid 22558:tid 22562] [client 104.46.216.98:55535] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aZjrAirVaIb2gXsVbDpVpgAAAQI"]
[Sat Feb 21 07:15:14.676106 2026] [:error] [pid 22558:tid 22576] [client 104.46.216.98:62962] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aZjrAirVaIb2gXsVbDpVqQAAARA"]
[Sat Feb 21 07:15:15.280597 2026] [:error] [pid 40871:tid 40886] [client 104.46.216.98:63547] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aZjrAzqDikjdiOZeJyXgzQAAAM0"]
[Sat Feb 21 07:15:15.621275 2026] [:error] [pid 40756:tid 40781] [client 104.46.216.98:63533] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aZjrAwNlDP60sLYgqXLxOwAAAA8"]
[Sat Feb 21 07:15:16.000101 2026] [:error] [pid 40756:tid 40775] [client 104.46.216.98:62918] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aZjrAwNlDP60sLYgqXLxPgAAAAk"]
[Sat Feb 21 07:15:16.956384 2026] [:error] [pid 40758:tid 40835] [client 104.46.216.98:62913] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aZjrBEBAHxvBM3i9iKHBnQAAAI0"]
[Sat Feb 21 07:15:17.657837 2026] [:error] [pid 40756:tid 40786] [client 104.46.216.98:62912] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aZjrBQNlDP60sLYgqXLxQgAAABQ"]
[Sat Feb 21 07:15:18.779267 2026] [:error] [pid 22558:tid 22563] [client 104.46.216.98:57803] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css.php"] [unique_id "aZjrBirVaIb2gXsVbDpVsgAAAQM"]
[Sat Feb 21 07:15:19.881426 2026] [:error] [pid 40756:tid 40767] [client 104.46.216.98:62952] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aZjrBwNlDP60sLYgqXLxRwAAAAE"]
[Sat Feb 21 07:15:20.644513 2026] [:error] [pid 40757:tid 40797] [client 104.46.216.98:57794] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aZjrCKg_MKVL7zhH7dxQhgAAAEI"]
[Sat Feb 21 07:15:20.985150 2026] [:error] [pid 40871:tid 40884] [client 104.46.216.98:48833] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aZjrCDqDikjdiOZeJyXg4AAAAMs"]
[Sat Feb 21 07:15:21.353752 2026] [:error] [pid 40757:tid 40814] [client 104.46.216.98:57854] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aZjrCag_MKVL7zhH7dxQiQAAAFM"]
[Sat Feb 21 07:15:21.743077 2026] [:error] [pid 40757:tid 40812] [client 104.46.216.98:57809] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aZjrCag_MKVL7zhH7dxQiwAAAFE"]
[Sat Feb 21 07:15:22.050287 2026] [:error] [pid 22558:tid 22572] [client 104.46.216.98:62929] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/index.php"] [unique_id "aZjrCirVaIb2gXsVbDpVwAAAAQw"]
[Sat Feb 21 07:15:22.443842 2026] [:error] [pid 40757:tid 40811] [client 104.46.216.98:48862] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZjrCqg_MKVL7zhH7dxQjwAAAFA"]
[Sat Feb 21 07:15:23.059895 2026] [:error] [pid 22558:tid 22579] [client 104.46.216.98:63546] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aZjrCyrVaIb2gXsVbDpVwgAAARM"]
[Sat Feb 21 07:15:23.349599 2026] [:error] [pid 40756:tid 40783] [client 104.46.216.98:63501] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aZjrCwNlDP60sLYgqXLxVAAAABE"]
[Sat Feb 21 07:15:23.726425 2026] [:error] [pid 22558:tid 22582] [client 104.46.216.98:62948] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aZjrCyrVaIb2gXsVbDpVxgAAARY"]
[Sat Feb 21 07:15:24.124216 2026] [:error] [pid 40756:tid 40770] [client 104.46.216.98:63541] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aZjrDANlDP60sLYgqXLxVgAAAAQ"]
[Sat Feb 21 07:15:24.701817 2026] [:error] [pid 40756:tid 40784] [client 104.46.216.98:55505] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aZjrDANlDP60sLYgqXLxVwAAABI"]
[Sat Feb 21 07:15:25.108863 2026] [:error] [pid 40758:tid 40844] [client 104.46.216.98:57797] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aZjrDUBAHxvBM3i9iKHBqQAAAJY"]
[Sat Feb 21 07:15:25.588194 2026] [:error] [pid 40756:tid 40777] [client 104.46.216.98:57834] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aZjrDQNlDP60sLYgqXLxWAAAAAs"]
[Sat Feb 21 07:15:25.936251 2026] [:error] [pid 40757:tid 40807] [client 104.46.216.98:57839] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aZjrDag_MKVL7zhH7dxQlwAAAEw"]
[Sat Feb 21 07:15:26.232474 2026] [:error] [pid 40758:tid 40824] [client 104.46.216.98:57848] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aZjrDkBAHxvBM3i9iKHBsQAAAII"]
[Sat Feb 21 07:15:26.545154 2026] [:error] [pid 40757:tid 40809] [client 104.46.216.98:62949] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aZjrDqg_MKVL7zhH7dxQmAAAAE4"]
[Sat Feb 21 07:15:26.886424 2026] [:error] [pid 40758:tid 40834] [client 104.46.216.98:57801] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aZjrDkBAHxvBM3i9iKHBtQAAAIw"]
[Sat Feb 21 07:15:27.588307 2026] [:error] [pid 40758:tid 40840] [client 104.46.216.98:55234] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aZjrD0BAHxvBM3i9iKHBuQAAAJI"]
[Sat Feb 21 07:15:28.226972 2026] [:error] [pid 40756:tid 40790] [client 104.46.216.98:57792] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aZjrEANlDP60sLYgqXLxXgAAABg"]
[Sat Feb 21 07:15:29.677858 2026] [:error] [pid 22558:tid 22562] [client 104.46.216.98:62932] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aZjrESrVaIb2gXsVbDpV3QAAAQI"]
[Sat Feb 21 07:15:30.307523 2026] [:error] [pid 22558:tid 22567] [client 104.46.216.98:63495] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aZjrEirVaIb2gXsVbDpV5AAAAQc"]
[Sat Feb 21 07:15:30.793371 2026] [:error] [pid 40756:tid 40782] [client 104.46.216.98:57812] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aZjrEgNlDP60sLYgqXLxYgAAABA"]
[Sat Feb 21 07:15:32.061043 2026] [:error] [pid 40756:tid 40787] [client 104.46.216.98:62974] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aZjrFANlDP60sLYgqXLxZQAAABU"]
[Sat Feb 21 07:15:32.800611 2026] [:error] [pid 40756:tid 40774] [client 104.46.216.98:55258] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aZjrFANlDP60sLYgqXLxaAAAAAg"]
[Sat Feb 21 07:15:33.396014 2026] [:error] [pid 40758:tid 40839] [client 104.46.216.98:57799] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aZjrFUBAHxvBM3i9iKHB0AAAAJE"]
[Sat Feb 21 07:15:34.334112 2026] [:error] [pid 40757:tid 40808] [client 104.46.216.98:63529] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aZjrFqg_MKVL7zhH7dxQqQAAAE0"]
[Sat Feb 21 07:15:34.943355 2026] [:error] [pid 40756:tid 40781] [client 104.46.216.98:63524] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aZjrFgNlDP60sLYgqXLxdQAAAA8"]
[Sat Feb 21 07:15:35.905075 2026] [:error] [pid 40756:tid 40780] [client 104.46.216.98:62923] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aZjrFwNlDP60sLYgqXLxdgAAAA4"]
[Sat Feb 21 07:15:36.643366 2026] [:error] [pid 40758:tid 40822] [client 104.46.216.98:57828] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aZjrGEBAHxvBM3i9iKHB4QAAAIA"]
[Sat Feb 21 07:15:37.266671 2026] [:error] [pid 40758:tid 40841] [client 104.46.216.98:63507] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aZjrGUBAHxvBM3i9iKHB5gAAAJM"]
[Sat Feb 21 07:15:37.619972 2026] [:error] [pid 40871:tid 40885] [client 104.46.216.98:55510] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aZjrGTqDikjdiOZeJyXhAQAAAMw"]
[Sat Feb 21 07:15:37.914022 2026] [:error] [pid 40758:tid 40837] [client 104.46.216.98:57838] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah/function.php"] [unique_id "aZjrGUBAHxvBM3i9iKHB6AAAAI8"]
[Sat Feb 21 07:15:38.699174 2026] [:error] [pid 40757:tid 40805] [client 104.46.216.98:62925] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah/function.php"] [unique_id "aZjrGqg_MKVL7zhH7dxQtAAAAEo"]
[Sat Feb 21 07:15:39.206692 2026] [:error] [pid 40756:tid 40777] [client 104.46.216.98:62945] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah/function.php"] [unique_id "aZjrGwNlDP60sLYgqXLxewAAAAs"]
[Sat Feb 21 07:15:39.675791 2026] [:error] [pid 40756:tid 40789] [client 104.46.216.98:62959] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah/function.php"] [unique_id "aZjrGwNlDP60sLYgqXLxfAAAABc"]
[Sat Feb 21 07:15:40.045067 2026] [:error] [pid 40756:tid 40771] [client 104.46.216.98:63511] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aZjrHANlDP60sLYgqXLxfQAAAAU"]
[Sat Feb 21 07:15:41.804836 2026] [:error] [pid 40756:tid 40766] [client 104.46.216.98:57814] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aZjrHQNlDP60sLYgqXLxgQAAAAA"]
[Sat Feb 21 07:15:42.306029 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:48851] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aZjrHirVaIb2gXsVbDpWDwAAAQs"]
[Sat Feb 21 07:15:43.008637 2026] [:error] [pid 40758:tid 40842] [client 104.46.216.98:57831] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aZjrH0BAHxvBM3i9iKHB8AAAAJQ"]
[Sat Feb 21 07:15:43.714317 2026] [:error] [pid 22558:tid 22570] [client 104.46.216.98:63509] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aZjrHyrVaIb2gXsVbDpWFwAAAQo"]
[Sat Feb 21 07:15:44.274835 2026] [:error] [pid 22558:tid 22561] [client 104.46.216.98:63497] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aZjrICrVaIb2gXsVbDpWGwAAAQE"]
[Sat Feb 21 07:15:45.232377 2026] [:error] [pid 40756:tid 40782] [client 104.46.216.98:62941] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aZjrIQNlDP60sLYgqXLxiAAAABA"]
[Sat Feb 21 07:15:45.723508 2026] [:error] [pid 40758:tid 40845] [client 104.46.216.98:57800] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aZjrIUBAHxvBM3i9iKHB9QAAAJc"]
[Sat Feb 21 07:15:47.138914 2026] [:error] [pid 40871:tid 40873] [client 104.46.216.98:57815] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aZjrIzqDikjdiOZeJyXhHwAAAMA"]
[Sat Feb 21 07:15:47.863018 2026] [:error] [pid 40756:tid 40787] [client 104.46.216.98:57826] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aZjrIwNlDP60sLYgqXLxmwAAABU"]
[Sat Feb 21 07:15:48.401857 2026] [:error] [pid 40756:tid 40773] [client 104.46.216.98:48871] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aZjrJANlDP60sLYgqXLxngAAAAc"]
[Sat Feb 21 07:15:48.921934 2026] [:error] [pid 40871:tid 40874] [client 104.46.216.98:62971] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aZjrJDqDikjdiOZeJyXhLwAAAME"]
[Sat Feb 21 07:15:49.864271 2026] [:error] [pid 22558:tid 22562] [client 104.46.216.98:57811] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZjrJSrVaIb2gXsVbDpWJgAAAQI"]
[Sat Feb 21 07:15:50.394335 2026] [:error] [pid 40871:tid 40877] [client 104.46.216.98:57830] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZjrJjqDikjdiOZeJyXhPgAAAMQ"]
[Sat Feb 21 07:15:50.755341 2026] [:error] [pid 40757:tid 40814] [client 104.46.216.98:57853] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZjrJqg_MKVL7zhH7dxQwgAAAFM"]
[Sat Feb 21 07:15:51.354900 2026] [:error] [pid 40757:tid 40806] [client 104.46.216.98:57852] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZjrJ6g_MKVL7zhH7dxQwwAAAEs"]
[Sat Feb 21 07:15:51.911311 2026] [:error] [pid 22558:tid 22560] [client 104.46.216.98:48872] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aZjrJyrVaIb2gXsVbDpWOAAAAQA"]
[Sat Feb 21 07:15:54.407654 2026] [:error] [pid 40756:tid 40782] [client 104.46.216.98:57841] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aZjrKgNlDP60sLYgqXLxqgAAABA"]
[Sat Feb 21 07:15:55.302483 2026] [:error] [pid 40756:tid 40788] [client 104.46.216.98:63525] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aZjrKwNlDP60sLYgqXLxqwAAABY"]
[Sat Feb 21 07:16:00.709130 2026] [:error] [pid 22558:tid 22574] [client 104.46.216.98:48852] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aZjrMCrVaIb2gXsVbDpWeQAAAQ4"]
[Sat Feb 21 07:16:01.645730 2026] [:error] [pid 40757:tid 40802] [client 104.46.216.98:48874] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aZjrMag_MKVL7zhH7dxQ3AAAAEc"]
[Sat Feb 21 07:16:02.188563 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:48889] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aZjrMirVaIb2gXsVbDpWgAAAAQs"]
[Sat Feb 21 07:16:02.457022 2026] [:error] [pid 22558:tid 22578] [client 104.46.216.98:48854] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aZjrMirVaIb2gXsVbDpWggAAARI"]
[Sat Feb 21 07:16:02.789078 2026] [:error] [pid 40871:tid 40887] [client 104.46.216.98:55247] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aZjrMjqDikjdiOZeJyXhUAAAAM4"]
[Sat Feb 21 07:16:03.537336 2026] [:error] [pid 40871:tid 40885] [client 104.46.216.98:62921] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aZjrMzqDikjdiOZeJyXhUgAAAMw"]
[Sat Feb 21 07:16:04.552664 2026] [:error] [pid 40757:tid 40812] [client 104.46.216.98:48888] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aZjrNKg_MKVL7zhH7dxQ5QAAAFE"]
[Sat Feb 21 07:16:05.070672 2026] [:error] [pid 40756:tid 40777] [client 104.46.216.98:57845] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aZjrNQNlDP60sLYgqXLxvgAAAAs"]
[Sat Feb 21 07:16:05.863664 2026] [:error] [pid 40758:tid 40835] [client 104.46.216.98:55507] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZjrNUBAHxvBM3i9iKHCKAAAAI0"]
[Sat Feb 21 07:16:06.515990 2026] [:error] [pid 40757:tid 40811] [client 104.46.216.98:48866] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZjrNqg_MKVL7zhH7dxQ6QAAAFA"]
[Sat Feb 21 07:16:07.218760 2026] [:error] [pid 40756:tid 40772] [client 104.46.216.98:62966] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZjrNwNlDP60sLYgqXLxxAAAAAY"]
[Sat Feb 21 07:16:07.618770 2026] [:error] [pid 22558:tid 22570] [client 104.46.216.98:48850] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZjrNyrVaIb2gXsVbDpWkgAAAQo"]
[Sat Feb 21 07:16:08.095621 2026] [:error] [pid 40756:tid 40775] [client 104.46.216.98:55492] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZjrOANlDP60sLYgqXLxxwAAAAk"]
[Sat Feb 21 07:16:08.505586 2026] [:error] [pid 40758:tid 40832] [client 104.46.216.98:48839] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZjrOEBAHxvBM3i9iKHCLwAAAIo"]
[Sat Feb 21 07:16:08.994322 2026] [:error] [pid 22558:tid 22572] [client 104.46.216.98:55493] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aZjrOCrVaIb2gXsVbDpWmAAAAQw"]
[Sat Feb 21 07:16:09.800279 2026] [:error] [pid 22558:tid 22569] [client 104.46.216.98:48867] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aZjrOSrVaIb2gXsVbDpWnAAAAQk"]
[Sat Feb 21 07:16:10.407649 2026] [:error] [pid 40758:tid 40842] [client 104.46.216.98:62970] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aZjrOkBAHxvBM3i9iKHCNQAAAJQ"]
[Sat Feb 21 07:16:10.763694 2026] [:error] [pid 22558:tid 22568] [client 104.46.216.98:57805] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aZjrOirVaIb2gXsVbDpWoQAAAQg"]
[Sat Feb 21 07:16:11.194378 2026] [:error] [pid 40757:tid 40805] [client 104.46.216.98:62956] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aZjrO6g_MKVL7zhH7dxQ7QAAAEo"]
[Sat Feb 21 07:16:11.794209 2026] [:error] [pid 40871:tid 40893] [client 104.46.216.98:63491] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aZjrOzqDikjdiOZeJyXhagAAANQ"]
[Sat Feb 21 07:16:12.215591 2026] [:error] [pid 40758:tid 40822] [client 104.46.216.98:62972] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aZjrPEBAHxvBM3i9iKHCNwAAAIA"]
[Sat Feb 21 07:16:12.526121 2026] [:error] [pid 40871:tid 40875] [client 104.46.216.98:62969] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aZjrPDqDikjdiOZeJyXhbQAAAMI"]
[Sat Feb 21 07:16:13.177871 2026] [:error] [pid 40758:tid 40823] [client 104.46.216.98:57807] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aZjrPUBAHxvBM3i9iKHCOAAAAIE"]
[Sat Feb 21 07:16:13.496472 2026] [:error] [pid 22558:tid 22575] [client 104.46.216.98:57821] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aZjrPSrVaIb2gXsVbDpWqwAAAQ8"]
[Sat Feb 21 07:16:13.854712 2026] [:error] [pid 40871:tid 40873] [client 104.46.216.98:57837] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aZjrPTqDikjdiOZeJyXhbgAAAMA"]
[Sat Feb 21 07:16:14.544225 2026] [:error] [pid 40871:tid 40885] [client 104.46.216.98:55500] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "aZjrPjqDikjdiOZeJyXhcgAAAMw"]
[Sat Feb 21 07:16:14.908130 2026] [:error] [pid 40757:tid 40796] [client 104.46.216.98:62957] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZjrPqg_MKVL7zhH7dxQ-AAAAEE"]
[Sat Feb 21 07:16:15.261053 2026] [:error] [pid 40756:tid 40775] [client 104.46.216.98:63530] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZjrPwNlDP60sLYgqXLx0wAAAAk"]
[Sat Feb 21 07:16:15.663917 2026] [:error] [pid 40756:tid 40789] [client 104.46.216.98:63520] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZjrPwNlDP60sLYgqXLx1QAAABc"]
[Sat Feb 21 07:16:16.096006 2026] [:error] [pid 40756:tid 40769] [client 104.46.216.98:57819] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZjrQANlDP60sLYgqXLx1wAAAAM"]
[Sat Feb 21 07:16:16.503671 2026] [:error] [pid 40871:tid 40892] [client 104.46.216.98:57820] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function/function.php"] [unique_id "aZjrQDqDikjdiOZeJyXhcwAAANM"]
[Sat Feb 21 07:16:16.866467 2026] [:error] [pid 40871:tid 40884] [client 104.46.216.98:62919] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function/function.php"] [unique_id "aZjrQDqDikjdiOZeJyXhdQAAAMs"]
[Sat Feb 21 07:16:17.417473 2026] [:error] [pid 40756:tid 40787] [client 104.46.216.98:48853] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function/function.php"] [unique_id "aZjrQQNlDP60sLYgqXLx3QAAABU"]
[Sat Feb 21 07:16:17.858976 2026] [:error] [pid 40757:tid 40809] [client 104.46.216.98:63499] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function/function.php"] [unique_id "aZjrQag_MKVL7zhH7dxQ_QAAAE4"]
[Sat Feb 21 07:16:18.630112 2026] [:error] [pid 40757:tid 40813] [client 104.46.216.98:63535] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "aZjrQqg_MKVL7zhH7dxQ_wAAAFI"]
[Sat Feb 21 07:16:19.420485 2026] [:error] [pid 22558:tid 22561] [client 104.46.216.98:62955] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "aZjrQyrVaIb2gXsVbDpWwAAAAQE"]
[Sat Feb 21 07:16:20.219243 2026] [:error] [pid 40871:tid 40873] [client 104.46.216.98:62917] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "aZjrRDqDikjdiOZeJyXhewAAAMA"]
[Sat Feb 21 07:16:20.775234 2026] [:error] [pid 22558:tid 22560] [client 104.46.216.98:55233] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "aZjrRCrVaIb2gXsVbDpWyAAAAQA"]
[Sat Feb 21 07:16:21.117995 2026] [:error] [pid 40756:tid 40779] [client 104.46.216.98:48892] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aZjrRQNlDP60sLYgqXLx8QAAAA0"]
[Sat Feb 21 07:16:21.389463 2026] [:error] [pid 22558:tid 22570] [client 104.46.216.98:48889] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aZjrRSrVaIb2gXsVbDpWzQAAAQo"]
[Sat Feb 21 07:16:21.730525 2026] [:error] [pid 22558:tid 22574] [client 104.46.216.98:57847] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aZjrRSrVaIb2gXsVbDpW0QAAAQ4"]
[Sat Feb 21 07:16:22.142966 2026] [:error] [pid 22558:tid 22579] [client 104.46.216.98:63492] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aZjrRirVaIb2gXsVbDpW0wAAARM"]
[Sat Feb 21 07:16:22.620753 2026] [:error] [pid 40758:tid 40834] [client 104.46.216.98:63551] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aZjrRkBAHxvBM3i9iKHCQwAAAIw"]
[Sat Feb 21 07:16:23.210232 2026] [:error] [pid 22558:tid 22567] [client 104.46.216.98:48882] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aZjrRyrVaIb2gXsVbDpW2AAAAQc"]
[Sat Feb 21 07:16:23.808215 2026] [:error] [pid 40758:tid 40833] [client 104.46.216.98:57824] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aZjrR0BAHxvBM3i9iKHCRAAAAIs"]
[Sat Feb 21 07:16:24.398466 2026] [:error] [pid 22558:tid 22584] [client 104.46.216.98:55488] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aZjrSCrVaIb2gXsVbDpW3AAAARg"]
[Sat Feb 21 07:16:25.097658 2026] [:error] [pid 40871:tid 40893] [client 104.46.216.98:48885] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aZjrSTqDikjdiOZeJyXhhgAAANQ"]
[Sat Feb 21 07:16:25.657967 2026] [:error] [pid 40871:tid 40878] [client 104.46.216.98:57849] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aZjrSTqDikjdiOZeJyXhhwAAAMU"]
[Sat Feb 21 07:16:26.495412 2026] [:error] [pid 40871:tid 40895] [client 104.46.216.98:55281] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aZjrSjqDikjdiOZeJyXhiAAAANY"]
[Sat Feb 21 07:16:26.957622 2026] [:error] [pid 40871:tid 40882] [client 104.46.216.98:55522] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aZjrSjqDikjdiOZeJyXhiQAAAMk"]
[Sat Feb 21 07:16:27.384908 2026] [:error] [pid 22558:tid 22561] [client 104.46.216.98:48861] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZjrSyrVaIb2gXsVbDpW5AAAAQE"]
[Sat Feb 21 07:16:27.644536 2026] [:error] [pid 40757:tid 40807] [client 104.46.216.98:63515] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZjrS6g_MKVL7zhH7dxRDAAAAEw"]
[Sat Feb 21 07:16:27.943846 2026] [:error] [pid 40871:tid 40880] [client 104.46.216.98:55250] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZjrSzqDikjdiOZeJyXhjAAAAMc"]
[Sat Feb 21 07:16:28.241735 2026] [:error] [pid 40756:tid 40767] [client 104.46.216.98:55527] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZjrTANlDP60sLYgqXLyBAAAAAE"]
[Sat Feb 21 07:16:29.029626 2026] [:error] [pid 22558:tid 22563] [client 104.46.216.98:63508] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aZjrTSrVaIb2gXsVbDpW5wAAAQM"]
[Sat Feb 21 07:16:29.443685 2026] [:error] [pid 40871:tid 40886] [client 104.46.216.98:48891] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aZjrTTqDikjdiOZeJyXhjwAAAM0"]
[Sat Feb 21 07:16:30.163899 2026] [:error] [pid 40757:tid 40810] [client 104.46.216.98:48837] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aZjrTqg_MKVL7zhH7dxREAAAAE8"]
[Sat Feb 21 07:16:30.874005 2026] [:error] [pid 40871:tid 40879] [client 104.46.216.98:55508] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "aZjrTjqDikjdiOZeJyXhkgAAAMY"]
[Sat Feb 21 07:16:31.518345 2026] [:error] [pid 40871:tid 40884] [client 104.46.216.98:63531] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aZjrTzqDikjdiOZeJyXhlQAAAMs"]
[Sat Feb 21 07:16:32.033064 2026] [:error] [pid 40758:tid 40826] [client 104.46.216.98:63500] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aZjrUEBAHxvBM3i9iKHCTgAAAIQ"]
[Sat Feb 21 07:16:32.283698 2026] [:error] [pid 40871:tid 40893] [client 104.46.216.98:62935] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aZjrUDqDikjdiOZeJyXhmQAAANQ"]
[Sat Feb 21 07:16:32.852316 2026] [:error] [pid 40756:tid 40776] [client 104.46.216.98:48881] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aZjrUANlDP60sLYgqXLyCQAAAAo"]
[Sat Feb 21 07:16:33.153592 2026] [:error] [pid 40757:tid 40806] [client 104.46.216.98:57829] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aZjrUag_MKVL7zhH7dxRKAAAAEs"]
[Sat Feb 21 07:16:34.284006 2026] [:error] [pid 40757:tid 40819] [client 104.46.216.98:63539] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aZjrUqg_MKVL7zhH7dxRLgAAAFg"]
[Sat Feb 21 07:16:34.917979 2026] [:error] [pid 40871:tid 40888] [client 104.46.216.98:48858] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aZjrUjqDikjdiOZeJyXhmwAAAM8"]
[Sat Feb 21 07:16:35.221901 2026] [:error] [pid 40871:tid 40896] [client 104.46.216.98:48865] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aZjrUzqDikjdiOZeJyXhnwAAANc"]
[Sat Feb 21 07:16:35.744003 2026] [:error] [pid 40757:tid 40813] [client 104.46.216.98:55251] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aZjrU6g_MKVL7zhH7dxRMQAAAFI"]
[Sat Feb 21 07:16:36.210712 2026] [:error] [pid 40756:tid 40775] [client 104.46.216.98:62960] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aZjrVANlDP60sLYgqXLyEgAAAAk"]
[Sat Feb 21 07:16:36.588921 2026] [:error] [pid 40756:tid 40783] [client 104.46.216.98:48832] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aZjrVANlDP60sLYgqXLyEwAAABE"]
[Sat Feb 21 07:16:37.161201 2026] [:error] [pid 40871:tid 40889] [client 104.46.216.98:63514] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "aZjrVTqDikjdiOZeJyXhpQAAANA"]
[Sat Feb 21 07:16:37.574597 2026] [:error] [pid 40757:tid 40815] [client 104.46.216.98:55515] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aZjrVag_MKVL7zhH7dxROgAAAFQ"]
[Sat Feb 21 07:16:38.040443 2026] [:error] [pid 40758:tid 40825] [client 104.46.216.98:48883] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aZjrVkBAHxvBM3i9iKHCWQAAAIM"]
[Sat Feb 21 07:16:38.803246 2026] [:error] [pid 40756:tid 40784] [client 104.46.216.98:55246] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aZjrVgNlDP60sLYgqXLyGAAAABI"]
[Sat Feb 21 07:16:39.217064 2026] [:error] [pid 22558:tid 22571] [client 104.46.216.98:48838] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aZjrVyrVaIb2gXsVbDpXFAAAAQs"]
[Sat Feb 21 07:16:39.539190 2026] [:error] [pid 40756:tid 40766] [client 104.46.216.98:48846] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aZjrVwNlDP60sLYgqXLyGgAAAAA"]
[Sat Feb 21 07:16:39.876283 2026] [:error] [pid 40757:tid 40797] [client 104.46.216.98:57817] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aZjrV6g_MKVL7zhH7dxRPQAAAEI"]
[Sat Feb 21 07:16:40.265152 2026] [:error] [pid 40757:tid 40813] [client 104.46.216.98:48877] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aZjrWKg_MKVL7zhH7dxRPwAAAFI"]
[Sat Feb 21 07:16:40.504686 2026] [:error] [pid 40756:tid 40778] [client 104.46.216.98:57804] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aZjrWANlDP60sLYgqXLyHQAAAAw"]
[Sat Feb 21 07:16:40.787154 2026] [:error] [pid 40757:tid 40809] [client 104.46.216.98:63489] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aZjrWKg_MKVL7zhH7dxRQQAAAE4"]
[Sat Feb 21 07:16:41.110347 2026] [:error] [pid 40871:tid 40894] [client 104.46.216.98:48859] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aZjrWTqDikjdiOZeJyXhqAAAANU"]
[Sat Feb 21 07:16:41.445446 2026] [:error] [pid 40758:tid 40834] [client 104.46.216.98:57833] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aZjrWUBAHxvBM3i9iKHCXwAAAIw"]
[Sat Feb 21 07:16:41.712352 2026] [:error] [pid 40871:tid 40893] [client 104.46.216.98:63504] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xml.php"] [unique_id "aZjrWTqDikjdiOZeJyXhqQAAANQ"]
[Sat Feb 21 07:16:42.034055 2026] [:error] [pid 40758:tid 40838] [client 104.46.216.98:63513] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aZjrWkBAHxvBM3i9iKHCYAAAAJA"]
[Sat Feb 21 07:16:42.558779 2026] [:error] [pid 40758:tid 40842] [client 104.46.216.98:63544] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aZjrWkBAHxvBM3i9iKHCYwAAAJQ"]
[Sat Feb 21 07:16:43.072238 2026] [:error] [pid 40758:tid 40833] [client 104.46.216.98:55494] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aZjrW0BAHxvBM3i9iKHCZQAAAIs"]
[Sat Feb 21 07:16:43.467054 2026] [:error] [pid 22558:tid 22560] [client 104.46.216.98:63521] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aZjrWyrVaIb2gXsVbDpXIAAAAQA"]
[Sat Feb 21 07:16:43.843213 2026] [:error] [pid 40756:tid 40772] [client 104.46.216.98:55237] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aZjrWwNlDP60sLYgqXLyIQAAAAY"]
[Sat Feb 21 07:16:44.529741 2026] [:error] [pid 40871:tid 40888] [client 104.46.216.98:48875] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZjrXDqDikjdiOZeJyXhrAAAAM8"]
[Sat Feb 21 07:16:49.933132 2026] [:error] [pid 22558:tid 22569] [client 104.46.216.98:48863] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aZjrYSrVaIb2gXsVbDpXMQAAAQk"]
[Sat Feb 21 07:16:50.341130 2026] [:error] [pid 40871:tid 40876] [client 104.46.216.98:55528] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aZjrYjqDikjdiOZeJyXhuwAAAMM"]
[Sat Feb 21 07:16:52.368268 2026] [:error] [pid 40758:tid 40833] [client 104.46.216.98:55265] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aZjrZEBAHxvBM3i9iKHCdwAAAIs"]
[Sat Feb 21 07:16:53.028511 2026] [:error] [pid 22558:tid 22575] [client 104.46.216.98:57816] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "aZjrZSrVaIb2gXsVbDpXQAAAAQ8"]
[Sat Feb 21 07:16:53.347866 2026] [:error] [pid 40871:tid 40885] [client 104.46.216.98:55551] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aZjrZTqDikjdiOZeJyXhwAAAAMw"]
[Sat Feb 21 07:16:53.739878 2026] [:error] [pid 40756:tid 40777] [client 104.46.216.98:62964] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aZjrZQNlDP60sLYgqXLyMQAAAAs"]
[Sat Feb 21 07:16:54.108008 2026] [:error] [pid 40756:tid 40788] [client 104.46.216.98:48840] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aZjrZgNlDP60sLYgqXLyNQAAABY"]
[Sat Feb 21 07:16:54.362216 2026] [:error] [pid 40756:tid 40784] [client 104.46.216.98:63505] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aZjrZgNlDP60sLYgqXLyNwAAABI"]
[Sat Feb 21 07:16:54.649577 2026] [:error] [pid 40871:tid 40884] [client 104.46.216.98:62965] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aZjrZjqDikjdiOZeJyXhwgAAAMs"]
[Sat Feb 21 07:16:55.153122 2026] [:error] [pid 40871:tid 40883] [client 104.46.216.98:55519] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aZjrZzqDikjdiOZeJyXhxQAAAMo"]
[Sat Feb 21 07:16:55.456358 2026] [:error] [pid 40871:tid 40882] [client 104.46.216.98:63528] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aZjrZzqDikjdiOZeJyXhxwAAAMk"]
[Sat Feb 21 07:16:55.762681 2026] [:error] [pid 40756:tid 40766] [client 104.46.216.98:55517] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aZjrZwNlDP60sLYgqXLyOwAAAAA"]
[Sat Feb 21 07:16:56.088873 2026] [:error] [pid 22558:tid 22581] [client 104.46.216.98:57844] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aZjraCrVaIb2gXsVbDpXRwAAARU"]
[Sat Feb 21 07:16:56.375701 2026] [:error] [pid 22558:tid 22577] [client 104.46.216.98:55506] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aZjraCrVaIb2gXsVbDpXSAAAARE"]
[Sat Feb 21 07:16:56.649684 2026] [:error] [pid 40871:tid 40875] [client 104.46.216.98:63538] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aZjraDqDikjdiOZeJyXhygAAAMI"]
[Sat Feb 21 07:16:56.922703 2026] [:error] [pid 40756:tid 40767] [client 104.46.216.98:63516] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aZjraANlDP60sLYgqXLyPwAAAAE"]
[Sat Feb 21 07:16:57.273373 2026] [:error] [pid 40756:tid 40772] [client 104.46.216.98:48869] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aZjraQNlDP60sLYgqXLyQQAAAAY"]
[Sat Feb 21 07:16:57.578812 2026] [:error] [pid 22558:tid 22565] [client 104.46.216.98:57808] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aZjraSrVaIb2gXsVbDpXTwAAAQU"]
[Sat Feb 21 07:16:58.159228 2026] [:error] [pid 22558:tid 22560] [client 104.46.216.98:62942] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aZjrairVaIb2gXsVbDpXUgAAAQA"]
[Sat Feb 21 07:16:58.602860 2026] [:error] [pid 22558:tid 22576] [client 104.46.216.98:57823] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aZjrairVaIb2gXsVbDpXVQAAARA"]
[Sat Feb 21 07:16:58.974108 2026] [:error] [pid 40758:tid 40846] [client 104.46.216.98:55539] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZjrakBAHxvBM3i9iKHCgQAAAJg"]
[Sat Feb 21 07:16:59.377284 2026] [:error] [pid 22558:tid 22578] [client 104.46.216.98:55254] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/backup.php"] [unique_id "aZjrayrVaIb2gXsVbDpXWAAAARI"]
[Sat Feb 21 07:17:04.806826 2026] [:error] [pid 22558:tid 22569] [client 104.46.216.98:62942] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aZjrcCrVaIb2gXsVbDpXeQAAAQk"]
[Sat Feb 21 07:17:05.215993 2026] [:error] [pid 40756:tid 40784] [client 104.46.216.98:48841] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aZjrcQNlDP60sLYgqXLySQAAABI"]
[Sat Feb 21 07:17:05.482781 2026] [:error] [pid 40758:tid 40838] [client 104.46.216.98:48893] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aZjrcUBAHxvBM3i9iKHCggAAAJA"]
[Sat Feb 21 07:17:05.855476 2026] [:error] [pid 40756:tid 40769] [client 104.46.216.98:63498] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aZjrcQNlDP60sLYgqXLySgAAAAM"]
[Sat Feb 21 07:17:06.198818 2026] [:error] [pid 40758:tid 40836] [client 104.46.216.98:55270] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/et-cache/"] [unique_id "aZjrckBAHxvBM3i9iKHChAAAAI4"]
[Sat Feb 21 07:17:06.777721 2026] [:error] [pid 40758:tid 40833] [client 104.46.216.98:62922] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/et-cache/"] [unique_id "aZjrckBAHxvBM3i9iKHChwAAAIs"]
[Sat Feb 21 07:17:07.159143 2026] [:error] [pid 40871:tid 40881] [client 104.46.216.98:48879] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/et-cache/"] [unique_id "aZjrczqDikjdiOZeJyXh3wAAAMg"]
[Sat Feb 21 07:17:08.066344 2026] [:error] [pid 22558:tid 22565] [client 104.46.216.98:55537] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/et-cache/"] [unique_id "aZjrdCrVaIb2gXsVbDpXhwAAAQU"]
[Sat Feb 21 07:17:08.566388 2026] [:error] [pid 40758:tid 40843] [client 104.46.216.98:63494] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news.php"] [unique_id "aZjrdEBAHxvBM3i9iKHCjAAAAJU"]
[Sat Feb 21 07:17:09.050326 2026] [:error] [pid 40758:tid 40837] [client 104.46.216.98:55269] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news.php"] [unique_id "aZjrdUBAHxvBM3i9iKHCjgAAAI8"]
[Sat Feb 21 07:17:09.347442 2026] [:error] [pid 22558:tid 22569] [client 104.46.216.98:55550] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news.php"] [unique_id "aZjrdSrVaIb2gXsVbDpXjgAAAQk"]
[Sat Feb 21 07:17:09.752108 2026] [:error] [pid 40756:tid 40778] [client 104.46.216.98:55287] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news.php"] [unique_id "aZjrdQNlDP60sLYgqXLyTwAAAAw"]
[Sat Feb 21 07:17:10.196252 2026] [:error] [pid 40756:tid 40770] [client 104.46.216.98:57825] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZjrdgNlDP60sLYgqXLyUQAAAAQ"]
[Sat Feb 21 07:17:10.456925 2026] [:error] [pid 40756:tid 40790] [client 104.46.216.98:62950] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZjrdgNlDP60sLYgqXLyUwAAABg"]
[Sat Feb 21 07:17:10.902219 2026] [:error] [pid 40871:tid 40889] [client 104.46.216.98:55284] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZjrdjqDikjdiOZeJyXh5wAAANA"]
[Sat Feb 21 07:17:11.443564 2026] [:error] [pid 40756:tid 40786] [client 104.46.216.98:63550] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZjrdwNlDP60sLYgqXLyVQAAABQ"]
[Sat Feb 21 07:17:12.249866 2026] [:error] [pid 40871:tid 40874] [client 104.46.216.98:54156] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aZjreDqDikjdiOZeJyXh7QAAAME"]
[Sat Feb 21 07:17:12.726391 2026] [:error] [pid 22558:tid 22582] [client 104.46.216.98:55232] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aZjreCrVaIb2gXsVbDpXmwAAARY"]
[Sat Feb 21 07:17:13.683489 2026] [:error] [pid 22558:tid 22566] [client 104.46.216.98:55239] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aZjreSrVaIb2gXsVbDpXowAAAQY"]
[Sat Feb 21 07:17:14.546772 2026] [:error] [pid 22558:tid 22582] [client 104.46.216.98:55511] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aZjreirVaIb2gXsVbDpXqgAAARY"]
[Sat Feb 21 07:17:14.919481 2026] [:error] [pid 22558:tid 22584] [client 104.46.216.98:48880] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aZjreirVaIb2gXsVbDpXsgAAARg"]
[Sat Feb 21 07:17:15.567892 2026] [:error] [pid 22558:tid 22573] [client 104.46.216.98:62928] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aZjreyrVaIb2gXsVbDpXuQAAAQ0"]
[Sat Feb 21 07:17:16.007084 2026] [:error] [pid 40757:tid 40801] [client 104.46.216.98:55534] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aZjrfKg_MKVL7zhH7dxReAAAAEY"]
[Sat Feb 21 07:17:16.373203 2026] [:error] [pid 40758:tid 40841] [client 104.46.216.98:63527] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aZjrfEBAHxvBM3i9iKHCmgAAAJM"]
[Sat Feb 21 07:17:16.836586 2026] [:error] [pid 40871:tid 40894] [client 104.46.216.98:48855] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZjrfDqDikjdiOZeJyXh8gAAANU"]
[Sat Feb 21 07:17:17.163012 2026] [:error] [pid 40871:tid 40889] [client 104.46.216.98:55541] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZjrfTqDikjdiOZeJyXh9AAAANA"]
[Sat Feb 21 07:17:17.463748 2026] [:error] [pid 40756:tid 40768] [client 104.46.216.98:57850] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZjrfQNlDP60sLYgqXLyWwAAAAI"]
[Sat Feb 21 07:17:17.772512 2026] [:error] [pid 22558:tid 22583] [client 104.46.216.98:48844] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZjrfSrVaIb2gXsVbDpXwQAAARc"]
[Sat Feb 21 07:17:18.093378 2026] [:error] [pid 22558:tid 22562] [client 104.46.216.98:57827] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/admin.php"] [unique_id "aZjrfirVaIb2gXsVbDpXxAAAAQI"]
[Sat Feb 21 07:17:18.641615 2026] [:error] [pid 22558:tid 22563] [client 104.46.216.98:55497] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/admin.php"] [unique_id "aZjrfirVaIb2gXsVbDpXxwAAAQM"]
[Sat Feb 21 07:17:18.872255 2026] [:error] [pid 22558:tid 22580] [client 104.46.216.98:55253] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/admin.php"] [unique_id "aZjrfirVaIb2gXsVbDpXyAAAARQ"]
[Sat Feb 21 07:17:19.174921 2026] [:error] [pid 40871:tid 40893] [client 104.46.216.98:62916] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/admin.php"] [unique_id "aZjrfzqDikjdiOZeJyXiAgAAANQ"]
[Sat Feb 21 07:17:19.569506 2026] [:error] [pid 40757:tid 40807] [client 104.46.216.98:62940] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aZjrf6g_MKVL7zhH7dxRhAAAAEw"]
[Sat Feb 21 07:17:19.926288 2026] [:error] [pid 40757:tid 40805] [client 104.46.216.98:57793] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aZjrf6g_MKVL7zhH7dxRhwAAAEo"]
[Sat Feb 21 07:17:20.566364 2026] [:error] [pid 40757:tid 40804] [client 104.46.216.98:54145] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aZjrgKg_MKVL7zhH7dxRiAAAAEk"]
[Sat Feb 21 07:17:20.825159 2026] [:error] [pid 40757:tid 40815] [client 104.46.216.98:53832] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aZjrgKg_MKVL7zhH7dxRiQAAAFQ"]
[Sat Feb 21 07:17:21.297389 2026] [:error] [pid 40757:tid 40818] [client 104.46.216.98:62968] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.php"] [unique_id "aZjrgag_MKVL7zhH7dxRjAAAAFc"]
[Sat Feb 21 07:17:21.549400 2026] [:error] [pid 40758:tid 40845] [client 104.46.216.98:48870] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.php"] [unique_id "aZjrgUBAHxvBM3i9iKHCnQAAAJc"]
[Sat Feb 21 07:17:21.884477 2026] [:error] [pid 40756:tid 40786] [client 104.46.216.98:63542] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.php"] [unique_id "aZjrgQNlDP60sLYgqXLyaAAAABQ"]
[Sat Feb 21 07:17:22.239480 2026] [:error] [pid 40758:tid 40840] [client 104.46.216.98:57832] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.php"] [unique_id "aZjrgkBAHxvBM3i9iKHCnwAAAJI"]
[Sat Feb 21 07:17:22.472712 2026] [:error] [pid 40757:tid 40819] [client 104.46.216.98:54178] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signin.php"] [unique_id "aZjrgqg_MKVL7zhH7dxRkAAAAFg"]
[Sat Feb 21 07:17:22.886065 2026] [:error] [pid 40758:tid 40824] [client 104.46.216.98:54166] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signin.php"] [unique_id "aZjrgkBAHxvBM3i9iKHCoQAAAII"]
[Sat Feb 21 07:17:23.469175 2026] [:error] [pid 22558:tid 22583] [client 104.46.216.98:48835] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signin.php"] [unique_id "aZjrgyrVaIb2gXsVbDpXzQAAARc"]
[Sat Feb 21 07:17:23.741154 2026] [:error] [pid 40871:tid 40886] [client 104.46.216.98:48884] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signin.php"] [unique_id "aZjrgzqDikjdiOZeJyXiCwAAAM0"]
[Sat Feb 21 07:17:24.012001 2026] [:error] [pid 22558:tid 22572] [client 104.46.216.98:48873] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/file.php"] [unique_id "aZjrhCrVaIb2gXsVbDpX0wAAAQw"]
[Sat Feb 21 07:17:24.537710 2026] [:error] [pid 40757:tid 40804] [client 104.46.216.98:54180] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/file.php"] [unique_id "aZjrhKg_MKVL7zhH7dxRnQAAAEk"]
[Sat Feb 21 07:17:24.839101 2026] [:error] [pid 40871:tid 40890] [client 104.46.216.98:55491] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/file.php"] [unique_id "aZjrhDqDikjdiOZeJyXiDQAAANE"]
[Sat Feb 21 07:17:25.298767 2026] [:error] [pid 40871:tid 40892] [client 104.46.216.98:55524] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/file.php"] [unique_id "aZjrhTqDikjdiOZeJyXiDgAAANM"]
[Sat Feb 21 07:17:25.705679 2026] [:error] [pid 40757:tid 40818] [client 104.46.216.98:55547] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aZjrhag_MKVL7zhH7dxRogAAAFc"]
[Sat Feb 21 07:17:26.473318 2026] [:error] [pid 40871:tid 40877] [client 104.46.216.98:62926] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aZjrhjqDikjdiOZeJyXiGAAAAMQ"]
[Sat Feb 21 07:17:27.178463 2026] [:error] [pid 22558:tid 22560] [client 104.46.216.98:55256] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aZjrhyrVaIb2gXsVbDpX3gAAAQA"]
[Sat Feb 21 07:17:27.513895 2026] [:error] [pid 22558:tid 22584] [client 104.46.216.98:53826] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aZjrhyrVaIb2gXsVbDpX3wAAARg"]
[Sat Feb 21 07:17:27.817806 2026] [:error] [pid 22558:tid 22579] [client 104.46.216.98:62951] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aZjrhyrVaIb2gXsVbDpX4QAAARM"]
[Sat Feb 21 07:17:28.351819 2026] [:error] [pid 40871:tid 40874] [client 104.46.216.98:62961] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aZjriDqDikjdiOZeJyXiIAAAAME"]
[Sat Feb 21 07:17:29.323778 2026] [:error] [pid 40756:tid 40775] [client 104.46.216.98:55531] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aZjriQNlDP60sLYgqXLygwAAAAk"]
[Sat Feb 21 07:17:30.576741 2026] [:error] [pid 40757:tid 40815] [client 104.46.216.98:55504] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aZjriqg_MKVL7zhH7dxRqgAAAFQ"]
[Sat Feb 21 07:17:31.221272 2026] [:error] [pid 40757:tid 40803] [client 104.46.216.98:62958] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aZjri6g_MKVL7zhH7dxRrQAAAEg"]
[Sat Feb 21 07:17:32.203205 2026] [:error] [pid 40756:tid 40781] [client 104.46.216.98:53871] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aZjrjANlDP60sLYgqXLyhgAAAA8"]
[Sat Feb 21 07:17:33.233877 2026] [:error] [pid 22558:tid 22560] [client 104.46.216.98:55523] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aZjrjSrVaIb2gXsVbDpX8AAAAQA"]
[Sat Feb 21 07:17:33.730113 2026] [:error] [pid 22558:tid 22573] [client 104.46.216.98:55532] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aZjrjSrVaIb2gXsVbDpX8wAAAQ0"]
[Sat Feb 21 07:17:35.087098 2026] [:error] [pid 22558:tid 22568] [client 104.46.216.98:55513] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aZjrjyrVaIb2gXsVbDpX-AAAAQg"]
[Sat Feb 21 07:17:36.569106 2026] [:error] [pid 40871:tid 40893] [client 104.46.216.98:54206] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aZjrkDqDikjdiOZeJyXiMAAAANQ"]
[Sat Feb 21 07:17:37.156897 2026] [:error] [pid 22558:tid 22579] [client 104.46.216.98:54161] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aZjrkSrVaIb2gXsVbDpYAQAAARM"]
[Sat Feb 21 07:17:37.736667 2026] [:error] [pid 40871:tid 40878] [client 104.46.216.98:63526] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.status"] [unique_id "aZjrkTqDikjdiOZeJyXiOQAAAMU"]
[Sat Feb 21 07:17:38.218958 2026] [:error] [pid 40871:tid 40886] [client 104.46.216.98:57795] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.status"] [unique_id "aZjrkjqDikjdiOZeJyXiOgAAAM0"]
[Sat Feb 21 07:17:38.902683 2026] [:error] [pid 40757:tid 40818] [client 104.46.216.98:54171] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.status"] [unique_id "aZjrkqg_MKVL7zhH7dxRwAAAAFc"]
[Sat Feb 21 07:17:39.414522 2026] [:error] [pid 40757:tid 40796] [client 104.46.216.98:48856] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.status"] [unique_id "aZjrk6g_MKVL7zhH7dxRwgAAAEE"]
[Sat Feb 21 07:17:39.839795 2026] [:error] [pid 40757:tid 40810] [client 104.46.216.98:62967] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aZjrk6g_MKVL7zhH7dxRxQAAAE8"]
[Sat Feb 21 07:17:40.251412 2026] [:error] [pid 40757:tid 40798] [client 104.46.216.98:48849] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aZjrlKg_MKVL7zhH7dxRyQAAAEM"]
[Sat Feb 21 07:17:40.837956 2026] [:error] [pid 40758:tid 40838] [client 104.46.216.98:48834] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aZjrlEBAHxvBM3i9iKHCzgAAAJA"]
[Sat Feb 21 07:17:41.180381 2026] [:error] [pid 40757:tid 40804] [client 104.46.216.98:53857] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aZjrlag_MKVL7zhH7dxRzgAAAEk"]
[Sat Feb 21 07:17:41.513621 2026] [:error] [pid 40871:tid 40894] [client 104.46.216.98:63512] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aZjrlTqDikjdiOZeJyXiPgAAANU"]
[Sat Feb 21 07:17:41.889621 2026] [:error] [pid 40757:tid 40805] [client 104.46.216.98:55249] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aZjrlag_MKVL7zhH7dxR0gAAAEo"]
[Sat Feb 21 07:17:42.269162 2026] [:error] [pid 40757:tid 40818] [client 104.46.216.98:48847] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aZjrlqg_MKVL7zhH7dxR1AAAAFc"]
[Sat Feb 21 07:17:42.583854 2026] [:error] [pid 40758:tid 40826] [client 104.46.216.98:54186] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aZjrlkBAHxvBM3i9iKHC1AAAAIQ"]
[Sat Feb 21 07:17:42.968122 2026] [:error] [pid 22558:tid 22565] [client 104.46.216.98:57836] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/special.php"] [unique_id "aZjrlirVaIb2gXsVbDpYCgAAAQU"]
[Sat Feb 21 07:17:43.308605 2026] [:error] [pid 40757:tid 40796] [client 104.46.216.98:55235] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/special.php"] [unique_id "aZjrl6g_MKVL7zhH7dxR1wAAAEE"]
[Sat Feb 21 07:17:43.631880 2026] [:error] [pid 40758:tid 40845] [client 104.46.216.98:62915] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/special.php"] [unique_id "aZjrl0BAHxvBM3i9iKHC1gAAAJc"]
[Sat Feb 21 07:17:44.151410 2026] [:error] [pid 40758:tid 40823] [client 104.46.216.98:55548] [client 104.46.216.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/special.php"] [unique_id "aZjrmEBAHxvBM3i9iKHC2QAAAIE"]
[Sat Feb 21 07:17:44.430375 2026] [:error] [pid 40756:tid 40776] [client 104.46.216.98:48868] [client 104.46.216.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZjrmANlDP60sLYgqXLykQAAAAo"]
[Sat Feb 21 10:07:31.743099 2026] [:error] [pid 40756:tid 40789] [client 43.157.174.69:35384] [client 43.157.174.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZkTYwNlDP60sLYgqXI4LQAAABc"]
[Sat Feb 21 12:34:21.343103 2026] [:error] [pid 40757:tid 40817] [client 49.37.42.230:51487] [client 49.37.42.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.42.230, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZk1zag_MKVL7zhH7dy5yAAAAFY"]
[Sat Feb 21 18:02:06.061149 2026] [:error] [pid 40758:tid 40842] [client 119.96.24.54:46130] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZmCnkBAHxvBM3i9iKFpGQAAAJQ"]
[Sun Feb 22 02:25:25.818659 2026] [:error] [pid 3195:tid 3445] [client 193.34.33.10:7548] [client 193.34.33.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.34.33.10, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZn4lQ28anZ1nWyZCI5P6QAAAEY"]
[Sun Feb 22 03:14:20.569150 2026] [:error] [pid 3179:tid 3416] [client 209.87.169.128:64567] [client 209.87.169.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.128, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZoEDNgAWCcL8bTGJUVHGQAAAAQ"]
[Sun Feb 22 05:36:36.771800 2026] [:error] [pid 10537:tid 10560] [client 43.166.136.24:38082] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZolZLgCiSojLQQBckj0ZAAAARU"]
[Sun Feb 22 05:56:18.101156 2026] [:error] [pid 9589:tid 9660] [client 20.203.129.217:18396] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aZoqAtr-1mylR_FoXQUoxwAAAIk"]
[Sun Feb 22 05:56:18.577221 2026] [:error] [pid 10537:tid 10539] [client 20.203.129.217:29118] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "aZoqArgCiSojLQQBckj_mwAAAQA"]
[Sun Feb 22 05:56:19.048988 2026] [:error] [pid 9587:tid 9615] [client 20.203.129.217:8537] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "aZoqA-hqt7NXCp-NupH04wAAABM"]
[Sun Feb 22 05:56:19.528631 2026] [:error] [pid 10537:tid 10556] [client 20.203.129.217:21403] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "aZoqA7gCiSojLQQBckj_ngAAARE"]
[Sun Feb 22 05:56:20.007862 2026] [:error] [pid 9588:tid 9632] [client 20.203.129.217:15436] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zu.php"] [unique_id "aZoqBGjNBsxseiTcEllslgAAAEg"]
[Sun Feb 22 05:56:20.481789 2026] [:error] [pid 9588:tid 9631] [client 20.203.129.217:29064] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zu.php"] [unique_id "aZoqBGjNBsxseiTcEllslwAAAEc"]
[Sun Feb 22 05:56:20.963646 2026] [:error] [pid 9589:tid 9652] [client 20.203.129.217:17261] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a332.php"] [unique_id "aZoqBNr-1mylR_FoXQUozQAAAIE"]
[Sun Feb 22 05:56:21.437884 2026] [:error] [pid 9589:tid 9659] [client 20.203.129.217:29137] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a332.php"] [unique_id "aZoqBdr-1mylR_FoXQUozgAAAIg"]
[Sun Feb 22 05:56:21.925725 2026] [:error] [pid 9695:tid 9710] [client 20.203.129.217:29165] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2.php"] [unique_id "aZoqBVpPqolBNLmJ4eo6rgAAAM0"]
[Sun Feb 22 05:56:22.398866 2026] [:error] [pid 9588:tid 9642] [client 20.203.129.217:22874] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2.php"] [unique_id "aZoqBmjNBsxseiTcEllsmAAAAFI"]
[Sun Feb 22 05:56:22.907762 2026] [:error] [pid 9587:tid 9609] [client 20.203.129.217:17259] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aZoqBuhqt7NXCp-NupH06AAAAA0"]
[Sun Feb 22 05:56:23.380325 2026] [:error] [pid 9588:tid 9629] [client 20.203.129.217:21422] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aZoqB2jNBsxseiTcEllsmQAAAEU"]
[Sun Feb 22 05:56:23.866761 2026] [:error] [pid 9695:tid 9697] [client 20.203.129.217:29085] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aZoqB1pPqolBNLmJ4eo6sQAAAMA"]
[Sun Feb 22 05:56:24.338762 2026] [:error] [pid 9588:tid 9636] [client 20.203.129.217:22855] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aZoqCGjNBsxseiTcEllsnwAAAEw"]
[Sun Feb 22 05:56:24.810234 2026] [:error] [pid 9587:tid 9602] [client 20.203.129.217:20188] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fresh3.php"] [unique_id "aZoqCOhqt7NXCp-NupH07AAAAAY"]
[Sun Feb 22 05:56:25.283679 2026] [:error] [pid 9695:tid 9707] [client 20.203.129.217:16203] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/selesai.php"] [unique_id "aZoqCVpPqolBNLmJ4eo6tAAAAMo"]
[Sun Feb 22 05:56:25.759345 2026] [:error] [pid 9588:tid 9632] [client 20.203.129.217:18386] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/selesai.php"] [unique_id "aZoqCWjNBsxseiTcEllsogAAAEg"]
[Sun Feb 22 05:56:26.235944 2026] [:error] [pid 9695:tid 9698] [client 20.203.129.217:18403] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "aZoqClpPqolBNLmJ4eo6tgAAAME"]
[Sun Feb 22 05:56:26.708034 2026] [:error] [pid 9587:tid 9603] [client 20.203.129.217:29519] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "aZoqCuhqt7NXCp-NupH08AAAAAc"]
[Sun Feb 22 05:56:27.186464 2026] [:error] [pid 9587:tid 9617] [client 20.203.129.217:18381] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aZoqC-hqt7NXCp-NupH09QAAABU"]
[Sun Feb 22 05:56:27.659624 2026] [:error] [pid 9589:tid 9660] [client 20.203.129.217:17718] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aZoqC9r-1mylR_FoXQUo1gAAAIk"]
[Sun Feb 22 05:56:28.135108 2026] [:error] [pid 10537:tid 10562] [client 20.203.129.217:20160] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aZoqDLgCiSojLQQBckj_qQAAARc"]
[Sun Feb 22 05:56:28.610097 2026] [:error] [pid 10537:tid 10559] [client 20.203.129.217:1553] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aZoqDLgCiSojLQQBckj_rAAAARQ"]
[Sun Feb 22 05:56:29.121398 2026] [:error] [pid 9588:tid 9636] [client 20.203.129.217:15884] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0byte.php"] [unique_id "aZoqDWjNBsxseiTcEllspwAAAEw"]
[Sun Feb 22 05:56:29.593358 2026] [:error] [pid 9587:tid 9600] [client 20.203.129.217:29148] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0byte.php"] [unique_id "aZoqDehqt7NXCp-NupH0-wAAAAQ"]
[Sun Feb 22 05:56:30.074738 2026] [:error] [pid 9588:tid 9644] [client 20.203.129.217:18639] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0byte.php"] [unique_id "aZoqDmjNBsxseiTcEllsrQAAAFQ"]
[Sun Feb 22 05:56:30.548106 2026] [:error] [pid 10537:tid 10553] [client 20.203.129.217:15438] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0byte.php"] [unique_id "aZoqDrgCiSojLQQBckj_sQAAAQ4"]
[Sun Feb 22 05:56:31.020700 2026] [:error] [pid 9587:tid 9619] [client 20.203.129.217:20208] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs1.php"] [unique_id "aZoqD-hqt7NXCp-NupH0_AAAABc"]
[Sun Feb 22 05:56:31.492638 2026] [:error] [pid 9695:tid 9716] [client 20.203.129.217:15447] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs1.php"] [unique_id "aZoqD1pPqolBNLmJ4eo6vQAAANM"]
[Sun Feb 22 05:56:31.966307 2026] [:error] [pid 9589:tid 9675] [client 20.203.129.217:29541] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs1.php"] [unique_id "aZoqD9r-1mylR_FoXQUo1wAAAJg"]
[Sun Feb 22 05:56:32.439473 2026] [:error] [pid 9588:tid 9626] [client 20.203.129.217:17274] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs1.php"] [unique_id "aZoqEGjNBsxseiTcEllssgAAAEI"]
[Sun Feb 22 05:56:32.931786 2026] [:error] [pid 10537:tid 10551] [client 20.203.129.217:29077] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knmt.php"] [unique_id "aZoqELgCiSojLQQBckj_uAAAAQw"]
[Sun Feb 22 05:56:33.406456 2026] [:error] [pid 9589:tid 9663] [client 20.203.129.217:18224] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knmt.php"] [unique_id "aZoqEdr-1mylR_FoXQUo2AAAAIw"]
[Sun Feb 22 05:56:33.886423 2026] [:error] [pid 9589:tid 9654] [client 20.203.129.217:24294] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZoqEdr-1mylR_FoXQUo2QAAAIM"]
[Sun Feb 22 05:56:34.357567 2026] [:error] [pid 9587:tid 9606] [client 20.203.129.217:15632] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZoqEuhqt7NXCp-NupH1AgAAAAo"]
[Sun Feb 22 05:56:34.829095 2026] [:error] [pid 10537:tid 10549] [client 20.203.129.217:17229] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZoqErgCiSojLQQBckj_uwAAAQo"]
[Sun Feb 22 05:56:35.300948 2026] [:error] [pid 9589:tid 9657] [client 20.203.129.217:29120] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi.php"] [unique_id "aZoqE9r-1mylR_FoXQUo3gAAAIY"]
[Sun Feb 22 05:56:35.788898 2026] [:error] [pid 9587:tid 9600] [client 20.203.129.217:15462] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lkui.php"] [unique_id "aZoqE-hqt7NXCp-NupH1BQAAAAQ"]
[Sun Feb 22 05:56:36.261288 2026] [:error] [pid 9587:tid 9615] [client 20.203.129.217:18183] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lkui.php"] [unique_id "aZoqFOhqt7NXCp-NupH1BgAAABM"]
[Sun Feb 22 05:56:36.741964 2026] [:error] [pid 9587:tid 9619] [client 20.203.129.217:24600] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lkui.php"] [unique_id "aZoqFOhqt7NXCp-NupH1BwAAABc"]
[Sun Feb 22 05:56:37.216347 2026] [:error] [pid 9695:tid 9700] [client 20.203.129.217:17254] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lkui.php"] [unique_id "aZoqFVpPqolBNLmJ4eo6xQAAAMM"]
[Sun Feb 22 05:56:37.690014 2026] [:error] [pid 9695:tid 9706] [client 20.203.129.217:17714] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZoqFVpPqolBNLmJ4eo6xwAAAMk"]
[Sun Feb 22 05:56:38.163039 2026] [:error] [pid 10537:tid 10559] [client 20.203.129.217:24293] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZoqFrgCiSojLQQBckj_wAAAARQ"]
[Sun Feb 22 05:56:38.635344 2026] [:error] [pid 9588:tid 9642] [client 20.203.129.217:18185] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZoqFmjNBsxseiTcEllsuwAAAFI"]
[Sun Feb 22 05:56:39.111271 2026] [:error] [pid 10537:tid 10549] [client 20.203.129.217:16149] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZoqF7gCiSojLQQBckj_xAAAAQo"]
[Sun Feb 22 05:56:39.585290 2026] [:error] [pid 10537:tid 10552] [client 20.203.129.217:18223] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aZoqF7gCiSojLQQBckj_xQAAAQ0"]
[Sun Feb 22 05:56:40.064789 2026] [:error] [pid 9589:tid 9664] [client 20.203.129.217:17447] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aZoqGNr-1mylR_FoXQUo5AAAAI0"]
[Sun Feb 22 05:56:40.536885 2026] [:error] [pid 10537:tid 10563] [client 20.203.129.217:18416] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aZoqGLgCiSojLQQBckj_yAAAARg"]
[Sun Feb 22 05:56:41.012009 2026] [:error] [pid 9588:tid 9641] [client 20.203.129.217:24589] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aZoqGWjNBsxseiTcEllsvwAAAFE"]
[Sun Feb 22 05:56:41.488069 2026] [:error] [pid 10537:tid 10548] [client 20.203.129.217:15483] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aZoqGbgCiSojLQQBckj_ygAAAQk"]
[Sun Feb 22 05:56:41.963803 2026] [:error] [pid 10537:tid 10551] [client 20.203.129.217:21415] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZoqGbgCiSojLQQBckj_zAAAAQw"]
[Sun Feb 22 05:56:42.434258 2026] [:error] [pid 9588:tid 9633] [client 20.203.129.217:29167] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZoqGmjNBsxseiTcEllswQAAAEk"]
[Sun Feb 22 05:56:42.905686 2026] [:error] [pid 9587:tid 9602] [client 20.203.129.217:21432] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZoqGuhqt7NXCp-NupH1CwAAAAY"]
[Sun Feb 22 05:56:43.381371 2026] [:error] [pid 9695:tid 9715] [client 20.203.129.217:16178] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZoqG1pPqolBNLmJ4eo6zwAAANI"]
[Sun Feb 22 05:56:43.870261 2026] [:error] [pid 9589:tid 9665] [client 20.203.129.217:22909] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aZoqG9r-1mylR_FoXQUo6QAAAI4"]
[Sun Feb 22 05:56:44.344784 2026] [:error] [pid 9695:tid 9708] [client 20.203.129.217:21396] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aZoqHFpPqolBNLmJ4eo61QAAAMs"]
[Sun Feb 22 05:56:44.816220 2026] [:error] [pid 9587:tid 9610] [client 20.203.129.217:24586] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aZoqHOhqt7NXCp-NupH1DQAAAA4"]
[Sun Feb 22 05:56:45.292578 2026] [:error] [pid 9589:tid 9662] [client 20.203.129.217:18209] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aZoqHdr-1mylR_FoXQUo8gAAAIs"]
[Sun Feb 22 05:56:45.765228 2026] [:error] [pid 10537:tid 10553] [client 20.203.129.217:18669] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "aZoqHbgCiSojLQQBckj_0AAAAQ4"]
[Sun Feb 22 05:56:46.237760 2026] [:error] [pid 9589:tid 9659] [client 20.203.129.217:18404] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "aZoqHtr-1mylR_FoXQUo9gAAAIg"]
[Sun Feb 22 05:56:46.728602 2026] [:error] [pid 10537:tid 10563] [client 20.203.129.217:29142] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "aZoqHrgCiSojLQQBckj_0gAAARg"]
[Sun Feb 22 05:56:47.205370 2026] [:error] [pid 9695:tid 9705] [client 20.203.129.217:29097] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "aZoqH1pPqolBNLmJ4eo63QAAAMg"]
[Sun Feb 22 05:56:47.679264 2026] [:error] [pid 9695:tid 9709] [client 20.203.129.217:17676] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aZoqH1pPqolBNLmJ4eo63gAAAMw"]
[Sun Feb 22 05:56:48.151821 2026] [:error] [pid 9695:tid 9708] [client 20.203.129.217:24258] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aZoqIFpPqolBNLmJ4eo63wAAAMs"]
[Sun Feb 22 05:56:48.624802 2026] [:error] [pid 9695:tid 9721] [client 20.203.129.217:24639] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aZoqIFpPqolBNLmJ4eo64wAAANg"]
[Sun Feb 22 05:56:49.095981 2026] [:error] [pid 9695:tid 9718] [client 20.203.129.217:24289] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aZoqIVpPqolBNLmJ4eo65QAAANU"]
[Sun Feb 22 05:56:49.568326 2026] [:error] [pid 9695:tid 9712] [client 20.203.129.217:15466] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZoqIVpPqolBNLmJ4eo66gAAAM8"]
[Sun Feb 22 05:56:50.039991 2026] [:error] [pid 9587:tid 9608] [client 20.203.129.217:18221] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZoqIuhqt7NXCp-NupH1EgAAAAw"]
[Sun Feb 22 05:56:50.512692 2026] [:error] [pid 9589:tid 9664] [client 20.203.129.217:18203] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZoqItr-1mylR_FoXQUo-gAAAI0"]
[Sun Feb 22 05:56:50.984363 2026] [:error] [pid 10537:tid 10543] [client 20.203.129.217:17249] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxekqlxb.php"] [unique_id "aZoqIrgCiSojLQQBckj_1QAAAQQ"]
[Sun Feb 22 05:56:51.458766 2026] [:error] [pid 10537:tid 10546] [client 20.203.129.217:21419] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZoqI7gCiSojLQQBckj_1wAAAQc"]
[Sun Feb 22 05:56:51.931047 2026] [:error] [pid 10537:tid 10553] [client 20.203.129.217:15891] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZoqI7gCiSojLQQBckj_3AAAAQ4"]
[Sun Feb 22 05:56:52.407332 2026] [:error] [pid 10537:tid 10563] [client 20.203.129.217:29115] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZoqJLgCiSojLQQBckj_3gAAARg"]
[Sun Feb 22 05:56:52.879453 2026] [:error] [pid 10537:tid 10548] [client 20.203.129.217:16252] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scr1pts.php"] [unique_id "aZoqJLgCiSojLQQBckj_4AAAAQk"]
[Sun Feb 22 05:56:53.352743 2026] [:error] [pid 9589:tid 9673] [client 20.203.129.217:24307] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shlo.php"] [unique_id "aZoqJdr-1mylR_FoXQUpAQAAAJY"]
[Sun Feb 22 05:56:53.824696 2026] [:error] [pid 10537:tid 10552] [client 20.203.129.217:29061] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shlo.php"] [unique_id "aZoqJbgCiSojLQQBckj_4QAAAQ0"]
[Sun Feb 22 05:56:54.300121 2026] [:error] [pid 9587:tid 9602] [client 20.203.129.217:14148] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shlo.php"] [unique_id "aZoqJuhqt7NXCp-NupH1FQAAAAY"]
[Sun Feb 22 05:56:54.784696 2026] [:error] [pid 10537:tid 10540] [client 20.203.129.217:14647] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shlo.php"] [unique_id "aZoqJrgCiSojLQQBckj_4wAAAQE"]
[Sun Feb 22 05:56:55.259533 2026] [:error] [pid 10537:tid 10546] [client 20.203.129.217:20911] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aZoqJ7gCiSojLQQBckj_5QAAAQc"]
[Sun Feb 22 05:56:55.732356 2026] [:error] [pid 9588:tid 9636] [client 20.203.129.217:22189] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aZoqJ2jNBsxseiTcEllsyAAAAEw"]
[Sun Feb 22 05:56:56.204887 2026] [:error] [pid 9588:tid 9641] [client 20.203.129.217:18580] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aZoqKGjNBsxseiTcEllsyQAAAFE"]
[Sun Feb 22 05:56:56.679709 2026] [:error] [pid 9588:tid 9648] [client 20.203.129.217:9907] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "aZoqKGjNBsxseiTcEllsywAAAFg"]
[Sun Feb 22 05:56:57.151741 2026] [:error] [pid 10537:tid 10547] [client 20.203.129.217:17201] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZoqKbgCiSojLQQBckj_7AAAAQg"]
[Sun Feb 22 05:56:57.668593 2026] [:error] [pid 10537:tid 10563] [client 20.203.129.217:17205] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZoqKbgCiSojLQQBckj_8AAAARg"]
[Sun Feb 22 05:56:58.145849 2026] [:error] [pid 9587:tid 9605] [client 20.203.129.217:15417] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZoqKuhqt7NXCp-NupH1GQAAAAk"]
[Sun Feb 22 05:56:58.621243 2026] [:error] [pid 9588:tid 9631] [client 20.203.129.217:15229] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6bcwiqwj.php"] [unique_id "aZoqKmjNBsxseiTcEllszwAAAEc"]
[Sun Feb 22 05:56:59.100738 2026] [:error] [pid 9588:tid 9637] [client 20.203.129.217:28716] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mar.php"] [unique_id "aZoqK2jNBsxseiTcElls0AAAAE0"]
[Sun Feb 22 05:56:59.579389 2026] [:error] [pid 10537:tid 10545] [client 20.203.129.217:28113] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mar.php"] [unique_id "aZoqK7gCiSojLQQBckj_9wAAAQY"]
[Sun Feb 22 05:57:00.059986 2026] [:error] [pid 9587:tid 9613] [client 20.203.129.217:11706] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mar.php"] [unique_id "aZoqLOhqt7NXCp-NupH1HAAAABE"]
[Sun Feb 22 05:57:00.532898 2026] [:error] [pid 10537:tid 10555] [client 20.203.129.217:1664] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mar.php"] [unique_id "aZoqLLgCiSojLQQBckj_-gAAARA"]
[Sun Feb 22 05:57:01.016051 2026] [:error] [pid 10537:tid 10542] [client 20.203.129.217:1723] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws69.php"] [unique_id "aZoqLbgCiSojLQQBckj__AAAAQM"]
[Sun Feb 22 05:57:01.507617 2026] [:error] [pid 9588:tid 9624] [client 20.203.129.217:26084] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws69.php"] [unique_id "aZoqLWjNBsxseiTcElls0wAAAEA"]
[Sun Feb 22 05:57:01.996735 2026] [:error] [pid 10537:tid 10559] [client 20.203.129.217:28718] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws69.php"] [unique_id "aZoqLbgCiSojLQQBckgAAAAAARQ"]
[Sun Feb 22 05:57:02.472942 2026] [:error] [pid 9695:tid 9720] [client 20.203.129.217:16647] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws69.php"] [unique_id "aZoqLlpPqolBNLmJ4eo69gAAANc"]
[Sun Feb 22 05:57:02.947483 2026] [:error] [pid 9589:tid 9666] [client 20.203.129.217:1673] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "aZoqLtr-1mylR_FoXQUpCgAAAI8"]
[Sun Feb 22 05:57:03.441688 2026] [:error] [pid 10537:tid 10550] [client 20.203.129.217:11392] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "aZoqL7gCiSojLQQBckgAAgAAAQs"]
[Sun Feb 22 05:57:04.004232 2026] [:error] [pid 9589:tid 9664] [client 20.203.129.217:28672] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "aZoqMNr-1mylR_FoXQUpDAAAAI0"]
[Sun Feb 22 05:57:04.495811 2026] [:error] [pid 10537:tid 10542] [client 20.203.129.217:11987] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "aZoqMLgCiSojLQQBckgABgAAAQM"]
[Sun Feb 22 05:57:04.980122 2026] [:error] [pid 9695:tid 9700] [client 20.203.129.217:11658] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aZoqMFpPqolBNLmJ4eo6-gAAAMM"]
[Sun Feb 22 05:57:05.454570 2026] [:error] [pid 9589:tid 9652] [client 20.203.129.217:11991] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aZoqMdr-1mylR_FoXQUpDgAAAIE"]
[Sun Feb 22 05:57:05.928939 2026] [:error] [pid 9589:tid 9662] [client 20.203.129.217:28124] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aZoqMdr-1mylR_FoXQUpEgAAAIs"]
[Sun Feb 22 05:57:06.406915 2026] [:error] [pid 9695:tid 9702] [client 20.203.129.217:12492] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aZoqMlpPqolBNLmJ4eo6_QAAAMU"]
[Sun Feb 22 05:57:06.987769 2026] [:error] [pid 9589:tid 9660] [client 20.203.129.217:1717] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aZoqMtr-1mylR_FoXQUpFQAAAIk"]
[Sun Feb 22 05:57:07.491206 2026] [:error] [pid 10537:tid 10547] [client 20.203.129.217:27270] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aZoqM7gCiSojLQQBckgACAAAAQg"]
[Sun Feb 22 05:57:08.019473 2026] [:error] [pid 9695:tid 9710] [client 20.203.129.217:15718] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aZoqNFpPqolBNLmJ4eo6_wAAAM0"]
[Sun Feb 22 05:57:08.540580 2026] [:error] [pid 9589:tid 9671] [client 20.203.129.217:26110] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aZoqNNr-1mylR_FoXQUpGAAAAJQ"]
[Sun Feb 22 05:57:09.023616 2026] [:error] [pid 10537:tid 10550] [client 20.203.129.217:33202] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aZoqNbgCiSojLQQBckgACgAAAQs"]
[Sun Feb 22 05:57:09.512379 2026] [:error] [pid 9695:tid 9705] [client 20.203.129.217:15709] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aZoqNVpPqolBNLmJ4eo7AAAAAMg"]
[Sun Feb 22 05:57:09.999711 2026] [:error] [pid 9588:tid 9641] [client 20.203.129.217:28715] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aZoqNWjNBsxseiTcElls3AAAAFE"]
[Sun Feb 22 05:57:10.509244 2026] [:error] [pid 9587:tid 9619] [client 20.203.129.217:28158] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aZoqNuhqt7NXCp-NupH1JgAAABc"]
[Sun Feb 22 05:57:11.014453 2026] [:error] [pid 9695:tid 9708] [client 20.203.129.217:12025] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-link10.php"] [unique_id "aZoqN1pPqolBNLmJ4eo7AgAAAMs"]
[Sun Feb 22 05:57:11.513030 2026] [:error] [pid 9589:tid 9664] [client 20.203.129.217:1666] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-link10.php"] [unique_id "aZoqN9r-1mylR_FoXQUpHQAAAI0"]
[Sun Feb 22 05:57:12.000502 2026] [:error] [pid 9589:tid 9662] [client 20.203.129.217:15692] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aZoqN9r-1mylR_FoXQUpHgAAAIs"]
[Sun Feb 22 05:57:12.477200 2026] [:error] [pid 9589:tid 9655] [client 20.203.129.217:11422] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aZoqONr-1mylR_FoXQUpIAAAAIQ"]
[Sun Feb 22 05:57:12.952105 2026] [:error] [pid 9587:tid 9606] [client 20.203.129.217:28698] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aZoqOOhqt7NXCp-NupH1KQAAAAo"]
[Sun Feb 22 05:57:13.442120 2026] [:error] [pid 9587:tid 9601] [client 20.203.129.217:27278] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aZoqOehqt7NXCp-NupH1LQAAAAU"]
[Sun Feb 22 05:57:13.941007 2026] [:error] [pid 9587:tid 9605] [client 20.203.129.217:16668] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aZoqOehqt7NXCp-NupH1MAAAAAk"]
[Sun Feb 22 05:57:14.459968 2026] [:error] [pid 9695:tid 9715] [client 20.203.129.217:11178] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aZoqOlpPqolBNLmJ4eo7CQAAANI"]
[Sun Feb 22 05:57:14.938328 2026] [:error] [pid 9587:tid 9618] [client 20.203.129.217:1814] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aZoqOuhqt7NXCp-NupH1MgAAABY"]
[Sun Feb 22 05:57:15.412685 2026] [:error] [pid 9587:tid 9613] [client 20.203.129.217:16674] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aZoqO-hqt7NXCp-NupH1MwAAABE"]
[Sun Feb 22 05:57:15.914736 2026] [:error] [pid 9589:tid 9652] [client 20.203.129.217:27299] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aZoqO9r-1mylR_FoXQUpKgAAAIE"]
[Sun Feb 22 05:57:16.395954 2026] [:error] [pid 9588:tid 9631] [client 20.203.129.217:1726] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aZoqPGjNBsxseiTcElls4AAAAEc"]
[Sun Feb 22 05:57:16.869539 2026] [:error] [pid 9589:tid 9661] [client 20.203.129.217:21783] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aZoqPNr-1mylR_FoXQUpMQAAAIo"]
[Sun Feb 22 05:57:23.516009 2026] [:error] [pid 9588:tid 9644] [client 20.203.129.217:33177] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZoqQ2jNBsxseiTcElltBQAAAFQ"]
[Sun Feb 22 05:57:23.987002 2026] [:error] [pid 9695:tid 9697] [client 20.203.129.217:21804] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZoqQ1pPqolBNLmJ4eo7EgAAAMA"]
[Sun Feb 22 05:57:24.459694 2026] [:error] [pid 9589:tid 9664] [client 20.203.129.217:11452] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZoqRNr-1mylR_FoXQUpQQAAAI0"]
[Sun Feb 22 05:57:25.060444 2026] [:error] [pid 9695:tid 9712] [client 20.203.129.217:33173] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZoqRVpPqolBNLmJ4eo7FAAAAM8"]
[Sun Feb 22 05:57:25.568955 2026] [:error] [pid 9589:tid 9652] [client 20.203.129.217:1699] [client 20.203.129.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/browse.php"] [unique_id "aZoqRdr-1mylR_FoXQUpQwAAAIE"]
[Sun Feb 22 14:53:14.576190 2026] [:error] [pid 9589:tid 9659] [client 43.166.134.114:47596] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZqn2tr-1mylR_FoXQXnZwAAAIg"]
[Sun Feb 22 18:33:23.027028 2026] [:error] [pid 12501:tid 12510] [client 114.96.103.33:45541] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZrbc5icztrbvinWGXPcEAAAAUc"]
[Sun Feb 22 19:42:30.446933 2026] [:error] [pid 17328:tid 17375] [client 49.51.195.195:39680] [client 49.51.195.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZrrpimytOXCmY4_PcY3ywAAAZc"]
[Sun Feb 22 23:32:26.103811 2026] [:error] [pid 2475:tid 2564] [client 185.137.164.16:24945] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZshiidme8TSKYpXujdsRQAAAJg"]
[Sun Feb 22 23:32:27.508728 2026] [:error] [pid 2475:tid 2560] [client 185.137.164.13:30033] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZshiydme8TSKYpXujdsWwAAAJQ"]
[Sun Feb 22 23:32:30.354339 2026] [:error] [pid 2629:tid 2672] [client 185.137.164.15:37975] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZshjglsXSV5M4mfwZ9WIQAAAU4"]
[Sun Feb 22 23:32:31.721594 2026] [:error] [pid 2629:tid 2662] [client 185.137.164.16:36531] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZshjwlsXSV5M4mfwZ9WOgAAAUQ"]
[Sun Feb 22 23:32:34.153657 2026] [:error] [pid 2473:tid 2486] [client 185.137.164.20:46189] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZshknptAeV7-XzzNzg4nwAAAAk"]
[Sun Feb 22 23:32:34.994986 2026] [:error] [pid 3103:tid 3121] [client 185.137.164.21:22005] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZshkpfzX5hBIaQY93N7DgAAAY8"]
[Sun Feb 22 23:32:35.517200 2026] [:error] [pid 2474:tid 2509] [client 185.137.164.18:24247] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZshk_hvE7P5hX_xKnS0LAAAAEA"]
[Sun Feb 22 23:32:36.076055 2026] [:error] [pid 2474:tid 2510] [client 185.137.164.12:48459] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZshlPhvE7P5hX_xKnS0NQAAAEE"]
[Sun Feb 22 23:32:36.612002 2026] [:error] [pid 2474:tid 2528] [client 185.137.164.20:21811] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZshlPhvE7P5hX_xKnS0OwAAAEw"]
[Sun Feb 22 23:32:37.258619 2026] [:error] [pid 2473:tid 2487] [client 185.137.164.19:24545] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZshlXptAeV7-XzzNzg41AAAAAo"]
[Sun Feb 22 23:32:38.093903 2026] [:error] [pid 2475:tid 2553] [client 185.137.164.16:37451] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZshlidme8TSKYpXujdtEAAAAI0"]
[Sun Feb 22 23:32:39.250002 2026] [:error] [pid 2473:tid 2500] [client 185.137.164.21:37309] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aZshl3ptAeV7-XzzNzg5DgAAABc"]
[Sun Feb 22 23:32:40.434742 2026] [:error] [pid 3103:tid 3117] [client 185.137.164.12:48429] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZshmJfzX5hBIaQY93N7TwAAAYs"]
[Sun Feb 22 23:32:41.352940 2026] [:error] [pid 2474:tid 2510] [client 185.137.164.21:31247] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZshmfhvE7P5hX_xKnS0ggAAAEE"]
[Sun Feb 22 23:32:42.449287 2026] [:error] [pid 2475:tid 2533] [client 185.137.164.12:33113] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZshmidme8TSKYpXujdtSQAAAIQ"]
[Sun Feb 22 23:32:45.037850 2026] [:error] [pid 2574:tid 2589] [client 185.137.164.14:58485] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZshnckPV7h4nTf-jiTjdAAAAMg"]
[Sun Feb 22 23:32:46.320485 2026] [:error] [pid 2473:tid 2492] [client 185.137.164.18:64099] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZshnnptAeV7-XzzNzg5eAAAAA8"]
[Sun Feb 22 23:32:47.447143 2026] [:error] [pid 2475:tid 2547] [client 185.137.164.13:36681] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZshnydme8TSKYpXujdtmAAAAIc"]
[Sun Feb 22 23:32:48.278932 2026] [:error] [pid 2628:tid 2638] [client 185.137.164.21:52015] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZshoLK4woMTeUPH2ns4xgAAAQc"]
[Sun Feb 22 23:32:50.243760 2026] [:error] [pid 2628:tid 2645] [client 185.137.164.12:24599] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZshorK4woMTeUPH2ns41wAAAQ4"]
[Sun Feb 22 23:32:51.024450 2026] [:error] [pid 2474:tid 2543] [client 185.137.164.16:58393] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZsho_hvE7P5hX_xKnS09gAAAFY"]
[Sun Feb 22 23:32:52.049434 2026] [:error] [pid 3103:tid 3123] [client 185.137.164.15:64809] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZshpJfzX5hBIaQY93N70AAAAZE"]
[Sun Feb 22 23:32:52.632811 2026] [:error] [pid 3103:tid 3113] [client 185.137.164.17:38975] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZshpJfzX5hBIaQY93N72AAAAYc"]
[Sun Feb 22 23:32:53.356737 2026] [:error] [pid 2474:tid 2541] [client 185.137.164.13:40029] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZshpfhvE7P5hX_xKnS1FAAAAFQ"]
[Sun Feb 22 23:32:54.810880 2026] [:error] [pid 2628:tid 2642] [client 185.137.164.12:50331] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aZshprK4woMTeUPH2ns5OgAAAQs"]
[Sun Feb 22 23:32:56.186957 2026] [:error] [pid 2574:tid 2599] [client 185.137.164.15:33027] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aZshqMkPV7h4nTf-jiTj8wAAANI"]
[Sun Feb 22 23:32:56.816815 2026] [:error] [pid 2629:tid 2681] [client 185.137.164.19:59049] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZshqAlsXSV5M4mfwZ9XegAAAVc"]
[Sun Feb 22 23:32:59.968007 2026] [:error] [pid 2574:tid 2600] [client 185.137.164.14:31397] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZshq8kPV7h4nTf-jiTkIwAAANM"]
[Sun Feb 22 23:33:01.455205 2026] [:error] [pid 2628:tid 2648] [client 185.137.164.15:44319] [client 185.137.164.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.15, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZshrbK4woMTeUPH2ns5sQAAARE"]
[Sun Feb 22 23:33:05.310865 2026] [:error] [pid 2628:tid 2635] [client 185.137.164.15:44319] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZshsbK4woMTeUPH2ns55wAAAQQ"]
[Sun Feb 22 23:33:06.465677 2026] [:error] [pid 2574:tid 2600] [client 185.137.164.13:45415] [client 185.137.164.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.13, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZshsskPV7h4nTf-jiTkZQAAANM"]
[Sun Feb 22 23:33:06.732667 2026] [:error] [pid 2574:tid 2593] [client 185.137.164.13:45415] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aZshsskPV7h4nTf-jiTkZwAAAMw"]
[Sun Feb 22 23:33:07.639975 2026] [:error] [pid 2629:tid 2666] [client 185.137.164.16:36111] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aZshswlsXSV5M4mfwZ9YIAAAAUg"]
[Sun Feb 22 23:33:10.256201 2026] [:error] [pid 2474:tid 2540] [client 185.137.164.17:51217] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/admin.php"] [unique_id "aZshtvhvE7P5hX_xKnS2CQAAAFM"]
[Sun Feb 22 23:33:11.820841 2026] [:error] [pid 2473:tid 2482] [client 185.137.164.16:26163] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp_wlx.php"] [unique_id "aZsht3ptAeV7-XzzNzg7DwAAAAU"]
[Sun Feb 22 23:33:12.961295 2026] [:error] [pid 3103:tid 3110] [client 185.137.164.13:31325] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZshuJfzX5hBIaQY93N85wAAAYQ"]
[Sun Feb 22 23:33:16.307675 2026] [:error] [pid 2628:tid 2654] [client 185.137.164.12:28071] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZshvLK4woMTeUPH2ns6iAAAARc"]
[Sun Feb 22 23:33:17.462596 2026] [:error] [pid 3103:tid 3128] [client 185.137.164.18:29139] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZshvZfzX5hBIaQY93N9MAAAAZY"]
[Sun Feb 22 23:33:18.864465 2026] [:error] [pid 2629:tid 2673] [client 185.137.164.18:60687] [client 185.137.164.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.18, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aZshvglsXSV5M4mfwZ9YrwAAAU8"]
[Sun Feb 22 23:33:19.132974 2026] [:error] [pid 2629:tid 2662] [client 185.137.164.18:60687] [client 185.137.164.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZshvwlsXSV5M4mfwZ9YswAAAUQ"]
[Sun Feb 22 23:33:23.678642 2026] [:error] [pid 2629:tid 2668] [client 185.137.164.19:28935] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/index.php"] [unique_id "aZshwwlsXSV5M4mfwZ9ZFAAAAUo"]
[Sun Feb 22 23:33:25.731567 2026] [:error] [pid 3103:tid 3116] [client 185.137.164.13:57659] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZshxZfzX5hBIaQY93N9ugAAAYo"]
[Sun Feb 22 23:33:26.589623 2026] [:error] [pid 2473:tid 2497] [client 185.137.164.17:44187] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/mah.php"] [unique_id "aZshxnptAeV7-XzzNzg8CAAAABQ"]
[Sun Feb 22 23:33:27.178752 2026] [:error] [pid 2475:tid 2531] [client 185.137.164.12:48257] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/mah.php"] [unique_id "aZshxydme8TSKYpXujdv8QAAAIM"]
[Sun Feb 22 23:33:28.494966 2026] [:error] [pid 2628:tid 2634] [client 185.137.164.16:47157] [client 185.137.164.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.16, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZshyLK4woMTeUPH2ns7NAAAAQM"]
[Sun Feb 22 23:33:29.755218 2026] [:error] [pid 2628:tid 2631] [client 185.137.164.16:47157] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aZshybK4woMTeUPH2ns7RAAAAQA"]
[Sun Feb 22 23:33:30.267893 2026] [:error] [pid 2628:tid 2650] [client 185.137.164.13:57143] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZshyrK4woMTeUPH2ns7TQAAARM"]
[Sun Feb 22 23:33:31.215748 2026] [:error] [pid 2475:tid 2560] [client 185.137.164.12:29667] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aZshyydme8TSKYpXujdwLQAAAJQ"]
[Sun Feb 22 23:33:31.799646 2026] [:error] [pid 26033:tid 26042] [client 185.137.164.19:52033] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZshy0TRRZdhkkS8ouSHsAAAAcc"]
[Sun Feb 22 23:33:32.425961 2026] [:error] [pid 2628:tid 2638] [client 185.137.164.19:34675] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZshzLK4woMTeUPH2ns7ZgAAAQc"]
[Sun Feb 22 23:33:33.038757 2026] [:error] [pid 2474:tid 2511] [client 185.137.164.12:63811] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZshzfhvE7P5hX_xKnS3dwAAAEI"]
[Sun Feb 22 23:33:34.099033 2026] [:error] [pid 2629:tid 2677] [client 185.137.164.15:29739] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZshzglsXSV5M4mfwZ9ZogAAAVM"]
[Sun Feb 22 23:33:35.358271 2026] [:error] [pid 2474:tid 2545] [client 185.137.164.13:65033] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-user.php"] [unique_id "aZshz_hvE7P5hX_xKnS3mAAAAFg"]
[Sun Feb 22 23:33:36.154110 2026] [:error] [pid 2574:tid 2597] [client 185.137.164.21:28651] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZsh0MkPV7h4nTf-jiTl8AAAANA"]
[Sun Feb 22 23:33:36.725295 2026] [:error] [pid 2475:tid 2563] [client 185.137.164.15:33111] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZsh0Cdme8TSKYpXujdwmAAAAJc"]
[Sun Feb 22 23:33:37.260052 2026] [:error] [pid 3103:tid 3125] [client 185.137.164.12:28007] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aZsh0ZfzX5hBIaQY93N-ZwAAAZM"]
[Sun Feb 22 23:33:37.898505 2026] [:error] [pid 2629:tid 2682] [client 185.137.164.18:20501] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aZsh0QlsXSV5M4mfwZ9ZzgAAAVg"]
[Sun Feb 22 23:33:38.740951 2026] [:error] [pid 2628:tid 2641] [client 185.137.164.19:50499] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/special.php"] [unique_id "aZsh0rK4woMTeUPH2ns7sAAAAQo"]
[Sun Feb 22 23:33:39.452182 2026] [:error] [pid 2629:tid 2682] [client 185.137.164.13:63175] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/special.php"] [unique_id "aZsh0wlsXSV5M4mfwZ9Z5wAAAVg"]
[Sun Feb 22 23:33:39.977345 2026] [:error] [pid 2474:tid 2544] [client 185.137.164.19:35045] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/special.php"] [unique_id "aZsh0_hvE7P5hX_xKnS34AAAAFc"]
[Sun Feb 22 23:33:40.544820 2026] [:error] [pid 2574:tid 2596] [client 185.137.164.17:34677] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/special.php"] [unique_id "aZsh1MkPV7h4nTf-jiTmIwAAAM8"]
[Sun Feb 22 23:33:41.251046 2026] [:error] [pid 26033:tid 26043] [client 185.137.164.20:42189] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/special.php"] [unique_id "aZsh1UTRRZdhkkS8ouSIPwAAAcg"]
[Sun Feb 22 23:33:43.051029 2026] [:error] [pid 26033:tid 26047] [client 185.137.164.21:59771] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsh10TRRZdhkkS8ouSIWAAAAcw"]
[Sun Feb 22 23:33:45.400325 2026] [:error] [pid 2474:tid 2530] [client 185.137.164.13:49773] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aZsh2fhvE7P5hX_xKnS4KQAAAE0"]
[Sun Feb 22 23:33:46.025990 2026] [:error] [pid 26033:tid 26036] [client 185.137.164.17:54475] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aZsh2kTRRZdhkkS8ouSIcgAAAcE"]
[Sun Feb 22 23:33:46.879528 2026] [:error] [pid 2473:tid 2479] [client 185.137.164.20:26729] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aZsh2nptAeV7-XzzNzg9PQAAAAI"]
[Sun Feb 22 23:33:47.893077 2026] [:error] [pid 26033:tid 26051] [client 185.137.164.19:41279] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aZsh20TRRZdhkkS8ouSIfwAAAdA"]
[Sun Feb 22 23:33:48.525955 2026] [:error] [pid 2628:tid 2643] [client 185.137.164.21:35961] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aZsh3LK4woMTeUPH2ns8GAAAAQw"]
[Sun Feb 22 23:33:49.224234 2026] [:error] [pid 26033:tid 26041] [client 185.137.164.18:35265] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aZsh3UTRRZdhkkS8ouSImQAAAcY"]
[Sun Feb 22 23:33:49.782147 2026] [:error] [pid 2629:tid 2664] [client 185.137.164.18:26377] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aZsh3QlsXSV5M4mfwZ9ajAAAAUY"]
[Sun Feb 22 23:33:50.293006 2026] [:error] [pid 2475:tid 2531] [client 185.137.164.19:41993] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aZsh3idme8TSKYpXujdxKgAAAIM"]
[Mon Feb 23 00:14:21.963593 2026] [:error] [pid 26033:tid 26040] [client 20.205.227.70:5610] [client 20.205.227.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.205.227.70, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZsrXUTRRZdhkkS8ouSX6QAAAcU"]
[Mon Feb 23 00:14:22.648912 2026] [:error] [pid 26033:tid 26048] [client 20.205.227.70:5610] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aZsrXkTRRZdhkkS8ouSX8AAAAc0"]
[Mon Feb 23 00:14:23.003139 2026] [:error] [pid 3103:tid 3111] [client 20.205.227.70:5608] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aZsrX5fzX5hBIaQY93OMXwAAAYU"]
[Mon Feb 23 00:14:23.400108 2026] [:error] [pid 2574:tid 2597] [client 20.205.227.70:5278] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aZsrX8kPV7h4nTf-jiTyewAAANA"]
[Mon Feb 23 00:14:23.810039 2026] [:error] [pid 2629:tid 2669] [client 20.205.227.70:5953] [client 20.205.227.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aZsrXwlsXSV5M4mfwZ9nQgAAAUs"]
[Mon Feb 23 02:31:24.540498 2026] [:error] [pid 4806:tid 4813] [client 43.159.140.236:59762] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZtLfPFTHI_ud-cTYbQb-wAAAQU"]
[Mon Feb 23 05:19:18.596632 2026] [:error] [pid 54380:tid 54437] [client 43.167.239.66:42882] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZty1qX3e5TFfa1i4D0p4QAAAFY"]
[Mon Feb 23 06:01:50.284810 2026] [:error] [pid 2570:tid 2587] [client 139.59.246.133:46058] [client 139.59.246.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.246.133, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZt8zqh2MyYIw6djQ6WviwAAAMk"]
[Mon Feb 23 06:01:51.702049 2026] [:error] [pid 2570:tid 2592] [client 139.59.246.133:44662] [client 139.59.246.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.246.133, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZt8z6h2MyYIw6djQ6WvjgAAAM4"]
[Mon Feb 23 06:01:51.834271 2026] [:error] [pid 2570:tid 2595] [client 139.59.246.133:46058] [client 139.59.246.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.246.133, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZt8z6h2MyYIw6djQ6WvjwAAANE"]
[Mon Feb 23 07:11:23.441216 2026] [:error] [pid 2570:tid 2580] [client 41.56.65.1:13253] [client 41.56.65.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.56.65.1, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZuNG6h2MyYIw6djQ6XRrgAAAMI"]
[Mon Feb 23 07:27:14.811789 2026] [:error] [pid 2826:tid 2846] [client 20.97.243.26:27222] [client 20.97.243.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-fmfile.php"] [unique_id "aZuQ0j3FWVe0BC2oMiAIOgAAARE"]
[Mon Feb 23 07:27:15.632732 2026] [:error] [pid 2826:tid 2833] [client 20.97.243.26:27249] [client 20.97.243.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-fmfile.php"] [unique_id "aZuQ0z3FWVe0BC2oMiAIQwAAAQQ"]
[Mon Feb 23 07:27:16.465089 2026] [:error] [pid 2826:tid 2853] [client 20.97.243.26:27200] [client 20.97.243.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-fmfile.php"] [unique_id "aZuQ1D3FWVe0BC2oMiAIRwAAARg"]
[Mon Feb 23 07:27:17.285704 2026] [:error] [pid 2826:tid 2834] [client 20.97.243.26:29254] [client 20.97.243.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-fmfile.php"] [unique_id "aZuQ1T3FWVe0BC2oMiAITQAAAQU"]
[Mon Feb 23 07:33:00.961499 2026] [:error] [pid 2826:tid 2836] [client 36.41.75.167:33510] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZuSLD3FWVe0BC2oMiANvQAAAQc"]
[Mon Feb 23 08:54:13.513153 2026] [:error] [pid 39540:tid 39581] [client 104.28.203.58:64319] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZulNbsgm9aTWhlRScJqbAAAAcw"]
[Mon Feb 23 08:54:16.866399 2026] [:error] [pid 39640:tid 39677] [client 104.28.203.58:64327] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/style.php"] [unique_id "aZulONsK--eVCgzvvucnDQAAAoc"]
[Mon Feb 23 08:54:24.281615 2026] [:error] [pid 39540:tid 39578] [client 104.28.203.58:54323] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aZulQLsgm9aTWhlRScJqqwAAAck"]
[Mon Feb 23 08:54:24.623064 2026] [:error] [pid 25380:tid 25382] [client 104.28.203.58:54329] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/style.php"] [unique_id "aZulQKKrc8yFQ8fy78ohRQAAAMA"]
[Mon Feb 23 08:54:24.960451 2026] [:error] [pid 29909:tid 29921] [client 104.28.203.58:54337] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style.php"] [unique_id "aZulQD9oc2QzltksUk6pXAAAAQo"]
[Mon Feb 23 08:54:25.299856 2026] [:error] [pid 25380:tid 25406] [client 104.28.203.58:54340] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aZulQaKrc8yFQ8fy78ohSQAAANg"]
[Mon Feb 23 08:54:25.638360 2026] [:error] [pid 39639:tid 39663] [client 104.28.203.58:54342] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aZulQRpFkMoMi8uTUUMCUwAAAlQ"]
[Mon Feb 23 08:54:25.978189 2026] [:error] [pid 39538:tid 39543] [client 104.28.203.58:54345] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aZulQS4Zk8-cQOG3ZnoYRAAAAYE"]
[Mon Feb 23 08:54:27.327981 2026] [:error] [pid 25294:tid 25360] [client 104.28.203.58:64535] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aZulQyRCFB3CqIo_jfZuagAAAE0"]
[Mon Feb 23 08:54:50.597220 2026] [:error] [pid 39540:tid 39569] [client 104.28.161.188:55771] [client 104.28.161.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aZulWrsgm9aTWhlRScJq2wAAAcA"]
[Mon Feb 23 09:55:41.743729 2026] [:error] [pid 39640:tid 39679] [client 43.159.140.236:53196] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZuzndsK--eVCgzvvuc_lQAAAok"]
[Mon Feb 23 12:22:01.577822 2026] [:error] [pid 39540:tid 39578] [client 43.153.123.3:43822] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZvV6bsgm9aTWhlRScLyvgAAAck"]
[Mon Feb 23 16:43:58.854008 2026] [:error] [pid 39639:tid 39658] [client 45.132.224.109:64241] [client 45.132.224.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZwTThpFkMoMi8uTUUNpfgAAAk8"]
[Mon Feb 23 16:43:59.823838 2026] [:error] [pid 25295:tid 25346] [client 45.132.224.114:20067] [client 45.132.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZwTT42Av4J1Jnqi7yK1yQAAAIw"]
[Mon Feb 23 16:44:01.323437 2026] [:error] [pid 39640:tid 39690] [client 45.132.224.108:52929] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZwTUdsK--eVCgzvvue4qgAAApQ"]
[Mon Feb 23 16:44:02.135271 2026] [:error] [pid 39538:tid 39555] [client 45.132.224.138:37241] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZwTUi4Zk8-cQOG3ZnpU-QAAAY0"]
[Mon Feb 23 16:44:03.444801 2026] [:error] [pid 39640:tid 39674] [client 45.132.224.108:30843] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZwTU9sK--eVCgzvvue4swAAAoQ"]
[Mon Feb 23 16:44:04.074729 2026] [:error] [pid 39504:tid 39514] [client 45.132.224.139:37665] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZwTVHLcHpOlI9gwwJoFPwAAAUg"]
[Mon Feb 23 16:44:04.362815 2026] [:error] [pid 39504:tid 39530] [client 45.132.224.156:45963] [client 45.132.224.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZwTVHLcHpOlI9gwwJoFQQAAAVg"]
[Mon Feb 23 16:44:04.672963 2026] [:error] [pid 39538:tid 39553] [client 45.132.224.142:60361] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZwTVC4Zk8-cQOG3ZnpVAwAAAYs"]
[Mon Feb 23 16:44:04.975924 2026] [:error] [pid 39538:tid 39557] [client 45.132.224.153:30039] [client 45.132.224.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZwTVC4Zk8-cQOG3ZnpVBAAAAY8"]
[Mon Feb 23 16:44:05.268117 2026] [:error] [pid 39504:tid 39516] [client 45.132.224.145:24799] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZwTVXLcHpOlI9gwwJoFRAAAAUo"]
[Mon Feb 23 16:44:05.729637 2026] [:error] [pid 39504:tid 39515] [client 45.132.224.136:61487] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZwTVXLcHpOlI9gwwJoFSgAAAUk"]
[Mon Feb 23 16:44:06.310241 2026] [:error] [pid 39504:tid 39512] [client 45.132.224.119:53173] [client 45.132.224.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aZwTVnLcHpOlI9gwwJoFTwAAAUY"]
[Mon Feb 23 16:44:07.055715 2026] [:error] [pid 25294:tid 25350] [client 45.132.224.108:26315] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZwTVyRCFB3CqIo_jfa3twAAAEg"]
[Mon Feb 23 16:44:07.582873 2026] [:error] [pid 25294:tid 25330] [client 45.132.224.155:63295] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZwTVyRCFB3CqIo_jfa3ugAAAEE"]
[Mon Feb 23 16:44:08.069501 2026] [:error] [pid 39640:tid 39694] [client 45.132.224.121:24067] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZwTWNsK--eVCgzvvue4ugAAApg"]
[Mon Feb 23 16:44:10.570603 2026] [:error] [pid 39640:tid 39684] [client 45.132.224.138:28783] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZwTWtsK--eVCgzvvue4yAAAAo4"]
[Mon Feb 23 16:44:11.064357 2026] [:error] [pid 39540:tid 39573] [client 45.132.224.127:40875] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZwTW7sgm9aTWhlRScJ07AAAAcQ"]
[Mon Feb 23 16:44:11.774384 2026] [:error] [pid 39640:tid 39687] [client 45.132.224.131:46529] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZwTW9sK--eVCgzvvue4zQAAApE"]
[Mon Feb 23 16:44:12.321026 2026] [:error] [pid 25380:tid 25386] [client 45.132.224.106:29959] [client 45.132.224.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZwTXKKrc8yFQ8fy78rqnAAAAMQ"]
[Mon Feb 23 16:44:13.497695 2026] [:error] [pid 39538:tid 39557] [client 45.132.224.129:35663] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZwTXS4Zk8-cQOG3ZnpVDwAAAY8"]
[Mon Feb 23 16:44:13.994357 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.121:44551] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZwTXaKrc8yFQ8fy78rqogAAAMw"]
[Mon Feb 23 16:44:15.940610 2026] [:error] [pid 25380:tid 25402] [client 45.132.224.128:57457] [client 45.132.224.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZwTX6Krc8yFQ8fy78rqqAAAANQ"]
[Mon Feb 23 16:44:16.262715 2026] [:error] [pid 25380:tid 25406] [client 45.132.224.129:64977] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZwTYKKrc8yFQ8fy78rqqQAAANg"]
[Mon Feb 23 16:44:16.615449 2026] [:error] [pid 25380:tid 25396] [client 45.132.224.112:32161] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZwTYKKrc8yFQ8fy78rqrAAAAM4"]
[Mon Feb 23 16:44:17.490001 2026] [:error] [pid 25380:tid 25402] [client 45.132.224.111:65237] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aZwTYaKrc8yFQ8fy78rquQAAANQ"]
[Mon Feb 23 16:44:17.899211 2026] [:error] [pid 25380:tid 25388] [client 45.132.224.146:33041] [client 45.132.224.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aZwTYaKrc8yFQ8fy78rqvAAAAMY"]
[Mon Feb 23 16:44:18.193384 2026] [:error] [pid 25380:tid 25403] [client 45.132.224.148:46295] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZwTYqKrc8yFQ8fy78rqwAAAANU"]
[Mon Feb 23 16:44:19.693018 2026] [:error] [pid 25380:tid 25404] [client 45.132.224.142:26833] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZwTY6Krc8yFQ8fy78rqzQAAANY"]
[Mon Feb 23 16:44:20.458748 2026] [:error] [pid 39639:tid 39664] [client 45.132.224.148:35923] [client 45.132.224.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.148, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZwTZBpFkMoMi8uTUUNpjgAAAlU"]
[Mon Feb 23 16:44:22.367568 2026] [:error] [pid 39639:tid 39652] [client 45.132.224.148:35923] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZwTZhpFkMoMi8uTUUNpngAAAkk"]
[Mon Feb 23 16:44:23.017522 2026] [:error] [pid 39540:tid 39586] [client 45.132.224.131:55521] [client 45.132.224.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.131, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZwTZ7sgm9aTWhlRScJ1BQAAAdE"]
[Mon Feb 23 16:44:23.306888 2026] [:error] [pid 39540:tid 39589] [client 45.132.224.131:55521] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aZwTZ7sgm9aTWhlRScJ1CAAAAdQ"]
[Mon Feb 23 16:44:24.859436 2026] [:error] [pid 39504:tid 39512] [client 45.132.224.111:24627] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZwTaHLcHpOlI9gwwJoFXQAAAUY"]
[Mon Feb 23 16:44:26.524071 2026] [:error] [pid 25380:tid 25393] [client 45.132.224.106:27829] [client 45.132.224.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZwTaqKrc8yFQ8fy78rq5gAAAMs"]
[Mon Feb 23 16:44:27.120052 2026] [:error] [pid 29909:tid 29927] [client 45.132.224.148:40735] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZwTaz9oc2QzltksUk7LXQAAARA"]
[Mon Feb 23 16:44:27.921881 2026] [:error] [pid 29909:tid 29923] [client 45.132.224.112:43363] [client 45.132.224.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.112, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aZwTaz9oc2QzltksUk7LYwAAAQw"]
[Mon Feb 23 16:44:28.073230 2026] [:error] [pid 29909:tid 29922] [client 45.132.224.112:43363] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZwTbD9oc2QzltksUk7LZAAAAQs"]
[Mon Feb 23 16:44:31.298286 2026] [:error] [pid 39639:tid 39663] [client 45.132.224.122:43893] [client 45.132.224.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZwTbxpFkMoMi8uTUUNpuwAAAlQ"]
[Mon Feb 23 16:44:32.051375 2026] [:error] [pid 25294:tid 25362] [client 45.132.224.154:58193] [client 45.132.224.154] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.154, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aZwTcCRCFB3CqIo_jfa30gAAAE4"]
[Mon Feb 23 16:44:32.695157 2026] [:error] [pid 25294:tid 25360] [client 45.132.224.154:58193] [client 45.132.224.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aZwTcCRCFB3CqIo_jfa32QAAAE0"]
[Mon Feb 23 16:44:33.220110 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.108:60067] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aZwTcaKrc8yFQ8fy78rq9wAAAMw"]
[Mon Feb 23 16:44:33.809284 2026] [:error] [pid 25380:tid 25399] [client 45.132.224.148:22555] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZwTcaKrc8yFQ8fy78rq_QAAANE"]
[Mon Feb 23 16:44:34.537734 2026] [:error] [pid 39640:tid 39681] [client 45.132.224.130:36345] [client 45.132.224.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZwTctsK--eVCgzvvue45wAAAos"]
[Mon Feb 23 16:44:34.841199 2026] [:error] [pid 39538:tid 39549] [client 45.132.224.129:40567] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZwTci4Zk8-cQOG3ZnpVFgAAAYc"]
[Mon Feb 23 16:44:35.923828 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.120:37423] [client 45.132.224.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZwTc6Krc8yFQ8fy78rrBQAAAMw"]
[Mon Feb 23 16:44:36.416836 2026] [:error] [pid 25295:tid 25332] [client 45.132.224.120:38149] [client 45.132.224.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aZwTdI2Av4J1Jnqi7yK10wAAAII"]
[Mon Feb 23 16:44:37.244372 2026] [:error] [pid 39540:tid 39576] [client 45.132.224.125:36679] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aZwTdbsgm9aTWhlRScJ1IAAAAcc"]
[Mon Feb 23 16:44:38.002467 2026] [:error] [pid 25380:tid 25398] [client 45.132.224.156:20263] [client 45.132.224.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aZwTdqKrc8yFQ8fy78rrEwAAANA"]
[Mon Feb 23 16:44:38.612887 2026] [:error] [pid 25380:tid 25387] [client 45.132.224.127:34039] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aZwTdqKrc8yFQ8fy78rrGwAAAMU"]
[Mon Feb 23 16:44:39.312352 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.150:53567] [client 45.132.224.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aZwTd7sgm9aTWhlRScJ1JgAAAdU"]
[Mon Feb 23 16:44:40.755656 2026] [:error] [pid 39640:tid 39690] [client 45.132.224.148:21521] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aZwTeNsK--eVCgzvvue4-gAAApQ"]
[Mon Feb 23 16:44:41.199325 2026] [:error] [pid 25380:tid 25400] [client 45.132.224.143:38933] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aZwTeaKrc8yFQ8fy78rrIwAAANI"]
[Mon Feb 23 16:44:41.471116 2026] [:error] [pid 39540:tid 39572] [client 45.132.224.155:45041] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aZwTebsgm9aTWhlRScJ1KAAAAcM"]
[Mon Feb 23 16:44:41.920805 2026] [:error] [pid 25293:tid 25318] [client 45.132.224.149:33155] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aZwTeeL9XfBf66iHi_eg6AAAABM"]
[Mon Feb 23 16:44:42.369043 2026] [:error] [pid 39640:tid 39677] [client 45.132.224.113:38951] [client 45.132.224.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aZwTetsK--eVCgzvvue4_QAAAoc"]
[Mon Feb 23 16:44:42.648331 2026] [:error] [pid 39639:tid 39646] [client 45.132.224.134:36513] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZwTehpFkMoMi8uTUUNpwgAAAkM"]
[Mon Feb 23 16:44:43.363500 2026] [:error] [pid 39639:tid 39661] [client 45.132.224.140:33001] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZwTexpFkMoMi8uTUUNpxgAAAlI"]
[Mon Feb 23 16:44:43.665776 2026] [:error] [pid 39640:tid 39683] [client 45.132.224.119:33655] [client 45.132.224.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZwTe9sK--eVCgzvvue4_wAAAo0"]
[Mon Feb 23 16:44:43.964999 2026] [:error] [pid 39640:tid 39687] [client 45.132.224.124:60741] [client 45.132.224.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aZwTe9sK--eVCgzvvue5AQAAApE"]
[Mon Feb 23 16:44:44.293273 2026] [:error] [pid 39640:tid 39689] [client 45.132.224.115:44745] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aZwTfNsK--eVCgzvvue5AwAAApM"]
[Mon Feb 23 16:44:44.849580 2026] [:error] [pid 39640:tid 39678] [client 45.132.224.147:60501] [client 45.132.224.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZwTfNsK--eVCgzvvue5CgAAAog"]
[Mon Feb 23 16:44:45.492928 2026] [:error] [pid 39640:tid 39694] [client 45.132.224.114:33725] [client 45.132.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aZwTfdsK--eVCgzvvue5DwAAApg"]
[Mon Feb 23 16:44:46.511693 2026] [:error] [pid 25380:tid 25406] [client 45.132.224.126:36397] [client 45.132.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aZwTfqKrc8yFQ8fy78rrLwAAANg"]
[Mon Feb 23 16:44:48.046575 2026] [:error] [pid 39540:tid 39593] [client 45.132.224.147:49331] [client 45.132.224.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aZwTgLsgm9aTWhlRScJ1NQAAAdg"]
[Mon Feb 23 16:44:48.746780 2026] [:error] [pid 25380:tid 25391] [client 45.132.224.116:34971] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aZwTgKKrc8yFQ8fy78rrOwAAAMk"]
[Mon Feb 23 16:44:49.091258 2026] [:error] [pid 39540:tid 39569] [client 45.132.224.146:30123] [client 45.132.224.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aZwTgbsgm9aTWhlRScJ1NwAAAcA"]
[Mon Feb 23 16:44:51.105167 2026] [:error] [pid 25380:tid 25391] [client 45.132.224.138:60453] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZwTg6Krc8yFQ8fy78rrSAAAAMk"]
[Mon Feb 23 16:44:51.967453 2026] [proxy_fcgi:error] [pid 39540:tid 39571] [client 45.132.224.110:45043] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:44:52.150452 2026] [proxy_fcgi:error] [pid 39540:tid 39588] [client 45.132.224.110:45043] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:44:52.636324 2026] [proxy_fcgi:error] [pid 39540:tid 39575] [client 45.132.224.110:45043] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:44:53.446151 2026] [:error] [pid 39540:tid 39572] [client 45.132.224.110:45043] [client 45.132.224.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZwThbsgm9aTWhlRScJ1SQAAAcM"]
[Mon Feb 23 16:44:53.718489 2026] [:error] [pid 25294:tid 25331] [client 45.132.224.108:53251] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aZwThSRCFB3CqIo_jfa35QAAAEI"]
[Mon Feb 23 16:44:54.053940 2026] [:error] [pid 25294:tid 25372] [client 45.132.224.110:51797] [client 45.132.224.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aZwThiRCFB3CqIo_jfa35gAAAFM"]
[Mon Feb 23 16:44:54.399661 2026] [:error] [pid 39540:tid 39574] [client 45.132.224.114:20061] [client 45.132.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aZwThrsgm9aTWhlRScJ1TgAAAcU"]
[Mon Feb 23 16:44:54.686568 2026] [:error] [pid 39540:tid 39585] [client 45.132.224.127:48747] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aZwThrsgm9aTWhlRScJ1UAAAAdA"]
[Mon Feb 23 16:44:55.037848 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.108:58827] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aZwTh6Krc8yFQ8fy78rrTAAAAMw"]
[Mon Feb 23 16:44:55.494737 2026] [:error] [pid 39640:tid 39679] [client 45.132.224.137:31229] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aZwTh9sK--eVCgzvvue5HQAAAok"]
[Mon Feb 23 16:44:55.786245 2026] [:error] [pid 25295:tid 25338] [client 45.132.224.143:50657] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aZwTh42Av4J1Jnqi7yK11AAAAIc"]
[Mon Feb 23 16:44:56.075018 2026] [:error] [pid 25380:tid 25389] [client 45.132.224.133:42733] [client 45.132.224.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aZwTiKKrc8yFQ8fy78rrTwAAAMc"]
[Mon Feb 23 16:44:56.366475 2026] [:error] [pid 39504:tid 39519] [client 45.132.224.109:32395] [client 45.132.224.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aZwTiHLcHpOlI9gwwJoFcAAAAU0"]
[Mon Feb 23 16:44:56.916112 2026] [:error] [pid 25294:tid 25366] [client 45.132.224.115:22749] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aZwTiCRCFB3CqIo_jfa36QAAAFA"]
[Mon Feb 23 16:44:57.368665 2026] [:error] [pid 39504:tid 39518] [client 45.132.224.139:49777] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aZwTiXLcHpOlI9gwwJoFcgAAAUw"]
[Mon Feb 23 16:44:57.911632 2026] [:error] [pid 39640:tid 39675] [client 45.132.224.118:26243] [client 45.132.224.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aZwTidsK--eVCgzvvue5IwAAAoU"]
[Mon Feb 23 16:44:59.785262 2026] [:error] [pid 25380:tid 25402] [client 45.132.224.157:52047] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZwTi6Krc8yFQ8fy78rrWwAAANQ"]
[Mon Feb 23 16:45:00.600842 2026] [:error] [pid 39540:tid 39592] [client 45.132.224.126:60863] [client 45.132.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZwTjLsgm9aTWhlRScJ1YwAAAdc"]
[Mon Feb 23 16:45:01.735684 2026] [:error] [pid 39639:tid 39652] [client 45.132.224.153:64191] [client 45.132.224.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZwTjRpFkMoMi8uTUUNp3gAAAkk"]
[Mon Feb 23 16:45:02.180733 2026] [:error] [pid 25380:tid 25393] [client 45.132.224.149:42065] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aZwTjqKrc8yFQ8fy78rrXwAAAMs"]
[Mon Feb 23 16:45:06.697012 2026] [:error] [pid 25380:tid 25405] [client 45.132.224.146:35647] [client 45.132.224.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aZwTkqKrc8yFQ8fy78rrfgAAANc"]
[Mon Feb 23 16:45:06.979521 2026] [:error] [pid 39540:tid 39591] [client 45.132.224.125:40545] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aZwTkrsgm9aTWhlRScJ1cgAAAdY"]
[Mon Feb 23 16:45:07.276557 2026] [:error] [pid 39639:tid 39644] [client 45.132.224.136:57463] [client 45.132.224.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.136, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZwTkxpFkMoMi8uTUUNp5QAAAkE"]
[Mon Feb 23 16:45:07.626849 2026] [:error] [pid 39639:tid 39660] [client 45.132.224.136:57463] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aZwTkxpFkMoMi8uTUUNp6QAAAlE"]
[Mon Feb 23 16:45:08.263882 2026] [:error] [pid 25380:tid 25383] [client 45.132.224.134:43617] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aZwTlKKrc8yFQ8fy78rrgwAAAME"]
[Mon Feb 23 16:45:08.569513 2026] [:error] [pid 39540:tid 39574] [client 45.132.224.133:25825] [client 45.132.224.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aZwTlLsgm9aTWhlRScJ1cwAAAcU"]
[Mon Feb 23 16:45:09.941764 2026] [:error] [pid 39639:tid 39666] [client 45.132.224.106:40905] [client 45.132.224.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZwTlRpFkMoMi8uTUUNp9gAAAlc"]
[Mon Feb 23 16:45:10.240552 2026] [:error] [pid 25380:tid 25384] [client 45.132.224.117:41697] [client 45.132.224.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aZwTlqKrc8yFQ8fy78rrjwAAAMI"]
[Mon Feb 23 16:45:11.322860 2026] [:error] [pid 39639:tid 39654] [client 45.132.224.137:20761] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aZwTlxpFkMoMi8uTUUNp_QAAAks"]
[Mon Feb 23 16:45:12.074979 2026] [proxy_fcgi:error] [pid 39540:tid 39575] [client 45.132.224.157:34103] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:45:13.801210 2026] [:error] [pid 39540:tid 39592] [client 45.132.224.157:34103] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aZwTmbsgm9aTWhlRScJ1hAAAAdc"]
[Mon Feb 23 16:45:14.154679 2026] [:error] [pid 39540:tid 39572] [client 45.132.224.132:61047] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aZwTmrsgm9aTWhlRScJ1iAAAAcM"]
[Mon Feb 23 16:45:14.758757 2026] [:error] [pid 25380:tid 25388] [client 45.132.224.156:25175] [client 45.132.224.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aZwTmqKrc8yFQ8fy78rrmAAAAMY"]
[Mon Feb 23 16:45:15.042230 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.110:58127] [client 45.132.224.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aZwTm6Krc8yFQ8fy78rrmgAAAMw"]
[Mon Feb 23 16:45:16.832509 2026] [:error] [pid 25380:tid 25392] [client 45.132.224.133:30021] [client 45.132.224.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aZwTnKKrc8yFQ8fy78rrpgAAAMo"]
[Mon Feb 23 16:45:17.127918 2026] [:error] [pid 25295:tid 25335] [client 45.132.224.107:26499] [client 45.132.224.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aZwTnY2Av4J1Jnqi7yK11wAAAIQ"]
[Mon Feb 23 16:45:17.979875 2026] [:error] [pid 25380:tid 25404] [client 45.132.224.123:50057] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aZwTnaKrc8yFQ8fy78rrtQAAANY"]
[Mon Feb 23 16:45:18.310536 2026] [:error] [pid 25380:tid 25385] [client 45.132.224.117:27665] [client 45.132.224.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZwTnqKrc8yFQ8fy78rrugAAAMM"]
[Mon Feb 23 16:45:18.578208 2026] [:error] [pid 25380:tid 25400] [client 45.132.224.139:40233] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZwTnqKrc8yFQ8fy78rruwAAANI"]
[Mon Feb 23 16:45:19.847231 2026] [:error] [pid 25294:tid 25375] [client 45.132.224.144:44203] [client 45.132.224.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aZwTnyRCFB3CqIo_jfa3-AAAAFY"]
[Mon Feb 23 16:45:20.274814 2026] [:error] [pid 39540:tid 39581] [client 45.132.224.134:51033] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZwToLsgm9aTWhlRScJ1lgAAAcw"]
[Mon Feb 23 16:45:21.786841 2026] [:error] [pid 39540:tid 39581] [client 45.132.224.156:36107] [client 45.132.224.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.156, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aZwTobsgm9aTWhlRScJ1pQAAAcw"]
[Mon Feb 23 16:45:22.873212 2026] [:error] [pid 39540:tid 39592] [client 45.132.224.156:36107] [client 45.132.224.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aZwTorsgm9aTWhlRScJ1rQAAAdc"]
[Mon Feb 23 16:45:23.209808 2026] [:error] [pid 39540:tid 39577] [client 45.132.224.123:59993] [client 45.132.224.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.123, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aZwTo7sgm9aTWhlRScJ1rwAAAcg"]
[Mon Feb 23 16:45:25.357720 2026] [proxy_fcgi:error] [pid 39540:tid 39574] [client 45.132.224.123:59993] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:45:29.584925 2026] [:error] [pid 39540:tid 39574] [client 45.132.224.123:59993] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aZwTqbsgm9aTWhlRScJ14gAAAcU"]
[Mon Feb 23 16:45:30.529263 2026] [:error] [pid 39538:tid 39542] [client 45.132.224.149:33661] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZwTqi4Zk8-cQOG3ZnpVJgAAAYA"]
[Mon Feb 23 16:45:32.437335 2026] [:error] [pid 39540:tid 39584] [client 45.132.224.112:61801] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aZwTrLsgm9aTWhlRScJ18AAAAc8"]
[Mon Feb 23 16:45:35.055461 2026] [:error] [pid 25380:tid 25384] [client 45.132.224.108:40691] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aZwTr6Krc8yFQ8fy78rr5gAAAMI"]
[Mon Feb 23 16:45:35.729694 2026] [:error] [pid 25380:tid 25387] [client 45.132.224.141:55943] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZwTr6Krc8yFQ8fy78rr6gAAAMU"]
[Mon Feb 23 16:45:36.227421 2026] [:error] [pid 39540:tid 39572] [client 45.132.224.132:52797] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aZwTsLsgm9aTWhlRScJ2AgAAAcM"]
[Mon Feb 23 16:45:37.218404 2026] [proxy_fcgi:error] [pid 39640:tid 39679] [client 45.132.224.128:45805] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:45:38.291176 2026] [proxy_fcgi:error] [pid 39640:tid 39691] [client 45.132.224.128:45805] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:45:38.427531 2026] [:error] [pid 39640:tid 39680] [client 45.132.224.128:45805] [client 45.132.224.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aZwTstsK--eVCgzvvue5TgAAAoo"]
[Mon Feb 23 16:45:38.691254 2026] [:error] [pid 25294:tid 25373] [client 45.132.224.119:23531] [client 45.132.224.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aZwTsiRCFB3CqIo_jfa4AAAAAFQ"]
[Mon Feb 23 16:45:40.233310 2026] [:error] [pid 39504:tid 39513] [client 45.132.224.144:20209] [client 45.132.224.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aZwTtHLcHpOlI9gwwJoFkAAAAUc"]
[Mon Feb 23 16:45:40.682353 2026] [:error] [pid 39640:tid 39683] [client 45.132.224.131:46049] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aZwTtNsK--eVCgzvvue5VQAAAo0"]
[Mon Feb 23 16:45:41.698804 2026] [:error] [pid 39639:tid 39655] [client 45.132.224.111:25815] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aZwTtRpFkMoMi8uTUUNqEgAAAkw"]
[Mon Feb 23 16:45:43.299909 2026] [:error] [pid 25294:tid 25374] [client 45.132.224.121:44549] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aZwTtyRCFB3CqIo_jfa4CAAAAFU"]
[Mon Feb 23 16:45:44.679197 2026] [proxy_fcgi:error] [pid 39640:tid 39685] [client 45.132.224.150:55191] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:45:45.127352 2026] [:error] [pid 39640:tid 39671] [client 45.132.224.150:55191] [client 45.132.224.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aZwTudsK--eVCgzvvue5XwAAAoE"]
[Mon Feb 23 16:45:46.355746 2026] [proxy_fcgi:error] [pid 25380:tid 25403] [client 45.132.224.123:40285] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:45:46.655897 2026] [:error] [pid 25380:tid 25386] [client 45.132.224.123:40285] [client 45.132.224.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.123, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aZwTuqKrc8yFQ8fy78rsDwAAAMQ"]
[Mon Feb 23 16:45:48.555311 2026] [:error] [pid 25380:tid 25388] [client 45.132.224.123:40285] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aZwTvKKrc8yFQ8fy78rsFQAAAMY"]
[Mon Feb 23 16:45:49.050255 2026] [:error] [pid 39639:tid 39658] [client 45.132.224.134:59587] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aZwTvRpFkMoMi8uTUUNqGgAAAk8"]
[Mon Feb 23 16:45:49.963893 2026] [:error] [pid 25380:tid 25389] [client 45.132.224.157:37397] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aZwTvaKrc8yFQ8fy78rsHAAAAMc"]
[Mon Feb 23 16:45:50.979269 2026] [:error] [pid 39640:tid 39678] [client 45.132.224.123:52247] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aZwTvtsK--eVCgzvvue5awAAAog"]
[Mon Feb 23 16:45:51.455366 2026] [:error] [pid 39538:tid 39559] [client 45.132.224.141:44439] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aZwTvy4Zk8-cQOG3ZnpVWwAAAZE"]
[Mon Feb 23 16:45:52.212028 2026] [:error] [pid 25293:tid 25303] [client 45.132.224.156:26219] [client 45.132.224.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aZwTwOL9XfBf66iHi_eg9wAAAAQ"]
[Mon Feb 23 16:45:52.819997 2026] [proxy_fcgi:error] [pid 39504:tid 39514] [client 45.132.224.127:41289] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:45:52.978985 2026] [:error] [pid 39504:tid 39509] [client 45.132.224.127:41289] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aZwTwHLcHpOlI9gwwJoFmAAAAUM"]
[Mon Feb 23 16:45:53.419291 2026] [:error] [pid 25380:tid 25396] [client 45.132.224.114:56465] [client 45.132.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aZwTwaKrc8yFQ8fy78rsIAAAAM4"]
[Mon Feb 23 16:45:53.727275 2026] [:error] [pid 39504:tid 39527] [client 45.132.224.128:50895] [client 45.132.224.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aZwTwXLcHpOlI9gwwJoFmQAAAVU"]
[Mon Feb 23 16:45:54.048529 2026] [:error] [pid 39639:tid 39653] [client 45.132.224.115:27061] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aZwTwhpFkMoMi8uTUUNqJAAAAko"]
[Mon Feb 23 16:45:54.388435 2026] [:error] [pid 25380:tid 25402] [client 45.132.224.107:26413] [client 45.132.224.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aZwTwqKrc8yFQ8fy78rsIwAAANQ"]
[Mon Feb 23 16:45:54.656207 2026] [:error] [pid 29909:tid 29921] [client 45.132.224.140:64947] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aZwTwj9oc2QzltksUk7LcwAAAQo"]
[Mon Feb 23 16:45:54.943805 2026] [:error] [pid 29909:tid 29925] [client 45.132.224.137:47827] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aZwTwj9oc2QzltksUk7LdQAAAQ4"]
[Mon Feb 23 16:45:55.666013 2026] [:error] [pid 29909:tid 29930] [client 45.132.224.126:36257] [client 45.132.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aZwTwz9oc2QzltksUk7LeAAAARM"]
[Mon Feb 23 16:45:55.928010 2026] [:error] [pid 39540:tid 39581] [client 45.132.224.135:37039] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aZwTw7sgm9aTWhlRScJ2HgAAAcw"]
[Mon Feb 23 16:45:56.211078 2026] [:error] [pid 39540:tid 39582] [client 45.132.224.120:31301] [client 45.132.224.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aZwTxLsgm9aTWhlRScJ2HwAAAc0"]
[Mon Feb 23 16:45:56.684978 2026] [:error] [pid 39540:tid 39587] [client 45.132.224.142:52197] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aZwTxLsgm9aTWhlRScJ2IgAAAdI"]
[Mon Feb 23 16:45:57.440037 2026] [:error] [pid 39540:tid 39584] [client 45.132.224.132:32037] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aZwTxbsgm9aTWhlRScJ2JQAAAc8"]
[Mon Feb 23 16:45:57.759123 2026] [proxy_fcgi:error] [pid 39640:tid 39670] [client 45.132.224.149:23987] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:45:58.326070 2026] [:error] [pid 39640:tid 39679] [client 45.132.224.149:23987] [client 45.132.224.149] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.149, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aZwTxtsK--eVCgzvvue5cwAAAok"]
[Mon Feb 23 16:45:59.263378 2026] [:error] [pid 39640:tid 39673] [client 45.132.224.149:23987] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aZwTx9sK--eVCgzvvue5eQAAAoM"]
[Mon Feb 23 16:45:59.640882 2026] [:error] [pid 25295:tid 25336] [client 45.132.224.113:31521] [client 45.132.224.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aZwTx42Av4J1Jnqi7yK12wAAAIU"]
[Mon Feb 23 16:46:02.745049 2026] [:error] [pid 39540:tid 39570] [client 45.132.224.127:64075] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZwTyrsgm9aTWhlRScJ2PQAAAcE"]
[Mon Feb 23 16:46:03.061329 2026] [:error] [pid 25380:tid 25397] [client 45.132.224.137:33497] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aZwTy6Krc8yFQ8fy78rsKgAAAM8"]
[Mon Feb 23 16:46:03.348701 2026] [:error] [pid 25380:tid 25403] [client 45.132.224.135:29397] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aZwTy6Krc8yFQ8fy78rsKwAAANU"]
[Mon Feb 23 16:46:04.625464 2026] [:error] [pid 25380:tid 25382] [client 45.132.224.143:58729] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aZwTzKKrc8yFQ8fy78rsNgAAAMA"]
[Mon Feb 23 16:46:04.923779 2026] [:error] [pid 25380:tid 25405] [client 45.132.224.119:47113] [client 45.132.224.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aZwTzKKrc8yFQ8fy78rsOAAAANc"]
[Mon Feb 23 16:46:05.220684 2026] [:error] [pid 25380:tid 25393] [client 45.132.224.110:61273] [client 45.132.224.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aZwTzaKrc8yFQ8fy78rsOQAAAMs"]
[Mon Feb 23 16:46:06.096155 2026] [:error] [pid 39639:tid 39651] [client 45.132.224.114:41455] [client 45.132.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aZwTzhpFkMoMi8uTUUNqNgAAAkg"]
[Mon Feb 23 16:46:06.579656 2026] [:error] [pid 25380:tid 25392] [client 45.132.224.155:39427] [client 45.132.224.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aZwTzqKrc8yFQ8fy78rsQgAAAMo"]
[Mon Feb 23 16:46:07.213532 2026] [:error] [pid 25380:tid 25399] [client 45.132.224.118:64155] [client 45.132.224.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aZwTz6Krc8yFQ8fy78rsSQAAANE"]
[Mon Feb 23 16:46:09.228881 2026] [:error] [pid 25294:tid 25372] [client 45.132.224.149:52921] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aZwT0SRCFB3CqIo_jfa4JQAAAFM"]
[Mon Feb 23 16:46:09.874806 2026] [:error] [pid 39540:tid 39588] [client 45.132.224.150:37115] [client 45.132.224.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aZwT0bsgm9aTWhlRScJ2RAAAAdM"]
[Mon Feb 23 16:46:11.114743 2026] [:error] [pid 25380:tid 25397] [client 45.132.224.130:23373] [client 45.132.224.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aZwT06Krc8yFQ8fy78rsWgAAAM8"]
[Mon Feb 23 16:46:11.809670 2026] [:error] [pid 25380:tid 25403] [client 45.132.224.144:30775] [client 45.132.224.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aZwT06Krc8yFQ8fy78rsYAAAANU"]
[Mon Feb 23 16:46:12.770745 2026] [:error] [pid 25380:tid 25382] [client 45.132.224.113:55367] [client 45.132.224.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aZwT1KKrc8yFQ8fy78rsaQAAAMA"]
[Mon Feb 23 16:46:14.070492 2026] [:error] [pid 39639:tid 39656] [client 45.132.224.146:41303] [client 45.132.224.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aZwT1hpFkMoMi8uTUUNqSwAAAk0"]
[Mon Feb 23 16:46:14.709451 2026] [:error] [pid 39639:tid 39666] [client 45.132.224.126:39533] [client 45.132.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aZwT1hpFkMoMi8uTUUNqUgAAAlc"]
[Mon Feb 23 16:46:15.023610 2026] [:error] [pid 39640:tid 39686] [client 45.132.224.137:38677] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aZwT19sK--eVCgzvvue5fwAAApA"]
[Mon Feb 23 16:46:16.102337 2026] [:error] [pid 25380:tid 25394] [client 45.132.224.130:36995] [client 45.132.224.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aZwT2KKrc8yFQ8fy78rsdwAAAMw"]
[Mon Feb 23 16:46:18.433426 2026] [:error] [pid 25294:tid 25345] [client 45.132.224.153:37251] [client 45.132.224.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aZwT2iRCFB3CqIo_jfa4LQAAAEY"]
[Mon Feb 23 16:46:19.452405 2026] [:error] [pid 39538:tid 39554] [client 45.132.224.129:25329] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aZwT2y4Zk8-cQOG3ZnpVoQAAAYw"]
[Mon Feb 23 16:46:19.730299 2026] [:error] [pid 39640:tid 39671] [client 45.132.224.126:26101] [client 45.132.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aZwT29sK--eVCgzvvue5igAAAoE"]
[Mon Feb 23 16:46:20.446062 2026] [:error] [pid 39640:tid 39674] [client 45.132.224.157:56523] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aZwT3NsK--eVCgzvvue5kAAAAoQ"]
[Mon Feb 23 16:46:21.243573 2026] [:error] [pid 25294:tid 25375] [client 45.132.224.110:64499] [client 45.132.224.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aZwT3SRCFB3CqIo_jfa4NgAAAFY"]
[Mon Feb 23 16:46:21.655913 2026] [:error] [pid 25294:tid 25348] [client 45.132.224.132:64915] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aZwT3SRCFB3CqIo_jfa4NwAAAEc"]
[Mon Feb 23 16:46:23.043332 2026] [:error] [pid 25294:tid 25350] [client 45.132.224.148:53567] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aZwT3yRCFB3CqIo_jfa4QQAAAEg"]
[Mon Feb 23 16:46:23.781458 2026] [:error] [pid 39504:tid 39507] [client 45.132.224.117:44269] [client 45.132.224.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aZwT33LcHpOlI9gwwJoFrQAAAUE"]
[Mon Feb 23 16:46:24.263750 2026] [:error] [pid 39538:tid 39555] [client 45.132.224.140:51149] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aZwT4C4Zk8-cQOG3ZnpVpAAAAY0"]
[Mon Feb 23 16:46:24.894910 2026] [:error] [pid 39538:tid 39561] [client 45.132.224.112:26899] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aZwT4C4Zk8-cQOG3ZnpVqgAAAZM"]
[Mon Feb 23 16:46:25.567684 2026] [:error] [pid 39639:tid 39648] [client 45.132.224.124:43365] [client 45.132.224.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aZwT4RpFkMoMi8uTUUNqewAAAkU"]
[Mon Feb 23 16:46:29.535990 2026] [:error] [pid 39540:tid 39580] [client 45.132.224.116:50465] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aZwT5bsgm9aTWhlRScJ2UQAAAcs"]
[Mon Feb 23 16:46:30.251330 2026] [:error] [pid 39639:tid 39667] [client 45.132.224.143:26449] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aZwT5hpFkMoMi8uTUUNqiwAAAlg"]
[Mon Feb 23 16:46:30.934063 2026] [:error] [pid 39640:tid 39694] [client 45.132.224.136:55667] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aZwT5tsK--eVCgzvvue5twAAApg"]
[Mon Feb 23 16:46:31.433615 2026] [:error] [pid 39540:tid 39578] [client 45.132.224.150:64343] [client 45.132.224.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aZwT57sgm9aTWhlRScJ2VQAAAck"]
[Mon Feb 23 16:46:31.935609 2026] [:error] [pid 39639:tid 39654] [client 45.132.224.138:32973] [client 45.132.224.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aZwT5xpFkMoMi8uTUUNqkQAAAks"]
[Mon Feb 23 16:46:32.227091 2026] [:error] [pid 39540:tid 39586] [client 45.132.224.142:56639] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aZwT6Lsgm9aTWhlRScJ2WQAAAdE"]
[Mon Feb 23 16:46:32.620605 2026] [:error] [pid 39640:tid 39687] [client 45.132.224.132:27125] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aZwT6NsK--eVCgzvvue5uwAAApE"]
[Mon Feb 23 16:46:33.850519 2026] [:error] [pid 39504:tid 39513] [client 45.132.224.152:40213] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aZwT6XLcHpOlI9gwwJoFuAAAAUc"]
[Mon Feb 23 16:46:34.715794 2026] [:error] [pid 29909:tid 29933] [client 45.132.224.117:34343] [client 45.132.224.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aZwT6j9oc2QzltksUk7LiQAAARY"]
[Mon Feb 23 16:46:35.539034 2026] [:error] [pid 39540:tid 39590] [client 45.132.224.131:23243] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aZwT67sgm9aTWhlRScJ2XwAAAdU"]
[Mon Feb 23 16:46:36.427308 2026] [:error] [pid 25294:tid 25341] [client 45.132.224.152:30999] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aZwT7CRCFB3CqIo_jfa4UAAAAEQ"]
[Mon Feb 23 16:46:37.879130 2026] [:error] [pid 25293:tid 25322] [client 45.132.224.118:42365] [client 45.132.224.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aZwT7eL9XfBf66iHi_ehAQAAABc"]
[Mon Feb 23 16:46:38.375284 2026] [:error] [pid 39639:tid 39656] [client 45.132.224.115:37295] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aZwT7hpFkMoMi8uTUUNqqQAAAk0"]
[Mon Feb 23 16:46:38.881369 2026] [:error] [pid 25380:tid 25398] [client 45.132.224.133:35631] [client 45.132.224.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aZwT7qKrc8yFQ8fy78rshAAAANA"]
[Mon Feb 23 16:46:39.473841 2026] [:error] [pid 39640:tid 39688] [client 45.132.224.109:50161] [client 45.132.224.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aZwT79sK--eVCgzvvue5wwAAApI"]
[Mon Feb 23 16:46:41.043271 2026] [:error] [pid 25380:tid 25388] [client 45.132.224.122:58427] [client 45.132.224.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aZwT8aKrc8yFQ8fy78rsjwAAAMY"]
[Mon Feb 23 16:46:41.433977 2026] [:error] [pid 39639:tid 39645] [client 45.132.224.142:57293] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aZwT8RpFkMoMi8uTUUNquwAAAkI"]
[Mon Feb 23 16:46:42.203536 2026] [:error] [pid 39639:tid 39653] [client 45.132.224.107:34313] [client 45.132.224.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aZwT8hpFkMoMi8uTUUNqwwAAAko"]
[Mon Feb 23 16:46:42.531437 2026] [:error] [pid 29909:tid 29913] [client 45.132.224.116:44927] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aZwT8j9oc2QzltksUk7LjwAAAQI"]
[Mon Feb 23 16:46:43.154177 2026] [:error] [pid 39640:tid 39690] [client 45.132.224.132:20687] [client 45.132.224.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aZwT89sK--eVCgzvvue5yAAAApQ"]
[Mon Feb 23 16:46:43.531374 2026] [:error] [pid 39640:tid 39689] [client 45.132.224.140:48469] [client 45.132.224.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aZwT89sK--eVCgzvvue5ywAAApM"]
[Mon Feb 23 16:46:43.848240 2026] [:error] [pid 39640:tid 39680] [client 45.132.224.131:45759] [client 45.132.224.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.131, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aZwT89sK--eVCgzvvue5zAAAAoo"]
[Mon Feb 23 16:46:43.858953 2026] [proxy_fcgi:error] [pid 39640:tid 39680] [client 45.132.224.131:45759] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:46:43.992002 2026] [:error] [pid 39640:tid 39676] [client 45.132.224.131:45759] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aZwT89sK--eVCgzvvue5zQAAAoY"]
[Mon Feb 23 16:46:44.880766 2026] [:error] [pid 25380:tid 25397] [client 45.132.224.128:38431] [client 45.132.224.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aZwT9KKrc8yFQ8fy78rskwAAAM8"]
[Mon Feb 23 16:46:45.159403 2026] [:error] [pid 25295:tid 25335] [client 45.132.224.133:34105] [client 45.132.224.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aZwT9Y2Av4J1Jnqi7yK15AAAAIQ"]
[Mon Feb 23 16:46:46.507731 2026] [:error] [pid 25380:tid 25403] [client 45.132.224.125:26669] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aZwT9qKrc8yFQ8fy78rsoAAAANU"]
[Mon Feb 23 16:46:46.830739 2026] [:error] [pid 39540:tid 39570] [client 45.132.224.148:27163] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aZwT9rsgm9aTWhlRScJ2YAAAAcE"]
[Mon Feb 23 16:46:47.446454 2026] [:error] [pid 25380:tid 25399] [client 45.132.224.134:57691] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aZwT96Krc8yFQ8fy78rspgAAANE"]
[Mon Feb 23 16:46:47.727990 2026] [:error] [pid 39538:tid 39558] [client 45.132.224.127:33267] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aZwT9y4Zk8-cQOG3ZnpVvAAAAZA"]
[Mon Feb 23 16:46:48.141815 2026] [proxy_fcgi:error] [pid 29909:tid 29932] [client 45.132.224.112:63485] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:46:48.306292 2026] [:error] [pid 29909:tid 29920] [client 45.132.224.112:63485] [client 45.132.224.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.224.112, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZwT-D9oc2QzltksUk7LkQAAAQk"]
[Mon Feb 23 16:46:48.634736 2026] [:error] [pid 29909:tid 29933] [client 45.132.224.112:63485] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aZwT-D9oc2QzltksUk7LlAAAARY"]
[Mon Feb 23 16:46:49.601058 2026] [:error] [pid 39504:tid 39516] [client 45.132.224.126:52983] [client 45.132.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aZwT-XLcHpOlI9gwwJoFygAAAUo"]
[Mon Feb 23 16:46:50.048163 2026] [:error] [pid 39540:tid 39578] [client 45.132.224.134:55191] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aZwT-rsgm9aTWhlRScJ2eQAAAck"]
[Mon Feb 23 16:46:50.393494 2026] [:error] [pid 39540:tid 39576] [client 45.132.224.123:29455] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aZwT-rsgm9aTWhlRScJ2ewAAAcc"]
[Mon Feb 23 16:46:51.173298 2026] [:error] [pid 39538:tid 39556] [client 45.132.224.113:38269] [client 45.132.224.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aZwT-y4Zk8-cQOG3ZnpVwwAAAY4"]
[Mon Feb 23 16:46:51.830275 2026] [:error] [pid 39540:tid 39579] [client 45.132.224.122:35221] [client 45.132.224.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aZwT-7sgm9aTWhlRScJ2gwAAAco"]
[Mon Feb 23 16:46:52.886598 2026] [:error] [pid 39504:tid 39514] [client 45.132.224.135:38377] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aZwT_HLcHpOlI9gwwJoF1QAAAUg"]
[Mon Feb 23 16:46:53.159135 2026] [:error] [pid 39639:tid 39657] [client 45.132.224.111:34165] [client 45.132.224.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aZwT_RpFkMoMi8uTUUNq3AAAAk4"]
[Mon Feb 23 16:46:53.716901 2026] [:error] [pid 39639:tid 39654] [client 45.132.224.157:40035] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aZwT_RpFkMoMi8uTUUNq3gAAAks"]
[Mon Feb 23 16:46:54.968011 2026] [:error] [pid 39639:tid 39664] [client 45.132.224.125:56601] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aZwT_hpFkMoMi8uTUUNq5gAAAlU"]
[Mon Feb 23 16:46:55.628527 2026] [:error] [pid 39540:tid 39593] [client 45.132.224.122:35377] [client 45.132.224.122] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aZwT_7sgm9aTWhlRScJ2hwAAAdg"]
[Mon Feb 23 16:46:55.764189 2026] [:error] [pid 39540:tid 39586] [client 45.132.224.122:35377] [client 45.132.224.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aZwT_7sgm9aTWhlRScJ2iQAAAdE"]
[Mon Feb 23 16:46:56.341599 2026] [:error] [pid 29909:tid 29912] [client 45.132.224.116:44749] [client 45.132.224.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aZwUAD9oc2QzltksUk7LmgAAAQE"]
[Mon Feb 23 16:46:56.665869 2026] [:error] [pid 39540:tid 39592] [client 45.132.224.146:37595] [client 45.132.224.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aZwUALsgm9aTWhlRScJ2jQAAAdc"]
[Mon Feb 23 16:46:57.986746 2026] [:error] [pid 25294:tid 25356] [client 45.132.224.121:54949] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aZwUASRCFB3CqIo_jfa4cAAAAEs"]
[Mon Feb 23 16:46:58.628086 2026] [:error] [pid 25294:tid 25360] [client 45.132.224.125:37031] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aZwUAiRCFB3CqIo_jfa4dQAAAE0"]
[Mon Feb 23 16:46:59.078245 2026] [:error] [pid 39538:tid 39552] [client 45.132.224.149:38573] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aZwUAy4Zk8-cQOG3ZnpV1QAAAYo"]
[Mon Feb 23 16:47:00.301766 2026] [:error] [pid 39540:tid 39586] [client 45.132.224.131:62459] [client 45.132.224.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aZwUBLsgm9aTWhlRScJ2lwAAAdE"]
[Mon Feb 23 16:47:01.888726 2026] [:error] [pid 25293:tid 25303] [client 45.132.224.139:29897] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aZwUBeL9XfBf66iHi_ehCQAAAAQ"]
[Mon Feb 23 16:47:02.354577 2026] [:error] [pid 39540:tid 39580] [client 45.132.224.130:56601] [client 45.132.224.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aZwUBrsgm9aTWhlRScJ2oAAAAcs"]
[Mon Feb 23 16:47:02.707268 2026] [:error] [pid 25380:tid 25397] [client 45.132.224.129:47425] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aZwUBqKrc8yFQ8fy78rsxQAAAM8"]
[Mon Feb 23 16:47:03.315857 2026] [:error] [pid 39540:tid 39585] [client 45.132.224.112:22129] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aZwUB7sgm9aTWhlRScJ2pAAAAdA"]
[Mon Feb 23 16:47:04.272828 2026] [:error] [pid 29909:tid 29925] [client 45.132.224.115:42841] [client 45.132.224.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aZwUCD9oc2QzltksUk7LoAAAAQ4"]
[Mon Feb 23 16:47:04.590525 2026] [:error] [pid 25294:tid 25372] [client 45.132.224.149:48367] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aZwUCCRCFB3CqIo_jfa4dwAAAFM"]
[Mon Feb 23 16:47:05.921010 2026] [:error] [pid 25294:tid 25351] [client 45.132.224.114:27325] [client 45.132.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aZwUCSRCFB3CqIo_jfa4fwAAAEk"]
[Mon Feb 23 16:47:06.663866 2026] [:error] [pid 25380:tid 25390] [client 45.132.224.107:29003] [client 45.132.224.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aZwUCqKrc8yFQ8fy78rszQAAAMg"]
[Mon Feb 23 16:47:07.593460 2026] [:error] [pid 39504:tid 39507] [client 45.132.224.148:29811] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aZwUC3LcHpOlI9gwwJoF4gAAAUE"]
[Mon Feb 23 16:47:07.961545 2026] [:error] [pid 39540:tid 39569] [client 45.132.224.141:57173] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aZwUC7sgm9aTWhlRScJ2qQAAAcA"]
[Mon Feb 23 16:47:08.469455 2026] [:error] [pid 39540:tid 39571] [client 45.132.224.134:28887] [client 45.132.224.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aZwUDLsgm9aTWhlRScJ2rAAAAcI"]
[Mon Feb 23 16:47:09.154740 2026] [:error] [pid 25294:tid 25360] [client 45.132.224.125:52351] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aZwUDSRCFB3CqIo_jfa4gwAAAE0"]
[Mon Feb 23 16:47:09.744180 2026] [:error] [pid 25380:tid 25396] [client 45.132.224.123:45015] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aZwUDaKrc8yFQ8fy78rs0gAAAM4"]
[Mon Feb 23 16:47:10.080696 2026] [:error] [pid 25294:tid 25331] [client 45.132.224.136:60975] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aZwUDiRCFB3CqIo_jfa4iAAAAEI"]
[Mon Feb 23 16:47:10.575332 2026] [:error] [pid 39640:tid 39688] [client 45.132.224.153:49847] [client 45.132.224.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aZwUDtsK--eVCgzvvue50gAAApI"]
[Mon Feb 23 16:47:10.975147 2026] [:error] [pid 39639:tid 39661] [client 45.132.224.110:22249] [client 45.132.224.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aZwUDhpFkMoMi8uTUUNq6gAAAlI"]
[Mon Feb 23 16:47:11.669163 2026] [:error] [pid 25380:tid 25392] [client 45.132.224.108:36071] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aZwUD6Krc8yFQ8fy78rs2gAAAMo"]
[Mon Feb 23 16:47:12.148543 2026] [:error] [pid 25294:tid 25376] [client 45.132.224.127:59637] [client 45.132.224.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aZwUECRCFB3CqIo_jfa4jgAAAFc"]
[Mon Feb 23 16:47:12.526139 2026] [:error] [pid 39639:tid 39657] [client 45.132.224.139:38803] [client 45.132.224.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aZwUEBpFkMoMi8uTUUNq7AAAAk4"]
[Mon Feb 23 16:47:12.929973 2026] [:error] [pid 29909:tid 29927] [client 45.132.224.108:46805] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aZwUED9oc2QzltksUk7LpAAAARA"]
[Mon Feb 23 16:47:13.736788 2026] [:error] [pid 39540:tid 39593] [client 45.132.224.136:55907] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aZwUEbsgm9aTWhlRScJ2twAAAdg"]
[Mon Feb 23 16:47:14.449185 2026] [:error] [pid 39540:tid 39571] [client 45.132.224.152:58065] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aZwUErsgm9aTWhlRScJ2uwAAAcI"]
[Mon Feb 23 16:47:14.888655 2026] [:error] [pid 39639:tid 39660] [client 45.132.224.157:42557] [client 45.132.224.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aZwUEhpFkMoMi8uTUUNq8QAAAlE"]
[Mon Feb 23 16:47:15.295026 2026] [:error] [pid 39540:tid 39589] [client 45.132.224.146:63983] [client 45.132.224.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aZwUE7sgm9aTWhlRScJ2vwAAAdQ"]
[Mon Feb 23 16:47:16.597961 2026] [:error] [pid 25380:tid 25382] [client 45.132.224.137:59191] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aZwUFKKrc8yFQ8fy78rs4gAAAMA"]
[Mon Feb 23 16:47:16.870920 2026] [:error] [pid 25293:tid 25317] [client 45.132.224.152:37257] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aZwUFOL9XfBf66iHi_ehEQAAABI"]
[Mon Feb 23 16:47:17.459291 2026] [:error] [pid 29909:tid 29924] [client 45.132.224.125:57629] [client 45.132.224.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aZwUFT9oc2QzltksUk7LrwAAAQ0"]
[Mon Feb 23 16:47:19.731830 2026] [:error] [pid 39538:tid 39564] [client 45.132.224.114:34233] [client 45.132.224.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aZwUFy4Zk8-cQOG3ZnpV3QAAAZY"]
[Mon Feb 23 16:47:20.453229 2026] [:error] [pid 25380:tid 25390] [client 45.132.224.119:48079] [client 45.132.224.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aZwUGKKrc8yFQ8fy78rs7wAAAMg"]
[Mon Feb 23 16:47:21.005342 2026] [:error] [pid 39639:tid 39649] [client 45.132.224.108:28465] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aZwUGRpFkMoMi8uTUUNq9QAAAkY"]
[Mon Feb 23 16:47:21.456003 2026] [:error] [pid 39639:tid 39647] [client 45.132.224.122:42671] [client 45.132.224.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aZwUGRpFkMoMi8uTUUNq9wAAAkQ"]
[Mon Feb 23 16:47:21.970629 2026] [:error] [pid 39639:tid 39665] [client 45.132.224.141:36493] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aZwUGRpFkMoMi8uTUUNq-wAAAlY"]
[Mon Feb 23 16:47:22.957815 2026] [:error] [pid 39639:tid 39660] [client 45.132.224.152:62491] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aZwUGhpFkMoMi8uTUUNrAAAAAlE"]
[Mon Feb 23 16:47:23.683543 2026] [:error] [pid 39538:tid 39559] [client 45.132.224.120:26905] [client 45.132.224.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aZwUGy4Zk8-cQOG3ZnpV6gAAAZE"]
[Mon Feb 23 16:47:24.012702 2026] [proxy_fcgi:error] [pid 25294:tid 25343] [client 45.132.224.124:58155] AH01071: Got error 'Primary script unknown'
[Mon Feb 23 16:47:24.154457 2026] [:error] [pid 25294:tid 25328] [client 45.132.224.124:58155] [client 45.132.224.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aZwUHCRCFB3CqIo_jfa4qAAAAEA"]
[Mon Feb 23 16:47:24.506474 2026] [:error] [pid 25295:tid 25361] [client 45.132.224.137:31761] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aZwUHI2Av4J1Jnqi7yK17QAAAJQ"]
[Mon Feb 23 16:47:25.088580 2026] [:error] [pid 39640:tid 39676] [client 45.132.224.128:57149] [client 45.132.224.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aZwUHdsK--eVCgzvvue53wAAAoY"]
[Mon Feb 23 16:47:25.418424 2026] [:error] [pid 25380:tid 25382] [client 45.132.224.117:44161] [client 45.132.224.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aZwUHaKrc8yFQ8fy78rtBQAAAMA"]
[Mon Feb 23 16:47:26.647327 2026] [:error] [pid 25380:tid 25389] [client 45.132.224.149:42189] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aZwUHqKrc8yFQ8fy78rtDgAAAMc"]
[Mon Feb 23 16:47:26.912529 2026] [:error] [pid 29909:tid 29928] [client 45.132.224.112:46085] [client 45.132.224.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aZwUHj9oc2QzltksUk7LvQAAARE"]
[Mon Feb 23 16:47:27.427562 2026] [:error] [pid 39538:tid 39544] [client 45.132.224.142:41605] [client 45.132.224.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "aZwUHy4Zk8-cQOG3ZnpV8gAAAYI"]
[Mon Feb 23 16:47:27.721930 2026] [:error] [pid 39540:tid 39588] [client 45.132.224.124:30691] [client 45.132.224.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aZwUH7sgm9aTWhlRScJ21QAAAdM"]
[Mon Feb 23 16:47:28.071345 2026] [:error] [pid 39639:tid 39659] [client 45.132.224.152:55067] [client 45.132.224.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aZwUIBpFkMoMi8uTUUNrAQAAAlA"]
[Mon Feb 23 16:47:28.341787 2026] [:error] [pid 39504:tid 39524] [client 45.132.224.137:28931] [client 45.132.224.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aZwUIHLcHpOlI9gwwJoF6gAAAVI"]
[Mon Feb 23 16:47:30.518941 2026] [:error] [pid 39540:tid 39583] [client 45.132.224.126:51651] [client 45.132.224.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aZwUIrsgm9aTWhlRScJ23AAAAc4"]
[Mon Feb 23 16:47:31.028258 2026] [:error] [pid 39538:tid 39543] [client 45.132.224.135:27395] [client 45.132.224.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aZwUIy4Zk8-cQOG3ZnpV9AAAAYE"]
[Mon Feb 23 16:47:31.658713 2026] [:error] [pid 39504:tid 39514] [client 45.132.224.129:22133] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aZwUI3LcHpOlI9gwwJoF8wAAAUg"]
[Mon Feb 23 16:47:32.031607 2026] [:error] [pid 39540:tid 39589] [client 45.132.224.120:28599] [client 45.132.224.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aZwUJLsgm9aTWhlRScJ23gAAAdQ"]
[Mon Feb 23 16:47:32.700453 2026] [:error] [pid 25295:tid 25369] [client 45.132.224.118:43119] [client 45.132.224.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aZwUJI2Av4J1Jnqi7yK18QAAAJg"]
[Mon Feb 23 16:47:33.080196 2026] [:error] [pid 25380:tid 25388] [client 45.132.224.151:28805] [client 45.132.224.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aZwUJaKrc8yFQ8fy78rtEwAAAMY"]
[Mon Feb 23 16:47:34.607121 2026] [:error] [pid 25380:tid 25402] [client 45.132.224.129:58595] [client 45.132.224.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aZwUJqKrc8yFQ8fy78rtHgAAANQ"]
[Mon Feb 23 16:47:34.887594 2026] [:error] [pid 25295:tid 25327] [client 45.132.224.141:39097] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aZwUJo2Av4J1Jnqi7yK18gAAAIA"]
[Mon Feb 23 16:47:35.624495 2026] [:error] [pid 39640:tid 39688] [client 45.132.224.124:63361] [client 45.132.224.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aZwUJ9sK--eVCgzvvue55wAAApI"]
[Mon Feb 23 16:47:36.039838 2026] [:error] [pid 39504:tid 39512] [client 45.132.224.148:25015] [client 45.132.224.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aZwUKHLcHpOlI9gwwJoF-AAAAUY"]
[Mon Feb 23 16:47:36.460437 2026] [:error] [pid 25294:tid 25362] [client 45.132.224.143:62657] [client 45.132.224.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "aZwUKCRCFB3CqIo_jfa4uAAAAE4"]
[Mon Feb 23 16:47:36.740105 2026] [:error] [pid 39639:tid 39653] [client 45.132.224.123:51563] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aZwUKBpFkMoMi8uTUUNrAgAAAko"]
[Mon Feb 23 16:47:37.058902 2026] [:error] [pid 39639:tid 39646] [client 45.132.224.150:37399] [client 45.132.224.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aZwUKRpFkMoMi8uTUUNrAwAAAkM"]
[Mon Feb 23 16:47:37.841188 2026] [:error] [pid 39639:tid 39661] [client 45.132.224.136:29181] [client 45.132.224.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aZwUKRpFkMoMi8uTUUNrBwAAAlI"]
[Mon Feb 23 16:47:38.280135 2026] [:error] [pid 25380:tid 25392] [client 45.132.224.106:43567] [client 45.132.224.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aZwUKqKrc8yFQ8fy78rtIQAAAMo"]
[Mon Feb 23 16:47:39.077172 2026] [:error] [pid 39639:tid 39648] [client 45.132.224.145:31911] [client 45.132.224.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aZwUKxpFkMoMi8uTUUNrDgAAAkU"]
[Mon Feb 23 16:47:39.350020 2026] [:error] [pid 39640:tid 39674] [client 45.132.224.149:22749] [client 45.132.224.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aZwUK9sK--eVCgzvvue56QAAAoQ"]
[Mon Feb 23 16:47:39.838308 2026] [:error] [pid 39538:tid 39542] [client 45.132.224.121:55059] [client 45.132.224.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aZwUKy4Zk8-cQOG3ZnpV_wAAAYA"]
[Mon Feb 23 16:47:41.560255 2026] [:error] [pid 39640:tid 39683] [client 45.132.224.109:52841] [client 45.132.224.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aZwULdsK--eVCgzvvue59AAAAo0"]
[Mon Feb 23 16:47:42.058018 2026] [:error] [pid 39538:tid 39560] [client 45.132.224.123:29123] [client 45.132.224.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aZwULi4Zk8-cQOG3ZnpWAQAAAZI"]
[Mon Feb 23 16:47:42.800184 2026] [:error] [pid 25294:tid 25354] [client 45.132.224.141:30691] [client 45.132.224.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aZwULiRCFB3CqIo_jfa4vAAAAEo"]
[Mon Feb 23 16:47:43.090190 2026] [:error] [pid 39538:tid 39550] [client 45.132.224.108:40465] [client 45.132.224.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aZwULy4Zk8-cQOG3ZnpWBAAAAYg"]
[Mon Feb 23 16:47:44.416199 2026] [:error] [pid 39504:tid 39518] [client 45.132.224.124:21245] [client 45.132.224.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aZwUMHLcHpOlI9gwwJoF-gAAAUw"]
[Mon Feb 23 21:52:56.241156 2026] [:error] [pid 39504:tid 39522] [client 104.28.153.15:16436] [client 104.28.153.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZxbuHLcHpOlI9gwwJoiCAAAAVA"]
[Mon Feb 23 22:29:36.850943 2026] [:error] [pid 25380:tid 25384] [client 104.28.203.58:38869] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZxkUKKrc8yFQ8fy78pizgAAAMI"]
[Mon Feb 23 22:29:37.189562 2026] [:error] [pid 39639:tid 39664] [client 104.28.203.58:38878] [client 104.28.203.58] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/style.php"] [unique_id "aZxkURpFkMoMi8uTUUMEnAAAAlU"]
[Mon Feb 23 23:21:23.374917 2026] [:error] [pid 39639:tid 39665] [client 43.130.67.6:33148] [client 43.130.67.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZxwcxpFkMoMi8uTUUMTfAAAAlY"]
[Tue Feb 24 01:49:05.557095 2026] [:error] [pid 29291:tid 29407] [client 43.163.104.54:32966] [client 43.163.104.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZyTET2gdpbMAXIIRb1uQAAAAJM"]
[Tue Feb 24 05:15:44.470533 2026] [:error] [pid 37644:tid 37663] [client 216.73.216.82:53306] [client 216.73.216.82] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourcause.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aZzDgELaEhVDwBRydH0xBQAAANE"]
[Tue Feb 24 06:46:23.764051 2026] [:error] [pid 11672:tid 11694] [client 20.234.99.178:8170] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aZzYv_a0fhnmfPYq92u3kgAAARQ"]
[Tue Feb 24 06:46:26.107953 2026] [:error] [pid 37539:tid 37587] [client 20.234.99.178:2723] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aZzYwnEnr46jUQep9z_YxAAAAEw"]
[Tue Feb 24 06:46:33.641921 2026] [:error] [pid 37644:tid 37660] [client 20.234.99.178:5363] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aZzYyULaEhVDwBRydH1kNwAAAM4"]
[Tue Feb 24 06:46:38.264168 2026] [:error] [pid 37540:tid 37605] [client 20.234.99.178:5231] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aZzYziahRAUBJS8hpJVwdwAAAIM"]
[Tue Feb 24 06:46:39.407173 2026] [:error] [pid 37538:tid 37571] [client 20.234.99.178:4036] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rak.php"] [unique_id "aZzYzyynTiHZ9J0Y2nZtBAAAABc"]
[Tue Feb 24 06:46:41.608802 2026] [:error] [pid 11672:tid 11676] [client 20.234.99.178:9287] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rak.php"] [unique_id "aZzY0fa0fhnmfPYq92u32gAAAQI"]
[Tue Feb 24 06:46:43.765508 2026] [:error] [pid 11672:tid 11692] [client 20.234.99.178:7583] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rak.php"] [unique_id "aZzY0_a0fhnmfPYq92u32wAAARI"]
[Tue Feb 24 06:46:45.365028 2026] [:error] [pid 37644:tid 37661] [client 20.234.99.178:5244] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rak.php"] [unique_id "aZzY1ULaEhVDwBRydH1kSAAAAM8"]
[Tue Feb 24 06:46:46.690342 2026] [:error] [pid 37644:tid 37667] [client 20.234.99.178:7470] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rdfe.php"] [unique_id "aZzY1kLaEhVDwBRydH1kSwAAANU"]
[Tue Feb 24 06:46:48.625136 2026] [:error] [pid 37538:tid 37563] [client 20.234.99.178:3804] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rdfe.php"] [unique_id "aZzY2CynTiHZ9J0Y2nZtCgAAAA8"]
[Tue Feb 24 06:46:49.675643 2026] [:error] [pid 37538:tid 37554] [client 20.234.99.178:9322] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rdfe.php"] [unique_id "aZzY2SynTiHZ9J0Y2nZtCwAAAAY"]
[Tue Feb 24 06:46:50.598755 2026] [:error] [pid 37539:tid 37593] [client 20.234.99.178:6480] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rdfe.php"] [unique_id "aZzY2nEnr46jUQep9z_Y7AAAAFI"]
[Tue Feb 24 06:46:52.332031 2026] [:error] [pid 37644:tid 37665] [client 20.234.99.178:3789] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad.php"] [unique_id "aZzY3ELaEhVDwBRydH1kXAAAANM"]
[Tue Feb 24 06:46:53.153772 2026] [:error] [pid 11672:tid 11678] [client 20.234.99.178:9285] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad.php"] [unique_id "aZzY3fa0fhnmfPYq92u36AAAAQQ"]
[Tue Feb 24 06:47:05.326866 2026] [:error] [pid 37644:tid 37670] [client 20.234.99.178:28142] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad.php"] [unique_id "aZzY6ULaEhVDwBRydH1keAAAANg"]
[Tue Feb 24 06:47:07.084143 2026] [:error] [pid 11672:tid 11681] [client 20.234.99.178:38108] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shlo.php"] [unique_id "aZzY6_a0fhnmfPYq92u3_QAAAQc"]
[Tue Feb 24 06:47:08.346322 2026] [:error] [pid 37644:tid 37656] [client 20.234.99.178:4681] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shlo.php"] [unique_id "aZzY7ELaEhVDwBRydH1kggAAAMo"]
[Tue Feb 24 06:47:16.972754 2026] [:error] [pid 37540:tid 37605] [client 20.234.99.178:4699] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shlo.php"] [unique_id "aZzY9CahRAUBJS8hpJVwrgAAAIM"]
[Tue Feb 24 06:47:20.104978 2026] [:error] [pid 37644:tid 37659] [client 20.234.99.178:36735] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shlo.php"] [unique_id "aZzY-ELaEhVDwBRydH1ksAAAAM0"]
[Tue Feb 24 06:47:32.518840 2026] [:error] [pid 37539:tid 37577] [client 20.234.99.178:9319] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "aZzZBHEnr46jUQep9z_ZHgAAAEI"]
[Tue Feb 24 06:47:35.469268 2026] [:error] [pid 37644:tid 37650] [client 20.234.99.178:2551] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "aZzZB0LaEhVDwBRydH1lDQAAAMQ"]
[Tue Feb 24 06:47:39.656897 2026] [:error] [pid 37540:tid 37622] [client 20.234.99.178:9841] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "aZzZCyahRAUBJS8hpJVw_wAAAJQ"]
[Tue Feb 24 06:47:40.789648 2026] [:error] [pid 37538:tid 37567] [client 20.234.99.178:36730] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "aZzZDCynTiHZ9J0Y2nZtKQAAABM"]
[Tue Feb 24 06:47:42.810597 2026] [:error] [pid 37538:tid 37553] [client 20.234.99.178:6642] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aZzZDiynTiHZ9J0Y2nZtNwAAAAU"]
[Tue Feb 24 06:47:51.468474 2026] [:error] [pid 37644:tid 37668] [client 20.234.99.178:9317] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aZzZF0LaEhVDwBRydH1lRgAAANY"]
[Tue Feb 24 06:47:53.618893 2026] [:error] [pid 37540:tid 37612] [client 20.234.99.178:8518] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "aZzZGSahRAUBJS8hpJVxFgAAAIo"]
[Tue Feb 24 06:48:23.758299 2026] [:error] [pid 37644:tid 37658] [client 20.234.99.178:6515] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filei.php"] [unique_id "aZzZN0LaEhVDwBRydH1lZwAAAMw"]
[Tue Feb 24 06:48:25.730659 2026] [:error] [pid 37644:tid 37660] [client 20.234.99.178:36333] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filei.php"] [unique_id "aZzZOULaEhVDwBRydH1lbgAAAM4"]
[Tue Feb 24 06:48:27.912080 2026] [:error] [pid 37540:tid 37620] [client 20.234.99.178:2842] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filei.php"] [unique_id "aZzZOyahRAUBJS8hpJVxLQAAAJI"]
[Tue Feb 24 06:48:29.404456 2026] [:error] [pid 37540:tid 37609] [client 20.234.99.178:36306] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filei.php"] [unique_id "aZzZPSahRAUBJS8hpJVxLgAAAIc"]
[Tue Feb 24 06:48:31.913344 2026] [:error] [pid 11672:tid 11687] [client 20.234.99.178:36336] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aZzZP_a0fhnmfPYq92u5gQAAAQ0"]
[Tue Feb 24 06:48:38.270573 2026] [:error] [pid 37540:tid 37618] [client 20.234.99.178:6948] [client 20.234.99.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aZzZRiahRAUBJS8hpJVxQQAAAJA"]
[Tue Feb 24 06:48:43.415374 2026] [:error] [pid 37540:tid 37608] [client 20.234.99.178:8533] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aZzZSyahRAUBJS8hpJVxVwAAAIY"]
[Tue Feb 24 06:48:46.820888 2026] [:error] [pid 37538:tid 37558] [client 20.234.99.178:8519] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aZzZTiynTiHZ9J0Y2nZtTgAAAAo"]
[Tue Feb 24 06:48:53.543297 2026] [:error] [pid 11672:tid 11683] [client 20.234.99.178:32045] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aZzZVfa0fhnmfPYq92u54QAAAQk"]
[Tue Feb 24 06:48:54.444011 2026] [:error] [pid 37539:tid 37596] [client 20.234.99.178:4511] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aZzZVnEnr46jUQep9z_ZWgAAAFU"]
[Tue Feb 24 06:48:58.319803 2026] [:error] [pid 37644:tid 37647] [client 20.234.99.178:8543] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aZzZWkLaEhVDwBRydH1l1wAAAME"]
[Tue Feb 24 06:49:05.836384 2026] [:error] [pid 37644:tid 37661] [client 20.234.99.178:2511] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aZzZYULaEhVDwBRydH1l3QAAAM8"]
[Tue Feb 24 06:49:08.462971 2026] [:error] [pid 11672:tid 11690] [client 20.234.99.178:36228] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rsnu.php"] [unique_id "aZzZZPa0fhnmfPYq92u59wAAARA"]
[Tue Feb 24 06:49:11.235239 2026] [:error] [pid 37644:tid 37648] [client 20.234.99.178:7203] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trd.php"] [unique_id "aZzZZ0LaEhVDwBRydH1l-wAAAMI"]
[Tue Feb 24 06:49:12.953056 2026] [:error] [pid 37644:tid 37663] [client 20.234.99.178:5107] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trd.php"] [unique_id "aZzZaELaEhVDwBRydH1mAAAAANE"]
[Tue Feb 24 06:49:14.908464 2026] [:error] [pid 37540:tid 37615] [client 20.234.99.178:5098] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trd.php"] [unique_id "aZzZaiahRAUBJS8hpJVxtQAAAI0"]
[Tue Feb 24 06:49:16.370955 2026] [:error] [pid 37644:tid 37660] [client 20.234.99.178:33024] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trd.php"] [unique_id "aZzZbELaEhVDwBRydH1mKwAAAM4"]
[Tue Feb 24 06:49:17.646037 2026] [:error] [pid 37644:tid 37658] [client 20.234.99.178:6627] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aZzZbULaEhVDwBRydH1mMAAAAMw"]
[Tue Feb 24 06:49:18.391182 2026] [:error] [pid 37644:tid 37665] [client 20.234.99.178:33045] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aZzZbkLaEhVDwBRydH1mNgAAANM"]
[Tue Feb 24 06:49:19.253500 2026] [:error] [pid 37540:tid 37623] [client 20.234.99.178:6932] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aZzZbyahRAUBJS8hpJVxvwAAAJU"]
[Tue Feb 24 06:49:21.931612 2026] [:error] [pid 37644:tid 37668] [client 20.234.99.178:6481] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aZzZcULaEhVDwBRydH1mTQAAANY"]
[Tue Feb 24 06:49:27.846022 2026] [:error] [pid 37644:tid 37654] [client 20.234.99.178:7865] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aZzZd0LaEhVDwBRydH1mdAAAAMg"]
[Tue Feb 24 06:49:29.448589 2026] [:error] [pid 37644:tid 37651] [client 20.234.99.178:36324] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aZzZeULaEhVDwBRydH1mgAAAAMU"]
[Tue Feb 24 06:49:31.480096 2026] [:error] [pid 37540:tid 37623] [client 20.234.99.178:35403] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aZzZeyahRAUBJS8hpJVxyAAAAJU"]
[Tue Feb 24 06:49:33.424025 2026] [:error] [pid 11672:tid 11688] [client 20.234.99.178:6593] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mo.php"] [unique_id "aZzZffa0fhnmfPYq92u6HAAAAQ4"]
[Tue Feb 24 10:30:33.455453 2026] [:error] [pid 11672:tid 11674] [client 182.43.70.143:50345] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZ0NSfa0fhnmfPYq92v3pAAAAQA"]
[Tue Feb 24 11:16:29.473605 2026] [:error] [pid 37539:tid 37592] [client 104.28.222.75:13221] [client 104.28.222.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.222.75, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ0YDXEnr46jUQep9z8LWwAAAFE"]
[Tue Feb 24 11:16:43.403271 2026] [:error] [pid 37539:tid 37586] [client 103.103.138.162:63697] [client 103.103.138.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.103.138.162, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ0YG3Enr46jUQep9z8LYQAAAEs"]
[Tue Feb 24 13:20:15.385922 2026] [:error] [pid 34175:tid 34180] [client 43.153.76.247:45246] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZ01D3NLnkJcHQ-bNtV5xQAAAYM"]
[Tue Feb 24 15:49:07.034028 2026] [:error] [pid 23677:tid 23714] [client 101.32.52.164:37144] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZ1X85_1KUY5hVG_9Ou34gAAAIc"]
[Tue Feb 24 19:48:14.599528 2026] [:error] [pid 37873:tid 37889] [client 103.77.107.57:51625] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aZ2P_k625ION6Syu4d44xQAAAM4"]
[Tue Feb 24 19:48:14.804470 2026] [:error] [pid 37873:tid 37891] [client 103.77.107.57:51641] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aZ2P_k625ION6Syu4d44xwAAANA"]
[Tue Feb 24 20:00:31.431184 2026] [:error] [pid 16868:tid 16898] [client 49.51.178.45:36022] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZ2S3ydEecEcYKsh8PTpNgAAA8E"]
[Tue Feb 24 20:43:17.028030 2026] [:error] [pid 37095:tid 37114] [client 196.249.229.22:53761] [client 196.249.229.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.249.229.22, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ2c5SX8qkGqxKHLt3uZHQAAAJE"]
[Tue Feb 24 22:19:57.999856 2026] [:error] [pid 40455:tid 40470] [client 43.130.150.80:47348] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZ2zjVw13ca9RV2qrBmEyQAAAUo"]
[Wed Feb 25 05:16:03.874862 2026] [:error] [pid 60290:tid 60307] [client 98.93.135.156:61801] [client 98.93.135.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.93.135.156, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ4VEzPwSUztcPyiofpqqgAAAQ8"]
[Wed Feb 25 05:16:10.092081 2026] [:error] [pid 60290:tid 60293] [client 98.93.135.156:61801] [client 98.93.135.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aZ4VGjPwSUztcPyiofpqzQAAAQE"]
[Wed Feb 25 05:16:10.911847 2026] [:error] [pid 60498:tid 60523] [client 98.93.135.156:50504] [client 98.93.135.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aZ4VGiFCVhQ3ffus0uJosAAAAtI"]
[Wed Feb 25 05:16:11.729930 2026] [:error] [pid 60500:tid 60607] [client 98.93.135.156:63866] [client 98.93.135.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aZ4VG_Y9avxuno9KAT_61gAAA1Q"]
[Wed Feb 25 05:16:13.117539 2026] [:error] [pid 5556:tid 5601] [client 98.93.135.156:49844] [client 98.93.135.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aZ4VHaOrYeaTyh7lGRUUhwAAAc4"]
[Wed Feb 25 05:16:14.603465 2026] [:error] [pid 60498:tid 60520] [client 98.93.135.156:65070] [client 98.93.135.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aZ4VHiFCVhQ3ffus0uJotAAAAs8"]
[Wed Feb 25 05:16:15.420195 2026] [:error] [pid 60498:tid 60527] [client 98.93.135.156:57903] [client 98.93.135.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aZ4VHyFCVhQ3ffus0uJotQAAAtY"]
[Wed Feb 25 05:16:16.247674 2026] [:error] [pid 60290:tid 60314] [client 98.93.135.156:52146] [client 98.93.135.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aZ4VIDPwSUztcPyiofpq0gAAARY"]
[Wed Feb 25 09:59:01.168471 2026] [:error] [pid 5619:tid 5641] [client 43.135.185.59:51756] [client 43.135.185.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZ5XZZFUzdv-0L_F4fv6hgAAAgY"]
[Wed Feb 25 12:20:15.984591 2026] [:error] [pid 5556:tid 5587] [client 182.42.111.156:54910] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZ54f6OrYeaTyh7lGRWgAAAAAcA"]
[Wed Feb 25 16:55:05.578282 2026] [:error] [pid 60500:tid 60604] [client 43.135.134.127:41858] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZ646fY9avxuno9KAT89KwAAA1E"]
[Wed Feb 25 18:46:29.745591 2026] [:error] [pid 5556:tid 5601] [client 117.33.163.216:34056] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZ7TBaOrYeaTyh7lGRUthgAAAc4"]
[Wed Feb 25 19:16:33.277520 2026] [:error] [pid 20659:tid 20715] [client 43.159.152.187:59520] [client 43.159.152.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZ7aET_THK_HtK-Q44IVuwAAAFQ"]
[Wed Feb 25 21:07:09.856900 2026] [:error] [pid 60498:tid 60528] [client 139.59.24.163:55093] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "aZ7z_SFCVhQ3ffus0uI0pQAAAtc"], referer: binance.com
[Thu Feb 26 01:29:15.466534 2026] [:error] [pid 49556:tid 49645] [client 117.33.163.216:46594] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZ8xa5jk27yQt3CGcmiGwgAAAMk"]
[Thu Feb 26 02:03:57.297975 2026] [:error] [pid 49770:tid 49843] [client 170.106.107.87:48928] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZ85jS7xhdZV4TFeNytm_AAAAJE"]
[Thu Feb 26 02:05:37.693977 2026] [:error] [pid 49555:tid 49685] [client 20.104.61.138:43457] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZ858dw3_NsD2xC15YbwzQAAAFY"]
[Thu Feb 26 02:05:38.562459 2026] [:error] [pid 49770:tid 49837] [client 20.104.61.138:44103] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZ858i7xhdZV4TFeNytoOgAAAIs"]
[Thu Feb 26 02:05:39.616181 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:43478] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZ8589w3_NsD2xC15YbwzgAAAEs"]
[Thu Feb 26 02:05:40.542679 2026] [:error] [pid 49770:tid 49850] [client 20.104.61.138:43467] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vxrl.php"] [unique_id "aZ859C7xhdZV4TFeNytoQwAAAJg"]
[Thu Feb 26 02:05:41.217239 2026] [:error] [pid 49554:tid 49620] [client 20.104.61.138:43474] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aZ859dtlDT3cCGsQMTc9AAAAAAs"]
[Thu Feb 26 02:05:42.131137 2026] [:error] [pid 49555:tid 49684] [client 20.104.61.138:44102] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aZ859tw3_NsD2xC15Ybw1AAAAFU"]
[Thu Feb 26 02:05:43.026891 2026] [:error] [pid 49555:tid 49678] [client 20.104.61.138:43503] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aZ8599w3_NsD2xC15Ybw2QAAAE8"]
[Thu Feb 26 02:05:44.178525 2026] [:error] [pid 49556:tid 49643] [client 20.104.61.138:43470] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aZ85-Jjk27yQt3CGcmiTuwAAAMc"]
[Thu Feb 26 02:05:44.938611 2026] [:error] [pid 49554:tid 49613] [client 20.104.61.138:44109] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZ85-NtlDT3cCGsQMTc9BQAAAAQ"]
[Thu Feb 26 02:05:45.552166 2026] [:error] [pid 49556:tid 49642] [client 20.104.61.138:43491] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZ85-Zjk27yQt3CGcmiTvQAAAMY"]
[Thu Feb 26 02:05:46.197111 2026] [:error] [pid 49554:tid 49632] [client 20.104.61.138:43481] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZ85-ttlDT3cCGsQMTc9CgAAABc"]
[Thu Feb 26 02:05:47.056553 2026] [:error] [pid 49555:tid 49680] [client 20.104.61.138:43493] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/num.php"] [unique_id "aZ85-9w3_NsD2xC15Ybw5AAAAFE"]
[Thu Feb 26 02:05:47.747475 2026] [:error] [pid 49555:tid 49658] [client 20.104.61.138:43516] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aZ85-9w3_NsD2xC15Ybw6QAAAEM"]
[Thu Feb 26 02:05:48.932237 2026] [:error] [pid 49555:tid 49685] [client 20.104.61.138:43460] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aZ85_Nw3_NsD2xC15Ybw8AAAAFY"]
[Thu Feb 26 02:05:49.629875 2026] [:error] [pid 49770:tid 49829] [client 20.104.61.138:43469] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aZ85_S7xhdZV4TFeNytoWAAAAIM"]
[Thu Feb 26 02:05:50.273798 2026] [:error] [pid 49770:tid 49850] [client 20.104.61.138:43512] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aZ85_i7xhdZV4TFeNytoWwAAAJg"]
[Thu Feb 26 02:05:51.413130 2026] [:error] [pid 49770:tid 49827] [client 20.104.61.138:43476] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aZ85_y7xhdZV4TFeNytoYQAAAIE"]
[Thu Feb 26 02:05:52.155790 2026] [:error] [pid 49770:tid 49833] [client 20.104.61.138:43517] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aZ86AC7xhdZV4TFeNytoZwAAAIc"]
[Thu Feb 26 02:05:52.738080 2026] [:error] [pid 49770:tid 49831] [client 20.104.61.138:43502] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aZ86AC7xhdZV4TFeNytoawAAAIU"]
[Thu Feb 26 02:05:53.417193 2026] [:error] [pid 49555:tid 49668] [client 20.104.61.138:44110] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aZ86Adw3_NsD2xC15Ybw9gAAAEg"]
[Thu Feb 26 02:05:54.187641 2026] [:error] [pid 49770:tid 49839] [client 20.104.61.138:44144] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZ86Ai7xhdZV4TFeNytocwAAAI0"]
[Thu Feb 26 02:05:54.993730 2026] [:error] [pid 49555:tid 49678] [client 20.104.61.138:43505] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZ86Atw3_NsD2xC15Ybw-wAAAE8"]
[Thu Feb 26 02:05:55.864636 2026] [:error] [pid 49770:tid 49843] [client 20.104.61.138:43514] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZ86Ay7xhdZV4TFeNytogAAAAJE"]
[Thu Feb 26 02:05:56.786174 2026] [:error] [pid 49770:tid 49849] [client 20.104.61.138:43468] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aZ86BC7xhdZV4TFeNytoiQAAAJc"]
[Thu Feb 26 02:05:57.762026 2026] [:error] [pid 49556:tid 49654] [client 20.104.61.138:44113] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZ86BZjk27yQt3CGcmiTyQAAAM8"]
[Thu Feb 26 02:05:58.877652 2026] [:error] [pid 49556:tid 49661] [client 20.104.61.138:44134] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZ86Bpjk27yQt3CGcmiTygAAANM"]
[Thu Feb 26 02:05:59.803530 2026] [:error] [pid 49554:tid 49619] [client 20.104.61.138:44106] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZ86B9tlDT3cCGsQMTc9EQAAAAo"]
[Thu Feb 26 02:06:00.897233 2026] [:error] [pid 49554:tid 49624] [client 20.104.61.138:43464] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aZ86CNtlDT3cCGsQMTc9FQAAAA8"]
[Thu Feb 26 02:06:01.680207 2026] [:error] [pid 49770:tid 49838] [client 20.104.61.138:43480] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZ86CS7xhdZV4TFeNytomgAAAIw"]
[Thu Feb 26 02:06:02.375425 2026] [:error] [pid 49555:tid 49666] [client 20.104.61.138:44136] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZ86Ctw3_NsD2xC15YbxBQAAAEc"]
[Thu Feb 26 02:06:03.484689 2026] [:error] [pid 49556:tid 49665] [client 20.104.61.138:43508] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZ86C5jk27yQt3CGcmiT0QAAANU"]
[Thu Feb 26 02:06:04.291475 2026] [:error] [pid 49556:tid 49644] [client 20.104.61.138:43463] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aZ86DJjk27yQt3CGcmiT0wAAAMg"]
[Thu Feb 26 02:06:05.046797 2026] [:error] [pid 49556:tid 49650] [client 20.104.61.138:43519] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aZ86DZjk27yQt3CGcmiT1QAAAM0"]
[Thu Feb 26 02:06:06.007291 2026] [:error] [pid 49555:tid 49653] [client 20.104.61.138:44105] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aZ86Dtw3_NsD2xC15YbxDAAAAEE"]
[Thu Feb 26 02:06:07.047594 2026] [:error] [pid 49555:tid 49686] [client 20.104.61.138:43472] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aZ86D9w3_NsD2xC15YbxDQAAAFc"]
[Thu Feb 26 02:06:08.223951 2026] [:error] [pid 49770:tid 49842] [client 20.104.61.138:43456] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karak.php"] [unique_id "aZ86EC7xhdZV4TFeNytoqwAAAJA"]
[Thu Feb 26 02:06:09.718957 2026] [:error] [pid 49556:tid 49639] [client 20.104.61.138:44057] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aZ86EZjk27yQt3CGcmiT2gAAAMM"]
[Thu Feb 26 02:06:10.520535 2026] [:error] [pid 49770:tid 49833] [client 20.104.61.138:43500] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aZ86Ei7xhdZV4TFeNytosgAAAIc"]
[Thu Feb 26 02:06:11.368855 2026] [:error] [pid 49555:tid 49671] [client 20.104.61.138:44139] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aZ86E9w3_NsD2xC15YbxEgAAAEo"]
[Thu Feb 26 02:06:12.367489 2026] [:error] [pid 49555:tid 49658] [client 20.104.61.138:44036] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aZ86FNw3_NsD2xC15YbxFQAAAEM"]
[Thu Feb 26 02:06:13.033868 2026] [:error] [pid 49770:tid 49831] [client 20.104.61.138:43498] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "aZ86FS7xhdZV4TFeNytovQAAAIU"]
[Thu Feb 26 02:06:14.644037 2026] [:error] [pid 49555:tid 49686] [client 20.104.61.138:43501] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "aZ86Ftw3_NsD2xC15YbxFwAAAFc"]
[Thu Feb 26 02:06:15.517610 2026] [:error] [pid 49770:tid 49850] [client 20.104.61.138:43513] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "aZ86Fy7xhdZV4TFeNytoygAAAJg"]
[Thu Feb 26 02:06:16.487623 2026] [:error] [pid 49555:tid 49682] [client 20.104.61.138:43465] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "aZ86GNw3_NsD2xC15YbxGQAAAFM"]
[Thu Feb 26 02:06:17.135350 2026] [:error] [pid 49556:tid 49646] [client 20.104.61.138:43509] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aZ86GZjk27yQt3CGcmiT3wAAAMo"]
[Thu Feb 26 02:06:17.898837 2026] [:error] [pid 49555:tid 49680] [client 20.104.61.138:43499] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aZ86Gdw3_NsD2xC15YbxHAAAAFE"]
[Thu Feb 26 02:06:18.922254 2026] [:error] [pid 49556:tid 49663] [client 20.104.61.138:44143] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aZ86Gpjk27yQt3CGcmiT4QAAANQ"]
[Thu Feb 26 02:06:19.873041 2026] [:error] [pid 49555:tid 49679] [client 20.104.61.138:43487] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aZ86G9w3_NsD2xC15YbxHgAAAFA"]
[Thu Feb 26 02:06:21.081371 2026] [:error] [pid 49556:tid 49659] [client 20.104.61.138:44157] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ86HZjk27yQt3CGcmiT5wAAANI"]
[Thu Feb 26 02:06:21.675556 2026] [:error] [pid 49556:tid 49642] [client 20.104.61.138:44112] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ86HZjk27yQt3CGcmiT6QAAAMY"]
[Thu Feb 26 02:06:22.429616 2026] [:error] [pid 49555:tid 49653] [client 20.104.61.138:44058] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ86Htw3_NsD2xC15YbxIQAAAEE"]
[Thu Feb 26 02:06:23.462439 2026] [:error] [pid 49770:tid 49831] [client 20.104.61.138:44098] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ86Hy7xhdZV4TFeNyto6QAAAIU"]
[Thu Feb 26 02:06:24.302062 2026] [:error] [pid 49770:tid 49847] [client 20.104.61.138:44116] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aZ86IC7xhdZV4TFeNyto7gAAAJU"]
[Thu Feb 26 02:06:25.205233 2026] [:error] [pid 49554:tid 49622] [client 20.104.61.138:44120] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aZ86IdtlDT3cCGsQMTc9NgAAAA0"]
[Thu Feb 26 02:06:25.915176 2026] [:error] [pid 49556:tid 49659] [client 20.104.61.138:44117] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aZ86IZjk27yQt3CGcmiT7wAAANI"]
[Thu Feb 26 02:06:26.528809 2026] [:error] [pid 49555:tid 49658] [client 20.104.61.138:44099] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aw.php"] [unique_id "aZ86Itw3_NsD2xC15YbxLQAAAEM"]
[Thu Feb 26 02:06:27.321152 2026] [:error] [pid 49770:tid 49831] [client 20.104.61.138:43494] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aZ86Iy7xhdZV4TFeNyto-AAAAIU"]
[Thu Feb 26 02:06:28.034328 2026] [:error] [pid 49770:tid 49842] [client 20.104.61.138:44121] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aZ86JC7xhdZV4TFeNyto-gAAAJA"]
[Thu Feb 26 02:06:28.816994 2026] [:error] [pid 49770:tid 49837] [client 20.104.61.138:44129] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aZ86JC7xhdZV4TFeNytpAAAAAIs"]
[Thu Feb 26 02:06:30.099876 2026] [:error] [pid 49770:tid 49842] [client 20.104.61.138:44043] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aZ86Ji7xhdZV4TFeNytpCAAAAJA"]
[Thu Feb 26 02:06:30.971335 2026] [:error] [pid 49555:tid 49658] [client 20.104.61.138:43359] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aZ86Jtw3_NsD2xC15YbxQAAAAEM"]
[Thu Feb 26 02:06:31.939683 2026] [:error] [pid 49770:tid 49846] [client 20.104.61.138:43507] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aZ86Jy7xhdZV4TFeNytpFQAAAJQ"]
[Thu Feb 26 02:06:33.145014 2026] [:error] [pid 49770:tid 49849] [client 20.104.61.138:43510] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aZ86KS7xhdZV4TFeNytpGwAAAJc"]
[Thu Feb 26 02:06:34.034779 2026] [:error] [pid 49555:tid 49662] [client 20.104.61.138:44042] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aZ86Ktw3_NsD2xC15YbxSwAAAEU"]
[Thu Feb 26 02:06:34.565336 2026] [:error] [pid 49556:tid 49639] [client 20.104.61.138:44096] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tcp.php"] [unique_id "aZ86Kpjk27yQt3CGcmiT_wAAAMM"]
[Thu Feb 26 02:06:35.278254 2026] [:error] [pid 49770:tid 49834] [client 20.104.61.138:43488] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tcp.php"] [unique_id "aZ86Ky7xhdZV4TFeNytpJwAAAIg"]
[Thu Feb 26 02:06:36.162273 2026] [:error] [pid 49554:tid 49612] [client 20.104.61.138:44101] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tcp.php"] [unique_id "aZ86LNtlDT3cCGsQMTc9PQAAAAM"]
[Thu Feb 26 02:06:43.954450 2026] [:error] [pid 49556:tid 49636] [client 20.104.61.138:44124] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aZ86M5jk27yQt3CGcmiUGAAAAMA"]
[Thu Feb 26 02:06:44.595421 2026] [:error] [pid 49770:tid 49843] [client 20.104.61.138:44049] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aZ86NC7xhdZV4TFeNytpQwAAAJE"]
[Thu Feb 26 02:06:45.316993 2026] [:error] [pid 49770:tid 49850] [client 20.104.61.138:43515] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aZ86NS7xhdZV4TFeNytpRgAAAJg"]
[Thu Feb 26 02:06:46.862105 2026] [:error] [pid 49555:tid 49675] [client 20.104.61.138:44118] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aZ86Ntw3_NsD2xC15YbxbgAAAEw"]
[Thu Feb 26 02:06:48.328696 2026] [:error] [pid 49555:tid 49683] [client 20.104.61.138:44141] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ86ONw3_NsD2xC15YbxdAAAAFQ"]
[Thu Feb 26 02:06:49.264623 2026] [:error] [pid 49556:tid 49637] [client 20.104.61.138:44073] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ86OZjk27yQt3CGcmiUGwAAAME"]
[Thu Feb 26 02:06:51.068429 2026] [:error] [pid 49770:tid 49831] [client 20.104.61.138:44037] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ86Oy7xhdZV4TFeNytpUwAAAIU"]
[Thu Feb 26 02:06:52.442121 2026] [:error] [pid 49556:tid 49661] [client 20.104.61.138:44125] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aZ86PJjk27yQt3CGcmiUHgAAANM"]
[Thu Feb 26 02:06:54.283021 2026] [:error] [pid 49556:tid 49646] [client 20.104.61.138:43473] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aZ86Ppjk27yQt3CGcmiUKgAAAMo"]
[Thu Feb 26 02:06:55.432663 2026] [:error] [pid 49555:tid 49666] [client 20.104.61.138:44126] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aZ86P9w3_NsD2xC15YbxiQAAAEc"]
[Thu Feb 26 02:06:56.105680 2026] [:error] [pid 49556:tid 49661] [client 20.104.61.138:44075] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aZ86QJjk27yQt3CGcmiULwAAANM"]
[Thu Feb 26 02:06:57.164406 2026] [:error] [pid 49555:tid 49655] [client 20.104.61.138:43332] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aZ86Qdw3_NsD2xC15YbxjgAAAEI"]
[Thu Feb 26 02:06:58.308068 2026] [:error] [pid 49770:tid 49828] [client 20.104.61.138:43518] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aZ86Qi7xhdZV4TFeNytpXgAAAII"]
[Thu Feb 26 02:06:59.561054 2026] [:error] [pid 49556:tid 49659] [client 20.104.61.138:44039] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aZ86Q5jk27yQt3CGcmiUOQAAANI"]
[Thu Feb 26 02:07:00.886170 2026] [:error] [pid 49554:tid 49633] [client 20.104.61.138:44104] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aZ86RNtlDT3cCGsQMTc9bQAAABg"]
[Thu Feb 26 02:07:01.952913 2026] [:error] [pid 49770:tid 49834] [client 20.104.61.138:43484] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aZ86RS7xhdZV4TFeNytpZwAAAIg"]
[Thu Feb 26 02:07:03.192867 2026] [:error] [pid 49770:tid 49826] [client 20.104.61.138:43354] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aZ86Ry7xhdZV4TFeNytpagAAAIA"]
[Thu Feb 26 02:07:04.173195 2026] [:error] [pid 49770:tid 49830] [client 20.104.61.138:43506] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aZ86SC7xhdZV4TFeNytpbgAAAIQ"]
[Thu Feb 26 02:07:05.256999 2026] [:error] [pid 49555:tid 49664] [client 20.104.61.138:44086] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aZ86Sdw3_NsD2xC15YbxnQAAAEY"]
[Thu Feb 26 02:07:06.503751 2026] [:error] [pid 49770:tid 49844] [client 20.104.61.138:43497] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aZ86Si7xhdZV4TFeNytpdwAAAJI"]
[Thu Feb 26 02:07:07.471557 2026] [:error] [pid 49770:tid 49836] [client 20.104.61.138:43483] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aZ86Sy7xhdZV4TFeNytpewAAAIo"]
[Thu Feb 26 02:07:08.380474 2026] [:error] [pid 49554:tid 49619] [client 20.104.61.138:44130] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aZ86TNtlDT3cCGsQMTc9cQAAAAo"]
[Thu Feb 26 02:07:09.392113 2026] [:error] [pid 49770:tid 49848] [client 20.104.61.138:43496] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aZ86TS7xhdZV4TFeNytpiAAAAJY"]
[Thu Feb 26 02:07:10.100735 2026] [:error] [pid 49770:tid 49838] [client 20.104.61.138:43492] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aZ86Ti7xhdZV4TFeNytpjgAAAIw"]
[Thu Feb 26 02:07:10.719650 2026] [:error] [pid 49770:tid 49843] [client 20.104.61.138:44138] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aZ86Ti7xhdZV4TFeNytpkAAAAJE"]
[Thu Feb 26 02:07:11.219153 2026] [:error] [pid 49556:tid 49646] [client 20.104.61.138:44084] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aZ86T5jk27yQt3CGcmiUTAAAAMo"]
[Thu Feb 26 02:07:13.036017 2026] [:error] [pid 49770:tid 49843] [client 20.104.61.138:43479] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aZ86US7xhdZV4TFeNytpoAAAAJE"]
[Thu Feb 26 02:07:13.814116 2026] [:error] [pid 49770:tid 49846] [client 20.104.61.138:44053] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aZ86US7xhdZV4TFeNytppQAAAJQ"]
[Thu Feb 26 02:07:15.356728 2026] [:error] [pid 49555:tid 49655] [client 20.104.61.138:44087] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cbrfo.php"] [unique_id "aZ86U9w3_NsD2xC15YbxqQAAAEI"]
[Thu Feb 26 02:07:16.258293 2026] [:error] [pid 49555:tid 49660] [client 20.104.61.138:44108] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aZ86VNw3_NsD2xC15YbxrQAAAEQ"]
[Thu Feb 26 02:07:17.443047 2026] [:error] [pid 49554:tid 49612] [client 20.104.61.138:44153] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aZ86VdtlDT3cCGsQMTc9dgAAAAM"]
[Thu Feb 26 02:07:18.265344 2026] [:error] [pid 49554:tid 49613] [client 20.104.61.138:44111] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aZ86VttlDT3cCGsQMTc9ewAAAAQ"]
[Thu Feb 26 02:07:19.720478 2026] [:error] [pid 49770:tid 49830] [client 20.104.61.138:44115] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inc.php"] [unique_id "aZ86Vy7xhdZV4TFeNytpvgAAAIQ"]
[Thu Feb 26 02:07:20.990482 2026] [:error] [pid 49556:tid 49657] [client 20.104.61.138:44128] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aZ86WJjk27yQt3CGcmiUWQAAANE"]
[Thu Feb 26 02:07:22.037817 2026] [:error] [pid 49556:tid 49652] [client 20.104.61.138:44092] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aZ86Wpjk27yQt3CGcmiUYQAAAM4"]
[Thu Feb 26 02:07:23.441878 2026] [:error] [pid 49770:tid 49839] [client 20.104.61.138:43511] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aZ86Wy7xhdZV4TFeNytpxwAAAI0"]
[Thu Feb 26 02:07:24.140026 2026] [:error] [pid 49555:tid 49655] [client 20.104.61.138:44122] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aZ86XNw3_NsD2xC15YbxxAAAAEI"]
[Thu Feb 26 02:07:25.139222 2026] [:error] [pid 49554:tid 49609] [client 20.104.61.138:43341] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aZ86XdtlDT3cCGsQMTc9fAAAAAA"]
[Thu Feb 26 02:07:26.102471 2026] [:error] [pid 49554:tid 49617] [client 20.104.61.138:44097] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aZ86XttlDT3cCGsQMTc9fwAAAAg"]
[Thu Feb 26 02:07:27.100778 2026] [:error] [pid 49770:tid 49848] [client 20.104.61.138:44135] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aZ86Xy7xhdZV4TFeNytp0gAAAJY"]
[Thu Feb 26 02:07:28.231475 2026] [:error] [pid 49770:tid 49827] [client 20.104.61.138:44140] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aZ86YC7xhdZV4TFeNytp1wAAAIE"]
[Thu Feb 26 02:07:29.730751 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:43504] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZ86Ydw3_NsD2xC15Ybx2QAAAEs"]
[Thu Feb 26 02:07:30.505934 2026] [:error] [pid 49556:tid 49638] [client 20.104.61.138:43486] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c99.php"] [unique_id "aZ86Ypjk27yQt3CGcmiUbgAAAMI"]
[Thu Feb 26 02:07:31.625483 2026] [:error] [pid 49770:tid 49828] [client 20.104.61.138:44033] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c99.php"] [unique_id "aZ86Yy7xhdZV4TFeNytp3gAAAII"]
[Thu Feb 26 02:07:32.749159 2026] [:error] [pid 49556:tid 49643] [client 20.104.61.138:44055] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c99.php"] [unique_id "aZ86ZJjk27yQt3CGcmiUdAAAAMc"]
[Thu Feb 26 02:07:33.807559 2026] [:error] [pid 49554:tid 49626] [client 20.104.61.138:44151] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c99.php"] [unique_id "aZ86ZdtlDT3cCGsQMTc9hAAAABE"]
[Thu Feb 26 02:07:34.633650 2026] [:error] [pid 49770:tid 49840] [client 20.104.61.138:44131] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aZ86Zi7xhdZV4TFeNytp5QAAAI4"]
[Thu Feb 26 02:07:35.544803 2026] [:error] [pid 49556:tid 49667] [client 20.104.61.138:44056] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aZ86Z5jk27yQt3CGcmiUeAAAANY"]
[Thu Feb 26 02:07:36.569959 2026] [:error] [pid 49556:tid 49636] [client 20.104.61.138:44066] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aZ86aJjk27yQt3CGcmiUfAAAAMA"]
[Thu Feb 26 02:07:37.258480 2026] [:error] [pid 49770:tid 49838] [client 20.104.61.138:44149] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aZ86aS7xhdZV4TFeNytp7AAAAIw"]
[Thu Feb 26 02:07:38.503442 2026] [:error] [pid 49770:tid 49839] [client 20.104.61.138:44132] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aZ86ai7xhdZV4TFeNytp8AAAAI0"]
[Thu Feb 26 02:07:39.878953 2026] [:error] [pid 49555:tid 49666] [client 20.104.61.138:43458] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aZ86a9w3_NsD2xC15Ybx-wAAAEc"]
[Thu Feb 26 02:07:40.909403 2026] [:error] [pid 49770:tid 49841] [client 20.104.61.138:44123] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aZ86bC7xhdZV4TFeNytp9wAAAI8"]
[Thu Feb 26 02:07:42.168730 2026] [:error] [pid 49555:tid 49680] [client 20.104.61.138:44079] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aZ86btw3_NsD2xC15YbyAAAAAFE"]
[Thu Feb 26 02:07:42.864811 2026] [:error] [pid 49555:tid 49683] [client 20.104.61.138:44040] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aZ86btw3_NsD2xC15YbyAgAAAFQ"]
[Thu Feb 26 02:07:52.792545 2026] [:error] [pid 49554:tid 49619] [client 20.104.61.138:44085] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mon.php"] [unique_id "aZ86eNtlDT3cCGsQMTc9sQAAAAo"]
[Thu Feb 26 02:07:53.782923 2026] [:error] [pid 49555:tid 49666] [client 20.104.61.138:43462] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mon.php"] [unique_id "aZ86edw3_NsD2xC15YbyLAAAAEc"]
[Thu Feb 26 02:07:55.002640 2026] [:error] [pid 49556:tid 49649] [client 20.104.61.138:44061] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mon.php"] [unique_id "aZ86e5jk27yQt3CGcmiUkwAAAMw"]
[Thu Feb 26 02:07:56.057936 2026] [:error] [pid 49555:tid 49681] [client 20.104.61.138:44074] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mon.php"] [unique_id "aZ86fNw3_NsD2xC15YbyMgAAAFI"]
[Thu Feb 26 02:07:56.868727 2026] [:error] [pid 49554:tid 49615] [client 20.104.61.138:44046] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aZ86fNtlDT3cCGsQMTc9uwAAAAY"]
[Thu Feb 26 02:07:57.924186 2026] [:error] [pid 49556:tid 49637] [client 20.104.61.138:43353] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aZ86fZjk27yQt3CGcmiUlgAAAME"]
[Thu Feb 26 02:07:58.615135 2026] [:error] [pid 49556:tid 49654] [client 20.104.61.138:44048] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aZ86fpjk27yQt3CGcmiUmAAAAM8"]
[Thu Feb 26 02:07:59.273636 2026] [:error] [pid 49556:tid 49641] [client 20.104.61.138:44078] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aZ86f5jk27yQt3CGcmiUmgAAAMU"]
[Thu Feb 26 02:08:00.012177 2026] [:error] [pid 49556:tid 49665] [client 20.104.61.138:44068] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aZ86gJjk27yQt3CGcmiUmwAAANU"]
[Thu Feb 26 02:08:01.105489 2026] [:error] [pid 49555:tid 49666] [client 20.104.61.138:44047] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/product.php"] [unique_id "aZ86gdw3_NsD2xC15YbyOgAAAEc"]
[Thu Feb 26 02:08:01.649216 2026] [:error] [pid 49556:tid 49650] [client 20.104.61.138:43379] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aZ86gZjk27yQt3CGcmiUngAAAM0"]
[Thu Feb 26 02:08:03.069087 2026] [:error] [pid 49770:tid 49843] [client 20.104.61.138:44038] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aZ86gy7xhdZV4TFeNytqAQAAAJE"]
[Thu Feb 26 02:08:04.067144 2026] [:error] [pid 49770:tid 49831] [client 20.104.61.138:44127] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aZ86hC7xhdZV4TFeNytqAwAAAIU"]
[Thu Feb 26 02:08:05.247293 2026] [:error] [pid 49554:tid 49626] [client 20.104.61.138:44107] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aZ86hdtlDT3cCGsQMTc9xwAAABE"]
[Thu Feb 26 02:08:06.083166 2026] [:error] [pid 49770:tid 49842] [client 20.104.61.138:44148] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-setting.php"] [unique_id "aZ86hi7xhdZV4TFeNytqBwAAAJA"]
[Thu Feb 26 02:08:06.820324 2026] [:error] [pid 49770:tid 49828] [client 20.104.61.138:43336] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-setting.php"] [unique_id "aZ86hi7xhdZV4TFeNytqCAAAAII"]
[Thu Feb 26 02:08:07.941880 2026] [:error] [pid 49770:tid 49830] [client 20.104.61.138:44063] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-setting.php"] [unique_id "aZ86hy7xhdZV4TFeNytqDgAAAIQ"]
[Thu Feb 26 02:08:08.923632 2026] [:error] [pid 49770:tid 49847] [client 20.104.61.138:44050] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-setting.php"] [unique_id "aZ86iC7xhdZV4TFeNytqEgAAAJU"]
[Thu Feb 26 02:08:10.298570 2026] [:error] [pid 49556:tid 49647] [client 20.104.61.138:44119] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aZ86ipjk27yQt3CGcmiUogAAAMs"]
[Thu Feb 26 02:08:10.925074 2026] [:error] [pid 49556:tid 49646] [client 20.104.61.138:44147] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aZ86ipjk27yQt3CGcmiUpAAAAMo"]
[Thu Feb 26 02:08:12.239062 2026] [:error] [pid 49555:tid 49684] [client 20.104.61.138:44062] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aZ86jNw3_NsD2xC15YbyUAAAAFU"]
[Thu Feb 26 02:08:13.520857 2026] [:error] [pid 49770:tid 49847] [client 20.104.61.138:44064] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aZ86jS7xhdZV4TFeNytqGAAAAJU"]
[Thu Feb 26 02:08:14.218457 2026] [:error] [pid 49770:tid 49837] [client 20.104.61.138:44034] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aZ86ji7xhdZV4TFeNytqGQAAAIs"]
[Thu Feb 26 02:08:15.153558 2026] [:error] [pid 49555:tid 49653] [client 20.104.61.138:44142] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aZ86j9w3_NsD2xC15YbyXQAAAEE"]
[Thu Feb 26 02:08:16.051797 2026] [:error] [pid 49770:tid 49833] [client 20.104.61.138:44041] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aZ86kC7xhdZV4TFeNytqGgAAAIc"]
[Thu Feb 26 02:08:17.032798 2026] [:error] [pid 49555:tid 49670] [client 20.104.61.138:44114] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aZ86kdw3_NsD2xC15YbyaAAAAEk"]
[Thu Feb 26 02:08:18.396979 2026] [:error] [pid 49556:tid 49645] [client 20.104.61.138:44069] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aZ86kpjk27yQt3CGcmiUtQAAAMk"]
[Thu Feb 26 02:08:21.810157 2026] [:error] [pid 49770:tid 49849] [client 20.104.61.138:44133] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aZ86lS7xhdZV4TFeNytqJQAAAJc"]
[Thu Feb 26 02:08:22.376610 2026] [:error] [pid 49554:tid 49621] [client 20.104.61.138:44076] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aZ86lttlDT3cCGsQMTc93wAAAAw"]
[Thu Feb 26 02:08:24.576554 2026] [:error] [pid 49555:tid 49655] [client 20.104.61.138:44146] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aZ86mNw3_NsD2xC15YbyfAAAAEI"]
[Thu Feb 26 02:08:26.038679 2026] [:error] [pid 49555:tid 49683] [client 20.104.61.138:43331] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/term.php"] [unique_id "aZ86mtw3_NsD2xC15YbyhAAAAFQ"]
[Thu Feb 26 02:08:27.129355 2026] [:error] [pid 49556:tid 49665] [client 20.104.61.138:43471] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/term.php"] [unique_id "aZ86m5jk27yQt3CGcmiUwAAAANU"]
[Thu Feb 26 02:08:28.372923 2026] [:error] [pid 49770:tid 49838] [client 20.104.61.138:43975] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/term.php"] [unique_id "aZ86nC7xhdZV4TFeNytqOgAAAIw"]
[Thu Feb 26 02:08:29.914042 2026] [:error] [pid 49770:tid 49834] [client 20.104.61.138:43335] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/term.php"] [unique_id "aZ86nS7xhdZV4TFeNytqQgAAAIg"]
[Thu Feb 26 02:08:31.315421 2026] [:error] [pid 49770:tid 49833] [client 20.104.61.138:44060] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aZ86ny7xhdZV4TFeNytqRAAAAIc"]
[Thu Feb 26 02:08:32.378196 2026] [:error] [pid 49556:tid 49657] [client 20.104.61.138:43495] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aZ86oJjk27yQt3CGcmiUxwAAANE"]
[Thu Feb 26 02:08:32.974370 2026] [:error] [pid 49770:tid 49832] [client 20.104.61.138:44156] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aZ86oC7xhdZV4TFeNytqSQAAAIY"]
[Thu Feb 26 02:08:33.570714 2026] [:error] [pid 49770:tid 49840] [client 20.104.61.138:44032] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aZ86oS7xhdZV4TFeNytqTQAAAI4"]
[Thu Feb 26 02:08:34.894119 2026] [:error] [pid 49770:tid 49836] [client 20.104.61.138:43372] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webdb.php"] [unique_id "aZ86oi7xhdZV4TFeNytqWgAAAIo"]
[Thu Feb 26 02:08:35.724816 2026] [:error] [pid 49555:tid 49677] [client 20.104.61.138:43980] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webdb.php"] [unique_id "aZ86o9w3_NsD2xC15YbypAAAAE4"]
[Thu Feb 26 02:08:36.371188 2026] [:error] [pid 49555:tid 49686] [client 20.104.61.138:44059] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webdb.php"] [unique_id "aZ86pNw3_NsD2xC15YbypgAAAFc"]
[Thu Feb 26 02:08:37.053382 2026] [:error] [pid 49554:tid 49628] [client 20.104.206.236:34797] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123.php"] [unique_id "aZ86pdtlDT3cCGsQMTc9_gAAABM"]
[Thu Feb 26 02:08:37.203568 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:43485] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webdb.php"] [unique_id "aZ86pdw3_NsD2xC15YbyqAAAAEs"]
[Thu Feb 26 02:08:37.664060 2026] [:error] [pid 49555:tid 49676] [client 20.104.206.236:34784] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123.php"] [unique_id "aZ86pdw3_NsD2xC15YbyqwAAAE0"]
[Thu Feb 26 02:08:38.349013 2026] [:error] [pid 49770:tid 49845] [client 20.104.61.138:44054] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aZ86pi7xhdZV4TFeNytqcQAAAJM"]
[Thu Feb 26 02:08:38.423537 2026] [:error] [pid 49770:tid 49832] [client 20.104.206.236:34787] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123.php"] [unique_id "aZ86pi7xhdZV4TFeNytqcgAAAIY"]
[Thu Feb 26 02:08:39.145796 2026] [:error] [pid 49770:tid 49846] [client 20.104.61.138:44150] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aZ86py7xhdZV4TFeNytqdgAAAJQ"]
[Thu Feb 26 02:08:39.351070 2026] [:error] [pid 49770:tid 49833] [client 20.104.206.236:34703] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123.php"] [unique_id "aZ86py7xhdZV4TFeNytqeAAAAIc"]
[Thu Feb 26 02:08:40.025359 2026] [:error] [pid 49770:tid 49842] [client 20.104.206.236:34776] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aZ86qC7xhdZV4TFeNytqfgAAAJA"]
[Thu Feb 26 02:08:40.062188 2026] [:error] [pid 49770:tid 49848] [client 20.104.61.138:44091] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aZ86qC7xhdZV4TFeNytqfwAAAJY"]
[Thu Feb 26 02:08:40.967429 2026] [:error] [pid 49770:tid 49846] [client 20.104.61.138:43352] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aZ86qC7xhdZV4TFeNytqgwAAAJQ"]
[Thu Feb 26 02:08:41.109649 2026] [:error] [pid 49554:tid 49624] [client 20.104.206.236:34779] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aZ86qdtlDT3cCGsQMTc-AAAAAA8"]
[Thu Feb 26 02:08:41.924706 2026] [:error] [pid 49555:tid 49675] [client 20.104.61.138:44067] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZ86qdw3_NsD2xC15YbyuAAAAEw"]
[Thu Feb 26 02:08:42.125092 2026] [:error] [pid 49554:tid 49615] [client 20.104.206.236:34693] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aZ86qttlDT3cCGsQMTc-AwAAAAY"]
[Thu Feb 26 02:08:42.702925 2026] [:error] [pid 49770:tid 49840] [client 20.104.206.236:34777] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aZ86qi7xhdZV4TFeNytqjAAAAI4"]
[Thu Feb 26 02:08:42.704348 2026] [:error] [pid 49770:tid 49827] [client 20.104.61.138:43381] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZ86qi7xhdZV4TFeNytqjQAAAIE"]
[Thu Feb 26 02:08:43.693497 2026] [:error] [pid 49770:tid 49838] [client 20.104.206.236:34800] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aZ86qy7xhdZV4TFeNytqkQAAAIw"]
[Thu Feb 26 02:08:44.286067 2026] [:error] [pid 49770:tid 49837] [client 20.104.206.236:34756] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aZ86rC7xhdZV4TFeNytqlAAAAIs"]
[Thu Feb 26 02:08:44.789136 2026] [:error] [pid 49555:tid 49658] [client 20.104.61.138:43343] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZ86rNw3_NsD2xC15YbyvwAAAEM"]
[Thu Feb 26 02:08:45.130629 2026] [:error] [pid 49555:tid 49685] [client 20.104.206.236:34755] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aZ86rdw3_NsD2xC15YbywgAAAFY"]
[Thu Feb 26 02:08:45.739964 2026] [:error] [pid 49770:tid 49836] [client 20.104.61.138:44070] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZ86rS7xhdZV4TFeNytqlwAAAIo"]
[Thu Feb 26 02:08:46.113231 2026] [:error] [pid 49770:tid 49843] [client 20.104.206.236:34767] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aZ86ri7xhdZV4TFeNytqmgAAAJE"]
[Thu Feb 26 02:08:46.300682 2026] [:error] [pid 49554:tid 49617] [client 20.104.61.138:43383] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aZ86rttlDT3cCGsQMTc-BgAAAAg"]
[Thu Feb 26 02:08:46.923610 2026] [:error] [pid 49770:tid 49838] [client 20.104.206.236:34754] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aZ86ri7xhdZV4TFeNytqngAAAIw"]
[Thu Feb 26 02:08:47.600568 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:43366] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aZ86r9w3_NsD2xC15YbyxQAAAEs"]
[Thu Feb 26 02:08:48.182115 2026] [:error] [pid 49556:tid 49663] [client 20.104.206.236:34792] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aZ86sJjk27yQt3CGcmiU4QAAANQ"]
[Thu Feb 26 02:08:48.286388 2026] [:error] [pid 49555:tid 49676] [client 20.104.61.138:43348] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aZ86sNw3_NsD2xC15YbyxwAAAE0"]
[Thu Feb 26 02:08:49.300187 2026] [:error] [pid 49555:tid 49664] [client 20.104.61.138:43334] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aZ86sdw3_NsD2xC15YbyyQAAAEY"]
[Thu Feb 26 02:08:49.823977 2026] [:error] [pid 49554:tid 49618] [client 20.104.206.236:34761] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aZ86sdtlDT3cCGsQMTc-CAAAAAk"]
[Thu Feb 26 02:08:49.966881 2026] [:error] [pid 49554:tid 49625] [client 20.104.61.138:44077] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mass.php"] [unique_id "aZ86sdtlDT3cCGsQMTc-CQAAABA"]
[Thu Feb 26 02:08:50.494871 2026] [:error] [pid 49555:tid 49683] [client 20.104.61.138:43345] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mass.php"] [unique_id "aZ86stw3_NsD2xC15YbyzQAAAFQ"]
[Thu Feb 26 02:08:51.129082 2026] [:error] [pid 49554:tid 49628] [client 20.104.206.236:34688] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aZ86s9tlDT3cCGsQMTc-CwAAABM"]
[Thu Feb 26 02:08:51.874407 2026] [:error] [pid 49554:tid 49627] [client 20.104.206.236:34804] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aZ86s9tlDT3cCGsQMTc-DQAAABI"]
[Thu Feb 26 02:08:51.911622 2026] [:error] [pid 49554:tid 49612] [client 20.104.61.138:44159] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mass.php"] [unique_id "aZ86s9tlDT3cCGsQMTc-DgAAAAM"]
[Thu Feb 26 02:08:52.821616 2026] [:error] [pid 49555:tid 49662] [client 20.104.206.236:34694] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aZ86tNw3_NsD2xC15YbyzwAAAEU"]
[Thu Feb 26 02:08:53.543781 2026] [:error] [pid 49555:tid 49655] [client 20.104.206.236:34803] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aZ86tdw3_NsD2xC15Yby0QAAAEI"]
[Thu Feb 26 02:08:54.407705 2026] [:error] [pid 49770:tid 49828] [client 20.104.206.236:34726] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aZ86ti7xhdZV4TFeNytqsQAAAII"]
[Thu Feb 26 02:08:55.310949 2026] [:error] [pid 49554:tid 49633] [client 20.104.61.138:43461] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ86t9tlDT3cCGsQMTc-EwAAABg"]
[Thu Feb 26 02:08:55.501198 2026] [:error] [pid 49770:tid 49849] [client 20.104.206.236:34699] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aZ86ty7xhdZV4TFeNytqugAAAJc"]
[Thu Feb 26 02:08:56.180825 2026] [:error] [pid 49770:tid 49830] [client 20.104.61.138:43374] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/include.php"] [unique_id "aZ86uC7xhdZV4TFeNytqvgAAAIQ"]
[Thu Feb 26 02:08:57.692337 2026] [:error] [pid 49555:tid 49686] [client 20.104.206.236:34798] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aZ86udw3_NsD2xC15Yby0gAAAFc"]
[Thu Feb 26 02:08:57.697915 2026] [:error] [pid 49770:tid 49835] [client 20.104.61.138:43378] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZ86uS7xhdZV4TFeNytqyAAAAIk"]
[Thu Feb 26 02:08:59.232150 2026] [:error] [pid 49555:tid 49678] [client 20.104.206.236:34765] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aZ86u9w3_NsD2xC15Yby1gAAAE8"]
[Thu Feb 26 02:09:00.805118 2026] [:error] [pid 49554:tid 49632] [client 20.104.206.236:34789] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aZ86vNtlDT3cCGsQMTc-GwAAABc"]
[Thu Feb 26 02:09:01.213223 2026] [:error] [pid 49554:tid 49628] [client 20.104.61.138:43363] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZ86vdtlDT3cCGsQMTc-HAAAABM"]
[Thu Feb 26 02:09:01.912039 2026] [:error] [pid 49770:tid 49838] [client 20.104.61.138:44083] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZ86vS7xhdZV4TFeNytq1QAAAIw"]
[Thu Feb 26 02:09:02.917145 2026] [:error] [pid 49770:tid 49830] [client 20.104.61.138:43385] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZ86vi7xhdZV4TFeNytq2AAAAIQ"]
[Thu Feb 26 02:09:03.357966 2026] [:error] [pid 49555:tid 49662] [client 20.104.206.236:34710] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aZ86v9w3_NsD2xC15Yby3AAAAEU"]
[Thu Feb 26 02:09:03.503477 2026] [:error] [pid 49555:tid 49653] [client 20.104.61.138:43349] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aZ86v9w3_NsD2xC15Yby3QAAAEE"]
[Thu Feb 26 02:09:04.202604 2026] [:error] [pid 49555:tid 49687] [client 20.104.61.138:44035] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kill.php"] [unique_id "aZ86wNw3_NsD2xC15Yby4AAAAFg"]
[Thu Feb 26 02:09:04.715239 2026] [:error] [pid 49555:tid 49686] [client 20.104.206.236:34757] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aZ86wNw3_NsD2xC15Yby4gAAAFc"]
[Thu Feb 26 02:09:05.187319 2026] [:error] [pid 49556:tid 49659] [client 20.104.61.138:43333] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kill.php"] [unique_id "aZ86wZjk27yQt3CGcmiU6wAAANI"]
[Thu Feb 26 02:09:05.749572 2026] [:error] [pid 49556:tid 49654] [client 20.104.61.138:43466] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kill.php"] [unique_id "aZ86wZjk27yQt3CGcmiU7QAAAM8"]
[Thu Feb 26 02:09:05.815906 2026] [:error] [pid 49554:tid 49626] [client 20.104.206.236:34783] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aZ86wdtlDT3cCGsQMTc-HQAAABE"]
[Thu Feb 26 02:09:06.345286 2026] [:error] [pid 49556:tid 49656] [client 20.104.61.138:43974] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kill.php"] [unique_id "aZ86wpjk27yQt3CGcmiU7gAAANA"]
[Thu Feb 26 02:09:06.874871 2026] [:error] [pid 49554:tid 49612] [client 20.104.61.138:43370] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/wp-login.php"] [unique_id "aZ86wttlDT3cCGsQMTc-HwAAAAM"]
[Thu Feb 26 02:09:07.600855 2026] [:error] [pid 49770:tid 49834] [client 20.104.61.138:43386] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aZ86wy7xhdZV4TFeNytq5gAAAIg"]
[Thu Feb 26 02:09:08.116454 2026] [:error] [pid 49770:tid 49830] [client 20.104.206.236:34805] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aZ86xC7xhdZV4TFeNytq6AAAAIQ"]
[Thu Feb 26 02:09:08.596929 2026] [:error] [pid 49770:tid 49848] [client 20.104.61.138:43329] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aZ86xC7xhdZV4TFeNytq6gAAAJY"]
[Thu Feb 26 02:09:09.293898 2026] [:error] [pid 49770:tid 49837] [client 20.104.61.138:43391] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aZ86xS7xhdZV4TFeNytq7QAAAIs"]
[Thu Feb 26 02:09:10.461496 2026] [:error] [pid 49770:tid 49831] [client 20.104.61.138:44155] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aZ86xi7xhdZV4TFeNytq8QAAAIU"]
[Thu Feb 26 02:09:11.032995 2026] [:error] [pid 49555:tid 49671] [client 20.104.61.138:43346] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/lsd.php"] [unique_id "aZ86x9w3_NsD2xC15Yby7QAAAEo"]
[Thu Feb 26 02:09:11.346495 2026] [:error] [pid 49770:tid 49829] [client 20.104.206.236:34736] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aZ86xy7xhdZV4TFeNytq9QAAAIM"]
[Thu Feb 26 02:09:11.958951 2026] [:error] [pid 49770:tid 49848] [client 20.104.61.138:43356] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/lsd.php"] [unique_id "aZ86xy7xhdZV4TFeNytq9wAAAJY"]
[Thu Feb 26 02:09:13.038605 2026] [:error] [pid 49770:tid 49843] [client 20.104.206.236:34731] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aZ86yS7xhdZV4TFeNytq_wAAAJE"]
[Thu Feb 26 02:09:13.199079 2026] [:error] [pid 49770:tid 49849] [client 20.104.61.138:44044] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/lsd.php"] [unique_id "aZ86yS7xhdZV4TFeNytrAAAAAJc"]
[Thu Feb 26 02:09:13.819593 2026] [:error] [pid 49554:tid 49623] [client 20.104.61.138:44137] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/lsd.php"] [unique_id "aZ86ydtlDT3cCGsQMTc-JQAAAA4"]
[Thu Feb 26 02:09:14.000979 2026] [:error] [pid 49770:tid 49829] [client 20.104.206.236:34806] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aZ86yS7xhdZV4TFeNytrBQAAAIM"]
[Thu Feb 26 02:09:14.306199 2026] [:error] [pid 49555:tid 49658] [client 20.104.61.138:44008] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/text.php"] [unique_id "aZ86ytw3_NsD2xC15Yby8QAAAEM"]
[Thu Feb 26 02:09:14.940331 2026] [:error] [pid 49556:tid 49650] [client 20.104.61.138:43338] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/text.php"] [unique_id "aZ86ypjk27yQt3CGcmiU_gAAAM0"]
[Thu Feb 26 02:09:14.994673 2026] [:error] [pid 49555:tid 49668] [client 20.104.206.236:34762] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aZ86ytw3_NsD2xC15Yby8wAAAEg"]
[Thu Feb 26 02:09:15.454099 2026] [:error] [pid 49770:tid 49833] [client 20.104.61.138:43385] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/text.php"] [unique_id "aZ86yy7xhdZV4TFeNytrCwAAAIc"]
[Thu Feb 26 02:09:16.107171 2026] [:error] [pid 49556:tid 49663] [client 20.104.61.138:44022] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/text.php"] [unique_id "aZ86zJjk27yQt3CGcmiVAgAAANQ"]
[Thu Feb 26 02:09:16.666596 2026] [:error] [pid 49555:tid 49684] [client 20.104.61.138:44000] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aZ86zNw3_NsD2xC15Yby9QAAAFU"]
[Thu Feb 26 02:09:17.056528 2026] [:error] [pid 49770:tid 49832] [client 20.104.206.236:34815] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aZ86zS7xhdZV4TFeNytrEAAAAIY"]
[Thu Feb 26 02:09:17.196528 2026] [:error] [pid 49770:tid 49834] [client 20.104.61.138:43344] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aZ86zS7xhdZV4TFeNytrEQAAAIg"]
[Thu Feb 26 02:09:17.567747 2026] [:error] [pid 49770:tid 49836] [client 20.104.206.236:34772] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aZ86zS7xhdZV4TFeNytrFAAAAIo"]
[Thu Feb 26 02:09:17.913943 2026] [:error] [pid 49770:tid 49829] [client 20.104.61.138:44081] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aZ86zS7xhdZV4TFeNytrGAAAAIM"]
[Thu Feb 26 02:09:18.365570 2026] [:error] [pid 49554:tid 49628] [client 20.104.206.236:34700] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aZ86zttlDT3cCGsQMTc-KQAAABM"]
[Thu Feb 26 02:09:18.596063 2026] [:error] [pid 49555:tid 49651] [client 20.104.61.138:44090] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aZ86ztw3_NsD2xC15Yby-QAAAEA"]
[Thu Feb 26 02:09:19.235968 2026] [:error] [pid 49554:tid 49612] [client 20.104.61.138:44095] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aZ86z9tlDT3cCGsQMTc-KwAAAAM"]
[Thu Feb 26 02:09:19.430980 2026] [:error] [pid 49556:tid 49643] [client 20.104.206.236:34807] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aZ86z5jk27yQt3CGcmiVDQAAAMc"]
[Thu Feb 26 02:09:19.993412 2026] [:error] [pid 49770:tid 49826] [client 20.104.61.138:44094] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aZ86zy7xhdZV4TFeNytrGwAAAIA"]
[Thu Feb 26 02:09:20.242880 2026] [:error] [pid 49555:tid 49687] [client 20.104.206.236:34778] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZ860Nw3_NsD2xC15Yby_gAAAFg"]
[Thu Feb 26 02:09:20.745329 2026] [:error] [pid 49770:tid 49845] [client 20.104.61.138:43371] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aZ860C7xhdZV4TFeNytrIAAAAJM"]
[Thu Feb 26 02:09:21.608670 2026] [:error] [pid 49770:tid 49837] [client 20.104.206.236:34808] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZ860S7xhdZV4TFeNytrIwAAAIs"]
[Thu Feb 26 02:09:21.738689 2026] [:error] [pid 49555:tid 49679] [client 20.104.61.138:44100] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aZ860dw3_NsD2xC15YbzAQAAAFA"]
[Thu Feb 26 02:09:22.442203 2026] [:error] [pid 49770:tid 49844] [client 20.104.61.138:43340] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZ860i7xhdZV4TFeNytrJAAAAJI"]
[Thu Feb 26 02:09:22.668707 2026] [:error] [pid 49770:tid 49831] [client 20.104.206.236:34691] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZ860i7xhdZV4TFeNytrJwAAAIU"]
[Thu Feb 26 02:09:23.632120 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:44021] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZ8609w3_NsD2xC15YbzBgAAAEs"]
[Thu Feb 26 02:09:23.725953 2026] [:error] [pid 49555:tid 49682] [client 20.104.206.236:34692] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZ8609w3_NsD2xC15YbzBwAAAFM"]
[Thu Feb 26 02:09:24.607308 2026] [:error] [pid 49555:tid 49687] [client 20.104.61.138:44065] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZ861Nw3_NsD2xC15YbzCQAAAFg"]
[Thu Feb 26 02:09:25.109336 2026] [:error] [pid 49554:tid 49624] [client 20.104.206.236:34689] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aZ861dtlDT3cCGsQMTc-LQAAAA8"]
[Thu Feb 26 02:09:25.688024 2026] [:error] [pid 49556:tid 49646] [client 20.104.61.138:44072] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aZ861Zjk27yQt3CGcmiVHwAAAMo"]
[Thu Feb 26 02:09:25.828942 2026] [:error] [pid 49556:tid 49645] [client 20.104.206.236:34706] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aZ861Zjk27yQt3CGcmiVIQAAAMk"]
[Thu Feb 26 02:09:26.173928 2026] [:error] [pid 49556:tid 49661] [client 20.104.61.138:43375] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aZ861pjk27yQt3CGcmiVIgAAANM"]
[Thu Feb 26 02:09:26.507992 2026] [:error] [pid 49556:tid 49650] [client 20.104.206.236:34725] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aZ861pjk27yQt3CGcmiVJgAAAM0"]
[Thu Feb 26 02:09:27.126598 2026] [:error] [pid 49556:tid 49642] [client 20.104.61.138:43999] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aZ8615jk27yQt3CGcmiVLgAAAMY"]
[Thu Feb 26 02:09:27.273871 2026] [:error] [pid 49556:tid 49649] [client 20.104.206.236:34734] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aZ8615jk27yQt3CGcmiVMQAAAMw"]
[Thu Feb 26 02:09:27.768115 2026] [:error] [pid 49556:tid 49665] [client 20.104.61.138:44145] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aZ8615jk27yQt3CGcmiVNAAAANU"]
[Thu Feb 26 02:09:27.883728 2026] [:error] [pid 49770:tid 49845] [client 20.104.206.236:34714] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aZ861y7xhdZV4TFeNytrKwAAAJM"]
[Thu Feb 26 02:09:28.506534 2026] [:error] [pid 49770:tid 49843] [client 20.104.61.138:43361] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aZ862C7xhdZV4TFeNytrLgAAAJE"]
[Thu Feb 26 02:09:28.878580 2026] [:error] [pid 49555:tid 49681] [client 20.104.206.236:34764] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aZ862Nw3_NsD2xC15YbzEAAAAFI"]
[Thu Feb 26 02:09:29.142936 2026] [:error] [pid 49555:tid 49682] [client 20.104.61.138:43342] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZ862dw3_NsD2xC15YbzEgAAAFM"]
[Thu Feb 26 02:09:30.315224 2026] [:error] [pid 49555:tid 49655] [client 20.104.61.138:43373] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aZ862tw3_NsD2xC15YbzGQAAAEI"]
[Thu Feb 26 02:09:30.447230 2026] [:error] [pid 49555:tid 49679] [client 20.104.206.236:34763] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aZ862tw3_NsD2xC15YbzGwAAAFA"]
[Thu Feb 26 02:09:30.825004 2026] [:error] [pid 49770:tid 49831] [client 20.104.61.138:43990] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aZ862i7xhdZV4TFeNytrMgAAAIU"]
[Thu Feb 26 02:09:31.549017 2026] [:error] [pid 49556:tid 49647] [client 20.104.61.138:43489] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aZ8625jk27yQt3CGcmiVOwAAAMs"]
[Thu Feb 26 02:09:31.739346 2026] [:error] [pid 49770:tid 49830] [client 20.104.206.236:34701] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aZ862y7xhdZV4TFeNytrNAAAAIQ"]
[Thu Feb 26 02:09:32.641586 2026] [:error] [pid 49770:tid 49850] [client 20.104.61.138:43924] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/123.php"] [unique_id "aZ863C7xhdZV4TFeNytrOAAAAJg"]
[Thu Feb 26 02:09:32.661348 2026] [:error] [pid 49770:tid 49845] [client 20.104.206.236:34788] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ863C7xhdZV4TFeNytrOQAAAJM"]
[Thu Feb 26 02:09:33.583006 2026] [:error] [pid 49556:tid 49638] [client 20.104.61.138:44088] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options-discussion.php"] [unique_id "aZ863Zjk27yQt3CGcmiVPgAAAMI"]
[Thu Feb 26 02:09:34.148014 2026] [:error] [pid 49556:tid 49646] [client 20.104.61.138:43913] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options-discussion.php"] [unique_id "aZ863pjk27yQt3CGcmiVQAAAAMo"]
[Thu Feb 26 02:09:34.378917 2026] [:error] [pid 49555:tid 49660] [client 20.104.206.236:34801] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ863tw3_NsD2xC15YbzLwAAAEQ"]
[Thu Feb 26 02:09:35.055615 2026] [:error] [pid 49556:tid 49637] [client 20.104.61.138:44051] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options-discussion.php"] [unique_id "aZ8635jk27yQt3CGcmiVQQAAAME"]
[Thu Feb 26 02:09:35.425991 2026] [:error] [pid 49556:tid 49649] [client 20.104.206.236:34705] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ8635jk27yQt3CGcmiVRAAAAMw"]
[Thu Feb 26 02:09:36.400652 2026] [:error] [pid 49770:tid 49844] [client 20.104.61.138:43973] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options-discussion.php"] [unique_id "aZ864C7xhdZV4TFeNytrPwAAAJI"]
[Thu Feb 26 02:09:37.268092 2026] [:error] [pid 49770:tid 49840] [client 20.104.61.138:44080] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aZ864S7xhdZV4TFeNytrQgAAAI4"]
[Thu Feb 26 02:09:37.919874 2026] [:error] [pid 49555:tid 49687] [client 20.104.61.138:43477] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aZ864dw3_NsD2xC15YbzNgAAAFg"]
[Thu Feb 26 02:09:38.802406 2026] [:error] [pid 49555:tid 49655] [client 20.104.61.138:43986] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aZ864tw3_NsD2xC15YbzOQAAAEI"]
[Thu Feb 26 02:09:39.317405 2026] [:error] [pid 49770:tid 49838] [client 20.104.61.138:44026] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aZ864y7xhdZV4TFeNytrSAAAAIw"]
[Thu Feb 26 02:09:39.957536 2026] [:error] [pid 49556:tid 49667] [client 20.104.61.138:43355] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aZ8645jk27yQt3CGcmiVSwAAANY"]
[Thu Feb 26 02:09:40.928521 2026] [:error] [pid 49555:tid 49664] [client 20.104.61.138:43994] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aZ865Nw3_NsD2xC15YbzQQAAAEY"]
[Thu Feb 26 02:09:41.586203 2026] [:error] [pid 49555:tid 49682] [client 20.104.61.138:43490] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aZ865dw3_NsD2xC15YbzRQAAAFM"]
[Thu Feb 26 02:09:42.161269 2026] [:error] [pid 49770:tid 49846] [client 20.104.61.138:43337] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aZ865i7xhdZV4TFeNytrVQAAAJQ"]
[Thu Feb 26 02:09:42.862652 2026] [:error] [pid 49770:tid 49828] [client 20.104.61.138:43977] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "aZ865i7xhdZV4TFeNytrWQAAAII"]
[Thu Feb 26 02:09:43.497963 2026] [:error] [pid 49554:tid 49622] [client 20.104.61.138:43969] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "aZ8659tlDT3cCGsQMTc-TwAAAA0"]
[Thu Feb 26 02:09:44.022784 2026] [:error] [pid 49770:tid 49845] [client 20.104.206.236:34715] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aZ866C7xhdZV4TFeNytrXQAAAJM"]
[Thu Feb 26 02:09:44.238437 2026] [:error] [pid 49554:tid 49614] [client 20.104.61.138:43475] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "aZ866NtlDT3cCGsQMTc-UwAAAAU"]
[Thu Feb 26 02:09:45.027195 2026] [:error] [pid 49556:tid 49643] [client 20.104.61.138:43905] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "aZ866Zjk27yQt3CGcmiVWQAAAMc"]
[Thu Feb 26 02:09:45.163198 2026] [:error] [pid 49770:tid 49847] [client 20.104.206.236:34793] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aZ866S7xhdZV4TFeNytrXwAAAJU"]
[Thu Feb 26 02:09:45.601001 2026] [:error] [pid 49554:tid 49621] [client 20.104.61.138:43983] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZ866dtlDT3cCGsQMTc-XQAAAAw"]
[Thu Feb 26 02:09:46.023365 2026] [:error] [pid 49554:tid 49614] [client 20.104.206.236:34639] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aZ866ttlDT3cCGsQMTc-XwAAAAU"]
[Thu Feb 26 02:09:46.230509 2026] [:error] [pid 49554:tid 49618] [client 20.104.61.138:43384] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/credits.php"] [unique_id "aZ866ttlDT3cCGsQMTc-YgAAAAk"]
[Thu Feb 26 02:09:47.105754 2026] [:error] [pid 49555:tid 49680] [client 20.104.61.138:44009] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/credits.php"] [unique_id "aZ8669w3_NsD2xC15YbzWQAAAFE"]
[Thu Feb 26 02:09:47.721709 2026] [:error] [pid 49770:tid 49844] [client 20.104.206.236:34633] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aZ866y7xhdZV4TFeNytrYgAAAJI"]
[Thu Feb 26 02:09:48.102416 2026] [:error] [pid 49770:tid 49839] [client 20.104.61.138:43968] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/credits.php"] [unique_id "aZ867C7xhdZV4TFeNytrZQAAAI0"]
[Thu Feb 26 02:09:48.612609 2026] [:error] [pid 49555:tid 49683] [client 20.104.206.236:34781] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aZ867Nw3_NsD2xC15YbzXwAAAFQ"]
[Thu Feb 26 02:09:49.034347 2026] [:error] [pid 49555:tid 49677] [client 20.104.61.138:44093] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/credits.php"] [unique_id "aZ867dw3_NsD2xC15YbzYAAAAE4"]
[Thu Feb 26 02:09:49.499226 2026] [:error] [pid 49556:tid 49638] [client 20.104.206.236:34759] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aZ867Zjk27yQt3CGcmiVWwAAAMI"]
[Thu Feb 26 02:09:49.700934 2026] [:error] [pid 49554:tid 49620] [client 20.104.61.138:43347] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ867dtlDT3cCGsQMTc-aAAAAAs"]
[Thu Feb 26 02:09:50.377449 2026] [:error] [pid 49554:tid 49621] [client 20.104.61.138:43993] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ867ttlDT3cCGsQMTc-agAAAAw"]
[Thu Feb 26 02:09:50.591873 2026] [:error] [pid 49770:tid 49849] [client 20.104.206.236:34753] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aZ867i7xhdZV4TFeNytraQAAAJc"]
[Thu Feb 26 02:09:50.893367 2026] [:error] [pid 49554:tid 49624] [client 20.104.61.138:43998] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ867ttlDT3cCGsQMTc-bgAAAA8"]
[Thu Feb 26 02:09:51.461182 2026] [:error] [pid 49770:tid 49828] [client 20.104.61.138:43364] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aZ867y7xhdZV4TFeNytragAAAII"]
[Thu Feb 26 02:09:51.765236 2026] [:error] [pid 49770:tid 49826] [client 20.104.206.236:34775] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aZ867y7xhdZV4TFeNytrbAAAAIA"]
[Thu Feb 26 02:09:52.135946 2026] [:error] [pid 49554:tid 49610] [client 20.104.61.138:43478] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aZ868NtlDT3cCGsQMTc-cQAAAAE"]
[Thu Feb 26 02:09:52.748872 2026] [:error] [pid 49770:tid 49844] [client 20.104.61.138:43388] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aZ868C7xhdZV4TFeNytrdAAAAJI"]
[Thu Feb 26 02:09:53.104683 2026] [:error] [pid 49555:tid 49658] [client 20.104.206.236:34780] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZ868dw3_NsD2xC15YbzZQAAAEM"]
[Thu Feb 26 02:09:53.435238 2026] [:error] [pid 49554:tid 49615] [client 20.104.61.138:44015] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aZ868dtlDT3cCGsQMTc-dQAAAAY"]
[Thu Feb 26 02:09:54.025633 2026] [:error] [pid 49555:tid 49678] [client 20.104.61.138:43482] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aZ868tw3_NsD2xC15YbzaAAAAE8"]
[Thu Feb 26 02:09:54.136838 2026] [:error] [pid 49555:tid 49666] [client 20.104.206.236:34811] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZ868tw3_NsD2xC15YbzaQAAAEc"]
[Thu Feb 26 02:09:54.717182 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:44045] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "aZ868tw3_NsD2xC15YbzbAAAAEs"]
[Thu Feb 26 02:09:55.275074 2026] [:error] [pid 49770:tid 49826] [client 20.104.206.236:34795] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZ868y7xhdZV4TFeNytreAAAAIA"]
[Thu Feb 26 02:09:55.499106 2026] [:error] [pid 49770:tid 49827] [client 20.104.61.138:44001] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "aZ868y7xhdZV4TFeNytreQAAAIE"]
[Thu Feb 26 02:09:56.208110 2026] [:error] [pid 49770:tid 49845] [client 20.104.61.138:44102] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "aZ869C7xhdZV4TFeNytregAAAJM"]
[Thu Feb 26 02:09:56.232513 2026] [:error] [pid 49554:tid 49630] [client 20.104.206.236:34740] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aZ869NtlDT3cCGsQMTc-eQAAABU"]
[Thu Feb 26 02:09:56.876401 2026] [:error] [pid 49770:tid 49832] [client 20.104.61.138:43360] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "aZ869C7xhdZV4TFeNytrfQAAAIY"]
[Thu Feb 26 02:09:57.558908 2026] [:error] [pid 49770:tid 49842] [client 20.104.61.138:44103] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aZ869S7xhdZV4TFeNytrfwAAAJA"]
[Thu Feb 26 02:09:57.819418 2026] [:error] [pid 49556:tid 49644] [client 20.104.206.236:34637] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aZ869Zjk27yQt3CGcmiVYwAAAMg"]
[Thu Feb 26 02:09:58.281325 2026] [:error] [pid 49556:tid 49657] [client 20.104.61.138:43516] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aZ869pjk27yQt3CGcmiVZAAAANE"]
[Thu Feb 26 02:09:59.037046 2026] [:error] [pid 49554:tid 49626] [client 20.104.61.138:43469] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aZ8699tlDT3cCGsQMTc-ewAAABE"]
[Thu Feb 26 02:09:59.064650 2026] [:error] [pid 49556:tid 49641] [client 20.104.206.236:34708] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aZ8695jk27yQt3CGcmiVaAAAAMU"]
[Thu Feb 26 02:09:59.638464 2026] [:error] [pid 49770:tid 49838] [client 20.104.61.138:43927] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aZ869y7xhdZV4TFeNytrgQAAAIw"]
[Thu Feb 26 02:09:59.757219 2026] [:error] [pid 49770:tid 49839] [client 20.104.206.236:34695] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aZ869y7xhdZV4TFeNytrggAAAI0"]
[Thu Feb 26 02:10:00.514057 2026] [:error] [pid 49770:tid 49833] [client 20.104.206.236:34770] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aZ86-C7xhdZV4TFeNytrgwAAAIc"]
[Thu Feb 26 02:10:01.426865 2026] [:error] [pid 49770:tid 49848] [client 20.104.206.236:34743] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aZ86-S7xhdZV4TFeNytrhwAAAJY"]
[Thu Feb 26 02:10:01.584369 2026] [:error] [pid 49555:tid 49679] [client 20.104.61.138:43369] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aZ86-dw3_NsD2xC15YbzewAAAFA"]
[Thu Feb 26 02:10:02.210839 2026] [:error] [pid 49770:tid 49831] [client 20.104.206.236:34690] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aZ86-i7xhdZV4TFeNytrigAAAIU"]
[Thu Feb 26 02:10:03.161626 2026] [:error] [pid 49554:tid 49628] [client 20.104.206.236:34745] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aZ86-9tlDT3cCGsQMTc-fgAAABM"]
[Thu Feb 26 02:10:04.026101 2026] [:error] [pid 49770:tid 49837] [client 20.104.206.236:34659] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aZ86_C7xhdZV4TFeNytrlQAAAIs"]
[Thu Feb 26 02:10:04.818734 2026] [:error] [pid 49554:tid 49621] [client 20.104.206.236:34760] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZ86_NtlDT3cCGsQMTc-hAAAAAw"]
[Thu Feb 26 02:10:05.533460 2026] [:error] [pid 49554:tid 49624] [client 20.104.206.236:34716] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZ86_dtlDT3cCGsQMTc-hwAAAA8"]
[Thu Feb 26 02:10:06.244579 2026] [:error] [pid 49555:tid 49684] [client 20.104.206.236:34813] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZ86_tw3_NsD2xC15YbzhQAAAFU"]
[Thu Feb 26 02:10:06.861737 2026] [:error] [pid 49555:tid 49676] [client 20.104.206.236:34631] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aZ86_tw3_NsD2xC15YbzhwAAAE0"]
[Thu Feb 26 02:10:07.157014 2026] [:error] [pid 49554:tid 49617] [client 20.104.61.138:44109] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/widgets-form-blocks.php"] [unique_id "aZ86_9tlDT3cCGsQMTc-jQAAAAg"]
[Thu Feb 26 02:10:08.132956 2026] [:error] [pid 49556:tid 49637] [client 20.104.206.236:34812] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZ87AJjk27yQt3CGcmiVbQAAAME"]
[Thu Feb 26 02:10:08.175535 2026] [:error] [pid 49555:tid 49678] [client 20.104.61.138:44110] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/widgets-form-blocks.php"] [unique_id "aZ87ANw3_NsD2xC15YbziQAAAE8"]
[Thu Feb 26 02:10:08.796990 2026] [:error] [pid 49555:tid 49679] [client 20.104.206.236:34636] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZ87ANw3_NsD2xC15YbzigAAAFA"]
[Thu Feb 26 02:10:09.045608 2026] [:error] [pid 49556:tid 49642] [client 20.104.61.138:43944] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/widgets-form-blocks.php"] [unique_id "aZ87AZjk27yQt3CGcmiVbgAAAMY"]
[Thu Feb 26 02:10:09.718387 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:43988] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/widgets-form-blocks.php"] [unique_id "aZ87Adw3_NsD2xC15YbzjAAAAEs"]
[Thu Feb 26 02:10:09.800708 2026] [:error] [pid 49555:tid 49680] [client 20.104.206.236:34799] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZ87Adw3_NsD2xC15YbzjQAAAFE"]
[Thu Feb 26 02:10:10.359380 2026] [:error] [pid 49555:tid 49671] [client 20.104.61.138:44154] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/root.php"] [unique_id "aZ87Atw3_NsD2xC15YbzkAAAAEo"]
[Thu Feb 26 02:10:10.468924 2026] [:error] [pid 49556:tid 49656] [client 20.104.206.236:34712] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZ87Apjk27yQt3CGcmiVcAAAANA"]
[Thu Feb 26 02:10:11.030564 2026] [:error] [pid 49554:tid 49625] [client 20.104.206.236:34768] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/login8.php"] [unique_id "aZ87A9tlDT3cCGsQMTc-kwAAABA"]
[Thu Feb 26 02:10:11.433045 2026] [:error] [pid 49556:tid 49636] [client 20.104.61.138:44152] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/root.php"] [unique_id "aZ87A5jk27yQt3CGcmiVcQAAAMA"]
[Thu Feb 26 02:10:11.845651 2026] [:error] [pid 49556:tid 49639] [client 20.104.206.236:34709] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/login8.php"] [unique_id "aZ87A5jk27yQt3CGcmiVdAAAAMM"]
[Thu Feb 26 02:10:12.097283 2026] [:error] [pid 49770:tid 49831] [client 20.104.61.138:43358] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/root.php"] [unique_id "aZ87BC7xhdZV4TFeNytrqwAAAIU"]
[Thu Feb 26 02:10:12.527801 2026] [:error] [pid 49770:tid 49845] [client 20.104.206.236:34697] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/login8.php"] [unique_id "aZ87BC7xhdZV4TFeNytrrgAAAJM"]
[Thu Feb 26 02:10:12.696346 2026] [:error] [pid 49554:tid 49612] [client 20.104.61.138:43460] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/root.php"] [unique_id "aZ87BNtlDT3cCGsQMTc-lwAAAAM"]
[Thu Feb 26 02:10:13.546225 2026] [:error] [pid 49555:tid 49685] [client 20.104.206.236:34650] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/login8.php"] [unique_id "aZ87Bdw3_NsD2xC15YbzlQAAAFY"]
[Thu Feb 26 02:10:14.084281 2026] [:error] [pid 49555:tid 49653] [client 20.104.206.236:34663] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nnyvn.php"] [unique_id "aZ87Btw3_NsD2xC15YbzlwAAAEE"]
[Thu Feb 26 02:10:14.602503 2026] [:error] [pid 49555:tid 49682] [client 20.104.61.138:43493] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aZ87Btw3_NsD2xC15YbzmwAAAFM"]
[Thu Feb 26 02:10:14.754272 2026] [:error] [pid 49554:tid 49630] [client 20.104.206.236:34696] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nnyvn.php"] [unique_id "aZ87BttlDT3cCGsQMTc-nwAAABU"]
[Thu Feb 26 02:10:15.552687 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:44057] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aZ87B9w3_NsD2xC15YbzngAAAEs"]
[Thu Feb 26 02:10:15.815493 2026] [:error] [pid 49555:tid 49687] [client 20.104.206.236:34651] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nnyvn.php"] [unique_id "aZ87B9w3_NsD2xC15YbznwAAAFg"]
[Thu Feb 26 02:10:16.368198 2026] [:error] [pid 49554:tid 49618] [client 20.104.61.138:43362] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aZ87CNtlDT3cCGsQMTc-owAAAAk"]
[Thu Feb 26 02:10:16.457927 2026] [:error] [pid 49770:tid 49843] [client 20.104.206.236:34735] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nnyvn.php"] [unique_id "aZ87CC7xhdZV4TFeNytrsQAAAJE"]
[Thu Feb 26 02:10:16.964475 2026] [:error] [pid 49554:tid 49610] [client 20.104.61.138:44052] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aZ87CNtlDT3cCGsQMTc-pAAAAAE"]
[Thu Feb 26 02:10:17.232166 2026] [:error] [pid 49554:tid 49614] [client 20.104.206.236:34646] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aZ87CdtlDT3cCGsQMTc-pgAAAAU"]
[Thu Feb 26 02:10:17.594229 2026] [:error] [pid 49554:tid 49609] [client 20.104.61.138:43377] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/item.php"] [unique_id "aZ87CdtlDT3cCGsQMTc-qAAAAAA"]
[Thu Feb 26 02:10:18.314876 2026] [:error] [pid 49556:tid 49661] [client 20.104.206.236:34717] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aZ87Cpjk27yQt3CGcmiVeAAAANM"]
[Thu Feb 26 02:10:18.453133 2026] [:error] [pid 49556:tid 49646] [client 20.104.61.138:43985] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/item.php"] [unique_id "aZ87Cpjk27yQt3CGcmiVeQAAAMo"]
[Thu Feb 26 02:10:19.092739 2026] [:error] [pid 49554:tid 49629] [client 20.104.61.138:44105] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/item.php"] [unique_id "aZ87C9tlDT3cCGsQMTc-qgAAABQ"]
[Thu Feb 26 02:10:19.413737 2026] [:error] [pid 49770:tid 49850] [client 20.104.206.236:34782] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aZ87Cy7xhdZV4TFeNytrtgAAAJg"]
[Thu Feb 26 02:10:19.740904 2026] [:error] [pid 49554:tid 49633] [client 20.104.61.138:43502] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/item.php"] [unique_id "aZ87C9tlDT3cCGsQMTc-rQAAABg"]
[Thu Feb 26 02:10:19.974294 2026] [:error] [pid 49770:tid 49835] [client 20.104.206.236:34802] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aZ87Cy7xhdZV4TFeNytruQAAAIk"]
[Thu Feb 26 02:10:20.281079 2026] [:error] [pid 49770:tid 49829] [client 20.104.61.138:43503] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "aZ87DC7xhdZV4TFeNytrugAAAIM"]
[Thu Feb 26 02:10:20.787062 2026] [:error] [pid 49770:tid 49845] [client 20.104.206.236:34698] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aZ87DC7xhdZV4TFeNytrvgAAAJM"]
[Thu Feb 26 02:10:21.074022 2026] [:error] [pid 49554:tid 49632] [client 20.104.61.138:44036] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "aZ87DdtlDT3cCGsQMTc-sAAAABc"]
[Thu Feb 26 02:10:21.428151 2026] [:error] [pid 49554:tid 49624] [client 20.104.206.236:34638] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aZ87DdtlDT3cCGsQMTc-swAAAA8"]
[Thu Feb 26 02:10:21.643197 2026] [:error] [pid 49554:tid 49619] [client 20.104.61.138:44004] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "aZ87DdtlDT3cCGsQMTc-tgAAAAo"]
[Thu Feb 26 02:10:22.015654 2026] [:error] [pid 49556:tid 49649] [client 20.104.206.236:34648] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aZ87Dpjk27yQt3CGcmiVfwAAAMw"]
[Thu Feb 26 02:10:22.468116 2026] [:error] [pid 49556:tid 49643] [client 20.104.61.138:44082] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "aZ87Dpjk27yQt3CGcmiVgQAAAMc"]
[Thu Feb 26 02:10:22.486909 2026] [:error] [pid 49556:tid 49647] [client 20.104.206.236:34785] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aZ87Dpjk27yQt3CGcmiVggAAAMs"]
[Thu Feb 26 02:10:23.143010 2026] [:error] [pid 49555:tid 49682] [client 20.104.61.138:43982] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cache.php"] [unique_id "aZ87D9w3_NsD2xC15YbzpwAAAFM"]
[Thu Feb 26 02:10:23.660922 2026] [:error] [pid 49770:tid 49839] [client 20.104.206.236:34729] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aZ87Dy7xhdZV4TFeNytryAAAAI0"]
[Thu Feb 26 02:10:23.720944 2026] [:error] [pid 49770:tid 49829] [client 20.104.61.138:44134] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cache.php"] [unique_id "aZ87Dy7xhdZV4TFeNytryQAAAIM"]
[Thu Feb 26 02:10:24.471444 2026] [:error] [pid 49554:tid 49626] [client 20.104.206.236:34722] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aZ87ENtlDT3cCGsQMTc-vQAAABE"]
[Thu Feb 26 02:10:24.926725 2026] [:error] [pid 49555:tid 49670] [client 20.104.61.138:43456] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cache.php"] [unique_id "aZ87ENw3_NsD2xC15YbzrgAAAEk"]
[Thu Feb 26 02:10:25.478040 2026] [:error] [pid 49556:tid 49667] [client 20.104.206.236:34758] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aZ87EZjk27yQt3CGcmiVhwAAANY"]
[Thu Feb 26 02:10:25.629737 2026] [:error] [pid 49555:tid 49668] [client 20.104.61.138:43908] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cache.php"] [unique_id "aZ87Edw3_NsD2xC15YbzsQAAAEg"]
[Thu Feb 26 02:10:26.256340 2026] [:error] [pid 49555:tid 49653] [client 20.104.206.236:34655] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aZ87Etw3_NsD2xC15YbzswAAAEE"]
[Thu Feb 26 02:10:26.614559 2026] [:error] [pid 49555:tid 49658] [client 20.104.61.138:44113] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "aZ87Etw3_NsD2xC15YbztgAAAEM"]
[Thu Feb 26 02:10:26.990883 2026] [:error] [pid 49770:tid 49830] [client 20.104.206.236:34773] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aZ87Ei7xhdZV4TFeNytrzwAAAIQ"]
[Thu Feb 26 02:10:27.407035 2026] [:error] [pid 49770:tid 49849] [client 20.104.61.138:43513] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "aZ87Ey7xhdZV4TFeNytr0gAAAJc"]
[Thu Feb 26 02:10:27.657408 2026] [:error] [pid 49555:tid 49678] [client 20.104.206.236:34634] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aZ87E9w3_NsD2xC15YbzuQAAAE8"]
[Thu Feb 26 02:10:28.294541 2026] [:error] [pid 49555:tid 49687] [client 20.104.61.138:43509] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "aZ87FNw3_NsD2xC15YbzvQAAAFg"]
[Thu Feb 26 02:10:28.320187 2026] [:error] [pid 49770:tid 49834] [client 20.104.206.236:34624] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aZ87FC7xhdZV4TFeNytr1gAAAIg"]
[Thu Feb 26 02:10:29.076585 2026] [:error] [pid 49770:tid 49842] [client 20.104.61.138:44029] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "aZ87FS7xhdZV4TFeNytr2gAAAJA"]
[Thu Feb 26 02:10:29.389806 2026] [:error] [pid 49770:tid 49840] [client 20.104.206.236:34674] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aZ87FS7xhdZV4TFeNytr3AAAAI4"]
[Thu Feb 26 02:10:30.067962 2026] [:error] [pid 49555:tid 49662] [client 20.104.61.138:43476] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aZ87Ftw3_NsD2xC15YbzwwAAAEU"]
[Thu Feb 26 02:10:30.111565 2026] [:error] [pid 49555:tid 49682] [client 20.104.206.236:34676] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aZ87Ftw3_NsD2xC15YbzxAAAAFM"]
[Thu Feb 26 02:10:30.587159 2026] [:error] [pid 49770:tid 49847] [client 20.104.206.236:34719] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aZ87Fi7xhdZV4TFeNytr4QAAAJU"]
[Thu Feb 26 02:10:31.078774 2026] [:error] [pid 49770:tid 49834] [client 20.104.61.138:43472] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aZ87Fy7xhdZV4TFeNytr4wAAAIg"]
[Thu Feb 26 02:10:31.435267 2026] [:error] [pid 49770:tid 49850] [client 20.104.206.236:34739] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aZ87Fy7xhdZV4TFeNytr5QAAAJg"]
[Thu Feb 26 02:10:31.931175 2026] [:error] [pid 49556:tid 49639] [client 20.104.61.138:43470] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aZ87F5jk27yQt3CGcmiVjwAAAMM"]
[Thu Feb 26 02:10:32.548847 2026] [:error] [pid 49770:tid 49835] [client 20.104.206.236:34720] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aZ87GC7xhdZV4TFeNytr6wAAAIk"]
[Thu Feb 26 02:10:32.808116 2026] [:error] [pid 49770:tid 49847] [client 20.104.61.138:43514] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aZ87GC7xhdZV4TFeNytr7gAAAJU"]
[Thu Feb 26 02:10:33.049403 2026] [:error] [pid 49770:tid 49827] [client 20.104.206.236:34627] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZ87GS7xhdZV4TFeNytr8AAAAIE"]
[Thu Feb 26 02:10:33.379341 2026] [:error] [pid 49770:tid 49832] [client 20.104.61.138:44098] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media-upload.php"] [unique_id "aZ87GS7xhdZV4TFeNytr9AAAAIY"]
[Thu Feb 26 02:10:33.605679 2026] [:error] [pid 49770:tid 49835] [client 20.104.206.236:34728] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZ87GS7xhdZV4TFeNytr9wAAAIk"]
[Thu Feb 26 02:10:34.187319 2026] [:error] [pid 49554:tid 49623] [client 20.104.61.138:43387] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media-upload.php"] [unique_id "aZ87GttlDT3cCGsQMTc-xAAAAA4"]
[Thu Feb 26 02:10:34.245084 2026] [:error] [pid 49555:tid 49671] [client 20.104.206.236:34675] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZ87Gtw3_NsD2xC15YbzyQAAAEo"]
[Thu Feb 26 02:10:34.753316 2026] [:error] [pid 49770:tid 49845] [client 20.104.61.138:43328] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media-upload.php"] [unique_id "aZ87Gi7xhdZV4TFeNytsAgAAAJM"]
[Thu Feb 26 02:10:35.182022 2026] [:error] [pid 49770:tid 49828] [client 20.104.206.236:34738] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aZ87Gy7xhdZV4TFeNytsBQAAAII"]
[Thu Feb 26 02:10:35.371607 2026] [:error] [pid 49770:tid 49834] [client 20.104.61.138:43487] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media-upload.php"] [unique_id "aZ87Gy7xhdZV4TFeNytsCAAAAIg"]
[Thu Feb 26 02:10:35.924906 2026] [:error] [pid 49770:tid 49842] [client 20.104.206.236:34589] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aZ87Gy7xhdZV4TFeNytsDAAAAJA"]
[Thu Feb 26 02:10:36.198597 2026] [:error] [pid 49770:tid 49832] [client 20.104.61.138:43517] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aZ87HC7xhdZV4TFeNytsEAAAAIY"]
[Thu Feb 26 02:10:36.581691 2026] [:error] [pid 49770:tid 49828] [client 20.104.206.236:34771] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aZ87HC7xhdZV4TFeNytsEwAAAII"]
[Thu Feb 26 02:10:36.919907 2026] [:error] [pid 49770:tid 49831] [client 20.104.61.138:43467] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aZ87HC7xhdZV4TFeNytsGAAAAIU"]
[Thu Feb 26 02:10:37.292029 2026] [:error] [pid 49555:tid 49682] [client 20.104.206.236:34718] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aZ87Hdw3_NsD2xC15Ybz0gAAAFM"]
[Thu Feb 26 02:10:37.568717 2026] [:error] [pid 49556:tid 49672] [client 20.104.61.138:43465] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aZ87HZjk27yQt3CGcmiVlgAAANg"]
[Thu Feb 26 02:10:38.142198 2026] [:error] [pid 49556:tid 49637] [client 20.104.206.236:34790] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aZ87Hpjk27yQt3CGcmiVmgAAAME"]
[Thu Feb 26 02:10:38.306948 2026] [:error] [pid 49556:tid 49659] [client 20.104.61.138:44121] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aZ87Hpjk27yQt3CGcmiVmwAAANI"]
[Thu Feb 26 02:10:38.947886 2026] [:error] [pid 49555:tid 49664] [client 20.104.206.236:34742] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aZ87Htw3_NsD2xC15Ybz1gAAAEY"]
[Thu Feb 26 02:10:39.121319 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:44058] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aZ87H9w3_NsD2xC15Ybz1wAAAEs"]
[Thu Feb 26 02:10:39.767218 2026] [:error] [pid 49556:tid 49644] [client 20.104.61.138:43936] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aZ87H5jk27yQt3CGcmiVoAAAAMg"]
[Thu Feb 26 02:10:39.895003 2026] [:error] [pid 49556:tid 49640] [client 20.104.206.236:34791] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aZ87H5jk27yQt3CGcmiVowAAAMQ"]
[Thu Feb 26 02:10:40.421379 2026] [:error] [pid 49770:tid 49840] [client 20.104.61.138:43510] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aZ87IC7xhdZV4TFeNytsKQAAAI4"]
[Thu Feb 26 02:10:41.223288 2026] [:error] [pid 49556:tid 49663] [client 20.104.206.236:34644] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aZ87IZjk27yQt3CGcmiVpwAAANQ"]
[Thu Feb 26 02:10:41.447738 2026] [:error] [pid 49555:tid 49677] [client 20.104.61.138:43367] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aZ87Idw3_NsD2xC15Ybz4QAAAE4"]
[Thu Feb 26 02:10:42.424856 2026] [:error] [pid 49554:tid 49621] [client 20.104.61.138:43505] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aZ87IttlDT3cCGsQMTc-zgAAAAw"]
[Thu Feb 26 02:10:43.091843 2026] [:error] [pid 49554:tid 49619] [client 20.104.61.138:44099] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aZ87I9tlDT3cCGsQMTc-0gAAAAo"]
[Thu Feb 26 02:10:43.913938 2026] [:error] [pid 49554:tid 49610] [client 20.104.61.138:43986] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aZ87I9tlDT3cCGsQMTc-2QAAAAE"]
[Thu Feb 26 02:10:44.702897 2026] [:error] [pid 49554:tid 49625] [client 20.104.61.138:44005] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aZ87JNtlDT3cCGsQMTc-2wAAABA"]
[Thu Feb 26 02:10:45.353227 2026] [:error] [pid 49554:tid 49633] [client 20.104.61.138:43948] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZ87JdtlDT3cCGsQMTc-4QAAABg"]
[Thu Feb 26 02:10:45.885464 2026] [:error] [pid 49554:tid 49619] [client 20.104.61.138:44112] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZ87JdtlDT3cCGsQMTc-5gAAAAo"]
[Thu Feb 26 02:10:46.725719 2026] [:error] [pid 49554:tid 49631] [client 20.104.61.138:44030] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZ87JttlDT3cCGsQMTc-7QAAABY"]
[Thu Feb 26 02:10:47.364422 2026] [:error] [pid 49554:tid 49633] [client 20.104.61.138:43351] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aZ87J9tlDT3cCGsQMTc-8gAAABg"]
[Thu Feb 26 02:10:48.122675 2026] [:error] [pid 49554:tid 49616] [client 20.104.61.138:44116] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aZ87KNtlDT3cCGsQMTc-_AAAAAc"]
[Thu Feb 26 02:10:48.871454 2026] [:error] [pid 49555:tid 49683] [client 20.104.61.138:43984] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aZ87KNw3_NsD2xC15Ybz8AAAAFQ"]
[Thu Feb 26 02:10:49.705606 2026] [:error] [pid 49555:tid 49677] [client 20.104.61.138:43519] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aZ87Kdw3_NsD2xC15Ybz9QAAAE4"]
[Thu Feb 26 02:10:50.260479 2026] [:error] [pid 49770:tid 49839] [client 20.104.61.138:44007] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aZ87Ki7xhdZV4TFeNytsPgAAAI0"]
[Thu Feb 26 02:10:51.051957 2026] [:error] [pid 49555:tid 49676] [client 20.104.61.138:44089] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/widgets.php"] [unique_id "aZ87K9w3_NsD2xC15Ybz-QAAAE0"]
[Thu Feb 26 02:10:52.083152 2026] [:error] [pid 49555:tid 49684] [client 20.104.61.138:43906] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/widgets.php"] [unique_id "aZ87LNw3_NsD2xC15Ybz_AAAAFU"]
[Thu Feb 26 02:10:52.362070 2026] [:error] [pid 49554:tid 49625] [client 20.104.206.236:34774] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffd.php"] [unique_id "aZ87LNtlDT3cCGsQMTc_DwAAABA"]
[Thu Feb 26 02:10:53.628682 2026] [:error] [pid 49556:tid 49645] [client 20.104.206.236:34625] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffd.php"] [unique_id "aZ87LZjk27yQt3CGcmiVvAAAAMk"]
[Thu Feb 26 02:10:53.895598 2026] [:error] [pid 49770:tid 49848] [client 20.104.61.138:44120] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/widgets.php"] [unique_id "aZ87LS7xhdZV4TFeNytsSAAAAJY"]
[Thu Feb 26 02:10:54.535605 2026] [:error] [pid 49556:tid 49657] [client 20.104.61.138:43457] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/widgets.php"] [unique_id "aZ87Lpjk27yQt3CGcmiVvgAAANE"]
[Thu Feb 26 02:10:54.901114 2026] [:error] [pid 49556:tid 49652] [client 20.104.206.236:34567] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffd.php"] [unique_id "aZ87Lpjk27yQt3CGcmiVvwAAAM4"]
[Thu Feb 26 02:10:55.243939 2026] [:error] [pid 49555:tid 49655] [client 20.104.61.138:44141] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berlin.php"] [unique_id "aZ87L9w3_NsD2xC15Yb0BgAAAEI"]
[Thu Feb 26 02:10:55.926653 2026] [:error] [pid 49555:tid 49684] [client 20.104.206.236:34733] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ffd.php"] [unique_id "aZ87L9w3_NsD2xC15Yb0CgAAAFU"]
[Thu Feb 26 02:10:55.991213 2026] [:error] [pid 49556:tid 49637] [client 20.104.61.138:43500] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berlin.php"] [unique_id "aZ87L5jk27yQt3CGcmiVwwAAAME"]
[Thu Feb 26 02:10:57.552435 2026] [:error] [pid 49555:tid 49662] [client 20.104.61.138:43330] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berlin.php"] [unique_id "aZ87Mdw3_NsD2xC15Yb0DgAAAEU"]
[Thu Feb 26 02:10:58.288188 2026] [:error] [pid 49555:tid 49685] [client 20.104.61.138:43494] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berlin.php"] [unique_id "aZ87Mtw3_NsD2xC15Yb0EAAAAFY"]
[Thu Feb 26 02:10:59.053259 2026] [:error] [pid 49770:tid 49835] [client 20.104.61.138:44002] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/freedoms.php"] [unique_id "aZ87My7xhdZV4TFeNytsUgAAAIk"]
[Thu Feb 26 02:11:00.022677 2026] [:error] [pid 49770:tid 49826] [client 20.104.61.138:43515] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/freedoms.php"] [unique_id "aZ87NC7xhdZV4TFeNytsVAAAAIA"]
[Thu Feb 26 02:11:00.863621 2026] [:error] [pid 49770:tid 49833] [client 20.104.61.138:43389] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/freedoms.php"] [unique_id "aZ87NC7xhdZV4TFeNytsVgAAAIc"]
[Thu Feb 26 02:11:01.573526 2026] [:error] [pid 49555:tid 49668] [client 20.104.61.138:44025] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/freedoms.php"] [unique_id "aZ87Ndw3_NsD2xC15Yb0GAAAAEg"]
[Thu Feb 26 02:11:02.282660 2026] [:error] [pid 49554:tid 49630] [client 20.104.61.138:43507] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZ87NttlDT3cCGsQMTc_IQAAABU"]
[Thu Feb 26 02:11:03.055201 2026] [:error] [pid 49554:tid 49622] [client 20.104.61.138:43480] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZ87N9tlDT3cCGsQMTc_JAAAAA0"]
[Thu Feb 26 02:11:04.515318 2026] [:error] [pid 49554:tid 49624] [client 20.104.61.138:44020] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZ87ONtlDT3cCGsQMTc_KgAAAA8"]
[Thu Feb 26 02:11:05.332154 2026] [:error] [pid 49770:tid 49844] [client 20.104.61.138:44117] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aZ87OS7xhdZV4TFeNytsdwAAAJI"]
[Thu Feb 26 02:11:10.303615 2026] [:error] [pid 49554:tid 49629] [client 20.104.61.138:43978] [client 20.104.61.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.61.138, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZ87PttlDT3cCGsQMTc_OwAAABQ"]
[Thu Feb 26 02:11:10.549538 2026] [:error] [pid 49555:tid 49680] [client 20.104.61.138:43484] [client 20.104.61.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.104.61.138, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZ87Ptw3_NsD2xC15Yb0MwAAAFE"]
[Thu Feb 26 02:11:13.431013 2026] [:error] [pid 49554:tid 49626] [client 20.104.61.138:43978] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZ87QdtlDT3cCGsQMTc_QQAAABE"]
[Thu Feb 26 02:11:14.176235 2026] [:error] [pid 49555:tid 49666] [client 20.104.61.138:43498] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZ87Qtw3_NsD2xC15Yb0PAAAAEc"]
[Thu Feb 26 02:11:14.984921 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:43987] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZ87Qtw3_NsD2xC15Yb0QAAAAEs"]
[Thu Feb 26 02:11:15.594984 2026] [:error] [pid 49554:tid 49613] [client 20.104.61.138:44125] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aZ87Q9tlDT3cCGsQMTc_QgAAAAQ"]
[Thu Feb 26 02:11:16.107064 2026] [:error] [pid 49556:tid 49644] [client 20.104.61.138:43497] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aZ87RJjk27yQt3CGcmiWCQAAAMg"]
[Thu Feb 26 02:11:17.012451 2026] [:error] [pid 49555:tid 49658] [client 20.104.61.138:43354] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aZ87Rdw3_NsD2xC15Yb0RgAAAEM"]
[Thu Feb 26 02:11:17.495314 2026] [:error] [pid 49770:tid 49835] [client 20.104.61.138:43481] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aZ87RS7xhdZV4TFeNytsnAAAAIk"]
[Thu Feb 26 02:11:18.531953 2026] [:error] [pid 49554:tid 49631] [client 20.104.61.138:43501] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aZ87RttlDT3cCGsQMTc_SQAAABY"]
[Thu Feb 26 02:11:19.071316 2026] [:error] [pid 49554:tid 49625] [client 20.104.61.138:43488] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeng.php"] [unique_id "aZ87R9tlDT3cCGsQMTc_SwAAABA"]
[Thu Feb 26 02:11:19.603126 2026] [:error] [pid 49770:tid 49846] [client 20.104.61.138:44039] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeng.php"] [unique_id "aZ87Ry7xhdZV4TFeNytspAAAAJQ"]
[Thu Feb 26 02:11:20.257824 2026] [:error] [pid 49556:tid 49661] [client 20.104.61.138:43464] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeng.php"] [unique_id "aZ87SJjk27yQt3CGcmiWEwAAANM"]
[Thu Feb 26 02:11:21.074727 2026] [:error] [pid 49554:tid 49621] [client 20.104.61.138:44023] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeng.php"] [unique_id "aZ87SdtlDT3cCGsQMTc_UQAAAAw"]
[Thu Feb 26 02:11:21.676501 2026] [:error] [pid 49770:tid 49847] [client 20.104.61.138:44104] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aZ87SS7xhdZV4TFeNytsqgAAAJU"]
[Thu Feb 26 02:11:22.270506 2026] [:error] [pid 49555:tid 49664] [client 20.104.61.138:44049] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aZ87Stw3_NsD2xC15Yb0UQAAAEY"]
[Thu Feb 26 02:11:22.980051 2026] [:error] [pid 49770:tid 49848] [client 20.104.61.138:44096] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aZ87Si7xhdZV4TFeNytsrgAAAJY"]
[Thu Feb 26 02:11:23.603128 2026] [:error] [pid 49554:tid 49631] [client 20.104.61.138:43479] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aZ87S9tlDT3cCGsQMTc_WAAAABY"]
[Thu Feb 26 02:11:24.130884 2026] [:error] [pid 49555:tid 49681] [client 20.104.61.138:44143] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/checkbex.php"] [unique_id "aZ87TNw3_NsD2xC15Yb0VQAAAFI"]
[Thu Feb 26 02:11:24.659523 2026] [:error] [pid 49555:tid 49673] [client 20.104.61.138:43911] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/checkbex.php"] [unique_id "aZ87TNw3_NsD2xC15Yb0WQAAAEs"]
[Thu Feb 26 02:11:25.277463 2026] [:error] [pid 49554:tid 49633] [client 20.104.61.138:43484] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/checkbex.php"] [unique_id "aZ87TdtlDT3cCGsQMTc_WwAAABg"]
[Thu Feb 26 02:11:25.854123 2026] [:error] [pid 49556:tid 49650] [client 20.104.61.138:44124] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/checkbex.php"] [unique_id "aZ87TZjk27yQt3CGcmiWHAAAAM0"]
[Thu Feb 26 02:11:26.380054 2026] [:error] [pid 49556:tid 49654] [client 20.104.61.138:44111] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aZ87Tpjk27yQt3CGcmiWHgAAAM8"]
[Thu Feb 26 02:11:27.116053 2026] [:error] [pid 49770:tid 49835] [client 20.104.61.138:43512] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aZ87Ty7xhdZV4TFeNytstgAAAIk"]
[Thu Feb 26 02:11:28.242585 2026] [:error] [pid 49770:tid 49850] [client 20.104.61.138:43846] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aZ87UC7xhdZV4TFeNytsugAAAJg"]
[Thu Feb 26 02:11:28.817311 2026] [:error] [pid 49556:tid 49649] [client 20.104.61.138:43840] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aZ87UJjk27yQt3CGcmiWJAAAAMw"]
[Thu Feb 26 02:11:29.398599 2026] [:error] [pid 49770:tid 49846] [client 20.104.61.138:44126] [client 20.104.61.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aZ87US7xhdZV4TFeNytsvQAAAJQ"]
[Thu Feb 26 02:11:30.064357 2026] [:error] [pid 49555:tid 49677] [client 20.104.61.138:44028] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options-head.php"] [unique_id "aZ87Utw3_NsD2xC15Yb0agAAAE4"]
[Thu Feb 26 02:11:30.610337 2026] [:error] [pid 49770:tid 49840] [client 20.104.61.138:44087] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options-head.php"] [unique_id "aZ87Ui7xhdZV4TFeNytswQAAAI4"]
[Thu Feb 26 02:11:31.605191 2026] [:error] [pid 49770:tid 49834] [client 20.104.61.138:43483] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options-head.php"] [unique_id "aZ87Uy7xhdZV4TFeNytsxQAAAIg"]
[Thu Feb 26 02:11:32.310933 2026] [:error] [pid 49554:tid 49631] [client 20.104.61.138:43933] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options-head.php"] [unique_id "aZ87VNtlDT3cCGsQMTc_ZgAAABY"]
[Thu Feb 26 02:11:33.015723 2026] [:error] [pid 49555:tid 49658] [client 20.104.61.138:43499] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aZ87Vdw3_NsD2xC15Yb0cgAAAEM"]
[Thu Feb 26 02:11:33.781017 2026] [:error] [pid 49555:tid 49685] [client 20.104.61.138:44115] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aZ87Vdw3_NsD2xC15Yb0dAAAAFY"]
[Thu Feb 26 02:11:34.797099 2026] [:error] [pid 49770:tid 49829] [client 20.104.61.138:44101] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aZ87Vi7xhdZV4TFeNyts0QAAAIM"]
[Thu Feb 26 02:11:35.596199 2026] [:error] [pid 49770:tid 49830] [client 20.104.61.138:43912] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aZ87Vy7xhdZV4TFeNyts2AAAAIQ"]
[Thu Feb 26 02:11:36.322860 2026] [:error] [pid 49770:tid 49846] [client 20.104.61.138:44122] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZ87WC7xhdZV4TFeNyts3QAAAJQ"]
[Thu Feb 26 02:11:37.130337 2026] [:error] [pid 49770:tid 49848] [client 20.104.61.138:43486] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZ87WS7xhdZV4TFeNyts4gAAAJY"]
[Thu Feb 26 02:11:38.014515 2026] [:error] [pid 49555:tid 49655] [client 20.104.61.138:43508] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZ87Wtw3_NsD2xC15Yb0gAAAAEI"]
[Thu Feb 26 02:11:38.719061 2026] [:error] [pid 49770:tid 49830] [client 20.104.61.138:44108] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aZ87Wi7xhdZV4TFeNyts5wAAAIQ"]
[Thu Feb 26 02:11:39.261614 2026] [:error] [pid 49770:tid 49841] [client 20.104.61.138:43904] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aZ87Wy7xhdZV4TFeNyts6wAAAI8"]
[Thu Feb 26 02:11:39.860235 2026] [:error] [pid 49770:tid 49827] [client 20.104.61.138:44033] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aZ87Wy7xhdZV4TFeNyts7gAAAIE"]
[Thu Feb 26 02:11:40.901830 2026] [:error] [pid 49555:tid 49687] [client 20.104.61.138:44128] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aZ87XNw3_NsD2xC15Yb0hAAAAFg"]
[Thu Feb 26 02:11:41.627977 2026] [:error] [pid 49556:tid 49640] [client 20.104.61.138:44084] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aZ87XZjk27yQt3CGcmiWNQAAAMQ"]
[Thu Feb 26 02:11:42.785054 2026] [:error] [pid 49770:tid 49841] [client 20.104.61.138:43898] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ87Xi7xhdZV4TFeNyts-QAAAI8"]
[Thu Feb 26 02:11:43.544232 2026] [:error] [pid 49556:tid 49663] [client 20.104.61.138:44139] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ87X5jk27yQt3CGcmiWOQAAANQ"]
[Thu Feb 26 02:11:44.118278 2026] [:error] [pid 49556:tid 49672] [client 20.104.61.138:43332] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ87YJjk27yQt3CGcmiWPAAAANg"]
[Thu Feb 26 02:11:44.783849 2026] [:error] [pid 49555:tid 49681] [client 20.104.61.138:43992] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZ87YNw3_NsD2xC15Yb0jAAAAFI"]
[Thu Feb 26 02:11:45.441284 2026] [:error] [pid 49770:tid 49828] [client 20.104.61.138:43390] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/my.php"] [unique_id "aZ87YS7xhdZV4TFeNyttAQAAAII"]
[Thu Feb 26 02:11:46.158114 2026] [:error] [pid 49556:tid 49667] [client 20.104.61.138:44003] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/my.php"] [unique_id "aZ87Ypjk27yQt3CGcmiWQgAAANY"]
[Thu Feb 26 02:11:46.863782 2026] [:error] [pid 49554:tid 49627] [client 20.104.61.138:43920] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/my.php"] [unique_id "aZ87YttlDT3cCGsQMTc_bQAAABI"]
[Thu Feb 26 02:11:47.695742 2026] [:error] [pid 49770:tid 49829] [client 20.104.61.138:43970] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/my.php"] [unique_id "aZ87Yy7xhdZV4TFeNyttBwAAAIM"]
[Thu Feb 26 02:11:48.413185 2026] [:error] [pid 49770:tid 49830] [client 20.104.61.138:43463] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aZ87ZC7xhdZV4TFeNyttCwAAAIQ"]
[Thu Feb 26 02:11:49.333296 2026] [:error] [pid 49554:tid 49612] [client 20.104.61.138:43972] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aZ87ZdtlDT3cCGsQMTc_cAAAAAM"]
[Thu Feb 26 02:11:49.967575 2026] [:error] [pid 49770:tid 49827] [client 20.104.61.138:44053] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aZ87ZS7xhdZV4TFeNyttEAAAAIE"]
[Thu Feb 26 02:11:50.496875 2026] [:error] [pid 49554:tid 49629] [client 20.104.61.138:43459] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aZ87ZttlDT3cCGsQMTc_dgAAABQ"]
[Thu Feb 26 02:11:51.082017 2026] [:error] [pid 49770:tid 49844] [client 20.104.61.138:44010] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aZ87Zy7xhdZV4TFeNyttFAAAAJI"]
[Thu Feb 26 02:11:51.888735 2026] [:error] [pid 49770:tid 49829] [client 20.104.61.138:44130] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aZ87Zy7xhdZV4TFeNyttGAAAAIM"]
[Thu Feb 26 02:11:52.547007 2026] [:error] [pid 49555:tid 49675] [client 20.104.61.138:44056] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aZ87aNw3_NsD2xC15Yb0mQAAAEw"]
[Thu Feb 26 02:11:53.069913 2026] [:error] [pid 49770:tid 49841] [client 20.104.61.138:43928] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aZ87aS7xhdZV4TFeNyttHQAAAI8"]
[Thu Feb 26 02:11:53.799784 2026] [:error] [pid 49554:tid 49620] [client 20.104.61.138:44037] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aZ87adtlDT3cCGsQMTc_egAAAAs"]
[Thu Feb 26 02:11:54.769527 2026] [:error] [pid 49554:tid 49617] [client 20.104.61.138:43468] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aZ87attlDT3cCGsQMTc_fAAAAAg"]
[Thu Feb 26 02:11:55.629949 2026] [:error] [pid 49770:tid 49844] [client 20.104.61.138:44118] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aZ87ay7xhdZV4TFeNyttJgAAAJI"]
[Thu Feb 26 02:11:56.627932 2026] [:error] [pid 49770:tid 49829] [client 20.104.61.138:44158] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php7"] [unique_id "aZ87bC7xhdZV4TFeNyttKQAAAIM"]
[Thu Feb 26 02:11:57.728930 2026] [:error] [pid 49555:tid 49675] [client 20.104.61.138:43942] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user-new.php"] [unique_id "aZ87bdw3_NsD2xC15Yb0rgAAAEw"]
[Thu Feb 26 02:11:58.315585 2026] [:error] [pid 49555:tid 49651] [client 20.104.61.138:44106] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user-new.php"] [unique_id "aZ87btw3_NsD2xC15Yb0sQAAAEA"]
[Thu Feb 26 02:11:58.994005 2026] [:error] [pid 49770:tid 49827] [client 20.104.61.138:44097] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user-new.php"] [unique_id "aZ87bi7xhdZV4TFeNyttMQAAAIE"]
[Thu Feb 26 02:11:59.706944 2026] [:error] [pid 49555:tid 49660] [client 20.104.61.138:44031] [client 20.104.61.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user-new.php"] [unique_id "aZ87b9w3_NsD2xC15Yb0uQAAAEQ"]
[Thu Feb 26 03:26:14.003186 2026] [:error] [pid 42811:tid 42814] [client 20.220.146.242:40925] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9M1tZ_nGbT8KCNcCARsgAAAMA"]
[Thu Feb 26 03:26:16.167129 2026] [:error] [pid 42715:tid 42777] [client 20.220.146.242:40838] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9M2OFX6j3o5EJ_kZXEfQAAAIQ"]
[Thu Feb 26 03:26:18.700735 2026] [:error] [pid 42714:tid 42768] [client 20.220.146.242:40912] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9M2kQQVhM0bD4pOiQL6wAAAFY"]
[Thu Feb 26 03:26:19.595810 2026] [:error] [pid 42811:tid 42829] [client 20.220.146.242:40905] [client 20.220.146.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9M29Z_nGbT8KCNcCAR0gAAAM8"]
[Thu Feb 26 04:52:56.324626 2026] [:error] [pid 9588:tid 9634] [client 4.204.200.32:27379] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9hKOSfsVC0YxizsTu7iwAAAEg"]
[Thu Feb 26 04:53:01.305216 2026] [:error] [pid 9702:tid 9709] [client 4.204.200.32:27348] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9hLZvL1wp7EOGdesw-xwAAAMM"]
[Thu Feb 26 04:53:02.982572 2026] [:error] [pid 6071:tid 6094] [client 4.204.200.32:56651] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ9hLoQfAzdrpgft075ARQAAARQ"]
[Thu Feb 26 09:19:57.226495 2026] [:error] [pid 3883:tid 3895] [client 188.176.19.135:3267] [client 188.176.19.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.176.19.135, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ-fveA33x90V6yYHajOpwAAAUk"]
[Thu Feb 26 10:23:34.118004 2026] [:error] [pid 3883:tid 3894] [client 4.205.17.183:8139] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-upuA33x90V6yYHaj2IQAAAUg"]
[Thu Feb 26 10:23:34.610913 2026] [:error] [pid 25311:tid 25331] [client 4.205.17.183:8183] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-uptfdM__yZAgJFSs41QAAAZE"]
[Thu Feb 26 10:23:35.053764 2026] [:error] [pid 25311:tid 25317] [client 4.205.17.183:8071] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-up9fdM__yZAgJFSs43AAAAYM"]
[Thu Feb 26 10:23:35.480186 2026] [:error] [pid 55122:tid 55145] [client 4.205.17.183:8096] [client 4.205.17.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-up4LiR0OfjFxvcN-PUwAAANU"]
[Thu Feb 26 10:53:12.107705 2026] [autoindex:error] [pid 55618:tid 55639] [client 20.194.29.45:17927] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 10:53:12.410461 2026] [proxy_fcgi:error] [pid 55618:tid 55625] [client 20.194.29.45:17927] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:53:12.556569 2026] [proxy_fcgi:error] [pid 55618:tid 55638] [client 20.194.29.45:17927] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:53:12.702021 2026] [proxy_fcgi:error] [pid 55618:tid 55631] [client 20.194.29.45:17927] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 10:53:13.651094 2026] [:error] [pid 55618:tid 55645] [client 20.194.29.45:17927] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/01.php"] [unique_id "aZ-1mR61Vrh12f_8oWQ7vwAAARg"]
[Thu Feb 26 10:53:14.259270 2026] [:error] [pid 55051:tid 55072] [client 20.194.29.45:17278] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/01.php"] [unique_id "aZ-1mgmK1w2kZvh5eLHFDAAAAJI"]
[Thu Feb 26 10:53:14.815238 2026] [:error] [pid 55051:tid 55078] [client 20.194.29.45:18059] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/01.php"] [unique_id "aZ-1mgmK1w2kZvh5eLHFDQAAAJg"]
[Thu Feb 26 10:53:15.367367 2026] [:error] [pid 55122:tid 55132] [client 20.194.29.45:3216] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/01.php"] [unique_id "aZ-1m4LiR0OfjFxvcN-YnAAAAMg"]
[Thu Feb 26 11:51:00.930857 2026] [autoindex:error] [pid 25311:tid 25326] [client 86.48.2.117:61924] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Feb 26 12:30:15.532348 2026] [:error] [pid 54990:tid 54993] [client 13.70.40.215:11756] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-editor.php"] [unique_id "aZ_MV3tr2qmt_mBhH2zXjQAAAAA"]
[Thu Feb 26 12:30:16.023348 2026] [:error] [pid 55618:tid 55626] [client 13.70.40.215:12196] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-editor.php"] [unique_id "aZ_MWB61Vrh12f_8oWRirgAAAQU"]
[Thu Feb 26 12:30:16.507626 2026] [:error] [pid 55618:tid 55628] [client 13.70.40.215:24605] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-editor.php"] [unique_id "aZ_MWB61Vrh12f_8oWRisAAAAQc"]
[Thu Feb 26 12:30:17.009559 2026] [:error] [pid 25311:tid 25318] [client 13.70.40.215:17129] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-editor.php"] [unique_id "aZ_MWdfdM__yZAgJFSupGgAAAYQ"]
[Thu Feb 26 12:54:58.589906 2026] [:error] [pid 54991:tid 55022] [client 141.98.11.171:59149] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aZ_SIt4Zx-mJ8gbRB2iIJgAAAEI"]
[Thu Feb 26 12:54:59.691008 2026] [:error] [pid 25311:tid 25327] [client 141.98.11.171:59456] [client 141.98.11.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aZ_SI9fdM__yZAgJFSu_WwAAAY0"]
[Thu Feb 26 13:42:24.772983 2026] [:error] [pid 55051:tid 55076] [client 194.5.82.135:36263] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aZ_dQAmK1w2kZvh5eLHmVAAAAJY"]
[Thu Feb 26 13:42:26.364243 2026] [:error] [pid 25311:tid 25327] [client 194.5.82.136:63089] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aZ_dQtfdM__yZAgJFSvhkAAAAY0"]
[Thu Feb 26 13:42:29.569933 2026] [:error] [pid 54991:tid 55036] [client 194.5.82.125:53953] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aZ_dRd4Zx-mJ8gbRB2iOkwAAAFA"]
[Thu Feb 26 13:42:31.368149 2026] [:error] [pid 3883:tid 3897] [client 194.5.82.159:37061] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aZ_dR-A33x90V6yYHahqcwAAAUs"]
[Thu Feb 26 13:42:32.545544 2026] [:error] [pid 3883:tid 3890] [client 194.5.82.136:44301] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aZ_dSOA33x90V6yYHahqdgAAAUQ"]
[Thu Feb 26 13:42:35.057437 2026] [:error] [pid 3883:tid 3892] [client 194.5.82.130:55779] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aZ_dS-A33x90V6yYHahqfAAAAUY"]
[Thu Feb 26 13:42:37.273706 2026] [:error] [pid 25311:tid 25323] [client 194.5.82.145:63041] [client 194.5.82.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aZ_dTdfdM__yZAgJFSvhpgAAAYk"]
[Thu Feb 26 13:42:38.981625 2026] [:error] [pid 55122:tid 55138] [client 194.5.82.108:22341] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aZ_dToLiR0OfjFxvcN_AbQAAAM4"]
[Thu Feb 26 13:42:42.996455 2026] [:error] [pid 55122:tid 55144] [client 194.5.82.106:37417] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aZ_dUoLiR0OfjFxvcN_AdgAAANQ"]
[Thu Feb 26 13:42:44.166231 2026] [:error] [pid 3883:tid 3906] [client 194.5.82.120:53767] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aZ_dVOA33x90V6yYHahqjQAAAVQ"]
[Thu Feb 26 13:42:58.588742 2026] [:error] [pid 54991:tid 55034] [client 194.5.82.146:43917] [client 194.5.82.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.146, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aZ_dYt4Zx-mJ8gbRB2iOvAAAAE4"]
[Thu Feb 26 13:43:00.068323 2026] [:error] [pid 54991:tid 55026] [client 194.5.82.146:43917] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aZ_dZN4Zx-mJ8gbRB2iOwAAAAEY"]
[Thu Feb 26 13:43:06.821270 2026] [:error] [pid 3883:tid 3895] [client 194.5.82.155:20221] [client 194.5.82.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aZ_dauA33x90V6yYHahquQAAAUk"]
[Thu Feb 26 13:43:20.189477 2026] [:error] [pid 25311:tid 25337] [client 194.5.82.109:39633] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aZ_deNfdM__yZAgJFSvibwAAAZc"]
[Thu Feb 26 13:43:43.070381 2026] [:error] [pid 55618:tid 55630] [client 194.5.82.125:20917] [client 194.5.82.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aZ_djx61Vrh12f_8oWR9-wAAAQk"]
[Thu Feb 26 13:43:53.780612 2026] [:error] [pid 25311:tid 25335] [client 194.5.82.152:38213] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aZ_dmdfdM__yZAgJFSvi-AAAAZU"]
[Thu Feb 26 13:43:55.460737 2026] [:error] [pid 55618:tid 55638] [client 194.5.82.164:59323] [client 194.5.82.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.5.82.164, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ_dmx61Vrh12f_8oWR-EAAAARE"]
[Thu Feb 26 13:43:56.669888 2026] [:error] [pid 55618:tid 55630] [client 194.5.82.164:59323] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZ_dnB61Vrh12f_8oWR-FwAAAQk"]
[Thu Feb 26 13:44:01.883756 2026] [:error] [pid 55618:tid 55636] [client 194.5.82.146:50723] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZ_doR61Vrh12f_8oWR-LgAAAQ8"]
[Thu Feb 26 13:44:07.027891 2026] [:error] [pid 55122:tid 55126] [client 194.5.82.139:51183] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aZ_dp4LiR0OfjFxvcN_A7QAAAMI"]
[Thu Feb 26 13:44:08.555776 2026] [:error] [pid 25311:tid 25317] [client 194.5.82.161:65359] [client 194.5.82.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ_dqNfdM__yZAgJFSvjFQAAAYM"]
[Thu Feb 26 13:44:10.353046 2026] [:error] [pid 3883:tid 3887] [client 194.5.82.105:30015] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aZ_dquA33x90V6yYHahrHgAAAUE"]
[Thu Feb 26 13:44:11.669528 2026] [:error] [pid 3883:tid 3906] [client 194.5.82.122:31017] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZ_dq-A33x90V6yYHahrJAAAAVQ"]
[Thu Feb 26 13:44:14.586863 2026] [:error] [pid 25311:tid 25335] [client 194.5.82.146:31067] [client 194.5.82.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.146, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aZ_drtfdM__yZAgJFSvjJQAAAZU"]
[Thu Feb 26 13:44:19.501277 2026] [:error] [pid 25311:tid 25315] [client 194.5.82.146:31067] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aZ_ds9fdM__yZAgJFSvjQwAAAYE"]
[Thu Feb 26 13:44:22.379851 2026] [:error] [pid 55618:tid 55642] [client 194.5.82.131:41241] [client 194.5.82.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.131, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZ_dth61Vrh12f_8oWR-TgAAARU"]
[Thu Feb 26 13:44:24.979752 2026] [:error] [pid 55618:tid 55636] [client 194.5.82.131:41241] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aZ_duB61Vrh12f_8oWR-WAAAAQ8"]
[Thu Feb 26 13:44:26.763470 2026] [:error] [pid 3883:tid 3897] [client 194.5.82.139:42357] [client 194.5.82.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aZ_duuA33x90V6yYHahrQgAAAUs"]
[Thu Feb 26 13:44:29.087228 2026] [proxy_fcgi:error] [pid 55618:tid 55644] [client 194.5.82.120:39943] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 13:44:31.207837 2026] [proxy_fcgi:error] [pid 55618:tid 55637] [client 194.5.82.120:39943] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 13:44:34.793770 2026] [:error] [pid 55618:tid 55634] [client 194.5.82.120:39943] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZ_dwh61Vrh12f_8oWR-dQAAAQ0"]
[Thu Feb 26 13:44:40.978236 2026] [:error] [pid 54991:tid 55028] [client 194.5.82.123:58601] [client 194.5.82.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aZ_dyN4Zx-mJ8gbRB2iO_AAAAEg"]
[Thu Feb 26 13:44:44.769616 2026] [:error] [pid 3883:tid 3887] [client 194.5.82.120:54751] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aZ_dzOA33x90V6yYHahrjAAAAUE"]
[Thu Feb 26 13:44:47.976833 2026] [:error] [pid 3883:tid 3901] [client 194.5.82.108:31327] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aZ_dz-A33x90V6yYHahrnAAAAU8"]
[Thu Feb 26 13:44:50.462944 2026] [:error] [pid 3883:tid 3894] [client 194.5.82.109:21443] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZ_d0uA33x90V6yYHahrowAAAUg"]
[Thu Feb 26 13:44:52.871578 2026] [:error] [pid 55618:tid 55633] [client 194.5.82.116:52331] [client 194.5.82.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.116, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aZ_d1B61Vrh12f_8oWR-fgAAAQw"]
[Thu Feb 26 13:44:54.180191 2026] [:error] [pid 55618:tid 55625] [client 194.5.82.116:52331] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aZ_d1h61Vrh12f_8oWR-ggAAAQQ"]
[Thu Feb 26 13:45:00.016164 2026] [:error] [pid 55618:tid 55627] [client 194.5.82.106:53883] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aZ_d3B61Vrh12f_8oWR-iwAAAQY"]
[Thu Feb 26 13:45:01.522703 2026] [:error] [pid 25311:tid 25326] [client 194.5.82.143:34485] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZ_d3dfdM__yZAgJFSvj3AAAAYw"]
[Thu Feb 26 13:45:03.572478 2026] [:error] [pid 55618:tid 55621] [client 194.5.82.160:33827] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aZ_d3x61Vrh12f_8oWR-kgAAAQA"]
[Thu Feb 26 13:45:07.397895 2026] [:error] [pid 3883:tid 3894] [client 194.5.82.146:33155] [client 194.5.82.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.146, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aZ_d4-A33x90V6yYHahruQAAAUg"]
[Thu Feb 26 13:45:08.226014 2026] [:error] [pid 3883:tid 3905] [client 194.5.82.146:33155] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aZ_d5OA33x90V6yYHahrxQAAAVM"]
[Thu Feb 26 13:45:10.089168 2026] [:error] [pid 25311:tid 25324] [client 194.5.82.128:52535] [client 194.5.82.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ_d5tfdM__yZAgJFSvkAwAAAYo"]
[Thu Feb 26 13:45:18.381353 2026] [:error] [pid 54990:tid 54998] [client 194.5.82.130:39707] [client 194.5.82.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aZ_d7ntr2qmt_mBhH2zf_gAAAAU"]
[Thu Feb 26 13:45:20.783382 2026] [:error] [pid 55618:tid 55636] [client 194.5.82.152:49761] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aZ_d8B61Vrh12f_8oWR-pQAAAQ8"]
[Thu Feb 26 13:45:21.557141 2026] [:error] [pid 54991:tid 55044] [client 194.5.82.154:48197] [client 194.5.82.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aZ_d8d4Zx-mJ8gbRB2iPGAAAAFg"]
[Thu Feb 26 13:45:23.380920 2026] [:error] [pid 55051:tid 55065] [client 194.5.82.120:48015] [client 194.5.82.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aZ_d8wmK1w2kZvh5eLHm8gAAAIs"]
[Thu Feb 26 13:45:26.323244 2026] [:error] [pid 55051:tid 55066] [client 194.5.82.156:55687] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aZ_d9gmK1w2kZvh5eLHm9AAAAIw"]
[Thu Feb 26 13:45:28.973102 2026] [:error] [pid 3883:tid 3893] [client 194.5.82.137:61321] [client 194.5.82.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aZ_d-OA33x90V6yYHahsAQAAAUc"]
[Thu Feb 26 13:45:32.103067 2026] [:error] [pid 55122:tid 55140] [client 194.5.82.124:63425] [client 194.5.82.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aZ_d_ILiR0OfjFxvcN_BNQAAANA"]
[Thu Feb 26 13:45:33.614799 2026] [:error] [pid 25311:tid 25316] [client 194.5.82.131:63175] [client 194.5.82.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZ_d_dfdM__yZAgJFSvkQgAAAYI"]
[Thu Feb 26 13:45:35.066500 2026] [:error] [pid 25311:tid 25334] [client 194.5.82.136:59537] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aZ_d_9fdM__yZAgJFSvkSQAAAZQ"]
[Thu Feb 26 13:45:38.589483 2026] [:error] [pid 25311:tid 25336] [client 194.5.82.134:65385] [client 194.5.82.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aZ_eAtfdM__yZAgJFSvkXgAAAZY"]
[Thu Feb 26 13:45:41.676546 2026] [:error] [pid 3883:tid 3894] [client 194.5.82.132:46803] [client 194.5.82.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aZ_eBeA33x90V6yYHahsDwAAAUg"]
[Thu Feb 26 13:45:43.695803 2026] [:error] [pid 3883:tid 3905] [client 194.5.82.136:38885] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aZ_eB-A33x90V6yYHahsFwAAAVM"]
[Thu Feb 26 13:45:48.178989 2026] [:error] [pid 3883:tid 3895] [client 194.5.82.150:34747] [client 194.5.82.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.150, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aZ_eDOA33x90V6yYHahsHwAAAUk"]
[Thu Feb 26 13:45:49.257541 2026] [:error] [pid 3883:tid 3900] [client 194.5.82.150:34747] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aZ_eDeA33x90V6yYHahsIQAAAU4"]
[Thu Feb 26 13:45:50.834199 2026] [:error] [pid 55122:tid 55142] [client 194.5.82.156:45795] [client 194.5.82.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aZ_eDoLiR0OfjFxvcN_BOwAAANI"]
[Thu Feb 26 13:45:57.836596 2026] [:error] [pid 55051:tid 55076] [client 194.5.82.146:31891] [client 194.5.82.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 194.5.82.146, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aZ_eFQmK1w2kZvh5eLHnDQAAAJY"]
[Thu Feb 26 13:45:58.391704 2026] [:error] [pid 55051:tid 55068] [client 194.5.82.146:31891] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aZ_eFgmK1w2kZvh5eLHnDgAAAI4"]
[Thu Feb 26 13:45:59.258609 2026] [:error] [pid 55122:tid 55145] [client 194.5.82.105:64405] [client 194.5.82.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aZ_eF4LiR0OfjFxvcN_BRAAAANU"]
[Thu Feb 26 13:46:01.224852 2026] [:error] [pid 55618:tid 55637] [client 194.5.82.161:34379] [client 194.5.82.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aZ_eGR61Vrh12f_8oWR-5QAAARA"]
[Thu Feb 26 13:46:04.540428 2026] [:error] [pid 55618:tid 55629] [client 194.5.82.108:41737] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aZ_eHB61Vrh12f_8oWR-8AAAAQg"]
[Thu Feb 26 13:46:10.383875 2026] [:error] [pid 25311:tid 25335] [client 194.5.82.109:49909] [client 194.5.82.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aZ_eItfdM__yZAgJFSvkhQAAAZU"]
[Thu Feb 26 13:46:13.704007 2026] [:error] [pid 55122:tid 55145] [client 194.5.82.152:20649] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZ_eJYLiR0OfjFxvcN_BUAAAANU"]
[Thu Feb 26 13:46:17.061788 2026] [:error] [pid 54991:tid 55039] [client 194.5.82.169:25827] [client 194.5.82.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aZ_eKd4Zx-mJ8gbRB2iPPAAAAFM"]
[Thu Feb 26 13:46:18.692912 2026] [:error] [pid 54991:tid 55026] [client 194.5.82.164:46319] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aZ_eKt4Zx-mJ8gbRB2iPQAAAAEY"]
[Thu Feb 26 13:46:20.261107 2026] [:error] [pid 25311:tid 25326] [client 194.5.82.135:51207] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZ_eLNfdM__yZAgJFSvkjwAAAYw"]
[Thu Feb 26 13:46:22.224306 2026] [:error] [pid 55051:tid 55064] [client 194.5.82.122:50837] [client 194.5.82.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aZ_eLgmK1w2kZvh5eLHnHQAAAIo"]
[Thu Feb 26 13:46:24.000018 2026] [:error] [pid 55051:tid 55061] [client 194.5.82.116:56557] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aZ_eLwmK1w2kZvh5eLHnIAAAAIc"]
[Thu Feb 26 13:46:26.370659 2026] [:error] [pid 3883:tid 3889] [client 194.5.82.114:65305] [client 194.5.82.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aZ_eMuA33x90V6yYHahsRwAAAUM"]
[Thu Feb 26 13:46:28.771841 2026] [:error] [pid 25311:tid 25322] [client 194.5.82.106:38177] [client 194.5.82.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aZ_eNNfdM__yZAgJFSvksAAAAYg"]
[Thu Feb 26 13:46:31.181748 2026] [:error] [pid 25311:tid 25335] [client 194.5.82.108:43497] [client 194.5.82.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZ_eN9fdM__yZAgJFSvkwQAAAZU"]
[Thu Feb 26 13:46:33.499981 2026] [:error] [pid 54990:tid 55007] [client 194.5.82.147:57949] [client 194.5.82.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aZ_eOXtr2qmt_mBhH2zgGwAAAA4"]
[Thu Feb 26 13:46:35.812343 2026] [proxy_fcgi:error] [pid 55051:tid 55067] [client 194.5.82.141:55591] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 13:46:36.494652 2026] [:error] [pid 55051:tid 55070] [client 194.5.82.141:55591] [client 194.5.82.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aZ_ePAmK1w2kZvh5eLHnNwAAAJA"]
[Thu Feb 26 13:46:43.682052 2026] [:error] [pid 55122:tid 55125] [client 194.5.82.143:43753] [client 194.5.82.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aZ_eQ4LiR0OfjFxvcN_CLQAAAME"]
[Thu Feb 26 13:46:45.272310 2026] [:error] [pid 3883:tid 3907] [client 194.5.82.153:57447] [client 194.5.82.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aZ_eReA33x90V6yYHahspwAAAVU"]
[Thu Feb 26 13:47:02.612369 2026] [autoindex:error] [pid 25311:tid 25315] [client 194.5.82.131:60291] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 13:49:10.203607 2026] [:error] [pid 25311:tid 25329] [client 182.44.12.37:58563] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aZ_e1tfdM__yZAgJFSvnngAAAY8"]
[Thu Feb 26 13:49:24.878034 2026] [authz_core:error] [pid 25311:tid 25324] [client 194.5.82.116:39419] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/
[Thu Feb 26 14:14:44.631350 2026] [:error] [pid 55618:tid 55642] [client 43.157.153.236:59478] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aZ_k1B61Vrh12f_8oWSMBwAAARU"]
[Thu Feb 26 16:49:33.964107 2026] [:error] [pid 55618:tid 55627] [client 43.164.197.209:53778] [client 43.164.197.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaAJHR61Vrh12f_8oWSy6QAAAQY"]
[Thu Feb 26 17:20:29.446105 2026] [:error] [pid 25311:tid 25324] [client 20.63.98.207:36806] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaAQXdfdM__yZAgJFStUnwAAAYo"]
[Thu Feb 26 17:20:29.890544 2026] [:error] [pid 3883:tid 3896] [client 20.63.98.207:36821] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaAQXeA33x90V6yYHaj2hQAAAUo"]
[Thu Feb 26 17:20:30.309609 2026] [:error] [pid 3883:tid 3892] [client 20.63.98.207:36744] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaAQXuA33x90V6yYHaj2igAAAUY"]
[Thu Feb 26 17:20:30.730025 2026] [:error] [pid 55051:tid 55062] [client 20.63.98.207:36808] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaAQXgmK1w2kZvh5eLEjXQAAAIg"]
[Thu Feb 26 17:20:31.152696 2026] [:error] [pid 20419:tid 20433] [client 20.63.98.207:36748] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaAQX-3DVDvMfTYYUBXwIwAAAcs"]
[Thu Feb 26 17:20:31.598638 2026] [:error] [pid 55051:tid 55078] [client 20.63.98.207:36812] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaAQXwmK1w2kZvh5eLEjXwAAAJg"]
[Thu Feb 26 17:20:32.078049 2026] [:error] [pid 25311:tid 25322] [client 20.63.98.207:36739] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaAQYNfdM__yZAgJFStUoAAAAYg"]
[Thu Feb 26 17:20:32.540414 2026] [:error] [pid 25311:tid 25325] [client 20.63.98.207:36839] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaAQYNfdM__yZAgJFStUoQAAAYs"]
[Thu Feb 26 17:20:32.986803 2026] [:error] [pid 3883:tid 3905] [client 20.63.98.207:36756] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaAQYOA33x90V6yYHaj2mQAAAVM"]
[Thu Feb 26 17:20:33.420600 2026] [:error] [pid 3883:tid 3896] [client 20.63.98.207:36682] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaAQYeA33x90V6yYHaj2mwAAAUo"]
[Thu Feb 26 17:20:33.838471 2026] [:error] [pid 20419:tid 20425] [client 20.63.98.207:36755] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaAQYe3DVDvMfTYYUBXwJgAAAcM"]
[Thu Feb 26 17:20:34.267089 2026] [:error] [pid 3883:tid 3892] [client 20.63.98.207:36862] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaAQYuA33x90V6yYHaj2nwAAAUY"]
[Thu Feb 26 17:20:34.680273 2026] [:error] [pid 3883:tid 3897] [client 20.63.98.207:36837] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaAQYuA33x90V6yYHaj2oAAAAUs"]
[Thu Feb 26 17:20:35.102571 2026] [:error] [pid 55122:tid 55138] [client 20.63.98.207:36737] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaAQY4LiR0OfjFxvcN_uagAAAM4"]
[Thu Feb 26 17:20:35.521737 2026] [:error] [pid 55122:tid 55130] [client 20.63.98.207:36736] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaAQY4LiR0OfjFxvcN_uawAAAMY"]
[Thu Feb 26 17:20:35.998490 2026] [:error] [pid 20419:tid 20443] [client 20.63.98.207:36709] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaAQY-3DVDvMfTYYUBXwLAAAAdU"]
[Thu Feb 26 17:20:36.433347 2026] [:error] [pid 55051:tid 55057] [client 20.63.98.207:36754] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaAQZAmK1w2kZvh5eLEjYwAAAIM"]
[Thu Feb 26 17:20:36.897116 2026] [:error] [pid 3883:tid 3894] [client 20.63.98.207:36747] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaAQZOA33x90V6yYHaj2owAAAUg"]
[Thu Feb 26 17:20:37.412074 2026] [:error] [pid 54991:tid 55034] [client 20.63.98.207:36751] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaAQZd4Zx-mJ8gbRB2iuOgAAAE4"]
[Thu Feb 26 17:20:37.860911 2026] [:error] [pid 54991:tid 55028] [client 20.63.98.207:36816] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaAQZd4Zx-mJ8gbRB2iuOwAAAEg"]
[Thu Feb 26 17:20:38.320524 2026] [:error] [pid 54990:tid 54996] [client 20.63.98.207:36849] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaAQZntr2qmt_mBhH2z5CwAAAAM"]
[Thu Feb 26 17:20:38.780325 2026] [:error] [pid 54990:tid 55016] [client 20.63.98.207:36800] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaAQZntr2qmt_mBhH2z5DAAAABc"]
[Thu Feb 26 17:20:39.210495 2026] [:error] [pid 3883:tid 3901] [client 20.63.98.207:36840] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaAQZ-A33x90V6yYHaj2qAAAAU8"]
[Thu Feb 26 17:20:39.640552 2026] [:error] [pid 3883:tid 3890] [client 20.63.98.207:36753] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaAQZ-A33x90V6yYHaj2qQAAAUQ"]
[Thu Feb 26 17:20:40.051629 2026] [:error] [pid 3883:tid 3902] [client 20.63.98.207:36760] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaAQaOA33x90V6yYHaj2qgAAAVA"]
[Thu Feb 26 17:20:40.529691 2026] [:error] [pid 25311:tid 25314] [client 20.63.98.207:36845] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaAQaNfdM__yZAgJFStUpwAAAYA"]
[Thu Feb 26 17:20:40.939473 2026] [:error] [pid 3883:tid 3900] [client 20.63.98.207:36745] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaAQaOA33x90V6yYHaj2qwAAAU4"]
[Thu Feb 26 17:20:41.369683 2026] [:error] [pid 3883:tid 3906] [client 20.63.98.207:36863] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaAQaeA33x90V6yYHaj2rAAAAVQ"]
[Thu Feb 26 17:20:41.931059 2026] [:error] [pid 55051:tid 55064] [client 20.63.98.207:36741] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaAQaQmK1w2kZvh5eLEjcgAAAIo"]
[Thu Feb 26 17:20:42.400540 2026] [:error] [pid 3883:tid 3887] [client 20.63.98.207:36850] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaAQauA33x90V6yYHaj2sAAAAUE"]
[Thu Feb 26 17:20:42.853359 2026] [:error] [pid 55051:tid 55057] [client 20.63.98.207:36829] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaAQagmK1w2kZvh5eLEjdAAAAIM"]
[Thu Feb 26 17:20:43.275546 2026] [:error] [pid 55051:tid 55069] [client 20.63.98.207:36749] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaAQawmK1w2kZvh5eLEjdgAAAI8"]
[Thu Feb 26 17:20:43.747959 2026] [:error] [pid 3883:tid 3910] [client 20.63.98.207:36804] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaAQa-A33x90V6yYHaj2swAAAVg"]
[Thu Feb 26 17:20:44.230656 2026] [:error] [pid 55051:tid 55054] [client 20.63.98.207:36770] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaAQbAmK1w2kZvh5eLEjeAAAAIA"]
[Thu Feb 26 17:20:44.684275 2026] [:error] [pid 20419:tid 20423] [client 20.63.98.207:36860] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaAQbO3DVDvMfTYYUBXwNgAAAcE"]
[Thu Feb 26 17:20:45.128772 2026] [:error] [pid 3883:tid 3901] [client 20.63.98.207:36833] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaAQbeA33x90V6yYHaj2uQAAAU8"]
[Thu Feb 26 17:20:45.553623 2026] [:error] [pid 3883:tid 3890] [client 20.63.98.207:36688] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaAQbeA33x90V6yYHaj2uwAAAUQ"]
[Thu Feb 26 17:20:45.999144 2026] [:error] [pid 3883:tid 3886] [client 20.63.98.207:36704] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaAQbeA33x90V6yYHaj2vwAAAUA"]
[Thu Feb 26 17:20:46.430956 2026] [:error] [pid 3883:tid 3909] [client 20.63.98.207:36853] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaAQbuA33x90V6yYHaj2wQAAAVc"]
[Thu Feb 26 17:20:46.861925 2026] [:error] [pid 55122:tid 55133] [client 20.63.98.207:36826] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaAQboLiR0OfjFxvcN_ubgAAAMk"]
[Thu Feb 26 17:20:47.295523 2026] [:error] [pid 3883:tid 3896] [client 20.63.98.207:36819] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaAQb-A33x90V6yYHaj2xwAAAUo"]
[Thu Feb 26 17:20:47.794832 2026] [:error] [pid 3883:tid 3901] [client 20.63.98.207:36815] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaAQb-A33x90V6yYHaj2zAAAAU8"]
[Thu Feb 26 17:20:48.214124 2026] [:error] [pid 3883:tid 3886] [client 20.63.98.207:36676] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaAQcOA33x90V6yYHaj20AAAAUA"]
[Thu Feb 26 17:20:48.647236 2026] [:error] [pid 25311:tid 25322] [client 20.63.98.207:36690] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaAQcNfdM__yZAgJFStUrwAAAYg"]
[Thu Feb 26 17:20:49.085277 2026] [:error] [pid 3883:tid 3903] [client 20.63.98.207:36854] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaAQceA33x90V6yYHaj21gAAAVE"]
[Thu Feb 26 17:20:49.594206 2026] [:error] [pid 55051:tid 55062] [client 20.63.98.207:36746] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaAQcQmK1w2kZvh5eLEjfAAAAIg"]
[Thu Feb 26 17:20:50.052761 2026] [:error] [pid 3883:tid 3907] [client 20.63.98.207:36673] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaAQcuA33x90V6yYHaj22wAAAVU"]
[Thu Feb 26 17:20:50.505012 2026] [:error] [pid 55051:tid 55064] [client 20.63.98.207:36701] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaAQcgmK1w2kZvh5eLEjgQAAAIo"]
[Thu Feb 26 17:20:50.974037 2026] [:error] [pid 55051:tid 55066] [client 20.63.98.207:36809] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaAQcgmK1w2kZvh5eLEjhQAAAIw"]
[Thu Feb 26 17:20:51.459482 2026] [:error] [pid 55051:tid 55055] [client 20.63.98.207:36680] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaAQcwmK1w2kZvh5eLEjigAAAIE"]
[Thu Feb 26 17:20:51.973314 2026] [:error] [pid 55051:tid 55063] [client 20.63.98.207:36758] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaAQcwmK1w2kZvh5eLEjkwAAAIk"]
[Thu Feb 26 17:20:52.406114 2026] [:error] [pid 25311:tid 25314] [client 20.63.98.207:36637] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaAQdNfdM__yZAgJFStUuQAAAYA"]
[Thu Feb 26 17:20:52.906888 2026] [:error] [pid 25311:tid 25320] [client 20.63.98.207:36743] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/work.php"] [unique_id "aaAQdNfdM__yZAgJFStUvAAAAYY"]
[Thu Feb 26 17:20:53.377451 2026] [:error] [pid 55618:tid 55640] [client 20.63.98.207:36846] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/work.php"] [unique_id "aaAQdR61Vrh12f_8oWS6EAAAARM"]
[Thu Feb 26 17:20:53.830249 2026] [:error] [pid 25311:tid 25329] [client 20.63.98.207:36706] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/work.php"] [unique_id "aaAQddfdM__yZAgJFStUvwAAAY8"]
[Thu Feb 26 17:20:54.302834 2026] [:error] [pid 3883:tid 3910] [client 20.63.98.207:36740] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/work.php"] [unique_id "aaAQduA33x90V6yYHaj26QAAAVg"]
[Thu Feb 26 17:20:54.806283 2026] [:error] [pid 3883:tid 3905] [client 20.63.98.207:36784] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaAQduA33x90V6yYHaj27QAAAVM"]
[Thu Feb 26 17:20:55.261883 2026] [:error] [pid 54991:tid 55039] [client 20.63.98.207:36855] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaAQd94Zx-mJ8gbRB2iuQgAAAFM"]
[Thu Feb 26 17:20:55.824120 2026] [:error] [pid 25311:tid 25337] [client 20.63.98.207:36778] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaAQd9fdM__yZAgJFStUwQAAAZc"]
[Thu Feb 26 17:20:56.361180 2026] [:error] [pid 25311:tid 25323] [client 20.63.98.207:36710] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaAQeNfdM__yZAgJFStUxAAAAYk"]
[Thu Feb 26 17:20:56.911548 2026] [:error] [pid 55122:tid 55134] [client 20.63.98.207:36857] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaAQeILiR0OfjFxvcN_ucAAAAMo"]
[Thu Feb 26 17:20:57.470972 2026] [:error] [pid 55122:tid 55127] [client 20.63.98.207:36814] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaAQeYLiR0OfjFxvcN_udQAAAMM"]
[Thu Feb 26 17:20:57.947095 2026] [:error] [pid 20419:tid 20446] [client 20.63.98.207:36775] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaAQee3DVDvMfTYYUBXwUQAAAdg"]
[Thu Feb 26 17:20:58.516350 2026] [:error] [pid 20419:tid 20436] [client 20.63.98.207:36807] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaAQeu3DVDvMfTYYUBXwVAAAAc4"]
[Thu Feb 26 17:20:59.266864 2026] [:error] [pid 55122:tid 55137] [client 20.63.98.207:36685] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaAQe4LiR0OfjFxvcN_ueQAAAM0"]
[Thu Feb 26 17:20:59.906933 2026] [:error] [pid 25311:tid 25318] [client 20.63.98.207:36824] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaAQe9fdM__yZAgJFStUywAAAYQ"]
[Thu Feb 26 17:21:00.403492 2026] [:error] [pid 20419:tid 20441] [client 20.63.98.207:36842] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaAQfO3DVDvMfTYYUBXwWQAAAdM"]
[Thu Feb 26 17:21:00.851676 2026] [:error] [pid 54990:tid 54994] [client 20.63.98.207:36675] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaAQfHtr2qmt_mBhH2z5EAAAAAE"]
[Thu Feb 26 17:21:01.479510 2026] [:error] [pid 20419:tid 20427] [client 20.63.98.207:36841] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaAQfe3DVDvMfTYYUBXwXgAAAcU"]
[Thu Feb 26 17:21:01.932563 2026] [:error] [pid 55122:tid 55126] [client 20.63.98.207:36762] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaAQfYLiR0OfjFxvcN_ugAAAAMI"]
[Thu Feb 26 17:21:02.357088 2026] [:error] [pid 55618:tid 55633] [client 20.63.98.207:36696] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaAQfh61Vrh12f_8oWS6GgAAAQw"]
[Thu Feb 26 17:21:02.866115 2026] [:error] [pid 55122:tid 55143] [client 20.63.98.207:36818] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaAQfoLiR0OfjFxvcN_ugwAAANM"]
[Thu Feb 26 17:21:03.281509 2026] [:error] [pid 20419:tid 20437] [client 20.63.98.207:36769] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaAQf-3DVDvMfTYYUBXwZAAAAc8"]
[Thu Feb 26 17:21:03.701693 2026] [:error] [pid 55051:tid 55071] [client 20.63.98.207:36768] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaAQfwmK1w2kZvh5eLEjqAAAAJE"]
[Thu Feb 26 17:21:04.123887 2026] [:error] [pid 3883:tid 3891] [client 20.63.98.207:36691] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaAQgOA33x90V6yYHaj27wAAAUU"]
[Thu Feb 26 17:21:04.544719 2026] [:error] [pid 25311:tid 25321] [client 20.63.98.207:36724] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaAQgNfdM__yZAgJFStUzQAAAYc"]
[Thu Feb 26 17:21:04.962401 2026] [:error] [pid 55618:tid 55638] [client 20.63.98.207:36805] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAQgB61Vrh12f_8oWS6HAAAARE"]
[Thu Feb 26 17:21:05.377141 2026] [:error] [pid 55618:tid 55624] [client 20.63.98.207:36684] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAQgR61Vrh12f_8oWS6HQAAAQM"]
[Thu Feb 26 17:21:05.789378 2026] [:error] [pid 20419:tid 20432] [client 20.63.98.207:36718] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAQge3DVDvMfTYYUBXwbAAAAco"]
[Thu Feb 26 17:21:06.236446 2026] [:error] [pid 20419:tid 20425] [client 20.63.98.207:36856] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAQgu3DVDvMfTYYUBXwbwAAAcM"]
[Thu Feb 26 17:21:06.682827 2026] [:error] [pid 25311:tid 25319] [client 20.63.98.207:36848] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaAQgtfdM__yZAgJFStU2gAAAYU"]
[Thu Feb 26 17:21:07.097875 2026] [:error] [pid 55122:tid 55136] [client 20.63.98.207:36612] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaAQg4LiR0OfjFxvcN_uhAAAAMw"]
[Thu Feb 26 17:21:07.588737 2026] [:error] [pid 20419:tid 20434] [client 20.63.98.207:36750] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaAQg-3DVDvMfTYYUBXweAAAAcw"]
[Thu Feb 26 17:21:08.012144 2026] [:error] [pid 20419:tid 20440] [client 20.63.98.207:36822] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaAQhO3DVDvMfTYYUBXweQAAAdI"]
[Thu Feb 26 17:21:08.425314 2026] [:error] [pid 20419:tid 20425] [client 20.63.98.207:36773] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaAQhO3DVDvMfTYYUBXwfgAAAcM"]
[Thu Feb 26 17:21:08.865535 2026] [:error] [pid 55618:tid 55642] [client 20.63.98.207:36834] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaAQhB61Vrh12f_8oWS6IwAAARU"]
[Thu Feb 26 17:21:09.288609 2026] [:error] [pid 55618:tid 55628] [client 20.63.98.207:36817] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaAQhR61Vrh12f_8oWS6JwAAAQc"]
[Thu Feb 26 17:21:09.727483 2026] [:error] [pid 55618:tid 55629] [client 20.63.98.207:36724] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaAQhR61Vrh12f_8oWS6KAAAAQg"]
[Thu Feb 26 17:21:10.202073 2026] [:error] [pid 55051:tid 55078] [client 20.63.98.207:36771] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaAQhgmK1w2kZvh5eLEjrAAAAJg"]
[Thu Feb 26 17:21:10.619828 2026] [:error] [pid 54991:tid 55044] [client 20.63.98.207:36799] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaAQht4Zx-mJ8gbRB2iuTgAAAFg"]
[Thu Feb 26 17:21:11.070167 2026] [:error] [pid 55051:tid 55062] [client 20.63.98.207:36798] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaAQhwmK1w2kZvh5eLEjsQAAAIg"]
[Thu Feb 26 17:21:11.520082 2026] [:error] [pid 55618:tid 55633] [client 20.63.98.207:36782] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaAQhx61Vrh12f_8oWS6LQAAAQw"]
[Thu Feb 26 17:21:11.947698 2026] [:error] [pid 55051:tid 55065] [client 20.63.98.207:36687] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaAQhwmK1w2kZvh5eLEjswAAAIs"]
[Thu Feb 26 17:21:12.366709 2026] [:error] [pid 3883:tid 3910] [client 20.63.98.207:36723] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaAQiOA33x90V6yYHaj29gAAAVg"]
[Thu Feb 26 17:21:12.794921 2026] [:error] [pid 55051:tid 55073] [client 20.63.98.207:36788] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaAQiAmK1w2kZvh5eLEjuAAAAJM"]
[Thu Feb 26 17:21:13.213082 2026] [:error] [pid 55051:tid 55055] [client 20.63.98.207:36695] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaAQiQmK1w2kZvh5eLEjuwAAAIE"]
[Thu Feb 26 17:21:13.632989 2026] [:error] [pid 25311:tid 25318] [client 20.63.98.207:36742] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaAQidfdM__yZAgJFStU7wAAAYQ"]
[Thu Feb 26 17:21:14.076315 2026] [:error] [pid 3883:tid 3907] [client 20.63.98.207:36838] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaAQiuA33x90V6yYHaj2-gAAAVU"]
[Thu Feb 26 17:21:14.518975 2026] [:error] [pid 3883:tid 3894] [client 20.63.98.207:36835] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaAQiuA33x90V6yYHaj2_QAAAUg"]
[Thu Feb 26 17:21:14.956898 2026] [:error] [pid 3883:tid 3898] [client 20.63.98.207:36681] [client 20.63.98.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaAQiuA33x90V6yYHaj3AQAAAUw"]
[Thu Feb 26 17:56:02.555856 2026] [:error] [pid 25311:tid 25333] [client 4.204.200.32:64188] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x123.php"] [unique_id "aaAYstfdM__yZAgJFStkLgAAAZM"]
[Thu Feb 26 17:56:03.406657 2026] [:error] [pid 20419:tid 20437] [client 4.204.200.32:64150] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x123.php"] [unique_id "aaAYs-3DVDvMfTYYUBX8bwAAAc8"]
[Thu Feb 26 17:56:04.109562 2026] [:error] [pid 20419:tid 20431] [client 4.204.200.32:64189] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x123.php"] [unique_id "aaAYtO3DVDvMfTYYUBX8cAAAAck"]
[Thu Feb 26 17:56:04.619350 2026] [:error] [pid 3883:tid 3908] [client 4.204.200.32:64131] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x123.php"] [unique_id "aaAYtOA33x90V6yYHagR7wAAAVY"]
[Thu Feb 26 17:56:05.628719 2026] [:error] [pid 25311:tid 25326] [client 4.204.200.32:64177] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaAYtdfdM__yZAgJFStkNQAAAYw"]
[Thu Feb 26 17:56:06.175999 2026] [:error] [pid 25311:tid 25334] [client 4.204.200.32:64248] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaAYttfdM__yZAgJFStkNwAAAZQ"]
[Thu Feb 26 17:56:06.951148 2026] [:error] [pid 55051:tid 55066] [client 4.204.200.32:64249] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaAYtgmK1w2kZvh5eLE36QAAAIw"]
[Thu Feb 26 17:56:07.692616 2026] [:error] [pid 3883:tid 3893] [client 4.204.200.32:64191] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaAYt-A33x90V6yYHagR_AAAAUc"]
[Thu Feb 26 17:56:08.536482 2026] [:error] [pid 3883:tid 3894] [client 4.204.200.32:64234] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aaAYuOA33x90V6yYHagSAQAAAUg"]
[Thu Feb 26 17:56:09.467862 2026] [:error] [pid 3883:tid 3898] [client 4.204.200.32:64183] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aaAYueA33x90V6yYHagSCgAAAUw"]
[Thu Feb 26 17:56:10.575995 2026] [:error] [pid 55618:tid 55633] [client 4.204.200.32:64136] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aaAYuh61Vrh12f_8oWTEWQAAAQw"]
[Thu Feb 26 17:56:11.506452 2026] [:error] [pid 3883:tid 3895] [client 4.204.200.32:64192] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aaAYu-A33x90V6yYHagSGgAAAUk"]
[Thu Feb 26 17:56:12.428332 2026] [:error] [pid 55618:tid 55634] [client 4.204.200.32:64251] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaAYvB61Vrh12f_8oWTEYgAAAQ0"]
[Thu Feb 26 17:56:13.120782 2026] [:error] [pid 55618:tid 55645] [client 4.204.200.32:64172] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaAYvR61Vrh12f_8oWTEZwAAARg"]
[Thu Feb 26 17:56:13.612928 2026] [:error] [pid 55618:tid 55625] [client 4.204.200.32:64245] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaAYvR61Vrh12f_8oWTEbgAAAQQ"]
[Thu Feb 26 17:56:14.212560 2026] [:error] [pid 3883:tid 3907] [client 4.204.200.32:64176] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaAYvuA33x90V6yYHagSJgAAAVU"]
[Thu Feb 26 17:56:14.697224 2026] [:error] [pid 3883:tid 3895] [client 4.204.200.32:64128] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaAYvuA33x90V6yYHagSMQAAAUk"]
[Thu Feb 26 17:56:15.204735 2026] [:error] [pid 54991:tid 55041] [client 4.204.200.32:64254] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaAYv94Zx-mJ8gbRB2i2JQAAAFU"]
[Thu Feb 26 17:56:15.858579 2026] [:error] [pid 20419:tid 20441] [client 4.204.200.32:64141] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaAYv-3DVDvMfTYYUBX8jgAAAdM"]
[Thu Feb 26 17:56:16.496405 2026] [:error] [pid 54990:tid 55016] [client 4.204.200.32:64182] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaAYwHtr2qmt_mBhH2wAaQAAABc"]
[Thu Feb 26 17:56:17.210825 2026] [:error] [pid 54990:tid 55008] [client 4.204.200.32:64154] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaAYwXtr2qmt_mBhH2wAbAAAAA8"]
[Thu Feb 26 17:56:18.076746 2026] [:error] [pid 54991:tid 55023] [client 4.204.200.32:64203] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaAYwt4Zx-mJ8gbRB2i2LQAAAEM"]
[Thu Feb 26 17:56:18.666724 2026] [:error] [pid 54991:tid 55043] [client 4.204.200.32:64153] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaAYwt4Zx-mJ8gbRB2i2MQAAAFc"]
[Thu Feb 26 17:56:19.614132 2026] [:error] [pid 20419:tid 20440] [client 4.204.200.32:64147] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaAYw-3DVDvMfTYYUBX8lgAAAdI"]
[Thu Feb 26 17:56:20.198017 2026] [:error] [pid 55618:tid 55629] [client 4.204.200.32:64164] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aaAYxB61Vrh12f_8oWTEjgAAAQg"]
[Thu Feb 26 17:56:20.672350 2026] [:error] [pid 25311:tid 25316] [client 4.204.200.32:64155] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aaAYxNfdM__yZAgJFStkSAAAAYI"]
[Thu Feb 26 17:56:21.182102 2026] [:error] [pid 3883:tid 3897] [client 4.204.200.32:64178] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aaAYxeA33x90V6yYHagSRwAAAUs"]
[Thu Feb 26 17:56:21.824811 2026] [:error] [pid 55051:tid 55062] [client 4.204.200.32:25168] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/samiri.php"] [unique_id "aaAYxQmK1w2kZvh5eLE4AAAAAIg"]
[Thu Feb 26 17:56:22.455042 2026] [:error] [pid 55051:tid 55078] [client 4.204.200.32:64170] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaAYxgmK1w2kZvh5eLE4BQAAAJg"]
[Thu Feb 26 17:56:23.096938 2026] [:error] [pid 55051:tid 55060] [client 4.204.200.32:64250] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaAYxwmK1w2kZvh5eLE4CwAAAIY"]
[Thu Feb 26 17:56:23.825628 2026] [:error] [pid 20419:tid 20435] [client 4.204.200.32:64252] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaAYx-3DVDvMfTYYUBX8nAAAAc0"]
[Thu Feb 26 17:56:24.500345 2026] [:error] [pid 20419:tid 20443] [client 4.204.200.32:64224] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaAYyO3DVDvMfTYYUBX8ngAAAdU"]
[Thu Feb 26 17:56:25.009119 2026] [:error] [pid 20419:tid 20439] [client 4.204.200.32:25176] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aaAYye3DVDvMfTYYUBX8oQAAAdE"]
[Thu Feb 26 17:56:25.741911 2026] [:error] [pid 55051:tid 55070] [client 4.204.200.32:64212] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aaAYyQmK1w2kZvh5eLE4DwAAAJA"]
[Thu Feb 26 17:56:26.357621 2026] [:error] [pid 54990:tid 55009] [client 4.204.200.32:25153] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aaAYyntr2qmt_mBhH2wAfQAAABA"]
[Thu Feb 26 17:56:27.016027 2026] [:error] [pid 55122:tid 55125] [client 4.204.200.32:64185] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "aaAYy4LiR0OfjFxvcN_2JwAAAME"]
[Thu Feb 26 17:56:27.587317 2026] [:error] [pid 55051:tid 55074] [client 4.204.200.32:25191] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaAYywmK1w2kZvh5eLE4HgAAAJQ"]
[Thu Feb 26 17:56:28.201623 2026] [:error] [pid 25311:tid 25337] [client 4.204.200.32:25172] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaAYzNfdM__yZAgJFStkVQAAAZc"]
[Thu Feb 26 17:56:29.087504 2026] [:error] [pid 54991:tid 55040] [client 4.204.200.32:64230] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaAYzd4Zx-mJ8gbRB2i2PgAAAFQ"]
[Thu Feb 26 17:56:29.921375 2026] [:error] [pid 3883:tid 3903] [client 4.204.200.32:64140] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaAYzeA33x90V6yYHagShQAAAVE"]
[Thu Feb 26 17:56:30.624292 2026] [:error] [pid 54990:tid 54999] [client 4.204.200.32:64143] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaAYzntr2qmt_mBhH2wAhAAAAAY"]
[Thu Feb 26 17:56:31.212253 2026] [:error] [pid 25311:tid 25315] [client 4.204.200.32:64237] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaAYz9fdM__yZAgJFStkXAAAAYE"]
[Thu Feb 26 17:56:31.929889 2026] [:error] [pid 25311:tid 25328] [client 4.204.200.32:25189] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaAYz9fdM__yZAgJFStkXQAAAY4"]
[Thu Feb 26 17:56:32.489072 2026] [:error] [pid 55051:tid 55068] [client 4.204.200.32:64130] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaAY0AmK1w2kZvh5eLE4JAAAAI4"]
[Thu Feb 26 17:56:33.051093 2026] [:error] [pid 55122:tid 55137] [client 4.204.200.32:64186] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaAY0YLiR0OfjFxvcN_2LQAAAM0"]
[Thu Feb 26 17:56:33.885589 2026] [:error] [pid 3883:tid 3890] [client 4.204.200.32:25193] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaAY0eA33x90V6yYHagSlQAAAUQ"]
[Thu Feb 26 17:56:34.586281 2026] [:error] [pid 3883:tid 3904] [client 4.204.200.32:64134] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaAY0uA33x90V6yYHagSmAAAAVI"]
[Thu Feb 26 17:56:35.489451 2026] [:error] [pid 55122:tid 55126] [client 4.204.200.32:64220] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaAY04LiR0OfjFxvcN_2LwAAAMI"]
[Thu Feb 26 17:56:36.504900 2026] [:error] [pid 55618:tid 55627] [client 4.204.200.32:64229] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAY1B61Vrh12f_8oWTEzgAAAQY"]
[Thu Feb 26 17:56:37.096491 2026] [:error] [pid 54991:tid 55032] [client 4.204.200.32:64163] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAY1d4Zx-mJ8gbRB2i2QwAAAEw"]
[Thu Feb 26 17:56:37.640856 2026] [:error] [pid 54991:tid 55029] [client 4.204.200.32:25090] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAY1d4Zx-mJ8gbRB2i2RwAAAEk"]
[Thu Feb 26 17:56:38.218755 2026] [:error] [pid 54991:tid 55023] [client 4.204.200.32:64223] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaAY1t4Zx-mJ8gbRB2i2SQAAAEM"]
[Thu Feb 26 17:56:38.846719 2026] [:error] [pid 54991:tid 55043] [client 4.204.200.32:25100] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shas.php"] [unique_id "aaAY1t4Zx-mJ8gbRB2i2SwAAAFc"]
[Thu Feb 26 17:56:39.591101 2026] [:error] [pid 3883:tid 3907] [client 4.204.200.32:64162] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shas.php"] [unique_id "aaAY1-A33x90V6yYHagSpgAAAVU"]
[Thu Feb 26 17:56:40.258570 2026] [:error] [pid 55122:tid 55138] [client 4.204.200.32:25154] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shas.php"] [unique_id "aaAY2ILiR0OfjFxvcN_2MgAAAM4"]
[Thu Feb 26 17:56:40.847783 2026] [:error] [pid 55051:tid 55066] [client 4.204.200.32:64139] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shas.php"] [unique_id "aaAY2AmK1w2kZvh5eLE4LwAAAIw"]
[Thu Feb 26 17:56:41.696276 2026] [:error] [pid 20419:tid 20444] [client 4.204.200.32:64160] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaAY2e3DVDvMfTYYUBX8vAAAAdY"]
[Thu Feb 26 17:56:42.395778 2026] [:error] [pid 55051:tid 55075] [client 4.204.200.32:64211] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaAY2gmK1w2kZvh5eLE4NgAAAJU"]
[Thu Feb 26 17:56:42.918510 2026] [:error] [pid 55051:tid 55065] [client 4.204.200.32:25201] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaAY2gmK1w2kZvh5eLE4NwAAAIs"]
[Thu Feb 26 17:56:43.566315 2026] [:error] [pid 55618:tid 55622] [client 4.204.200.32:64219] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaAY2x61Vrh12f_8oWTE5gAAAQE"]
[Thu Feb 26 17:56:44.392008 2026] [:error] [pid 54990:tid 55014] [client 4.204.200.32:64193] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aaAY3Htr2qmt_mBhH2wAjgAAABU"]
[Thu Feb 26 17:56:45.198136 2026] [:error] [pid 3883:tid 3897] [client 4.204.200.32:64173] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aaAY3eA33x90V6yYHagStAAAAUs"]
[Thu Feb 26 17:56:45.778306 2026] [:error] [pid 20419:tid 20431] [client 4.204.200.32:64148] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aaAY3e3DVDvMfTYYUBX8xgAAAck"]
[Thu Feb 26 17:56:46.610793 2026] [:error] [pid 3883:tid 3898] [client 4.204.200.32:25107] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aaAY3uA33x90V6yYHagStwAAAUw"]
[Thu Feb 26 17:56:47.255090 2026] [:error] [pid 20419:tid 20429] [client 4.204.200.32:64138] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/er.php"] [unique_id "aaAY3-3DVDvMfTYYUBX8yAAAAcc"]
[Thu Feb 26 17:56:47.858978 2026] [:error] [pid 55051:tid 55054] [client 4.204.200.32:64169] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/er.php"] [unique_id "aaAY3wmK1w2kZvh5eLE4RQAAAIA"]
[Thu Feb 26 17:56:48.488784 2026] [:error] [pid 3883:tid 3895] [client 4.204.200.32:25103] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/er.php"] [unique_id "aaAY4OA33x90V6yYHagSugAAAUk"]
[Thu Feb 26 17:56:49.020114 2026] [:error] [pid 20419:tid 20436] [client 4.204.200.32:62586] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/er.php"] [unique_id "aaAY4e3DVDvMfTYYUBX8zAAAAc4"]
[Thu Feb 26 17:56:49.723135 2026] [:error] [pid 25311:tid 25332] [client 4.204.200.32:64144] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fault.php"] [unique_id "aaAY4dfdM__yZAgJFStkhAAAAZI"]
[Thu Feb 26 17:56:50.218244 2026] [:error] [pid 55618:tid 55624] [client 4.204.200.32:25165] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fault.php"] [unique_id "aaAY4h61Vrh12f_8oWTE7wAAAQM"]
[Thu Feb 26 17:56:50.702106 2026] [:error] [pid 55051:tid 55059] [client 4.204.200.32:64241] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fault.php"] [unique_id "aaAY4gmK1w2kZvh5eLE4VwAAAIU"]
[Thu Feb 26 17:56:51.239803 2026] [:error] [pid 55051:tid 55056] [client 4.204.200.32:64239] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fault.php"] [unique_id "aaAY4wmK1w2kZvh5eLE4XQAAAII"]
[Thu Feb 26 17:56:51.897803 2026] [:error] [pid 55051:tid 55059] [client 4.204.200.32:64240] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaAY4wmK1w2kZvh5eLE4XwAAAIU"]
[Thu Feb 26 17:56:52.405757 2026] [:error] [pid 3883:tid 3891] [client 4.204.200.32:25105] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaAY5OA33x90V6yYHagSxgAAAUU"]
[Thu Feb 26 17:56:53.171881 2026] [:error] [pid 25311:tid 25331] [client 4.204.200.32:25158] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaAY5dfdM__yZAgJFStkjwAAAZE"]
[Thu Feb 26 17:56:53.619312 2026] [:error] [pid 25311:tid 25321] [client 4.204.200.32:25177] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaAY5dfdM__yZAgJFStkkAAAAYc"]
[Thu Feb 26 17:56:54.259672 2026] [:error] [pid 55051:tid 55064] [client 4.204.200.32:64231] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaAY5gmK1w2kZvh5eLE4ZAAAAIo"]
[Thu Feb 26 17:56:54.745075 2026] [:error] [pid 55051:tid 55056] [client 4.204.200.32:64145] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaAY5gmK1w2kZvh5eLE4ZQAAAII"]
[Thu Feb 26 17:56:55.311744 2026] [:error] [pid 20419:tid 20423] [client 4.204.200.32:64200] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaAY5-3DVDvMfTYYUBX82AAAAcE"]
[Thu Feb 26 17:56:56.037571 2026] [:error] [pid 25311:tid 25320] [client 4.204.200.32:64246] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaAY6NfdM__yZAgJFStkkQAAAYY"]
[Thu Feb 26 17:56:56.673326 2026] [:error] [pid 54991:tid 55026] [client 4.204.200.32:64167] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/leuk.php"] [unique_id "aaAY6N4Zx-mJ8gbRB2i2WQAAAEY"]
[Thu Feb 26 17:56:57.465537 2026] [:error] [pid 55122:tid 55138] [client 4.204.200.32:25192] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/leuk.php"] [unique_id "aaAY6YLiR0OfjFxvcN_2PQAAAM4"]
[Thu Feb 26 17:56:58.042536 2026] [:error] [pid 20419:tid 20440] [client 4.204.200.32:25215] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/leuk.php"] [unique_id "aaAY6u3DVDvMfTYYUBX83AAAAdI"]
[Thu Feb 26 17:56:58.588076 2026] [:error] [pid 55051:tid 55064] [client 4.204.200.32:25156] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/leuk.php"] [unique_id "aaAY6gmK1w2kZvh5eLE4bgAAAIo"]
[Thu Feb 26 17:56:59.161098 2026] [:error] [pid 3883:tid 3894] [client 4.204.200.32:25157] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaAY6-A33x90V6yYHagS3gAAAUg"]
[Thu Feb 26 17:56:59.733749 2026] [:error] [pid 25311:tid 25317] [client 4.204.200.32:25099] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaAY69fdM__yZAgJFStkoAAAAYM"]
[Thu Feb 26 17:57:00.405558 2026] [:error] [pid 25311:tid 25337] [client 4.204.200.32:64129] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaAY7NfdM__yZAgJFStkoQAAAZc"]
[Thu Feb 26 17:57:01.285497 2026] [:error] [pid 55051:tid 55071] [client 4.204.200.32:64215] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaAY7QmK1w2kZvh5eLE4cAAAAJE"]
[Thu Feb 26 17:57:01.880766 2026] [:error] [pid 3883:tid 3886] [client 4.204.200.32:64199] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "aaAY7eA33x90V6yYHagS5wAAAUA"]
[Thu Feb 26 17:57:10.081798 2026] [:error] [pid 3883:tid 3889] [client 4.204.200.32:25159] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aaAY9uA33x90V6yYHagTBQAAAUM"]
[Thu Feb 26 17:57:10.819581 2026] [:error] [pid 3883:tid 3888] [client 4.204.200.32:25122] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aaAY9uA33x90V6yYHagTFgAAAUI"]
[Thu Feb 26 17:57:11.474016 2026] [:error] [pid 25311:tid 25336] [client 4.204.200.32:64228] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aaAY99fdM__yZAgJFStkzQAAAZY"]
[Thu Feb 26 17:57:12.287571 2026] [:error] [pid 25311:tid 25314] [client 4.204.200.32:64195] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lul.php"] [unique_id "aaAY-NfdM__yZAgJFStk0AAAAYA"]
[Thu Feb 26 17:57:12.804193 2026] [:error] [pid 55618:tid 55637] [client 4.204.200.32:64159] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaAY-B61Vrh12f_8oWTFBgAAARA"]
[Thu Feb 26 17:57:13.584816 2026] [:error] [pid 55122:tid 55136] [client 4.204.200.32:64202] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaAY-YLiR0OfjFxvcN_2TwAAAMw"]
[Thu Feb 26 17:57:14.094154 2026] [:error] [pid 25311:tid 25328] [client 4.204.200.32:64197] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaAY-tfdM__yZAgJFStk0gAAAY4"]
[Thu Feb 26 17:57:15.307742 2026] [:error] [pid 54990:tid 55014] [client 4.204.200.32:64180] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaAY-3tr2qmt_mBhH2wApAAAABU"]
[Thu Feb 26 17:57:15.897807 2026] [:error] [pid 25311:tid 25334] [client 4.204.200.32:64222] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaAY-9fdM__yZAgJFStk1QAAAZQ"]
[Thu Feb 26 17:57:16.456274 2026] [:error] [pid 3883:tid 3897] [client 4.204.200.32:62535] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaAY_OA33x90V6yYHagTQAAAAUs"]
[Thu Feb 26 17:57:17.136445 2026] [:error] [pid 20419:tid 20432] [client 4.204.200.32:64190] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaAY_e3DVDvMfTYYUBX8-QAAAco"]
[Thu Feb 26 17:57:17.927186 2026] [:error] [pid 20419:tid 20437] [client 4.204.200.32:64216] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaAY_e3DVDvMfTYYUBX8-gAAAc8"]
[Thu Feb 26 17:57:18.885165 2026] [:error] [pid 20419:tid 20423] [client 4.204.200.32:64232] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aaAY_u3DVDvMfTYYUBX8-wAAAcE"]
[Thu Feb 26 17:57:19.515930 2026] [:error] [pid 3883:tid 3894] [client 4.204.200.32:25095] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aaAY_-A33x90V6yYHagTSwAAAUg"]
[Thu Feb 26 17:57:20.119690 2026] [:error] [pid 3883:tid 3908] [client 4.204.200.32:64174] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aaAZAOA33x90V6yYHagTTQAAAVY"]
[Thu Feb 26 17:57:20.725784 2026] [:error] [pid 3883:tid 3906] [client 4.204.200.32:64165] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ya.php"] [unique_id "aaAZAOA33x90V6yYHagTVgAAAVQ"]
[Thu Feb 26 17:57:21.356511 2026] [:error] [pid 55051:tid 55072] [client 4.204.200.32:64209] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaAZAQmK1w2kZvh5eLE4uwAAAJI"]
[Thu Feb 26 17:57:22.300767 2026] [:error] [pid 3883:tid 3899] [client 4.204.200.32:64157] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaAZAuA33x90V6yYHagTWwAAAU0"]
[Thu Feb 26 17:57:23.127093 2026] [:error] [pid 54990:tid 55015] [client 4.204.200.32:64206] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaAZA3tr2qmt_mBhH2wAswAAABY"]
[Thu Feb 26 17:57:23.683001 2026] [:error] [pid 3883:tid 3887] [client 4.204.200.32:64235] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaAZA-A33x90V6yYHagTaAAAAUE"]
[Thu Feb 26 17:57:24.494348 2026] [:error] [pid 54991:tid 55038] [client 4.204.200.32:25151] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaAZBN4Zx-mJ8gbRB2i2mwAAAFI"]
[Thu Feb 26 17:57:25.006977 2026] [:error] [pid 55051:tid 55063] [client 4.204.200.32:25094] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaAZBQmK1w2kZvh5eLE4zgAAAIk"]
[Thu Feb 26 17:57:25.578014 2026] [:error] [pid 55051:tid 55078] [client 4.204.200.32:25142] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaAZBQmK1w2kZvh5eLE4zwAAAJg"]
[Thu Feb 26 17:57:26.217770 2026] [:error] [pid 3883:tid 3890] [client 4.204.200.32:25198] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaAZBuA33x90V6yYHagTbQAAAUQ"]
[Thu Feb 26 17:57:27.378483 2026] [:error] [pid 3883:tid 3891] [client 4.204.200.32:25209] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaAZB-A33x90V6yYHagTbwAAAUU"]
[Thu Feb 26 17:57:28.164046 2026] [:error] [pid 55051:tid 55069] [client 4.204.200.32:64218] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaAZCAmK1w2kZvh5eLE41AAAAI8"]
[Thu Feb 26 17:57:29.740520 2026] [:error] [pid 54990:tid 54993] [client 4.204.200.32:64243] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaAZCXtr2qmt_mBhH2wAwAAAAAA"]
[Thu Feb 26 17:57:30.415886 2026] [:error] [pid 54991:tid 55029] [client 4.204.200.32:25092] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaAZCt4Zx-mJ8gbRB2i2ngAAAEk"]
[Thu Feb 26 17:57:30.994024 2026] [:error] [pid 54991:tid 55031] [client 4.204.200.32:64146] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aaAZCt4Zx-mJ8gbRB2i2oAAAAEs"]
[Thu Feb 26 17:57:31.590202 2026] [:error] [pid 55618:tid 55645] [client 4.204.200.32:25184] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aaAZCx61Vrh12f_8oWTFKAAAARg"]
[Thu Feb 26 17:57:33.120731 2026] [:error] [pid 3883:tid 3902] [client 4.204.200.32:64227] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aaAZDeA33x90V6yYHagTdQAAAVA"]
[Thu Feb 26 17:57:33.928861 2026] [:error] [pid 54990:tid 54995] [client 4.204.200.32:64184] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aaAZDXtr2qmt_mBhH2wAxwAAAAI"]
[Thu Feb 26 17:57:34.642462 2026] [:error] [pid 3883:tid 3897] [client 4.204.200.32:64247] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaAZDuA33x90V6yYHagTegAAAUs"]
[Thu Feb 26 17:57:36.256968 2026] [:error] [pid 55122:tid 55138] [client 4.204.200.32:64137] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaAZEILiR0OfjFxvcN_2cAAAAM4"]
[Thu Feb 26 17:57:37.445348 2026] [:error] [pid 20419:tid 20443] [client 4.204.200.32:62565] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaAZEe3DVDvMfTYYUBX9FAAAAdU"]
[Thu Feb 26 17:57:40.008960 2026] [:error] [pid 55618:tid 55631] [client 4.204.200.32:64171] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaAZFB61Vrh12f_8oWTFMgAAAQo"]
[Thu Feb 26 17:57:42.534511 2026] [:error] [pid 25311:tid 25324] [client 4.204.200.32:64133] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaAZFtfdM__yZAgJFStk9gAAAYo"]
[Thu Feb 26 17:57:43.355035 2026] [:error] [pid 25311:tid 25337] [client 4.204.200.32:25211] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaAZF9fdM__yZAgJFStk-AAAAZc"]
[Thu Feb 26 17:57:44.789090 2026] [:error] [pid 54991:tid 55025] [client 4.204.200.32:25131] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaAZGN4Zx-mJ8gbRB2i2swAAAEU"]
[Thu Feb 26 17:57:46.732452 2026] [:error] [pid 54991:tid 55038] [client 4.204.200.32:25123] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaAZGt4Zx-mJ8gbRB2i2twAAAFI"]
[Thu Feb 26 17:57:47.571346 2026] [:error] [pid 25311:tid 25338] [client 4.204.200.32:25143] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaAZG9fdM__yZAgJFStk_QAAAZg"]
[Thu Feb 26 17:57:48.200593 2026] [:error] [pid 25311:tid 25334] [client 4.204.200.32:25207] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaAZHNfdM__yZAgJFStlBAAAAZQ"]
[Thu Feb 26 17:57:48.723875 2026] [:error] [pid 25311:tid 25318] [client 4.204.200.32:64253] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaAZHNfdM__yZAgJFStlDAAAAYQ"]
[Thu Feb 26 17:57:49.327230 2026] [:error] [pid 3883:tid 3889] [client 4.204.200.32:25155] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaAZHeA33x90V6yYHagTkQAAAUM"]
[Thu Feb 26 17:57:50.127764 2026] [:error] [pid 20419:tid 20424] [client 4.204.200.32:25190] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaAZHu3DVDvMfTYYUBX9KgAAAcI"]
[Thu Feb 26 17:57:50.689822 2026] [:error] [pid 54990:tid 55013] [client 4.204.200.32:64196] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaAZHntr2qmt_mBhH2wA3QAAABQ"]
[Thu Feb 26 17:57:51.326082 2026] [:error] [pid 55051:tid 55071] [client 4.204.200.32:25197] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaAZHwmK1w2kZvh5eLE5AQAAAJE"]
[Thu Feb 26 17:57:52.032077 2026] [:error] [pid 55122:tid 55130] [client 4.204.200.32:64221] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaAZIILiR0OfjFxvcN_2nQAAAMY"]
[Thu Feb 26 17:57:52.869293 2026] [:error] [pid 55618:tid 55630] [client 4.204.200.32:64175] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaAZIB61Vrh12f_8oWTFQQAAAQk"]
[Thu Feb 26 17:57:53.524494 2026] [:error] [pid 25311:tid 25328] [client 4.204.200.32:25195] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaAZIdfdM__yZAgJFStlEAAAAY4"]
[Thu Feb 26 17:57:54.215701 2026] [:error] [pid 3883:tid 3899] [client 4.204.200.32:25096] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaAZIuA33x90V6yYHagTogAAAU0"]
[Thu Feb 26 17:57:54.865054 2026] [:error] [pid 25311:tid 25319] [client 4.204.200.32:25160] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaAZItfdM__yZAgJFStlFAAAAYU"]
[Thu Feb 26 17:57:55.719857 2026] [:error] [pid 3883:tid 3906] [client 4.204.200.32:25125] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaAZI-A33x90V6yYHagTpgAAAVQ"]
[Thu Feb 26 17:57:56.365122 2026] [:error] [pid 3883:tid 3889] [client 4.204.200.32:64187] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaAZJOA33x90V6yYHagTqQAAAUM"]
[Thu Feb 26 17:57:57.105931 2026] [:error] [pid 3883:tid 3896] [client 4.204.200.32:64166] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaAZJeA33x90V6yYHagT6wAAAUo"]
[Thu Feb 26 17:57:57.797638 2026] [:error] [pid 55618:tid 55641] [client 4.204.200.32:64152] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaAZJR61Vrh12f_8oWTFSAAAARQ"]
[Thu Feb 26 17:57:58.642430 2026] [:error] [pid 20419:tid 20422] [client 4.204.200.32:25186] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aaAZJu3DVDvMfTYYUBX9OwAAAcA"]
[Thu Feb 26 17:57:59.446241 2026] [:error] [pid 54991:tid 55024] [client 4.204.200.32:64255] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aaAZJ94Zx-mJ8gbRB2i2uwAAAEQ"]
[Thu Feb 26 17:58:00.175244 2026] [:error] [pid 55122:tid 55144] [client 4.204.200.32:25150] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aaAZKILiR0OfjFxvcN_2pAAAANQ"]
[Thu Feb 26 17:58:00.910902 2026] [:error] [pid 3883:tid 3893] [client 4.204.200.32:25208] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aaAZKOA33x90V6yYHagUIAAAAUc"]
[Thu Feb 26 17:58:01.843040 2026] [:error] [pid 55618:tid 55630] [client 4.204.200.32:25120] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaAZKR61Vrh12f_8oWTFTQAAAQk"]
[Thu Feb 26 17:58:03.077578 2026] [:error] [pid 25311:tid 25338] [client 4.204.200.32:64151] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaAZK9fdM__yZAgJFStlRAAAAZg"]
[Thu Feb 26 17:58:04.133865 2026] [:error] [pid 55051:tid 55073] [client 4.204.200.32:25101] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaAZLAmK1w2kZvh5eLE5KwAAAJM"]
[Thu Feb 26 17:58:05.378304 2026] [:error] [pid 3883:tid 3899] [client 4.204.200.32:25132] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaAZLeA33x90V6yYHagUKQAAAU0"]
[Thu Feb 26 17:58:06.199223 2026] [:error] [pid 3883:tid 3891] [client 4.204.200.32:25119] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev1s.php"] [unique_id "aaAZLuA33x90V6yYHagUMwAAAUU"]
[Thu Feb 26 17:58:07.271600 2026] [:error] [pid 55051:tid 55076] [client 4.204.200.32:25104] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev1s.php"] [unique_id "aaAZLwmK1w2kZvh5eLE5MwAAAJY"]
[Thu Feb 26 18:45:57.072325 2026] [:error] [pid 25311:tid 25333] [client 193.37.32.23:57109] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaAkZdfdM__yZAgJFSt6HQAAAZM"]
[Thu Feb 26 18:45:57.741036 2026] [:error] [pid 20419:tid 20434] [client 193.37.32.12:40825] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaAkZe3DVDvMfTYYUBUPqQAAAcw"]
[Thu Feb 26 18:45:58.868288 2026] [:error] [pid 20419:tid 20445] [client 193.37.32.46:43143] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaAkZu3DVDvMfTYYUBUPygAAAdc"]
[Thu Feb 26 18:46:01.966331 2026] [:error] [pid 54991:tid 55041] [client 193.37.32.12:54129] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaAkad4Zx-mJ8gbRB2i_GAAAAFU"]
[Thu Feb 26 18:46:03.011528 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.4:48099] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaAka-3DVDvMfTYYUBUP9wAAAdE"]
[Thu Feb 26 18:46:03.482701 2026] [:error] [pid 55051:tid 55069] [client 193.37.32.21:60329] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaAkawmK1w2kZvh5eLFWrQAAAI8"]
[Thu Feb 26 18:46:03.691483 2026] [:error] [pid 55051:tid 55077] [client 193.37.32.40:50155] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaAkawmK1w2kZvh5eLFWrwAAAJc"]
[Thu Feb 26 18:46:03.912758 2026] [:error] [pid 25311:tid 25329] [client 193.37.32.37:29743] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaAka9fdM__yZAgJFSt6MgAAAY8"]
[Thu Feb 26 18:46:04.135088 2026] [:error] [pid 55122:tid 55130] [client 193.37.32.25:55377] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaAkbILiR0OfjFxvcN8AagAAAMY"]
[Thu Feb 26 18:46:04.346301 2026] [:error] [pid 25311:tid 25316] [client 193.37.32.16:48301] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaAkbNfdM__yZAgJFSt6NwAAAYI"]
[Thu Feb 26 18:46:04.819260 2026] [:error] [pid 54991:tid 55029] [client 193.37.32.14:62771] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaAkbN4Zx-mJ8gbRB2i_IwAAAEk"]
[Thu Feb 26 18:46:05.323366 2026] [:error] [pid 55122:tid 55139] [client 193.37.32.53:39089] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aaAkbYLiR0OfjFxvcN8AdAAAAM8"]
[Thu Feb 26 18:46:05.875831 2026] [:error] [pid 55122:tid 55136] [client 193.37.32.52:33899] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaAkbYLiR0OfjFxvcN8AegAAAMw"]
[Thu Feb 26 18:46:06.279276 2026] [:error] [pid 55122:tid 55132] [client 193.37.32.9:62909] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaAkboLiR0OfjFxvcN8AhAAAAMg"]
[Thu Feb 26 18:46:06.814155 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.11:22471] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaAkboLiR0OfjFxvcN8AiwAAANA"]
[Thu Feb 26 18:46:08.027836 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.17:36855] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaAkcOA33x90V6yYHag_UQAAAUY"]
[Thu Feb 26 18:46:08.323121 2026] [:error] [pid 3883:tid 3888] [client 193.37.32.12:28045] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaAkcOA33x90V6yYHag_UwAAAUI"]
[Thu Feb 26 18:46:09.006474 2026] [:error] [pid 54991:tid 55029] [client 193.37.32.43:30303] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaAkcd4Zx-mJ8gbRB2i_mQAAAEk"]
[Thu Feb 26 18:46:09.414309 2026] [:error] [pid 55122:tid 55144] [client 193.37.32.129:53883] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaAkcYLiR0OfjFxvcN8AowAAANQ"]
[Thu Feb 26 18:46:10.517356 2026] [:error] [pid 55618:tid 55641] [client 193.37.32.130:49753] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaAkch61Vrh12f_8oWTTWgAAARQ"]
[Thu Feb 26 18:46:10.880917 2026] [:error] [pid 54991:tid 55027] [client 193.37.32.31:41249] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaAkct4Zx-mJ8gbRB2i_rQAAAEc"]
[Thu Feb 26 18:46:11.318784 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.129:45893] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaAkcwmK1w2kZvh5eLFW9gAAAJM"]
[Thu Feb 26 18:46:12.631471 2026] [:error] [pid 54991:tid 55034] [client 193.37.32.129:57167] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaAkdN4Zx-mJ8gbRB2i_tQAAAE4"]
[Thu Feb 26 18:46:12.890987 2026] [:error] [pid 54991:tid 55044] [client 193.37.32.18:65501] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaAkdN4Zx-mJ8gbRB2i_uAAAAFg"]
[Thu Feb 26 18:46:13.494268 2026] [:error] [pid 20419:tid 20425] [client 193.37.32.10:53939] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaAkde3DVDvMfTYYUBUQHAAAAcM"]
[Thu Feb 26 18:46:13.754587 2026] [:error] [pid 54990:tid 55000] [client 193.37.32.51:30901] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaAkdXtr2qmt_mBhH2wH8QAAAAc"]
[Thu Feb 26 18:46:14.108447 2026] [:error] [pid 54990:tid 55010] [client 193.37.32.14:43655] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaAkdntr2qmt_mBhH2wH8gAAABE"]
[Thu Feb 26 18:46:15.484604 2026] [:error] [pid 25311:tid 25324] [client 193.37.32.42:62275] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaAkd9fdM__yZAgJFSt6bwAAAYo"]
[Thu Feb 26 18:46:16.063899 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.17:24525] [client 193.37.32.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.17, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaAkeOA33x90V6yYHag_hQAAAU0"]
[Thu Feb 26 18:46:18.035411 2026] [:error] [pid 3883:tid 3896] [client 193.37.32.17:24525] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaAkeuA33x90V6yYHag_lAAAAUo"]
[Thu Feb 26 18:46:18.536546 2026] [:error] [pid 54990:tid 55008] [client 193.37.32.18:39931] [client 193.37.32.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.18, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaAkentr2qmt_mBhH2wICQAAAA8"]
[Thu Feb 26 18:46:20.136156 2026] [:error] [pid 54990:tid 55004] [client 193.37.32.18:39931] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaAkfHtr2qmt_mBhH2wIDAAAAAs"]
[Thu Feb 26 18:46:21.737954 2026] [:error] [pid 20419:tid 20431] [client 193.37.32.45:28695] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaAkfe3DVDvMfTYYUBUQeQAAAck"]
[Thu Feb 26 18:46:24.002207 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.129:48395] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaAkgO3DVDvMfTYYUBUQjQAAAdE"]
[Thu Feb 26 18:46:24.473531 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.14:22873] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaAkgNfdM__yZAgJFSt6rQAAAYQ"]
[Thu Feb 26 18:46:25.148700 2026] [:error] [pid 3883:tid 3896] [client 193.37.32.15:34873] [client 193.37.32.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.15, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaAkgeA33x90V6yYHag_qwAAAUo"]
[Thu Feb 26 18:46:25.258260 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.15:34873] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaAkgeA33x90V6yYHag_rQAAAUk"]
[Thu Feb 26 18:46:28.211499 2026] [:error] [pid 55051:tid 55077] [client 193.37.32.12:50263] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaAkhAmK1w2kZvh5eLFXfAAAAJc"]
[Thu Feb 26 18:46:28.904891 2026] [:error] [pid 25311:tid 25323] [client 193.37.32.5:47423] [client 193.37.32.5] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.5, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaAkhNfdM__yZAgJFSt67QAAAYk"]
[Thu Feb 26 18:46:29.942459 2026] [:error] [pid 25311:tid 25316] [client 193.37.32.5:47423] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaAkhdfdM__yZAgJFSt69AAAAYI"]
[Thu Feb 26 18:46:30.332443 2026] [:error] [pid 55618:tid 55622] [client 193.37.32.38:41707] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaAkhh61Vrh12f_8oWTTxwAAAQE"]
[Thu Feb 26 18:46:31.166377 2026] [:error] [pid 55618:tid 55638] [client 193.37.32.21:26633] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaAkhx61Vrh12f_8oWTT0AAAARE"]
[Thu Feb 26 18:46:32.445258 2026] [:error] [pid 20419:tid 20431] [client 193.37.32.49:48019] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaAkiO3DVDvMfTYYUBUQrgAAAck"]
[Thu Feb 26 18:46:32.788348 2026] [:error] [pid 55618:tid 55627] [client 193.37.32.26:44671] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaAkiB61Vrh12f_8oWTT1wAAAQY"]
[Thu Feb 26 18:46:33.580668 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.15:47703] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaAkiQmK1w2kZvh5eLFXwQAAAIY"]
[Thu Feb 26 18:46:33.934845 2026] [:error] [pid 55051:tid 55057] [client 193.37.32.28:47111] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaAkiQmK1w2kZvh5eLFXxwAAAIM"]
[Thu Feb 26 18:46:34.573690 2026] [:error] [pid 54990:tid 55006] [client 193.37.32.19:23175] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaAkintr2qmt_mBhH2wIXwAAAA0"]
[Thu Feb 26 18:46:35.181277 2026] [:error] [pid 20419:tid 20443] [client 193.37.32.22:24223] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaAki-3DVDvMfTYYUBUQ0QAAAdU"]
[Thu Feb 26 18:46:35.857992 2026] [:error] [pid 55618:tid 55637] [client 193.37.32.49:30043] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaAkix61Vrh12f_8oWTT4QAAARA"]
[Thu Feb 26 18:46:36.574638 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.30:32929] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaAkjAmK1w2kZvh5eLFX4QAAAJY"]
[Thu Feb 26 18:46:37.982760 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.129:26945] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaAkjdfdM__yZAgJFSt7FwAAAYs"]
[Thu Feb 26 18:46:38.209494 2026] [:error] [pid 55051:tid 55059] [client 193.37.32.19:57673] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaAkjgmK1w2kZvh5eLFX6wAAAIU"]
[Thu Feb 26 18:46:38.455402 2026] [:error] [pid 3883:tid 3902] [client 193.37.32.11:22153] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaAkjuA33x90V6yYHag__gAAAVA"]
[Thu Feb 26 18:46:38.672022 2026] [:error] [pid 55051:tid 55062] [client 193.37.32.47:48653] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaAkjgmK1w2kZvh5eLFX8gAAAIg"]
[Thu Feb 26 18:46:39.057937 2026] [:error] [pid 55051:tid 55077] [client 193.37.32.38:21977] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaAkjwmK1w2kZvh5eLFX_AAAAJc"]
[Thu Feb 26 18:46:39.243410 2026] [:error] [pid 55618:tid 55640] [client 193.37.32.29:20857] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaAkjx61Vrh12f_8oWTT5QAAARM"]
[Thu Feb 26 18:46:39.792822 2026] [:error] [pid 54991:tid 55027] [client 193.37.32.45:50897] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaAkj94Zx-mJ8gbRB2jAEwAAAEc"]
[Thu Feb 26 18:46:40.060693 2026] [:error] [pid 55618:tid 55624] [client 193.37.32.24:36631] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaAkkB61Vrh12f_8oWTT6QAAAQM"]
[Thu Feb 26 18:46:40.375452 2026] [:error] [pid 54991:tid 55036] [client 193.37.32.48:42825] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaAkkN4Zx-mJ8gbRB2jAFwAAAFA"]
[Thu Feb 26 18:46:40.601597 2026] [:error] [pid 54990:tid 54998] [client 193.37.32.39:31717] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaAkkHtr2qmt_mBhH2wIegAAAAU"]
[Thu Feb 26 18:46:40.995622 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.15:20971] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaAkkAmK1w2kZvh5eLFYEwAAAJU"]
[Thu Feb 26 18:46:41.805541 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.12:25405] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaAkkQmK1w2kZvh5eLFYIwAAAJI"]
[Thu Feb 26 18:46:44.257707 2026] [:error] [pid 55618:tid 55645] [client 193.37.32.17:30553] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaAklB61Vrh12f_8oWTUEgAAARg"]
[Thu Feb 26 18:46:47.264783 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.40:43341] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaAkl4LiR0OfjFxvcN8BywAAANA"]
[Thu Feb 26 18:46:47.897529 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.40:23355] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaAkl-A33x90V6yYHahAtgAAAVY"]
[Thu Feb 26 18:46:48.075702 2026] [:error] [pid 55122:tid 55143] [client 193.37.32.20:64951] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaAkmILiR0OfjFxvcN8BzwAAANM"]
[Thu Feb 26 18:46:49.019699 2026] [:error] [pid 55122:tid 55130] [client 193.37.32.31:29499] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaAkmYLiR0OfjFxvcN8B3QAAAMY"]
[Thu Feb 26 18:46:49.744032 2026] [proxy_fcgi:error] [pid 3883:tid 3907] [client 193.37.32.34:57189] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:46:49.883075 2026] [proxy_fcgi:error] [pid 3883:tid 3902] [client 193.37.32.34:57189] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:46:50.070885 2026] [proxy_fcgi:error] [pid 3883:tid 3901] [client 193.37.32.34:57189] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:46:50.869114 2026] [:error] [pid 3883:tid 3902] [client 193.37.32.34:57189] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaAkmuA33x90V6yYHahA-wAAAVA"]
[Thu Feb 26 18:46:51.202458 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.4:55417] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaAkmwmK1w2kZvh5eLFYeAAAAII"]
[Thu Feb 26 18:46:51.468834 2026] [:error] [pid 25311:tid 25337] [client 193.37.32.23:29943] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaAkm9fdM__yZAgJFSt7VgAAAZc"]
[Thu Feb 26 18:46:51.779559 2026] [:error] [pid 55618:tid 55642] [client 193.37.32.10:27577] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaAkmx61Vrh12f_8oWTUOgAAARU"]
[Thu Feb 26 18:46:52.028220 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.32:47755] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaAknAmK1w2kZvh5eLFYfgAAAJM"]
[Thu Feb 26 18:46:52.396511 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.21:26807] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaAknAmK1w2kZvh5eLFYigAAAJU"]
[Thu Feb 26 18:46:52.732914 2026] [:error] [pid 55051:tid 55058] [client 193.37.32.16:36031] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaAknAmK1w2kZvh5eLFYmwAAAIQ"]
[Thu Feb 26 18:46:53.173921 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.53:48017] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaAkne3DVDvMfTYYUBUReAAAAdE"]
[Thu Feb 26 18:46:53.391847 2026] [:error] [pid 25311:tid 25337] [client 193.37.32.40:21401] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaAkndfdM__yZAgJFSt7YgAAAZc"]
[Thu Feb 26 18:46:53.595463 2026] [:error] [pid 25311:tid 25335] [client 193.37.32.38:35541] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaAkndfdM__yZAgJFSt7ZQAAAZU"]
[Thu Feb 26 18:46:54.032943 2026] [:error] [pid 3883:tid 3902] [client 193.37.32.44:40931] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaAknuA33x90V6yYHahBAwAAAVA"]
[Thu Feb 26 18:46:54.460073 2026] [:error] [pid 20419:tid 20442] [client 193.37.32.35:36219] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaAknu3DVDvMfTYYUBURgwAAAdQ"]
[Thu Feb 26 18:46:54.954631 2026] [:error] [pid 20419:tid 20443] [client 193.37.32.18:23167] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaAknu3DVDvMfTYYUBURiAAAAdU"]
[Thu Feb 26 18:46:55.586303 2026] [:error] [pid 55051:tid 55063] [client 193.37.32.22:50911] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaAknwmK1w2kZvh5eLFYwAAAAIk"]
[Thu Feb 26 18:46:56.196682 2026] [:error] [pid 25311:tid 25328] [client 193.37.32.5:23987] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaAkoNfdM__yZAgJFSt7cgAAAY4"]
[Thu Feb 26 18:46:56.952234 2026] [:error] [pid 55618:tid 55639] [client 193.37.32.16:62857] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaAkoB61Vrh12f_8oWTUUAAAARI"]
[Thu Feb 26 18:46:57.313972 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.15:30399] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaAkoe3DVDvMfTYYUBURngAAAcA"]
[Thu Feb 26 18:46:59.993029 2026] [:error] [pid 55051:tid 55066] [client 193.37.32.23:42427] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaAkowmK1w2kZvh5eLFZTQAAAIw"]
[Thu Feb 26 18:47:02.643537 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.35:56601] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaAkpuA33x90V6yYHahBKgAAAUc"]
[Thu Feb 26 18:47:02.840877 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.8:55027] [client 193.37.32.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.8, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaAkpuA33x90V6yYHahBMAAAAVg"]
[Thu Feb 26 18:47:03.117962 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.8:55027] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaAkp-A33x90V6yYHahBPQAAAUs"]
[Thu Feb 26 18:47:03.818019 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.4:52811] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaAkp-3DVDvMfTYYUBURugAAAdE"]
[Thu Feb 26 18:47:04.030876 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.23:53911] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaAkqOA33x90V6yYHahBVwAAAVg"]
[Thu Feb 26 18:47:05.123376 2026] [:error] [pid 3883:tid 3887] [client 193.37.32.13:37673] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaAkqeA33x90V6yYHahBfAAAAUE"]
[Thu Feb 26 18:47:05.644159 2026] [:error] [pid 3883:tid 3891] [client 193.37.32.8:43015] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aaAkqeA33x90V6yYHahBiwAAAUU"]
[Thu Feb 26 18:47:06.719594 2026] [:error] [pid 3883:tid 3898] [client 193.37.32.30:23195] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaAkquA33x90V6yYHahBpQAAAUw"]
[Thu Feb 26 18:47:07.311433 2026] [proxy_fcgi:error] [pid 55122:tid 55134] [client 193.37.32.10:47377] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:07.596539 2026] [:error] [pid 55122:tid 55125] [client 193.37.32.10:47377] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaAkq4LiR0OfjFxvcN8CfwAAAME"]
[Thu Feb 26 18:47:07.858408 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.26:33617] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaAkq-3DVDvMfTYYUBUR7wAAAcU"]
[Thu Feb 26 18:47:08.443286 2026] [:error] [pid 55618:tid 55630] [client 193.37.32.27:49137] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaAkrB61Vrh12f_8oWTUfAAAAQk"]
[Thu Feb 26 18:47:08.651573 2026] [:error] [pid 20419:tid 20433] [client 193.37.32.22:48191] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaAkrO3DVDvMfTYYUBUSDAAAAcs"]
[Thu Feb 26 18:47:09.826438 2026] [:error] [pid 55122:tid 55136] [client 193.37.32.29:37093] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaAkrYLiR0OfjFxvcN8CkAAAAMw"]
[Thu Feb 26 18:47:10.073848 2026] [:error] [pid 55618:tid 55628] [client 193.37.32.13:47175] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaAkrh61Vrh12f_8oWTUhQAAAQc"]
[Thu Feb 26 18:47:10.950827 2026] [:error] [pid 55618:tid 55634] [client 193.37.32.20:47273] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaAkrh61Vrh12f_8oWTUkQAAAQ0"]
[Thu Feb 26 18:47:11.205012 2026] [:error] [pid 55122:tid 55130] [client 193.37.32.40:61363] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaAkr4LiR0OfjFxvcN8ClwAAAMY"]
[Thu Feb 26 18:47:11.462619 2026] [:error] [pid 55618:tid 55643] [client 193.37.32.52:62787] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaAkrx61Vrh12f_8oWTUlwAAARY"]
[Thu Feb 26 18:47:12.684032 2026] [:error] [pid 25311:tid 25332] [client 193.37.32.26:25891] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaAksNfdM__yZAgJFSt7uQAAAZI"]
[Thu Feb 26 18:47:13.084179 2026] [:error] [pid 55051:tid 55066] [client 193.37.32.130:54419] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaAksQmK1w2kZvh5eLFZqgAAAIw"]
[Thu Feb 26 18:47:14.559264 2026] [:error] [pid 25311:tid 25315] [client 193.37.32.9:21469] [client 193.37.32.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.9, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aaAkstfdM__yZAgJFSt70wAAAYE"]
[Thu Feb 26 18:47:15.505622 2026] [:error] [pid 25311:tid 25323] [client 193.37.32.9:21469] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaAks9fdM__yZAgJFSt74QAAAYk"]
[Thu Feb 26 18:47:15.782936 2026] [:error] [pid 25311:tid 25315] [client 193.37.32.53:50447] [client 193.37.32.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.53, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaAks9fdM__yZAgJFSt74gAAAYE"]
[Thu Feb 26 18:47:17.520454 2026] [proxy_fcgi:error] [pid 25311:tid 25325] [client 193.37.32.53:50447] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:19.630877 2026] [:error] [pid 25311:tid 25322] [client 193.37.32.53:50447] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaAkt9fdM__yZAgJFSt8EwAAAYg"]
[Thu Feb 26 18:47:20.289890 2026] [:error] [pid 55618:tid 55639] [client 193.37.32.34:44163] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaAkuB61Vrh12f_8oWTUtAAAARI"]
[Thu Feb 26 18:47:20.777709 2026] [:error] [pid 55618:tid 55621] [client 193.37.32.20:48197] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaAkuB61Vrh12f_8oWTUvAAAAQA"]
[Thu Feb 26 18:47:22.345802 2026] [:error] [pid 55618:tid 55626] [client 193.37.32.5:43783] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaAkuh61Vrh12f_8oWTU0gAAAQU"]
[Thu Feb 26 18:47:22.823520 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.21:24085] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaAkuuA33x90V6yYHahCJwAAAU0"]
[Thu Feb 26 18:47:23.148204 2026] [:error] [pid 55122:tid 55140] [client 193.37.32.51:36959] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaAku4LiR0OfjFxvcN8C0QAAANA"]
[Thu Feb 26 18:47:23.793161 2026] [proxy_fcgi:error] [pid 20419:tid 20440] [client 193.37.32.17:37911] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:23.941132 2026] [proxy_fcgi:error] [pid 20419:tid 20436] [client 193.37.32.17:37911] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:24.059960 2026] [:error] [pid 20419:tid 20446] [client 193.37.32.17:37911] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaAkvO3DVDvMfTYYUBUScwAAAdg"]
[Thu Feb 26 18:47:26.025598 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.17:62819] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaAkvgmK1w2kZvh5eLFaVgAAAII"]
[Thu Feb 26 18:47:27.099285 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.39:41617] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaAkvwmK1w2kZvh5eLFaegAAAII"]
[Thu Feb 26 18:47:27.468237 2026] [:error] [pid 55051:tid 55057] [client 193.37.32.8:35389] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aaAkvwmK1w2kZvh5eLFagwAAAIM"]
[Thu Feb 26 18:47:28.083689 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.48:65321] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaAkwAmK1w2kZvh5eLFanAAAAIo"]
[Thu Feb 26 18:47:29.226538 2026] [:error] [pid 25311:tid 25335] [client 193.37.32.51:54495] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaAkwdfdM__yZAgJFSt8NwAAAZU"]
[Thu Feb 26 18:47:29.468722 2026] [proxy_fcgi:error] [pid 55618:tid 55630] [client 193.37.32.36:20759] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:29.834340 2026] [:error] [pid 55618:tid 55642] [client 193.37.32.36:20759] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaAkwR61Vrh12f_8oWTU-AAAARU"]
[Thu Feb 26 18:47:31.058454 2026] [proxy_fcgi:error] [pid 3883:tid 3887] [client 193.37.32.23:20325] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:31.375315 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.23:20325] [client 193.37.32.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.23, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaAkw-A33x90V6yYHahCZwAAAVY"]
[Thu Feb 26 18:47:32.020740 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.23:20325] [client 193.37.32.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaAkxOA33x90V6yYHahCcAAAAU8"]
[Thu Feb 26 18:47:34.307536 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.14:33643] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaAkxgmK1w2kZvh5eLFa9wAAAJY"]
[Thu Feb 26 18:47:35.238625 2026] [:error] [pid 25311:tid 25333] [client 193.37.32.50:25375] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaAkx9fdM__yZAgJFSt8PgAAAZM"]
[Thu Feb 26 18:47:36.039423 2026] [:error] [pid 25311:tid 25331] [client 193.37.32.32:44077] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaAkyNfdM__yZAgJFSt8RgAAAZE"]
[Thu Feb 26 18:47:36.491005 2026] [:error] [pid 20419:tid 20425] [client 193.37.32.19:49821] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaAkyO3DVDvMfTYYUBUS3wAAAcM"]
[Thu Feb 26 18:47:37.051874 2026] [:error] [pid 25311:tid 25327] [client 193.37.32.42:39717] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaAkydfdM__yZAgJFSt8WQAAAY0"]
[Thu Feb 26 18:47:37.599442 2026] [proxy_fcgi:error] [pid 20419:tid 20434] [client 193.37.32.14:31495] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:37.691300 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.14:31495] [client 193.37.32.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaAkye3DVDvMfTYYUBUS-QAAAcA"]
[Thu Feb 26 18:47:40.146491 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.28:52709] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaAkzOA33x90V6yYHahCmQAAAUk"]
[Thu Feb 26 18:47:40.344609 2026] [:error] [pid 20419:tid 20442] [client 193.37.32.35:65101] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaAkzO3DVDvMfTYYUBUTEQAAAdQ"]
[Thu Feb 26 18:47:40.664069 2026] [:error] [pid 55122:tid 55134] [client 193.37.32.10:32751] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaAkzILiR0OfjFxvcN8DiQAAAMo"]
[Thu Feb 26 18:47:40.878467 2026] [:error] [pid 3883:tid 3904] [client 193.37.32.45:51583] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaAkzOA33x90V6yYHahCqwAAAVI"]
[Thu Feb 26 18:47:41.188199 2026] [:error] [pid 3883:tid 3905] [client 193.37.32.21:59733] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaAkzeA33x90V6yYHahCtgAAAVM"]
[Thu Feb 26 18:47:41.370596 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.20:54483] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaAkzeA33x90V6yYHahCvgAAAVU"]
[Thu Feb 26 18:47:41.959010 2026] [:error] [pid 55618:tid 55629] [client 193.37.32.129:58807] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaAkzR61Vrh12f_8oWTVMQAAAQg"]
[Thu Feb 26 18:47:42.208295 2026] [:error] [pid 55122:tid 55138] [client 193.37.32.48:21209] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaAkzoLiR0OfjFxvcN8DkQAAAM4"]
[Thu Feb 26 18:47:42.512648 2026] [:error] [pid 20419:tid 20436] [client 193.37.32.27:25297] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaAkzu3DVDvMfTYYUBUTFAAAAc4"]
[Thu Feb 26 18:47:42.891599 2026] [:error] [pid 55051:tid 55063] [client 193.37.32.51:55811] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaAkzgmK1w2kZvh5eLFbKAAAAIk"]
[Thu Feb 26 18:47:43.706773 2026] [:error] [pid 55122:tid 55136] [client 193.37.32.130:30483] [client 193.37.32.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaAkz4LiR0OfjFxvcN8DoQAAAMw"]
[Thu Feb 26 18:47:43.929837 2026] [proxy_fcgi:error] [pid 54990:tid 55007] [client 193.37.32.35:50345] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:47:44.476432 2026] [:error] [pid 54990:tid 55008] [client 193.37.32.35:50345] [client 193.37.32.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.35, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaAk0Htr2qmt_mBhH2wI0wAAAA8"]
[Thu Feb 26 18:47:45.234040 2026] [:error] [pid 54990:tid 55003] [client 193.37.32.35:50345] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaAk0Xtr2qmt_mBhH2wI2wAAAAo"]
[Thu Feb 26 18:47:45.445839 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.19:59595] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaAk0dfdM__yZAgJFSt8sQAAAYU"]
[Thu Feb 26 18:47:48.093586 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.31:29905] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaAk1AmK1w2kZvh5eLFbiAAAAII"]
[Thu Feb 26 18:47:49.379029 2026] [:error] [pid 25311:tid 25323] [client 193.37.32.28:46637] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaAk1dfdM__yZAgJFSt83QAAAYk"]
[Thu Feb 26 18:47:49.711719 2026] [:error] [pid 25311:tid 25338] [client 193.37.32.32:58535] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaAk1dfdM__yZAgJFSt84gAAAZg"]
[Thu Feb 26 18:47:50.762989 2026] [:error] [pid 20419:tid 20429] [client 193.37.32.24:31295] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaAk1u3DVDvMfTYYUBUTOQAAAcc"]
[Thu Feb 26 18:47:51.049722 2026] [:error] [pid 20419:tid 20439] [client 193.37.32.28:42851] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaAk1-3DVDvMfTYYUBUTOgAAAdE"]
[Thu Feb 26 18:47:51.247230 2026] [:error] [pid 55051:tid 55055] [client 193.37.32.5:46505] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaAk1wmK1w2kZvh5eLFboQAAAIE"]
[Thu Feb 26 18:47:52.052079 2026] [:error] [pid 55051:tid 55067] [client 193.37.32.44:47943] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaAk2AmK1w2kZvh5eLFbtAAAAI0"]
[Thu Feb 26 18:47:52.398350 2026] [:error] [pid 55122:tid 55128] [client 193.37.32.13:32955] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaAk2ILiR0OfjFxvcN8D0gAAAMQ"]
[Thu Feb 26 18:47:52.967049 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.15:37855] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaAk2OA33x90V6yYHahDQgAAAVU"]
[Thu Feb 26 18:47:54.979185 2026] [:error] [pid 20419:tid 20422] [client 193.37.32.7:24011] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaAk2u3DVDvMfTYYUBUTbgAAAcA"]
[Thu Feb 26 18:47:55.464259 2026] [:error] [pid 20419:tid 20446] [client 193.37.32.46:21019] [client 193.37.32.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaAk2-3DVDvMfTYYUBUTcgAAAdg"]
[Thu Feb 26 18:47:58.319519 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.49:20471] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaAk3gmK1w2kZvh5eLFcHgAAAIc"]
[Thu Feb 26 18:47:58.800589 2026] [:error] [pid 20419:tid 20440] [client 193.37.32.21:31091] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaAk3u3DVDvMfTYYUBUTiAAAAdI"]
[Thu Feb 26 18:47:59.635194 2026] [:error] [pid 20419:tid 20442] [client 193.37.32.50:24509] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaAk3-3DVDvMfTYYUBUTnwAAAdQ"]
[Thu Feb 26 18:48:00.565494 2026] [:error] [pid 55122:tid 55137] [client 193.37.32.22:22675] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaAk4ILiR0OfjFxvcN8D_AAAAM0"]
[Thu Feb 26 18:48:03.154328 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.30:31803] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaAk4wmK1w2kZvh5eLFcVwAAAJY"]
[Thu Feb 26 18:48:03.401048 2026] [:error] [pid 55051:tid 55067] [client 193.37.32.41:62655] [client 193.37.32.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaAk4wmK1w2kZvh5eLFcYAAAAI0"]
[Thu Feb 26 18:48:04.305115 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.44:58023] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaAk5OA33x90V6yYHahDvQAAAVY"]
[Thu Feb 26 18:48:05.376624 2026] [:error] [pid 55051:tid 55067] [client 193.37.32.47:53097] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaAk5QmK1w2kZvh5eLFckwAAAI0"]
[Thu Feb 26 18:48:06.151176 2026] [:error] [pid 20419:tid 20434] [client 193.37.32.18:33135] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaAk5u3DVDvMfTYYUBUTywAAAcw"]
[Thu Feb 26 18:48:06.422360 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.16:38119] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaAk5uA33x90V6yYHahDygAAAUg"]
[Thu Feb 26 18:48:06.951546 2026] [:error] [pid 54991:tid 55027] [client 193.37.32.19:32541] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaAk5t4Zx-mJ8gbRB2jBCgAAAEc"]
[Thu Feb 26 18:48:07.739028 2026] [:error] [pid 54991:tid 55023] [client 193.37.32.4:50643] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaAk594Zx-mJ8gbRB2jBDwAAAEM"]
[Thu Feb 26 18:48:08.035778 2026] [:error] [pid 3883:tid 3897] [client 193.37.32.4:23721] [client 193.37.32.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaAk6OA33x90V6yYHahD5QAAAUs"]
[Thu Feb 26 18:48:09.097786 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.36:50087] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaAk6eA33x90V6yYHahD9AAAAVU"]
[Thu Feb 26 18:48:09.618100 2026] [:error] [pid 54991:tid 55036] [client 193.37.32.51:23537] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaAk6d4Zx-mJ8gbRB2jBHgAAAFA"]
[Thu Feb 26 18:48:09.834506 2026] [:error] [pid 55618:tid 55643] [client 193.37.32.49:49731] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaAk6R61Vrh12f_8oWTVywAAARY"]
[Thu Feb 26 18:48:10.540197 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.5:61085] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaAk6uA33x90V6yYHahEAAAAAVU"]
[Thu Feb 26 18:48:10.901892 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.22:31921] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaAk6uA33x90V6yYHahECQAAAUg"]
[Thu Feb 26 18:48:11.910556 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.129:53069] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaAk6-A33x90V6yYHahEFQAAAU0"]
[Thu Feb 26 18:48:12.422402 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.31:29887] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaAk7AmK1w2kZvh5eLFc7QAAAIc"]
[Thu Feb 26 18:48:12.907025 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.49:51183] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaAk7OA33x90V6yYHahEKgAAAUg"]
[Thu Feb 26 18:48:13.276886 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.45:45353] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaAk7dfdM__yZAgJFSt9RwAAAYM"]
[Thu Feb 26 18:48:13.743409 2026] [:error] [pid 55051:tid 55069] [client 193.37.32.40:32001] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaAk7QmK1w2kZvh5eLFdFgAAAI8"]
[Thu Feb 26 18:48:13.936988 2026] [:error] [pid 55051:tid 55068] [client 193.37.32.36:50081] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaAk7QmK1w2kZvh5eLFdHAAAAI4"]
[Thu Feb 26 18:48:14.313488 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.129:40051] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaAk7u3DVDvMfTYYUBUT7wAAAcU"]
[Thu Feb 26 18:48:17.595768 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.33:41217] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaAk8dfdM__yZAgJFSt9agAAAYY"]
[Thu Feb 26 18:48:18.200312 2026] [:error] [pid 55618:tid 55643] [client 193.37.32.7:32717] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaAk8h61Vrh12f_8oWTV2AAAARY"]
[Thu Feb 26 18:48:19.055697 2026] [:error] [pid 54990:tid 54996] [client 193.37.32.50:43659] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaAk83tr2qmt_mBhH2wI_AAAAAM"]
[Thu Feb 26 18:48:19.672699 2026] [:error] [pid 54990:tid 54994] [client 193.37.32.22:39521] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaAk83tr2qmt_mBhH2wJAgAAAAE"]
[Thu Feb 26 18:48:20.720305 2026] [:error] [pid 55122:tid 55130] [client 193.37.32.15:26057] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaAk9ILiR0OfjFxvcN8EPwAAAMY"]
[Thu Feb 26 18:48:21.090290 2026] [:error] [pid 25311:tid 25324] [client 193.37.32.26:40555] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaAk9dfdM__yZAgJFSt9eAAAAYo"]
[Thu Feb 26 18:48:21.612565 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.21:28929] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaAk9eA33x90V6yYHahEhQAAAUk"]
[Thu Feb 26 18:48:22.073871 2026] [:error] [pid 25311:tid 25322] [client 193.37.32.38:44701] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaAk9tfdM__yZAgJFSt9fgAAAYg"]
[Thu Feb 26 18:48:23.442984 2026] [:error] [pid 25311:tid 25321] [client 193.37.32.22:51331] [client 193.37.32.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaAk99fdM__yZAgJFSt9hwAAAYc"]
[Thu Feb 26 18:48:23.754120 2026] [:error] [pid 55051:tid 55076] [client 193.37.32.33:61441] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaAk9wmK1w2kZvh5eLFdvwAAAJY"]
[Thu Feb 26 18:48:24.331908 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.31:61455] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaAk-NfdM__yZAgJFSt9jAAAAYQ"]
[Thu Feb 26 18:48:24.558341 2026] [:error] [pid 55618:tid 55645] [client 193.37.32.34:22925] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaAk-B61Vrh12f_8oWTV8QAAARg"]
[Thu Feb 26 18:48:25.058591 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.6:54987] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaAk-QmK1w2kZvh5eLFd0AAAAJI"]
[Thu Feb 26 18:48:25.315750 2026] [:error] [pid 55618:tid 55643] [client 193.37.32.27:63843] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaAk-R61Vrh12f_8oWTV9gAAARY"]
[Thu Feb 26 18:48:25.531754 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.39:51045] [client 193.37.32.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.39, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaAk-eA33x90V6yYHahEmwAAAVg"]
[Thu Feb 26 18:48:25.558551 2026] [proxy_fcgi:error] [pid 3883:tid 3910] [client 193.37.32.39:51045] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:48:25.786302 2026] [:error] [pid 3883:tid 3906] [client 193.37.32.39:51045] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaAk-eA33x90V6yYHahEnAAAAVQ"]
[Thu Feb 26 18:48:27.983262 2026] [:error] [pid 55122:tid 55129] [client 193.37.32.47:30431] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaAk-4LiR0OfjFxvcN8ElgAAAMU"]
[Thu Feb 26 18:48:28.246467 2026] [:error] [pid 3883:tid 3894] [client 193.37.32.26:56819] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaAk_OA33x90V6yYHahEsAAAAUg"]
[Thu Feb 26 18:48:29.458809 2026] [:error] [pid 3883:tid 3899] [client 193.37.32.28:39249] [client 193.37.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaAk_eA33x90V6yYHahE3gAAAU0"]
[Thu Feb 26 18:48:29.676320 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.50:22285] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaAk_eA33x90V6yYHahE6AAAAVY"]
[Thu Feb 26 18:48:31.374024 2026] [:error] [pid 55122:tid 55139] [client 193.37.32.6:29813] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaAk_4LiR0OfjFxvcN8EswAAAM8"]
[Thu Feb 26 18:48:31.694529 2026] [:error] [pid 3883:tid 3893] [client 193.37.32.11:25353] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaAk_-A33x90V6yYHahFFwAAAUc"]
[Thu Feb 26 18:48:31.907780 2026] [proxy_fcgi:error] [pid 55122:tid 55131] [client 193.37.32.52:59391] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:48:32.544112 2026] [:error] [pid 55122:tid 55147] [client 193.37.32.52:59391] [client 193.37.32.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.32.52, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaAlAILiR0OfjFxvcN8EwAAAANc"]
[Thu Feb 26 18:48:32.900590 2026] [:error] [pid 55122:tid 55136] [client 193.37.32.52:59391] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaAlAILiR0OfjFxvcN8ExAAAAMw"]
[Thu Feb 26 18:48:33.693334 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.129:34841] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaAlAeA33x90V6yYHahFXgAAAVY"]
[Thu Feb 26 18:48:34.124417 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.44:55045] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaAlAu3DVDvMfTYYUBUULgAAAcU"]
[Thu Feb 26 18:48:34.386553 2026] [:error] [pid 54991:tid 55020] [client 193.37.32.29:29941] [client 193.37.32.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaAlAt4Zx-mJ8gbRB2jBtwAAAEA"]
[Thu Feb 26 18:48:35.181574 2026] [:error] [pid 54991:tid 55044] [client 193.37.32.129:45813] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaAlA94Zx-mJ8gbRB2jBuwAAAFg"]
[Thu Feb 26 18:48:35.668453 2026] [:error] [pid 20419:tid 20437] [client 193.37.32.8:38035] [client 193.37.32.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaAlA-3DVDvMfTYYUBUUNQAAAc8"]
[Thu Feb 26 18:48:36.499510 2026] [:error] [pid 55618:tid 55640] [client 193.37.32.30:58961] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaAlBB61Vrh12f_8oWTWOgAAARM"]
[Thu Feb 26 18:48:37.854307 2026] [:error] [pid 55051:tid 55067] [client 193.37.32.9:52413] [client 193.37.32.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aaAlBQmK1w2kZvh5eLFeOAAAAI0"]
[Thu Feb 26 18:48:38.331944 2026] [:error] [pid 55051:tid 55071] [client 193.37.32.30:41825] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aaAlBgmK1w2kZvh5eLFeRgAAAJE"]
[Thu Feb 26 18:48:41.072060 2026] [:error] [pid 25311:tid 25315] [client 193.37.32.20:44751] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaAlCdfdM__yZAgJFSt9tgAAAYE"]
[Thu Feb 26 18:48:41.649819 2026] [:error] [pid 3883:tid 3907] [client 193.37.32.16:41013] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aaAlCeA33x90V6yYHahF6gAAAVU"]
[Thu Feb 26 18:48:41.774826 2026] [:error] [pid 3883:tid 3886] [client 193.37.32.16:41013] [client 193.37.32.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaAlCeA33x90V6yYHahF7gAAAUA"]
[Thu Feb 26 18:48:42.423101 2026] [:error] [pid 20419:tid 20423] [client 193.37.32.6:64619] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaAlCu3DVDvMfTYYUBUUZgAAAcE"]
[Thu Feb 26 18:48:42.645027 2026] [:error] [pid 20419:tid 20435] [client 193.37.32.11:56313] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaAlCu3DVDvMfTYYUBUUaAAAAc0"]
[Thu Feb 26 18:48:43.727923 2026] [:error] [pid 3883:tid 3908] [client 193.37.32.20:23467] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaAlC-A33x90V6yYHahGHgAAAVY"]
[Thu Feb 26 18:48:44.334961 2026] [:error] [pid 55122:tid 55138] [client 193.37.32.34:33789] [client 193.37.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaAlDILiR0OfjFxvcN8E8wAAAM4"]
[Thu Feb 26 18:48:44.792616 2026] [:error] [pid 20419:tid 20430] [client 193.37.32.42:47817] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaAlDO3DVDvMfTYYUBUUdwAAAcg"]
[Thu Feb 26 18:48:45.619660 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.37:46443] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaAlDdfdM__yZAgJFSt93AAAAYM"]
[Thu Feb 26 18:48:45.936074 2026] [:error] [pid 25311:tid 25323] [client 193.37.32.32:55423] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aaAlDdfdM__yZAgJFSt95AAAAYk"]
[Thu Feb 26 18:48:46.256219 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.31:48399] [client 193.37.32.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaAlDgmK1w2kZvh5eLFegAAAAII"]
[Thu Feb 26 18:48:46.539490 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.37:41613] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaAlDtfdM__yZAgJFSt97QAAAYY"]
[Thu Feb 26 18:48:47.034405 2026] [:error] [pid 25311:tid 25316] [client 193.37.32.40:21059] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaAlD9fdM__yZAgJFSt98wAAAYI"]
[Thu Feb 26 18:48:47.847870 2026] [:error] [pid 3883:tid 3896] [client 193.37.32.43:61025] [client 193.37.32.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aaAlD-A33x90V6yYHahGQQAAAUo"]
[Thu Feb 26 18:48:48.165351 2026] [:error] [pid 55051:tid 55073] [client 193.37.32.25:34179] [client 193.37.32.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aaAlEAmK1w2kZvh5eLFepQAAAJM"]
[Thu Feb 26 18:48:49.437677 2026] [:error] [pid 3883:tid 3906] [client 193.37.32.36:33331] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aaAlEeA33x90V6yYHahGTQAAAVQ"]
[Thu Feb 26 18:48:49.871717 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.53:20847] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aaAlEdfdM__yZAgJFSt-CwAAAYQ"]
[Thu Feb 26 18:48:50.589938 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.18:41009] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aaAlEtfdM__yZAgJFSt-GAAAAYQ"]
[Thu Feb 26 18:48:50.843961 2026] [:error] [pid 25311:tid 25338] [client 193.37.32.53:39173] [client 193.37.32.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aaAlEtfdM__yZAgJFSt-GwAAAZg"]
[Thu Feb 26 18:48:51.181195 2026] [:error] [pid 3883:tid 3909] [client 193.37.32.39:58671] [client 193.37.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aaAlE-A33x90V6yYHahGYwAAAVc"]
[Thu Feb 26 18:48:51.733528 2026] [:error] [pid 55051:tid 55060] [client 193.37.32.6:61775] [client 193.37.32.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aaAlEwmK1w2kZvh5eLFe5wAAAIY"]
[Thu Feb 26 18:48:52.370758 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.27:27905] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaAlFAmK1w2kZvh5eLFe8gAAAIo"]
[Thu Feb 26 18:48:52.551594 2026] [:error] [pid 55051:tid 55064] [client 193.37.32.47:38897] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aaAlFAmK1w2kZvh5eLFe9QAAAIo"]
[Thu Feb 26 18:48:52.921476 2026] [:error] [pid 55051:tid 55072] [client 193.37.32.35:30959] [client 193.37.32.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaAlFAmK1w2kZvh5eLFe-QAAAJI"]
[Thu Feb 26 18:48:53.240552 2026] [:error] [pid 3883:tid 3888] [client 193.37.32.36:28901] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aaAlFeA33x90V6yYHahGcwAAAUI"]
[Thu Feb 26 18:48:53.750701 2026] [:error] [pid 3883:tid 3891] [client 193.37.32.33:28579] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaAlFeA33x90V6yYHahGegAAAUU"]
[Thu Feb 26 18:48:54.099853 2026] [:error] [pid 55051:tid 55075] [client 193.37.32.21:41701] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aaAlFgmK1w2kZvh5eLFfDAAAAJU"]
[Thu Feb 26 18:48:54.308523 2026] [:error] [pid 3883:tid 3906] [client 193.37.32.48:53329] [client 193.37.32.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aaAlFuA33x90V6yYHahGgQAAAVQ"]
[Thu Feb 26 18:48:54.666564 2026] [:error] [pid 54991:tid 55041] [client 193.37.32.44:49161] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aaAlFt4Zx-mJ8gbRB2jB1QAAAFU"]
[Thu Feb 26 18:48:55.461317 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.7:50769] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aaAlFwmK1w2kZvh5eLFfLAAAAII"]
[Thu Feb 26 18:48:56.150591 2026] [:error] [pid 3883:tid 3905] [client 193.37.32.24:61481] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aaAlGOA33x90V6yYHahGjgAAAVM"]
[Thu Feb 26 18:48:56.629074 2026] [:error] [pid 55051:tid 55057] [client 193.37.32.11:24903] [client 193.37.32.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aaAlGAmK1w2kZvh5eLFfRAAAAIM"]
[Thu Feb 26 18:48:56.991724 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.10:24593] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaAlGOA33x90V6yYHahGlwAAAVg"]
[Thu Feb 26 18:48:57.920096 2026] [:error] [pid 3883:tid 3895] [client 193.37.32.19:30743] [client 193.37.32.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaAlGeA33x90V6yYHahGqgAAAUk"]
[Thu Feb 26 18:48:58.126871 2026] [:error] [pid 25311:tid 25322] [client 193.37.32.13:59719] [client 193.37.32.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aaAlGtfdM__yZAgJFSt-hgAAAYg"]
[Thu Feb 26 18:48:58.704118 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.45:26359] [client 193.37.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aaAlGtfdM__yZAgJFSt-mQAAAYw"]
[Thu Feb 26 18:48:59.616719 2026] [:error] [pid 3883:tid 3901] [client 193.37.32.49:24423] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aaAlG-A33x90V6yYHahGsgAAAU8"]
[Thu Feb 26 18:49:00.103429 2026] [:error] [pid 3883:tid 3910] [client 193.37.32.49:61535] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aaAlHOA33x90V6yYHahGtgAAAVg"]
[Thu Feb 26 18:49:01.152566 2026] [:error] [pid 25311:tid 25326] [client 193.37.32.17:56007] [client 193.37.32.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aaAlHdfdM__yZAgJFSt-2AAAAYw"]
[Thu Feb 26 18:49:01.757020 2026] [:error] [pid 54990:tid 55006] [client 193.37.32.33:39199] [client 193.37.32.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aaAlHXtr2qmt_mBhH2wJNwAAAA0"]
[Thu Feb 26 18:49:02.239056 2026] [:error] [pid 20419:tid 20440] [client 193.37.32.129:33801] [client 193.37.32.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aaAlHu3DVDvMfTYYUBUUqwAAAdI"]
[Thu Feb 26 18:49:08.240641 2026] [:error] [pid 55051:tid 55061] [client 193.37.32.52:54931] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaAlJAmK1w2kZvh5eLFfnQAAAIc"]
[Thu Feb 26 18:49:08.912024 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.44:60141] [client 193.37.32.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aaAlJNfdM__yZAgJFSt_ZAAAAYQ"]
[Thu Feb 26 18:49:09.302062 2026] [proxy_fcgi:error] [pid 25311:tid 25334] [client 193.37.32.26:30567] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 18:49:09.418708 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.26:30567] [client 193.37.32.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aaAlJdfdM__yZAgJFSt_dAAAAYU"]
[Thu Feb 26 18:49:09.610603 2026] [:error] [pid 25311:tid 25331] [client 193.37.32.20:46645] [client 193.37.32.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aaAlJdfdM__yZAgJFSt_fAAAAZE"]
[Thu Feb 26 18:49:10.295752 2026] [:error] [pid 25311:tid 25330] [client 193.37.32.21:63159] [client 193.37.32.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aaAlJtfdM__yZAgJFSt_kQAAAZA"]
[Thu Feb 26 18:49:10.507489 2026] [:error] [pid 25311:tid 25320] [client 193.37.32.24:51997] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aaAlJtfdM__yZAgJFSt_oAAAAYY"]
[Thu Feb 26 18:49:11.530097 2026] [:error] [pid 55051:tid 55078] [client 193.37.32.15:25929] [client 193.37.32.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aaAlJwmK1w2kZvh5eLFftwAAAJg"]
[Thu Feb 26 18:49:11.802623 2026] [:error] [pid 54991:tid 55041] [client 193.37.32.42:57719] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aaAlJ94Zx-mJ8gbRB2jB6QAAAFU"]
[Thu Feb 26 18:49:12.179679 2026] [:error] [pid 3883:tid 3889] [client 193.37.32.12:33753] [client 193.37.32.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "aaAlKOA33x90V6yYHahG1wAAAUM"]
[Thu Feb 26 18:49:12.395857 2026] [:error] [pid 55618:tid 55634] [client 193.37.32.10:27605] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aaAlKB61Vrh12f_8oWTWYAAAAQ0"]
[Thu Feb 26 18:49:12.592239 2026] [:error] [pid 3883:tid 3888] [client 193.37.32.18:64491] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aaAlKOA33x90V6yYHahG2gAAAUI"]
[Thu Feb 26 18:49:12.897413 2026] [:error] [pid 3883:tid 3890] [client 193.37.32.51:51217] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aaAlKOA33x90V6yYHahG3AAAAUQ"]
[Thu Feb 26 18:49:16.390332 2026] [:error] [pid 54990:tid 55017] [client 193.37.32.32:65351] [client 193.37.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aaAlLHtr2qmt_mBhH2wJSgAAABg"]
[Thu Feb 26 18:49:16.600357 2026] [:error] [pid 54991:tid 55025] [client 193.37.32.38:49491] [client 193.37.32.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aaAlLN4Zx-mJ8gbRB2jB9QAAAEU"]
[Thu Feb 26 18:49:17.239356 2026] [:error] [pid 55618:tid 55624] [client 193.37.32.18:31577] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aaAlLR61Vrh12f_8oWTWcAAAAQM"]
[Thu Feb 26 18:49:17.515531 2026] [:error] [pid 20419:tid 20444] [client 193.37.32.24:43081] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aaAlLe3DVDvMfTYYUBUVHwAAAdY"]
[Thu Feb 26 18:49:18.011106 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.30:53073] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aaAlLu3DVDvMfTYYUBUVKgAAAcU"]
[Thu Feb 26 18:49:18.373131 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.50:57027] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aaAlLtfdM__yZAgJFSt_6gAAAYs"]
[Thu Feb 26 18:49:19.586615 2026] [:error] [pid 25311:tid 25316] [client 193.37.32.47:53749] [client 193.37.32.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aaAlL9fdM__yZAgJFSuAJAAAAYI"]
[Thu Feb 26 18:49:19.994202 2026] [:error] [pid 25311:tid 25316] [client 193.37.32.10:24547] [client 193.37.32.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aaAlL9fdM__yZAgJFSuAMgAAAYI"]
[Thu Feb 26 18:49:20.588118 2026] [:error] [pid 25311:tid 25338] [client 193.37.32.40:47191] [client 193.37.32.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aaAlMNfdM__yZAgJFSuASAAAAZg"]
[Thu Feb 26 18:49:20.990726 2026] [:error] [pid 25311:tid 25318] [client 193.37.32.51:47879] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaAlMNfdM__yZAgJFSuAWQAAAYQ"]
[Thu Feb 26 18:49:21.413812 2026] [:error] [pid 25311:tid 25317] [client 193.37.32.24:63935] [client 193.37.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "aaAlMdfdM__yZAgJFSuAaQAAAYM"]
[Thu Feb 26 18:49:21.593168 2026] [:error] [pid 55618:tid 55633] [client 193.37.32.52:52081] [client 193.37.32.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aaAlMR61Vrh12f_8oWTWegAAAQw"]
[Thu Feb 26 18:49:21.946862 2026] [:error] [pid 25311:tid 25325] [client 193.37.32.30:39891] [client 193.37.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aaAlMdfdM__yZAgJFSuAdgAAAYs"]
[Thu Feb 26 18:49:22.715004 2026] [:error] [pid 55618:tid 55632] [client 193.37.32.37:34941] [client 193.37.32.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aaAlMh61Vrh12f_8oWTWigAAAQs"]
[Thu Feb 26 18:49:23.078884 2026] [:error] [pid 55051:tid 55069] [client 193.37.32.5:33889] [client 193.37.32.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aaAlMwmK1w2kZvh5eLFf_QAAAI8"]
[Thu Feb 26 18:49:23.682855 2026] [:error] [pid 55051:tid 55056] [client 193.37.32.50:45977] [client 193.37.32.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aaAlMwmK1w2kZvh5eLFgBQAAAII"]
[Thu Feb 26 18:49:23.993787 2026] [:error] [pid 55618:tid 55645] [client 193.37.32.49:28489] [client 193.37.32.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aaAlMx61Vrh12f_8oWTWkgAAARg"]
[Thu Feb 26 18:49:24.431062 2026] [:error] [pid 3883:tid 3892] [client 193.37.32.7:50273] [client 193.37.32.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aaAlNOA33x90V6yYHahHQwAAAUY"]
[Thu Feb 26 18:49:25.926238 2026] [:error] [pid 20419:tid 20427] [client 193.37.32.18:47137] [client 193.37.32.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aaAlNe3DVDvMfTYYUBUVTgAAAcU"]
[Thu Feb 26 18:49:26.222737 2026] [:error] [pid 25311:tid 25321] [client 193.37.32.51:23369] [client 193.37.32.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aaAlNtfdM__yZAgJFSuA0gAAAYc"]
[Thu Feb 26 18:49:26.816299 2026] [:error] [pid 20419:tid 20444] [client 193.37.32.27:21719] [client 193.37.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aaAlNu3DVDvMfTYYUBUVUwAAAdY"]
[Thu Feb 26 18:49:27.049150 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.42:52831] [client 193.37.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aaAlN9fdM__yZAgJFSuA6QAAAYU"]
[Thu Feb 26 18:49:27.255847 2026] [:error] [pid 25311:tid 25319] [client 193.37.32.36:42649] [client 193.37.32.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aaAlN9fdM__yZAgJFSuA8wAAAYU"]
[Thu Feb 26 18:49:38.684611 2026] [:error] [pid 20419:tid 20426] [client 94.124.162.12:57412] [client 94.124.162.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.124.162.12, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaAlQu3DVDvMfTYYUBUVkwAAAcQ"]
[Thu Feb 26 20:34:40.493565 2026] [:error] [pid 3883:tid 3897] [client 43.140.247.223:45672] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaA94OA33x90V6yYHajN-gAAAUs"]
[Thu Feb 26 20:47:24.323827 2026] [:error] [pid 25311:tid 25338] [client 52.169.5.4:1117] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blackmini.php"] [unique_id "aaBA3NfdM__yZAgJFSvXmAAAAZg"]
[Thu Feb 26 20:47:24.901107 2026] [:error] [pid 3883:tid 3890] [client 52.169.5.4:13269] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blackmini.php"] [unique_id "aaBA3OA33x90V6yYHajV_wAAAUQ"]
[Thu Feb 26 20:47:25.500699 2026] [:error] [pid 55618:tid 55630] [client 52.169.5.4:3514] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blackmini.php"] [unique_id "aaBA3R61Vrh12f_8oWQGGgAAAQk"]
[Thu Feb 26 20:47:26.068909 2026] [:error] [pid 44444:tid 44473] [client 52.169.5.4:1807] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blackmini.php"] [unique_id "aaBA3m2sMNmj-yekUk0OOQAAAhc"]
[Thu Feb 26 20:47:26.643953 2026] [:error] [pid 44444:tid 44455] [client 52.169.5.4:4319] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aaBA3m2sMNmj-yekUk0OPgAAAgU"]
[Thu Feb 26 20:47:27.218114 2026] [:error] [pid 44444:tid 44470] [client 52.169.5.4:1796] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aaBA322sMNmj-yekUk0OQAAAAhQ"]
[Thu Feb 26 20:47:27.796546 2026] [:error] [pid 25311:tid 25328] [client 52.169.5.4:7428] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aaBA39fdM__yZAgJFSvXmwAAAY4"]
[Thu Feb 26 20:47:28.593631 2026] [:error] [pid 3883:tid 3893] [client 52.169.5.4:13239] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aaBA4OA33x90V6yYHajWAwAAAUc"]
[Thu Feb 26 20:47:29.156265 2026] [:error] [pid 44444:tid 44464] [client 52.169.5.4:11338] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/F19.php"] [unique_id "aaBA4W2sMNmj-yekUk0ORgAAAg4"]
[Thu Feb 26 20:47:29.722656 2026] [:error] [pid 44444:tid 44458] [client 52.169.5.4:11388] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/F19.php"] [unique_id "aaBA4W2sMNmj-yekUk0OTwAAAgg"]
[Thu Feb 26 20:47:30.289704 2026] [:error] [pid 44444:tid 44470] [client 52.169.5.4:1817] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/F19.php"] [unique_id "aaBA4m2sMNmj-yekUk0OVQAAAhQ"]
[Thu Feb 26 20:47:30.852355 2026] [:error] [pid 55618:tid 55628] [client 52.169.5.4:6216] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/F19.php"] [unique_id "aaBA4h61Vrh12f_8oWQGHAAAAQc"]
[Thu Feb 26 20:47:31.418350 2026] [:error] [pid 3883:tid 3892] [client 52.169.5.4:13300] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/F1.php"] [unique_id "aaBA4-A33x90V6yYHajWCAAAAUY"]
[Thu Feb 26 20:47:31.995431 2026] [:error] [pid 20419:tid 20437] [client 52.169.5.4:6578] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/F1.php"] [unique_id "aaBA4-3DVDvMfTYYUBVPYQAAAc8"]
[Thu Feb 26 20:47:32.565198 2026] [:error] [pid 20419:tid 20442] [client 52.169.5.4:6111] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/F1.php"] [unique_id "aaBA5O3DVDvMfTYYUBVPZwAAAdQ"]
[Thu Feb 26 20:47:33.133561 2026] [:error] [pid 54990:tid 54996] [client 52.169.5.4:4061] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/F1.php"] [unique_id "aaBA5Xtr2qmt_mBhH2wk8AAAAAM"]
[Thu Feb 26 20:47:33.705815 2026] [:error] [pid 20419:tid 20438] [client 52.169.5.4:4930] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaBA5e3DVDvMfTYYUBVPbgAAAdA"]
[Thu Feb 26 20:47:34.273925 2026] [:error] [pid 55618:tid 55626] [client 52.169.5.4:13234] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaBA5h61Vrh12f_8oWQGIgAAAQU"]
[Thu Feb 26 20:47:34.843919 2026] [:error] [pid 55051:tid 55063] [client 52.169.5.4:12746] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaBA5gmK1w2kZvh5eLGiggAAAIk"]
[Thu Feb 26 20:47:35.408826 2026] [:error] [pid 3883:tid 3910] [client 52.169.5.4:8831] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaBA5-A33x90V6yYHajWDQAAAVg"]
[Thu Feb 26 20:47:35.977381 2026] [:error] [pid 44444:tid 44467] [client 52.169.5.4:10773] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aaBA522sMNmj-yekUk0OeQAAAhE"]
[Thu Feb 26 20:47:36.540548 2026] [:error] [pid 44444:tid 44456] [client 52.169.5.4:12304] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aaBA6G2sMNmj-yekUk0OfAAAAgY"]
[Thu Feb 26 20:47:37.097317 2026] [:error] [pid 25311:tid 25332] [client 52.169.5.4:13304] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aaBA6dfdM__yZAgJFSvXoAAAAZI"]
[Thu Feb 26 20:47:37.651950 2026] [:error] [pid 44444:tid 44459] [client 52.169.5.4:13204] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aaBA6W2sMNmj-yekUk0OhgAAAgk"]
[Thu Feb 26 20:47:38.206610 2026] [:error] [pid 3883:tid 3893] [client 52.169.5.4:10760] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaBA6uA33x90V6yYHajWEwAAAUc"]
[Thu Feb 26 20:47:38.772709 2026] [:error] [pid 55051:tid 55057] [client 52.169.5.4:3862] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaBA6gmK1w2kZvh5eLGihwAAAIM"]
[Thu Feb 26 20:47:39.339144 2026] [:error] [pid 55051:tid 55059] [client 52.169.5.4:15153] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaBA6wmK1w2kZvh5eLGiiAAAAIU"]
[Thu Feb 26 20:47:39.899444 2026] [:error] [pid 25311:tid 25326] [client 52.169.5.4:3886] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaBA69fdM__yZAgJFSvXoQAAAYw"]
[Thu Feb 26 20:47:40.466488 2026] [:error] [pid 55618:tid 55631] [client 52.169.5.4:10039] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yussef.php"] [unique_id "aaBA7B61Vrh12f_8oWQGKAAAAQo"]
[Thu Feb 26 20:47:41.038363 2026] [:error] [pid 44444:tid 44468] [client 52.169.5.4:6736] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yussef.php"] [unique_id "aaBA7W2sMNmj-yekUk0OkwAAAhI"]
[Thu Feb 26 20:47:41.609123 2026] [:error] [pid 55051:tid 55068] [client 52.169.5.4:9472] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yussef.php"] [unique_id "aaBA7QmK1w2kZvh5eLGiigAAAI4"]
[Thu Feb 26 20:47:42.180140 2026] [:error] [pid 55051:tid 55065] [client 52.169.5.4:4593] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yussef.php"] [unique_id "aaBA7gmK1w2kZvh5eLGijAAAAIs"]
[Thu Feb 26 20:47:42.816063 2026] [:error] [pid 55051:tid 55055] [client 52.169.5.4:9993] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aaBA7gmK1w2kZvh5eLGijQAAAIE"]
[Thu Feb 26 20:47:43.392963 2026] [:error] [pid 55051:tid 55077] [client 52.169.5.4:9782] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aaBA7wmK1w2kZvh5eLGijwAAAJc"]
[Thu Feb 26 20:47:43.968645 2026] [:error] [pid 55051:tid 55066] [client 52.169.5.4:2626] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aaBA7wmK1w2kZvh5eLGikQAAAIw"]
[Thu Feb 26 20:47:44.542165 2026] [:error] [pid 20419:tid 20431] [client 52.169.5.4:11332] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aaBA8O3DVDvMfTYYUBVPeAAAAck"]
[Thu Feb 26 20:47:45.136772 2026] [:error] [pid 25311:tid 25330] [client 52.169.5.4:2576] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aaBA8dfdM__yZAgJFSvXqAAAAZA"]
[Thu Feb 26 20:47:45.717317 2026] [:error] [pid 54990:tid 55008] [client 52.169.5.4:1308] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aaBA8Xtr2qmt_mBhH2wk8QAAAA8"]
[Thu Feb 26 20:47:46.283006 2026] [:error] [pid 54990:tid 55010] [client 52.169.5.4:4937] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aaBA8ntr2qmt_mBhH2wk8wAAABE"]
[Thu Feb 26 20:47:46.867012 2026] [:error] [pid 3883:tid 3905] [client 52.169.5.4:8896] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aaBA8uA33x90V6yYHajWHQAAAVM"]
[Thu Feb 26 20:47:47.453169 2026] [:error] [pid 20419:tid 20427] [client 52.169.5.4:1844] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaBA8-3DVDvMfTYYUBVPegAAAcU"]
[Thu Feb 26 20:47:48.058433 2026] [:error] [pid 20419:tid 20441] [client 52.169.5.4:3884] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaBA9O3DVDvMfTYYUBVPewAAAdM"]
[Thu Feb 26 20:47:48.646788 2026] [:error] [pid 55051:tid 55069] [client 52.169.5.4:3423] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaBA9AmK1w2kZvh5eLGilQAAAI8"]
[Thu Feb 26 20:47:49.240002 2026] [:error] [pid 44444:tid 44469] [client 52.169.5.4:3844] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaBA9W2sMNmj-yekUk0OlQAAAhM"]
[Thu Feb 26 20:47:49.859356 2026] [:error] [pid 44444:tid 44463] [client 52.169.5.4:9738] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samfa.php"] [unique_id "aaBA9W2sMNmj-yekUk0OlgAAAg0"]
[Thu Feb 26 20:47:50.434351 2026] [:error] [pid 44444:tid 44451] [client 52.169.5.4:6290] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samfa.php"] [unique_id "aaBA9m2sMNmj-yekUk0OmAAAAgE"]
[Thu Feb 26 20:47:51.001104 2026] [:error] [pid 44444:tid 44456] [client 52.169.5.4:6537] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samfa.php"] [unique_id "aaBA922sMNmj-yekUk0OngAAAgY"]
[Thu Feb 26 20:47:51.568197 2026] [:error] [pid 3883:tid 3894] [client 52.169.5.4:10009] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/samfa.php"] [unique_id "aaBA9-A33x90V6yYHajWIAAAAUg"]
[Thu Feb 26 20:47:52.146524 2026] [:error] [pid 55051:tid 55076] [client 52.169.5.4:10687] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/boots.php"] [unique_id "aaBA-AmK1w2kZvh5eLGilgAAAJY"]
[Thu Feb 26 20:47:52.726793 2026] [:error] [pid 55051:tid 55057] [client 52.169.5.4:4034] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/boots.php"] [unique_id "aaBA-AmK1w2kZvh5eLGimQAAAIM"]
[Thu Feb 26 20:47:53.304274 2026] [:error] [pid 55122:tid 55125] [client 52.169.5.4:12451] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/boots.php"] [unique_id "aaBA-YLiR0OfjFxvcN8rRQAAAME"]
[Thu Feb 26 20:47:53.878833 2026] [:error] [pid 55122:tid 55139] [client 52.169.5.4:1818] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/boots.php"] [unique_id "aaBA-YLiR0OfjFxvcN8rSAAAAM8"]
[Thu Feb 26 20:47:54.450373 2026] [:error] [pid 55618:tid 55635] [client 52.169.5.4:4981] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logi.php"] [unique_id "aaBA-h61Vrh12f_8oWQGNAAAAQ4"]
[Thu Feb 26 20:47:55.023632 2026] [:error] [pid 25311:tid 25335] [client 52.169.5.4:1611] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logi.php"] [unique_id "aaBA-9fdM__yZAgJFSvXtAAAAZU"]
[Thu Feb 26 20:47:55.595508 2026] [:error] [pid 55051:tid 55078] [client 52.169.5.4:4988] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logi.php"] [unique_id "aaBA-wmK1w2kZvh5eLGinQAAAJg"]
[Thu Feb 26 20:47:56.173675 2026] [:error] [pid 55051:tid 55055] [client 52.169.5.4:13311] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logi.php"] [unique_id "aaBA_AmK1w2kZvh5eLGioAAAAIE"]
[Thu Feb 26 20:51:46.255189 2026] [:error] [pid 25311:tid 25333] [client 43.156.168.214:40580] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaBB4tfdM__yZAgJFSvYqAAAAZM"]
[Thu Feb 26 22:01:09.236597 2026] [:error] [pid 55051:tid 55056] [client 157.245.196.99:55950] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBSJQmK1w2kZvh5eLHB6AAAAII"]
[Thu Feb 26 22:15:23.047162 2026] [:error] [pid 55051:tid 55059] [client 2.58.56.91:64873] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aaBVewmK1w2kZvh5eLHJfAAAAIU"]
[Thu Feb 26 22:15:23.548310 2026] [:error] [pid 55051:tid 55064] [client 2.58.56.91:49312] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aaBVewmK1w2kZvh5eLHJfQAAAIo"]
[Thu Feb 26 22:15:24.056463 2026] [:error] [pid 3883:tid 3909] [client 2.58.56.91:50049] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aaBVfOA33x90V6yYHajz9gAAAVc"]
[Thu Feb 26 22:15:25.087637 2026] [:error] [pid 44444:tid 44467] [client 2.58.56.91:51413] [client 2.58.56.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aaBVfW2sMNmj-yekUk1F9gAAAhE"]
[Thu Feb 26 23:12:32.467689 2026] [:error] [pid 55051:tid 55074] [client 43.131.39.179:40008] [client 43.131.39.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaBi4AmK1w2kZvh5eLHm3wAAAJQ"]
[Thu Feb 26 23:36:26.025645 2026] [:error] [pid 44444:tid 44465] [client 194.180.48.253:58398] [client 194.180.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aaBoem2sMNmj-yekUk2APQAAAg8"]
[Fri Feb 27 02:08:05.312633 2026] [:error] [pid 19020:tid 19026] [client 20.220.232.101:46056] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaCMBbN3kp7wL6QzPnU2RQAAAUQ"]
[Fri Feb 27 02:08:06.528649 2026] [:error] [pid 20059:tid 20107] [client 20.220.232.101:46055] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaCMBpZBS5wIa_NsqsglOgAAAcU"]
[Fri Feb 27 02:08:07.888680 2026] [:error] [pid 20059:tid 20116] [client 20.220.232.101:46021] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaCMB5ZBS5wIa_NsqsglRQAAAc4"]
[Fri Feb 27 02:08:08.576550 2026] [:error] [pid 20059:tid 20119] [client 20.220.232.101:45968] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaCMCJZBS5wIa_NsqsglUAAAAdE"]
[Fri Feb 27 02:08:09.591100 2026] [:error] [pid 20059:tid 20112] [client 20.220.232.101:46073] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaCMCZZBS5wIa_NsqsglWQAAAco"]
[Fri Feb 27 02:08:10.626615 2026] [:error] [pid 20059:tid 20109] [client 20.220.232.101:45963] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaCMCpZBS5wIa_NsqsglYgAAAcc"]
[Fri Feb 27 02:08:11.775896 2026] [:error] [pid 20059:tid 20104] [client 20.220.232.101:46068] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaCMC5ZBS5wIa_NsqsglbAAAAcI"]
[Fri Feb 27 02:08:13.854021 2026] [:error] [pid 18831:tid 18913] [client 20.220.232.101:45955] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaCMDf5KHTHUIuWRG2bUwwAAAEA"]
[Fri Feb 27 02:08:14.770756 2026] [:error] [pid 18843:tid 18954] [client 20.220.232.101:46018] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaCMDiuD2bhSYSowPs0LewAAAQ4"]
[Fri Feb 27 02:08:15.952040 2026] [:error] [pid 18843:tid 18948] [client 20.220.232.101:46063] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaCMDyuD2bhSYSowPs0LfQAAAQg"]
[Fri Feb 27 02:08:17.147692 2026] [:error] [pid 20059:tid 20124] [client 20.220.232.101:45976] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaCMEZZBS5wIa_NsqsgljAAAAdY"]
[Fri Feb 27 02:08:18.251479 2026] [:error] [pid 20059:tid 20123] [client 20.220.232.101:46017] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaCMEpZBS5wIa_NsqsglkwAAAdU"]
[Fri Feb 27 02:08:19.142062 2026] [:error] [pid 20059:tid 20124] [client 20.220.232.101:45964] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaCME5ZBS5wIa_NsqsgllwAAAdY"]
[Fri Feb 27 02:08:19.962457 2026] [:error] [pid 18831:tid 18935] [client 20.220.232.101:46023] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaCME_5KHTHUIuWRG2bUzwAAAFY"]
[Fri Feb 27 02:08:21.564308 2026] [:error] [pid 18843:tid 18940] [client 20.220.232.101:46036] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaCMFSuD2bhSYSowPs0LhwAAAQA"]
[Fri Feb 27 02:08:23.268686 2026] [:error] [pid 20059:tid 20111] [client 20.220.232.101:46031] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaCMF5ZBS5wIa_NsqsglqwAAAck"]
[Fri Feb 27 02:08:24.570002 2026] [:error] [pid 19020:tid 19042] [client 20.220.232.101:46027] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaCMGLN3kp7wL6QzPnU2WQAAAVQ"]
[Fri Feb 27 02:08:25.727131 2026] [:error] [pid 18831:tid 18919] [client 20.220.232.101:46076] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaCMGf5KHTHUIuWRG2bU1gAAAEY"]
[Fri Feb 27 02:08:26.498558 2026] [:error] [pid 18831:tid 18925] [client 20.220.232.101:46041] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaCMGv5KHTHUIuWRG2bU1wAAAEw"]
[Fri Feb 27 02:08:27.268131 2026] [:error] [pid 19020:tid 19031] [client 20.220.232.101:46045] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaCMG7N3kp7wL6QzPnU2aAAAAUk"]
[Fri Feb 27 02:08:28.756957 2026] [:error] [pid 18843:tid 18956] [client 20.220.232.101:46047] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaCMHCuD2bhSYSowPs0LkgAAARA"]
[Fri Feb 27 02:08:29.841071 2026] [:error] [pid 19020:tid 19025] [client 20.220.232.101:45956] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaCMHbN3kp7wL6QzPnU2bAAAAUM"]
[Fri Feb 27 02:08:30.681659 2026] [:error] [pid 19020:tid 19022] [client 20.220.232.101:45965] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaCMHrN3kp7wL6QzPnU2cAAAAUA"]
[Fri Feb 27 02:08:31.555069 2026] [:error] [pid 20059:tid 20106] [client 20.220.232.101:46070] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaCMH5ZBS5wIa_Nsqsgl5wAAAcQ"]
[Fri Feb 27 02:08:32.375382 2026] [:error] [pid 19020:tid 19024] [client 20.220.232.101:45982] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaCMILN3kp7wL6QzPnU2egAAAUI"]
[Fri Feb 27 02:08:33.183450 2026] [:error] [pid 20059:tid 20120] [client 20.220.232.101:46030] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaCMIZZBS5wIa_Nsqsgl9wAAAdI"]
[Fri Feb 27 02:08:34.250616 2026] [:error] [pid 19020:tid 19032] [client 20.220.232.101:45991] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaCMIrN3kp7wL6QzPnU2gQAAAUo"]
[Fri Feb 27 02:08:34.967030 2026] [:error] [pid 20059:tid 20121] [client 20.220.232.101:46034] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaCMIpZBS5wIa_Nsqsgl-gAAAdM"]
[Fri Feb 27 02:08:36.432917 2026] [:error] [pid 19020:tid 19039] [client 20.220.232.101:45953] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaCMJLN3kp7wL6QzPnU2igAAAVE"]
[Fri Feb 27 02:08:37.445252 2026] [:error] [pid 18843:tid 18952] [client 20.220.232.101:45967] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaCMJSuD2bhSYSowPs0LqwAAAQw"]
[Fri Feb 27 02:08:37.994921 2026] [:error] [pid 20059:tid 20120] [client 20.220.232.101:45958] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaCMJZZBS5wIa_NsqsgmDAAAAdI"]
[Fri Feb 27 02:08:38.909328 2026] [:error] [pid 20059:tid 20125] [client 20.220.232.101:45970] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaCMJpZBS5wIa_NsqsgmFwAAAdc"]
[Fri Feb 27 02:08:40.102296 2026] [:error] [pid 20059:tid 20115] [client 20.220.232.101:46077] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaCMKJZBS5wIa_NsqsgmIQAAAc0"]
[Fri Feb 27 02:08:41.093694 2026] [:error] [pid 18831:tid 18915] [client 20.220.232.101:46066] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaCMKf5KHTHUIuWRG2bU6wAAAEI"]
[Fri Feb 27 02:08:42.144682 2026] [:error] [pid 20059:tid 20108] [client 20.220.232.101:46049] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaCMKpZBS5wIa_NsqsgmNAAAAcY"]
[Fri Feb 27 02:08:43.655438 2026] [:error] [pid 19020:tid 19043] [client 20.220.232.101:45961] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaCMK7N3kp7wL6QzPnU2mAAAAVU"]
[Fri Feb 27 02:08:44.786306 2026] [:error] [pid 20059:tid 20114] [client 20.220.232.101:46067] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaCMLJZBS5wIa_NsqsgmRwAAAcw"]
[Fri Feb 27 02:08:45.745317 2026] [:error] [pid 20059:tid 20119] [client 20.220.232.101:46061] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaCMLZZBS5wIa_NsqsgmTgAAAdE"]
[Fri Feb 27 02:08:46.530956 2026] [:error] [pid 18831:tid 18937] [client 20.220.232.101:46054] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaCMLv5KHTHUIuWRG2bU-gAAAFg"]
[Fri Feb 27 02:08:47.441109 2026] [:error] [pid 19020:tid 19046] [client 20.220.232.101:45954] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaCML7N3kp7wL6QzPnU2rAAAAVg"]
[Fri Feb 27 02:08:48.042986 2026] [:error] [pid 20059:tid 20119] [client 20.220.232.101:46069] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaCMMJZBS5wIa_NsqsgmWAAAAdE"]
[Fri Feb 27 02:08:48.674376 2026] [:error] [pid 19020:tid 19030] [client 20.220.232.101:46038] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaCMMLN3kp7wL6QzPnU2ugAAAUg"]
[Fri Feb 27 02:08:49.567799 2026] [:error] [pid 18843:tid 18958] [client 20.220.232.101:46006] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaCMMSuD2bhSYSowPs0LuwAAARI"]
[Fri Feb 27 02:08:51.421026 2026] [:error] [pid 18818:tid 18887] [client 20.220.232.101:46019] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaCMMxhPgqk2SeS_W83K0wAAAAM"]
[Fri Feb 27 02:08:53.372951 2026] [:error] [pid 20059:tid 20110] [client 20.220.232.101:46005] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaCMNZZBS5wIa_NsqsgmegAAAcg"]
[Fri Feb 27 02:08:54.556242 2026] [:error] [pid 18843:tid 18961] [client 20.220.232.101:45971] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaCMNiuD2bhSYSowPs0LyQAAARU"]
[Fri Feb 27 02:08:56.193205 2026] [:error] [pid 19020:tid 19034] [client 20.220.232.101:45977] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaCMOLN3kp7wL6QzPnU2xgAAAUw"]
[Fri Feb 27 02:08:58.510839 2026] [:error] [pid 18843:tid 18952] [client 20.220.232.101:46050] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaCMOiuD2bhSYSowPs0L1AAAAQw"]
[Fri Feb 27 02:09:01.122271 2026] [:error] [pid 18818:tid 18887] [client 20.220.232.101:46048] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaCMPRhPgqk2SeS_W83K5AAAAAM"]
[Fri Feb 27 02:09:02.144939 2026] [:error] [pid 20059:tid 20125] [client 20.220.232.101:45888] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaCMPpZBS5wIa_NsqsgmpAAAAdc"]
[Fri Feb 27 02:09:03.172915 2026] [:error] [pid 20059:tid 20123] [client 20.220.232.101:45962] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaCMP5ZBS5wIa_NsqsgmsQAAAdU"]
[Fri Feb 27 02:09:04.943939 2026] [:error] [pid 18818:tid 18905] [client 20.220.232.101:45989] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaCMQBhPgqk2SeS_W83K8QAAABU"]
[Fri Feb 27 02:09:15.491520 2026] [:error] [pid 19020:tid 19026] [client 20.220.232.101:46062] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaCMS7N3kp7wL6QzPnU28QAAAUQ"]
[Fri Feb 27 02:09:16.918055 2026] [:error] [pid 18818:tid 18895] [client 20.220.232.101:46053] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaCMTBhPgqk2SeS_W83K-wAAAAs"]
[Fri Feb 27 02:09:17.968890 2026] [:error] [pid 20059:tid 20125] [client 20.220.232.101:46004] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaCMTZZBS5wIa_NsqsgnIwAAAdc"]
[Fri Feb 27 02:09:19.889230 2026] [:error] [pid 18843:tid 18950] [client 20.220.232.101:45995] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaCMTyuD2bhSYSowPs0L_QAAAQo"]
[Fri Feb 27 02:09:21.660118 2026] [:error] [pid 19020:tid 19031] [client 20.220.232.101:45906] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaCMUbN3kp7wL6QzPnU2-QAAAUk"]
[Fri Feb 27 02:09:22.399915 2026] [:error] [pid 18843:tid 18963] [client 20.220.232.101:46051] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaCMUiuD2bhSYSowPs0MAAAAARc"]
[Fri Feb 27 02:09:23.181257 2026] [:error] [pid 19020:tid 19036] [client 20.220.232.101:46052] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaCMU7N3kp7wL6QzPnU2_AAAAU4"]
[Fri Feb 27 02:09:25.460174 2026] [:error] [pid 19020:tid 19035] [client 20.220.232.101:45904] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaCMVbN3kp7wL6QzPnU3BAAAAU0"]
[Fri Feb 27 02:09:27.257256 2026] [:error] [pid 19020:tid 19044] [client 20.220.232.101:46064] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaCMV7N3kp7wL6QzPnU3CQAAAVY"]
[Fri Feb 27 02:09:28.357009 2026] [:error] [pid 19020:tid 19022] [client 20.220.232.101:46032] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaCMWLN3kp7wL6QzPnU3DwAAAUA"]
[Fri Feb 27 02:09:29.126700 2026] [:error] [pid 18831:tid 18932] [client 20.220.232.101:46060] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaCMWf5KHTHUIuWRG2bVKAAAAFM"]
[Fri Feb 27 02:09:29.705259 2026] [:error] [pid 20059:tid 20110] [client 20.220.232.101:46057] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaCMWZZBS5wIa_NsqsgnPAAAAcg"]
[Fri Feb 27 02:09:30.686085 2026] [:error] [pid 20059:tid 20118] [client 20.220.232.101:45998] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaCMWpZBS5wIa_NsqsgnRAAAAdA"]
[Fri Feb 27 02:09:31.724599 2026] [:error] [pid 18831:tid 18925] [client 20.220.232.101:45966] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaCMW_5KHTHUIuWRG2bVLQAAAEw"]
[Fri Feb 27 02:09:32.479683 2026] [:error] [pid 18818:tid 18897] [client 20.220.232.101:45990] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaCMXBhPgqk2SeS_W83LEgAAAA0"]
[Fri Feb 27 02:09:33.142763 2026] [:error] [pid 20059:tid 20121] [client 20.220.232.101:45984] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaCMXZZBS5wIa_NsqsgnTQAAAdM"]
[Fri Feb 27 02:09:33.912570 2026] [:error] [pid 20059:tid 20111] [client 20.220.232.101:45986] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaCMXZZBS5wIa_NsqsgnUAAAAck"]
[Fri Feb 27 02:09:35.316745 2026] [:error] [pid 19020:tid 19040] [client 20.220.232.101:46025] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaCMX7N3kp7wL6QzPnU3JAAAAVI"]
[Fri Feb 27 02:09:36.012538 2026] [:error] [pid 20059:tid 20104] [client 20.220.232.101:45988] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaCMYJZBS5wIa_NsqsgnWAAAAcI"]
[Fri Feb 27 02:09:36.477480 2026] [:error] [pid 18818:tid 18889] [client 20.220.232.101:45978] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaCMYBhPgqk2SeS_W83LGwAAAAU"]
[Fri Feb 27 02:09:37.533554 2026] [:error] [pid 19020:tid 19028] [client 20.220.232.101:45898] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaCMYbN3kp7wL6QzPnU3LQAAAUY"]
[Fri Feb 27 02:09:39.074816 2026] [:error] [pid 18843:tid 18964] [client 20.220.232.101:46046] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaCMYyuD2bhSYSowPs0MJgAAARg"]
[Fri Feb 27 02:09:39.830662 2026] [:error] [pid 18843:tid 18946] [client 20.220.232.101:46011] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaCMYyuD2bhSYSowPs0MKQAAAQY"]
[Fri Feb 27 02:09:40.604043 2026] [:error] [pid 20059:tid 20104] [client 20.220.232.101:46074] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaCMZJZBS5wIa_NsqsgnZgAAAcI"]
[Fri Feb 27 02:09:41.810749 2026] [:error] [pid 20059:tid 20121] [client 20.220.232.101:46042] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaCMZZZBS5wIa_NsqsgnbgAAAdM"]
[Fri Feb 27 02:09:43.039800 2026] [:error] [pid 18831:tid 18926] [client 20.220.232.101:46028] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaCMZ_5KHTHUIuWRG2bVPQAAAE0"]
[Fri Feb 27 02:09:45.610371 2026] [:error] [pid 20059:tid 20102] [client 20.220.232.101:46024] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaCMaZZBS5wIa_NsqsgnhAAAAcA"]
[Fri Feb 27 02:09:47.700804 2026] [:error] [pid 19020:tid 19029] [client 20.220.232.101:45960] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaCMa7N3kp7wL6QzPnU3SwAAAUc"]
[Fri Feb 27 02:09:49.486604 2026] [:error] [pid 18843:tid 18960] [client 20.220.232.101:45943] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaCMbSuD2bhSYSowPs0MPgAAARQ"]
[Fri Feb 27 02:09:51.951170 2026] [:error] [pid 19020:tid 19031] [client 20.220.232.101:45896] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaCMb7N3kp7wL6QzPnU3WAAAAUk"]
[Fri Feb 27 02:09:53.199246 2026] [:error] [pid 18831:tid 18924] [client 20.220.232.101:46022] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaCMcf5KHTHUIuWRG2bVUQAAAEs"]
[Fri Feb 27 02:09:54.461838 2026] [:error] [pid 20059:tid 20103] [client 20.220.232.101:46016] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaCMcpZBS5wIa_NsqsgnnQAAAcE"]
[Fri Feb 27 02:09:55.813554 2026] [:error] [pid 19020:tid 19035] [client 20.220.232.101:46013] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aaCMc7N3kp7wL6QzPnU3ZwAAAU0"]
[Fri Feb 27 02:09:57.539216 2026] [:error] [pid 18843:tid 18956] [client 20.220.232.101:45942] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aaCMdSuD2bhSYSowPs0MRQAAARA"]
[Fri Feb 27 02:10:00.646426 2026] [:error] [pid 18831:tid 18934] [client 20.220.232.101:46015] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aaCMeP5KHTHUIuWRG2bVYwAAAFU"]
[Fri Feb 27 02:10:02.762333 2026] [:error] [pid 18818:tid 18897] [client 20.220.232.101:46072] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aaCMehhPgqk2SeS_W83LLAAAAA0"]
[Fri Feb 27 02:10:04.762672 2026] [:error] [pid 19020:tid 19042] [client 20.220.232.101:46043] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaCMfLN3kp7wL6QzPnU3fwAAAVQ"]
[Fri Feb 27 02:10:06.050362 2026] [:error] [pid 19020:tid 19025] [client 20.220.232.101:45975] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaCMfrN3kp7wL6QzPnU3hQAAAUM"]
[Fri Feb 27 02:10:07.531561 2026] [:error] [pid 18843:tid 18946] [client 20.220.232.101:46033] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaCMfyuD2bhSYSowPs0MWAAAAQY"]
[Fri Feb 27 02:10:08.384925 2026] [:error] [pid 20059:tid 20117] [client 20.220.232.101:45992] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaCMgJZBS5wIa_NsqsgnwAAAAc8"]
[Fri Feb 27 02:10:09.268331 2026] [:error] [pid 20059:tid 20114] [client 20.220.232.101:46078] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaCMgZZBS5wIa_NsqsgnxQAAAcw"]
[Fri Feb 27 02:10:10.033784 2026] [:error] [pid 19020:tid 19026] [client 20.220.232.101:45940] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaCMgrN3kp7wL6QzPnU3mQAAAUQ"]
[Fri Feb 27 02:10:10.600636 2026] [:error] [pid 19020:tid 19022] [client 20.220.232.101:46007] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaCMgrN3kp7wL6QzPnU3nAAAAUA"]
[Fri Feb 27 02:10:11.498197 2026] [:error] [pid 19020:tid 19030] [client 20.220.232.101:46071] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaCMg7N3kp7wL6QzPnU3oAAAAUg"]
[Fri Feb 27 02:10:12.266064 2026] [:error] [pid 19020:tid 19042] [client 20.220.232.101:46020] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaCMhLN3kp7wL6QzPnU3oQAAAVQ"]
[Fri Feb 27 02:10:12.952671 2026] [:error] [pid 18831:tid 18920] [client 20.220.232.101:45889] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaCMhP5KHTHUIuWRG2bVfgAAAEc"]
[Fri Feb 27 02:10:13.487145 2026] [:error] [pid 19020:tid 19046] [client 20.220.232.101:45972] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaCMhbN3kp7wL6QzPnU3owAAAVg"]
[Fri Feb 27 02:10:14.038508 2026] [:error] [pid 18831:tid 18925] [client 20.220.232.101:46009] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaCMhv5KHTHUIuWRG2bVgQAAAEw"]
[Fri Feb 27 02:10:14.818912 2026] [:error] [pid 18818:tid 18894] [client 20.220.232.101:46037] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaCMhhhPgqk2SeS_W83LPwAAAAo"]
[Fri Feb 27 02:10:22.630602 2026] [:error] [pid 18818:tid 18890] [client 20.220.232.101:45890] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaCMjhhPgqk2SeS_W83LcAAAAAY"]
[Fri Feb 27 02:10:23.309361 2026] [:error] [pid 18843:tid 18944] [client 20.220.232.101:45930] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaCMjyuD2bhSYSowPs0MbAAAAQQ"]
[Fri Feb 27 02:10:23.990129 2026] [:error] [pid 19020:tid 19038] [client 20.220.232.101:45913] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaCMj7N3kp7wL6QzPnU3yAAAAVA"]
[Fri Feb 27 02:10:24.768784 2026] [:error] [pid 19020:tid 19028] [client 20.220.232.101:45957] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaCMkLN3kp7wL6QzPnU3zgAAAUY"]
[Fri Feb 27 02:10:26.566442 2026] [:error] [pid 19020:tid 19045] [client 20.220.232.101:46040] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaCMkrN3kp7wL6QzPnU31QAAAVc"]
[Fri Feb 27 02:10:28.039141 2026] [:error] [pid 20059:tid 20121] [client 20.220.232.101:46012] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaCMlJZBS5wIa_NsqsgoDAAAAdM"]
[Fri Feb 27 02:10:28.692526 2026] [:error] [pid 18843:tid 18945] [client 20.220.232.101:45959] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaCMlCuD2bhSYSowPs0McAAAAQU"]
[Fri Feb 27 02:10:29.356010 2026] [:error] [pid 18843:tid 18946] [client 20.220.232.101:45912] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaCMlSuD2bhSYSowPs0McwAAAQY"]
[Fri Feb 27 02:10:30.072888 2026] [:error] [pid 19020:tid 19040] [client 20.220.232.101:45825] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aaCMlrN3kp7wL6QzPnU32gAAAVI"]
[Fri Feb 27 02:10:31.234850 2026] [:error] [pid 19020:tid 19042] [client 20.220.232.101:45979] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aaCMl7N3kp7wL6QzPnU34QAAAVQ"]
[Fri Feb 27 02:10:32.102251 2026] [:error] [pid 18843:tid 18957] [client 20.220.232.101:45893] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aaCMmCuD2bhSYSowPs0MeAAAARE"]
[Fri Feb 27 02:10:33.682448 2026] [:error] [pid 20059:tid 20126] [client 20.220.232.101:46058] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aaCMmZZBS5wIa_NsqsgoHgAAAdg"]
[Fri Feb 27 02:10:35.280295 2026] [:error] [pid 19020:tid 19030] [client 20.220.232.101:45905] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaCMm7N3kp7wL6QzPnU37QAAAUg"]
[Fri Feb 27 02:10:35.828413 2026] [:error] [pid 20059:tid 20111] [client 20.220.232.101:45923] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaCMm5ZBS5wIa_NsqsgoJgAAAck"]
[Fri Feb 27 02:10:38.497467 2026] [:error] [pid 20059:tid 20112] [client 20.220.232.101:45993] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaCMnpZBS5wIa_NsqsgoNgAAAco"]
[Fri Feb 27 02:10:40.119565 2026] [:error] [pid 19020:tid 19026] [client 20.220.232.101:45921] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaCMoLN3kp7wL6QzPnU3-QAAAUQ"]
[Fri Feb 27 02:10:41.660010 2026] [:error] [pid 18843:tid 18943] [client 20.220.232.101:45983] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aaCMoSuD2bhSYSowPs0MfwAAAQM"]
[Fri Feb 27 02:10:42.527632 2026] [:error] [pid 18843:tid 18940] [client 20.220.232.101:45900] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aaCMoiuD2bhSYSowPs0MgQAAAQA"]
[Fri Feb 27 02:10:43.495501 2026] [:error] [pid 18831:tid 18926] [client 20.220.232.101:45969] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aaCMo_5KHTHUIuWRG2bVpAAAAE0"]
[Fri Feb 27 02:10:45.325547 2026] [:error] [pid 18818:tid 18897] [client 20.220.232.101:45939] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aaCMpRhPgqk2SeS_W83LgwAAAA0"]
[Fri Feb 27 02:10:47.331853 2026] [:error] [pid 19020:tid 19031] [client 20.220.232.101:46065] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaCMp7N3kp7wL6QzPnU4DwAAAUk"]
[Fri Feb 27 02:10:48.500064 2026] [:error] [pid 20059:tid 20110] [client 20.220.232.101:45895] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaCMqJZBS5wIa_NsqsgoWAAAAcg"]
[Fri Feb 27 02:10:49.540425 2026] [:error] [pid 19020:tid 19026] [client 20.220.232.101:46002] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaCMqbN3kp7wL6QzPnU4FQAAAUQ"]
[Fri Feb 27 02:10:50.771766 2026] [:error] [pid 19020:tid 19046] [client 20.220.232.101:45907] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaCMqrN3kp7wL6QzPnU4HQAAAVg"]
[Fri Feb 27 02:10:51.478259 2026] [:error] [pid 20059:tid 20115] [client 20.220.232.101:45899] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaCMq5ZBS5wIa_NsqsgoagAAAc0"]
[Fri Feb 27 02:10:53.234190 2026] [:error] [pid 18831:tid 18919] [client 20.220.232.101:45925] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaCMrf5KHTHUIuWRG2bVqgAAAEY"]
[Fri Feb 27 02:10:54.571231 2026] [:error] [pid 20059:tid 20124] [client 20.220.232.101:46039] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaCMrpZBS5wIa_NsqsgodAAAAdY"]
[Fri Feb 27 02:10:56.350041 2026] [:error] [pid 18843:tid 18955] [client 20.220.232.101:46035] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaCMsCuD2bhSYSowPs0MmQAAAQ8"]
[Fri Feb 27 02:10:57.923405 2026] [:error] [pid 18818:tid 18895] [client 20.220.232.101:46026] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaCMsRhPgqk2SeS_W83LpQAAAAs"]
[Fri Feb 27 02:10:58.740849 2026] [:error] [pid 18818:tid 18891] [client 20.220.232.101:45908] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaCMshhPgqk2SeS_W83LqQAAAAc"]
[Fri Feb 27 02:11:00.125195 2026] [:error] [pid 20059:tid 20115] [client 20.220.232.101:46079] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaCMtJZBS5wIa_NsqsgogQAAAc0"]
[Fri Feb 27 02:11:01.612264 2026] [:error] [pid 18831:tid 18927] [client 20.220.232.101:46000] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaCMtf5KHTHUIuWRG2bVuAAAAE4"]
[Fri Feb 27 02:11:02.577929 2026] [:error] [pid 20059:tid 20117] [client 20.220.232.101:45928] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaCMtpZBS5wIa_NsqsgohwAAAc8"]
[Fri Feb 27 02:11:03.312823 2026] [:error] [pid 18843:tid 18945] [client 20.220.232.101:45946] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaCMtyuD2bhSYSowPs0MoQAAAQU"]
[Fri Feb 27 02:11:04.378072 2026] [:error] [pid 18843:tid 18944] [client 20.220.232.101:46014] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaCMuCuD2bhSYSowPs0MpAAAAQQ"]
[Fri Feb 27 02:11:05.347362 2026] [:error] [pid 18843:tid 18961] [client 20.220.232.101:45931] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaCMuSuD2bhSYSowPs0MpgAAARU"]
[Fri Feb 27 02:11:06.165582 2026] [:error] [pid 18843:tid 18959] [client 20.220.232.101:45827] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaCMuiuD2bhSYSowPs0MrQAAARM"]
[Fri Feb 27 02:11:07.404805 2026] [:error] [pid 19020:tid 19022] [client 20.220.232.101:45974] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaCMu7N3kp7wL6QzPnU4PwAAAUA"]
[Fri Feb 27 02:11:07.980928 2026] [:error] [pid 18831:tid 18936] [client 20.220.232.101:45915] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaCMu_5KHTHUIuWRG2bVxQAAAFc"]
[Fri Feb 27 02:11:08.566374 2026] [:error] [pid 18843:tid 18956] [client 20.220.232.101:45926] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaCMvCuD2bhSYSowPs0MrwAAARA"]
[Fri Feb 27 02:11:09.612927 2026] [:error] [pid 18831:tid 18913] [client 20.220.232.101:45922] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaCMvf5KHTHUIuWRG2bVxgAAAEA"]
[Fri Feb 27 02:11:11.316123 2026] [:error] [pid 18831:tid 18917] [client 20.220.232.101:45950] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaCMv_5KHTHUIuWRG2bVyQAAAEQ"]
[Fri Feb 27 02:11:12.127082 2026] [:error] [pid 18818:tid 18895] [client 20.220.232.101:45933] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaCMwBhPgqk2SeS_W83LxgAAAAs"]
[Fri Feb 27 02:11:13.049537 2026] [:error] [pid 18831:tid 18927] [client 20.220.232.101:45935] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaCMwf5KHTHUIuWRG2bV0AAAAE4"]
[Fri Feb 27 02:11:13.845161 2026] [:error] [pid 20059:tid 20111] [client 20.220.232.101:45844] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaCMwZZBS5wIa_NsqsgomAAAAck"]
[Fri Feb 27 02:11:14.633275 2026] [:error] [pid 20059:tid 20103] [client 20.220.232.101:45762] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaCMwpZBS5wIa_NsqsgonAAAAcE"]
[Fri Feb 27 02:11:15.672278 2026] [:error] [pid 18831:tid 18923] [client 20.220.232.101:46010] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaCMw_5KHTHUIuWRG2bV1wAAAEo"]
[Fri Feb 27 02:11:16.422274 2026] [:error] [pid 20059:tid 20112] [client 20.220.232.101:45897] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaCMxJZBS5wIa_NsqsgopwAAAco"]
[Fri Feb 27 02:11:17.270436 2026] [:error] [pid 18831:tid 18924] [client 20.220.232.101:45938] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaCMxf5KHTHUIuWRG2bV3QAAAEs"]
[Fri Feb 27 02:11:18.340989 2026] [:error] [pid 18831:tid 18928] [client 20.220.232.101:45997] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaCMxv5KHTHUIuWRG2bV4gAAAE8"]
[Fri Feb 27 02:11:19.591305 2026] [:error] [pid 18831:tid 18937] [client 20.220.232.101:45903] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaCMx_5KHTHUIuWRG2bV6QAAAFg"]
[Fri Feb 27 02:11:27.209766 2026] [:error] [pid 18818:tid 18885] [client 20.220.232.101:45914] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaCMzxhPgqk2SeS_W83LzQAAAAE"]
[Fri Feb 27 02:11:28.332935 2026] [:error] [pid 20059:tid 20103] [client 20.220.232.101:45850] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaCM0JZBS5wIa_Nsqsgo3AAAAcE"]
[Fri Feb 27 02:11:31.290322 2026] [:error] [pid 18843:tid 18948] [client 20.220.232.101:45859] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaCM0yuD2bhSYSowPs0MzAAAAQg"]
[Fri Feb 27 02:11:33.323355 2026] [:error] [pid 19020:tid 19041] [client 20.220.232.101:45855] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaCM1bN3kp7wL6QzPnU4fgAAAVM"]
[Fri Feb 27 02:11:36.173703 2026] [:error] [pid 19020:tid 19035] [client 20.220.232.101:45987] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaCM2LN3kp7wL6QzPnU4jAAAAU0"]
[Fri Feb 27 02:11:37.663871 2026] [:error] [pid 18843:tid 18962] [client 20.220.232.101:45771] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaCM2SuD2bhSYSowPs0M3AAAARY"]
[Fri Feb 27 02:11:39.974253 2026] [:error] [pid 18831:tid 18914] [client 20.220.232.101:45985] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaCM2_5KHTHUIuWRG2bV-QAAAEE"]
[Fri Feb 27 02:11:41.311079 2026] [:error] [pid 19020:tid 19034] [client 20.220.232.101:45910] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaCM3bN3kp7wL6QzPnU4kQAAAUw"]
[Fri Feb 27 02:11:43.011578 2026] [:error] [pid 20059:tid 20118] [client 20.220.232.101:45894] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaCM35ZBS5wIa_NsqsgpCQAAAdA"]
[Fri Feb 27 02:11:44.463588 2026] [:error] [pid 20059:tid 20102] [client 20.220.232.101:45936] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaCM4JZBS5wIa_NsqsgpDwAAAcA"]
[Fri Feb 27 02:11:45.787855 2026] [:error] [pid 19020:tid 19023] [client 20.220.232.101:45949] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaCM4bN3kp7wL6QzPnU4oQAAAUE"]
[Fri Feb 27 02:11:47.650984 2026] [:error] [pid 20059:tid 20105] [client 20.220.232.101:45994] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaCM45ZBS5wIa_NsqsgpFgAAAcM"]
[Fri Feb 27 02:11:48.256690 2026] [:error] [pid 20059:tid 20112] [client 20.220.232.101:45901] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaCM5JZBS5wIa_NsqsgpGQAAAco"]
[Fri Feb 27 02:11:49.146676 2026] [:error] [pid 19020:tid 19037] [client 20.220.232.101:45836] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaCM5bN3kp7wL6QzPnU4rgAAAU8"]
[Fri Feb 27 02:11:49.816850 2026] [:error] [pid 20059:tid 20126] [client 20.220.232.101:46008] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaCM5ZZBS5wIa_NsqsgpJgAAAdg"]
[Fri Feb 27 02:11:50.617143 2026] [:error] [pid 19020:tid 19045] [client 20.220.232.101:46059] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaCM5rN3kp7wL6QzPnU4swAAAVc"]
[Fri Feb 27 02:11:51.482942 2026] [:error] [pid 20059:tid 20122] [client 20.220.232.101:46044] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaCM55ZBS5wIa_NsqsgpNwAAAdQ"]
[Fri Feb 27 02:11:52.348141 2026] [:error] [pid 19020:tid 19031] [client 20.220.232.101:45832] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaCM6LN3kp7wL6QzPnU4uwAAAUk"]
[Fri Feb 27 02:11:53.390489 2026] [:error] [pid 19020:tid 19028] [client 20.220.232.101:45828] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaCM6bN3kp7wL6QzPnU4wwAAAUY"]
[Fri Feb 27 02:11:54.391937 2026] [:error] [pid 19020:tid 19038] [client 20.220.232.101:46054] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaCM6rN3kp7wL6QzPnU4xwAAAVA"]
[Fri Feb 27 02:11:55.192449 2026] [:error] [pid 19020:tid 19043] [client 20.220.232.101:45863] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaCM67N3kp7wL6QzPnU4ywAAAVU"]
[Fri Feb 27 02:11:56.058889 2026] [:error] [pid 18831:tid 18923] [client 20.220.232.101:46075] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaCM7P5KHTHUIuWRG2bWEQAAAEo"]
[Fri Feb 27 02:11:57.434170 2026] [:error] [pid 18843:tid 18960] [client 20.220.232.101:45763] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaCM7SuD2bhSYSowPs0M9wAAARQ"]
[Fri Feb 27 02:11:58.318548 2026] [:error] [pid 20059:tid 20124] [client 20.220.232.101:46003] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaCM7pZBS5wIa_NsqsgpQwAAAdY"]
[Fri Feb 27 02:11:59.118046 2026] [:error] [pid 19020:tid 19045] [client 20.220.232.101:45838] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaCM77N3kp7wL6QzPnU43QAAAVc"]
[Fri Feb 27 02:11:59.965488 2026] [:error] [pid 18843:tid 18963] [client 20.220.232.101:45932] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaCM7yuD2bhSYSowPs0M_gAAARc"]
[Fri Feb 27 02:12:01.033645 2026] [:error] [pid 18831:tid 18936] [client 20.220.232.101:45917] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaCM8f5KHTHUIuWRG2bWFwAAAFc"]
[Fri Feb 27 02:12:01.514640 2026] [:error] [pid 19020:tid 19022] [client 20.220.232.101:45875] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaCM8bN3kp7wL6QzPnU45AAAAUA"]
[Fri Feb 27 02:12:02.065223 2026] [:error] [pid 19020:tid 19029] [client 20.220.232.101:45824] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaCM8rN3kp7wL6QzPnU45wAAAUc"]
[Fri Feb 27 02:12:02.725421 2026] [:error] [pid 20059:tid 20103] [client 20.220.232.101:45783] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaCM8pZBS5wIa_NsqsgpSAAAAcE"]
[Fri Feb 27 02:12:03.332267 2026] [:error] [pid 19020:tid 19042] [client 20.220.232.101:45951] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaCM87N3kp7wL6QzPnU47AAAAVQ"]
[Fri Feb 27 02:12:04.169416 2026] [:error] [pid 18831:tid 18924] [client 20.220.232.101:45892] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaCM9P5KHTHUIuWRG2bWGgAAAEs"]
[Fri Feb 27 02:12:04.986730 2026] [:error] [pid 19020:tid 19035] [client 20.220.232.101:45911] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaCM9LN3kp7wL6QzPnU47QAAAU0"]
[Fri Feb 27 02:12:06.234317 2026] [:error] [pid 18831:tid 18934] [client 20.220.232.101:45920] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCM9v5KHTHUIuWRG2bWIQAAAFU"]
[Fri Feb 27 02:12:06.849566 2026] [:error] [pid 18831:tid 18936] [client 20.220.232.101:45878] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCM9v5KHTHUIuWRG2bWJQAAAFc"]
[Fri Feb 27 02:12:07.945001 2026] [:error] [pid 18831:tid 18914] [client 20.220.232.101:45785] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCM9_5KHTHUIuWRG2bWKQAAAEE"]
[Fri Feb 27 02:12:09.006481 2026] [:error] [pid 18831:tid 18929] [client 20.220.232.101:45944] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCM-f5KHTHUIuWRG2bWMAAAAFA"]
[Fri Feb 27 02:12:09.792443 2026] [:error] [pid 19020:tid 19028] [client 20.220.232.101:45937] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaCM-bN3kp7wL6QzPnU49gAAAUY"]
[Fri Feb 27 02:12:10.913015 2026] [:error] [pid 19020:tid 19039] [client 20.220.232.101:45872] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaCM-rN3kp7wL6QzPnU5AAAAAVE"]
[Fri Feb 27 02:12:11.833365 2026] [:error] [pid 19020:tid 19033] [client 20.220.232.101:45845] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaCM-7N3kp7wL6QzPnU5BAAAAUs"]
[Fri Feb 27 02:12:12.608863 2026] [:error] [pid 20059:tid 20126] [client 20.220.232.101:45941] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaCM_JZBS5wIa_NsqsgpVgAAAdg"]
[Fri Feb 27 02:12:13.916337 2026] [:error] [pid 20059:tid 20123] [client 20.220.232.101:45835] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaCM_ZZBS5wIa_NsqsgpXQAAAdU"]
[Fri Feb 27 02:12:15.678942 2026] [:error] [pid 20059:tid 20122] [client 20.220.232.101:45918] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaCM_5ZBS5wIa_NsqsgpZAAAAdQ"]
[Fri Feb 27 02:12:16.843450 2026] [:error] [pid 20059:tid 20117] [client 20.220.232.101:45861] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaCNAJZBS5wIa_NsqsgpawAAAc8"]
[Fri Feb 27 02:12:18.144466 2026] [:error] [pid 18818:tid 18900] [client 20.220.232.101:45848] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaCNAhhPgqk2SeS_W83MAAAAABA"]
[Fri Feb 27 02:12:19.187637 2026] [:error] [pid 20059:tid 20109] [client 20.220.232.101:45842] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaCNA5ZBS5wIa_NsqsgpcgAAAcc"]
[Fri Feb 27 02:12:20.076055 2026] [:error] [pid 18843:tid 18944] [client 20.220.232.101:45952] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaCNBCuD2bhSYSowPs0NEwAAAQQ"]
[Fri Feb 27 02:12:21.859223 2026] [:error] [pid 18831:tid 18923] [client 20.220.232.101:45846] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaCNBf5KHTHUIuWRG2bWPgAAAEo"]
[Fri Feb 27 02:12:23.473553 2026] [:error] [pid 18831:tid 18915] [client 20.220.232.101:45764] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaCNB_5KHTHUIuWRG2bWSAAAAEI"]
[Fri Feb 27 02:12:25.400028 2026] [:error] [pid 19020:tid 19036] [client 20.220.232.101:45841] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaCNCbN3kp7wL6QzPnU5IwAAAU4"]
[Fri Feb 27 02:12:27.315006 2026] [:error] [pid 20059:tid 20121] [client 20.220.232.101:45843] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaCNC5ZBS5wIa_NsqsgpfwAAAdM"]
[Fri Feb 27 02:12:28.552497 2026] [:error] [pid 18831:tid 18928] [client 20.220.232.101:45873] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaCNDP5KHTHUIuWRG2bWTQAAAE8"]
[Fri Feb 27 02:12:29.248930 2026] [:error] [pid 18831:tid 18930] [client 20.220.232.101:45776] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaCNDf5KHTHUIuWRG2bWTgAAAFE"]
[Fri Feb 27 02:12:30.077511 2026] [:error] [pid 20059:tid 20125] [client 20.220.232.101:46029] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aaCNDpZBS5wIa_NsqsgplQAAAdc"]
[Fri Feb 27 02:12:30.894325 2026] [:error] [pid 20059:tid 20118] [client 20.220.232.101:45854] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aaCNDpZBS5wIa_NsqsgpmwAAAdA"]
[Fri Feb 27 02:12:31.942451 2026] [:error] [pid 18843:tid 18963] [client 20.220.232.101:46068] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aaCNDyuD2bhSYSowPs0NLAAAARc"]
[Fri Feb 27 02:12:33.559967 2026] [:error] [pid 20059:tid 20125] [client 20.220.232.101:45963] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aaCNEZZBS5wIa_NsqsgpqQAAAdc"]
[Fri Feb 27 02:12:40.295680 2026] [:error] [pid 20059:tid 20116] [client 20.220.232.101:46018] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaCNGJZBS5wIa_NsqsgpygAAAc4"]
[Fri Feb 27 02:12:42.663439 2026] [:error] [pid 19020:tid 19034] [client 20.220.232.101:45968] [client 20.220.232.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaCNGrN3kp7wL6QzPnU5PwAAAUw"]
[Fri Feb 27 02:13:00.080116 2026] [:error] [pid 19020:tid 19033] [client 20.220.232.101:46034] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaCNLLN3kp7wL6QzPnU5XQAAAUs"]
[Fri Feb 27 02:13:04.086288 2026] [:error] [pid 20059:tid 20118] [client 20.220.232.101:45857] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaCNMJZBS5wIa_NsqsgqSwAAAdA"]
[Fri Feb 27 02:13:05.579722 2026] [:error] [pid 20059:tid 20126] [client 20.220.232.101:46076] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaCNMZZBS5wIa_NsqsgqUwAAAdg"]
[Fri Feb 27 02:13:08.735611 2026] [:error] [pid 18843:tid 18956] [client 20.220.232.101:46019] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaCNNCuD2bhSYSowPs0NXAAAARA"]
[Fri Feb 27 02:13:10.372160 2026] [:error] [pid 20059:tid 20113] [client 20.220.232.101:45882] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaCNNpZBS5wIa_NsqsgqZAAAAcs"]
[Fri Feb 27 02:13:11.251568 2026] [:error] [pid 20059:tid 20103] [client 20.220.232.101:45970] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaCNN5ZBS5wIa_NsqsgqaAAAAcE"]
[Fri Feb 27 02:13:12.754592 2026] [:error] [pid 18843:tid 18943] [client 20.220.232.101:45964] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaCNOCuD2bhSYSowPs0NYgAAAQM"]
[Fri Feb 27 02:13:13.413695 2026] [:error] [pid 20059:tid 20118] [client 20.220.232.101:46048] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaCNOZZBS5wIa_NsqsgqeAAAAdA"]
[Fri Feb 27 02:13:13.911286 2026] [:error] [pid 19020:tid 19046] [client 20.220.232.101:45852] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaCNObN3kp7wL6QzPnU5ggAAAVg"]
[Fri Feb 27 02:13:14.466528 2026] [:error] [pid 20059:tid 20126] [client 20.220.232.101:46066] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaCNOpZBS5wIa_NsqsgqgwAAAdg"]
[Fri Feb 27 02:13:15.377548 2026] [:error] [pid 19020:tid 19031] [client 20.220.232.101:46006] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaCNO7N3kp7wL6QzPnU5hgAAAUk"]
[Fri Feb 27 02:13:16.061232 2026] [:error] [pid 18818:tid 18885] [client 20.220.232.101:46069] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaCNPBhPgqk2SeS_W83MKgAAAAE"]
[Fri Feb 27 02:13:17.112541 2026] [:error] [pid 18818:tid 18884] [client 20.220.232.101:46038] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaCNPRhPgqk2SeS_W83MKwAAAAA"]
[Fri Feb 27 02:13:17.830146 2026] [:error] [pid 18818:tid 18907] [client 20.220.232.101:45958] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaCNPRhPgqk2SeS_W83MLAAAABc"]
[Fri Feb 27 02:13:18.602857 2026] [:error] [pid 20059:tid 20118] [client 20.220.232.101:45871] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaCNPpZBS5wIa_NsqsgqoAAAAdA"]
[Fri Feb 27 02:13:20.177469 2026] [:error] [pid 20059:tid 20123] [client 20.220.232.101:45947] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaCNQJZBS5wIa_NsqsgqowAAAdU"]
[Fri Feb 27 02:13:21.249712 2026] [:error] [pid 20059:tid 20104] [client 20.220.232.101:45973] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaCNQZZBS5wIa_NsqsgqqQAAAcI"]
[Fri Feb 27 02:13:22.867864 2026] [:error] [pid 18843:tid 18952] [client 20.220.232.101:46049] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaCNQiuD2bhSYSowPs0NagAAAQw"]
[Fri Feb 27 02:13:27.517779 2026] [:error] [pid 20059:tid 20111] [client 20.220.232.101:45716] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaCNR5ZBS5wIa_NsqsgqxQAAAck"]
[Fri Feb 27 02:13:29.194151 2026] [:error] [pid 18843:tid 18947] [client 20.220.232.101:46061] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaCNSSuD2bhSYSowPs0NcAAAAQc"]
[Fri Feb 27 02:13:30.580830 2026] [:error] [pid 18843:tid 18945] [client 20.220.232.101:46055] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaCNSiuD2bhSYSowPs0NcwAAAQU"]
[Fri Feb 27 02:13:31.848469 2026] [:error] [pid 18843:tid 18941] [client 20.220.232.101:45777] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaCNSyuD2bhSYSowPs0NdwAAAQE"]
[Fri Feb 27 02:13:32.762930 2026] [:error] [pid 19020:tid 19027] [client 20.220.232.101:45902] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaCNTLN3kp7wL6QzPnU5lwAAAUU"]
[Fri Feb 27 02:13:34.046651 2026] [:error] [pid 20059:tid 20120] [client 20.220.232.101:46051] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaCNTpZBS5wIa_Nsqsgq1gAAAdI"]
[Fri Feb 27 02:13:36.082166 2026] [:error] [pid 18831:tid 18926] [client 20.220.232.101:45856] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aaCNUP5KHTHUIuWRG2bWmAAAAE0"]
[Fri Feb 27 02:13:37.333988 2026] [:error] [pid 20059:tid 20126] [client 20.220.232.101:46050] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aaCNUZZBS5wIa_Nsqsgq2wAAAdg"]
[Fri Feb 27 02:13:38.356794 2026] [:error] [pid 19020:tid 19046] [client 20.220.232.101:46021] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aaCNUrN3kp7wL6QzPnU5oAAAAVg"]
[Fri Feb 27 02:13:39.763174 2026] [:error] [pid 20059:tid 20120] [client 20.220.232.101:46031] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aaCNU5ZBS5wIa_Nsqsgq4gAAAdI"]
[Fri Feb 27 02:13:41.227255 2026] [:error] [pid 20059:tid 20116] [client 20.220.232.101:45991] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aaCNVZZBS5wIa_Nsqsgq6QAAAc4"]
[Fri Feb 27 02:13:43.313450 2026] [:error] [pid 20059:tid 20116] [client 20.220.232.101:46045] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aaCNV5ZBS5wIa_Nsqsgq-AAAAc4"]
[Fri Feb 27 02:13:45.701083 2026] [:error] [pid 18843:tid 18957] [client 20.220.232.101:46001] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aaCNWSuD2bhSYSowPs0NigAAARE"]
[Fri Feb 27 02:13:49.166592 2026] [:error] [pid 18843:tid 18940] [client 20.220.232.101:46041] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aaCNXSuD2bhSYSowPs0NjwAAAQA"]
[Fri Feb 27 02:13:50.836854 2026] [:error] [pid 20059:tid 20114] [client 20.220.232.101:45888] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aaCNXpZBS5wIa_NsqsgrGAAAAcw"]
[Fri Feb 27 02:13:52.481371 2026] [:error] [pid 19020:tid 19033] [client 20.220.232.101:46046] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aaCNYLN3kp7wL6QzPnU5sAAAAUs"]
[Fri Feb 27 02:13:54.302686 2026] [:error] [pid 20059:tid 20116] [client 20.220.232.101:46053] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aaCNYpZBS5wIa_NsqsgrIAAAAc4"]
[Fri Feb 27 02:13:54.954654 2026] [:error] [pid 20059:tid 20114] [client 20.220.232.101:45966] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aaCNYpZBS5wIa_NsqsgrJQAAAcw"]
[Fri Feb 27 02:13:56.816141 2026] [:error] [pid 20059:tid 20115] [client 20.220.232.101:45770] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aaCNZJZBS5wIa_NsqsgrKQAAAc0"]
[Fri Feb 27 02:13:57.525992 2026] [:error] [pid 18843:tid 18960] [client 20.220.232.101:45945] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aaCNZSuD2bhSYSowPs0NvgAAARQ"]
[Fri Feb 27 02:13:58.900350 2026] [:error] [pid 20059:tid 20125] [client 20.220.232.101:45884] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aaCNZpZBS5wIa_NsqsgrLQAAAdc"]
[Fri Feb 27 02:14:09.551205 2026] [:error] [pid 19020:tid 19038] [client 20.220.232.101:45956] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaCNcbN3kp7wL6QzPnU54gAAAVA"]
[Fri Feb 27 02:14:12.042266 2026] [:error] [pid 19020:tid 19023] [client 20.220.232.101:46025] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaCNdLN3kp7wL6QzPnU55wAAAUE"]
[Fri Feb 27 02:14:13.590805 2026] [:error] [pid 18818:tid 18905] [client 20.220.232.101:45982] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaCNdRhPgqk2SeS_W83MawAAABU"]
[Fri Feb 27 02:14:14.493872 2026] [:error] [pid 20059:tid 20119] [client 20.220.232.101:45981] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaCNdpZBS5wIa_NsqsgrXQAAAdE"]
[Fri Feb 27 02:14:16.265852 2026] [:error] [pid 18818:tid 18896] [client 20.220.232.101:45960] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaCNeBhPgqk2SeS_W83MegAAAAw"]
[Fri Feb 27 02:14:19.087225 2026] [:error] [pid 18843:tid 18944] [client 20.220.232.101:46028] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaCNeyuD2bhSYSowPs0OHgAAAQQ"]
[Fri Feb 27 02:14:20.765316 2026] [:error] [pid 19020:tid 19027] [client 20.220.232.101:46027] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaCNfLN3kp7wL6QzPnU5-gAAAUU"]
[Fri Feb 27 02:14:22.071065 2026] [:error] [pid 20059:tid 20104] [client 20.220.232.101:45995] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaCNfpZBS5wIa_NsqsgrawAAAcI"]
[Fri Feb 27 02:14:23.194596 2026] [:error] [pid 19020:tid 19032] [client 20.220.232.101:45909] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaCNf7N3kp7wL6QzPnU5_gAAAUo"]
[Fri Feb 27 02:14:24.076361 2026] [:error] [pid 18818:tid 18902] [client 20.220.232.101:45975] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaCNgBhPgqk2SeS_W83MoAAAABI"]
[Fri Feb 27 02:14:25.511603 2026] [:error] [pid 20059:tid 20108] [client 20.220.232.101:46078] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaCNgZZBS5wIa_NsqsgrdwAAAcY"]
[Fri Feb 27 02:14:26.781536 2026] [:error] [pid 20059:tid 20111] [client 20.220.232.101:46020] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaCNgpZBS5wIa_NsqsgrfwAAAck"]
[Fri Feb 27 02:14:27.867816 2026] [:error] [pid 18831:tid 18922] [client 20.220.232.101:45996] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaCNg_5KHTHUIuWRG2bW8QAAAEk"]
[Fri Feb 27 02:14:28.666322 2026] [:error] [pid 19020:tid 19027] [client 20.220.232.101:46024] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaCNhLN3kp7wL6QzPnU6BwAAAUU"]
[Fri Feb 27 02:14:29.530958 2026] [:error] [pid 20059:tid 20111] [client 20.220.232.101:45955] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaCNhZZBS5wIa_NsqsgrjAAAAck"]
[Fri Feb 27 02:14:30.309472 2026] [:error] [pid 20059:tid 20126] [client 20.220.232.101:45962] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaCNhpZBS5wIa_NsqsgrkAAAAdg"]
[Fri Feb 27 02:14:31.329405 2026] [:error] [pid 18818:tid 18897] [client 20.220.232.101:46070] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaCNhxhPgqk2SeS_W83MswAAAA0"]
[Fri Feb 27 02:14:32.533993 2026] [:error] [pid 19020:tid 19040] [client 20.220.232.101:46033] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaCNiLN3kp7wL6QzPnU6EwAAAVI"]
[Fri Feb 27 02:14:33.378696 2026] [:error] [pid 18818:tid 18893] [client 20.220.232.101:45919] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaCNiRhPgqk2SeS_W83MugAAAAk"]
[Fri Feb 27 02:14:34.193163 2026] [:error] [pid 19020:tid 19030] [client 20.220.232.101:46011] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaCNirN3kp7wL6QzPnU6FQAAAUg"]
[Fri Feb 27 02:14:35.213893 2026] [:error] [pid 20059:tid 20103] [client 20.220.232.101:46062] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaCNi5ZBS5wIa_NsqsgrnQAAAcE"]
[Fri Feb 27 02:14:37.285547 2026] [:error] [pid 19020:tid 19036] [client 20.220.232.101:46037] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaCNjbN3kp7wL6QzPnU6GwAAAU4"]
[Fri Feb 27 02:14:39.718047 2026] [:error] [pid 20059:tid 20112] [client 20.220.232.101:46077] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaCNj5ZBS5wIa_NsqsgrvQAAAco"]
[Fri Feb 27 02:14:42.650800 2026] [:error] [pid 18843:tid 18944] [client 20.220.232.101:46067] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaCNkiuD2bhSYSowPs0OLAAAAQQ"]
[Fri Feb 27 02:14:44.261817 2026] [:error] [pid 20059:tid 20125] [client 20.220.232.101:46017] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaCNlJZBS5wIa_Nsqsgr1wAAAdc"]
[Fri Feb 27 02:14:46.004432 2026] [:error] [pid 18843:tid 18948] [client 20.220.232.101:46022] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaCNliuD2bhSYSowPs0ONAAAAQg"]
[Fri Feb 27 02:14:47.166116 2026] [:error] [pid 18818:tid 18886] [client 20.220.232.101:46071] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaCNlxhPgqk2SeS_W83MyQAAAAI"]
[Fri Feb 27 02:14:50.012717 2026] [:error] [pid 19020:tid 19044] [client 20.220.232.101:45898] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaCNmrN3kp7wL6QzPnU6KwAAAVY"]
[Fri Feb 27 02:14:51.221154 2026] [:error] [pid 20059:tid 20105] [client 20.220.232.101:45959] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaCNm5ZBS5wIa_Nsqsgr7QAAAcM"]
[Fri Feb 27 02:14:52.057245 2026] [:error] [pid 20059:tid 20103] [client 20.220.232.101:46064] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaCNnJZBS5wIa_Nsqsgr8AAAAcE"]
[Fri Feb 27 02:14:52.683117 2026] [:error] [pid 18831:tid 18915] [client 20.220.232.101:45990] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaCNnP5KHTHUIuWRG2bW-AAAAEI"]
[Fri Feb 27 02:14:53.304615 2026] [:error] [pid 19020:tid 19037] [client 20.220.232.101:45823] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaCNnbN3kp7wL6QzPnU6NQAAAU8"]
[Fri Feb 27 02:14:53.834796 2026] [:error] [pid 19020:tid 19036] [client 20.220.232.101:46058] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aaCNnbN3kp7wL6QzPnU6NwAAAU4"]
[Fri Feb 27 02:14:55.433657 2026] [:error] [pid 18843:tid 18954] [client 20.220.232.101:45983] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aaCNnyuD2bhSYSowPs0OPgAAAQ4"]
[Fri Feb 27 02:14:57.133052 2026] [:error] [pid 18843:tid 18956] [client 20.220.232.101:45942] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aaCNoSuD2bhSYSowPs0ORQAAARA"]
[Fri Feb 27 02:14:57.787481 2026] [:error] [pid 19020:tid 19026] [client 20.220.232.101:45957] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aaCNobN3kp7wL6QzPnU6PgAAAUQ"]
[Fri Feb 27 02:14:59.687022 2026] [:error] [pid 19020:tid 19023] [client 20.220.232.101:45961] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aaCNo7N3kp7wL6QzPnU6QwAAAUE"]
[Fri Feb 27 02:15:01.768261 2026] [:error] [pid 18843:tid 18953] [client 20.220.232.101:45984] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aaCNpSuD2bhSYSowPs0OTwAAAQ0"]
[Fri Feb 27 02:15:03.211417 2026] [:error] [pid 19020:tid 19039] [client 20.220.232.101:45825] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aaCNp7N3kp7wL6QzPnU6SgAAAVE"]
[Fri Feb 27 02:15:04.521500 2026] [:error] [pid 20059:tid 20118] [client 20.220.232.101:45976] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aaCNqJZBS5wIa_NsqsgsCwAAAdA"]
[Fri Feb 27 02:15:06.227068 2026] [:error] [pid 20059:tid 20124] [client 20.220.232.101:45977] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aaCNqpZBS5wIa_NsqsgsGgAAAdY"]
[Fri Feb 27 02:15:07.706736 2026] [:error] [pid 20059:tid 20104] [client 20.220.232.101:46040] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aaCNq5ZBS5wIa_NsqsgsJQAAAcI"]
[Fri Feb 27 02:15:08.559691 2026] [:error] [pid 18843:tid 18948] [client 20.220.232.101:45989] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aaCNrCuD2bhSYSowPs0OVgAAAQg"]
[Fri Feb 27 03:34:07.288548 2026] [:error] [pid 20059:tid 20125] [client 106.227.49.113:36050] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaCgL5ZBS5wIa_Nsqsh4yAAAAdc"]
[Fri Feb 27 03:51:11.341821 2026] [:error] [pid 64229:tid 64244] [client 43.153.113.127:51760] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaCkLw4WeEvq64DXt8jC5wAAAM0"]
[Fri Feb 27 03:54:46.017145 2026] [:error] [pid 64069:tid 64162] [client 20.43.27.35:47439] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaClBjj7uWj7Qx3w-DAmCAAAABE"]
[Fri Feb 27 03:54:46.857876 2026] [:error] [pid 64229:tid 64248] [client 20.43.27.35:47443] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaClBg4WeEvq64DXt8jEWQAAANE"]
[Fri Feb 27 03:54:47.706464 2026] [:error] [pid 1201:tid 1220] [client 20.43.27.35:47485] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaClB1ST6IFd4laX4PswkQAAARE"]
[Fri Feb 27 03:54:48.576810 2026] [:error] [pid 64071:tid 64185] [client 20.43.27.35:48014] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaClCCzG_Mpd6y8xHYNsuAAAAEw"]
[Fri Feb 27 04:27:05.894222 2026] [:error] [pid 21329:tid 21401] [client 173.239.214.24:37367] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaCsmZvQWnde-MjcQ1E87AAAAVI"]
[Fri Feb 27 04:27:07.147040 2026] [:error] [pid 21329:tid 21385] [client 173.239.214.28:60685] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaCsm5vQWnde-MjcQ1E9BAAAAUI"]
[Fri Feb 27 04:27:09.254379 2026] [:error] [pid 5365:tid 5368] [client 173.239.214.8:20233] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaCsnZYAa8J3tYxdG3zgrQAAAQE"]
[Fri Feb 27 04:27:10.503036 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.26:44589] [client 173.239.214.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaCsnpYAa8J3tYxdG3zgwAAAARQ"]
[Fri Feb 27 04:27:12.447627 2026] [:error] [pid 3975:tid 4022] [client 173.239.214.17:27491] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaCsoBMVp0-T2hD76b2r2gAAAIw"]
[Fri Feb 27 04:27:13.227349 2026] [:error] [pid 5365:tid 5383] [client 185.198.240.135:57909] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaCsoZYAa8J3tYxdG3zg3AAAARA"]
[Fri Feb 27 04:27:13.762694 2026] [:error] [pid 3973:tid 3997] [client 185.198.240.135:28601] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaCsoYJZsftwqmUaaLPqQgAAAA4"]
[Fri Feb 27 04:27:14.262231 2026] [:error] [pid 5365:tid 5368] [client 185.198.240.139:55341] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaCsopYAa8J3tYxdG3zg5QAAAQE"]
[Fri Feb 27 04:27:14.854260 2026] [:error] [pid 3975:tid 4029] [client 173.239.214.5:43889] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaCsohMVp0-T2hD76b2r4wAAAJM"]
[Fri Feb 27 04:27:15.325016 2026] [:error] [pid 5365:tid 5389] [client 173.239.214.10:47829] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaCso5YAa8J3tYxdG3zg8wAAARY"]
[Fri Feb 27 04:27:16.153170 2026] [:error] [pid 5365:tid 5382] [client 185.198.240.138:33189] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaCspJYAa8J3tYxdG3zhAQAAAQ8"]
[Fri Feb 27 04:27:17.148100 2026] [:error] [pid 4081:tid 4099] [client 45.131.195.210:56549] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aaCspQ55mnr35z8h7t3LMwAAANA"]
[Fri Feb 27 04:27:18.149302 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.9:27137] [client 173.239.214.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaCsppYAa8J3tYxdG3zhGQAAARQ"]
[Fri Feb 27 04:27:19.029339 2026] [:error] [pid 3974:tid 4046] [client 173.239.214.18:23819] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaCsp3p-fQtdOYjkuFvIwgAAAEk"]
[Fri Feb 27 04:27:19.914985 2026] [:error] [pid 3975:tid 4022] [client 173.239.214.27:41373] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaCspxMVp0-T2hD76b2r-QAAAIw"]
[Fri Feb 27 04:27:21.870834 2026] [:error] [pid 3973:tid 3995] [client 173.239.214.9:56349] [client 173.239.214.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaCsqYJZsftwqmUaaLPqhgAAAAw"]
[Fri Feb 27 04:27:22.593747 2026] [:error] [pid 21329:tid 21388] [client 173.239.214.7:21583] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaCsqpvQWnde-MjcQ1E96gAAAUU"]
[Fri Feb 27 04:27:23.676176 2026] [:error] [pid 5365:tid 5370] [client 173.239.214.22:34993] [client 173.239.214.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaCsq5YAa8J3tYxdG3zhcwAAAQM"]
[Fri Feb 27 04:27:24.360443 2026] [:error] [pid 5365:tid 5386] [client 185.198.240.154:39683] [client 185.198.240.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaCsrJYAa8J3tYxdG3zhiQAAARM"]
[Fri Feb 27 04:27:28.236783 2026] [:error] [pid 5365:tid 5381] [client 173.239.214.27:55157] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaCssJYAa8J3tYxdG3zh2QAAAQ4"]
[Fri Feb 27 04:27:29.074446 2026] [:error] [pid 5365:tid 5370] [client 185.198.240.146:46293] [client 185.198.240.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaCssZYAa8J3tYxdG3zh6AAAAQM"]
[Fri Feb 27 04:27:29.920677 2026] [:error] [pid 5365:tid 5379] [client 173.239.214.22:45415] [client 173.239.214.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaCssZYAa8J3tYxdG3ziBAAAAQw"]
[Fri Feb 27 04:27:30.453478 2026] [:error] [pid 5365:tid 5376] [client 209.87.169.176:62569] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaCsspYAa8J3tYxdG3ziGgAAAQk"]
[Fri Feb 27 04:27:31.106259 2026] [:error] [pid 5365:tid 5385] [client 173.239.214.7:34667] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaCss5YAa8J3tYxdG3ziMwAAARI"]
[Fri Feb 27 04:27:32.358595 2026] [:error] [pid 4081:tid 4095] [client 185.198.240.147:45151] [client 185.198.240.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaCstA55mnr35z8h7t3MIAAAAMw"]
[Fri Feb 27 04:27:32.878433 2026] [:error] [pid 4081:tid 4099] [client 173.239.214.24:24097] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaCstA55mnr35z8h7t3MJwAAANA"]
[Fri Feb 27 04:27:33.347675 2026] [:error] [pid 4081:tid 4090] [client 173.239.214.5:49935] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCstQ55mnr35z8h7t3MMQAAAMc"]
[Fri Feb 27 04:27:35.899693 2026] [:error] [pid 5365:tid 5391] [client 185.198.240.145:49799] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaCst5YAa8J3tYxdG3ziqQAAARg"]
[Fri Feb 27 04:27:37.192293 2026] [:error] [pid 3975:tid 4019] [client 173.239.214.4:29745] [client 173.239.214.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.4, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaCsuRMVp0-T2hD76b2sjQAAAIk"]
[Fri Feb 27 04:27:43.648947 2026] [:error] [pid 3975:tid 4028] [client 173.239.214.4:29745] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaCsvxMVp0-T2hD76b2s6AAAAJI"]
[Fri Feb 27 04:27:44.642276 2026] [:error] [pid 4081:tid 4094] [client 185.198.240.138:35305] [client 185.198.240.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.138, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaCswA55mnr35z8h7t3MwAAAAMs"]
[Fri Feb 27 04:27:45.090406 2026] [:error] [pid 4081:tid 4105] [client 185.198.240.138:35305] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaCswQ55mnr35z8h7t3MyAAAANY"]
[Fri Feb 27 04:27:47.679976 2026] [:error] [pid 5365:tid 5388] [client 185.198.240.157:20753] [client 185.198.240.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaCsw5YAa8J3tYxdG3zjzAAAARU"]
[Fri Feb 27 04:27:51.700335 2026] [:error] [pid 4081:tid 4102] [client 173.239.214.24:41149] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaCsxw55mnr35z8h7t3NHgAAANM"]
[Fri Feb 27 04:27:52.811977 2026] [:error] [pid 5365:tid 5372] [client 173.239.214.16:21463] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaCsyJYAa8J3tYxdG3zktQAAAQU"]
[Fri Feb 27 04:27:54.058582 2026] [:error] [pid 5365:tid 5372] [client 173.239.214.12:49203] [client 173.239.214.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.12, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaCsypYAa8J3tYxdG3zk7gAAAQU"]
[Fri Feb 27 04:27:54.353864 2026] [:error] [pid 5365:tid 5371] [client 173.239.214.12:49203] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaCsypYAa8J3tYxdG3zlBQAAAQQ"]
[Fri Feb 27 04:27:59.097788 2026] [:error] [pid 3974:tid 4049] [client 185.198.240.150:30471] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaCsz3p-fQtdOYjkuFvKHQAAAEw"]
[Fri Feb 27 04:28:04.889120 2026] [:error] [pid 4081:tid 4083] [client 173.239.214.19:44977] [client 173.239.214.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.19, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaCs1A55mnr35z8h7t3NkAAAAMA"]
[Fri Feb 27 04:28:08.967267 2026] [:error] [pid 4081:tid 4097] [client 173.239.214.19:44977] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaCs2A55mnr35z8h7t3N0wAAAM4"]
[Fri Feb 27 04:28:09.683166 2026] [:error] [pid 3973:tid 3990] [client 173.239.214.198:45345] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaCs2YJZsftwqmUaaLPsqwAAAAc"]
[Fri Feb 27 04:28:10.594147 2026] [:error] [pid 4081:tid 4087] [client 185.198.240.136:65153] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaCs2g55mnr35z8h7t3N-gAAAMQ"]
[Fri Feb 27 04:28:11.799543 2026] [:error] [pid 3975:tid 4017] [client 173.239.214.27:25025] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaCs2xMVp0-T2hD76b2udAAAAIc"]
[Fri Feb 27 04:28:12.274430 2026] [:error] [pid 4081:tid 4094] [client 173.239.214.6:53193] [client 173.239.214.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaCs3A55mnr35z8h7t3OCgAAAMs"]
[Fri Feb 27 04:28:14.022889 2026] [:error] [pid 3974:tid 4058] [client 209.87.169.176:24077] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaCs3np-fQtdOYjkuFvLKAAAAFU"]
[Fri Feb 27 04:28:14.729702 2026] [:error] [pid 21329:tid 21392] [client 173.239.214.27:27055] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaCs3pvQWnde-MjcQ1FA0wAAAUk"]
[Fri Feb 27 04:28:15.998164 2026] [:error] [pid 5365:tid 5375] [client 173.239.214.6:64579] [client 173.239.214.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaCs35YAa8J3tYxdG3znywAAAQg"]
[Fri Feb 27 04:28:17.258176 2026] [:error] [pid 21329:tid 21389] [client 173.239.214.18:28523] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaCs4ZvQWnde-MjcQ1FBEgAAAUY"]
[Fri Feb 27 04:28:18.377299 2026] [:error] [pid 5365:tid 5389] [client 185.198.240.147:36011] [client 185.198.240.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaCs4pYAa8J3tYxdG3zn8AAAARY"]
[Fri Feb 27 04:28:23.930346 2026] [:error] [pid 3973:tid 3993] [client 173.239.214.16:20807] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaCs54JZsftwqmUaaLPttQAAAAo"]
[Fri Feb 27 04:28:26.242631 2026] [:error] [pid 21329:tid 21406] [client 185.198.240.142:54437] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaCs6pvQWnde-MjcQ1FB6AAAAVc"]
[Fri Feb 27 04:28:26.736241 2026] [:error] [pid 5365:tid 5391] [client 185.198.240.149:37835] [client 185.198.240.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaCs6pYAa8J3tYxdG3zpKgAAARg"]
[Fri Feb 27 04:28:27.213784 2026] [:error] [pid 4081:tid 4083] [client 173.239.214.26:46539] [client 173.239.214.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaCs6w55mnr35z8h7t3PNwAAAMA"]
[Fri Feb 27 04:28:27.694611 2026] [:error] [pid 21329:tid 21383] [client 173.239.214.10:30219] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaCs65vQWnde-MjcQ1FCEAAAAUA"]
[Fri Feb 27 04:28:28.445518 2026] [:error] [pid 3973:tid 3993] [client 173.239.214.11:22315] [client 173.239.214.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaCs7IJZsftwqmUaaLPt8gAAAAo"]
[Fri Feb 27 04:28:28.978893 2026] [:error] [pid 5365:tid 5367] [client 173.239.214.5:61819] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaCs7JYAa8J3tYxdG3zpfgAAAQA"]
[Fri Feb 27 04:28:30.123758 2026] [:error] [pid 3973:tid 3989] [client 173.239.214.13:62033] [client 173.239.214.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaCs7oJZsftwqmUaaLPuCAAAAAY"]
[Fri Feb 27 04:28:30.586588 2026] [:error] [pid 3975:tid 4022] [client 173.239.214.4:42475] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaCs7hMVp0-T2hD76b2vsAAAAIw"]
[Fri Feb 27 04:28:31.279933 2026] [:error] [pid 3974:tid 4049] [client 185.198.240.144:64271] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaCs73p-fQtdOYjkuFvMeQAAAEw"]
[Fri Feb 27 04:28:31.727140 2026] [:error] [pid 5365:tid 5377] [client 185.198.240.146:34361] [client 185.198.240.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaCs75YAa8J3tYxdG3zp_wAAAQo"]
[Fri Feb 27 04:28:32.489245 2026] [:error] [pid 3974:tid 4035] [client 173.239.214.21:54307] [client 173.239.214.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaCs8Hp-fQtdOYjkuFvMjwAAAEE"]
[Fri Feb 27 04:28:33.497079 2026] [:error] [pid 5365:tid 5379] [client 185.198.240.144:43611] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaCs8ZYAa8J3tYxdG3zqXgAAAQw"]
[Fri Feb 27 04:28:35.270057 2026] [:error] [pid 21329:tid 21392] [client 173.239.214.8:20131] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaCs85vQWnde-MjcQ1FC2gAAAUk"]
[Fri Feb 27 04:28:37.563289 2026] [:error] [pid 21329:tid 21405] [client 173.239.214.19:41551] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaCs9ZvQWnde-MjcQ1FDLgAAAVY"]
[Fri Feb 27 04:28:39.138496 2026] [:error] [pid 5365:tid 5375] [client 185.198.240.142:26179] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaCs95YAa8J3tYxdG3zrSwAAAQg"]
[Fri Feb 27 04:28:39.695386 2026] [:error] [pid 21329:tid 21398] [client 173.239.214.12:20773] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaCs95vQWnde-MjcQ1FDYQAAAU8"]
[Fri Feb 27 04:28:41.270479 2026] [:error] [pid 21329:tid 21404] [client 185.198.240.138:35527] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaCs-ZvQWnde-MjcQ1FDkQAAAVU"]
[Fri Feb 27 04:28:42.600859 2026] [proxy_fcgi:error] [pid 3975:tid 4027] [client 185.198.240.149:48355] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:42.884536 2026] [proxy_fcgi:error] [pid 3975:tid 4029] [client 185.198.240.149:48355] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:43.152447 2026] [proxy_fcgi:error] [pid 3975:tid 4022] [client 185.198.240.149:48355] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:28:44.496768 2026] [:error] [pid 3975:tid 4020] [client 185.198.240.149:48355] [client 185.198.240.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaCs_BMVp0-T2hD76b2wYwAAAIo"]
[Fri Feb 27 04:28:45.004370 2026] [:error] [pid 5365:tid 5390] [client 209.87.169.176:34857] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaCs_ZYAa8J3tYxdG3zsDQAAARc"]
[Fri Feb 27 04:28:45.534994 2026] [:error] [pid 5365:tid 5388] [client 173.239.214.7:58443] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaCs_ZYAa8J3tYxdG3zsHAAAARU"]
[Fri Feb 27 04:28:46.044674 2026] [:error] [pid 3974:tid 4045] [client 173.239.214.17:44325] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaCs_np-fQtdOYjkuFvNSgAAAEg"]
[Fri Feb 27 04:28:46.577027 2026] [:error] [pid 5365:tid 5388] [client 173.239.214.18:20509] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaCs_pYAa8J3tYxdG3zsRQAAARU"]
[Fri Feb 27 04:28:47.177902 2026] [:error] [pid 5365:tid 5376] [client 173.239.214.12:31649] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaCs_5YAa8J3tYxdG3zsZgAAAQk"]
[Fri Feb 27 04:28:47.975881 2026] [:error] [pid 5365:tid 5382] [client 185.198.240.155:56297] [client 185.198.240.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaCs_5YAa8J3tYxdG3zskgAAAQ8"]
[Fri Feb 27 04:28:48.561557 2026] [:error] [pid 4081:tid 4084] [client 173.239.214.10:26983] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaCtAA55mnr35z8h7t3QaQAAAME"]
[Fri Feb 27 04:28:49.079788 2026] [:error] [pid 3975:tid 4011] [client 45.131.195.208:53903] [client 45.131.195.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaCtARMVp0-T2hD76b2wiwAAAIE"]
[Fri Feb 27 04:28:49.559959 2026] [:error] [pid 5365:tid 5372] [client 209.87.169.176:21317] [client 209.87.169.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaCtAZYAa8J3tYxdG3zs9gAAAQU"]
[Fri Feb 27 04:28:50.741897 2026] [:error] [pid 3974:tid 4052] [client 185.198.240.152:56651] [client 185.198.240.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaCtAnp-fQtdOYjkuFvNiwAAAE8"]
[Fri Feb 27 04:28:51.546638 2026] [:error] [pid 21329:tid 21392] [client 185.198.240.139:21747] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaCtA5vQWnde-MjcQ1FEaQAAAUk"]
[Fri Feb 27 04:28:52.617814 2026] [:error] [pid 4081:tid 4095] [client 173.239.214.28:63087] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaCtBA55mnr35z8h7t3QpAAAAMw"]
[Fri Feb 27 04:28:53.658115 2026] [:error] [pid 3975:tid 4020] [client 173.239.214.198:50959] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaCtBRMVp0-T2hD76b2w0AAAAIo"]
[Fri Feb 27 04:28:54.882970 2026] [:error] [pid 3973:tid 3987] [client 173.239.214.4:27003] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaCtBoJZsftwqmUaaLPu4AAAAAQ"]
[Fri Feb 27 04:28:56.458242 2026] [:error] [pid 21329:tid 21405] [client 173.239.214.17:32483] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaCtCJvQWnde-MjcQ1FEywAAAVY"]
[Fri Feb 27 04:28:57.192444 2026] [:error] [pid 3975:tid 4012] [client 173.239.214.8:42551] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaCtCRMVp0-T2hD76b2xHQAAAII"]
[Fri Feb 27 04:29:01.826611 2026] [:error] [pid 5365:tid 5384] [client 185.198.240.157:53237] [client 185.198.240.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaCtDZYAa8J3tYxdG3zu-wAAARE"]
[Fri Feb 27 04:29:02.333232 2026] [:error] [pid 5365:tid 5369] [client 173.239.214.26:26625] [client 173.239.214.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaCtDpYAa8J3tYxdG3zvGgAAAQI"]
[Fri Feb 27 04:29:02.886625 2026] [:error] [pid 5365:tid 5377] [client 185.198.240.153:34643] [client 185.198.240.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.153, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaCtDpYAa8J3tYxdG3zvPwAAAQo"]
[Fri Feb 27 04:29:03.408834 2026] [:error] [pid 5365:tid 5380] [client 185.198.240.153:34643] [client 185.198.240.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaCtD5YAa8J3tYxdG3zvaQAAAQ0"]
[Fri Feb 27 04:29:04.456246 2026] [:error] [pid 3973:tid 4000] [client 185.198.240.136:52519] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaCtEIJZsftwqmUaaLPvVgAAABE"]
[Fri Feb 27 04:29:06.051501 2026] [:error] [pid 3975:tid 4010] [client 173.239.214.7:40859] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaCtEhMVp0-T2hD76b2x3QAAAIA"]
[Fri Feb 27 04:29:07.571793 2026] [:error] [pid 3975:tid 4022] [client 173.239.214.27:45845] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaCtExMVp0-T2hD76b2x-wAAAIw"]
[Fri Feb 27 04:29:08.048903 2026] [:error] [pid 3975:tid 4028] [client 185.198.240.137:22493] [client 185.198.240.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aaCtFBMVp0-T2hD76b2x_wAAAJI"]
[Fri Feb 27 04:29:09.834715 2026] [:error] [pid 3974:tid 4055] [client 173.239.214.16:57139] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaCtFXp-fQtdOYjkuFvOowAAAFI"]
[Fri Feb 27 04:29:10.833459 2026] [proxy_fcgi:error] [pid 3974:tid 4049] [client 185.198.240.135:31359] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:11.377022 2026] [:error] [pid 3974:tid 4044] [client 185.198.240.135:31359] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaCtF3p-fQtdOYjkuFvOygAAAEc"]
[Fri Feb 27 04:29:11.849639 2026] [:error] [pid 4081:tid 4102] [client 185.198.240.135:59003] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaCtFw55mnr35z8h7t3SDgAAANM"]
[Fri Feb 27 04:29:13.317646 2026] [:error] [pid 3975:tid 4022] [client 185.198.240.144:52467] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaCtGRMVp0-T2hD76b2ycQAAAIw"]
[Fri Feb 27 04:29:13.808601 2026] [:error] [pid 3974:tid 4045] [client 173.239.214.12:64251] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaCtGXp-fQtdOYjkuFvO5QAAAEg"]
[Fri Feb 27 04:29:16.364789 2026] [:error] [pid 4081:tid 4083] [client 173.239.214.8:62729] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaCtHA55mnr35z8h7t3SVQAAAMA"]
[Fri Feb 27 04:29:16.864459 2026] [:error] [pid 3974:tid 4047] [client 173.239.214.13:33663] [client 173.239.214.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaCtHHp-fQtdOYjkuFvO9QAAAEo"]
[Fri Feb 27 04:29:25.844774 2026] [:error] [pid 3974:tid 4043] [client 173.239.214.14:25941] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaCtJXp-fQtdOYjkuFvPsQAAAEY"]
[Fri Feb 27 04:29:26.344491 2026] [:error] [pid 21329:tid 21388] [client 185.198.240.142:38039] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaCtJpvQWnde-MjcQ1FHmAAAAUU"]
[Fri Feb 27 04:29:26.866825 2026] [:error] [pid 3974:tid 4054] [client 173.239.214.28:36305] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaCtJnp-fQtdOYjkuFvP2gAAAFE"]
[Fri Feb 27 04:29:30.097421 2026] [:error] [pid 3973:tid 3989] [client 185.198.240.142:33757] [client 185.198.240.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaCtKoJZsftwqmUaaLPwlwAAAAY"]
[Fri Feb 27 04:29:30.948697 2026] [:error] [pid 3973:tid 3995] [client 185.198.240.150:47579] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaCtKoJZsftwqmUaaLPwogAAAAw"]
[Fri Feb 27 04:29:33.330857 2026] [:error] [pid 3975:tid 4036] [client 173.239.214.198:59319] [client 173.239.214.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.198, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aaCtLRMVp0-T2hD76b2zwgAAAJc"]
[Fri Feb 27 04:29:35.096410 2026] [:error] [pid 3975:tid 4022] [client 173.239.214.198:59319] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaCtLxMVp0-T2hD76b2z6wAAAIw"]
[Fri Feb 27 04:29:36.084491 2026] [:error] [pid 3975:tid 4014] [client 185.198.240.146:22317] [client 185.198.240.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.146, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaCtMBMVp0-T2hD76b2z9AAAAIQ"]
[Fri Feb 27 04:29:39.500464 2026] [proxy_fcgi:error] [pid 3975:tid 4026] [client 185.198.240.146:22317] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 04:29:43.586221 2026] [:error] [pid 3975:tid 4017] [client 185.198.240.146:22317] [client 185.198.240.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaCtNxMVp0-T2hD76b20hwAAAIc"]
[Fri Feb 27 04:29:44.834899 2026] [:error] [pid 21329:tid 21387] [client 173.239.214.25:61619] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaCtOJvQWnde-MjcQ1FI4gAAAUQ"]
[Fri Feb 27 04:29:45.880325 2026] [:error] [pid 4081:tid 4085] [client 185.198.240.138:61835] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaCtOQ55mnr35z8h7t3UUwAAAMI"]
[Fri Feb 27 05:46:10.207057 2026] [:error] [pid 42435:tid 42461] [client 20.43.27.35:47440] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaC_Ih5hHLnaukp_y9-RIAAAAZU"]
[Fri Feb 27 05:46:11.301065 2026] [:error] [pid 21329:tid 21388] [client 20.43.27.35:47448] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaC_I5vQWnde-MjcQ1FjRwAAAUU"]
[Fri Feb 27 05:46:12.223954 2026] [:error] [pid 5365:tid 5375] [client 20.43.27.35:47441] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaC_JJYAa8J3tYxdG3xEYgAAAQg"]
[Fri Feb 27 05:46:13.139529 2026] [:error] [pid 5365:tid 5382] [client 20.43.27.35:47322] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaC_JZYAa8J3tYxdG3xEZQAAAQ8"]
[Fri Feb 27 06:45:05.073374 2026] [:error] [pid 5365:tid 5370] [client 43.159.152.184:40004] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaDM8ZYAa8J3tYxdG3xmoQAAAQM"]
[Fri Feb 27 06:53:09.535934 2026] [:error] [pid 42563:tid 42575] [client 40.115.138.121:4304] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDO1XKL5BclZy73IRHhcAAAAcc"]
[Fri Feb 27 06:53:09.998316 2026] [:error] [pid 21329:tid 21402] [client 40.115.138.121:4351] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDO1ZvQWnde-MjcQ1FuJgAAAVM"]
[Fri Feb 27 06:53:10.453400 2026] [:error] [pid 5365:tid 5389] [client 40.115.138.121:4309] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDO1pYAa8J3tYxdG3xrcQAAARY"]
[Fri Feb 27 06:53:10.908470 2026] [:error] [pid 5365:tid 5371] [client 40.115.138.121:7537] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDO1pYAa8J3tYxdG3xrdQAAAQQ"]
[Fri Feb 27 06:57:01.510048 2026] [:error] [pid 42658:tid 42676] [client 20.104.124.39:52164] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaDPvYzcoYl3nRbu1jaREgAAAhA"]
[Fri Feb 27 06:57:03.220828 2026] [:error] [pid 3973:tid 3989] [client 20.104.124.39:52209] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaDPv4JZsftwqmUaaLMBOQAAAAY"]
[Fri Feb 27 06:57:04.689163 2026] [:error] [pid 3974:tid 4042] [client 20.104.124.39:52195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaDPwHp-fQtdOYjkuFvoIQAAAEU"]
[Fri Feb 27 06:57:07.496249 2026] [:error] [pid 5365:tid 5370] [client 20.104.124.39:52207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaDPw5YAa8J3tYxdG3xuGAAAAQM"]
[Fri Feb 27 06:57:11.748041 2026] [:error] [pid 42435:tid 42462] [client 20.104.124.39:52221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaDPxx5hHLnaukp_y9-gZwAAAZY"]
[Fri Feb 27 06:57:13.889735 2026] [:error] [pid 42563:tid 42575] [client 20.104.124.39:52185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaDPyXKL5BclZy73IRHi2gAAAcc"]
[Fri Feb 27 06:57:15.270967 2026] [:error] [pid 21329:tid 21401] [client 20.104.124.39:52110] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaDPy5vQWnde-MjcQ1FvIwAAAVI"]
[Fri Feb 27 06:57:16.390491 2026] [:error] [pid 3974:tid 4041] [client 20.104.124.39:52208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaDPzHp-fQtdOYjkuFvoKAAAAEQ"]
[Fri Feb 27 06:57:18.711907 2026] [:error] [pid 5365:tid 5375] [client 20.104.124.39:52160] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaDPzpYAa8J3tYxdG3xuNAAAAQg"]
[Fri Feb 27 06:57:20.672032 2026] [:error] [pid 42658:tid 42665] [client 20.104.124.39:52187] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaDP0IzcoYl3nRbu1jaRKwAAAgU"]
[Fri Feb 27 06:57:21.717692 2026] [:error] [pid 21329:tid 21397] [client 20.104.124.39:52168] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaDP0ZvQWnde-MjcQ1FvJgAAAU4"]
[Fri Feb 27 06:57:23.452952 2026] [:error] [pid 5365:tid 5376] [client 20.104.124.39:52184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaDP05YAa8J3tYxdG3xuSAAAAQk"]
[Fri Feb 27 06:57:25.132260 2026] [:error] [pid 5365:tid 5382] [client 20.104.124.39:52101] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaDP1ZYAa8J3tYxdG3xuVAAAAQ8"]
[Fri Feb 27 06:57:26.496763 2026] [:error] [pid 21329:tid 21391] [client 20.104.124.39:52215] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaDP1pvQWnde-MjcQ1FvKAAAAUg"]
[Fri Feb 27 06:57:27.562507 2026] [:error] [pid 42435:tid 42449] [client 20.104.124.39:52197] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaDP1x5hHLnaukp_y9-gbgAAAYk"]
[Fri Feb 27 06:57:28.781146 2026] [:error] [pid 42435:tid 42445] [client 20.104.124.39:52223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaDP2B5hHLnaukp_y9-gcQAAAYU"]
[Fri Feb 27 06:57:30.004599 2026] [:error] [pid 4081:tid 4099] [client 20.104.124.39:52177] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaDP2g55mnr35z8h7t3vtAAAANA"]
[Fri Feb 27 06:57:30.844928 2026] [:error] [pid 42658:tid 42683] [client 20.104.124.39:52216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaDP2ozcoYl3nRbu1jaRRwAAAhc"]
[Fri Feb 27 06:57:32.043427 2026] [:error] [pid 42435:tid 42453] [client 20.104.124.39:52127] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaDP3B5hHLnaukp_y9-ggAAAAY0"]
[Fri Feb 27 06:57:35.476657 2026] [:error] [pid 5365:tid 5368] [client 20.104.124.39:52100] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaDP35YAa8J3tYxdG3xuXwAAAQE"]
[Fri Feb 27 06:57:36.753153 2026] [:error] [pid 4081:tid 4095] [client 20.104.124.39:52103] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaDP4A55mnr35z8h7t3vtQAAAMw"]
[Fri Feb 27 06:57:38.530507 2026] [:error] [pid 3973:tid 3985] [client 20.104.124.39:52182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaDP4oJZsftwqmUaaLMBPAAAAAI"]
[Fri Feb 27 06:57:40.339578 2026] [:error] [pid 42658:tid 42680] [client 20.104.124.39:52201] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaDP5IzcoYl3nRbu1jaRmgAAAhQ"]
[Fri Feb 27 06:57:43.029889 2026] [:error] [pid 42658:tid 42665] [client 20.104.124.39:52220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaDP54zcoYl3nRbu1jaRqwAAAgU"]
[Fri Feb 27 06:57:44.162411 2026] [:error] [pid 5365:tid 5382] [client 20.104.124.39:52121] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaDP6JYAa8J3tYxdG3xucAAAAQ8"]
[Fri Feb 27 06:57:46.284984 2026] [:error] [pid 42658:tid 42677] [client 20.104.124.39:52166] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaDP6ozcoYl3nRbu1jaRuwAAAhE"]
[Fri Feb 27 06:57:47.896132 2026] [:error] [pid 42563:tid 42575] [client 20.104.124.39:52206] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaDP63KL5BclZy73IRHjLAAAAcc"]
[Fri Feb 27 06:57:49.039528 2026] [:error] [pid 5365:tid 5384] [client 20.104.124.39:52111] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaDP7ZYAa8J3tYxdG3xueQAAARE"]
[Fri Feb 27 06:57:50.442385 2026] [:error] [pid 5365:tid 5387] [client 20.104.124.39:52180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaDP7pYAa8J3tYxdG3xufQAAARQ"]
[Fri Feb 27 06:57:52.829587 2026] [:error] [pid 21329:tid 21401] [client 20.104.124.39:52116] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaDP8JvQWnde-MjcQ1FvMQAAAVI"]
[Fri Feb 27 06:57:54.379644 2026] [:error] [pid 42563:tid 42592] [client 20.104.124.39:52200] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaDP8nKL5BclZy73IRHjMAAAAdY"]
[Fri Feb 27 06:57:55.708141 2026] [:error] [pid 42658:tid 42677] [client 20.104.124.39:52113] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaDP84zcoYl3nRbu1jaRxwAAAhE"]
[Fri Feb 27 06:57:58.353398 2026] [:error] [pid 42563:tid 42579] [client 20.104.124.39:52109] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaDP9nKL5BclZy73IRHjMgAAAck"]
[Fri Feb 27 06:57:59.938292 2026] [:error] [pid 5365:tid 5374] [client 20.104.124.39:52123] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaDP95YAa8J3tYxdG3xulwAAAQc"]
[Fri Feb 27 06:58:08.415619 2026] [:error] [pid 5365:tid 5389] [client 20.104.124.39:52106] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaDQAJYAa8J3tYxdG3xuxgAAARY"]
[Fri Feb 27 06:58:09.639192 2026] [:error] [pid 42435:tid 42460] [client 20.104.124.39:52044] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaDQAR5hHLnaukp_y9-gnwAAAZQ"]
[Fri Feb 27 06:58:11.001470 2026] [:error] [pid 4081:tid 4102] [client 20.104.124.39:52152] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaDQAw55mnr35z8h7t3vyQAAANM"]
[Fri Feb 27 06:58:12.360031 2026] [:error] [pid 42658:tid 42673] [client 20.104.124.39:52205] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaDQBIzcoYl3nRbu1jaR3AAAAg0"]
[Fri Feb 27 06:58:13.112917 2026] [:error] [pid 5365:tid 5367] [client 20.104.124.39:52212] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaDQBZYAa8J3tYxdG3xuyQAAAQA"]
[Fri Feb 27 06:58:14.614831 2026] [:error] [pid 5365:tid 5379] [client 20.104.124.39:52104] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaDQBpYAa8J3tYxdG3xuywAAAQw"]
[Fri Feb 27 06:58:15.907145 2026] [:error] [pid 42563:tid 42594] [client 20.104.124.39:52210] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaDQB3KL5BclZy73IRHjOwAAAdg"]
[Fri Feb 27 06:58:17.356458 2026] [:error] [pid 42658:tid 42674] [client 20.104.124.39:52132] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaDQCYzcoYl3nRbu1jaR5wAAAg4"]
[Fri Feb 27 06:58:19.298131 2026] [:error] [pid 5365:tid 5384] [client 20.104.124.39:52107] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaDQC5YAa8J3tYxdG3xu0gAAARE"]
[Fri Feb 27 06:58:22.545070 2026] [:error] [pid 42658:tid 42682] [client 20.104.124.39:52190] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaDQDozcoYl3nRbu1jaR8gAAAhY"]
[Fri Feb 27 06:58:27.197358 2026] [:error] [pid 42563:tid 42580] [client 20.104.124.39:52114] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaDQE3KL5BclZy73IRHjUwAAAco"]
[Fri Feb 27 06:58:30.509882 2026] [:error] [pid 42658:tid 42666] [client 20.104.124.39:52131] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaDQFozcoYl3nRbu1jaSAwAAAgY"]
[Fri Feb 27 06:58:31.125961 2026] [:error] [pid 5365:tid 5384] [client 20.104.124.39:52135] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaDQF5YAa8J3tYxdG3xu4AAAARE"]
[Fri Feb 27 06:58:31.854302 2026] [:error] [pid 42658:tid 42668] [client 20.104.124.39:52117] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaDQF4zcoYl3nRbu1jaSBgAAAgg"]
[Fri Feb 27 06:58:32.820320 2026] [:error] [pid 3974:tid 4058] [client 20.104.124.39:52175] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaDQGHp-fQtdOYjkuFvoMwAAAFU"]
[Fri Feb 27 06:58:33.952579 2026] [:error] [pid 4081:tid 4086] [client 20.104.124.39:52050] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaDQGQ55mnr35z8h7t3vzwAAAMM"]
[Fri Feb 27 06:58:35.952095 2026] [:error] [pid 5365:tid 5379] [client 20.104.124.39:52034] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaDQG5YAa8J3tYxdG3xu6gAAAQw"]
[Fri Feb 27 06:58:37.620327 2026] [:error] [pid 42658:tid 42664] [client 20.104.124.39:52138] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaDQHYzcoYl3nRbu1jaSCwAAAgQ"]
[Fri Feb 27 06:58:39.691468 2026] [:error] [pid 5365:tid 5367] [client 20.104.124.39:52057] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaDQH5YAa8J3tYxdG3xu8wAAAQA"]
[Fri Feb 27 06:58:40.638123 2026] [:error] [pid 5365:tid 5374] [client 20.104.124.39:52165] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaDQIJYAa8J3tYxdG3xu9gAAAQc"]
[Fri Feb 27 06:58:43.407343 2026] [:error] [pid 42658:tid 42665] [client 20.104.124.39:52099] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaDQI4zcoYl3nRbu1jaSEwAAAgU"]
[Fri Feb 27 06:58:45.554249 2026] [:error] [pid 21329:tid 21383] [client 20.104.124.39:52065] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaDQJZvQWnde-MjcQ1FvTAAAAUA"]
[Fri Feb 27 06:58:46.837959 2026] [:error] [pid 4081:tid 4085] [client 20.104.124.39:52126] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaDQJg55mnr35z8h7t3v0wAAAMI"]
[Fri Feb 27 06:58:49.154794 2026] [:error] [pid 3975:tid 4022] [client 20.104.124.39:52176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaDQKRMVp0-T2hD76b3HLgAAAIw"]
[Fri Feb 27 06:58:51.601693 2026] [:error] [pid 5365:tid 5376] [client 20.104.124.39:52181] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaDQK5YAa8J3tYxdG3xvDgAAAQk"]
[Fri Feb 27 06:58:53.901817 2026] [:error] [pid 42658:tid 42660] [client 20.104.124.39:52043] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaDQLYzcoYl3nRbu1jaSHgAAAgA"]
[Fri Feb 27 06:58:56.758007 2026] [:error] [pid 5365:tid 5375] [client 20.104.124.39:52204] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaDQMJYAa8J3tYxdG3xvGgAAAQg"]
[Fri Feb 27 06:58:58.184778 2026] [:error] [pid 5365:tid 5390] [client 20.104.124.39:52108] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "aaDQMpYAa8J3tYxdG3xvHQAAARc"]
[Fri Feb 27 06:58:59.554246 2026] [:error] [pid 42563:tid 42579] [client 20.104.124.39:52115] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaDQM3KL5BclZy73IRHjZwAAAck"]
[Fri Feb 27 06:59:00.543342 2026] [:error] [pid 5365:tid 5377] [client 20.104.124.39:52188] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaDQNJYAa8J3tYxdG3xvJQAAAQo"]
[Fri Feb 27 06:59:01.557765 2026] [:error] [pid 5365:tid 5390] [client 20.104.124.39:52058] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaDQNZYAa8J3tYxdG3xvKgAAARc"]
[Fri Feb 27 06:59:03.195122 2026] [:error] [pid 42563:tid 42569] [client 20.104.124.39:52191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaDQN3KL5BclZy73IRHjawAAAcE"]
[Fri Feb 27 06:59:04.130115 2026] [:error] [pid 5365:tid 5375] [client 20.104.124.39:52194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaDQOJYAa8J3tYxdG3xvMAAAAQg"]
[Fri Feb 27 06:59:04.996753 2026] [:error] [pid 42658:tid 42682] [client 20.104.124.39:52102] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaDQOIzcoYl3nRbu1jaSWAAAAhY"]
[Fri Feb 27 06:59:05.878713 2026] [:error] [pid 42658:tid 42672] [client 20.104.124.39:52162] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaDQOYzcoYl3nRbu1jaScgAAAgw"]
[Fri Feb 27 06:59:07.327612 2026] [:error] [pid 5365:tid 5376] [client 20.104.124.39:52211] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaDQO5YAa8J3tYxdG3xvMwAAAQk"]
[Fri Feb 27 06:59:20.723734 2026] [:error] [pid 42435:tid 42460] [client 20.104.124.39:52133] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaDQSB5hHLnaukp_y9-g0AAAAZQ"]
[Fri Feb 27 06:59:22.859083 2026] [:error] [pid 5365:tid 5367] [client 20.104.124.39:52049] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaDQSpYAa8J3tYxdG3xvRwAAAQA"]
[Fri Feb 27 06:59:24.944705 2026] [:error] [pid 5365:tid 5381] [client 20.104.124.39:52203] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaDQTJYAa8J3tYxdG3xvTQAAAQ4"]
[Fri Feb 27 06:59:25.797085 2026] [:error] [pid 5365:tid 5368] [client 20.104.124.39:52154] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaDQTZYAa8J3tYxdG3xvUQAAAQE"]
[Fri Feb 27 06:59:27.038007 2026] [:error] [pid 5365:tid 5387] [client 20.104.124.39:52142] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaDQT5YAa8J3tYxdG3xvXgAAARQ"]
[Fri Feb 27 06:59:27.769424 2026] [:error] [pid 3975:tid 4034] [client 20.104.124.39:52186] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaDQTxMVp0-T2hD76b3HNgAAAJY"]
[Fri Feb 27 06:59:30.222538 2026] [:error] [pid 3975:tid 4036] [client 20.104.124.39:51998] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaDQUhMVp0-T2hD76b3HOgAAAJc"]
[Fri Feb 27 06:59:32.733554 2026] [:error] [pid 5365:tid 5381] [client 20.104.124.39:52158] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaDQVJYAa8J3tYxdG3xvhQAAAQ4"]
[Fri Feb 27 06:59:35.670915 2026] [:error] [pid 42435:tid 42454] [client 20.104.124.39:52090] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaDQVx5hHLnaukp_y9-g3AAAAY4"]
[Fri Feb 27 06:59:38.185523 2026] [:error] [pid 42563:tid 42585] [client 20.104.124.39:52093] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaDQWnKL5BclZy73IRHjqQAAAc8"]
[Fri Feb 27 06:59:40.284704 2026] [:error] [pid 42658:tid 42664] [client 20.104.124.39:52163] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaDQXIzcoYl3nRbu1jaSrAAAAgQ"]
[Fri Feb 27 06:59:42.382843 2026] [:error] [pid 5365:tid 5369] [client 20.104.124.39:52174] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaDQXpYAa8J3tYxdG3xvqgAAAQI"]
[Fri Feb 27 06:59:45.160879 2026] [:error] [pid 42563:tid 42591] [client 20.104.124.39:52202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaDQYXKL5BclZy73IRHjtQAAAdU"]
[Fri Feb 27 06:59:48.318199 2026] [:error] [pid 42658:tid 42660] [client 20.104.124.39:52112] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaDQZIzcoYl3nRbu1jaSwQAAAgA"]
[Fri Feb 27 06:59:50.037919 2026] [:error] [pid 5365:tid 5374] [client 20.104.124.39:52151] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaDQZpYAa8J3tYxdG3xvsgAAAQc"]
[Fri Feb 27 06:59:51.921908 2026] [:error] [pid 5365:tid 5378] [client 20.104.124.39:52183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaDQZ5YAa8J3tYxdG3xvuQAAAQs"]
[Fri Feb 27 06:59:53.087580 2026] [:error] [pid 42435:tid 42452] [client 20.104.124.39:52119] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaDQaR5hHLnaukp_y9-g6wAAAYw"]
[Fri Feb 27 06:59:54.826794 2026] [:error] [pid 42563:tid 42574] [client 20.104.124.39:52178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaDQanKL5BclZy73IRHjxgAAAcY"]
[Fri Feb 27 06:59:57.177176 2026] [:error] [pid 42658:tid 42660] [client 20.104.124.39:52217] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaDQbYzcoYl3nRbu1jaS3wAAAgA"]
[Fri Feb 27 06:59:59.112338 2026] [:error] [pid 42435:tid 42450] [client 20.104.124.39:51994] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaDQbx5hHLnaukp_y9-g8AAAAYo"]
[Fri Feb 27 07:00:00.906328 2026] [:error] [pid 42563:tid 42586] [client 20.104.124.39:52172] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaDQcHKL5BclZy73IRHjzQAAAdA"]
[Fri Feb 27 07:00:01.859070 2026] [:error] [pid 5365:tid 5383] [client 20.104.124.39:52170] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaDQcZYAa8J3tYxdG3xv0AAAARA"]
[Fri Feb 27 07:00:03.629741 2026] [:error] [pid 5365:tid 5374] [client 20.104.124.39:52140] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaDQc5YAa8J3tYxdG3xv1wAAAQc"]
[Fri Feb 27 07:00:06.009560 2026] [:error] [pid 5365:tid 5386] [client 20.104.124.39:52156] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaDQdpYAa8J3tYxdG3xv4AAAARM"]
[Fri Feb 27 07:00:07.908218 2026] [:error] [pid 5365:tid 5384] [client 20.104.124.39:52173] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaDQd5YAa8J3tYxdG3xv6AAAARE"]
[Fri Feb 27 07:00:09.874061 2026] [:error] [pid 5365:tid 5368] [client 20.104.124.39:52098] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaDQeZYAa8J3tYxdG3xv7wAAAQE"]
[Fri Feb 27 07:00:15.065819 2026] [:error] [pid 42563:tid 42584] [client 20.104.124.39:52169] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaDQf3KL5BclZy73IRHj5AAAAc4"]
[Fri Feb 27 07:00:29.745830 2026] [:error] [pid 42563:tid 42579] [client 20.104.124.39:52105] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaDQjXKL5BclZy73IRHkGwAAAck"]
[Fri Feb 27 07:00:32.780342 2026] [:error] [pid 42563:tid 42583] [client 20.104.124.39:52062] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaDQkHKL5BclZy73IRHkJAAAAc0"]
[Fri Feb 27 07:00:33.324214 2026] [:error] [pid 5365:tid 5376] [client 20.104.124.39:52150] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaDQkZYAa8J3tYxdG3xv9wAAAQk"]
[Fri Feb 27 07:00:33.903972 2026] [:error] [pid 42658:tid 42671] [client 20.104.124.39:52222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaDQkYzcoYl3nRbu1jaTWgAAAgs"]
[Fri Feb 27 07:00:34.914099 2026] [:error] [pid 3975:tid 4014] [client 20.104.124.39:52193] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaDQkhMVp0-T2hD76b3HQQAAAIQ"]
[Fri Feb 27 07:00:36.034862 2026] [:error] [pid 42658:tid 42664] [client 20.104.124.39:52002] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaDQlIzcoYl3nRbu1jaTZAAAAgQ"]
[Fri Feb 27 07:00:37.059450 2026] [:error] [pid 21329:tid 21387] [client 20.104.124.39:52054] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaDQlZvQWnde-MjcQ1FvlQAAAUQ"]
[Fri Feb 27 07:00:38.372523 2026] [:error] [pid 42563:tid 42590] [client 20.104.124.39:52145] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaDQlnKL5BclZy73IRHkLQAAAdQ"]
[Fri Feb 27 07:00:40.458281 2026] [:error] [pid 42658:tid 42668] [client 20.104.124.39:52136] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaDQmIzcoYl3nRbu1jaTawAAAgg"]
[Fri Feb 27 07:00:41.249563 2026] [:error] [pid 21329:tid 21388] [client 20.104.124.39:52045] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaDQmZvQWnde-MjcQ1FvlwAAAUU"]
[Fri Feb 27 07:00:43.024614 2026] [:error] [pid 5365:tid 5379] [client 20.104.124.39:52153] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaDQm5YAa8J3tYxdG3xwFQAAAQw"]
[Fri Feb 27 07:00:46.109694 2026] [:error] [pid 5365:tid 5369] [client 20.104.124.39:52036] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaDQnpYAa8J3tYxdG3xwIQAAAQI"]
[Fri Feb 27 07:00:47.564283 2026] [:error] [pid 42658:tid 42681] [client 20.104.124.39:52147] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaDQn4zcoYl3nRbu1jaTewAAAhU"]
[Fri Feb 27 07:00:48.450047 2026] [:error] [pid 42435:tid 42457] [client 20.104.124.39:52073] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaDQoB5hHLnaukp_y9-hFgAAAZE"]
[Fri Feb 27 07:00:50.034148 2026] [:error] [pid 5365:tid 5369] [client 20.104.124.39:52143] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaDQopYAa8J3tYxdG3xwKwAAAQI"]
[Fri Feb 27 07:00:51.017620 2026] [:error] [pid 5365:tid 5370] [client 20.104.124.39:52069] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaDQo5YAa8J3tYxdG3xwMAAAAQM"]
[Fri Feb 27 07:00:52.836453 2026] [:error] [pid 5365:tid 5378] [client 20.104.124.39:52167] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaDQpJYAa8J3tYxdG3xwNQAAAQs"]
[Fri Feb 27 07:00:53.632928 2026] [:error] [pid 5365:tid 5371] [client 20.104.124.39:52192] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaDQpZYAa8J3tYxdG3xwOwAAAQQ"]
[Fri Feb 27 07:00:54.517086 2026] [:error] [pid 3973:tid 3984] [client 20.104.124.39:52097] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaDQpoJZsftwqmUaaLMBTgAAAAE"]
[Fri Feb 27 07:00:55.220562 2026] [:error] [pid 21329:tid 21405] [client 20.104.124.39:52219] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaDQp5vQWnde-MjcQ1FvmwAAAVY"]
[Fri Feb 27 07:00:57.139563 2026] [:error] [pid 3973:tid 4005] [client 20.104.124.39:51972] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaDQqYJZsftwqmUaaLMBUAAAABY"]
[Fri Feb 27 07:00:59.666249 2026] [:error] [pid 5365:tid 5377] [client 20.104.124.39:52055] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaDQq5YAa8J3tYxdG3xwSQAAAQo"]
[Fri Feb 27 07:01:00.680493 2026] [:error] [pid 5365:tid 5389] [client 20.104.124.39:52141] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaDQrJYAa8J3tYxdG3xwUQAAARY"]
[Fri Feb 27 07:01:01.821097 2026] [:error] [pid 4081:tid 4101] [client 20.104.124.39:52213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaDQrQ55mnr35z8h7t3wYwAAANI"]
[Fri Feb 27 07:01:04.199285 2026] [:error] [pid 4081:tid 4083] [client 20.104.124.39:52096] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaDQsA55mnr35z8h7t3wawAAAMA"]
[Fri Feb 27 07:01:07.235486 2026] [:error] [pid 42658:tid 42683] [client 20.104.124.39:52134] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaDQs4zcoYl3nRbu1jaTlwAAAhc"]
[Fri Feb 27 07:01:10.701351 2026] [:error] [pid 3973:tid 4004] [client 20.104.124.39:52080] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaDQtoJZsftwqmUaaLMBVQAAABU"]
[Fri Feb 27 07:01:14.933445 2026] [:error] [pid 3974:tid 4042] [client 20.104.124.39:52157] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaDQunp-fQtdOYjkuFvoeQAAAEU"]
[Fri Feb 27 07:01:17.345231 2026] [:error] [pid 3974:tid 4051] [client 20.104.124.39:51977] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaDQvXp-fQtdOYjkuFvofAAAAE4"]
[Fri Feb 27 07:01:23.068925 2026] [:error] [pid 3975:tid 4020] [client 20.104.124.39:51968] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaDQwxMVp0-T2hD76b3HTwAAAIo"]
[Fri Feb 27 07:01:28.285921 2026] [:error] [pid 3975:tid 4013] [client 20.104.124.39:52160] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaDQyBMVp0-T2hD76b3HUwAAAIM"]
[Fri Feb 27 07:01:37.420455 2026] [:error] [pid 42658:tid 42666] [client 20.104.124.39:52179] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaDQ0YzcoYl3nRbu1jaTywAAAgY"]
[Fri Feb 27 07:01:41.488639 2026] [:error] [pid 42658:tid 42661] [client 20.104.124.39:52215] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaDQ1YzcoYl3nRbu1jaT3QAAAgE"]
[Fri Feb 27 07:01:45.006704 2026] [proxy_fcgi:error] [pid 42658:tid 42666] [client 20.104.124.39:52186] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 07:01:47.888913 2026] [:error] [pid 42658:tid 42663] [client 20.104.124.39:52186] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaDQ24zcoYl3nRbu1jaT8wAAAgM"]
[Fri Feb 27 07:01:48.897359 2026] [:error] [pid 21329:tid 21388] [client 20.104.124.39:52037] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaDQ3JvQWnde-MjcQ1Fv3wAAAUU"]
[Fri Feb 27 07:01:49.865613 2026] [:error] [pid 5365:tid 5381] [client 20.104.124.39:52197] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaDQ3ZYAa8J3tYxdG3xwsAAAAQ4"]
[Fri Feb 27 07:01:50.966329 2026] [:error] [pid 5365:tid 5369] [client 20.104.124.39:52199] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaDQ3pYAa8J3tYxdG3xwsQAAAQI"]
[Fri Feb 27 07:01:52.061651 2026] [:error] [pid 42658:tid 42673] [client 20.104.124.39:52006] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaDQ4IzcoYl3nRbu1jaT-gAAAg0"]
[Fri Feb 27 07:01:54.570897 2026] [:error] [pid 42658:tid 42676] [client 20.104.124.39:52220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaDQ4ozcoYl3nRbu1jaUAgAAAhA"]
[Fri Feb 27 07:01:55.904234 2026] [:error] [pid 3973:tid 3986] [client 20.104.124.39:52164] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaDQ44JZsftwqmUaaLMBYgAAAAM"]
[Fri Feb 27 07:01:57.974674 2026] [:error] [pid 42563:tid 42570] [client 20.104.124.39:52130] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaDQ5XKL5BclZy73IRHkjQAAAcI"]
[Fri Feb 27 07:01:59.614700 2026] [:error] [pid 42658:tid 42675] [client 20.104.124.39:52075] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaDQ54zcoYl3nRbu1jaUDAAAAg8"]
[Fri Feb 27 07:02:00.520145 2026] [:error] [pid 5365:tid 5388] [client 20.104.124.39:52063] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaDQ6JYAa8J3tYxdG3xwuQAAARU"]
[Fri Feb 27 07:02:01.783700 2026] [:error] [pid 42658:tid 42674] [client 20.104.124.39:52085] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaDQ6YzcoYl3nRbu1jaUEQAAAg4"]
[Fri Feb 27 07:02:02.739407 2026] [:error] [pid 42658:tid 42668] [client 20.104.124.39:52127] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaDQ6ozcoYl3nRbu1jaUFgAAAgg"]
[Fri Feb 27 07:02:03.660293 2026] [:error] [pid 42658:tid 42666] [client 20.104.124.39:52184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaDQ64zcoYl3nRbu1jaUFwAAAgY"]
[Fri Feb 27 07:02:05.229454 2026] [:error] [pid 42658:tid 42671] [client 20.104.124.39:52061] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaDQ7YzcoYl3nRbu1jaUHgAAAgs"]
[Fri Feb 27 07:02:06.993263 2026] [:error] [pid 5365:tid 5381] [client 20.104.124.39:52139] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaDQ7pYAa8J3tYxdG3xwwAAAAQ4"]
[Fri Feb 27 07:02:08.882401 2026] [:error] [pid 4081:tid 4098] [client 20.104.124.39:52129] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaDQ8A55mnr35z8h7t3wgQAAAM8"]
[Fri Feb 27 07:02:11.191763 2026] [:error] [pid 42435:tid 42457] [client 20.104.124.39:52101] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaDQ8x5hHLnaukp_y9-hUQAAAZE"]
[Fri Feb 27 07:02:12.891509 2026] [:error] [pid 5365:tid 5378] [client 20.104.124.39:52032] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaDQ9JYAa8J3tYxdG3xw2AAAAQs"]
[Fri Feb 27 07:02:15.246016 2026] [:error] [pid 42658:tid 42680] [client 20.104.124.39:52109] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaDQ94zcoYl3nRbu1jaUMAAAAhQ"]
[Fri Feb 27 07:02:17.790820 2026] [:error] [pid 42658:tid 42671] [client 20.104.124.39:52077] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaDQ-YzcoYl3nRbu1jaUPgAAAgs"]
[Fri Feb 27 07:02:20.609906 2026] [:error] [pid 5365:tid 5391] [client 20.104.124.39:52040] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaDQ_JYAa8J3tYxdG3xw5gAAARg"]
[Fri Feb 27 07:02:22.240682 2026] [:error] [pid 21329:tid 21392] [client 20.104.124.39:52201] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaDQ_pvQWnde-MjcQ1Fv8wAAAUk"]
[Fri Feb 27 07:02:24.048502 2026] [:error] [pid 21329:tid 21404] [client 20.104.124.39:52033] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaDRAJvQWnde-MjcQ1Fv9wAAAVU"]
[Fri Feb 27 07:02:25.912207 2026] [:error] [pid 42563:tid 42579] [client 20.104.124.39:52207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaDRAXKL5BclZy73IRHkvwAAAck"]
[Fri Feb 27 07:02:28.052766 2026] [:error] [pid 5365:tid 5391] [client 20.104.124.39:52121] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aaDRBJYAa8J3tYxdG3xw9AAAARg"]
[Fri Feb 27 07:02:29.615985 2026] [:error] [pid 42435:tid 42444] [client 20.104.124.39:52195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aaDRBR5hHLnaukp_y9-hZAAAAYQ"]
[Fri Feb 27 07:02:32.430416 2026] [:error] [pid 5365:tid 5391] [client 20.104.124.39:52052] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aaDRCJYAa8J3tYxdG3xxEwAAARg"]
[Fri Feb 27 07:02:36.288850 2026] [:error] [pid 42563:tid 42573] [client 20.104.124.39:52146] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "aaDRDHKL5BclZy73IRHkyQAAAcU"]
[Fri Feb 27 07:02:36.910820 2026] [:error] [pid 42658:tid 42670] [client 20.104.124.39:52128] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aaDRDIzcoYl3nRbu1jaUZQAAAgo"]
[Fri Feb 27 07:02:39.076862 2026] [:error] [pid 42563:tid 42586] [client 20.104.124.39:52117] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aaDRD3KL5BclZy73IRHkzwAAAdA"]
[Fri Feb 27 07:02:40.349156 2026] [:error] [pid 5365:tid 5388] [client 20.104.124.39:52011] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aaDREJYAa8J3tYxdG3xxHwAAARU"]
[Fri Feb 27 07:02:41.816017 2026] [:error] [pid 5365:tid 5372] [client 20.104.124.39:52028] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "aaDREZYAa8J3tYxdG3xxIgAAAQU"]
[Fri Feb 27 07:02:42.987126 2026] [:error] [pid 5365:tid 5371] [client 20.104.124.39:52214] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aaDREpYAa8J3tYxdG3xxJgAAAQQ"]
[Fri Feb 27 07:02:43.626595 2026] [:error] [pid 5365:tid 5381] [client 20.104.124.39:52182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aaDRE5YAa8J3tYxdG3xxKAAAAQ4"]
[Fri Feb 27 07:02:45.041976 2026] [:error] [pid 42563:tid 42588] [client 20.104.124.39:52106] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aaDRFXKL5BclZy73IRHk0gAAAdI"]
[Fri Feb 27 07:02:46.773990 2026] [:error] [pid 42658:tid 42678] [client 20.104.124.39:51949] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aaDRFozcoYl3nRbu1jaUdgAAAhI"]
[Fri Feb 27 07:02:48.202321 2026] [:error] [pid 5365:tid 5378] [client 20.104.124.39:52114] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaDRGJYAa8J3tYxdG3xxLwAAAQs"]
[Fri Feb 27 07:02:48.948817 2026] [:error] [pid 5365:tid 5370] [client 20.104.124.39:52107] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaDRGJYAa8J3tYxdG3xxMwAAAQM"]
[Fri Feb 27 07:02:58.600059 2026] [:error] [pid 42658:tid 42672] [client 20.104.124.39:52187] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaDRIozcoYl3nRbu1jaUpgAAAgw"]
[Fri Feb 27 07:03:00.214226 2026] [:error] [pid 5365:tid 5386] [client 20.104.124.39:52009] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaDRJJYAa8J3tYxdG3xxSQAAARM"]
[Fri Feb 27 07:03:03.154902 2026] [:error] [pid 5365:tid 5376] [client 20.104.124.39:52206] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaDRJ5YAa8J3tYxdG3xxYgAAAQk"]
[Fri Feb 27 07:03:05.486690 2026] [:error] [pid 5365:tid 5385] [client 20.104.124.39:52171] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaDRKZYAa8J3tYxdG3xxeAAAARI"]
[Fri Feb 27 07:03:07.589150 2026] [:error] [pid 42658:tid 42679] [client 20.104.124.39:52113] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaDRK4zcoYl3nRbu1jaUsgAAAhM"]
[Fri Feb 27 07:03:08.944211 2026] [:error] [pid 5365:tid 5378] [client 20.104.124.39:52223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaDRLJYAa8J3tYxdG3xxmAAAAQs"]
[Fri Feb 27 07:03:09.908547 2026] [:error] [pid 5365:tid 5388] [client 20.104.124.39:52064] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaDRLZYAa8J3tYxdG3xxogAAARU"]
[Fri Feb 27 07:03:10.821144 2026] [:error] [pid 5365:tid 5371] [client 20.104.124.39:52149] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaDRLpYAa8J3tYxdG3xxqgAAAQQ"]
[Fri Feb 27 07:03:11.548366 2026] [:error] [pid 42658:tid 42678] [client 20.104.124.39:52126] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaDRL4zcoYl3nRbu1jaUuwAAAhI"]
[Fri Feb 27 07:03:14.894995 2026] [:error] [pid 5365:tid 5367] [client 20.104.124.39:52116] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaDRMpYAa8J3tYxdG3xxvwAAAQA"]
[Fri Feb 27 07:03:16.262695 2026] [:error] [pid 21329:tid 21402] [client 20.104.124.39:52176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaDRNJvQWnde-MjcQ1FwAAAAAVM"]
[Fri Feb 27 07:03:18.334917 2026] [:error] [pid 4081:tid 4101] [client 20.104.124.39:52166] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaDRNg55mnr35z8h7t3wigAAANI"]
[Fri Feb 27 07:03:20.195501 2026] [:error] [pid 42658:tid 42679] [client 20.104.124.39:52043] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaDROIzcoYl3nRbu1jaU0wAAAhM"]
[Fri Feb 27 07:03:21.433923 2026] [:error] [pid 42563:tid 42569] [client 20.104.124.39:52088] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaDROXKL5BclZy73IRHlDwAAAcE"]
[Fri Feb 27 07:03:22.829910 2026] [:error] [pid 5365:tid 5384] [client 20.104.124.39:52124] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaDROpYAa8J3tYxdG3xx8AAAARE"]
[Fri Feb 27 07:03:24.827627 2026] [:error] [pid 42658:tid 42662] [client 20.104.124.39:52081] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaDRPIzcoYl3nRbu1jaU4gAAAgI"]
[Fri Feb 27 07:03:26.017314 2026] [:error] [pid 42563:tid 42579] [client 20.104.124.39:52135] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aaDRPnKL5BclZy73IRHlGAAAAck"]
[Fri Feb 27 07:03:27.124731 2026] [:error] [pid 42563:tid 42589] [client 20.104.124.39:52209] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aaDRP3KL5BclZy73IRHlIgAAAdM"]
[Fri Feb 27 07:03:28.501461 2026] [:error] [pid 42658:tid 42672] [client 20.104.124.39:52208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aaDRQIzcoYl3nRbu1jaU5wAAAgw"]
[Fri Feb 27 07:03:29.016637 2026] [:error] [pid 5365:tid 5378] [client 20.104.124.39:52108] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "aaDRQZYAa8J3tYxdG3xyCwAAAQs"]
[Fri Feb 27 07:03:30.013848 2026] [:error] [pid 42563:tid 42594] [client 20.104.124.39:52148] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aaDRQnKL5BclZy73IRHlLQAAAdg"]
[Fri Feb 27 07:03:31.627067 2026] [:error] [pid 5365:tid 5368] [client 20.104.124.39:51980] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aaDRQ5YAa8J3tYxdG3xyGwAAAQE"]
[Fri Feb 27 07:03:33.053096 2026] [:error] [pid 5365:tid 5376] [client 20.104.124.39:52123] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aaDRRZYAa8J3tYxdG3xyHwAAAQk"]
[Fri Feb 27 07:03:34.006583 2026] [:error] [pid 42435:tid 42461] [client 20.104.124.39:52060] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aaDRRh5hHLnaukp_y9-hjAAAAZU"]
[Fri Feb 27 07:03:35.515074 2026] [:error] [pid 42658:tid 42660] [client 20.104.124.39:52204] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aaDRR4zcoYl3nRbu1jaU-gAAAgA"]
[Fri Feb 27 07:03:36.772793 2026] [:error] [pid 42563:tid 42573] [client 20.104.124.39:52132] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aaDRSHKL5BclZy73IRHlMgAAAcU"]
[Fri Feb 27 07:03:38.461970 2026] [:error] [pid 4081:tid 4095] [client 20.104.124.39:52115] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aaDRSg55mnr35z8h7t3wlgAAAMw"]
[Fri Feb 27 07:03:39.156587 2026] [:error] [pid 5365:tid 5379] [client 20.104.124.39:52084] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "aaDRS5YAa8J3tYxdG3xyNQAAAQw"]
[Fri Feb 27 07:03:40.166627 2026] [:error] [pid 42658:tid 42672] [client 20.104.124.39:52154] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aaDRTIzcoYl3nRbu1jaVFgAAAgw"]
[Fri Feb 27 07:03:41.883848 2026] [:error] [pid 42658:tid 42680] [client 20.104.124.39:52175] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aaDRTYzcoYl3nRbu1jaVHAAAAhQ"]
[Fri Feb 27 07:03:43.704191 2026] [:error] [pid 4081:tid 4092] [client 20.104.124.39:52100] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aaDRTw55mnr35z8h7t3wlwAAAMk"]
[Fri Feb 27 07:03:45.028700 2026] [:error] [pid 42435:tid 42463] [client 20.104.124.39:52133] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aaDRUR5hHLnaukp_y9-hkQAAAZc"]
[Fri Feb 27 07:03:46.796856 2026] [:error] [pid 5365:tid 5375] [client 20.104.124.39:52076] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aaDRUpYAa8J3tYxdG3xyVAAAAQg"]
[Fri Feb 27 07:03:47.834511 2026] [:error] [pid 42658:tid 42660] [client 20.104.124.39:52012] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aaDRU4zcoYl3nRbu1jaVKQAAAgA"]
[Fri Feb 27 07:03:49.606446 2026] [:error] [pid 5365:tid 5373] [client 20.104.124.39:52180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aaDRVZYAa8J3tYxdG3xyYQAAAQY"]
[Fri Feb 27 07:03:52.361749 2026] [:error] [pid 42435:tid 42456] [client 20.104.124.39:52111] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "aaDRWB5hHLnaukp_y9-hlgAAAZA"]
[Fri Feb 27 07:03:55.217789 2026] [:error] [pid 4081:tid 4099] [client 20.104.124.39:52168] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "aaDRWw55mnr35z8h7t3wmgAAANA"]
[Fri Feb 27 07:04:07.185847 2026] [:error] [pid 42658:tid 42664] [client 20.104.124.39:52104] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaDRZ4zcoYl3nRbu1jaVVgAAAgQ"]
[Fri Feb 27 07:04:09.583250 2026] [:error] [pid 42658:tid 42666] [client 20.104.124.39:52102] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaDRaYzcoYl3nRbu1jaVXgAAAgY"]
[Fri Feb 27 07:04:11.727629 2026] [:error] [pid 5365:tid 5376] [client 20.104.124.39:52122] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaDRa5YAa8J3tYxdG3xywwAAAQk"]
[Fri Feb 27 07:04:13.835742 2026] [:error] [pid 21329:tid 21397] [client 20.104.124.39:52158] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaDRbZvQWnde-MjcQ1FwLwAAAU4"]
[Fri Feb 27 07:04:16.669548 2026] [:error] [pid 3973:tid 3994] [client 20.104.124.39:52066] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaDRcIJZsftwqmUaaLMBmwAAAAs"]
[Fri Feb 27 07:04:18.083342 2026] [:error] [pid 5365:tid 5387] [client 20.104.124.39:52016] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaDRcpYAa8J3tYxdG3xy2wAAARQ"]
[Fri Feb 27 07:04:19.469948 2026] [:error] [pid 4081:tid 4084] [client 20.104.124.39:52067] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaDRcw55mnr35z8h7t3wowAAAME"]
[Fri Feb 27 07:04:22.119431 2026] [:error] [pid 5365:tid 5376] [client 20.104.124.39:52056] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaDRdpYAa8J3tYxdG3xy4gAAAQk"]
[Fri Feb 27 07:04:24.764229 2026] [:error] [pid 42658:tid 42673] [client 20.104.124.39:52014] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaDReIzcoYl3nRbu1jaVkwAAAg0"]
[Fri Feb 27 07:04:26.613926 2026] [:error] [pid 3975:tid 4010] [client 20.104.124.39:52098] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaDRehMVp0-T2hD76b3HgAAAAIA"]
[Fri Feb 27 07:04:28.519375 2026] [:error] [pid 21329:tid 21401] [client 20.104.124.39:52156] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaDRfJvQWnde-MjcQ1FwRAAAAVI"]
[Fri Feb 27 07:04:30.647647 2026] [:error] [pid 42658:tid 42669] [client 20.104.124.39:52170] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaDRfozcoYl3nRbu1jaVpAAAAgk"]
[Fri Feb 27 07:04:34.500210 2026] [:error] [pid 5365:tid 5373] [client 20.104.124.39:52049] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaDRgpYAa8J3tYxdG3xzDAAAAQY"]
[Fri Feb 27 07:04:36.548928 2026] [:error] [pid 42658:tid 42675] [client 20.104.124.39:52140] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaDRhIzcoYl3nRbu1jaV0AAAAg8"]
[Fri Feb 27 07:04:42.027958 2026] [:error] [pid 42563:tid 42569] [client 20.104.124.39:52218] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaDRinKL5BclZy73IRHliwAAAcE"]
[Fri Feb 27 07:04:45.940652 2026] [:error] [pid 42435:tid 42450] [client 20.104.124.39:52083] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaDRjR5hHLnaukp_y9-hzwAAAYo"]
[Fri Feb 27 07:04:49.965423 2026] [:error] [pid 5365:tid 5370] [client 20.104.124.39:52174] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaDRkZYAa8J3tYxdG3xzVwAAAQM"]
[Fri Feb 27 07:04:54.264469 2026] [:error] [pid 42435:tid 42441] [client 20.104.124.39:52177] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaDRlh5hHLnaukp_y9-h1gAAAYE"]
[Fri Feb 27 07:04:55.465006 2026] [:error] [pid 3975:tid 4031] [client 20.104.124.39:52196] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaDRlxMVp0-T2hD76b3HkwAAAJQ"]
[Fri Feb 27 07:04:57.131858 2026] [:error] [pid 3975:tid 4012] [client 20.104.124.39:52163] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaDRmRMVp0-T2hD76b3HlgAAAII"]
[Fri Feb 27 07:04:59.902988 2026] [:error] [pid 42435:tid 42450] [client 20.104.124.39:51983] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaDRmx5hHLnaukp_y9-h3QAAAYo"]
[Fri Feb 27 07:05:02.456027 2026] [:error] [pid 5365:tid 5389] [client 20.104.124.39:52044] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaDRnpYAa8J3tYxdG3xzeQAAARY"]
[Fri Feb 27 07:05:03.600979 2026] [:error] [pid 5365:tid 5375] [client 20.104.124.39:52216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaDRn5YAa8J3tYxdG3xzfAAAAQg"]
[Fri Feb 27 08:03:06.613464 2026] [:error] [pid 5365:tid 5385] [client 42.117.234.103:36585] [client 42.117.234.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.117.234.103, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDfOpYAa8J3tYxdG3ydrQAAARI"]
[Fri Feb 27 09:49:16.953017 2026] [:error] [pid 54103:tid 54185] [client 49.233.45.47:50696] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaD4HOvG4MPCmE0B2sD_4QAAAM4"]
[Fri Feb 27 10:09:03.397874 2026] [:error] [pid 56075:tid 56098] [client 20.48.233.148:19668] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaD8v8KBhrfI6KNv9RhH0gAAABQ"]
[Fri Feb 27 10:09:05.962982 2026] [proxy_fcgi:error] [pid 54103:tid 54193] [client 20.48.233.148:20081] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 10:09:07.625261 2026] [:error] [pid 54103:tid 54187] [client 20.48.233.148:20081] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaD8w-vG4MPCmE0B2sAFJQAAANA"]
[Fri Feb 27 10:09:09.675539 2026] [:error] [pid 54231:tid 54239] [client 20.48.233.148:20032] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aaD8xeTvb5AeyJCdY7BDogAAAEU"]
[Fri Feb 27 10:09:11.955059 2026] [:error] [pid 54103:tid 54186] [client 20.48.233.148:19650] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD8x-vG4MPCmE0B2sAFLgAAAM8"]
[Fri Feb 27 10:09:13.377269 2026] [:error] [pid 62998:tid 63024] [client 20.48.233.148:20071] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD8yVQeueXZDUmoLokBHgAAARY"]
[Fri Feb 27 10:09:16.167772 2026] [:error] [pid 54103:tid 54173] [client 20.48.233.148:20089] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD8zOvG4MPCmE0B2sAFMgAAAMI"]
[Fri Feb 27 10:09:17.835881 2026] [:error] [pid 54101:tid 54129] [client 20.48.233.148:20079] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaD8zVY5qgRktcYTGFvI7AAAAdU"]
[Fri Feb 27 11:00:09.837050 2026] [:error] [pid 49306:tid 49319] [client 64.64.108.19:57213] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aaEIufnSUDZue59Px9tIYgAAAUs"]
[Fri Feb 27 11:00:11.288009 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.62:64727] [client 64.64.108.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aaEIu_nSUDZue59Px9tIbQAAAVY"]
[Fri Feb 27 11:00:12.188243 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.26:26617] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aaEIvPnSUDZue59Px9tIdwAAAUE"]
[Fri Feb 27 11:00:13.539494 2026] [:error] [pid 56075:tid 56079] [client 64.64.108.31:65219] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaEIvcKBhrfI6KNv9RhnVAAAAAI"]
[Fri Feb 27 11:00:14.669622 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.37:40771] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaEIvlQeueXZDUmoLokuGgAAAQs"]
[Fri Feb 27 11:00:18.648372 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.61:33993] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaEIwsKBhrfI6KNv9RhnjwAAABE"]
[Fri Feb 27 11:00:19.609739 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.18:54077] [client 64.64.108.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaEIw1QeueXZDUmoLokuPAAAARI"]
[Fri Feb 27 11:00:38.037326 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.51:65101] [client 64.64.108.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.51, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaEI1vnSUDZue59Px9tJTQAAAVI"]
[Fri Feb 27 11:00:39.957405 2026] [:error] [pid 49306:tid 49311] [client 64.64.108.51:65101] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aaEI1_nSUDZue59Px9tJaAAAAUM"]
[Fri Feb 27 11:00:59.363451 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.44:28257] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aaEI61QeueXZDUmoLokvgQAAARc"]
[Fri Feb 27 11:01:22.437144 2026] [:error] [pid 54231:tid 54237] [client 64.64.108.59:27847] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaEJAuTvb5AeyJCdY7BavAAAAEM"]
[Fri Feb 27 11:01:23.502253 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.51:62523] [client 64.64.108.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.64.108.51, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaEJA_nSUDZue59Px9tLPwAAAVM"]
[Fri Feb 27 11:01:25.251854 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.51:62523] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaEJBfnSUDZue59Px9tLVQAAAUE"]
[Fri Feb 27 11:01:30.236754 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.30:46579] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaEJClQeueXZDUmoLokwvAAAARU"]
[Fri Feb 27 11:01:40.629677 2026] [:error] [pid 56075:tid 56098] [client 64.64.108.17:52225] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaEJFMKBhrfI6KNv9Rhp5QAAABQ"]
[Fri Feb 27 11:01:41.992773 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.44:36477] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaEJFVQeueXZDUmoLokw_QAAAQ4"]
[Fri Feb 27 11:01:42.898019 2026] [:error] [pid 54103:tid 54172] [client 64.64.108.39:24169] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaEJFuvG4MPCmE0B2sAViwAAAME"]
[Fri Feb 27 11:01:43.781596 2026] [:error] [pid 54101:tid 54127] [client 64.64.108.21:31069] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaEJF1Y5qgRktcYTGFvQnAAAAdM"]
[Fri Feb 27 11:01:46.055136 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.20:32497] [client 64.64.108.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.20, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aaEJGlQeueXZDUmoLokxEgAAARU"]
[Fri Feb 27 11:01:52.845403 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.20:32497] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaEJIFQeueXZDUmoLokxaAAAAQM"]
[Fri Feb 27 11:01:55.241040 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.56:45807] [client 64.64.108.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.56, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaEJI1QeueXZDUmoLokxjwAAAQY"]
[Fri Feb 27 11:01:59.152209 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.56:45807] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEJJ1QeueXZDUmoLokxwwAAAQ8"]
[Fri Feb 27 11:02:00.079988 2026] [:error] [pid 49306:tid 49319] [client 64.64.108.34:29327] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaEJKPnSUDZue59Px9tMAwAAAUs"]
[Fri Feb 27 11:02:08.840295 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.53:31937] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aaEJMFQeueXZDUmoLokyRgAAAQg"]
[Fri Feb 27 11:02:11.639870 2026] [:error] [pid 54103:tid 54170] [client 64.64.108.26:60255] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaEJM-vG4MPCmE0B2sAWIQAAAMA"]
[Fri Feb 27 11:02:14.665299 2026] [:error] [pid 49306:tid 49319] [client 64.64.108.60:41431] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aaEJNvnSUDZue59Px9tMnAAAAUs"]
[Fri Feb 27 11:02:16.146143 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.46:28727] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaEJOPnSUDZue59Px9tMrgAAAUI"]
[Fri Feb 27 11:02:19.551792 2026] [:error] [pid 56075:tid 56081] [client 64.64.108.37:23167] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aaEJO8KBhrfI6KNv9RhrhwAAAAQ"]
[Fri Feb 27 11:02:20.594636 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.46:37319] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaEJPFQeueXZDUmoLokysAAAARM"]
[Fri Feb 27 11:02:21.773515 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.27:28867] [client 64.64.108.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.27, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aaEJPVQeueXZDUmoLokyvAAAAQ8"]
[Fri Feb 27 11:02:23.355728 2026] [:error] [pid 62998:tid 63014] [client 64.64.108.27:28867] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aaEJP1QeueXZDUmoLokyywAAAQw"]
[Fri Feb 27 11:02:28.254344 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.32:42711] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aaEJRPnSUDZue59Px9tNNQAAAU0"]
[Fri Feb 27 11:02:30.835551 2026] [:error] [pid 54101:tid 54111] [client 64.64.108.47:41457] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aaEJRlY5qgRktcYTGFvRlAAAAcM"]
[Fri Feb 27 11:02:32.951493 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.35:45123] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aaEJSFQeueXZDUmoLokzOQAAAQs"]
[Fri Feb 27 11:02:35.562856 2026] [:error] [pid 54102:tid 54144] [client 64.64.108.49:42845] [client 64.64.108.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.49, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aaEJS3i74D4fiYUm_GfzJAAAAIA"]
[Fri Feb 27 11:02:37.253813 2026] [:error] [pid 54102:tid 54148] [client 64.64.108.49:42845] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aaEJTXi74D4fiYUm_GfzLQAAAIQ"]
[Fri Feb 27 11:02:38.187253 2026] [:error] [pid 54102:tid 54166] [client 64.64.108.45:62325] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaEJTni74D4fiYUm_GfzMQAAAJY"]
[Fri Feb 27 11:02:44.652674 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.29:20755] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaEJVPnSUDZue59Px9tNtQAAAVc"]
[Fri Feb 27 11:02:49.088458 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.46:33795] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaEJWeTvb5AeyJCdY7BclQAAAE0"]
[Fri Feb 27 11:02:50.208314 2026] [:error] [pid 54101:tid 54125] [client 64.64.108.34:29369] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaEJWlY5qgRktcYTGFvR_gAAAdE"]
[Fri Feb 27 11:02:51.176781 2026] [:error] [pid 54102:tid 54153] [client 64.64.108.50:20081] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aaEJW3i74D4fiYUm_GfzfAAAAIk"]
[Fri Feb 27 11:02:52.177650 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.41:58071] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaEJXMKBhrfI6KNv9RhtJQAAAAg"]
[Fri Feb 27 11:02:55.653859 2026] [:error] [pid 54231:tid 54241] [client 64.64.108.22:35759] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aaEJX-Tvb5AeyJCdY7Bc0AAAAEc"]
[Fri Feb 27 11:02:58.065721 2026] [:error] [pid 56075:tid 56083] [client 64.64.108.50:57453] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaEJYsKBhrfI6KNv9RhtXwAAAAY"]
[Fri Feb 27 11:03:00.060682 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.49:44521] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaEJZPnSUDZue59Px9tOMgAAAU4"]
[Fri Feb 27 11:03:01.658866 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.36:61855] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aaEJZVQeueXZDUmoLok0EQAAARc"]
[Fri Feb 27 11:03:04.338255 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.19:64193] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaEJaMKBhrfI6KNv9RhtiQAAAAA"]
[Fri Feb 27 11:03:05.304202 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.48:35253] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aaEJaeTvb5AeyJCdY7BdJwAAAFQ"]
[Fri Feb 27 11:03:06.945940 2026] [:error] [pid 54101:tid 54131] [client 64.64.108.27:39191] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaEJalY5qgRktcYTGFvSXgAAAdc"]
[Fri Feb 27 11:03:09.445387 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.24:40983] [client 64.64.108.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.24, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aaEJbeTvb5AeyJCdY7BdTwAAAEs"]
[Fri Feb 27 11:03:10.453749 2026] [:error] [pid 54231:tid 54235] [client 64.64.108.24:40983] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aaEJbuTvb5AeyJCdY7BdWQAAAEE"]
[Fri Feb 27 11:03:11.478779 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.59:59467] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaEJb1QeueXZDUmoLok0pwAAAQA"]
[Fri Feb 27 11:03:16.440869 2026] [:error] [pid 56075:tid 56086] [client 64.64.108.28:30197] [client 64.64.108.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.28, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aaEJdMKBhrfI6KNv9Rht1QAAAAk"]
[Fri Feb 27 11:03:16.951406 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.28:30197] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaEJdMKBhrfI6KNv9Rht2QAAABA"]
[Fri Feb 27 11:03:17.969569 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.54:34037] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aaEJdcKBhrfI6KNv9Rht3QAAAAc"]
[Fri Feb 27 11:03:18.977887 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.58:38571] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaEJdlQeueXZDUmoLok1BAAAAQ0"]
[Fri Feb 27 11:03:22.442405 2026] [:error] [pid 49306:tid 49316] [client 64.64.108.51:48171] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aaEJevnSUDZue59Px9tPEgAAAUg"]
[Fri Feb 27 11:03:25.442930 2026] [:error] [pid 54231:tid 54244] [client 64.64.108.28:28147] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaEJfeTvb5AeyJCdY7BdwAAAAEo"]
[Fri Feb 27 11:03:28.833780 2026] [:error] [pid 56075:tid 56083] [client 64.64.108.42:46503] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaEJgMKBhrfI6KNv9RhuYgAAAAY"]
[Fri Feb 27 11:03:31.462325 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.49:54659] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaEJg1QeueXZDUmoLok1ogAAARg"]
[Fri Feb 27 11:03:36.540501 2026] [:error] [pid 54103:tid 54174] [client 64.64.108.52:31885] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaEJiOvG4MPCmE0B2sAYQwAAAMM"]
[Fri Feb 27 11:03:38.033686 2026] [:error] [pid 54101:tid 54109] [client 64.64.108.38:41977] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaEJilY5qgRktcYTGFvTZQAAAcE"]
[Fri Feb 27 11:03:38.953304 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.30:64951] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEJivnSUDZue59Px9tP8AAAAVc"]
[Fri Feb 27 11:03:40.145350 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.20:57159] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaEJjFQeueXZDUmoLok2DQAAARM"]
[Fri Feb 27 11:03:41.784613 2026] [:error] [pid 54231:tid 54234] [client 64.64.108.47:40197] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaEJjeTvb5AeyJCdY7BeLwAAAEA"]
[Fri Feb 27 11:03:43.251545 2026] [:error] [pid 56075:tid 56099] [client 64.64.108.66:62035] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaEJj8KBhrfI6KNv9Rhu1gAAABU"]
[Fri Feb 27 11:03:45.240094 2026] [:error] [pid 56075:tid 56081] [client 64.64.108.50:22257] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaEJkcKBhrfI6KNv9RhvDgAAAAQ"]
[Fri Feb 27 11:03:47.653354 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.36:34911] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaEJk_nSUDZue59Px9tQOQAAAUI"]
[Fri Feb 27 11:03:51.761657 2026] [:error] [pid 54231:tid 54243] [client 64.64.108.60:53843] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaEJl-Tvb5AeyJCdY7BeeQAAAEk"]
[Fri Feb 27 11:03:53.960782 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.65:55499] [client 64.64.108.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaEJmeTvb5AeyJCdY7BemQAAAFQ"]
[Fri Feb 27 11:03:59.953455 2026] [:error] [pid 54103:tid 54175] [client 64.64.108.54:43911] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aaEJn-vG4MPCmE0B2sAYzwAAAMQ"]
[Fri Feb 27 11:04:05.146227 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.16:56403] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaEJpcKBhrfI6KNv9RhwDAAAABE"]
[Fri Feb 27 11:04:08.064559 2026] [:error] [pid 49306:tid 49329] [client 64.64.108.17:35945] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aaEJqPnSUDZue59Px9tQ0QAAAVU"]
[Fri Feb 27 11:04:09.092551 2026] [:error] [pid 56075:tid 56091] [client 64.64.108.30:41995] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaEJqcKBhrfI6KNv9RhwNgAAAA0"]
[Fri Feb 27 11:04:11.554719 2026] [:error] [pid 54101:tid 54117] [client 64.64.108.50:30691] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aaEJq1Y5qgRktcYTGFvUSwAAAck"]
[Fri Feb 27 11:04:12.488071 2026] [:error] [pid 54102:tid 54164] [client 64.64.108.41:49869] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaEJrHi74D4fiYUm_Gf2hQAAAJQ"]
[Fri Feb 27 11:04:14.948671 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.37:32847] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aaEJrlQeueXZDUmoLok4VQAAAQk"]
[Fri Feb 27 11:04:17.434354 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.19:29993] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaEJscKBhrfI6KNv9RhwnQAAAAw"]
[Fri Feb 27 11:04:18.956296 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.16:63035] [client 64.64.108.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.16, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaEJslQeueXZDUmoLok4gAAAAQA"]
[Fri Feb 27 11:04:20.057310 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.16:63035] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaEJtFQeueXZDUmoLok4jQAAAQg"]
[Fri Feb 27 11:04:20.997507 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.16:37179] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaEJtOTvb5AeyJCdY7BfhgAAAFQ"]
[Fri Feb 27 11:04:23.443471 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.43:34863] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aaEJt_nSUDZue59Px9tRjAAAAVM"]
[Fri Feb 27 11:04:24.935750 2026] [:error] [pid 54103:tid 54184] [client 64.64.108.28:40711] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaEJuOvG4MPCmE0B2sAZjgAAAM0"]
[Fri Feb 27 11:04:30.661548 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.52:46051] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaEJvlQeueXZDUmoLok5JgAAARQ"]
[Fri Feb 27 11:04:36.935980 2026] [:error] [pid 54231:tid 54253] [client 64.64.108.50:39133] [client 64.64.108.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aaEJxOTvb5AeyJCdY7BgKQAAAFM"]
[Fri Feb 27 11:04:37.879612 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.39:49283] [client 64.64.108.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.39, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aaEJxfnSUDZue59Px9tSEQAAAVM"]
[Fri Feb 27 11:04:38.339312 2026] [:error] [pid 49306:tid 49313] [client 64.64.108.39:49283] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aaEJxvnSUDZue59Px9tSFgAAAUU"]
[Fri Feb 27 11:04:45.740239 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.62:39565] [client 64.64.108.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaEJzVQeueXZDUmoLok6KAAAAQg"]
[Fri Feb 27 11:04:47.247233 2026] [:error] [pid 54102:tid 54164] [client 64.64.108.44:50929] [client 64.64.108.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.44, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aaEJz3i74D4fiYUm_Gf4CAAAAJQ"]
[Fri Feb 27 11:04:51.240658 2026] [:error] [pid 54102:tid 54165] [client 64.64.108.44:50929] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aaEJ03i74D4fiYUm_Gf4OwAAAJU"]
[Fri Feb 27 11:04:52.767515 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.38:30849] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aaEJ1OTvb5AeyJCdY7BgpQAAAEs"]
[Fri Feb 27 11:04:58.059999 2026] [:error] [pid 54231:tid 54257] [client 64.64.108.63:52825] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aaEJ2uTvb5AeyJCdY7Bg5wAAAFc"]
[Fri Feb 27 11:04:59.450308 2026] [:error] [pid 49306:tid 49332] [client 64.64.108.25:54971] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaEJ2_nSUDZue59Px9tS8AAAAVg"]
[Fri Feb 27 11:05:00.947032 2026] [:error] [pid 54103:tid 54185] [client 64.64.108.60:33523] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aaEJ3OvG4MPCmE0B2sAbQQAAAM4"]
[Fri Feb 27 11:05:04.253700 2026] [:error] [pid 54103:tid 54173] [client 64.64.108.40:63425] [client 64.64.108.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.40, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aaEJ4OvG4MPCmE0B2sAbdwAAAMI"]
[Fri Feb 27 11:05:04.730058 2026] [:error] [pid 54103:tid 54194] [client 64.64.108.40:63425] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaEJ4OvG4MPCmE0B2sAbfAAAANc"]
[Fri Feb 27 11:05:08.855438 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.17:63523] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaEJ5FQeueXZDUmoLok7YQAAAQ0"]
[Fri Feb 27 11:05:09.782819 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.44:35915] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aaEJ5fnSUDZue59Px9tTOQAAAUo"]
[Fri Feb 27 11:05:13.832602 2026] [:error] [pid 54102:tid 54158] [client 64.64.108.48:52923] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaEJ6Xi74D4fiYUm_Gf5FgAAAI4"]
[Fri Feb 27 11:05:16.353642 2026] [:error] [pid 54101:tid 54126] [client 64.64.108.16:61769] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aaEJ7FY5qgRktcYTGFvWPwAAAdI"]
[Fri Feb 27 11:05:20.852157 2026] [:error] [pid 54102:tid 54157] [client 64.64.108.63:35987] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aaEJ8Hi74D4fiYUm_Gf5agAAAI0"]
[Fri Feb 27 11:05:24.145199 2026] [:error] [pid 56075:tid 56080] [client 64.64.108.47:47675] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aaEJ9MKBhrfI6KNv9RhzYwAAAAM"]
[Fri Feb 27 11:05:29.253880 2026] [:error] [pid 54103:tid 54183] [client 64.64.108.27:44897] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aaEJ-evG4MPCmE0B2sAcfwAAAMw"]
[Fri Feb 27 11:05:32.430933 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.35:36597] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaEJ_FQeueXZDUmoLok9KQAAARc"]
[Fri Feb 27 11:05:37.359449 2026] [:error] [pid 56075:tid 56091] [client 64.64.108.35:50099] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aaEKAcKBhrfI6KNv9Rhz4wAAAA0"]
[Fri Feb 27 11:05:44.229167 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.55:36227] [client 64.64.108.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.55, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aaEKCFQeueXZDUmoLok-DgAAAQ0"]
[Fri Feb 27 11:05:44.749169 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.55:36227] [client 64.64.108.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.55, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaEKCFQeueXZDUmoLok-GwAAAQE"]
[Fri Feb 27 11:05:45.439326 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.55:36227] [client 64.64.108.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aaEKCVQeueXZDUmoLok-JgAAAQ0"]
[Fri Feb 27 11:05:50.637888 2026] [:error] [pid 49306:tid 49316] [client 64.64.108.43:54495] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaEKDvnSUDZue59Px9tVAQAAAUg"]
[Fri Feb 27 11:05:52.652197 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.61:63787] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaEKEHi74D4fiYUm_Gf6rgAAAIE"]
[Fri Feb 27 11:05:57.138756 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.40:59281] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aaEKFVQeueXZDUmoLok-wQAAAQI"]
[Fri Feb 27 11:06:00.237107 2026] [:error] [pid 54102:tid 54153] [client 64.64.108.46:25659] [client 64.64.108.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.46, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aaEKGHi74D4fiYUm_Gf7GgAAAIk"]
[Fri Feb 27 11:06:02.433771 2026] [:error] [pid 54102:tid 54163] [client 64.64.108.46:25659] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aaEKGni74D4fiYUm_Gf7LQAAAJM"]
[Fri Feb 27 11:06:03.931900 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.62:63057] [client 64.64.108.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aaEKG1QeueXZDUmoLok_EAAAAQQ"]
[Fri Feb 27 11:06:04.890778 2026] [:error] [pid 56075:tid 56080] [client 64.64.108.66:64321] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaEKHMKBhrfI6KNv9Rh1LAAAAAM"]
[Fri Feb 27 11:06:06.645200 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.27:63015] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaEKHsKBhrfI6KNv9Rh1QAAAAAg"]
[Fri Feb 27 11:06:10.596404 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.44:62347] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aaEKIvnSUDZue59Px9tWTAAAAUE"]
[Fri Feb 27 11:06:18.862549 2026] [:error] [pid 54101:tid 54113] [client 64.64.108.22:28681] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aaEKKlY5qgRktcYTGFvZKgAAAcU"]
[Fri Feb 27 11:06:25.037743 2026] [:error] [pid 54102:tid 54168] [client 64.64.108.24:28047] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aaEKMXi74D4fiYUm_Gf8EQAAAJc"]
[Fri Feb 27 11:06:29.132872 2026] [:error] [pid 54103:tid 54177] [client 64.64.108.55:41097] [client 64.64.108.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaEKNevG4MPCmE0B2sAe6AAAAMY"]
[Fri Feb 27 11:06:34.238224 2026] [:error] [pid 54101:tid 54112] [client 64.64.108.59:34965] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaEKOlY5qgRktcYTGFvZowAAAcQ"]
[Fri Feb 27 11:06:41.153082 2026] [:error] [pid 54103:tid 54179] [client 64.64.108.42:44975] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aaEKQevG4MPCmE0B2sAfaQAAAMg"]
[Fri Feb 27 11:06:42.188726 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.39:54879] [client 64.64.108.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/themes.php"] [unique_id "aaEKQlQeueXZDUmoLolBWAAAARA"]
[Fri Feb 27 11:07:01.346639 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.16:47923] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaEKVfnSUDZue59Px9tZKgAAAUk"]
[Fri Feb 27 11:07:08.152162 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.26:45633] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aaEKXFQeueXZDUmoLolCvgAAARg"]
[Fri Feb 27 11:07:15.940597 2026] [:error] [pid 52073:tid 52097] [client 64.64.108.53:41935] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aaEKY4a650YPyxXVeRZQkwAAAZU"]
[Fri Feb 27 11:07:17.072244 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.20:20621] [client 64.64.108.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aaEKZcKBhrfI6KNv9Rh4cwAAAAo"]
[Fri Feb 27 11:07:19.145441 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.24:28507] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aaEKZ1QeueXZDUmoLolDXwAAAQg"]
[Fri Feb 27 11:07:20.837767 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.25:62355] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aaEKaPnSUDZue59Px9taCQAAAUk"]
[Fri Feb 27 11:07:29.743967 2026] [:error] [pid 62998:tid 63024] [client 64.64.108.38:24173] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aaEKcVQeueXZDUmoLolEZQAAARY"]
[Fri Feb 27 11:07:30.909211 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.41:60639] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aaEKcsKBhrfI6KNv9Rh5GwAAAAU"]
[Fri Feb 27 11:07:32.434570 2026] [:error] [pid 54103:tid 54194] [client 64.64.108.28:56037] [client 64.64.108.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aaEKdOvG4MPCmE0B2sAg9QAAANc"]
[Fri Feb 27 11:07:34.550989 2026] [:error] [pid 54231:tid 54253] [client 64.64.108.52:39311] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aaEKduTvb5AeyJCdY7Bm2wAAAFM"]
[Fri Feb 27 11:07:35.597506 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.49:39973] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aaEKd1QeueXZDUmoLolE7AAAAQo"]
[Fri Feb 27 11:07:37.747349 2026] [:error] [pid 54231:tid 54241] [client 64.64.108.24:34503] [client 64.64.108.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.24, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/images/wp-login.php"] [unique_id "aaEKeeTvb5AeyJCdY7Bm8gAAAEc"]
[Fri Feb 27 11:07:40.664376 2026] [:error] [pid 54231:tid 54236] [client 64.64.108.24:34503] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aaEKfOTvb5AeyJCdY7BnGwAAAEI"]
[Fri Feb 27 11:07:44.247954 2026] [:error] [pid 56075:tid 56078] [client 64.64.108.32:39527] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aaEKgMKBhrfI6KNv9Rh5rAAAAAE"]
[Fri Feb 27 11:07:45.293648 2026] [:error] [pid 54101:tid 54123] [client 64.64.108.57:35983] [client 64.64.108.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aaEKgVY5qgRktcYTGFvcOAAAAc8"]
[Fri Feb 27 11:07:46.584500 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.65:60247] [client 64.64.108.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.65, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaEKglQeueXZDUmoLolGLQAAARQ"]
[Fri Feb 27 11:07:47.056195 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.65:60247] [client 64.64.108.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aaEKg1QeueXZDUmoLolGNgAAAQo"]
[Fri Feb 27 11:07:50.040133 2026] [:error] [pid 52073:tid 52092] [client 64.64.108.38:65163] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aaEKhoa650YPyxXVeRZR3AAAAZA"]
[Fri Feb 27 11:08:14.458547 2026] [:error] [pid 54231:tid 54255] [client 64.64.108.66:25011] [client 64.64.108.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.66, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaEKnuTvb5AeyJCdY7BotgAAAFU"]
[Fri Feb 27 11:08:17.081103 2026] [:error] [pid 54231:tid 54254] [client 64.64.108.66:25011] [client 64.64.108.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.66, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aaEKoeTvb5AeyJCdY7Bo0wAAAFQ"]
[Fri Feb 27 11:08:19.257044 2026] [:error] [pid 54231:tid 54238] [client 64.64.108.66:25011] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aaEKo-Tvb5AeyJCdY7Bo8AAAAEQ"]
[Fri Feb 27 11:08:20.383981 2026] [:error] [pid 49306:tid 49318] [client 64.64.108.49:55821] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aaEKpPnSUDZue59Px9tdDgAAAUo"]
[Fri Feb 27 11:08:21.577529 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.25:36473] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaEKpVQeueXZDUmoLolI2wAAAQQ"]
[Fri Feb 27 11:08:29.060797 2026] [:error] [pid 49306:tid 49308] [client 64.64.108.59:58871] [client 64.64.108.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.59, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aaEKrfnSUDZue59Px9tdnAAAAUA"]
[Fri Feb 27 11:08:29.576825 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.59:58871] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaEKrfnSUDZue59Px9tdoQAAAVA"]
[Fri Feb 27 11:08:31.855468 2026] [:error] [pid 54103:tid 54178] [client 64.64.108.59:56701] [client 64.64.108.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.59, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaEKr-vG4MPCmE0B2sAjpAAAAMc"]
[Fri Feb 27 11:08:41.071788 2026] [:error] [pid 54103:tid 54188] [client 64.64.108.59:56701] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aaEKuevG4MPCmE0B2sAkLAAAANE"]
[Fri Feb 27 11:08:49.258553 2026] [:error] [pid 54102:tid 54163] [client 64.64.108.56:20613] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaEKwXi74D4fiYUm_GcBvAAAAJM"]
[Fri Feb 27 11:08:53.559153 2026] [:error] [pid 52073:tid 52080] [client 64.64.108.45:27179] [client 64.64.108.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/moon.php"] [unique_id "aaEKxYa650YPyxXVeRZU3QAAAYQ"]
[Fri Feb 27 11:09:07.347317 2026] [:error] [pid 54102:tid 54148] [client 64.64.108.43:65015] [client 64.64.108.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.43, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaEK03i74D4fiYUm_GcCbAAAAIQ"]
[Fri Feb 27 11:11:16.031347 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.24:49813] [client 64.64.108.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/modules/mod_footer/tmpl/"] [unique_id "aaELVMKBhrfI6KNv9RiCMwAAAAc"]
[Fri Feb 27 11:11:26.746258 2026] [:error] [pid 49306:tid 49315] [client 64.64.108.65:41943] [client 64.64.108.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ludes/"] [unique_id "aaELXvnSUDZue59Px9toAQAAAUc"]
[Fri Feb 27 11:12:22.347322 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.25:30611] [client 64.64.108.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/certificates/"] [unique_id "aaELllY5qgRktcYTGFvngwAAAdY"]
[Fri Feb 27 11:12:34.653646 2026] [authz_core:error] [pid 54102:tid 54162] [client 64.64.108.63:34759] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/
[Fri Feb 27 11:12:44.560875 2026] [:error] [pid 54102:tid 54146] [client 64.64.108.63:34759] [client 64.64.108.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docs/"] [unique_id "aaELrHi74D4fiYUm_GcLygAAAII"]
[Fri Feb 27 11:40:49.925065 2026] [:error] [pid 52073:tid 52095] [client 43.153.54.138:49474] [client 43.153.54.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaESQYa650YPyxXVeRacawAAAZM"]
[Fri Feb 27 12:29:53.406449 2026] [:error] [pid 49306:tid 49323] [client 91.122.53.173:37648] [client 91.122.53.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aaEdwfnSUDZue59Px9vZyQAAAU8"]
[Fri Feb 27 12:31:23.064722 2026] [:error] [pid 49306:tid 49330] [client 151.0.80.150:9228] [client 151.0.80.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 151.0.80.150, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaEeG_nSUDZue59Px9vcQwAAAVY"]
[Fri Feb 27 14:02:45.368198 2026] [:error] [pid 52073:tid 52084] [client 20.194.29.45:5703] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Cookie/cloud.php"] [unique_id "aaEzhYa650YPyxXVeRYFgAAAAYg"]
[Fri Feb 27 14:02:46.252136 2026] [:error] [pid 49306:tid 49329] [client 20.194.29.45:8172] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/functions.php"] [unique_id "aaEzhvnSUDZue59Px9sjDAAAAVU"]
[Fri Feb 27 14:02:47.271535 2026] [:error] [pid 56075:tid 56100] [client 20.194.29.45:15604] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/flower.php"] [unique_id "aaEzh8KBhrfI6KNv9Rj0SgAAABY"]
[Fri Feb 27 14:02:48.138156 2026] [:error] [pid 56075:tid 56078] [client 20.194.29.45:15605] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/block-bindings.php"] [unique_id "aaEziMKBhrfI6KNv9Rj0UwAAAAE"]
[Fri Feb 27 14:02:48.717211 2026] [:error] [pid 49306:tid 49331] [client 20.194.29.45:4527] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/root.php"] [unique_id "aaEziPnSUDZue59Px9sjGQAAAVc"]
[Fri Feb 27 14:02:49.278214 2026] [proxy_fcgi:error] [pid 62998:tid 63021] [client 20.194.29.45:15566] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 14:02:49.416683 2026] [:error] [pid 62998:tid 63014] [client 20.194.29.45:15566] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "aaEziVQeueXZDUmoLonMMgAAAQw"]
[Fri Feb 27 14:02:49.988635 2026] [:error] [pid 54103:tid 54182] [client 20.194.29.45:8130] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaEzievG4MPCmE0B2sBg6gAAAMs"]
[Fri Feb 27 14:02:50.537732 2026] [:error] [pid 54231:tid 54248] [client 20.194.29.45:4517] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaEziuTvb5AeyJCdY7C0XgAAAE4"]
[Fri Feb 27 14:02:51.108244 2026] [:error] [pid 54231:tid 54239] [client 20.194.29.45:4482] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaEzi-Tvb5AeyJCdY7C0ZAAAAEU"]
[Fri Feb 27 14:41:47.054937 2026] [:error] [pid 62998:tid 63024] [client 43.157.172.39:36956] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaE8q1QeueXZDUmoLonWjwAAARY"]
[Fri Feb 27 16:45:07.584900 2026] [:error] [pid 54102:tid 54160] [client 43.138.68.113:42282] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaFZk3i74D4fiYUm_GdKAAAAAJA"]
[Fri Feb 27 17:27:54.330590 2026] [:error] [pid 56075:tid 56088] [client 20.104.81.240:32484] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aaFjmsKBhrfI6KNv9Rg_vAAAAAs"]
[Fri Feb 27 17:27:55.162865 2026] [:error] [pid 52073:tid 52093] [client 20.104.81.240:32473] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aaFjm4a650YPyxXVeRaYMwAAAZE"]
[Fri Feb 27 17:27:56.004576 2026] [:error] [pid 52073:tid 52091] [client 20.104.81.240:32461] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aaFjnIa650YPyxXVeRaYOAAAAY8"]
[Fri Feb 27 17:27:56.865104 2026] [:error] [pid 54231:tid 54256] [client 20.104.81.240:32485] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aaFjnOTvb5AeyJCdY7DZtwAAAFY"]
[Fri Feb 27 19:18:35.265655 2026] [:error] [pid 52073:tid 52096] [client 20.104.81.240:61439] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaF9i4a650YPyxXVeRbwLAAAAZQ"]
[Fri Feb 27 19:18:36.125781 2026] [:error] [pid 49306:tid 49332] [client 20.104.81.240:61413] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaF9jPnSUDZue59Px9vWtgAAAVg"]
[Fri Feb 27 19:18:36.974494 2026] [:error] [pid 49306:tid 49325] [client 20.104.81.240:61428] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaF9jPnSUDZue59Px9vWvAAAAVE"]
[Fri Feb 27 19:18:37.819835 2026] [:error] [pid 52073:tid 52098] [client 20.104.81.240:61415] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaF9jYa650YPyxXVeRbwMAAAAZY"]
[Fri Feb 27 19:37:54.691019 2026] [:error] [pid 56075:tid 56088] [client 43.155.129.131:49692] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaGCEsKBhrfI6KNv9Rhu3wAAAAs"]
[Fri Feb 27 20:02:55.046132 2026] [:error] [pid 56075:tid 56092] [client 40.115.138.121:3983] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaGH78KBhrfI6KNv9Rh9fQAAAA4"]
[Fri Feb 27 20:02:55.668342 2026] [:error] [pid 52073:tid 52099] [client 40.115.138.121:5134] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaGH74a650YPyxXVeRYVoAAAAZc"]
[Fri Feb 27 20:02:56.293333 2026] [:error] [pid 52073:tid 52098] [client 40.115.138.121:5143] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaGH8Ia650YPyxXVeRYVpwAAAZY"]
[Fri Feb 27 20:02:56.771373 2026] [:error] [pid 52073:tid 52091] [client 40.115.138.121:5173] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaGH8Ia650YPyxXVeRYVrAAAAY8"]
[Fri Feb 27 20:04:26.875528 2026] [:error] [pid 49306:tid 49316] [client 4.204.192.31:43268] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGISvnSUDZue59Px9vxewAAAUg"]
[Fri Feb 27 20:04:28.785309 2026] [:error] [pid 54231:tid 54234] [client 4.204.192.31:47632] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGITOTvb5AeyJCdY7D6yAAAAEA"]
[Fri Feb 27 20:04:29.387577 2026] [:error] [pid 56075:tid 56092] [client 4.204.192.31:42427] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGITcKBhrfI6KNv9RiBGgAAAA4"]
[Fri Feb 27 20:04:30.814858 2026] [:error] [pid 56075:tid 56088] [client 4.204.192.31:50510] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGITsKBhrfI6KNv9RiBJQAAAAs"]
[Fri Feb 27 20:36:16.708605 2026] [:error] [pid 54231:tid 54236] [client 42.118.224.94:8583] [client 42.118.224.94] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt||measureyourcause.com.au|F|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?zfkkhqzi=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&wdmaovkn=UNION+SELECT+ALL+FROM+information_schema+AND+%22+or+SLEEP%285%29+or+%22&lshxntls=..%2F..%2Fetc%2Fpasswd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaGPwOTvb5AeyJCdY7AENQAAAEI"]
[Fri Feb 27 20:36:18.498179 2026] [:error] [pid 54103:tid 54186] [client 42.118.224.94:8595] [client 42.118.224.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack||measureyourcause.com.au|F|2"] [data "Matched Data: <script found within REQUEST_URI: /?nmrkgkai=<script>alert(\\x22xss\\x22);</script>"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaGPwuvG4MPCmE0B2sCcMAAAAM8"]
[Fri Feb 27 21:28:09.195263 2026] [:error] [pid 52073:tid 52082] [client 45.131.195.90:49409] [client 45.131.195.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaGb6Ya650YPyxXVeRZTXwAAAYY"]
[Fri Feb 27 21:28:10.417920 2026] [:error] [pid 54231:tid 54258] [client 45.131.195.82:55835] [client 45.131.195.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaGb6uTvb5AeyJCdY7AP8AAAAFg"]
[Fri Feb 27 21:28:12.481310 2026] [:error] [pid 62998:tid 63021] [client 45.131.195.74:54491] [client 45.131.195.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaGb7FQeueXZDUmoLolJAwAAARM"]
[Fri Feb 27 21:28:13.753278 2026] [:error] [pid 62998:tid 63021] [client 45.131.195.90:21839] [client 45.131.195.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaGb7VQeueXZDUmoLolJIAAAARM"]
[Fri Feb 27 21:28:15.801563 2026] [:error] [pid 54102:tid 54160] [client 45.131.195.72:22785] [client 45.131.195.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaGb73i74D4fiYUm_GduawAAAJA"]
[Fri Feb 27 21:28:16.551913 2026] [:error] [pid 49306:tid 49309] [client 45.131.195.70:33949] [client 45.131.195.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaGb8PnSUDZue59Px9sWqAAAAUE"]
[Fri Feb 27 21:28:16.998006 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.69:52243] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaGb8Ia650YPyxXVeRZTpQAAAYE"]
[Fri Feb 27 21:28:17.464959 2026] [:error] [pid 52073:tid 52086] [client 45.131.195.81:61849] [client 45.131.195.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaGb8Ya650YPyxXVeRZTrQAAAYo"]
[Fri Feb 27 21:28:17.990742 2026] [:error] [pid 49306:tid 49326] [client 45.131.195.96:48611] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaGb8fnSUDZue59Px9sWsgAAAVI"]
[Fri Feb 27 21:28:18.466410 2026] [:error] [pid 49306:tid 49329] [client 45.131.195.82:23973] [client 45.131.195.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaGb8vnSUDZue59Px9sWugAAAVU"]
[Fri Feb 27 21:28:19.260033 2026] [:error] [pid 54101:tid 54108] [client 45.131.195.101:29943] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaGb81Y5qgRktcYTGFtAMwAAAcA"]
[Fri Feb 27 21:28:20.301847 2026] [:error] [pid 49306:tid 49310] [client 45.131.195.249:29275] [client 45.131.195.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aaGb9PnSUDZue59Px9sW8AAAAUI"]
[Fri Feb 27 21:28:22.714754 2026] [:error] [pid 49306:tid 49309] [client 45.131.195.58:47185] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaGb9vnSUDZue59Px9sXOwAAAUE"]
[Fri Feb 27 21:28:23.420327 2026] [:error] [pid 52073:tid 52091] [client 45.131.195.75:47559] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaGb94a650YPyxXVeRZT4wAAAY8"]
[Fri Feb 27 21:28:24.173604 2026] [:error] [pid 56075:tid 56095] [client 45.131.195.71:44447] [client 45.131.195.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaGb-MKBhrfI6KNv9RjOyAAAABE"]
[Fri Feb 27 21:28:26.149340 2026] [:error] [pid 62998:tid 63001] [client 45.131.195.100:53525] [client 45.131.195.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaGb-lQeueXZDUmoLolJpgAAAQA"]
[Fri Feb 27 21:28:26.897623 2026] [:error] [pid 52073:tid 52080] [client 45.131.195.249:24747] [client 45.131.195.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaGb-oa650YPyxXVeRZUJAAAAYQ"]
[Fri Feb 27 21:28:27.854111 2026] [:error] [pid 52073:tid 52084] [client 45.131.195.111:38369] [client 45.131.195.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaGb-4a650YPyxXVeRZURgAAAYg"]
[Fri Feb 27 21:28:28.568477 2026] [:error] [pid 62998:tid 63025] [client 45.131.195.105:26475] [client 45.131.195.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaGb_FQeueXZDUmoLolJsgAAARc"]
[Fri Feb 27 21:28:30.052185 2026] [:error] [pid 52073:tid 52090] [client 45.131.195.96:57321] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaGb_oa650YPyxXVeRZUcwAAAY4"]
[Fri Feb 27 21:28:30.981517 2026] [:error] [pid 56075:tid 56097] [client 45.131.195.60:65481] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaGb_sKBhrfI6KNv9RjPYAAAABM"]
[Fri Feb 27 21:28:31.698850 2026] [:error] [pid 56075:tid 56090] [client 45.131.195.100:62657] [client 45.131.195.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaGb_8KBhrfI6KNv9RjPcwAAAAw"]
[Fri Feb 27 21:28:34.255662 2026] [:error] [pid 52073:tid 52090] [client 45.131.195.101:21309] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaGcAoa650YPyxXVeRZUzgAAAY4"]
[Fri Feb 27 21:28:34.776801 2026] [:error] [pid 52073:tid 52078] [client 45.131.195.74:41495] [client 45.131.195.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGcAoa650YPyxXVeRZU6AAAAYI"]
[Fri Feb 27 21:28:36.092424 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.114:60447] [client 45.131.195.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaGcBIa650YPyxXVeRZVHgAAAYE"]
[Fri Feb 27 21:28:36.608432 2026] [:error] [pid 54101:tid 54124] [client 45.131.195.86:46451] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaGcBFY5qgRktcYTGFtARwAAAdA"]
[Fri Feb 27 21:28:37.126756 2026] [:error] [pid 62998:tid 63025] [client 45.131.195.63:30995] [client 45.131.195.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaGcBVQeueXZDUmoLolJ6wAAARc"]
[Fri Feb 27 21:28:41.108683 2026] [:error] [pid 54103:tid 54193] [client 45.131.195.86:59363] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaGcCevG4MPCmE0B2sCl2gAAANY"]
[Fri Feb 27 21:28:42.346760 2026] [:error] [pid 54231:tid 54235] [client 45.131.195.248:50227] [client 45.131.195.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.248, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaGcCuTvb5AeyJCdY7AQ_gAAAEE"]
[Fri Feb 27 21:28:45.420452 2026] [:error] [pid 54231:tid 54249] [client 45.131.195.248:50227] [client 45.131.195.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaGcDeTvb5AeyJCdY7ARHwAAAE8"]
[Fri Feb 27 21:28:46.394466 2026] [:error] [pid 54103:tid 54184] [client 45.131.195.53:28645] [client 45.131.195.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.53, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaGcDuvG4MPCmE0B2sCl4gAAAM0"]
[Fri Feb 27 21:28:46.923780 2026] [:error] [pid 54103:tid 54173] [client 45.131.195.53:28645] [client 45.131.195.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaGcDuvG4MPCmE0B2sCl5QAAAMI"]
[Fri Feb 27 21:28:49.529788 2026] [:error] [pid 49306:tid 49308] [client 45.131.195.66:23495] [client 45.131.195.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaGcEfnSUDZue59Px9sYfwAAAUA"]
[Fri Feb 27 21:28:52.220718 2026] [:error] [pid 62998:tid 63016] [client 45.131.195.80:28533] [client 45.131.195.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaGcFFQeueXZDUmoLolKmgAAAQ4"]
[Fri Feb 27 21:28:53.333336 2026] [:error] [pid 62998:tid 63023] [client 45.131.195.86:46585] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaGcFVQeueXZDUmoLolKsgAAARU"]
[Fri Feb 27 21:28:54.592043 2026] [:error] [pid 49306:tid 49308] [client 45.131.195.105:56267] [client 45.131.195.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.105, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaGcFvnSUDZue59Px9sYvAAAAUA"]
[Fri Feb 27 21:28:54.854342 2026] [:error] [pid 49306:tid 49330] [client 45.131.195.105:56267] [client 45.131.195.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaGcFvnSUDZue59Px9sYvwAAAVY"]
[Fri Feb 27 21:28:59.724670 2026] [:error] [pid 52073:tid 52097] [client 45.131.195.101:23001] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaGcG4a650YPyxXVeRZWKQAAAZU"]
[Fri Feb 27 21:29:01.113595 2026] [:error] [pid 54103:tid 54175] [client 45.131.195.67:48591] [client 45.131.195.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.67, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaGcHevG4MPCmE0B2sCmHwAAAMQ"]
[Fri Feb 27 21:29:02.347521 2026] [:error] [pid 54103:tid 54182] [client 45.131.195.67:48591] [client 45.131.195.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaGcHuvG4MPCmE0B2sCmKwAAAMs"]
[Fri Feb 27 21:29:03.115939 2026] [:error] [pid 49306:tid 49312] [client 45.131.195.78:21317] [client 45.131.195.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaGcH_nSUDZue59Px9sZRQAAAUQ"]
[Fri Feb 27 21:29:04.116945 2026] [:error] [pid 49306:tid 49312] [client 45.131.195.69:52277] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaGcIPnSUDZue59Px9sZUAAAAUQ"]
[Fri Feb 27 21:29:05.382705 2026] [:error] [pid 49306:tid 49310] [client 45.131.195.67:33531] [client 45.131.195.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaGcIfnSUDZue59Px9sZXQAAAUI"]
[Fri Feb 27 21:29:05.875294 2026] [:error] [pid 62998:tid 63019] [client 45.131.195.111:57509] [client 45.131.195.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaGcIVQeueXZDUmoLolLPwAAARE"]
[Fri Feb 27 21:29:07.698438 2026] [:error] [pid 49306:tid 49323] [client 45.131.195.84:50927] [client 45.131.195.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaGcI_nSUDZue59Px9sZggAAAU8"]
[Fri Feb 27 21:29:08.451726 2026] [:error] [pid 54102:tid 54158] [client 45.131.195.72:44719] [client 45.131.195.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaGcJHi74D4fiYUm_GdvCAAAAI4"]
[Fri Feb 27 21:29:09.700318 2026] [:error] [pid 62998:tid 63025] [client 45.131.195.63:55553] [client 45.131.195.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaGcJVQeueXZDUmoLolLeQAAARc"]
[Fri Feb 27 21:29:10.954310 2026] [:error] [pid 62998:tid 63008] [client 45.131.195.86:33807] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaGcJlQeueXZDUmoLolLjgAAAQY"]
[Fri Feb 27 21:29:12.276600 2026] [:error] [pid 54103:tid 54184] [client 45.131.195.63:41695] [client 45.131.195.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaGcKOvG4MPCmE0B2sCmbAAAAM0"]
[Fri Feb 27 21:29:13.546985 2026] [:error] [pid 56075:tid 56100] [client 45.131.195.104:56467] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaGcKcKBhrfI6KNv9RjRDgAAABY"]
[Fri Feb 27 21:29:15.953658 2026] [:error] [pid 54102:tid 54166] [client 45.131.195.75:45159] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaGcK3i74D4fiYUm_GdvJQAAAJY"]
[Fri Feb 27 21:29:16.435466 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.99:48135] [client 45.131.195.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaGcLIa650YPyxXVeRZWwAAAAYE"]
[Fri Feb 27 21:29:16.915946 2026] [:error] [pid 52073:tid 52099] [client 45.131.195.249:47531] [client 45.131.195.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaGcLIa650YPyxXVeRZW1wAAAZc"]
[Fri Feb 27 21:29:17.438352 2026] [:error] [pid 52073:tid 52097] [client 45.131.195.52:33551] [client 45.131.195.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaGcLYa650YPyxXVeRZW6QAAAZU"]
[Fri Feb 27 21:29:18.173091 2026] [:error] [pid 54101:tid 54126] [client 45.131.195.57:47367] [client 45.131.195.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaGcLlY5qgRktcYTGFtA9gAAAdI"]
[Fri Feb 27 21:29:18.736364 2026] [:error] [pid 54101:tid 54111] [client 45.131.195.101:40003] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaGcLlY5qgRktcYTGFtA_gAAAcM"]
[Fri Feb 27 21:29:19.757846 2026] [:error] [pid 52073:tid 52089] [client 45.131.195.76:42755] [client 45.131.195.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaGcL4a650YPyxXVeRZXJgAAAY0"]
[Fri Feb 27 21:29:20.259171 2026] [:error] [pid 54102:tid 54159] [client 45.131.195.101:29825] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaGcMHi74D4fiYUm_GdvPwAAAI8"]
[Fri Feb 27 21:29:20.775233 2026] [:error] [pid 54103:tid 54195] [client 45.131.195.101:63407] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaGcMOvG4MPCmE0B2sCmzgAAANg"]
[Fri Feb 27 21:29:21.247176 2026] [:error] [pid 62998:tid 63016] [client 45.131.195.86:61221] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaGcMVQeueXZDUmoLolL3QAAAQ4"]
[Fri Feb 27 21:29:22.069454 2026] [:error] [pid 54102:tid 54164] [client 45.131.195.69:51329] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaGcMni74D4fiYUm_GdvXAAAAJQ"]
[Fri Feb 27 21:29:23.073260 2026] [:error] [pid 54102:tid 54162] [client 209.87.169.174:28557] [client 209.87.169.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaGcM3i74D4fiYUm_GdvcgAAAJI"]
[Fri Feb 27 21:29:24.564674 2026] [:error] [pid 52073:tid 52088] [client 45.131.195.76:57659] [client 45.131.195.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaGcNIa650YPyxXVeRZXjQAAAYw"]
[Fri Feb 27 21:29:26.832964 2026] [:error] [pid 49306:tid 49316] [client 45.131.195.53:22507] [client 45.131.195.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaGcNvnSUDZue59Px9saJQAAAUg"]
[Fri Feb 27 21:29:28.103551 2026] [:error] [pid 52073:tid 52082] [client 45.131.195.80:38373] [client 45.131.195.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaGcOIa650YPyxXVeRZXygAAAYY"]
[Fri Feb 27 21:29:28.614386 2026] [:error] [pid 49306:tid 49310] [client 45.131.195.59:25065] [client 45.131.195.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaGcOPnSUDZue59Px9saUQAAAUI"]
[Fri Feb 27 21:29:30.532746 2026] [:error] [pid 54231:tid 54257] [client 45.131.195.60:48447] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaGcOuTvb5AeyJCdY7ASCAAAAFc"]
[Fri Feb 27 21:29:31.999471 2026] [proxy_fcgi:error] [pid 52073:tid 52087] [client 45.131.195.111:52065] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:29:32.269637 2026] [proxy_fcgi:error] [pid 52073:tid 52099] [client 45.131.195.111:52065] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:29:32.550245 2026] [proxy_fcgi:error] [pid 52073:tid 52081] [client 45.131.195.111:52065] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:29:33.886677 2026] [:error] [pid 52073:tid 52098] [client 45.131.195.111:52065] [client 45.131.195.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaGcPYa650YPyxXVeRZYLAAAAZY"]
[Fri Feb 27 21:29:34.389571 2026] [:error] [pid 54102:tid 54144] [client 45.131.195.106:40645] [client 45.131.195.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaGcPni74D4fiYUm_GdvqQAAAIA"]
[Fri Feb 27 21:29:34.890173 2026] [:error] [pid 49306:tid 49314] [client 45.131.195.64:37555] [client 45.131.195.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaGcPvnSUDZue59Px9sanQAAAUY"]
[Fri Feb 27 21:29:35.431687 2026] [:error] [pid 62998:tid 63017] [client 45.131.195.91:51737] [client 45.131.195.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaGcP1QeueXZDUmoLolMOgAAAQ8"]
[Fri Feb 27 21:29:35.936404 2026] [:error] [pid 52073:tid 52094] [client 45.131.195.101:27777] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaGcP4a650YPyxXVeRZYOwAAAZI"]
[Fri Feb 27 21:29:36.459571 2026] [:error] [pid 52073:tid 52094] [client 45.131.195.62:45055] [client 45.131.195.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaGcQIa650YPyxXVeRZYSwAAAZI"]
[Fri Feb 27 21:29:37.339530 2026] [:error] [pid 52073:tid 52084] [client 45.131.195.62:65237] [client 45.131.195.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaGcQYa650YPyxXVeRZYYAAAAYg"]
[Fri Feb 27 21:29:37.866140 2026] [:error] [pid 52073:tid 52099] [client 45.131.195.82:62443] [client 45.131.195.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaGcQYa650YPyxXVeRZYbwAAAZc"]
[Fri Feb 27 21:29:38.398869 2026] [:error] [pid 54103:tid 54192] [client 45.131.195.64:29697] [client 45.131.195.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaGcQuvG4MPCmE0B2sCnPAAAANU"]
[Fri Feb 27 21:29:38.909470 2026] [:error] [pid 56075:tid 56077] [client 45.131.195.105:22903] [client 45.131.195.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaGcQsKBhrfI6KNv9RjSFQAAAAA"]
[Fri Feb 27 21:29:39.949063 2026] [:error] [pid 54231:tid 54242] [client 45.131.195.94:61121] [client 45.131.195.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaGcQ-Tvb5AeyJCdY7ASOQAAAEg"]
[Fri Feb 27 21:29:40.686753 2026] [:error] [pid 54231:tid 54243] [client 45.131.195.100:45403] [client 45.131.195.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaGcROTvb5AeyJCdY7ASUQAAAEk"]
[Fri Feb 27 21:29:41.757871 2026] [:error] [pid 62998:tid 63026] [client 45.131.195.65:62699] [client 45.131.195.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaGcRVQeueXZDUmoLolMYwAAARg"]
[Fri Feb 27 21:29:42.754834 2026] [:error] [pid 54103:tid 54172] [client 45.131.195.61:40139] [client 45.131.195.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaGcRuvG4MPCmE0B2sCnWAAAAME"]
[Fri Feb 27 21:29:44.055924 2026] [:error] [pid 54101:tid 54120] [client 45.131.195.101:33641] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaGcSFY5qgRktcYTGFtBwgAAAcw"]
[Fri Feb 27 21:29:45.614144 2026] [:error] [pid 56075:tid 56083] [client 45.131.195.94:20093] [client 45.131.195.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaGcScKBhrfI6KNv9RjSaQAAAAY"]
[Fri Feb 27 21:29:46.432408 2026] [:error] [pid 52073:tid 52086] [client 45.131.195.66:31743] [client 45.131.195.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaGcSoa650YPyxXVeRZY1QAAAYo"]
[Fri Feb 27 21:29:51.194325 2026] [:error] [pid 52073:tid 52082] [client 45.131.195.69:38191] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaGcT4a650YPyxXVeRZZSQAAAYY"]
[Fri Feb 27 21:29:51.745689 2026] [:error] [pid 52073:tid 52087] [client 45.131.195.58:58329] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaGcT4a650YPyxXVeRZZVwAAAYs"]
[Fri Feb 27 21:29:52.291324 2026] [:error] [pid 54103:tid 54187] [client 45.131.195.61:31095] [client 45.131.195.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.61, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaGcUOvG4MPCmE0B2sCntQAAANA"]
[Fri Feb 27 21:29:52.803409 2026] [:error] [pid 54103:tid 54188] [client 45.131.195.61:31095] [client 45.131.195.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaGcUOvG4MPCmE0B2sCnuQAAANE"]
[Fri Feb 27 21:29:53.897440 2026] [:error] [pid 54231:tid 54242] [client 45.131.195.91:46865] [client 45.131.195.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaGcUeTvb5AeyJCdY7AS-QAAAEg"]
[Fri Feb 27 21:29:54.377710 2026] [:error] [pid 52073:tid 52094] [client 45.131.195.71:36437] [client 45.131.195.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaGcUoa650YPyxXVeRZZeAAAAZI"]
[Fri Feb 27 21:29:55.901976 2026] [:error] [pid 54102:tid 54155] [client 209.87.169.174:40925] [client 209.87.169.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaGcU3i74D4fiYUm_GdwHAAAAIs"]
[Fri Feb 27 21:29:56.390644 2026] [:error] [pid 49306:tid 49320] [client 45.131.195.82:28023] [client 45.131.195.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aaGcVPnSUDZue59Px9scFwAAAUw"]
[Fri Feb 27 21:29:58.239107 2026] [:error] [pid 54101:tid 54120] [client 45.131.195.65:55839] [client 45.131.195.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaGcVlY5qgRktcYTGFtCPQAAAcw"]
[Fri Feb 27 21:29:59.332479 2026] [proxy_fcgi:error] [pid 52073:tid 52091] [client 45.131.195.104:53973] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:29:59.812908 2026] [:error] [pid 52073:tid 52093] [client 45.131.195.104:53973] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaGcV4a650YPyxXVeRZaCAAAAZE"]
[Fri Feb 27 21:30:00.346920 2026] [:error] [pid 54231:tid 54252] [client 45.131.195.75:31129] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaGcWOTvb5AeyJCdY7ATOgAAAFI"]
[Fri Feb 27 21:30:01.533410 2026] [:error] [pid 62998:tid 63018] [client 45.131.195.106:51771] [client 45.131.195.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaGcWVQeueXZDUmoLolNaQAAARA"]
[Fri Feb 27 21:30:03.349879 2026] [:error] [pid 52073:tid 52087] [client 45.131.195.56:28665] [client 45.131.195.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaGcW4a650YPyxXVeRZaLAAAAYs"]
[Fri Feb 27 21:30:06.465229 2026] [:error] [pid 56075:tid 56077] [client 45.131.195.89:42893] [client 45.131.195.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaGcXsKBhrfI6KNv9RjTTwAAAAA"]
[Fri Feb 27 21:30:06.996263 2026] [:error] [pid 56075:tid 56098] [client 45.131.195.61:54475] [client 45.131.195.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaGcXsKBhrfI6KNv9RjTXQAAABQ"]
[Fri Feb 27 21:30:08.571789 2026] [:error] [pid 56075:tid 56094] [client 45.131.195.79:40657] [client 45.131.195.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaGcYMKBhrfI6KNv9RjThwAAABA"]
[Fri Feb 27 21:30:09.041379 2026] [:error] [pid 62998:tid 63022] [client 45.131.195.66:29093] [client 45.131.195.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaGcYVQeueXZDUmoLolNkAAAARQ"]
[Fri Feb 27 21:30:09.621320 2026] [:error] [pid 52073:tid 52092] [client 45.131.195.72:32251] [client 45.131.195.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaGcYYa650YPyxXVeRZaiAAAAZA"]
[Fri Feb 27 21:30:11.414805 2026] [:error] [pid 54101:tid 54125] [client 45.131.195.109:23027] [client 45.131.195.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaGcY1Y5qgRktcYTGFtCwAAAAdE"]
[Fri Feb 27 21:30:12.192081 2026] [:error] [pid 54102:tid 54152] [client 45.131.195.99:43161] [client 45.131.195.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaGcZHi74D4fiYUm_GdwagAAAIg"]
[Fri Feb 27 21:30:14.846916 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.80:63957] [client 45.131.195.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.80, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aaGcZoa650YPyxXVeRZbBAAAAYE"]
[Fri Feb 27 21:30:19.419381 2026] [:error] [pid 52073:tid 52076] [client 45.131.195.80:63957] [client 45.131.195.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaGca4a650YPyxXVeRZbsQAAAYA"]
[Fri Feb 27 21:30:20.136790 2026] [:error] [pid 54101:tid 54127] [client 45.131.195.58:28917] [client 45.131.195.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.58, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaGcbFY5qgRktcYTGFtC8gAAAdM"]
[Fri Feb 27 21:30:23.758894 2026] [proxy_fcgi:error] [pid 54101:tid 54132] [client 45.131.195.58:28917] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:30:28.043634 2026] [:error] [pid 54101:tid 54118] [client 45.131.195.58:28917] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaGcdFY5qgRktcYTGFtDRAAAAco"]
[Fri Feb 27 21:30:29.916181 2026] [:error] [pid 62998:tid 63002] [client 45.131.195.114:51699] [client 45.131.195.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaGcdVQeueXZDUmoLolOsQAAAQE"]
[Fri Feb 27 21:30:31.118683 2026] [:error] [pid 54101:tid 54128] [client 45.131.195.77:38869] [client 45.131.195.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaGcd1Y5qgRktcYTGFtDaQAAAdQ"]
[Fri Feb 27 21:30:34.170240 2026] [:error] [pid 54102:tid 54168] [client 45.131.195.81:59625] [client 45.131.195.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaGceni74D4fiYUm_Gdw9QAAAJc"]
[Fri Feb 27 21:30:35.094099 2026] [:error] [pid 52073:tid 52081] [client 45.131.195.248:57219] [client 45.131.195.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaGce4a650YPyxXVeRZcwwAAAYU"]
[Fri Feb 27 21:30:35.791872 2026] [:error] [pid 54101:tid 54128] [client 45.131.195.54:30411] [client 45.131.195.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaGce1Y5qgRktcYTGFtDnAAAAdQ"]
[Fri Feb 27 21:30:37.338476 2026] [proxy_fcgi:error] [pid 54101:tid 54115] [client 45.131.195.249:56687] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:30:37.602441 2026] [proxy_fcgi:error] [pid 54101:tid 54109] [client 45.131.195.249:56687] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:30:37.828311 2026] [:error] [pid 54101:tid 54123] [client 45.131.195.249:56687] [client 45.131.195.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaGcfVY5qgRktcYTGFtDzgAAAc8"]
[Fri Feb 27 21:30:38.317497 2026] [:error] [pid 52073:tid 52099] [client 45.131.195.60:29539] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaGcfoa650YPyxXVeRZc_QAAAZc"]
[Fri Feb 27 21:30:41.020029 2026] [:error] [pid 54102:tid 54148] [client 45.131.195.100:61505] [client 45.131.195.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaGcgXi74D4fiYUm_GdxHgAAAIQ"]
[Fri Feb 27 21:30:41.782895 2026] [:error] [pid 54103:tid 54181] [client 45.131.195.72:20993] [client 45.131.195.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aaGcgevG4MPCmE0B2sCo3wAAAMo"]
[Fri Feb 27 21:30:43.089216 2026] [:error] [pid 49306:tid 49325] [client 45.131.195.52:27255] [client 45.131.195.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaGcg_nSUDZue59Px9sdrQAAAVE"]
[Fri Feb 27 21:30:45.400749 2026] [:error] [pid 49306:tid 49316] [client 45.131.195.96:65159] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaGchfnSUDZue59Px9sdzgAAAUg"]
[Fri Feb 27 21:30:45.899186 2026] [proxy_fcgi:error] [pid 52073:tid 52079] [client 45.131.195.96:60645] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:30:46.609214 2026] [:error] [pid 52073:tid 52094] [client 45.131.195.96:60645] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaGchoa650YPyxXVeRZdswAAAZI"]
[Fri Feb 27 21:30:50.331555 2026] [proxy_fcgi:error] [pid 62998:tid 63006] [client 45.131.195.80:46697] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:30:50.854803 2026] [:error] [pid 62998:tid 63004] [client 45.131.195.80:46697] [client 45.131.195.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.80, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaGcilQeueXZDUmoLolP1AAAAQI"]
[Fri Feb 27 21:30:52.204239 2026] [:error] [pid 62998:tid 63026] [client 45.131.195.80:46697] [client 45.131.195.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaGcjFQeueXZDUmoLolP4QAAARg"]
[Fri Feb 27 21:30:53.055640 2026] [:error] [pid 56075:tid 56083] [client 45.131.195.80:40597] [client 45.131.195.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaGcjcKBhrfI6KNv9RjV9wAAAAY"]
[Fri Feb 27 21:30:54.522201 2026] [:error] [pid 54231:tid 54250] [client 45.131.195.106:57283] [client 45.131.195.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaGcjuTvb5AeyJCdY7AVYgAAAFA"]
[Fri Feb 27 21:30:56.157286 2026] [:error] [pid 54103:tid 54181] [client 45.131.195.111:42543] [client 45.131.195.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaGckOvG4MPCmE0B2sCpigAAAMo"]
[Fri Feb 27 21:30:56.863204 2026] [:error] [pid 56075:tid 56084] [client 45.131.195.101:52549] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaGckMKBhrfI6KNv9RjWZwAAAAc"]
[Fri Feb 27 21:30:58.077928 2026] [:error] [pid 54101:tid 54125] [client 45.131.195.86:55039] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaGcklY5qgRktcYTGFtERgAAAdE"]
[Fri Feb 27 21:30:58.994801 2026] [proxy_fcgi:error] [pid 56075:tid 56098] [client 45.131.195.79:43137] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:30:59.244309 2026] [:error] [pid 56075:tid 56087] [client 45.131.195.79:43137] [client 45.131.195.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaGck8KBhrfI6KNv9RjWvgAAAAo"]
[Fri Feb 27 21:30:59.875835 2026] [:error] [pid 54231:tid 54242] [client 45.131.195.94:23847] [client 45.131.195.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaGck-Tvb5AeyJCdY7AVnQAAAEg"]
[Fri Feb 27 21:31:00.384950 2026] [:error] [pid 56075:tid 56087] [client 45.131.195.73:63431] [client 45.131.195.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaGclMKBhrfI6KNv9RjW8QAAAAo"]
[Fri Feb 27 21:31:00.815921 2026] [:error] [pid 49306:tid 49330] [client 45.131.195.69:44939] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaGclPnSUDZue59Px9sevAAAAVY"]
[Fri Feb 27 21:31:01.597866 2026] [:error] [pid 54101:tid 54119] [client 45.131.195.81:40761] [client 45.131.195.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaGclVY5qgRktcYTGFtESwAAAcs"]
[Fri Feb 27 21:31:02.295649 2026] [:error] [pid 54101:tid 54112] [client 45.131.195.58:60875] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaGcllY5qgRktcYTGFtETwAAAcQ"]
[Fri Feb 27 21:31:02.872807 2026] [:error] [pid 49306:tid 49331] [client 45.131.195.109:34323] [client 45.131.195.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaGclvnSUDZue59Px9se_wAAAVc"]
[Fri Feb 27 21:31:09.676745 2026] [:error] [pid 56075:tid 56083] [client 45.131.195.72:43553] [client 45.131.195.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaGcncKBhrfI6KNv9RjXgwAAAAY"]
[Fri Feb 27 21:31:10.113072 2026] [:error] [pid 54101:tid 54122] [client 45.131.195.104:65067] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaGcnlY5qgRktcYTGFtEiwAAAc4"]
[Fri Feb 27 21:31:10.583512 2026] [:error] [pid 54231:tid 54237] [client 45.131.195.61:29029] [client 45.131.195.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaGcnuTvb5AeyJCdY7AWIQAAAEM"]
[Fri Feb 27 21:31:11.387753 2026] [:error] [pid 54103:tid 54173] [client 209.87.169.174:26963] [client 209.87.169.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaGcn-vG4MPCmE0B2sCqIwAAAMI"]
[Fri Feb 27 21:31:12.358583 2026] [:error] [pid 54101:tid 54118] [client 45.131.195.57:61919] [client 45.131.195.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaGcoFY5qgRktcYTGFtEqQAAAco"]
[Fri Feb 27 21:31:12.866580 2026] [proxy_fcgi:error] [pid 49306:tid 49323] [client 45.131.195.60:53001] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:31:13.986352 2026] [:error] [pid 49306:tid 49309] [client 45.131.195.60:53001] [client 45.131.195.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.60, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaGcofnSUDZue59Px9sfogAAAUE"]
[Fri Feb 27 21:31:15.447339 2026] [:error] [pid 49306:tid 49313] [client 45.131.195.60:53001] [client 45.131.195.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aaGco_nSUDZue59Px9sfsgAAAUU"]
[Fri Feb 27 21:31:15.916589 2026] [:error] [pid 54102:tid 54146] [client 45.131.195.89:55687] [client 45.131.195.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aaGco3i74D4fiYUm_GdyfgAAAII"]
[Fri Feb 27 21:31:21.090930 2026] [:error] [pid 54103:tid 54184] [client 45.131.195.90:61607] [client 45.131.195.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaGcqevG4MPCmE0B2sCqbAAAAM0"]
[Fri Feb 27 21:31:21.584710 2026] [:error] [pid 56075:tid 56079] [client 45.131.195.75:63143] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aaGcqcKBhrfI6KNv9RjYQwAAAAI"]
[Fri Feb 27 21:31:22.071003 2026] [:error] [pid 54103:tid 54190] [client 45.131.195.86:32125] [client 45.131.195.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aaGcquvG4MPCmE0B2sCqcQAAANM"]
[Fri Feb 27 21:31:24.045446 2026] [:error] [pid 52073:tid 52082] [client 45.131.195.248:54653] [client 45.131.195.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aaGcrIa650YPyxXVeRZjGgAAAYY"]
[Fri Feb 27 21:31:24.580055 2026] [:error] [pid 62998:tid 63004] [client 45.131.195.61:25591] [client 45.131.195.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aaGcrFQeueXZDUmoLolRVgAAAQI"]
[Fri Feb 27 21:31:25.049352 2026] [:error] [pid 49306:tid 49314] [client 45.131.195.55:55739] [client 45.131.195.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aaGcrfnSUDZue59Px9sf9AAAAUY"]
[Fri Feb 27 21:31:26.710561 2026] [:error] [pid 52073:tid 52085] [client 45.131.195.54:65347] [client 45.131.195.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aaGcroa650YPyxXVeRZjeAAAAYk"]
[Fri Feb 27 21:31:27.462432 2026] [:error] [pid 52073:tid 52098] [client 45.131.195.52:59207] [client 45.131.195.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aaGcr4a650YPyxXVeRZjiwAAAZY"]
[Fri Feb 27 21:31:28.388110 2026] [:error] [pid 54231:tid 54245] [client 45.131.195.70:43357] [client 45.131.195.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aaGcsOTvb5AeyJCdY7AW3AAAAEs"]
[Fri Feb 27 21:31:31.698555 2026] [:error] [pid 49306:tid 49309] [client 45.131.195.78:49365] [client 45.131.195.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaGcs_nSUDZue59Px9sgkAAAAUE"]
[Fri Feb 27 21:31:32.664324 2026] [:error] [pid 54101:tid 54108] [client 45.131.195.66:53717] [client 45.131.195.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaGctFY5qgRktcYTGFtFVwAAAcA"]
[Fri Feb 27 21:31:34.656330 2026] [:error] [pid 56075:tid 56083] [client 45.131.195.249:56063] [client 45.131.195.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aaGctsKBhrfI6KNv9RjZNgAAAAY"]
[Fri Feb 27 21:31:35.682672 2026] [:error] [pid 54103:tid 54170] [client 45.131.195.58:54591] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aaGct-vG4MPCmE0B2sCqrQAAAMA"]
[Fri Feb 27 21:31:37.268657 2026] [:error] [pid 54102:tid 54151] [client 45.131.195.96:25003] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aaGcuXi74D4fiYUm_GdzXAAAAIc"]
[Fri Feb 27 21:31:39.209749 2026] [:error] [pid 56075:tid 56090] [client 45.131.195.104:41537] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aaGcu8KBhrfI6KNv9RjZYQAAAAw"]
[Fri Feb 27 21:31:40.234435 2026] [:error] [pid 56075:tid 56098] [client 45.131.195.100:29963] [client 45.131.195.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aaGcvMKBhrfI6KNv9RjZbAAAABQ"]
[Fri Feb 27 21:31:40.698756 2026] [:error] [pid 52073:tid 52097] [client 45.131.195.91:63045] [client 45.131.195.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aaGcvIa650YPyxXVeRZlKAAAAZU"]
[Fri Feb 27 21:31:42.546838 2026] [:error] [pid 54103:tid 54187] [client 45.131.195.99:26907] [client 45.131.195.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aaGcvuvG4MPCmE0B2sCrFAAAANA"]
[Fri Feb 27 21:31:44.239746 2026] [:error] [pid 52073:tid 52084] [client 45.131.195.72:21813] [client 45.131.195.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aaGcwIa650YPyxXVeRZliwAAAYg"]
[Fri Feb 27 21:31:45.827409 2026] [:error] [pid 62998:tid 63024] [client 45.131.195.62:42107] [client 45.131.195.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaGcwVQeueXZDUmoLolSRwAAARY"]
[Fri Feb 27 21:31:46.452606 2026] [:error] [pid 54101:tid 54118] [client 45.131.195.76:51027] [client 45.131.195.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aaGcwlY5qgRktcYTGFtFogAAAco"]
[Fri Feb 27 21:31:47.482076 2026] [:error] [pid 54101:tid 54130] [client 45.131.195.64:45945] [client 45.131.195.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aaGcw1Y5qgRktcYTGFtFxgAAAdY"]
[Fri Feb 27 21:31:48.833454 2026] [:error] [pid 54231:tid 54238] [client 45.131.195.63:50671] [client 45.131.195.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aaGcxOTvb5AeyJCdY7AXjwAAAEQ"]
[Fri Feb 27 21:31:49.282478 2026] [:error] [pid 56075:tid 56101] [client 45.131.195.101:28017] [client 45.131.195.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aaGcxcKBhrfI6KNv9RjZ8gAAABc"]
[Fri Feb 27 21:31:51.372634 2026] [:error] [pid 49306:tid 49313] [client 45.131.195.104:36303] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aaGcx_nSUDZue59Px9shgwAAAUU"]
[Fri Feb 27 21:31:52.463093 2026] [:error] [pid 62998:tid 63004] [client 45.131.195.90:25271] [client 45.131.195.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aaGcyFQeueXZDUmoLolSagAAAQI"]
[Fri Feb 27 21:31:52.937516 2026] [:error] [pid 52073:tid 52100] [client 45.131.195.74:48085] [client 45.131.195.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aaGcyIa650YPyxXVeRZmSQAAAZg"]
[Fri Feb 27 21:31:53.902109 2026] [:error] [pid 56075:tid 56083] [client 45.131.195.61:20713] [client 45.131.195.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aaGcycKBhrfI6KNv9RjaIQAAAAY"]
[Fri Feb 27 21:31:54.931341 2026] [:error] [pid 54102:tid 54152] [client 45.131.195.65:62387] [client 45.131.195.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aaGcyni74D4fiYUm_Gd0VgAAAIg"]
[Fri Feb 27 21:31:56.762044 2026] [:error] [pid 54101:tid 54112] [client 45.131.195.249:30049] [client 45.131.195.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aaGczFY5qgRktcYTGFtGHgAAAcQ"]
[Fri Feb 27 21:31:57.636091 2026] [:error] [pid 56075:tid 56078] [client 45.131.195.70:64159] [client 45.131.195.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aaGczcKBhrfI6KNv9RjaZAAAAAE"]
[Fri Feb 27 21:31:58.706804 2026] [:error] [pid 56075:tid 56096] [client 45.131.195.52:38927] [client 45.131.195.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aaGczsKBhrfI6KNv9RjakwAAABI"]
[Fri Feb 27 21:31:59.498227 2026] [:error] [pid 49306:tid 49317] [client 45.131.195.58:38489] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aaGcz_nSUDZue59Px9siAAAAAUk"]
[Fri Feb 27 21:32:00.289934 2026] [:error] [pid 56075:tid 56096] [client 45.131.195.91:50043] [client 45.131.195.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aaGc0MKBhrfI6KNv9Rja0QAAABI"]
[Fri Feb 27 21:32:00.807820 2026] [:error] [pid 56075:tid 56098] [client 45.131.195.78:22273] [client 45.131.195.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaGc0MKBhrfI6KNv9Rja4wAAABQ"]
[Fri Feb 27 21:32:01.266305 2026] [:error] [pid 54101:tid 54109] [client 45.131.195.71:63009] [client 45.131.195.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aaGc0VY5qgRktcYTGFtGMwAAAcE"]
[Fri Feb 27 21:32:03.976482 2026] [:error] [pid 54101:tid 54123] [client 45.131.195.111:25195] [client 45.131.195.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aaGc01Y5qgRktcYTGFtGPwAAAc8"]
[Fri Feb 27 21:32:05.327837 2026] [:error] [pid 54231:tid 54255] [client 45.131.195.70:34979] [client 45.131.195.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaGc1eTvb5AeyJCdY7AYWQAAAFU"]
[Fri Feb 27 21:32:06.467879 2026] [:error] [pid 54102:tid 54165] [client 45.131.195.69:40779] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aaGc1ni74D4fiYUm_Gd1QAAAAJU"]
[Fri Feb 27 21:32:07.769652 2026] [:error] [pid 56075:tid 56077] [client 45.131.195.63:29467] [client 45.131.195.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aaGc18KBhrfI6KNv9RjbXwAAAAA"]
[Fri Feb 27 21:32:10.096188 2026] [:error] [pid 56075:tid 56099] [client 45.131.195.110:41291] [client 45.131.195.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aaGc2sKBhrfI6KNv9RjbjgAAABU"]
[Fri Feb 27 21:32:10.765534 2026] [:error] [pid 54103:tid 54180] [client 45.131.195.79:20269] [client 45.131.195.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aaGc2uvG4MPCmE0B2sCrtQAAAMk"]
[Fri Feb 27 21:32:11.815235 2026] [:error] [pid 54102:tid 54148] [client 45.131.195.53:51457] [client 45.131.195.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aaGc23i74D4fiYUm_Gd1qQAAAIQ"]
[Fri Feb 27 21:32:12.733908 2026] [:error] [pid 56075:tid 56087] [client 45.131.195.104:63893] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aaGc3MKBhrfI6KNv9RjbtQAAAAo"]
[Fri Feb 27 21:32:15.260945 2026] [:error] [pid 56075:tid 56082] [client 45.131.195.81:29939] [client 45.131.195.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aaGc38KBhrfI6KNv9Rjb8wAAAAU"]
[Fri Feb 27 21:32:15.729648 2026] [:error] [pid 54101:tid 54113] [client 45.131.195.65:34489] [client 45.131.195.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aaGc31Y5qgRktcYTGFtGlgAAAcU"]
[Fri Feb 27 21:32:17.100688 2026] [:error] [pid 49306:tid 49318] [client 45.131.195.109:36771] [client 45.131.195.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aaGc4fnSUDZue59Px9sjRAAAAUo"]
[Fri Feb 27 21:32:17.658882 2026] [:error] [pid 49306:tid 49314] [client 45.131.195.100:45879] [client 45.131.195.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aaGc4fnSUDZue59Px9sjTQAAAUY"]
[Fri Feb 27 21:32:18.607205 2026] [:error] [pid 62998:tid 63021] [client 45.131.195.249:43249] [client 45.131.195.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aaGc4lQeueXZDUmoLolTcAAAARM"]
[Fri Feb 27 21:32:19.070678 2026] [:error] [pid 56075:tid 56080] [client 45.131.195.57:55727] [client 45.131.195.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aaGc48KBhrfI6KNv9RjcSwAAAAM"]
[Fri Feb 27 21:32:19.616756 2026] [:error] [pid 49306:tid 49317] [client 45.131.195.104:58661] [client 45.131.195.104] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.104, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aaGc4_nSUDZue59Px9sjdQAAAUk"]
[Fri Feb 27 21:32:19.627039 2026] [proxy_fcgi:error] [pid 49306:tid 49317] [client 45.131.195.104:58661] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:32:19.856344 2026] [:error] [pid 49306:tid 49323] [client 45.131.195.104:58661] [client 45.131.195.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aaGc4_nSUDZue59Px9sjfwAAAU8"]
[Fri Feb 27 21:32:21.017345 2026] [:error] [pid 52073:tid 52081] [client 45.131.195.53:44913] [client 45.131.195.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaGc5Ya650YPyxXVeRZotAAAAYU"]
[Fri Feb 27 21:32:21.518277 2026] [:error] [pid 56075:tid 56096] [client 45.131.195.109:54255] [client 45.131.195.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaGc5cKBhrfI6KNv9RjcewAAABI"]
[Fri Feb 27 21:32:23.708153 2026] [:error] [pid 52073:tid 52088] [client 45.131.195.109:34379] [client 45.131.195.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aaGc54a650YPyxXVeRZpJQAAAYw"]
[Fri Feb 27 21:32:24.153614 2026] [:error] [pid 52073:tid 52088] [client 45.131.195.110:57427] [client 45.131.195.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aaGc6Ia650YPyxXVeRZpSwAAAYw"]
[Fri Feb 27 21:32:25.035404 2026] [:error] [pid 52073:tid 52077] [client 45.131.195.58:34867] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aaGc6Ya650YPyxXVeRZphQAAAYE"]
[Fri Feb 27 21:32:33.399694 2026] [:error] [pid 54231:tid 54249] [client 45.131.195.78:42439] [client 45.131.195.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aaGc8eTvb5AeyJCdY7AaHgAAAE8"]
[Fri Feb 27 21:32:33.875469 2026] [proxy_fcgi:error] [pid 54102:tid 54155] [client 45.131.195.75:21875] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 21:32:34.123846 2026] [:error] [pid 54102:tid 54150] [client 45.131.195.75:21875] [client 45.131.195.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.75, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaGc8ni74D4fiYUm_Gd2owAAAIY"]
[Fri Feb 27 21:32:34.637402 2026] [:error] [pid 54102:tid 54162] [client 45.131.195.75:21875] [client 45.131.195.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aaGc8ni74D4fiYUm_Gd2qQAAAJI"]
[Fri Feb 27 21:32:36.263556 2026] [:error] [pid 52073:tid 52080] [client 45.131.195.84:55143] [client 45.131.195.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aaGc9Ia650YPyxXVeRZqfgAAAYQ"]
[Fri Feb 27 21:32:37.116939 2026] [:error] [pid 52073:tid 52084] [client 45.131.195.106:64711] [client 45.131.195.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aaGc9Ya650YPyxXVeRZqkQAAAYg"]
[Fri Feb 27 21:32:37.644809 2026] [:error] [pid 54101:tid 54124] [client 45.131.195.105:26137] [client 45.131.195.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aaGc9VY5qgRktcYTGFtHoAAAAdA"]
[Fri Feb 27 21:32:38.960287 2026] [:error] [pid 54102:tid 54151] [client 45.131.195.90:54635] [client 45.131.195.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaGc9ni74D4fiYUm_Gd22AAAAIc"]
[Fri Feb 27 21:32:40.137840 2026] [:error] [pid 56075:tid 56082] [client 45.131.195.57:64411] [client 45.131.195.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaGc-MKBhrfI6KNv9Rjd6QAAAAU"]
[Fri Feb 27 21:32:41.685813 2026] [:error] [pid 56075:tid 56087] [client 45.131.195.109:45261] [client 45.131.195.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aaGc-cKBhrfI6KNv9RjeAAAAAAo"]
[Fri Feb 27 21:32:42.142124 2026] [:error] [pid 54102:tid 54145] [client 45.131.195.73:57721] [client 45.131.195.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aaGc-ni74D4fiYUm_Gd3CgAAAIE"]
[Fri Feb 27 21:32:42.834842 2026] [:error] [pid 54103:tid 54190] [client 45.131.195.110:58067] [client 45.131.195.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aaGc-uvG4MPCmE0B2sCtFwAAANM"]
[Fri Feb 27 21:32:45.219963 2026] [:error] [pid 54231:tid 54240] [client 45.131.195.91:33045] [client 45.131.195.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaGc_eTvb5AeyJCdY7AaygAAAEY"]
[Fri Feb 27 21:32:46.182802 2026] [:error] [pid 56075:tid 56080] [client 45.131.195.84:20221] [client 45.131.195.84] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aaGc_sKBhrfI6KNv9RjeUAAAAAM"]
[Fri Feb 27 21:32:46.452813 2026] [:error] [pid 56075:tid 56098] [client 45.131.195.84:20221] [client 45.131.195.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aaGc_sKBhrfI6KNv9RjeVAAAABQ"]
[Fri Feb 27 21:32:47.391501 2026] [:error] [pid 52073:tid 52084] [client 45.131.195.111:48727] [client 45.131.195.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aaGc_4a650YPyxXVeRZrZQAAAYg"]
[Fri Feb 27 21:32:47.834001 2026] [:error] [pid 52073:tid 52099] [client 45.131.195.62:22623] [client 45.131.195.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aaGc_4a650YPyxXVeRZrdgAAAZc"]
[Fri Feb 27 21:32:51.584890 2026] [:error] [pid 52073:tid 52088] [client 45.131.195.82:23825] [client 45.131.195.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aaGdA4a650YPyxXVeRZruwAAAYw"]
[Fri Feb 27 21:32:52.618429 2026] [:error] [pid 54103:tid 54191] [client 45.131.195.96:32243] [client 45.131.195.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aaGdBOvG4MPCmE0B2sCtZAAAANQ"]
[Fri Feb 27 21:32:53.375531 2026] [:error] [pid 62998:tid 63026] [client 45.131.195.100:28521] [client 45.131.195.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aaGdBVQeueXZDUmoLolUzgAAARg"]
[Fri Feb 27 21:32:55.124045 2026] [:error] [pid 54103:tid 54181] [client 45.131.195.100:61423] [client 45.131.195.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aaGdB-vG4MPCmE0B2sCtdQAAAMo"]
[Fri Feb 27 21:32:55.900420 2026] [:error] [pid 54103:tid 54178] [client 45.131.195.58:20211] [client 45.131.195.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aaGdB-vG4MPCmE0B2sCtewAAAMc"]
[Fri Feb 27 21:32:56.645590 2026] [:error] [pid 56075:tid 56097] [client 45.131.195.77:25131] [client 45.131.195.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aaGdCMKBhrfI6KNv9RjfcQAAABM"]
[Fri Feb 27 21:32:57.126867 2026] [:error] [pid 54103:tid 54178] [client 45.131.195.69:31373] [client 45.131.195.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaGdCevG4MPCmE0B2sCthgAAAMc"]
[Fri Feb 27 21:32:58.125829 2026] [:error] [pid 52073:tid 52100] [client 45.131.195.91:34385] [client 45.131.195.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aaGdCoa650YPyxXVeRZsGQAAAZg"]
[Fri Feb 27 21:34:17.034797 2026] [:error] [pid 52073:tid 52095] [client 52.138.25.109:23541] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aaGdWYa650YPyxXVeRZwHAAAAZM"]
[Fri Feb 27 21:34:17.443736 2026] [:error] [pid 56075:tid 56099] [client 52.138.25.109:23427] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aaGdWcKBhrfI6KNv9RjlwQAAABU"]
[Fri Feb 27 21:34:17.861970 2026] [:error] [pid 54231:tid 54244] [client 52.138.25.109:23526] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aaGdWeTvb5AeyJCdY7AdzQAAAEo"]
[Fri Feb 27 21:34:18.284793 2026] [:error] [pid 54101:tid 54121] [client 52.138.25.109:23535] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso.php"] [unique_id "aaGdWlY5qgRktcYTGFtL2gAAAc0"]
[Fri Feb 27 21:34:18.698930 2026] [:error] [pid 54231:tid 54243] [client 52.138.25.109:23529] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inject.php"] [unique_id "aaGdWuTvb5AeyJCdY7Ad1QAAAEk"]
[Fri Feb 27 21:34:19.110953 2026] [:error] [pid 49306:tid 49329] [client 52.138.25.109:23531] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inject.php"] [unique_id "aaGdW_nSUDZue59Px9sqcQAAAVU"]
[Fri Feb 27 21:34:19.519715 2026] [:error] [pid 49306:tid 49320] [client 52.138.25.109:23495] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inject.php"] [unique_id "aaGdW_nSUDZue59Px9sqdAAAAUw"]
[Fri Feb 27 21:34:19.930723 2026] [:error] [pid 52073:tid 52097] [client 52.138.25.109:23519] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inject.php"] [unique_id "aaGdW4a650YPyxXVeRZwPwAAAZU"]
[Fri Feb 27 21:34:20.357258 2026] [:error] [pid 49306:tid 49331] [client 52.138.25.109:23508] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aaGdXPnSUDZue59Px9sqjgAAAVc"]
[Fri Feb 27 21:34:20.765796 2026] [:error] [pid 49306:tid 49331] [client 52.138.25.109:23429] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aaGdXPnSUDZue59Px9sqmgAAAVc"]
[Fri Feb 27 21:34:21.175092 2026] [:error] [pid 62998:tid 63024] [client 52.138.25.109:23542] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aaGdXVQeueXZDUmoLolYFQAAARY"]
[Fri Feb 27 21:34:21.587878 2026] [:error] [pid 54231:tid 54256] [client 52.138.25.109:23540] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aaGdXeTvb5AeyJCdY7Ad8QAAAFY"]
[Fri Feb 27 21:34:22.000540 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:23489] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pro.php"] [unique_id "aaGdXfnSUDZue59Px9sqtAAAAVY"]
[Fri Feb 27 21:34:22.411268 2026] [:error] [pid 62998:tid 63010] [client 52.138.25.109:23430] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pro.php"] [unique_id "aaGdXlQeueXZDUmoLolYIAAAAQg"]
[Fri Feb 27 21:34:22.822179 2026] [:error] [pid 56075:tid 56088] [client 52.138.25.109:23549] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pro.php"] [unique_id "aaGdXsKBhrfI6KNv9Rjl_QAAAAs"]
[Fri Feb 27 21:34:23.231273 2026] [:error] [pid 62998:tid 63006] [client 52.138.25.109:23441] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pro.php"] [unique_id "aaGdX1QeueXZDUmoLolYJAAAAQQ"]
[Fri Feb 27 21:34:23.666158 2026] [:error] [pid 54103:tid 54184] [client 52.138.25.109:23431] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaGdX-vG4MPCmE0B2sCw4QAAAM0"]
[Fri Feb 27 21:34:24.080789 2026] [:error] [pid 49306:tid 49313] [client 52.138.25.109:23443] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaGdYPnSUDZue59Px9sq0gAAAUU"]
[Fri Feb 27 21:34:24.492008 2026] [:error] [pid 52073:tid 52089] [client 52.138.25.109:23438] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaGdYIa650YPyxXVeRZwYwAAAY0"]
[Fri Feb 27 21:34:24.904553 2026] [:error] [pid 52073:tid 52091] [client 52.138.25.109:23501] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaGdYIa650YPyxXVeRZwbgAAAY8"]
[Fri Feb 27 21:34:25.321285 2026] [:error] [pid 62998:tid 63025] [client 52.138.25.109:23458] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aaGdYVQeueXZDUmoLolYMQAAARc"]
[Fri Feb 27 21:34:25.741497 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:23497] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aaGdYfnSUDZue59Px9sq3AAAAVY"]
[Fri Feb 27 21:34:26.159565 2026] [:error] [pid 49306:tid 49324] [client 52.138.25.109:23546] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aaGdYvnSUDZue59Px9sq5AAAAVA"]
[Fri Feb 27 21:34:26.575637 2026] [:error] [pid 54101:tid 54132] [client 52.138.25.109:23498] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aaGdYlY5qgRktcYTGFtL-gAAAdg"]
[Fri Feb 27 21:34:26.991592 2026] [:error] [pid 49306:tid 49327] [client 52.138.25.109:23537] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aaGdYvnSUDZue59Px9sq8gAAAVM"]
[Fri Feb 27 21:34:27.406516 2026] [:error] [pid 56075:tid 56094] [client 52.138.25.109:23503] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aaGdY8KBhrfI6KNv9RjmDAAAABA"]
[Fri Feb 27 21:34:27.822663 2026] [:error] [pid 62998:tid 63013] [client 52.138.25.109:23521] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aaGdY1QeueXZDUmoLolYVwAAAQs"]
[Fri Feb 27 21:34:28.234935 2026] [:error] [pid 62998:tid 63011] [client 52.138.25.109:23504] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php"] [unique_id "aaGdZFQeueXZDUmoLolYYAAAAQk"]
[Fri Feb 27 21:34:28.649903 2026] [:error] [pid 56075:tid 56099] [client 52.138.25.109:23428] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aaGdZMKBhrfI6KNv9RjmGQAAABU"]
[Fri Feb 27 21:34:29.062205 2026] [:error] [pid 54231:tid 54240] [client 52.138.25.109:23426] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aaGdZeTvb5AeyJCdY7AeKwAAAEY"]
[Fri Feb 27 21:34:29.472965 2026] [:error] [pid 54231:tid 54253] [client 52.138.25.109:23532] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aaGdZeTvb5AeyJCdY7AeMgAAAFM"]
[Fri Feb 27 21:34:29.895147 2026] [:error] [pid 54231:tid 54257] [client 52.138.25.109:23470] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aaGdZeTvb5AeyJCdY7AeNwAAAFc"]
[Fri Feb 27 21:34:30.307463 2026] [:error] [pid 54231:tid 54251] [client 52.138.25.109:23544] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aaGdZuTvb5AeyJCdY7AeOQAAAFE"]
[Fri Feb 27 21:34:30.722009 2026] [:error] [pid 52073:tid 52089] [client 52.138.25.109:23491] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aaGdZoa650YPyxXVeRZw1gAAAY0"]
[Fri Feb 27 21:34:31.133156 2026] [:error] [pid 49306:tid 49320] [client 52.138.25.109:23525] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aaGdZ_nSUDZue59Px9srEgAAAUw"]
[Fri Feb 27 21:34:31.562251 2026] [:error] [pid 54103:tid 54181] [client 52.138.25.109:23455] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aaGdZ-vG4MPCmE0B2sCxIwAAAMo"]
[Fri Feb 27 21:34:31.972671 2026] [:error] [pid 54103:tid 54174] [client 52.138.25.109:23449] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aaGdZ-vG4MPCmE0B2sCxKgAAAMM"]
[Fri Feb 27 21:34:32.392864 2026] [:error] [pid 62998:tid 63007] [client 52.138.25.109:23435] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aaGdaFQeueXZDUmoLolYhwAAAQU"]
[Fri Feb 27 21:34:32.807277 2026] [:error] [pid 62998:tid 63011] [client 52.138.25.109:23494] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aaGdaFQeueXZDUmoLolYjQAAAQk"]
[Fri Feb 27 21:34:33.219212 2026] [:error] [pid 56075:tid 56080] [client 52.138.25.109:23506] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aaGdacKBhrfI6KNv9RjmNAAAAAM"]
[Fri Feb 27 21:34:33.647240 2026] [:error] [pid 52073:tid 52086] [client 52.138.25.109:23466] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaGdaYa650YPyxXVeRZxAgAAAYo"]
[Fri Feb 27 21:34:34.066268 2026] [:error] [pid 56075:tid 56097] [client 52.138.25.109:23472] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaGdasKBhrfI6KNv9RjmQQAAABM"]
[Fri Feb 27 21:34:34.488146 2026] [:error] [pid 62998:tid 63012] [client 52.138.25.109:23374] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaGdalQeueXZDUmoLolYmgAAAQo"]
[Fri Feb 27 21:34:34.910970 2026] [:error] [pid 52073:tid 52080] [client 52.138.25.109:23523] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaGdaoa650YPyxXVeRZxIAAAAYQ"]
[Fri Feb 27 21:34:35.330411 2026] [:error] [pid 52073:tid 52084] [client 52.138.25.109:23511] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaGda4a650YPyxXVeRZxJgAAAYg"]
[Fri Feb 27 21:34:35.742365 2026] [:error] [pid 52073:tid 52085] [client 52.138.25.109:23412] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaGda4a650YPyxXVeRZxLAAAAYk"]
[Fri Feb 27 21:34:36.159896 2026] [:error] [pid 52073:tid 52100] [client 52.138.25.109:23445] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaGdbIa650YPyxXVeRZxPQAAAZg"]
[Fri Feb 27 21:34:36.583202 2026] [:error] [pid 52073:tid 52096] [client 52.138.25.109:23493] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaGdbIa650YPyxXVeRZxUAAAAZQ"]
[Fri Feb 27 21:34:36.994759 2026] [:error] [pid 56075:tid 56090] [client 52.138.25.109:23545] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aaGdbMKBhrfI6KNv9RjmeAAAAAw"]
[Fri Feb 27 21:34:37.404560 2026] [:error] [pid 52073:tid 52100] [client 52.138.25.109:23469] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aaGdbYa650YPyxXVeRZxZAAAAZg"]
[Fri Feb 27 21:34:37.818751 2026] [:error] [pid 52073:tid 52090] [client 52.138.25.109:23432] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aaGdbYa650YPyxXVeRZxaAAAAY4"]
[Fri Feb 27 21:34:38.230335 2026] [:error] [pid 49306:tid 49318] [client 52.138.25.109:23536] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aaGdbvnSUDZue59Px9srWgAAAUo"]
[Fri Feb 27 21:34:38.646144 2026] [:error] [pid 54102:tid 54161] [client 52.138.25.109:23551] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug.php"] [unique_id "aaGdbni74D4fiYUm_Gd7ngAAAJE"]
[Fri Feb 27 21:34:39.057599 2026] [:error] [pid 52073:tid 52092] [client 52.138.25.109:23496] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug.php"] [unique_id "aaGdb4a650YPyxXVeRZxgAAAAZA"]
[Fri Feb 27 21:34:39.469863 2026] [:error] [pid 49306:tid 49331] [client 52.138.25.109:23524] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug.php"] [unique_id "aaGdb_nSUDZue59Px9srawAAAVc"]
[Fri Feb 27 21:34:39.880107 2026] [:error] [pid 49306:tid 49321] [client 52.138.25.109:23368] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug.php"] [unique_id "aaGdb_nSUDZue59Px9srcAAAAU0"]
[Fri Feb 27 21:34:40.290860 2026] [:error] [pid 62998:tid 63006] [client 52.138.25.109:23468] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaGdcFQeueXZDUmoLolYrAAAAQQ"]
[Fri Feb 27 21:34:40.705282 2026] [:error] [pid 56075:tid 56101] [client 52.138.25.109:23490] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaGdcMKBhrfI6KNv9RjmvwAAABc"]
[Fri Feb 27 21:34:41.130900 2026] [:error] [pid 62998:tid 63024] [client 52.138.25.109:23538] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaGdcVQeueXZDUmoLolYtgAAARY"]
[Fri Feb 27 21:34:41.548138 2026] [:error] [pid 49306:tid 49321] [client 52.138.25.109:23550] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaGdcfnSUDZue59Px9srfQAAAU0"]
[Fri Feb 27 21:34:41.959692 2026] [:error] [pid 54103:tid 54181] [client 52.138.25.109:23474] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaGdcevG4MPCmE0B2sCxfgAAAMo"]
[Fri Feb 27 21:34:42.372347 2026] [:error] [pid 56075:tid 56094] [client 52.138.25.109:23467] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaGdcsKBhrfI6KNv9Rjm7wAAABA"]
[Fri Feb 27 21:34:42.782685 2026] [:error] [pid 52073:tid 52090] [client 52.138.25.109:23502] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaGdcoa650YPyxXVeRZxpwAAAY4"]
[Fri Feb 27 21:34:43.193160 2026] [:error] [pid 62998:tid 63024] [client 52.138.25.109:23533] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaGdc1QeueXZDUmoLolYxwAAARY"]
[Fri Feb 27 21:34:43.605469 2026] [:error] [pid 54103:tid 54182] [client 52.138.25.109:23543] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/999.php"] [unique_id "aaGdc-vG4MPCmE0B2sCxjAAAAMs"]
[Fri Feb 27 21:34:44.018672 2026] [:error] [pid 54103:tid 54176] [client 52.138.25.109:23452] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/999.php"] [unique_id "aaGddOvG4MPCmE0B2sCxjQAAAMU"]
[Fri Feb 27 21:34:44.433408 2026] [:error] [pid 56075:tid 56080] [client 52.138.25.109:23388] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/999.php"] [unique_id "aaGddMKBhrfI6KNv9RjnNAAAAAM"]
[Fri Feb 27 21:34:44.850033 2026] [:error] [pid 54103:tid 54174] [client 52.138.25.109:23369] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/999.php"] [unique_id "aaGddOvG4MPCmE0B2sCxmAAAAMM"]
[Fri Feb 27 21:34:45.262404 2026] [:error] [pid 52073:tid 52084] [client 52.138.25.109:23381] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aaGddYa650YPyxXVeRZxuQAAAYg"]
[Fri Feb 27 21:34:45.673159 2026] [:error] [pid 52073:tid 52081] [client 52.138.25.109:23372] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aaGddYa650YPyxXVeRZxwgAAAYU"]
[Fri Feb 27 21:34:46.091995 2026] [:error] [pid 54231:tid 54235] [client 52.138.25.109:23486] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aaGdduTvb5AeyJCdY7AexQAAAEE"]
[Fri Feb 27 21:34:46.514499 2026] [:error] [pid 54231:tid 54238] [client 52.138.25.109:23492] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "aaGdduTvb5AeyJCdY7AeyAAAAEQ"]
[Fri Feb 27 21:34:46.934002 2026] [:error] [pid 52073:tid 52097] [client 52.138.25.109:23515] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/data.php"] [unique_id "aaGddoa650YPyxXVeRZx_AAAAZU"]
[Fri Feb 27 21:34:47.347490 2026] [:error] [pid 54102:tid 54157] [client 52.138.25.109:23437] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/data.php"] [unique_id "aaGdd3i74D4fiYUm_Gd7ywAAAI0"]
[Fri Feb 27 21:34:47.807982 2026] [:error] [pid 52073:tid 52099] [client 52.138.25.109:23434] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/data.php"] [unique_id "aaGdd4a650YPyxXVeRZyFgAAAZc"]
[Fri Feb 27 21:34:48.224458 2026] [:error] [pid 62998:tid 63009] [client 52.138.25.109:23383] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/data.php"] [unique_id "aaGdeFQeueXZDUmoLolY9QAAAQc"]
[Fri Feb 27 21:34:48.650709 2026] [:error] [pid 49306:tid 49311] [client 52.138.25.109:23499] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaGdePnSUDZue59Px9sr1AAAAUM"]
[Fri Feb 27 21:34:49.090117 2026] [:error] [pid 49306:tid 49322] [client 52.138.25.109:23520] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaGdefnSUDZue59Px9sr3QAAAU4"]
[Fri Feb 27 21:34:49.509973 2026] [:error] [pid 49306:tid 49321] [client 52.138.25.109:23375] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaGdefnSUDZue59Px9sr8QAAAU0"]
[Fri Feb 27 21:34:50.005070 2026] [:error] [pid 49306:tid 49323] [client 52.138.25.109:23487] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaGdevnSUDZue59Px9ssDQAAAU8"]
[Fri Feb 27 21:34:50.452699 2026] [:error] [pid 54102:tid 54144] [client 52.138.25.109:23433] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aaGdeni74D4fiYUm_Gd71gAAAIA"]
[Fri Feb 27 21:34:50.947910 2026] [:error] [pid 62998:tid 63019] [client 52.138.25.109:23394] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aaGdelQeueXZDUmoLolZFQAAARE"]
[Fri Feb 27 21:34:51.412938 2026] [:error] [pid 54102:tid 54145] [client 52.138.25.109:23476] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aaGde3i74D4fiYUm_Gd74QAAAIE"]
[Fri Feb 27 21:34:51.877827 2026] [:error] [pid 54231:tid 54257] [client 52.138.25.109:23477] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aaGde-Tvb5AeyJCdY7Ae2QAAAFc"]
[Fri Feb 27 21:34:52.320390 2026] [:error] [pid 62998:tid 63022] [client 52.138.25.109:23401] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aaGdfFQeueXZDUmoLolZLwAAARQ"]
[Fri Feb 27 21:34:52.763880 2026] [:error] [pid 56075:tid 56099] [client 52.138.25.109:23512] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aaGdfMKBhrfI6KNv9RjnZgAAABU"]
[Fri Feb 27 21:34:53.197855 2026] [:error] [pid 49306:tid 49319] [client 52.138.25.109:23527] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aaGdffnSUDZue59Px9ssMwAAAUs"]
[Fri Feb 27 21:34:53.608479 2026] [:error] [pid 54102:tid 54163] [client 52.138.25.109:23392] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aaGdfXi74D4fiYUm_Gd7-QAAAJM"]
[Fri Feb 27 21:34:54.024504 2026] [:error] [pid 54103:tid 54180] [client 52.138.25.109:23454] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/backup.php"] [unique_id "aaGdfuvG4MPCmE0B2sCx6QAAAMk"]
[Fri Feb 27 21:34:54.472652 2026] [:error] [pid 54101:tid 54124] [client 52.138.25.109:23377] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/backup.php"] [unique_id "aaGdflY5qgRktcYTGFtMVAAAAdA"]
[Fri Feb 27 21:34:54.902984 2026] [:error] [pid 56075:tid 56097] [client 52.138.25.109:23471] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/backup.php"] [unique_id "aaGdfsKBhrfI6KNv9RjncQAAABM"]
[Fri Feb 27 21:34:55.360358 2026] [:error] [pid 56075:tid 56101] [client 52.138.25.109:23505] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/backup.php"] [unique_id "aaGdf8KBhrfI6KNv9RjneQAAABc"]
[Fri Feb 27 21:34:55.783683 2026] [:error] [pid 54231:tid 54242] [client 52.138.25.109:23453] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaGdf-Tvb5AeyJCdY7Ae9wAAAEg"]
[Fri Feb 27 21:34:56.210542 2026] [:error] [pid 52073:tid 52090] [client 52.138.25.109:23516] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaGdgIa650YPyxXVeRZygQAAAY4"]
[Fri Feb 27 21:34:56.625849 2026] [:error] [pid 54231:tid 54249] [client 52.138.25.109:23396] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaGdgOTvb5AeyJCdY7AfAgAAAE8"]
[Fri Feb 27 21:34:57.053191 2026] [:error] [pid 54231:tid 54247] [client 52.138.25.109:23450] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaGdgeTvb5AeyJCdY7AfCAAAAE0"]
[Fri Feb 27 21:34:57.472118 2026] [:error] [pid 56075:tid 56077] [client 52.138.25.109:23510] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaGdgcKBhrfI6KNv9RjnjAAAAAA"]
[Fri Feb 27 21:34:57.885481 2026] [:error] [pid 54101:tid 54109] [client 52.138.25.109:23411] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaGdgVY5qgRktcYTGFtMeAAAAcE"]
[Fri Feb 27 21:34:58.310863 2026] [:error] [pid 54103:tid 54184] [client 52.138.25.109:23517] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaGdguvG4MPCmE0B2sCyCgAAAM0"]
[Fri Feb 27 21:34:58.720990 2026] [:error] [pid 52073:tid 52095] [client 52.138.25.109:23447] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaGdgoa650YPyxXVeRZykgAAAZM"]
[Fri Feb 27 21:34:59.131143 2026] [:error] [pid 56075:tid 56085] [client 52.138.25.109:23391] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaGdg8KBhrfI6KNv9RjnmAAAAAg"]
[Fri Feb 27 21:34:59.551060 2026] [:error] [pid 54231:tid 54252] [client 52.138.25.109:23461] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaGdg-Tvb5AeyJCdY7AfHgAAAFI"]
[Fri Feb 27 21:34:59.980228 2026] [:error] [pid 54231:tid 54245] [client 52.138.25.109:23530] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaGdg-Tvb5AeyJCdY7AfJwAAAEs"]
[Fri Feb 27 21:35:00.409623 2026] [:error] [pid 62998:tid 63015] [client 52.138.25.109:23397] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaGdhFQeueXZDUmoLolZgwAAAQ0"]
[Fri Feb 27 21:35:00.822177 2026] [:error] [pid 56075:tid 56081] [client 52.138.25.109:23386] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaGdhMKBhrfI6KNv9RjnrgAAAAQ"]
[Fri Feb 27 21:35:01.268048 2026] [:error] [pid 52073:tid 52079] [client 52.138.25.109:23513] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaGdhYa650YPyxXVeRZyrwAAAYM"]
[Fri Feb 27 21:35:01.694519 2026] [:error] [pid 54101:tid 54127] [client 52.138.25.109:23534] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaGdhVY5qgRktcYTGFtMlAAAAdM"]
[Fri Feb 27 21:35:02.110012 2026] [:error] [pid 62998:tid 63019] [client 52.138.25.109:23376] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaGdhlQeueXZDUmoLolZlgAAARE"]
[Fri Feb 27 21:35:02.526471 2026] [:error] [pid 62998:tid 63018] [client 52.138.25.109:23389] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up.php"] [unique_id "aaGdhlQeueXZDUmoLolZmgAAARA"]
[Fri Feb 27 21:35:02.961961 2026] [:error] [pid 54231:tid 54245] [client 52.138.25.109:23465] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up.php"] [unique_id "aaGdhuTvb5AeyJCdY7AfPgAAAEs"]
[Fri Feb 27 21:35:03.384475 2026] [:error] [pid 56075:tid 56096] [client 52.138.25.109:23457] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up.php"] [unique_id "aaGdh8KBhrfI6KNv9RjnwQAAABI"]
[Fri Feb 27 21:35:03.809474 2026] [:error] [pid 54231:tid 54238] [client 52.138.25.109:23448] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up.php"] [unique_id "aaGdh-Tvb5AeyJCdY7AfRQAAAEQ"]
[Fri Feb 27 21:35:04.238701 2026] [:error] [pid 54231:tid 54234] [client 52.138.25.109:23345] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aaGdiOTvb5AeyJCdY7AfTAAAAEA"]
[Fri Feb 27 21:35:04.676834 2026] [:error] [pid 52073:tid 52099] [client 52.138.25.109:23480] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aaGdiIa650YPyxXVeRZyzQAAAZc"]
[Fri Feb 27 21:35:05.101847 2026] [:error] [pid 49306:tid 49322] [client 52.138.25.109:23323] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aaGdifnSUDZue59Px9ssvAAAAU4"]
[Fri Feb 27 21:35:05.516015 2026] [:error] [pid 52073:tid 52096] [client 52.138.25.109:23488] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c.php"] [unique_id "aaGdiYa650YPyxXVeRZy7QAAAZQ"]
[Fri Feb 27 21:35:05.941045 2026] [:error] [pid 54102:tid 54157] [client 52.138.25.109:23485] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaGdiXi74D4fiYUm_Gd8WwAAAI0"]
[Fri Feb 27 21:35:06.355163 2026] [:error] [pid 62998:tid 63011] [client 52.138.25.109:23409] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaGdilQeueXZDUmoLolZpwAAAQk"]
[Fri Feb 27 21:35:06.770262 2026] [:error] [pid 54103:tid 54174] [client 52.138.25.109:23439] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaGdiuvG4MPCmE0B2sCyRwAAAMM"]
[Fri Feb 27 21:35:07.228160 2026] [:error] [pid 56075:tid 56078] [client 52.138.25.109:23310] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaGdi8KBhrfI6KNv9Rjn4QAAAAE"]
[Fri Feb 27 21:35:07.666230 2026] [:error] [pid 56075:tid 56093] [client 52.138.25.109:23363] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aaGdi8KBhrfI6KNv9Rjn7wAAAA8"]
[Fri Feb 27 21:35:08.090822 2026] [:error] [pid 56075:tid 56090] [client 52.138.25.109:23335] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aaGdjMKBhrfI6KNv9Rjn_AAAAAw"]
[Fri Feb 27 21:35:08.528587 2026] [:error] [pid 54103:tid 54170] [client 52.138.25.109:23460] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aaGdjOvG4MPCmE0B2sCyVwAAAMA"]
[Fri Feb 27 21:35:08.952476 2026] [:error] [pid 54103:tid 54188] [client 52.138.25.109:23364] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aaGdjOvG4MPCmE0B2sCyZgAAANE"]
[Fri Feb 27 21:35:09.375514 2026] [:error] [pid 56075:tid 56093] [client 52.138.25.109:23500] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "aaGdjcKBhrfI6KNv9RjoIQAAAA8"]
[Fri Feb 27 21:35:09.798474 2026] [:error] [pid 54103:tid 54191] [client 52.138.25.109:23442] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "aaGdjevG4MPCmE0B2sCyegAAANQ"]
[Fri Feb 27 21:35:10.231340 2026] [:error] [pid 62998:tid 63013] [client 52.138.25.109:23303] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "aaGdjlQeueXZDUmoLolZtAAAAQs"]
[Fri Feb 27 21:35:10.674735 2026] [:error] [pid 56075:tid 56087] [client 52.138.25.109:23507] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "aaGdjsKBhrfI6KNv9RjoUAAAAAo"]
[Fri Feb 27 21:35:11.092803 2026] [:error] [pid 62998:tid 63009] [client 52.138.25.109:23462] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaGdj1QeueXZDUmoLolZuQAAAQc"]
[Fri Feb 27 21:35:11.521886 2026] [:error] [pid 56075:tid 56084] [client 52.138.25.109:23378] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaGdj8KBhrfI6KNv9RjoWQAAAAc"]
[Fri Feb 27 21:35:11.935704 2026] [:error] [pid 54102:tid 54162] [client 52.138.25.109:23313] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaGdj3i74D4fiYUm_Gd8egAAAJI"]
[Fri Feb 27 21:35:12.362813 2026] [:error] [pid 62998:tid 63022] [client 52.138.25.109:23367] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaGdkFQeueXZDUmoLolZxgAAARQ"]
[Fri Feb 27 21:35:12.772034 2026] [:error] [pid 54231:tid 54245] [client 52.138.25.109:23330] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aaGdkOTvb5AeyJCdY7AfkgAAAEs"]
[Fri Feb 27 21:35:13.190665 2026] [:error] [pid 54103:tid 54177] [client 52.138.25.109:23329] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aaGdkevG4MPCmE0B2sCypwAAAMY"]
[Fri Feb 27 21:35:13.604456 2026] [:error] [pid 62998:tid 63025] [client 52.138.25.109:23371] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aaGdkVQeueXZDUmoLolZywAAARc"]
[Fri Feb 27 21:35:14.034891 2026] [:error] [pid 54101:tid 54117] [client 52.138.25.109:23329] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file3.php"] [unique_id "aaGdklY5qgRktcYTGFtMuAAAAck"]
[Fri Feb 27 21:35:14.447427 2026] [:error] [pid 49306:tid 49323] [client 52.138.25.109:23385] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aaGdkvnSUDZue59Px9stOQAAAU8"]
[Fri Feb 27 21:35:14.859771 2026] [:error] [pid 52073:tid 52078] [client 52.138.25.109:23360] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aaGdkoa650YPyxXVeRZzWQAAAYI"]
[Fri Feb 27 21:35:15.275908 2026] [:error] [pid 62998:tid 63024] [client 52.138.25.109:23320] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aaGdk1QeueXZDUmoLolZ4AAAARY"]
[Fri Feb 27 21:35:15.684365 2026] [:error] [pid 62998:tid 63025] [client 52.138.25.109:23406] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "aaGdk1QeueXZDUmoLolZ6QAAARc"]
[Fri Feb 27 21:35:21.849418 2026] [:error] [pid 62998:tid 63008] [client 52.138.25.109:23405] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/index.php"] [unique_id "aaGdmVQeueXZDUmoLolaQQAAAQY"]
[Fri Feb 27 21:35:22.267807 2026] [:error] [pid 52073:tid 52080] [client 52.138.25.109:23307] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/index.php"] [unique_id "aaGdmoa650YPyxXVeRZzlAAAAYQ"]
[Fri Feb 27 21:35:22.711124 2026] [:error] [pid 56075:tid 56084] [client 52.138.25.109:23423] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/index.php"] [unique_id "aaGdmsKBhrfI6KNv9Rjo1AAAAAc"]
[Fri Feb 27 21:35:23.138447 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:23518] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.trash7309/index.php"] [unique_id "aaGdm_nSUDZue59Px9stlAAAAVY"]
[Fri Feb 27 21:35:23.572828 2026] [:error] [pid 56075:tid 56102] [client 52.138.25.109:23382] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aaGdm8KBhrfI6KNv9Rjo3AAAABg"]
[Fri Feb 27 21:35:23.997701 2026] [:error] [pid 54231:tid 54238] [client 52.138.25.109:23459] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aaGdm-Tvb5AeyJCdY7Af6QAAAEQ"]
[Fri Feb 27 21:35:24.414332 2026] [:error] [pid 56075:tid 56086] [client 52.138.25.109:23370] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aaGdnMKBhrfI6KNv9Rjo4QAAAAk"]
[Fri Feb 27 21:35:24.830550 2026] [:error] [pid 56075:tid 56083] [client 52.138.25.109:23547] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah.php"] [unique_id "aaGdnMKBhrfI6KNv9Rjo5QAAAAY"]
[Fri Feb 27 21:35:25.256143 2026] [:error] [pid 56075:tid 56084] [client 52.138.25.109:23336] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaGdncKBhrfI6KNv9Rjo8QAAAAc"]
[Fri Feb 27 21:35:25.676814 2026] [:error] [pid 54103:tid 54178] [client 52.138.25.109:23361] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaGdnevG4MPCmE0B2sCzHQAAAMc"]
[Fri Feb 27 21:35:26.087771 2026] [:error] [pid 56075:tid 56080] [client 52.138.25.109:23337] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaGdnsKBhrfI6KNv9RjpBgAAAAM"]
[Fri Feb 27 21:35:26.501482 2026] [:error] [pid 52073:tid 52076] [client 52.138.25.109:23326] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaGdnoa650YPyxXVeRZzuQAAAYA"]
[Fri Feb 27 21:35:26.917924 2026] [:error] [pid 54103:tid 54172] [client 52.138.25.109:23239] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aaGdnuvG4MPCmE0B2sCzIQAAAME"]
[Fri Feb 27 21:35:27.327558 2026] [:error] [pid 54231:tid 54238] [client 52.138.25.109:23444] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aaGdn-Tvb5AeyJCdY7AgBgAAAEQ"]
[Fri Feb 27 21:35:27.757719 2026] [:error] [pid 56075:tid 56090] [client 52.138.25.109:23308] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aaGdn8KBhrfI6KNv9RjpJwAAAAw"]
[Fri Feb 27 21:35:28.168345 2026] [:error] [pid 54101:tid 54109] [client 52.138.25.109:23365] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "aaGdoFY5qgRktcYTGFtNRQAAAcE"]
[Fri Feb 27 21:35:28.580048 2026] [:error] [pid 56075:tid 56100] [client 52.138.25.109:23404] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/footer.php"] [unique_id "aaGdoMKBhrfI6KNv9RjpOwAAABY"]
[Fri Feb 27 21:35:29.000769 2026] [:error] [pid 62998:tid 63007] [client 52.138.25.109:23387] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/footer.php"] [unique_id "aaGdoFQeueXZDUmoLolafwAAAQU"]
[Fri Feb 27 21:35:29.419465 2026] [:error] [pid 49306:tid 49313] [client 52.138.25.109:23446] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/footer.php"] [unique_id "aaGdofnSUDZue59Px9st1AAAAUU"]
[Fri Feb 27 21:35:29.882133 2026] [:error] [pid 54231:tid 54243] [client 52.138.25.109:23475] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/footer.php"] [unique_id "aaGdoeTvb5AeyJCdY7AgKgAAAEk"]
[Fri Feb 27 21:35:30.312702 2026] [:error] [pid 56075:tid 56097] [client 52.138.25.109:23321] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file8.php"] [unique_id "aaGdosKBhrfI6KNv9RjpWgAAABM"]
[Fri Feb 27 21:35:30.726823 2026] [:error] [pid 49306:tid 49331] [client 52.138.25.109:23279] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file8.php"] [unique_id "aaGdovnSUDZue59Px9st2gAAAVc"]
[Fri Feb 27 21:35:31.190845 2026] [:error] [pid 52073:tid 52079] [client 52.138.25.109:23478] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file8.php"] [unique_id "aaGdo4a650YPyxXVeRZz5QAAAYM"]
[Fri Feb 27 21:35:31.622542 2026] [:error] [pid 54231:tid 54256] [client 52.138.25.109:23328] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file8.php"] [unique_id "aaGdo-Tvb5AeyJCdY7AgVQAAAFY"]
[Fri Feb 27 21:35:32.043469 2026] [:error] [pid 62998:tid 63016] [client 52.138.25.109:23355] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aaGdpFQeueXZDUmoLolapQAAAQ4"]
[Fri Feb 27 21:35:32.474247 2026] [:error] [pid 49306:tid 49311] [client 52.138.25.109:23379] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aaGdpPnSUDZue59Px9st_wAAAUM"]
[Fri Feb 27 21:35:32.887633 2026] [:error] [pid 62998:tid 63002] [client 52.138.25.109:23413] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aaGdpFQeueXZDUmoLolauAAAAQE"]
[Fri Feb 27 21:35:33.307765 2026] [:error] [pid 56075:tid 56096] [client 52.138.25.109:23362] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aaGdpcKBhrfI6KNv9RjpaQAAABI"]
[Fri Feb 27 21:35:33.719934 2026] [:error] [pid 49306:tid 49310] [client 52.138.25.109:23481] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGdpfnSUDZue59Px9suDwAAAUI"]
[Fri Feb 27 21:35:34.144119 2026] [:error] [pid 54102:tid 54162] [client 52.138.25.109:23359] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGdpni74D4fiYUm_Gd9FwAAAJI"]
[Fri Feb 27 21:35:34.557063 2026] [:error] [pid 49306:tid 49314] [client 52.138.25.109:23548] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGdpvnSUDZue59Px9suIQAAAUY"]
[Fri Feb 27 21:35:34.969205 2026] [:error] [pid 49306:tid 49322] [client 52.138.25.109:23384] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGdpvnSUDZue59Px9suMAAAAU4"]
[Fri Feb 27 21:35:35.379870 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:23366] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaGdp_nSUDZue59Px9suQgAAAVY"]
[Fri Feb 27 21:35:35.799036 2026] [:error] [pid 56075:tid 56081] [client 52.138.25.109:23277] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaGdp8KBhrfI6KNv9RjpewAAAAQ"]
[Fri Feb 27 21:35:36.218496 2026] [:error] [pid 56075:tid 56095] [client 52.138.25.109:23416] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaGdqMKBhrfI6KNv9RjpgwAAABE"]
[Fri Feb 27 21:35:36.632242 2026] [:error] [pid 52073:tid 52085] [client 52.138.25.109:23309] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaGdqIa650YPyxXVeRZ0FwAAAYk"]
[Fri Feb 27 21:35:37.050138 2026] [:error] [pid 52073:tid 52091] [client 52.138.25.109:23306] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aaGdqYa650YPyxXVeRZ0HgAAAY8"]
[Fri Feb 27 21:35:37.489337 2026] [:error] [pid 54231:tid 54237] [client 52.138.25.109:23301] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aaGdqeTvb5AeyJCdY7AgzgAAAEM"]
[Fri Feb 27 21:35:37.962876 2026] [:error] [pid 54101:tid 54108] [client 52.138.25.109:23400] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aaGdqVY5qgRktcYTGFtNcQAAAcA"]
[Fri Feb 27 21:35:38.511172 2026] [:error] [pid 54231:tid 54243] [client 52.138.25.109:23302] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aaGdquTvb5AeyJCdY7Ag2QAAAEk"]
[Fri Feb 27 21:35:38.983562 2026] [:error] [pid 54231:tid 54235] [client 52.138.25.109:23332] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aaGdquTvb5AeyJCdY7Ag3QAAAEE"]
[Fri Feb 27 21:35:39.533568 2026] [:error] [pid 56075:tid 56083] [client 52.138.25.109:23414] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aaGdq8KBhrfI6KNv9RjpnwAAAAY"]
[Fri Feb 27 21:35:40.010936 2026] [:error] [pid 52073:tid 52085] [client 52.138.25.109:23256] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aaGdrIa650YPyxXVeRZ0TQAAAYk"]
[Fri Feb 27 21:35:40.471976 2026] [:error] [pid 62998:tid 63010] [client 52.138.25.109:23402] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lc.php"] [unique_id "aaGdrFQeueXZDUmoLolbMAAAAQg"]
[Fri Feb 27 21:35:40.939594 2026] [:error] [pid 54101:tid 54131] [client 52.138.25.109:23417] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aaGdrFY5qgRktcYTGFtNggAAAdc"]
[Fri Feb 27 21:35:41.428763 2026] [:error] [pid 54231:tid 54247] [client 52.138.25.109:23422] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aaGdreTvb5AeyJCdY7AhBgAAAE0"]
[Fri Feb 27 21:35:41.924083 2026] [:error] [pid 54231:tid 54240] [client 52.138.25.109:23390] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aaGdreTvb5AeyJCdY7AhFAAAAEY"]
[Fri Feb 27 21:35:42.453442 2026] [:error] [pid 56075:tid 56099] [client 52.138.25.109:23436] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aaGdrsKBhrfI6KNv9Rjp1gAAABU"]
[Fri Feb 27 21:35:43.024496 2026] [:error] [pid 62998:tid 63026] [client 52.138.25.109:23333] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aaGdr1QeueXZDUmoLolbOwAAARg"]
[Fri Feb 27 21:35:43.991831 2026] [:error] [pid 49306:tid 49308] [client 52.138.25.109:23398] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aaGdr_nSUDZue59Px9su3wAAAUA"]
[Fri Feb 27 21:35:44.706218 2026] [:error] [pid 56075:tid 56078] [client 52.138.25.109:23522] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aaGdsMKBhrfI6KNv9RjqDwAAAAE"]
[Fri Feb 27 21:35:45.123240 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:23407] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aaGdsfnSUDZue59Px9su6QAAAVY"]
[Fri Feb 27 21:35:45.533604 2026] [:error] [pid 62998:tid 63023] [client 52.138.25.109:23456] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "aaGdsVQeueXZDUmoLolbTQAAARU"]
[Fri Feb 27 21:35:45.955921 2026] [:error] [pid 52073:tid 52086] [client 52.138.25.109:23352] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "aaGdsYa650YPyxXVeRZ0nwAAAYo"]
[Fri Feb 27 21:35:46.424229 2026] [:error] [pid 52073:tid 52085] [client 52.138.25.109:23425] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "aaGdsoa650YPyxXVeRZ0pwAAAYk"]
[Fri Feb 27 21:35:46.835704 2026] [:error] [pid 56075:tid 56083] [client 52.138.25.109:23262] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "aaGdssKBhrfI6KNv9RjqQAAAAAY"]
[Fri Feb 27 21:35:47.247297 2026] [:error] [pid 56075:tid 56082] [client 52.138.25.109:23236] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hoot.php"] [unique_id "aaGds8KBhrfI6KNv9RjqRAAAAAU"]
[Fri Feb 27 21:35:47.657653 2026] [:error] [pid 49306:tid 49323] [client 52.138.25.109:23373] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hoot.php"] [unique_id "aaGds_nSUDZue59Px9svCAAAAU8"]
[Fri Feb 27 21:35:48.080181 2026] [:error] [pid 54101:tid 54121] [client 52.138.25.109:23464] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hoot.php"] [unique_id "aaGdtFY5qgRktcYTGFtNsgAAAc0"]
[Fri Feb 27 21:35:48.505438 2026] [:error] [pid 56075:tid 56087] [client 52.138.25.109:23300] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hoot.php"] [unique_id "aaGdtMKBhrfI6KNv9RjqVQAAAAo"]
[Fri Feb 27 21:35:48.917294 2026] [:error] [pid 54103:tid 54173] [client 52.138.25.109:23249] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aaGdtOvG4MPCmE0B2sCzhQAAAMI"]
[Fri Feb 27 21:35:49.339897 2026] [:error] [pid 54101:tid 54114] [client 52.138.25.109:23261] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aaGdtVY5qgRktcYTGFtNuQAAAcY"]
[Fri Feb 27 21:35:49.761855 2026] [:error] [pid 62998:tid 63010] [client 52.138.25.109:23280] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aaGdtVQeueXZDUmoLolbfwAAAQg"]
[Fri Feb 27 21:35:50.174187 2026] [:error] [pid 56075:tid 56102] [client 52.138.25.109:23358] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aaGdtsKBhrfI6KNv9RjqYAAAABg"]
[Fri Feb 27 21:35:50.588511 2026] [:error] [pid 62998:tid 63006] [client 52.138.25.109:23248] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaGdtlQeueXZDUmoLolbjgAAAQQ"]
[Fri Feb 27 21:35:51.001076 2026] [:error] [pid 62998:tid 63020] [client 52.138.25.109:23351] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaGdt1QeueXZDUmoLolbmgAAARI"]
[Fri Feb 27 21:35:51.419435 2026] [:error] [pid 52073:tid 52100] [client 52.138.25.109:23252] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaGdt4a650YPyxXVeRZ09QAAAZg"]
[Fri Feb 27 21:35:51.831304 2026] [:error] [pid 54103:tid 54193] [client 52.138.25.109:23440] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaGdt-vG4MPCmE0B2sCzkQAAANY"]
[Fri Feb 27 21:35:52.242635 2026] [:error] [pid 56075:tid 56084] [client 52.138.25.109:23393] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/golden.php"] [unique_id "aaGduMKBhrfI6KNv9RjqdwAAAAc"]
[Fri Feb 27 21:35:52.654935 2026] [:error] [pid 56075:tid 56101] [client 52.138.25.109:23312] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/golden.php"] [unique_id "aaGduMKBhrfI6KNv9RjqfQAAABc"]
[Fri Feb 27 21:35:53.070603 2026] [:error] [pid 56075:tid 56092] [client 52.138.25.109:23182] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/golden.php"] [unique_id "aaGducKBhrfI6KNv9RjqiAAAAA4"]
[Fri Feb 27 21:35:53.486185 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:23178] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/golden.php"] [unique_id "aaGdufnSUDZue59Px9svQQAAAVY"]
[Fri Feb 27 21:35:53.901054 2026] [:error] [pid 54103:tid 54193] [client 52.138.25.109:23318] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aaGduevG4MPCmE0B2sCzoQAAANY"]
[Fri Feb 27 21:35:54.314230 2026] [:error] [pid 56075:tid 56077] [client 52.138.25.109:23324] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aaGdusKBhrfI6KNv9RjqpwAAAAA"]
[Fri Feb 27 21:35:54.732505 2026] [:error] [pid 54103:tid 54189] [client 52.138.25.109:23415] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aaGduuvG4MPCmE0B2sCzqQAAANI"]
[Fri Feb 27 21:35:55.146362 2026] [:error] [pid 54103:tid 54179] [client 52.138.25.109:23420] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php"] [unique_id "aaGdu-vG4MPCmE0B2sCzrAAAAMg"]
[Fri Feb 27 21:35:55.556545 2026] [:error] [pid 54102:tid 54154] [client 52.138.25.109:23484] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aaGdu3i74D4fiYUm_Gd9wQAAAIo"]
[Fri Feb 27 21:35:55.969221 2026] [:error] [pid 54231:tid 54237] [client 52.138.25.109:23314] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aaGdu-Tvb5AeyJCdY7Ah1QAAAEM"]
[Fri Feb 27 21:35:56.385157 2026] [:error] [pid 54231:tid 54239] [client 52.138.25.109:23255] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aaGdvOTvb5AeyJCdY7Ah2gAAAEU"]
[Fri Feb 27 21:35:56.793576 2026] [:error] [pid 49306:tid 49321] [client 52.138.25.109:23298] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "aaGdvPnSUDZue59Px9svYAAAAU0"]
[Fri Feb 27 21:35:57.206133 2026] [:error] [pid 54102:tid 54159] [client 52.138.25.109:23268] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geju.php"] [unique_id "aaGdvXi74D4fiYUm_Gd90QAAAI8"]
[Fri Feb 27 21:35:57.627334 2026] [:error] [pid 62998:tid 63004] [client 52.138.25.109:23356] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geju.php"] [unique_id "aaGdvVQeueXZDUmoLolb9QAAAQI"]
[Fri Feb 27 21:35:58.055849 2026] [:error] [pid 56075:tid 56087] [client 52.138.25.109:23238] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geju.php"] [unique_id "aaGdvsKBhrfI6KNv9Rjq0AAAAAo"]
[Fri Feb 27 21:35:58.473500 2026] [:error] [pid 56075:tid 56078] [client 52.138.25.109:23473] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geju.php"] [unique_id "aaGdvsKBhrfI6KNv9Rjq2AAAAAE"]
[Fri Feb 27 21:35:58.898961 2026] [:error] [pid 49306:tid 49308] [client 52.138.25.109:23403] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index1.php"] [unique_id "aaGdvvnSUDZue59Px9svaQAAAUA"]
[Fri Feb 27 21:35:59.324334 2026] [:error] [pid 54102:tid 54169] [client 52.138.25.109:23399] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index1.php"] [unique_id "aaGdv3i74D4fiYUm_Gd93gAAAJg"]
[Fri Feb 27 21:35:59.738352 2026] [:error] [pid 52073:tid 52099] [client 52.138.25.109:23317] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index1.php"] [unique_id "aaGdv4a650YPyxXVeRZ1RQAAAZc"]
[Fri Feb 27 21:36:00.171834 2026] [:error] [pid 49306:tid 49310] [client 52.138.25.109:23299] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index1.php"] [unique_id "aaGdwPnSUDZue59Px9svfgAAAUI"]
[Fri Feb 27 21:36:00.591465 2026] [:error] [pid 49306:tid 49323] [client 52.138.25.109:23341] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaGdwPnSUDZue59Px9sviQAAAU8"]
[Fri Feb 27 21:36:01.032635 2026] [:error] [pid 52073:tid 52089] [client 52.138.25.109:23354] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaGdwYa650YPyxXVeRZ1VgAAAY0"]
[Fri Feb 27 21:36:01.505243 2026] [:error] [pid 49306:tid 49330] [client 52.138.25.109:23342] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaGdwfnSUDZue59Px9svnwAAAVY"]
[Fri Feb 27 21:36:01.955533 2026] [:error] [pid 56075:tid 56096] [client 52.138.25.109:23171] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaGdwcKBhrfI6KNv9RjrDgAAABI"]
[Fri Feb 27 21:36:02.397745 2026] [:error] [pid 56075:tid 56101] [client 52.138.25.109:23410] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aaGdwsKBhrfI6KNv9RjrFAAAABc"]
[Fri Feb 27 21:36:02.846744 2026] [:error] [pid 56075:tid 56084] [client 52.138.25.109:23281] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aaGdwsKBhrfI6KNv9RjrIQAAAAc"]
[Fri Feb 27 21:36:03.264662 2026] [:error] [pid 56075:tid 56086] [client 52.138.25.109:23270] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aaGdw8KBhrfI6KNv9RjrMAAAAAk"]
[Fri Feb 27 21:36:03.696558 2026] [:error] [pid 49306:tid 49315] [client 52.138.25.109:23283] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aaGdw_nSUDZue59Px9svxgAAAUc"]
[Fri Feb 27 21:36:04.114007 2026] [:error] [pid 56075:tid 56090] [client 52.138.25.109:23234] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news.php"] [unique_id "aaGdxMKBhrfI6KNv9RjrVAAAAAw"]
[Fri Feb 27 21:36:04.532140 2026] [:error] [pid 54101:tid 54113] [client 52.138.25.109:23266] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news.php"] [unique_id "aaGdxFY5qgRktcYTGFtOEwAAAcU"]
[Fri Feb 27 21:36:04.948760 2026] [:error] [pid 56075:tid 56078] [client 52.138.25.109:23316] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news.php"] [unique_id "aaGdxMKBhrfI6KNv9RjrZwAAAAE"]
[Fri Feb 27 21:36:05.373054 2026] [:error] [pid 54231:tid 54247] [client 52.138.25.109:23169] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news.php"] [unique_id "aaGdxeTvb5AeyJCdY7AiJQAAAE0"]
[Fri Feb 27 21:36:05.787495 2026] [:error] [pid 52073:tid 52078] [client 52.138.25.109:23304] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aaGdxYa650YPyxXVeRZ1fAAAAYI"]
[Fri Feb 27 21:36:06.199800 2026] [:error] [pid 56075:tid 56102] [client 52.138.25.109:23479] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aaGdxsKBhrfI6KNv9RjreAAAABg"]
[Fri Feb 27 21:36:06.614829 2026] [:error] [pid 54231:tid 54235] [client 52.138.25.109:23353] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aaGdxuTvb5AeyJCdY7AiOAAAAEE"]
[Fri Feb 27 21:36:07.027859 2026] [:error] [pid 54231:tid 54240] [client 52.138.25.109:23539] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aaGdx-Tvb5AeyJCdY7AiQAAAAEY"]
[Fri Feb 27 21:36:07.441503 2026] [:error] [pid 54231:tid 54238] [client 52.138.25.109:23197] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaGdx-Tvb5AeyJCdY7AiUQAAAEQ"]
[Fri Feb 27 21:36:07.855032 2026] [:error] [pid 52073:tid 52096] [client 52.138.25.109:23315] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaGdx4a650YPyxXVeRZ1jQAAAZQ"]
[Fri Feb 27 21:36:08.275450 2026] [:error] [pid 52073:tid 52098] [client 52.138.25.109:23327] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaGdyIa650YPyxXVeRZ1lQAAAZY"]
[Fri Feb 27 21:36:08.706886 2026] [:error] [pid 56075:tid 56088] [client 52.138.25.109:23311] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaGdyMKBhrfI6KNv9RjrlQAAAAs"]
[Fri Feb 27 21:36:09.121025 2026] [:error] [pid 56075:tid 56083] [client 52.138.25.109:23194] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mn.php"] [unique_id "aaGdycKBhrfI6KNv9RjrngAAAAY"]
[Fri Feb 27 21:36:09.535885 2026] [:error] [pid 54101:tid 54128] [client 52.138.25.109:23343] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mn.php"] [unique_id "aaGdyVY5qgRktcYTGFtOKAAAAdQ"]
[Fri Feb 27 21:36:09.979371 2026] [:error] [pid 54101:tid 54127] [client 52.138.25.109:23349] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mn.php"] [unique_id "aaGdyVY5qgRktcYTGFtOLwAAAdM"]
[Fri Feb 27 21:36:10.398967 2026] [:error] [pid 54101:tid 54109] [client 52.138.25.109:23284] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mn.php"] [unique_id "aaGdylY5qgRktcYTGFtONAAAAcE"]
[Fri Feb 27 21:36:10.809922 2026] [:error] [pid 49306:tid 49332] [client 52.138.25.109:23350] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaGdyvnSUDZue59Px9swAAAAAVg"]
[Fri Feb 27 21:36:11.228190 2026] [:error] [pid 54103:tid 54170] [client 52.138.25.109:23243] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaGdy-vG4MPCmE0B2sC0AwAAAMA"]
[Fri Feb 27 21:36:11.639106 2026] [:error] [pid 62998:tid 63026] [client 52.138.25.109:23419] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaGdy1QeueXZDUmoLolcYwAAARg"]
[Fri Feb 27 21:36:12.048751 2026] [:error] [pid 62998:tid 63019] [client 52.138.25.109:23285] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaGdzFQeueXZDUmoLolcaQAAARE"]
[Fri Feb 27 21:36:12.462045 2026] [:error] [pid 62998:tid 63017] [client 52.138.25.109:23271] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aaGdzFQeueXZDUmoLolcbgAAAQ8"]
[Fri Feb 27 21:36:12.871093 2026] [:error] [pid 62998:tid 63010] [client 52.138.25.109:23408] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aaGdzFQeueXZDUmoLolcfAAAAQg"]
[Fri Feb 27 21:36:13.296788 2026] [:error] [pid 54231:tid 54252] [client 52.138.25.109:23179] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aaGdzeTvb5AeyJCdY7AiiAAAAFI"]
[Fri Feb 27 21:36:13.706282 2026] [:error] [pid 54103:tid 54173] [client 52.138.25.109:23274] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfile.php"] [unique_id "aaGdzevG4MPCmE0B2sC0OAAAAMI"]
[Fri Feb 27 21:36:14.116788 2026] [:error] [pid 56075:tid 56092] [client 52.138.25.109:23247] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aaGdzsKBhrfI6KNv9Rjr3gAAAA4"]
[Fri Feb 27 21:36:14.546656 2026] [:error] [pid 56075:tid 56096] [client 52.138.25.109:23265] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aaGdzsKBhrfI6KNv9Rjr5QAAABI"]
[Fri Feb 27 21:36:14.969949 2026] [:error] [pid 49306:tid 49322] [client 52.138.25.109:23273] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aaGdzvnSUDZue59Px9swKAAAAU4"]
[Fri Feb 27 21:36:15.395645 2026] [:error] [pid 54231:tid 54243] [client 52.138.25.109:23290] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "aaGdz-Tvb5AeyJCdY7AiogAAAEk"]
[Fri Feb 27 21:36:15.814716 2026] [:error] [pid 56075:tid 56088] [client 52.138.25.109:23235] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aaGdz8KBhrfI6KNv9Rjr8gAAAAs"]
[Fri Feb 27 21:36:16.231441 2026] [:error] [pid 52073:tid 52090] [client 52.138.25.109:23251] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aaGd0Ia650YPyxXVeRZ12gAAAY4"]
[Fri Feb 27 21:36:16.652562 2026] [:error] [pid 49306:tid 49314] [client 52.138.25.109:23322] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aaGd0PnSUDZue59Px9swRAAAAUY"]
[Fri Feb 27 21:36:17.068545 2026] [:error] [pid 52073:tid 52088] [client 52.138.25.109:23237] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aaGd0Ya650YPyxXVeRZ15QAAAYw"]
[Fri Feb 27 21:36:17.487471 2026] [:error] [pid 52073:tid 52099] [client 52.138.25.109:23338] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaGd0Ya650YPyxXVeRZ19QAAAZc"]
[Fri Feb 27 21:36:17.895234 2026] [:error] [pid 54231:tid 54255] [client 52.138.25.109:23259] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaGd0eTvb5AeyJCdY7AiwwAAAFU"]
[Fri Feb 27 21:36:18.309031 2026] [:error] [pid 54103:tid 54190] [client 52.138.25.109:23357] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaGd0uvG4MPCmE0B2sC0UQAAANM"]
[Fri Feb 27 21:36:18.718368 2026] [:error] [pid 62998:tid 63010] [client 52.138.25.109:23305] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaGd0lQeueXZDUmoLolc4QAAAQg"]
[Fri Feb 27 21:36:19.135418 2026] [:error] [pid 54103:tid 54179] [client 52.138.25.109:23111] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaGd0-vG4MPCmE0B2sC0UgAAAMg"]
[Fri Feb 27 21:36:19.549405 2026] [:error] [pid 62998:tid 63011] [client 52.138.25.109:23253] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaGd01QeueXZDUmoLolc8wAAAQk"]
[Fri Feb 27 21:36:19.960491 2026] [:error] [pid 52073:tid 52086] [client 52.138.25.109:23116] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaGd04a650YPyxXVeRZ2DwAAAYo"]
[Fri Feb 27 21:36:20.376229 2026] [:error] [pid 54101:tid 54128] [client 52.138.25.109:23295] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaGd1FY5qgRktcYTGFtOcAAAAdQ"]
[Fri Feb 27 21:36:20.802018 2026] [:error] [pid 54231:tid 54238] [client 52.138.25.109:23488] [client 52.138.25.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "aaGd1OTvb5AeyJCdY7Ai1gAAAEQ"]
[Fri Feb 27 21:54:51.914973 2026] [:error] [pid 54101:tid 54124] [client 43.130.53.252:40540] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaGiK1Y5qgRktcYTGFtR6gAAAdA"]
[Fri Feb 27 22:39:21.870649 2026] [:error] [pid 62998:tid 63022] [client 93.118.41.99:33760] [client 93.118.41.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.118.41.99, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGsmVQeueXZDUmoLol8MgAAARQ"]
[Fri Feb 27 22:43:08.541855 2026] [:error] [pid 54103:tid 54183] [client 20.220.8.221:43910] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaGtfOvG4MPCmE0B2sDHBQAAAMw"]
[Fri Feb 27 22:43:10.278588 2026] [proxy_fcgi:error] [pid 56075:tid 56091] [client 20.220.8.221:43913] AH01071: Got error 'Primary script unknown'
[Fri Feb 27 22:43:10.932721 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:43913] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGtfsKBhrfI6KNv9RhFQwAAABE"]
[Fri Feb 27 22:43:11.767018 2026] [:error] [pid 54102:tid 54151] [client 20.220.8.221:43897] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGtf3i74D4fiYUm_GeMmAAAAIc"]
[Fri Feb 27 22:43:12.615029 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:43924] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGtgMKBhrfI6KNv9RhFTwAAAAM"]
[Fri Feb 27 22:43:13.458756 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:43893] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGtgcKBhrfI6KNv9RhFVAAAAAE"]
[Sat Feb 28 00:14:00.528290 2026] [:error] [pid 56075:tid 56101] [client 20.220.221.45:22417] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHCyMKBhrfI6KNv9RiTYAAAABc"]
[Sat Feb 28 00:14:01.051129 2026] [:error] [pid 56075:tid 56086] [client 20.220.221.45:22411] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHCycKBhrfI6KNv9RiTYwAAAAk"]
[Sat Feb 28 00:14:01.486576 2026] [:error] [pid 62998:tid 63017] [client 20.220.221.45:22495] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHCyVQeueXZDUmoLomfTAAAAQ8"]
[Sat Feb 28 00:14:01.929321 2026] [:error] [pid 52073:tid 52078] [client 20.220.221.45:22514] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaHCyYa650YPyxXVeRYDGAAAAYI"]
[Sat Feb 28 00:59:35.759209 2026] [:error] [pid 15100:tid 15177] [client 20.194.29.45:32657] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Cookie/cloud.php"] [unique_id "aaHNd0OEbzcINan_ctK3UgAAAFE"]
[Sat Feb 28 00:59:36.619275 2026] [:error] [pid 38586:tid 38600] [client 20.194.29.45:21175] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/functions.php"] [unique_id "aaHNeL_i6nvKNhjFW7UsRwAAAQs"]
[Sat Feb 28 00:59:37.646324 2026] [:error] [pid 15100:tid 15167] [client 20.194.29.45:4168] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/flower.php"] [unique_id "aaHNeUOEbzcINan_ctK3WAAAAEc"]
[Sat Feb 28 00:59:38.539847 2026] [:error] [pid 38620:tid 38622] [client 20.194.29.45:11620] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/block-bindings.php"] [unique_id "aaHNegP6I7SRqrhh7RriFwAAAUA"]
[Sat Feb 28 00:59:39.078625 2026] [:error] [pid 38620:tid 38623] [client 20.194.29.45:4205] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/root.php"] [unique_id "aaHNewP6I7SRqrhh7RriGgAAAUE"]
[Sat Feb 28 00:59:39.634506 2026] [proxy_fcgi:error] [pid 15100:tid 15180] [client 20.194.29.45:11595] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 00:59:39.769567 2026] [:error] [pid 15100:tid 15162] [client 20.194.29.45:11595] [client 20.194.29.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "aaHNe0OEbzcINan_ctK3XwAAAEI"]
[Sat Feb 28 00:59:40.385117 2026] [:error] [pid 15099:tid 15152] [client 20.194.29.45:21169] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaHNfOnvP2vtPjYDq_guAAAAANM"]
[Sat Feb 28 00:59:41.562266 2026] [:error] [pid 15098:tid 15128] [client 20.194.29.45:16853] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaHNfckFqny8dQQbmTkdtwAAAJY"]
[Sat Feb 28 00:59:42.112464 2026] [:error] [pid 15100:tid 15160] [client 20.194.29.45:16841] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaHNfkOEbzcINan_ctK3ZwAAAEA"]
[Sat Feb 28 00:59:42.686576 2026] [:error] [pid 15240:tid 15255] [client 20.194.29.45:11593] [client 20.194.29.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaHNfi1iKL_41Rk9A9NkZQAAAA0"]
[Sat Feb 28 01:40:04.461964 2026] [:error] [pid 15099:tid 15153] [client 51.158.204.94:1555] [client 51.158.204.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 51.158.204.94, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHW9OnvP2vtPjYDq_g7uQAAANQ"]
[Sat Feb 28 01:40:05.793731 2026] [:error] [pid 15099:tid 15138] [client 51.158.204.94:1555] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aaHW9envP2vtPjYDq_g7vwAAAMU"]
[Sat Feb 28 01:40:06.787102 2026] [:error] [pid 38620:tid 38643] [client 51.158.204.94:8860] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aaHW9gP6I7SRqrhh7RobIQAAAVU"]
[Sat Feb 28 01:40:07.781279 2026] [:error] [pid 38620:tid 38628] [client 51.158.204.94:14185] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aaHW9wP6I7SRqrhh7RobJQAAAUY"]
[Sat Feb 28 01:40:08.775611 2026] [:error] [pid 38620:tid 38635] [client 51.158.204.94:10971] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aaHW-AP6I7SRqrhh7RobKgAAAU0"]
[Sat Feb 28 01:40:09.768724 2026] [:error] [pid 15240:tid 15256] [client 51.158.204.94:12353] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aaHW-S1iKL_41Rk9A9OC3gAAAA4"]
[Sat Feb 28 01:40:10.765079 2026] [:error] [pid 15240:tid 15250] [client 51.158.204.94:4859] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aaHW-i1iKL_41Rk9A9OC3wAAAAg"]
[Sat Feb 28 01:40:11.758452 2026] [:error] [pid 38586:tid 38610] [client 51.158.204.94:3651] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaHW-7_i6nvKNhjFW7VTcwAAARU"]
[Sat Feb 28 01:40:12.751438 2026] [:error] [pid 38620:tid 38632] [client 51.158.204.94:8217] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaHW_AP6I7SRqrhh7RobTAAAAUo"]
[Sat Feb 28 01:40:13.744426 2026] [:error] [pid 38620:tid 38636] [client 51.158.204.94:12469] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaHW_QP6I7SRqrhh7RobVAAAAU4"]
[Sat Feb 28 01:40:14.736257 2026] [:error] [pid 38620:tid 38629] [client 51.158.204.94:9308] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaHW_gP6I7SRqrhh7RobWAAAAUc"]
[Sat Feb 28 01:40:15.728482 2026] [:error] [pid 38620:tid 38630] [client 51.158.204.94:7537] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaHW_wP6I7SRqrhh7RobXwAAAUg"]
[Sat Feb 28 01:40:16.721078 2026] [:error] [pid 15240:tid 15255] [client 51.158.204.94:9433] [client 51.158.204.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaHXAC1iKL_41Rk9A9OC6gAAAA0"]
[Sat Feb 28 01:57:06.455444 2026] [:error] [pid 15098:tid 15113] [client 91.224.92.164:44068] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aaHa8skFqny8dQQbmTkuEgAAAIc"]
[Sat Feb 28 01:57:07.757608 2026] [:error] [pid 15100:tid 15171] [client 91.224.92.164:21325] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aaHa80OEbzcINan_ctLQvgAAAEs"]
[Sat Feb 28 02:23:15.212223 2026] [:error] [pid 15100:tid 15173] [client 146.190.160.27:65111] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHhE0OEbzcINan_ctLbjAAAAE0"]
[Sat Feb 28 02:23:19.838099 2026] [:error] [pid 15100:tid 15184] [client 146.190.160.27:65111] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaHhF0OEbzcINan_ctLblwAAAFg"]
[Sat Feb 28 02:23:20.773925 2026] [:error] [pid 38620:tid 38635] [client 146.190.160.27:64683] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaHhGAP6I7SRqrhh7RpIqwAAAU0"]
[Sat Feb 28 02:23:21.672234 2026] [:error] [pid 38620:tid 38646] [client 146.190.160.27:50714] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaHhGQP6I7SRqrhh7RpItgAAAVg"]
[Sat Feb 28 02:23:22.524845 2026] [:error] [pid 38620:tid 38633] [client 146.190.160.27:53191] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaHhGgP6I7SRqrhh7RpIvwAAAUs"]
[Sat Feb 28 02:23:23.446112 2026] [:error] [pid 38586:tid 38609] [client 146.190.160.27:55650] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaHhG7_i6nvKNhjFW7VyOAAAARQ"]
[Sat Feb 28 02:23:24.278028 2026] [:error] [pid 38586:tid 38590] [client 146.190.160.27:58078] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaHhHL_i6nvKNhjFW7VyPAAAAQE"]
[Sat Feb 28 02:23:25.104821 2026] [:error] [pid 15240:tid 15249] [client 146.190.160.27:60525] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaHhHS1iKL_41Rk9A9OZyAAAAAc"]
[Sat Feb 28 02:34:53.774432 2026] [:error] [pid 15098:tid 15117] [client 20.220.148.100:44645] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nf.php"] [unique_id "aaHjzckFqny8dQQbmTk3tAAAAIs"]
[Sat Feb 28 02:34:54.938301 2026] [:error] [pid 38620:tid 38638] [client 20.220.148.100:44667] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nf.php"] [unique_id "aaHjzgP6I7SRqrhh7RpVVAAAAVA"]
[Sat Feb 28 02:34:55.822754 2026] [:error] [pid 38620:tid 38640] [client 20.220.148.100:44661] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nf.php"] [unique_id "aaHjzwP6I7SRqrhh7RpVVwAAAVI"]
[Sat Feb 28 02:34:56.440180 2026] [:error] [pid 38620:tid 38629] [client 20.220.148.100:44617] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nf.php"] [unique_id "aaHj0AP6I7SRqrhh7RpVWwAAAUc"]
[Sat Feb 28 02:34:57.205160 2026] [:error] [pid 15240:tid 15243] [client 20.220.148.100:44571] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaHj0S1iKL_41Rk9A9Oe3AAAAAE"]
[Sat Feb 28 02:34:58.444566 2026] [:error] [pid 38620:tid 38645] [client 20.220.148.100:44565] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaHj0gP6I7SRqrhh7RpVcQAAAVc"]
[Sat Feb 28 02:34:59.301590 2026] [:error] [pid 38620:tid 38646] [client 20.220.148.100:44640] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaHj0wP6I7SRqrhh7RpVewAAAVg"]
[Sat Feb 28 02:35:00.044623 2026] [:error] [pid 38586:tid 38595] [client 20.220.148.100:44633] [client 20.220.148.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaHj1L_i6nvKNhjFW7V5swAAAQY"]
[Sat Feb 28 02:43:40.986665 2026] [:error] [pid 38586:tid 38598] [client 146.190.160.27:50144] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHl3L_i6nvKNhjFW7V_RAAAAQk"]
[Sat Feb 28 02:43:44.906853 2026] [:error] [pid 38586:tid 38605] [client 146.190.160.27:50144] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaHl4L_i6nvKNhjFW7V_TwAAARA"]
[Sat Feb 28 02:43:45.893809 2026] [:error] [pid 38620:tid 38638] [client 146.190.160.27:65032] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaHl4QP6I7SRqrhh7Rpd2wAAAVA"]
[Sat Feb 28 02:43:47.300955 2026] [:error] [pid 38620:tid 38628] [client 146.190.160.27:50872] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaHl4wP6I7SRqrhh7Rpd5wAAAUY"]
[Sat Feb 28 02:43:48.224318 2026] [:error] [pid 15240:tid 15249] [client 146.190.160.27:54564] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaHl5C1iKL_41Rk9A9OibAAAAAc"]
[Sat Feb 28 02:43:49.155833 2026] [:error] [pid 38620:tid 38623] [client 146.190.160.27:56860] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaHl5QP6I7SRqrhh7Rpd9QAAAUE"]
[Sat Feb 28 02:43:50.075213 2026] [:error] [pid 38620:tid 38626] [client 146.190.160.27:59129] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaHl5gP6I7SRqrhh7Rpd-AAAAUQ"]
[Sat Feb 28 02:43:50.953976 2026] [:error] [pid 15240:tid 15253] [client 146.190.160.27:61424] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaHl5i1iKL_41Rk9A9OicwAAAAs"]
[Sat Feb 28 03:10:49.887221 2026] [ssl:error] [pid 38620:tid 38645] [client 107.172.180.205:34302] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourcause.com/
[Sat Feb 28 03:57:40.262645 2026] [:error] [pid 39292:tid 39310] [client 43.156.109.53:33630] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaH3NKIAO5fN7BxyqcHQWwAAANA"]
[Sat Feb 28 04:01:44.208645 2026] [:error] [pid 39292:tid 39316] [client 20.220.8.221:43465] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaH4KKIAO5fN7BxyqcHUeQAAANY"]
[Sat Feb 28 04:01:45.699594 2026] [:error] [pid 39185:tid 39256] [client 20.220.8.221:43803] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aaH4KRVE-FfM89u7BQb-2gAAAIo"]
[Sat Feb 28 04:01:46.523845 2026] [:error] [pid 39185:tid 39270] [client 20.220.8.221:43783] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aaH4KhVE-FfM89u7BQb-2wAAAJg"]
[Sat Feb 28 04:01:47.367944 2026] [:error] [pid 39292:tid 39309] [client 20.220.8.221:43816] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aaH4K6IAO5fN7BxyqcHUlgAAAM8"]
[Sat Feb 28 04:01:48.191772 2026] [:error] [pid 39292:tid 39307] [client 20.220.8.221:43487] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aaH4LKIAO5fN7BxyqcHUnQAAAM0"]
[Sat Feb 28 04:38:44.773893 2026] [:error] [pid 11791:tid 11806] [client 146.190.160.27:56684] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaIA1GuX5e1Q32gqxH1hgAAAAQ0"]
[Sat Feb 28 04:38:46.842357 2026] [:error] [pid 11791:tid 11803] [client 146.190.160.27:56684] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaIA1muX5e1Q32gqxH1hlwAAAQo"]
[Sat Feb 28 04:38:47.494755 2026] [:error] [pid 11791:tid 11808] [client 146.190.160.27:62644] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaIA12uX5e1Q32gqxH1hnQAAAQ8"]
[Sat Feb 28 04:38:48.148556 2026] [:error] [pid 11791:tid 11813] [client 146.190.160.27:55573] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaIA2GuX5e1Q32gqxH1hogAAARQ"]
[Sat Feb 28 04:38:48.801552 2026] [:error] [pid 11791:tid 11803] [client 146.190.160.27:50550] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaIA2GuX5e1Q32gqxH1hqAAAAQo"]
[Sat Feb 28 04:38:49.455140 2026] [:error] [pid 11791:tid 11801] [client 146.190.160.27:64511] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaIA2WuX5e1Q32gqxH1hsAAAAQg"]
[Sat Feb 28 04:38:50.106892 2026] [:error] [pid 39184:tid 39231] [client 146.190.160.27:64468] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaIA2ltZF9Zd_U7easATQwAAAEw"]
[Sat Feb 28 04:38:50.757466 2026] [:error] [pid 39183:tid 39206] [client 146.190.160.27:63435] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaIA2hCf4HvhVePw3LZNQwAAAA4"]
[Sat Feb 28 05:07:41.242680 2026] [:error] [pid 39292:tid 39316] [client 104.248.163.215:55650] [client 104.248.163.215] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.163.215, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaIHnaIAO5fN7BxyqcERvwAAANY"]
[Sat Feb 28 05:18:36.849088 2026] [:error] [pid 39292:tid 39294] [client 20.220.212.70:24958] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIKLKIAO5fN7BxyqcEcyAAAAMA"]
[Sat Feb 28 05:18:37.700511 2026] [:error] [pid 39185:tid 39268] [client 20.220.212.70:24920] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIKLRVE-FfM89u7BQYwxAAAAJY"]
[Sat Feb 28 05:18:38.557909 2026] [:error] [pid 39292:tid 39309] [client 20.220.212.70:24957] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIKLqIAO5fN7BxyqcEczAAAAM8"]
[Sat Feb 28 05:18:39.404622 2026] [:error] [pid 39292:tid 39314] [client 20.220.212.70:24923] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIKL6IAO5fN7BxyqcEc0AAAANQ"]
[Sat Feb 28 05:51:41.012339 2026] [:error] [pid 11791:tid 11794] [client 20.104.124.39:2176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaIR7WuX5e1Q32gqxH2WTAAAAQE"]
[Sat Feb 28 05:51:41.859202 2026] [:error] [pid 22194:tid 22216] [client 20.104.124.39:2256] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaIR7X6mbajs3bzQGyvl3wAAAVQ"]
[Sat Feb 28 05:51:42.772171 2026] [:error] [pid 22194:tid 22199] [client 20.104.124.39:2283] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaIR7n6mbajs3bzQGyvl5gAAAUM"]
[Sat Feb 28 05:51:43.300177 2026] [:error] [pid 39185:tid 39256] [client 20.104.124.39:2207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaIR7xVE-FfM89u7BQZA5QAAAIo"]
[Sat Feb 28 05:51:43.796360 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:2275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaIR7xVE-FfM89u7BQZA6QAAAIw"]
[Sat Feb 28 05:51:44.259029 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:2299] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaIR8KIAO5fN7BxyqcE_5QAAANA"]
[Sat Feb 28 05:51:44.739535 2026] [:error] [pid 39292:tid 39296] [client 20.104.124.39:2198] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaIR8KIAO5fN7BxyqcE_7AAAAMI"]
[Sat Feb 28 05:51:45.263611 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:2241] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaIR8aIAO5fN7BxyqcE_8wAAANY"]
[Sat Feb 28 05:51:46.050063 2026] [:error] [pid 39183:tid 39195] [client 20.104.124.39:2181] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaIR8hCf4HvhVePw3LZjcgAAAAM"]
[Sat Feb 28 05:51:46.709578 2026] [:error] [pid 39185:tid 39259] [client 20.104.124.39:2282] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaIR8hVE-FfM89u7BQZA8gAAAI0"]
[Sat Feb 28 05:51:47.739733 2026] [:error] [pid 39292:tid 39303] [client 20.104.124.39:2200] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaIR86IAO5fN7BxyqcFABgAAAMk"]
[Sat Feb 28 05:51:48.507175 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:2278] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaIR9KIAO5fN7BxyqcFADAAAAMw"]
[Sat Feb 28 05:51:49.392943 2026] [:error] [pid 39185:tid 39255] [client 20.104.124.39:2223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaIR9RVE-FfM89u7BQZA-AAAAIk"]
[Sat Feb 28 05:51:50.317146 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:2193] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaIR9qIAO5fN7BxyqcFAHwAAAMc"]
[Sat Feb 28 05:51:50.898158 2026] [:error] [pid 39183:tid 39203] [client 20.104.124.39:2215] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaIR9hCf4HvhVePw3LZjeQAAAAs"]
[Sat Feb 28 05:51:51.621294 2026] [:error] [pid 39183:tid 39216] [client 20.104.124.39:2244] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaIR9xCf4HvhVePw3LZjfwAAABg"]
[Sat Feb 28 05:51:52.117062 2026] [:error] [pid 39184:tid 39227] [client 20.104.124.39:2199] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaIR-FtZF9Zd_U7easAuCgAAAEg"]
[Sat Feb 28 05:51:52.578142 2026] [:error] [pid 22194:tid 22196] [client 20.104.124.39:2197] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaIR-H6mbajs3bzQGyvl9QAAAUA"]
[Sat Feb 28 05:51:53.089488 2026] [:error] [pid 22194:tid 22199] [client 20.104.124.39:2301] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaIR-X6mbajs3bzQGyvl-AAAAUM"]
[Sat Feb 28 05:51:53.850442 2026] [:error] [pid 22194:tid 22210] [client 20.104.124.39:2205] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaIR-X6mbajs3bzQGyvmAAAAAU4"]
[Sat Feb 28 05:51:54.556305 2026] [:error] [pid 39183:tid 39200] [client 20.104.124.39:2254] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaIR-hCf4HvhVePw3LZjiQAAAAg"]
[Sat Feb 28 05:51:55.178084 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:2246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaIR-36mbajs3bzQGyvmCAAAAUg"]
[Sat Feb 28 05:51:55.884731 2026] [:error] [pid 39183:tid 39198] [client 20.104.124.39:2263] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaIR-xCf4HvhVePw3LZjjAAAAAY"]
[Sat Feb 28 05:51:56.624350 2026] [:error] [pid 22194:tid 22197] [client 20.104.124.39:33088] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaIR_H6mbajs3bzQGyvmEAAAAUE"]
[Sat Feb 28 05:51:57.303092 2026] [:error] [pid 39185:tid 39261] [client 20.104.124.39:2212] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaIR_RVE-FfM89u7BQZBAwAAAI8"]
[Sat Feb 28 05:51:57.962635 2026] [:error] [pid 39292:tid 39303] [client 20.104.124.39:2284] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaIR_aIAO5fN7BxyqcFAJwAAAMk"]
[Sat Feb 28 05:51:59.020629 2026] [:error] [pid 11791:tid 11794] [client 20.104.124.39:2237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaIR_2uX5e1Q32gqxH2WXgAAAQE"]
[Sat Feb 28 05:51:59.591265 2026] [:error] [pid 11791:tid 11801] [client 20.104.124.39:2290] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaIR_2uX5e1Q32gqxH2WXwAAAQg"]
[Sat Feb 28 05:52:00.565249 2026] [:error] [pid 39183:tid 39197] [client 20.104.124.39:2253] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaISABCf4HvhVePw3LZjjwAAAAU"]
[Sat Feb 28 05:52:01.124485 2026] [:error] [pid 11791:tid 11816] [client 20.104.124.39:2187] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaISAWuX5e1Q32gqxH2WawAAARc"]
[Sat Feb 28 05:52:02.052451 2026] [:error] [pid 11791:tid 11798] [client 20.104.124.39:2262] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaISAmuX5e1Q32gqxH2WcwAAAQU"]
[Sat Feb 28 05:52:02.805204 2026] [:error] [pid 39183:tid 39212] [client 20.104.124.39:2191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaISAhCf4HvhVePw3LZjlgAAABQ"]
[Sat Feb 28 05:52:03.481593 2026] [:error] [pid 39292:tid 39297] [client 20.104.124.39:2292] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaISA6IAO5fN7BxyqcFAQQAAAMM"]
[Sat Feb 28 05:52:04.065808 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:33105] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaISBKIAO5fN7BxyqcFARgAAAMg"]
[Sat Feb 28 05:52:04.610099 2026] [:error] [pid 22194:tid 22205] [client 20.104.124.39:2285] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaISBH6mbajs3bzQGyvmHwAAAUk"]
[Sat Feb 28 05:52:05.488908 2026] [:error] [pid 22194:tid 22207] [client 20.104.124.39:33115] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaISBX6mbajs3bzQGyvmJAAAAUs"]
[Sat Feb 28 05:52:06.077486 2026] [:error] [pid 39183:tid 39213] [client 20.104.124.39:2272] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaISBhCf4HvhVePw3LZjmAAAABU"]
[Sat Feb 28 05:52:06.582004 2026] [:error] [pid 39185:tid 39253] [client 20.104.124.39:2300] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaISBhVE-FfM89u7BQZBGgAAAIc"]
[Sat Feb 28 05:52:07.137941 2026] [:error] [pid 39183:tid 39193] [client 20.104.124.39:2201] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaISBxCf4HvhVePw3LZjnAAAAAE"]
[Sat Feb 28 05:52:07.737077 2026] [:error] [pid 22194:tid 22219] [client 20.104.124.39:33125] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaISB36mbajs3bzQGyvmMwAAAVc"]
[Sat Feb 28 05:52:08.305904 2026] [:error] [pid 39185:tid 39254] [client 20.104.124.39:2259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaISCBVE-FfM89u7BQZBIQAAAIg"]
[Sat Feb 28 05:52:08.736957 2026] [:error] [pid 39185:tid 39263] [client 20.104.124.39:2297] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaISCBVE-FfM89u7BQZBKQAAAJE"]
[Sat Feb 28 05:52:09.432975 2026] [:error] [pid 39185:tid 39254] [client 20.104.124.39:2214] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaISCRVE-FfM89u7BQZBMQAAAIg"]
[Sat Feb 28 05:52:09.946693 2026] [:error] [pid 39185:tid 39268] [client 20.104.124.39:2279] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaISCRVE-FfM89u7BQZBOQAAAJY"]
[Sat Feb 28 05:52:10.414914 2026] [:error] [pid 39185:tid 39246] [client 20.104.124.39:2245] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaISChVE-FfM89u7BQZBQAAAAIA"]
[Sat Feb 28 05:52:10.963912 2026] [:error] [pid 22194:tid 22203] [client 20.104.124.39:2204] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaISCn6mbajs3bzQGyvmPAAAAUc"]
[Sat Feb 28 05:52:11.488450 2026] [:error] [pid 11791:tid 11801] [client 20.104.124.39:2183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaISC2uX5e1Q32gqxH2WfwAAAQg"]
[Sat Feb 28 05:52:12.070117 2026] [:error] [pid 11791:tid 11794] [client 20.104.124.39:33127] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaISDGuX5e1Q32gqxH2WggAAAQE"]
[Sat Feb 28 05:52:12.660893 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:2189] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaISDKIAO5fN7BxyqcFAVAAAAMc"]
[Sat Feb 28 05:52:13.259832 2026] [:error] [pid 39292:tid 39312] [client 20.104.124.39:2264] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaISDaIAO5fN7BxyqcFAWgAAANI"]
[Sat Feb 28 05:52:14.910917 2026] [:error] [pid 39292:tid 39308] [client 20.104.124.39:2202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaISDqIAO5fN7BxyqcFAaQAAAM4"]
[Sat Feb 28 05:52:15.477880 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:33134] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaISD6IAO5fN7BxyqcFAcQAAAMY"]
[Sat Feb 28 05:52:15.977432 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:2213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaISD6IAO5fN7BxyqcFAdgAAAMw"]
[Sat Feb 28 05:52:16.544018 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:33114] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaISEKIAO5fN7BxyqcFAeQAAAM8"]
[Sat Feb 28 05:52:17.382970 2026] [:error] [pid 39292:tid 39307] [client 20.104.124.39:2287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaISEaIAO5fN7BxyqcFAgwAAAM0"]
[Sat Feb 28 05:52:17.911639 2026] [:error] [pid 39185:tid 39264] [client 20.104.124.39:33130] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaISERVE-FfM89u7BQZBVwAAAJI"]
[Sat Feb 28 05:52:18.483664 2026] [:error] [pid 39292:tid 39304] [client 20.104.124.39:33102] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaISEqIAO5fN7BxyqcFAhwAAAMo"]
[Sat Feb 28 05:52:19.053073 2026] [:error] [pid 11791:tid 11814] [client 20.104.124.39:2236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaISE2uX5e1Q32gqxH2WkgAAARU"]
[Sat Feb 28 05:52:19.661977 2026] [:error] [pid 39184:tid 39229] [client 20.104.124.39:2233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaISE1tZF9Zd_U7easAuQAAAAEo"]
[Sat Feb 28 05:52:20.211152 2026] [:error] [pid 39292:tid 39312] [client 20.104.124.39:2258] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaISFKIAO5fN7BxyqcFAkAAAANI"]
[Sat Feb 28 05:52:20.742669 2026] [:error] [pid 39292:tid 39304] [client 20.104.124.39:2294] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/m.php"] [unique_id "aaISFKIAO5fN7BxyqcFAlQAAAMo"]
[Sat Feb 28 05:52:21.251559 2026] [:error] [pid 39292:tid 39295] [client 20.104.124.39:2177] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/m.php"] [unique_id "aaISFaIAO5fN7BxyqcFAnAAAAME"]
[Sat Feb 28 05:52:21.901934 2026] [:error] [pid 39184:tid 39224] [client 20.104.124.39:2289] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/m.php"] [unique_id "aaISFVtZF9Zd_U7easAuRQAAAEU"]
[Sat Feb 28 05:52:22.536968 2026] [:error] [pid 39183:tid 39216] [client 20.104.124.39:33119] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/m.php"] [unique_id "aaISFhCf4HvhVePw3LZjtAAAABg"]
[Sat Feb 28 05:52:23.690690 2026] [:error] [pid 39184:tid 39237] [client 20.104.124.39:2180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aaISF1tZF9Zd_U7easAuTAAAAFI"]
[Sat Feb 28 05:52:24.601959 2026] [:error] [pid 11791:tid 11803] [client 20.104.124.39:2276] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aaISGGuX5e1Q32gqxH2WnQAAAQo"]
[Sat Feb 28 05:52:25.359831 2026] [:error] [pid 39183:tid 39216] [client 20.104.124.39:33126] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aaISGRCf4HvhVePw3LZjxQAAABg"]
[Sat Feb 28 05:52:26.147319 2026] [:error] [pid 39185:tid 39260] [client 20.104.124.39:2222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aaISGhVE-FfM89u7BQZBYgAAAI4"]
[Sat Feb 28 05:52:26.729735 2026] [:error] [pid 11791:tid 11813] [client 20.104.124.39:33109] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaISGmuX5e1Q32gqxH2WpwAAARQ"]
[Sat Feb 28 05:52:27.400829 2026] [:error] [pid 22194:tid 22203] [client 20.104.124.39:2252] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaISG36mbajs3bzQGyvmYwAAAUc"]
[Sat Feb 28 05:52:28.245307 2026] [:error] [pid 39185:tid 39256] [client 20.104.124.39:2225] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaISHBVE-FfM89u7BQZBaQAAAIo"]
[Sat Feb 28 05:52:29.073771 2026] [:error] [pid 39184:tid 39223] [client 20.104.124.39:2211] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaISHVtZF9Zd_U7easAuUwAAAEQ"]
[Sat Feb 28 05:52:29.631524 2026] [:error] [pid 22194:tid 22212] [client 20.104.124.39:2280] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaISHX6mbajs3bzQGyvmbgAAAVA"]
[Sat Feb 28 05:52:30.173519 2026] [:error] [pid 22194:tid 22203] [client 20.104.124.39:2184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaISHn6mbajs3bzQGyvmcQAAAUc"]
[Sat Feb 28 05:52:30.674302 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:2186] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaISHqIAO5fN7BxyqcFAsgAAANA"]
[Sat Feb 28 05:52:31.390868 2026] [:error] [pid 11791:tid 11794] [client 20.104.124.39:33101] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aaISH2uX5e1Q32gqxH2WrgAAAQE"]
[Sat Feb 28 05:52:31.945562 2026] [:error] [pid 22194:tid 22210] [client 20.104.124.39:2206] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaISH36mbajs3bzQGyvmdwAAAU4"]
[Sat Feb 28 05:52:32.471636 2026] [:error] [pid 39185:tid 39269] [client 20.104.124.39:2239] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaISIBVE-FfM89u7BQZBbgAAAJc"]
[Sat Feb 28 05:52:33.145081 2026] [:error] [pid 11791:tid 11795] [client 20.104.124.39:2249] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaISIWuX5e1Q32gqxH2WsgAAAQI"]
[Sat Feb 28 05:52:33.886488 2026] [:error] [pid 39292:tid 39304] [client 20.104.124.39:2216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaISIaIAO5fN7BxyqcFAwgAAAMo"]
[Sat Feb 28 05:52:34.807835 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:2296] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaISIqIAO5fN7BxyqcFAywAAAMw"]
[Sat Feb 28 05:52:35.616135 2026] [:error] [pid 11791:tid 11815] [client 20.104.124.39:2232] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaISI2uX5e1Q32gqxH2WswAAARY"]
[Sat Feb 28 05:52:36.216819 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:33118] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaISJH6mbajs3bzQGyvmhwAAAUg"]
[Sat Feb 28 05:52:37.149629 2026] [:error] [pid 39185:tid 39256] [client 20.104.124.39:2247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaISJRVE-FfM89u7BQZBeQAAAIo"]
[Sat Feb 28 05:52:37.849655 2026] [:error] [pid 22194:tid 22218] [client 20.104.124.39:33097] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaISJX6mbajs3bzQGyvmjwAAAVY"]
[Sat Feb 28 05:52:38.689360 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:33037] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaISJn6mbajs3bzQGyvmlwAAAUg"]
[Sat Feb 28 05:52:39.186133 2026] [:error] [pid 11791:tid 11802] [client 20.104.124.39:2182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaISJ2uX5e1Q32gqxH2WuQAAAQk"]
[Sat Feb 28 05:52:39.853726 2026] [:error] [pid 39292:tid 39303] [client 20.104.124.39:2196] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaISJ6IAO5fN7BxyqcFA9AAAAMk"]
[Sat Feb 28 05:52:43.566959 2026] [:error] [pid 39184:tid 39239] [client 20.104.124.39:2265] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaISK1tZF9Zd_U7easAucQAAAFQ"]
[Sat Feb 28 05:52:48.324098 2026] [:error] [pid 39185:tid 39251] [client 20.104.124.39:2231] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaISMBVE-FfM89u7BQZBjQAAAIU"]
[Sat Feb 28 05:52:48.903750 2026] [:error] [pid 22194:tid 22213] [client 20.104.124.39:33148] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaISMH6mbajs3bzQGyvmrQAAAVE"]
[Sat Feb 28 05:52:49.449801 2026] [:error] [pid 39292:tid 39307] [client 20.104.124.39:2288] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaISMaIAO5fN7BxyqcFBVAAAAM0"]
[Sat Feb 28 05:52:49.988187 2026] [:error] [pid 39184:tid 39233] [client 20.104.124.39:2228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaISMVtZF9Zd_U7easAuewAAAE4"]
[Sat Feb 28 05:52:50.891405 2026] [:error] [pid 39183:tid 39204] [client 20.104.124.39:2185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaISMhCf4HvhVePw3LZj6wAAAAw"]
[Sat Feb 28 05:52:52.042763 2026] [:error] [pid 39292:tid 39303] [client 20.104.124.39:2293] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaISNKIAO5fN7BxyqcFBbgAAAMk"]
[Sat Feb 28 05:52:52.716063 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:2194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaISNKIAO5fN7BxyqcFBeAAAAMw"]
[Sat Feb 28 05:52:53.470966 2026] [:error] [pid 22194:tid 22205] [client 20.104.124.39:33092] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaISNX6mbajs3bzQGyvmsgAAAUk"]
[Sat Feb 28 05:52:54.800678 2026] [:error] [pid 39292:tid 39297] [client 20.104.124.39:33116] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaISNqIAO5fN7BxyqcFBlwAAAMM"]
[Sat Feb 28 05:52:55.666355 2026] [:error] [pid 11791:tid 11814] [client 20.104.124.39:2273] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaISN2uX5e1Q32gqxH2W3QAAARU"]
[Sat Feb 28 05:52:56.524090 2026] [:error] [pid 11791:tid 11808] [client 20.104.124.39:2224] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaISOGuX5e1Q32gqxH2W3gAAAQ8"]
[Sat Feb 28 05:52:57.306447 2026] [:error] [pid 39185:tid 39250] [client 20.104.124.39:33106] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaISORVE-FfM89u7BQZBkQAAAIQ"]
[Sat Feb 28 05:52:58.020022 2026] [:error] [pid 39292:tid 39308] [client 20.104.124.39:33030] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaISOqIAO5fN7BxyqcFBvAAAAM4"]
[Sat Feb 28 05:52:58.585362 2026] [:error] [pid 11791:tid 11798] [client 20.104.124.39:2274] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaISOmuX5e1Q32gqxH2W5wAAAQU"]
[Sat Feb 28 05:52:59.271778 2026] [:error] [pid 39292:tid 39311] [client 20.104.124.39:33104] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaISO6IAO5fN7BxyqcFByQAAANE"]
[Sat Feb 28 05:53:00.164595 2026] [:error] [pid 11791:tid 11816] [client 20.104.124.39:2281] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaISPGuX5e1Q32gqxH2W7gAAARc"]
[Sat Feb 28 05:53:01.032134 2026] [:error] [pid 39185:tid 39247] [client 20.104.124.39:2250] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaISPRVE-FfM89u7BQZBlwAAAIE"]
[Sat Feb 28 05:53:01.589892 2026] [:error] [pid 39185:tid 39256] [client 20.104.124.39:2248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaISPRVE-FfM89u7BQZBnAAAAIo"]
[Sat Feb 28 05:53:02.254875 2026] [:error] [pid 39185:tid 39251] [client 20.104.124.39:2226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaISPhVE-FfM89u7BQZBnwAAAIU"]
[Sat Feb 28 05:53:02.944962 2026] [:error] [pid 39185:tid 39252] [client 20.104.124.39:33031] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaISPhVE-FfM89u7BQZBogAAAIY"]
[Sat Feb 28 05:53:04.020909 2026] [:error] [pid 39292:tid 39299] [client 20.104.124.39:2267] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaISQKIAO5fN7BxyqcFB7QAAAMU"]
[Sat Feb 28 05:53:05.182262 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:33024] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaISQaIAO5fN7BxyqcFB9wAAAMc"]
[Sat Feb 28 05:53:06.598617 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:2203] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaISQhVE-FfM89u7BQZBqgAAAIw"]
[Sat Feb 28 05:53:08.368250 2026] [:error] [pid 39292:tid 39298] [client 20.104.124.39:33108] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaISRKIAO5fN7BxyqcFCEgAAAMQ"]
[Sat Feb 28 05:53:09.554374 2026] [:error] [pid 39292:tid 39298] [client 20.104.124.39:33131] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaISRaIAO5fN7BxyqcFCIQAAAMQ"]
[Sat Feb 28 05:53:10.561791 2026] [:error] [pid 11791:tid 11796] [client 20.104.124.39:33128] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaISRmuX5e1Q32gqxH2W9wAAAQM"]
[Sat Feb 28 05:53:11.492818 2026] [:error] [pid 39292:tid 39296] [client 20.104.124.39:33144] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaISR6IAO5fN7BxyqcFCLAAAAMI"]
[Sat Feb 28 05:53:12.565431 2026] [:error] [pid 39292:tid 39294] [client 20.104.124.39:2257] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaISSKIAO5fN7BxyqcFCMAAAAMA"]
[Sat Feb 28 05:53:13.010463 2026] [:error] [pid 39183:tid 39194] [client 20.104.124.39:33151] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaISSRCf4HvhVePw3LZj_QAAAAI"]
[Sat Feb 28 05:53:13.798753 2026] [:error] [pid 39292:tid 39317] [client 20.104.124.39:2208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaISSaIAO5fN7BxyqcFCPQAAANc"]
[Sat Feb 28 05:53:14.542179 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:33141] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaISSqIAO5fN7BxyqcFCSwAAAMc"]
[Sat Feb 28 05:53:15.306007 2026] [:error] [pid 39184:tid 39236] [client 20.104.124.39:33033] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaISS1tZF9Zd_U7easAukAAAAFE"]
[Sat Feb 28 05:53:15.930497 2026] [:error] [pid 22194:tid 22196] [client 20.104.124.39:2179] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaISS36mbajs3bzQGyvm0QAAAUA"]
[Sat Feb 28 05:53:17.094596 2026] [:error] [pid 39184:tid 39221] [client 20.104.124.39:2270] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaISTVtZF9Zd_U7easAumAAAAEI"]
[Sat Feb 28 05:53:18.277751 2026] [:error] [pid 11791:tid 11806] [client 20.104.124.39:2295] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaISTmuX5e1Q32gqxH2XGgAAAQ0"]
[Sat Feb 28 05:53:19.397076 2026] [:error] [pid 22194:tid 22202] [client 20.104.124.39:2240] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aaIST36mbajs3bzQGyvm3gAAAUY"]
[Sat Feb 28 05:53:20.496826 2026] [:error] [pid 39184:tid 39225] [client 20.104.124.39:33051] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaISUFtZF9Zd_U7easAuoAAAAEY"]
[Sat Feb 28 05:53:21.909624 2026] [:error] [pid 39185:tid 39264] [client 20.104.124.39:33103] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaISURVE-FfM89u7BQZBuQAAAJI"]
[Sat Feb 28 05:53:23.415528 2026] [:error] [pid 22194:tid 22216] [client 20.104.124.39:2261] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaISU36mbajs3bzQGyvm7AAAAVQ"]
[Sat Feb 28 05:53:24.610659 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:2195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaISVH6mbajs3bzQGyvm7gAAAUI"]
[Sat Feb 28 05:53:25.525874 2026] [:error] [pid 22194:tid 22213] [client 20.104.124.39:33026] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaISVX6mbajs3bzQGyvm9gAAAVE"]
[Sat Feb 28 05:53:26.606653 2026] [:error] [pid 22194:tid 22216] [client 20.104.124.39:2247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaISVn6mbajs3bzQGyvm_gAAAVQ"]
[Sat Feb 28 05:53:27.226255 2026] [:error] [pid 39183:tid 39198] [client 20.104.124.39:33110] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaISVxCf4HvhVePw3LZkEQAAAAY"]
[Sat Feb 28 05:53:28.036750 2026] [:error] [pid 22194:tid 22212] [client 20.104.124.39:33095] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaISWH6mbajs3bzQGyvnAwAAAVA"]
[Sat Feb 28 05:53:28.762198 2026] [:error] [pid 22194:tid 22200] [client 20.104.124.39:33124] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaISWH6mbajs3bzQGyvnDAAAAUQ"]
[Sat Feb 28 05:53:29.496516 2026] [:error] [pid 39184:tid 39222] [client 20.104.124.39:33113] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaISWVtZF9Zd_U7easAurgAAAEM"]
[Sat Feb 28 05:53:30.436677 2026] [:error] [pid 39183:tid 39201] [client 20.104.124.39:2219] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaISWhCf4HvhVePw3LZkFwAAAAk"]
[Sat Feb 28 05:53:31.261854 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:33033] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aaISW36mbajs3bzQGyvnGwAAAUg"]
[Sat Feb 28 05:53:31.936715 2026] [:error] [pid 39292:tid 39294] [client 20.104.124.39:2302] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaISW6IAO5fN7BxyqcFCwAAAAMA"]
[Sat Feb 28 05:53:32.681171 2026] [:error] [pid 39185:tid 39246] [client 20.104.124.39:2268] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaISXBVE-FfM89u7BQZB3gAAAIA"]
[Sat Feb 28 05:53:33.953265 2026] [:error] [pid 39292:tid 39307] [client 20.104.124.39:2190] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaISXaIAO5fN7BxyqcFCywAAAM0"]
[Sat Feb 28 05:53:34.480324 2026] [:error] [pid 22194:tid 22215] [client 20.104.124.39:2178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaISXn6mbajs3bzQGyvnJAAAAVM"]
[Sat Feb 28 05:53:35.476033 2026] [:error] [pid 39184:tid 39220] [client 20.104.124.39:33064] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaISX1tZF9Zd_U7easAutgAAAEE"]
[Sat Feb 28 05:53:36.302471 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:33089] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaISYKIAO5fN7BxyqcFC2gAAAMw"]
[Sat Feb 28 05:53:37.078999 2026] [:error] [pid 11791:tid 11799] [client 20.104.124.39:2238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaISYWuX5e1Q32gqxH2XTgAAAQY"]
[Sat Feb 28 05:53:38.157739 2026] [:error] [pid 11791:tid 11816] [client 20.104.124.39:33094] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaISYmuX5e1Q32gqxH2XWgAAARc"]
[Sat Feb 28 05:53:39.365091 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:2227] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaISY6IAO5fN7BxyqcFC7AAAAMw"]
[Sat Feb 28 05:53:40.182068 2026] [:error] [pid 22194:tid 22214] [client 20.104.124.39:33058] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaISZH6mbajs3bzQGyvnPgAAAVI"]
[Sat Feb 28 05:53:40.963709 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:33100] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaISZKIAO5fN7BxyqcFC_QAAANQ"]
[Sat Feb 28 05:53:42.507935 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:33140] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aaISZqIAO5fN7BxyqcFDAwAAAMY"]
[Sat Feb 28 05:53:43.287342 2026] [:error] [pid 11791:tid 11807] [client 20.104.124.39:33078] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaISZ2uX5e1Q32gqxH2XbgAAAQ4"]
[Sat Feb 28 05:53:44.607112 2026] [:error] [pid 39184:tid 39221] [client 20.104.124.39:33138] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaISaFtZF9Zd_U7easAuvQAAAEI"]
[Sat Feb 28 05:53:45.406256 2026] [:error] [pid 11791:tid 11795] [client 20.104.124.39:33049] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaISaWuX5e1Q32gqxH2XfgAAAQI"]
[Sat Feb 28 05:53:46.526993 2026] [:error] [pid 39185:tid 39260] [client 20.104.124.39:33005] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaISahVE-FfM89u7BQZCCwAAAI4"]
[Sat Feb 28 05:53:46.998096 2026] [:error] [pid 39185:tid 39252] [client 20.104.124.39:33145] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aaISahVE-FfM89u7BQZCEAAAAIY"]
[Sat Feb 28 05:53:47.963346 2026] [:error] [pid 39184:tid 39231] [client 20.104.124.39:2242] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mail.php"] [unique_id "aaISa1tZF9Zd_U7easAuygAAAEw"]
[Sat Feb 28 05:53:57.633624 2026] [:error] [pid 39184:tid 39241] [client 20.104.124.39:32974] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaISdVtZF9Zd_U7easAu9QAAAFY"]
[Sat Feb 28 05:53:58.889018 2026] [:error] [pid 11791:tid 11793] [client 20.104.124.39:33068] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaISdmuX5e1Q32gqxH2XsAAAAQA"]
[Sat Feb 28 05:53:59.800749 2026] [:error] [pid 39185:tid 39248] [client 20.104.124.39:2192] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaISdxVE-FfM89u7BQZCMgAAAII"]
[Sat Feb 28 05:54:00.459297 2026] [:error] [pid 22194:tid 22212] [client 20.104.124.39:33129] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "aaISeH6mbajs3bzQGyvnjgAAAVA"]
[Sat Feb 28 05:54:01.300852 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:2303] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaISeaIAO5fN7BxyqcFDGwAAAMw"]
[Sat Feb 28 05:54:02.522032 2026] [:error] [pid 39183:tid 39204] [client 20.104.124.39:33070] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaISehCf4HvhVePw3LZkRgAAAAw"]
[Sat Feb 28 05:54:04.511240 2026] [:error] [pid 11791:tid 11799] [client 20.104.124.39:2205] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaISfGuX5e1Q32gqxH2XuAAAAQY"]
[Sat Feb 28 05:54:05.274005 2026] [:error] [pid 39183:tid 39202] [client 20.104.124.39:33039] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaISfRCf4HvhVePw3LZkUAAAAAo"]
[Sat Feb 28 05:54:06.935666 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:33111] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaISfqIAO5fN7BxyqcFDLAAAANA"]
[Sat Feb 28 05:54:07.506846 2026] [:error] [pid 39185:tid 39251] [client 20.104.124.39:2243] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaISfxVE-FfM89u7BQZCQAAAAIU"]
[Sat Feb 28 05:54:08.034124 2026] [:error] [pid 39183:tid 39200] [client 20.104.124.39:2271] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaISgBCf4HvhVePw3LZkUgAAAAg"]
[Sat Feb 28 05:54:09.525063 2026] [:error] [pid 39183:tid 39192] [client 20.104.124.39:2269] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaISgRCf4HvhVePw3LZkWAAAAAA"]
[Sat Feb 28 05:54:10.325192 2026] [:error] [pid 22194:tid 22205] [client 20.104.124.39:2229] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaISgn6mbajs3bzQGyvnqAAAAUk"]
[Sat Feb 28 05:54:11.118690 2026] [:error] [pid 11791:tid 11795] [client 20.104.124.39:2230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaISg2uX5e1Q32gqxH2XvgAAAQI"]
[Sat Feb 28 05:54:11.852704 2026] [:error] [pid 22194:tid 22213] [client 20.104.124.39:33076] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaISg36mbajs3bzQGyvnsAAAAVE"]
[Sat Feb 28 05:54:12.613276 2026] [:error] [pid 22194:tid 22209] [client 20.104.124.39:33098] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaIShH6mbajs3bzQGyvnsgAAAU0"]
[Sat Feb 28 05:54:13.266908 2026] [:error] [pid 22194:tid 22204] [client 20.104.124.39:33142] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaIShX6mbajs3bzQGyvntAAAAUg"]
[Sat Feb 28 05:54:13.890405 2026] [:error] [pid 22194:tid 22206] [client 20.104.124.39:33150] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaIShX6mbajs3bzQGyvntgAAAUo"]
[Sat Feb 28 05:54:15.012668 2026] [:error] [pid 39183:tid 39208] [client 20.104.124.39:2188] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaIShxCf4HvhVePw3LZkXQAAABA"]
[Sat Feb 28 05:54:16.191207 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:32970] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaISiKIAO5fN7BxyqcFDRAAAAM8"]
[Sat Feb 28 05:54:16.833822 2026] [:error] [pid 22194:tid 22213] [client 20.104.124.39:33034] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaISiH6mbajs3bzQGyvnwwAAAVE"]
[Sat Feb 28 05:54:18.230241 2026] [:error] [pid 22194:tid 22199] [client 20.104.124.39:33143] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaISin6mbajs3bzQGyvnygAAAUM"]
[Sat Feb 28 05:54:19.127499 2026] [:error] [pid 39185:tid 39266] [client 20.104.124.39:33121] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaISixVE-FfM89u7BQZCSwAAAJQ"]
[Sat Feb 28 05:54:20.149052 2026] [:error] [pid 39292:tid 39307] [client 20.104.124.39:2286] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aaISjKIAO5fN7BxyqcFDXQAAAM0"]
[Sat Feb 28 05:54:20.651367 2026] [:error] [pid 39185:tid 39260] [client 20.104.124.39:33079] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aaISjBVE-FfM89u7BQZCTgAAAI4"]
[Sat Feb 28 05:54:21.632138 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:33061] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aaISjaIAO5fN7BxyqcFDZQAAAM8"]
[Sat Feb 28 05:54:22.779259 2026] [:error] [pid 39292:tid 39295] [client 20.104.124.39:33022] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaISjqIAO5fN7BxyqcFDbgAAAME"]
[Sat Feb 28 05:54:23.589665 2026] [:error] [pid 39184:tid 39220] [client 20.104.124.39:33099] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaISj1tZF9Zd_U7easAvFgAAAEE"]
[Sat Feb 28 05:54:24.389194 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:2234] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaISkKIAO5fN7BxyqcFDegAAANQ"]
[Sat Feb 28 05:54:25.062055 2026] [:error] [pid 39185:tid 39254] [client 20.104.124.39:33045] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaISkRVE-FfM89u7BQZCXgAAAIg"]
[Sat Feb 28 05:54:26.181364 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:33117] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaISkqIAO5fN7BxyqcFDggAAAMw"]
[Sat Feb 28 05:54:26.932543 2026] [:error] [pid 39292:tid 39307] [client 20.104.124.39:32993] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aaISkqIAO5fN7BxyqcFDhwAAAM0"]
[Sat Feb 28 05:54:27.529568 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:32988] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aaISk6IAO5fN7BxyqcFDjwAAANY"]
[Sat Feb 28 05:54:29.039411 2026] [:error] [pid 11791:tid 11805] [client 20.104.124.39:33059] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "aaISlWuX5e1Q32gqxH2X1gAAAQw"]
[Sat Feb 28 05:54:30.138252 2026] [:error] [pid 11791:tid 11806] [client 20.104.124.39:2277] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aaISlmuX5e1Q32gqxH2X2wAAAQ0"]
[Sat Feb 28 05:54:31.153239 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:33080] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aaISl6IAO5fN7BxyqcFDnAAAANY"]
[Sat Feb 28 05:54:31.972399 2026] [:error] [pid 39292:tid 39297] [client 20.104.124.39:33036] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aaISl6IAO5fN7BxyqcFDpAAAAMM"]
[Sat Feb 28 05:54:32.994340 2026] [:error] [pid 22194:tid 22206] [client 20.104.124.39:2266] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "aaISmH6mbajs3bzQGyvn7wAAAUo"]
[Sat Feb 28 05:54:34.123028 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:32971] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aaISmqIAO5fN7BxyqcFDrwAAANg"]
[Sat Feb 28 05:54:35.483912 2026] [:error] [pid 11791:tid 11814] [client 20.104.124.39:33052] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aaISm2uX5e1Q32gqxH2X5AAAARU"]
[Sat Feb 28 05:54:36.962005 2026] [:error] [pid 39185:tid 39263] [client 20.104.124.39:33025] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aaISnBVE-FfM89u7BQZCdQAAAJE"]
[Sat Feb 28 05:54:38.458097 2026] [:error] [pid 39185:tid 39256] [client 20.104.124.39:2217] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aaISnhVE-FfM89u7BQZCewAAAIo"]
[Sat Feb 28 05:54:40.163341 2026] [:error] [pid 39292:tid 39298] [client 20.104.124.39:33000] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaISoKIAO5fN7BxyqcFDvQAAAMQ"]
[Sat Feb 28 05:54:41.018363 2026] [:error] [pid 39185:tid 39266] [client 20.104.124.39:33041] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaISoRVE-FfM89u7BQZCgQAAAJQ"]
[Sat Feb 28 05:54:41.895023 2026] [:error] [pid 39292:tid 39307] [client 20.104.124.39:33054] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaISoaIAO5fN7BxyqcFDxQAAAM0"]
[Sat Feb 28 05:54:42.514380 2026] [:error] [pid 39184:tid 39223] [client 20.104.124.39:33032] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaISoltZF9Zd_U7easAvJwAAAEQ"]
[Sat Feb 28 05:54:44.173120 2026] [:error] [pid 11791:tid 11796] [client 20.104.124.39:33053] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaISpGuX5e1Q32gqxH2X8AAAAQM"]
[Sat Feb 28 05:54:45.722410 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:33139] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaISpaIAO5fN7BxyqcFD1QAAAM8"]
[Sat Feb 28 05:54:46.551640 2026] [:error] [pid 39185:tid 39258] [client 20.104.124.39:33083] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaISphVE-FfM89u7BQZCjgAAAIw"]
[Sat Feb 28 05:54:47.520851 2026] [:error] [pid 39292:tid 39297] [client 20.104.124.39:2221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaISp6IAO5fN7BxyqcFD5QAAAMM"]
[Sat Feb 28 05:54:49.550929 2026] [:error] [pid 22194:tid 22202] [client 20.104.124.39:33107] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaISqX6mbajs3bzQGyvoGgAAAUY"]
[Sat Feb 28 05:54:50.916211 2026] [:error] [pid 39292:tid 39304] [client 20.104.124.39:32909] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaISqqIAO5fN7BxyqcFD9QAAAMo"]
[Sat Feb 28 05:54:51.836548 2026] [:error] [pid 39183:tid 39202] [client 20.104.124.39:33093] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaISqxCf4HvhVePw3LZkcgAAAAo"]
[Sat Feb 28 05:54:53.043170 2026] [:error] [pid 39183:tid 39203] [client 20.104.124.39:33050] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaISrRCf4HvhVePw3LZkeAAAAAs"]
[Sat Feb 28 05:54:54.738130 2026] [:error] [pid 39183:tid 39200] [client 20.104.124.39:33122] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaISrhCf4HvhVePw3LZkfAAAAAg"]
[Sat Feb 28 05:54:56.182409 2026] [:error] [pid 22194:tid 22210] [client 20.104.124.39:33035] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaISsH6mbajs3bzQGyvoMAAAAU4"]
[Sat Feb 28 05:55:00.058555 2026] [:error] [pid 22194:tid 22202] [client 20.104.124.39:33072] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaIStH6mbajs3bzQGyvoSwAAAUY"]
[Sat Feb 28 05:55:04.932110 2026] [:error] [pid 39185:tid 39249] [client 20.104.124.39:33055] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aaISuBVE-FfM89u7BQZCpQAAAIM"]
[Sat Feb 28 05:55:06.194871 2026] [:error] [pid 39292:tid 39299] [client 20.104.124.39:33021] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aaISuqIAO5fN7BxyqcFERAAAAMU"]
[Sat Feb 28 05:55:06.955790 2026] [:error] [pid 39292:tid 39317] [client 20.104.124.39:33133] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aaISuqIAO5fN7BxyqcFETQAAANc"]
[Sat Feb 28 05:55:07.804840 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:33147] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless5.php"] [unique_id "aaISu6IAO5fN7BxyqcFEVwAAANQ"]
[Sat Feb 28 05:55:08.362478 2026] [:error] [pid 22194:tid 22219] [client 20.104.124.39:33137] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaISvH6mbajs3bzQGyvocAAAAVc"]
[Sat Feb 28 05:55:09.705819 2026] [:error] [pid 39183:tid 39197] [client 20.104.124.39:33046] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaISvRCf4HvhVePw3LZkjwAAAAU"]
[Sat Feb 28 05:55:10.964962 2026] [:error] [pid 39185:tid 39250] [client 20.104.124.39:33073] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaISvhVE-FfM89u7BQZCsQAAAIQ"]
[Sat Feb 28 05:55:12.297767 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:33028] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaISwH6mbajs3bzQGyvofAAAAUI"]
[Sat Feb 28 05:55:13.540583 2026] [:error] [pid 11791:tid 11804] [client 20.104.124.39:33047] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaISwWuX5e1Q32gqxH2YSQAAAQs"]
[Sat Feb 28 05:55:14.510540 2026] [:error] [pid 22194:tid 22218] [client 20.104.124.39:33149] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaISwn6mbajs3bzQGyvogQAAAVY"]
[Sat Feb 28 05:55:15.076707 2026] [:error] [pid 39183:tid 39208] [client 20.104.124.39:2218] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaISwxCf4HvhVePw3LZkmgAAABA"]
[Sat Feb 28 05:55:15.961436 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:33135] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaISw6IAO5fN7BxyqcFEdQAAANY"]
[Sat Feb 28 05:55:17.319183 2026] [:error] [pid 22194:tid 22210] [client 20.104.124.39:33001] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaISxX6mbajs3bzQGyvohgAAAU4"]
[Sat Feb 28 05:55:18.071712 2026] [:error] [pid 39185:tid 39251] [client 20.104.124.39:33084] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaISxhVE-FfM89u7BQZCyAAAAIU"]
[Sat Feb 28 05:55:19.362812 2026] [:error] [pid 22194:tid 22206] [client 20.104.124.39:32998] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaISx36mbajs3bzQGyvojQAAAUo"]
[Sat Feb 28 05:55:20.776889 2026] [:error] [pid 22194:tid 22220] [client 20.104.124.39:32963] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaISyH6mbajs3bzQGyvooAAAAVg"]
[Sat Feb 28 05:55:22.219915 2026] [:error] [pid 39185:tid 39266] [client 20.104.124.39:33120] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaISyhVE-FfM89u7BQZCywAAAJQ"]
[Sat Feb 28 05:55:23.279893 2026] [:error] [pid 11791:tid 11803] [client 20.104.124.39:33063] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaISy2uX5e1Q32gqxH2YVgAAAQo"]
[Sat Feb 28 05:55:24.332547 2026] [:error] [pid 39185:tid 39246] [client 20.104.124.39:32907] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aaISzBVE-FfM89u7BQZC0QAAAIA"]
[Sat Feb 28 05:55:25.527170 2026] [:error] [pid 22194:tid 22220] [client 20.104.124.39:32960] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aaISzX6mbajs3bzQGyvougAAAVg"]
[Sat Feb 28 05:55:26.741211 2026] [:error] [pid 39185:tid 39251] [client 20.104.124.39:33081] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aaISzhVE-FfM89u7BQZC2AAAAIU"]
[Sat Feb 28 05:55:28.209687 2026] [:error] [pid 39184:tid 39242] [client 20.104.124.39:32900] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "aaIS0FtZF9Zd_U7easAvYwAAAFc"]
[Sat Feb 28 05:55:28.821073 2026] [:error] [pid 39185:tid 39261] [client 20.104.124.39:33123] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aaIS0BVE-FfM89u7BQZC5wAAAI8"]
[Sat Feb 28 05:55:29.739033 2026] [:error] [pid 22194:tid 22199] [client 20.104.124.39:32972] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aaIS0X6mbajs3bzQGyvoxQAAAUM"]
[Sat Feb 28 05:55:30.846872 2026] [:error] [pid 11791:tid 11798] [client 20.104.124.39:33090] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aaIS0muX5e1Q32gqxH2YdQAAAQU"]
[Sat Feb 28 05:55:31.517382 2026] [:error] [pid 39185:tid 39255] [client 20.104.124.39:33086] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aaIS0xVE-FfM89u7BQZC6QAAAIk"]
[Sat Feb 28 05:55:32.421818 2026] [:error] [pid 39183:tid 39204] [client 20.104.124.39:32973] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaIS1BCf4HvhVePw3LZkrwAAAAw"]
[Sat Feb 28 05:55:33.078919 2026] [:error] [pid 39292:tid 39303] [client 20.104.124.39:2255] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaIS1aIAO5fN7BxyqcFEtgAAAMk"]
[Sat Feb 28 05:55:34.148513 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:33085] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaIS1qIAO5fN7BxyqcFEvwAAAMY"]
[Sat Feb 28 05:55:34.946769 2026] [:error] [pid 39292:tid 39311] [client 20.104.124.39:32925] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaIS1qIAO5fN7BxyqcFEwwAAANE"]
[Sat Feb 28 05:55:36.261327 2026] [:error] [pid 39185:tid 39259] [client 20.104.124.39:33027] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aaIS2BVE-FfM89u7BQZC7wAAAI0"]
[Sat Feb 28 05:55:37.104611 2026] [:error] [pid 22194:tid 22210] [client 20.104.124.39:32964] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aaIS2X6mbajs3bzQGyvo9wAAAU4"]
[Sat Feb 28 05:55:38.000495 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:33069] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aaIS2X6mbajs3bzQGyvpAAAAAUI"]
[Sat Feb 28 05:55:39.034912 2026] [:error] [pid 22194:tid 22209] [client 20.104.124.39:33014] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aaIS236mbajs3bzQGyvpBgAAAU0"]
[Sat Feb 28 05:55:40.000238 2026] [:error] [pid 39184:tid 39241] [client 20.104.124.39:33060] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaIS21tZF9Zd_U7easAvcAAAAFY"]
[Sat Feb 28 05:55:40.791333 2026] [:error] [pid 39292:tid 39309] [client 20.104.124.39:33082] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaIS3KIAO5fN7BxyqcFEyQAAAM8"]
[Sat Feb 28 05:55:41.289525 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:33044] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaIS3aIAO5fN7BxyqcFEzgAAANY"]
[Sat Feb 28 05:55:41.877318 2026] [:error] [pid 22194:tid 22218] [client 20.104.124.39:33146] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaIS3X6mbajs3bzQGyvpGQAAAVY"]
[Sat Feb 28 05:55:42.786751 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:33048] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaIS3qIAO5fN7BxyqcFE1QAAANQ"]
[Sat Feb 28 05:55:43.506982 2026] [:error] [pid 39184:tid 39233] [client 20.104.124.39:32967] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaIS31tZF9Zd_U7easAvdAAAAE4"]
[Sat Feb 28 05:55:44.177713 2026] [:error] [pid 39184:tid 39234] [client 20.104.124.39:2291] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaIS4FtZF9Zd_U7easAveQAAAE8"]
[Sat Feb 28 05:55:44.991580 2026] [:error] [pid 39184:tid 39237] [client 20.104.124.39:33065] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaIS4FtZF9Zd_U7easAvgwAAAFI"]
[Sat Feb 28 05:55:45.832893 2026] [:error] [pid 39292:tid 39299] [client 20.104.124.39:33074] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaIS4aIAO5fN7BxyqcFE3wAAAMU"]
[Sat Feb 28 05:55:46.638976 2026] [:error] [pid 39292:tid 39294] [client 20.104.124.39:32982] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaIS4qIAO5fN7BxyqcFE4wAAAMA"]
[Sat Feb 28 05:55:47.735444 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:32984] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaIS46IAO5fN7BxyqcFE7AAAAMs"]
[Sat Feb 28 05:55:48.637250 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:33042] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaIS5KIAO5fN7BxyqcFE7wAAAMw"]
[Sat Feb 28 05:55:49.251008 2026] [:error] [pid 22194:tid 22220] [client 20.104.124.39:32969] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaIS5X6mbajs3bzQGyvpNQAAAVg"]
[Sat Feb 28 05:55:50.380166 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:25827] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaIS5n6mbajs3bzQGyvpPQAAAUI"]
[Sat Feb 28 05:55:51.071435 2026] [:error] [pid 39292:tid 39304] [client 20.104.124.39:33002] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaIS56IAO5fN7BxyqcFE9wAAAMo"]
[Sat Feb 28 05:55:51.694763 2026] [:error] [pid 39183:tid 39198] [client 20.104.124.39:2283] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaIS5xCf4HvhVePw3LZkxgAAAAY"]
[Sat Feb 28 05:55:52.283174 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:33043] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaIS6KIAO5fN7BxyqcFE-wAAAMc"]
[Sat Feb 28 05:55:52.931830 2026] [:error] [pid 39292:tid 39296] [client 20.104.124.39:33075] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaIS6KIAO5fN7BxyqcFE_AAAAMI"]
[Sat Feb 28 05:55:53.732689 2026] [:error] [pid 39184:tid 39223] [client 20.104.124.39:32903] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaIS6VtZF9Zd_U7easAvjwAAAEQ"]
[Sat Feb 28 05:55:54.270383 2026] [:error] [pid 22194:tid 22218] [client 20.104.124.39:2251] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaIS6n6mbajs3bzQGyvpQgAAAVY"]
[Sat Feb 28 05:55:55.191510 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:2181] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaIS66IAO5fN7BxyqcFFBgAAAMg"]
[Sat Feb 28 05:55:55.841747 2026] [:error] [pid 39183:tid 39201] [client 20.104.124.39:33091] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaIS6xCf4HvhVePw3LZkzAAAAAk"]
[Sat Feb 28 05:55:56.355162 2026] [:error] [pid 39184:tid 39233] [client 20.104.124.39:33009] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaIS7FtZF9Zd_U7easAvlwAAAE4"]
[Sat Feb 28 05:55:57.396789 2026] [:error] [pid 39185:tid 39249] [client 20.104.124.39:32980] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaIS7RVE-FfM89u7BQZDFgAAAIM"]
[Sat Feb 28 05:55:58.510339 2026] [:error] [pid 39183:tid 39203] [client 20.104.124.39:25841] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaIS7hCf4HvhVePw3LZk1QAAAAs"]
[Sat Feb 28 05:55:59.058646 2026] [:error] [pid 39185:tid 39250] [client 20.104.124.39:32981] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaIS7xVE-FfM89u7BQZDHwAAAIQ"]
[Sat Feb 28 05:56:00.186028 2026] [:error] [pid 39185:tid 39252] [client 20.104.124.39:2298] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaIS8BVE-FfM89u7BQZDJAAAAIY"]
[Sat Feb 28 05:56:00.779267 2026] [:error] [pid 39184:tid 39227] [client 20.104.124.39:2282] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaIS8FtZF9Zd_U7easAvnwAAAEg"]
[Sat Feb 28 05:56:01.345450 2026] [:error] [pid 11791:tid 11802] [client 20.104.124.39:32915] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaIS8WuX5e1Q32gqxH2YwAAAAQk"]
[Sat Feb 28 05:56:02.001284 2026] [:error] [pid 39292:tid 39316] [client 20.104.124.39:33056] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaIS8qIAO5fN7BxyqcFFEQAAANY"]
[Sat Feb 28 05:56:02.955046 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:32985] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaIS8qIAO5fN7BxyqcFFFwAAAMg"]
[Sat Feb 28 05:56:03.554319 2026] [:error] [pid 11791:tid 11801] [client 20.104.124.39:32975] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaIS82uX5e1Q32gqxH2YxgAAAQg"]
[Sat Feb 28 05:56:10.957291 2026] [:error] [pid 39292:tid 39297] [client 20.104.124.39:33017] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aaIS-qIAO5fN7BxyqcFFNgAAAMM"]
[Sat Feb 28 05:56:11.536102 2026] [:error] [pid 39185:tid 39268] [client 20.104.124.39:2207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aaIS-xVE-FfM89u7BQZDPgAAAJY"]
[Sat Feb 28 05:56:12.047934 2026] [:error] [pid 39184:tid 39240] [client 20.104.124.39:33067] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aaIS_FtZF9Zd_U7easAvtwAAAFU"]
[Sat Feb 28 05:56:12.615755 2026] [:error] [pid 22194:tid 22203] [client 20.104.124.39:2176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aaIS_H6mbajs3bzQGyvpcwAAAUc"]
[Sat Feb 28 05:56:13.119713 2026] [:error] [pid 11791:tid 11796] [client 20.104.124.39:25841] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/la.php"] [unique_id "aaIS_WuX5e1Q32gqxH2Y9gAAAQM"]
[Sat Feb 28 05:56:14.027877 2026] [:error] [pid 39292:tid 39311] [client 20.104.124.39:32927] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/la.php"] [unique_id "aaIS_qIAO5fN7BxyqcFFPgAAANE"]
[Sat Feb 28 05:56:14.611690 2026] [:error] [pid 39183:tid 39203] [client 20.104.124.39:2191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/la.php"] [unique_id "aaIS_hCf4HvhVePw3LZk4gAAAAs"]
[Sat Feb 28 05:56:15.134148 2026] [:error] [pid 39183:tid 39197] [client 20.104.124.39:33007] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/la.php"] [unique_id "aaIS_xCf4HvhVePw3LZk5QAAAAU"]
[Sat Feb 28 05:56:15.893755 2026] [:error] [pid 11791:tid 11813] [client 20.104.124.39:2197] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aaIS_2uX5e1Q32gqxH2Y-wAAARQ"]
[Sat Feb 28 05:56:17.187213 2026] [:error] [pid 39292:tid 39306] [client 20.104.124.39:2241] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aaITAaIAO5fN7BxyqcFFSQAAAMw"]
[Sat Feb 28 05:56:17.887112 2026] [:error] [pid 11791:tid 11814] [client 20.104.124.39:2279] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aaITAWuX5e1Q32gqxH2ZAQAAARU"]
[Sat Feb 28 05:56:18.592936 2026] [:error] [pid 39292:tid 39313] [client 20.104.124.39:32992] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aaITAqIAO5fN7BxyqcFFVwAAANM"]
[Sat Feb 28 05:56:19.140988 2026] [:error] [pid 39292:tid 39304] [client 20.104.124.39:32922] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaITA6IAO5fN7BxyqcFFXQAAAMo"]
[Sat Feb 28 05:56:19.727913 2026] [:error] [pid 39292:tid 39301] [client 20.104.124.39:2275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaITA6IAO5fN7BxyqcFFYgAAAMc"]
[Sat Feb 28 05:56:20.416159 2026] [:error] [pid 22194:tid 22210] [client 20.104.124.39:32920] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaITBH6mbajs3bzQGyvpgQAAAU4"]
[Sat Feb 28 05:56:20.920444 2026] [:error] [pid 39292:tid 39314] [client 20.104.124.39:2292] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaITBKIAO5fN7BxyqcFFZwAAANQ"]
[Sat Feb 28 05:56:21.523373 2026] [:error] [pid 39292:tid 39300] [client 20.104.124.39:32986] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaITBaIAO5fN7BxyqcFFaQAAAMY"]
[Sat Feb 28 05:56:22.309819 2026] [:error] [pid 11791:tid 11810] [client 20.104.124.39:2253] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaITBmuX5e1Q32gqxH2ZFAAAARE"]
[Sat Feb 28 05:56:22.853156 2026] [:error] [pid 11791:tid 11809] [client 20.104.124.39:2193] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaITBmuX5e1Q32gqxH2ZFQAAARA"]
[Sat Feb 28 05:56:23.643441 2026] [:error] [pid 11791:tid 11812] [client 20.104.124.39:33119] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaITB2uX5e1Q32gqxH2ZFwAAARM"]
[Sat Feb 28 05:56:24.095540 2026] [:error] [pid 39292:tid 39317] [client 20.104.124.39:33137] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaITCKIAO5fN7BxyqcFFdQAAANc"]
[Sat Feb 28 05:56:24.611108 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:25807] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaITCKIAO5fN7BxyqcFFeAAAANA"]
[Sat Feb 28 05:56:25.371363 2026] [:error] [pid 39292:tid 39297] [client 20.104.124.39:33016] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaITCaIAO5fN7BxyqcFFfQAAAMM"]
[Sat Feb 28 05:56:25.976478 2026] [:error] [pid 39185:tid 39264] [client 20.104.124.39:33125] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaITCRVE-FfM89u7BQZDVQAAAJI"]
[Sat Feb 28 05:56:26.627099 2026] [:error] [pid 22194:tid 22213] [client 20.104.124.39:2183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaITCn6mbajs3bzQGyvpjAAAAVE"]
[Sat Feb 28 05:56:27.143924 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:2200] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaITC6IAO5fN7BxyqcFFgwAAANA"]
[Sat Feb 28 05:56:27.688444 2026] [:error] [pid 39292:tid 39315] [client 20.104.124.39:2202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaITC6IAO5fN7BxyqcFFigAAANU"]
[Sat Feb 28 05:56:28.401784 2026] [:error] [pid 39292:tid 39308] [client 20.104.124.39:2254] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaITDKIAO5fN7BxyqcFFkQAAAM4"]
[Sat Feb 28 05:56:29.406618 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:2189] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaITDaIAO5fN7BxyqcFFlgAAANg"]
[Sat Feb 28 05:56:29.946010 2026] [:error] [pid 39184:tid 39220] [client 20.104.124.39:32990] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaITDVtZF9Zd_U7easAvxgAAAEE"]
[Sat Feb 28 05:56:30.525755 2026] [:error] [pid 22194:tid 22208] [client 20.104.124.39:2287] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaITDn6mbajs3bzQGyvpmwAAAUw"]
[Sat Feb 28 05:56:31.285629 2026] [:error] [pid 22194:tid 22215] [client 20.104.124.39:33013] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaITD36mbajs3bzQGyvpowAAAVM"]
[Sat Feb 28 05:56:32.042643 2026] [:error] [pid 22194:tid 22208] [client 20.104.124.39:33006] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaITEH6mbajs3bzQGyvppwAAAUw"]
[Sat Feb 28 05:56:32.816304 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:2209] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaITEH6mbajs3bzQGyvpsAAAAUI"]
[Sat Feb 28 05:56:33.659606 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:2220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaITEaIAO5fN7BxyqcFFoQAAAMs"]
[Sat Feb 28 05:56:34.452550 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:25793] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaITEn6mbajs3bzQGyvpugAAAUI"]
[Sat Feb 28 05:56:35.187876 2026] [:error] [pid 39292:tid 39295] [client 20.104.124.39:2278] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaITE6IAO5fN7BxyqcFFpwAAAME"]
[Sat Feb 28 05:56:36.172588 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:33008] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaITFKIAO5fN7BxyqcFFsQAAANA"]
[Sat Feb 28 05:56:36.782501 2026] [:error] [pid 39185:tid 39265] [client 20.104.124.39:32911] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaITFBVE-FfM89u7BQZDWQAAAJM"]
[Sat Feb 28 05:56:37.629526 2026] [:error] [pid 39292:tid 39303] [client 20.104.124.39:33127] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaITFaIAO5fN7BxyqcFFtwAAAMk"]
[Sat Feb 28 05:56:38.842588 2026] [:error] [pid 22194:tid 22207] [client 20.104.124.39:2260] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaITFn6mbajs3bzQGyvpygAAAUs"]
[Sat Feb 28 05:56:39.792900 2026] [:error] [pid 39292:tid 39308] [client 20.104.124.39:33080] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaITF6IAO5fN7BxyqcFFvwAAAM4"]
[Sat Feb 28 05:56:40.684219 2026] [:error] [pid 39292:tid 39295] [client 20.104.124.39:33102] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaITGKIAO5fN7BxyqcFFxQAAAME"]
[Sat Feb 28 05:56:41.214849 2026] [:error] [pid 11791:tid 11812] [client 20.104.124.39:33029] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaITGWuX5e1Q32gqxH2ZJQAAARM"]
[Sat Feb 28 05:56:41.825827 2026] [:error] [pid 39184:tid 39227] [client 20.104.124.39:2206] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aaITGVtZF9Zd_U7easAv0QAAAEg"]
[Sat Feb 28 05:56:42.605878 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:32999] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aaITGqIAO5fN7BxyqcFF0wAAANA"]
[Sat Feb 28 05:56:43.403040 2026] [:error] [pid 39184:tid 39225] [client 20.104.124.39:33077] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aaITG1tZF9Zd_U7easAv0wAAAEY"]
[Sat Feb 28 05:56:44.331231 2026] [:error] [pid 39292:tid 39297] [client 20.104.124.39:2300] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xaz.php"] [unique_id "aaITHKIAO5fN7BxyqcFF2wAAAMM"]
[Sat Feb 28 05:56:45.182444 2026] [:error] [pid 39184:tid 39239] [client 20.104.124.39:32899] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aaITHVtZF9Zd_U7easAv1QAAAFQ"]
[Sat Feb 28 05:56:45.926356 2026] [:error] [pid 39184:tid 39229] [client 20.104.124.39:33062] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aaITHVtZF9Zd_U7easAv2AAAAEo"]
[Sat Feb 28 05:56:46.683897 2026] [:error] [pid 39183:tid 39194] [client 20.104.124.39:2264] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aaITHhCf4HvhVePw3LZlBAAAAAI"]
[Sat Feb 28 05:56:47.688373 2026] [:error] [pid 39183:tid 39213] [client 20.104.124.39:2294] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/up4.php"] [unique_id "aaITHxCf4HvhVePw3LZlCQAAABU"]
[Sat Feb 28 05:56:48.497726 2026] [:error] [pid 11791:tid 11816] [client 20.104.124.39:2213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aaITIGuX5e1Q32gqxH2ZLAAAARc"]
[Sat Feb 28 05:56:49.407083 2026] [:error] [pid 22194:tid 22203] [client 20.104.124.39:33040] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aaITIX6mbajs3bzQGyvp2gAAAUc"]
[Sat Feb 28 05:56:49.876619 2026] [:error] [pid 22194:tid 22207] [client 20.104.124.39:33130] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aaITIX6mbajs3bzQGyvp3AAAAUs"]
[Sat Feb 28 05:56:50.720245 2026] [:error] [pid 39185:tid 39248] [client 20.104.124.39:2276] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "aaITIhVE-FfM89u7BQZDbwAAAII"]
[Sat Feb 28 05:56:51.701789 2026] [:error] [pid 39292:tid 39303] [client 20.104.124.39:2280] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aaITI6IAO5fN7BxyqcFF8AAAAMk"]
[Sat Feb 28 05:56:52.364749 2026] [:error] [pid 39184:tid 39224] [client 20.104.124.39:32978] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aaITJFtZF9Zd_U7easAv5AAAAEU"]
[Sat Feb 28 05:56:52.891919 2026] [:error] [pid 11791:tid 11815] [client 20.104.124.39:32948] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aaITJGuX5e1Q32gqxH2ZOAAAARY"]
[Sat Feb 28 05:56:53.510727 2026] [:error] [pid 39184:tid 39229] [client 20.104.124.39:32913] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aaITJVtZF9Zd_U7easAv6AAAAEo"]
[Sat Feb 28 05:56:53.960700 2026] [:error] [pid 39184:tid 39235] [client 20.104.124.39:33114] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aaITJVtZF9Zd_U7easAv6gAAAFA"]
[Sat Feb 28 05:56:54.479063 2026] [:error] [pid 11791:tid 11798] [client 20.104.124.39:2239] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aaITJmuX5e1Q32gqxH2ZPAAAAQU"]
[Sat Feb 28 05:56:55.234578 2026] [:error] [pid 39292:tid 39302] [client 20.104.124.39:2211] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aaITJ6IAO5fN7BxyqcFF9AAAAMg"]
[Sat Feb 28 05:56:56.395277 2026] [:error] [pid 39292:tid 39304] [client 20.104.124.39:32941] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wtz.php"] [unique_id "aaITKKIAO5fN7BxyqcFF-QAAAMo"]
[Sat Feb 28 05:56:57.829447 2026] [:error] [pid 39292:tid 39305] [client 20.104.124.39:2258] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aaITKaIAO5fN7BxyqcFF_wAAAMs"]
[Sat Feb 28 05:56:58.489223 2026] [:error] [pid 39292:tid 39311] [client 20.104.124.39:32940] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aaITKqIAO5fN7BxyqcFGBwAAANE"]
[Sat Feb 28 05:56:59.500615 2026] [:error] [pid 39292:tid 39310] [client 20.104.124.39:2216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aaITK6IAO5fN7BxyqcFGEQAAANA"]
[Sat Feb 28 05:57:01.206825 2026] [:error] [pid 11791:tid 11805] [client 20.104.124.39:2185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/galex.php"] [unique_id "aaITLWuX5e1Q32gqxH2ZRQAAAQw"]
[Sat Feb 28 05:57:02.209115 2026] [:error] [pid 11791:tid 11806] [client 20.104.124.39:2297] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aaITLmuX5e1Q32gqxH2ZRwAAAQ0"]
[Sat Feb 28 05:57:03.000935 2026] [:error] [pid 11791:tid 11815] [client 20.104.124.39:32939] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aaITLmuX5e1Q32gqxH2ZSgAAARY"]
[Sat Feb 28 05:57:03.652252 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:2180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aaITL6IAO5fN7BxyqcFGKwAAANg"]
[Sat Feb 28 05:57:04.321741 2026] [:error] [pid 39292:tid 39312] [client 20.104.124.39:32997] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xb.php"] [unique_id "aaITMKIAO5fN7BxyqcFGMgAAANI"]
[Sat Feb 28 05:57:04.934053 2026] [:error] [pid 39292:tid 39312] [client 20.104.124.39:33012] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aaITMKIAO5fN7BxyqcFGOgAAANI"]
[Sat Feb 28 05:57:05.513195 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:32897] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aaITMX6mbajs3bzQGyvp6AAAAUI"]
[Sat Feb 28 05:57:06.182853 2026] [:error] [pid 22194:tid 22218] [client 20.104.124.39:2224] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aaITMn6mbajs3bzQGyvp7QAAAVY"]
[Sat Feb 28 05:57:06.702441 2026] [:error] [pid 39184:tid 39219] [client 20.104.124.39:2184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ova.php"] [unique_id "aaITMltZF9Zd_U7easAv-gAAAEA"]
[Sat Feb 28 05:57:07.345035 2026] [:error] [pid 22194:tid 22198] [client 20.104.124.39:32983] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaITM36mbajs3bzQGyvp_QAAAUI"]
[Sat Feb 28 05:57:08.168642 2026] [:error] [pid 39292:tid 39318] [client 20.104.124.39:32921] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaITNKIAO5fN7BxyqcFGTAAAANg"]
[Sat Feb 28 05:57:08.834321 2026] [:error] [pid 39292:tid 39303] [client 20.104.124.39:32938] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaITNKIAO5fN7BxyqcFGUQAAAMk"]
[Sat Feb 28 05:57:09.865160 2026] [:error] [pid 39185:tid 39251] [client 20.104.124.39:25730] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaITNRVE-FfM89u7BQZDfgAAAIU"]
[Sat Feb 28 06:18:55.894308 2026] [:error] [pid 11791:tid 11817] [client 91.224.92.164:30111] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aaIYT2uX5e1Q32gqxH2k0QAAARg"]
[Sat Feb 28 06:31:02.707568 2026] [:error] [pid 39292:tid 39311] [client 49.233.45.47:41768] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaIbJqIAO5fN7BxyqcFoVgAAANE"]
[Sat Feb 28 07:09:54.604706 2026] [:error] [pid 22194:tid 22207] [client 20.220.212.70:25147] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaIkQn6mbajs3bzQGysZoQAAAUs"]
[Sat Feb 28 07:09:55.451407 2026] [:error] [pid 39292:tid 39298] [client 20.220.212.70:65476] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaIkQ6IAO5fN7BxyqcGNvAAAAMQ"]
[Sat Feb 28 07:09:56.299284 2026] [:error] [pid 39185:tid 39261] [client 20.220.212.70:65507] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaIkRBVE-FfM89u7BQZbYAAAAI8"]
[Sat Feb 28 07:09:57.135120 2026] [:error] [pid 39184:tid 39231] [client 20.220.212.70:25098] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaIkRVtZF9Zd_U7easBGFQAAAEw"]
[Sat Feb 28 08:40:52.722946 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.20:36297] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aaI5lH6mbajs3bzQGyuKTwAAAUk"]
[Sat Feb 28 08:40:53.627889 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.20:51703] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aaI5laIAO5fN7BxyqcEgWAAAANQ"]
[Sat Feb 28 08:40:56.279318 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.23:29629] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI5mKIAO5fN7BxyqcEghAAAANM"]
[Sat Feb 28 08:40:59.737775 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.25:36987] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI5mxVE-FfM89u7BQaVwwAAAJQ"]
[Sat Feb 28 08:41:03.302325 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.23:44689] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaI5n36mbajs3bzQGyuKwwAAAUA"]
[Sat Feb 28 08:41:04.635015 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.25:33399] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aaI5oBVE-FfM89u7BQaV_gAAAJY"]
[Sat Feb 28 08:41:06.403601 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.31:44093] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaI5on6mbajs3bzQGyuK7AAAAUw"]
[Sat Feb 28 08:41:11.552283 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.26:44097] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI5pxVE-FfM89u7BQaWPQAAAIw"]
[Sat Feb 28 08:41:14.643271 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.26:53397] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI5qltZF9Zd_U7easB2BQAAAEs"]
[Sat Feb 28 08:41:15.515285 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.21:29665] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI5qxVE-FfM89u7BQaWZwAAAI8"]
[Sat Feb 28 08:41:16.396783 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.26:48193] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI5rH6mbajs3bzQGyuLewAAAVA"]
[Sat Feb 28 08:41:17.267397 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.26:22423] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI5raIAO5fN7BxyqcEh0AAAANE"]
[Sat Feb 28 08:41:18.155536 2026] [:error] [pid 39183:tid 39212] [client 173.244.55.21:40499] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI5rhCf4HvhVePw3LaaKQAAABQ"]
[Sat Feb 28 08:41:19.508979 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.23:42573] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI5r2uX5e1Q32gqxH0NYAAAAQY"]
[Sat Feb 28 08:41:21.282122 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.25:35469] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aaI5sRVE-FfM89u7BQaWjAAAAJc"]
[Sat Feb 28 08:41:23.055088 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.28:52641] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI5s36mbajs3bzQGyuL3wAAAU0"]
[Sat Feb 28 08:41:24.373751 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.29:60157] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI5tFtZF9Zd_U7easB2ZwAAAEA"]
[Sat Feb 28 08:41:25.707148 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.30:28803] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI5tRVE-FfM89u7BQaWpQAAAJU"]
[Sat Feb 28 08:41:27.049081 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.20:39491] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/network.php"] [unique_id "aaI5txVE-FfM89u7BQaWsQAAAIs"]
[Sat Feb 28 08:41:27.948322 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.20:30877] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/network.php"] [unique_id "aaI5t36mbajs3bzQGyuMbAAAAVM"]
[Sat Feb 28 08:41:28.829799 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.28:47101] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/network.php"] [unique_id "aaI5uH6mbajs3bzQGyuMhwAAAVM"]
[Sat Feb 28 08:41:31.909196 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.21:48379] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI5uxVE-FfM89u7BQaW4QAAAII"]
[Sat Feb 28 08:41:32.793876 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.28:37523] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-l0gin.php"] [unique_id "aaI5vH6mbajs3bzQGyuM3wAAAVM"]
[Sat Feb 28 08:41:42.611290 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.28:52945] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI5xn6mbajs3bzQGyuNQgAAAUw"]
[Sat Feb 28 08:41:44.396154 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.26:50513] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaI5yKIAO5fN7BxyqcEi-QAAAMM"]
[Sat Feb 28 08:41:45.713806 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.26:28517] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI5yVtZF9Zd_U7easB2sAAAAFI"]
[Sat Feb 28 08:41:48.385046 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.20:58921] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI5zKIAO5fN7BxyqcEjSAAAANM"]
[Sat Feb 28 08:41:49.702410 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.30:38957] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI5zVtZF9Zd_U7easB2wAAAAEA"]
[Sat Feb 28 08:41:51.015793 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.25:59879] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI5z6IAO5fN7BxyqcEjjwAAANU"]
[Sat Feb 28 08:41:51.889831 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.28:51893] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI5z1tZF9Zd_U7easB24QAAAEA"]
[Sat Feb 28 08:41:52.766194 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.31:24409] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI50KIAO5fN7BxyqcEjrAAAAMc"]
[Sat Feb 28 08:41:55.012439 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.25:39853] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI502uX5e1Q32gqxH0OtQAAAQM"]
[Sat Feb 28 08:41:55.888743 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.29:51561] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaI5036mbajs3bzQGyuORgAAAVA"]
[Sat Feb 28 08:41:56.778204 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.25:59673] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI51GuX5e1Q32gqxH0O0wAAARc"]
[Sat Feb 28 08:41:58.565721 2026] [:error] [pid 39184:tid 39232] [client 173.244.55.20:42887] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aaI51ltZF9Zd_U7easB3GwAAAE0"]
[Sat Feb 28 08:42:02.049611 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.26:60541] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aaI52qIAO5fN7BxyqcEkRwAAANc"]
[Sat Feb 28 08:42:02.931011 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.28:32503] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aaI52n6mbajs3bzQGyuOlAAAAVY"]
[Sat Feb 28 08:42:05.567467 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.23:47417] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaI53X6mbajs3bzQGyuOuQAAAVE"]
[Sat Feb 28 08:42:06.447735 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.26:63255] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/tflow/up.php"] [unique_id "aaI53hCf4HvhVePw3LabFwAAAAQ"]
[Sat Feb 28 08:42:08.696842 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.21:63345] [client 173.244.55.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.21, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI54BVE-FfM89u7BQaYBAAAAIQ"]
[Sat Feb 28 08:42:11.397655 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.21:63345] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aaI54xVE-FfM89u7BQaYGgAAAIc"]
[Sat Feb 28 08:42:14.960970 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.31:60601] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI55hVE-FfM89u7BQaYNgAAAIc"]
[Sat Feb 28 08:42:16.773318 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.29:28375] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI56FtZF9Zd_U7easB3uwAAAEk"]
[Sat Feb 28 08:42:17.661920 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.29:28375] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaI56VtZF9Zd_U7easB3xQAAAFg"]
[Sat Feb 28 08:42:22.113336 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.31:48581] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI57hVE-FfM89u7BQaYfQAAAI4"]
[Sat Feb 28 08:42:23.424995 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.26:33399] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-trackback.php"] [unique_id "aaI576IAO5fN7BxyqcElOgAAAMc"]
[Sat Feb 28 08:42:24.303669 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.26:43267] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-trackback.php"] [unique_id "aaI58KIAO5fN7BxyqcElQQAAANg"]
[Sat Feb 28 08:42:28.265646 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.25:42291] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI59H6mbajs3bzQGyuPuwAAAVU"]
[Sat Feb 28 08:42:30.024991 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.29:58059] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI59muX5e1Q32gqxH0P0gAAAQ8"]
[Sat Feb 28 08:42:32.304841 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.28:22349] [client 173.244.55.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.28, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI5-BVE-FfM89u7BQaYwQAAAIs"]
[Sat Feb 28 08:42:32.748444 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.28:22349] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI5-BVE-FfM89u7BQaYwwAAAJE"]
[Sat Feb 28 08:42:34.082281 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.31:28685] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-theme-editor/include.php"] [unique_id "aaI5-qIAO5fN7BxyqcEl9AAAAME"]
[Sat Feb 28 08:42:36.292684 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.21:29847] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaI5_H6mbajs3bzQGyuQBwAAAU8"]
[Sat Feb 28 08:42:38.931864 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.30:41767] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/class.php"] [unique_id "aaI5_muX5e1Q32gqxH0QGgAAAQ8"]
[Sat Feb 28 08:42:40.240297 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.26:53655] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aaI6AH6mbajs3bzQGyuQXgAAAVI"]
[Sat Feb 28 08:42:41.110259 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.31:57911] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aaI6AaIAO5fN7BxyqcEmPwAAAMw"]
[Sat Feb 28 08:42:41.998499 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.26:33083] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aaI6ARVE-FfM89u7BQaY6QAAAIY"]
[Sat Feb 28 08:42:42.884728 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.26:63079] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aaI6AhVE-FfM89u7BQaY7wAAAII"]
[Sat Feb 28 08:42:43.871796 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.25:37143] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/autoload_classmap.php"] [unique_id "aaI6A2uX5e1Q32gqxH0QQAAAAQk"]
[Sat Feb 28 08:42:54.643040 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.23:57553] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/"] [unique_id "aaI6DqIAO5fN7BxyqcEnEQAAANM"]
[Sat Feb 28 08:42:55.967210 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.26:43181] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "aaI6D36mbajs3bzQGyuRYwAAAUI"]
[Sat Feb 28 08:43:03.462832 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.28:26961] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aaI6FxVE-FfM89u7BQaZdwAAAJE"]
[Sat Feb 28 08:43:05.658744 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.30:27565] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "aaI6GaIAO5fN7BxyqcEnqAAAAM4"]
[Sat Feb 28 08:43:06.982324 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.28:34289] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-admin/includes"] [unique_id "aaI6GltZF9Zd_U7easB5EQAAAEU"]
[Sat Feb 28 08:43:07.866659 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.30:34933] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-admin/includes"] [unique_id "aaI6GxVE-FfM89u7BQaZnQAAAI8"]
[Sat Feb 28 08:43:08.747024 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.30:29693] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-admin/includes"] [unique_id "aaI6HGuX5e1Q32gqxH0R1QAAAQw"]
[Sat Feb 28 08:43:10.955624 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.23:23095] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aaI6HhCf4HvhVePw3LacHQAAABU"]
[Sat Feb 28 08:43:15.795901 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.25:47459] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/ao_ccss/"] [unique_id "aaI6I6IAO5fN7BxyqcEoIQAAAM8"]
[Sat Feb 28 08:43:16.686977 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.25:30133] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/ao_ccss/"] [unique_id "aaI6JH6mbajs3bzQGyuSdQAAAU4"]
[Sat Feb 28 08:43:18.913829 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.28:33315] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/mu-plugins/"] [unique_id "aaI6JhVE-FfM89u7BQaZ-gAAAI8"]
[Sat Feb 28 08:43:19.804862 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.31:34197] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/mu-plugins/"] [unique_id "aaI6J1tZF9Zd_U7easB5VgAAAEo"]
[Sat Feb 28 08:43:22.012271 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.25:57801] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/"] [unique_id "aaI6KhCf4HvhVePw3LacYAAAAA4"]
[Sat Feb 28 08:43:31.795875 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.28:26455] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/"] [unique_id "aaI6M6IAO5fN7BxyqcEpAwAAAMo"]
[Sat Feb 28 08:43:33.130305 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.21:57701] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmps/"] [unique_id "aaI6NWuX5e1Q32gqxH0TJwAAAQs"]
[Sat Feb 28 08:43:34.023065 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.25:55979] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmps/"] [unique_id "aaI6Nn6mbajs3bzQGyuTkwAAAVY"]
[Sat Feb 28 08:43:34.906351 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.21:42601] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmps/"] [unique_id "aaI6NmuX5e1Q32gqxH0TTQAAAQs"]
[Sat Feb 28 08:43:39.794002 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.22:49451] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aaI6O36mbajs3bzQGyuT6AAAAUI"]
[Sat Feb 28 08:43:41.572408 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.31:50819] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aaI6PVtZF9Zd_U7easB5zgAAAEA"]
[Sat Feb 28 08:43:42.445723 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.31:35373] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aaI6PmuX5e1Q32gqxH0T3wAAAQE"]
[Sat Feb 28 08:43:44.683012 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.25:47291] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aaI6QKIAO5fN7BxyqcEppwAAANc"]
[Sat Feb 28 08:43:45.997533 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.22:44273] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/"] [unique_id "aaI6QVtZF9Zd_U7easB56AAAAFU"]
[Sat Feb 28 08:43:46.877778 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.20:65203] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/"] [unique_id "aaI6QhVE-FfM89u7BQaawgAAAIE"]
[Sat Feb 28 08:43:48.188660 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.31:30863] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wlw/"] [unique_id "aaI6RGuX5e1Q32gqxH0UYwAAARg"]
[Sat Feb 28 08:43:50.390340 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.25:24229] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaI6RmuX5e1Q32gqxH0UkAAAAQM"]
[Sat Feb 28 08:43:53.518282 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.23:34547] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/aryabot/"] [unique_id "aaI6SX6mbajs3bzQGyuUjgAAAUg"]
[Sat Feb 28 08:43:55.745193 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.22:64091] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/cakil/"] [unique_id "aaI6S1tZF9Zd_U7easB6AQAAAEI"]
[Sat Feb 28 08:43:58.398892 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.29:50343] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/limit/"] [unique_id "aaI6TqIAO5fN7BxyqcEqMQAAAMc"]
[Sat Feb 28 08:43:59.277642 2026] [:error] [pid 39183:tid 39212] [client 173.244.55.22:31803] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/limit/"] [unique_id "aaI6TxCf4HvhVePw3LacvQAAABQ"]
[Sat Feb 28 08:44:01.045347 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.30:29305] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/prenota/"] [unique_id "aaI6URCf4HvhVePw3LacxQAAAA0"]
[Sat Feb 28 08:44:14.043181 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.31:63205] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/"] [unique_id "aaI6XmuX5e1Q32gqxH0WjQAAARQ"]
[Sat Feb 28 08:44:15.799341 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.30:28167] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up/.well-known/"] [unique_id "aaI6X36mbajs3bzQGyuVhgAAAVU"]
[Sat Feb 28 08:44:21.122497 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.31:25475] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/"] [unique_id "aaI6ZRVE-FfM89u7BQab8QAAAIQ"]
[Sat Feb 28 08:44:22.002070 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.31:35969] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/"] [unique_id "aaI6ZqIAO5fN7BxyqcErCgAAANA"]
[Sat Feb 28 08:44:22.894598 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.26:55451] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/"] [unique_id "aaI6ZqIAO5fN7BxyqcErIAAAAME"]
[Sat Feb 28 08:44:27.826621 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.28:55349] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/"] [unique_id "aaI6axVE-FfM89u7BQacUgAAAJU"]
[Sat Feb 28 08:44:28.713324 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.20:53101] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/"] [unique_id "aaI6bFtZF9Zd_U7easB6xQAAAEs"]
[Sat Feb 28 08:44:40.770049 2026] [:error] [pid 39185:tid 39260] [client 173.244.55.22:54889] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seooyanz/"] [unique_id "aaI6eBVE-FfM89u7BQacuQAAAI4"]
[Sat Feb 28 08:47:04.334464 2026] [:error] [pid 39184:tid 39220] [client 43.166.250.187:57640] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaI7CFtZF9Zd_U7easB__wAAAEE"]
[Sat Feb 28 08:49:07.631659 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.31:46553] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aaI7g2uX5e1Q32gqxH0tYQAAAQQ"]
[Sat Feb 28 08:49:08.509041 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.25:56693] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aaI7hGuX5e1Q32gqxH0tdwAAAQg"]
[Sat Feb 28 08:49:12.072420 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.29:36293] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaI7iFtZF9Zd_U7easCDAwAAAEk"]
[Sat Feb 28 08:49:18.766977 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.23:49373] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aaI7jmuX5e1Q32gqxH0ubQAAAQM"]
[Sat Feb 28 08:49:20.082758 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.30:27939] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/hello.php"] [unique_id "aaI7kGuX5e1Q32gqxH0unwAAARE"]
[Sat Feb 28 08:49:25.448118 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.26:49415] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/uploads/bn_1_1754420677.phtml"] [unique_id "aaI7laIAO5fN7BxyqcE5DwAAAMs"]
[Sat Feb 28 08:49:27.228064 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.31:55793] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI7l36mbajs3bzQGyuoSAAAAUM"]
[Sat Feb 28 08:49:29.011825 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.30:33809] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/kill.php"] [unique_id "aaI7maIAO5fN7BxyqcE5UAAAAMI"]
[Sat Feb 28 08:49:30.340346 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.28:49595] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI7mmuX5e1Q32gqxH0vfAAAAQE"]
[Sat Feb 28 08:49:32.558935 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.20:49535] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaI7nH6mbajs3bzQGyuorAAAAVI"]
[Sat Feb 28 08:49:33.868242 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.29:55853] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/94056-upload.phtml"] [unique_id "aaI7nWuX5e1Q32gqxH0vrQAAARQ"]
[Sat Feb 28 08:49:35.215093 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.20:37791] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "aaI7nxVE-FfM89u7BQam-gAAAIw"]
[Sat Feb 28 08:49:36.558988 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.30:32271] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaI7oGuX5e1Q32gqxH0v0QAAARY"]
[Sat Feb 28 08:49:38.824826 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.25:30147] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaI7ohVE-FfM89u7BQanEgAAAIo"]
[Sat Feb 28 08:49:40.576093 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.31:50141] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-conflg.php"] [unique_id "aaI7pGuX5e1Q32gqxH0wOgAAAQ4"]
[Sat Feb 28 08:49:43.247217 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.29:30849] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI7p2uX5e1Q32gqxH0wewAAARU"]
[Sat Feb 28 08:49:44.597699 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.22:43201] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI7qKIAO5fN7BxyqcE6FQAAAME"]
[Sat Feb 28 08:49:45.475866 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.26:51973] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI7qRVE-FfM89u7BQanfQAAAJc"]
[Sat Feb 28 08:49:46.372196 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.26:39879] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI7qhVE-FfM89u7BQanjgAAAIQ"]
[Sat Feb 28 08:49:47.256187 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.25:37241] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI7qxCf4HvhVePw3LajMgAAAA4"]
[Sat Feb 28 08:49:48.130928 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.30:25799] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI7rH6mbajs3bzQGyupYQAAAVc"]
[Sat Feb 28 08:49:49.456533 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.21:38825] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI7rWuX5e1Q32gqxH0w2gAAAQg"]
[Sat Feb 28 08:49:50.771449 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.25:55181] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aaI7rhVE-FfM89u7BQan1AAAAI8"]
[Sat Feb 28 08:49:52.102240 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.26:34261] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aaI7sBVE-FfM89u7BQan5gAAAJA"]
[Sat Feb 28 08:49:53.892387 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.21:30373] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI7saIAO5fN7BxyqcE6gAAAAM8"]
[Sat Feb 28 08:49:55.223516 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.22:28743] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI7s36mbajs3bzQGyupxgAAAUk"]
[Sat Feb 28 08:49:57.424010 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.25:20253] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI7taIAO5fN7BxyqcE6pwAAANA"]
[Sat Feb 28 08:49:59.652668 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.30:22813] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaI7t2uX5e1Q32gqxH0xTgAAAQg"]
[Sat Feb 28 08:50:03.689457 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.31:28079] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI7u2uX5e1Q32gqxH0xiAAAAQI"]
[Sat Feb 28 08:50:05.023431 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.22:42041] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI7vRVE-FfM89u7BQaodgAAAI0"]
[Sat Feb 28 08:50:06.809341 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.29:30531] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaI7vqIAO5fN7BxyqcE7RQAAANA"]
[Sat Feb 28 08:50:08.146967 2026] [:error] [pid 39183:tid 39194] [client 173.244.55.28:40593] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI7wBCf4HvhVePw3LajzwAAAAI"]
[Sat Feb 28 08:50:09.464642 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.20:59933] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/natural.php"] [unique_id "aaI7wWuX5e1Q32gqxH0x_wAAAQA"]
[Sat Feb 28 08:50:11.689985 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.22:55115] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI7w36mbajs3bzQGyuqqgAAAVM"]
[Sat Feb 28 08:50:13.025771 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.30:38925] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI7xWuX5e1Q32gqxH0yRgAAAQA"]
[Sat Feb 28 08:50:14.372191 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.20:47857] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI7xqIAO5fN7BxyqcE7pQAAAM4"]
[Sat Feb 28 08:50:15.266072 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.29:28987] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI7x2uX5e1Q32gqxH0ycgAAAQE"]
[Sat Feb 28 08:50:16.147165 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.30:26041] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI7yH6mbajs3bzQGyuq4QAAAUs"]
[Sat Feb 28 08:50:17.028419 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.30:49849] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/404.php"] [unique_id "aaI7yX6mbajs3bzQGyuq8wAAAVc"]
[Sat Feb 28 08:50:17.899234 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.25:25779] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/404.php"] [unique_id "aaI7yRVE-FfM89u7BQapBgAAAII"]
[Sat Feb 28 08:50:19.667344 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.28:31713] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aaI7y36mbajs3bzQGyurGgAAAUc"]
[Sat Feb 28 08:50:20.552168 2026] [:error] [pid 39184:tid 39225] [client 173.244.55.23:58961] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aaI7zFtZF9Zd_U7easCFCgAAAEY"]
[Sat Feb 28 08:50:21.884919 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.25:26895] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI7zaIAO5fN7BxyqcE8IQAAAM0"]
[Sat Feb 28 08:50:22.767212 2026] [:error] [pid 39184:tid 39235] [client 173.244.55.22:25815] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaI7zltZF9Zd_U7easCFGwAAAFA"]
[Sat Feb 28 08:50:23.652341 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.29:47857] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI7z36mbajs3bzQGyurVQAAAVU"]
[Sat Feb 28 08:50:24.984331 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.25:51583] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap/bypass.php"] [unique_id "aaI70BCf4HvhVePw3LakAAAAABA"]
[Sat Feb 28 08:50:27.237203 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.26:49505] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aaI7036mbajs3bzQGyurlwAAAUA"]
[Sat Feb 28 08:50:29.013476 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.21:54613] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mah/function.php"] [unique_id "aaI71RVE-FfM89u7BQapiQAAAIo"]
[Sat Feb 28 08:50:30.817536 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.26:35993] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaI71muX5e1Q32gqxH0zVwAAAQc"]
[Sat Feb 28 08:50:32.600749 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.26:39747] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aaI72KIAO5fN7BxyqcE8iQAAAMk"]
[Sat Feb 28 08:50:33.923785 2026] [:error] [pid 39183:tid 39204] [client 173.244.55.23:61209] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI72RCf4HvhVePw3LakXQAAAAw"]
[Sat Feb 28 08:50:36.166472 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.23:61209] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaI73BCf4HvhVePw3LakbgAAAA0"]
[Sat Feb 28 08:50:39.720733 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.25:51657] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/ask.php"] [unique_id "aaI736IAO5fN7BxyqcE82QAAAMQ"]
[Sat Feb 28 08:50:40.612911 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.30:37579] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/ask.php"] [unique_id "aaI74H6mbajs3bzQGyusUwAAAUE"]
[Sat Feb 28 08:50:41.504058 2026] [:error] [pid 39183:tid 39203] [client 173.244.55.25:21299] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/ask.php"] [unique_id "aaI74RCf4HvhVePw3LakggAAAAs"]
[Sat Feb 28 08:50:42.828762 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.22:61655] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI74hCf4HvhVePw3LakigAAAAU"]
[Sat Feb 28 08:50:44.611899 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.23:61367] [client 173.244.55.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.23, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI75FtZF9Zd_U7easCFxgAAAEU"]
[Sat Feb 28 08:50:45.506438 2026] [:error] [pid 39184:tid 39222] [client 173.244.55.23:61367] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaI75VtZF9Zd_U7easCF2AAAAEM"]
[Sat Feb 28 08:50:48.629674 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.23:55465] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aaI76H6mbajs3bzQGyusuQAAAVU"]
[Sat Feb 28 08:50:49.509522 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.30:20317] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aaI76RVE-FfM89u7BQaqPgAAAIc"]
[Sat Feb 28 08:50:51.738829 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.25:63797] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI762uX5e1Q32gqxH00YQAAAQQ"]
[Sat Feb 28 08:50:56.238006 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.26:49921] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI78H6mbajs3bzQGyutJQAAAVc"]
[Sat Feb 28 08:50:58.019290 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.25:42301] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI78muX5e1Q32gqxH007QAAAQU"]
[Sat Feb 28 08:50:58.906689 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.28:24153] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/blue.php"] [unique_id "aaI78qIAO5fN7BxyqcE9oAAAAMc"]
[Sat Feb 28 08:50:59.777700 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.28:32423] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/blue.php"] [unique_id "aaI782uX5e1Q32gqxH01EwAAARE"]
[Sat Feb 28 08:51:01.109305 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.22:45315] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "aaI79RVE-FfM89u7BQaqsAAAAJQ"]
[Sat Feb 28 08:51:02.878951 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.28:25939] [client 173.244.55.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.28, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI79muX5e1Q32gqxH01WgAAAQw"]
[Sat Feb 28 08:51:03.325524 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.28:25939] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI792uX5e1Q32gqxH01YwAAAQE"]
[Sat Feb 28 08:51:05.101919 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.30:35833] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/up/main.php"] [unique_id "aaI7-VtZF9Zd_U7easCGnwAAAEo"]
[Sat Feb 28 08:51:06.003322 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.30:62451] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/up/main.php"] [unique_id "aaI7-muX5e1Q32gqxH01lwAAAQM"]
[Sat Feb 28 08:51:07.340229 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.26:52993] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fonts/fontawesome-webfont.php"] [unique_id "aaI7-36mbajs3bzQGyutgAAAAVc"]
[Sat Feb 28 08:51:14.526555 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.31:36117] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaI8AqIAO5fN7BxyqcE-LwAAANA"]
[Sat Feb 28 08:51:16.727376 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.26:47455] [client 173.244.55.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.26, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI8BGuX5e1Q32gqxH02kAAAARA"]
[Sat Feb 28 08:51:18.511692 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.26:47455] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaI8BmuX5e1Q32gqxH02pwAAARQ"]
[Sat Feb 28 08:51:19.394452 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.30:64685] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aaI8B2uX5e1Q32gqxH02rgAAAQ8"]
[Sat Feb 28 08:51:20.276560 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.31:20375] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aaI8CKIAO5fN7BxyqcE-ZAAAANU"]
[Sat Feb 28 08:51:21.604485 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.29:20665] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaI8CX6mbajs3bzQGyuukwAAAUQ"]
[Sat Feb 28 08:51:23.380628 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.31:31979] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaI8C6IAO5fN7BxyqcE-fwAAANI"]
[Sat Feb 28 08:51:25.166742 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.22:38407] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-user.php"] [unique_id "aaI8DWuX5e1Q32gqxH03BwAAAQw"]
[Sat Feb 28 08:51:26.493174 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.30:64321] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaI8DhVE-FfM89u7BQarjgAAAIg"]
[Sat Feb 28 08:51:27.375413 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.22:62113] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaI8D36mbajs3bzQGyuvOAAAAUY"]
[Sat Feb 28 08:51:28.254717 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.25:30417] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aaI8EGuX5e1Q32gqxH03KAAAARY"]
[Sat Feb 28 08:51:30.465665 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.23:21697] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "aaI8EmuX5e1Q32gqxH03gAAAAQg"]
[Sat Feb 28 08:51:32.233317 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.25:33355] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaI8FH6mbajs3bzQGyuvegAAAVM"]
[Sat Feb 28 08:51:33.564886 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.28:25791] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaI8FRVE-FfM89u7BQarxQAAAIw"]
[Sat Feb 28 08:51:35.794439 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.22:58489] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaI8FxCf4HvhVePw3LalqQAAABM"]
[Sat Feb 28 08:51:37.984681 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.29:34515] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaI8GaIAO5fN7BxyqcE-_AAAAMk"]
[Sat Feb 28 08:51:40.628346 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.25:30755] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaI8HBVE-FfM89u7BQar-wAAAIs"]
[Sat Feb 28 08:51:41.510208 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.29:52961] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/wp-conflg.php"] [unique_id "aaI8HWuX5e1Q32gqxH04eAAAAQg"]
[Sat Feb 28 08:51:43.751687 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.25:42739] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaI8H2uX5e1Q32gqxH04rAAAAQg"]
[Sat Feb 28 08:51:45.979702 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.31:56371] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/autoload_classmap.php"] [unique_id "aaI8IWuX5e1Q32gqxH040gAAAQQ"]
[Sat Feb 28 08:51:47.752739 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.25:29419] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/network.php"] [unique_id "aaI8IxVE-FfM89u7BQasOQAAAJY"]
[Sat Feb 28 08:51:49.534492 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.30:54315] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaI8JRVE-FfM89u7BQasYwAAAIY"]
[Sat Feb 28 08:51:50.419729 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.28:48481] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaI8Jn6mbajs3bzQGyuwdAAAAVM"]
[Sat Feb 28 08:51:51.291351 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.21:60383] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaI8J36mbajs3bzQGyuwgwAAAU8"]
[Sat Feb 28 08:51:52.175376 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.25:56663] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaI8KKIAO5fN7BxyqcE_pQAAANY"]
[Sat Feb 28 08:51:53.524338 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.26:44645] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaI8KaIAO5fN7BxyqcE_ugAAANM"]
[Sat Feb 28 08:51:54.402874 2026] [:error] [pid 39183:tid 39194] [client 173.244.55.21:32845] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaI8KhCf4HvhVePw3Lal6gAAAAI"]
[Sat Feb 28 08:51:56.179366 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.31:44897] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaI8LH6mbajs3bzQGyuw6QAAAUw"]
[Sat Feb 28 08:51:57.059458 2026] [:error] [pid 39183:tid 39195] [client 173.244.55.21:22655] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaI8LRCf4HvhVePw3Lal8wAAAAM"]
[Sat Feb 28 08:51:57.952841 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.26:43509] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaI8LRCf4HvhVePw3Lal-wAAAAg"]
[Sat Feb 28 08:51:58.843627 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.23:41969] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaI8LmuX5e1Q32gqxH05ewAAAQo"]
[Sat Feb 28 08:51:59.728550 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.31:28473] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/phpadmin/as.php"] [unique_id "aaI8L2uX5e1Q32gqxH05nAAAAQc"]
[Sat Feb 28 08:52:00.612890 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.21:62983] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/phpadmin/as.php"] [unique_id "aaI8MGuX5e1Q32gqxH05vQAAAQ4"]
[Sat Feb 28 08:52:01.941504 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.28:33301] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaI8MX6mbajs3bzQGyuxPwAAAUA"]
[Sat Feb 28 08:52:03.709562 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.28:61393] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaI8M2uX5e1Q32gqxH06AAAAARM"]
[Sat Feb 28 08:52:05.053231 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.30:39693] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaI8NWuX5e1Q32gqxH06MgAAAQk"]
[Sat Feb 28 08:52:06.866439 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.21:62339] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webadmin.php"] [unique_id "aaI8NmuX5e1Q32gqxH06ZQAAAQw"]
[Sat Feb 28 08:52:08.183681 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.30:64357] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaI8OGuX5e1Q32gqxH06kwAAARE"]
[Sat Feb 28 08:52:12.206297 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.23:29635] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaI8PH6mbajs3bzQGyux5QAAAVM"]
[Sat Feb 28 08:52:13.545560 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.20:40339] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aaI8PVtZF9Zd_U7easCIAgAAAEw"]
[Sat Feb 28 08:52:15.337249 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.21:51343] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaI8P2uX5e1Q32gqxH07MwAAAQ0"]
[Sat Feb 28 08:52:16.211538 2026] [:error] [pid 39183:tid 39209] [client 173.244.55.30:39733] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaI8QBCf4HvhVePw3LamXAAAABE"]
[Sat Feb 28 08:52:18.860691 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.29:26401] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaI8QmuX5e1Q32gqxH07aQAAARg"]
[Sat Feb 28 08:52:20.641615 2026] [:error] [pid 39185:tid 39254] [client 173.244.55.20:51449] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehehehe.php"] [unique_id "aaI8RBVE-FfM89u7BQataQAAAIg"]
[Sat Feb 28 08:52:22.017471 2026] [proxy_fcgi:error] [pid 39292:tid 39302] [client 173.244.55.26:63041] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:22.466327 2026] [proxy_fcgi:error] [pid 39292:tid 39307] [client 173.244.55.26:63041] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:22.909471 2026] [proxy_fcgi:error] [pid 39292:tid 39296] [client 173.244.55.26:63041] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:52:23.828155 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.26:63041] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/astra/inc/fm.php"] [unique_id "aaI8R6IAO5fN7BxyqcFBEgAAAMU"]
[Sat Feb 28 08:52:26.024173 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.25:20527] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaI8SmuX5e1Q32gqxH076AAAAQM"]
[Sat Feb 28 08:52:26.910893 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.29:37299] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaI8SmuX5e1Q32gqxH07_QAAARM"]
[Sat Feb 28 08:52:27.791969 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.29:31281] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaI8S6IAO5fN7BxyqcFBQQAAAME"]
[Sat Feb 28 08:52:28.681612 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.22:46741] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaI8TBVE-FfM89u7BQatkwAAAJg"]
[Sat Feb 28 08:52:29.565886 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.22:21813] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaI8TRVE-FfM89u7BQatlwAAAJU"]
[Sat Feb 28 08:52:30.453633 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.28:31547] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaI8Tn6mbajs3bzQGyuzCQAAAUA"]
[Sat Feb 28 08:52:31.793076 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.25:49785] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaI8TxCf4HvhVePw3LamyQAAAA0"]
[Sat Feb 28 08:52:32.664705 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.21:30191] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaI8UGuX5e1Q32gqxH08WgAAAQM"]
[Sat Feb 28 08:52:33.545256 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.30:20877] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaI8UWuX5e1Q32gqxH08ZAAAARg"]
[Sat Feb 28 08:52:34.424928 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.28:25813] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaI8UqIAO5fN7BxyqcFBmwAAAMg"]
[Sat Feb 28 08:52:36.209257 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.23:60659] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaI8VH6mbajs3bzQGyuzTAAAAVY"]
[Sat Feb 28 08:52:37.532093 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.31:47489] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaI8VVtZF9Zd_U7easCIgAAAAEg"]
[Sat Feb 28 08:52:39.314409 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.20:37771] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaI8VxVE-FfM89u7BQauCAAAAJg"]
[Sat Feb 28 08:52:40.184618 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.20:55303] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-admin/about.php"] [unique_id "aaI8WGuX5e1Q32gqxH082wAAAQM"]
[Sat Feb 28 08:52:41.963330 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.31:20957] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaI8WVtZF9Zd_U7easCIqwAAAEs"]
[Sat Feb 28 08:52:44.168672 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.22:36003] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaI8XH6mbajs3bzQGyuzwAAAAUw"]
[Sat Feb 28 08:52:46.839304 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.22:53997] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaI8XqIAO5fN7BxyqcFCLwAAAMA"]
[Sat Feb 28 08:52:48.165107 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.30:28773] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaI8YBCf4HvhVePw3LanPgAAABM"]
[Sat Feb 28 08:52:49.493365 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.25:64917] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/1.php"] [unique_id "aaI8YX6mbajs3bzQGyu0FQAAAVY"]
[Sat Feb 28 08:52:52.494988 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.29:50375] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaI8ZBVE-FfM89u7BQaufQAAAIU"]
[Sat Feb 28 08:52:55.629124 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.23:29335] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ectoplasm/about.php"] [unique_id "aaI8Z2uX5e1Q32gqxH0-XwAAAQA"]
[Sat Feb 28 08:52:56.946581 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.31:40063] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaI8aFtZF9Zd_U7easCI9AAAAFE"]
[Sat Feb 28 08:52:58.296803 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.29:23153] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aaI8amuX5e1Q32gqxH0-pwAAAQc"]
[Sat Feb 28 08:53:00.086845 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.25:59501] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ab.php"] [unique_id "aaI8bH6mbajs3bzQGyu0lQAAAVg"]
[Sat Feb 28 08:53:02.307099 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.28:51753] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aaI8bmuX5e1Q32gqxH0_HwAAARg"]
[Sat Feb 28 08:53:03.632821 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.23:55699] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaI8b36mbajs3bzQGyu0qQAAAUA"]
[Sat Feb 28 08:53:04.523810 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.22:54073] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaI8cKIAO5fN7BxyqcFC-QAAAMs"]
[Sat Feb 28 08:53:05.400102 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.26:22335] [client 173.244.55.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.26, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaI8cVtZF9Zd_U7easCJIAAAAEs"]
[Sat Feb 28 08:53:06.283427 2026] [:error] [pid 39184:tid 39222] [client 173.244.55.26:22335] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaI8cltZF9Zd_U7easCJMwAAAEM"]
[Sat Feb 28 08:53:08.061904 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.26:38135] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaI8dBVE-FfM89u7BQavAAAAAIQ"]
[Sat Feb 28 08:53:08.944286 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.28:63601] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaI8dGuX5e1Q32gqxH0_kgAAAQs"]
[Sat Feb 28 08:53:11.141288 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.29:38005] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/file.php"] [unique_id "aaI8d2uX5e1Q32gqxH0_wQAAAQ8"]
[Sat Feb 28 08:53:12.451471 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.21:27713] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaI8eGuX5e1Q32gqxH0_8gAAARY"]
[Sat Feb 28 08:53:13.332235 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.22:39353] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aaI8eRVE-FfM89u7BQavNgAAAIE"]
[Sat Feb 28 08:53:14.659343 2026] [:error] [pid 39183:tid 39198] [client 173.244.55.28:60463] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php7"] [unique_id "aaI8ehCf4HvhVePw3LanrQAAAAY"]
[Sat Feb 28 08:53:17.300703 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.30:51025] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaI8faIAO5fN7BxyqcFDnQAAAME"]
[Sat Feb 28 08:53:19.089534 2026] [proxy_fcgi:error] [pid 11791:tid 11817] [client 173.244.55.21:28017] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:53:19.975221 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.21:28017] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaI8f2uX5e1Q32gqxH1AjwAAAQI"]
[Sat Feb 28 08:53:20.862566 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.21:60061] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaI8gKIAO5fN7BxyqcFDuwAAANI"]
[Sat Feb 28 08:53:22.619054 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.20:22271] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaI8gn6mbajs3bzQGyu1lwAAAU8"]
[Sat Feb 28 08:53:23.489582 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.26:52749] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaI8gxCf4HvhVePw3Lan5QAAAAE"]
[Sat Feb 28 08:53:27.546196 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.23:37519] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaI8h2uX5e1Q32gqxH1BXwAAAQY"]
[Sat Feb 28 08:53:28.429818 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.23:41973] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaI8iGuX5e1Q32gqxH1BdAAAAQc"]
[Sat Feb 28 08:53:30.640138 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.20:57157] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaI8ihCf4HvhVePw3LaoCQAAABU"]
[Sat Feb 28 08:53:31.965507 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.21:29563] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaI8i2uX5e1Q32gqxH1BvwAAAQ4"]
[Sat Feb 28 08:53:32.836456 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.26:52759] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaI8jGuX5e1Q32gqxH1BzgAAARM"]
[Sat Feb 28 08:53:33.718457 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.29:50289] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaI8jWuX5e1Q32gqxH1B5AAAAQE"]
[Sat Feb 28 08:53:36.404546 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.22:30263] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff2.php"] [unique_id "aaI8kKIAO5fN7BxyqcFENwAAAMg"]
[Sat Feb 28 08:53:37.283980 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.31:31741] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff2.php"] [unique_id "aaI8kWuX5e1Q32gqxH1CNwAAARA"]
[Sat Feb 28 08:53:38.176355 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.31:40181] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff2.php"] [unique_id "aaI8kqIAO5fN7BxyqcFEQwAAAMY"]
[Sat Feb 28 08:53:39.052744 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.25:62515] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff2.php"] [unique_id "aaI8k2uX5e1Q32gqxH1CcAAAAQI"]
[Sat Feb 28 08:53:39.942774 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.31:42765] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff2.php"] [unique_id "aaI8k6IAO5fN7BxyqcFEVgAAAMU"]
[Sat Feb 28 08:53:43.057013 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.20:34859] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaI8l1tZF9Zd_U7easCKDQAAAEQ"]
[Sat Feb 28 08:53:43.930465 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.29:53141] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaI8l36mbajs3bzQGyu2wQAAAUs"]
[Sat Feb 28 08:53:47.028860 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.25:26225] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aaI8m2uX5e1Q32gqxH1DCwAAAQw"]
[Sat Feb 28 08:53:47.910018 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.23:47563] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aaI8mxVE-FfM89u7BQawegAAAJY"]
[Sat Feb 28 08:53:50.110462 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.28:36227] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aaI8nltZF9Zd_U7easCKSgAAAEk"]
[Sat Feb 28 08:53:53.680459 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.31:56591] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aaI8oaIAO5fN7BxyqcFExwAAAM0"]
[Sat Feb 28 08:53:55.009522 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.21:61625] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/"] [unique_id "aaI8o2uX5e1Q32gqxH1DtQAAAQ4"]
[Sat Feb 28 08:53:55.891593 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.30:56527] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/"] [unique_id "aaI8oxVE-FfM89u7BQawxAAAAIA"]
[Sat Feb 28 08:53:57.212763 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.20:35869] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/query/"] [unique_id "aaI8paIAO5fN7BxyqcFE_QAAANU"]
[Sat Feb 28 08:53:59.858291 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.31:27927] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/"] [unique_id "aaI8p2uX5e1Q32gqxH1EMQAAAQo"]
[Sat Feb 28 08:54:01.439243 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.26:45051] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaI8qVtZF9Zd_U7easCKmAAAAFc"]
[Sat Feb 28 08:54:03.648898 2026] [:error] [pid 39184:tid 39225] [client 173.244.55.31:33191] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaI8q1tZF9Zd_U7easCKtwAAAEY"]
[Sat Feb 28 08:54:06.375334 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.22:60949] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaI8rn6mbajs3bzQGyu4WgAAAVQ"]
[Sat Feb 28 08:54:06.595269 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.23:41545] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aaI8rqIAO5fN7BxyqcFFPQAAANE"]
[Sat Feb 28 08:54:09.716279 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.20:52183] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/"] [unique_id "aaI8sX6mbajs3bzQGyu4qwAAAUQ"]
[Sat Feb 28 08:54:11.051720 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.23:52739] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aaI8sxCf4HvhVePw3Lao-QAAABc"]
[Sat Feb 28 08:54:13.867322 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.23:23903] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI8tRVE-FfM89u7BQaxQwAAAI8"]
[Sat Feb 28 08:54:14.639428 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.25:25425] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/"] [unique_id "aaI8thVE-FfM89u7BQaxRwAAAJU"]
[Sat Feb 28 08:54:15.518689 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.20:26435] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/"] [unique_id "aaI8t36mbajs3bzQGyu4_gAAAUE"]
[Sat Feb 28 08:54:16.101499 2026] [:error] [pid 39183:tid 39203] [client 173.244.55.21:60499] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI8uBCf4HvhVePw3LapGAAAAAs"]
[Sat Feb 28 08:54:16.847894 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.31:61179] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/meta/"] [unique_id "aaI8uBVE-FfM89u7BQaxawAAAJE"]
[Sat Feb 28 08:54:17.851497 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.29:60565] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aaI8uWuX5e1Q32gqxH1FiAAAARM"]
[Sat Feb 28 08:54:18.740902 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.29:58821] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "aaI8uqIAO5fN7BxyqcFF2gAAANc"]
[Sat Feb 28 08:54:20.404619 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.30:57517] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload/image/"] [unique_id "aaI8vH6mbajs3bzQGyu5WQAAAU8"]
[Sat Feb 28 08:54:21.300675 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.29:32225] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload/image/"] [unique_id "aaI8vX6mbajs3bzQGyu5ZAAAAVc"]
[Sat Feb 28 08:54:21.418469 2026] [:error] [pid 39183:tid 39207] [client 173.244.55.26:61017] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaI8vRCf4HvhVePw3LapRAAAAA8"]
[Sat Feb 28 08:54:22.180066 2026] [:error] [pid 39183:tid 39192] [client 173.244.55.26:30215] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload/image/"] [unique_id "aaI8vhCf4HvhVePw3LapSgAAAAA"]
[Sat Feb 28 08:54:23.630438 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.28:51441] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaI8v1tZF9Zd_U7easCLJQAAAFU"]
[Sat Feb 28 08:54:24.865758 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.23:50325] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sites/default/files/"] [unique_id "aaI8wH6mbajs3bzQGyu5rQAAAUU"]
[Sat Feb 28 08:54:26.634744 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.20:59035] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/editor/"] [unique_id "aaI8whVE-FfM89u7BQax0QAAAIk"]
[Sat Feb 28 08:54:27.150303 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.28:21365] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI8w36mbajs3bzQGyu53gAAAUg"]
[Sat Feb 28 08:54:28.392502 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.25:30509] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/tmp/"] [unique_id "aaI8xBVE-FfM89u7BQax3gAAAJg"]
[Sat Feb 28 08:54:28.474904 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.22:61099] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI8xGuX5e1Q32gqxH1GQwAAARM"]
[Sat Feb 28 08:54:29.391117 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.26:53703] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI8xX6mbajs3bzQGyu5-wAAAU0"]
[Sat Feb 28 08:54:30.289695 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.21:25639] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI8xhVE-FfM89u7BQax9gAAAIo"]
[Sat Feb 28 08:54:31.101524 2026] [:error] [pid 39184:tid 39233] [client 173.244.55.23:63113] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/administrator/"] [unique_id "aaI8x1tZF9Zd_U7easCLRgAAAE4"]
[Sat Feb 28 08:54:31.161467 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.25:53769] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI8x6IAO5fN7BxyqcFGqwAAANM"]
[Sat Feb 28 08:54:31.981552 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.25:27203] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/administrator/"] [unique_id "aaI8x36mbajs3bzQGyu6GQAAAUE"]
[Sat Feb 28 08:54:32.041487 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.26:22771] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI8yH6mbajs3bzQGyu6GgAAAUQ"]
[Sat Feb 28 08:54:33.382258 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.28:28763] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI8yWuX5e1Q32gqxH1GlgAAAQo"]
[Sat Feb 28 08:54:34.178590 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.29:41961] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "aaI8ymuX5e1Q32gqxH1GrAAAARY"]
[Sat Feb 28 08:54:35.137477 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.25:27491] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aaI8y2uX5e1Q32gqxH1GxgAAAQ4"]
[Sat Feb 28 08:54:36.458650 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.23:56475] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pki-validation/admin.php"] [unique_id "aaI8zGuX5e1Q32gqxH1G3QAAAQU"]
[Sat Feb 28 08:54:37.705767 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.26:39169] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mt/"] [unique_id "aaI8zaIAO5fN7BxyqcFG_gAAAMo"]
[Sat Feb 28 08:54:37.789918 2026] [:error] [pid 39184:tid 39233] [client 173.244.55.28:53459] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI8zVtZF9Zd_U7easCLowAAAE4"]
[Sat Feb 28 08:54:39.115733 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.22:45715] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI8z36mbajs3bzQGyu6ogAAAU8"]
[Sat Feb 28 08:54:40.435735 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.28:50833] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI80GuX5e1Q32gqxH1HPgAAAQc"]
[Sat Feb 28 08:54:41.754943 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.30:37017] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/network.php"] [unique_id "aaI80X6mbajs3bzQGyu7CAAAAU4"]
[Sat Feb 28 08:54:42.635039 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.20:58069] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aaI80n6mbajs3bzQGyu7IQAAAU0"]
[Sat Feb 28 08:54:43.509459 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.25:22889] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aaI802uX5e1Q32gqxH1HeQAAARY"]
[Sat Feb 28 08:54:44.393638 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.25:60299] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aaI81H6mbajs3bzQGyu7SAAAAUk"]
[Sat Feb 28 08:54:44.438561 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.25:44997] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaI81KIAO5fN7BxyqcFHTQAAANU"]
[Sat Feb 28 08:54:45.317819 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.28:57497] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaI81RVE-FfM89u7BQaydQAAAJI"]
[Sat Feb 28 08:54:45.702694 2026] [:error] [pid 39184:tid 39225] [client 173.244.55.30:51311] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aaI81VtZF9Zd_U7easCL5gAAAEY"]
[Sat Feb 28 08:54:46.195188 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.23:61595] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaI81hVE-FfM89u7BQayewAAAI0"]
[Sat Feb 28 08:54:47.086240 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.28:43037] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaI81xVE-FfM89u7BQayhwAAAJI"]
[Sat Feb 28 08:54:48.403777 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.31:59227] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI82GuX5e1Q32gqxH1H3QAAARE"]
[Sat Feb 28 08:54:49.729594 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.29:57525] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI82VtZF9Zd_U7easCMAQAAAEw"]
[Sat Feb 28 08:54:50.615180 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.23:48417] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aaI82qIAO5fN7BxyqcFH4gAAAMY"]
[Sat Feb 28 08:54:52.369867 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.22:65001] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaI83KIAO5fN7BxyqcFH-wAAANM"]
[Sat Feb 28 08:54:53.652830 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.29:37283] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/aryabot/"] [unique_id "aaI83WuX5e1Q32gqxH1ITAAAARI"]
[Sat Feb 28 08:54:53.690743 2026] [:error] [pid 39183:tid 39207] [client 173.244.55.21:37979] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI83RCf4HvhVePw3LaqGwAAAA8"]
[Sat Feb 28 08:54:54.568610 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.28:54627] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/shell20211028.php"] [unique_id "aaI83qIAO5fN7BxyqcFIEgAAAMI"]
[Sat Feb 28 08:54:57.228455 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.23:23181] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI84WuX5e1Q32gqxH1IkgAAAQE"]
[Sat Feb 28 08:54:57.609933 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.22:35995] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/limit/"] [unique_id "aaI84aIAO5fN7BxyqcFIRwAAAMU"]
[Sat Feb 28 08:55:00.250927 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.26:32929] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/ubh/"] [unique_id "aaI85FtZF9Zd_U7easCMZQAAAEU"]
[Sat Feb 28 08:55:00.570335 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.25:54777] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI85H6mbajs3bzQGyu8NgAAAUE"]
[Sat Feb 28 08:55:01.920707 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.31:58665] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI85X6mbajs3bzQGyu8RAAAAUs"]
[Sat Feb 28 08:55:02.010475 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.31:28159] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-diambar/includes/"] [unique_id "aaI85qIAO5fN7BxyqcFItgAAAMU"]
[Sat Feb 28 08:55:02.806899 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.26:58333] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI85muX5e1Q32gqxH1I_wAAAQU"]
[Sat Feb 28 08:55:03.693476 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.29:26393] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI852uX5e1Q32gqxH1JHgAAAQU"]
[Sat Feb 28 08:55:03.799619 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.23:61671] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-hps/sh/"] [unique_id "aaI8536mbajs3bzQGyu8WQAAAUk"]
[Sat Feb 28 08:55:04.680293 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.29:29191] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-hps/sh/"] [unique_id "aaI86GuX5e1Q32gqxH1JSAAAAQ8"]
[Sat Feb 28 08:55:05.925344 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.25:39919] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI86WuX5e1Q32gqxH1JbQAAAQc"]
[Sat Feb 28 08:55:06.805610 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.29:27427] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaI86qIAO5fN7BxyqcFI3wAAANc"]
[Sat Feb 28 08:55:07.684120 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.26:56875] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI862uX5e1Q32gqxH1JiwAAAQo"]
[Sat Feb 28 08:55:08.424094 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.31:64887] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/patriotic/wp-includes/images/smilies/"] [unique_id "aaI87KIAO5fN7BxyqcFI8wAAANI"]
[Sat Feb 28 08:55:09.019924 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.20:49015] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap/bypass.php"] [unique_id "aaI87aIAO5fN7BxyqcFI_wAAANQ"]
[Sat Feb 28 08:55:10.666131 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.23:46939] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/alera/"] [unique_id "aaI87qIAO5fN7BxyqcFJGgAAANU"]
[Sat Feb 28 08:55:10.776988 2026] [:error] [pid 39183:tid 39212] [client 173.244.55.26:45075] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/admin.php"] [unique_id "aaI87hCf4HvhVePw3LaqQwAAABQ"]
[Sat Feb 28 08:55:11.553695 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.25:32749] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/alera/"] [unique_id "aaI8736mbajs3bzQGyu8xAAAAUs"]
[Sat Feb 28 08:55:12.435055 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.22:47685] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/alera/"] [unique_id "aaI88GuX5e1Q32gqxH1J9AAAAQo"]
[Sat Feb 28 08:55:13.771755 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.29:31925] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/rishi/"] [unique_id "aaI88VtZF9Zd_U7easCMzwAAAFM"]
[Sat Feb 28 08:55:13.864437 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.21:34567] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaI88WuX5e1Q32gqxH1KNQAAAQk"]
[Sat Feb 28 08:55:16.068717 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.21:38003] [client 173.244.55.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.21, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI89KIAO5fN7BxyqcFJRQAAANg"]
[Sat Feb 28 08:55:17.306631 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.22:20907] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/zakra/"] [unique_id "aaI89WuX5e1Q32gqxH1KzQAAAQQ"]
[Sat Feb 28 08:55:18.205635 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.22:57203] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/zakra/"] [unique_id "aaI89qIAO5fN7BxyqcFJVwAAANg"]
[Sat Feb 28 08:55:18.280964 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.21:38003] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaI89qIAO5fN7BxyqcFJWgAAAMk"]
[Sat Feb 28 08:55:19.089990 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.23:44237] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/zakra/"] [unique_id "aaI896IAO5fN7BxyqcFJYwAAAMc"]
[Sat Feb 28 08:55:20.957008 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.23:49961] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/product.php"] [unique_id "aaI8-KIAO5fN7BxyqcFJjgAAAMc"]
[Sat Feb 28 08:55:21.781982 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.20:65103] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up/.well-known/"] [unique_id "aaI8-aIAO5fN7BxyqcFJlQAAAMI"]
[Sat Feb 28 08:55:23.199642 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.25:64561] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI8-36mbajs3bzQGyu9dAAAAUQ"]
[Sat Feb 28 08:55:24.525699 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.29:53043] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaI8_GuX5e1Q32gqxH1LZAAAAQE"]
[Sat Feb 28 08:55:25.856318 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.25:56303] [client 173.244.55.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.25, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI8_VtZF9Zd_U7easCNEAAAAEc"]
[Sat Feb 28 08:55:29.027560 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.25:56303] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaI9AVtZF9Zd_U7easCNJgAAAFc"]
[Sat Feb 28 08:55:29.922817 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.20:23457] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/index.php"] [unique_id "aaI9AX6mbajs3bzQGyu9wQAAAVg"]
[Sat Feb 28 08:55:30.802695 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.20:45319] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/index.php"] [unique_id "aaI9AltZF9Zd_U7easCNOwAAAFI"]
[Sat Feb 28 08:55:32.582563 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.23:32077] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaI9BFtZF9Zd_U7easCNWwAAAFI"]
[Sat Feb 28 08:55:32.629058 2026] [:error] [pid 39183:tid 39192] [client 173.244.55.26:52265] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/"] [unique_id "aaI9BBCf4HvhVePw3LaqeQAAAAA"]
[Sat Feb 28 08:55:33.469493 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.23:38111] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaI9BRCf4HvhVePw3LaqggAAAAE"]
[Sat Feb 28 08:55:35.716405 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.28:47269] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/"] [unique_id "aaI9B2uX5e1Q32gqxH1MAAAAARU"]
[Sat Feb 28 08:55:36.982179 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.21:64443] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI9CKIAO5fN7BxyqcFKTgAAAMc"]
[Sat Feb 28 08:55:37.044045 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.31:54971] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/core/"] [unique_id "aaI9CX6mbajs3bzQGyu-DQAAAUw"]
[Sat Feb 28 08:55:38.311957 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.29:39051] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-trackback.php"] [unique_id "aaI9Cn6mbajs3bzQGyu-GwAAAVU"]
[Sat Feb 28 08:55:38.376080 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.22:41909] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aaI9CqIAO5fN7BxyqcFKXgAAAMA"]
[Sat Feb 28 08:55:40.067555 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.21:50775] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-header.php"] [unique_id "aaI9DKIAO5fN7BxyqcFKcAAAAMk"]
[Sat Feb 28 08:55:43.199737 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.20:62527] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI9D2uX5e1Q32gqxH1MZwAAARQ"]
[Sat Feb 28 08:55:44.084480 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.22:56513] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaI9EH6mbajs3bzQGyu-hAAAAUc"]
[Sat Feb 28 08:55:45.115730 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.30:47671] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/"] [unique_id "aaI9EX6mbajs3bzQGyu-kQAAAVc"]
[Sat Feb 28 08:55:45.858124 2026] [:error] [pid 39183:tid 39195] [client 173.244.55.25:50825] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI9ERCf4HvhVePw3LaqwgAAAAM"]
[Sat Feb 28 08:55:48.082605 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.26:21913] [client 173.244.55.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.26, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI9FGuX5e1Q32gqxH1MuwAAAQI"]
[Sat Feb 28 08:55:48.538164 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.26:21913] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI9FGuX5e1Q32gqxH1MwAAAARc"]
[Sat Feb 28 08:55:49.140889 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.21:21923] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/cp-pro/"] [unique_id "aaI9FRVE-FfM89u7BQa0mAAAAJA"]
[Sat Feb 28 08:55:49.866654 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.22:22617] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-theme-editor/include.php"] [unique_id "aaI9FaIAO5fN7BxyqcFKuwAAAMQ"]
[Sat Feb 28 08:55:50.062859 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.29:36411] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/cp-pro/"] [unique_id "aaI9FmuX5e1Q32gqxH1M1gAAAQ4"]
[Sat Feb 28 08:55:50.738741 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.26:56397] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-theme-editor/include.php"] [unique_id "aaI9FhVE-FfM89u7BQa0ogAAAIA"]
[Sat Feb 28 08:55:50.949750 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.29:63327] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/cp-pro/"] [unique_id "aaI9FqIAO5fN7BxyqcFKyQAAAMg"]
[Sat Feb 28 08:55:51.829361 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.21:58627] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/cp-pro/"] [unique_id "aaI9F36mbajs3bzQGyu-8gAAAVg"]
[Sat Feb 28 08:55:52.701970 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.29:54877] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/cp-pro/"] [unique_id "aaI9GKIAO5fN7BxyqcFK5QAAANQ"]
[Sat Feb 28 08:55:53.374560 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.28:23127] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aaI9GX6mbajs3bzQGyu_DQAAAU8"]
[Sat Feb 28 08:55:54.250671 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.28:45611] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aaI9Gn6mbajs3bzQGyu_HwAAAVI"]
[Sat Feb 28 08:55:55.129345 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.31:40125] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aaI9G2uX5e1Q32gqxH1NGwAAAQ0"]
[Sat Feb 28 08:56:00.476691 2026] [:error] [pid 39184:tid 39242] [client 173.244.55.21:28597] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/install.php"] [unique_id "aaI9IFtZF9Zd_U7easCOWwAAAFc"]
[Sat Feb 28 08:56:02.278051 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.25:58461] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaI9In6mbajs3bzQGyu_qgAAAUg"]
[Sat Feb 28 08:56:03.166746 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.20:28073] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aaI9I2uX5e1Q32gqxH1NxwAAAQI"]
[Sat Feb 28 08:56:04.044431 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.31:59847] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aaI9JBCf4HvhVePw3LarDAAAABA"]
[Sat Feb 28 08:56:04.923201 2026] [:error] [pid 39183:tid 39207] [client 173.244.55.26:48209] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aaI9JBCf4HvhVePw3LarEwAAAA8"]
[Sat Feb 28 08:56:07.157250 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.28:57519] [client 173.244.55.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.28, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI9J2uX5e1Q32gqxH1OFgAAAQk"]
[Sat Feb 28 08:56:07.602005 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.28:57519] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaI9J2uX5e1Q32gqxH1OJAAAARE"]
[Sat Feb 28 08:56:09.849261 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.21:37807] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaI9KWuX5e1Q32gqxH1OUwAAAQU"]
[Sat Feb 28 08:56:11.171379 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.28:54301] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaI9K6IAO5fN7BxyqcFLzAAAANY"]
[Sat Feb 28 08:56:14.694077 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.22:43423] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaI9LhVE-FfM89u7BQa1ZAAAAIo"]
[Sat Feb 28 08:56:15.570636 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.29:61997] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaI9L2uX5e1Q32gqxH1OvAAAAQI"]
[Sat Feb 28 08:56:17.796739 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.22:30105] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaI9MWuX5e1Q32gqxH1PFAAAAQo"]
[Sat Feb 28 08:56:18.667098 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.28:59799] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaI9MltZF9Zd_U7easCO2AAAAEw"]
[Sat Feb 28 08:56:21.912455 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.23:63893] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "aaI9NaIAO5fN7BxyqcFMEQAAAMA"]
[Sat Feb 28 08:56:23.248497 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.29:58231] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/sunrise/colors_95.php"] [unique_id "aaI9N36mbajs3bzQGyvA1gAAAUA"]
[Sat Feb 28 08:56:24.592726 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.30:63511] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaI9OKIAO5fN7BxyqcFMLwAAANE"]
[Sat Feb 28 08:56:25.925638 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.22:46965] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaI9ORCf4HvhVePw3LarhQAAABc"]
[Sat Feb 28 08:56:28.120051 2026] [:error] [pid 39184:tid 39234] [client 173.244.55.29:26139] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaI9PFtZF9Zd_U7easCO-gAAAE8"]
[Sat Feb 28 08:56:30.365836 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.31:48233] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaI9PmuX5e1Q32gqxH1QTQAAAQ8"]
[Sat Feb 28 08:56:32.142788 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.25:58467] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaI9QH6mbajs3bzQGyvBmgAAAUo"]
[Sat Feb 28 08:56:33.012779 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.25:47207] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/wp-conflg.php"] [unique_id "aaI9QX6mbajs3bzQGyvBtQAAAUc"]
[Sat Feb 28 08:56:35.228465 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.26:30367] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaI9Q6IAO5fN7BxyqcFMfAAAANY"]
[Sat Feb 28 08:56:43.981770 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.29:47841] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaI9SxCf4HvhVePw3Lar8gAAABA"]
[Sat Feb 28 08:56:44.864363 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.20:42783] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaI9TH6mbajs3bzQGyvCTgAAAU4"]
[Sat Feb 28 08:56:45.735534 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.25:27425] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaI9TVtZF9Zd_U7easCPXgAAAFE"]
[Sat Feb 28 08:56:46.618847 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.20:52603] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaI9TqIAO5fN7BxyqcFNCQAAANQ"]
[Sat Feb 28 08:56:47.945406 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.31:24709] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaI9T36mbajs3bzQGyvCbAAAAVM"]
[Sat Feb 28 08:56:48.829475 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.30:22663] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaI9UBVE-FfM89u7BQa2VAAAAJE"]
[Sat Feb 28 08:56:50.167453 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.26:31925] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/as.php"] [unique_id "aaI9UmuX5e1Q32gqxH1R3wAAARU"]
[Sat Feb 28 08:56:51.497759 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.25:37731] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaI9UxVE-FfM89u7BQa2awAAAJA"]
[Sat Feb 28 08:56:52.369589 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.25:25711] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaI9VH6mbajs3bzQGyvCuQAAAUQ"]
[Sat Feb 28 08:56:53.238375 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.20:27913] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaI9VX6mbajs3bzQGyvC2wAAAUQ"]
[Sat Feb 28 08:56:54.123780 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.30:20303] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaI9Vn6mbajs3bzQGyvC8wAAAUo"]
[Sat Feb 28 08:56:57.181353 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.28:43651] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/phpadmin/as.php"] [unique_id "aaI9WRCf4HvhVePw3LasHAAAAAo"]
[Sat Feb 28 08:56:58.076555 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.28:54611] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/phpadmin/as.php"] [unique_id "aaI9Wn6mbajs3bzQGyvDNQAAAVg"]
[Sat Feb 28 08:56:58.946758 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.28:39663] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/phpadmin/as.php"] [unique_id "aaI9WhCf4HvhVePw3LasHwAAAA4"]
[Sat Feb 28 08:57:00.255754 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.25:29733] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaI9XGuX5e1Q32gqxH1SSQAAARU"]
[Sat Feb 28 08:57:01.135091 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.20:52729] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aaI9XWuX5e1Q32gqxH1STgAAAQU"]
[Sat Feb 28 08:57:02.909881 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.28:62347] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaI9Xn6mbajs3bzQGyvDfwAAAUE"]
[Sat Feb 28 08:57:06.097400 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.28:43323] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaI9YqIAO5fN7BxyqcFNwwAAANg"]
[Sat Feb 28 08:57:07.874614 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.31:39925] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaI9Y2uX5e1Q32gqxH1SqwAAAQo"]
[Sat Feb 28 08:57:08.745670 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.23:23789] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaI9ZFtZF9Zd_U7easCQJwAAAEU"]
[Sat Feb 28 08:57:09.632819 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.25:57661] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaI9ZX6mbajs3bzQGyvDuQAAAUY"]
[Sat Feb 28 08:57:10.510617 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.28:65149] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaI9Zn6mbajs3bzQGyvDwgAAAVM"]
[Sat Feb 28 08:57:11.839178 2026] [:error] [pid 39183:tid 39192] [client 173.244.55.20:44647] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl2023.php"] [unique_id "aaI9ZxCf4HvhVePw3LasaQAAAAA"]
[Sat Feb 28 08:57:15.420846 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.21:20601] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaI9a2uX5e1Q32gqxH1TLQAAARg"]
[Sat Feb 28 08:57:17.194678 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.21:39083] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/view-more/ioxi.php"] [unique_id "aaI9bWuX5e1Q32gqxH1TUgAAARU"]
[Sat Feb 28 08:57:18.544532 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.26:62169] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaI9bmuX5e1Q32gqxH1TbQAAARU"]
[Sat Feb 28 08:57:19.415094 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.21:52593] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaI9b6IAO5fN7BxyqcFOOgAAANI"]
[Sat Feb 28 08:57:20.296962 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.26:59235] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaI9cH6mbajs3bzQGyvEPgAAAUY"]
[Sat Feb 28 08:57:21.628404 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.20:33025] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/warm.PhP7"] [unique_id "aaI9cX6mbajs3bzQGyvEVAAAAU4"]
[Sat Feb 28 08:57:23.826254 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.25:27183] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaI9c36mbajs3bzQGyvEfAAAAU4"]
[Sat Feb 28 08:57:25.609452 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.22:48931] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehehehe.php"] [unique_id "aaI9dX6mbajs3bzQGyvEmwAAAU8"]
[Sat Feb 28 08:57:26.951965 2026] [proxy_fcgi:error] [pid 39183:tid 39209] [client 173.244.55.28:49553] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:27.399440 2026] [proxy_fcgi:error] [pid 39183:tid 39208] [client 173.244.55.28:49553] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:27.847467 2026] [proxy_fcgi:error] [pid 39183:tid 39196] [client 173.244.55.28:49553] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:30.068835 2026] [:error] [pid 39183:tid 39193] [client 173.244.55.28:49553] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaI9ehCf4HvhVePw3Las8QAAAAE"]
[Sat Feb 28 08:57:30.942535 2026] [:error] [pid 39292:tid 39307] [client 173.244.55.28:46909] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaI9eqIAO5fN7BxyqcFOpgAAAM0"]
[Sat Feb 28 08:57:31.833212 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.30:34565] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaI9exCf4HvhVePw3LatCQAAAA4"]
[Sat Feb 28 08:57:32.719524 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.23:58593] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaI9fBVE-FfM89u7BQa3swAAAIo"]
[Sat Feb 28 08:57:33.610018 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.29:20479] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaI9fRVE-FfM89u7BQa3uwAAAIQ"]
[Sat Feb 28 08:57:34.489589 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.31:57789] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaI9fhCf4HvhVePw3LatKAAAAAo"]
[Sat Feb 28 08:57:35.813088 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.25:58615] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaI9fxVE-FfM89u7BQa31QAAAJY"]
[Sat Feb 28 08:57:36.692084 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.30:22315] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaI9gKIAO5fN7BxyqcFO7QAAAMA"]
[Sat Feb 28 08:57:37.575439 2026] [:error] [pid 39183:tid 39216] [client 173.244.55.31:20589] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaI9gRCf4HvhVePw3LatQAAAABg"]
[Sat Feb 28 08:57:38.460940 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.21:59775] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaI9gmuX5e1Q32gqxH1UqgAAAQs"]
[Sat Feb 28 08:57:39.332803 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.21:43681] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/themes.php"] [unique_id "aaI9g1tZF9Zd_U7easCRCAAAAEk"]
[Sat Feb 28 08:57:41.123164 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.28:54553] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaI9hWuX5e1Q32gqxH1U5gAAARQ"]
[Sat Feb 28 08:57:42.457115 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.31:29497] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaI9hqIAO5fN7BxyqcFPNgAAAMc"]
[Sat Feb 28 08:57:43.332295 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.23:41665] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaI9h36mbajs3bzQGyvFaAAAAUA"]
[Sat Feb 28 08:57:44.214784 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.25:62009] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaI9iH6mbajs3bzQGyvFcwAAAUo"]
[Sat Feb 28 08:57:45.982037 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.30:61609] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaI9iaIAO5fN7BxyqcFPYwAAANA"]
[Sat Feb 28 08:57:47.774153 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.21:38707] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaI9i2uX5e1Q32gqxH1VXwAAAQw"]
[Sat Feb 28 08:57:50.017442 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.29:40673] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaI9jmuX5e1Q32gqxH1ViQAAARQ"]
[Sat Feb 28 08:57:52.750314 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.29:31767] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaI9kH6mbajs3bzQGyvF3AAAAVA"]
[Sat Feb 28 08:57:54.077793 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.28:23913] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaI9kmuX5e1Q32gqxH1V9gAAARU"]
[Sat Feb 28 08:57:56.301816 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.22:39821] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaI9lBVE-FfM89u7BQa43AAAAIM"]
[Sat Feb 28 08:58:03.081329 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.20:62843] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaI9m2uX5e1Q32gqxH1W2gAAAQg"]
[Sat Feb 28 08:58:03.963758 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.31:41007] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaI9m6IAO5fN7BxyqcFQGQAAAMU"]
[Sat Feb 28 08:58:04.859701 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.23:40937] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaI9nKIAO5fN7BxyqcFQJgAAAMM"]
[Sat Feb 28 08:58:05.738438 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.22:51909] [client 173.244.55.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.22, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaI9nWuX5e1Q32gqxH1W8QAAAQ0"]
[Sat Feb 28 08:58:06.629501 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.22:51909] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaI9nmuX5e1Q32gqxH1W9wAAAQY"]
[Sat Feb 28 08:58:07.970066 2026] [:error] [pid 39185:tid 39246] [client 173.244.55.23:34645] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaI9nxVE-FfM89u7BQa5SgAAAIA"]
[Sat Feb 28 08:58:09.711790 2026] [:error] [pid 39292:tid 39300] [client 173.244.55.30:24053] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaI9oaIAO5fN7BxyqcFQWgAAAMY"]
[Sat Feb 28 08:58:11.050753 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.25:38895] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaI9o1tZF9Zd_U7easCSKAAAAEk"]
[Sat Feb 28 08:58:11.930874 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.25:53287] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaI9o2uX5e1Q32gqxH1XNAAAAQM"]
[Sat Feb 28 08:58:14.168264 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.28:52913] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/file.php"] [unique_id "aaI9pn6mbajs3bzQGyvGywAAAUE"]
[Sat Feb 28 08:58:17.276273 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.29:26007] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaI9qVtZF9Zd_U7easCSeQAAAEs"]
[Sat Feb 28 08:58:18.158116 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.26:26259] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aaI9qmuX5e1Q32gqxH1XogAAAQE"]
[Sat Feb 28 08:58:19.033666 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.26:47861] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aaI9q1tZF9Zd_U7easCSigAAAFg"]
[Sat Feb 28 08:58:21.715564 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.25:28595] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/cloud.php"] [unique_id "aaI9rRCf4HvhVePw3LauwgAAAAg"]
[Sat Feb 28 08:58:23.035744 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.21:56809] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaI9r36mbajs3bzQGyvHNwAAAUE"]
[Sat Feb 28 08:58:24.833445 2026] [proxy_fcgi:error] [pid 22194:tid 22212] [client 173.244.55.21:64189] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:58:26.549252 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.21:64189] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaI9sn6mbajs3bzQGyvHfgAAAUk"]
[Sat Feb 28 08:58:27.459572 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.20:32401] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaI9s36mbajs3bzQGyvHjAAAAVY"]
[Sat Feb 28 08:58:29.286373 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.26:25797] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaI9taIAO5fN7BxyqcFRLAAAAMI"]
[Sat Feb 28 08:58:30.172865 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.22:39813] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaI9tmuX5e1Q32gqxH1YlwAAAQ0"]
[Sat Feb 28 08:58:33.364336 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.22:37805] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aaI9uaIAO5fN7BxyqcFRWgAAAMs"]
[Sat Feb 28 08:58:35.177799 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.25:53199] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaI9u2uX5e1Q32gqxH1ZNQAAAQM"]
[Sat Feb 28 08:58:36.063637 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.22:30083] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaI9vKIAO5fN7BxyqcFRgAAAAMA"]
[Sat Feb 28 08:58:38.303520 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.26:56533] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaI9vltZF9Zd_U7easCS_AAAAEU"]
[Sat Feb 28 08:58:39.632490 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.20:65167] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaI9v2uX5e1Q32gqxH1ZlwAAAQo"]
[Sat Feb 28 08:58:40.517520 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.29:40065] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaI9wKIAO5fN7BxyqcFRuwAAAMw"]
[Sat Feb 28 08:58:41.395217 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.23:42683] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaI9wRCf4HvhVePw3LavfQAAABc"]
[Sat Feb 28 08:58:44.532162 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.28:54923] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaI9xGuX5e1Q32gqxH1aDgAAARc"]
[Sat Feb 28 08:58:45.871407 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.29:31643] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaI9xWuX5e1Q32gqxH1aKQAAARM"]
[Sat Feb 28 08:58:47.223933 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.31:25919] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-atom.php"] [unique_id "aaI9x6IAO5fN7BxyqcFR-gAAANY"]
[Sat Feb 28 08:58:48.994341 2026] [:error] [pid 39183:tid 39198] [client 173.244.55.21:56467] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up.php"] [unique_id "aaI9yBCf4HvhVePw3LavzgAAAAY"]
[Sat Feb 28 08:58:51.716562 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.31:38329] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aaI9y6IAO5fN7BxyqcFSFQAAAMs"]
[Sat Feb 28 08:58:52.598416 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.28:24951] [client 173.244.55.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.28, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aaI9zFtZF9Zd_U7easCTZwAAAFY"]
[Sat Feb 28 08:58:53.961120 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.28:24951] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "aaI9zVtZF9Zd_U7easCTgAAAAFU"]
[Sat Feb 28 08:58:56.153495 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.31:45667] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaI90FtZF9Zd_U7easCTrQAAAFE"]
[Sat Feb 28 08:58:57.042473 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.23:37399] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaI90X6mbajs3bzQGyvJjwAAAUA"]
[Sat Feb 28 08:58:57.918081 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.30:34865] [client 173.244.55.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.30, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaI90aIAO5fN7BxyqcFSYQAAAMo"]
[Sat Feb 28 08:59:02.835564 2026] [proxy_fcgi:error] [pid 39292:tid 39303] [client 173.244.55.30:34865] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:59:04.188546 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.30:34865] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aaI92KIAO5fN7BxyqcFSzAAAAM4"]
[Sat Feb 28 08:59:05.520233 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.29:41993] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2023/05/404.php"] [unique_id "aaI92aIAO5fN7BxyqcFS6wAAANc"]
[Sat Feb 28 08:59:10.007759 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.22:40099] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/plugins.php"] [unique_id "aaI93ltZF9Zd_U7easCUIwAAAEc"]
[Sat Feb 28 08:59:12.218291 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.28:31945] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaI94KIAO5fN7BxyqcFTSgAAANE"]
[Sat Feb 28 08:59:13.562581 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.29:43127] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/install.php"] [unique_id "aaI94aIAO5fN7BxyqcFTWQAAANc"]
[Sat Feb 28 08:59:15.326945 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.21:31669] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaI9436mbajs3bzQGyvKYQAAAVg"]
[Sat Feb 28 08:59:16.215347 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.21:20133] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/slider.php"] [unique_id "aaI95FtZF9Zd_U7easCUXgAAAEA"]
[Sat Feb 28 08:59:17.095172 2026] [:error] [pid 39183:tid 39199] [client 173.244.55.21:44301] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/slider.php"] [unique_id "aaI95RCf4HvhVePw3LawwgAAAAc"]
[Sat Feb 28 08:59:17.974752 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.21:36439] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/slider.php"] [unique_id "aaI95aIAO5fN7BxyqcFTggAAANQ"]
[Sat Feb 28 08:59:18.846530 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.31:26379] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/slider.php"] [unique_id "aaI95n6mbajs3bzQGyvKfQAAAUo"]
[Sat Feb 28 08:59:21.544574 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.29:47547] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaI96RVE-FfM89u7BQa8LgAAAJE"]
[Sat Feb 28 08:59:25.895994 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.23:33939] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aaI97RVE-FfM89u7BQa8VAAAAIY"]
[Sat Feb 28 08:59:27.233132 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.26:53599] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaI97xVE-FfM89u7BQa8bAAAAI0"]
[Sat Feb 28 08:59:28.127697 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.31:48125] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaI98BVE-FfM89u7BQa8gAAAAJQ"]
[Sat Feb 28 08:59:29.001143 2026] [:error] [pid 39184:tid 39228] [client 173.244.55.26:27609] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaI98VtZF9Zd_U7easCUwAAAAEk"]
[Sat Feb 28 08:59:29.887527 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.26:26237] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaI98aIAO5fN7BxyqcFUCQAAAMs"]
[Sat Feb 28 08:59:31.679443 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.28:31987] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/"] [unique_id "aaI986IAO5fN7BxyqcFUQgAAANA"]
[Sat Feb 28 08:59:33.893473 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.30:29097] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aaI99aIAO5fN7BxyqcFUYwAAANg"]
[Sat Feb 28 08:59:34.769349 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.28:59161] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/"] [unique_id "aaI99qIAO5fN7BxyqcFUbwAAAMU"]
[Sat Feb 28 08:59:36.558607 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.20:29443] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/query/"] [unique_id "aaI9-BCf4HvhVePw3LaxQQAAABM"]
[Sat Feb 28 08:59:40.567007 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.31:50471] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI9_GuX5e1Q32gqxH1dJAAAARE"]
[Sat Feb 28 08:59:41.436492 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.20:45597] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI9_X6mbajs3bzQGyvLsQAAAVY"]
[Sat Feb 28 08:59:43.215462 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.26:26341] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/dist/"] [unique_id "aaI9_36mbajs3bzQGyvLzAAAAUU"]
[Sat Feb 28 08:59:46.770776 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.28:21619] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widget/"] [unique_id "aaI-AmuX5e1Q32gqxH1dpwAAARA"]
[Sat Feb 28 08:59:48.554438 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.31:55833] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aaI-BBVE-FfM89u7BQa9nQAAAIk"]
[Sat Feb 28 08:59:49.437262 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.22:40881] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aaI-BRVE-FfM89u7BQa9vwAAAJc"]
[Sat Feb 28 08:59:52.107130 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.25:61789] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/"] [unique_id "aaI-CBCf4HvhVePw3LaxywAAAA4"]
[Sat Feb 28 08:59:57.028996 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.22:47335] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/meta/"] [unique_id "aaI-DWuX5e1Q32gqxH1eRwAAAQg"]
[Sat Feb 28 08:59:57.905996 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.29:58807] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/meta/"] [unique_id "aaI-DWuX5e1Q32gqxH1eYgAAAQc"]
[Sat Feb 28 08:59:59.239593 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.26:54903] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/"] [unique_id "aaI-D1tZF9Zd_U7easCVzgAAAEw"]
[Sat Feb 28 09:00:01.032888 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.22:40379] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/"] [unique_id "aaI-ERVE-FfM89u7BQa-iAAAAI0"]
[Sat Feb 28 09:00:02.351672 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.29:41659] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/elementor/"] [unique_id "aaI-EltZF9Zd_U7easCV-QAAAEw"]
[Sat Feb 28 09:00:04.562010 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.26:57833] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-content/uploads/"] [unique_id "aaI-FGuX5e1Q32gqxH1fBAAAARg"]
[Sat Feb 28 09:00:06.343072 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.23:60997] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/"] [unique_id "aaI-Fn6mbajs3bzQGyvMsAAAAUY"]
[Sat Feb 28 09:00:11.681400 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.22:39611] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aaI-G2uX5e1Q32gqxH1fdwAAAQA"]
[Sat Feb 28 09:00:12.577871 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.23:36055] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/"] [unique_id "aaI-HGuX5e1Q32gqxH1fjAAAAQc"]
[Sat Feb 28 09:00:15.265701 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.21:45913] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/home/"] [unique_id "aaI-H1tZF9Zd_U7easCWmwAAAEQ"]
[Sat Feb 28 09:00:17.044269 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.26:42377] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/modules/"] [unique_id "aaI-IX6mbajs3bzQGyvNIwAAAUk"]
[Sat Feb 28 09:00:18.367201 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.28:33019] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aaI-IqIAO5fN7BxyqcFWXwAAAMQ"]
[Sat Feb 28 09:00:22.381607 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.31:49985] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aaI-JhCf4HvhVePw3LazYwAAABM"]
[Sat Feb 28 09:00:23.261753 2026] [:error] [pid 39185:tid 39267] [client 173.244.55.30:64965] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aaI-JxVE-FfM89u7BQa_igAAAJU"]
[Sat Feb 28 09:00:34.592748 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.23:23763] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/linkpreview/"] [unique_id "aaI-MmuX5e1Q32gqxH1hKQAAAQI"]
[Sat Feb 28 09:00:38.603797 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.29:41217] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/home/"] [unique_id "aaI-NhVE-FfM89u7BQbALAAAAIM"]
[Sat Feb 28 09:00:41.269729 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.22:45147] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/random/"] [unique_id "aaI-OaIAO5fN7BxyqcFXOQAAANU"]
[Sat Feb 28 09:00:50.435774 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.28:55761] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/thuoc-nam/"] [unique_id "aaI-QltZF9Zd_U7easCXdgAAAEw"]
[Sat Feb 28 09:00:53.570653 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.25:43877] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/simple-file-list/"] [unique_id "aaI-RRVE-FfM89u7BQbAngAAAIM"]
[Sat Feb 28 09:00:54.885813 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.21:44709] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/upload/"] [unique_id "aaI-RmuX5e1Q32gqxH1i3QAAARg"]
[Sat Feb 28 09:01:00.756956 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.28:54987] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-admin/includes/"] [unique_id "aaI-TBVE-FfM89u7BQbA5wAAAI8"]
[Sat Feb 28 09:01:03.859577 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.23:60855] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaI-T6IAO5fN7BxyqcFYbwAAAMk"]
[Sat Feb 28 09:01:06.070695 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.31:57291] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aaI-Un6mbajs3bzQGyvP2wAAAU8"]
[Sat Feb 28 09:01:10.099757 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.25:21909] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/"] [unique_id "aaI-VltZF9Zd_U7easCYDAAAAEQ"]
[Sat Feb 28 09:01:10.995409 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.28:38295] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/"] [unique_id "aaI-VmuX5e1Q32gqxH1jzgAAAQ0"]
[Sat Feb 28 09:01:11.872354 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.26:39587] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/"] [unique_id "aaI-V6IAO5fN7BxyqcFYxwAAAMQ"]
[Sat Feb 28 09:01:15.400770 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.31:24209] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fonts/"] [unique_id "aaI-W6IAO5fN7BxyqcFZFQAAANY"]
[Sat Feb 28 09:01:16.284306 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.26:40899] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fonts/"] [unique_id "aaI-XGuX5e1Q32gqxH1kLQAAARQ"]
[Sat Feb 28 09:01:17.179466 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.31:61605] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fonts/"] [unique_id "aaI-XWuX5e1Q32gqxH1kQAAAARI"]
[Sat Feb 28 09:01:18.500948 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.30:35311] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/"] [unique_id "aaI-XmuX5e1Q32gqxH1kXAAAAQw"]
[Sat Feb 28 09:01:19.815537 2026] [:error] [pid 39184:tid 39222] [client 173.244.55.26:40107] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/routes/"] [unique_id "aaI-X1tZF9Zd_U7easCYSgAAAEM"]
[Sat Feb 28 09:01:20.695435 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.26:42115] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/routes/"] [unique_id "aaI-YH6mbajs3bzQGyvQ6AAAAVE"]
[Sat Feb 28 09:01:21.576398 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.29:28409] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/routes/"] [unique_id "aaI-YWuX5e1Q32gqxH1kiwAAAQs"]
[Sat Feb 28 09:01:22.451377 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.21:52565] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/routes/"] [unique_id "aaI-YmuX5e1Q32gqxH1kpgAAAQE"]
[Sat Feb 28 09:01:23.326166 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.21:50003] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/routes/"] [unique_id "aaI-YxVE-FfM89u7BQbBiwAAAJA"]
[Sat Feb 28 09:21:14.248225 2026] [:error] [pid 39292:tid 39305] [client 40.115.138.121:4078] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaJDCqIAO5fN7BxyqcF39QAAAMs"]
[Sat Feb 28 09:21:14.840806 2026] [:error] [pid 39185:tid 39256] [client 40.115.138.121:18540] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaJDChVE-FfM89u7BQbYrQAAAIo"]
[Sat Feb 28 09:21:15.397915 2026] [:error] [pid 39185:tid 39264] [client 40.115.138.121:4047] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaJDCxVE-FfM89u7BQbYsAAAAJI"]
[Sat Feb 28 09:21:15.955530 2026] [:error] [pid 39185:tid 39260] [client 40.115.138.121:3185] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaJDCxVE-FfM89u7BQbYsQAAAI4"]
[Sat Feb 28 10:03:32.628714 2026] [:error] [pid 39184:tid 39235] [client 20.220.61.156:51079] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJM9FtZF9Zd_U7easCxVwAAAFA"]
[Sat Feb 28 10:03:33.078359 2026] [:error] [pid 39185:tid 39268] [client 20.220.61.156:51134] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJM9RVE-FfM89u7BQYWKwAAAJY"]
[Sat Feb 28 10:03:33.598183 2026] [:error] [pid 39185:tid 39252] [client 20.220.61.156:51128] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJM9RVE-FfM89u7BQYWNgAAAIY"]
[Sat Feb 28 10:03:34.056139 2026] [:error] [pid 39185:tid 39262] [client 20.220.61.156:51102] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaJM9hVE-FfM89u7BQYWQgAAAJA"]
[Sat Feb 28 10:19:12.990537 2026] [autoindex:error] [pid 39292:tid 39315] [client 194.146.12.7:60522] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 11:06:47.235156 2026] [:error] [pid 39185:tid 39255] [client 13.71.191.191:42997] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaJbxxVE-FfM89u7BQZhuQAAAIk"]
[Sat Feb 28 11:06:47.648474 2026] [:error] [pid 39292:tid 39295] [client 13.71.191.191:42900] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaJbx6IAO5fN7BxyqcGnWQAAAME"]
[Sat Feb 28 11:06:48.071977 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:42993] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaJbyBVE-FfM89u7BQZhvAAAAIc"]
[Sat Feb 28 11:06:48.491471 2026] [:error] [pid 52460:tid 52469] [client 13.71.191.191:42887] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaJbyLLWOogAgHGh62S5BwAAAYY"]
[Sat Feb 28 11:06:48.902726 2026] [:error] [pid 39185:tid 39255] [client 13.71.191.191:42896] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaJbyBVE-FfM89u7BQZhyQAAAIk"]
[Sat Feb 28 11:06:49.315892 2026] [:error] [pid 52460:tid 52473] [client 13.71.191.191:42956] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaJbybLWOogAgHGh62S5DAAAAYo"]
[Sat Feb 28 11:06:49.735770 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:43003] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaJbybLWOogAgHGh62S5EwAAAZA"]
[Sat Feb 28 11:06:50.155619 2026] [:error] [pid 39185:tid 39247] [client 13.71.191.191:42982] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaJbyhVE-FfM89u7BQZh0gAAAIE"]
[Sat Feb 28 11:06:50.569322 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:42973] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cxxuv.php"] [unique_id "aaJbyhVE-FfM89u7BQZh1QAAAI8"]
[Sat Feb 28 11:06:50.980498 2026] [:error] [pid 52460:tid 52479] [client 13.71.191.191:42985] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cxxuv.php"] [unique_id "aaJbyrLWOogAgHGh62S5IQAAAZA"]
[Sat Feb 28 11:06:51.390941 2026] [:error] [pid 52460:tid 52484] [client 13.71.191.191:42960] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cxxuv.php"] [unique_id "aaJby7LWOogAgHGh62S5KQAAAZU"]
[Sat Feb 28 11:06:51.801297 2026] [:error] [pid 11791:tid 11800] [client 13.71.191.191:42965] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cxxuv.php"] [unique_id "aaJby2uX5e1Q32gqxH3bSwAAAQc"]
[Sat Feb 28 11:06:52.212552 2026] [:error] [pid 22194:tid 22220] [client 13.71.191.191:42933] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaJbzH6mbajs3bzQGysdQQAAAVg"]
[Sat Feb 28 11:06:52.622084 2026] [:error] [pid 22194:tid 22203] [client 13.71.191.191:42957] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaJbzH6mbajs3bzQGysdQgAAAUc"]
[Sat Feb 28 11:06:53.035640 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:42945] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaJbzWuX5e1Q32gqxH3bTwAAAQQ"]
[Sat Feb 28 11:06:53.452056 2026] [:error] [pid 52460:tid 52472] [client 13.71.191.191:42833] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaJbzbLWOogAgHGh62S5NQAAAYk"]
[Sat Feb 28 11:06:53.867961 2026] [:error] [pid 39292:tid 39305] [client 13.71.191.191:42882] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aaJbzaIAO5fN7BxyqcGnYwAAAMs"]
[Sat Feb 28 11:06:54.283581 2026] [:error] [pid 39184:tid 39224] [client 13.71.191.191:42903] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aaJbzltZF9Zd_U7easDASAAAAEU"]
[Sat Feb 28 11:06:54.692999 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:43004] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aaJbzrLWOogAgHGh62S5PAAAAZg"]
[Sat Feb 28 11:06:55.101507 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:42885] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gi.php"] [unique_id "aaJbz7LWOogAgHGh62S5PQAAAZY"]
[Sat Feb 28 11:06:55.511489 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:42899] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJbz6IAO5fN7BxyqcGnaQAAANI"]
[Sat Feb 28 11:06:55.920985 2026] [:error] [pid 11791:tid 11810] [client 13.71.191.191:42923] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJbz2uX5e1Q32gqxH3bVAAAARE"]
[Sat Feb 28 11:06:56.334539 2026] [:error] [pid 39292:tid 39308] [client 13.71.191.191:43006] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJb0KIAO5fN7BxyqcGnawAAAM4"]
[Sat Feb 28 11:06:56.748127 2026] [:error] [pid 11791:tid 11794] [client 13.71.191.191:42827] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJb0GuX5e1Q32gqxH3bVwAAAQE"]
[Sat Feb 28 11:06:57.163336 2026] [:error] [pid 39185:tid 39246] [client 13.71.191.191:42948] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJb0RVE-FfM89u7BQZh4gAAAIA"]
[Sat Feb 28 11:06:57.584550 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:42946] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJb0bLWOogAgHGh62S5UAAAAZY"]
[Sat Feb 28 11:06:57.999458 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:42880] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJb0RVE-FfM89u7BQZh4wAAAIc"]
[Sat Feb 28 11:06:58.413750 2026] [:error] [pid 52460:tid 52476] [client 13.71.191.191:42992] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJb0rLWOogAgHGh62S5VgAAAY0"]
[Sat Feb 28 11:06:58.835382 2026] [:error] [pid 52460:tid 52475] [client 13.71.191.191:42991] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaJb0rLWOogAgHGh62S5WgAAAYw"]
[Sat Feb 28 11:06:59.249056 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:42931] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaJb0xVE-FfM89u7BQZh6AAAAIw"]
[Sat Feb 28 11:06:59.659455 2026] [:error] [pid 52460:tid 52464] [client 13.71.191.191:42983] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaJb07LWOogAgHGh62S5YQAAAYE"]
[Sat Feb 28 11:07:00.071511 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:42907] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaJb1LLWOogAgHGh62S5ZgAAAZI"]
[Sat Feb 28 11:07:00.482922 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:42979] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "aaJb1BVE-FfM89u7BQZh7AAAAJU"]
[Sat Feb 28 11:07:00.892020 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:42950] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "aaJb1BVE-FfM89u7BQZh7gAAAIM"]
[Sat Feb 28 11:07:01.305382 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:43005] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "aaJb1RVE-FfM89u7BQZh8gAAAIQ"]
[Sat Feb 28 11:07:01.718990 2026] [:error] [pid 11791:tid 11805] [client 13.71.191.191:42924] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "aaJb1WuX5e1Q32gqxH3bXQAAAQw"]
[Sat Feb 28 11:07:02.137772 2026] [:error] [pid 39184:tid 39237] [client 13.71.191.191:42905] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaJb1ltZF9Zd_U7easDATQAAAFI"]
[Sat Feb 28 11:07:02.555798 2026] [:error] [pid 22194:tid 22213] [client 13.71.191.191:42894] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaJb1n6mbajs3bzQGysdTAAAAVE"]
[Sat Feb 28 11:07:02.968429 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:42936] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaJb1muX5e1Q32gqxH3bYgAAAQQ"]
[Sat Feb 28 11:07:03.377246 2026] [:error] [pid 11791:tid 11812] [client 13.71.191.191:42953] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaJb12uX5e1Q32gqxH3bZgAAARM"]
[Sat Feb 28 11:07:03.791087 2026] [:error] [pid 39184:tid 39223] [client 13.71.191.191:42949] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJb11tZF9Zd_U7easDAUAAAAEQ"]
[Sat Feb 28 11:07:04.205126 2026] [:error] [pid 11791:tid 11794] [client 13.71.191.191:42939] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJb2GuX5e1Q32gqxH3bawAAAQE"]
[Sat Feb 28 11:07:04.616899 2026] [:error] [pid 39185:tid 39263] [client 13.71.191.191:42886] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJb2BVE-FfM89u7BQZiCgAAAJE"]
[Sat Feb 28 11:07:05.026540 2026] [:error] [pid 22194:tid 22197] [client 13.71.191.191:42892] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJb2X6mbajs3bzQGysdTwAAAUE"]
[Sat Feb 28 11:07:05.437286 2026] [:error] [pid 52460:tid 52485] [client 13.71.191.191:42890] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-f.php"] [unique_id "aaJb2bLWOogAgHGh62S5cAAAAZY"]
[Sat Feb 28 11:07:05.863930 2026] [:error] [pid 52460:tid 52470] [client 13.71.191.191:42822] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-f.php"] [unique_id "aaJb2bLWOogAgHGh62S5cwAAAYc"]
[Sat Feb 28 11:07:06.281091 2026] [:error] [pid 52460:tid 52463] [client 13.71.191.191:42935] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-f.php"] [unique_id "aaJb2rLWOogAgHGh62S5dwAAAYA"]
[Sat Feb 28 11:07:06.700281 2026] [:error] [pid 39292:tid 39308] [client 13.71.191.191:42893] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-f.php"] [unique_id "aaJb2qIAO5fN7BxyqcGneAAAAM4"]
[Sat Feb 28 11:07:07.122619 2026] [:error] [pid 11791:tid 11796] [client 13.71.191.191:42990] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaJb22uX5e1Q32gqxH3bbwAAAQM"]
[Sat Feb 28 11:07:07.536756 2026] [:error] [pid 22194:tid 22208] [client 13.71.191.191:42963] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaJb236mbajs3bzQGysdUAAAAUw"]
[Sat Feb 28 11:07:07.952644 2026] [:error] [pid 39292:tid 39300] [client 13.71.191.191:42942] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaJb26IAO5fN7BxyqcGnegAAAMY"]
[Sat Feb 28 11:07:08.367545 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:42977] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaJb3KIAO5fN7BxyqcGnewAAAMk"]
[Sat Feb 28 11:07:08.778295 2026] [:error] [pid 39292:tid 39301] [client 13.71.191.191:43007] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "aaJb3KIAO5fN7BxyqcGnfgAAAMc"]
[Sat Feb 28 11:07:09.198138 2026] [:error] [pid 22194:tid 22203] [client 13.71.191.191:42898] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "aaJb3X6mbajs3bzQGysdVAAAAUc"]
[Sat Feb 28 11:07:09.612084 2026] [:error] [pid 39184:tid 39227] [client 13.71.191.191:42918] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "aaJb3VtZF9Zd_U7easDAVgAAAEg"]
[Sat Feb 28 11:07:10.030438 2026] [:error] [pid 39183:tid 39200] [client 13.71.191.191:42820] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "aaJb3hCf4HvhVePw3LbUDgAAAAg"]
[Sat Feb 28 11:07:10.446987 2026] [:error] [pid 39184:tid 39239] [client 13.71.191.191:42984] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJb3ltZF9Zd_U7easDAXQAAAFQ"]
[Sat Feb 28 11:07:10.860407 2026] [:error] [pid 22194:tid 22216] [client 13.71.191.191:42952] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJb3n6mbajs3bzQGysdVQAAAVQ"]
[Sat Feb 28 11:07:11.272678 2026] [:error] [pid 39185:tid 39270] [client 13.71.191.191:42767] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJb3xVE-FfM89u7BQZiJgAAAJg"]
[Sat Feb 28 11:07:11.702056 2026] [:error] [pid 52460:tid 52477] [client 13.71.191.191:42996] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJb37LWOogAgHGh62S5iAAAAY4"]
[Sat Feb 28 11:07:12.116772 2026] [:error] [pid 39292:tid 39314] [client 13.71.191.191:42964] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJb4KIAO5fN7BxyqcGngwAAANQ"]
[Sat Feb 28 11:07:12.526638 2026] [:error] [pid 52460:tid 52480] [client 13.71.191.191:42988] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJb4LLWOogAgHGh62S5igAAAZE"]
[Sat Feb 28 11:07:12.941274 2026] [:error] [pid 52460:tid 52483] [client 13.71.191.191:42961] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJb4LLWOogAgHGh62S5iwAAAZQ"]
[Sat Feb 28 11:07:13.355080 2026] [:error] [pid 39292:tid 39294] [client 13.71.191.191:42917] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJb4aIAO5fN7BxyqcGnkwAAAMA"]
[Sat Feb 28 11:07:13.769775 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:42897] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aaJb4bLWOogAgHGh62S5kQAAAYs"]
[Sat Feb 28 11:07:14.186850 2026] [:error] [pid 39292:tid 39308] [client 13.71.191.191:42909] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aaJb4qIAO5fN7BxyqcGnlwAAAM4"]
[Sat Feb 28 11:07:14.602139 2026] [:error] [pid 39292:tid 39305] [client 13.71.191.191:42980] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aaJb4qIAO5fN7BxyqcGnmwAAAMs"]
[Sat Feb 28 11:07:15.011861 2026] [:error] [pid 39292:tid 39301] [client 13.71.191.191:42978] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aaJb46IAO5fN7BxyqcGnngAAAMc"]
[Sat Feb 28 11:07:15.421633 2026] [:error] [pid 11791:tid 11817] [client 13.71.191.191:42929] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aaJb42uX5e1Q32gqxH3bggAAARg"]
[Sat Feb 28 11:07:15.832950 2026] [:error] [pid 22194:tid 22219] [client 13.71.191.191:42937] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aaJb436mbajs3bzQGysdXAAAAVc"]
[Sat Feb 28 11:07:16.255604 2026] [:error] [pid 11791:tid 11800] [client 13.71.191.191:42954] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aaJb5GuX5e1Q32gqxH3bhwAAAQc"]
[Sat Feb 28 11:07:16.696379 2026] [:error] [pid 52460:tid 52472] [client 13.71.191.191:43001] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aaJb5LLWOogAgHGh62S5pQAAAYk"]
[Sat Feb 28 11:07:17.109202 2026] [:error] [pid 52460:tid 52478] [client 13.71.191.191:42770] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aaJb5bLWOogAgHGh62S5qwAAAY8"]
[Sat Feb 28 11:07:17.522985 2026] [:error] [pid 22194:tid 22211] [client 13.71.191.191:42958] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aaJb5X6mbajs3bzQGysdYQAAAU8"]
[Sat Feb 28 11:07:17.935322 2026] [:error] [pid 52460:tid 52472] [client 13.71.191.191:42998] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aaJb5bLWOogAgHGh62S5sQAAAYk"]
[Sat Feb 28 11:07:18.349442 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:42889] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aaJb5rLWOogAgHGh62S5tAAAAZg"]
[Sat Feb 28 11:07:18.762227 2026] [:error] [pid 22194:tid 22219] [client 13.71.191.191:42857] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaJb5n6mbajs3bzQGysdbgAAAVc"]
[Sat Feb 28 11:07:19.175076 2026] [:error] [pid 22194:tid 22199] [client 13.71.191.191:42970] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaJb536mbajs3bzQGysdcgAAAUM"]
[Sat Feb 28 11:07:19.588903 2026] [:error] [pid 52460:tid 52468] [client 13.71.191.191:42881] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaJb57LWOogAgHGh62S5xwAAAYU"]
[Sat Feb 28 11:07:19.998816 2026] [:error] [pid 52460:tid 52480] [client 13.71.191.191:42947] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaJb57LWOogAgHGh62S5zwAAAZE"]
[Sat Feb 28 11:07:20.405880 2026] [:error] [pid 52460:tid 52486] [client 13.71.191.191:42760] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aaJb6LLWOogAgHGh62S50wAAAZc"]
[Sat Feb 28 11:07:20.815526 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:42914] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aaJb6LLWOogAgHGh62S52QAAAZg"]
[Sat Feb 28 11:07:21.230689 2026] [:error] [pid 52460:tid 52465] [client 13.71.191.191:42930] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aaJb6bLWOogAgHGh62S54AAAAYI"]
[Sat Feb 28 11:07:21.645449 2026] [:error] [pid 52460:tid 52474] [client 13.71.191.191:43002] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aaJb6bLWOogAgHGh62S55gAAAYs"]
[Sat Feb 28 11:07:22.062986 2026] [:error] [pid 52460:tid 52487] [client 13.71.191.191:42816] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJb6rLWOogAgHGh62S57AAAAZg"]
[Sat Feb 28 11:07:22.474406 2026] [:error] [pid 11791:tid 11810] [client 13.71.191.191:42972] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJb6muX5e1Q32gqxH3bjAAAARE"]
[Sat Feb 28 11:07:22.885112 2026] [:error] [pid 11791:tid 11802] [client 13.71.191.191:42759] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJb6muX5e1Q32gqxH3bjQAAAQk"]
[Sat Feb 28 11:07:23.294115 2026] [:error] [pid 39292:tid 39309] [client 13.71.191.191:42839] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJb66IAO5fN7BxyqcGnpQAAAM8"]
[Sat Feb 28 11:07:23.702923 2026] [:error] [pid 39292:tid 39305] [client 13.71.191.191:42974] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaJb66IAO5fN7BxyqcGnqAAAAMs"]
[Sat Feb 28 11:07:24.115314 2026] [:error] [pid 39185:tid 39258] [client 13.71.191.191:42883] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaJb7BVE-FfM89u7BQZiOAAAAIw"]
[Sat Feb 28 11:07:24.531059 2026] [:error] [pid 39184:tid 39219] [client 13.71.191.191:42895] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaJb7FtZF9Zd_U7easDAZwAAAEA"]
[Sat Feb 28 11:07:24.950442 2026] [:error] [pid 52460:tid 52481] [client 13.71.191.191:42888] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaJb7LLWOogAgHGh62S58AAAAZI"]
[Sat Feb 28 11:07:25.368166 2026] [:error] [pid 52460:tid 52482] [client 13.71.191.191:42967] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJb7bLWOogAgHGh62S59AAAAZM"]
[Sat Feb 28 11:07:25.777705 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:42832] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJb7WuX5e1Q32gqxH3blAAAARc"]
[Sat Feb 28 11:07:26.191891 2026] [:error] [pid 11791:tid 11806] [client 13.71.191.191:42855] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJb7muX5e1Q32gqxH3bmAAAAQ0"]
[Sat Feb 28 11:07:26.602794 2026] [:error] [pid 11791:tid 11810] [client 13.71.191.191:42951] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJb7muX5e1Q32gqxH3bngAAARE"]
[Sat Feb 28 11:07:27.016178 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:42932] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJb736mbajs3bzQGysdhAAAAVY"]
[Sat Feb 28 11:07:27.436891 2026] [:error] [pid 39185:tid 39247] [client 13.71.191.191:42962] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJb7xVE-FfM89u7BQZiQAAAAIE"]
[Sat Feb 28 11:07:27.858285 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:42834] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJb7xVE-FfM89u7BQZiQwAAAJA"]
[Sat Feb 28 11:07:28.289266 2026] [:error] [pid 39185:tid 39253] [client 13.71.191.191:42884] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJb8BVE-FfM89u7BQZiRwAAAIc"]
[Sat Feb 28 11:07:28.706471 2026] [:error] [pid 39185:tid 39270] [client 13.71.191.191:42912] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJb8BVE-FfM89u7BQZiSQAAAJg"]
[Sat Feb 28 11:07:29.123567 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:42976] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJb8WuX5e1Q32gqxH3bqwAAAQo"]
[Sat Feb 28 11:07:29.562167 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:42913] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJb8RVE-FfM89u7BQZiTwAAAIQ"]
[Sat Feb 28 11:07:29.982530 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:42867] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJb8RVE-FfM89u7BQZiUgAAAJM"]
[Sat Feb 28 11:07:30.450282 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:42824] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "aaJb8ltZF9Zd_U7easDAcwAAAFU"]
[Sat Feb 28 11:07:30.885076 2026] [:error] [pid 39184:tid 39223] [client 13.71.191.191:42934] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "aaJb8ltZF9Zd_U7easDAdQAAAEQ"]
[Sat Feb 28 11:07:31.307154 2026] [:error] [pid 22194:tid 22215] [client 13.71.191.191:42981] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "aaJb836mbajs3bzQGysdhgAAAVM"]
[Sat Feb 28 11:07:31.732701 2026] [:error] [pid 11791:tid 11805] [client 13.71.191.191:42966] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "aaJb82uX5e1Q32gqxH3buQAAAQw"]
[Sat Feb 28 11:07:32.142159 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:42860] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJb9BVE-FfM89u7BQZiWgAAAJU"]
[Sat Feb 28 11:07:32.757461 2026] [:error] [pid 39183:tid 39210] [client 13.71.191.191:42906] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJb9BCf4HvhVePw3LbULwAAABI"]
[Sat Feb 28 11:07:33.182695 2026] [:error] [pid 11791:tid 11817] [client 13.71.191.191:42823] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJb9WuX5e1Q32gqxH3bvQAAARg"]
[Sat Feb 28 11:07:33.607849 2026] [:error] [pid 52460:tid 52466] [client 13.71.191.191:42826] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJb9bLWOogAgHGh62S6AwAAAYM"]
[Sat Feb 28 11:12:15.642866 2026] [autoindex:error] [pid 52460:tid 52472] [client 157.230.20.6:52210] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 11:15:47.365185 2026] [:error] [pid 52460:tid 52471] [client 204.76.203.25:42886] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aaJd47LWOogAgHGh62TEGQAAAYg"]
[Sat Feb 28 11:16:05.950008 2026] [:error] [pid 11791:tid 11809] [client 158.158.96.194:25673] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaJd9WuX5e1Q32gqxH3gwwAAARA"]
[Sat Feb 28 11:16:09.302470 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:36212] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaJd-RVE-FfM89u7BQZqNgAAAIU"]
[Sat Feb 28 11:16:10.272343 2026] [:error] [pid 11791:tid 11799] [client 158.158.96.194:25669] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaJd-muX5e1Q32gqxH3gxgAAAQY"]
[Sat Feb 28 11:16:12.736935 2026] [:error] [pid 52460:tid 52483] [client 158.158.96.194:60138] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaJd_LLWOogAgHGh62TEhAAAAZQ"]
[Sat Feb 28 11:16:14.012318 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:29989] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaJd_muX5e1Q32gqxH3gzgAAAQ0"]
[Sat Feb 28 11:16:21.469280 2026] [:error] [pid 11791:tid 11817] [client 158.158.96.194:41188] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaJeBWuX5e1Q32gqxH3g6wAAARg"]
[Sat Feb 28 11:16:22.456727 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:38393] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaJeBrLWOogAgHGh62TEpAAAAZU"]
[Sat Feb 28 11:16:23.877560 2026] [:error] [pid 39185:tid 39269] [client 158.158.96.194:48321] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaJeBxVE-FfM89u7BQZqZgAAAJc"]
[Sat Feb 28 11:16:27.002174 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:39039] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaJeC7LWOogAgHGh62TEsgAAAZI"]
[Sat Feb 28 11:16:28.207040 2026] [:error] [pid 11791:tid 11801] [client 158.158.96.194:38362] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaJeDGuX5e1Q32gqxH3g_gAAAQg"]
[Sat Feb 28 11:16:29.330085 2026] [:error] [pid 39292:tid 39295] [client 158.158.96.194:41206] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaJeDaIAO5fN7BxyqcGrMAAAAME"]
[Sat Feb 28 11:16:29.948027 2026] [:error] [pid 22194:tid 22199] [client 158.158.96.194:48329] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaJeDX6mbajs3bzQGysgeQAAAUM"]
[Sat Feb 28 11:16:31.658679 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:39384] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJeD6IAO5fN7BxyqcGrPQAAANg"]
[Sat Feb 28 11:16:33.360312 2026] [:error] [pid 39292:tid 39297] [client 158.158.96.194:4679] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJeEaIAO5fN7BxyqcGrSAAAAMM"]
[Sat Feb 28 11:16:34.358490 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:39010] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJeEqIAO5fN7BxyqcGrTQAAANg"]
[Sat Feb 28 11:16:35.293977 2026] [:error] [pid 39185:tid 39267] [client 158.158.96.194:38990] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJeExVE-FfM89u7BQZqtAAAAJU"]
[Sat Feb 28 11:16:36.289701 2026] [:error] [pid 39185:tid 39253] [client 158.158.96.194:38142] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaJeFBVE-FfM89u7BQZqvQAAAIc"]
[Sat Feb 28 11:16:37.113331 2026] [:error] [pid 11791:tid 11804] [client 158.158.96.194:30713] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaJeFWuX5e1Q32gqxH3hHQAAAQs"]
[Sat Feb 28 11:16:37.683944 2026] [:error] [pid 39184:tid 39239] [client 158.158.96.194:38366] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaJeFVtZF9Zd_U7easDCaAAAAFQ"]
[Sat Feb 28 11:16:38.378025 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:48331] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaJeFhVE-FfM89u7BQZqxwAAAJI"]
[Sat Feb 28 11:16:40.050979 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:61250] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaJeGLLWOogAgHGh62TE6wAAAYM"]
[Sat Feb 28 11:16:40.984564 2026] [:error] [pid 39185:tid 39247] [client 158.158.96.194:4156] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaJeGBVE-FfM89u7BQZq6AAAAIE"]
[Sat Feb 28 11:16:41.689514 2026] [:error] [pid 22194:tid 22210] [client 158.158.96.194:38125] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaJeGX6mbajs3bzQGysgiAAAAU4"]
[Sat Feb 28 11:16:42.291209 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:38123] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaJeGhVE-FfM89u7BQZq7QAAAIQ"]
[Sat Feb 28 11:16:43.784891 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:39382] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaJeGxVE-FfM89u7BQZq-QAAAIM"]
[Sat Feb 28 11:16:47.043805 2026] [:error] [pid 39183:tid 39203] [client 158.158.96.194:48284] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaJeHxCf4HvhVePw3LbV0wAAAAs"]
[Sat Feb 28 11:16:50.242471 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:30704] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaJeIrLWOogAgHGh62TFNQAAAYM"]
[Sat Feb 28 11:16:51.821282 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:27713] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaJeIxVE-FfM89u7BQZrKAAAAJY"]
[Sat Feb 28 11:16:53.017491 2026] [:error] [pid 39183:tid 39203] [client 158.158.96.194:28225] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaJeJRCf4HvhVePw3LbV5AAAAAs"]
[Sat Feb 28 11:16:55.163529 2026] [:error] [pid 11791:tid 11811] [client 158.158.96.194:30712] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaJeJ2uX5e1Q32gqxH3hUwAAARI"]
[Sat Feb 28 11:16:56.228555 2026] [:error] [pid 52460:tid 52470] [client 158.158.96.194:25421] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaJeKLLWOogAgHGh62TFYwAAAYc"]
[Sat Feb 28 11:16:57.449235 2026] [:error] [pid 11791:tid 11797] [client 158.158.96.194:4144] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaJeKWuX5e1Q32gqxH3hWgAAAQQ"]
[Sat Feb 28 11:17:01.879170 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:4467] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaJeLRVE-FfM89u7BQZrWQAAAJM"]
[Sat Feb 28 11:17:04.297568 2026] [:error] [pid 39185:tid 39256] [client 158.158.96.194:38880] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaJeMBVE-FfM89u7BQZraQAAAIo"]
[Sat Feb 28 11:17:15.894952 2026] [:error] [pid 39183:tid 39196] [client 158.158.96.194:61273] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaJeOxCf4HvhVePw3LbV_gAAAAQ"]
[Sat Feb 28 11:17:16.896261 2026] [:error] [pid 11791:tid 11810] [client 158.158.96.194:4893] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaJePGuX5e1Q32gqxH3higAAARE"]
[Sat Feb 28 11:17:17.654000 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:39321] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaJePWuX5e1Q32gqxH3hlAAAAQI"]
[Sat Feb 28 11:17:19.292880 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:39302] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaJePxVE-FfM89u7BQZrnAAAAIs"]
[Sat Feb 28 11:17:20.512723 2026] [:error] [pid 39292:tid 39309] [client 158.158.96.194:30743] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mamzi.php"] [unique_id "aaJeQKIAO5fN7BxyqcGrjAAAAM8"]
[Sat Feb 28 11:17:22.127857 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:64254] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mamzi.php"] [unique_id "aaJeQmuX5e1Q32gqxH3hrAAAAQ8"]
[Sat Feb 28 11:17:23.139534 2026] [:error] [pid 52460:tid 52474] [client 158.158.96.194:4878] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mamzi.php"] [unique_id "aaJeQ7LWOogAgHGh62TF1AAAAYs"]
[Sat Feb 28 11:17:23.782148 2026] [:error] [pid 39185:tid 39254] [client 158.158.96.194:63403] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mamzi.php"] [unique_id "aaJeQxVE-FfM89u7BQZrtgAAAIg"]
[Sat Feb 28 11:17:24.605177 2026] [:error] [pid 39292:tid 39318] [client 158.158.96.194:37091] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaJeRKIAO5fN7BxyqcGrjwAAANg"]
[Sat Feb 28 11:17:25.984883 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:46293] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaJeRRVE-FfM89u7BQZrugAAAIA"]
[Sat Feb 28 11:17:27.503793 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:40245] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaJeRxVE-FfM89u7BQZrwAAAAIM"]
[Sat Feb 28 11:17:28.754028 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:28310] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaJeSLLWOogAgHGh62TF6wAAAYo"]
[Sat Feb 28 11:17:30.059848 2026] [:error] [pid 39185:tid 39266] [client 158.158.96.194:36858] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ae.php"] [unique_id "aaJeShVE-FfM89u7BQZr5QAAAJQ"]
[Sat Feb 28 11:17:31.798188 2026] [:error] [pid 52460:tid 52472] [client 158.158.96.194:65461] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ae.php"] [unique_id "aaJeS7LWOogAgHGh62TGDwAAAYk"]
[Sat Feb 28 11:17:33.318183 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:32485] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ae.php"] [unique_id "aaJeTbLWOogAgHGh62TGKgAAAZY"]
[Sat Feb 28 11:17:34.634556 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:35832] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ae.php"] [unique_id "aaJeTrLWOogAgHGh62TGPwAAAZM"]
[Sat Feb 28 11:17:36.675079 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:38273] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaJeUBVE-FfM89u7BQZr-gAAAI4"]
[Sat Feb 28 11:17:37.703057 2026] [:error] [pid 52460:tid 52469] [client 158.158.96.194:4244] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaJeUbLWOogAgHGh62TGWwAAAYY"]
[Sat Feb 28 11:17:38.925635 2026] [:error] [pid 39185:tid 39266] [client 158.158.96.194:38922] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaJeUhVE-FfM89u7BQZsBwAAAJQ"]
[Sat Feb 28 11:17:40.450339 2026] [:error] [pid 39292:tid 39317] [client 158.158.96.194:36876] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaJeVKIAO5fN7BxyqcGrpQAAANc"]
[Sat Feb 28 11:17:41.278475 2026] [:error] [pid 11791:tid 11813] [client 158.158.96.194:25353] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaJeVWuX5e1Q32gqxH3iDgAAARQ"]
[Sat Feb 28 11:17:42.166936 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:28718] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaJeVrLWOogAgHGh62TGcwAAAYg"]
[Sat Feb 28 11:17:43.137705 2026] [:error] [pid 11791:tid 11811] [client 158.158.96.194:37169] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaJeV2uX5e1Q32gqxH3iGgAAARI"]
[Sat Feb 28 11:17:44.979487 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:28701] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaJeWLLWOogAgHGh62TGgwAAAZY"]
[Sat Feb 28 11:17:45.854620 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:31321] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aaJeWRVE-FfM89u7BQZsPAAAAI8"]
[Sat Feb 28 11:17:46.935670 2026] [:error] [pid 39292:tid 39316] [client 158.158.96.194:26464] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aaJeWqIAO5fN7BxyqcGrswAAANY"]
[Sat Feb 28 11:17:47.858727 2026] [:error] [pid 39184:tid 39228] [client 158.158.96.194:63434] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aaJeW1tZF9Zd_U7easDCsQAAAEk"]
[Sat Feb 28 11:17:49.850042 2026] [:error] [pid 11791:tid 11815] [client 158.158.96.194:35409] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aaJeXWuX5e1Q32gqxH3iMAAAARY"]
[Sat Feb 28 11:17:51.237544 2026] [:error] [pid 22194:tid 22212] [client 158.158.96.194:29626] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php"] [unique_id "aaJeX36mbajs3bzQGysg7AAAAVA"]
[Sat Feb 28 11:17:51.872974 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:38073] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php"] [unique_id "aaJeX7LWOogAgHGh62TGqwAAAZI"]
[Sat Feb 28 11:17:52.841365 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:36903] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php"] [unique_id "aaJeYLLWOogAgHGh62TGtAAAAZU"]
[Sat Feb 28 11:17:54.026757 2026] [:error] [pid 39183:tid 39193] [client 158.158.96.194:31745] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php"] [unique_id "aaJeYhCf4HvhVePw3LbWMQAAAAE"]
[Sat Feb 28 11:17:55.750653 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:44492] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dsd.php"] [unique_id "aaJeYxVE-FfM89u7BQZsSAAAAI8"]
[Sat Feb 28 11:17:56.418221 2026] [:error] [pid 52460:tid 52483] [client 158.158.96.194:31756] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dsd.php"] [unique_id "aaJeZLLWOogAgHGh62TGzgAAAZQ"]
[Sat Feb 28 11:17:57.232075 2026] [:error] [pid 39292:tid 39314] [client 158.158.96.194:31709] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dsd.php"] [unique_id "aaJeZaIAO5fN7BxyqcGrwwAAANQ"]
[Sat Feb 28 11:17:58.501826 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:62283] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dsd.php"] [unique_id "aaJeZrLWOogAgHGh62TG2wAAAYw"]
[Sat Feb 28 11:17:59.224253 2026] [:error] [pid 39292:tid 39317] [client 158.158.96.194:35855] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaJeZ6IAO5fN7BxyqcGryQAAANc"]
[Sat Feb 28 11:18:00.771719 2026] [:error] [pid 22194:tid 22220] [client 158.158.96.194:31739] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaJeaH6mbajs3bzQGyshEQAAAVg"]
[Sat Feb 28 11:18:02.051383 2026] [:error] [pid 52460:tid 52480] [client 158.158.96.194:4567] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaJearLWOogAgHGh62TG7gAAAZE"]
[Sat Feb 28 11:18:02.662102 2026] [:error] [pid 39292:tid 39311] [client 158.158.96.194:26706] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaJeaqIAO5fN7BxyqcGrywAAANE"]
[Sat Feb 28 11:18:03.780166 2026] [:error] [pid 39292:tid 39301] [client 158.158.96.194:64494] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaJea6IAO5fN7BxyqcGrzgAAAMc"]
[Sat Feb 28 11:18:05.088754 2026] [:error] [pid 39183:tid 39196] [client 158.158.96.194:35854] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaJebRCf4HvhVePw3LbWQwAAAAQ"]
[Sat Feb 28 11:18:05.946818 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:26351] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaJebWuX5e1Q32gqxH3iVwAAAQ0"]
[Sat Feb 28 11:18:06.691522 2026] [:error] [pid 39184:tid 39230] [client 158.158.96.194:29235] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaJebltZF9Zd_U7easDC2gAAAEs"]
[Sat Feb 28 11:18:07.924971 2026] [:error] [pid 52460:tid 52480] [client 158.158.96.194:57420] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaJeb7LWOogAgHGh62THDAAAAZE"]
[Sat Feb 28 11:18:09.732133 2026] [:error] [pid 22194:tid 22207] [client 158.158.96.194:33225] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaJecX6mbajs3bzQGyshFwAAAUs"]
[Sat Feb 28 11:18:10.803913 2026] [:error] [pid 22194:tid 22200] [client 158.158.96.194:26708] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaJecn6mbajs3bzQGyshGQAAAUQ"]
[Sat Feb 28 11:18:11.976063 2026] [:error] [pid 39185:tid 39260] [client 158.158.96.194:26348] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaJecxVE-FfM89u7BQZsmwAAAI4"]
[Sat Feb 28 11:18:12.700938 2026] [:error] [pid 39185:tid 39267] [client 158.158.96.194:29232] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaJedBVE-FfM89u7BQZsnAAAAJU"]
[Sat Feb 28 11:18:13.501581 2026] [:error] [pid 39292:tid 39301] [client 158.158.96.194:44456] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaJedaIAO5fN7BxyqcGr3gAAAMc"]
[Sat Feb 28 11:18:14.461858 2026] [:error] [pid 39185:tid 39270] [client 158.158.96.194:44486] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaJedhVE-FfM89u7BQZspAAAAJg"]
[Sat Feb 28 11:18:22.607014 2026] [:error] [pid 52460:tid 52465] [client 158.158.96.194:26740] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aaJefrLWOogAgHGh62THRQAAAYI"]
[Sat Feb 28 11:18:23.335959 2026] [:error] [pid 52460:tid 52486] [client 158.158.96.194:35858] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aaJef7LWOogAgHGh62THSAAAAZc"]
[Sat Feb 28 11:18:24.179200 2026] [:error] [pid 52460:tid 52463] [client 158.158.96.194:64455] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aaJegLLWOogAgHGh62THTAAAAYA"]
[Sat Feb 28 11:18:24.947338 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:45882] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aaJegLLWOogAgHGh62THUAAAAYw"]
[Sat Feb 28 11:18:27.098058 2026] [:error] [pid 39292:tid 39317] [client 158.158.96.194:57413] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rum.php"] [unique_id "aaJeg6IAO5fN7BxyqcGr5gAAANc"]
[Sat Feb 28 11:18:28.073198 2026] [:error] [pid 11791:tid 11807] [client 158.158.96.194:31748] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rum.php"] [unique_id "aaJehGuX5e1Q32gqxH3idAAAAQ4"]
[Sat Feb 28 11:18:29.114415 2026] [:error] [pid 39185:tid 39254] [client 158.158.96.194:64480] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rum.php"] [unique_id "aaJehRVE-FfM89u7BQZs1QAAAIg"]
[Sat Feb 28 11:18:32.392672 2026] [:error] [pid 39184:tid 39225] [client 158.158.96.194:26367] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rum.php"] [unique_id "aaJeiFtZF9Zd_U7easDC5wAAAEY"]
[Sat Feb 28 11:18:34.853443 2026] [:error] [pid 52460:tid 52467] [client 158.158.96.194:47303] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaJeirLWOogAgHGh62THZgAAAYQ"]
[Sat Feb 28 11:18:35.941923 2026] [:error] [pid 52460:tid 52478] [client 158.158.96.194:31727] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaJei7LWOogAgHGh62THbgAAAY8"]
[Sat Feb 28 11:18:36.936638 2026] [:error] [pid 52460:tid 52463] [client 158.158.96.194:63218] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaJejLLWOogAgHGh62THdgAAAYA"]
[Sat Feb 28 11:18:39.385989 2026] [:error] [pid 52460:tid 52464] [client 158.158.96.194:31740] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaJej7LWOogAgHGh62THhwAAAYE"]
[Sat Feb 28 11:18:40.994653 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:45834] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wio.php"] [unique_id "aaJekBVE-FfM89u7BQZs-AAAAJM"]
[Sat Feb 28 11:18:42.953565 2026] [:error] [pid 52460:tid 52483] [client 158.158.96.194:44488] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wio.php"] [unique_id "aaJekrLWOogAgHGh62THlQAAAZQ"]
[Sat Feb 28 11:18:48.392680 2026] [:error] [pid 11791:tid 11805] [client 158.158.96.194:45841] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wio.php"] [unique_id "aaJemGuX5e1Q32gqxH3iqwAAAQw"]
[Sat Feb 28 11:18:50.647492 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:57454] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wio.php"] [unique_id "aaJemrLWOogAgHGh62THpwAAAY4"]
[Sat Feb 28 11:18:51.723116 2026] [:error] [pid 52460:tid 52464] [client 158.158.96.194:47358] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "aaJem7LWOogAgHGh62THrgAAAYE"]
[Sat Feb 28 11:18:52.641165 2026] [:error] [pid 39292:tid 39312] [client 158.158.96.194:32143] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "aaJenKIAO5fN7BxyqcGr9QAAANI"]
[Sat Feb 28 11:18:53.726866 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:26021] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "aaJenRVE-FfM89u7BQZtGQAAAJM"]
[Sat Feb 28 11:18:54.717873 2026] [:error] [pid 39183:tid 39202] [client 158.158.96.194:4651] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "aaJenhCf4HvhVePw3LbWdQAAAAo"]
[Sat Feb 28 11:18:58.021598 2026] [:error] [pid 39184:tid 39243] [client 158.158.96.194:31399] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJeoltZF9Zd_U7easDDAQAAAFg"]
[Sat Feb 28 11:19:00.114268 2026] [:error] [pid 39184:tid 39239] [client 158.158.96.194:4644] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJepFtZF9Zd_U7easDDBgAAAFQ"]
[Sat Feb 28 11:19:01.170335 2026] [:error] [pid 22194:tid 22207] [client 158.158.96.194:5100] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJepX6mbajs3bzQGyshhAAAAUs"]
[Sat Feb 28 11:19:01.945339 2026] [:error] [pid 11791:tid 11800] [client 158.158.96.194:20228] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJepWuX5e1Q32gqxH3ivQAAAQc"]
[Sat Feb 28 11:19:03.131814 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:38796] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws62.php"] [unique_id "aaJep7LWOogAgHGh62TH5gAAAYg"]
[Sat Feb 28 11:19:03.940739 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:30956] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws62.php"] [unique_id "aaJepxVE-FfM89u7BQZtMgAAAJY"]
[Sat Feb 28 11:19:05.127692 2026] [:error] [pid 39292:tid 39297] [client 158.158.96.194:37971] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws62.php"] [unique_id "aaJeqaIAO5fN7BxyqcGsaAAAAMM"]
[Sat Feb 28 11:19:05.940322 2026] [:error] [pid 39292:tid 39310] [client 158.158.96.194:4638] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws62.php"] [unique_id "aaJeqaIAO5fN7BxyqcGscQAAANA"]
[Sat Feb 28 11:19:06.813036 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:63179] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaJeqrLWOogAgHGh62TH8wAAAZI"]
[Sat Feb 28 11:19:07.716107 2026] [:error] [pid 11791:tid 11817] [client 158.158.96.194:24286] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaJeq2uX5e1Q32gqxH3iwgAAARg"]
[Sat Feb 28 11:19:08.573488 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:38585] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaJerGuX5e1Q32gqxH3ixgAAAQI"]
[Sat Feb 28 11:19:09.342237 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:5088] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaJerbLWOogAgHGh62TIAAAAAYM"]
[Sat Feb 28 11:19:10.207811 2026] [:error] [pid 52460:tid 52463] [client 158.158.96.194:38541] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaJerrLWOogAgHGh62TIDAAAAYA"]
[Sat Feb 28 11:19:10.978007 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:38515] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaJerrLWOogAgHGh62TIFAAAAYM"]
[Sat Feb 28 11:19:12.086731 2026] [:error] [pid 39184:tid 39224] [client 158.158.96.194:31000] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaJesFtZF9Zd_U7easDDHAAAAEU"]
[Sat Feb 28 11:19:13.532025 2026] [:error] [pid 52460:tid 52476] [client 158.158.96.194:26382] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaJesbLWOogAgHGh62TIHwAAAY0"]
[Sat Feb 28 11:19:14.388136 2026] [:error] [pid 11791:tid 11816] [client 158.158.96.194:38227] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aaJesmuX5e1Q32gqxH3iywAAARc"]
[Sat Feb 28 11:19:15.084479 2026] [:error] [pid 39185:tid 39255] [client 158.158.96.194:38214] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aaJesxVE-FfM89u7BQZtSwAAAIk"]
[Sat Feb 28 11:19:15.831177 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:31407] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aaJesxVE-FfM89u7BQZtUAAAAIA"]
[Sat Feb 28 11:19:16.435550 2026] [:error] [pid 22194:tid 22203] [client 158.158.96.194:38243] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "aaJetH6mbajs3bzQGyshnAAAAUc"]
[Sat Feb 28 11:19:17.232209 2026] [:error] [pid 22194:tid 22196] [client 158.158.96.194:37974] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cxc.php"] [unique_id "aaJetX6mbajs3bzQGyshoQAAAUA"]
[Sat Feb 28 11:19:18.923821 2026] [:error] [pid 39185:tid 39270] [client 158.158.96.194:63219] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cxc.php"] [unique_id "aaJethVE-FfM89u7BQZtUwAAAJg"]
[Sat Feb 28 11:19:19.890594 2026] [:error] [pid 39292:tid 39303] [client 158.158.96.194:4622] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cxc.php"] [unique_id "aaJet6IAO5fN7BxyqcGsfgAAAMk"]
[Sat Feb 28 11:19:20.665596 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:4655] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cxc.php"] [unique_id "aaJeuLLWOogAgHGh62TILQAAAZY"]
[Sat Feb 28 11:19:29.502077 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:63206] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c4.php"] [unique_id "aaJewRVE-FfM89u7BQZtjQAAAJY"]
[Sat Feb 28 11:19:31.162403 2026] [:error] [pid 11791:tid 11809] [client 158.158.96.194:29669] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c4.php"] [unique_id "aaJew2uX5e1Q32gqxH3i4QAAARA"]
[Sat Feb 28 11:19:32.122572 2026] [:error] [pid 11791:tid 11793] [client 158.158.96.194:4486] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c4.php"] [unique_id "aaJexGuX5e1Q32gqxH3i5wAAAQA"]
[Sat Feb 28 11:19:33.196117 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:38229] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c4.php"] [unique_id "aaJexbLWOogAgHGh62TIYQAAAZU"]
[Sat Feb 28 11:19:34.561360 2026] [:error] [pid 11791:tid 11799] [client 158.158.96.194:38832] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aaJexmuX5e1Q32gqxH3i7wAAAQY"]
[Sat Feb 28 11:19:36.215556 2026] [:error] [pid 39292:tid 39294] [client 158.158.96.194:31402] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aaJeyKIAO5fN7BxyqcGsmgAAAMA"]
[Sat Feb 28 11:19:37.077794 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:26100] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aaJeyRVE-FfM89u7BQZtowAAAJI"]
[Sat Feb 28 11:19:39.060882 2026] [:error] [pid 39183:tid 39203] [client 158.158.96.194:30912] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aaJeyxCf4HvhVePw3LbWkwAAAAs"]
[Sat Feb 28 11:19:41.742689 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:63184] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fasx.php"] [unique_id "aaJezbLWOogAgHGh62TIdAAAAYo"]
[Sat Feb 28 11:19:44.136938 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:38530] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fasx.php"] [unique_id "aaJe0LLWOogAgHGh62TIhQAAAY4"]
[Sat Feb 28 11:19:46.001448 2026] [:error] [pid 11791:tid 11811] [client 158.158.96.194:31378] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fasx.php"] [unique_id "aaJe0muX5e1Q32gqxH3i_AAAARI"]
[Sat Feb 28 11:19:48.505695 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:30958] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fasx.php"] [unique_id "aaJe1LLWOogAgHGh62TIkwAAAYg"]
[Sat Feb 28 11:19:52.848529 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:41888] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/opts.php"] [unique_id "aaJe2LLWOogAgHGh62TInwAAAYw"]
[Sat Feb 28 11:19:55.057562 2026] [:error] [pid 11791:tid 11808] [client 158.158.96.194:38476] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/opts.php"] [unique_id "aaJe22uX5e1Q32gqxH3jHAAAAQ8"]
[Sat Feb 28 11:19:59.339918 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:30945] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/opts.php"] [unique_id "aaJe3xVE-FfM89u7BQZtwwAAAJM"]
[Sat Feb 28 11:20:01.415789 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:4986] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/opts.php"] [unique_id "aaJe4RVE-FfM89u7BQZtyQAAAIU"]
[Sat Feb 28 11:20:02.717485 2026] [:error] [pid 39292:tid 39310] [client 158.158.96.194:24292] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nzv.php"] [unique_id "aaJe4qIAO5fN7BxyqcGspwAAANA"]
[Sat Feb 28 11:20:03.579088 2026] [:error] [pid 39183:tid 39199] [client 158.158.96.194:41893] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nzv.php"] [unique_id "aaJe4xCf4HvhVePw3LbWmwAAAAc"]
[Sat Feb 28 11:20:05.593991 2026] [:error] [pid 52460:tid 52472] [client 158.158.96.194:38830] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nzv.php"] [unique_id "aaJe5bLWOogAgHGh62TIwAAAAYk"]
[Sat Feb 28 11:20:07.465892 2026] [:error] [pid 52460:tid 52474] [client 158.158.96.194:30987] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nzv.php"] [unique_id "aaJe57LWOogAgHGh62TIywAAAYs"]
[Sat Feb 28 11:20:08.653619 2026] [:error] [pid 11791:tid 11815] [client 158.158.96.194:41591] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaJe6GuX5e1Q32gqxH3jMQAAARY"]
[Sat Feb 28 11:20:11.078903 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:35855] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaJe6xVE-FfM89u7BQZt6gAAAIU"]
[Sat Feb 28 11:20:14.622150 2026] [:error] [pid 11791:tid 11802] [client 158.158.96.194:38786] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaJe7muX5e1Q32gqxH3jRgAAAQk"]
[Sat Feb 28 11:20:18.804478 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:25192] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaJe8rLWOogAgHGh62TI7AAAAY4"]
[Sat Feb 28 11:20:20.753542 2026] [:error] [pid 11791:tid 11813] [client 158.158.96.194:26050] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaJe9GuX5e1Q32gqxH3jZgAAARQ"]
[Sat Feb 28 11:20:22.242004 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:26409] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaJe9rLWOogAgHGh62TI8gAAAZU"]
[Sat Feb 28 11:20:24.909088 2026] [:error] [pid 39183:tid 39204] [client 158.158.96.194:63177] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaJe-BCf4HvhVePw3LbWpgAAAAw"]
[Sat Feb 28 11:20:26.619746 2026] [:error] [pid 39184:tid 39232] [client 158.158.96.194:63325] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaJe-ltZF9Zd_U7easDDnQAAAE0"]
[Sat Feb 28 11:20:27.480588 2026] [:error] [pid 39183:tid 39208] [client 158.158.96.194:26048] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nhr.php"] [unique_id "aaJe-xCf4HvhVePw3LbWqwAAABA"]
[Sat Feb 28 11:20:28.672775 2026] [:error] [pid 39185:tid 39266] [client 158.158.96.194:29660] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nhr.php"] [unique_id "aaJe_BVE-FfM89u7BQZuFgAAAJQ"]
[Sat Feb 28 11:20:42.627243 2026] [:error] [pid 11791:tid 11813] [client 158.158.96.194:4966] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaJfCmuX5e1Q32gqxH3jmwAAARQ"]
[Sat Feb 28 11:20:43.826347 2026] [:error] [pid 52460:tid 52476] [client 158.158.96.194:32164] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaJfC7LWOogAgHGh62TJfgAAAY0"]
[Sat Feb 28 11:20:47.488337 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:41916] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaJfD2uX5e1Q32gqxH3jpgAAAQI"]
[Sat Feb 28 11:20:49.513963 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:30527] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaJfERVE-FfM89u7BQZuWgAAAJI"]
[Sat Feb 28 11:20:50.587190 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:24283] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmy.php"] [unique_id "aaJfErLWOogAgHGh62TJkQAAAZM"]
[Sat Feb 28 11:20:51.753177 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:38471] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmy.php"] [unique_id "aaJfE7LWOogAgHGh62TJmAAAAZY"]
[Sat Feb 28 11:20:52.624715 2026] [:error] [pid 11791:tid 11793] [client 158.158.96.194:38801] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmy.php"] [unique_id "aaJfFGuX5e1Q32gqxH3jrwAAAQA"]
[Sat Feb 28 11:20:55.167008 2026] [:error] [pid 52460:tid 52476] [client 158.158.96.194:4933] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmy.php"] [unique_id "aaJfF7LWOogAgHGh62TJrwAAAY0"]
[Sat Feb 28 11:20:57.764924 2026] [:error] [pid 39183:tid 39192] [client 158.158.96.194:38808] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "aaJfGRCf4HvhVePw3LbWuAAAAAA"]
[Sat Feb 28 11:20:58.984746 2026] [:error] [pid 22194:tid 22214] [client 158.158.96.194:26103] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "aaJfGn6mbajs3bzQGysh7wAAAVI"]
[Sat Feb 28 11:21:00.318853 2026] [:error] [pid 52460:tid 52478] [client 158.158.96.194:63340] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "aaJfHLLWOogAgHGh62TJ3gAAAY8"]
[Sat Feb 28 11:21:01.695436 2026] [:error] [pid 52460:tid 52477] [client 158.158.96.194:63355] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "aaJfHbLWOogAgHGh62TJ5wAAAY4"]
[Sat Feb 28 11:21:02.907230 2026] [:error] [pid 39183:tid 39200] [client 158.158.96.194:41597] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aaJfHhCf4HvhVePw3LbWwQAAAAg"]
[Sat Feb 28 11:21:03.645083 2026] [:error] [pid 39185:tid 39259] [client 158.158.96.194:29653] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aaJfHxVE-FfM89u7BQZuigAAAI0"]
[Sat Feb 28 11:21:04.715322 2026] [:error] [pid 11791:tid 11814] [client 158.158.96.194:25449] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aaJfIGuX5e1Q32gqxH3jugAAARU"]
[Sat Feb 28 11:21:05.535988 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:25204] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aaJfIRVE-FfM89u7BQZulwAAAIw"]
[Sat Feb 28 11:21:06.655031 2026] [:error] [pid 11791:tid 11817] [client 158.158.96.194:48304] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaJfImuX5e1Q32gqxH3jwAAAARg"]
[Sat Feb 28 11:21:08.818775 2026] [:error] [pid 52460:tid 52486] [client 158.158.96.194:45141] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaJfJLLWOogAgHGh62TJ8QAAAZc"]
[Sat Feb 28 11:21:09.582976 2026] [:error] [pid 39292:tid 39309] [client 158.158.96.194:4979] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaJfJaIAO5fN7BxyqcGs8wAAAM8"]
[Sat Feb 28 11:21:10.214966 2026] [:error] [pid 39292:tid 39300] [client 158.158.96.194:30671] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaJfJqIAO5fN7BxyqcGs9QAAAMY"]
[Sat Feb 28 11:21:11.052355 2026] [:error] [pid 22194:tid 22212] [client 158.158.96.194:25427] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scx.php7"] [unique_id "aaJfJ36mbajs3bzQGysh-AAAAVA"]
[Sat Feb 28 11:21:11.999625 2026] [:error] [pid 22194:tid 22214] [client 158.158.96.194:30693] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scx.php7"] [unique_id "aaJfJ36mbajs3bzQGysiAAAAAVI"]
[Sat Feb 28 11:21:13.348477 2026] [:error] [pid 39185:tid 39261] [client 158.158.96.194:4108] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scx.php7"] [unique_id "aaJfKRVE-FfM89u7BQZuuAAAAI8"]
[Sat Feb 28 11:21:14.451275 2026] [:error] [pid 22194:tid 22203] [client 158.158.96.194:45153] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scx.php7"] [unique_id "aaJfKn6mbajs3bzQGysiBQAAAUc"]
[Sat Feb 28 11:21:15.453755 2026] [:error] [pid 39185:tid 39251] [client 158.158.96.194:30685] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error1.php"] [unique_id "aaJfKxVE-FfM89u7BQZuwAAAAIU"]
[Sat Feb 28 11:21:16.948079 2026] [:error] [pid 11791:tid 11813] [client 158.158.96.194:4142] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error1.php"] [unique_id "aaJfLGuX5e1Q32gqxH3jyAAAARQ"]
[Sat Feb 28 11:21:18.289157 2026] [:error] [pid 39292:tid 39307] [client 158.158.96.194:62850] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error1.php"] [unique_id "aaJfLqIAO5fN7BxyqcGs-gAAAM0"]
[Sat Feb 28 11:21:19.426128 2026] [:error] [pid 11791:tid 11799] [client 158.158.96.194:4140] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error1.php"] [unique_id "aaJfL2uX5e1Q32gqxH3jzwAAAQY"]
[Sat Feb 28 11:21:20.522987 2026] [:error] [pid 39184:tid 39240] [client 158.158.96.194:26921] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaJfMFtZF9Zd_U7easDDuQAAAFU"]
[Sat Feb 28 11:21:23.179279 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:27712] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaJfMxVE-FfM89u7BQZvEQAAAJI"]
[Sat Feb 28 11:21:25.698503 2026] [:error] [pid 11791:tid 11802] [client 158.158.96.194:39024] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaJfNWuX5e1Q32gqxH3j-wAAAQk"]
[Sat Feb 28 11:21:26.553403 2026] [:error] [pid 52460:tid 52478] [client 158.158.96.194:25697] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaJfNrLWOogAgHGh62TKkQAAAY8"]
[Sat Feb 28 11:21:27.952333 2026] [:error] [pid 39183:tid 39216] [client 158.158.96.194:52809] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaJfNxCf4HvhVePw3LbW7gAAABg"]
[Sat Feb 28 11:21:28.788717 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:39309] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaJfOBVE-FfM89u7BQZvMwAAAIw"]
[Sat Feb 28 11:21:29.536222 2026] [:error] [pid 39183:tid 39207] [client 158.158.96.194:30724] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaJfORCf4HvhVePw3LbW9AAAAA8"]
[Sat Feb 28 11:21:30.268704 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:30724] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaJfOhVE-FfM89u7BQZvOAAAAJE"]
[Sat Feb 28 11:21:31.014956 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:60171] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJfO7LWOogAgHGh62TKowAAAYg"]
[Sat Feb 28 11:21:31.867664 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:65206] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJfOxVE-FfM89u7BQZvQAAAAIs"]
[Sat Feb 28 11:21:32.947468 2026] [:error] [pid 22194:tid 22210] [client 158.158.96.194:4872] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJfPH6mbajs3bzQGysiQwAAAU4"]
[Sat Feb 28 11:21:33.961215 2026] [:error] [pid 22194:tid 22211] [client 158.158.96.194:63414] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJfPX6mbajs3bzQGysiSQAAAU8"]
[Sat Feb 28 11:21:34.701059 2026] [:error] [pid 39185:tid 39265] [client 158.158.96.194:60185] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaJfPhVE-FfM89u7BQZvUAAAAJM"]
[Sat Feb 28 11:21:36.541481 2026] [:error] [pid 52460:tid 52463] [client 158.158.96.194:53576] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaJfQLLWOogAgHGh62TKqQAAAYA"]
[Sat Feb 28 11:21:37.202650 2026] [:error] [pid 22194:tid 22202] [client 158.158.96.194:39356] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaJfQX6mbajs3bzQGysiUQAAAUY"]
[Sat Feb 28 11:21:38.470736 2026] [:error] [pid 39184:tid 39236] [client 158.158.96.194:33883] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaJfQltZF9Zd_U7easDDygAAAFE"]
[Sat Feb 28 11:21:40.239735 2026] [:error] [pid 39184:tid 39223] [client 158.158.96.194:39894] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaJfRFtZF9Zd_U7easDDzgAAAEQ"]
[Sat Feb 28 11:21:41.217996 2026] [:error] [pid 52460:tid 52474] [client 158.158.96.194:33867] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaJfRbLWOogAgHGh62TKvwAAAYs"]
[Sat Feb 28 11:21:51.582673 2026] [:error] [pid 39184:tid 39221] [client 158.158.96.194:41295] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaJfT1tZF9Zd_U7easDD7AAAAEI"]
[Sat Feb 28 11:21:52.668299 2026] [:error] [pid 52460:tid 52471] [client 158.158.96.194:38290] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaJfULLWOogAgHGh62TK4QAAAYg"]
[Sat Feb 28 11:21:54.041251 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:4275] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaJfUhVE-FfM89u7BQZvhgAAAJE"]
[Sat Feb 28 11:21:54.815973 2026] [:error] [pid 39292:tid 39313] [client 158.158.96.194:37177] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaJfUqIAO5fN7BxyqcGtXQAAANM"]
[Sat Feb 28 11:21:55.502696 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:41308] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aaJfU7LWOogAgHGh62TK7wAAAYw"]
[Sat Feb 28 11:21:56.839180 2026] [:error] [pid 52460:tid 52470] [client 158.158.96.194:40290] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aaJfVLLWOogAgHGh62TK-QAAAYc"]
[Sat Feb 28 11:21:58.210336 2026] [:error] [pid 22194:tid 22209] [client 158.158.96.194:33332] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aaJfVn6mbajs3bzQGysiZAAAAU0"]
[Sat Feb 28 11:21:59.136732 2026] [:error] [pid 22194:tid 22219] [client 158.158.96.194:37326] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aaJfV36mbajs3bzQGysiaAAAAVc"]
[Sat Feb 28 11:21:59.964856 2026] [:error] [pid 39184:tid 39222] [client 158.158.96.194:38068] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaJfV1tZF9Zd_U7easDD7QAAAEM"]
[Sat Feb 28 11:22:01.590210 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:41252] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaJfWbLWOogAgHGh62TLAgAAAZM"]
[Sat Feb 28 11:22:02.197037 2026] [:error] [pid 22194:tid 22211] [client 158.158.96.194:44117] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaJfWn6mbajs3bzQGysibQAAAU8"]
[Sat Feb 28 11:22:03.801044 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:37324] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaJfW7LWOogAgHGh62TLEQAAAZU"]
[Sat Feb 28 11:22:04.843222 2026] [:error] [pid 39185:tid 39258] [client 158.158.96.194:37357] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rtx.php"] [unique_id "aaJfXBVE-FfM89u7BQZvmQAAAIw"]
[Sat Feb 28 11:22:05.906851 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:37079] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rtx.php"] [unique_id "aaJfXbLWOogAgHGh62TLIgAAAZU"]
[Sat Feb 28 11:22:06.777149 2026] [:error] [pid 11791:tid 11807] [client 158.158.96.194:40278] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rtx.php"] [unique_id "aaJfXmuX5e1Q32gqxH3kOwAAAQ4"]
[Sat Feb 28 11:22:07.526440 2026] [:error] [pid 39184:tid 39220] [client 158.158.96.194:40297] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rtx.php"] [unique_id "aaJfX1tZF9Zd_U7easDD9gAAAEE"]
[Sat Feb 28 11:22:08.348009 2026] [:error] [pid 11791:tid 11811] [client 158.158.96.194:37118] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aaJfYGuX5e1Q32gqxH3kQAAAARI"]
[Sat Feb 28 11:22:09.508977 2026] [:error] [pid 39185:tid 39263] [client 158.158.96.194:28387] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aaJfYRVE-FfM89u7BQZvoQAAAJE"]
[Sat Feb 28 11:22:10.493111 2026] [:error] [pid 52460:tid 52469] [client 158.158.96.194:37108] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aaJfYrLWOogAgHGh62TLMAAAAYY"]
[Sat Feb 28 11:22:11.672244 2026] [:error] [pid 52460:tid 52466] [client 158.158.96.194:59842] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "aaJfY7LWOogAgHGh62TLNQAAAYM"]
[Sat Feb 28 11:22:12.914491 2026] [:error] [pid 52460:tid 52465] [client 158.158.96.194:4237] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaJfZLLWOogAgHGh62TLPgAAAYI"]
[Sat Feb 28 11:22:13.550597 2026] [:error] [pid 11791:tid 11807] [client 158.158.96.194:41377] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaJfZWuX5e1Q32gqxH3kTQAAAQ4"]
[Sat Feb 28 11:22:14.391096 2026] [:error] [pid 52460:tid 52473] [client 158.158.96.194:35806] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaJfZrLWOogAgHGh62TLQwAAAYo"]
[Sat Feb 28 11:22:15.838132 2026] [:error] [pid 11791:tid 11795] [client 158.158.96.194:37375] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaJfZ2uX5e1Q32gqxH3kVAAAAQI"]
[Sat Feb 28 11:22:16.907065 2026] [:error] [pid 52460:tid 52476] [client 158.158.96.194:38300] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaJfaLLWOogAgHGh62TLVgAAAY0"]
[Sat Feb 28 11:22:17.804013 2026] [:error] [pid 11791:tid 11812] [client 158.158.96.194:41292] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaJfaWuX5e1Q32gqxH3kXgAAARM"]
[Sat Feb 28 11:22:18.595375 2026] [:error] [pid 39185:tid 39246] [client 158.158.96.194:37362] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaJfahVE-FfM89u7BQZvsQAAAIA"]
[Sat Feb 28 11:22:19.747709 2026] [:error] [pid 39185:tid 39249] [client 158.158.96.194:30226] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaJfaxVE-FfM89u7BQZvvAAAAIM"]
[Sat Feb 28 11:22:22.420837 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:33639] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaJfbhVE-FfM89u7BQZvzgAAAIQ"]
[Sat Feb 28 11:22:29.102705 2026] [:error] [pid 22194:tid 22219] [client 158.158.96.194:33602] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaJfdX6mbajs3bzQGysiqAAAAVc"]
[Sat Feb 28 11:22:30.667888 2026] [:error] [pid 39292:tid 39311] [client 158.158.96.194:41390] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaJfdqIAO5fN7BxyqcGtngAAANE"]
[Sat Feb 28 11:22:33.124423 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:44096] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaJfeWuX5e1Q32gqxH3kqwAAAQ0"]
[Sat Feb 28 11:22:36.670655 2026] [:error] [pid 39185:tid 39268] [client 158.158.96.194:41270] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaJffBVE-FfM89u7BQZv9AAAAJY"]
[Sat Feb 28 11:22:38.344940 2026] [:error] [pid 52460:tid 52469] [client 158.158.96.194:35798] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaJffrLWOogAgHGh62TLzgAAAYY"]
[Sat Feb 28 11:22:40.167027 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:28376] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaJfgLLWOogAgHGh62TL3QAAAZM"]
[Sat Feb 28 11:22:42.357048 2026] [:error] [pid 52460:tid 52484] [client 158.158.96.194:36824] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaJfgrLWOogAgHGh62TMAwAAAZU"]
[Sat Feb 28 11:22:43.794400 2026] [:error] [pid 39185:tid 39264] [client 158.158.96.194:37832] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aaJfgxVE-FfM89u7BQZwGQAAAJI"]
[Sat Feb 28 11:22:45.262591 2026] [:error] [pid 11791:tid 11797] [client 158.158.96.194:36856] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aaJfhWuX5e1Q32gqxH3kwwAAAQQ"]
[Sat Feb 28 11:22:46.690180 2026] [:error] [pid 11791:tid 11798] [client 158.158.96.194:28410] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aaJfhmuX5e1Q32gqxH3kzgAAAQU"]
[Sat Feb 28 11:22:48.747514 2026] [:error] [pid 39184:tid 39238] [client 158.158.96.194:65455] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aaJfiFtZF9Zd_U7easDEDgAAAFM"]
[Sat Feb 28 11:22:49.405204 2026] [:error] [pid 39185:tid 39250] [client 158.158.96.194:38607] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aaJfiRVE-FfM89u7BQZwLwAAAIQ"]
[Sat Feb 28 11:22:58.395181 2026] [:error] [pid 22194:tid 22214] [client 158.158.96.194:29257] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJfkn6mbajs3bzQGysi5QAAAVI"]
[Sat Feb 28 11:22:59.284787 2026] [:error] [pid 52460:tid 52482] [client 158.158.96.194:39921] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJfk7LWOogAgHGh62TMYQAAAZM"]
[Sat Feb 28 11:23:02.211338 2026] [:error] [pid 11791:tid 11804] [client 158.158.96.194:65410] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJflmuX5e1Q32gqxH3lCgAAAQs"]
[Sat Feb 28 11:23:03.135956 2026] [:error] [pid 39292:tid 39301] [client 158.158.96.194:33928] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaJfl6IAO5fN7BxyqcGt1QAAAMc"]
[Sat Feb 28 11:23:04.040969 2026] [:error] [pid 52460:tid 52463] [client 158.158.96.194:36605] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaJfmLLWOogAgHGh62TMcgAAAYA"]
[Sat Feb 28 11:23:05.654495 2026] [:error] [pid 52460:tid 52485] [client 158.158.96.194:28350] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaJfmbLWOogAgHGh62TMfwAAAZY"]
[Sat Feb 28 11:23:07.148305 2026] [:error] [pid 11791:tid 11810] [client 158.158.96.194:26648] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaJfm2uX5e1Q32gqxH3lGwAAARE"]
[Sat Feb 28 11:23:09.330527 2026] [:error] [pid 22194:tid 22220] [client 158.158.96.194:53607] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaJfnX6mbajs3bzQGysi7wAAAVg"]
[Sat Feb 28 11:23:11.367663 2026] [:error] [pid 52460:tid 52481] [client 158.158.96.194:26653] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aaJfn7LWOogAgHGh62TMrwAAAZI"]
[Sat Feb 28 11:23:12.612754 2026] [:error] [pid 39183:tid 39208] [client 158.158.96.194:33930] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aaJfoBCf4HvhVePw3LbXOQAAABA"]
[Sat Feb 28 11:23:14.448193 2026] [:error] [pid 39292:tid 39296] [client 158.158.96.194:33983] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aaJfoqIAO5fN7BxyqcGt4wAAAMI"]
[Sat Feb 28 11:23:16.026750 2026] [:error] [pid 39185:tid 39257] [client 158.158.96.194:39327] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aaJfpBVE-FfM89u7BQZwhAAAAIs"]
[Sat Feb 28 11:23:20.835923 2026] [:error] [pid 52460:tid 52475] [client 158.158.96.194:46297] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aaJfqLLWOogAgHGh62TM5wAAAYw"]
[Sat Feb 28 11:23:23.213139 2026] [:error] [pid 52460:tid 52470] [client 158.158.96.194:28308] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aaJfq7LWOogAgHGh62TM8AAAAYc"]
[Sat Feb 28 11:23:24.046837 2026] [:error] [pid 11791:tid 11799] [client 158.158.96.194:40198] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aaJfrGuX5e1Q32gqxH3lQwAAAQY"]
[Sat Feb 28 11:23:24.907085 2026] [:error] [pid 11791:tid 11806] [client 158.158.96.194:33895] [client 158.158.96.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aaJfrGuX5e1Q32gqxH3lSAAAAQ0"]
[Sat Feb 28 11:44:51.381083 2026] [:error] [pid 39185:tid 39268] [client 45.141.233.196:55867] [client 45.141.233.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.196, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaJksxVE-FfM89u7BQZ_zgAAAJY"]
[Sat Feb 28 11:44:51.920655 2026] [:error] [pid 52460:tid 52464] [client 45.141.233.196:56980] [client 45.141.233.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.196, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaJks7LWOogAgHGh62TlfwAAAYE"]
[Sat Feb 28 11:44:52.185853 2026] [:error] [pid 39185:tid 39259] [client 45.141.233.196:55867] [client 45.141.233.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.196, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaJktBVE-FfM89u7BQZ_0QAAAI0"]
[Sat Feb 28 11:59:41.070607 2026] [autoindex:error] [pid 52460:tid 52477] [client 194.146.12.7:65135] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 12:39:16.477549 2026] [:error] [pid 52460:tid 52485] [client 182.44.9.147:42820] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaJxdLLWOogAgHGh62QapAAAAZY"]
[Sat Feb 28 12:40:07.612332 2026] [:error] [pid 11791:tid 11798] [client 122.176.154.222:52228] [client 122.176.154.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.176.154.222, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaJxp2uX5e1Q32gqxH0MPQAAAQU"]
[Sat Feb 28 13:15:04.661196 2026] [:error] [pid 39185:tid 39251] [client 105.184.191.170:56833] [client 105.184.191.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.184.191.170, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaJ52BVE-FfM89u7BQbNQwAAAIU"]
[Sat Feb 28 13:46:29.447871 2026] [:error] [pid 39185:tid 39249] [client 4.204.200.32:60290] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaKBNRVE-FfM89u7BQbqBwAAAIM"]
[Sat Feb 28 13:46:30.346805 2026] [:error] [pid 39184:tid 39239] [client 4.204.200.32:60403] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaKBNltZF9Zd_U7easDiyAAAAFQ"]
[Sat Feb 28 13:46:31.105707 2026] [:error] [pid 39184:tid 39236] [client 4.204.200.32:60398] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaKBN1tZF9Zd_U7easDizgAAAFE"]
[Sat Feb 28 13:46:31.913449 2026] [:error] [pid 11791:tid 11812] [client 4.204.200.32:60414] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaKBN2uX5e1Q32gqxH0vtAAAARM"]
[Sat Feb 28 13:46:32.682691 2026] [:error] [pid 39292:tid 39312] [client 4.204.200.32:60304] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaKBOKIAO5fN7BxyqcHgCwAAANI"]
[Sat Feb 28 13:46:33.783760 2026] [:error] [pid 22194:tid 22208] [client 4.204.200.32:60404] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaKBOX6mbajs3bzQGytJ9AAAAUw"]
[Sat Feb 28 13:46:34.946274 2026] [:error] [pid 22194:tid 22202] [client 4.204.200.32:60390] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaKBOn6mbajs3bzQGytJ9wAAAUY"]
[Sat Feb 28 13:46:35.861655 2026] [:error] [pid 11791:tid 11802] [client 4.204.200.32:60289] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaKBO2uX5e1Q32gqxH0vxwAAAQk"]
[Sat Feb 28 13:46:37.327950 2026] [:error] [pid 52460:tid 52474] [client 4.204.200.32:60367] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaKBPbLWOogAgHGh62RM9AAAAYs"]
[Sat Feb 28 13:46:38.351818 2026] [:error] [pid 39184:tid 39225] [client 4.204.200.32:60369] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaKBPltZF9Zd_U7easDi3AAAAEY"]
[Sat Feb 28 13:46:39.048735 2026] [:error] [pid 11791:tid 11805] [client 4.204.200.32:60352] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaKBP2uX5e1Q32gqxH0vzQAAAQw"]
[Sat Feb 28 13:46:40.052725 2026] [:error] [pid 39183:tid 39210] [client 4.204.200.32:60334] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaKBQBCf4HvhVePw3LbvXAAAABI"]
[Sat Feb 28 13:46:40.939889 2026] [:error] [pid 22194:tid 22197] [client 4.204.200.32:60343] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaKBQH6mbajs3bzQGytJ_AAAAUE"]
[Sat Feb 28 13:46:41.487580 2026] [:error] [pid 39184:tid 39243] [client 4.204.200.32:60299] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaKBQVtZF9Zd_U7easDi5QAAAFg"]
[Sat Feb 28 13:46:42.774902 2026] [:error] [pid 39184:tid 39224] [client 4.204.200.32:60306] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaKBQltZF9Zd_U7easDi7QAAAEU"]
[Sat Feb 28 13:46:43.526076 2026] [:error] [pid 22194:tid 22211] [client 4.204.200.32:60363] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaKBQ36mbajs3bzQGytKBAAAAU8"]
[Sat Feb 28 13:46:44.362948 2026] [:error] [pid 22194:tid 22204] [client 4.204.200.32:60378] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaKBRH6mbajs3bzQGytKCgAAAUg"]
[Sat Feb 28 13:46:45.062893 2026] [:error] [pid 11791:tid 11794] [client 4.204.200.32:60354] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaKBRWuX5e1Q32gqxH0v2AAAAQE"]
[Sat Feb 28 13:46:45.784640 2026] [:error] [pid 39185:tid 39268] [client 4.204.200.32:60310] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaKBRRVE-FfM89u7BQbqSAAAAJY"]
[Sat Feb 28 13:46:46.527433 2026] [:error] [pid 39185:tid 39251] [client 4.204.200.32:60385] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaKBRhVE-FfM89u7BQbqTwAAAIU"]
[Sat Feb 28 13:46:47.260462 2026] [:error] [pid 52460:tid 52476] [client 4.204.200.32:60312] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaKBR7LWOogAgHGh62RNCwAAAY0"]
[Sat Feb 28 13:46:48.468570 2026] [:error] [pid 52460:tid 52477] [client 4.204.200.32:60319] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaKBSLLWOogAgHGh62RNEQAAAY4"]
[Sat Feb 28 13:46:49.575255 2026] [:error] [pid 52460:tid 52473] [client 4.204.200.32:64283] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaKBSbLWOogAgHGh62RNFgAAAYo"]
[Sat Feb 28 13:46:50.380294 2026] [:error] [pid 52460:tid 52480] [client 4.204.200.32:60409] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaKBSrLWOogAgHGh62RNHAAAAZE"]
[Sat Feb 28 13:46:51.223048 2026] [:error] [pid 11791:tid 11809] [client 4.204.200.32:60341] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaKBS2uX5e1Q32gqxH0v6wAAARA"]
[Sat Feb 28 13:46:51.866374 2026] [:error] [pid 39185:tid 39254] [client 4.204.200.32:60370] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaKBSxVE-FfM89u7BQbqWgAAAIg"]
[Sat Feb 28 13:46:52.722480 2026] [:error] [pid 39183:tid 39215] [client 4.204.200.32:60396] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaKBTBCf4HvhVePw3LbvaQAAABc"]
[Sat Feb 28 13:46:53.321189 2026] [:error] [pid 39185:tid 39253] [client 4.204.200.32:60394] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaKBTRVE-FfM89u7BQbqYgAAAIc"]
[Sat Feb 28 13:46:53.864334 2026] [:error] [pid 22194:tid 22207] [client 4.204.200.32:60392] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaKBTX6mbajs3bzQGytKEwAAAUs"]
[Sat Feb 28 13:46:54.680789 2026] [:error] [pid 39183:tid 39214] [client 4.204.200.32:64301] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaKBThCf4HvhVePw3LbvbQAAABY"]
[Sat Feb 28 13:46:55.460180 2026] [:error] [pid 39184:tid 39220] [client 4.204.200.32:64263] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaKBT1tZF9Zd_U7easDjCAAAAEE"]
[Sat Feb 28 13:46:56.398414 2026] [:error] [pid 22194:tid 22210] [client 4.204.200.32:60401] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaKBUH6mbajs3bzQGytKFgAAAU4"]
[Sat Feb 28 13:46:57.303778 2026] [:error] [pid 22194:tid 22209] [client 4.204.200.32:48078] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaKBUX6mbajs3bzQGytKGQAAAU0"]
[Sat Feb 28 13:46:58.183089 2026] [:error] [pid 22194:tid 22200] [client 4.204.200.32:60302] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaKBUn6mbajs3bzQGytKGwAAAUQ"]
[Sat Feb 28 13:46:58.943281 2026] [:error] [pid 11791:tid 11809] [client 4.204.200.32:60314] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaKBUmuX5e1Q32gqxH0v-QAAARA"]
[Sat Feb 28 13:47:00.371757 2026] [:error] [pid 39184:tid 39241] [client 4.204.200.32:64271] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaKBVFtZF9Zd_U7easDjGgAAAFY"]
[Sat Feb 28 13:47:01.317841 2026] [:error] [pid 39184:tid 39243] [client 4.204.200.32:60358] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaKBVVtZF9Zd_U7easDjHQAAAFg"]
[Sat Feb 28 13:47:02.198069 2026] [:error] [pid 39185:tid 39268] [client 4.204.200.32:60313] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaKBVhVE-FfM89u7BQbqagAAAJY"]
[Sat Feb 28 13:47:02.712027 2026] [:error] [pid 11791:tid 11803] [client 4.204.200.32:60327] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaKBVmuX5e1Q32gqxH0v_gAAAQo"]
[Sat Feb 28 13:47:03.522343 2026] [:error] [pid 52460:tid 52470] [client 4.204.200.32:60395] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaKBV7LWOogAgHGh62RNMwAAAYc"]
[Sat Feb 28 13:47:04.150743 2026] [:error] [pid 52460:tid 52479] [client 4.204.200.32:60389] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaKBWLLWOogAgHGh62RNPQAAAZA"]
[Sat Feb 28 13:47:04.901973 2026] [:error] [pid 39184:tid 39238] [client 4.204.200.32:60368] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaKBWFtZF9Zd_U7easDjIAAAAFM"]
[Sat Feb 28 13:47:05.791264 2026] [:error] [pid 52460:tid 52472] [client 4.204.200.32:60316] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaKBWbLWOogAgHGh62RNRgAAAYk"]
[Sat Feb 28 13:47:06.316609 2026] [:error] [pid 39185:tid 39249] [client 4.204.200.32:60300] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaKBWhVE-FfM89u7BQbqcwAAAIM"]
[Sat Feb 28 13:47:07.317087 2026] [:error] [pid 39185:tid 39250] [client 4.204.200.32:64287] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaKBWxVE-FfM89u7BQbqfQAAAIQ"]
[Sat Feb 28 13:47:07.947983 2026] [:error] [pid 39185:tid 39267] [client 4.204.200.32:64306] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaKBWxVE-FfM89u7BQbqgAAAAJU"]
[Sat Feb 28 13:47:08.710998 2026] [:error] [pid 39184:tid 39236] [client 4.204.200.32:60298] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaKBXFtZF9Zd_U7easDjKAAAAFE"]
[Sat Feb 28 13:47:09.336585 2026] [:error] [pid 39185:tid 39249] [client 4.204.200.32:64266] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaKBXRVE-FfM89u7BQbqhAAAAIM"]
[Sat Feb 28 13:47:10.120177 2026] [:error] [pid 11791:tid 11793] [client 4.204.200.32:64291] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaKBXmuX5e1Q32gqxH0wBQAAAQA"]
[Sat Feb 28 13:47:10.624331 2026] [:error] [pid 39183:tid 39199] [client 4.204.200.32:60361] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaKBXhCf4HvhVePw3LbvegAAAAc"]
[Sat Feb 28 13:47:11.463645 2026] [:error] [pid 11791:tid 11797] [client 4.204.200.32:60399] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaKBX2uX5e1Q32gqxH0wCgAAAQQ"]
[Sat Feb 28 13:47:12.216909 2026] [:error] [pid 39183:tid 39202] [client 4.204.200.32:60293] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaKBYBCf4HvhVePw3LbvfgAAAAo"]
[Sat Feb 28 13:47:13.418583 2026] [:error] [pid 11791:tid 11801] [client 4.204.200.32:60415] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmpls.php"] [unique_id "aaKBYWuX5e1Q32gqxH0wEwAAAQg"]
[Sat Feb 28 13:47:14.084039 2026] [:error] [pid 11791:tid 11796] [client 4.204.200.32:64299] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmpls.php"] [unique_id "aaKBYmuX5e1Q32gqxH0wHAAAAQM"]
[Sat Feb 28 13:47:14.976778 2026] [:error] [pid 39185:tid 39256] [client 4.204.200.32:64294] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmpls.php"] [unique_id "aaKBYhVE-FfM89u7BQbqkQAAAIo"]
[Sat Feb 28 13:47:15.970758 2026] [:error] [pid 39185:tid 39249] [client 4.204.200.32:60346] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmpls.php"] [unique_id "aaKBYxVE-FfM89u7BQbqlAAAAIM"]
[Sat Feb 28 13:47:16.754588 2026] [:error] [pid 39185:tid 39253] [client 4.204.200.32:60323] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaKBZBVE-FfM89u7BQbqlgAAAIc"]
[Sat Feb 28 13:47:17.366069 2026] [:error] [pid 39185:tid 39248] [client 4.204.200.32:60311] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaKBZRVE-FfM89u7BQbqmwAAAII"]
[Sat Feb 28 13:47:18.209586 2026] [:error] [pid 39185:tid 39247] [client 4.204.200.32:60376] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaKBZhVE-FfM89u7BQbqngAAAIE"]
[Sat Feb 28 13:47:18.894607 2026] [:error] [pid 39184:tid 39222] [client 4.204.200.32:60412] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaKBZltZF9Zd_U7easDjMgAAAEM"]
[Sat Feb 28 13:47:19.557036 2026] [:error] [pid 52460:tid 52472] [client 4.204.200.32:60405] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaKBZ7LWOogAgHGh62RNUgAAAYk"]
[Sat Feb 28 13:47:20.116000 2026] [:error] [pid 39185:tid 39259] [client 4.204.200.32:64298] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaKBaBVE-FfM89u7BQbqqwAAAI0"]
[Sat Feb 28 13:47:20.683133 2026] [:error] [pid 39184:tid 39238] [client 4.204.200.32:64273] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaKBaFtZF9Zd_U7easDjNAAAAFM"]
[Sat Feb 28 13:47:21.234228 2026] [:error] [pid 39185:tid 39250] [client 4.204.200.32:60296] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaKBaRVE-FfM89u7BQbqtQAAAIQ"]
[Sat Feb 28 13:47:22.414188 2026] [:error] [pid 39185:tid 39253] [client 4.204.200.32:60372] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aaKBahVE-FfM89u7BQbqwAAAAIc"]
[Sat Feb 28 13:47:22.975172 2026] [:error] [pid 52460:tid 52470] [client 4.204.200.32:60294] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aaKBarLWOogAgHGh62RNVAAAAYc"]
[Sat Feb 28 13:47:23.604784 2026] [:error] [pid 11791:tid 11808] [client 4.204.200.32:60356] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aaKBa2uX5e1Q32gqxH0wMQAAAQ8"]
[Sat Feb 28 13:47:24.210990 2026] [:error] [pid 11791:tid 11803] [client 4.204.200.32:60329] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aaKBbGuX5e1Q32gqxH0wNAAAAQo"]
[Sat Feb 28 13:47:25.040619 2026] [:error] [pid 52460:tid 52487] [client 4.204.200.32:60406] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKBbbLWOogAgHGh62RNYAAAAZg"]
[Sat Feb 28 13:47:25.706076 2026] [:error] [pid 11791:tid 11815] [client 4.204.200.32:60342] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKBbWuX5e1Q32gqxH0wOgAAARY"]
[Sat Feb 28 13:47:26.200841 2026] [:error] [pid 11791:tid 11795] [client 4.204.200.32:60288] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKBbmuX5e1Q32gqxH0wPAAAAQI"]
[Sat Feb 28 13:47:26.931022 2026] [:error] [pid 22194:tid 22196] [client 4.204.200.32:64300] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKBbn6mbajs3bzQGytKNgAAAUA"]
[Sat Feb 28 13:47:27.643076 2026] [:error] [pid 52460:tid 52472] [client 4.204.200.32:60394] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aaKBb7LWOogAgHGh62RNZQAAAYk"]
[Sat Feb 28 13:47:28.275632 2026] [:error] [pid 39185:tid 39263] [client 4.204.200.32:48075] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aaKBcBVE-FfM89u7BQbqzwAAAJE"]
[Sat Feb 28 13:47:35.202915 2026] [:error] [pid 11791:tid 11799] [client 4.204.200.32:60315] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaKBd2uX5e1Q32gqxH0wdAAAAQY"]
[Sat Feb 28 13:47:35.916545 2026] [:error] [pid 52460:tid 52469] [client 4.204.200.32:60291] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaKBd7LWOogAgHGh62RNawAAAYY"]
[Sat Feb 28 13:47:36.583884 2026] [:error] [pid 52460:tid 52483] [client 4.204.200.32:60402] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaKBeLLWOogAgHGh62RNbgAAAZQ"]
[Sat Feb 28 13:47:37.440005 2026] [:error] [pid 52460:tid 52468] [client 4.204.200.32:60374] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaKBebLWOogAgHGh62RNcwAAAYU"]
[Sat Feb 28 13:47:38.170315 2026] [:error] [pid 39184:tid 39222] [client 4.204.200.32:64315] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaKBeltZF9Zd_U7easDjQwAAAEM"]
[Sat Feb 28 13:47:38.869192 2026] [:error] [pid 52460:tid 52478] [client 4.204.200.32:64279] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaKBerLWOogAgHGh62RNdQAAAY8"]
[Sat Feb 28 13:47:39.473824 2026] [:error] [pid 22194:tid 22220] [client 4.204.200.32:60350] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaKBe36mbajs3bzQGytKQwAAAVg"]
[Sat Feb 28 13:47:40.451379 2026] [:error] [pid 39184:tid 39224] [client 4.204.200.32:60330] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaKBfFtZF9Zd_U7easDjRwAAAEU"]
[Sat Feb 28 13:47:41.415649 2026] [:error] [pid 39184:tid 39221] [client 4.204.200.32:64302] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaKBfVtZF9Zd_U7easDjSgAAAEI"]
[Sat Feb 28 13:47:42.097162 2026] [:error] [pid 39184:tid 39236] [client 4.204.200.32:64262] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaKBfltZF9Zd_U7easDjTgAAAFE"]
[Sat Feb 28 13:47:42.803518 2026] [:error] [pid 39183:tid 39211] [client 4.204.200.32:64309] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaKBfhCf4HvhVePw3LbvjwAAABM"]
[Sat Feb 28 13:47:43.377186 2026] [:error] [pid 39183:tid 39215] [client 4.204.200.32:60326] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaKBfxCf4HvhVePw3LbvkgAAABc"]
[Sat Feb 28 13:47:44.114597 2026] [:error] [pid 22194:tid 22209] [client 4.204.200.32:64282] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaKBgH6mbajs3bzQGytKTwAAAU0"]
[Sat Feb 28 13:47:45.224291 2026] [:error] [pid 52460:tid 52487] [client 4.204.200.32:60318] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaKBgbLWOogAgHGh62RNhwAAAZg"]
[Sat Feb 28 13:47:46.517542 2026] [:error] [pid 52460:tid 52468] [client 4.204.200.32:60348] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaKBgrLWOogAgHGh62RNjgAAAYU"]
[Sat Feb 28 13:47:47.391906 2026] [:error] [pid 11791:tid 11802] [client 4.204.200.32:60383] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaKBg2uX5e1Q32gqxH0wfAAAAQk"]
[Sat Feb 28 13:47:47.993836 2026] [:error] [pid 39183:tid 39200] [client 4.204.200.32:60366] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tax.php"] [unique_id "aaKBgxCf4HvhVePw3LbvnAAAAAg"]
[Sat Feb 28 13:47:48.491497 2026] [:error] [pid 52460:tid 52487] [client 4.204.200.32:60321] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tax.php"] [unique_id "aaKBhLLWOogAgHGh62RNlwAAAZg"]
[Sat Feb 28 13:47:49.058938 2026] [:error] [pid 22194:tid 22199] [client 4.204.200.32:60364] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tax.php"] [unique_id "aaKBhX6mbajs3bzQGytKVQAAAUM"]
[Sat Feb 28 13:47:49.622615 2026] [:error] [pid 39184:tid 39237] [client 4.204.200.32:60344] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tax.php"] [unique_id "aaKBhVtZF9Zd_U7easDjZwAAAFI"]
[Sat Feb 28 13:47:50.410885 2026] [:error] [pid 39185:tid 39255] [client 4.204.200.32:64278] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "aaKBhhVE-FfM89u7BQbq_QAAAIk"]
[Sat Feb 28 13:47:51.151103 2026] [:error] [pid 52460:tid 52464] [client 4.204.200.32:64269] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "aaKBh7LWOogAgHGh62RNogAAAYE"]
[Sat Feb 28 13:47:51.782739 2026] [:error] [pid 52460:tid 52472] [client 4.204.200.32:60332] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "aaKBh7LWOogAgHGh62RNpAAAAYk"]
[Sat Feb 28 13:47:52.809247 2026] [:error] [pid 39185:tid 39262] [client 4.204.200.32:60324] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "aaKBiBVE-FfM89u7BQbrBQAAAJA"]
[Sat Feb 28 13:47:53.868741 2026] [:error] [pid 39183:tid 39213] [client 4.204.200.32:60307] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aaKBiRCf4HvhVePw3LbvqQAAABU"]
[Sat Feb 28 13:47:55.303164 2026] [:error] [pid 39184:tid 39221] [client 4.204.200.32:64274] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aaKBi1tZF9Zd_U7easDjhQAAAEI"]
[Sat Feb 28 13:47:55.921820 2026] [:error] [pid 52460:tid 52482] [client 4.204.200.32:60413] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aaKBi7LWOogAgHGh62RNqQAAAZM"]
[Sat Feb 28 13:47:56.779704 2026] [:error] [pid 11791:tid 11817] [client 4.204.200.32:64268] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aaKBjGuX5e1Q32gqxH0wiwAAARg"]
[Sat Feb 28 13:47:57.700583 2026] [:error] [pid 39292:tid 39301] [client 4.204.200.32:60320] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brc.php"] [unique_id "aaKBjaIAO5fN7BxyqcHgSAAAAMc"]
[Sat Feb 28 13:47:58.368844 2026] [:error] [pid 39185:tid 39252] [client 4.204.200.32:48098] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brc.php"] [unique_id "aaKBjhVE-FfM89u7BQbrCwAAAIY"]
[Sat Feb 28 13:47:59.672463 2026] [:error] [pid 39292:tid 39300] [client 4.204.200.32:60292] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brc.php"] [unique_id "aaKBj6IAO5fN7BxyqcHgTwAAAMY"]
[Sat Feb 28 13:48:00.685498 2026] [:error] [pid 39185:tid 39269] [client 4.204.200.32:48089] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/brc.php"] [unique_id "aaKBkBVE-FfM89u7BQbrGQAAAJc"]
[Sat Feb 28 13:48:01.476989 2026] [:error] [pid 39292:tid 39306] [client 4.204.200.32:64310] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/koiy.php"] [unique_id "aaKBkaIAO5fN7BxyqcHgUwAAAMw"]
[Sat Feb 28 13:48:02.300605 2026] [:error] [pid 39185:tid 39270] [client 4.204.200.32:60340] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/koiy.php"] [unique_id "aaKBkhVE-FfM89u7BQbrIAAAAJg"]
[Sat Feb 28 13:48:03.522877 2026] [:error] [pid 39184:tid 39236] [client 4.204.200.32:64257] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/koiy.php"] [unique_id "aaKBk1tZF9Zd_U7easDjkwAAAFE"]
[Sat Feb 28 13:48:04.487446 2026] [:error] [pid 39183:tid 39210] [client 4.204.200.32:60305] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/koiy.php"] [unique_id "aaKBlBCf4HvhVePw3LbvrwAAABI"]
[Sat Feb 28 13:48:05.486843 2026] [:error] [pid 39185:tid 39270] [client 4.204.200.32:60362] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaKBlRVE-FfM89u7BQbrMgAAAJg"]
[Sat Feb 28 13:48:06.621484 2026] [:error] [pid 39292:tid 39300] [client 4.204.200.32:60295] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaKBlqIAO5fN7BxyqcHgZAAAAMY"]
[Sat Feb 28 13:48:07.246132 2026] [:error] [pid 39185:tid 39250] [client 4.204.200.32:60335] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaKBlxVE-FfM89u7BQbrNgAAAIQ"]
[Sat Feb 28 13:48:07.978994 2026] [:error] [pid 39185:tid 39262] [client 4.204.200.32:48120] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaKBlxVE-FfM89u7BQbrOQAAAJA"]
[Sat Feb 28 13:48:08.807841 2026] [:error] [pid 52460:tid 52479] [client 4.204.200.32:60407] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fr/ms.php"] [unique_id "aaKBmLLWOogAgHGh62RNxwAAAZA"]
[Sat Feb 28 13:48:09.596343 2026] [:error] [pid 39185:tid 39270] [client 4.204.200.32:48019] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fr/ms.php"] [unique_id "aaKBmRVE-FfM89u7BQbrQAAAAJg"]
[Sat Feb 28 13:48:10.173831 2026] [:error] [pid 22194:tid 22199] [client 4.204.200.32:60340] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fr/ms.php"] [unique_id "aaKBmn6mbajs3bzQGytKZAAAAUM"]
[Sat Feb 28 13:48:10.686066 2026] [:error] [pid 39185:tid 39250] [client 4.204.200.32:64304] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fr/ms.php"] [unique_id "aaKBmhVE-FfM89u7BQbrRgAAAIQ"]
[Sat Feb 28 13:48:11.493348 2026] [:error] [pid 39185:tid 39262] [client 4.204.200.32:60408] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaKBmxVE-FfM89u7BQbrSwAAAJA"]
[Sat Feb 28 13:48:12.287491 2026] [:error] [pid 52460:tid 52466] [client 4.204.200.32:48110] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaKBnLLWOogAgHGh62RNygAAAYM"]
[Sat Feb 28 13:48:12.866087 2026] [:error] [pid 11791:tid 11817] [client 4.204.200.32:64261] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaKBnGuX5e1Q32gqxH0wngAAARg"]
[Sat Feb 28 13:48:13.671762 2026] [:error] [pid 39185:tid 39262] [client 4.204.200.32:60381] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaKBnRVE-FfM89u7BQbrWgAAAJA"]
[Sat Feb 28 13:48:14.242152 2026] [:error] [pid 39185:tid 39269] [client 4.204.200.32:60393] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gool.php"] [unique_id "aaKBnhVE-FfM89u7BQbrXAAAAJc"]
[Sat Feb 28 13:48:15.026043 2026] [:error] [pid 39185:tid 39265] [client 4.204.200.32:60397] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gool.php"] [unique_id "aaKBnxVE-FfM89u7BQbrXgAAAJM"]
[Sat Feb 28 13:48:15.789709 2026] [:error] [pid 22194:tid 22213] [client 4.204.200.32:60359] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gool.php"] [unique_id "aaKBn36mbajs3bzQGytKbwAAAVE"]
[Sat Feb 28 13:48:16.318968 2026] [:error] [pid 52460:tid 52485] [client 4.204.200.32:48076] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gool.php"] [unique_id "aaKBoLLWOogAgHGh62RN8gAAAZY"]
[Sat Feb 28 13:48:17.009304 2026] [:error] [pid 11791:tid 11815] [client 4.204.200.32:64280] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aaKBoWuX5e1Q32gqxH0wowAAARY"]
[Sat Feb 28 13:48:17.967157 2026] [:error] [pid 39185:tid 39266] [client 4.204.200.32:48100] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aaKBoRVE-FfM89u7BQbrawAAAJQ"]
[Sat Feb 28 13:48:18.777129 2026] [:error] [pid 39185:tid 39254] [client 4.204.200.32:60328] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aaKBohVE-FfM89u7BQbrcgAAAIg"]
[Sat Feb 28 13:48:19.548476 2026] [:error] [pid 11791:tid 11816] [client 4.204.200.32:64256] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1vx.php"] [unique_id "aaKBo2uX5e1Q32gqxH0wqwAAARc"]
[Sat Feb 28 13:48:20.322818 2026] [:error] [pid 39185:tid 39267] [client 4.204.200.32:64316] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aaKBpBVE-FfM89u7BQbreAAAAJU"]
[Sat Feb 28 13:48:21.318626 2026] [:error] [pid 39185:tid 39251] [client 4.204.200.32:64313] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aaKBpRVE-FfM89u7BQbrfwAAAIU"]
[Sat Feb 28 13:48:23.037354 2026] [:error] [pid 52460:tid 52468] [client 4.204.200.32:64297] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aaKBp7LWOogAgHGh62RODAAAAYU"]
[Sat Feb 28 13:48:25.191420 2026] [:error] [pid 52460:tid 52473] [client 4.204.200.32:64303] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mans.php"] [unique_id "aaKBqbLWOogAgHGh62ROEgAAAYo"]
[Sat Feb 28 13:48:26.105109 2026] [:error] [pid 39185:tid 39267] [client 4.204.200.32:64277] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rum.php"] [unique_id "aaKBqhVE-FfM89u7BQbrmQAAAJU"]
[Sat Feb 28 13:48:26.696714 2026] [:error] [pid 39183:tid 39203] [client 45.153.34.31:38854] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aaKBqhCf4HvhVePw3LbvxQAAAAs"]
[Sat Feb 28 13:48:27.059747 2026] [:error] [pid 39292:tid 39301] [client 4.204.200.32:60402] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rum.php"] [unique_id "aaKBq6IAO5fN7BxyqcHggwAAAMc"]
[Sat Feb 28 13:48:28.239786 2026] [:error] [pid 52460:tid 52485] [client 4.204.200.32:60337] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rum.php"] [unique_id "aaKBrLLWOogAgHGh62ROHAAAAZY"]
[Sat Feb 28 13:48:29.388808 2026] [:error] [pid 39185:tid 39252] [client 4.204.200.32:60375] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rum.php"] [unique_id "aaKBrRVE-FfM89u7BQbrogAAAIY"]
[Sat Feb 28 13:48:31.225421 2026] [:error] [pid 39185:tid 39259] [client 4.204.200.32:60339] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaKBrxVE-FfM89u7BQbrqAAAAI0"]
[Sat Feb 28 13:48:32.400805 2026] [:error] [pid 52460:tid 52478] [client 4.204.200.32:48090] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaKBsLLWOogAgHGh62ROLwAAAY8"]
[Sat Feb 28 13:48:43.680356 2026] [:error] [pid 39184:tid 39241] [client 4.204.200.32:48086] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aaKBu1tZF9Zd_U7easDjwQAAAFY"]
[Sat Feb 28 13:48:44.769684 2026] [:error] [pid 39292:tid 39301] [client 4.204.200.32:60345] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aaKBvKIAO5fN7BxyqcHgmAAAAMc"]
[Sat Feb 28 13:48:45.800743 2026] [:error] [pid 39185:tid 39250] [client 4.204.200.32:64307] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aaKBvRVE-FfM89u7BQbr0AAAAIQ"]
[Sat Feb 28 13:48:46.662266 2026] [:error] [pid 39292:tid 39310] [client 4.204.200.32:60351] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/post.php"] [unique_id "aaKBvqIAO5fN7BxyqcHgmwAAANA"]
[Sat Feb 28 13:48:48.279267 2026] [:error] [pid 11791:tid 11817] [client 4.204.200.32:60309] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaKBwGuX5e1Q32gqxH0w2AAAARg"]
[Sat Feb 28 13:48:49.064028 2026] [:error] [pid 39185:tid 39258] [client 4.204.200.32:48083] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaKBwRVE-FfM89u7BQbr3AAAAIw"]
[Sat Feb 28 13:48:50.329110 2026] [:error] [pid 52460:tid 52473] [client 4.204.200.32:48085] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaKBwrLWOogAgHGh62ROhQAAAYo"]
[Sat Feb 28 13:48:51.507557 2026] [:error] [pid 39185:tid 39268] [client 4.204.200.32:64267] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaKBwxVE-FfM89u7BQbr5wAAAJY"]
[Sat Feb 28 13:48:52.591727 2026] [:error] [pid 22194:tid 22212] [client 4.204.200.32:64286] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aaKBxH6mbajs3bzQGytKlgAAAVA"]
[Sat Feb 28 13:48:53.579073 2026] [:error] [pid 39183:tid 39204] [client 4.204.200.32:64272] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aaKBxRCf4HvhVePw3Lbv0wAAAAw"]
[Sat Feb 28 13:48:54.843793 2026] [:error] [pid 52460:tid 52479] [client 4.204.200.32:64281] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aaKBxrLWOogAgHGh62ROkAAAAZA"]
[Sat Feb 28 13:48:56.349140 2026] [:error] [pid 39185:tid 39255] [client 4.204.200.32:64264] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aaKByBVE-FfM89u7BQbr-gAAAIk"]
[Sat Feb 28 13:48:57.665643 2026] [:error] [pid 22194:tid 22214] [client 4.204.200.32:48092] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aaKByX6mbajs3bzQGytKoQAAAVI"]
[Sat Feb 28 13:48:58.438099 2026] [:error] [pid 39185:tid 39251] [client 4.204.200.32:64276] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aaKByhVE-FfM89u7BQbsCAAAAIU"]
[Sat Feb 28 13:48:59.789793 2026] [:error] [pid 52460:tid 52486] [client 4.204.200.32:60411] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aaKBy7LWOogAgHGh62ROngAAAZc"]
[Sat Feb 28 13:49:01.747306 2026] [:error] [pid 52460:tid 52477] [client 4.204.200.32:60325] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aaKBzbLWOogAgHGh62ROqwAAAY4"]
[Sat Feb 28 13:49:03.094453 2026] [:error] [pid 52460:tid 52470] [client 4.204.200.32:60349] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bes.php"] [unique_id "aaKBz7LWOogAgHGh62ROsAAAAYc"]
[Sat Feb 28 13:49:04.196618 2026] [:error] [pid 22194:tid 22197] [client 4.204.200.32:60317] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bes.php"] [unique_id "aaKB0H6mbajs3bzQGytKpAAAAUE"]
[Sat Feb 28 13:49:04.909834 2026] [:error] [pid 39292:tid 39312] [client 4.204.200.32:60360] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bes.php"] [unique_id "aaKB0KIAO5fN7BxyqcHgrwAAANI"]
[Sat Feb 28 13:49:05.477134 2026] [:error] [pid 52460:tid 52468] [client 4.204.200.32:48115] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bes.php"] [unique_id "aaKB0bLWOogAgHGh62ROugAAAYU"]
[Sat Feb 28 13:49:06.268314 2026] [:error] [pid 11791:tid 11808] [client 4.204.200.32:64292] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadd.php"] [unique_id "aaKB0muX5e1Q32gqxH0w8wAAAQ8"]
[Sat Feb 28 13:49:07.125103 2026] [:error] [pid 39292:tid 39307] [client 4.204.200.32:48014] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadd.php"] [unique_id "aaKB06IAO5fN7BxyqcHgtwAAAM0"]
[Sat Feb 28 13:49:08.391237 2026] [:error] [pid 39184:tid 39241] [client 4.204.200.32:60322] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadd.php"] [unique_id "aaKB1FtZF9Zd_U7easDj1gAAAFY"]
[Sat Feb 28 13:49:09.265061 2026] [:error] [pid 39183:tid 39206] [client 4.204.200.32:48094] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadd.php"] [unique_id "aaKB1RCf4HvhVePw3Lbv3AAAAA4"]
[Sat Feb 28 13:49:10.082531 2026] [:error] [pid 11791:tid 11804] [client 4.204.200.32:60353] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "aaKB1muX5e1Q32gqxH0w_gAAAQs"]
[Sat Feb 28 13:49:10.999534 2026] [:error] [pid 52460:tid 52484] [client 4.204.200.32:60333] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "aaKB1rLWOogAgHGh62ROwwAAAZU"]
[Sat Feb 28 13:49:12.576106 2026] [:error] [pid 39292:tid 39315] [client 4.204.200.32:48104] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "aaKB2KIAO5fN7BxyqcHgvQAAANU"]
[Sat Feb 28 13:49:14.434497 2026] [:error] [pid 39292:tid 39305] [client 4.204.200.32:64312] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "aaKB2qIAO5fN7BxyqcHgvwAAAMs"]
[Sat Feb 28 13:49:15.783250 2026] [:error] [pid 39183:tid 39208] [client 4.204.200.32:48095] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaKB2xCf4HvhVePw3Lbv7wAAABA"]
[Sat Feb 28 13:49:18.981325 2026] [:error] [pid 52460:tid 52484] [client 4.204.200.32:64295] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaKB3rLWOogAgHGh62RO1wAAAZU"]
[Sat Feb 28 13:49:19.720588 2026] [:error] [pid 11791:tid 11807] [client 4.204.200.32:64289] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaKB32uX5e1Q32gqxH0xCwAAAQ4"]
[Sat Feb 28 13:49:20.814190 2026] [:error] [pid 11791:tid 11794] [client 4.204.200.32:48009] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaKB4GuX5e1Q32gqxH0xDQAAAQE"]
[Sat Feb 28 13:49:23.387202 2026] [:error] [pid 39183:tid 39201] [client 4.204.200.32:64319] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aaKB4xCf4HvhVePw3LbwGQAAAAk"]
[Sat Feb 28 13:49:24.866500 2026] [:error] [pid 22194:tid 22199] [client 4.204.200.32:48067] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aaKB5H6mbajs3bzQGytKrwAAAUM"]
[Sat Feb 28 13:49:26.665024 2026] [:error] [pid 39185:tid 39260] [client 4.204.200.32:48121] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aaKB5hVE-FfM89u7BQbsTQAAAI4"]
[Sat Feb 28 13:49:28.795485 2026] [:error] [pid 52460:tid 52484] [client 4.204.200.32:48064] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aaKB6LLWOogAgHGh62RO7wAAAZU"]
[Sat Feb 28 13:49:29.981403 2026] [:error] [pid 39185:tid 39252] [client 4.204.200.32:60391] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c4.php"] [unique_id "aaKB6RVE-FfM89u7BQbsUwAAAIY"]
[Sat Feb 28 13:49:30.661819 2026] [:error] [pid 39185:tid 39248] [client 4.204.200.32:48093] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c4.php"] [unique_id "aaKB6hVE-FfM89u7BQbsWgAAAII"]
[Sat Feb 28 13:49:33.912933 2026] [:error] [pid 39183:tid 39195] [client 4.204.200.32:64265] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c4.php"] [unique_id "aaKB7RCf4HvhVePw3LbwKQAAAAM"]
[Sat Feb 28 13:49:34.925423 2026] [:error] [pid 39185:tid 39251] [client 4.204.200.32:48012] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c4.php"] [unique_id "aaKB7hVE-FfM89u7BQbsbgAAAIU"]
[Sat Feb 28 13:49:36.288943 2026] [:error] [pid 39183:tid 39202] [client 4.204.200.32:48118] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aaKB8BCf4HvhVePw3LbwLAAAAAo"]
[Sat Feb 28 13:49:37.030694 2026] [:error] [pid 39184:tid 39235] [client 4.204.200.32:48101] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aaKB8VtZF9Zd_U7easDj7gAAAFA"]
[Sat Feb 28 13:49:38.035997 2026] [:error] [pid 39185:tid 39266] [client 4.204.200.32:60386] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aaKB8hVE-FfM89u7BQbsgQAAAJQ"]
[Sat Feb 28 13:49:39.087216 2026] [:error] [pid 39185:tid 39259] [client 4.204.200.32:48047] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eauu.php"] [unique_id "aaKB8xVE-FfM89u7BQbskAAAAI0"]
[Sat Feb 28 13:49:40.038814 2026] [:error] [pid 52460:tid 52484] [client 4.204.200.32:60379] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fasx.php"] [unique_id "aaKB9LLWOogAgHGh62RPCAAAAZU"]
[Sat Feb 28 13:49:40.918500 2026] [:error] [pid 11791:tid 11804] [client 4.204.200.32:60410] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fasx.php"] [unique_id "aaKB9GuX5e1Q32gqxH0xOwAAAQs"]
[Sat Feb 28 13:49:41.472609 2026] [:error] [pid 11791:tid 11809] [client 4.204.200.32:48108] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fasx.php"] [unique_id "aaKB9WuX5e1Q32gqxH0xQAAAARA"]
[Sat Feb 28 13:49:42.093355 2026] [:error] [pid 39185:tid 39258] [client 4.204.200.32:60400] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fasx.php"] [unique_id "aaKB9hVE-FfM89u7BQbsogAAAIw"]
[Sat Feb 28 13:49:42.798002 2026] [:error] [pid 39185:tid 39257] [client 4.204.200.32:48105] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/opts.php"] [unique_id "aaKB9hVE-FfM89u7BQbsqwAAAIs"]
[Sat Feb 28 13:49:49.655661 2026] [:error] [pid 39185:tid 39261] [client 4.204.200.32:48044] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aaKB_RVE-FfM89u7BQbs3wAAAI8"]
[Sat Feb 28 13:49:51.082950 2026] [:error] [pid 39185:tid 39259] [client 4.204.200.32:48065] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aaKB_xVE-FfM89u7BQbs7AAAAI0"]
[Sat Feb 28 13:49:51.839290 2026] [:error] [pid 11791:tid 11794] [client 4.204.200.32:48099] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aaKB_2uX5e1Q32gqxH0xaAAAAQE"]
[Sat Feb 28 13:49:52.589845 2026] [:error] [pid 39185:tid 39249] [client 4.204.200.32:60338] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aaKCABVE-FfM89u7BQbs8QAAAIM"]
[Sat Feb 28 13:49:53.769353 2026] [:error] [pid 39185:tid 39252] [client 4.204.200.32:48022] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaKCARVE-FfM89u7BQbs9wAAAIY"]
[Sat Feb 28 13:49:54.510066 2026] [:error] [pid 39185:tid 39265] [client 4.204.200.32:47941] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaKCAhVE-FfM89u7BQbtAAAAAJM"]
[Sat Feb 28 13:49:55.486059 2026] [:error] [pid 11791:tid 11798] [client 4.204.200.32:64308] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaKCA2uX5e1Q32gqxH0xcwAAAQU"]
[Sat Feb 28 13:49:56.195971 2026] [:error] [pid 39292:tid 39298] [client 4.204.200.32:48126] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaKCBKIAO5fN7BxyqcHhGwAAAMQ"]
[Sat Feb 28 13:49:56.847004 2026] [:error] [pid 39185:tid 39264] [client 4.204.200.32:48113] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaKCBBVE-FfM89u7BQbtCQAAAJI"]
[Sat Feb 28 13:49:57.677974 2026] [:error] [pid 39292:tid 39318] [client 4.204.200.32:48114] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaKCBaIAO5fN7BxyqcHhHgAAANg"]
[Sat Feb 28 13:49:58.596007 2026] [:error] [pid 22194:tid 22198] [client 4.204.200.32:64260] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaKCBn6mbajs3bzQGytK8gAAAUI"]
[Sat Feb 28 13:49:59.117331 2026] [:error] [pid 39183:tid 39214] [client 4.204.200.32:48109] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaKCBxCf4HvhVePw3LbwQQAAABY"]
[Sat Feb 28 13:49:59.615723 2026] [:error] [pid 39183:tid 39212] [client 4.204.200.32:48127] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaKCBxCf4HvhVePw3LbwRwAAABQ"]
[Sat Feb 28 13:50:00.400596 2026] [:error] [pid 39292:tid 39305] [client 4.204.200.32:64290] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaKCCKIAO5fN7BxyqcHhIwAAAMs"]
[Sat Feb 28 13:50:01.339638 2026] [:error] [pid 22194:tid 22210] [client 4.204.200.32:48040] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaKCCX6mbajs3bzQGytK_wAAAU4"]
[Sat Feb 28 13:50:01.910695 2026] [:error] [pid 52460:tid 52481] [client 4.204.200.32:64270] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaKCCbLWOogAgHGh62RPIAAAAZI"]
[Sat Feb 28 13:50:02.553157 2026] [:error] [pid 39184:tid 39236] [client 4.204.200.32:60371] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaKCCltZF9Zd_U7easDkDgAAAFE"]
[Sat Feb 28 13:50:03.267940 2026] [:error] [pid 22194:tid 22196] [client 4.204.200.32:48062] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaKCC36mbajs3bzQGytLBQAAAUA"]
[Sat Feb 28 13:50:04.098508 2026] [:error] [pid 52460:tid 52487] [client 4.204.200.32:60365] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaKCDLLWOogAgHGh62RPIwAAAZg"]
[Sat Feb 28 13:50:04.585160 2026] [:error] [pid 39184:tid 39233] [client 4.204.200.32:48097] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaKCDFtZF9Zd_U7easDkEAAAAE4"]
[Sat Feb 28 13:50:05.042885 2026] [:error] [pid 39184:tid 39241] [client 4.204.200.32:60384] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmy.php"] [unique_id "aaKCDVtZF9Zd_U7easDkEgAAAFY"]
[Sat Feb 28 13:50:05.793071 2026] [:error] [pid 39185:tid 39252] [client 4.204.200.32:48091] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmy.php"] [unique_id "aaKCDRVE-FfM89u7BQbtGAAAAIY"]
[Sat Feb 28 13:50:06.532569 2026] [:error] [pid 22194:tid 22211] [client 4.204.200.32:48018] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmy.php"] [unique_id "aaKCDn6mbajs3bzQGytLDwAAAU8"]
[Sat Feb 28 13:50:07.410124 2026] [:error] [pid 11791:tid 11815] [client 4.204.200.32:60347] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmy.php"] [unique_id "aaKCD2uX5e1Q32gqxH0xmgAAARY"]
[Sat Feb 28 13:50:07.977271 2026] [:error] [pid 39184:tid 39234] [client 4.204.200.32:48087] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "aaKCD1tZF9Zd_U7easDkFAAAAE8"]
[Sat Feb 28 13:50:08.680776 2026] [:error] [pid 11791:tid 11793] [client 4.204.200.32:48042] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "aaKCEGuX5e1Q32gqxH0xpAAAAQA"]
[Sat Feb 28 13:50:09.526728 2026] [:error] [pid 39292:tid 39305] [client 4.204.200.32:64259] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "aaKCEaIAO5fN7BxyqcHhNgAAAMs"]
[Sat Feb 28 13:50:10.195002 2026] [:error] [pid 39184:tid 39227] [client 4.204.200.32:48070] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "aaKCEltZF9Zd_U7easDkFgAAAEg"]
[Sat Feb 28 13:50:11.002782 2026] [:error] [pid 52460:tid 52465] [client 4.204.200.32:48071] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aaKCE7LWOogAgHGh62RPLAAAAYI"]
[Sat Feb 28 13:50:11.937969 2026] [:error] [pid 52460:tid 52481] [client 4.204.200.32:60355] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aaKCE7LWOogAgHGh62RPNwAAAZI"]
[Sat Feb 28 13:50:12.624368 2026] [:error] [pid 52460:tid 52474] [client 4.204.200.32:48084] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aaKCFLLWOogAgHGh62RPPAAAAYs"]
[Sat Feb 28 13:50:13.278459 2026] [:error] [pid 39292:tid 39300] [client 4.204.200.32:47937] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/end.php"] [unique_id "aaKCFaIAO5fN7BxyqcHhQAAAAMY"]
[Sat Feb 28 13:50:13.859942 2026] [:error] [pid 39185:tid 39264] [client 4.204.200.32:60301] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaKCFRVE-FfM89u7BQbtLQAAAJI"]
[Sat Feb 28 13:50:14.288629 2026] [:error] [pid 39292:tid 39318] [client 4.204.200.32:60388] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaKCFqIAO5fN7BxyqcHhQgAAANg"]
[Sat Feb 28 13:50:14.858360 2026] [:error] [pid 39185:tid 39256] [client 4.204.200.32:60382] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaKCFhVE-FfM89u7BQbtMwAAAIo"]
[Sat Feb 28 13:50:15.521946 2026] [:error] [pid 39292:tid 39306] [client 4.204.200.32:60297] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaKCF6IAO5fN7BxyqcHhRQAAAMw"]
[Sat Feb 28 13:50:16.069031 2026] [:error] [pid 52460:tid 52463] [client 4.204.200.32:60331] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scx.php7"] [unique_id "aaKCGLLWOogAgHGh62RPTAAAAYA"]
[Sat Feb 28 13:50:16.657458 2026] [:error] [pid 39185:tid 39255] [client 4.204.200.32:47939] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scx.php7"] [unique_id "aaKCGBVE-FfM89u7BQbtOgAAAIk"]
[Sat Feb 28 13:50:17.281134 2026] [:error] [pid 11791:tid 11797] [client 4.204.200.32:48003] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scx.php7"] [unique_id "aaKCGWuX5e1Q32gqxH0xtgAAAQQ"]
[Sat Feb 28 13:50:18.172144 2026] [:error] [pid 22194:tid 22220] [client 4.204.200.32:48068] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/scx.php7"] [unique_id "aaKCGn6mbajs3bzQGytLJgAAAVg"]
[Sat Feb 28 13:50:18.745645 2026] [:error] [pid 22194:tid 22207] [client 4.204.200.32:48017] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error1.php"] [unique_id "aaKCGn6mbajs3bzQGytLLAAAAUs"]
[Sat Feb 28 13:50:19.603764 2026] [:error] [pid 39185:tid 39257] [client 4.204.200.32:48039] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error1.php"] [unique_id "aaKCGxVE-FfM89u7BQbtRwAAAIs"]
[Sat Feb 28 13:50:20.227242 2026] [:error] [pid 22194:tid 22203] [client 4.204.200.32:64311] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error1.php"] [unique_id "aaKCHH6mbajs3bzQGytLNwAAAUc"]
[Sat Feb 28 13:50:20.856961 2026] [:error] [pid 22194:tid 22208] [client 4.204.200.32:48123] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error1.php"] [unique_id "aaKCHH6mbajs3bzQGytLOwAAAUw"]
[Sat Feb 28 13:50:21.797849 2026] [:error] [pid 39185:tid 39246] [client 4.204.200.32:48006] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaKCHRVE-FfM89u7BQbtUAAAAIA"]
[Sat Feb 28 13:50:22.406524 2026] [:error] [pid 39292:tid 39313] [client 4.204.200.32:48102] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaKCHqIAO5fN7BxyqcHhUAAAANM"]
[Sat Feb 28 13:50:23.115814 2026] [:error] [pid 52460:tid 52483] [client 4.204.200.32:48000] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaKCH7LWOogAgHGh62RPWAAAAZQ"]
[Sat Feb 28 13:50:23.693556 2026] [:error] [pid 22194:tid 22215] [client 4.204.200.32:60377] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaKCH36mbajs3bzQGytLQAAAAVM"]
[Sat Feb 28 13:50:24.227905 2026] [:error] [pid 22194:tid 22198] [client 4.204.200.32:48082] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaKCIH6mbajs3bzQGytLQQAAAUI"]
[Sat Feb 28 13:50:25.045355 2026] [:error] [pid 11791:tid 11816] [client 4.204.200.32:48038] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaKCIWuX5e1Q32gqxH0xzgAAARc"]
[Sat Feb 28 13:50:25.660929 2026] [:error] [pid 11791:tid 11805] [client 4.204.200.32:60380] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaKCIWuX5e1Q32gqxH0x0gAAAQw"]
[Sat Feb 28 13:50:26.617798 2026] [:error] [pid 39185:tid 39260] [client 4.204.200.32:60387] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaKCIhVE-FfM89u7BQbtaAAAAI4"]
[Sat Feb 28 13:50:27.614343 2026] [:error] [pid 39185:tid 39265] [client 4.204.200.32:64317] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaKCIxVE-FfM89u7BQbtfgAAAJM"]
[Sat Feb 28 13:50:28.375940 2026] [:error] [pid 39185:tid 39253] [client 4.204.200.32:64293] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaKCJBVE-FfM89u7BQbthAAAAIc"]
[Sat Feb 28 13:50:29.206405 2026] [:error] [pid 39185:tid 39248] [client 4.204.200.32:48111] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaKCJRVE-FfM89u7BQbtkAAAAII"]
[Sat Feb 28 13:50:30.087086 2026] [:error] [pid 39185:tid 39246] [client 4.204.200.32:64314] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaKCJhVE-FfM89u7BQbtnQAAAIA"]
[Sat Feb 28 13:50:30.696193 2026] [:error] [pid 39185:tid 39267] [client 4.204.200.32:47954] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaKCJhVE-FfM89u7BQbtpgAAAJU"]
[Sat Feb 28 13:50:31.484889 2026] [:error] [pid 39185:tid 39264] [client 4.204.200.32:48107] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaKCJxVE-FfM89u7BQbtsQAAAJI"]
[Sat Feb 28 13:50:31.976557 2026] [:error] [pid 39185:tid 39268] [client 4.204.200.32:48055] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaKCJxVE-FfM89u7BQbtuAAAAJY"]
[Sat Feb 28 13:50:32.465341 2026] [:error] [pid 39185:tid 39250] [client 4.204.200.32:48088] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaKCKBVE-FfM89u7BQbtvwAAAIQ"]
[Sat Feb 28 13:50:33.109817 2026] [:error] [pid 39185:tid 39262] [client 4.204.200.32:48011] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaKCKRVE-FfM89u7BQbtygAAAJA"]
[Sat Feb 28 13:50:33.751620 2026] [:error] [pid 39185:tid 39249] [client 4.204.200.32:48021] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaKCKRVE-FfM89u7BQbtzgAAAIM"]
[Sat Feb 28 13:50:34.262649 2026] [:error] [pid 39184:tid 39230] [client 4.204.200.32:48112] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaKCKltZF9Zd_U7easDkKwAAAEs"]
[Sat Feb 28 13:50:34.970158 2026] [:error] [pid 52460:tid 52475] [client 4.204.200.32:48056] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaKCKrLWOogAgHGh62RPagAAAYw"]
[Sat Feb 28 13:50:35.769370 2026] [:error] [pid 39185:tid 39249] [client 4.204.200.32:48122] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rpk.php"] [unique_id "aaKCKxVE-FfM89u7BQbt1wAAAIM"]
[Sat Feb 28 13:50:36.395473 2026] [:error] [pid 52460:tid 52484] [client 4.204.200.32:48024] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rpk.php"] [unique_id "aaKCLLLWOogAgHGh62RPegAAAZU"]
[Sat Feb 28 13:50:37.090217 2026] [:error] [pid 11791:tid 11817] [client 4.204.200.32:48007] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rpk.php"] [unique_id "aaKCLWuX5e1Q32gqxH0x6QAAARg"]
[Sat Feb 28 13:50:37.745128 2026] [:error] [pid 11791:tid 11804] [client 4.204.200.32:48052] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rpk.php"] [unique_id "aaKCLWuX5e1Q32gqxH0x6wAAAQs"]
[Sat Feb 28 13:50:38.605112 2026] [:error] [pid 39185:tid 39257] [client 4.204.200.32:47949] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaKCLhVE-FfM89u7BQbt4AAAAIs"]
[Sat Feb 28 13:50:39.213772 2026] [:error] [pid 39185:tid 39253] [client 4.204.200.32:48125] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaKCLxVE-FfM89u7BQbt6gAAAIc"]
[Sat Feb 28 13:50:39.966217 2026] [:error] [pid 52460:tid 52471] [client 4.204.200.32:60290] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaKCL7LWOogAgHGh62RPhgAAAYg"]
[Sat Feb 28 13:50:41.614568 2026] [:error] [pid 39185:tid 39250] [client 4.204.200.32:64296] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaKCMRVE-FfM89u7BQbt_QAAAIQ"]
[Sat Feb 28 13:50:42.325113 2026] [:error] [pid 39183:tid 39195] [client 4.204.200.32:64288] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaKCMhCf4HvhVePw3LbwcgAAAAM"]
[Sat Feb 28 13:50:43.114619 2026] [:error] [pid 39185:tid 39259] [client 4.204.200.32:60308] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaKCMxVE-FfM89u7BQbuCwAAAI0"]
[Sat Feb 28 13:50:43.753576 2026] [:error] [pid 39185:tid 39248] [client 4.204.200.32:60390] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaKCMxVE-FfM89u7BQbuEAAAAII"]
[Sat Feb 28 13:50:44.576580 2026] [:error] [pid 52460:tid 52477] [client 4.204.200.32:47969] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaKCNLLWOogAgHGh62RPkAAAAY4"]
[Sat Feb 28 13:50:45.266200 2026] [:error] [pid 39185:tid 39256] [client 4.204.200.32:47946] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaKCNRVE-FfM89u7BQbuGQAAAIo"]
[Sat Feb 28 13:50:46.089581 2026] [:error] [pid 39185:tid 39248] [client 4.204.200.32:48015] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaKCNhVE-FfM89u7BQbuIQAAAII"]
[Sat Feb 28 13:50:46.770842 2026] [:error] [pid 39292:tid 39316] [client 4.204.200.32:47976] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaKCNqIAO5fN7BxyqcHhagAAANY"]
[Sat Feb 28 13:50:47.409355 2026] [:error] [pid 39185:tid 39270] [client 4.204.200.32:48072] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaKCNxVE-FfM89u7BQbuJwAAAJg"]
[Sat Feb 28 13:50:48.232985 2026] [:error] [pid 11791:tid 11793] [client 4.204.200.32:48117] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aaKCOGuX5e1Q32gqxH0x_QAAAQA"]
[Sat Feb 28 13:50:56.122982 2026] [:error] [pid 22194:tid 22217] [client 4.204.200.32:60394] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaKCQH6mbajs3bzQGytLcwAAAVU"]
[Sat Feb 28 13:50:57.197371 2026] [:error] [pid 39185:tid 39258] [client 4.204.200.32:60310] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaKCQRVE-FfM89u7BQbufQAAAIw"]
[Sat Feb 28 13:50:58.484620 2026] [:error] [pid 39184:tid 39238] [client 4.204.200.32:60357] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaKCQltZF9Zd_U7easDkSQAAAFM"]
[Sat Feb 28 13:50:59.863812 2026] [:error] [pid 39292:tid 39306] [client 4.204.200.32:60412] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaKCQ6IAO5fN7BxyqcHhfgAAAMw"]
[Sat Feb 28 13:51:00.069969 2026] [:error] [pid 39183:tid 39196] [client 4.204.200.32:64275] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaKCRBCf4HvhVePw3LbwkwAAAAQ"]
[Sat Feb 28 13:51:00.990931 2026] [:error] [pid 39185:tid 39260] [client 4.204.200.32:60312] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaKCRBVE-FfM89u7BQbukAAAAI4"]
[Sat Feb 28 13:51:01.912896 2026] [:error] [pid 11791:tid 11817] [client 4.204.200.32:60310] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaKCRWuX5e1Q32gqxH0yKgAAARg"]
[Sat Feb 28 13:51:02.849690 2026] [:error] [pid 52460:tid 52484] [client 4.204.200.32:60373] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaKCRrLWOogAgHGh62RPwgAAAZU"]
[Sat Feb 28 13:51:03.462230 2026] [:error] [pid 11791:tid 11798] [client 4.204.200.32:64263] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaKCR2uX5e1Q32gqxH0yMQAAAQU"]
[Sat Feb 28 13:51:04.598763 2026] [:error] [pid 39184:tid 39222] [client 4.204.200.32:47962] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaKCSFtZF9Zd_U7easDkVgAAAEM"]
[Sat Feb 28 13:51:05.358433 2026] [:error] [pid 39292:tid 39294] [client 4.204.200.32:48029] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaKCSaIAO5fN7BxyqcHhjQAAAMA"]
[Sat Feb 28 13:51:06.139449 2026] [:error] [pid 39185:tid 39246] [client 4.204.200.32:60343] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "aaKCShVE-FfM89u7BQbupQAAAIA"]
[Sat Feb 28 13:51:06.964983 2026] [:error] [pid 39185:tid 39247] [client 4.204.200.32:60404] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaKCShVE-FfM89u7BQbusQAAAIE"]
[Sat Feb 28 13:51:07.885615 2026] [:error] [pid 39185:tid 39249] [client 4.204.200.32:60334] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaKCSxVE-FfM89u7BQbuxAAAAIM"]
[Sat Feb 28 13:51:08.473035 2026] [:error] [pid 39185:tid 39262] [client 4.204.200.32:48026] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaKCTBVE-FfM89u7BQbuygAAAJA"]
[Sat Feb 28 13:51:09.355356 2026] [:error] [pid 39185:tid 39259] [client 4.204.200.32:64258] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaKCTRVE-FfM89u7BQbu1AAAAI0"]
[Sat Feb 28 13:51:09.972039 2026] [:error] [pid 39183:tid 39198] [client 4.204.200.32:60377] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aaKCTRCf4HvhVePw3LbwoQAAAAY"]
[Sat Feb 28 13:51:10.473916 2026] [:error] [pid 39185:tid 39258] [client 4.204.200.32:60314] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aaKCThVE-FfM89u7BQbu7gAAAIw"]
[Sat Feb 28 13:51:11.289206 2026] [:error] [pid 39185:tid 39257] [client 4.204.200.32:47936] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aaKCTxVE-FfM89u7BQbu-AAAAIs"]
[Sat Feb 28 13:51:12.372662 2026] [:error] [pid 39185:tid 39261] [client 4.204.200.32:47958] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "aaKCUBVE-FfM89u7BQbvEgAAAI8"]
[Sat Feb 28 13:51:13.370062 2026] [:error] [pid 39185:tid 39259] [client 4.204.200.32:60302] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aaKCURVE-FfM89u7BQbvFgAAAI0"]
[Sat Feb 28 13:51:14.333303 2026] [:error] [pid 39185:tid 39268] [client 4.204.200.32:48100] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aaKCUhVE-FfM89u7BQbvNAAAAJY"]
[Sat Feb 28 13:51:16.945673 2026] [:error] [pid 39185:tid 39266] [client 4.204.200.32:48043] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aaKCVBVE-FfM89u7BQbvWgAAAJQ"]
[Sat Feb 28 13:51:17.698931 2026] [:error] [pid 39185:tid 39246] [client 4.204.200.32:64283] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aaKCVRVE-FfM89u7BQbvZAAAAIA"]
[Sat Feb 28 13:51:18.797530 2026] [:error] [pid 22194:tid 22199] [client 4.204.200.32:60392] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aaKCVn6mbajs3bzQGytLkQAAAUM"]
[Sat Feb 28 13:51:19.957879 2026] [:error] [pid 39185:tid 39255] [client 4.204.200.32:48025] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aaKCVxVE-FfM89u7BQbvhAAAAIk"]
[Sat Feb 28 13:51:21.436338 2026] [:error] [pid 52460:tid 52463] [client 4.204.200.32:60316] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aaKCWbLWOogAgHGh62RQTAAAAYA"]
[Sat Feb 28 13:51:22.529587 2026] [:error] [pid 39185:tid 39268] [client 4.204.200.32:47902] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aaKCWhVE-FfM89u7BQbvpQAAAJY"]
[Sat Feb 28 13:51:23.680252 2026] [:error] [pid 39185:tid 39253] [client 4.204.200.32:60289] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaKCWxVE-FfM89u7BQbvyAAAAIc"]
[Sat Feb 28 13:51:25.896179 2026] [:error] [pid 39292:tid 39300] [client 4.204.200.32:60323] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaKCXaIAO5fN7BxyqcHhxgAAAMY"]
[Sat Feb 28 13:51:26.500013 2026] [:error] [pid 22194:tid 22211] [client 4.204.200.32:60304] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaKCXn6mbajs3bzQGytLrwAAAU8"]
[Sat Feb 28 13:51:27.630715 2026] [:error] [pid 39184:tid 39235] [client 4.204.200.32:64318] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaKCX1tZF9Zd_U7easDkxwAAAFA"]
[Sat Feb 28 13:51:28.817691 2026] [:error] [pid 39185:tid 39247] [client 4.204.200.32:48028] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaKCYBVE-FfM89u7BQbwSAAAAIE"]
[Sat Feb 28 13:51:30.316373 2026] [:error] [pid 22194:tid 22212] [client 4.204.200.32:47982] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaKCYn6mbajs3bzQGytLxQAAAVA"]
[Sat Feb 28 13:51:31.035881 2026] [:error] [pid 11791:tid 11809] [client 4.204.200.32:64294] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaKCY2uX5e1Q32gqxH0yvQAAARA"]
[Sat Feb 28 13:51:31.805144 2026] [:error] [pid 39292:tid 39314] [client 4.204.200.32:60367] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaKCY6IAO5fN7BxyqcHh4QAAANQ"]
[Sat Feb 28 13:51:32.573712 2026] [:error] [pid 52460:tid 52476] [client 4.204.200.32:48078] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aaKCZLLWOogAgHGh62RQngAAAY0"]
[Sat Feb 28 13:51:33.523927 2026] [:error] [pid 22194:tid 22201] [client 4.204.200.32:60378] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aaKCZX6mbajs3bzQGytLywAAAUU"]
[Sat Feb 28 13:51:34.329530 2026] [:error] [pid 22194:tid 22207] [client 4.204.200.32:64271] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aaKCZn6mbajs3bzQGytLzQAAAUs"]
[Sat Feb 28 13:51:35.179432 2026] [:error] [pid 11791:tid 11812] [client 4.204.200.32:60288] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aaKCZ2uX5e1Q32gqxH0yzwAAARM"]
[Sat Feb 28 13:51:35.952892 2026] [:error] [pid 22194:tid 22210] [client 4.204.200.32:60293] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaKCZ36mbajs3bzQGytLzwAAAU4"]
[Sat Feb 28 13:51:36.867827 2026] [:error] [pid 22194:tid 22219] [client 4.204.200.32:60298] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaKCaH6mbajs3bzQGytL1wAAAVc"]
[Sat Feb 28 13:51:37.532462 2026] [:error] [pid 52460:tid 52465] [client 4.204.200.32:48037] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaKCabLWOogAgHGh62RQ0AAAAYI"]
[Sat Feb 28 13:51:38.529703 2026] [:error] [pid 52460:tid 52466] [client 4.204.200.32:60405] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaKCarLWOogAgHGh62RQ2AAAAYM"]
[Sat Feb 28 13:51:39.945140 2026] [:error] [pid 39183:tid 39192] [client 4.204.200.32:48066] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaKCaxCf4HvhVePw3Lbw1gAAAAA"]
[Sat Feb 28 13:51:41.273604 2026] [:error] [pid 39185:tid 39262] [client 4.204.200.32:47960] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaKCbRVE-FfM89u7BQbwvQAAAJA"]
[Sat Feb 28 13:51:43.089994 2026] [:error] [pid 39185:tid 39247] [client 4.204.200.32:48041] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaKCbxVE-FfM89u7BQbwyQAAAIE"]
[Sat Feb 28 13:51:44.344824 2026] [:error] [pid 39292:tid 39297] [client 4.204.200.32:64285] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaKCcKIAO5fN7BxyqcHiAwAAAMM"]
[Sat Feb 28 13:51:45.327224 2026] [:error] [pid 39185:tid 39262] [client 4.204.200.32:60406] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz.php"] [unique_id "aaKCcRVE-FfM89u7BQbw0QAAAJA"]
[Sat Feb 28 13:51:46.144047 2026] [:error] [pid 39185:tid 39264] [client 4.204.200.32:48002] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz.php"] [unique_id "aaKCchVE-FfM89u7BQbw1wAAAJI"]
[Sat Feb 28 13:51:47.788861 2026] [:error] [pid 39185:tid 39263] [client 4.204.200.32:60294] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz.php"] [unique_id "aaKCcxVE-FfM89u7BQbw4AAAAJE"]
[Sat Feb 28 13:51:48.797123 2026] [:error] [pid 39185:tid 39262] [client 4.204.200.32:48074] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz.php"] [unique_id "aaKCdBVE-FfM89u7BQbw5gAAAJA"]
[Sat Feb 28 13:51:49.731038 2026] [:error] [pid 39185:tid 39250] [client 4.204.200.32:60352] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaKCdRVE-FfM89u7BQbw8AAAAIQ"]
[Sat Feb 28 13:51:50.675134 2026] [:error] [pid 39292:tid 39318] [client 4.204.200.32:60291] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaKCdqIAO5fN7BxyqcHiCwAAANg"]
[Sat Feb 28 13:51:51.469965 2026] [:error] [pid 39185:tid 39253] [client 4.204.200.32:47995] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaKCdxVE-FfM89u7BQbw-wAAAIc"]
[Sat Feb 28 13:51:52.081441 2026] [:error] [pid 11791:tid 11805] [client 4.204.200.32:64301] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaKCeGuX5e1Q32gqxH0y_gAAAQw"]
[Sat Feb 28 13:51:53.278057 2026] [:error] [pid 52460:tid 52468] [client 4.204.200.32:60385] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sdsa.php"] [unique_id "aaKCebLWOogAgHGh62RRBQAAAYU"]
[Sat Feb 28 13:51:54.076812 2026] [:error] [pid 52460:tid 52470] [client 4.204.200.32:48069] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sdsa.php"] [unique_id "aaKCerLWOogAgHGh62RRCQAAAYc"]
[Sat Feb 28 14:47:54.024339 2026] [autoindex:error] [pid 52460:tid 52477] [client 37.60.228.196:62952] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 28 15:02:28.329170 2026] [:error] [pid 39184:tid 39235] [client 43.135.142.7:51980] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaKTBFtZF9Zd_U7easD0EAAAAFA"]
[Sat Feb 28 15:29:55.231691 2026] [:error] [pid 39185:tid 39256] [client 104.194.155.80:58582] [client 104.194.155.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aaKZcxVE-FfM89u7BQZYwwAAAIo"]
[Sat Feb 28 17:27:35.181980 2026] [:error] [pid 49763:tid 49789] [client 13.71.191.191:13302] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaK1B7THSOG_yf2PpqEXcQAAAdc"]
[Sat Feb 28 17:27:35.665291 2026] [:error] [pid 49763:tid 49782] [client 13.71.191.191:13257] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaK1B7THSOG_yf2PpqEXeQAAAdA"]
[Sat Feb 28 17:27:36.108199 2026] [:error] [pid 49763:tid 49770] [client 13.71.191.191:13188] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaK1CLTHSOG_yf2PpqEXfgAAAcQ"]
[Sat Feb 28 17:27:36.544195 2026] [:error] [pid 49763:tid 49767] [client 13.71.191.191:13273] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaK1CLTHSOG_yf2PpqEXggAAAcE"]
[Sat Feb 28 17:44:40.715333 2026] [:error] [pid 39184:tid 39227] [client 20.220.144.87:18102] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "aaK5CFtZF9Zd_U7easBOiAAAAEg"]
[Sat Feb 28 17:44:41.151758 2026] [:error] [pid 39184:tid 39232] [client 20.220.144.87:17664] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "aaK5CVtZF9Zd_U7easBOiQAAAE0"]
[Sat Feb 28 17:44:41.570101 2026] [:error] [pid 52460:tid 52485] [client 20.220.144.87:17682] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "aaK5CbLWOogAgHGh62S90wAAAZY"]
[Sat Feb 28 17:44:41.987887 2026] [:error] [pid 52460:tid 52470] [client 20.220.144.87:18075] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "aaK5CbLWOogAgHGh62S91gAAAYc"]
[Sat Feb 28 17:44:42.402570 2026] [:error] [pid 52460:tid 52483] [client 20.220.144.87:17675] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaK5CrLWOogAgHGh62S92AAAAZQ"]
[Sat Feb 28 17:44:42.816470 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:17683] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaK5CrLWOogAgHGh62S93AAAAYE"]
[Sat Feb 28 17:44:43.235706 2026] [:error] [pid 39183:tid 39203] [client 20.220.144.87:18058] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaK5CxCf4HvhVePw3LZaTQAAAAs"]
[Sat Feb 28 17:44:43.650984 2026] [:error] [pid 39183:tid 39207] [client 20.220.144.87:17669] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaK5CxCf4HvhVePw3LZaTwAAAA8"]
[Sat Feb 28 17:44:44.062294 2026] [:error] [pid 39183:tid 39209] [client 20.220.144.87:18073] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaK5DBCf4HvhVePw3LZaUgAAABE"]
[Sat Feb 28 17:44:44.472182 2026] [:error] [pid 52460:tid 52486] [client 20.220.144.87:18109] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaK5DLLWOogAgHGh62S96wAAAZc"]
[Sat Feb 28 17:44:44.880996 2026] [:error] [pid 39292:tid 39313] [client 20.220.144.87:18074] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaK5DKIAO5fN7BxyqcExxAAAANM"]
[Sat Feb 28 17:44:45.299131 2026] [:error] [pid 39183:tid 39192] [client 20.220.144.87:17672] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaK5DRCf4HvhVePw3LZaVgAAAAA"]
[Sat Feb 28 17:44:45.719950 2026] [:error] [pid 52460:tid 52471] [client 20.220.144.87:18078] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f.PhP7"] [unique_id "aaK5DbLWOogAgHGh62S99gAAAYg"]
[Sat Feb 28 17:44:46.135606 2026] [:error] [pid 49763:tid 49766] [client 20.220.144.87:18071] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f.PhP7"] [unique_id "aaK5DrTHSOG_yf2PpqEpGgAAAcA"]
[Sat Feb 28 17:44:46.549003 2026] [:error] [pid 52460:tid 52480] [client 20.220.144.87:18101] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f.PhP7"] [unique_id "aaK5DrLWOogAgHGh62S9_wAAAZE"]
[Sat Feb 28 17:44:46.968615 2026] [:error] [pid 11791:tid 11815] [client 20.220.144.87:18107] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f.PhP7"] [unique_id "aaK5DmuX5e1Q32gqxH2IswAAARY"]
[Sat Feb 28 17:44:47.384481 2026] [:error] [pid 39183:tid 39206] [client 20.220.144.87:18091] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaK5DxCf4HvhVePw3LZaZAAAAA4"]
[Sat Feb 28 17:44:47.795548 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:18092] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaK5D7LWOogAgHGh62S-DAAAAYs"]
[Sat Feb 28 17:44:48.214920 2026] [:error] [pid 52460:tid 52477] [client 20.220.144.87:17671] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaK5ELLWOogAgHGh62S-FAAAAY4"]
[Sat Feb 28 17:44:48.628980 2026] [:error] [pid 52460:tid 52470] [client 20.220.144.87:17677] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaK5ELLWOogAgHGh62S-GgAAAYc"]
[Sat Feb 28 17:44:49.045952 2026] [:error] [pid 52460:tid 52475] [client 20.220.144.87:18069] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aaK5EbLWOogAgHGh62S-IQAAAYw"]
[Sat Feb 28 17:44:49.464963 2026] [:error] [pid 52460:tid 52478] [client 20.220.144.87:18076] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aaK5EbLWOogAgHGh62S-KAAAAY8"]
[Sat Feb 28 17:44:49.879271 2026] [:error] [pid 52460:tid 52473] [client 20.220.144.87:18098] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aaK5EbLWOogAgHGh62S-LwAAAYo"]
[Sat Feb 28 17:44:50.292268 2026] [:error] [pid 39183:tid 39193] [client 20.220.144.87:18110] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aaK5EhCf4HvhVePw3LZaaQAAAAE"]
[Sat Feb 28 17:44:50.711470 2026] [:error] [pid 22194:tid 22206] [client 20.220.144.87:18048] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aaK5En6mbajs3bzQGyt9EgAAAUo"]
[Sat Feb 28 17:44:51.126924 2026] [:error] [pid 39185:tid 39255] [client 20.220.144.87:18086] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aaK5ExVE-FfM89u7BQZ0AgAAAIk"]
[Sat Feb 28 17:44:51.538590 2026] [:error] [pid 49763:tid 49776] [client 20.220.144.87:17710] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aaK5E7THSOG_yf2PpqEpMAAAAco"]
[Sat Feb 28 17:44:51.958673 2026] [:error] [pid 52460:tid 52473] [client 20.220.144.87:18079] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aaK5E7LWOogAgHGh62S-QgAAAYo"]
[Sat Feb 28 17:44:52.387693 2026] [:error] [pid 39183:tid 39198] [client 20.220.144.87:17681] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aaK5FBCf4HvhVePw3LZabQAAAAY"]
[Sat Feb 28 17:44:52.800439 2026] [:error] [pid 39184:tid 39232] [client 20.220.144.87:18090] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aaK5FFtZF9Zd_U7easBOnQAAAE0"]
[Sat Feb 28 17:44:53.211716 2026] [:error] [pid 52460:tid 52475] [client 20.220.144.87:17680] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aaK5FbLWOogAgHGh62S-TwAAAYw"]
[Sat Feb 28 17:44:53.631661 2026] [:error] [pid 52460:tid 52484] [client 20.220.144.87:18084] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aaK5FbLWOogAgHGh62S-WQAAAZU"]
[Sat Feb 28 17:44:54.046178 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:18065] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaK5FrLWOogAgHGh62S-ZAAAAYE"]
[Sat Feb 28 17:44:54.463738 2026] [:error] [pid 52460:tid 52484] [client 20.220.144.87:18059] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaK5FrLWOogAgHGh62S-awAAAZU"]
[Sat Feb 28 17:44:54.880453 2026] [:error] [pid 52460:tid 52475] [client 20.220.144.87:18066] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaK5FrLWOogAgHGh62S-cQAAAYw"]
[Sat Feb 28 17:44:55.296599 2026] [:error] [pid 39184:tid 39235] [client 20.220.144.87:18052] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "aaK5F1tZF9Zd_U7easBOpQAAAFA"]
[Sat Feb 28 17:44:55.708968 2026] [:error] [pid 39183:tid 39199] [client 20.220.144.87:18370] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/advanc.php"] [unique_id "aaK5FxCf4HvhVePw3LZacAAAAAc"]
[Sat Feb 28 17:44:56.122540 2026] [:error] [pid 52460:tid 52466] [client 20.220.144.87:17713] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/advanc.php"] [unique_id "aaK5GLLWOogAgHGh62S-ggAAAYM"]
[Sat Feb 28 17:44:56.536030 2026] [:error] [pid 39292:tid 39317] [client 20.220.144.87:18087] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/advanc.php"] [unique_id "aaK5GKIAO5fN7BxyqcEx1AAAANc"]
[Sat Feb 28 17:44:56.951037 2026] [:error] [pid 49763:tid 49769] [client 20.220.144.87:18072] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/advanc.php"] [unique_id "aaK5GLTHSOG_yf2PpqEpSwAAAcM"]
[Sat Feb 28 17:44:57.369797 2026] [:error] [pid 39184:tid 39229] [client 20.220.144.87:18097] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK5GVtZF9Zd_U7easBOqAAAAEo"]
[Sat Feb 28 17:44:57.790140 2026] [:error] [pid 39183:tid 39211] [client 20.220.144.87:17724] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK5GRCf4HvhVePw3LZadQAAABM"]
[Sat Feb 28 17:44:58.211774 2026] [:error] [pid 39184:tid 39241] [client 20.220.144.87:18095] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK5GltZF9Zd_U7easBOqQAAAFY"]
[Sat Feb 28 17:44:58.631486 2026] [:error] [pid 39183:tid 39197] [client 20.220.144.87:18082] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK5GhCf4HvhVePw3LZaegAAAAU"]
[Sat Feb 28 17:44:59.048122 2026] [:error] [pid 39183:tid 39192] [client 20.220.144.87:17700] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftyude.php"] [unique_id "aaK5GxCf4HvhVePw3LZaewAAAAA"]
[Sat Feb 28 17:44:59.464525 2026] [:error] [pid 39183:tid 39202] [client 20.220.144.87:17686] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftyude.php"] [unique_id "aaK5GxCf4HvhVePw3LZagAAAAAo"]
[Sat Feb 28 17:44:59.888751 2026] [:error] [pid 11791:tid 11795] [client 20.220.144.87:17674] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftyude.php"] [unique_id "aaK5G2uX5e1Q32gqxH2ItwAAAQI"]
[Sat Feb 28 17:45:00.311180 2026] [:error] [pid 39183:tid 39205] [client 20.220.144.87:18430] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftyude.php"] [unique_id "aaK5HBCf4HvhVePw3LZaiQAAAA0"]
[Sat Feb 28 17:45:00.734657 2026] [:error] [pid 39184:tid 39232] [client 20.220.144.87:17704] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aaK5HFtZF9Zd_U7easBOrgAAAE0"]
[Sat Feb 28 17:45:01.156313 2026] [:error] [pid 39183:tid 39216] [client 20.220.144.87:18088] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aaK5HRCf4HvhVePw3LZaigAAABg"]
[Sat Feb 28 17:45:01.578027 2026] [:error] [pid 39183:tid 39201] [client 20.220.144.87:17685] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aaK5HRCf4HvhVePw3LZajQAAAAk"]
[Sat Feb 28 17:45:01.987288 2026] [:error] [pid 39185:tid 39253] [client 20.220.144.87:18100] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aaK5HRVE-FfM89u7BQZ0BwAAAIc"]
[Sat Feb 28 17:45:02.409036 2026] [:error] [pid 39184:tid 39223] [client 20.220.144.87:17703] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aaK5HltZF9Zd_U7easBOswAAAEQ"]
[Sat Feb 28 17:45:02.826372 2026] [:error] [pid 11791:tid 11806] [client 20.220.144.87:17694] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aaK5HmuX5e1Q32gqxH2IwgAAAQ0"]
[Sat Feb 28 17:45:03.245508 2026] [:error] [pid 49763:tid 49790] [client 20.220.144.87:17712] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aaK5H7THSOG_yf2PpqEpWwAAAdg"]
[Sat Feb 28 17:45:03.654340 2026] [:error] [pid 49763:tid 49789] [client 20.220.144.87:18106] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "aaK5H7THSOG_yf2PpqEpXwAAAdc"]
[Sat Feb 28 17:45:04.067102 2026] [:error] [pid 52460:tid 52472] [client 20.220.144.87:17697] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "aaK5ILLWOogAgHGh62S-sgAAAYk"]
[Sat Feb 28 17:45:04.483658 2026] [:error] [pid 52460:tid 52471] [client 20.220.144.87:18061] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "aaK5ILLWOogAgHGh62S-uAAAAYg"]
[Sat Feb 28 17:45:04.903808 2026] [:error] [pid 52460:tid 52466] [client 20.220.144.87:18381] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "aaK5ILLWOogAgHGh62S-vQAAAYM"]
[Sat Feb 28 17:45:05.320044 2026] [:error] [pid 52460:tid 52472] [client 20.220.144.87:18094] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "aaK5IbLWOogAgHGh62S-xwAAAYk"]
[Sat Feb 28 17:45:05.735600 2026] [:error] [pid 52460:tid 52467] [client 20.220.144.87:18376] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aaK5IbLWOogAgHGh62S-zgAAAYQ"]
[Sat Feb 28 17:45:06.146462 2026] [:error] [pid 39292:tid 39300] [client 20.220.144.87:18111] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aaK5IqIAO5fN7BxyqcEx3QAAAMY"]
[Sat Feb 28 17:45:06.562218 2026] [:error] [pid 11791:tid 11814] [client 20.220.144.87:18373] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aaK5ImuX5e1Q32gqxH2IzQAAARU"]
[Sat Feb 28 17:45:06.994532 2026] [:error] [pid 49763:tid 49775] [client 20.220.144.87:17715] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aaK5IrTHSOG_yf2PpqEpZQAAAck"]
[Sat Feb 28 17:45:07.411097 2026] [:error] [pid 11791:tid 11798] [client 20.220.144.87:18377] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x.php"] [unique_id "aaK5I2uX5e1Q32gqxH2I0AAAAQU"]
[Sat Feb 28 17:45:07.824486 2026] [:error] [pid 49763:tid 49770] [client 20.220.144.87:18372] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x.php"] [unique_id "aaK5I7THSOG_yf2PpqEpbwAAAcQ"]
[Sat Feb 28 17:45:08.234533 2026] [:error] [pid 52460:tid 52467] [client 20.220.144.87:17679] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x.php"] [unique_id "aaK5JLLWOogAgHGh62S-4QAAAYQ"]
[Sat Feb 28 17:45:08.646076 2026] [:error] [pid 49763:tid 49785] [client 20.220.144.87:17696] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x.php"] [unique_id "aaK5JLTHSOG_yf2PpqEpdgAAAdM"]
[Sat Feb 28 17:45:09.062680 2026] [:error] [pid 52460:tid 52468] [client 20.220.144.87:18081] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaK5JbLWOogAgHGh62S-6AAAAYU"]
[Sat Feb 28 17:45:09.481416 2026] [:error] [pid 39292:tid 39308] [client 20.220.144.87:18379] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaK5JaIAO5fN7BxyqcEx4gAAAM4"]
[Sat Feb 28 17:45:09.903126 2026] [:error] [pid 39184:tid 39236] [client 20.220.144.87:18421] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaK5JVtZF9Zd_U7easBOuQAAAFE"]
[Sat Feb 28 17:45:10.320824 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:17676] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaK5JhCf4HvhVePw3LZaowAAAAQ"]
[Sat Feb 28 17:45:10.732743 2026] [:error] [pid 39184:tid 39226] [client 20.220.144.87:17698] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aaK5JltZF9Zd_U7easBOvAAAAEc"]
[Sat Feb 28 17:45:11.150066 2026] [:error] [pid 39185:tid 39256] [client 20.220.144.87:18063] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aaK5JxVE-FfM89u7BQZ0DgAAAIo"]
[Sat Feb 28 17:45:11.561581 2026] [:error] [pid 39183:tid 39216] [client 20.220.144.87:18368] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aaK5JxCf4HvhVePw3LZaqgAAABg"]
[Sat Feb 28 17:45:11.971107 2026] [:error] [pid 11791:tid 11811] [client 20.220.144.87:18392] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "aaK5J2uX5e1Q32gqxH2I2gAAARI"]
[Sat Feb 28 17:45:12.381260 2026] [:error] [pid 39184:tid 39222] [client 20.220.144.87:17708] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zr.php"] [unique_id "aaK5KFtZF9Zd_U7easBOxAAAAEM"]
[Sat Feb 28 17:45:12.789620 2026] [:error] [pid 11791:tid 11813] [client 20.220.144.87:18383] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zr.php"] [unique_id "aaK5KGuX5e1Q32gqxH2I3QAAARQ"]
[Sat Feb 28 17:45:13.199038 2026] [:error] [pid 22194:tid 22208] [client 20.220.144.87:18051] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zr.php"] [unique_id "aaK5KX6mbajs3bzQGyt9JQAAAUw"]
[Sat Feb 28 17:45:13.612354 2026] [:error] [pid 39184:tid 39225] [client 20.220.144.87:17691] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zr.php"] [unique_id "aaK5KVtZF9Zd_U7easBOywAAAEY"]
[Sat Feb 28 17:45:14.038024 2026] [:error] [pid 39183:tid 39199] [client 20.220.144.87:18105] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaK5KhCf4HvhVePw3LZauQAAAAc"]
[Sat Feb 28 17:45:14.459072 2026] [:error] [pid 39183:tid 39200] [client 20.220.144.87:17665] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaK5KhCf4HvhVePw3LZavAAAAAg"]
[Sat Feb 28 17:45:14.875691 2026] [:error] [pid 11791:tid 11793] [client 20.220.144.87:18056] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaK5KmuX5e1Q32gqxH2I4wAAAQA"]
[Sat Feb 28 17:45:15.287118 2026] [:error] [pid 11791:tid 11798] [client 20.220.144.87:18406] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaK5K2uX5e1Q32gqxH2I5QAAAQU"]
[Sat Feb 28 17:45:15.708194 2026] [:error] [pid 39184:tid 39227] [client 20.220.144.87:18391] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aaK5K1tZF9Zd_U7easBO1AAAAEg"]
[Sat Feb 28 17:45:16.123452 2026] [:error] [pid 39184:tid 39230] [client 20.220.144.87:17719] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aaK5LFtZF9Zd_U7easBO2AAAAEs"]
[Sat Feb 28 17:45:16.540889 2026] [:error] [pid 49763:tid 49772] [client 20.220.144.87:18321] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aaK5LLTHSOG_yf2PpqEpigAAAcY"]
[Sat Feb 28 17:45:16.956060 2026] [:error] [pid 49763:tid 49783] [client 20.220.144.87:18050] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aaK5LLTHSOG_yf2PpqEpjgAAAdE"]
[Sat Feb 28 17:45:17.375605 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:18415] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aaK5LRCf4HvhVePw3LZa0gAAAAQ"]
[Sat Feb 28 17:45:17.799079 2026] [:error] [pid 22194:tid 22201] [client 20.220.144.87:18397] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aaK5LX6mbajs3bzQGyt9LgAAAUU"]
[Sat Feb 28 17:45:18.218219 2026] [:error] [pid 52460:tid 52483] [client 20.220.144.87:17668] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aaK5LrLWOogAgHGh62S-7wAAAZQ"]
[Sat Feb 28 17:45:18.635786 2026] [:error] [pid 52460:tid 52480] [client 20.220.144.87:17684] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "aaK5LrLWOogAgHGh62S-9AAAAZE"]
[Sat Feb 28 17:45:19.052735 2026] [:error] [pid 49763:tid 49766] [client 20.220.144.87:17699] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leu.php"] [unique_id "aaK5L7THSOG_yf2PpqEplgAAAcA"]
[Sat Feb 28 17:45:19.467430 2026] [:error] [pid 49763:tid 49789] [client 20.220.144.87:18060] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leu.php"] [unique_id "aaK5L7THSOG_yf2PpqEpmgAAAdc"]
[Sat Feb 28 17:45:19.888800 2026] [:error] [pid 39184:tid 39229] [client 20.220.144.87:18103] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leu.php"] [unique_id "aaK5L1tZF9Zd_U7easBO4wAAAEo"]
[Sat Feb 28 17:45:20.324294 2026] [:error] [pid 49763:tid 49773] [client 20.220.144.87:17666] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leu.php"] [unique_id "aaK5MLTHSOG_yf2PpqEpngAAAcc"]
[Sat Feb 28 17:45:20.740669 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:18319] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aaK5MBCf4HvhVePw3LZa5wAAAAQ"]
[Sat Feb 28 17:45:21.151630 2026] [:error] [pid 39183:tid 39205] [client 20.220.144.87:18423] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aaK5MRCf4HvhVePw3LZa7gAAAA0"]
[Sat Feb 28 17:45:21.561822 2026] [:error] [pid 39183:tid 39215] [client 20.220.144.87:18371] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aaK5MRCf4HvhVePw3LZa8wAAABc"]
[Sat Feb 28 17:45:21.984138 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:18387] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aaK5MRCf4HvhVePw3LZa-QAAAAQ"]
[Sat Feb 28 17:45:22.399512 2026] [:error] [pid 49763:tid 49786] [client 20.220.144.87:17709] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaK5MrTHSOG_yf2PpqEppgAAAdQ"]
[Sat Feb 28 17:45:22.820157 2026] [:error] [pid 39185:tid 39270] [client 20.220.144.87:17701] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaK5MhVE-FfM89u7BQZ0HwAAAJg"]
[Sat Feb 28 17:45:23.237220 2026] [:error] [pid 39292:tid 39312] [client 20.220.144.87:18389] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaK5M6IAO5fN7BxyqcEx8AAAANI"]
[Sat Feb 28 17:45:23.652543 2026] [:error] [pid 39185:tid 39256] [client 20.220.144.87:17702] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaK5MxVE-FfM89u7BQZ0IQAAAIo"]
[Sat Feb 28 17:45:24.065522 2026] [:error] [pid 39185:tid 39268] [client 20.220.144.87:18080] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mon.php"] [unique_id "aaK5NBVE-FfM89u7BQZ0JAAAAJY"]
[Sat Feb 28 17:45:24.480915 2026] [:error] [pid 49763:tid 49769] [client 20.220.144.87:18068] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mon.php"] [unique_id "aaK5NLTHSOG_yf2PpqEprQAAAcM"]
[Sat Feb 28 17:45:24.896898 2026] [:error] [pid 49763:tid 49787] [client 20.220.144.87:18417] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mon.php"] [unique_id "aaK5NLTHSOG_yf2PpqEprwAAAdU"]
[Sat Feb 28 17:45:25.314813 2026] [:error] [pid 49763:tid 49779] [client 20.220.144.87:18318] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mon.php"] [unique_id "aaK5NbTHSOG_yf2PpqEpsAAAAc0"]
[Sat Feb 28 17:45:25.726633 2026] [:error] [pid 49763:tid 49768] [client 20.220.144.87:18064] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aaK5NbTHSOG_yf2PpqEpsQAAAcI"]
[Sat Feb 28 17:45:26.141460 2026] [:error] [pid 39292:tid 39310] [client 20.220.144.87:18108] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aaK5NqIAO5fN7BxyqcEx9AAAANA"]
[Sat Feb 28 17:45:26.557587 2026] [:error] [pid 49763:tid 49785] [client 20.220.144.87:18382] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aaK5NrTHSOG_yf2PpqEptAAAAdM"]
[Sat Feb 28 17:45:26.973482 2026] [:error] [pid 39183:tid 39205] [client 20.220.144.87:17667] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "aaK5NhCf4HvhVePw3LZbFQAAAA0"]
[Sat Feb 28 17:45:27.389147 2026] [:error] [pid 52460:tid 52481] [client 20.220.144.87:18394] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aaK5N7LWOogAgHGh62S_BwAAAZI"]
[Sat Feb 28 17:45:27.807481 2026] [:error] [pid 52460:tid 52485] [client 20.220.144.87:18341] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aaK5N7LWOogAgHGh62S_CgAAAZY"]
[Sat Feb 28 17:45:28.236607 2026] [:error] [pid 52460:tid 52466] [client 20.220.144.87:17693] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aaK5OLLWOogAgHGh62S_DQAAAYM"]
[Sat Feb 28 17:45:28.653560 2026] [:error] [pid 49763:tid 49782] [client 20.220.144.87:18312] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aaK5OLTHSOG_yf2PpqEpuAAAAdA"]
[Sat Feb 28 17:45:29.072896 2026] [:error] [pid 39292:tid 39294] [client 20.220.144.87:18414] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaK5OaIAO5fN7BxyqcEx-QAAAMA"]
[Sat Feb 28 17:45:29.490979 2026] [:error] [pid 39292:tid 39316] [client 20.220.144.87:18409] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaK5OaIAO5fN7BxyqcEx-gAAANY"]
[Sat Feb 28 17:45:29.904718 2026] [:error] [pid 52460:tid 52485] [client 20.220.144.87:18408] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaK5ObLWOogAgHGh62S_GAAAAZY"]
[Sat Feb 28 17:45:30.318605 2026] [:error] [pid 52460:tid 52472] [client 20.220.144.87:18409] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaK5OrLWOogAgHGh62S_GwAAAYk"]
[Sat Feb 28 17:45:30.733555 2026] [:error] [pid 39183:tid 39203] [client 20.220.144.87:17689] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/41.php"] [unique_id "aaK5OhCf4HvhVePw3LZbLAAAAAs"]
[Sat Feb 28 17:45:31.149618 2026] [:error] [pid 39183:tid 39199] [client 20.220.144.87:17720] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/41.php"] [unique_id "aaK5OxCf4HvhVePw3LZbMAAAAAc"]
[Sat Feb 28 17:45:31.574226 2026] [:error] [pid 39183:tid 39195] [client 20.220.144.87:17673] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/41.php"] [unique_id "aaK5OxCf4HvhVePw3LZbNQAAAAM"]
[Sat Feb 28 17:45:31.989312 2026] [:error] [pid 39185:tid 39262] [client 20.220.144.87:18085] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/41.php"] [unique_id "aaK5OxVE-FfM89u7BQZ0KgAAAJA"]
[Sat Feb 28 17:45:32.406000 2026] [:error] [pid 39185:tid 39259] [client 20.220.144.87:18384] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaK5PBVE-FfM89u7BQZ0KwAAAI0"]
[Sat Feb 28 17:45:32.821778 2026] [:error] [pid 49763:tid 49769] [client 20.220.144.87:18322] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaK5PLTHSOG_yf2PpqEpwAAAAcM"]
[Sat Feb 28 17:45:33.239262 2026] [:error] [pid 39292:tid 39298] [client 20.220.144.87:18405] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaK5PaIAO5fN7BxyqcEx-wAAAMQ"]
[Sat Feb 28 17:45:33.653582 2026] [:error] [pid 39292:tid 39296] [client 20.220.144.87:18096] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaK5PaIAO5fN7BxyqcEx_AAAAMI"]
[Sat Feb 28 17:45:34.064111 2026] [:error] [pid 39184:tid 39242] [client 20.220.144.87:18393] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "aaK5PltZF9Zd_U7easBO6wAAAFc"]
[Sat Feb 28 17:45:34.477467 2026] [:error] [pid 49763:tid 49783] [client 20.220.144.87:18070] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "aaK5PrTHSOG_yf2PpqEpyAAAAdE"]
[Sat Feb 28 17:45:34.887830 2026] [:error] [pid 39184:tid 39219] [client 20.220.144.87:18396] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "aaK5PltZF9Zd_U7easBO8QAAAEA"]
[Sat Feb 28 17:45:35.305329 2026] [:error] [pid 22194:tid 22217] [client 20.220.144.87:18057] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "aaK5P36mbajs3bzQGyt9NQAAAVU"]
[Sat Feb 28 17:45:35.721694 2026] [:error] [pid 52460:tid 52482] [client 20.220.144.87:17721] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w3llstore.php"] [unique_id "aaK5P7LWOogAgHGh62S_KQAAAZM"]
[Sat Feb 28 17:45:36.135262 2026] [:error] [pid 49763:tid 49788] [client 20.220.144.87:18402] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w3llstore.php"] [unique_id "aaK5QLTHSOG_yf2PpqEpywAAAdY"]
[Sat Feb 28 17:45:36.550870 2026] [:error] [pid 49763:tid 49778] [client 20.220.144.87:18308] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w3llstore.php"] [unique_id "aaK5QLTHSOG_yf2PpqEpzwAAAcw"]
[Sat Feb 28 17:45:36.972780 2026] [:error] [pid 39184:tid 39220] [client 20.220.144.87:18400] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w3llstore.php"] [unique_id "aaK5QFtZF9Zd_U7easBO-QAAAEE"]
[Sat Feb 28 17:45:37.394077 2026] [:error] [pid 39183:tid 39206] [client 20.220.144.87:18424] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaK5QRCf4HvhVePw3LZbUAAAAA4"]
[Sat Feb 28 17:45:37.809090 2026] [:error] [pid 52460:tid 52470] [client 20.220.144.87:18309] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaK5QbLWOogAgHGh62S_MgAAAYc"]
[Sat Feb 28 17:45:38.227525 2026] [:error] [pid 52460:tid 52471] [client 20.220.144.87:18390] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaK5QrLWOogAgHGh62S_NAAAAYg"]
[Sat Feb 28 17:45:38.643887 2026] [:error] [pid 49763:tid 49775] [client 20.220.144.87:18240] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaK5QrTHSOG_yf2PpqEp3QAAAck"]
[Sat Feb 28 17:45:44.481337 2026] [:error] [pid 49763:tid 49767] [client 20.220.144.87:17678] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaK5SLTHSOG_yf2PpqEqDAAAAcE"]
[Sat Feb 28 17:45:44.897981 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:17727] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaK5SLLWOogAgHGh62S_bwAAAYE"]
[Sat Feb 28 17:45:45.308158 2026] [:error] [pid 52460:tid 52469] [client 20.220.144.87:18398] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaK5SbLWOogAgHGh62S_dAAAAYY"]
[Sat Feb 28 17:45:45.718289 2026] [:error] [pid 52460:tid 52476] [client 20.220.144.87:17722] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaK5SbLWOogAgHGh62S_eAAAAY0"]
[Sat Feb 28 17:45:46.128040 2026] [:error] [pid 52460:tid 52471] [client 20.220.144.87:18307] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/opotv.php"] [unique_id "aaK5SrLWOogAgHGh62S_fQAAAYg"]
[Sat Feb 28 17:45:46.540816 2026] [:error] [pid 52460:tid 52468] [client 20.220.144.87:17726] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/opotv.php"] [unique_id "aaK5SrLWOogAgHGh62S_gAAAAYU"]
[Sat Feb 28 17:45:46.960926 2026] [:error] [pid 52460:tid 52478] [client 20.220.144.87:18331] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/opotv.php"] [unique_id "aaK5SrLWOogAgHGh62S_ggAAAY8"]
[Sat Feb 28 17:45:47.383777 2026] [:error] [pid 49763:tid 49783] [client 20.220.144.87:18180] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/opotv.php"] [unique_id "aaK5S7THSOG_yf2PpqEqIAAAAdE"]
[Sat Feb 28 17:45:47.810940 2026] [:error] [pid 49763:tid 49772] [client 20.220.144.87:18332] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pu9.php"] [unique_id "aaK5S7THSOG_yf2PpqEqKAAAAcY"]
[Sat Feb 28 17:45:48.221854 2026] [:error] [pid 49763:tid 49771] [client 20.220.144.87:18380] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pu9.php"] [unique_id "aaK5TLTHSOG_yf2PpqEqLwAAAcU"]
[Sat Feb 28 17:45:48.638635 2026] [:error] [pid 49763:tid 49778] [client 20.220.144.87:18077] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pu9.php"] [unique_id "aaK5TLTHSOG_yf2PpqEqNAAAAcw"]
[Sat Feb 28 17:45:49.058477 2026] [:error] [pid 49763:tid 49788] [client 20.220.144.87:18403] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pu9.php"] [unique_id "aaK5TbTHSOG_yf2PpqEqPQAAAdY"]
[Sat Feb 28 17:45:49.486838 2026] [:error] [pid 49763:tid 49777] [client 20.220.144.87:18399] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qoepq.php"] [unique_id "aaK5TbTHSOG_yf2PpqEqRAAAAcs"]
[Sat Feb 28 17:45:49.905500 2026] [:error] [pid 52460:tid 52469] [client 20.220.144.87:18378] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qoepq.php"] [unique_id "aaK5TbLWOogAgHGh62S_jgAAAYY"]
[Sat Feb 28 17:45:50.319410 2026] [:error] [pid 52460:tid 52475] [client 20.220.144.87:18429] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qoepq.php"] [unique_id "aaK5TrLWOogAgHGh62S_kgAAAYw"]
[Sat Feb 28 17:45:50.730694 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:18049] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qoepq.php"] [unique_id "aaK5TrLWOogAgHGh62S_lgAAAYs"]
[Sat Feb 28 17:45:51.143854 2026] [:error] [pid 49763:tid 49790] [client 20.220.144.87:18351] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fodds.php"] [unique_id "aaK5T7THSOG_yf2PpqEqTwAAAdg"]
[Sat Feb 28 17:45:51.559291 2026] [:error] [pid 39183:tid 39193] [client 20.220.144.87:18325] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fodds.php"] [unique_id "aaK5TxCf4HvhVePw3LZbZgAAAAE"]
[Sat Feb 28 17:45:51.976885 2026] [:error] [pid 39183:tid 39214] [client 20.220.144.87:18053] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fodds.php"] [unique_id "aaK5TxCf4HvhVePw3LZbaAAAABY"]
[Sat Feb 28 17:45:52.391911 2026] [:error] [pid 49763:tid 49785] [client 20.220.144.87:17717] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fodds.php"] [unique_id "aaK5ULTHSOG_yf2PpqEqVwAAAdM"]
[Sat Feb 28 17:45:52.806048 2026] [:error] [pid 52460:tid 52478] [client 20.220.144.87:17716] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaigu.php"] [unique_id "aaK5ULLWOogAgHGh62S_ngAAAY8"]
[Sat Feb 28 17:45:53.220313 2026] [:error] [pid 11791:tid 11810] [client 20.220.144.87:18333] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaigu.php"] [unique_id "aaK5UWuX5e1Q32gqxH2JGQAAARE"]
[Sat Feb 28 17:45:53.638224 2026] [:error] [pid 49763:tid 49780] [client 20.220.144.87:17705] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaigu.php"] [unique_id "aaK5UbTHSOG_yf2PpqEqXwAAAc4"]
[Sat Feb 28 17:45:54.047501 2026] [:error] [pid 39184:tid 39227] [client 20.220.144.87:18340] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaigu.php"] [unique_id "aaK5UltZF9Zd_U7easBPCgAAAEg"]
[Sat Feb 28 17:45:54.461896 2026] [:error] [pid 39184:tid 39233] [client 20.220.144.87:18320] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad2.php"] [unique_id "aaK5UltZF9Zd_U7easBPDQAAAE4"]
[Sat Feb 28 17:45:54.876285 2026] [:error] [pid 49763:tid 49789] [client 20.220.144.87:18338] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad2.php"] [unique_id "aaK5UrTHSOG_yf2PpqEqbAAAAdc"]
[Sat Feb 28 17:45:55.293689 2026] [:error] [pid 49763:tid 49788] [client 20.220.144.87:18404] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad2.php"] [unique_id "aaK5U7THSOG_yf2PpqEqcgAAAdY"]
[Sat Feb 28 17:45:55.714664 2026] [:error] [pid 49763:tid 49781] [client 20.220.144.87:18431] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad2.php"] [unique_id "aaK5U7THSOG_yf2PpqEqeQAAAc8"]
[Sat Feb 28 17:45:56.127404 2026] [:error] [pid 39184:tid 39224] [client 20.220.144.87:17695] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8rd1.php"] [unique_id "aaK5VFtZF9Zd_U7easBPEQAAAEU"]
[Sat Feb 28 17:45:56.540963 2026] [:error] [pid 49763:tid 49766] [client 20.220.144.87:18345] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8rd1.php"] [unique_id "aaK5VLTHSOG_yf2PpqEqiAAAAcA"]
[Sat Feb 28 17:45:56.957217 2026] [:error] [pid 52460:tid 52470] [client 20.220.144.87:18255] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8rd1.php"] [unique_id "aaK5VLLWOogAgHGh62S_pwAAAYc"]
[Sat Feb 28 17:45:57.373977 2026] [:error] [pid 52460:tid 52463] [client 20.220.144.87:17688] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8rd1.php"] [unique_id "aaK5VbLWOogAgHGh62S_rAAAAYA"]
[Sat Feb 28 17:45:57.810626 2026] [:error] [pid 39183:tid 39197] [client 20.220.144.87:18385] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaK5VRCf4HvhVePw3LZbdgAAAAU"]
[Sat Feb 28 17:45:58.224576 2026] [:error] [pid 39183:tid 39211] [client 20.220.144.87:18407] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaK5VhCf4HvhVePw3LZbeQAAABM"]
[Sat Feb 28 17:45:58.636550 2026] [:error] [pid 39292:tid 39312] [client 20.220.144.87:17718] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaK5VqIAO5fN7BxyqcEyEwAAANI"]
[Sat Feb 28 17:45:59.051852 2026] [:error] [pid 52460:tid 52477] [client 20.220.144.87:17690] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaK5V7LWOogAgHGh62S_twAAAY4"]
[Sat Feb 28 17:45:59.469026 2026] [:error] [pid 11791:tid 11798] [client 20.220.144.87:18364] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asix.php"] [unique_id "aaK5V2uX5e1Q32gqxH2JIAAAAQU"]
[Sat Feb 28 17:45:59.881062 2026] [:error] [pid 39185:tid 39258] [client 20.220.144.87:18411] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asix.php"] [unique_id "aaK5VxVE-FfM89u7BQZ0OQAAAIw"]
[Sat Feb 28 17:46:00.295604 2026] [:error] [pid 39292:tid 39297] [client 20.220.144.87:18349] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asix.php"] [unique_id "aaK5WKIAO5fN7BxyqcEyFgAAAMM"]
[Sat Feb 28 17:46:00.705718 2026] [:error] [pid 39185:tid 39267] [client 20.220.144.87:18428] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asix.php"] [unique_id "aaK5WBVE-FfM89u7BQZ0OwAAAJU"]
[Sat Feb 28 17:46:01.119639 2026] [:error] [pid 39292:tid 39299] [client 20.220.144.87:18386] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gems.php"] [unique_id "aaK5WaIAO5fN7BxyqcEyFwAAAMU"]
[Sat Feb 28 17:46:01.537400 2026] [:error] [pid 49763:tid 49785] [client 20.220.144.87:17707] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gems.php"] [unique_id "aaK5WbTHSOG_yf2PpqEqtwAAAdM"]
[Sat Feb 28 17:46:01.952284 2026] [:error] [pid 49763:tid 49786] [client 20.220.144.87:18413] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gems.php"] [unique_id "aaK5WbTHSOG_yf2PpqEqvAAAAdQ"]
[Sat Feb 28 17:46:02.364748 2026] [:error] [pid 49763:tid 49775] [client 20.220.144.87:18313] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gems.php"] [unique_id "aaK5WrTHSOG_yf2PpqEqwAAAAck"]
[Sat Feb 28 17:46:02.776444 2026] [:error] [pid 49763:tid 49768] [client 20.220.144.87:18344] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxd.php"] [unique_id "aaK5WrTHSOG_yf2PpqEqxQAAAcI"]
[Sat Feb 28 17:46:03.192400 2026] [:error] [pid 49763:tid 49788] [client 20.220.144.87:18412] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxd.php"] [unique_id "aaK5W7THSOG_yf2PpqEqywAAAdY"]
[Sat Feb 28 17:46:03.609876 2026] [:error] [pid 39184:tid 39235] [client 20.220.144.87:18104] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxd.php"] [unique_id "aaK5W1tZF9Zd_U7easBPFAAAAFA"]
[Sat Feb 28 17:46:04.027413 2026] [:error] [pid 39184:tid 39240] [client 20.220.144.87:18420] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxd.php"] [unique_id "aaK5XFtZF9Zd_U7easBPFwAAAFU"]
[Sat Feb 28 17:46:04.445075 2026] [:error] [pid 39184:tid 39226] [client 20.220.144.87:17714] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2sx.php"] [unique_id "aaK5XFtZF9Zd_U7easBPGQAAAEc"]
[Sat Feb 28 17:46:04.859288 2026] [:error] [pid 39183:tid 39205] [client 20.220.144.87:18253] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2sx.php"] [unique_id "aaK5XBCf4HvhVePw3LZbgwAAAA0"]
[Sat Feb 28 17:46:05.270586 2026] [:error] [pid 52460:tid 52466] [client 20.220.144.87:18327] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2sx.php"] [unique_id "aaK5XbLWOogAgHGh62S_ywAAAYM"]
[Sat Feb 28 17:46:05.688310 2026] [:error] [pid 52460:tid 52481] [client 20.220.144.87:18271] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2sx.php"] [unique_id "aaK5XbLWOogAgHGh62S_zgAAAZI"]
[Sat Feb 28 17:46:06.118676 2026] [:error] [pid 39183:tid 39199] [client 20.220.144.87:18323] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaq.php"] [unique_id "aaK5XhCf4HvhVePw3LZbiQAAAAc"]
[Sat Feb 28 17:46:06.543182 2026] [:error] [pid 39183:tid 39202] [client 20.220.144.87:17711] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaq.php"] [unique_id "aaK5XhCf4HvhVePw3LZbjgAAAAo"]
[Sat Feb 28 17:46:06.958626 2026] [:error] [pid 39183:tid 39214] [client 20.220.144.87:18355] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaq.php"] [unique_id "aaK5XhCf4HvhVePw3LZbkQAAABY"]
[Sat Feb 28 17:46:07.385325 2026] [:error] [pid 39183:tid 39204] [client 20.220.144.87:18244] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaq.php"] [unique_id "aaK5XxCf4HvhVePw3LZblQAAAAw"]
[Sat Feb 28 17:46:07.801242 2026] [:error] [pid 39183:tid 39193] [client 20.220.144.87:18353] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aaK5XxCf4HvhVePw3LZbnAAAAAE"]
[Sat Feb 28 17:46:08.221638 2026] [:error] [pid 52460:tid 52486] [client 20.220.144.87:18264] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aaK5YLLWOogAgHGh62S_1gAAAZc"]
[Sat Feb 28 17:46:08.636751 2026] [:error] [pid 52460:tid 52472] [client 20.220.144.87:17692] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aaK5YLLWOogAgHGh62S_2wAAAYk"]
[Sat Feb 28 17:46:09.060448 2026] [:error] [pid 39184:tid 39230] [client 20.220.144.87:18416] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aaK5YVtZF9Zd_U7easBPHQAAAEs"]
[Sat Feb 28 17:46:09.476607 2026] [:error] [pid 39184:tid 39242] [client 20.220.144.87:18250] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaK5YVtZF9Zd_U7easBPHwAAAFc"]
[Sat Feb 28 17:46:09.894342 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:18089] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaK5YRCf4HvhVePw3LZbpQAAAAQ"]
[Sat Feb 28 17:46:10.315873 2026] [:error] [pid 39183:tid 39195] [client 20.220.144.87:18339] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaK5YhCf4HvhVePw3LZbqQAAAAM"]
[Sat Feb 28 17:46:10.735094 2026] [:error] [pid 39184:tid 39221] [client 20.220.144.87:18311] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaK5YltZF9Zd_U7easBPJgAAAEI"]
[Sat Feb 28 17:46:11.151128 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:18367] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "aaK5Y7LWOogAgHGh62S_5AAAAYE"]
[Sat Feb 28 17:46:11.606755 2026] [:error] [pid 52460:tid 52463] [client 20.220.144.87:18067] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "aaK5Y7LWOogAgHGh62S_5QAAAYA"]
[Sat Feb 28 17:46:12.027973 2026] [:error] [pid 52460:tid 52479] [client 20.220.144.87:18316] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "aaK5ZLLWOogAgHGh62S_6wAAAZA"]
[Sat Feb 28 17:46:12.443578 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:18241] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "aaK5ZLLWOogAgHGh62S_8gAAAYE"]
[Sat Feb 28 17:46:12.857526 2026] [:error] [pid 52460:tid 52486] [client 20.220.144.87:18324] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a6s2.php"] [unique_id "aaK5ZLLWOogAgHGh62S_9wAAAZc"]
[Sat Feb 28 17:46:13.270864 2026] [:error] [pid 52460:tid 52469] [client 20.220.144.87:18310] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a6s2.php"] [unique_id "aaK5ZbLWOogAgHGh62S__AAAAYY"]
[Sat Feb 28 17:46:13.687670 2026] [:error] [pid 49763:tid 49783] [client 20.220.144.87:18366] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a6s2.php"] [unique_id "aaK5ZbTHSOG_yf2PpqErAwAAAdE"]
[Sat Feb 28 17:46:14.101688 2026] [:error] [pid 39183:tid 39198] [client 20.220.144.87:18300] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a6s2.php"] [unique_id "aaK5ZhCf4HvhVePw3LZbtwAAAAY"]
[Sat Feb 28 17:46:14.530223 2026] [:error] [pid 49763:tid 49770] [client 20.220.144.87:18410] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aki.php"] [unique_id "aaK5ZrTHSOG_yf2PpqErCgAAAcQ"]
[Sat Feb 28 17:46:14.940514 2026] [:error] [pid 39183:tid 39208] [client 20.220.144.87:18306] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aki.php"] [unique_id "aaK5ZhCf4HvhVePw3LZbvgAAABA"]
[Sat Feb 28 17:46:15.352747 2026] [:error] [pid 39183:tid 39212] [client 20.220.144.87:17725] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aki.php"] [unique_id "aaK5ZxCf4HvhVePw3LZbwgAAABQ"]
[Sat Feb 28 17:46:15.763706 2026] [:error] [pid 52460:tid 52481] [client 20.220.144.87:18337] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aki.php"] [unique_id "aaK5Z7LWOogAgHGh62TAAgAAAZI"]
[Sat Feb 28 17:46:16.176543 2026] [:error] [pid 49763:tid 49783] [client 20.220.144.87:18422] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aaK5aLTHSOG_yf2PpqErGQAAAdE"]
[Sat Feb 28 17:46:16.596024 2026] [:error] [pid 49763:tid 49773] [client 20.220.144.87:18346] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aaK5aLTHSOG_yf2PpqErIAAAAcc"]
[Sat Feb 28 17:46:17.015086 2026] [:error] [pid 39292:tid 39314] [client 20.220.144.87:18254] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aaK5aaIAO5fN7BxyqcEyHgAAANQ"]
[Sat Feb 28 17:46:17.433629 2026] [:error] [pid 49763:tid 49783] [client 20.220.144.87:18296] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/R57.php"] [unique_id "aaK5abTHSOG_yf2PpqErLgAAAdE"]
[Sat Feb 28 17:46:17.849970 2026] [:error] [pid 39184:tid 39226] [client 20.220.144.87:18272] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pepe.php"] [unique_id "aaK5aVtZF9Zd_U7easBPKAAAAEc"]
[Sat Feb 28 17:46:18.261835 2026] [:error] [pid 39184:tid 39231] [client 20.220.144.87:18099] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pepe.php"] [unique_id "aaK5altZF9Zd_U7easBPKQAAAEw"]
[Sat Feb 28 17:46:18.679979 2026] [:error] [pid 11791:tid 11812] [client 20.220.144.87:18375] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pepe.php"] [unique_id "aaK5amuX5e1Q32gqxH2JPgAAARM"]
[Sat Feb 28 17:46:19.098147 2026] [:error] [pid 52460:tid 52476] [client 20.220.144.87:18083] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pepe.php"] [unique_id "aaK5a7LWOogAgHGh62TACQAAAY0"]
[Sat Feb 28 17:46:19.519464 2026] [:error] [pid 39292:tid 39318] [client 20.220.144.87:18418] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaK5a6IAO5fN7BxyqcEyJAAAANg"]
[Sat Feb 28 17:46:19.932117 2026] [:error] [pid 22194:tid 22197] [client 20.220.144.87:18329] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaK5a36mbajs3bzQGyt9YwAAAUE"]
[Sat Feb 28 17:46:20.343754 2026] [:error] [pid 52460:tid 52475] [client 20.220.144.87:18374] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaK5bLLWOogAgHGh62TADQAAAYw"]
[Sat Feb 28 17:46:20.756587 2026] [:error] [pid 39292:tid 39301] [client 20.220.144.87:18265] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaK5bKIAO5fN7BxyqcEyJgAAAMc"]
[Sat Feb 28 17:46:21.167477 2026] [:error] [pid 52460:tid 52473] [client 20.220.144.87:18259] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaK5bbLWOogAgHGh62TAFQAAAYo"]
[Sat Feb 28 17:46:21.582854 2026] [:error] [pid 39184:tid 39230] [client 20.220.144.87:17670] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaK5bVtZF9Zd_U7easBPLgAAAEs"]
[Sat Feb 28 17:46:21.997912 2026] [:error] [pid 39184:tid 39242] [client 20.220.144.87:17687] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaK5bVtZF9Zd_U7easBPMQAAAFc"]
[Sat Feb 28 17:46:22.410250 2026] [:error] [pid 39184:tid 39239] [client 20.220.144.87:18263] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaK5bltZF9Zd_U7easBPNQAAAFQ"]
[Sat Feb 28 17:46:22.824807 2026] [:error] [pid 39183:tid 39215] [client 20.220.144.87:18284] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaK5bhCf4HvhVePw3LZb0QAAABc"]
[Sat Feb 28 17:46:23.241030 2026] [:error] [pid 52460:tid 52479] [client 20.220.144.87:18257] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaK5b7LWOogAgHGh62TAIQAAAZA"]
[Sat Feb 28 17:46:23.655948 2026] [:error] [pid 52460:tid 52467] [client 20.220.144.87:18285] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaK5b7LWOogAgHGh62TAJgAAAYQ"]
[Sat Feb 28 17:46:24.071738 2026] [:error] [pid 39183:tid 39214] [client 20.220.144.87:18326] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaK5cBCf4HvhVePw3LZb2QAAABY"]
[Sat Feb 28 17:46:24.486089 2026] [:error] [pid 52460:tid 52485] [client 20.220.144.87:18348] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaK5cLLWOogAgHGh62TALAAAAZY"]
[Sat Feb 28 17:46:24.904160 2026] [:error] [pid 39183:tid 39200] [client 20.220.144.87:18252] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaK5cBCf4HvhVePw3LZb3gAAAAg"]
[Sat Feb 28 17:46:25.320342 2026] [:error] [pid 22194:tid 22206] [client 20.220.144.87:18198] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaK5cX6mbajs3bzQGyt9ZAAAAUo"]
[Sat Feb 28 17:46:25.735644 2026] [:error] [pid 52460:tid 52475] [client 20.220.144.87:18361] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaK5cbLWOogAgHGh62TAMgAAAYw"]
[Sat Feb 28 17:46:26.146814 2026] [:error] [pid 39183:tid 39197] [client 20.220.144.87:18401] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaK5chCf4HvhVePw3LZb4wAAAAU"]
[Sat Feb 28 17:46:26.561019 2026] [:error] [pid 52460:tid 52485] [client 20.220.144.87:18362] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaK5crLWOogAgHGh62TAPQAAAZY"]
[Sat Feb 28 17:46:26.972455 2026] [:error] [pid 22194:tid 22209] [client 20.220.144.87:18266] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaK5cn6mbajs3bzQGyt9ZQAAAU0"]
[Sat Feb 28 17:46:27.387458 2026] [:error] [pid 39183:tid 39211] [client 20.220.144.87:18274] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaK5cxCf4HvhVePw3LZb6QAAABM"]
[Sat Feb 28 17:46:27.806886 2026] [:error] [pid 52460:tid 52475] [client 20.220.144.87:18419] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaK5c7LWOogAgHGh62TARwAAAYw"]
[Sat Feb 28 17:46:28.233552 2026] [:error] [pid 49763:tid 49787] [client 20.220.144.87:18427] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaK5dLTHSOG_yf2PpqEregAAAdU"]
[Sat Feb 28 17:46:28.647480 2026] [:error] [pid 52460:tid 52481] [client 20.220.144.87:18260] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaK5dLLWOogAgHGh62TAUQAAAZI"]
[Sat Feb 28 17:46:29.060881 2026] [:error] [pid 52460:tid 52468] [client 20.220.144.87:18425] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaK5dbLWOogAgHGh62TAUwAAAYU"]
[Sat Feb 28 17:46:29.475435 2026] [:error] [pid 11791:tid 11814] [client 20.220.144.87:18369] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/daff42833e.php"] [unique_id "aaK5dWuX5e1Q32gqxH2JVAAAARU"]
[Sat Feb 28 17:46:29.892782 2026] [:error] [pid 39185:tid 39250] [client 20.220.144.87:18287] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/daff42833e.php"] [unique_id "aaK5dRVE-FfM89u7BQZ0TAAAAIQ"]
[Sat Feb 28 17:46:30.309798 2026] [:error] [pid 39185:tid 39253] [client 20.220.144.87:18314] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/daff42833e.php"] [unique_id "aaK5dhVE-FfM89u7BQZ0TgAAAIc"]
[Sat Feb 28 17:46:30.724162 2026] [:error] [pid 49763:tid 49790] [client 20.220.144.87:18249] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/daff42833e.php"] [unique_id "aaK5drTHSOG_yf2PpqErhwAAAdg"]
[Sat Feb 28 17:46:31.134048 2026] [:error] [pid 49763:tid 49780] [client 20.220.144.87:18280] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaK5d7THSOG_yf2PpqErigAAAc4"]
[Sat Feb 28 17:46:31.544911 2026] [:error] [pid 11791:tid 11817] [client 20.220.144.87:18363] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaK5d2uX5e1Q32gqxH2JWwAAARg"]
[Sat Feb 28 17:46:31.962568 2026] [:error] [pid 39184:tid 39226] [client 20.220.144.87:18365] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaK5d1tZF9Zd_U7easBPOwAAAEc"]
[Sat Feb 28 17:46:32.379104 2026] [:error] [pid 49763:tid 49788] [client 20.220.144.87:18352] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cc13.php"] [unique_id "aaK5eLTHSOG_yf2PpqErkwAAAdY"]
[Sat Feb 28 17:46:32.794517 2026] [:error] [pid 39184:tid 39243] [client 20.220.144.87:18343] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaK5eFtZF9Zd_U7easBPPAAAAFg"]
[Sat Feb 28 17:46:33.224999 2026] [:error] [pid 49763:tid 49783] [client 20.220.144.87:18213] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaK5ebTHSOG_yf2PpqErlgAAAdE"]
[Sat Feb 28 17:46:33.638371 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:18334] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaK5ebLWOogAgHGh62TAYwAAAYs"]
[Sat Feb 28 17:46:34.064426 2026] [:error] [pid 49763:tid 49775] [client 20.220.144.87:18269] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaK5erTHSOG_yf2PpqErmwAAAck"]
[Sat Feb 28 17:46:34.476218 2026] [:error] [pid 49763:tid 49780] [client 20.220.144.87:18286] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaK5erTHSOG_yf2PpqErnQAAAc4"]
[Sat Feb 28 17:46:34.892814 2026] [:error] [pid 49763:tid 49774] [client 20.220.144.87:18356] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaK5erTHSOG_yf2PpqErnwAAAcg"]
[Sat Feb 28 17:46:35.308450 2026] [:error] [pid 52460:tid 52485] [client 20.220.144.87:18205] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaK5e7LWOogAgHGh62TAagAAAZY"]
[Sat Feb 28 17:46:35.723456 2026] [:error] [pid 49763:tid 49782] [client 20.220.144.87:18328] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaK5e7THSOG_yf2PpqErowAAAdA"]
[Sat Feb 28 17:46:36.142765 2026] [:error] [pid 39185:tid 39246] [client 20.220.144.87:18204] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaK5fBVE-FfM89u7BQZ0bQAAAIA"]
[Sat Feb 28 17:46:36.557766 2026] [:error] [pid 49763:tid 49769] [client 20.220.144.87:18218] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaK5fLTHSOG_yf2PpqErpAAAAcM"]
[Sat Feb 28 17:46:36.974581 2026] [:error] [pid 39183:tid 39215] [client 20.220.144.87:18247] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaK5fBCf4HvhVePw3LZb8AAAABc"]
[Sat Feb 28 17:46:37.390936 2026] [:error] [pid 39184:tid 39233] [client 20.220.144.87:18359] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaK5fVtZF9Zd_U7easBPRwAAAE4"]
[Sat Feb 28 17:46:37.803266 2026] [:error] [pid 11791:tid 11797] [client 20.220.144.87:18350] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/pu8.php"] [unique_id "aaK5fWuX5e1Q32gqxH2JZQAAAQQ"]
[Sat Feb 28 17:46:38.221658 2026] [:error] [pid 49763:tid 49772] [client 20.220.144.87:18183] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/pu9.php"] [unique_id "aaK5frTHSOG_yf2PpqErpgAAAcY"]
[Sat Feb 28 17:46:38.633895 2026] [:error] [pid 49763:tid 49781] [client 20.220.144.87:18245] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/povoy.php"] [unique_id "aaK5frTHSOG_yf2PpqErpwAAAc8"]
[Sat Feb 28 17:46:39.049061 2026] [:error] [pid 49763:tid 49767] [client 20.220.144.87:18277] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/t00l.php"] [unique_id "aaK5f7THSOG_yf2PpqErqwAAAcE"]
[Sat Feb 28 17:46:39.462803 2026] [:error] [pid 39292:tid 39305] [client 20.220.144.87:18303] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/rcc8.php"] [unique_id "aaK5f6IAO5fN7BxyqcEyMAAAAMs"]
[Sat Feb 28 17:46:39.878772 2026] [:error] [pid 49763:tid 49770] [client 20.220.144.87:18330] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/rcc9.php"] [unique_id "aaK5f7THSOG_yf2PpqErsAAAAcQ"]
[Sat Feb 28 17:46:40.296083 2026] [:error] [pid 39183:tid 39198] [client 20.220.144.87:18279] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xl9.php"] [unique_id "aaK5gBCf4HvhVePw3LZb8wAAAAY"]
[Sat Feb 28 17:46:40.716786 2026] [:error] [pid 49763:tid 49782] [client 20.220.144.87:18066] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/gxoxx.php"] [unique_id "aaK5gLTHSOG_yf2PpqErswAAAdA"]
[Sat Feb 28 17:46:41.139614 2026] [:error] [pid 39183:tid 39214] [client 20.220.144.87:18426] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/g06akt.php"] [unique_id "aaK5gRCf4HvhVePw3LZb-QAAABY"]
[Sat Feb 28 17:46:41.563131 2026] [:error] [pid 52460:tid 52487] [client 20.220.144.87:18258] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/add.php"] [unique_id "aaK5gbLWOogAgHGh62TAiwAAAZg"]
[Sat Feb 28 17:46:41.992406 2026] [:error] [pid 49763:tid 49781] [client 20.220.144.87:18251] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/add.php"] [unique_id "aaK5gbTHSOG_yf2PpqErtwAAAc8"]
[Sat Feb 28 17:46:42.411952 2026] [:error] [pid 52460:tid 52487] [client 20.220.144.87:18246] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/add.php"] [unique_id "aaK5grLWOogAgHGh62TAlQAAAZg"]
[Sat Feb 28 17:46:42.829286 2026] [:error] [pid 49763:tid 49790] [client 20.220.144.87:18209] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaK5grTHSOG_yf2PpqErugAAAdg"]
[Sat Feb 28 17:46:43.242712 2026] [:error] [pid 52460:tid 52479] [client 20.220.144.87:18281] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaK5g7LWOogAgHGh62TAnwAAAZA"]
[Sat Feb 28 17:46:43.656572 2026] [:error] [pid 39183:tid 39215] [client 20.220.144.87:18238] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaK5gxCf4HvhVePw3LZb_wAAABc"]
[Sat Feb 28 17:46:48.633334 2026] [:error] [pid 39185:tid 39258] [client 20.220.144.87:18231] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaK5iBVE-FfM89u7BQZ0uAAAAIw"]
[Sat Feb 28 17:46:49.909538 2026] [:error] [pid 39292:tid 39303] [client 20.220.144.87:18193] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaK5iaIAO5fN7BxyqcEyOAAAAMk"]
[Sat Feb 28 17:46:50.321751 2026] [:error] [pid 39184:tid 39233] [client 20.220.144.87:18243] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaK5iltZF9Zd_U7easBPbQAAAE4"]
[Sat Feb 28 17:46:50.735404 2026] [:error] [pid 39184:tid 39224] [client 20.220.144.87:18294] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaK5iltZF9Zd_U7easBPcAAAAEU"]
[Sat Feb 28 17:46:51.153067 2026] [:error] [pid 39184:tid 39240] [client 20.220.144.87:18354] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaK5i1tZF9Zd_U7easBPcwAAAFU"]
[Sat Feb 28 17:46:51.569537 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:18224] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "aaK5ixCf4HvhVePw3LZcGwAAAAQ"]
[Sat Feb 28 17:46:51.987168 2026] [:error] [pid 39183:tid 39209] [client 20.220.144.87:18336] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "aaK5ixCf4HvhVePw3LZcHAAAABE"]
[Sat Feb 28 17:46:52.433383 2026] [:error] [pid 49763:tid 49779] [client 20.220.144.87:18315] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "aaK5jLTHSOG_yf2PpqEr1AAAAc0"]
[Sat Feb 28 17:46:52.847571 2026] [:error] [pid 39184:tid 39222] [client 20.220.144.87:18293] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "aaK5jFtZF9Zd_U7easBPeQAAAEM"]
[Sat Feb 28 17:46:53.268121 2026] [:error] [pid 52460:tid 52483] [client 20.220.144.87:17723] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aaK5jbLWOogAgHGh62TA5AAAAZQ"]
[Sat Feb 28 17:46:53.684138 2026] [:error] [pid 49763:tid 49776] [client 20.220.144.87:18178] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aaK5jbTHSOG_yf2PpqEr2wAAAco"]
[Sat Feb 28 17:46:54.095802 2026] [:error] [pid 39184:tid 39240] [client 20.220.144.87:18093] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aaK5jltZF9Zd_U7easBPfgAAAFU"]
[Sat Feb 28 17:46:54.510285 2026] [:error] [pid 52460:tid 52469] [client 20.220.144.87:18118] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aaK5jrLWOogAgHGh62TA6wAAAYY"]
[Sat Feb 28 17:46:54.930671 2026] [:error] [pid 52460:tid 52485] [client 20.220.144.87:18268] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaK5jrLWOogAgHGh62TA7wAAAZY"]
[Sat Feb 28 17:46:55.346060 2026] [:error] [pid 49763:tid 49767] [client 20.220.144.87:18054] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaK5j7THSOG_yf2PpqEr4QAAAcE"]
[Sat Feb 28 17:46:55.763305 2026] [:error] [pid 49763:tid 49770] [client 20.220.144.87:18211] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaK5j7THSOG_yf2PpqEr4wAAAcQ"]
[Sat Feb 28 17:46:56.184356 2026] [:error] [pid 52460:tid 52478] [client 20.220.144.87:18185] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaK5kLLWOogAgHGh62TA_wAAAY8"]
[Sat Feb 28 17:46:56.608726 2026] [:error] [pid 52460:tid 52465] [client 20.220.144.87:18187] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaK5kLLWOogAgHGh62TBAwAAAYI"]
[Sat Feb 28 17:46:57.025660 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:18262] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaK5kbLWOogAgHGh62TBCwAAAYE"]
[Sat Feb 28 17:46:57.441269 2026] [:error] [pid 49763:tid 49769] [client 20.220.144.87:18152] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaK5kbTHSOG_yf2PpqEr6AAAAcM"]
[Sat Feb 28 17:46:57.854987 2026] [:error] [pid 39183:tid 39215] [client 20.220.144.87:18305] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaK5kRCf4HvhVePw3LZcJQAAABc"]
[Sat Feb 28 17:46:58.271682 2026] [:error] [pid 52460:tid 52466] [client 20.220.144.87:17706] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaK5krLWOogAgHGh62TBGwAAAYM"]
[Sat Feb 28 17:46:58.688458 2026] [:error] [pid 52460:tid 52467] [client 20.220.144.87:18273] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaK5krLWOogAgHGh62TBIAAAAYQ"]
[Sat Feb 28 17:46:59.106917 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:18302] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaK5k7LWOogAgHGh62TBKAAAAYs"]
[Sat Feb 28 17:46:59.524351 2026] [:error] [pid 39185:tid 39247] [client 20.220.144.87:18179] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaK5kxVE-FfM89u7BQZ00wAAAIE"]
[Sat Feb 28 17:46:59.941503 2026] [:error] [pid 52460:tid 52479] [client 20.220.144.87:18202] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaK5k7LWOogAgHGh62TBNgAAAZA"]
[Sat Feb 28 17:47:00.355665 2026] [:error] [pid 49763:tid 49778] [client 20.220.144.87:18357] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaK5lLTHSOG_yf2PpqEr7gAAAcw"]
[Sat Feb 28 17:47:00.770256 2026] [:error] [pid 49763:tid 49780] [client 20.220.144.87:18208] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaK5lLTHSOG_yf2PpqEr7wAAAc4"]
[Sat Feb 28 17:47:01.186443 2026] [:error] [pid 49763:tid 49774] [client 20.220.144.87:18176] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaK5lbTHSOG_yf2PpqEr8QAAAcg"]
[Sat Feb 28 17:47:01.614349 2026] [:error] [pid 11791:tid 11817] [client 20.220.144.87:18342] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaK5lWuX5e1Q32gqxH2JhAAAARg"]
[Sat Feb 28 17:47:02.032143 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:18291] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaK5lhCf4HvhVePw3LZcLgAAAAQ"]
[Sat Feb 28 17:47:02.451108 2026] [:error] [pid 49763:tid 49772] [client 20.220.144.87:18283] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaK5lrTHSOG_yf2PpqEr9wAAAcY"]
[Sat Feb 28 17:47:02.864951 2026] [:error] [pid 39183:tid 39210] [client 20.220.144.87:18388] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "aaK5lhCf4HvhVePw3LZcMAAAABI"]
[Sat Feb 28 17:47:03.275740 2026] [:error] [pid 22194:tid 22210] [client 20.220.144.87:18129] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/my.php"] [unique_id "aaK5l36mbajs3bzQGyt9cAAAAU4"]
[Sat Feb 28 17:47:03.687187 2026] [:error] [pid 11791:tid 11800] [client 20.220.144.87:18276] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/my.php"] [unique_id "aaK5l2uX5e1Q32gqxH2JiAAAAQc"]
[Sat Feb 28 17:47:04.104268 2026] [:error] [pid 39292:tid 39314] [client 20.220.144.87:18230] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/my.php"] [unique_id "aaK5mKIAO5fN7BxyqcEyQQAAANQ"]
[Sat Feb 28 17:47:04.519775 2026] [:error] [pid 11791:tid 11804] [client 20.220.144.87:18267] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/my.php"] [unique_id "aaK5mGuX5e1Q32gqxH2JiQAAAQs"]
[Sat Feb 28 17:47:04.931227 2026] [:error] [pid 52460:tid 52472] [client 20.220.144.87:18288] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaK5mLLWOogAgHGh62TBVwAAAYk"]
[Sat Feb 28 17:47:05.345671 2026] [:error] [pid 52460:tid 52466] [client 20.220.144.87:18270] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaK5mbLWOogAgHGh62TBXQAAAYM"]
[Sat Feb 28 17:47:05.761033 2026] [:error] [pid 39184:tid 39240] [client 20.220.144.87:18248] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaK5mVtZF9Zd_U7easBPjwAAAFU"]
[Sat Feb 28 17:47:06.173829 2026] [:error] [pid 52460:tid 52485] [client 20.220.144.87:18227] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaK5mrLWOogAgHGh62TBbQAAAZY"]
[Sat Feb 28 17:47:06.589710 2026] [:error] [pid 52460:tid 52481] [client 20.220.144.87:18216] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaK5mrLWOogAgHGh62TBcQAAAZI"]
[Sat Feb 28 17:47:07.011109 2026] [:error] [pid 49763:tid 49783] [client 20.220.144.87:18278] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaK5m7THSOG_yf2PpqEr_gAAAdE"]
[Sat Feb 28 17:47:07.425502 2026] [:error] [pid 49763:tid 49767] [client 20.220.144.87:18221] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaK5m7THSOG_yf2PpqEr_wAAAcE"]
[Sat Feb 28 17:47:07.836488 2026] [:error] [pid 52460:tid 52473] [client 20.220.144.87:17984] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaK5m7LWOogAgHGh62TBgQAAAYo"]
[Sat Feb 28 17:47:08.251973 2026] [:error] [pid 52460:tid 52476] [client 20.220.144.87:18347] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaK5nLLWOogAgHGh62TBhwAAAY0"]
[Sat Feb 28 17:47:08.685241 2026] [:error] [pid 49763:tid 49770] [client 20.220.144.87:18335] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaK5nLTHSOG_yf2PpqEsBAAAAcQ"]
[Sat Feb 28 17:47:09.095434 2026] [:error] [pid 52460:tid 52484] [client 20.220.144.87:18234] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaK5nbLWOogAgHGh62TBjwAAAZU"]
[Sat Feb 28 17:47:09.511010 2026] [:error] [pid 39183:tid 39193] [client 20.220.144.87:18282] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaK5nRCf4HvhVePw3LZcOwAAAAE"]
[Sat Feb 28 17:47:09.932770 2026] [:error] [pid 39183:tid 39209] [client 20.220.144.87:18145] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK5nRCf4HvhVePw3LZcPwAAABE"]
[Sat Feb 28 17:47:10.349115 2026] [:error] [pid 39184:tid 39225] [client 20.220.144.87:18360] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK5nltZF9Zd_U7easBPkAAAAEY"]
[Sat Feb 28 17:47:10.765313 2026] [:error] [pid 39292:tid 39298] [client 20.220.144.87:18317] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK5nqIAO5fN7BxyqcEyRAAAAMQ"]
[Sat Feb 28 17:47:11.176883 2026] [:error] [pid 39183:tid 39203] [client 20.220.144.87:18175] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK5nxCf4HvhVePw3LZcQgAAAAs"]
[Sat Feb 28 17:47:11.587890 2026] [:error] [pid 49763:tid 49790] [client 20.220.144.87:18289] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-setting.php"] [unique_id "aaK5n7THSOG_yf2PpqEsDQAAAdg"]
[Sat Feb 28 17:47:12.003998 2026] [:error] [pid 49763:tid 49768] [client 20.220.144.87:18301] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-setting.php"] [unique_id "aaK5oLTHSOG_yf2PpqEsEAAAAcI"]
[Sat Feb 28 17:47:12.427223 2026] [:error] [pid 52460:tid 52468] [client 20.220.144.87:18184] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-setting.php"] [unique_id "aaK5oLLWOogAgHGh62TBoAAAAYU"]
[Sat Feb 28 17:47:12.846777 2026] [:error] [pid 52460:tid 52479] [client 20.220.144.87:18242] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-setting.php"] [unique_id "aaK5oLLWOogAgHGh62TBoQAAAZA"]
[Sat Feb 28 17:47:13.268604 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:18123] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaK5obLWOogAgHGh62TBpAAAAYE"]
[Sat Feb 28 17:47:13.689018 2026] [:error] [pid 52460:tid 52483] [client 20.220.144.87:18304] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaK5obLWOogAgHGh62TBqAAAAZQ"]
[Sat Feb 28 17:47:14.109930 2026] [:error] [pid 52460:tid 52470] [client 20.220.144.87:18235] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaK5orLWOogAgHGh62TBrQAAAYc"]
[Sat Feb 28 17:47:14.525772 2026] [:error] [pid 52460:tid 52479] [client 20.220.144.87:18189] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaK5orLWOogAgHGh62TBsgAAAZA"]
[Sat Feb 28 17:47:14.936179 2026] [:error] [pid 39183:tid 39206] [client 20.220.144.87:18232] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaK5ohCf4HvhVePw3LZcRQAAAA4"]
[Sat Feb 28 17:47:15.348248 2026] [:error] [pid 52460:tid 52469] [client 20.220.144.87:18290] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaK5o7LWOogAgHGh62TBuAAAAYY"]
[Sat Feb 28 17:47:15.762972 2026] [:error] [pid 52460:tid 52470] [client 20.220.144.87:18299] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaK5o7LWOogAgHGh62TBvgAAAYc"]
[Sat Feb 28 17:47:16.182274 2026] [:error] [pid 49763:tid 49772] [client 20.220.144.87:18295] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaK5pLTHSOG_yf2PpqEsHAAAAcY"]
[Sat Feb 28 17:53:04.395873 2026] [:error] [pid 49763:tid 49777] [client 43.166.240.231:58868] [client 43.166.240.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaK7ALTHSOG_yf2PpqExcgAAAcs"]
[Sat Feb 28 18:12:18.649276 2026] [:error] [pid 39292:tid 39308] [client 20.63.97.65:65181] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaK_gqIAO5fN7BxyqcE73wAAAM4"]
[Sat Feb 28 18:12:19.066463 2026] [:error] [pid 52460:tid 52486] [client 20.63.97.65:65259] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaK_g7LWOogAgHGh62TnjgAAAZc"]
[Sat Feb 28 18:12:19.533573 2026] [:error] [pid 39183:tid 39197] [client 20.63.97.65:65198] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaK_gxCf4HvhVePw3LZvgAAAAAU"]
[Sat Feb 28 18:12:19.950260 2026] [:error] [pid 22194:tid 22210] [client 20.63.97.65:65254] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaK_g36mbajs3bzQGyuBVwAAAU4"]
[Sat Feb 28 18:12:20.387710 2026] [:error] [pid 52460:tid 52466] [client 20.63.97.65:65167] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "aaK_hLLWOogAgHGh62TnmAAAAYM"]
[Sat Feb 28 18:12:20.827490 2026] [:error] [pid 39292:tid 39301] [client 20.63.97.65:65178] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "aaK_hKIAO5fN7BxyqcE75QAAAMc"]
[Sat Feb 28 18:12:21.289095 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:65171] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "aaK_hbLWOogAgHGh62TnoAAAAYU"]
[Sat Feb 28 18:12:21.715429 2026] [:error] [pid 49763:tid 49783] [client 20.63.97.65:65180] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "aaK_hbTHSOG_yf2PpqFGggAAAdE"]
[Sat Feb 28 18:12:22.135848 2026] [:error] [pid 11791:tid 11800] [client 20.63.97.65:65187] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaK_hmuX5e1Q32gqxH2QTAAAAQc"]
[Sat Feb 28 18:12:22.571718 2026] [:error] [pid 39184:tid 39227] [client 20.63.97.65:65248] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaK_hltZF9Zd_U7easBabQAAAEg"]
[Sat Feb 28 18:12:23.087824 2026] [:error] [pid 39183:tid 39193] [client 20.63.97.65:65209] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaK_hxCf4HvhVePw3LZviQAAAAE"]
[Sat Feb 28 18:12:23.517617 2026] [:error] [pid 52460:tid 52477] [client 20.63.97.65:65268] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaK_h7LWOogAgHGh62TnqgAAAY4"]
[Sat Feb 28 18:12:23.932444 2026] [:error] [pid 11791:tid 11806] [client 20.63.97.65:65152] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaK_h2uX5e1Q32gqxH2QTwAAAQ0"]
[Sat Feb 28 18:12:24.351783 2026] [:error] [pid 52460:tid 52483] [client 20.63.97.65:63130] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaK_iLLWOogAgHGh62TnswAAAZQ"]
[Sat Feb 28 18:12:24.810516 2026] [:error] [pid 49763:tid 49775] [client 20.63.97.65:65206] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaK_iLTHSOG_yf2PpqFGigAAAck"]
[Sat Feb 28 18:12:25.256695 2026] [:error] [pid 49763:tid 49774] [client 20.63.97.65:65201] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaK_ibTHSOG_yf2PpqFGiwAAAcg"]
[Sat Feb 28 18:12:25.698103 2026] [:error] [pid 39292:tid 39310] [client 20.63.97.65:65172] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "aaK_iaIAO5fN7BxyqcE75wAAANA"]
[Sat Feb 28 18:12:26.149885 2026] [:error] [pid 49763:tid 49771] [client 20.63.97.65:65224] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "aaK_irTHSOG_yf2PpqFGkQAAAcU"]
[Sat Feb 28 18:12:26.602082 2026] [:error] [pid 39185:tid 39260] [client 20.63.97.65:65230] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "aaK_ihVE-FfM89u7BQZ5zQAAAI4"]
[Sat Feb 28 18:12:27.057645 2026] [:error] [pid 22194:tid 22215] [client 20.63.97.65:65249] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "aaK_i36mbajs3bzQGyuBYAAAAVM"]
[Sat Feb 28 18:12:27.572305 2026] [:error] [pid 39292:tid 39311] [client 20.63.97.65:65197] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "aaK_i6IAO5fN7BxyqcE76QAAANE"]
[Sat Feb 28 18:12:28.017123 2026] [:error] [pid 39183:tid 39216] [client 20.63.97.65:65237] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "aaK_jBCf4HvhVePw3LZvtwAAABg"]
[Sat Feb 28 18:12:28.690295 2026] [:error] [pid 11791:tid 11810] [client 20.63.97.65:65269] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "aaK_jGuX5e1Q32gqxH2QWgAAARE"]
[Sat Feb 28 18:12:29.230098 2026] [:error] [pid 49763:tid 49783] [client 20.63.97.65:65214] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "aaK_jbTHSOG_yf2PpqFGnQAAAdE"]
[Sat Feb 28 18:12:29.777773 2026] [:error] [pid 39183:tid 39215] [client 20.63.97.65:65175] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaK_jRCf4HvhVePw3LZvzAAAABc"]
[Sat Feb 28 18:12:30.208181 2026] [:error] [pid 39185:tid 39253] [client 20.63.97.65:65262] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaK_jhVE-FfM89u7BQZ52gAAAIc"]
[Sat Feb 28 18:12:31.527795 2026] [:error] [pid 22194:tid 22217] [client 20.63.97.65:65222] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaK_j36mbajs3bzQGyuBZAAAAVU"]
[Sat Feb 28 18:12:33.630666 2026] [:error] [pid 52460:tid 52481] [client 20.63.97.65:65256] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaK_kbLWOogAgHGh62TnzwAAAZI"]
[Sat Feb 28 18:12:34.175748 2026] [:error] [pid 52460:tid 52480] [client 20.63.97.65:65232] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "aaK_krLWOogAgHGh62Tn1gAAAZE"]
[Sat Feb 28 18:12:34.679865 2026] [:error] [pid 52460:tid 52470] [client 20.63.97.65:65251] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "aaK_krLWOogAgHGh62Tn3QAAAYc"]
[Sat Feb 28 18:12:35.129699 2026] [:error] [pid 39184:tid 39228] [client 20.63.97.65:65176] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "aaK_k1tZF9Zd_U7easBagwAAAEk"]
[Sat Feb 28 18:12:35.602161 2026] [:error] [pid 39184:tid 39231] [client 20.63.97.65:65227] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "aaK_k1tZF9Zd_U7easBahAAAAEw"]
[Sat Feb 28 18:12:36.038050 2026] [:error] [pid 39184:tid 39242] [client 20.63.97.65:63211] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "aaK_lFtZF9Zd_U7easBaigAAAFc"]
[Sat Feb 28 18:12:36.546305 2026] [:error] [pid 49763:tid 49774] [client 20.63.97.65:65156] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "aaK_lLTHSOG_yf2PpqFGpQAAAcg"]
[Sat Feb 28 18:12:36.986540 2026] [:error] [pid 49763:tid 49786] [client 20.63.97.65:65203] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "aaK_lLTHSOG_yf2PpqFGpgAAAdQ"]
[Sat Feb 28 18:12:37.431047 2026] [:error] [pid 49763:tid 49771] [client 20.63.97.65:63113] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "aaK_lbTHSOG_yf2PpqFGqgAAAcU"]
[Sat Feb 28 18:12:38.014705 2026] [:error] [pid 52460:tid 52481] [client 20.63.97.65:65158] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aaK_lrLWOogAgHGh62Tn7AAAAZI"]
[Sat Feb 28 18:12:38.443298 2026] [:error] [pid 52460:tid 52484] [client 20.63.97.65:65202] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aaK_lrLWOogAgHGh62Tn7wAAAZU"]
[Sat Feb 28 18:12:38.884648 2026] [:error] [pid 52460:tid 52467] [client 20.63.97.65:63201] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aaK_lrLWOogAgHGh62Tn9AAAAYQ"]
[Sat Feb 28 18:12:39.294824 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:65263] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aaK_l7LWOogAgHGh62Tn9wAAAYU"]
[Sat Feb 28 18:12:39.715229 2026] [:error] [pid 39292:tid 39318] [client 20.63.97.65:63171] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "aaK_l6IAO5fN7BxyqcE7-wAAANg"]
[Sat Feb 28 18:12:40.191949 2026] [:error] [pid 39292:tid 39306] [client 20.63.97.65:65177] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "aaK_mKIAO5fN7BxyqcE7_QAAAMw"]
[Sat Feb 28 18:12:40.673604 2026] [:error] [pid 39292:tid 39308] [client 20.63.97.65:65255] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "aaK_mKIAO5fN7BxyqcE8AAAAAM4"]
[Sat Feb 28 18:12:41.140626 2026] [:error] [pid 39292:tid 39300] [client 20.63.97.65:63193] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "aaK_maIAO5fN7BxyqcE8AgAAAMY"]
[Sat Feb 28 18:12:41.564497 2026] [:error] [pid 39292:tid 39298] [client 20.63.97.65:65234] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aaK_maIAO5fN7BxyqcE8BAAAAMQ"]
[Sat Feb 28 18:12:42.049819 2026] [:error] [pid 52460:tid 52480] [client 20.63.97.65:65271] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aaK_mrLWOogAgHGh62ToBQAAAZE"]
[Sat Feb 28 18:12:42.500130 2026] [:error] [pid 39183:tid 39216] [client 20.63.97.65:65218] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aaK_mhCf4HvhVePw3LZv4QAAABg"]
[Sat Feb 28 18:12:42.930174 2026] [:error] [pid 52460:tid 52478] [client 20.63.97.65:65185] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aaK_mrLWOogAgHGh62ToDAAAAY8"]
[Sat Feb 28 18:12:43.351630 2026] [:error] [pid 52460:tid 52482] [client 20.63.97.65:65242] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aaK_m7LWOogAgHGh62ToDgAAAZM"]
[Sat Feb 28 18:12:43.789434 2026] [:error] [pid 52460:tid 52480] [client 20.63.97.65:63131] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aaK_m7LWOogAgHGh62ToEwAAAZE"]
[Sat Feb 28 18:12:44.388794 2026] [:error] [pid 11791:tid 11795] [client 20.63.97.65:65245] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aaK_nGuX5e1Q32gqxH2QcgAAAQI"]
[Sat Feb 28 18:12:44.846256 2026] [:error] [pid 52460:tid 52475] [client 20.63.97.65:65207] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aaK_nLLWOogAgHGh62ToGgAAAYw"]
[Sat Feb 28 18:12:45.298694 2026] [:error] [pid 52460:tid 52472] [client 20.63.97.65:63185] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aaK_nbLWOogAgHGh62ToHwAAAYk"]
[Sat Feb 28 18:12:45.768972 2026] [:error] [pid 52460:tid 52464] [client 20.63.97.65:65196] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aaK_nbLWOogAgHGh62ToJAAAAYE"]
[Sat Feb 28 18:12:46.191284 2026] [:error] [pid 39184:tid 39219] [client 20.63.97.65:65257] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aaK_nltZF9Zd_U7easBapAAAAEA"]
[Sat Feb 28 18:12:46.644594 2026] [:error] [pid 52460:tid 52470] [client 20.63.97.65:65169] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aaK_nrLWOogAgHGh62ToKwAAAYc"]
[Sat Feb 28 18:12:47.296718 2026] [:error] [pid 52460:tid 52473] [client 20.63.97.65:65193] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaK_n7LWOogAgHGh62ToMQAAAYo"]
[Sat Feb 28 18:12:47.733761 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:65161] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaK_n7LWOogAgHGh62ToNAAAAYU"]
[Sat Feb 28 18:12:48.153170 2026] [:error] [pid 52460:tid 52484] [client 20.63.97.65:65154] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaK_oLLWOogAgHGh62ToOAAAAZU"]
[Sat Feb 28 18:12:48.591959 2026] [:error] [pid 39184:tid 39234] [client 20.63.97.65:65220] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaK_oFtZF9Zd_U7easBaqQAAAE8"]
[Sat Feb 28 18:12:49.202002 2026] [:error] [pid 52460:tid 52485] [client 20.63.97.65:65191] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaK_obLWOogAgHGh62ToQwAAAZY"]
[Sat Feb 28 18:12:49.805842 2026] [:error] [pid 52460:tid 52472] [client 20.63.97.65:65258] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaK_obLWOogAgHGh62ToRwAAAYk"]
[Sat Feb 28 18:12:50.386232 2026] [:error] [pid 39183:tid 39196] [client 20.63.97.65:65225] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaK_ohCf4HvhVePw3LZv7AAAAAQ"]
[Sat Feb 28 18:12:50.821192 2026] [:error] [pid 49763:tid 49780] [client 20.63.97.65:65200] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaK_orTHSOG_yf2PpqFGxgAAAc4"]
[Sat Feb 28 18:12:51.401026 2026] [:error] [pid 49763:tid 49769] [client 20.63.97.65:65264] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaK_o7THSOG_yf2PpqFGywAAAcM"]
[Sat Feb 28 18:12:51.860444 2026] [:error] [pid 39184:tid 39229] [client 20.63.97.65:65155] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaK_o1tZF9Zd_U7easBargAAAEo"]
[Sat Feb 28 18:12:52.384101 2026] [:error] [pid 39183:tid 39204] [client 20.63.97.65:65211] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaK_pBCf4HvhVePw3LZv9AAAAAw"]
[Sat Feb 28 18:12:52.891908 2026] [:error] [pid 52460:tid 52467] [client 20.63.97.65:65210] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaK_pLLWOogAgHGh62ToVAAAAYQ"]
[Sat Feb 28 18:12:53.369174 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:63221] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaK_pbLWOogAgHGh62ToWAAAAYU"]
[Sat Feb 28 18:12:54.072660 2026] [:error] [pid 52460:tid 52484] [client 20.63.97.65:63126] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaK_prLWOogAgHGh62ToXAAAAZU"]
[Sat Feb 28 18:12:54.797532 2026] [:error] [pid 52460:tid 52481] [client 20.63.97.65:65253] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaK_prLWOogAgHGh62ToZQAAAZI"]
[Sat Feb 28 18:12:55.280245 2026] [:error] [pid 52460:tid 52482] [client 20.63.97.65:63205] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaK_p7LWOogAgHGh62ToawAAAZM"]
[Sat Feb 28 18:12:55.697725 2026] [:error] [pid 49763:tid 49787] [client 20.63.97.65:63210] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaK_p7THSOG_yf2PpqFG1gAAAdU"]
[Sat Feb 28 18:12:56.117470 2026] [:error] [pid 49763:tid 49769] [client 20.63.97.65:65223] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaK_qLTHSOG_yf2PpqFG2AAAAcM"]
[Sat Feb 28 18:12:56.539317 2026] [:error] [pid 52460:tid 52486] [client 20.63.97.65:63106] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaK_qLLWOogAgHGh62TodQAAAZc"]
[Sat Feb 28 18:12:56.967949 2026] [:error] [pid 49763:tid 49772] [client 20.63.97.65:63114] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaK_qLTHSOG_yf2PpqFG2wAAAcY"]
[Sat Feb 28 18:12:57.398474 2026] [:error] [pid 49763:tid 49783] [client 20.63.97.65:63226] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaK_qbTHSOG_yf2PpqFG3AAAAdE"]
[Sat Feb 28 18:12:57.853201 2026] [:error] [pid 39184:tid 39219] [client 20.63.97.65:65164] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaK_qVtZF9Zd_U7easBatQAAAEA"]
[Sat Feb 28 18:12:58.327866 2026] [:error] [pid 39292:tid 39300] [client 20.63.97.65:63202] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaK_qqIAO5fN7BxyqcE8EwAAAMY"]
[Sat Feb 28 18:12:58.769004 2026] [:error] [pid 39183:tid 39196] [client 20.63.97.65:65174] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaK_qhCf4HvhVePw3LZv_AAAAAQ"]
[Sat Feb 28 18:12:59.228618 2026] [:error] [pid 49763:tid 49766] [client 20.63.97.65:65165] [client 20.63.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaK_q7THSOG_yf2PpqFG5QAAAcA"]
[Sat Feb 28 18:12:59.675892 2026] [:error] [pid 39183:tid 39199] [client 20.63.97.65:65212] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaK_qxCf4HvhVePw3LZv_gAAAAc"]
[Sat Feb 28 18:13:00.097038 2026] [:error] [pid 49763:tid 49781] [client 20.63.97.65:65204] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaK_rLTHSOG_yf2PpqFG8AAAAc8"]
[Sat Feb 28 18:13:00.555051 2026] [:error] [pid 39184:tid 39227] [client 20.63.97.65:65239] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaK_rFtZF9Zd_U7easBavgAAAEg"]
[Sat Feb 28 18:13:01.024307 2026] [:error] [pid 49763:tid 49777] [client 20.63.97.65:63230] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaK_rbTHSOG_yf2PpqFG-gAAAcs"]
[Sat Feb 28 18:13:01.459293 2026] [:error] [pid 11791:tid 11804] [client 20.63.97.65:63108] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaK_rWuX5e1Q32gqxH2QfQAAAQs"]
[Sat Feb 28 18:13:01.887547 2026] [:error] [pid 39183:tid 39209] [client 20.63.97.65:65173] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaK_rRCf4HvhVePw3LZwAgAAABE"]
[Sat Feb 28 18:13:02.299512 2026] [:error] [pid 52460:tid 52469] [client 20.63.97.65:65267] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaK_rrLWOogAgHGh62TogwAAAYY"]
[Sat Feb 28 18:13:02.734356 2026] [:error] [pid 39292:tid 39309] [client 20.63.97.65:65213] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaK_rqIAO5fN7BxyqcE8GAAAAM8"]
[Sat Feb 28 18:13:03.160753 2026] [:error] [pid 49763:tid 49782] [client 20.63.97.65:63196] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "aaK_r7THSOG_yf2PpqFHCwAAAdA"]
[Sat Feb 28 18:13:03.666666 2026] [:error] [pid 52460:tid 52463] [client 20.63.97.65:65194] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "aaK_r7LWOogAgHGh62ToiAAAAYA"]
[Sat Feb 28 18:13:04.110839 2026] [:error] [pid 39183:tid 39207] [client 20.63.97.65:65199] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "aaK_sBCf4HvhVePw3LZwBQAAAA8"]
[Sat Feb 28 18:13:04.592219 2026] [:error] [pid 39183:tid 39203] [client 20.63.97.65:65244] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "aaK_sBCf4HvhVePw3LZwBwAAAAs"]
[Sat Feb 28 18:13:05.018297 2026] [:error] [pid 52460:tid 52464] [client 20.63.97.65:65216] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaK_sbLWOogAgHGh62TolAAAAYE"]
[Sat Feb 28 18:13:05.461887 2026] [:error] [pid 49763:tid 49769] [client 20.63.97.65:65270] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaK_sbTHSOG_yf2PpqFHJwAAAcM"]
[Sat Feb 28 18:13:05.904322 2026] [:error] [pid 11791:tid 11805] [client 20.63.97.65:65168] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaK_sWuX5e1Q32gqxH2QggAAAQw"]
[Sat Feb 28 18:13:06.332829 2026] [:error] [pid 11791:tid 11807] [client 20.63.97.65:65190] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaK_smuX5e1Q32gqxH2QhAAAAQ4"]
[Sat Feb 28 18:13:06.774476 2026] [:error] [pid 52460:tid 52475] [client 20.63.97.65:63224] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaK_srLWOogAgHGh62TomwAAAYw"]
[Sat Feb 28 18:13:07.314075 2026] [:error] [pid 52460:tid 52474] [client 20.63.97.65:63199] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaK_s7LWOogAgHGh62ToowAAAYs"]
[Sat Feb 28 18:13:07.726806 2026] [:error] [pid 11791:tid 11800] [client 20.63.97.65:65276] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaK_s2uX5e1Q32gqxH2QhwAAAQc"]
[Sat Feb 28 18:13:08.218972 2026] [:error] [pid 39292:tid 39308] [client 20.63.97.65:63188] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaK_tKIAO5fN7BxyqcE8IwAAAM4"]
[Sat Feb 28 18:13:08.660474 2026] [:error] [pid 11791:tid 11797] [client 20.63.97.65:65159] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aaK_tGuX5e1Q32gqxH2QigAAAQQ"]
[Sat Feb 28 18:13:09.111295 2026] [:error] [pid 11791:tid 11812] [client 20.63.97.65:63192] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aaK_tWuX5e1Q32gqxH2QjAAAARM"]
[Sat Feb 28 18:13:09.527881 2026] [:error] [pid 11791:tid 11793] [client 20.63.97.65:63104] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aaK_tWuX5e1Q32gqxH2QjgAAAQA"]
[Sat Feb 28 18:13:09.978791 2026] [:error] [pid 39185:tid 39248] [client 20.63.97.65:65278] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aaK_tRVE-FfM89u7BQZ6AQAAAII"]
[Sat Feb 28 18:13:10.483769 2026] [:error] [pid 11791:tid 11796] [client 20.63.97.65:63170] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaK_tmuX5e1Q32gqxH2QkAAAAQM"]
[Sat Feb 28 18:13:10.980865 2026] [:error] [pid 22194:tid 22199] [client 20.63.97.65:63144] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaK_tn6mbajs3bzQGyuBdwAAAUM"]
[Sat Feb 28 18:13:11.535986 2026] [:error] [pid 22194:tid 22213] [client 20.63.97.65:65160] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaK_t36mbajs3bzQGyuBeAAAAVE"]
[Sat Feb 28 18:13:12.074468 2026] [:error] [pid 39184:tid 39228] [client 20.63.97.65:63173] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaK_uFtZF9Zd_U7easBayAAAAEk"]
[Sat Feb 28 18:13:12.576866 2026] [:error] [pid 52460:tid 52486] [client 20.63.97.65:63182] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaK_uLLWOogAgHGh62TouAAAAZc"]
[Sat Feb 28 18:13:13.074218 2026] [:error] [pid 39183:tid 39214] [client 20.63.97.65:63194] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaK_uRCf4HvhVePw3LZwEwAAABY"]
[Sat Feb 28 18:13:13.557601 2026] [:error] [pid 39183:tid 39204] [client 20.63.97.65:65192] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaK_uRCf4HvhVePw3LZwGgAAAAw"]
[Sat Feb 28 18:13:14.055746 2026] [:error] [pid 39184:tid 39223] [client 20.63.97.65:65228] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaK_ultZF9Zd_U7easBazAAAAEQ"]
[Sat Feb 28 18:13:14.535452 2026] [:error] [pid 39183:tid 39203] [client 20.63.97.65:65246] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aaK_uhCf4HvhVePw3LZwHQAAAAs"]
[Sat Feb 28 18:13:15.100214 2026] [:error] [pid 49763:tid 49775] [client 20.63.97.65:65162] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aaK_u7THSOG_yf2PpqFHRgAAAck"]
[Sat Feb 28 18:13:15.555697 2026] [:error] [pid 39292:tid 39308] [client 20.63.97.65:65241] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aaK_u6IAO5fN7BxyqcE8MAAAAM4"]
[Sat Feb 28 18:13:15.737618 2026] [:error] [pid 39184:tid 39223] [client 20.63.97.65:65228] [client 20.63.97.65] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "50.6.7.129_711b0f195f8ea44e71e36063a6c4079ee3b8b9b0"): Internal error (specific information not available) [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaK_ultZF9Zd_U7easBazAAAAEQ"]
[Sat Feb 28 18:13:15.983588 2026] [:error] [pid 49763:tid 49783] [client 20.63.97.65:65233] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aaK_u7THSOG_yf2PpqFHSgAAAdE"]
[Sat Feb 28 18:13:16.420952 2026] [:error] [pid 39185:tid 39251] [client 20.63.97.65:65215] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK_vBVE-FfM89u7BQZ6GwAAAIU"]
[Sat Feb 28 18:13:16.839718 2026] [:error] [pid 49763:tid 49768] [client 20.63.97.65:63137] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK_vLTHSOG_yf2PpqFHUQAAAcI"]
[Sat Feb 28 18:13:17.281578 2026] [:error] [pid 52460:tid 52474] [client 20.63.97.65:63155] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK_vbLWOogAgHGh62TozQAAAYs"]
[Sat Feb 28 18:13:17.709092 2026] [:error] [pid 52460:tid 52484] [client 20.63.97.65:63214] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaK_vbLWOogAgHGh62To0gAAAZU"]
[Sat Feb 28 18:13:23.779112 2026] [:error] [pid 52460:tid 52479] [client 20.63.97.65:63164] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaK_w7LWOogAgHGh62TpCQAAAZA"]
[Sat Feb 28 18:13:24.202609 2026] [:error] [pid 52460:tid 52481] [client 20.63.97.65:63180] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaK_xLLWOogAgHGh62TpDAAAAZI"]
[Sat Feb 28 18:13:24.628669 2026] [:error] [pid 52460:tid 52474] [client 20.63.97.65:63115] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaK_xLLWOogAgHGh62TpEwAAAYs"]
[Sat Feb 28 18:13:25.048285 2026] [:error] [pid 39184:tid 39243] [client 20.63.97.65:53988] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaK_xVtZF9Zd_U7easBa3QAAAFg"]
[Sat Feb 28 18:13:25.475647 2026] [:error] [pid 52460:tid 52478] [client 20.63.97.65:63139] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaK_xbLWOogAgHGh62TpHQAAAY8"]
[Sat Feb 28 18:13:25.897920 2026] [:error] [pid 49763:tid 49786] [client 20.63.97.65:65236] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaK_xbTHSOG_yf2PpqFHgwAAAdQ"]
[Sat Feb 28 18:13:26.410166 2026] [:error] [pid 49763:tid 49780] [client 20.63.97.65:63222] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaK_xrTHSOG_yf2PpqFHiQAAAc4"]
[Sat Feb 28 18:13:26.859588 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:65205] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaK_xrLWOogAgHGh62TpLAAAAYU"]
[Sat Feb 28 18:13:27.296045 2026] [:error] [pid 52460:tid 52473] [client 20.63.97.65:63225] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aaK_x7LWOogAgHGh62TpNAAAAYo"]
[Sat Feb 28 18:13:27.732259 2026] [:error] [pid 52460:tid 52484] [client 20.63.97.65:53968] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aaK_x7LWOogAgHGh62TpPQAAAZU"]
[Sat Feb 28 18:13:28.193482 2026] [:error] [pid 39292:tid 39310] [client 20.63.97.65:63220] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aaK_yKIAO5fN7BxyqcE8QQAAANA"]
[Sat Feb 28 18:13:28.658321 2026] [:error] [pid 39183:tid 39196] [client 20.63.97.65:65226] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "aaK_yBCf4HvhVePw3LZwTwAAAAQ"]
[Sat Feb 28 18:13:29.095920 2026] [:error] [pid 49763:tid 49772] [client 20.63.97.65:65186] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaK_ybTHSOG_yf2PpqFHlAAAAcY"]
[Sat Feb 28 18:13:29.529141 2026] [:error] [pid 49763:tid 49789] [client 20.63.97.65:63134] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaK_ybTHSOG_yf2PpqFHmQAAAdc"]
[Sat Feb 28 18:13:29.982015 2026] [:error] [pid 49763:tid 49773] [client 20.63.97.65:63200] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaK_ybTHSOG_yf2PpqFHogAAAcc"]
[Sat Feb 28 18:13:30.503032 2026] [:error] [pid 39183:tid 39202] [client 20.63.97.65:63150] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaK_yhCf4HvhVePw3LZwWAAAAAo"]
[Sat Feb 28 18:13:31.042945 2026] [:error] [pid 49763:tid 49787] [client 20.63.97.65:63195] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aaK_y7THSOG_yf2PpqFHqwAAAdU"]
[Sat Feb 28 18:13:31.513280 2026] [:error] [pid 52460:tid 52467] [client 20.63.97.65:63140] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aaK_y7LWOogAgHGh62TpXQAAAYQ"]
[Sat Feb 28 18:13:31.970419 2026] [:error] [pid 52460:tid 52483] [client 20.63.97.65:63141] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aaK_y7LWOogAgHGh62TpZAAAAZQ"]
[Sat Feb 28 18:13:32.386704 2026] [:error] [pid 52460:tid 52469] [client 20.63.97.65:63120] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aaK_zLLWOogAgHGh62TpaQAAAYY"]
[Sat Feb 28 18:13:33.102892 2026] [:error] [pid 52460:tid 52483] [client 20.63.97.65:65195] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aaK_zbLWOogAgHGh62TpcAAAAZQ"]
[Sat Feb 28 18:13:33.538753 2026] [:error] [pid 52460:tid 52473] [client 20.63.97.65:63227] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aaK_zbLWOogAgHGh62TpcwAAAYo"]
[Sat Feb 28 18:13:33.973644 2026] [:error] [pid 49763:tid 49788] [client 20.63.97.65:63109] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aaK_zbTHSOG_yf2PpqFHuAAAAdY"]
[Sat Feb 28 18:13:34.406748 2026] [:error] [pid 39184:tid 39240] [client 20.63.97.65:63177] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aaK_zltZF9Zd_U7easBa5gAAAFU"]
[Sat Feb 28 18:13:34.882200 2026] [:error] [pid 52460:tid 52483] [client 20.63.97.65:65231] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaK_zrLWOogAgHGh62TpfQAAAZQ"]
[Sat Feb 28 18:13:35.374364 2026] [:error] [pid 11791:tid 11801] [client 20.63.97.65:63191] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaK_z2uX5e1Q32gqxH2QpQAAAQg"]
[Sat Feb 28 18:13:35.806818 2026] [:error] [pid 52460:tid 52477] [client 20.63.97.65:53979] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaK_z7LWOogAgHGh62TphgAAAY4"]
[Sat Feb 28 18:13:36.246998 2026] [:error] [pid 52460:tid 52483] [client 20.63.97.65:53895] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaK_0LLWOogAgHGh62TpiQAAAZQ"]
[Sat Feb 28 18:13:36.705339 2026] [:error] [pid 52460:tid 52479] [client 20.63.97.65:65279] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaK_0LLWOogAgHGh62TpjAAAAZA"]
[Sat Feb 28 18:13:37.124908 2026] [:error] [pid 52460:tid 52483] [client 20.63.97.65:65221] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaK_0bLWOogAgHGh62TplgAAAZQ"]
[Sat Feb 28 18:13:37.558596 2026] [:error] [pid 52460:tid 52484] [client 20.63.97.65:65275] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaK_0bLWOogAgHGh62TpoAAAAZU"]
[Sat Feb 28 18:13:37.976662 2026] [:error] [pid 52460:tid 52479] [client 20.63.97.65:65274] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaK_0bLWOogAgHGh62TppgAAAZA"]
[Sat Feb 28 18:13:38.435554 2026] [:error] [pid 39183:tid 39215] [client 20.63.97.65:63159] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaK_0hCf4HvhVePw3LZweAAAABc"]
[Sat Feb 28 18:13:38.885444 2026] [:error] [pid 39183:tid 39214] [client 20.63.97.65:63143] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaK_0hCf4HvhVePw3LZwggAAABY"]
[Sat Feb 28 18:13:39.308670 2026] [:error] [pid 39183:tid 39206] [client 20.63.97.65:63118] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaK_0xCf4HvhVePw3LZwhgAAAA4"]
[Sat Feb 28 18:13:39.720462 2026] [:error] [pid 52460:tid 52475] [client 20.63.97.65:53956] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaK_07LWOogAgHGh62TptwAAAYw"]
[Sat Feb 28 18:13:40.142445 2026] [:error] [pid 52460:tid 52479] [client 20.63.97.65:53987] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaK_1LLWOogAgHGh62TpvAAAAZA"]
[Sat Feb 28 18:13:40.585331 2026] [:error] [pid 49763:tid 49775] [client 20.63.97.65:63178] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaK_1LTHSOG_yf2PpqFHzAAAAck"]
[Sat Feb 28 18:13:41.024512 2026] [:error] [pid 39292:tid 39316] [client 20.63.97.65:63215] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaK_1aIAO5fN7BxyqcE8SQAAANY"]
[Sat Feb 28 18:13:41.437790 2026] [:error] [pid 49763:tid 49783] [client 20.63.97.65:53961] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaK_1bTHSOG_yf2PpqFH0QAAAdE"]
[Sat Feb 28 18:13:41.860534 2026] [:error] [pid 11791:tid 11796] [client 20.63.97.65:63121] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaK_1WuX5e1Q32gqxH2QsQAAAQM"]
[Sat Feb 28 18:13:42.274639 2026] [:error] [pid 39183:tid 39214] [client 20.63.97.65:65247] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaK_1hCf4HvhVePw3LZwmQAAABY"]
[Sat Feb 28 18:13:42.714480 2026] [:error] [pid 39185:tid 39258] [client 20.63.97.65:65184] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaK_1hVE-FfM89u7BQZ6MwAAAIw"]
[Sat Feb 28 18:13:43.139667 2026] [:error] [pid 52460:tid 52471] [client 20.63.97.65:65208] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaK_17LWOogAgHGh62TpxQAAAYg"]
[Sat Feb 28 18:13:43.554802 2026] [:error] [pid 49763:tid 49787] [client 20.63.97.65:63189] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaK_17THSOG_yf2PpqFH2AAAAdU"]
[Sat Feb 28 18:13:43.995590 2026] [:error] [pid 39183:tid 39204] [client 20.63.97.65:63181] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaK_1xCf4HvhVePw3LZwpgAAAAw"]
[Sat Feb 28 18:13:44.436918 2026] [:error] [pid 39183:tid 39200] [client 20.63.97.65:63231] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaK_2BCf4HvhVePw3LZwqgAAAAg"]
[Sat Feb 28 18:13:44.880463 2026] [:error] [pid 49763:tid 49767] [client 20.63.97.65:63183] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaK_2LTHSOG_yf2PpqFH4QAAAcE"]
[Sat Feb 28 18:13:45.305830 2026] [:error] [pid 52460:tid 52481] [client 20.63.97.65:63203] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaK_2bLWOogAgHGh62TpyAAAAZI"]
[Sat Feb 28 18:13:45.876961 2026] [:error] [pid 52460:tid 52477] [client 20.63.97.65:53970] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaK_2bLWOogAgHGh62TpygAAAY4"]
[Sat Feb 28 18:13:46.296122 2026] [:error] [pid 39183:tid 39194] [client 20.63.97.65:63145] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaK_2hCf4HvhVePw3LZwrwAAAAI"]
[Sat Feb 28 18:13:46.715584 2026] [:error] [pid 39183:tid 39202] [client 20.63.97.65:65189] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaK_2hCf4HvhVePw3LZwswAAAAo"]
[Sat Feb 28 18:13:47.137835 2026] [:error] [pid 52460:tid 52472] [client 20.63.97.65:53894] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aaK_27LWOogAgHGh62Tp0gAAAYk"]
[Sat Feb 28 18:13:47.563474 2026] [:error] [pid 52460:tid 52481] [client 20.63.97.65:65229] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aaK_27LWOogAgHGh62Tp2gAAAZI"]
[Sat Feb 28 18:13:47.991264 2026] [:error] [pid 49763:tid 49788] [client 20.63.97.65:63223] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aaK_27THSOG_yf2PpqFH6gAAAdY"]
[Sat Feb 28 18:13:48.458735 2026] [:error] [pid 52460:tid 52476] [client 20.63.97.65:63229] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aaK_3LLWOogAgHGh62Tp4AAAAY0"]
[Sat Feb 28 18:13:48.885784 2026] [:error] [pid 52460:tid 52483] [client 20.63.97.65:52300] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaK_3LLWOogAgHGh62Tp5AAAAZQ"]
[Sat Feb 28 18:13:49.313363 2026] [:error] [pid 39183:tid 39209] [client 20.63.97.65:53984] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaK_3RCf4HvhVePw3LZwuAAAABE"]
[Sat Feb 28 18:13:49.737686 2026] [:error] [pid 49763:tid 49766] [client 20.63.97.65:63147] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaK_3bTHSOG_yf2PpqFH7gAAAcA"]
[Sat Feb 28 18:13:50.170911 2026] [:error] [pid 52460:tid 52479] [client 20.63.97.65:53917] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaK_3rLWOogAgHGh62Tp7wAAAZA"]
[Sat Feb 28 18:13:50.600053 2026] [:error] [pid 52460:tid 52465] [client 20.63.97.65:63160] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aaK_3rLWOogAgHGh62Tp8wAAAYI"]
[Sat Feb 28 18:13:51.018670 2026] [:error] [pid 52460:tid 52476] [client 20.63.97.65:53897] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aaK_37LWOogAgHGh62Tp-AAAAY0"]
[Sat Feb 28 18:13:51.463975 2026] [:error] [pid 39184:tid 39228] [client 20.63.97.65:54004] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aaK_31tZF9Zd_U7easBa9gAAAEk"]
[Sat Feb 28 18:13:51.912796 2026] [:error] [pid 39292:tid 39295] [client 20.63.97.65:65235] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aaK_36IAO5fN7BxyqcE8TgAAAME"]
[Sat Feb 28 18:13:52.368564 2026] [:error] [pid 22194:tid 22201] [client 20.63.97.65:63132] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaK_4H6mbajs3bzQGyuBkAAAAUU"]
[Sat Feb 28 18:13:52.788609 2026] [:error] [pid 39185:tid 39263] [client 20.63.97.65:63129] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaK_4BVE-FfM89u7BQZ6OQAAAJE"]
[Sat Feb 28 18:13:53.235960 2026] [:error] [pid 39184:tid 39231] [client 20.63.97.65:65272] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaK_4VtZF9Zd_U7easBa_AAAAEw"]
[Sat Feb 28 18:13:53.658930 2026] [:error] [pid 22194:tid 22214] [client 20.63.97.65:63158] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaK_4X6mbajs3bzQGyuBkgAAAVI"]
[Sat Feb 28 18:13:54.110017 2026] [:error] [pid 39184:tid 39232] [client 20.63.97.65:65157] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aaK_4ltZF9Zd_U7easBbAQAAAE0"]
[Sat Feb 28 18:13:54.534326 2026] [:error] [pid 22194:tid 22207] [client 20.63.97.65:63198] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aaK_4n6mbajs3bzQGyuBmwAAAUs"]
[Sat Feb 28 18:13:54.953539 2026] [:error] [pid 22194:tid 22218] [client 20.63.97.65:53942] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aaK_4n6mbajs3bzQGyuBngAAAVY"]
[Sat Feb 28 18:13:55.380929 2026] [:error] [pid 39184:tid 39236] [client 20.63.97.65:53980] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aaK_41tZF9Zd_U7easBbAwAAAFE"]
[Sat Feb 28 18:13:55.800995 2026] [:error] [pid 39184:tid 39228] [client 20.63.97.65:65277] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaK_41tZF9Zd_U7easBbBAAAAEk"]
[Sat Feb 28 18:13:56.277765 2026] [:error] [pid 11791:tid 11817] [client 20.63.97.65:63162] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaK_5GuX5e1Q32gqxH2QxwAAARg"]
[Sat Feb 28 18:13:56.721936 2026] [:error] [pid 52460:tid 52487] [client 20.63.97.65:63186] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaK_5LLWOogAgHGh62Tp_wAAAZg"]
[Sat Feb 28 18:13:57.161219 2026] [:error] [pid 39183:tid 39193] [client 20.63.97.65:63128] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaK_5RCf4HvhVePw3LZwxAAAAAE"]
[Sat Feb 28 18:13:57.626153 2026] [:error] [pid 49763:tid 49767] [client 20.63.97.65:63206] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaK_5bTHSOG_yf2PpqFH_wAAAcE"]
[Sat Feb 28 18:13:58.050935 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:63175] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaK_5rLWOogAgHGh62TqAgAAAYU"]
[Sat Feb 28 18:13:58.474042 2026] [:error] [pid 52460:tid 52465] [client 20.63.97.65:63138] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaK_5rLWOogAgHGh62TqAwAAAYI"]
[Sat Feb 28 18:13:58.890845 2026] [:error] [pid 52460:tid 52475] [client 20.63.97.65:53969] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaK_5rLWOogAgHGh62TqCAAAAYw"]
[Sat Feb 28 18:13:59.318857 2026] [:error] [pid 39183:tid 39198] [client 20.63.97.65:53924] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaK_5xCf4HvhVePw3LZwzAAAAAY"]
[Sat Feb 28 18:13:59.750065 2026] [:error] [pid 39185:tid 39263] [client 20.63.97.65:53962] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaK_5xVE-FfM89u7BQZ6SwAAAJE"]
[Sat Feb 28 18:14:00.170574 2026] [:error] [pid 52460:tid 52479] [client 20.63.97.65:53967] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaK_6LLWOogAgHGh62TqDwAAAZA"]
[Sat Feb 28 18:14:00.594865 2026] [:error] [pid 49763:tid 49775] [client 20.63.97.65:54007] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaK_6LTHSOG_yf2PpqFIDAAAAck"]
[Sat Feb 28 18:14:01.012785 2026] [:error] [pid 39292:tid 39303] [client 20.63.97.65:63219] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaK_6aIAO5fN7BxyqcE8dwAAAMk"]
[Sat Feb 28 18:14:01.429625 2026] [:error] [pid 39183:tid 39215] [client 20.63.97.65:63184] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaK_6RCf4HvhVePw3LZw0QAAABc"]
[Sat Feb 28 18:14:01.841126 2026] [:error] [pid 39292:tid 39302] [client 20.63.97.65:65166] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaK_6aIAO5fN7BxyqcE8fQAAAMg"]
[Sat Feb 28 18:14:02.258713 2026] [:error] [pid 39183:tid 39196] [client 20.63.97.65:65240] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaK_6hCf4HvhVePw3LZw1AAAAAQ"]
[Sat Feb 28 18:14:02.677099 2026] [:error] [pid 39184:tid 39238] [client 20.63.97.65:52289] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaK_6ltZF9Zd_U7easBbCwAAAFM"]
[Sat Feb 28 18:14:03.089723 2026] [:error] [pid 22194:tid 22218] [client 20.63.97.65:65170] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaK_636mbajs3bzQGyuBtAAAAVY"]
[Sat Feb 28 18:14:03.533948 2026] [:error] [pid 11791:tid 11802] [client 20.63.97.65:54008] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaK_62uX5e1Q32gqxH2Q0wAAAQk"]
[Sat Feb 28 18:14:03.964195 2026] [:error] [pid 52460:tid 52483] [client 20.63.97.65:63105] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaK_67LWOogAgHGh62TqIgAAAZQ"]
[Sat Feb 28 18:14:04.378760 2026] [:error] [pid 52460:tid 52471] [client 20.63.97.65:63153] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aaK_7LLWOogAgHGh62TqJwAAAYg"]
[Sat Feb 28 18:14:04.821345 2026] [:error] [pid 52460:tid 52475] [client 20.63.97.65:63172] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aaK_7LLWOogAgHGh62TqKwAAAYw"]
[Sat Feb 28 18:14:05.244540 2026] [:error] [pid 52460:tid 52476] [client 20.63.97.65:63148] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aaK_7bLWOogAgHGh62TqMQAAAY0"]
[Sat Feb 28 18:14:05.677519 2026] [:error] [pid 52460:tid 52478] [client 20.63.97.65:63142] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aaK_7bLWOogAgHGh62TqNQAAAY8"]
[Sat Feb 28 18:14:06.099028 2026] [:error] [pid 39292:tid 39295] [client 20.63.97.65:63111] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aaK_7qIAO5fN7BxyqcE8iAAAAME"]
[Sat Feb 28 18:14:06.520397 2026] [:error] [pid 52460:tid 52464] [client 20.63.97.65:63204] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aaK_7rLWOogAgHGh62TqQAAAAYE"]
[Sat Feb 28 18:14:06.946414 2026] [:error] [pid 52460:tid 52485] [client 20.63.97.65:54003] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aaK_7rLWOogAgHGh62TqRwAAAZY"]
[Sat Feb 28 18:14:07.367595 2026] [:error] [pid 52460:tid 52477] [client 20.63.97.65:53963] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aaK_77LWOogAgHGh62TqSwAAAY4"]
[Sat Feb 28 18:14:07.806167 2026] [:error] [pid 49763:tid 49778] [client 20.63.97.65:53952] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaK_77THSOG_yf2PpqFIGAAAAcw"]
[Sat Feb 28 18:14:08.221956 2026] [:error] [pid 39183:tid 39201] [client 20.63.97.65:65183] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaK_8BCf4HvhVePw3LZw5QAAAAk"]
[Sat Feb 28 18:14:08.648193 2026] [:error] [pid 39184:tid 39220] [client 20.63.97.65:63146] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaK_8FtZF9Zd_U7easBbGAAAAEE"]
[Sat Feb 28 18:14:09.164729 2026] [:error] [pid 39184:tid 39232] [client 20.63.97.65:65250] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaK_8VtZF9Zd_U7easBbHAAAAE0"]
[Sat Feb 28 18:14:09.599586 2026] [:error] [pid 39292:tid 39316] [client 20.63.97.65:63125] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaK_8aIAO5fN7BxyqcE8kwAAANY"]
[Sat Feb 28 18:14:10.059332 2026] [:error] [pid 39184:tid 39237] [client 20.63.97.65:65238] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaK_8ltZF9Zd_U7easBbIAAAAFI"]
[Sat Feb 28 18:14:10.525645 2026] [:error] [pid 39184:tid 39223] [client 20.63.97.65:63176] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaK_8ltZF9Zd_U7easBbIQAAAEQ"]
[Sat Feb 28 18:14:10.966348 2026] [:error] [pid 49763:tid 49779] [client 20.63.97.65:65196] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaK_8rTHSOG_yf2PpqFIIQAAAc0"]
[Sat Feb 28 18:14:11.388912 2026] [:error] [pid 39183:tid 39200] [client 20.63.97.65:54015] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaK_8xCf4HvhVePw3LZw7gAAAAg"]
[Sat Feb 28 18:14:11.894504 2026] [:error] [pid 49763:tid 49786] [client 20.63.97.65:63168] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaK_87THSOG_yf2PpqFIJwAAAdQ"]
[Sat Feb 28 18:14:12.346700 2026] [:error] [pid 39183:tid 39210] [client 20.63.97.65:53960] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaK_9BCf4HvhVePw3LZw8wAAABI"]
[Sat Feb 28 18:14:12.854951 2026] [:error] [pid 39292:tid 39295] [client 20.63.97.65:65261] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaK_9KIAO5fN7BxyqcE8ngAAAME"]
[Sat Feb 28 18:14:13.272464 2026] [:error] [pid 39292:tid 39296] [client 20.63.97.65:63135] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaK_9aIAO5fN7BxyqcE8oAAAAMI"]
[Sat Feb 28 18:14:13.713835 2026] [:error] [pid 52460:tid 52465] [client 20.63.97.65:53946] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaK_9bLWOogAgHGh62TqZAAAAYI"]
[Sat Feb 28 18:14:14.134776 2026] [:error] [pid 49763:tid 49783] [client 20.63.97.65:54010] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaK_9rTHSOG_yf2PpqFILQAAAdE"]
[Sat Feb 28 18:14:14.588215 2026] [:error] [pid 49763:tid 49771] [client 20.63.97.65:52301] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaK_9rTHSOG_yf2PpqFIMAAAAcU"]
[Sat Feb 28 18:14:15.031629 2026] [:error] [pid 49763:tid 49782] [client 20.63.97.65:53993] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaK_97THSOG_yf2PpqFINwAAAdA"]
[Sat Feb 28 18:14:15.451687 2026] [:error] [pid 39184:tid 39219] [client 20.63.97.65:63123] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaK_91tZF9Zd_U7easBbKgAAAEA"]
[Sat Feb 28 18:14:15.888562 2026] [:error] [pid 39184:tid 39224] [client 20.63.97.65:53965] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaK_91tZF9Zd_U7easBbLQAAAEU"]
[Sat Feb 28 18:14:16.324004 2026] [:error] [pid 39183:tid 39210] [client 20.63.97.65:63154] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaK_-BCf4HvhVePw3LZxBwAAABI"]
[Sat Feb 28 18:14:16.739932 2026] [:error] [pid 11791:tid 11808] [client 20.63.97.65:53972] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaK_-GuX5e1Q32gqxH2Q2gAAAQ8"]
[Sat Feb 28 18:14:17.159491 2026] [:error] [pid 52460:tid 52473] [client 20.63.97.65:63119] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaK_-bLWOogAgHGh62TqcwAAAYo"]
[Sat Feb 28 18:14:17.588065 2026] [:error] [pid 22194:tid 22215] [client 20.63.97.65:63217] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaK_-X6mbajs3bzQGyuBuQAAAVM"]
[Sat Feb 28 18:14:18.053623 2026] [:error] [pid 39183:tid 39215] [client 20.63.97.65:53981] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaK_-hCf4HvhVePw3LZxCwAAABc"]
[Sat Feb 28 18:14:18.482750 2026] [:error] [pid 39183:tid 39211] [client 20.63.97.65:63207] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaK_-hCf4HvhVePw3LZxDwAAABM"]
[Sat Feb 28 18:14:18.930018 2026] [:error] [pid 39292:tid 39300] [client 20.63.97.65:52311] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaK_-qIAO5fN7BxyqcE8sQAAAMY"]
[Sat Feb 28 18:14:19.394844 2026] [:error] [pid 11791:tid 11801] [client 20.63.97.65:63166] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaK_-2uX5e1Q32gqxH2Q3gAAAQg"]
[Sat Feb 28 18:14:19.822528 2026] [:error] [pid 39184:tid 39242] [client 20.63.97.65:63142] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaK_-1tZF9Zd_U7easBbMQAAAFc"]
[Sat Feb 28 18:14:20.247199 2026] [:error] [pid 39292:tid 39295] [client 20.63.97.65:65153] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaK__KIAO5fN7BxyqcE8tQAAAME"]
[Sat Feb 28 18:14:20.668093 2026] [:error] [pid 49763:tid 49790] [client 20.63.97.65:63143] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaK__LTHSOG_yf2PpqFIRQAAAdg"]
[Sat Feb 28 18:14:21.098130 2026] [:error] [pid 49763:tid 49776] [client 20.63.97.65:63209] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaK__bTHSOG_yf2PpqFIRwAAAco"]
[Sat Feb 28 18:14:21.521406 2026] [:error] [pid 39183:tid 39206] [client 20.63.97.65:53910] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaK__RCf4HvhVePw3LZxHQAAAA4"]
[Sat Feb 28 18:14:21.959834 2026] [:error] [pid 49763:tid 49788] [client 20.63.97.65:54012] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aaK__bTHSOG_yf2PpqFISgAAAdY"]
[Sat Feb 28 18:14:22.400199 2026] [:error] [pid 39184:tid 39220] [client 20.63.97.65:53913] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aaK__ltZF9Zd_U7easBbOgAAAEE"]
[Sat Feb 28 18:14:22.810989 2026] [:error] [pid 49763:tid 49789] [client 20.63.97.65:53938] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aaK__rTHSOG_yf2PpqFITQAAAdc"]
[Sat Feb 28 18:14:30.671304 2026] [:error] [pid 49763:tid 49790] [client 20.63.97.65:53896] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aaLABrTHSOG_yf2PpqFIagAAAdg"]
[Sat Feb 28 18:14:31.090646 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:63174] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aaLAB7LWOogAgHGh62TqugAAAYU"]
[Sat Feb 28 18:14:31.510012 2026] [:error] [pid 52460:tid 52479] [client 20.63.97.65:53986] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aaLAB7LWOogAgHGh62TqxQAAAZA"]
[Sat Feb 28 18:14:31.923020 2026] [:error] [pid 39185:tid 39260] [client 20.63.97.65:65163] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aaLABxVE-FfM89u7BQZ6WwAAAI4"]
[Sat Feb 28 18:14:32.342216 2026] [:error] [pid 49763:tid 49777] [client 20.63.97.65:52258] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLACLTHSOG_yf2PpqFIbQAAAcs"]
[Sat Feb 28 18:14:32.777549 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:54009] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLACLLWOogAgHGh62TqzwAAAYU"]
[Sat Feb 28 18:14:33.202993 2026] [:error] [pid 52460:tid 52481] [client 20.63.97.65:53973] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLACbLWOogAgHGh62Tq0wAAAZI"]
[Sat Feb 28 18:14:33.625059 2026] [:error] [pid 52460:tid 52476] [client 20.63.97.65:53953] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLACbLWOogAgHGh62Tq2QAAAY0"]
[Sat Feb 28 18:14:34.055750 2026] [:error] [pid 52460:tid 52471] [client 20.63.97.65:54013] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w4.php"] [unique_id "aaLACrLWOogAgHGh62Tq3AAAAYg"]
[Sat Feb 28 18:14:34.504426 2026] [:error] [pid 39183:tid 39202] [client 20.63.97.65:53994] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w4.php"] [unique_id "aaLAChCf4HvhVePw3LZxYQAAAAo"]
[Sat Feb 28 18:14:34.969147 2026] [:error] [pid 49763:tid 49789] [client 20.63.97.65:65179] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w4.php"] [unique_id "aaLACrTHSOG_yf2PpqFIdAAAAdc"]
[Sat Feb 28 18:14:35.388221 2026] [:error] [pid 49763:tid 49767] [client 20.63.97.65:54001] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w4.php"] [unique_id "aaLAC7THSOG_yf2PpqFIdwAAAcE"]
[Sat Feb 28 18:14:35.815130 2026] [:error] [pid 39292:tid 39294] [client 20.63.97.65:63133] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLAC6IAO5fN7BxyqcE84QAAAMA"]
[Sat Feb 28 18:14:36.239212 2026] [:error] [pid 39185:tid 39261] [client 20.63.97.65:53971] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLADBVE-FfM89u7BQZ6XQAAAI8"]
[Sat Feb 28 18:14:36.705620 2026] [:error] [pid 49763:tid 49778] [client 20.63.97.65:52348] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLADLTHSOG_yf2PpqFIfgAAAcw"]
[Sat Feb 28 18:14:37.132892 2026] [:error] [pid 49763:tid 49776] [client 20.63.97.65:52339] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLADbTHSOG_yf2PpqFIgwAAAco"]
[Sat Feb 28 18:14:37.570817 2026] [:error] [pid 49763:tid 49789] [client 20.63.97.65:53995] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaLADbTHSOG_yf2PpqFIhgAAAdc"]
[Sat Feb 28 18:14:37.985766 2026] [:error] [pid 49763:tid 49785] [client 20.63.97.65:65217] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaLADbTHSOG_yf2PpqFIiAAAAdM"]
[Sat Feb 28 18:14:38.397885 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:65243] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaLADrLWOogAgHGh62Tq6AAAAYU"]
[Sat Feb 28 18:14:38.842341 2026] [:error] [pid 39183:tid 39202] [client 20.63.97.65:53900] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaLADhCf4HvhVePw3LZxcQAAAAo"]
[Sat Feb 28 18:14:39.305623 2026] [:error] [pid 49763:tid 49774] [client 20.63.97.65:53906] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaLAD7THSOG_yf2PpqFIkwAAAcg"]
[Sat Feb 28 18:14:39.723291 2026] [:error] [pid 52460:tid 52466] [client 20.63.97.65:54014] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaLAD7LWOogAgHGh62Tq6wAAAYM"]
[Sat Feb 28 18:14:40.142476 2026] [:error] [pid 52460:tid 52463] [client 20.63.97.65:53931] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaLAELLWOogAgHGh62Tq7QAAAYA"]
[Sat Feb 28 18:14:40.567907 2026] [:error] [pid 52460:tid 52478] [client 20.63.97.65:53929] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaLAELLWOogAgHGh62Tq8AAAAY8"]
[Sat Feb 28 18:14:41.055958 2026] [:error] [pid 52460:tid 52485] [client 20.63.97.65:63149] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymn.php"] [unique_id "aaLAEbLWOogAgHGh62Tq9AAAAZY"]
[Sat Feb 28 18:14:41.485244 2026] [:error] [pid 52460:tid 52469] [client 20.63.97.65:63218] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymn.php"] [unique_id "aaLAEbLWOogAgHGh62Tq-AAAAYY"]
[Sat Feb 28 18:14:41.947625 2026] [:error] [pid 52460:tid 52470] [client 20.63.97.65:53907] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymn.php"] [unique_id "aaLAEbLWOogAgHGh62Tq-gAAAYc"]
[Sat Feb 28 18:14:42.380774 2026] [:error] [pid 49763:tid 49777] [client 20.63.97.65:63187] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymn.php"] [unique_id "aaLAErTHSOG_yf2PpqFInQAAAcs"]
[Sat Feb 28 18:14:42.808452 2026] [:error] [pid 11791:tid 11814] [client 20.63.97.65:53978] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaLAEmuX5e1Q32gqxH2REgAAARU"]
[Sat Feb 28 18:14:43.255787 2026] [:error] [pid 39184:tid 39242] [client 20.63.97.65:53990] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaLAE1tZF9Zd_U7easBbdwAAAFc"]
[Sat Feb 28 18:14:43.677811 2026] [:error] [pid 22194:tid 22215] [client 20.63.97.65:54002] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaLAE36mbajs3bzQGyuBzAAAAVM"]
[Sat Feb 28 18:14:44.110560 2026] [:error] [pid 11791:tid 11805] [client 20.63.97.65:53982] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaLAFGuX5e1Q32gqxH2RHQAAAQw"]
[Sat Feb 28 18:14:44.535609 2026] [:error] [pid 52460:tid 52487] [client 20.63.97.65:53891] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLAFLLWOogAgHGh62Tq_wAAAZg"]
[Sat Feb 28 18:14:44.959331 2026] [:error] [pid 52460:tid 52478] [client 20.63.97.65:52288] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLAFLLWOogAgHGh62TrAAAAAY8"]
[Sat Feb 28 18:14:45.373169 2026] [:error] [pid 52460:tid 52474] [client 20.63.97.65:52296] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLAFbLWOogAgHGh62TrAwAAAYs"]
[Sat Feb 28 18:14:45.783272 2026] [:error] [pid 52460:tid 52486] [client 20.63.97.65:53914] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLAFbLWOogAgHGh62TrCQAAAZc"]
[Sat Feb 28 18:14:46.200313 2026] [:error] [pid 52460:tid 52476] [client 20.63.97.65:53954] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aaLAFrLWOogAgHGh62TrEAAAAY0"]
[Sat Feb 28 18:14:46.615428 2026] [:error] [pid 52460:tid 52478] [client 20.63.97.65:53957] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aaLAFrLWOogAgHGh62TrFAAAAY8"]
[Sat Feb 28 18:14:47.029003 2026] [:error] [pid 11791:tid 11809] [client 20.63.97.65:63216] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aaLAF2uX5e1Q32gqxH2RJQAAARA"]
[Sat Feb 28 18:14:47.441459 2026] [:error] [pid 52460:tid 52467] [client 20.63.97.65:63122] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aaLAF7LWOogAgHGh62TrHAAAAYQ"]
[Sat Feb 28 18:14:47.859816 2026] [:error] [pid 39292:tid 39301] [client 20.63.97.65:52304] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaLAF6IAO5fN7BxyqcE8-AAAAMc"]
[Sat Feb 28 18:14:48.285437 2026] [:error] [pid 11791:tid 11811] [client 20.63.97.65:52320] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaLAGGuX5e1Q32gqxH2RKQAAARI"]
[Sat Feb 28 18:14:48.700950 2026] [:error] [pid 52460:tid 52475] [client 20.63.97.65:65260] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaLAGLLWOogAgHGh62TrKAAAAYw"]
[Sat Feb 28 18:14:49.123316 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:63116] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaLAGbLWOogAgHGh62TrLAAAAYU"]
[Sat Feb 28 18:14:49.535466 2026] [:error] [pid 52460:tid 52485] [client 20.63.97.65:53915] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLAGbLWOogAgHGh62TrMgAAAZY"]
[Sat Feb 28 18:14:49.954150 2026] [:error] [pid 52460:tid 52481] [client 20.63.97.65:53889] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLAGbLWOogAgHGh62TrNgAAAZI"]
[Sat Feb 28 18:14:50.376777 2026] [:error] [pid 39183:tid 39204] [client 20.63.97.65:53959] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLAGhCf4HvhVePw3LZxfgAAAAw"]
[Sat Feb 28 18:14:50.799715 2026] [:error] [pid 39184:tid 39221] [client 20.63.97.65:53890] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLAGltZF9Zd_U7easBbhgAAAEI"]
[Sat Feb 28 18:14:51.235222 2026] [:error] [pid 39184:tid 39228] [client 20.63.97.65:52303] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaLAG1tZF9Zd_U7easBbiAAAAEk"]
[Sat Feb 28 18:14:51.646652 2026] [:error] [pid 39292:tid 39302] [client 20.63.97.65:63169] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaLAG6IAO5fN7BxyqcE9AQAAAMg"]
[Sat Feb 28 18:14:52.066749 2026] [:error] [pid 39292:tid 39316] [client 20.63.97.65:53985] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaLAHKIAO5fN7BxyqcE9BQAAANY"]
[Sat Feb 28 18:14:52.485859 2026] [:error] [pid 39292:tid 39300] [client 20.63.97.65:53975] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaLAHKIAO5fN7BxyqcE9CAAAAMY"]
[Sat Feb 28 18:14:52.895731 2026] [:error] [pid 39292:tid 39298] [client 20.63.97.65:63228] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaLAHKIAO5fN7BxyqcE9DAAAAMQ"]
[Sat Feb 28 18:14:53.333998 2026] [:error] [pid 49763:tid 49780] [client 20.63.97.65:53905] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaLAHbTHSOG_yf2PpqFIyAAAAc4"]
[Sat Feb 28 18:14:53.752169 2026] [:error] [pid 39184:tid 39230] [client 20.63.97.65:53934] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaLAHVtZF9Zd_U7easBbkgAAAEs"]
[Sat Feb 28 18:14:54.176919 2026] [:error] [pid 22194:tid 22202] [client 20.63.97.65:63197] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaLAHn6mbajs3bzQGyuB0AAAAUY"]
[Sat Feb 28 18:14:54.606699 2026] [:error] [pid 22194:tid 22205] [client 20.63.97.65:53912] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaLAHn6mbajs3bzQGyuB0gAAAUk"]
[Sat Feb 28 18:14:55.019667 2026] [:error] [pid 22194:tid 22206] [client 20.63.97.65:54000] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaLAH36mbajs3bzQGyuB1AAAAUo"]
[Sat Feb 28 18:14:55.442804 2026] [:error] [pid 22194:tid 22207] [client 20.63.97.65:53996] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaLAH36mbajs3bzQGyuB1QAAAUs"]
[Sat Feb 28 18:14:55.850877 2026] [:error] [pid 22194:tid 22199] [client 20.63.97.65:53903] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaLAH36mbajs3bzQGyuB1wAAAUM"]
[Sat Feb 28 18:14:56.259257 2026] [:error] [pid 39183:tid 39207] [client 20.63.97.65:63110] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aaLAIBCf4HvhVePw3LZxjQAAAA8"]
[Sat Feb 28 18:14:56.675821 2026] [:error] [pid 39183:tid 39205] [client 20.63.97.65:53940] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aaLAIBCf4HvhVePw3LZxkwAAAA0"]
[Sat Feb 28 18:14:57.093888 2026] [:error] [pid 49763:tid 49771] [client 20.63.97.65:53977] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aaLAIbTHSOG_yf2PpqFI1gAAAcU"]
[Sat Feb 28 18:14:57.509951 2026] [:error] [pid 11791:tid 11807] [client 20.63.97.65:53925] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aaLAIWuX5e1Q32gqxH2RVgAAAQ4"]
[Sat Feb 28 18:14:57.925150 2026] [:error] [pid 11791:tid 11814] [client 20.63.97.65:63156] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aaLAIWuX5e1Q32gqxH2RWAAAARU"]
[Sat Feb 28 18:14:58.339957 2026] [:error] [pid 39184:tid 39230] [client 20.63.97.65:53927] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aaLAIltZF9Zd_U7easBbpAAAAEs"]
[Sat Feb 28 18:14:58.754649 2026] [:error] [pid 39183:tid 39205] [client 20.63.97.65:63157] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aaLAIhCf4HvhVePw3LZxpgAAAA0"]
[Sat Feb 28 18:14:59.172248 2026] [:error] [pid 39184:tid 39227] [client 20.63.97.65:52323] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aaLAI1tZF9Zd_U7easBbpQAAAEg"]
[Sat Feb 28 18:14:59.594408 2026] [:error] [pid 49763:tid 49790] [client 20.63.97.65:63167] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aaLAI7THSOG_yf2PpqFI4gAAAdg"]
[Sat Feb 28 18:15:00.007999 2026] [:error] [pid 49763:tid 49783] [client 20.63.97.65:53932] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aaLAJLTHSOG_yf2PpqFI5gAAAdE"]
[Sat Feb 28 18:15:00.419335 2026] [:error] [pid 49763:tid 49778] [client 20.63.97.65:52233] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aaLAJLTHSOG_yf2PpqFI7gAAAcw"]
[Sat Feb 28 18:15:00.852939 2026] [:error] [pid 39183:tid 39213] [client 20.63.97.65:52321] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aaLAJBCf4HvhVePw3LZxuwAAABU"]
[Sat Feb 28 18:15:01.268409 2026] [:error] [pid 52460:tid 52470] [client 20.63.97.65:65273] [client 20.63.97.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaLAJbLWOogAgHGh62TrRQAAAYc"]
[Sat Feb 28 18:15:01.693521 2026] [:error] [pid 22194:tid 22200] [client 20.63.97.65:52228] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaLAJX6mbajs3bzQGyuB2wAAAUQ"]
[Sat Feb 28 18:15:02.113723 2026] [:error] [pid 11791:tid 11796] [client 20.63.97.65:53949] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaLAJmuX5e1Q32gqxH2RYQAAAQM"]
[Sat Feb 28 18:15:02.538405 2026] [:error] [pid 49763:tid 49781] [client 20.63.97.65:53892] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaLAJrTHSOG_yf2PpqFI9wAAAc8"]
[Sat Feb 28 18:15:02.964919 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:53998] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaLAJrLWOogAgHGh62TrSQAAAYU"]
[Sat Feb 28 18:15:03.377148 2026] [:error] [pid 52460:tid 52482] [client 20.63.97.65:65252] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aaLAJ7LWOogAgHGh62TrTgAAAZM"]
[Sat Feb 28 18:15:03.791125 2026] [:error] [pid 39184:tid 39222] [client 20.63.97.65:52290] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aaLAJ1tZF9Zd_U7easBbtQAAAEM"]
[Sat Feb 28 18:15:04.218836 2026] [:error] [pid 39184:tid 39229] [client 20.63.97.65:52229] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aaLAKFtZF9Zd_U7easBbtwAAAEo"]
[Sat Feb 28 18:15:04.631583 2026] [:error] [pid 39183:tid 39204] [client 20.63.97.65:52347] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aaLAKBCf4HvhVePw3LZxxgAAAAw"]
[Sat Feb 28 18:15:05.066068 2026] [:error] [pid 49763:tid 49786] [client 20.63.97.65:52315] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aaLAKbTHSOG_yf2PpqFJCgAAAdQ"]
[Sat Feb 28 18:15:05.479180 2026] [:error] [pid 49763:tid 49771] [client 20.63.97.65:53936] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aaLAKbTHSOG_yf2PpqFJDwAAAcU"]
[Sat Feb 28 18:15:05.894475 2026] [:error] [pid 52460:tid 52487] [client 20.63.97.65:53911] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aaLAKbLWOogAgHGh62TrVgAAAZg"]
[Sat Feb 28 18:15:06.339568 2026] [:error] [pid 52460:tid 52466] [client 20.63.97.65:52344] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aaLAKrLWOogAgHGh62TrWwAAAYM"]
[Sat Feb 28 18:15:06.772458 2026] [:error] [pid 49763:tid 49766] [client 20.63.97.65:53908] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaLAKrTHSOG_yf2PpqFJGAAAAcA"]
[Sat Feb 28 18:15:07.185854 2026] [:error] [pid 49763:tid 49783] [client 20.63.97.65:52327] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaLAK7THSOG_yf2PpqFJHAAAAdE"]
[Sat Feb 28 18:15:07.594707 2026] [:error] [pid 52460:tid 52464] [client 20.63.97.65:52350] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaLAK7LWOogAgHGh62TrYQAAAYE"]
[Sat Feb 28 18:15:08.015531 2026] [:error] [pid 39183:tid 39208] [client 20.63.97.65:52335] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaLALBCf4HvhVePw3LZx0QAAABA"]
[Sat Feb 28 18:15:08.425816 2026] [:error] [pid 52460:tid 52466] [client 20.63.97.65:53888] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLALLLWOogAgHGh62TraQAAAYM"]
[Sat Feb 28 18:15:08.866977 2026] [:error] [pid 52460:tid 52486] [client 20.63.97.65:63117] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLALLLWOogAgHGh62TrbQAAAZc"]
[Sat Feb 28 18:15:09.290255 2026] [:error] [pid 52460:tid 52478] [client 20.63.97.65:53992] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLALbLWOogAgHGh62TrcAAAAY8"]
[Sat Feb 28 18:15:09.705849 2026] [:error] [pid 52460:tid 52476] [client 20.63.97.65:52319] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLALbLWOogAgHGh62TrdwAAAY0"]
[Sat Feb 28 18:15:10.135739 2026] [:error] [pid 39183:tid 39195] [client 20.63.97.65:53991] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaLALhCf4HvhVePw3LZx1AAAAAM"]
[Sat Feb 28 18:15:10.551850 2026] [:error] [pid 39184:tid 39237] [client 20.63.97.65:52251] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaLALltZF9Zd_U7easBbyAAAAFI"]
[Sat Feb 28 18:15:10.970361 2026] [:error] [pid 39184:tid 39226] [client 20.63.97.65:52324] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaLALltZF9Zd_U7easBbyQAAAEc"]
[Sat Feb 28 18:15:11.388964 2026] [:error] [pid 39184:tid 39232] [client 20.63.97.65:53964] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "aaLAL1tZF9Zd_U7easBb0AAAAE0"]
[Sat Feb 28 18:15:11.824278 2026] [:error] [pid 39184:tid 39239] [client 20.63.97.65:4558] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaLAL1tZF9Zd_U7easBb1AAAAFQ"]
[Sat Feb 28 18:15:12.261406 2026] [:error] [pid 39184:tid 39241] [client 20.63.97.65:52351] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaLAMFtZF9Zd_U7easBb1gAAAFY"]
[Sat Feb 28 18:15:12.686900 2026] [:error] [pid 39183:tid 39204] [client 20.63.97.65:63165] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaLAMBCf4HvhVePw3LZx1wAAAAw"]
[Sat Feb 28 18:15:13.121660 2026] [:error] [pid 52460:tid 52473] [client 20.63.97.65:52248] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaLAMbLWOogAgHGh62TrigAAAYo"]
[Sat Feb 28 18:15:13.542421 2026] [:error] [pid 52460:tid 52480] [client 20.63.97.65:53937] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaLAMbLWOogAgHGh62TrkwAAAZE"]
[Sat Feb 28 18:15:13.963293 2026] [:error] [pid 52460:tid 52483] [client 20.63.97.65:5074] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaLAMbLWOogAgHGh62TrmAAAAZQ"]
[Sat Feb 28 18:15:14.386006 2026] [:error] [pid 52460:tid 52486] [client 20.63.97.65:53899] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaLAMrLWOogAgHGh62TrnAAAAZc"]
[Sat Feb 28 18:15:14.808070 2026] [:error] [pid 52460:tid 52464] [client 20.63.97.65:52247] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaLAMrLWOogAgHGh62TroQAAAYE"]
[Sat Feb 28 18:15:15.221316 2026] [:error] [pid 52460:tid 52487] [client 20.63.97.65:53898] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLAM7LWOogAgHGh62TrpQAAAZg"]
[Sat Feb 28 18:15:15.640796 2026] [:error] [pid 52460:tid 52479] [client 20.63.97.65:63136] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLAM7LWOogAgHGh62TrqgAAAZA"]
[Sat Feb 28 18:15:16.054180 2026] [:error] [pid 52460:tid 52476] [client 20.63.97.65:53944] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLANLLWOogAgHGh62TrswAAAY0"]
[Sat Feb 28 18:15:16.475643 2026] [:error] [pid 52460:tid 52463] [client 20.63.97.65:53999] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaLANLLWOogAgHGh62TruQAAAYA"]
[Sat Feb 28 18:15:16.893751 2026] [:error] [pid 39184:tid 39238] [client 20.63.97.65:52293] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aaLANFtZF9Zd_U7easBb3QAAAFM"]
[Sat Feb 28 18:15:17.314280 2026] [:error] [pid 39183:tid 39202] [client 20.63.97.65:53997] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aaLANRCf4HvhVePw3LZx3wAAAAo"]
[Sat Feb 28 18:15:17.744608 2026] [:error] [pid 39183:tid 39210] [client 20.63.97.65:52246] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aaLANRCf4HvhVePw3LZx4QAAABI"]
[Sat Feb 28 18:15:18.166185 2026] [:error] [pid 49763:tid 49778] [client 20.63.97.65:52250] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aaLANrTHSOG_yf2PpqFJSQAAAcw"]
[Sat Feb 28 18:15:18.580457 2026] [:error] [pid 52460:tid 52474] [client 20.63.97.65:63107] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaLANrLWOogAgHGh62TrwQAAAYs"]
[Sat Feb 28 18:15:18.989872 2026] [:error] [pid 49763:tid 49774] [client 20.63.97.65:65265] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaLANrTHSOG_yf2PpqFJSgAAAcg"]
[Sat Feb 28 18:15:19.399245 2026] [:error] [pid 39292:tid 39294] [client 20.63.97.65:53935] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaLAN6IAO5fN7BxyqcE9NQAAAMA"]
[Sat Feb 28 18:15:19.813366 2026] [:error] [pid 52460:tid 52476] [client 20.63.97.65:52333] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaLAN7LWOogAgHGh62TryAAAAY0"]
[Sat Feb 28 18:15:20.229350 2026] [:error] [pid 52460:tid 52478] [client 20.63.97.65:53901] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aaLAOLLWOogAgHGh62TrzAAAAY8"]
[Sat Feb 28 18:15:20.648149 2026] [:error] [pid 39184:tid 39230] [client 20.63.97.65:63124] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aaLAOFtZF9Zd_U7easBb6wAAAEs"]
[Sat Feb 28 18:15:21.065847 2026] [:error] [pid 39292:tid 39301] [client 20.63.97.65:52302] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aaLAOaIAO5fN7BxyqcE9NwAAAMc"]
[Sat Feb 28 18:15:21.501523 2026] [:error] [pid 39184:tid 39224] [client 20.63.97.65:4561] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aaLAOVtZF9Zd_U7easBb7gAAAEU"]
[Sat Feb 28 18:15:21.932629 2026] [:error] [pid 52460:tid 52467] [client 20.63.97.65:53941] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "aaLAObLWOogAgHGh62Tr2QAAAYQ"]
[Sat Feb 28 18:15:22.356846 2026] [:error] [pid 39183:tid 39199] [client 20.63.97.65:63151] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "aaLAOhCf4HvhVePw3LZx9wAAAAc"]
[Sat Feb 28 18:15:22.770606 2026] [:error] [pid 39292:tid 39311] [client 20.63.97.65:52306] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "aaLAOqIAO5fN7BxyqcE9OQAAANE"]
[Sat Feb 28 18:15:23.186075 2026] [:error] [pid 52460:tid 52463] [client 20.63.97.65:63212] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "aaLAO7LWOogAgHGh62Tr5AAAAYA"]
[Sat Feb 28 18:15:23.632577 2026] [:error] [pid 52460:tid 52470] [client 20.63.97.65:52297] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aaLAO7LWOogAgHGh62Tr5wAAAYc"]
[Sat Feb 28 18:15:24.045240 2026] [:error] [pid 49763:tid 49774] [client 20.63.97.65:52331] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aaLAPLTHSOG_yf2PpqFJWgAAAcg"]
[Sat Feb 28 18:15:24.474121 2026] [:error] [pid 39184:tid 39243] [client 20.63.97.65:53904] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aaLAPFtZF9Zd_U7easBb8QAAAFg"]
[Sat Feb 28 18:15:24.888658 2026] [:error] [pid 49763:tid 49767] [client 20.63.97.65:63127] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aaLAPLTHSOG_yf2PpqFJXwAAAcE"]
[Sat Feb 28 18:15:25.316219 2026] [:error] [pid 39184:tid 39237] [client 20.63.97.65:52252] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aaLAPVtZF9Zd_U7easBb9AAAAFI"]
[Sat Feb 28 18:15:25.742473 2026] [:error] [pid 52460:tid 52483] [client 20.63.97.65:52240] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aaLAPbLWOogAgHGh62Tr7QAAAZQ"]
[Sat Feb 28 18:15:26.153585 2026] [:error] [pid 39184:tid 39240] [client 20.63.97.65:52307] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aaLAPltZF9Zd_U7easBb9wAAAFU"]
[Sat Feb 28 18:15:26.578735 2026] [:error] [pid 39184:tid 39223] [client 20.63.97.65:52299] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aaLAPltZF9Zd_U7easBb-wAAAEQ"]
[Sat Feb 28 18:15:27.002919 2026] [:error] [pid 52460:tid 52470] [client 20.63.97.65:52265] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aaLAP7LWOogAgHGh62Tr-AAAAYc"]
[Sat Feb 28 18:15:27.419791 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:52249] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aaLAP7LWOogAgHGh62Tr-gAAAYU"]
[Sat Feb 28 18:15:27.872867 2026] [:error] [pid 39183:tid 39208] [client 20.63.97.65:53966] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aaLAPxCf4HvhVePw3LZyCgAAABA"]
[Sat Feb 28 18:15:28.297116 2026] [:error] [pid 11791:tid 11815] [client 20.63.97.65:53922] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aaLAQGuX5e1Q32gqxH2RgwAAARY"]
[Sat Feb 28 18:15:28.742751 2026] [:error] [pid 52460:tid 52474] [client 20.63.97.65:52226] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaLAQLLWOogAgHGh62TsAgAAAYs"]
[Sat Feb 28 18:15:29.167820 2026] [:error] [pid 52460:tid 52466] [client 20.63.97.65:52330] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaLAQbLWOogAgHGh62TsBgAAAYM"]
[Sat Feb 28 18:15:29.586593 2026] [:error] [pid 52460:tid 52474] [client 20.63.97.65:52316] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaLAQbLWOogAgHGh62TsDAAAAYs"]
[Sat Feb 28 18:15:36.729959 2026] [:error] [pid 52460:tid 52485] [client 20.63.97.65:52322] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aaLASLLWOogAgHGh62TsOgAAAZY"]
[Sat Feb 28 18:15:37.145801 2026] [:error] [pid 52460:tid 52469] [client 20.63.97.65:54000] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aaLASbLWOogAgHGh62TsQQAAAYY"]
[Sat Feb 28 18:15:37.562353 2026] [:error] [pid 39185:tid 39247] [client 20.63.97.65:63208] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aaLASRVE-FfM89u7BQZ6dAAAAIE"]
[Sat Feb 28 18:15:37.978045 2026] [:error] [pid 52460:tid 52464] [client 20.63.97.65:52318] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aaLASbLWOogAgHGh62TsSAAAAYE"]
[Sat Feb 28 18:15:38.392313 2026] [:error] [pid 49763:tid 49770] [client 20.63.97.65:52340] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aaLASrTHSOG_yf2PpqFJfwAAAcQ"]
[Sat Feb 28 18:15:38.814188 2026] [:error] [pid 52460:tid 52478] [client 20.63.97.65:52234] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aaLASrLWOogAgHGh62TsVAAAAY8"]
[Sat Feb 28 18:15:39.243215 2026] [:error] [pid 52460:tid 52469] [client 20.63.97.65:52313] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aaLAS7LWOogAgHGh62TsYgAAAYY"]
[Sat Feb 28 18:15:39.657147 2026] [:error] [pid 39184:tid 39240] [client 20.63.97.65:63161] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aaLAS1tZF9Zd_U7easBcHAAAAFU"]
[Sat Feb 28 18:15:40.071826 2026] [:error] [pid 52460:tid 52476] [client 20.63.97.65:52241] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aaLATLLWOogAgHGh62TsmwAAAY0"]
[Sat Feb 28 18:15:40.487172 2026] [:error] [pid 52460:tid 52470] [client 20.63.97.65:52345] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aaLATLLWOogAgHGh62TsnwAAAYc"]
[Sat Feb 28 18:15:40.908607 2026] [:error] [pid 39185:tid 39269] [client 20.63.97.65:52237] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aaLATBVE-FfM89u7BQZ6dwAAAJc"]
[Sat Feb 28 18:15:41.328180 2026] [:error] [pid 52460:tid 52481] [client 20.63.97.65:52310] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aaLATbLWOogAgHGh62TspwAAAZI"]
[Sat Feb 28 18:15:41.744813 2026] [:error] [pid 39292:tid 39295] [client 20.63.97.65:52328] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aaLATaIAO5fN7BxyqcE9RwAAAME"]
[Sat Feb 28 18:15:42.163636 2026] [:error] [pid 39183:tid 39200] [client 20.63.97.65:52254] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aaLAThCf4HvhVePw3LZyLAAAAAg"]
[Sat Feb 28 18:15:42.574495 2026] [:error] [pid 39184:tid 39236] [client 20.63.97.65:52334] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aaLATltZF9Zd_U7easBcIQAAAFE"]
[Sat Feb 28 18:15:42.989607 2026] [:error] [pid 22194:tid 22216] [client 20.63.97.65:52338] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aaLATn6mbajs3bzQGyuB6gAAAVQ"]
[Sat Feb 28 18:15:43.408323 2026] [:error] [pid 39183:tid 39204] [client 20.63.97.65:4593] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaLATxCf4HvhVePw3LZyNwAAAAw"]
[Sat Feb 28 18:15:43.822000 2026] [:error] [pid 39183:tid 39198] [client 20.63.97.65:52257] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaLATxCf4HvhVePw3LZyOwAAAAY"]
[Sat Feb 28 18:15:44.244733 2026] [:error] [pid 39184:tid 39243] [client 20.63.97.65:53983] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaLAUFtZF9Zd_U7easBcKAAAAFg"]
[Sat Feb 28 18:15:44.666487 2026] [:error] [pid 39184:tid 39237] [client 20.63.97.65:52227] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaLAUFtZF9Zd_U7easBcKgAAAFI"]
[Sat Feb 28 18:15:45.110212 2026] [:error] [pid 39183:tid 39208] [client 20.63.97.65:53926] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaLAURCf4HvhVePw3LZyQwAAABA"]
[Sat Feb 28 18:15:45.530081 2026] [:error] [pid 39184:tid 39221] [client 20.63.97.65:52326] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaLAUVtZF9Zd_U7easBcLQAAAEI"]
[Sat Feb 28 18:15:45.946157 2026] [:error] [pid 39183:tid 39206] [client 20.63.97.65:53950] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaLAURCf4HvhVePw3LZyRwAAAA4"]
[Sat Feb 28 18:15:46.356679 2026] [:error] [pid 39183:tid 39192] [client 20.63.97.65:52305] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaLAUhCf4HvhVePw3LZyTAAAAAA"]
[Sat Feb 28 18:15:46.767240 2026] [:error] [pid 52460:tid 52481] [client 20.63.97.65:53947] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaLAUrLWOogAgHGh62TsrwAAAZI"]
[Sat Feb 28 18:15:47.206075 2026] [:error] [pid 39185:tid 39250] [client 20.63.97.65:63213] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaLAUxVE-FfM89u7BQZ6fQAAAIQ"]
[Sat Feb 28 18:15:47.630241 2026] [:error] [pid 11791:tid 11799] [client 20.63.97.65:63163] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaLAU2uX5e1Q32gqxH2RqAAAAQY"]
[Sat Feb 28 18:15:48.074153 2026] [:error] [pid 52460:tid 52480] [client 20.63.97.65:53974] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaLAVLLWOogAgHGh62TstQAAAZE"]
[Sat Feb 28 18:15:48.489864 2026] [:error] [pid 52460:tid 52468] [client 20.63.97.65:53918] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "aaLAVLLWOogAgHGh62TstwAAAYU"]
[Sat Feb 28 18:15:48.914495 2026] [:error] [pid 52460:tid 52484] [client 20.63.97.65:52346] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "aaLAVLLWOogAgHGh62TsugAAAZU"]
[Sat Feb 28 18:15:49.328528 2026] [:error] [pid 52460:tid 52469] [client 20.63.97.65:63179] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "aaLAVbLWOogAgHGh62TswAAAAYY"]
[Sat Feb 28 18:15:49.738586 2026] [:error] [pid 52460:tid 52480] [client 20.63.97.65:4570] [client 20.63.97.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "aaLAVbLWOogAgHGh62TsxAAAAZE"]
[Sat Feb 28 18:21:15.500686 2026] [:error] [pid 49763:tid 49772] [client 40.85.218.222:64666] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLBm7THSOG_yf2PpqFOyQAAAcY"]
[Sat Feb 28 18:21:16.633428 2026] [:error] [pid 49763:tid 49771] [client 40.85.218.222:64659] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLBnLTHSOG_yf2PpqFO3AAAAcU"]
[Sat Feb 28 18:21:17.842135 2026] [:error] [pid 22194:tid 22211] [client 40.85.218.222:64686] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLBnX6mbajs3bzQGyuDHQAAAU8"]
[Sat Feb 28 18:21:18.956722 2026] [:error] [pid 39183:tid 39202] [client 40.85.218.222:64753] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLBnhCf4HvhVePw3LZ3VgAAAAo"]
[Sat Feb 28 19:15:52.109790 2026] [:error] [pid 39184:tid 39239] [client 182.42.105.144:46675] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaLOaFtZF9Zd_U7easCABgAAAFQ"]
[Sat Feb 28 19:18:54.056835 2026] [:error] [pid 39183:tid 39197] [client 20.220.212.70:19427] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaLPHhCf4HvhVePw3La-jgAAAAU"]
[Sat Feb 28 19:18:54.909037 2026] [:error] [pid 49763:tid 49780] [client 20.220.212.70:18508] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaLPHrTHSOG_yf2PpqGuugAAAc4"]
[Sat Feb 28 19:18:55.755406 2026] [:error] [pid 39185:tid 39246] [client 20.220.212.70:19430] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaLPHxVE-FfM89u7BQaHcAAAAIA"]
[Sat Feb 28 19:18:56.587732 2026] [:error] [pid 52460:tid 52468] [client 20.220.212.70:19442] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaLPILLWOogAgHGh62Qn3gAAAYU"]
[Sat Feb 28 19:30:22.034352 2026] [:error] [pid 49763:tid 49771] [client 20.104.19.195:14075] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aaLRzrTHSOG_yf2PpqHFZwAAAcU"]
[Sat Feb 28 19:30:22.447807 2026] [:error] [pid 52460:tid 52470] [client 20.104.19.195:51837] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aaLRzrLWOogAgHGh62Qw9wAAAYc"]
[Sat Feb 28 19:30:22.866114 2026] [:error] [pid 39184:tid 39224] [client 20.104.19.195:2682] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aaLRzltZF9Zd_U7easCG-wAAAEU"]
[Sat Feb 28 19:30:23.276924 2026] [:error] [pid 39292:tid 39308] [client 20.104.19.195:8927] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aaLRz6IAO5fN7BxyqcFYnQAAAM4"]
[Sat Feb 28 19:30:23.688443 2026] [:error] [pid 39183:tid 39206] [client 20.104.19.195:1996] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ynz.PhP7"] [unique_id "aaLRzxCf4HvhVePw3LbNjQAAAA4"]
[Sat Feb 28 19:30:24.114126 2026] [:error] [pid 39183:tid 39195] [client 20.104.19.195:1830] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ynz.PhP7"] [unique_id "aaLR0BCf4HvhVePw3LbNkQAAAAM"]
[Sat Feb 28 19:30:24.528892 2026] [:error] [pid 39183:tid 39196] [client 20.104.19.195:9622] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ynz.PhP7"] [unique_id "aaLR0BCf4HvhVePw3LbNlAAAAAQ"]
[Sat Feb 28 19:30:24.938288 2026] [:error] [pid 52460:tid 52470] [client 20.104.19.195:8918] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ynz.PhP7"] [unique_id "aaLR0LLWOogAgHGh62QxDgAAAYc"]
[Sat Feb 28 19:30:25.355000 2026] [:error] [pid 52460:tid 52481] [client 20.104.19.195:3629] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaLR0bLWOogAgHGh62QxEgAAAZI"]
[Sat Feb 28 19:30:25.768434 2026] [:error] [pid 49763:tid 49785] [client 20.104.19.195:14057] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaLR0bTHSOG_yf2PpqHFiwAAAdM"]
[Sat Feb 28 19:30:26.194709 2026] [:error] [pid 39183:tid 39211] [client 20.104.19.195:1213] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaLR0hCf4HvhVePw3LbNnwAAABM"]
[Sat Feb 28 19:30:26.608813 2026] [:error] [pid 39183:tid 39213] [client 20.104.19.195:22625] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaLR0hCf4HvhVePw3LbNoQAAABU"]
[Sat Feb 28 19:30:27.026828 2026] [:error] [pid 49763:tid 49780] [client 20.104.19.195:14046] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "aaLR07THSOG_yf2PpqHFngAAAc4"]
[Sat Feb 28 19:30:27.437871 2026] [:error] [pid 52460:tid 52466] [client 20.104.19.195:11424] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "aaLR07LWOogAgHGh62QxHQAAAYM"]
[Sat Feb 28 19:30:27.850933 2026] [:error] [pid 52460:tid 52470] [client 20.104.19.195:3614] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "aaLR07LWOogAgHGh62QxIAAAAYc"]
[Sat Feb 28 19:30:28.269564 2026] [:error] [pid 52460:tid 52469] [client 20.104.19.195:51788] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "aaLR1LLWOogAgHGh62QxJgAAAYY"]
[Sat Feb 28 19:30:28.686641 2026] [:error] [pid 39183:tid 39200] [client 20.104.19.195:4360] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaLR1BCf4HvhVePw3LbNqgAAAAg"]
[Sat Feb 28 19:30:29.114005 2026] [:error] [pid 39183:tid 39199] [client 20.104.19.195:2648] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaLR1RCf4HvhVePw3LbNrgAAAAc"]
[Sat Feb 28 19:30:29.544018 2026] [:error] [pid 39292:tid 39296] [client 20.104.19.195:2767] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaLR1aIAO5fN7BxyqcFYoQAAAMI"]
[Sat Feb 28 19:30:29.958500 2026] [:error] [pid 39183:tid 39198] [client 20.104.19.195:22632] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaLR1RCf4HvhVePw3LbNsQAAAAY"]
[Sat Feb 28 19:30:30.387660 2026] [:error] [pid 39183:tid 39212] [client 20.104.19.195:51550] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaLR1hCf4HvhVePw3LbNswAAABQ"]
[Sat Feb 28 19:30:30.839430 2026] [:error] [pid 39292:tid 39316] [client 20.104.19.195:3634] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaLR1qIAO5fN7BxyqcFYpgAAANY"]
[Sat Feb 28 19:30:31.337900 2026] [:error] [pid 39292:tid 39305] [client 20.104.19.195:2641] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaLR16IAO5fN7BxyqcFYpwAAAMs"]
[Sat Feb 28 19:30:31.790366 2026] [:error] [pid 49763:tid 49783] [client 20.104.19.195:22613] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaLR17THSOG_yf2PpqHFvAAAAdE"]
[Sat Feb 28 19:30:32.253915 2026] [:error] [pid 39183:tid 39212] [client 20.104.19.195:51822] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aaLR2BCf4HvhVePw3LbNvQAAABQ"]
[Sat Feb 28 19:30:32.757147 2026] [:error] [pid 49763:tid 49790] [client 20.104.19.195:2758] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aaLR2LTHSOG_yf2PpqHFygAAAdg"]
[Sat Feb 28 19:30:33.302195 2026] [:error] [pid 49763:tid 49784] [client 20.104.19.195:8914] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aaLR2bTHSOG_yf2PpqHFzgAAAdI"]
[Sat Feb 28 19:30:33.868509 2026] [:error] [pid 49763:tid 49769] [client 20.104.19.195:6457] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aaLR2bTHSOG_yf2PpqHF1QAAAcM"]
[Sat Feb 28 19:30:34.450235 2026] [:error] [pid 49763:tid 49771] [client 20.104.19.195:6425] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass.php"] [unique_id "aaLR2rTHSOG_yf2PpqHF2wAAAcU"]
[Sat Feb 28 19:30:34.946712 2026] [:error] [pid 39184:tid 39242] [client 20.104.19.195:2625] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass.php"] [unique_id "aaLR2ltZF9Zd_U7easCHCgAAAFc"]
[Sat Feb 28 19:30:35.434105 2026] [:error] [pid 39183:tid 39194] [client 20.104.19.195:4388] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass.php"] [unique_id "aaLR2xCf4HvhVePw3LbNyAAAAAI"]
[Sat Feb 28 19:30:35.976109 2026] [:error] [pid 52460:tid 52476] [client 20.104.19.195:51379] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass.php"] [unique_id "aaLR27LWOogAgHGh62QxNAAAAY0"]
[Sat Feb 28 19:30:36.457687 2026] [:error] [pid 52460:tid 52473] [client 20.104.19.195:9655] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaLR3LLWOogAgHGh62QxNgAAAYo"]
[Sat Feb 28 19:30:36.874486 2026] [:error] [pid 52460:tid 52468] [client 20.104.19.195:9621] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaLR3LLWOogAgHGh62QxNwAAAYU"]
[Sat Feb 28 19:30:37.299785 2026] [:error] [pid 49763:tid 49783] [client 20.104.19.195:8956] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaLR3bTHSOG_yf2PpqHF-AAAAdE"]
[Sat Feb 28 19:30:37.721036 2026] [:error] [pid 49763:tid 49770] [client 20.104.19.195:9033] [client 20.104.19.195] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "aaLR3bTHSOG_yf2PpqHF_gAAAcQ"]
[Sat Feb 28 19:30:57.857478 2026] [:error] [pid 49763:tid 49790] [client 45.153.34.31:33394] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aaLR8bTHSOG_yf2PpqHGfQAAAdg"]
[Sat Feb 28 19:49:42.350801 2026] [:error] [pid 39183:tid 39192] [client 209.97.134.104:41764] [client 209.97.134.104] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "185.198.240.170_e068bf7d9aa05bbe9086032a7bbf66e40ec17e71"): Internal error (specific information not available) [hostname "www.measureyourcause.com.au"] [uri "/index.php"] [unique_id "aaLWUxCf4HvhVePw3LbliQAAAAA"]
[Sat Feb 28 21:51:52.243266 2026] [:error] [pid 39292:tid 39314] [client 20.104.16.102:41776] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaLy-KIAO5fN7BxyqcGJeQAAANQ"]
[Sat Feb 28 21:51:52.782468 2026] [:error] [pid 49763:tid 49766] [client 20.104.16.102:41248] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaLy-LTHSOG_yf2PpqGaIgAAAcA"]
[Sat Feb 28 21:51:53.586991 2026] [:error] [pid 49763:tid 49780] [client 20.104.16.102:35648] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaLy-bTHSOG_yf2PpqGaLAAAAc4"]
[Sat Feb 28 21:51:54.269105 2026] [:error] [pid 52460:tid 52480] [client 20.104.16.102:33084] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaLy-rLWOogAgHGh62ShEwAAAZE"]
[Sat Feb 28 21:51:55.038660 2026] [:error] [pid 39183:tid 39216] [client 20.104.16.102:38173] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "aaLy-xCf4HvhVePw3LZoKwAAABg"]
[Sat Feb 28 21:51:56.075736 2026] [:error] [pid 52460:tid 52486] [client 20.104.16.102:61133] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "aaLy_LLWOogAgHGh62ShFwAAAZc"]
[Sat Feb 28 21:51:56.646502 2026] [:error] [pid 52460:tid 52482] [client 20.104.16.102:38224] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "aaLy_LLWOogAgHGh62ShHAAAAZM"]
[Sat Feb 28 21:51:57.452680 2026] [:error] [pid 52460:tid 52477] [client 20.104.16.102:26514] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "aaLy_bLWOogAgHGh62ShHwAAAY4"]
[Sat Feb 28 21:51:58.214018 2026] [:error] [pid 52460:tid 52487] [client 20.104.16.102:8079] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaLy_rLWOogAgHGh62ShIgAAAZg"]
[Sat Feb 28 21:51:58.714766 2026] [:error] [pid 39292:tid 39313] [client 20.104.16.102:61124] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaLy_qIAO5fN7BxyqcGJfgAAANM"]
[Sat Feb 28 21:51:59.292720 2026] [:error] [pid 49763:tid 49782] [client 20.104.16.102:26547] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaLy_7THSOG_yf2PpqGaPwAAAdA"]
[Sat Feb 28 21:52:00.479671 2026] [:error] [pid 39185:tid 39260] [client 20.104.16.102:8105] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaLzABVE-FfM89u7BQap5gAAAI4"]
[Sat Feb 28 21:52:01.421424 2026] [:error] [pid 11791:tid 11795] [client 20.104.16.102:41737] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaLzAWuX5e1Q32gqxH3PqwAAAQI"]
[Sat Feb 28 21:52:02.047023 2026] [:error] [pid 22194:tid 22213] [client 20.104.16.102:26496] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaLzAn6mbajs3bzQGyutpAAAAVE"]
[Sat Feb 28 21:52:02.849354 2026] [:error] [pid 39183:tid 39192] [client 20.104.16.102:8080] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaLzAhCf4HvhVePw3LZoQAAAAAA"]
[Sat Feb 28 21:52:04.073005 2026] [:error] [pid 22194:tid 22216] [client 20.104.16.102:35709] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "aaLzBH6mbajs3bzQGyutqgAAAVQ"]
[Sat Feb 28 21:52:05.507282 2026] [:error] [pid 39184:tid 39233] [client 20.104.16.102:8111] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "aaLzBVtZF9Zd_U7easDVQgAAAE4"]
[Sat Feb 28 21:52:06.887472 2026] [:error] [pid 49763:tid 49779] [client 20.104.16.102:61178] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "aaLzBrTHSOG_yf2PpqGaRQAAAc0"]
[Sat Feb 28 21:52:07.615272 2026] [:error] [pid 39185:tid 39254] [client 20.104.16.102:41769] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "aaLzBxVE-FfM89u7BQap7gAAAIg"]
[Sat Feb 28 21:52:08.214767 2026] [:error] [pid 39183:tid 39195] [client 20.104.16.102:41218] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "aaLzCBCf4HvhVePw3LZoTAAAAAM"]
[Sat Feb 28 21:52:09.262339 2026] [:error] [pid 39183:tid 39207] [client 20.104.16.102:38213] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "aaLzCRCf4HvhVePw3LZoUwAAAA8"]
[Sat Feb 28 21:52:10.135284 2026] [:error] [pid 49763:tid 49788] [client 20.104.16.102:35675] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "aaLzCrTHSOG_yf2PpqGaXAAAAdY"]
[Sat Feb 28 21:52:12.039368 2026] [:error] [pid 49763:tid 49780] [client 20.104.16.102:26526] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "aaLzDLTHSOG_yf2PpqGaZAAAAc4"]
[Sat Feb 28 21:52:12.653368 2026] [:error] [pid 49763:tid 49766] [client 20.104.16.102:26537] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "aaLzDLTHSOG_yf2PpqGabAAAAcA"]
[Sat Feb 28 21:52:13.475767 2026] [:error] [pid 49763:tid 49780] [client 20.104.16.102:41791] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaLzDbTHSOG_yf2PpqGadQAAAc4"]
[Sat Feb 28 21:52:14.076592 2026] [:error] [pid 49763:tid 49783] [client 20.104.16.102:26532] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaLzDrTHSOG_yf2PpqGadwAAAdE"]
[Sat Feb 28 21:52:14.827333 2026] [:error] [pid 39183:tid 39192] [client 20.104.16.102:8114] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaLzDhCf4HvhVePw3LZoXQAAAAA"]
[Sat Feb 28 21:52:15.552765 2026] [:error] [pid 11791:tid 11795] [client 20.104.16.102:35658] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "aaLzD2uX5e1Q32gqxH3P0wAAAQI"]
[Sat Feb 28 21:52:16.176531 2026] [:error] [pid 39185:tid 39260] [client 20.104.16.102:33033] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "aaLzEBVE-FfM89u7BQap9gAAAI4"]
[Sat Feb 28 21:52:16.791853 2026] [:error] [pid 39292:tid 39301] [client 20.104.16.102:8074] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "aaLzEKIAO5fN7BxyqcGJjwAAAMc"]
[Sat Feb 28 21:52:17.509642 2026] [:error] [pid 39292:tid 39317] [client 20.104.16.102:41259] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "aaLzEaIAO5fN7BxyqcGJkQAAANc"]
[Sat Feb 28 21:52:18.075117 2026] [:error] [pid 39183:tid 39216] [client 20.104.16.102:41752] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "aaLzEhCf4HvhVePw3LZoZAAAABg"]
[Sat Feb 28 21:52:18.615927 2026] [:error] [pid 49763:tid 49786] [client 20.104.16.102:61182] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "aaLzErTHSOG_yf2PpqGagAAAAdQ"]
[Sat Feb 28 21:52:19.105952 2026] [:error] [pid 52460:tid 52471] [client 20.104.16.102:61161] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "aaLzE7LWOogAgHGh62ShNQAAAYg"]
[Sat Feb 28 21:52:19.672820 2026] [:error] [pid 39185:tid 39254] [client 20.104.16.102:41265] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "aaLzExVE-FfM89u7BQaqAAAAAIg"]
[Sat Feb 28 21:52:21.338119 2026] [:error] [pid 52460:tid 52468] [client 20.104.16.102:35693] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "aaLzFbLWOogAgHGh62ShOwAAAYU"]
[Sat Feb 28 21:52:21.992911 2026] [:error] [pid 49763:tid 49776] [client 20.104.16.102:8087] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aaLzFbTHSOG_yf2PpqGajQAAAco"]
[Sat Feb 28 21:52:22.862016 2026] [:error] [pid 39184:tid 39219] [client 20.104.16.102:41278] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aaLzFltZF9Zd_U7easDVUAAAAEA"]
[Sat Feb 28 21:52:24.176077 2026] [:error] [pid 39183:tid 39194] [client 20.104.16.102:41257] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aaLzGBCf4HvhVePw3LZocQAAAAI"]
[Sat Feb 28 21:52:25.943964 2026] [:error] [pid 49763:tid 49767] [client 20.104.16.102:33061] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aaLzGbTHSOG_yf2PpqGalQAAAcE"]
[Sat Feb 28 21:52:26.737503 2026] [:error] [pid 49763:tid 49788] [client 20.104.16.102:41789] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "aaLzGrTHSOG_yf2PpqGamwAAAdY"]
[Sat Feb 28 21:52:27.773085 2026] [:error] [pid 49763:tid 49778] [client 20.104.16.102:8072] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "aaLzG7THSOG_yf2PpqGaqAAAAcw"]
[Sat Feb 28 21:52:28.470017 2026] [:error] [pid 39184:tid 39232] [client 20.104.16.102:26525] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "aaLzHFtZF9Zd_U7easDVUgAAAE0"]
[Sat Feb 28 21:52:29.219844 2026] [:error] [pid 39185:tid 39251] [client 20.104.16.102:33046] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "aaLzHRVE-FfM89u7BQaqEgAAAIU"]
[Sat Feb 28 21:52:29.905995 2026] [:error] [pid 52460:tid 52485] [client 20.104.16.102:8125] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aaLzHbLWOogAgHGh62ShRQAAAZY"]
[Sat Feb 28 21:52:30.859349 2026] [:error] [pid 39292:tid 39317] [client 20.104.16.102:38255] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aaLzHqIAO5fN7BxyqcGJoQAAANc"]
[Sat Feb 28 21:52:31.592780 2026] [:error] [pid 39292:tid 39308] [client 20.104.16.102:61165] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aaLzH6IAO5fN7BxyqcGJogAAAM4"]
[Sat Feb 28 21:52:32.802984 2026] [:error] [pid 49763:tid 49766] [client 20.104.16.102:33078] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "aaLzILTHSOG_yf2PpqGavgAAAcA"]
[Sat Feb 28 21:52:33.352871 2026] [:error] [pid 49763:tid 49768] [client 20.104.16.102:38252] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aaLzIbTHSOG_yf2PpqGawwAAAcI"]
[Sat Feb 28 21:52:34.187881 2026] [:error] [pid 39292:tid 39309] [client 20.104.16.102:22634] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aaLzIqIAO5fN7BxyqcGJqwAAAM8"]
[Sat Feb 28 21:52:34.895988 2026] [:error] [pid 49763:tid 49778] [client 20.104.16.102:41274] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aaLzIrTHSOG_yf2PpqGazQAAAcw"]
[Sat Feb 28 21:52:39.344829 2026] [:error] [pid 39183:tid 39192] [client 20.104.16.102:8083] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "aaLzJxCf4HvhVePw3LZoigAAAAA"]
[Sat Feb 28 21:52:40.350778 2026] [:error] [pid 39183:tid 39214] [client 20.104.16.102:41769] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aaLzKBCf4HvhVePw3LZokQAAABY"]
[Sat Feb 28 21:52:41.309788 2026] [:error] [pid 49763:tid 49773] [client 20.104.16.102:41747] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aaLzKbTHSOG_yf2PpqGa5gAAAcc"]
[Sat Feb 28 21:52:43.196251 2026] [:error] [pid 39292:tid 39317] [client 20.104.16.102:8066] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aaLzK6IAO5fN7BxyqcGJsQAAANc"]
[Sat Feb 28 21:52:43.992660 2026] [:error] [pid 39183:tid 39195] [client 20.104.16.102:8098] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aaLzKxCf4HvhVePw3LZomAAAAAM"]
[Sat Feb 28 21:52:44.796018 2026] [:error] [pid 52460:tid 52480] [client 20.104.16.102:41778] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaLzLLLWOogAgHGh62ShjQAAAZE"]
[Sat Feb 28 21:52:45.797952 2026] [:error] [pid 49763:tid 49787] [client 20.104.16.102:26511] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaLzLbTHSOG_yf2PpqGa_AAAAdU"]
[Sat Feb 28 21:52:47.152483 2026] [:error] [pid 52460:tid 52469] [client 20.104.16.102:41761] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaLzL7LWOogAgHGh62ShogAAAYY"]
[Sat Feb 28 21:52:47.875911 2026] [:error] [pid 52460:tid 52466] [client 20.104.16.102:26554] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaLzL7LWOogAgHGh62ShrgAAAYM"]
[Sat Feb 28 21:52:48.470473 2026] [:error] [pid 39184:tid 39221] [client 20.104.16.102:41786] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLzMFtZF9Zd_U7easDVhQAAAEI"]
[Sat Feb 28 21:52:49.127299 2026] [:error] [pid 11791:tid 11809] [client 20.104.16.102:26528] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLzMWuX5e1Q32gqxH3P4wAAARA"]
[Sat Feb 28 21:52:49.820339 2026] [:error] [pid 49763:tid 49787] [client 20.104.16.102:35653] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLzMbTHSOG_yf2PpqGbCgAAAdU"]
[Sat Feb 28 21:52:51.769305 2026] [:error] [pid 22194:tid 22213] [client 20.104.16.102:7458] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLzM36mbajs3bzQGyutyAAAAVE"]
[Sat Feb 28 21:52:57.003465 2026] [:error] [pid 52460:tid 52479] [client 20.104.16.102:38211] [client 20.104.16.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLzObLWOogAgHGh62Sh6wAAAZA"]
[Sat Feb 28 21:53:01.028818 2026] [:error] [pid 49763:tid 49783] [client 20.104.16.102:41232] [client 20.104.16.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.104.16.102, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLzPbTHSOG_yf2PpqGbVgAAAdE"]
[Sat Feb 28 21:53:01.238276 2026] [:error] [pid 49763:tid 49771] [client 20.104.16.102:41729] [client 20.104.16.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.104.16.102, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLzPbTHSOG_yf2PpqGbXAAAAcU"]
[Sat Feb 28 21:53:02.569247 2026] [:error] [pid 49763:tid 49768] [client 20.104.16.102:41232] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaLzPrTHSOG_yf2PpqGbbgAAAcI"]
[Sat Feb 28 21:53:03.565021 2026] [:error] [pid 39183:tid 39205] [client 20.104.16.102:61121] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaLzPxCf4HvhVePw3LZoxQAAAA0"]
[Sat Feb 28 21:53:04.234943 2026] [:error] [pid 39184:tid 39243] [client 20.104.16.102:38250] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaLzQFtZF9Zd_U7easDVnAAAAFg"]
[Sat Feb 28 21:53:04.750956 2026] [:error] [pid 22194:tid 22211] [client 20.104.16.102:26516] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaLzQH6mbajs3bzQGyut0AAAAU8"]
[Sat Feb 28 21:53:05.636141 2026] [:error] [pid 52460:tid 52467] [client 20.104.16.102:26504] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aaLzQbLWOogAgHGh62Sh_gAAAYQ"]
[Sat Feb 28 21:53:06.715959 2026] [:error] [pid 49763:tid 49789] [client 20.104.16.102:61164] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aaLzQrTHSOG_yf2PpqGbgQAAAdc"]
[Sat Feb 28 21:53:08.210891 2026] [:error] [pid 49763:tid 49782] [client 20.104.16.102:8065] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aaLzRLTHSOG_yf2PpqGbmAAAAdA"]
[Sat Feb 28 21:53:08.843957 2026] [:error] [pid 11791:tid 11812] [client 20.104.16.102:8104] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aaLzRGuX5e1Q32gqxH3P7QAAARM"]
[Sat Feb 28 21:53:11.605602 2026] [:error] [pid 39184:tid 39225] [client 20.104.16.102:38259] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaLzR1tZF9Zd_U7easDVqAAAAEY"]
[Sat Feb 28 21:53:12.500766 2026] [:error] [pid 39292:tid 39299] [client 20.104.16.102:61172] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaLzSKIAO5fN7BxyqcGJ3QAAAMU"]
[Sat Feb 28 21:53:13.245772 2026] [:error] [pid 49763:tid 49784] [client 20.104.16.102:41736] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaLzSbTHSOG_yf2PpqGbzwAAAdI"]
[Sat Feb 28 21:53:14.644579 2026] [:error] [pid 39183:tid 39195] [client 20.104.16.102:33036] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaLzShCf4HvhVePw3LZo8wAAAAM"]
[Sat Feb 28 21:53:16.053956 2026] [:error] [pid 39184:tid 39227] [client 20.104.16.102:33052] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaLzTFtZF9Zd_U7easDVswAAAEg"]
[Sat Feb 28 21:53:16.870766 2026] [:error] [pid 52460:tid 52467] [client 20.104.16.102:35685] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaLzTLLWOogAgHGh62SiEwAAAYQ"]
[Sat Feb 28 21:53:17.504363 2026] [:error] [pid 52460:tid 52463] [client 20.104.16.102:38163] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaLzTbLWOogAgHGh62SiGwAAAYA"]
[Sat Feb 28 21:53:18.145840 2026] [:error] [pid 22194:tid 22215] [client 20.104.16.102:26527] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaLzTn6mbajs3bzQGyut2wAAAVM"]
[Sat Feb 28 21:53:18.764946 2026] [:error] [pid 39185:tid 39269] [client 20.104.16.102:41760] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaLzThVE-FfM89u7BQaqewAAAJc"]
[Sat Feb 28 21:53:20.636920 2026] [:error] [pid 11791:tid 11793] [client 20.104.16.102:38269] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaLzUGuX5e1Q32gqxH3QAQAAAQA"]
[Sat Feb 28 21:53:21.502690 2026] [:error] [pid 39184:tid 39240] [client 20.104.16.102:41226] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaLzUVtZF9Zd_U7easDVuwAAAFU"]
[Sat Feb 28 21:53:22.907774 2026] [:error] [pid 49763:tid 49785] [client 20.104.16.102:41254] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaLzUrTHSOG_yf2PpqGcLgAAAdM"]
[Sat Feb 28 21:53:23.867049 2026] [:error] [pid 39185:tid 39247] [client 20.104.16.102:38239] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaLzUxVE-FfM89u7BQaqiQAAAIE"]
[Sat Feb 28 21:53:25.147612 2026] [:error] [pid 11791:tid 11809] [client 20.104.16.102:8084] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaLzVWuX5e1Q32gqxH3QCgAAARA"]
[Sat Feb 28 21:53:26.406433 2026] [:error] [pid 49763:tid 49768] [client 20.104.16.102:61170] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaLzVrTHSOG_yf2PpqGcQQAAAcI"]
[Sat Feb 28 21:53:28.694864 2026] [:error] [pid 49763:tid 49784] [client 20.104.16.102:26523] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaLzWLTHSOG_yf2PpqGcVAAAAdI"]
[Sat Feb 28 21:53:31.091120 2026] [:error] [pid 39292:tid 39308] [client 20.104.16.102:61144] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaLzW6IAO5fN7BxyqcGJ6QAAAM4"]
[Sat Feb 28 21:53:32.313686 2026] [:error] [pid 39183:tid 39204] [client 20.104.16.102:61159] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaLzXBCf4HvhVePw3LZpSAAAAAw"]
[Sat Feb 28 21:53:34.963841 2026] [:error] [pid 39184:tid 39221] [client 20.104.16.102:33054] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaLzXltZF9Zd_U7easDWGAAAAEI"]
[Sat Feb 28 21:53:37.164749 2026] [:error] [pid 11791:tid 11799] [client 20.104.16.102:38150] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaLzYWuX5e1Q32gqxH3QNwAAAQY"]
[Sat Feb 28 21:53:38.808836 2026] [:error] [pid 39183:tid 39211] [client 20.104.16.102:26551] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaLzYhCf4HvhVePw3LZpXwAAABM"]
[Sat Feb 28 21:53:40.375180 2026] [:error] [pid 39292:tid 39303] [client 20.104.16.102:38257] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaLzZKIAO5fN7BxyqcGJ9AAAAMk"]
[Sat Feb 28 21:53:43.940030 2026] [:error] [pid 39183:tid 39209] [client 20.104.16.102:61180] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaLzZxCf4HvhVePw3LZphAAAABE"]
[Sat Feb 28 21:53:45.122309 2026] [:error] [pid 39183:tid 39213] [client 20.104.16.102:26540] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaLzaRCf4HvhVePw3LZpjQAAABU"]
[Sat Feb 28 21:53:45.635508 2026] [:error] [pid 39183:tid 39211] [client 20.104.16.102:8126] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaLzaRCf4HvhVePw3LZplgAAABM"]
[Sat Feb 28 21:53:47.063882 2026] [:error] [pid 49763:tid 49780] [client 20.104.16.102:38172] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaLza7THSOG_yf2PpqGc3gAAAc4"]
[Sat Feb 28 21:53:49.343753 2026] [:error] [pid 22194:tid 22202] [client 20.104.16.102:26518] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaLzbX6mbajs3bzQGyut7AAAAUY"]
[Sat Feb 28 21:53:50.392714 2026] [:error] [pid 49763:tid 49768] [client 20.104.16.102:33034] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaLzbrTHSOG_yf2PpqGc_AAAAcI"]
[Sat Feb 28 21:53:51.079153 2026] [:error] [pid 39292:tid 39300] [client 20.104.16.102:26530] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaLzb6IAO5fN7BxyqcGJ-gAAAMY"]
[Sat Feb 28 21:53:51.741489 2026] [:error] [pid 49763:tid 49770] [client 20.104.16.102:38194] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaLzb7THSOG_yf2PpqGdCwAAAcQ"]
[Sat Feb 28 21:53:52.638142 2026] [:error] [pid 11791:tid 11794] [client 20.104.16.102:41263] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaLzcGuX5e1Q32gqxH3QSwAAAQE"]
[Sat Feb 28 21:53:53.302790 2026] [:error] [pid 39183:tid 39201] [client 20.104.16.102:33080] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaLzcRCf4HvhVePw3LZpuQAAAAk"]
[Sat Feb 28 21:53:54.474897 2026] [:error] [pid 39183:tid 39211] [client 20.104.16.102:41767] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aaLzchCf4HvhVePw3LZpvAAAABM"]
[Sat Feb 28 21:53:55.846725 2026] [:error] [pid 39292:tid 39301] [client 20.104.16.102:41236] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aaLzc6IAO5fN7BxyqcGKDAAAAMc"]
[Sat Feb 28 21:53:56.740709 2026] [:error] [pid 22194:tid 22212] [client 20.104.16.102:61081] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aaLzdH6mbajs3bzQGyut_wAAAVA"]
[Sat Feb 28 21:53:57.482448 2026] [:error] [pid 52460:tid 52487] [client 20.104.16.102:41757] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aaLzdbLWOogAgHGh62Si1wAAAZg"]
[Sat Feb 28 21:53:58.181292 2026] [:error] [pid 39183:tid 39206] [client 20.104.16.102:61139] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaLzdhCf4HvhVePw3LZpwgAAAA4"]
[Sat Feb 28 21:53:58.726067 2026] [:error] [pid 39183:tid 39215] [client 20.104.16.102:38217] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaLzdhCf4HvhVePw3LZpxgAAABc"]
[Sat Feb 28 21:53:59.432513 2026] [:error] [pid 49763:tid 49784] [client 20.104.16.102:61067] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaLzd7THSOG_yf2PpqGdOQAAAdI"]
[Sat Feb 28 21:54:00.092741 2026] [:error] [pid 39184:tid 39226] [client 20.104.16.102:8076] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaLzeFtZF9Zd_U7easDWTAAAAEc"]
[Sat Feb 28 21:54:01.088970 2026] [:error] [pid 49763:tid 49779] [client 20.104.16.102:61147] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaLzebTHSOG_yf2PpqGdSAAAAc0"]
[Sat Feb 28 21:54:09.721445 2026] [:error] [pid 52460:tid 52482] [client 20.104.16.102:33039] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaLzgbLWOogAgHGh62SjCQAAAZM"]
[Sat Feb 28 21:54:11.150702 2026] [:error] [pid 52460:tid 52480] [client 20.104.16.102:61060] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaLzg7LWOogAgHGh62SjHQAAAZE"]
[Sat Feb 28 21:54:13.092702 2026] [:error] [pid 52460:tid 52474] [client 20.104.16.102:41239] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaLzhbLWOogAgHGh62SjKQAAAYs"]
[Sat Feb 28 21:54:13.938185 2026] [:error] [pid 49763:tid 49767] [client 20.104.16.102:26506] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaLzhbTHSOG_yf2PpqGdewAAAcE"]
[Sat Feb 28 21:54:16.082702 2026] [:error] [pid 49763:tid 49775] [client 20.104.16.102:41229] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaLziLTHSOG_yf2PpqGdkgAAAck"]
[Sat Feb 28 21:54:17.577872 2026] [:error] [pid 49763:tid 49766] [client 20.104.16.102:38219] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaLzibTHSOG_yf2PpqGdqAAAAcA"]
[Sat Feb 28 21:54:19.294686 2026] [:error] [pid 39292:tid 39315] [client 20.104.16.102:61138] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaLzi6IAO5fN7BxyqcGKMgAAANU"]
[Sat Feb 28 21:54:20.666512 2026] [:error] [pid 39183:tid 39202] [client 20.104.16.102:35692] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaLzjBCf4HvhVePw3LZqCwAAAAo"]
[Sat Feb 28 21:54:22.024558 2026] [:error] [pid 49763:tid 49779] [client 20.104.16.102:41241] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLzjrTHSOG_yf2PpqGdzQAAAc0"]
[Sat Feb 28 21:54:23.007076 2026] [:error] [pid 49763:tid 49783] [client 20.104.16.102:38232] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLzj7THSOG_yf2PpqGd1gAAAdE"]
[Sat Feb 28 21:54:23.944963 2026] [:error] [pid 39184:tid 39230] [client 20.104.16.102:35698] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLzj1tZF9Zd_U7easDWbQAAAEs"]
[Sat Feb 28 21:54:24.661609 2026] [:error] [pid 39292:tid 39311] [client 20.104.16.102:35697] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLzkKIAO5fN7BxyqcGKOQAAANE"]
[Sat Feb 28 21:54:25.326869 2026] [:error] [pid 11791:tid 11804] [client 20.104.16.102:38186] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaLzkWuX5e1Q32gqxH3QmwAAAQs"]
[Sat Feb 28 21:54:26.031568 2026] [:error] [pid 22194:tid 22200] [client 20.104.16.102:38254] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaLzkn6mbajs3bzQGyuuIQAAAUQ"]
[Sat Feb 28 21:54:27.066524 2026] [:error] [pid 52460:tid 52483] [client 20.104.16.102:41256] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaLzk7LWOogAgHGh62SjiAAAAZQ"]
[Sat Feb 28 21:54:27.993496 2026] [:error] [pid 39185:tid 39261] [client 20.104.16.102:41272] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "aaLzkxVE-FfM89u7BQaq5QAAAI8"]
[Sat Feb 28 21:54:28.918874 2026] [:error] [pid 39184:tid 39243] [client 20.104.16.102:38209] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aaLzlFtZF9Zd_U7easDWfAAAAFg"]
[Sat Feb 28 21:54:29.703872 2026] [:error] [pid 39183:tid 39210] [client 20.104.16.102:38208] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aaLzlRCf4HvhVePw3LZqIAAAABI"]
[Sat Feb 28 21:54:30.289029 2026] [:error] [pid 39184:tid 39239] [client 20.104.16.102:41267] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aaLzlltZF9Zd_U7easDWfwAAAFQ"]
[Sat Feb 28 21:54:32.020114 2026] [:error] [pid 39184:tid 39223] [client 20.104.16.102:41755] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aaLzmFtZF9Zd_U7easDWgAAAAEQ"]
[Sat Feb 28 21:54:33.025527 2026] [:error] [pid 39184:tid 39225] [client 20.104.16.102:61122] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaLzmVtZF9Zd_U7easDWiAAAAEY"]
[Sat Feb 28 21:54:33.954665 2026] [:error] [pid 39184:tid 39233] [client 20.104.16.102:38238] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaLzmVtZF9Zd_U7easDWjwAAAE4"]
[Sat Feb 28 21:54:34.969660 2026] [:error] [pid 39185:tid 39258] [client 20.104.16.102:61179] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaLzmhVE-FfM89u7BQaq9AAAAIw"]
[Sat Feb 28 21:54:40.813506 2026] [:error] [pid 49763:tid 49777] [client 20.104.16.102:41217] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaLzoLTHSOG_yf2PpqGeLQAAAcs"]
[Sat Feb 28 21:54:47.937536 2026] [:error] [pid 39184:tid 39224] [client 20.104.16.102:22614] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aaLzp1tZF9Zd_U7easDW5gAAAEU"]
[Sat Feb 28 21:54:51.655482 2026] [:error] [pid 39292:tid 39318] [client 20.104.16.102:22639] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aaLzq6IAO5fN7BxyqcGKegAAANg"]
[Sat Feb 28 21:54:54.321949 2026] [:error] [pid 39183:tid 39199] [client 20.104.16.102:33047] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "aaLzrhCf4HvhVePw3LZqRgAAAAc"]
[Sat Feb 28 21:54:56.939229 2026] [:error] [pid 39292:tid 39301] [client 20.104.16.102:41763] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaLzsKIAO5fN7BxyqcGKggAAAMc"]
[Sat Feb 28 21:55:00.581532 2026] [:error] [pid 52460:tid 52478] [client 20.104.16.102:61148] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaLztLLWOogAgHGh62SjyQAAAY8"]
[Sat Feb 28 21:55:02.095602 2026] [:error] [pid 39184:tid 39229] [client 20.104.16.102:61181] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaLztltZF9Zd_U7easDW_QAAAEo"]
[Sat Feb 28 21:55:03.238369 2026] [:error] [pid 49763:tid 49775] [client 20.104.16.102:41238] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaLzt7THSOG_yf2PpqGe_QAAAck"]
[Sat Feb 28 21:55:05.121716 2026] [:error] [pid 39184:tid 39239] [client 20.104.16.102:35688] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aaLzuVtZF9Zd_U7easDXBQAAAFQ"]
[Sat Feb 28 21:55:06.709680 2026] [:error] [pid 49763:tid 49789] [client 20.104.16.102:8085] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aaLzurTHSOG_yf2PpqGfDgAAAdc"]
[Sat Feb 28 21:55:08.121812 2026] [:error] [pid 22194:tid 22210] [client 20.104.16.102:22640] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aaLzvH6mbajs3bzQGyuuXAAAAU4"]
[Sat Feb 28 21:55:19.064547 2026] [:error] [pid 39183:tid 39200] [client 20.104.16.102:26542] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLzxxCf4HvhVePw3LZqlwAAAAg"]
[Sat Feb 28 21:55:19.735045 2026] [:error] [pid 49763:tid 49786] [client 20.104.16.102:8099] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLzx7THSOG_yf2PpqGfjQAAAdQ"]
[Sat Feb 28 21:55:20.961249 2026] [:error] [pid 39292:tid 39313] [client 20.104.16.102:38179] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLzyKIAO5fN7BxyqcGKsQAAANM"]
[Sat Feb 28 21:55:21.656009 2026] [:error] [pid 39183:tid 39199] [client 20.104.16.102:36319] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLzyRCf4HvhVePw3LZqngAAAAc"]
[Sat Feb 28 21:55:22.354986 2026] [:error] [pid 39183:tid 39204] [client 20.104.16.102:41246] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLzyhCf4HvhVePw3LZqqQAAAAw"]
[Sat Feb 28 21:55:23.394127 2026] [:error] [pid 39183:tid 39193] [client 20.104.16.102:27203] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLzyxCf4HvhVePw3LZqsQAAAAE"]
[Sat Feb 28 21:55:24.056859 2026] [:error] [pid 49763:tid 49774] [client 20.104.16.102:35659] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLzzLTHSOG_yf2PpqGftgAAAcg"]
[Sat Feb 28 21:55:24.727619 2026] [:error] [pid 49763:tid 49789] [client 20.104.16.102:27241] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLzzLTHSOG_yf2PpqGfvwAAAdc"]
[Sat Feb 28 21:55:25.566857 2026] [:error] [pid 52460:tid 52487] [client 20.104.16.102:35660] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaLzzbLWOogAgHGh62SkBgAAAZg"]
[Sat Feb 28 21:55:26.498672 2026] [:error] [pid 39183:tid 39203] [client 20.104.16.102:33064] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaLzzhCf4HvhVePw3LZqxwAAAAs"]
[Sat Feb 28 21:55:27.079878 2026] [:error] [pid 49763:tid 49768] [client 20.104.16.102:35705] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaLzz7THSOG_yf2PpqGf2wAAAcI"]
[Sat Feb 28 21:55:27.970307 2026] [:error] [pid 39292:tid 39318] [client 20.104.16.102:22593] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaLzz6IAO5fN7BxyqcGKuwAAANg"]
[Sat Feb 28 21:55:29.172958 2026] [:error] [pid 39184:tid 39233] [client 20.104.16.102:26539] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaLz0VtZF9Zd_U7easDXLgAAAE4"]
[Sat Feb 28 21:55:30.873085 2026] [:error] [pid 39183:tid 39212] [client 20.104.16.102:41775] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaLz0hCf4HvhVePw3LZq2AAAABQ"]
[Sat Feb 28 21:55:31.808940 2026] [:error] [pid 49763:tid 49770] [client 20.104.16.102:33043] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaLz07THSOG_yf2PpqGf-wAAAcQ"]
[Sat Feb 28 21:55:32.499644 2026] [:error] [pid 39183:tid 39196] [client 20.104.16.102:38221] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaLz1BCf4HvhVePw3LZq5AAAAAQ"]
[Sat Feb 28 21:55:33.167754 2026] [:error] [pid 39184:tid 39225] [client 20.104.16.102:38149] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaLz1VtZF9Zd_U7easDXPAAAAEY"]
[Sat Feb 28 21:55:33.877319 2026] [:error] [pid 52460:tid 52469] [client 20.104.16.102:35663] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaLz1bLWOogAgHGh62SkJwAAAYY"]
[Sat Feb 28 21:55:35.904245 2026] [:error] [pid 52460:tid 52463] [client 20.104.16.102:41738] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaLz17LWOogAgHGh62SkQQAAAYA"]
[Sat Feb 28 21:55:36.749676 2026] [:error] [pid 39292:tid 39318] [client 20.104.16.102:41753] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aaLz2KIAO5fN7BxyqcGK0AAAANg"]
[Sat Feb 28 21:55:37.632972 2026] [:error] [pid 39185:tid 39262] [client 20.104.16.102:8090] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aaLz2RVE-FfM89u7BQarLQAAAJA"]
[Sat Feb 28 21:55:38.282024 2026] [:error] [pid 39183:tid 39203] [client 20.104.16.102:41224] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aaLz2hCf4HvhVePw3LZrAAAAAAs"]
[Sat Feb 28 21:55:39.040092 2026] [:error] [pid 39292:tid 39299] [client 20.104.16.102:41242] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aaLz26IAO5fN7BxyqcGK3gAAAMU"]
[Sat Feb 28 21:55:39.737495 2026] [:error] [pid 39183:tid 39197] [client 20.104.16.102:33081] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "aaLz2xCf4HvhVePw3LZrCgAAAAU"]
[Sat Feb 28 21:55:40.311432 2026] [:error] [pid 39292:tid 39294] [client 20.104.16.102:61156] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaLz3KIAO5fN7BxyqcGK5gAAAMA"]
[Sat Feb 28 21:55:41.247899 2026] [:error] [pid 39184:tid 39235] [client 20.104.16.102:38236] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaLz3VtZF9Zd_U7easDXSwAAAFA"]
[Sat Feb 28 21:55:43.253277 2026] [:error] [pid 39183:tid 39204] [client 20.104.16.102:41253] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaLz3xCf4HvhVePw3LZrEgAAAAw"]
[Sat Feb 28 21:55:44.452973 2026] [:error] [pid 52460:tid 52483] [client 20.104.16.102:61183] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaLz4LLWOogAgHGh62SkkAAAAZQ"]
[Sat Feb 28 21:55:47.152126 2026] [:error] [pid 52460:tid 52470] [client 20.104.16.102:41728] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aaLz47LWOogAgHGh62SknwAAAYc"]
[Sat Feb 28 21:55:50.241365 2026] [:error] [pid 39185:tid 39263] [client 20.104.16.102:61080] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aaLz5hVE-FfM89u7BQarRgAAAJE"]
[Sat Feb 28 21:55:51.508234 2026] [:error] [pid 39184:tid 39223] [client 20.104.16.102:35702] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aaLz51tZF9Zd_U7easDXWQAAAEQ"]
[Sat Feb 28 21:55:52.348892 2026] [:error] [pid 49763:tid 49769] [client 20.104.16.102:41756] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aaLz6LTHSOG_yf2PpqGgLQAAAcM"]
[Sat Feb 28 21:55:52.959824 2026] [:error] [pid 49763:tid 49783] [client 20.104.16.102:35706] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aaLz6LTHSOG_yf2PpqGgMAAAAdE"]
[Sat Feb 28 21:55:53.920807 2026] [:error] [pid 49763:tid 49789] [client 20.104.16.102:46832] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aaLz6bTHSOG_yf2PpqGgNgAAAdc"]
[Sat Feb 28 21:55:54.653019 2026] [:error] [pid 49763:tid 49770] [client 20.104.16.102:33051] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aaLz6rTHSOG_yf2PpqGgPgAAAcQ"]
[Sat Feb 28 21:55:55.256258 2026] [:error] [pid 11791:tid 11799] [client 20.104.16.102:41234] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aaLz62uX5e1Q32gqxH3RZAAAAQY"]
[Sat Feb 28 21:55:55.865687 2026] [:error] [pid 49763:tid 49781] [client 20.104.16.102:41227] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLz67THSOG_yf2PpqGgTQAAAc8"]
[Sat Feb 28 21:55:56.477611 2026] [:error] [pid 39183:tid 39208] [client 20.104.16.102:8109] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLz7BCf4HvhVePw3LZrawAAABA"]
[Sat Feb 28 21:55:57.279723 2026] [:error] [pid 39183:tid 39215] [client 20.104.16.102:33075] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLz7RCf4HvhVePw3LZrdAAAABc"]
[Sat Feb 28 21:55:58.002923 2026] [:error] [pid 49763:tid 49781] [client 20.104.16.102:41749] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aaLz7rTHSOG_yf2PpqGgXgAAAc8"]
[Sat Feb 28 21:55:58.952164 2026] [:error] [pid 49763:tid 49777] [client 20.104.16.102:41231] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aaLz7rTHSOG_yf2PpqGgbwAAAcs"]
[Sat Feb 28 21:56:00.320657 2026] [:error] [pid 22194:tid 22196] [client 20.104.16.102:8110] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aaLz8H6mbajs3bzQGyuuuAAAAUA"]
[Sat Feb 28 21:56:01.288503 2026] [:error] [pid 49763:tid 49790] [client 20.104.16.102:41732] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aaLz8bTHSOG_yf2PpqGgfgAAAdg"]
[Sat Feb 28 21:56:02.191784 2026] [:error] [pid 49763:tid 49783] [client 20.104.16.102:38226] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aaLz8rTHSOG_yf2PpqGgigAAAdE"]
[Sat Feb 28 21:56:02.929685 2026] [:error] [pid 49763:tid 49780] [client 20.104.16.102:8108] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaLz8rTHSOG_yf2PpqGgmwAAAc4"]
[Sat Feb 28 21:56:03.861902 2026] [:error] [pid 39292:tid 39304] [client 20.104.16.102:41766] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaLz86IAO5fN7BxyqcGLFAAAAMo"]
[Sat Feb 28 21:56:04.900472 2026] [:error] [pid 39185:tid 39258] [client 20.104.16.102:38210] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaLz9BVE-FfM89u7BQarWAAAAIw"]
[Sat Feb 28 21:56:06.047526 2026] [:error] [pid 49763:tid 49769] [client 20.104.16.102:22607] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaLz9rTHSOG_yf2PpqGgvAAAAcM"]
[Sat Feb 28 21:56:07.957850 2026] [:error] [pid 39184:tid 39237] [client 20.104.16.102:38192] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaLz91tZF9Zd_U7easDXcAAAAFI"]
[Sat Feb 28 21:56:09.498893 2026] [:error] [pid 11791:tid 11798] [client 20.104.16.102:35691] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaLz-WuX5e1Q32gqxH3RbQAAAQU"]
[Sat Feb 28 21:56:10.610214 2026] [:error] [pid 39184:tid 39226] [client 20.104.16.102:35667] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaLz-ltZF9Zd_U7easDXfAAAAEc"]
[Sat Feb 28 21:56:11.740502 2026] [:error] [pid 22194:tid 22217] [client 20.104.16.102:27220] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aaLz-36mbajs3bzQGyuuyQAAAVU"]
[Sat Feb 28 21:56:12.695301 2026] [:error] [pid 22194:tid 22203] [client 20.104.16.102:61155] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaLz_H6mbajs3bzQGyuuzwAAAUc"]
[Sat Feb 28 21:56:15.310496 2026] [:error] [pid 39184:tid 39237] [client 20.104.16.102:38268] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaLz_1tZF9Zd_U7easDXggAAAFI"]
[Sat Feb 28 21:56:27.360840 2026] [:error] [pid 49763:tid 49781] [client 20.104.16.102:41764] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaL0C7THSOG_yf2PpqGhLQAAAc8"]
[Sat Feb 28 21:56:29.250404 2026] [:error] [pid 39292:tid 39298] [client 20.104.16.102:38243] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaL0DaIAO5fN7BxyqcGLlAAAAMQ"]
[Sat Feb 28 21:56:31.454645 2026] [:error] [pid 49763:tid 49766] [client 20.104.16.102:38266] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaL0D7THSOG_yf2PpqGhWwAAAcA"]
[Sat Feb 28 21:56:33.727371 2026] [:error] [pid 11791:tid 11796] [client 20.104.16.102:7444] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaL0EWuX5e1Q32gqxH3RsAAAAQM"]
[Sat Feb 28 21:56:34.979015 2026] [:error] [pid 39292:tid 39316] [client 20.104.16.102:38222] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aaL0EqIAO5fN7BxyqcGLnQAAANY"]
[Sat Feb 28 21:56:36.103564 2026] [:error] [pid 39183:tid 39201] [client 20.104.16.102:27252] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aaL0FBCf4HvhVePw3LZr0gAAAAk"]
[Sat Feb 28 21:56:36.843133 2026] [:error] [pid 39292:tid 39307] [client 20.104.16.102:27216] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aaL0FKIAO5fN7BxyqcGLowAAAM0"]
[Sat Feb 28 21:56:37.527435 2026] [:error] [pid 11791:tid 11802] [client 20.104.16.102:8120] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aaL0FWuX5e1Q32gqxH3RtgAAAQk"]
[Sat Feb 28 21:56:38.292414 2026] [:error] [pid 49763:tid 49786] [client 20.104.16.102:8082] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaL0FrTHSOG_yf2PpqGhmAAAAdQ"]
[Sat Feb 28 21:56:39.029239 2026] [:error] [pid 39185:tid 39258] [client 20.104.16.102:33027] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaL0FxVE-FfM89u7BQarfgAAAIw"]
[Sat Feb 28 21:56:39.649917 2026] [:error] [pid 49763:tid 49788] [client 20.104.16.102:26501] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaL0F7THSOG_yf2PpqGhpQAAAdY"]
[Sat Feb 28 21:56:40.829649 2026] [:error] [pid 39183:tid 39213] [client 20.104.16.102:61126] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaL0GBCf4HvhVePw3LZr8QAAABU"]
[Sat Feb 28 21:56:41.835512 2026] [:error] [pid 52460:tid 52486] [client 20.104.16.102:38164] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaL0GbLWOogAgHGh62SllgAAAZc"]
[Sat Feb 28 21:56:43.461578 2026] [:error] [pid 39183:tid 39202] [client 20.104.16.102:27261] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaL0GxCf4HvhVePw3LZsCwAAAAo"]
[Sat Feb 28 21:56:44.540423 2026] [:error] [pid 39183:tid 39199] [client 20.104.16.102:33053] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaL0HBCf4HvhVePw3LZsIgAAAAc"]
[Sat Feb 28 21:56:47.186637 2026] [:error] [pid 52460:tid 52487] [client 20.104.16.102:7677] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaL0H7LWOogAgHGh62SlpQAAAZg"]
[Sat Feb 28 21:56:48.786800 2026] [:error] [pid 49763:tid 49782] [client 20.104.16.102:61129] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaL0ILTHSOG_yf2PpqGh8wAAAdA"]
[Sat Feb 28 21:56:49.593105 2026] [:error] [pid 39185:tid 39265] [client 20.104.16.102:8097] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaL0IRVE-FfM89u7BQarhwAAAJM"]
[Sat Feb 28 21:56:51.809297 2026] [:error] [pid 11791:tid 11802] [client 20.104.16.102:27222] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaL0I2uX5e1Q32gqxH3RxgAAAQk"]
[Sat Feb 28 21:56:52.933370 2026] [:error] [pid 39183:tid 39207] [client 20.104.16.102:8103] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aaL0JBCf4HvhVePw3LZsZgAAAA8"]
[Sat Feb 28 21:56:53.544827 2026] [:error] [pid 49763:tid 49773] [client 20.104.16.102:33074] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaL0JbTHSOG_yf2PpqGiEAAAAcc"]
[Sat Feb 28 21:56:54.107759 2026] [:error] [pid 49763:tid 49772] [client 20.104.16.102:41223] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaL0JrTHSOG_yf2PpqGiFAAAAcY"]
[Sat Feb 28 21:56:54.965803 2026] [:error] [pid 39184:tid 39219] [client 20.104.16.102:38160] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaL0JltZF9Zd_U7easDXxwAAAEA"]
[Sat Feb 28 21:56:55.697900 2026] [:error] [pid 11791:tid 11800] [client 20.104.16.102:61103] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaL0J2uX5e1Q32gqxH3RywAAAQc"]
[Sat Feb 28 21:56:56.492455 2026] [:error] [pid 39183:tid 39214] [client 20.104.16.102:41747] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaL0KBCf4HvhVePw3LZsggAAABY"]
[Sat Feb 28 21:56:57.670458 2026] [:error] [pid 49763:tid 49766] [client 20.104.16.102:7467] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaL0KbTHSOG_yf2PpqGiMgAAAcA"]
[Sat Feb 28 21:56:58.448344 2026] [:error] [pid 39185:tid 39250] [client 20.104.16.102:33030] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaL0KhVE-FfM89u7BQarjQAAAIQ"]
[Sat Feb 28 21:56:59.257962 2026] [:error] [pid 22194:tid 22209] [client 20.104.16.102:8077] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaL0K36mbajs3bzQGyuu7wAAAU0"]
[Sat Feb 28 21:57:00.575874 2026] [:error] [pid 11791:tid 11817] [client 20.104.16.102:42566] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aaL0LGuX5e1Q32gqxH3R0gAAARg"]
[Sat Feb 28 21:57:01.748789 2026] [:error] [pid 39183:tid 39210] [client 20.104.16.102:41751] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aaL0LRCf4HvhVePw3LZskwAAABI"]
[Sat Feb 28 21:57:03.018669 2026] [:error] [pid 39292:tid 39311] [client 20.104.16.102:42623] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aaL0L6IAO5fN7BxyqcGL3QAAANE"]
[Sat Feb 28 21:57:03.999413 2026] [:error] [pid 39292:tid 39309] [client 20.104.16.102:27223] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aaL0L6IAO5fN7BxyqcGL5QAAAM8"]
[Sat Feb 28 21:57:04.779765 2026] [:error] [pid 39185:tid 39263] [client 20.104.16.102:41741] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aaL0MBVE-FfM89u7BQarkwAAAJE"]
[Sat Feb 28 21:57:05.361013 2026] [:error] [pid 39183:tid 39204] [client 20.104.16.102:41729] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aaL0MRCf4HvhVePw3LZsqgAAAAw"]
[Sat Feb 28 21:57:06.187277 2026] [:error] [pid 49763:tid 49774] [client 20.104.16.102:35679] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aaL0MrTHSOG_yf2PpqGiUgAAAcg"]
[Sat Feb 28 21:57:07.332905 2026] [:error] [pid 49763:tid 49780] [client 20.104.16.102:38257] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aaL0M7THSOG_yf2PpqGiWwAAAc4"]
[Sat Feb 28 21:57:07.872004 2026] [:error] [pid 39292:tid 39298] [client 20.104.16.102:38247] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aaL0M6IAO5fN7BxyqcGL8wAAAMQ"]
[Sat Feb 28 21:57:08.609198 2026] [:error] [pid 49763:tid 49789] [client 20.104.16.102:41784] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aaL0NLTHSOG_yf2PpqGiZAAAAdc"]
[Sat Feb 28 21:57:09.524401 2026] [:error] [pid 39185:tid 39265] [client 20.104.16.102:7475] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aaL0NRVE-FfM89u7BQarmwAAAJM"]
[Sat Feb 28 21:57:10.165182 2026] [:error] [pid 52460:tid 52463] [client 20.104.16.102:27214] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aaL0NrLWOogAgHGh62Sl3gAAAYA"]
[Sat Feb 28 21:57:10.699253 2026] [:error] [pid 22194:tid 22209] [client 20.104.16.102:27239] [client 20.104.16.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaL0Nn6mbajs3bzQGyuvEwAAAU0"]
[Sat Feb 28 21:57:12.792040 2026] [:error] [pid 39184:tid 39221] [client 20.104.16.102:8071] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaL0OFtZF9Zd_U7easDX4AAAAEI"]
[Sat Feb 28 21:57:13.651966 2026] [:error] [pid 22194:tid 22215] [client 20.104.16.102:61143] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaL0OX6mbajs3bzQGyuvGQAAAVM"]
[Sat Feb 28 21:57:14.462991 2026] [:error] [pid 39183:tid 39193] [client 20.104.16.102:33035] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aaL0OhCf4HvhVePw3LZs0AAAAAE"]
[Sat Feb 28 21:57:15.631251 2026] [:error] [pid 52460:tid 52476] [client 20.104.16.102:41268] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aaL0O7LWOogAgHGh62Sl8AAAAY0"]
[Sat Feb 28 21:57:16.362544 2026] [:error] [pid 52460:tid 52479] [client 20.104.16.102:61149] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aaL0PLLWOogAgHGh62Sl9wAAAZA"]
[Sat Feb 28 21:57:17.079219 2026] [:error] [pid 49763:tid 49781] [client 20.104.16.102:33025] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aaL0PbTHSOG_yf2PpqGihAAAAc8"]
[Sat Feb 28 21:57:17.622904 2026] [:error] [pid 39292:tid 39314] [client 20.104.16.102:8081] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hi.php"] [unique_id "aaL0PaIAO5fN7BxyqcGMSQAAANQ"]
[Sat Feb 28 21:57:18.459731 2026] [:error] [pid 49763:tid 49766] [client 20.104.16.102:35666] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aaL0PrTHSOG_yf2PpqGilQAAAcA"]
[Sat Feb 28 21:57:19.753155 2026] [:error] [pid 49763:tid 49788] [client 20.104.16.102:8105] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aaL0P7THSOG_yf2PpqGinAAAAdY"]
[Sat Feb 28 21:57:20.414747 2026] [:error] [pid 39292:tid 39304] [client 20.104.16.102:41789] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aaL0QKIAO5fN7BxyqcGMWgAAAMo"]
[Sat Feb 28 21:57:21.555868 2026] [:error] [pid 39184:tid 39231] [client 20.104.16.102:41258] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "aaL0QVtZF9Zd_U7easDX6wAAAEw"]
[Sat Feb 28 21:57:22.215744 2026] [:error] [pid 39183:tid 39204] [client 20.104.16.102:61124] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaL0QhCf4HvhVePw3LZs5QAAAAw"]
[Sat Feb 28 21:57:23.123680 2026] [:error] [pid 39183:tid 39208] [client 20.104.16.102:27263] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaL0QxCf4HvhVePw3LZs9AAAABA"]
[Sat Feb 28 21:57:23.621255 2026] [:error] [pid 39292:tid 39305] [client 20.104.16.102:33078] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaL0Q6IAO5fN7BxyqcGMXwAAAMs"]
[Sat Feb 28 21:57:24.178461 2026] [:error] [pid 39184:tid 39238] [client 20.104.16.102:8118] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aaL0RFtZF9Zd_U7easDX8AAAAFM"]
[Sat Feb 28 21:57:24.995952 2026] [:error] [pid 39184:tid 39235] [client 20.104.16.102:41261] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaL0RFtZF9Zd_U7easDX_QAAAFA"]
[Sat Feb 28 21:57:25.497422 2026] [:error] [pid 39292:tid 39313] [client 20.104.16.102:27224] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaL0RaIAO5fN7BxyqcGMbgAAANM"]
[Sat Feb 28 21:57:26.107805 2026] [:error] [pid 39292:tid 39298] [client 20.104.16.102:33033] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaL0RqIAO5fN7BxyqcGMcgAAAMQ"]
[Sat Feb 28 21:57:26.777195 2026] [:error] [pid 39184:tid 39232] [client 20.104.16.102:7485] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaL0RltZF9Zd_U7easDYCAAAAE0"]
[Sat Feb 28 21:57:33.504070 2026] [:error] [pid 11791:tid 11809] [client 20.104.16.102:38242] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaL0TWuX5e1Q32gqxH3SLgAAARA"]
[Sat Feb 28 21:57:34.844592 2026] [:error] [pid 52460:tid 52468] [client 20.104.16.102:8127] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaL0TrLWOogAgHGh62SmQgAAAYU"]
[Sat Feb 28 21:57:36.552535 2026] [:error] [pid 39185:tid 39256] [client 20.104.16.102:61174] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaL0UBVE-FfM89u7BQaruAAAAIo"]
[Sat Feb 28 21:57:37.452250 2026] [:error] [pid 11791:tid 11804] [client 20.104.16.102:41734] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaL0UWuX5e1Q32gqxH3SOgAAAQs"]
[Sat Feb 28 21:57:38.189264 2026] [:error] [pid 49763:tid 49783] [client 20.104.16.102:61153] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aaL0UrTHSOG_yf2PpqGivAAAAdE"]
[Sat Feb 28 21:57:38.730209 2026] [:error] [pid 49763:tid 49773] [client 20.104.16.102:27259] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aaL0UrTHSOG_yf2PpqGiwQAAAcc"]
[Sat Feb 28 21:57:39.505163 2026] [:error] [pid 49763:tid 49778] [client 20.104.16.102:33026] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aaL0U7THSOG_yf2PpqGiyAAAAcw"]
[Sat Feb 28 21:57:40.444171 2026] [:error] [pid 49763:tid 49779] [client 20.104.16.102:41735] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aaL0VLTHSOG_yf2PpqGi1AAAAc0"]
[Sat Feb 28 21:57:41.515247 2026] [:error] [pid 49763:tid 49778] [client 20.104.16.102:8087] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aaL0VbTHSOG_yf2PpqGi3wAAAcw"]
[Sat Feb 28 21:57:42.324935 2026] [:error] [pid 52460:tid 52466] [client 20.104.16.102:41789] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aaL0VrLWOogAgHGh62SmagAAAYM"]
[Sat Feb 28 21:57:42.907503 2026] [:error] [pid 39183:tid 39210] [client 20.104.16.102:8067] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aaL0VhCf4HvhVePw3LZtMQAAABI"]
[Sat Feb 28 21:57:43.852813 2026] [:error] [pid 22194:tid 22203] [client 20.104.16.102:33055] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aaL0V36mbajs3bzQGyuvUgAAAUc"]
[Sat Feb 28 21:57:44.743316 2026] [:error] [pid 52460:tid 52482] [client 20.104.16.102:41276] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aaL0WLLWOogAgHGh62SmcQAAAZM"]
[Sat Feb 28 21:57:45.627578 2026] [:error] [pid 52460:tid 52465] [client 20.104.16.102:41230] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aaL0WbLWOogAgHGh62SmeQAAAYI"]
[Sat Feb 28 21:57:48.149726 2026] [:error] [pid 39292:tid 39307] [client 20.104.16.102:33037] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aaL0XKIAO5fN7BxyqcGMogAAAM0"]
[Sat Feb 28 21:57:49.503041 2026] [:error] [pid 49763:tid 49778] [client 20.104.16.102:26554] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "aaL0XbTHSOG_yf2PpqGjHgAAAcw"]
[Sat Feb 28 21:57:50.552068 2026] [:error] [pid 39292:tid 39295] [client 20.104.16.102:41249] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aaL0XqIAO5fN7BxyqcGMqAAAAME"]
[Sat Feb 28 21:57:51.619873 2026] [:error] [pid 49763:tid 49777] [client 20.104.16.102:35678] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aaL0X7THSOG_yf2PpqGjMAAAAcs"]
[Sat Feb 28 21:57:52.354859 2026] [:error] [pid 49763:tid 49779] [client 20.104.16.102:27229] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aaL0YLTHSOG_yf2PpqGjPQAAAc0"]
[Sat Feb 28 21:57:54.403573 2026] [:error] [pid 22194:tid 22220] [client 20.104.16.102:35710] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/miansha.php"] [unique_id "aaL0Yn6mbajs3bzQGyuvVQAAAVg"]
[Sat Feb 28 21:57:56.188337 2026] [:error] [pid 49763:tid 49774] [client 20.104.16.102:35685] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaL0ZLTHSOG_yf2PpqGjYwAAAcg"]
[Sat Feb 28 21:57:57.154204 2026] [:error] [pid 49763:tid 49775] [client 20.104.16.102:8102] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaL0ZbTHSOG_yf2PpqGjbgAAAck"]
[Sat Feb 28 21:57:58.195195 2026] [:error] [pid 49763:tid 49787] [client 20.104.16.102:33024] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaL0ZrTHSOG_yf2PpqGjeQAAAdU"]
[Sat Feb 28 21:57:59.000756 2026] [:error] [pid 11791:tid 11816] [client 20.104.16.102:8073] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaL0Z2uX5e1Q32gqxH3SVwAAARc"]
[Sat Feb 28 21:57:59.602436 2026] [:error] [pid 39184:tid 39227] [client 20.104.16.102:38235] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaL0Z1tZF9Zd_U7easDYVAAAAEg"]
[Sat Feb 28 21:58:00.405857 2026] [:error] [pid 39292:tid 39302] [client 20.104.16.102:61137] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaL0aKIAO5fN7BxyqcGMyAAAAMg"]
[Sat Feb 28 21:58:01.402736 2026] [:error] [pid 39183:tid 39194] [client 20.104.16.102:61165] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaL0aRCf4HvhVePw3LZtdgAAAAI"]
[Sat Feb 28 21:58:01.987808 2026] [:error] [pid 49763:tid 49769] [client 20.104.16.102:8098] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaL0abTHSOG_yf2PpqGjkAAAAcM"]
[Sat Feb 28 21:58:02.890354 2026] [:error] [pid 39183:tid 39214] [client 20.104.16.102:41222] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaL0ahCf4HvhVePw3LZtfgAAABY"]
[Sat Feb 28 21:58:03.598327 2026] [:error] [pid 49763:tid 49768] [client 20.104.16.102:41226] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaL0a7THSOG_yf2PpqGjpwAAAcI"]
[Sat Feb 28 21:58:04.482786 2026] [:error] [pid 52460:tid 52475] [client 20.104.16.102:33087] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaL0bLLWOogAgHGh62SmuQAAAYw"]
[Sat Feb 28 21:58:05.077968 2026] [:error] [pid 39184:tid 39238] [client 20.104.16.102:27225] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaL0bVtZF9Zd_U7easDYXwAAAFM"]
[Sat Feb 28 21:58:05.671518 2026] [:error] [pid 39183:tid 39206] [client 20.104.16.102:41768] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aaL0bRCf4HvhVePw3LZtkgAAAA4"]
[Sat Feb 28 21:58:06.643716 2026] [:error] [pid 49763:tid 49767] [client 20.104.16.102:27249] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aaL0brTHSOG_yf2PpqGjwQAAAcE"]
[Sat Feb 28 21:58:07.240593 2026] [:error] [pid 11791:tid 11809] [client 20.104.16.102:27238] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aaL0b2uX5e1Q32gqxH3SZAAAARA"]
[Sat Feb 28 21:58:07.818788 2026] [:error] [pid 39183:tid 39192] [client 20.104.16.102:8075] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aaL0bxCf4HvhVePw3LZtnwAAAAA"]
[Sat Feb 28 21:58:08.517838 2026] [:error] [pid 49763:tid 49784] [client 20.104.16.102:27254] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aaL0cLTHSOG_yf2PpqGj4AAAAdI"]
[Sat Feb 28 21:58:09.313111 2026] [:error] [pid 49763:tid 49767] [client 20.104.16.102:35687] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aaL0cbTHSOG_yf2PpqGj6gAAAcE"]
[Sat Feb 28 21:58:10.038965 2026] [:error] [pid 49763:tid 49772] [client 20.104.16.102:41770] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aaL0crTHSOG_yf2PpqGj8QAAAcY"]
[Sat Feb 28 21:58:10.668958 2026] [:error] [pid 52460:tid 52481] [client 20.104.16.102:38211] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aaL0crLWOogAgHGh62SmzgAAAZI"]
[Sat Feb 28 21:58:11.238019 2026] [:error] [pid 52460:tid 52477] [client 20.104.16.102:33086] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaL0c7LWOogAgHGh62Sm0wAAAY4"]
[Sat Feb 28 21:58:11.743247 2026] [:error] [pid 39292:tid 39306] [client 20.104.16.102:41236] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaL0c6IAO5fN7BxyqcGM8wAAAMw"]
[Sat Feb 28 21:58:12.343775 2026] [:error] [pid 49763:tid 49770] [client 20.104.16.102:38259] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaL0dLTHSOG_yf2PpqGkCAAAAcQ"]
[Sat Feb 28 21:58:13.089073 2026] [:error] [pid 39292:tid 39314] [client 20.104.16.102:26542] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaL0daIAO5fN7BxyqcGM-QAAANQ"]
[Sat Feb 28 21:58:13.648063 2026] [:error] [pid 39183:tid 39195] [client 20.104.16.102:61144] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aaL0dRCf4HvhVePw3LZtvQAAAAM"]
[Sat Feb 28 21:58:14.574767 2026] [:error] [pid 49763:tid 49789] [client 20.104.16.102:27218] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aaL0drTHSOG_yf2PpqGkGQAAAdc"]
[Sat Feb 28 21:58:15.167466 2026] [:error] [pid 39185:tid 39255] [client 20.104.16.102:41273] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aaL0dxVE-FfM89u7BQar0QAAAIk"]
[Sat Feb 28 21:58:15.899902 2026] [:error] [pid 22194:tid 22216] [client 20.104.16.102:8086] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "aaL0d36mbajs3bzQGyuvYgAAAVQ"]
[Sat Feb 28 21:58:16.884773 2026] [:error] [pid 39183:tid 39198] [client 20.104.16.102:36296] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aaL0eBCf4HvhVePw3LZt4AAAAAY"]
[Sat Feb 28 21:58:18.363561 2026] [:error] [pid 49763:tid 49777] [client 20.104.16.102:61085] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aaL0erTHSOG_yf2PpqGkJAAAAcs"]
[Sat Feb 28 21:58:19.637106 2026] [:error] [pid 52460:tid 52477] [client 20.104.16.102:26508] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aaL0e7LWOogAgHGh62SnAQAAAY4"]
[Sat Feb 28 21:58:21.013821 2026] [:error] [pid 39184:tid 39229] [client 20.104.16.102:8080] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/styll.php"] [unique_id "aaL0fVtZF9Zd_U7easDYbwAAAEo"]
[Sat Feb 28 21:58:21.996287 2026] [:error] [pid 49763:tid 49788] [client 20.104.16.102:8126] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aaL0fbTHSOG_yf2PpqGkNQAAAdY"]
[Sat Feb 28 21:58:22.983871 2026] [:error] [pid 49763:tid 49783] [client 20.104.16.102:22644] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aaL0frTHSOG_yf2PpqGkPAAAAdE"]
[Sat Feb 28 21:58:24.198415 2026] [:error] [pid 49763:tid 49766] [client 20.104.16.102:35649] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aaL0gLTHSOG_yf2PpqGkSQAAAcA"]
[Sat Feb 28 21:58:25.439985 2026] [:error] [pid 52460:tid 52479] [client 20.104.16.102:33036] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "aaL0gbLWOogAgHGh62SnIwAAAZA"]
[Sat Feb 28 21:58:26.357988 2026] [:error] [pid 39183:tid 39193] [client 20.104.16.102:33060] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aaL0ghCf4HvhVePw3LZuFgAAAAE"]
[Sat Feb 28 21:58:26.925438 2026] [:error] [pid 39184:tid 39231] [client 20.104.16.102:41791] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aaL0gltZF9Zd_U7easDYcwAAAEw"]
[Sat Feb 28 21:58:27.496762 2026] [:error] [pid 39292:tid 39311] [client 20.104.16.102:26503] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aaL0g6IAO5fN7BxyqcGNHQAAANE"]
[Sat Feb 28 21:58:28.314946 2026] [:error] [pid 52460:tid 52484] [client 20.104.16.102:26537] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower2.php"] [unique_id "aaL0hLLWOogAgHGh62SnLAAAAZU"]
[Sat Feb 28 21:58:29.159067 2026] [:error] [pid 49763:tid 49772] [client 20.104.16.102:33031] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaL0hbTHSOG_yf2PpqGkWgAAAcY"]
[Sat Feb 28 21:58:30.635138 2026] [:error] [pid 49763:tid 49770] [client 20.104.16.102:22592] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaL0hrTHSOG_yf2PpqGkaQAAAcQ"]
[Sat Feb 28 21:58:31.311479 2026] [:error] [pid 49763:tid 49779] [client 20.104.16.102:38241] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaL0h7THSOG_yf2PpqGkbgAAAc0"]
[Sat Feb 28 21:58:32.429850 2026] [:error] [pid 49763:tid 49772] [client 20.104.16.102:33063] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4h.php"] [unique_id "aaL0iLTHSOG_yf2PpqGkeQAAAcY"]
[Sat Feb 28 22:05:16.316441 2026] [:error] [pid 39183:tid 39207] [client 170.106.35.187:48710] [client 170.106.35.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaL2HBCf4HvhVePw3LZ2jQAAAA8"]
[Sat Feb 28 22:13:00.055738 2026] [:error] [pid 39292:tid 39294] [client 40.85.218.222:17192] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaL37KIAO5fN7BxyqcGSNAAAAMA"]
[Sat Feb 28 22:13:00.895577 2026] [:error] [pid 49763:tid 49789] [client 40.85.218.222:17191] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaL37LTHSOG_yf2PpqG3ygAAAdc"]
[Sat Feb 28 22:13:01.754605 2026] [:error] [pid 49763:tid 49772] [client 40.85.218.222:17152] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaL37bTHSOG_yf2PpqG3zAAAAcY"]
[Sat Feb 28 22:13:02.591527 2026] [:error] [pid 22194:tid 22215] [client 40.85.218.222:62319] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaL37n6mbajs3bzQGyux1wAAAVM"]
[Sat Feb 28 22:17:48.016744 2026] [:error] [pid 39292:tid 39307] [client 20.151.205.221:64835] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaL5DKIAO5fN7BxyqcGUAgAAAM0"]
[Sat Feb 28 22:17:49.757897 2026] [proxy_fcgi:error] [pid 49763:tid 49774] [client 20.151.205.221:22779] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 22:17:51.480237 2026] [:error] [pid 49763:tid 49776] [client 20.151.205.221:22779] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaL5D7THSOG_yf2PpqG9XgAAAco"]
[Sat Feb 28 22:17:52.319406 2026] [:error] [pid 39185:tid 39252] [client 20.151.205.221:64862] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaL5EBVE-FfM89u7BQav_AAAAIY"]
[Sat Feb 28 22:17:53.176177 2026] [:error] [pid 39292:tid 39315] [client 20.151.205.221:64842] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaL5EaIAO5fN7BxyqcGUCwAAANU"]
[Sat Feb 28 22:17:54.005567 2026] [:error] [pid 52460:tid 52485] [client 20.151.205.221:22728] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaL5ErLWOogAgHGh62S0ngAAAZY"]
[Sat Feb 28 22:26:14.908661 2026] [:error] [pid 39184:tid 39228] [client 40.115.138.121:4494] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaL7BltZF9Zd_U7easDmEQAAAEk"]
[Sat Feb 28 22:26:15.367522 2026] [:error] [pid 49763:tid 49785] [client 40.115.138.121:11387] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaL7B7THSOG_yf2PpqHMNgAAAdM"]
[Sat Feb 28 22:26:15.847136 2026] [:error] [pid 52460:tid 52469] [client 40.115.138.121:21404] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaL7B7LWOogAgHGh62S7BAAAAYY"]
[Sat Feb 28 22:26:16.307172 2026] [:error] [pid 39292:tid 39298] [client 40.115.138.121:3646] [client 40.115.138.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaL7CKIAO5fN7BxyqcGWRgAAAMQ"]
[Sun Mar 01 00:26:55.999231 2026] [:error] [pid 53600:tid 53622] [client 43.157.174.69:35544] [client 43.157.174.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaMXTw2UMRAYWtDB23SipgAAARM"]
[Sun Mar 01 01:05:28.393676 2026] [:error] [pid 53600:tid 53606] [client 20.63.83.162:33282] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaMgWA2UMRAYWtDB23TRqwAAAQM"]
[Sun Mar 01 01:05:29.235935 2026] [:error] [pid 30797:tid 30888] [client 20.63.83.162:33284] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaMgWfQmcmSQL-3rvLACkAAAAFE"]
[Sun Mar 01 01:05:30.068438 2026] [:error] [pid 11920:tid 11940] [client 20.63.83.162:33300] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaMgWizLNJUKxvBorrCBBgAAAZA"]
[Sun Mar 01 01:05:30.898202 2026] [:error] [pid 11920:tid 11945] [client 20.63.83.162:33130] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaMgWizLNJUKxvBorrCBFwAAAZU"]
[Sun Mar 01 01:17:03.234613 2026] [:error] [pid 53600:tid 53608] [client 20.151.205.221:22889] [client 20.151.205.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaMjDw2UMRAYWtDB23TXegAAAQU"]
[Sun Mar 01 01:17:04.971418 2026] [:error] [pid 11920:tid 11930] [client 20.151.205.221:60660] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin.php"] [unique_id "aaMjECzLNJUKxvBorrCT6wAAAYY"]
[Sun Mar 01 01:17:05.811666 2026] [:error] [pid 7644:tid 7655] [client 20.151.205.221:60639] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin.php"] [unique_id "aaMjEfqeDUGmVAHX7VCXJAAAAUk"]
[Sun Mar 01 01:17:06.643094 2026] [:error] [pid 11920:tid 11934] [client 20.151.205.221:60613] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin.php"] [unique_id "aaMjEizLNJUKxvBorrCT-gAAAYo"]
[Sun Mar 01 01:17:07.479489 2026] [:error] [pid 11920:tid 11925] [client 20.151.205.221:60643] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin.php"] [unique_id "aaMjEyzLNJUKxvBorrCUAQAAAYE"]
[Sun Mar 01 03:27:23.470131 2026] [:error] [pid 31190:tid 31216] [client 35.150.39.131:13440] [client 35.150.39.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.150.39.131, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNBmxfvwGOholYpM1HOXgAAAMo"]
[Sun Mar 01 03:31:06.728898 2026] [:error] [pid 31190:tid 31226] [client 172.190.142.176:46217] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaNCehfvwGOholYpM1HSLgAAANQ"]
[Sun Mar 01 03:31:07.399860 2026] [:error] [pid 7644:tid 7657] [client 172.190.142.176:25672] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaNCe_qeDUGmVAHX7VC_rwAAAUs"]
[Sun Mar 01 03:31:08.545507 2026] [:error] [pid 31190:tid 31223] [client 172.190.142.176:64745] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaNCfBfvwGOholYpM1HSNwAAANE"]
[Sun Mar 01 03:31:09.544275 2026] [:error] [pid 30798:tid 30916] [client 172.190.142.176:11246] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dom.php"] [unique_id "aaNCfcBkD73gO8wTonbwKQAAAJE"]
[Sun Mar 01 03:31:10.077051 2026] [:error] [pid 53600:tid 53627] [client 172.190.142.176:37355] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaNCfg2UMRAYWtDB23QPJwAAARg"]
[Sun Mar 01 03:31:10.810752 2026] [:error] [pid 53600:tid 53617] [client 172.190.142.176:28486] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaNCfg2UMRAYWtDB23QPKgAAAQ4"]
[Sun Mar 01 03:31:11.446921 2026] [:error] [pid 31190:tid 31219] [client 172.190.142.176:33147] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaNCfxfvwGOholYpM1HSPAAAAM0"]
[Sun Mar 01 03:31:12.238162 2026] [:error] [pid 7644:tid 7646] [client 172.190.142.176:28505] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaNCgPqeDUGmVAHX7VC_swAAAUA"]
[Sun Mar 01 03:31:13.327786 2026] [:error] [pid 53600:tid 53623] [client 172.190.142.176:58251] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaNCgQ2UMRAYWtDB23QPNwAAARQ"]
[Sun Mar 01 03:31:14.376646 2026] [:error] [pid 7644:tid 7669] [client 172.190.142.176:37342] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaNCgvqeDUGmVAHX7VC_uwAAAVc"]
[Sun Mar 01 03:31:15.851635 2026] [:error] [pid 53600:tid 53607] [client 172.190.142.176:38513] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaNCgw2UMRAYWtDB23QPPAAAAQQ"]
[Sun Mar 01 03:31:17.162635 2026] [:error] [pid 31190:tid 31220] [client 172.190.142.176:42306] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/moon3.php"] [unique_id "aaNChRfvwGOholYpM1HSSAAAAM4"]
[Sun Mar 01 03:31:19.038851 2026] [:error] [pid 31190:tid 31223] [client 172.190.142.176:37365] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaNChxfvwGOholYpM1HSUwAAANE"]
[Sun Mar 01 03:31:20.469936 2026] [:error] [pid 11920:tid 11936] [client 172.190.142.176:64585] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaNCiCzLNJUKxvBorrBH7QAAAYw"]
[Sun Mar 01 03:31:21.641206 2026] [:error] [pid 30798:tid 30910] [client 172.190.142.176:15001] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaNCicBkD73gO8wTonbwPAAAAIs"]
[Sun Mar 01 03:31:22.279094 2026] [:error] [pid 30798:tid 30920] [client 172.190.142.176:24261] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/thui.php"] [unique_id "aaNCisBkD73gO8wTonbwQAAAAJQ"]
[Sun Mar 01 03:31:23.250345 2026] [:error] [pid 30798:tid 30918] [client 172.190.142.176:40771] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaNCi8BkD73gO8wTonbwQgAAAJM"]
[Sun Mar 01 03:31:24.729998 2026] [:error] [pid 11920:tid 11941] [client 172.190.142.176:38514] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaNCjCzLNJUKxvBorrBH_AAAAZE"]
[Sun Mar 01 03:31:25.846952 2026] [:error] [pid 7644:tid 7646] [client 172.190.142.176:40779] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaNCjfqeDUGmVAHX7VC_1QAAAUA"]
[Sun Mar 01 03:31:26.925559 2026] [:error] [pid 11920:tid 11943] [client 172.190.142.176:1506] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaNCjizLNJUKxvBorrBIDwAAAZM"]
[Sun Mar 01 03:31:27.648876 2026] [:error] [pid 11920:tid 11938] [client 172.190.142.176:40728] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaNCjyzLNJUKxvBorrBIFgAAAY4"]
[Sun Mar 01 03:31:28.192289 2026] [:error] [pid 11920:tid 11936] [client 172.190.142.176:31554] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaNCkCzLNJUKxvBorrBIGwAAAYw"]
[Sun Mar 01 03:31:28.664853 2026] [:error] [pid 11920:tid 11944] [client 172.190.142.176:25771] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaNCkCzLNJUKxvBorrBIHwAAAZQ"]
[Sun Mar 01 03:31:29.317513 2026] [:error] [pid 11920:tid 11945] [client 172.190.142.176:31489] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/snq.php"] [unique_id "aaNCkSzLNJUKxvBorrBILAAAAZU"]
[Sun Mar 01 03:31:29.973038 2026] [:error] [pid 7644:tid 7647] [client 172.190.142.176:50200] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaNCkfqeDUGmVAHX7VC_2QAAAUE"]
[Sun Mar 01 03:31:30.486790 2026] [:error] [pid 11920:tid 11930] [client 172.190.142.176:25756] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaNCkizLNJUKxvBorrBIMwAAAYY"]
[Sun Mar 01 03:31:31.448929 2026] [:error] [pid 7644:tid 7667] [client 172.190.142.176:38669] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaNCk_qeDUGmVAHX7VC_3wAAAVU"]
[Sun Mar 01 03:31:32.752353 2026] [:error] [pid 11920:tid 11943] [client 172.190.142.176:25755] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mcs.php"] [unique_id "aaNClCzLNJUKxvBorrBIPwAAAZM"]
[Sun Mar 01 03:31:33.763815 2026] [:error] [pid 11920:tid 11924] [client 172.190.142.176:63944] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaNClSzLNJUKxvBorrBISAAAAYA"]
[Sun Mar 01 03:31:35.075006 2026] [:error] [pid 30798:tid 30906] [client 172.190.142.176:37285] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaNCl8BkD73gO8wTonbwbQAAAIc"]
[Sun Mar 01 03:31:36.029891 2026] [:error] [pid 30798:tid 30900] [client 172.190.142.176:20573] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaNCmMBkD73gO8wTonbwfQAAAIE"]
[Sun Mar 01 03:31:36.800552 2026] [:error] [pid 53600:tid 53614] [client 172.190.142.176:52767] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aaNCmA2UMRAYWtDB23QPZgAAAQs"]
[Sun Mar 01 03:31:37.344760 2026] [:error] [pid 30797:tid 30885] [client 172.190.142.176:52779] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaNCmfQmcmSQL-3rvLAbNwAAAE4"]
[Sun Mar 01 03:31:37.791336 2026] [:error] [pid 53600:tid 53625] [client 172.190.142.176:36021] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaNCmQ2UMRAYWtDB23QPbQAAARY"]
[Sun Mar 01 03:31:38.260075 2026] [:error] [pid 7644:tid 7662] [client 172.190.142.176:52788] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaNCmvqeDUGmVAHX7VC_5AAAAVA"]
[Sun Mar 01 03:31:39.078250 2026] [:error] [pid 53600:tid 53624] [client 172.190.142.176:52766] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xleet.php"] [unique_id "aaNCmw2UMRAYWtDB23QPcAAAARU"]
[Sun Mar 01 03:31:39.676457 2026] [:error] [pid 53600:tid 53622] [client 172.190.142.176:32263] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaNCmw2UMRAYWtDB23QPcwAAARM"]
[Sun Mar 01 03:31:40.508299 2026] [:error] [pid 30795:tid 30825] [client 172.190.142.176:35977] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaNCnGuI44IL94Zgti_ZXQAAABE"]
[Sun Mar 01 03:31:41.775809 2026] [:error] [pid 11920:tid 11926] [client 172.190.142.176:25962] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaNCnSzLNJUKxvBorrBIdQAAAYI"]
[Sun Mar 01 03:31:42.508702 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:1593] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaNCnsBkD73gO8wTonbwlQAAAIU"]
[Sun Mar 01 03:31:43.321861 2026] [:error] [pid 30798:tid 30916] [client 172.190.142.176:63413] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaNCn8BkD73gO8wTonbwmgAAAJE"]
[Sun Mar 01 03:31:44.466180 2026] [:error] [pid 30798:tid 30912] [client 172.190.142.176:15897] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaNCoMBkD73gO8wTonbwpAAAAI0"]
[Sun Mar 01 03:31:45.422496 2026] [:error] [pid 11920:tid 11940] [client 172.190.142.176:35974] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaNCoSzLNJUKxvBorrBIfwAAAZA"]
[Sun Mar 01 03:31:46.058763 2026] [:error] [pid 11920:tid 11934] [client 172.190.142.176:32248] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaNCoizLNJUKxvBorrBIggAAAYo"]
[Sun Mar 01 03:31:46.637777 2026] [:error] [pid 31190:tid 31212] [client 172.190.142.176:33623] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaNCohfvwGOholYpM1HSsAAAAMY"]
[Sun Mar 01 03:31:47.679493 2026] [:error] [pid 30798:tid 30907] [client 172.190.142.176:25953] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaNCo8BkD73gO8wTonbwrgAAAIg"]
[Sun Mar 01 03:31:50.270980 2026] [:error] [pid 30795:tid 30823] [client 172.190.142.176:63099] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaNCpmuI44IL94Zgti_ZYQAAAA8"]
[Sun Mar 01 03:31:53.527695 2026] [:error] [pid 11920:tid 11948] [client 172.190.142.176:38551] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaNCqSzLNJUKxvBorrBIuwAAAZg"]
[Sun Mar 01 03:32:00.140643 2026] [:error] [pid 30798:tid 30914] [client 172.190.142.176:48833] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaNCsMBkD73gO8wTonbw1QAAAI8"]
[Sun Mar 01 03:32:20.965142 2026] [:error] [pid 30798:tid 30906] [client 172.190.142.176:10022] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaNCxMBkD73gO8wTonbxRgAAAIc"]
[Sun Mar 01 03:32:22.853314 2026] [:error] [pid 11920:tid 11934] [client 172.190.142.176:44221] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaNCxizLNJUKxvBorrBJWgAAAYo"]
[Sun Mar 01 03:32:29.136978 2026] [:error] [pid 30797:tid 30887] [client 172.190.142.176:13597] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaNCzfQmcmSQL-3rvLAbQAAAAFA"]
[Sun Mar 01 03:32:31.320076 2026] [:error] [pid 31190:tid 31224] [client 172.190.142.176:35194] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaNCzxfvwGOholYpM1HTMwAAANI"]
[Sun Mar 01 03:32:33.240610 2026] [:error] [pid 30798:tid 30908] [client 172.190.142.176:52383] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaNC0cBkD73gO8wTonbxewAAAIk"]
[Sun Mar 01 03:32:34.117833 2026] [:error] [pid 30795:tid 30823] [client 172.190.142.176:32224] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaNC0muI44IL94Zgti_ZdAAAAA8"]
[Sun Mar 01 03:32:35.137779 2026] [:error] [pid 53600:tid 53613] [client 172.190.142.176:13598] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaNC0w2UMRAYWtDB23QPqgAAAQo"]
[Sun Mar 01 03:32:36.026900 2026] [:error] [pid 11920:tid 11925] [client 172.190.142.176:39362] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaNC1CzLNJUKxvBorrBJpAAAAYE"]
[Sun Mar 01 03:32:36.649376 2026] [:error] [pid 31190:tid 31208] [client 172.190.142.176:38570] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aaNC1BfvwGOholYpM1HTPwAAAMI"]
[Sun Mar 01 03:32:37.698422 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:51948] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aaNC1cBkD73gO8wTonbxigAAAIU"]
[Sun Mar 01 03:32:38.466167 2026] [:error] [pid 30798:tid 30911] [client 172.190.142.176:13586] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aaNC1sBkD73gO8wTonbxjAAAAIw"]
[Sun Mar 01 03:32:39.043622 2026] [:error] [pid 30798:tid 30908] [client 172.190.142.176:13621] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-freya.php"] [unique_id "aaNC18BkD73gO8wTonbxjQAAAIk"]
[Sun Mar 01 03:32:39.802460 2026] [:error] [pid 31190:tid 31219] [client 172.190.142.176:35150] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bb.php"] [unique_id "aaNC1xfvwGOholYpM1HTTgAAAM0"]
[Sun Mar 01 03:32:40.505306 2026] [:error] [pid 30798:tid 30913] [client 172.190.142.176:13595] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bb.php"] [unique_id "aaNC2MBkD73gO8wTonbxkQAAAI4"]
[Sun Mar 01 03:32:41.001620 2026] [:error] [pid 30798:tid 30902] [client 172.190.142.176:44160] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bb.php"] [unique_id "aaNC2cBkD73gO8wTonbxkgAAAIM"]
[Sun Mar 01 03:32:41.754171 2026] [:error] [pid 30798:tid 30916] [client 172.190.142.176:1652] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bb.php"] [unique_id "aaNC2cBkD73gO8wTonbxmQAAAJE"]
[Sun Mar 01 03:32:43.242246 2026] [:error] [pid 31190:tid 31214] [client 172.190.142.176:44198] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dsd.php"] [unique_id "aaNC2xfvwGOholYpM1HTVAAAAMg"]
[Sun Mar 01 03:32:44.046372 2026] [:error] [pid 53600:tid 53606] [client 172.190.142.176:41612] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dsd.php"] [unique_id "aaNC3A2UMRAYWtDB23QPwwAAAQM"]
[Sun Mar 01 03:32:44.727860 2026] [:error] [pid 30798:tid 30901] [client 172.190.142.176:48885] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dsd.php"] [unique_id "aaNC3MBkD73gO8wTonbxqwAAAII"]
[Sun Mar 01 03:32:45.478658 2026] [:error] [pid 11920:tid 11927] [client 172.190.142.176:38535] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dsd.php"] [unique_id "aaNC3SzLNJUKxvBorrBJwgAAAYM"]
[Sun Mar 01 03:32:46.069009 2026] [:error] [pid 11920:tid 11929] [client 172.190.142.176:1602] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaNC3izLNJUKxvBorrBJyAAAAYU"]
[Sun Mar 01 03:32:47.085153 2026] [:error] [pid 11920:tid 11946] [client 172.190.142.176:41641] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaNC3yzLNJUKxvBorrBJ0QAAAZY"]
[Sun Mar 01 03:32:47.975604 2026] [:error] [pid 30798:tid 30917] [client 172.190.142.176:63394] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaNC38BkD73gO8wTonbxwAAAAJI"]
[Sun Mar 01 03:32:48.680542 2026] [:error] [pid 31190:tid 31208] [client 172.190.142.176:25959] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/guk.php"] [unique_id "aaNC4BfvwGOholYpM1HTYQAAAMI"]
[Sun Mar 01 03:32:49.613333 2026] [:error] [pid 53600:tid 53610] [client 172.190.142.176:35990] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaNC4Q2UMRAYWtDB23QP0wAAAQc"]
[Sun Mar 01 03:32:50.466503 2026] [:error] [pid 7644:tid 7665] [client 172.190.142.176:23710] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaNC4vqeDUGmVAHX7VDADAAAAVM"]
[Sun Mar 01 03:32:51.404941 2026] [:error] [pid 11920:tid 11939] [client 172.190.142.176:63364] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaNC4yzLNJUKxvBorrBJ4AAAAY8"]
[Sun Mar 01 03:32:53.192848 2026] [:error] [pid 11920:tid 11939] [client 172.190.142.176:1566] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaNC5SzLNJUKxvBorrBJ9gAAAY8"]
[Sun Mar 01 03:32:54.821487 2026] [:error] [pid 11920:tid 11929] [client 172.190.142.176:23685] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaNC5izLNJUKxvBorrBKBgAAAYU"]
[Sun Mar 01 03:32:56.291198 2026] [:error] [pid 11920:tid 11927] [client 172.190.142.176:63378] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaNC6CzLNJUKxvBorrBKEwAAAYM"]
[Sun Mar 01 03:32:57.306903 2026] [:error] [pid 31190:tid 31222] [client 172.190.142.176:1583] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaNC6RfvwGOholYpM1HTcwAAANA"]
[Sun Mar 01 03:32:59.122528 2026] [:error] [pid 31190:tid 31223] [client 172.190.142.176:52796] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ze.php"] [unique_id "aaNC6xfvwGOholYpM1HTfAAAANE"]
[Sun Mar 01 03:33:01.077073 2026] [:error] [pid 30798:tid 30907] [client 172.190.142.176:43876] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaNC7cBkD73gO8wTonbx6AAAAIg"]
[Sun Mar 01 03:33:02.357997 2026] [:error] [pid 30798:tid 30915] [client 172.190.142.176:42729] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaNC7sBkD73gO8wTonbx8wAAAJA"]
[Sun Mar 01 03:33:03.766261 2026] [:error] [pid 11920:tid 11932] [client 172.190.142.176:38651] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaNC7yzLNJUKxvBorrBKQwAAAYg"]
[Sun Mar 01 03:33:05.276257 2026] [:error] [pid 11920:tid 11947] [client 172.190.142.176:20584] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file52.php"] [unique_id "aaNC8SzLNJUKxvBorrBKSAAAAZc"]
[Sun Mar 01 03:33:06.875883 2026] [:error] [pid 11920:tid 11928] [client 172.190.142.176:43891] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tax.php"] [unique_id "aaNC8izLNJUKxvBorrBKUgAAAYQ"]
[Sun Mar 01 03:33:08.758103 2026] [:error] [pid 30798:tid 30915] [client 172.190.142.176:38596] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tax.php"] [unique_id "aaNC9MBkD73gO8wTonbyHwAAAJA"]
[Sun Mar 01 03:33:10.357736 2026] [:error] [pid 11920:tid 11948] [client 172.190.142.176:45880] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tax.php"] [unique_id "aaNC9izLNJUKxvBorrBKYQAAAZg"]
[Sun Mar 01 03:33:11.967629 2026] [:error] [pid 7644:tid 7665] [client 172.190.142.176:25741] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tax.php"] [unique_id "aaNC9_qeDUGmVAHX7VDAHQAAAVM"]
[Sun Mar 01 03:33:13.133189 2026] [:error] [pid 30798:tid 30902] [client 172.190.142.176:46159] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/an7.php"] [unique_id "aaNC-cBkD73gO8wTonbyQAAAAIM"]
[Sun Mar 01 03:33:14.480730 2026] [:error] [pid 11920:tid 11928] [client 172.190.142.176:1492] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/an7.php"] [unique_id "aaNC-izLNJUKxvBorrBKawAAAYQ"]
[Sun Mar 01 03:33:15.320372 2026] [:error] [pid 30798:tid 30905] [client 172.190.142.176:24863] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/an7.php"] [unique_id "aaNC-8BkD73gO8wTonbyUwAAAIY"]
[Sun Mar 01 03:33:16.081499 2026] [:error] [pid 7644:tid 7650] [client 172.190.142.176:64618] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/an7.php"] [unique_id "aaNC_PqeDUGmVAHX7VDAHwAAAUQ"]
[Sun Mar 01 03:33:17.365297 2026] [:error] [pid 31190:tid 31216] [client 172.190.142.176:46173] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aaNC_RfvwGOholYpM1HTowAAAMo"]
[Sun Mar 01 03:33:18.553839 2026] [:error] [pid 31190:tid 31221] [client 172.190.142.176:42340] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aaNC_hfvwGOholYpM1HTrQAAAM8"]
[Sun Mar 01 03:33:26.859348 2026] [:error] [pid 30795:tid 30816] [client 172.190.142.176:58271] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wio.php"] [unique_id "aaNDBmuI44IL94Zgti_ZtgAAAAg"]
[Sun Mar 01 03:33:28.191456 2026] [:error] [pid 30798:tid 30908] [client 172.190.142.176:18355] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wio.php"] [unique_id "aaNDCMBkD73gO8wTonbyqQAAAIk"]
[Sun Mar 01 03:33:29.028906 2026] [:error] [pid 11920:tid 11935] [client 172.190.142.176:54510] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wio.php"] [unique_id "aaNDCSzLNJUKxvBorrBKqQAAAYs"]
[Sun Mar 01 03:33:30.290931 2026] [:error] [pid 30798:tid 30901] [client 172.190.142.176:41241] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wio.php"] [unique_id "aaNDCsBkD73gO8wTonbysgAAAII"]
[Sun Mar 01 03:33:31.423713 2026] [:error] [pid 31190:tid 31208] [client 172.190.142.176:28310] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "aaNDCxfvwGOholYpM1HT2QAAAMI"]
[Sun Mar 01 03:33:32.754641 2026] [:error] [pid 30798:tid 30920] [client 172.190.142.176:1854] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "aaNDDMBkD73gO8wTonbyvQAAAJQ"]
[Sun Mar 01 03:33:33.882536 2026] [:error] [pid 30798:tid 30910] [client 172.190.142.176:14983] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "aaNDDcBkD73gO8wTonbyyQAAAIs"]
[Sun Mar 01 03:33:35.717083 2026] [:error] [pid 31190:tid 31227] [client 172.190.142.176:11492] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "aaNDDxfvwGOholYpM1HT3wAAANU"]
[Sun Mar 01 03:33:37.296524 2026] [:error] [pid 11920:tid 11936] [client 172.190.142.176:46104] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaNDESzLNJUKxvBorrBK0AAAAYw"]
[Sun Mar 01 03:33:38.337159 2026] [:error] [pid 30798:tid 30909] [client 172.190.142.176:1748] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaNDEsBkD73gO8wTonby9AAAAIo"]
[Sun Mar 01 03:33:39.453893 2026] [:error] [pid 30798:tid 30907] [client 172.190.142.176:41694] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaNDE8BkD73gO8wTonbzCAAAAIg"]
[Sun Mar 01 03:33:40.073222 2026] [:error] [pid 31190:tid 31219] [client 172.190.142.176:49134] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaNDFBfvwGOholYpM1HT5gAAAM0"]
[Sun Mar 01 03:33:40.671213 2026] [:error] [pid 31190:tid 31220] [client 172.190.142.176:49140] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws62.php"] [unique_id "aaNDFBfvwGOholYpM1HT6QAAAM4"]
[Sun Mar 01 03:33:41.732433 2026] [:error] [pid 30798:tid 30923] [client 172.190.142.176:62011] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws62.php"] [unique_id "aaNDFcBkD73gO8wTonbzHQAAAJc"]
[Sun Mar 01 03:33:42.461605 2026] [:error] [pid 11920:tid 11933] [client 172.190.142.176:61982] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws62.php"] [unique_id "aaNDFizLNJUKxvBorrBK6AAAAYk"]
[Sun Mar 01 03:33:43.337289 2026] [:error] [pid 31190:tid 31211] [client 172.190.142.176:24443] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws62.php"] [unique_id "aaNDFxfvwGOholYpM1HT7AAAAMU"]
[Sun Mar 01 03:33:44.282932 2026] [:error] [pid 31190:tid 31212] [client 172.190.142.176:19654] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaNDGBfvwGOholYpM1HT8gAAAMY"]
[Sun Mar 01 03:33:45.595509 2026] [:error] [pid 31190:tid 31223] [client 172.190.142.176:14223] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaNDGRfvwGOholYpM1HT9gAAANE"]
[Sun Mar 01 03:33:46.697860 2026] [:error] [pid 11920:tid 11947] [client 172.190.142.176:29588] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaNDGizLNJUKxvBorrBK9AAAAZc"]
[Sun Mar 01 03:33:47.548006 2026] [:error] [pid 53600:tid 53604] [client 172.190.142.176:12925] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaNDGw2UMRAYWtDB23QQQQAAAQE"]
[Sun Mar 01 03:33:48.504147 2026] [:error] [pid 30798:tid 30905] [client 172.190.142.176:32943] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaNDHMBkD73gO8wTonbzTgAAAIY"]
[Sun Mar 01 03:33:49.585921 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:39059] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaNDHcBkD73gO8wTonbzTwAAAIU"]
[Sun Mar 01 03:33:51.063867 2026] [:error] [pid 30798:tid 30917] [client 172.190.142.176:18236] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaNDH8BkD73gO8wTonbzVQAAAJI"]
[Sun Mar 01 03:33:52.353629 2026] [:error] [pid 11920:tid 11947] [client 172.190.142.176:54405] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaNDICzLNJUKxvBorrBLDQAAAZc"]
[Sun Mar 01 03:33:53.546648 2026] [:error] [pid 11920:tid 11939] [client 172.190.142.176:37626] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/co.php"] [unique_id "aaNDISzLNJUKxvBorrBLEQAAAY8"]
[Sun Mar 01 03:33:54.269140 2026] [:error] [pid 7644:tid 7651] [client 172.190.142.176:39570] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/co.php"] [unique_id "aaNDIvqeDUGmVAHX7VDASQAAAUU"]
[Sun Mar 01 03:33:54.919202 2026] [:error] [pid 7644:tid 7663] [client 172.190.142.176:59156] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/co.php"] [unique_id "aaNDIvqeDUGmVAHX7VDASgAAAVE"]
[Sun Mar 01 03:33:55.922701 2026] [:error] [pid 31190:tid 31213] [client 172.190.142.176:37573] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/co.php"] [unique_id "aaNDIxfvwGOholYpM1HUEQAAAMc"]
[Sun Mar 01 03:33:56.654748 2026] [:error] [pid 30798:tid 30916] [client 172.190.142.176:12244] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cxc.php"] [unique_id "aaNDJMBkD73gO8wTonbzdQAAAJE"]
[Sun Mar 01 03:33:57.648531 2026] [:error] [pid 30798:tid 30924] [client 172.190.142.176:57380] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cxc.php"] [unique_id "aaNDJcBkD73gO8wTonbzfwAAAJg"]
[Sun Mar 01 03:33:58.322631 2026] [:error] [pid 53600:tid 53609] [client 172.190.142.176:52165] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cxc.php"] [unique_id "aaNDJg2UMRAYWtDB23QQSgAAAQY"]
[Sun Mar 01 03:33:58.920294 2026] [:error] [pid 30798:tid 30916] [client 172.190.142.176:48955] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cxc.php"] [unique_id "aaNDJsBkD73gO8wTonbzhwAAAJE"]
[Sun Mar 01 03:33:59.492976 2026] [:error] [pid 30798:tid 30923] [client 172.190.142.176:57405] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gjm.php"] [unique_id "aaNDJ8BkD73gO8wTonbzjQAAAJc"]
[Sun Mar 01 03:34:00.100224 2026] [:error] [pid 53600:tid 53603] [client 172.190.142.176:39603] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gjm.php"] [unique_id "aaNDKA2UMRAYWtDB23QQTQAAAQA"]
[Sun Mar 01 03:34:00.847344 2026] [:error] [pid 53600:tid 53610] [client 172.190.142.176:12261] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gjm.php"] [unique_id "aaNDKA2UMRAYWtDB23QQVAAAAQc"]
[Sun Mar 01 03:34:01.568974 2026] [:error] [pid 30798:tid 30908] [client 172.190.142.176:48914] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gjm.php"] [unique_id "aaNDKcBkD73gO8wTonbzlQAAAIk"]
[Sun Mar 01 03:34:02.594697 2026] [:error] [pid 30798:tid 30921] [client 172.190.142.176:35038] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aaNDKsBkD73gO8wTonbzmwAAAJU"]
[Sun Mar 01 03:34:03.057275 2026] [:error] [pid 30798:tid 30906] [client 172.190.142.176:56211] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aaNDK8BkD73gO8wTonbzoAAAAIc"]
[Sun Mar 01 03:34:03.795719 2026] [:error] [pid 11920:tid 11935] [client 172.190.142.176:14580] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aaNDKyzLNJUKxvBorrBLLgAAAYs"]
[Sun Mar 01 03:34:04.782942 2026] [:error] [pid 11920:tid 11925] [client 172.190.142.176:48934] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ex.php"] [unique_id "aaNDLCzLNJUKxvBorrBLMAAAAYE"]
[Sun Mar 01 03:34:05.861407 2026] [:error] [pid 53600:tid 53614] [client 172.190.142.176:52869] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/post.php"] [unique_id "aaNDLQ2UMRAYWtDB23QQWwAAAQs"]
[Sun Mar 01 03:34:07.158628 2026] [:error] [pid 7644:tid 7649] [client 172.190.142.176:56245] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/post.php"] [unique_id "aaNDL_qeDUGmVAHX7VDAUQAAAUM"]
[Sun Mar 01 03:34:08.477961 2026] [:error] [pid 31190:tid 31211] [client 172.190.142.176:57376] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/post.php"] [unique_id "aaNDMBfvwGOholYpM1HUJQAAAMU"]
[Sun Mar 01 03:34:10.056024 2026] [:error] [pid 31190:tid 31222] [client 172.190.142.176:52526] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/post.php"] [unique_id "aaNDMhfvwGOholYpM1HULAAAANA"]
[Sun Mar 01 03:34:11.914543 2026] [:error] [pid 30798:tid 30915] [client 172.190.142.176:35055] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaNDM8BkD73gO8wTonbz0AAAAJA"]
[Sun Mar 01 03:34:15.141947 2026] [:error] [pid 30798:tid 30906] [client 172.190.142.176:23165] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaNDN8BkD73gO8wTonbz4QAAAIc"]
[Sun Mar 01 03:34:16.774123 2026] [:error] [pid 11920:tid 11942] [client 172.190.142.176:33206] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaNDOCzLNJUKxvBorrBLYwAAAZI"]
[Sun Mar 01 03:34:17.884264 2026] [:error] [pid 30798:tid 30902] [client 172.190.142.176:40278] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaNDOcBkD73gO8wTonbz8QAAAIM"]
[Sun Mar 01 03:34:19.167610 2026] [:error] [pid 30798:tid 30912] [client 172.190.142.176:35057] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aaNDO8BkD73gO8wTonbz-QAAAI0"]
[Sun Mar 01 03:34:19.994537 2026] [:error] [pid 11920:tid 11941] [client 172.190.142.176:57403] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aaNDOyzLNJUKxvBorrBLdgAAAZE"]
[Sun Mar 01 03:34:20.794230 2026] [:error] [pid 53600:tid 53627] [client 172.190.142.176:29414] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aaNDPA2UMRAYWtDB23QQZgAAARg"]
[Sun Mar 01 03:34:21.711694 2026] [:error] [pid 11920:tid 11928] [client 172.190.142.176:49230] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aaNDPSzLNJUKxvBorrBLfgAAAYQ"]
[Sun Mar 01 03:34:22.708795 2026] [:error] [pid 11920:tid 11932] [client 172.190.142.176:1187] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aaNDPizLNJUKxvBorrBLhwAAAYg"]
[Sun Mar 01 03:34:23.645408 2026] [:error] [pid 11920:tid 11935] [client 172.190.142.176:52129] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aaNDPyzLNJUKxvBorrBLjgAAAYs"]
[Sun Mar 01 03:34:24.308681 2026] [:error] [pid 11920:tid 11946] [client 172.190.142.176:57398] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aaNDQCzLNJUKxvBorrBLkQAAAZY"]
[Sun Mar 01 03:34:25.441959 2026] [:error] [pid 30798:tid 30908] [client 172.190.142.176:35018] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x7.php"] [unique_id "aaNDQcBkD73gO8wTonb0DAAAAIk"]
[Sun Mar 01 03:34:36.131969 2026] [:error] [pid 31190:tid 31220] [client 172.190.142.176:11190] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaNDTBfvwGOholYpM1HUZQAAAM4"]
[Sun Mar 01 03:34:38.343003 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:56236] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaNDTsBkD73gO8wTonb0PQAAAIU"]
[Sun Mar 01 03:34:40.102058 2026] [:error] [pid 30797:tid 30892] [client 172.190.142.176:52109] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaNDUPQmcmSQL-3rvLAbbAAAAFU"]
[Sun Mar 01 03:34:42.188626 2026] [:error] [pid 53600:tid 53610] [client 172.190.142.176:29446] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "aaNDUg2UMRAYWtDB23QQdgAAAQc"]
[Sun Mar 01 03:34:43.208486 2026] [:error] [pid 11920:tid 11939] [client 172.190.142.176:52538] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nhr.php"] [unique_id "aaNDUyzLNJUKxvBorrBMBQAAAY8"]
[Sun Mar 01 03:34:44.352397 2026] [:error] [pid 30798:tid 30908] [client 172.190.142.176:52140] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nhr.php"] [unique_id "aaNDVMBkD73gO8wTonb0SQAAAIk"]
[Sun Mar 01 03:34:45.528454 2026] [:error] [pid 30798:tid 30910] [client 172.190.142.176:29478] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nhr.php"] [unique_id "aaNDVcBkD73gO8wTonb0TAAAAIs"]
[Sun Mar 01 03:34:46.692031 2026] [:error] [pid 31190:tid 31206] [client 172.190.142.176:56250] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nhr.php"] [unique_id "aaNDVhfvwGOholYpM1HUgwAAAMA"]
[Sun Mar 01 03:34:47.797525 2026] [:error] [pid 30798:tid 30910] [client 172.190.142.176:15870] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaNDV8BkD73gO8wTonb0XAAAAIs"]
[Sun Mar 01 03:34:48.493096 2026] [:error] [pid 30798:tid 30903] [client 172.190.142.176:40296] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaNDWMBkD73gO8wTonb0YgAAAIQ"]
[Sun Mar 01 03:34:49.013968 2026] [:error] [pid 30798:tid 30905] [client 172.190.142.176:52494] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaNDWcBkD73gO8wTonb0ZAAAAIY"]
[Sun Mar 01 03:34:49.715531 2026] [:error] [pid 11920:tid 11929] [client 172.190.142.176:38820] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaNDWSzLNJUKxvBorrBMIgAAAYU"]
[Sun Mar 01 03:34:50.719071 2026] [:error] [pid 53600:tid 53613] [client 172.190.142.176:49270] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws79.php"] [unique_id "aaNDWg2UMRAYWtDB23QQggAAAQo"]
[Sun Mar 01 03:34:51.713738 2026] [:error] [pid 11920:tid 11935] [client 172.190.142.176:29436] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws79.php"] [unique_id "aaNDWyzLNJUKxvBorrBMKAAAAYs"]
[Sun Mar 01 03:34:52.751858 2026] [:error] [pid 30798:tid 30916] [client 172.190.142.176:52509] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws79.php"] [unique_id "aaNDXMBkD73gO8wTonb0bgAAAJE"]
[Sun Mar 01 03:34:53.536364 2026] [:error] [pid 30798:tid 30920] [client 172.190.142.176:23710] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws79.php"] [unique_id "aaNDXcBkD73gO8wTonb0cQAAAJQ"]
[Sun Mar 01 03:34:54.079800 2026] [:error] [pid 30798:tid 30922] [client 172.190.142.176:56205] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1061.php"] [unique_id "aaNDXsBkD73gO8wTonb0cwAAAJY"]
[Sun Mar 01 03:34:54.635693 2026] [:error] [pid 30798:tid 30905] [client 172.190.142.176:29500] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1061.php"] [unique_id "aaNDXsBkD73gO8wTonb0dQAAAIY"]
[Sun Mar 01 03:34:55.145342 2026] [:error] [pid 11920:tid 11925] [client 172.190.142.176:40474] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1061.php"] [unique_id "aaNDXyzLNJUKxvBorrBMNAAAAYE"]
[Sun Mar 01 03:34:55.661003 2026] [:error] [pid 30795:tid 30817] [client 172.190.142.176:29481] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1061.php"] [unique_id "aaNDX2uI44IL94Zgti_ZygAAAAk"]
[Sun Mar 01 03:34:56.290076 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:52507] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "aaNDYMBkD73gO8wTonb0eQAAAIU"]
[Sun Mar 01 03:34:57.432031 2026] [:error] [pid 30798:tid 30924] [client 172.190.142.176:24789] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "aaNDYcBkD73gO8wTonb0gwAAAJg"]
[Sun Mar 01 03:34:58.158530 2026] [:error] [pid 30798:tid 30903] [client 172.190.142.176:49254] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "aaNDYsBkD73gO8wTonb0hwAAAIQ"]
[Sun Mar 01 03:34:58.938716 2026] [:error] [pid 11920:tid 11947] [client 172.190.142.176:38838] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "aaNDYizLNJUKxvBorrBMRQAAAZc"]
[Sun Mar 01 03:34:59.445886 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:38835] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aaNDY8BkD73gO8wTonb0kQAAAIU"]
[Sun Mar 01 03:35:00.135913 2026] [:error] [pid 11920:tid 11946] [client 172.190.142.176:29459] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aaNDZCzLNJUKxvBorrBMSgAAAZY"]
[Sun Mar 01 03:35:01.022675 2026] [:error] [pid 11920:tid 11941] [client 172.190.142.176:40480] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aaNDZSzLNJUKxvBorrBMTQAAAZE"]
[Sun Mar 01 03:35:01.653890 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:29451] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hello.php"] [unique_id "aaNDZcBkD73gO8wTonb0nQAAAIU"]
[Sun Mar 01 03:35:02.308423 2026] [:error] [pid 30798:tid 30900] [client 172.190.142.176:38821] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/05.php"] [unique_id "aaNDZsBkD73gO8wTonb0oQAAAIE"]
[Sun Mar 01 03:35:03.305075 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:29441] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/05.php"] [unique_id "aaNDZ8BkD73gO8wTonb0qAAAAIU"]
[Sun Mar 01 03:35:04.198883 2026] [:error] [pid 30798:tid 30903] [client 172.190.142.176:52481] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/05.php"] [unique_id "aaNDaMBkD73gO8wTonb0sAAAAIQ"]
[Sun Mar 01 03:35:04.930624 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:38809] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/05.php"] [unique_id "aaNDaMBkD73gO8wTonb0tgAAAIU"]
[Sun Mar 01 03:35:05.686853 2026] [:error] [pid 30795:tid 30821] [client 172.190.142.176:24783] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aaNDaWuI44IL94Zgti_ZzwAAAA0"]
[Sun Mar 01 03:35:06.960468 2026] [:error] [pid 30798:tid 30920] [client 172.190.142.176:40482] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aaNDasBkD73gO8wTonb0wgAAAJQ"]
[Sun Mar 01 03:35:08.298853 2026] [:error] [pid 31190:tid 31218] [client 172.190.142.176:29456] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aaNDbBfvwGOholYpM1HUtgAAAMw"]
[Sun Mar 01 03:35:08.812309 2026] [:error] [pid 30798:tid 30912] [client 172.190.142.176:15834] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "aaNDbMBkD73gO8wTonb0xwAAAI0"]
[Sun Mar 01 03:35:10.331744 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:15860] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaNDbsBkD73gO8wTonb0ywAAAIU"]
[Sun Mar 01 03:35:13.310646 2026] [:error] [pid 30798:tid 30914] [client 172.190.142.176:29388] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaNDccBkD73gO8wTonb03gAAAI8"]
[Sun Mar 01 03:35:14.937947 2026] [:error] [pid 30798:tid 30901] [client 172.190.142.176:63232] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaNDcsBkD73gO8wTonb07gAAAII"]
[Sun Mar 01 03:35:17.305831 2026] [:error] [pid 30798:tid 30907] [client 172.190.142.176:49262] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aaNDdcBkD73gO8wTonb1BAAAAIg"]
[Sun Mar 01 03:35:19.198933 2026] [:error] [pid 53600:tid 53615] [client 172.190.142.176:52130] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaNDdw2UMRAYWtDB23QQlwAAAQw"]
[Sun Mar 01 03:35:20.564719 2026] [:error] [pid 31190:tid 31220] [client 172.190.142.176:40475] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaNDeBfvwGOholYpM1HUzAAAAM4"]
[Sun Mar 01 03:35:21.215951 2026] [:error] [pid 7644:tid 7649] [client 172.190.142.176:24798] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaNDefqeDUGmVAHX7VDAigAAAUM"]
[Sun Mar 01 03:35:22.703321 2026] [:error] [pid 31190:tid 31209] [client 172.190.142.176:52155] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaNDehfvwGOholYpM1HU0gAAAMM"]
[Sun Mar 01 03:35:23.878446 2026] [:error] [pid 31190:tid 31211] [client 172.190.142.176:40453] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaNDexfvwGOholYpM1HU1wAAAMU"]
[Sun Mar 01 03:35:24.970285 2026] [:error] [pid 30798:tid 30902] [client 172.190.142.176:40462] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaNDfMBkD73gO8wTonb1KQAAAIM"]
[Sun Mar 01 03:35:25.886006 2026] [:error] [pid 53600:tid 53622] [client 172.190.142.176:49232] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaNDfQ2UMRAYWtDB23QQngAAARM"]
[Sun Mar 01 03:35:26.733244 2026] [:error] [pid 53600:tid 53618] [client 172.190.142.176:52101] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aaNDfg2UMRAYWtDB23QQowAAAQ8"]
[Sun Mar 01 03:35:27.731229 2026] [:error] [pid 30798:tid 30909] [client 172.190.142.176:29501] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaNDf8BkD73gO8wTonb1MQAAAIo"]
[Sun Mar 01 03:35:28.843964 2026] [:error] [pid 11920:tid 11939] [client 172.190.142.176:13891] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaNDgCzLNJUKxvBorrBMdQAAAY8"]
[Sun Mar 01 03:35:30.602562 2026] [:error] [pid 11920:tid 11942] [client 172.190.142.176:63325] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaNDgizLNJUKxvBorrBMfgAAAZI"]
[Sun Mar 01 03:35:32.456224 2026] [:error] [pid 31190:tid 31227] [client 172.190.142.176:40295] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/iko.php"] [unique_id "aaNDhBfvwGOholYpM1HU5QAAANU"]
[Sun Mar 01 03:35:33.708899 2026] [:error] [pid 30795:tid 30807] [client 172.190.142.176:52127] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmy.php"] [unique_id "aaNDhWuI44IL94Zgti_Z2gAAAAA"]
[Sun Mar 01 03:35:34.402832 2026] [:error] [pid 30797:tid 30880] [client 172.190.142.176:63232] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmy.php"] [unique_id "aaNDhvQmcmSQL-3rvLAbfgAAAEk"]
[Sun Mar 01 03:35:41.871816 2026] [:error] [pid 30797:tid 30887] [client 172.190.142.176:63291] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rpk.php"] [unique_id "aaNDjfQmcmSQL-3rvLAbiwAAAFA"]
[Sun Mar 01 03:35:42.883117 2026] [:error] [pid 30798:tid 30924] [client 172.190.142.176:44422] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rpk.php"] [unique_id "aaNDjsBkD73gO8wTonb1YAAAAJg"]
[Sun Mar 01 03:35:43.568622 2026] [:error] [pid 30798:tid 30905] [client 172.190.142.176:15857] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rpk.php"] [unique_id "aaNDj8BkD73gO8wTonb1ZAAAAIY"]
[Sun Mar 01 03:35:44.491973 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:63310] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rpk.php"] [unique_id "aaNDkMBkD73gO8wTonb1agAAAIU"]
[Sun Mar 01 03:35:46.067106 2026] [:error] [pid 11920:tid 11930] [client 172.190.142.176:38794] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaNDkizLNJUKxvBorrBMxgAAAYY"]
[Sun Mar 01 03:35:46.932589 2026] [:error] [pid 7644:tid 7648] [client 172.190.142.176:42266] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaNDkvqeDUGmVAHX7VDAlwAAAUI"]
[Sun Mar 01 03:35:47.377199 2026] [:error] [pid 31190:tid 31213] [client 172.190.142.176:56492] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaNDkxfvwGOholYpM1HU-gAAAMc"]
[Sun Mar 01 03:35:48.352519 2026] [:error] [pid 31190:tid 31229] [client 172.190.142.176:1719] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaNDlBfvwGOholYpM1HU_AAAANc"]
[Sun Mar 01 03:35:49.319265 2026] [:error] [pid 11920:tid 11931] [client 172.190.142.176:49257] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaNDlSzLNJUKxvBorrBM0AAAAYc"]
[Sun Mar 01 03:35:50.282716 2026] [:error] [pid 11920:tid 11930] [client 172.190.142.176:63352] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaNDlizLNJUKxvBorrBM0wAAAYY"]
[Sun Mar 01 03:35:52.038304 2026] [:error] [pid 30798:tid 30923] [client 172.190.142.176:1684] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaNDmMBkD73gO8wTonb1fgAAAJc"]
[Sun Mar 01 03:35:53.620316 2026] [:error] [pid 30798:tid 30915] [client 172.190.142.176:13362] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaNDmcBkD73gO8wTonb1hQAAAJA"]
[Sun Mar 01 03:35:55.165021 2026] [:error] [pid 11920:tid 11933] [client 172.190.142.176:1689] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaNDmyzLNJUKxvBorrBM6AAAAYk"]
[Sun Mar 01 03:35:57.382042 2026] [:error] [pid 30798:tid 30908] [client 172.190.142.176:56455] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaNDncBkD73gO8wTonb1mwAAAIk"]
[Sun Mar 01 03:35:58.694024 2026] [:error] [pid 53600:tid 53624] [client 172.190.142.176:13338] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaNDng2UMRAYWtDB23QQvQAAARU"]
[Sun Mar 01 03:35:59.613737 2026] [:error] [pid 7644:tid 7657] [client 172.190.142.176:63356] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/e.php"] [unique_id "aaNDn_qeDUGmVAHX7VDAmgAAAUs"]
[Sun Mar 01 03:36:00.384004 2026] [:error] [pid 31190:tid 31229] [client 172.190.142.176:56460] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aaNDoBfvwGOholYpM1HVDgAAANc"]
[Sun Mar 01 03:36:01.458468 2026] [:error] [pid 31190:tid 31217] [client 172.190.142.176:5051] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aaNDoRfvwGOholYpM1HVFwAAAMs"]
[Sun Mar 01 03:36:02.511038 2026] [:error] [pid 30798:tid 30923] [client 172.190.142.176:49230] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aaNDosBkD73gO8wTonb1qAAAAJc"]
[Sun Mar 01 03:36:02.939444 2026] [:error] [pid 30798:tid 30899] [client 172.190.142.176:42271] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "aaNDosBkD73gO8wTonb1qwAAAIA"]
[Sun Mar 01 03:36:03.709784 2026] [:error] [pid 30798:tid 30920] [client 172.190.142.176:28502] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/X7x.php"] [unique_id "aaNDo8BkD73gO8wTonb1rwAAAJQ"]
[Sun Mar 01 03:36:04.372092 2026] [:error] [pid 31190:tid 31215] [client 172.190.142.176:44483] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/X7x.php"] [unique_id "aaNDpBfvwGOholYpM1HVIwAAAMk"]
[Sun Mar 01 03:36:05.148524 2026] [:error] [pid 30798:tid 30917] [client 172.190.142.176:42253] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/X7x.php"] [unique_id "aaNDpcBkD73gO8wTonb1vwAAAJI"]
[Sun Mar 01 03:36:05.901536 2026] [:error] [pid 53600:tid 53610] [client 172.190.142.176:44494] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/X7x.php"] [unique_id "aaNDpQ2UMRAYWtDB23QQxgAAAQc"]
[Sun Mar 01 03:36:06.668524 2026] [:error] [pid 30798:tid 30906] [client 172.190.142.176:28501] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaNDpsBkD73gO8wTonb1yAAAAIc"]
[Sun Mar 01 03:36:07.609717 2026] [:error] [pid 7644:tid 7649] [client 172.190.142.176:4992] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaNDp_qeDUGmVAHX7VDAnAAAAUM"]
[Sun Mar 01 03:36:08.491479 2026] [:error] [pid 30798:tid 30923] [client 172.190.142.176:14074] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaNDqMBkD73gO8wTonb11AAAAJc"]
[Sun Mar 01 03:36:09.624993 2026] [:error] [pid 11920:tid 11925] [client 172.190.142.176:29442] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaNDqSzLNJUKxvBorrBM_QAAAYE"]
[Sun Mar 01 03:36:10.972236 2026] [:error] [pid 30798:tid 30913] [client 172.190.142.176:56504] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/get.php"] [unique_id "aaNDqsBkD73gO8wTonb15AAAAI4"]
[Sun Mar 01 03:36:12.048385 2026] [:error] [pid 11920:tid 11945] [client 172.190.142.176:56450] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/get.php"] [unique_id "aaNDrCzLNJUKxvBorrBNCAAAAZU"]
[Sun Mar 01 03:36:12.767767 2026] [:error] [pid 11920:tid 11948] [client 172.190.142.176:1670] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/get.php"] [unique_id "aaNDrCzLNJUKxvBorrBNDAAAAZg"]
[Sun Mar 01 03:36:13.369328 2026] [:error] [pid 31190:tid 31213] [client 172.190.142.176:15815] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/get.php"] [unique_id "aaNDrRfvwGOholYpM1HVLgAAAMc"]
[Sun Mar 01 03:36:14.146902 2026] [:error] [pid 11920:tid 11945] [client 172.190.142.176:44368] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/koiy.php"] [unique_id "aaNDrizLNJUKxvBorrBNGQAAAZU"]
[Sun Mar 01 03:36:15.746361 2026] [:error] [pid 30798:tid 30906] [client 172.190.142.176:28497] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/koiy.php"] [unique_id "aaNDr8BkD73gO8wTonb17gAAAIc"]
[Sun Mar 01 03:36:16.948678 2026] [:error] [pid 30798:tid 30910] [client 172.190.142.176:38822] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/koiy.php"] [unique_id "aaNDsMBkD73gO8wTonb1-QAAAIs"]
[Sun Mar 01 03:36:17.946857 2026] [:error] [pid 7644:tid 7664] [client 172.190.142.176:44486] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/koiy.php"] [unique_id "aaNDsfqeDUGmVAHX7VDAngAAAVI"]
[Sun Mar 01 03:36:19.074051 2026] [:error] [pid 31190:tid 31220] [client 172.190.142.176:1665] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaNDsxfvwGOholYpM1HVOQAAAM4"]
[Sun Mar 01 03:36:20.794537 2026] [:error] [pid 30798:tid 30901] [client 172.190.142.176:54347] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaNDtMBkD73gO8wTonb2FgAAAII"]
[Sun Mar 01 03:36:23.224663 2026] [:error] [pid 30798:tid 30905] [client 172.190.142.176:44533] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaNDt8BkD73gO8wTonb2JQAAAIY"]
[Sun Mar 01 03:36:25.282902 2026] [:error] [pid 30798:tid 30920] [client 172.190.142.176:28480] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaNDucBkD73gO8wTonb2LwAAAJQ"]
[Sun Mar 01 03:36:27.279317 2026] [:error] [pid 30798:tid 30914] [client 172.190.142.176:37468] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaNDu8BkD73gO8wTonb2PAAAAI8"]
[Sun Mar 01 03:36:28.460468 2026] [:error] [pid 30798:tid 30905] [client 172.190.142.176:44415] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaNDvMBkD73gO8wTonb2QQAAAIY"]
[Sun Mar 01 03:36:29.471345 2026] [:error] [pid 7644:tid 7655] [client 172.190.142.176:37443] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaNDvfqeDUGmVAHX7VDAowAAAUk"]
[Sun Mar 01 03:36:30.403607 2026] [:error] [pid 30797:tid 30879] [client 172.190.142.176:52107] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaNDvvQmcmSQL-3rvLAbkwAAAEg"]
[Sun Mar 01 03:36:31.763536 2026] [:error] [pid 30798:tid 30916] [client 172.190.142.176:14040] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aaNDv8BkD73gO8wTonb2UwAAAJE"]
[Sun Mar 01 03:36:32.755423 2026] [:error] [pid 30798:tid 30905] [client 172.190.142.176:63927] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aaNDwMBkD73gO8wTonb2WQAAAIY"]
[Sun Mar 01 03:36:34.565770 2026] [:error] [pid 30798:tid 30923] [client 172.190.142.176:44439] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aaNDwsBkD73gO8wTonb2agAAAJc"]
[Sun Mar 01 03:36:38.707057 2026] [:error] [pid 31190:tid 31215] [client 172.190.142.176:37473] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/raw.php"] [unique_id "aaNDxhfvwGOholYpM1HVXAAAAMk"]
[Sun Mar 01 03:36:39.385462 2026] [:error] [pid 11920:tid 11939] [client 172.190.142.176:63878] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaNDxyzLNJUKxvBorrBNZQAAAY8"]
[Sun Mar 01 03:36:40.306941 2026] [:error] [pid 11920:tid 11925] [client 172.190.142.176:63895] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aaNDyCzLNJUKxvBorrBNawAAAYE"]
[Sun Mar 01 03:36:47.332232 2026] [:error] [pid 11920:tid 11948] [client 172.190.142.176:63934] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaNDzyzLNJUKxvBorrBNqwAAAZg"]
[Sun Mar 01 03:36:48.352769 2026] [:error] [pid 30798:tid 30909] [client 172.190.142.176:24059] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaND0MBkD73gO8wTonb2pwAAAIo"]
[Sun Mar 01 03:36:49.950111 2026] [:error] [pid 30798:tid 30899] [client 172.190.142.176:40418] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaND0cBkD73gO8wTonb2twAAAIA"]
[Sun Mar 01 03:36:51.086536 2026] [:error] [pid 30798:tid 30903] [client 172.190.142.176:24678] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aaND08BkD73gO8wTonb2wAAAAIQ"]
[Sun Mar 01 03:36:52.282515 2026] [:error] [pid 30795:tid 30819] [client 172.190.142.176:61164] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aaND1GuI44IL94Zgti_Z9AAAAAs"]
[Sun Mar 01 03:36:52.902166 2026] [:error] [pid 11920:tid 11931] [client 172.190.142.176:1065] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aaND1CzLNJUKxvBorrBNxQAAAYc"]
[Sun Mar 01 03:36:53.448817 2026] [:error] [pid 11920:tid 11946] [client 172.190.142.176:1038] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aaND1SzLNJUKxvBorrBNygAAAZY"]
[Sun Mar 01 03:36:53.905469 2026] [:error] [pid 31190:tid 31209] [client 172.190.142.176:40400] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ocxla.php"] [unique_id "aaND1RfvwGOholYpM1HVfgAAAMM"]
[Sun Mar 01 03:36:55.360456 2026] [:error] [pid 31190:tid 31217] [client 172.190.142.176:12261] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaND1xfvwGOholYpM1HVhAAAAMs"]
[Sun Mar 01 03:36:56.798161 2026] [:error] [pid 31190:tid 31210] [client 172.190.142.176:51914] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaND2BfvwGOholYpM1HVigAAAMQ"]
[Sun Mar 01 03:36:58.555860 2026] [:error] [pid 53600:tid 53627] [client 172.190.142.176:1321] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaND2g2UMRAYWtDB23QQ9QAAARg"]
[Sun Mar 01 03:36:59.423293 2026] [:error] [pid 11920:tid 11944] [client 172.190.142.176:48894] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaND2yzLNJUKxvBorrBN4wAAAZQ"]
[Sun Mar 01 03:37:00.847574 2026] [:error] [pid 11920:tid 11945] [client 172.190.142.176:1082] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaND3CzLNJUKxvBorrBN5gAAAZU"]
[Sun Mar 01 03:37:01.895781 2026] [:error] [pid 30795:tid 30822] [client 172.190.142.176:38551] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaND3WuI44IL94Zgti_Z_wAAAA4"]
[Sun Mar 01 03:37:02.837597 2026] [:error] [pid 31190:tid 31218] [client 172.190.142.176:5076] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaND3hfvwGOholYpM1HVkwAAAMw"]
[Sun Mar 01 03:37:03.787472 2026] [:error] [pid 31190:tid 31223] [client 172.190.142.176:10046] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaND3xfvwGOholYpM1HVlQAAANE"]
[Sun Mar 01 03:37:04.766284 2026] [:error] [pid 31190:tid 31229] [client 172.190.142.176:36007] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zz.php"] [unique_id "aaND4BfvwGOholYpM1HVlwAAANc"]
[Sun Mar 01 03:37:05.824826 2026] [:error] [pid 53600:tid 53620] [client 172.190.142.176:63417] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zz.php"] [unique_id "aaND4Q2UMRAYWtDB23QQ_wAAARE"]
[Sun Mar 01 03:37:06.881820 2026] [:error] [pid 30797:tid 30873] [client 172.190.142.176:51964] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zz.php"] [unique_id "aaND4vQmcmSQL-3rvLAboAAAAEI"]
[Sun Mar 01 03:37:07.432923 2026] [:error] [pid 31190:tid 31219] [client 172.190.142.176:13586] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zz.php"] [unique_id "aaND4xfvwGOholYpM1HVnwAAAM0"]
[Sun Mar 01 03:37:08.535518 2026] [:error] [pid 11920:tid 11939] [client 172.190.142.176:5065] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaND5CzLNJUKxvBorrBN-gAAAY8"]
[Sun Mar 01 03:37:09.401877 2026] [:error] [pid 7644:tid 7647] [client 172.190.142.176:37153] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaND5fqeDUGmVAHX7VDBCgAAAUE"]
[Sun Mar 01 03:37:10.010902 2026] [:error] [pid 31190:tid 31210] [client 172.190.142.176:38597] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaND5hfvwGOholYpM1HVpgAAAMQ"]
[Sun Mar 01 03:37:10.933633 2026] [:error] [pid 53600:tid 53609] [client 172.190.142.176:38605] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaND5g2UMRAYWtDB23QRBgAAAQY"]
[Sun Mar 01 03:37:11.740588 2026] [:error] [pid 53600:tid 53614] [client 172.190.142.176:33657] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sdsa.php"] [unique_id "aaND5w2UMRAYWtDB23QRCAAAAQs"]
[Sun Mar 01 03:37:12.527103 2026] [:error] [pid 11920:tid 11926] [client 172.190.142.176:21815] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sdsa.php"] [unique_id "aaND6CzLNJUKxvBorrBOCAAAAYI"]
[Sun Mar 01 03:37:13.141656 2026] [:error] [pid 11920:tid 11929] [client 172.190.142.176:57398] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sdsa.php"] [unique_id "aaND6SzLNJUKxvBorrBODQAAAYU"]
[Sun Mar 01 03:37:13.912010 2026] [:error] [pid 30795:tid 30812] [client 172.190.142.176:32207] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sdsa.php"] [unique_id "aaND6WuI44IL94Zgti_aAwAAAAQ"]
[Sun Mar 01 03:37:14.870059 2026] [:error] [pid 53600:tid 53608] [client 172.190.142.176:43860] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaND6g2UMRAYWtDB23QRCwAAAQU"]
[Sun Mar 01 03:37:15.664274 2026] [:error] [pid 11920:tid 11948] [client 172.190.142.176:40850] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaND6yzLNJUKxvBorrBOGwAAAZg"]
[Sun Mar 01 03:37:16.343627 2026] [:error] [pid 11920:tid 11924] [client 172.190.142.176:63962] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaND7CzLNJUKxvBorrBOHwAAAYA"]
[Sun Mar 01 03:37:17.359406 2026] [:error] [pid 11920:tid 11937] [client 172.190.142.176:18309] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aaND7SzLNJUKxvBorrBOKwAAAY0"]
[Sun Mar 01 03:37:18.661102 2026] [:error] [pid 30798:tid 30911] [client 172.190.142.176:49134] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaND7sBkD73gO8wTonb29gAAAIw"]
[Sun Mar 01 03:37:20.227953 2026] [:error] [pid 30797:tid 30892] [client 172.190.142.176:50229] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaND8PQmcmSQL-3rvLAbpgAAAFU"]
[Sun Mar 01 03:37:22.008350 2026] [:error] [pid 30798:tid 30904] [client 172.190.142.176:42071] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaND8sBkD73gO8wTonb2_QAAAIU"]
[Sun Mar 01 03:37:23.944331 2026] [:error] [pid 53600:tid 53623] [client 172.190.142.176:40719] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "aaND8w2UMRAYWtDB23QREgAAARQ"]
[Sun Mar 01 03:37:26.779315 2026] [:error] [pid 11920:tid 11935] [client 172.190.142.176:31553] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaND9izLNJUKxvBorrBOcAAAAYs"]
[Sun Mar 01 03:37:29.107701 2026] [:error] [pid 31190:tid 31224] [client 172.190.142.176:40723] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaND-RfvwGOholYpM1HVwwAAANI"]
[Sun Mar 01 03:37:31.065497 2026] [:error] [pid 7644:tid 7667] [client 172.190.142.176:52784] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaND-_qeDUGmVAHX7VDBIAAAAVU"]
[Sun Mar 01 03:37:32.769603 2026] [:error] [pid 31190:tid 31222] [client 172.190.142.176:28897] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaND_BfvwGOholYpM1HVzwAAANA"]
[Sun Mar 01 03:37:35.731024 2026] [:error] [pid 11920:tid 11945] [client 172.190.142.176:40819] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aaND_yzLNJUKxvBorrBOrgAAAZU"]
[Sun Mar 01 03:37:37.594488 2026] [:error] [pid 11920:tid 11935] [client 172.190.142.176:46268] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aaNEASzLNJUKxvBorrBOvAAAAYs"]
[Sun Mar 01 03:37:38.948183 2026] [:error] [pid 30797:tid 30895] [client 172.190.142.176:15740] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aaNEAvQmcmSQL-3rvLAbqwAAAFg"]
[Sun Mar 01 03:37:39.821913 2026] [:error] [pid 30798:tid 30900] [client 172.190.142.176:15684] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.kb.php"] [unique_id "aaNEA8BkD73gO8wTonb3NgAAAIE"]
[Sun Mar 01 03:37:41.193040 2026] [:error] [pid 7644:tid 7660] [client 172.190.142.176:15693] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aaNEBfqeDUGmVAHX7VDBJQAAAU4"]
[Sun Mar 01 03:59:11.480215 2026] [:error] [pid 14637:tid 14652] [client 20.41.98.49:17504] [client 20.41.98.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.41.98.49, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNJD6QVOOrpA69ImxnQNwAAAQo"]
[Sun Mar 01 03:59:13.837314 2026] [:error] [pid 14637:tid 14646] [client 20.41.98.49:17504] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaNJEaQVOOrpA69ImxnQRAAAAQQ"]
[Sun Mar 01 03:59:14.388248 2026] [:error] [pid 14637:tid 14657] [client 20.41.98.49:1543] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaNJEqQVOOrpA69ImxnQSAAAAQ8"]
[Sun Mar 01 03:59:14.925763 2026] [:error] [pid 10292:tid 10412] [client 20.41.98.49:1583] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaNJEgUd4thFAarmPH2AuwAAAFI"]
[Sun Mar 01 03:59:15.471804 2026] [:error] [pid 10292:tid 10403] [client 20.41.98.49:6376] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaNJEwUd4thFAarmPH2AvQAAAEk"]
[Sun Mar 01 04:08:57.671131 2026] [:error] [pid 14637:tid 14652] [client 85.203.15.99:45643] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaNLWaQVOOrpA69Imxnd9AAAAQo"]
[Sun Mar 01 04:08:59.181646 2026] [:error] [pid 10297:tid 10427] [client 81.199.26.69:27441] [client 81.199.26.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaNLW35a9rbvPss2V0M3WwAAAIY"]
[Sun Mar 01 04:09:01.681747 2026] [:error] [pid 10508:tid 10521] [client 85.203.15.158:42067] [client 85.203.15.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaNLXfnZ4Ocsz9vZs1NxnwAAAMk"]
[Sun Mar 01 04:09:03.241779 2026] [:error] [pid 14637:tid 14655] [client 81.199.26.61:53335] [client 81.199.26.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaNLX6QVOOrpA69ImxneFwAAAQ0"]
[Sun Mar 01 04:09:05.657017 2026] [:error] [pid 10508:tid 10513] [client 85.203.15.157:39197] [client 85.203.15.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaNLYfnZ4Ocsz9vZs1NxsQAAAME"]
[Sun Mar 01 04:09:06.531617 2026] [:error] [pid 14637:tid 14651] [client 85.203.15.164:41537] [client 85.203.15.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaNLYqQVOOrpA69ImxneKQAAAQk"]
[Sun Mar 01 04:09:07.125500 2026] [:error] [pid 14637:tid 14645] [client 85.203.15.224:27111] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaNLY6QVOOrpA69ImxneLgAAAQM"]
[Sun Mar 01 04:09:07.699946 2026] [:error] [pid 10297:tid 10440] [client 85.203.15.222:44349] [client 85.203.15.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaNLY35a9rbvPss2V0M3cwAAAJM"]
[Sun Mar 01 04:09:08.278900 2026] [:error] [pid 10508:tid 10516] [client 85.203.15.174:23401] [client 85.203.15.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaNLZPnZ4Ocsz9vZs1NxtAAAAMQ"]
[Sun Mar 01 04:09:08.867087 2026] [:error] [pid 14637:tid 14660] [client 85.203.15.160:63207] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaNLZKQVOOrpA69ImxneOgAAARI"]
[Sun Mar 01 04:09:09.989598 2026] [:error] [pid 14637:tid 14658] [client 85.203.15.169:24131] [client 85.203.15.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaNLZaQVOOrpA69ImxneQgAAARA"]
[Sun Mar 01 04:09:11.194175 2026] [:error] [pid 10508:tid 10518] [client 85.203.15.82:28851] [client 85.203.15.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aaNLZ_nZ4Ocsz9vZs1NxvAAAAMY"]
[Sun Mar 01 04:09:12.353839 2026] [:error] [pid 10288:tid 10380] [client 81.199.26.66:31449] [client 81.199.26.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaNLaBppLTIhFPGINgcNhwAAAA4"]
[Sun Mar 01 04:09:13.212872 2026] [:error] [pid 14637:tid 14657] [client 85.203.15.157:48251] [client 85.203.15.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaNLaaQVOOrpA69ImxneSwAAAQ8"]
[Sun Mar 01 04:09:14.125198 2026] [:error] [pid 10297:tid 10440] [client 85.203.15.232:26731] [client 85.203.15.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaNLan5a9rbvPss2V0M3lgAAAJM"]
[Sun Mar 01 04:09:16.454780 2026] [:error] [pid 10297:tid 10435] [client 81.199.26.62:60001] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaNLbH5a9rbvPss2V0M3pwAAAI4"]
[Sun Mar 01 04:09:17.325628 2026] [:error] [pid 14637:tid 14658] [client 85.203.15.220:23941] [client 85.203.15.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaNLbaQVOOrpA69ImxnebQAAARA"]
[Sun Mar 01 04:09:18.527722 2026] [:error] [pid 10288:tid 10383] [client 85.203.15.153:60361] [client 85.203.15.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaNLbhppLTIhFPGINgcNjgAAABE"]
[Sun Mar 01 04:09:19.456499 2026] [:error] [pid 10288:tid 10373] [client 85.203.15.157:55353] [client 85.203.15.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaNLbxppLTIhFPGINgcNkQAAAAc"]
[Sun Mar 01 04:09:21.218410 2026] [:error] [pid 14637:tid 14642] [client 81.199.26.66:40057] [client 81.199.26.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaNLcaQVOOrpA69ImxnelgAAAQA"]
[Sun Mar 01 04:09:22.072031 2026] [:error] [pid 14637:tid 14648] [client 85.203.15.167:63735] [client 85.203.15.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaNLcqQVOOrpA69ImxnenwAAAQY"]
[Sun Mar 01 04:09:23.008177 2026] [:error] [pid 14637:tid 14664] [client 85.203.15.164:47679] [client 85.203.15.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaNLc6QVOOrpA69ImxnerQAAARY"]
[Sun Mar 01 04:09:23.556452 2026] [:error] [pid 14637:tid 14661] [client 81.199.26.64:24693] [client 81.199.26.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaNLc6QVOOrpA69ImxnesAAAARM"]
[Sun Mar 01 04:09:24.139841 2026] [:error] [pid 14637:tid 14648] [client 85.203.15.154:47905] [client 85.203.15.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaNLdKQVOOrpA69ImxnetQAAAQY"]
[Sun Mar 01 04:09:25.530249 2026] [:error] [pid 10292:tid 10416] [client 81.199.26.57:35815] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaNLdQUd4thFAarmPH2E-gAAAFY"]
[Sun Mar 01 04:09:26.107464 2026] [:error] [pid 10508:tid 10524] [client 81.199.26.54:36299] [client 81.199.26.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaNLdvnZ4Ocsz9vZs1NxxAAAAMw"]
[Sun Mar 01 04:09:27.677058 2026] [:error] [pid 14637:tid 14654] [client 81.199.26.56:22315] [client 81.199.26.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaNLd6QVOOrpA69ImxneyQAAAQw"]
[Sun Mar 01 04:09:30.628925 2026] [:error] [pid 10292:tid 10415] [client 85.203.15.173:59225] [client 85.203.15.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaNLegUd4thFAarmPH2FEQAAAFU"]
[Sun Mar 01 04:09:32.020601 2026] [:error] [pid 10297:tid 10423] [client 81.199.26.62:55017] [client 81.199.26.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.62, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaNLfH5a9rbvPss2V0M31AAAAII"]
[Sun Mar 01 04:09:35.544406 2026] [:error] [pid 10297:tid 10428] [client 81.199.26.62:55017] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaNLf35a9rbvPss2V0M37AAAAIc"]
[Sun Mar 01 04:09:36.701710 2026] [:error] [pid 10508:tid 10524] [client 85.203.15.167:58693] [client 85.203.15.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.167, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaNLgPnZ4Ocsz9vZs1Nx5QAAAMw"]
[Sun Mar 01 04:09:37.298179 2026] [:error] [pid 10508:tid 10518] [client 85.203.15.167:58693] [client 85.203.15.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaNLgfnZ4Ocsz9vZs1Nx7AAAAMY"]
[Sun Mar 01 04:09:40.206811 2026] [:error] [pid 10297:tid 10433] [client 81.199.26.57:55829] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaNLhH5a9rbvPss2V0M4CQAAAIw"]
[Sun Mar 01 04:09:43.134912 2026] [:error] [pid 14637:tid 14661] [client 85.203.15.157:40753] [client 85.203.15.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaNLh6QVOOrpA69ImxnfIQAAARM"]
[Sun Mar 01 04:09:44.257213 2026] [:error] [pid 14637:tid 14660] [client 81.199.26.59:45525] [client 81.199.26.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaNLiKQVOOrpA69ImxnfKQAAARI"]
[Sun Mar 01 04:09:45.839148 2026] [:error] [pid 10297:tid 10432] [client 81.199.26.55:36191] [client 81.199.26.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.55, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaNLiX5a9rbvPss2V0M4JQAAAIs"]
[Sun Mar 01 04:09:46.149534 2026] [:error] [pid 10297:tid 10445] [client 81.199.26.55:36191] [client 81.199.26.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaNLin5a9rbvPss2V0M4JgAAAJg"]
[Sun Mar 01 04:09:51.654161 2026] [:error] [pid 10297:tid 10423] [client 81.199.26.55:29755] [client 81.199.26.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaNLj35a9rbvPss2V0M4SQAAAII"]
[Sun Mar 01 04:09:53.450128 2026] [:error] [pid 10297:tid 10444] [client 85.203.15.82:64379] [client 85.203.15.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.15.82, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaNLkX5a9rbvPss2V0M4UQAAAJc"]
[Sun Mar 01 04:09:54.552753 2026] [:error] [pid 10297:tid 10437] [client 85.203.15.82:64379] [client 85.203.15.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaNLkn5a9rbvPss2V0M4VwAAAJA"]
[Sun Mar 01 04:09:55.401044 2026] [:error] [pid 10292:tid 10415] [client 81.199.26.60:21481] [client 81.199.26.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaNLkwUd4thFAarmPH2FLwAAAFU"]
[Sun Mar 01 04:09:56.585410 2026] [:error] [pid 14637:tid 14660] [client 85.203.15.222:61839] [client 85.203.15.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaNLlKQVOOrpA69ImxnfagAAARI"]
[Sun Mar 01 04:09:58.021822 2026] [:error] [pid 10288:tid 10385] [client 85.203.15.162:47469] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaNLlhppLTIhFPGINgcNvAAAABM"]
[Sun Mar 01 04:09:58.768275 2026] [:error] [pid 10292:tid 10397] [client 85.203.15.156:39921] [client 85.203.15.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaNLlgUd4thFAarmPH2FOAAAAEM"]
[Sun Mar 01 04:10:01.006795 2026] [:error] [pid 10288:tid 10377] [client 81.199.26.62:45085] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaNLmRppLTIhFPGINgcNygAAAAs"]
[Sun Mar 01 04:10:01.896272 2026] [:error] [pid 10297:tid 10437] [client 85.203.15.173:52351] [client 85.203.15.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaNLmX5a9rbvPss2V0M4aAAAAJA"]
[Sun Mar 01 04:10:03.513600 2026] [:error] [pid 10297:tid 10433] [client 85.203.15.162:60081] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaNLm35a9rbvPss2V0M4bgAAAIw"]
[Sun Mar 01 04:10:05.108109 2026] [:error] [pid 14637:tid 14665] [client 85.203.15.158:45939] [client 85.203.15.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaNLnaQVOOrpA69ImxnfmwAAARc"]
[Sun Mar 01 04:10:06.319133 2026] [:error] [pid 14637:tid 14644] [client 81.199.26.54:55361] [client 81.199.26.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaNLnqQVOOrpA69ImxnfqgAAAQI"]
[Sun Mar 01 04:10:08.199205 2026] [:error] [pid 10297:tid 10431] [client 85.203.15.150:41183] [client 85.203.15.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaNLoH5a9rbvPss2V0M4fAAAAIo"]
[Sun Mar 01 04:10:11.500276 2026] [:error] [pid 14637:tid 14645] [client 81.199.26.54:26021] [client 81.199.26.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaNLo6QVOOrpA69Imxnf3QAAAQM"]
[Sun Mar 01 04:10:12.052302 2026] [:error] [pid 10288:tid 10368] [client 85.203.15.228:49827] [client 85.203.15.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaNLpBppLTIhFPGINgcN0QAAAAI"]
[Sun Mar 01 04:10:12.677405 2026] [:error] [pid 10288:tid 10373] [client 85.203.15.169:34887] [client 85.203.15.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaNLpBppLTIhFPGINgcN2AAAAAc"]
[Sun Mar 01 04:10:14.357753 2026] [:error] [pid 10297:tid 10427] [client 81.199.26.59:38267] [client 81.199.26.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaNLpn5a9rbvPss2V0M4kQAAAIY"]
[Sun Mar 01 04:10:15.272323 2026] [:error] [pid 10297:tid 10438] [client 85.203.15.159:58125] [client 85.203.15.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaNLp35a9rbvPss2V0M4mAAAAJE"]
[Sun Mar 01 04:10:15.843606 2026] [:error] [pid 10292:tid 10398] [client 85.203.15.152:60865] [client 85.203.15.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaNLpwUd4thFAarmPH2FTQAAAEQ"]
[Sun Mar 01 04:10:17.234819 2026] [:error] [pid 14637:tid 14646] [client 85.203.15.159:21511] [client 85.203.15.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaNLqaQVOOrpA69Imxnf9AAAAQQ"]
[Sun Mar 01 04:10:17.789646 2026] [:error] [pid 10292:tid 10413] [client 85.203.15.172:45469] [client 85.203.15.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaNLqQUd4thFAarmPH2FUgAAAFM"]
[Sun Mar 01 04:10:18.358374 2026] [:error] [pid 14637:tid 14648] [client 85.203.15.151:40789] [client 85.203.15.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaNLqqQVOOrpA69Imxnf-wAAAQY"]
[Sun Mar 01 04:10:18.961223 2026] [:error] [pid 10292:tid 10403] [client 85.203.15.156:51679] [client 85.203.15.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaNLqgUd4thFAarmPH2FUwAAAEk"]
[Sun Mar 01 04:10:19.861452 2026] [:error] [pid 10508:tid 10516] [client 81.199.26.56:26353] [client 81.199.26.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaNLq_nZ4Ocsz9vZs1NyUAAAAMQ"]
[Sun Mar 01 04:10:20.981956 2026] [:error] [pid 14637:tid 14645] [client 85.203.15.159:30193] [client 85.203.15.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaNLrKQVOOrpA69ImxngEQAAAQM"]
[Sun Mar 01 04:10:22.662552 2026] [:error] [pid 14637:tid 14655] [client 85.203.15.100:35867] [client 85.203.15.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaNLrqQVOOrpA69ImxngGgAAAQ0"]
[Sun Mar 01 04:10:25.199261 2026] [:error] [pid 10297:tid 10430] [client 85.203.15.224:56979] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaNLsX5a9rbvPss2V0M4zgAAAIk"]
[Sun Mar 01 04:10:26.666762 2026] [:error] [pid 10508:tid 10530] [client 85.203.15.167:27661] [client 85.203.15.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaNLsvnZ4Ocsz9vZs1NyZAAAANI"]
[Sun Mar 01 04:10:27.235632 2026] [:error] [pid 14637:tid 14656] [client 81.199.26.70:40383] [client 81.199.26.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaNLs6QVOOrpA69ImxngKgAAAQ4"]
[Sun Mar 01 04:10:29.000380 2026] [:error] [pid 10508:tid 10528] [client 81.199.26.62:26263] [client 81.199.26.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaNLtPnZ4Ocsz9vZs1NycwAAANA"]
[Sun Mar 01 04:10:30.449026 2026] [proxy_fcgi:error] [pid 14637:tid 14653] [client 81.199.26.57:57299] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:10:30.771018 2026] [proxy_fcgi:error] [pid 14637:tid 14644] [client 81.199.26.57:57299] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:10:31.060003 2026] [proxy_fcgi:error] [pid 14637:tid 14645] [client 81.199.26.57:57299] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:10:32.573815 2026] [:error] [pid 14637:tid 14652] [client 81.199.26.57:57299] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaNLuKQVOOrpA69ImxngTQAAAQo"]
[Sun Mar 01 04:10:33.151146 2026] [:error] [pid 10508:tid 10512] [client 85.203.15.168:35221] [client 85.203.15.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaNLufnZ4Ocsz9vZs1NyggAAAMA"]
[Sun Mar 01 04:10:33.758501 2026] [:error] [pid 10297:tid 10432] [client 81.199.26.57:64253] [client 81.199.26.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaNLuX5a9rbvPss2V0M44wAAAIs"]
[Sun Mar 01 04:10:34.378889 2026] [:error] [pid 10508:tid 10522] [client 85.203.15.100:31403] [client 85.203.15.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaNLuvnZ4Ocsz9vZs1NyiQAAAMo"]
[Sun Mar 01 04:10:34.982965 2026] [:error] [pid 10508:tid 10516] [client 85.203.15.231:26023] [client 85.203.15.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaNLuvnZ4Ocsz9vZs1NyiwAAAMQ"]
[Sun Mar 01 04:10:35.570015 2026] [:error] [pid 10297:tid 10434] [client 85.203.15.232:26901] [client 85.203.15.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaNLu35a9rbvPss2V0M48AAAAI0"]
[Sun Mar 01 04:10:36.472326 2026] [:error] [pid 14637:tid 14643] [client 85.203.15.231:63107] [client 85.203.15.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaNLvKQVOOrpA69ImxngXwAAAQE"]
[Sun Mar 01 04:10:37.066145 2026] [:error] [pid 10292:tid 10411] [client 85.203.15.82:30395] [client 85.203.15.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaNLvQUd4thFAarmPH2FawAAAFE"]
[Sun Mar 01 04:10:37.680515 2026] [:error] [pid 10288:tid 10371] [client 81.199.26.59:33939] [client 81.199.26.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaNLvRppLTIhFPGINgcN_QAAAAU"]
[Sun Mar 01 04:10:38.264585 2026] [:error] [pid 10288:tid 10377] [client 85.203.15.220:38585] [client 85.203.15.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaNLvhppLTIhFPGINgcOAQAAAAs"]
[Sun Mar 01 04:10:39.488171 2026] [:error] [pid 10292:tid 10397] [client 85.203.15.82:61697] [client 85.203.15.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaNLvwUd4thFAarmPH2FcAAAAEM"]
[Sun Mar 01 04:10:40.332679 2026] [:error] [pid 10297:tid 10436] [client 85.203.15.159:38707] [client 85.203.15.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaNLwH5a9rbvPss2V0M5BgAAAI8"]
[Sun Mar 01 04:10:41.510660 2026] [:error] [pid 10508:tid 10528] [client 85.203.15.162:42217] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaNLwfnZ4Ocsz9vZs1NyngAAANA"]
[Sun Mar 01 04:10:42.760443 2026] [:error] [pid 14637:tid 14648] [client 85.203.15.169:64633] [client 85.203.15.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaNLwqQVOOrpA69ImxngggAAAQY"]
[Sun Mar 01 04:10:44.275844 2026] [:error] [pid 10292:tid 10396] [client 85.203.15.159:35855] [client 85.203.15.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaNLxAUd4thFAarmPH2FdwAAAEI"]
[Sun Mar 01 04:10:45.976878 2026] [:error] [pid 14637:tid 14649] [client 85.203.15.162:42691] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaNLxaQVOOrpA69ImxngtQAAAQc"]
[Sun Mar 01 04:10:46.893737 2026] [:error] [pid 14637:tid 14646] [client 85.203.15.225:23537] [client 85.203.15.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaNLxqQVOOrpA69ImxngvgAAAQQ"]
[Sun Mar 01 04:10:52.205880 2026] [:error] [pid 10288:tid 10389] [client 81.199.26.64:65475] [client 81.199.26.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaNLzBppLTIhFPGINgcOFwAAABc"]
[Sun Mar 01 04:10:52.813169 2026] [:error] [pid 10292:tid 10404] [client 85.203.15.225:23999] [client 85.203.15.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaNLzAUd4thFAarmPH2FgwAAAEo"]
[Sun Mar 01 04:10:53.436971 2026] [:error] [pid 10292:tid 10401] [client 81.199.26.53:36037] [client 81.199.26.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 81.199.26.53, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaNLzQUd4thFAarmPH2FhQAAAEc"]
[Sun Mar 01 04:10:54.026968 2026] [:error] [pid 10292:tid 10409] [client 81.199.26.53:36037] [client 81.199.26.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaNLzgUd4thFAarmPH2FiQAAAE8"]
[Sun Mar 01 04:10:55.185810 2026] [:error] [pid 10297:tid 10421] [client 85.203.15.162:24851] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaNLz35a9rbvPss2V0M5OgAAAIA"]
[Sun Mar 01 04:10:55.776980 2026] [:error] [pid 10292:tid 10397] [client 85.203.15.224:50343] [client 85.203.15.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaNLzwUd4thFAarmPH2FkAAAAEM"]
[Sun Mar 01 04:10:57.514257 2026] [:error] [pid 14637:tid 14659] [client 85.203.15.151:49407] [client 85.203.15.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaNL0aQVOOrpA69ImxnhJwAAARE"]
[Sun Mar 01 04:10:58.079625 2026] [:error] [pid 10292:tid 10408] [client 81.199.26.60:40917] [client 81.199.26.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aaNL0gUd4thFAarmPH2FmwAAAE4"]
[Sun Mar 01 04:11:00.253772 2026] [:error] [pid 14637:tid 14643] [client 85.203.15.154:56733] [client 85.203.15.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaNL1KQVOOrpA69ImxnhSQAAAQE"]
[Sun Mar 01 04:11:02.565853 2026] [proxy_fcgi:error] [pid 10508:tid 10530] [client 85.203.15.162:35433] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 04:11:03.161103 2026] [:error] [pid 10508:tid 10525] [client 85.203.15.162:35433] [client 85.203.15.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaNL1_nZ4Ocsz9vZs1NywwAAAM0"]
[Sun Mar 01 04:11:03.922760 2026] [:error] [pid 10508:tid 10536] [client 85.203.15.99:45567] [client 85.203.15.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaNL1_nZ4Ocsz9vZs1NyxgAAANg"]
[Sun Mar 01 04:11:05.104871 2026] [:error] [pid 10297:tid 10435] [client 85.203.15.174:33625] [client 85.203.15.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaNL2X5a9rbvPss2V0M5ZwAAAI4"]
[Sun Mar 01 04:11:05.694327 2026] [:error] [pid 14637:tid 14649] [client 81.199.26.54:33037] [client 81.199.26.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaNL2aQVOOrpA69ImxnhegAAAQc"]
[Sun Mar 01 04:11:09.482550 2026] [:error] [pid 14637:tid 14651] [client 85.203.15.171:59261] [client 85.203.15.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaNL3aQVOOrpA69ImxnhnQAAAQk"]
[Sun Mar 01 04:11:10.017351 2026] [:error] [pid 14637:tid 14645] [client 81.199.26.63:60117] [client 81.199.26.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaNL3qQVOOrpA69ImxnhoQAAAQM"]
[Sun Mar 01 04:11:11.820873 2026] [:error] [pid 14637:tid 14644] [client 85.203.15.160:39087] [client 85.203.15.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaNL36QVOOrpA69ImxnhqwAAAQI"]
[Sun Mar 01 04:11:12.430110 2026] [:error] [pid 10508:tid 10519] [client 81.199.26.64:31133] [client 81.199.26.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaNL4PnZ4Ocsz9vZs1Ny3wAAAMc"]
[Sun Mar 01 04:18:26.216887 2026] [:error] [pid 14723:tid 14741] [client 20.151.205.221:23121] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.205.221, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaNNkkF1fYupsqTQwNmFywAAAQ8"]
[Sun Mar 01 04:18:27.122183 2026] [:error] [pid 14723:tid 14741] [client 20.151.205.221:23121] [client 20.151.205.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.205.221, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaNNk0F1fYupsqTQwNmF3QAAAQ8"]
[Sun Mar 01 04:18:27.570138 2026] [:error] [pid 14723:tid 14735] [client 20.151.205.221:23121] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNNk0F1fYupsqTQwNmF5QAAAQk"]
[Sun Mar 01 04:18:28.404611 2026] [:error] [pid 14723:tid 14743] [client 20.151.205.221:23015] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNNlEF1fYupsqTQwNmF8QAAARE"]
[Sun Mar 01 04:18:29.248667 2026] [:error] [pid 54532:tid 54582] [client 20.151.205.221:23030] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNNld95KNqVab1UT7d5jAAAAEo"]
[Sun Mar 01 04:18:30.075682 2026] [:error] [pid 14723:tid 14733] [client 20.151.205.221:23154] [client 20.151.205.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaNNlkF1fYupsqTQwNmGCwAAAQc"]
[Sun Mar 01 04:41:19.248777 2026] [:error] [pid 21263:tid 21275] [client 103.65.236.153:49787] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aaNS79AxjzLvN1upBhnAjgAAAMg"]
[Sun Mar 01 04:41:19.504075 2026] [:error] [pid 21263:tid 21279] [client 103.65.236.153:49812] [client 103.65.236.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aaNS79AxjzLvN1upBhnAjwAAAMw"]
[Sun Mar 01 05:18:52.198314 2026] [:error] [pid 21263:tid 21287] [client 20.63.210.169:16498] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaNbvNAxjzLvN1upBhnhowAAANQ"]
[Sun Mar 01 05:18:52.703040 2026] [:error] [pid 24576:tid 24599] [client 20.63.210.169:26952] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaNbvIvfb5CnctJh0734mAAAARM"]
[Sun Mar 01 05:18:53.184350 2026] [:error] [pid 21158:tid 21214] [client 20.63.210.169:26128] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaNbvTriSIe3-pWnbPbfkAAAAFU"]
[Sun Mar 01 05:18:53.667277 2026] [:error] [pid 21159:tid 21227] [client 20.63.210.169:26957] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaNbveLi3ouy1NZIkgoiEgAAAIY"]
[Sun Mar 01 08:34:11.402204 2026] [:error] [pid 24576:tid 24587] [client 43.153.102.138:57438] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaOJg4vfb5CnctJh070ulgAAAQg"]
[Sun Mar 01 10:07:56.767618 2026] [:error] [pid 21263:tid 21278] [client 43.157.148.38:35452] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaOffNAxjzLvN1upBhkLvgAAAMs"]
[Sun Mar 01 11:05:28.114644 2026] [:error] [pid 33767:tid 33791] [client 20.104.206.150:20352] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaOs-EGyeKe3MWsxvBgOMAAAAhU"]
[Sun Mar 01 11:05:29.196188 2026] [:error] [pid 34286:tid 34292] [client 20.104.206.150:20416] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaOs-XPFxpCIhHW6XmmlEAAAAoQ"]
[Sun Mar 01 11:05:30.472306 2026] [:error] [pid 33539:tid 33549] [client 20.104.206.150:20365] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaOs-tCsLwBYg4s018u4NQAAAcQ"]
[Sun Mar 01 11:05:31.936204 2026] [:error] [pid 33976:tid 33997] [client 20.104.206.150:20453] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaOs-wUyU3c4Xm_xpMS_dgAAAlM"]
[Sun Mar 01 11:33:04.267848 2026] [:error] [pid 21158:tid 21204] [client 74.243.251.125:12716] [client 74.243.251.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaOzcDriSIe3-pWnbPYMbAAAAEs"]
[Sun Mar 01 11:33:06.706776 2026] [:error] [pid 35350:tid 35364] [client 74.243.251.125:12726] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aaOzcoqZbPJ_JGYY1RQBLwAAA4w"]
[Sun Mar 01 11:33:07.029678 2026] [:error] [pid 35060:tid 35069] [client 74.243.251.125:13069] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aaOzc5L8JPoS_tq-tiULbQAAA0c"]
[Sun Mar 01 11:33:07.353828 2026] [:error] [pid 35654:tid 35669] [client 74.243.251.125:12711] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aaOzc0IPeuEwCTirofKT2wAAA8s"]
[Sun Mar 01 11:33:07.684190 2026] [:error] [pid 21156:tid 21188] [client 74.243.251.125:13064] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aaOzc6saG_9IkG8N2p0RUgAAABY"]
[Sun Mar 01 11:33:08.007569 2026] [:error] [pid 35350:tid 35358] [client 74.243.251.125:12684] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaOzdIqZbPJ_JGYY1RQBOAAAA4Y"]
[Sun Mar 01 11:33:08.331895 2026] [:error] [pid 34785:tid 34788] [client 74.243.251.125:12728] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaOzdIC4dBNEGEcJx-OGCgAAAwE"]
[Sun Mar 01 11:33:08.655245 2026] [:error] [pid 34785:tid 34788] [client 74.243.251.125:13071] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaOzdIC4dBNEGEcJx-OGCwAAAwE"]
[Sun Mar 01 11:33:08.978764 2026] [:error] [pid 21156:tid 21188] [client 74.243.251.125:12731] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaOzdKsaG_9IkG8N2p0RWAAAABY"]
[Sun Mar 01 11:33:09.304108 2026] [:error] [pid 35060:tid 35082] [client 74.243.251.125:12700] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "aaOzdZL8JPoS_tq-tiULdQAAA1Q"]
[Sun Mar 01 11:33:09.628303 2026] [:error] [pid 35654:tid 35658] [client 74.243.251.125:12680] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "aaOzdUIPeuEwCTirofKT-QAAA8A"]
[Sun Mar 01 11:33:09.953088 2026] [:error] [pid 35350:tid 35358] [client 74.243.251.125:12703] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "aaOzdYqZbPJ_JGYY1RQBTAAAA4Y"]
[Sun Mar 01 11:33:10.278277 2026] [:error] [pid 35654:tid 35677] [client 74.243.251.125:13108] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "aaOzdkIPeuEwCTirofKT_wAAA9M"]
[Sun Mar 01 11:33:10.601093 2026] [:error] [pid 35654:tid 35663] [client 74.243.251.125:12705] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aaOzdkIPeuEwCTirofKUBAAAA8U"]
[Sun Mar 01 11:33:10.924587 2026] [:error] [pid 35060:tid 35069] [client 74.243.251.125:12719] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aaOzdpL8JPoS_tq-tiULegAAA0c"]
[Sun Mar 01 11:33:11.250587 2026] [:error] [pid 35350:tid 35374] [client 74.243.251.125:13087] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aaOzd4qZbPJ_JGYY1RQBVQAAA5Y"]
[Sun Mar 01 11:33:11.573545 2026] [:error] [pid 35350:tid 35371] [client 74.243.251.125:12725] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aaOzd4qZbPJ_JGYY1RQBWAAAA5M"]
[Sun Mar 01 11:33:11.946217 2026] [:error] [pid 33976:tid 33994] [client 74.243.251.125:12695] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/011i.php"] [unique_id "aaOzdwUyU3c4Xm_xpMTJeQAAAlA"]
[Sun Mar 01 11:33:12.277106 2026] [:error] [pid 21158:tid 21208] [client 74.243.251.125:12729] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/011i.php"] [unique_id "aaOzeDriSIe3-pWnbPYMeQAAAE8"]
[Sun Mar 01 11:33:12.611123 2026] [:error] [pid 33976:tid 33994] [client 74.243.251.125:12713] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/011i.php"] [unique_id "aaOzeAUyU3c4Xm_xpMTJfgAAAlA"]
[Sun Mar 01 11:33:12.989157 2026] [:error] [pid 35654:tid 35678] [client 74.243.251.125:13248] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/011i.php"] [unique_id "aaOzeEIPeuEwCTirofKULgAAA9Q"]
[Sun Mar 01 11:33:13.321823 2026] [:error] [pid 35654:tid 35678] [client 74.243.251.125:12697] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaOzeUIPeuEwCTirofKUNwAAA9Q"]
[Sun Mar 01 11:33:13.644993 2026] [:error] [pid 33229:tid 33246] [client 74.243.251.125:12723] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaOzeXzT4c9ddlGE6FxbBAAAAY8"]
[Sun Mar 01 11:33:13.968252 2026] [:error] [pid 35060:tid 35069] [client 74.243.251.125:13110] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaOzeZL8JPoS_tq-tiULewAAA0c"]
[Sun Mar 01 11:33:14.292103 2026] [:error] [pid 35350:tid 35374] [client 74.243.251.125:13306] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaOzeoqZbPJ_JGYY1RQBfgAAA5Y"]
[Sun Mar 01 11:33:14.615779 2026] [:error] [pid 35350:tid 35356] [client 74.243.251.125:13090] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaOzeoqZbPJ_JGYY1RQBiwAAA4Q"]
[Sun Mar 01 11:33:14.939987 2026] [:error] [pid 33976:tid 33994] [client 74.243.251.125:13287] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaOzegUyU3c4Xm_xpMTJiwAAAlA"]
[Sun Mar 01 11:33:15.264319 2026] [:error] [pid 35654:tid 35669] [client 74.243.251.125:13103] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaOze0IPeuEwCTirofKUZAAAA8s"]
[Sun Mar 01 11:33:15.586648 2026] [:error] [pid 33976:tid 33985] [client 74.243.251.125:13065] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaOzewUyU3c4Xm_xpMTJjQAAAkc"]
[Sun Mar 01 11:33:15.909554 2026] [:error] [pid 35350:tid 35357] [client 74.243.251.125:12717] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaOze4qZbPJ_JGYY1RQBowAAA4U"]
[Sun Mar 01 11:33:16.239194 2026] [:error] [pid 33976:tid 33994] [client 74.243.251.125:12689] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaOzfAUyU3c4Xm_xpMTJkAAAAlA"]
[Sun Mar 01 11:33:16.563191 2026] [:error] [pid 35350:tid 35355] [client 74.243.251.125:13066] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaOzfIqZbPJ_JGYY1RQBqAAAA4M"]
[Sun Mar 01 11:33:16.886083 2026] [:error] [pid 21156:tid 21188] [client 74.243.251.125:13298] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaOzfKsaG_9IkG8N2p0RdgAAABY"]
[Sun Mar 01 11:33:17.210274 2026] [:error] [pid 33229:tid 33232] [client 74.243.251.125:13059] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaOzfXzT4c9ddlGE6FxbDgAAAYE"]
[Sun Mar 01 11:33:17.538119 2026] [:error] [pid 33229:tid 33246] [client 74.243.251.125:13085] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaOzfXzT4c9ddlGE6FxbEAAAAY8"]
[Sun Mar 01 11:33:17.860828 2026] [:error] [pid 34552:tid 34573] [client 74.243.251.125:12701] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaOzfXBlU_DRqGi4yvsY2QAAAtI"]
[Sun Mar 01 11:33:18.212777 2026] [:error] [pid 35654:tid 35682] [client 74.243.251.125:13060] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaOzfkIPeuEwCTirofKUfAAAA9g"]
[Sun Mar 01 11:33:18.536873 2026] [:error] [pid 35350:tid 35357] [client 74.243.251.125:13099] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaOzfoqZbPJ_JGYY1RQBqwAAA4U"]
[Sun Mar 01 11:33:18.863667 2026] [:error] [pid 34286:tid 34305] [client 74.243.251.125:13073] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaOzfnPFxpCIhHW6XmmrwQAAApE"]
[Sun Mar 01 11:33:19.187340 2026] [:error] [pid 21156:tid 21188] [client 74.243.251.125:13269] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaOzf6saG_9IkG8N2p0RewAAABY"]
[Sun Mar 01 11:33:19.512610 2026] [:error] [pid 35654:tid 35677] [client 74.243.251.125:13079] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaOzf0IPeuEwCTirofKUgQAAA9M"]
[Sun Mar 01 11:33:19.847477 2026] [:error] [pid 21156:tid 21170] [client 74.243.251.125:13285] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaOzf6saG_9IkG8N2p0RgAAAAAQ"]
[Sun Mar 01 11:33:20.170327 2026] [:error] [pid 34552:tid 34574] [client 74.243.251.125:12722] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaOzgHBlU_DRqGi4yvsY2wAAAtM"]
[Sun Mar 01 11:33:20.494629 2026] [:error] [pid 33229:tid 33232] [client 74.243.251.125:13096] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaOzgHzT4c9ddlGE6FxbFQAAAYE"]
[Sun Mar 01 11:33:20.818268 2026] [:error] [pid 35350:tid 35364] [client 74.243.251.125:13309] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaOzgIqZbPJ_JGYY1RQBtwAAA4w"]
[Sun Mar 01 11:33:21.174529 2026] [:error] [pid 35654:tid 35674] [client 74.243.251.125:13100] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaOzgUIPeuEwCTirofKUhwAAA9A"]
[Sun Mar 01 11:33:21.497993 2026] [:error] [pid 34286:tid 34289] [client 74.243.251.125:12722] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaOzgXPFxpCIhHW6XmmrxwAAAoE"]
[Sun Mar 01 11:33:21.822452 2026] [:error] [pid 21156:tid 21170] [client 74.243.251.125:13255] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaOzgasaG_9IkG8N2p0RiQAAAAQ"]
[Sun Mar 01 11:33:22.148749 2026] [:error] [pid 34286:tid 34289] [client 74.243.251.125:13089] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaOzgnPFxpCIhHW6XmmryQAAAoE"]
[Sun Mar 01 11:33:22.472585 2026] [:error] [pid 35654:tid 35677] [client 74.243.251.125:13075] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaOzgkIPeuEwCTirofKUiQAAA9M"]
[Sun Mar 01 11:33:22.797671 2026] [:error] [pid 35350:tid 35364] [client 74.243.251.125:13279] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaOzgoqZbPJ_JGYY1RQBvwAAA4w"]
[Sun Mar 01 11:33:23.121490 2026] [:error] [pid 34552:tid 34573] [client 74.243.251.125:13068] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaOzg3BlU_DRqGi4yvsY5QAAAtI"]
[Sun Mar 01 11:33:23.454301 2026] [:error] [pid 34552:tid 34573] [client 74.243.251.125:12944] [client 74.243.251.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaOzg3BlU_DRqGi4yvsY6AAAAtI"]
[Sun Mar 01 13:39:12.803450 2026] [:error] [pid 38241:tid 38251] [client 20.104.124.39:52801] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaPRAPKRPk6YnJBxw_z0iQAAAMc"]
[Sun Mar 01 13:39:14.266740 2026] [:error] [pid 37032:tid 37049] [client 20.104.124.39:52834] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaPRAuu0U4o7eSImsVT5FQAAAY8"]
[Sun Mar 01 13:39:15.445601 2026] [:error] [pid 38241:tid 38249] [client 20.104.124.39:61876] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaPRA_KRPk6YnJBxw_z0nQAAAMU"]
[Sun Mar 01 13:39:16.473763 2026] [:error] [pid 37032:tid 37053] [client 20.104.124.39:5575] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aaPRBOu0U4o7eSImsVT5FwAAAZM"]
[Sun Mar 01 13:39:16.908896 2026] [:error] [pid 44644:tid 44662] [client 20.104.124.39:61835] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaPRBJ3RJaXMcw3y9V9AmQAAAA8"]
[Sun Mar 01 13:39:17.563428 2026] [:error] [pid 38241:tid 38249] [client 20.104.124.39:61877] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaPRBfKRPk6YnJBxw_z0tAAAAMU"]
[Sun Mar 01 13:39:18.352252 2026] [:error] [pid 44644:tid 44662] [client 20.104.124.39:52811] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaPRBp3RJaXMcw3y9V9AoAAAAA8"]
[Sun Mar 01 13:39:19.604835 2026] [:error] [pid 44644:tid 44668] [client 20.104.124.39:5820] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aaPRB53RJaXMcw3y9V9AtAAAABU"]
[Sun Mar 01 13:39:21.073863 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:5783] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaPRCZ3RJaXMcw3y9V9AxAAAABA"]
[Sun Mar 01 13:39:22.173753 2026] [:error] [pid 44644:tid 44655] [client 20.104.124.39:61848] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaPRCp3RJaXMcw3y9V9AzgAAAAg"]
[Sun Mar 01 13:39:24.244152 2026] [:error] [pid 44644:tid 44651] [client 20.104.124.39:5786] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaPRDJ3RJaXMcw3y9V9A2AAAAAQ"]
[Sun Mar 01 13:39:25.687157 2026] [:error] [pid 38034:tid 38049] [client 20.104.124.39:5581] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aaPRDQxtfZjwlJok9K9JTwAAAQs"]
[Sun Mar 01 13:39:26.671136 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:61830] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaPRDp3RJaXMcw3y9V9A5AAAABA"]
[Sun Mar 01 13:39:27.597345 2026] [:error] [pid 44644:tid 44658] [client 20.104.124.39:52845] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaPRD53RJaXMcw3y9V9A8AAAAAs"]
[Sun Mar 01 13:39:28.081832 2026] [:error] [pid 41967:tid 41984] [client 20.104.124.39:5602] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaPREIO1bqY181I02eFxCgAAAI8"]
[Sun Mar 01 13:39:28.624950 2026] [:error] [pid 42619:tid 42625] [client 20.104.124.39:52800] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aaPREB_zUXcYaZE4AOdlWAAAAUQ"]
[Sun Mar 01 13:39:29.455377 2026] [:error] [pid 44644:tid 44655] [client 20.104.124.39:52816] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaPREZ3RJaXMcw3y9V9A_AAAAAg"]
[Sun Mar 01 13:39:30.277724 2026] [:error] [pid 38034:tid 38037] [client 20.104.124.39:5609] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaPREgxtfZjwlJok9K9JYQAAAQE"]
[Sun Mar 01 13:39:30.886223 2026] [:error] [pid 44644:tid 44668] [client 20.104.124.39:61851] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaPREp3RJaXMcw3y9V9BBAAAABU"]
[Sun Mar 01 13:39:31.958651 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:5591] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aaPRE53RJaXMcw3y9V9BEQAAABA"]
[Sun Mar 01 13:39:33.189192 2026] [:error] [pid 41967:tid 41982] [client 20.104.124.39:61881] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaPRFYO1bqY181I02eFxIgAAAI0"]
[Sun Mar 01 13:39:33.731168 2026] [:error] [pid 44644:tid 44651] [client 20.104.124.39:61883] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaPRFZ3RJaXMcw3y9V9BIgAAAAQ"]
[Sun Mar 01 13:39:34.987522 2026] [:error] [pid 38034:tid 38037] [client 20.104.124.39:5582] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaPRFgxtfZjwlJok9K9JbwAAAQE"]
[Sun Mar 01 13:39:36.144320 2026] [:error] [pid 38241:tid 38244] [client 20.104.124.39:61874] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aaPRGPKRPk6YnJBxw_z1CAAAAMA"]
[Sun Mar 01 13:39:37.198183 2026] [:error] [pid 44644:tid 44651] [client 20.104.124.39:61846] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaPRGZ3RJaXMcw3y9V9BSwAAAAQ"]
[Sun Mar 01 13:39:38.007441 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:52852] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaPRGvKRPk6YnJBxw_z1HgAAAMQ"]
[Sun Mar 01 13:39:38.992015 2026] [:error] [pid 38241:tid 38265] [client 20.104.124.39:61837] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaPRGvKRPk6YnJBxw_z1LQAAANU"]
[Sun Mar 01 13:39:40.623998 2026] [:error] [pid 38241:tid 38247] [client 20.104.124.39:5616] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aaPRHPKRPk6YnJBxw_z1OQAAAMM"]
[Sun Mar 01 13:39:41.722639 2026] [:error] [pid 44644:tid 44669] [client 20.104.124.39:5600] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaPRHZ3RJaXMcw3y9V9BbwAAABY"]
[Sun Mar 01 13:39:42.586455 2026] [:error] [pid 38241:tid 38264] [client 20.104.124.39:5794] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaPRHvKRPk6YnJBxw_z1SgAAANQ"]
[Sun Mar 01 13:39:43.676080 2026] [:error] [pid 38241:tid 38247] [client 20.104.124.39:5812] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaPRH_KRPk6YnJBxw_z1WQAAAMM"]
[Sun Mar 01 13:39:45.486158 2026] [:error] [pid 41967:tid 41971] [client 20.104.124.39:61865] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaPRIYO1bqY181I02eFxKwAAAII"]
[Sun Mar 01 13:39:46.050103 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:5722] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaPRIvKRPk6YnJBxw_z1bAAAAMI"]
[Sun Mar 01 13:39:46.872751 2026] [:error] [pid 38241:tid 38264] [client 20.104.124.39:5615] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaPRIvKRPk6YnJBxw_z1eAAAANQ"]
[Sun Mar 01 13:39:47.469573 2026] [:error] [pid 41342:tid 41360] [client 20.104.124.39:61831] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaPRI44iJ6RAS5CatDk8ggAAAg8"]
[Sun Mar 01 13:39:48.249679 2026] [:error] [pid 44644:tid 44666] [client 20.104.124.39:5619] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aaPRJJ3RJaXMcw3y9V9BnAAAABM"]
[Sun Mar 01 13:39:49.050906 2026] [:error] [pid 37032:tid 37042] [client 20.104.124.39:61866] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaPRJeu0U4o7eSImsVT5UQAAAYg"]
[Sun Mar 01 13:39:49.516485 2026] [:error] [pid 38241:tid 38264] [client 20.104.124.39:52840] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaPRJfKRPk6YnJBxw_z1mwAAANQ"]
[Sun Mar 01 13:39:50.116497 2026] [:error] [pid 38034:tid 38053] [client 20.104.124.39:5193] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaPRJgxtfZjwlJok9K9JowAAAQ8"]
[Sun Mar 01 13:39:50.729710 2026] [:error] [pid 38241:tid 38265] [client 20.104.124.39:5630] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaPRJvKRPk6YnJBxw_z1sAAAANU"]
[Sun Mar 01 13:39:51.598601 2026] [:error] [pid 44644:tid 44666] [client 20.104.124.39:52824] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaPRJ53RJaXMcw3y9V9BqAAAABM"]
[Sun Mar 01 13:39:52.235646 2026] [:error] [pid 37032:tid 37056] [client 20.104.124.39:5765] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaPRKOu0U4o7eSImsVT5WgAAAZY"]
[Sun Mar 01 13:39:53.543333 2026] [:error] [pid 42619:tid 42627] [client 20.104.124.39:61847] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaPRKR_zUXcYaZE4AOdlgQAAAUY"]
[Sun Mar 01 13:39:54.019387 2026] [:error] [pid 41342:tid 41368] [client 20.104.124.39:5822] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaPRKo4iJ6RAS5CatDk8hwAAAhc"]
[Sun Mar 01 13:39:55.062110 2026] [:error] [pid 42619:tid 42627] [client 20.104.124.39:61843] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaPRKx_zUXcYaZE4AOdlhwAAAUY"]
[Sun Mar 01 13:39:55.912649 2026] [:error] [pid 37032:tid 37038] [client 20.104.124.39:5590] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaPRK-u0U4o7eSImsVT5dAAAAYQ"]
[Sun Mar 01 13:39:56.477096 2026] [:error] [pid 38241:tid 38260] [client 20.104.124.39:5800] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaPRLPKRPk6YnJBxw_z2BwAAANA"]
[Sun Mar 01 13:39:57.535588 2026] [:error] [pid 44644:tid 44662] [client 20.104.124.39:52830] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaPRLZ3RJaXMcw3y9V9BzwAAAA8"]
[Sun Mar 01 13:39:58.189795 2026] [:error] [pid 44644:tid 44670] [client 20.104.124.39:61872] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaPRLp3RJaXMcw3y9V9B2wAAABc"]
[Sun Mar 01 13:39:58.983991 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:52862] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaPRLvKRPk6YnJBxw_z2FQAAAMI"]
[Sun Mar 01 13:39:59.655049 2026] [:error] [pid 44644:tid 44660] [client 20.104.124.39:61885] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaPRL53RJaXMcw3y9V9B9gAAAA0"]
[Sun Mar 01 13:40:00.476190 2026] [:error] [pid 41342:tid 41349] [client 20.104.124.39:5614] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atx.php"] [unique_id "aaPRMI4iJ6RAS5CatDk8kAAAAgQ"]
[Sun Mar 01 13:40:01.403187 2026] [:error] [pid 40750:tid 40777] [client 20.104.124.39:5785] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaPRMQfBuk03yQKDyqvBrAAAAdg"]
[Sun Mar 01 13:40:03.201392 2026] [:error] [pid 42619:tid 42627] [client 20.104.124.39:52831] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaPRMx_zUXcYaZE4AOdllAAAAUY"]
[Sun Mar 01 13:40:03.819952 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:61827] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaPRMwxtfZjwlJok9K9J_wAAARc"]
[Sun Mar 01 13:40:04.508303 2026] [:error] [pid 44644:tid 44662] [client 20.104.124.39:5578] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaPRNJ3RJaXMcw3y9V9CFAAAAA8"]
[Sun Mar 01 13:40:05.694257 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:5696] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaPRNfKRPk6YnJBxw_z2PQAAAMQ"]
[Sun Mar 01 13:40:06.684362 2026] [:error] [pid 38241:tid 38267] [client 20.104.124.39:5782] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaPRNvKRPk6YnJBxw_z2SAAAANc"]
[Sun Mar 01 13:40:08.032067 2026] [:error] [pid 44644:tid 44668] [client 20.104.124.39:5587] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaPROJ3RJaXMcw3y9V9CMwAAABU"]
[Sun Mar 01 13:40:08.917013 2026] [:error] [pid 38241:tid 38247] [client 20.104.124.39:5604] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaPROPKRPk6YnJBxw_z2UwAAAMM"]
[Sun Mar 01 13:40:09.431366 2026] [:error] [pid 41967:tid 41987] [client 20.104.124.39:61867] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/m.php"] [unique_id "aaPROYO1bqY181I02eFxQAAAAJI"]
[Sun Mar 01 13:40:09.962712 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:5705] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/m.php"] [unique_id "aaPROfKRPk6YnJBxw_z2VgAAAMQ"]
[Sun Mar 01 13:40:10.686449 2026] [:error] [pid 38034:tid 38038] [client 20.104.124.39:5626] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/m.php"] [unique_id "aaPROgxtfZjwlJok9K9KKgAAAQI"]
[Sun Mar 01 13:40:18.565430 2026] [:error] [pid 38241:tid 38247] [client 20.104.124.39:52812] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaPRQvKRPk6YnJBxw_z2kAAAAMM"]
[Sun Mar 01 13:40:19.892899 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:5787] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaPRQ_KRPk6YnJBxw_z2nwAAAMQ"]
[Sun Mar 01 13:40:20.622912 2026] [:error] [pid 40750:tid 40763] [client 20.104.124.39:5769] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaPRRAfBuk03yQKDyqvBrwAAAco"]
[Sun Mar 01 13:40:21.212406 2026] [:error] [pid 41780:tid 41795] [client 20.104.124.39:61878] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaPRRcONkVoocLIqzy0BOwAAA8w"]
[Sun Mar 01 13:40:22.071619 2026] [:error] [pid 41780:tid 41784] [client 20.104.124.39:5217] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w.php"] [unique_id "aaPRRsONkVoocLIqzy0BPAAAA8E"]
[Sun Mar 01 13:40:23.130822 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:5579] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaPRR_KRPk6YnJBxw_z2tgAAAMI"]
[Sun Mar 01 13:40:24.005253 2026] [:error] [pid 38034:tid 38038] [client 20.104.124.39:5823] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaPRSAxtfZjwlJok9K9KgQAAAQI"]
[Sun Mar 01 13:40:25.175810 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:5819] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaPRSQxtfZjwlJok9K9KkwAAARc"]
[Sun Mar 01 13:40:26.661316 2026] [:error] [pid 38241:tid 38261] [client 20.104.124.39:52806] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaPRSvKRPk6YnJBxw_z22QAAANE"]
[Sun Mar 01 13:40:27.640153 2026] [:error] [pid 38241:tid 38250] [client 20.104.124.39:5246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaPRS_KRPk6YnJBxw_z24AAAAMY"]
[Sun Mar 01 13:40:28.216551 2026] [:error] [pid 38034:tid 38038] [client 20.104.124.39:61853] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaPRTAxtfZjwlJok9K9KqQAAAQI"]
[Sun Mar 01 13:40:29.239887 2026] [:error] [pid 38034:tid 38055] [client 20.104.124.39:52853] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaPRTQxtfZjwlJok9K9KtwAAARE"]
[Sun Mar 01 13:40:30.230761 2026] [:error] [pid 42619:tid 42642] [client 20.104.124.39:5621] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaPRTh_zUXcYaZE4AOdlxgAAAVU"]
[Sun Mar 01 13:40:31.230543 2026] [:error] [pid 38241:tid 38250] [client 20.104.124.39:5760] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaPRT_KRPk6YnJBxw_z25wAAAMY"]
[Sun Mar 01 13:40:32.042793 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:5796] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaPRUAxtfZjwlJok9K9KzQAAARA"]
[Sun Mar 01 13:40:32.741458 2026] [:error] [pid 44644:tid 44670] [client 20.104.124.39:5598] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaPRUJ3RJaXMcw3y9V9C6gAAABc"]
[Sun Mar 01 13:40:33.818937 2026] [:error] [pid 42619:tid 42642] [client 20.104.124.39:5237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaPRUR_zUXcYaZE4AOdlywAAAVU"]
[Sun Mar 01 13:40:34.571079 2026] [:error] [pid 38034:tid 38053] [client 20.104.124.39:52843] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaPRUgxtfZjwlJok9K9K3AAAAQ8"]
[Sun Mar 01 13:40:35.723476 2026] [:error] [pid 38241:tid 38257] [client 20.104.124.39:52813] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaPRU_KRPk6YnJBxw_z2_wAAAM0"]
[Sun Mar 01 13:40:36.921265 2026] [:error] [pid 44644:tid 44658] [client 20.104.124.39:52818] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaPRVJ3RJaXMcw3y9V9C-QAAAAs"]
[Sun Mar 01 13:40:37.799338 2026] [:error] [pid 44644:tid 44660] [client 20.104.124.39:5742] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css.php"] [unique_id "aaPRVZ3RJaXMcw3y9V9C_AAAAA0"]
[Sun Mar 01 13:40:38.690458 2026] [:error] [pid 42619:tid 42642] [client 20.104.124.39:5329] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaPRVh_zUXcYaZE4AOdl1AAAAVU"]
[Sun Mar 01 13:40:39.902188 2026] [:error] [pid 41967:tid 41971] [client 20.104.124.39:61839] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaPRV4O1bqY181I02eFxiQAAAII"]
[Sun Mar 01 13:40:40.995058 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:52823] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaPRWAxtfZjwlJok9K9LAQAAARA"]
[Sun Mar 01 13:40:41.538698 2026] [:error] [pid 37032:tid 37048] [client 20.104.124.39:5631] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaPRWeu0U4o7eSImsVT5_gAAAY4"]
[Sun Mar 01 13:40:42.524484 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:5817] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aaPRWvKRPk6YnJBxw_z3GQAAAMI"]
[Sun Mar 01 13:40:43.759676 2026] [:error] [pid 38241:tid 38247] [client 20.104.124.39:5232] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aaPRW_KRPk6YnJBxw_z3KQAAAMM"]
[Sun Mar 01 13:40:45.163830 2026] [:error] [pid 42619:tid 42625] [client 20.104.124.39:5601] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aaPRXR_zUXcYaZE4AOdl2AAAAUQ"]
[Sun Mar 01 13:40:46.572616 2026] [:error] [pid 38241:tid 38260] [client 20.104.124.39:5583] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "aaPRXvKRPk6YnJBxw_z3QgAAANA"]
[Sun Mar 01 13:40:48.339241 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:5734] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaPRYAxtfZjwlJok9K9LFwAAARA"]
[Sun Mar 01 13:40:49.410764 2026] [:error] [pid 38241:tid 38247] [client 20.104.124.39:5618] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaPRYfKRPk6YnJBxw_z3UAAAAMM"]
[Sun Mar 01 13:40:50.765179 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:5233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaPRYvKRPk6YnJBxw_z3WQAAAMI"]
[Sun Mar 01 13:40:51.886210 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:61860] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaPRYwxtfZjwlJok9K9LLwAAARA"]
[Sun Mar 01 13:40:53.309027 2026] [:error] [pid 38034:tid 38038] [client 20.104.124.39:61857] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaPRZQxtfZjwlJok9K9LNgAAAQI"]
[Sun Mar 01 13:40:54.551696 2026] [:error] [pid 41780:tid 41804] [client 20.104.124.39:5717] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaPRZsONkVoocLIqzy0BVgAAA9U"]
[Sun Mar 01 13:40:55.848833 2026] [:error] [pid 37032:tid 37057] [client 20.104.124.39:5628] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaPRZ-u0U4o7eSImsVT6IAAAAZc"]
[Sun Mar 01 13:40:56.964551 2026] [:error] [pid 41967:tid 41971] [client 20.104.124.39:5736] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaPRaIO1bqY181I02eFxyQAAAII"]
[Sun Mar 01 13:41:00.298141 2026] [:error] [pid 38241:tid 38261] [client 20.104.124.39:5207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaPRbPKRPk6YnJBxw_z3eQAAANE"]
[Sun Mar 01 13:41:01.663857 2026] [:error] [pid 38241:tid 38261] [client 20.104.124.39:52847] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaPRbfKRPk6YnJBxw_z3gQAAANE"]
[Sun Mar 01 13:41:02.555618 2026] [:error] [pid 41967:tid 41976] [client 20.104.124.39:61880] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaPRboO1bqY181I02eFx1QAAAIc"]
[Sun Mar 01 13:41:03.956103 2026] [:error] [pid 38034:tid 38037] [client 20.104.124.39:6115] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaPRbwxtfZjwlJok9K9LXAAAAQE"]
[Sun Mar 01 13:41:04.970136 2026] [:error] [pid 41342:tid 41365] [client 20.104.124.39:6090] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaPRcI4iJ6RAS5CatDk83AAAAhQ"]
[Sun Mar 01 13:41:06.838965 2026] [:error] [pid 38241:tid 38260] [client 20.104.124.39:5768] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaPRcvKRPk6YnJBxw_z3oQAAANA"]
[Sun Mar 01 13:41:08.110934 2026] [:error] [pid 38034:tid 38049] [client 20.104.124.39:5574] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaPRdAxtfZjwlJok9K9LaAAAAQs"]
[Sun Mar 01 13:41:08.967837 2026] [:error] [pid 38241:tid 38264] [client 20.104.124.39:5620] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaPRdPKRPk6YnJBxw_z3vQAAANQ"]
[Sun Mar 01 13:41:10.671903 2026] [:error] [pid 38241:tid 38264] [client 20.104.124.39:5198] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaPRdvKRPk6YnJBxw_z3xwAAANQ"]
[Sun Mar 01 13:41:11.763239 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:52809] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaPRd_KRPk6YnJBxw_z31gAAAMI"]
[Sun Mar 01 13:41:13.182659 2026] [:error] [pid 38034:tid 38038] [client 20.104.124.39:6097] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaPReQxtfZjwlJok9K9LiQAAAQI"]
[Sun Mar 01 13:41:14.531787 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:52849] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaPRevKRPk6YnJBxw_z3-QAAAMQ"]
[Sun Mar 01 13:41:15.320942 2026] [:error] [pid 38034:tid 38060] [client 20.104.124.39:6102] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaPRewxtfZjwlJok9K9LmgAAARY"]
[Sun Mar 01 13:41:15.838735 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:52844] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaPRe_KRPk6YnJBxw_z3_wAAAMQ"]
[Sun Mar 01 13:41:16.622713 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:5572] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaPRfJ3RJaXMcw3y9V9DwwAAABA"]
[Sun Mar 01 13:41:17.244546 2026] [:error] [pid 44644:tid 44668] [client 20.104.124.39:5784] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaPRfZ3RJaXMcw3y9V9DxwAAABU"]
[Sun Mar 01 13:41:18.019544 2026] [:error] [pid 44644:tid 44658] [client 20.104.124.39:5350] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about.php"] [unique_id "aaPRfp3RJaXMcw3y9V9DzwAAAAs"]
[Sun Mar 01 13:41:30.081931 2026] [:error] [pid 44644:tid 44651] [client 20.104.124.39:5222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPRip3RJaXMcw3y9V9EGgAAAAQ"]
[Sun Mar 01 13:41:32.084895 2026] [:error] [pid 44644:tid 44651] [client 20.104.124.39:6143] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPRjJ3RJaXMcw3y9V9EJgAAAAQ"]
[Sun Mar 01 13:41:34.101528 2026] [:error] [pid 38241:tid 38247] [client 20.104.124.39:52856] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPRjvKRPk6YnJBxw_z4PgAAAMM"]
[Sun Mar 01 13:41:35.579075 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:61833] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPRj_KRPk6YnJBxw_z4SwAAAMQ"]
[Sun Mar 01 13:41:38.378831 2026] [:error] [pid 40750:tid 40757] [client 20.104.124.39:5595] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aaPRkgfBuk03yQKDyqvBywAAAcQ"]
[Sun Mar 01 13:41:40.315405 2026] [:error] [pid 44644:tid 44666] [client 20.104.124.39:5807] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aaPRlJ3RJaXMcw3y9V9EUwAAABM"]
[Sun Mar 01 13:41:41.621514 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:5236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aaPRlZ3RJaXMcw3y9V9EYQAAABA"]
[Sun Mar 01 13:41:42.524161 2026] [:error] [pid 38241:tid 38259] [client 20.104.124.39:5358] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sx.php"] [unique_id "aaPRlvKRPk6YnJBxw_z4XQAAAM8"]
[Sun Mar 01 13:41:43.991906 2026] [:error] [pid 42619:tid 42632] [client 20.104.124.39:5706] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaPRlx_zUXcYaZE4AOdmPAAAAUs"]
[Sun Mar 01 13:41:46.273700 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:52851] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaPRmp3RJaXMcw3y9V9EeAAAABA"]
[Sun Mar 01 13:41:47.676753 2026] [:error] [pid 37032:tid 37053] [client 20.104.124.39:61863] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaPRm-u0U4o7eSImsVT6awAAAZM"]
[Sun Mar 01 13:41:48.648922 2026] [:error] [pid 37032:tid 37058] [client 20.104.124.39:5191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaPRnOu0U4o7eSImsVT6bQAAAZg"]
[Sun Mar 01 13:41:50.128539 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:5593] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaPRngxtfZjwlJok9K9M5AAAARc"]
[Sun Mar 01 13:41:51.394784 2026] [:error] [pid 41967:tid 41977] [client 20.104.124.39:5713] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaPRn4O1bqY181I02eFyAwAAAIg"]
[Sun Mar 01 13:41:52.675353 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:5610] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaPRoPKRPk6YnJBxw_z4eQAAAMQ"]
[Sun Mar 01 13:41:53.505207 2026] [:error] [pid 38034:tid 38049] [client 20.104.124.39:61868] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aaPRoQxtfZjwlJok9K9NAgAAAQs"]
[Sun Mar 01 13:41:55.585196 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:5764] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaPRowxtfZjwlJok9K9NGgAAARc"]
[Sun Mar 01 13:41:56.937169 2026] [:error] [pid 38034:tid 38038] [client 20.104.124.39:5810] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaPRpAxtfZjwlJok9K9NJQAAAQI"]
[Sun Mar 01 13:41:59.079343 2026] [:error] [pid 38241:tid 38264] [client 20.104.124.39:5788] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaPRp_KRPk6YnJBxw_z4hwAAANQ"]
[Sun Mar 01 13:42:00.885356 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:5747] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaPRqAxtfZjwlJok9K9NQAAAARA"]
[Sun Mar 01 13:42:03.370827 2026] [:error] [pid 41342:tid 41362] [client 20.104.124.39:6082] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaPRq44iJ6RAS5CatDk9DgAAAhE"]
[Sun Mar 01 13:42:06.912223 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:5739] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaPRrp3RJaXMcw3y9V9ErQAAABA"]
[Sun Mar 01 13:42:09.072261 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:5715] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaPRsfKRPk6YnJBxw_z4mQAAAMI"]
[Sun Mar 01 13:42:10.165006 2026] [:error] [pid 44644:tid 44666] [client 20.104.124.39:61826] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aaPRsp3RJaXMcw3y9V9EuQAAABM"]
[Sun Mar 01 13:42:10.961818 2026] [:error] [pid 38034:tid 38049] [client 20.104.124.39:5355] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaPRsgxtfZjwlJok9K9NcwAAAQs"]
[Sun Mar 01 13:42:12.524434 2026] [:error] [pid 41780:tid 41795] [client 20.104.124.39:5364] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaPRtMONkVoocLIqzy0BbwAAA8w"]
[Sun Mar 01 13:42:15.688269 2026] [:error] [pid 41967:tid 41982] [client 20.104.124.39:6114] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaPRt4O1bqY181I02eFyEwAAAI0"]
[Sun Mar 01 13:42:17.476218 2026] [:error] [pid 38034:tid 38053] [client 20.104.124.39:5627] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaPRuQxtfZjwlJok9K9NjQAAAQ8"]
[Sun Mar 01 13:42:19.411339 2026] [:error] [pid 38034:tid 38038] [client 20.104.124.39:5773] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaPRuwxtfZjwlJok9K9NlAAAAQI"]
[Sun Mar 01 13:42:20.262448 2026] [:error] [pid 44644:tid 44670] [client 20.104.124.39:5767] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaPRvJ3RJaXMcw3y9V9E6AAAABc"]
[Sun Mar 01 13:42:21.458068 2026] [:error] [pid 44644:tid 44651] [client 20.104.124.39:52826] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaPRvZ3RJaXMcw3y9V9E7wAAAAQ"]
[Sun Mar 01 13:42:23.206309 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:61828] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "aaPRvwxtfZjwlJok9K9NqwAAARA"]
[Sun Mar 01 13:42:24.674556 2026] [:error] [pid 38241:tid 38256] [client 20.104.124.39:6105] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaPRwPKRPk6YnJBxw_z42wAAAMw"]
[Sun Mar 01 13:42:26.830583 2026] [:error] [pid 44644:tid 44670] [client 20.104.124.39:5570] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaPRwp3RJaXMcw3y9V9E_QAAABc"]
[Sun Mar 01 13:42:33.213517 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:52833] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaPRyfKRPk6YnJBxw_z5BQAAAMQ"]
[Sun Mar 01 13:42:36.691331 2026] [:error] [pid 37032:tid 37056] [client 20.104.124.39:5806] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaPRzOu0U4o7eSImsVT6yAAAAZY"]
[Sun Mar 01 13:42:41.136406 2026] [:error] [pid 38034:tid 38044] [client 20.104.124.39:5594] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaPR0QxtfZjwlJok9K9OCQAAAQY"]
[Sun Mar 01 13:42:44.550746 2026] [:error] [pid 37032:tid 37038] [client 20.104.124.39:5336] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaPR1Ou0U4o7eSImsVT60AAAAYQ"]
[Sun Mar 01 13:42:46.769801 2026] [:error] [pid 44644:tid 44660] [client 20.104.124.39:5815] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aaPR1p3RJaXMcw3y9V9FdAAAAA0"]
[Sun Mar 01 13:42:48.446581 2026] [:error] [pid 40750:tid 40755] [client 20.104.124.39:5733] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aaPR2AfBuk03yQKDyqvB2wAAAcI"]
[Sun Mar 01 13:42:51.170405 2026] [:error] [pid 44644:tid 44658] [client 20.104.124.39:61850] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aaPR253RJaXMcw3y9V9FhwAAAAs"]
[Sun Mar 01 13:42:52.681579 2026] [:error] [pid 44644:tid 44658] [client 20.104.124.39:61824] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aaPR3J3RJaXMcw3y9V9FkwAAAAs"]
[Sun Mar 01 13:42:54.122968 2026] [:error] [pid 38034:tid 38060] [client 20.104.124.39:5762] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaPR3gxtfZjwlJok9K9OXgAAARY"]
[Sun Mar 01 13:42:56.341735 2026] [:error] [pid 42619:tid 42638] [client 20.104.124.39:61870] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaPR4B_zUXcYaZE4AOdmqAAAAVE"]
[Sun Mar 01 13:42:57.546262 2026] [:error] [pid 41780:tid 41791] [client 20.104.124.39:5213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaPR4cONkVoocLIqzy0BgwAAA8g"]
[Sun Mar 01 13:42:59.115957 2026] [:error] [pid 44644:tid 44660] [client 20.104.124.39:5588] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaPR453RJaXMcw3y9V9FnQAAAA0"]
[Sun Mar 01 13:43:00.836379 2026] [:error] [pid 38241:tid 38258] [client 20.104.124.39:52858] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaPR5PKRPk6YnJBxw_z5ZQAAAM4"]
[Sun Mar 01 13:43:01.368284 2026] [:error] [pid 38034:tid 38060] [client 20.104.124.39:6096] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaPR5QxtfZjwlJok9K9OkAAAARY"]
[Sun Mar 01 13:43:02.676648 2026] [:error] [pid 38241:tid 38259] [client 20.104.124.39:5586] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaPR5vKRPk6YnJBxw_z5bgAAAM8"]
[Sun Mar 01 13:43:04.003049 2026] [:error] [pid 44644:tid 44668] [client 20.104.124.39:5753] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aaPR6J3RJaXMcw3y9V9FowAAABU"]
[Sun Mar 01 13:43:05.163354 2026] [:error] [pid 37032:tid 37058] [client 20.104.124.39:5623] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaPR6eu0U4o7eSImsVT65QAAAZg"]
[Sun Mar 01 13:43:06.903522 2026] [:error] [pid 41342:tid 41356] [client 20.104.124.39:61879] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaPR6o4iJ6RAS5CatDk9IAAAAgs"]
[Sun Mar 01 13:43:07.423640 2026] [:error] [pid 37032:tid 37048] [client 20.104.124.39:5771] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaPR6-u0U4o7eSImsVT66wAAAY4"]
[Sun Mar 01 13:43:08.835970 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:5573] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaPR7PKRPk6YnJBxw_z5gwAAAMQ"]
[Sun Mar 01 13:43:10.125708 2026] [:error] [pid 37032:tid 37058] [client 20.104.124.39:5613] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaPR7uu0U4o7eSImsVT6_gAAAZg"]
[Sun Mar 01 13:43:11.188497 2026] [:error] [pid 38241:tid 38259] [client 20.104.124.39:6083] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaPR7_KRPk6YnJBxw_z5hQAAAM8"]
[Sun Mar 01 13:43:12.452648 2026] [:error] [pid 44644:tid 44651] [client 20.104.124.39:52857] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaPR8J3RJaXMcw3y9V9FwQAAAAQ"]
[Sun Mar 01 13:43:14.024338 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:5789] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaPR8gxtfZjwlJok9K9O7gAAARA"]
[Sun Mar 01 13:43:15.863094 2026] [:error] [pid 41342:tid 41359] [client 20.104.124.39:52860] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaPR844iJ6RAS5CatDk9IgAAAg4"]
[Sun Mar 01 13:43:17.718726 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:5793] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaPR9QxtfZjwlJok9K9PEAAAARc"]
[Sun Mar 01 13:43:19.812852 2026] [:error] [pid 37032:tid 37037] [client 20.104.124.39:5235] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaPR9-u0U4o7eSImsVT7KQAAAYM"]
[Sun Mar 01 13:43:21.678709 2026] [:error] [pid 44644:tid 44670] [client 20.104.124.39:5624] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaPR-Z3RJaXMcw3y9V9F9gAAABc"]
[Sun Mar 01 13:43:23.921723 2026] [:error] [pid 38034:tid 38037] [client 20.104.124.39:5230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaPR-wxtfZjwlJok9K9PWgAAAQE"]
[Sun Mar 01 13:43:24.523149 2026] [:error] [pid 41780:tid 41792] [client 20.104.124.39:61842] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaPR_MONkVoocLIqzy0BlgAAA8k"]
[Sun Mar 01 13:43:25.637811 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:5625] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaPR_QxtfZjwlJok9K9PcAAAARA"]
[Sun Mar 01 13:43:27.422149 2026] [:error] [pid 41967:tid 41971] [client 20.104.124.39:6098] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaPR_4O1bqY181I02eFyawAAAII"]
[Sun Mar 01 13:43:29.134754 2026] [:error] [pid 38241:tid 38267] [client 20.104.124.39:52820] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaPSAfKRPk6YnJBxw_z5vgAAANc"]
[Sun Mar 01 13:43:30.990783 2026] [:error] [pid 38241:tid 38259] [client 20.104.124.39:5596] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaPSAvKRPk6YnJBxw_z5xgAAAM8"]
[Sun Mar 01 13:43:33.053557 2026] [:error] [pid 37032:tid 37045] [client 20.104.124.39:5568] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaPSBeu0U4o7eSImsVT7QgAAAYs"]
[Sun Mar 01 13:43:35.515055 2026] [:error] [pid 37032:tid 37049] [client 20.104.124.39:52810] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaPSB-u0U4o7eSImsVT7UAAAAY8"]
[Sun Mar 01 13:43:39.792608 2026] [:error] [pid 42619:tid 42626] [client 20.104.124.39:61854] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaPSCx_zUXcYaZE4AOdmyQAAAUU"]
[Sun Mar 01 13:43:45.253360 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:52842] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaPSEZ3RJaXMcw3y9V9GYgAAABA"]
[Sun Mar 01 13:44:27.772251 2026] [:error] [pid 38241:tid 38261] [client 20.104.124.39:5820] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaPSO_KRPk6YnJBxw_z6tgAAANE"]
[Sun Mar 01 13:44:30.796325 2026] [:error] [pid 38034:tid 38055] [client 20.104.124.39:61861] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaPSPgxtfZjwlJok9K9Q7gAAARE"]
[Sun Mar 01 13:44:39.093455 2026] [:error] [pid 37032:tid 37049] [client 20.104.124.39:5356] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aaPSR-u0U4o7eSImsVT7zAAAAY8"]
[Sun Mar 01 13:44:40.228949 2026] [:error] [pid 38034:tid 38049] [client 20.104.124.39:61846] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aaPSSAxtfZjwlJok9K9RFwAAAQs"]
[Sun Mar 01 13:44:41.066904 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:5582] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aaPSSQxtfZjwlJok9K9RGwAAARc"]
[Sun Mar 01 13:44:41.932645 2026] [:error] [pid 38034:tid 38049] [client 20.104.124.39:5585] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ha.php"] [unique_id "aaPSSQxtfZjwlJok9K9RIAAAAQs"]
[Sun Mar 01 13:44:43.730483 2026] [:error] [pid 44644:tid 44658] [client 20.104.124.39:52837] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaPSS53RJaXMcw3y9V9G6QAAAAs"]
[Sun Mar 01 13:44:46.102838 2026] [:error] [pid 41967:tid 41975] [client 20.104.124.39:5580] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaPSToO1bqY181I02eFysQAAAIY"]
[Sun Mar 01 13:44:47.385885 2026] [:error] [pid 42619:tid 42642] [client 20.104.124.39:5813] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaPSTx_zUXcYaZE4AOdnNwAAAVU"]
[Sun Mar 01 13:44:48.260405 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:52806] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaPSUPKRPk6YnJBxw_z6_wAAAMI"]
[Sun Mar 01 13:44:50.151461 2026] [:error] [pid 42619:tid 42622] [client 20.104.124.39:61852] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aaPSUh_zUXcYaZE4AOdnRgAAAUE"]
[Sun Mar 01 13:44:51.307169 2026] [:error] [pid 38034:tid 38043] [client 20.104.124.39:5333] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aaPSUwxtfZjwlJok9K9RTQAAAQU"]
[Sun Mar 01 13:44:52.409901 2026] [:error] [pid 38034:tid 38043] [client 20.104.124.39:5760] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aaPSVAxtfZjwlJok9K9RUgAAAQU"]
[Sun Mar 01 13:44:53.115161 2026] [:error] [pid 38241:tid 38267] [client 20.104.124.39:5611] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we2.php"] [unique_id "aaPSVfKRPk6YnJBxw_z7FgAAANc"]
[Sun Mar 01 13:44:54.423177 2026] [:error] [pid 38241:tid 38250] [client 20.104.124.39:5797] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaPSVvKRPk6YnJBxw_z7GQAAAMY"]
[Sun Mar 01 13:44:55.173180 2026] [:error] [pid 44644:tid 44660] [client 20.104.124.39:6085] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaPSV53RJaXMcw3y9V9HAQAAAA0"]
[Sun Mar 01 13:44:56.662182 2026] [:error] [pid 38034:tid 38044] [client 20.104.124.39:5619] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaPSWAxtfZjwlJok9K9RYQAAAQY"]
[Sun Mar 01 13:44:58.115226 2026] [:error] [pid 38034:tid 38044] [client 20.104.124.39:52819] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaPSWgxtfZjwlJok9K9RZQAAAQY"]
[Sun Mar 01 13:44:59.732804 2026] [:error] [pid 38034:tid 38037] [client 20.104.124.39:5602] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaPSWwxtfZjwlJok9K9RcwAAAQE"]
[Sun Mar 01 13:45:00.851347 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:5246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaPSXPKRPk6YnJBxw_z7MwAAAMI"]
[Sun Mar 01 13:45:02.238812 2026] [:error] [pid 37032:tid 37038] [client 20.104.124.39:5606] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaPSXuu0U4o7eSImsVT76gAAAYQ"]
[Sun Mar 01 13:45:04.470679 2026] [:error] [pid 44644:tid 44666] [client 20.104.124.39:61831] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaPSYJ3RJaXMcw3y9V9HGQAAABM"]
[Sun Mar 01 13:45:05.447917 2026] [:error] [pid 40750:tid 40767] [client 20.104.124.39:5795] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaPSYQfBuk03yQKDyqvB-wAAAc4"]
[Sun Mar 01 13:45:06.377722 2026] [:error] [pid 38241:tid 38247] [client 20.104.124.39:61836] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaPSYvKRPk6YnJBxw_z7QAAAAMM"]
[Sun Mar 01 13:45:07.867836 2026] [:error] [pid 38034:tid 38044] [client 20.104.124.39:61873] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaPSYwxtfZjwlJok9K9RtwAAAQY"]
[Sun Mar 01 13:45:09.182277 2026] [:error] [pid 38034:tid 38037] [client 20.104.124.39:5238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaPSZQxtfZjwlJok9K9R0QAAAQE"]
[Sun Mar 01 13:45:11.425645 2026] [:error] [pid 44644:tid 44658] [client 20.104.124.39:5819] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaPSZ53RJaXMcw3y9V9HXAAAAAs"]
[Sun Mar 01 13:45:12.727715 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:61881] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaPSaPKRPk6YnJBxw_z7WwAAAMI"]
[Sun Mar 01 13:45:15.793900 2026] [:error] [pid 37032:tid 37038] [client 20.104.124.39:61827] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaPSa-u0U4o7eSImsVT8LAAAAYQ"]
[Sun Mar 01 13:45:16.644502 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:5745] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ar.php"] [unique_id "aaPSbAxtfZjwlJok9K9SFgAAARc"]
[Sun Mar 01 13:45:17.851835 2026] [:error] [pid 37032:tid 37046] [client 20.104.124.39:5722] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaPSbeu0U4o7eSImsVT8SAAAAYw"]
[Sun Mar 01 13:45:18.786705 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:61845] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaPSbvKRPk6YnJBxw_z7bgAAAMQ"]
[Sun Mar 01 13:45:19.991522 2026] [:error] [pid 37032:tid 37046] [client 20.104.124.39:5709] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaPSb-u0U4o7eSImsVT8UwAAAYw"]
[Sun Mar 01 13:45:20.835671 2026] [:error] [pid 44644:tid 44658] [client 20.104.124.39:5802] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaPScJ3RJaXMcw3y9V9HggAAAAs"]
[Sun Mar 01 13:45:21.880443 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:5188] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaPScQxtfZjwlJok9K9STAAAARc"]
[Sun Mar 01 13:45:23.217878 2026] [:error] [pid 38034:tid 38049] [client 20.104.124.39:5604] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaPScwxtfZjwlJok9K9SUgAAAQs"]
[Sun Mar 01 13:45:24.328823 2026] [:error] [pid 38034:tid 38060] [client 20.104.124.39:52838] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaPSdAxtfZjwlJok9K9SbQAAARY"]
[Sun Mar 01 13:45:26.408254 2026] [:error] [pid 38241:tid 38264] [client 20.104.124.39:5234] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xx.php"] [unique_id "aaPSdvKRPk6YnJBxw_z7mAAAANQ"]
[Sun Mar 01 13:45:28.002052 2026] [:error] [pid 41967:tid 41984] [client 20.104.124.39:5822] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaPSeIO1bqY181I02eFy9gAAAI8"]
[Sun Mar 01 13:45:29.520481 2026] [:error] [pid 44644:tid 44660] [client 20.104.124.39:5809] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaPSeZ3RJaXMcw3y9V9HxgAAAA0"]
[Sun Mar 01 13:45:30.660082 2026] [:error] [pid 38034:tid 38060] [client 20.104.124.39:5801] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaPSegxtfZjwlJok9K9SqwAAARY"]
[Sun Mar 01 13:45:31.937515 2026] [:error] [pid 42619:tid 42621] [client 20.104.124.39:5605] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "aaPSex_zUXcYaZE4AOdnnQAAAUA"]
[Sun Mar 01 13:45:33.375701 2026] [:error] [pid 38241:tid 38246] [client 20.104.124.39:61877] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaPSffKRPk6YnJBxw_z7swAAAMI"]
[Sun Mar 01 13:45:34.130247 2026] [:error] [pid 38034:tid 38043] [client 20.104.124.39:5598] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaPSfgxtfZjwlJok9K9SxQAAAQU"]
[Sun Mar 01 13:45:36.120884 2026] [:error] [pid 44644:tid 44660] [client 20.104.124.39:61860] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaPSgJ3RJaXMcw3y9V9H4gAAAA0"]
[Sun Mar 01 13:45:37.383242 2026] [:error] [pid 40750:tid 40770] [client 20.104.124.39:61874] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "aaPSgQfBuk03yQKDyqvCGQAAAdE"]
[Sun Mar 01 13:45:46.230772 2026] [:error] [pid 37032:tid 37055] [client 20.104.124.39:52849] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aaPSiuu0U4o7eSImsVT82QAAAZU"]
[Sun Mar 01 13:45:47.442484 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:5785] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aaPSiwxtfZjwlJok9K9TOQAAARA"]
[Sun Mar 01 13:45:48.776543 2026] [:error] [pid 38034:tid 38049] [client 20.104.124.39:5597] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aaPSjAxtfZjwlJok9K9TPwAAAQs"]
[Sun Mar 01 13:45:50.240041 2026] [:error] [pid 37032:tid 37058] [client 20.104.124.39:6108] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class9.php"] [unique_id "aaPSjuu0U4o7eSImsVT8-QAAAZg"]
[Sun Mar 01 13:45:51.423077 2026] [:error] [pid 44644:tid 44660] [client 20.104.124.39:5763] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/la.php"] [unique_id "aaPSj53RJaXMcw3y9V9IFgAAAA0"]
[Sun Mar 01 13:45:53.896315 2026] [:error] [pid 38034:tid 38044] [client 20.104.124.39:5786] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/la.php"] [unique_id "aaPSkQxtfZjwlJok9K9TUgAAAQY"]
[Sun Mar 01 13:45:55.406405 2026] [:error] [pid 41780:tid 41786] [client 20.104.124.39:61887] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/la.php"] [unique_id "aaPSk8ONkVoocLIqzy0B8wAAA8M"]
[Sun Mar 01 13:45:56.980469 2026] [:error] [pid 38241:tid 38247] [client 20.104.124.39:52822] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/la.php"] [unique_id "aaPSlPKRPk6YnJBxw_z8BgAAAMM"]
[Sun Mar 01 13:45:58.827879 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:52808] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aaPSlp3RJaXMcw3y9V9IKQAAABA"]
[Sun Mar 01 13:46:00.535265 2026] [:error] [pid 38241:tid 38262] [client 20.104.124.39:5603] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aaPSmPKRPk6YnJBxw_z8GQAAANI"]
[Sun Mar 01 13:46:02.021463 2026] [:error] [pid 42619:tid 42633] [client 20.104.124.39:52848] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aaPSmh_zUXcYaZE4AOdn0wAAAUw"]
[Sun Mar 01 13:46:03.613179 2026] [:error] [pid 38034:tid 38037] [client 20.104.124.39:5706] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "aaPSmwxtfZjwlJok9K9TZAAAAQE"]
[Sun Mar 01 13:46:04.474503 2026] [:error] [pid 38241:tid 38256] [client 20.104.124.39:5805] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaPSnPKRPk6YnJBxw_z8NwAAAMw"]
[Sun Mar 01 13:46:05.494977 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:5765] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaPSnQxtfZjwlJok9K9TawAAARc"]
[Sun Mar 01 13:46:07.611856 2026] [:error] [pid 44644:tid 44658] [client 20.104.124.39:5362] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaPSn53RJaXMcw3y9V9ITQAAAAs"]
[Sun Mar 01 13:46:08.755358 2026] [:error] [pid 42619:tid 42638] [client 20.104.124.39:5818] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "aaPSoB_zUXcYaZE4AOdn3gAAAVE"]
[Sun Mar 01 13:46:09.991962 2026] [:error] [pid 38241:tid 38261] [client 20.104.124.39:5572] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaPSofKRPk6YnJBxw_z8XQAAANE"]
[Sun Mar 01 13:46:11.269051 2026] [:error] [pid 38034:tid 38060] [client 20.104.124.39:5224] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaPSowxtfZjwlJok9K9TggAAARY"]
[Sun Mar 01 13:46:12.616483 2026] [:error] [pid 38241:tid 38250] [client 20.104.124.39:5740] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaPSpPKRPk6YnJBxw_z8hQAAAMY"]
[Sun Mar 01 13:46:14.567970 2026] [:error] [pid 42619:tid 42642] [client 20.104.124.39:61837] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaPSph_zUXcYaZE4AOdn8QAAAVU"]
[Sun Mar 01 13:46:16.791575 2026] [:error] [pid 38034:tid 38057] [client 20.104.124.39:5708] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaPSqAxtfZjwlJok9K9TpwAAARM"]
[Sun Mar 01 13:46:17.947176 2026] [:error] [pid 38241:tid 38248] [client 20.104.124.39:5576] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaPSqfKRPk6YnJBxw_z8pwAAAMQ"]
[Sun Mar 01 13:46:19.024521 2026] [:error] [pid 42619:tid 42643] [client 20.104.124.39:61876] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaPSqx_zUXcYaZE4AOdn9wAAAVY"]
[Sun Mar 01 13:46:19.905547 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:6106] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/403.php"] [unique_id "aaPSq53RJaXMcw3y9V9IggAAABA"]
[Sun Mar 01 13:46:22.721367 2026] [:error] [pid 38034:tid 38054] [client 20.104.124.39:61864] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaPSrgxtfZjwlJok9K9TxQAAARA"]
[Sun Mar 01 13:46:23.338136 2026] [:error] [pid 40750:tid 40772] [client 20.104.124.39:5610] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaPSrwfBuk03yQKDyqvCKwAAAdM"]
[Sun Mar 01 13:46:24.288116 2026] [:error] [pid 37032:tid 37044] [client 20.104.124.39:52846] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaPSsOu0U4o7eSImsVT9MwAAAYo"]
[Sun Mar 01 13:46:25.820503 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:52862] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaPSsQxtfZjwlJok9K9T1QAAARc"]
[Sun Mar 01 13:46:26.737310 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:52835] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaPSsgxtfZjwlJok9K9T4wAAARc"]
[Sun Mar 01 13:46:27.399125 2026] [:error] [pid 38034:tid 38060] [client 20.104.124.39:5700] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaPSswxtfZjwlJok9K9T7AAAARY"]
[Sun Mar 01 13:46:28.132945 2026] [:error] [pid 41780:tid 41803] [client 20.104.124.39:61833] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaPStMONkVoocLIqzy0CMwAAA9Q"]
[Sun Mar 01 13:46:29.055350 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:5808] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaPStZ3RJaXMcw3y9V9IjwAAABA"]
[Sun Mar 01 13:46:29.560588 2026] [:error] [pid 41342:tid 41366] [client 20.104.124.39:5626] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaPStY4iJ6RAS5CatDk9oAAAAhU"]
[Sun Mar 01 13:46:30.934822 2026] [:error] [pid 42619:tid 42625] [client 20.104.124.39:61839] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaPSth_zUXcYaZE4AOdoBQAAAUQ"]
[Sun Mar 01 13:46:32.426616 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:61853] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaPSuJ3RJaXMcw3y9V9InQAAABA"]
[Sun Mar 01 13:46:33.294892 2026] [:error] [pid 42619:tid 42631] [client 20.104.124.39:5578] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaPSuR_zUXcYaZE4AOdoCQAAAUo"]
[Sun Mar 01 13:46:35.508068 2026] [:error] [pid 38034:tid 38061] [client 20.104.124.39:61848] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaPSuwxtfZjwlJok9K9UGwAAARc"]
[Sun Mar 01 13:46:36.295004 2026] [:error] [pid 41780:tid 41796] [client 20.104.124.39:52828] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaPSvMONkVoocLIqzy0CUAAAA80"]
[Sun Mar 01 13:46:36.975383 2026] [:error] [pid 44644:tid 44663] [client 20.104.124.39:5617] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaPSvJ3RJaXMcw3y9V9IrAAAABA"]
[Sun Mar 01 13:46:37.749546 2026] [:error] [pid 38241:tid 38250] [client 20.104.124.39:5769] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pop.php"] [unique_id "aaPSvfKRPk6YnJBxw_z80gAAAMY"]
[Sun Mar 01 13:46:38.776217 2026] [:error] [pid 37032:tid 37058] [client 20.104.124.39:5764] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaPSvuu0U4o7eSImsVT9UAAAAZg"]
[Sun Mar 01 13:46:40.882455 2026] [:error] [pid 44644:tid 44660] [client 20.104.124.39:5622] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaPSwJ3RJaXMcw3y9V9IwAAAAA0"]
[Sun Mar 01 13:46:43.360027 2026] [:error] [pid 37032:tid 37053] [client 20.104.124.39:5816] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaPSw-u0U4o7eSImsVT9WQAAAZM"]
[Sun Mar 01 13:46:45.139454 2026] [:error] [pid 44644:tid 44666] [client 20.104.124.39:52821] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaPSxZ3RJaXMcw3y9V9I0QAAABM"]
[Sun Mar 01 14:10:17.221865 2026] [:error] [pid 44644:tid 44651] [client 121.229.185.160:45846] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaPYSZ3RJaXMcw3y9V9c2wAAAAQ"]
[Sun Mar 01 14:17:43.954131 2026] [:error] [pid 38034:tid 38060] [client 185.193.157.189:48624] [client 185.193.157.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.189, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaPaBwxtfZjwlJok9K90DQAAARY"]
[Sun Mar 01 14:17:46.359084 2026] [:error] [pid 41342:tid 41363] [client 185.193.157.189:52006] [client 185.193.157.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaPaCo4iJ6RAS5CatDlCXgAAAhI"]
[Sun Mar 01 14:17:46.958858 2026] [:error] [pid 44644:tid 44657] [client 185.193.157.189:52012] [client 185.193.157.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaPaCp3RJaXMcw3y9V9ktAAAAAo"]
[Sun Mar 01 14:17:47.555915 2026] [:error] [pid 37032:tid 37044] [client 185.193.157.189:52022] [client 185.193.157.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaPaC-u0U4o7eSImsVQOYQAAAYo"]
[Sun Mar 01 14:17:48.160075 2026] [:error] [pid 38034:tid 38053] [client 185.193.157.189:52024] [client 185.193.157.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaPaDAxtfZjwlJok9K90IAAAAQ8"]
[Sun Mar 01 14:17:48.757980 2026] [:error] [pid 42619:tid 42626] [client 185.193.157.189:52036] [client 185.193.157.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaPaDB_zUXcYaZE4AOdy9QAAAUU"]
[Sun Mar 01 14:17:49.570307 2026] [:error] [pid 44644:tid 44666] [client 185.193.157.189:52048] [client 185.193.157.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaPaDZ3RJaXMcw3y9V9kvwAAABM"]
[Sun Mar 01 14:29:33.146736 2026] [:error] [pid 38241:tid 38251] [client 62.60.131.218:52846] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaPczfKRPk6YnJBxw_wbUwAAAMc"]
[Sun Mar 01 14:58:48.889654 2026] [:error] [pid 38034:tid 38036] [client 43.156.204.134:50114] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaPjqAxtfZjwlJok9K-cJgAAAQA"]
[Sun Mar 01 15:55:53.438846 2026] [:error] [pid 38241:tid 38264] [client 134.209.146.44:63293] [client 134.209.146.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.146.44, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaPxCfKRPk6YnJBxw_xahwAAANQ"]
[Sun Mar 01 15:55:54.301337 2026] [:error] [pid 44644:tid 44667] [client 134.209.146.44:63314] [client 134.209.146.44] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.146.44, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaPxCp3RJaXMcw3y9V-yNwAAABQ"]
[Sun Mar 01 17:38:40.169693 2026] [:error] [pid 40750:tid 40755] [client 43.167.245.18:38056] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaQJIAfBuk03yQKDyqs6PQAAAcI"]
[Sun Mar 01 19:55:19.716516 2026] [ssl:error] [pid 38241:tid 38258] [client 107.173.171.201:59820] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourcause.com/
[Sun Mar 01 20:05:54.879962 2026] [:error] [pid 40750:tid 40771] [client 20.63.80.2:2250] [client 20.63.80.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaQrogfBuk03yQKDyqvwOwAAAdI"]
[Sun Mar 01 20:05:56.622780 2026] [proxy_fcgi:error] [pid 38241:tid 38245] [client 20.63.80.2:2316] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 20:05:57.281548 2026] [:error] [pid 38241:tid 38266] [client 20.63.80.2:2316] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQrpfKRPk6YnJBxw_zx0QAAANY"]
[Sun Mar 01 20:05:58.141343 2026] [:error] [pid 37032:tid 37050] [client 20.63.80.2:2361] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQrpuu0U4o7eSImsVR1-wAAAZA"]
[Sun Mar 01 20:05:58.965663 2026] [:error] [pid 40750:tid 40769] [client 20.63.80.2:2362] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQrpgfBuk03yQKDyqvwRwAAAdA"]
[Sun Mar 01 20:05:59.790265 2026] [:error] [pid 33822:tid 33824] [client 20.63.80.2:2253] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQrp26W3ygu1YVssuYOJQAAAoA"]
[Sun Mar 01 20:10:07.168781 2026] [:error] [pid 40750:tid 40772] [client 52.138.3.9:20478] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/jga.php"] [unique_id "aaQsnwfBuk03yQKDyqv1PQAAAdM"]
[Sun Mar 01 20:10:08.015154 2026] [:error] [pid 33822:tid 33833] [client 52.138.3.9:20440] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/widget-cache.php"] [unique_id "aaQsoG6W3ygu1YVssuYPDAAAAok"]
[Sun Mar 01 20:10:08.438404 2026] [:error] [pid 7133:tid 7148] [client 52.138.3.9:20427] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-json-ajax.php"] [unique_id "aaQsoPCtubh8pR64qB8tPwAAAE0"]
[Sun Mar 01 20:10:09.761557 2026] [:error] [pid 33822:tid 33834] [client 52.138.3.9:20434] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaQsoW6W3ygu1YVssuYPEQAAAoo"]
[Sun Mar 01 20:10:10.231989 2026] [:error] [pid 7133:tid 7138] [client 52.138.3.9:20432] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaQsovCtubh8pR64qB8tQAAAAEM"]
[Sun Mar 01 20:10:10.769864 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:20368] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaQsohRjCrA8qWBjgG8OIgAAAkc"]
[Sun Mar 01 20:10:11.285184 2026] [:error] [pid 7165:tid 7167] [client 52.138.3.9:20372] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaQsoxRjCrA8qWBjgG8OJQAAAkA"]
[Sun Mar 01 20:10:11.820709 2026] [:error] [pid 38241:tid 38248] [client 52.138.3.9:20379] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaQso_KRPk6YnJBxw_zzywAAAMQ"]
[Sun Mar 01 20:10:12.364425 2026] [:error] [pid 38241:tid 38251] [client 52.138.3.9:20358] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaQspPKRPk6YnJBxw_zzzgAAAMc"]
[Sun Mar 01 20:10:12.827763 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:20461] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaQspBRjCrA8qWBjgG8OKAAAAk0"]
[Sun Mar 01 20:10:13.330550 2026] [:error] [pid 7165:tid 7189] [client 52.138.3.9:20419] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaQspRRjCrA8qWBjgG8OKwAAAlY"]
[Sun Mar 01 20:10:13.795487 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:20463] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/8.php"] [unique_id "aaQspRRjCrA8qWBjgG8OLAAAAkc"]
[Sun Mar 01 20:10:14.248019 2026] [:error] [pid 38034:tid 38052] [client 52.138.3.9:20361] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/8.php"] [unique_id "aaQspgxtfZjwlJok9K8KOQAAAQ4"]
[Sun Mar 01 20:10:14.673346 2026] [:error] [pid 7133:tid 7154] [client 52.138.3.9:20477] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/8.php"] [unique_id "aaQspvCtubh8pR64qB8tQQAAAFM"]
[Sun Mar 01 20:10:15.089842 2026] [:error] [pid 40750:tid 40776] [client 52.138.3.9:20357] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/8.php"] [unique_id "aaQspwfBuk03yQKDyqv1SAAAAdc"]
[Sun Mar 01 20:10:15.549814 2026] [:error] [pid 40750:tid 40760] [client 52.138.3.9:20364] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/sh.php"] [unique_id "aaQspwfBuk03yQKDyqv1SQAAAcc"]
[Sun Mar 01 20:10:16.121239 2026] [:error] [pid 38241:tid 38253] [client 52.138.3.9:20467] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/sh.php"] [unique_id "aaQsqPKRPk6YnJBxw_zz0wAAAMk"]
[Sun Mar 01 20:10:16.547345 2026] [:error] [pid 33822:tid 33826] [client 52.138.3.9:20388] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/sh.php"] [unique_id "aaQsqG6W3ygu1YVssuYPFwAAAoI"]
[Sun Mar 01 20:10:16.960210 2026] [:error] [pid 41780:tid 41785] [client 52.138.3.9:20465] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/sh.php"] [unique_id "aaQsqMONkVoocLIqzy0nqQAAA8I"]
[Sun Mar 01 20:10:17.439643 2026] [:error] [pid 40750:tid 40771] [client 52.138.3.9:20375] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/start.php"] [unique_id "aaQsqQfBuk03yQKDyqv1TwAAAdI"]
[Sun Mar 01 20:10:17.921958 2026] [:error] [pid 33822:tid 33831] [client 52.138.3.9:20464] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/start.php"] [unique_id "aaQsqW6W3ygu1YVssuYPGwAAAoc"]
[Sun Mar 01 20:10:18.411098 2026] [:error] [pid 40750:tid 40764] [client 52.138.3.9:20352] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/start.php"] [unique_id "aaQsqgfBuk03yQKDyqv1VQAAAcs"]
[Sun Mar 01 20:10:18.839140 2026] [:error] [pid 33822:tid 33846] [client 52.138.3.9:20479] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/start.php"] [unique_id "aaQsqm6W3ygu1YVssuYPHQAAApY"]
[Sun Mar 01 20:10:19.412229 2026] [:error] [pid 40750:tid 40770] [client 52.138.3.9:20437] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/incl.php"] [unique_id "aaQsqwfBuk03yQKDyqv1WQAAAdE"]
[Sun Mar 01 20:10:19.864279 2026] [:error] [pid 40750:tid 40762] [client 52.138.3.9:20359] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers.php"] [unique_id "aaQsqwfBuk03yQKDyqv1WgAAAck"]
[Sun Mar 01 20:10:20.293273 2026] [:error] [pid 40750:tid 40755] [client 52.138.3.9:20397] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaQsrAfBuk03yQKDyqv1XQAAAcI"]
[Sun Mar 01 20:10:20.710589 2026] [:error] [pid 40750:tid 40764] [client 52.138.3.9:20450] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaQsrAfBuk03yQKDyqv1YQAAAcs"]
[Sun Mar 01 20:10:21.229189 2026] [:error] [pid 40750:tid 40768] [client 52.138.3.9:20441] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaQsrQfBuk03yQKDyqv1ZQAAAc8"]
[Sun Mar 01 20:10:21.662593 2026] [:error] [pid 40750:tid 40761] [client 52.138.3.9:20431] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/image.php"] [unique_id "aaQsrQfBuk03yQKDyqv1ZwAAAcg"]
[Sun Mar 01 20:10:22.128149 2026] [:error] [pid 40750:tid 40771] [client 52.138.3.9:20371] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/image.php"] [unique_id "aaQsrgfBuk03yQKDyqv1aQAAAdI"]
[Sun Mar 01 20:10:22.552085 2026] [:error] [pid 40750:tid 40769] [client 52.138.3.9:20363] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/image.php"] [unique_id "aaQsrgfBuk03yQKDyqv1agAAAdA"]
[Sun Mar 01 20:10:23.073237 2026] [:error] [pid 7165:tid 7167] [client 52.138.3.9:20353] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/image.php"] [unique_id "aaQsrxRjCrA8qWBjgG8OOQAAAkA"]
[Sun Mar 01 20:10:23.601784 2026] [:error] [pid 37032:tid 37048] [client 52.138.3.9:20444] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/image2.php"] [unique_id "aaQsr-u0U4o7eSImsVR2mQAAAY4"]
[Sun Mar 01 20:10:24.033654 2026] [:error] [pid 7133:tid 7146] [client 52.138.3.9:20466] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/image2.php"] [unique_id "aaQssPCtubh8pR64qB8tRgAAAEs"]
[Sun Mar 01 20:10:24.462574 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:20426] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/image2.php"] [unique_id "aaQssBRjCrA8qWBjgG8OOwAAAkw"]
[Sun Mar 01 20:10:25.243896 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:20385] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/image2.php"] [unique_id "aaQssRRjCrA8qWBjgG8OPgAAAkY"]
[Sun Mar 01 20:10:25.765667 2026] [:error] [pid 38241:tid 38251] [client 52.138.3.9:20301] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaQssfKRPk6YnJBxw_zz1gAAAMc"]
[Sun Mar 01 20:10:26.233612 2026] [:error] [pid 38241:tid 38254] [client 52.138.3.9:20455] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaQssvKRPk6YnJBxw_zz2AAAAMo"]
[Sun Mar 01 20:10:26.875946 2026] [:error] [pid 44644:tid 44666] [client 52.138.3.9:20369] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaQssp3RJaXMcw3y9V_W6gAAABM"]
[Sun Mar 01 20:10:27.672677 2026] [:error] [pid 40750:tid 40761] [client 52.138.3.9:20475] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaQsswfBuk03yQKDyqv1cwAAAcg"]
[Sun Mar 01 20:10:28.124488 2026] [:error] [pid 38241:tid 38252] [client 52.138.3.9:20314] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaQstPKRPk6YnJBxw_zz2wAAAMg"]
[Sun Mar 01 20:10:28.754543 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:20469] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaQstBRjCrA8qWBjgG8ORwAAAk0"]
[Sun Mar 01 20:10:29.236728 2026] [:error] [pid 7133:tid 7139] [client 52.138.3.9:20474] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaQstfCtubh8pR64qB8tSQAAAEQ"]
[Sun Mar 01 20:10:29.721074 2026] [:error] [pid 38241:tid 38267] [client 52.138.3.9:20370] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaQstfKRPk6YnJBxw_zz3gAAANc"]
[Sun Mar 01 20:10:30.138135 2026] [:error] [pid 7165:tid 7181] [client 52.138.3.9:20376] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaQsthRjCrA8qWBjgG8OSgAAAk4"]
[Sun Mar 01 20:10:30.774493 2026] [:error] [pid 37032:tid 37038] [client 52.138.3.9:20367] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaQstuu0U4o7eSImsVR2ogAAAYQ"]
[Sun Mar 01 20:10:31.188688 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:20383] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaQstxRjCrA8qWBjgG8OUAAAAk8"]
[Sun Mar 01 20:10:31.622734 2026] [:error] [pid 44644:tid 44667] [client 52.138.3.9:20458] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaQst53RJaXMcw3y9V_W7QAAABQ"]
[Sun Mar 01 20:10:32.085234 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:20460] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-duotone.php"] [unique_id "aaQsuBRjCrA8qWBjgG8OUwAAAlQ"]
[Sun Mar 01 20:10:32.537132 2026] [:error] [pid 38241:tid 38268] [client 52.138.3.9:20456] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaQsuPKRPk6YnJBxw_zz3wAAANg"]
[Sun Mar 01 20:10:33.036958 2026] [:error] [pid 38241:tid 38247] [client 52.138.3.9:20428] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaQsufKRPk6YnJBxw_zz4AAAAMM"]
[Sun Mar 01 20:10:33.714236 2026] [:error] [pid 37032:tid 37035] [client 52.138.3.9:20362] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaQsueu0U4o7eSImsVR2pgAAAYE"]
[Sun Mar 01 20:10:34.481366 2026] [:error] [pid 38034:tid 38054] [client 52.138.3.9:20297] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaQsugxtfZjwlJok9K8KVAAAARA"]
[Sun Mar 01 20:10:35.038784 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:20365] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/submitticket.php"] [unique_id "aaQsuxRjCrA8qWBjgG8OXAAAAkY"]
[Sun Mar 01 20:10:35.545468 2026] [:error] [pid 7165:tid 7168] [client 52.138.3.9:20391] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/submitticket.php"] [unique_id "aaQsuxRjCrA8qWBjgG8OXwAAAkE"]
[Sun Mar 01 20:10:35.958740 2026] [:error] [pid 7165:tid 7191] [client 52.138.3.9:20355] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/submitticket.php"] [unique_id "aaQsuxRjCrA8qWBjgG8OYAAAAlg"]
[Sun Mar 01 20:10:36.390081 2026] [:error] [pid 40750:tid 40755] [client 52.138.3.9:20374] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/submitticket.php"] [unique_id "aaQsvAfBuk03yQKDyqv1jAAAAcI"]
[Sun Mar 01 20:10:36.813526 2026] [:error] [pid 40750:tid 40763] [client 52.138.3.9:20439] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/add_evento.php"] [unique_id "aaQsvAfBuk03yQKDyqv1jQAAAco"]
[Sun Mar 01 20:10:37.313847 2026] [:error] [pid 40750:tid 40772] [client 52.138.3.9:20412] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/add_evento.php"] [unique_id "aaQsvQfBuk03yQKDyqv1jwAAAdM"]
[Sun Mar 01 20:10:37.802000 2026] [:error] [pid 41780:tid 41803] [client 52.138.3.9:20291] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/add_evento.php"] [unique_id "aaQsvcONkVoocLIqzy0nqwAAA9Q"]
[Sun Mar 01 20:10:38.258152 2026] [:error] [pid 7133:tid 7145] [client 52.138.3.9:20381] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/add_evento.php"] [unique_id "aaQsvvCtubh8pR64qB8tUgAAAEo"]
[Sun Mar 01 20:10:38.803860 2026] [:error] [pid 7165:tid 7171] [client 52.138.3.9:20406] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaQsvhRjCrA8qWBjgG8OZgAAAkQ"]
[Sun Mar 01 20:10:39.328651 2026] [:error] [pid 7165:tid 7167] [client 52.138.3.9:20476] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaQsvxRjCrA8qWBjgG8OZwAAAkA"]
[Sun Mar 01 20:10:39.775991 2026] [:error] [pid 40750:tid 40756] [client 52.138.3.9:20324] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaQsvwfBuk03yQKDyqv1kwAAAcM"]
[Sun Mar 01 20:10:40.295127 2026] [:error] [pid 40750:tid 40773] [client 52.138.3.9:20445] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaQswAfBuk03yQKDyqv1lgAAAdQ"]
[Sun Mar 01 20:10:40.945696 2026] [:error] [pid 7133:tid 7140] [client 52.138.3.9:20407] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaQswPCtubh8pR64qB8tVQAAAEU"]
[Sun Mar 01 20:10:41.375834 2026] [:error] [pid 38241:tid 38251] [client 52.138.3.9:20454] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaQswfKRPk6YnJBxw_zz5wAAAMc"]
[Sun Mar 01 20:10:41.894385 2026] [:error] [pid 38241:tid 38254] [client 52.138.3.9:20395] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaQswfKRPk6YnJBxw_zz6gAAAMo"]
[Sun Mar 01 20:10:42.423558 2026] [:error] [pid 38241:tid 38258] [client 52.138.3.9:20452] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaQswvKRPk6YnJBxw_zz6wAAAM4"]
[Sun Mar 01 20:10:42.925538 2026] [:error] [pid 38241:tid 38266] [client 52.138.3.9:20356] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaQswvKRPk6YnJBxw_zz7AAAANY"]
[Sun Mar 01 20:10:43.342363 2026] [:error] [pid 7133:tid 7159] [client 52.138.3.9:20405] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaQsw_Ctubh8pR64qB8tVwAAAFg"]
[Sun Mar 01 20:10:43.803800 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:20354] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaQswwfBuk03yQKDyqv1nAAAAdU"]
[Sun Mar 01 20:10:44.254667 2026] [:error] [pid 7165:tid 7167] [client 52.138.3.9:20453] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaQsxBRjCrA8qWBjgG8OcwAAAkA"]
[Sun Mar 01 20:10:44.920661 2026] [:error] [pid 38241:tid 38246] [client 52.138.3.9:20360] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaQsxPKRPk6YnJBxw_zz7wAAAMI"]
[Sun Mar 01 20:10:45.396337 2026] [:error] [pid 38241:tid 38249] [client 52.138.3.9:20366] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaQsxfKRPk6YnJBxw_zz8AAAAMU"]
[Sun Mar 01 20:10:45.816462 2026] [:error] [pid 33822:tid 33847] [client 52.138.3.9:20377] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaQsxW6W3ygu1YVssuYPKAAAApc"]
[Sun Mar 01 20:10:46.319331 2026] [:error] [pid 33822:tid 33831] [client 52.138.3.9:20390] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaQsxm6W3ygu1YVssuYPKQAAAoc"]
[Sun Mar 01 20:10:46.741079 2026] [:error] [pid 40750:tid 40765] [client 52.138.3.9:20446] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/xaw.php"] [unique_id "aaQsxgfBuk03yQKDyqv1ngAAAcw"]
[Sun Mar 01 20:10:47.156331 2026] [:error] [pid 40750:tid 40766] [client 52.138.3.9:20416] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/xaw.php"] [unique_id "aaQsxwfBuk03yQKDyqv1oAAAAc0"]
[Sun Mar 01 20:10:47.584178 2026] [:error] [pid 40750:tid 40769] [client 52.138.3.9:20396] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/xaw.php"] [unique_id "aaQsxwfBuk03yQKDyqv1ogAAAdA"]
[Sun Mar 01 20:10:48.094062 2026] [:error] [pid 38241:tid 38259] [client 52.138.3.9:20422] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/files/xaw.php"] [unique_id "aaQsyPKRPk6YnJBxw_zz9AAAAM8"]
[Sun Mar 01 20:10:48.512826 2026] [:error] [pid 38241:tid 38244] [client 52.138.3.9:20289] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaQsyPKRPk6YnJBxw_zz9gAAAMA"]
[Sun Mar 01 20:10:49.150730 2026] [:error] [pid 40750:tid 40768] [client 52.138.3.9:20423] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaQsyQfBuk03yQKDyqv1pwAAAc8"]
[Sun Mar 01 20:10:49.704094 2026] [:error] [pid 33822:tid 33829] [client 52.138.3.9:20298] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaQsyW6W3ygu1YVssuYPLAAAAoU"]
[Sun Mar 01 20:10:50.213326 2026] [:error] [pid 41342:tid 41345] [client 52.138.3.9:20327] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaQsyo4iJ6RAS5CatDlavQAAAgA"]
[Sun Mar 01 20:10:50.643255 2026] [:error] [pid 44644:tid 44669] [client 52.138.3.9:20309] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaQsyp3RJaXMcw3y9V_W8QAAABY"]
[Sun Mar 01 20:10:51.076353 2026] [:error] [pid 37032:tid 37048] [client 52.138.3.9:20292] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaQsy-u0U4o7eSImsVR2sQAAAY4"]
[Sun Mar 01 20:10:51.558866 2026] [:error] [pid 41342:tid 41357] [client 52.138.3.9:20318] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaQsy44iJ6RAS5CatDlawAAAAgw"]
[Sun Mar 01 20:10:52.276993 2026] [:error] [pid 40750:tid 40772] [client 52.138.3.9:20430] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaQszAfBuk03yQKDyqv1rgAAAdM"]
[Sun Mar 01 20:10:52.736286 2026] [:error] [pid 40750:tid 40770] [client 52.138.3.9:20459] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-settings2.php"] [unique_id "aaQszAfBuk03yQKDyqv1sAAAAdE"]
[Sun Mar 01 20:10:53.156106 2026] [:error] [pid 40750:tid 40759] [client 52.138.3.9:20290] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "aaQszQfBuk03yQKDyqv1swAAAcY"]
[Sun Mar 01 20:10:53.577884 2026] [:error] [pid 40750:tid 40760] [client 52.138.3.9:20413] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "aaQszQfBuk03yQKDyqv1twAAAcc"]
[Sun Mar 01 20:10:54.001436 2026] [:error] [pid 33822:tid 33836] [client 52.138.3.9:20418] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "aaQszm6W3ygu1YVssuYPLwAAAow"]
[Sun Mar 01 20:10:54.445049 2026] [:error] [pid 33822:tid 33840] [client 52.138.3.9:20378] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaQszm6W3ygu1YVssuYPMwAAApA"]
[Sun Mar 01 20:10:54.868018 2026] [:error] [pid 7133:tid 7138] [client 52.138.3.9:20303] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaQszvCtubh8pR64qB8tYAAAAEM"]
[Sun Mar 01 20:10:55.305663 2026] [:error] [pid 7133:tid 7157] [client 52.138.3.9:20411] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaQsz_Ctubh8pR64qB8tYgAAAFY"]
[Sun Mar 01 20:10:55.776251 2026] [:error] [pid 7133:tid 7146] [client 52.138.3.9:20436] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaQsz_Ctubh8pR64qB8tZQAAAEs"]
[Sun Mar 01 20:10:56.222734 2026] [:error] [pid 7133:tid 7142] [client 52.138.3.9:20322] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaQs0PCtubh8pR64qB8tZgAAAEc"]
[Sun Mar 01 20:10:56.724555 2026] [:error] [pid 40750:tid 40763] [client 52.138.3.9:20401] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaQs0AfBuk03yQKDyqv1vgAAAco"]
[Sun Mar 01 20:10:57.139274 2026] [:error] [pid 40750:tid 40772] [client 52.138.3.9:20443] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaQs0QfBuk03yQKDyqv1vwAAAdM"]
[Sun Mar 01 20:10:57.574110 2026] [:error] [pid 33822:tid 33841] [client 52.138.3.9:20288] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaQs0W6W3ygu1YVssuYPOQAAApE"]
[Sun Mar 01 20:10:58.377778 2026] [:error] [pid 38034:tid 38057] [client 52.138.3.9:20435] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2026/02/index.php"] [unique_id "aaQs0gxtfZjwlJok9K8KYAAAARM"]
[Sun Mar 01 20:10:58.906971 2026] [:error] [pid 40750:tid 40756] [client 52.138.3.9:20319] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2026/02/index.php"] [unique_id "aaQs0gfBuk03yQKDyqv1xgAAAcM"]
[Sun Mar 01 20:10:59.479739 2026] [:error] [pid 40750:tid 40754] [client 52.138.3.9:20384] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2026/02/index.php"] [unique_id "aaQs0wfBuk03yQKDyqv1ywAAAcE"]
[Sun Mar 01 20:10:59.929362 2026] [:error] [pid 40750:tid 40771] [client 52.138.3.9:20299] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2026/02/index.php"] [unique_id "aaQs0wfBuk03yQKDyqv1zAAAAdI"]
[Sun Mar 01 20:11:00.357403 2026] [:error] [pid 40750:tid 40755] [client 52.138.3.9:20307] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/alfa-rex.php"] [unique_id "aaQs1AfBuk03yQKDyqv1zwAAAcI"]
[Sun Mar 01 20:11:00.928984 2026] [:error] [pid 40750:tid 40770] [client 52.138.3.9:20306] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/alfa-rex.php"] [unique_id "aaQs1AfBuk03yQKDyqv10wAAAdE"]
[Sun Mar 01 20:11:01.363807 2026] [:error] [pid 41780:tid 41799] [client 52.138.3.9:20382] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/alfa-rex.php"] [unique_id "aaQs1cONkVoocLIqzy0nuwAAA9A"]
[Sun Mar 01 20:11:01.795068 2026] [:error] [pid 37032:tid 37045] [client 52.138.3.9:20438] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/alfa-rex.php"] [unique_id "aaQs1eu0U4o7eSImsVR2tgAAAYs"]
[Sun Mar 01 20:11:02.210361 2026] [:error] [pid 7165:tid 7171] [client 52.138.3.9:20349] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2026/01/mybackpack.php"] [unique_id "aaQs1hRjCrA8qWBjgG8OfwAAAkQ"]
[Sun Mar 01 20:11:02.630034 2026] [:error] [pid 7165:tid 7170] [client 52.138.3.9:20393] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2026/01/mybackpack.php"] [unique_id "aaQs1hRjCrA8qWBjgG8OgQAAAkM"]
[Sun Mar 01 20:11:03.052309 2026] [:error] [pid 7165:tid 7169] [client 52.138.3.9:20386] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2026/01/mybackpack.php"] [unique_id "aaQs1xRjCrA8qWBjgG8OgwAAAkI"]
[Sun Mar 01 20:11:03.476305 2026] [:error] [pid 38034:tid 38060] [client 52.138.3.9:20305] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2026/01/mybackpack.php"] [unique_id "aaQs1wxtfZjwlJok9K8KZAAAARY"]
[Sun Mar 01 20:11:03.900900 2026] [:error] [pid 7133:tid 7152] [client 52.138.3.9:20462] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaQs1_Ctubh8pR64qB8taQAAAFE"]
[Sun Mar 01 20:11:04.454106 2026] [:error] [pid 33822:tid 33839] [client 52.138.3.9:20332] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaQs2G6W3ygu1YVssuYPPgAAAo8"]
[Sun Mar 01 20:11:04.875775 2026] [:error] [pid 7165:tid 7191] [client 52.138.3.9:20224] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaQs2BRjCrA8qWBjgG8OiwAAAlg"]
[Sun Mar 01 20:11:05.421796 2026] [:error] [pid 33822:tid 33844] [client 52.138.3.9:20295] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaQs2W6W3ygu1YVssuYPQwAAApQ"]
[Sun Mar 01 20:11:05.895174 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:20323] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/rk2.php"] [unique_id "aaQs2RRjCrA8qWBjgG8OjgAAAk8"]
[Sun Mar 01 20:11:06.326477 2026] [:error] [pid 7133:tid 7147] [client 52.138.3.9:20325] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/rk2.php"] [unique_id "aaQs2vCtubh8pR64qB8tbgAAAEw"]
[Sun Mar 01 20:11:06.755055 2026] [:error] [pid 38034:tid 38059] [client 52.138.3.9:20348] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/rk2.php"] [unique_id "aaQs2gxtfZjwlJok9K8KaAAAARU"]
[Sun Mar 01 20:11:07.187627 2026] [:error] [pid 44644:tid 44662] [client 52.138.3.9:20433] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/rk2.php"] [unique_id "aaQs253RJaXMcw3y9V_XBAAAAA8"]
[Sun Mar 01 20:11:07.701280 2026] [:error] [pid 38241:tid 38247] [client 52.138.3.9:20421] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/error.php"] [unique_id "aaQs2_KRPk6YnJBxw_z0AwAAAMM"]
[Sun Mar 01 20:11:08.117895 2026] [:error] [pid 7133:tid 7148] [client 52.138.3.9:20329] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/error.php"] [unique_id "aaQs3PCtubh8pR64qB8tcQAAAE0"]
[Sun Mar 01 20:11:08.621848 2026] [:error] [pid 41780:tid 41786] [client 52.138.3.9:20249] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/error.php"] [unique_id "aaQs3MONkVoocLIqzy0nvQAAA8M"]
[Sun Mar 01 20:11:12.221269 2026] [:error] [pid 7133:tid 7152] [client 52.138.3.9:20373] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/xx.php"] [unique_id "aaQs4PCtubh8pR64qB8teQAAAFE"]
[Sun Mar 01 20:11:13.933665 2026] [:error] [pid 40750:tid 40772] [client 52.138.3.9:20415] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/ws62.php"] [unique_id "aaQs4QfBuk03yQKDyqv2AgAAAdM"]
[Sun Mar 01 20:11:14.807883 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:20447] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/feeds.php"] [unique_id "aaQs4hRjCrA8qWBjgG8OnQAAAks"]
[Sun Mar 01 20:11:15.710982 2026] [:error] [pid 33822:tid 33841] [client 52.138.3.9:20420] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/signup_pad_classic.php"] [unique_id "aaQs426W3ygu1YVssuYPeAAAApE"]
[Sun Mar 01 20:11:16.626691 2026] [:error] [pid 40750:tid 40762] [client 52.138.3.9:20399] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaQs5AfBuk03yQKDyqv2CwAAAck"]
[Sun Mar 01 20:11:17.176331 2026] [:error] [pid 7165:tid 7172] [client 52.138.3.9:20414] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaQs5RRjCrA8qWBjgG8OowAAAkU"]
[Sun Mar 01 20:11:17.592008 2026] [:error] [pid 7165:tid 7186] [client 52.138.3.9:20468] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaQs5RRjCrA8qWBjgG8OpQAAAlM"]
[Sun Mar 01 20:11:18.160861 2026] [:error] [pid 38241:tid 38265] [client 52.138.3.9:20320] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaQs5vKRPk6YnJBxw_z0FwAAANU"]
[Sun Mar 01 20:11:18.771049 2026] [:error] [pid 33822:tid 33824] [client 52.138.3.9:20387] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-https.php"] [unique_id "aaQs5m6W3ygu1YVssuYPiwAAAoA"]
[Sun Mar 01 20:11:19.199615 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:20296] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/rawwp.php"] [unique_id "aaQs5xRjCrA8qWBjgG8OqgAAAk8"]
[Sun Mar 01 20:11:19.647283 2026] [:error] [pid 40750:tid 40762] [client 52.138.3.9:20408] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaQs5wfBuk03yQKDyqv2GwAAAck"]
[Sun Mar 01 20:11:20.187845 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:20304] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaQs6AfBuk03yQKDyqv2HgAAAc4"]
[Sun Mar 01 20:11:20.723283 2026] [:error] [pid 38241:tid 38250] [client 52.138.3.9:20451] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaQs6PKRPk6YnJBxw_z0GwAAAMY"]
[Sun Mar 01 20:11:21.143076 2026] [:error] [pid 7165:tid 7184] [client 52.138.3.9:20300] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaQs6RRjCrA8qWBjgG8OqwAAAlE"]
[Sun Mar 01 20:11:21.676733 2026] [:error] [pid 7165:tid 7167] [client 52.138.3.9:20451] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-mail.php"] [unique_id "aaQs6RRjCrA8qWBjgG8OrAAAAkA"]
[Sun Mar 01 20:11:22.102072 2026] [:error] [pid 7165:tid 7188] [client 52.138.3.9:20340] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/uhuybro.php"] [unique_id "aaQs6hRjCrA8qWBjgG8OrwAAAlU"]
[Sun Mar 01 20:11:22.796276 2026] [:error] [pid 7133:tid 7148] [client 52.138.3.9:20336] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/uhuybro.php"] [unique_id "aaQs6vCtubh8pR64qB8tfgAAAE0"]
[Sun Mar 01 20:11:23.320982 2026] [:error] [pid 7133:tid 7155] [client 52.138.3.9:20260] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/uhuybro.php"] [unique_id "aaQs6_Ctubh8pR64qB8tgAAAAFQ"]
[Sun Mar 01 20:11:23.804938 2026] [:error] [pid 7165:tid 7181] [client 52.138.3.9:20345] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaQs6xRjCrA8qWBjgG8OswAAAk4"]
[Sun Mar 01 20:11:24.425453 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:20293] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaQs7BRjCrA8qWBjgG8OtwAAAk8"]
[Sun Mar 01 20:11:25.084648 2026] [:error] [pid 38241:tid 38259] [client 52.138.3.9:20398] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaQs7fKRPk6YnJBxw_z0IgAAAM8"]
[Sun Mar 01 20:11:25.532308 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:20417] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaQs7QfBuk03yQKDyqv2OgAAAdU"]
[Sun Mar 01 20:11:25.947815 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:20394] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaQs7RRjCrA8qWBjgG8OxQAAAlQ"]
[Sun Mar 01 20:11:26.363853 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:20321] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaQs7hRjCrA8qWBjgG8OxwAAAks"]
[Sun Mar 01 20:11:26.783899 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:20312] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaQs7hRjCrA8qWBjgG8OyQAAAk0"]
[Sun Mar 01 20:11:27.213627 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:20334] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaQs7xRjCrA8qWBjgG8OzwAAAlQ"]
[Sun Mar 01 20:11:27.633886 2026] [:error] [pid 33822:tid 33844] [client 52.138.3.9:20389] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaQs726W3ygu1YVssuYP2gAAApQ"]
[Sun Mar 01 20:11:28.062761 2026] [:error] [pid 40750:tid 40760] [client 52.138.3.9:20283] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaQs8AfBuk03yQKDyqv2QwAAAcc"]
[Sun Mar 01 20:11:28.485846 2026] [:error] [pid 40750:tid 40773] [client 52.138.3.9:20265] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaQs8AfBuk03yQKDyqv2RwAAAdQ"]
[Sun Mar 01 20:11:28.916240 2026] [:error] [pid 38241:tid 38253] [client 52.138.3.9:20457] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaQs8PKRPk6YnJBxw_z0JAAAAMk"]
[Sun Mar 01 20:11:29.397714 2026] [:error] [pid 40750:tid 40756] [client 52.138.3.9:20335] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaQs8QfBuk03yQKDyqv2UQAAAcM"]
[Sun Mar 01 20:11:31.233484 2026] [:error] [pid 7133:tid 7142] [client 52.138.3.9:20326] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaQs8_Ctubh8pR64qB8thQAAAEc"]
[Sun Mar 01 20:11:31.682727 2026] [:error] [pid 33822:tid 33829] [client 52.138.3.9:20349] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaQs826W3ygu1YVssuYP5AAAAoU"]
[Sun Mar 01 20:11:32.103720 2026] [:error] [pid 38241:tid 38262] [client 52.138.3.9:20272] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaQs9PKRPk6YnJBxw_z0KAAAANI"]
[Sun Mar 01 20:11:32.536525 2026] [:error] [pid 38241:tid 38263] [client 52.138.3.9:20316] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaQs9PKRPk6YnJBxw_z0KgAAANM"]
[Sun Mar 01 20:11:32.947012 2026] [:error] [pid 38241:tid 38252] [client 52.138.3.9:20472] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaQs9PKRPk6YnJBxw_z0LgAAAMg"]
[Sun Mar 01 20:11:33.400535 2026] [:error] [pid 38241:tid 38245] [client 52.138.3.9:20344] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaQs9fKRPk6YnJBxw_z0MgAAAME"]
[Sun Mar 01 20:11:33.829503 2026] [:error] [pid 38241:tid 38244] [client 52.138.3.9:20448] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaQs9fKRPk6YnJBxw_z0NAAAAMA"]
[Sun Mar 01 20:11:34.297419 2026] [:error] [pid 33822:tid 33837] [client 52.138.3.9:20341] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaQs9m6W3ygu1YVssuYP5gAAAo0"]
[Sun Mar 01 20:11:34.731271 2026] [:error] [pid 38034:tid 38051] [client 52.138.3.9:20254] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaQs9gxtfZjwlJok9K8KfgAAAQ0"]
[Sun Mar 01 20:11:35.242341 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:20242] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaQs9wfBuk03yQKDyqv2hAAAAdU"]
[Sun Mar 01 20:11:35.744201 2026] [:error] [pid 38034:tid 38047] [client 52.138.3.9:20400] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaQs9wxtfZjwlJok9K8KgQAAAQk"]
[Sun Mar 01 20:11:36.167722 2026] [:error] [pid 38241:tid 38256] [client 52.138.3.9:20236] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaQs-PKRPk6YnJBxw_z0NQAAAMw"]
[Sun Mar 01 20:11:36.622379 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:20271] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaQs-BRjCrA8qWBjgG8O2wAAAks"]
[Sun Mar 01 20:11:37.305880 2026] [:error] [pid 40750:tid 40768] [client 52.138.3.9:20471] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaQs-QfBuk03yQKDyqv2kAAAAc8"]
[Sun Mar 01 20:11:37.848756 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:20241] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaQs-RRjCrA8qWBjgG8O3AAAAlc"]
[Sun Mar 01 20:11:38.270631 2026] [:error] [pid 40750:tid 40761] [client 52.138.3.9:20247] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaQs-gfBuk03yQKDyqv2mQAAAcg"]
[Sun Mar 01 20:11:38.773776 2026] [:error] [pid 40750:tid 40764] [client 52.138.3.9:20308] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaQs-gfBuk03yQKDyqv2nwAAAcs"]
[Sun Mar 01 20:11:39.220003 2026] [:error] [pid 38241:tid 38268] [client 52.138.3.9:20302] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaQs-_KRPk6YnJBxw_z0PwAAANg"]
[Sun Mar 01 20:11:39.666903 2026] [:error] [pid 38241:tid 38251] [client 52.138.3.9:20237] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aaQs-_KRPk6YnJBxw_z0QQAAAMc"]
[Sun Mar 01 20:11:40.382018 2026] [:error] [pid 7165:tid 7189] [client 52.138.3.9:20404] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaQs_BRjCrA8qWBjgG8O3gAAAlY"]
[Sun Mar 01 20:11:40.939263 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:20380] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaQs_BRjCrA8qWBjgG8O4QAAAk0"]
[Sun Mar 01 20:11:41.363982 2026] [:error] [pid 40750:tid 40761] [client 52.138.3.9:20231] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaQs_QfBuk03yQKDyqv2rgAAAcg"]
[Sun Mar 01 20:11:41.802590 2026] [:error] [pid 7133:tid 7140] [client 52.138.3.9:20347] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "aaQs_fCtubh8pR64qB8tlgAAAEU"]
[Sun Mar 01 20:11:42.457733 2026] [:error] [pid 44644:tid 44669] [client 52.138.3.9:20328] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaQs_p3RJaXMcw3y9V_XEwAAABY"]
[Sun Mar 01 20:11:42.988494 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:20185] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaQs_hRjCrA8qWBjgG8O7AAAAk0"]
[Sun Mar 01 20:11:43.414790 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:20238] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaQs_xRjCrA8qWBjgG8O8QAAAlQ"]
[Sun Mar 01 20:11:43.839152 2026] [:error] [pid 33822:tid 33840] [client 52.138.3.9:20268] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaQs_26W3ygu1YVssuYP6gAAApA"]
[Sun Mar 01 20:11:44.281983 2026] [:error] [pid 7165:tid 7178] [client 52.138.3.9:20240] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaQtABRjCrA8qWBjgG8O9AAAAks"]
[Sun Mar 01 20:11:44.843763 2026] [:error] [pid 40750:tid 40753] [client 52.138.3.9:20331] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaQtAAfBuk03yQKDyqv2xgAAAcA"]
[Sun Mar 01 20:11:45.259094 2026] [:error] [pid 38241:tid 38260] [client 52.138.3.9:20234] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaQtAfKRPk6YnJBxw_z0RgAAANA"]
[Sun Mar 01 20:11:45.817268 2026] [:error] [pid 7165:tid 7176] [client 52.138.3.9:20227] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaQtARRjCrA8qWBjgG8O9wAAAkk"]
[Sun Mar 01 20:11:46.264875 2026] [:error] [pid 38241:tid 38252] [client 52.138.3.9:20261] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaQtAvKRPk6YnJBxw_z0RwAAAMg"]
[Sun Mar 01 20:11:46.681646 2026] [:error] [pid 37032:tid 37040] [client 52.138.3.9:20424] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aaQtAuu0U4o7eSImsVR2yQAAAYY"]
[Sun Mar 01 20:11:47.304941 2026] [:error] [pid 40750:tid 40764] [client 52.138.3.9:20313] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aaQtAwfBuk03yQKDyqv21wAAAcs"]
[Sun Mar 01 20:11:47.929696 2026] [:error] [pid 40750:tid 40765] [client 52.138.3.9:20230] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aaQtAwfBuk03yQKDyqv22QAAAcw"]
[Sun Mar 01 20:11:48.387840 2026] [:error] [pid 40750:tid 40754] [client 52.138.3.9:20351] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmrlpc.php"] [unique_id "aaQtBAfBuk03yQKDyqv23AAAAcE"]
[Sun Mar 01 20:11:48.870865 2026] [:error] [pid 41342:tid 41363] [client 52.138.3.9:20346] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/123.php"] [unique_id "aaQtBI4iJ6RAS5CatDlayAAAAhI"]
[Sun Mar 01 20:11:49.503549 2026] [:error] [pid 40750:tid 40755] [client 52.138.3.9:20402] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/123.php"] [unique_id "aaQtBQfBuk03yQKDyqv24wAAAcI"]
[Sun Mar 01 20:11:50.098244 2026] [:error] [pid 40750:tid 40769] [client 52.138.3.9:20315] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/123.php"] [unique_id "aaQtBgfBuk03yQKDyqv26QAAAdA"]
[Sun Mar 01 20:11:50.688183 2026] [:error] [pid 38241:tid 38245] [client 52.138.3.9:20177] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/123.php"] [unique_id "aaQtBvKRPk6YnJBxw_z0SgAAAME"]
[Sun Mar 01 20:11:51.250863 2026] [:error] [pid 44644:tid 44668] [client 52.138.3.9:20258] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaQtB53RJaXMcw3y9V_XGAAAABU"]
[Sun Mar 01 20:11:51.677901 2026] [:error] [pid 38241:tid 38255] [client 52.138.3.9:20266] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaQtB_KRPk6YnJBxw_z0SwAAAMs"]
[Sun Mar 01 20:11:52.122697 2026] [:error] [pid 41780:tid 41793] [client 52.138.3.9:20278] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaQtCMONkVoocLIqzy0nxQAAA8o"]
[Sun Mar 01 20:11:52.685439 2026] [:error] [pid 38241:tid 38246] [client 52.138.3.9:20239] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/z60.php"] [unique_id "aaQtCPKRPk6YnJBxw_z0TAAAAMI"]
[Sun Mar 01 20:11:53.469994 2026] [:error] [pid 38241:tid 38264] [client 52.138.3.9:20196] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class.php"] [unique_id "aaQtCfKRPk6YnJBxw_z0TgAAANQ"]
[Sun Mar 01 20:11:54.560353 2026] [:error] [pid 37032:tid 37039] [client 52.138.3.9:20172] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class.php"] [unique_id "aaQtCuu0U4o7eSImsVR21gAAAYU"]
[Sun Mar 01 20:11:55.372684 2026] [:error] [pid 33822:tid 33846] [client 52.138.3.9:20327] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class.php"] [unique_id "aaQtC26W3ygu1YVssuYP8QAAApY"]
[Sun Mar 01 20:11:56.035912 2026] [:error] [pid 7165:tid 7191] [client 52.138.3.9:20317] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class.php"] [unique_id "aaQtDBRjCrA8qWBjgG8O_gAAAlg"]
[Sun Mar 01 20:11:56.483147 2026] [:error] [pid 38241:tid 38248] [client 52.138.3.9:20168] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaQtDPKRPk6YnJBxw_z0WAAAAMQ"]
[Sun Mar 01 20:11:57.019822 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:20225] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaQtDQfBuk03yQKDyqv3GQAAAc4"]
[Sun Mar 01 20:11:57.556773 2026] [:error] [pid 41780:tid 41798] [client 52.138.3.9:20473] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaQtDcONkVoocLIqzy0nyQAAA88"]
[Sun Mar 01 20:11:58.033828 2026] [:error] [pid 7133:tid 7154] [client 52.138.3.9:20264] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "aaQtDvCtubh8pR64qB8tpQAAAFM"]
[Sun Mar 01 20:11:58.478398 2026] [:error] [pid 7133:tid 7157] [client 52.138.3.9:20280] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaQtDvCtubh8pR64qB8tpgAAAFY"]
[Sun Mar 01 20:11:58.916501 2026] [:error] [pid 38034:tid 38056] [client 52.138.3.9:20257] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaQtDgxtfZjwlJok9K8KkwAAARI"]
[Sun Mar 01 20:11:59.407063 2026] [:error] [pid 33822:tid 33836] [client 52.138.3.9:20175] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaQtD26W3ygu1YVssuYP9QAAAow"]
[Sun Mar 01 20:11:59.852022 2026] [:error] [pid 33822:tid 33843] [client 52.138.3.9:20449] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/404.php"] [unique_id "aaQtD26W3ygu1YVssuYP9gAAApM"]
[Sun Mar 01 20:12:00.513071 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:20330] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaQtEBRjCrA8qWBjgG8PAgAAAkw"]
[Sun Mar 01 20:12:00.958489 2026] [:error] [pid 7165:tid 7185] [client 52.138.3.9:20409] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaQtEBRjCrA8qWBjgG8PBAAAAlI"]
[Sun Mar 01 20:12:01.702075 2026] [:error] [pid 40750:tid 40771] [client 52.138.3.9:20235] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaQtEQfBuk03yQKDyqv3IwAAAdI"]
[Sun Mar 01 20:12:03.051153 2026] [:error] [pid 33822:tid 33833] [client 52.138.3.9:20245] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaQtE26W3ygu1YVssuYP9wAAAok"]
[Sun Mar 01 20:12:03.571694 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:20200] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaQtExRjCrA8qWBjgG8PDAAAAlQ"]
[Sun Mar 01 20:12:04.091605 2026] [:error] [pid 38241:tid 38264] [client 52.138.3.9:20310] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaQtFPKRPk6YnJBxw_z0XAAAANQ"]
[Sun Mar 01 20:12:04.546687 2026] [:error] [pid 40750:tid 40775] [client 52.138.3.9:20186] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaQtFAfBuk03yQKDyqv3LgAAAdY"]
[Sun Mar 01 20:12:05.082872 2026] [:error] [pid 40750:tid 40766] [client 52.138.3.9:20259] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aaQtFQfBuk03yQKDyqv3MQAAAc0"]
[Sun Mar 01 20:12:05.519282 2026] [:error] [pid 40750:tid 40768] [client 52.138.3.9:20228] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaQtFQfBuk03yQKDyqv3NAAAAc8"]
[Sun Mar 01 20:12:06.073441 2026] [:error] [pid 40750:tid 40770] [client 52.138.3.9:20429] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaQtFgfBuk03yQKDyqv3OgAAAdE"]
[Sun Mar 01 20:12:06.920315 2026] [:error] [pid 40750:tid 40757] [client 52.138.3.9:20160] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaQtFgfBuk03yQKDyqv3PwAAAcQ"]
[Sun Mar 01 20:12:07.424228 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:20392] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaQtFxRjCrA8qWBjgG8PEQAAAk0"]
[Sun Mar 01 20:12:07.888728 2026] [:error] [pid 38241:tid 38263] [client 52.138.3.9:20276] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaQtF_KRPk6YnJBxw_z0YQAAANM"]
[Sun Mar 01 20:12:08.445221 2026] [:error] [pid 40750:tid 40759] [client 52.138.3.9:20253] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaQtGAfBuk03yQKDyqv3SAAAAcY"]
[Sun Mar 01 20:12:08.863730 2026] [:error] [pid 7133:tid 7144] [client 52.138.3.9:20229] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaQtGPCtubh8pR64qB8tswAAAEk"]
[Sun Mar 01 20:12:09.289242 2026] [:error] [pid 7165:tid 7167] [client 52.138.3.9:20284] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaQtGRRjCrA8qWBjgG8PFwAAAkA"]
[Sun Mar 01 20:12:09.796406 2026] [:error] [pid 38241:tid 38259] [client 52.138.3.9:20251] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaQtGfKRPk6YnJBxw_z0aAAAAM8"]
[Sun Mar 01 20:12:10.346522 2026] [:error] [pid 38034:tid 38045] [client 52.138.3.9:20176] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaQtGgxtfZjwlJok9K8KnwAAAQc"]
[Sun Mar 01 20:12:10.848630 2026] [:error] [pid 40750:tid 40770] [client 52.138.3.9:20425] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaQtGgfBuk03yQKDyqv3UwAAAdE"]
[Sun Mar 01 20:12:11.334972 2026] [:error] [pid 44644:tid 44666] [client 52.138.3.9:20333] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gg.php"] [unique_id "aaQtG53RJaXMcw3y9V_XHQAAABM"]
[Sun Mar 01 20:12:11.841387 2026] [:error] [pid 44644:tid 44662] [client 52.138.3.9:20277] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaQtG53RJaXMcw3y9V_XHwAAAA8"]
[Sun Mar 01 20:12:12.320371 2026] [:error] [pid 38241:tid 38264] [client 52.138.3.9:20192] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaQtHPKRPk6YnJBxw_z0awAAANQ"]
[Sun Mar 01 20:12:12.930601 2026] [:error] [pid 40750:tid 40772] [client 52.138.3.9:20252] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaQtHAfBuk03yQKDyqv3XwAAAdM"]
[Sun Mar 01 20:12:13.464594 2026] [:error] [pid 38241:tid 38267] [client 52.138.3.9:20203] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/manager.php"] [unique_id "aaQtHfKRPk6YnJBxw_z0bwAAANc"]
[Sun Mar 01 20:12:13.902888 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:20246] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaQtHQfBuk03yQKDyqv3YgAAAdU"]
[Sun Mar 01 20:12:14.315224 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:20225] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaQtHhRjCrA8qWBjgG8PHgAAAkw"]
[Sun Mar 01 20:12:14.737789 2026] [:error] [pid 7165:tid 7170] [client 52.138.3.9:20120] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaQtHhRjCrA8qWBjgG8PIAAAAkM"]
[Sun Mar 01 20:12:15.185961 2026] [:error] [pid 38241:tid 38257] [client 52.138.3.9:20165] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aaQtH_KRPk6YnJBxw_z0cQAAAM0"]
[Sun Mar 01 20:12:15.605030 2026] [:error] [pid 7165:tid 7183] [client 52.138.3.9:20163] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "aaQtHxRjCrA8qWBjgG8PKAAAAlA"]
[Sun Mar 01 20:12:24.287559 2026] [:error] [pid 7165:tid 7183] [client 52.138.3.9:20273] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaQtKBRjCrA8qWBjgG8PVAAAAlA"]
[Sun Mar 01 20:12:24.741748 2026] [:error] [pid 38241:tid 38247] [client 52.138.3.9:20098] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaQtKPKRPk6YnJBxw_z0fAAAAMM"]
[Sun Mar 01 20:12:27.010190 2026] [:error] [pid 38241:tid 38260] [client 52.138.3.9:20294] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaQtK_KRPk6YnJBxw_z0hAAAANA"]
[Sun Mar 01 20:12:27.434341 2026] [:error] [pid 7133:tid 7137] [client 52.138.3.9:20244] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x.php"] [unique_id "aaQtK_Ctubh8pR64qB8tyAAAAEI"]
[Sun Mar 01 20:12:27.945079 2026] [:error] [pid 38241:tid 38246] [client 52.138.3.9:20287] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaQtK_KRPk6YnJBxw_z0iAAAAMI"]
[Sun Mar 01 20:12:28.372650 2026] [:error] [pid 7133:tid 7135] [client 52.138.3.9:20188] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaQtLPCtubh8pR64qB8tywAAAEA"]
[Sun Mar 01 20:12:28.828712 2026] [:error] [pid 38241:tid 38244] [client 52.138.3.9:20211] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaQtLPKRPk6YnJBxw_z0jQAAAMA"]
[Sun Mar 01 20:12:29.255666 2026] [:error] [pid 41342:tid 41347] [client 52.138.3.9:20215] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aaQtLY4iJ6RAS5CatDla0QAAAgI"]
[Sun Mar 01 20:12:29.840841 2026] [:error] [pid 40750:tid 40777] [client 52.138.3.9:20267] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aaQtLQfBuk03yQKDyqv3kwAAAdg"]
[Sun Mar 01 20:12:30.312095 2026] [:error] [pid 38241:tid 38253] [client 52.138.3.9:20269] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aaQtLvKRPk6YnJBxw_z0jwAAAMk"]
[Sun Mar 01 20:12:30.793988 2026] [:error] [pid 38241:tid 38267] [client 52.138.3.9:20149] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aaQtLvKRPk6YnJBxw_z0kAAAANc"]
[Sun Mar 01 20:12:31.214643 2026] [:error] [pid 7165:tid 7189] [client 52.138.3.9:20182] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aaQtLxRjCrA8qWBjgG8PXgAAAlY"]
[Sun Mar 01 20:12:31.724025 2026] [:error] [pid 40750:tid 40764] [client 52.138.3.9:20210] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaQtLwfBuk03yQKDyqv3oAAAAcs"]
[Sun Mar 01 20:12:32.137972 2026] [:error] [pid 40750:tid 40766] [client 52.138.3.9:20218] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaQtMAfBuk03yQKDyqv3pAAAAc0"]
[Sun Mar 01 20:12:32.575840 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:20035] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaQtMBRjCrA8qWBjgG8PYAAAAk8"]
[Sun Mar 01 20:12:33.159774 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:20162] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "aaQtMQfBuk03yQKDyqv3rAAAAc4"]
[Sun Mar 01 20:12:33.605975 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:20134] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaQtMRRjCrA8qWBjgG8PZAAAAkc"]
[Sun Mar 01 20:12:34.028218 2026] [:error] [pid 40750:tid 40757] [client 52.138.3.9:20205] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaQtMgfBuk03yQKDyqv3sQAAAcQ"]
[Sun Mar 01 20:12:34.458843 2026] [:error] [pid 40750:tid 40772] [client 52.138.3.9:20243] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaQtMgfBuk03yQKDyqv3twAAAdM"]
[Sun Mar 01 20:12:34.890463 2026] [:error] [pid 7165:tid 7170] [client 52.138.3.9:20232] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaQtMhRjCrA8qWBjgG8PZQAAAkM"]
[Sun Mar 01 20:12:35.309844 2026] [:error] [pid 40750:tid 40754] [client 52.138.3.9:20194] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/click.php"] [unique_id "aaQtMwfBuk03yQKDyqv3wwAAAcE"]
[Sun Mar 01 20:12:35.965178 2026] [:error] [pid 38034:tid 38040] [client 52.138.3.9:20470] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaQtMwxtfZjwlJok9K8KqQAAAQQ"]
[Sun Mar 01 20:12:36.420491 2026] [:error] [pid 38034:tid 38058] [client 52.138.3.9:20311] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaQtNAxtfZjwlJok9K8KqwAAARQ"]
[Sun Mar 01 20:12:37.051673 2026] [:error] [pid 40750:tid 40754] [client 52.138.3.9:20104] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaQtNQfBuk03yQKDyqv3zwAAAcE"]
[Sun Mar 01 20:12:38.104028 2026] [:error] [pid 41342:tid 41364] [client 52.138.3.9:20193] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaQtNo4iJ6RAS5CatDla1AAAAhM"]
[Sun Mar 01 20:12:38.791462 2026] [:error] [pid 33822:tid 33839] [client 52.138.3.9:20262] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaQtNm6W3ygu1YVssuYP_QAAAo8"]
[Sun Mar 01 20:12:39.364963 2026] [:error] [pid 7165:tid 7172] [client 52.138.3.9:20174] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaQtNxRjCrA8qWBjgG8PagAAAkU"]
[Sun Mar 01 20:12:40.632066 2026] [:error] [pid 40750:tid 40773] [client 52.138.3.9:20131] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaQtOAfBuk03yQKDyqv35gAAAdQ"]
[Sun Mar 01 20:12:41.044916 2026] [:error] [pid 33822:tid 33832] [client 52.138.3.9:20209] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aaQtOW6W3ygu1YVssuYP_gAAAog"]
[Sun Mar 01 20:12:41.464766 2026] [:error] [pid 33822:tid 33831] [client 52.138.3.9:20208] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaQtOW6W3ygu1YVssuYP_wAAAoc"]
[Sun Mar 01 20:12:41.918351 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:20442] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaQtOQfBuk03yQKDyqv39AAAAc4"]
[Sun Mar 01 20:12:42.340582 2026] [:error] [pid 38241:tid 38259] [client 52.138.3.9:20097] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaQtOvKRPk6YnJBxw_z0lgAAAM8"]
[Sun Mar 01 20:12:42.779235 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:20111] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "aaQtOhRjCrA8qWBjgG8PbwAAAkc"]
[Sun Mar 01 20:12:43.526079 2026] [:error] [pid 7165:tid 7184] [client 52.138.3.9:20337] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaQtOxRjCrA8qWBjgG8PcQAAAlE"]
[Sun Mar 01 20:12:44.004595 2026] [:error] [pid 33822:tid 33828] [client 52.138.3.9:20213] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaQtPG6W3ygu1YVssuYQAQAAAoQ"]
[Sun Mar 01 20:12:44.474335 2026] [:error] [pid 38034:tid 38048] [client 52.138.3.9:20152] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaQtPAxtfZjwlJok9K8KrwAAAQo"]
[Sun Mar 01 20:12:44.929442 2026] [:error] [pid 38241:tid 38251] [client 52.138.3.9:20250] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aaQtPPKRPk6YnJBxw_z0mwAAAMc"]
[Sun Mar 01 20:12:45.419353 2026] [:error] [pid 38241:tid 38247] [client 52.138.3.9:20202] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaQtPfKRPk6YnJBxw_z0nwAAAMM"]
[Sun Mar 01 20:12:45.836663 2026] [:error] [pid 38241:tid 38258] [client 52.138.3.9:20106] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaQtPfKRPk6YnJBxw_z0oQAAAM4"]
[Sun Mar 01 20:12:46.271525 2026] [:error] [pid 38241:tid 38257] [client 52.138.3.9:20233] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaQtPvKRPk6YnJBxw_z0pgAAAM0"]
[Sun Mar 01 20:12:46.698577 2026] [:error] [pid 7165:tid 7186] [client 52.138.3.9:20342] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aaQtPhRjCrA8qWBjgG8PcwAAAlM"]
[Sun Mar 01 20:12:47.165401 2026] [:error] [pid 40750:tid 40757] [client 52.138.3.9:20350] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaQtPwfBuk03yQKDyqv4EAAAAcQ"]
[Sun Mar 01 20:12:47.584486 2026] [:error] [pid 40750:tid 40772] [client 52.138.3.9:20410] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaQtPwfBuk03yQKDyqv4EgAAAdM"]
[Sun Mar 01 20:12:48.007217 2026] [:error] [pid 7133:tid 7156] [client 52.138.3.9:20190] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaQtQPCtubh8pR64qB8t3gAAAFU"]
[Sun Mar 01 20:12:48.434289 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:20339] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/04.php"] [unique_id "aaQtQAfBuk03yQKDyqv4EwAAAdU"]
[Sun Mar 01 20:12:49.089920 2026] [:error] [pid 38241:tid 38245] [client 52.138.3.9:20116] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaQtQfKRPk6YnJBxw_z0sAAAAME"]
[Sun Mar 01 20:12:49.510586 2026] [:error] [pid 33822:tid 33843] [client 52.138.3.9:20153] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaQtQW6W3ygu1YVssuYQAwAAApM"]
[Sun Mar 01 20:12:49.958098 2026] [:error] [pid 7133:tid 7136] [client 52.138.3.9:20275] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaQtQfCtubh8pR64qB8t4wAAAEE"]
[Sun Mar 01 20:12:50.462969 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:20161] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "aaQtQhRjCrA8qWBjgG8PfAAAAkY"]
[Sun Mar 01 20:12:50.954382 2026] [:error] [pid 7165:tid 7185] [client 52.138.3.9:20343] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaQtQhRjCrA8qWBjgG8PgAAAAlI"]
[Sun Mar 01 20:12:51.375098 2026] [:error] [pid 38241:tid 38249] [client 52.138.3.9:20183] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaQtQ_KRPk6YnJBxw_z0uwAAAMU"]
[Sun Mar 01 20:12:51.790974 2026] [:error] [pid 38241:tid 38256] [client 52.138.3.9:20171] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaQtQ_KRPk6YnJBxw_z0vQAAAMw"]
[Sun Mar 01 20:12:52.256938 2026] [:error] [pid 33822:tid 33844] [client 52.138.3.9:20101] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aaQtRG6W3ygu1YVssuYQBgAAApQ"]
[Sun Mar 01 20:12:52.692231 2026] [:error] [pid 7133:tid 7141] [client 52.138.3.9:20222] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaQtRPCtubh8pR64qB8t5QAAAEY"]
[Sun Mar 01 20:12:53.320044 2026] [:error] [pid 33822:tid 33830] [client 52.138.3.9:20263] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaQtRW6W3ygu1YVssuYQCgAAAoY"]
[Sun Mar 01 20:12:53.960957 2026] [:error] [pid 37032:tid 37058] [client 52.138.3.9:20130] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaQtReu0U4o7eSImsVR26gAAAZg"]
[Sun Mar 01 20:12:54.544415 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:20214] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ac.php"] [unique_id "aaQtRgfBuk03yQKDyqv4GgAAAc4"]
[Sun Mar 01 20:12:55.094488 2026] [:error] [pid 7133:tid 7156] [client 52.138.3.9:20338] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaQtR_Ctubh8pR64qB8t7gAAAFU"]
[Sun Mar 01 20:12:55.521409 2026] [:error] [pid 38034:tid 38040] [client 52.138.3.9:20279] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaQtRwxtfZjwlJok9K8KugAAAQQ"]
[Sun Mar 01 20:12:56.148479 2026] [:error] [pid 7165:tid 7186] [client 52.138.3.9:20180] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaQtSBRjCrA8qWBjgG8PhgAAAlM"]
[Sun Mar 01 20:12:56.649055 2026] [:error] [pid 37032:tid 37057] [client 52.138.3.9:20117] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aaQtSOu0U4o7eSImsVR27QAAAZc"]
[Sun Mar 01 20:12:57.224650 2026] [:error] [pid 33822:tid 33834] [client 52.138.3.9:20169] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aaQtSW6W3ygu1YVssuYQDgAAAoo"]
[Sun Mar 01 20:12:57.744739 2026] [:error] [pid 7133:tid 7144] [client 52.138.3.9:20204] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aaQtSfCtubh8pR64qB8t8wAAAEk"]
[Sun Mar 01 20:12:58.208875 2026] [:error] [pid 7165:tid 7173] [client 52.138.3.9:20226] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aaQtShRjCrA8qWBjgG8PjgAAAkY"]
[Sun Mar 01 20:12:59.010729 2026] [:error] [pid 38241:tid 38253] [client 52.138.3.9:20189] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aaQtS_KRPk6YnJBxw_z0wAAAAMk"]
[Sun Mar 01 20:12:59.580838 2026] [:error] [pid 7133:tid 7151] [client 52.138.3.9:20110] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaQtS_Ctubh8pR64qB8t-AAAAFA"]
[Sun Mar 01 20:13:00.044212 2026] [:error] [pid 7133:tid 7145] [client 52.138.3.9:20166] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaQtTPCtubh8pR64qB8t_AAAAEo"]
[Sun Mar 01 20:13:01.086693 2026] [:error] [pid 7165:tid 7174] [client 52.138.3.9:20107] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaQtTRRjCrA8qWBjgG8PnQAAAkc"]
[Sun Mar 01 20:13:01.820811 2026] [:error] [pid 44644:tid 44671] [client 52.138.3.9:20285] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "aaQtTZ3RJaXMcw3y9V_XKgAAABg"]
[Sun Mar 01 20:13:05.701972 2026] [:error] [pid 41780:tid 41794] [client 52.138.3.9:20207] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaQtUcONkVoocLIqzy0n3QAAA8s"]
[Sun Mar 01 20:13:06.370669 2026] [:error] [pid 41780:tid 41785] [client 52.138.3.9:20121] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaQtUsONkVoocLIqzy0n3gAAA8I"]
[Sun Mar 01 20:13:06.798119 2026] [:error] [pid 44644:tid 44660] [client 52.138.3.9:20056] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaQtUp3RJaXMcw3y9V_XLgAAAA0"]
[Sun Mar 01 20:13:07.219159 2026] [:error] [pid 38034:tid 38051] [client 52.138.3.9:20255] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/az.php"] [unique_id "aaQtUwxtfZjwlJok9K8KxAAAAQ0"]
[Sun Mar 01 20:13:07.787002 2026] [:error] [pid 38241:tid 38259] [client 52.138.3.9:20221] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaQtU_KRPk6YnJBxw_z01gAAAM8"]
[Sun Mar 01 20:13:08.284773 2026] [:error] [pid 38034:tid 38057] [client 52.138.3.9:20184] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaQtVAxtfZjwlJok9K8KyAAAARM"]
[Sun Mar 01 20:13:08.834112 2026] [:error] [pid 33822:tid 33825] [client 52.138.3.9:20118] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaQtVG6W3ygu1YVssuYQFgAAAoE"]
[Sun Mar 01 20:13:09.332022 2026] [:error] [pid 38241:tid 38262] [client 52.138.3.9:20248] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ton.php"] [unique_id "aaQtVfKRPk6YnJBxw_z02gAAANI"]
[Sun Mar 01 20:13:09.902321 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:20100] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaQtVQfBuk03yQKDyqv4NAAAAdU"]
[Sun Mar 01 20:13:10.433356 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:20270] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaQtVgfBuk03yQKDyqv4NwAAAc4"]
[Sun Mar 01 20:13:10.930963 2026] [:error] [pid 7133:tid 7154] [client 52.138.3.9:20281] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaQtVvCtubh8pR64qB8uAwAAAFM"]
[Sun Mar 01 20:13:11.349347 2026] [:error] [pid 38241:tid 38247] [client 52.138.3.9:20212] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "aaQtV_KRPk6YnJBxw_z03QAAAMM"]
[Sun Mar 01 20:13:11.763923 2026] [:error] [pid 7165:tid 7187] [client 52.138.3.9:20219] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aaQtVxRjCrA8qWBjgG8PoQAAAlQ"]
[Sun Mar 01 20:13:12.227452 2026] [:error] [pid 37032:tid 37051] [client 52.138.3.9:20119] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aaQtWOu0U4o7eSImsVR29AAAAZE"]
[Sun Mar 01 20:13:12.908410 2026] [:error] [pid 7165:tid 7190] [client 52.138.3.9:20403] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aaQtWBRjCrA8qWBjgG8PpgAAAlc"]
[Sun Mar 01 20:13:13.649451 2026] [:error] [pid 40750:tid 40765] [client 52.138.3.9:20103] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zfile.php"] [unique_id "aaQtWQfBuk03yQKDyqv4PAAAAcw"]
[Sun Mar 01 20:13:14.218256 2026] [:error] [pid 38241:tid 38263] [client 52.138.3.9:20274] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aaQtWvKRPk6YnJBxw_z05AAAANM"]
[Sun Mar 01 20:13:14.637104 2026] [:error] [pid 7133:tid 7157] [client 52.138.3.9:20045] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aaQtWvCtubh8pR64qB8uCQAAAFY"]
[Sun Mar 01 20:13:15.330121 2026] [:error] [pid 38241:tid 38247] [client 52.138.3.9:20142] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aaQtW_KRPk6YnJBxw_z06wAAAMM"]
[Sun Mar 01 20:13:15.829359 2026] [:error] [pid 38241:tid 38258] [client 52.138.3.9:20155] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "aaQtW_KRPk6YnJBxw_z07wAAAM4"]
[Sun Mar 01 20:13:16.296589 2026] [:error] [pid 38241:tid 38263] [client 52.138.3.9:20127] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/321.php"] [unique_id "aaQtXPKRPk6YnJBxw_z08wAAANM"]
[Sun Mar 01 20:13:17.006142 2026] [:error] [pid 40750:tid 40777] [client 52.138.3.9:20197] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/321.php"] [unique_id "aaQtXQfBuk03yQKDyqv4QAAAAdg"]
[Sun Mar 01 20:13:17.930018 2026] [:error] [pid 40750:tid 40756] [client 52.138.3.9:20201] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/321.php"] [unique_id "aaQtXQfBuk03yQKDyqv4SgAAAcM"]
[Sun Mar 01 20:13:18.473485 2026] [:error] [pid 40750:tid 40754] [client 52.138.3.9:20164] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/321.php"] [unique_id "aaQtXgfBuk03yQKDyqv4TwAAAcE"]
[Sun Mar 01 20:13:18.968883 2026] [:error] [pid 37032:tid 37035] [client 52.138.3.9:20154] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaQtXuu0U4o7eSImsVR29QAAAYE"]
[Sun Mar 01 20:13:19.532370 2026] [:error] [pid 37032:tid 37047] [client 52.138.3.9:20173] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaQtX-u0U4o7eSImsVR2-gAAAY0"]
[Sun Mar 01 20:13:20.188778 2026] [:error] [pid 7165:tid 7189] [client 52.138.3.9:20167] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaQtYBRjCrA8qWBjgG8PsQAAAlY"]
[Sun Mar 01 20:13:20.699248 2026] [:error] [pid 41342:tid 41361] [client 52.138.3.9:20148] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/k.php"] [unique_id "aaQtYI4iJ6RAS5CatDla2gAAAhA"]
[Sun Mar 01 20:13:21.454717 2026] [:error] [pid 38034:tid 38055] [client 52.138.3.9:20114] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ant.php"] [unique_id "aaQtYQxtfZjwlJok9K8KzwAAARE"]
[Sun Mar 01 20:13:22.068084 2026] [:error] [pid 7133:tid 7158] [client 52.138.3.9:20133] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ant.php"] [unique_id "aaQtYvCtubh8pR64qB8uEQAAAFc"]
[Sun Mar 01 20:13:23.194179 2026] [:error] [pid 7133:tid 7144] [client 52.138.3.9:20033] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ant.php"] [unique_id "aaQtY_Ctubh8pR64qB8uGAAAAEk"]
[Sun Mar 01 20:13:30.189683 2026] [:error] [pid 40750:tid 40773] [client 52.138.3.9:20037] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aaQtagfBuk03yQKDyqv4lgAAAdQ"]
[Sun Mar 01 20:13:30.619476 2026] [:error] [pid 37032:tid 37036] [client 52.138.3.9:20216] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aaQtauu0U4o7eSImsVR2_QAAAYI"]
[Sun Mar 01 20:13:31.073467 2026] [:error] [pid 7165:tid 7179] [client 52.138.3.9:20108] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aaQtaxRjCrA8qWBjgG8P3gAAAkw"]
[Sun Mar 01 20:13:31.543207 2026] [:error] [pid 38241:tid 38244] [client 52.138.3.9:20187] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aaQta_KRPk6YnJBxw_z1IwAAAMA"]
[Sun Mar 01 20:13:31.988995 2026] [:error] [pid 7165:tid 7167] [client 52.138.3.9:20102] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaQtaxRjCrA8qWBjgG8P4AAAAkA"]
[Sun Mar 01 20:13:32.442156 2026] [:error] [pid 40750:tid 40776] [client 52.138.3.9:20256] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaQtbAfBuk03yQKDyqv4pAAAAdc"]
[Sun Mar 01 20:13:32.889241 2026] [:error] [pid 7165:tid 7186] [client 52.138.3.9:20199] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaQtbBRjCrA8qWBjgG8P4gAAAlM"]
[Sun Mar 01 20:13:33.302038 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:20038] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaQtbQfBuk03yQKDyqv4qAAAAdU"]
[Sun Mar 01 20:13:33.750890 2026] [:error] [pid 40750:tid 40763] [client 52.138.3.9:20195] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aaQtbQfBuk03yQKDyqv4qwAAAco"]
[Sun Mar 01 20:13:34.190951 2026] [:error] [pid 38034:tid 38040] [client 52.138.3.9:20078] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aaQtbgxtfZjwlJok9K8K1wAAAQQ"]
[Sun Mar 01 20:13:34.628256 2026] [:error] [pid 44644:tid 44662] [client 52.138.3.9:20124] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aaQtbp3RJaXMcw3y9V_XOQAAAA8"]
[Sun Mar 01 20:13:35.107201 2026] [:error] [pid 40750:tid 40776] [client 52.138.3.9:20206] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aaQtbwfBuk03yQKDyqv4sQAAAdc"]
[Sun Mar 01 20:13:35.690841 2026] [:error] [pid 40750:tid 40777] [client 52.138.3.9:20179] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaQtbwfBuk03yQKDyqv4tQAAAdg"]
[Sun Mar 01 20:13:36.111017 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:20220] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaQtcAfBuk03yQKDyqv4uAAAAc4"]
[Sun Mar 01 20:13:36.613226 2026] [:error] [pid 40750:tid 40774] [client 52.138.3.9:20115] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaQtcAfBuk03yQKDyqv4ugAAAdU"]
[Sun Mar 01 20:13:37.112423 2026] [:error] [pid 40750:tid 40753] [client 52.138.3.9:20223] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaQtcQfBuk03yQKDyqv4vgAAAcA"]
[Sun Mar 01 20:13:37.544242 2026] [:error] [pid 40750:tid 40769] [client 52.138.3.9:20137] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQtcQfBuk03yQKDyqv4wgAAAdA"]
[Sun Mar 01 20:13:37.965704 2026] [:error] [pid 40750:tid 40754] [client 52.138.3.9:20065] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQtcQfBuk03yQKDyqv4xAAAAcE"]
[Sun Mar 01 20:13:38.494340 2026] [:error] [pid 38241:tid 38255] [client 52.138.3.9:20181] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQtcvKRPk6YnJBxw_z1KAAAAMs"]
[Sun Mar 01 20:13:38.907472 2026] [:error] [pid 38241:tid 38256] [client 52.138.3.9:20198] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQtcvKRPk6YnJBxw_z1KQAAAMw"]
[Sun Mar 01 20:13:39.444997 2026] [:error] [pid 40750:tid 40775] [client 52.138.3.9:20139] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aaQtcwfBuk03yQKDyqv4ygAAAdY"]
[Sun Mar 01 20:13:39.871890 2026] [:error] [pid 40750:tid 40769] [client 52.138.3.9:20041] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aaQtcwfBuk03yQKDyqv4zwAAAdA"]
[Sun Mar 01 20:13:40.307377 2026] [:error] [pid 33822:tid 33845] [client 52.138.3.9:20126] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aaQtdG6W3ygu1YVssuYQMgAAApU"]
[Sun Mar 01 20:13:40.765252 2026] [:error] [pid 7165:tid 7180] [client 52.138.3.9:20034] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aaQtdBRjCrA8qWBjgG8P7AAAAk0"]
[Sun Mar 01 20:13:41.376828 2026] [:error] [pid 7165:tid 7188] [client 52.138.3.9:20113] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaQtdRRjCrA8qWBjgG8P7wAAAlU"]
[Sun Mar 01 20:13:41.786589 2026] [:error] [pid 7165:tid 7182] [client 52.138.3.9:20068] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaQtdRRjCrA8qWBjgG8P8QAAAk8"]
[Sun Mar 01 20:13:42.200782 2026] [:error] [pid 40750:tid 40767] [client 52.138.3.9:20122] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaQtdgfBuk03yQKDyqv40AAAAc4"]
[Sun Mar 01 20:13:42.614308 2026] [:error] [pid 44644:tid 44660] [client 52.138.3.9:20135] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/520.php"] [unique_id "aaQtdp3RJaXMcw3y9V_XOgAAAA0"]
[Sun Mar 01 20:13:43.023953 2026] [:error] [pid 38241:tid 38245] [client 52.138.3.9:20032] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaQtd_KRPk6YnJBxw_z1MgAAAME"]
[Sun Mar 01 20:13:43.460202 2026] [:error] [pid 7133:tid 7137] [client 52.138.3.9:20146] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaQtd_Ctubh8pR64qB8uWQAAAEI"]
[Sun Mar 01 20:13:43.884295 2026] [:error] [pid 38034:tid 38049] [client 52.138.3.9:20282] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaQtdwxtfZjwlJok9K8K2wAAAQs"]
[Sun Mar 01 20:13:44.364562 2026] [:error] [pid 40750:tid 40777] [client 52.138.3.9:20150] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/security.php"] [unique_id "aaQteAfBuk03yQKDyqv42AAAAdg"]
[Sun Mar 01 20:13:44.795123 2026] [:error] [pid 37032:tid 37041] [client 52.138.3.9:20136] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaQteOu0U4o7eSImsVR3AAAAAYc"]
[Sun Mar 01 20:13:45.252617 2026] [:error] [pid 37032:tid 37035] [client 52.138.3.9:20076] [client 52.138.3.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaQteeu0U4o7eSImsVR3AQAAAYE"]
[Sun Mar 01 20:13:45.681470 2026] [:error] [pid 7165:tid 7172] [client 52.138.3.9:19985] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaQteRRjCrA8qWBjgG8P9wAAAkU"]
[Sun Mar 01 20:13:46.141696 2026] [:error] [pid 7165:tid 7189] [client 52.138.3.9:19974] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaQtehRjCrA8qWBjgG8P-AAAAlY"]
[Sun Mar 01 20:13:46.561622 2026] [:error] [pid 38241:tid 38254] [client 52.138.3.9:20053] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaQtevKRPk6YnJBxw_z1NwAAAMo"]
[Sun Mar 01 20:13:46.987001 2026] [:error] [pid 41342:tid 41358] [client 52.138.3.9:20157] [client 52.138.3.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaQteo4iJ6RAS5CatDla5AAAAg0"]
[Sun Mar 01 20:42:13.047536 2026] [:error] [pid 7133:tid 7152] [client 125.75.66.97:40930] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaQ0JfCtubh8pR64qB83kAAAAFE"]
[Sun Mar 01 20:47:08.179417 2026] [:error] [pid 40750:tid 40756] [client 20.220.162.180:49290] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQ1TAfBuk03yQKDyqsYyQAAAcM"]
[Sun Mar 01 20:47:09.043982 2026] [:error] [pid 40750:tid 40759] [client 20.220.162.180:4426] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQ1TQfBuk03yQKDyqsYzgAAAcY"]
[Sun Mar 01 20:47:09.921331 2026] [:error] [pid 40750:tid 40772] [client 20.220.162.180:50805] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQ1TQfBuk03yQKDyqsY1AAAAdM"]
[Sun Mar 01 20:47:10.802097 2026] [:error] [pid 7165:tid 7190] [client 20.220.162.180:4460] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQ1ThRjCrA8qWBjgG8lOQAAAlc"]
[Sun Mar 01 20:53:19.682026 2026] [:error] [pid 40750:tid 40760] [client 162.201.42.43:58303] [client 162.201.42.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 162.201.42.43, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQ2vwfBuk03yQKDyqsfigAAAcc"]
[Sun Mar 01 21:09:18.777905 2026] [:error] [pid 38241:tid 38267] [client 84.15.223.37:2201] [client 84.15.223.37] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.15.223.37, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQ6fvKRPk6YnJBxw_wObQAAANc"]
[Sun Mar 01 21:45:35.272195 2026] [:error] [pid 38241:tid 38264] [client 43.164.195.17:33172] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaRC__KRPk6YnJBxw_wg7AAAANQ"]
[Sun Mar 01 21:58:16.520598 2026] [:error] [pid 7165:tid 7175] [client 40.85.219.62:9211] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaRF-BRjCrA8qWBjgG9gFgAAAkg"]
[Sun Mar 01 21:58:17.357956 2026] [:error] [pid 41342:tid 41347] [client 40.85.219.62:9180] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaRF-Y4iJ6RAS5CatDlhMQAAAgI"]
[Sun Mar 01 21:58:18.189435 2026] [:error] [pid 7165:tid 7169] [client 40.85.219.62:8837] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaRF-hRjCrA8qWBjgG9gMwAAAkI"]
[Sun Mar 01 21:58:19.015010 2026] [:error] [pid 33822:tid 33844] [client 40.85.219.62:8844] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aaRF-26W3ygu1YVssuYo3gAAApQ"]
[Sun Mar 01 23:00:07.120732 2026] [:error] [pid 40750:tid 40767] [client 20.63.80.2:3018] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRUdwfBuk03yQKDyquKPwAAAc4"]
[Sun Mar 01 23:00:07.940671 2026] [:error] [pid 37032:tid 37039] [client 20.63.80.2:3039] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRUd-u0U4o7eSImsVSPyAAAAYU"]
[Sun Mar 01 23:00:08.764274 2026] [:error] [pid 7165:tid 7177] [client 20.63.80.2:2642] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRUeBRjCrA8qWBjgG-cPAAAAko"]
[Sun Mar 01 23:00:09.591371 2026] [:error] [pid 40750:tid 40758] [client 20.63.80.2:3037] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRUeQfBuk03yQKDyquKRgAAAcU"]
[Sun Mar 01 23:11:26.338173 2026] [:error] [pid 38034:tid 38061] [client 20.89.58.13:23586] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaRXHgxtfZjwlJok9K8s6gAAARc"]
[Sun Mar 01 23:11:26.927105 2026] [:error] [pid 38241:tid 38257] [client 20.89.58.13:21817] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaRXHvKRPk6YnJBxw_xJSwAAAM0"]
[Sun Mar 01 23:11:27.419019 2026] [:error] [pid 7165:tid 7185] [client 20.89.58.13:21822] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaRXHxRjCrA8qWBjgG-oGgAAAlI"]
[Sun Mar 01 23:11:27.919675 2026] [:error] [pid 7165:tid 7182] [client 20.89.58.13:19384] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aaRXHxRjCrA8qWBjgG-oHgAAAk8"]
[Sun Mar 01 23:26:28.006113 2026] [:error] [pid 40750:tid 40766] [client 144.91.119.214:64500] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaRapAfBuk03yQKDyqub9wAAAc0"], referer: https://www.reddit.com/
[Sun Mar 01 23:26:28.694247 2026] [:error] [pid 41780:tid 41803] [client 144.91.119.214:65379] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaRapMONkVoocLIqzy028gAAA9Q"], referer: https://wordpress.org/
[Sun Mar 01 23:26:29.035530 2026] [:error] [pid 40750:tid 40769] [client 144.91.119.214:64500] [client 144.91.119.214] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 144.91.119.214, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaRapQfBuk03yQKDyqub-QAAAdA"], referer: https://wordpress.org/
[Sun Mar 01 23:37:49.795258 2026] [:error] [pid 38241:tid 38251] [client 20.53.240.38:19510] [client 20.53.240.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRdTfKRPk6YnJBxw_xV4QAAAMc"]
[Sun Mar 01 23:37:49.858560 2026] [:error] [pid 7165:tid 7178] [client 20.53.240.38:19329] [client 20.53.240.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRdTRRjCrA8qWBjgG_DHgAAAks"]
[Sun Mar 01 23:37:49.971819 2026] [:error] [pid 38241:tid 38259] [client 20.53.240.38:19383] [client 20.53.240.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRdTfKRPk6YnJBxw_xV5AAAAM8"]
[Sun Mar 01 23:37:50.034329 2026] [:error] [pid 7165:tid 7173] [client 20.53.240.38:20097] [client 20.53.240.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRdThRjCrA8qWBjgG_DIQAAAkY"]
[Sun Mar 01 23:52:36.146203 2026] [:error] [pid 38034:tid 38045] [client 20.63.210.169:2589] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaRgxAxtfZjwlJok9K82PQAAAQc"]
[Sun Mar 01 23:52:36.626536 2026] [:error] [pid 7165:tid 7190] [client 20.63.210.169:15568] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaRgxBRjCrA8qWBjgG_PugAAAlc"]
[Sun Mar 01 23:52:37.124109 2026] [:error] [pid 7165:tid 7185] [client 20.63.210.169:15584] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaRgxRRjCrA8qWBjgG_PvAAAAlI"]
[Sun Mar 01 23:52:37.603158 2026] [:error] [pid 37032:tid 37053] [client 20.63.210.169:15608] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aaRgxeu0U4o7eSImsVSXgAAAAZM"]
[Mon Mar 02 00:05:16.880295 2026] [:error] [pid 7133:tid 7144] [client 43.167.236.228:33570] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaRjvPCtubh8pR64qB-DgQAAAEk"]
[Mon Mar 02 00:14:39.194446 2026] [:error] [pid 38241:tid 38255] [client 35.84.207.10:50620] [client 35.84.207.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.84.207.10, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRl7_KRPk6YnJBxw_xmGAAAAMs"]
[Mon Mar 02 00:14:41.390418 2026] [:error] [pid 38241:tid 38246] [client 35.84.207.10:50620] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaRl8fKRPk6YnJBxw_xmKwAAAMI"]
[Mon Mar 02 00:14:42.117851 2026] [:error] [pid 38241:tid 38252] [client 35.84.207.10:58523] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaRl8vKRPk6YnJBxw_xmMQAAAMg"]
[Mon Mar 02 00:14:42.845013 2026] [:error] [pid 38241:tid 38262] [client 35.84.207.10:60994] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaRl8vKRPk6YnJBxw_xmNQAAANI"]
[Mon Mar 02 00:14:43.568272 2026] [:error] [pid 38241:tid 38250] [client 35.84.207.10:52096] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaRl8_KRPk6YnJBxw_xmPQAAAMY"]
[Mon Mar 02 00:14:44.302836 2026] [:error] [pid 38241:tid 38244] [client 35.84.207.10:57116] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaRl9PKRPk6YnJBxw_xmPgAAAMA"]
[Mon Mar 02 00:14:45.031167 2026] [:error] [pid 38241:tid 38253] [client 35.84.207.10:62256] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaRl9fKRPk6YnJBxw_xmQAAAAMk"]
[Mon Mar 02 00:14:47.312310 2026] [:error] [pid 38241:tid 38248] [client 35.84.207.10:57207] [client 35.84.207.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaRl9_KRPk6YnJBxw_xmSAAAAMQ"]
[Mon Mar 02 00:18:54.188878 2026] [:error] [pid 40750:tid 40765] [client 20.220.162.180:45017] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaRm7gfBuk03yQKDyqu-TgAAAcw"]
[Mon Mar 02 00:18:55.025863 2026] [:error] [pid 40750:tid 40764] [client 20.220.162.180:47694] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaRm7wfBuk03yQKDyqu-UgAAAcs"]
[Mon Mar 02 00:18:55.856490 2026] [:error] [pid 38241:tid 38257] [client 20.220.162.180:46725] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaRm7_KRPk6YnJBxw_xoEQAAAM0"]
[Mon Mar 02 00:18:56.681014 2026] [:error] [pid 33822:tid 33831] [client 20.220.162.180:47708] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaRm8G6W3ygu1YVssuZO9QAAAoc"]
[Mon Mar 02 01:58:35.294687 2026] [:error] [pid 26940:tid 26948] [client 20.63.80.2:2825] [client 20.63.80.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.80.2, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaR-SxrUg-j5GLDtRFnBNgAAAEQ"]
[Mon Mar 02 01:58:36.170081 2026] [:error] [pid 26940:tid 26944] [client 20.63.80.2:2825] [client 20.63.80.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.80.2, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaR-TBrUg-j5GLDtRFnBQQAAAEA"]
[Mon Mar 02 01:58:36.622357 2026] [:error] [pid 26940:tid 26966] [client 20.63.80.2:2825] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaR-TBrUg-j5GLDtRFnBSwAAAFY"]
[Mon Mar 02 01:58:37.462603 2026] [:error] [pid 53585:tid 53609] [client 20.63.80.2:2180] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaR-TXbCvYsvu6kKhM2vZwAAABU"]
[Mon Mar 02 01:58:38.295655 2026] [:error] [pid 53181:tid 53515] [client 20.63.80.2:2831] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaR-Tor_0T1SazTrJOBD9AAAAQE"]
[Mon Mar 02 01:58:39.149271 2026] [:error] [pid 53182:tid 53546] [client 20.63.80.2:2176] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaR-T_v073cA6eM1YCTZ8gAAAMM"]
[Mon Mar 02 02:25:33.066599 2026] [:error] [pid 26940:tid 26958] [client 20.205.226.191:17219] [client 20.205.226.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.205.226.191, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaSEnRrUg-j5GLDtRFnrbgAAAE4"]
[Mon Mar 02 02:25:33.834481 2026] [:error] [pid 26940:tid 26960] [client 20.205.226.191:17219] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSEnRrUg-j5GLDtRFnrgAAAAFA"]
[Mon Mar 02 02:25:34.185336 2026] [:error] [pid 26940:tid 26949] [client 20.205.226.191:17242] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSEnhrUg-j5GLDtRFnriwAAAEU"]
[Mon Mar 02 02:25:34.536905 2026] [:error] [pid 26940:tid 26958] [client 20.205.226.191:23617] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSEnhrUg-j5GLDtRFnrlAAAAE4"]
[Mon Mar 02 02:25:34.892809 2026] [:error] [pid 53180:tid 53466] [client 20.205.226.191:23637] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSEnjPPJpDOBvYnaa1pywAAAZY"]
[Mon Mar 02 03:35:41.909136 2026] [autoindex:error] [pid 26940:tid 26964] [client 161.97.112.146:60220] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Mar 02 04:19:42.710289 2026] [:error] [pid 28794:tid 28843] [client 146.190.117.220:62343] [client 146.190.117.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.117.220, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaSfXqVy2qpaelbUob3nFAAAAEc"]
[Mon Mar 02 04:19:47.594118 2026] [:error] [pid 28908:tid 28912] [client 146.190.117.220:63533] [client 146.190.117.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.117.220, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaSfY4qJmC8ih_lQQnC0awAAAMI"]
[Mon Mar 02 04:41:09.041470 2026] [:error] [pid 28794:tid 28848] [client 43.157.82.252:52526] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaSkZaVy2qpaelbUob3wtQAAAEw"]
[Mon Mar 02 06:23:00.422816 2026] [:error] [pid 28793:tid 28819] [client 154.47.31.5:38566] [client 154.47.31.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.47.31.5, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaS8RA2_fxBANaHo1f4TEgAAAAw"]
[Mon Mar 02 06:23:02.340456 2026] [:error] [pid 28793:tid 28815] [client 154.47.31.5:38566] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaS8Rg2_fxBANaHo1f4TJQAAAAg"]
[Mon Mar 02 06:23:02.959500 2026] [:error] [pid 31257:tid 31271] [client 154.47.31.5:38042] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaS8Rv-JFLfishX45N9ZQgAAAQg"]
[Mon Mar 02 06:23:03.587811 2026] [:error] [pid 28908:tid 28931] [client 154.47.31.5:38054] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaS8R4qJmC8ih_lQQnAmLQAAANU"]
[Mon Mar 02 06:23:04.208098 2026] [:error] [pid 28908:tid 28930] [client 154.47.31.5:38056] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaS8SIqJmC8ih_lQQnAmNwAAANQ"]
[Mon Mar 02 06:23:04.829684 2026] [:error] [pid 28908:tid 28933] [client 154.47.31.5:38064] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaS8SIqJmC8ih_lQQnAmOQAAANc"]
[Mon Mar 02 06:23:05.453025 2026] [:error] [pid 31257:tid 31272] [client 154.47.31.5:38074] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaS8Sf-JFLfishX45N9ZRgAAAQk"]
[Mon Mar 02 06:23:06.074212 2026] [:error] [pid 28908:tid 28931] [client 154.47.31.5:38080] [client 154.47.31.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaS8SoqJmC8ih_lQQnAmRAAAANU"]
[Mon Mar 02 07:06:43.961189 2026] [:error] [pid 28795:tid 28875] [client 43.155.27.244:59500] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaTGg7ROd53wZBkdI_dQzQAAAIw"]
[Mon Mar 02 07:39:44.110120 2026] [autoindex:error] [pid 28794:tid 28858] [client 20.63.210.169:21519] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 07:39:45.730946 2026] [:error] [pid 28794:tid 28859] [client 20.63.210.169:21519] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaTOQaVy2qpaelbUob1AMgAAAFc"]
[Mon Mar 02 07:39:46.225123 2026] [:error] [pid 31257:tid 31281] [client 20.63.210.169:9217] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaTOQv-JFLfishX45N-bggAAARI"]
[Mon Mar 02 07:39:46.715327 2026] [:error] [pid 28908:tid 28916] [client 20.63.210.169:9224] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaTOQoqJmC8ih_lQQnCQrQAAAMY"]
[Mon Mar 02 07:39:47.204910 2026] [:error] [pid 31257:tid 31285] [client 20.63.210.169:10896] [client 20.63.210.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaTOQ_-JFLfishX45N-bhQAAARY"]
[Mon Mar 02 09:39:48.319003 2026] [:error] [pid 31257:tid 31283] [client 20.104.206.150:61474] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configss.php"] [unique_id "aaTqZP-JFLfishX45N8EygAAARQ"]
[Mon Mar 02 09:39:48.730511 2026] [:error] [pid 31257:tid 31274] [client 20.104.206.150:62023] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configss.php"] [unique_id "aaTqZP-JFLfishX45N8EzAAAAQs"]
[Mon Mar 02 09:39:49.140175 2026] [:error] [pid 31257:tid 31272] [client 20.104.206.150:53511] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configss.php"] [unique_id "aaTqZf-JFLfishX45N8EzwAAAQk"]
[Mon Mar 02 09:39:49.563742 2026] [:error] [pid 31257:tid 31271] [client 20.104.206.150:51663] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configss.php"] [unique_id "aaTqZf-JFLfishX45N8E0wAAAQg"]
[Mon Mar 02 09:39:49.992879 2026] [:error] [pid 21575:tid 21585] [client 20.104.206.150:62064] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aaTqZSrocdArcJqFfImT4gAAAUY"]
[Mon Mar 02 09:39:50.409618 2026] [:error] [pid 23872:tid 23887] [client 20.104.206.150:62056] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aaTqZkzkQFuA2qBk8UN7lgAAAYw"]
[Mon Mar 02 09:39:50.834332 2026] [:error] [pid 28795:tid 28883] [client 20.104.206.150:44101] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aaTqZrROd53wZBkdI_earAAAAJQ"]
[Mon Mar 02 09:39:51.296578 2026] [:error] [pid 23872:tid 23882] [client 20.104.206.150:61456] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "aaTqZ0zkQFuA2qBk8UN7mwAAAYc"]
[Mon Mar 02 09:39:51.742571 2026] [:error] [pid 23872:tid 23885] [client 20.104.206.150:61478] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.phpa"] [unique_id "aaTqZ0zkQFuA2qBk8UN7nQAAAYo"]
[Mon Mar 02 09:39:52.158539 2026] [:error] [pid 21575:tid 21589] [client 20.104.206.150:61477] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.phpa"] [unique_id "aaTqaCrocdArcJqFfImT5AAAAUo"]
[Mon Mar 02 09:39:52.580521 2026] [:error] [pid 23872:tid 23881] [client 20.104.206.150:44102] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.phpa"] [unique_id "aaTqaEzkQFuA2qBk8UN7ogAAAYY"]
[Mon Mar 02 09:39:53.021790 2026] [:error] [pid 28908:tid 28927] [client 20.104.206.150:53518] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.phpa"] [unique_id "aaTqaYqJmC8ih_lQQnDu9AAAANE"]
[Mon Mar 02 09:39:53.463852 2026] [:error] [pid 23872:tid 23890] [client 20.104.206.150:61442] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/defaults.php"] [unique_id "aaTqaUzkQFuA2qBk8UN7qAAAAY8"]
[Mon Mar 02 09:39:53.895662 2026] [:error] [pid 23872:tid 23894] [client 20.104.206.150:61499] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/defaults.php"] [unique_id "aaTqaUzkQFuA2qBk8UN7qwAAAZM"]
[Mon Mar 02 09:39:54.342946 2026] [:error] [pid 23872:tid 23896] [client 20.104.206.150:62036] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/defaults.php"] [unique_id "aaTqakzkQFuA2qBk8UN7rgAAAZU"]
[Mon Mar 02 09:39:54.783074 2026] [:error] [pid 23872:tid 23891] [client 20.104.206.150:51652] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/defaults.php"] [unique_id "aaTqakzkQFuA2qBk8UN7sQAAAZA"]
[Mon Mar 02 09:39:55.221632 2026] [:error] [pid 23872:tid 23888] [client 20.104.206.150:44100] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/im.php"] [unique_id "aaTqa0zkQFuA2qBk8UN7twAAAY0"]
[Mon Mar 02 09:39:55.655814 2026] [:error] [pid 28908:tid 28915] [client 20.104.206.150:53527] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/im.php"] [unique_id "aaTqa4qJmC8ih_lQQnDu9QAAAMU"]
[Mon Mar 02 09:39:56.079014 2026] [:error] [pid 28794:tid 28837] [client 20.104.206.150:44140] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/im.php"] [unique_id "aaTqbKVy2qpaelbUob1nhgAAAEE"]
[Mon Mar 02 09:39:56.555630 2026] [:error] [pid 28794:tid 28854] [client 20.104.206.150:61445] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/im.php"] [unique_id "aaTqbKVy2qpaelbUob1nhwAAAFI"]
[Mon Mar 02 09:39:56.984421 2026] [:error] [pid 23872:tid 23896] [client 20.104.206.150:53552] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaTqbEzkQFuA2qBk8UN7vwAAAZU"]
[Mon Mar 02 09:39:57.419175 2026] [:error] [pid 23872:tid 23899] [client 20.104.206.150:62075] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaTqbUzkQFuA2qBk8UN7wQAAAZg"]
[Mon Mar 02 09:39:57.842513 2026] [:error] [pid 23872:tid 23889] [client 20.104.206.150:62016] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaTqbUzkQFuA2qBk8UN7wgAAAY4"]
[Mon Mar 02 09:39:58.257247 2026] [:error] [pid 23872:tid 23888] [client 20.104.206.150:53565] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaTqbkzkQFuA2qBk8UN7xQAAAY0"]
[Mon Mar 02 09:39:58.673648 2026] [:error] [pid 28793:tid 28823] [client 20.104.206.150:53566] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache-compat.php"] [unique_id "aaTqbg2_fxBANaHo1f5LUgAAABA"]
[Mon Mar 02 09:39:59.107493 2026] [:error] [pid 21575:tid 21596] [client 20.104.206.150:53527] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache-compat.php"] [unique_id "aaTqbyrocdArcJqFfImT6wAAAVE"]
[Mon Mar 02 09:39:59.543645 2026] [:error] [pid 28795:tid 28876] [client 20.104.206.150:62061] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache-compat.php"] [unique_id "aaTqb7ROd53wZBkdI_eatQAAAI0"]
[Mon Mar 02 09:39:59.956865 2026] [:error] [pid 23872:tid 23883] [client 20.104.206.150:62052] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache-compat.php"] [unique_id "aaTqb0zkQFuA2qBk8UN72AAAAYg"]
[Mon Mar 02 09:40:00.376167 2026] [:error] [pid 23872:tid 23892] [client 20.104.206.150:61493] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aaTqcEzkQFuA2qBk8UN74AAAAZE"]
[Mon Mar 02 09:40:00.787402 2026] [:error] [pid 23872:tid 23876] [client 20.104.206.150:44128] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aaTqcEzkQFuA2qBk8UN74wAAAYE"]
[Mon Mar 02 09:40:01.207551 2026] [:error] [pid 23872:tid 23883] [client 20.104.206.150:61483] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aaTqcUzkQFuA2qBk8UN75AAAAYg"]
[Mon Mar 02 09:40:01.627663 2026] [:error] [pid 28793:tid 28828] [client 20.104.206.150:44136] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw.php"] [unique_id "aaTqcQ2_fxBANaHo1f5LVQAAABU"]
[Mon Mar 02 09:40:02.041233 2026] [:error] [pid 21575:tid 21581] [client 20.104.206.150:62043] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berlin.php"] [unique_id "aaTqcirocdArcJqFfImT7wAAAUI"]
[Mon Mar 02 09:40:02.457987 2026] [:error] [pid 28794:tid 28840] [client 20.104.206.150:62034] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berlin.php"] [unique_id "aaTqcqVy2qpaelbUob1njwAAAEQ"]
[Mon Mar 02 09:40:02.873447 2026] [:error] [pid 21575:tid 21592] [client 20.104.206.150:53535] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berlin.php"] [unique_id "aaTqcirocdArcJqFfImT8wAAAU0"]
[Mon Mar 02 09:40:03.284733 2026] [:error] [pid 28795:tid 28864] [client 20.104.206.150:51676] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berlin.php"] [unique_id "aaTqc7ROd53wZBkdI_eauAAAAIE"]
[Mon Mar 02 09:40:03.712381 2026] [:error] [pid 23872:tid 23882] [client 20.104.206.150:44099] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aaTqc0zkQFuA2qBk8UN76AAAAYc"]
[Mon Mar 02 09:40:04.127952 2026] [:error] [pid 23872:tid 23889] [client 20.104.206.150:61471] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aaTqdEzkQFuA2qBk8UN76gAAAY4"]
[Mon Mar 02 09:40:04.543858 2026] [:error] [pid 28795:tid 28874] [client 20.104.206.150:51661] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aaTqdLROd53wZBkdI_eauQAAAIs"]
[Mon Mar 02 09:40:04.958562 2026] [:error] [pid 28795:tid 28871] [client 20.104.206.150:62018] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abe.php"] [unique_id "aaTqdLROd53wZBkdI_eauwAAAIg"]
[Mon Mar 02 09:40:05.381965 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:61488] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/otuz1.php"] [unique_id "aaTqdUzkQFuA2qBk8UN77gAAAZQ"]
[Mon Mar 02 09:40:05.793147 2026] [:error] [pid 31257:tid 31287] [client 20.104.206.150:62032] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/otuz1.php"] [unique_id "aaTqdf-JFLfishX45N8E2wAAARg"]
[Mon Mar 02 09:40:06.230176 2026] [:error] [pid 31257:tid 31267] [client 20.104.206.150:53546] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/otuz1.php"] [unique_id "aaTqdv-JFLfishX45N8E3AAAAQQ"]
[Mon Mar 02 09:40:06.652926 2026] [:error] [pid 28908:tid 28911] [client 20.104.206.150:61466] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/otuz1.php"] [unique_id "aaTqdoqJmC8ih_lQQnDu_AAAAME"]
[Mon Mar 02 09:40:07.067278 2026] [:error] [pid 23872:tid 23886] [client 20.104.206.150:62069] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-files.php"] [unique_id "aaTqd0zkQFuA2qBk8UN8AgAAAYs"]
[Mon Mar 02 09:40:07.483115 2026] [:error] [pid 28908:tid 28928] [client 20.104.206.150:51653] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-files.php"] [unique_id "aaTqd4qJmC8ih_lQQnDvAAAAANI"]
[Mon Mar 02 09:40:07.901471 2026] [:error] [pid 23872:tid 23884] [client 20.104.206.150:53567] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-files.php"] [unique_id "aaTqd0zkQFuA2qBk8UN8DQAAAYk"]
[Mon Mar 02 09:40:08.326755 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:51675] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-files.php"] [unique_id "aaTqeEzkQFuA2qBk8UN8FQAAAZQ"]
[Mon Mar 02 09:40:08.743600 2026] [:error] [pid 23872:tid 23882] [client 20.104.206.150:62058] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj.php"] [unique_id "aaTqeEzkQFuA2qBk8UN8GwAAAYc"]
[Mon Mar 02 09:40:09.168934 2026] [:error] [pid 23872:tid 23899] [client 20.104.206.150:51675] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj.php"] [unique_id "aaTqeUzkQFuA2qBk8UN8IgAAAZg"]
[Mon Mar 02 09:40:09.586091 2026] [:error] [pid 28908:tid 28917] [client 20.104.206.150:61451] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj.php"] [unique_id "aaTqeYqJmC8ih_lQQnDvBAAAAMc"]
[Mon Mar 02 09:40:10.001146 2026] [:error] [pid 31257:tid 31273] [client 20.104.206.150:18802] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj.php"] [unique_id "aaTqev-JFLfishX45N8E3wAAAQo"]
[Mon Mar 02 09:40:10.442588 2026] [:error] [pid 23872:tid 23892] [client 20.104.206.150:51657] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/he.php"] [unique_id "aaTqekzkQFuA2qBk8UN8KgAAAZE"]
[Mon Mar 02 09:40:10.859820 2026] [:error] [pid 21575:tid 21587] [client 20.104.206.150:44158] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/he.php"] [unique_id "aaTqeirocdArcJqFfImT-wAAAUg"]
[Mon Mar 02 09:40:11.280194 2026] [:error] [pid 23872:tid 23878] [client 20.104.206.150:61454] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/he.php"] [unique_id "aaTqe0zkQFuA2qBk8UN8KwAAAYM"]
[Mon Mar 02 09:40:11.702174 2026] [:error] [pid 28794:tid 28853] [client 20.104.206.150:62068] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/he.php"] [unique_id "aaTqe6Vy2qpaelbUob1nmgAAAFE"]
[Mon Mar 02 09:40:12.112711 2026] [:error] [pid 23872:tid 23875] [client 20.104.206.150:44119] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aaTqfEzkQFuA2qBk8UN8LwAAAYA"]
[Mon Mar 02 09:40:12.545519 2026] [:error] [pid 28908:tid 28924] [client 20.104.206.150:44148] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aaTqfIqJmC8ih_lQQnDvCwAAAM4"]
[Mon Mar 02 09:40:12.958776 2026] [:error] [pid 23872:tid 23887] [client 20.104.206.150:53523] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aaTqfEzkQFuA2qBk8UN8MgAAAYw"]
[Mon Mar 02 09:40:13.377295 2026] [:error] [pid 28795:tid 28885] [client 20.104.206.150:51670] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cache.php"] [unique_id "aaTqfbROd53wZBkdI_eawAAAAJY"]
[Mon Mar 02 09:40:13.804126 2026] [:error] [pid 23872:tid 23892] [client 20.104.206.150:53005] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aaTqfUzkQFuA2qBk8UN8NQAAAZE"]
[Mon Mar 02 09:40:14.214504 2026] [:error] [pid 28793:tid 28826] [client 20.104.206.150:51654] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aaTqfg2_fxBANaHo1f5LWwAAABM"]
[Mon Mar 02 09:40:14.628617 2026] [:error] [pid 23872:tid 23898] [client 20.104.206.150:61465] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aaTqfkzkQFuA2qBk8UN8OQAAAZc"]
[Mon Mar 02 09:40:15.042880 2026] [:error] [pid 31257:tid 31264] [client 20.104.206.150:51678] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aaTqf_-JFLfishX45N8E5wAAAQE"]
[Mon Mar 02 09:40:15.469450 2026] [:error] [pid 28795:tid 28874] [client 20.104.206.150:53558] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aaTqf7ROd53wZBkdI_eaxgAAAIs"]
[Mon Mar 02 09:40:15.880452 2026] [:error] [pid 28794:tid 28841] [client 20.104.206.150:62078] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog.php"] [unique_id "aaTqf6Vy2qpaelbUob1nnAAAAEU"]
[Mon Mar 02 09:40:16.310353 2026] [:error] [pid 28794:tid 28843] [client 20.104.206.150:53540] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog.php"] [unique_id "aaTqgKVy2qpaelbUob1nnQAAAEc"]
[Mon Mar 02 09:40:16.720979 2026] [:error] [pid 31257:tid 31276] [client 20.104.206.150:62035] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog.php"] [unique_id "aaTqgP-JFLfishX45N8E7gAAAQ0"]
[Mon Mar 02 09:40:17.131458 2026] [:error] [pid 28908:tid 28925] [client 20.104.206.150:44115] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog.php"] [unique_id "aaTqgYqJmC8ih_lQQnDvDwAAAM8"]
[Mon Mar 02 09:40:17.542690 2026] [:error] [pid 28795:tid 28879] [client 20.104.206.150:62047] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php7"] [unique_id "aaTqgbROd53wZBkdI_eayAAAAJA"]
[Mon Mar 02 09:40:17.959293 2026] [:error] [pid 28908:tid 28913] [client 20.104.206.150:53563] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php7"] [unique_id "aaTqgYqJmC8ih_lQQnDvEgAAAMM"]
[Mon Mar 02 09:40:18.377951 2026] [:error] [pid 28908:tid 28930] [client 20.104.206.150:62042] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php7"] [unique_id "aaTqgoqJmC8ih_lQQnDvFgAAANQ"]
[Mon Mar 02 09:40:18.792909 2026] [:error] [pid 28908:tid 28920] [client 20.104.206.150:51671] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfanew.php7"] [unique_id "aaTqgoqJmC8ih_lQQnDvFwAAAMo"]
[Mon Mar 02 09:40:19.216877 2026] [:error] [pid 31257:tid 31270] [client 20.104.206.150:53522] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lufix.php"] [unique_id "aaTqg_-JFLfishX45N8E8QAAAQc"]
[Mon Mar 02 09:40:19.639586 2026] [:error] [pid 31257:tid 31281] [client 20.104.206.150:62073] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lufix.php"] [unique_id "aaTqg_-JFLfishX45N8E9AAAARI"]
[Mon Mar 02 09:40:20.049223 2026] [:error] [pid 28908:tid 28911] [client 20.104.206.150:62030] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lufix.php"] [unique_id "aaTqhIqJmC8ih_lQQnDvGwAAAME"]
[Mon Mar 02 09:40:20.459918 2026] [:error] [pid 28794:tid 28847] [client 20.104.206.150:51684] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lufix.php"] [unique_id "aaTqhKVy2qpaelbUob1nngAAAEs"]
[Mon Mar 02 09:40:20.881111 2026] [:error] [pid 31257:tid 31267] [client 20.104.206.150:53031] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax-actions.php"] [unique_id "aaTqhP-JFLfishX45N8E9wAAAQQ"]
[Mon Mar 02 09:40:21.310468 2026] [:error] [pid 28794:tid 28839] [client 20.104.206.150:62072] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax-actions.php"] [unique_id "aaTqhaVy2qpaelbUob1nnwAAAEM"]
[Mon Mar 02 09:40:21.738784 2026] [:error] [pid 31257:tid 31265] [client 20.104.206.150:62021] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax-actions.php"] [unique_id "aaTqhf-JFLfishX45N8E_QAAAQI"]
[Mon Mar 02 09:40:22.148474 2026] [:error] [pid 31257:tid 31272] [client 20.104.206.150:53000] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax-actions.php"] [unique_id "aaTqhv-JFLfishX45N8FAQAAAQk"]
[Mon Mar 02 09:40:22.583888 2026] [:error] [pid 28908:tid 28916] [client 20.104.206.150:53025] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaTqhoqJmC8ih_lQQnDvIgAAAMY"]
[Mon Mar 02 09:40:23.000794 2026] [:error] [pid 21575:tid 21589] [client 20.104.206.150:51700] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaTqhirocdArcJqFfImUCQAAAUo"]
[Mon Mar 02 09:40:23.434850 2026] [:error] [pid 28908:tid 28932] [client 20.104.206.150:61502] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaTqh4qJmC8ih_lQQnDvJQAAANY"]
[Mon Mar 02 09:40:23.854860 2026] [:error] [pid 31257:tid 31287] [client 20.104.206.150:44151] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaTqh_-JFLfishX45N8FBgAAARg"]
[Mon Mar 02 09:40:24.270692 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:53521] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aaTqiEzkQFuA2qBk8UN8RQAAAZQ"]
[Mon Mar 02 09:40:24.686966 2026] [:error] [pid 31257:tid 31277] [client 20.104.206.150:53538] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aaTqiP-JFLfishX45N8FCQAAAQ4"]
[Mon Mar 02 09:40:25.116362 2026] [:error] [pid 28794:tid 28856] [client 20.104.206.150:53548] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aaTqiaVy2qpaelbUob1noQAAAFQ"]
[Mon Mar 02 09:40:25.544870 2026] [:error] [pid 21575:tid 21579] [client 20.104.206.150:53533] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc.php"] [unique_id "aaTqiSrocdArcJqFfImUDwAAAUA"]
[Mon Mar 02 09:40:25.958483 2026] [:error] [pid 23872:tid 23897] [client 20.104.206.150:44121] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aaTqiUzkQFuA2qBk8UN8SwAAAZY"]
[Mon Mar 02 09:40:26.385907 2026] [:error] [pid 23872:tid 23889] [client 20.104.206.150:61469] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aaTqikzkQFuA2qBk8UN8UAAAAY4"]
[Mon Mar 02 09:40:26.806984 2026] [:error] [pid 23872:tid 23898] [client 20.104.206.150:62028] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aaTqikzkQFuA2qBk8UN8VAAAAZc"]
[Mon Mar 02 09:40:27.244313 2026] [:error] [pid 23872:tid 23888] [client 20.104.206.150:53044] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "aaTqi0zkQFuA2qBk8UN8WgAAAY0"]
[Mon Mar 02 09:40:27.666221 2026] [:error] [pid 23872:tid 23897] [client 20.104.206.150:61452] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/browse.php"] [unique_id "aaTqi0zkQFuA2qBk8UN8XwAAAZY"]
[Mon Mar 02 09:40:28.081584 2026] [:error] [pid 23872:tid 23882] [client 20.104.206.150:44107] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/browse.php"] [unique_id "aaTqjEzkQFuA2qBk8UN8YgAAAYc"]
[Mon Mar 02 09:40:28.497353 2026] [:error] [pid 31257:tid 31267] [client 20.104.206.150:61476] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/browse.php"] [unique_id "aaTqjP-JFLfishX45N8FDQAAAQQ"]
[Mon Mar 02 09:40:28.914346 2026] [:error] [pid 21575:tid 21602] [client 20.104.206.150:53524] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/browse.php"] [unique_id "aaTqjCrocdArcJqFfImUFgAAAVc"]
[Mon Mar 02 09:40:29.329742 2026] [:error] [pid 21575:tid 21580] [client 20.104.206.150:53512] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/license.php"] [unique_id "aaTqjSrocdArcJqFfImUFwAAAUE"]
[Mon Mar 02 09:40:29.749792 2026] [:error] [pid 23872:tid 23898] [client 20.104.206.150:62044] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/license.php"] [unique_id "aaTqjUzkQFuA2qBk8UN8ZwAAAZc"]
[Mon Mar 02 09:40:30.162637 2026] [:error] [pid 23872:tid 23879] [client 20.104.206.150:61492] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/license.php"] [unique_id "aaTqjkzkQFuA2qBk8UN8awAAAYQ"]
[Mon Mar 02 09:40:30.577787 2026] [:error] [pid 23872:tid 23892] [client 20.104.206.150:62025] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/license.php"] [unique_id "aaTqjkzkQFuA2qBk8UN8bQAAAZE"]
[Mon Mar 02 09:40:31.010284 2026] [:error] [pid 23872:tid 23897] [client 20.104.206.150:51680] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contact.php"] [unique_id "aaTqj0zkQFuA2qBk8UN8bwAAAZY"]
[Mon Mar 02 09:40:31.428668 2026] [:error] [pid 28795:tid 28869] [client 20.104.206.150:53047] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contact.php"] [unique_id "aaTqj7ROd53wZBkdI_ea0AAAAIY"]
[Mon Mar 02 09:40:31.845135 2026] [:error] [pid 28908:tid 28913] [client 20.104.206.150:62039] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contact.php"] [unique_id "aaTqj4qJmC8ih_lQQnDvKwAAAMM"]
[Mon Mar 02 09:40:32.255514 2026] [:error] [pid 21575:tid 21579] [client 20.104.206.150:61468] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contact.php"] [unique_id "aaTqkCrocdArcJqFfImUGwAAAUA"]
[Mon Mar 02 09:40:32.664863 2026] [:error] [pid 23872:tid 23878] [client 20.104.206.150:18780] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/minik.php"] [unique_id "aaTqkEzkQFuA2qBk8UN8dAAAAYM"]
[Mon Mar 02 09:40:33.074639 2026] [:error] [pid 23872:tid 23889] [client 20.104.206.150:53039] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/minik.php"] [unique_id "aaTqkUzkQFuA2qBk8UN8dgAAAY4"]
[Mon Mar 02 09:40:33.490005 2026] [:error] [pid 21575:tid 21591] [client 20.104.206.150:44142] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/minik.php"] [unique_id "aaTqkSrocdArcJqFfImUIAAAAUw"]
[Mon Mar 02 09:40:33.909467 2026] [:error] [pid 21575:tid 21586] [client 20.104.206.150:53548] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/minik.php"] [unique_id "aaTqkSrocdArcJqFfImUIgAAAUc"]
[Mon Mar 02 09:40:34.339968 2026] [:error] [pid 31257:tid 31264] [client 20.104.206.150:62048] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/st.php"] [unique_id "aaTqkv-JFLfishX45N8FEQAAAQE"]
[Mon Mar 02 09:40:34.761293 2026] [:error] [pid 23872:tid 23885] [client 20.104.206.150:44159] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/st.php"] [unique_id "aaTqkkzkQFuA2qBk8UN8eQAAAYo"]
[Mon Mar 02 09:40:35.183656 2026] [:error] [pid 21575:tid 21585] [client 20.104.206.150:51664] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/st.php"] [unique_id "aaTqkyrocdArcJqFfImUJAAAAUY"]
[Mon Mar 02 09:40:35.598664 2026] [:error] [pid 23872:tid 23890] [client 20.104.206.150:62040] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/st.php"] [unique_id "aaTqk0zkQFuA2qBk8UN8fwAAAY8"]
[Mon Mar 02 09:40:36.008555 2026] [:error] [pid 23872:tid 23878] [client 20.104.206.150:53525] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upgrade.php"] [unique_id "aaTqlEzkQFuA2qBk8UN8gAAAAYM"]
[Mon Mar 02 09:40:36.420534 2026] [:error] [pid 23872:tid 23899] [client 20.104.206.150:53510] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upgrade.php"] [unique_id "aaTqlEzkQFuA2qBk8UN8hQAAAZg"]
[Mon Mar 02 09:40:36.836059 2026] [:error] [pid 23872:tid 23892] [client 20.104.206.150:51138] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upgrade.php"] [unique_id "aaTqlEzkQFuA2qBk8UN8iAAAAZE"]
[Mon Mar 02 09:40:37.250587 2026] [:error] [pid 23872:tid 23897] [client 20.104.206.150:53560] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upgrade.php"] [unique_id "aaTqlUzkQFuA2qBk8UN8iwAAAZY"]
[Mon Mar 02 09:54:09.593120 2026] [:error] [pid 23872:tid 23889] [client 20.63.41.168:23443] [client 20.63.41.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaTtwUzkQFuA2qBk8UOIZgAAAY4"]
[Mon Mar 02 09:54:16.374687 2026] [:error] [pid 31257:tid 31277] [client 20.63.41.168:23522] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaTtyP-JFLfishX45N8NyQAAAQ4"]
[Mon Mar 02 09:54:17.617626 2026] [:error] [pid 31257:tid 31276] [client 20.63.41.168:23427] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaTtyf-JFLfishX45N8N0wAAAQ0"]
[Mon Mar 02 09:54:20.258132 2026] [:error] [pid 23872:tid 23893] [client 20.63.41.168:23539] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaTtzEzkQFuA2qBk8UOIoAAAAZI"]
[Mon Mar 02 09:54:22.394256 2026] [:error] [pid 23872:tid 23878] [client 20.63.41.168:23435] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaTtzkzkQFuA2qBk8UOIowAAAYM"]
[Mon Mar 02 09:54:23.862155 2026] [:error] [pid 23872:tid 23884] [client 20.63.41.168:23424] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaTtz0zkQFuA2qBk8UOIqwAAAYk"]
[Mon Mar 02 09:54:25.747506 2026] [:error] [pid 23872:tid 23893] [client 20.63.41.168:23527] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaTt0UzkQFuA2qBk8UOIuAAAAZI"]
[Mon Mar 02 09:54:26.550604 2026] [:error] [pid 21575:tid 21592] [client 20.63.41.168:23488] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaTt0irocdArcJqFfImaGAAAAU0"]
[Mon Mar 02 09:54:28.345332 2026] [:error] [pid 21575:tid 21586] [client 20.63.41.168:23516] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaTt1CrocdArcJqFfImaKgAAAUc"]
[Mon Mar 02 09:54:30.605933 2026] [:error] [pid 23872:tid 23884] [client 20.63.41.168:23433] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTt1kzkQFuA2qBk8UOIywAAAYk"]
[Mon Mar 02 09:54:31.421436 2026] [:error] [pid 31257:tid 31283] [client 20.63.41.168:23549] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTt1_-JFLfishX45N8N_gAAARQ"]
[Mon Mar 02 09:54:32.547129 2026] [:error] [pid 28908:tid 28913] [client 20.63.41.168:23448] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTt2IqJmC8ih_lQQnDytQAAAMM"]
[Mon Mar 02 09:54:34.213138 2026] [:error] [pid 28795:tid 28883] [client 20.63.41.168:23548] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTt2rROd53wZBkdI_edkgAAAJQ"]
[Mon Mar 02 09:54:41.993160 2026] [:error] [pid 31257:tid 31277] [client 20.63.41.168:23534] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaTt4f-JFLfishX45N8OHgAAAQ4"]
[Mon Mar 02 09:54:43.486647 2026] [:error] [pid 31257:tid 31270] [client 20.63.41.168:23499] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaTt4_-JFLfishX45N8OJAAAAQc"]
[Mon Mar 02 09:54:44.992987 2026] [:error] [pid 28795:tid 28871] [client 20.63.41.168:23387] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaTt5LROd53wZBkdI_edowAAAIg"]
[Mon Mar 02 09:54:46.637189 2026] [:error] [pid 21575:tid 21593] [client 20.63.41.168:23494] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaTt5irocdArcJqFfImaYQAAAU4"]
[Mon Mar 02 09:54:47.720099 2026] [:error] [pid 23872:tid 23896] [client 20.63.41.168:23478] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaTt50zkQFuA2qBk8UOJHgAAAZU"]
[Mon Mar 02 09:54:48.694762 2026] [:error] [pid 31257:tid 31286] [client 20.63.41.168:23546] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaTt6P-JFLfishX45N8ONQAAARc"]
[Mon Mar 02 09:54:49.769019 2026] [:error] [pid 23872:tid 23889] [client 20.63.41.168:23503] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaTt6UzkQFuA2qBk8UOJIwAAAY4"]
[Mon Mar 02 09:54:51.394865 2026] [:error] [pid 23872:tid 23880] [client 20.63.41.168:23497] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaTt60zkQFuA2qBk8UOJLAAAAYU"]
[Mon Mar 02 09:54:52.930720 2026] [:error] [pid 28795:tid 28866] [client 20.63.41.168:23489] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaTt7LROd53wZBkdI_edrwAAAIM"]
[Mon Mar 02 09:54:54.598916 2026] [:error] [pid 28908:tid 28924] [client 20.63.41.168:23461] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaTt7oqJmC8ih_lQQnDy0gAAAM4"]
[Mon Mar 02 09:54:55.664450 2026] [:error] [pid 28795:tid 28873] [client 20.63.41.168:23373] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaTt77ROd53wZBkdI_edtwAAAIo"]
[Mon Mar 02 09:54:57.006175 2026] [:error] [pid 28908:tid 28926] [client 20.63.41.168:23544] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaTt8YqJmC8ih_lQQnDy3QAAANA"]
[Mon Mar 02 09:54:58.955697 2026] [:error] [pid 28794:tid 28858] [client 20.63.41.168:23493] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaTt8qVy2qpaelbUob1p6AAAAFY"]
[Mon Mar 02 09:54:59.796463 2026] [:error] [pid 23872:tid 23887] [client 20.63.41.168:23439] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaTt80zkQFuA2qBk8UOJPgAAAYw"]
[Mon Mar 02 09:55:03.120502 2026] [:error] [pid 28793:tid 28810] [client 20.63.41.168:23495] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaTt9w2_fxBANaHo1f5NFwAAAAM"]
[Mon Mar 02 09:55:04.814979 2026] [:error] [pid 28795:tid 28877] [client 20.63.41.168:23432] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaTt-LROd53wZBkdI_edxAAAAI4"]
[Mon Mar 02 11:26:13.911832 2026] [:error] [pid 28908:tid 28924] [client 123.252.137.30:55321] [client 123.252.137.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.252.137.30, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaUDVYqJmC8ih_lQQnAi1wAAAM4"]
[Mon Mar 02 11:26:19.068759 2026] [:error] [pid 31257:tid 31282] [client 138.84.74.40:2015] [client 138.84.74.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.84.74.40, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaUDW_-JFLfishX45N9T7wAAARM"]
[Mon Mar 02 11:26:31.151980 2026] [:error] [pid 21575:tid 21603] [client 43.166.130.123:34884] [client 43.166.130.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaUDZyrocdArcJqFfInZfwAAAVg"]
[Mon Mar 02 11:59:26.472520 2026] [:error] [pid 28908:tid 28921] [client 134.149.59.124:12419] [client 134.149.59.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaULHoqJmC8ih_lQQnBKDgAAAMs"]
[Mon Mar 02 11:59:27.598327 2026] [:error] [pid 28908:tid 28918] [client 134.149.59.124:5432] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaULH4qJmC8ih_lQQnBKHAAAAMg"]
[Mon Mar 02 11:59:28.128957 2026] [:error] [pid 21575:tid 21594] [client 134.149.59.124:9964] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaULICrocdArcJqFfIkH2wAAAU8"]
[Mon Mar 02 11:59:28.670121 2026] [:error] [pid 23872:tid 23883] [client 134.149.59.124:13814] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaULIEzkQFuA2qBk8UMEIgAAAYg"]
[Mon Mar 02 11:59:29.217284 2026] [:error] [pid 28794:tid 28853] [client 134.149.59.124:10807] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/acp.php"] [unique_id "aaULIaVy2qpaelbUob2BLQAAAFE"]
[Mon Mar 02 11:59:29.759899 2026] [:error] [pid 31257:tid 31263] [client 134.149.59.124:14197] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaULIf-JFLfishX45N9jAQAAAQA"]
[Mon Mar 02 11:59:30.301629 2026] [:error] [pid 21575:tid 21592] [client 134.149.59.124:6557] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaULIirocdArcJqFfIkH8AAAAU0"]
[Mon Mar 02 11:59:30.834086 2026] [:error] [pid 28908:tid 28924] [client 134.149.59.124:13785] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaULIoqJmC8ih_lQQnBKNwAAAM4"]
[Mon Mar 02 11:59:31.380249 2026] [:error] [pid 28794:tid 28851] [client 134.149.59.124:1067] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aaULI6Vy2qpaelbUob2BMwAAAE8"]
[Mon Mar 02 11:59:31.928586 2026] [:error] [pid 31257:tid 31278] [client 134.149.59.124:13304] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/muzu.php"] [unique_id "aaULI_-JFLfishX45N9jAgAAAQ8"]
[Mon Mar 02 11:59:32.469929 2026] [:error] [pid 21575:tid 21602] [client 134.149.59.124:3115] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaULJCrocdArcJqFfIkH9QAAAVc"]
[Mon Mar 02 11:59:32.982317 2026] [:error] [pid 14466:tid 14490] [client 134.149.59.124:5872] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaULJP8w-ahEIiUSqM5PgwAAAdY"]
[Mon Mar 02 11:59:33.502408 2026] [:error] [pid 21575:tid 21594] [client 134.149.59.124:3085] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaULJSrocdArcJqFfIkH_QAAAU8"]
[Mon Mar 02 11:59:34.016021 2026] [:error] [pid 31257:tid 31284] [client 134.149.59.124:5873] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpo.php"] [unique_id "aaULJv-JFLfishX45N9jCwAAARU"]
[Mon Mar 02 11:59:34.555659 2026] [:error] [pid 23872:tid 23898] [client 134.149.59.124:6550] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "aaULJkzkQFuA2qBk8UMEMQAAAZc"]
[Mon Mar 02 11:59:35.075330 2026] [:error] [pid 14466:tid 14491] [client 134.149.59.124:9943] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "aaULJ_8w-ahEIiUSqM5PhwAAAdc"]
[Mon Mar 02 11:59:35.625790 2026] [:error] [pid 28908:tid 28915] [client 134.149.59.124:15269] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aaULJ4qJmC8ih_lQQnBKTgAAAMU"]
[Mon Mar 02 11:59:36.165053 2026] [:error] [pid 23872:tid 23897] [client 134.149.59.124:13779] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aaULKEzkQFuA2qBk8UMENwAAAZY"]
[Mon Mar 02 11:59:36.665634 2026] [:error] [pid 14466:tid 14487] [client 134.149.59.124:4675] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aaULKP8w-ahEIiUSqM5PiAAAAdM"]
[Mon Mar 02 11:59:37.209970 2026] [:error] [pid 14466:tid 14477] [client 134.149.59.124:13283] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aaULKf8w-ahEIiUSqM5PigAAAck"]
[Mon Mar 02 11:59:37.751704 2026] [:error] [pid 28908:tid 28933] [client 134.149.59.124:1055] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/011i.php"] [unique_id "aaULKYqJmC8ih_lQQnBKWQAAANc"]
[Mon Mar 02 12:19:43.200220 2026] [:error] [pid 31257:tid 31269] [client 146.190.117.220:65321] [client 146.190.117.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.117.220, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaUP3_-JFLfishX45N9s6AAAAQY"]
[Mon Mar 02 12:19:47.781929 2026] [:error] [pid 31257:tid 31277] [client 146.190.117.220:55497] [client 146.190.117.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.117.220, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaUP4_-JFLfishX45N9s-QAAAQ4"]
[Mon Mar 02 12:32:33.338810 2026] [:error] [pid 28908:tid 28933] [client 20.63.41.168:38517] [client 20.63.41.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaUS4YqJmC8ih_lQQnB_VwAAANc"]
[Mon Mar 02 12:32:38.770651 2026] [:error] [pid 21575:tid 21587] [client 20.63.41.168:35959] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaUS5irocdArcJqFfIkxpQAAAUg"]
[Mon Mar 02 12:32:39.989777 2026] [:error] [pid 28908:tid 28911] [client 20.63.41.168:33694] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaUS54qJmC8ih_lQQnB_gwAAAME"]
[Mon Mar 02 12:32:42.363568 2026] [:error] [pid 23872:tid 23898] [client 20.63.41.168:35961] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaUS6kzkQFuA2qBk8UMcNQAAAZc"]
[Mon Mar 02 12:32:42.963279 2026] [:error] [pid 31257:tid 31269] [client 20.63.41.168:39112] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as1337.php"] [unique_id "aaUS6v-JFLfishX45N9yugAAAQY"]
[Mon Mar 02 12:32:47.818254 2026] [:error] [pid 31257:tid 31278] [client 20.63.41.168:36506] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaUS7_-JFLfishX45N9ywwAAAQ8"]
[Mon Mar 02 12:32:48.931738 2026] [:error] [pid 31257:tid 31283] [client 20.63.41.168:37850] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaUS8P-JFLfishX45N9yxgAAARQ"]
[Mon Mar 02 12:32:50.798169 2026] [:error] [pid 31257:tid 31277] [client 20.63.41.168:35921] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaUS8v-JFLfishX45N9yyAAAAQ4"]
[Mon Mar 02 12:32:52.846405 2026] [:error] [pid 23872:tid 23883] [client 20.63.41.168:34776] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "aaUS9EzkQFuA2qBk8UMcfAAAAYg"]
[Mon Mar 02 12:32:54.519808 2026] [:error] [pid 28908:tid 28914] [client 20.63.41.168:37138] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUS9oqJmC8ih_lQQnB_lwAAAMQ"]
[Mon Mar 02 12:32:55.309691 2026] [:error] [pid 21575:tid 21603] [client 20.63.41.168:34777] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUS9yrocdArcJqFfIkx5gAAAVg"]
[Mon Mar 02 12:32:57.252960 2026] [:error] [pid 31257:tid 31273] [client 20.63.41.168:35904] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUS-f-JFLfishX45N9y4wAAAQo"]
[Mon Mar 02 12:32:59.571018 2026] [:error] [pid 28908:tid 28917] [client 20.63.41.168:34802] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUS-4qJmC8ih_lQQnB_ngAAAMc"]
[Mon Mar 02 12:33:00.681101 2026] [:error] [pid 21575:tid 21594] [client 20.63.41.168:35942] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaUS_CrocdArcJqFfIkx9gAAAU8"]
[Mon Mar 02 12:33:01.171684 2026] [:error] [pid 21575:tid 21590] [client 20.63.41.168:36542] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaUS_SrocdArcJqFfIkx-gAAAUs"]
[Mon Mar 02 12:33:01.993853 2026] [:error] [pid 21575:tid 21598] [client 20.63.41.168:37127] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaUS_SrocdArcJqFfIkyAQAAAVM"]
[Mon Mar 02 12:33:02.710236 2026] [:error] [pid 23872:tid 23879] [client 20.63.41.168:42335] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaUS_kzkQFuA2qBk8UMcoQAAAYQ"]
[Mon Mar 02 12:33:03.865784 2026] [:error] [pid 21575:tid 21595] [client 20.63.41.168:40363] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaUS_yrocdArcJqFfIkyAwAAAVA"]
[Mon Mar 02 12:33:04.563321 2026] [:error] [pid 28908:tid 28915] [client 20.63.41.168:40368] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaUTAIqJmC8ih_lQQnB_rQAAAMU"]
[Mon Mar 02 12:33:06.549588 2026] [:error] [pid 23872:tid 23885] [client 20.63.41.168:37826] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaUTAkzkQFuA2qBk8UMcuwAAAYo"]
[Mon Mar 02 12:33:07.533697 2026] [:error] [pid 28908:tid 28912] [client 20.63.41.168:35939] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zeal.php"] [unique_id "aaUTA4qJmC8ih_lQQnB_wwAAAMI"]
[Mon Mar 02 12:33:10.126693 2026] [:error] [pid 14466:tid 14473] [client 20.63.41.168:37164] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaUTBv8w-ahEIiUSqM5cCgAAAcU"]
[Mon Mar 02 12:33:11.306886 2026] [:error] [pid 28908:tid 28911] [client 20.63.41.168:37167] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaUTB4qJmC8ih_lQQnB_2wAAAME"]
[Mon Mar 02 12:33:11.961244 2026] [:error] [pid 28908:tid 28915] [client 20.63.41.168:36510] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaUTB4qJmC8ih_lQQnB_5QAAAMU"]
[Mon Mar 02 12:33:13.048649 2026] [:error] [pid 28908:tid 28925] [client 20.63.41.168:42344] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asf.php"] [unique_id "aaUTCYqJmC8ih_lQQnB_7wAAAM8"]
[Mon Mar 02 12:33:14.261309 2026] [:error] [pid 28908:tid 28922] [client 20.63.41.168:42343] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaUTCoqJmC8ih_lQQnB__wAAAMw"]
[Mon Mar 02 12:33:15.294579 2026] [:error] [pid 21575:tid 21580] [client 20.63.41.168:42301] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaUTCyrocdArcJqFfIkyGwAAAUE"]
[Mon Mar 02 12:33:16.225845 2026] [:error] [pid 28908:tid 28916] [client 20.63.41.168:37180] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaUTDIqJmC8ih_lQQnCABQAAAMY"]
[Mon Mar 02 12:33:17.356787 2026] [:error] [pid 23872:tid 23899] [client 20.63.41.168:40364] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php"] [unique_id "aaUTDUzkQFuA2qBk8UMcwQAAAZg"]
[Mon Mar 02 12:47:07.731934 2026] [:error] [pid 31257:tid 31268] [client 185.200.246.72:61282] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aaUWS_-JFLfishX45N94MAAAAQU"]
[Mon Mar 02 12:47:08.291979 2026] [:error] [pid 23872:tid 23884] [client 185.200.246.72:61325] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aaUWTEzkQFuA2qBk8UMk1wAAAYk"]
[Mon Mar 02 12:47:08.875245 2026] [:error] [pid 23872:tid 23878] [client 185.200.246.72:61366] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aaUWTEzkQFuA2qBk8UMk2QAAAYM"]
[Mon Mar 02 12:47:09.436931 2026] [:error] [pid 28793:tid 28830] [client 185.200.246.72:61417] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aaUWTQ2_fxBANaHo1f5maAAAABc"]
[Mon Mar 02 12:47:09.999026 2026] [:error] [pid 28908:tid 28925] [client 185.200.246.72:61465] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "aaUWTYqJmC8ih_lQQnCRsgAAAM8"]
[Mon Mar 02 12:47:10.565458 2026] [:error] [pid 31257:tid 31264] [client 185.200.246.72:61506] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aaUWTv-JFLfishX45N94MgAAAQE"]
[Mon Mar 02 12:47:11.132136 2026] [:error] [pid 28795:tid 28869] [client 185.200.246.72:61554] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aaUWT7ROd53wZBkdI_fHqgAAAIY"]
[Mon Mar 02 12:47:11.718301 2026] [:error] [pid 28908:tid 28923] [client 185.200.246.72:61602] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aaUWT4qJmC8ih_lQQnCRtQAAAM0"]
[Mon Mar 02 12:47:12.305597 2026] [:error] [pid 31257:tid 31274] [client 185.200.246.72:61645] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aaUWUP-JFLfishX45N94NAAAAQs"]
[Mon Mar 02 12:47:12.879968 2026] [:error] [pid 23872:tid 23877] [client 185.200.246.72:61698] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_1"] [unique_id "aaUWUEzkQFuA2qBk8UMk4QAAAYI"]
[Mon Mar 02 12:47:13.465989 2026] [:error] [pid 21575:tid 21594] [client 185.200.246.72:61760] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backup/.env"] [unique_id "aaUWUSrocdArcJqFfIk_EAAAAU8"]
[Mon Mar 02 12:47:14.029197 2026] [:error] [pid 21575:tid 21598] [client 185.200.246.72:61829] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "aaUWUirocdArcJqFfIk_EQAAAVM"]
[Mon Mar 02 12:47:14.607261 2026] [:error] [pid 28908:tid 28924] [client 185.200.246.72:61869] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aaUWUoqJmC8ih_lQQnCRvQAAAM4"]
[Mon Mar 02 12:47:15.173580 2026] [:error] [pid 28795:tid 28876] [client 185.200.246.72:61924] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php.bak"] [unique_id "aaUWU7ROd53wZBkdI_fHrAAAAI0"]
[Mon Mar 02 12:47:15.751440 2026] [:error] [pid 28794:tid 28859] [client 185.200.246.72:61968] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.old"] [unique_id "aaUWU6Vy2qpaelbUob2JegAAAFc"]
[Mon Mar 02 12:47:16.315942 2026] [:error] [pid 28795:tid 28880] [client 185.200.246.72:62014] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php.save"] [unique_id "aaUWVLROd53wZBkdI_fHrwAAAJE"]
[Mon Mar 02 12:47:16.880900 2026] [:error] [pid 21575:tid 21584] [client 185.200.246.72:62061] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php.swp"] [unique_id "aaUWVCrocdArcJqFfIk_GAAAAUU"]
[Mon Mar 02 12:47:17.960996 2026] [:error] [pid 14466:tid 14479] [client 185.200.246.72:62170] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php~"] [unique_id "aaUWVf8w-ahEIiUSqM5gfwAAAcs"]
[Mon Mar 02 12:47:18.528684 2026] [:error] [pid 21575:tid 21592] [client 185.200.246.72:62219] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.txt"] [unique_id "aaUWVirocdArcJqFfIk_GwAAAU0"]
[Mon Mar 02 12:47:19.121579 2026] [:error] [pid 31257:tid 31278] [client 185.200.246.72:62260] [client 185.200.246.72] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/wp-config.inc"] [unique_id "aaUWV_-JFLfishX45N94RAAAAQ8"]
[Mon Mar 02 13:50:49.068549 2026] [:error] [pid 59601:tid 59638] [client 43.159.144.16:52874] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaUlOcQ1lXfvWN0-ZQlDEQAAAEA"]
[Mon Mar 02 14:17:56.212027 2026] [:error] [pid 59701:tid 59718] [client 152.59.149.208:53088] [client 152.59.149.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.149.208, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaUrlOUmTDVso96U9_J6TQAAAQ4"]
[Mon Mar 02 16:12:21.321687 2026] [:error] [pid 28847:tid 28857] [client 182.42.110.255:38242] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaVGZZ9xbBq8VfeqVDZcQgAAAMg"]
[Mon Mar 02 17:53:04.047263 2026] [:error] [pid 28847:tid 28854] [client 150.109.46.88:59688] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaVeAJ9xbBq8VfeqVDapwAAAAMU"]
[Mon Mar 02 18:53:32.443835 2026] [:error] [pid 59602:tid 59686] [client 20.104.86.139:34212] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaVsLDMtSo_Fr0lHnSYyrwAAAJU"]
[Mon Mar 02 18:53:33.277559 2026] [:error] [pid 59602:tid 59687] [client 20.104.86.139:34190] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaVsLTMtSo_Fr0lHnSYysgAAAJY"]
[Mon Mar 02 18:53:34.119340 2026] [:error] [pid 59701:tid 59706] [client 20.104.86.139:34195] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaVsLuUmTDVso96U9_K1nQAAAQI"]
[Mon Mar 02 18:53:34.998047 2026] [:error] [pid 59600:tid 59609] [client 20.104.86.139:34209] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaVsLoQ5lE4yocV9IBcQZgAAAAA"]
[Mon Mar 02 19:37:09.550428 2026] [:error] [pid 28847:tid 28858] [client 206.189.158.56:51126] [client 206.189.158.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.158.56, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaV2ZZ9xbBq8VfeqVDYAXQAAAMk"]
[Mon Mar 02 19:37:10.397839 2026] [:error] [pid 28847:tid 28850] [client 206.189.158.56:51126] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aaV2Zp9xbBq8VfeqVDYAaAAAAME"]
[Mon Mar 02 19:37:10.749407 2026] [:error] [pid 59701:tid 59711] [client 206.189.158.56:54373] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aaV2ZuUmTDVso96U9_LBZQAAAQc"]
[Mon Mar 02 19:37:11.101154 2026] [:error] [pid 59600:tid 59628] [client 206.189.158.56:54990] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aaV2Z4Q5lE4yocV9IBcrFwAAABM"]
[Mon Mar 02 19:37:11.454179 2026] [:error] [pid 28847:tid 28867] [client 206.189.158.56:55729] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaV2Z59xbBq8VfeqVDYAbQAAANI"]
[Mon Mar 02 19:37:11.805898 2026] [:error] [pid 59600:tid 59632] [client 206.189.158.56:56493] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaV2Z4Q5lE4yocV9IBcrGgAAABc"]
[Mon Mar 02 19:37:12.159681 2026] [:error] [pid 28847:tid 28871] [client 206.189.158.56:57155] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaV2aJ9xbBq8VfeqVDYAcgAAANY"]
[Mon Mar 02 19:37:12.512442 2026] [:error] [pid 28847:tid 28872] [client 206.189.158.56:57852] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaV2aJ9xbBq8VfeqVDYAdQAAANc"]
[Mon Mar 02 19:37:12.867436 2026] [:error] [pid 59734:tid 59750] [client 206.189.158.56:58617] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaV2aJeWQx7ZQG9NybENngAAAU4"]
[Mon Mar 02 19:37:13.218634 2026] [:error] [pid 28847:tid 28855] [client 206.189.158.56:59440] [client 206.189.158.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaV2aZ9xbBq8VfeqVDYAeQAAAMY"]
[Mon Mar 02 22:39:58.658885 2026] [:error] [pid 59701:tid 59726] [client 20.104.86.139:35603] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaWhPuUmTDVso96U9_Ls8wAAARY"]
[Mon Mar 02 22:39:59.504343 2026] [:error] [pid 59600:tid 59611] [client 20.104.86.139:5562] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaWhP4Q5lE4yocV9IBeQ9gAAAAI"]
[Mon Mar 02 22:40:00.335769 2026] [:error] [pid 59600:tid 59632] [client 20.104.86.139:35586] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaWhQIQ5lE4yocV9IBeQ-gAAABc"]
[Mon Mar 02 22:40:01.174342 2026] [:error] [pid 28847:tid 28863] [client 20.104.86.139:36218] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aaWhQZ9xbBq8VfeqVDaOvQAAAM4"]
[Tue Mar 03 00:06:08.970709 2026] [:error] [pid 59701:tid 59718] [client 43.132.214.228:57754] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaW1cOUmTDVso96U9_IBdgAAAQ4"]
[Tue Mar 03 00:07:27.728849 2026] [:error] [pid 59602:tid 59686] [client 194.59.204.162:46478] [client 194.59.204.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aaW1vzMtSo_Fr0lHnSaw1gAAAJU"]
[Tue Mar 03 00:07:29.007127 2026] [:error] [pid 28847:tid 28853] [client 194.59.204.162:36954] [client 194.59.204.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aaW1wZ9xbBq8VfeqVDbNyQAAAMQ"]
[Tue Mar 03 00:07:29.645418 2026] [:error] [pid 28847:tid 28861] [client 194.59.204.162:46490] [client 194.59.204.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaW1wZ9xbBq8VfeqVDbNzwAAAMw"]
[Tue Mar 03 00:07:30.608261 2026] [:error] [pid 59734:tid 59745] [client 194.59.204.162:46502] [client 194.59.204.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aaW1wpeWQx7ZQG9NybFacQAAAUk"]
[Tue Mar 03 00:07:31.901579 2026] [:error] [pid 28847:tid 28870] [client 194.59.204.162:36964] [client 194.59.204.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aaW1w59xbBq8VfeqVDbN2QAAANU"]
[Tue Mar 03 00:07:32.542939 2026] [:error] [pid 59701:tid 59722] [client 194.59.204.162:46510] [client 194.59.204.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaW1xOUmTDVso96U9_IBuAAAARI"]
[Tue Mar 03 01:02:48.140477 2026] [:error] [pid 18557:tid 18845] [client 208.74.105.183:59325] [client 208.74.105.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 208.74.105.183, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaXCuNngZqR9Tp8JM0FUWQAAAFY"]
[Tue Mar 03 01:03:48.889448 2026] [:error] [pid 18558:tid 18865] [client 168.232.229.138:53688] [client 168.232.229.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.232.229.138, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaXC9LO1kQHjTOLioCm5lgAAAIs"]
[Tue Mar 03 01:39:01.833020 2026] [:error] [pid 18960:tid 18983] [client 78.124.95.193:19196] [client 78.124.95.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.124.95.193, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaXLNdCu09icM9oIHwDohQAAANQ"]
[Tue Mar 03 02:27:38.514934 2026] [:error] [pid 18960:tid 18965] [client 43.130.60.195:34426] [client 43.130.60.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaXWmtCu09icM9oIHwAGYAAAAMI"]
[Tue Mar 03 02:58:25.191939 2026] [:error] [pid 18558:tid 18854] [client 20.151.217.152:35460] [client 20.151.217.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaXd0bO1kQHjTOLioCnrFQAAAIA"]
[Tue Mar 03 03:05:01.207656 2026] [:error] [pid 60214:tid 60220] [client 185.192.71.42:49361] [client 185.192.71.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaXfXYmuQ_v4S3RkLitR_wAAAQQ"]
[Tue Mar 03 03:05:02.783146 2026] [:error] [pid 18960:tid 18967] [client 185.192.71.46:27171] [client 185.192.71.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaXfXtCu09icM9oIHwAaewAAAMQ"]
[Tue Mar 03 03:05:05.311378 2026] [:error] [pid 18556:tid 18777] [client 91.230.225.32:44299] [client 91.230.225.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaXfYX9AYyTTd2eEk9FWwQAAABU"]
[Tue Mar 03 03:05:06.881545 2026] [:error] [pid 60214:tid 60222] [client 185.92.25.109:26011] [client 185.92.25.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaXfYomuQ_v4S3RkLitSBAAAAQY"]
[Tue Mar 03 03:05:09.180870 2026] [:error] [pid 60214:tid 60228] [client 91.230.225.37:36037] [client 91.230.225.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaXfZYmuQ_v4S3RkLitSDgAAAQw"]
[Tue Mar 03 03:05:10.304732 2026] [:error] [pid 18556:tid 18779] [client 91.230.225.33:21753] [client 91.230.225.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaXfZn9AYyTTd2eEk9FWygAAABc"]
[Tue Mar 03 03:05:10.906610 2026] [:error] [pid 60214:tid 60230] [client 185.192.71.59:22151] [client 185.192.71.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaXfZomuQ_v4S3RkLitSEwAAAQ4"]
[Tue Mar 03 03:05:11.588055 2026] [:error] [pid 18558:tid 18868] [client 91.230.225.221:30219] [client 91.230.225.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaXfZ7O1kQHjTOLioCnvTQAAAI4"]
[Tue Mar 03 03:05:12.155864 2026] [:error] [pid 18557:tid 18845] [client 91.230.225.29:38703] [client 91.230.225.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaXfaNngZqR9Tp8JM0F6nwAAAFY"]
[Tue Mar 03 03:05:12.869931 2026] [:error] [pid 60214:tid 60224] [client 91.230.225.32:37055] [client 91.230.225.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaXfaImuQ_v4S3RkLitSFQAAAQg"]
[Tue Mar 03 03:05:13.893928 2026] [:error] [pid 18960:tid 18975] [client 185.192.71.50:47153] [client 185.192.71.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaXfadCu09icM9oIHwAajAAAAMw"]
[Tue Mar 03 03:05:15.067339 2026] [:error] [pid 18960:tid 18963] [client 91.230.225.218:40529] [client 91.230.225.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aaXfa9Cu09icM9oIHwAakAAAAMA"]
[Tue Mar 03 03:05:16.259935 2026] [:error] [pid 60214:tid 60234] [client 91.230.225.36:35547] [client 91.230.225.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaXfbImuQ_v4S3RkLitSJwAAARI"]
[Tue Mar 03 03:05:17.177902 2026] [:error] [pid 18556:tid 18775] [client 91.230.225.223:26315] [client 91.230.225.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaXfbX9AYyTTd2eEk9FW0AAAABM"]
[Tue Mar 03 03:05:18.058004 2026] [:error] [pid 18558:tid 18863] [client 185.192.71.56:48141] [client 185.192.71.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaXfbrO1kQHjTOLioCnvWQAAAIk"]
[Tue Mar 03 03:05:20.530027 2026] [:error] [pid 18960:tid 18982] [client 185.192.71.42:62225] [client 185.192.71.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaXfcNCu09icM9oIHwAangAAANM"]
[Tue Mar 03 03:05:21.424580 2026] [:error] [pid 18558:tid 18858] [client 185.192.71.42:38401] [client 185.192.71.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaXfcbO1kQHjTOLioCnvYgAAAIQ"]
[Tue Mar 03 03:05:22.800068 2026] [:error] [pid 18558:tid 18862] [client 185.192.71.46:33447] [client 185.192.71.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaXfcrO1kQHjTOLioCnvbAAAAIg"]
[Tue Mar 03 03:05:23.715458 2026] [:error] [pid 18558:tid 18862] [client 91.230.225.39:41935] [client 91.230.225.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaXfc7O1kQHjTOLioCnvcgAAAIg"]
[Tue Mar 03 03:05:25.518291 2026] [:error] [pid 18558:tid 18868] [client 91.230.225.217:35115] [client 91.230.225.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaXfdbO1kQHjTOLioCnvggAAAI4"]
[Tue Mar 03 03:05:26.443318 2026] [:error] [pid 18558:tid 18874] [client 185.192.71.46:22149] [client 185.192.71.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaXfdrO1kQHjTOLioCnvhwAAAJQ"]
[Tue Mar 03 03:05:28.478272 2026] [:error] [pid 60214:tid 60230] [client 91.230.225.212:31947] [client 91.230.225.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaXfeImuQ_v4S3RkLitSYQAAAQ4"]
[Tue Mar 03 03:05:29.129928 2026] [:error] [pid 18960:tid 18976] [client 91.230.225.27:44659] [client 91.230.225.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaXfedCu09icM9oIHwAaqQAAAM0"]
[Tue Mar 03 03:05:29.667812 2026] [:error] [pid 18558:tid 18867] [client 91.230.225.33:36981] [client 91.230.225.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaXfebO1kQHjTOLioCnvigAAAI0"]
[Tue Mar 03 03:05:31.366168 2026] [:error] [pid 18960:tid 18981] [client 91.230.225.25:23057] [client 91.230.225.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaXfe9Cu09icM9oIHwAatAAAANI"]
[Tue Mar 03 03:05:31.983705 2026] [:error] [pid 18556:tid 18771] [client 185.192.71.50:30255] [client 185.192.71.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaXfe39AYyTTd2eEk9FW1wAAABA"]
[Tue Mar 03 03:05:32.682234 2026] [:error] [pid 18960:tid 18976] [client 91.230.225.39:27991] [client 91.230.225.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaXffNCu09icM9oIHwAauAAAAM0"]
[Tue Mar 03 03:05:36.126624 2026] [:error] [pid 60214:tid 60240] [client 185.192.71.52:28733] [client 185.192.71.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaXfgImuQ_v4S3RkLitSdgAAARg"]
[Tue Mar 03 03:05:39.203690 2026] [:error] [pid 60214:tid 60232] [client 91.230.225.27:37013] [client 91.230.225.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.27, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaXfg4muQ_v4S3RkLitSgAAAARA"]
[Tue Mar 03 03:05:42.783610 2026] [:error] [pid 60214:tid 60238] [client 91.230.225.27:37013] [client 91.230.225.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaXfhomuQ_v4S3RkLitSjgAAARY"]
[Tue Mar 03 03:05:44.090471 2026] [:error] [pid 18558:tid 18870] [client 91.230.225.27:64935] [client 91.230.225.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.27, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaXfiLO1kQHjTOLioCnvpwAAAJA"]
[Tue Mar 03 03:05:44.689574 2026] [:error] [pid 18558:tid 18876] [client 91.230.225.27:64935] [client 91.230.225.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaXfiLO1kQHjTOLioCnvqQAAAJY"]
[Tue Mar 03 03:05:47.702173 2026] [:error] [pid 18557:tid 18840] [client 185.192.71.52:42749] [client 185.192.71.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaXfi9ngZqR9Tp8JM0F6vwAAAFE"]
[Tue Mar 03 03:05:52.070650 2026] [:error] [pid 18960:tid 18972] [client 91.230.225.211:46317] [client 91.230.225.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaXfkNCu09icM9oIHwAa2gAAAMk"]
[Tue Mar 03 03:05:53.315280 2026] [:error] [pid 18558:tid 18873] [client 185.92.25.115:64819] [client 185.92.25.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaXfkbO1kQHjTOLioCnvxAAAAJM"]
[Tue Mar 03 03:05:55.005518 2026] [:error] [pid 18558:tid 18860] [client 185.192.71.49:65127] [client 185.192.71.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.49, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaXfk7O1kQHjTOLioCnv0wAAAIY"]
[Tue Mar 03 03:05:55.296623 2026] [:error] [pid 18558:tid 18861] [client 185.192.71.49:65127] [client 185.192.71.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaXfk7O1kQHjTOLioCnv1QAAAIc"]
[Tue Mar 03 03:06:01.210123 2026] [:error] [pid 18558:tid 18876] [client 91.230.225.25:54379] [client 91.230.225.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaXfmbO1kQHjTOLioCnwCQAAAJY"]
[Tue Mar 03 03:06:02.623598 2026] [:error] [pid 18960:tid 18964] [client 91.230.225.34:53653] [client 91.230.225.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.34, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaXfmtCu09icM9oIHwAa5wAAAME"]
[Tue Mar 03 03:06:03.770427 2026] [:error] [pid 18960:tid 18963] [client 91.230.225.34:53653] [client 91.230.225.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaXfm9Cu09icM9oIHwAa7gAAAMA"]
[Tue Mar 03 03:06:04.679121 2026] [:error] [pid 18557:tid 18819] [client 91.230.225.39:25523] [client 91.230.225.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaXfnNngZqR9Tp8JM0F6zwAAAEA"]
[Tue Mar 03 03:06:05.787977 2026] [:error] [pid 60214:tid 60226] [client 185.192.71.57:55205] [client 185.192.71.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaXfnYmuQ_v4S3RkLitSvgAAAQo"]
[Tue Mar 03 03:06:07.240447 2026] [:error] [pid 18558:tid 18869] [client 91.230.225.216:59281] [client 91.230.225.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaXfn7O1kQHjTOLioCnwHQAAAI8"]
[Tue Mar 03 03:06:07.934661 2026] [:error] [pid 60214:tid 60239] [client 91.230.225.37:53509] [client 91.230.225.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaXfn4muQ_v4S3RkLitSwgAAARc"]
[Tue Mar 03 03:06:10.239084 2026] [:error] [pid 18558:tid 18872] [client 91.230.225.214:25647] [client 91.230.225.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaXforO1kQHjTOLioCnwKwAAAJI"]
[Tue Mar 03 03:06:11.583060 2026] [:error] [pid 18558:tid 18861] [client 91.230.225.221:43123] [client 91.230.225.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaXfo7O1kQHjTOLioCnwNQAAAIc"]
[Tue Mar 03 03:06:13.137915 2026] [:error] [pid 18960:tid 18969] [client 91.230.225.26:25101] [client 91.230.225.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaXfpdCu09icM9oIHwAbAgAAAMY"]
[Tue Mar 03 03:06:14.636802 2026] [:error] [pid 18558:tid 18876] [client 91.230.225.39:64709] [client 91.230.225.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaXfprO1kQHjTOLioCnwQwAAAJY"]
[Tue Mar 03 03:06:15.788884 2026] [:error] [pid 18556:tid 18753] [client 91.230.225.36:61871] [client 91.230.225.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaXfp39AYyTTd2eEk9FXAQAAAAA"]
[Tue Mar 03 03:06:17.373661 2026] [:error] [pid 60214:tid 60220] [client 91.230.225.218:41681] [client 91.230.225.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaXfqYmuQ_v4S3RkLitS1AAAAQQ"]
[Tue Mar 03 03:06:20.266585 2026] [:error] [pid 18558:tid 18878] [client 91.230.225.217:24317] [client 91.230.225.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaXfrLO1kQHjTOLioCnwYgAAAJg"]
[Tue Mar 03 03:06:20.803900 2026] [:error] [pid 18557:tid 18835] [client 91.230.225.30:37403] [client 91.230.225.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaXfrNngZqR9Tp8JM0F61wAAAEw"]
[Tue Mar 03 03:06:21.413263 2026] [:error] [pid 60214:tid 60224] [client 91.230.225.26:43833] [client 91.230.225.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaXfrYmuQ_v4S3RkLitS2gAAAQg"]
[Tue Mar 03 03:06:22.011828 2026] [:error] [pid 18556:tid 18769] [client 91.230.225.218:24013] [client 91.230.225.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaXfrn9AYyTTd2eEk9FXBgAAAA4"]
[Tue Mar 03 03:06:23.031151 2026] [:error] [pid 60214:tid 60216] [client 91.230.225.210:43829] [client 91.230.225.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaXfr4muQ_v4S3RkLitS4QAAAQA"]
[Tue Mar 03 03:06:23.684099 2026] [:error] [pid 18558:tid 18866] [client 91.230.225.223:31485] [client 91.230.225.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaXfr7O1kQHjTOLioCnwbQAAAIw"]
[Tue Mar 03 03:06:24.938425 2026] [:error] [pid 18960:tid 18968] [client 185.192.71.55:25611] [client 185.192.71.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaXfsNCu09icM9oIHwAbCwAAAMU"]
[Tue Mar 03 03:06:25.504742 2026] [:error] [pid 60214:tid 60234] [client 91.230.225.36:26469] [client 91.230.225.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaXfsYmuQ_v4S3RkLitS4wAAARI"]
[Tue Mar 03 03:06:26.193253 2026] [:error] [pid 18556:tid 18764] [client 185.192.71.55:41077] [client 185.192.71.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaXfsn9AYyTTd2eEk9FXCgAAAAk"]
[Tue Mar 03 03:06:26.744379 2026] [:error] [pid 18960:tid 18986] [client 91.230.225.216:61677] [client 91.230.225.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaXfstCu09icM9oIHwAbEQAAANc"]
[Tue Mar 03 03:06:27.606593 2026] [:error] [pid 60214:tid 60229] [client 185.192.71.53:58965] [client 185.192.71.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaXfs4muQ_v4S3RkLitS6QAAAQ0"]
[Tue Mar 03 03:06:28.854739 2026] [:error] [pid 18558:tid 18862] [client 91.230.225.216:52935] [client 91.230.225.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaXftLO1kQHjTOLioCnwhgAAAIg"]
[Tue Mar 03 03:06:30.682210 2026] [:error] [pid 18557:tid 18824] [client 91.230.225.215:28983] [client 91.230.225.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaXfttngZqR9Tp8JM0F64wAAAEI"]
[Tue Mar 03 03:06:34.275655 2026] [:error] [pid 18558:tid 18868] [client 185.192.71.57:52099] [client 185.192.71.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaXfurO1kQHjTOLioCnwogAAAI4"]
[Tue Mar 03 03:06:35.813829 2026] [:error] [pid 60214:tid 60224] [client 185.192.71.50:46173] [client 185.192.71.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaXfu4muQ_v4S3RkLitS-AAAAQg"]
[Tue Mar 03 03:06:36.373099 2026] [:error] [pid 60214:tid 60237] [client 185.192.71.41:54731] [client 185.192.71.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaXfvImuQ_v4S3RkLitS-wAAARU"]
[Tue Mar 03 03:06:38.113281 2026] [:error] [pid 18557:tid 18844] [client 91.230.225.38:32427] [client 91.230.225.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaXfvtngZqR9Tp8JM0F67AAAAFU"]
[Tue Mar 03 03:06:39.642329 2026] [proxy_fcgi:error] [pid 18960:tid 18973] [client 91.230.225.222:59309] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 03:06:39.965661 2026] [proxy_fcgi:error] [pid 18960:tid 18980] [client 91.230.225.222:59309] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 03:06:41.317422 2026] [proxy_fcgi:error] [pid 18960:tid 18972] [client 91.230.225.222:59309] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 03:06:42.756672 2026] [:error] [pid 18960:tid 18970] [client 91.230.225.222:59309] [client 91.230.225.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaXfwtCu09icM9oIHwAbLAAAAMc"]
[Tue Mar 03 03:06:43.298754 2026] [:error] [pid 60214:tid 60221] [client 91.230.225.214:25155] [client 91.230.225.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaXfw4muQ_v4S3RkLitTDwAAAQU"]
[Tue Mar 03 03:06:43.911185 2026] [:error] [pid 18557:tid 18830] [client 91.230.225.220:55135] [client 91.230.225.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaXfw9ngZqR9Tp8JM0F6-AAAAEg"]
[Tue Mar 03 03:06:44.562237 2026] [:error] [pid 60214:tid 60224] [client 185.92.25.115:20227] [client 185.92.25.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaXfxImuQ_v4S3RkLitTFQAAAQg"]
[Tue Mar 03 03:06:45.145502 2026] [:error] [pid 18557:tid 18838] [client 185.192.71.54:35333] [client 185.192.71.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaXfxdngZqR9Tp8JM0F6_AAAAE8"]
[Tue Mar 03 03:06:45.773736 2026] [:error] [pid 18960:tid 18965] [client 185.192.71.47:35637] [client 185.192.71.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaXfxdCu09icM9oIHwAbLwAAAMI"]
[Tue Mar 03 03:06:47.143247 2026] [:error] [pid 18557:tid 18820] [client 185.192.71.50:62471] [client 185.192.71.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaXfx9ngZqR9Tp8JM0F7AQAAAEE"]
[Tue Mar 03 03:06:47.831498 2026] [:error] [pid 18960:tid 18971] [client 91.230.225.210:53631] [client 91.230.225.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaXfx9Cu09icM9oIHwAbNwAAAMg"]
[Tue Mar 03 03:06:48.382596 2026] [:error] [pid 60214:tid 60233] [client 185.192.71.53:47059] [client 185.192.71.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaXfyImuQ_v4S3RkLitTHwAAARE"]
[Tue Mar 03 03:06:48.960896 2026] [:error] [pid 18557:tid 18819] [client 185.192.71.50:52969] [client 185.192.71.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaXfyNngZqR9Tp8JM0F7BgAAAEA"]
[Tue Mar 03 03:06:50.134318 2026] [:error] [pid 18557:tid 18826] [client 185.192.71.46:59737] [client 185.192.71.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaXfytngZqR9Tp8JM0F7DAAAAEQ"]
[Tue Mar 03 03:06:50.962724 2026] [:error] [pid 18558:tid 18868] [client 91.230.225.218:52321] [client 91.230.225.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaXfyrO1kQHjTOLioCnwugAAAI4"]
[Tue Mar 03 03:06:52.240251 2026] [:error] [pid 18558:tid 18867] [client 185.192.71.60:32389] [client 185.192.71.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaXfzLO1kQHjTOLioCnwxAAAAI0"]
[Tue Mar 03 03:06:55.214120 2026] [:error] [pid 60214:tid 60240] [client 91.230.225.25:45107] [client 91.230.225.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaXfz4muQ_v4S3RkLitTNwAAARg"]
[Tue Mar 03 03:06:56.727222 2026] [:error] [pid 18960:tid 18973] [client 185.192.71.49:23139] [client 185.192.71.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaXf0NCu09icM9oIHwAbUgAAAMo"]
[Tue Mar 03 03:06:58.708014 2026] [:error] [pid 18556:tid 18768] [client 185.192.71.60:30185] [client 185.192.71.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaXf0n9AYyTTd2eEk9FXJgAAAA0"]
[Tue Mar 03 03:06:59.617754 2026] [:error] [pid 18558:tid 18859] [client 185.192.71.57:52323] [client 185.192.71.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaXf07O1kQHjTOLioCnxAAAAAIU"]
[Tue Mar 03 03:07:06.047193 2026] [:error] [pid 18960:tid 18982] [client 185.192.71.44:40361] [client 185.192.71.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaXf2tCu09icM9oIHwAbmQAAANM"]
[Tue Mar 03 03:07:07.108761 2026] [:error] [pid 60214:tid 60227] [client 91.230.225.27:49589] [client 91.230.225.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaXf24muQ_v4S3RkLitTaAAAAQs"]
[Tue Mar 03 03:07:07.741248 2026] [:error] [pid 18558:tid 18865] [client 185.192.71.58:41199] [client 185.192.71.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.58, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaXf27O1kQHjTOLioCnxVAAAAIs"]
[Tue Mar 03 03:07:08.333041 2026] [:error] [pid 18558:tid 18861] [client 185.192.71.58:41199] [client 185.192.71.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaXf3LO1kQHjTOLioCnxWQAAAIc"]
[Tue Mar 03 03:07:09.623645 2026] [:error] [pid 18557:tid 18836] [client 91.230.225.221:22305] [client 91.230.225.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaXf3dngZqR9Tp8JM0F7HAAAAE0"]
[Tue Mar 03 03:07:10.204528 2026] [:error] [pid 18556:tid 18777] [client 91.230.225.217:25111] [client 91.230.225.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaXf3n9AYyTTd2eEk9FXPAAAABU"]
[Tue Mar 03 03:07:11.859704 2026] [:error] [pid 18556:tid 18770] [client 185.192.71.52:22397] [client 185.192.71.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaXf339AYyTTd2eEk9FXRQAAAA8"]
[Tue Mar 03 03:07:12.387268 2026] [:error] [pid 60214:tid 60223] [client 91.230.225.224:22607] [client 91.230.225.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aaXf4ImuQ_v4S3RkLitTdwAAAQc"]
[Tue Mar 03 03:07:14.597489 2026] [:error] [pid 18556:tid 18761] [client 185.192.71.53:60889] [client 185.192.71.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaXf4n9AYyTTd2eEk9FXUAAAAAY"]
[Tue Mar 03 03:07:16.314691 2026] [proxy_fcgi:error] [pid 18557:tid 18833] [client 185.192.71.50:41365] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 03:07:16.941829 2026] [:error] [pid 18557:tid 18837] [client 185.192.71.50:41365] [client 185.192.71.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaXf5NngZqR9Tp8JM0F7MAAAAE4"]
[Tue Mar 03 03:07:17.648090 2026] [:error] [pid 60214:tid 60233] [client 91.230.225.223:37661] [client 91.230.225.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaXf5YmuQ_v4S3RkLitTfQAAARE"]
[Tue Mar 03 03:07:18.841447 2026] [:error] [pid 60214:tid 60224] [client 91.230.225.224:64347] [client 91.230.225.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaXf5omuQ_v4S3RkLitThwAAAQg"]
[Tue Mar 03 03:07:19.468179 2026] [:error] [pid 18556:tid 18780] [client 91.230.225.213:58741] [client 91.230.225.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaXf539AYyTTd2eEk9FXVgAAABg"]
[Tue Mar 03 03:07:22.199599 2026] [:error] [pid 60214:tid 60236] [client 91.230.225.37:65033] [client 91.230.225.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaXf6omuQ_v4S3RkLitTlQAAARQ"]
[Tue Mar 03 03:07:22.823683 2026] [:error] [pid 18558:tid 18859] [client 91.230.225.37:51289] [client 91.230.225.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaXf6rO1kQHjTOLioCnxcAAAAIU"]
[Tue Mar 03 03:07:24.591668 2026] [:error] [pid 18960:tid 18967] [client 185.192.71.49:58181] [client 185.192.71.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaXf7NCu09icM9oIHwAbuQAAAMQ"]
[Tue Mar 03 03:07:25.186664 2026] [:error] [pid 18557:tid 18846] [client 91.230.225.222:24631] [client 91.230.225.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaXf7dngZqR9Tp8JM0F7NwAAAFc"]
[Tue Mar 03 03:07:25.720464 2026] [:error] [pid 18557:tid 18836] [client 185.192.71.47:27425] [client 185.192.71.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaXf7dngZqR9Tp8JM0F7OgAAAE0"]
[Tue Mar 03 03:07:27.796526 2026] [:error] [pid 18556:tid 18768] [client 91.230.225.220:36597] [client 91.230.225.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaXf739AYyTTd2eEk9FXYgAAAA0"]
[Tue Mar 03 03:07:28.653088 2026] [:error] [pid 60214:tid 60219] [client 185.192.71.55:42823] [client 185.192.71.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaXf8ImuQ_v4S3RkLitToAAAAQM"]
[Tue Mar 03 03:07:31.817175 2026] [:error] [pid 60214:tid 60218] [client 91.230.225.222:59961] [client 91.230.225.222] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.222, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aaXf84muQ_v4S3RkLitTsAAAAQI"]
[Tue Mar 03 03:07:33.676327 2026] [:error] [pid 60214:tid 60216] [client 91.230.225.222:59961] [client 91.230.225.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaXf9YmuQ_v4S3RkLitTugAAAQA"]
[Tue Mar 03 03:07:34.258438 2026] [:error] [pid 18558:tid 18864] [client 185.92.25.115:51995] [client 185.92.25.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.115, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaXf9rO1kQHjTOLioCnxiQAAAIo"]
[Tue Mar 03 04:36:36.164816 2026] [:error] [pid 36785:tid 36860] [client 4.232.153.115:10302] [client 4.232.153.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaX01HhJejauENG9qThzPwAAAIo"]
[Tue Mar 03 04:36:36.853918 2026] [:error] [pid 36897:tid 36906] [client 4.232.153.115:10596] [client 4.232.153.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaX01CZC69_8eM0Uouu7dwAAAMQ"]
[Tue Mar 03 04:36:37.790323 2026] [:error] [pid 36897:tid 36916] [client 4.232.153.115:7208] [client 4.232.153.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaX01SZC69_8eM0Uouu7fAAAAM4"]
[Tue Mar 03 04:36:38.488410 2026] [:error] [pid 36783:tid 36804] [client 4.232.153.115:7481] [client 4.232.153.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaX01j4tNYh5NtLaTXfudQAAAAo"]
[Tue Mar 03 05:14:12.504462 2026] [:error] [pid 26186:tid 26196] [client 106.227.49.113:37362] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaX9pPbZCNtk8wDak9dv_gAAAUg"]
[Tue Mar 03 05:32:38.735546 2026] [:error] [pid 20872:tid 20885] [client 172.94.9.41:49682] [client 172.94.9.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aaYB9olYbNk3E_3CgBhrFQAAAQs"]
[Tue Mar 03 06:37:29.418561 2026] [:error] [pid 36897:tid 36906] [client 52.138.16.158:23502] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asax.php"] [unique_id "aaYRKSZC69_8eM0UouvoTwAAAMQ"]
[Tue Mar 03 06:37:29.492460 2026] [:error] [pid 14042:tid 14060] [client 52.138.16.158:23424] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaYRKWeHGCmSEiIBcK4hxwAAAZA"]
[Tue Mar 03 06:37:32.103633 2026] [:error] [pid 26186:tid 26193] [client 52.138.16.158:23426] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaYRLPbZCNtk8wDak9eqXAAAAUU"]
[Tue Mar 03 06:37:32.337563 2026] [:error] [pid 26186:tid 26211] [client 52.138.16.158:23438] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asax.php"] [unique_id "aaYRLPbZCNtk8wDak9eqXQAAAVc"]
[Tue Mar 03 06:37:33.283154 2026] [:error] [pid 20872:tid 20879] [client 52.138.16.158:23540] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaYRLYlYbNk3E_3CgBiJNQAAAQU"]
[Tue Mar 03 06:37:34.157227 2026] [:error] [pid 36897:tid 36907] [client 52.138.16.158:23504] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaYRLiZC69_8eM0UouvoVQAAAMU"]
[Tue Mar 03 06:37:34.810107 2026] [:error] [pid 36785:tid 36857] [client 52.138.16.158:23547] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asax.php"] [unique_id "aaYRLnhJejauENG9qTiXJgAAAIc"]
[Tue Mar 03 06:37:40.000279 2026] [:error] [pid 14042:tid 14050] [client 52.138.16.158:23536] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "aaYRM2eHGCmSEiIBcK4h4gAAAYY"]
[Tue Mar 03 06:37:40.484932 2026] [:error] [pid 14042:tid 14067] [client 52.138.16.158:23550] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asax.php"] [unique_id "aaYRNGeHGCmSEiIBcK4h5AAAAZc"]
[Tue Mar 03 06:37:42.089555 2026] [:error] [pid 20872:tid 20888] [client 52.138.16.158:23430] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaYRNolYbNk3E_3CgBiJPwAAAQ4"]
[Tue Mar 03 06:37:42.951891 2026] [:error] [pid 36783:tid 36817] [client 52.138.16.158:23514] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "aaYRNj4tNYh5NtLaTXcChAAAABc"]
[Tue Mar 03 06:37:43.199203 2026] [:error] [pid 20872:tid 20877] [client 52.138.16.158:23520] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaYRN4lYbNk3E_3CgBiJQAAAAQM"]
[Tue Mar 03 06:37:43.624448 2026] [:error] [pid 36784:tid 36836] [client 52.138.16.158:23432] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "aaYRN3NeKOSGbW9kDgTV-AAAAE0"]
[Tue Mar 03 06:37:43.914065 2026] [:error] [pid 36897:tid 36910] [client 52.138.16.158:23522] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaYRNyZC69_8eM0UouvoZQAAAMg"]
[Tue Mar 03 06:37:44.226101 2026] [:error] [pid 20872:tid 20884] [client 52.138.16.158:23530] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "aaYROIlYbNk3E_3CgBiJQwAAAQo"]
[Tue Mar 03 06:37:45.160233 2026] [:error] [pid 36897:tid 36926] [client 52.138.16.158:23542] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaYROSZC69_8eM0UouvoaAAAANg"]
[Tue Mar 03 06:37:45.165571 2026] [:error] [pid 26186:tid 26202] [client 52.138.16.158:23500] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "aaYROfbZCNtk8wDak9eqbwAAAU4"]
[Tue Mar 03 06:37:45.701478 2026] [:error] [pid 36897:tid 36925] [client 52.138.16.158:23439] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaYROSZC69_8eM0UouvoagAAANc"]
[Tue Mar 03 06:37:46.570724 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23495] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "aaYROvbZCNtk8wDak9eqcQAAAUk"]
[Tue Mar 03 06:37:46.672905 2026] [:error] [pid 36897:tid 36903] [client 52.138.16.158:23547] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaYROiZC69_8eM0UouvobAAAAME"]
[Tue Mar 03 06:37:47.259632 2026] [:error] [pid 14042:tid 14053] [client 52.138.16.158:23551] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaYRO2eHGCmSEiIBcK4h6QAAAYk"]
[Tue Mar 03 06:37:47.799956 2026] [:error] [pid 14042:tid 14060] [client 52.138.16.158:23488] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "aaYRO2eHGCmSEiIBcK4h7QAAAZA"]
[Tue Mar 03 06:37:48.097174 2026] [:error] [pid 20872:tid 20894] [client 52.138.16.158:23444] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aaYRPIlYbNk3E_3CgBiJRwAAARQ"]
[Tue Mar 03 06:37:48.589009 2026] [:error] [pid 36785:tid 36866] [client 52.138.16.158:23533] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aaYRPHhJejauENG9qTiXLgAAAJA"]
[Tue Mar 03 06:37:48.799798 2026] [:error] [pid 20872:tid 20876] [client 52.138.16.158:23541] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "aaYRPIlYbNk3E_3CgBiJSQAAAQI"]
[Tue Mar 03 06:37:49.397858 2026] [:error] [pid 26186:tid 26212] [client 52.138.16.158:23507] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aaYRPfbZCNtk8wDak9eqdgAAAVg"]
[Tue Mar 03 06:37:49.702977 2026] [:error] [pid 20872:tid 20897] [client 52.138.16.158:23512] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "aaYRPYlYbNk3E_3CgBiJTAAAARc"]
[Tue Mar 03 06:37:50.518387 2026] [:error] [pid 14042:tid 14067] [client 52.138.16.158:23473] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aaYRPmeHGCmSEiIBcK4h8QAAAZc"]
[Tue Mar 03 06:37:51.054986 2026] [:error] [pid 36783:tid 36809] [client 52.138.16.158:23436] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaYRPz4tNYh5NtLaTXcCiwAAAA8"]
[Tue Mar 03 06:37:51.199598 2026] [:error] [pid 36784:tid 36828] [client 52.138.16.158:23443] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aaYRP3NeKOSGbW9kDgTV_gAAAEU"]
[Tue Mar 03 06:37:52.437844 2026] [:error] [pid 36897:tid 36922] [client 52.138.16.158:23492] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aaYRQCZC69_8eM0UouvodQAAANQ"]
[Tue Mar 03 06:37:53.498277 2026] [:error] [pid 20872:tid 20897] [client 52.138.16.158:23433] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaYRQYlYbNk3E_3CgBiJVwAAARc"]
[Tue Mar 03 06:37:55.092848 2026] [:error] [pid 36784:tid 36843] [client 52.138.16.158:23437] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaYRQ3NeKOSGbW9kDgTWBwAAAFQ"]
[Tue Mar 03 06:37:56.852698 2026] [:error] [pid 36783:tid 36796] [client 52.138.16.158:23517] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aaYRRD4tNYh5NtLaTXcCjwAAAAI"]
[Tue Mar 03 06:37:58.421556 2026] [:error] [pid 20872:tid 20897] [client 52.138.16.158:23496] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "aaYRRolYbNk3E_3CgBiJXwAAARc"]
[Tue Mar 03 06:38:01.483088 2026] [:error] [pid 20872:tid 20883] [client 52.138.16.158:23368] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aaYRSYlYbNk3E_3CgBiJZAAAAQk"]
[Tue Mar 03 06:38:01.951227 2026] [:error] [pid 14042:tid 14064] [client 52.138.16.158:23364] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aaYRSWeHGCmSEiIBcK4iAAAAAZQ"]
[Tue Mar 03 06:38:03.296599 2026] [:error] [pid 36783:tid 36814] [client 52.138.16.158:23534] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aaYRSz4tNYh5NtLaTXcCkwAAABQ"]
[Tue Mar 03 06:38:04.369889 2026] [:error] [pid 36785:tid 36873] [client 52.138.16.158:23523] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aaYRTHhJejauENG9qTiXPgAAAJc"]
[Tue Mar 03 06:38:04.834818 2026] [:error] [pid 14042:tid 14064] [client 52.138.16.158:23532] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/black.php"] [unique_id "aaYRTGeHGCmSEiIBcK4iCwAAAZQ"]
[Tue Mar 03 06:38:06.131040 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:23549] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/black.php"] [unique_id "aaYRTmeHGCmSEiIBcK4iEQAAAYw"]
[Tue Mar 03 06:38:06.530580 2026] [:error] [pid 36783:tid 36799] [client 52.138.16.158:23489] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aaYRTj4tNYh5NtLaTXcClgAAAAU"]
[Tue Mar 03 06:38:06.829646 2026] [:error] [pid 36784:tid 36839] [client 52.138.16.158:23435] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/black.php"] [unique_id "aaYRTnNeKOSGbW9kDgTWFAAAAFA"]
[Tue Mar 03 06:38:07.216868 2026] [:error] [pid 14042:tid 14047] [client 52.138.16.158:23526] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aaYRT2eHGCmSEiIBcK4iFgAAAYM"]
[Tue Mar 03 06:38:07.318223 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23503] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/black.php"] [unique_id "aaYRT2eHGCmSEiIBcK4iFwAAAYo"]
[Tue Mar 03 06:38:07.964886 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:23535] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaYRT2eHGCmSEiIBcK4iGgAAAYU"]
[Tue Mar 03 06:38:08.180708 2026] [:error] [pid 20872:tid 20888] [client 52.138.16.158:23463] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aaYRUIlYbNk3E_3CgBiJbgAAAQ4"]
[Tue Mar 03 06:38:08.656841 2026] [:error] [pid 36897:tid 36903] [client 52.138.16.158:23477] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaYRUCZC69_8eM0UouvofgAAAME"]
[Tue Mar 03 06:38:09.015664 2026] [:error] [pid 36785:tid 36856] [client 52.138.16.158:23501] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aaYRUXhJejauENG9qTiXRAAAAIY"]
[Tue Mar 03 06:38:09.301722 2026] [:error] [pid 14042:tid 14048] [client 52.138.16.158:23487] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaYRUWeHGCmSEiIBcK4iIQAAAYQ"]
[Tue Mar 03 06:38:09.926658 2026] [:error] [pid 14042:tid 14064] [client 52.138.16.158:23510] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaYRUWeHGCmSEiIBcK4iJgAAAZQ"]
[Tue Mar 03 06:38:10.056713 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:23516] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/global.php"] [unique_id "aaYRUmeHGCmSEiIBcK4iJwAAAYw"]
[Tue Mar 03 06:38:10.475374 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:23500] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aaYRUmeHGCmSEiIBcK4iKgAAAZY"]
[Tue Mar 03 06:38:10.781646 2026] [:error] [pid 36785:tid 36851] [client 52.138.16.158:23371] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/black.php"] [unique_id "aaYRUnhJejauENG9qTiXRgAAAIE"]
[Tue Mar 03 06:38:11.273915 2026] [:error] [pid 14042:tid 14067] [client 52.138.16.158:23525] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aaYRU2eHGCmSEiIBcK4iLwAAAZc"]
[Tue Mar 03 06:38:11.497973 2026] [:error] [pid 26186:tid 26193] [client 52.138.16.158:23462] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/black.php"] [unique_id "aaYRU_bZCNtk8wDak9eqgAAAAUU"]
[Tue Mar 03 06:38:11.855718 2026] [:error] [pid 36897:tid 36920] [client 52.138.16.158:23539] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aaYRUyZC69_8eM0UouvogAAAANI"]
[Tue Mar 03 06:38:12.286829 2026] [:error] [pid 36785:tid 36859] [client 52.138.16.158:23513] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/black.php"] [unique_id "aaYRVHhJejauENG9qTiXSQAAAIk"]
[Tue Mar 03 06:38:12.490786 2026] [:error] [pid 36897:tid 36907] [client 52.138.16.158:23519] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aaYRVCZC69_8eM0UouvogQAAAMU"]
[Tue Mar 03 06:38:13.352284 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:23529] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aaYRVfbZCNtk8wDak9eqggAAAUA"]
[Tue Mar 03 06:38:13.632353 2026] [:error] [pid 36784:tid 36834] [client 52.138.16.158:23538] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/black.php"] [unique_id "aaYRVXNeKOSGbW9kDgTWFwAAAEs"]
[Tue Mar 03 06:38:14.121047 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:23425] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aaYRVvbZCNtk8wDak9eqgwAAAUY"]
[Tue Mar 03 06:38:15.076679 2026] [:error] [pid 36783:tid 36807] [client 52.138.16.158:23548] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaYRVz4tNYh5NtLaTXcCmQAAAA0"]
[Tue Mar 03 06:38:15.324868 2026] [:error] [pid 14042:tid 14053] [client 52.138.16.158:23365] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aaYRV2eHGCmSEiIBcK4iMAAAAYk"]
[Tue Mar 03 06:38:16.334291 2026] [:error] [pid 36897:tid 36917] [client 52.138.16.158:23515] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aaYRWCZC69_8eM0UouvohQAAAM8"]
[Tue Mar 03 06:38:17.114898 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:23469] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaYRWWeHGCmSEiIBcK4iNAAAAZY"]
[Tue Mar 03 06:38:17.497056 2026] [:error] [pid 36897:tid 36909] [client 52.138.16.158:23362] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aaYRWSZC69_8eM0UouvoiQAAAMc"]
[Tue Mar 03 06:38:19.681961 2026] [:error] [pid 20872:tid 20887] [client 52.138.16.158:23428] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aaYRW4lYbNk3E_3CgBiJegAAAQ0"]
[Tue Mar 03 06:38:21.620178 2026] [:error] [pid 36785:tid 36861] [client 52.138.16.158:23461] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aaYRXXhJejauENG9qTiXVgAAAIs"]
[Tue Mar 03 06:38:21.943802 2026] [:error] [pid 20872:tid 20880] [client 52.138.16.158:23498] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaYRXYlYbNk3E_3CgBiJgwAAAQY"]
[Tue Mar 03 06:38:22.968096 2026] [:error] [pid 14042:tid 14063] [client 52.138.16.158:23466] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aaYRXmeHGCmSEiIBcK4iPQAAAZM"]
[Tue Mar 03 06:38:24.481688 2026] [:error] [pid 20872:tid 20890] [client 52.138.16.158:23465] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aaYRYIlYbNk3E_3CgBiJkQAAARA"]
[Tue Mar 03 06:38:24.935268 2026] [:error] [pid 20872:tid 20896] [client 52.138.16.158:23448] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aaYRYIlYbNk3E_3CgBiJlQAAARY"]
[Tue Mar 03 06:38:25.940878 2026] [:error] [pid 14042:tid 14063] [client 52.138.16.158:23493] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aaYRYWeHGCmSEiIBcK4iRwAAAZM"]
[Tue Mar 03 06:38:26.497713 2026] [:error] [pid 36783:tid 36808] [client 52.138.16.158:23377] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aaYRYj4tNYh5NtLaTXcCnQAAAA4"]
[Tue Mar 03 06:38:28.054541 2026] [:error] [pid 36897:tid 36922] [client 52.138.16.158:23431] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dox.php"] [unique_id "aaYRZCZC69_8eM0UouvokgAAANQ"]
[Tue Mar 03 06:38:28.089937 2026] [:error] [pid 20872:tid 20892] [client 52.138.16.158:23400] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aaYRZIlYbNk3E_3CgBiJmgAAARI"]
[Tue Mar 03 06:38:33.890431 2026] [:error] [pid 14042:tid 14055] [client 52.138.16.158:23372] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aaYRaWeHGCmSEiIBcK4iXwAAAYs"]
[Tue Mar 03 06:38:33.952307 2026] [:error] [pid 36785:tid 36867] [client 52.138.16.158:23529] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aaYRaXhJejauENG9qTiXaAAAAJE"]
[Tue Mar 03 06:38:34.975552 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:23389] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aaYRameHGCmSEiIBcK4iYAAAAYw"]
[Tue Mar 03 06:38:36.909446 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:23537] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aaYRbPbZCNtk8wDak9equAAAAUo"]
[Tue Mar 03 06:38:37.696469 2026] [:error] [pid 36785:tid 36868] [client 52.138.16.158:23551] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aaYRbXhJejauENG9qTiXcwAAAJI"]
[Tue Mar 03 06:38:37.974927 2026] [:error] [pid 26186:tid 26204] [client 52.138.16.158:23434] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aaYRbfbZCNtk8wDak9eqvQAAAVA"]
[Tue Mar 03 06:38:38.911207 2026] [:error] [pid 14042:tid 14058] [client 52.138.16.158:23478] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aaYRbmeHGCmSEiIBcK4ibgAAAY4"]
[Tue Mar 03 06:38:39.652263 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23499] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaYRb_bZCNtk8wDak9eqxQAAAUk"]
[Tue Mar 03 06:38:39.959810 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:23489] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aaYRb2eHGCmSEiIBcK4ibwAAAYw"]
[Tue Mar 03 06:38:40.539471 2026] [:error] [pid 36785:tid 36853] [client 52.138.16.158:23467] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaYRcHhJejauENG9qTiXdQAAAIM"]
[Tue Mar 03 06:38:40.586929 2026] [:error] [pid 36784:tid 36846] [client 52.138.16.158:23518] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaYRcHNeKOSGbW9kDgTWOAAAAFc"]
[Tue Mar 03 06:38:41.455493 2026] [:error] [pid 14042:tid 14052] [client 52.138.16.158:23482] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaYRcWeHGCmSEiIBcK4icQAAAYg"]
[Tue Mar 03 06:38:41.536819 2026] [:error] [pid 14042:tid 14057] [client 52.138.16.158:23543] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaYRcWeHGCmSEiIBcK4icgAAAY0"]
[Tue Mar 03 06:38:42.343617 2026] [:error] [pid 36897:tid 36922] [client 52.138.16.158:23394] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaYRciZC69_8eM0Uouvo2QAAANQ"]
[Tue Mar 03 06:38:42.538557 2026] [:error] [pid 36784:tid 36834] [client 52.138.16.158:23367] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaYRcnNeKOSGbW9kDgTWPAAAAEs"]
[Tue Mar 03 06:38:42.957445 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23380] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aaYRcmeHGCmSEiIBcK4idAAAAYo"]
[Tue Mar 03 06:38:43.738037 2026] [:error] [pid 36785:tid 36865] [client 52.138.16.158:23545] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aaYRc3hJejauENG9qTiXeQAAAI8"]
[Tue Mar 03 06:38:43.946167 2026] [:error] [pid 36783:tid 36795] [client 52.138.16.158:23506] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaYRcz4tNYh5NtLaTXcCsAAAAAE"]
[Tue Mar 03 06:38:45.323633 2026] [:error] [pid 20872:tid 20881] [client 52.138.16.158:23486] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aaYRdYlYbNk3E_3CgBiJrQAAAQc"]
[Tue Mar 03 06:38:46.134370 2026] [:error] [pid 26186:tid 26210] [client 52.138.16.158:23509] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaYRdvbZCNtk8wDak9eqzgAAAVY"]
[Tue Mar 03 06:38:47.328037 2026] [:error] [pid 14042:tid 14050] [client 52.138.16.158:23452] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaYRd2eHGCmSEiIBcK4iewAAAYY"]
[Tue Mar 03 06:38:47.351787 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23413] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aaYRd_bZCNtk8wDak9eq0gAAAUk"]
[Tue Mar 03 06:38:48.845397 2026] [:error] [pid 36784:tid 36837] [client 52.138.16.158:23447] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aaYReHNeKOSGbW9kDgTWRAAAAE4"]
[Tue Mar 03 06:38:49.198643 2026] [:error] [pid 36785:tid 36874] [client 52.138.16.158:23442] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaYReXhJejauENG9qTiXfgAAAJg"]
[Tue Mar 03 06:38:51.252634 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23546] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaYRe2eHGCmSEiIBcK4igQAAAYo"]
[Tue Mar 03 06:38:52.653939 2026] [:error] [pid 14042:tid 14058] [client 52.138.16.158:23458] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaYRfGeHGCmSEiIBcK4ihwAAAY4"]
[Tue Mar 03 06:38:53.284188 2026] [:error] [pid 20872:tid 20887] [client 52.138.16.158:23485] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaYRfYlYbNk3E_3CgBiJtQAAAQ0"]
[Tue Mar 03 06:38:54.015121 2026] [:error] [pid 20872:tid 20890] [client 52.138.16.158:23404] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aaYRfolYbNk3E_3CgBiJtwAAARA"]
[Tue Mar 03 06:38:54.647462 2026] [:error] [pid 26186:tid 26193] [client 52.138.16.158:23419] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaYRfvbZCNtk8wDak9eq3QAAAUU"]
[Tue Mar 03 06:38:54.727567 2026] [:error] [pid 26186:tid 26204] [client 52.138.16.158:23497] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaYRfvbZCNtk8wDak9eq3gAAAVA"]
[Tue Mar 03 06:38:56.053054 2026] [:error] [pid 26186:tid 26209] [client 52.138.16.158:23445] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaYRgPbZCNtk8wDak9eq4QAAAVU"]
[Tue Mar 03 06:38:57.063527 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23453] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaYRgfbZCNtk8wDak9eq5gAAAUk"]
[Tue Mar 03 06:38:57.673067 2026] [:error] [pid 36785:tid 36856] [client 52.138.16.158:23398] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "aaYRgXhJejauENG9qTiXggAAAIY"]
[Tue Mar 03 06:38:57.688781 2026] [:error] [pid 36784:tid 36826] [client 52.138.16.158:23451] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaYRgXNeKOSGbW9kDgTWWgAAAEM"]
[Tue Mar 03 06:38:58.987865 2026] [:error] [pid 36784:tid 36842] [client 52.138.16.158:23369] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaYRgnNeKOSGbW9kDgTWXQAAAFM"]
[Tue Mar 03 06:39:00.247232 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:23446] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaYRhGeHGCmSEiIBcK4ikwAAAYU"]
[Tue Mar 03 06:39:01.029528 2026] [:error] [pid 26186:tid 26192] [client 52.138.16.158:23459] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaYRhfbZCNtk8wDak9eq6wAAAUQ"]
[Tue Mar 03 06:39:01.642800 2026] [:error] [pid 14042:tid 14061] [client 52.138.16.158:23388] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaYRhWeHGCmSEiIBcK4imAAAAZE"]
[Tue Mar 03 06:39:04.540898 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:23524] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaYRiGeHGCmSEiIBcK4inAAAAZY"]
[Tue Mar 03 06:39:05.078173 2026] [:error] [pid 14042:tid 14055] [client 52.138.16.158:23406] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aaYRiWeHGCmSEiIBcK4inwAAAYs"]
[Tue Mar 03 06:39:05.557065 2026] [:error] [pid 36897:tid 36921] [client 52.138.16.158:23521] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aaYRiSZC69_8eM0Uouvo8gAAANM"]
[Tue Mar 03 06:39:06.387446 2026] [:error] [pid 36785:tid 36872] [client 52.138.16.158:23478] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aaYRinhJejauENG9qTiXjQAAAJY"]
[Tue Mar 03 06:39:07.156816 2026] [:error] [pid 36785:tid 36858] [client 52.138.16.158:23393] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aaYRi3hJejauENG9qTiXkwAAAIg"]
[Tue Mar 03 06:39:07.555767 2026] [:error] [pid 36897:tid 36926] [client 52.138.16.158:23550] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aaYRiyZC69_8eM0Uouvo9gAAANg"]
[Tue Mar 03 06:39:08.458025 2026] [:error] [pid 20872:tid 20893] [client 52.138.16.158:23508] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aaYRjIlYbNk3E_3CgBiJxgAAARM"]
[Tue Mar 03 06:39:08.575177 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:23423] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aaYRjGeHGCmSEiIBcK4ipQAAAYU"]
[Tue Mar 03 06:39:10.545554 2026] [:error] [pid 20872:tid 20886] [client 52.138.16.158:23416] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaYRjolYbNk3E_3CgBiJywAAAQw"]
[Tue Mar 03 06:39:11.620800 2026] [:error] [pid 36784:tid 36837] [client 52.138.16.158:23429] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aaYRj3NeKOSGbW9kDgTWcAAAAE4"]
[Tue Mar 03 06:39:12.634597 2026] [:error] [pid 36897:tid 36904] [client 52.138.16.158:23502] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaYRkCZC69_8eM0UouvpEAAAAMI"]
[Tue Mar 03 06:39:14.238815 2026] [:error] [pid 36783:tid 36801] [client 52.138.16.158:23528] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaYRkj4tNYh5NtLaTXcCtgAAAAc"]
[Tue Mar 03 06:39:16.501166 2026] [:error] [pid 14042:tid 14059] [client 52.138.16.158:23471] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaYRlGeHGCmSEiIBcK4i4QAAAY8"]
[Tue Mar 03 06:39:17.645569 2026] [:error] [pid 36785:tid 36853] [client 52.138.16.158:23455] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "aaYRlXhJejauENG9qTiXvwAAAIM"]
[Tue Mar 03 06:39:17.939961 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23474] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aaYRlfbZCNtk8wDak9erbgAAAUk"]
[Tue Mar 03 06:39:18.558371 2026] [:error] [pid 26186:tid 26199] [client 52.138.16.158:23381] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "aaYRlvbZCNtk8wDak9erdgAAAUs"]
[Tue Mar 03 06:39:19.741389 2026] [:error] [pid 20872:tid 20877] [client 52.138.16.158:23414] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaYRl4lYbNk3E_3CgBiJ7AAAAQM"]
[Tue Mar 03 06:39:20.025748 2026] [:error] [pid 20872:tid 20883] [client 52.138.16.158:23376] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "aaYRmIlYbNk3E_3CgBiJ7gAAAQk"]
[Tue Mar 03 06:39:22.166827 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23370] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "aaYRmvbZCNtk8wDak9ergAAAAUk"]
[Tue Mar 03 06:39:22.413837 2026] [:error] [pid 36897:tid 36922] [client 52.138.16.158:23440] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaYRmiZC69_8eM0UouvpGgAAANQ"]
[Tue Mar 03 06:39:23.347096 2026] [:error] [pid 36785:tid 36851] [client 52.138.16.158:23476] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaYRm3hJejauENG9qTiXxQAAAIE"]
[Tue Mar 03 06:39:23.870474 2026] [:error] [pid 20872:tid 20879] [client 52.138.16.158:23320] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "aaYRm4lYbNk3E_3CgBiKDQAAAQU"]
[Tue Mar 03 06:39:24.449351 2026] [:error] [pid 36783:tid 36797] [client 52.138.16.158:23408] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aaYRnD4tNYh5NtLaTXcCuwAAAAM"]
[Tue Mar 03 06:39:25.019684 2026] [:error] [pid 26186:tid 26191] [client 52.138.16.158:23399] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "aaYRnfbZCNtk8wDak9ergwAAAUM"]
[Tue Mar 03 06:39:25.230077 2026] [:error] [pid 26186:tid 26210] [client 52.138.16.158:23297] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "aaYRnfbZCNtk8wDak9erhQAAAVY"]
[Tue Mar 03 06:39:25.778034 2026] [:error] [pid 36784:tid 36829] [client 52.138.16.158:23472] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "aaYRnXNeKOSGbW9kDgTWgwAAAEY"]
[Tue Mar 03 06:39:25.833613 2026] [:error] [pid 20872:tid 20875] [client 52.138.16.158:23420] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "aaYRnYlYbNk3E_3CgBiKMwAAAQE"]
[Tue Mar 03 06:39:26.337955 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:23457] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "aaYRnvbZCNtk8wDak9erhwAAAUE"]
[Tue Mar 03 06:39:26.374282 2026] [:error] [pid 36783:tid 36796] [client 52.138.16.158:23325] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "aaYRnj4tNYh5NtLaTXcCvQAAAAI"]
[Tue Mar 03 06:39:26.902447 2026] [:error] [pid 36783:tid 36798] [client 52.138.16.158:23378] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "aaYRnj4tNYh5NtLaTXcCvwAAAAQ"]
[Tue Mar 03 06:39:26.924043 2026] [:error] [pid 20872:tid 20881] [client 52.138.16.158:23339] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aaYRnolYbNk3E_3CgBiKOAAAAQc"]
[Tue Mar 03 06:39:27.887314 2026] [:error] [pid 20872:tid 20886] [client 52.138.16.158:23387] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "aaYRn4lYbNk3E_3CgBiKOQAAAQw"]
[Tue Mar 03 06:39:28.117254 2026] [:error] [pid 14042:tid 14045] [client 52.138.16.158:23397] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aaYRoGeHGCmSEiIBcK4jFAAAAYE"]
[Tue Mar 03 06:39:28.480780 2026] [:error] [pid 14042:tid 14064] [client 52.138.16.158:23334] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "aaYRoGeHGCmSEiIBcK4jFQAAAZQ"]
[Tue Mar 03 06:39:29.131042 2026] [:error] [pid 36785:tid 36861] [client 52.138.16.158:23484] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "aaYRoXhJejauENG9qTiXyQAAAIs"]
[Tue Mar 03 06:39:29.535216 2026] [:error] [pid 20872:tid 20889] [client 52.138.16.158:23402] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aaYRoYlYbNk3E_3CgBiKOwAAAQ8"]
[Tue Mar 03 06:39:29.720079 2026] [:error] [pid 36897:tid 36908] [client 52.138.16.158:23441] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "aaYRoSZC69_8eM0UouvpHwAAAMY"]
[Tue Mar 03 06:39:30.297472 2026] [:error] [pid 36785:tid 36873] [client 52.138.16.158:23322] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aaYRonhJejauENG9qTiXygAAAJc"]
[Tue Mar 03 06:39:30.591317 2026] [:error] [pid 14042:tid 14068] [client 52.138.16.158:23475] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aaYRomeHGCmSEiIBcK4jGgAAAZg"]
[Tue Mar 03 06:39:31.059848 2026] [:error] [pid 36784:tid 36838] [client 52.138.16.158:23342] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aaYRo3NeKOSGbW9kDgTWiwAAAE8"]
[Tue Mar 03 06:39:31.288760 2026] [:error] [pid 26186:tid 26202] [client 52.138.16.158:23386] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaYRo_bZCNtk8wDak9erkAAAAU4"]
[Tue Mar 03 06:39:32.310636 2026] [:error] [pid 14042:tid 14064] [client 52.138.16.158:23403] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aaYRpGeHGCmSEiIBcK4jHQAAAZQ"]
[Tue Mar 03 06:39:32.435629 2026] [:error] [pid 26186:tid 26204] [client 52.138.16.158:23315] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aaYRpPbZCNtk8wDak9erkwAAAVA"]
[Tue Mar 03 06:39:38.106256 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:23381] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaYRqvbZCNtk8wDak9erqQAAAUE"]
[Tue Mar 03 06:39:38.134525 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:23360] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55.php"] [unique_id "aaYRqvbZCNtk8wDak9erqgAAAVM"]
[Tue Mar 03 06:39:39.019123 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23468] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55.php"] [unique_id "aaYRq2eHGCmSEiIBcK4jIAAAAYo"]
[Tue Mar 03 06:39:39.908132 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:23491] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55.php"] [unique_id "aaYRq_bZCNtk8wDak9errQAAAU8"]
[Tue Mar 03 06:39:40.407239 2026] [:error] [pid 26186:tid 26200] [client 52.138.16.158:23373] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55.php"] [unique_id "aaYRrPbZCNtk8wDak9errgAAAUw"]
[Tue Mar 03 06:39:40.954024 2026] [:error] [pid 26186:tid 26195] [client 52.138.16.158:23427] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaYRrPbZCNtk8wDak9errwAAAUc"]
[Tue Mar 03 06:39:41.294858 2026] [:error] [pid 36785:tid 36853] [client 52.138.16.158:23366] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaYRrXhJejauENG9qTiX2gAAAIM"]
[Tue Mar 03 06:39:42.403982 2026] [:error] [pid 14042:tid 14063] [client 52.138.16.158:23411] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaYRrmeHGCmSEiIBcK4jJQAAAZM"]
[Tue Mar 03 06:39:42.838184 2026] [:error] [pid 36783:tid 36807] [client 52.138.16.158:23519] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaYRrj4tNYh5NtLaTXcCyAAAAA0"]
[Tue Mar 03 06:39:44.129546 2026] [:error] [pid 26186:tid 26212] [client 52.138.16.158:23438] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaYRsPbZCNtk8wDak9erswAAAVg"]
[Tue Mar 03 06:39:44.529958 2026] [:error] [pid 20872:tid 20887] [client 52.138.16.158:23507] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaYRsIlYbNk3E_3CgBiKSgAAAQ0"]
[Tue Mar 03 06:39:45.858916 2026] [:error] [pid 20872:tid 20881] [client 52.138.16.158:23382] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYRsYlYbNk3E_3CgBiKTQAAAQc"]
[Tue Mar 03 06:39:47.564589 2026] [:error] [pid 26186:tid 26206] [client 52.138.16.158:23410] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYRs_bZCNtk8wDak9ertwAAAVI"]
[Tue Mar 03 06:39:48.426090 2026] [:error] [pid 14042:tid 14047] [client 52.138.16.158:23363] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "aaYRtGeHGCmSEiIBcK4jKgAAAYM"]
[Tue Mar 03 06:39:49.307083 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23351] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYRtfbZCNtk8wDak9ervQAAAUk"]
[Tue Mar 03 06:39:50.041997 2026] [:error] [pid 26186:tid 26191] [client 52.138.16.158:23379] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaYRtvbZCNtk8wDak9ervgAAAUM"]
[Tue Mar 03 06:39:50.569785 2026] [:error] [pid 26186:tid 26212] [client 52.138.16.158:28612] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaYRtvbZCNtk8wDak9erwgAAAVg"]
[Tue Mar 03 06:39:51.580227 2026] [:error] [pid 14042:tid 14063] [client 52.138.16.158:28546] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaYRt2eHGCmSEiIBcK4jMgAAAZM"]
[Tue Mar 03 06:39:51.874238 2026] [:error] [pid 14042:tid 14057] [client 52.138.16.158:23171] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaYRt2eHGCmSEiIBcK4jNQAAAY0"]
[Tue Mar 03 06:39:52.533701 2026] [:error] [pid 36897:tid 36906] [client 52.138.16.158:23527] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaYRuCZC69_8eM0UouvpLAAAAMQ"]
[Tue Mar 03 06:39:52.546222 2026] [:error] [pid 14042:tid 14068] [client 52.138.16.158:23238] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYRuGeHGCmSEiIBcK4jOgAAAZg"]
[Tue Mar 03 06:39:52.940141 2026] [:error] [pid 14042:tid 14065] [client 52.138.16.158:28627] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaYRuGeHGCmSEiIBcK4jPQAAAZU"]
[Tue Mar 03 06:39:53.363463 2026] [:error] [pid 14042:tid 14061] [client 52.138.16.158:23239] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aaYRuWeHGCmSEiIBcK4jPwAAAZE"]
[Tue Mar 03 06:39:53.605441 2026] [:error] [pid 36897:tid 36916] [client 52.138.16.158:23374] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaYRuSZC69_8eM0UouvpMAAAAM4"]
[Tue Mar 03 06:39:54.046050 2026] [:error] [pid 14042:tid 14052] [client 52.138.16.158:23333] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYRumeHGCmSEiIBcK4jQAAAAYg"]
[Tue Mar 03 06:39:54.289988 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:23304] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaYRuvbZCNtk8wDak9erxwAAAU0"]
[Tue Mar 03 06:39:54.615854 2026] [:error] [pid 14042:tid 14048] [client 52.138.16.158:28657] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaYRumeHGCmSEiIBcK4jQgAAAYQ"]
[Tue Mar 03 06:39:54.727800 2026] [:error] [pid 20872:tid 20874] [client 52.138.16.158:23319] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYRuolYbNk3E_3CgBiKVAAAAQA"]
[Tue Mar 03 06:39:55.584592 2026] [:error] [pid 36783:tid 36803] [client 52.138.16.158:23358] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYRuz4tNYh5NtLaTXcCzgAAAAk"]
[Tue Mar 03 06:39:55.877425 2026] [:error] [pid 36784:tid 36834] [client 52.138.16.158:23454] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaYRu3NeKOSGbW9kDgTWmwAAAEs"]
[Tue Mar 03 06:39:56.183447 2026] [:error] [pid 36785:tid 36870] [client 52.138.16.158:23412] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aaYRvHhJejauENG9qTiX5AAAAJQ"]
[Tue Mar 03 06:39:56.811121 2026] [:error] [pid 14042:tid 14045] [client 52.138.16.158:23341] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaYRvGeHGCmSEiIBcK4jkQAAAYE"]
[Tue Mar 03 06:39:57.008959 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:23375] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaYRvfbZCNtk8wDak9erygAAAVM"]
[Tue Mar 03 06:39:57.745905 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:23311] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaYRvfbZCNtk8wDak9erzQAAAUo"]
[Tue Mar 03 06:39:57.969641 2026] [:error] [pid 36784:tid 36844] [client 52.138.16.158:23391] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaYRvXNeKOSGbW9kDgTWnQAAAFU"]
[Tue Mar 03 06:39:58.544053 2026] [:error] [pid 36784:tid 36824] [client 52.138.16.158:23310] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaYRvnNeKOSGbW9kDgTWngAAAEE"]
[Tue Mar 03 06:39:59.184120 2026] [:error] [pid 36897:tid 36913] [client 52.138.16.158:23306] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "aaYRvyZC69_8eM0UouvpNwAAAMs"]
[Tue Mar 03 06:39:59.595421 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:23384] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaYRv_bZCNtk8wDak9erzwAAAUY"]
[Tue Mar 03 06:39:59.753261 2026] [:error] [pid 20872:tid 20894] [client 52.138.16.158:23355] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaYRv4lYbNk3E_3CgBiKVwAAARQ"]
[Tue Mar 03 06:40:00.494043 2026] [:error] [pid 14042:tid 14060] [client 52.138.16.158:23299] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaYRwGeHGCmSEiIBcK4jxwAAAZA"]
[Tue Mar 03 06:40:01.213731 2026] [:error] [pid 26186:tid 26195] [client 52.138.16.158:23481] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaYRwfbZCNtk8wDak9er0gAAAUc"]
[Tue Mar 03 06:40:01.826086 2026] [:error] [pid 36897:tid 36905] [client 52.138.16.158:23483] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaYRwSZC69_8eM0UouvpOAAAAMM"]
[Tue Mar 03 06:40:02.105159 2026] [:error] [pid 26186:tid 26202] [client 52.138.16.158:23234] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaYRwvbZCNtk8wDak9er1gAAAU4"]
[Tue Mar 03 06:40:03.119257 2026] [:error] [pid 14042:tid 14065] [client 52.138.16.158:23427] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aaYRw2eHGCmSEiIBcK4jygAAAZU"]
[Tue Mar 03 06:40:03.155361 2026] [:error] [pid 14042:tid 14061] [client 52.138.16.158:23511] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aaYRw2eHGCmSEiIBcK4jywAAAZE"]
[Tue Mar 03 06:40:03.822578 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:23456] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aaYRw2eHGCmSEiIBcK4jzQAAAYw"]
[Tue Mar 03 06:40:03.941608 2026] [:error] [pid 14042:tid 14067] [client 52.138.16.158:23354] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aaYRw2eHGCmSEiIBcK4jzwAAAZc"]
[Tue Mar 03 06:40:04.522843 2026] [:error] [pid 26186:tid 26206] [client 52.138.16.158:23328] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aaYRxPbZCNtk8wDak9er3QAAAVI"]
[Tue Mar 03 06:40:05.234759 2026] [:error] [pid 20872:tid 20886] [client 52.138.16.158:23335] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aaYRxYlYbNk3E_3CgBiKWgAAAQw"]
[Tue Mar 03 06:40:05.637653 2026] [:error] [pid 20872:tid 20897] [client 52.138.16.158:23303] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aaYRxYlYbNk3E_3CgBiKWwAAARc"]
[Tue Mar 03 06:40:05.896238 2026] [:error] [pid 26186:tid 26190] [client 52.138.16.158:23323] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apk.php"] [unique_id "aaYRxfbZCNtk8wDak9er4AAAAUI"]
[Tue Mar 03 06:40:07.702482 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23505] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apk.php"] [unique_id "aaYRx_bZCNtk8wDak9er5gAAAUk"]
[Tue Mar 03 06:40:09.858586 2026] [:error] [pid 26186:tid 26193] [client 52.138.16.158:23332] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apk.php"] [unique_id "aaYRyfbZCNtk8wDak9er6gAAAUU"]
[Tue Mar 03 06:40:11.590678 2026] [:error] [pid 36785:tid 36862] [client 52.138.16.158:23449] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apk.php"] [unique_id "aaYRy3hJejauENG9qTiX6gAAAIw"]
[Tue Mar 03 06:40:12.210201 2026] [:error] [pid 36784:tid 36827] [client 52.138.16.158:23480] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aaYRzHNeKOSGbW9kDgTWpAAAAEQ"]
[Tue Mar 03 06:40:12.248647 2026] [:error] [pid 36897:tid 36905] [client 52.138.16.158:23395] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aaYRzCZC69_8eM0UouvpQgAAAMM"]
[Tue Mar 03 06:40:13.965637 2026] [:error] [pid 36785:tid 36850] [client 52.138.16.158:23396] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aaYRzXhJejauENG9qTiX7QAAAIA"]
[Tue Mar 03 06:40:14.045609 2026] [:error] [pid 14042:tid 14058] [client 52.138.16.158:23318] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aaYRzmeHGCmSEiIBcK4j2QAAAY4"]
[Tue Mar 03 06:40:14.485743 2026] [:error] [pid 36897:tid 36910] [client 52.138.16.158:23302] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aaYRziZC69_8eM0UouvpRQAAAMg"]
[Tue Mar 03 06:40:14.564943 2026] [:error] [pid 36897:tid 36923] [client 52.138.16.158:23287] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apk.php"] [unique_id "aaYRziZC69_8eM0UouvpRgAAANU"]
[Tue Mar 03 06:40:15.265212 2026] [:error] [pid 36784:tid 36826] [client 52.138.16.158:23361] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apk.php"] [unique_id "aaYRz3NeKOSGbW9kDgTWqAAAAEM"]
[Tue Mar 03 06:40:15.480377 2026] [:error] [pid 36785:tid 36856] [client 52.138.16.158:23260] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aaYRz3hJejauENG9qTiX8AAAAIY"]
[Tue Mar 03 06:40:16.444281 2026] [:error] [pid 36785:tid 36869] [client 52.138.16.158:23263] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apk.php"] [unique_id "aaYR0HhJejauENG9qTiX8gAAAJM"]
[Tue Mar 03 06:40:16.472094 2026] [:error] [pid 36785:tid 36865] [client 52.138.16.158:23308] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaYR0HhJejauENG9qTiX8wAAAI8"]
[Tue Mar 03 06:40:17.364298 2026] [:error] [pid 36783:tid 36799] [client 52.138.16.158:23329] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apk.php"] [unique_id "aaYR0T4tNYh5NtLaTXcC0gAAAAU"]
[Tue Mar 03 06:40:17.457675 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:23392] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaYR0fbZCNtk8wDak9er9QAAAU0"]
[Tue Mar 03 06:40:18.606331 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:23450] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaYR0vbZCNtk8wDak9er9wAAAVQ"]
[Tue Mar 03 06:40:18.635522 2026] [:error] [pid 36783:tid 36804] [client 52.138.16.158:23421] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aaYR0j4tNYh5NtLaTXcC1AAAAAo"]
[Tue Mar 03 06:40:19.398570 2026] [:error] [pid 36897:tid 36907] [client 52.138.16.158:23314] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaYR0yZC69_8eM0UouvpSgAAAMU"]
[Tue Mar 03 06:40:19.701641 2026] [:error] [pid 36784:tid 36836] [client 52.138.16.158:23329] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aaYR03NeKOSGbW9kDgTWqgAAAE0"]
[Tue Mar 03 06:40:20.101812 2026] [:error] [pid 36784:tid 36844] [client 52.138.16.158:23401] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaYR1HNeKOSGbW9kDgTWrAAAAFU"]
[Tue Mar 03 06:40:20.427466 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:23350] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aaYR1PbZCNtk8wDak9esAAAAAU0"]
[Tue Mar 03 06:40:21.428815 2026] [:error] [pid 36897:tid 36920] [client 52.138.16.158:23349] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaYR1SZC69_8eM0UouvpUAAAANI"]
[Tue Mar 03 06:40:21.784313 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:23348] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aaYR1fbZCNtk8wDak9esAQAAAVQ"]
[Tue Mar 03 06:40:22.268716 2026] [:error] [pid 36783:tid 36798] [client 52.138.16.158:23324] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaYR1j4tNYh5NtLaTXcC1gAAAAQ"]
[Tue Mar 03 06:40:22.995903 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:23326] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaYR1vbZCNtk8wDak9esBQAAAVM"]
[Tue Mar 03 06:40:25.310613 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:23241] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaYR2fbZCNtk8wDak9esEgAAAUA"]
[Tue Mar 03 06:40:26.647601 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:23385] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaYR2vbZCNtk8wDak9esGQAAAUo"]
[Tue Mar 03 06:40:30.586986 2026] [:error] [pid 36897:tid 36925] [client 52.138.16.158:23249] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaYR3iZC69_8eM0UouvpVwAAANc"]
[Tue Mar 03 06:40:32.993111 2026] [:error] [pid 36783:tid 36815] [client 52.138.16.158:23344] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aaYR4D4tNYh5NtLaTXcC2QAAABU"]
[Tue Mar 03 06:40:33.228057 2026] [:error] [pid 26186:tid 26192] [client 52.138.16.158:23531] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aaYR4fbZCNtk8wDak9esIQAAAUQ"]
[Tue Mar 03 06:40:34.031461 2026] [:error] [pid 26186:tid 26205] [client 52.138.16.158:23340] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aaYR4vbZCNtk8wDak9esJgAAAVE"]
[Tue Mar 03 06:40:34.620938 2026] [:error] [pid 36897:tid 36921] [client 52.138.16.158:23305] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaYR4iZC69_8eM0UouvpXAAAANM"]
[Tue Mar 03 06:40:35.324119 2026] [:error] [pid 20872:tid 20874] [client 52.138.16.158:23279] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaYR44lYbNk3E_3CgBiKeQAAAQA"]
[Tue Mar 03 06:40:35.713876 2026] [:error] [pid 20872:tid 20895] [client 52.138.16.158:23356] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aaYR44lYbNk3E_3CgBiKfAAAARU"]
[Tue Mar 03 06:40:36.167386 2026] [:error] [pid 36897:tid 36923] [client 52.138.16.158:23330] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaYR5CZC69_8eM0UouvpXQAAANU"]
[Tue Mar 03 06:40:36.920409 2026] [:error] [pid 20872:tid 20898] [client 52.138.16.158:23418] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aaYR5IlYbNk3E_3CgBiKhAAAARg"]
[Tue Mar 03 06:40:36.928024 2026] [:error] [pid 20872:tid 20893] [client 52.138.16.158:23278] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aaYR5IlYbNk3E_3CgBiKhQAAARM"]
[Tue Mar 03 06:40:41.893808 2026] [:error] [pid 36785:tid 36853] [client 52.138.16.158:23270] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "aaYR6XhJejauENG9qTiYCgAAAIM"]
[Tue Mar 03 06:40:42.054231 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:23237] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaYR6vbZCNtk8wDak9esUAAAAUY"]
[Tue Mar 03 06:40:42.854304 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:23248] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "aaYR6vbZCNtk8wDak9esVgAAAUg"]
[Tue Mar 03 06:40:43.051702 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:23479] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaYR6_bZCNtk8wDak9esVwAAAUo"]
[Tue Mar 03 06:40:43.928576 2026] [:error] [pid 14042:tid 14048] [client 52.138.16.158:23337] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaYR62eHGCmSEiIBcK4kBAAAAYQ"]
[Tue Mar 03 06:40:44.223417 2026] [:error] [pid 36783:tid 36812] [client 52.138.16.158:23407] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "aaYR7D4tNYh5NtLaTXcC3QAAABI"]
[Tue Mar 03 06:40:44.516267 2026] [:error] [pid 14042:tid 14060] [client 52.138.16.158:23235] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "aaYR7GeHGCmSEiIBcK4kBgAAAZA"]
[Tue Mar 03 06:40:45.106023 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:23288] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "aaYR7fbZCNtk8wDak9esYgAAAUE"]
[Tue Mar 03 06:40:45.272185 2026] [:error] [pid 14042:tid 14065] [client 52.138.16.158:23307] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "aaYR7WeHGCmSEiIBcK4kCQAAAZU"]
[Tue Mar 03 06:40:45.981556 2026] [:error] [pid 26186:tid 26192] [client 52.138.16.158:23294] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "aaYR7fbZCNtk8wDak9esZQAAAUQ"]
[Tue Mar 03 06:40:46.106679 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:23183] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "aaYR7vbZCNtk8wDak9esZgAAAUo"]
[Tue Mar 03 06:40:46.846215 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23251] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "aaYR7meHGCmSEiIBcK4kDQAAAYo"]
[Tue Mar 03 06:40:47.102313 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:23353] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "aaYR72eHGCmSEiIBcK4kDwAAAZY"]
[Tue Mar 03 06:40:47.622483 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:23257] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "aaYR72eHGCmSEiIBcK4kEgAAAYw"]
[Tue Mar 03 06:40:47.942260 2026] [:error] [pid 20872:tid 20884] [client 52.138.16.158:23262] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "aaYR74lYbNk3E_3CgBiKiAAAAQo"]
[Tue Mar 03 06:40:48.340910 2026] [:error] [pid 14042:tid 14067] [client 52.138.16.158:23271] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "aaYR8GeHGCmSEiIBcK4kFwAAAZc"]
[Tue Mar 03 06:40:48.690190 2026] [:error] [pid 14042:tid 14057] [client 52.138.16.158:23266] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "aaYR8GeHGCmSEiIBcK4kGgAAAY0"]
[Tue Mar 03 06:40:49.183792 2026] [:error] [pid 20872:tid 20897] [client 52.138.16.158:23338] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aaYR8YlYbNk3E_3CgBiKigAAARc"]
[Tue Mar 03 06:40:49.558887 2026] [:error] [pid 36784:tid 36832] [client 52.138.16.158:23188] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "aaYR8XNeKOSGbW9kDgTWwQAAAEk"]
[Tue Mar 03 06:40:49.703946 2026] [:error] [pid 36784:tid 36846] [client 52.138.16.158:23390] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aaYR8XNeKOSGbW9kDgTWwgAAAFc"]
[Tue Mar 03 06:40:50.284978 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:23301] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "aaYR8vbZCNtk8wDak9escAAAAVQ"]
[Tue Mar 03 06:40:50.452005 2026] [:error] [pid 26186:tid 26191] [client 52.138.16.158:23214] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aaYR8vbZCNtk8wDak9escQAAAUM"]
[Tue Mar 03 06:40:51.170788 2026] [:error] [pid 36897:tid 36921] [client 52.138.16.158:23182] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aaYR8yZC69_8eM0UouvpZAAAANM"]
[Tue Mar 03 06:40:51.408281 2026] [:error] [pid 36784:tid 36844] [client 52.138.16.158:23336] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "aaYR83NeKOSGbW9kDgTWxQAAAFU"]
[Tue Mar 03 06:40:51.748140 2026] [:error] [pid 36785:tid 36864] [client 52.138.16.158:23490] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "aaYR83hJejauENG9qTiYEQAAAI4"]
[Tue Mar 03 06:40:52.076490 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:23233] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aaYR9GeHGCmSEiIBcK4kHwAAAYU"]
[Tue Mar 03 06:40:52.286087 2026] [:error] [pid 36897:tid 36916] [client 52.138.16.158:23331] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "aaYR9CZC69_8eM0UouvpZwAAAM4"]
[Tue Mar 03 06:40:52.639043 2026] [:error] [pid 20872:tid 20883] [client 52.138.16.158:23264] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aaYR9IlYbNk3E_3CgBiKkAAAAQk"]
[Tue Mar 03 06:40:53.007764 2026] [:error] [pid 20872:tid 20887] [client 52.138.16.158:23190] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "aaYR9YlYbNk3E_3CgBiKlAAAAQ0"]
[Tue Mar 03 06:40:53.329845 2026] [:error] [pid 36783:tid 36803] [client 52.138.16.158:23240] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aaYR9T4tNYh5NtLaTXcC6gAAAAk"]
[Tue Mar 03 06:40:53.728506 2026] [:error] [pid 26186:tid 26204] [client 52.138.16.158:23180] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "aaYR9fbZCNtk8wDak9esewAAAVA"]
[Tue Mar 03 06:40:54.039683 2026] [:error] [pid 36783:tid 36810] [client 52.138.16.158:23265] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/logs.php"] [unique_id "aaYR9j4tNYh5NtLaTXcC6wAAABA"]
[Tue Mar 03 06:40:54.210963 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:23409] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "aaYR9vbZCNtk8wDak9esfAAAAVM"]
[Tue Mar 03 06:40:54.605455 2026] [:error] [pid 36785:tid 36867] [client 52.138.16.158:23298] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "aaYR9nhJejauENG9qTiYEwAAAJE"]
[Tue Mar 03 06:40:55.019988 2026] [:error] [pid 20872:tid 20886] [client 52.138.16.158:23246] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "aaYR94lYbNk3E_3CgBiKmAAAAQw"]
[Tue Mar 03 06:40:55.385556 2026] [:error] [pid 20872:tid 20878] [client 52.138.16.158:23405] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "aaYR94lYbNk3E_3CgBiKnAAAAQQ"]
[Tue Mar 03 06:40:55.883107 2026] [:error] [pid 36785:tid 36865] [client 52.138.16.158:23464] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "aaYR93hJejauENG9qTiYFAAAAI8"]
[Tue Mar 03 06:40:56.268717 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:23242] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "aaYR-PbZCNtk8wDak9esfQAAAUE"]
[Tue Mar 03 06:40:57.470475 2026] [:error] [pid 36785:tid 36859] [client 52.138.16.158:23244] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "aaYR-XhJejauENG9qTiYFgAAAIk"]
[Tue Mar 03 06:40:58.730154 2026] [:error] [pid 26186:tid 26193] [client 52.138.16.158:23415] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "aaYR-vbZCNtk8wDak9esgQAAAUU"]
[Tue Mar 03 06:40:58.979309 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:23327] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "aaYR-vbZCNtk8wDak9esggAAAU0"]
[Tue Mar 03 06:40:59.770180 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:23347] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "aaYR-_bZCNtk8wDak9eshAAAAVQ"]
[Tue Mar 03 06:41:00.131109 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:23253] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xr.php"] [unique_id "aaYR_PbZCNtk8wDak9eshwAAAUY"]
[Tue Mar 03 06:41:01.118311 2026] [:error] [pid 36784:tid 36837] [client 52.138.16.158:23317] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xr.php"] [unique_id "aaYR_XNeKOSGbW9kDgTWzgAAAE4"]
[Tue Mar 03 06:41:01.206928 2026] [:error] [pid 14042:tid 14047] [client 52.138.16.158:23285] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "aaYR_WeHGCmSEiIBcK4kMQAAAYM"]
[Tue Mar 03 06:41:01.655509 2026] [:error] [pid 36897:tid 36917] [client 52.138.16.158:23276] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xr.php"] [unique_id "aaYR_SZC69_8eM0UouvpcgAAAM8"]
[Tue Mar 03 06:41:02.444206 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23422] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xr.php"] [unique_id "aaYR_meHGCmSEiIBcK4kNgAAAYo"]
[Tue Mar 03 06:41:02.941691 2026] [:error] [pid 14042:tid 14048] [client 52.138.16.158:23243] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aaYR_meHGCmSEiIBcK4kOgAAAYQ"]
[Tue Mar 03 06:41:03.151074 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:23185] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "aaYR_2eHGCmSEiIBcK4kPQAAAYU"]
[Tue Mar 03 06:41:03.430927 2026] [:error] [pid 14042:tid 14044] [client 52.138.16.158:23168] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aaYR_2eHGCmSEiIBcK4kPgAAAYA"]
[Tue Mar 03 06:41:03.988127 2026] [:error] [pid 20872:tid 20880] [client 52.138.16.158:23213] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aaYR_4lYbNk3E_3CgBiKowAAAQY"]
[Tue Mar 03 06:41:04.033381 2026] [:error] [pid 20872:tid 20897] [client 52.138.16.158:23293] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xr.php"] [unique_id "aaYSAIlYbNk3E_3CgBiKpAAAARc"]
[Tue Mar 03 06:41:04.541682 2026] [:error] [pid 36897:tid 36908] [client 52.138.16.158:23275] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aaYSACZC69_8eM0UouvpdgAAAMY"]
[Tue Mar 03 06:41:05.254652 2026] [:error] [pid 36785:tid 36865] [client 52.138.16.158:23236] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aaYSAXhJejauENG9qTiYHgAAAI8"]
[Tue Mar 03 06:41:05.564218 2026] [:error] [pid 36785:tid 36869] [client 52.138.16.158:23292] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xr.php"] [unique_id "aaYSAXhJejauENG9qTiYIAAAAJM"]
[Tue Mar 03 06:41:06.058484 2026] [:error] [pid 36783:tid 36816] [client 52.138.16.158:23250] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aaYSAj4tNYh5NtLaTXcC-AAAABY"]
[Tue Mar 03 06:41:06.317665 2026] [:error] [pid 36783:tid 36805] [client 52.138.16.158:23169] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xr.php"] [unique_id "aaYSAj4tNYh5NtLaTXcC-gAAAAs"]
[Tue Mar 03 06:41:06.920650 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:23223] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aaYSAvbZCNtk8wDak9eskQAAAUA"]
[Tue Mar 03 06:41:07.291225 2026] [:error] [pid 20872:tid 20874] [client 52.138.16.158:23179] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xr.php"] [unique_id "aaYSA4lYbNk3E_3CgBiKpwAAAQA"]
[Tue Mar 03 06:41:07.453564 2026] [:error] [pid 20872:tid 20888] [client 52.138.16.158:23296] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aaYSA4lYbNk3E_3CgBiKqAAAAQ4"]
[Tue Mar 03 06:41:08.210623 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:23211] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aaYSBPbZCNtk8wDak9eslwAAAVQ"]
[Tue Mar 03 06:41:08.635495 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:23256] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knme.php"] [unique_id "aaYSBPbZCNtk8wDak9esmQAAAU8"]
[Tue Mar 03 06:41:09.293994 2026] [:error] [pid 20872:tid 20884] [client 52.138.16.158:23192] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knme.php"] [unique_id "aaYSBYlYbNk3E_3CgBiKrQAAAQo"]
[Tue Mar 03 06:41:09.630868 2026] [:error] [pid 14042:tid 14050] [client 52.138.16.158:23359] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aaYSBWeHGCmSEiIBcK4kSgAAAYY"]
[Tue Mar 03 06:41:10.007830 2026] [:error] [pid 20872:tid 20879] [client 52.138.16.158:23289] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knme.php"] [unique_id "aaYSBolYbNk3E_3CgBiKswAAAQU"]
[Tue Mar 03 06:41:10.405766 2026] [:error] [pid 26186:tid 26192] [client 52.138.16.158:23321] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aaYSBvbZCNtk8wDak9esogAAAUQ"]
[Tue Mar 03 06:41:10.849476 2026] [:error] [pid 14042:tid 14056] [client 52.138.16.158:23175] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knme.php"] [unique_id "aaYSBmeHGCmSEiIBcK4kSwAAAYw"]
[Tue Mar 03 06:41:11.145404 2026] [:error] [pid 14042:tid 14068] [client 52.138.16.158:23280] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff.php"] [unique_id "aaYSB2eHGCmSEiIBcK4kTQAAAZg"]
[Tue Mar 03 06:41:11.856368 2026] [:error] [pid 36785:tid 36867] [client 52.138.16.158:23284] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws71.php"] [unique_id "aaYSB3hJejauENG9qTiYJgAAAJE"]
[Tue Mar 03 06:41:12.318377 2026] [:error] [pid 36783:tid 36808] [client 52.138.16.158:23300] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aaYSCD4tNYh5NtLaTXcC_QAAAA4"]
[Tue Mar 03 06:41:12.421061 2026] [:error] [pid 36897:tid 36903] [client 52.138.16.158:23215] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws71.php"] [unique_id "aaYSCCZC69_8eM0UouvpfgAAAME"]
[Tue Mar 03 06:41:13.321117 2026] [:error] [pid 14042:tid 14051] [client 52.138.16.158:23219] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws71.php"] [unique_id "aaYSCWeHGCmSEiIBcK4kUQAAAYc"]
[Tue Mar 03 06:41:13.526555 2026] [:error] [pid 14042:tid 14055] [client 52.138.16.158:23309] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aaYSCWeHGCmSEiIBcK4kUgAAAYs"]
[Tue Mar 03 06:41:14.023125 2026] [:error] [pid 26186:tid 26206] [client 52.138.16.158:23259] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws71.php"] [unique_id "aaYSCvbZCNtk8wDak9essAAAAVI"]
[Tue Mar 03 06:41:14.560191 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:23460] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aaYSCvbZCNtk8wDak9esswAAAUE"]
[Tue Mar 03 06:41:14.590446 2026] [:error] [pid 36784:tid 36843] [client 52.138.16.158:23193] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws67.php"] [unique_id "aaYSCnNeKOSGbW9kDgTW0QAAAFQ"]
[Tue Mar 03 06:41:15.433051 2026] [:error] [pid 36785:tid 36862] [client 52.138.16.158:23511] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws67.php"] [unique_id "aaYSC3hJejauENG9qTiYKwAAAIw"]
[Tue Mar 03 06:41:15.675362 2026] [:error] [pid 20872:tid 20889] [client 52.138.16.158:23216] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aaYSC4lYbNk3E_3CgBiKuAAAAQ8"]
[Tue Mar 03 06:41:16.084447 2026] [:error] [pid 36785:tid 36864] [client 52.138.16.158:23268] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws67.php"] [unique_id "aaYSDHhJejauENG9qTiYLwAAAI4"]
[Tue Mar 03 06:41:16.963466 2026] [:error] [pid 14042:tid 14068] [client 52.138.16.158:23230] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws67.php"] [unique_id "aaYSDGeHGCmSEiIBcK4kVQAAAZg"]
[Tue Mar 03 06:41:17.232994 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:23205] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knme.php"] [unique_id "aaYSDfbZCNtk8wDak9esuAAAAUg"]
[Tue Mar 03 06:41:18.307722 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:23272] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/momo.php"] [unique_id "aaYSDvbZCNtk8wDak9esuwAAAVM"]
[Tue Mar 03 06:41:18.906505 2026] [:error] [pid 36783:tid 36795] [client 52.138.16.158:23201] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/momo.php"] [unique_id "aaYSDj4tNYh5NtLaTXcC_wAAAAE"]
[Tue Mar 03 06:41:19.397624 2026] [:error] [pid 14042:tid 14063] [client 52.138.16.158:23108] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knme.php"] [unique_id "aaYSD2eHGCmSEiIBcK4kXgAAAZM"]
[Tue Mar 03 06:41:19.616161 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23220] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/momo.php"] [unique_id "aaYSD2eHGCmSEiIBcK4kXwAAAYo"]
[Tue Mar 03 06:41:20.315633 2026] [:error] [pid 26186:tid 26212] [client 52.138.16.158:23200] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/momo.php"] [unique_id "aaYSEPbZCNtk8wDak9esvQAAAVg"]
[Tue Mar 03 06:41:20.490581 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:23177] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knme.php"] [unique_id "aaYSEPbZCNtk8wDak9eswAAAAU8"]
[Tue Mar 03 06:41:21.317735 2026] [:error] [pid 26186:tid 26199] [client 52.138.16.158:23254] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaYSEfbZCNtk8wDak9esxgAAAUs"]
[Tue Mar 03 06:41:22.292597 2026] [:error] [pid 26186:tid 26212] [client 52.138.16.158:23134] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knme.php"] [unique_id "aaYSEvbZCNtk8wDak9esygAAAVg"]
[Tue Mar 03 06:41:23.198468 2026] [:error] [pid 20872:tid 20882] [client 52.138.16.158:23261] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaYSE4lYbNk3E_3CgBiKwgAAAQg"]
[Tue Mar 03 06:41:24.141158 2026] [:error] [pid 36897:tid 36906] [client 52.138.16.158:23274] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws71.php"] [unique_id "aaYSFCZC69_8eM0UouvpiAAAAMQ"]
[Tue Mar 03 06:41:25.190007 2026] [:error] [pid 36897:tid 36919] [client 52.138.16.158:23258] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws71.php"] [unique_id "aaYSFSZC69_8eM0UouvpiQAAANE"]
[Tue Mar 03 06:41:26.427758 2026] [:error] [pid 26186:tid 26205] [client 52.138.16.158:23282] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws71.php"] [unique_id "aaYSFvbZCNtk8wDak9es2wAAAVE"]
[Tue Mar 03 06:41:26.622835 2026] [:error] [pid 26186:tid 26210] [client 52.138.16.158:23247] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaYSFvbZCNtk8wDak9es3gAAAVY"]
[Tue Mar 03 06:41:27.759100 2026] [:error] [pid 14042:tid 14060] [client 52.138.16.158:23247] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaYSF2eHGCmSEiIBcK4kYwAAAZA"]
[Tue Mar 03 06:41:27.813906 2026] [:error] [pid 20872:tid 20877] [client 52.138.16.158:23312] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws71.php"] [unique_id "aaYSF4lYbNk3E_3CgBiKywAAAQM"]
[Tue Mar 03 06:41:28.866637 2026] [:error] [pid 14042:tid 14065] [client 52.138.16.158:23206] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaYSGGeHGCmSEiIBcK4kaQAAAZU"]
[Tue Mar 03 06:41:29.198271 2026] [:error] [pid 26186:tid 26210] [client 52.138.16.158:23352] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws67.php"] [unique_id "aaYSGfbZCNtk8wDak9es5QAAAVY"]
[Tue Mar 03 06:41:29.752872 2026] [:error] [pid 20872:tid 20895] [client 52.138.16.158:23273] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws67.php"] [unique_id "aaYSGYlYbNk3E_3CgBiKzQAAARU"]
[Tue Mar 03 06:41:31.203953 2026] [:error] [pid 26186:tid 26200] [client 52.138.16.158:23194] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaYSG_bZCNtk8wDak9es7gAAAUw"]
[Tue Mar 03 06:41:31.350771 2026] [:error] [pid 26186:tid 26209] [client 52.138.16.158:23277] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws67.php"] [unique_id "aaYSG_bZCNtk8wDak9es7wAAAVU"]
[Tue Mar 03 06:41:32.284678 2026] [:error] [pid 26186:tid 26193] [client 52.138.16.158:23181] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws67.php"] [unique_id "aaYSHPbZCNtk8wDak9es9QAAAUU"]
[Tue Mar 03 06:41:33.107621 2026] [:error] [pid 26186:tid 26200] [client 52.138.16.158:23161] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaYSHfbZCNtk8wDak9es-QAAAUw"]
[Tue Mar 03 06:41:33.193293 2026] [:error] [pid 26186:tid 26211] [client 52.138.16.158:23225] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/momo.php"] [unique_id "aaYSHfbZCNtk8wDak9es-gAAAVc"]
[Tue Mar 03 06:41:33.833193 2026] [:error] [pid 36783:tid 36807] [client 52.138.16.158:23172] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/momo.php"] [unique_id "aaYSHT4tNYh5NtLaTXcDAwAAAA0"]
[Tue Mar 03 06:41:33.899409 2026] [:error] [pid 36897:tid 36916] [client 52.138.16.158:23281] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaYSHSZC69_8eM0UouvpjwAAAM4"]
[Tue Mar 03 06:41:35.001557 2026] [:error] [pid 14042:tid 14059] [client 52.138.16.158:23228] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/momo.php"] [unique_id "aaYSH2eHGCmSEiIBcK4kcwAAAY8"]
[Tue Mar 03 06:41:35.453533 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:23203] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaYSH_bZCNtk8wDak9etAgAAAVQ"]
[Tue Mar 03 06:41:35.705967 2026] [:error] [pid 36785:tid 36854] [client 52.138.16.158:23345] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/momo.php"] [unique_id "aaYSH3hJejauENG9qTiYNQAAAIQ"]
[Tue Mar 03 06:41:36.121908 2026] [:error] [pid 36785:tid 36871] [client 52.138.16.158:23110] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaYSIHhJejauENG9qTiYNgAAAJU"]
[Tue Mar 03 06:41:36.271578 2026] [:error] [pid 36785:tid 36864] [client 52.138.16.158:23252] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaYSIHhJejauENG9qTiYNwAAAI4"]
[Tue Mar 03 06:41:37.026578 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:23186] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaYSIfbZCNtk8wDak9etCwAAAUg"]
[Tue Mar 03 06:41:37.195675 2026] [:error] [pid 20872:tid 20881] [client 52.138.16.158:23114] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaYSIYlYbNk3E_3CgBiK0wAAAQc"]
[Tue Mar 03 06:41:38.020520 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:23229] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaYSIvbZCNtk8wDak9etFgAAAUg"]
[Tue Mar 03 06:41:38.774041 2026] [:error] [pid 36783:tid 36796] [client 52.138.16.158:23290] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aaYSIj4tNYh5NtLaTXcDBwAAAAI"]
[Tue Mar 03 06:41:39.340868 2026] [:error] [pid 14042:tid 14053] [client 52.138.16.158:23173] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "aaYSI2eHGCmSEiIBcK4keAAAAYk"]
[Tue Mar 03 06:41:39.530588 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:23195] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaYSI2eHGCmSEiIBcK4kegAAAYU"]
[Tue Mar 03 06:41:40.094196 2026] [:error] [pid 20872:tid 20882] [client 52.138.16.158:23125] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaYSJIlYbNk3E_3CgBiK1AAAAQg"]
[Tue Mar 03 06:41:40.439510 2026] [:error] [pid 36785:tid 36852] [client 52.138.16.158:23313] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaYSJHhJejauENG9qTiYPQAAAII"]
[Tue Mar 03 06:41:40.733193 2026] [:error] [pid 36785:tid 36865] [client 52.138.16.158:23210] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "aaYSJHhJejauENG9qTiYQAAAAI8"]
[Tue Mar 03 06:41:45.293069 2026] [:error] [pid 36897:tid 36921] [client 52.138.16.158:23530] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaYSKSZC69_8eM0UouvpsQAAANM"]
[Tue Mar 03 06:41:45.347269 2026] [:error] [pid 36897:tid 36907] [client 52.138.16.158:23105] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aaYSKSZC69_8eM0UouvpsgAAAMU"]
[Tue Mar 03 06:41:45.978510 2026] [:error] [pid 36897:tid 36919] [client 52.138.16.158:23224] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aaYSKSZC69_8eM0UouvpuAAAANE"]
[Tue Mar 03 06:41:46.684748 2026] [:error] [pid 36784:tid 36838] [client 52.138.16.158:23550] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaYSKnNeKOSGbW9kDgTW5AAAAE8"]
[Tue Mar 03 06:41:47.034606 2026] [:error] [pid 36897:tid 36920] [client 52.138.16.158:23112] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aaYSKyZC69_8eM0UouvpuwAAANI"]
[Tue Mar 03 06:41:47.588125 2026] [:error] [pid 36783:tid 36809] [client 52.138.16.158:23128] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aaYSKz4tNYh5NtLaTXcDDAAAAA8"]
[Tue Mar 03 06:41:47.976995 2026] [:error] [pid 36897:tid 36915] [client 52.138.16.158:23429] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaYSKyZC69_8eM0UouvpvgAAAM0"]
[Tue Mar 03 06:41:49.681203 2026] [:error] [pid 14042:tid 14063] [client 52.138.16.158:23508] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaYSLWeHGCmSEiIBcK4khgAAAZM"]
[Tue Mar 03 06:41:49.944709 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:23217] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaYSLfbZCNtk8wDak9etNAAAAUE"]
[Tue Mar 03 06:41:50.256427 2026] [:error] [pid 14042:tid 14059] [client 52.138.16.158:23202] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaYSLmeHGCmSEiIBcK4kiAAAAY8"]
[Tue Mar 03 06:41:51.374817 2026] [:error] [pid 36897:tid 36917] [client 52.138.16.158:23204] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaYSLyZC69_8eM0UouvpxAAAAM8"]
[Tue Mar 03 06:41:51.491843 2026] [:error] [pid 26186:tid 26200] [client 52.138.16.158:23211] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaYSL_bZCNtk8wDak9etOgAAAUw"]
[Tue Mar 03 06:41:52.737575 2026] [:error] [pid 26186:tid 26199] [client 52.138.16.158:23197] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaYSMPbZCNtk8wDak9etRAAAAUs"]
[Tue Mar 03 06:41:52.894158 2026] [:error] [pid 14042:tid 14064] [client 52.138.16.158:23135] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaYSMGeHGCmSEiIBcK4kjQAAAZQ"]
[Tue Mar 03 06:41:53.520945 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:23131] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaYSMfbZCNtk8wDak9etRgAAAUY"]
[Tue Mar 03 06:41:53.645036 2026] [:error] [pid 14042:tid 14047] [client 52.138.16.158:23087] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "aaYSMWeHGCmSEiIBcK4kjgAAAYM"]
[Tue Mar 03 06:41:54.392506 2026] [:error] [pid 36783:tid 36799] [client 52.138.16.158:23424] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaYSMj4tNYh5NtLaTXcDDQAAAAU"]
[Tue Mar 03 06:41:54.674692 2026] [:error] [pid 26186:tid 26195] [client 52.138.16.158:23551] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaYSMvbZCNtk8wDak9etTgAAAUc"]
[Tue Mar 03 06:41:56.088486 2026] [:error] [pid 36784:tid 36837] [client 52.138.16.158:23547] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaYSNHNeKOSGbW9kDgTW6wAAAE4"]
[Tue Mar 03 06:41:56.696060 2026] [:error] [pid 26186:tid 26205] [client 52.138.16.158:23176] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaYSNPbZCNtk8wDak9etWQAAAVE"]
[Tue Mar 03 06:41:57.347478 2026] [:error] [pid 36784:tid 36836] [client 52.138.16.158:23542] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaYSNXNeKOSGbW9kDgTW7AAAAE0"]
[Tue Mar 03 06:41:57.809809 2026] [:error] [pid 36784:tid 36845] [client 52.138.16.158:23536] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaYSNXNeKOSGbW9kDgTW7QAAAFY"]
[Tue Mar 03 06:41:59.155828 2026] [:error] [pid 36897:tid 36918] [client 52.138.16.158:23118] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaYSNyZC69_8eM0UouvpzQAAANA"]
[Tue Mar 03 06:42:01.387018 2026] [:error] [pid 36897:tid 36915] [client 52.138.16.158:23512] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaYSOSZC69_8eM0Uouvp0gAAAM0"]
[Tue Mar 03 06:42:01.872115 2026] [:error] [pid 36785:tid 36854] [client 52.138.16.158:23212] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aaYSOXhJejauENG9qTiYTwAAAIQ"]
[Tue Mar 03 06:42:03.227591 2026] [:error] [pid 26186:tid 26205] [client 52.138.16.158:23417] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaYSO_bZCNtk8wDak9etZwAAAVE"]
[Tue Mar 03 06:42:03.957833 2026] [:error] [pid 26186:tid 26211] [client 52.138.16.158:23540] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaYSO_bZCNtk8wDak9etbQAAAVc"]
[Tue Mar 03 06:42:04.674748 2026] [:error] [pid 26186:tid 26191] [client 52.138.16.158:23488] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaYSPPbZCNtk8wDak9etcAAAAUM"]
[Tue Mar 03 06:42:04.998118 2026] [:error] [pid 36784:tid 36842] [client 52.138.16.158:23530] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaYSPHNeKOSGbW9kDgTW8QAAAFM"]
[Tue Mar 03 06:42:05.858581 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:23155] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaYSPfbZCNtk8wDak9ethgAAAU8"]
[Tue Mar 03 06:42:06.471157 2026] [:error] [pid 36897:tid 36915] [client 52.138.16.158:23433] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaYSPiZC69_8eM0Uouvp3gAAAM0"]
[Tue Mar 03 06:42:06.967455 2026] [:error] [pid 36897:tid 36902] [client 52.138.16.158:23133] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaYSPiZC69_8eM0Uouvp3wAAAMA"]
[Tue Mar 03 06:42:07.538277 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:23522] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaYSP_bZCNtk8wDak9etpgAAAUA"]
[Tue Mar 03 06:42:07.993031 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:23533] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "aaYSP2eHGCmSEiIBcK4klAAAAZY"]
[Tue Mar 03 06:42:08.894756 2026] [:error] [pid 26186:tid 26210] [client 52.138.16.158:23106] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaYSQPbZCNtk8wDak9etuQAAAVY"]
[Tue Mar 03 06:42:09.023087 2026] [:error] [pid 20872:tid 20896] [client 52.138.16.158:23499] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaYSQYlYbNk3E_3CgBiLBQAAARY"]
[Tue Mar 03 06:42:09.516129 2026] [:error] [pid 14042:tid 14067] [client 52.138.16.158:23232] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaYSQWeHGCmSEiIBcK4kmQAAAZc"]
[Tue Mar 03 06:42:09.792872 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:23187] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaYSQfbZCNtk8wDak9etxAAAAU8"]
[Tue Mar 03 06:42:11.171299 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:23267] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaYSQ_bZCNtk8wDak9et3AAAAVQ"]
[Tue Mar 03 06:42:11.258516 2026] [:error] [pid 36897:tid 36904] [client 52.138.16.158:23426] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaYSQyZC69_8eM0Uouvp4gAAAMI"]
[Tue Mar 03 06:42:12.040971 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:23430] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaYSRPbZCNtk8wDak9et7gAAAUo"]
[Tue Mar 03 06:42:12.401087 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:23107] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aaYSRPbZCNtk8wDak9et8wAAAVQ"]
[Tue Mar 03 06:42:13.345920 2026] [:error] [pid 36783:tid 36799] [client 52.138.16.158:23189] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaYSRT4tNYh5NtLaTXcDGQAAAAU"]
[Tue Mar 03 06:42:13.716677 2026] [:error] [pid 36784:tid 36833] [client 52.138.16.158:23144] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaYSRXNeKOSGbW9kDgTXAwAAAEo"]
[Tue Mar 03 06:42:14.097009 2026] [:error] [pid 14042:tid 14060] [client 52.138.16.158:23283] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaYSRmeHGCmSEiIBcK4kqAAAAZA"]
[Tue Mar 03 06:42:15.939461 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23163] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaYSR_bZCNtk8wDak9euHwAAAUk"]
[Tue Mar 03 06:42:16.518214 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23127] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaYSSGeHGCmSEiIBcK4ksAAAAYo"]
[Tue Mar 03 06:42:18.017400 2026] [:error] [pid 36897:tid 36920] [client 52.138.16.158:23477] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaYSSiZC69_8eM0Uouvp8wAAANI"]
[Tue Mar 03 06:42:18.073428 2026] [:error] [pid 26186:tid 26202] [client 52.138.16.158:23534] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaYSSvbZCNtk8wDak9euKwAAAU4"]
[Tue Mar 03 06:42:19.014168 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:23109] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaYSS_bZCNtk8wDak9euMgAAAU8"]
[Tue Mar 03 06:42:19.326014 2026] [:error] [pid 36784:tid 36842] [client 52.138.16.158:23152] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "aaYSS3NeKOSGbW9kDgTXBgAAAFM"]
[Tue Mar 03 06:42:19.974631 2026] [:error] [pid 14042:tid 14044] [client 52.138.16.158:23443] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaYSS2eHGCmSEiIBcK4kuAAAAYA"]
[Tue Mar 03 06:42:20.251973 2026] [:error] [pid 20872:tid 20889] [client 52.138.16.158:23432] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaYSTIlYbNk3E_3CgBiLDwAAAQ8"]
[Tue Mar 03 06:42:22.304810 2026] [:error] [pid 36785:tid 36869] [client 52.138.16.158:23223] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaYSTnhJejauENG9qTiYZAAAAJM"]
[Tue Mar 03 06:42:23.399200 2026] [:error] [pid 20872:tid 20894] [client 52.138.16.158:23520] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaYST4lYbNk3E_3CgBiLFQAAARQ"]
[Tue Mar 03 06:42:25.000291 2026] [:error] [pid 36897:tid 36911] [client 52.138.16.158:23532] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaYSUCZC69_8eM0UouvqAAAAAMk"]
[Tue Mar 03 06:42:25.305323 2026] [:error] [pid 36784:tid 36832] [client 52.138.16.158:23529] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaYSUXNeKOSGbW9kDgTXDQAAAEk"]
[Tue Mar 03 06:42:26.500777 2026] [:error] [pid 26186:tid 26210] [client 52.138.16.158:23494] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaYSUvbZCNtk8wDak9euOgAAAVY"]
[Tue Mar 03 06:42:26.507173 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23436] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aaYSUvbZCNtk8wDak9euOwAAAUk"]
[Tue Mar 03 06:42:27.429057 2026] [:error] [pid 26186:tid 26190] [client 52.138.16.158:23489] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaYSU_bZCNtk8wDak9euQQAAAUI"]
[Tue Mar 03 06:42:28.033914 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:23439] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaYSVPbZCNtk8wDak9euRgAAAUE"]
[Tue Mar 03 06:42:28.737175 2026] [:error] [pid 36784:tid 36833] [client 52.138.16.158:23461] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaYSVHNeKOSGbW9kDgTXFAAAAEo"]
[Tue Mar 03 06:42:30.645973 2026] [:error] [pid 36785:tid 36868] [client 52.138.16.158:23523] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaYSVnhJejauENG9qTiYbAAAAJI"]
[Tue Mar 03 06:42:31.547682 2026] [:error] [pid 36784:tid 36830] [client 52.138.16.158:23209] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaYSV3NeKOSGbW9kDgTXNQAAAEc"]
[Tue Mar 03 06:42:32.225257 2026] [:error] [pid 36784:tid 36833] [client 52.138.16.158:23226] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaYSWHNeKOSGbW9kDgTXPgAAAEo"]
[Tue Mar 03 06:42:32.814073 2026] [:error] [pid 14042:tid 14058] [client 52.138.16.158:23435] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaYSWGeHGCmSEiIBcK4kxwAAAY4"]
[Tue Mar 03 06:42:33.803054 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:23492] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aaYSWfbZCNtk8wDak9euWgAAAUE"]
[Tue Mar 03 06:42:35.367290 2026] [:error] [pid 20872:tid 20875] [client 52.138.16.158:23526] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "aaYSW4lYbNk3E_3CgBiLIQAAAQE"]
[Tue Mar 03 06:42:37.326092 2026] [:error] [pid 20872:tid 20879] [client 52.138.16.158:23469] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaYSXYlYbNk3E_3CgBiLJgAAAQU"]
[Tue Mar 03 06:42:40.007620 2026] [:error] [pid 36785:tid 36862] [client 52.138.16.158:23463] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaYSYHhJejauENG9qTiYkQAAAIw"]
[Tue Mar 03 06:42:41.411836 2026] [:error] [pid 20872:tid 20889] [client 52.138.16.158:23431] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaYSYYlYbNk3E_3CgBiLLAAAAQ8"]
[Tue Mar 03 06:42:42.791356 2026] [:error] [pid 36897:tid 36904] [client 52.138.16.158:23120] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaYSYiZC69_8eM0UouvqNAAAAMI"]
[Tue Mar 03 06:42:42.808983 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:23227] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaYSYvbZCNtk8wDak9eueQAAAUY"]
[Tue Mar 03 06:42:44.458759 2026] [:error] [pid 26186:tid 26191] [client 52.138.16.158:23126] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aaYSZPbZCNtk8wDak9eugQAAAUM"]
[Tue Mar 03 06:42:44.577928 2026] [:error] [pid 26186:tid 26199] [client 52.138.16.158:23510] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aaYSZPbZCNtk8wDak9euggAAAUs"]
[Tue Mar 03 06:42:54.210641 2026] [:error] [pid 14042:tid 14052] [client 52.138.16.158:23151] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaYSbmeHGCmSEiIBcK4lEwAAAYg"]
[Tue Mar 03 06:42:55.104041 2026] [:error] [pid 36897:tid 36914] [client 52.138.16.158:23517] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaYSbyZC69_8eM0UouvqQAAAAMw"]
[Tue Mar 03 06:42:56.334172 2026] [:error] [pid 36785:tid 36868] [client 52.138.16.158:23486] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaYScHhJejauENG9qTiYnwAAAJI"]
[Tue Mar 03 06:42:56.951016 2026] [:error] [pid 14042:tid 14057] [client 52.138.16.158:23509] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaYScGeHGCmSEiIBcK4lFgAAAY0"]
[Tue Mar 03 06:42:57.899264 2026] [:error] [pid 26186:tid 26191] [client 52.138.16.158:23442] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaYScfbZCNtk8wDak9eupQAAAUM"]
[Tue Mar 03 06:42:57.944866 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:23543] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaYScfbZCNtk8wDak9eupgAAAU0"]
[Tue Mar 03 06:43:00.058063 2026] [:error] [pid 36785:tid 36872] [client 52.138.16.158:23541] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaYSdHhJejauENG9qTiYowAAAJY"]
[Tue Mar 03 06:43:00.106130 2026] [:error] [pid 36783:tid 36805] [client 52.138.16.158:23437] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "aaYSdD4tNYh5NtLaTXcDNgAAAAs"]
[Tue Mar 03 06:43:01.427116 2026] [:error] [pid 36785:tid 36853] [client 52.138.16.158:23525] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaYSdXhJejauENG9qTiYpgAAAIM"]
[Tue Mar 03 06:43:01.495822 2026] [:error] [pid 36785:tid 36851] [client 52.138.16.158:23470] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaYSdXhJejauENG9qTiYpwAAAIE"]
[Tue Mar 03 06:43:02.154875 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:23208] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaYSdvbZCNtk8wDak9eurgAAAU8"]
[Tue Mar 03 06:43:02.758310 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:23162] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaYSdvbZCNtk8wDak9euswAAAUg"]
[Tue Mar 03 06:43:02.802847 2026] [:error] [pid 20872:tid 20879] [client 52.138.16.158:23487] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaYSdolYbNk3E_3CgBiLTQAAAQU"]
[Tue Mar 03 06:43:03.550808 2026] [:error] [pid 20872:tid 20889] [client 52.138.16.158:23548] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaYSd4lYbNk3E_3CgBiLUQAAAQ8"]
[Tue Mar 03 06:43:03.791530 2026] [:error] [pid 36897:tid 36917] [client 52.138.16.158:23372] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/god.php"] [unique_id "aaYSdyZC69_8eM0UouvqRwAAAM8"]
[Tue Mar 03 06:43:04.504013 2026] [:error] [pid 36785:tid 36850] [client 52.138.16.158:23545] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaYSeHhJejauENG9qTiYrgAAAIA"]
[Tue Mar 03 06:43:04.920979 2026] [:error] [pid 20872:tid 20882] [client 52.138.16.158:23367] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaYSeIlYbNk3E_3CgBiLVgAAAQg"]
[Tue Mar 03 06:43:05.798264 2026] [:error] [pid 20872:tid 20883] [client 52.138.16.158:23377] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaYSeYlYbNk3E_3CgBiLWwAAAQk"]
[Tue Mar 03 06:43:06.141726 2026] [:error] [pid 36784:tid 36826] [client 52.138.16.158:23534] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaYSenNeKOSGbW9kDgTXgwAAAEM"]
[Tue Mar 03 06:43:07.037210 2026] [:error] [pid 36784:tid 36835] [client 52.138.16.158:23444] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaYSe3NeKOSGbW9kDgTXhAAAAEw"]
[Tue Mar 03 06:43:07.868295 2026] [:error] [pid 36784:tid 36830] [client 52.138.16.158:23415] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X57.php"] [unique_id "aaYSe3NeKOSGbW9kDgTXhgAAAEc"]
[Tue Mar 03 06:43:07.886703 2026] [:error] [pid 36785:tid 36854] [client 52.138.16.158:23496] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaYSe3hJejauENG9qTiYtAAAAIQ"]
[Tue Mar 03 06:43:08.821275 2026] [:error] [pid 36783:tid 36798] [client 52.138.16.158:23364] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaYSfD4tNYh5NtLaTXcDQAAAAAQ"]
[Tue Mar 03 06:43:09.958639 2026] [:error] [pid 36784:tid 36839] [client 52.138.16.158:23286] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaYSfXNeKOSGbW9kDgTXiAAAAFA"]
[Tue Mar 03 06:43:10.047843 2026] [:error] [pid 20872:tid 20885] [client 52.138.16.158:23425] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaYSfolYbNk3E_3CgBiLagAAAQs"]
[Tue Mar 03 06:43:15.322023 2026] [:error] [pid 20872:tid 20896] [client 52.138.16.158:23507] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaYSg4lYbNk3E_3CgBiLeAAAARY"]
[Tue Mar 03 06:43:16.573128 2026] [:error] [pid 14042:tid 14059] [client 52.138.16.158:23465] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaYShGeHGCmSEiIBcK4lJQAAAY8"]
[Tue Mar 03 06:43:17.133210 2026] [:error] [pid 26186:tid 26206] [client 52.138.16.158:23537] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "aaYShfbZCNtk8wDak9euwwAAAVI"]
[Tue Mar 03 06:43:18.546533 2026] [:error] [pid 36785:tid 36857] [client 52.138.16.158:23452] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaYShnhJejauENG9qTiYxgAAAIc"]
[Tue Mar 03 06:43:21.311670 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:23549] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaYSifbZCNtk8wDak9eu0AAAAUA"]
[Tue Mar 03 06:43:22.090048 2026] [:error] [pid 36897:tid 36921] [client 52.138.16.158:23458] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaYSiiZC69_8eM0UouvqXgAAANM"]
[Tue Mar 03 06:43:23.981167 2026] [:error] [pid 26186:tid 26192] [client 52.138.16.158:23502] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "aaYSi_bZCNtk8wDak9eu2wAAAUQ"]
[Tue Mar 03 06:43:25.024905 2026] [:error] [pid 26186:tid 26195] [client 52.138.16.158:23160] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaYSjfbZCNtk8wDak9eu3QAAAUc"]
[Tue Mar 03 06:43:27.013354 2026] [:error] [pid 36785:tid 36860] [client 52.138.16.158:23448] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seetox.php"] [unique_id "aaYSj3hJejauENG9qTiY1QAAAIo"]
[Tue Mar 03 06:43:29.261112 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:23362] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYSkWeHGCmSEiIBcK4lNAAAAZY"]
[Tue Mar 03 06:43:32.064151 2026] [:error] [pid 36784:tid 36843] [client 52.138.16.158:23453] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaYSlHNeKOSGbW9kDgTXpwAAAFQ"]
[Tue Mar 03 06:43:32.318225 2026] [:error] [pid 36784:tid 36824] [client 52.138.16.158:23459] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYSlHNeKOSGbW9kDgTXqgAAAEE"]
[Tue Mar 03 06:43:32.944555 2026] [:error] [pid 36783:tid 36810] [client 52.138.16.158:23380] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaYSlD4tNYh5NtLaTXcDYwAAABA"]
[Tue Mar 03 06:43:33.298332 2026] [:error] [pid 36783:tid 36801] [client 52.138.16.158:23518] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYSlT4tNYh5NtLaTXcDZAAAAAc"]
[Tue Mar 03 06:43:34.348628 2026] [:error] [pid 20872:tid 20876] [client 52.138.16.158:23504] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaYSlolYbNk3E_3CgBiLfQAAAQI"]
[Tue Mar 03 06:43:34.784660 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:23478] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaYSlvbZCNtk8wDak9eu5wAAAUY"]
[Tue Mar 03 06:43:35.451078 2026] [:error] [pid 36783:tid 36797] [client 52.138.16.158:23455] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fot.php"] [unique_id "aaYSlz4tNYh5NtLaTXcDagAAAAM"]
[Tue Mar 03 06:43:35.765540 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:23376] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaYSl_bZCNtk8wDak9eu6AAAAU0"]
[Tue Mar 03 06:43:36.305202 2026] [:error] [pid 36784:tid 36834] [client 52.138.16.158:23440] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aaYSmHNeKOSGbW9kDgTXsgAAAEs"]
[Tue Mar 03 06:43:36.689552 2026] [:error] [pid 36784:tid 36847] [client 52.138.16.158:23498] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaYSmHNeKOSGbW9kDgTXtQAAAFg"]
[Tue Mar 03 06:43:37.284602 2026] [:error] [pid 36897:tid 36925] [client 52.138.16.158:23471] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aaYSmSZC69_8eM0UouvqaQAAANc"]
[Tue Mar 03 06:43:38.152531 2026] [:error] [pid 26186:tid 26195] [client 52.138.16.158:23428] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaYSmvbZCNtk8wDak9eu7gAAAUc"]
[Tue Mar 03 06:43:38.705329 2026] [:error] [pid 26186:tid 26212] [client 52.138.16.158:23493] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aaYSmvbZCNtk8wDak9eu7wAAAVg"]
[Tue Mar 03 06:43:39.039308 2026] [:error] [pid 26186:tid 26190] [client 52.138.16.158:23393] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aaYSm_bZCNtk8wDak9eu8AAAAUI"]
[Tue Mar 03 06:43:39.310426 2026] [:error] [pid 26186:tid 26199] [client 52.138.16.158:23369] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aaYSm_bZCNtk8wDak9eu8gAAAUs"]
[Tue Mar 03 06:43:40.419935 2026] [:error] [pid 26186:tid 26204] [client 52.138.16.158:23544] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "aaYSnPbZCNtk8wDak9eu-gAAAVA"]
[Tue Mar 03 06:43:40.438977 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:23429] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaYSnPbZCNtk8wDak9eu-wAAAVQ"]
[Tue Mar 03 06:43:41.411991 2026] [:error] [pid 14042:tid 14062] [client 52.138.16.158:23519] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaYSnWeHGCmSEiIBcK4lQgAAAZI"]
[Tue Mar 03 06:43:41.493523 2026] [:error] [pid 20872:tid 20880] [client 52.138.16.158:23482] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "aaYSnYlYbNk3E_3CgBiLgAAAAQY"]
[Tue Mar 03 06:43:42.918039 2026] [:error] [pid 20872:tid 20883] [client 52.138.16.158:23441] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "aaYSnolYbNk3E_3CgBiLhAAAAQk"]
[Tue Mar 03 06:43:43.461610 2026] [:error] [pid 36783:tid 36817] [client 52.138.16.158:23451] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaYSnz4tNYh5NtLaTXcDdAAAABc"]
[Tue Mar 03 06:43:44.169558 2026] [:error] [pid 14042:tid 14048] [client 52.138.16.158:23111] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "aaYSoGeHGCmSEiIBcK4lSAAAAYQ"]
[Tue Mar 03 06:43:44.904713 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:23419] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aaYSoPbZCNtk8wDak9evBgAAAVM"]
[Tue Mar 03 06:43:45.969660 2026] [:error] [pid 20872:tid 20881] [client 52.138.16.158:23320] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aaYSoYlYbNk3E_3CgBiLiAAAAQc"]
[Tue Mar 03 06:43:47.522679 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23378] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aaYSo_bZCNtk8wDak9evEAAAAUk"]
[Tue Mar 03 06:43:48.298965 2026] [:error] [pid 36784:tid 36823] [client 52.138.16.158:23316] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaYSpHNeKOSGbW9kDgTXugAAAEA"]
[Tue Mar 03 06:43:48.633722 2026] [:error] [pid 14042:tid 14051] [client 52.138.16.158:23381] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aaYSpGeHGCmSEiIBcK4lTQAAAYc"]
[Tue Mar 03 06:43:50.121216 2026] [:error] [pid 14042:tid 14057] [client 52.138.16.158:23513] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aaYSpmeHGCmSEiIBcK4lVgAAAY0"]
[Tue Mar 03 06:43:51.582569 2026] [:error] [pid 20872:tid 20875] [client 52.138.16.158:23446] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "aaYSp4lYbNk3E_3CgBiLjgAAAQE"]
[Tue Mar 03 06:43:51.999914 2026] [:error] [pid 14042:tid 14061] [client 52.138.16.158:23408] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/un.php"] [unique_id "aaYSp2eHGCmSEiIBcK4lWwAAAZE"]
[Tue Mar 03 06:43:52.955195 2026] [:error] [pid 14042:tid 14045] [client 52.138.16.158:23373] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "aaYSqGeHGCmSEiIBcK4lYQAAAYE"]
[Tue Mar 03 06:43:57.788108 2026] [:error] [pid 26186:tid 26204] [client 52.138.16.158:23488] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aaYSrfbZCNtk8wDak9evOAAAAVA"]
[Tue Mar 03 06:43:57.929576 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:23435] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aaYSrfbZCNtk8wDak9evOgAAAUA"]
[Tue Mar 03 06:43:58.599056 2026] [:error] [pid 26186:tid 26209] [client 52.138.16.158:23434] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aaYSrvbZCNtk8wDak9evPQAAAVU"]
[Tue Mar 03 06:43:59.299038 2026] [:error] [pid 20872:tid 20897] [client 52.138.16.158:23506] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aaYSr4lYbNk3E_3CgBiLkwAAARc"]
[Tue Mar 03 06:43:59.379099 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:23440] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aaYSr_bZCNtk8wDak9evRAAAAU8"]
[Tue Mar 03 06:44:00.473424 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:23501] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aaYSsGeHGCmSEiIBcK4liQAAAYU"]
[Tue Mar 03 06:44:00.725402 2026] [:error] [pid 20872:tid 20884] [client 52.138.16.158:23529] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aaYSsIlYbNk3E_3CgBiLlgAAAQo"]
[Tue Mar 03 06:44:01.356736 2026] [:error] [pid 14042:tid 14050] [client 52.138.16.158:23503] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaYSsWeHGCmSEiIBcK4lkAAAAYY"]
[Tue Mar 03 06:44:01.698880 2026] [:error] [pid 26186:tid 26196] [client 52.138.16.158:23501] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aaYSsfbZCNtk8wDak9evSwAAAUg"]
[Tue Mar 03 06:44:01.945872 2026] [:error] [pid 14042:tid 14046] [client 52.138.16.158:23069] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aaYSsWeHGCmSEiIBcK4lkQAAAYI"]
[Tue Mar 03 06:44:02.227772 2026] [:error] [pid 26186:tid 26190] [client 52.138.16.158:23508] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaYSsvbZCNtk8wDak9evTgAAAUI"]
[Tue Mar 03 06:44:02.880982 2026] [:error] [pid 36897:tid 36906] [client 52.138.16.158:23521] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaYSsiZC69_8eM0UouvqiwAAAMQ"]
[Tue Mar 03 06:44:02.920789 2026] [:error] [pid 20872:tid 20883] [client 52.138.16.158:23550] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aaYSsolYbNk3E_3CgBiLmwAAAQk"]
[Tue Mar 03 06:44:03.674558 2026] [:error] [pid 14042:tid 14051] [client 52.138.16.158:23488] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaYSs2eHGCmSEiIBcK4llAAAAYc"]
[Tue Mar 03 06:44:03.796503 2026] [:error] [pid 36784:tid 36827] [client 52.138.16.158:23358] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aaYSs3NeKOSGbW9kDgTXwgAAAEQ"]
[Tue Mar 03 06:44:04.542833 2026] [:error] [pid 14042:tid 14068] [client 52.138.16.158:23383] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aaYStGeHGCmSEiIBcK4lmgAAAZg"]
[Tue Mar 03 06:44:04.664447 2026] [:error] [pid 26186:tid 26190] [client 52.138.16.158:23538] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "aaYStPbZCNtk8wDak9evUwAAAUI"]
[Tue Mar 03 06:44:05.415686 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23514] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaYStWeHGCmSEiIBcK4lnQAAAYo"]
[Tue Mar 03 06:44:05.476836 2026] [:error] [pid 14042:tid 14061] [client 52.138.16.158:23413] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aaYStWeHGCmSEiIBcK4lngAAAZE"]
[Tue Mar 03 06:44:06.275777 2026] [:error] [pid 36897:tid 36920] [client 52.138.16.158:23457] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aaYStiZC69_8eM0UouvqlgAAANI"]
[Tue Mar 03 06:44:06.961169 2026] [:error] [pid 14042:tid 14053] [client 52.138.16.158:23447] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaYStmeHGCmSEiIBcK4lpgAAAYk"]
[Tue Mar 03 06:44:07.335165 2026] [:error] [pid 26186:tid 26190] [client 52.138.16.158:23231] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aaYSt_bZCNtk8wDak9evXQAAAUI"]
[Tue Mar 03 06:44:08.056663 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:23484] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaYSuPbZCNtk8wDak9evYwAAAU0"]
[Tue Mar 03 06:44:08.473168 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:23341] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaYSuPbZCNtk8wDak9evZgAAAUY"]
[Tue Mar 03 06:44:09.370285 2026] [:error] [pid 14042:tid 14055] [client 52.138.16.158:23411] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aaYSuWeHGCmSEiIBcK4lsQAAAYs"]
[Tue Mar 03 06:44:09.594402 2026] [:error] [pid 14042:tid 14068] [client 52.138.16.158:23485] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaYSuWeHGCmSEiIBcK4lsgAAAZg"]
[Tue Mar 03 06:44:10.255072 2026] [:error] [pid 14042:tid 14045] [client 52.138.16.158:23445] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aaYSumeHGCmSEiIBcK4ltQAAAYE"]
[Tue Mar 03 06:44:11.288344 2026] [:error] [pid 26186:tid 26190] [client 52.138.16.158:23384] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aaYSu_bZCNtk8wDak9evbwAAAUI"]
[Tue Mar 03 06:44:11.448666 2026] [:error] [pid 26186:tid 26200] [client 52.138.16.158:23539] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaYSu_bZCNtk8wDak9evcAAAAUw"]
[Tue Mar 03 06:44:12.954024 2026] [:error] [pid 26186:tid 26211] [client 52.138.16.158:23527] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaYSvPbZCNtk8wDak9evdwAAAVc"]
[Tue Mar 03 06:44:13.182167 2026] [:error] [pid 26186:tid 26193] [client 52.138.16.158:23399] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aaYSvfbZCNtk8wDak9evegAAAUU"]
[Tue Mar 03 06:44:14.980541 2026] [:error] [pid 26186:tid 26212] [client 52.138.16.158:23354] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaYSvvbZCNtk8wDak9evgAAAAVg"]
[Tue Mar 03 06:44:15.792093 2026] [:error] [pid 36784:tid 36840] [client 52.138.16.158:23368] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aaYSv3NeKOSGbW9kDgTXxAAAAFE"]
[Tue Mar 03 06:44:16.036798 2026] [:error] [pid 26186:tid 26190] [client 52.138.16.158:23398] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaYSwPbZCNtk8wDak9evhQAAAUI"]
[Tue Mar 03 06:44:16.993043 2026] [:error] [pid 26186:tid 26200] [client 52.138.16.158:23333] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaYSwPbZCNtk8wDak9eviAAAAUw"]
[Tue Mar 03 06:44:17.001319 2026] [:error] [pid 26186:tid 26203] [client 52.138.16.158:23438] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaYSwfbZCNtk8wDak9evigAAAU8"]
[Tue Mar 03 06:44:18.006290 2026] [:error] [pid 26186:tid 26197] [client 52.138.16.158:23495] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaYSwvbZCNtk8wDak9evjgAAAUk"]
[Tue Mar 03 06:44:18.168284 2026] [:error] [pid 14042:tid 14049] [client 52.138.16.158:23528] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaYSwmeHGCmSEiIBcK4l1gAAAYU"]
[Tue Mar 03 06:44:18.893306 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:23449] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaYSwvbZCNtk8wDak9evkwAAAUE"]
[Tue Mar 03 06:44:19.991966 2026] [:error] [pid 14042:tid 14060] [client 52.138.16.158:23475] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaYSw2eHGCmSEiIBcK4l2wAAAZA"]
[Tue Mar 03 06:44:20.339284 2026] [:error] [pid 14042:tid 14048] [client 52.138.16.158:23323] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aaYSxGeHGCmSEiIBcK4l3QAAAYQ"]
[Tue Mar 03 06:44:21.049406 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:23474] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaYSxWeHGCmSEiIBcK4l4AAAAZY"]
[Tue Mar 03 06:44:21.676069 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23404] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaYSxWeHGCmSEiIBcK4l5gAAAYo"]
[Tue Mar 03 06:44:21.696583 2026] [:error] [pid 36783:tid 36798] [client 52.138.16.158:23414] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaYSxT4tNYh5NtLaTXcDfAAAAAQ"]
[Tue Mar 03 06:44:23.328047 2026] [:error] [pid 20872:tid 20890] [client 52.138.16.158:23287] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaYSx4lYbNk3E_3CgBiLuQAAARA"]
[Tue Mar 03 06:44:23.458807 2026] [:error] [pid 20872:tid 20891] [client 52.138.16.158:23412] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaYSx4lYbNk3E_3CgBiLugAAARE"]
[Tue Mar 03 06:44:24.116349 2026] [:error] [pid 26186:tid 26205] [client 52.138.16.158:23410] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaYSyPbZCNtk8wDak9evqgAAAVE"]
[Tue Mar 03 06:44:25.454098 2026] [:error] [pid 36784:tid 36830] [client 52.138.16.158:23386] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaYSyXNeKOSGbW9kDgTXyAAAAEc"]
[Tue Mar 03 06:44:26.081855 2026] [:error] [pid 36897:tid 36909] [client 52.138.16.158:23450] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aaYSyiZC69_8eM0UouvqogAAAMc"]
[Tue Mar 03 06:44:26.453910 2026] [:error] [pid 36784:tid 36824] [client 52.138.16.158:23222] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaYSynNeKOSGbW9kDgTXywAAAEE"]
[Tue Mar 03 06:44:27.097316 2026] [:error] [pid 20872:tid 20879] [client 52.138.16.158:23480] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaYSy4lYbNk3E_3CgBiLyQAAAQU"]
[Tue Mar 03 06:44:27.195974 2026] [:error] [pid 14042:tid 14064] [client 52.138.16.158:23515] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaYSy2eHGCmSEiIBcK4l8QAAAZQ"]
[Tue Mar 03 06:44:28.219966 2026] [:error] [pid 36897:tid 36904] [client 52.138.16.158:23315] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaYSzCZC69_8eM0UouvqpwAAAMI"]
[Tue Mar 03 06:44:28.536731 2026] [:error] [pid 20872:tid 20881] [client 52.138.16.158:23170] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaYSzIlYbNk3E_3CgBiLywAAAQc"]
[Tue Mar 03 06:44:28.966689 2026] [:error] [pid 26186:tid 26209] [client 52.138.16.158:23456] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaYSzPbZCNtk8wDak9evsAAAAVU"]
[Tue Mar 03 06:44:29.164718 2026] [:error] [pid 26186:tid 26188] [client 52.138.16.158:23306] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYSzfbZCNtk8wDak9evswAAAUA"]
[Tue Mar 03 06:44:29.533323 2026] [:error] [pid 26186:tid 26201] [client 52.138.16.158:23491] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "aaYSzfbZCNtk8wDak9evtwAAAU0"]
[Tue Mar 03 06:44:30.518208 2026] [:error] [pid 36784:tid 36831] [client 52.138.16.158:23391] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaYSznNeKOSGbW9kDgTXzwAAAEg"]
[Tue Mar 03 06:44:30.608601 2026] [:error] [pid 20872:tid 20889] [client 52.138.16.158:23454] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYSzolYbNk3E_3CgBiLzAAAAQ8"]
[Tue Mar 03 06:44:31.208676 2026] [:error] [pid 14042:tid 14065] [client 52.138.16.158:23416] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaYSz2eHGCmSEiIBcK4l-wAAAZU"]
[Tue Mar 03 06:44:31.424690 2026] [:error] [pid 36897:tid 36912] [client 52.138.16.158:23500] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYSzyZC69_8eM0UouvqqgAAAMo"]
[Tue Mar 03 06:44:31.918343 2026] [:error] [pid 36784:tid 36829] [client 52.138.16.158:23314] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaYSz3NeKOSGbW9kDgTX0wAAAEY"]
[Tue Mar 03 06:44:32.089679 2026] [:error] [pid 14042:tid 14048] [client 52.138.16.158:23187] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYS0GeHGCmSEiIBcK4l_gAAAYQ"]
[Tue Mar 03 06:44:32.775845 2026] [:error] [pid 14042:tid 14045] [client 52.138.16.158:23483] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaYS0GeHGCmSEiIBcK4l_wAAAYE"]
[Tue Mar 03 06:44:32.973510 2026] [:error] [pid 36784:tid 36846] [client 52.138.16.158:23366] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aaYS0HNeKOSGbW9kDgTX1QAAAFc"]
[Tue Mar 03 06:44:33.857797 2026] [:error] [pid 36897:tid 36909] [client 52.138.16.158:23387] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaYS0SZC69_8eM0UouvqrgAAAMc"]
[Tue Mar 03 06:44:33.971641 2026] [:error] [pid 14042:tid 14057] [client 52.138.16.158:23481] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYS0WeHGCmSEiIBcK4mBAAAAY0"]
[Tue Mar 03 06:44:34.530132 2026] [:error] [pid 36784:tid 36833] [client 52.138.16.158:23395] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaYS0nNeKOSGbW9kDgTX1wAAAEo"]
[Tue Mar 03 06:44:34.943673 2026] [:error] [pid 36783:tid 36797] [client 52.138.16.158:23403] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYS0j4tNYh5NtLaTXcDhwAAAAM"]
[Tue Mar 03 06:44:35.063435 2026] [:error] [pid 36785:tid 36856] [client 101.33.55.204:48690] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaYS03hJejauENG9qTiY9AAAAIY"]
[Tue Mar 03 06:44:35.232859 2026] [:error] [pid 36784:tid 36841] [client 52.138.16.158:23546] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaYS03NeKOSGbW9kDgTX2gAAAFI"]
[Tue Mar 03 06:44:35.942599 2026] [:error] [pid 36785:tid 36853] [client 52.138.16.158:23113] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaYS03hJejauENG9qTiY9gAAAIM"]
[Tue Mar 03 06:44:36.268863 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:23535] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYS1PbZCNtk8wDak9evwgAAAUo"]
[Tue Mar 03 06:44:36.984743 2026] [:error] [pid 36784:tid 36840] [client 52.138.16.158:23497] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaYS1HNeKOSGbW9kDgTX3gAAAFE"]
[Tue Mar 03 06:44:37.069324 2026] [:error] [pid 36784:tid 36845] [client 52.138.16.158:23374] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYS1XNeKOSGbW9kDgTX3wAAAFY"]
[Tue Mar 03 06:44:37.962905 2026] [:error] [pid 26186:tid 26189] [client 52.138.16.158:23382] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaYS1fbZCNtk8wDak9evzgAAAUE"]
[Tue Mar 03 06:44:38.430523 2026] [:error] [pid 26186:tid 26202] [client 52.138.16.158:23468] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaYS1vbZCNtk8wDak9ev0AAAAU4"]
[Tue Mar 03 06:44:39.466000 2026] [:error] [pid 20872:tid 20882] [client 52.138.16.158:23370] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaYS14lYbNk3E_3CgBiL1QAAAQg"]
[Tue Mar 03 06:44:40.551771 2026] [:error] [pid 36785:tid 36860] [client 52.138.16.158:23255] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaYS2HhJejauENG9qTiY-wAAAIo"]
[Tue Mar 03 06:44:41.356260 2026] [:error] [pid 26186:tid 26190] [client 52.138.16.158:23467] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaYS2fbZCNtk8wDak9ev3gAAAUI"]
[Tue Mar 03 06:44:41.489590 2026] [:error] [pid 26186:tid 26207] [client 52.138.16.158:23473] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaYS2fbZCNtk8wDak9ev3wAAAVM"]
[Tue Mar 03 06:44:41.962920 2026] [:error] [pid 36784:tid 36830] [client 52.138.16.158:23346] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaYS2XNeKOSGbW9kDgTX5AAAAEc"]
[Tue Mar 03 06:44:43.199109 2026] [:error] [pid 36897:tid 36923] [client 52.138.16.158:23263] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aaYS2yZC69_8eM0Uouvq0AAAANU"]
[Tue Mar 03 06:44:44.731815 2026] [:error] [pid 20872:tid 20881] [client 52.138.16.158:23234] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaYS3IlYbNk3E_3CgBiL2gAAAQc"]
[Tue Mar 03 06:44:44.840772 2026] [:error] [pid 20872:tid 20898] [client 52.138.16.158:23389] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaYS3IlYbNk3E_3CgBiL2wAAARg"]
[Tue Mar 03 06:44:45.997038 2026] [:error] [pid 14042:tid 14068] [client 52.138.16.158:23418] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaYS3WeHGCmSEiIBcK4mGgAAAZg"]
[Tue Mar 03 06:44:46.340025 2026] [:error] [pid 20872:tid 20879] [client 52.138.16.158:23385] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaYS3olYbNk3E_3CgBiL6AAAAQU"]
[Tue Mar 03 06:44:47.115230 2026] [:error] [pid 20872:tid 20892] [client 52.138.16.158:23360] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "aaYS34lYbNk3E_3CgBiL7QAAARI"]
[Tue Mar 03 06:44:47.472141 2026] [:error] [pid 14042:tid 14057] [client 52.138.16.158:23462] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaYS32eHGCmSEiIBcK4mIQAAAY0"]
[Tue Mar 03 06:44:48.657661 2026] [:error] [pid 20872:tid 20886] [client 52.138.16.158:23115] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "aaYS4IlYbNk3E_3CgBiL7wAAAQw"]
[Tue Mar 03 06:44:48.672815 2026] [:error] [pid 14042:tid 14047] [client 52.138.16.158:23397] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "aaYS4GeHGCmSEiIBcK4mIwAAAYM"]
[Tue Mar 03 06:44:50.013761 2026] [:error] [pid 14042:tid 14066] [client 52.138.16.158:23349] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "aaYS4meHGCmSEiIBcK4mJQAAAZY"]
[Tue Mar 03 06:44:50.269701 2026] [:error] [pid 14042:tid 14065] [client 52.138.16.158:23168] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaYS4meHGCmSEiIBcK4mJwAAAZU"]
[Tue Mar 03 06:44:51.185315 2026] [:error] [pid 20872:tid 20882] [client 52.138.16.158:23328] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "aaYS44lYbNk3E_3CgBiL9wAAAQg"]
[Tue Mar 03 06:44:51.667521 2026] [:error] [pid 26186:tid 26198] [client 52.138.16.158:23505] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYS4_bZCNtk8wDak9ev9gAAAUo"]
[Tue Mar 03 06:44:51.901965 2026] [:error] [pid 20872:tid 20886] [client 52.138.16.158:23237] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaYS44lYbNk3E_3CgBiL-wAAAQw"]
[Tue Mar 03 06:44:52.477761 2026] [:error] [pid 36897:tid 36905] [client 52.138.16.158:23302] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYS5CZC69_8eM0Uouvq2gAAAMM"]
[Tue Mar 03 06:44:53.106684 2026] [:error] [pid 26186:tid 26208] [client 52.138.16.158:23371] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaYS5fbZCNtk8wDak9ev_QAAAVQ"]
[Tue Mar 03 06:44:53.262539 2026] [:error] [pid 26186:tid 26194] [client 52.138.16.158:23365] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYS5fbZCNtk8wDak9ev_gAAAUY"]
[Tue Mar 03 06:44:54.227574 2026] [:error] [pid 14042:tid 14054] [client 52.138.16.158:23363] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bak.php"] [unique_id "aaYS5meHGCmSEiIBcK4mMwAAAYo"]
[Tue Mar 03 06:44:55.957701 2026] [:error] [pid 20872:tid 20883] [client 52.138.16.158:23379] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "aaYS54lYbNk3E_3CgBiMBQAAAQk"]
[Tue Mar 03 06:44:56.031005 2026] [:error] [pid 14042:tid 14052] [client 52.138.16.158:23278] [client 52.138.16.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aaYS6GeHGCmSEiIBcK4mNwAAAYg"]
[Tue Mar 03 09:13:04.013685 2026] [:error] [pid 14042:tid 14052] [client 43.166.7.113:37540] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaY1oGeHGCmSEiIBcK51HwAAAYg"]
[Tue Mar 03 11:13:47.849667 2026] [:error] [pid 26186:tid 26193] [client 182.44.67.97:41353] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaZR6_bZCNtk8wDak9dVgAAAAUU"]
[Tue Mar 03 15:34:50.475353 2026] [:error] [pid 26186:tid 26189] [client 124.156.226.179:51144] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaaPGvbZCNtk8wDak9ed-AAAAUE"]
[Tue Mar 03 16:16:36.512079 2026] [:error] [pid 36897:tid 36906] [client 49.36.102.161:50605] [client 49.36.102.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.102.161, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaaY5CZC69_8eM0UouvUuwAAAMQ"]
[Tue Mar 03 18:15:43.369612 2026] [:error] [pid 36785:tid 36864] [client 20.151.222.76:33024] [client 20.151.222.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.222.76, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaa0z3hJejauENG9qTid_AAAAI4"]
[Tue Mar 03 18:15:45.378937 2026] [:error] [pid 36785:tid 36851] [client 20.151.222.76:33024] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aaa00XhJejauENG9qTieDgAAAIE"]
[Tue Mar 03 18:15:46.203480 2026] [:error] [pid 36897:tid 36909] [client 20.151.222.76:32850] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aaa00iZC69_8eM0UousPBQAAAMc"]
[Tue Mar 03 18:15:47.030861 2026] [:error] [pid 62485:tid 62506] [client 20.151.222.76:33067] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aaa00_9R7DZ1ENjPMXRhegAAAdE"]
[Tue Mar 03 18:15:47.874476 2026] [:error] [pid 36897:tid 36920] [client 20.151.222.76:33035] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aaa00yZC69_8eM0UousPGQAAANI"]
[Tue Mar 03 22:11:33.428996 2026] [:error] [pid 36785:tid 36863] [client 178.16.53.90:59192] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aabsFXhJejauENG9qTgM9AAAAI0"]
[Tue Mar 03 22:17:42.146277 2026] [:error] [pid 36785:tid 36851] [client 20.151.116.226:63818] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aabthnhJejauENG9qTgP4AAAAIE"]
[Tue Mar 03 22:17:42.991893 2026] [:error] [pid 36785:tid 36867] [client 20.151.116.226:63811] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aabthnhJejauENG9qTgP5gAAAJE"]
[Tue Mar 03 22:17:43.841637 2026] [:error] [pid 36785:tid 36863] [client 20.151.116.226:63861] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aabth3hJejauENG9qTgP6gAAAI0"]
[Tue Mar 03 22:17:44.685736 2026] [:error] [pid 36784:tid 36831] [client 20.151.116.226:63858] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "aabtiHNeKOSGbW9kDgTt_AAAAEg"]
[Wed Mar 04 01:53:22.700698 2026] [:error] [pid 48407:tid 48700] [client 170.106.179.68:39910] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aacgEj7Td6SiHn8fwfnbDQAAAIo"]
[Wed Mar 04 02:08:16.928274 2026] [:error] [pid 27359:tid 27372] [client 20.151.116.226:6841] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aacjkF607jzBiSmoFjIVywAAAMs"]
[Wed Mar 04 02:08:17.773215 2026] [:error] [pid 27359:tid 27379] [client 20.151.116.226:59279] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aacjkV607jzBiSmoFjIV0QAAANI"]
[Wed Mar 04 02:08:18.625048 2026] [:error] [pid 48406:tid 48665] [client 20.151.116.226:59270] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aacjkjStn8zJHlZMxFgenQAAAEQ"]
[Wed Mar 04 02:08:19.470933 2026] [:error] [pid 48407:tid 48704] [client 20.151.116.226:6822] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "aacjkz7Td6SiHn8fwfnh9gAAAI0"]
[Wed Mar 04 04:17:06.397782 2026] [:error] [pid 54487:tid 54512] [client 20.127.131.187:50453] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aadBwvN8030QMpFXddvcdwAAARc"]
[Wed Mar 04 04:17:07.256372 2026] [:error] [pid 18555:tid 18639] [client 20.127.131.187:53220] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aadBwzQeUDANiOsQ3GdauQAAAJQ"]
[Wed Mar 04 04:17:08.154644 2026] [:error] [pid 18555:tid 18634] [client 20.127.131.187:47952] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aadBxDQeUDANiOsQ3GdauwAAAI8"]
[Wed Mar 04 04:17:09.079456 2026] [:error] [pid 54487:tid 54494] [client 20.127.131.187:50491] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ot.php"] [unique_id "aadBxfN8030QMpFXddvchQAAAQU"]
[Wed Mar 04 04:51:23.072358 2026] [:error] [pid 18554:tid 18608] [client 78.137.218.88:49669] [client 78.137.218.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.137.218.88, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aadJy50fKmKeTIK7QS1-GgAAAFA"]
[Wed Mar 04 05:48:22.364054 2026] [autoindex:error] [pid 18554:tid 18613] [client 84.247.188.147:64017] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 04 05:48:32.270888 2026] [:error] [pid 54487:tid 54489] [client 20.151.116.226:62224] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function.php"] [unique_id "aadXMPN8030QMpFXddsmNgAAAQA"]
[Wed Mar 04 05:48:33.109995 2026] [:error] [pid 18554:tid 18611] [client 20.151.116.226:62330] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function.php"] [unique_id "aadXMZ0fKmKeTIK7QS2bWAAAAFM"]
[Wed Mar 04 05:48:33.955040 2026] [:error] [pid 54487:tid 54496] [client 20.151.116.226:62210] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function.php"] [unique_id "aadXMfN8030QMpFXddsmPAAAAQc"]
[Wed Mar 04 05:48:34.788013 2026] [:error] [pid 18554:tid 18593] [client 20.151.116.226:62308] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/function.php"] [unique_id "aadXMp0fKmKeTIK7QS2bWwAAAEE"]
[Wed Mar 04 06:20:37.564612 2026] [:error] [pid 18681:tid 18699] [client 122.51.236.174:38574] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aadetaE_TuZYUBveWkWiMAAAANA"]
[Wed Mar 04 07:36:43.993358 2026] [:error] [pid 18553:tid 18574] [client 4.204.215.202:35776] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aadwi2bax1neh8d0AHadRQAAAAo"]
[Wed Mar 04 07:36:45.097172 2026] [:error] [pid 18555:tid 18641] [client 4.204.215.202:16278] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aadwjTQeUDANiOsQ3GeIcAAAAJY"]
[Wed Mar 04 07:36:47.768483 2026] [:error] [pid 54487:tid 54503] [client 4.204.215.202:3133] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aadwj_N8030QMpFXddtfbQAAAQ4"]
[Wed Mar 04 07:36:49.762879 2026] [:error] [pid 54487:tid 54502] [client 4.204.215.202:15510] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aadwkfN8030QMpFXddtfdwAAAQ0"]
[Wed Mar 04 07:36:52.419565 2026] [:error] [pid 18554:tid 18599] [client 4.204.215.202:3507] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aadwlJ0fKmKeTIK7QS3jGgAAAEc"]
[Wed Mar 04 07:36:54.041223 2026] [:error] [pid 18554:tid 18596] [client 4.204.215.202:16317] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aadwlp0fKmKeTIK7QS3jJQAAAEQ"]
[Wed Mar 04 07:36:54.858075 2026] [:error] [pid 18554:tid 18613] [client 4.204.215.202:19228] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aadwlp0fKmKeTIK7QS3jKwAAAFU"]
[Wed Mar 04 07:36:55.687282 2026] [:error] [pid 18554:tid 18603] [client 4.204.215.202:16277] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "aadwl50fKmKeTIK7QS3jLwAAAEs"]
[Wed Mar 04 07:37:00.678115 2026] [:error] [pid 18554:tid 18599] [client 4.204.215.202:19923] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aadwnJ0fKmKeTIK7QS3jRAAAAEc"]
[Wed Mar 04 07:37:04.293683 2026] [:error] [pid 18554:tid 18614] [client 4.204.215.202:15876] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aadwoJ0fKmKeTIK7QS3jUwAAAFY"]
[Wed Mar 04 07:37:05.383112 2026] [:error] [pid 18681:tid 18696] [client 4.204.215.202:16299] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aadwoaE_TuZYUBveWkW7qQAAAM0"]
[Wed Mar 04 07:37:07.839897 2026] [:error] [pid 18554:tid 18593] [client 4.204.215.202:16375] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "aadwo50fKmKeTIK7QS3jaQAAAEE"]
[Wed Mar 04 07:37:09.124503 2026] [:error] [pid 18555:tid 18626] [client 4.204.215.202:25687] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aadwpTQeUDANiOsQ3GeIkAAAAIc"]
[Wed Mar 04 07:37:14.464680 2026] [:error] [pid 18555:tid 18621] [client 4.204.215.202:27631] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aadwqjQeUDANiOsQ3GeImAAAAII"]
[Wed Mar 04 07:37:17.658583 2026] [:error] [pid 18554:tid 18603] [client 4.204.215.202:3412] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aadwrZ0fKmKeTIK7QS3jkgAAAEs"]
[Wed Mar 04 07:37:19.046335 2026] [:error] [pid 18554:tid 18595] [client 4.204.215.202:15918] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "aadwr50fKmKeTIK7QS3jlwAAAEM"]
[Wed Mar 04 07:37:19.657977 2026] [:error] [pid 18681:tid 18707] [client 4.204.215.202:25692] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aadwr6E_TuZYUBveWkW7uQAAANg"]
[Wed Mar 04 07:37:20.644514 2026] [:error] [pid 18554:tid 18614] [client 4.204.215.202:27591] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aadwsJ0fKmKeTIK7QS3jngAAAFY"]
[Wed Mar 04 07:37:22.888365 2026] [:error] [pid 18554:tid 18605] [client 4.204.215.202:25719] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aadwsp0fKmKeTIK7QS3jqQAAAE0"]
[Wed Mar 04 07:37:24.324152 2026] [:error] [pid 18681:tid 18695] [client 4.204.215.202:15913] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "aadwtKE_TuZYUBveWkW7vQAAAMw"]
[Wed Mar 04 07:37:25.571703 2026] [:error] [pid 18681:tid 18697] [client 4.204.215.202:3596] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aadwtaE_TuZYUBveWkW7wAAAAM4"]
[Wed Mar 04 07:37:27.020381 2026] [:error] [pid 18554:tid 18599] [client 4.204.215.202:27608] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aadwt50fKmKeTIK7QS3jsAAAAEc"]
[Wed Mar 04 07:37:29.025557 2026] [:error] [pid 18681:tid 18706] [client 4.204.215.202:18621] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aadwuaE_TuZYUBveWkW7ywAAANc"]
[Wed Mar 04 07:37:30.161504 2026] [:error] [pid 18555:tid 18634] [client 4.204.215.202:16307] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aadwujQeUDANiOsQ3GeIrQAAAI8"]
[Wed Mar 04 07:37:31.132900 2026] [:error] [pid 18681:tid 18697] [client 4.204.215.202:27595] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aadwu6E_TuZYUBveWkW72QAAAM4"]
[Wed Mar 04 07:37:31.762402 2026] [:error] [pid 18553:tid 18571] [client 4.204.215.202:3088] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aadwu2bax1neh8d0AHadXAAAAAc"]
[Wed Mar 04 07:37:32.503785 2026] [:error] [pid 18555:tid 18633] [client 4.204.215.202:25696] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aadwvDQeUDANiOsQ3GeIrwAAAI4"]
[Wed Mar 04 07:37:33.078975 2026] [:error] [pid 18554:tid 18610] [client 4.204.215.202:3082] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "aadwvZ0fKmKeTIK7QS3jvQAAAFI"]
[Wed Mar 04 07:37:33.820200 2026] [:error] [pid 18555:tid 18636] [client 4.204.215.202:19904] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aadwvTQeUDANiOsQ3GeIsQAAAJE"]
[Wed Mar 04 07:37:34.879719 2026] [:error] [pid 54487:tid 54511] [client 4.204.215.202:18588] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aadwvvN8030QMpFXddtfygAAARY"]
[Wed Mar 04 07:37:35.714824 2026] [:error] [pid 18681:tid 18689] [client 4.204.215.202:15899] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aadwv6E_TuZYUBveWkW74wAAAMY"]
[Wed Mar 04 07:37:36.978355 2026] [:error] [pid 18681:tid 18692] [client 4.204.215.202:15530] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "aadwwKE_TuZYUBveWkW75gAAAMk"]
[Wed Mar 04 07:37:38.387598 2026] [:error] [pid 18554:tid 18599] [client 4.204.215.202:3484] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aadwwp0fKmKeTIK7QS3jygAAAEc"]
[Wed Mar 04 07:37:39.478654 2026] [:error] [pid 18554:tid 18602] [client 4.204.215.202:16316] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aadww50fKmKeTIK7QS3j1gAAAEo"]
[Wed Mar 04 07:37:40.469294 2026] [:error] [pid 18554:tid 18606] [client 4.204.215.202:3623] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aadwxJ0fKmKeTIK7QS3j3AAAAE4"]
[Wed Mar 04 07:37:41.277947 2026] [:error] [pid 18553:tid 18583] [client 4.204.215.202:27625] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "aadwxWbax1neh8d0AHadZwAAABM"]
[Wed Mar 04 07:37:41.947825 2026] [:error] [pid 18555:tid 18620] [client 4.204.215.202:15537] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aadwxTQeUDANiOsQ3GeIxgAAAIE"]
[Wed Mar 04 07:37:42.831457 2026] [:error] [pid 18554:tid 18604] [client 4.204.215.202:27630] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "aadwxp0fKmKeTIK7QS3j4QAAAEw"]
[Wed Mar 04 07:37:50.928694 2026] [:error] [pid 18681:tid 18686] [client 4.204.215.202:3104] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aadwzqE_TuZYUBveWkW8CAAAAMM"]
[Wed Mar 04 07:37:52.969981 2026] [:error] [pid 54487:tid 54492] [client 4.204.215.202:18618] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aadw0PN8030QMpFXddtf7QAAAQM"]
[Wed Mar 04 07:37:55.114642 2026] [:error] [pid 18681:tid 18694] [client 4.204.215.202:18572] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aadw06E_TuZYUBveWkW8DgAAAMs"]
[Wed Mar 04 07:37:56.388566 2026] [:error] [pid 18681:tid 18700] [client 4.204.215.202:27621] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "aadw1KE_TuZYUBveWkW8FQAAANE"]
[Wed Mar 04 07:37:57.528433 2026] [:error] [pid 18554:tid 18615] [client 4.204.215.202:27598] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aadw1Z0fKmKeTIK7QS3kIgAAAFc"]
[Wed Mar 04 07:37:59.355076 2026] [:error] [pid 18553:tid 18580] [client 4.204.215.202:3456] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aadw12bax1neh8d0AHadbwAAABA"]
[Wed Mar 04 07:38:00.505958 2026] [:error] [pid 18554:tid 18594] [client 4.204.215.202:3587] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aadw2J0fKmKeTIK7QS3kLwAAAEI"]
[Wed Mar 04 07:38:01.342246 2026] [:error] [pid 18554:tid 18603] [client 4.204.215.202:16352] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aadw2Z0fKmKeTIK7QS3kMgAAAEs"]
[Wed Mar 04 07:38:02.201022 2026] [:error] [pid 18681:tid 18705] [client 4.204.215.202:27530] [client 4.204.215.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aadw2qE_TuZYUBveWkW8FwAAANY"]
[Wed Mar 04 07:38:03.517660 2026] [:error] [pid 18554:tid 18606] [client 4.204.215.202:19941] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/admin.php"] [unique_id "aadw250fKmKeTIK7QS3kQgAAAE4"]
[Wed Mar 04 07:38:05.671385 2026] [:error] [pid 18681:tid 18704] [client 4.204.215.202:16263] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/admin.php"] [unique_id "aadw3aE_TuZYUBveWkW8IgAAANU"]
[Wed Mar 04 07:38:07.783303 2026] [:error] [pid 18554:tid 18602] [client 4.204.215.202:19909] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/admin.php"] [unique_id "aadw350fKmKeTIK7QS3kTwAAAEo"]
[Wed Mar 04 07:38:09.132436 2026] [:error] [pid 18681:tid 18707] [client 4.204.215.202:27634] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/admin.php"] [unique_id "aadw4aE_TuZYUBveWkW8LQAAANg"]
[Wed Mar 04 07:38:52.054896 2026] [authz_core:error] [pid 18681:tid 18699] [client 4.204.215.202:16368] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/logs
[Wed Mar 04 07:38:53.439678 2026] [authz_core:error] [pid 18681:tid 18703] [client 4.204.215.202:16368] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/logs
[Wed Mar 04 07:38:55.895605 2026] [:error] [pid 18681:tid 18695] [client 4.204.215.202:16368] [client 4.204.215.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aadxD6E_TuZYUBveWkW8cgAAAMw"]
[Wed Mar 04 07:38:59.294906 2026] [:error] [pid 18554:tid 18608] [client 4.204.215.202:19913] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-apps.php"] [unique_id "aadxE50fKmKeTIK7QS3ldgAAAFA"]
[Wed Mar 04 07:39:00.164779 2026] [:error] [pid 54487:tid 54502] [client 4.204.215.202:21227] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-apps.php"] [unique_id "aadxFPN8030QMpFXddtgcgAAAQ0"]
[Wed Mar 04 07:39:01.725681 2026] [:error] [pid 18554:tid 18592] [client 4.204.215.202:24346] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-apps.php"] [unique_id "aadxFZ0fKmKeTIK7QS3legAAAEA"]
[Wed Mar 04 07:39:02.695757 2026] [:error] [pid 18681:tid 18685] [client 4.204.215.202:3508] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-apps.php"] [unique_id "aadxFqE_TuZYUBveWkW8fgAAAMI"]
[Wed Mar 04 07:39:03.528102 2026] [:error] [pid 18681:tid 18690] [client 4.204.215.202:15528] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asdf.php"] [unique_id "aadxF6E_TuZYUBveWkW8ggAAAMc"]
[Wed Mar 04 07:39:04.202803 2026] [:error] [pid 54487:tid 54500] [client 4.204.215.202:25700] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asdf.php"] [unique_id "aadxGPN8030QMpFXddtgeQAAAQs"]
[Wed Mar 04 07:39:04.850994 2026] [:error] [pid 54487:tid 54512] [client 4.204.215.202:25701] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asdf.php"] [unique_id "aadxGPN8030QMpFXddtgfgAAARc"]
[Wed Mar 04 07:39:05.335912 2026] [:error] [pid 54487:tid 54498] [client 4.204.215.202:3078] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asdf.php"] [unique_id "aadxGfN8030QMpFXddtggAAAAQk"]
[Wed Mar 04 07:39:05.968737 2026] [:error] [pid 18554:tid 18611] [client 4.204.215.202:18568] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aadxGZ0fKmKeTIK7QS3lhAAAAFM"]
[Wed Mar 04 07:39:06.707977 2026] [:error] [pid 18554:tid 18604] [client 4.204.215.202:3135] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aadxGp0fKmKeTIK7QS3liAAAAEw"]
[Wed Mar 04 07:39:07.476358 2026] [:error] [pid 18554:tid 18600] [client 4.204.215.202:15496] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aadxG50fKmKeTIK7QS3ljAAAAEg"]
[Wed Mar 04 07:39:08.172124 2026] [:error] [pid 18554:tid 18608] [client 4.204.215.202:21246] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pixelpages/application/views/auth/common/about.php7"] [unique_id "aadxHJ0fKmKeTIK7QS3lkQAAAFA"]
[Wed Mar 04 07:39:09.179793 2026] [:error] [pid 18681:tid 18691] [client 4.204.215.202:25682] [client 4.204.215.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/aaa.php"] [unique_id "aadxHaE_TuZYUBveWkW8hwAAAMg"]
[Wed Mar 04 07:39:10.255525 2026] [:error] [pid 54487:tid 54505] [client 4.204.215.202:19912] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aadxHvN8030QMpFXddtghwAAARA"]
[Wed Mar 04 07:39:11.165747 2026] [:error] [pid 54487:tid 54495] [client 4.204.215.202:18601] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aadxH_N8030QMpFXddtgiQAAAQY"]
[Wed Mar 04 07:39:12.479247 2026] [:error] [pid 54487:tid 54501] [client 4.204.215.202:27640] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aadxIPN8030QMpFXddtgjQAAAQw"]
[Wed Mar 04 07:39:13.217026 2026] [:error] [pid 18681:tid 18693] [client 4.204.215.202:25674] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aadxIaE_TuZYUBveWkW8jAAAAMo"]
[Wed Mar 04 07:39:14.012121 2026] [:error] [pid 18681:tid 18691] [client 4.204.215.202:24382] [client 4.204.215.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/oQGWC1HLhE5.php"] [unique_id "aadxIqE_TuZYUBveWkW8jgAAAMg"]
[Wed Mar 04 07:39:15.941118 2026] [:error] [pid 18554:tid 18613] [client 4.204.215.202:18598] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bar.php"] [unique_id "aadxI50fKmKeTIK7QS3lmQAAAFU"]
[Wed Mar 04 07:39:17.280685 2026] [:error] [pid 18554:tid 18601] [client 4.204.215.202:3097] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bar.php"] [unique_id "aadxJZ0fKmKeTIK7QS3lnQAAAEk"]
[Wed Mar 04 07:39:18.707564 2026] [:error] [pid 18681:tid 18702] [client 4.204.215.202:15914] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bar.php"] [unique_id "aadxJqE_TuZYUBveWkW8kQAAANM"]
[Wed Mar 04 07:39:19.577013 2026] [:error] [pid 18554:tid 18613] [client 4.204.215.202:19919] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "aadxJ50fKmKeTIK7QS3lpQAAAFU"]
[Wed Mar 04 07:39:20.297015 2026] [:error] [pid 18554:tid 18597] [client 4.204.215.202:16280] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "aadxKJ0fKmKeTIK7QS3lqAAAAEU"]
[Wed Mar 04 07:39:21.052972 2026] [:error] [pid 18554:tid 18615] [client 4.204.215.202:16372] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "aadxKZ0fKmKeTIK7QS3lrAAAAFc"]
[Wed Mar 04 07:39:21.979342 2026] [:error] [pid 18681:tid 18689] [client 4.204.215.202:21238] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "aadxKaE_TuZYUBveWkW8lwAAAMY"]
[Wed Mar 04 07:39:22.541044 2026] [:error] [pid 54487:tid 54506] [client 4.204.215.202:3595] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/enviar-recibo.php"] [unique_id "aadxKvN8030QMpFXddtgowAAARE"]
[Wed Mar 04 07:39:23.379357 2026] [:error] [pid 54487:tid 54489] [client 4.204.215.202:3439] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/enviar-recibo.php"] [unique_id "aadxK_N8030QMpFXddtgpgAAAQA"]
[Wed Mar 04 07:39:24.363308 2026] [:error] [pid 18681:tid 18705] [client 4.204.215.202:25672] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/enviar-recibo.php"] [unique_id "aadxLKE_TuZYUBveWkW8mgAAANY"]
[Wed Mar 04 07:39:25.400627 2026] [:error] [pid 18554:tid 18600] [client 4.204.215.202:16376] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/enviar-recibo.php"] [unique_id "aadxLZ0fKmKeTIK7QS3luAAAAEg"]
[Wed Mar 04 07:39:26.243687 2026] [:error] [pid 18554:tid 18612] [client 4.204.215.202:15505] [client 4.204.215.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style.php"] [unique_id "aadxLp0fKmKeTIK7QS3lugAAAFQ"]
[Wed Mar 04 07:39:26.963767 2026] [:error] [pid 18554:tid 18604] [client 4.204.215.202:18620] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aadxLp0fKmKeTIK7QS3lvgAAAEw"]
[Wed Mar 04 07:39:29.010874 2026] [:error] [pid 54487:tid 54499] [client 4.204.215.202:16272] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aadxMfN8030QMpFXddtgsAAAAQo"]
[Wed Mar 04 07:39:31.663950 2026] [:error] [pid 18555:tid 18619] [client 4.204.215.202:16370] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aadxMzQeUDANiOsQ3GeJRgAAAIA"]
[Wed Mar 04 07:39:35.402147 2026] [:error] [pid 18553:tid 18566] [client 4.204.215.202:15544] [client 4.204.215.202] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/gallery/20160513-delelott/photo-gallery/thumb/admin.php"] [unique_id "aadxN2bax1neh8d0AHadsgAAAAI"]
[Wed Mar 04 09:50:50.669171 2026] [:error] [pid 54487:tid 54500] [client 45.86.202.166:27087] [client 45.86.202.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaeP-vN8030QMpFXddvRZwAAAQs"]
[Wed Mar 04 10:29:50.254618 2026] [:error] [pid 18554:tid 18614] [client 94.26.106.199:46876] [client 94.26.106.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.199, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaeZHp0fKmKeTIK7QS1SVAAAAFY"]
[Wed Mar 04 10:29:51.091748 2026] [:error] [pid 18554:tid 18593] [client 94.26.106.199:52094] [client 94.26.106.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.199, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaeZH50fKmKeTIK7QS1SVgAAAEE"]
[Wed Mar 04 10:29:52.560198 2026] [:error] [pid 54487:tid 54502] [client 94.26.106.199:46886] [client 94.26.106.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 94.26.106.199, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaeZIPN8030QMpFXddv5HgAAAQ0"], referer: http://measureyourcause.com.au/wp-login.php
[Wed Mar 04 10:44:05.663643 2026] [:error] [pid 18681:tid 18690] [client 139.135.192.241:28193] [client 139.135.192.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 139.135.192.241, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaecdaE_TuZYUBveWkX_NAAAAMc"]
[Wed Mar 04 11:00:09.510119 2026] [:error] [pid 54487:tid 54492] [client 43.164.197.177:58320] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaegOfN8030QMpFXddsYrwAAAQM"]
[Wed Mar 04 11:49:04.151434 2026] [:error] [pid 45947:tid 46048] [client 152.233.20.86:36448] [client 152.233.20.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaersEQXEtszYKy6savjiwAAAVA"]
[Wed Mar 04 12:06:40.990533 2026] [:error] [pid 54487:tid 54506] [client 142.93.128.141:52227] [client 142.93.128.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.128.141, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaev0PN8030QMpFXddtGLAAAARE"]
[Wed Mar 04 12:06:42.027484 2026] [:error] [pid 18554:tid 18612] [client 142.93.128.141:52241] [client 142.93.128.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.128.141, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aaev0p0fKmKeTIK7QS2UkAAAAFQ"]
[Wed Mar 04 13:01:33.675520 2026] [:error] [pid 18554:tid 18606] [client 43.228.157.73:51193] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aae8rZ0fKmKeTIK7QS3LBAAAAE4"]
[Wed Mar 04 13:01:34.865401 2026] [:error] [pid 54487:tid 54498] [client 43.228.157.73:51543] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aae8rvN8030QMpFXddtduwAAAQk"]
[Wed Mar 04 13:01:36.056895 2026] [:error] [pid 54487:tid 54497] [client 43.228.157.73:51961] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aae8sPN8030QMpFXddtd8gAAAQg"]
[Wed Mar 04 13:01:37.250875 2026] [:error] [pid 18553:tid 18588] [client 43.228.157.73:52376] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aae8sWbax1neh8d0AHbO-QAAABg"]
[Wed Mar 04 13:01:38.384614 2026] [:error] [pid 18554:tid 18596] [client 43.228.157.73:52836] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aae8sp0fKmKeTIK7QS3LuQAAAEQ"]
[Wed Mar 04 18:54:24.732351 2026] [:error] [pid 61225:tid 61254] [client 122.51.236.174:51886] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aagPYIFRsPGnBbt4lyR0kQAAAA0"]
[Wed Mar 04 19:57:29.911347 2026] [:error] [pid 60730:tid 60749] [client 129.224.206.230:51237] [client 129.224.206.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.224.206.230, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aageKUeC7wxPGxvN8ZgDZgAAAVE"]
[Wed Mar 04 23:27:25.412922 2026] [:error] [pid 64829:tid 64846] [client 43.130.47.33:43858] [client 43.130.47.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aahPXZ9ZED3FG9h7uig0swAAAA8"]
[Thu Mar 05 01:45:03.406517 2026] [:error] [pid 27472:tid 27544] [client 110.166.71.39:56216] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aahvn7t7N-W1OaN6b8rcrAAAAY0"]
[Thu Mar 05 02:06:29.483388 2026] [:error] [pid 26934:tid 26977] [client 200.141.33.155:5739] [client 200.141.33.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.141.33.155, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aah0pWDWd71V_nuoqWJCUQAAAJY"]
[Thu Mar 05 04:01:35.936587 2026] [:error] [pid 62435:tid 62452] [client 43.166.1.243:50340] [client 43.166.1.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaiPnyMZJMDfZh_-8sVvQAAAAMI"]
[Thu Mar 05 07:48:16.781950 2026] [:error] [pid 62435:tid 62472] [client 49.235.136.28:48566] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aajEwCMZJMDfZh_-8sXQTgAAANY"]
[Thu Mar 05 08:01:57.232763 2026] [:error] [pid 53350:tid 53377] [client 196.217.20.130:64519] [client 196.217.20.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.217.20.130, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aajH9aO0Baxc5WFYeP2o3AAAAQI"]
[Thu Mar 05 09:04:23.310013 2026] [:error] [pid 41459:tid 41492] [client 44.200.129.169:39250] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".initial.sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/mysql.initial.sql"] [unique_id "aajWl-dFBZEnZ3pzxrWP8wAAAVI"]
[Thu Mar 05 09:04:24.080870 2026] [:error] [pid 53350:tid 53379] [client 44.200.129.169:39334] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/install/froxlor.sql"] [unique_id "aajWmKO0Baxc5WFYeP3DVgAAAQQ"]
[Thu Mar 05 13:15:51.466095 2026] [:error] [pid 41459:tid 41489] [client 43.135.172.89:44204] [client 43.135.172.89] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aakRh-dFBZEnZ3pzxrVN2AAAAU8"]
[Thu Mar 05 17:19:53.937747 2026] [:error] [pid 41459:tid 41474] [client 43.135.186.135:59648] [client 43.135.186.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aalKuedFBZEnZ3pzxrXNZAAAAUA"]
[Thu Mar 05 19:09:48.344332 2026] [:error] [pid 62176:tid 62307] [client 103.77.106.118:54568] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aalkfCNfTPJryi30JPny8gAAAFc"]
[Thu Mar 05 19:09:48.762640 2026] [:error] [pid 41459:tid 41498] [client 103.77.106.118:54586] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aalkfOdFBZEnZ3pzxrUUZwAAAVg"]
[Thu Mar 05 19:31:00.134514 2026] [:error] [pid 53350:tid 53397] [client 124.156.157.91:60554] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aalpdKO0Baxc5WFYeP0TpwAAARQ"]
[Thu Mar 05 21:06:55.914861 2026] [:error] [pid 62177:tid 62319] [client 44.200.129.169:51690] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/apache.conf"] [unique_id "aal_7xWSQc2OzPrsnwXnHQAAAIg"]
[Thu Mar 05 21:06:55.952883 2026] [:error] [pid 62177:tid 62335] [client 44.200.129.169:51692] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/airflow.cfg"] [unique_id "aal_7xWSQc2OzPrsnwXnHgAAAJc"]
[Thu Mar 05 21:06:59.522880 2026] [:error] [pid 53350:tid 53378] [client 44.200.129.169:56712] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/ansible.cfg"] [unique_id "aal_86O0Baxc5WFYeP1amgAAAQM"]
[Thu Mar 05 22:40:24.773984 2026] [:error] [pid 41459:tid 41498] [client 157.15.40.88:50084] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "aamV2OdFBZEnZ3pzxrWDkwAAAVg"]
[Thu Mar 05 22:40:25.025084 2026] [:error] [pid 8151:tid 8220] [client 157.15.40.88:50108] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/txets.php"] [unique_id "aamV2ZO3dLEidct1HvCn-QAAAYE"]
[Thu Mar 05 22:40:25.282073 2026] [:error] [pid 62177:tid 62326] [client 157.15.40.88:50145] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aamV2RWSQc2OzPrsnwX6EgAAAI4"]
[Thu Mar 05 22:40:25.541201 2026] [:error] [pid 8151:tid 8235] [client 157.15.40.88:50187] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aamV2ZO3dLEidct1HvCoGgAAAY8"]
[Thu Mar 05 22:40:25.808312 2026] [:error] [pid 41459:tid 41475] [client 157.15.40.88:50248] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/schallfuns.php"] [unique_id "aamV2edFBZEnZ3pzxrWDpQAAAUE"]
[Thu Mar 05 22:40:26.074031 2026] [:error] [pid 8151:tid 8244] [client 157.15.40.88:50313] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/postnews.php"] [unique_id "aamV2pO3dLEidct1HvCoTAAAAZg"]
[Thu Mar 05 22:40:26.339352 2026] [:error] [pid 62435:tid 62470] [client 157.15.40.88:50386] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aamV2iMZJMDfZh_-8sWS7AAAANQ"]
[Thu Mar 05 22:40:26.591770 2026] [:error] [pid 41459:tid 41480] [client 157.15.40.88:50457] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aamV2udFBZEnZ3pzxrWD0QAAAUY"]
[Thu Mar 05 22:40:26.844575 2026] [:error] [pid 8151:tid 8236] [client 157.15.40.88:50529] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/postnews.php"] [unique_id "aamV2pO3dLEidct1HvColgAAAZA"]
[Thu Mar 05 23:19:11.095349 2026] [:error] [pid 62435:tid 62468] [client 43.134.141.244:56728] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aame7yMZJMDfZh_-8sWXWAAAANI"]
[Thu Mar 05 23:31:06.890222 2026] [:error] [pid 53350:tid 53393] [client 197.250.51.109:26720] [client 197.250.51.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.250.51.109, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aamhuqO0Baxc5WFYeP2THgAAARA"]
[Fri Mar 06 00:44:25.120166 2026] [:error] [pid 47657:tid 47912] [client 103.77.107.222:51402] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aamy6S76-uV01o_084mEvgAAAAs"]
[Fri Mar 06 00:44:25.373283 2026] [:error] [pid 48372:tid 48395] [client 103.77.107.222:51530] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aamy6UWaQyQyfhXPRrYGTQAAAUg"]
[Fri Mar 06 02:38:38.697272 2026] [:error] [pid 47665:tid 48015] [client 44.200.129.169:54324] [client 44.200.129.169] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/awstats.conf"] [unique_id "aanNrnvwcWrOi3qzRceGzQAAAMA"]
[Fri Mar 06 03:20:27.283686 2026] [:error] [pid 48372:tid 48393] [client 49.7.227.204:50780] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aanXe0WaQyQyfhXPRrZNiwAAAUY"]
[Fri Mar 06 06:22:58.510490 2026] [:error] [pid 16140:tid 16162] [client 43.157.147.3:50672] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaoCQpZVpEeGhAeSpv18KwAAARQ"]
[Fri Mar 06 06:44:17.206495 2026] [:error] [pid 8648:tid 8768] [client 194.164.166.178:51620] [client 194.164.166.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.164.166.178, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaoHQUhAk6X-gF6akMRJ7QAAABU"]
[Fri Mar 06 13:42:40.198444 2026] [:error] [pid 44628:tid 44646] [client 170.106.163.84:53192] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aappUIZtiq7T54_AYvLTegAAAUE"]
[Fri Mar 06 14:49:57.168960 2026] [:error] [pid 59198:tid 59212] [client 37.19.107.28:26676] [client 37.19.107.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.19.107.28, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aap5FdFYTNmfCEavFrIRJQAAA0w"]
[Fri Mar 06 14:50:15.568704 2026] [:error] [pid 59237:tid 59255] [client 190.86.73.222:33526] [client 190.86.73.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.86.73.222, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aap5J-qfMSBs0nxOTxFz3wAAA40"]
[Fri Mar 06 22:14:20.747774 2026] [:error] [pid 59239:tid 59277] [client 170.106.140.110:42696] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aarhPLG1EpnE909fvGe8yQAAA8g"]
[Fri Mar 06 23:10:55.220021 2026] [:error] [pid 59198:tid 59201] [client 62.60.131.218:55096] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aaruf9FYTNmfCEavFrJucQAAA0E"]
[Sat Mar 07 03:22:40.770937 2026] [:error] [pid 23853:tid 23866] [client 148.222.231.107:58771] [client 148.222.231.107] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.222.231.107, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaspgHNwhuLw8Ep_7YpOTwAAAMs"]
[Sat Mar 07 04:33:01.034156 2026] [:error] [pid 4315:tid 4461] [client 162.62.231.139:33480] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aas5_dDEK9AXzxu9OSgY0AAAAI4"]
[Sat Mar 07 04:53:33.646741 2026] [:error] [pid 4609:tid 4648] [client 78.109.78.74:64791] [client 78.109.78.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.109.78.74, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aas-zeP7JMxUbw4Fd1YStAAAANQ"]
[Sat Mar 07 08:28:17.262149 2026] [:error] [pid 52484:tid 52527] [client 62.60.131.218:49588] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aatxIfE9AnX6zUICFeRU0gAAARc"]
[Sat Mar 07 08:55:33.665598 2026] [:error] [pid 4311:tid 4428] [client 43.135.144.126:45820] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aat3hXbyS653WMGf2vUSGgAAAEk"]
[Sat Mar 07 14:36:16.159805 2026] [:error] [pid 4307:tid 4404] [client 43.130.67.6:41992] [client 43.130.67.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aavHYDeKp4wgnLc38f-H1wAAABY"]
[Sat Mar 07 14:37:31.907894 2026] [:error] [pid 37998:tid 38055] [client 34.24.47.138:49745] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/system/js/core.js"] [unique_id "aavHq8l3xHpv0STGaSbA3wAAAUs"]
[Sat Mar 07 17:32:13.837965 2026] [:error] [pid 52484:tid 52527] [client 36.41.75.167:46253] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aavwnfE9AnX6zUICFeSDzwAAARc"]
[Sat Mar 07 19:27:37.656597 2026] [:error] [pid 10276:tid 10306] [client 180.191.183.193:53779] [client 180.191.183.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.183.193, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aawLqaNawseyHvpv0LlLeQAAA1A"]
[Sat Mar 07 21:11:32.689227 2026] [ssl:error] [pid 14885:tid 14912] [client 104.168.28.15:52280] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourcause.com/
[Sat Mar 07 21:19:24.058097 2026] [:error] [pid 54127:tid 54145] [client 43.135.148.92:59802] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aawl3EuQzHmVv_Y3VjdrKgAAAsM"]
[Sat Mar 07 22:28:04.271377 2026] [:error] [pid 4315:tid 4458] [client 153.252.96.132:8595] [client 153.252.96.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.252.96.132, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aaw19NDEK9AXzxu9OSginwAAAIs"]
[Sat Mar 07 23:40:22.682154 2026] [:error] [pid 4315:tid 4455] [client 43.157.67.70:56032] [client 43.157.67.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aaxG5tDEK9AXzxu9OSg2qgAAAIg"]
[Sun Mar 08 05:17:01.699923 2026] [:error] [pid 442:tid 456] [client 43.153.104.196:51154] [client 43.153.104.196] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aayVzWgAJBM24CQN_JZ_DAAAAQs"]
[Sun Mar 08 11:23:36.305515 2026] [:error] [pid 22667:tid 22713] [client 94.247.172.129:20397] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aazruOG7qk1roo-TRWNesAAAAkg"]
[Sun Mar 08 11:33:59.522652 2026] [:error] [pid 22790:tid 22895] [client 125.21.29.10:60761] [client 125.21.29.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.21.29.10, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aazuJxXbGDWrzD_dTOcMzQAAA80"]
[Sun Mar 08 11:34:06.622111 2026] [:error] [pid 22668:tid 22735] [client 154.119.224.90:55288] [client 154.119.224.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.119.224.90, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aazuLumzLHpblwnQgPjdTgAAAoM"]
[Sun Mar 08 13:43:35.735244 2026] [:error] [pid 22790:tid 22891] [client 129.226.174.80:42748] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aa0MhxXbGDWrzD_dTOdYDAAAA8k"]
[Sun Mar 08 18:30:31.453772 2026] [:error] [pid 22786:tid 22801] [client 5.77.193.105:37711] [client 5.77.193.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.77.193.105, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aa1Px3PuJewMN2jPbdXysAAAAwA"]
[Sun Mar 08 18:36:15.843195 2026] [:error] [pid 22786:tid 22809] [client 152.57.89.12:53730] [client 152.57.89.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.89.12, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aa1RH3PuJewMN2jPbdX3fAAAAwg"]
[Sun Mar 08 19:57:41.463819 2026] [:error] [pid 22787:tid 22830] [client 49.235.136.28:45838] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aa1kNUF9MGMhk9pT4z4auQAAA0I"]
[Mon Mar 09 00:43:22.725319 2026] [:error] [pid 49419:tid 49644] [client 85.57.98.203:61105] [client 85.57.98.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.57.98.203, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aa2nKvSUwH6DJwBBi5BpiQAAAAM"]
[Mon Mar 09 01:24:55.953659 2026] [:error] [pid 16352:tid 16360] [client 182.10.130.226:54031] [client 182.10.130.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.10.130.226, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aa2w5-S719tlqxBPD_DUuAAAAMU"]
[Mon Mar 09 02:29:20.152331 2026] [:error] [pid 49392:tid 49592] [client 3.21.169.182:56286] [client 3.21.169.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aa3AALhnfLjo2gwJdbFPewAAAEY"]
[Mon Mar 09 02:29:21.966022 2026] [:error] [pid 16352:tid 16367] [client 3.21.169.182:62275] [client 3.21.169.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aa3AAeS719tlqxBPD_D-3AAAAMw"]
[Mon Mar 09 02:29:24.001243 2026] [:error] [pid 16352:tid 16372] [client 3.21.169.182:64195] [client 3.21.169.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aa3ABOS719tlqxBPD_D-6AAAANE"]
[Mon Mar 09 02:29:26.157714 2026] [:error] [pid 49419:tid 49656] [client 3.21.169.182:49872] [client 3.21.169.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aa3ABvSUwH6DJwBBi5B8XQAAAA8"]
[Mon Mar 09 02:41:48.527504 2026] [:error] [pid 49404:tid 49617] [client 43.140.247.223:59464] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aa3C7Hc8Cw-aeCN3s76VpAAAA0M"]
[Mon Mar 09 05:38:00.465800 2026] [:error] [pid 17485:tid 17494] [client 43.155.140.157:40906] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aa3sONQOL_kxQEc1PTBscQAAAQY"]
[Mon Mar 09 10:23:22.574263 2026] [:error] [pid 17485:tid 17504] [client 101.33.81.73:40412] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aa4vGtQOL_kxQEc1PTBtcwAAARA"]
[Mon Mar 09 12:39:01.764726 2026] [:error] [pid 2145:tid 2168] [client 103.59.177.25:56857] [client 103.59.177.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.59.177.25, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aa5O5XczzpD9XHtKwuDGpAAAAUI"]
[Mon Mar 09 15:13:13.411491 2026] [:error] [pid 5783:tid 5900] [client 223.244.35.77:55464] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aa5zCQdiZJ1FQPtsTNR_iAAAAEY"]
[Mon Mar 09 16:11:03.491270 2026] [:error] [pid 5779:tid 5856] [client 106.194.25.251:56921] [client 106.194.25.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.194.25.251, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aa6AlwaHbHwtklaurgW_4gAAAAE"]
[Mon Mar 09 16:16:09.175719 2026] [:error] [pid 5779:tid 5871] [client 103.179.233.94:10106] [client 103.179.233.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.179.233.94, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aa6ByQaHbHwtklaurgXCVAAAABA"]
[Mon Mar 09 19:05:04.052272 2026] [:error] [pid 44463:tid 44484] [client 43.159.139.164:50144] [client 43.159.139.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aa6pYC5tVkWjZvDknB0Y8AAAAY0"]
[Tue Mar 10 01:15:15.284515 2026] [:error] [pid 64614:tid 64668] [client 216.73.216.148:37939] [client 216.73.216.148] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourcause.com.au|F|5"] [data "REQUEST_HEADERS:User-Agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aa8AI5mzZEHtK_dZqUZRAwAAAJE"]
[Tue Mar 10 01:15:15.506197 2026] [:error] [pid 64612:tid 64626] [client 216.73.216.148:54458] [client 216.73.216.148] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourcause.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "aa8AIzQRjxCMnE2VMUh9MgAAAAI"], referer: http://measureyourcause.com.au/robots.txt
[Tue Mar 10 05:23:22.055056 2026] [:error] [pid 7904:tid 7995] [client 62.60.131.218:58407] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aa86StqdH-GCmASfJqHe0AAAAAM"]
[Tue Mar 10 05:38:17.725041 2026] [:error] [pid 7904:tid 7995] [client 43.166.136.202:39172] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aa89ydqdH-GCmASfJqHgBgAAAAM"]
[Tue Mar 10 05:40:49.061145 2026] [:error] [pid 8193:tid 8221] [client 62.60.131.218:51163] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aa8-YR27LTs3sNpMSvwVRwAAAME"]
[Tue Mar 10 06:29:37.919538 2026] [:error] [pid 32295:tid 32326] [client 118.99.73.60:3878] [client 118.99.73.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.99.73.60, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aa9J0Y_FltxBAKWrlwjMjgAAAMg"]
[Tue Mar 10 06:45:21.456437 2026] [:error] [pid 31977:tid 32129] [client 190.86.74.81:9324] [client 190.86.74.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.86.74.81, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aa9NgS_lkX6-Mo89SmHkFgAAAFg"]
[Tue Mar 10 07:37:25.097069 2026] [:error] [pid 13407:tid 13447] [client 91.190.106.128:60844] [client 91.190.106.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aa9ZtdqN0GV-aESMjNx6KAAAAVU"]
[Tue Mar 10 07:37:25.100672 2026] [:error] [pid 13407:tid 13435] [client 91.190.106.128:60845] [client 91.190.106.128] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/storage/oauth-private.key"] [unique_id "aa9ZtdqN0GV-aESMjNx6KQAAAUk"]
[Tue Mar 10 07:37:25.101706 2026] [:error] [pid 13407:tid 13449] [client 91.190.106.128:60846] [client 91.190.106.128] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/storage/oauth-public.key"] [unique_id "aa9ZtdqN0GV-aESMjNx6KgAAAVc"]
[Tue Mar 10 10:21:37.327492 2026] [:error] [pid 42730:tid 42750] [client 122.51.236.174:45300] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aa-AMchla5zfkJ-81FANxwAAAdI"]
[Tue Mar 10 12:07:29.432174 2026] [:error] [pid 42759:tid 42780] [client 162.62.132.25:46088] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aa-ZAfoOpjBGGv-2UuxizQAAAhI"]
[Tue Mar 10 14:09:58.056866 2026] [:error] [pid 42666:tid 42688] [client 103.214.60.65:38327] [client 103.214.60.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.214.60.65, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aa-1to0d5emjo-Hs706SiwAAARQ"]
[Tue Mar 10 16:39:50.141101 2026] [autoindex:error] [pid 21400:tid 21412] [client 139.59.32.166:54474] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 16:50:51.819214 2026] [:error] [pid 21316:tid 21341] [client 117.33.163.216:56972] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aa_ba5mAQfAZtna2rDyY5gAAABU"]
[Tue Mar 10 18:50:59.349646 2026] [autoindex:error] [pid 48041:tid 48067] [client 139.59.32.166:49720] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 20:27:57.015223 2026] [:error] [pid 3872:tid 3895] [client 152.32.98.2:52792] [client 152.32.98.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abAOTdseKmNoS38Y-zvFrAAAABM"]
[Tue Mar 10 21:18:58.450511 2026] [:error] [pid 3965:tid 3984] [client 62.65.189.167:42322] [client 62.65.189.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abAaQpN2nrVwtq9b0ranxwAAANE"]
[Tue Mar 10 21:19:14.289007 2026] [:error] [pid 3874:tid 3944] [client 178.153.94.81:42606] [client 178.153.94.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abAaUuK9H96QUJV_mxYpHAAAAIU"]
2026/03/11 07:37:55 [error] 3471#3471: *575635 access forbidden by rule, client: 185.93.89.136, server: cpanel.measureyourcause.com.au, request: "GET //.git/HEAD HTTP/1.1", host: "cpanel.measureyourcause.com.au"
[Wed Mar 11 07:48:35.185745 2026] [:error] [pid 11796:tid 11812] [client 209.87.169.112:40286] [client 209.87.169.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abCt0wEDXoQrlStpO9AhQwAAAY4"]
[Wed Mar 11 10:33:27.476755 2026] [:error] [pid 54045:tid 54068] [client 49.151.19.100:38204] [client 49.151.19.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abDUdyRcKzQ1f-N8TgQSSgAAANU"]
[Wed Mar 11 15:20:13.606562 2026] [:error] [pid 53955:tid 54027] [client 134.199.164.121:60892] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abEXrdP1Uf6qBkbxZg_IYwAAAIg"]
2026/03/11 15:20:13 [error] 53948#53948: *847501 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.625045 2026] [:error] [pid 53955:tid 54031] [client 134.199.164.121:60896] [client 134.199.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "abEXrdP1Uf6qBkbxZg_IZQAAAIw"]
2026/03/11 15:20:13 [error] 53948#53948: *847501 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET /wp HTTP/1.1", upstream: "http://103.4.122.14:8181/wp", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.648908 2026] [:error] [pid 53955:tid 54038] [client 134.199.164.121:60900] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp"] [unique_id "abEXrdP1Uf6qBkbxZg_IZgAAAJM"]
2026/03/11 15:20:13 [error] 53948#53948: *847510 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET /wordpress HTTP/1.1", upstream: "http://103.4.122.14:8181/wordpress", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.659704 2026] [:error] [pid 53955:tid 54037] [client 134.199.164.121:60906] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress"] [unique_id "abEXrdP1Uf6qBkbxZg_IaQAAAJI"]
[Wed Mar 11 15:20:13.659741 2026] [:error] [pid 53955:tid 54032] [client 134.199.164.121:60904] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/demo"] [unique_id "abEXrdP1Uf6qBkbxZg_IaAAAAI0"]
2026/03/11 15:20:13 [error] 53948#53948: *847509 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET /demo HTTP/1.1", upstream: "http://103.4.122.14:8181/demo", host: "measureyourcause.com.au"
2026/03/11 15:20:13 [error] 53948#53948: *847513 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.661201 2026] [:error] [pid 23482:tid 23492] [client 134.199.164.121:60908] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abEXrcrYaTAnN_mLXymi-QAAAQc"]
2026/03/11 15:20:13 [error] 53948#53948: *847512 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET /blog HTTP/1.1", upstream: "http://103.4.122.14:8181/blog", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.661545 2026] [:error] [pid 54045:tid 54070] [client 134.199.164.121:60910] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog"] [unique_id "abEXrSRcKzQ1f-N8TgRL5gAAANc"]
2026/03/11 15:20:13 [error] 53948#53948: *847507 access forbidden by rule, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET /.git/config HTTP/1.1", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.663991 2026] [:error] [pid 23482:tid 23505] [client 134.199.164.121:60912] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new"] [unique_id "abEXrcrYaTAnN_mLXymi-gAAARQ"]
2026/03/11 15:20:13 [error] 53948#53948: *847514 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET /new HTTP/1.1", upstream: "http://103.4.122.14:8181/new", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.664230 2026] [:error] [pid 53955:tid 54021] [client 134.199.164.121:60914] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug/default/index"] [unique_id "abEXrdP1Uf6qBkbxZg_IagAAAIM"]
2026/03/11 15:20:13 [error] 53948#53948: *847508 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET /debug/default/index HTTP/1.1", upstream: "http://103.4.122.14:8181/debug/default/index", host: "measureyourcause.com.au"
2026/03/11 15:20:13 [error] 53948#53948: *847510 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET /vendor/laravel-filemanager/js/script.js HTTP/1.1", upstream: "http://103.4.122.14:8181/vendor/laravel-filemanager/js/script.js", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.676551 2026] [:error] [pid 23482:tid 23509] [client 134.199.164.121:60918] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abEXrcrYaTAnN_mLXymi-wAAARg"]
2026/03/11 15:20:13 [error] 53948#53948: *847509 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "POST / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.676866 2026] [:error] [pid 23482:tid 23501] [client 134.199.164.121:60920] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vendor/laravel-filemanager/js/script.js"] [unique_id "abEXrcrYaTAnN_mLXymi_AAAARA"]
2026/03/11 15:20:13 [error] 53948#53948: *847513 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", upstream: "http://103.4.122.14:8181/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.677426 2026] [:error] [pid 53954:tid 53999] [client 134.199.164.121:60922] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abEXrbbD1J_Nhe6jce2IpwAAAE0"]
[Wed Mar 11 15:20:13.700937 2026] [:error] [pid 45143:tid 45158] [client 134.199.164.121:60930] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_ignition/execute-solution"] [unique_id "abEXrSEXSpYdWImkpzau9AAAAY0"]
2026/03/11 15:20:13 [error] 53948#53948: *847509 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET /_ignition/execute-solution HTTP/1.1", upstream: "http://103.4.122.14:8181/_ignition/execute-solution", host: "measureyourcause.com.au"
[Wed Mar 11 15:20:13.702999 2026] [:error] [pid 45143:tid 45149] [client 134.199.164.121:60934] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vendor/laravel-filemanager/js/script.js"] [unique_id "abEXrSEXSpYdWImkpzau9QAAAYQ"]
2026/03/11 15:20:13 [error] 53948#53948: *847508 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.com.au, request: "GET /public/vendor/laravel-filemanager/js/script.js HTTP/1.1", upstream: "http://103.4.122.14:8181/public/vendor/laravel-filemanager/js/script.js", host: "measureyourcause.com.au"
[Wed Mar 11 19:16:19.113846 2026] [autoindex:error] [pid 53955:tid 54028] [client 20.2.141.62:48232] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 11 21:44:13.030073 2026] [:error] [pid 44882:tid 44889] [client 62.61.165.84:39790] [client 62.61.165.84] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abFxrVC06UlbDFYZNg0I4wAAAgU"]
[Thu Mar 12 00:17:58.792860 2026] [:error] [pid 44882:tid 44896] [client 125.166.116.99:35588] [client 125.166.116.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.4.122.14, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abGVtlC06UlbDFYZNg0QFAAAAgw"]
[Thu Mar 12 04:02:15.525970 2026] [:error] [pid 63149:tid 63233] [client 45.132.115.250:42914] [client 45.132.115.250] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abHKR3o4UdkUSJRpS0wHfwAAAI8"]
[Thu Mar 12 04:59:13.940415 2026] [:error] [pid 63149:tid 63228] [client 172.98.33.13:43346] [client 172.98.33.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abHXoXo4UdkUSJRpS0wUJgAAAIo"]
[Thu Mar 12 04:59:14.800745 2026] [:error] [pid 63256:tid 63279] [client 172.98.33.11:43402] [client 172.98.33.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.4.122.14, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abHXoghgyalB3r3y_ThHiQAAAM8"]
[Thu Mar 12 08:08:05.661312 2026] [:error] [pid 11985:tid 12015] [client 78.164.206.213:62416] [client 78.164.206.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.164.206.213, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abID5XcAcNujsOssVDfEWAAAAZg"]
[Thu Mar 12 09:41:39.178293 2026] [:error] [pid 11953:tid 11961] [client 43.157.172.39:57766] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abIZ05udzqsnq3bvtDbxMQAAAUY"]
[Thu Mar 12 12:00:21.740736 2026] [:error] [pid 51457:tid 51518] [client 170.106.163.48:45104] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abI6VSjknw2FvT4H3DaUPQAAAIQ"]
[Thu Mar 12 13:45:13.244616 2026] [:error] [pid 51540:tid 51563] [client 182.42.110.255:58377] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abJS6WOFFjotMIN2UD2qcAAAANU"]
[Thu Mar 12 15:19:05.865222 2026] [:error] [pid 11985:tid 12003] [client 36.83.21.148:55645] [client 36.83.21.148] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.83.21.148, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abJo6XcAcNujsOssVDf-nAAAAYw"]
[Thu Mar 12 15:57:12.429169 2026] [:error] [pid 51540:tid 51546] [client 43.135.135.57:38930] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abJx2GOFFjotMIN2UD3JGwAAAMQ"]
[Thu Mar 12 18:25:14.853781 2026] [:error] [pid 51455:tid 51472] [client 103.65.236.149:52382] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "abKUipE0YyNxdg6PL_AvIQAAAAw"]
[Thu Mar 12 18:25:15.076203 2026] [:error] [pid 51540:tid 51546] [client 103.65.236.149:52393] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abKUi2OFFjotMIN2UD3mtgAAAMQ"]
[Thu Mar 12 18:47:43.478599 2026] [:error] [pid 51455:tid 51466] [client 49.43.217.24:59877] [client 49.43.217.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.217.24, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abKZz5E0YyNxdg6PL_A2fQAAAAY"]
[Thu Mar 12 20:06:07.918537 2026] [:error] [pid 20530:tid 20612] [client 20.151.7.111:18373] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "abKsLwkNGxMzPO-s9qcHCwAAA5c"]
[Thu Mar 12 20:06:09.663798 2026] [:error] [pid 8249:tid 8264] [client 20.151.7.111:17427] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "abKsMSK5dL3-8Jdf0M09ywAAAQ0"]
[Thu Mar 12 20:06:11.508926 2026] [:error] [pid 20528:tid 20535] [client 20.151.7.111:17423] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "abKsM6nDNsf46-tKxqkO0gAAAwE"]
[Thu Mar 12 20:06:13.784348 2026] [:error] [pid 20529:tid 20563] [client 20.151.7.111:17421] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wk/index.php"] [unique_id "abKsNW4BhuYHZriajQ9_2gAAA0E"]
[Thu Mar 12 22:06:30.971732 2026] [:error] [pid 11986:tid 12032] [client 170.106.163.84:41722] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abLIZjKqY2w-DVCrxTAvuQAAAc4"]
[Fri Mar 13 00:01:29.337589 2026] [:error] [pid 11953:tid 11957] [client 20.151.108.217:13312] [client 20.151.108.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.108.217, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abLjWZudzqsnq3bvtDaSsgAAAUI"]
[Fri Mar 13 00:01:32.697584 2026] [:error] [pid 11953:tid 11976] [client 20.151.108.217:13312] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abLjXJudzqsnq3bvtDaSwQAAAVU"]
[Fri Mar 13 00:01:33.553709 2026] [:error] [pid 51457:tid 51522] [client 20.151.108.217:13645] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abLjXSjknw2FvT4H3DbiCgAAAIg"]
[Fri Mar 13 00:01:34.381987 2026] [:error] [pid 11986:tid 12024] [client 20.151.108.217:13360] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abLjXjKqY2w-DVCrxTBMIwAAAcY"]
[Fri Mar 13 00:01:35.249931 2026] [:error] [pid 11986:tid 12030] [client 20.151.108.217:13317] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abLjXzKqY2w-DVCrxTBMJwAAAcw"]
[Fri Mar 13 00:18:29.374352 2026] [:error] [pid 11986:tid 12036] [client 43.135.148.92:50770] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abLnVTKqY2w-DVCrxTBQFAAAAdI"]
[Fri Mar 13 00:48:00.624042 2026] [:error] [pid 47893:tid 47996] [client 193.36.225.49:64363] [client 193.36.225.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.49, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abLuQAYSdu6aqxO_YucYSQAAAJU"]
[Fri Mar 13 02:53:58.716141 2026] [:error] [pid 56003:tid 56022] [client 114.96.103.33:42475] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abMLxhQtM0oeMdFWe6WOkAAAANE"]
[Fri Mar 13 04:59:01.734265 2026] [:error] [pid 61929:tid 62018] [client 43.135.134.127:52568] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abMpFTGGsow2jgUjLtw-pgAAAI4"]
[Fri Mar 13 06:04:54.513557 2026] [:error] [pid 61928:tid 61988] [client 5.195.98.47:4017] [client 5.195.98.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.195.98.47, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abM4hgod66AHekJJZiovSAAAAEs"]
[Fri Mar 13 06:05:20.698343 2026] [:error] [pid 55077:tid 55091] [client 187.1.8.237:26908] [client 187.1.8.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.1.8.237, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abM4oN9Ul5ym4M-PlQLq1QAAAUw"]
[Fri Mar 13 09:40:30.994210 2026] [:error] [pid 62036:tid 62051] [client 136.144.35.38:43087] [client 136.144.35.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.38, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abNrDrce6g9kILuh_R5KtwAAAMg"]
[Fri Mar 13 09:50:26.451573 2026] [:error] [pid 61927:tid 61969] [client 45.131.195.142:52231] [client 45.131.195.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.142, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abNtYrLkK584eBa2J7XlywAAABc"]
[Fri Mar 13 11:48:52.514062 2026] [:error] [pid 9311:tid 9370] [client 43.166.244.66:53808] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abOJJFTiCkU4QLmYwPnHhgAAAlM"]
[Fri Mar 13 11:58:49.843192 2026] [:error] [pid 61928:tid 61997] [client 20.213.29.93:7255] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "abOLeQod66AHekJJZipjpQAAAFQ"]
[Fri Mar 13 11:58:49.943759 2026] [:error] [pid 61929:tid 62025] [client 20.213.29.93:16372] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "abOLeTGGsow2jgUjLtyQvAAAAJU"]
[Fri Mar 13 11:58:50.011121 2026] [:error] [pid 9311:tid 9355] [client 20.213.29.93:5912] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "abOLelTiCkU4QLmYwPnKVQAAAkQ"]
[Fri Mar 13 11:58:50.079049 2026] [:error] [pid 62036:tid 62044] [client 20.213.29.93:13625] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "abOLerce6g9kILuh_R5aNQAAAME"]
[Fri Mar 13 12:17:18.794393 2026] [:error] [pid 9309:tid 9340] [client 3.145.19.203:50698] [client 3.145.19.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abOPzqo1KEMMghNWAN-JMgAAAhE"]
[Fri Mar 13 12:17:19.280696 2026] [:error] [pid 9309:tid 9324] [client 3.145.19.203:55565] [client 3.145.19.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "abOPz6o1KEMMghNWAN-JNQAAAgE"]
[Fri Mar 13 12:17:19.823282 2026] [:error] [pid 9241:tid 9258] [client 3.145.19.203:54228] [client 3.145.19.203] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/media/system/js/core.js"] [unique_id "abOPzw48xagB6AsXkJ7ijAAAAcU"]
[Fri Mar 13 12:53:50.693097 2026] [:error] [pid 9311:tid 9369] [client 212.104.215.26:59851] [client 212.104.215.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "abOYXlTiCkU4QLmYwPnZ8AAAAlI"]
[Fri Mar 13 12:53:59.671121 2026] [:error] [pid 9111:tid 9142] [client 212.104.215.26:55271] [client 212.104.215.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "abOYZ0-M156SLpD2BrshCAAAAZA"]
[Fri Mar 13 14:08:33.495932 2026] [:error] [pid 9111:tid 9141] [client 43.130.101.151:35882] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abOp4U-M156SLpD2BrsnygAAAY8"]
[Fri Mar 13 16:58:36.506921 2026] [:error] [pid 9309:tid 9332] [client 106.215.91.4:15191] [client 106.215.91.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.91.4, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abPRvKo1KEMMghNWAN8HLgAAAgk"]
[Fri Mar 13 18:54:56.625907 2026] [:error] [pid 44755:tid 44762] [client 41.221.81.38:64565] [client 41.221.81.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.221.81.38, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abPtAPONf1H0XrBFE4NS6QAAAQU"]
[Fri Mar 13 19:37:25.441769 2026] [:error] [pid 9309:tid 9342] [client 104.28.166.127:26152] [client 104.28.166.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "abP29ao1KEMMghNWAN83iAAAAhM"]
[Fri Mar 13 21:42:37.530817 2026] [:error] [pid 61929:tid 62008] [client 223.15.245.170:43056] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abQUTTGGsow2jgUjLty63QAAAIQ"]
[Fri Mar 13 23:56:11.948669 2026] [:error] [pid 60497:tid 60555] [client 49.51.132.100:38652] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abQzmxjNYgapWlkb4ljZzwAAA5c"]
[Sat Mar 14 01:36:25.458850 2026] [:error] [pid 47878:tid 47953] [client 20.151.4.179:64808] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chati.php"] [unique_id "abRLGX8jymmmpr1jcBevLAAAAE4"]
[Sat Mar 14 01:36:26.290056 2026] [:error] [pid 47891:tid 47967] [client 20.151.4.179:58757] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chati.php"] [unique_id "abRLGvchNnuMqi7I_WH6OAAAAIE"]
[Sat Mar 14 01:36:27.116445 2026] [:error] [pid 47905:tid 48010] [client 20.151.4.179:64937] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chati.php"] [unique_id "abRLGxaYZayP4o4wpJcmSQAAAVE"]
[Sat Mar 14 01:36:27.940960 2026] [:error] [pid 48070:tid 48081] [client 20.151.4.179:64774] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chati.php"] [unique_id "abRLG0IvrhMS5BVHxNkjhgAAAAk"]
[Sat Mar 14 09:08:56.459542 2026] [:error] [pid 35801:tid 35806] [client 223.181.53.210:22160] [client 223.181.53.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.181.53.210, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abS1KG8tVFelXGsqbU_bswAAAQI"]
[Sat Mar 14 14:23:16.857782 2026] [:error] [pid 54017:tid 54027] [client 43.133.69.37:33452] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abT-1Jh88Lk5QZp0lWWRMQAAAkM"]
[Sat Mar 14 15:23:11.357795 2026] [:error] [pid 61384:tid 61462] [client 34.24.166.229:53656] [client 34.24.166.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.24.166.229, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abUM3_zibL2IYJprDHKFTAAAAdM"]
[Sat Mar 14 15:23:12.682958 2026] [:error] [pid 61384:tid 61457] [client 34.24.166.229:53656] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "abUM4PzibL2IYJprDHKFUgAAAc4"]
[Sat Mar 14 15:23:13.709530 2026] [:error] [pid 61383:tid 61439] [client 34.24.166.229:65422] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "abUM4S4SAn4TCd4o0dW_kgAAARc"]
[Sat Mar 14 15:23:14.596351 2026] [:error] [pid 61384:tid 61467] [client 34.24.166.229:54247] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "abUM4vzibL2IYJprDHKFUwAAAdg"]
[Sat Mar 14 15:23:15.489395 2026] [:error] [pid 61477:tid 61500] [client 34.24.166.229:52373] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "abUM46cx6muYfIYRM7CGXQAAAFM"]
[Sat Mar 14 15:23:16.372872 2026] [:error] [pid 61477:tid 61499] [client 34.24.166.229:64966] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "abUM5Kcx6muYfIYRM7CGYAAAAFI"]
[Sat Mar 14 15:23:17.340423 2026] [:error] [pid 61382:tid 61409] [client 34.24.166.229:61996] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "abUM5f5UUtpNLvwsJ7jaCAAAABc"]
[Sat Mar 14 15:23:18.374372 2026] [:error] [pid 61384:tid 61465] [client 34.24.166.229:62167] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abUM5vzibL2IYJprDHKFXAAAAdY"]
[Sat Mar 14 15:23:19.340131 2026] [:error] [pid 61383:tid 61430] [client 34.24.166.229:64580] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abUM5y4SAn4TCd4o0dW_lAAAAQ4"]
[Sat Mar 14 15:23:20.277280 2026] [:error] [pid 61383:tid 61432] [client 34.24.166.229:54299] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abUM6C4SAn4TCd4o0dW_lwAAARA"]
[Sat Mar 14 15:23:21.114152 2026] [:error] [pid 61477:tid 61494] [client 34.24.166.229:64074] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abUM6acx6muYfIYRM7CGZAAAAE0"]
[Sat Mar 14 15:23:21.967376 2026] [:error] [pid 61383:tid 61428] [client 34.24.166.229:56902] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abUM6S4SAn4TCd4o0dW_mAAAAQw"]
[Sat Mar 14 15:23:22.900793 2026] [:error] [pid 61383:tid 61433] [client 34.24.166.229:53086] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abUM6i4SAn4TCd4o0dW_nAAAARE"]
[Sat Mar 14 15:23:23.831464 2026] [:error] [pid 61477:tid 61500] [client 34.24.166.229:59756] [client 34.24.166.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abUM66cx6muYfIYRM7CGaQAAAFM"]
[Sat Mar 14 16:49:18.846478 2026] [:error] [pid 61382:tid 61393] [client 173.239.224.99:23799] [client 173.239.224.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.99, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abUhDv5UUtpNLvwsJ7jnfQAAAAc"]
[Sat Mar 14 16:49:19.667185 2026] [:error] [pid 61384:tid 61462] [client 173.239.224.110:25619] [client 173.239.224.110] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.110, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abUhD_zibL2IYJprDHKdtgAAAdM"]
[Sat Mar 14 17:37:35.592433 2026] [:error] [pid 30154:tid 30174] [client 182.42.111.213:39036] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abUsX16OP9woRgp3v0FB3wAAAM4"]
[Sat Mar 14 20:11:12.675767 2026] [:error] [pid 61477:tid 61497] [client 203.177.64.130:60325] [client 203.177.64.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.177.64.130, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abVQYKcx6muYfIYRM7DJyAAAAFA"]
[Sun Mar 15 00:35:44.394542 2026] [:error] [pid 19680:tid 20004] [client 170.106.165.186:56986] [client 170.106.165.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abWOYEnhGahR8LEhCX-TZwAAAcw"]
[Sun Mar 15 00:57:25.120251 2026] [:error] [pid 20020:tid 20027] [client 179.54.100.168:60491] [client 179.54.100.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.54.100.168, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abWTdUPjaRwagw2fU7j9sAAAAEU"]
[Sun Mar 15 00:59:10.682292 2026] [:error] [pid 20020:tid 20030] [client 103.66.148.75:55653] [client 103.66.148.75] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.66.148.75, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abWT3kPjaRwagw2fU7j-SAAAAEg"]
[Sun Mar 15 06:43:01.672956 2026] [:error] [pid 38540:tid 38606] [client 182.44.12.37:56966] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abXkdV8bnHsJ1dE90bLy8wAAAFQ"]
[Sun Mar 15 09:16:10.855633 2026] [:error] [pid 9995:tid 10014] [client 158.51.121.45:62064] [client 158.51.121.45] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.51.121.45, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abYIWga8xkcaSmgTbwgmiwAAARA"]
[Sun Mar 15 09:21:44.877715 2026] [:error] [pid 50986:tid 51013] [client 43.159.135.203:38018] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abYJqCknK4c779bcQqG-jwAAAVg"]
[Sun Mar 15 10:08:14.105335 2026] [:error] [pid 38541:tid 38632] [client 209.87.169.112:47001] [client 209.87.169.112] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.112, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abYUjnuOpex8jIO0jt4kWgAAAJM"]
[Sun Mar 15 10:09:39.601838 2026] [autoindex:error] [pid 38540:tid 38606] [client 20.244.84.206:60934] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 15 10:41:28.754870 2026] [:error] [pid 38540:tid 38604] [client 212.30.33.229:26339] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "abYcWF8bnHsJ1dE90bIaNAAAAFI"]
[Sun Mar 15 10:41:47.143505 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.75:35973] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abYca3uOpex8jIO0jt4wJgAAAJI"]
[Sun Mar 15 10:42:06.544411 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.52:42675] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "abYcfnuOpex8jIO0jt4wxwAAAJU"]
[Sun Mar 15 10:42:15.544690 2026] [:error] [pid 9995:tid 10018] [client 212.30.33.69:47923] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "abYchwa8xkcaSmgTbwguuwAAARQ"]
[Sun Mar 15 10:42:16.358979 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.76:32789] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abYciBFPHtsDUuVrWDapxAAAAMY"]
[Sun Mar 15 10:42:19.628559 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.73:54289] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abYciyknK4c779bcQqHhFAAAAUQ"]
[Sun Mar 15 10:42:20.856293 2026] [:error] [pid 38540:tid 38587] [client 212.30.33.97:26039] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "abYcjF8bnHsJ1dE90bIbmwAAAEE"]
[Sun Mar 15 10:42:22.481616 2026] [:error] [pid 38536:tid 38564] [client 212.30.33.100:36495] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abYcjvpTEqkVJ0rBEWvDowAAAAs"]
[Sun Mar 15 10:42:25.747094 2026] [:error] [pid 38645:tid 38665] [client 212.30.33.225:56623] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "abYckRFPHtsDUuVrWDap_QAAANI"]
[Sun Mar 15 10:42:27.547300 2026] [proxy_fcgi:error] [pid 9995:tid 10007] [client 212.30.33.58:36703] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:42:27.967791 2026] [:error] [pid 9995:tid 10003] [client 212.30.33.58:36703] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "abYckwa8xkcaSmgTbwgu_QAAAQU"]
[Sun Mar 15 10:42:29.196136 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.68:45985] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "abYclRFPHtsDUuVrWDaqMwAAANY"]
[Sun Mar 15 10:42:30.907133 2026] [:error] [pid 38541:tid 38622] [client 212.30.33.51:53321] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "abYclnuOpex8jIO0jt4x8AAAAIk"]
[Sun Mar 15 10:42:32.532548 2026] [:error] [pid 38536:tid 38562] [client 212.30.33.89:42745] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abYcmPpTEqkVJ0rBEWvD1gAAAAk"]
[Sun Mar 15 10:42:33.348443 2026] [:error] [pid 38536:tid 38568] [client 212.30.33.78:43923] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "abYcmfpTEqkVJ0rBEWvD5QAAAA8"]
[Sun Mar 15 10:42:34.554292 2026] [:error] [pid 38541:tid 38636] [client 212.30.33.67:27373] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "abYcmnuOpex8jIO0jt4yLAAAAJc"]
[Sun Mar 15 10:42:36.208884 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.190:57497] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "abYcnCknK4c779bcQqHhwwAAAUQ"]
[Sun Mar 15 10:42:37.011788 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.74:22279] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "abYcnfpTEqkVJ0rBEWvEBAAAABM"]
[Sun Mar 15 10:42:37.875042 2026] [:error] [pid 9995:tid 10002] [client 212.30.33.53:64965] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "abYcnQa8xkcaSmgTbwgvKQAAAQQ"]
[Sun Mar 15 10:42:39.511905 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.68:23511] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "abYcnxFPHtsDUuVrWDaqlgAAAMo"]
[Sun Mar 15 10:42:40.310279 2026] [:error] [pid 38540:tid 38591] [client 212.30.33.103:46467] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abYcoF8bnHsJ1dE90bIcHAAAAEU"]
[Sun Mar 15 10:42:41.116222 2026] [:error] [pid 38540:tid 38597] [client 212.30.33.52:25929] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "abYcoV8bnHsJ1dE90bIcIgAAAEs"]
[Sun Mar 15 10:42:41.938108 2026] [:error] [pid 50986:tid 51000] [client 212.30.33.95:20339] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "abYcoSknK4c779bcQqHh9wAAAUs"]
[Sun Mar 15 10:42:42.761588 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.73:36745] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "abYcovpTEqkVJ0rBEWvEMwAAABA"]
[Sun Mar 15 10:42:43.969946 2026] [:error] [pid 38645:tid 38662] [client 212.30.33.179:60719] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "abYcoxFPHtsDUuVrWDaqxgAAAM8"]
[Sun Mar 15 10:42:44.798346 2026] [:error] [pid 38536:tid 38558] [client 212.30.33.68:26711] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "abYcpPpTEqkVJ0rBEWvETQAAAAU"]
[Sun Mar 15 10:42:45.607361 2026] [:error] [pid 50986:tid 50991] [client 212.30.33.91:41911] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "abYcpSknK4c779bcQqHiIAAAAUM"]
[Sun Mar 15 10:42:46.843568 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.166:22685] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abYcpiknK4c779bcQqHiOAAAAVU"]
[Sun Mar 15 10:42:48.519926 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.88:29275] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "abYcqAa8xkcaSmgTbwgvnQAAAQo"]
[Sun Mar 15 10:42:49.355212 2026] [:error] [pid 38541:tid 38628] [client 212.30.33.61:37189] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "abYcqXuOpex8jIO0jt4y1gAAAI8"]
[Sun Mar 15 10:42:52.647595 2026] [:error] [pid 38540:tid 38590] [client 212.30.33.166:43659] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "abYcrF8bnHsJ1dE90bIclQAAAEQ"]
[Sun Mar 15 10:42:55.927581 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.179:55137] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "abYcr_pTEqkVJ0rBEWvErQAAABE"]
[Sun Mar 15 10:42:56.731668 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.76:54625] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abYcsCknK4c779bcQqHiywAAAUE"]
[Sun Mar 15 10:42:57.535038 2026] [:error] [pid 50986:tid 50992] [client 212.30.33.98:54347] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "abYcsSknK4c779bcQqHi3gAAAUQ"]
[Sun Mar 15 10:43:00.390823 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.68:32477] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "abYctCknK4c779bcQqHjJgAAAVU"]
[Sun Mar 15 10:43:02.087153 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.70:32509] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "abYctiknK4c779bcQqHjQQAAAVU"]
[Sun Mar 15 10:43:03.745318 2026] [:error] [pid 38541:tid 38621] [client 212.30.33.60:65015] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abYct3uOpex8jIO0jt4zZQAAAIg"]
[Sun Mar 15 10:43:05.011480 2026] [:error] [pid 38536:tid 38576] [client 212.30.33.57:48411] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "abYcufpTEqkVJ0rBEWvE_QAAABc"]
[Sun Mar 15 10:43:07.474105 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.94:62631] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "abYcuyknK4c779bcQqHjpQAAAVY"]
[Sun Mar 15 10:43:08.285089 2026] [:error] [pid 9995:tid 10012] [client 212.30.33.63:59253] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "abYcvAa8xkcaSmgTbwgwJAAAAQ4"]
[Sun Mar 15 10:43:09.961593 2026] [:error] [pid 38541:tid 38618] [client 212.30.33.77:36881] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "abYcvXuOpex8jIO0jt4zpQAAAIU"]
[Sun Mar 15 10:43:10.785915 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.229:47933] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "abYcviknK4c779bcQqHj_QAAAUY"]
[Sun Mar 15 10:43:17.409455 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.56:37461] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "abYcxSknK4c779bcQqHkigAAAVU"]
[Sun Mar 15 10:43:18.211761 2026] [:error] [pid 42570:tid 42577] [client 212.30.33.213:33405] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "abYcxsIUXZJLmk_gYCOX2AAAAYQ"]
[Sun Mar 15 10:43:19.854197 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.91:53101] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "abYcxyknK4c779bcQqHkrAAAAUE"]
[Sun Mar 15 10:43:20.672437 2026] [:error] [pid 38540:tid 38596] [client 212.30.33.71:33145] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "abYcyF8bnHsJ1dE90bId2QAAAEo"]
[Sun Mar 15 10:43:23.123935 2026] [:error] [pid 38540:tid 38588] [client 212.30.33.97:60695] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "abYcy18bnHsJ1dE90bIeFwAAAEI"]
[Sun Mar 15 10:43:24.342430 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.73:46935] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abYczMIUXZJLmk_gYCOYEwAAAYc"]
[Sun Mar 15 10:43:25.956726 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.54:39655] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "abYczcIUXZJLmk_gYCOYNQAAAYc"]
[Sun Mar 15 10:43:26.772763 2026] [:error] [pid 50986:tid 50991] [client 212.30.33.87:64939] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "abYcziknK4c779bcQqHk7wAAAUM"]
[Sun Mar 15 10:43:27.591286 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.70:56811] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "abYczxFPHtsDUuVrWDasWQAAANY"]
[Sun Mar 15 10:43:28.439250 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.99:42085] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abYc0CknK4c779bcQqHlFwAAAUg"]
[Sun Mar 15 10:43:30.066341 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.166:20193] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abYc0hFPHtsDUuVrWDasfQAAAMY"]
[Sun Mar 15 10:43:33.744306 2026] [:error] [pid 42570:tid 42579] [client 212.30.33.73:44655] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "abYc1cIUXZJLmk_gYCOYvgAAAYY"]
[Sun Mar 15 10:43:39.436028 2026] [:error] [pid 38540:tid 38595] [client 212.30.33.85:62919] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abYc218bnHsJ1dE90bIeygAAAEk"]
[Sun Mar 15 10:43:40.237916 2026] [:error] [pid 38536:tid 38553] [client 212.30.33.77:33399] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "abYc3PpTEqkVJ0rBEWvF9QAAAAA"]
[Sun Mar 15 10:43:41.452437 2026] [:error] [pid 38541:tid 38626] [client 212.30.33.101:33631] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "abYc3XuOpex8jIO0jt41EAAAAI0"]
[Sun Mar 15 10:43:44.073330 2026] [proxy_fcgi:error] [pid 42570:tid 42588] [client 212.30.33.62:33257] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:43:44.876541 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.62:33257] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "abYc4MIUXZJLmk_gYCOZUgAAAYE"]
[Sun Mar 15 10:43:46.081474 2026] [:error] [pid 38536:tid 38562] [client 212.30.33.103:52195] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "abYc4vpTEqkVJ0rBEWvGIwAAAAk"]
[Sun Mar 15 10:43:47.321110 2026] [:error] [pid 38540:tid 38604] [client 212.30.33.75:26335] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abYc418bnHsJ1dE90bIfMAAAAFI"]
[Sun Mar 15 10:43:48.529838 2026] [:error] [pid 50986:tid 51003] [client 212.30.33.179:40909] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abYc5CknK4c779bcQqHmLAAAAU4"]
[Sun Mar 15 10:43:50.201117 2026] [:error] [pid 50986:tid 51011] [client 212.30.33.66:39399] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "abYc5iknK4c779bcQqHmTgAAAVY"]
[Sun Mar 15 10:43:51.033529 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.88:64911] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abYc5yknK4c779bcQqHmWwAAAU0"]
[Sun Mar 15 10:43:53.494881 2026] [:error] [pid 50986:tid 50991] [client 212.30.33.71:47103] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "abYc6SknK4c779bcQqHmrQAAAUM"]
[Sun Mar 15 10:43:56.009618 2026] [:error] [pid 38541:tid 38632] [client 212.30.33.55:22655] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "abYc7HuOpex8jIO0jt41lQAAAJM"]
[Sun Mar 15 10:43:56.848896 2026] [proxy_fcgi:error] [pid 9995:tid 10021] [client 212.30.33.82:60313] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:00.109333 2026] [:error] [pid 9995:tid 10000] [client 212.30.33.82:60313] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "abYc8Aa8xkcaSmgTbwgxjwAAAQI"]
[Sun Mar 15 10:44:00.939940 2026] [:error] [pid 38536:tid 38555] [client 212.30.33.179:42323] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ln/wp-login.php"] [unique_id "abYc8PpTEqkVJ0rBEWvGigAAAAI"]
[Sun Mar 15 10:44:02.157311 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.56:35377] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abYc8vpTEqkVJ0rBEWvGkQAAABY"]
[Sun Mar 15 10:44:02.975167 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.99:46709] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "abYc8iknK4c779bcQqHnFwAAAUg"]
[Sun Mar 15 10:44:04.177898 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.179:37681] [client 212.30.33.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.179, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "abYc9PpTEqkVJ0rBEWvGogAAAAc"]
[Sun Mar 15 10:44:04.589290 2026] [proxy_fcgi:error] [pid 38536:tid 38577] [client 212.30.33.179:37681] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:07.028246 2026] [:error] [pid 38536:tid 38553] [client 212.30.33.179:37681] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "abYc9_pTEqkVJ0rBEWvGxgAAAAA"]
[Sun Mar 15 10:44:08.687473 2026] [:error] [pid 38536:tid 38560] [client 212.30.33.229:49783] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "abYc-PpTEqkVJ0rBEWvG1gAAAAc"]
[Sun Mar 15 10:44:10.318025 2026] [:error] [pid 38541:tid 38629] [client 212.30.33.100:61411] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky.php"] [unique_id "abYc-nuOpex8jIO0jt42EAAAAJA"]
[Sun Mar 15 10:44:11.123125 2026] [:error] [pid 38645:tid 38668] [client 212.30.33.91:48781] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "abYc-xFPHtsDUuVrWDaupgAAANU"]
[Sun Mar 15 10:44:11.938030 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.225:59395] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "abYc-xFPHtsDUuVrWDaurgAAANc"]
[Sun Mar 15 10:44:12.760315 2026] [proxy_fcgi:error] [pid 38541:tid 38632] [client 212.30.33.66:33225] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:14.399159 2026] [:error] [pid 38541:tid 38618] [client 212.30.33.66:33225] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "abYc_nuOpex8jIO0jt42UQAAAIU"]
[Sun Mar 15 10:44:15.208046 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.94:54011] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "abYc_xFPHtsDUuVrWDau1wAAAMY"]
[Sun Mar 15 10:44:16.828736 2026] [:error] [pid 38540:tid 38610] [client 212.30.33.81:61513] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "abYdAF8bnHsJ1dE90bIgMwAAAFg"]
[Sun Mar 15 10:44:18.457726 2026] [:error] [pid 38645:tid 38651] [client 212.30.33.77:38967] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "abYdAhFPHtsDUuVrWDavAgAAAMQ"]
[Sun Mar 15 10:44:19.667732 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.72:25277] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "abYdAyknK4c779bcQqHn1gAAAUA"]
[Sun Mar 15 10:44:20.882544 2026] [:error] [pid 42570:tid 42575] [client 212.30.33.101:49737] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "abYdBMIUXZJLmk_gYCOarwAAAYI"]
[Sun Mar 15 10:44:22.106516 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.58:57179] [client 212.30.33.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.58, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abYdBsIUXZJLmk_gYCOazQAAAYk"]
[Sun Mar 15 10:44:22.523283 2026] [:error] [pid 42570:tid 42580] [client 212.30.33.58:57179] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "abYdBsIUXZJLmk_gYCOa1gAAAYc"]
[Sun Mar 15 10:44:24.158139 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.78:26903] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "abYdCBFPHtsDUuVrWDavJgAAAMY"]
[Sun Mar 15 10:44:25.779976 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.76:50609] [client 212.30.33.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.76, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "abYdCRFPHtsDUuVrWDavMwAAAM0"]
[Sun Mar 15 10:44:27.015997 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.76:50609] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "abYdCxFPHtsDUuVrWDavPwAAAM0"]
[Sun Mar 15 10:44:27.849329 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.59:46897] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "abYdCxFPHtsDUuVrWDavRAAAAMg"]
[Sun Mar 15 10:44:28.669428 2026] [:error] [pid 38540:tid 38589] [client 212.30.33.69:44899] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "abYdDF8bnHsJ1dE90bIgeQAAAEM"]
[Sun Mar 15 10:44:29.481768 2026] [:error] [pid 42570:tid 42585] [client 212.30.33.66:50489] [client 212.30.33.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.66, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "abYdDcIUXZJLmk_gYCObJgAAAYw"]
[Sun Mar 15 10:44:31.125298 2026] [proxy_fcgi:error] [pid 42570:tid 42589] [client 212.30.33.66:50489] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:32.355275 2026] [:error] [pid 42570:tid 42587] [client 212.30.33.66:50489] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "abYdEMIUXZJLmk_gYCObRwAAAY4"]
[Sun Mar 15 10:44:33.163744 2026] [proxy_fcgi:error] [pid 38540:tid 38599] [client 212.30.33.79:25611] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:34.770384 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.79:25611] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "abYdEl8bnHsJ1dE90bIgsgAAAEg"]
[Sun Mar 15 10:44:36.442637 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.54:49147] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abYdFPpTEqkVJ0rBEWvHowAAABE"]
[Sun Mar 15 10:44:37.653475 2026] [proxy_fcgi:error] [pid 38645:tid 38650] [client 212.30.33.71:48407] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:38.061098 2026] [proxy_fcgi:error] [pid 38645:tid 38652] [client 212.30.33.71:48407] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:38.460968 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.71:48407] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "abYdFhFPHtsDUuVrWDav0gAAAMc"]
[Sun Mar 15 10:44:39.265789 2026] [:error] [pid 38541:tid 38632] [client 212.30.33.76:40019] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "abYdF3uOpex8jIO0jt43XgAAAJM"]
[Sun Mar 15 10:44:40.061503 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.78:38039] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "abYdGBFPHtsDUuVrWDav3wAAANE"]
[Sun Mar 15 10:44:41.275403 2026] [:error] [pid 9995:tid 10022] [client 212.30.33.72:65235] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "abYdGQa8xkcaSmgTbwgy-QAAARg"]
[Sun Mar 15 10:44:42.086733 2026] [:error] [pid 38540:tid 38609] [client 212.30.33.83:39669] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "abYdGl8bnHsJ1dE90bIhAwAAAFc"]
[Sun Mar 15 10:44:45.387768 2026] [:error] [pid 38540:tid 38591] [client 212.30.33.87:42069] [client 212.30.33.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.87, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "abYdHV8bnHsJ1dE90bIhMQAAAEU"]
[Sun Mar 15 10:44:46.220195 2026] [:error] [pid 38540:tid 38591] [client 212.30.33.87:42069] [client 212.30.33.87] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.87, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "abYdHl8bnHsJ1dE90bIhOAAAAEU"]
[Sun Mar 15 10:44:46.639253 2026] [:error] [pid 38540:tid 38588] [client 212.30.33.87:42069] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "abYdHl8bnHsJ1dE90bIhOgAAAEI"]
[Sun Mar 15 10:44:47.454350 2026] [proxy_fcgi:error] [pid 38645:tid 38666] [client 212.30.33.77:40841] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:47.864505 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.77:40841] [client 212.30.33.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.77, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "abYdHxFPHtsDUuVrWDawJwAAAMI"]
[Sun Mar 15 10:44:47.877635 2026] [proxy_fcgi:error] [pid 38645:tid 38649] [client 212.30.33.77:40841] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:49.143316 2026] [proxy_fcgi:error] [pid 38645:tid 38647] [client 212.30.33.77:40841] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:49.550470 2026] [:error] [pid 38645:tid 38662] [client 212.30.33.77:40841] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "abYdIRFPHtsDUuVrWDawMgAAAM8"]
[Sun Mar 15 10:44:50.350465 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.55:55829] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID/wp-conflg.php"] [unique_id "abYdIvpTEqkVJ0rBEWvIXwAAABE"]
[Sun Mar 15 10:44:51.595087 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.96:55433] [client 212.30.33.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID/wp-work.php"] [unique_id "abYdI3uOpex8jIO0jt44BgAAAJI"]
[Sun Mar 15 10:44:52.800181 2026] [:error] [pid 38536:tid 38565] [client 212.30.33.103:20493] [client 212.30.33.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.103, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "abYdJPpTEqkVJ0rBEWvIggAAAAw"]
[Sun Mar 15 10:44:54.022141 2026] [:error] [pid 38536:tid 38565] [client 212.30.33.103:20493] [client 212.30.33.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.103, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "abYdJvpTEqkVJ0rBEWvIkAAAAAw"]
[Sun Mar 15 10:44:54.431427 2026] [proxy_fcgi:error] [pid 38536:tid 38557] [client 212.30.33.103:20493] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:44:55.245880 2026] [:error] [pid 38536:tid 38554] [client 212.30.33.103:20493] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "abYdJ_pTEqkVJ0rBEWvIlgAAAAE"]
[Sun Mar 15 10:44:56.049676 2026] [:error] [pid 9995:tid 10000] [client 212.30.33.55:39641] [client 212.30.33.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "abYdKAa8xkcaSmgTbwgzawAAAQI"]
[Sun Mar 15 10:45:01.521004 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.62:53741] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "abYdLfpTEqkVJ0rBEWvI4wAAABM"]
[Sun Mar 15 10:45:02.336725 2026] [:error] [pid 38536:tid 38564] [client 212.30.33.93:41763] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "abYdLvpTEqkVJ0rBEWvI6wAAAAs"]
[Sun Mar 15 10:45:03.573513 2026] [:error] [pid 38645:tid 38650] [client 212.30.33.61:53815] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl.php"] [unique_id "abYdLxFPHtsDUuVrWDawwQAAAMM"]
[Sun Mar 15 10:45:05.619483 2026] [:error] [pid 38541:tid 38620] [client 212.30.33.58:50245] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "abYdMXuOpex8jIO0jt44-gAAAIc"]
[Sun Mar 15 10:45:07.284344 2026] [:error] [pid 38540:tid 38588] [client 212.30.33.70:45609] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "abYdM18bnHsJ1dE90bIiFQAAAEI"]
[Sun Mar 15 10:45:08.118677 2026] [:error] [pid 42570:tid 42594] [client 212.30.33.76:40557] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "abYdNMIUXZJLmk_gYCOcRwAAAZU"]
[Sun Mar 15 10:45:09.791754 2026] [:error] [pid 38540:tid 38603] [client 212.30.33.66:55143] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "abYdNV8bnHsJ1dE90bIiKgAAAFE"]
[Sun Mar 15 10:45:10.603532 2026] [:error] [pid 50986:tid 50993] [client 212.30.33.92:50725] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "abYdNiknK4c779bcQqHq2QAAAUU"]
[Sun Mar 15 10:45:11.843663 2026] [:error] [pid 38536:tid 38564] [client 212.30.33.100:23743] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "abYdN_pTEqkVJ0rBEWvJTwAAAAs"]
[Sun Mar 15 10:45:13.089428 2026] [:error] [pid 9995:tid 9999] [client 212.30.33.87:59009] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "abYdOQa8xkcaSmgTbwgz9QAAAQE"]
[Sun Mar 15 10:45:14.745955 2026] [:error] [pid 9995:tid 10010] [client 212.30.33.59:38527] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abYdOga8xkcaSmgTbwgz_QAAAQw"]
[Sun Mar 15 10:45:16.352739 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.76:25987] [client 212.30.33.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.76, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "abYdPPpTEqkVJ0rBEWvJdAAAABU"]
[Sun Mar 15 10:45:18.816879 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.76:25987] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "abYdPvpTEqkVJ0rBEWvJkwAAABY"]
[Sun Mar 15 10:45:21.268713 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.83:52949] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "abYdQRFPHtsDUuVrWDaxoAAAANQ"]
[Sun Mar 15 10:45:22.493963 2026] [:error] [pid 42570:tid 42592] [client 212.30.33.92:24907] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "abYdQsIUXZJLmk_gYCOc9QAAAZM"]
[Sun Mar 15 10:45:25.396768 2026] [:error] [pid 42570:tid 42592] [client 212.30.33.93:51773] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abYdRcIUXZJLmk_gYCOdMQAAAZM"]
[Sun Mar 15 10:45:28.269330 2026] [:error] [pid 9995:tid 10004] [client 212.30.33.96:53445] [client 212.30.33.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "abYdSAa8xkcaSmgTbwg0XQAAAQY"]
[Sun Mar 15 10:45:29.105963 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.66:36979] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "abYdSSknK4c779bcQqHsDAAAAU8"]
[Sun Mar 15 10:45:30.729818 2026] [:error] [pid 42570:tid 42583] [client 212.30.33.166:38717] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abYdSsIUXZJLmk_gYCOddgAAAYo"]
[Sun Mar 15 10:45:33.571278 2026] [:error] [pid 38541:tid 38633] [client 212.30.33.97:44359] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "abYdTXuOpex8jIO0jt46QwAAAJQ"]
[Sun Mar 15 10:45:34.376331 2026] [:error] [pid 9995:tid 10002] [client 212.30.33.84:54987] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "abYdTga8xkcaSmgTbwg0pwAAAQQ"]
[Sun Mar 15 10:45:38.049745 2026] [:error] [pid 42570:tid 42575] [client 212.30.33.98:47147] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "abYdUsIUXZJLmk_gYCOd6gAAAYI"]
[Sun Mar 15 10:45:38.857040 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.98:43463] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "abYdUl8bnHsJ1dE90bIjZAAAAEg"]
[Sun Mar 15 10:45:39.673367 2026] [:error] [pid 38540:tid 38603] [client 212.30.33.213:21469] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "abYdU18bnHsJ1dE90bIjbwAAAFE"]
[Sun Mar 15 10:45:41.304614 2026] [:error] [pid 9995:tid 10002] [client 212.30.33.79:44341] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "abYdVQa8xkcaSmgTbwg0-QAAAQQ"]
[Sun Mar 15 10:45:42.521453 2026] [:error] [pid 38541:tid 38614] [client 212.30.33.90:34551] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "abYdVnuOpex8jIO0jt46tgAAAIE"]
[Sun Mar 15 10:45:43.354859 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.64:55709] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID/about.php"] [unique_id "abYdVyknK4c779bcQqHtAQAAAUA"]
[Sun Mar 15 10:45:47.714349 2026] [:error] [pid 42570:tid 42581] [client 212.30.33.83:23419] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "abYdW8IUXZJLmk_gYCOeVQAAAYg"]
[Sun Mar 15 10:45:48.536458 2026] [:error] [pid 38540:tid 38596] [client 212.30.33.53:61099] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/fix.php"] [unique_id "abYdXF8bnHsJ1dE90bIjuAAAAEo"]
[Sun Mar 15 10:45:54.628019 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.101:44663] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "abYdYnuOpex8jIO0jt47jAAAAJI"]
[Sun Mar 15 10:45:55.448464 2026] [proxy_fcgi:error] [pid 38536:tid 38571] [client 212.30.33.98:43979] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:45:57.080484 2026] [:error] [pid 38536:tid 38555] [client 212.30.33.98:43979] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "abYdZfpTEqkVJ0rBEWvLCAAAAAI"]
[Sun Mar 15 10:45:57.881805 2026] [:error] [pid 42570:tid 42588] [client 212.30.33.97:45899] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "abYdZcIUXZJLmk_gYCOfAAAAAY8"]
[Sun Mar 15 10:45:58.701320 2026] [:error] [pid 50986:tid 51000] [client 212.30.33.228:52915] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "abYdZiknK4c779bcQqHtuAAAAUs"]
[Sun Mar 15 10:45:59.504820 2026] [:error] [pid 9995:tid 10006] [client 212.30.33.68:21643] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "abYdZwa8xkcaSmgTbwg1tAAAAQg"]
[Sun Mar 15 10:46:00.344510 2026] [:error] [pid 42570:tid 42596] [client 212.30.33.103:35111] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "abYdaMIUXZJLmk_gYCOfLQAAAZc"]
[Sun Mar 15 10:46:01.214713 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.87:44007] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "abYdaSknK4c779bcQqHt1gAAAUA"]
[Sun Mar 15 10:46:02.016800 2026] [:error] [pid 38540:tid 38599] [client 212.30.33.166:41007] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "abYdal8bnHsJ1dE90bIkZQAAAE0"]
[Sun Mar 15 10:46:02.825826 2026] [:error] [pid 38536:tid 38559] [client 212.30.33.65:54451] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "abYdavpTEqkVJ0rBEWvLSQAAAAY"]
[Sun Mar 15 10:46:05.318988 2026] [:error] [pid 38541:tid 38629] [client 212.30.33.83:57333] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "abYdbXuOpex8jIO0jt48FwAAAJA"]
[Sun Mar 15 10:46:06.554134 2026] [:error] [pid 50986:tid 51003] [client 212.30.33.86:51723] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "abYdbiknK4c779bcQqHuLQAAAU4"]
[Sun Mar 15 10:46:08.984681 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.60:60079] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "abYdcCknK4c779bcQqHufwAAAVU"]
[Sun Mar 15 10:46:11.047308 2026] [:error] [pid 9995:tid 10006] [client 212.30.33.99:22063] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "abYdcwa8xkcaSmgTbwg2LQAAAQg"]
[Sun Mar 15 10:46:11.888596 2026] [:error] [pid 50986:tid 51012] [client 212.30.33.66:57695] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "abYdcyknK4c779bcQqHuuAAAAVc"]
[Sun Mar 15 10:46:12.705829 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.225:25923] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "abYddHuOpex8jIO0jt48TwAAAJI"]
[Sun Mar 15 10:46:13.510278 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.88:37957] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "abYddSknK4c779bcQqHvBAAAAU8"]
[Sun Mar 15 10:46:14.739728 2026] [:error] [pid 50986:tid 51005] [client 212.30.33.59:34429] [client 212.30.33.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "abYddiknK4c779bcQqHvPwAAAVA"]
[Sun Mar 15 10:46:18.875569 2026] [:error] [pid 38541:tid 38622] [client 212.30.33.58:57765] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "abYdenuOpex8jIO0jt48bwAAAIk"]
[Sun Mar 15 10:46:20.093753 2026] [:error] [pid 9995:tid 10000] [client 212.30.33.83:48413] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "abYdfAa8xkcaSmgTbwg2qAAAAQI"]
[Sun Mar 15 10:46:22.133838 2026] [:error] [pid 38541:tid 38633] [client 212.30.33.100:24799] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "abYdfnuOpex8jIO0jt48hgAAAJQ"]
[Sun Mar 15 10:46:23.408151 2026] [:error] [pid 50986:tid 51012] [client 212.30.33.73:29785] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "abYdfyknK4c779bcQqHwVAAAAVc"]
[Sun Mar 15 10:46:25.877414 2026] [:error] [pid 38645:tid 38666] [client 212.30.33.85:22257] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "abYdgRFPHtsDUuVrWDaz8wAAANM"]
[Sun Mar 15 10:46:27.482393 2026] [:error] [pid 38645:tid 38647] [client 212.30.33.64:46303] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "abYdgxFPHtsDUuVrWDa0DgAAAMA"]
[Sun Mar 15 10:46:30.348635 2026] [:error] [pid 42570:tid 42590] [client 212.30.33.93:44375] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "abYdhsIUXZJLmk_gYCOhUQAAAZE"]
[Sun Mar 15 10:46:31.276032 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.81:58785] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "abYdh8IUXZJLmk_gYCOhXwAAAYk"]
[Sun Mar 15 10:46:32.517074 2026] [:error] [pid 38540:tid 38607] [client 212.30.33.67:25909] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "abYdiF8bnHsJ1dE90bIlZwAAAFU"]
[Sun Mar 15 10:46:33.320572 2026] [:error] [pid 42570:tid 42597] [client 212.30.33.71:24907] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "abYdicIUXZJLmk_gYCOhfwAAAZg"]
[Sun Mar 15 10:46:34.124087 2026] [:error] [pid 38540:tid 38597] [client 212.30.33.213:36061] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "abYdil8bnHsJ1dE90bIlhQAAAEs"]
[Sun Mar 15 10:46:35.761026 2026] [:error] [pid 38645:tid 38670] [client 212.30.33.100:44285] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "abYdixFPHtsDUuVrWDa0RAAAANc"]
[Sun Mar 15 10:46:37.378338 2026] [:error] [pid 9995:tid 10011] [client 212.30.33.90:23929] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-smtp-bar.php"] [unique_id "abYdjQa8xkcaSmgTbwg3MQAAAQ0"]
[Sun Mar 15 10:46:38.589308 2026] [:error] [pid 38645:tid 38658] [client 212.30.33.190:53973] [client 212.30.33.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "abYdjhFPHtsDUuVrWDa0dgAAAMs"]
[Sun Mar 15 10:46:39.848483 2026] [:error] [pid 9995:tid 10016] [client 212.30.33.92:24195] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abYdjwa8xkcaSmgTbwg3PQAAARI"]
[Sun Mar 15 10:46:41.477076 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.81:61439] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "abYdkSknK4c779bcQqHxigAAAU8"]
[Sun Mar 15 10:46:42.277531 2026] [:error] [pid 42570:tid 42591] [client 212.30.33.93:58883] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "abYdksIUXZJLmk_gYCOiGgAAAZI"]
[Sun Mar 15 10:46:43.937745 2026] [:error] [pid 9995:tid 10018] [client 212.30.33.164:39065] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "abYdkwa8xkcaSmgTbwg3VQAAARQ"]
[Sun Mar 15 10:46:46.809689 2026] [:error] [pid 42570:tid 42577] [client 212.30.33.79:28131] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "abYdlsIUXZJLmk_gYCOiUgAAAYQ"]
[Sun Mar 15 10:46:48.046482 2026] [:error] [pid 42570:tid 42592] [client 212.30.33.77:52227] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "abYdmMIUXZJLmk_gYCOiaAAAAZM"]
[Sun Mar 15 10:46:49.304336 2026] [:error] [pid 42570:tid 42595] [client 212.30.33.58:49403] [client 212.30.33.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "abYdmcIUXZJLmk_gYCOiegAAAZY"]
[Sun Mar 15 10:46:50.132829 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.72:22635] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID/shell.php"] [unique_id "abYdmhFPHtsDUuVrWDa1CgAAAMo"]
[Sun Mar 15 10:46:50.953469 2026] [:error] [pid 42570:tid 42588] [client 212.30.33.52:55999] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "abYdmsIUXZJLmk_gYCOilQAAAY8"]
[Sun Mar 15 10:46:52.182919 2026] [:error] [pid 38536:tid 38567] [client 212.30.33.76:44945] [client 212.30.33.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID/db.php"] [unique_id "abYdnPpTEqkVJ0rBEWvNSAAAAA4"]
[Sun Mar 15 10:46:52.999477 2026] [:error] [pid 42570:tid 42575] [client 212.30.33.97:31455] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "abYdnMIUXZJLmk_gYCOiwQAAAYI"]
[Sun Mar 15 10:46:53.832132 2026] [:error] [pid 38540:tid 38595] [client 212.30.33.68:21629] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "abYdnV8bnHsJ1dE90bImnwAAAEk"]
[Sun Mar 15 10:46:55.045752 2026] [:error] [pid 9995:tid 10020] [client 212.30.33.78:47063] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "abYdnwa8xkcaSmgTbwg31AAAARY"]
[Sun Mar 15 10:46:55.850437 2026] [:error] [pid 42570:tid 42579] [client 212.30.33.98:24079] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "abYdn8IUXZJLmk_gYCOi6QAAAYY"]
[Sun Mar 15 10:46:56.654123 2026] [:error] [pid 50986:tid 50999] [client 212.30.33.61:53061] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "abYdoCknK4c779bcQqHyKAAAAUo"]
[Sun Mar 15 10:46:58.693791 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.54:26229] [client 212.30.33.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-wploader.php"] [unique_id "abYdol8bnHsJ1dE90bIm6gAAAEg"]
[Sun Mar 15 10:46:59.953346 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.87:56867] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "abYdoyknK4c779bcQqHyRwAAAUY"]
[Sun Mar 15 10:47:02.032285 2026] [:error] [pid 42570:tid 42575] [client 212.30.33.52:31785] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "abYdpsIUXZJLmk_gYCOjPwAAAYI"]
[Sun Mar 15 10:47:03.659624 2026] [:error] [pid 38540:tid 38594] [client 212.30.33.83:61775] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "abYdp18bnHsJ1dE90bInNgAAAEg"]
[Sun Mar 15 10:47:04.468770 2026] [:error] [pid 50986:tid 50989] [client 212.30.33.91:49745] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "abYdqCknK4c779bcQqHykAAAAUE"]
[Sun Mar 15 10:47:05.671014 2026] [:error] [pid 38541:tid 38625] [client 212.30.33.99:38343] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "abYdqXuOpex8jIO0jt4-PQAAAIw"]
[Sun Mar 15 10:47:06.903373 2026] [:error] [pid 9995:tid 10006] [client 212.30.33.53:33251] [client 212.30.33.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "abYdqga8xkcaSmgTbwg4WgAAAQg"]
[Sun Mar 15 10:47:07.723522 2026] [:error] [pid 9995:tid 10018] [client 212.30.33.65:30877] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "abYdqwa8xkcaSmgTbwg4YQAAARQ"]
[Sun Mar 15 10:47:09.761708 2026] [:error] [pid 42570:tid 42573] [client 212.30.33.86:45373] [client 212.30.33.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "abYdrcIUXZJLmk_gYCOjnwAAAYA"]
[Sun Mar 15 10:47:10.622641 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.103:38111] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "abYdrvpTEqkVJ0rBEWvN6AAAABA"]
[Sun Mar 15 10:47:12.268457 2026] [:error] [pid 38536:tid 38572] [client 212.30.33.78:28433] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "abYdsPpTEqkVJ0rBEWvN_AAAABM"]
[Sun Mar 15 10:47:13.486397 2026] [:error] [pid 9995:tid 10019] [client 212.30.33.228:41119] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "abYdsQa8xkcaSmgTbwg4tAAAARU"]
[Sun Mar 15 10:47:15.147791 2026] [:error] [pid 38645:tid 38654] [client 212.30.33.94:27053] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "abYdsxFPHtsDUuVrWDa2UQAAAMc"]
[Sun Mar 15 10:47:16.349649 2026] [:error] [pid 9995:tid 10011] [client 212.30.33.57:54905] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "abYdtAa8xkcaSmgTbwg41wAAAQ0"]
[Sun Mar 15 10:47:17.152466 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.92:54889] [client 212.30.33.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID/chosen.php"] [unique_id "abYdtfpTEqkVJ0rBEWvOPgAAABU"]
[Sun Mar 15 10:47:19.247734 2026] [:error] [pid 9995:tid 10022] [client 212.30.33.87:55819] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec.php"] [unique_id "abYdtwa8xkcaSmgTbwg5DwAAARg"]
[Sun Mar 15 10:47:20.069774 2026] [:error] [pid 38541:tid 38633] [client 212.30.33.70:59443] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "abYduHuOpex8jIO0jt4_BAAAAJQ"]
[Sun Mar 15 10:47:20.869682 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.60:31795] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "abYduCknK4c779bcQqHzigAAAU0"]
[Sun Mar 15 10:47:21.683403 2026] [:error] [pid 50986:tid 50999] [client 212.30.33.229:39629] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "abYduSknK4c779bcQqHzmAAAAUo"]
[Sun Mar 15 10:47:32.544250 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.68:32029] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "abYdxPpTEqkVJ0rBEWvO5gAAABE"]
[Sun Mar 15 10:47:33.770863 2026] [:error] [pid 50986:tid 50997] [client 212.30.33.66:53259] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "abYdxSknK4c779bcQqH0UgAAAUg"]
[Sun Mar 15 10:47:35.444042 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.61:46187] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "abYdxxFPHtsDUuVrWDa3DwAAAMo"]
[Sun Mar 15 10:47:36.265309 2026] [:error] [pid 50986:tid 50998] [client 212.30.33.66:43275] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID/simi.php"] [unique_id "abYdyCknK4c779bcQqH0iAAAAUk"]
[Sun Mar 15 10:47:38.382392 2026] [:error] [pid 42570:tid 42595] [client 212.30.33.75:37171] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "abYdysIUXZJLmk_gYCOlUQAAAZY"]
[Sun Mar 15 10:47:40.000311 2026] [:error] [pid 38540:tid 38589] [client 212.30.33.95:43919] [client 212.30.33.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.30.33.95, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "abYdy18bnHsJ1dE90bIpJwAAAEM"]
[Sun Mar 15 10:47:40.837306 2026] [:error] [pid 38540:tid 38596] [client 212.30.33.95:43919] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "abYdzF8bnHsJ1dE90bIpMQAAAEo"]
[Sun Mar 15 10:47:41.668118 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.100:35181] [client 212.30.33.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "abYdzXuOpex8jIO0jt5AAgAAAJI"]
[Sun Mar 15 10:47:42.469420 2026] [:error] [pid 38540:tid 38600] [client 212.30.33.72:30155] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "abYdzl8bnHsJ1dE90bIpPgAAAE4"]
[Sun Mar 15 10:47:45.385444 2026] [:error] [pid 38536:tid 38574] [client 212.30.33.84:62219] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "abYd0fpTEqkVJ0rBEWvPaQAAABU"]
[Sun Mar 15 10:47:46.593756 2026] [:error] [pid 38540:tid 38587] [client 212.30.33.75:58489] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "abYd0l8bnHsJ1dE90bIpZQAAAEE"]
[Sun Mar 15 10:47:50.275881 2026] [:error] [pid 9995:tid 10008] [client 212.30.33.97:31565] [client 212.30.33.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-theme-control-cron.php"] [unique_id "abYd1ga8xkcaSmgTbwg6hQAAAQo"]
[Sun Mar 15 10:47:51.519932 2026] [:error] [pid 38536:tid 38564] [client 212.30.33.90:55075] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "abYd1_pTEqkVJ0rBEWvPrAAAAAs"]
[Sun Mar 15 10:47:53.193505 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.68:31571] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-oembed-path.php"] [unique_id "abYd2RFPHtsDUuVrWDa37wAAAMU"]
[Sun Mar 15 10:47:54.863128 2026] [:error] [pid 38540:tid 38593] [client 212.30.33.225:47045] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/11.php"] [unique_id "abYd2l8bnHsJ1dE90bIptQAAAEc"]
[Sun Mar 15 10:48:00.698300 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.87:48129] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.tag.apetag-float.php"] [unique_id "abYd4CknK4c779bcQqH1rgAAAU8"]
[Sun Mar 15 10:48:03.242332 2026] [proxy_fcgi:error] [pid 50986:tid 51008] [client 212.30.33.62:50455] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:48:04.077283 2026] [:error] [pid 50986:tid 51004] [client 212.30.33.62:50455] [client 212.30.33.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "abYd5CknK4c779bcQqH15AAAAU8"]
[Sun Mar 15 10:48:05.718345 2026] [:error] [pid 38645:tid 38652] [client 212.30.33.65:39675] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-block-method.php"] [unique_id "abYd5RFPHtsDUuVrWDa4iwAAAMU"]
[Sun Mar 15 10:48:07.394792 2026] [:error] [pid 38541:tid 38614] [client 212.30.33.228:56881] [client 212.30.33.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/search/class-wp-rest-search-handlers.php"] [unique_id "abYd53uOpex8jIO0jt5BKQAAAIE"]
[Sun Mar 15 10:48:08.628025 2026] [:error] [pid 50986:tid 51008] [client 212.30.33.84:34697] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/edit.php"] [unique_id "abYd6CknK4c779bcQqH2DwAAAVM"]
[Sun Mar 15 10:48:11.104283 2026] [:error] [pid 50986:tid 51010] [client 212.30.33.179:28499] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/zoomab.php"] [unique_id "abYd6yknK4c779bcQqH2JQAAAVU"]
[Sun Mar 15 10:48:11.928640 2026] [proxy_fcgi:error] [pid 38541:tid 38620] [client 212.30.33.77:65047] AH01071: Got error 'Primary script unknown'
[Sun Mar 15 10:48:14.001095 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.77:65047] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mrs.php"] [unique_id "abYd7nuOpex8jIO0jt5BXQAAAJU"]
[Sun Mar 15 10:48:14.797073 2026] [:error] [pid 38540:tid 38596] [client 212.30.33.83:49497] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/abc.php"] [unique_id "abYd7l8bnHsJ1dE90bIq1QAAAEo"]
[Sun Mar 15 10:48:16.087318 2026] [:error] [pid 38540:tid 38607] [client 212.30.33.63:62695] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-date-query-cookie.php"] [unique_id "abYd8F8bnHsJ1dE90bIq3wAAAFU"]
[Sun Mar 15 10:48:18.165025 2026] [:error] [pid 38645:tid 38649] [client 212.30.33.56:59207] [client 212.30.33.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/pp.php"] [unique_id "abYd8hFPHtsDUuVrWDa5IwAAAMI"]
[Sun Mar 15 10:48:20.209575 2026] [:error] [pid 38540:tid 38591] [client 212.30.33.229:29179] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-mail.php"] [unique_id "abYd9F8bnHsJ1dE90bIrIgAAAEU"]
[Sun Mar 15 10:48:21.861439 2026] [:error] [pid 38645:tid 38667] [client 212.30.33.101:62817] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "abYd9RFPHtsDUuVrWDa5VwAAANQ"]
[Sun Mar 15 10:48:23.072310 2026] [:error] [pid 38645:tid 38655] [client 212.30.33.69:50165] [client 212.30.33.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "abYd9xFPHtsDUuVrWDa5bwAAAMg"]
[Sun Mar 15 10:48:24.280394 2026] [:error] [pid 38540:tid 38588] [client 212.30.33.85:38369] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "abYd-F8bnHsJ1dE90bIrSQAAAEI"]
[Sun Mar 15 10:48:25.509847 2026] [:error] [pid 42570:tid 42581] [client 212.30.33.93:47553] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "abYd-cIUXZJLmk_gYCOo6AAAAYg"]
[Sun Mar 15 10:48:26.818127 2026] [:error] [pid 38536:tid 38570] [client 212.30.33.51:29481] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "abYd-vpTEqkVJ0rBEWvRfgAAABE"]
[Sun Mar 15 10:48:28.481251 2026] [:error] [pid 38536:tid 38576] [client 212.30.33.213:33697] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "abYd_PpTEqkVJ0rBEWvRiQAAABc"]
[Sun Mar 15 10:48:29.691003 2026] [:error] [pid 38536:tid 38554] [client 212.30.33.60:58263] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "abYd_fpTEqkVJ0rBEWvRmAAAAAE"]
[Sun Mar 15 10:48:30.993518 2026] [:error] [pid 42570:tid 42584] [client 212.30.33.179:23017] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "abYd_sIUXZJLmk_gYCOpUAAAAYs"]
[Sun Mar 15 10:48:33.041430 2026] [:error] [pid 50986:tid 51002] [client 212.30.33.51:25693] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "abYeASknK4c779bcQqH3CgAAAU0"]
[Sun Mar 15 10:48:34.675157 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.88:33417] [client 212.30.33.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "abYeAsIUXZJLmk_gYCOpnQAAAYk"]
[Sun Mar 15 10:48:36.941163 2026] [:error] [pid 38540:tid 38598] [client 212.30.33.103:51157] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "abYeBF8bnHsJ1dE90bIr6wAAAEw"]
[Sun Mar 15 10:48:39.825308 2026] [:error] [pid 38645:tid 38664] [client 212.30.33.85:43669] [client 212.30.33.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "abYeBxFPHtsDUuVrWDa6YwAAANE"]
[Sun Mar 15 10:48:41.477409 2026] [:error] [pid 38540:tid 38600] [client 212.30.33.164:44459] [client 212.30.33.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "abYeCV8bnHsJ1dE90bIsNgAAAE4"]
[Sun Mar 15 10:48:43.129422 2026] [:error] [pid 38541:tid 38615] [client 212.30.33.213:35585] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "abYeC3uOpex8jIO0jt5DDQAAAII"]
[Sun Mar 15 10:48:45.714267 2026] [:error] [pid 42570:tid 42577] [client 212.30.33.101:52997] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "abYeDcIUXZJLmk_gYCOqLwAAAYQ"]
[Sun Mar 15 10:48:46.567050 2026] [:error] [pid 50986:tid 51007] [client 212.30.33.89:25491] [client 212.30.33.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "abYeDiknK4c779bcQqH3vgAAAVI"]
[Sun Mar 15 10:48:47.367370 2026] [:error] [pid 42570:tid 42574] [client 212.30.33.63:55339] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "abYeD8IUXZJLmk_gYCOqTAAAAYE"]
[Sun Mar 15 10:48:48.172737 2026] [:error] [pid 38541:tid 38619] [client 212.30.33.179:23087] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "abYeEHuOpex8jIO0jt5DbAAAAIY"]
[Sun Mar 15 10:48:50.219462 2026] [:error] [pid 38645:tid 38653] [client 212.30.33.60:20657] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "abYeEhFPHtsDUuVrWDa68QAAAMY"]
[Sun Mar 15 10:48:52.274271 2026] [:error] [pid 38536:tid 38569] [client 212.30.33.74:46499] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "abYeFPpTEqkVJ0rBEWvSiAAAABA"]
[Sun Mar 15 10:48:53.913988 2026] [:error] [pid 9995:tid 10013] [client 212.30.33.213:23853] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "abYeFQa8xkcaSmgTbwg9JAAAAQ8"]
[Sun Mar 15 10:48:54.723834 2026] [:error] [pid 42570:tid 42577] [client 212.30.33.72:32533] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "abYeFsIUXZJLmk_gYCOqzQAAAYQ"]
[Sun Mar 15 10:48:55.530284 2026] [:error] [pid 38645:tid 38669] [client 212.30.33.166:58383] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "abYeFxFPHtsDUuVrWDa7cAAAANY"]
[Sun Mar 15 10:48:58.430415 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.64:41475] [client 212.30.33.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "abYeGiknK4c779bcQqH4iAAAAUw"]
[Sun Mar 15 10:48:59.243276 2026] [:error] [pid 38645:tid 38660] [client 212.30.33.68:23705] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "abYeGxFPHtsDUuVrWDa7lgAAAM0"]
[Sun Mar 15 10:49:00.057319 2026] [:error] [pid 38645:tid 38656] [client 212.30.33.84:55993] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "abYeHBFPHtsDUuVrWDa7pQAAAMk"]
[Sun Mar 15 10:49:02.600750 2026] [:error] [pid 38536:tid 38558] [client 212.30.33.68:58127] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "abYeHvpTEqkVJ0rBEWvS9gAAAAU"]
[Sun Mar 15 10:49:03.405211 2026] [:error] [pid 50986:tid 51000] [client 212.30.33.60:55701] [client 212.30.33.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "abYeHyknK4c779bcQqH40AAAAUs"]
[Sun Mar 15 10:49:05.224881 2026] [:error] [pid 38541:tid 38623] [client 212.30.33.66:54811] [client 212.30.33.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "abYeIXuOpex8jIO0jt5EkQAAAIo"]
[Sun Mar 15 10:49:06.060088 2026] [:error] [pid 38540:tid 38589] [client 212.30.33.101:51365] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/firewall.php"] [unique_id "abYeIl8bnHsJ1dE90bItXAAAAEM"]
[Sun Mar 15 10:49:07.310168 2026] [:error] [pid 50986:tid 50988] [client 212.30.33.81:55323] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID/rk2.php"] [unique_id "abYeIyknK4c779bcQqH5OgAAAUA"]
[Sun Mar 15 10:49:08.114399 2026] [:error] [pid 38536:tid 38576] [client 212.30.33.166:44869] [client 212.30.33.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "abYeJPpTEqkVJ0rBEWvTMwAAABc"]
[Sun Mar 15 10:49:08.962856 2026] [:error] [pid 42570:tid 42585] [client 212.30.33.78:43413] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "abYeJMIUXZJLmk_gYCOrmAAAAYw"]
[Sun Mar 15 10:49:13.220165 2026] [:error] [pid 38645:tid 38663] [client 212.30.33.179:55311] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "abYeKRFPHtsDUuVrWDa8QQAAANA"]
[Sun Mar 15 10:49:14.447322 2026] [:error] [pid 50986:tid 50994] [client 212.30.33.51:65181] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "abYeKiknK4c779bcQqH5qAAAAUY"]
[Sun Mar 15 10:49:16.070434 2026] [:error] [pid 38536:tid 38567] [client 212.30.33.225:29671] [client 212.30.33.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "abYeLPpTEqkVJ0rBEWvTsQAAAA4"]
[Sun Mar 15 10:49:19.001222 2026] [:error] [pid 38541:tid 38622] [client 212.30.33.75:41805] [client 212.30.33.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "abYeLnuOpex8jIO0jt5FagAAAIk"]
[Sun Mar 15 10:49:20.214661 2026] [:error] [pid 38645:tid 38657] [client 212.30.33.67:63013] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ln/class-wp-widddget-pages.php"] [unique_id "abYeMBFPHtsDUuVrWDa8oQAAAMo"]
[Sun Mar 15 10:49:22.252382 2026] [:error] [pid 38645:tid 38663] [client 212.30.33.229:46145] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "abYeMhFPHtsDUuVrWDa8uAAAANA"]
[Sun Mar 15 10:49:25.515548 2026] [:error] [pid 38536:tid 38568] [client 212.30.33.79:58731] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "abYeNfpTEqkVJ0rBEWvUTwAAAA8"]
[Sun Mar 15 10:49:28.045379 2026] [:error] [pid 50986:tid 51009] [client 212.30.33.93:37377] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id/wp-work.php"] [unique_id "abYeOCknK4c779bcQqH6bgAAAVQ"]
[Sun Mar 15 10:49:28.849894 2026] [:error] [pid 50986:tid 50999] [client 212.30.33.77:57323] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "abYeOCknK4c779bcQqH6dgAAAUo"]
[Sun Mar 15 10:49:31.824963 2026] [:error] [pid 50986:tid 51013] [client 212.30.33.83:36433] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "abYeOyknK4c779bcQqH6pgAAAVg"]
[Sun Mar 15 10:49:32.627271 2026] [:error] [pid 50986:tid 51008] [client 212.30.33.81:27741] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "abYePCknK4c779bcQqH6tAAAAVM"]
[Sun Mar 15 10:49:34.273360 2026] [:error] [pid 9995:tid 10003] [client 212.30.33.71:45579] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "abYePga8xkcaSmgTbwg-bQAAAQU"]
[Sun Mar 15 10:49:35.529078 2026] [:error] [pid 38541:tid 38613] [client 212.30.33.77:61765] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "abYeP3uOpex8jIO0jt5GewAAAIA"]
[Sun Mar 15 10:49:36.354004 2026] [:error] [pid 9995:tid 10012] [client 212.30.33.83:41591] [client 212.30.33.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "abYeQAa8xkcaSmgTbwg-jAAAAQ4"]
[Sun Mar 15 10:49:39.670536 2026] [:error] [pid 38540:tid 38605] [client 212.30.33.103:33581] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "abYeQ18bnHsJ1dE90bIvUgAAAFM"]
[Sun Mar 15 10:49:41.772369 2026] [:error] [pid 9995:tid 10014] [client 212.30.33.70:25349] [client 212.30.33.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ln/class-wp-translations-library.php"] [unique_id "abYeRQa8xkcaSmgTbwg-2QAAARA"]
[Sun Mar 15 10:49:44.447224 2026] [:error] [pid 42570:tid 42587] [client 212.30.33.93:35713] [client 212.30.33.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ln/class-wp-translations-interface.php"] [unique_id "abYeSMIUXZJLmk_gYCOtwAAAAY4"]
[Sun Mar 15 10:49:46.504925 2026] [:error] [pid 38645:tid 38659] [client 212.30.33.71:49041] [client 212.30.33.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "abYeShFPHtsDUuVrWDa-UgAAAMw"]
[Sun Mar 15 10:49:48.121047 2026] [:error] [pid 38536:tid 38573] [client 212.30.33.98:20571] [client 212.30.33.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "abYeTPpTEqkVJ0rBEWvVJAAAABQ"]
[Sun Mar 15 10:49:49.337181 2026] [:error] [pid 38541:tid 38634] [client 212.30.33.67:31303] [client 212.30.33.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "abYeTXuOpex8jIO0jt5HLQAAAJU"]
[Sun Mar 15 10:49:50.135731 2026] [:error] [pid 42570:tid 42582] [client 212.30.33.94:40113] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "abYeTsIUXZJLmk_gYCOuMAAAAYk"]
[Sun Mar 15 10:49:51.400290 2026] [:error] [pid 9995:tid 10019] [client 212.30.33.99:56451] [client 212.30.33.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "abYeTwa8xkcaSmgTbwg_OgAAARU"]
[Sun Mar 15 10:49:52.199356 2026] [:error] [pid 50986:tid 51001] [client 212.30.33.103:34123] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "abYeUCknK4c779bcQqH7wwAAAUw"]
[Sun Mar 15 10:49:53.029382 2026] [:error] [pid 38536:tid 38565] [client 212.30.33.229:25119] [client 212.30.33.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "abYeUfpTEqkVJ0rBEWvVRQAAAAw"]
[Sun Mar 15 10:49:55.533808 2026] [:error] [pid 38540:tid 38602] [client 212.30.33.61:64731] [client 212.30.33.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "abYeU18bnHsJ1dE90bIwJwAAAFA"]
[Sun Mar 15 10:49:57.625161 2026] [:error] [pid 42570:tid 42576] [client 212.30.33.65:50357] [client 212.30.33.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "abYeVcIUXZJLmk_gYCOvAgAAAYM"]
[Sun Mar 15 10:49:59.666155 2026] [:error] [pid 38541:tid 38637] [client 212.30.33.77:24173] [client 212.30.33.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID/module.audio-video.riff-set.php"] [unique_id "abYeV3uOpex8jIO0jt5HxQAAAJg"]
[Sun Mar 15 10:50:00.911733 2026] [:error] [pid 38540:tid 38601] [client 212.30.33.213:21633] [client 212.30.33.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "abYeWF8bnHsJ1dE90bIwZAAAAE8"]
[Sun Mar 15 10:50:01.737197 2026] [:error] [pid 38536:tid 38555] [client 212.30.33.68:60229] [client 212.30.33.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "abYeWfpTEqkVJ0rBEWvViwAAAAI"]
[Sun Mar 15 10:50:04.211723 2026] [:error] [pid 42570:tid 42594] [client 212.30.33.94:53923] [client 212.30.33.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "abYeXMIUXZJLmk_gYCOvYAAAAZU"]
[Sun Mar 15 10:50:06.700451 2026] [:error] [pid 38541:tid 38629] [client 212.30.33.72:32095] [client 212.30.33.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID/module.audio-license.php"] [unique_id "abYeXnuOpex8jIO0jt5IMwAAAJA"]
[Sun Mar 15 10:50:08.314007 2026] [:error] [pid 9995:tid 10001] [client 212.30.33.87:44281] [client 212.30.33.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "abYeYAa8xkcaSmgTbwg_-wAAAQM"]
[Sun Mar 15 10:50:09.119639 2026] [:error] [pid 38540:tid 38603] [client 212.30.33.51:31151] [client 212.30.33.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "abYeYV8bnHsJ1dE90bIwtgAAAFE"]
[Sun Mar 15 10:50:10.344374 2026] [:error] [pid 38540:tid 38586] [client 212.30.33.73:27543] [client 212.30.33.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "abYeYl8bnHsJ1dE90bIw1QAAAEA"]
[Sun Mar 15 10:50:11.187771 2026] [:error] [pid 38541:tid 38630] [client 212.30.33.63:47501] [client 212.30.33.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "abYeY3uOpex8jIO0jt5IYQAAAJE"]
[Sun Mar 15 10:50:12.000289 2026] [:error] [pid 38541:tid 38616] [client 212.30.33.101:23241] [client 212.30.33.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/admin.php"] [unique_id "abYeY3uOpex8jIO0jt5IcwAAAIM"]
[Sun Mar 15 10:50:13.211401 2026] [:error] [pid 38540:tid 38608] [client 212.30.33.74:36943] [client 212.30.33.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "abYeZV8bnHsJ1dE90bIw7wAAAFY"]
[Sun Mar 15 10:50:14.034957 2026] [:error] [pid 38540:tid 38599] [client 212.30.33.57:30009] [client 212.30.33.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "abYeZl8bnHsJ1dE90bIw9wAAAE0"]
[Sun Mar 15 10:50:16.119955 2026] [:error] [pid 38541:tid 38631] [client 212.30.33.91:45631] [client 212.30.33.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/input.php"] [unique_id "abYeaHuOpex8jIO0jt5IzgAAAJI"]
[Sun Mar 15 10:50:17.363500 2026] [:error] [pid 50986:tid 51003] [client 212.30.33.82:53823] [client 212.30.33.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "abYeaSknK4c779bcQqH9VAAAAU4"]
[Sun Mar 15 10:50:18.169176 2026] [:error] [pid 38540:tid 38607] [client 212.30.33.95:60703] [client 212.30.33.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "abYeal8bnHsJ1dE90bIxLwAAAFU"]
[Sun Mar 15 10:50:18.966401 2026] [:error] [pid 38536:tid 38557] [client 212.30.33.90:44463] [client 212.30.33.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/about.php"] [unique_id "abYeavpTEqkVJ0rBEWvWXQAAAAQ"]
[Sun Mar 15 10:50:19.775624 2026] [:error] [pid 42570:tid 42573] [client 212.30.33.103:57577] [client 212.30.33.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "abYea8IUXZJLmk_gYCOwZQAAAYA"]
[Sun Mar 15 10:50:21.442884 2026] [:error] [pid 38536:tid 38575] [client 212.30.33.81:62667] [client 212.30.33.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-load.php"] [unique_id "abYebfpTEqkVJ0rBEWvWdQAAABY"]
[Sun Mar 15 10:50:22.237745 2026] [:error] [pid 38541:tid 38617] [client 212.30.33.78:64031] [client 212.30.33.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "abYebnuOpex8jIO0jt5JAgAAAIQ"]
[Sun Mar 15 10:50:23.846295 2026] [:error] [pid 9995:tid 10005] [client 212.30.33.52:34397] [client 212.30.33.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/wp-load.php"] [unique_id "abYebwa8xkcaSmgTbwhAtAAAAQc"]
[Sun Mar 15 10:50:24.647592 2026] [:error] [pid 42570:tid 42593] [client 212.30.33.179:43309] [client 212.30.33.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages-react.php"] [unique_id "abYecMIUXZJLmk_gYCOw6QAAAZQ"]
[Sun Mar 15 10:50:26.324468 2026] [:error] [pid 42570:tid 42596] [client 212.30.33.84:30885] [client 212.30.33.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/font-editor.php"] [unique_id "abYecsIUXZJLmk_gYCOxDwAAAZc"]
[Sun Mar 15 10:50:27.132321 2026] [:error] [pid 42570:tid 42584] [client 212.30.33.79:59071] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "abYec8IUXZJLmk_gYCOxLAAAAYs"]
[Sun Mar 15 10:50:27.958231 2026] [:error] [pid 42570:tid 42575] [client 212.30.33.79:59071] [client 212.30.33.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "abYec8IUXZJLmk_gYCOxSQAAAYI"]
[Sun Mar 15 10:50:37.025122 2026] [autoindex:error] [pid 9995:tid 9998] [client 212.30.33.73:37589] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Mar 15 13:01:40.300164 2026] [:error] [pid 50986:tid 51000] [client 125.75.66.97:46577] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abY9NCknK4c779bcQqE-6wAAAUs"]
[Sun Mar 15 16:13:18.641513 2026] [:error] [pid 42570:tid 42589] [client 104.234.53.72:42855] [client 104.234.53.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.72, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abZqHsIUXZJLmk_gYCPtSwAAAZA"]
[Sun Mar 15 16:21:19.422805 2026] [:error] [pid 50986:tid 51001] [client 101.33.80.42:48892] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abZr_yknK4c779bcQqF5RAAAAUw"]
[Sun Mar 15 17:19:15.812207 2026] [:error] [pid 45974:tid 45993] [client 152.59.47.149:61482] [client 152.59.47.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.47.149, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abZ5kxWn4R6u72SegeiuaQAAAhE"]
[Sun Mar 15 19:15:37.981176 2026] [:error] [pid 45974:tid 45986] [client 158.158.99.19:15326] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file11.php"] [unique_id "abaU2RWn4R6u72SegejC8QAAAgo"]
[Sun Mar 15 19:15:38.663516 2026] [:error] [pid 38536:tid 38568] [client 158.158.99.19:45179] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file11.php"] [unique_id "abaU2vpTEqkVJ0rBEWsIdgAAAA8"]
[Sun Mar 15 19:15:39.298760 2026] [:error] [pid 38541:tid 38619] [client 158.158.99.19:15353] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file11.php"] [unique_id "abaU23uOpex8jIO0jt6RRwAAAIY"]
[Sun Mar 15 19:15:39.866928 2026] [:error] [pid 38541:tid 38637] [client 158.158.99.19:6523] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file11.php"] [unique_id "abaU23uOpex8jIO0jt6RSAAAAJg"]
[Sun Mar 15 19:15:40.370301 2026] [:error] [pid 50986:tid 50996] [client 158.158.99.19:15315] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file12.php"] [unique_id "abaU3CknK4c779bcQqHBqwAAAUc"]
[Sun Mar 15 19:15:40.899002 2026] [:error] [pid 38541:tid 38618] [client 158.158.99.19:15656] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file12.php"] [unique_id "abaU3HuOpex8jIO0jt6RTQAAAIU"]
[Sun Mar 15 19:15:41.415991 2026] [:error] [pid 38536:tid 38561] [client 158.158.99.19:6520] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file12.php"] [unique_id "abaU3fpTEqkVJ0rBEWsIdwAAAAg"]
[Sun Mar 15 19:15:41.925817 2026] [:error] [pid 50986:tid 50994] [client 158.158.99.19:7711] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file12.php"] [unique_id "abaU3SknK4c779bcQqHBrwAAAUY"]
[Sun Mar 15 19:15:42.531317 2026] [:error] [pid 45974:tid 45982] [client 158.158.99.19:15657] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "abaU3hWn4R6u72SegejDAAAAAgY"]
[Sun Mar 15 19:15:43.101324 2026] [:error] [pid 38645:tid 38659] [client 158.158.99.19:41250] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "abaU3xFPHtsDUuVrWDaVdwAAAMw"]
[Sun Mar 15 19:15:43.835580 2026] [:error] [pid 45801:tid 45822] [client 158.158.99.19:6520] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "abaU34aKHL9CTKoVzTA_PgAAAdM"]
[Sun Mar 15 19:15:44.446701 2026] [:error] [pid 45801:tid 45823] [client 158.158.99.19:22826] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file13.php"] [unique_id "abaU4IaKHL9CTKoVzTA_QAAAAdQ"]
[Sun Mar 15 19:15:44.933806 2026] [:error] [pid 42570:tid 42586] [client 158.158.99.19:19900] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file14.php"] [unique_id "abaU4MIUXZJLmk_gYCMHXAAAAY0"]
[Sun Mar 15 19:15:45.459089 2026] [:error] [pid 42570:tid 42576] [client 158.158.99.19:22844] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file14.php"] [unique_id "abaU4cIUXZJLmk_gYCMHXwAAAYM"]
[Sun Mar 15 19:15:45.947022 2026] [:error] [pid 42570:tid 42579] [client 158.158.99.19:11021] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file14.php"] [unique_id "abaU4cIUXZJLmk_gYCMHYQAAAYY"]
[Sun Mar 15 19:15:46.510045 2026] [:error] [pid 45801:tid 45826] [client 158.158.99.19:2379] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file14.php"] [unique_id "abaU4oaKHL9CTKoVzTA_RgAAAdc"]
[Sun Mar 15 19:15:46.995672 2026] [:error] [pid 38645:tid 38648] [client 158.158.99.19:6623] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file15.php"] [unique_id "abaU4hFPHtsDUuVrWDaVfAAAAME"]
[Sun Mar 15 19:15:47.498517 2026] [:error] [pid 50986:tid 51001] [client 158.158.99.19:2425] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file15.php"] [unique_id "abaU4yknK4c779bcQqHBtwAAAUw"]
[Sun Mar 15 19:15:47.999687 2026] [:error] [pid 45801:tid 45824] [client 158.158.99.19:42762] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file15.php"] [unique_id "abaU44aKHL9CTKoVzTA_SgAAAdU"]
[Sun Mar 15 19:15:48.589868 2026] [:error] [pid 38645:tid 38655] [client 158.158.99.19:6937] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file15.php"] [unique_id "abaU5BFPHtsDUuVrWDaVfQAAAMg"]
[Sun Mar 15 19:15:49.150164 2026] [:error] [pid 50986:tid 51009] [client 158.158.99.19:6645] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file16.php"] [unique_id "abaU5SknK4c779bcQqHBugAAAVQ"]
[Sun Mar 15 19:15:49.685132 2026] [:error] [pid 45801:tid 45804] [client 158.158.99.19:42797] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file16.php"] [unique_id "abaU5YaKHL9CTKoVzTA_UQAAAcE"]
[Sun Mar 15 19:15:50.211141 2026] [:error] [pid 45801:tid 45814] [client 158.158.99.19:7711] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file16.php"] [unique_id "abaU5oaKHL9CTKoVzTA_VQAAAcs"]
[Sun Mar 15 19:15:50.909991 2026] [:error] [pid 50986:tid 51003] [client 158.158.99.19:42807] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file16.php"] [unique_id "abaU5iknK4c779bcQqHBvAAAAU4"]
[Sun Mar 15 19:15:51.485103 2026] [:error] [pid 45801:tid 45824] [client 158.158.99.19:61910] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "abaU54aKHL9CTKoVzTA_WQAAAdU"]
[Sun Mar 15 19:15:51.969465 2026] [:error] [pid 9995:tid 10001] [client 158.158.99.19:41237] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "abaU5wa8xkcaSmgTbwhxqgAAAQM"]
[Sun Mar 15 19:15:52.544958 2026] [:error] [pid 38645:tid 38653] [client 158.158.99.19:6931] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "abaU6BFPHtsDUuVrWDaVhAAAAMY"]
[Sun Mar 15 19:15:53.080139 2026] [:error] [pid 45974:tid 45999] [client 158.158.99.19:23265] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file17.php"] [unique_id "abaU6RWn4R6u72SegejDGQAAAhc"]
[Sun Mar 15 19:15:53.592918 2026] [:error] [pid 38540:tid 38598] [client 158.158.99.19:19876] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "abaU6V8bnHsJ1dE90bJtgwAAAEw"]
[Sun Mar 15 19:15:54.087819 2026] [:error] [pid 50986:tid 50993] [client 158.158.99.19:6946] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "abaU6iknK4c779bcQqHBxQAAAUU"]
[Sun Mar 15 19:15:54.650284 2026] [:error] [pid 38645:tid 38664] [client 158.158.99.19:19843] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "abaU6hFPHtsDUuVrWDaVjgAAANE"]
[Sun Mar 15 19:15:55.140546 2026] [:error] [pid 38645:tid 38649] [client 158.158.99.19:15677] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "abaU6xFPHtsDUuVrWDaVkQAAAMI"]
[Sun Mar 15 19:15:55.667599 2026] [:error] [pid 38645:tid 38658] [client 158.158.99.19:7515] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file19.php"] [unique_id "abaU6xFPHtsDUuVrWDaVkwAAAMs"]
[Sun Mar 15 19:15:56.191199 2026] [:error] [pid 50986:tid 51007] [client 158.158.99.19:15644] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file19.php"] [unique_id "abaU7CknK4c779bcQqHBxwAAAVI"]
[Sun Mar 15 19:15:56.701473 2026] [:error] [pid 38540:tid 38608] [client 158.158.99.19:11018] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file19.php"] [unique_id "abaU7F8bnHsJ1dE90bJthAAAAFY"]
[Sun Mar 15 19:15:57.230552 2026] [:error] [pid 45974:tid 45995] [client 158.158.99.19:41257] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file19.php"] [unique_id "abaU7RWn4R6u72SegejDGgAAAhM"]
[Sun Mar 15 19:15:57.727108 2026] [:error] [pid 45801:tid 45825] [client 158.158.99.19:15647] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file20.php"] [unique_id "abaU7YaKHL9CTKoVzTA_aQAAAdY"]
[Sun Mar 15 19:15:58.334624 2026] [:error] [pid 50986:tid 51010] [client 158.158.99.19:41216] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file20.php"] [unique_id "abaU7iknK4c779bcQqHByAAAAVU"]
[Sun Mar 15 19:15:58.823081 2026] [:error] [pid 45974:tid 45989] [client 158.158.99.19:7530] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file20.php"] [unique_id "abaU7hWn4R6u72SegejDGwAAAg0"]
[Sun Mar 15 19:15:59.480273 2026] [:error] [pid 9995:tid 10021] [client 158.158.99.19:7548] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file20.php"] [unique_id "abaU7wa8xkcaSmgTbwhxsQAAARc"]
[Sun Mar 15 19:15:59.989129 2026] [:error] [pid 45974:tid 45986] [client 158.158.99.19:6936] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "abaU7xWn4R6u72SegejDHgAAAgo"]
[Sun Mar 15 19:16:00.498565 2026] [:error] [pid 38540:tid 38610] [client 158.158.99.19:6943] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "abaU8F8bnHsJ1dE90bJtiAAAAFg"]
[Sun Mar 15 19:16:00.982123 2026] [:error] [pid 42570:tid 42597] [client 158.158.99.19:20635] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "abaU8MIUXZJLmk_gYCMHagAAAZg"]
[Sun Mar 15 19:16:01.531821 2026] [:error] [pid 38645:tid 38671] [client 158.158.99.19:6604] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "abaU8RFPHtsDUuVrWDaVowAAANg"]
[Sun Mar 15 19:16:02.281207 2026] [:error] [pid 9995:tid 10012] [client 158.158.99.19:50198] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file22.php"] [unique_id "abaU8ga8xkcaSmgTbwhxtQAAAQ4"]
[Sun Mar 15 19:16:02.897747 2026] [:error] [pid 9995:tid 10017] [client 158.158.99.19:19875] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file22.php"] [unique_id "abaU8ga8xkcaSmgTbwhxuQAAARM"]
[Sun Mar 15 19:16:03.497636 2026] [:error] [pid 38541:tid 38632] [client 158.158.99.19:19898] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file22.php"] [unique_id "abaU83uOpex8jIO0jt6RWAAAAJM"]
[Sun Mar 15 19:16:04.104327 2026] [:error] [pid 38536:tid 38554] [client 158.158.99.19:7539] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file22.php"] [unique_id "abaU9PpTEqkVJ0rBEWsIewAAAAE"]
[Sun Mar 15 19:16:04.640972 2026] [:error] [pid 38536:tid 38575] [client 158.158.99.19:11034] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file23.php"] [unique_id "abaU9PpTEqkVJ0rBEWsIfQAAABY"]
[Sun Mar 15 19:16:05.248561 2026] [:error] [pid 9995:tid 10020] [client 158.158.99.19:7491] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file23.php"] [unique_id "abaU9Qa8xkcaSmgTbwhxwAAAARY"]
[Sun Mar 15 19:16:05.798287 2026] [:error] [pid 9995:tid 10005] [client 158.158.99.19:19857] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file23.php"] [unique_id "abaU9Qa8xkcaSmgTbwhxwgAAAQc"]
[Sun Mar 15 19:16:06.715232 2026] [:error] [pid 38540:tid 38587] [client 158.158.99.19:6503] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file23.php"] [unique_id "abaU9l8bnHsJ1dE90bJtjQAAAEE"]
[Sun Mar 15 19:16:07.247330 2026] [:error] [pid 9995:tid 10008] [client 158.158.99.19:42791] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file24.php"] [unique_id "abaU9wa8xkcaSmgTbwhxxgAAAQo"]
[Sun Mar 15 19:16:07.812597 2026] [:error] [pid 38541:tid 38621] [client 158.158.99.19:11045] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file24.php"] [unique_id "abaU93uOpex8jIO0jt6RWwAAAIg"]
[Sun Mar 15 19:16:08.323013 2026] [:error] [pid 50986:tid 51002] [client 158.158.99.19:41256] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file24.php"] [unique_id "abaU-CknK4c779bcQqHB0AAAAU0"]
[Sun Mar 15 19:16:08.987761 2026] [:error] [pid 38536:tid 38559] [client 158.158.99.19:6941] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file24.php"] [unique_id "abaU-PpTEqkVJ0rBEWsIfgAAAAY"]
[Sun Mar 15 19:16:09.613595 2026] [:error] [pid 50986:tid 50988] [client 158.158.99.19:11872] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file25.php"] [unique_id "abaU-SknK4c779bcQqHB1AAAAUA"]
[Sun Mar 15 19:16:10.185786 2026] [:error] [pid 45801:tid 45809] [client 158.158.99.19:35241] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file25.php"] [unique_id "abaU-oaKHL9CTKoVzTA_iwAAAcY"]
[Sun Mar 15 19:16:10.810603 2026] [:error] [pid 42570:tid 42586] [client 158.158.99.19:6654] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file25.php"] [unique_id "abaU-sIUXZJLmk_gYCMHcQAAAY0"]
[Sun Mar 15 19:16:11.576092 2026] [:error] [pid 45801:tid 45820] [client 158.158.99.19:2403] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file25.php"] [unique_id "abaU-4aKHL9CTKoVzTA_kQAAAdE"]
[Sun Mar 15 19:16:12.293161 2026] [:error] [pid 42570:tid 42576] [client 158.158.99.19:19853] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file26.php"] [unique_id "abaU_MIUXZJLmk_gYCMHcwAAAYM"]
[Sun Mar 15 19:16:12.840123 2026] [:error] [pid 45801:tid 45826] [client 158.158.99.19:61947] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file26.php"] [unique_id "abaU_IaKHL9CTKoVzTA_lgAAAdc"]
[Sun Mar 15 19:16:13.570858 2026] [:error] [pid 50986:tid 51000] [client 158.158.99.19:6251] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file26.php"] [unique_id "abaU_SknK4c779bcQqHB3wAAAUs"]
[Sun Mar 15 19:16:14.155808 2026] [:error] [pid 50986:tid 51007] [client 158.158.99.19:6201] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file26.php"] [unique_id "abaU_iknK4c779bcQqHB4AAAAVI"]
[Sun Mar 15 19:16:14.812852 2026] [:error] [pid 9995:tid 10010] [client 158.158.99.19:42757] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file27.php"] [unique_id "abaU_ga8xkcaSmgTbwhxyAAAAQw"]
[Sun Mar 15 19:16:15.483696 2026] [:error] [pid 45801:tid 45813] [client 158.158.99.19:41221] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file27.php"] [unique_id "abaU_4aKHL9CTKoVzTA_ngAAAco"]
[Sun Mar 15 19:16:16.142801 2026] [:error] [pid 38540:tid 38601] [client 158.158.99.19:6211] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file27.php"] [unique_id "abaVAF8bnHsJ1dE90bJtkAAAAE8"]
[Sun Mar 15 19:16:16.741854 2026] [:error] [pid 9995:tid 10020] [client 158.158.99.19:50178] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file27.php"] [unique_id "abaVAAa8xkcaSmgTbwhx0QAAARY"]
[Sun Mar 15 19:16:17.328726 2026] [:error] [pid 42570:tid 42594] [client 158.158.99.19:23632] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file28.php"] [unique_id "abaVAcIUXZJLmk_gYCMHeAAAAZU"]
[Sun Mar 15 19:16:18.066611 2026] [:error] [pid 45801:tid 45814] [client 158.158.99.19:2392] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file28.php"] [unique_id "abaVAoaKHL9CTKoVzTA_qwAAAcs"]
[Sun Mar 15 19:16:18.826083 2026] [:error] [pid 38540:tid 38600] [client 158.158.99.19:61942] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file28.php"] [unique_id "abaVAl8bnHsJ1dE90bJtkgAAAE4"]
[Sun Mar 15 19:16:19.674686 2026] [:error] [pid 42570:tid 42588] [client 158.158.99.19:23665] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file28.php"] [unique_id "abaVA8IUXZJLmk_gYCMHfAAAAY8"]
[Sun Mar 15 19:16:20.260921 2026] [:error] [pid 45801:tid 45827] [client 158.158.99.19:7522] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file29.php"] [unique_id "abaVBIaKHL9CTKoVzTA_tQAAAdg"]
[Sun Mar 15 19:16:20.845634 2026] [:error] [pid 50986:tid 50991] [client 158.158.99.19:25009] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file29.php"] [unique_id "abaVBCknK4c779bcQqHB4wAAAUM"]
[Sun Mar 15 19:16:21.389712 2026] [:error] [pid 38536:tid 38568] [client 158.158.99.19:15676] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file29.php"] [unique_id "abaVBfpTEqkVJ0rBEWsIggAAAA8"]
[Sun Mar 15 19:16:22.069487 2026] [:error] [pid 38541:tid 38634] [client 158.158.99.19:11066] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file29.php"] [unique_id "abaVBnuOpex8jIO0jt6RZgAAAJU"]
[Sun Mar 15 19:16:22.620664 2026] [:error] [pid 50986:tid 51005] [client 158.158.99.19:14547] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "abaVBiknK4c779bcQqHB6AAAAVA"]
[Sun Mar 15 19:16:23.305347 2026] [:error] [pid 45801:tid 45824] [client 158.158.99.19:7514] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "abaVB4aKHL9CTKoVzTA_vgAAAdU"]
[Sun Mar 15 19:16:24.034425 2026] [:error] [pid 38540:tid 38607] [client 158.158.99.19:9668] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "abaVCF8bnHsJ1dE90bJtlwAAAFU"]
[Sun Mar 15 19:16:24.830037 2026] [:error] [pid 50986:tid 51006] [client 158.158.99.19:61909] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "abaVCCknK4c779bcQqHB6gAAAVE"]
[Sun Mar 15 19:16:25.542266 2026] [:error] [pid 50986:tid 51008] [client 158.158.99.19:61906] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "abaVCSknK4c779bcQqHB6wAAAVM"]
[Sun Mar 15 19:16:26.408206 2026] [:error] [pid 38645:tid 38657] [client 158.158.99.19:7512] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "abaVChFPHtsDUuVrWDaVqQAAAMo"]
[Sun Mar 15 19:16:27.286178 2026] [:error] [pid 50986:tid 51000] [client 158.158.99.19:7526] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "abaVCyknK4c779bcQqHB7gAAAUs"]
[Sun Mar 15 19:16:27.927759 2026] [:error] [pid 50986:tid 51002] [client 158.158.99.19:15713] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "abaVCyknK4c779bcQqHB8QAAAU0"]
[Sun Mar 15 19:16:28.528465 2026] [:error] [pid 38536:tid 38559] [client 158.158.99.19:36206] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "abaVDPpTEqkVJ0rBEWsIiQAAAAY"]
[Sun Mar 15 19:16:29.122348 2026] [:error] [pid 9995:tid 10003] [client 158.158.99.19:27413] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "abaVDQa8xkcaSmgTbwhx3wAAAQU"]
[Sun Mar 15 19:16:29.679358 2026] [:error] [pid 9995:tid 10015] [client 158.158.99.19:14540] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "abaVDQa8xkcaSmgTbwhx4QAAARE"]
[Sun Mar 15 19:16:30.228846 2026] [:error] [pid 45974:tid 45983] [client 158.158.99.19:61937] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "abaVDhWn4R6u72SegejDLAAAAgc"]
[Sun Mar 15 19:16:30.879174 2026] [:error] [pid 45974:tid 45999] [client 158.158.99.19:50176] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file33.php"] [unique_id "abaVDhWn4R6u72SegejDLQAAAhc"]
[Sun Mar 15 19:16:31.473056 2026] [:error] [pid 50986:tid 51009] [client 158.158.99.19:36175] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file33.php"] [unique_id "abaVDyknK4c779bcQqHB8wAAAVQ"]
[Sun Mar 15 19:16:32.161003 2026] [:error] [pid 50986:tid 51003] [client 158.158.99.19:11032] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file33.php"] [unique_id "abaVECknK4c779bcQqHB9wAAAU4"]
[Sun Mar 15 19:16:32.702509 2026] [:error] [pid 38645:tid 38659] [client 158.158.99.19:14566] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file33.php"] [unique_id "abaVEBFPHtsDUuVrWDaVqwAAAMw"]
[Sun Mar 15 19:16:33.284309 2026] [:error] [pid 38541:tid 38627] [client 158.158.99.19:61949] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file34.php"] [unique_id "abaVEXuOpex8jIO0jt6RbQAAAI4"]
[Sun Mar 15 19:16:33.864697 2026] [:error] [pid 9995:tid 10014] [client 158.158.99.19:6640] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file34.php"] [unique_id "abaVEQa8xkcaSmgTbwhx6AAAARA"]
[Sun Mar 15 19:16:34.499901 2026] [:error] [pid 9995:tid 10015] [client 158.158.99.19:6271] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file34.php"] [unique_id "abaVEga8xkcaSmgTbwhx6wAAARE"]
[Sun Mar 15 19:16:35.108660 2026] [:error] [pid 50986:tid 51002] [client 158.158.99.19:15734] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file34.php"] [unique_id "abaVEyknK4c779bcQqHB_AAAAU0"]
[Sun Mar 15 19:16:35.592944 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:14541] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file35.php"] [unique_id "abaVExFPHtsDUuVrWDaVtQAAAMk"]
[Sun Mar 15 19:16:36.267820 2026] [:error] [pid 9995:tid 10000] [client 158.158.99.19:36164] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file35.php"] [unique_id "abaVFAa8xkcaSmgTbwhx7AAAAQI"]
[Sun Mar 15 19:16:36.791087 2026] [:error] [pid 38645:tid 38657] [client 158.158.99.19:8468] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file35.php"] [unique_id "abaVFBFPHtsDUuVrWDaVtwAAAMo"]
[Sun Mar 15 19:16:45.252951 2026] [:error] [pid 45801:tid 45810] [client 158.158.99.19:32953] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file46.php"] [unique_id "abaVHYaKHL9CTKoVzTA_3wAAAcc"]
[Sun Mar 15 19:16:46.331158 2026] [:error] [pid 38645:tid 38657] [client 158.158.99.19:7076] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file46.php"] [unique_id "abaVHhFPHtsDUuVrWDaV3wAAAMo"]
[Sun Mar 15 19:16:47.494279 2026] [:error] [pid 45974:tid 45988] [client 158.158.99.19:8501] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file46.php"] [unique_id "abaVHxWn4R6u72SegejDPAAAAgw"]
[Sun Mar 15 19:16:48.650896 2026] [:error] [pid 50986:tid 50997] [client 158.158.99.19:21695] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file46.php"] [unique_id "abaVICknK4c779bcQqHCFgAAAUg"]
[Sun Mar 15 19:16:48.890771 2026] [:error] [pid 38645:tid 38660] [client 158.158.99.19:9687] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file47.php"] [unique_id "abaVIBFPHtsDUuVrWDaV6AAAAM0"]
[Sun Mar 15 19:16:49.570519 2026] [:error] [pid 50986:tid 51008] [client 158.158.99.19:35604] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file47.php"] [unique_id "abaVISknK4c779bcQqHCGQAAAVM"]
[Sun Mar 15 19:16:50.419354 2026] [:error] [pid 38645:tid 38664] [client 158.158.99.19:35602] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file47.php"] [unique_id "abaVIhFPHtsDUuVrWDaV7gAAANE"]
[Sun Mar 15 19:16:51.099485 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:52050] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file47.php"] [unique_id "abaVIxFPHtsDUuVrWDaV9AAAAM4"]
[Sun Mar 15 19:16:51.727174 2026] [:error] [pid 50986:tid 50989] [client 158.158.99.19:40250] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "abaVIyknK4c779bcQqHCHQAAAUE"]
[Sun Mar 15 19:16:52.297800 2026] [:error] [pid 38645:tid 38666] [client 158.158.99.19:13409] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "abaVJBFPHtsDUuVrWDaV-wAAANM"]
[Sun Mar 15 19:16:52.883723 2026] [:error] [pid 42570:tid 42575] [client 158.158.99.19:51311] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "abaVJMIUXZJLmk_gYCMHhgAAAYI"]
[Sun Mar 15 19:16:53.430970 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:21683] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "abaVJRFPHtsDUuVrWDaV_wAAAM4"]
[Sun Mar 15 19:16:54.121336 2026] [:error] [pid 38645:tid 38662] [client 158.158.99.19:21686] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file49.php"] [unique_id "abaVJhFPHtsDUuVrWDaWBQAAAM8"]
[Sun Mar 15 19:16:54.782447 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:6828] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file49.php"] [unique_id "abaVJhFPHtsDUuVrWDaWBwAAAMk"]
[Sun Mar 15 19:16:55.323249 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:16470] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file49.php"] [unique_id "abaVJxFPHtsDUuVrWDaWCgAAAM4"]
[Sun Mar 15 19:16:55.819629 2026] [:error] [pid 50986:tid 51010] [client 158.158.99.19:7081] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file49.php"] [unique_id "abaVJyknK4c779bcQqHCJgAAAVU"]
[Sun Mar 15 19:16:56.389770 2026] [:error] [pid 38645:tid 38654] [client 158.158.99.19:52047] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file50.php"] [unique_id "abaVKBFPHtsDUuVrWDaWDgAAAMc"]
[Sun Mar 15 19:16:56.913808 2026] [:error] [pid 50986:tid 50989] [client 158.158.99.19:7066] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file50.php"] [unique_id "abaVKCknK4c779bcQqHCKQAAAUE"]
[Sun Mar 15 19:16:57.691190 2026] [:error] [pid 50986:tid 50988] [client 158.158.99.19:24622] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file50.php"] [unique_id "abaVKSknK4c779bcQqHCKgAAAUA"]
[Sun Mar 15 19:16:58.200625 2026] [:error] [pid 45801:tid 45826] [client 158.158.99.19:21693] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file50.php"] [unique_id "abaVKoaKHL9CTKoVzTA_8wAAAdc"]
[Sun Mar 15 19:16:58.814384 2026] [:error] [pid 50986:tid 51008] [client 158.158.99.19:52062] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file51.php"] [unique_id "abaVKiknK4c779bcQqHCMQAAAVM"]
[Sun Mar 15 19:16:59.350908 2026] [:error] [pid 50986:tid 51012] [client 158.158.99.19:10630] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file51.php"] [unique_id "abaVKyknK4c779bcQqHCNAAAAVc"]
[Sun Mar 15 19:16:59.923297 2026] [:error] [pid 42570:tid 42581] [client 158.158.99.19:16490] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file51.php"] [unique_id "abaVK8IUXZJLmk_gYCMHjAAAAYg"]
[Sun Mar 15 19:17:00.551315 2026] [:error] [pid 50986:tid 50988] [client 158.158.99.19:45924] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file51.php"] [unique_id "abaVLCknK4c779bcQqHCNwAAAUA"]
[Sun Mar 15 19:17:01.116977 2026] [:error] [pid 9995:tid 10005] [client 158.158.99.19:16468] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "abaVLQa8xkcaSmgTbwhyDQAAAQc"]
[Sun Mar 15 19:17:02.289484 2026] [:error] [pid 45974:tid 45985] [client 158.158.99.19:13382] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "abaVLhWn4R6u72SegejDQwAAAgk"]
[Sun Mar 15 19:17:02.867686 2026] [:error] [pid 38645:tid 38670] [client 158.158.99.19:24593] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "abaVLhFPHtsDUuVrWDaWLgAAANc"]
[Sun Mar 15 19:17:03.409329 2026] [:error] [pid 38645:tid 38666] [client 158.158.99.19:45929] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file52.php"] [unique_id "abaVLxFPHtsDUuVrWDaWNwAAANM"]
[Sun Mar 15 19:17:03.948830 2026] [:error] [pid 38541:tid 38635] [client 158.158.99.19:45920] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file53.php"] [unique_id "abaVL3uOpex8jIO0jt6RdAAAAJY"]
[Sun Mar 15 19:17:04.478743 2026] [:error] [pid 38645:tid 38655] [client 158.158.99.19:42693] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file53.php"] [unique_id "abaVMBFPHtsDUuVrWDaWRAAAAMg"]
[Sun Mar 15 19:17:05.110437 2026] [:error] [pid 38645:tid 38663] [client 158.158.99.19:6809] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file53.php"] [unique_id "abaVMRFPHtsDUuVrWDaWUQAAANA"]
[Sun Mar 15 19:17:05.633351 2026] [:error] [pid 9995:tid 9998] [client 158.158.99.19:6843] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file53.php"] [unique_id "abaVMQa8xkcaSmgTbwhyDwAAAQA"]
[Sun Mar 15 19:17:06.255663 2026] [:error] [pid 38645:tid 38664] [client 158.158.99.19:52083] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file54.php"] [unique_id "abaVMhFPHtsDUuVrWDaWVwAAANE"]
[Sun Mar 15 19:17:06.937034 2026] [:error] [pid 50986:tid 51008] [client 158.158.99.19:42739] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file54.php"] [unique_id "abaVMiknK4c779bcQqHCUwAAAVM"]
[Sun Mar 15 19:17:07.493993 2026] [:error] [pid 45801:tid 45823] [client 158.158.99.19:24599] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file54.php"] [unique_id "abaVM4aKHL9CTKoVzTBABwAAAdQ"]
[Sun Mar 15 19:17:08.047952 2026] [:error] [pid 45801:tid 45827] [client 158.158.99.19:2487] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file54.php"] [unique_id "abaVNIaKHL9CTKoVzTBACQAAAdg"]
[Sun Mar 15 19:17:08.608515 2026] [:error] [pid 50986:tid 51007] [client 158.158.99.19:51289] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file55.php"] [unique_id "abaVNCknK4c779bcQqHCVgAAAVI"]
[Sun Mar 15 19:17:09.248861 2026] [:error] [pid 38645:tid 38657] [client 158.158.99.19:35598] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file55.php"] [unique_id "abaVNRFPHtsDUuVrWDaWZAAAAMo"]
[Sun Mar 15 19:17:10.065917 2026] [:error] [pid 38645:tid 38647] [client 158.158.99.19:24606] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file55.php"] [unique_id "abaVNhFPHtsDUuVrWDaWaAAAAMA"]
[Sun Mar 15 19:17:10.670595 2026] [:error] [pid 9995:tid 10006] [client 158.158.99.19:44037] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file55.php"] [unique_id "abaVNga8xkcaSmgTbwhyEgAAAQg"]
[Sun Mar 15 19:17:11.400758 2026] [:error] [pid 38541:tid 38627] [client 158.158.99.19:52081] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file56.php"] [unique_id "abaVN3uOpex8jIO0jt6RewAAAI4"]
[Sun Mar 15 19:17:11.932026 2026] [:error] [pid 38645:tid 38647] [client 158.158.99.19:35628] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file56.php"] [unique_id "abaVNxFPHtsDUuVrWDaWcQAAAMA"]
[Sun Mar 15 19:17:12.501548 2026] [:error] [pid 38645:tid 38650] [client 158.158.99.19:16467] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file56.php"] [unique_id "abaVOBFPHtsDUuVrWDaWcwAAAMM"]
[Sun Mar 15 19:17:13.222292 2026] [:error] [pid 38645:tid 38652] [client 158.158.99.19:52058] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file56.php"] [unique_id "abaVORFPHtsDUuVrWDaWdwAAAMU"]
[Sun Mar 15 19:17:13.894127 2026] [:error] [pid 9995:tid 10008] [client 158.158.99.19:45598] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file57.php"] [unique_id "abaVOQa8xkcaSmgTbwhyJgAAAQo"]
[Sun Mar 15 19:17:14.493251 2026] [:error] [pid 9995:tid 10003] [client 158.158.99.19:35611] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file57.php"] [unique_id "abaVOga8xkcaSmgTbwhyKgAAAQU"]
[Sun Mar 15 19:17:15.930205 2026] [:error] [pid 38645:tid 38652] [client 158.158.99.19:7079] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file57.php"] [unique_id "abaVOxFPHtsDUuVrWDaWfAAAAMU"]
[Sun Mar 15 19:17:16.582918 2026] [:error] [pid 38645:tid 38653] [client 158.158.99.19:2295] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file57.php"] [unique_id "abaVPBFPHtsDUuVrWDaWfwAAAMY"]
[Sun Mar 15 19:17:17.126419 2026] [:error] [pid 38645:tid 38670] [client 158.158.99.19:16484] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file58.php"] [unique_id "abaVPRFPHtsDUuVrWDaWhAAAANc"]
[Sun Mar 15 19:17:17.738304 2026] [:error] [pid 9995:tid 10006] [client 158.158.99.19:25438] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file58.php"] [unique_id "abaVPQa8xkcaSmgTbwhyMwAAAQg"]
[Sun Mar 15 19:17:18.402400 2026] [:error] [pid 9995:tid 10018] [client 158.158.99.19:7797] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file58.php"] [unique_id "abaVPga8xkcaSmgTbwhyNQAAARQ"]
[Sun Mar 15 19:17:19.087010 2026] [:error] [pid 38645:tid 38657] [client 158.158.99.19:7046] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file58.php"] [unique_id "abaVPxFPHtsDUuVrWDaWiwAAAMo"]
[Sun Mar 15 19:17:19.830633 2026] [:error] [pid 38645:tid 38657] [client 158.158.99.19:10685] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "abaVPxFPHtsDUuVrWDaWkQAAAMo"]
[Sun Mar 15 19:17:20.406606 2026] [:error] [pid 38645:tid 38664] [client 158.158.99.19:44067] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "abaVQBFPHtsDUuVrWDaWlgAAANE"]
[Sun Mar 15 19:17:20.996331 2026] [:error] [pid 45801:tid 45817] [client 158.158.99.19:7082] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "abaVQIaKHL9CTKoVzTBAFgAAAc4"]
[Sun Mar 15 19:17:21.502223 2026] [:error] [pid 45801:tid 45819] [client 158.158.99.19:30573] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "abaVQYaKHL9CTKoVzTBAGQAAAdA"]
[Sun Mar 15 19:17:22.059485 2026] [:error] [pid 45801:tid 45804] [client 158.158.99.19:7468] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file60.php"] [unique_id "abaVQoaKHL9CTKoVzTBAHAAAAcE"]
[Sun Mar 15 19:17:22.674952 2026] [:error] [pid 38536:tid 38569] [client 158.158.99.19:44073] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file60.php"] [unique_id "abaVQvpTEqkVJ0rBEWsImgAAABA"]
[Sun Mar 15 19:17:23.285370 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:16497] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file60.php"] [unique_id "abaVQxFPHtsDUuVrWDaWoAAAAM4"]
[Sun Mar 15 19:17:23.816133 2026] [:error] [pid 38645:tid 38658] [client 158.158.99.19:25409] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file60.php"] [unique_id "abaVQxFPHtsDUuVrWDaWoQAAAMs"]
[Sun Mar 15 19:17:24.404058 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:51298] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "abaVRBFPHtsDUuVrWDaWpQAAAMk"]
[Sun Mar 15 19:17:24.982047 2026] [:error] [pid 38645:tid 38650] [client 158.158.99.19:25465] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "abaVRBFPHtsDUuVrWDaWpwAAAMM"]
[Sun Mar 15 19:17:25.492643 2026] [:error] [pid 38645:tid 38648] [client 158.158.99.19:51276] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "abaVRRFPHtsDUuVrWDaWqAAAAME"]
[Sun Mar 15 19:17:25.989722 2026] [:error] [pid 45974:tid 45991] [client 158.158.99.19:2489] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "abaVRRWn4R6u72SegejDUQAAAg8"]
[Sun Mar 15 19:17:26.493978 2026] [:error] [pid 45801:tid 45812] [client 158.158.99.19:21682] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file62.php"] [unique_id "abaVRoaKHL9CTKoVzTBAIAAAAck"]
[Sun Mar 15 19:17:27.171713 2026] [:error] [pid 45801:tid 45821] [client 158.158.99.19:12618] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file62.php"] [unique_id "abaVR4aKHL9CTKoVzTBAJQAAAdI"]
[Sun Mar 15 19:17:27.655555 2026] [:error] [pid 45801:tid 45825] [client 158.158.99.19:52085] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file62.php"] [unique_id "abaVR4aKHL9CTKoVzTBAJgAAAdY"]
[Sun Mar 15 19:17:28.161036 2026] [:error] [pid 9995:tid 10007] [client 158.158.99.19:28034] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file62.php"] [unique_id "abaVSAa8xkcaSmgTbwhyPQAAAQk"]
[Sun Mar 15 19:17:28.692792 2026] [:error] [pid 9995:tid 9998] [client 158.158.99.19:2485] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file63.php"] [unique_id "abaVSAa8xkcaSmgTbwhyPwAAAQA"]
[Sun Mar 15 19:17:29.203631 2026] [:error] [pid 38645:tid 38650] [client 158.158.99.19:2480] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file63.php"] [unique_id "abaVSRFPHtsDUuVrWDaWtwAAAMM"]
[Sun Mar 15 19:17:29.765280 2026] [:error] [pid 42570:tid 42581] [client 158.158.99.19:28093] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file63.php"] [unique_id "abaVScIUXZJLmk_gYCMHoAAAAYg"]
[Sun Mar 15 19:17:30.275142 2026] [:error] [pid 9995:tid 10015] [client 158.158.99.19:2299] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file63.php"] [unique_id "abaVSga8xkcaSmgTbwhyQQAAARE"]
[Sun Mar 15 19:17:30.791058 2026] [:error] [pid 38645:tid 38662] [client 158.158.99.19:7782] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file64.php"] [unique_id "abaVShFPHtsDUuVrWDaWvAAAAM8"]
[Sun Mar 15 19:17:31.336328 2026] [:error] [pid 38645:tid 38647] [client 158.158.99.19:25460] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file64.php"] [unique_id "abaVSxFPHtsDUuVrWDaWvgAAAMA"]
[Sun Mar 15 19:17:31.882218 2026] [:error] [pid 38645:tid 38663] [client 158.158.99.19:2240] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file64.php"] [unique_id "abaVSxFPHtsDUuVrWDaWxgAAANA"]
[Sun Mar 15 19:17:32.382712 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:44084] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file64.php"] [unique_id "abaVTBFPHtsDUuVrWDaWygAAAM4"]
[Sun Mar 15 19:17:33.087679 2026] [:error] [pid 38645:tid 38650] [client 158.158.99.19:33551] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file65.php"] [unique_id "abaVTRFPHtsDUuVrWDaWzQAAAMM"]
[Sun Mar 15 19:17:33.607249 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:7100] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file65.php"] [unique_id "abaVTRFPHtsDUuVrWDaW0gAAAMk"]
[Sun Mar 15 19:17:34.212087 2026] [:error] [pid 38645:tid 38669] [client 158.158.99.19:7044] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file65.php"] [unique_id "abaVThFPHtsDUuVrWDaW2QAAANY"]
[Sun Mar 15 19:17:34.861428 2026] [:error] [pid 50986:tid 50994] [client 158.158.99.19:2270] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file65.php"] [unique_id "abaVTiknK4c779bcQqHCeQAAAUY"]
[Sun Mar 15 19:17:35.472823 2026] [:error] [pid 38645:tid 38671] [client 158.158.99.19:45585] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "abaVTxFPHtsDUuVrWDaW4gAAANg"]
[Sun Mar 15 19:17:36.129324 2026] [:error] [pid 50986:tid 50997] [client 158.158.99.19:7134] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "abaVUCknK4c779bcQqHCewAAAUg"]
[Sun Mar 15 19:17:36.609998 2026] [:error] [pid 42570:tid 42595] [client 158.158.99.19:7053] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "abaVUMIUXZJLmk_gYCMHpAAAAZY"]
[Sun Mar 15 19:17:37.099631 2026] [:error] [pid 50986:tid 51008] [client 158.158.99.19:31034] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "abaVUSknK4c779bcQqHCfAAAAVM"]
[Sun Mar 15 19:17:37.687436 2026] [:error] [pid 45801:tid 45817] [client 158.158.99.19:52054] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file67.php"] [unique_id "abaVUYaKHL9CTKoVzTBAKQAAAc4"]
[Sun Mar 15 19:17:38.298562 2026] [:error] [pid 9995:tid 10017] [client 158.158.99.19:11793] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file67.php"] [unique_id "abaVUga8xkcaSmgTbwhyRwAAARM"]
[Sun Mar 15 19:17:38.815461 2026] [:error] [pid 45801:tid 45821] [client 158.158.99.19:21650] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file67.php"] [unique_id "abaVUoaKHL9CTKoVzTBAKwAAAdI"]
[Sun Mar 15 19:17:39.329721 2026] [:error] [pid 38645:tid 38666] [client 158.158.99.19:11783] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file67.php"] [unique_id "abaVUxFPHtsDUuVrWDaW7gAAANM"]
[Sun Mar 15 19:17:39.875667 2026] [:error] [pid 45974:tid 45980] [client 158.158.99.19:21677] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file68.php"] [unique_id "abaVUxWn4R6u72SegejDVAAAAgQ"]
[Sun Mar 15 19:17:40.400359 2026] [:error] [pid 50986:tid 51011] [client 158.158.99.19:34908] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file68.php"] [unique_id "abaVVCknK4c779bcQqHCfgAAAVY"]
[Sun Mar 15 19:17:40.913872 2026] [:error] [pid 50986:tid 50991] [client 158.158.99.19:11402] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file68.php"] [unique_id "abaVVCknK4c779bcQqHCfwAAAUM"]
[Sun Mar 15 19:17:41.418522 2026] [:error] [pid 50986:tid 51009] [client 158.158.99.19:25456] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file68.php"] [unique_id "abaVVSknK4c779bcQqHCgAAAAVQ"]
[Sun Mar 15 19:17:41.931794 2026] [:error] [pid 38540:tid 38604] [client 158.158.99.19:25419] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file69.php"] [unique_id "abaVVV8bnHsJ1dE90bJtwgAAAFI"]
[Sun Mar 15 19:17:42.416937 2026] [:error] [pid 42570:tid 42592] [client 158.158.99.19:7162] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file69.php"] [unique_id "abaVVsIUXZJLmk_gYCMHqwAAAZM"]
[Sun Mar 15 19:17:42.997320 2026] [:error] [pid 42570:tid 42575] [client 158.158.99.19:7452] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file69.php"] [unique_id "abaVVsIUXZJLmk_gYCMHrgAAAYI"]
[Sun Mar 15 19:17:50.042123 2026] [:error] [pid 9995:tid 10022] [client 158.158.99.19:2297] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file80.php"] [unique_id "abaVXga8xkcaSmgTbwhyXgAAARg"]
[Sun Mar 15 19:17:50.553614 2026] [:error] [pid 38540:tid 38607] [client 158.158.99.19:10391] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file80.php"] [unique_id "abaVXl8bnHsJ1dE90bJtxwAAAFU"]
[Sun Mar 15 19:17:51.040334 2026] [:error] [pid 38540:tid 38594] [client 158.158.99.19:21501] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file80.php"] [unique_id "abaVX18bnHsJ1dE90bJtyAAAAEg"]
[Sun Mar 15 19:17:51.563397 2026] [:error] [pid 50986:tid 50988] [client 158.158.99.19:50196] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file80.php"] [unique_id "abaVXyknK4c779bcQqHCmAAAAUA"]
[Sun Mar 15 19:17:52.047266 2026] [:error] [pid 50986:tid 50997] [client 158.158.99.19:45990] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file81.php"] [unique_id "abaVYCknK4c779bcQqHCmQAAAUg"]
[Sun Mar 15 19:17:52.717821 2026] [:error] [pid 38541:tid 38625] [client 158.158.99.19:36188] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file81.php"] [unique_id "abaVYHuOpex8jIO0jt6RlQAAAIw"]
[Sun Mar 15 19:17:53.241025 2026] [:error] [pid 38540:tid 38604] [client 158.158.99.19:6626] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file81.php"] [unique_id "abaVYV8bnHsJ1dE90bJtywAAAFI"]
[Sun Mar 15 19:17:53.845143 2026] [:error] [pid 38541:tid 38634] [client 158.158.99.19:27392] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file81.php"] [unique_id "abaVYXuOpex8jIO0jt6RlgAAAJU"]
[Sun Mar 15 19:17:54.359671 2026] [:error] [pid 38645:tid 38655] [client 158.158.99.19:61929] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file82.php"] [unique_id "abaVYhFPHtsDUuVrWDaXBgAAAMg"]
[Sun Mar 15 19:17:54.965241 2026] [:error] [pid 9995:tid 10020] [client 158.158.99.19:24971] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file82.php"] [unique_id "abaVYga8xkcaSmgTbwhyZwAAARY"]
[Sun Mar 15 19:17:55.765318 2026] [:error] [pid 9995:tid 10002] [client 158.158.99.19:50205] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file82.php"] [unique_id "abaVYwa8xkcaSmgTbwhyagAAAQQ"]
[Sun Mar 15 19:17:56.315200 2026] [:error] [pid 9995:tid 10003] [client 158.158.99.19:2378] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file82.php"] [unique_id "abaVZAa8xkcaSmgTbwhybgAAAQU"]
[Sun Mar 15 19:17:56.977702 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:2373] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file83.php"] [unique_id "abaVZBFPHtsDUuVrWDaXEQAAAM4"]
[Sun Mar 15 19:17:57.909099 2026] [:error] [pid 50986:tid 50988] [client 158.158.99.19:11022] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file83.php"] [unique_id "abaVZSknK4c779bcQqHCoQAAAUA"]
[Sun Mar 15 19:17:58.835675 2026] [:error] [pid 50986:tid 51009] [client 158.158.99.19:61908] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file83.php"] [unique_id "abaVZiknK4c779bcQqHCpgAAAVQ"]
[Sun Mar 15 19:17:59.478939 2026] [:error] [pid 9995:tid 10006] [client 158.158.99.19:40280] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file83.php"] [unique_id "abaVZwa8xkcaSmgTbwhycQAAAQg"]
[Sun Mar 15 19:17:59.990653 2026] [:error] [pid 9995:tid 10002] [client 158.158.99.19:19842] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file84.php"] [unique_id "abaVZwa8xkcaSmgTbwhydQAAAQQ"]
[Sun Mar 15 19:18:00.640127 2026] [:error] [pid 9995:tid 10009] [client 158.158.99.19:15320] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file84.php"] [unique_id "abaVaAa8xkcaSmgTbwhydwAAAQs"]
[Sun Mar 15 19:18:01.233591 2026] [:error] [pid 9995:tid 10010] [client 158.158.99.19:32383] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file84.php"] [unique_id "abaVaQa8xkcaSmgTbwhyewAAAQw"]
[Sun Mar 15 19:18:02.429650 2026] [:error] [pid 38645:tid 38655] [client 158.158.99.19:8076] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file84.php"] [unique_id "abaVahFPHtsDUuVrWDaXHwAAAMg"]
[Sun Mar 15 19:18:02.952328 2026] [:error] [pid 9995:tid 10017] [client 158.158.99.19:45123] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file85.php"] [unique_id "abaVaga8xkcaSmgTbwhyfgAAARM"]
[Sun Mar 15 19:18:03.704934 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:32320] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file85.php"] [unique_id "abaVaxFPHtsDUuVrWDaXIgAAAM4"]
[Sun Mar 15 19:18:04.313847 2026] [:error] [pid 50986:tid 51000] [client 158.158.99.19:6373] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file85.php"] [unique_id "abaVbCknK4c779bcQqHCtQAAAUs"]
[Sun Mar 15 19:18:04.891294 2026] [:error] [pid 38645:tid 38670] [client 158.158.99.19:41266] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file85.php"] [unique_id "abaVbBFPHtsDUuVrWDaXJgAAANc"]
[Sun Mar 15 19:18:05.434545 2026] [:error] [pid 38645:tid 38665] [client 158.158.99.19:2563] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file86.php"] [unique_id "abaVbRFPHtsDUuVrWDaXJwAAANI"]
[Sun Mar 15 19:18:06.102001 2026] [:error] [pid 38536:tid 38571] [client 158.158.99.19:45171] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file86.php"] [unique_id "abaVbvpTEqkVJ0rBEWsIpwAAABI"]
[Sun Mar 15 19:18:06.943670 2026] [:error] [pid 45801:tid 45823] [client 158.158.99.19:31700] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file86.php"] [unique_id "abaVboaKHL9CTKoVzTBAQAAAAdQ"]
[Sun Mar 15 19:18:07.488126 2026] [:error] [pid 45801:tid 45818] [client 158.158.99.19:8087] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file86.php"] [unique_id "abaVb4aKHL9CTKoVzTBAQgAAAc8"]
[Sun Mar 15 19:18:08.210875 2026] [:error] [pid 45801:tid 45821] [client 158.158.99.19:10020] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file87.php"] [unique_id "abaVcIaKHL9CTKoVzTBARwAAAdI"]
[Sun Mar 15 19:18:08.906677 2026] [:error] [pid 38536:tid 38576] [client 158.158.99.19:31743] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file87.php"] [unique_id "abaVcPpTEqkVJ0rBEWsIqAAAABc"]
[Sun Mar 15 19:18:09.506357 2026] [:error] [pid 38536:tid 38565] [client 158.158.99.19:50786] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file87.php"] [unique_id "abaVcfpTEqkVJ0rBEWsIqQAAAAw"]
[Sun Mar 15 19:18:10.144083 2026] [:error] [pid 9995:tid 10001] [client 158.158.99.19:25394] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file87.php"] [unique_id "abaVcga8xkcaSmgTbwhygwAAAQM"]
[Sun Mar 15 19:18:10.895885 2026] [:error] [pid 50986:tid 50994] [client 158.158.99.19:2104] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "abaVciknK4c779bcQqHCwAAAAUY"]
[Sun Mar 15 19:18:11.517702 2026] [:error] [pid 50986:tid 50989] [client 158.158.99.19:19532] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "abaVcyknK4c779bcQqHCwgAAAUE"]
[Sun Mar 15 19:18:12.047372 2026] [:error] [pid 50986:tid 51005] [client 158.158.99.19:32362] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "abaVdCknK4c779bcQqHCxQAAAVA"]
[Sun Mar 15 19:18:12.726657 2026] [:error] [pid 38541:tid 38622] [client 158.158.99.19:32369] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "abaVdHuOpex8jIO0jt6RoAAAAIk"]
[Sun Mar 15 19:18:13.251702 2026] [:error] [pid 38645:tid 38659] [client 158.158.99.19:40305] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file89.php"] [unique_id "abaVdRFPHtsDUuVrWDaXLQAAAMw"]
[Sun Mar 15 19:18:13.819885 2026] [:error] [pid 38645:tid 38649] [client 158.158.99.19:17601] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file89.php"] [unique_id "abaVdRFPHtsDUuVrWDaXLwAAAMI"]
[Sun Mar 15 19:18:14.368293 2026] [:error] [pid 42570:tid 42590] [client 158.158.99.19:15359] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file89.php"] [unique_id "abaVdsIUXZJLmk_gYCMHvwAAAZE"]
[Sun Mar 15 19:18:15.123281 2026] [:error] [pid 38536:tid 38563] [client 158.158.99.19:62223] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file89.php"] [unique_id "abaVd_pTEqkVJ0rBEWsIsQAAAAo"]
[Sun Mar 15 19:18:15.694350 2026] [:error] [pid 38541:tid 38628] [client 158.158.99.19:62225] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file90.php"] [unique_id "abaVd3uOpex8jIO0jt6RpAAAAI8"]
[Sun Mar 15 19:18:16.347399 2026] [:error] [pid 38645:tid 38666] [client 158.158.99.19:62258] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file90.php"] [unique_id "abaVeBFPHtsDUuVrWDaXOAAAANM"]
[Sun Mar 15 19:18:16.850289 2026] [:error] [pid 38645:tid 38664] [client 158.158.99.19:19583] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file90.php"] [unique_id "abaVeBFPHtsDUuVrWDaXOwAAANE"]
[Sun Mar 15 19:18:17.451912 2026] [:error] [pid 9995:tid 10019] [client 158.158.99.19:17608] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file90.php"] [unique_id "abaVeQa8xkcaSmgTbwhyjAAAARU"]
[Sun Mar 15 19:18:17.961801 2026] [:error] [pid 9995:tid 10010] [client 158.158.99.19:62242] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file91.php"] [unique_id "abaVeQa8xkcaSmgTbwhyjgAAAQw"]
[Sun Mar 15 19:18:18.526257 2026] [:error] [pid 9995:tid 10022] [client 158.158.99.19:31058] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file91.php"] [unique_id "abaVega8xkcaSmgTbwhykgAAARg"]
[Sun Mar 15 19:18:19.103076 2026] [:error] [pid 45974:tid 45992] [client 158.158.99.19:36107] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file91.php"] [unique_id "abaVexWn4R6u72SegejDdAAAAhA"]
[Sun Mar 15 19:18:19.674461 2026] [:error] [pid 50986:tid 51003] [client 158.158.99.19:62257] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file91.php"] [unique_id "abaVeyknK4c779bcQqHCzgAAAU4"]
[Sun Mar 15 19:18:20.228670 2026] [:error] [pid 9995:tid 10008] [client 158.158.99.19:13354] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file92.php"] [unique_id "abaVfAa8xkcaSmgTbwhylwAAAQo"]
[Sun Mar 15 19:18:20.781047 2026] [:error] [pid 42570:tid 42574] [client 158.158.99.19:7739] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file92.php"] [unique_id "abaVfMIUXZJLmk_gYCMHwgAAAYE"]
[Sun Mar 15 19:18:21.301525 2026] [:error] [pid 38645:tid 38666] [client 158.158.99.19:41728] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file92.php"] [unique_id "abaVfRFPHtsDUuVrWDaXQwAAANM"]
[Sun Mar 15 19:18:21.888622 2026] [:error] [pid 38645:tid 38669] [client 158.158.99.19:16395] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file92.php"] [unique_id "abaVfRFPHtsDUuVrWDaXRAAAANY"]
[Sun Mar 15 19:18:22.381845 2026] [:error] [pid 45974:tid 45990] [client 158.158.99.19:7736] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file93.php"] [unique_id "abaVfhWn4R6u72SegejDegAAAg4"]
[Sun Mar 15 19:18:22.934197 2026] [:error] [pid 38540:tid 38608] [client 158.158.99.19:36150] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file93.php"] [unique_id "abaVfl8bnHsJ1dE90bJt0wAAAFY"]
[Sun Mar 15 19:18:23.447467 2026] [:error] [pid 38645:tid 38660] [client 158.158.99.19:42290] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file93.php"] [unique_id "abaVfxFPHtsDUuVrWDaXRgAAAM0"]
[Sun Mar 15 19:18:23.933123 2026] [:error] [pid 9995:tid 10022] [client 158.158.99.19:9268] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file93.php"] [unique_id "abaVfwa8xkcaSmgTbwhymAAAARg"]
[Sun Mar 15 19:18:24.514441 2026] [:error] [pid 9995:tid 10018] [client 158.158.99.19:9227] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file94.php"] [unique_id "abaVgAa8xkcaSmgTbwhymgAAARQ"]
[Sun Mar 15 19:18:25.123992 2026] [:error] [pid 38645:tid 38669] [client 158.158.99.19:7684] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file94.php"] [unique_id "abaVgRFPHtsDUuVrWDaXTAAAANY"]
[Sun Mar 15 19:18:25.668407 2026] [:error] [pid 38645:tid 38664] [client 158.158.99.19:24375] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file94.php"] [unique_id "abaVgRFPHtsDUuVrWDaXTgAAANE"]
[Sun Mar 15 19:18:26.197344 2026] [:error] [pid 38645:tid 38655] [client 158.158.99.19:24367] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file94.php"] [unique_id "abaVghFPHtsDUuVrWDaXUAAAAMg"]
[Sun Mar 15 19:18:26.680971 2026] [:error] [pid 9995:tid 10015] [client 158.158.99.19:39618] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file95.php"] [unique_id "abaVgga8xkcaSmgTbwhynQAAARE"]
[Sun Mar 15 19:18:27.206298 2026] [:error] [pid 9995:tid 10003] [client 158.158.99.19:2392] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file95.php"] [unique_id "abaVgwa8xkcaSmgTbwhyoQAAAQU"]
[Sun Mar 15 19:18:27.754601 2026] [:error] [pid 9995:tid 10005] [client 158.158.99.19:36146] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file95.php"] [unique_id "abaVgwa8xkcaSmgTbwhyogAAAQc"]
[Sun Mar 15 19:18:28.387430 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:11022] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file95.php"] [unique_id "abaVhBFPHtsDUuVrWDaXVAAAAMk"]
[Sun Mar 15 19:18:28.944189 2026] [:error] [pid 9995:tid 10016] [client 158.158.99.19:39662] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file96.php"] [unique_id "abaVhAa8xkcaSmgTbwhypQAAARI"]
[Sun Mar 15 19:18:29.508628 2026] [:error] [pid 38645:tid 38660] [client 158.158.99.19:6560] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file96.php"] [unique_id "abaVhRFPHtsDUuVrWDaXVgAAAM0"]
[Sun Mar 15 19:18:30.115787 2026] [:error] [pid 50986:tid 50991] [client 158.158.99.19:9240] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file96.php"] [unique_id "abaVhiknK4c779bcQqHC0AAAAUM"]
[Sun Mar 15 19:18:30.825260 2026] [:error] [pid 50986:tid 51004] [client 158.158.99.19:17228] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file96.php"] [unique_id "abaVhiknK4c779bcQqHC0wAAAU8"]
[Sun Mar 15 19:18:31.476098 2026] [:error] [pid 38536:tid 38577] [client 158.158.99.19:20240] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file97.php"] [unique_id "abaVh_pTEqkVJ0rBEWsItwAAABg"]
[Sun Mar 15 19:18:32.029316 2026] [:error] [pid 38645:tid 38651] [client 158.158.99.19:41757] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file97.php"] [unique_id "abaViBFPHtsDUuVrWDaXWwAAAMQ"]
[Sun Mar 15 19:18:32.586404 2026] [:error] [pid 9995:tid 10006] [client 158.158.99.19:41761] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file97.php"] [unique_id "abaViAa8xkcaSmgTbwhyqwAAAQg"]
[Sun Mar 15 19:18:33.366033 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:18308] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file97.php"] [unique_id "abaViRFPHtsDUuVrWDaXXQAAAMk"]
[Sun Mar 15 19:18:34.086901 2026] [:error] [pid 45801:tid 45820] [client 158.158.99.19:8901] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file98.php"] [unique_id "abaVioaKHL9CTKoVzTBAUwAAAdE"]
[Sun Mar 15 19:18:35.074506 2026] [:error] [pid 38645:tid 38665] [client 158.158.99.19:41336] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file98.php"] [unique_id "abaVixFPHtsDUuVrWDaXZAAAANI"]
[Sun Mar 15 19:18:35.617449 2026] [:error] [pid 45801:tid 45817] [client 158.158.99.19:20268] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file98.php"] [unique_id "abaVi4aKHL9CTKoVzTBAVAAAAc4"]
[Sun Mar 15 19:18:36.338871 2026] [:error] [pid 50986:tid 51012] [client 158.158.99.19:9238] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file98.php"] [unique_id "abaVjCknK4c779bcQqHC4QAAAVc"]
[Sun Mar 15 19:18:37.065405 2026] [:error] [pid 38541:tid 38619] [client 158.158.99.19:40800] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file99.php"] [unique_id "abaVjXuOpex8jIO0jt6RqQAAAIY"]
[Sun Mar 15 19:18:37.782343 2026] [:error] [pid 50986:tid 51008] [client 158.158.99.19:62177] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file99.php"] [unique_id "abaVjSknK4c779bcQqHC5QAAAVM"]
[Sun Mar 15 19:18:38.799343 2026] [:error] [pid 38541:tid 38631] [client 158.158.99.19:18334] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file99.php"] [unique_id "abaVjnuOpex8jIO0jt6RqgAAAJI"]
[Sun Mar 15 19:18:39.674053 2026] [:error] [pid 50986:tid 50989] [client 158.158.99.19:62164] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file99.php"] [unique_id "abaVjyknK4c779bcQqHC7QAAAUE"]
[Sun Mar 15 19:18:40.377949 2026] [:error] [pid 50986:tid 51003] [client 158.158.99.19:2862] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file100.php"] [unique_id "abaVkCknK4c779bcQqHC7wAAAU4"]
[Sun Mar 15 19:18:41.404705 2026] [:error] [pid 38541:tid 38633] [client 158.158.99.19:31013] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file100.php"] [unique_id "abaVkXuOpex8jIO0jt6RqwAAAJQ"]
[Sun Mar 15 19:18:41.985521 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:41306] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file100.php"] [unique_id "abaVkRFPHtsDUuVrWDaXcAAAAMk"]
[Sun Mar 15 19:18:43.026491 2026] [:error] [pid 45801:tid 45813] [client 158.158.99.19:40828] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file100.php"] [unique_id "abaVk4aKHL9CTKoVzTBAWwAAAco"]
[Sun Mar 15 19:18:43.983668 2026] [:error] [pid 38645:tid 38660] [client 158.158.99.19:16036] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "abaVkxFPHtsDUuVrWDaXcgAAAM0"]
[Sun Mar 15 19:18:44.655245 2026] [:error] [pid 9995:tid 10005] [client 158.158.99.19:16047] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "abaVlAa8xkcaSmgTbwhysgAAAQc"]
[Sun Mar 15 19:18:45.382408 2026] [:error] [pid 50986:tid 50994] [client 158.158.99.19:41309] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "abaVlSknK4c779bcQqHC9AAAAUY"]
[Sun Mar 15 19:18:46.458735 2026] [:error] [pid 50986:tid 51002] [client 158.158.99.19:20710] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "abaVliknK4c779bcQqHC9wAAAU0"]
[Sun Mar 15 19:18:47.551867 2026] [:error] [pid 50986:tid 51012] [client 158.158.99.19:32995] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "abaVlyknK4c779bcQqHC_QAAAVc"]
[Sun Mar 15 19:18:48.636793 2026] [:error] [pid 50986:tid 50994] [client 158.158.99.19:6987] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "abaVmCknK4c779bcQqHDAgAAAUY"]
[Sun Mar 15 19:18:57.454149 2026] [:error] [pid 50986:tid 51000] [client 158.158.99.19:40775] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n.php"] [unique_id "abaVoSknK4c779bcQqHDJwAAAUs"]
[Sun Mar 15 19:18:57.996018 2026] [:error] [pid 9995:tid 10022] [client 158.158.99.19:62159] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n.php"] [unique_id "abaVoQa8xkcaSmgTbwhyygAAARg"]
[Sun Mar 15 19:18:58.520762 2026] [:error] [pid 45801:tid 45825] [client 158.158.99.19:6176] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n.php"] [unique_id "abaVooaKHL9CTKoVzTBAYQAAAdY"]
[Sun Mar 15 19:18:59.075290 2026] [:error] [pid 38536:tid 38558] [client 158.158.99.19:16804] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n.php"] [unique_id "abaVo_pTEqkVJ0rBEWsIvwAAAAU"]
[Sun Mar 15 19:18:59.608930 2026] [:error] [pid 45974:tid 45999] [client 158.158.99.19:6590] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "abaVoxWn4R6u72SegejDjwAAAhc"]
[Sun Mar 15 19:19:00.198301 2026] [:error] [pid 9995:tid 10019] [client 158.158.99.19:43455] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "abaVpAa8xkcaSmgTbwhyzQAAARU"]
[Sun Mar 15 19:19:01.094305 2026] [:error] [pid 45801:tid 45819] [client 158.158.99.19:18394] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "abaVpYaKHL9CTKoVzTBAZAAAAdA"]
[Sun Mar 15 19:19:01.755902 2026] [:error] [pid 38540:tid 38602] [client 158.158.99.19:43425] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "abaVpV8bnHsJ1dE90bJt3gAAAFA"]
[Sun Mar 15 19:19:02.457809 2026] [:error] [pid 38645:tid 38668] [client 158.158.99.19:29361] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "abaVphFPHtsDUuVrWDaXjQAAANU"]
[Sun Mar 15 19:19:03.183362 2026] [:error] [pid 45801:tid 45813] [client 158.158.99.19:6180] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "abaVp4aKHL9CTKoVzTBAaAAAAco"]
[Sun Mar 15 19:19:03.828852 2026] [:error] [pid 38645:tid 38666] [client 158.158.99.19:44732] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "abaVpxFPHtsDUuVrWDaXkAAAANM"]
[Sun Mar 15 19:19:04.903794 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:44725] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "abaVqBFPHtsDUuVrWDaXkgAAAMk"]
[Sun Mar 15 19:19:05.711890 2026] [:error] [pid 38645:tid 38665] [client 158.158.99.19:43397] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "abaVqRFPHtsDUuVrWDaXmAAAANI"]
[Sun Mar 15 19:19:06.690355 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:35212] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "abaVqhFPHtsDUuVrWDaXnwAAAM4"]
[Sun Mar 15 19:19:07.299902 2026] [:error] [pid 38645:tid 38670] [client 158.158.99.19:2202] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "abaVqxFPHtsDUuVrWDaXpQAAANc"]
[Sun Mar 15 19:19:08.021839 2026] [:error] [pid 38645:tid 38654] [client 158.158.99.19:43436] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "abaVrBFPHtsDUuVrWDaXqwAAAMc"]
[Sun Mar 15 19:19:09.239952 2026] [:error] [pid 38645:tid 38666] [client 158.158.99.19:2367] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q.php"] [unique_id "abaVrRFPHtsDUuVrWDaXsQAAANM"]
[Sun Mar 15 19:19:09.787717 2026] [:error] [pid 45801:tid 45817] [client 158.158.99.19:24042] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q.php"] [unique_id "abaVrYaKHL9CTKoVzTBAagAAAc4"]
[Sun Mar 15 19:19:10.552141 2026] [:error] [pid 38645:tid 38653] [client 158.158.99.19:35236] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q.php"] [unique_id "abaVrhFPHtsDUuVrWDaXtwAAAMY"]
[Sun Mar 15 19:19:11.085275 2026] [:error] [pid 45974:tid 46000] [client 158.158.99.19:14172] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q.php"] [unique_id "abaVrxWn4R6u72SegejDlQAAAhg"]
[Sun Mar 15 19:19:11.981603 2026] [:error] [pid 38645:tid 38651] [client 158.158.99.19:35232] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r.php"] [unique_id "abaVrxFPHtsDUuVrWDaXuwAAAMQ"]
[Sun Mar 15 19:19:12.593867 2026] [:error] [pid 45974:tid 45981] [client 158.158.99.19:23567] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r.php"] [unique_id "abaVsBWn4R6u72SegejDmAAAAgU"]
[Sun Mar 15 19:19:13.173078 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:42315] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r.php"] [unique_id "abaVsRFPHtsDUuVrWDaXvwAAAM4"]
[Sun Mar 15 19:19:13.813103 2026] [:error] [pid 9995:tid 10003] [client 158.158.99.19:23208] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r.php"] [unique_id "abaVsQa8xkcaSmgTbwhy1AAAAQU"]
[Sun Mar 15 19:19:14.436957 2026] [:error] [pid 38645:tid 38665] [client 158.158.99.19:21432] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "abaVshFPHtsDUuVrWDaXwwAAANI"]
[Sun Mar 15 19:19:15.000721 2026] [:error] [pid 9995:tid 10001] [client 158.158.99.19:14201] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "abaVsga8xkcaSmgTbwhy2wAAAQM"]
[Sun Mar 15 19:19:15.644307 2026] [:error] [pid 9995:tid 10022] [client 158.158.99.19:23594] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "abaVswa8xkcaSmgTbwhy3AAAARg"]
[Sun Mar 15 19:19:16.226104 2026] [:error] [pid 50986:tid 51000] [client 158.158.99.19:35253] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "abaVtCknK4c779bcQqHDTgAAAUs"]
[Sun Mar 15 19:19:16.856411 2026] [:error] [pid 42570:tid 42591] [client 158.158.99.19:13802] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "abaVtMIUXZJLmk_gYCMHywAAAZI"]
[Sun Mar 15 19:19:17.440034 2026] [:error] [pid 38645:tid 38663] [client 158.158.99.19:2504] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "abaVtRFPHtsDUuVrWDaXywAAANA"]
[Sun Mar 15 19:19:18.064927 2026] [:error] [pid 45801:tid 45806] [client 158.158.99.19:10102] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "abaVtoaKHL9CTKoVzTBAbwAAAcM"]
[Sun Mar 15 19:19:18.736035 2026] [:error] [pid 38645:tid 38652] [client 158.158.99.19:11489] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "abaVthFPHtsDUuVrWDaXzwAAAMU"]
[Sun Mar 15 19:19:19.300697 2026] [:error] [pid 38536:tid 38554] [client 158.158.99.19:13800] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "abaVt_pTEqkVJ0rBEWsIxQAAAAE"]
[Sun Mar 15 19:19:19.934976 2026] [:error] [pid 50986:tid 50998] [client 158.158.99.19:2504] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "abaVtyknK4c779bcQqHDWgAAAUk"]
[Sun Mar 15 19:19:20.680230 2026] [:error] [pid 9995:tid 10008] [client 158.158.99.19:6662] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "abaVuAa8xkcaSmgTbwhy3wAAAQo"]
[Sun Mar 15 19:19:21.321336 2026] [:error] [pid 45801:tid 45823] [client 158.158.99.19:10087] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "abaVuYaKHL9CTKoVzTBAcgAAAdQ"]
[Sun Mar 15 19:19:21.977111 2026] [:error] [pid 9995:tid 10006] [client 158.158.99.19:6719] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "abaVuQa8xkcaSmgTbwhy4wAAAQg"]
[Sun Mar 15 19:19:22.737424 2026] [:error] [pid 45974:tid 45977] [client 158.158.99.19:10436] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "abaVuhWn4R6u72SegejDnwAAAgE"]
[Sun Mar 15 19:19:23.338178 2026] [:error] [pid 9995:tid 10001] [client 158.158.99.19:13791] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "abaVuwa8xkcaSmgTbwhy5QAAAQM"]
[Sun Mar 15 19:19:24.085299 2026] [:error] [pid 38541:tid 38623] [client 158.158.99.19:23573] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u.php"] [unique_id "abaVvHuOpex8jIO0jt6RsQAAAIo"]
[Sun Mar 15 19:19:24.799272 2026] [:error] [pid 42570:tid 42574] [client 158.158.99.19:10104] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "abaVvMIUXZJLmk_gYCMHzgAAAYE"]
[Sun Mar 15 19:19:25.502735 2026] [:error] [pid 42570:tid 42578] [client 158.158.99.19:2514] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "abaVvcIUXZJLmk_gYCMH0AAAAYU"]
[Sun Mar 15 19:19:26.047579 2026] [:error] [pid 42570:tid 42597] [client 158.158.99.19:13775] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "abaVvsIUXZJLmk_gYCMH1AAAAZg"]
[Sun Mar 15 19:19:26.594471 2026] [:error] [pid 45801:tid 45811] [client 158.158.99.19:10477] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "abaVvoaKHL9CTKoVzTBAeQAAAcg"]
[Sun Mar 15 19:19:27.239868 2026] [:error] [pid 38541:tid 38625] [client 158.158.99.19:10057] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "abaVv3uOpex8jIO0jt6RsgAAAIw"]
[Sun Mar 15 19:19:27.748817 2026] [:error] [pid 38541:tid 38624] [client 158.158.99.19:2761] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "abaVv3uOpex8jIO0jt6RtAAAAIs"]
[Sun Mar 15 19:19:28.413526 2026] [:error] [pid 50986:tid 51007] [client 158.158.99.19:13782] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "abaVwCknK4c779bcQqHDYQAAAVI"]
[Sun Mar 15 19:19:29.095639 2026] [:error] [pid 50986:tid 50990] [client 158.158.99.19:18757] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "abaVwSknK4c779bcQqHDZAAAAUI"]
[Sun Mar 15 19:19:29.684773 2026] [:error] [pid 50986:tid 51011] [client 158.158.99.19:6710] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "abaVwSknK4c779bcQqHDZQAAAVY"]
[Sun Mar 15 19:19:30.166945 2026] [:error] [pid 45801:tid 45823] [client 158.158.99.19:6663] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "abaVwoaKHL9CTKoVzTBAfAAAAdQ"]
[Sun Mar 15 19:19:30.694040 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:10447] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "abaVwhFPHtsDUuVrWDaX3QAAAM4"]
[Sun Mar 15 19:19:31.279209 2026] [:error] [pid 50986:tid 51006] [client 158.158.99.19:23965] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "abaVwyknK4c779bcQqHDagAAAVE"]
[Sun Mar 15 19:19:31.784246 2026] [:error] [pid 38645:tid 38671] [client 158.158.99.19:6657] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y.php"] [unique_id "abaVwxFPHtsDUuVrWDaX4QAAANg"]
[Sun Mar 15 19:19:32.320749 2026] [:error] [pid 38645:tid 38665] [client 158.158.99.19:11470] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y.php"] [unique_id "abaVxBFPHtsDUuVrWDaX5AAAANI"]
[Sun Mar 15 19:19:32.985653 2026] [:error] [pid 38645:tid 38649] [client 158.158.99.19:10435] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y.php"] [unique_id "abaVxBFPHtsDUuVrWDaX6QAAAMI"]
[Sun Mar 15 19:19:33.538028 2026] [:error] [pid 38645:tid 38655] [client 158.158.99.19:35656] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y.php"] [unique_id "abaVxRFPHtsDUuVrWDaX7AAAAMg"]
[Sun Mar 15 19:19:34.302896 2026] [:error] [pid 38645:tid 38647] [client 158.158.99.19:23566] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "abaVxhFPHtsDUuVrWDaX8QAAAMA"]
[Sun Mar 15 19:19:34.893279 2026] [:error] [pid 38645:tid 38660] [client 158.158.99.19:10103] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "abaVxhFPHtsDUuVrWDaX9gAAAM0"]
[Sun Mar 15 19:19:35.698525 2026] [:error] [pid 38541:tid 38616] [client 158.158.99.19:6659] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "abaVx3uOpex8jIO0jt6RwgAAAIM"]
[Sun Mar 15 19:19:36.290713 2026] [:error] [pid 38541:tid 38623] [client 158.158.99.19:10062] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "abaVyHuOpex8jIO0jt6RxgAAAIo"]
[Sun Mar 15 19:19:37.057501 2026] [:error] [pid 38536:tid 38568] [client 158.158.99.19:23966] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "abaVyfpTEqkVJ0rBEWsI2QAAAA8"]
[Sun Mar 15 19:19:37.646782 2026] [:error] [pid 38645:tid 38650] [client 158.158.99.19:3034] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "abaVyRFPHtsDUuVrWDaX-QAAAMM"]
[Sun Mar 15 19:19:38.318571 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:10457] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "abaVyhFPHtsDUuVrWDaX_wAAAMk"]
[Sun Mar 15 19:19:38.882840 2026] [:error] [pid 38645:tid 38663] [client 158.158.99.19:29959] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "abaVyhFPHtsDUuVrWDaYAwAAANA"]
[Sun Mar 15 19:19:39.578519 2026] [:error] [pid 50986:tid 51004] [client 158.158.99.19:29969] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b1.php"] [unique_id "abaVyyknK4c779bcQqHDbgAAAU8"]
[Sun Mar 15 19:19:40.228327 2026] [:error] [pid 38645:tid 38654] [client 158.158.99.19:23600] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b1.php"] [unique_id "abaVzBFPHtsDUuVrWDaYCQAAAMc"]
[Sun Mar 15 19:19:41.007358 2026] [:error] [pid 38536:tid 38574] [client 158.158.99.19:2702] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b1.php"] [unique_id "abaVzfpTEqkVJ0rBEWsI2gAAABU"]
[Sun Mar 15 19:19:41.679506 2026] [:error] [pid 42570:tid 42596] [client 158.158.99.19:13771] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b1.php"] [unique_id "abaVzcIUXZJLmk_gYCMH2gAAAZc"]
[Sun Mar 15 19:19:42.533144 2026] [:error] [pid 38536:tid 38559] [client 158.158.99.19:23995] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c1.php"] [unique_id "abaVzvpTEqkVJ0rBEWsI3AAAAAY"]
[Sun Mar 15 19:19:43.107362 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:11473] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c1.php"] [unique_id "abaVzxFPHtsDUuVrWDaYEAAAAMk"]
[Sun Mar 15 19:19:43.621974 2026] [:error] [pid 38645:tid 38654] [client 158.158.99.19:13783] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c1.php"] [unique_id "abaVzxFPHtsDUuVrWDaYEwAAAMc"]
[Sun Mar 15 19:19:44.237551 2026] [:error] [pid 38645:tid 38662] [client 158.158.99.19:10097] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c1.php"] [unique_id "abaV0BFPHtsDUuVrWDaYFQAAAM8"]
[Sun Mar 15 19:19:44.871441 2026] [:error] [pid 38541:tid 38622] [client 158.158.99.19:11508] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d1.php"] [unique_id "abaV0HuOpex8jIO0jt6RygAAAIk"]
[Sun Mar 15 19:19:45.375046 2026] [:error] [pid 45974:tid 45996] [client 158.158.99.19:11480] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d1.php"] [unique_id "abaV0RWn4R6u72SegejDtgAAAhQ"]
[Sun Mar 15 19:19:45.897185 2026] [:error] [pid 38536:tid 38570] [client 158.158.99.19:11474] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d1.php"] [unique_id "abaV0fpTEqkVJ0rBEWsI4QAAABE"]
[Sun Mar 15 19:19:46.497738 2026] [:error] [pid 38645:tid 38670] [client 158.158.99.19:6696] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d1.php"] [unique_id "abaV0hFPHtsDUuVrWDaYGAAAANc"]
[Sun Mar 15 19:19:47.062419 2026] [:error] [pid 38540:tid 38605] [client 158.158.99.19:2795] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e1.php"] [unique_id "abaV018bnHsJ1dE90bJt9QAAAFM"]
[Sun Mar 15 19:19:47.646789 2026] [:error] [pid 42570:tid 42577] [client 158.158.99.19:10442] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e1.php"] [unique_id "abaV08IUXZJLmk_gYCMH4AAAAYQ"]
[Sun Mar 15 19:19:48.177852 2026] [:error] [pid 45974:tid 45985] [client 158.158.99.19:35648] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e1.php"] [unique_id "abaV1BWn4R6u72SegejDuwAAAgk"]
[Sun Mar 15 19:19:48.712489 2026] [:error] [pid 38645:tid 38669] [client 158.158.99.19:18806] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e1.php"] [unique_id "abaV1BFPHtsDUuVrWDaYGgAAANY"]
[Sun Mar 15 19:19:49.259643 2026] [:error] [pid 38536:tid 38571] [client 158.158.99.19:10432] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f1.php"] [unique_id "abaV1fpTEqkVJ0rBEWsI5QAAABI"]
[Sun Mar 15 19:19:49.839601 2026] [:error] [pid 38645:tid 38662] [client 158.158.99.19:6712] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f1.php"] [unique_id "abaV1RFPHtsDUuVrWDaYGwAAAM8"]
[Sun Mar 15 19:19:50.357568 2026] [:error] [pid 38541:tid 38615] [client 158.158.99.19:11460] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f1.php"] [unique_id "abaV1nuOpex8jIO0jt6RzQAAAII"]
[Sun Mar 15 19:19:51.015501 2026] [:error] [pid 45974:tid 45984] [client 158.158.99.19:43366] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f1.php"] [unique_id "abaV1xWn4R6u72SegejDvgAAAgg"]
[Sun Mar 15 19:19:51.534273 2026] [:error] [pid 50986:tid 51007] [client 158.158.99.19:11490] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g1.php"] [unique_id "abaV1yknK4c779bcQqHDfgAAAVI"]
[Sun Mar 15 19:19:52.050288 2026] [:error] [pid 50986:tid 51013] [client 158.158.99.19:10070] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g1.php"] [unique_id "abaV2CknK4c779bcQqHDfwAAAVg"]
[Sun Mar 15 19:19:52.582045 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:2528] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g1.php"] [unique_id "abaV2BFPHtsDUuVrWDaYHwAAAM4"]
[Sun Mar 15 19:19:53.118260 2026] [:error] [pid 38645:tid 38650] [client 158.158.99.19:23969] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g1.php"] [unique_id "abaV2RFPHtsDUuVrWDaYIgAAAMM"]
[Sun Mar 15 19:19:53.655468 2026] [:error] [pid 9995:tid 9999] [client 158.158.99.19:23938] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h1.php"] [unique_id "abaV2Qa8xkcaSmgTbwhy6wAAAQE"]
[Sun Mar 15 19:19:54.199593 2026] [:error] [pid 38645:tid 38667] [client 158.158.99.19:6699] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h1.php"] [unique_id "abaV2hFPHtsDUuVrWDaYJQAAANQ"]
[Sun Mar 15 19:19:54.694613 2026] [:error] [pid 38645:tid 38647] [client 158.158.99.19:10482] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h1.php"] [unique_id "abaV2hFPHtsDUuVrWDaYJwAAAMA"]
[Sun Mar 15 19:19:55.181947 2026] [:error] [pid 38645:tid 38664] [client 158.158.99.19:21404] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h1.php"] [unique_id "abaV2xFPHtsDUuVrWDaYLQAAANE"]
[Sun Mar 15 19:19:55.681482 2026] [:error] [pid 45974:tid 45978] [client 158.158.99.19:23961] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i1.php"] [unique_id "abaV2xWn4R6u72SegejDwQAAAgI"]
[Sun Mar 15 19:19:56.226576 2026] [:error] [pid 42570:tid 42597] [client 158.158.99.19:23586] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i1.php"] [unique_id "abaV3MIUXZJLmk_gYCMH5wAAAZg"]
[Sun Mar 15 19:19:56.704698 2026] [:error] [pid 9995:tid 10008] [client 158.158.99.19:23553] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i1.php"] [unique_id "abaV3Aa8xkcaSmgTbwhy8gAAAQo"]
[Sun Mar 15 19:20:04.755484 2026] [:error] [pid 9995:tid 10006] [client 158.158.99.19:2714] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t1.php"] [unique_id "abaV5Aa8xkcaSmgTbwhzMAAAAQg"]
[Sun Mar 15 19:20:05.256294 2026] [:error] [pid 9995:tid 10013] [client 158.158.99.19:2727] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t1.php"] [unique_id "abaV5Qa8xkcaSmgTbwhzNQAAAQ8"]
[Sun Mar 15 19:20:05.786150 2026] [:error] [pid 9995:tid 10000] [client 158.158.99.19:23250] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t1.php"] [unique_id "abaV5Qa8xkcaSmgTbwhzOAAAAQI"]
[Sun Mar 15 19:20:06.411844 2026] [:error] [pid 38536:tid 38559] [client 158.158.99.19:21379] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t1.php"] [unique_id "abaV5vpTEqkVJ0rBEWsI5wAAAAY"]
[Sun Mar 15 19:20:06.980331 2026] [:error] [pid 42570:tid 42583] [client 158.158.99.19:10068] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u1.php"] [unique_id "abaV5sIUXZJLmk_gYCMH8AAAAYo"]
[Sun Mar 15 19:20:07.547314 2026] [:error] [pid 38541:tid 38630] [client 158.158.99.19:14148] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u1.php"] [unique_id "abaV53uOpex8jIO0jt6R0wAAAJE"]
[Sun Mar 15 19:20:08.048273 2026] [:error] [pid 45801:tid 45811] [client 158.158.99.19:23946] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u1.php"] [unique_id "abaV6IaKHL9CTKoVzTBAiwAAAcg"]
[Sun Mar 15 19:20:08.557733 2026] [:error] [pid 38540:tid 38606] [client 158.158.99.19:10440] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u1.php"] [unique_id "abaV6F8bnHsJ1dE90bJt_gAAAFQ"]
[Sun Mar 15 19:20:09.069647 2026] [:error] [pid 38541:tid 38618] [client 158.158.99.19:11491] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u1.php"] [unique_id "abaV6XuOpex8jIO0jt6R1gAAAIU"]
[Sun Mar 15 19:20:09.557046 2026] [:error] [pid 50986:tid 51010] [client 158.158.99.19:2536] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u1.php"] [unique_id "abaV6SknK4c779bcQqHDhgAAAVU"]
[Sun Mar 15 19:20:10.069012 2026] [:error] [pid 50986:tid 51006] [client 158.158.99.19:20637] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u1.php"] [unique_id "abaV6iknK4c779bcQqHDiAAAAVE"]
[Sun Mar 15 19:20:10.573301 2026] [:error] [pid 50986:tid 51009] [client 158.158.99.19:2502] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/u1.php"] [unique_id "abaV6iknK4c779bcQqHDkAAAAVQ"]
[Sun Mar 15 19:20:11.067946 2026] [:error] [pid 50986:tid 50991] [client 158.158.99.19:24622] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v1.php"] [unique_id "abaV6yknK4c779bcQqHDkwAAAUM"]
[Sun Mar 15 19:20:11.599305 2026] [:error] [pid 42570:tid 42578] [client 158.158.99.19:40753] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v1.php"] [unique_id "abaV68IUXZJLmk_gYCMH8gAAAYU"]
[Sun Mar 15 19:20:12.111997 2026] [:error] [pid 45801:tid 45816] [client 158.158.99.19:25052] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v1.php"] [unique_id "abaV7IaKHL9CTKoVzTBAkAAAAc0"]
[Sun Mar 15 19:20:12.670066 2026] [:error] [pid 38540:tid 38604] [client 158.158.99.19:2720] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v1.php"] [unique_id "abaV7F8bnHsJ1dE90bJuAgAAAFI"]
[Sun Mar 15 19:20:13.172071 2026] [:error] [pid 45801:tid 45819] [client 158.158.99.19:31639] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1.php"] [unique_id "abaV7YaKHL9CTKoVzTBAkwAAAdA"]
[Sun Mar 15 19:20:13.666755 2026] [:error] [pid 38536:tid 38575] [client 158.158.99.19:23982] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1.php"] [unique_id "abaV7fpTEqkVJ0rBEWsI6QAAABY"]
[Sun Mar 15 19:20:14.170397 2026] [:error] [pid 38536:tid 38569] [client 158.158.99.19:35711] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1.php"] [unique_id "abaV7vpTEqkVJ0rBEWsI6gAAABA"]
[Sun Mar 15 19:20:14.753061 2026] [:error] [pid 50986:tid 50999] [client 158.158.99.19:2711] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w1.php"] [unique_id "abaV7iknK4c779bcQqHDmgAAAUo"]
[Sun Mar 15 19:20:15.251724 2026] [:error] [pid 38645:tid 38659] [client 158.158.99.19:20641] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "abaV7xFPHtsDUuVrWDaYNwAAAMw"]
[Sun Mar 15 19:20:15.798558 2026] [:error] [pid 50986:tid 51001] [client 158.158.99.19:43338] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "abaV7yknK4c779bcQqHDmwAAAUw"]
[Sun Mar 15 19:20:16.328548 2026] [:error] [pid 50986:tid 51013] [client 158.158.99.19:25065] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "abaV8CknK4c779bcQqHDngAAAVg"]
[Sun Mar 15 19:20:16.954977 2026] [:error] [pid 45801:tid 45803] [client 158.158.99.19:40747] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "abaV8IaKHL9CTKoVzTBAlgAAAcA"]
[Sun Mar 15 19:20:17.458547 2026] [:error] [pid 50986:tid 51012] [client 158.158.99.19:2118] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y1.php"] [unique_id "abaV8SknK4c779bcQqHDogAAAVc"]
[Sun Mar 15 19:20:18.057571 2026] [:error] [pid 50986:tid 50988] [client 158.158.99.19:23985] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y1.php"] [unique_id "abaV8iknK4c779bcQqHDowAAAUA"]
[Sun Mar 15 19:20:18.551042 2026] [:error] [pid 38645:tid 38660] [client 158.158.99.19:20631] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y1.php"] [unique_id "abaV8hFPHtsDUuVrWDaYOwAAAM0"]
[Sun Mar 15 19:20:19.039992 2026] [:error] [pid 50986:tid 51004] [client 158.158.99.19:2503] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/y1.php"] [unique_id "abaV8yknK4c779bcQqHDpgAAAU8"]
[Sun Mar 15 19:20:19.540121 2026] [:error] [pid 50986:tid 51000] [client 158.158.99.19:31652] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z1.php"] [unique_id "abaV8yknK4c779bcQqHDqQAAAUs"]
[Sun Mar 15 19:20:20.039576 2026] [:error] [pid 38645:tid 38661] [client 158.158.99.19:2497] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z1.php"] [unique_id "abaV9BFPHtsDUuVrWDaYPgAAAM4"]
[Sun Mar 15 19:20:20.533138 2026] [:error] [pid 38645:tid 38653] [client 158.158.99.19:2742] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z1.php"] [unique_id "abaV9BFPHtsDUuVrWDaYPwAAAMY"]
[Sun Mar 15 19:20:21.018160 2026] [:error] [pid 38645:tid 38670] [client 158.158.99.19:23233] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z1.php"] [unique_id "abaV9RFPHtsDUuVrWDaYQAAAANc"]
[Sun Mar 15 19:20:21.500663 2026] [:error] [pid 38645:tid 38667] [client 158.158.99.19:2137] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "abaV9RFPHtsDUuVrWDaYQwAAANQ"]
[Sun Mar 15 19:20:21.989940 2026] [:error] [pid 38645:tid 38663] [client 158.158.99.19:10465] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "abaV9RFPHtsDUuVrWDaYRwAAANA"]
[Sun Mar 15 19:20:22.489994 2026] [:error] [pid 38645:tid 38649] [client 158.158.99.19:14164] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "abaV9hFPHtsDUuVrWDaYSQAAAMI"]
[Sun Mar 15 19:20:22.988785 2026] [:error] [pid 38540:tid 38605] [client 158.158.99.19:2126] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "abaV9l8bnHsJ1dE90bJuBwAAAFM"]
[Sun Mar 15 19:20:23.514514 2026] [:error] [pid 38645:tid 38666] [client 158.158.99.19:25047] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b2.php"] [unique_id "abaV9xFPHtsDUuVrWDaYTQAAANM"]
[Sun Mar 15 19:20:24.006074 2026] [:error] [pid 38645:tid 38667] [client 158.158.99.19:3057] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b2.php"] [unique_id "abaV-BFPHtsDUuVrWDaYUQAAANQ"]
[Sun Mar 15 19:20:24.491706 2026] [:error] [pid 38541:tid 38616] [client 158.158.99.19:10093] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b2.php"] [unique_id "abaV-HuOpex8jIO0jt6R4QAAAIM"]
[Sun Mar 15 19:20:24.973301 2026] [:error] [pid 38645:tid 38652] [client 158.158.99.19:2754] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b2.php"] [unique_id "abaV-BFPHtsDUuVrWDaYZQAAAMU"]
[Sun Mar 15 19:20:25.534019 2026] [:error] [pid 38645:tid 38657] [client 158.158.99.19:10466] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c2.php"] [unique_id "abaV-RFPHtsDUuVrWDaYdgAAAMo"]
[Sun Mar 15 19:20:26.030799 2026] [:error] [pid 38645:tid 38647] [client 158.158.99.19:35658] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c2.php"] [unique_id "abaV-hFPHtsDUuVrWDaYgQAAAMA"]
[Sun Mar 15 19:20:26.603136 2026] [:error] [pid 38645:tid 38656] [client 158.158.99.19:3068] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c2.php"] [unique_id "abaV-hFPHtsDUuVrWDaYjgAAAMk"]
[Sun Mar 15 19:20:27.136252 2026] [:error] [pid 38645:tid 38649] [client 158.158.99.19:23276] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c2.php"] [unique_id "abaV-xFPHtsDUuVrWDaYmAAAAMI"]
[Sun Mar 15 19:20:27.637251 2026] [:error] [pid 38645:tid 38664] [client 158.158.99.19:3035] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d2.php"] [unique_id "abaV-xFPHtsDUuVrWDaYoAAAANE"]
[Sun Mar 15 19:20:28.193317 2026] [:error] [pid 38645:tid 38666] [client 158.158.99.19:40712] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d2.php"] [unique_id "abaV_BFPHtsDUuVrWDaYrwAAANM"]
[Sun Mar 15 19:20:28.748338 2026] [:error] [pid 38536:tid 38573] [client 158.158.99.19:3055] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d2.php"] [unique_id "abaV_PpTEqkVJ0rBEWsI8AAAABQ"]
[Sun Mar 15 19:20:29.352932 2026] [:error] [pid 38536:tid 38557] [client 158.158.99.19:3024] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d2.php"] [unique_id "abaV_fpTEqkVJ0rBEWsI8QAAAAQ"]
[Sun Mar 15 19:20:29.839030 2026] [:error] [pid 38645:tid 38664] [client 158.158.99.19:20611] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e2.php"] [unique_id "abaV_RFPHtsDUuVrWDaYzgAAANE"]
[Sun Mar 15 19:20:30.514211 2026] [:error] [pid 38645:tid 38664] [client 158.158.99.19:20618] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e2.php"] [unique_id "abaV_hFPHtsDUuVrWDaY2QAAANE"]
[Sun Mar 15 19:20:31.131482 2026] [:error] [pid 38536:tid 38559] [client 158.158.99.19:2152] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e2.php"] [unique_id "abaV__pTEqkVJ0rBEWsI8wAAAAY"]
[Sun Mar 15 19:20:31.705687 2026] [:error] [pid 38540:tid 38587] [client 158.158.99.19:31661] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e2.php"] [unique_id "abaV_18bnHsJ1dE90bJuCgAAAEE"]
[Sun Mar 15 19:20:32.262409 2026] [:error] [pid 50986:tid 51000] [client 158.158.99.19:16808] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2.php"] [unique_id "abaWACknK4c779bcQqHD0AAAAUs"]
[Sun Mar 15 19:20:33.006511 2026] [:error] [pid 42570:tid 42597] [client 158.158.99.19:23953] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2.php"] [unique_id "abaWAcIUXZJLmk_gYCMH_QAAAZg"]
[Sun Mar 15 19:20:33.535229 2026] [:error] [pid 50986:tid 51007] [client 158.158.99.19:44073] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2.php"] [unique_id "abaWASknK4c779bcQqHD1QAAAVI"]
[Sun Mar 15 19:20:34.150812 2026] [:error] [pid 50986:tid 51008] [client 158.158.99.19:2705] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f2.php"] [unique_id "abaWAiknK4c779bcQqHD2QAAAVM"]
[Sun Mar 15 19:20:34.706869 2026] [:error] [pid 38540:tid 38593] [client 158.158.99.19:18774] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g2.php"] [unique_id "abaWAl8bnHsJ1dE90bJuCwAAAEc"]
[Sun Mar 15 19:20:35.424926 2026] [:error] [pid 45974:tid 45996] [client 158.158.99.19:31622] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g2.php"] [unique_id "abaWAxWn4R6u72SegejD1QAAAhQ"]
[Sun Mar 15 19:20:36.099902 2026] [:error] [pid 38645:tid 38652] [client 158.158.99.19:35707] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g2.php"] [unique_id "abaWBBFPHtsDUuVrWDaZDgAAAMU"]
[Sun Mar 15 19:20:36.721102 2026] [:error] [pid 42570:tid 42579] [client 158.158.99.19:2535] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g2.php"] [unique_id "abaWBMIUXZJLmk_gYCMH_gAAAYY"]
[Sun Mar 15 19:20:37.433859 2026] [:error] [pid 38645:tid 38660] [client 158.158.99.19:3028] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "abaWBRFPHtsDUuVrWDaZEAAAAM0"]
[Sun Mar 15 19:20:38.021159 2026] [:error] [pid 50986:tid 51002] [client 158.158.99.19:25059] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "abaWBiknK4c779bcQqHD4wAAAU0"]
[Sun Mar 15 19:20:38.697580 2026] [:error] [pid 38540:tid 38608] [client 158.158.99.19:7797] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "abaWBl8bnHsJ1dE90bJuDAAAAFY"]
[Sun Mar 15 19:20:39.290691 2026] [:error] [pid 9995:tid 10007] [client 158.158.99.19:20633] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "abaWBwa8xkcaSmgTbwhzRQAAAQk"]
[Sun Mar 15 19:20:40.277920 2026] [:error] [pid 45974:tid 45978] [client 158.158.99.19:13816] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i2.php"] [unique_id "abaWCBWn4R6u72SegejD2QAAAgI"]
[Sun Mar 15 19:20:40.840099 2026] [:error] [pid 45801:tid 45817] [client 158.158.99.19:23234] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i2.php"] [unique_id "abaWCIaKHL9CTKoVzTBAqwAAAc4"]
[Sun Mar 15 19:20:41.525415 2026] [:error] [pid 50986:tid 50988] [client 158.158.99.19:6674] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i2.php"] [unique_id "abaWCSknK4c779bcQqHD5QAAAUA"]
[Sun Mar 15 19:20:42.299091 2026] [:error] [pid 38645:tid 38654] [client 158.158.99.19:6669] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i2.php"] [unique_id "abaWChFPHtsDUuVrWDaZGQAAAMc"]
[Sun Mar 15 19:20:42.886290 2026] [:error] [pid 50986:tid 50998] [client 158.158.99.19:40716] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/j2.php"] [unique_id "abaWCiknK4c779bcQqHD6AAAAUk"]
[Sun Mar 15 19:20:43.531377 2026] [:error] [pid 38645:tid 38669] [client 158.158.99.19:35687] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/j2.php"] [unique_id "abaWCxFPHtsDUuVrWDaZHwAAANY"]
[Sun Mar 15 19:20:44.264328 2026] [:error] [pid 38645:tid 38647] [client 158.158.99.19:20667] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/j2.php"] [unique_id "abaWDBFPHtsDUuVrWDaZIQAAAMA"]
[Sun Mar 15 19:20:44.924621 2026] [:error] [pid 38645:tid 38650] [client 158.158.99.19:10455] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/j2.php"] [unique_id "abaWDBFPHtsDUuVrWDaZKAAAAMM"]
[Sun Mar 15 19:20:45.593622 2026] [:error] [pid 38645:tid 38670] [client 158.158.99.19:21399] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2k.php"] [unique_id "abaWDRFPHtsDUuVrWDaZKwAAANc"]
[Sun Mar 15 19:20:46.237632 2026] [:error] [pid 50986:tid 50997] [client 158.158.99.19:23291] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2k.php"] [unique_id "abaWDiknK4c779bcQqHD6wAAAUg"]
[Sun Mar 15 19:20:47.367742 2026] [:error] [pid 50986:tid 50996] [client 158.158.99.19:23282] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2k.php"] [unique_id "abaWDyknK4c779bcQqHD8AAAAUc"]
[Sun Mar 15 19:20:47.878422 2026] [:error] [pid 38541:tid 38618] [client 158.158.99.19:20628] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2k.php"] [unique_id "abaWD3uOpex8jIO0jt6R6QAAAIU"]
[Sun Mar 15 19:20:48.408723 2026] [:error] [pid 45974:tid 45977] [client 158.158.99.19:31658] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "abaWEBWn4R6u72SegejD3AAAAgE"]
[Sun Mar 15 19:20:48.951335 2026] [:error] [pid 50986:tid 50997] [client 158.158.99.19:40758] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "abaWECknK4c779bcQqHD-QAAAUg"]
[Sun Mar 15 19:20:49.528654 2026] [:error] [pid 9995:tid 10012] [client 158.158.99.19:31642] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "abaWEQa8xkcaSmgTbwhzUwAAAQ4"]
[Sun Mar 15 19:20:50.103118 2026] [:error] [pid 9995:tid 10010] [client 158.158.99.19:23954] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "abaWEga8xkcaSmgTbwhzVQAAAQw"]
[Sun Mar 15 19:20:50.677062 2026] [:error] [pid 9995:tid 10022] [client 158.158.99.19:31668] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b5.php"] [unique_id "abaWEga8xkcaSmgTbwhzVgAAARg"]
[Sun Mar 15 19:20:51.289299 2026] [:error] [pid 9995:tid 10019] [client 158.158.99.19:3066] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b5.php"] [unique_id "abaWEwa8xkcaSmgTbwhzWAAAARU"]
[Sun Mar 15 19:20:51.825760 2026] [:error] [pid 45974:tid 45989] [client 158.158.99.19:3044] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b5.php"] [unique_id "abaWExWn4R6u72SegejD4AAAAg0"]
[Sun Mar 15 19:20:52.343148 2026] [:error] [pid 45801:tid 45816] [client 158.158.99.19:35696] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b5.php"] [unique_id "abaWFIaKHL9CTKoVzTBAtwAAAc0"]
[Sun Mar 15 19:20:52.827674 2026] [:error] [pid 42570:tid 42592] [client 158.158.99.19:29992] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c5.php"] [unique_id "abaWFMIUXZJLmk_gYCMIAQAAAZM"]
[Sun Mar 15 19:20:53.333699 2026] [:error] [pid 38540:tid 38603] [client 158.158.99.19:2295] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c5.php"] [unique_id "abaWFV8bnHsJ1dE90bJuDgAAAFE"]
[Sun Mar 15 19:20:53.819771 2026] [:error] [pid 50986:tid 51012] [client 158.158.99.19:25040] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c5.php"] [unique_id "abaWFSknK4c779bcQqHD_QAAAVc"]
[Sun Mar 15 19:20:54.392577 2026] [:error] [pid 45801:tid 45819] [client 158.158.99.19:13772] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c5.php"] [unique_id "abaWFoaKHL9CTKoVzTBAuwAAAdA"]
[Sun Mar 15 19:20:54.908119 2026] [:error] [pid 38536:tid 38559] [client 158.158.99.19:31648] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d5.php"] [unique_id "abaWFvpTEqkVJ0rBEWsI-wAAAAY"]
[Sun Mar 15 19:20:55.403909 2026] [:error] [pid 9995:tid 10007] [client 158.158.99.19:10094] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d5.php"] [unique_id "abaWFwa8xkcaSmgTbwhzXAAAAQk"]
[Sun Mar 15 19:20:55.918915 2026] [:error] [pid 45801:tid 45827] [client 158.158.99.19:31623] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d5.php"] [unique_id "abaWF4aKHL9CTKoVzTBAvAAAAdg"]
[Sun Mar 15 19:20:56.547628 2026] [:error] [pid 38536:tid 38570] [client 158.158.99.19:2131] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d5.php"] [unique_id "abaWGPpTEqkVJ0rBEWsI_QAAABE"]
[Sun Mar 15 19:20:57.074116 2026] [:error] [pid 38645:tid 38650] [client 158.158.99.19:31619] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e5.php"] [unique_id "abaWGRFPHtsDUuVrWDaZNwAAAMM"]
[Sun Mar 15 19:20:57.611634 2026] [:error] [pid 42570:tid 42588] [client 158.158.99.19:34179] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e5.php"] [unique_id "abaWGcIUXZJLmk_gYCMIAgAAAY8"]
[Sun Mar 15 19:20:58.121162 2026] [:error] [pid 45801:tid 45826] [client 158.158.99.19:31678] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e5.php"] [unique_id "abaWGoaKHL9CTKoVzTBAvgAAAdc"]
[Sun Mar 15 19:20:58.917764 2026] [:error] [pid 38541:tid 38618] [client 158.158.99.19:40717] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e5.php"] [unique_id "abaWGnuOpex8jIO0jt6R9gAAAIU"]
[Sun Mar 15 19:20:59.442802 2026] [:error] [pid 9995:tid 9999] [client 158.158.99.19:3018] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "abaWGwa8xkcaSmgTbwhzYQAAAQE"]
[Sun Mar 15 19:21:00.245613 2026] [:error] [pid 42570:tid 42589] [client 158.158.99.19:23973] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "abaWHMIUXZJLmk_gYCMIAwAAAZA"]
[Sun Mar 15 19:21:01.062636 2026] [:error] [pid 9995:tid 10021] [client 158.158.99.19:6668] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "abaWHQa8xkcaSmgTbwhzZwAAARc"]
[Sun Mar 15 19:21:01.715589 2026] [:error] [pid 45974:tid 45986] [client 158.158.99.19:13808] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "abaWHRWn4R6u72SegejD4wAAAgo"]
[Sun Mar 15 19:21:02.349497 2026] [:error] [pid 45801:tid 45821] [client 158.158.99.19:20610] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g5.php"] [unique_id "abaWHoaKHL9CTKoVzTBAwQAAAdI"]
[Sun Mar 15 19:21:03.078455 2026] [:error] [pid 45801:tid 45824] [client 158.158.99.19:25042] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g5.php"] [unique_id "abaWH4aKHL9CTKoVzTBAxQAAAdU"]
[Sun Mar 15 19:21:03.686675 2026] [:error] [pid 38645:tid 38647] [client 158.158.99.19:31654] [client 158.158.99.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g5.php"] [unique_id "abaWHxFPHtsDUuVrWDaZPAAAAMA"]
[Sun Mar 15 19:51:43.651156 2026] [:error] [pid 45801:tid 45827] [client 60.188.57.0:42897] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abadT4aKHL9CTKoVzTBGJwAAAdg"]
[Sun Mar 15 22:16:36.152070 2026] [:error] [pid 45974:tid 45988] [client 43.153.47.201:47336] [client 43.153.47.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aba_RBWn4R6u72SegejdqQAAAgw"]
[Sun Mar 15 22:22:36.977783 2026] [:error] [pid 38541:tid 38624] [client 196.191.133.60:52011] [client 196.191.133.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.191.133.60, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abbArHuOpex8jIO0jt6j6AAAAIs"]
[Sun Mar 15 23:25:12.787940 2026] [:error] [pid 38645:tid 38659] [client 136.117.41.182:52713] [client 136.117.41.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.117.41.182, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abbPWBFPHtsDUuVrWDb8gQAAAMw"]
[Sun Mar 15 23:25:14.531228 2026] [:error] [pid 38645:tid 38650] [client 136.117.41.182:52713] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "abbPWhFPHtsDUuVrWDb8jQAAAMM"]
[Sun Mar 15 23:25:15.247689 2026] [:error] [pid 38536:tid 38553] [client 136.117.41.182:56665] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "abbPW_pTEqkVJ0rBEWsaQAAAAAA"]
[Sun Mar 15 23:25:15.977721 2026] [:error] [pid 9995:tid 10016] [client 136.117.41.182:63740] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abbPWwa8xkcaSmgTbwiowAAAARI"]
[Sun Mar 15 23:25:16.682952 2026] [:error] [pid 38540:tid 38596] [client 136.117.41.182:58510] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abbPXF8bnHsJ1dE90bKDBwAAAEo"]
[Sun Mar 15 23:25:17.440138 2026] [:error] [pid 9995:tid 10012] [client 136.117.41.182:60267] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abbPXQa8xkcaSmgTbwioygAAAQ4"]
[Sun Mar 15 23:25:18.182790 2026] [:error] [pid 38541:tid 38626] [client 136.117.41.182:58426] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abbPXnuOpex8jIO0jt6qYwAAAI0"]
[Sun Mar 15 23:25:18.897046 2026] [:error] [pid 45801:tid 45812] [client 136.117.41.182:64174] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abbPXoaKHL9CTKoVzTBrVwAAAck"]
[Sun Mar 15 23:25:19.611727 2026] [:error] [pid 38645:tid 38651] [client 136.117.41.182:55849] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abbPXxFPHtsDUuVrWDb8kAAAAMQ"]
[Sun Mar 15 23:25:20.336140 2026] [:error] [pid 45801:tid 45816] [client 136.117.41.182:62721] [client 136.117.41.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abbPYIaKHL9CTKoVzTBrWQAAAc0"]
[Mon Mar 16 00:29:12.392659 2026] [:error] [pid 60694:tid 60828] [client 43.157.50.58:59080] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abbeWGEURh3k32p5sFJurQAAAJY"]
[Mon Mar 16 02:29:41.626410 2026] [:error] [pid 23458:tid 23482] [client 165.22.188.120:37114] [client 165.22.188.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "abb6lQ4cKIHVuOkxhhopsAAAARY"]
[Mon Mar 16 02:29:42.177619 2026] [:error] [pid 60947:tid 61015] [client 165.22.188.120:37124] [client 165.22.188.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "abb6lv8DVbvyAQDJWh12ogAAAM0"]
[Mon Mar 16 02:29:42.588444 2026] [:error] [pid 60947:tid 61020] [client 165.22.188.120:58472] [client 165.22.188.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "abb6lv8DVbvyAQDJWh12pQAAANE"]
[Mon Mar 16 02:29:43.627818 2026] [:error] [pid 60694:tid 60824] [client 165.22.188.120:58484] [client 165.22.188.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "abb6l2EURh3k32p5sFKT5gAAAJI"]
[Mon Mar 16 02:31:19.207074 2026] [:error] [pid 23458:tid 23469] [client 45.55.32.64:38170] [client 45.55.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "abb69w4cKIHVuOkxhhoqnwAAAQk"]
[Mon Mar 16 02:31:19.629767 2026] [:error] [pid 60666:tid 60758] [client 45.55.32.64:38214] [client 45.55.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "abb69xLlrGpRCJDg8VL09wAAAAY"]
[Mon Mar 16 02:31:20.023876 2026] [:error] [pid 60666:tid 60766] [client 45.55.32.64:45936] [client 45.55.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "abb6-BLlrGpRCJDg8VL0-QAAAA4"]
[Mon Mar 16 02:31:20.845642 2026] [:error] [pid 23458:tid 23468] [client 45.55.32.64:45986] [client 45.55.32.64] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "abb6-A4cKIHVuOkxhhoqqwAAAQg"]
[Mon Mar 16 04:53:28.725599 2026] [:error] [pid 62428:tid 62469] [client 49.51.72.236:37504] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abccSKrHSRXFZx1-aIHHOAAAAEA"]
[Mon Mar 16 07:02:27.420043 2026] [:error] [pid 1411:tid 1436] [client 203.188.168.26:23247] [client 203.188.168.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.26, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abc6g9rCV4sh-le3M-12cQAAAVY"]
[Mon Mar 16 07:02:29.271837 2026] [:error] [pid 62428:tid 62476] [client 203.188.168.27:56195] [client 203.188.168.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.27, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abc6harHSRXFZx1-aIHoKgAAAEc"]
[Mon Mar 16 08:23:23.265998 2026] [:error] [pid 12768:tid 12773] [client 103.65.237.124:51757] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "abdNe4vjhfol0SJym0_LRwAAAYA"]
[Mon Mar 16 08:23:23.656784 2026] [:error] [pid 62529:tid 62561] [client 103.65.237.124:51790] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abdNez84-luOVYZKK0OjbAAAANg"]
[Mon Mar 16 08:42:48.112944 2026] [:error] [pid 62429:tid 62510] [client 111.172.249.49:47926] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abdSCFewIPukhLCowEEB3wAAAI4"]
[Mon Mar 16 11:05:10.406290 2026] [:error] [pid 62510:tid 62537] [client 173.239.236.176:60107] [client 173.239.236.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.176, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abdzZiE33_T9aKpoDdjpPAAAARg"]
[Mon Mar 16 11:05:10.588732 2026] [:error] [pid 62510:tid 62525] [client 173.239.236.79:62321] [client 173.239.236.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.79, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abdzZiE33_T9aKpoDdjpRAAAAQw"]
[Mon Mar 16 11:05:11.764310 2026] [:error] [pid 62510:tid 62532] [client 173.239.236.176:60107] [client 173.239.236.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abdzZyE33_T9aKpoDdjpdwAAARM"]
[Mon Mar 16 11:05:11.958093 2026] [:error] [pid 62510:tid 62533] [client 173.239.236.79:62321] [client 173.239.236.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abdzZyE33_T9aKpoDdjpiQAAARQ"]
[Mon Mar 16 13:04:21.170531 2026] [:error] [pid 62024:tid 62031] [client 60.50.7.242:59868] [client 60.50.7.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 60.50.7.242, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abePVYk-5rtjYvjqC_pshQAAAAI"]
[Mon Mar 16 13:04:24.093328 2026] [:error] [pid 62024:tid 62035] [client 103.240.204.49:61799] [client 103.240.204.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.240.204.49, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abePWIk-5rtjYvjqC_psjwAAAAY"]
[Mon Mar 16 17:43:25.881427 2026] [:error] [pid 39154:tid 39179] [client 43.166.238.12:52704] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfQvRgq1_qjm7J1LqvjBAAAAVY"]
[Mon Mar 16 19:46:01.581676 2026] [:error] [pid 1871:tid 1884] [client 20.120.91.203:43704] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abfteTinTnZ8uiUPekE2vgAAAYs"]
[Mon Mar 16 19:46:04.220919 2026] [:error] [pid 1871:tid 1874] [client 20.120.91.203:43676] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abftfDinTnZ8uiUPekE2wQAAAYE"]
[Mon Mar 16 19:46:05.749753 2026] [:error] [pid 35929:tid 35952] [client 20.120.91.203:43703] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abftfdW47dGpmA63hwSJIgAAANU"]
[Mon Mar 16 19:46:12.499145 2026] [:error] [pid 1871:tid 1887] [client 20.120.91.203:50522] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abfthDinTnZ8uiUPekE20AAAAY4"]
[Mon Mar 16 19:51:48.880286 2026] [:error] [pid 35929:tid 35936] [client 43.130.15.147:47628] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abfu1NW47dGpmA63hwSKWAAAAMU"]
[Mon Mar 16 19:54:33.470982 2026] [:error] [pid 35840:tid 35914] [client 64.89.163.113:63754] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfveUJFzfEsmtPx-M0IfwAAAJE"]
[Mon Mar 16 19:54:33.735307 2026] [:error] [pid 35838:tid 35863] [client 64.89.163.113:63974] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfveRroTe-x3JLtmo6WGQAAABU"]
[Mon Mar 16 19:54:34.535751 2026] [:error] [pid 1871:tid 1882] [client 64.89.163.113:61771] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfvejinTnZ8uiUPekE6hwAAAYk"]
[Mon Mar 16 19:54:34.783081 2026] [:error] [pid 1871:tid 1887] [client 64.89.163.113:64103] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfvejinTnZ8uiUPekE6mgAAAY4"]
[Mon Mar 16 19:54:35.720355 2026] [:error] [pid 1871:tid 1881] [client 64.89.163.113:53192] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfvezinTnZ8uiUPekE6tAAAAYg"]
[Mon Mar 16 19:54:35.975684 2026] [:error] [pid 39154:tid 39181] [client 64.89.163.113:65533] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfvexgq1_qjm7J1LqsilgAAAVg"]
[Mon Mar 16 19:54:36.818670 2026] [:error] [pid 1871:tid 1890] [client 64.89.163.113:64044] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfvfDinTnZ8uiUPekE7EQAAAZE"]
[Mon Mar 16 19:54:37.128270 2026] [:error] [pid 36198:tid 36217] [client 64.89.163.113:50530] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfvfelL1GNckmsdWlM0HAAAARA"]
[Mon Mar 16 19:54:37.971172 2026] [:error] [pid 36198:tid 36223] [client 64.89.163.113:54734] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfvfelL1GNckmsdWlM0UAAAARY"]
[Mon Mar 16 19:54:38.203025 2026] [:error] [pid 36198:tid 36211] [client 64.89.163.113:64813] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abfvfulL1GNckmsdWlM0WAAAAQo"]
[Mon Mar 16 21:42:23.983331 2026] [:error] [pid 39154:tid 39172] [client 173.239.224.96:46551] [client 173.239.224.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.96, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abgIvxgq1_qjm7J1Lqs--gAAAU8"]
[Mon Mar 16 21:42:26.333633 2026] [:error] [pid 35929:tid 35946] [client 173.239.224.92:49337] [client 173.239.224.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.92, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abgIwtW47dGpmA63hwSixAAAAM8"]
[Tue Mar 17 01:49:32.164448 2026] [:error] [pid 45652:tid 45669] [client 43.163.206.70:37684] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abhCrPeWZ4w4tc07R6lQOQAAAM4"]
[Tue Mar 17 02:01:59.186391 2026] [:error] [pid 3200:tid 3225] [client 20.120.91.203:43275] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "abhFl1FOeKiNLMuAjec56AAAARc"]
[Tue Mar 17 02:02:01.044057 2026] [:error] [pid 45404:tid 45532] [client 20.120.91.203:53723] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "abhFmWcrPifELUd8UWAPHgAAAA8"]
[Tue Mar 17 02:02:02.684162 2026] [:error] [pid 9635:tid 9658] [client 20.120.91.203:43269] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "abhFmnsAHChuwZxGaSjrzQAAAVU"]
[Tue Mar 17 02:02:07.323000 2026] [:error] [pid 45404:tid 45532] [client 20.120.91.203:53717] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "abhFn2crPifELUd8UWAPJwAAAA8"]
[Tue Mar 17 02:56:24.509202 2026] [:error] [pid 9635:tid 9657] [client 34.75.90.217:64507] [client 34.75.90.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.90.217, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abhSWHsAHChuwZxGaSgNogAAAVQ"]
[Tue Mar 17 02:56:24.633690 2026] [:error] [pid 9635:tid 9637] [client 34.75.90.217:64373] [client 34.75.90.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.90.217, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abhSWHsAHChuwZxGaSgNpAAAAUA"]
[Tue Mar 17 02:56:25.161085 2026] [:error] [pid 9635:tid 9656] [client 34.75.90.217:64373] [client 34.75.90.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "abhSWXsAHChuwZxGaSgNrAAAAVM"]
[Tue Mar 17 02:56:25.254448 2026] [:error] [pid 9635:tid 9648] [client 34.75.90.217:64507] [client 34.75.90.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abhSWXsAHChuwZxGaSgNrgAAAUs"]
[Tue Mar 17 02:56:26.116787 2026] [:error] [pid 9635:tid 9637] [client 34.75.90.217:49167] [client 34.75.90.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abhSWnsAHChuwZxGaSgNtQAAAUA"]
[Tue Mar 17 02:56:26.216210 2026] [:error] [pid 45450:tid 45581] [client 34.75.90.217:64376] [client 34.75.90.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "abhSWr164tBAS29wdMguzgAAAIo"]
[Tue Mar 17 04:25:13.772775 2026] [:error] [pid 22541:tid 22553] [client 43.140.247.223:60092] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abhnKaS6JNY1-CTsTA-5YQAAAQc"]
[Tue Mar 17 06:32:34.784967 2026] [:error] [pid 45917:tid 46008] [client 105.242.174.60:49303] [client 105.242.174.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.242.174.60, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abiFAhMMhmeqL5fT_heS0AAAAJM"]
[Tue Mar 17 07:56:11.104806 2026] [:error] [pid 45916:tid 45970] [client 185.223.152.237:60183] [client 185.223.152.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.237, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abiYm7iS53PnClk_C9ATOQAAAEg"]
[Tue Mar 17 10:36:52.304457 2026] [:error] [pid 15013:tid 15081] [client 182.42.111.213:32941] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abi-RFZc-p7DonmJmm263QAAAgQ"]
[Tue Mar 17 11:30:06.319306 2026] [:error] [pid 14817:tid 14830] [client 45.130.203.171:24345] [client 45.130.203.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "abjKvuBWVgTpR3dKOgbNWQAAAUQ"]
[Tue Mar 17 11:30:07.008189 2026] [:error] [pid 15013:tid 15100] [client 45.130.203.160:31585] [client 45.130.203.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "abjKv1Zc-p7DonmJmm3HBgAAAhc"]
[Tue Mar 17 12:10:57.747726 2026] [:error] [pid 15162:tid 15180] [client 170.106.180.246:53782] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abjUUbkCW4399PnBfYS30AAAAk0"]
[Tue Mar 17 14:23:30.364060 2026] [:error] [pid 14817:tid 14831] [client 43.155.26.193:48698] [client 43.155.26.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abjzYuBWVgTpR3dKOgbw8AAAAUU"]
[Tue Mar 17 15:29:07.951698 2026] [:error] [pid 15162:tid 15171] [client 89.39.107.202:20434] [client 89.39.107.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.39.107.202, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abkCw7kCW4399PnBfYTTxgAAAkQ"]
[Tue Mar 17 17:16:30.074067 2026] [:error] [pid 45915:tid 45941] [client 182.42.111.156:49718] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abkb7ph7U84ydzcrcncqNgAAAAw"]
[Tue Mar 17 18:08:16.202515 2026] [:error] [pid 45915:tid 45929] [client 43.159.144.16:34210] [client 43.159.144.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abkoEJh7U84ydzcrcndKuQAAAAA"]
[Tue Mar 17 18:30:29.404794 2026] [:error] [pid 45916:tid 45981] [client 93.67.169.70:56839] [client 93.67.169.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.67.169.70, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abktRbiS53PnClk_C9B1XQAAAFM"]
[Tue Mar 17 20:13:40.407778 2026] [:error] [pid 45916:tid 45982] [client 43.135.145.77:46996] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ablFdLiS53PnClk_C9CXSAAAAFQ"]
[Tue Mar 17 23:09:17.695912 2026] [:error] [pid 45915:tid 45942] [client 158.173.25.98:10636] [client 158.173.25.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.173.25.98, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ablunZh7U84ydzcrcnfMWgAAAA0"]
[Tue Mar 17 23:57:31.875737 2026] [:error] [pid 14817:tid 14838] [client 49.51.252.146:36932] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abl56-BWVgTpR3dKOgabSgAAAUw"]
[Wed Mar 18 00:06:29.920150 2026] [:error] [pid 22541:tid 22555] [client 182.42.111.156:57473] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abl8BaS6JNY1-CTsTA9zSwAAAQk"]
[Wed Mar 18 03:09:51.126422 2026] [:error] [pid 40717:tid 41054] [client 20.39.61.185:29005] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmm_8R22EbC70ICesgg3gAAAIM"]
[Wed Mar 18 03:09:54.849958 2026] [:error] [pid 40716:tid 41044] [client 20.39.61.185:29315] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmnAhR6i4ByUuhUBASeswAAAFc"]
[Wed Mar 18 03:09:56.500974 2026] [:error] [pid 40716:tid 41033] [client 20.39.61.185:29317] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmnBBR6i4ByUuhUBASevgAAAEw"]
[Wed Mar 18 03:10:00.717408 2026] [:error] [pid 41165:tid 41179] [client 20.39.61.185:29293] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmnCHEHb7dujURQaRbnLwAAAQw"]
[Wed Mar 18 04:43:13.199268 2026] [:error] [pid 13716:tid 13731] [client 4.194.59.74:6541] [client 4.194.59.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "abm84WWKzQVHkZkUHaTIKwAAAU0"]
[Wed Mar 18 04:43:13.590569 2026] [:error] [pid 13716:tid 13738] [client 4.194.59.74:11417] [client 4.194.59.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "abm84WWKzQVHkZkUHaTILAAAAVQ"]
[Wed Mar 18 04:43:13.958345 2026] [:error] [pid 13716:tid 13723] [client 4.194.59.74:11907] [client 4.194.59.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "abm84WWKzQVHkZkUHaTILgAAAUU"]
[Wed Mar 18 04:43:14.340671 2026] [:error] [pid 13716:tid 13720] [client 4.194.59.74:8838] [client 4.194.59.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "abm84mWKzQVHkZkUHaTIMAAAAUI"]
[Wed Mar 18 05:41:42.780340 2026] [:error] [pid 13716:tid 13735] [client 157.49.182.240:61950] [client 157.49.182.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.49.182.240, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abnKlmWKzQVHkZkUHaTu0QAAAVE"]
[Wed Mar 18 06:19:57.081582 2026] [:error] [pid 13716:tid 13724] [client 110.166.71.39:39821] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abnTjWWKzQVHkZkUHaQFDgAAAUY"]
[Wed Mar 18 06:23:23.396489 2026] [:error] [pid 13716:tid 13741] [client 43.157.188.74:36948] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abnUW2WKzQVHkZkUHaQHvQAAAVc"]
[Wed Mar 18 08:13:17.736685 2026] [:error] [pid 13676:tid 13689] [client 20.2.90.103:38406] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "abnuHWxDEHR5lvAEVIgUPAAAAQs"]
[Wed Mar 18 08:47:58.462045 2026] [:error] [pid 30649:tid 30696] [client 43.166.246.180:33426] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abn2PpVMiEiN8KB1tN5zuQAAAJE"]
[Wed Mar 18 12:40:39.057114 2026] [:error] [pid 42870:tid 42907] [client 182.43.70.143:44498] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abosx56axlAooiuYyUydzQAAABY"]
[Wed Mar 18 12:51:29.152496 2026] [:error] [pid 42872:tid 42942] [client 43.167.245.18:52778] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abovUTchM8PQMaMEWJmZYwAAAcE"]
[Wed Mar 18 13:31:23.832962 2026] [:error] [pid 31232:tid 31245] [client 41.101.102.127:60881] [client 41.101.102.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.101.102.127, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abo4q2X6HV7dqh3BQD3YBwAAAEo"]
[Wed Mar 18 13:35:43.141504 2026] [:error] [pid 20667:tid 20680] [client 86.99.106.111:64715] [client 86.99.106.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.99.106.111, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abo5r5gyfQyvBhzza_020gAAAYs"]
[Wed Mar 18 19:24:50.371659 2026] [:error] [pid 42871:tid 42936] [client 114.80.36.40:54592] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abqLgmPUS0lM1M9nUaJQlgAAAJY"]
[Wed Mar 18 19:48:16.084814 2026] [:error] [pid 53755:tid 53766] [client 20.120.18.145:17526] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqRAKqw5ZSRshmIhWkdFgAAAUk"]
[Wed Mar 18 19:48:18.155814 2026] [:error] [pid 43009:tid 43031] [client 20.120.18.145:17477] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqRAn8aUp4Sm6m3nmMvqQAAARQ"]
[Wed Mar 18 19:48:20.878344 2026] [:error] [pid 42871:tid 42928] [client 20.120.18.145:18056] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqRBGPUS0lM1M9nUaJYAgAAAI4"]
[Wed Mar 18 19:48:25.448565 2026] [:error] [pid 53755:tid 53779] [client 20.120.18.145:17515] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqRCaqw5ZSRshmIhWkdOQAAAVY"]
[Wed Mar 18 20:25:14.014483 2026] [:error] [pid 20667:tid 20685] [client 197.250.231.140:29603] [client 197.250.231.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.250.231.140, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abqZqpgyfQyvBhzza_2AfwAAAZA"]
[Wed Mar 18 21:15:33.121339 2026] [:error] [pid 53755:tid 53776] [client 43.157.158.178:35916] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abqldaqw5ZSRshmIhWlOWgAAAVM"]
[Wed Mar 18 22:24:29.261709 2026] [:error] [pid 53755:tid 53760] [client 37.140.223.21:54321] [client 37.140.223.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.21, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "abq1naqw5ZSRshmIhWl2vAAAAUM"]
[Thu Mar 19 02:12:50.989441 2026] [:error] [pid 19196:tid 19325] [client 223.244.35.77:33097] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abrrIrQmdacT_YxarWReZAAAAAk"]
[Thu Mar 19 03:56:46.031806 2026] [:error] [pid 23988:tid 24014] [client 103.147.133.4:65517] [client 103.147.133.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.147.133.4, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "absDfmnlkSPXj2matr3NfQAAANc"]
[Thu Mar 19 03:58:17.387947 2026] [:error] [pid 23882:tid 23902] [client 43.153.71.12:40730] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "absD2bWnClbtbN12M7_mvwAAAAA"]
[Thu Mar 19 04:15:21.261361 2026] [ssl:error] [pid 23883:tid 23938] [client 139.59.177.211:40804] AH02032: Hostname wnb.argeniere.at provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup
[Thu Mar 19 06:31:03.759020 2026] [:error] [pid 23883:tid 23934] [client 31.171.130.49:51017] [client 31.171.130.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.49, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "absnp9Ni-EnEAH4abz2AAgAAAEU"]
[Thu Mar 19 06:56:11.582361 2026] [:error] [pid 31205:tid 31219] [client 91.99.181.46:33272] [client 91.99.181.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "absti1u5gZKGrGz5P1EDxQAAAUM"]
[Thu Mar 19 08:18:15.329487 2026] [:error] [pid 31313:tid 31374] [client 49.7.227.204:33092] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abtAxw9HuAbqf2tZOycJ4QAAAc0"]
[Thu Mar 19 08:26:02.083828 2026] [:error] [pid 31205:tid 31217] [client 43.153.113.127:46252] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abtCmlu5gZKGrGz5P1EpFwAAAUE"]
[Thu Mar 19 08:45:22.799926 2026] [:error] [pid 3278:tid 3288] [client 151.243.109.17:56908] [client 151.243.109.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about"] [unique_id "abtHIgC2T_lM6ZgvfcRESgAAAQc"]
[Thu Mar 19 08:45:25.518514 2026] [:error] [pid 31735:tid 31761] [client 151.243.109.17:56938] [client 151.243.109.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about"] [unique_id "abtHJX-gyQbRQWJYccwzRAAAApY"]
[Thu Mar 19 08:45:26.964570 2026] [:error] [pid 31447:tid 31465] [client 151.243.109.17:56966] [client 151.243.109.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about"] [unique_id "abtHJhmVNRDSLnGvghhjhgAAAgo"]
[Thu Mar 19 08:45:28.013932 2026] [:error] [pid 31447:tid 31466] [client 151.243.109.17:56992] [client 151.243.109.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about-us"] [unique_id "abtHKBmVNRDSLnGvghhjkQAAAgs"]
[Thu Mar 19 08:45:29.069645 2026] [:error] [pid 31735:tid 31763] [client 151.243.109.17:40366] [client 151.243.109.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about-us"] [unique_id "abtHKX-gyQbRQWJYccwzRQAAApg"]
[Thu Mar 19 08:45:30.952766 2026] [:error] [pid 32226:tid 32248] [client 151.243.109.17:40368] [client 151.243.109.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about-us"] [unique_id "abtHKrBb58lgPwqxC6qh7gAAAxQ"]
[Thu Mar 19 09:59:14.419186 2026] [:error] [pid 23882:tid 23919] [client 209.87.169.60:28989] [client 209.87.169.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "abtYcrWnClbtbN12M78bewAAABE"]
[Thu Mar 19 09:59:15.239534 2026] [:error] [pid 31313:tid 31363] [client 209.87.169.46:39885] [client 209.87.169.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "abtYcw9HuAbqf2tZOycgUAAAAcI"]
[Thu Mar 19 09:59:16.565695 2026] [:error] [pid 31735:tid 31743] [client 209.87.169.55:28053] [client 209.87.169.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "abtYdH-gyQbRQWJYccw_0QAAAoQ"]
[Thu Mar 19 10:00:11.923551 2026] [:error] [pid 31447:tid 31466] [client 209.87.169.52:34501] [client 209.87.169.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abtYqxmVNRDSLnGvghigMgAAAgs"]
[Thu Mar 19 10:53:22.931808 2026] [:error] [pid 31205:tid 31239] [client 43.157.50.58:33672] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abtlIlu5gZKGrGz5P1F7LAAAAVY"]
[Thu Mar 19 12:48:53.433302 2026] [:error] [pid 31205:tid 31219] [client 200.225.115.243:43511] [client 200.225.115.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.225.115.243, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abuANVu5gZKGrGz5P1Gl9wAAAUM"]
[Thu Mar 19 12:54:11.305977 2026] [:error] [pid 24925:tid 24948] [client 154.16.49.101:5735] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abuBc_UZEHbnUgjEbWNmswAAAZM"]
[Thu Mar 19 12:54:11.799102 2026] [:error] [pid 25135:tid 25156] [client 154.16.49.101:5908] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBc6KtE0dzgMctjFXtKwAAA1M"]
[Thu Mar 19 12:54:12.292523 2026] [:error] [pid 25135:tid 25146] [client 154.16.49.101:6116] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feed/"] [unique_id "abuBdKKtE0dzgMctjFXtSAAAA0k"]
[Thu Mar 19 14:44:36.270198 2026] [:error] [pid 11016:tid 11087] [client 120.71.59.24:53595] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "abubVBPK94J9G19C6uX0-QAAAQ4"]
[Thu Mar 19 17:38:40.606719 2026] [:error] [pid 1285:tid 1300] [client 49.43.218.240:53968] [client 49.43.218.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.218.240, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abvEIFE95r3zR75X1HrYhAAAAg0"]
[Thu Mar 19 21:51:08.649409 2026] [:error] [pid 1247:tid 1249] [client 49.235.136.28:43604] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abv_TA5tmeOr-yI4XNH2tQAAAcA"]
[Thu Mar 19 22:31:22.917202 2026] [:error] [pid 1247:tid 1253] [client 223.185.34.197:11448] [client 223.185.34.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.34.197, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abwIug5tmeOr-yI4XNEPKAAAAcQ"]
[Thu Mar 19 22:31:44.869953 2026] [:error] [pid 1247:tid 1266] [client 119.73.101.11:47471] [client 119.73.101.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 119.73.101.11, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abwI0A5tmeOr-yI4XNEPVwAAAdE"]
[Fri Mar 20 02:45:54.974959 2026] [:error] [pid 46264:tid 46290] [client 4.205.31.173:15173] [client 4.205.31.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.31.173, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abxEYop3TruHFmWOt5ETiwAAAAc"]
[Fri Mar 20 02:45:57.221924 2026] [:error] [pid 46264:tid 46293] [client 4.205.31.173:15173] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abxEZYp3TruHFmWOt5ETmwAAAAo"]
[Fri Mar 20 02:45:59.160704 2026] [:error] [pid 46125:tid 46233] [client 4.205.31.173:14496] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abxEZ2gN4lI6NHeckY5wcAAAAIw"]
[Fri Mar 20 02:46:09.281407 2026] [:error] [pid 11258:tid 11276] [client 4.205.31.173:14527] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abxEcZPHb95f6xzHJOdAdAAAANA"]
[Fri Mar 20 03:24:03.294739 2026] [:error] [pid 46125:tid 46255] [client 43.159.149.216:40298] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abxNU2gN4lI6NHeckY54xgAAAJc"]
[Fri Mar 20 04:58:32.062756 2026] [:error] [pid 58127:tid 58216] [client 202.47.63.29:43686] [client 202.47.63.29] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.47.63.29, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "abxjeLQ_HbYy8C6I_EHlKAAAAJE"]
[Fri Mar 20 05:24:19.230226 2026] [:error] [pid 58127:tid 58208] [client 20.104.104.81:12046] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "abxpg7Q_HbYy8C6I_EHxGwAAAIk"]
[Fri Mar 20 05:24:20.616504 2026] [:error] [pid 58126:tid 58194] [client 20.104.104.81:11588] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "abxphKKAmdXQSS0Y5KBW3QAAAFY"]
[Fri Mar 20 05:24:22.010345 2026] [:error] [pid 58126:tid 58188] [client 20.104.104.81:12092] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "abxphqKAmdXQSS0Y5KBW3wAAAFA"]
[Fri Mar 20 05:24:23.552360 2026] [:error] [pid 58127:tid 58222] [client 20.104.104.81:12042] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "abxph7Q_HbYy8C6I_EHxJQAAAJc"]
[Fri Mar 20 09:10:43.748575 2026] [:error] [pid 55299:tid 55317] [client 43.166.226.186:43618] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "abyek_oGhbNgkNIkZwm6SQAAAgw"]
[Fri Mar 20 12:12:37.424983 2026] [:error] [pid 49170:tid 49197] [client 20.196.218.22:3378] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "abzJNc-c8ctLVDCqUJX14AAAABc"]
[Fri Mar 20 12:12:38.029970 2026] [:error] [pid 49081:tid 49117] [client 20.196.218.22:3912] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "abzJNho1LBAUhfhYPR1f1AAAAQI"]
[Fri Mar 20 12:12:38.651339 2026] [:error] [pid 49081:tid 49120] [client 20.196.218.22:3387] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "abzJNho1LBAUhfhYPR1f1gAAAQU"]
[Fri Mar 20 12:12:39.205412 2026] [:error] [pid 49081:tid 49135] [client 20.196.218.22:3923] [client 20.196.218.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "abzJNxo1LBAUhfhYPR1f3QAAARQ"]
[Fri Mar 20 15:37:56.038902 2026] [autoindex:error] [pid 51714:tid 51727] [client 141.98.11.17:56314] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Mar 20 18:39:58.931385 2026] [:error] [pid 49081:tid 49127] [client 43.131.253.14:58948] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ab0j_ho1LBAUhfhYPR1luQAAAQw"]
[Fri Mar 20 18:41:19.993545 2026] [:error] [pid 49081:tid 49124] [client 39.52.102.95:51901] [client 39.52.102.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.52.102.95, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ab0kTxo1LBAUhfhYPR1msgAAAQk"]
[Fri Mar 20 20:13:29.328741 2026] [:error] [pid 49081:tid 49133] [client 216.24.212.17:21049] [client 216.24.212.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.17, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ab056Ro1LBAUhfhYPR2MxwAAARI"]
[Sat Mar 21 00:37:26.895182 2026] [autoindex:error] [pid 62479:tid 62533] [client 141.98.11.17:65290] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Mar 21 01:00:30.351650 2026] [:error] [pid 62476:tid 62493] [client 43.153.96.233:56460] [client 43.153.96.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ab19LmBL9BQ4RM1FKIBxJgAAAEo"]
[Sat Mar 21 07:30:51.443004 2026] [:error] [pid 49170:tid 49187] [client 45.131.195.228:24185] [client 45.131.195.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.228, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ab3Yq71KUC-QISS0eWo8QQAAAQ8"]
[Sat Mar 21 08:03:38.105832 2026] [:error] [pid 33348:tid 33373] [client 182.44.2.148:55749] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ab3gWjEj9d9zzbs_KjjZEgAAAVY"]
[Sat Mar 21 09:24:53.892407 2026] [:error] [pid 43052:tid 43078] [client 170.106.180.246:60134] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ab3zZV5fjm-AiInC1hLsGwAAA5g"]
[Sat Mar 21 12:08:01.818828 2026] [:error] [pid 1489:tid 1526] [client 103.163.245.234:59643] [client 103.163.245.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.245.234, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ab4ZoVRvnvBO_DG9kxtiAgAAABY"]
[Sat Mar 21 16:39:41.743792 2026] [:error] [pid 1489:tid 1521] [client 45.239.238.105:37568] [client 45.239.238.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.239.238.105, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ab5ZTVRvnvBO_DG9kxvCCwAAABE"]
[Sat Mar 21 17:17:14.585712 2026] [:error] [pid 42886:tid 42894] [client 43.130.110.130:40112] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ab5iGl452dC6nbNWav1WvAAAAwY"]
[Sat Mar 21 19:34:57.271968 2026] [:error] [pid 1490:tid 1536] [client 43.130.139.177:54442] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ab6CYWSWhIPTatyxDeBMsgAAAEM"]
[Sun Mar 22 02:07:28.937753 2026] [:error] [pid 40781:tid 41007] [client 49.51.252.146:49718] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ab7eYDJQuCgg1YvEGBLuowAAAEE"]
[Sun Mar 22 05:21:00.215094 2026] [:error] [pid 51468:tid 51485] [client 1.15.52.154:51186] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ab8LvE2TppSvA8W5CBSDbgAAAMk"]
[Sun Mar 22 07:06:14.126915 2026] [:error] [pid 40039:tid 40062] [client 143.105.37.181:29980] [client 143.105.37.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.37.181, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ab8kZh3aDgUJfBYishkpzgAAARU"]
[Sun Mar 22 08:15:29.834374 2026] [:error] [pid 40039:tid 40058] [client 43.157.158.178:42006] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ab80oR3aDgUJfBYishlWtwAAARE"]
[Sun Mar 22 09:48:27.680111 2026] [:error] [pid 51361:tid 51373] [client 52.138.39.105:11100] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9KaxXYUsdvKC9YWpVdbwAAAAI"]
[Sun Mar 22 09:48:28.517326 2026] [:error] [pid 51362:tid 51424] [client 52.138.39.105:11106] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9KbMOwPm3DXzTDjUfrTAAAAFc"]
[Sun Mar 22 09:48:29.339502 2026] [:error] [pid 51361:tid 51393] [client 52.138.39.105:11075] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9KbRXYUsdvKC9YWpVddgAAABU"]
[Sun Mar 22 09:48:30.177705 2026] [:error] [pid 51468:tid 51485] [client 52.138.39.105:11096] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9Kbk2TppSvA8W5CBT_jQAAAMk"]
[Sun Mar 22 12:08:38.782361 2026] [:error] [pid 40039:tid 40051] [client 72.56.50.246:51075] [client 72.56.50.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 72.56.50.246, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ab9rRh3aDgUJfBYishn0rQAAAQo"]
[Sun Mar 22 19:28:34.060986 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:15214] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "ab_SYsOwPm3DXzTDjUeoxgAAAEk"]
[Sun Mar 22 19:28:35.880566 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:14321] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "ab_SY8OwPm3DXzTDjUeoyAAAAEw"]
[Sun Mar 22 19:28:36.702970 2026] [:error] [pid 51361:tid 51385] [client 20.203.162.101:16563] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "ab_SZBXYUsdvKC9YWpXXjAAAAA4"]
[Sun Mar 22 19:28:37.657166 2026] [:error] [pid 40039:tid 40055] [client 20.203.162.101:30934] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "ab_SZR3aDgUJfBYishmoGwAAAQ4"]
[Sun Mar 22 19:28:38.643509 2026] [:error] [pid 51468:tid 51483] [client 20.203.162.101:20953] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "ab_SZk2TppSvA8W5CBRFogAAAMc"]
[Sun Mar 22 19:28:39.410058 2026] [:error] [pid 51468:tid 51484] [client 20.203.162.101:14827] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "ab_SZ02TppSvA8W5CBRFpAAAAMg"]
[Sun Mar 22 19:28:40.298584 2026] [:error] [pid 51363:tid 51446] [client 20.203.162.101:31956] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "ab_SaFwa9x6OCTRkhl2ZbwAAAJA"]
[Sun Mar 22 19:28:41.544549 2026] [:error] [pid 51363:tid 51452] [client 20.203.162.101:16528] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "ab_SaVwa9x6OCTRkhl2ZdQAAAJY"]
[Sun Mar 22 19:28:42.581535 2026] [:error] [pid 30166:tid 30185] [client 20.203.162.101:9969] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "ab_Sarm4_26jKMD0zy3XDAAAAUo"]
[Sun Mar 22 19:28:46.438060 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:27859] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "ab_SbsOwPm3DXzTDjUeo2wAAAFU"]
[Sun Mar 22 19:28:48.864512 2026] [:error] [pid 51361:tid 51371] [client 20.203.162.101:9758] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "ab_ScBXYUsdvKC9YWpXXkgAAAAA"]
[Sun Mar 22 19:28:49.970715 2026] [:error] [pid 51468:tid 51479] [client 20.203.162.101:16538] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "ab_ScU2TppSvA8W5CBRFrAAAAMM"]
[Sun Mar 22 19:28:51.710187 2026] [:error] [pid 51363:tid 51450] [client 20.203.162.101:12029] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "ab_Sc1wa9x6OCTRkhl2ZfwAAAJQ"]
[Sun Mar 22 19:28:52.434632 2026] [:error] [pid 30166:tid 30174] [client 20.203.162.101:16543] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "ab_SdLm4_26jKMD0zy3XGQAAAUM"]
[Sun Mar 22 19:28:53.464212 2026] [:error] [pid 51361:tid 51390] [client 20.203.162.101:11998] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "ab_SdRXYUsdvKC9YWpXXlgAAABI"]
[Sun Mar 22 19:28:54.216305 2026] [:error] [pid 30166:tid 30196] [client 20.203.162.101:34541] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "ab_Sdrm4_26jKMD0zy3XHgAAAVM"]
[Sun Mar 22 19:28:55.154312 2026] [:error] [pid 51363:tid 51454] [client 20.203.162.101:34554] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "ab_Sd1wa9x6OCTRkhl2ZhwAAAJg"]
[Sun Mar 22 19:28:56.178851 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:11983] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "ab_SeLm4_26jKMD0zy3XIAAAAUE"]
[Sun Mar 22 19:28:56.790707 2026] [:error] [pid 30166:tid 30191] [client 20.203.162.101:18215] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "ab_SeLm4_26jKMD0zy3XIwAAAVA"]
[Sun Mar 22 19:28:57.405438 2026] [:error] [pid 51361:tid 51379] [client 20.203.162.101:27368] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "ab_SeRXYUsdvKC9YWpXXmAAAAAg"]
[Sun Mar 22 19:28:58.215572 2026] [:error] [pid 51362:tid 51421] [client 20.203.162.101:14831] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.php"] [unique_id "ab_SesOwPm3DXzTDjUeo6wAAAFQ"]
[Sun Mar 22 19:28:59.220350 2026] [:error] [pid 51361:tid 51375] [client 20.203.162.101:13287] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.php"] [unique_id "ab_SexXYUsdvKC9YWpXXmgAAAAQ"]
[Sun Mar 22 19:29:01.620078 2026] [:error] [pid 51361:tid 51384] [client 20.203.162.101:30945] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.php"] [unique_id "ab_SfRXYUsdvKC9YWpXXngAAAA0"]
[Sun Mar 22 19:29:03.419290 2026] [:error] [pid 51362:tid 51401] [client 20.203.162.101:15191] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.php"] [unique_id "ab_Sf8OwPm3DXzTDjUeo9wAAAEE"]
[Sun Mar 22 19:29:04.608048 2026] [:error] [pid 51362:tid 51421] [client 20.203.162.101:13285] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "ab_SgMOwPm3DXzTDjUeo-wAAAFQ"]
[Sun Mar 22 19:29:06.171021 2026] [:error] [pid 40039:tid 40055] [client 20.203.162.101:13308] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "ab_Sgh3aDgUJfBYishmoOAAAAQ4"]
[Sun Mar 22 19:29:06.854104 2026] [:error] [pid 51363:tid 51433] [client 20.203.162.101:8128] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "ab_Sglwa9x6OCTRkhl2ZpQAAAIU"]
[Sun Mar 22 19:29:08.801016 2026] [:error] [pid 51361:tid 51391] [client 20.203.162.101:16296] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "ab_ShBXYUsdvKC9YWpXXoAAAABM"]
[Sun Mar 22 19:29:10.017394 2026] [:error] [pid 51361:tid 51397] [client 20.203.162.101:12106] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "ab_ShhXYUsdvKC9YWpXXogAAABg"]
[Sun Mar 22 19:29:10.715298 2026] [:error] [pid 40039:tid 40052] [client 20.203.162.101:13279] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "ab_Shh3aDgUJfBYishmoPQAAAQs"]
[Sun Mar 22 19:29:11.633001 2026] [:error] [pid 40039:tid 40053] [client 20.203.162.101:8180] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "ab_Shx3aDgUJfBYishmoPgAAAQw"]
[Sun Mar 22 19:29:12.990317 2026] [:error] [pid 51363:tid 51432] [client 20.203.162.101:16565] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "ab_SiFwa9x6OCTRkhl2ZsgAAAIQ"]
[Sun Mar 22 19:29:14.824862 2026] [:error] [pid 30166:tid 30198] [client 20.203.162.101:36293] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "ab_Sirm4_26jKMD0zy3XPQAAAVU"]
[Sun Mar 22 19:29:16.165465 2026] [:error] [pid 30166:tid 30197] [client 20.203.162.101:12020] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "ab_SjLm4_26jKMD0zy3XRQAAAVQ"]
[Sun Mar 22 19:29:17.844148 2026] [:error] [pid 51363:tid 51446] [client 20.203.162.101:14786] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "ab_SjVwa9x6OCTRkhl2ZwgAAAJA"]
[Sun Mar 22 19:29:19.225453 2026] [:error] [pid 40039:tid 40063] [client 20.203.162.101:14285] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "ab_Sjx3aDgUJfBYishmoRgAAARY"]
[Sun Mar 22 19:29:22.203001 2026] [:error] [pid 40039:tid 40047] [client 20.203.162.101:18200] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "ab_Skh3aDgUJfBYishmoTQAAAQY"]
[Sun Mar 22 19:29:25.591196 2026] [:error] [pid 30166:tid 30177] [client 20.203.162.101:20985] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "ab_Slbm4_26jKMD0zy3XVQAAAUY"]
[Sun Mar 22 19:29:26.841447 2026] [:error] [pid 51363:tid 51439] [client 20.203.162.101:13986] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "ab_Sllwa9x6OCTRkhl2ZzwAAAIo"]
[Sun Mar 22 19:29:28.492274 2026] [:error] [pid 51363:tid 51440] [client 20.203.162.101:13250] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "ab_SmFwa9x6OCTRkhl2Z0gAAAIs"]
[Sun Mar 22 19:29:30.001896 2026] [:error] [pid 51468:tid 51491] [client 20.203.162.101:11901] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swallowable.php"] [unique_id "ab_Smk2TppSvA8W5CBRF3gAAAM8"]
[Sun Mar 22 19:29:32.501206 2026] [:error] [pid 51468:tid 51490] [client 20.203.162.101:14802] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swallowable.php"] [unique_id "ab_SnE2TppSvA8W5CBRF6AAAAM4"]
[Sun Mar 22 19:29:42.679684 2026] [:error] [pid 51363:tid 51451] [client 20.203.162.101:18236] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_Splwa9x6OCTRkhl2Z_gAAAJU"]
[Sun Mar 22 19:29:44.169670 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:15827] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_SqLm4_26jKMD0zy3XewAAAUU"]
[Sun Mar 22 19:29:45.171534 2026] [:error] [pid 40039:tid 40051] [client 20.203.162.101:35084] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_SqR3aDgUJfBYishmoXgAAAQo"]
[Sun Mar 22 19:29:46.494299 2026] [:error] [pid 40039:tid 40058] [client 20.203.162.101:12927] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_Sqh3aDgUJfBYishmoZgAAARE"]
[Sun Mar 22 19:29:47.553713 2026] [:error] [pid 40039:tid 40059] [client 20.203.162.101:14545] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "ab_Sqx3aDgUJfBYishmoaQAAARI"]
[Sun Mar 22 19:29:48.291816 2026] [:error] [pid 40039:tid 40061] [client 20.203.162.101:10524] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "ab_SrB3aDgUJfBYishmoawAAARQ"]
[Sun Mar 22 19:29:49.057761 2026] [:error] [pid 51468:tid 51479] [client 20.203.162.101:14635] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "ab_SrU2TppSvA8W5CBRF_wAAAMM"]
[Sun Mar 22 19:29:49.923859 2026] [:error] [pid 51468:tid 51494] [client 20.203.162.101:10509] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "ab_SrU2TppSvA8W5CBRGAwAAANI"]
[Sun Mar 22 19:29:50.575083 2026] [:error] [pid 30166:tid 30189] [client 20.203.162.101:10825] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "ab_Srrm4_26jKMD0zy3XkwAAAU4"]
[Sun Mar 22 19:29:51.443162 2026] [:error] [pid 51362:tid 51417] [client 20.203.162.101:12902] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "ab_Sr8OwPm3DXzTDjUepLQAAAFA"]
[Sun Mar 22 19:29:52.570135 2026] [:error] [pid 51468:tid 51497] [client 20.203.162.101:7190] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "ab_SsE2TppSvA8W5CBRGBQAAANU"]
[Sun Mar 22 19:29:53.826771 2026] [:error] [pid 30166:tid 30184] [client 20.203.162.101:44513] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "ab_Ssbm4_26jKMD0zy3XlwAAAUk"]
[Sun Mar 22 19:29:55.161112 2026] [:error] [pid 51362:tid 51420] [client 20.203.162.101:12914] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "ab_Ss8OwPm3DXzTDjUepMQAAAFM"]
[Sun Mar 22 19:29:56.160651 2026] [:error] [pid 40039:tid 40051] [client 20.203.162.101:12690] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "ab_StB3aDgUJfBYishmobgAAAQo"]
[Sun Mar 22 19:29:57.263383 2026] [:error] [pid 51362:tid 51411] [client 20.203.162.101:21774] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "ab_StcOwPm3DXzTDjUepNgAAAEo"]
[Sun Mar 22 19:29:58.023636 2026] [:error] [pid 51362:tid 51414] [client 20.203.162.101:8915] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "ab_StsOwPm3DXzTDjUepOgAAAE0"]
[Sun Mar 22 19:30:01.558520 2026] [:error] [pid 51468:tid 51482] [client 20.203.162.101:9353] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "ab_SuU2TppSvA8W5CBRGEwAAAMY"]
[Sun Mar 22 19:30:03.158630 2026] [:error] [pid 30166:tid 30185] [client 20.203.162.101:8908] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "ab_Su7m4_26jKMD0zy3XpgAAAUo"]
[Sun Mar 22 19:30:05.357862 2026] [:error] [pid 51363:tid 51454] [client 20.203.162.101:44489] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "ab_SvVwa9x6OCTRkhl2aCgAAAJg"]
[Sun Mar 22 19:30:06.759337 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:21777] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "ab_SvsOwPm3DXzTDjUepRwAAAEM"]
[Sun Mar 22 19:30:07.505413 2026] [:error] [pid 51362:tid 51406] [client 20.203.162.101:11015] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "ab_Sv8OwPm3DXzTDjUepSwAAAEU"]
[Sun Mar 22 19:30:09.348200 2026] [:error] [pid 51362:tid 51407] [client 20.203.162.101:36915] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "ab_SwcOwPm3DXzTDjUepTgAAAEY"]
[Sun Mar 22 19:30:10.224172 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:9547] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "ab_SwsOwPm3DXzTDjUepUgAAAFg"]
[Sun Mar 22 19:30:13.505111 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:8521] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "ab_SxcOwPm3DXzTDjUepXQAAAE8"]
[Sun Mar 22 19:30:14.169633 2026] [:error] [pid 51363:tid 51448] [client 20.203.162.101:16602] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "ab_Sxlwa9x6OCTRkhl2aEwAAAJI"]
[Sun Mar 22 19:31:12.439579 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:18225] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "ab_TAMOwPm3DXzTDjUep6AAAAEk"]
[Sun Mar 22 19:31:14.260827 2026] [:error] [pid 30166:tid 30197] [client 20.203.162.101:10089] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "ab_TArm4_26jKMD0zy3X7wAAAVQ"]
[Sun Mar 22 19:31:17.310494 2026] [:error] [pid 51362:tid 51417] [client 20.203.162.101:10111] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "ab_TBcOwPm3DXzTDjUep9gAAAFA"]
[Sun Mar 22 19:31:19.556727 2026] [:error] [pid 40039:tid 40045] [client 20.203.162.101:1728] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "ab_TBx3aDgUJfBYishmo2AAAAQQ"]
[Sun Mar 22 19:31:21.375164 2026] [:error] [pid 51361:tid 51376] [client 20.203.162.101:13659] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "ab_TCRXYUsdvKC9YWpXX6wAAAAU"]
[Sun Mar 22 19:31:22.650989 2026] [:error] [pid 30166:tid 30201] [client 20.203.162.101:45702] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "ab_TCrm4_26jKMD0zy3YAgAAAVg"]
[Sun Mar 22 19:31:24.017454 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:36252] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "ab_TDMOwPm3DXzTDjUeqAQAAAEg"]
[Sun Mar 22 19:31:25.474422 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:9044] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "ab_TDcOwPm3DXzTDjUeqDwAAAFU"]
[Sun Mar 22 19:31:26.779805 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:27814] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "ab_TDsOwPm3DXzTDjUeqGAAAAEM"]
[Sun Mar 22 19:31:28.150693 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:36280] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "ab_TEMOwPm3DXzTDjUeqIwAAAEs"]
[Sun Mar 22 19:31:28.979413 2026] [:error] [pid 30166:tid 30196] [client 20.203.162.101:27804] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "ab_TELm4_26jKMD0zy3YCAAAAVM"]
[Sun Mar 22 19:31:30.014719 2026] [:error] [pid 51468:tid 51485] [client 20.203.162.101:11370] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "ab_TEk2TppSvA8W5CBRGSQAAAMk"]
[Sun Mar 22 19:31:31.096181 2026] [:error] [pid 51468:tid 51496] [client 20.203.162.101:25792] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "ab_TE02TppSvA8W5CBRGTQAAANQ"]
[Sun Mar 22 19:31:32.637414 2026] [:error] [pid 30166:tid 30199] [client 20.203.162.101:12960] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "ab_TFLm4_26jKMD0zy3YGAAAAVY"]
[Sun Mar 22 19:31:35.038885 2026] [:error] [pid 51468:tid 51486] [client 20.203.162.101:10353] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "ab_TF02TppSvA8W5CBRGVgAAAMo"]
[Sun Mar 22 19:31:35.889148 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:12952] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "ab_TF8OwPm3DXzTDjUeqPwAAAE8"]
[Sun Mar 22 19:31:36.634517 2026] [:error] [pid 51468:tid 51500] [client 20.203.162.101:11356] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "ab_TGE2TppSvA8W5CBRGWQAAANg"]
[Sun Mar 22 19:31:38.164507 2026] [:error] [pid 51468:tid 51481] [client 20.203.162.101:45779] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "ab_TGk2TppSvA8W5CBRGWgAAAMU"]
[Sun Mar 22 19:31:39.393763 2026] [:error] [pid 51361:tid 51385] [client 20.203.162.101:1593] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "ab_TGxXYUsdvKC9YWpXX-QAAAA4"]
[Sun Mar 22 19:31:41.138216 2026] [:error] [pid 51361:tid 51387] [client 20.203.162.101:9050] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "ab_THRXYUsdvKC9YWpXX_wAAAA8"]
[Sun Mar 22 19:31:42.526421 2026] [:error] [pid 51362:tid 51400] [client 20.203.162.101:12391] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ab_THsOwPm3DXzTDjUeqUQAAAEA"]
[Sun Mar 22 19:31:44.390663 2026] [:error] [pid 40039:tid 40043] [client 20.203.162.101:9214] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ab_TIB3aDgUJfBYishmo8AAAAQI"]
[Sun Mar 22 19:31:45.127410 2026] [:error] [pid 51468:tid 51480] [client 20.203.162.101:14429] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ab_TIU2TppSvA8W5CBRGZwAAAMQ"]
[Sun Mar 22 19:31:46.194268 2026] [:error] [pid 51361:tid 51395] [client 20.203.162.101:15592] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ab_TIhXYUsdvKC9YWpXYCAAAABY"]
[Sun Mar 22 19:31:47.784295 2026] [:error] [pid 30166:tid 30191] [client 20.203.162.101:25832] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "ab_TI7m4_26jKMD0zy3YKwAAAVA"]
[Sun Mar 22 19:31:48.716116 2026] [:error] [pid 51362:tid 51425] [client 20.203.162.101:10615] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "ab_TJMOwPm3DXzTDjUeqYQAAAFg"]
[Sun Mar 22 19:31:49.603484 2026] [:error] [pid 51362:tid 51407] [client 20.203.162.101:20158] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "ab_TJcOwPm3DXzTDjUeqYgAAAEY"]
[Sun Mar 22 19:31:50.507446 2026] [:error] [pid 51362:tid 51406] [client 20.203.162.101:45764] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "ab_TJsOwPm3DXzTDjUeqZgAAAEU"]
[Sun Mar 22 19:31:52.065352 2026] [:error] [pid 51363:tid 51432] [client 20.203.162.101:20118] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab_TKFwa9x6OCTRkhl2atgAAAIQ"]
[Sun Mar 22 19:31:53.256915 2026] [:error] [pid 40039:tid 40054] [client 20.203.162.101:9051] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab_TKR3aDgUJfBYishmo-gAAAQ0"]
[Sun Mar 22 19:31:54.656921 2026] [:error] [pid 51363:tid 51447] [client 20.203.162.101:9190] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab_TKlwa9x6OCTRkhl2auwAAAJE"]
[Sun Mar 22 19:31:55.296040 2026] [:error] [pid 51363:tid 51454] [client 20.203.162.101:9279] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "ab_TK1wa9x6OCTRkhl2avwAAAJg"]
[Sun Mar 22 19:31:55.990757 2026] [:error] [pid 30166:tid 30196] [client 20.203.162.101:11331] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ab_TK7m4_26jKMD0zy3YMAAAAVM"]
[Sun Mar 22 19:31:58.169710 2026] [:error] [pid 40039:tid 40052] [client 20.203.162.101:12937] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ab_TLh3aDgUJfBYishmpBwAAAQs"]
[Sun Mar 22 19:31:58.850942 2026] [:error] [pid 51363:tid 51442] [client 20.203.162.101:10590] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ab_TLlwa9x6OCTRkhl2axgAAAI0"]
[Sun Mar 22 19:32:00.490252 2026] [:error] [pid 51361:tid 51387] [client 20.203.162.101:11382] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ab_TMBXYUsdvKC9YWpXYGQAAAA8"]
[Sun Mar 22 19:32:01.084103 2026] [:error] [pid 40039:tid 40057] [client 20.203.162.101:9198] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "ab_TMR3aDgUJfBYishmpDQAAARA"]
[Sun Mar 22 19:32:02.129302 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:10568] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "ab_TMsOwPm3DXzTDjUeqcgAAAEs"]
[Sun Mar 22 19:32:03.233387 2026] [:error] [pid 30166:tid 30190] [client 20.203.162.101:7339] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "ab_TM7m4_26jKMD0zy3YOgAAAU8"]
[Sun Mar 22 19:32:04.028817 2026] [:error] [pid 51362:tid 51417] [client 20.203.162.101:15715] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "ab_TNMOwPm3DXzTDjUeqdAAAAFA"]
[Sun Mar 22 19:32:04.995677 2026] [:error] [pid 51362:tid 51408] [client 20.203.162.101:10359] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "ab_TNMOwPm3DXzTDjUeqdgAAAEc"]
[Sun Mar 22 19:32:05.766299 2026] [:error] [pid 51361:tid 51397] [client 20.203.162.101:9139] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "ab_TNRXYUsdvKC9YWpXYHgAAABg"]
[Sun Mar 22 19:32:06.580852 2026] [:error] [pid 51361:tid 51395] [client 20.203.162.101:15600] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "ab_TNhXYUsdvKC9YWpXYIAAAABY"]
[Sun Mar 22 19:32:07.731976 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:10610] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "ab_TN7m4_26jKMD0zy3YPgAAAUE"]
[Sun Mar 22 19:32:08.841560 2026] [:error] [pid 30166:tid 30199] [client 20.203.162.101:49357] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ab_TOLm4_26jKMD0zy3YRAAAAVY"]
[Sun Mar 22 19:32:09.862398 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:10336] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ab_TOcOwPm3DXzTDjUeqegAAAE8"]
[Sun Mar 22 19:32:10.459779 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:11712] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ab_TOrm4_26jKMD0zy3YTAAAAUE"]
[Sun Mar 22 19:32:11.845483 2026] [:error] [pid 51363:tid 51436] [client 20.203.162.101:11752] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ab_TO1wa9x6OCTRkhl2a1gAAAIc"]
[Sun Mar 22 19:32:21.900250 2026] [:error] [pid 51468:tid 51476] [client 20.203.162.101:1554] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ab_TRU2TppSvA8W5CBRGjAAAAMA"]
[Sun Mar 22 19:32:24.918407 2026] [:error] [pid 30166:tid 30192] [client 20.203.162.101:7329] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ab_TSLm4_26jKMD0zy3YagAAAVE"]
[Sun Mar 22 19:32:25.873697 2026] [:error] [pid 51363:tid 51450] [client 20.203.162.101:15737] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ab_TSVwa9x6OCTRkhl2bAgAAAJQ"]
[Sun Mar 22 19:32:27.144273 2026] [:error] [pid 30166:tid 30190] [client 20.203.162.101:15743] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ab_TS7m4_26jKMD0zy3YdQAAAU8"]
[Sun Mar 22 19:32:28.246196 2026] [:error] [pid 30166:tid 30192] [client 20.203.162.101:10574] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "ab_TTLm4_26jKMD0zy3YeQAAAVE"]
[Sun Mar 22 19:32:29.244554 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:12690] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "ab_TTcOwPm3DXzTDjUeqsQAAAEk"]
[Sun Mar 22 19:32:30.423582 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:11726] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "ab_TTrm4_26jKMD0zy3YfQAAAUU"]
[Sun Mar 22 19:32:31.264435 2026] [:error] [pid 40039:tid 40050] [client 20.203.162.101:1596] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "ab_TTx3aDgUJfBYishmpLwAAAQk"]
[Sun Mar 22 19:32:32.443412 2026] [:error] [pid 51361:tid 51387] [client 20.203.162.101:17795] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ab_TUBXYUsdvKC9YWpXYKQAAAA8"]
[Sun Mar 22 19:32:33.476254 2026] [:error] [pid 51468:tid 51491] [client 20.203.162.101:14760] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ab_TUU2TppSvA8W5CBRGngAAAM8"]
[Sun Mar 22 19:32:34.521933 2026] [:error] [pid 51468:tid 51478] [client 20.203.162.101:11773] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ab_TUk2TppSvA8W5CBRGoAAAAMI"]
[Sun Mar 22 19:32:37.000879 2026] [:error] [pid 51362:tid 51402] [client 20.203.162.101:9452] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ab_TVMOwPm3DXzTDjUeqyAAAAEI"]
[Sun Mar 22 19:32:37.845350 2026] [:error] [pid 51363:tid 51437] [client 20.203.162.101:49377] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "ab_TVVwa9x6OCTRkhl2bHgAAAIg"]
[Sun Mar 22 19:32:38.887861 2026] [:error] [pid 51363:tid 51440] [client 20.203.162.101:45773] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "ab_TVlwa9x6OCTRkhl2bKQAAAIs"]
[Sun Mar 22 19:32:39.676047 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:14732] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "ab_TV8OwPm3DXzTDjUeq0AAAAEk"]
[Sun Mar 22 19:32:40.296085 2026] [:error] [pid 40039:tid 40057] [client 20.203.162.101:9067] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "ab_TWB3aDgUJfBYishmpPwAAARA"]
[Sun Mar 22 19:32:41.116407 2026] [:error] [pid 40039:tid 40048] [client 20.203.162.101:22687] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "ab_TWR3aDgUJfBYishmpQQAAAQc"]
[Sun Mar 22 19:32:42.078629 2026] [:error] [pid 51363:tid 51434] [client 20.203.162.101:13287] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "ab_TWlwa9x6OCTRkhl2bNAAAAIY"]
[Sun Mar 22 19:32:43.440389 2026] [:error] [pid 40039:tid 40041] [client 20.203.162.101:29929] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "ab_TWx3aDgUJfBYishmpRAAAAQA"]
[Sun Mar 22 19:32:44.291210 2026] [:error] [pid 40039:tid 40062] [client 20.203.162.101:7290] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "ab_TXB3aDgUJfBYishmpRQAAARU"]
[Sun Mar 22 19:32:46.301833 2026] [:error] [pid 51468:tid 51499] [client 20.203.162.101:15718] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ab_TXk2TppSvA8W5CBRGrwAAANc"]
[Sun Mar 22 19:32:47.677649 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:15702] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ab_TX8OwPm3DXzTDjUeq7wAAAEg"]
[Sun Mar 22 19:32:48.523170 2026] [:error] [pid 51361:tid 51396] [client 20.203.162.101:13855] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ab_TYBXYUsdvKC9YWpXYQAAAABc"]
[Sun Mar 22 19:32:49.608792 2026] [:error] [pid 51361:tid 51378] [client 20.203.162.101:9424] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ab_TYRXYUsdvKC9YWpXYRAAAAAc"]
[Sun Mar 22 19:32:50.464465 2026] [:error] [pid 51363:tid 51436] [client 20.203.162.101:15707] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "ab_TYlwa9x6OCTRkhl2bPQAAAIc"]
[Sun Mar 22 19:32:51.241214 2026] [:error] [pid 51468:tid 51498] [client 20.203.162.101:15722] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "ab_TY02TppSvA8W5CBRGtAAAANY"]
[Sun Mar 22 19:32:52.170966 2026] [:error] [pid 30166:tid 30189] [client 20.203.162.101:14781] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "ab_TZLm4_26jKMD0zy3YoAAAAU4"]
[Sun Mar 22 19:32:53.741621 2026] [:error] [pid 51363:tid 51437] [client 20.203.162.101:7335] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "ab_TZVwa9x6OCTRkhl2bRQAAAIg"]
[Sun Mar 22 19:32:54.428397 2026] [:error] [pid 40039:tid 40041] [client 20.203.162.101:11422] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "ab_TZh3aDgUJfBYishmpVQAAAQA"]
[Sun Mar 22 19:32:55.416158 2026] [:error] [pid 51468:tid 51482] [client 20.203.162.101:9435] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "ab_TZ02TppSvA8W5CBRGvAAAAMY"]
[Sun Mar 22 19:32:57.177696 2026] [:error] [pid 51362:tid 51420] [client 20.203.162.101:49396] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "ab_TacOwPm3DXzTDjUerBAAAAFM"]
[Sun Mar 22 19:32:58.128740 2026] [:error] [pid 30166:tid 30190] [client 20.203.162.101:24017] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "ab_Tarm4_26jKMD0zy3YsQAAAU8"]
[Sun Mar 22 19:33:01.687030 2026] [:error] [pid 30166:tid 30187] [client 20.203.162.101:7250] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ab_Tbbm4_26jKMD0zy3YswAAAUw"]
[Sun Mar 22 19:33:59.286464 2026] [:error] [pid 51361:tid 51391] [client 20.203.162.101:15695] [client 20.203.162.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ab_TpxXYUsdvKC9YWpXYnQAAABM"]
[Sun Mar 22 19:34:04.633803 2026] [:error] [pid 30166:tid 30188] [client 20.203.162.101:19782] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "ab_TrLm4_26jKMD0zy3ZMQAAAU0"]
[Sun Mar 22 19:34:05.551720 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:19799] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "ab_TrcOwPm3DXzTDjUerdAAAAEM"]
[Sun Mar 22 19:34:06.380901 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:15681] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "ab_TrsOwPm3DXzTDjUerdwAAAE8"]
[Sun Mar 22 19:34:07.650002 2026] [:error] [pid 51363:tid 51431] [client 20.203.162.101:7296] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "ab_Tr1wa9x6OCTRkhl2cJAAAAIM"]
[Sun Mar 22 19:34:09.384545 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:49334] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "ab_TscOwPm3DXzTDjUerfwAAAEw"]
[Sun Mar 22 19:34:10.583709 2026] [:error] [pid 51363:tid 51429] [client 20.203.162.101:17815] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "ab_Tslwa9x6OCTRkhl2cKAAAAIE"]
[Sun Mar 22 19:34:14.249532 2026] [:error] [pid 40039:tid 40062] [client 20.203.162.101:24003] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "ab_Tth3aDgUJfBYishmplQAAARU"]
[Sun Mar 22 19:34:15.624357 2026] [:error] [pid 40039:tid 40059] [client 20.203.162.101:19783] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "ab_Ttx3aDgUJfBYishmpmwAAARI"]
[Sun Mar 22 19:34:17.033595 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:24063] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "ab_Tubm4_26jKMD0zy3ZQQAAAUU"]
[Sun Mar 22 19:34:18.465704 2026] [:error] [pid 40039:tid 40063] [client 20.203.162.101:29924] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "ab_Tuh3aDgUJfBYishmpogAAARY"]
[Sun Mar 22 19:34:19.291587 2026] [:error] [pid 51468:tid 51500] [client 20.203.162.101:13844] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "ab_Tu02TppSvA8W5CBRHJgAAANg"]
[Sun Mar 22 19:34:21.080307 2026] [:error] [pid 51468:tid 51482] [client 20.203.162.101:8366] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "ab_TvU2TppSvA8W5CBRHJwAAAMY"]
[Sun Mar 22 19:34:22.245972 2026] [:error] [pid 51362:tid 51409] [client 20.203.162.101:16638] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "ab_TvsOwPm3DXzTDjUerjAAAAEg"]
[Sun Mar 22 19:34:23.500337 2026] [:error] [pid 51362:tid 51405] [client 20.203.162.101:22704] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "ab_Tv8OwPm3DXzTDjUerjgAAAEQ"]
[Sun Mar 22 19:34:24.429133 2026] [:error] [pid 30166:tid 30193] [client 20.203.162.101:45812] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "ab_TwLm4_26jKMD0zy3ZewAAAVI"]
[Sun Mar 22 19:34:25.605121 2026] [:error] [pid 51468:tid 51485] [client 20.203.162.101:14232] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "ab_TwU2TppSvA8W5CBRHLQAAAMk"]
[Sun Mar 22 19:34:27.431305 2026] [:error] [pid 51468:tid 51495] [client 20.203.162.101:49336] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "ab_Tw02TppSvA8W5CBRHMAAAANM"]
[Sun Mar 22 19:34:28.466119 2026] [:error] [pid 51362:tid 51415] [client 20.203.162.101:12178] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "ab_TxMOwPm3DXzTDjUerlQAAAE4"]
[Sun Mar 22 19:34:29.293296 2026] [:error] [pid 40039:tid 40045] [client 20.203.162.101:17832] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "ab_TxR3aDgUJfBYishmqWgAAAQQ"]
[Sun Mar 22 19:34:30.462796 2026] [:error] [pid 40039:tid 40058] [client 20.203.162.101:9391] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "ab_Txh3aDgUJfBYishmqXAAAARE"]
[Sun Mar 22 19:34:32.184787 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:24013] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ab_TyMOwPm3DXzTDjUernQAAAEM"]
[Sun Mar 22 19:34:33.011148 2026] [:error] [pid 51363:tid 51430] [client 20.203.162.101:11060] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ab_TyVwa9x6OCTRkhl2cTAAAAII"]
[Sun Mar 22 19:34:34.072409 2026] [:error] [pid 51363:tid 51443] [client 20.203.162.101:11411] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ab_Tylwa9x6OCTRkhl2cUwAAAI4"]
[Sun Mar 22 19:34:35.149845 2026] [:error] [pid 51361:tid 51397] [client 20.203.162.101:16579] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ab_TyxXYUsdvKC9YWpXYtQAAABg"]
[Sun Mar 22 19:34:35.921109 2026] [:error] [pid 30166:tid 30192] [client 20.203.162.101:9362] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "ab_Ty7m4_26jKMD0zy3ZiAAAAVE"]
[Sun Mar 22 19:34:36.814459 2026] [:error] [pid 51362:tid 51410] [client 20.203.162.101:12201] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "ab_TzMOwPm3DXzTDjUerpQAAAEk"]
[Sun Mar 22 19:34:37.840260 2026] [:error] [pid 51362:tid 51424] [client 20.203.162.101:24005] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "ab_TzcOwPm3DXzTDjUerqwAAAFc"]
[Sun Mar 22 19:34:38.758169 2026] [:error] [pid 51362:tid 51415] [client 20.203.162.101:8521] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "ab_TzsOwPm3DXzTDjUerrgAAAE4"]
[Sun Mar 22 19:34:40.873488 2026] [:error] [pid 51363:tid 51454] [client 20.203.162.101:11016] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "ab_T0Fwa9x6OCTRkhl2cXAAAAJg"]
[Sun Mar 22 19:34:41.751764 2026] [:error] [pid 51363:tid 51448] [client 20.203.162.101:8376] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "ab_T0Vwa9x6OCTRkhl2cYQAAAJI"]
[Sun Mar 22 19:34:42.627516 2026] [:error] [pid 30166:tid 30173] [client 20.203.162.101:1492] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "ab_T0rm4_26jKMD0zy3ZmgAAAUI"]
[Sun Mar 22 19:34:43.835203 2026] [:error] [pid 30166:tid 30197] [client 20.203.162.101:45066] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "ab_T07m4_26jKMD0zy3ZoAAAAVQ"]
[Sun Mar 22 19:34:44.848119 2026] [:error] [pid 51361:tid 51388] [client 20.203.162.101:36906] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "ab_T1BXYUsdvKC9YWpXYwgAAABA"]
[Sun Mar 22 19:34:45.835181 2026] [:error] [pid 51363:tid 51444] [client 20.203.162.101:36902] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "ab_T1Vwa9x6OCTRkhl2ccQAAAI8"]
[Sun Mar 22 19:34:47.093450 2026] [:error] [pid 51363:tid 51447] [client 20.203.162.101:24020] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "ab_T11wa9x6OCTRkhl2cdwAAAJE"]
[Sun Mar 22 19:34:49.069254 2026] [:error] [pid 51363:tid 51438] [client 20.203.162.101:24008] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/re.php"] [unique_id "ab_T2Vwa9x6OCTRkhl2cgwAAAIk"]
[Sun Mar 22 19:34:50.080994 2026] [:error] [pid 51361:tid 51384] [client 20.203.162.101:1511] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "ab_T2hXYUsdvKC9YWpXYxQAAAA0"]
[Sun Mar 22 19:34:51.520891 2026] [:error] [pid 51362:tid 51414] [client 20.203.162.101:8551] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "ab_T28OwPm3DXzTDjUerwgAAAE0"]
[Sun Mar 22 19:34:54.341050 2026] [:error] [pid 51363:tid 51436] [client 20.203.162.101:14115] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "ab_T3lwa9x6OCTRkhl2clgAAAIc"]
[Sun Mar 22 19:34:55.456598 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:36913] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "ab_T38OwPm3DXzTDjUer0wAAAEw"]
[Sun Mar 22 19:34:56.633128 2026] [:error] [pid 51468:tid 51477] [client 20.203.162.101:11119] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "ab_T4E2TppSvA8W5CBRHSAAAAME"]
[Sun Mar 22 19:34:58.529493 2026] [:error] [pid 51468:tid 51482] [client 20.203.162.101:13527] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "ab_T4k2TppSvA8W5CBRHUAAAAMY"]
[Sun Mar 22 19:34:59.394178 2026] [:error] [pid 40039:tid 40048] [client 20.203.162.101:13434] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "ab_T4x3aDgUJfBYishmqggAAAQc"]
[Sun Mar 22 19:35:00.122315 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:21304] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "ab_T5MOwPm3DXzTDjUer4AAAAEM"]
[Sun Mar 22 19:35:01.079474 2026] [:error] [pid 51361:tid 51387] [client 20.203.162.101:44524] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "ab_T5RXYUsdvKC9YWpXYzQAAAA8"]
[Sun Mar 22 19:35:02.614515 2026] [:error] [pid 51363:tid 51432] [client 20.203.162.101:12090] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "ab_T5lwa9x6OCTRkhl2cpQAAAIQ"]
[Sun Mar 22 19:35:03.657501 2026] [:error] [pid 51468:tid 51484] [client 20.203.162.101:12708] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "ab_T502TppSvA8W5CBRHVAAAAMg"]
[Sun Mar 22 19:35:15.409414 2026] [:error] [pid 51468:tid 51477] [client 20.203.162.101:13532] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "ab_T802TppSvA8W5CBRHbQAAAME"]
[Sun Mar 22 19:35:16.582307 2026] [:error] [pid 30166:tid 30198] [client 20.203.162.101:13526] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "ab_T9Lm4_26jKMD0zy3ZugAAAVU"]
[Sun Mar 22 19:35:17.325276 2026] [:error] [pid 51363:tid 51441] [client 20.203.162.101:36866] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "ab_T9Vwa9x6OCTRkhl2cwQAAAIw"]
[Sun Mar 22 19:35:18.261075 2026] [:error] [pid 51363:tid 51437] [client 20.203.162.101:8782] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "ab_T9lwa9x6OCTRkhl2cxQAAAIg"]
[Sun Mar 22 19:35:19.559154 2026] [:error] [pid 51363:tid 51446] [client 20.203.162.101:8773] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "ab_T91wa9x6OCTRkhl2czgAAAJA"]
[Sun Mar 22 19:35:20.610525 2026] [:error] [pid 51363:tid 51433] [client 20.203.162.101:7191] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "ab_T-Fwa9x6OCTRkhl2c1gAAAIU"]
[Sun Mar 22 19:35:21.417801 2026] [:error] [pid 51362:tid 51423] [client 20.203.162.101:1368] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "ab_T-cOwPm3DXzTDjUesIQAAAFY"]
[Sun Mar 22 19:35:22.345487 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:45089] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "ab_T-sOwPm3DXzTDjUesJAAAAE8"]
[Sun Mar 22 19:35:24.072913 2026] [:error] [pid 51362:tid 51421] [client 20.203.162.101:1534] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "ab_T_MOwPm3DXzTDjUesKwAAAFQ"]
[Sun Mar 22 19:35:25.241318 2026] [:error] [pid 40039:tid 40043] [client 20.203.162.101:9420] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "ab_T_R3aDgUJfBYishmqlgAAAQI"]
[Sun Mar 22 19:35:26.197001 2026] [:error] [pid 30166:tid 30193] [client 20.203.162.101:15023] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "ab_T_rm4_26jKMD0zy3ZwQAAAVI"]
[Sun Mar 22 19:35:26.971357 2026] [:error] [pid 51363:tid 51441] [client 20.203.162.101:49343] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "ab_T_lwa9x6OCTRkhl2c6QAAAIw"]
[Sun Mar 22 19:35:27.756373 2026] [:error] [pid 51363:tid 51452] [client 20.203.162.101:22658] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "ab_T_1wa9x6OCTRkhl2c7gAAAJY"]
[Sun Mar 22 19:35:28.576096 2026] [:error] [pid 30166:tid 30196] [client 20.203.162.101:15037] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "ab_UALm4_26jKMD0zy3ZxAAAAVM"]
[Sun Mar 22 19:35:29.338619 2026] [:error] [pid 30166:tid 30190] [client 20.203.162.101:15680] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "ab_UAbm4_26jKMD0zy3ZxgAAAU8"]
[Sun Mar 22 19:35:30.426790 2026] [:error] [pid 30166:tid 30183] [client 20.203.162.101:13867] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "ab_UArm4_26jKMD0zy3ZyQAAAUg"]
[Sun Mar 22 19:35:31.550876 2026] [:error] [pid 51363:tid 51433] [client 20.203.162.101:16041] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "ab_UA1wa9x6OCTRkhl2dAQAAAIU"]
[Sun Mar 22 19:35:32.644954 2026] [:error] [pid 51363:tid 51454] [client 20.203.162.101:17822] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "ab_UBFwa9x6OCTRkhl2dCQAAAJg"]
[Sun Mar 22 19:35:33.717011 2026] [:error] [pid 51468:tid 51480] [client 20.203.162.101:22699] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "ab_UBU2TppSvA8W5CBRHegAAAMQ"]
[Sun Mar 22 19:35:34.266696 2026] [:error] [pid 51363:tid 51429] [client 20.203.162.101:29918] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "ab_UBlwa9x6OCTRkhl2dFQAAAIE"]
[Sun Mar 22 19:35:35.178932 2026] [:error] [pid 51468:tid 51495] [client 20.203.162.101:49395] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "ab_UB02TppSvA8W5CBRHfQAAANM"]
[Sun Mar 22 19:35:37.539906 2026] [:error] [pid 40039:tid 40047] [client 20.203.162.101:11343] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "ab_UCR3aDgUJfBYishmqpwAAAQY"]
[Sun Mar 22 19:35:38.208037 2026] [:error] [pid 30166:tid 30191] [client 20.203.162.101:9229] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "ab_UCrm4_26jKMD0zy3Z1wAAAVA"]
[Sun Mar 22 19:35:39.080459 2026] [:error] [pid 40039:tid 40058] [client 20.203.162.101:20136] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "ab_UCx3aDgUJfBYishmqqQAAARE"]
[Sun Mar 22 19:35:40.432128 2026] [:error] [pid 51468:tid 51476] [client 20.203.162.101:1072] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "ab_UDE2TppSvA8W5CBRHhAAAAMA"]
[Sun Mar 22 19:35:41.238268 2026] [:error] [pid 51362:tid 51420] [client 20.203.162.101:13815] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "ab_UDcOwPm3DXzTDjUesUQAAAFM"]
[Sun Mar 22 19:35:42.882993 2026] [:error] [pid 51361:tid 51375] [client 20.203.162.101:17429] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "ab_UDhXYUsdvKC9YWpXY2QAAAAQ"]
[Sun Mar 22 19:35:43.676905 2026] [:error] [pid 51468:tid 51495] [client 20.203.162.101:15534] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "ab_UD02TppSvA8W5CBRHjgAAANM"]
[Sun Mar 22 19:35:45.149478 2026] [:error] [pid 40039:tid 40049] [client 20.203.162.101:43799] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fffff.php"] [unique_id "ab_UER3aDgUJfBYishmqqgAAAQg"]
[Sun Mar 22 19:35:46.003277 2026] [:error] [pid 51362:tid 51416] [client 20.203.162.101:17420] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fffff.php"] [unique_id "ab_UEsOwPm3DXzTDjUesXwAAAE8"]
[Sun Mar 22 19:35:46.734512 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:19056] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fffff.php"] [unique_id "ab_UEsOwPm3DXzTDjUesYQAAAFI"]
[Sun Mar 22 19:35:47.928209 2026] [:error] [pid 30166:tid 30196] [client 20.203.162.101:15748] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fffff.php"] [unique_id "ab_UE7m4_26jKMD0zy3Z5AAAAVM"]
[Sun Mar 22 19:35:48.626616 2026] [:error] [pid 30166:tid 30185] [client 20.203.162.101:43297] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thh.php"] [unique_id "ab_UFLm4_26jKMD0zy3Z6QAAAUo"]
[Sun Mar 22 19:35:49.342445 2026] [:error] [pid 51361:tid 51397] [client 20.203.162.101:10387] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thh.php"] [unique_id "ab_UFRXYUsdvKC9YWpXY4AAAABg"]
[Sun Mar 22 19:35:50.040112 2026] [:error] [pid 40039:tid 40061] [client 20.203.162.101:43273] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thh.php"] [unique_id "ab_UFh3aDgUJfBYishmqsAAAARQ"]
[Sun Mar 22 19:35:50.976382 2026] [:error] [pid 40039:tid 40054] [client 20.203.162.101:10410] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/thh.php"] [unique_id "ab_UFh3aDgUJfBYishmqtwAAAQ0"]
[Sun Mar 22 19:35:54.629867 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:20514] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "ab_UGsOwPm3DXzTDjUesawAAAEs"]
[Sun Mar 22 19:35:55.439214 2026] [:error] [pid 51362:tid 51418] [client 20.203.162.101:15351] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "ab_UG8OwPm3DXzTDjUescAAAAFE"]
[Sun Mar 22 19:35:56.357992 2026] [:error] [pid 51363:tid 51429] [client 20.203.162.101:13048] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "ab_UHFwa9x6OCTRkhl2dYgAAAIE"]
[Sun Mar 22 19:35:57.323502 2026] [:error] [pid 40039:tid 40049] [client 20.203.162.101:15093] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "ab_UHR3aDgUJfBYishmqugAAAQg"]
[Sun Mar 22 19:35:58.121197 2026] [:error] [pid 51363:tid 51454] [client 20.203.162.101:8729] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wfile.php"] [unique_id "ab_UHlwa9x6OCTRkhl2dZwAAAJg"]
[Sun Mar 22 19:35:59.131526 2026] [:error] [pid 51363:tid 51448] [client 20.203.162.101:10911] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wfile.php"] [unique_id "ab_UH1wa9x6OCTRkhl2dbAAAAJI"]
[Sun Mar 22 19:35:59.983612 2026] [:error] [pid 51363:tid 51429] [client 20.203.162.101:14345] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wfile.php"] [unique_id "ab_UH1wa9x6OCTRkhl2dcgAAAIE"]
[Sun Mar 22 19:36:00.907043 2026] [:error] [pid 51362:tid 51413] [client 20.203.162.101:8244] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wfile.php"] [unique_id "ab_UIMOwPm3DXzTDjUesegAAAEw"]
[Sun Mar 22 19:36:01.738164 2026] [:error] [pid 51468:tid 51487] [client 20.203.162.101:9999] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "ab_UIU2TppSvA8W5CBRHqgAAAMs"]
[Sun Mar 22 19:36:02.585280 2026] [:error] [pid 51468:tid 51485] [client 20.203.162.101:60888] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "ab_UIk2TppSvA8W5CBRHsgAAAMk"]
[Sun Mar 22 19:36:03.764048 2026] [:error] [pid 51363:tid 51450] [client 20.203.162.101:9821] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "ab_UI1wa9x6OCTRkhl2dfgAAAJQ"]
[Sun Mar 22 19:36:05.200874 2026] [:error] [pid 51363:tid 51448] [client 20.203.162.101:8110] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "ab_UJVwa9x6OCTRkhl2dhgAAAJI"]
[Sun Mar 22 19:36:05.798742 2026] [:error] [pid 51468:tid 51493] [client 20.203.162.101:12835] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "ab_UJU2TppSvA8W5CBRHvwAAANE"]
[Sun Mar 22 19:36:07.135154 2026] [:error] [pid 51361:tid 51384] [client 20.203.162.101:12437] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "ab_UJxXYUsdvKC9YWpXY6gAAAA0"]
[Sun Mar 22 19:36:08.288701 2026] [:error] [pid 51362:tid 51402] [client 20.203.162.101:11226] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "ab_UKMOwPm3DXzTDjUeshwAAAEI"]
[Sun Mar 22 19:36:09.931706 2026] [:error] [pid 30166:tid 30197] [client 20.203.162.101:2029] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/build.php"] [unique_id "ab_UKbm4_26jKMD0zy3Z9wAAAVQ"]
[Sun Mar 22 19:36:10.787250 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:1615] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "ab_UKsOwPm3DXzTDjUesiwAAAFU"]
[Sun Mar 22 19:36:14.491167 2026] [:error] [pid 40039:tid 40057] [client 20.203.162.101:26313] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file1.php"] [unique_id "ab_ULh3aDgUJfBYishmqvwAAARA"]
[Sun Mar 22 19:36:26.136609 2026] [:error] [pid 51363:tid 51450] [client 20.203.162.101:16093] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/he.php"] [unique_id "ab_UOlwa9x6OCTRkhl2dugAAAJQ"]
[Sun Mar 22 19:36:26.950968 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:1699] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/he.php"] [unique_id "ab_UOsOwPm3DXzTDjUesvgAAAEs"]
[Sun Mar 22 19:36:27.684862 2026] [:error] [pid 51362:tid 51418] [client 20.203.162.101:45163] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/he.php"] [unique_id "ab_UO8OwPm3DXzTDjUeswAAAAFE"]
[Sun Mar 22 19:36:28.618964 2026] [:error] [pid 30166:tid 30189] [client 20.203.162.101:30424] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/he.php"] [unique_id "ab_UPLm4_26jKMD0zy3aGgAAAU4"]
[Sun Mar 22 19:36:29.726912 2026] [:error] [pid 51361:tid 51373] [client 20.203.162.101:31407] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aves.php"] [unique_id "ab_UPRXYUsdvKC9YWpXY8gAAAAI"]
[Sun Mar 22 19:36:30.751629 2026] [:error] [pid 51363:tid 51447] [client 20.203.162.101:2036] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aves.php"] [unique_id "ab_UPlwa9x6OCTRkhl2dvwAAAJE"]
[Sun Mar 22 19:36:31.542855 2026] [:error] [pid 40039:tid 40045] [client 20.203.162.101:14395] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aves.php"] [unique_id "ab_UPx3aDgUJfBYishmqzQAAAQQ"]
[Sun Mar 22 19:36:32.866399 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:1989] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aves.php"] [unique_id "ab_UQMOwPm3DXzTDjUesyAAAAEs"]
[Sun Mar 22 19:36:33.597896 2026] [:error] [pid 51363:tid 51428] [client 20.203.162.101:9834] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanta.php"] [unique_id "ab_UQVwa9x6OCTRkhl2dyQAAAIA"]
[Sun Mar 22 19:36:34.677960 2026] [:error] [pid 51363:tid 51438] [client 20.203.162.101:35831] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanta.php"] [unique_id "ab_UQlwa9x6OCTRkhl2d0QAAAIk"]
[Sun Mar 22 19:36:36.036122 2026] [:error] [pid 51362:tid 51411] [client 177.181.7.177:15793] [client 177.181.7.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.181.7.177, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_URMOwPm3DXzTDjUeszwAAAEo"]
[Sun Mar 22 19:36:36.058649 2026] [:error] [pid 51363:tid 51448] [client 20.203.162.101:46444] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanta.php"] [unique_id "ab_URFwa9x6OCTRkhl2d1QAAAJI"]
[Sun Mar 22 19:36:37.684948 2026] [:error] [pid 51362:tid 51405] [client 20.203.162.101:2013] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanta.php"] [unique_id "ab_URcOwPm3DXzTDjUes0gAAAEQ"]
[Sun Mar 22 19:36:38.464077 2026] [:error] [pid 51468:tid 51477] [client 20.203.162.101:9792] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "ab_URk2TppSvA8W5CBRH5gAAAME"]
[Sun Mar 22 19:36:39.572599 2026] [:error] [pid 51362:tid 51401] [client 20.203.162.101:14370] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "ab_UR8OwPm3DXzTDjUes1gAAAEE"]
[Sun Mar 22 19:36:40.321054 2026] [:error] [pid 51363:tid 51452] [client 20.203.162.101:11001] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "ab_USFwa9x6OCTRkhl2d5AAAAJY"]
[Sun Mar 22 19:36:40.956671 2026] [:error] [pid 30166:tid 30170] [client 20.203.162.101:11003] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "ab_USLm4_26jKMD0zy3aJAAAAUA"]
[Sun Mar 22 19:36:42.227935 2026] [:error] [pid 40039:tid 40051] [client 20.203.162.101:11655] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "ab_USh3aDgUJfBYishmq0AAAAQo"]
[Sun Mar 22 19:36:43.132246 2026] [:error] [pid 51363:tid 51448] [client 20.203.162.101:14468] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "ab_US1wa9x6OCTRkhl2d6gAAAJI"]
[Sun Mar 22 19:36:44.232888 2026] [:error] [pid 51363:tid 51433] [client 20.203.162.101:20925] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "ab_UTFwa9x6OCTRkhl2d7gAAAIU"]
[Sun Mar 22 19:36:45.921315 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:16317] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filesss.php"] [unique_id "ab_UTcOwPm3DXzTDjUes2wAAAFU"]
[Sun Mar 22 19:36:46.748185 2026] [:error] [pid 51362:tid 51401] [client 20.203.162.101:18993] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aaa.php"] [unique_id "ab_UTsOwPm3DXzTDjUes3QAAAEE"]
[Sun Mar 22 19:36:47.472499 2026] [:error] [pid 51363:tid 51451] [client 20.203.162.101:20916] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aaa.php"] [unique_id "ab_UT1wa9x6OCTRkhl2d9QAAAJU"]
[Sun Mar 22 19:36:49.821325 2026] [:error] [pid 51468:tid 51492] [client 20.203.162.101:12699] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aaa.php"] [unique_id "ab_UUU2TppSvA8W5CBRH7QAAANA"]
[Sun Mar 22 19:36:50.729643 2026] [:error] [pid 40039:tid 40054] [client 20.203.162.101:10982] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-aaa.php"] [unique_id "ab_UUh3aDgUJfBYishmq2wAAAQ0"]
[Sun Mar 22 19:36:51.473329 2026] [:error] [pid 40039:tid 40041] [client 20.203.162.101:13138] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "ab_UUx3aDgUJfBYishmq3gAAAQA"]
[Sun Mar 22 19:36:52.399473 2026] [:error] [pid 51468:tid 51486] [client 20.203.162.101:35177] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "ab_UVE2TppSvA8W5CBRH8AAAAMo"]
[Sun Mar 22 19:36:54.270895 2026] [:error] [pid 40039:tid 40049] [client 20.203.162.101:7653] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "ab_UVh3aDgUJfBYishmq6gAAAQg"]
[Sun Mar 22 19:36:56.213756 2026] [:error] [pid 51363:tid 51453] [client 20.203.162.101:13641] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/031.php"] [unique_id "ab_UWFwa9x6OCTRkhl2d_QAAAJc"]
[Sun Mar 22 19:36:57.092116 2026] [:error] [pid 51363:tid 51444] [client 20.203.162.101:20192] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "ab_UWVwa9x6OCTRkhl2d_wAAAI8"]
[Sun Mar 22 19:36:58.402280 2026] [:error] [pid 51363:tid 51437] [client 20.203.162.101:12701] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "ab_UWlwa9x6OCTRkhl2eAgAAAIg"]
[Sun Mar 22 19:36:59.349319 2026] [:error] [pid 30166:tid 30189] [client 20.203.162.101:19394] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "ab_UW7m4_26jKMD0zy3aPgAAAU4"]
[Sun Mar 22 19:37:00.553549 2026] [:error] [pid 30166:tid 30171] [client 20.203.162.101:1943] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "ab_UXLm4_26jKMD0zy3aQAAAAUE"]
[Sun Mar 22 19:37:01.934104 2026] [:error] [pid 30166:tid 30182] [client 20.203.162.101:8992] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "ab_UXbm4_26jKMD0zy3aRAAAAUc"]
[Sun Mar 22 19:37:03.218393 2026] [:error] [pid 30166:tid 30175] [client 20.203.162.101:8997] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "ab_UX7m4_26jKMD0zy3aSgAAAUQ"]
[Sun Mar 22 19:37:06.826045 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:29834] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "ab_UYrm4_26jKMD0zy3aVwAAAUU"]
[Sun Mar 22 19:37:07.683560 2026] [:error] [pid 51363:tid 51447] [client 20.203.162.101:13160] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file88.php"] [unique_id "ab_UY1wa9x6OCTRkhl2eEwAAAJE"]
[Sun Mar 22 19:37:08.545598 2026] [:error] [pid 51362:tid 51422] [client 20.203.162.101:16268] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "ab_UZMOwPm3DXzTDjUes6QAAAFU"]
[Sun Mar 22 19:37:09.427786 2026] [:error] [pid 51361:tid 51388] [client 20.203.162.101:13485] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "ab_UZRXYUsdvKC9YWpXZAgAAABA"]
[Sun Mar 22 19:37:11.126303 2026] [:error] [pid 51362:tid 51404] [client 20.203.162.101:22376] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "ab_UZ8OwPm3DXzTDjUes8gAAAEM"]
[Sun Mar 22 19:37:12.166681 2026] [:error] [pid 51363:tid 51438] [client 20.203.162.101:14667] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CLA.php"] [unique_id "ab_UaFwa9x6OCTRkhl2eIwAAAIk"]
[Sun Mar 22 19:37:13.270543 2026] [:error] [pid 30166:tid 30176] [client 20.203.162.101:12753] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "ab_Uabm4_26jKMD0zy3aXwAAAUU"]
[Sun Mar 22 19:37:14.382768 2026] [:error] [pid 51362:tid 51408] [client 20.203.162.101:24771] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "ab_UasOwPm3DXzTDjUes_QAAAEc"]
[Sun Mar 22 19:37:15.327296 2026] [:error] [pid 51362:tid 51419] [client 20.203.162.101:14918] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "ab_Ua8OwPm3DXzTDjUetAwAAAFI"]
[Sun Mar 22 19:37:16.721762 2026] [:error] [pid 51362:tid 51424] [client 20.203.162.101:1977] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/des.php"] [unique_id "ab_UbMOwPm3DXzTDjUetCQAAAFc"]
[Sun Mar 22 19:37:17.511834 2026] [:error] [pid 51362:tid 51401] [client 20.203.162.101:30917] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kaza.php"] [unique_id "ab_UbcOwPm3DXzTDjUetDgAAAEE"]
[Sun Mar 22 19:37:18.511435 2026] [:error] [pid 51468:tid 51487] [client 20.203.162.101:1958] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kaza.php"] [unique_id "ab_Ubk2TppSvA8W5CBRIFAAAAMs"]
[Sun Mar 22 19:37:19.695332 2026] [:error] [pid 51362:tid 51412] [client 20.203.162.101:27843] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kaza.php"] [unique_id "ab_Ub8OwPm3DXzTDjUetFAAAAEs"]
[Sun Mar 22 19:37:20.611105 2026] [:error] [pid 51362:tid 51400] [client 20.203.162.101:18185] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kaza.php"] [unique_id "ab_UcMOwPm3DXzTDjUetGQAAAEA"]
[Sun Mar 22 19:37:21.443287 2026] [:error] [pid 30166:tid 30187] [client 20.203.162.101:1122] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file51.php"] [unique_id "ab_Ucbm4_26jKMD0zy3aaAAAAUw"]
[Sun Mar 22 19:37:22.960362 2026] [:error] [pid 51362:tid 51420] [client 20.203.162.101:14711] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file51.php"] [unique_id "ab_UcsOwPm3DXzTDjUetHQAAAFM"]
[Sun Mar 22 19:37:24.646857 2026] [:error] [pid 51361:tid 51381] [client 20.203.162.101:8175] [client 20.203.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file51.php"] [unique_id "ab_UdBXYUsdvKC9YWpXZCAAAAAo"]
[Sun Mar 22 22:26:11.938919 2026] [:error] [pid 51361:tid 51377] [client 43.173.1.57:48450] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ab_8AxXYUsdvKC9YWpUpcgAAAAY"]
[Sun Mar 22 23:36:15.127439 2026] [:error] [pid 51361:tid 51395] [client 169.150.203.197:58536] [client 169.150.203.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.197, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acAMbxXYUsdvKC9YWpU_dgAAABY"]
[Sun Mar 22 23:36:17.161364 2026] [:error] [pid 51361:tid 51383] [client 169.150.203.197:58536] [client 169.150.203.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "acAMcRXYUsdvKC9YWpU_hQAAAAw"]
[Sun Mar 22 23:36:17.833001 2026] [:error] [pid 51468:tid 51477] [client 169.150.203.197:58542] [client 169.150.203.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "acAMcU2TppSvA8W5CBS3cQAAAME"]
[Sun Mar 22 23:36:18.514314 2026] [:error] [pid 51468:tid 51485] [client 169.150.203.197:58554] [client 169.150.203.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "acAMck2TppSvA8W5CBS3dgAAAMk"]
[Sun Mar 22 23:36:19.187825 2026] [:error] [pid 51468:tid 51494] [client 169.150.203.197:58564] [client 169.150.203.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "acAMc02TppSvA8W5CBS3eQAAANI"]
[Sun Mar 22 23:36:19.860285 2026] [:error] [pid 51361:tid 51392] [client 169.150.203.197:58566] [client 169.150.203.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "acAMcxXYUsdvKC9YWpU_jAAAABQ"]
[Sun Mar 22 23:36:20.541193 2026] [:error] [pid 51363:tid 51441] [client 169.150.203.197:58576] [client 169.150.203.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "acAMdFwa9x6OCTRkhl3aWQAAAIw"]
[Sun Mar 22 23:36:21.217387 2026] [:error] [pid 51362:tid 51419] [client 169.150.203.197:58580] [client 169.150.203.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "acAMdcOwPm3DXzTDjUf5AQAAAFI"]
[Mon Mar 23 00:39:35.929714 2026] [:error] [pid 27776:tid 27855] [client 170.106.163.48:46350] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acAbR43Eaq7IZ5L-4XUnTwAAAQk"]
[Mon Mar 23 00:43:15.254993 2026] [:error] [pid 20856:tid 20933] [client 106.221.50.109:40577] [client 106.221.50.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.221.50.109, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acAcI8xFtXFVNE-X2-J9DgAAAM4"]
[Mon Mar 23 02:24:09.838252 2026] [:error] [pid 20856:tid 20924] [client 121.229.185.160:56849] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acAzycxFtXFVNE-X2-Kk_AAAAMU"]
[Mon Mar 23 05:05:47.977749 2026] [:error] [pid 23440:tid 23496] [client 43.130.26.3:57724] [client 43.130.26.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acBZqz49_8n8h_ttcUrCIAAAAFQ"]
[Mon Mar 23 11:37:46.059636 2026] [:error] [pid 35165:tid 35176] [client 43.166.250.187:59350] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acC1is6udpN6Esk7JKsskgAAAYg"]
[Mon Mar 23 11:45:53.502422 2026] [:error] [pid 23539:tid 23548] [client 160.178.45.12:50650] [client 160.178.45.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "acC3cX7Dh3qWGSpIAZXHGQAAAMA"]
[Mon Mar 23 13:59:13.840973 2026] [:error] [pid 23441:tid 23521] [client 49.51.141.76:53264] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acDWsRq7S-oOqSXZEr6tNAAAAJI"]
[Mon Mar 23 14:24:29.727610 2026] [:error] [pid 35165:tid 35178] [client 209.87.169.11:20997] [client 209.87.169.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.11, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "acDcnc6udpN6Esk7JKtovgAAAYo"]
[Mon Mar 23 15:50:56.251017 2026] [:error] [pid 35165:tid 35177] [client 49.235.136.28:33234] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acDw4M6udpN6Esk7JKuE9gAAAYk"]
[Mon Mar 23 17:52:09.461240 2026] [:error] [pid 57265:tid 57270] [client 136.158.56.222:34464] [client 136.158.56.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.56.222, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acENSWNLjPJJkhuqCsgk9AAAAQM"]
[Mon Mar 23 19:30:43.210709 2026] [:error] [pid 23441:tid 23508] [client 216.73.216.51:1285] [client 216.73.216.51] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourcause.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "acEkYxq7S-oOqSXZEr7ohQAAAIU"]
[Mon Mar 23 19:36:50.451970 2026] [:error] [pid 23539:tid 23561] [client 103.211.16.159:58776] [client 103.211.16.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.16.159, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acEl0n7Dh3qWGSpIAZUxfAAAAM0"]
[Mon Mar 23 20:04:17.792251 2026] [:error] [pid 23441:tid 23516] [client 49.51.203.164:56742] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acEsQRq7S-oOqSXZEr7uswAAAI0"]
[Mon Mar 23 23:50:55.426289 2026] [:error] [pid 38306:tid 38311] [client 40.85.246.124:22512] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acFhXzkL8qwu-hHc6Bjc8gAAAQM"]
[Mon Mar 23 23:50:55.838705 2026] [:error] [pid 52341:tid 52348] [client 40.85.246.124:22492] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acFhX6PKTBDR2u47Gb0tqwAAAUU"]
[Mon Mar 23 23:50:56.248029 2026] [:error] [pid 38176:tid 38193] [client 40.85.246.124:22414] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acFhYEtG4qlh1gvNjuJrhgAAAAY"]
[Mon Mar 23 23:50:56.659471 2026] [:error] [pid 38176:tid 38192] [client 40.85.246.124:22516] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acFhYEtG4qlh1gvNjuJrhwAAAAU"]
[Mon Mar 23 23:50:57.080834 2026] [:error] [pid 38178:tid 38261] [client 40.85.246.124:22513] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "acFhYQ0axWfXsVvR9udgPgAAAJM"]
[Mon Mar 23 23:50:57.492363 2026] [:error] [pid 38306:tid 38318] [client 40.85.246.124:22476] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "acFhYTkL8qwu-hHc6Bjc9gAAAQo"]
[Mon Mar 23 23:50:57.902188 2026] [:error] [pid 38176:tid 38209] [client 40.85.246.124:22485] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "acFhYUtG4qlh1gvNjuJriwAAABY"]
[Mon Mar 23 23:50:58.312472 2026] [:error] [pid 38176:tid 38198] [client 40.85.246.124:22470] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "acFhYktG4qlh1gvNjuJrjAAAAAs"]
[Mon Mar 23 23:50:58.723249 2026] [:error] [pid 38176:tid 38202] [client 40.85.246.124:22522] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "acFhYktG4qlh1gvNjuJrjgAAAA8"]
[Mon Mar 23 23:50:59.133798 2026] [:error] [pid 38306:tid 38308] [client 40.85.246.124:22502] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "acFhYzkL8qwu-hHc6Bjc-AAAAQA"]
[Mon Mar 23 23:50:59.543804 2026] [:error] [pid 52341:tid 52350] [client 40.85.246.124:22486] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "acFhY6PKTBDR2u47Gb0tsQAAAUc"]
[Mon Mar 23 23:50:59.954032 2026] [:error] [pid 38176:tid 38210] [client 40.85.246.124:22408] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "acFhY0tG4qlh1gvNjuJrkgAAABc"]
[Mon Mar 23 23:51:00.364603 2026] [:error] [pid 38176:tid 38188] [client 40.85.246.124:22424] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "acFhZEtG4qlh1gvNjuJrlAAAAAE"]
[Mon Mar 23 23:51:00.776790 2026] [:error] [pid 38178:tid 38247] [client 40.85.246.124:22402] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "acFhZA0axWfXsVvR9udgQwAAAIU"]
[Mon Mar 23 23:51:01.190635 2026] [:error] [pid 38178:tid 38253] [client 40.85.246.124:22477] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "acFhZQ0axWfXsVvR9udgRQAAAIs"]
[Mon Mar 23 23:51:01.601232 2026] [:error] [pid 38276:tid 38300] [client 40.85.246.124:22451] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "acFhZZoKGiI-a7oME3IfDgAAANU"]
[Mon Mar 23 23:51:02.034998 2026] [:error] [pid 38306:tid 38324] [client 40.85.246.124:22412] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "acFhZjkL8qwu-hHc6Bjc-gAAARA"]
[Mon Mar 23 23:51:02.447399 2026] [:error] [pid 38178:tid 38246] [client 40.85.246.124:22526] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "acFhZg0axWfXsVvR9udgRwAAAIQ"]
[Mon Mar 23 23:51:02.858659 2026] [:error] [pid 38177:tid 38217] [client 40.85.246.124:22415] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "acFhZnsYW-_HCI66MukNJQAAAEI"]
[Mon Mar 23 23:51:03.280581 2026] [:error] [pid 38177:tid 38228] [client 40.85.246.124:22418] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "acFhZ3sYW-_HCI66MukNJgAAAE0"]
[Mon Mar 23 23:51:03.690597 2026] [:error] [pid 38176:tid 38198] [client 40.85.246.124:22504] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "acFhZ0tG4qlh1gvNjuJrmAAAAAs"]
[Mon Mar 23 23:51:04.102093 2026] [:error] [pid 38176:tid 38203] [client 40.85.246.124:22478] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "acFhaEtG4qlh1gvNjuJrmgAAABA"]
[Mon Mar 23 23:51:04.511668 2026] [:error] [pid 38176:tid 38187] [client 40.85.246.124:22525] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "acFhaEtG4qlh1gvNjuJrmwAAAAA"]
[Mon Mar 23 23:51:04.921197 2026] [:error] [pid 38276:tid 38282] [client 40.85.246.124:22496] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autogooey.php"] [unique_id "acFhaJoKGiI-a7oME3IfEAAAAMM"]
[Mon Mar 23 23:51:05.330768 2026] [:error] [pid 38276:tid 38294] [client 40.85.246.124:22348] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "acFhaZoKGiI-a7oME3IfEgAAAM8"]
[Mon Mar 23 23:51:05.740056 2026] [:error] [pid 38176:tid 38196] [client 40.85.246.124:22430] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "acFhaUtG4qlh1gvNjuJrngAAAAk"]
[Mon Mar 23 23:51:06.155320 2026] [:error] [pid 38306:tid 38326] [client 40.85.246.124:22514] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "acFhajkL8qwu-hHc6BjdAQAAARI"]
[Mon Mar 23 23:51:06.566085 2026] [:error] [pid 38178:tid 38245] [client 40.85.246.124:22488] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "acFhag0axWfXsVvR9udgSgAAAIM"]
[Mon Mar 23 23:51:06.977435 2026] [:error] [pid 38176:tid 38195] [client 40.85.246.124:22338] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "acFhaktG4qlh1gvNjuJroQAAAAg"]
[Mon Mar 23 23:51:07.387498 2026] [:error] [pid 38176:tid 38207] [client 40.85.246.124:22427] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "acFha0tG4qlh1gvNjuJrowAAABQ"]
[Mon Mar 23 23:51:07.798648 2026] [:error] [pid 38176:tid 38200] [client 40.85.246.124:22498] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "acFha0tG4qlh1gvNjuJrpwAAAA0"]
[Mon Mar 23 23:51:08.211283 2026] [:error] [pid 38176:tid 38203] [client 40.85.246.124:22421] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "acFhbEtG4qlh1gvNjuJrqQAAABA"]
[Mon Mar 23 23:51:08.621796 2026] [:error] [pid 38306:tid 38316] [client 40.85.246.124:22419] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acFhbDkL8qwu-hHc6BjdAgAAAQg"]
[Mon Mar 23 23:51:09.031564 2026] [:error] [pid 52341:tid 52355] [client 40.85.246.124:22461] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acFhbaPKTBDR2u47Gb0ttwAAAUw"]
[Mon Mar 23 23:51:09.445739 2026] [:error] [pid 52341:tid 52358] [client 40.85.246.124:22479] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acFhbaPKTBDR2u47Gb0tugAAAU8"]
[Mon Mar 23 23:51:09.857102 2026] [:error] [pid 38306:tid 38331] [client 40.85.246.124:22509] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acFhbTkL8qwu-hHc6BjdBAAAARc"]
[Mon Mar 23 23:51:10.267993 2026] [:error] [pid 38178:tid 38242] [client 40.85.246.124:22465] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acFhbg0axWfXsVvR9udgTAAAAIA"]
[Mon Mar 23 23:51:10.686454 2026] [:error] [pid 38276:tid 38296] [client 40.85.246.124:22438] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acFhbpoKGiI-a7oME3IfGAAAANE"]
[Mon Mar 23 23:51:11.104597 2026] [:error] [pid 38178:tid 38248] [client 40.85.246.124:22500] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acFhbw0axWfXsVvR9udgTQAAAIY"]
[Mon Mar 23 23:51:11.515564 2026] [:error] [pid 38306:tid 38308] [client 40.85.246.124:22517] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acFhbzkL8qwu-hHc6BjdBQAAAQA"]
[Mon Mar 23 23:51:11.926639 2026] [:error] [pid 52341:tid 52357] [client 40.85.246.124:22404] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "acFhb6PKTBDR2u47Gb0tvQAAAU4"]
[Mon Mar 23 23:51:12.339728 2026] [:error] [pid 52341:tid 52366] [client 40.85.246.124:22521] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acFhcKPKTBDR2u47Gb0tvwAAAVc"]
[Mon Mar 23 23:51:12.748996 2026] [:error] [pid 38276:tid 38297] [client 40.85.246.124:22455] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acFhcJoKGiI-a7oME3IfGwAAANI"]
[Mon Mar 23 23:51:13.160108 2026] [:error] [pid 52341:tid 52348] [client 40.85.246.124:22426] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acFhcaPKTBDR2u47Gb0twgAAAUU"]
[Mon Mar 23 23:51:13.570328 2026] [:error] [pid 38276:tid 38284] [client 40.85.246.124:22515] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acFhcZoKGiI-a7oME3IfHgAAAMU"]
[Mon Mar 23 23:51:13.981493 2026] [:error] [pid 38276:tid 38293] [client 40.85.246.124:22467] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFhcZoKGiI-a7oME3IfHwAAAM4"]
[Mon Mar 23 23:51:14.408049 2026] [:error] [pid 38276:tid 38290] [client 40.85.246.124:22511] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFhcpoKGiI-a7oME3IfIgAAAMs"]
[Mon Mar 23 23:51:14.819887 2026] [:error] [pid 38276:tid 38289] [client 40.85.246.124:22340] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFhcpoKGiI-a7oME3IfJAAAAMo"]
[Mon Mar 23 23:51:15.230320 2026] [:error] [pid 38276:tid 38283] [client 40.85.246.124:22365] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFhc5oKGiI-a7oME3IfJQAAAMQ"]
[Mon Mar 23 23:51:15.641934 2026] [:error] [pid 38176:tid 38199] [client 40.85.246.124:22523] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acFhc0tG4qlh1gvNjuJrrAAAAAw"]
[Mon Mar 23 23:51:16.052499 2026] [:error] [pid 38177:tid 38238] [client 40.85.246.124:22475] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acFhdHsYW-_HCI66MukNKwAAAFc"]
[Mon Mar 23 23:51:16.461296 2026] [:error] [pid 38177:tid 38233] [client 40.85.246.124:22405] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acFhdHsYW-_HCI66MukNLAAAAFI"]
[Mon Mar 23 23:51:16.871395 2026] [:error] [pid 52341:tid 52352] [client 40.85.246.124:22400] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acFhdKPKTBDR2u47Gb0txgAAAUk"]
[Mon Mar 23 23:51:17.281616 2026] [:error] [pid 38176:tid 38195] [client 40.85.246.124:22501] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFhdUtG4qlh1gvNjuJrrgAAAAg"]
[Mon Mar 23 23:51:17.690379 2026] [:error] [pid 38177:tid 38219] [client 40.85.246.124:22420] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFhdXsYW-_HCI66MukNLwAAAEQ"]
[Mon Mar 23 23:51:18.102595 2026] [:error] [pid 38177:tid 38237] [client 40.85.246.124:22508] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFhdnsYW-_HCI66MukNMQAAAFY"]
[Mon Mar 23 23:51:18.514169 2026] [:error] [pid 38176:tid 38188] [client 40.85.246.124:22407] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFhdktG4qlh1gvNjuJrsAAAAAE"]
[Mon Mar 23 23:51:18.925458 2026] [:error] [pid 38177:tid 38223] [client 40.85.246.124:22468] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acFhdnsYW-_HCI66MukNMgAAAEg"]
[Mon Mar 23 23:51:19.362764 2026] [:error] [pid 38306:tid 38316] [client 40.85.246.124:22519] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acFhdzkL8qwu-hHc6BjdDgAAAQg"]
[Mon Mar 23 23:51:19.781287 2026] [:error] [pid 38178:tid 38253] [client 40.85.246.124:22362] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acFhdw0axWfXsVvR9udgUgAAAIs"]
[Mon Mar 23 23:51:20.191803 2026] [:error] [pid 38306:tid 38321] [client 40.85.246.124:22401] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acFheDkL8qwu-hHc6BjdEwAAAQ0"]
[Mon Mar 23 23:51:20.601448 2026] [:error] [pid 38306:tid 38314] [client 40.85.246.124:22487] [client 40.85.246.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFheDkL8qwu-hHc6BjdFQAAAQY"]
[Mon Mar 23 23:51:21.012106 2026] [:error] [pid 38177:tid 38227] [client 40.85.246.124:22416] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFheXsYW-_HCI66MukNMwAAAEw"]
[Mon Mar 23 23:51:21.444369 2026] [:error] [pid 38176:tid 38211] [client 40.85.246.124:22480] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFheUtG4qlh1gvNjuJrswAAABg"]
[Mon Mar 23 23:51:21.855482 2026] [:error] [pid 38177:tid 38217] [client 40.85.246.124:22444] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFheXsYW-_HCI66MukNNAAAAEI"]
[Mon Mar 23 23:51:22.265701 2026] [:error] [pid 38176:tid 38202] [client 40.85.246.124:22342] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFhektG4qlh1gvNjuJrtwAAAA8"]
[Mon Mar 23 23:51:22.677296 2026] [:error] [pid 38176:tid 38206] [client 40.85.246.124:22459] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFhektG4qlh1gvNjuJrugAAABM"]
[Mon Mar 23 23:51:23.087550 2026] [:error] [pid 38177:tid 38218] [client 40.85.246.124:22497] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFhe3sYW-_HCI66MukNNQAAAEM"]
[Mon Mar 23 23:51:23.499291 2026] [:error] [pid 38276:tid 38294] [client 40.85.246.124:22510] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFhe5oKGiI-a7oME3IfLAAAAM8"]
[Mon Mar 23 23:51:23.910923 2026] [:error] [pid 38176:tid 38201] [client 40.85.246.124:22446] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFhe0tG4qlh1gvNjuJruwAAAA4"]
[Mon Mar 23 23:51:24.322135 2026] [:error] [pid 38176:tid 38210] [client 40.85.246.124:22462] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "acFhfEtG4qlh1gvNjuJrvQAAABc"]
[Mon Mar 23 23:51:24.732484 2026] [:error] [pid 38177:tid 38226] [client 40.85.246.124:22423] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "acFhfHsYW-_HCI66MukNNwAAAEs"]
[Mon Mar 23 23:51:25.143159 2026] [:error] [pid 52341:tid 52354] [client 40.85.246.124:22417] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "acFhfaPKTBDR2u47Gb0tygAAAUs"]
[Mon Mar 23 23:51:25.553090 2026] [:error] [pid 52341:tid 52357] [client 40.85.246.124:22505] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "acFhfaPKTBDR2u47Gb0tywAAAU4"]
[Tue Mar 24 00:31:33.623776 2026] [:error] [pid 56236:tid 56300] [client 40.85.222.197:29586] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acFq5XapFgYp0uZ8twAQzAAAAEc"]
[Tue Mar 24 00:31:34.033740 2026] [:error] [pid 56237:tid 56335] [client 40.85.222.197:29585] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acFq5gymO0MnzQb90MMN_AAAAI4"]
[Tue Mar 24 00:31:34.444858 2026] [:error] [pid 56237:tid 56336] [client 40.85.222.197:29684] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acFq5gymO0MnzQb90MMOAQAAAI8"]
[Tue Mar 24 00:31:34.863312 2026] [:error] [pid 56435:tid 56508] [client 40.85.222.197:29568] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acFq5srwr-l5A-s9ryBOZAAAAQg"]
[Tue Mar 24 00:31:35.273391 2026] [:error] [pid 56435:tid 56501] [client 40.85.222.197:29633] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "acFq58rwr-l5A-s9ryBOaQAAAQI"]
[Tue Mar 24 00:31:35.693028 2026] [:error] [pid 56435:tid 56519] [client 40.85.222.197:29652] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "acFq58rwr-l5A-s9ryBOawAAARI"]
[Tue Mar 24 00:31:36.103425 2026] [:error] [pid 56236:tid 56303] [client 40.85.222.197:29636] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "acFq6HapFgYp0uZ8twAQ0QAAAEo"]
[Tue Mar 24 00:31:36.514123 2026] [:error] [pid 56236:tid 56307] [client 40.85.222.197:29680] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/path.php"] [unique_id "acFq6HapFgYp0uZ8twAQ1AAAAE4"]
[Tue Mar 24 00:31:36.928252 2026] [:error] [pid 56236:tid 56309] [client 40.85.222.197:29588] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "acFq6HapFgYp0uZ8twAQ1QAAAFA"]
[Tue Mar 24 00:31:37.338339 2026] [:error] [pid 56237:tid 56342] [client 40.85.222.197:29572] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "acFq6QymO0MnzQb90MMOCwAAAJU"]
[Tue Mar 24 00:31:37.773394 2026] [:error] [pid 56435:tid 56523] [client 40.85.222.197:29660] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "acFq6crwr-l5A-s9ryBObwAAARY"]
[Tue Mar 24 00:31:38.183928 2026] [:error] [pid 56236:tid 56297] [client 40.85.222.197:29668] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdf.php"] [unique_id "acFq6napFgYp0uZ8twAQ2gAAAEQ"]
[Tue Mar 24 00:31:38.596215 2026] [:error] [pid 56237:tid 56324] [client 40.85.222.197:29581] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "acFq6gymO0MnzQb90MMOEQAAAIM"]
[Tue Mar 24 00:31:39.028943 2026] [:error] [pid 56238:tid 56350] [client 40.85.222.197:29584] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "acFq61SqceFAZRgPDq6ANgAAAMI"]
[Tue Mar 24 00:31:39.442176 2026] [:error] [pid 56236:tid 56293] [client 40.85.222.197:29656] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "acFq63apFgYp0uZ8twAQ5gAAAEA"]
[Tue Mar 24 00:31:39.873454 2026] [:error] [pid 56435:tid 56499] [client 40.85.222.197:29577] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fleen.php"] [unique_id "acFq68rwr-l5A-s9ryBOcgAAAQA"]
[Tue Mar 24 00:31:40.286610 2026] [:error] [pid 56236:tid 56315] [client 40.85.222.197:29637] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "acFq7HapFgYp0uZ8twAQ6gAAAFY"]
[Tue Mar 24 00:31:40.699678 2026] [:error] [pid 56435:tid 56505] [client 40.85.222.197:29587] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "acFq7Mrwr-l5A-s9ryBOdQAAAQY"]
[Tue Mar 24 00:31:41.111604 2026] [:error] [pid 56435:tid 56502] [client 40.85.222.197:29582] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "acFq7crwr-l5A-s9ryBOegAAAQM"]
[Tue Mar 24 00:31:41.523574 2026] [:error] [pid 56435:tid 56509] [client 40.85.222.197:29692] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tem.php"] [unique_id "acFq7crwr-l5A-s9ryBOfgAAAQk"]
[Tue Mar 24 00:31:41.948757 2026] [:error] [pid 56435:tid 56511] [client 40.85.222.197:29640] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "acFq7crwr-l5A-s9ryBOhAAAAQs"]
[Tue Mar 24 00:31:42.361538 2026] [:error] [pid 56236:tid 56314] [client 40.85.222.197:29580] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "acFq7napFgYp0uZ8twAQ8gAAAFU"]
[Tue Mar 24 00:31:42.776561 2026] [:error] [pid 56435:tid 56510] [client 40.85.222.197:29679] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av6m.php"] [unique_id "acFq7srwr-l5A-s9ryBOjAAAAQo"]
[Tue Mar 24 00:31:43.190652 2026] [:error] [pid 56238:tid 56362] [client 40.85.222.197:29641] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "acFq71SqceFAZRgPDq6APAAAAM4"]
[Tue Mar 24 00:31:43.600379 2026] [:error] [pid 56236:tid 56293] [client 40.85.222.197:29541] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "acFq73apFgYp0uZ8twAQ9AAAAEA"]
[Tue Mar 24 00:31:44.009154 2026] [:error] [pid 56238:tid 56354] [client 40.85.222.197:29579] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "acFq8FSqceFAZRgPDq6AQwAAAMY"]
[Tue Mar 24 00:31:44.418852 2026] [:error] [pid 56236:tid 56316] [client 40.85.222.197:29604] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mga.php"] [unique_id "acFq8HapFgYp0uZ8twAQ-AAAAFc"]
[Tue Mar 24 00:31:44.827864 2026] [:error] [pid 56237:tid 56336] [client 40.85.222.197:29653] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acFq8AymO0MnzQb90MMOHQAAAI8"]
[Tue Mar 24 00:31:45.244343 2026] [:error] [pid 56237:tid 56322] [client 40.85.222.197:29520] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acFq8QymO0MnzQb90MMOIAAAAIE"]
[Tue Mar 24 00:31:45.654630 2026] [:error] [pid 56237:tid 56327] [client 40.85.222.197:29662] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acFq8QymO0MnzQb90MMOIwAAAIY"]
[Tue Mar 24 00:31:46.066944 2026] [:error] [pid 56236:tid 56307] [client 40.85.222.197:29694] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acFq8napFgYp0uZ8twARAAAAAE4"]
[Tue Mar 24 00:31:46.477791 2026] [:error] [pid 56237:tid 56343] [client 40.85.222.197:29663] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acFq8gymO0MnzQb90MMOJwAAAJY"]
[Tue Mar 24 00:31:46.890856 2026] [:error] [pid 56236:tid 56300] [client 40.85.222.197:29603] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acFq8napFgYp0uZ8twARAQAAAEc"]
[Tue Mar 24 00:31:47.299875 2026] [:error] [pid 56237:tid 56338] [client 40.85.222.197:29521] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acFq8wymO0MnzQb90MMOLAAAAJE"]
[Tue Mar 24 00:31:47.709671 2026] [:error] [pid 56236:tid 56312] [client 40.85.222.197:29638] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acFq83apFgYp0uZ8twARBgAAAFM"]
[Tue Mar 24 00:31:48.119750 2026] [:error] [pid 56238:tid 56368] [client 40.85.222.197:29659] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "acFq9FSqceFAZRgPDq6ATgAAANQ"]
[Tue Mar 24 00:31:48.528502 2026] [:error] [pid 56238:tid 56362] [client 40.85.222.197:29642] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "acFq9FSqceFAZRgPDq6AUAAAAM4"]
[Tue Mar 24 00:31:48.939659 2026] [:error] [pid 56237:tid 56331] [client 40.85.222.197:29690] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "acFq9AymO0MnzQb90MMONwAAAIo"]
[Tue Mar 24 00:31:49.352614 2026] [:error] [pid 56238:tid 56369] [client 40.85.222.197:29528] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "acFq9VSqceFAZRgPDq6AVAAAANU"]
[Tue Mar 24 00:31:49.778570 2026] [:error] [pid 56238:tid 56363] [client 40.85.222.197:29575] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "acFq9VSqceFAZRgPDq6AWQAAAM8"]
[Tue Mar 24 00:31:50.200379 2026] [:error] [pid 56237:tid 56338] [client 40.85.222.197:29614] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "acFq9gymO0MnzQb90MMOPAAAAJE"]
[Tue Mar 24 00:31:50.613031 2026] [:error] [pid 56237:tid 56328] [client 40.85.222.197:29691] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "acFq9gymO0MnzQb90MMOPgAAAIc"]
[Tue Mar 24 00:31:51.022944 2026] [:error] [pid 56435:tid 56507] [client 40.85.222.197:29685] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "acFq98rwr-l5A-s9ryBOkQAAAQc"]
[Tue Mar 24 00:31:51.446163 2026] [:error] [pid 56435:tid 56518] [client 40.85.222.197:29695] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "acFq98rwr-l5A-s9ryBOlQAAARE"]
[Tue Mar 24 00:31:51.858542 2026] [:error] [pid 56435:tid 56505] [client 40.85.222.197:29654] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "acFq98rwr-l5A-s9ryBOmgAAAQY"]
[Tue Mar 24 00:31:52.272861 2026] [:error] [pid 56237:tid 56333] [client 40.85.222.197:29619] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "acFq-AymO0MnzQb90MMOQgAAAIw"]
[Tue Mar 24 00:31:52.691565 2026] [:error] [pid 56435:tid 56499] [client 40.85.222.197:29596] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "acFq-Mrwr-l5A-s9ryBOogAAAQA"]
[Tue Mar 24 00:31:53.131567 2026] [:error] [pid 56435:tid 56505] [client 40.85.222.197:29611] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acFq-crwr-l5A-s9ryBOqAAAAQY"]
[Tue Mar 24 00:31:53.540878 2026] [:error] [pid 56435:tid 56517] [client 40.85.222.197:29571] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acFq-crwr-l5A-s9ryBOrAAAARA"]
[Tue Mar 24 00:31:53.956358 2026] [:error] [pid 56237:tid 56343] [client 40.85.222.197:29667] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acFq-QymO0MnzQb90MMOQwAAAJY"]
[Tue Mar 24 00:31:54.373757 2026] [:error] [pid 56435:tid 56504] [client 40.85.222.197:29617] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acFq-srwr-l5A-s9ryBOsgAAAQU"]
[Tue Mar 24 00:31:54.792281 2026] [:error] [pid 56238:tid 56364] [client 40.85.222.197:29658] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acFq-lSqceFAZRgPDq6AdgAAANA"]
[Tue Mar 24 00:31:55.208601 2026] [:error] [pid 56236:tid 56295] [client 40.85.222.197:29672] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acFq-3apFgYp0uZ8twARDgAAAEI"]
[Tue Mar 24 00:31:55.618569 2026] [:error] [pid 56238:tid 56365] [client 40.85.222.197:29670] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acFq-1SqceFAZRgPDq6AfQAAANE"]
[Tue Mar 24 00:31:56.028845 2026] [:error] [pid 56237:tid 56322] [client 40.85.222.197:29693] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acFq_AymO0MnzQb90MMORQAAAIE"]
[Tue Mar 24 00:31:56.441416 2026] [:error] [pid 56238:tid 56351] [client 40.85.222.197:29686] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFq_FSqceFAZRgPDq6AgQAAAMM"]
[Tue Mar 24 00:31:56.852022 2026] [:error] [pid 56238:tid 56352] [client 40.85.222.197:29651] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFq_FSqceFAZRgPDq6AgwAAAMQ"]
[Tue Mar 24 00:31:57.268358 2026] [:error] [pid 56237:tid 56334] [client 40.85.222.197:29509] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFq_QymO0MnzQb90MMOSgAAAI0"]
[Tue Mar 24 00:31:57.686517 2026] [:error] [pid 56237:tid 56332] [client 40.85.222.197:29621] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFq_QymO0MnzQb90MMOTQAAAIs"]
[Tue Mar 24 00:31:58.114479 2026] [:error] [pid 56435:tid 56517] [client 40.85.222.197:29590] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acFq_srwr-l5A-s9ryBOuwAAARA"]
[Tue Mar 24 00:31:58.525771 2026] [:error] [pid 56238:tid 56358] [client 40.85.222.197:29546] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acFq_lSqceFAZRgPDq6AiwAAAMo"]
[Tue Mar 24 00:31:58.936775 2026] [:error] [pid 56435:tid 56511] [client 40.85.222.197:29574] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acFq_srwr-l5A-s9ryBOvQAAAQs"]
[Tue Mar 24 00:31:59.347438 2026] [:error] [pid 56238:tid 56371] [client 40.85.222.197:29677] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acFq_1SqceFAZRgPDq6AkQAAANc"]
[Tue Mar 24 00:31:59.778650 2026] [:error] [pid 56238:tid 56362] [client 40.85.222.197:29650] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFq_1SqceFAZRgPDq6AlAAAAM4"]
[Tue Mar 24 00:32:00.189092 2026] [:error] [pid 56435:tid 56518] [client 40.85.222.197:29609] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFrAMrwr-l5A-s9ryBOwQAAARE"]
[Tue Mar 24 00:32:00.600645 2026] [:error] [pid 56435:tid 56504] [client 40.85.222.197:29681] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFrAMrwr-l5A-s9ryBOxAAAAQU"]
[Tue Mar 24 00:32:01.024156 2026] [:error] [pid 56237:tid 56333] [client 40.85.222.197:29639] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFrAQymO0MnzQb90MMOUgAAAIw"]
[Tue Mar 24 00:32:01.437062 2026] [:error] [pid 56238:tid 56363] [client 40.85.222.197:28995] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acFrAVSqceFAZRgPDq6AngAAAM8"]
[Tue Mar 24 00:32:01.868610 2026] [:error] [pid 56237:tid 56342] [client 40.85.222.197:29655] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acFrAQymO0MnzQb90MMOUwAAAJU"]
[Tue Mar 24 00:32:02.281746 2026] [:error] [pid 56236:tid 56309] [client 40.85.222.197:29558] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acFrAnapFgYp0uZ8twAREgAAAFA"]
[Tue Mar 24 00:32:02.691715 2026] [:error] [pid 56435:tid 56510] [client 40.85.222.197:29607] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acFrAsrwr-l5A-s9ryBOzwAAAQo"]
[Tue Mar 24 00:32:03.106349 2026] [:error] [pid 56435:tid 56518] [client 40.85.222.197:29689] [client 40.85.222.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFrA8rwr-l5A-s9ryBO0QAAARE"]
[Tue Mar 24 00:32:03.518921 2026] [:error] [pid 56435:tid 56519] [client 40.85.222.197:29556] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFrA8rwr-l5A-s9ryBO1QAAARI"]
[Tue Mar 24 00:32:03.942627 2026] [:error] [pid 56237:tid 56334] [client 40.85.222.197:29635] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFrAwymO0MnzQb90MMOXQAAAI0"]
[Tue Mar 24 00:32:04.353459 2026] [:error] [pid 56435:tid 56516] [client 40.85.222.197:29570] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFrBMrwr-l5A-s9ryBO3AAAAQ8"]
[Tue Mar 24 00:32:04.764798 2026] [:error] [pid 56238:tid 56350] [client 40.85.222.197:29631] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFrBFSqceFAZRgPDq6AogAAAMI"]
[Tue Mar 24 00:32:05.175597 2026] [:error] [pid 56237:tid 56327] [client 40.85.222.197:29606] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFrBQymO0MnzQb90MMOXgAAAIY"]
[Tue Mar 24 00:32:05.593302 2026] [:error] [pid 56238:tid 56372] [client 40.85.222.197:29657] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFrBVSqceFAZRgPDq6ApAAAANg"]
[Tue Mar 24 00:32:06.004167 2026] [:error] [pid 56236:tid 56296] [client 40.85.222.197:29675] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFrBnapFgYp0uZ8twARFAAAAEM"]
[Tue Mar 24 00:32:06.440638 2026] [:error] [pid 56435:tid 56501] [client 40.85.222.197:29671] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFrBsrwr-l5A-s9ryBO7QAAAQI"]
[Tue Mar 24 00:32:06.855738 2026] [:error] [pid 56435:tid 56524] [client 40.85.222.197:29514] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "acFrBsrwr-l5A-s9ryBO8AAAARc"]
[Tue Mar 24 00:32:07.266414 2026] [:error] [pid 56435:tid 56522] [client 40.85.222.197:29569] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "acFrB8rwr-l5A-s9ryBO8wAAARU"]
[Tue Mar 24 00:32:07.677911 2026] [:error] [pid 56237:tid 56331] [client 40.85.222.197:29629] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "acFrBwymO0MnzQb90MMOZwAAAIo"]
[Tue Mar 24 00:32:08.091030 2026] [:error] [pid 56237:tid 56326] [client 40.85.222.197:29682] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/index.php"] [unique_id "acFrCAymO0MnzQb90MMObQAAAIU"]
[Tue Mar 24 02:11:43.094140 2026] [:error] [pid 56237:tid 56334] [client 43.153.102.138:56208] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acGCXwymO0MnzQb90MM6LgAAAI0"]
[Tue Mar 24 06:19:38.577895 2026] [:error] [pid 64198:tid 64202] [client 182.43.70.143:57017] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acG8enVzJqf6OS_oSZ3hawAAAUI"]
[Tue Mar 24 06:22:55.728330 2026] [:error] [pid 3137:tid 3154] [client 43.133.220.37:51292] [client 43.133.220.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acG9P5dZesutm6dfYM_1nAAAAM8"]
[Tue Mar 24 09:02:43.759521 2026] [:error] [pid 64198:tid 64210] [client 185.223.152.145:60017] [client 185.223.152.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.145, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "acHis3VzJqf6OS_oSZ0sQAAAAUo"]
[Tue Mar 24 11:41:59.834094 2026] [:error] [pid 3137:tid 3140] [client 45.133.5.11:47537] [client 45.133.5.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "acIIB5dZesutm6dfYM-SnQAAAME"]
[Tue Mar 24 11:41:59.904566 2026] [:error] [pid 3137:tid 3145] [client 45.133.5.39:31273] [client 45.133.5.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "acIIB5dZesutm6dfYM-SnwAAAMY"]
[Tue Mar 24 11:42:01.136245 2026] [:error] [pid 3137:tid 3153] [client 45.133.5.20:51867] [client 45.133.5.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "acIICZdZesutm6dfYM-SsgAAAM4"]
[Tue Mar 24 11:42:05.197015 2026] [:error] [pid 64198:tid 64209] [client 45.133.5.43:34707] [client 45.133.5.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "acIIDXVzJqf6OS_oSZ2vJwAAAUk"]
[Tue Mar 24 11:42:05.245496 2026] [:error] [pid 64198:tid 64208] [client 45.133.5.21:33287] [client 45.133.5.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "acIIDXVzJqf6OS_oSZ2vKAAAAUg"]
[Tue Mar 24 11:42:05.365717 2026] [:error] [pid 3137:tid 3151] [client 45.133.5.28:29003] [client 45.133.5.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "acIIDZdZesutm6dfYM-SuAAAAMw"]
[Tue Mar 24 11:42:05.415608 2026] [:error] [pid 3031:tid 3092] [client 45.133.5.30:40553] [client 45.133.5.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "acIIDaJBKytnG47nuiYPaAAAAFA"]
[Tue Mar 24 11:42:05.490094 2026] [:error] [pid 3030:tid 3052] [client 45.133.5.45:20773] [client 45.133.5.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "acIIDQyOuILyynfcqfknzQAAAAM"]
[Tue Mar 24 11:42:05.717797 2026] [:error] [pid 3032:tid 3113] [client 45.133.5.6:55915] [client 45.133.5.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "acIIDSa_-JXXD03-JNwNqgAAAIo"]
[Tue Mar 24 11:42:05.753760 2026] [:error] [pid 3137:tid 3155] [client 45.133.5.18:46295] [client 45.133.5.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "acIIDZdZesutm6dfYM-SuQAAANA"]
[Tue Mar 24 11:42:05.884825 2026] [:error] [pid 3137:tid 3162] [client 45.133.5.50:24299] [client 45.133.5.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "acIIDZdZesutm6dfYM-SvQAAANc"]
[Tue Mar 24 11:42:06.192808 2026] [:error] [pid 3137:tid 3140] [client 45.133.5.7:57425] [client 45.133.5.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "acIIDpdZesutm6dfYM-SxAAAAME"]
[Tue Mar 24 11:42:06.278151 2026] [:error] [pid 64198:tid 64203] [client 45.133.5.7:24095] [client 45.133.5.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acIIDnVzJqf6OS_oSZ2vLAAAAUM"]
[Tue Mar 24 11:42:06.313557 2026] [:error] [pid 3137:tid 3142] [client 45.133.5.19:21493] [client 45.133.5.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "acIIDpdZesutm6dfYM-SxQAAAMM"]
[Tue Mar 24 11:42:06.372182 2026] [:error] [pid 38767:tid 38781] [client 45.133.5.48:57583] [client 45.133.5.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "acIIDvwkUqN4GJAI5oUesgAAAQs"]
[Tue Mar 24 11:42:06.777026 2026] [:error] [pid 3137:tid 3141] [client 45.133.5.9:28157] [client 45.133.5.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "acIIDpdZesutm6dfYM-SzwAAAMI"]
[Tue Mar 24 11:42:06.859797 2026] [:error] [pid 3137:tid 3163] [client 45.133.5.51:65469] [client 45.133.5.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.51, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "acIIDpdZesutm6dfYM-S0QAAANg"]
[Tue Mar 24 11:42:07.092731 2026] [:error] [pid 3137:tid 3149] [client 45.133.5.51:65469] [client 45.133.5.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/class-config.php"] [unique_id "acIID5dZesutm6dfYM-S1QAAAMo"]
[Tue Mar 24 11:42:07.456013 2026] [:error] [pid 38767:tid 38784] [client 45.133.5.10:24617] [client 45.133.5.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "acIID_wkUqN4GJAI5oUevAAAAQ4"]
[Tue Mar 24 11:42:07.741783 2026] [:error] [pid 3137:tid 3159] [client 45.133.5.43:21153] [client 45.133.5.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bak.php"] [unique_id "acIID5dZesutm6dfYM-S3gAAANQ"]
[Tue Mar 24 11:42:07.810185 2026] [:error] [pid 48219:tid 48282] [client 45.133.5.12:44067] [client 45.133.5.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "acIIDyhf3b4R_lAIyv8GPQAAAgE"]
[Tue Mar 24 11:42:07.976909 2026] [:error] [pid 48128:tid 48156] [client 45.133.5.22:46751] [client 45.133.5.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "acIID8vR4LIMFLbM5VkMVAAAAYY"]
[Tue Mar 24 11:42:08.196696 2026] [:error] [pid 38767:tid 38774] [client 45.133.5.19:23325] [client 45.133.5.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "acIIEPwkUqN4GJAI5oUewwAAAQQ"]
[Tue Mar 24 11:42:08.309486 2026] [:error] [pid 38767:tid 38781] [client 45.133.5.24:30603] [client 45.133.5.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "acIIEPwkUqN4GJAI5oUexAAAAQs"]
[Tue Mar 24 11:42:08.479153 2026] [:error] [pid 64198:tid 64218] [client 45.133.5.28:46113] [client 45.133.5.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "acIIEHVzJqf6OS_oSZ2vMQAAAVI"]
[Tue Mar 24 11:42:08.563533 2026] [:error] [pid 3137:tid 3143] [client 45.133.5.38:38467] [client 45.133.5.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acIIEJdZesutm6dfYM-S4AAAAMQ"]
[Tue Mar 24 11:42:08.698464 2026] [:error] [pid 64198:tid 64211] [client 45.133.5.28:64383] [client 45.133.5.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "acIIEHVzJqf6OS_oSZ2vNwAAAUs"]
[Tue Mar 24 11:42:08.744878 2026] [:error] [pid 64198:tid 64221] [client 45.133.5.156:50253] [client 45.133.5.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "acIIEHVzJqf6OS_oSZ2vOAAAAVU"]
[Tue Mar 24 11:42:08.817835 2026] [:error] [pid 64198:tid 64203] [client 45.133.5.105:37319] [client 45.133.5.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "acIIEHVzJqf6OS_oSZ2vOQAAAUM"]
[Tue Mar 24 11:42:08.886074 2026] [:error] [pid 38767:tid 38787] [client 45.133.5.16:33909] [client 45.133.5.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "acIIEPwkUqN4GJAI5oUexwAAARE"]
[Tue Mar 24 11:42:08.950289 2026] [:error] [pid 48219:tid 48291] [client 45.133.5.23:53939] [client 45.133.5.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "acIIEChf3b4R_lAIyv8GQQAAAgo"]
[Tue Mar 24 11:42:08.999092 2026] [:error] [pid 3031:tid 3098] [client 45.133.5.18:31549] [client 45.133.5.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "acIIEKJBKytnG47nuiYPagAAAFY"]
[Tue Mar 24 11:42:09.058915 2026] [:error] [pid 3031:tid 3084] [client 45.133.5.10:29669] [client 45.133.5.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "acIIEaJBKytnG47nuiYPawAAAEg"]
[Tue Mar 24 11:42:09.145217 2026] [:error] [pid 64198:tid 64222] [client 45.133.5.24:40431] [client 45.133.5.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acIIEXVzJqf6OS_oSZ2vOwAAAVY"]
[Tue Mar 24 11:42:09.245903 2026] [:error] [pid 48214:tid 48254] [client 45.133.5.44:40301] [client 45.133.5.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "acIIEbeshLWZ3uUDHKkYhAAAAcI"]
[Tue Mar 24 11:42:09.517604 2026] [:error] [pid 64198:tid 64208] [client 45.133.5.9:57389] [client 45.133.5.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "acIIEXVzJqf6OS_oSZ2vQwAAAUg"]
[Tue Mar 24 11:42:09.561939 2026] [:error] [pid 64198:tid 64211] [client 45.133.5.23:51599] [client 45.133.5.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acIIEXVzJqf6OS_oSZ2vRQAAAUs"]
[Tue Mar 24 11:42:09.604441 2026] [:error] [pid 64198:tid 64207] [client 45.133.5.31:43807] [client 45.133.5.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "acIIEXVzJqf6OS_oSZ2vRwAAAUc"]
[Tue Mar 24 11:42:09.784193 2026] [:error] [pid 64198:tid 64222] [client 45.133.5.50:32873] [client 45.133.5.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "acIIEXVzJqf6OS_oSZ2vSgAAAVY"]
[Tue Mar 24 11:42:09.825867 2026] [:error] [pid 64198:tid 64215] [client 45.133.5.32:35901] [client 45.133.5.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "acIIEXVzJqf6OS_oSZ2vSwAAAU8"]
[Tue Mar 24 11:42:10.006535 2026] [:error] [pid 64198:tid 64218] [client 45.133.5.45:47295] [client 45.133.5.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "acIIEnVzJqf6OS_oSZ2vTgAAAVI"]
[Tue Mar 24 11:42:10.133079 2026] [:error] [pid 64198:tid 64205] [client 45.133.5.41:24867] [client 45.133.5.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "acIIEnVzJqf6OS_oSZ2vUgAAAUU"]
[Tue Mar 24 11:42:10.175479 2026] [:error] [pid 64198:tid 64220] [client 45.133.5.26:44223] [client 45.133.5.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "acIIEnVzJqf6OS_oSZ2vUwAAAVQ"]
[Tue Mar 24 11:42:10.258670 2026] [:error] [pid 38767:tid 38780] [client 45.133.5.41:20655] [client 45.133.5.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "acIIEvwkUqN4GJAI5oUeygAAAQo"]
[Tue Mar 24 11:42:10.332865 2026] [:error] [pid 38767:tid 38785] [client 45.133.5.8:49243] [client 45.133.5.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acIIEvwkUqN4GJAI5oUezAAAAQ8"]
[Tue Mar 24 11:42:10.428522 2026] [:error] [pid 38767:tid 38777] [client 45.133.5.16:34017] [client 45.133.5.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "acIIEvwkUqN4GJAI5oUezgAAAQc"]
[Tue Mar 24 11:42:10.514541 2026] [:error] [pid 38767:tid 38774] [client 45.133.5.24:49271] [client 45.133.5.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "acIIEvwkUqN4GJAI5oUezwAAAQQ"]
[Tue Mar 24 11:42:10.622401 2026] [:error] [pid 64198:tid 64216] [client 45.133.5.40:47849] [client 45.133.5.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acIIEnVzJqf6OS_oSZ2vVgAAAVA"]
[Tue Mar 24 11:42:10.670517 2026] [:error] [pid 64198:tid 64224] [client 45.133.5.32:64463] [client 45.133.5.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "acIIEnVzJqf6OS_oSZ2vWAAAAVg"]
[Tue Mar 24 11:42:10.752583 2026] [:error] [pid 38767:tid 38781] [client 45.133.5.19:45027] [client 45.133.5.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "acIIEvwkUqN4GJAI5oUe0QAAAQs"]
[Tue Mar 24 11:42:10.827779 2026] [:error] [pid 64198:tid 64218] [client 45.133.5.43:59611] [client 45.133.5.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/about.php"] [unique_id "acIIEnVzJqf6OS_oSZ2vWwAAAVI"]
[Tue Mar 24 11:42:10.965656 2026] [:error] [pid 64198:tid 64208] [client 45.133.5.30:55621] [client 45.133.5.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "acIIEnVzJqf6OS_oSZ2vXwAAAUg"]
[Tue Mar 24 11:42:11.007869 2026] [:error] [pid 64198:tid 64210] [client 45.133.5.29:63831] [client 45.133.5.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acIIE3VzJqf6OS_oSZ2vYAAAAUo"]
[Tue Mar 24 11:42:11.113371 2026] [:error] [pid 64198:tid 64214] [client 45.133.5.22:48429] [client 45.133.5.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "acIIE3VzJqf6OS_oSZ2vYQAAAU4"]
[Tue Mar 24 11:42:11.173943 2026] [:error] [pid 64198:tid 64203] [client 45.133.5.44:33835] [client 45.133.5.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acIIE3VzJqf6OS_oSZ2vYgAAAUM"]
[Tue Mar 24 11:42:11.213263 2026] [:error] [pid 64198:tid 64200] [client 45.133.5.15:36621] [client 45.133.5.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acIIE3VzJqf6OS_oSZ2vZAAAAUA"]
[Tue Mar 24 11:42:11.297612 2026] [:error] [pid 64198:tid 64215] [client 45.133.5.22:36357] [client 45.133.5.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.22, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "acIIE3VzJqf6OS_oSZ2vZgAAAU8"]
[Tue Mar 24 11:42:11.354617 2026] [:error] [pid 64198:tid 64219] [client 45.133.5.22:36357] [client 45.133.5.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "acIIE3VzJqf6OS_oSZ2vZwAAAVM"]
[Tue Mar 24 11:42:11.483801 2026] [:error] [pid 64198:tid 64204] [client 45.133.5.105:37307] [client 45.133.5.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "acIIE3VzJqf6OS_oSZ2vagAAAUQ"]
[Tue Mar 24 11:42:11.763291 2026] [:error] [pid 64198:tid 64221] [client 45.133.5.16:39115] [client 45.133.5.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "acIIE3VzJqf6OS_oSZ2vbQAAAVU"]
[Tue Mar 24 11:42:11.813446 2026] [:error] [pid 64198:tid 64210] [client 45.133.5.45:44371] [client 45.133.5.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "acIIE3VzJqf6OS_oSZ2vbgAAAUo"]
[Tue Mar 24 11:42:11.923651 2026] [:error] [pid 3030:tid 3069] [client 45.133.5.9:51749] [client 45.133.5.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "acIIEwyOuILyynfcqfkn0gAAABQ"]
[Tue Mar 24 11:42:11.970850 2026] [:error] [pid 64198:tid 64214] [client 45.133.5.40:27011] [client 45.133.5.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "acIIE3VzJqf6OS_oSZ2vcAAAAU4"]
[Tue Mar 24 11:42:12.012422 2026] [:error] [pid 64198:tid 64216] [client 45.133.5.52:34719] [client 45.133.5.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "acIIFHVzJqf6OS_oSZ2vcQAAAVA"]
[Tue Mar 24 11:42:12.131922 2026] [:error] [pid 64198:tid 64223] [client 45.133.5.10:34501] [client 45.133.5.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acIIFHVzJqf6OS_oSZ2vdAAAAVc"]
[Tue Mar 24 11:42:12.221056 2026] [:error] [pid 48219:tid 48290] [client 45.133.5.37:30343] [client 45.133.5.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.37, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acIIFChf3b4R_lAIyv8GQgAAAgk"]
[Tue Mar 24 11:42:12.470112 2026] [:error] [pid 48219:tid 48284] [client 45.133.5.37:30343] [client 45.133.5.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "acIIFChf3b4R_lAIyv8GRQAAAgM"]
[Tue Mar 24 11:42:12.544793 2026] [:error] [pid 64198:tid 64209] [client 45.133.5.49:25459] [client 45.133.5.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "acIIFHVzJqf6OS_oSZ2veAAAAUk"]
[Tue Mar 24 11:42:12.659321 2026] [:error] [pid 64198:tid 64210] [client 45.133.5.51:58929] [client 45.133.5.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "acIIFHVzJqf6OS_oSZ2vewAAAUo"]
[Tue Mar 24 11:42:12.709296 2026] [:error] [pid 48219:tid 48286] [client 45.133.5.10:56487] [client 45.133.5.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "acIIFChf3b4R_lAIyv8GRwAAAgU"]
[Tue Mar 24 11:42:12.902485 2026] [:error] [pid 3137:tid 3151] [client 45.133.5.43:59273] [client 45.133.5.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.43, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "acIIFJdZesutm6dfYM-S7AAAAMw"]
[Tue Mar 24 11:42:12.963785 2026] [:error] [pid 3137:tid 3159] [client 45.133.5.43:59273] [client 45.133.5.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "acIIFJdZesutm6dfYM-S7gAAANQ"]
[Tue Mar 24 11:42:13.088374 2026] [:error] [pid 3032:tid 3105] [client 45.133.5.37:45251] [client 45.133.5.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "acIIFSa_-JXXD03-JNwNrwAAAII"]
[Tue Mar 24 11:42:13.145506 2026] [:error] [pid 3137:tid 3160] [client 45.133.5.40:44857] [client 45.133.5.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "acIIFZdZesutm6dfYM-S7wAAANU"]
[Tue Mar 24 11:42:13.404342 2026] [:error] [pid 3137:tid 3150] [client 45.133.5.8:57189] [client 45.133.5.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "acIIFZdZesutm6dfYM-S8gAAAMs"]
[Tue Mar 24 11:42:13.440449 2026] [:error] [pid 64198:tid 64202] [client 45.133.5.42:46409] [client 45.133.5.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "acIIFXVzJqf6OS_oSZ2vfAAAAUI"]
[Tue Mar 24 11:42:13.501062 2026] [:error] [pid 38767:tid 38788] [client 45.133.5.27:42761] [client 45.133.5.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "acIIFfwkUqN4GJAI5oUe0gAAARI"]
[Tue Mar 24 11:42:13.771277 2026] [:error] [pid 64198:tid 64216] [client 45.133.5.7:46693] [client 45.133.5.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "acIIFXVzJqf6OS_oSZ2vgAAAAVA"]
[Tue Mar 24 11:42:14.016252 2026] [:error] [pid 64198:tid 64217] [client 45.133.5.32:53735] [client 45.133.5.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/s/tinymce/skins/lightgray/fonts/index.php"] [unique_id "acIIFnVzJqf6OS_oSZ2vhwAAAVE"]
[Tue Mar 24 11:42:14.170430 2026] [:error] [pid 48214:tid 48267] [client 45.133.5.35:25743] [client 45.133.5.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "acIIFreshLWZ3uUDHKkYhgAAAc8"]
[Tue Mar 24 11:42:14.204684 2026] [:error] [pid 38767:tid 38773] [client 45.133.5.48:63707] [client 45.133.5.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "acIIFvwkUqN4GJAI5oUe1AAAAQM"]
[Tue Mar 24 11:42:14.266868 2026] [:error] [pid 38767:tid 38784] [client 45.133.5.7:60323] [client 45.133.5.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "acIIFvwkUqN4GJAI5oUe1gAAAQ4"]
[Tue Mar 24 11:42:14.367523 2026] [:error] [pid 38767:tid 38776] [client 45.133.5.41:54269] [client 45.133.5.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "acIIFvwkUqN4GJAI5oUe2AAAAQY"]
[Tue Mar 24 11:42:14.406547 2026] [:error] [pid 38767:tid 38780] [client 45.133.5.27:60227] [client 45.133.5.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "acIIFvwkUqN4GJAI5oUe2QAAAQo"]
[Tue Mar 24 11:42:14.614119 2026] [:error] [pid 38767:tid 38779] [client 45.133.5.50:42363] [client 45.133.5.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "acIIFvwkUqN4GJAI5oUe3gAAAQk"]
[Tue Mar 24 11:42:14.745584 2026] [:error] [pid 38767:tid 38792] [client 45.133.5.54:39923] [client 45.133.5.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "acIIFvwkUqN4GJAI5oUe3wAAARY"]
[Tue Mar 24 11:42:15.818997 2026] [:error] [pid 38767:tid 38773] [client 45.133.5.11:52851] [client 45.133.5.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "acIIF_wkUqN4GJAI5oUe5AAAAQM"]
[Tue Mar 24 11:42:17.107580 2026] [:error] [pid 48214:tid 48265] [client 45.133.5.31:21239] [client 45.133.5.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "acIIGbeshLWZ3uUDHKkYjAAAAc0"]
[Tue Mar 24 11:42:17.180748 2026] [:error] [pid 48214:tid 48271] [client 45.133.5.48:52967] [client 45.133.5.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/pomo.php"] [unique_id "acIIGbeshLWZ3uUDHKkYjQAAAdM"]
[Tue Mar 24 11:42:17.221313 2026] [:error] [pid 38767:tid 38776] [client 45.133.5.8:50595] [client 45.133.5.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "acIIGfwkUqN4GJAI5oUe5wAAAQY"]
[Tue Mar 24 12:41:44.021347 2026] [:error] [pid 48219:tid 48285] [client 122.177.210.115:12461] [client 122.177.210.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.177.210.115, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acIWCChf3b4R_lAIyv8WfwAAAgQ"]
[Tue Mar 24 12:59:53.317640 2026] [:error] [pid 48214:tid 48276] [client 43.153.96.233:50554] [client 43.153.96.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acIaSbeshLWZ3uUDHKkmUwAAAdg"]
[Tue Mar 24 13:23:50.751788 2026] [:error] [pid 38767:tid 38791] [client 1.15.52.154:44570] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acIf5vwkUqN4GJAI5oVRLAAAARU"]
[Tue Mar 24 18:45:45.139482 2026] [:error] [pid 38767:tid 38779] [client 125.94.144.102:34079] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acJrWfwkUqN4GJAI5oX_CgAAAQk"]
[Tue Mar 24 23:08:53.436947 2026] [:error] [pid 38767:tid 38784] [client 103.250.109.226:56140] [client 103.250.109.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.250.109.226, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acKpBfwkUqN4GJAI5oV18gAAAQ4"]
[Wed Mar 25 00:46:08.406188 2026] [:error] [pid 57702:tid 57921] [client 45.131.195.32:60329] [client 45.131.195.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.32, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "acK_0KS8TU_xcQFvlnb5eAAAABI"]
[Wed Mar 25 01:14:58.307486 2026] [:error] [pid 58154:tid 58161] [client 45.156.87.11:57323] [client 45.156.87.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.156.87.11, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "acLGkg0pGUh6bwD3ouKQXwAAAMQ"]
[Wed Mar 25 01:38:52.323524 2026] [autoindex:error] [pid 20371:tid 20381] [client 20.17.160.49:62288] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 25 01:58:40.956416 2026] [:error] [pid 58154:tid 58165] [client 43.130.78.203:39924] [client 43.130.78.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acLQ0A0pGUh6bwD3ouKjWwAAAMg"]
[Wed Mar 25 01:59:45.546478 2026] [:error] [pid 20371:tid 20393] [client 20.215.242.226:53017] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acLREeb25OL4yTv2fF-a2AAAARQ"]
[Wed Mar 25 01:59:46.119626 2026] [:error] [pid 57711:tid 58071] [client 20.215.242.226:56289] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acLREqLdPFdeRRktTdNkcQAAAJE"]
[Wed Mar 25 01:59:46.870174 2026] [:error] [pid 57711:tid 58051] [client 20.215.242.226:45714] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acLREqLdPFdeRRktTdNkcgAAAIE"]
[Wed Mar 25 01:59:47.490376 2026] [:error] [pid 57703:tid 58037] [client 20.215.242.226:48364] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acLRE_IVQxDtjkklWGZi0QAAAFI"]
[Wed Mar 25 01:59:48.142714 2026] [:error] [pid 57702:tid 57908] [client 20.215.242.226:44020] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acLRFKS8TU_xcQFvlnYRdgAAAAU"]
[Wed Mar 25 01:59:48.928893 2026] [:error] [pid 57711:tid 58069] [client 20.215.242.226:48383] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acLRFKLdPFdeRRktTdNkdQAAAI8"]
[Wed Mar 25 01:59:49.552756 2026] [:error] [pid 20371:tid 20388] [client 20.215.242.226:48354] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acLRFeb25OL4yTv2fF-a2QAAAQ8"]
[Wed Mar 25 01:59:50.161285 2026] [:error] [pid 57702:tid 57909] [client 20.215.242.226:41954] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acLRFqS8TU_xcQFvlnYRdwAAAAY"]
[Wed Mar 25 01:59:50.800872 2026] [:error] [pid 57711:tid 58066] [client 20.215.242.226:55759] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acLRFqLdPFdeRRktTdNkeAAAAIw"]
[Wed Mar 25 01:59:51.610180 2026] [:error] [pid 20371:tid 20386] [client 20.215.242.226:48335] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acLRF-b25OL4yTv2fF-a3gAAAQ0"]
[Wed Mar 25 01:59:52.232437 2026] [:error] [pid 20371:tid 20381] [client 20.215.242.226:47088] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acLRGOb25OL4yTv2fF-a3wAAAQg"]
[Wed Mar 25 01:59:52.926325 2026] [:error] [pid 57711:tid 58064] [client 20.215.242.226:56959] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acLRGKLdPFdeRRktTdNkegAAAIs"]
[Wed Mar 25 01:59:53.499809 2026] [:error] [pid 20371:tid 20385] [client 20.215.242.226:40786] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acLRGeb25OL4yTv2fF-a4AAAAQw"]
[Wed Mar 25 01:59:54.157933 2026] [:error] [pid 57711:tid 58076] [client 20.215.242.226:52682] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acLRGqLdPFdeRRktTdNkewAAAJY"]
[Wed Mar 25 01:59:54.741665 2026] [:error] [pid 57711:tid 58054] [client 20.215.242.226:47058] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acLRGqLdPFdeRRktTdNkfAAAAIM"]
[Wed Mar 25 01:59:55.296795 2026] [:error] [pid 57702:tid 57910] [client 20.215.242.226:50547] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acLRG6S8TU_xcQFvlnYReQAAAAc"]
[Wed Mar 25 01:59:55.813636 2026] [:error] [pid 57702:tid 57917] [client 20.215.242.226:40779] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acLRG6S8TU_xcQFvlnYRewAAAA4"]
[Wed Mar 25 01:59:56.402655 2026] [:error] [pid 20371:tid 20388] [client 20.215.242.226:53030] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acLRHOb25OL4yTv2fF-a5QAAAQ8"]
[Wed Mar 25 01:59:56.945671 2026] [:error] [pid 57703:tid 58031] [client 20.215.242.226:47078] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acLRHPIVQxDtjkklWGZi1gAAAEw"]
[Wed Mar 25 01:59:57.488489 2026] [:error] [pid 20371:tid 20386] [client 20.215.242.226:56705] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acLRHeb25OL4yTv2fF-a6AAAAQ0"]
[Wed Mar 25 01:59:58.088973 2026] [:error] [pid 20371:tid 20381] [client 20.215.242.226:4246] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acLRHub25OL4yTv2fF-a6wAAAQg"]
[Wed Mar 25 01:59:58.778968 2026] [:error] [pid 57703:tid 58038] [client 20.215.242.226:40791] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acLRHvIVQxDtjkklWGZi2QAAAFM"]
[Wed Mar 25 01:59:59.515139 2026] [:error] [pid 57711:tid 58077] [client 20.215.242.226:56227] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acLRH6LdPFdeRRktTdNkgAAAAJc"]
[Wed Mar 25 02:00:00.081076 2026] [:error] [pid 57702:tid 57918] [client 20.215.242.226:4258] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acLRIKS8TU_xcQFvlnYRfwAAAA8"]
[Wed Mar 25 02:00:00.659140 2026] [:error] [pid 57711:tid 58060] [client 20.215.242.226:33104] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acLRIKLdPFdeRRktTdNkggAAAIg"]
[Wed Mar 25 02:00:01.337003 2026] [:error] [pid 57702:tid 57903] [client 20.215.242.226:55949] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acLRIaS8TU_xcQFvlnYRgAAAAAA"]
[Wed Mar 25 02:00:01.969737 2026] [:error] [pid 57702:tid 57905] [client 20.215.242.226:33112] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acLRIaS8TU_xcQFvlnYRggAAAAI"]
[Wed Mar 25 02:00:02.644784 2026] [:error] [pid 57703:tid 58026] [client 20.215.242.226:45338] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acLRIvIVQxDtjkklWGZi4AAAAEc"]
[Wed Mar 25 02:00:03.213301 2026] [:error] [pid 57702:tid 57907] [client 20.215.242.226:45325] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acLRI6S8TU_xcQFvlnYRgwAAAAQ"]
[Wed Mar 25 02:00:03.810109 2026] [:error] [pid 58154:tid 58171] [client 20.215.242.226:46374] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acLRIw0pGUh6bwD3ouKjkwAAAM4"]
[Wed Mar 25 02:00:04.388468 2026] [:error] [pid 57703:tid 58022] [client 20.215.242.226:52707] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acLRJPIVQxDtjkklWGZi5AAAAEM"]
[Wed Mar 25 02:00:05.025892 2026] [:error] [pid 20371:tid 20395] [client 20.215.242.226:55758] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acLRJeb25OL4yTv2fF-a9AAAARY"]
[Wed Mar 25 02:00:05.648078 2026] [:error] [pid 58154:tid 58181] [client 20.215.242.226:33145] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acLRJQ0pGUh6bwD3ouKjlQAAANg"]
[Wed Mar 25 02:00:06.162928 2026] [:error] [pid 20371:tid 20389] [client 20.215.242.226:46358] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acLRJub25OL4yTv2fF-a-QAAARA"]
[Wed Mar 25 02:00:06.737812 2026] [:error] [pid 20371:tid 20383] [client 20.215.242.226:56082] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acLRJub25OL4yTv2fF-a-wAAAQo"]
[Wed Mar 25 02:00:07.268591 2026] [:error] [pid 57711:tid 58071] [client 20.215.242.226:48332] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acLRJ6LdPFdeRRktTdNkgwAAAJE"]
[Wed Mar 25 02:00:07.993426 2026] [:error] [pid 57702:tid 57924] [client 20.215.242.226:41934] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "acLRJ6S8TU_xcQFvlnYRhgAAABU"]
[Wed Mar 25 02:00:08.660544 2026] [:error] [pid 57702:tid 57906] [client 20.215.242.226:33139] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "acLRKKS8TU_xcQFvlnYRhwAAAAM"]
[Wed Mar 25 02:00:09.313399 2026] [:error] [pid 57711:tid 58051] [client 20.215.242.226:47073] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "acLRKaLdPFdeRRktTdNkhAAAAIE"]
[Wed Mar 25 02:00:10.229214 2026] [:error] [pid 57702:tid 57919] [client 20.215.242.226:40769] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "acLRKqS8TU_xcQFvlnYRiQAAABA"]
[Wed Mar 25 02:00:10.911464 2026] [:error] [pid 57702:tid 57922] [client 20.215.242.226:48327] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "acLRKqS8TU_xcQFvlnYRiwAAABM"]
[Wed Mar 25 02:00:11.596249 2026] [:error] [pid 57711:tid 58069] [client 20.215.242.226:55789] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "acLRK6LdPFdeRRktTdNkhgAAAI8"]
[Wed Mar 25 02:00:12.174170 2026] [:error] [pid 57703:tid 58039] [client 20.215.242.226:50378] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "acLRLPIVQxDtjkklWGZi6wAAAFQ"]
[Wed Mar 25 02:00:12.907583 2026] [:error] [pid 57711:tid 58072] [client 20.215.242.226:4640] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "acLRLKLdPFdeRRktTdNkiQAAAJI"]
[Wed Mar 25 02:00:13.451461 2026] [:error] [pid 57703:tid 58020] [client 20.215.242.226:52725] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "acLRLfIVQxDtjkklWGZi7gAAAEE"]
[Wed Mar 25 02:00:14.133333 2026] [:error] [pid 57703:tid 58025] [client 20.215.242.226:56751] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "acLRLvIVQxDtjkklWGZi7wAAAEY"]
[Wed Mar 25 02:00:14.852032 2026] [:error] [pid 57702:tid 57907] [client 20.215.242.226:47070] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "acLRLqS8TU_xcQFvlnYRkAAAAAQ"]
[Wed Mar 25 02:00:15.505282 2026] [:error] [pid 57702:tid 57909] [client 20.215.242.226:56906] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "acLRL6S8TU_xcQFvlnYRkwAAAAY"]
[Wed Mar 25 02:00:16.070030 2026] [:error] [pid 57702:tid 57925] [client 20.215.242.226:33144] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acLRMKS8TU_xcQFvlnYRlQAAABY"]
[Wed Mar 25 02:00:17.062166 2026] [:error] [pid 58154:tid 58157] [client 20.215.242.226:32749] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acLRMQ0pGUh6bwD3ouKjlwAAAMA"]
[Wed Mar 25 02:00:17.656298 2026] [:error] [pid 57703:tid 58022] [client 20.215.242.226:44004] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acLRMfIVQxDtjkklWGZi9gAAAEM"]
[Wed Mar 25 02:00:18.430776 2026] [:error] [pid 58154:tid 58158] [client 20.215.242.226:52993] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acLRMg0pGUh6bwD3ouKjmQAAAME"]
[Wed Mar 25 02:00:19.176662 2026] [:error] [pid 20371:tid 20382] [client 20.215.242.226:55775] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acLRM-b25OL4yTv2fF-bBAAAAQk"]
[Wed Mar 25 02:00:20.008916 2026] [:error] [pid 20371:tid 20384] [client 20.215.242.226:56936] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acLRNOb25OL4yTv2fF-bBQAAAQs"]
[Wed Mar 25 02:00:20.659564 2026] [:error] [pid 58154:tid 58162] [client 20.215.242.226:46370] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acLRNA0pGUh6bwD3ouKjmgAAAMU"]
[Wed Mar 25 02:00:21.392730 2026] [:error] [pid 58154:tid 58167] [client 20.215.242.226:55746] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acLRNQ0pGUh6bwD3ouKjmwAAAMo"]
[Wed Mar 25 02:00:22.106517 2026] [:error] [pid 57702:tid 57926] [client 20.215.242.226:40798] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acLRNqS8TU_xcQFvlnYRmwAAABc"]
[Wed Mar 25 02:00:22.942455 2026] [:error] [pid 57711:tid 58077] [client 20.215.242.226:45755] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acLRNqLdPFdeRRktTdNkjgAAAJc"]
[Wed Mar 25 02:00:23.759200 2026] [:error] [pid 57702:tid 57912] [client 20.215.242.226:55851] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acLRN6S8TU_xcQFvlnYRnQAAAAk"]
[Wed Mar 25 02:00:24.474655 2026] [:error] [pid 58154:tid 58178] [client 20.215.242.226:40806] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acLROA0pGUh6bwD3ouKjnQAAANU"]
[Wed Mar 25 02:00:25.189609 2026] [:error] [pid 57703:tid 58021] [client 20.215.242.226:41923] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acLROfIVQxDtjkklWGZi-QAAAEI"]
[Wed Mar 25 02:00:25.821298 2026] [:error] [pid 58154:tid 58160] [client 20.215.242.226:56749] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acLROQ0pGUh6bwD3ouKjoAAAAMM"]
[Wed Mar 25 02:00:26.449388 2026] [:error] [pid 57711:tid 58051] [client 20.215.242.226:56282] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acLROqLdPFdeRRktTdNkkQAAAIE"]
[Wed Mar 25 02:00:27.066052 2026] [:error] [pid 57703:tid 58038] [client 20.215.242.226:36549] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acLRO_IVQxDtjkklWGZi-wAAAFM"]
[Wed Mar 25 02:00:27.840387 2026] [:error] [pid 57703:tid 58042] [client 20.215.242.226:56916] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acLRO_IVQxDtjkklWGZi_AAAAFc"]
[Wed Mar 25 02:00:28.608726 2026] [:error] [pid 20371:tid 20389] [client 20.215.242.226:48881] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acLRPOb25OL4yTv2fF-bCQAAARA"]
[Wed Mar 25 02:00:29.384200 2026] [:error] [pid 57703:tid 58035] [client 20.215.242.226:45712] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acLRPfIVQxDtjkklWGZi_QAAAFA"]
[Wed Mar 25 02:00:30.043530 2026] [:error] [pid 20371:tid 20387] [client 20.215.242.226:53842] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acLRPub25OL4yTv2fF-bDQAAAQ4"]
[Wed Mar 25 02:00:30.610310 2026] [:error] [pid 57703:tid 58025] [client 20.215.242.226:48866] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acLRPvIVQxDtjkklWGZi_wAAAEY"]
[Wed Mar 25 02:00:31.135324 2026] [:error] [pid 57711:tid 58064] [client 20.215.242.226:48553] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acLRP6LdPFdeRRktTdNklQAAAIs"]
[Wed Mar 25 02:00:31.876131 2026] [:error] [pid 58154:tid 58174] [client 20.215.242.226:44496] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acLRPw0pGUh6bwD3ouKjpQAAANE"]
[Wed Mar 25 02:00:32.685563 2026] [:error] [pid 57702:tid 57926] [client 20.215.242.226:49587] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acLRQKS8TU_xcQFvlnYRpAAAABc"]
[Wed Mar 25 02:00:33.367786 2026] [:error] [pid 20371:tid 20375] [client 20.215.242.226:36603] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acLRQeb25OL4yTv2fF-bEwAAAQI"]
[Wed Mar 25 02:00:33.916524 2026] [:error] [pid 20371:tid 20391] [client 20.215.242.226:30766] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acLRQeb25OL4yTv2fF-bFgAAARI"]
[Wed Mar 25 02:00:34.520845 2026] [:error] [pid 58154:tid 58164] [client 20.215.242.226:30740] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acLRQg0pGUh6bwD3ouKjpgAAAMc"]
[Wed Mar 25 02:00:35.204833 2026] [:error] [pid 58154:tid 58166] [client 20.215.242.226:56329] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acLRQw0pGUh6bwD3ouKjpwAAAMk"]
[Wed Mar 25 02:00:35.937789 2026] [:error] [pid 57702:tid 57923] [client 20.215.242.226:48528] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acLRQ6S8TU_xcQFvlnYRqAAAABQ"]
[Wed Mar 25 02:00:36.873030 2026] [:error] [pid 20371:tid 20396] [client 20.215.242.226:54061] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acLRROb25OL4yTv2fF-bGgAAARc"]
[Wed Mar 25 02:00:37.648403 2026] [:error] [pid 57702:tid 57907] [client 20.215.242.226:39894] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acLRRaS8TU_xcQFvlnYRqwAAAAQ"]
[Wed Mar 25 02:00:38.598758 2026] [:error] [pid 20371:tid 20384] [client 20.215.242.226:55691] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acLRRub25OL4yTv2fF-bHAAAAQs"]
[Wed Mar 25 02:00:39.323843 2026] [:error] [pid 57702:tid 57921] [client 20.215.242.226:48408] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acLRR6S8TU_xcQFvlnYRrQAAABI"]
[Wed Mar 25 02:00:40.238598 2026] [:error] [pid 57702:tid 57911] [client 20.215.242.226:30764] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acLRSKS8TU_xcQFvlnYRrgAAAAg"]
[Wed Mar 25 02:00:41.023144 2026] [:error] [pid 57711:tid 58077] [client 20.215.242.226:55053] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acLRSaLdPFdeRRktTdNkmwAAAJc"]
[Wed Mar 25 02:00:41.801762 2026] [:error] [pid 58154:tid 58165] [client 20.215.242.226:37727] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acLRSQ0pGUh6bwD3ouKjrgAAAMg"]
[Wed Mar 25 02:00:42.396283 2026] [:error] [pid 58154:tid 58172] [client 20.215.242.226:44526] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "acLRSg0pGUh6bwD3ouKjrwAAAM8"]
[Wed Mar 25 02:00:43.069448 2026] [:error] [pid 58154:tid 58181] [client 20.215.242.226:38865] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "acLRSw0pGUh6bwD3ouKjsgAAANg"]
[Wed Mar 25 02:00:43.743150 2026] [:error] [pid 20371:tid 20392] [client 20.215.242.226:55729] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "acLRS-b25OL4yTv2fF-bIwAAARM"]
[Wed Mar 25 02:00:44.334159 2026] [:error] [pid 57711:tid 58062] [client 20.215.242.226:37724] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "acLRTKLdPFdeRRktTdNknwAAAIk"]
[Wed Mar 25 02:00:44.934526 2026] [:error] [pid 57711:tid 58058] [client 20.215.242.226:31755] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acLRTKLdPFdeRRktTdNkoAAAAIY"]
[Wed Mar 25 02:00:53.102158 2026] [:error] [pid 20371:tid 20393] [client 20.215.242.226:54636] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "acLRVeb25OL4yTv2fF-bTQAAARQ"]
[Wed Mar 25 02:00:53.647455 2026] [:error] [pid 20371:tid 20389] [client 20.215.242.226:37283] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "acLRVeb25OL4yTv2fF-bTwAAARA"]
[Wed Mar 25 02:00:54.284693 2026] [:error] [pid 57703:tid 58023] [client 20.215.242.226:53550] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "acLRVvIVQxDtjkklWGZjAwAAAEQ"]
[Wed Mar 25 02:00:54.873348 2026] [:error] [pid 57702:tid 57920] [client 20.215.242.226:55475] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "acLRVqS8TU_xcQFvlnYRsAAAABE"]
[Wed Mar 25 02:00:55.455733 2026] [:error] [pid 20371:tid 20387] [client 20.215.242.226:41496] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acLRV-b25OL4yTv2fF-bUwAAAQ4"]
[Wed Mar 25 02:00:56.259865 2026] [:error] [pid 58154:tid 58177] [client 20.215.242.226:55447] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acLRWA0pGUh6bwD3ouKjtgAAANQ"]
[Wed Mar 25 02:00:56.848396 2026] [:error] [pid 20371:tid 20375] [client 20.215.242.226:50306] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acLRWOb25OL4yTv2fF-bWwAAAQI"]
[Wed Mar 25 02:00:57.416377 2026] [:error] [pid 20371:tid 20376] [client 20.215.242.226:42538] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acLRWeb25OL4yTv2fF-bXQAAAQM"]
[Wed Mar 25 02:00:58.286752 2026] [:error] [pid 57702:tid 57915] [client 20.215.242.226:52858] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "acLRWqS8TU_xcQFvlnYRsQAAAAw"]
[Wed Mar 25 02:00:58.813658 2026] [:error] [pid 57702:tid 57916] [client 20.215.242.226:50332] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "acLRWqS8TU_xcQFvlnYRtAAAAA0"]
[Wed Mar 25 02:00:59.596623 2026] [:error] [pid 57703:tid 58028] [client 20.215.242.226:53509] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "acLRW_IVQxDtjkklWGZjBwAAAEk"]
[Wed Mar 25 02:01:00.238953 2026] [:error] [pid 57703:tid 58021] [client 20.215.242.226:43491] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "acLRXPIVQxDtjkklWGZjCAAAAEI"]
[Wed Mar 25 02:01:00.860872 2026] [:error] [pid 58154:tid 58165] [client 20.215.242.226:38120] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "acLRXA0pGUh6bwD3ouKjuwAAAMg"]
[Wed Mar 25 02:01:01.453017 2026] [:error] [pid 57703:tid 58038] [client 20.215.242.226:52574] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "acLRXfIVQxDtjkklWGZjCQAAAFM"]
[Wed Mar 25 02:01:02.049842 2026] [:error] [pid 57703:tid 58039] [client 20.215.242.226:4576] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "acLRXvIVQxDtjkklWGZjCgAAAFQ"]
[Wed Mar 25 02:01:02.724860 2026] [:error] [pid 57703:tid 58043] [client 20.215.242.226:37293] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "acLRXvIVQxDtjkklWGZjDQAAAFg"]
[Wed Mar 25 02:01:03.352636 2026] [:error] [pid 58154:tid 58174] [client 20.215.242.226:42197] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "acLRXw0pGUh6bwD3ouKjvQAAANE"]
[Wed Mar 25 02:01:03.926823 2026] [:error] [pid 20371:tid 20393] [client 20.215.242.226:53170] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "acLRX-b25OL4yTv2fF-bZAAAARQ"]
[Wed Mar 25 02:01:04.505095 2026] [:error] [pid 57703:tid 58037] [client 20.215.242.226:42136] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "acLRYPIVQxDtjkklWGZjEgAAAFI"]
[Wed Mar 25 02:01:05.179349 2026] [:error] [pid 20371:tid 20392] [client 20.215.242.226:31286] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "acLRYeb25OL4yTv2fF-bZwAAARM"]
[Wed Mar 25 02:01:05.860347 2026] [:error] [pid 57703:tid 58019] [client 20.215.242.226:36491] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acLRYfIVQxDtjkklWGZjFgAAAEA"]
[Wed Mar 25 02:01:06.447632 2026] [:error] [pid 20371:tid 20385] [client 20.215.242.226:42120] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acLRYub25OL4yTv2fF-bagAAAQw"]
[Wed Mar 25 02:01:06.999083 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:54842] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acLRYub25OL4yTv2fF-bbAAAAQE"]
[Wed Mar 25 02:01:07.606171 2026] [:error] [pid 20371:tid 20377] [client 20.215.242.226:30811] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acLRY-b25OL4yTv2fF-bcAAAAQQ"]
[Wed Mar 25 02:01:08.354340 2026] [:error] [pid 20371:tid 20375] [client 20.215.242.226:55676] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acLRZOb25OL4yTv2fF-bdQAAAQI"]
[Wed Mar 25 02:01:09.008181 2026] [:error] [pid 20371:tid 20389] [client 20.215.242.226:45793] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acLRZeb25OL4yTv2fF-beAAAARA"]
[Wed Mar 25 02:01:09.549745 2026] [:error] [pid 20371:tid 20390] [client 20.215.242.226:30822] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acLRZeb25OL4yTv2fF-bfAAAARE"]
[Wed Mar 25 02:01:10.096908 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:50805] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acLRZub25OL4yTv2fF-bfwAAAQE"]
[Wed Mar 25 02:01:10.764985 2026] [:error] [pid 20371:tid 20387] [client 20.215.242.226:49878] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acLRZub25OL4yTv2fF-bgQAAAQ4"]
[Wed Mar 25 02:01:11.343812 2026] [:error] [pid 57702:tid 57925] [client 20.215.242.226:45801] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acLRZ6S8TU_xcQFvlnYRvgAAABY"]
[Wed Mar 25 02:01:11.888656 2026] [:error] [pid 57702:tid 57926] [client 20.215.242.226:4201] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acLRZ6S8TU_xcQFvlnYRwQAAABc"]
[Wed Mar 25 02:01:12.563648 2026] [:error] [pid 57702:tid 57915] [client 20.215.242.226:36987] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acLRaKS8TU_xcQFvlnYRxAAAAAw"]
[Wed Mar 25 02:01:13.098809 2026] [:error] [pid 57711:tid 58067] [client 20.215.242.226:54237] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acLRaaLdPFdeRRktTdNktgAAAI0"]
[Wed Mar 25 02:01:13.730559 2026] [:error] [pid 57702:tid 57913] [client 20.215.242.226:4221] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acLRaaS8TU_xcQFvlnYRyAAAAAo"]
[Wed Mar 25 02:01:14.400492 2026] [:error] [pid 57702:tid 57907] [client 20.215.242.226:4814] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acLRaqS8TU_xcQFvlnYRzAAAAAQ"]
[Wed Mar 25 02:01:15.058873 2026] [:error] [pid 20371:tid 20381] [client 20.215.242.226:4822] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acLRa-b25OL4yTv2fF-biQAAAQg"]
[Wed Mar 25 02:01:15.701444 2026] [:error] [pid 20371:tid 20384] [client 20.215.242.226:56464] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acLRa-b25OL4yTv2fF-bjQAAAQs"]
[Wed Mar 25 02:01:16.262278 2026] [:error] [pid 20371:tid 20396] [client 20.215.242.226:4762] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acLRbOb25OL4yTv2fF-bkAAAARc"]
[Wed Mar 25 02:01:17.013174 2026] [:error] [pid 57711:tid 58074] [client 20.215.242.226:56509] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acLRbaLdPFdeRRktTdNkuwAAAJQ"]
[Wed Mar 25 02:01:17.676680 2026] [:error] [pid 57711:tid 58062] [client 20.215.242.226:30810] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acLRbaLdPFdeRRktTdNkvgAAAIk"]
[Wed Mar 25 02:01:18.587296 2026] [:error] [pid 20371:tid 20391] [client 20.215.242.226:41347] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acLRbub25OL4yTv2fF-blQAAARI"]
[Wed Mar 25 02:01:19.224323 2026] [:error] [pid 58154:tid 58175] [client 20.215.242.226:54136] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acLRbw0pGUh6bwD3ouKjxgAAANI"]
[Wed Mar 25 02:01:19.988971 2026] [:error] [pid 57702:tid 57917] [client 20.215.242.226:48828] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acLRb6S8TU_xcQFvlnYRzgAAAA4"]
[Wed Mar 25 02:01:20.652528 2026] [:error] [pid 58154:tid 58165] [client 20.215.242.226:32356] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acLRcA0pGUh6bwD3ouKjyQAAAMg"]
[Wed Mar 25 02:01:21.279880 2026] [:error] [pid 20371:tid 20387] [client 20.215.242.226:32374] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acLRceb25OL4yTv2fF-bmgAAAQ4"]
[Wed Mar 25 02:01:22.094369 2026] [:error] [pid 57703:tid 58038] [client 20.215.242.226:51339] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acLRcvIVQxDtjkklWGZjGwAAAFM"]
[Wed Mar 25 02:01:22.912912 2026] [:error] [pid 57711:tid 58052] [client 20.215.242.226:56490] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acLRcqLdPFdeRRktTdNkwgAAAII"]
[Wed Mar 25 02:01:23.611664 2026] [:error] [pid 20371:tid 20389] [client 20.215.242.226:4167] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acLRc-b25OL4yTv2fF-bnwAAARA"]
[Wed Mar 25 02:01:24.292681 2026] [:error] [pid 57702:tid 57921] [client 20.215.242.226:36930] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "acLRdKS8TU_xcQFvlnYRzwAAABI"]
[Wed Mar 25 02:01:25.051150 2026] [:error] [pid 20371:tid 20373] [client 20.215.242.226:4768] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "acLRdeb25OL4yTv2fF-bpQAAAQA"]
[Wed Mar 25 02:01:25.855224 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:48881] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "acLRdeb25OL4yTv2fF-bqQAAAQE"]
[Wed Mar 25 02:01:26.484276 2026] [:error] [pid 20371:tid 20387] [client 20.215.242.226:54263] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "acLRdub25OL4yTv2fF-bqwAAAQ4"]
[Wed Mar 25 02:01:27.349284 2026] [:error] [pid 57711:tid 58056] [client 20.215.242.226:32381] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acLRd6LdPFdeRRktTdNkxQAAAIU"]
[Wed Mar 25 02:01:28.101088 2026] [:error] [pid 57711:tid 58054] [client 20.215.242.226:4775] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acLReKLdPFdeRRktTdNkyAAAAIM"]
[Wed Mar 25 02:01:28.897943 2026] [:error] [pid 20371:tid 20389] [client 20.215.242.226:53478] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acLReOb25OL4yTv2fF-bsAAAARA"]
[Wed Mar 25 02:01:29.502083 2026] [:error] [pid 20371:tid 20393] [client 20.215.242.226:4336] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acLReeb25OL4yTv2fF-bsgAAARQ"]
[Wed Mar 25 02:01:30.207496 2026] [:error] [pid 57703:tid 58036] [client 20.215.242.226:51328] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "acLRevIVQxDtjkklWGZjJAAAAFE"]
[Wed Mar 25 02:01:30.781052 2026] [:error] [pid 20371:tid 20392] [client 20.215.242.226:33755] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "acLReub25OL4yTv2fF-buAAAARM"]
[Wed Mar 25 02:01:31.531466 2026] [:error] [pid 57711:tid 58052] [client 20.215.242.226:4329] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "acLRe6LdPFdeRRktTdNk0wAAAII"]
[Wed Mar 25 02:01:32.074386 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:30798] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "acLRfOb25OL4yTv2fF-buwAAAQE"]
[Wed Mar 25 02:01:32.622684 2026] [:error] [pid 58154:tid 58166] [client 20.215.242.226:51346] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acLRfA0pGUh6bwD3ouKjzQAAAMk"]
[Wed Mar 25 02:01:33.515596 2026] [:error] [pid 58154:tid 58158] [client 20.215.242.226:51362] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acLRfQ0pGUh6bwD3ouKjzgAAAME"]
[Wed Mar 25 02:01:34.158286 2026] [:error] [pid 20371:tid 20389] [client 20.215.242.226:4779] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acLRfub25OL4yTv2fF-bwQAAARA"]
[Wed Mar 25 02:01:35.031875 2026] [:error] [pid 57711:tid 58077] [client 20.215.242.226:33759] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acLRf6LdPFdeRRktTdNk2AAAAJc"]
[Wed Mar 25 02:01:35.674845 2026] [:error] [pid 20371:tid 20379] [client 20.215.242.226:51369] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acLRf-b25OL4yTv2fF-bxQAAAQY"]
[Wed Mar 25 02:01:36.442324 2026] [:error] [pid 57703:tid 58038] [client 20.215.242.226:4847] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acLRgPIVQxDtjkklWGZjKAAAAFM"]
[Wed Mar 25 02:01:37.205811 2026] [:error] [pid 57703:tid 58043] [client 20.215.242.226:4954] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acLRgfIVQxDtjkklWGZjLAAAAFg"]
[Wed Mar 25 02:01:37.928015 2026] [:error] [pid 58154:tid 58178] [client 20.215.242.226:33766] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acLRgQ0pGUh6bwD3ouKj0wAAANU"]
[Wed Mar 25 02:01:38.778769 2026] [:error] [pid 58154:tid 58169] [client 20.215.242.226:30797] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acLRgg0pGUh6bwD3ouKj1AAAAMw"]
[Wed Mar 25 02:01:39.482960 2026] [:error] [pid 58154:tid 58165] [client 20.215.242.226:53445] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acLRgw0pGUh6bwD3ouKj1wAAAMg"]
[Wed Mar 25 02:01:40.046496 2026] [:error] [pid 58154:tid 58174] [client 20.215.242.226:56449] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acLRhA0pGUh6bwD3ouKj2AAAANE"]
[Wed Mar 25 02:01:40.756879 2026] [:error] [pid 57702:tid 57913] [client 20.215.242.226:49872] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acLRhKS8TU_xcQFvlnYR1wAAAAo"]
[Wed Mar 25 02:01:41.503990 2026] [:error] [pid 20371:tid 20396] [client 20.215.242.226:56482] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acLRheb25OL4yTv2fF-bygAAARc"]
[Wed Mar 25 02:01:42.309219 2026] [:error] [pid 57702:tid 57905] [client 20.215.242.226:53464] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acLRhqS8TU_xcQFvlnYR2AAAAAI"]
[Wed Mar 25 02:01:42.913999 2026] [:error] [pid 58154:tid 58166] [client 20.215.242.226:4743] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acLRhg0pGUh6bwD3ouKj3AAAAMk"]
[Wed Mar 25 02:01:43.798704 2026] [:error] [pid 57703:tid 58036] [client 20.215.242.226:56457] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acLRh_IVQxDtjkklWGZjNgAAAFE"]
[Wed Mar 25 02:01:44.552597 2026] [:error] [pid 57703:tid 58022] [client 20.215.242.226:4338] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acLRiPIVQxDtjkklWGZjNwAAAEM"]
[Wed Mar 25 02:01:45.252615 2026] [:error] [pid 57702:tid 57917] [client 20.215.242.226:49897] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acLRiaS8TU_xcQFvlnYR3QAAAA4"]
[Wed Mar 25 02:01:45.869158 2026] [:error] [pid 57703:tid 58038] [client 20.215.242.226:4766] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acLRifIVQxDtjkklWGZjOQAAAFM"]
[Wed Mar 25 02:01:46.856035 2026] [:error] [pid 58154:tid 58169] [client 20.215.242.226:32364] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acLRig0pGUh6bwD3ouKj5QAAAMw"]
[Wed Mar 25 02:01:47.714324 2026] [:error] [pid 57703:tid 58034] [client 20.215.242.226:33733] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acLRi_IVQxDtjkklWGZjOwAAAE8"]
[Wed Mar 25 02:01:48.374564 2026] [:error] [pid 20371:tid 20388] [client 20.215.242.226:36952] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acLRjOb25OL4yTv2fF-b0AAAAQ8"]
[Wed Mar 25 02:01:48.918815 2026] [:error] [pid 20371:tid 20378] [client 20.215.242.226:33736] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acLRjOb25OL4yTv2fF-b0gAAAQU"]
[Wed Mar 25 02:01:49.602623 2026] [:error] [pid 57702:tid 57910] [client 20.215.242.226:54225] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acLRjaS8TU_xcQFvlnYR5AAAAAc"]
[Wed Mar 25 02:01:50.399221 2026] [:error] [pid 57703:tid 58033] [client 20.215.242.226:56499] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "acLRjvIVQxDtjkklWGZjPgAAAE4"]
[Wed Mar 25 02:01:51.124502 2026] [:error] [pid 57711:tid 58067] [client 20.215.242.226:48787] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "acLRj6LdPFdeRRktTdNk5gAAAI0"]
[Wed Mar 25 02:01:59.970376 2026] [:error] [pid 57711:tid 58066] [client 20.215.242.226:4841] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acLRl6LdPFdeRRktTdNk_AAAAIw"]
[Wed Mar 25 02:02:01.298575 2026] [:error] [pid 20371:tid 20387] [client 20.215.242.226:30817] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acLRmeb25OL4yTv2fF-b3AAAAQ4"]
[Wed Mar 25 02:02:02.502183 2026] [:error] [pid 58154:tid 58163] [client 20.215.242.226:56452] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acLRmg0pGUh6bwD3ouKkCwAAAMY"]
[Wed Mar 25 02:02:03.584958 2026] [:error] [pid 20371:tid 20376] [client 20.215.242.226:4338] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acLRm-b25OL4yTv2fF-b4AAAAQM"]
[Wed Mar 25 02:02:03.841398 2026] [:error] [pid 57702:tid 57923] [client 20.215.242.226:30819] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acLRm6S8TU_xcQFvlnYSHQAAABQ"]
[Wed Mar 25 02:02:04.653538 2026] [:error] [pid 57703:tid 58033] [client 20.215.242.226:53452] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acLRnPIVQxDtjkklWGZjUAAAAE4"]
[Wed Mar 25 02:02:05.534950 2026] [:error] [pid 58154:tid 58171] [client 20.215.242.226:4348] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acLRnQ0pGUh6bwD3ouKkHgAAAM4"]
[Wed Mar 25 02:02:06.691062 2026] [:error] [pid 57702:tid 57925] [client 20.215.242.226:48819] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acLRnqS8TU_xcQFvlnYSIwAAABY"]
[Wed Mar 25 02:02:07.561500 2026] [:error] [pid 20371:tid 20395] [client 20.215.242.226:49858] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acLRn-b25OL4yTv2fF-b5gAAARY"]
[Wed Mar 25 02:02:08.474126 2026] [:error] [pid 20371:tid 20397] [client 20.215.242.226:48782] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acLRoOb25OL4yTv2fF-b7AAAARg"]
[Wed Mar 25 02:02:09.204484 2026] [:error] [pid 57703:tid 58040] [client 20.215.242.226:54216] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acLRofIVQxDtjkklWGZjVQAAAFU"]
[Wed Mar 25 02:02:09.927815 2026] [:error] [pid 57702:tid 57910] [client 20.215.242.226:48816] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acLRoaS8TU_xcQFvlnYSJgAAAAc"]
[Wed Mar 25 02:02:10.936419 2026] [:error] [pid 57702:tid 57906] [client 20.215.242.226:33772] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acLRoqS8TU_xcQFvlnYSKQAAAAM"]
[Wed Mar 25 02:02:12.026595 2026] [:error] [pid 20371:tid 20395] [client 20.215.242.226:50423] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acLRpOb25OL4yTv2fF-b9wAAARY"]
[Wed Mar 25 02:02:12.993514 2026] [:error] [pid 20371:tid 20381] [client 20.215.242.226:4942] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acLRpOb25OL4yTv2fF-b_AAAAQg"]
[Wed Mar 25 02:02:13.594594 2026] [:error] [pid 20371:tid 20385] [client 20.215.242.226:53492] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acLRpeb25OL4yTv2fF-cAQAAAQw"]
[Wed Mar 25 02:02:14.284440 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:53467] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acLRpub25OL4yTv2fF-cBAAAAQE"]
[Wed Mar 25 02:02:14.996709 2026] [:error] [pid 58154:tid 58170] [client 20.215.242.226:54138] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acLRpg0pGUh6bwD3ouKkJgAAAM0"]
[Wed Mar 25 02:02:16.157865 2026] [:error] [pid 58154:tid 58163] [client 20.215.242.226:54097] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acLRqA0pGUh6bwD3ouKkKQAAAMY"]
[Wed Mar 25 02:02:16.829542 2026] [:error] [pid 58154:tid 58165] [client 20.215.242.226:54217] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acLRqA0pGUh6bwD3ouKkLAAAAMg"]
[Wed Mar 25 02:02:17.518310 2026] [:error] [pid 20371:tid 20382] [client 20.215.242.226:4298] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "acLRqeb25OL4yTv2fF-cDQAAAQk"]
[Wed Mar 25 02:02:18.180400 2026] [:error] [pid 58154:tid 58166] [client 20.215.242.226:56465] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "acLRqg0pGUh6bwD3ouKkMQAAAMk"]
[Wed Mar 25 02:02:18.716343 2026] [:error] [pid 20371:tid 20377] [client 20.215.242.226:54086] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "acLRqub25OL4yTv2fF-cDwAAAQQ"]
[Wed Mar 25 02:02:19.603975 2026] [:error] [pid 57702:tid 57924] [client 20.215.242.226:32329] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "acLRq6S8TU_xcQFvlnYSMwAAABU"]
[Wed Mar 25 02:02:20.539275 2026] [:error] [pid 57702:tid 57919] [client 20.215.242.226:4751] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "acLRrKS8TU_xcQFvlnYSNwAAABA"]
[Wed Mar 25 02:02:21.537157 2026] [:error] [pid 57702:tid 57922] [client 20.215.242.226:4192] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "acLRraS8TU_xcQFvlnYSOAAAABM"]
[Wed Mar 25 02:02:22.419624 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:4742] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "acLRrub25OL4yTv2fF-cFwAAAQE"]
[Wed Mar 25 02:02:23.160221 2026] [:error] [pid 57711:tid 58059] [client 20.215.242.226:4166] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "acLRr6LdPFdeRRktTdNlAwAAAIc"]
[Wed Mar 25 02:02:24.100157 2026] [:error] [pid 57711:tid 58069] [client 20.215.242.226:4344] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acLRsKLdPFdeRRktTdNlBQAAAI8"]
[Wed Mar 25 02:02:25.218608 2026] [:error] [pid 58154:tid 58164] [client 20.215.242.226:4349] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acLRsQ0pGUh6bwD3ouKkOQAAAMc"]
[Wed Mar 25 02:02:25.839308 2026] [:error] [pid 58154:tid 58178] [client 20.215.242.226:33744] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acLRsQ0pGUh6bwD3ouKkOgAAANU"]
[Wed Mar 25 02:02:26.571227 2026] [:error] [pid 58154:tid 58174] [client 20.215.242.226:4964] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acLRsg0pGUh6bwD3ouKkOwAAANE"]
[Wed Mar 25 02:02:27.403136 2026] [:error] [pid 57711:tid 58051] [client 20.215.242.226:4984] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acLRs6LdPFdeRRktTdNlBgAAAIE"]
[Wed Mar 25 02:02:28.479127 2026] [:error] [pid 58154:tid 58175] [client 20.215.242.226:54098] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acLRtA0pGUh6bwD3ouKkPQAAANI"]
[Wed Mar 25 02:02:29.459290 2026] [:error] [pid 58154:tid 58162] [client 20.215.242.226:32327] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acLRtQ0pGUh6bwD3ouKkPwAAAMU"]
[Wed Mar 25 02:02:30.654204 2026] [:error] [pid 58154:tid 58163] [client 20.215.242.226:4788] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acLRtg0pGUh6bwD3ouKkQwAAAMY"]
[Wed Mar 25 02:02:31.906653 2026] [:error] [pid 57703:tid 58035] [client 20.215.242.226:54095] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acLRt_IVQxDtjkklWGZjWwAAAFA"]
[Wed Mar 25 02:02:33.023140 2026] [:error] [pid 57711:tid 58067] [client 20.215.242.226:4785] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acLRuaLdPFdeRRktTdNlCQAAAI0"]
[Wed Mar 25 02:02:33.962837 2026] [:error] [pid 20371:tid 20385] [client 20.215.242.226:39354] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acLRueb25OL4yTv2fF-cIgAAAQw"]
[Wed Mar 25 02:02:34.699435 2026] [:error] [pid 20371:tid 20376] [client 20.215.242.226:4833] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acLRuub25OL4yTv2fF-cKAAAAQM"]
[Wed Mar 25 02:02:35.616338 2026] [:error] [pid 20371:tid 20385] [client 20.215.242.226:30806] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "acLRu-b25OL4yTv2fF-cMgAAAQw"]
[Wed Mar 25 02:02:36.438973 2026] [:error] [pid 57711:tid 58066] [client 20.215.242.226:50375] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "acLRvKLdPFdeRRktTdNlCwAAAIw"]
[Wed Mar 25 02:02:37.478477 2026] [:error] [pid 58154:tid 58164] [client 20.215.242.226:40786] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "acLRvQ0pGUh6bwD3ouKkRQAAAMc"]
[Wed Mar 25 02:02:38.631333 2026] [:error] [pid 20371:tid 20382] [client 20.215.242.226:32354] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "acLRvub25OL4yTv2fF-cNgAAAQk"]
[Wed Mar 25 02:02:39.563935 2026] [:error] [pid 57711:tid 58064] [client 20.215.242.226:48807] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acLRv6LdPFdeRRktTdNlEwAAAIs"]
[Wed Mar 25 02:02:40.769287 2026] [:error] [pid 58154:tid 58159] [client 20.215.242.226:39316] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acLRwA0pGUh6bwD3ouKkTwAAAMI"]
[Wed Mar 25 02:02:41.917874 2026] [:error] [pid 57711:tid 58072] [client 20.215.242.226:50403] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acLRwaLdPFdeRRktTdNlGAAAAJI"]
[Wed Mar 25 02:02:42.751948 2026] [:error] [pid 20371:tid 20379] [client 20.215.242.226:4761] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acLRwub25OL4yTv2fF-cPwAAAQY"]
[Wed Mar 25 02:02:43.436301 2026] [:error] [pid 57702:tid 57918] [client 20.215.242.226:48776] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acLRw6S8TU_xcQFvlnYSSgAAAA8"]
[Wed Mar 25 02:02:44.144528 2026] [:error] [pid 57702:tid 57917] [client 20.215.242.226:30843] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acLRxKS8TU_xcQFvlnYSTQAAAA4"]
[Wed Mar 25 02:02:45.234686 2026] [:error] [pid 58154:tid 58173] [client 20.215.242.226:4943] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acLRxQ0pGUh6bwD3ouKkUQAAANA"]
[Wed Mar 25 02:02:45.855199 2026] [:error] [pid 57711:tid 58073] [client 20.215.242.226:33791] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acLRxaLdPFdeRRktTdNlHAAAAJM"]
[Wed Mar 25 02:02:47.033942 2026] [:error] [pid 58154:tid 58170] [client 20.215.242.226:54226] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acLRxw0pGUh6bwD3ouKkVAAAAM0"]
[Wed Mar 25 02:02:47.774670 2026] [:error] [pid 20371:tid 20397] [client 20.215.242.226:50415] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acLRx-b25OL4yTv2fF-cSwAAARg"]
[Wed Mar 25 02:02:48.455811 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:33786] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acLRyOb25OL4yTv2fF-cTAAAAQE"]
[Wed Mar 25 02:02:49.469658 2026] [:error] [pid 20371:tid 20388] [client 20.215.242.226:4299] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acLRyeb25OL4yTv2fF-cTQAAAQ8"]
[Wed Mar 25 02:02:50.306423 2026] [:error] [pid 57702:tid 57905] [client 20.215.242.226:54114] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acLRyqS8TU_xcQFvlnYSWQAAAAI"]
[Wed Mar 25 02:02:50.990480 2026] [:error] [pid 20371:tid 20385] [client 20.215.242.226:54250] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acLRyub25OL4yTv2fF-cWwAAAQw"]
[Wed Mar 25 02:02:52.024485 2026] [:error] [pid 57702:tid 57913] [client 20.215.242.226:30814] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acLRzKS8TU_xcQFvlnYSWwAAAAo"]
[Wed Mar 25 02:02:53.067172 2026] [:error] [pid 20371:tid 20385] [client 20.215.242.226:33734] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acLRzeb25OL4yTv2fF-caAAAAQw"]
[Wed Mar 25 02:02:53.905796 2026] [:error] [pid 57702:tid 57911] [client 20.215.242.226:4736] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "acLRzaS8TU_xcQFvlnYSXwAAAAg"]
[Wed Mar 25 02:02:55.073523 2026] [:error] [pid 20371:tid 20378] [client 20.215.242.226:30836] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "acLRz-b25OL4yTv2fF-cbAAAAQU"]
[Wed Mar 25 02:02:56.053430 2026] [:error] [pid 20371:tid 20388] [client 20.215.242.226:4929] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "acLR0Ob25OL4yTv2fF-ccAAAAQ8"]
[Wed Mar 25 02:02:56.961897 2026] [:error] [pid 57703:tid 58024] [client 20.215.242.226:4800] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "acLR0PIVQxDtjkklWGZjdAAAAEU"]
[Wed Mar 25 02:02:57.739207 2026] [:error] [pid 20371:tid 20377] [client 20.215.242.226:50506] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acLR0eb25OL4yTv2fF-cdAAAAQQ"]
[Wed Mar 25 02:02:58.900317 2026] [:error] [pid 58154:tid 58180] [client 20.215.242.226:49110] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acLR0g0pGUh6bwD3ouKkZQAAANc"]
[Wed Mar 25 02:03:06.950854 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:4945] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acLR2ub25OL4yTv2fF-ckgAAAQE"]
[Wed Mar 25 02:03:07.739300 2026] [:error] [pid 57711:tid 58077] [client 20.215.242.226:4790] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acLR26LdPFdeRRktTdNlKgAAAJc"]
[Wed Mar 25 02:03:08.659595 2026] [:error] [pid 20371:tid 20387] [client 20.215.242.226:54141] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acLR3Ob25OL4yTv2fF-clgAAAQ4"]
[Wed Mar 25 02:03:09.412878 2026] [:error] [pid 58154:tid 58158] [client 20.215.242.226:4972] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acLR3Q0pGUh6bwD3ouKkbgAAAME"]
[Wed Mar 25 02:03:10.135493 2026] [:error] [pid 57702:tid 57913] [client 20.215.242.226:49894] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acLR3qS8TU_xcQFvlnYSeQAAAAo"]
[Wed Mar 25 02:03:10.866907 2026] [:error] [pid 57702:tid 57905] [client 20.215.242.226:41877] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acLR3qS8TU_xcQFvlnYSfAAAAAI"]
[Wed Mar 25 02:03:11.660405 2026] [:error] [pid 57703:tid 58026] [client 20.215.242.226:53459] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acLR3_IVQxDtjkklWGZjggAAAEc"]
[Wed Mar 25 02:03:12.408776 2026] [:error] [pid 20371:tid 20384] [client 20.215.242.226:39313] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acLR4Ob25OL4yTv2fF-cnQAAAQs"]
[Wed Mar 25 02:03:13.228919 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:4854] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acLR4eb25OL4yTv2fF-coAAAAQE"]
[Wed Mar 25 02:03:14.285047 2026] [:error] [pid 57703:tid 58030] [client 20.215.242.226:39337] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acLR4vIVQxDtjkklWGZjhAAAAEs"]
[Wed Mar 25 02:03:15.442560 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:54246] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acLR4-b25OL4yTv2fF-csAAAAQE"]
[Wed Mar 25 02:03:16.364352 2026] [:error] [pid 20371:tid 20392] [client 20.215.242.226:4957] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acLR5Ob25OL4yTv2fF-ctQAAARM"]
[Wed Mar 25 02:03:17.222412 2026] [:error] [pid 58154:tid 58160] [client 20.215.242.226:33774] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acLR5Q0pGUh6bwD3ouKkdgAAAMM"]
[Wed Mar 25 02:03:17.840667 2026] [:error] [pid 20371:tid 20375] [client 20.215.242.226:54270] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acLR5eb25OL4yTv2fF-cuwAAAQI"]
[Wed Mar 25 02:03:18.470047 2026] [:error] [pid 57702:tid 57917] [client 20.215.242.226:41897] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acLR5qS8TU_xcQFvlnYSgQAAAA4"]
[Wed Mar 25 02:03:19.041025 2026] [:error] [pid 57711:tid 58066] [client 20.215.242.226:39329] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acLR56LdPFdeRRktTdNlNwAAAIw"]
[Wed Mar 25 02:03:19.628106 2026] [:error] [pid 58154:tid 58174] [client 20.215.242.226:33784] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acLR5w0pGUh6bwD3ouKkewAAANE"]
[Wed Mar 25 02:03:20.333471 2026] [:error] [pid 58154:tid 58158] [client 20.215.242.226:56450] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acLR6A0pGUh6bwD3ouKkfQAAAME"]
[Wed Mar 25 02:03:20.943180 2026] [:error] [pid 58154:tid 58171] [client 20.215.242.226:33769] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acLR6A0pGUh6bwD3ouKkfgAAAM4"]
[Wed Mar 25 02:03:21.504420 2026] [:error] [pid 57703:tid 58033] [client 20.215.242.226:4312] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acLR6fIVQxDtjkklWGZjjAAAAE4"]
[Wed Mar 25 02:03:22.350109 2026] [:error] [pid 57703:tid 58023] [client 20.215.242.226:4169] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acLR6vIVQxDtjkklWGZjjwAAAEQ"]
[Wed Mar 25 02:03:23.001451 2026] [:error] [pid 57711:tid 58062] [client 20.215.242.226:49918] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acLR66LdPFdeRRktTdNlPQAAAIk"]
[Wed Mar 25 02:03:23.762188 2026] [:error] [pid 20371:tid 20384] [client 20.215.242.226:50409] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acLR6-b25OL4yTv2fF-cxQAAAQs"]
[Wed Mar 25 02:03:24.483323 2026] [:error] [pid 20371:tid 20393] [client 20.215.242.226:41373] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acLR7Ob25OL4yTv2fF-cxwAAARQ"]
[Wed Mar 25 02:03:25.128076 2026] [:error] [pid 20371:tid 20378] [client 20.215.242.226:33790] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acLR7eb25OL4yTv2fF-cywAAAQU"]
[Wed Mar 25 02:03:26.068979 2026] [:error] [pid 20371:tid 20395] [client 20.215.242.226:4778] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acLR7ub25OL4yTv2fF-czwAAARY"]
[Wed Mar 25 02:03:26.701877 2026] [:error] [pid 20371:tid 20389] [client 20.215.242.226:34068] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acLR7ub25OL4yTv2fF-c0wAAARA"]
[Wed Mar 25 02:03:27.326197 2026] [:error] [pid 20371:tid 20391] [client 20.215.242.226:48821] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acLR7-b25OL4yTv2fF-c1AAAARI"]
[Wed Mar 25 02:03:28.227347 2026] [:error] [pid 57711:tid 58074] [client 20.215.242.226:48786] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "acLR8KLdPFdeRRktTdNlQgAAAJQ"]
[Wed Mar 25 02:03:28.877653 2026] [:error] [pid 20371:tid 20393] [client 20.215.242.226:30812] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "acLR8Ob25OL4yTv2fF-c2AAAARQ"]
[Wed Mar 25 02:03:29.590193 2026] [:error] [pid 20371:tid 20380] [client 20.215.242.226:54104] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "acLR8eb25OL4yTv2fF-c3AAAAQc"]
[Wed Mar 25 02:03:30.348495 2026] [:error] [pid 57702:tid 57909] [client 20.215.242.226:53118] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "acLR8qS8TU_xcQFvlnYShAAAAAY"]
[Wed Mar 25 02:03:31.552694 2026] [:error] [pid 58154:tid 58172] [client 20.215.242.226:32352] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acLR8w0pGUh6bwD3ouKkigAAAM8"]
[Wed Mar 25 02:03:32.534394 2026] [:error] [pid 57711:tid 58069] [client 20.215.242.226:53448] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acLR9KLdPFdeRRktTdNlRAAAAI8"]
[Wed Mar 25 02:03:33.750209 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:4757] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acLR9eb25OL4yTv2fF-c5AAAAQE"]
[Wed Mar 25 02:03:34.764702 2026] [:error] [pid 58154:tid 58180] [client 20.215.242.226:53116] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acLR9g0pGUh6bwD3ouKkjAAAANc"]
[Wed Mar 25 02:03:35.685461 2026] [:error] [pid 57702:tid 57918] [client 20.215.242.226:30841] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acLR96S8TU_xcQFvlnYSigAAAA8"]
[Wed Mar 25 02:03:36.791986 2026] [:error] [pid 57702:tid 57922] [client 20.215.242.226:50518] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acLR-KS8TU_xcQFvlnYSiwAAABM"]
[Wed Mar 25 02:03:37.759126 2026] [:error] [pid 20371:tid 20374] [client 20.215.242.226:50406] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acLR-eb25OL4yTv2fF-c7gAAAQE"]
[Wed Mar 25 02:03:38.859643 2026] [:error] [pid 57703:tid 58027] [client 20.215.242.226:53074] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acLR-vIVQxDtjkklWGZjlAAAAEg"]
[Wed Mar 25 02:03:39.993366 2026] [:error] [pid 57703:tid 58039] [client 20.215.242.226:54111] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acLR-_IVQxDtjkklWGZjlwAAAFQ"]
[Wed Mar 25 02:03:40.747202 2026] [:error] [pid 20371:tid 20388] [client 20.215.242.226:39320] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acLR_Ob25OL4yTv2fF-c9gAAAQ8"]
[Wed Mar 25 02:03:41.413961 2026] [:error] [pid 58154:tid 58176] [client 20.215.242.226:4773] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acLR_Q0pGUh6bwD3ouKkkAAAANM"]
[Wed Mar 25 02:03:42.303149 2026] [:error] [pid 58154:tid 58162] [client 20.215.242.226:50398] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acLR_g0pGUh6bwD3ouKklAAAAMU"]
[Wed Mar 25 02:03:42.990657 2026] [:error] [pid 58154:tid 58163] [client 20.215.242.226:49890] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acLR_g0pGUh6bwD3ouKkmAAAAMY"]
[Wed Mar 25 02:03:43.539580 2026] [:error] [pid 57703:tid 58025] [client 20.215.242.226:53060] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acLR__IVQxDtjkklWGZjmQAAAEY"]
[Wed Mar 25 02:03:44.488186 2026] [:error] [pid 57703:tid 58023] [client 20.215.242.226:4973] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acLSAPIVQxDtjkklWGZjmwAAAEQ"]
[Wed Mar 25 02:03:45.274323 2026] [:error] [pid 57711:tid 58073] [client 20.215.242.226:39299] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acLSAaLdPFdeRRktTdNlSwAAAJM"]
[Wed Mar 25 02:03:45.960774 2026] [:error] [pid 20371:tid 20381] [client 20.215.242.226:48810] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "acLSAeb25OL4yTv2fF-dAAAAAQg"]
[Wed Mar 25 02:03:46.775529 2026] [:error] [pid 20371:tid 20392] [client 20.215.242.226:4989] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "acLSAub25OL4yTv2fF-dBAAAARM"]
[Wed Mar 25 02:03:47.430568 2026] [:error] [pid 20371:tid 20387] [client 20.215.242.226:30827] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "acLSA-b25OL4yTv2fF-dBwAAAQ4"]
[Wed Mar 25 02:03:48.177078 2026] [:error] [pid 20371:tid 20397] [client 20.215.242.226:4315] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "acLSBOb25OL4yTv2fF-dCAAAARg"]
[Wed Mar 25 02:03:48.833750 2026] [:error] [pid 57711:tid 58052] [client 20.215.242.226:33732] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acLSBKLdPFdeRRktTdNlUQAAAII"]
[Wed Mar 25 02:03:49.387094 2026] [:error] [pid 58154:tid 58179] [client 20.215.242.226:50503] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acLSBQ0pGUh6bwD3ouKkoQAAANY"]
[Wed Mar 25 02:03:50.011102 2026] [:error] [pid 57711:tid 58055] [client 20.215.242.226:53069] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acLSBqLdPFdeRRktTdNlUgAAAIQ"]
[Wed Mar 25 02:03:50.703437 2026] [:error] [pid 57711:tid 58056] [client 20.215.242.226:30837] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acLSBqLdPFdeRRktTdNlVAAAAIU"]
[Wed Mar 25 02:03:51.373262 2026] [:error] [pid 57711:tid 58077] [client 20.215.242.226:44844] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acLSB6LdPFdeRRktTdNlVwAAAJc"]
[Wed Mar 25 02:03:52.178591 2026] [:error] [pid 57702:tid 57909] [client 20.215.242.226:49885] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acLSCKS8TU_xcQFvlnYSmQAAAAY"]
[Wed Mar 25 02:03:52.972826 2026] [:error] [pid 58154:tid 58174] [client 20.215.242.226:4765] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acLSCA0pGUh6bwD3ouKkpwAAANE"]
[Wed Mar 25 02:03:53.788124 2026] [:error] [pid 58154:tid 58169] [client 20.215.242.226:55447] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acLSCQ0pGUh6bwD3ouKkqgAAAMw"]
[Wed Mar 25 02:03:54.933709 2026] [:error] [pid 58154:tid 58171] [client 20.215.242.226:49871] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acLSCg0pGUh6bwD3ouKkrQAAAM4"]
[Wed Mar 25 02:03:56.121530 2026] [:error] [pid 58154:tid 58160] [client 20.215.242.226:4817] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acLSDA0pGUh6bwD3ouKktAAAAMM"]
[Wed Mar 25 02:03:57.019335 2026] [:error] [pid 57703:tid 58036] [client 20.215.242.226:54211] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acLSDfIVQxDtjkklWGZjoAAAAFE"]
[Wed Mar 25 02:03:57.648787 2026] [:error] [pid 58154:tid 58181] [client 20.215.242.226:54143] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acLSDQ0pGUh6bwD3ouKkuQAAANg"]
[Wed Mar 25 02:03:58.319806 2026] [:error] [pid 58154:tid 58158] [client 20.215.242.226:4796] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acLSDg0pGUh6bwD3ouKkvAAAAME"]
[Wed Mar 25 02:03:58.961001 2026] [:error] [pid 57703:tid 58034] [client 20.215.242.226:53456] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acLSDvIVQxDtjkklWGZjowAAAE8"]
[Wed Mar 25 02:03:59.758256 2026] [:error] [pid 20371:tid 20384] [client 20.215.242.226:41863] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acLSD-b25OL4yTv2fF-dDgAAAQs"]
[Wed Mar 25 02:04:00.787721 2026] [:error] [pid 57711:tid 58051] [client 20.215.242.226:50392] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acLSEKLdPFdeRRktTdNlYgAAAIE"]
[Wed Mar 25 02:04:03.040012 2026] [:error] [pid 57711:tid 58067] [client 20.215.242.226:54152] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acLSE6LdPFdeRRktTdNlZQAAAI0"]
[Wed Mar 25 02:04:04.113144 2026] [:error] [pid 58154:tid 58163] [client 20.215.242.226:53085] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acLSFA0pGUh6bwD3ouKkyQAAAMY"]
[Wed Mar 25 02:04:05.763042 2026] [:error] [pid 20371:tid 20386] [client 20.215.242.226:48770] [client 20.215.242.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acLSFeb25OL4yTv2fF-dGQAAAQ0"]
[Wed Mar 25 04:42:25.284591 2026] [:error] [pid 892:tid 908] [client 158.158.52.11:62748] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acL3MST_G8WMU3T3yxoSYwAAAMo"]
[Wed Mar 25 04:42:30.358333 2026] [:error] [pid 756:tid 853] [client 158.158.52.11:48279] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acL3NjOaW6oylMIDBCRnaAAAAIM"]
[Wed Mar 25 04:42:31.646473 2026] [:error] [pid 892:tid 911] [client 158.158.52.11:49077] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acL3NyT_G8WMU3T3yxoSdAAAAM0"]
[Wed Mar 25 04:42:32.413167 2026] [:error] [pid 754:tid 775] [client 158.158.52.11:49043] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acL3ODisL3asPbA3CtispQAAAAo"]
[Wed Mar 25 04:42:33.413028 2026] [:error] [pid 892:tid 910] [client 158.158.52.11:52262] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acL3OST_G8WMU3T3yxoSegAAAMw"]
[Wed Mar 25 04:42:34.357147 2026] [:error] [pid 892:tid 896] [client 158.158.52.11:33200] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acL3OiT_G8WMU3T3yxoSfQAAAMI"]
[Wed Mar 25 04:42:36.279192 2026] [:error] [pid 756:tid 865] [client 158.158.52.11:41402] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acL3PDOaW6oylMIDBCRncwAAAI0"]
[Wed Mar 25 04:42:37.061996 2026] [:error] [pid 754:tid 777] [client 158.158.52.11:45997] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acL3PTisL3asPbA3CtisqwAAAAw"]
[Wed Mar 25 04:42:38.325061 2026] [:error] [pid 892:tid 910] [client 158.158.52.11:36148] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acL3PiT_G8WMU3T3yxoSigAAAMw"]
[Wed Mar 25 04:42:40.446593 2026] [:error] [pid 755:tid 836] [client 158.158.52.11:36744] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acL3QKS6bdaeEwgCGwonLQAAAE0"]
[Wed Mar 25 04:42:42.338987 2026] [:error] [pid 892:tid 895] [client 158.158.52.11:37762] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acL3QiT_G8WMU3T3yxoSnwAAAME"]
[Wed Mar 25 04:42:43.266691 2026] [:error] [pid 754:tid 788] [client 158.158.52.11:33207] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acL3QzisL3asPbA3CtisrwAAABc"]
[Wed Mar 25 04:42:44.591033 2026] [:error] [pid 756:tid 853] [client 158.158.52.11:62780] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acL3RDOaW6oylMIDBCRnhAAAAIM"]
[Wed Mar 25 04:42:47.693655 2026] [:error] [pid 892:tid 918] [client 158.158.52.11:52249] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acL3RyT_G8WMU3T3yxoStgAAANM"]
[Wed Mar 25 04:42:49.765383 2026] [:error] [pid 892:tid 895] [client 158.158.52.11:32784] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acL3SST_G8WMU3T3yxoSvwAAAME"]
[Wed Mar 25 04:42:52.018455 2026] [:error] [pid 892:tid 899] [client 158.158.52.11:49045] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acL3TCT_G8WMU3T3yxoS0wAAAMM"]
[Wed Mar 25 04:42:53.835740 2026] [:error] [pid 755:tid 808] [client 158.158.52.11:33202] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acL3TaS6bdaeEwgCGwonTAAAAEM"]
[Wed Mar 25 04:42:56.167840 2026] [:error] [pid 756:tid 861] [client 158.158.52.11:36327] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acL3UDOaW6oylMIDBCRnlQAAAIk"]
[Wed Mar 25 04:42:57.806243 2026] [:error] [pid 756:tid 863] [client 158.158.52.11:46972] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acL3UTOaW6oylMIDBCRnmAAAAIs"]
[Wed Mar 25 04:42:59.234497 2026] [:error] [pid 892:tid 904] [client 158.158.52.11:36750] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acL3UyT_G8WMU3T3yxoS-gAAAMY"]
[Wed Mar 25 04:43:00.165488 2026] [:error] [pid 892:tid 923] [client 158.158.52.11:36736] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acL3VCT_G8WMU3T3yxoTAQAAANg"]
[Wed Mar 25 04:43:02.147340 2026] [:error] [pid 756:tid 852] [client 158.158.52.11:57622] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acL3VjOaW6oylMIDBCRnpAAAAII"]
[Wed Mar 25 04:43:03.030754 2026] [:error] [pid 754:tid 784] [client 158.158.52.11:61952] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acL3VzisL3asPbA3CtisvQAAABM"]
[Wed Mar 25 04:43:06.537774 2026] [:error] [pid 756:tid 860] [client 158.158.52.11:52260] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acL3WjOaW6oylMIDBCRnrAAAAIg"]
[Wed Mar 25 04:43:10.093317 2026] [:error] [pid 892:tid 922] [client 158.158.52.11:41373] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acL3XiT_G8WMU3T3yxoTKQAAANc"]
[Wed Mar 25 04:43:12.233797 2026] [:error] [pid 892:tid 902] [client 158.158.52.11:1986] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acL3YCT_G8WMU3T3yxoTNAAAAMU"]
[Wed Mar 25 04:43:19.422021 2026] [:error] [pid 755:tid 844] [client 158.158.52.11:37796] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acL3Z6S6bdaeEwgCGwonZAAAAFU"]
[Wed Mar 25 04:43:21.060909 2026] [:error] [pid 756:tid 852] [client 158.158.52.11:33951] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acL3aTOaW6oylMIDBCRnvwAAAII"]
[Wed Mar 25 04:43:34.402312 2026] [:error] [pid 756:tid 874] [client 158.158.52.11:1567] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acL3djOaW6oylMIDBCRn6wAAAJY"]
[Wed Mar 25 04:43:37.349660 2026] [:error] [pid 756:tid 862] [client 158.158.52.11:33980] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acL3eTOaW6oylMIDBCRn8gAAAIo"]
[Wed Mar 25 04:43:38.712176 2026] [:error] [pid 892:tid 922] [client 158.158.52.11:1139] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acL3eiT_G8WMU3T3yxoTnQAAANc"]
[Wed Mar 25 04:43:40.212513 2026] [:error] [pid 755:tid 824] [client 158.158.52.11:36326] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acL3fKS6bdaeEwgCGwonfgAAAEk"]
[Wed Mar 25 04:43:42.367446 2026] [:error] [pid 755:tid 837] [client 158.158.52.11:61990] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acL3fqS6bdaeEwgCGwonhAAAAE4"]
[Wed Mar 25 04:43:43.594573 2026] [:error] [pid 756:tid 857] [client 158.158.52.11:36311] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acL3fzOaW6oylMIDBCRoAQAAAIU"]
[Wed Mar 25 04:43:45.127089 2026] [:error] [pid 756:tid 869] [client 158.158.52.11:61999] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acL3gTOaW6oylMIDBCRoAgAAAJE"]
[Wed Mar 25 04:43:46.150544 2026] [:error] [pid 755:tid 818] [client 158.158.52.11:38573] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acL3gqS6bdaeEwgCGwoniQAAAEU"]
[Wed Mar 25 04:43:48.100095 2026] [:error] [pid 892:tid 894] [client 158.158.52.11:62010] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acL3hCT_G8WMU3T3yxoTvwAAAMA"]
[Wed Mar 25 04:43:49.741917 2026] [:error] [pid 756:tid 871] [client 158.158.52.11:61954] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acL3hTOaW6oylMIDBCRoBwAAAJM"]
[Wed Mar 25 04:43:51.170068 2026] [:error] [pid 754:tid 789] [client 158.158.52.11:2030] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acL3hzisL3asPbA3Ctis4wAAABg"]
[Wed Mar 25 04:43:52.075315 2026] [:error] [pid 755:tid 822] [client 158.158.52.11:32804] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acL3iKS6bdaeEwgCGwonkwAAAEc"]
[Wed Mar 25 04:43:53.320560 2026] [:error] [pid 892:tid 896] [client 158.158.52.11:34199] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "acL3iST_G8WMU3T3yxoT1gAAAMI"]
[Wed Mar 25 04:43:53.999093 2026] [:error] [pid 756:tid 875] [client 158.158.52.11:1575] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "acL3iTOaW6oylMIDBCRoEAAAAJc"]
[Wed Mar 25 04:43:54.792217 2026] [:error] [pid 756:tid 871] [client 158.158.52.11:42221] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "acL3ijOaW6oylMIDBCRoFQAAAJM"]
[Wed Mar 25 04:43:55.698086 2026] [:error] [pid 756:tid 872] [client 158.158.52.11:51834] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "acL3izOaW6oylMIDBCRoGgAAAJQ"]
[Wed Mar 25 04:43:58.540169 2026] [:error] [pid 755:tid 825] [client 158.158.52.11:38264] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acL3jqS6bdaeEwgCGwonmwAAAEo"]
[Wed Mar 25 04:43:59.418230 2026] [:error] [pid 755:tid 841] [client 158.158.52.11:36139] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acL3j6S6bdaeEwgCGwonnQAAAFI"]
[Wed Mar 25 04:44:00.208860 2026] [:error] [pid 756:tid 850] [client 158.158.52.11:38538] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acL3kDOaW6oylMIDBCRoLQAAAIA"]
[Wed Mar 25 04:44:15.729932 2026] [:error] [pid 756:tid 875] [client 158.158.52.11:1596] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "acL3nzOaW6oylMIDBCRoSAAAAJc"]
[Wed Mar 25 04:44:16.849045 2026] [:error] [pid 756:tid 851] [client 158.158.52.11:36345] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "acL3oDOaW6oylMIDBCRoTQAAAIE"]
[Wed Mar 25 04:44:18.077932 2026] [:error] [pid 755:tid 839] [client 158.158.52.11:35613] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "acL3oqS6bdaeEwgCGwonuAAAAFA"]
[Wed Mar 25 04:44:18.906037 2026] [:error] [pid 756:tid 859] [client 158.158.52.11:33265] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "acL3ojOaW6oylMIDBCRoUQAAAIc"]
[Wed Mar 25 04:44:19.563431 2026] [:error] [pid 754:tid 766] [client 158.158.52.11:34407] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acL3ozisL3asPbA3Ctis-QAAAAE"]
[Wed Mar 25 04:44:20.293263 2026] [:error] [pid 756:tid 872] [client 158.158.52.11:42191] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acL3pDOaW6oylMIDBCRoUgAAAJQ"]
[Wed Mar 25 04:44:21.176800 2026] [:error] [pid 756:tid 873] [client 158.158.52.11:34781] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acL3pTOaW6oylMIDBCRoVAAAAJU"]
[Wed Mar 25 04:44:22.118492 2026] [:error] [pid 892:tid 907] [client 158.158.52.11:33266] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acL3piT_G8WMU3T3yxoUNgAAAMk"]
[Wed Mar 25 04:44:23.100682 2026] [:error] [pid 756:tid 864] [client 158.158.52.11:33270] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "acL3pzOaW6oylMIDBCRoWAAAAIw"]
[Wed Mar 25 04:44:24.265922 2026] [:error] [pid 754:tid 765] [client 158.158.52.11:61967] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "acL3qDisL3asPbA3CtitBQAAAAA"]
[Wed Mar 25 04:44:25.648648 2026] [:error] [pid 754:tid 772] [client 158.158.52.11:51818] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "acL3qTisL3asPbA3CtitBwAAAAc"]
[Wed Mar 25 04:44:28.368726 2026] [:error] [pid 756:tid 858] [client 158.158.52.11:39856] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "acL3rDOaW6oylMIDBCRoYgAAAIY"]
[Wed Mar 25 04:44:30.421521 2026] [:error] [pid 892:tid 913] [client 158.158.52.11:38136] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acL3riT_G8WMU3T3yxoUVwAAAM8"]
[Wed Mar 25 04:44:33.996618 2026] [:error] [pid 754:tid 773] [client 158.158.52.11:33221] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acL3sTisL3asPbA3CtitGgAAAAg"]
[Wed Mar 25 04:44:44.939450 2026] [:error] [pid 754:tid 767] [client 158.158.52.11:36481] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "acL3vDisL3asPbA3CtitMQAAAAI"]
[Wed Mar 25 04:44:46.226033 2026] [:error] [pid 892:tid 906] [client 158.158.52.11:43793] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "acL3viT_G8WMU3T3yxoUlgAAAMg"]
[Wed Mar 25 04:44:47.062696 2026] [:error] [pid 755:tid 809] [client 158.158.52.11:38788] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "acL3v6S6bdaeEwgCGwon4QAAAEQ"]
[Wed Mar 25 04:44:47.888785 2026] [:error] [pid 755:tid 825] [client 158.158.52.11:51029] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "acL3v6S6bdaeEwgCGwon4gAAAEo"]
[Wed Mar 25 04:44:48.631565 2026] [:error] [pid 755:tid 836] [client 158.158.52.11:1697] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acL3wKS6bdaeEwgCGwon4wAAAE0"]
[Wed Mar 25 04:44:49.537881 2026] [:error] [pid 754:tid 772] [client 158.158.52.11:1670] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acL3wTisL3asPbA3CtitMgAAAAc"]
[Wed Mar 25 04:44:51.511582 2026] [:error] [pid 892:tid 904] [client 158.158.52.11:48680] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acL3wyT_G8WMU3T3yxoUsQAAAMY"]
[Wed Mar 25 04:44:53.330637 2026] [:error] [pid 754:tid 788] [client 158.158.52.11:37343] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acL3xTisL3asPbA3CtitNgAAABc"]
[Wed Mar 25 04:44:54.227844 2026] [:error] [pid 754:tid 775] [client 158.158.52.11:33677] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acL3xjisL3asPbA3CtitOQAAAAo"]
[Wed Mar 25 04:44:55.504459 2026] [:error] [pid 892:tid 920] [client 158.158.52.11:35725] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acL3xyT_G8WMU3T3yxoUuwAAANU"]
[Wed Mar 25 04:44:56.642392 2026] [:error] [pid 755:tid 835] [client 158.158.52.11:37636] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acL3yKS6bdaeEwgCGwon5wAAAEw"]
[Wed Mar 25 04:44:57.679527 2026] [:error] [pid 754:tid 772] [client 158.158.52.11:62389] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acL3yTisL3asPbA3CtitQQAAAAc"]
[Wed Mar 25 04:44:59.091575 2026] [:error] [pid 755:tid 805] [client 158.158.52.11:33559] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acL3y6S6bdaeEwgCGwon6wAAAEA"]
[Wed Mar 25 04:44:59.785611 2026] [:error] [pid 892:tid 913] [client 158.158.52.11:42633] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acL3yyT_G8WMU3T3yxoUzQAAAM8"]
[Wed Mar 25 04:45:00.627300 2026] [:error] [pid 756:tid 864] [client 158.158.52.11:36386] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acL3zDOaW6oylMIDBCRoqAAAAIw"]
[Wed Mar 25 04:45:02.665657 2026] [:error] [pid 892:tid 908] [client 158.158.52.11:56908] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acL3ziT_G8WMU3T3yxoU2AAAAMo"]
[Wed Mar 25 04:45:06.564098 2026] [:error] [pid 754:tid 785] [client 158.158.52.11:54339] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acL30jisL3asPbA3CtitTgAAABQ"]
[Wed Mar 25 04:45:08.218796 2026] [:error] [pid 892:tid 911] [client 158.158.52.11:37472] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acL31CT_G8WMU3T3yxoU5AAAAM0"]
[Wed Mar 25 04:45:10.617523 2026] [:error] [pid 755:tid 845] [client 158.158.52.11:41558] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acL31qS6bdaeEwgCGwon_QAAAFY"]
[Wed Mar 25 04:45:13.735612 2026] [:error] [pid 892:tid 902] [client 158.158.52.11:1185] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acL32ST_G8WMU3T3yxoU-QAAAMU"]
[Wed Mar 25 04:45:14.658763 2026] [:error] [pid 755:tid 841] [client 158.158.52.11:45592] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acL32qS6bdaeEwgCGwooAwAAAFI"]
[Wed Mar 25 04:45:16.374659 2026] [:error] [pid 756:tid 861] [client 158.158.52.11:57243] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acL33DOaW6oylMIDBCRo0QAAAIk"]
[Wed Mar 25 04:45:17.344247 2026] [:error] [pid 754:tid 781] [client 158.158.52.11:45941] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acL33TisL3asPbA3CtitWwAAABA"]
[Wed Mar 25 04:45:20.168296 2026] [:error] [pid 892:tid 912] [client 158.158.52.11:43735] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acL34CT_G8WMU3T3yxoVGQAAAM4"]
[Wed Mar 25 04:45:22.566573 2026] [:error] [pid 892:tid 907] [client 158.158.52.11:38004] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acL34iT_G8WMU3T3yxoVJgAAAMk"]
[Wed Mar 25 04:45:23.864711 2026] [:error] [pid 754:tid 778] [client 158.158.52.11:42286] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acL34zisL3asPbA3CtitYgAAAA0"]
[Wed Mar 25 04:45:24.646282 2026] [:error] [pid 892:tid 922] [client 158.158.52.11:45903] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acL35CT_G8WMU3T3yxoVLwAAANc"]
[Wed Mar 25 04:45:25.723863 2026] [:error] [pid 756:tid 862] [client 158.158.52.11:1814] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acL35TOaW6oylMIDBCRo6gAAAIo"]
[Wed Mar 25 04:45:28.066516 2026] [:error] [pid 756:tid 859] [client 158.158.52.11:33647] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acL36DOaW6oylMIDBCRo9wAAAIc"]
[Wed Mar 25 04:46:08.627962 2026] [:error] [pid 892:tid 923] [client 158.158.52.11:48611] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acL4ECT_G8WMU3T3yxoV9wAAANg"]
[Wed Mar 25 04:46:09.474274 2026] [:error] [pid 892:tid 905] [client 158.158.52.11:40309] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acL4EST_G8WMU3T3yxoV_AAAAMc"]
[Wed Mar 25 04:46:11.002444 2026] [:error] [pid 756:tid 853] [client 158.158.52.11:33377] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acL4EzOaW6oylMIDBCRpugAAAIM"]
[Wed Mar 25 04:46:12.118629 2026] [:error] [pid 892:tid 910] [client 158.158.52.11:34450] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acL4FCT_G8WMU3T3yxoWBQAAAMw"]
[Wed Mar 25 04:46:13.144947 2026] [:error] [pid 892:tid 920] [client 158.158.52.11:33340] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acL4FST_G8WMU3T3yxoWDAAAANU"]
[Wed Mar 25 04:46:14.770064 2026] [:error] [pid 756:tid 856] [client 158.158.52.11:50662] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acL4FjOaW6oylMIDBCRpxQAAAIQ"]
[Wed Mar 25 04:46:17.562728 2026] [:error] [pid 892:tid 905] [client 158.158.52.11:35457] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acL4GST_G8WMU3T3yxoWHgAAAMc"]
[Wed Mar 25 04:46:19.125002 2026] [:error] [pid 892:tid 922] [client 158.158.52.11:35870] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acL4GyT_G8WMU3T3yxoWIQAAANc"]
[Wed Mar 25 04:46:20.421264 2026] [:error] [pid 892:tid 920] [client 158.158.52.11:40294] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acL4HCT_G8WMU3T3yxoWKAAAANU"]
[Wed Mar 25 04:46:23.331480 2026] [:error] [pid 892:tid 908] [client 158.158.52.11:40013] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acL4HyT_G8WMU3T3yxoWNAAAAMo"]
[Wed Mar 25 04:46:24.281155 2026] [:error] [pid 892:tid 902] [client 158.158.52.11:35850] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acL4ICT_G8WMU3T3yxoWPQAAAMU"]
[Wed Mar 25 04:46:27.116645 2026] [:error] [pid 754:tid 771] [client 158.158.52.11:32518] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acL4IzisL3asPbA3Ctit6gAAAAY"]
[Wed Mar 25 04:46:29.020639 2026] [:error] [pid 892:tid 910] [client 158.158.52.11:34458] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acL4JST_G8WMU3T3yxoWVgAAAMw"]
[Wed Mar 25 04:46:31.421183 2026] [:error] [pid 755:tid 844] [client 158.158.52.11:40035] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acL4J6S6bdaeEwgCGwooowAAAFU"]
[Wed Mar 25 04:46:32.664360 2026] [:error] [pid 756:tid 864] [client 158.158.52.11:35530] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acL4KDOaW6oylMIDBCRp9gAAAIw"]
[Wed Mar 25 04:46:34.318364 2026] [:error] [pid 756:tid 876] [client 158.158.52.11:32962] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acL4KjOaW6oylMIDBCRqAwAAAJg"]
[Wed Mar 25 04:46:36.972379 2026] [:error] [pid 755:tid 838] [client 158.158.52.11:33428] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "acL4LKS6bdaeEwgCGwoouQAAAE8"]
[Wed Mar 25 04:46:39.517802 2026] [:error] [pid 755:tid 846] [client 158.158.52.11:1739] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "acL4L6S6bdaeEwgCGwooxwAAAFc"]
[Wed Mar 25 04:46:41.626538 2026] [:error] [pid 892:tid 901] [client 158.158.52.11:35841] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "acL4MST_G8WMU3T3yxoWjgAAAMQ"]
[Wed Mar 25 04:46:43.526672 2026] [:error] [pid 755:tid 847] [client 158.158.52.11:35538] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "acL4M6S6bdaeEwgCGwoo1QAAAFg"]
[Wed Mar 25 04:46:45.861156 2026] [:error] [pid 756:tid 850] [client 158.158.52.11:39284] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acL4NTOaW6oylMIDBCRqEgAAAIA"]
[Wed Mar 25 04:46:47.687775 2026] [:error] [pid 754:tid 766] [client 158.158.52.11:50651] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acL4NzisL3asPbA3CtiuFAAAAAE"]
[Wed Mar 25 04:46:48.969101 2026] [:error] [pid 755:tid 809] [client 158.158.52.11:39063] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acL4OKS6bdaeEwgCGwoo5AAAAEQ"]
[Wed Mar 25 04:46:50.511421 2026] [:error] [pid 892:tid 908] [client 158.158.52.11:40305] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acL4OiT_G8WMU3T3yxoWywAAAMo"]
[Wed Mar 25 04:46:51.523635 2026] [:error] [pid 755:tid 826] [client 158.158.52.11:35883] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acL4O6S6bdaeEwgCGwoo7AAAAEs"]
[Wed Mar 25 04:46:52.263986 2026] [:error] [pid 756:tid 861] [client 158.158.52.11:41639] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acL4PDOaW6oylMIDBCRqIwAAAIk"]
[Wed Mar 25 04:46:53.801880 2026] [:error] [pid 756:tid 865] [client 158.158.52.11:1741] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acL4PTOaW6oylMIDBCRqKAAAAI0"]
[Wed Mar 25 04:46:54.513991 2026] [:error] [pid 756:tid 874] [client 158.158.52.11:36640] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acL4PjOaW6oylMIDBCRqKQAAAJY"]
[Wed Mar 25 04:46:55.292430 2026] [:error] [pid 892:tid 896] [client 158.158.52.11:36639] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acL4PyT_G8WMU3T3yxoW8wAAAMI"]
[Wed Mar 25 04:46:56.418372 2026] [:error] [pid 755:tid 846] [client 158.158.52.11:36637] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acL4QKS6bdaeEwgCGwoo8wAAAFc"]
[Wed Mar 25 04:46:57.692085 2026] [:error] [pid 892:tid 895] [client 158.158.52.11:39254] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acL4QST_G8WMU3T3yxoXBgAAAME"]
[Wed Mar 25 04:46:59.773452 2026] [:error] [pid 892:tid 910] [client 158.158.52.11:41615] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acL4QyT_G8WMU3T3yxoXFgAAAMw"]
[Wed Mar 25 04:47:01.872316 2026] [:error] [pid 756:tid 872] [client 158.158.52.11:41640] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hots.php"] [unique_id "acL4RTOaW6oylMIDBCRqPQAAAJQ"]
[Wed Mar 25 04:47:02.987891 2026] [:error] [pid 755:tid 836] [client 158.158.52.11:48609] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hots.php"] [unique_id "acL4RqS6bdaeEwgCGwopBAAAAE0"]
[Wed Mar 25 04:47:03.718578 2026] [:error] [pid 755:tid 847] [client 158.158.52.11:52183] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hots.php"] [unique_id "acL4R6S6bdaeEwgCGwopBwAAAFg"]
[Wed Mar 25 04:47:04.697892 2026] [:error] [pid 892:tid 906] [client 158.158.52.11:35856] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hots.php"] [unique_id "acL4SCT_G8WMU3T3yxoXPgAAAMg"]
[Wed Mar 25 04:47:05.507395 2026] [:error] [pid 755:tid 821] [client 158.158.52.11:32521] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acL4SaS6bdaeEwgCGwopDgAAAEY"]
[Wed Mar 25 04:47:06.270814 2026] [:error] [pid 755:tid 807] [client 158.158.52.11:48577] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acL4SqS6bdaeEwgCGwopEAAAAEI"]
[Wed Mar 25 04:47:18.450887 2026] [:error] [pid 892:tid 904] [client 158.158.52.11:39272] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acL4ViT_G8WMU3T3yxoX6gAAAMY"]
[Wed Mar 25 04:47:19.999976 2026] [:error] [pid 756:tid 860] [client 158.158.52.11:34642] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acL4VzOaW6oylMIDBCRqiwAAAIg"]
[Wed Mar 25 04:47:22.342121 2026] [:error] [pid 754:tid 768] [client 158.158.52.11:33445] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acL4WjisL3asPbA3CtiugQAAAAM"]
[Wed Mar 25 04:47:23.946163 2026] [:error] [pid 892:tid 923] [client 158.158.52.11:44173] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acL4WyT_G8WMU3T3yxoX_AAAANg"]
[Wed Mar 25 04:47:25.548104 2026] [:error] [pid 892:tid 910] [client 158.158.52.11:32540] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acL4XST_G8WMU3T3yxoYBgAAAMw"]
[Wed Mar 25 04:47:27.464904 2026] [:error] [pid 892:tid 907] [client 158.158.52.11:36666] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acL4XyT_G8WMU3T3yxoYEwAAAMk"]
[Wed Mar 25 04:47:28.670080 2026] [:error] [pid 754:tid 775] [client 158.158.52.11:50690] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acL4YDisL3asPbA3CtiukAAAAAo"]
[Wed Mar 25 04:47:29.887409 2026] [:error] [pid 755:tid 806] [client 158.158.52.11:35298] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acL4YaS6bdaeEwgCGwopQQAAAEE"]
[Wed Mar 25 04:47:32.189576 2026] [:error] [pid 892:tid 908] [client 158.158.52.11:1867] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acL4ZCT_G8WMU3T3yxoYIgAAAMo"]
[Wed Mar 25 04:47:34.604876 2026] [:error] [pid 892:tid 906] [client 158.158.52.11:34633] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acL4ZiT_G8WMU3T3yxoYLAAAAMg"]
[Wed Mar 25 04:47:35.680060 2026] [:error] [pid 755:tid 809] [client 158.158.52.11:1894] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acL4Z6S6bdaeEwgCGwopVQAAAEQ"]
[Wed Mar 25 04:47:37.022245 2026] [:error] [pid 756:tid 871] [client 158.158.52.11:34575] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acL4aTOaW6oylMIDBCRqsQAAAJM"]
[Wed Mar 25 04:47:40.750799 2026] [:error] [pid 756:tid 860] [client 158.158.52.11:33464] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acL4bDOaW6oylMIDBCRqwgAAAIg"]
[Wed Mar 25 04:47:42.520752 2026] [:error] [pid 892:tid 908] [client 158.158.52.11:33025] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acL4biT_G8WMU3T3yxoYSQAAAMo"]
[Wed Mar 25 04:47:43.860742 2026] [:error] [pid 756:tid 876] [client 158.158.52.11:39281] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acL4bzOaW6oylMIDBCRq0QAAAJg"]
[Wed Mar 25 04:47:49.007643 2026] [:error] [pid 754:tid 769] [client 158.158.52.11:50716] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acL4dTisL3asPbA3CtiuuAAAAAQ"]
[Wed Mar 25 04:47:50.552419 2026] [:error] [pid 756:tid 869] [client 158.158.52.11:47433] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "acL4djOaW6oylMIDBCRq-wAAAJE"]
[Wed Mar 25 04:48:45.428859 2026] [:error] [pid 756:tid 859] [client 158.158.52.11:44111] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acL4rTOaW6oylMIDBCRrxQAAAIc"]
[Wed Mar 25 04:48:47.062330 2026] [:error] [pid 756:tid 866] [client 158.158.52.11:33970] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acL4rzOaW6oylMIDBCRrywAAAI4"]
[Wed Mar 25 04:48:48.805216 2026] [:error] [pid 892:tid 895] [client 158.158.52.11:47504] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acL4sCT_G8WMU3T3yxoZ_AAAAME"]
[Wed Mar 25 04:48:49.745453 2026] [:error] [pid 755:tid 843] [client 158.158.52.11:42223] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acL4saS6bdaeEwgCGwop0QAAAFQ"]
[Wed Mar 25 04:48:51.263167 2026] [:error] [pid 892:tid 905] [client 158.158.52.11:37217] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acL4syT_G8WMU3T3yxoaAgAAAMc"]
[Wed Mar 25 04:48:56.417543 2026] [:error] [pid 892:tid 895] [client 158.158.52.11:1285] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acL4uCT_G8WMU3T3yxoaGQAAAME"]
[Wed Mar 25 04:48:57.614362 2026] [:error] [pid 755:tid 823] [client 158.158.52.11:40858] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acL4uaS6bdaeEwgCGwop3AAAAEg"]
[Wed Mar 25 04:48:59.238050 2026] [:error] [pid 892:tid 919] [client 158.158.52.11:32908] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acL4uyT_G8WMU3T3yxoaJwAAANQ"]
[Wed Mar 25 04:49:00.434069 2026] [:error] [pid 892:tid 914] [client 158.158.52.11:42015] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acL4vCT_G8WMU3T3yxoaMAAAANA"]
[Wed Mar 25 04:49:01.813379 2026] [:error] [pid 754:tid 770] [client 158.158.52.11:38513] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acL4vTisL3asPbA3CtivHAAAAAU"]
[Wed Mar 25 04:49:04.595334 2026] [:error] [pid 756:tid 863] [client 158.158.52.11:59793] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acL4wDOaW6oylMIDBCRr7QAAAIs"]
[Wed Mar 25 04:49:09.639320 2026] [:error] [pid 754:tid 789] [client 158.158.52.11:62389] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acL4xTisL3asPbA3CtivIAAAABg"]
[Wed Mar 25 04:49:15.418364 2026] [:error] [pid 892:tid 915] [client 158.158.52.11:37651] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acL4yyT_G8WMU3T3yxoaeAAAANE"]
[Wed Mar 25 04:49:16.711816 2026] [:error] [pid 756:tid 864] [client 158.158.52.11:35661] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acL4zDOaW6oylMIDBCRsCwAAAIw"]
[Wed Mar 25 04:49:20.405578 2026] [:error] [pid 756:tid 861] [client 158.158.52.11:35693] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acL40DOaW6oylMIDBCRsDgAAAIk"]
[Wed Mar 25 04:49:22.173714 2026] [:error] [pid 755:tid 835] [client 158.158.52.11:35191] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acL40qS6bdaeEwgCGwop5QAAAEw"]
[Wed Mar 25 04:49:23.044601 2026] [:error] [pid 755:tid 841] [client 158.158.52.11:38177] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acL406S6bdaeEwgCGwop6gAAAFI"]
[Wed Mar 25 04:49:24.397296 2026] [:error] [pid 756:tid 876] [client 158.158.52.11:37360] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acL41DOaW6oylMIDBCRsFwAAAJg"]
[Wed Mar 25 04:49:25.634844 2026] [:error] [pid 892:tid 894] [client 158.158.52.11:34427] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acL41ST_G8WMU3T3yxoazwAAAMA"]
[Wed Mar 25 04:49:27.313331 2026] [:error] [pid 754:tid 783] [client 158.158.52.11:37945] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acL41zisL3asPbA3CtivMQAAABI"]
[Wed Mar 25 04:49:30.480377 2026] [:error] [pid 756:tid 851] [client 158.158.52.11:42018] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acL42jOaW6oylMIDBCRsOAAAAIE"]
[Wed Mar 25 04:49:31.279802 2026] [:error] [pid 892:tid 915] [client 158.158.52.11:34391] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acL42yT_G8WMU3T3yxoa_gAAANE"]
[Wed Mar 25 04:49:34.859749 2026] [:error] [pid 756:tid 862] [client 158.158.52.11:38238] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acL43jOaW6oylMIDBCRsPQAAAIo"]
[Wed Mar 25 04:49:37.114630 2026] [:error] [pid 756:tid 861] [client 158.158.52.11:39333] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acL44TOaW6oylMIDBCRsQgAAAIk"]
[Wed Mar 25 04:49:41.906827 2026] [:error] [pid 754:tid 785] [client 158.158.52.11:37790] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acL45TisL3asPbA3CtivUwAAABQ"]
[Wed Mar 25 04:49:53.428261 2026] [:error] [pid 756:tid 866] [client 158.158.52.11:34371] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acL48TOaW6oylMIDBCRsjQAAAI4"]
[Wed Mar 25 04:49:55.231900 2026] [:error] [pid 892:tid 918] [client 158.158.52.11:1467] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acL48yT_G8WMU3T3yxobeAAAANM"]
[Wed Mar 25 04:49:57.058671 2026] [:error] [pid 755:tid 847] [client 158.158.52.11:45570] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acL49aS6bdaeEwgCGwoqMQAAAFg"]
[Wed Mar 25 04:49:59.940447 2026] [:error] [pid 892:tid 911] [client 158.158.52.11:39547] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acL49yT_G8WMU3T3yxoblAAAAM0"]
[Wed Mar 25 04:50:02.163080 2026] [:error] [pid 892:tid 904] [client 158.158.52.11:45514] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "acL4-iT_G8WMU3T3yxobnwAAAMY"]
[Wed Mar 25 04:50:10.400489 2026] [:error] [pid 754:tid 788] [client 158.158.52.11:1232] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "acL5AjisL3asPbA3CtivfgAAABc"]
[Wed Mar 25 04:50:11.682310 2026] [:error] [pid 892:tid 896] [client 158.158.52.11:49049] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "acL5AyT_G8WMU3T3yxobwQAAAMI"]
[Wed Mar 25 04:50:13.127903 2026] [:error] [pid 892:tid 919] [client 158.158.52.11:45534] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "acL5BST_G8WMU3T3yxobywAAANQ"]
[Wed Mar 25 04:50:14.766527 2026] [:error] [pid 756:tid 868] [client 158.158.52.11:52274] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acL5BjOaW6oylMIDBCRsqAAAAJA"]
[Wed Mar 25 04:50:15.601768 2026] [:error] [pid 755:tid 835] [client 158.158.52.11:52244] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acL5B6S6bdaeEwgCGwoqUgAAAEw"]
[Wed Mar 25 04:50:17.048378 2026] [:error] [pid 754:tid 784] [client 158.158.52.11:37264] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acL5CTisL3asPbA3CtivigAAABM"]
[Wed Mar 25 04:50:18.247665 2026] [:error] [pid 892:tid 907] [client 158.158.52.11:45555] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acL5CiT_G8WMU3T3yxob5QAAAMk"]
[Wed Mar 25 04:50:19.142740 2026] [:error] [pid 755:tid 839] [client 158.158.52.11:1428] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acL5C6S6bdaeEwgCGwoqVwAAAFA"]
[Wed Mar 25 04:50:20.499145 2026] [:error] [pid 892:tid 911] [client 158.158.52.11:42675] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acL5DCT_G8WMU3T3yxob9AAAAM0"]
[Wed Mar 25 04:50:21.192578 2026] [:error] [pid 755:tid 818] [client 158.158.52.11:39556] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acL5DaS6bdaeEwgCGwoqWAAAAEU"]
[Wed Mar 25 04:50:23.607175 2026] [:error] [pid 892:tid 907] [client 158.158.52.11:57235] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acL5DyT_G8WMU3T3yxocCQAAAMk"]
[Wed Mar 25 04:50:24.672961 2026] [:error] [pid 892:tid 914] [client 158.158.52.11:1245] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acL5ECT_G8WMU3T3yxocEAAAANA"]
[Wed Mar 25 04:50:25.662177 2026] [:error] [pid 892:tid 912] [client 158.158.52.11:45511] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acL5EST_G8WMU3T3yxocFQAAAM4"]
[Wed Mar 25 04:50:29.365729 2026] [:error] [pid 892:tid 922] [client 158.158.52.11:32835] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acL5FST_G8WMU3T3yxocLQAAANc"]
[Wed Mar 25 04:50:30.926588 2026] [:error] [pid 755:tid 843] [client 158.158.52.11:32072] [client 158.158.52.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acL5FqS6bdaeEwgCGwoqaQAAAFQ"]
[Wed Mar 25 05:14:35.765163 2026] [:error] [pid 47989:tid 47997] [client 78.182.92.49:56464] [client 78.182.92.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.182.92.49, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acL-uyWKdJMhIccROjlT7wAAAUY"]
[Wed Mar 25 05:34:30.749250 2026] [:error] [pid 754:tid 781] [client 148.72.173.218:52648] [client 148.72.173.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.218, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "acMDZjisL3asPbA3Cti3rAAAABA"]
[Wed Mar 25 05:34:30.749381 2026] [:error] [pid 754:tid 781] [client 148.72.173.218:52648] [client 148.72.173.218] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 148.72.173.218 on wp-login.php, counter = 14"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "acMDZjisL3asPbA3Cti3rAAAABA"]
[Wed Mar 25 07:38:37.540963 2026] [:error] [pid 47989:tid 48014] [client 45.94.31.15:51738] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgfSWKdJMhIccROjmd_wAAAVc"], referer: www.google.com
[Wed Mar 25 07:38:37.542330 2026] [:error] [pid 754:tid 780] [client 45.94.31.15:51736] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfTisL3asPbA3CtjOEQAAAA8"], referer: www.google.com
[Wed Mar 25 07:38:37.545091 2026] [:error] [pid 755:tid 840] [client 45.94.31.15:51678] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acMgfaS6bdaeEwgCGwpLYwAAAFE"]
[Wed Mar 25 07:38:38.031584 2026] [:error] [pid 47946:tid 47948] [client 45.94.31.15:55393] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acMgfjipQTqBMSeKYhcXAgAAAQA"]
[Wed Mar 25 07:38:38.034555 2026] [:error] [pid 26269:tid 26289] [client 45.94.31.15:55109] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfkn7e-ZQbaIs7qx-uQAAAY0"], referer: www.google.com
[Wed Mar 25 07:38:38.040328 2026] [:error] [pid 754:tid 774] [client 45.94.31.15:55054] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgfjisL3asPbA3CtjOGAAAAAk"], referer: www.google.com
[Wed Mar 25 07:38:38.277979 2026] [:error] [pid 755:tid 846] [client 45.94.31.15:51746] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acMgfqS6bdaeEwgCGwpLcgAAAFc"]
[Wed Mar 25 07:38:38.294307 2026] [:error] [pid 892:tid 923] [client 45.94.31.15:51744] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgfiT_G8WMU3T3yxpOKQAAANg"], referer: www.google.com
[Wed Mar 25 07:38:38.521778 2026] [:error] [pid 756:tid 850] [client 45.94.31.15:59759] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfjOaW6oylMIDBCTE1wAAAIA"], referer: www.google.com
[Wed Mar 25 07:38:38.566522 2026] [:error] [pid 755:tid 839] [client 45.94.31.15:58765] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "acMgfqS6bdaeEwgCGwpLeQAAAFA"], referer: www.google.com
[Wed Mar 25 07:38:38.770213 2026] [:error] [pid 756:tid 871] [client 45.94.31.15:53695] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acMgfjOaW6oylMIDBCTE3QAAAJM"]
[Wed Mar 25 07:38:38.786644 2026] [:error] [pid 26320:tid 26369] [client 45.94.31.15:53996] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgfjkUgS2mHAojGnl4HAAAAc0"], referer: www.google.com
[Wed Mar 25 07:38:39.012523 2026] [:error] [pid 756:tid 871] [client 45.94.31.15:61919] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgfzOaW6oylMIDBCTE7gAAAJM"], referer: www.google.com
[Wed Mar 25 07:38:39.256115 2026] [:error] [pid 754:tid 787] [client 45.94.31.15:53803] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acMgfzisL3asPbA3CtjOLgAAABY"]
[Wed Mar 25 07:38:39.278680 2026] [:error] [pid 755:tid 825] [client 45.94.31.15:54168] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgf6S6bdaeEwgCGwpLggAAAEo"], referer: www.google.com
[Wed Mar 25 07:38:39.503310 2026] [:error] [pid 755:tid 825] [client 45.94.31.15:65041] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMgf6S6bdaeEwgCGwpLjAAAAEo"], referer: www.google.com
[Wed Mar 25 07:38:39.524527 2026] [:error] [pid 756:tid 873] [client 45.94.31.15:58016] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMgfzOaW6oylMIDBCTE-wAAAJU"], referer: www.google.com
[Wed Mar 25 07:38:39.560384 2026] [:error] [pid 756:tid 857] [client 45.94.31.15:65466] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "acMgfzOaW6oylMIDBCTE_wAAAIU"], referer: www.google.com
[Wed Mar 25 07:38:40.492646 2026] [:error] [pid 26269:tid 26288] [client 45.94.31.15:64175] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggEn7e-ZQbaIs7qx_CQAAAYw"], referer: www.google.com
[Wed Mar 25 07:38:40.521723 2026] [:error] [pid 756:tid 863] [client 45.94.31.15:64989] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggDOaW6oylMIDBCTFJAAAAIs"], referer: www.google.com
[Wed Mar 25 07:38:40.548488 2026] [:error] [pid 26320:tid 26370] [client 45.94.31.15:50799] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "acMggDkUgS2mHAojGnl4RwAAAc4"], referer: www.google.com
[Wed Mar 25 07:38:41.469632 2026] [:error] [pid 755:tid 838] [client 45.94.31.15:53360] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggaS6bdaeEwgCGwpLvAAAAE8"], referer: www.google.com
[Wed Mar 25 07:38:41.515688 2026] [:error] [pid 892:tid 905] [client 45.94.31.15:53872] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggST_G8WMU3T3yxpOVgAAAMc"], referer: www.google.com
[Wed Mar 25 07:38:41.538273 2026] [:error] [pid 892:tid 923] [client 45.94.31.15:54636] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "acMggST_G8WMU3T3yxpOWAAAANg"], referer: www.google.com
[Wed Mar 25 07:38:42.485664 2026] [:error] [pid 754:tid 777] [client 45.94.31.15:52017] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggjisL3asPbA3CtjOcwAAAAw"], referer: www.google.com
[Wed Mar 25 07:38:42.494640 2026] [:error] [pid 26269:tid 26284] [client 45.94.31.15:53263] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggkn7e-ZQbaIs7qx_SQAAAYg"], referer: www.google.com
[Wed Mar 25 07:38:42.529003 2026] [:error] [pid 47946:tid 47957] [client 45.94.31.15:53554] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-plain.php"] [unique_id "acMggjipQTqBMSeKYhcXZwAAAQk"], referer: www.google.com
[Wed Mar 25 07:38:43.498756 2026] [:error] [pid 47946:tid 47950] [client 45.94.31.15:55574] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "acMggzipQTqBMSeKYhcXjQAAAQI"], referer: www.google.com
[Wed Mar 25 07:38:43.505616 2026] [:error] [pid 47946:tid 47964] [client 45.94.31.15:55545] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMggzipQTqBMSeKYhcXjwAAARA"], referer: www.google.com
[Wed Mar 25 07:38:44.496577 2026] [:error] [pid 755:tid 846] [client 45.94.31.15:52573] [client 45.94.31.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "acMghKS6bdaeEwgCGwpMIwAAAFc"], referer: www.google.com
[Wed Mar 25 08:14:26.200232 2026] [:error] [pid 892:tid 901] [client 49.51.50.147:60632] [client 49.51.50.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acMo4iT_G8WMU3T3yxpVGwAAAMQ"]
[Wed Mar 25 08:35:34.317950 2026] [:error] [pid 756:tid 875] [client 43.140.247.223:42746] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acMt1jOaW6oylMIDBCTShgAAAJc"]
[Wed Mar 25 08:40:58.399727 2026] [:error] [pid 756:tid 875] [client 173.239.240.24:47027] [client 173.239.240.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.24, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "acMvGjOaW6oylMIDBCTTzwAAAJc"]
[Wed Mar 25 12:05:02.236986 2026] [:error] [pid 892:tid 921] [client 43.166.224.244:52030] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acNe7iT_G8WMU3T3yxqI-wAAANY"]
[Wed Mar 25 12:57:26.166854 2026] [:error] [pid 26321:tid 26365] [client 52.236.56.26:2084] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "acNrNvKO65qqGZCSPZrufQAAAhg"]
[Wed Mar 25 12:57:27.122751 2026] [:error] [pid 25967:tid 25995] [client 52.236.56.26:25244] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "acNrN_g8Qtq7ZM4mSFmh3wAAA1c"]
[Wed Mar 25 12:57:28.382330 2026] [:error] [pid 26449:tid 26458] [client 52.236.56.26:65330] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "acNrONpZ2T15NDqzAjE6-wAAAkU"]
[Wed Mar 25 12:57:29.134564 2026] [:error] [pid 26321:tid 26354] [client 52.236.56.26:20857] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "acNrOfKO65qqGZCSPZrugwAAAg0"]
[Wed Mar 25 12:57:30.887800 2026] [:error] [pid 25875:tid 25888] [client 52.236.56.26:25848] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acNrOhJ38QkS3NyfshyB7AAAAoc"]
[Wed Mar 25 12:57:32.482307 2026] [:error] [pid 47989:tid 48008] [client 52.236.56.26:25808] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acNrPCWKdJMhIccROjkWFgAAAVE"]
[Wed Mar 25 12:57:34.143861 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:36334] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acNrPiWKdJMhIccROjkWHAAAAUE"]
[Wed Mar 25 12:57:34.911068 2026] [:error] [pid 47989:tid 47998] [client 52.236.56.26:36293] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acNrPiWKdJMhIccROjkWIgAAAUc"]
[Wed Mar 25 12:57:36.027078 2026] [:error] [pid 892:tid 913] [client 52.236.56.26:24784] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acNrQCT_G8WMU3T3yxqesAAAAM8"]
[Wed Mar 25 12:57:37.916835 2026] [:error] [pid 26449:tid 26470] [client 52.236.56.26:25279] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acNrQdpZ2T15NDqzAjE6_gAAAlE"]
[Wed Mar 25 12:57:39.709752 2026] [:error] [pid 756:tid 868] [client 52.236.56.26:24319] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acNrQzOaW6oylMIDBCQE4AAAAJA"]
[Wed Mar 25 12:57:41.134595 2026] [:error] [pid 25875:tid 25894] [client 52.236.56.26:41875] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acNrRRJ38QkS3NyfshyCCgAAAo0"]
[Wed Mar 25 12:57:41.866731 2026] [:error] [pid 25875:tid 25895] [client 52.236.56.26:62645] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acNrRRJ38QkS3NyfshyCDQAAAo4"]
[Wed Mar 25 12:57:43.170250 2026] [:error] [pid 26321:tid 26340] [client 52.236.56.26:24768] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acNrR_KO65qqGZCSPZrujgAAAgE"]
[Wed Mar 25 12:57:44.487771 2026] [:error] [pid 25875:tid 25894] [client 52.236.56.26:25269] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acNrSBJ38QkS3NyfshyCFQAAAo0"]
[Wed Mar 25 12:57:45.829090 2026] [:error] [pid 26449:tid 26471] [client 52.236.56.26:35015] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acNrSdpZ2T15NDqzAjE7AgAAAlI"]
[Wed Mar 25 12:57:47.531285 2026] [:error] [pid 26269:tid 26288] [client 52.236.56.26:58460] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acNrS0n7e-ZQbaIs7qyX2QAAAYw"]
[Wed Mar 25 12:57:49.300221 2026] [:error] [pid 25875:tid 25881] [client 52.236.56.26:65340] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acNrTRJ38QkS3NyfshyCKgAAAoA"]
[Wed Mar 25 12:57:50.437322 2026] [:error] [pid 47946:tid 47958] [client 52.236.56.26:25814] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acNrTjipQTqBMSeKYhdnLwAAAQo"]
[Wed Mar 25 12:57:51.187916 2026] [:error] [pid 25875:tid 25904] [client 52.236.56.26:65324] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acNrTxJ38QkS3NyfshyCMgAAApc"]
[Wed Mar 25 12:57:51.814161 2026] [:error] [pid 25967:tid 25993] [client 52.236.56.26:2057] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acNrT_g8Qtq7ZM4mSFmh-wAAA1U"]
[Wed Mar 25 12:57:53.096703 2026] [:error] [pid 26321:tid 26360] [client 52.236.56.26:32579] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acNrUfKO65qqGZCSPZruoQAAAhM"]
[Wed Mar 25 12:57:55.712739 2026] [:error] [pid 26269:tid 26293] [client 52.236.56.26:25241] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acNrU0n7e-ZQbaIs7qyX3gAAAZE"]
[Wed Mar 25 12:57:56.989377 2026] [:error] [pid 25967:tid 25984] [client 52.236.56.26:41965] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acNrVPg8Qtq7ZM4mSFmiBwAAA0w"]
[Wed Mar 25 12:57:57.774913 2026] [:error] [pid 25967:tid 25973] [client 52.236.56.26:61604] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acNrVfg8Qtq7ZM4mSFmiCwAAA0E"]
[Wed Mar 25 12:57:59.419573 2026] [:error] [pid 26269:tid 26287] [client 52.236.56.26:51706] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acNrV0n7e-ZQbaIs7qyX4QAAAYs"]
[Wed Mar 25 12:58:01.762520 2026] [:error] [pid 892:tid 895] [client 52.236.56.26:27304] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acNrWST_G8WMU3T3yxqevgAAAME"]
[Wed Mar 25 12:58:03.083196 2026] [:error] [pid 892:tid 901] [client 52.236.56.26:20814] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acNrWyT_G8WMU3T3yxqewAAAAMQ"]
[Wed Mar 25 12:58:04.609433 2026] [:error] [pid 756:tid 860] [client 52.236.56.26:25841] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acNrXDOaW6oylMIDBCQE6wAAAIg"]
[Wed Mar 25 12:58:05.447958 2026] [:error] [pid 25875:tid 25886] [client 52.236.56.26:25827] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acNrXRJ38QkS3NyfshyCTQAAAoU"]
[Wed Mar 25 12:58:06.135712 2026] [:error] [pid 25875:tid 25902] [client 52.236.56.26:34527] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acNrXhJ38QkS3NyfshyCUgAAApU"]
[Wed Mar 25 12:58:07.155227 2026] [:error] [pid 25967:tid 25978] [client 52.236.56.26:34556] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acNrX_g8Qtq7ZM4mSFmiJgAAA0Y"]
[Wed Mar 25 12:58:07.793910 2026] [:error] [pid 47989:tid 47997] [client 52.236.56.26:39450] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acNrXyWKdJMhIccROjkWMAAAAUY"]
[Wed Mar 25 12:58:08.611545 2026] [:error] [pid 25967:tid 25985] [client 52.236.56.26:17821] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acNrYPg8Qtq7ZM4mSFmiMQAAA00"]
[Wed Mar 25 12:58:09.472800 2026] [:error] [pid 26321:tid 26363] [client 52.236.56.26:41963] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acNrYfKO65qqGZCSPZrutQAAAhY"]
[Wed Mar 25 12:58:10.102210 2026] [:error] [pid 25967:tid 25989] [client 52.236.56.26:62657] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acNrYvg8Qtq7ZM4mSFmiPgAAA1E"]
[Wed Mar 25 12:58:11.497257 2026] [:error] [pid 25967:tid 25985] [client 52.236.56.26:41948] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acNrY_g8Qtq7ZM4mSFmiRwAAA00"]
[Wed Mar 25 12:58:12.913101 2026] [:error] [pid 26269:tid 26294] [client 52.236.56.26:17869] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acNrZEn7e-ZQbaIs7qyX5wAAAZI"]
[Wed Mar 25 12:58:14.047061 2026] [:error] [pid 25969:tid 26034] [client 52.236.56.26:16804] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acNrZhd3aEUmOfdKja_fnQAAA8g"]
[Wed Mar 25 12:58:15.280846 2026] [:error] [pid 47946:tid 47957] [client 52.236.56.26:41222] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acNrZzipQTqBMSeKYhdnNwAAAQk"]
[Wed Mar 25 12:58:16.876986 2026] [:error] [pid 25967:tid 25982] [client 52.236.56.26:63087] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/init.php"] [unique_id "acNraPg8Qtq7ZM4mSFmiUwAAA0o"]
[Wed Mar 25 12:58:18.135635 2026] [:error] [pid 26321:tid 26359] [client 52.236.56.26:18357] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/init.php"] [unique_id "acNravKO65qqGZCSPZruvgAAAhI"]
[Wed Mar 25 12:58:19.226100 2026] [:error] [pid 47989:tid 47997] [client 52.236.56.26:35001] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/init.php"] [unique_id "acNrayWKdJMhIccROjkWPQAAAUY"]
[Wed Mar 25 12:58:21.873211 2026] [:error] [pid 26269:tid 26277] [client 52.236.56.26:29097] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/init.php"] [unique_id "acNrbUn7e-ZQbaIs7qyX6wAAAYE"]
[Wed Mar 25 12:58:28.630823 2026] [:error] [pid 25875:tid 25903] [client 52.236.56.26:29062] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acNrdBJ38QkS3NyfshyCZwAAApY"]
[Wed Mar 25 12:58:31.744290 2026] [:error] [pid 25967:tid 25984] [client 52.236.56.26:18344] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acNrd_g8Qtq7ZM4mSFmidAAAA0w"]
[Wed Mar 25 12:58:33.497072 2026] [:error] [pid 25967:tid 25993] [client 52.236.56.26:62991] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acNrefg8Qtq7ZM4mSFmiegAAA1U"]
[Wed Mar 25 12:58:34.742307 2026] [:error] [pid 25967:tid 25991] [client 52.236.56.26:20228] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acNrevg8Qtq7ZM4mSFmigAAAA1M"]
[Wed Mar 25 12:58:35.656217 2026] [:error] [pid 25969:tid 26034] [client 52.236.56.26:28222] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acNrexd3aEUmOfdKja_fpwAAA8g"]
[Wed Mar 25 12:58:36.516714 2026] [:error] [pid 25967:tid 25978] [client 52.236.56.26:28184] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acNrfPg8Qtq7ZM4mSFmihgAAA0Y"]
[Wed Mar 25 12:58:37.269504 2026] [:error] [pid 25875:tid 25900] [client 52.236.56.26:26757] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acNrfRJ38QkS3NyfshyCbgAAApM"]
[Wed Mar 25 12:58:40.336064 2026] [:error] [pid 26449:tid 26475] [client 52.236.56.26:20248] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acNrgNpZ2T15NDqzAjE7IQAAAlY"]
[Wed Mar 25 12:58:41.367499 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:35005] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "acNrgSWKdJMhIccROjkWXQAAAVM"]
[Wed Mar 25 12:58:42.410933 2026] [:error] [pid 47989:tid 47993] [client 52.236.56.26:40720] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "acNrgiWKdJMhIccROjkWYQAAAUI"]
[Wed Mar 25 12:58:44.368541 2026] [:error] [pid 25875:tid 25897] [client 52.236.56.26:46388] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "acNrhBJ38QkS3NyfshyCeQAAApA"]
[Wed Mar 25 12:58:46.909245 2026] [:error] [pid 756:tid 852] [client 52.236.56.26:52246] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "acNrhjOaW6oylMIDBCQE-gAAAII"]
[Wed Mar 25 12:58:47.736437 2026] [:error] [pid 47989:tid 48001] [client 52.236.56.26:56487] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acNrhyWKdJMhIccROjkWaAAAAUo"]
[Wed Mar 25 12:58:48.999382 2026] [:error] [pid 756:tid 869] [client 52.236.56.26:26796] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acNriDOaW6oylMIDBCQFAQAAAJE"]
[Wed Mar 25 12:58:49.615905 2026] [:error] [pid 25967:tid 25988] [client 52.236.56.26:62993] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acNrifg8Qtq7ZM4mSFmingAAA1A"]
[Wed Mar 25 12:58:50.371616 2026] [:error] [pid 25967:tid 25987] [client 52.236.56.26:56450] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acNrivg8Qtq7ZM4mSFmioQAAA08"]
[Wed Mar 25 12:58:51.075278 2026] [:error] [pid 47989:tid 48004] [client 52.236.56.26:2335] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acNriyWKdJMhIccROjkWagAAAU0"]
[Wed Mar 25 12:58:51.802196 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:18358] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acNriyWKdJMhIccROjkWbAAAAVM"]
[Wed Mar 25 12:58:52.698632 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:2317] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acNrjCWKdJMhIccROjkWbwAAAUE"]
[Wed Mar 25 12:58:53.271612 2026] [:error] [pid 26321:tid 26357] [client 52.236.56.26:29116] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acNrjfKO65qqGZCSPZru5AAAAhA"]
[Wed Mar 25 12:58:54.327011 2026] [:error] [pid 47989:tid 48008] [client 52.236.56.26:34973] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNrjiWKdJMhIccROjkWdgAAAVE"]
[Wed Mar 25 12:58:55.024154 2026] [:error] [pid 47989:tid 48003] [client 52.236.56.26:34998] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNrjyWKdJMhIccROjkWewAAAUw"]
[Wed Mar 25 12:58:55.957063 2026] [:error] [pid 25969:tid 26042] [client 52.236.56.26:40743] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNrjxd3aEUmOfdKja_frAAAA9A"]
[Wed Mar 25 12:58:57.061128 2026] [:error] [pid 25967:tid 25976] [client 52.236.56.26:56462] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNrkfg8Qtq7ZM4mSFmiqAAAA0Q"]
[Wed Mar 25 12:58:57.731930 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:62996] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "acNrkSWKdJMhIccROjkWvAAAAUE"]
[Wed Mar 25 12:58:59.392882 2026] [:error] [pid 756:tid 870] [client 52.236.56.26:58079] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "acNrkzOaW6oylMIDBCQFBgAAAJI"]
[Wed Mar 25 12:59:00.187774 2026] [:error] [pid 25967:tid 25995] [client 52.236.56.26:20231] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "acNrlPg8Qtq7ZM4mSFmisAAAA1c"]
[Wed Mar 25 12:59:01.351933 2026] [:error] [pid 25967:tid 25972] [client 52.236.56.26:28221] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file.php"] [unique_id "acNrlfg8Qtq7ZM4mSFmivQAAA0A"]
[Wed Mar 25 12:59:03.110714 2026] [:error] [pid 25875:tid 25904] [client 52.236.56.26:63038] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "acNrlxJ38QkS3NyfshyCmQAAApc"]
[Wed Mar 25 12:59:04.850821 2026] [:error] [pid 756:tid 861] [client 52.236.56.26:58102] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "acNrmDOaW6oylMIDBCQFGgAAAIk"]
[Wed Mar 25 12:59:06.197350 2026] [:error] [pid 47989:tid 47995] [client 52.236.56.26:2333] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "acNrmiWKdJMhIccROjkWxgAAAUQ"]
[Wed Mar 25 12:59:07.803925 2026] [:error] [pid 47989:tid 47993] [client 52.236.56.26:62981] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "acNrmyWKdJMhIccROjkWyQAAAUI"]
[Wed Mar 25 12:59:08.691168 2026] [:error] [pid 47989:tid 48005] [client 52.236.56.26:20233] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "acNrnCWKdJMhIccROjkWywAAAU4"]
[Wed Mar 25 12:59:09.593210 2026] [:error] [pid 47989:tid 48009] [client 52.236.56.26:2343] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "acNrnSWKdJMhIccROjkWzQAAAVI"]
[Wed Mar 25 12:59:10.682749 2026] [:error] [pid 892:tid 913] [client 52.236.56.26:34956] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "acNrniT_G8WMU3T3yxqe5gAAAM8"]
[Wed Mar 25 12:59:11.682286 2026] [:error] [pid 26449:tid 26473] [client 52.236.56.26:26812] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "acNrn9pZ2T15NDqzAjE7aAAAAlQ"]
[Wed Mar 25 12:59:12.573957 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:62986] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acNroCWKdJMhIccROjkW1QAAAUE"]
[Wed Mar 25 12:59:13.345285 2026] [:error] [pid 25967:tid 25984] [client 52.236.56.26:38179] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acNrofg8Qtq7ZM4mSFmi9gAAA0w"]
[Wed Mar 25 12:59:14.615117 2026] [:error] [pid 25967:tid 25980] [client 52.236.56.26:26776] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acNrovg8Qtq7ZM4mSFmi-gAAA0g"]
[Wed Mar 25 12:59:15.330167 2026] [:error] [pid 25967:tid 25987] [client 52.236.56.26:40717] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acNro_g8Qtq7ZM4mSFmi_gAAA08"]
[Wed Mar 25 12:59:16.123815 2026] [:error] [pid 25967:tid 25996] [client 52.236.56.26:40721] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acNrpPg8Qtq7ZM4mSFmjAwAAA1g"]
[Wed Mar 25 12:59:18.867550 2026] [:error] [pid 25967:tid 25983] [client 52.236.56.26:28223] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acNrpvg8Qtq7ZM4mSFmjDwAAA0s"]
[Wed Mar 25 12:59:20.768731 2026] [:error] [pid 26269:tid 26276] [client 52.236.56.26:18316] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acNrqEn7e-ZQbaIs7qyX-wAAAYA"]
[Wed Mar 25 12:59:26.175189 2026] [:error] [pid 25875:tid 25896] [client 52.236.56.26:56539] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acNrrhJ38QkS3NyfshyCrAAAAo8"]
[Wed Mar 25 12:59:36.703621 2026] [:error] [pid 25967:tid 25996] [client 52.236.56.26:46345] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/166.php"] [unique_id "acNruPg8Qtq7ZM4mSFmjSgAAA1g"]
[Wed Mar 25 12:59:37.347426 2026] [:error] [pid 25875:tid 25888] [client 52.236.56.26:56568] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/166.php"] [unique_id "acNruRJ38QkS3NyfshyCtQAAAoc"]
[Wed Mar 25 12:59:38.010343 2026] [:error] [pid 25967:tid 25973] [client 52.236.56.26:42591] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/166.php"] [unique_id "acNruvg8Qtq7ZM4mSFmjTAAAA0E"]
[Wed Mar 25 12:59:38.751835 2026] [:error] [pid 25967:tid 25978] [client 52.236.56.26:46048] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/166.php"] [unique_id "acNruvg8Qtq7ZM4mSFmjTwAAA0Y"]
[Wed Mar 25 12:59:39.562781 2026] [:error] [pid 25967:tid 25982] [client 52.236.56.26:56504] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "acNru_g8Qtq7ZM4mSFmjVQAAA0o"]
[Wed Mar 25 12:59:40.189936 2026] [:error] [pid 25967:tid 25984] [client 52.236.56.26:23721] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "acNrvPg8Qtq7ZM4mSFmjXAAAA0w"]
[Wed Mar 25 12:59:41.052491 2026] [:error] [pid 26321:tid 26353] [client 52.236.56.26:57504] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "acNrvfKO65qqGZCSPZrvFQAAAgw"]
[Wed Mar 25 12:59:42.530118 2026] [:error] [pid 25875:tid 25894] [client 52.236.56.26:62088] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "acNrvhJ38QkS3NyfshyCugAAAo0"]
[Wed Mar 25 12:59:43.446954 2026] [:error] [pid 25875:tid 25895] [client 52.236.56.26:58041] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acNrvxJ38QkS3NyfshyCvAAAAo4"]
[Wed Mar 25 12:59:45.778611 2026] [:error] [pid 892:tid 895] [client 52.236.56.26:2903] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acNrwST_G8WMU3T3yxqfCwAAAME"]
[Wed Mar 25 12:59:48.651424 2026] [:error] [pid 25967:tid 25989] [client 52.236.56.26:58045] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acNrxPg8Qtq7ZM4mSFmjlAAAA1E"]
[Wed Mar 25 12:59:50.128956 2026] [:error] [pid 26321:tid 26358] [client 52.236.56.26:26824] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acNrxvKO65qqGZCSPZrvJwAAAhE"]
[Wed Mar 25 12:59:50.910174 2026] [:error] [pid 47989:tid 48006] [client 52.236.56.26:43968] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acNrxiWKdJMhIccROjkXCwAAAU8"]
[Wed Mar 25 12:59:52.232662 2026] [:error] [pid 25967:tid 25988] [client 52.236.56.26:2271] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acNryPg8Qtq7ZM4mSFmjrAAAA1A"]
[Wed Mar 25 12:59:52.956824 2026] [:error] [pid 25967:tid 25976] [client 52.236.56.26:2289] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acNryPg8Qtq7ZM4mSFmjwgAAA0Q"]
[Wed Mar 25 12:59:53.551484 2026] [:error] [pid 25875:tid 25884] [client 52.236.56.26:45617] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acNryRJ38QkS3NyfshyCwAAAAoM"]
[Wed Mar 25 12:59:54.937244 2026] [:error] [pid 25967:tid 25989] [client 52.236.56.26:27852] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acNryvg8Qtq7ZM4mSFmjyAAAA1E"]
[Wed Mar 25 12:59:55.777382 2026] [:error] [pid 25875:tid 25898] [client 52.236.56.26:26853] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acNryxJ38QkS3NyfshyCyAAAApE"]
[Wed Mar 25 12:59:56.450200 2026] [:error] [pid 47989:tid 47996] [client 52.236.56.26:49048] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acNrzCWKdJMhIccROjkXFQAAAUU"]
[Wed Mar 25 12:59:57.326398 2026] [:error] [pid 47989:tid 48013] [client 52.236.56.26:25750] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acNrzSWKdJMhIccROjkXGAAAAVY"]
[Wed Mar 25 12:59:58.291105 2026] [:error] [pid 26269:tid 26276] [client 52.236.56.26:21318] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acNrzkn7e-ZQbaIs7qyYIgAAAYA"]
[Wed Mar 25 12:59:59.177108 2026] [:error] [pid 26321:tid 26342] [client 52.236.56.26:31944] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acNrz_KO65qqGZCSPZrvhwAAAgM"]
[Wed Mar 25 12:59:59.851152 2026] [:error] [pid 26321:tid 26357] [client 52.236.56.26:21365] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acNrz_KO65qqGZCSPZrvigAAAhA"]
[Wed Mar 25 13:00:01.551480 2026] [:error] [pid 47989:tid 48008] [client 52.236.56.26:47073] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acNr0SWKdJMhIccROjkXHgAAAVE"]
[Wed Mar 25 13:00:02.841363 2026] [:error] [pid 47989:tid 48002] [client 52.236.56.26:57078] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "acNr0iWKdJMhIccROjkXIgAAAUs"]
[Wed Mar 25 13:00:03.899099 2026] [:error] [pid 25875:tid 25905] [client 52.236.56.26:39942] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "acNr0xJ38QkS3NyfshyC0AAAApg"]
[Wed Mar 25 13:00:05.767145 2026] [:error] [pid 25967:tid 25992] [client 52.236.56.26:31976] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "acNr1fg8Qtq7ZM4mSFmj2wAAA1Q"]
[Wed Mar 25 13:00:07.038060 2026] [:error] [pid 892:tid 902] [client 52.236.56.26:57033] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms.php"] [unique_id "acNr1yT_G8WMU3T3yxqfEwAAAMU"]
[Wed Mar 25 13:00:07.821666 2026] [:error] [pid 26321:tid 26358] [client 52.236.56.26:21821] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "acNr1_KO65qqGZCSPZrvnwAAAhE"]
[Wed Mar 25 13:00:08.813653 2026] [:error] [pid 47946:tid 47956] [client 52.236.56.26:57080] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "acNr2DipQTqBMSeKYhdnYQAAAQg"]
[Wed Mar 25 13:00:10.739825 2026] [:error] [pid 25875:tid 25903] [client 52.236.56.26:22301] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "acNr2hJ38QkS3NyfshyC1gAAApY"]
[Wed Mar 25 13:00:11.419193 2026] [:error] [pid 47946:tid 47952] [client 52.236.56.26:51010] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "acNr2zipQTqBMSeKYhdnYgAAAQQ"]
[Wed Mar 25 13:00:12.264556 2026] [:error] [pid 25875:tid 25899] [client 52.236.56.26:27795] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/155.php"] [unique_id "acNr3BJ38QkS3NyfshyC2gAAApI"]
[Wed Mar 25 13:00:12.926516 2026] [:error] [pid 26269:tid 26299] [client 52.236.56.26:37551] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/155.php"] [unique_id "acNr3En7e-ZQbaIs7qyYJwAAAZc"]
[Wed Mar 25 13:00:13.737891 2026] [:error] [pid 26269:tid 26285] [client 52.236.56.26:41323] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/155.php"] [unique_id "acNr3Un7e-ZQbaIs7qyYKQAAAYk"]
[Wed Mar 25 13:00:14.392825 2026] [:error] [pid 26269:tid 26284] [client 52.236.56.26:51017] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/155.php"] [unique_id "acNr3kn7e-ZQbaIs7qyYKwAAAYg"]
[Wed Mar 25 13:00:15.177136 2026] [:error] [pid 25875:tid 25888] [client 52.236.56.26:39961] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/d12.php"] [unique_id "acNr3xJ38QkS3NyfshyC3gAAAoc"]
[Wed Mar 25 13:00:15.879055 2026] [:error] [pid 25967:tid 25981] [client 52.236.56.26:40423] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/d12.php"] [unique_id "acNr3_g8Qtq7ZM4mSFmj5gAAA0k"]
[Wed Mar 25 13:00:17.021450 2026] [:error] [pid 25967:tid 25996] [client 52.236.56.26:33187] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/d12.php"] [unique_id "acNr4fg8Qtq7ZM4mSFmj6gAAA1g"]
[Wed Mar 25 13:00:18.032318 2026] [:error] [pid 25967:tid 25994] [client 52.236.56.26:51034] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/d12.php"] [unique_id "acNr4vg8Qtq7ZM4mSFmj8AAAA1Y"]
[Wed Mar 25 13:00:20.091824 2026] [:error] [pid 25967:tid 25984] [client 52.236.56.26:51049] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acNr5Pg8Qtq7ZM4mSFmj-QAAA0w"]
[Wed Mar 25 13:00:22.536849 2026] [:error] [pid 26449:tid 26457] [client 52.236.56.26:2414] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acNr5tpZ2T15NDqzAjE7oQAAAkQ"]
[Wed Mar 25 13:00:23.415068 2026] [:error] [pid 25875:tid 25899] [client 52.236.56.26:52988] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acNr5xJ38QkS3NyfshyC5gAAApI"]
[Wed Mar 25 13:00:24.544498 2026] [:error] [pid 47989:tid 48001] [client 52.236.56.26:62168] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acNr6CWKdJMhIccROjkXNgAAAUo"]
[Wed Mar 25 13:00:25.793244 2026] [:error] [pid 47989:tid 47997] [client 52.236.56.26:23780] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acNr6SWKdJMhIccROjkXOwAAAUY"]
[Wed Mar 25 13:00:26.923091 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:37586] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acNr6iWKdJMhIccROjkXPwAAAVM"]
[Wed Mar 25 13:00:27.607350 2026] [:error] [pid 26449:tid 26459] [client 52.236.56.26:2390] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acNr69pZ2T15NDqzAjE7qwAAAkY"]
[Wed Mar 25 13:00:28.256148 2026] [:error] [pid 26449:tid 26460] [client 52.236.56.26:40798] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acNr7NpZ2T15NDqzAjE7rgAAAkc"]
[Wed Mar 25 13:00:28.987187 2026] [:error] [pid 25967:tid 25996] [client 52.236.56.26:52980] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acNr7Pg8Qtq7ZM4mSFmkDwAAA1g"]
[Wed Mar 25 13:00:29.702078 2026] [:error] [pid 25969:tid 26047] [client 52.236.56.26:22902] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acNr7Rd3aEUmOfdKja_f9gAAA9U"]
[Wed Mar 25 13:00:30.384521 2026] [:error] [pid 25967:tid 25984] [client 52.236.56.26:40778] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acNr7vg8Qtq7ZM4mSFmkEQAAA0w"]
[Wed Mar 25 13:00:31.082263 2026] [:error] [pid 25969:tid 26048] [client 52.236.56.26:22853] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acNr7xd3aEUmOfdKja_f_gAAA9Y"]
[Wed Mar 25 13:00:31.799252 2026] [:error] [pid 756:tid 850] [client 52.236.56.26:38232] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acNr7zOaW6oylMIDBCQFNQAAAIA"]
[Wed Mar 25 13:00:32.563730 2026] [:error] [pid 25875:tid 25900] [client 52.236.56.26:62160] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acNr8BJ38QkS3NyfshyC6gAAApM"]
[Wed Mar 25 13:00:33.186629 2026] [:error] [pid 47989:tid 48009] [client 52.236.56.26:40791] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acNr8SWKdJMhIccROjkXQwAAAVI"]
[Wed Mar 25 13:00:33.861416 2026] [:error] [pid 47989:tid 47997] [client 52.236.56.26:17308] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acNr8SWKdJMhIccROjkXSAAAAUY"]
[Wed Mar 25 13:00:34.688308 2026] [:error] [pid 47989:tid 48012] [client 52.236.56.26:16330] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acNr8iWKdJMhIccROjkXTQAAAVU"]
[Wed Mar 25 13:00:35.521151 2026] [:error] [pid 26321:tid 26363] [client 52.236.56.26:55319] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acNr8_KO65qqGZCSPZrvrAAAAhY"]
[Wed Mar 25 13:00:44.507600 2026] [:error] [pid 26321:tid 26350] [client 52.236.56.26:52981] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acNr_PKO65qqGZCSPZrvzQAAAgk"]
[Wed Mar 25 13:00:45.377267 2026] [:error] [pid 26449:tid 26470] [client 52.236.56.26:58889] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acNr_dpZ2T15NDqzAjE7yQAAAlE"]
[Wed Mar 25 13:00:46.391313 2026] [:error] [pid 47989:tid 48000] [client 52.236.56.26:60406] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acNr_iWKdJMhIccROjkXWQAAAUk"]
[Wed Mar 25 13:00:47.120539 2026] [:error] [pid 47946:tid 47952] [client 52.236.56.26:52316] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acNr_zipQTqBMSeKYhdnbwAAAQQ"]
[Wed Mar 25 13:00:47.990024 2026] [:error] [pid 25967:tid 25986] [client 52.236.56.26:2473] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acNr__g8Qtq7ZM4mSFmkKgAAA04"]
[Wed Mar 25 13:00:48.567615 2026] [:error] [pid 47946:tid 47962] [client 52.236.56.26:17293] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acNsADipQTqBMSeKYhdncAAAAQ4"]
[Wed Mar 25 13:00:49.259817 2026] [:error] [pid 26321:tid 26359] [client 52.236.56.26:16354] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acNsAfKO65qqGZCSPZrv0AAAAhI"]
[Wed Mar 25 13:00:49.996283 2026] [:error] [pid 26321:tid 26343] [client 52.236.56.26:60884] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acNsAfKO65qqGZCSPZrv0gAAAgQ"]
[Wed Mar 25 13:00:50.716280 2026] [:error] [pid 26321:tid 26357] [client 52.236.56.26:52347] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/44.php"] [unique_id "acNsAvKO65qqGZCSPZrv1QAAAhA"]
[Wed Mar 25 13:00:51.287370 2026] [:error] [pid 26269:tid 26286] [client 52.236.56.26:58939] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/44.php"] [unique_id "acNsA0n7e-ZQbaIs7qyYOwAAAYo"]
[Wed Mar 25 13:00:52.032426 2026] [:error] [pid 26321:tid 26356] [client 52.236.56.26:44631] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/44.php"] [unique_id "acNsBPKO65qqGZCSPZrv2gAAAg8"]
[Wed Mar 25 13:00:53.399259 2026] [:error] [pid 756:tid 876] [client 52.236.56.26:60856] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/44.php"] [unique_id "acNsBTOaW6oylMIDBCQFPAAAAJg"]
[Wed Mar 25 13:00:54.119015 2026] [:error] [pid 25969:tid 26027] [client 52.236.56.26:60927] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acNsBhd3aEUmOfdKja_gCgAAA8E"]
[Wed Mar 25 13:00:54.952887 2026] [:error] [pid 25969:tid 26039] [client 52.236.56.26:34434] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acNsBhd3aEUmOfdKja_gCwAAA80"]
[Wed Mar 25 13:00:55.833133 2026] [:error] [pid 892:tid 902] [client 52.236.56.26:22792] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acNsByT_G8WMU3T3yxqfLQAAAMU"]
[Wed Mar 25 13:00:57.133419 2026] [:error] [pid 47989:tid 48001] [client 52.236.56.26:22816] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acNsCSWKdJMhIccROjkXXgAAAUo"]
[Wed Mar 25 13:00:57.812100 2026] [:error] [pid 892:tid 919] [client 52.236.56.26:60920] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amp.php"] [unique_id "acNsCST_G8WMU3T3yxqfMgAAANQ"]
[Wed Mar 25 13:00:58.388912 2026] [:error] [pid 756:tid 860] [client 52.236.56.26:55309] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amp.php"] [unique_id "acNsCjOaW6oylMIDBCQFQAAAAIg"]
[Wed Mar 25 13:00:59.010280 2026] [:error] [pid 26269:tid 26295] [client 52.236.56.26:40008] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amp.php"] [unique_id "acNsC0n7e-ZQbaIs7qyYPgAAAZM"]
[Wed Mar 25 13:00:59.680646 2026] [:error] [pid 25967:tid 25972] [client 52.236.56.26:44551] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amp.php"] [unique_id "acNsC_g8Qtq7ZM4mSFmkRgAAA0A"]
[Wed Mar 25 13:01:00.476855 2026] [:error] [pid 25967:tid 25981] [client 52.236.56.26:40036] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "acNsDPg8Qtq7ZM4mSFmkSQAAA0k"]
[Wed Mar 25 13:01:01.127625 2026] [:error] [pid 47989:tid 47997] [client 52.236.56.26:60397] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "acNsDSWKdJMhIccROjkXYQAAAUY"]
[Wed Mar 25 13:01:02.140277 2026] [:error] [pid 25875:tid 25898] [client 52.236.56.26:16382] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "acNsDhJ38QkS3NyfshyC-AAAApE"]
[Wed Mar 25 13:01:03.343172 2026] [:error] [pid 25967:tid 25991] [client 52.236.56.26:60873] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/install.php"] [unique_id "acNsD_g8Qtq7ZM4mSFmkUAAAA1M"]
[Wed Mar 25 13:01:04.281804 2026] [:error] [pid 25875:tid 25899] [client 52.236.56.26:33900] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acNsEBJ38QkS3NyfshyC_gAAApI"]
[Wed Mar 25 13:01:04.934000 2026] [:error] [pid 26449:tid 26469] [client 52.236.56.26:57018] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acNsENpZ2T15NDqzAjE70gAAAlA"]
[Wed Mar 25 13:01:05.626614 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:52295] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acNsESWKdJMhIccROjkXZgAAAVM"]
[Wed Mar 25 13:01:06.234378 2026] [:error] [pid 47989:tid 47995] [client 52.236.56.26:40009] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acNsEiWKdJMhIccROjkXaQAAAUQ"]
[Wed Mar 25 13:01:06.792514 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:52349] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "acNsEiWKdJMhIccROjkXawAAAUE"]
[Wed Mar 25 13:01:07.411819 2026] [:error] [pid 47989:tid 48009] [client 52.236.56.26:22786] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "acNsEyWKdJMhIccROjkXbAAAAVI"]
[Wed Mar 25 13:01:08.078897 2026] [:error] [pid 47989:tid 48008] [client 52.236.56.26:16322] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "acNsFCWKdJMhIccROjkXbgAAAVE"]
[Wed Mar 25 13:01:08.991177 2026] [:error] [pid 25967:tid 25973] [client 52.236.56.26:30081] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "acNsFPg8Qtq7ZM4mSFmkYgAAA0E"]
[Wed Mar 25 13:01:10.748981 2026] [:error] [pid 25967:tid 25986] [client 52.236.56.26:56961] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "acNsFvg8Qtq7ZM4mSFmkcAAAA04"]
[Wed Mar 25 13:01:11.616827 2026] [:error] [pid 47989:tid 48015] [client 52.236.56.26:40041] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "acNsFyWKdJMhIccROjkXegAAAVg"]
[Wed Mar 25 13:01:13.476474 2026] [:error] [pid 47989:tid 48003] [client 52.236.56.26:30087] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "acNsGSWKdJMhIccROjkXfQAAAUw"]
[Wed Mar 25 13:01:14.219773 2026] [:error] [pid 26321:tid 26357] [client 52.236.56.26:33872] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "acNsGvKO65qqGZCSPZrv5AAAAhA"]
[Wed Mar 25 13:01:14.904484 2026] [:error] [pid 25967:tid 25978] [client 52.236.56.26:60355] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acNsGvg8Qtq7ZM4mSFmkhQAAA0Y"]
[Wed Mar 25 13:01:15.981309 2026] [:error] [pid 25875:tid 25890] [client 52.236.56.26:43309] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acNsGxJ38QkS3NyfshyDAQAAAok"]
[Wed Mar 25 13:01:17.137011 2026] [:error] [pid 47946:tid 47960] [client 52.236.56.26:55997] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acNsHTipQTqBMSeKYhdneQAAAQw"]
[Wed Mar 25 13:01:18.018659 2026] [:error] [pid 26321:tid 26352] [client 52.236.56.26:40051] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acNsHvKO65qqGZCSPZrv6AAAAgs"]
[Wed Mar 25 13:01:18.996721 2026] [:error] [pid 892:tid 908] [client 52.236.56.26:60356] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acNsHiT_G8WMU3T3yxqfOAAAAMo"]
[Wed Mar 25 13:01:19.910986 2026] [:error] [pid 47989:tid 48015] [client 52.236.56.26:22805] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acNsHyWKdJMhIccROjkXhwAAAVg"]
[Wed Mar 25 13:01:21.364660 2026] [:error] [pid 26321:tid 26362] [client 52.236.56.26:55976] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acNsIfKO65qqGZCSPZrv7QAAAhU"]
[Wed Mar 25 13:01:25.391825 2026] [:error] [pid 25969:tid 26050] [client 52.236.56.26:19792] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acNsJRd3aEUmOfdKja_gIwAAA9g"]
[Wed Mar 25 13:01:38.036022 2026] [:error] [pid 25967:tid 25988] [client 52.236.56.26:19800] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "acNsMvg8Qtq7ZM4mSFmktQAAA1A"]
[Wed Mar 25 13:01:38.677717 2026] [:error] [pid 25875:tid 25899] [client 52.236.56.26:44633] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "acNsMhJ38QkS3NyfshyDEAAAApI"]
[Wed Mar 25 13:01:39.327874 2026] [:error] [pid 47989:tid 48003] [client 52.236.56.26:22846] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "acNsMyWKdJMhIccROjkXpQAAAUw"]
[Wed Mar 25 13:01:40.217438 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:52325] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "acNsNCWKdJMhIccROjkXqgAAAVM"]
[Wed Mar 25 13:01:41.183920 2026] [:error] [pid 756:tid 865] [client 52.236.56.26:19793] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acNsNTOaW6oylMIDBCQFRgAAAI0"]
[Wed Mar 25 13:01:41.981777 2026] [:error] [pid 26321:tid 26350] [client 52.236.56.26:52340] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acNsNfKO65qqGZCSPZrv_AAAAgk"]
[Wed Mar 25 13:01:43.072208 2026] [:error] [pid 25967:tid 25972] [client 52.236.56.26:19806] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acNsN_g8Qtq7ZM4mSFmkvAAAA0A"]
[Wed Mar 25 13:01:43.933214 2026] [:error] [pid 26321:tid 26339] [client 52.236.56.26:44654] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acNsN_KO65qqGZCSPZrv_wAAAgA"]
[Wed Mar 25 14:21:52.874715 2026] [:error] [pid 25967:tid 25991] [client 43.157.82.252:38160] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acN_APg8Qtq7ZM4mSFnTiQAAA1M"]
[Wed Mar 25 15:42:25.317680 2026] [:error] [pid 25875:tid 25883] [client 117.33.163.216:58670] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acOR4RJ38QkS3NyfshyyGQAAAoI"]
[Wed Mar 25 17:38:42.862576 2026] [:error] [pid 47946:tid 47952] [client 74.248.130.23:41705] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx22.php"] [unique_id "acOtIjipQTqBMSeKYhd8NwAAAQQ"]
[Wed Mar 25 17:38:43.425341 2026] [:error] [pid 26269:tid 26288] [client 74.248.130.23:42407] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw/34.php"] [unique_id "acOtI0n7e-ZQbaIs7qyvPgAAAYw"]
[Wed Mar 25 17:38:43.935116 2026] [:error] [pid 25967:tid 25983] [client 74.248.130.23:42393] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw/34.php"] [unique_id "acOtI_g8Qtq7ZM4mSFklfwAAA0s"]
[Wed Mar 25 17:38:44.446000 2026] [:error] [pid 25967:tid 25977] [client 74.248.130.23:42098] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw/34.php"] [unique_id "acOtJPg8Qtq7ZM4mSFklhwAAA0U"]
[Wed Mar 25 17:38:44.954315 2026] [:error] [pid 25967:tid 25978] [client 74.248.130.23:42404] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw/34.php"] [unique_id "acOtJPg8Qtq7ZM4mSFklkgAAA0Y"]
[Wed Mar 25 17:38:45.470791 2026] [:error] [pid 25969:tid 26034] [client 74.248.130.23:41529] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw/faiyy.php"] [unique_id "acOtJRd3aEUmOfdKja_8xwAAA8g"]
[Wed Mar 25 17:38:45.982161 2026] [:error] [pid 25875:tid 25886] [client 74.248.130.23:42148] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw/faiyy.php"] [unique_id "acOtJRJ38QkS3NyfshzRiwAAAoU"]
[Wed Mar 25 17:38:46.501803 2026] [:error] [pid 26321:tid 26350] [client 74.248.130.23:41774] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw/faiyy.php"] [unique_id "acOtJvKO65qqGZCSPZorBgAAAgk"]
[Wed Mar 25 17:38:47.010675 2026] [:error] [pid 26321:tid 26364] [client 74.248.130.23:41454] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fw/faiyy.php"] [unique_id "acOtJ_KO65qqGZCSPZorCwAAAhc"]
[Wed Mar 25 17:38:47.529334 2026] [:error] [pid 26449:tid 26462] [client 74.248.130.23:42101] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lfm.php"] [unique_id "acOtJ9pZ2T15NDqzAjFn6QAAAkk"]
[Wed Mar 25 17:38:48.076081 2026] [:error] [pid 47946:tid 47966] [client 74.248.130.23:42167] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lfm.php"] [unique_id "acOtKDipQTqBMSeKYhd8OgAAARI"]
[Wed Mar 25 17:38:48.653779 2026] [:error] [pid 25967:tid 25975] [client 74.248.130.23:42410] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abca.php"] [unique_id "acOtKPg8Qtq7ZM4mSFklqQAAA0M"]
[Wed Mar 25 17:38:49.167974 2026] [:error] [pid 26269:tid 26292] [client 74.248.130.23:41415] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abca.php"] [unique_id "acOtKUn7e-ZQbaIs7qyvQgAAAZA"]
[Wed Mar 25 17:38:49.680070 2026] [:error] [pid 25969:tid 26049] [client 74.248.130.23:40535] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abca.php"] [unique_id "acOtKRd3aEUmOfdKja_8yQAAA9c"]
[Wed Mar 25 17:38:50.189579 2026] [:error] [pid 26269:tid 26291] [client 74.248.130.23:41493] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abca.php"] [unique_id "acOtKkn7e-ZQbaIs7qyvSAAAAY8"]
[Wed Mar 25 17:38:50.701309 2026] [:error] [pid 25969:tid 26035] [client 74.248.130.23:42173] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "acOtKhd3aEUmOfdKja_8ywAAA8k"]
[Wed Mar 25 17:38:51.210952 2026] [:error] [pid 26269:tid 26294] [client 74.248.130.23:42334] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "acOtK0n7e-ZQbaIs7qyvSQAAAZI"]
[Wed Mar 25 17:38:51.753804 2026] [:error] [pid 756:tid 865] [client 74.248.130.23:41727] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "acOtKzOaW6oylMIDBCQXcgAAAI0"]
[Wed Mar 25 17:38:52.263397 2026] [:error] [pid 47989:tid 48013] [client 74.248.130.23:41771] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "acOtLCWKdJMhIccROjmVAgAAAVY"]
[Wed Mar 25 17:38:52.773322 2026] [:error] [pid 892:tid 921] [client 74.248.130.23:41684] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "acOtLCT_G8WMU3T3yxrCnAAAANY"]
[Wed Mar 25 17:38:53.282840 2026] [:error] [pid 47989:tid 47994] [client 74.248.130.23:42345] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "acOtLSWKdJMhIccROjmVCQAAAUM"]
[Wed Mar 25 17:38:53.792774 2026] [:error] [pid 25969:tid 26026] [client 74.248.130.23:41431] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/AAAA.php"] [unique_id "acOtLRd3aEUmOfdKja_8zwAAA8A"]
[Wed Mar 25 17:38:54.304137 2026] [:error] [pid 25969:tid 26031] [client 74.248.130.23:41736] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/AAAA.php"] [unique_id "acOtLhd3aEUmOfdKja_80QAAA8U"]
[Wed Mar 25 17:38:54.814131 2026] [:error] [pid 47946:tid 47963] [client 74.248.130.23:41678] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/AAAA.php"] [unique_id "acOtLjipQTqBMSeKYhd8RQAAAQ8"]
[Wed Mar 25 17:38:55.325268 2026] [:error] [pid 25969:tid 26048] [client 74.248.130.23:41456] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/AAAA.php"] [unique_id "acOtLxd3aEUmOfdKja_81gAAA9Y"]
[Wed Mar 25 17:38:55.834975 2026] [:error] [pid 25969:tid 26040] [client 74.248.130.23:42406] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fde.php"] [unique_id "acOtLxd3aEUmOfdKja_82QAAA84"]
[Wed Mar 25 17:38:56.343730 2026] [:error] [pid 26449:tid 26458] [client 74.248.130.23:42386] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fde.php"] [unique_id "acOtMNpZ2T15NDqzAjFoAAAAAkU"]
[Wed Mar 25 17:38:56.852490 2026] [:error] [pid 25969:tid 26030] [client 74.248.130.23:42158] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fde.php"] [unique_id "acOtMBd3aEUmOfdKja_82wAAA8Q"]
[Wed Mar 25 17:38:57.362038 2026] [:error] [pid 25967:tid 25995] [client 74.248.130.23:39759] [client 74.248.130.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fde.php"] [unique_id "acOtMfg8Qtq7ZM4mSFklwQAAA1c"]
[Wed Mar 25 18:06:06.911670 2026] [:error] [pid 892:tid 920] [client 182.8.164.18:7117] [client 182.8.164.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.164.18, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acOzjiT_G8WMU3T3yxrFsAAAANU"]
[Wed Mar 25 18:21:09.806283 2026] [:error] [pid 892:tid 899] [client 43.157.175.122:42704] [client 43.157.175.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acO3FST_G8WMU3T3yxrIGAAAAMM"]
[Wed Mar 25 18:37:50.484745 2026] [:error] [pid 47989:tid 48006] [client 20.151.18.25:21190] [client 20.151.18.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.18.25, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acO6_iWKdJMhIccROjm0uwAAAU8"]
[Wed Mar 25 18:37:52.491656 2026] [:error] [pid 47989:tid 48003] [client 20.151.18.25:21190] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acO7ACWKdJMhIccROjm0xQAAAUw"]
[Wed Mar 25 18:37:53.312843 2026] [:error] [pid 25875:tid 25881] [client 20.151.18.25:21233] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acO7ARJ38QkS3NyfshzjdAAAAoA"]
[Wed Mar 25 18:37:54.135052 2026] [:error] [pid 47946:tid 47955] [client 20.151.18.25:21224] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acO7AjipQTqBMSeKYhd__wAAAQc"]
[Wed Mar 25 18:37:54.958248 2026] [:error] [pid 25875:tid 25882] [client 20.151.18.25:21225] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acO7AhJ38QkS3NyfshzjeQAAAoE"]
[Wed Mar 25 20:28:08.583997 2026] [:error] [pid 25967:tid 25995] [client 51.103.36.25:49735] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPU2Pg8Qtq7ZM4mSFlkzQAAA1c"]
[Wed Mar 25 20:28:12.163771 2026] [:error] [pid 25875:tid 25898] [client 51.103.36.25:59893] [client 51.103.36.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acPU3BJ38QkS3NyfshwO5gAAApE"]
[Wed Mar 25 20:44:31.713962 2026] [:error] [pid 26321:tid 26341] [client 170.106.180.153:39880] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acPYr_KO65qqGZCSPZpVdAAAAgI"]
[Wed Mar 25 22:28:24.269798 2026] [:error] [pid 25967:tid 25984] [client 144.225.147.5:41170] [client 144.225.147.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contact/"] [unique_id "acPxCPg8Qtq7ZM4mSFmEnAAAA0w"]
[Wed Mar 25 22:28:25.361092 2026] [:error] [pid 25875:tid 25881] [client 144.225.147.5:41660] [client 144.225.147.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contact-us/"] [unique_id "acPxCRJ38QkS3NyfshxDBQAAAoA"]
[Wed Mar 25 22:28:26.369546 2026] [:error] [pid 26321:tid 26361] [client 144.225.147.5:41682] [client 144.225.147.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/contactus/"] [unique_id "acPxCvKO65qqGZCSPZpljgAAAhQ"]
[Wed Mar 25 22:28:27.097809 2026] [:error] [pid 26321:tid 26353] [client 144.225.147.5:41690] [client 144.225.147.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/contact"] [unique_id "acPxC_KO65qqGZCSPZpljwAAAgw"]
[Wed Mar 25 22:28:28.157902 2026] [:error] [pid 25875:tid 25883] [client 144.225.147.5:41714] [client 144.225.147.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/support"] [unique_id "acPxDBJ38QkS3NyfshxDEQAAAoI"]
[Wed Mar 25 22:58:48.884524 2026] [:error] [pid 25967:tid 25988] [client 182.42.105.85:59527] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acP4KPg8Qtq7ZM4mSFmPIQAAA1A"]
[Thu Mar 26 00:15:40.543806 2026] [autoindex:error] [pid 47989:tid 47997] [client 173.249.30.252:56136] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Mar 26 00:42:52.466433 2026] [:error] [pid 56131:tid 56143] [client 49.51.166.228:45764] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acQQjEg5t1V4ZYPCUhwWkAAAAAQ"]
[Thu Mar 26 03:21:41.237587 2026] [:error] [pid 32829:tid 32855] [client 170.106.65.93:41848] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acQ1xXFEeazI9mYaKswXTQAAAFg"]
[Thu Mar 26 04:31:12.719763 2026] [:error] [pid 19711:tid 19751] [client 79.122.30.166:51069] [client 79.122.30.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.122.30.166, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acRGEGj3l1y81GYfluQEHgAAAEI"]
[Thu Mar 26 04:51:16.317253 2026] [:error] [pid 19712:tid 19798] [client 173.239.240.7:50881] [client 173.239.240.7] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.7, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "acRKxNWhKhRNqm23vFOZhQAAAJY"]
[Thu Mar 26 06:00:32.901862 2026] [:error] [pid 19710:tid 19743] [client 182.42.105.85:57474] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acRbAAVEWP8Ar68Njk6OugAAABU"]
[Thu Mar 26 07:12:51.781971 2026] [:error] [pid 19818:tid 19830] [client 192.3.207.218:56705] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/artisan"] [unique_id "acRr88zaSnm3d1BeM5WNSAAAAMo"]
[Thu Mar 26 07:12:52.860774 2026] [:error] [pid 19818:tid 19841] [client 192.3.207.218:57125] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/artisan"] [unique_id "acRr9MzaSnm3d1BeM5WNhwAAANU"]
[Thu Mar 26 07:12:53.297075 2026] [:error] [pid 19710:tid 19738] [client 192.3.207.218:57616] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/artisan"] [unique_id "acRr9QVEWP8Ar68Njk6oxQAAABA"]
[Thu Mar 26 07:12:53.512755 2026] [:error] [pid 60829:tid 60837] [client 192.3.207.218:56288] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "acRr9fTdjHKeZokybaQplQAAAQY"]
[Thu Mar 26 07:12:53.936380 2026] [:error] [pid 19710:tid 19724] [client 192.3.207.218:58096] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "acRr9QVEWP8Ar68Njk6o9gAAAAI"]
[Thu Mar 26 07:12:54.788214 2026] [:error] [pid 19710:tid 19729] [client 192.3.207.218:58445] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "acRr9gVEWP8Ar68Njk6pKAAAAAc"]
[Thu Mar 26 07:12:55.221946 2026] [:error] [pid 19712:tid 19797] [client 192.3.207.218:59127] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "acRr99WhKhRNqm23vFPeWgAAAJU"]
[Thu Mar 26 07:24:22.767502 2026] [:error] [pid 31670:tid 31688] [client 185.223.152.204:63079] [client 185.223.152.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "acRupjXVthXxCnWjOTQ6IAAAAVA"]
[Thu Mar 26 07:40:18.893354 2026] [:error] [pid 31670:tid 31672] [client 43.153.73.200:37030] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acRyYjXVthXxCnWjOTRBPQAAAUA"]
[Thu Mar 26 10:09:19.840723 2026] [:error] [pid 60829:tid 60841] [client 43.173.1.69:50970] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acSVT_TdjHKeZokybaRVZwAAAQo"]
[Thu Mar 26 12:49:29.663359 2026] [:error] [pid 31670:tid 31687] [client 49.234.192.248:55472] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acS62TXVthXxCnWjOTTaAAAAAU8"]
[Thu Mar 26 13:48:27.650804 2026] [:error] [pid 31670:tid 31674] [client 193.165.236.138:51674] [client 193.165.236.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.165.236.138, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acTIqzXVthXxCnWjOTT04wAAAUI"]
[Thu Mar 26 16:13:06.859286 2026] [:error] [pid 19818:tid 19841] [client 43.166.244.192:44370] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acTqkszaSnm3d1BeM5W0sAAAANU"]
[Thu Mar 26 19:53:13.862930 2026] [:error] [pid 19818:tid 19832] [client 43.173.1.69:47426] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acUeKczaSnm3d1BeM5UWBwAAAMw"]
[Thu Mar 26 20:24:39.604825 2026] [:error] [pid 19818:tid 19836] [client 111.172.249.49:34566] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acUlh8zaSnm3d1BeM5UhawAAANA"]
[Fri Mar 27 01:37:36.903760 2026] [:error] [pid 62149:tid 62530] [client 185.169.4.152:53564] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "acVu4GHvvta9MPqU8PVlUQAAAQY"]
[Fri Mar 27 01:42:04.097456 2026] [:error] [pid 62148:tid 62517] [client 43.156.202.34:37386] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acVv7Iduik-mTruBKFVwTgAAAFQ"]
[Fri Mar 27 03:34:49.297840 2026] [:error] [pid 62551:tid 62572] [client 223.15.245.170:53442] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acWKWYQvFHgfE1g4p7C7NQAAAdI"]
[Fri Mar 27 04:24:53.450716 2026] [:error] [pid 27750:tid 27819] [client 43.156.232.190:38598] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acWWFYaSil5rd17ieLwdhQAAAIE"]
[Fri Mar 27 08:35:24.891167 2026] [:error] [pid 63897:tid 63899] [client 43.135.142.7:42238] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acXQzGVSkmYmLu7ycYhBdwAAAQA"]
[Fri Mar 27 10:16:37.730052 2026] [:error] [pid 63897:tid 63906] [client 67.174.211.123:50614] [client 67.174.211.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 67.174.211.123, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acXohWVSkmYmLu7ycYiFPQAAAQc"]
[Fri Mar 27 10:24:48.911251 2026] [:error] [pid 4341:tid 4363] [client 36.41.75.167:59525] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acXqcOKJWrNB5dMlERF4-gAAAZQ"]
[Fri Mar 27 11:04:37.501518 2026] [:error] [pid 63897:tid 63920] [client 43.157.191.20:56748] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acXzxWVSkmYmLu7ycYiZvwAAARU"]
[Fri Mar 27 11:43:39.468094 2026] [:error] [pid 4341:tid 4361] [client 103.36.11.25:58437] [client 103.36.11.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.36.11.25, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acX86-KJWrNB5dMlERGi9wAAAZI"]
[Fri Mar 27 15:45:48.702136 2026] [:error] [pid 4293:tid 4305] [client 43.130.154.56:41476] [client 43.130.154.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acY1rJLjeJUC3OKtEx_TYAAAAUo"]
[Fri Mar 27 16:16:38.036187 2026] [:error] [pid 4341:tid 4352] [client 114.10.42.30:11223] [client 114.10.42.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.42.30, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acY85uKJWrNB5dMlERFItgAAAYk"]
[Fri Mar 27 17:27:42.342912 2026] [:error] [pid 4341:tid 4357] [client 43.138.68.113:42882] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acZNjuKJWrNB5dMlERFkWgAAAY4"]
[Fri Mar 27 18:03:34.859212 2026] [:error] [pid 63897:tid 63903] [client 158.158.32.90:42686] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acZV9mVSkmYmLu7ycYgq9AAAAQQ"]
[Fri Mar 27 18:03:35.447300 2026] [:error] [pid 4293:tid 4306] [client 158.158.32.90:61334] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acZV95LjeJUC3OKtEx8r-AAAAUs"]
[Fri Mar 27 18:03:35.991276 2026] [:error] [pid 4293:tid 4309] [client 158.158.32.90:18958] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acZV95LjeJUC3OKtEx8r_AAAAU4"]
[Fri Mar 27 18:03:36.520048 2026] [:error] [pid 4293:tid 4304] [client 158.158.32.90:18264] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acZV-JLjeJUC3OKtEx8r_wAAAUk"]
[Fri Mar 27 18:03:37.017726 2026] [:error] [pid 4341:tid 4348] [client 158.158.32.90:45425] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxs.php"] [unique_id "acZV-eKJWrNB5dMlERFzWAAAAYU"]
[Fri Mar 27 18:03:37.560655 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:31588] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxs.php"] [unique_id "acZV-ZLjeJUC3OKtEx8sBwAAAUI"]
[Fri Mar 27 18:03:38.078785 2026] [:error] [pid 4293:tid 4304] [client 158.158.32.90:63071] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxs.php"] [unique_id "acZV-pLjeJUC3OKtEx8sCgAAAUk"]
[Fri Mar 27 18:03:38.661273 2026] [:error] [pid 4293:tid 4307] [client 158.158.32.90:17131] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxs.php"] [unique_id "acZV-pLjeJUC3OKtEx8sDQAAAUw"]
[Fri Mar 27 18:03:39.179026 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:31560] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acZV-5LjeJUC3OKtEx8sDwAAAVU"]
[Fri Mar 27 18:03:39.751072 2026] [:error] [pid 4293:tid 4295] [client 158.158.32.90:18287] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acZV-5LjeJUC3OKtEx8sFAAAAUA"]
[Fri Mar 27 18:03:40.375867 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:39546] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acZV_JLjeJUC3OKtEx8sGQAAAVY"]
[Fri Mar 27 18:03:40.972467 2026] [:error] [pid 4293:tid 4318] [client 158.158.32.90:61330] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acZV_JLjeJUC3OKtEx8sHwAAAVc"]
[Fri Mar 27 18:03:41.487738 2026] [:error] [pid 27851:tid 27871] [client 158.158.32.90:60039] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acZV_XR2ccxe3RMCLbrSZgAAAM0"]
[Fri Mar 27 18:03:42.072332 2026] [:error] [pid 4293:tid 4313] [client 158.158.32.90:17142] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acZV_pLjeJUC3OKtEx8sJwAAAVI"]
[Fri Mar 27 18:03:42.654314 2026] [:error] [pid 63897:tid 63919] [client 158.158.32.90:64329] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acZV_mVSkmYmLu7ycYgrBQAAARQ"]
[Fri Mar 27 18:03:43.141716 2026] [:error] [pid 4293:tid 4319] [client 158.158.32.90:17098] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acZV_5LjeJUC3OKtEx8sLQAAAVg"]
[Fri Mar 27 18:03:43.663811 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:17102] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "acZV_5LjeJUC3OKtEx8sMAAAAVU"]
[Fri Mar 27 18:03:44.166164 2026] [:error] [pid 4293:tid 4318] [client 158.158.32.90:10757] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "acZWAJLjeJUC3OKtEx8sNgAAAVc"]
[Fri Mar 27 18:03:44.716187 2026] [:error] [pid 4341:tid 4351] [client 158.158.32.90:60066] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "acZWAOKJWrNB5dMlERFzWgAAAYg"]
[Fri Mar 27 18:03:45.201507 2026] [:error] [pid 27851:tid 27865] [client 158.158.32.90:21355] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "acZWAXR2ccxe3RMCLbrSagAAAMc"]
[Fri Mar 27 18:03:45.741904 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:5245] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz8.php"] [unique_id "acZWASA46UYYLqzw99ClWwAAAAU"]
[Fri Mar 27 18:03:46.317192 2026] [:error] [pid 27851:tid 27878] [client 158.158.32.90:61343] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz8.php"] [unique_id "acZWAnR2ccxe3RMCLbrSbAAAANQ"]
[Fri Mar 27 18:03:46.827144 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:18977] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz8.php"] [unique_id "acZWApLjeJUC3OKtEx8sOAAAAUI"]
[Fri Mar 27 18:03:47.334444 2026] [:error] [pid 4293:tid 4315] [client 158.158.32.90:58828] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz8.php"] [unique_id "acZWA5LjeJUC3OKtEx8sPAAAAVQ"]
[Fri Mar 27 18:03:47.831854 2026] [:error] [pid 4293:tid 4303] [client 158.158.32.90:24495] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feokc.php"] [unique_id "acZWA5LjeJUC3OKtEx8sQAAAAUg"]
[Fri Mar 27 18:03:48.351153 2026] [:error] [pid 4341:tid 4351] [client 158.158.32.90:5242] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feokc.php"] [unique_id "acZWBOKJWrNB5dMlERFzZgAAAYg"]
[Fri Mar 27 18:03:48.844868 2026] [:error] [pid 27743:tid 27765] [client 158.158.32.90:26712] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feokc.php"] [unique_id "acZWBCA46UYYLqzw99ClYQAAAAE"]
[Fri Mar 27 18:03:49.363151 2026] [:error] [pid 27743:tid 27781] [client 158.158.32.90:60140] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feokc.php"] [unique_id "acZWBSA46UYYLqzw99ClYwAAABE"]
[Fri Mar 27 18:03:49.961063 2026] [:error] [pid 27851:tid 27861] [client 158.158.32.90:58872] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "acZWBXR2ccxe3RMCLbrSbwAAAMM"]
[Fri Mar 27 18:03:50.462652 2026] [:error] [pid 4293:tid 4303] [client 158.158.32.90:60126] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "acZWBpLjeJUC3OKtEx8sSQAAAUg"]
[Fri Mar 27 18:03:51.047981 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:21325] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "acZWB5LjeJUC3OKtEx8sSwAAAUI"]
[Fri Mar 27 18:03:51.551595 2026] [:error] [pid 4293:tid 4299] [client 158.158.32.90:8451] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "acZWB5LjeJUC3OKtEx8sTQAAAUQ"]
[Fri Mar 27 18:03:52.146601 2026] [:error] [pid 4293:tid 4309] [client 158.158.32.90:8496] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpmini.php"] [unique_id "acZWCJLjeJUC3OKtEx8sTwAAAU4"]
[Fri Mar 27 18:03:52.645325 2026] [:error] [pid 4293:tid 4295] [client 158.158.32.90:5201] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpmini.php"] [unique_id "acZWCJLjeJUC3OKtEx8sUwAAAUA"]
[Fri Mar 27 18:03:53.145981 2026] [:error] [pid 4293:tid 4314] [client 158.158.32.90:60131] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpmini.php"] [unique_id "acZWCZLjeJUC3OKtEx8sWgAAAVM"]
[Fri Mar 27 18:03:53.647173 2026] [:error] [pid 4293:tid 4300] [client 158.158.32.90:58851] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpmini.php"] [unique_id "acZWCZLjeJUC3OKtEx8sXAAAAUU"]
[Fri Mar 27 18:03:54.149234 2026] [:error] [pid 4293:tid 4307] [client 158.158.32.90:22663] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "acZWCpLjeJUC3OKtEx8sYgAAAUw"]
[Fri Mar 27 18:03:54.695743 2026] [:error] [pid 27851:tid 27863] [client 158.158.32.90:58847] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "acZWCnR2ccxe3RMCLbrSdgAAAMU"]
[Fri Mar 27 18:03:55.229810 2026] [:error] [pid 27743:tid 27770] [client 158.158.32.90:26745] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "acZWCyA46UYYLqzw99ClZAAAAAY"]
[Fri Mar 27 18:03:55.830592 2026] [:error] [pid 4341:tid 4354] [client 158.158.32.90:24449] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "acZWC-KJWrNB5dMlERFzbgAAAYs"]
[Fri Mar 27 18:03:56.334014 2026] [:error] [pid 27750:tid 27839] [client 158.158.32.90:24492] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tbute.php"] [unique_id "acZWDIaSil5rd17ieLzYZAAAAJU"]
[Fri Mar 27 18:03:56.867421 2026] [:error] [pid 63897:tid 63918] [client 158.158.32.90:38269] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tbute.php"] [unique_id "acZWDGVSkmYmLu7ycYgrFAAAARM"]
[Fri Mar 27 18:03:57.468878 2026] [:error] [pid 27743:tid 27772] [client 158.158.32.90:8490] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tbute.php"] [unique_id "acZWDSA46UYYLqzw99ClZQAAAAg"]
[Fri Mar 27 18:03:58.043499 2026] [:error] [pid 27750:tid 27838] [client 158.158.32.90:45383] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tbute.php"] [unique_id "acZWDoaSil5rd17ieLzYZQAAAJQ"]
[Fri Mar 27 18:03:58.585041 2026] [:error] [pid 27750:tid 27824] [client 158.158.32.90:61369] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rovoj.php"] [unique_id "acZWDoaSil5rd17ieLzYZwAAAIY"]
[Fri Mar 27 18:03:59.151898 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:15249] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rovoj.php"] [unique_id "acZWDyA46UYYLqzw99ClaAAAAAU"]
[Fri Mar 27 18:03:59.754066 2026] [:error] [pid 27743:tid 27778] [client 158.158.32.90:39526] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rovoj.php"] [unique_id "acZWDyA46UYYLqzw99ClagAAAA4"]
[Fri Mar 27 18:04:00.337736 2026] [:error] [pid 27743:tid 27788] [client 158.158.32.90:41452] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rovoj.php"] [unique_id "acZWECA46UYYLqzw99ClbgAAABg"]
[Fri Mar 27 18:04:00.907335 2026] [:error] [pid 63897:tid 63912] [client 158.158.32.90:10754] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r3grt7.php"] [unique_id "acZWEGVSkmYmLu7ycYgrFwAAAQ0"]
[Fri Mar 27 18:04:01.432127 2026] [:error] [pid 63897:tid 63904] [client 158.158.32.90:39550] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r3grt7.php"] [unique_id "acZWEWVSkmYmLu7ycYgrGQAAAQU"]
[Fri Mar 27 18:04:01.968292 2026] [:error] [pid 4293:tid 4313] [client 158.158.32.90:25422] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r3grt7.php"] [unique_id "acZWEZLjeJUC3OKtEx8saQAAAVI"]
[Fri Mar 27 18:04:02.531986 2026] [:error] [pid 4293:tid 4303] [client 158.158.32.90:8468] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r3grt7.php"] [unique_id "acZWEpLjeJUC3OKtEx8sbQAAAUg"]
[Fri Mar 27 18:04:03.019669 2026] [:error] [pid 27851:tid 27882] [client 158.158.32.90:24491] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phina.php"] [unique_id "acZWE3R2ccxe3RMCLbrSgAAAANg"]
[Fri Mar 27 18:04:03.512422 2026] [:error] [pid 27743:tid 27780] [client 158.158.32.90:63085] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phina.php"] [unique_id "acZWEyA46UYYLqzw99CldgAAABA"]
[Fri Mar 27 18:04:04.021762 2026] [:error] [pid 4341:tid 4362] [client 158.158.32.90:26711] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phina.php"] [unique_id "acZWFOKJWrNB5dMlERFzeQAAAZM"]
[Fri Mar 27 18:04:04.536096 2026] [:error] [pid 63897:tid 63899] [client 158.158.32.90:18960] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phina.php"] [unique_id "acZWFGVSkmYmLu7ycYgrHQAAAQA"]
[Fri Mar 27 18:04:05.045886 2026] [:error] [pid 27743:tid 27781] [client 158.158.32.90:64304] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acZWFSA46UYYLqzw99ClewAAABE"]
[Fri Mar 27 18:04:05.543772 2026] [:error] [pid 63897:tid 63918] [client 158.158.32.90:15277] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acZWFWVSkmYmLu7ycYgrIQAAARM"]
[Fri Mar 27 18:04:06.025743 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:17147] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acZWFpLjeJUC3OKtEx8scwAAAUY"]
[Fri Mar 27 18:04:06.548322 2026] [:error] [pid 27743:tid 27770] [client 158.158.32.90:41434] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acZWFiA46UYYLqzw99ClgAAAAAY"]
[Fri Mar 27 18:04:07.048185 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:5345] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "acZWF5LjeJUC3OKtEx8sdQAAAVE"]
[Fri Mar 27 18:04:07.534414 2026] [:error] [pid 27743:tid 27783] [client 158.158.32.90:5375] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "acZWFyA46UYYLqzw99CliQAAABM"]
[Fri Mar 27 18:04:08.061918 2026] [:error] [pid 63897:tid 63909] [client 158.158.32.90:39514] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "acZWGGVSkmYmLu7ycYgrJQAAAQo"]
[Fri Mar 27 18:04:08.564998 2026] [:error] [pid 27750:tid 27836] [client 158.158.32.90:41411] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "acZWGIaSil5rd17ieLzYbAAAAJI"]
[Fri Mar 27 18:04:09.087005 2026] [:error] [pid 27750:tid 27818] [client 158.158.32.90:64317] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "acZWGYaSil5rd17ieLzYbgAAAIA"]
[Fri Mar 27 18:04:09.631540 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:10761] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "acZWGZLjeJUC3OKtEx8seAAAAVU"]
[Fri Mar 27 18:04:10.139116 2026] [:error] [pid 4293:tid 4300] [client 158.158.32.90:17114] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "acZWGpLjeJUC3OKtEx8sewAAAUU"]
[Fri Mar 27 18:04:10.635388 2026] [:error] [pid 4341:tid 4353] [client 158.158.32.90:58817] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "acZWGuKJWrNB5dMlERFzfwAAAYo"]
[Fri Mar 27 18:04:11.135430 2026] [:error] [pid 4341:tid 4361] [client 158.158.32.90:25462] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kbfr.php"] [unique_id "acZWG-KJWrNB5dMlERFzgwAAAZI"]
[Fri Mar 27 18:04:11.623800 2026] [:error] [pid 27750:tid 27827] [client 158.158.32.90:8482] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kbfr.php"] [unique_id "acZWG4aSil5rd17ieLzYcAAAAIk"]
[Fri Mar 27 18:04:12.134594 2026] [:error] [pid 27749:tid 27803] [client 158.158.32.90:22676] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kbfr.php"] [unique_id "acZWHMEqyoMni2Q6_X7d3wAAAEw"]
[Fri Mar 27 18:04:12.678836 2026] [:error] [pid 27851:tid 27864] [client 158.158.32.90:36644] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kbfr.php"] [unique_id "acZWHHR2ccxe3RMCLbrSlQAAAMY"]
[Fri Mar 27 18:04:13.159822 2026] [:error] [pid 4293:tid 4300] [client 158.158.32.90:22711] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/595.php"] [unique_id "acZWHZLjeJUC3OKtEx8shgAAAUU"]
[Fri Mar 27 18:04:13.732243 2026] [:error] [pid 4293:tid 4305] [client 158.158.32.90:22690] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/595.php"] [unique_id "acZWHZLjeJUC3OKtEx8siAAAAUo"]
[Fri Mar 27 18:04:14.268459 2026] [:error] [pid 4341:tid 4357] [client 158.158.32.90:8454] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/595.php"] [unique_id "acZWHuKJWrNB5dMlERFziwAAAY4"]
[Fri Mar 27 18:04:14.830804 2026] [:error] [pid 4293:tid 4315] [client 158.158.32.90:61320] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/595.php"] [unique_id "acZWHpLjeJUC3OKtEx8skQAAAVQ"]
[Fri Mar 27 18:04:15.352936 2026] [:error] [pid 63897:tid 63914] [client 158.158.32.90:18289] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "acZWH2VSkmYmLu7ycYgrLgAAAQ8"]
[Fri Mar 27 18:04:15.889602 2026] [:error] [pid 4293:tid 4303] [client 158.158.32.90:5336] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "acZWH5LjeJUC3OKtEx8slAAAAUg"]
[Fri Mar 27 18:04:16.438278 2026] [:error] [pid 27743:tid 27770] [client 158.158.32.90:8470] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "acZWICA46UYYLqzw99ClogAAAAY"]
[Fri Mar 27 18:04:16.997427 2026] [:error] [pid 4341:tid 4351] [client 158.158.32.90:25441] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "acZWIOKJWrNB5dMlERFzngAAAYg"]
[Fri Mar 27 18:04:17.585871 2026] [:error] [pid 4341:tid 4366] [client 158.158.32.90:25457] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "acZWIeKJWrNB5dMlERFzpQAAAZc"]
[Fri Mar 27 18:04:18.149737 2026] [:error] [pid 63897:tid 63920] [client 158.158.32.90:5342] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "acZWImVSkmYmLu7ycYgrMQAAARU"]
[Fri Mar 27 18:04:18.818100 2026] [:error] [pid 4341:tid 4348] [client 158.158.32.90:22764] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "acZWIuKJWrNB5dMlERFzpwAAAYU"]
[Fri Mar 27 18:04:19.316812 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:58842] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "acZWI5LjeJUC3OKtEx8sngAAAUY"]
[Fri Mar 27 18:04:19.813669 2026] [:error] [pid 4341:tid 4363] [client 158.158.32.90:58830] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acZWI-KJWrNB5dMlERFzqgAAAZQ"]
[Fri Mar 27 18:04:20.413444 2026] [:error] [pid 4293:tid 4319] [client 158.158.32.90:58853] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acZWJJLjeJUC3OKtEx8soAAAAVg"]
[Fri Mar 27 18:04:20.950475 2026] [:error] [pid 4293:tid 4302] [client 158.158.32.90:40813] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acZWJJLjeJUC3OKtEx8soQAAAUc"]
[Fri Mar 27 18:04:21.535728 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:61830] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acZWJZLjeJUC3OKtEx8sowAAAUI"]
[Fri Mar 27 18:04:22.275539 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:16296] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "acZWJiA46UYYLqzw99ClqAAAAAU"]
[Fri Mar 27 18:04:22.873247 2026] [:error] [pid 4293:tid 4300] [client 158.158.32.90:14506] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "acZWJpLjeJUC3OKtEx8spwAAAUU"]
[Fri Mar 27 18:04:23.417564 2026] [:error] [pid 27743:tid 27766] [client 158.158.32.90:58829] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "acZWJyA46UYYLqzw99ClqwAAAAI"]
[Fri Mar 27 18:04:24.002386 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:36641] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "acZWKJLjeJUC3OKtEx8sqgAAAUI"]
[Fri Mar 27 18:04:24.606182 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:40776] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "acZWKJLjeJUC3OKtEx8srgAAAVY"]
[Fri Mar 27 18:04:25.157482 2026] [:error] [pid 63897:tid 63904] [client 158.158.32.90:61825] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "acZWKWVSkmYmLu7ycYgrPQAAAQU"]
[Fri Mar 27 18:04:25.671843 2026] [:error] [pid 63897:tid 63908] [client 158.158.32.90:62540] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "acZWKWVSkmYmLu7ycYgrQAAAAQk"]
[Fri Mar 27 18:04:26.211322 2026] [:error] [pid 4341:tid 4353] [client 158.158.32.90:5341] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "acZWKuKJWrNB5dMlERFzuAAAAYo"]
[Fri Mar 27 18:04:26.785799 2026] [:error] [pid 4293:tid 4299] [client 158.158.32.90:13498] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws79.php"] [unique_id "acZWKpLjeJUC3OKtEx8stQAAAUQ"]
[Fri Mar 27 18:04:27.293678 2026] [:error] [pid 4293:tid 4300] [client 158.158.32.90:19320] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws79.php"] [unique_id "acZWK5LjeJUC3OKtEx8suAAAAUU"]
[Fri Mar 27 18:04:27.864657 2026] [:error] [pid 4341:tid 4362] [client 158.158.32.90:40820] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws79.php"] [unique_id "acZWK-KJWrNB5dMlERFzvAAAAZM"]
[Fri Mar 27 18:04:28.381121 2026] [:error] [pid 4293:tid 4310] [client 158.158.32.90:42716] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws79.php"] [unique_id "acZWLJLjeJUC3OKtEx8svwAAAU8"]
[Fri Mar 27 18:04:28.965298 2026] [:error] [pid 27851:tid 27865] [client 158.158.32.90:19305] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "acZWLHR2ccxe3RMCLbrSoQAAAMc"]
[Fri Mar 27 18:04:29.496253 2026] [:error] [pid 27749:tid 27804] [client 158.158.32.90:16257] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "acZWLcEqyoMni2Q6_X7d9AAAAE0"]
[Fri Mar 27 18:04:30.036894 2026] [:error] [pid 27749:tid 27809] [client 158.158.32.90:19275] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "acZWLsEqyoMni2Q6_X7d9QAAAFI"]
[Fri Mar 27 18:04:30.575318 2026] [:error] [pid 27750:tid 27825] [client 158.158.32.90:42694] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "acZWLoaSil5rd17ieLzYegAAAIc"]
[Fri Mar 27 18:04:31.102314 2026] [:error] [pid 27851:tid 27879] [client 158.158.32.90:24010] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws50.php"] [unique_id "acZWL3R2ccxe3RMCLbrSpQAAANU"]
[Fri Mar 27 18:04:31.733767 2026] [:error] [pid 63897:tid 63900] [client 158.158.32.90:37237] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws50.php"] [unique_id "acZWL2VSkmYmLu7ycYgrRwAAAQE"]
[Fri Mar 27 18:04:32.260798 2026] [:error] [pid 27750:tid 27837] [client 158.158.32.90:18093] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws50.php"] [unique_id "acZWMIaSil5rd17ieLzYfAAAAJM"]
[Fri Mar 27 18:04:32.806081 2026] [:error] [pid 4293:tid 4313] [client 158.158.32.90:37207] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws50.php"] [unique_id "acZWMJLjeJUC3OKtEx8syQAAAVI"]
[Fri Mar 27 18:04:33.320777 2026] [:error] [pid 27743:tid 27783] [client 158.158.32.90:63651] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws44.php"] [unique_id "acZWMSA46UYYLqzw99CltgAAABM"]
[Fri Mar 27 18:04:33.973529 2026] [:error] [pid 27743:tid 27784] [client 158.158.32.90:54168] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws44.php"] [unique_id "acZWMSA46UYYLqzw99CluQAAABQ"]
[Fri Mar 27 18:04:40.878930 2026] [:error] [pid 4293:tid 4308] [client 158.158.32.90:18099] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sweg.php"] [unique_id "acZWOJLjeJUC3OKtEx8s8QAAAU0"]
[Fri Mar 27 18:04:41.444912 2026] [:error] [pid 4293:tid 4309] [client 158.158.32.90:24042] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sweg.php"] [unique_id "acZWOZLjeJUC3OKtEx8s8gAAAU4"]
[Fri Mar 27 18:04:42.079315 2026] [:error] [pid 4293:tid 4315] [client 158.158.32.90:52981] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sweg.php"] [unique_id "acZWOpLjeJUC3OKtEx8s9QAAAVQ"]
[Fri Mar 27 18:04:42.652482 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:24491] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sweg.php"] [unique_id "acZWOpLjeJUC3OKtEx8s-QAAAVE"]
[Fri Mar 27 18:04:43.213930 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:13967] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acZWO5LjeJUC3OKtEx8s_QAAAVY"]
[Fri Mar 27 18:04:43.868472 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:13525] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acZWO5LjeJUC3OKtEx8tBAAAAVE"]
[Fri Mar 27 18:04:44.360916 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:13992] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acZWPCA46UYYLqzw99ClzAAAAAU"]
[Fri Mar 27 18:04:44.915739 2026] [:error] [pid 27743:tid 27781] [client 158.158.32.90:13567] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acZWPCA46UYYLqzw99Cl0QAAABE"]
[Fri Mar 27 18:04:45.473403 2026] [:error] [pid 27749:tid 27806] [client 158.158.32.90:19276] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "acZWPcEqyoMni2Q6_X7d-QAAAE8"]
[Fri Mar 27 18:04:46.055995 2026] [:error] [pid 27851:tid 27867] [client 158.158.32.90:42744] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "acZWPnR2ccxe3RMCLbrSrQAAAMk"]
[Fri Mar 27 18:04:46.688507 2026] [:error] [pid 27851:tid 27877] [client 158.158.32.90:63618] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "acZWPnR2ccxe3RMCLbrSsAAAANM"]
[Fri Mar 27 18:04:47.201614 2026] [:error] [pid 63897:tid 63915] [client 158.158.32.90:13955] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "acZWP2VSkmYmLu7ycYgrWAAAARA"]
[Fri Mar 27 18:04:47.709346 2026] [:error] [pid 27749:tid 27807] [client 158.158.32.90:17591] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acZWP8EqyoMni2Q6_X7d-wAAAFA"]
[Fri Mar 27 18:04:48.265864 2026] [:error] [pid 63897:tid 63908] [client 158.158.32.90:62531] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acZWQGVSkmYmLu7ycYgrWQAAAQk"]
[Fri Mar 27 18:04:48.774856 2026] [:error] [pid 27749:tid 27811] [client 158.158.32.90:6093] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acZWQMEqyoMni2Q6_X7eAAAAAFQ"]
[Fri Mar 27 18:04:49.335705 2026] [:error] [pid 27749:tid 27792] [client 158.158.32.90:38148] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acZWQcEqyoMni2Q6_X7eAQAAAEE"]
[Fri Mar 27 18:04:49.848208 2026] [:error] [pid 27749:tid 27809] [client 158.158.32.90:30495] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acZWQcEqyoMni2Q6_X7eAgAAAFI"]
[Fri Mar 27 18:04:50.460900 2026] [:error] [pid 27743:tid 27783] [client 158.158.32.90:18056] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acZWQiA46UYYLqzw99Cl1QAAABM"]
[Fri Mar 27 18:04:51.016982 2026] [:error] [pid 4293:tid 4306] [client 158.158.32.90:17560] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acZWQ5LjeJUC3OKtEx8tCgAAAUs"]
[Fri Mar 27 18:04:51.535369 2026] [:error] [pid 4293:tid 4318] [client 158.158.32.90:14995] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acZWQ5LjeJUC3OKtEx8tDAAAAVc"]
[Fri Mar 27 18:04:52.120993 2026] [:error] [pid 4341:tid 4365] [client 158.158.32.90:12757] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acZWROKJWrNB5dMlERFz0QAAAZY"]
[Fri Mar 27 18:04:52.648979 2026] [:error] [pid 4293:tid 4309] [client 158.158.32.90:13522] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acZWRJLjeJUC3OKtEx8tDwAAAU4"]
[Fri Mar 27 18:04:53.159757 2026] [:error] [pid 63897:tid 63919] [client 158.158.32.90:18107] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acZWRWVSkmYmLu7ycYgrXgAAARQ"]
[Fri Mar 27 18:04:53.831670 2026] [:error] [pid 27743:tid 27771] [client 158.158.32.90:19201] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acZWRSA46UYYLqzw99Cl1wAAAAc"]
[Fri Mar 27 18:04:54.471269 2026] [:error] [pid 27851:tid 27875] [client 158.158.32.90:19236] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roter.php"] [unique_id "acZWRnR2ccxe3RMCLbrSsgAAANE"]
[Fri Mar 27 18:04:55.049566 2026] [:error] [pid 4341:tid 4364] [client 158.158.32.90:32882] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roter.php"] [unique_id "acZWR-KJWrNB5dMlERFz1gAAAZU"]
[Fri Mar 27 18:04:55.636521 2026] [:error] [pid 63897:tid 63923] [client 158.158.32.90:18058] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roter.php"] [unique_id "acZWR2VSkmYmLu7ycYgrXwAAARg"]
[Fri Mar 27 18:04:56.177655 2026] [:error] [pid 27749:tid 27794] [client 158.158.32.90:38177] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roter.php"] [unique_id "acZWSMEqyoMni2Q6_X7eBQAAAEM"]
[Fri Mar 27 18:04:56.847579 2026] [:error] [pid 63897:tid 63909] [client 158.158.32.90:15023] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acZWSGVSkmYmLu7ycYgrYgAAAQo"]
[Fri Mar 27 18:04:57.430912 2026] [:error] [pid 63897:tid 63920] [client 158.158.32.90:36057] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acZWSWVSkmYmLu7ycYgrZwAAARU"]
[Fri Mar 27 18:04:58.015593 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:11582] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acZWSiA46UYYLqzw99Cl2wAAAAU"]
[Fri Mar 27 18:04:58.512083 2026] [:error] [pid 27743:tid 27764] [client 158.158.32.90:15834] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acZWSiA46UYYLqzw99Cl3AAAAAA"]
[Fri Mar 27 18:04:59.051646 2026] [:error] [pid 27851:tid 27864] [client 158.158.32.90:16065] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acZWS3R2ccxe3RMCLbrStgAAAMY"]
[Fri Mar 27 18:04:59.663598 2026] [:error] [pid 4293:tid 4308] [client 158.158.32.90:18712] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acZWS5LjeJUC3OKtEx8tFQAAAU0"]
[Fri Mar 27 18:05:00.237413 2026] [:error] [pid 27851:tid 27872] [client 158.158.32.90:29923] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acZWTHR2ccxe3RMCLbrSugAAAM4"]
[Fri Mar 27 18:05:00.969311 2026] [:error] [pid 27743:tid 27767] [client 158.158.32.90:13964] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acZWTCA46UYYLqzw99Cl4QAAAAM"]
[Fri Mar 27 18:05:01.534900 2026] [:error] [pid 27743:tid 27776] [client 158.158.32.90:29902] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acZWTSA46UYYLqzw99Cl5AAAAAw"]
[Fri Mar 27 18:05:02.112702 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:59447] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acZWTiA46UYYLqzw99Cl5QAAAAU"]
[Fri Mar 27 18:05:02.802258 2026] [:error] [pid 27743:tid 27784] [client 158.158.32.90:39546] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acZWTiA46UYYLqzw99Cl6wAAABQ"]
[Fri Mar 27 18:05:03.373532 2026] [:error] [pid 27750:tid 27839] [client 158.158.32.90:30475] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acZWT4aSil5rd17ieLzY6QAAAJU"]
[Fri Mar 27 18:05:03.878161 2026] [:error] [pid 63897:tid 63915] [client 158.158.32.90:51603] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1GiO.php"] [unique_id "acZWT2VSkmYmLu7ycYgrbgAAARA"]
[Fri Mar 27 18:05:04.452787 2026] [:error] [pid 4293:tid 4304] [client 158.158.32.90:5546] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1GiO.php"] [unique_id "acZWUJLjeJUC3OKtEx8tFgAAAUk"]
[Fri Mar 27 18:05:04.988411 2026] [:error] [pid 27743:tid 27771] [client 158.158.32.90:36043] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1GiO.php"] [unique_id "acZWUCA46UYYLqzw99Cl8AAAAAc"]
[Fri Mar 27 18:05:05.690122 2026] [:error] [pid 27743:tid 27788] [client 158.158.32.90:15012] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1GiO.php"] [unique_id "acZWUSA46UYYLqzw99Cl8wAAABg"]
[Fri Mar 27 18:05:06.217284 2026] [:error] [pid 27851:tid 27865] [client 158.158.32.90:15843] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pLdK1.php"] [unique_id "acZWUnR2ccxe3RMCLbrSwAAAAMc"]
[Fri Mar 27 18:05:06.751953 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:5504] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pLdK1.php"] [unique_id "acZWUpLjeJUC3OKtEx8tHAAAAVU"]
[Fri Mar 27 18:05:07.297742 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:5558] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pLdK1.php"] [unique_id "acZWU5LjeJUC3OKtEx8tHgAAAUI"]
[Fri Mar 27 18:05:07.850931 2026] [:error] [pid 4293:tid 4310] [client 158.158.32.90:59409] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pLdK1.php"] [unique_id "acZWU5LjeJUC3OKtEx8tIwAAAU8"]
[Fri Mar 27 18:05:08.415261 2026] [:error] [pid 4293:tid 4315] [client 158.158.32.90:18696] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/llb1J.php"] [unique_id "acZWVJLjeJUC3OKtEx8tJQAAAVQ"]
[Fri Mar 27 18:05:09.021449 2026] [:error] [pid 27851:tid 27871] [client 158.158.32.90:15848] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/llb1J.php"] [unique_id "acZWVXR2ccxe3RMCLbrSzAAAAM0"]
[Fri Mar 27 18:05:09.584492 2026] [:error] [pid 27749:tid 27793] [client 158.158.32.90:38158] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/llb1J.php"] [unique_id "acZWVcEqyoMni2Q6_X7eCQAAAEI"]
[Fri Mar 27 18:05:10.141468 2026] [:error] [pid 27749:tid 27791] [client 158.158.32.90:30507] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/llb1J.php"] [unique_id "acZWVsEqyoMni2Q6_X7eCgAAAEA"]
[Fri Mar 27 18:05:10.689015 2026] [:error] [pid 27749:tid 27811] [client 158.158.32.90:18704] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jeZDu.php"] [unique_id "acZWVsEqyoMni2Q6_X7eCwAAAFQ"]
[Fri Mar 27 18:05:11.288310 2026] [:error] [pid 4341:tid 4358] [client 158.158.32.90:13967] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jeZDu.php"] [unique_id "acZWV-KJWrNB5dMlERFz5AAAAY8"]
[Fri Mar 27 18:05:11.880451 2026] [:error] [pid 27851:tid 27864] [client 158.158.32.90:51694] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jeZDu.php"] [unique_id "acZWV3R2ccxe3RMCLbrS1wAAAMY"]
[Fri Mar 27 18:05:12.487471 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:59452] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jeZDu.php"] [unique_id "acZWWJLjeJUC3OKtEx8tLQAAAUY"]
[Fri Mar 27 18:05:13.067939 2026] [:error] [pid 27851:tid 27879] [client 158.158.32.90:62487] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acZWWXR2ccxe3RMCLbrS3QAAANU"]
[Fri Mar 27 18:05:13.586364 2026] [:error] [pid 4341:tid 4346] [client 158.158.32.90:15024] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acZWWeKJWrNB5dMlERFz6AAAAYM"]
[Fri Mar 27 18:05:14.106525 2026] [:error] [pid 4341:tid 4364] [client 158.158.32.90:23978] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acZWWuKJWrNB5dMlERFz6gAAAZU"]
[Fri Mar 27 18:05:14.719138 2026] [:error] [pid 4293:tid 4305] [client 158.158.32.90:62491] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acZWWpLjeJUC3OKtEx8tNAAAAUo"]
[Fri Mar 27 18:05:15.289802 2026] [:error] [pid 4293:tid 4313] [client 158.158.32.90:17585] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfuKK.php"] [unique_id "acZWW5LjeJUC3OKtEx8tOQAAAVI"]
[Fri Mar 27 18:05:15.860838 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:36089] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfuKK.php"] [unique_id "acZWW5LjeJUC3OKtEx8tPAAAAVY"]
[Fri Mar 27 18:05:16.461711 2026] [:error] [pid 4293:tid 4295] [client 158.158.32.90:15017] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfuKK.php"] [unique_id "acZWXJLjeJUC3OKtEx8tQQAAAUA"]
[Fri Mar 27 18:05:17.127665 2026] [:error] [pid 4293:tid 4303] [client 158.158.32.90:16784] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfuKK.php"] [unique_id "acZWXZLjeJUC3OKtEx8tRAAAAUg"]
[Fri Mar 27 18:05:17.897646 2026] [:error] [pid 27851:tid 27867] [client 158.158.32.90:5544] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OpVq6.php"] [unique_id "acZWXXR2ccxe3RMCLbrS9AAAAMk"]
[Fri Mar 27 18:05:18.503300 2026] [:error] [pid 4293:tid 4298] [client 158.158.32.90:9505] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OpVq6.php"] [unique_id "acZWXpLjeJUC3OKtEx8tSwAAAUM"]
[Fri Mar 27 18:05:19.031476 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:6103] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OpVq6.php"] [unique_id "acZWX5LjeJUC3OKtEx8tTwAAAVY"]
[Fri Mar 27 18:05:19.530404 2026] [:error] [pid 4293:tid 4307] [client 158.158.32.90:6111] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OpVq6.php"] [unique_id "acZWX5LjeJUC3OKtEx8tUAAAAUw"]
[Fri Mar 27 18:05:20.117182 2026] [:error] [pid 27851:tid 27874] [client 158.158.32.90:36078] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Q73BO.php"] [unique_id "acZWYHR2ccxe3RMCLbrS-QAAANA"]
[Fri Mar 27 18:05:20.665899 2026] [:error] [pid 4341:tid 4360] [client 158.158.32.90:13542] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Q73BO.php"] [unique_id "acZWYOKJWrNB5dMlERFz7gAAAZE"]
[Fri Mar 27 18:05:21.164121 2026] [:error] [pid 4293:tid 4312] [client 158.158.32.90:17537] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Q73BO.php"] [unique_id "acZWYZLjeJUC3OKtEx8tWgAAAVE"]
[Fri Mar 27 18:05:21.701806 2026] [:error] [pid 4293:tid 4295] [client 158.158.32.90:51613] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Q73BO.php"] [unique_id "acZWYZLjeJUC3OKtEx8tXQAAAUA"]
[Fri Mar 27 18:05:22.269292 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:17594] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rmpoa.php"] [unique_id "acZWYpLjeJUC3OKtEx8tYgAAAVY"]
[Fri Mar 27 18:05:22.829621 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:6125] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rmpoa.php"] [unique_id "acZWYpLjeJUC3OKtEx8tZQAAAVU"]
[Fri Mar 27 18:05:23.579559 2026] [:error] [pid 27851:tid 27875] [client 158.158.32.90:11558] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rmpoa.php"] [unique_id "acZWY3R2ccxe3RMCLbrS-wAAANE"]
[Fri Mar 27 18:05:24.283916 2026] [:error] [pid 4293:tid 4295] [client 158.158.32.90:17538] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rmpoa.php"] [unique_id "acZWZJLjeJUC3OKtEx8tbQAAAUA"]
[Fri Mar 27 18:05:24.835573 2026] [:error] [pid 27851:tid 27864] [client 158.158.32.90:23986] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "acZWZHR2ccxe3RMCLbrS_AAAAMY"]
[Fri Mar 27 18:05:25.352569 2026] [:error] [pid 27851:tid 27867] [client 158.158.32.90:59444] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "acZWZXR2ccxe3RMCLbrTAAAAAMk"]
[Fri Mar 27 18:05:25.987393 2026] [:error] [pid 27851:tid 27880] [client 158.158.32.90:21325] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "acZWZXR2ccxe3RMCLbrTAgAAANY"]
[Fri Mar 27 18:05:26.602902 2026] [:error] [pid 4341:tid 4352] [client 158.158.32.90:16562] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "acZWZuKJWrNB5dMlERFz8gAAAYk"]
[Fri Mar 27 18:05:27.360975 2026] [:error] [pid 27750:tid 27836] [client 158.158.32.90:12933] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acZWZ4aSil5rd17ieLzY_wAAAJI"]
[Fri Mar 27 18:05:28.397634 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:62581] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acZWaJLjeJUC3OKtEx8tdQAAAVU"]
[Fri Mar 27 18:05:29.195592 2026] [:error] [pid 4293:tid 4296] [client 158.158.32.90:36073] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acZWaZLjeJUC3OKtEx8teAAAAUE"]
[Fri Mar 27 18:05:29.852333 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:13990] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acZWaZLjeJUC3OKtEx8tfgAAAVY"]
[Fri Mar 27 18:05:30.726621 2026] [:error] [pid 4293:tid 4311] [client 158.158.32.90:5505] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "acZWapLjeJUC3OKtEx8tgQAAAVA"]
[Fri Mar 27 18:05:31.277567 2026] [:error] [pid 4293:tid 4309] [client 158.158.32.90:38159] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "acZWa5LjeJUC3OKtEx8thQAAAU4"]
[Fri Mar 27 18:05:32.022368 2026] [:error] [pid 27851:tid 27862] [client 158.158.32.90:17571] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "acZWbHR2ccxe3RMCLbrTEAAAAMQ"]
[Fri Mar 27 18:05:32.670456 2026] [:error] [pid 4341:tid 4349] [client 158.158.32.90:13455] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "acZWbOKJWrNB5dMlERFz9AAAAYY"]
[Fri Mar 27 18:05:33.360388 2026] [:error] [pid 27743:tid 27784] [client 158.158.32.90:9513] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "acZWbSA46UYYLqzw99CmBwAAABQ"]
[Fri Mar 27 18:05:34.052269 2026] [:error] [pid 4341:tid 4345] [client 158.158.32.90:38194] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "acZWbuKJWrNB5dMlERFz9wAAAYI"]
[Fri Mar 27 18:05:34.610926 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:11543] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "acZWbpLjeJUC3OKtEx8tkgAAAUY"]
[Fri Mar 27 18:05:35.202434 2026] [:error] [pid 63897:tid 63910] [client 158.158.32.90:19286] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "acZWb2VSkmYmLu7ycYgregAAAQs"]
[Fri Mar 27 18:05:36.197210 2026] [:error] [pid 27743:tid 27776] [client 158.158.32.90:24039] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "acZWcCA46UYYLqzw99CmCwAAAAw"]
[Fri Mar 27 18:05:36.740210 2026] [:error] [pid 27743:tid 27768] [client 158.158.32.90:62537] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "acZWcCA46UYYLqzw99CmDgAAAAQ"]
[Fri Mar 27 18:05:37.365611 2026] [:error] [pid 27743:tid 27782] [client 158.158.32.90:63655] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "acZWcSA46UYYLqzw99CmEAAAABI"]
[Fri Mar 27 18:05:38.007142 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:52943] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v2.php"] [unique_id "acZWcpLjeJUC3OKtEx8tmAAAAVU"]
[Fri Mar 27 18:05:38.550909 2026] [:error] [pid 27750:tid 27821] [client 158.158.32.90:6087] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "acZWcoaSil5rd17ieLzZAwAAAIM"]
[Fri Mar 27 18:05:39.119942 2026] [:error] [pid 4341:tid 4364] [client 158.158.32.90:42712] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "acZWc-KJWrNB5dMlERFz_gAAAZU"]
[Fri Mar 27 18:05:39.682439 2026] [:error] [pid 27743:tid 27778] [client 158.158.32.90:13551] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "acZWcyA46UYYLqzw99CmHwAAAA4"]
[Fri Mar 27 18:05:46.742461 2026] [:error] [pid 27743:tid 27778] [client 158.158.32.90:37185] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acZWeiA46UYYLqzw99CmOgAAAA4"]
[Fri Mar 27 18:05:47.344518 2026] [:error] [pid 4293:tid 4300] [client 158.158.32.90:16284] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acZWe5LjeJUC3OKtEx8trwAAAUU"]
[Fri Mar 27 18:05:47.885033 2026] [:error] [pid 4341:tid 4351] [client 158.158.32.90:54202] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acZWe-KJWrNB5dMlERF0CAAAAYg"]
[Fri Mar 27 18:05:48.428246 2026] [:error] [pid 4293:tid 4298] [client 158.158.32.90:16319] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acZWfJLjeJUC3OKtEx8ttgAAAUM"]
[Fri Mar 27 18:05:48.944687 2026] [:error] [pid 63897:tid 63923] [client 158.158.32.90:40830] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/caiij.php"] [unique_id "acZWfGVSkmYmLu7ycYgrgAAAARg"]
[Fri Mar 27 18:05:49.503628 2026] [:error] [pid 4293:tid 4315] [client 158.158.32.90:41455] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/caiij.php"] [unique_id "acZWfZLjeJUC3OKtEx8tvAAAAVQ"]
[Fri Mar 27 18:05:50.087205 2026] [:error] [pid 4293:tid 4307] [client 158.158.32.90:18274] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/caiij.php"] [unique_id "acZWfpLjeJUC3OKtEx8twgAAAUw"]
[Fri Mar 27 18:05:50.903220 2026] [:error] [pid 4293:tid 4308] [client 158.158.32.90:24512] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/caiij.php"] [unique_id "acZWfpLjeJUC3OKtEx8tyQAAAU0"]
[Fri Mar 27 18:05:51.673374 2026] [:error] [pid 4293:tid 4307] [client 158.158.32.90:14493] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "acZWf5LjeJUC3OKtEx8t0AAAAUw"]
[Fri Mar 27 18:05:52.319484 2026] [:error] [pid 4293:tid 4305] [client 158.158.32.90:39491] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "acZWgJLjeJUC3OKtEx8t2wAAAUo"]
[Fri Mar 27 18:05:53.072882 2026] [:error] [pid 27851:tid 27880] [client 158.158.32.90:10807] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "acZWgXR2ccxe3RMCLbrTJQAAANY"]
[Fri Mar 27 18:05:53.658988 2026] [:error] [pid 4293:tid 4307] [client 158.158.32.90:10773] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "acZWgZLjeJUC3OKtEx8t7wAAAUw"]
[Fri Mar 27 18:05:54.149723 2026] [:error] [pid 63897:tid 63903] [client 158.158.32.90:39530] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "acZWgmVSkmYmLu7ycYgrgwAAAQQ"]
[Fri Mar 27 18:05:54.726911 2026] [:error] [pid 4293:tid 4313] [client 158.158.32.90:8457] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "acZWgpLjeJUC3OKtEx8t_gAAAVI"]
[Fri Mar 27 18:05:55.338868 2026] [:error] [pid 4293:tid 4303] [client 158.158.32.90:38208] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "acZWg5LjeJUC3OKtEx8uAQAAAUg"]
[Fri Mar 27 18:05:55.836328 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:15274] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "acZWg5LjeJUC3OKtEx8uBgAAAUY"]
[Fri Mar 27 18:05:56.351538 2026] [:error] [pid 4293:tid 4315] [client 158.158.32.90:26740] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rkiea.php"] [unique_id "acZWhJLjeJUC3OKtEx8uDwAAAVQ"]
[Fri Mar 27 18:05:56.871659 2026] [:error] [pid 4341:tid 4355] [client 158.158.32.90:19718] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rkiea.php"] [unique_id "acZWhOKJWrNB5dMlERF0DQAAAYw"]
[Fri Mar 27 18:05:57.563867 2026] [:error] [pid 4341:tid 4353] [client 158.158.32.90:18972] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rkiea.php"] [unique_id "acZWheKJWrNB5dMlERF0DwAAAYo"]
[Fri Mar 27 18:05:58.128274 2026] [:error] [pid 4293:tid 4305] [client 158.158.32.90:26715] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rkiea.php"] [unique_id "acZWhpLjeJUC3OKtEx8uFwAAAUo"]
[Fri Mar 27 18:05:58.661189 2026] [:error] [pid 27851:tid 27882] [client 158.158.32.90:64324] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "acZWhnR2ccxe3RMCLbrTKAAAANg"]
[Fri Mar 27 18:05:59.251486 2026] [:error] [pid 27851:tid 27871] [client 158.158.32.90:19551] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "acZWh3R2ccxe3RMCLbrTKwAAAM0"]
[Fri Mar 27 18:05:59.838210 2026] [:error] [pid 4293:tid 4296] [client 158.158.32.90:18961] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "acZWh5LjeJUC3OKtEx8uNAAAAUE"]
[Fri Mar 27 18:06:00.401384 2026] [:error] [pid 27749:tid 27814] [client 158.158.32.90:64337] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "acZWiMEqyoMni2Q6_X7eGwAAAFc"]
[Fri Mar 27 18:06:00.967008 2026] [:error] [pid 4293:tid 4304] [client 158.158.32.90:31603] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanou.php"] [unique_id "acZWiJLjeJUC3OKtEx8uPAAAAUk"]
[Fri Mar 27 18:06:01.480848 2026] [:error] [pid 4293:tid 4302] [client 158.158.32.90:38239] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanou.php"] [unique_id "acZWiZLjeJUC3OKtEx8uQQAAAUc"]
[Fri Mar 27 18:06:02.056940 2026] [:error] [pid 4293:tid 4315] [client 158.158.32.90:60737] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanou.php"] [unique_id "acZWipLjeJUC3OKtEx8uSAAAAVQ"]
[Fri Mar 27 18:06:02.825717 2026] [:error] [pid 4341:tid 4359] [client 158.158.32.90:30544] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanou.php"] [unique_id "acZWiuKJWrNB5dMlERF0FgAAAZA"]
[Fri Mar 27 18:06:03.431031 2026] [:error] [pid 4293:tid 4307] [client 158.158.32.90:5932] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eursi.php"] [unique_id "acZWi5LjeJUC3OKtEx8uUQAAAUw"]
[Fri Mar 27 18:06:03.956946 2026] [:error] [pid 4293:tid 4311] [client 158.158.32.90:19828] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eursi.php"] [unique_id "acZWi5LjeJUC3OKtEx8uVQAAAVA"]
[Fri Mar 27 18:06:04.600176 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:60745] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eursi.php"] [unique_id "acZWjJLjeJUC3OKtEx8uWgAAAUI"]
[Fri Mar 27 18:06:05.191336 2026] [:error] [pid 27750:tid 27823] [client 158.158.32.90:14326] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eursi.php"] [unique_id "acZWjYaSil5rd17ieLzZDgAAAIU"]
[Fri Mar 27 18:06:05.771352 2026] [:error] [pid 27743:tid 27770] [client 158.158.32.90:10565] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pas2.php"] [unique_id "acZWjSA46UYYLqzw99CmUQAAAAY"]
[Fri Mar 27 18:06:06.373667 2026] [:error] [pid 27750:tid 27841] [client 158.158.32.90:5905] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pas2.php"] [unique_id "acZWjoaSil5rd17ieLzZDwAAAJc"]
[Fri Mar 27 18:06:06.902742 2026] [:error] [pid 4293:tid 4298] [client 158.158.32.90:63717] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pas2.php"] [unique_id "acZWjpLjeJUC3OKtEx8uagAAAUM"]
[Fri Mar 27 18:06:07.444438 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:11852] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pas2.php"] [unique_id "acZWj5LjeJUC3OKtEx8ucQAAAVU"]
[Fri Mar 27 18:06:08.076651 2026] [:error] [pid 27851:tid 27866] [client 158.158.32.90:54213] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schal.php"] [unique_id "acZWkHR2ccxe3RMCLbrTMQAAAMg"]
[Fri Mar 27 18:06:08.609665 2026] [:error] [pid 4341:tid 4349] [client 158.158.32.90:32827] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schal.php"] [unique_id "acZWkOKJWrNB5dMlERF0IQAAAYY"]
[Fri Mar 27 18:06:09.133796 2026] [:error] [pid 27851:tid 27872] [client 158.158.32.90:31526] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schal.php"] [unique_id "acZWkXR2ccxe3RMCLbrTMwAAAM4"]
[Fri Mar 27 18:06:09.934633 2026] [:error] [pid 4293:tid 4314] [client 158.158.32.90:11863] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schal.php"] [unique_id "acZWkZLjeJUC3OKtEx8uewAAAVM"]
[Fri Mar 27 18:06:10.703307 2026] [:error] [pid 4293:tid 4301] [client 158.158.32.90:32815] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "acZWkpLjeJUC3OKtEx8ufwAAAUY"]
[Fri Mar 27 18:06:11.643783 2026] [:error] [pid 4293:tid 4309] [client 158.158.32.90:17034] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "acZWk5LjeJUC3OKtEx8ugAAAAU4"]
[Fri Mar 27 18:06:12.286898 2026] [:error] [pid 63897:tid 63916] [client 158.158.32.90:9571] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "acZWlGVSkmYmLu7ycYgrkQAAARE"]
[Fri Mar 27 18:06:13.104690 2026] [:error] [pid 4341:tid 4352] [client 158.158.32.90:11272] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "acZWleKJWrNB5dMlERF0LQAAAYk"]
[Fri Mar 27 18:06:13.712714 2026] [:error] [pid 4341:tid 4357] [client 158.158.32.90:11267] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acZWleKJWrNB5dMlERF0LwAAAY4"]
[Fri Mar 27 18:06:14.849806 2026] [:error] [pid 4293:tid 4311] [client 158.158.32.90:9561] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acZWlpLjeJUC3OKtEx8uiwAAAVA"]
[Fri Mar 27 18:06:16.084132 2026] [:error] [pid 4293:tid 4298] [client 158.158.32.90:31064] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acZWmJLjeJUC3OKtEx8ukAAAAUM"]
[Fri Mar 27 18:06:17.115378 2026] [:error] [pid 27750:tid 27818] [client 158.158.32.90:5770] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acZWmYaSil5rd17ieLzZEQAAAIA"]
[Fri Mar 27 18:06:18.104342 2026] [:error] [pid 4293:tid 4311] [client 158.158.32.90:12683] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acZWmpLjeJUC3OKtEx8uoQAAAVA"]
[Fri Mar 27 18:06:18.769949 2026] [:error] [pid 27851:tid 27878] [client 158.158.32.90:19014] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acZWmnR2ccxe3RMCLbrTOgAAANQ"]
[Fri Mar 27 18:06:19.483721 2026] [:error] [pid 27743:tid 27765] [client 158.158.32.90:41986] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acZWmyA46UYYLqzw99CmawAAAAE"]
[Fri Mar 27 18:06:20.397369 2026] [:error] [pid 63897:tid 63916] [client 158.158.32.90:11127] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acZWnGVSkmYmLu7ycYgrnQAAARE"]
[Fri Mar 27 18:06:21.048382 2026] [:error] [pid 4293:tid 4317] [client 158.158.32.90:11328] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dtyh.php"] [unique_id "acZWnZLjeJUC3OKtEx8urwAAAVY"]
[Fri Mar 27 18:06:21.623539 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:18533] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dtyh.php"] [unique_id "acZWnZLjeJUC3OKtEx8usgAAAVU"]
[Fri Mar 27 18:06:22.264188 2026] [:error] [pid 27743:tid 27788] [client 158.158.32.90:12999] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dtyh.php"] [unique_id "acZWniA46UYYLqzw99CmdQAAABg"]
[Fri Mar 27 18:06:23.010284 2026] [:error] [pid 4341:tid 4344] [client 158.158.32.90:17301] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dtyh.php"] [unique_id "acZWn-KJWrNB5dMlERF0QAAAAYE"]
[Fri Mar 27 18:06:23.889945 2026] [:error] [pid 27851:tid 27859] [client 158.158.32.90:29844] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wta.php"] [unique_id "acZWn3R2ccxe3RMCLbrTSQAAAME"]
[Fri Mar 27 18:06:24.476306 2026] [:error] [pid 4293:tid 4310] [client 158.158.32.90:10096] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wta.php"] [unique_id "acZWoJLjeJUC3OKtEx8uuQAAAU8"]
[Fri Mar 27 18:06:25.114259 2026] [:error] [pid 63897:tid 63916] [client 158.158.32.90:13046] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wta.php"] [unique_id "acZWoWVSkmYmLu7ycYgrrgAAARE"]
[Fri Mar 27 18:06:25.769927 2026] [:error] [pid 4293:tid 4305] [client 158.158.32.90:45340] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wta.php"] [unique_id "acZWoZLjeJUC3OKtEx8uuwAAAUo"]
[Fri Mar 27 18:06:26.572387 2026] [:error] [pid 63897:tid 63915] [client 158.158.32.90:9049] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acZWomVSkmYmLu7ycYgrsAAAARA"]
[Fri Mar 27 18:06:27.299315 2026] [:error] [pid 27749:tid 27810] [client 158.158.32.90:10085] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acZWo8EqyoMni2Q6_X7eIwAAAFM"]
[Fri Mar 27 18:06:28.022228 2026] [:error] [pid 27743:tid 27779] [client 158.158.32.90:21306] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acZWpCA46UYYLqzw99CmnAAAAA8"]
[Fri Mar 27 18:06:28.591165 2026] [:error] [pid 27749:tid 27796] [client 158.158.32.90:27299] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acZWpMEqyoMni2Q6_X7eJAAAAEU"]
[Fri Mar 27 18:06:29.277941 2026] [:error] [pid 27750:tid 27821] [client 158.158.32.90:17334] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acZWpYaSil5rd17ieLzZLAAAAIM"]
[Fri Mar 27 18:06:29.858625 2026] [:error] [pid 4341:tid 4363] [client 158.158.32.90:38811] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acZWpeKJWrNB5dMlERF0XQAAAZQ"]
[Fri Mar 27 18:06:30.544426 2026] [:error] [pid 27851:tid 27868] [client 158.158.32.90:27326] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acZWpnR2ccxe3RMCLbrTWgAAAMo"]
[Fri Mar 27 18:06:31.132982 2026] [:error] [pid 63897:tid 63917] [client 158.158.32.90:37706] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acZWp2VSkmYmLu7ycYgrugAAARI"]
[Fri Mar 27 18:06:31.803880 2026] [:error] [pid 63897:tid 63904] [client 158.158.32.90:52276] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acZWp2VSkmYmLu7ycYgrvQAAAQU"]
[Fri Mar 27 18:06:32.713675 2026] [:error] [pid 4341:tid 4351] [client 158.158.32.90:15359] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acZWqOKJWrNB5dMlERF0YgAAAYg"]
[Fri Mar 27 18:06:33.390310 2026] [:error] [pid 27743:tid 27777] [client 158.158.32.90:38837] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acZWqSA46UYYLqzw99CmrAAAAA0"]
[Fri Mar 27 18:06:34.112788 2026] [:error] [pid 27749:tid 27801] [client 158.158.32.90:40704] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acZWqsEqyoMni2Q6_X7eJwAAAEo"]
[Fri Mar 27 18:06:34.709574 2026] [:error] [pid 27749:tid 27813] [client 158.158.32.90:9218] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acZWqsEqyoMni2Q6_X7eKwAAAFY"]
[Fri Mar 27 18:06:35.335676 2026] [:error] [pid 27749:tid 27812] [client 158.158.32.90:18811] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acZWq8EqyoMni2Q6_X7eLgAAAFU"]
[Fri Mar 27 18:06:36.128502 2026] [:error] [pid 27851:tid 27867] [client 158.158.32.90:10826] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acZWrHR2ccxe3RMCLbrTYQAAAMk"]
[Fri Mar 27 18:06:36.722175 2026] [:error] [pid 27743:tid 27764] [client 158.158.32.90:27284] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acZWrCA46UYYLqzw99CmsgAAAAA"]
[Fri Mar 27 18:06:37.263923 2026] [:error] [pid 27743:tid 27786] [client 158.158.32.90:20567] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acZWrSA46UYYLqzw99CmtwAAABY"]
[Fri Mar 27 18:06:37.945852 2026] [:error] [pid 27743:tid 27784] [client 158.158.32.90:52248] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acZWrSA46UYYLqzw99CmuwAAABQ"]
[Fri Mar 27 18:06:38.533093 2026] [:error] [pid 27743:tid 27780] [client 158.158.32.90:37745] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acZWriA46UYYLqzw99CmvQAAABA"]
[Fri Mar 27 18:06:39.162952 2026] [:error] [pid 27743:tid 27776] [client 158.158.32.90:16326] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acZWryA46UYYLqzw99CmvwAAAAw"]
[Fri Mar 27 18:06:39.901449 2026] [:error] [pid 63897:tid 63919] [client 158.158.32.90:23388] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acZWr2VSkmYmLu7ycYgrzwAAARQ"]
[Fri Mar 27 18:06:40.465858 2026] [:error] [pid 27750:tid 27825] [client 158.158.32.90:27270] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acZWsIaSil5rd17ieLzZNQAAAIc"]
[Fri Mar 27 18:06:41.160546 2026] [:error] [pid 27749:tid 27796] [client 158.158.32.90:59503] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acZWscEqyoMni2Q6_X7eNQAAAEU"]
[Fri Mar 27 18:06:41.907965 2026] [:error] [pid 4341:tid 4356] [client 158.158.32.90:17537] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acZWseKJWrNB5dMlERF0bwAAAY0"]
[Fri Mar 27 18:06:42.506619 2026] [:error] [pid 27750:tid 27821] [client 158.158.32.90:23413] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acZWsoaSil5rd17ieLzZOgAAAIM"]
[Fri Mar 27 18:06:43.081837 2026] [:error] [pid 4341:tid 4355] [client 158.158.32.90:5682] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acZWs-KJWrNB5dMlERF0cQAAAYw"]
[Fri Mar 27 18:06:43.808674 2026] [:error] [pid 27750:tid 27841] [client 158.158.32.90:46763] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acZWs4aSil5rd17ieLzZPQAAAJc"]
[Fri Mar 27 18:06:44.520766 2026] [:error] [pid 27750:tid 27826] [client 158.158.32.90:58782] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acZWtIaSil5rd17ieLzZQgAAAIg"]
[Fri Mar 27 18:06:45.122314 2026] [:error] [pid 63897:tid 63923] [client 158.158.32.90:58780] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bywaf.php"] [unique_id "acZWtWVSkmYmLu7ycYgr4gAAARg"]
[Fri Mar 27 18:06:45.736944 2026] [:error] [pid 27750:tid 27834] [client 158.158.32.90:58808] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bywaf.php"] [unique_id "acZWtYaSil5rd17ieLzZSwAAAJA"]
[Fri Mar 27 18:06:53.352269 2026] [:error] [pid 27750:tid 27825] [client 158.158.32.90:6067] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZWvYaSil5rd17ieLzZZgAAAIc"]
[Fri Mar 27 18:06:54.347591 2026] [:error] [pid 4341:tid 4367] [client 158.158.32.90:34053] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZWvuKJWrNB5dMlERF0lAAAAZg"]
[Fri Mar 27 18:06:55.239901 2026] [:error] [pid 4293:tid 4303] [client 158.158.32.90:64869] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZWv5LjeJUC3OKtEx8u4wAAAUg"]
[Fri Mar 27 18:06:56.151090 2026] [:error] [pid 27743:tid 27764] [client 158.158.32.90:61392] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acZWwCA46UYYLqzw99CmzwAAAAA"]
[Fri Mar 27 18:06:56.882911 2026] [:error] [pid 4293:tid 4297] [client 158.158.32.90:13259] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ticket.php"] [unique_id "acZWwJLjeJUC3OKtEx8u7AAAAUI"]
[Fri Mar 27 18:06:57.895813 2026] [:error] [pid 4341:tid 4353] [client 158.158.32.90:6061] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ticket.php"] [unique_id "acZWweKJWrNB5dMlERF0owAAAYo"]
[Fri Mar 27 18:06:58.616030 2026] [:error] [pid 4293:tid 4305] [client 158.158.32.90:32156] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ticket.php"] [unique_id "acZWwpLjeJUC3OKtEx8u8gAAAUo"]
[Fri Mar 27 18:06:59.494566 2026] [:error] [pid 4293:tid 4299] [client 158.158.32.90:16063] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ticket.php"] [unique_id "acZWw5LjeJUC3OKtEx8u_gAAAUQ"]
[Fri Mar 27 18:07:01.209736 2026] [:error] [pid 4293:tid 4311] [client 158.158.32.90:32138] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "acZWxZLjeJUC3OKtEx8vCQAAAVA"]
[Fri Mar 27 18:07:01.934037 2026] [:error] [pid 27743:tid 27783] [client 158.158.32.90:29249] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "acZWxSA46UYYLqzw99Cm1AAAABM"]
[Fri Mar 27 18:07:02.525781 2026] [:error] [pid 4293:tid 4296] [client 158.158.32.90:14724] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "acZWxpLjeJUC3OKtEx8vEgAAAUE"]
[Fri Mar 27 18:07:03.441803 2026] [:error] [pid 4293:tid 4311] [client 158.158.32.90:29294] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "acZWx5LjeJUC3OKtEx8vFQAAAVA"]
[Fri Mar 27 18:07:04.372816 2026] [:error] [pid 27750:tid 27832] [client 158.158.32.90:60708] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "acZWyIaSil5rd17ieLzZdgAAAI4"]
[Fri Mar 27 18:07:05.075298 2026] [:error] [pid 27743:tid 27777] [client 158.158.32.90:13255] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "acZWySA46UYYLqzw99Cm3AAAAA0"]
[Fri Mar 27 18:07:05.891035 2026] [:error] [pid 4293:tid 4306] [client 158.158.32.90:21622] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "acZWyZLjeJUC3OKtEx8vHgAAAUs"]
[Fri Mar 27 18:07:06.557046 2026] [:error] [pid 4293:tid 4310] [client 158.158.32.90:14761] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "acZWypLjeJUC3OKtEx8vIQAAAU8"]
[Fri Mar 27 18:07:07.224024 2026] [:error] [pid 27743:tid 27764] [client 158.158.32.90:20531] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "acZWyyA46UYYLqzw99Cm3gAAAAA"]
[Fri Mar 27 18:07:07.898675 2026] [:error] [pid 27743:tid 27769] [client 158.158.32.90:23299] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "acZWyyA46UYYLqzw99Cm4gAAAAU"]
[Fri Mar 27 18:07:09.770011 2026] [:error] [pid 4293:tid 4316] [client 158.158.32.90:61378] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "acZWzZLjeJUC3OKtEx8vOAAAAVU"]
[Fri Mar 27 18:07:10.499856 2026] [:error] [pid 4293:tid 4319] [client 158.158.32.90:25377] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "acZWzpLjeJUC3OKtEx8vQAAAAVg"]
[Fri Mar 27 18:07:11.240189 2026] [:error] [pid 4293:tid 4302] [client 158.158.32.90:20497] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "acZWz5LjeJUC3OKtEx8vRQAAAUc"]
[Fri Mar 27 18:07:11.899819 2026] [:error] [pid 4293:tid 4299] [client 158.158.32.90:31001] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "acZWz5LjeJUC3OKtEx8vRwAAAUQ"]
[Fri Mar 27 18:07:12.557440 2026] [:error] [pid 4293:tid 4319] [client 158.158.32.90:22055] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "acZW0JLjeJUC3OKtEx8vTgAAAVg"]
[Fri Mar 27 18:07:13.214059 2026] [:error] [pid 63897:tid 63912] [client 158.158.32.90:20540] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "acZW0WVSkmYmLu7ycYgsCwAAAQ0"]
[Fri Mar 27 18:07:13.991872 2026] [:error] [pid 4341:tid 4348] [client 158.158.32.90:29308] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpass.php"] [unique_id "acZW0eKJWrNB5dMlERF0sAAAAYU"]
[Fri Mar 27 18:07:14.661815 2026] [:error] [pid 4293:tid 4310] [client 158.158.32.90:8552] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpass.php"] [unique_id "acZW0pLjeJUC3OKtEx8vVAAAAU8"]
[Fri Mar 27 18:07:15.376684 2026] [:error] [pid 27749:tid 27802] [client 158.158.32.90:16843] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpass.php"] [unique_id "acZW08EqyoMni2Q6_X7eUAAAAEs"]
[Fri Mar 27 18:07:16.079427 2026] [:error] [pid 4341:tid 4353] [client 158.158.32.90:61911] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpass.php"] [unique_id "acZW1OKJWrNB5dMlERF0tQAAAYo"]
[Fri Mar 27 18:07:16.861599 2026] [:error] [pid 63897:tid 63901] [client 158.158.32.90:42053] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acZW1GVSkmYmLu7ycYgsEgAAAQI"]
[Fri Mar 27 18:07:17.662177 2026] [:error] [pid 27743:tid 27783] [client 158.158.32.90:58785] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acZW1SA46UYYLqzw99Cm_wAAABM"]
[Fri Mar 27 18:07:18.645179 2026] [:error] [pid 27743:tid 27787] [client 158.158.32.90:58753] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acZW1iA46UYYLqzw99CnAAAAABc"]
[Fri Mar 27 18:07:19.196143 2026] [:error] [pid 4293:tid 4314] [client 158.158.32.90:60717] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acZW15LjeJUC3OKtEx8vXgAAAVM"]
[Fri Mar 27 18:07:20.089323 2026] [:error] [pid 27743:tid 27784] [client 158.158.32.90:40069] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acZW2CA46UYYLqzw99CnAQAAABQ"]
[Fri Mar 27 18:07:20.703855 2026] [:error] [pid 27750:tid 27839] [client 158.158.32.90:40118] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acZW2IaSil5rd17ieLzZgwAAAJU"]
[Fri Mar 27 18:07:21.495628 2026] [:error] [pid 4341:tid 4363] [client 158.158.32.90:19511] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acZW2eKJWrNB5dMlERF0vQAAAZQ"]
[Fri Mar 27 18:07:22.237540 2026] [:error] [pid 4293:tid 4314] [client 158.158.32.90:61921] [client 158.158.32.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acZW2pLjeJUC3OKtEx8vaAAAAVM"]
[Fri Mar 27 18:23:44.651651 2026] [:error] [pid 63897:tid 63901] [client 162.62.213.165:33478] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acZasGVSkmYmLu7ycYgyaAAAAQI"]
[Fri Mar 27 20:52:09.246574 2026] [:error] [pid 4293:tid 4303] [client 138.97.135.20:16501] [client 138.97.135.20] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.97.135.20, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acZ9eZLjeJUC3OKtEx-fjwAAAUg"]
[Fri Mar 27 22:09:35.058830 2026] [:error] [pid 63897:tid 63904] [client 162.62.213.165:59660] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acaPn2VSkmYmLu7ycYho9wAAAQU"]
[Sat Mar 28 00:25:46.357779 2026] [:error] [pid 4341:tid 4362] [client 129.226.174.80:46816] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acaviuKJWrNB5dMlERHieQAAAZM"]
[Sat Mar 28 01:05:32.017285 2026] [:error] [pid 11323:tid 11692] [client 49.233.45.47:52116] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aca43BruG7-TT-rIgF_fkwAAAAw"]
[Sat Mar 28 01:38:05.926311 2026] [:error] [pid 11768:tid 11795] [client 103.178.208.43:56430] [client 103.178.208.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.208.43, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acbAfcLK0swIwlw7rFa8_gAAARc"]
[Sat Mar 28 05:05:06.921471 2026] [:error] [pid 34630:tid 34655] [client 173.239.214.114:48641] [client 173.239.214.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.114, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "acbxAiB2k6HS6io_ec2G9AAAAZY"]
[Sat Mar 28 07:37:45.590306 2026] [:error] [pid 43547:tid 43561] [client 188.165.34.12:35448] [client 188.165.34.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "accUyT4ZEfdetXP-9aCzwQAAAgw"]
[Sat Mar 28 07:37:46.911346 2026] [:error] [pid 64861:tid 64953] [client 188.165.34.12:39836] [client 188.165.34.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "accUyuxK22_lUN2kvnVn-QAAAJI"]
[Sat Mar 28 07:47:50.179787 2026] [:error] [pid 34597:tid 34613] [client 122.51.236.174:58776] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "accXJoluI7-e5s1cafcj9AAAAUw"]
[Sat Mar 28 09:25:45.943256 2026] [:error] [pid 64860:tid 64912] [client 2.58.56.116:52777] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "accuGRkU3N0pg_4aEL8UOwAAAEQ"]
[Sat Mar 28 09:25:46.938402 2026] [:error] [pid 64860:tid 64919] [client 2.58.56.116:53188] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "accuGhkU3N0pg_4aEL8UbwAAAEs"]
[Sat Mar 28 09:25:47.987099 2026] [:error] [pid 43578:tid 43598] [client 2.58.56.116:53742] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "accuG3NG2YdGm41aN8LxMgAAAlE"]
[Sat Mar 28 09:25:49.001518 2026] [:error] [pid 64861:tid 64941] [client 2.58.56.116:55177] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "accuHexK22_lUN2kvnWQbwAAAIY"]
[Sat Mar 28 09:25:50.002526 2026] [:error] [pid 43579:tid 43624] [client 2.58.56.116:56058] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "accuHiRqN4JVI8gB7AmlegAAApA"]
[Sat Mar 28 11:35:46.007063 2026] [:error] [pid 64860:tid 64922] [client 20.46.168.233:12590] [client 20.46.168.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "acdMkhkU3N0pg_4aEL86YwAAAE4"]
[Sat Mar 28 11:35:46.506268 2026] [:error] [pid 43578:tid 43581] [client 20.46.168.233:12599] [client 20.46.168.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "acdMknNG2YdGm41aN8IzlAAAAkA"]
[Sat Mar 28 11:35:47.060750 2026] [:error] [pid 43578:tid 43582] [client 20.46.168.233:13457] [client 20.46.168.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "acdMk3NG2YdGm41aN8IzlgAAAkE"]
[Sat Mar 28 11:35:47.566529 2026] [:error] [pid 64859:tid 64899] [client 20.46.168.233:12584] [client 20.46.168.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "acdMk23qEBHXq3rHdBnIDgAAABI"]
[Sat Mar 28 15:10:04.878918 2026] [:error] [pid 34631:tid 34684] [client 106.119.167.146:39613] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acd-zDtzjMMS6kojpeTFxgAAAdg"]
[Sat Mar 28 16:55:30.721756 2026] [:error] [pid 64859:tid 64901] [client 43.153.54.138:38562] [client 43.153.54.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aceXgm3qEBHXq3rHdBkh8wAAABQ"]
[Sat Mar 28 17:59:01.755276 2026] [:error] [pid 64966:tid 64977] [client 61.1.151.176:65466] [client 61.1.151.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 61.1.151.176, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acemZdfSvF5AFfSuKxUq8gAAAMQ"]
[Sat Mar 28 19:03:14.588315 2026] [:error] [pid 64861:tid 64954] [client 49.150.106.140:40895] [client 49.150.106.140] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.150.106.140, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ace1cuxK22_lUN2kvnU6twAAAJM"]
[Sat Mar 28 19:10:43.484418 2026] [:error] [pid 2877:tid 2896] [client 43.153.96.79:36040] [client 43.153.96.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ace3M7gM4xL1Xj409YQLigAAARE"]
[Sat Mar 28 22:59:23.880094 2026] [:error] [pid 34597:tid 34601] [client 43.157.170.13:46236] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acfsy4luI7-e5s1cafeuhAAAAUA"]
[Sat Mar 28 23:16:01.970428 2026] [:error] [pid 34597:tid 34603] [client 179.108.59.227:32578] [client 179.108.59.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.59.227, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acfwsYluI7-e5s1cafexdAAAAUI"]
[Sat Mar 28 23:36:41.814941 2026] [:error] [pid 34631:tid 34681] [client 45.94.31.49:58427] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acf1iTtzjMMS6kojpeSEYQAAAdU"]
[Sat Mar 28 23:36:41.969530 2026] [:error] [pid 64861:tid 64956] [client 45.94.31.49:58232] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acf1iexK22_lUN2kvnWz5QAAAJU"]
[Sat Mar 28 23:36:43.047336 2026] [:error] [pid 43578:tid 43597] [client 45.94.31.49:64147] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acf1i3NG2YdGm41aN8I3_AAAAlA"]
[Sat Mar 28 23:36:43.371038 2026] [:error] [pid 64860:tid 64914] [client 45.94.31.49:63947] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acf1ixkU3N0pg_4aEL-7zwAAAEY"]
[Sat Mar 28 23:36:44.407697 2026] [:error] [pid 43547:tid 43569] [client 45.94.31.49:64147] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acf1jD4ZEfdetXP-9aAQogAAAhQ"]
[Sat Mar 28 23:36:44.833971 2026] [:error] [pid 64860:tid 64920] [client 45.94.31.49:63947] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acf1jBkU3N0pg_4aEL-73QAAAEw"]
[Sat Mar 28 23:36:45.620169 2026] [:error] [pid 64861:tid 64947] [client 45.94.31.49:59101] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acf1jexK22_lUN2kvnW0agAAAIw"]
[Sat Mar 28 23:36:45.942418 2026] [:error] [pid 34631:tid 34680] [client 45.94.31.49:54899] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acf1jTtzjMMS6kojpeSErwAAAdQ"]
[Sat Mar 28 23:36:46.705922 2026] [:error] [pid 34631:tid 34671] [client 45.94.31.49:62438] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acf1jjtzjMMS6kojpeSEvQAAAcs"]
[Sat Mar 28 23:36:46.986286 2026] [:error] [pid 34631:tid 34682] [client 45.94.31.49:64298] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acf1jjtzjMMS6kojpeSExgAAAdY"]
[Sun Mar 29 00:26:49.846117 2026] [:error] [pid 64860:tid 64922] [client 158.23.144.198:17801] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "acgBSRkU3N0pg_4aEL_HJwAAAE4"]
[Sun Mar 29 00:26:50.295188 2026] [:error] [pid 34597:tid 34609] [client 158.23.144.198:17811] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "acgBSoluI7-e5s1cafe8lwAAAUg"]
[Sun Mar 29 00:26:50.703596 2026] [:error] [pid 34597:tid 34622] [client 158.23.144.198:17804] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "acgBSoluI7-e5s1cafe8mgAAAVU"]
[Sun Mar 29 00:26:51.109205 2026] [:error] [pid 34597:tid 34625] [client 158.23.144.198:17910] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "acgBS4luI7-e5s1cafe8nAAAAVg"]
[Sun Mar 29 00:26:51.502262 2026] [:error] [pid 34597:tid 34601] [client 158.23.144.198:17906] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acgBS4luI7-e5s1cafe8nwAAAUA"]
[Sun Mar 29 00:26:51.904917 2026] [:error] [pid 64861:tid 64950] [client 158.23.144.198:17891] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acgBS-xK22_lUN2kvnXNVgAAAI8"]
[Sun Mar 29 00:26:52.295696 2026] [:error] [pid 64861:tid 64942] [client 158.23.144.198:17899] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acgBTOxK22_lUN2kvnXNWAAAAIc"]
[Sun Mar 29 00:26:52.691517 2026] [:error] [pid 64859:tid 64889] [client 158.23.144.198:17796] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acgBTG3qEBHXq3rHdBmIcAAAAAg"]
[Sun Mar 29 00:26:53.078995 2026] [:error] [pid 34631:tid 34680] [client 158.23.144.198:17904] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acgBTTtzjMMS6kojpeSXFAAAAdQ"]
[Sun Mar 29 00:26:53.463816 2026] [:error] [pid 34631:tid 34673] [client 158.23.144.198:17807] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acgBTTtzjMMS6kojpeSXFgAAAc0"]
[Sun Mar 29 00:26:53.846137 2026] [:error] [pid 64861:tid 64943] [client 158.23.144.198:17887] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acgBTexK22_lUN2kvnXNWwAAAIg"]
[Sun Mar 29 00:26:54.244807 2026] [:error] [pid 43578:tid 43597] [client 158.23.144.198:17792] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acgBTnNG2YdGm41aN8JbIgAAAlA"]
[Sun Mar 29 00:26:54.707293 2026] [:error] [pid 64861:tid 64959] [client 158.23.144.198:17916] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acgBTuxK22_lUN2kvnXNXQAAAJg"]
[Sun Mar 29 00:26:55.126783 2026] [:error] [pid 64860:tid 64914] [client 158.23.144.198:17864] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acgBTxkU3N0pg_4aEL_HLgAAAEY"]
[Sun Mar 29 00:26:55.524895 2026] [:error] [pid 34631:tid 34661] [client 158.23.144.198:17883] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acgBTztzjMMS6kojpeSXHgAAAcE"]
[Sun Mar 29 00:26:55.910148 2026] [:error] [pid 64966:tid 64988] [client 158.23.144.198:17859] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acgBT9fSvF5AFfSuKxVMUQAAAM8"]
[Sun Mar 29 00:26:56.319970 2026] [:error] [pid 64966:tid 64976] [client 158.23.144.198:17896] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "acgBUNfSvF5AFfSuKxVMUgAAAMM"]
[Sun Mar 29 00:26:56.744119 2026] [:error] [pid 64966:tid 64987] [client 158.23.144.198:17860] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "acgBUNfSvF5AFfSuKxVMUwAAAM4"]
[Sun Mar 29 00:26:57.204716 2026] [:error] [pid 64859:tid 64898] [client 158.23.144.198:17902] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "acgBUW3qEBHXq3rHdBmIdwAAABE"]
[Sun Mar 29 00:26:57.589121 2026] [:error] [pid 64861:tid 64941] [client 158.23.144.198:17890] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bootstrap.php"] [unique_id "acgBUexK22_lUN2kvnXNaAAAAIY"]
[Sun Mar 29 00:26:57.983472 2026] [:error] [pid 64861:tid 64937] [client 158.23.144.198:17812] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acgBUexK22_lUN2kvnXNaQAAAII"]
[Sun Mar 29 00:26:58.382596 2026] [:error] [pid 34631:tid 34667] [client 158.23.144.198:17750] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acgBUjtzjMMS6kojpeSXJAAAAcc"]
[Sun Mar 29 00:26:58.772481 2026] [:error] [pid 64859:tid 64888] [client 158.23.144.198:17917] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acgBUm3qEBHXq3rHdBmIfgAAAAc"]
[Sun Mar 29 00:26:59.250720 2026] [:error] [pid 43578:tid 43581] [client 158.23.144.198:17861] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acgBU3NG2YdGm41aN8JbJwAAAkA"]
[Sun Mar 29 00:26:59.676711 2026] [:error] [pid 64966:tid 64974] [client 158.23.144.198:17913] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acgBU9fSvF5AFfSuKxVMWAAAAME"]
[Sun Mar 29 00:27:00.338085 2026] [:error] [pid 43578:tid 43590] [client 158.23.144.198:17895] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acgBVHNG2YdGm41aN8JbKAAAAkk"]
[Sun Mar 29 00:27:00.721460 2026] [:error] [pid 64860:tid 64926] [client 158.23.144.198:17824] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acgBVBkU3N0pg_4aEL_HNQAAAFI"]
[Sun Mar 29 00:27:01.107542 2026] [:error] [pid 34631:tid 34666] [client 158.23.144.198:17867] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acgBVTtzjMMS6kojpeSXJgAAAcY"]
[Sun Mar 29 00:27:01.652110 2026] [:error] [pid 64859:tid 64885] [client 158.23.144.198:17912] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acgBVW3qEBHXq3rHdBmIgQAAAAQ"]
[Sun Mar 29 00:27:02.059005 2026] [:error] [pid 64859:tid 64898] [client 158.23.144.198:17799] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acgBVm3qEBHXq3rHdBmIhAAAABE"]
[Sun Mar 29 00:27:02.443958 2026] [:error] [pid 64859:tid 64889] [client 158.23.144.198:17809] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acgBVm3qEBHXq3rHdBmIiQAAAAg"]
[Sun Mar 29 00:27:02.835595 2026] [:error] [pid 34631:tid 34675] [client 158.23.144.198:17874] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acgBVjtzjMMS6kojpeSXKQAAAc8"]
[Sun Mar 29 00:27:03.239818 2026] [:error] [pid 43547:tid 43550] [client 158.23.144.198:17911] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acgBVz4ZEfdetXP-9aAWyQAAAgE"]
[Sun Mar 29 00:27:03.631507 2026] [:error] [pid 43547:tid 43558] [client 158.23.144.198:17876] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acgBVz4ZEfdetXP-9aAWywAAAgk"]
[Sun Mar 29 00:27:04.022654 2026] [:error] [pid 64861:tid 64946] [client 158.23.144.198:17857] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acgBWOxK22_lUN2kvnXNeQAAAIs"]
[Sun Mar 29 00:27:04.439150 2026] [:error] [pid 64966:tid 64989] [client 158.23.144.198:17823] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acgBWNfSvF5AFfSuKxVMXAAAANA"]
[Sun Mar 29 00:27:04.842344 2026] [:error] [pid 43578:tid 43584] [client 158.23.144.198:17863] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acgBWHNG2YdGm41aN8JbLQAAAkM"]
[Sun Mar 29 00:27:05.223432 2026] [:error] [pid 43578:tid 43604] [client 158.23.144.198:17886] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acgBWXNG2YdGm41aN8JbMQAAAlc"]
[Sun Mar 29 00:27:05.605942 2026] [:error] [pid 64966:tid 64994] [client 158.23.144.198:17848] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acgBWdfSvF5AFfSuKxVMYgAAANU"]
[Sun Mar 29 00:27:06.000458 2026] [:error] [pid 43578:tid 43590] [client 158.23.144.198:17822] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acgBWXNG2YdGm41aN8JbNwAAAkk"]
[Sun Mar 29 00:27:06.409375 2026] [:error] [pid 64861:tid 64946] [client 158.23.144.198:17908] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgBWuxK22_lUN2kvnXNgwAAAIs"]
[Sun Mar 29 00:27:06.796601 2026] [:error] [pid 64861:tid 64953] [client 158.23.144.198:17797] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgBWuxK22_lUN2kvnXNhgAAAJI"]
[Sun Mar 29 00:27:07.220737 2026] [:error] [pid 43547:tid 43560] [client 158.23.144.198:17888] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgBWz4ZEfdetXP-9aAW0QAAAgs"]
[Sun Mar 29 00:27:07.633918 2026] [:error] [pid 64860:tid 64929] [client 158.23.144.198:17837] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgBWxkU3N0pg_4aEL_HPAAAAFU"]
[Sun Mar 29 00:27:08.041280 2026] [:error] [pid 43578:tid 43597] [client 158.23.144.198:17825] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acgBXHNG2YdGm41aN8JbPAAAAlA"]
[Sun Mar 29 00:27:08.473959 2026] [:error] [pid 43578:tid 43587] [client 158.23.144.198:17918] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acgBXHNG2YdGm41aN8JbQwAAAkY"]
[Sun Mar 29 00:27:08.859145 2026] [:error] [pid 64861:tid 64947] [client 158.23.144.198:17800] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acgBXOxK22_lUN2kvnXNlgAAAIw"]
[Sun Mar 29 00:27:09.298977 2026] [:error] [pid 2877:tid 2898] [client 158.23.144.198:17882] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acgBXbgM4xL1Xj409YQhtAAAARM"]
[Sun Mar 29 00:27:09.695705 2026] [:error] [pid 64860:tid 64911] [client 158.23.144.198:17769] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "acgBXRkU3N0pg_4aEL_HPwAAAEM"]
[Sun Mar 29 00:27:10.101438 2026] [:error] [pid 64861:tid 64939] [client 158.23.144.198:17878] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "acgBXuxK22_lUN2kvnXNmwAAAIQ"]
[Sun Mar 29 00:27:10.497776 2026] [:error] [pid 2877:tid 2884] [client 158.23.144.198:17820] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "acgBXrgM4xL1Xj409YQhtQAAAQU"]
[Sun Mar 29 00:27:10.924997 2026] [:error] [pid 64861:tid 64936] [client 158.23.144.198:17766] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "acgBXuxK22_lUN2kvnXNqgAAAIE"]
[Sun Mar 29 00:27:11.324651 2026] [:error] [pid 43578:tid 43602] [client 158.23.144.198:17817] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "acgBX3NG2YdGm41aN8JbSgAAAlU"]
[Sun Mar 29 00:27:11.739183 2026] [:error] [pid 34597:tid 34607] [client 158.23.144.198:17880] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "acgBX4luI7-e5s1cafe8swAAAUY"]
[Sun Mar 29 00:27:12.125008 2026] [:error] [pid 34597:tid 34617] [client 158.23.144.198:17865] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "acgBYIluI7-e5s1cafe8tAAAAVA"]
[Sun Mar 29 00:27:12.513611 2026] [:error] [pid 64859:tid 64882] [client 158.23.144.198:17844] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "acgBYG3qEBHXq3rHdBmImgAAAAE"]
[Sun Mar 29 00:27:12.901047 2026] [:error] [pid 43578:tid 43584] [client 158.23.144.198:17805] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acgBYHNG2YdGm41aN8JbTQAAAkM"]
[Sun Mar 29 00:27:13.286959 2026] [:error] [pid 43578:tid 43605] [client 158.23.144.198:17828] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acgBYXNG2YdGm41aN8JbTgAAAlg"]
[Sun Mar 29 00:27:13.681975 2026] [:error] [pid 43578:tid 43601] [client 158.23.144.198:17737] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acgBYXNG2YdGm41aN8JbUQAAAlQ"]
[Sun Mar 29 00:27:14.063544 2026] [:error] [pid 43578:tid 43588] [client 158.23.144.198:17905] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acgBYnNG2YdGm41aN8JbUwAAAkc"]
[Sun Mar 29 00:27:14.452977 2026] [:error] [pid 43578:tid 43593] [client 158.23.144.198:17819] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acgBYnNG2YdGm41aN8JbVwAAAkw"]
[Sun Mar 29 00:27:14.847876 2026] [:error] [pid 43578:tid 43583] [client 158.23.144.198:17760] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acgBYnNG2YdGm41aN8JbWwAAAkI"]
[Sun Mar 29 00:27:15.251524 2026] [:error] [pid 43578:tid 43598] [client 158.23.144.198:17914] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acgBY3NG2YdGm41aN8JbXQAAAlE"]
[Sun Mar 29 00:27:15.654582 2026] [:error] [pid 43578:tid 43595] [client 158.23.144.198:17830] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "acgBY3NG2YdGm41aN8JbYgAAAk4"]
[Sun Mar 29 00:27:16.048681 2026] [:error] [pid 34631:tid 34682] [client 158.23.144.198:17798] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acgBZDtzjMMS6kojpeSXSgAAAdY"]
[Sun Mar 29 00:27:16.515927 2026] [:error] [pid 64861:tid 64941] [client 158.23.144.198:17795] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acgBZOxK22_lUN2kvnXNtAAAAIY"]
[Sun Mar 29 00:27:16.914228 2026] [:error] [pid 43578:tid 43592] [client 158.23.144.198:17672] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acgBZHNG2YdGm41aN8JbaAAAAks"]
[Sun Mar 29 00:27:17.332974 2026] [:error] [pid 34631:tid 34661] [client 158.23.144.198:17853] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acgBZTtzjMMS6kojpeSXTgAAAcE"]
[Sun Mar 29 00:27:17.725429 2026] [:error] [pid 43547:tid 43572] [client 158.23.144.198:17877] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acgBZT4ZEfdetXP-9aAW1gAAAhc"]
[Sun Mar 29 00:27:18.115425 2026] [:error] [pid 43547:tid 43566] [client 158.23.144.198:17901] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acgBZj4ZEfdetXP-9aAW1wAAAhE"]
[Sun Mar 29 00:27:18.520713 2026] [:error] [pid 64859:tid 64900] [client 158.23.144.198:17884] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acgBZm3qEBHXq3rHdBmIngAAABM"]
[Sun Mar 29 00:27:18.917299 2026] [:error] [pid 64859:tid 64904] [client 158.23.144.198:17879] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acgBZm3qEBHXq3rHdBmIoAAAABc"]
[Sun Mar 29 00:27:19.325683 2026] [:error] [pid 64859:tid 64895] [client 158.23.144.198:17833] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "acgBZ23qEBHXq3rHdBmIowAAAA4"]
[Sun Mar 29 00:27:19.730356 2026] [:error] [pid 34631:tid 34670] [client 158.23.144.198:17889] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "acgBZztzjMMS6kojpeSXWAAAAco"]
[Sun Mar 29 00:27:20.114724 2026] [:error] [pid 43578:tid 43583] [client 158.23.144.198:17873] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "acgBaHNG2YdGm41aN8JbbQAAAkI"]
[Sun Mar 29 00:27:20.504103 2026] [:error] [pid 34631:tid 34662] [client 158.23.144.198:17862] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "acgBaDtzjMMS6kojpeSXXAAAAcI"]
[Sun Mar 29 00:27:20.900312 2026] [:error] [pid 64859:tid 64905] [client 158.23.144.198:17866] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acgBaG3qEBHXq3rHdBmIpwAAABg"]
[Sun Mar 29 00:27:21.316091 2026] [:error] [pid 64859:tid 64891] [client 158.23.144.198:17870] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acgBaW3qEBHXq3rHdBmIqgAAAAo"]
[Sun Mar 29 00:27:21.714812 2026] [:error] [pid 43578:tid 43601] [client 158.23.144.198:17794] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acgBaXNG2YdGm41aN8JbcAAAAlQ"]
[Sun Mar 29 00:27:22.144958 2026] [:error] [pid 43578:tid 43603] [client 158.23.144.198:17900] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acgBanNG2YdGm41aN8JbcgAAAlY"]
[Sun Mar 29 00:27:22.530415 2026] [:error] [pid 43578:tid 43588] [client 158.23.144.198:17793] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acgBanNG2YdGm41aN8JbfAAAAkc"]
[Sun Mar 29 00:27:22.920349 2026] [:error] [pid 43578:tid 43587] [client 158.23.144.198:17806] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acgBanNG2YdGm41aN8JbgQAAAkY"]
[Sun Mar 29 00:27:23.307662 2026] [:error] [pid 64861:tid 64942] [client 158.23.144.198:17894] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acgBa-xK22_lUN2kvnXNwwAAAIc"]
[Sun Mar 29 00:27:23.742169 2026] [:error] [pid 64966:tid 64993] [client 158.23.144.198:17803] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acgBa9fSvF5AFfSuKxVMdgAAANQ"]
[Sun Mar 29 00:27:24.127905 2026] [:error] [pid 43547:tid 43559] [client 158.23.144.198:17741] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acgBbD4ZEfdetXP-9aAW2QAAAgo"]
[Sun Mar 29 00:27:24.511095 2026] [:error] [pid 64859:tid 64884] [client 158.23.144.198:17692] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acgBbG3qEBHXq3rHdBmIsQAAAAM"]
[Sun Mar 29 00:27:24.917345 2026] [:error] [pid 64860:tid 64909] [client 158.23.144.198:17732] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acgBbBkU3N0pg_4aEL_HTAAAAEE"]
[Sun Mar 29 00:27:25.309102 2026] [:error] [pid 64861:tid 64939] [client 158.23.144.198:17875] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acgBbexK22_lUN2kvnXNzAAAAIQ"]
[Sun Mar 29 00:27:25.693387 2026] [:error] [pid 64860:tid 64925] [client 158.23.144.198:17919] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acgBbRkU3N0pg_4aEL_HTwAAAFE"]
[Sun Mar 29 00:27:26.090963 2026] [:error] [pid 43579:tid 43625] [client 158.23.144.198:17746] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acgBbiRqN4JVI8gB7AkTpgAAApE"]
[Sun Mar 29 00:27:26.495197 2026] [:error] [pid 64859:tid 64905] [client 158.23.144.198:17802] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acgBbm3qEBHXq3rHdBmItQAAABg"]
[Sun Mar 29 00:27:26.880573 2026] [:error] [pid 34631:tid 34661] [client 158.23.144.198:17868] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acgBbjtzjMMS6kojpeSXYAAAAcE"]
[Sun Mar 29 00:27:27.266825 2026] [:error] [pid 34631:tid 34665] [client 158.23.144.198:17745] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acgBbztzjMMS6kojpeSXYgAAAcU"]
[Sun Mar 29 00:27:27.673517 2026] [:error] [pid 64859:tid 64881] [client 158.23.144.198:17673] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acgBb23qEBHXq3rHdBmIuQAAAAA"]
[Sun Mar 29 00:27:28.074900 2026] [:error] [pid 64859:tid 64895] [client 158.23.144.198:17810] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acgBcG3qEBHXq3rHdBmIuwAAAA4"]
[Sun Mar 29 00:27:28.458522 2026] [:error] [pid 43547:tid 43561] [client 158.23.144.198:17842] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acgBcD4ZEfdetXP-9aAW3gAAAgw"]
[Sun Mar 29 00:27:28.850183 2026] [:error] [pid 64861:tid 64936] [client 158.23.144.198:17898] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "acgBcOxK22_lUN2kvnXN1gAAAIE"]
[Sun Mar 29 00:27:29.235351 2026] [:error] [pid 34597:tid 34616] [client 158.23.144.198:17843] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "acgBcYluI7-e5s1cafe8ugAAAU8"]
[Sun Mar 29 00:27:29.617057 2026] [:error] [pid 43579:tid 43616] [client 158.23.144.198:17831] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "acgBcSRqN4JVI8gB7AkTqQAAAog"]
[Sun Mar 29 00:27:30.005496 2026] [:error] [pid 64859:tid 64897] [client 158.23.144.198:17752] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "acgBcm3qEBHXq3rHdBmIvQAAABA"]
[Sun Mar 29 00:27:30.407576 2026] [:error] [pid 34631:tid 34673] [client 158.23.144.198:17903] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acgBcjtzjMMS6kojpeSXagAAAc0"]
[Sun Mar 29 00:27:30.877367 2026] [:error] [pid 34631:tid 34682] [client 158.23.144.198:17826] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acgBcjtzjMMS6kojpeSXawAAAdY"]
[Sun Mar 29 00:27:31.261465 2026] [:error] [pid 64861:tid 64938] [client 158.23.144.198:17754] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acgBc-xK22_lUN2kvnXN4AAAAIM"]
[Sun Mar 29 00:27:31.649974 2026] [:error] [pid 64861:tid 64955] [client 158.23.144.198:17838] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acgBc-xK22_lUN2kvnXN5AAAAJQ"]
[Sun Mar 29 00:27:32.068613 2026] [:error] [pid 64860:tid 64913] [client 158.23.144.198:17762] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acgBdBkU3N0pg_4aEL_HWQAAAEU"]
[Sun Mar 29 00:27:32.462472 2026] [:error] [pid 64859:tid 64892] [client 158.23.144.198:17761] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acgBdG3qEBHXq3rHdBmIxQAAAAs"]
[Sun Mar 29 00:27:32.847414 2026] [:error] [pid 43579:tid 43612] [client 158.23.144.198:17818] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acgBdCRqN4JVI8gB7AkTqwAAAoQ"]
[Sun Mar 29 00:27:33.232858 2026] [:error] [pid 64966:tid 64976] [client 158.23.144.198:17840] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acgBddfSvF5AFfSuKxVMfAAAAMM"]
[Sun Mar 29 00:27:33.623629 2026] [:error] [pid 43579:tid 43615] [client 158.23.144.198:17681] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acgBdSRqN4JVI8gB7AkTrwAAAoc"]
[Sun Mar 29 00:27:34.022038 2026] [:error] [pid 43578:tid 43594] [client 158.23.144.198:17808] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acgBdnNG2YdGm41aN8JbhwAAAk0"]
[Sun Mar 29 00:27:34.413439 2026] [:error] [pid 43578:tid 43582] [client 158.23.144.198:17885] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acgBdnNG2YdGm41aN8JbiQAAAkE"]
[Sun Mar 29 00:27:34.796985 2026] [:error] [pid 34631:tid 34663] [client 158.23.144.198:17852] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acgBdjtzjMMS6kojpeSXbwAAAcM"]
[Sun Mar 29 00:27:35.189575 2026] [:error] [pid 64861:tid 64938] [client 158.23.144.198:17815] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ne2026.php"] [unique_id "acgBd-xK22_lUN2kvnXN6QAAAIM"]
[Sun Mar 29 00:27:35.572942 2026] [:error] [pid 64861:tid 64958] [client 158.23.144.198:17674] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ne2026.php"] [unique_id "acgBd-xK22_lUN2kvnXN7gAAAJc"]
[Sun Mar 29 00:27:36.021287 2026] [:error] [pid 64966:tid 64979] [client 158.23.144.198:17892] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ne2026.php"] [unique_id "acgBeNfSvF5AFfSuKxVMfgAAAMY"]
[Sun Mar 29 00:27:36.409136 2026] [:error] [pid 2877:tid 2884] [client 158.23.144.198:17893] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ne2026.php"] [unique_id "acgBeLgM4xL1Xj409YQhwAAAAQU"]
[Sun Mar 29 00:27:36.794615 2026] [:error] [pid 34631:tid 34672] [client 158.23.144.198:17839] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acgBeDtzjMMS6kojpeSXdgAAAcw"]
[Sun Mar 29 00:27:37.181066 2026] [:error] [pid 64859:tid 64902] [client 158.23.144.198:17744] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acgBeW3qEBHXq3rHdBmI0wAAABU"]
[Sun Mar 29 00:27:37.569768 2026] [:error] [pid 64966:tid 64973] [client 158.23.144.198:17770] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acgBedfSvF5AFfSuKxVMfwAAAMA"]
[Sun Mar 29 00:27:37.968572 2026] [:error] [pid 34631:tid 34663] [client 158.23.144.198:17849] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acgBeTtzjMMS6kojpeSXeQAAAcM"]
[Sun Mar 29 00:27:38.350213 2026] [:error] [pid 64859:tid 64882] [client 158.23.144.198:17736] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acgBem3qEBHXq3rHdBmI2gAAAAE"]
[Sun Mar 29 00:27:38.734625 2026] [:error] [pid 64859:tid 64895] [client 158.23.144.198:17814] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acgBem3qEBHXq3rHdBmI3QAAAA4"]
[Sun Mar 29 00:27:39.125779 2026] [:error] [pid 43547:tid 43554] [client 158.23.144.198:17841] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acgBez4ZEfdetXP-9aAW5QAAAgU"]
[Sun Mar 29 00:27:39.516724 2026] [:error] [pid 34597:tid 34614] [client 158.23.144.198:17756] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acgBe4luI7-e5s1cafe8xwAAAU0"]
[Sun Mar 29 00:27:39.908146 2026] [:error] [pid 64860:tid 64922] [client 158.23.144.198:17668] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acgBexkU3N0pg_4aEL_HXgAAAE4"]
[Sun Mar 29 00:27:40.329561 2026] [:error] [pid 64861:tid 64958] [client 158.23.144.198:17784] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acgBfOxK22_lUN2kvnXN9AAAAJc"]
[Sun Mar 29 00:27:40.713124 2026] [:error] [pid 64861:tid 64942] [client 158.23.144.198:17850] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acgBfOxK22_lUN2kvnXN9gAAAIc"]
[Sun Mar 29 00:27:41.101481 2026] [:error] [pid 34631:tid 34684] [client 158.23.144.198:17749] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acgBfTtzjMMS6kojpeSXfAAAAdg"]
[Sun Mar 29 00:27:41.539653 2026] [:error] [pid 43578:tid 43581] [client 158.23.144.198:17816] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "acgBfXNG2YdGm41aN8JbnAAAAkA"]
[Sun Mar 29 00:27:41.948377 2026] [:error] [pid 64966:tid 64988] [client 158.23.144.198:17731] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "acgBfdfSvF5AFfSuKxVMgQAAAM8"]
[Sun Mar 29 00:27:42.386748 2026] [:error] [pid 43578:tid 43587] [client 158.23.144.198:17740] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "acgBfnNG2YdGm41aN8JbnQAAAkY"]
[Sun Mar 29 00:27:42.781329 2026] [:error] [pid 43578:tid 43604] [client 158.23.144.198:17829] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "acgBfnNG2YdGm41aN8JbngAAAlc"]
[Sun Mar 29 00:27:43.166717 2026] [:error] [pid 64859:tid 64882] [client 158.23.144.198:17834] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acgBf23qEBHXq3rHdBmI5QAAAAE"]
[Sun Mar 29 00:27:43.550669 2026] [:error] [pid 64861:tid 64958] [client 158.23.144.198:17682] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acgBf-xK22_lUN2kvnXN_AAAAJc"]
[Sun Mar 29 00:27:43.932726 2026] [:error] [pid 64861:tid 64943] [client 158.23.144.198:17871] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acgBf-xK22_lUN2kvnXN_wAAAIg"]
[Sun Mar 29 00:27:44.323818 2026] [:error] [pid 64861:tid 64946] [client 158.23.144.198:17851] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acgBgOxK22_lUN2kvnXOAQAAAIs"]
[Sun Mar 29 00:27:44.711331 2026] [:error] [pid 64861:tid 64935] [client 158.23.144.198:17872] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "acgBgOxK22_lUN2kvnXOBgAAAIA"]
[Sun Mar 29 00:27:45.095739 2026] [:error] [pid 34597:tid 34604] [client 158.23.144.198:17835] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "acgBgYluI7-e5s1cafe80AAAAUM"]
[Sun Mar 29 00:27:45.494517 2026] [:error] [pid 34631:tid 34670] [client 158.23.144.198:17775] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "acgBgTtzjMMS6kojpeSXgQAAAco"]
[Sun Mar 29 00:27:45.876962 2026] [:error] [pid 34631:tid 34672] [client 158.23.144.198:17739] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "acgBgTtzjMMS6kojpeSXggAAAcw"]
[Sun Mar 29 00:27:46.277184 2026] [:error] [pid 43578:tid 43581] [client 158.23.144.198:17743] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acgBgnNG2YdGm41aN8JbqwAAAkA"]
[Sun Mar 29 00:27:46.662957 2026] [:error] [pid 43578:tid 43582] [client 158.23.144.198:17758] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acgBgnNG2YdGm41aN8JbsAAAAkE"]
[Sun Mar 29 00:27:47.051164 2026] [:error] [pid 43578:tid 43603] [client 158.23.144.198:17607] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acgBg3NG2YdGm41aN8JbtQAAAlY"]
[Sun Mar 29 00:27:47.575058 2026] [:error] [pid 43578:tid 43600] [client 158.23.144.198:17729] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acgBg3NG2YdGm41aN8JbuQAAAlM"]
[Sun Mar 29 00:27:47.984313 2026] [:error] [pid 2877:tid 2888] [client 158.23.144.198:17683] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "acgBg7gM4xL1Xj409YQhxgAAAQk"]
[Sun Mar 29 00:27:48.497164 2026] [:error] [pid 2877:tid 2892] [client 158.23.144.198:17779] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "acgBhLgM4xL1Xj409YQhyQAAAQ0"]
[Sun Mar 29 00:27:48.921327 2026] [:error] [pid 2877:tid 2890] [client 158.23.144.198:17821] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "acgBhLgM4xL1Xj409YQhygAAAQs"]
[Sun Mar 29 00:27:54.778394 2026] [:error] [pid 34631:tid 34664] [client 158.23.144.198:17687] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acgBijtzjMMS6kojpeSXlwAAAcQ"]
[Sun Mar 29 00:27:55.501746 2026] [:error] [pid 64861:tid 64950] [client 158.23.144.198:17748] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acgBi-xK22_lUN2kvnXOIQAAAI8"]
[Sun Mar 29 00:27:55.936882 2026] [:error] [pid 64861:tid 64957] [client 158.23.144.198:17783] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acgBi-xK22_lUN2kvnXOIgAAAJY"]
[Sun Mar 29 00:27:56.346616 2026] [:error] [pid 64859:tid 64902] [client 158.23.144.198:17897] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acgBjG3qEBHXq3rHdBmI8wAAABU"]
[Sun Mar 29 00:27:56.751992 2026] [:error] [pid 34631:tid 34682] [client 158.23.144.198:17680] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgBjDtzjMMS6kojpeSXngAAAdY"]
[Sun Mar 29 00:27:57.212854 2026] [:error] [pid 64861:tid 64938] [client 158.23.144.198:17723] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgBjexK22_lUN2kvnXOJwAAAIM"]
[Sun Mar 29 00:27:57.884978 2026] [:error] [pid 43578:tid 43589] [client 158.23.144.198:17694] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgBjXNG2YdGm41aN8Jb0gAAAkg"]
[Sun Mar 29 00:27:58.316089 2026] [:error] [pid 64861:tid 64940] [client 158.23.144.198:17845] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgBjuxK22_lUN2kvnXOMgAAAIU"]
[Sun Mar 29 00:27:58.940803 2026] [:error] [pid 64861:tid 64951] [client 158.23.144.198:17735] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "acgBjuxK22_lUN2kvnXONQAAAJA"]
[Sun Mar 29 00:27:59.422727 2026] [:error] [pid 43579:tid 43627] [client 158.23.144.198:17733] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "acgBjyRqN4JVI8gB7AkTxQAAApM"]
[Sun Mar 29 00:27:59.961726 2026] [:error] [pid 34631:tid 34667] [client 158.23.144.198:17915] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "acgBjztzjMMS6kojpeSXogAAAcc"]
[Sun Mar 29 00:28:00.370289 2026] [:error] [pid 43547:tid 43570] [client 158.23.144.198:17703] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "acgBkD4ZEfdetXP-9aAW9QAAAhU"]
[Sun Mar 29 00:28:00.807878 2026] [:error] [pid 64861:tid 64936] [client 158.23.144.198:17788] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acgBkOxK22_lUN2kvnXOPQAAAIE"]
[Sun Mar 29 00:28:01.222147 2026] [:error] [pid 64861:tid 64944] [client 158.23.144.198:17742] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acgBkexK22_lUN2kvnXOPwAAAIk"]
[Sun Mar 29 00:28:01.604806 2026] [:error] [pid 43578:tid 43585] [client 158.23.144.198:17854] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acgBkXNG2YdGm41aN8Jb3QAAAkQ"]
[Sun Mar 29 00:28:02.029259 2026] [:error] [pid 43579:tid 43630] [client 158.23.144.198:17669] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "acgBkiRqN4JVI8gB7AkTyQAAApY"]
[Sun Mar 29 00:28:02.419978 2026] [:error] [pid 43579:tid 43629] [client 158.23.144.198:17785] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acgBkiRqN4JVI8gB7AkTzAAAApU"]
[Sun Mar 29 00:28:02.881019 2026] [:error] [pid 43578:tid 43591] [client 158.23.144.198:17705] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acgBknNG2YdGm41aN8Jb3wAAAko"]
[Sun Mar 29 00:28:03.300787 2026] [:error] [pid 64966:tid 64980] [client 158.23.144.198:17764] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acgBk9fSvF5AFfSuKxVMjwAAAMc"]
[Sun Mar 29 00:28:03.688522 2026] [:error] [pid 43578:tid 43602] [client 158.23.144.198:17836] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "acgBk3NG2YdGm41aN8Jb4QAAAlU"]
[Sun Mar 29 00:28:04.081998 2026] [:error] [pid 43578:tid 43595] [client 158.23.144.198:17847] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acgBlHNG2YdGm41aN8Jb4gAAAk4"]
[Sun Mar 29 00:28:04.489380 2026] [:error] [pid 43578:tid 43588] [client 158.23.144.198:17715] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acgBlHNG2YdGm41aN8Jb5AAAAkc"]
[Sun Mar 29 00:28:04.892469 2026] [:error] [pid 64859:tid 64884] [client 158.23.144.198:17686] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acgBlG3qEBHXq3rHdBmI-gAAAAM"]
[Sun Mar 29 00:28:05.382879 2026] [:error] [pid 43578:tid 43597] [client 158.23.144.198:17618] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acgBlXNG2YdGm41aN8Jb7AAAAlA"]
[Sun Mar 29 00:28:05.811541 2026] [:error] [pid 43578:tid 43581] [client 158.23.144.198:17813] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgBlXNG2YdGm41aN8Jb7QAAAkA"]
[Sun Mar 29 00:28:06.199866 2026] [:error] [pid 64859:tid 64897] [client 158.23.144.198:17629] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgBlm3qEBHXq3rHdBmI_AAAABA"]
[Sun Mar 29 00:28:06.593893 2026] [:error] [pid 64861:tid 64949] [client 158.23.144.198:17827] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgBluxK22_lUN2kvnXORwAAAI4"]
[Sun Mar 29 00:28:07.001511 2026] [:error] [pid 43578:tid 43591] [client 158.23.144.198:17825] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgBl3NG2YdGm41aN8Jb8QAAAko"]
[Sun Mar 29 00:28:07.382772 2026] [:error] [pid 64859:tid 64891] [client 158.23.144.198:17755] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acgBl23qEBHXq3rHdBmI_wAAAAo"]
[Sun Mar 29 00:28:07.823371 2026] [:error] [pid 43547:tid 43567] [client 158.23.144.198:17776] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acgBlz4ZEfdetXP-9aAW-QAAAhI"]
[Sun Mar 29 00:28:08.250681 2026] [:error] [pid 2877:tid 2879] [client 158.23.144.198:17757] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acgBmLgM4xL1Xj409YQh0AAAAQA"]
[Sun Mar 29 00:28:08.673543 2026] [:error] [pid 64966:tid 64974] [client 158.23.144.198:17753] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acgBmNfSvF5AFfSuKxVMkgAAAME"]
[Sun Mar 29 00:28:09.156887 2026] [:error] [pid 2877:tid 2895] [client 158.23.144.198:17709] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acgBmbgM4xL1Xj409YQh0QAAARA"]
[Sun Mar 29 00:28:09.546735 2026] [:error] [pid 64861:tid 64937] [client 158.23.144.198:17738] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acgBmexK22_lUN2kvnXOSwAAAII"]
[Sun Mar 29 00:28:09.949302 2026] [:error] [pid 64861:tid 64936] [client 158.23.144.198:17724] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acgBmexK22_lUN2kvnXOUAAAAIE"]
[Sun Mar 29 00:28:10.368683 2026] [:error] [pid 64861:tid 64938] [client 158.23.144.198:17721] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acgBmuxK22_lUN2kvnXOUQAAAIM"]
[Sun Mar 29 00:28:11.123105 2026] [:error] [pid 64860:tid 64916] [client 158.23.144.198:17628] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "acgBmxkU3N0pg_4aEL_HegAAAEg"]
[Sun Mar 29 00:28:11.540219 2026] [:error] [pid 64861:tid 64940] [client 158.23.144.198:17696] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "acgBm-xK22_lUN2kvnXOVAAAAIU"]
[Sun Mar 29 00:28:11.987186 2026] [:error] [pid 43547:tid 43559] [client 158.23.144.198:17789] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "acgBmz4ZEfdetXP-9aAXAQAAAgo"]
[Sun Mar 29 00:28:12.370063 2026] [:error] [pid 64859:tid 64882] [client 158.23.144.198:17633] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "acgBnG3qEBHXq3rHdBmJAgAAAAE"]
[Sun Mar 29 00:28:12.781349 2026] [:error] [pid 43547:tid 43571] [client 158.23.144.198:17787] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxfyf.php"] [unique_id "acgBnD4ZEfdetXP-9aAXAgAAAhY"]
[Sun Mar 29 00:28:13.174874 2026] [:error] [pid 64861:tid 64952] [client 158.23.144.198:17790] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxfyf.php"] [unique_id "acgBnexK22_lUN2kvnXOWgAAAJE"]
[Sun Mar 29 00:28:13.566636 2026] [:error] [pid 34631:tid 34662] [client 158.23.144.198:17730] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxfyf.php"] [unique_id "acgBnTtzjMMS6kojpeSXsAAAAcI"]
[Sun Mar 29 00:28:13.977604 2026] [:error] [pid 2877:tid 2900] [client 158.23.144.198:17717] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxfyf.php"] [unique_id "acgBnbgM4xL1Xj409YQh1AAAARU"]
[Sun Mar 29 00:28:14.403586 2026] [:error] [pid 34631:tid 34672] [client 158.23.144.198:17711] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acgBnjtzjMMS6kojpeSXuAAAAcw"]
[Sun Mar 29 00:28:14.836676 2026] [:error] [pid 43579:tid 43630] [client 158.23.144.198:17734] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acgBniRqN4JVI8gB7AkT3wAAApY"]
[Sun Mar 29 00:28:15.236750 2026] [:error] [pid 64966:tid 64973] [client 158.23.144.198:17765] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acgBn9fSvF5AFfSuKxVMlgAAAMA"]
[Sun Mar 29 00:28:15.680345 2026] [:error] [pid 34631:tid 34670] [client 158.23.144.198:17684] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acgBnztzjMMS6kojpeSXugAAAco"]
[Sun Mar 29 00:28:16.063605 2026] [:error] [pid 34631:tid 34665] [client 158.23.144.198:17856] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acgBoDtzjMMS6kojpeSXvAAAAcU"]
[Sun Mar 29 00:28:16.491482 2026] [:error] [pid 64861:tid 64953] [client 158.23.144.198:17707] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acgBoOxK22_lUN2kvnXOXAAAAJI"]
[Sun Mar 29 00:28:16.875631 2026] [:error] [pid 64860:tid 64915] [client 158.23.144.198:17605] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acgBoBkU3N0pg_4aEL_HggAAAEc"]
[Sun Mar 29 00:28:17.262436 2026] [:error] [pid 64859:tid 64881] [client 158.23.144.198:17670] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acgBoW3qEBHXq3rHdBmJAwAAAAA"]
[Sun Mar 29 00:28:17.756856 2026] [:error] [pid 64859:tid 64899] [client 158.23.144.198:17909] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sale.php"] [unique_id "acgBoW3qEBHXq3rHdBmJBQAAABI"]
[Sun Mar 29 00:28:18.149498 2026] [:error] [pid 43547:tid 43568] [client 158.23.144.198:17768] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sale.php"] [unique_id "acgBoj4ZEfdetXP-9aAXBgAAAhM"]
[Sun Mar 29 00:28:18.534214 2026] [:error] [pid 64966:tid 64980] [client 158.23.144.198:17671] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sale.php"] [unique_id "acgBotfSvF5AFfSuKxVMmQAAAMc"]
[Sun Mar 29 00:28:18.949047 2026] [:error] [pid 34631:tid 34664] [client 158.23.144.198:17832] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sale.php"] [unique_id "acgBojtzjMMS6kojpeSXvwAAAcQ"]
[Sun Mar 29 00:28:19.350233 2026] [:error] [pid 43547:tid 43554] [client 158.23.144.198:17631] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acgBoz4ZEfdetXP-9aAXCgAAAgU"]
[Sun Mar 29 00:28:19.744299 2026] [:error] [pid 43578:tid 43602] [client 158.23.144.198:17607] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acgBo3NG2YdGm41aN8Jb-gAAAlU"]
[Sun Mar 29 00:28:20.171452 2026] [:error] [pid 64859:tid 64904] [client 158.23.144.198:17603] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acgBpG3qEBHXq3rHdBmJBwAAABc"]
[Sun Mar 29 00:28:20.560923 2026] [:error] [pid 34597:tid 34620] [client 158.23.144.198:17726] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acgBpIluI7-e5s1cafe85gAAAVM"]
[Sun Mar 29 00:28:20.962084 2026] [:error] [pid 64861:tid 64959] [client 158.23.144.198:17774] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acgBpOxK22_lUN2kvnXOYQAAAJg"]
[Sun Mar 29 00:28:21.398127 2026] [:error] [pid 34597:tid 34605] [client 158.23.144.198:17763] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acgBpYluI7-e5s1cafe86AAAAUQ"]
[Sun Mar 29 00:28:21.802358 2026] [:error] [pid 43579:tid 43621] [client 158.23.144.198:17697] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acgBpSRqN4JVI8gB7AkT6gAAAo0"]
[Sun Mar 29 00:28:22.253444 2026] [:error] [pid 64860:tid 64913] [client 158.23.144.198:17759] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acgBphkU3N0pg_4aEL_HjAAAAEU"]
[Sun Mar 29 00:28:22.635756 2026] [:error] [pid 64860:tid 64909] [client 158.23.144.198:17690] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acgBphkU3N0pg_4aEL_HjQAAAEE"]
[Sun Mar 29 00:28:23.029922 2026] [:error] [pid 2877:tid 2893] [client 158.23.144.198:17710] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acgBp7gM4xL1Xj409YQh2AAAAQ4"]
[Sun Mar 29 00:28:23.415282 2026] [:error] [pid 43578:tid 43590] [client 158.23.144.198:17858] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acgBp3NG2YdGm41aN8Jb_QAAAkk"]
[Sun Mar 29 00:28:23.802653 2026] [:error] [pid 43579:tid 43610] [client 158.23.144.198:17716] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acgBpyRqN4JVI8gB7AkT7wAAAoI"]
[Sun Mar 29 00:28:24.199604 2026] [:error] [pid 43578:tid 43592] [client 158.23.144.198:17712] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjfl.php"] [unique_id "acgBqHNG2YdGm41aN8JcAwAAAks"]
[Sun Mar 29 00:28:24.583994 2026] [:error] [pid 64861:tid 64951] [client 158.23.144.198:17602] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjfl.php"] [unique_id "acgBqOxK22_lUN2kvnXOYwAAAJA"]
[Sun Mar 29 00:28:24.973316 2026] [:error] [pid 43578:tid 43591] [client 158.23.144.198:17626] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjfl.php"] [unique_id "acgBqHNG2YdGm41aN8JcBgAAAko"]
[Sun Mar 29 00:28:25.387771 2026] [:error] [pid 43578:tid 43585] [client 158.23.144.198:17621] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjfl.php"] [unique_id "acgBqXNG2YdGm41aN8JcCQAAAkQ"]
[Sun Mar 29 00:28:25.829903 2026] [:error] [pid 64861:tid 64948] [client 158.23.144.198:17725] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "acgBqexK22_lUN2kvnXOZwAAAI0"]
[Sun Mar 29 00:28:26.219481 2026] [:error] [pid 34597:tid 34616] [client 158.23.144.198:17771] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "acgBqoluI7-e5s1cafe86wAAAU8"]
[Sun Mar 29 00:28:26.614164 2026] [:error] [pid 34597:tid 34625] [client 158.23.144.198:17676] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "acgBqoluI7-e5s1cafe87QAAAVg"]
[Sun Mar 29 00:28:27.002382 2026] [:error] [pid 64860:tid 64916] [client 158.23.144.198:17601] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "acgBqxkU3N0pg_4aEL_HlQAAAEg"]
[Sun Mar 29 00:28:27.402318 2026] [:error] [pid 64860:tid 64922] [client 158.23.144.198:17727] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acgBqxkU3N0pg_4aEL_HlwAAAE4"]
[Sun Mar 29 00:28:27.787464 2026] [:error] [pid 64966:tid 64990] [client 158.23.144.198:17781] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acgBq9fSvF5AFfSuKxVMnQAAANE"]
[Sun Mar 29 00:28:28.203489 2026] [:error] [pid 64859:tid 64891] [client 158.23.144.198:17685] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acgBrG3qEBHXq3rHdBmJCwAAAAo"]
[Sun Mar 29 00:28:28.618906 2026] [:error] [pid 64861:tid 64936] [client 158.23.144.198:17613] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acgBrOxK22_lUN2kvnXOaQAAAIE"]
[Sun Mar 29 00:28:29.048569 2026] [:error] [pid 43578:tid 43583] [client 158.23.144.198:17609] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2ksm17n.php"] [unique_id "acgBrXNG2YdGm41aN8JcDgAAAkI"]
[Sun Mar 29 00:28:29.453583 2026] [:error] [pid 43578:tid 43591] [client 158.23.144.198:17657] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2ksm17n.php"] [unique_id "acgBrXNG2YdGm41aN8JcEgAAAko"]
[Sun Mar 29 00:28:29.893696 2026] [:error] [pid 43578:tid 43595] [client 158.23.144.198:17689] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2ksm17n.php"] [unique_id "acgBrXNG2YdGm41aN8JcFAAAAk4"]
[Sun Mar 29 00:28:30.313731 2026] [:error] [pid 34597:tid 34613] [client 158.23.144.198:17667] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2ksm17n.php"] [unique_id "acgBroluI7-e5s1cafe88QAAAUw"]
[Sun Mar 29 00:28:30.757491 2026] [:error] [pid 43579:tid 43625] [client 158.23.144.198:17767] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acgBriRqN4JVI8gB7AkT9gAAApE"]
[Sun Mar 29 00:28:31.183510 2026] [:error] [pid 64861:tid 64946] [client 158.23.144.198:17666] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acgBr-xK22_lUN2kvnXObQAAAIs"]
[Sun Mar 29 00:28:31.597594 2026] [:error] [pid 34631:tid 34678] [client 158.23.144.198:17677] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acgBrztzjMMS6kojpeSXyAAAAdI"]
[Sun Mar 29 00:28:32.052984 2026] [:error] [pid 34631:tid 34662] [client 158.23.144.198:17791] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acgBsDtzjMMS6kojpeSXzAAAAcI"]
[Sun Mar 29 00:28:32.439500 2026] [:error] [pid 43578:tid 43586] [client 158.23.144.198:17604] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "acgBsHNG2YdGm41aN8JcGAAAAkU"]
[Sun Mar 29 00:28:32.892482 2026] [:error] [pid 43578:tid 43591] [client 158.23.144.198:17600] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "acgBsHNG2YdGm41aN8JcGgAAAko"]
[Sun Mar 29 00:28:33.291114 2026] [:error] [pid 64861:tid 64947] [client 158.23.144.198:17747] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "acgBsexK22_lUN2kvnXObwAAAIw"]
[Sun Mar 29 00:28:33.679188 2026] [:error] [pid 34631:tid 34670] [client 158.23.144.198:17623] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "acgBsTtzjMMS6kojpeSX0AAAAco"]
[Sun Mar 29 00:28:34.089872 2026] [:error] [pid 34597:tid 34623] [client 158.23.144.198:17728] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acgBsoluI7-e5s1cafe88wAAAVY"]
[Sun Mar 29 00:28:34.480843 2026] [:error] [pid 64861:tid 64954] [client 158.23.144.198:17695] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acgBsuxK22_lUN2kvnXOcAAAAJM"]
[Sun Mar 29 00:28:34.871332 2026] [:error] [pid 34597:tid 34609] [client 158.23.144.198:17678] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acgBsoluI7-e5s1cafe89gAAAUg"]
[Sun Mar 29 00:28:35.272100 2026] [:error] [pid 64860:tid 64925] [client 158.23.144.198:17636] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acgBsxkU3N0pg_4aEL_HpQAAAFE"]
[Sun Mar 29 00:28:35.698701 2026] [:error] [pid 64859:tid 64881] [client 158.23.144.198:17855] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acgBs23qEBHXq3rHdBmJEAAAAAA"]
[Sun Mar 29 00:28:36.105872 2026] [:error] [pid 64860:tid 64932] [client 158.23.144.198:17612] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acgBtBkU3N0pg_4aEL_HqAAAAFg"]
[Sun Mar 29 00:28:36.518503 2026] [:error] [pid 64859:tid 64887] [client 158.23.144.198:17698] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acgBtG3qEBHXq3rHdBmJEQAAAAY"]
[Sun Mar 29 00:28:36.974886 2026] [:error] [pid 43579:tid 43624] [client 158.23.144.198:17780] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acgBtCRqN4JVI8gB7AkT-gAAApA"]
[Sun Mar 29 00:28:37.403003 2026] [:error] [pid 34597:tid 34603] [client 158.23.144.198:17611] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "acgBtYluI7-e5s1cafe8-wAAAUI"]
[Sun Mar 29 00:28:37.851310 2026] [:error] [pid 43547:tid 43564] [client 158.23.144.198:17640] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "acgBtT4ZEfdetXP-9aAXFAAAAg8"]
[Sun Mar 29 00:28:38.248912 2026] [:error] [pid 43578:tid 43591] [client 158.23.144.198:17615] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "acgBtnNG2YdGm41aN8JcJAAAAko"]
[Sun Mar 29 00:28:38.637307 2026] [:error] [pid 43578:tid 43585] [client 158.23.144.198:17656] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "acgBtnNG2YdGm41aN8JcJwAAAkQ"]
[Sun Mar 29 00:28:39.076291 2026] [:error] [pid 43578:tid 43595] [client 158.23.144.198:17539] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acgBt3NG2YdGm41aN8JcKgAAAk4"]
[Sun Mar 29 00:28:39.592565 2026] [:error] [pid 64860:tid 64924] [client 158.23.144.198:17688] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acgBtxkU3N0pg_4aEL_HrgAAAFA"]
[Sun Mar 29 00:28:40.040145 2026] [:error] [pid 43579:tid 43628] [client 158.23.144.198:17664] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acgBuCRqN4JVI8gB7AkT_wAAApQ"]
[Sun Mar 29 00:28:40.449879 2026] [:error] [pid 43578:tid 43584] [client 158.23.144.198:17699] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acgBuHNG2YdGm41aN8JcMQAAAkM"]
[Sun Mar 29 00:28:40.840130 2026] [:error] [pid 34597:tid 34604] [client 158.23.144.198:17554] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "acgBuIluI7-e5s1cafe8_QAAAUM"]
[Sun Mar 29 00:28:41.255368 2026] [:error] [pid 43578:tid 43582] [client 158.23.144.198:17648] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "acgBuXNG2YdGm41aN8JcNgAAAkE"]
[Sun Mar 29 00:28:41.669485 2026] [:error] [pid 64966:tid 64987] [client 158.23.144.198:17637] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "acgBudfSvF5AFfSuKxVMoQAAAM4"]
[Sun Mar 29 00:28:42.103549 2026] [:error] [pid 43578:tid 43602] [client 158.23.144.198:17606] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "acgBunNG2YdGm41aN8JcOgAAAlU"]
[Sun Mar 29 00:28:42.534530 2026] [:error] [pid 64860:tid 64920] [client 158.23.144.198:17700] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acgBuhkU3N0pg_4aEL_HsgAAAEw"]
[Sun Mar 29 00:28:42.918599 2026] [:error] [pid 64860:tid 64923] [client 158.23.144.198:17549] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acgBuhkU3N0pg_4aEL_HswAAAE8"]
[Sun Mar 29 00:28:43.369101 2026] [:error] [pid 43578:tid 43582] [client 158.23.144.198:17649] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acgBu3NG2YdGm41aN8JcQgAAAkE"]
[Sun Mar 29 00:28:43.757159 2026] [:error] [pid 64859:tid 64900] [client 158.23.144.198:17641] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acgBu23qEBHXq3rHdBmJGgAAABM"]
[Sun Mar 29 00:28:44.147124 2026] [:error] [pid 64859:tid 64894] [client 158.23.144.198:17772] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "acgBvG3qEBHXq3rHdBmJHAAAAA0"]
[Sun Mar 29 00:28:44.576856 2026] [:error] [pid 64859:tid 64881] [client 158.23.144.198:17614] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "acgBvG3qEBHXq3rHdBmJHgAAAAA"]
[Sun Mar 29 00:28:45.036052 2026] [:error] [pid 43578:tid 43602] [client 158.23.144.198:17702] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "acgBvXNG2YdGm41aN8JcRQAAAlU"]
[Sun Mar 29 00:28:45.531614 2026] [:error] [pid 43578:tid 43586] [client 158.23.144.198:17588] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "acgBvXNG2YdGm41aN8JcSAAAAkU"]
[Sun Mar 29 00:28:45.948136 2026] [:error] [pid 64861:tid 64939] [client 158.23.144.198:17881] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acgBvexK22_lUN2kvnXOdgAAAIQ"]
[Sun Mar 29 00:28:46.387721 2026] [:error] [pid 64966:tid 64984] [client 158.23.144.198:17786] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acgBvtfSvF5AFfSuKxVMpQAAAMs"]
[Sun Mar 29 00:28:46.862391 2026] [:error] [pid 64966:tid 64988] [client 158.23.144.198:17652] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acgBvtfSvF5AFfSuKxVMpgAAAM8"]
[Sun Mar 29 00:28:47.249639 2026] [:error] [pid 64859:tid 64892] [client 158.23.144.198:17846] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acgBv23qEBHXq3rHdBmJIgAAAAs"]
[Sun Mar 29 00:28:47.653873 2026] [:error] [pid 64861:tid 64943] [client 158.23.144.198:17632] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgBv-xK22_lUN2kvnXOeAAAAIg"]
[Sun Mar 29 00:28:48.131034 2026] [:error] [pid 64860:tid 64921] [client 158.23.144.198:17548] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgBwBkU3N0pg_4aEL_HtQAAAE0"]
[Sun Mar 29 00:28:48.512570 2026] [:error] [pid 34631:tid 34677] [client 158.23.144.198:17565] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgBwDtzjMMS6kojpeSX2wAAAdE"]
[Sun Mar 29 00:28:48.916930 2026] [:error] [pid 43578:tid 43582] [client 158.23.144.198:17778] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acgBwHNG2YdGm41aN8JcVQAAAkE"]
[Sun Mar 29 00:28:49.359840 2026] [:error] [pid 43578:tid 43589] [client 158.23.144.198:17751] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acgBwXNG2YdGm41aN8JcWwAAAkg"]
[Sun Mar 29 00:28:49.757319 2026] [:error] [pid 43578:tid 43594] [client 158.23.144.198:17708] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acgBwXNG2YdGm41aN8JcXQAAAk0"]
[Sun Mar 29 00:28:50.183739 2026] [:error] [pid 43578:tid 43584] [client 158.23.144.198:17651] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acgBwnNG2YdGm41aN8JcYQAAAkM"]
[Sun Mar 29 00:28:50.574696 2026] [:error] [pid 64861:tid 64954] [client 158.23.144.198:17650] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acgBwuxK22_lUN2kvnXOewAAAJM"]
[Sun Mar 29 00:28:51.011091 2026] [:error] [pid 64861:tid 64959] [client 158.23.144.198:17622] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "acgBw-xK22_lUN2kvnXOfgAAAJg"]
[Sun Mar 29 00:28:51.395174 2026] [:error] [pid 64861:tid 64952] [client 158.23.144.198:17714] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "acgBw-xK22_lUN2kvnXOfwAAAJE"]
[Sun Mar 29 00:28:51.811270 2026] [:error] [pid 64860:tid 64926] [client 158.23.144.198:17644] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "acgBwxkU3N0pg_4aEL_HuQAAAFI"]
[Sun Mar 29 00:28:52.212609 2026] [:error] [pid 64861:tid 64957] [client 158.23.144.198:17624] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "acgBxOxK22_lUN2kvnXOgwAAAJY"]
[Sun Mar 29 00:28:52.605889 2026] [:error] [pid 43578:tid 43590] [client 158.23.144.198:17691] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acgBxHNG2YdGm41aN8JcawAAAkk"]
[Sun Mar 29 00:28:53.001745 2026] [:error] [pid 34631:tid 34683] [client 158.23.144.198:17553] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acgBxTtzjMMS6kojpeSX5wAAAdc"]
[Sun Mar 29 00:28:53.389111 2026] [:error] [pid 34631:tid 34668] [client 158.23.144.198:17782] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acgBxTtzjMMS6kojpeSX6AAAAcg"]
[Sun Mar 29 00:28:53.781121 2026] [:error] [pid 2877:tid 2896] [client 158.23.144.198:17701] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acgBxbgM4xL1Xj409YQh3wAAARE"]
[Sun Mar 29 00:28:59.314248 2026] [:error] [pid 64860:tid 64928] [client 158.23.144.198:17638] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "acgByxkU3N0pg_4aEL_HxgAAAFQ"]
[Sun Mar 29 00:28:59.754248 2026] [:error] [pid 43578:tid 43597] [client 158.23.144.198:17556] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "acgBy3NG2YdGm41aN8JceQAAAlA"]
[Sun Mar 29 00:29:00.171072 2026] [:error] [pid 64861:tid 64957] [client 158.23.144.198:17560] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "acgBzOxK22_lUN2kvnXOowAAAJY"]
[Sun Mar 29 00:29:00.633855 2026] [:error] [pid 43578:tid 43592] [client 158.23.144.198:17537] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "acgBzHNG2YdGm41aN8JcfgAAAks"]
[Sun Mar 29 00:29:01.018085 2026] [:error] [pid 43578:tid 43599] [client 158.23.144.198:17718] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgBzXNG2YdGm41aN8JcgAAAAlI"]
[Sun Mar 29 00:29:01.417278 2026] [:error] [pid 43579:tid 43613] [client 158.23.144.198:17675] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgBzSRqN4JVI8gB7AkUBAAAAoU"]
[Sun Mar 29 00:29:01.845280 2026] [:error] [pid 34631:tid 34673] [client 158.23.144.198:17635] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgBzTtzjMMS6kojpeSYAAAAAc0"]
[Sun Mar 29 00:29:02.233117 2026] [:error] [pid 34631:tid 34684] [client 158.23.144.198:17547] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgBzjtzjMMS6kojpeSYAQAAAdg"]
[Sun Mar 29 00:29:02.685095 2026] [:error] [pid 43579:tid 43624] [client 158.23.144.198:17566] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "acgBziRqN4JVI8gB7AkUBQAAApA"]
[Sun Mar 29 00:29:03.109447 2026] [:error] [pid 43579:tid 43627] [client 158.23.144.198:17597] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "acgBzyRqN4JVI8gB7AkUBwAAApM"]
[Sun Mar 29 00:29:03.502599 2026] [:error] [pid 34631:tid 34667] [client 158.23.144.198:17719] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "acgBzztzjMMS6kojpeSYBgAAAcc"]
[Sun Mar 29 00:29:04.027322 2026] [:error] [pid 64860:tid 64929] [client 158.23.144.198:17559] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "acgB0BkU3N0pg_4aEL_HyQAAAFU"]
[Sun Mar 29 00:29:04.446626 2026] [:error] [pid 43578:tid 43585] [client 158.23.144.198:17579] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acgB0HNG2YdGm41aN8JcjgAAAkQ"]
[Sun Mar 29 00:29:04.858554 2026] [:error] [pid 43578:tid 43586] [client 158.23.144.198:17616] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acgB0HNG2YdGm41aN8JckQAAAkU"]
[Sun Mar 29 00:29:05.308830 2026] [:error] [pid 43578:tid 43587] [client 158.23.144.198:17647] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acgB0XNG2YdGm41aN8JclAAAAkY"]
[Sun Mar 29 00:29:05.784509 2026] [:error] [pid 43579:tid 43628] [client 158.23.144.198:17590] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acgB0SRqN4JVI8gB7AkUCgAAApQ"]
[Sun Mar 29 00:29:06.200393 2026] [:error] [pid 2877:tid 2893] [client 158.23.144.198:17639] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acgB0rgM4xL1Xj409YQh4gAAAQ4"]
[Sun Mar 29 00:29:06.663821 2026] [:error] [pid 2877:tid 2880] [client 158.23.144.198:17720] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acgB0rgM4xL1Xj409YQh5AAAAQE"]
[Sun Mar 29 00:29:07.046798 2026] [:error] [pid 64859:tid 64887] [client 158.23.144.198:17777] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acgB023qEBHXq3rHdBmJMgAAAAY"]
[Sun Mar 29 00:29:07.438836 2026] [:error] [pid 64859:tid 64882] [client 158.23.144.198:17713] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acgB023qEBHXq3rHdBmJMwAAAAE"]
[Sun Mar 29 00:29:07.849197 2026] [:error] [pid 43578:tid 43591] [client 158.23.144.198:17665] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acgB03NG2YdGm41aN8JcmQAAAko"]
[Sun Mar 29 00:29:08.236570 2026] [:error] [pid 64859:tid 64892] [client 158.23.144.198:17646] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acgB1G3qEBHXq3rHdBmJNQAAAAs"]
[Sun Mar 29 00:29:08.658740 2026] [:error] [pid 43578:tid 43585] [client 158.23.144.198:17538] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acgB1HNG2YdGm41aN8JcswAAAkQ"]
[Sun Mar 29 00:29:09.058383 2026] [:error] [pid 43578:tid 43595] [client 158.23.144.198:17576] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "acgB1XNG2YdGm41aN8JcvAAAAk4"]
[Sun Mar 29 00:29:09.446081 2026] [:error] [pid 34597:tid 34610] [client 158.23.144.198:17477] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acgB1YluI7-e5s1cafe9EwAAAUk"]
[Sun Mar 29 00:29:09.858119 2026] [:error] [pid 43578:tid 43585] [client 158.23.144.198:17540] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acgB1XNG2YdGm41aN8JcwwAAAkQ"]
[Sun Mar 29 00:29:10.247563 2026] [:error] [pid 64861:tid 64956] [client 158.23.144.198:17658] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acgB1uxK22_lUN2kvnXOsgAAAJU"]
[Sun Mar 29 00:29:10.659202 2026] [:error] [pid 64861:tid 64945] [client 158.23.144.198:17706] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "acgB1uxK22_lUN2kvnXOtwAAAIo"]
[Sun Mar 29 00:29:11.086075 2026] [:error] [pid 64861:tid 64942] [client 158.23.144.198:17693] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acgB1-xK22_lUN2kvnXOuAAAAIc"]
[Sun Mar 29 00:29:11.505012 2026] [:error] [pid 43578:tid 43595] [client 158.23.144.198:17599] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acgB13NG2YdGm41aN8JcxgAAAk4"]
[Sun Mar 29 00:29:11.950085 2026] [:error] [pid 64861:tid 64939] [client 158.23.144.198:17679] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acgB1-xK22_lUN2kvnXOvAAAAIQ"]
[Sun Mar 29 00:29:12.352707 2026] [:error] [pid 34597:tid 34617] [client 158.23.144.198:17569] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acgB2IluI7-e5s1cafe9FwAAAVA"]
[Sun Mar 29 00:29:12.821920 2026] [:error] [pid 34631:tid 34661] [client 158.23.144.198:17568] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws73.php"] [unique_id "acgB2DtzjMMS6kojpeSYCwAAAcE"]
[Sun Mar 29 00:29:13.223815 2026] [:error] [pid 43578:tid 43597] [client 158.23.144.198:17610] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws73.php"] [unique_id "acgB2XNG2YdGm41aN8JczgAAAlA"]
[Sun Mar 29 00:29:13.617920 2026] [:error] [pid 64861:tid 64956] [client 158.23.144.198:17654] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws73.php"] [unique_id "acgB2exK22_lUN2kvnXOvwAAAJU"]
[Sun Mar 29 00:29:14.000551 2026] [:error] [pid 64861:tid 64937] [client 158.23.144.198:17473] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws73.php"] [unique_id "acgB2exK22_lUN2kvnXOwQAAAII"]
[Sun Mar 29 00:29:14.390903 2026] [:error] [pid 43578:tid 43585] [client 158.23.144.198:17514] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgB2nNG2YdGm41aN8Jc1QAAAkQ"]
[Sun Mar 29 00:29:14.781829 2026] [:error] [pid 43547:tid 43573] [client 158.23.144.198:17543] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgB2j4ZEfdetXP-9aAXJgAAAhg"]
[Sun Mar 29 00:29:15.166416 2026] [:error] [pid 43578:tid 43604] [client 158.23.144.198:17630] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgB23NG2YdGm41aN8Jc3gAAAlc"]
[Sun Mar 29 00:29:15.549493 2026] [:error] [pid 43578:tid 43602] [client 158.23.144.198:17608] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgB23NG2YdGm41aN8Jc4AAAAlU"]
[Sun Mar 29 00:29:15.945913 2026] [:error] [pid 43578:tid 43603] [client 158.23.144.198:17571] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lowpr.php"] [unique_id "acgB23NG2YdGm41aN8Jc4wAAAlY"]
[Sun Mar 29 00:29:16.334095 2026] [:error] [pid 2877:tid 2886] [client 158.23.144.198:17797] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lowpr.php"] [unique_id "acgB3LgM4xL1Xj409YQh6QAAAQc"]
[Sun Mar 29 00:29:16.732207 2026] [:error] [pid 64861:tid 64942] [client 158.23.144.198:17491] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lowpr.php"] [unique_id "acgB3OxK22_lUN2kvnXOxAAAAIc"]
[Sun Mar 29 00:29:17.123395 2026] [:error] [pid 34631:tid 34668] [client 158.23.144.198:17659] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lowpr.php"] [unique_id "acgB3TtzjMMS6kojpeSYDwAAAcg"]
[Sun Mar 29 00:29:17.560278 2026] [:error] [pid 34631:tid 34674] [client 158.23.144.198:17634] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acgB3TtzjMMS6kojpeSYEAAAAc4"]
[Sun Mar 29 00:29:17.953857 2026] [:error] [pid 34631:tid 34664] [client 158.23.144.198:17558] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acgB3TtzjMMS6kojpeSYEQAAAcQ"]
[Sun Mar 29 00:29:18.376476 2026] [:error] [pid 34597:tid 34624] [client 158.23.144.198:17722] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acgB3oluI7-e5s1cafe9GwAAAVc"]
[Sun Mar 29 00:29:18.766013 2026] [:error] [pid 2877:tid 2879] [client 158.23.144.198:17578] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "acgB3rgM4xL1Xj409YQh6wAAAQA"]
[Sun Mar 29 00:29:19.208920 2026] [:error] [pid 64859:tid 64898] [client 158.23.144.198:17572] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "acgB323qEBHXq3rHdBmJQgAAABE"]
[Sun Mar 29 00:29:19.611317 2026] [:error] [pid 2877:tid 2895] [client 158.23.144.198:17542] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "acgB37gM4xL1Xj409YQh7AAAARA"]
[Sun Mar 29 00:29:19.999357 2026] [:error] [pid 64861:tid 64955] [client 158.23.144.198:17524] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "acgB3-xK22_lUN2kvnXOyAAAAJQ"]
[Sun Mar 29 00:29:20.416449 2026] [:error] [pid 64861:tid 64956] [client 158.23.144.198:17557] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "acgB4OxK22_lUN2kvnXOygAAAJU"]
[Sun Mar 29 00:29:20.811967 2026] [:error] [pid 34631:tid 34671] [client 158.23.144.198:17545] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acgB4DtzjMMS6kojpeSYFwAAAcs"]
[Sun Mar 29 00:29:21.219835 2026] [:error] [pid 64859:tid 64885] [client 158.23.144.198:17546] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acgB4W3qEBHXq3rHdBmJRwAAAAQ"]
[Sun Mar 29 00:29:21.604438 2026] [:error] [pid 43578:tid 43583] [client 158.23.144.198:17481] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acgB4XNG2YdGm41aN8Jc7AAAAkI"]
[Sun Mar 29 00:29:22.039697 2026] [:error] [pid 34597:tid 34616] [client 158.23.144.198:17773] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "acgB4oluI7-e5s1cafe9HwAAAU8"]
[Sun Mar 29 00:29:22.448304 2026] [:error] [pid 64859:tid 64883] [client 158.23.144.198:17564] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acgB4m3qEBHXq3rHdBmJSQAAAAI"]
[Sun Mar 29 00:29:22.865727 2026] [:error] [pid 64861:tid 64935] [client 158.23.144.198:17645] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acgB4uxK22_lUN2kvnXO0wAAAIA"]
[Sun Mar 29 00:29:23.270950 2026] [:error] [pid 64861:tid 64938] [client 158.23.144.198:17643] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acgB4-xK22_lUN2kvnXO1QAAAIM"]
[Sun Mar 29 00:29:23.659490 2026] [:error] [pid 64859:tid 64882] [client 158.23.144.198:17552] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "acgB423qEBHXq3rHdBmJTgAAAAE"]
[Sun Mar 29 00:29:24.058047 2026] [:error] [pid 64859:tid 64892] [client 158.23.144.198:17584] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acgB5G3qEBHXq3rHdBmJTwAAAAs"]
[Sun Mar 29 00:29:24.444903 2026] [:error] [pid 43547:tid 43551] [client 158.23.144.198:17511] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acgB5D4ZEfdetXP-9aAXKgAAAgI"]
[Sun Mar 29 00:29:24.839841 2026] [:error] [pid 64860:tid 64910] [client 158.23.144.198:17580] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acgB5BkU3N0pg_4aEL_H2QAAAEI"]
[Sun Mar 29 00:29:25.251643 2026] [:error] [pid 43579:tid 43610] [client 158.23.144.198:17620] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acgB5SRqN4JVI8gB7AkUDgAAAoI"]
[Sun Mar 29 00:29:25.694829 2026] [:error] [pid 2877:tid 2901] [client 158.23.144.198:17587] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "acgB5bgM4xL1Xj409YQh7wAAARY"]
[Sun Mar 29 00:29:26.115109 2026] [:error] [pid 2877:tid 2890] [client 158.23.144.198:17581] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "acgB5rgM4xL1Xj409YQh8AAAAQs"]
[Sun Mar 29 00:29:26.591608 2026] [:error] [pid 64861:tid 64948] [client 158.23.144.198:17570] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "acgB5uxK22_lUN2kvnXO1wAAAI0"]
[Sun Mar 29 00:29:26.974444 2026] [:error] [pid 34631:tid 34673] [client 158.23.144.198:17551] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "acgB5jtzjMMS6kojpeSYIgAAAc0"]
[Sun Mar 29 00:29:27.375122 2026] [:error] [pid 43547:tid 43562] [client 158.23.144.198:17867] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acgB5z4ZEfdetXP-9aAXLQAAAg0"]
[Sun Mar 29 00:29:27.758589 2026] [:error] [pid 43579:tid 43619] [client 158.23.144.198:17503] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acgB5yRqN4JVI8gB7AkUEgAAAos"]
[Sun Mar 29 00:29:28.142413 2026] [:error] [pid 64859:tid 64897] [client 158.23.144.198:17617] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acgB6G3qEBHXq3rHdBmJUQAAABA"]
[Sun Mar 29 00:29:28.526203 2026] [:error] [pid 64861:tid 64947] [client 158.23.144.198:17475] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acgB6OxK22_lUN2kvnXO3AAAAIw"]
[Sun Mar 29 00:29:28.936735 2026] [:error] [pid 43579:tid 43627] [client 158.23.144.198:17482] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "acgB6CRqN4JVI8gB7AkUFAAAApM"]
[Sun Mar 29 00:29:29.344955 2026] [:error] [pid 34631:tid 34661] [client 158.23.144.198:17585] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "acgB6TtzjMMS6kojpeSYIwAAAcE"]
[Sun Mar 29 00:29:29.727438 2026] [:error] [pid 34597:tid 34618] [client 158.23.144.198:17550] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "acgB6YluI7-e5s1cafe9JQAAAVE"]
[Sun Mar 29 00:29:30.140965 2026] [:error] [pid 34597:tid 34605] [client 158.23.144.198:17593] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "acgB6oluI7-e5s1cafe9JwAAAUQ"]
[Sun Mar 29 00:29:30.534327 2026] [:error] [pid 34631:tid 34681] [client 158.23.144.198:17525] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "acgB6jtzjMMS6kojpeSYJQAAAdU"]
[Sun Mar 29 00:29:30.917900 2026] [:error] [pid 64860:tid 64913] [client 158.23.144.198:17419] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "acgB6hkU3N0pg_4aEL_H3wAAAEU"]
[Sun Mar 29 00:29:31.348287 2026] [:error] [pid 64860:tid 64922] [client 158.23.144.198:17662] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "acgB6xkU3N0pg_4aEL_H4QAAAE4"]
[Sun Mar 29 00:29:31.745054 2026] [:error] [pid 64860:tid 64917] [client 158.23.144.198:17627] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "acgB6xkU3N0pg_4aEL_H5AAAAEk"]
[Sun Mar 29 00:29:32.155410 2026] [:error] [pid 64860:tid 64920] [client 158.23.144.198:17499] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acgB7BkU3N0pg_4aEL_H5QAAAEw"]
[Sun Mar 29 00:29:32.620754 2026] [:error] [pid 64860:tid 64923] [client 158.23.144.198:17487] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acgB7BkU3N0pg_4aEL_H5gAAAE8"]
[Sun Mar 29 00:29:33.051028 2026] [:error] [pid 34631:tid 34674] [client 158.23.144.198:17563] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acgB7TtzjMMS6kojpeSYKAAAAc4"]
[Sun Mar 29 00:29:33.446833 2026] [:error] [pid 34631:tid 34683] [client 158.23.144.198:17625] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acgB7TtzjMMS6kojpeSYKgAAAdc"]
[Sun Mar 29 00:29:33.841880 2026] [:error] [pid 64966:tid 64991] [client 158.23.144.198:17476] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acgB7dfSvF5AFfSuKxVMtAAAANI"]
[Sun Mar 29 00:29:34.258977 2026] [:error] [pid 64859:tid 64895] [client 158.23.144.198:17592] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acgB7m3qEBHXq3rHdBmJXAAAAA4"]
[Sun Mar 29 00:29:34.681076 2026] [:error] [pid 64859:tid 64897] [client 158.23.144.198:17532] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acgB7m3qEBHXq3rHdBmJXQAAABA"]
[Sun Mar 29 00:29:35.082507 2026] [:error] [pid 64859:tid 64899] [client 158.23.144.198:17541] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acgB723qEBHXq3rHdBmJYAAAABI"]
[Sun Mar 29 00:29:35.475422 2026] [:error] [pid 34631:tid 34679] [client 158.23.144.198:17526] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acgB7ztzjMMS6kojpeSYLAAAAdM"]
[Sun Mar 29 00:29:35.862297 2026] [:error] [pid 43547:tid 43571] [client 158.23.144.198:17486] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acgB7z4ZEfdetXP-9aAXMgAAAhY"]
[Sun Mar 29 00:29:36.257713 2026] [:error] [pid 64860:tid 64927] [client 158.23.144.198:17494] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acgB8BkU3N0pg_4aEL_H6gAAAFM"]
[Sun Mar 29 00:29:36.659656 2026] [:error] [pid 43547:tid 43552] [client 158.23.144.198:17663] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acgB8D4ZEfdetXP-9aAXNAAAAgM"]
[Sun Mar 29 00:29:37.049346 2026] [:error] [pid 43578:tid 43586] [client 158.23.144.198:17488] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acgB8XNG2YdGm41aN8Jc9wAAAkU"]
[Sun Mar 29 00:29:37.433642 2026] [:error] [pid 64860:tid 64921] [client 158.23.144.198:17591] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acgB8RkU3N0pg_4aEL_H6wAAAE0"]
[Sun Mar 29 00:29:37.817885 2026] [:error] [pid 64860:tid 64919] [client 158.23.144.198:17497] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acgB8RkU3N0pg_4aEL_H7AAAAEs"]
[Sun Mar 29 00:29:38.210206 2026] [:error] [pid 34631:tid 34670] [client 158.23.144.198:17509] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acgB8jtzjMMS6kojpeSYMAAAAco"]
[Sun Mar 29 00:29:38.591217 2026] [:error] [pid 64859:tid 64899] [client 158.23.144.198:17485] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acgB8m3qEBHXq3rHdBmJagAAABI"]
[Sun Mar 29 00:29:38.988372 2026] [:error] [pid 34631:tid 34663] [client 158.23.144.198:17907] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acgB8jtzjMMS6kojpeSYMgAAAcM"]
[Sun Mar 29 00:29:39.372480 2026] [:error] [pid 34631:tid 34664] [client 158.23.144.198:17704] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acgB8ztzjMMS6kojpeSYNwAAAcQ"]
[Sun Mar 29 00:29:39.758670 2026] [:error] [pid 43578:tid 43581] [client 158.23.144.198:17483] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acgB83NG2YdGm41aN8Jc-AAAAkA"]
[Sun Mar 29 00:29:40.144508 2026] [:error] [pid 34631:tid 34677] [client 158.23.144.198:17658] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acgB9DtzjMMS6kojpeSYOQAAAdE"]
[Sun Mar 29 00:29:40.590200 2026] [:error] [pid 34631:tid 34669] [client 158.23.144.198:17502] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acgB9DtzjMMS6kojpeSYPgAAAck"]
[Sun Mar 29 00:29:40.974489 2026] [:error] [pid 34631:tid 34678] [client 158.23.144.198:17660] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acgB9DtzjMMS6kojpeSYQAAAAdI"]
[Sun Mar 29 00:29:41.370047 2026] [:error] [pid 64859:tid 64903] [client 158.23.144.198:17508] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acgB9W3qEBHXq3rHdBmJbwAAABY"]
[Sun Mar 29 00:29:41.766935 2026] [:error] [pid 64859:tid 64896] [client 158.23.144.198:17555] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acgB9W3qEBHXq3rHdBmJcAAAAA8"]
[Sun Mar 29 00:29:42.152492 2026] [:error] [pid 34631:tid 34679] [client 158.23.144.198:17527] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acgB9jtzjMMS6kojpeSYSQAAAdM"]
[Sun Mar 29 00:29:42.547009 2026] [:error] [pid 34631:tid 34661] [client 158.23.144.198:17586] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acgB9jtzjMMS6kojpeSYSwAAAcE"]
[Sun Mar 29 00:29:42.928934 2026] [:error] [pid 64859:tid 64882] [client 158.23.144.198:17653] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acgB9m3qEBHXq3rHdBmJcgAAAAE"]
[Sun Mar 29 00:29:43.317930 2026] [:error] [pid 34631:tid 34668] [client 158.23.144.198:17490] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "acgB9ztzjMMS6kojpeSYUgAAAcg"]
[Sun Mar 29 00:29:43.700548 2026] [:error] [pid 64859:tid 64901] [client 158.23.144.198:17575] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "acgB923qEBHXq3rHdBmJdAAAABQ"]
[Sun Mar 29 00:29:44.083643 2026] [:error] [pid 64860:tid 64923] [client 158.23.144.198:17595] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "acgB-BkU3N0pg_4aEL_H8QAAAE8"]
[Sun Mar 29 00:29:44.474176 2026] [:error] [pid 64859:tid 64886] [client 158.23.144.198:17515] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "acgB-G3qEBHXq3rHdBmJdwAAAAU"]
[Sun Mar 29 00:29:44.867841 2026] [:error] [pid 64859:tid 64894] [client 158.23.144.198:17429] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "acgB-G3qEBHXq3rHdBmJeAAAAA0"]
[Sun Mar 29 00:29:45.250856 2026] [:error] [pid 64859:tid 64900] [client 158.23.144.198:17409] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "acgB-W3qEBHXq3rHdBmJegAAABM"]
[Sun Mar 29 00:29:45.639994 2026] [:error] [pid 64860:tid 64914] [client 158.23.144.198:17589] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "acgB-RkU3N0pg_4aEL_H8wAAAEY"]
[Sun Mar 29 00:29:46.022961 2026] [:error] [pid 2877:tid 2896] [client 158.23.144.198:17422] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "acgB-rgM4xL1Xj409YQh-AAAARE"]
[Sun Mar 29 00:29:46.416893 2026] [:error] [pid 43579:tid 43617] [client 158.23.144.198:17561] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "acgB-iRqN4JVI8gB7AkUHAAAAok"]
[Sun Mar 29 00:29:46.814842 2026] [:error] [pid 34631:tid 34675] [client 158.23.144.198:17474] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "acgB-jtzjMMS6kojpeSYWQAAAc8"]
[Sun Mar 29 00:29:47.196523 2026] [:error] [pid 34631:tid 34683] [client 158.23.144.198:17838] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "acgB-ztzjMMS6kojpeSYWgAAAdc"]
[Sun Mar 29 00:29:47.602784 2026] [:error] [pid 64860:tid 64918] [client 158.23.144.198:17411] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "acgB-xkU3N0pg_4aEL_H9gAAAEo"]
[Sun Mar 29 00:29:47.988010 2026] [:error] [pid 64861:tid 64941] [client 158.23.144.198:17536] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acgB--xK22_lUN2kvnXO6gAAAIY"]
[Sun Mar 29 00:29:48.372183 2026] [:error] [pid 34597:tid 34607] [client 158.23.144.198:17661] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acgB_IluI7-e5s1cafe9NAAAAUY"]
[Sun Mar 29 00:29:48.754487 2026] [:error] [pid 2877:tid 2880] [client 158.23.144.198:17463] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acgB_LgM4xL1Xj409YQh-gAAAQE"]
[Sun Mar 29 00:29:49.147520 2026] [:error] [pid 64859:tid 64886] [client 158.23.144.198:17412] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acgB_W3qEBHXq3rHdBmJgwAAAAU"]
[Sun Mar 29 00:29:49.531471 2026] [:error] [pid 34631:tid 34661] [client 158.23.144.198:17433] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acgB_TtzjMMS6kojpeSYWwAAAcE"]
[Sun Mar 29 00:29:49.914701 2026] [:error] [pid 64859:tid 64881] [client 158.23.144.198:17506] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acgB_W3qEBHXq3rHdBmJhgAAAAA"]
[Sun Mar 29 00:29:50.314226 2026] [:error] [pid 34631:tid 34674] [client 158.23.144.198:17655] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acgB_jtzjMMS6kojpeSYXgAAAc4"]
[Sun Mar 29 00:29:50.702293 2026] [:error] [pid 64861:tid 64935] [client 158.23.144.198:17420] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acgB_uxK22_lUN2kvnXO7wAAAIA"]
[Sun Mar 29 00:29:51.088995 2026] [:error] [pid 64861:tid 64938] [client 158.23.144.198:17492] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acgB_-xK22_lUN2kvnXO8AAAAIM"]
[Sun Mar 29 00:29:51.502026 2026] [:error] [pid 43547:tid 43564] [client 158.23.144.198:17478] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acgB_z4ZEfdetXP-9aAXOAAAAg8"]
[Sun Mar 29 00:29:51.892675 2026] [:error] [pid 43578:tid 43595] [client 158.23.144.198:17472] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acgB_3NG2YdGm41aN8Jc-wAAAk4"]
[Sun Mar 29 00:29:52.282473 2026] [:error] [pid 43578:tid 43598] [client 158.23.144.198:17589] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acgCAHNG2YdGm41aN8Jc_QAAAlE"]
[Sun Mar 29 00:29:52.673784 2026] [:error] [pid 43578:tid 43601] [client 158.23.144.198:17472] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acgCAHNG2YdGm41aN8Jc_gAAAlQ"]
[Sun Mar 29 00:29:53.068587 2026] [:error] [pid 43578:tid 43596] [client 158.23.144.198:17435] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acgCAXNG2YdGm41aN8JdAQAAAk8"]
[Sun Mar 29 00:29:53.465406 2026] [:error] [pid 43579:tid 43627] [client 158.23.144.198:17504] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acgCASRqN4JVI8gB7AkUIgAAApM"]
[Sun Mar 29 00:29:53.885136 2026] [:error] [pid 34597:tid 34622] [client 158.23.144.198:17516] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acgCAYluI7-e5s1cafe9OwAAAVU"]
[Sun Mar 29 00:29:54.282670 2026] [:error] [pid 64859:tid 64895] [client 158.23.144.198:17430] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acgCAm3qEBHXq3rHdBmJiwAAAA4"]
[Sun Mar 29 00:29:54.664500 2026] [:error] [pid 64859:tid 64900] [client 158.23.144.198:17496] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acgCAm3qEBHXq3rHdBmJjAAAABM"]
[Sun Mar 29 00:29:55.057925 2026] [:error] [pid 64966:tid 64974] [client 158.23.144.198:17414] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acgCA9fSvF5AFfSuKxVMtgAAAME"]
[Sun Mar 29 00:29:55.478733 2026] [:error] [pid 64859:tid 64896] [client 158.23.144.198:17457] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acgCA23qEBHXq3rHdBmJjQAAAA8"]
[Sun Mar 29 00:29:55.862426 2026] [:error] [pid 43579:tid 43631] [client 158.23.144.198:17445] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acgCAyRqN4JVI8gB7AkUJQAAApc"]
[Sun Mar 29 00:29:56.356594 2026] [:error] [pid 64859:tid 64905] [client 158.23.144.198:17534] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acgCBG3qEBHXq3rHdBmJjwAAABg"]
[Sun Mar 29 00:29:56.792925 2026] [:error] [pid 64861:tid 64940] [client 158.23.144.198:17529] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acgCBOxK22_lUN2kvnXO9AAAAIU"]
[Sun Mar 29 00:29:57.253481 2026] [:error] [pid 64861:tid 64956] [client 158.23.144.198:17423] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acgCBexK22_lUN2kvnXO9gAAAJU"]
[Sun Mar 29 00:29:57.658216 2026] [:error] [pid 64861:tid 64958] [client 158.23.144.198:17417] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acgCBexK22_lUN2kvnXO-QAAAJc"]
[Sun Mar 29 00:29:58.054096 2026] [:error] [pid 64859:tid 64885] [client 158.23.144.198:17523] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acgCBm3qEBHXq3rHdBmJkwAAAAQ"]
[Sun Mar 29 00:29:58.547802 2026] [:error] [pid 43579:tid 43612] [client 158.23.144.198:17567] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acgCBiRqN4JVI8gB7AkUJwAAAoQ"]
[Sun Mar 29 00:29:58.956098 2026] [:error] [pid 2877:tid 2881] [client 158.23.144.198:17583] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acgCBrgM4xL1Xj409YQh_gAAAQI"]
[Sun Mar 29 01:21:20.038774 2026] [:error] [pid 39427:tid 39456] [client 43.135.145.117:37974] [client 43.135.145.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acgOEFvLf0RDUqcYq-Y4WAAAABg"]
[Sun Mar 29 04:39:59.067562 2026] [:error] [pid 32359:tid 32379] [client 158.23.144.198:21746] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "acg8nwMb8G3UzfQP3WjCXgAAANI"]
[Sun Mar 29 04:39:59.545024 2026] [:error] [pid 32257:tid 32325] [client 158.23.144.198:21642] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "acg8nyE3TArOFrUtgWoWUQAAAIc"]
[Sun Mar 29 04:39:59.957874 2026] [:error] [pid 1524:tid 1546] [client 158.23.144.198:21640] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "acg8n1oaWSl2asqQCh8B0gAAAQ8"]
[Sun Mar 29 04:40:00.437641 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:21708] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "acg8oCE3TArOFrUtgWoWVgAAAJc"]
[Sun Mar 29 04:40:00.886480 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:21700] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acg8oCE3TArOFrUtgWoWVwAAAJU"]
[Sun Mar 29 04:40:01.290792 2026] [:error] [pid 32255:tid 32291] [client 158.23.144.198:21722] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acg8oWnfn-AtRoMbquw-IQAAAEA"]
[Sun Mar 29 04:40:01.769512 2026] [:error] [pid 32255:tid 32311] [client 158.23.144.198:21744] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acg8oWnfn-AtRoMbquw-IwAAAFQ"]
[Sun Mar 29 04:40:02.826901 2026] [:error] [pid 32359:tid 32374] [client 158.23.144.198:21751] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acg8ogMb8G3UzfQP3WjCYgAAAM0"]
[Sun Mar 29 04:40:03.293097 2026] [:error] [pid 32359:tid 32372] [client 158.23.144.198:21706] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acg8owMb8G3UzfQP3WjCZgAAAMs"]
[Sun Mar 29 04:40:03.710473 2026] [:error] [pid 32254:tid 32278] [client 158.23.144.198:21712] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acg8o6ug2IHuyGgCTn8GvgAAAA4"]
[Sun Mar 29 04:40:04.264915 2026] [:error] [pid 1524:tid 1547] [client 158.23.144.198:21652] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acg8pFoaWSl2asqQCh8B2AAAARA"]
[Sun Mar 29 04:40:04.816134 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:21696] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acg8pCE3TArOFrUtgWoWXQAAAIo"]
[Sun Mar 29 04:40:05.504123 2026] [:error] [pid 32255:tid 32302] [client 158.23.144.198:21742] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "acg8pWnfn-AtRoMbquw-JwAAAEs"]
[Sun Mar 29 04:40:06.041933 2026] [:error] [pid 32359:tid 32378] [client 158.23.144.198:21716] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "acg8pgMb8G3UzfQP3WjCbgAAANE"]
[Sun Mar 29 04:40:06.616074 2026] [:error] [pid 1524:tid 1545] [client 158.23.144.198:21710] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "acg8ploaWSl2asqQCh8B3gAAAQ4"]
[Sun Mar 29 04:40:08.254492 2026] [:error] [pid 32255:tid 32298] [client 158.23.144.198:21733] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "acg8qGnfn-AtRoMbquw-LwAAAEc"]
[Sun Mar 29 04:40:08.665871 2026] [:error] [pid 32255:tid 32302] [client 158.23.144.198:21570] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws47.php"] [unique_id "acg8qGnfn-AtRoMbquw-NAAAAEs"]
[Sun Mar 29 04:40:09.107985 2026] [:error] [pid 32359:tid 32367] [client 158.23.144.198:21701] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws47.php"] [unique_id "acg8qQMb8G3UzfQP3WjCdAAAAMY"]
[Sun Mar 29 04:40:09.698328 2026] [:error] [pid 32255:tid 32313] [client 158.23.144.198:21734] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws47.php"] [unique_id "acg8qWnfn-AtRoMbquw-NgAAAFY"]
[Sun Mar 29 04:40:10.211156 2026] [:error] [pid 32359:tid 32371] [client 158.23.144.198:21635] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws47.php"] [unique_id "acg8qgMb8G3UzfQP3WjCeAAAAMo"]
[Sun Mar 29 04:40:11.097605 2026] [:error] [pid 32254:tid 32271] [client 158.23.144.198:21662] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vvvb.php"] [unique_id "acg8q6ug2IHuyGgCTn8GwgAAAAc"]
[Sun Mar 29 04:40:11.682457 2026] [:error] [pid 32359:tid 32375] [client 158.23.144.198:21747] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vvvb.php"] [unique_id "acg8qwMb8G3UzfQP3WjCfAAAAM4"]
[Sun Mar 29 04:40:12.671089 2026] [:error] [pid 32359:tid 32382] [client 158.23.144.198:21754] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vvvb.php"] [unique_id "acg8rAMb8G3UzfQP3WjCfgAAANU"]
[Sun Mar 29 04:40:13.576575 2026] [:error] [pid 32359:tid 32363] [client 158.23.144.198:21684] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vvvb.php"] [unique_id "acg8rQMb8G3UzfQP3WjCgAAAAMI"]
[Sun Mar 29 04:40:14.167483 2026] [:error] [pid 32254:tid 32275] [client 158.23.144.198:21698] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x12.php"] [unique_id "acg8rqug2IHuyGgCTn8GxgAAAAs"]
[Sun Mar 29 04:40:14.703107 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:21656] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x12.php"] [unique_id "acg8riE3TArOFrUtgWoWdgAAAIo"]
[Sun Mar 29 04:40:15.153365 2026] [:error] [pid 32257:tid 32336] [client 158.23.144.198:21756] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x12.php"] [unique_id "acg8ryE3TArOFrUtgWoWeAAAAJI"]
[Sun Mar 29 04:40:15.723945 2026] [:error] [pid 32255:tid 32296] [client 158.23.144.198:21643] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x12.php"] [unique_id "acg8r2nfn-AtRoMbquw-PgAAAEU"]
[Sun Mar 29 04:40:16.301386 2026] [:error] [pid 32255:tid 32293] [client 158.23.144.198:21638] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcsu.php"] [unique_id "acg8sGnfn-AtRoMbquw-PwAAAEI"]
[Sun Mar 29 04:40:16.717311 2026] [:error] [pid 32255:tid 32308] [client 158.23.144.198:21748] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcsu.php"] [unique_id "acg8sGnfn-AtRoMbquw-QQAAAFE"]
[Sun Mar 29 04:40:17.191156 2026] [:error] [pid 1524:tid 1533] [client 158.23.144.198:21661] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcsu.php"] [unique_id "acg8sVoaWSl2asqQCh8B6gAAAQU"]
[Sun Mar 29 04:40:17.688828 2026] [:error] [pid 32257:tid 32327] [client 158.23.144.198:21578] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zcsu.php"] [unique_id "acg8sSE3TArOFrUtgWoWfwAAAIk"]
[Sun Mar 29 04:40:18.102760 2026] [:error] [pid 32255:tid 32315] [client 158.23.144.198:21697] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acg8smnfn-AtRoMbquw-QwAAAFg"]
[Sun Mar 29 04:40:18.721902 2026] [:error] [pid 32255:tid 32300] [client 158.23.144.198:21740] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acg8smnfn-AtRoMbquw-RgAAAEk"]
[Sun Mar 29 04:40:19.149547 2026] [:error] [pid 32359:tid 32372] [client 158.23.144.198:21632] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acg8swMb8G3UzfQP3WjCiAAAAMs"]
[Sun Mar 29 04:40:19.675918 2026] [:error] [pid 32255:tid 32313] [client 158.23.144.198:21519] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acg8s2nfn-AtRoMbquw-SAAAAFY"]
[Sun Mar 29 04:40:20.125457 2026] [:error] [pid 32359:tid 32364] [client 158.23.144.198:21727] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxs.php"] [unique_id "acg8tAMb8G3UzfQP3WjCiwAAAMM"]
[Sun Mar 29 04:40:20.517005 2026] [:error] [pid 32359:tid 32380] [client 158.23.144.198:21737] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxs.php"] [unique_id "acg8tAMb8G3UzfQP3WjCjAAAANM"]
[Sun Mar 29 04:40:20.988118 2026] [:error] [pid 32359:tid 32370] [client 158.23.144.198:21659] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxs.php"] [unique_id "acg8tAMb8G3UzfQP3WjCjwAAAMk"]
[Sun Mar 29 04:40:21.445984 2026] [:error] [pid 32255:tid 32298] [client 158.23.144.198:21607] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxs.php"] [unique_id "acg8tWnfn-AtRoMbquw-TgAAAEc"]
[Sun Mar 29 04:40:21.924685 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:21715] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acg8tSE3TArOFrUtgWoWjQAAAIY"]
[Sun Mar 29 04:40:22.351858 2026] [:error] [pid 32359:tid 32361] [client 158.23.144.198:21758] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acg8tgMb8G3UzfQP3WjCkwAAAMA"]
[Sun Mar 29 04:40:22.797305 2026] [:error] [pid 32255:tid 32308] [client 158.23.144.198:21718] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acg8tmnfn-AtRoMbquw-UwAAAFE"]
[Sun Mar 29 04:40:23.216041 2026] [:error] [pid 32255:tid 32315] [client 158.23.144.198:21689] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acg8t2nfn-AtRoMbquw-VAAAAFg"]
[Sun Mar 29 04:40:23.713794 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:21673] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acg8tyE3TArOFrUtgWoWjwAAAIg"]
[Sun Mar 29 04:40:24.129274 2026] [:error] [pid 32359:tid 32385] [client 158.23.144.198:21669] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acg8uAMb8G3UzfQP3WjCmAAAANg"]
[Sun Mar 29 04:40:24.540739 2026] [:error] [pid 1524:tid 1541] [client 158.23.144.198:21739] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acg8uFoaWSl2asqQCh8B7gAAAQo"]
[Sun Mar 29 04:40:24.938731 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:21681] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acg8uFoaWSl2asqQCh8B7wAAAQY"]
[Sun Mar 29 04:40:25.433686 2026] [:error] [pid 32257:tid 32323] [client 158.23.144.198:21729] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "acg8uSE3TArOFrUtgWoWkwAAAIU"]
[Sun Mar 29 04:40:26.001456 2026] [:error] [pid 32359:tid 32368] [client 158.23.144.198:21699] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "acg8ugMb8G3UzfQP3WjCnAAAAMc"]
[Sun Mar 29 04:40:26.502432 2026] [:error] [pid 1524:tid 1544] [client 158.23.144.198:21725] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "acg8uloaWSl2asqQCh8B8wAAAQ0"]
[Sun Mar 29 04:40:27.037842 2026] [:error] [pid 32255:tid 32291] [client 158.23.144.198:21721] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/24.php"] [unique_id "acg8u2nfn-AtRoMbquw-XAAAAEA"]
[Sun Mar 29 04:40:27.436581 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:21649] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz8.php"] [unique_id "acg8uyE3TArOFrUtgWoWmQAAAJM"]
[Sun Mar 29 04:40:27.868414 2026] [:error] [pid 1524:tid 1538] [client 158.23.144.198:21672] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz8.php"] [unique_id "acg8u1oaWSl2asqQCh8B9QAAAQk"]
[Sun Mar 29 04:40:28.349772 2026] [:error] [pid 32255:tid 32298] [client 158.23.144.198:21644] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz8.php"] [unique_id "acg8vGnfn-AtRoMbquw-XQAAAEc"]
[Sun Mar 29 04:40:28.781354 2026] [:error] [pid 32359:tid 32372] [client 158.23.144.198:21753] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zz8.php"] [unique_id "acg8vAMb8G3UzfQP3WjCogAAAMs"]
[Sun Mar 29 04:40:29.310027 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:21614] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feokc.php"] [unique_id "acg8vSE3TArOFrUtgWoWngAAAII"]
[Sun Mar 29 04:40:29.724013 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:21736] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feokc.php"] [unique_id "acg8vSE3TArOFrUtgWoWoQAAAIs"]
[Sun Mar 29 04:40:30.171032 2026] [:error] [pid 32254:tid 32267] [client 158.23.144.198:21704] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feokc.php"] [unique_id "acg8vqug2IHuyGgCTn8G0QAAAAM"]
[Sun Mar 29 04:40:30.586679 2026] [:error] [pid 32254:tid 32277] [client 158.23.144.198:21651] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feokc.php"] [unique_id "acg8vqug2IHuyGgCTn8G0wAAAA0"]
[Sun Mar 29 04:40:31.015194 2026] [:error] [pid 1524:tid 1545] [client 158.23.144.198:21757] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "acg8v1oaWSl2asqQCh8B-gAAAQ4"]
[Sun Mar 29 04:40:31.535791 2026] [:error] [pid 1524:tid 1531] [client 158.23.144.198:21671] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "acg8v1oaWSl2asqQCh8B_AAAAQM"]
[Sun Mar 29 04:40:32.054610 2026] [:error] [pid 32257:tid 32325] [client 158.23.144.198:21709] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "acg8wCE3TArOFrUtgWoWpQAAAIc"]
[Sun Mar 29 04:40:32.469250 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:21573] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "acg8wCE3TArOFrUtgWoWqAAAAJg"]
[Sun Mar 29 04:40:32.907354 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:21654] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpmini.php"] [unique_id "acg8wCE3TArOFrUtgWoWrAAAAII"]
[Sun Mar 29 04:40:33.396196 2026] [:error] [pid 32257:tid 32334] [client 158.23.144.198:21587] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpmini.php"] [unique_id "acg8wSE3TArOFrUtgWoWsgAAAJA"]
[Sun Mar 29 04:40:33.817648 2026] [:error] [pid 32254:tid 32268] [client 158.23.144.198:21596] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpmini.php"] [unique_id "acg8waug2IHuyGgCTn8G1gAAAAQ"]
[Sun Mar 29 04:40:34.396972 2026] [:error] [pid 32257:tid 32333] [client 158.23.144.198:21658] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpmini.php"] [unique_id "acg8wiE3TArOFrUtgWoWtQAAAI8"]
[Sun Mar 29 04:40:34.794092 2026] [:error] [pid 32257:tid 32338] [client 158.23.144.198:21606] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "acg8wiE3TArOFrUtgWoWuAAAAJQ"]
[Sun Mar 29 04:40:35.287643 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:21743] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "acg8wyE3TArOFrUtgWoWuwAAAJU"]
[Sun Mar 29 04:40:35.762965 2026] [:error] [pid 1524:tid 1528] [client 158.23.144.198:21759] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "acg8w1oaWSl2asqQCh8CBAAAAQE"]
[Sun Mar 29 04:40:36.170361 2026] [:error] [pid 1524:tid 1548] [client 158.23.144.198:21752] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "acg8xFoaWSl2asqQCh8CBgAAARE"]
[Sun Mar 29 04:40:36.571915 2026] [:error] [pid 32359:tid 32367] [client 158.23.144.198:21667] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tbute.php"] [unique_id "acg8xAMb8G3UzfQP3WjCrQAAAMY"]
[Sun Mar 29 04:40:37.001144 2026] [:error] [pid 32359:tid 32371] [client 158.23.144.198:21678] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tbute.php"] [unique_id "acg8xQMb8G3UzfQP3WjCsAAAAMo"]
[Sun Mar 29 04:40:37.393864 2026] [:error] [pid 1524:tid 1549] [client 158.23.144.198:21633] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tbute.php"] [unique_id "acg8xVoaWSl2asqQCh8CCwAAARI"]
[Sun Mar 29 04:40:37.795634 2026] [:error] [pid 1524:tid 1547] [client 158.23.144.198:21589] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tbute.php"] [unique_id "acg8xVoaWSl2asqQCh8CDgAAARA"]
[Sun Mar 29 04:40:38.309785 2026] [:error] [pid 1524:tid 1545] [client 158.23.144.198:21688] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rovoj.php"] [unique_id "acg8xloaWSl2asqQCh8CEQAAAQ4"]
[Sun Mar 29 04:40:38.748750 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:21624] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rovoj.php"] [unique_id "acg8xiE3TArOFrUtgWoWyAAAAJU"]
[Sun Mar 29 04:40:39.200329 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:21580] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rovoj.php"] [unique_id "acg8xyE3TArOFrUtgWoWzAAAAJM"]
[Sun Mar 29 04:40:40.163790 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:21703] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rovoj.php"] [unique_id "acg8yCE3TArOFrUtgWoW0QAAAIE"]
[Sun Mar 29 04:40:40.578846 2026] [:error] [pid 32359:tid 32375] [client 158.23.144.198:21602] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r3grt7.php"] [unique_id "acg8yAMb8G3UzfQP3WjCtQAAAM4"]
[Sun Mar 29 04:40:41.005671 2026] [:error] [pid 32257:tid 32333] [client 158.23.144.198:21679] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r3grt7.php"] [unique_id "acg8ySE3TArOFrUtgWoW1QAAAI8"]
[Sun Mar 29 04:40:41.506045 2026] [:error] [pid 32257:tid 32331] [client 158.23.144.198:21639] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r3grt7.php"] [unique_id "acg8ySE3TArOFrUtgWoW1wAAAI0"]
[Sun Mar 29 04:40:42.012605 2026] [:error] [pid 32255:tid 32296] [client 158.23.144.198:21686] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r3grt7.php"] [unique_id "acg8ymnfn-AtRoMbquw-bgAAAEU"]
[Sun Mar 29 04:40:42.430079 2026] [:error] [pid 32359:tid 32363] [client 158.23.144.198:21637] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phina.php"] [unique_id "acg8ygMb8G3UzfQP3WjCuQAAAMI"]
[Sun Mar 29 04:40:42.949007 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:21732] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phina.php"] [unique_id "acg8yloaWSl2asqQCh8CEwAAAQY"]
[Sun Mar 29 04:40:43.386000 2026] [:error] [pid 32255:tid 32314] [client 158.23.144.198:21724] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phina.php"] [unique_id "acg8y2nfn-AtRoMbquw-bwAAAFc"]
[Sun Mar 29 04:40:44.375102 2026] [:error] [pid 32359:tid 32361] [client 158.23.144.198:21574] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phina.php"] [unique_id "acg8zAMb8G3UzfQP3WjCvQAAAMA"]
[Sun Mar 29 04:40:45.246509 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:21648] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acg8zSE3TArOFrUtgWoW6QAAAII"]
[Sun Mar 29 04:40:46.405719 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:21691] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acg8ziE3TArOFrUtgWoW7AAAAJM"]
[Sun Mar 29 04:40:46.888328 2026] [:error] [pid 32257:tid 32322] [client 158.23.144.198:21636] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acg8ziE3TArOFrUtgWoW7wAAAIQ"]
[Sun Mar 29 04:40:47.281346 2026] [:error] [pid 1524:tid 1533] [client 158.23.144.198:21645] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acg8z1oaWSl2asqQCh8CHQAAAQU"]
[Sun Mar 29 04:40:47.837654 2026] [:error] [pid 32257:tid 32338] [client 158.23.144.198:21583] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "acg8zyE3TArOFrUtgWoW9AAAAJQ"]
[Sun Mar 29 04:40:48.274293 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:21668] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "acg80CE3TArOFrUtgWoW9gAAAIA"]
[Sun Mar 29 04:40:48.730693 2026] [:error] [pid 32257:tid 32331] [client 158.23.144.198:21717] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "acg80CE3TArOFrUtgWoW-gAAAI0"]
[Sun Mar 29 04:40:49.707247 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:21634] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "acg80SE3TArOFrUtgWoW_gAAAJc"]
[Sun Mar 29 04:40:50.157666 2026] [:error] [pid 1524:tid 1543] [client 158.23.144.198:21576] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "acg80loaWSl2asqQCh8CJAAAAQw"]
[Sun Mar 29 04:40:50.880306 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:21663] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "acg80iE3TArOFrUtgWoXAgAAAIo"]
[Sun Mar 29 04:40:51.333069 2026] [:error] [pid 32255:tid 32299] [client 158.23.144.198:21504] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "acg802nfn-AtRoMbquw-dwAAAEg"]
[Sun Mar 29 04:40:51.730743 2026] [:error] [pid 32257:tid 32331] [client 158.23.144.198:21705] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "acg80yE3TArOFrUtgWoXBgAAAI0"]
[Sun Mar 29 04:40:52.151366 2026] [:error] [pid 1524:tid 1548] [client 158.23.144.198:21666] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kbfr.php"] [unique_id "acg81FoaWSl2asqQCh8CJgAAARE"]
[Sun Mar 29 04:40:52.781491 2026] [:error] [pid 32257:tid 32332] [client 158.23.144.198:21687] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kbfr.php"] [unique_id "acg81CE3TArOFrUtgWoXCQAAAI4"]
[Sun Mar 29 04:40:53.188055 2026] [:error] [pid 32359:tid 32364] [client 158.23.144.198:21611] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kbfr.php"] [unique_id "acg81QMb8G3UzfQP3WjCwQAAAMM"]
[Sun Mar 29 04:40:53.763425 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:21707] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kbfr.php"] [unique_id "acg81SE3TArOFrUtgWoXDQAAAIE"]
[Sun Mar 29 04:40:54.239705 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:21650] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/595.php"] [unique_id "acg81iE3TArOFrUtgWoXEQAAAIg"]
[Sun Mar 29 04:40:54.727178 2026] [:error] [pid 32257:tid 32321] [client 158.23.144.198:21749] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/595.php"] [unique_id "acg81iE3TArOFrUtgWoXFAAAAIM"]
[Sun Mar 29 04:40:55.166772 2026] [:error] [pid 32257:tid 32332] [client 158.23.144.198:21517] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/595.php"] [unique_id "acg81yE3TArOFrUtgWoXFQAAAI4"]
[Sun Mar 29 04:40:55.619469 2026] [:error] [pid 1524:tid 1538] [client 158.23.144.198:21568] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/595.php"] [unique_id "acg811oaWSl2asqQCh8CKwAAAQk"]
[Sun Mar 29 04:40:56.060313 2026] [:error] [pid 32257:tid 32334] [client 158.23.144.198:21657] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "acg82CE3TArOFrUtgWoXFwAAAJA"]
[Sun Mar 29 04:40:56.553131 2026] [:error] [pid 32255:tid 32308] [client 158.23.144.198:21731] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "acg82Gnfn-AtRoMbquw-ewAAAFE"]
[Sun Mar 29 04:40:57.041765 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:21593] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "acg82VoaWSl2asqQCh8CLgAAARg"]
[Sun Mar 29 04:40:57.835114 2026] [:error] [pid 1524:tid 1541] [client 158.23.144.198:21615] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1.php"] [unique_id "acg82VoaWSl2asqQCh8CMgAAAQo"]
[Sun Mar 29 04:41:02.313369 2026] [:error] [pid 32257:tid 32332] [client 158.23.144.198:21680] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "acg83iE3TArOFrUtgWoXMwAAAI4"]
[Sun Mar 29 04:41:02.899211 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:21623] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "acg83loaWSl2asqQCh8COgAAARg"]
[Sun Mar 29 04:41:03.374158 2026] [:error] [pid 32254:tid 32287] [client 158.23.144.198:21653] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "acg836ug2IHuyGgCTn8G3AAAABc"]
[Sun Mar 29 04:41:03.837767 2026] [:error] [pid 32254:tid 32282] [client 158.23.144.198:21755] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "acg836ug2IHuyGgCTn8G3QAAABI"]
[Sun Mar 29 04:41:04.320909 2026] [:error] [pid 32359:tid 32375] [client 158.23.144.198:16340] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "acg84AMb8G3UzfQP3WjCzwAAAM4"]
[Sun Mar 29 04:41:04.839538 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:21670] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "acg84CE3TArOFrUtgWoXPQAAAJM"]
[Sun Mar 29 04:41:05.274092 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:21745] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "acg84SE3TArOFrUtgWoXQQAAAIE"]
[Sun Mar 29 04:41:05.698270 2026] [:error] [pid 32257:tid 32331] [client 158.23.144.198:21723] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "acg84SE3TArOFrUtgWoXQwAAAI0"]
[Sun Mar 29 04:41:06.238074 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:21527] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws40.php"] [unique_id "acg84iE3TArOFrUtgWoXRQAAAJg"]
[Sun Mar 29 04:41:06.646855 2026] [:error] [pid 32257:tid 32338] [client 158.23.144.198:21702] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws40.php"] [unique_id "acg84iE3TArOFrUtgWoXSQAAAJQ"]
[Sun Mar 29 04:41:07.114217 2026] [:error] [pid 32255:tid 32297] [client 158.23.144.198:21612] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws40.php"] [unique_id "acg842nfn-AtRoMbquw-iQAAAEY"]
[Sun Mar 29 04:41:07.594156 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:21599] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws40.php"] [unique_id "acg841oaWSl2asqQCh8CQAAAAQY"]
[Sun Mar 29 04:41:08.039595 2026] [:error] [pid 32254:tid 32277] [client 158.23.144.198:21665] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws36.php"] [unique_id "acg85Kug2IHuyGgCTn8G3wAAAA0"]
[Sun Mar 29 04:41:08.429990 2026] [:error] [pid 32254:tid 32283] [client 158.23.144.198:21664] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws36.php"] [unique_id "acg85Kug2IHuyGgCTn8G4gAAABM"]
[Sun Mar 29 04:41:09.572049 2026] [:error] [pid 1524:tid 1546] [client 158.23.144.198:21682] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws36.php"] [unique_id "acg85VoaWSl2asqQCh8CRAAAAQ8"]
[Sun Mar 29 04:41:10.260719 2026] [:error] [pid 32254:tid 32280] [client 158.23.144.198:21719] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws36.php"] [unique_id "acg85qug2IHuyGgCTn8G5gAAABA"]
[Sun Mar 29 04:41:10.815930 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:21647] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vwxbi.php"] [unique_id "acg85iE3TArOFrUtgWoXUAAAAIg"]
[Sun Mar 29 04:41:12.135263 2026] [:error] [pid 32257:tid 32333] [client 158.23.144.198:21571] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vwxbi.php"] [unique_id "acg86CE3TArOFrUtgWoXVAAAAI8"]
[Sun Mar 29 04:41:12.601105 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:21620] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vwxbi.php"] [unique_id "acg86CE3TArOFrUtgWoXVwAAAJM"]
[Sun Mar 29 04:41:13.050971 2026] [:error] [pid 1524:tid 1536] [client 158.23.144.198:21630] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vwxbi.php"] [unique_id "acg86VoaWSl2asqQCh8CSgAAAQc"]
[Sun Mar 29 04:41:13.552301 2026] [:error] [pid 32254:tid 32271] [client 158.23.144.198:21690] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellerr.php"] [unique_id "acg86aug2IHuyGgCTn8G7gAAAAc"]
[Sun Mar 29 04:41:13.986064 2026] [:error] [pid 32254:tid 32270] [client 158.23.144.198:21547] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellerr.php"] [unique_id "acg86aug2IHuyGgCTn8G8QAAAAY"]
[Sun Mar 29 04:41:14.554007 2026] [:error] [pid 32359:tid 32362] [client 158.23.144.198:21738] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellerr.php"] [unique_id "acg86gMb8G3UzfQP3WjC1QAAAME"]
[Sun Mar 29 04:41:14.984325 2026] [:error] [pid 32254:tid 32264] [client 158.23.144.198:21585] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellerr.php"] [unique_id "acg86qug2IHuyGgCTn8G9AAAAAA"]
[Sun Mar 29 04:41:15.491881 2026] [:error] [pid 32255:tid 32305] [client 158.23.144.198:21728] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "acg862nfn-AtRoMbquw-iwAAAE4"]
[Sun Mar 29 04:41:15.948884 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:21621] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "acg861oaWSl2asqQCh8CUQAAAQY"]
[Sun Mar 29 04:41:16.370378 2026] [:error] [pid 32359:tid 32376] [client 158.23.144.198:21693] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "acg87AMb8G3UzfQP3WjC2gAAAM8"]
[Sun Mar 29 04:41:16.792573 2026] [:error] [pid 32254:tid 32274] [client 158.23.144.198:21556] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "acg87Kug2IHuyGgCTn8G-AAAAAo"]
[Sun Mar 29 04:41:17.277503 2026] [:error] [pid 32255:tid 32296] [client 158.23.144.198:21617] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cvz.php"] [unique_id "acg87Wnfn-AtRoMbquw-jQAAAEU"]
[Sun Mar 29 04:41:17.784061 2026] [:error] [pid 32254:tid 32277] [client 158.23.144.198:21750] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cvz.php"] [unique_id "acg87aug2IHuyGgCTn8G_AAAAA0"]
[Sun Mar 29 04:41:18.247129 2026] [:error] [pid 32254:tid 32288] [client 158.23.144.198:21608] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cvz.php"] [unique_id "acg87qug2IHuyGgCTn8G_gAAABg"]
[Sun Mar 29 04:41:18.707545 2026] [:error] [pid 32257:tid 32330] [client 158.23.144.198:21594] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cvz.php"] [unique_id "acg87iE3TArOFrUtgWoXWwAAAIw"]
[Sun Mar 29 04:41:19.195343 2026] [:error] [pid 32255:tid 32309] [client 158.23.144.198:21511] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acg872nfn-AtRoMbquw-lQAAAFI"]
[Sun Mar 29 04:41:19.672928 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:21641] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acg87yE3TArOFrUtgWoXXQAAAJc"]
[Sun Mar 29 04:41:20.261102 2026] [:error] [pid 32255:tid 32297] [client 158.23.144.198:21522] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acg88Gnfn-AtRoMbquw-mAAAAEY"]
[Sun Mar 29 04:41:20.689863 2026] [:error] [pid 32359:tid 32370] [client 158.23.144.198:21577] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acg88AMb8G3UzfQP3WjC3wAAAMk"]
[Sun Mar 29 04:41:21.245506 2026] [:error] [pid 32255:tid 32310] [client 158.23.144.198:21675] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aee.php"] [unique_id "acg88Wnfn-AtRoMbquw-mQAAAFM"]
[Sun Mar 29 04:41:21.762043 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:21524] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aee.php"] [unique_id "acg88SE3TArOFrUtgWoXYgAAAIg"]
[Sun Mar 29 04:41:22.276833 2026] [:error] [pid 32255:tid 32305] [client 158.23.144.198:21616] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aee.php"] [unique_id "acg88mnfn-AtRoMbquw-mwAAAE4"]
[Sun Mar 29 04:41:22.706243 2026] [:error] [pid 32359:tid 32368] [client 158.23.144.198:21521] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aee.php"] [unique_id "acg88gMb8G3UzfQP3WjC4gAAAMc"]
[Sun Mar 29 04:41:23.106252 2026] [:error] [pid 1524:tid 1544] [client 158.23.144.198:21591] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sweg.php"] [unique_id "acg881oaWSl2asqQCh8CVQAAAQ0"]
[Sun Mar 29 04:41:23.564415 2026] [:error] [pid 32255:tid 32313] [client 158.23.144.198:21595] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sweg.php"] [unique_id "acg882nfn-AtRoMbquw-ngAAAFY"]
[Sun Mar 29 04:41:24.293135 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:21695] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sweg.php"] [unique_id "acg89CE3TArOFrUtgWoXZQAAAII"]
[Sun Mar 29 04:41:24.870166 2026] [:error] [pid 32257:tid 32323] [client 158.23.144.198:21586] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sweg.php"] [unique_id "acg89CE3TArOFrUtgWoXaQAAAIU"]
[Sun Mar 29 04:41:25.315513 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:21603] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acg89SE3TArOFrUtgWoXbQAAAIs"]
[Sun Mar 29 04:41:25.755300 2026] [:error] [pid 32257:tid 32325] [client 158.23.144.198:21694] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acg89SE3TArOFrUtgWoXcQAAAIc"]
[Sun Mar 29 04:41:27.622735 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:21604] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acg89yE3TArOFrUtgWoXegAAAIY"]
[Sun Mar 29 04:41:29.603034 2026] [:error] [pid 32359:tid 32376] [client 158.23.144.198:21741] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acg8-QMb8G3UzfQP3WjC6wAAAM8"]
[Sun Mar 29 04:41:30.120474 2026] [:error] [pid 32255:tid 32306] [client 158.23.144.198:21646] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "acg8-mnfn-AtRoMbquw-ogAAAE8"]
[Sun Mar 29 04:41:30.562891 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:21528] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "acg8-iE3TArOFrUtgWoXhgAAAJM"]
[Sun Mar 29 04:41:30.990081 2026] [:error] [pid 32255:tid 32303] [client 158.23.144.198:21726] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "acg8-mnfn-AtRoMbquw-pAAAAEw"]
[Sun Mar 29 04:41:31.894508 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:16350] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sc.php"] [unique_id "acg8-yE3TArOFrUtgWoXiwAAAIg"]
[Sun Mar 29 04:41:32.496021 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:21515] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acg8_CE3TArOFrUtgWoXjwAAAJg"]
[Sun Mar 29 04:41:33.000155 2026] [:error] [pid 32257:tid 32340] [client 158.23.144.198:21629] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acg8_CE3TArOFrUtgWoXkQAAAJY"]
[Sun Mar 29 04:41:33.427817 2026] [:error] [pid 1524:tid 1552] [client 158.23.144.198:21720] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acg8_VoaWSl2asqQCh8CZwAAARQ"]
[Sun Mar 29 04:41:33.962044 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:21545] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acg8_VoaWSl2asqQCh8CaAAAAQg"]
[Sun Mar 29 04:41:34.390928 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:21561] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acg8_iE3TArOFrUtgWoXlgAAAIo"]
[Sun Mar 29 04:41:34.849249 2026] [:error] [pid 32359:tid 32382] [client 158.23.144.198:21579] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acg8_gMb8G3UzfQP3WjC7gAAANU"]
[Sun Mar 29 04:41:35.392056 2026] [:error] [pid 32359:tid 32377] [client 158.23.144.198:16324] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acg8_wMb8G3UzfQP3WjC8AAAANA"]
[Sun Mar 29 04:41:36.073031 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:21541] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acg9ACE3TArOFrUtgWoXmQAAAJM"]
[Sun Mar 29 04:41:36.730974 2026] [:error] [pid 1524:tid 1538] [client 158.23.144.198:21557] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acg9AFoaWSl2asqQCh8CawAAAQk"]
[Sun Mar 29 04:41:37.378551 2026] [:error] [pid 1524:tid 1528] [client 158.23.144.198:21655] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acg9AVoaWSl2asqQCh8CbgAAAQE"]
[Sun Mar 29 04:41:38.205876 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:21683] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roter.php"] [unique_id "acg9AiE3TArOFrUtgWoXnwAAAIE"]
[Sun Mar 29 04:41:38.796563 2026] [:error] [pid 1524:tid 1548] [client 158.23.144.198:21644] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roter.php"] [unique_id "acg9AloaWSl2asqQCh8CcAAAARE"]
[Sun Mar 29 04:41:39.380983 2026] [:error] [pid 32257:tid 32327] [client 158.23.144.198:21537] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roter.php"] [unique_id "acg9AyE3TArOFrUtgWoXoQAAAIk"]
[Sun Mar 29 04:41:40.026287 2026] [:error] [pid 32257:tid 32322] [client 158.23.144.198:16336] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roter.php"] [unique_id "acg9BCE3TArOFrUtgWoXowAAAIQ"]
[Sun Mar 29 04:41:40.612549 2026] [:error] [pid 32254:tid 32288] [client 158.23.144.198:21584] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acg9BKug2IHuyGgCTn8HDQAAABg"]
[Sun Mar 29 04:41:41.123910 2026] [:error] [pid 32359:tid 32368] [client 158.23.144.198:21533] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acg9BQMb8G3UzfQP3WjC9AAAAMc"]
[Sun Mar 29 04:41:41.583585 2026] [:error] [pid 32254:tid 32275] [client 158.23.144.198:21565] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acg9Baug2IHuyGgCTn8HDgAAAAs"]
[Sun Mar 29 04:41:42.037069 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:21626] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acg9BiE3TArOFrUtgWoXpgAAAJM"]
[Sun Mar 29 04:41:42.433405 2026] [:error] [pid 1524:tid 1536] [client 158.23.144.198:21559] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acg9BloaWSl2asqQCh8CdwAAAQc"]
[Sun Mar 29 04:41:42.823216 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:21525] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acg9BloaWSl2asqQCh8CeQAAARg"]
[Sun Mar 29 04:41:43.231809 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:21546] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acg9ByE3TArOFrUtgWoXqwAAAJc"]
[Sun Mar 29 04:41:43.721216 2026] [:error] [pid 32257:tid 32321] [client 158.23.144.198:21692] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acg9ByE3TArOFrUtgWoXrQAAAIM"]
[Sun Mar 29 04:41:44.120747 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:21713] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acg9CCE3TArOFrUtgWoXrgAAAIo"]
[Sun Mar 29 04:41:44.524368 2026] [:error] [pid 1524:tid 1538] [client 158.23.144.198:21526] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acg9CFoaWSl2asqQCh8CegAAAQk"]
[Sun Mar 29 04:41:44.934982 2026] [:error] [pid 1524:tid 1543] [client 158.23.144.198:21588] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acg9CFoaWSl2asqQCh8CfQAAAQw"]
[Sun Mar 29 04:41:45.391052 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:21714] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acg9CSE3TArOFrUtgWoXswAAAII"]
[Sun Mar 29 04:41:45.864043 2026] [:error] [pid 1524:tid 1553] [client 158.23.144.198:21575] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1GiO.php"] [unique_id "acg9CVoaWSl2asqQCh8CfwAAARU"]
[Sun Mar 29 04:41:46.301744 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:16328] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1GiO.php"] [unique_id "acg9CiE3TArOFrUtgWoXtgAAAIY"]
[Sun Mar 29 04:41:46.779604 2026] [:error] [pid 1524:tid 1542] [client 158.23.144.198:21685] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1GiO.php"] [unique_id "acg9CloaWSl2asqQCh8ChAAAAQs"]
[Sun Mar 29 04:41:47.290080 2026] [:error] [pid 32255:tid 32299] [client 158.23.144.198:16363] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n1GiO.php"] [unique_id "acg9C2nfn-AtRoMbquw-sQAAAEg"]
[Sun Mar 29 04:41:47.890889 2026] [:error] [pid 32257:tid 32331] [client 158.23.144.198:16322] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pLdK1.php"] [unique_id "acg9CyE3TArOFrUtgWoXuAAAAI0"]
[Sun Mar 29 04:41:48.460846 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:16331] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pLdK1.php"] [unique_id "acg9DCE3TArOFrUtgWoXvQAAAIs"]
[Sun Mar 29 04:41:48.867906 2026] [:error] [pid 32257:tid 32333] [client 158.23.144.198:21676] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pLdK1.php"] [unique_id "acg9DCE3TArOFrUtgWoXwwAAAI8"]
[Sun Mar 29 04:41:49.274493 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:21590] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pLdK1.php"] [unique_id "acg9DSE3TArOFrUtgWoXyAAAAIA"]
[Sun Mar 29 04:41:49.964438 2026] [:error] [pid 32254:tid 32278] [client 158.23.144.198:21711] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/llb1J.php"] [unique_id "acg9Daug2IHuyGgCTn8HFwAAAA4"]
[Sun Mar 29 04:41:50.426501 2026] [:error] [pid 32359:tid 32370] [client 158.23.144.198:21674] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/llb1J.php"] [unique_id "acg9DgMb8G3UzfQP3WjC_QAAAMk"]
[Sun Mar 29 04:41:51.187713 2026] [:error] [pid 32254:tid 32288] [client 158.23.144.198:21550] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/llb1J.php"] [unique_id "acg9D6ug2IHuyGgCTn8HGgAAABg"]
[Sun Mar 29 04:41:51.602780 2026] [:error] [pid 32254:tid 32264] [client 158.23.144.198:21535] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/llb1J.php"] [unique_id "acg9D6ug2IHuyGgCTn8HHQAAAAA"]
[Sun Mar 29 04:41:52.025399 2026] [:error] [pid 32255:tid 32315] [client 158.23.144.198:21619] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jeZDu.php"] [unique_id "acg9EGnfn-AtRoMbquw-tgAAAFg"]
[Sun Mar 29 04:41:52.596244 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:21554] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jeZDu.php"] [unique_id "acg9ECE3TArOFrUtgWoXyQAAAJU"]
[Sun Mar 29 04:41:53.111634 2026] [:error] [pid 32257:tid 32334] [client 158.23.144.198:21553] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jeZDu.php"] [unique_id "acg9ESE3TArOFrUtgWoXywAAAJA"]
[Sun Mar 29 04:41:53.615739 2026] [:error] [pid 32254:tid 32265] [client 158.23.144.198:21592] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jeZDu.php"] [unique_id "acg9Eaug2IHuyGgCTn8HHwAAAAE"]
[Sun Mar 29 04:41:54.141353 2026] [:error] [pid 32359:tid 32384] [client 158.23.144.198:16329] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acg9EgMb8G3UzfQP3WjDAQAAANc"]
[Sun Mar 29 04:41:54.664519 2026] [:error] [pid 32254:tid 32287] [client 158.23.144.198:16373] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acg9Equg2IHuyGgCTn8HIwAAABc"]
[Sun Mar 29 04:41:55.257031 2026] [:error] [pid 32359:tid 32381] [client 158.23.144.198:21695] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acg9EwMb8G3UzfQP3WjDBQAAANQ"]
[Sun Mar 29 04:41:55.692046 2026] [:error] [pid 32255:tid 32299] [client 158.23.144.198:21551] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acg9E2nfn-AtRoMbquw-vQAAAEg"]
[Sun Mar 29 04:41:56.143120 2026] [:error] [pid 32255:tid 32311] [client 158.23.144.198:21605] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfuKK.php"] [unique_id "acg9FGnfn-AtRoMbquw-vgAAAFQ"]
[Sun Mar 29 04:41:56.812009 2026] [:error] [pid 1524:tid 1546] [client 158.23.144.198:16370] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfuKK.php"] [unique_id "acg9FFoaWSl2asqQCh8CiQAAAQ8"]
[Sun Mar 29 04:41:57.378323 2026] [:error] [pid 1524:tid 1555] [client 158.23.144.198:21609] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfuKK.php"] [unique_id "acg9FVoaWSl2asqQCh8CjAAAARc"]
[Sun Mar 29 04:41:57.845809 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:21534] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfuKK.php"] [unique_id "acg9FVoaWSl2asqQCh8CjgAAAQg"]
[Sun Mar 29 04:41:58.285691 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:21569] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OpVq6.php"] [unique_id "acg9FiE3TArOFrUtgWoX0QAAAJc"]
[Sun Mar 29 04:41:58.866223 2026] [:error] [pid 1524:tid 1551] [client 158.23.144.198:21631] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OpVq6.php"] [unique_id "acg9FloaWSl2asqQCh8CkgAAARM"]
[Sun Mar 29 04:41:59.307325 2026] [:error] [pid 32257:tid 32335] [client 158.23.144.198:16380] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OpVq6.php"] [unique_id "acg9FyE3TArOFrUtgWoX1AAAAJE"]
[Sun Mar 29 04:41:59.944572 2026] [:error] [pid 1524:tid 1548] [client 158.23.144.198:16332] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/OpVq6.php"] [unique_id "acg9F1oaWSl2asqQCh8ClQAAARE"]
[Sun Mar 29 04:42:00.494700 2026] [:error] [pid 32359:tid 32382] [client 158.23.144.198:21625] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Q73BO.php"] [unique_id "acg9GAMb8G3UzfQP3WjDCQAAANU"]
[Sun Mar 29 04:42:07.083691 2026] [:error] [pid 32254:tid 32274] [client 158.23.144.198:21530] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc13.php"] [unique_id "acg9H6ug2IHuyGgCTn8HNwAAAAo"]
[Sun Mar 29 04:42:07.517603 2026] [:error] [pid 1524:tid 1553] [client 158.23.144.198:21628] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc13.php"] [unique_id "acg9H1oaWSl2asqQCh8CtAAAARU"]
[Sun Mar 29 04:42:08.022338 2026] [:error] [pid 1524:tid 1545] [client 158.23.144.198:16338] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc13.php"] [unique_id "acg9IFoaWSl2asqQCh8CtgAAAQ4"]
[Sun Mar 29 04:42:08.424718 2026] [:error] [pid 32254:tid 32271] [client 158.23.144.198:21622] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cc13.php"] [unique_id "acg9IKug2IHuyGgCTn8HPAAAAAc"]
[Sun Mar 29 04:42:08.905055 2026] [:error] [pid 1524:tid 1551] [client 158.23.144.198:16367] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acg9IFoaWSl2asqQCh8CuQAAARM"]
[Sun Mar 29 04:42:09.372942 2026] [:error] [pid 1524:tid 1542] [client 158.23.144.198:16358] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acg9IVoaWSl2asqQCh8CuwAAAQs"]
[Sun Mar 29 04:42:09.876764 2026] [:error] [pid 1524:tid 1541] [client 158.23.144.198:16375] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acg9IVoaWSl2asqQCh8CvgAAAQo"]
[Sun Mar 29 04:42:10.479580 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:16349] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acg9IloaWSl2asqQCh8CwgAAARg"]
[Sun Mar 29 04:42:11.149923 2026] [:error] [pid 32359:tid 32371] [client 158.23.144.198:16352] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "acg9IwMb8G3UzfQP3WjDDgAAAMo"]
[Sun Mar 29 04:42:11.593244 2026] [:error] [pid 1524:tid 1536] [client 158.23.144.198:21598] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "acg9I1oaWSl2asqQCh8CxgAAAQc"]
[Sun Mar 29 04:42:12.142345 2026] [:error] [pid 32255:tid 32314] [client 158.23.144.198:16365] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "acg9JGnfn-AtRoMbquw-zwAAAFc"]
[Sun Mar 29 04:42:12.559173 2026] [:error] [pid 32257:tid 32323] [client 158.23.144.198:21506] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "acg9JCE3TArOFrUtgWoX3QAAAIU"]
[Sun Mar 29 04:42:13.248972 2026] [:error] [pid 32255:tid 32307] [client 158.23.144.198:21618] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccu.php"] [unique_id "acg9JWnfn-AtRoMbquw-0wAAAFA"]
[Sun Mar 29 04:42:13.993493 2026] [:error] [pid 32359:tid 32379] [client 158.23.144.198:21539] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccu.php"] [unique_id "acg9JQMb8G3UzfQP3WjDEQAAANI"]
[Sun Mar 29 04:42:14.826342 2026] [:error] [pid 32255:tid 32306] [client 158.23.144.198:16281] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccu.php"] [unique_id "acg9Jmnfn-AtRoMbquw-1gAAAE8"]
[Sun Mar 29 04:42:16.203246 2026] [:error] [pid 32255:tid 32299] [client 158.23.144.198:21730] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccu.php"] [unique_id "acg9KGnfn-AtRoMbquw-1wAAAEg"]
[Sun Mar 29 04:42:16.691498 2026] [:error] [pid 32359:tid 32383] [client 158.23.144.198:21601] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "acg9KAMb8G3UzfQP3WjDEgAAANY"]
[Sun Mar 29 04:42:17.156993 2026] [:error] [pid 1524:tid 1551] [client 158.23.144.198:21514] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "acg9KVoaWSl2asqQCh8CzAAAARM"]
[Sun Mar 29 04:42:17.557192 2026] [:error] [pid 32254:tid 32268] [client 158.23.144.198:16335] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "acg9Kaug2IHuyGgCTn8HSwAAAAQ"]
[Sun Mar 29 04:42:18.146678 2026] [:error] [pid 32255:tid 32297] [client 158.23.144.198:16376] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "acg9Kmnfn-AtRoMbquw-2AAAAEY"]
[Sun Mar 29 04:42:18.678686 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:16293] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "acg9KloaWSl2asqQCh8CzgAAAQY"]
[Sun Mar 29 04:42:19.162591 2026] [:error] [pid 32255:tid 32295] [client 158.23.144.198:21513] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "acg9K2nfn-AtRoMbquw-2wAAAEQ"]
[Sun Mar 29 04:42:19.624192 2026] [:error] [pid 32254:tid 32265] [client 158.23.144.198:21567] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "acg9K6ug2IHuyGgCTn8HUQAAAAE"]
[Sun Mar 29 04:42:20.133123 2026] [:error] [pid 32254:tid 32288] [client 158.23.144.198:16305] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "acg9LKug2IHuyGgCTn8HUwAAABg"]
[Sun Mar 29 04:42:20.675986 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:21516] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dragonshell.php"] [unique_id "acg9LCE3TArOFrUtgWoX7wAAAJU"]
[Sun Mar 29 04:42:21.132159 2026] [:error] [pid 32254:tid 32271] [client 158.23.144.198:21555] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dragonshell.php"] [unique_id "acg9Laug2IHuyGgCTn8HVgAAAAc"]
[Sun Mar 29 04:42:21.584780 2026] [:error] [pid 32359:tid 32367] [client 158.23.144.198:21538] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dragonshell.php"] [unique_id "acg9LQMb8G3UzfQP3WjDGQAAAMY"]
[Sun Mar 29 04:42:22.205416 2026] [:error] [pid 32255:tid 32291] [client 158.23.144.198:21581] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dragonshell.php"] [unique_id "acg9Lmnfn-AtRoMbquw-3gAAAEA"]
[Sun Mar 29 04:42:22.630505 2026] [:error] [pid 1524:tid 1554] [client 158.23.144.198:16339] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acg9LloaWSl2asqQCh8C0QAAARY"]
[Sun Mar 29 04:42:23.100590 2026] [:error] [pid 32255:tid 32296] [client 158.23.144.198:21735] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acg9L2nfn-AtRoMbquw-3wAAAEU"]
[Sun Mar 29 04:42:23.529075 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:16347] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acg9LyE3TArOFrUtgWoX-gAAAJU"]
[Sun Mar 29 04:42:23.979598 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:21597] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acg9LyE3TArOFrUtgWoX_QAAAIA"]
[Sun Mar 29 04:42:24.380772 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:21512] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/caiij.php"] [unique_id "acg9MCE3TArOFrUtgWoYAAAAAJc"]
[Sun Mar 29 04:42:24.842961 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:16361] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/caiij.php"] [unique_id "acg9MCE3TArOFrUtgWoYBAAAAIg"]
[Sun Mar 29 04:42:25.278117 2026] [:error] [pid 32257:tid 32321] [client 158.23.144.198:21518] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/caiij.php"] [unique_id "acg9MSE3TArOFrUtgWoYBgAAAIM"]
[Sun Mar 29 04:42:25.784305 2026] [:error] [pid 32359:tid 32372] [client 158.23.144.198:16311] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/caiij.php"] [unique_id "acg9MQMb8G3UzfQP3WjDGwAAAMs"]
[Sun Mar 29 04:42:26.215460 2026] [:error] [pid 32255:tid 32301] [client 158.23.144.198:21529] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "acg9Mmnfn-AtRoMbquw-4gAAAEo"]
[Sun Mar 29 04:42:26.619555 2026] [:error] [pid 32254:tid 32268] [client 158.23.144.198:21505] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "acg9Mqug2IHuyGgCTn8HZgAAAAQ"]
[Sun Mar 29 04:42:27.059144 2026] [:error] [pid 1524:tid 1551] [client 158.23.144.198:21520] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "acg9M1oaWSl2asqQCh8C2gAAARM"]
[Sun Mar 29 04:42:27.465465 2026] [:error] [pid 1524:tid 1554] [client 158.23.144.198:21544] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gel4y.php"] [unique_id "acg9M1oaWSl2asqQCh8C3gAAARY"]
[Sun Mar 29 04:42:27.994706 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:16372] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "acg9M1oaWSl2asqQCh8C4gAAARg"]
[Sun Mar 29 04:42:28.403910 2026] [:error] [pid 1524:tid 1555] [client 158.23.144.198:21582] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "acg9NFoaWSl2asqQCh8C4wAAARc"]
[Sun Mar 29 04:42:28.823692 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:21563] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "acg9NCE3TArOFrUtgWoYCQAAAIo"]
[Sun Mar 29 04:42:29.303500 2026] [:error] [pid 32254:tid 32265] [client 158.23.144.198:21536] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "acg9Naug2IHuyGgCTn8HaAAAAAE"]
[Sun Mar 29 04:42:29.752575 2026] [:error] [pid 32254:tid 32285] [client 158.23.144.198:21532] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rkiea.php"] [unique_id "acg9Naug2IHuyGgCTn8HawAAABU"]
[Sun Mar 29 04:42:30.208605 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:16348] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rkiea.php"] [unique_id "acg9NiE3TArOFrUtgWoYDAAAAIE"]
[Sun Mar 29 04:42:30.654112 2026] [:error] [pid 32255:tid 32299] [client 158.23.144.198:16382] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rkiea.php"] [unique_id "acg9Nmnfn-AtRoMbquw-5AAAAEg"]
[Sun Mar 29 04:42:31.106322 2026] [:error] [pid 1524:tid 1551] [client 158.23.144.198:21508] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rkiea.php"] [unique_id "acg9N1oaWSl2asqQCh8C5QAAARM"]
[Sun Mar 29 04:42:31.494350 2026] [:error] [pid 1524:tid 1544] [client 158.23.144.198:16362] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "acg9N1oaWSl2asqQCh8C5wAAAQ0"]
[Sun Mar 29 04:42:31.940352 2026] [:error] [pid 32255:tid 32311] [client 158.23.144.198:21558] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "acg9N2nfn-AtRoMbquw-5QAAAFQ"]
[Sun Mar 29 04:42:32.379087 2026] [:error] [pid 32255:tid 32297] [client 158.23.144.198:21509] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "acg9OGnfn-AtRoMbquw-5gAAAEY"]
[Sun Mar 29 04:42:32.830786 2026] [:error] [pid 32257:tid 32330] [client 158.23.144.198:21510] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resp.php"] [unique_id "acg9OCE3TArOFrUtgWoYEQAAAIw"]
[Sun Mar 29 04:42:33.277049 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:16330] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanou.php"] [unique_id "acg9OSE3TArOFrUtgWoYEgAAAJg"]
[Sun Mar 29 04:42:33.666492 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:21660] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanou.php"] [unique_id "acg9OVoaWSl2asqQCh8C7gAAARg"]
[Sun Mar 29 04:42:34.072469 2026] [:error] [pid 32257:tid 32340] [client 158.23.144.198:21542] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanou.php"] [unique_id "acg9OiE3TArOFrUtgWoYFAAAAJY"]
[Sun Mar 29 04:42:34.555375 2026] [:error] [pid 32359:tid 32369] [client 158.23.144.198:16263] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lanou.php"] [unique_id "acg9OgMb8G3UzfQP3WjDIwAAAMg"]
[Sun Mar 29 04:42:34.949506 2026] [:error] [pid 1524:tid 1551] [client 158.23.144.198:16342] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eursi.php"] [unique_id "acg9OloaWSl2asqQCh8C8QAAARM"]
[Sun Mar 29 04:42:35.384381 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:16371] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eursi.php"] [unique_id "acg9OyE3TArOFrUtgWoYFwAAAIo"]
[Sun Mar 29 04:42:35.789303 2026] [:error] [pid 32257:tid 32336] [client 158.23.144.198:21677] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eursi.php"] [unique_id "acg9OyE3TArOFrUtgWoYGAAAAJI"]
[Sun Mar 29 04:42:36.261141 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:16341] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eursi.php"] [unique_id "acg9PCE3TArOFrUtgWoYGgAAAIE"]
[Sun Mar 29 04:42:36.751931 2026] [:error] [pid 32257:tid 32321] [client 158.23.144.198:16368] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pas2.php"] [unique_id "acg9PCE3TArOFrUtgWoYHgAAAIM"]
[Sun Mar 29 04:42:37.149632 2026] [:error] [pid 32255:tid 32305] [client 158.23.144.198:16301] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pas2.php"] [unique_id "acg9PWnfn-AtRoMbquw-6gAAAE4"]
[Sun Mar 29 04:42:37.655388 2026] [:error] [pid 32255:tid 32314] [client 158.23.144.198:16326] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pas2.php"] [unique_id "acg9PWnfn-AtRoMbquw-6wAAAFc"]
[Sun Mar 29 04:42:38.115560 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:16284] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pas2.php"] [unique_id "acg9PiE3TArOFrUtgWoYJAAAAIY"]
[Sun Mar 29 04:42:38.555897 2026] [:error] [pid 32359:tid 32384] [client 158.23.144.198:16308] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schal.php"] [unique_id "acg9PgMb8G3UzfQP3WjDKAAAANc"]
[Sun Mar 29 04:42:39.046972 2026] [:error] [pid 1524:tid 1531] [client 158.23.144.198:16355] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schal.php"] [unique_id "acg9P1oaWSl2asqQCh8C-wAAAQM"]
[Sun Mar 29 04:42:39.474953 2026] [:error] [pid 32257:tid 32319] [client 158.23.144.198:16321] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schal.php"] [unique_id "acg9PyE3TArOFrUtgWoYJwAAAIE"]
[Sun Mar 29 04:42:39.915884 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:21507] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schal.php"] [unique_id "acg9PyE3TArOFrUtgWoYKQAAAIs"]
[Sun Mar 29 04:42:40.341661 2026] [:error] [pid 32257:tid 32325] [client 158.23.144.198:16310] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "acg9QCE3TArOFrUtgWoYKwAAAIc"]
[Sun Mar 29 04:42:40.752352 2026] [:error] [pid 32257:tid 32323] [client 158.23.144.198:16258] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "acg9QCE3TArOFrUtgWoYLAAAAIU"]
[Sun Mar 29 04:42:41.176588 2026] [:error] [pid 32254:tid 32285] [client 158.23.144.198:16261] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "acg9Qaug2IHuyGgCTn8HdAAAABU"]
[Sun Mar 29 04:42:41.582518 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:16266] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xex.php"] [unique_id "acg9QSE3TArOFrUtgWoYLwAAAJM"]
[Sun Mar 29 04:42:41.986070 2026] [:error] [pid 1524:tid 1542] [client 158.23.144.198:16369] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acg9QVoaWSl2asqQCh8DAAAAAQs"]
[Sun Mar 29 04:42:42.373259 2026] [:error] [pid 32359:tid 32381] [client 158.23.144.198:21549] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acg9QgMb8G3UzfQP3WjDKgAAANQ"]
[Sun Mar 29 04:42:42.765184 2026] [:error] [pid 32255:tid 32310] [client 158.23.144.198:21540] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acg9Qmnfn-AtRoMbquw-7AAAAFM"]
[Sun Mar 29 04:42:43.168854 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:21548] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acg9QyE3TArOFrUtgWoYNQAAAIs"]
[Sun Mar 29 04:42:43.558250 2026] [:error] [pid 32359:tid 32385] [client 158.23.144.198:21566] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acg9QwMb8G3UzfQP3WjDLQAAANg"]
[Sun Mar 29 04:42:43.983514 2026] [:error] [pid 32255:tid 32300] [client 158.23.144.198:16262] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acg9Q2nfn-AtRoMbquw-7wAAAEk"]
[Sun Mar 29 04:42:44.501851 2026] [:error] [pid 32359:tid 32377] [client 158.23.144.198:21543] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acg9RAMb8G3UzfQP3WjDLgAAANA"]
[Sun Mar 29 04:42:45.040744 2026] [:error] [pid 1524:tid 1535] [client 158.23.144.198:16379] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acg9RVoaWSl2asqQCh8DBQAAAQY"]
[Sun Mar 29 04:42:45.497646 2026] [:error] [pid 1524:tid 1538] [client 158.23.144.198:21625] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dtyh.php"] [unique_id "acg9RVoaWSl2asqQCh8DBgAAAQk"]
[Sun Mar 29 04:42:45.903148 2026] [:error] [pid 32359:tid 32367] [client 158.23.144.198:21560] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dtyh.php"] [unique_id "acg9RQMb8G3UzfQP3WjDMwAAAMY"]
[Sun Mar 29 04:42:46.338212 2026] [:error] [pid 1524:tid 1531] [client 158.23.144.198:16334] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dtyh.php"] [unique_id "acg9RloaWSl2asqQCh8DCgAAAQM"]
[Sun Mar 29 04:42:46.722099 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:16271] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dtyh.php"] [unique_id "acg9RiE3TArOFrUtgWoYNwAAAJg"]
[Sun Mar 29 04:42:47.172816 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:16374] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wta.php"] [unique_id "acg9RyE3TArOFrUtgWoYOQAAAJM"]
[Sun Mar 29 04:42:47.608574 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:16343] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wta.php"] [unique_id "acg9RyE3TArOFrUtgWoYOwAAAIA"]
[Sun Mar 29 04:42:48.012397 2026] [:error] [pid 32257:tid 32336] [client 158.23.144.198:16286] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wta.php"] [unique_id "acg9SCE3TArOFrUtgWoYPgAAAJI"]
[Sun Mar 29 04:42:48.422037 2026] [:error] [pid 32254:tid 32270] [client 158.23.144.198:21564] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wta.php"] [unique_id "acg9SKug2IHuyGgCTn8HeAAAAAY"]
[Sun Mar 29 04:42:48.812695 2026] [:error] [pid 32254:tid 32281] [client 158.23.144.198:16275] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acg9SKug2IHuyGgCTn8HeQAAABE"]
[Sun Mar 29 04:42:49.214817 2026] [:error] [pid 32254:tid 32268] [client 158.23.144.198:21523] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acg9Saug2IHuyGgCTn8HewAAAAQ"]
[Sun Mar 29 04:42:49.641493 2026] [:error] [pid 32257:tid 32318] [client 158.23.144.198:16288] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acg9SSE3TArOFrUtgWoYSQAAAIA"]
[Sun Mar 29 04:42:50.039109 2026] [:error] [pid 32257:tid 32336] [client 158.23.144.198:16346] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acg9SiE3TArOFrUtgWoYSwAAAJI"]
[Sun Mar 29 04:42:50.431941 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:21681] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acg9SiE3TArOFrUtgWoYTAAAAIY"]
[Sun Mar 29 04:42:50.867796 2026] [:error] [pid 32359:tid 32376] [client 158.23.144.198:16206] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acg9SgMb8G3UzfQP3WjDNwAAAM8"]
[Sun Mar 29 04:42:51.307244 2026] [:error] [pid 32257:tid 32328] [client 158.23.144.198:16353] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acg9SyE3TArOFrUtgWoYTgAAAIo"]
[Sun Mar 29 04:42:51.767542 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:16378] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acg9S1oaWSl2asqQCh8DEAAAAQg"]
[Sun Mar 29 04:42:52.266655 2026] [:error] [pid 32257:tid 32325] [client 158.23.144.198:21611] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acg9TCE3TArOFrUtgWoYUgAAAIc"]
[Sun Mar 29 04:42:52.695668 2026] [:error] [pid 32257:tid 32326] [client 158.23.144.198:16337] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acg9TCE3TArOFrUtgWoYWAAAAIg"]
[Sun Mar 29 04:42:53.124366 2026] [:error] [pid 1524:tid 1538] [client 158.23.144.198:16260] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acg9TVoaWSl2asqQCh8DEwAAAQk"]
[Sun Mar 29 04:42:53.515256 2026] [:error] [pid 1524:tid 1531] [client 158.23.144.198:16351] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acg9TVoaWSl2asqQCh8DFgAAAQM"]
[Sun Mar 29 04:42:54.041671 2026] [:error] [pid 32359:tid 32370] [client 158.23.144.198:16356] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acg9TgMb8G3UzfQP3WjDPwAAAMk"]
[Sun Mar 29 04:42:54.509378 2026] [:error] [pid 32359:tid 32362] [client 158.23.144.198:16333] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acg9TgMb8G3UzfQP3WjDQQAAAME"]
[Sun Mar 29 04:42:54.989106 2026] [:error] [pid 1524:tid 1553] [client 158.23.144.198:16265] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acg9TloaWSl2asqQCh8DGwAAARU"]
[Sun Mar 29 04:42:55.491847 2026] [:error] [pid 1524:tid 1543] [client 158.23.144.198:16278] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acg9T1oaWSl2asqQCh8DHQAAAQw"]
[Sun Mar 29 04:42:55.927541 2026] [:error] [pid 32257:tid 32335] [client 158.23.144.198:16316] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acg9TyE3TArOFrUtgWoYXQAAAJE"]
[Sun Mar 29 04:42:56.312951 2026] [:error] [pid 32254:tid 32273] [client 158.23.144.198:16344] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acg9UKug2IHuyGgCTn8HgQAAAAk"]
[Sun Mar 29 04:42:56.703815 2026] [:error] [pid 1524:tid 1544] [client 158.23.144.198:16325] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acg9UFoaWSl2asqQCh8DHwAAAQ0"]
[Sun Mar 29 04:42:57.197018 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:21552] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acg9USE3TArOFrUtgWoYYwAAAJg"]
[Sun Mar 29 04:42:57.658866 2026] [:error] [pid 32254:tid 32286] [client 158.23.144.198:16312] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acg9Uaug2IHuyGgCTn8HggAAABY"]
[Sun Mar 29 04:42:58.107262 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:16279] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acg9UloaWSl2asqQCh8DJAAAARg"]
[Sun Mar 29 04:42:58.539549 2026] [:error] [pid 1524:tid 1532] [client 158.23.144.198:16285] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acg9UloaWSl2asqQCh8DJgAAAQQ"]
[Sun Mar 29 04:42:59.036168 2026] [:error] [pid 32257:tid 32331] [client 158.23.144.198:16357] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acg9UyE3TArOFrUtgWoYZwAAAI0"]
[Sun Mar 29 04:42:59.487250 2026] [:error] [pid 32254:tid 32271] [client 158.23.144.198:16203] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acg9U6ug2IHuyGgCTn8HgwAAAAc"]
[Sun Mar 29 04:42:59.970510 2026] [:error] [pid 32254:tid 32275] [client 158.23.144.198:21600] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acg9U6ug2IHuyGgCTn8HhAAAAAs"]
[Sun Mar 29 04:43:00.633721 2026] [:error] [pid 32254:tid 32266] [client 158.23.144.198:16270] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acg9VKug2IHuyGgCTn8HhgAAAAI"]
[Sun Mar 29 04:43:01.076516 2026] [:error] [pid 32254:tid 32269] [client 158.23.144.198:21618] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acg9Vaug2IHuyGgCTn8HiQAAAAU"]
[Sun Mar 29 04:43:01.495660 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:16204] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bywaf.php"] [unique_id "acg9VSE3TArOFrUtgWoYbAAAAJc"]
[Sun Mar 29 04:43:01.938599 2026] [:error] [pid 32257:tid 32342] [client 158.23.144.198:16364] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bywaf.php"] [unique_id "acg9VSE3TArOFrUtgWoYbgAAAJg"]
[Sun Mar 29 04:43:02.348789 2026] [:error] [pid 1524:tid 1544] [client 158.23.144.198:16304] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bywaf.php"] [unique_id "acg9VloaWSl2asqQCh8DKQAAAQ0"]
[Sun Mar 29 04:43:02.740381 2026] [:error] [pid 1524:tid 1554] [client 158.23.144.198:21531] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bywaf.php"] [unique_id "acg9VloaWSl2asqQCh8DKwAAARY"]
[Sun Mar 29 04:43:03.172089 2026] [:error] [pid 32359:tid 32376] [client 158.23.144.198:16360] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "acg9VwMb8G3UzfQP3WjDRAAAAM8"]
[Sun Mar 29 04:43:03.564747 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:16323] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "acg9V1oaWSl2asqQCh8DLAAAARg"]
[Sun Mar 29 04:43:03.992474 2026] [:error] [pid 32257:tid 32330] [client 158.23.144.198:16300] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "acg9VyE3TArOFrUtgWoYbwAAAIw"]
[Sun Mar 29 04:43:04.387101 2026] [:error] [pid 32257:tid 32324] [client 158.23.144.198:16256] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "acg9WCE3TArOFrUtgWoYcAAAAIY"]
[Sun Mar 29 04:43:04.825716 2026] [:error] [pid 32359:tid 32379] [client 158.23.144.198:16226] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "acg9WAMb8G3UzfQP3WjDRgAAANI"]
[Sun Mar 29 04:43:05.221946 2026] [:error] [pid 32257:tid 32323] [client 158.23.144.198:16264] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "acg9WSE3TArOFrUtgWoYdQAAAIU"]
[Sun Mar 29 04:43:05.635854 2026] [:error] [pid 32257:tid 32320] [client 158.23.144.198:16268] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "acg9WSE3TArOFrUtgWoYeAAAAII"]
[Sun Mar 29 04:43:11.597698 2026] [:error] [pid 32257:tid 32341] [client 158.23.144.198:16196] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "acg9XyE3TArOFrUtgWoYiQAAAJc"]
[Sun Mar 29 04:43:12.129449 2026] [:error] [pid 1524:tid 1555] [client 158.23.144.198:16296] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "acg9YFoaWSl2asqQCh8DSgAAARc"]
[Sun Mar 29 04:43:12.531121 2026] [:error] [pid 32255:tid 32291] [client 158.23.144.198:16383] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "acg9YGnfn-AtRoMbquw--QAAAEA"]
[Sun Mar 29 04:43:12.974370 2026] [:error] [pid 32255:tid 32304] [client 158.23.144.198:16345] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "acg9YGnfn-AtRoMbquw-_AAAAE0"]
[Sun Mar 29 04:43:13.368261 2026] [:error] [pid 32257:tid 32337] [client 158.23.144.198:16199] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "acg9YSE3TArOFrUtgWoYjAAAAJM"]
[Sun Mar 29 04:43:13.758053 2026] [:error] [pid 32257:tid 32330] [client 158.23.144.198:16269] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "acg9YSE3TArOFrUtgWoYjgAAAIw"]
[Sun Mar 29 04:43:14.257168 2026] [:error] [pid 32254:tid 32264] [client 158.23.144.198:16359] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "acg9Yqug2IHuyGgCTn8HoAAAAAA"]
[Sun Mar 29 04:43:14.740559 2026] [:error] [pid 32254:tid 32265] [client 158.23.144.198:16319] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpwer1.php"] [unique_id "acg9Yqug2IHuyGgCTn8HowAAAAE"]
[Sun Mar 29 04:43:15.142685 2026] [:error] [pid 1524:tid 1538] [client 158.23.144.198:16193] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "acg9Y1oaWSl2asqQCh8DTQAAAQk"]
[Sun Mar 29 04:43:15.574298 2026] [:error] [pid 32257:tid 32339] [client 158.23.144.198:16280] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "acg9YyE3TArOFrUtgWoYkgAAAJU"]
[Sun Mar 29 04:43:16.050497 2026] [:error] [pid 32257:tid 32329] [client 158.23.144.198:21572] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "acg9ZCE3TArOFrUtgWoYlAAAAIs"]
[Sun Mar 29 04:43:16.576951 2026] [:error] [pid 1524:tid 1542] [client 158.23.144.198:16302] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "acg9ZFoaWSl2asqQCh8DTwAAAQs"]
[Sun Mar 29 04:43:17.042704 2026] [:error] [pid 32254:tid 32273] [client 158.23.144.198:16289] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "acg9Zaug2IHuyGgCTn8HpwAAAAk"]
[Sun Mar 29 04:43:17.520137 2026] [:error] [pid 32359:tid 32375] [client 158.23.144.198:16222] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "acg9ZQMb8G3UzfQP3WjDTAAAAM4"]
[Sun Mar 29 04:43:17.956583 2026] [:error] [pid 1524:tid 1537] [client 158.23.144.198:16381] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "acg9ZVoaWSl2asqQCh8DUQAAAQg"]
[Sun Mar 29 04:43:18.447194 2026] [:error] [pid 32254:tid 32270] [client 158.23.144.198:16251] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "acg9Zqug2IHuyGgCTn8HqQAAAAY"]
[Sun Mar 29 04:43:19.226674 2026] [:error] [pid 32359:tid 32373] [client 158.23.144.198:16366] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpass.php"] [unique_id "acg9ZwMb8G3UzfQP3WjDUQAAAMw"]
[Sun Mar 29 04:43:19.661362 2026] [:error] [pid 1524:tid 1528] [client 158.23.144.198:16298] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpass.php"] [unique_id "acg9Z1oaWSl2asqQCh8DVAAAAQE"]
[Sun Mar 29 04:43:20.175916 2026] [:error] [pid 1524:tid 1556] [client 158.23.144.198:21610] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpass.php"] [unique_id "acg9aFoaWSl2asqQCh8DVgAAARg"]
[Sun Mar 29 04:43:20.567934 2026] [:error] [pid 32359:tid 32383] [client 158.23.144.198:16377] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xpass.php"] [unique_id "acg9aAMb8G3UzfQP3WjDUwAAANY"]
[Sun Mar 29 04:43:21.157218 2026] [:error] [pid 32359:tid 32377] [client 158.23.144.198:16241] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acg9aQMb8G3UzfQP3WjDVAAAANA"]
[Sun Mar 29 04:43:21.575956 2026] [:error] [pid 32359:tid 32364] [client 158.23.144.198:16313] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acg9aQMb8G3UzfQP3WjDVgAAAMM"]
[Sun Mar 29 04:43:21.995879 2026] [:error] [pid 32257:tid 32330] [client 158.23.144.198:16327] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acg9aSE3TArOFrUtgWoYnAAAAIw"]
[Sun Mar 29 04:43:22.418680 2026] [:error] [pid 32255:tid 32305] [client 158.23.144.198:16233] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acg9amnfn-AtRoMbquw_AwAAAE4"]
[Sun Mar 29 04:43:22.853536 2026] [:error] [pid 1524:tid 1543] [client 158.23.144.198:16208] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acg9aloaWSl2asqQCh8DXAAAAQw"]
[Sun Mar 29 04:43:23.271469 2026] [:error] [pid 1524:tid 1546] [client 158.23.144.198:16276] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acg9a1oaWSl2asqQCh8DXgAAAQ8"]
[Sun Mar 29 04:43:23.724177 2026] [:error] [pid 1524:tid 1552] [client 158.23.144.198:16237] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acg9a1oaWSl2asqQCh8DYAAAARQ"]
[Sun Mar 29 04:43:24.112031 2026] [:error] [pid 32257:tid 32332] [client 158.23.144.198:16223] [client 158.23.144.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acg9bCE3TArOFrUtgWoYoAAAAI4"]
[Sun Mar 29 05:48:59.485300 2026] [:error] [pid 12910:tid 12924] [client 49.233.45.47:55040] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "achMyynoNBcZwnBvsMNbWAAAAUw"]
[Sun Mar 29 07:10:38.326427 2026] [:error] [pid 23167:tid 23173] [client 43.135.182.43:41888] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "achf7hIAHJCFaHff3_deJgAAAcM"]
[Sun Mar 29 08:51:43.250399 2026] [:error] [pid 32255:tid 32292] [client 45.94.31.49:61479] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ach3n2nfn-AtRoMbquyRMQAAAEE"]
[Sun Mar 29 08:51:44.252862 2026] [:error] [pid 23250:tid 23254] [client 45.94.31.49:51473] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ach3oJxrpj-dQjy1cvpf-gAAAkI"]
[Sun Mar 29 08:51:45.229863 2026] [:error] [pid 23250:tid 23272] [client 45.94.31.49:62576] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ach3oZxrpj-dQjy1cvpgbwAAAlQ"]
[Sun Mar 29 08:51:46.207745 2026] [:error] [pid 23284:tid 23295] [client 45.94.31.49:55760] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ach3oozBujdPHsq7wyR6MwAAAok"]
[Sun Mar 29 08:51:47.183739 2026] [:error] [pid 23284:tid 23308] [client 45.94.31.49:65356] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ach3o4zBujdPHsq7wyR6SwAAApY"]
[Sun Mar 29 10:00:22.489140 2026] [:error] [pid 23284:tid 23300] [client 177.21.37.90:54706] [client 177.21.37.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.21.37.90, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aciHtozBujdPHsq7wySLewAAAo4"]
[Sun Mar 29 10:20:23.107101 2026] [:error] [pid 23284:tid 23301] [client 49.51.253.83:42702] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aciMZ4zBujdPHsq7wySSKAAAAo8"]
[Sun Mar 29 16:29:05.362019 2026] [:error] [pid 23167:tid 23190] [client 105.235.137.88:54197] [client 105.235.137.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.235.137.88, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acji0RIAHJCFaHff3_dZ4gAAAdQ"]
[Sun Mar 29 17:19:42.302973 2026] [:error] [pid 23284:tid 23302] [client 43.156.228.27:48194] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acjurozBujdPHsq7wyQHWgAAApA"]
[Sun Mar 29 20:16:47.027398 2026] [:error] [pid 32257:tid 32331] [client 49.234.192.248:57176] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ackYLyE3TArOFrUtgWoCVgAAAI0"]
[Sun Mar 29 21:06:29.052687 2026] [:error] [pid 32254:tid 32287] [client 43.130.111.40:34966] [client 43.130.111.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ackj1aug2IHuyGgCTn9XoQAAABc"]
[Sun Mar 29 23:01:05.059479 2026] [:error] [pid 23284:tid 23289] [client 104.28.164.109:26411] [client 104.28.164.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.164.109, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ack-sYzBujdPHsq7wyTSIgAAAoM"]
[Sun Mar 29 23:04:01.481216 2026] [:error] [pid 32257:tid 32336] [client 195.178.110.109:1594] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "ack_YSE3TArOFrUtgWpcwAAAAJI"]
[Sun Mar 29 23:04:01.481339 2026] [:error] [pid 32257:tid 32334] [client 195.178.110.109:1550] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/portal/.env"] [unique_id "ack_YSE3TArOFrUtgWpcwQAAAJA"]
[Sun Mar 29 23:04:01.795675 2026] [:error] [pid 32359:tid 32361] [client 195.178.110.109:1566] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/env/.env"] [unique_id "ack_YQMb8G3UzfQP3Wg4cQAAAMA"]
[Sun Mar 29 23:04:03.042950 2026] [:error] [pid 23137:tid 23141] [client 195.178.110.109:1626] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "ack_YxaWQa7LdZ_qGFYGnwAAAYI"]
[Sun Mar 29 23:04:03.144988 2026] [:error] [pid 32359:tid 32365] [client 195.178.110.109:1638] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "ack_YwMb8G3UzfQP3Wg4dgAAAMQ"]
[Sun Mar 29 23:04:03.221765 2026] [:error] [pid 23167:tid 23181] [client 195.178.110.109:1642] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/dev/.env"] [unique_id "ack_YxIAHJCFaHff3_fSZgAAAcs"]
[Sun Mar 29 23:04:04.296728 2026] [:error] [pid 23250:tid 23272] [client 195.178.110.109:1666] [client 195.178.110.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/new/.env.local"] [unique_id "ack_ZJxrpj-dQjy1cvoSKAAAAlQ"]
[Sun Mar 29 23:17:53.240658 2026] [:error] [pid 23168:tid 23213] [client 43.130.12.43:55664] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aclCoWP8p0yRL8ot_2-5ewAAAhA"]
[Mon Mar 30 01:28:11.965490 2026] [:error] [pid 32359:tid 32385] [client 20.226.46.201:31525] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aclhKwMb8G3UzfQP3WhOMAAAANg"]
[Mon Mar 30 01:28:12.587356 2026] [:error] [pid 32254:tid 32265] [client 20.226.46.201:31321] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aclhLKug2IHuyGgCTn91gQAAAAE"]
[Mon Mar 30 01:28:13.204320 2026] [:error] [pid 32255:tid 32295] [client 20.226.46.201:31320] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aclhLWnfn-AtRoMbquxVzwAAAEQ"]
[Mon Mar 30 01:28:13.823440 2026] [:error] [pid 23250:tid 23261] [client 20.226.46.201:31343] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "aclhLZxrpj-dQjy1cvowMAAAAkk"]
[Mon Mar 30 01:28:14.452905 2026] [:error] [pid 32257:tid 32321] [client 20.226.46.201:31530] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aclhLiE3TArOFrUtgWrGXgAAAIM"]
[Mon Mar 30 01:28:15.082740 2026] [:error] [pid 23137:tid 23141] [client 20.226.46.201:32602] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aclhLxaWQa7LdZ_qGFYh7AAAAYI"]
[Mon Mar 30 01:28:15.699889 2026] [:error] [pid 8818:tid 8840] [client 20.226.46.201:31551] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aclhLyCDvotZNSF0FBoT6wAAAVI"]
[Mon Mar 30 01:28:16.323696 2026] [:error] [pid 32257:tid 32333] [client 20.226.46.201:31499] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aclhMCE3TArOFrUtgWrGZAAAAI8"]
[Mon Mar 30 01:28:16.964491 2026] [:error] [pid 23168:tid 23199] [client 20.226.46.201:31543] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aclhMGP8p0yRL8ot_2_ssQAAAgI"]
[Mon Mar 30 01:28:17.597505 2026] [:error] [pid 23168:tid 23207] [client 20.226.46.201:31516] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aclhMWP8p0yRL8ot_2_sswAAAgo"]
[Mon Mar 30 01:28:18.219896 2026] [:error] [pid 23168:tid 23206] [client 20.226.46.201:31322] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aclhMmP8p0yRL8ot_2_stQAAAgk"]
[Mon Mar 30 01:28:18.852660 2026] [:error] [pid 23137:tid 23140] [client 20.226.46.201:31518] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "aclhMhaWQa7LdZ_qGFYh8QAAAYE"]
[Mon Mar 30 01:28:19.474633 2026] [:error] [pid 23168:tid 23215] [client 20.226.46.201:31500] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "aclhM2P8p0yRL8ot_2_stgAAAhI"]
[Mon Mar 30 01:28:20.096099 2026] [:error] [pid 23168:tid 23210] [client 20.226.46.201:31532] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "aclhNGP8p0yRL8ot_2_suAAAAg0"]
[Mon Mar 30 01:28:20.711790 2026] [:error] [pid 8818:tid 8842] [client 20.226.46.201:31333] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "aclhNCCDvotZNSF0FBoT7wAAAVQ"]
[Mon Mar 30 01:28:21.329272 2026] [:error] [pid 8818:tid 8832] [client 20.226.46.201:31521] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "aclhNSCDvotZNSF0FBoT8wAAAUo"]
[Mon Mar 30 01:28:21.946859 2026] [:error] [pid 32257:tid 32319] [client 20.226.46.201:31542] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "aclhNSE3TArOFrUtgWrGcAAAAIE"]
[Mon Mar 30 01:28:22.564584 2026] [:error] [pid 32359:tid 32365] [client 20.226.46.201:31303] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "aclhNgMb8G3UzfQP3WhOPgAAAMQ"]
[Mon Mar 30 01:28:23.179101 2026] [:error] [pid 32255:tid 32308] [client 20.226.46.201:31315] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "aclhN2nfn-AtRoMbquxV3QAAAFE"]
[Mon Mar 30 01:28:23.804140 2026] [:error] [pid 8818:tid 8824] [client 20.226.46.201:31535] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "aclhNyCDvotZNSF0FBoT_QAAAUI"]
[Mon Mar 30 01:28:24.423942 2026] [:error] [pid 23167:tid 23171] [client 20.226.46.201:31547] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaje.php"] [unique_id "aclhOBIAHJCFaHff3_f-tQAAAcE"]
[Mon Mar 30 01:28:25.046633 2026] [:error] [pid 32255:tid 32298] [client 20.226.46.201:32606] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaje.php"] [unique_id "aclhOWnfn-AtRoMbquxV3wAAAEc"]
[Mon Mar 30 01:28:25.667483 2026] [:error] [pid 32254:tid 32283] [client 20.226.46.201:31545] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaje.php"] [unique_id "aclhOaug2IHuyGgCTn91iQAAABM"]
[Mon Mar 30 01:28:26.286140 2026] [:error] [pid 32257:tid 32330] [client 20.226.46.201:31319] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaje.php"] [unique_id "aclhOiE3TArOFrUtgWrGdAAAAIw"]
[Mon Mar 30 01:28:26.912361 2026] [:error] [pid 32257:tid 32322] [client 20.226.46.201:31306] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/msy.php"] [unique_id "aclhOiE3TArOFrUtgWrGfQAAAIQ"]
[Mon Mar 30 01:28:27.537249 2026] [:error] [pid 32257:tid 32323] [client 20.226.46.201:31501] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/msy.php"] [unique_id "aclhOyE3TArOFrUtgWrGgAAAAIU"]
[Mon Mar 30 01:28:28.163691 2026] [:error] [pid 32257:tid 32333] [client 20.226.46.201:31528] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/msy.php"] [unique_id "aclhPCE3TArOFrUtgWrGiAAAAI8"]
[Mon Mar 30 01:28:28.789900 2026] [:error] [pid 23284:tid 23302] [client 20.226.46.201:31527] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/msy.php"] [unique_id "aclhPIzBujdPHsq7wyRBcQAAApA"]
[Mon Mar 30 01:28:29.412548 2026] [:error] [pid 32257:tid 32342] [client 20.226.46.201:31347] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "aclhPSE3TArOFrUtgWrGkwAAAJg"]
[Mon Mar 30 01:28:30.032299 2026] [:error] [pid 32257:tid 32335] [client 20.226.46.201:32598] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "aclhPiE3TArOFrUtgWrGlgAAAJE"]
[Mon Mar 30 01:28:30.648935 2026] [:error] [pid 32257:tid 32330] [client 20.226.46.201:32584] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "aclhPiE3TArOFrUtgWrGlwAAAIw"]
[Mon Mar 30 01:28:31.270814 2026] [:error] [pid 8818:tid 8822] [client 20.226.46.201:31546] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fgd.php"] [unique_id "aclhPyCDvotZNSF0FBoUAwAAAUA"]
[Mon Mar 30 01:28:31.897367 2026] [:error] [pid 23168:tid 23221] [client 20.226.46.201:31326] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X7T6.php"] [unique_id "aclhP2P8p0yRL8ot_2_swQAAAhg"]
[Mon Mar 30 01:28:32.514416 2026] [:error] [pid 23168:tid 23208] [client 20.226.46.201:31502] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X7T6.php"] [unique_id "aclhQGP8p0yRL8ot_2_swwAAAgs"]
[Mon Mar 30 01:28:33.143888 2026] [:error] [pid 23168:tid 23211] [client 20.226.46.201:31541] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X7T6.php"] [unique_id "aclhQWP8p0yRL8ot_2_sxQAAAg4"]
[Mon Mar 30 01:28:33.761591 2026] [:error] [pid 23250:tid 23266] [client 20.226.46.201:31508] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/X7T6.php"] [unique_id "aclhQZxrpj-dQjy1cvowQAAAAk4"]
[Mon Mar 30 01:28:34.386492 2026] [:error] [pid 32254:tid 32275] [client 20.226.46.201:31526] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alog.php"] [unique_id "aclhQqug2IHuyGgCTn91kwAAAAs"]
[Mon Mar 30 01:28:35.037728 2026] [:error] [pid 23250:tid 23260] [client 20.226.46.201:31517] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alog.php"] [unique_id "aclhQ5xrpj-dQjy1cvowQgAAAkg"]
[Mon Mar 30 01:28:35.658584 2026] [:error] [pid 23284:tid 23288] [client 20.226.46.201:31314] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alog.php"] [unique_id "aclhQ4zBujdPHsq7wyRBegAAAoI"]
[Mon Mar 30 01:28:36.277200 2026] [:error] [pid 8818:tid 8841] [client 20.226.46.201:31302] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alog.php"] [unique_id "aclhRCCDvotZNSF0FBoUCwAAAVM"]
[Mon Mar 30 01:28:36.914066 2026] [:error] [pid 23284:tid 23305] [client 20.226.46.201:31308] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aclhRIzBujdPHsq7wyRBgwAAApM"]
[Mon Mar 30 01:28:37.540867 2026] [:error] [pid 32255:tid 32307] [client 20.226.46.201:31536] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aclhRWnfn-AtRoMbquxV6QAAAFA"]
[Mon Mar 30 01:28:38.163266 2026] [:error] [pid 23167:tid 23176] [client 20.226.46.201:31307] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aclhRhIAHJCFaHff3_f-wwAAAcY"]
[Mon Mar 30 01:28:38.788646 2026] [:error] [pid 23168:tid 23215] [client 20.226.46.201:31334] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aclhRmP8p0yRL8ot_2_s1gAAAhI"]
[Mon Mar 30 01:28:39.419805 2026] [:error] [pid 23284:tid 23288] [client 20.226.46.201:31328] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sef.php"] [unique_id "aclhR4zBujdPHsq7wyRBhgAAAoI"]
[Mon Mar 30 01:28:40.043026 2026] [:error] [pid 32254:tid 32265] [client 20.226.46.201:31506] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sef.php"] [unique_id "aclhSKug2IHuyGgCTn91mQAAAAE"]
[Mon Mar 30 01:28:40.661786 2026] [:error] [pid 23250:tid 23259] [client 20.226.46.201:31299] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sef.php"] [unique_id "aclhSJxrpj-dQjy1cvowSwAAAkc"]
[Mon Mar 30 01:28:41.288343 2026] [:error] [pid 23137:tid 23142] [client 20.226.46.201:31539] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sef.php"] [unique_id "aclhSRaWQa7LdZ_qGFYiBAAAAYM"]
[Mon Mar 30 01:28:41.917741 2026] [:error] [pid 23284:tid 23301] [client 20.226.46.201:32589] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ztv.php"] [unique_id "aclhSYzBujdPHsq7wyRBjAAAAo8"]
[Mon Mar 30 01:28:42.538281 2026] [:error] [pid 23284:tid 23307] [client 20.226.46.201:31548] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ztv.php"] [unique_id "aclhSozBujdPHsq7wyRBkwAAApU"]
[Mon Mar 30 01:28:43.182754 2026] [:error] [pid 23168:tid 23201] [client 20.226.46.201:31498] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ztv.php"] [unique_id "aclhS2P8p0yRL8ot_2_s3AAAAgQ"]
[Mon Mar 30 01:28:43.805925 2026] [:error] [pid 23284:tid 23304] [client 20.226.46.201:31524] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ztv.php"] [unique_id "aclhS4zBujdPHsq7wyRBmAAAApI"]
[Mon Mar 30 01:28:44.425396 2026] [:error] [pid 23284:tid 23297] [client 20.226.46.201:32583] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Rk41.php"] [unique_id "aclhTIzBujdPHsq7wyRBnwAAAos"]
[Mon Mar 30 01:28:45.047702 2026] [:error] [pid 23250:tid 23257] [client 20.226.46.201:32593] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Rk41.php"] [unique_id "aclhTZxrpj-dQjy1cvowVgAAAkU"]
[Mon Mar 30 01:28:45.670008 2026] [:error] [pid 32359:tid 32374] [client 20.226.46.201:31352] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Rk41.php"] [unique_id "aclhTQMb8G3UzfQP3WhOUgAAAM0"]
[Mon Mar 30 01:28:46.285833 2026] [:error] [pid 32255:tid 32306] [client 20.226.46.201:31490] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Rk41.php"] [unique_id "aclhTmnfn-AtRoMbquxV-gAAAE8"]
[Mon Mar 30 01:28:46.910750 2026] [:error] [pid 23284:tid 23295] [client 20.226.46.201:31497] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aclhTozBujdPHsq7wyRBpwAAAok"]
[Mon Mar 30 01:28:47.536416 2026] [:error] [pid 32359:tid 32371] [client 20.226.46.201:31519] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aclhTwMb8G3UzfQP3WhOVgAAAMo"]
[Mon Mar 30 01:28:48.156960 2026] [:error] [pid 23168:tid 23211] [client 20.226.46.201:31297] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aclhUGP8p0yRL8ot_2_s5QAAAg4"]
[Mon Mar 30 01:28:48.785776 2026] [:error] [pid 23168:tid 23214] [client 20.226.46.201:31324] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aclhUGP8p0yRL8ot_2_s6wAAAhE"]
[Mon Mar 30 01:28:49.415089 2026] [:error] [pid 23167:tid 23186] [client 20.226.46.201:31312] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aclhURIAHJCFaHff3_f-0gAAAdA"]
[Mon Mar 30 01:28:50.063768 2026] [:error] [pid 23284:tid 23286] [client 20.226.46.201:31310] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aclhUozBujdPHsq7wyRBuQAAAoA"]
[Mon Mar 30 01:28:50.767535 2026] [:error] [pid 32257:tid 32336] [client 20.226.46.201:31301] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aclhUiE3TArOFrUtgWrGpQAAAJI"]
[Mon Mar 30 01:28:51.403778 2026] [:error] [pid 23284:tid 23306] [client 20.226.46.201:31515] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "aclhU4zBujdPHsq7wyRBuwAAApQ"]
[Mon Mar 30 01:28:52.141858 2026] [:error] [pid 32257:tid 32331] [client 20.226.46.201:31298] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aclhVCE3TArOFrUtgWrGqgAAAI0"]
[Mon Mar 30 01:28:52.769298 2026] [:error] [pid 23168:tid 23197] [client 20.226.46.201:31318] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aclhVGP8p0yRL8ot_2_s-AAAAgA"]
[Mon Mar 30 01:28:53.384723 2026] [:error] [pid 32257:tid 32323] [client 20.226.46.201:31502] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aclhVSE3TArOFrUtgWrGuAAAAIU"]
[Mon Mar 30 01:28:54.010575 2026] [:error] [pid 32257:tid 32326] [client 20.226.46.201:31494] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aclhViE3TArOFrUtgWrGuwAAAIg"]
[Mon Mar 30 01:28:54.629605 2026] [:error] [pid 32257:tid 32337] [client 20.226.46.201:31332] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "aclhViE3TArOFrUtgWrGwAAAAJM"]
[Mon Mar 30 01:28:55.259444 2026] [:error] [pid 23168:tid 23218] [client 20.226.46.201:31550] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "aclhV2P8p0yRL8ot_2_tAQAAAhU"]
[Mon Mar 30 01:28:55.875130 2026] [:error] [pid 23284:tid 23290] [client 20.226.46.201:31549] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "aclhV4zBujdPHsq7wyRBwAAAAoQ"]
[Mon Mar 30 01:28:56.499136 2026] [:error] [pid 23284:tid 23298] [client 20.226.46.201:31355] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "aclhWIzBujdPHsq7wyRBwgAAAow"]
[Mon Mar 30 01:28:57.119275 2026] [:error] [pid 23284:tid 23310] [client 20.226.46.201:31296] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aclhWYzBujdPHsq7wyRBxwAAApg"]
[Mon Mar 30 01:28:57.735029 2026] [:error] [pid 23137:tid 23145] [client 20.226.46.201:32601] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aclhWRaWQa7LdZ_qGFYiDQAAAYY"]
[Mon Mar 30 01:28:58.352102 2026] [:error] [pid 23284:tid 23286] [client 20.226.46.201:32533] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aclhWozBujdPHsq7wyRB0AAAAoA"]
[Mon Mar 30 01:28:58.969837 2026] [:error] [pid 32257:tid 32340] [client 20.226.46.201:31325] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "aclhWiE3TArOFrUtgWrGzwAAAJY"]
[Mon Mar 30 01:28:59.592281 2026] [:error] [pid 32257:tid 32326] [client 20.226.46.201:31327] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aclhWyE3TArOFrUtgWrG0gAAAIg"]
[Mon Mar 30 01:29:00.215626 2026] [:error] [pid 23284:tid 23288] [client 20.226.46.201:32604] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aclhXIzBujdPHsq7wyRB0wAAAoI"]
[Mon Mar 30 01:29:00.837104 2026] [:error] [pid 8818:tid 8846] [client 20.226.46.201:31533] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aclhXCCDvotZNSF0FBoUHgAAAVg"]
[Mon Mar 30 01:29:01.468414 2026] [:error] [pid 8818:tid 8830] [client 20.226.46.201:31323] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "aclhXSCDvotZNSF0FBoUHwAAAUg"]
[Mon Mar 30 01:29:02.098941 2026] [:error] [pid 23168:tid 23212] [client 20.226.46.201:31331] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aclhXmP8p0yRL8ot_2_tBwAAAg8"]
[Mon Mar 30 01:29:02.727366 2026] [:error] [pid 23168:tid 23216] [client 20.226.46.201:32605] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aclhXmP8p0yRL8ot_2_tCQAAAhM"]
[Mon Mar 30 01:29:03.347330 2026] [:error] [pid 8818:tid 8835] [client 20.226.46.201:31342] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aclhXyCDvotZNSF0FBoUIwAAAU0"]
[Mon Mar 30 01:29:03.970118 2026] [:error] [pid 23167:tid 23194] [client 20.226.46.201:31356] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "aclhXxIAHJCFaHff3_f-4AAAAdg"]
[Mon Mar 30 01:29:04.597958 2026] [:error] [pid 32255:tid 32305] [client 20.226.46.201:32595] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aclhYGnfn-AtRoMbquxWGwAAAE4"]
[Mon Mar 30 01:29:05.425385 2026] [:error] [pid 23168:tid 23202] [client 20.226.46.201:31534] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aclhYWP8p0yRL8ot_2_tEgAAAgU"]
[Mon Mar 30 01:29:06.134523 2026] [:error] [pid 23168:tid 23210] [client 20.226.46.201:32540] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aclhYmP8p0yRL8ot_2_tFgAAAg0"]
[Mon Mar 30 01:29:07.362727 2026] [:error] [pid 23137:tid 23143] [client 20.226.46.201:31338] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aclhYxaWQa7LdZ_qGFYiEgAAAYQ"]
[Mon Mar 30 01:29:08.472311 2026] [:error] [pid 8818:tid 8824] [client 20.226.46.201:31507] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "aclhZCCDvotZNSF0FBoUKgAAAUI"]
[Mon Mar 30 01:29:09.450475 2026] [:error] [pid 8818:tid 8835] [client 20.226.46.201:32522] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aclhZSCDvotZNSF0FBoUMQAAAU0"]
[Mon Mar 30 01:29:10.086136 2026] [:error] [pid 8818:tid 8843] [client 20.226.46.201:31300] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aclhZiCDvotZNSF0FBoUOAAAAVU"]
[Mon Mar 30 01:29:10.704579 2026] [:error] [pid 32257:tid 32319] [client 20.226.46.201:31538] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ini.php"] [unique_id "aclhZiE3TArOFrUtgWrG9AAAAIE"]
[Mon Mar 30 01:29:18.023703 2026] [:error] [pid 32359:tid 32361] [client 20.226.46.201:31317] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aclhbgMb8G3UzfQP3WhOdQAAAMA"]
[Mon Mar 30 01:29:18.646473 2026] [:error] [pid 23167:tid 23184] [client 20.226.46.201:31489] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aclhbhIAHJCFaHff3_f-5AAAAc4"]
[Mon Mar 30 01:29:19.267216 2026] [:error] [pid 32257:tid 32323] [client 20.226.46.201:31344] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aclhbyE3TArOFrUtgWrHNQAAAIU"]
[Mon Mar 30 01:29:21.162328 2026] [:error] [pid 8818:tid 8829] [client 20.226.46.201:32588] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "aclhcSCDvotZNSF0FBoURAAAAUc"]
[Mon Mar 30 01:29:21.777300 2026] [:error] [pid 32257:tid 32334] [client 20.226.46.201:31345] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "aclhcSE3TArOFrUtgWrHSwAAAJA"]
[Mon Mar 30 01:29:22.411319 2026] [:error] [pid 32257:tid 32327] [client 20.226.46.201:31313] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "aclhciE3TArOFrUtgWrHUgAAAIk"]
[Mon Mar 30 01:29:23.030392 2026] [:error] [pid 23284:tid 23308] [client 20.226.46.201:32549] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "aclhc4zBujdPHsq7wyRCBgAAApY"]
[Mon Mar 30 01:29:23.648985 2026] [:error] [pid 23284:tid 23298] [client 20.226.46.201:31311] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aclhc4zBujdPHsq7wyRCCwAAAow"]
[Mon Mar 30 01:29:24.265975 2026] [:error] [pid 23284:tid 23293] [client 20.226.46.201:32554] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aclhdIzBujdPHsq7wyRCEQAAAoc"]
[Mon Mar 30 01:29:24.884672 2026] [:error] [pid 23284:tid 23294] [client 20.226.46.201:31544] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aclhdIzBujdPHsq7wyRCFwAAAog"]
[Mon Mar 30 01:29:25.499793 2026] [:error] [pid 8818:tid 8830] [client 20.226.46.201:31537] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aclhdSCDvotZNSF0FBoUSwAAAUg"]
[Mon Mar 30 01:29:26.118179 2026] [:error] [pid 23284:tid 23298] [client 20.226.46.201:32576] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aclhdozBujdPHsq7wyRCGwAAAow"]
[Mon Mar 30 01:29:26.812138 2026] [:error] [pid 23168:tid 23208] [client 20.226.46.201:32596] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aclhdmP8p0yRL8ot_2_tNQAAAgs"]
[Mon Mar 30 01:29:27.439493 2026] [:error] [pid 23168:tid 23206] [client 20.226.46.201:31511] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aclhd2P8p0yRL8ot_2_tNwAAAgk"]
[Mon Mar 30 01:29:28.056286 2026] [:error] [pid 8818:tid 8827] [client 20.226.46.201:31529] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aclheCCDvotZNSF0FBoUTgAAAUU"]
[Mon Mar 30 01:29:28.671794 2026] [:error] [pid 32257:tid 32333] [client 20.226.46.201:32590] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aclheCE3TArOFrUtgWrHfQAAAI8"]
[Mon Mar 30 01:29:29.295485 2026] [:error] [pid 23284:tid 23297] [client 20.226.46.201:31522] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aclheYzBujdPHsq7wyRCIQAAAos"]
[Mon Mar 30 01:29:29.911738 2026] [:error] [pid 23284:tid 23298] [client 20.226.46.201:31531] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aclheYzBujdPHsq7wyRCJQAAAow"]
[Mon Mar 30 01:29:30.529772 2026] [:error] [pid 32257:tid 32332] [client 20.226.46.201:32628] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "aclheiE3TArOFrUtgWrHigAAAI4"]
[Mon Mar 30 01:29:31.145973 2026] [:error] [pid 32257:tid 32339] [client 20.226.46.201:31540] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aclheyE3TArOFrUtgWrHlgAAAJU"]
[Mon Mar 30 01:29:31.762727 2026] [:error] [pid 23167:tid 23179] [client 20.226.46.201:32585] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aclhexIAHJCFaHff3_f-8wAAAck"]
[Mon Mar 30 01:29:32.377827 2026] [:error] [pid 23137:tid 23150] [client 20.226.46.201:32515] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aclhfBaWQa7LdZ_qGFYiIgAAAYs"]
[Mon Mar 30 01:29:32.993155 2026] [:error] [pid 32359:tid 32380] [client 20.226.46.201:31512] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aclhfAMb8G3UzfQP3WhOewAAANM"]
[Mon Mar 30 01:29:33.617175 2026] [:error] [pid 23168:tid 23211] [client 20.226.46.201:31348] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclhfWP8p0yRL8ot_2_tPAAAAg4"]
[Mon Mar 30 01:29:34.234180 2026] [:error] [pid 32359:tid 32363] [client 20.226.46.201:32633] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclhfgMb8G3UzfQP3WhOfQAAAMI"]
[Mon Mar 30 01:29:34.851978 2026] [:error] [pid 23168:tid 23201] [client 20.226.46.201:31492] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclhfmP8p0yRL8ot_2_tQgAAAgQ"]
[Mon Mar 30 01:29:35.467810 2026] [:error] [pid 23167:tid 23180] [client 20.226.46.201:32528] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclhfxIAHJCFaHff3_f-9wAAAco"]
[Mon Mar 30 01:29:36.084529 2026] [:error] [pid 8818:tid 8832] [client 20.226.46.201:31491] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclhgCCDvotZNSF0FBoUWAAAAUo"]
[Mon Mar 30 01:29:36.700779 2026] [:error] [pid 32257:tid 32328] [client 20.226.46.201:32619] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclhgCE3TArOFrUtgWrHsQAAAIo"]
[Mon Mar 30 01:29:37.317781 2026] [:error] [pid 23137:tid 23146] [client 20.226.46.201:31351] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclhgRaWQa7LdZ_qGFYiKQAAAYc"]
[Mon Mar 30 01:29:37.953925 2026] [:error] [pid 23284:tid 23297] [client 20.226.46.201:32453] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclhgYzBujdPHsq7wyRCMAAAAos"]
[Mon Mar 30 01:29:38.578074 2026] [:error] [pid 32257:tid 32320] [client 20.226.46.201:32613] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aclhgiE3TArOFrUtgWrHtgAAAII"]
[Mon Mar 30 01:29:39.205100 2026] [:error] [pid 32257:tid 32321] [client 20.226.46.201:32603] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aclhgyE3TArOFrUtgWrHvQAAAIM"]
[Mon Mar 30 01:29:39.821635 2026] [:error] [pid 32257:tid 32332] [client 20.226.46.201:31304] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aclhgyE3TArOFrUtgWrHxgAAAI4"]
[Mon Mar 30 01:29:40.444399 2026] [:error] [pid 32255:tid 32311] [client 20.226.46.201:32610] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aclhhGnfn-AtRoMbquxWRQAAAFQ"]
[Mon Mar 30 01:29:41.064159 2026] [:error] [pid 32257:tid 32319] [client 20.226.46.201:32592] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aclhhSE3TArOFrUtgWrHzgAAAIE"]
[Mon Mar 30 01:29:41.680225 2026] [:error] [pid 32255:tid 32312] [client 20.226.46.201:32599] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aclhhWnfn-AtRoMbquxWSAAAAFU"]
[Mon Mar 30 01:29:42.306667 2026] [:error] [pid 23284:tid 23294] [client 20.226.46.201:31299] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aclhhozBujdPHsq7wyRCOgAAAog"]
[Mon Mar 30 01:29:42.930703 2026] [:error] [pid 23284:tid 23287] [client 20.226.46.201:31359] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aclhhozBujdPHsq7wyRCRgAAAoE"]
[Mon Mar 30 01:29:43.545596 2026] [:error] [pid 23284:tid 23297] [client 20.226.46.201:31305] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aclhh4zBujdPHsq7wyRCSwAAAos"]
[Mon Mar 30 01:29:44.160700 2026] [:error] [pid 23284:tid 23302] [client 20.226.46.201:31309] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aclhiIzBujdPHsq7wyRCUAAAApA"]
[Mon Mar 30 01:29:44.777598 2026] [:error] [pid 23284:tid 23286] [client 20.226.46.201:31336] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aclhiIzBujdPHsq7wyRCUwAAAoA"]
[Mon Mar 30 01:29:45.399128 2026] [:error] [pid 23168:tid 23203] [client 20.226.46.201:32535] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aclhiWP8p0yRL8ot_2_tTAAAAgY"]
[Mon Mar 30 01:29:46.019363 2026] [:error] [pid 23250:tid 23272] [client 20.226.46.201:32609] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aclhipxrpj-dQjy1cvowfwAAAlQ"]
[Mon Mar 30 01:29:46.635253 2026] [:error] [pid 23167:tid 23192] [client 20.226.46.201:31358] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aclhihIAHJCFaHff3_f-_gAAAdY"]
[Mon Mar 30 01:29:47.253569 2026] [:error] [pid 23284:tid 23307] [client 20.226.46.201:32629] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aclhi4zBujdPHsq7wyRCVgAAApU"]
[Mon Mar 30 01:29:47.870344 2026] [:error] [pid 23284:tid 23288] [client 20.226.46.201:32608] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aclhi4zBujdPHsq7wyRCWgAAAoI"]
[Mon Mar 30 01:29:48.492612 2026] [:error] [pid 23284:tid 23287] [client 20.226.46.201:31350] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aclhjIzBujdPHsq7wyRCXwAAAoE"]
[Mon Mar 30 01:29:49.108835 2026] [:error] [pid 32257:tid 32329] [client 20.226.46.201:32513] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclhjSE3TArOFrUtgWrH5AAAAIs"]
[Mon Mar 30 01:29:49.725402 2026] [:error] [pid 32257:tid 32319] [client 20.226.46.201:32531] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclhjSE3TArOFrUtgWrH6QAAAIE"]
[Mon Mar 30 01:29:50.354265 2026] [:error] [pid 32255:tid 32293] [client 20.226.46.201:31339] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclhjmnfn-AtRoMbquxWXAAAAEI"]
[Mon Mar 30 01:29:50.973428 2026] [:error] [pid 23137:tid 23156] [client 20.226.46.201:32634] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclhjhaWQa7LdZ_qGFYiLwAAAZE"]
[Mon Mar 30 01:29:51.591952 2026] [:error] [pid 8818:tid 8839] [client 20.226.46.201:31509] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/xp.php"] [unique_id "aclhjyCDvotZNSF0FBoUYgAAAVE"]
[Mon Mar 30 01:29:52.209811 2026] [:error] [pid 23284:tid 23292] [client 20.226.46.201:32544] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/xp.php"] [unique_id "aclhkIzBujdPHsq7wyRCawAAAoY"]
[Mon Mar 30 01:29:52.825523 2026] [:error] [pid 32255:tid 32297] [client 20.226.46.201:32578] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/xp.php"] [unique_id "aclhkGnfn-AtRoMbquxWYwAAAEY"]
[Mon Mar 30 01:29:53.441982 2026] [:error] [pid 23167:tid 23187] [client 20.226.46.201:31503] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/xp.php"] [unique_id "aclhkRIAHJCFaHff3_f_CAAAAdE"]
[Mon Mar 30 01:29:54.057524 2026] [:error] [pid 23137:tid 23145] [client 20.226.46.201:32520] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "aclhkhaWQa7LdZ_qGFYiNwAAAYY"]
[Mon Mar 30 01:29:54.682588 2026] [:error] [pid 32255:tid 32298] [client 20.226.46.201:32581] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aclhkmnfn-AtRoMbquxWZQAAAEc"]
[Mon Mar 30 01:29:55.301398 2026] [:error] [pid 32255:tid 32295] [client 20.226.46.201:32626] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aclhk2nfn-AtRoMbquxWawAAAEQ"]
[Mon Mar 30 01:29:55.917198 2026] [:error] [pid 8818:tid 8830] [client 20.226.46.201:32627] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aclhkyCDvotZNSF0FBoUaAAAAUg"]
[Mon Mar 30 01:29:56.533664 2026] [:error] [pid 8818:tid 8836] [client 20.226.46.201:32612] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aclhlCCDvotZNSF0FBoUaQAAAU4"]
[Mon Mar 30 01:29:57.152851 2026] [:error] [pid 23167:tid 23182] [client 20.226.46.201:32537] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aclhlRIAHJCFaHff3_f_DQAAAcw"]
[Mon Mar 30 01:29:57.769691 2026] [:error] [pid 23284:tid 23295] [client 20.226.46.201:32579] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aclhlYzBujdPHsq7wyRCcQAAAok"]
[Mon Mar 30 01:29:58.391177 2026] [:error] [pid 32359:tid 32369] [client 20.226.46.201:32597] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aclhlgMb8G3UzfQP3WhOhgAAAMg"]
[Mon Mar 30 01:29:59.016824 2026] [:error] [pid 32255:tid 32312] [client 20.226.46.201:32519] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aclhl2nfn-AtRoMbquxWbQAAAFU"]
[Mon Mar 30 01:29:59.660658 2026] [:error] [pid 32255:tid 32297] [client 20.226.46.201:32462] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aclhl2nfn-AtRoMbquxWbwAAAEY"]
[Mon Mar 30 01:30:00.314316 2026] [:error] [pid 23168:tid 23197] [client 20.226.46.201:32635] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/style.php"] [unique_id "aclhmGP8p0yRL8ot_2_tWQAAAgA"]
[Mon Mar 30 01:30:00.943930 2026] [:error] [pid 32257:tid 32322] [client 20.226.46.201:31514] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/style.php"] [unique_id "aclhmCE3TArOFrUtgWrH-AAAAIQ"]
[Mon Mar 30 01:30:01.566862 2026] [:error] [pid 23168:tid 23215] [client 20.226.46.201:32611] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/style.php"] [unique_id "aclhmWP8p0yRL8ot_2_tWwAAAhI"]
[Mon Mar 30 01:30:02.182613 2026] [:error] [pid 23167:tid 23190] [client 20.226.46.201:32614] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/style.php"] [unique_id "aclhmhIAHJCFaHff3_f_EwAAAdQ"]
[Mon Mar 30 01:30:02.800393 2026] [:error] [pid 23284:tid 23289] [client 20.226.46.201:32463] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclhmozBujdPHsq7wyRCdwAAAoM"]
[Mon Mar 30 01:30:03.417663 2026] [:error] [pid 32257:tid 32331] [client 20.226.46.201:31349] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclhmyE3TArOFrUtgWrIBAAAAI0"]
[Mon Mar 30 01:30:04.037217 2026] [:error] [pid 23168:tid 23217] [client 20.226.46.201:31330] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclhnGP8p0yRL8ot_2_tYAAAAhQ"]
[Mon Mar 30 01:30:04.657406 2026] [:error] [pid 23167:tid 23185] [client 20.226.46.201:32591] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclhnBIAHJCFaHff3_f_FQAAAc8"]
[Mon Mar 30 01:30:05.275955 2026] [:error] [pid 32257:tid 32325] [client 20.226.46.201:31353] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aclhnSE3TArOFrUtgWrIDAAAAIc"]
[Mon Mar 30 01:30:05.894339 2026] [:error] [pid 8818:tid 8836] [client 20.226.46.201:32561] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aclhnSCDvotZNSF0FBoUcwAAAU4"]
[Mon Mar 30 01:30:06.522344 2026] [:error] [pid 32359:tid 32366] [client 20.226.46.201:32617] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aclhngMb8G3UzfQP3WhOkgAAAMU"]
[Mon Mar 30 01:30:07.142996 2026] [:error] [pid 23167:tid 23193] [client 20.226.46.201:32566] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aclhnxIAHJCFaHff3_f_FwAAAdc"]
[Mon Mar 30 01:30:07.763439 2026] [:error] [pid 23168:tid 23200] [client 20.226.46.201:31496] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aclhn2P8p0yRL8ot_2_tZAAAAgM"]
[Mon Mar 30 01:30:08.387553 2026] [:error] [pid 23284:tid 23305] [client 20.226.46.201:31505] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aclhoIzBujdPHsq7wyRCewAAApM"]
[Mon Mar 30 01:30:09.020317 2026] [:error] [pid 23168:tid 23197] [client 20.226.46.201:32557] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aclhoWP8p0yRL8ot_2_taAAAAgA"]
[Mon Mar 30 01:30:09.641498 2026] [:error] [pid 23167:tid 23184] [client 20.226.46.201:31329] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aclhoRIAHJCFaHff3_f_GgAAAc4"]
[Mon Mar 30 01:30:10.257512 2026] [:error] [pid 32255:tid 32307] [client 20.226.46.201:32571] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aclhomnfn-AtRoMbquxWegAAAFA"]
[Mon Mar 30 01:30:10.879624 2026] [:error] [pid 32254:tid 32278] [client 20.226.46.201:32470] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aclhoqug2IHuyGgCTn91yQAAAA4"]
[Mon Mar 30 01:30:11.516598 2026] [:error] [pid 23284:tid 23286] [client 20.226.46.201:32600] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aclho4zBujdPHsq7wyRCgwAAAoA"]
[Mon Mar 30 01:30:12.137095 2026] [:error] [pid 8818:tid 8829] [client 20.226.46.201:32637] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aclhpCCDvotZNSF0FBoUdgAAAUc"]
[Mon Mar 30 01:30:12.753473 2026] [:error] [pid 32359:tid 32385] [client 20.226.46.201:31337] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aclhpAMb8G3UzfQP3WhOlwAAANg"]
[Mon Mar 30 01:30:13.383095 2026] [:error] [pid 23167:tid 23183] [client 20.226.46.201:32555] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "aclhpRIAHJCFaHff3_f_PQAAAc0"]
[Mon Mar 30 01:30:14.002567 2026] [:error] [pid 23167:tid 23187] [client 20.226.46.201:32471] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aclhphIAHJCFaHff3_f_QgAAAdE"]
[Mon Mar 30 01:30:14.639261 2026] [:error] [pid 32257:tid 32335] [client 20.226.46.201:31500] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aclhpiE3TArOFrUtgWrIEgAAAJE"]
[Mon Mar 30 01:30:15.267104 2026] [:error] [pid 23284:tid 23302] [client 20.226.46.201:32575] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aclhp4zBujdPHsq7wyRCjAAAApA"]
[Mon Mar 30 01:30:15.891325 2026] [:error] [pid 23250:tid 23261] [client 20.226.46.201:32541] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aclhp5xrpj-dQjy1cvowigAAAkk"]
[Mon Mar 30 01:30:16.514030 2026] [:error] [pid 23137:tid 23148] [client 20.226.46.201:32539] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aclhqBaWQa7LdZ_qGFYiPQAAAYk"]
[Mon Mar 30 01:30:17.131940 2026] [:error] [pid 23284:tid 23309] [client 20.226.46.201:32638] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aclhqYzBujdPHsq7wyRCkgAAApc"]
[Mon Mar 30 01:30:17.749056 2026] [:error] [pid 32257:tid 32331] [client 20.226.46.201:32517] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aclhqSE3TArOFrUtgWrIFwAAAI0"]
[Mon Mar 30 01:30:18.383696 2026] [:error] [pid 32257:tid 32337] [client 20.226.46.201:32563] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aclhqiE3TArOFrUtgWrIGwAAAJM"]
[Mon Mar 30 01:30:19.002906 2026] [:error] [pid 32257:tid 32341] [client 20.226.46.201:32476] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aclhqyE3TArOFrUtgWrIIAAAAJc"]
[Mon Mar 30 01:30:19.629036 2026] [:error] [pid 32255:tid 32295] [client 20.226.46.201:32625] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "aclhq2nfn-AtRoMbquxWfQAAAEQ"]
[Mon Mar 30 01:30:23.596576 2026] [:error] [pid 23284:tid 23286] [client 20.226.46.201:31346] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "aclhr4zBujdPHsq7wyRCpwAAAoA"]
[Mon Mar 30 01:30:26.129798 2026] [:error] [pid 23284:tid 23309] [client 20.226.46.201:32562] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aclhsozBujdPHsq7wyRCuAAAApc"]
[Mon Mar 30 01:30:28.014992 2026] [:error] [pid 23167:tid 23193] [client 20.226.46.201:32560] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aclhtBIAHJCFaHff3_f_XAAAAdc"]
[Mon Mar 30 01:30:29.298169 2026] [:error] [pid 23167:tid 23174] [client 20.226.46.201:32631] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "aclhtRIAHJCFaHff3_f_XwAAAcQ"]
[Mon Mar 30 01:30:31.202354 2026] [:error] [pid 23167:tid 23194] [client 20.226.46.201:31335] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aclhtxIAHJCFaHff3_f_bQAAAdg"]
[Mon Mar 30 01:30:31.832614 2026] [:error] [pid 32255:tid 32299] [client 20.226.46.201:32545] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/packed.php"] [unique_id "aclht2nfn-AtRoMbquxWowAAAEg"]
[Mon Mar 30 01:30:32.451209 2026] [:error] [pid 32255:tid 32296] [client 20.226.46.201:31495] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/packed.php"] [unique_id "aclhuGnfn-AtRoMbquxWqgAAAEU"]
[Mon Mar 30 01:30:33.068612 2026] [:error] [pid 32257:tid 32335] [client 20.226.46.201:32552] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/packed.php"] [unique_id "aclhuSE3TArOFrUtgWrIMwAAAJE"]
[Mon Mar 30 01:30:33.693149 2026] [:error] [pid 23168:tid 23202] [client 20.226.46.201:32406] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user.php"] [unique_id "aclhuWP8p0yRL8ot_2_tdQAAAgU"]
[Mon Mar 30 01:30:34.323671 2026] [:error] [pid 32257:tid 32333] [client 20.226.46.201:32538] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user.php"] [unique_id "aclhuiE3TArOFrUtgWrIOgAAAI8"]
[Mon Mar 30 01:30:34.943722 2026] [:error] [pid 23137:tid 23151] [client 20.226.46.201:32550] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user.php"] [unique_id "aclhuhaWQa7LdZ_qGFYiSQAAAYw"]
[Mon Mar 30 01:30:35.575139 2026] [:error] [pid 32255:tid 32303] [client 20.226.46.201:32399] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/user.php"] [unique_id "aclhu2nfn-AtRoMbquxWsgAAAEw"]
[Mon Mar 30 01:30:36.194080 2026] [:error] [pid 32257:tid 32322] [client 20.226.46.201:32532] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aclhvCE3TArOFrUtgWrIQQAAAIQ"]
[Mon Mar 30 01:30:36.816549 2026] [:error] [pid 32255:tid 32313] [client 20.226.46.201:32570] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aclhvGnfn-AtRoMbquxWtgAAAFY"]
[Mon Mar 30 01:30:37.435182 2026] [:error] [pid 32359:tid 32361] [client 20.226.46.201:32633] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aclhvQMb8G3UzfQP3WhOoQAAAMA"]
[Mon Mar 30 01:30:38.053082 2026] [:error] [pid 23284:tid 23290] [client 20.226.46.201:32460] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aclhvozBujdPHsq7wyRCxAAAAoQ"]
[Mon Mar 30 01:30:38.682789 2026] [:error] [pid 32255:tid 32294] [client 20.226.46.201:32398] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aclhvmnfn-AtRoMbquxWugAAAEM"]
[Mon Mar 30 01:30:40.838380 2026] [:error] [pid 32257:tid 32334] [client 20.226.46.201:32487] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "aclhwCE3TArOFrUtgWrITQAAAJA"]
[Mon Mar 30 02:55:44.792970 2026] [:error] [pid 32257:tid 32322] [client 52.180.158.245:24347] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "acl1sCE3TArOFrUtgWoDPwAAAIQ"]
[Mon Mar 30 02:55:49.229952 2026] [:error] [pid 32257:tid 32341] [client 52.180.158.245:2679] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "acl1tSE3TArOFrUtgWoDSwAAAJc"]
[Mon Mar 30 02:55:51.345762 2026] [:error] [pid 23167:tid 23184] [client 52.180.158.245:32229] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "acl1txIAHJCFaHff3_cTxQAAAc4"]
[Mon Mar 30 02:55:52.166053 2026] [:error] [pid 23167:tid 23177] [client 52.180.158.245:19116] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anz.php"] [unique_id "acl1uBIAHJCFaHff3_cTyQAAAcc"]
[Mon Mar 30 02:55:52.576335 2026] [:error] [pid 32254:tid 32278] [client 52.180.158.245:20894] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acl1uKug2IHuyGgCTn-AOQAAAA4"]
[Mon Mar 30 02:55:53.204662 2026] [:error] [pid 23250:tid 23258] [client 52.180.158.245:2359] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acl1uZxrpj-dQjy1cvo_WQAAAkY"]
[Mon Mar 30 02:55:55.152339 2026] [:error] [pid 23284:tid 23296] [client 52.180.158.245:30099] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acl1u4zBujdPHsq7wyRsGQAAAoo"]
[Mon Mar 30 02:55:59.539385 2026] [:error] [pid 23168:tid 23208] [client 52.180.158.245:28361] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "acl1v2P8p0yRL8ot_28H4gAAAgs"]
[Mon Mar 30 02:56:03.371456 2026] [:error] [pid 23167:tid 23179] [client 52.180.158.245:30119] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "acl1wxIAHJCFaHff3_cT2gAAAck"]
[Mon Mar 30 02:56:05.881065 2026] [:error] [pid 23167:tid 23171] [client 52.180.158.245:28376] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "acl1xRIAHJCFaHff3_cT3wAAAcE"]
[Mon Mar 30 02:56:07.360718 2026] [:error] [pid 32255:tid 32297] [client 52.180.158.245:11475] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "acl1x2nfn-AtRoMbqux6RgAAAEY"]
[Mon Mar 30 02:56:10.218798 2026] [:error] [pid 8818:tid 8823] [client 52.180.158.245:17932] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file66.php"] [unique_id "acl1yiCDvotZNSF0FBonmQAAAUE"]
[Mon Mar 30 02:56:16.088492 2026] [:error] [pid 23167:tid 23194] [client 52.180.158.245:21348] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "acl10BIAHJCFaHff3_cT9QAAAdg"]
[Mon Mar 30 02:56:21.653022 2026] [:error] [pid 32257:tid 32341] [client 52.180.158.245:47256] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kure.php"] [unique_id "acl11SE3TArOFrUtgWoDsQAAAJc"]
[Mon Mar 30 02:56:28.649574 2026] [:error] [pid 8818:tid 8825] [client 52.180.158.245:12182] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "acl13CCDvotZNSF0FBonrAAAAUM"]
[Mon Mar 30 02:56:31.566810 2026] [:error] [pid 32255:tid 32304] [client 52.180.158.245:18229] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "acl132nfn-AtRoMbqux6jAAAAE0"]
[Mon Mar 30 02:56:35.086405 2026] [:error] [pid 23284:tid 23295] [client 52.180.158.245:17384] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "acl144zBujdPHsq7wyRsawAAAok"]
[Mon Mar 30 02:56:39.281714 2026] [:error] [pid 23284:tid 23287] [client 52.180.158.245:32138] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "acl154zBujdPHsq7wyRsfQAAAoE"]
[Mon Mar 30 02:56:41.486548 2026] [:error] [pid 32257:tid 32328] [client 52.180.158.245:18725] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaje.php"] [unique_id "acl16SE3TArOFrUtgWoD2AAAAIo"]
[Mon Mar 30 02:56:51.377476 2026] [:error] [pid 23137:tid 23139] [client 52.180.158.245:22264] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acl18xaWQa7LdZ_qGFYv4QAAAYA"]
[Mon Mar 30 02:56:53.655964 2026] [:error] [pid 23168:tid 23207] [client 52.180.158.245:64801] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acl19WP8p0yRL8ot_28ICQAAAgo"]
[Mon Mar 30 02:56:53.848893 2026] [:error] [pid 32255:tid 32303] [client 52.180.158.245:64788] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acl19Wnfn-AtRoMbqux66AAAAEw"]
[Mon Mar 30 02:56:55.061069 2026] [:error] [pid 23168:tid 23202] [client 52.180.158.245:64801] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acl192P8p0yRL8ot_28IEgAAAgU"]
[Mon Mar 30 02:56:57.288268 2026] [:error] [pid 8818:tid 8827] [client 52.180.158.245:19355] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acl1-SCDvotZNSF0FBon5QAAAUU"]
[Mon Mar 30 02:57:00.325858 2026] [:error] [pid 23284:tid 23307] [client 52.180.158.245:42698] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acl1_IzBujdPHsq7wyRszAAAApU"]
[Mon Mar 30 02:57:02.112534 2026] [:error] [pid 32257:tid 32339] [client 52.180.158.245:46619] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acl1_iE3TArOFrUtgWoD4wAAAJU"]
[Mon Mar 30 02:57:05.276175 2026] [:error] [pid 23284:tid 23289] [client 52.180.158.245:29634] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "acl2AYzBujdPHsq7wyRs3QAAAoM"]
[Mon Mar 30 02:57:07.926948 2026] [:error] [pid 32257:tid 32340] [client 52.180.158.245:32133] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "acl2AyE3TArOFrUtgWoD8AAAAJY"]
[Mon Mar 30 02:57:10.672206 2026] [:error] [pid 32359:tid 32365] [client 52.180.158.245:31203] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "acl2BgMb8G3UzfQP3WhZ3AAAAMQ"]
[Mon Mar 30 02:57:12.438274 2026] [:error] [pid 23284:tid 23302] [client 52.180.158.245:40400] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "acl2CIzBujdPHsq7wyRtHQAAApA"]
[Mon Mar 30 02:57:18.543388 2026] [:error] [pid 32255:tid 32308] [client 52.180.158.245:19342] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "acl2Dmnfn-AtRoMbqux7HAAAAFE"]
[Mon Mar 30 02:57:20.303774 2026] [:error] [pid 32255:tid 32298] [client 52.180.158.245:19683] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "acl2EGnfn-AtRoMbqux7HQAAAEc"]
[Mon Mar 30 02:57:21.931654 2026] [:error] [pid 23284:tid 23286] [client 52.180.158.245:14005] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "acl2EYzBujdPHsq7wyRtLgAAAoA"]
[Mon Mar 30 02:57:26.095575 2026] [:error] [pid 32257:tid 32325] [client 52.180.158.245:18530] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "acl2FiE3TArOFrUtgWoEJgAAAIc"]
[Mon Mar 30 02:57:28.162316 2026] [:error] [pid 32255:tid 32309] [client 52.180.158.245:18535] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acl2GGnfn-AtRoMbqux7LgAAAFI"]
[Mon Mar 30 02:57:32.249494 2026] [:error] [pid 32255:tid 32303] [client 52.180.158.245:32185] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acl2HGnfn-AtRoMbqux7OAAAAEw"]
[Mon Mar 30 02:57:33.996388 2026] [:error] [pid 23167:tid 23192] [client 52.180.158.245:2458] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acl2HRIAHJCFaHff3_cUTQAAAdY"]
[Mon Mar 30 02:57:38.467262 2026] [:error] [pid 32359:tid 32380] [client 52.180.158.245:2464] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acl2IgMb8G3UzfQP3WhZ6AAAANM"]
[Mon Mar 30 02:57:44.338638 2026] [:error] [pid 23168:tid 23200] [client 52.180.158.245:18497] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "acl2KGP8p0yRL8ot_28ITwAAAgM"]
[Mon Mar 30 02:58:09.388105 2026] [:error] [pid 32257:tid 32337] [client 52.180.158.245:2460] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acl2QSE3TArOFrUtgWoEygAAAJM"]
[Mon Mar 30 02:58:14.268037 2026] [:error] [pid 23284:tid 23309] [client 52.180.158.245:19192] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acl2RozBujdPHsq7wyRtYAAAApc"]
[Mon Mar 30 02:58:16.328897 2026] [:error] [pid 32255:tid 32297] [client 52.180.158.245:2917] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acl2SGnfn-AtRoMbqux7igAAAEY"]
[Mon Mar 30 02:58:23.803954 2026] [:error] [pid 23284:tid 23298] [client 52.180.158.245:20970] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "acl2T4zBujdPHsq7wyRtowAAAow"]
[Mon Mar 30 02:58:26.339972 2026] [:error] [pid 23168:tid 23212] [client 52.180.158.245:16112] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "acl2UmP8p0yRL8ot_28IkgAAAg8"]
[Mon Mar 30 02:58:29.634185 2026] [:error] [pid 23167:tid 23171] [client 52.180.158.245:2213] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "acl2VRIAHJCFaHff3_cUgwAAAcE"]
[Mon Mar 30 02:58:33.996205 2026] [:error] [pid 23284:tid 23290] [client 52.180.158.245:52420] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "acl2WYzBujdPHsq7wyRt0AAAAoQ"]
[Mon Mar 30 02:58:35.184228 2026] [:error] [pid 32255:tid 32306] [client 52.180.158.245:24489] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "acl2W2nfn-AtRoMbqux7rgAAAE8"]
[Mon Mar 30 02:58:41.115790 2026] [:error] [pid 32255:tid 32304] [client 52.180.158.245:18299] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "acl2YWnfn-AtRoMbqux7twAAAE0"]
[Mon Mar 30 02:58:46.757719 2026] [:error] [pid 32257:tid 32322] [client 52.180.158.245:17632] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "acl2ZiE3TArOFrUtgWoFTQAAAIQ"]
[Mon Mar 30 02:58:48.451799 2026] [:error] [pid 8818:tid 8824] [client 52.180.158.245:37234] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "acl2aCCDvotZNSF0FBooHwAAAUI"]
[Mon Mar 30 02:58:49.488220 2026] [:error] [pid 32257:tid 32337] [client 52.180.158.245:15462] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acl2aSE3TArOFrUtgWoFbwAAAJM"]
[Mon Mar 30 02:59:02.356218 2026] [:error] [pid 23284:tid 23300] [client 52.180.158.245:14692] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acl2dozBujdPHsq7wyRuGAAAAo4"]
[Mon Mar 30 02:59:07.221325 2026] [:error] [pid 32257:tid 32332] [client 52.180.158.245:12016] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acl2eyE3TArOFrUtgWoFwQAAAI4"]
[Mon Mar 30 02:59:11.664575 2026] [:error] [pid 32255:tid 32296] [client 52.180.158.245:25631] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acl2f2nfn-AtRoMbqux72gAAAEU"]
[Mon Mar 30 02:59:13.977591 2026] [:error] [pid 32257:tid 32340] [client 52.180.158.245:35828] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acl2gSE3TArOFrUtgWoF1wAAAJY"]
[Mon Mar 30 02:59:27.147921 2026] [:error] [pid 32257:tid 32341] [client 52.180.158.245:25609] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acl2jyE3TArOFrUtgWoGDAAAAJc"]
[Mon Mar 30 02:59:27.339854 2026] [:error] [pid 23168:tid 23211] [client 52.180.158.245:25904] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acl2j2P8p0yRL8ot_28JCAAAAg4"]
[Mon Mar 30 02:59:28.395498 2026] [:error] [pid 32257:tid 32338] [client 52.180.158.245:25609] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "acl2kCE3TArOFrUtgWoGFgAAAJQ"]
[Mon Mar 30 02:59:29.712506 2026] [:error] [pid 23137:tid 23150] [client 52.180.158.245:21527] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acl2kRaWQa7LdZ_qGFYwOAAAAYs"]
[Mon Mar 30 02:59:32.094773 2026] [:error] [pid 32257:tid 32322] [client 52.180.158.245:31734] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "acl2lCE3TArOFrUtgWoGJgAAAIQ"]
[Mon Mar 30 02:59:34.979533 2026] [:error] [pid 32257:tid 32336] [client 52.180.158.245:27124] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acl2liE3TArOFrUtgWoGNgAAAJI"]
[Mon Mar 30 02:59:35.175480 2026] [:error] [pid 23168:tid 23206] [client 52.180.158.245:25904] [client 52.180.158.245] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.180.158.245, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acl2l2P8p0yRL8ot_28JDwAAAgk"]
[Mon Mar 30 02:59:35.868222 2026] [:error] [pid 32257:tid 32332] [client 52.180.158.245:27124] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "acl2lyE3TArOFrUtgWoGPAAAAI4"]
[Mon Mar 30 02:59:46.696933 2026] [:error] [pid 32257:tid 32321] [client 52.180.158.245:31719] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acl2oiE3TArOFrUtgWoGRwAAAIM"]
[Mon Mar 30 02:59:48.327720 2026] [:error] [pid 32255:tid 32307] [client 52.180.158.245:14396] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acl2pGnfn-AtRoMbqux8GAAAAFA"]
[Mon Mar 30 02:59:50.161769 2026] [:error] [pid 23250:tid 23263] [client 52.180.158.245:17552] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acl2ppxrpj-dQjy1cvo_-gAAAks"]
[Mon Mar 30 02:59:53.377048 2026] [:error] [pid 23284:tid 23303] [client 52.180.158.245:34684] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acl2qYzBujdPHsq7wyRugwAAApE"]
[Mon Mar 30 03:00:00.368651 2026] [:error] [pid 8818:tid 8823] [client 52.180.158.245:34642] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acl2sCCDvotZNSF0FBooTwAAAUE"]
[Mon Mar 30 03:00:01.853859 2026] [:error] [pid 23284:tid 23287] [client 52.180.158.245:27938] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "acl2sYzBujdPHsq7wyRusAAAAoE"]
[Mon Mar 30 03:00:03.455656 2026] [:error] [pid 23284:tid 23309] [client 52.180.158.245:27587] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/style.php"] [unique_id "acl2s4zBujdPHsq7wyRuuQAAApc"]
[Mon Mar 30 03:00:05.714535 2026] [:error] [pid 23284:tid 23301] [client 52.180.158.245:21534] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/style.php"] [unique_id "acl2tYzBujdPHsq7wyRuwgAAAo8"]
[Mon Mar 30 03:00:07.160054 2026] [:error] [pid 23284:tid 23308] [client 52.180.158.245:12691] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/style.php"] [unique_id "acl2t4zBujdPHsq7wyRuzwAAApY"]
[Mon Mar 30 03:00:09.525459 2026] [:error] [pid 23168:tid 23212] [client 52.180.158.245:27918] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/style.php"] [unique_id "acl2uWP8p0yRL8ot_28JWQAAAg8"]
[Mon Mar 30 03:00:13.275462 2026] [:error] [pid 23167:tid 23185] [client 52.180.158.245:18757] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acl2vRIAHJCFaHff3_cU-QAAAc8"]
[Mon Mar 30 03:00:17.026220 2026] [:error] [pid 23168:tid 23207] [client 52.180.158.245:14354] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acl2wWP8p0yRL8ot_28JawAAAgo"]
[Mon Mar 30 03:00:19.499022 2026] [:error] [pid 32257:tid 32327] [client 52.180.158.245:31618] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acl2wyE3TArOFrUtgWoGgwAAAIk"]
[Mon Mar 30 03:00:21.810423 2026] [:error] [pid 32359:tid 32382] [client 52.180.158.245:11761] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acl2xQMb8G3UzfQP3WhaKgAAANU"]
[Mon Mar 30 03:00:24.136957 2026] [:error] [pid 32257:tid 32321] [client 52.180.158.245:2662] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "acl2yCE3TArOFrUtgWoGmQAAAIM"]
[Mon Mar 30 03:00:25.123561 2026] [:error] [pid 23284:tid 23305] [client 52.180.158.245:40352] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "acl2yYzBujdPHsq7wyRu2gAAApM"]
[Mon Mar 30 03:00:25.649560 2026] [:error] [pid 23284:tid 23297] [client 52.180.158.245:64861] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "acl2yYzBujdPHsq7wyRu3QAAAos"]
[Mon Mar 30 03:00:26.551394 2026] [:error] [pid 32255:tid 32299] [client 52.180.158.245:11488] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "acl2ymnfn-AtRoMbqux8RAAAAEg"]
[Mon Mar 30 03:00:27.040505 2026] [:error] [pid 32257:tid 32330] [client 52.180.158.245:17973] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acl2yyE3TArOFrUtgWoGqgAAAIw"]
[Mon Mar 30 03:00:28.654856 2026] [:error] [pid 32255:tid 32300] [client 52.180.158.245:38724] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acl2zGnfn-AtRoMbqux8SAAAAEk"]
[Mon Mar 30 03:00:29.162291 2026] [:error] [pid 32257:tid 32325] [client 52.180.158.245:32200] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acl2zSE3TArOFrUtgWoGuwAAAIc"]
[Mon Mar 30 03:00:30.030020 2026] [:error] [pid 23168:tid 23211] [client 52.180.158.245:32223] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acl2zmP8p0yRL8ot_28JegAAAg4"]
[Mon Mar 30 03:00:30.918445 2026] [:error] [pid 23168:tid 23217] [client 52.180.158.245:14060] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acl2zmP8p0yRL8ot_28JgAAAAhQ"]
[Mon Mar 30 03:00:33.903905 2026] [:error] [pid 32257:tid 32320] [client 52.180.158.245:38738] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acl20SE3TArOFrUtgWoG1gAAAII"]
[Mon Mar 30 03:00:39.349432 2026] [:error] [pid 32257:tid 32323] [client 52.180.158.245:32224] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acl21yE3TArOFrUtgWoHBgAAAIU"]
[Mon Mar 30 03:00:41.439996 2026] [:error] [pid 23284:tid 23294] [client 52.180.158.245:11470] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "acl22YzBujdPHsq7wyRu9AAAAog"]
[Mon Mar 30 03:00:43.722090 2026] [:error] [pid 23167:tid 23172] [client 52.180.158.245:24804] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "acl22xIAHJCFaHff3_cVIAAAAcI"]
[Mon Mar 30 03:00:50.824861 2026] [:error] [pid 8818:tid 8829] [client 52.180.158.245:12159] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "acl24iCDvotZNSF0FBoohAAAAUc"]
[Mon Mar 30 03:00:54.419367 2026] [:error] [pid 23250:tid 23266] [client 52.180.158.245:12470] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acl25pxrpj-dQjy1cvpAKQAAAk4"]
[Mon Mar 30 03:00:56.757976 2026] [:error] [pid 32255:tid 32306] [client 52.180.158.245:19612] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "acl26Gnfn-AtRoMbqux8ewAAAE8"]
[Mon Mar 30 03:00:59.359194 2026] [:error] [pid 32257:tid 32335] [client 52.180.158.245:28373] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Assets/edit.php"] [unique_id "acl26yE3TArOFrUtgWoHMAAAAJE"]
[Mon Mar 30 03:01:00.407304 2026] [:error] [pid 23284:tid 23295] [client 52.180.158.245:12423] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Assets/edit.php"] [unique_id "acl27IzBujdPHsq7wyRvJwAAAok"]
[Mon Mar 30 03:01:01.374543 2026] [:error] [pid 23168:tid 23219] [client 52.180.158.245:28396] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Assets/edit.php"] [unique_id "acl27WP8p0yRL8ot_28JmQAAAhY"]
[Mon Mar 30 03:01:02.132534 2026] [:error] [pid 32257:tid 32341] [client 52.180.158.245:19611] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acl27iE3TArOFrUtgWoHPgAAAJc"]
[Mon Mar 30 03:01:05.200174 2026] [:error] [pid 23284:tid 23293] [client 52.180.158.245:50686] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/file.php"] [unique_id "acl28YzBujdPHsq7wyRvQAAAAoc"]
[Mon Mar 30 03:01:13.972891 2026] [:error] [pid 32257:tid 32342] [client 52.180.158.245:26647] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/file.php"] [unique_id "acl2-SE3TArOFrUtgWoHlQAAAJg"]
[Mon Mar 30 03:01:16.204359 2026] [:error] [pid 32257:tid 32330] [client 52.180.158.245:12743] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/file.php"] [unique_id "acl2_CE3TArOFrUtgWoHtQAAAIw"]
[Mon Mar 30 03:01:20.471865 2026] [:error] [pid 23284:tid 23300] [client 52.180.158.245:26638] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acl3AIzBujdPHsq7wyRveAAAAo4"]
[Mon Mar 30 03:01:26.357940 2026] [:error] [pid 32255:tid 32299] [client 52.180.158.245:19097] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "acl3Bmnfn-AtRoMbqux82QAAAEg"]
[Mon Mar 30 03:01:40.310106 2026] [:error] [pid 32255:tid 32304] [client 52.180.158.245:20712] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acl3FGnfn-AtRoMbqux9AAAAAE0"]
[Mon Mar 30 03:01:44.407925 2026] [:error] [pid 23137:tid 23149] [client 52.180.158.245:25042] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/packed.php"] [unique_id "acl3GBaWQa7LdZ_qGFYwiQAAAYo"]
[Mon Mar 30 03:01:49.504514 2026] [:error] [pid 32257:tid 32335] [client 52.180.158.245:30650] [client 52.180.158.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/packed.php"] [unique_id "acl3HSE3TArOFrUtgWoH7QAAAJE"]
[Mon Mar 30 03:02:10.261670 2026] [:error] [pid 32255:tid 32292] [client 52.180.158.245:64137] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "acl3Mmnfn-AtRoMbqux9SAAAAEE"]
[Mon Mar 30 03:02:14.629644 2026] [:error] [pid 32257:tid 32323] [client 52.180.158.245:12765] [client 52.180.158.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "acl3NiE3TArOFrUtgWoIQAAAAIU"]
[Mon Mar 30 03:32:51.363594 2026] [:error] [pid 38506:tid 38559] [client 43.155.140.157:38814] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acl-Y_UyZmgjmPCzwDgMbgAAAFQ"]
[Mon Mar 30 06:06:15.927440 2026] [:error] [pid 55884:tid 55961] [client 43.153.135.208:49686] [client 43.153.135.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acmiVzjuYLVkve3VbhyoKgAAAQg"]
[Mon Mar 30 09:42:47.188582 2026] [:error] [pid 35248:tid 35264] [client 162.158.95.7:11528] [client 162.158.95.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/index"] [unique_id "acnVF73igMCgAQPFS_-w7wAAAEo"]
[Mon Mar 30 09:42:47.200097 2026] [:error] [pid 35248:tid 35276] [client 162.158.94.50:11865] [client 162.158.94.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "acnVF73igMCgAQPFS_-w8AAAAFY"]
[Mon Mar 30 09:42:47.200427 2026] [:error] [pid 35248:tid 35271] [client 162.158.94.51:9692] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/logs/HEAD"] [unique_id "acnVF73igMCgAQPFS_-w8QAAAFE"]
[Mon Mar 30 09:42:47.202978 2026] [:error] [pid 35248:tid 35262] [client 162.158.94.50:11858] [client 162.158.94.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/refs/heads/main"] [unique_id "acnVF73igMCgAQPFS_-w8gAAAEg"]
[Mon Mar 30 09:42:47.265805 2026] [:error] [pid 35248:tid 35275] [client 162.158.94.94:10927] [client 162.158.94.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/refs/heads/master"] [unique_id "acnVF73igMCgAQPFS_-w9AAAAFU"]
[Mon Mar 30 09:42:47.281297 2026] [:error] [pid 35248:tid 35267] [client 162.158.94.95:13705] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "acnVF73igMCgAQPFS_-w-AAAAE0"]
[Mon Mar 30 09:42:48.233723 2026] [:error] [pid 35248:tid 35262] [client 162.158.95.8:10226] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "acnVGL3igMCgAQPFS_-xkwAAAEg"]
[Mon Mar 30 09:42:48.247300 2026] [:error] [pid 35248:tid 35272] [client 162.158.94.94:10929] [client 162.158.94.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "acnVGL3igMCgAQPFS_-xlAAAAFI"]
[Mon Mar 30 09:42:48.249703 2026] [:error] [pid 35248:tid 35269] [client 162.158.94.95:13707] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "acnVGL3igMCgAQPFS_-xlgAAAE8"]
[Mon Mar 30 09:42:48.249703 2026] [:error] [pid 35248:tid 35275] [client 162.158.95.7:11530] [client 162.158.95.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "acnVGL3igMCgAQPFS_-xlQAAAFU"]
[Mon Mar 30 09:42:48.299559 2026] [:error] [pid 35248:tid 35274] [client 162.158.94.94:10936] [client 162.158.94.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "acnVGL3igMCgAQPFS_-xogAAAFQ"]
[Mon Mar 30 09:42:48.339046 2026] [:error] [pid 35248:tid 35255] [client 162.158.94.51:9699] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "acnVGL3igMCgAQPFS_-xowAAAEE"]
[Mon Mar 30 09:42:49.276556 2026] [:error] [pid 35249:tid 35285] [client 162.158.94.94:10943] [client 162.158.94.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "acnVGSqCKiTq85d6rgAD-wAAAIE"]
[Mon Mar 30 09:42:49.288664 2026] [:error] [pid 64743:tid 64767] [client 162.158.95.7:11542] [client 162.158.95.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "acnVGSzmpVL6Ubzil4g2CwAAAVY"]
[Mon Mar 30 09:42:49.288687 2026] [:error] [pid 64743:tid 64769] [client 162.158.95.118:13471] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "acnVGSzmpVL6Ubzil4g2CgAAAVg"]
[Mon Mar 30 09:42:49.293028 2026] [:error] [pid 35343:tid 35350] [client 162.158.95.7:11537] [client 162.158.95.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "acnVGaP5HurqmbvwN-IqWwAAAAU"]
[Mon Mar 30 09:42:49.331822 2026] [:error] [pid 35249:tid 35301] [client 162.158.94.51:9700] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "acnVGSqCKiTq85d6rgAD_AAAAJE"]
[Mon Mar 30 09:42:49.378024 2026] [:error] [pid 35343:tid 35357] [client 162.158.95.8:10234] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.tmp"] [unique_id "acnVGaP5HurqmbvwN-IqYQAAAAw"]
[Mon Mar 30 09:42:50.321965 2026] [:error] [pid 35250:tid 35312] [client 162.158.95.8:9598] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development.local"] [unique_id "acnVGoaKM1MR6zcp2YN4-wAAAME"]
[Mon Mar 30 09:42:50.322393 2026] [:error] [pid 35250:tid 35314] [client 162.158.95.118:14063] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production.local"] [unique_id "acnVGoaKM1MR6zcp2YN4_AAAAMM"]
[Mon Mar 30 09:42:50.329381 2026] [:error] [pid 35250:tid 35327] [client 162.158.95.7:12527] [client 162.158.95.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "acnVGoaKM1MR6zcp2YN4_QAAANA"]
[Mon Mar 30 09:42:50.338707 2026] [:error] [pid 35250:tid 35323] [client 162.158.94.94:10948] [client 162.158.94.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "acnVGoaKM1MR6zcp2YN4_gAAAMw"]
[Mon Mar 30 09:42:50.379099 2026] [:error] [pid 35250:tid 35313] [client 162.158.95.7:12530] [client 162.158.95.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "acnVGoaKM1MR6zcp2YN5AAAAAMI"]
[Mon Mar 30 09:42:50.419062 2026] [:error] [pid 35343:tid 35351] [client 162.158.95.7:12532] [client 162.158.95.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "acnVGqP5HurqmbvwN-IqtQAAAAY"]
[Mon Mar 30 09:42:51.351287 2026] [:error] [pid 35248:tid 35270] [client 162.158.95.117:10406] [client 162.158.95.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "acnVG73igMCgAQPFS_-yoAAAAFA"]
[Mon Mar 30 09:42:51.371393 2026] [:error] [pid 35248:tid 35263] [client 162.158.94.51:9713] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env"] [unique_id "acnVG73igMCgAQPFS_-ypgAAAEk"]
[Mon Mar 30 09:42:51.371662 2026] [:error] [pid 35248:tid 35271] [client 162.158.95.8:9603] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env"] [unique_id "acnVG73igMCgAQPFS_-ypwAAAFE"]
[Mon Mar 30 09:42:51.374289 2026] [:error] [pid 35343:tid 35352] [client 162.158.94.51:9705] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "acnVG6P5HurqmbvwN-Iq-QAAAAc"]
[Mon Mar 30 09:42:51.419517 2026] [:error] [pid 35249:tid 35295] [client 162.158.95.7:12539] [client 162.158.95.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/private/.env"] [unique_id "acnVGyqCKiTq85d6rgAEEAAAAIs"]
[Mon Mar 30 09:42:52.401983 2026] [:error] [pid 35248:tid 35256] [client 162.158.95.8:9609] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.local"] [unique_id "acnVHL3igMCgAQPFS_-zDwAAAEI"]
[Mon Mar 30 09:42:52.413599 2026] [:error] [pid 35248:tid 35268] [client 162.158.95.118:14071] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.php"] [unique_id "acnVHL3igMCgAQPFS_-zEAAAAE4"]
[Mon Mar 30 09:42:52.426354 2026] [:error] [pid 41941:tid 41955] [client 162.158.94.95:10885] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.json"] [unique_id "acnVHCB2g7BNCXGBOJNl4AAAAQw"]
[Mon Mar 30 09:42:52.430402 2026] [:error] [pid 35343:tid 35349] [client 162.158.95.7:12545] [client 162.158.95.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_backup"] [unique_id "acnVHKP5HurqmbvwN-IrMQAAAAQ"]
[Mon Mar 30 09:42:52.450750 2026] [:error] [pid 35343:tid 35362] [client 162.158.94.94:11729] [client 162.158.94.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env~"] [unique_id "acnVHKP5HurqmbvwN-IrMgAAABE"]
[Mon Mar 30 09:42:52.521370 2026] [:error] [pid 35343:tid 35352] [client 162.158.94.95:10887] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env1"] [unique_id "acnVHKP5HurqmbvwN-IrOAAAAAc"]
[Mon Mar 30 09:42:52.672444 2026] [:error] [pid 35248:tid 35270] [client 162.158.95.118:14064] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "acnVHL3igMCgAQPFS_-zJgAAAFA"]
[Mon Mar 30 09:42:53.445342 2026] [:error] [pid 35343:tid 35361] [client 162.158.94.51:9720] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env2"] [unique_id "acnVHaP5HurqmbvwN-IraQAAABA"]
[Mon Mar 30 09:42:53.499875 2026] [:error] [pid 64743:tid 64766] [client 162.158.95.117:10407] [client 162.158.95.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.envrc"] [unique_id "acnVHSzmpVL6Ubzil4g2jwAAAVU"]
[Mon Mar 30 09:42:53.500585 2026] [:error] [pid 64743:tid 64769] [client 162.158.94.51:9726] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production.bak"] [unique_id "acnVHSzmpVL6Ubzil4g2kAAAAVg"]
[Mon Mar 30 09:42:53.501689 2026] [:error] [pid 64743:tid 64750] [client 162.158.94.51:9724] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.orig"] [unique_id "acnVHSzmpVL6Ubzil4g2kQAAAUU"]
[Mon Mar 30 09:42:53.583333 2026] [:error] [pid 64743:tid 64765] [client 162.158.95.117:10415] [client 162.158.95.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "acnVHSzmpVL6Ubzil4g2kgAAAVQ"]
[Mon Mar 30 09:42:53.714711 2026] [:error] [pid 35248:tid 35266] [client 162.158.94.50:11868] [client 162.158.94.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev.local"] [unique_id "acnVHb3igMCgAQPFS_-zVAAAAEw"]
[Mon Mar 30 09:42:54.490075 2026] [:error] [pid 35343:tid 35350] [client 162.158.95.118:14078] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.docker"] [unique_id "acnVHqP5HurqmbvwN-IrsQAAAAU"]
[Mon Mar 30 09:42:54.560116 2026] [:error] [pid 35250:tid 35318] [client 162.158.95.7:12549] [client 162.158.95.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/docker/.env"] [unique_id "acnVHoaKM1MR6zcp2YN5ogAAAMc"]
[Mon Mar 30 09:42:54.618906 2026] [:error] [pid 35250:tid 35319] [client 162.158.94.95:10893] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/docker/.env.local"] [unique_id "acnVHoaKM1MR6zcp2YN5owAAAMg"]
[Mon Mar 30 09:42:54.766557 2026] [:error] [pid 35343:tid 35352] [client 162.158.95.8:9616] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/server/.env"] [unique_id "acnVHqP5HurqmbvwN-IrtAAAAAc"]
[Mon Mar 30 09:42:55.526453 2026] [:error] [pid 35343:tid 35354] [client 162.158.94.51:12962] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/srv/.env"] [unique_id "acnVH6P5HurqmbvwN-IsCQAAAAk"]
[Mon Mar 30 09:42:55.605336 2026] [:error] [pid 35343:tid 35353] [client 162.158.94.94:11735] [client 162.158.94.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web/.env"] [unique_id "acnVH6P5HurqmbvwN-IsCgAAAAg"]
[Mon Mar 30 09:42:55.650594 2026] [:error] [pid 35343:tid 35348] [client 162.158.95.8:9618] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/site/.env"] [unique_id "acnVH6P5HurqmbvwN-IsEgAAAAM"]
[Mon Mar 30 09:42:55.653515 2026] [:error] [pid 35343:tid 35352] [client 162.158.94.51:12961] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.container"] [unique_id "acnVH6P5HurqmbvwN-IsEwAAAAc"]
[Mon Mar 30 09:42:55.661808 2026] [:error] [pid 35343:tid 35364] [client 162.158.94.95:10896] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/www/.env"] [unique_id "acnVH6P5HurqmbvwN-IsFAAAABM"]
[Mon Mar 30 09:42:55.824597 2026] [:error] [pid 35343:tid 35345] [client 162.158.94.95:10898] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/var/www/.env"] [unique_id "acnVH6P5HurqmbvwN-IsHQAAAAA"]
[Mon Mar 30 09:42:56.563191 2026] [:error] [pid 35343:tid 35360] [client 162.158.94.51:12970] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/var/www/html/.env"] [unique_id "acnVIKP5HurqmbvwN-IsSQAAAA8"]
[Mon Mar 30 09:42:56.645698 2026] [:error] [pid 35249:tid 35303] [client 162.158.94.50:13538] [client 162.158.94.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/home/.env"] [unique_id "acnVICqCKiTq85d6rgAEdgAAAJM"]
[Mon Mar 30 09:42:56.694672 2026] [:error] [pid 35343:tid 35353] [client 162.158.94.95:10904] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_config"] [unique_id "acnVIKP5HurqmbvwN-IsVQAAAAg"]
[Mon Mar 30 09:42:56.705447 2026] [:error] [pid 35248:tid 35262] [client 162.158.94.50:13546] [client 162.158.94.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/root/.env"] [unique_id "acnVIL3igMCgAQPFS_-0PgAAAEg"]
[Mon Mar 30 09:42:56.712845 2026] [:error] [pid 35343:tid 35354] [client 162.158.94.95:10908] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_secret"] [unique_id "acnVIKP5HurqmbvwN-IsVwAAAAk"]
[Mon Mar 30 09:42:56.872149 2026] [:error] [pid 35248:tid 35265] [client 162.158.95.118:14086] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_settings"] [unique_id "acnVIL3igMCgAQPFS_-0SgAAAEs"]
[Mon Mar 30 09:42:57.166712 2026] [:error] [pid 64743:tid 64750] [client 162.158.94.51:10218] [client 162.158.94.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "acnVISzmpVL6Ubzil4g3QwAAAUU"]
[Mon Mar 30 09:42:57.226690 2026] [:error] [pid 35248:tid 35268] [client 162.158.94.94:11594] [client 162.158.94.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/index"] [unique_id "acnVIb3igMCgAQPFS_-0YwAAAE4"]
[Mon Mar 30 09:42:57.241861 2026] [:error] [pid 35249:tid 35296] [client 162.158.95.118:13189] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/logs/HEAD"] [unique_id "acnVISqCKiTq85d6rgAEggAAAIw"]
[Mon Mar 30 09:42:57.398496 2026] [:error] [pid 35248:tid 35277] [client 162.158.95.8:12744] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/refs/heads/master"] [unique_id "acnVIb3igMCgAQPFS_-0hgAAAFc"]
[Mon Mar 30 09:42:57.696373 2026] [:error] [pid 35250:tid 35313] [client 162.158.94.50:11339] [client 162.158.94.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/refs/heads/main"] [unique_id "acnVIYaKM1MR6zcp2YN6FgAAAMI"]
[Mon Mar 30 09:42:57.746914 2026] [:error] [pid 64743:tid 64756] [client 162.158.94.94:11600] [client 162.158.94.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "acnVISzmpVL6Ubzil4g3YQAAAUs"]
[Mon Mar 30 09:42:57.777445 2026] [:error] [pid 35250:tid 35315] [client 162.158.95.8:12746] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "acnVIYaKM1MR6zcp2YN6HQAAAMQ"]
[Mon Mar 30 09:42:58.220911 2026] [:error] [pid 35248:tid 35257] [client 162.158.94.95:10458] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "acnVIr3igMCgAQPFS_-1HAAAAEM"]
[Mon Mar 30 09:42:58.269808 2026] [:error] [pid 35343:tid 35365] [client 162.158.94.95:10465] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "acnVIqP5HurqmbvwN-IshgAAABQ"]
[Mon Mar 30 09:42:58.306853 2026] [:error] [pid 35343:tid 35354] [client 162.158.95.8:12748] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "acnVIqP5HurqmbvwN-IsjAAAAAk"]
[Mon Mar 30 09:42:58.807295 2026] [:error] [pid 35248:tid 35270] [client 162.158.94.95:10466] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "acnVIr3igMCgAQPFS_-1awAAAFA"]
[Mon Mar 30 09:42:58.839273 2026] [:error] [pid 35248:tid 35262] [client 162.158.95.8:12755] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "acnVIr3igMCgAQPFS_-1dQAAAEg"]
[Mon Mar 30 09:42:59.378880 2026] [:error] [pid 35250:tid 35311] [client 162.158.94.95:10467] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "acnVI4aKM1MR6zcp2YN6ZQAAAMA"]
[Mon Mar 30 09:43:16.340915 2026] [:error] [pid 35250:tid 35312] [client 162.158.95.118:12921] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "acnVNIaKM1MR6zcp2YN8MQAAAME"]
[Mon Mar 30 09:43:16.637100 2026] [:error] [pid 35343:tid 35366] [client 172.69.186.76:13632] [client 172.69.186.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development.local"] [unique_id "acnVNKP5HurqmbvwN-Iu8QAAABU"]
[Mon Mar 30 09:43:16.917064 2026] [:error] [pid 35249:tid 35300] [client 172.69.186.178:11463] [client 172.69.186.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "acnVNCqCKiTq85d6rgAFWgAAAJA"]
[Mon Mar 30 09:43:17.127201 2026] [:error] [pid 35343:tid 35367] [client 172.69.186.141:12327] [client 172.69.186.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "acnVNaP5HurqmbvwN-Iu8wAAABY"]
[Mon Mar 30 09:43:17.424135 2026] [:error] [pid 35343:tid 35349] [client 162.158.95.117:12379] [client 162.158.95.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "acnVNaP5HurqmbvwN-Iu9AAAAAQ"]
[Mon Mar 30 09:43:17.643089 2026] [:error] [pid 35343:tid 35351] [client 162.158.95.117:12380] [client 162.158.95.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "acnVNaP5HurqmbvwN-Iu9QAAAAY"]
[Mon Mar 30 09:43:17.710836 2026] [:error] [pid 35250:tid 35317] [client 172.69.186.160:11706] [client 172.69.186.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "acnVNYaKM1MR6zcp2YN8NQAAAMY"]
[Mon Mar 30 09:43:18.169294 2026] [:error] [pid 35249:tid 35305] [client 162.158.94.50:10851] [client 162.158.94.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env"] [unique_id "acnVNiqCKiTq85d6rgAFXQAAAJU"]
[Mon Mar 30 09:43:18.217188 2026] [:error] [pid 41941:tid 41957] [client 162.158.94.95:10931] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env"] [unique_id "acnVNiB2g7BNCXGBOJNnXgAAAQ4"]
[Mon Mar 30 09:43:18.387602 2026] [:error] [pid 41941:tid 41958] [client 162.158.94.94:10985] [client 162.158.94.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/private/.env"] [unique_id "acnVNiB2g7BNCXGBOJNnXwAAAQ8"]
[Mon Mar 30 09:43:18.741290 2026] [:error] [pid 64743:tid 64768] [client 162.158.95.118:12927] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.local"] [unique_id "acnVNizmpVL6Ubzil4g4aAAAAVc"]
[Mon Mar 30 09:43:18.898374 2026] [:error] [pid 35343:tid 35365] [client 162.158.94.95:10934] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.php"] [unique_id "acnVNqP5HurqmbvwN-Iu-gAAABQ"]
[Mon Mar 30 09:43:18.903480 2026] [:error] [pid 35343:tid 35347] [client 162.158.95.118:12931] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.json"] [unique_id "acnVNqP5HurqmbvwN-Iu-wAAAAI"]
[Mon Mar 30 09:43:18.972159 2026] [:error] [pid 35343:tid 35359] [client 162.158.95.118:12924] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_backup"] [unique_id "acnVNqP5HurqmbvwN-Iu_AAAAA4"]
[Mon Mar 30 09:43:19.403413 2026] [:error] [pid 35248:tid 35274] [client 162.158.95.8:10036] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env1"] [unique_id "acnVN73igMCgAQPFS_-4UAAAAFQ"]
[Mon Mar 30 09:43:19.415688 2026] [:error] [pid 64743:tid 64748] [client 162.158.95.118:12933] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env2"] [unique_id "acnVNyzmpVL6Ubzil4g4aQAAAUM"]
[Mon Mar 30 09:43:19.425746 2026] [:error] [pid 64743:tid 64769] [client 162.158.94.95:10940] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "acnVNyzmpVL6Ubzil4g4agAAAVg"]
[Mon Mar 30 09:43:19.502472 2026] [:error] [pid 64743:tid 64745] [client 162.158.94.50:10857] [client 162.158.94.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.envrc"] [unique_id "acnVNyzmpVL6Ubzil4g4awAAAUA"]
[Mon Mar 30 09:43:19.933350 2026] [:error] [pid 35250:tid 35333] [client 162.158.95.118:13167] [client 162.158.95.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production.bak"] [unique_id "acnVN4aKM1MR6zcp2YN8NwAAANY"]
[Mon Mar 30 09:43:19.940764 2026] [:error] [pid 35343:tid 35352] [client 162.158.95.117:13580] [client 162.158.95.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "acnVN6P5HurqmbvwN-Iu_wAAAAc"]
[Mon Mar 30 09:43:20.036250 2026] [:error] [pid 64743:tid 64765] [client 162.158.95.117:13588] [client 162.158.95.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev.local"] [unique_id "acnVOCzmpVL6Ubzil4g4bgAAAVQ"]
[Mon Mar 30 09:43:20.455888 2026] [:error] [pid 35343:tid 35364] [client 162.158.95.117:13589] [client 162.158.95.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.container"] [unique_id "acnVOKP5HurqmbvwN-IvAAAAABM"]
[Mon Mar 30 09:43:20.564011 2026] [:error] [pid 35343:tid 35355] [client 162.158.95.117:13593] [client 162.158.95.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/docker/.env"] [unique_id "acnVOKP5HurqmbvwN-IvAgAAAAo"]
[Mon Mar 30 09:43:22.172143 2026] [:error] [pid 35343:tid 35365] [client 162.158.94.95:10750] [client 162.158.94.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/docker/.env.local"] [unique_id "acnVOqP5HurqmbvwN-IvBgAAABQ"]
[Mon Mar 30 09:43:38.849006 2026] [:error] [pid 35250:tid 35317] [client 162.158.95.8:10127] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web/.env"] [unique_id "acnVSoaKM1MR6zcp2YN8YAAAAMY"]
[Mon Mar 30 09:43:39.377134 2026] [:error] [pid 35343:tid 35358] [client 162.158.95.8:13051] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/site/.env"] [unique_id "acnVS6P5HurqmbvwN-IvGQAAAA0"]
[Mon Mar 30 09:43:39.662423 2026] [:error] [pid 64743:tid 64750] [client 172.69.186.173:12696] [client 172.69.186.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/var/www/html/.env"] [unique_id "acnVSyzmpVL6Ubzil4g4fQAAAUU"]
[Mon Mar 30 09:43:39.865369 2026] [:error] [pid 35343:tid 35363] [client 162.158.95.8:13055] [client 162.158.95.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/var/www/.env"] [unique_id "acnVS6P5HurqmbvwN-IvHAAAABI"]
[Mon Mar 30 09:43:40.165724 2026] [:error] [pid 35343:tid 35360] [client 172.69.186.115:11572] [client 172.69.186.115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_config"] [unique_id "acnVTKP5HurqmbvwN-IvHQAAAA8"]
[Mon Mar 30 09:43:55.412379 2026] [:error] [pid 35343:tid 35349] [client 172.69.186.77:11444] [client 172.69.186.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local.backup"] [unique_id "acnVW6P5HurqmbvwN-IvOwAAAAQ"]
[Mon Mar 30 10:30:43.107166 2026] [:error] [pid 35343:tid 35361] [client 49.51.166.228:60946] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acngU6P5HurqmbvwN-JHTgAAABA"]
[Mon Mar 30 10:39:26.832065 2026] [:error] [pid 35248:tid 35277] [client 43.138.68.113:55574] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acniXr3igMCgAQPFS__hXwAAAFc"]
[Mon Mar 30 13:44:08.852024 2026] [:error] [pid 41941:tid 41966] [client 23.95.212.247:4612] [client 23.95.212.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "acoNqCB2g7BNCXGBOJOuTwAAARc"]
[Mon Mar 30 13:44:10.940725 2026] [:error] [pid 35249:tid 35293] [client 109.207.132.57:35724] [client 109.207.132.57] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/usr/local/apache/modsecurity-cwaf/rules/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||measureyourcause.com.au|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/realrawnepal.com.au/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "acoNqiqCKiTq85d6rgAxawAAAIk"]
[Mon Mar 30 19:18:42.458551 2026] [:error] [pid 41941:tid 41955] [client 49.51.50.147:58794] [client 49.51.50.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acpcEiB2g7BNCXGBOJNqeQAAAQw"]
[Mon Mar 30 23:09:38.904268 2026] [:error] [pid 60746:tid 60783] [client 43.130.3.120:59818] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acqSMp4kQrgjDdAbQCopXQAAAIc"]
[Mon Mar 30 23:37:19.320923 2026] [:error] [pid 60745:tid 60757] [client 98.159.37.231:42313] [client 98.159.37.231] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acqYryQDBn75QnHaPb9V8gAAAEg"]
[Mon Mar 30 23:47:56.386193 2026] [:error] [pid 63557:tid 63570] [client 182.42.110.255:48303] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acqbLK4QNVlzYgEvIjnWmAAAAQs"]
[Tue Mar 31 01:28:42.869780 2026] [:error] [pid 36688:tid 36853] [client 4.205.211.88:19439] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acqyypIe8NBGKiiCIcIM4QAAAJI"]
[Tue Mar 31 01:28:43.301072 2026] [:error] [pid 36706:tid 36876] [client 4.205.211.88:19409] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acqyy7a-eBLL1E34-UXwuwAAAM4"]
[Tue Mar 31 01:28:43.713971 2026] [:error] [pid 36939:tid 36949] [client 4.205.211.88:19417] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acqyy8RDKH225Jeq1jc-fAAAAAg"]
[Tue Mar 31 01:28:44.134406 2026] [:error] [pid 36672:tid 36825] [client 4.205.211.88:18886] [client 4.205.211.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acqyzLKHDzEfeL3XiLpAcAAAAFI"]
[Tue Mar 31 02:03:45.543391 2026] [:error] [pid 39123:tid 39135] [client 158.158.51.236:65226] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "acq7ASobgVY20PMQKVt7SgAAAQo"]
[Tue Mar 31 02:03:46.024166 2026] [:error] [pid 36939:tid 36951] [client 158.158.51.236:65205] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "acq7AsRDKH225Jeq1jdW5gAAAAo"]
[Tue Mar 31 02:03:46.600805 2026] [:error] [pid 36706:tid 36881] [client 158.158.51.236:65229] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "acq7Ara-eBLL1E34-UUDaAAAANM"]
[Tue Mar 31 02:03:47.094861 2026] [:error] [pid 36939:tid 36952] [client 158.158.51.236:65195] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "acq7A8RDKH225Jeq1jdW6gAAAAs"]
[Tue Mar 31 02:03:47.585560 2026] [:error] [pid 39123:tid 39138] [client 158.158.51.236:65201] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acq7AyobgVY20PMQKVt7UAAAAQ0"]
[Tue Mar 31 02:03:48.079221 2026] [:error] [pid 36939:tid 36963] [client 158.158.51.236:65270] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acq7BMRDKH225Jeq1jdW8gAAABY"]
[Tue Mar 31 02:03:48.592540 2026] [:error] [pid 36939:tid 36961] [client 158.158.51.236:65235] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acq7BMRDKH225Jeq1jdW9wAAABQ"]
[Tue Mar 31 02:03:49.075291 2026] [:error] [pid 36672:tid 36827] [client 158.158.51.236:65276] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "acq7BbKHDzEfeL3XiLpM4QAAAFQ"]
[Tue Mar 31 02:03:49.578924 2026] [:error] [pid 39123:tid 39146] [client 158.158.51.236:65222] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acq7BSobgVY20PMQKVt7UwAAARU"]
[Tue Mar 31 02:03:50.062746 2026] [:error] [pid 39123:tid 39141] [client 158.158.51.236:65202] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acq7BiobgVY20PMQKVt7VQAAARA"]
[Tue Mar 31 02:03:50.557794 2026] [:error] [pid 39123:tid 39145] [client 158.158.51.236:65265] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acq7BiobgVY20PMQKVt7WAAAARQ"]
[Tue Mar 31 02:03:51.040506 2026] [:error] [pid 39123:tid 39144] [client 158.158.51.236:65166] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "acq7ByobgVY20PMQKVt7XQAAARM"]
[Tue Mar 31 02:03:51.523324 2026] [:error] [pid 39123:tid 39132] [client 158.158.51.236:65250] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "acq7ByobgVY20PMQKVt7YAAAAQc"]
[Tue Mar 31 02:03:52.025642 2026] [:error] [pid 36688:tid 36845] [client 158.158.51.236:65197] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "acq7CJIe8NBGKiiCIcIc7gAAAIo"]
[Tue Mar 31 02:03:52.509290 2026] [:error] [pid 36706:tid 36863] [client 158.158.51.236:65169] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "acq7CLa-eBLL1E34-UUDbwAAAME"]
[Tue Mar 31 02:03:52.990164 2026] [:error] [pid 36688:tid 36836] [client 158.158.51.236:65238] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "acq7CJIe8NBGKiiCIcIc9AAAAIE"]
[Tue Mar 31 02:03:53.473199 2026] [:error] [pid 36706:tid 36881] [client 158.158.51.236:64621] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acq7Cba-eBLL1E34-UUDdQAAANM"]
[Tue Mar 31 02:03:53.954021 2026] [:error] [pid 39123:tid 39128] [client 158.158.51.236:65261] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acq7CSobgVY20PMQKVt7awAAAQM"]
[Tue Mar 31 02:03:54.453109 2026] [:error] [pid 36706:tid 36872] [client 158.158.51.236:65220] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acq7Cra-eBLL1E34-UUDeQAAAMo"]
[Tue Mar 31 02:03:54.950325 2026] [:error] [pid 36939:tid 36944] [client 158.158.51.236:65200] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "acq7CsRDKH225Jeq1jdXAAAAAAM"]
[Tue Mar 31 02:03:55.436672 2026] [:error] [pid 36939:tid 36943] [client 158.158.51.236:65272] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acq7C8RDKH225Jeq1jdXBQAAAAI"]
[Tue Mar 31 02:03:55.929827 2026] [:error] [pid 36939:tid 36958] [client 158.158.51.236:65252] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acq7C8RDKH225Jeq1jdXCgAAABE"]
[Tue Mar 31 02:03:56.416072 2026] [:error] [pid 36939:tid 36952] [client 158.158.51.236:65154] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acq7DMRDKH225Jeq1jdXDwAAAAs"]
[Tue Mar 31 02:03:56.906572 2026] [:error] [pid 39123:tid 39129] [client 158.158.51.236:65228] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "acq7DCobgVY20PMQKVt7bwAAAQQ"]
[Tue Mar 31 02:03:57.396735 2026] [:error] [pid 39123:tid 39131] [client 158.158.51.236:65233] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sale.php"] [unique_id "acq7DSobgVY20PMQKVt7cgAAAQY"]
[Tue Mar 31 02:03:57.887645 2026] [:error] [pid 36688:tid 36858] [client 158.158.51.236:65157] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sale.php"] [unique_id "acq7DZIe8NBGKiiCIcIc_AAAAJc"]
[Tue Mar 31 02:03:58.368950 2026] [:error] [pid 36688:tid 36843] [client 158.158.51.236:65193] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sale.php"] [unique_id "acq7DpIe8NBGKiiCIcIc_wAAAIg"]
[Tue Mar 31 02:03:58.866206 2026] [:error] [pid 36672:tid 36818] [client 158.158.51.236:62230] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sale.php"] [unique_id "acq7DrKHDzEfeL3XiLpM6wAAAEs"]
[Tue Mar 31 02:03:59.380441 2026] [:error] [pid 36688:tid 36855] [client 158.158.51.236:65255] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acq7D5Ie8NBGKiiCIcIdAgAAAJQ"]
[Tue Mar 31 02:03:59.885776 2026] [:error] [pid 36688:tid 36849] [client 158.158.51.236:65170] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acq7D5Ie8NBGKiiCIcIdBQAAAI4"]
[Tue Mar 31 02:04:00.381281 2026] [:error] [pid 39123:tid 39127] [client 158.158.51.236:65190] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acq7ECobgVY20PMQKVt7fAAAAQI"]
[Tue Mar 31 02:04:00.872521 2026] [:error] [pid 36672:tid 36830] [client 158.158.51.236:65215] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "acq7ELKHDzEfeL3XiLpM7wAAAFc"]
[Tue Mar 31 02:04:01.351155 2026] [:error] [pid 36706:tid 36866] [client 158.158.51.236:64593] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2ksm17n.php"] [unique_id "acq7Eba-eBLL1E34-UUDhAAAAMQ"]
[Tue Mar 31 02:04:01.834420 2026] [:error] [pid 39123:tid 39132] [client 158.158.51.236:62209] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2ksm17n.php"] [unique_id "acq7ESobgVY20PMQKVt7gQAAAQc"]
[Tue Mar 31 02:04:02.331472 2026] [:error] [pid 39123:tid 39134] [client 158.158.51.236:65199] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2ksm17n.php"] [unique_id "acq7EiobgVY20PMQKVt7hgAAAQk"]
[Tue Mar 31 02:04:02.819311 2026] [:error] [pid 39123:tid 39138] [client 158.158.51.236:62235] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2ksm17n.php"] [unique_id "acq7EiobgVY20PMQKVt7iAAAAQ0"]
[Tue Mar 31 02:04:03.335511 2026] [:error] [pid 39123:tid 39142] [client 158.158.51.236:65241] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "acq7EyobgVY20PMQKVt7iwAAARE"]
[Tue Mar 31 02:04:03.815780 2026] [:error] [pid 36688:tid 36837] [client 158.158.51.236:65188] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "acq7E5Ie8NBGKiiCIcIdCQAAAII"]
[Tue Mar 31 02:04:04.334469 2026] [:error] [pid 39123:tid 39128] [client 158.158.51.236:65259] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "acq7FCobgVY20PMQKVt7jgAAAQM"]
[Tue Mar 31 02:04:04.840587 2026] [:error] [pid 36688:tid 36855] [client 158.158.51.236:65185] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "acq7FJIe8NBGKiiCIcIdDQAAAJQ"]
[Tue Mar 31 02:04:05.345308 2026] [:error] [pid 39123:tid 39138] [client 158.158.51.236:65271] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hots.php"] [unique_id "acq7FSobgVY20PMQKVt7lQAAAQ0"]
[Tue Mar 31 02:04:05.871472 2026] [:error] [pid 39123:tid 39148] [client 158.158.51.236:65240] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hots.php"] [unique_id "acq7FSobgVY20PMQKVt7mQAAARc"]
[Tue Mar 31 02:04:06.364670 2026] [:error] [pid 39123:tid 39136] [client 158.158.51.236:65266] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hots.php"] [unique_id "acq7FiobgVY20PMQKVt7nAAAAQs"]
[Tue Mar 31 02:04:06.878130 2026] [:error] [pid 36672:tid 36823] [client 158.158.51.236:65214] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hots.php"] [unique_id "acq7FrKHDzEfeL3XiLpM_AAAAFA"]
[Tue Mar 31 02:04:07.375915 2026] [:error] [pid 36672:tid 36826] [client 158.158.51.236:65260] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acq7F7KHDzEfeL3XiLpNAAAAAFM"]
[Tue Mar 31 02:04:07.910293 2026] [:error] [pid 36672:tid 36809] [client 158.158.51.236:65223] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acq7F7KHDzEfeL3XiLpNAgAAAEI"]
[Tue Mar 31 02:04:08.412929 2026] [:error] [pid 36672:tid 36829] [client 158.158.51.236:65242] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acq7GLKHDzEfeL3XiLpNAwAAAFY"]
[Tue Mar 31 02:04:08.966880 2026] [:error] [pid 39123:tid 39139] [client 158.158.51.236:65247] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "acq7GCobgVY20PMQKVt7rAAAAQ4"]
[Tue Mar 31 02:04:09.478438 2026] [:error] [pid 36706:tid 36871] [client 158.158.51.236:65153] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acq7Gba-eBLL1E34-UUDiQAAAMk"]
[Tue Mar 31 02:04:09.963733 2026] [:error] [pid 36706:tid 36883] [client 158.158.51.236:65196] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acq7Gba-eBLL1E34-UUDigAAANU"]
[Tue Mar 31 02:04:10.448848 2026] [:error] [pid 39123:tid 39139] [client 158.158.51.236:65194] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acq7GiobgVY20PMQKVt7tgAAAQ4"]
[Tue Mar 31 02:04:10.964294 2026] [:error] [pid 39123:tid 39128] [client 158.158.51.236:62228] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acq7GiobgVY20PMQKVt7ugAAAQM"]
[Tue Mar 31 02:04:11.449213 2026] [:error] [pid 36706:tid 36866] [client 158.158.51.236:65251] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acq7G7a-eBLL1E34-UUDjQAAAMQ"]
[Tue Mar 31 02:04:11.955068 2026] [:error] [pid 39123:tid 39139] [client 158.158.51.236:65244] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acq7GyobgVY20PMQKVt7wQAAAQ4"]
[Tue Mar 31 02:04:12.434407 2026] [:error] [pid 36706:tid 36868] [client 158.158.51.236:62238] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acq7HLa-eBLL1E34-UUDkAAAAMY"]
[Tue Mar 31 02:04:12.925971 2026] [:error] [pid 36706:tid 36880] [client 158.158.51.236:65163] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acq7HLa-eBLL1E34-UUDkgAAANI"]
[Tue Mar 31 02:04:13.404551 2026] [:error] [pid 36706:tid 36875] [client 158.158.51.236:64595] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acq7Hba-eBLL1E34-UUDlAAAAM0"]
[Tue Mar 31 02:04:13.883803 2026] [:error] [pid 36706:tid 36879] [client 158.158.51.236:65213] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acq7Hba-eBLL1E34-UUDmAAAANE"]
[Tue Mar 31 02:04:14.365315 2026] [:error] [pid 36672:tid 36813] [client 158.158.51.236:64609] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acq7HrKHDzEfeL3XiLpNDQAAAEY"]
[Tue Mar 31 02:04:14.844557 2026] [:error] [pid 39123:tid 39147] [client 158.158.51.236:62208] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acq7HiobgVY20PMQKVt7zQAAARY"]
[Tue Mar 31 02:04:15.325867 2026] [:error] [pid 39123:tid 39125] [client 158.158.51.236:65177] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acq7HyobgVY20PMQKVt70AAAAQA"]
[Tue Mar 31 02:04:15.821311 2026] [:error] [pid 39123:tid 39130] [client 158.158.51.236:65267] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acq7HyobgVY20PMQKVt70wAAAQU"]
[Tue Mar 31 02:04:16.321525 2026] [:error] [pid 36688:tid 36842] [client 158.158.51.236:65227] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acq7IJIe8NBGKiiCIcIdFwAAAIc"]
[Tue Mar 31 02:04:16.806797 2026] [:error] [pid 39123:tid 39134] [client 158.158.51.236:65246] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "acq7ICobgVY20PMQKVt71wAAAQk"]
[Tue Mar 31 02:04:17.354042 2026] [:error] [pid 39123:tid 39146] [client 158.158.51.236:65181] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "acq7ISobgVY20PMQKVt73AAAARU"]
[Tue Mar 31 02:04:17.840285 2026] [:error] [pid 39123:tid 39145] [client 158.158.51.236:65211] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "acq7ISobgVY20PMQKVt74gAAARQ"]
[Tue Mar 31 02:04:18.324572 2026] [:error] [pid 36939:tid 36955] [client 158.158.51.236:65168] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "acq7IsRDKH225Jeq1jdXIAAAAA4"]
[Tue Mar 31 02:04:18.804669 2026] [:error] [pid 36688:tid 36849] [client 158.158.51.236:65152] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "acq7IpIe8NBGKiiCIcIdHAAAAI4"]
[Tue Mar 31 02:04:19.296830 2026] [:error] [pid 36688:tid 36859] [client 158.158.51.236:64601] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acq7I5Ie8NBGKiiCIcIdHQAAAJg"]
[Tue Mar 31 02:04:19.781600 2026] [:error] [pid 36672:tid 36808] [client 158.158.51.236:64592] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acq7I7KHDzEfeL3XiLpNFQAAAEE"]
[Tue Mar 31 02:04:20.275131 2026] [:error] [pid 36939:tid 36951] [client 158.158.51.236:62244] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acq7JMRDKH225Jeq1jdXIwAAAAo"]
[Tue Mar 31 02:04:20.761899 2026] [:error] [pid 39123:tid 39138] [client 158.158.51.236:65183] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "acq7JCobgVY20PMQKVt75wAAAQ0"]
[Tue Mar 31 02:04:21.244401 2026] [:error] [pid 39123:tid 39146] [client 158.158.51.236:65159] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acq7JSobgVY20PMQKVt76AAAARU"]
[Tue Mar 31 02:04:21.744089 2026] [:error] [pid 36688:tid 36842] [client 158.158.51.236:65198] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acq7JZIe8NBGKiiCIcIdJwAAAIc"]
[Tue Mar 31 02:04:22.229568 2026] [:error] [pid 36672:tid 36816] [client 158.158.51.236:65171] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acq7JrKHDzEfeL3XiLpNIQAAAEk"]
[Tue Mar 31 02:04:22.740161 2026] [:error] [pid 39123:tid 39127] [client 158.158.51.236:62222] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "acq7JiobgVY20PMQKVt78AAAAQI"]
[Tue Mar 31 02:04:23.232728 2026] [:error] [pid 36688:tid 36835] [client 158.158.51.236:64610] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "acq7J5Ie8NBGKiiCIcIdKQAAAIA"]
[Tue Mar 31 02:04:23.733965 2026] [:error] [pid 36688:tid 36857] [client 158.158.51.236:65256] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "acq7J5Ie8NBGKiiCIcIdKgAAAJY"]
[Tue Mar 31 02:04:24.233879 2026] [:error] [pid 36939:tid 36944] [client 158.158.51.236:65219] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "acq7KMRDKH225Jeq1jdXKwAAAAM"]
[Tue Mar 31 02:04:24.745337 2026] [:error] [pid 36939:tid 36959] [client 158.158.51.236:65217] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "acq7KMRDKH225Jeq1jdXLwAAABI"]
[Tue Mar 31 02:04:25.223849 2026] [:error] [pid 36939:tid 36961] [client 158.158.51.236:64602] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acq7KcRDKH225Jeq1jdXMQAAABQ"]
[Tue Mar 31 02:04:25.707546 2026] [:error] [pid 39123:tid 39127] [client 158.158.51.236:65174] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acq7KSobgVY20PMQKVt7_gAAAQI"]
[Tue Mar 31 02:04:26.186466 2026] [:error] [pid 39123:tid 39143] [client 158.158.51.236:65225] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acq7KiobgVY20PMQKVt8AgAAARI"]
[Tue Mar 31 02:04:26.670554 2026] [:error] [pid 36939:tid 36947] [client 158.158.51.236:65178] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "acq7KsRDKH225Jeq1jdXNwAAAAY"]
[Tue Mar 31 02:04:27.154386 2026] [:error] [pid 39123:tid 39125] [client 158.158.51.236:65180] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acq7KyobgVY20PMQKVt8CwAAAQA"]
[Tue Mar 31 02:04:27.650515 2026] [:error] [pid 36688:tid 36845] [client 158.158.51.236:64141] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acq7K5Ie8NBGKiiCIcIdMQAAAIo"]
[Tue Mar 31 02:04:28.143197 2026] [:error] [pid 39123:tid 39141] [client 158.158.51.236:64629] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acq7LCobgVY20PMQKVt8EgAAARA"]
[Tue Mar 31 02:04:28.625021 2026] [:error] [pid 39123:tid 39146] [client 158.158.51.236:65248] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "acq7LCobgVY20PMQKVt8FwAAARU"]
[Tue Mar 31 02:04:29.110532 2026] [:error] [pid 39123:tid 39126] [client 158.158.51.236:65173] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acq7LSobgVY20PMQKVt8HAAAAQE"]
[Tue Mar 31 02:04:29.593502 2026] [:error] [pid 39123:tid 39132] [client 158.158.51.236:65231] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acq7LSobgVY20PMQKVt8IAAAAQc"]
[Tue Mar 31 02:04:30.081580 2026] [:error] [pid 36688:tid 36840] [client 158.158.51.236:65210] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acq7LpIe8NBGKiiCIcIdMwAAAIU"]
[Tue Mar 31 02:04:30.564694 2026] [:error] [pid 39123:tid 39127] [client 158.158.51.236:65254] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "acq7LiobgVY20PMQKVt8JwAAAQI"]
[Tue Mar 31 02:04:31.071214 2026] [:error] [pid 39123:tid 39144] [client 158.158.51.236:65189] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acq7LyobgVY20PMQKVt8KgAAARM"]
[Tue Mar 31 02:04:31.555332 2026] [:error] [pid 39123:tid 39131] [client 158.158.51.236:65249] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acq7LyobgVY20PMQKVt8LgAAAQY"]
[Tue Mar 31 02:04:32.040939 2026] [:error] [pid 39123:tid 39127] [client 158.158.51.236:64147] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acq7MCobgVY20PMQKVt8NQAAAQI"]
[Tue Mar 31 02:04:32.519168 2026] [:error] [pid 36688:tid 36844] [client 158.158.51.236:64582] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "acq7MJIe8NBGKiiCIcIdNQAAAIk"]
[Tue Mar 31 02:04:33.001261 2026] [:error] [pid 39123:tid 39135] [client 158.158.51.236:62214] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "acq7MSobgVY20PMQKVt8OwAAAQo"]
[Tue Mar 31 02:04:33.481921 2026] [:error] [pid 39123:tid 39133] [client 158.158.51.236:65191] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "acq7MSobgVY20PMQKVt8PgAAAQg"]
[Tue Mar 31 02:04:33.961839 2026] [:error] [pid 39123:tid 39132] [client 158.158.51.236:64599] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "acq7MSobgVY20PMQKVt8QgAAAQc"]
[Tue Mar 31 02:04:34.448555 2026] [:error] [pid 39123:tid 39149] [client 158.158.51.236:65207] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "acq7MiobgVY20PMQKVt8RgAAARg"]
[Tue Mar 31 02:04:34.949892 2026] [:error] [pid 39123:tid 39141] [client 158.158.51.236:65232] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acq7MiobgVY20PMQKVt8SwAAARA"]
[Tue Mar 31 02:04:35.448153 2026] [:error] [pid 36706:tid 36875] [client 158.158.51.236:62260] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acq7M7a-eBLL1E34-UUDqQAAAM0"]
[Tue Mar 31 02:04:35.932167 2026] [:error] [pid 36706:tid 36866] [client 158.158.51.236:64588] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acq7M7a-eBLL1E34-UUDqgAAAMQ"]
[Tue Mar 31 02:04:36.431101 2026] [:error] [pid 36939:tid 36951] [client 158.158.51.236:65155] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "acq7NMRDKH225Jeq1jdXRAAAAAo"]
[Tue Mar 31 02:04:36.924976 2026] [:error] [pid 36688:tid 36836] [client 158.158.51.236:65257] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acq7NJIe8NBGKiiCIcIdPQAAAIE"]
[Tue Mar 31 02:04:37.415135 2026] [:error] [pid 36706:tid 36868] [client 158.158.51.236:65192] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acq7Nba-eBLL1E34-UUDqwAAAMY"]
[Tue Mar 31 02:04:37.892789 2026] [:error] [pid 36939:tid 36964] [client 158.158.51.236:64622] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acq7NcRDKH225Jeq1jdXSAAAABc"]
[Tue Mar 31 02:04:38.382349 2026] [:error] [pid 36706:tid 36863] [client 158.158.51.236:65274] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "acq7Nra-eBLL1E34-UUDrAAAAME"]
[Tue Mar 31 02:04:38.862967 2026] [:error] [pid 36939:tid 36945] [client 158.158.51.236:64624] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acq7NsRDKH225Jeq1jdXTwAAAAQ"]
[Tue Mar 31 02:04:39.349595 2026] [:error] [pid 36688:tid 36837] [client 158.158.51.236:64615] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acq7N5Ie8NBGKiiCIcIdQgAAAII"]
[Tue Mar 31 02:04:39.829620 2026] [:error] [pid 36939:tid 36951] [client 158.158.51.236:65206] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acq7N8RDKH225Jeq1jdXUwAAAAo"]
[Tue Mar 31 02:04:40.314081 2026] [:error] [pid 39123:tid 39134] [client 158.158.51.236:64638] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acq7OCobgVY20PMQKVt8WwAAAQk"]
[Tue Mar 31 02:04:40.805768 2026] [:error] [pid 36939:tid 36948] [client 158.158.51.236:65236] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acq7OMRDKH225Jeq1jdXWgAAAAc"]
[Tue Mar 31 02:04:41.299983 2026] [:error] [pid 36688:tid 36855] [client 158.158.51.236:65277] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acq7OZIe8NBGKiiCIcIdRgAAAJQ"]
[Tue Mar 31 02:04:41.798741 2026] [:error] [pid 36688:tid 36836] [client 158.158.51.236:64076] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acq7OZIe8NBGKiiCIcIdSgAAAIE"]
[Tue Mar 31 02:04:42.280288 2026] [:error] [pid 36688:tid 36856] [client 158.158.51.236:64578] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "acq7OpIe8NBGKiiCIcIdTAAAAJU"]
[Tue Mar 31 02:04:42.816350 2026] [:error] [pid 36672:tid 36831] [client 158.158.51.236:64596] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "acq7OrKHDzEfeL3XiLpNKwAAAFg"]
[Tue Mar 31 02:04:43.312564 2026] [:error] [pid 39123:tid 39136] [client 158.158.51.236:62227] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "acq7OyobgVY20PMQKVt8YAAAAQs"]
[Tue Mar 31 02:04:43.797878 2026] [:error] [pid 36688:tid 36848] [client 158.158.51.236:65161] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "acq7O5Ie8NBGKiiCIcIdTgAAAI0"]
[Tue Mar 31 02:04:44.281996 2026] [:error] [pid 36672:tid 36812] [client 158.158.51.236:62269] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "acq7PLKHDzEfeL3XiLpNLQAAAEU"]
[Tue Mar 31 02:04:44.772079 2026] [:error] [pid 39123:tid 39128] [client 158.158.51.236:64612] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acq7PCobgVY20PMQKVt8awAAAQM"]
[Tue Mar 31 02:04:51.530650 2026] [:error] [pid 39123:tid 39140] [client 158.158.51.236:62221] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acq7QyobgVY20PMQKVt8jAAAAQ8"]
[Tue Mar 31 02:04:52.011622 2026] [:error] [pid 39123:tid 39138] [client 158.158.51.236:65258] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acq7RCobgVY20PMQKVt8kQAAAQ0"]
[Tue Mar 31 02:04:52.495368 2026] [:error] [pid 39123:tid 39134] [client 158.158.51.236:65172] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acq7RCobgVY20PMQKVt8kgAAAQk"]
[Tue Mar 31 02:04:52.974928 2026] [:error] [pid 39123:tid 39129] [client 158.158.51.236:64620] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "acq7RCobgVY20PMQKVt8mAAAAQQ"]
[Tue Mar 31 02:04:53.468522 2026] [:error] [pid 36706:tid 36885] [client 158.158.51.236:65275] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acq7Rba-eBLL1E34-UUDzgAAANc"]
[Tue Mar 31 02:04:53.959738 2026] [:error] [pid 36939:tid 36954] [client 158.158.51.236:65187] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acq7RcRDKH225Jeq1jdXdwAAAA0"]
[Tue Mar 31 02:04:54.448281 2026] [:error] [pid 36672:tid 36819] [client 158.158.51.236:65221] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acq7RrKHDzEfeL3XiLpNOQAAAEw"]
[Tue Mar 31 02:04:54.935611 2026] [:error] [pid 36939:tid 36960] [client 158.158.51.236:64579] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "acq7RsRDKH225Jeq1jdXfQAAABM"]
[Tue Mar 31 02:04:55.439793 2026] [:error] [pid 36688:tid 36857] [client 158.158.51.236:64156] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "acq7R5Ie8NBGKiiCIcIdVwAAAJY"]
[Tue Mar 31 02:04:55.933473 2026] [:error] [pid 36706:tid 36884] [client 158.158.51.236:65268] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "acq7R7a-eBLL1E34-UUD0gAAANY"]
[Tue Mar 31 02:04:56.437739 2026] [:error] [pid 36706:tid 36870] [client 158.158.51.236:62252] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "acq7SLa-eBLL1E34-UUD1AAAAMg"]
[Tue Mar 31 02:04:56.949275 2026] [:error] [pid 36939:tid 36948] [client 158.158.51.236:65204] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "acq7SMRDKH225Jeq1jdXiAAAAAc"]
[Tue Mar 31 02:04:57.524338 2026] [:error] [pid 36939:tid 36942] [client 158.158.51.236:65218] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lowpr.php"] [unique_id "acq7ScRDKH225Jeq1jdXjAAAAAE"]
[Tue Mar 31 02:04:58.089974 2026] [:error] [pid 39123:tid 39145] [client 158.158.51.236:65279] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lowpr.php"] [unique_id "acq7SiobgVY20PMQKVt8pwAAARQ"]
[Tue Mar 31 02:04:58.693740 2026] [:error] [pid 36939:tid 36942] [client 158.158.51.236:62265] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lowpr.php"] [unique_id "acq7SsRDKH225Jeq1jdXlQAAAAE"]
[Tue Mar 31 02:04:59.330125 2026] [:error] [pid 39123:tid 39131] [client 158.158.51.236:65212] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lowpr.php"] [unique_id "acq7SyobgVY20PMQKVt8qQAAAQY"]
[Tue Mar 31 02:05:00.975934 2026] [:error] [pid 36688:tid 36850] [client 158.158.51.236:65208] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acq7TJIe8NBGKiiCIcIdXwAAAI8"]
[Tue Mar 31 02:05:02.223658 2026] [:error] [pid 36706:tid 36877] [client 158.158.51.236:64077] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acq7Tra-eBLL1E34-UUD3gAAAM8"]
[Tue Mar 31 02:05:03.480619 2026] [:error] [pid 36706:tid 36876] [client 158.158.51.236:64616] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acq7T7a-eBLL1E34-UUD3wAAAM4"]
[Tue Mar 31 02:05:04.072612 2026] [:error] [pid 36706:tid 36873] [client 158.158.51.236:62212] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acq7ULa-eBLL1E34-UUD4AAAAMs"]
[Tue Mar 31 02:05:04.614151 2026] [:error] [pid 36672:tid 36828] [client 158.158.51.236:65162] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "acq7ULKHDzEfeL3XiLpNSQAAAFU"]
[Tue Mar 31 02:05:05.133687 2026] [:error] [pid 36672:tid 36810] [client 158.158.51.236:65245] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "acq7UbKHDzEfeL3XiLpNUgAAAEM"]
[Tue Mar 31 02:05:05.689315 2026] [:error] [pid 36672:tid 36821] [client 158.158.51.236:64583] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "acq7UbKHDzEfeL3XiLpNVgAAAE4"]
[Tue Mar 31 02:05:06.211291 2026] [:error] [pid 36672:tid 36811] [client 158.158.51.236:65160] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "acq7UrKHDzEfeL3XiLpNWgAAAEQ"]
[Tue Mar 31 02:05:06.725302 2026] [:error] [pid 36706:tid 36873] [client 158.158.51.236:64633] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acq7Ura-eBLL1E34-UUD8AAAAMs"]
[Tue Mar 31 02:05:07.261712 2026] [:error] [pid 39123:tid 39141] [client 158.158.51.236:65234] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acq7UyobgVY20PMQKVt8wAAAARA"]
[Tue Mar 31 02:05:07.746645 2026] [:error] [pid 36688:tid 36853] [client 158.158.51.236:65220] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acq7U5Ie8NBGKiiCIcIdiAAAAJI"]
[Tue Mar 31 02:05:08.247891 2026] [:error] [pid 39123:tid 39134] [client 158.158.51.236:65203] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "acq7VCobgVY20PMQKVt8xAAAAQk"]
[Tue Mar 31 02:05:08.767703 2026] [:error] [pid 36706:tid 36862] [client 158.158.51.236:65273] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acq7VLa-eBLL1E34-UUD8QAAAMA"]
[Tue Mar 31 02:05:09.364194 2026] [:error] [pid 36688:tid 36855] [client 158.158.51.236:62261] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acq7VZIe8NBGKiiCIcIdjAAAAJQ"]
[Tue Mar 31 02:05:09.916796 2026] [:error] [pid 36939:tid 36952] [client 158.158.51.236:65278] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acq7VcRDKH225Jeq1jdXqAAAAAs"]
[Tue Mar 31 02:05:10.440913 2026] [:error] [pid 36688:tid 36858] [client 158.158.51.236:62249] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acq7VpIe8NBGKiiCIcIdkAAAAJc"]
[Tue Mar 31 02:05:10.973513 2026] [:error] [pid 39123:tid 39130] [client 158.158.51.236:64597] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acq7ViobgVY20PMQKVt8zAAAAQU"]
[Tue Mar 31 02:05:11.526939 2026] [:error] [pid 36939:tid 36951] [client 158.158.51.236:64170] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acq7V8RDKH225Jeq1jdXsAAAAAo"]
[Tue Mar 31 02:05:12.093304 2026] [:error] [pid 39123:tid 39145] [client 158.158.51.236:64173] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acq7WCobgVY20PMQKVt8zgAAARQ"]
[Tue Mar 31 02:05:12.619325 2026] [:error] [pid 36672:tid 36818] [client 158.158.51.236:64587] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "acq7WLKHDzEfeL3XiLpNZQAAAEs"]
[Tue Mar 31 02:05:13.128423 2026] [:error] [pid 39123:tid 39127] [client 158.158.51.236:62236] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "acq7WSobgVY20PMQKVt80wAAAQI"]
[Tue Mar 31 02:05:13.612959 2026] [:error] [pid 36688:tid 36835] [client 158.158.51.236:62216] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "acq7WZIe8NBGKiiCIcIdpgAAAIA"]
[Tue Mar 31 02:05:14.096639 2026] [:error] [pid 36939:tid 36955] [client 158.158.51.236:65263] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "acq7WsRDKH225Jeq1jdXuQAAAA4"]
[Tue Mar 31 02:05:14.595813 2026] [:error] [pid 36672:tid 36829] [client 158.158.51.236:62220] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "acq7WrKHDzEfeL3XiLpNaAAAAFY"]
[Tue Mar 31 02:05:15.121141 2026] [:error] [pid 36939:tid 36965] [client 158.158.51.236:64589] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acq7W8RDKH225Jeq1jdXuwAAABg"]
[Tue Mar 31 02:05:15.680652 2026] [:error] [pid 36939:tid 36941] [client 158.158.51.236:64608] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acq7W8RDKH225Jeq1jdXvQAAAAA"]
[Tue Mar 31 02:05:16.203718 2026] [:error] [pid 39123:tid 39139] [client 158.158.51.236:64634] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acq7XCobgVY20PMQKVt82AAAAQ4"]
[Tue Mar 31 02:05:16.775947 2026] [:error] [pid 39123:tid 39135] [client 158.158.51.236:64157] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acq7XCobgVY20PMQKVt82gAAAQo"]
[Tue Mar 31 02:05:17.271021 2026] [:error] [pid 39123:tid 39131] [client 158.158.51.236:64603] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ne2026.php"] [unique_id "acq7XSobgVY20PMQKVt84AAAAQY"]
[Tue Mar 31 02:05:17.820078 2026] [:error] [pid 39123:tid 39139] [client 158.158.51.236:62231] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ne2026.php"] [unique_id "acq7XSobgVY20PMQKVt85wAAAQ4"]
[Tue Mar 31 02:05:18.343872 2026] [:error] [pid 39123:tid 39137] [client 158.158.51.236:64632] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ne2026.php"] [unique_id "acq7XiobgVY20PMQKVt86QAAAQw"]
[Tue Mar 31 02:05:18.837651 2026] [:error] [pid 36939:tid 36949] [client 158.158.51.236:65264] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ne2026.php"] [unique_id "acq7XsRDKH225Jeq1jdXwgAAAAg"]
[Tue Mar 31 02:05:19.400667 2026] [:error] [pid 39123:tid 39129] [client 158.158.51.236:62213] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws73.php"] [unique_id "acq7XyobgVY20PMQKVt88wAAAQQ"]
[Tue Mar 31 02:05:19.890470 2026] [:error] [pid 39123:tid 39133] [client 158.158.51.236:64581] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws73.php"] [unique_id "acq7XyobgVY20PMQKVt89wAAAQg"]
[Tue Mar 31 02:05:20.386439 2026] [:error] [pid 39123:tid 39127] [client 158.158.51.236:64631] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws73.php"] [unique_id "acq7YCobgVY20PMQKVt8_QAAAQI"]
[Tue Mar 31 02:05:20.868156 2026] [:error] [pid 36688:tid 36845] [client 158.158.51.236:64635] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws73.php"] [unique_id "acq7YJIe8NBGKiiCIcId0AAAAIo"]
[Tue Mar 31 02:05:21.384542 2026] [:error] [pid 36939:tid 36941] [client 158.158.51.236:64617] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acq7YcRDKH225Jeq1jdXxAAAAAA"]
[Tue Mar 31 02:05:21.867250 2026] [:error] [pid 36688:tid 36848] [client 158.158.51.236:64139] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acq7YZIe8NBGKiiCIcId1wAAAI0"]
[Tue Mar 31 02:05:22.383320 2026] [:error] [pid 36939:tid 36948] [client 158.158.51.236:62254] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acq7YsRDKH225Jeq1jdXxwAAAAc"]
[Tue Mar 31 02:05:22.865695 2026] [:error] [pid 36688:tid 36855] [client 158.158.51.236:65224] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "acq7YpIe8NBGKiiCIcId4QAAAJQ"]
[Tue Mar 31 02:05:23.364688 2026] [:error] [pid 36706:tid 36876] [client 158.158.51.236:64626] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "acq7Y7a-eBLL1E34-UUD_QAAAM4"]
[Tue Mar 31 02:05:23.850764 2026] [:error] [pid 36939:tid 36949] [client 158.158.51.236:65158] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "acq7Y8RDKH225Jeq1jdXzQAAAAg"]
[Tue Mar 31 02:05:24.332655 2026] [:error] [pid 36939:tid 36951] [client 158.158.51.236:62224] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "acq7ZMRDKH225Jeq1jdXzwAAAAo"]
[Tue Mar 31 02:05:24.828158 2026] [:error] [pid 36939:tid 36942] [client 158.158.51.236:62219] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/baixy.php"] [unique_id "acq7ZMRDKH225Jeq1jdX0wAAAAE"]
[Tue Mar 31 02:05:25.359372 2026] [:error] [pid 36706:tid 36866] [client 158.158.51.236:64585] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "acq7Zba-eBLL1E34-UUEBAAAAMQ"]
[Tue Mar 31 02:05:25.845157 2026] [:error] [pid 39123:tid 39149] [client 158.158.51.236:65176] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "acq7ZSobgVY20PMQKVt9CQAAARg"]
[Tue Mar 31 02:05:26.324093 2026] [:error] [pid 36672:tid 36822] [client 158.158.51.236:64166] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "acq7ZrKHDzEfeL3XiLpNcgAAAE8"]
[Tue Mar 31 02:05:26.806152 2026] [:error] [pid 36688:tid 36835] [client 158.158.51.236:64607] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "acq7ZpIe8NBGKiiCIcId_QAAAIA"]
[Tue Mar 31 02:05:27.286963 2026] [:error] [pid 36688:tid 36850] [client 158.158.51.236:62262] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acq7Z5Ie8NBGKiiCIcIeAQAAAI8"]
[Tue Mar 31 02:05:27.771553 2026] [:error] [pid 36688:tid 36843] [client 158.158.51.236:64131] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acq7Z5Ie8NBGKiiCIcIeBgAAAIg"]
[Tue Mar 31 02:05:28.283832 2026] [:error] [pid 36706:tid 36868] [client 158.158.51.236:62242] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acq7aLa-eBLL1E34-UUECgAAAMY"]
[Tue Mar 31 02:05:28.769111 2026] [:error] [pid 36706:tid 36874] [client 158.158.51.236:62264] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "acq7aLa-eBLL1E34-UUECwAAAMw"]
[Tue Mar 31 02:05:29.268648 2026] [:error] [pid 36688:tid 36837] [client 158.158.51.236:64136] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acq7aZIe8NBGKiiCIcIeFAAAAII"]
[Tue Mar 31 02:05:29.750813 2026] [:error] [pid 36706:tid 36878] [client 158.158.51.236:64627] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acq7aba-eBLL1E34-UUEEAAAANA"]
[Tue Mar 31 02:05:30.232160 2026] [:error] [pid 36706:tid 36882] [client 158.158.51.236:62232] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acq7ara-eBLL1E34-UUEEgAAANQ"]
[Tue Mar 31 02:05:30.713839 2026] [:error] [pid 36939:tid 36944] [client 158.158.51.236:62263] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acq7asRDKH225Jeq1jdX8AAAAAM"]
[Tue Mar 31 02:05:31.220674 2026] [:error] [pid 36939:tid 36946] [client 158.158.51.236:62234] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "acq7a8RDKH225Jeq1jdX8gAAAAU"]
[Tue Mar 31 02:05:31.727325 2026] [:error] [pid 36688:tid 36858] [client 158.158.51.236:64600] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "acq7a5Ie8NBGKiiCIcIeJQAAAJc"]
[Tue Mar 31 02:05:32.220011 2026] [:error] [pid 39123:tid 39128] [client 158.158.51.236:64639] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "acq7bCobgVY20PMQKVt9FAAAAQM"]
[Tue Mar 31 02:05:32.711132 2026] [:error] [pid 36939:tid 36942] [client 158.158.51.236:65253] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "acq7bMRDKH225Jeq1jdX-gAAAAE"]
[Tue Mar 31 02:05:33.201682 2026] [:error] [pid 39123:tid 39145] [client 158.158.51.236:62256] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acq7bSobgVY20PMQKVt9GgAAARQ"]
[Tue Mar 31 02:05:33.731406 2026] [:error] [pid 39123:tid 39133] [client 158.158.51.236:65194] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acq7bSobgVY20PMQKVt9HgAAAQg"]
[Tue Mar 31 02:05:34.211812 2026] [:error] [pid 36688:tid 36838] [client 158.158.51.236:64150] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acq7bpIe8NBGKiiCIcIeLAAAAIM"]
[Tue Mar 31 02:05:34.726732 2026] [:error] [pid 36939:tid 36947] [client 158.158.51.236:64174] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "acq7bsRDKH225Jeq1jdX_QAAAAY"]
[Tue Mar 31 02:05:35.232510 2026] [:error] [pid 36672:tid 36829] [client 158.158.51.236:64148] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acq7b7KHDzEfeL3XiLpNeQAAAFY"]
[Tue Mar 31 02:05:35.728779 2026] [:error] [pid 36706:tid 36886] [client 158.158.51.236:62250] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acq7b7a-eBLL1E34-UUEMgAAANg"]
[Tue Mar 31 02:05:36.212451 2026] [:error] [pid 36688:tid 36842] [client 158.158.51.236:62267] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acq7cJIe8NBGKiiCIcIeMAAAAIc"]
[Tue Mar 31 02:05:36.719845 2026] [:error] [pid 36939:tid 36954] [client 158.158.51.236:64128] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "acq7cMRDKH225Jeq1jdYBAAAAA0"]
[Tue Mar 31 02:05:37.209911 2026] [:error] [pid 36939:tid 36959] [client 158.158.51.236:64069] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acq7ccRDKH225Jeq1jdYCAAAABI"]
[Tue Mar 31 02:05:37.740348 2026] [:error] [pid 36939:tid 36963] [client 158.158.51.236:65179] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acq7ccRDKH225Jeq1jdYCgAAABY"]
[Tue Mar 31 02:05:38.224293 2026] [:error] [pid 39123:tid 39148] [client 158.158.51.236:64623] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acq7ciobgVY20PMQKVt9KAAAARc"]
[Tue Mar 31 02:05:38.769047 2026] [:error] [pid 36939:tid 36949] [client 158.158.51.236:62266] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acq7csRDKH225Jeq1jdYFQAAAAg"]
[Tue Mar 31 02:05:39.255779 2026] [:error] [pid 39123:tid 39136] [client 158.158.51.236:64576] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "acq7cyobgVY20PMQKVt9MAAAAQs"]
[Tue Mar 31 02:05:39.778873 2026] [:error] [pid 36939:tid 36949] [client 158.158.51.236:62223] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "acq7c8RDKH225Jeq1jdYIwAAAAg"]
[Tue Mar 31 02:05:40.263512 2026] [:error] [pid 39123:tid 39127] [client 158.158.51.236:65262] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "acq7dCobgVY20PMQKVt9NwAAAQI"]
[Tue Mar 31 02:05:40.743335 2026] [:error] [pid 36688:tid 36856] [client 158.158.51.236:64149] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "acq7dJIe8NBGKiiCIcIeNwAAAJU"]
[Tue Mar 31 02:05:41.225445 2026] [:error] [pid 39123:tid 39126] [client 158.158.51.236:64191] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acq7dSobgVY20PMQKVt9RAAAAQE"]
[Tue Mar 31 02:05:41.733609 2026] [:error] [pid 36939:tid 36947] [client 158.158.51.236:62241] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acq7dcRDKH225Jeq1jdYLQAAAAY"]
[Tue Mar 31 02:05:42.216464 2026] [:error] [pid 39123:tid 39126] [client 158.158.51.236:64152] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acq7diobgVY20PMQKVt9TwAAAQE"]
[Tue Mar 31 02:05:42.713183 2026] [:error] [pid 36672:tid 36807] [client 158.158.51.236:65243] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "acq7drKHDzEfeL3XiLpNgQAAAEA"]
[Tue Mar 31 02:05:43.194866 2026] [:error] [pid 36939:tid 36952] [client 158.158.51.236:65239] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acq7d8RDKH225Jeq1jdYMQAAAAs"]
[Tue Mar 31 02:05:43.676661 2026] [:error] [pid 36706:tid 36862] [client 158.158.51.236:62233] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acq7d7a-eBLL1E34-UUEXAAAAMA"]
[Tue Mar 31 02:05:44.190347 2026] [:error] [pid 36939:tid 36945] [client 158.158.51.236:64182] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acq7eMRDKH225Jeq1jdYMgAAAAQ"]
[Tue Mar 31 02:05:44.683232 2026] [:error] [pid 39123:tid 39128] [client 158.158.51.236:64183] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acq7eCobgVY20PMQKVt9XQAAAQM"]
[Tue Mar 31 02:05:45.185581 2026] [:error] [pid 36706:tid 36884] [client 158.158.51.236:64135] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acq7eba-eBLL1E34-UUEYAAAANY"]
[Tue Mar 31 02:05:45.668970 2026] [:error] [pid 39123:tid 39134] [client 158.158.51.236:64586] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acq7eSobgVY20PMQKVt9XgAAAQk"]
[Tue Mar 31 02:05:46.202528 2026] [:error] [pid 36939:tid 36952] [client 158.158.51.236:65165] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acq7esRDKH225Jeq1jdYOwAAAAs"]
[Tue Mar 31 02:05:46.717281 2026] [:error] [pid 36939:tid 36963] [client 158.158.51.236:62248] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acq7esRDKH225Jeq1jdYPQAAABY"]
[Tue Mar 31 02:05:47.196980 2026] [:error] [pid 36688:tid 36849] [client 158.158.51.236:64138] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "acq7e5Ie8NBGKiiCIcIeTgAAAI4"]
[Tue Mar 31 02:05:47.682848 2026] [:error] [pid 36939:tid 36964] [client 158.158.51.236:64130] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "acq7e8RDKH225Jeq1jdYRgAAABc"]
[Tue Mar 31 02:05:48.189824 2026] [:error] [pid 36939:tid 36945] [client 158.158.51.236:64605] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "acq7fMRDKH225Jeq1jdYSAAAAAQ"]
[Tue Mar 31 02:05:48.676101 2026] [:error] [pid 39123:tid 39126] [client 158.158.51.236:64065] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "acq7fCobgVY20PMQKVt9ZgAAAQE"]
[Tue Mar 31 02:05:49.159517 2026] [:error] [pid 39123:tid 39141] [client 158.158.51.236:64132] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acq7fSobgVY20PMQKVt9ZwAAARA"]
[Tue Mar 31 02:05:49.637786 2026] [:error] [pid 39123:tid 39134] [client 158.158.51.236:64590] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acq7fSobgVY20PMQKVt9aQAAAQk"]
[Tue Mar 31 02:05:50.129089 2026] [:error] [pid 36939:tid 36942] [client 158.158.51.236:62255] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acq7fsRDKH225Jeq1jdYTwAAAAE"]
[Tue Mar 31 02:05:50.628309 2026] [:error] [pid 36939:tid 36952] [client 158.158.51.236:64068] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "acq7fsRDKH225Jeq1jdYUgAAAAs"]
[Tue Mar 31 02:05:57.352865 2026] [:error] [pid 36688:tid 36842] [client 158.158.51.236:65184] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acq7hZIe8NBGKiiCIcIeiQAAAIc"]
[Tue Mar 31 02:05:57.835475 2026] [:error] [pid 36688:tid 36838] [client 158.158.51.236:65209] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acq7hZIe8NBGKiiCIcIejAAAAIM"]
[Tue Mar 31 02:05:58.318095 2026] [:error] [pid 36939:tid 36960] [client 158.158.51.236:64599] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acq7hsRDKH225Jeq1jdYXAAAABM"]
[Tue Mar 31 02:05:58.796513 2026] [:error] [pid 36939:tid 36955] [client 158.158.51.236:64102] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "acq7hsRDKH225Jeq1jdYXwAAAA4"]
[Tue Mar 31 02:05:59.319415 2026] [:error] [pid 36672:tid 36820] [client 158.158.51.236:64083] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acq7h7KHDzEfeL3XiLpNkwAAAE0"]
[Tue Mar 31 02:05:59.905857 2026] [:error] [pid 36939:tid 36961] [client 158.158.51.236:64184] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acq7h8RDKH225Jeq1jdYZQAAABQ"]
[Tue Mar 31 02:06:00.410306 2026] [:error] [pid 36939:tid 36959] [client 158.158.51.236:64618] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acq7iMRDKH225Jeq1jdYaQAAABI"]
[Tue Mar 31 02:06:00.915974 2026] [:error] [pid 39123:tid 39128] [client 158.158.51.236:62247] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "acq7iCobgVY20PMQKVt9iQAAAQM"]
[Tue Mar 31 02:06:01.408018 2026] [:error] [pid 36939:tid 36955] [client 158.158.51.236:65182] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acq7icRDKH225Jeq1jdYbQAAAA4"]
[Tue Mar 31 02:06:01.904705 2026] [:error] [pid 36672:tid 36814] [client 158.158.51.236:64097] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acq7ibKHDzEfeL3XiLpNmQAAAEc"]
[Tue Mar 31 02:06:02.395304 2026] [:error] [pid 39123:tid 39149] [client 158.158.51.236:62210] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acq7iiobgVY20PMQKVt9kgAAARg"]
[Tue Mar 31 02:06:02.883032 2026] [:error] [pid 39123:tid 39131] [client 158.158.51.236:64169] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "acq7iiobgVY20PMQKVt9lgAAAQY"]
[Tue Mar 31 02:06:03.374342 2026] [:error] [pid 39123:tid 39138] [client 158.158.51.236:64598] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "acq7iyobgVY20PMQKVt9mQAAAQ0"]
[Tue Mar 31 02:06:03.866772 2026] [:error] [pid 36688:tid 36847] [client 158.158.51.236:64146] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "acq7i5Ie8NBGKiiCIcIekQAAAIw"]
[Tue Mar 31 02:06:04.384696 2026] [:error] [pid 36939:tid 36962] [client 158.158.51.236:64075] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "acq7jMRDKH225Jeq1jdYewAAABU"]
[Tue Mar 31 02:06:04.873588 2026] [:error] [pid 36672:tid 36828] [client 158.158.51.236:64066] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "acq7jLKHDzEfeL3XiLpNngAAAFU"]
[Tue Mar 31 02:06:05.359721 2026] [:error] [pid 36706:tid 36882] [client 158.158.51.236:64175] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acq7jba-eBLL1E34-UUEfgAAANQ"]
[Tue Mar 31 02:06:05.846226 2026] [:error] [pid 39123:tid 39129] [client 158.158.51.236:65266] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acq7jSobgVY20PMQKVt9owAAAQQ"]
[Tue Mar 31 02:06:06.359772 2026] [:error] [pid 36706:tid 36884] [client 158.158.51.236:64104] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acq7jra-eBLL1E34-UUEgwAAANY"]
[Tue Mar 31 02:06:06.871110 2026] [:error] [pid 39123:tid 39137] [client 158.158.51.236:64606] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acq7jiobgVY20PMQKVt9pwAAAQw"]
[Tue Mar 31 02:06:07.395992 2026] [:error] [pid 36706:tid 36886] [client 158.158.51.236:65164] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "acq7j7a-eBLL1E34-UUEigAAANg"]
[Tue Mar 31 02:06:07.906249 2026] [:error] [pid 39123:tid 39147] [client 158.158.51.236:64165] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "acq7jyobgVY20PMQKVt9qwAAARY"]
[Tue Mar 31 02:06:08.424179 2026] [:error] [pid 36688:tid 36858] [client 158.158.51.236:64107] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "acq7kJIe8NBGKiiCIcIemAAAAJc"]
[Tue Mar 31 02:06:08.928634 2026] [:error] [pid 39123:tid 39126] [client 158.158.51.236:64113] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "acq7kCobgVY20PMQKVt9rwAAAQE"]
[Tue Mar 31 02:06:09.445476 2026] [:error] [pid 36672:tid 36810] [client 158.158.51.236:63627] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acq7kbKHDzEfeL3XiLpNowAAAEM"]
[Tue Mar 31 02:06:09.932852 2026] [:error] [pid 36706:tid 36866] [client 158.158.51.236:62215] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acq7kba-eBLL1E34-UUEkAAAAMQ"]
[Tue Mar 31 02:06:10.422046 2026] [:error] [pid 39123:tid 39140] [client 158.158.51.236:64078] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acq7kiobgVY20PMQKVt9sgAAAQ8"]
[Tue Mar 31 02:06:11.008016 2026] [:error] [pid 39123:tid 39139] [client 158.158.51.236:62229] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acq7kyobgVY20PMQKVt9tQAAAQ4"]
[Tue Mar 31 02:06:11.499495 2026] [:error] [pid 36706:tid 36865] [client 158.158.51.236:62253] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acq7k7a-eBLL1E34-UUElAAAAMM"]
[Tue Mar 31 02:06:12.019267 2026] [:error] [pid 36706:tid 36883] [client 158.158.51.236:64158] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acq7lLa-eBLL1E34-UUEmAAAANU"]
[Tue Mar 31 02:06:12.503602 2026] [:error] [pid 36706:tid 36881] [client 158.158.51.236:62246] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acq7lLa-eBLL1E34-UUEmQAAANM"]
[Tue Mar 31 02:06:12.987227 2026] [:error] [pid 39123:tid 39126] [client 158.158.51.236:64163] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acq7lCobgVY20PMQKVt9uQAAAQE"]
[Tue Mar 31 02:06:13.510496 2026] [:error] [pid 36939:tid 36965] [client 158.158.51.236:64172] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acq7lcRDKH225Jeq1jdYnQAAABg"]
[Tue Mar 31 02:06:14.020195 2026] [:error] [pid 36672:tid 36824] [client 158.158.51.236:64115] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acq7lrKHDzEfeL3XiLpNqQAAAFE"]
[Tue Mar 31 02:06:14.500782 2026] [:error] [pid 36672:tid 36828] [client 158.158.51.236:63618] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acq7lrKHDzEfeL3XiLpNqwAAAFU"]
[Tue Mar 31 02:06:15.008004 2026] [:error] [pid 36672:tid 36816] [client 158.158.51.236:64142] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "acq7l7KHDzEfeL3XiLpNrAAAAEk"]
[Tue Mar 31 02:06:15.496763 2026] [:error] [pid 39123:tid 39143] [client 158.158.51.236:64099] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "acq7lyobgVY20PMQKVt9vgAAARI"]
[Tue Mar 31 02:06:16.103150 2026] [:error] [pid 36706:tid 36883] [client 158.158.51.236:64077] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "acq7mLa-eBLL1E34-UUEoAAAANU"]
[Tue Mar 31 02:06:16.588896 2026] [:error] [pid 36706:tid 36877] [client 158.158.51.236:64153] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "acq7mLa-eBLL1E34-UUEpAAAAM8"]
[Tue Mar 31 02:06:17.082000 2026] [:error] [pid 36706:tid 36870] [client 158.158.51.236:65186] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ah25.php"] [unique_id "acq7mba-eBLL1E34-UUEpwAAAMg"]
[Tue Mar 31 02:06:17.570856 2026] [:error] [pid 36688:tid 36853] [client 158.158.51.236:64190] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acq7mZIe8NBGKiiCIcIeswAAAJI"]
[Tue Mar 31 02:06:18.096172 2026] [:error] [pid 36939:tid 36948] [client 158.158.51.236:62226] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acq7msRDKH225Jeq1jdYqQAAAAc"]
[Tue Mar 31 02:06:18.573680 2026] [:error] [pid 36939:tid 36957] [client 158.158.51.236:63651] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acq7msRDKH225Jeq1jdYrQAAABA"]
[Tue Mar 31 02:06:19.113398 2026] [:error] [pid 36688:tid 36849] [client 158.158.51.236:64120] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "acq7m5Ie8NBGKiiCIcIetgAAAI4"]
[Tue Mar 31 02:06:19.591756 2026] [:error] [pid 36706:tid 36864] [client 158.158.51.236:62240] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acq7m7a-eBLL1E34-UUEqgAAAMI"]
[Tue Mar 31 02:06:20.080003 2026] [:error] [pid 36939:tid 36964] [client 158.158.51.236:64185] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acq7nMRDKH225Jeq1jdYswAAABc"]
[Tue Mar 31 02:06:20.560910 2026] [:error] [pid 39123:tid 39127] [client 158.158.51.236:63653] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acq7nCobgVY20PMQKVt90QAAAQI"]
[Tue Mar 31 02:06:21.066432 2026] [:error] [pid 36672:tid 36827] [client 158.158.51.236:63634] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "acq7nbKHDzEfeL3XiLpNsQAAAFQ"]
[Tue Mar 31 02:06:21.548029 2026] [:error] [pid 39123:tid 39149] [client 158.158.51.236:65167] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acq7nSobgVY20PMQKVt90gAAARg"]
[Tue Mar 31 02:06:22.031531 2026] [:error] [pid 39123:tid 39146] [client 158.158.51.236:62245] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acq7niobgVY20PMQKVt91wAAARU"]
[Tue Mar 31 02:06:22.535848 2026] [:error] [pid 36672:tid 36831] [client 158.158.51.236:62251] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acq7nrKHDzEfeL3XiLpNsgAAAFg"]
[Tue Mar 31 02:06:23.021362 2026] [:error] [pid 39123:tid 39132] [client 158.158.51.236:64092] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buc.php"] [unique_id "acq7nyobgVY20PMQKVt93QAAAQc"]
[Tue Mar 31 02:06:23.504552 2026] [:error] [pid 39123:tid 39138] [client 158.158.51.236:63571] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acq7nyobgVY20PMQKVt94AAAAQ0"]
[Tue Mar 31 02:06:23.990590 2026] [:error] [pid 36706:tid 36864] [client 158.158.51.236:64189] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acq7n7a-eBLL1E34-UUEtgAAAMI"]
[Tue Mar 31 02:06:24.496629 2026] [:error] [pid 36706:tid 36879] [client 158.158.51.236:64637] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acq7oLa-eBLL1E34-UUEuAAAANE"]
[Tue Mar 31 02:06:24.978114 2026] [:error] [pid 36706:tid 36883] [client 158.158.51.236:64604] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "acq7oLa-eBLL1E34-UUEvAAAANU"]
[Tue Mar 31 02:06:25.461004 2026] [:error] [pid 36939:tid 36956] [client 158.158.51.236:64112] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acq7ocRDKH225Jeq1jdYxQAAAA8"]
[Tue Mar 31 02:06:25.947758 2026] [:error] [pid 39123:tid 39132] [client 158.158.51.236:64160] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acq7oSobgVY20PMQKVt96AAAAQc"]
[Tue Mar 31 02:06:26.428340 2026] [:error] [pid 36672:tid 36822] [client 158.158.51.236:64144] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acq7orKHDzEfeL3XiLpNtwAAAE8"]
[Tue Mar 31 02:06:26.915334 2026] [:error] [pid 36939:tid 36958] [client 158.158.51.236:64140] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "acq7osRDKH225Jeq1jdYygAAABE"]
[Tue Mar 31 02:06:27.429379 2026] [:error] [pid 39123:tid 39139] [client 158.158.51.236:64628] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "acq7oyobgVY20PMQKVt97wAAAQ4"]
[Tue Mar 31 02:06:27.915930 2026] [:error] [pid 36706:tid 36868] [client 158.158.51.236:64095] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "acq7o7a-eBLL1E34-UUEwgAAAMY"]
[Tue Mar 31 02:06:28.419907 2026] [:error] [pid 36939:tid 36943] [client 158.158.51.236:64180] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "acq7pMRDKH225Jeq1jdY0wAAAAI"]
[Tue Mar 31 02:06:28.906152 2026] [:error] [pid 36706:tid 36862] [client 158.158.51.236:64123] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "acq7pLa-eBLL1E34-UUExAAAAMA"]
[Tue Mar 31 02:06:29.395327 2026] [:error] [pid 36672:tid 36817] [client 158.158.51.236:64087] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acq7pbKHDzEfeL3XiLpNuQAAAEo"]
[Tue Mar 31 02:06:29.877657 2026] [:error] [pid 39123:tid 39131] [client 158.158.51.236:64614] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acq7pSobgVY20PMQKVt98gAAAQY"]
[Tue Mar 31 02:06:30.362520 2026] [:error] [pid 36939:tid 36959] [client 158.158.51.236:62239] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acq7psRDKH225Jeq1jdY3QAAABI"]
[Tue Mar 31 02:06:30.851760 2026] [:error] [pid 36939:tid 36941] [client 158.158.51.236:63557] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acq7psRDKH225Jeq1jdY3gAAAAA"]
[Tue Mar 31 02:06:31.367605 2026] [:error] [pid 36706:tid 36869] [client 158.158.51.236:64178] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "acq7p7a-eBLL1E34-UUEywAAAMc"]
[Tue Mar 31 02:06:31.862001 2026] [:error] [pid 36672:tid 36828] [client 158.158.51.236:63640] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "acq7p7KHDzEfeL3XiLpNwQAAAFU"]
[Tue Mar 31 02:06:32.349429 2026] [:error] [pid 39123:tid 39135] [client 158.158.51.236:64129] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "acq7qCobgVY20PMQKVt99gAAAQo"]
[Tue Mar 31 02:06:32.849281 2026] [:error] [pid 36706:tid 36864] [client 158.158.51.236:64091] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "acq7qLa-eBLL1E34-UUE0gAAAMI"]
[Tue Mar 31 02:06:33.329493 2026] [:error] [pid 39123:tid 39143] [client 158.158.51.236:63666] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acq7qSobgVY20PMQKVt9-gAAARI"]
[Tue Mar 31 02:06:33.866121 2026] [:error] [pid 39123:tid 39142] [client 158.158.51.236:63675] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acq7qSobgVY20PMQKVt9_gAAARE"]
[Tue Mar 31 02:06:34.349630 2026] [:error] [pid 36939:tid 36963] [client 158.158.51.236:64089] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acq7qsRDKH225Jeq1jdY4wAAABY"]
[Tue Mar 31 02:06:34.867041 2026] [:error] [pid 39123:tid 39144] [client 158.158.51.236:64630] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acq7qiobgVY20PMQKVt-AQAAARM"]
[Tue Mar 31 02:06:35.348148 2026] [:error] [pid 39123:tid 39126] [client 158.158.51.236:64618] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acq7qyobgVY20PMQKVt-AwAAAQE"]
[Tue Mar 31 02:06:35.848513 2026] [:error] [pid 36672:tid 36829] [client 158.158.51.236:64114] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acq7q7KHDzEfeL3XiLpNzQAAAFY"]
[Tue Mar 31 02:06:36.331053 2026] [:error] [pid 39123:tid 39129] [client 158.158.51.236:64580] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acq7rCobgVY20PMQKVt-CgAAAQQ"]
[Tue Mar 31 02:06:36.822158 2026] [:error] [pid 36939:tid 36960] [client 158.158.51.236:63646] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "acq7rMRDKH225Jeq1jdY5wAAABM"]
[Tue Mar 31 02:06:37.303357 2026] [:error] [pid 36672:tid 36815] [client 158.158.51.236:63569] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acq7rbKHDzEfeL3XiLpNzwAAAEg"]
[Tue Mar 31 02:06:37.789730 2026] [:error] [pid 39123:tid 39129] [client 158.158.51.236:62218] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acq7rSobgVY20PMQKVt-FAAAAQQ"]
[Tue Mar 31 02:06:38.272405 2026] [:error] [pid 39123:tid 39135] [client 158.158.51.236:64176] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acq7riobgVY20PMQKVt-FwAAAQo"]
[Tue Mar 31 02:06:38.759051 2026] [:error] [pid 39123:tid 39132] [client 158.158.51.236:64611] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "acq7riobgVY20PMQKVt-GQAAAQc"]
[Tue Mar 31 02:06:39.240634 2026] [:error] [pid 36939:tid 36953] [client 158.158.51.236:62259] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acq7r8RDKH225Jeq1jdY7QAAAAw"]
[Tue Mar 31 02:06:39.724283 2026] [:error] [pid 36688:tid 36851] [client 158.158.51.236:64171] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acq7r5Ie8NBGKiiCIcIezAAAAJA"]
[Tue Mar 31 02:06:40.215386 2026] [:error] [pid 36688:tid 36850] [client 158.158.51.236:64143] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acq7sJIe8NBGKiiCIcIezwAAAI8"]
[Tue Mar 31 02:06:40.694726 2026] [:error] [pid 39123:tid 39142] [client 158.158.51.236:64086] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "acq7sCobgVY20PMQKVt-JgAAARE"]
[Tue Mar 31 02:06:41.181314 2026] [:error] [pid 39123:tid 39149] [client 158.158.51.236:63629] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acq7sSobgVY20PMQKVt-KgAAARg"]
[Tue Mar 31 02:06:41.667995 2026] [:error] [pid 39123:tid 39134] [client 158.158.51.236:64096] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acq7sSobgVY20PMQKVt-LwAAAQk"]
[Tue Mar 31 02:06:42.152386 2026] [:error] [pid 39123:tid 39141] [client 158.158.51.236:65156] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acq7siobgVY20PMQKVt-MwAAARA"]
[Tue Mar 31 02:06:42.632131 2026] [:error] [pid 39123:tid 39134] [client 158.158.51.236:64124] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "acq7siobgVY20PMQKVt-OAAAAQk"]
[Tue Mar 31 02:06:43.190090 2026] [:error] [pid 36688:tid 36846] [client 158.158.51.236:64167] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjfl.php"] [unique_id "acq7s5Ie8NBGKiiCIcIe0wAAAIs"]
[Tue Mar 31 02:06:43.671638 2026] [:error] [pid 36939:tid 36960] [client 158.158.51.236:63642] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjfl.php"] [unique_id "acq7s8RDKH225Jeq1jdY8QAAABM"]
[Tue Mar 31 02:06:44.187414 2026] [:error] [pid 36706:tid 36881] [client 158.158.51.236:63643] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjfl.php"] [unique_id "acq7tLa-eBLL1E34-UUE4wAAANM"]
[Tue Mar 31 02:06:44.667779 2026] [:error] [pid 36672:tid 36815] [client 158.158.51.236:65175] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjfl.php"] [unique_id "acq7tLKHDzEfeL3XiLpN2QAAAEg"]
[Tue Mar 31 02:06:45.158840 2026] [:error] [pid 39123:tid 39144] [client 158.158.51.236:64111] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "acq7tSobgVY20PMQKVt-QwAAARM"]
[Tue Mar 31 02:06:45.637607 2026] [:error] [pid 36939:tid 36955] [client 158.158.51.236:64162] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "acq7tcRDKH225Jeq1jdZAAAAAA4"]
[Tue Mar 31 02:06:46.125144 2026] [:error] [pid 36939:tid 36948] [client 158.158.51.236:64188] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "acq7tsRDKH225Jeq1jdZBQAAAAc"]
[Tue Mar 31 02:06:46.606105 2026] [:error] [pid 36688:tid 36853] [client 158.158.51.236:63673] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "acq7tpIe8NBGKiiCIcIe1wAAAJI"]
[Tue Mar 31 02:06:47.131007 2026] [:error] [pid 36688:tid 36851] [client 158.158.51.236:63596] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "acq7t5Ie8NBGKiiCIcIe2AAAAJA"]
[Tue Mar 31 02:06:47.613735 2026] [:error] [pid 39123:tid 39138] [client 158.158.51.236:64133] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "acq7tyobgVY20PMQKVt-TQAAAQ0"]
[Tue Mar 31 02:06:48.104364 2026] [:error] [pid 36939:tid 36963] [client 158.158.51.236:62270] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "acq7uMRDKH225Jeq1jdZCwAAABY"]
[Tue Mar 31 02:06:48.586614 2026] [:error] [pid 39123:tid 39135] [client 158.158.51.236:63628] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "acq7uCobgVY20PMQKVt-UgAAAQo"]
[Tue Mar 31 02:06:49.083978 2026] [:error] [pid 36939:tid 36964] [client 158.158.51.236:64145] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "acq7ucRDKH225Jeq1jdZEwAAABc"]
[Tue Mar 31 02:06:49.561870 2026] [:error] [pid 39123:tid 39130] [client 158.158.51.236:65173] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "acq7uSobgVY20PMQKVt-WgAAAQU"]
[Tue Mar 31 02:06:50.043806 2026] [:error] [pid 39123:tid 39149] [client 158.158.51.236:64577] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "acq7uiobgVY20PMQKVt-XAAAARg"]
[Tue Mar 31 02:06:50.524429 2026] [:error] [pid 39123:tid 39125] [client 158.158.51.236:63669] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "acq7uiobgVY20PMQKVt-XwAAAQA"]
[Tue Mar 31 02:06:51.008102 2026] [:error] [pid 39123:tid 39139] [client 158.158.51.236:64093] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acq7uyobgVY20PMQKVt-ZQAAAQ4"]
[Tue Mar 31 02:06:51.510783 2026] [:error] [pid 36706:tid 36869] [client 158.158.51.236:63570] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acq7u7a-eBLL1E34-UUE9AAAAMc"]
[Tue Mar 31 02:06:51.992974 2026] [:error] [pid 39123:tid 39131] [client 158.158.51.236:62226] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acq7uyobgVY20PMQKVt-bAAAAQY"]
[Tue Mar 31 02:06:52.477898 2026] [:error] [pid 39123:tid 39132] [client 158.158.51.236:63661] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "acq7vCobgVY20PMQKVt-bwAAAQc"]
[Tue Mar 31 02:06:52.983372 2026] [:error] [pid 39123:tid 39138] [client 158.158.51.236:64070] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acq7vCobgVY20PMQKVt-dQAAAQ0"]
[Tue Mar 31 02:06:53.470726 2026] [:error] [pid 36939:tid 36953] [client 158.158.51.236:7044] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acq7vcRDKH225Jeq1jdZHAAAAAw"]
[Tue Mar 31 02:06:53.950563 2026] [:error] [pid 39123:tid 39136] [client 158.158.51.236:63554] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acq7vSobgVY20PMQKVt-dwAAAQs"]
[Tue Mar 31 02:06:54.429126 2026] [:error] [pid 36672:tid 36820] [client 158.158.51.236:63568] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "acq7vrKHDzEfeL3XiLpN4AAAAE0"]
[Tue Mar 31 02:06:54.926963 2026] [:error] [pid 36939:tid 36942] [client 158.158.51.236:64636] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acq7vsRDKH225Jeq1jdZIAAAAAE"]
[Tue Mar 31 02:06:55.408557 2026] [:error] [pid 36706:tid 36884] [client 158.158.51.236:63632] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acq7v7a-eBLL1E34-UUE_gAAANY"]
[Tue Mar 31 02:06:55.896105 2026] [:error] [pid 36688:tid 36837] [client 158.158.51.236:62211] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acq7v5Ie8NBGKiiCIcIe4QAAAII"]
[Tue Mar 31 02:06:56.375429 2026] [:error] [pid 36706:tid 36885] [client 158.158.51.236:63650] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "acq7wLa-eBLL1E34-UUFAwAAANc"]
[Tue Mar 31 02:06:56.861064 2026] [:error] [pid 39123:tid 39127] [client 158.158.51.236:64161] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "acq7wCobgVY20PMQKVt-egAAAQI"]
[Tue Mar 31 02:07:03.685151 2026] [:error] [pid 36688:tid 36847] [client 158.158.51.236:64084] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acq7x5Ie8NBGKiiCIcIe-gAAAIw"]
[Tue Mar 31 02:07:04.176344 2026] [:error] [pid 36706:tid 36878] [client 158.158.51.236:63584] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acq7yLa-eBLL1E34-UUFFAAAANA"]
[Tue Mar 31 02:07:04.658004 2026] [:error] [pid 36672:tid 36831] [client 158.158.51.236:64598] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acq7yLKHDzEfeL3XiLpOFQAAAFg"]
[Tue Mar 31 02:07:05.223418 2026] [:error] [pid 36706:tid 36862] [client 158.158.51.236:64117] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "acq7yba-eBLL1E34-UUFGgAAAMA"]
[Tue Mar 31 02:07:05.719767 2026] [:error] [pid 36706:tid 36865] [client 158.158.51.236:64613] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "acq7yba-eBLL1E34-UUFHQAAAMM"]
[Tue Mar 31 02:07:06.215542 2026] [:error] [pid 36939:tid 36948] [client 158.158.51.236:63677] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "acq7ysRDKH225Jeq1jdZNAAAAAc"]
[Tue Mar 31 02:07:06.694761 2026] [:error] [pid 36706:tid 36869] [client 158.158.51.236:65230] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "acq7yra-eBLL1E34-UUFJQAAAMc"]
[Tue Mar 31 02:07:07.175143 2026] [:error] [pid 36939:tid 36955] [client 158.158.51.236:64154] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/csv.php"] [unique_id "acq7y8RDKH225Jeq1jdZOQAAAA4"]
[Tue Mar 31 02:07:07.655134 2026] [:error] [pid 36939:tid 36952] [client 158.158.51.236:64155] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acq7y8RDKH225Jeq1jdZPgAAAAs"]
[Tue Mar 31 02:07:08.134915 2026] [:error] [pid 36939:tid 36945] [client 158.158.51.236:7105] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acq7zMRDKH225Jeq1jdZQAAAAAQ"]
[Tue Mar 31 02:07:08.620389 2026] [:error] [pid 36939:tid 36941] [client 158.158.51.236:64081] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acq7zMRDKH225Jeq1jdZSQAAAAA"]
[Tue Mar 31 02:07:09.101777 2026] [:error] [pid 36939:tid 36949] [client 158.158.51.236:63566] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "acq7zcRDKH225Jeq1jdZUQAAAAg"]
[Tue Mar 31 02:07:09.579848 2026] [:error] [pid 36939:tid 36962] [client 158.158.51.236:64082] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acq7zcRDKH225Jeq1jdZVgAAABU"]
[Tue Mar 31 02:07:10.057620 2026] [:error] [pid 36706:tid 36883] [client 158.158.51.236:63609] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acq7zra-eBLL1E34-UUFMQAAANU"]
[Tue Mar 31 02:07:10.536120 2026] [:error] [pid 39123:tid 39144] [client 158.158.51.236:64126] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acq7ziobgVY20PMQKVt-vwAAARM"]
[Tue Mar 31 02:07:11.022095 2026] [:error] [pid 39123:tid 39131] [client 158.158.51.236:63626] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "acq7zyobgVY20PMQKVt-wQAAAQY"]
[Tue Mar 31 02:07:11.500801 2026] [:error] [pid 36939:tid 36957] [client 158.158.51.236:63623] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acq7z8RDKH225Jeq1jdZVwAAABA"]
[Tue Mar 31 02:07:11.981660 2026] [:error] [pid 36939:tid 36955] [client 158.158.51.236:64118] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acq7z8RDKH225Jeq1jdZWgAAAA4"]
[Tue Mar 31 02:07:12.464602 2026] [:error] [pid 36939:tid 36948] [client 158.158.51.236:65264] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acq70MRDKH225Jeq1jdZYAAAAAc"]
[Tue Mar 31 02:07:12.944751 2026] [:error] [pid 36706:tid 36875] [client 158.158.51.236:64105] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "acq70La-eBLL1E34-UUFPwAAAM0"]
[Tue Mar 31 02:07:13.442428 2026] [:error] [pid 36688:tid 36851] [client 158.158.51.236:64064] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acq70ZIe8NBGKiiCIcIfAgAAAJA"]
[Tue Mar 31 02:07:13.922321 2026] [:error] [pid 39123:tid 39141] [client 158.158.51.236:64134] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acq70SobgVY20PMQKVt-xwAAARA"]
[Tue Mar 31 02:07:14.437487 2026] [:error] [pid 36706:tid 36869] [client 158.158.51.236:64098] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acq70ra-eBLL1E34-UUFRQAAAMc"]
[Tue Mar 31 02:07:14.939455 2026] [:error] [pid 36672:tid 36810] [client 158.158.51.236:63649] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "acq70rKHDzEfeL3XiLpORAAAAEM"]
[Tue Mar 31 02:07:15.453412 2026] [:error] [pid 39123:tid 39142] [client 158.158.51.236:7109] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acq70yobgVY20PMQKVt-0QAAARE"]
[Tue Mar 31 02:07:15.953402 2026] [:error] [pid 36706:tid 36884] [client 158.158.51.236:64110] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acq707a-eBLL1E34-UUFSgAAANY"]
[Tue Mar 31 02:07:16.439489 2026] [:error] [pid 36706:tid 36862] [client 158.158.51.236:63587] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acq71La-eBLL1E34-UUFTgAAAMA"]
[Tue Mar 31 02:07:16.932400 2026] [:error] [pid 39123:tid 39135] [client 158.158.51.236:64151] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "acq71CobgVY20PMQKVt-2gAAAQo"]
[Tue Mar 31 02:07:17.425765 2026] [:error] [pid 36939:tid 36952] [client 158.158.51.236:63561] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acq71cRDKH225Jeq1jdZbwAAAAs"]
[Tue Mar 31 02:07:17.904448 2026] [:error] [pid 36939:tid 36946] [client 158.158.51.236:63600] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acq71cRDKH225Jeq1jdZcwAAAAU"]
[Tue Mar 31 02:07:18.391376 2026] [:error] [pid 36688:tid 36858] [client 158.158.51.236:63564] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acq71pIe8NBGKiiCIcIfBAAAAJc"]
[Tue Mar 31 02:07:18.869122 2026] [:error] [pid 36706:tid 36884] [client 158.158.51.236:64085] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "acq71ra-eBLL1E34-UUFVQAAANY"]
[Tue Mar 31 02:07:19.349987 2026] [:error] [pid 36706:tid 36876] [client 158.158.51.236:63647] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acq717a-eBLL1E34-UUFVwAAAM4"]
[Tue Mar 31 02:07:19.830456 2026] [:error] [pid 36688:tid 36856] [client 158.158.51.236:64625] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acq715Ie8NBGKiiCIcIfCQAAAJU"]
[Tue Mar 31 02:07:20.324939 2026] [:error] [pid 39123:tid 39132] [client 158.158.51.236:62258] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acq72CobgVY20PMQKVt-5wAAAQc"]
[Tue Mar 31 02:07:20.849085 2026] [:error] [pid 36672:tid 36818] [client 158.158.51.236:64121] [client 158.158.51.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-footer.php"] [unique_id "acq72LKHDzEfeL3XiLpOXgAAAEs"]
[Tue Mar 31 03:11:48.434201 2026] [:error] [pid 36939:tid 36955] [client 20.220.217.186:30707] [client 20.220.217.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.217.186, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acrK9MRDKH225Jeq1jeKvgAAAA4"]
[Tue Mar 31 03:11:50.433289 2026] [:error] [pid 36939:tid 36960] [client 20.220.217.186:30707] [client 20.220.217.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acrK9sRDKH225Jeq1jeKyAAAABM"]
[Tue Mar 31 03:11:51.256069 2026] [:error] [pid 36688:tid 36858] [client 20.220.217.186:30163] [client 20.220.217.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acrK95Ie8NBGKiiCIcI8FAAAAJc"]
[Tue Mar 31 03:11:52.077759 2026] [:error] [pid 39123:tid 39139] [client 20.220.217.186:30670] [client 20.220.217.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acrK-CobgVY20PMQKVvAYwAAAQ4"]
[Tue Mar 31 03:11:52.900845 2026] [:error] [pid 36672:tid 36816] [client 20.220.217.186:30149] [client 20.220.217.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acrK-LKHDzEfeL3XiLpoygAAAEk"]
[Tue Mar 31 03:25:15.398689 2026] [:error] [pid 15567:tid 15592] [client 52.138.46.222:47058] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrOG5x4rriuHvPbfx28VAAAANU"]
[Tue Mar 31 03:25:16.822519 2026] [:error] [pid 15567:tid 15577] [client 52.138.46.222:47081] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrOHJx4rriuHvPbfx28XgAAAMY"]
[Tue Mar 31 03:25:18.250029 2026] [:error] [pid 15454:tid 15536] [client 52.138.46.222:47073] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrOHnCerH-ZHr3-moQpQwAAAIg"]
[Tue Mar 31 03:25:19.674181 2026] [:error] [pid 15567:tid 15583] [client 52.138.46.222:47040] [client 52.138.46.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acrOH5x4rriuHvPbfx28cgAAAMw"]
[Tue Mar 31 04:21:24.766802 2026] [:error] [pid 18439:tid 18467] [client 20.208.32.234:42702] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asudo.php"] [unique_id "acrbRC-R9nOaA8Xqs7iYngAAANA"]
[Tue Mar 31 04:21:25.336639 2026] [:error] [pid 18333:tid 18402] [client 20.208.32.234:40904] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "acrbRUSx2C5hLR0-8dLLCgAAAFc"]
[Tue Mar 31 04:21:25.846910 2026] [:error] [pid 18334:tid 18410] [client 20.208.32.234:36845] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "acrbRXqQrXLbk1cg3mge2wAAAIQ"]
[Tue Mar 31 04:21:26.349924 2026] [:error] [pid 18333:tid 18384] [client 20.208.32.234:37713] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "acrbRkSx2C5hLR0-8dLLDwAAAEU"]
[Tue Mar 31 04:21:26.844734 2026] [:error] [pid 18334:tid 18414] [client 20.208.32.234:50435] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "acrbRnqQrXLbk1cg3mge4wAAAIg"]
[Tue Mar 31 04:21:27.369934 2026] [:error] [pid 18332:tid 18355] [client 20.208.32.234:50457] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrbR74KXr1F9raS5GSE2AAAAAc"]
[Tue Mar 31 04:21:27.844387 2026] [:error] [pid 18332:tid 18361] [client 20.208.32.234:37708] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrbR74KXr1F9raS5GSE2gAAAA0"]
[Tue Mar 31 04:21:28.321152 2026] [:error] [pid 18333:tid 18380] [client 20.208.32.234:45967] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrbSESx2C5hLR0-8dLLFAAAAEE"]
[Tue Mar 31 04:21:28.862894 2026] [:error] [pid 18439:tid 18459] [client 20.208.32.234:45953] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acrbSC-R9nOaA8Xqs7iYpQAAAMg"]
[Tue Mar 31 04:21:29.351597 2026] [:error] [pid 18439:tid 18455] [client 20.208.32.234:47194] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acrbSS-R9nOaA8Xqs7iYpwAAAMQ"]
[Tue Mar 31 04:21:29.906423 2026] [:error] [pid 18333:tid 18386] [client 20.208.32.234:45975] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Geforce.php"] [unique_id "acrbSUSx2C5hLR0-8dLLGQAAAEc"]
[Tue Mar 31 04:21:30.570902 2026] [:error] [pid 18334:tid 18409] [client 20.208.32.234:36860] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "acrbSnqQrXLbk1cg3mge-AAAAIM"]
[Tue Mar 31 04:21:31.165526 2026] [:error] [pid 18334:tid 18414] [client 20.208.32.234:65420] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "acrbS3qQrXLbk1cg3mge_AAAAIg"]
[Tue Mar 31 04:21:31.691519 2026] [:error] [pid 18333:tid 18385] [client 20.208.32.234:50390] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vvedr.php"] [unique_id "acrbS0Sx2C5hLR0-8dLLIAAAAEY"]
[Tue Mar 31 04:21:32.239691 2026] [:error] [pid 18333:tid 18402] [client 20.208.32.234:50416] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vvedr.php"] [unique_id "acrbTESx2C5hLR0-8dLLIwAAAFc"]
[Tue Mar 31 04:21:32.807275 2026] [:error] [pid 18333:tid 18386] [client 20.208.32.234:42697] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdkfu.php"] [unique_id "acrbTESx2C5hLR0-8dLLJgAAAEc"]
[Tue Mar 31 05:48:53.044995 2026] [:error] [pid 18333:tid 18391] [client 49.234.192.248:41378] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acrvxUSx2C5hLR0-8dL3wwAAAEw"]
[Tue Mar 31 07:56:14.699990 2026] [:error] [pid 36892:tid 36965] [client 43.166.136.153:52134] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acsNnkyj9S4G0ek3O4K4UQAAAI4"]
[Tue Mar 31 09:19:09.717597 2026] [:error] [pid 41421:tid 41445] [client 20.19.191.237:47631] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asudo.php"] [unique_id "acshDRSaDjY9kKFtUQB-nwAAARU"]
[Tue Mar 31 09:19:10.189674 2026] [:error] [pid 36982:tid 37007] [client 20.19.191.237:46981] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asudo.php"] [unique_id "acshDvlMmeoQKN0r_GOUYAAAANY"]
[Tue Mar 31 09:19:10.683214 2026] [:error] [pid 36982:tid 36990] [client 20.19.191.237:46976] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asudo.php"] [unique_id "acshDvlMmeoQKN0r_GOUZQAAAMU"]
[Tue Mar 31 09:19:11.175997 2026] [:error] [pid 36982:tid 37003] [client 20.19.191.237:47007] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asudo.php"] [unique_id "acshD_lMmeoQKN0r_GOUZgAAANI"]
[Tue Mar 31 09:19:11.648638 2026] [:error] [pid 36892:tid 36964] [client 20.19.191.237:46996] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "acshD0yj9S4G0ek3O4LYrgAAAI0"]
[Tue Mar 31 09:19:12.139589 2026] [:error] [pid 36982:tid 36988] [client 20.19.191.237:47005] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "acshEPlMmeoQKN0r_GOUbAAAAMM"]
[Tue Mar 31 09:19:12.611384 2026] [:error] [pid 36892:tid 36974] [client 20.19.191.237:47621] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-moonka.php"] [unique_id "acshEEyj9S4G0ek3O4LYsgAAAJc"]
[Tue Mar 31 09:19:13.105754 2026] [:error] [pid 36982:tid 36995] [client 20.19.191.237:47006] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-moonka.php"] [unique_id "acshEflMmeoQKN0r_GOUcAAAAMo"]
[Tue Mar 31 09:19:13.593372 2026] [:error] [pid 6548:tid 6568] [client 20.19.191.237:47671] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-moonka.php"] [unique_id "acshEbgIz9HgMl9YwE6XmAAAAVI"]
[Tue Mar 31 09:19:14.063467 2026] [:error] [pid 36982:tid 37007] [client 20.19.191.237:46999] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-moonka.php"] [unique_id "acshEvlMmeoQKN0r_GOUdgAAANY"]
[Tue Mar 31 09:19:14.554065 2026] [:error] [pid 36982:tid 36996] [client 20.19.191.237:47674] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "acshEvlMmeoQKN0r_GOUeQAAAMs"]
[Tue Mar 31 09:19:15.046996 2026] [:error] [pid 41421:tid 41424] [client 20.19.191.237:46985] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "acshExSaDjY9kKFtUQB-owAAAQA"]
[Tue Mar 31 09:19:15.528781 2026] [:error] [pid 36891:tid 36947] [client 20.19.191.237:47660] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acshE5JhiMaJUqoqfl48XAAAAFc"]
[Tue Mar 31 09:19:15.999496 2026] [:error] [pid 36982:tid 36995] [client 20.19.191.237:46995] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acshE_lMmeoQKN0r_GOUhwAAAMo"]
[Tue Mar 31 09:19:16.470793 2026] [:error] [pid 41421:tid 41447] [client 20.19.191.237:47003] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acshFBSaDjY9kKFtUQB-pQAAARc"]
[Tue Mar 31 09:19:16.942909 2026] [:error] [pid 41421:tid 41441] [client 20.19.191.237:46989] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acshFBSaDjY9kKFtUQB-pgAAARE"]
[Tue Mar 31 09:19:17.414296 2026] [:error] [pid 6548:tid 6572] [client 20.19.191.237:47632] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8pewqMTX.php"] [unique_id "acshFbgIz9HgMl9YwE6XqAAAAVY"]
[Tue Mar 31 09:19:17.886766 2026] [:error] [pid 36982:tid 37001] [client 20.19.191.237:23629] [client 20.19.191.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8pewqMTX.php"] [unique_id "acshFflMmeoQKN0r_GOUmwAAANA"]
[Tue Mar 31 09:20:59.378556 2026] [:error] [pid 36891:tid 36934] [client 4.204.246.56:26507] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acshe5JhiMaJUqoqfl482gAAAEo"]
[Tue Mar 31 09:20:59.809430 2026] [:error] [pid 36982:tid 36997] [client 4.204.246.56:26583] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acshe_lMmeoQKN0r_GOV5wAAAMw"]
[Tue Mar 31 09:21:00.279523 2026] [:error] [pid 36891:tid 36943] [client 4.204.246.56:26589] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acshfJJhiMaJUqoqfl483gAAAFM"]
[Tue Mar 31 09:21:00.698959 2026] [:error] [pid 41421:tid 41445] [client 4.204.246.56:26616] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acshfBSaDjY9kKFtUQB_dQAAARU"]
[Tue Mar 31 11:59:17.812594 2026] [:error] [pid 36982:tid 36999] [client 114.96.103.33:40946] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "actGlflMmeoQKN0r_GMmKgAAAM4"]
[Tue Mar 31 12:04:48.627558 2026] [:error] [pid 36982:tid 36997] [client 49.51.166.228:59624] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "actH4PlMmeoQKN0r_GMqzgAAAMw"]
[Tue Mar 31 14:26:44.820185 2026] [:error] [pid 41421:tid 41445] [client 43.135.115.233:39488] [client 43.135.115.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "actpJBSaDjY9kKFtUQAO7wAAARU"]
[Tue Mar 31 18:20:17.505299 2026] [:error] [pid 41421:tid 41444] [client 43.159.143.190:35476] [client 43.159.143.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acuf4RSaDjY9kKFtUQBu4AAAARQ"]
[Tue Mar 31 20:33:00.429777 2026] [:error] [pid 6548:tid 6563] [client 43.166.255.122:35596] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "acu-_LgIz9HgMl9YwE5K6AAAAU0"]
[Tue Mar 31 22:05:54.373117 2026] [:error] [pid 2836:tid 2865] [client 42.96.16.250:36726] [client 42.96.16.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "acvUwipQtaf_GRF3iPfN0gAAAhY"]
[Tue Mar 31 22:05:54.374448 2026] [:error] [pid 41421:tid 41444] [client 42.96.16.250:36742] [client 42.96.16.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/env/.env"] [unique_id "acvUwhSaDjY9kKFtUQC0jwAAARQ"]
[Tue Mar 31 22:05:55.321399 2026] [:error] [pid 3175:tid 3181] [client 42.96.16.250:38974] [client 42.96.16.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/env/.env"] [unique_id "acvUw19zJkJkv_bzqv4wHwAAAsQ"]
[Tue Mar 31 22:05:55.326922 2026] [:error] [pid 36890:tid 36896] [client 42.96.16.250:38976] [client 42.96.16.250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "acvUw58FASPd_uH8z7dhJgAAAAE"]
[Wed Apr 01 00:42:45.411040 2026] [:error] [pid 52836:tid 52914] [client 43.159.128.155:53632] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acv5hZjk_YTY8bXnEz4VaAAAAFY"]
[Wed Apr 01 02:24:58.418960 2026] [:error] [pid 19113:tid 19138] [client 20.216.166.200:56953] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "acwRevXQdXnDyA4XYbbx2gAAARc"]
[Wed Apr 01 02:24:58.913723 2026] [:error] [pid 19113:tid 19119] [client 20.216.166.200:56902] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "acwRevXQdXnDyA4XYbbx3wAAAQQ"]
[Wed Apr 01 02:24:59.404346 2026] [:error] [pid 19113:tid 19122] [client 20.216.166.200:56916] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "acwRe_XQdXnDyA4XYbbx4AAAAQc"]
[Wed Apr 01 02:24:59.882271 2026] [:error] [pid 52593:tid 52691] [client 20.216.166.200:56868] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "acwRe-KOtxqtcDhRtD-bVgAAAJE"]
[Wed Apr 01 02:25:00.430600 2026] [:error] [pid 19113:tid 19117] [client 20.216.166.200:56928] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "acwRfPXQdXnDyA4XYbbx6AAAAQI"]
[Wed Apr 01 02:25:00.946640 2026] [:error] [pid 52836:tid 52911] [client 20.216.166.200:56841] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "acwRfJjk_YTY8bXnEz5jRAAAAFM"]
[Wed Apr 01 02:25:01.581900 2026] [:error] [pid 19113:tid 19137] [client 20.216.166.200:56897] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "acwRffXQdXnDyA4XYbbx7QAAARY"]
[Wed Apr 01 02:25:02.137766 2026] [:error] [pid 52836:tid 52905] [client 20.216.166.200:56863] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "acwRfpjk_YTY8bXnEz5jTAAAAE0"]
[Wed Apr 01 02:25:02.650251 2026] [:error] [pid 52836:tid 52892] [client 20.216.166.200:56929] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "acwRfpjk_YTY8bXnEz5jTgAAAEA"]
[Wed Apr 01 02:25:03.222894 2026] [:error] [pid 52594:tid 52722] [client 20.216.166.200:56899] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "acwRf0e53suVMS91e0Q_OgAAANU"]
[Wed Apr 01 02:25:04.062876 2026] [:error] [pid 19113:tid 19131] [client 20.216.166.200:56846] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "acwRgPXQdXnDyA4XYbbx8wAAARA"]
[Wed Apr 01 02:25:04.931652 2026] [:error] [pid 19113:tid 19129] [client 20.216.166.200:56919] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "acwRgPXQdXnDyA4XYbbx_AAAAQ4"]
[Wed Apr 01 02:25:05.602724 2026] [:error] [pid 19113:tid 19133] [client 20.216.166.200:56926] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acwRgfXQdXnDyA4XYbbyAwAAARI"]
[Wed Apr 01 02:25:06.079217 2026] [:error] [pid 19113:tid 19124] [client 20.216.166.200:56939] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acwRgvXQdXnDyA4XYbbyCAAAAQk"]
[Wed Apr 01 02:25:06.736427 2026] [:error] [pid 52836:tid 52910] [client 20.216.166.200:56837] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acwRgpjk_YTY8bXnEz5jVwAAAFI"]
[Wed Apr 01 02:25:07.231426 2026] [:error] [pid 52594:tid 52709] [client 20.216.166.200:56844] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "acwRg0e53suVMS91e0Q_PQAAAMg"]
[Wed Apr 01 02:25:07.789664 2026] [:error] [pid 19113:tid 19121] [client 20.216.166.200:56912] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "acwRg_XQdXnDyA4XYbbyEgAAAQY"]
[Wed Apr 01 02:25:08.744233 2026] [:error] [pid 52592:tid 52668] [client 20.216.166.200:56855] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "acwRhD-61iqkPKUhqlbyLQAAABU"]
[Wed Apr 01 02:25:09.369016 2026] [:error] [pid 52836:tid 52895] [client 20.216.166.200:56949] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "acwRhZjk_YTY8bXnEz5jYAAAAEM"]
[Wed Apr 01 02:25:09.975307 2026] [:error] [pid 19113:tid 19135] [client 20.216.166.200:56877] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "acwRhfXQdXnDyA4XYbbyGAAAARQ"]
[Wed Apr 01 02:25:10.516676 2026] [:error] [pid 19113:tid 19136] [client 20.216.166.200:56922] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acwRhvXQdXnDyA4XYbbyGwAAARU"]
[Wed Apr 01 02:25:11.012815 2026] [:error] [pid 52593:tid 52690] [client 20.216.166.200:56840] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acwRh-KOtxqtcDhRtD-bawAAAJA"]
[Wed Apr 01 02:25:11.487770 2026] [:error] [pid 52593:tid 52688] [client 20.216.166.200:56942] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acwRh-KOtxqtcDhRtD-bbgAAAI4"]
[Wed Apr 01 02:25:12.012628 2026] [:error] [pid 52592:tid 52653] [client 20.216.166.200:56202] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "acwRiD-61iqkPKUhqlbyMwAAAAY"]
[Wed Apr 01 02:25:12.519284 2026] [:error] [pid 19113:tid 19135] [client 20.216.166.200:56861] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "acwRiPXQdXnDyA4XYbbyHQAAARQ"]
[Wed Apr 01 02:25:13.036191 2026] [:error] [pid 52592:tid 52665] [client 20.216.166.200:56925] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "acwRiT-61iqkPKUhqlbyOAAAABI"]
[Wed Apr 01 02:25:13.549946 2026] [:error] [pid 52836:tid 52893] [client 20.216.166.200:56864] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "acwRiZjk_YTY8bXnEz5jZwAAAEE"]
[Wed Apr 01 02:25:14.224125 2026] [:error] [pid 52836:tid 52906] [client 20.216.166.200:56955] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "acwRipjk_YTY8bXnEz5jagAAAE4"]
[Wed Apr 01 02:25:14.726713 2026] [:error] [pid 52593:tid 52694] [client 20.216.166.200:56881] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acwRiuKOtxqtcDhRtD-bdAAAAJQ"]
[Wed Apr 01 02:25:15.217504 2026] [:error] [pid 52836:tid 52892] [client 20.216.166.200:56954] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acwRi5jk_YTY8bXnEz5jbwAAAEA"]
[Wed Apr 01 02:25:15.835154 2026] [:error] [pid 19113:tid 19124] [client 20.216.166.200:56850] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acwRi_XQdXnDyA4XYbbyJQAAAQk"]
[Wed Apr 01 02:25:16.428216 2026] [:error] [pid 52593:tid 52685] [client 20.216.166.200:56271] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "acwRjOKOtxqtcDhRtD-bdgAAAIs"]
[Wed Apr 01 02:25:17.020501 2026] [:error] [pid 52592:tid 52652] [client 20.216.166.200:56891] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acwRjT-61iqkPKUhqlbyRAAAAAU"]
[Wed Apr 01 02:25:17.688849 2026] [:error] [pid 52593:tid 52683] [client 20.216.166.200:56900] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acwRjeKOtxqtcDhRtD-bdwAAAIk"]
[Wed Apr 01 02:25:18.340300 2026] [:error] [pid 52594:tid 52710] [client 20.216.166.200:56934] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acwRjke53suVMS91e0Q_RgAAAMk"]
[Wed Apr 01 02:25:18.843854 2026] [:error] [pid 19113:tid 19132] [client 20.216.166.200:56308] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "acwRjvXQdXnDyA4XYbbyNgAAARE"]
[Wed Apr 01 02:25:19.368324 2026] [:error] [pid 19113:tid 19129] [client 20.216.166.200:56870] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwRj_XQdXnDyA4XYbbyPAAAAQ4"]
[Wed Apr 01 02:25:20.002663 2026] [:error] [pid 19113:tid 19130] [client 20.216.166.200:56951] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwRkPXQdXnDyA4XYbbyQAAAAQ8"]
[Wed Apr 01 02:25:20.485253 2026] [:error] [pid 52592:tid 52649] [client 20.216.166.200:56907] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwRkD-61iqkPKUhqlbyUgAAAAI"]
[Wed Apr 01 02:25:21.089315 2026] [:error] [pid 19113:tid 19115] [client 20.216.166.200:56883] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwRkfXQdXnDyA4XYbbyQQAAAQA"]
[Wed Apr 01 02:25:21.670805 2026] [:error] [pid 19113:tid 19131] [client 20.216.166.200:56860] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acwRkfXQdXnDyA4XYbbyQwAAARA"]
[Wed Apr 01 02:25:22.186327 2026] [:error] [pid 19113:tid 19129] [client 20.216.166.200:56272] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acwRkvXQdXnDyA4XYbbyRgAAAQ4"]
[Wed Apr 01 02:25:22.685790 2026] [:error] [pid 52593:tid 52685] [client 20.216.166.200:56918] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acwRkuKOtxqtcDhRtD-bfgAAAIs"]
[Wed Apr 01 02:25:23.174249 2026] [:error] [pid 52593:tid 52690] [client 20.216.166.200:56921] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "acwRk-KOtxqtcDhRtD-bfwAAAJA"]
[Wed Apr 01 02:25:23.682708 2026] [:error] [pid 52594:tid 52721] [client 20.216.166.200:56259] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acwRk0e53suVMS91e0Q_UwAAANQ"]
[Wed Apr 01 02:25:24.210433 2026] [:error] [pid 52592:tid 52647] [client 20.216.166.200:56931] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acwRlD-61iqkPKUhqlbyXwAAAAA"]
[Wed Apr 01 02:25:24.684177 2026] [:error] [pid 52594:tid 52719] [client 20.216.166.200:56889] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acwRlEe53suVMS91e0Q_WQAAANI"]
[Wed Apr 01 02:25:25.160830 2026] [:error] [pid 52594:tid 52722] [client 20.216.166.200:56898] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "acwRlUe53suVMS91e0Q_WgAAANU"]
[Wed Apr 01 02:25:25.666854 2026] [:error] [pid 52593:tid 52677] [client 20.216.166.200:56275] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "acwRleKOtxqtcDhRtD-bgwAAAIM"]
[Wed Apr 01 02:25:26.162782 2026] [:error] [pid 52836:tid 52911] [client 20.216.166.200:56867] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "acwRlpjk_YTY8bXnEz5jgwAAAFM"]
[Wed Apr 01 02:25:26.712862 2026] [:error] [pid 52594:tid 52707] [client 20.216.166.200:56843] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "acwRlke53suVMS91e0Q_ZgAAAMY"]
[Wed Apr 01 02:25:27.203128 2026] [:error] [pid 19113:tid 19130] [client 20.216.166.200:56917] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "acwRl_XQdXnDyA4XYbbyVgAAAQ8"]
[Wed Apr 01 02:25:27.699584 2026] [:error] [pid 52836:tid 52909] [client 20.216.166.200:56956] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acwRl5jk_YTY8bXnEz5jjAAAAFE"]
[Wed Apr 01 02:25:28.174148 2026] [:error] [pid 52836:tid 52895] [client 20.216.166.200:56936] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acwRmJjk_YTY8bXnEz5jkgAAAEM"]
[Wed Apr 01 02:25:28.645149 2026] [:error] [pid 52593:tid 52690] [client 20.216.166.200:56908] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acwRmOKOtxqtcDhRtD-bjAAAAJA"]
[Wed Apr 01 02:25:29.152208 2026] [:error] [pid 52593:tid 52679] [client 20.216.166.200:56924] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "acwRmeKOtxqtcDhRtD-bjQAAAIU"]
[Wed Apr 01 02:25:29.639589 2026] [:error] [pid 52594:tid 52704] [client 20.216.166.200:56838] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "acwRmUe53suVMS91e0Q_cwAAAMM"]
[Wed Apr 01 02:25:30.150929 2026] [:error] [pid 52594:tid 52706] [client 20.216.166.200:56947] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "acwRmke53suVMS91e0Q_eAAAAMU"]
[Wed Apr 01 02:25:30.660119 2026] [:error] [pid 52593:tid 52682] [client 20.216.166.200:56832] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "acwRmuKOtxqtcDhRtD-blQAAAIg"]
[Wed Apr 01 02:25:31.158817 2026] [:error] [pid 52836:tid 52904] [client 20.216.166.200:56839] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "acwRm5jk_YTY8bXnEz5jnAAAAEw"]
[Wed Apr 01 02:25:31.633869 2026] [:error] [pid 52593:tid 52691] [client 20.216.166.200:56854] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acwRm-KOtxqtcDhRtD-blwAAAJE"]
[Wed Apr 01 02:25:32.105653 2026] [:error] [pid 52593:tid 52675] [client 20.216.166.200:56836] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acwRnOKOtxqtcDhRtD-bmgAAAIE"]
[Wed Apr 01 02:25:32.581820 2026] [:error] [pid 52592:tid 52650] [client 20.216.166.200:56263] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acwRnD-61iqkPKUhqlbyfgAAAAM"]
[Wed Apr 01 02:25:33.130779 2026] [:error] [pid 52594:tid 52708] [client 20.216.166.200:56909] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "acwRnUe53suVMS91e0Q_gwAAAMc"]
[Wed Apr 01 02:25:33.606763 2026] [:error] [pid 52594:tid 52710] [client 20.216.166.200:56879] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acwRnUe53suVMS91e0Q_igAAAMk"]
[Wed Apr 01 02:25:34.119292 2026] [:error] [pid 52593:tid 52694] [client 20.216.166.200:56849] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acwRnuKOtxqtcDhRtD-boQAAAJQ"]
[Wed Apr 01 02:25:34.600024 2026] [:error] [pid 52593:tid 52676] [client 20.216.166.200:56312] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acwRnuKOtxqtcDhRtD-bpAAAAII"]
[Wed Apr 01 02:25:35.093949 2026] [:error] [pid 52592:tid 52671] [client 20.216.166.200:56848] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "acwRnz-61iqkPKUhqlbyhAAAABg"]
[Wed Apr 01 02:25:35.567968 2026] [:error] [pid 52592:tid 52651] [client 20.216.166.200:56866] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "acwRnz-61iqkPKUhqlbyhwAAAAQ"]
[Wed Apr 01 02:25:36.079309 2026] [:error] [pid 52592:tid 52649] [client 20.216.166.200:56285] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "acwRoD-61iqkPKUhqlbyjgAAAAI"]
[Wed Apr 01 02:25:36.551583 2026] [:error] [pid 52593:tid 52682] [client 20.216.166.200:56315] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "acwRoOKOtxqtcDhRtD-brAAAAIg"]
[Wed Apr 01 02:25:37.125396 2026] [:error] [pid 52836:tid 52897] [client 20.216.166.200:56874] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "acwRoZjk_YTY8bXnEz5jrgAAAEU"]
[Wed Apr 01 02:25:37.604794 2026] [:error] [pid 52592:tid 52658] [client 20.216.166.200:56851] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acwRoT-61iqkPKUhqlbylQAAAAs"]
[Wed Apr 01 02:25:38.231419 2026] [:error] [pid 52592:tid 52668] [client 20.216.166.200:56886] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acwRoj-61iqkPKUhqlbylwAAABU"]
[Wed Apr 01 02:25:38.794711 2026] [:error] [pid 52592:tid 52647] [client 20.216.166.200:56859] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acwRoj-61iqkPKUhqlbymgAAAAA"]
[Wed Apr 01 02:25:39.282558 2026] [:error] [pid 52593:tid 52675] [client 20.216.166.200:56260] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "acwRo-KOtxqtcDhRtD-bswAAAIE"]
[Wed Apr 01 02:25:39.855683 2026] [:error] [pid 52593:tid 52684] [client 20.216.166.200:56948] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwRo-KOtxqtcDhRtD-btAAAAIo"]
[Wed Apr 01 02:25:40.329876 2026] [:error] [pid 52592:tid 52653] [client 20.216.166.200:56894] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwRpD-61iqkPKUhqlbypQAAAAY"]
[Wed Apr 01 02:25:40.799064 2026] [:error] [pid 19113:tid 19125] [client 20.216.166.200:56882] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwRpPXQdXnDyA4XYbbyhwAAAQo"]
[Wed Apr 01 02:25:41.310666 2026] [:error] [pid 19113:tid 19136] [client 20.216.166.200:56834] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwRpfXQdXnDyA4XYbbyjAAAARU"]
[Wed Apr 01 02:25:41.833122 2026] [:error] [pid 19113:tid 19126] [client 20.216.166.200:56847] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acwRpfXQdXnDyA4XYbbykQAAAQs"]
[Wed Apr 01 02:25:42.347960 2026] [:error] [pid 19113:tid 19129] [client 20.216.166.200:56853] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acwRpvXQdXnDyA4XYbbykwAAAQ4"]
[Wed Apr 01 02:25:42.855877 2026] [:error] [pid 52593:tid 52696] [client 20.216.166.200:56313] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acwRpuKOtxqtcDhRtD-btwAAAJY"]
[Wed Apr 01 02:25:43.326348 2026] [:error] [pid 19113:tid 19124] [client 20.216.166.200:56893] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "acwRp_XQdXnDyA4XYbbymAAAAQk"]
[Wed Apr 01 02:25:43.816388 2026] [:error] [pid 19113:tid 19117] [client 20.216.166.200:56266] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acwRp_XQdXnDyA4XYbbymwAAAQI"]
[Wed Apr 01 02:25:44.350490 2026] [:error] [pid 19113:tid 19118] [client 20.216.166.200:56310] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acwRqPXQdXnDyA4XYbbynQAAAQM"]
[Wed Apr 01 02:25:44.848343 2026] [:error] [pid 52594:tid 52717] [client 20.216.166.200:56856] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acwRqEe53suVMS91e0Q_lwAAANA"]
[Wed Apr 01 02:25:45.322340 2026] [:error] [pid 52592:tid 52662] [client 20.216.166.200:56262] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "acwRqT-61iqkPKUhqlbyqwAAAA8"]
[Wed Apr 01 02:25:45.797195 2026] [:error] [pid 52593:tid 52684] [client 20.216.166.200:56833] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acwRqeKOtxqtcDhRtD-bvAAAAIo"]
[Wed Apr 01 02:25:46.307308 2026] [:error] [pid 52593:tid 52677] [client 20.216.166.200:56291] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acwRquKOtxqtcDhRtD-bwAAAAIM"]
[Wed Apr 01 02:25:46.827659 2026] [:error] [pid 52592:tid 52666] [client 20.216.166.200:56298] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acwRqj-61iqkPKUhqlbysAAAABM"]
[Wed Apr 01 02:25:47.310296 2026] [:error] [pid 52593:tid 52681] [client 20.216.166.200:56309] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "acwRq-KOtxqtcDhRtD-byQAAAIc"]
[Wed Apr 01 02:25:47.826787 2026] [:error] [pid 52593:tid 52692] [client 20.216.166.200:56903] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "acwRq-KOtxqtcDhRtD-bzAAAAJI"]
[Wed Apr 01 02:25:48.338374 2026] [:error] [pid 52593:tid 52694] [client 20.216.166.200:56273] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "acwRrOKOtxqtcDhRtD-b0gAAAJQ"]
[Wed Apr 01 02:25:48.810108 2026] [:error] [pid 19113:tid 19135] [client 20.216.166.200:56299] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "acwRrPXQdXnDyA4XYbbysQAAARQ"]
[Wed Apr 01 02:25:49.333004 2026] [:error] [pid 19113:tid 19130] [client 20.216.166.200:56281] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "acwRrfXQdXnDyA4XYbbytwAAAQ8"]
[Wed Apr 01 02:25:50.125083 2026] [:error] [pid 52592:tid 52664] [client 20.216.166.200:56210] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "acwRrj-61iqkPKUhqlbytQAAABE"]
[Wed Apr 01 02:25:50.868029 2026] [:error] [pid 19113:tid 19128] [client 20.216.166.200:56913] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "acwRrvXQdXnDyA4XYbbywgAAAQ0"]
[Wed Apr 01 02:25:51.395291 2026] [:error] [pid 19113:tid 19138] [client 20.216.166.200:56937] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "acwRr_XQdXnDyA4XYbbyxgAAARc"]
[Wed Apr 01 02:25:51.881936 2026] [:error] [pid 19113:tid 19115] [client 20.216.166.200:56857] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "acwRr_XQdXnDyA4XYbbyygAAAQA"]
[Wed Apr 01 02:25:52.463325 2026] [:error] [pid 19113:tid 19132] [client 20.216.166.200:56835] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uang.php"] [unique_id "acwRsPXQdXnDyA4XYbbyywAAARE"]
[Wed Apr 01 02:25:52.935678 2026] [:error] [pid 52594:tid 52701] [client 20.216.166.200:56207] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uang.php"] [unique_id "acwRsEe53suVMS91e0Q_nQAAAMA"]
[Wed Apr 01 02:25:53.470854 2026] [:error] [pid 19113:tid 19117] [client 20.216.166.200:56264] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uang.php"] [unique_id "acwRsfXQdXnDyA4XYbbyzQAAAQI"]
[Wed Apr 01 02:25:53.978843 2026] [:error] [pid 19113:tid 19139] [client 20.216.166.200:56319] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uang.php"] [unique_id "acwRsfXQdXnDyA4XYbbyzwAAARg"]
[Wed Apr 01 02:25:54.469369 2026] [:error] [pid 52836:tid 52912] [client 20.216.166.200:56952] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acwRspjk_YTY8bXnEz5jxgAAAFQ"]
[Wed Apr 01 02:25:55.008311 2026] [:error] [pid 19113:tid 19133] [client 20.216.166.200:56280] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acwRs_XQdXnDyA4XYbby2QAAARI"]
[Wed Apr 01 02:25:55.487058 2026] [:error] [pid 19113:tid 19121] [client 20.216.166.200:56871] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acwRs_XQdXnDyA4XYbby3QAAAQY"]
[Wed Apr 01 02:25:56.002763 2026] [:error] [pid 52592:tid 52652] [client 20.216.166.200:56872] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "acwRtD-61iqkPKUhqlbyzwAAAAU"]
[Wed Apr 01 02:25:56.575514 2026] [:error] [pid 52592:tid 52661] [client 20.216.166.200:55881] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acwRtD-61iqkPKUhqlby1AAAAA4"]
[Wed Apr 01 02:25:57.052120 2026] [:error] [pid 52836:tid 52892] [client 20.216.166.200:56887] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acwRtZjk_YTY8bXnEz5jzAAAAEA"]
[Wed Apr 01 02:25:57.566251 2026] [:error] [pid 19113:tid 19125] [client 20.216.166.200:55881] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "acwRtfXQdXnDyA4XYbby-AAAAQo"]
[Wed Apr 01 02:26:04.430296 2026] [:error] [pid 52594:tid 52718] [client 20.216.166.200:56950] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acwRvEe53suVMS91e0Q_twAAANE"]
[Wed Apr 01 02:26:04.931315 2026] [:error] [pid 52594:tid 52710] [client 20.216.166.200:56197] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acwRvEe53suVMS91e0Q_uAAAAMk"]
[Wed Apr 01 02:26:05.480037 2026] [:error] [pid 52592:tid 52664] [client 20.216.166.200:56203] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acwRvT-61iqkPKUhqlby6QAAABE"]
[Wed Apr 01 02:26:05.970330 2026] [:error] [pid 52592:tid 52661] [client 20.216.166.200:56884] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "acwRvT-61iqkPKUhqlby6wAAAA4"]
[Wed Apr 01 02:26:06.479571 2026] [:error] [pid 19113:tid 19121] [client 20.216.166.200:56938] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellerr.php"] [unique_id "acwRvvXQdXnDyA4XYbbzKAAAAQY"]
[Wed Apr 01 02:26:06.958302 2026] [:error] [pid 19113:tid 19124] [client 20.216.166.200:56195] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellerr.php"] [unique_id "acwRvvXQdXnDyA4XYbbzLgAAAQk"]
[Wed Apr 01 02:26:07.446961 2026] [:error] [pid 52594:tid 52719] [client 20.216.166.200:56935] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellerr.php"] [unique_id "acwRv0e53suVMS91e0Q_vgAAANI"]
[Wed Apr 01 02:26:07.932631 2026] [:error] [pid 19113:tid 19122] [client 20.216.166.200:56862] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shellerr.php"] [unique_id "acwRv_XQdXnDyA4XYbbzNwAAAQc"]
[Wed Apr 01 02:26:08.409329 2026] [:error] [pid 19113:tid 19137] [client 20.216.166.200:56920] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acwRwPXQdXnDyA4XYbbzOgAAARY"]
[Wed Apr 01 02:26:08.907148 2026] [:error] [pid 19113:tid 19128] [client 20.216.166.200:56287] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acwRwPXQdXnDyA4XYbbzPwAAAQ0"]
[Wed Apr 01 02:26:09.385171 2026] [:error] [pid 19113:tid 19129] [client 20.216.166.200:56224] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acwRwfXQdXnDyA4XYbbzQgAAAQ4"]
[Wed Apr 01 02:26:09.878689 2026] [:error] [pid 19113:tid 19133] [client 20.216.166.200:56906] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-scanner.php"] [unique_id "acwRwfXQdXnDyA4XYbbzRgAAARI"]
[Wed Apr 01 02:26:10.371525 2026] [:error] [pid 19113:tid 19117] [client 20.216.166.200:56957] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acwRwvXQdXnDyA4XYbbzSgAAAQI"]
[Wed Apr 01 02:26:10.858614 2026] [:error] [pid 19113:tid 19136] [client 20.216.166.200:56210] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acwRwvXQdXnDyA4XYbbzTgAAARU"]
[Wed Apr 01 02:26:11.338918 2026] [:error] [pid 19113:tid 19126] [client 20.216.166.200:56880] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acwRw_XQdXnDyA4XYbbzVwAAAQs"]
[Wed Apr 01 02:26:11.848798 2026] [:error] [pid 52593:tid 52678] [client 20.216.166.200:56911] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "acwRw-KOtxqtcDhRtD-b7wAAAIQ"]
[Wed Apr 01 02:26:12.373919 2026] [:error] [pid 52592:tid 52660] [client 20.216.166.200:55875] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "acwRxD-61iqkPKUhqlby_wAAAA0"]
[Wed Apr 01 02:26:12.846223 2026] [:error] [pid 52594:tid 52703] [client 20.216.166.200:56878] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "acwRxEe53suVMS91e0Q_yQAAAMI"]
[Wed Apr 01 02:26:13.319311 2026] [:error] [pid 52594:tid 52721] [client 20.216.166.200:56279] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "acwRxUe53suVMS91e0Q_ywAAANQ"]
[Wed Apr 01 02:26:13.798639 2026] [:error] [pid 19113:tid 19137] [client 20.216.166.200:56213] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "acwRxfXQdXnDyA4XYbbzYwAAARY"]
[Wed Apr 01 02:26:14.271828 2026] [:error] [pid 19113:tid 19116] [client 20.216.166.200:56258] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acwRxvXQdXnDyA4XYbbzaQAAAQE"]
[Wed Apr 01 02:26:14.742517 2026] [:error] [pid 52594:tid 52705] [client 20.216.166.200:56270] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acwRxke53suVMS91e0Q_1AAAAMQ"]
[Wed Apr 01 02:26:15.212793 2026] [:error] [pid 52836:tid 52896] [client 20.216.166.200:56876] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acwRx5jk_YTY8bXnEz5j8gAAAEQ"]
[Wed Apr 01 02:26:15.690220 2026] [:error] [pid 52592:tid 52671] [client 20.216.166.200:56227] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "acwRxz-61iqkPKUhqlbzBwAAABg"]
[Wed Apr 01 02:26:16.219835 2026] [:error] [pid 52592:tid 52655] [client 20.216.166.200:56895] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "acwRyD-61iqkPKUhqlbzCQAAAAg"]
[Wed Apr 01 02:26:16.700284 2026] [:error] [pid 52836:tid 52906] [client 20.216.166.200:56905] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "acwRyJjk_YTY8bXnEz5j-QAAAE4"]
[Wed Apr 01 02:26:17.182140 2026] [:error] [pid 52593:tid 52693] [client 20.216.166.200:56261] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "acwRyeKOtxqtcDhRtD-b9QAAAJM"]
[Wed Apr 01 02:26:17.663558 2026] [:error] [pid 52592:tid 52660] [client 20.216.166.200:55907] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "acwRyT-61iqkPKUhqlbzCwAAAA0"]
[Wed Apr 01 02:26:18.136137 2026] [:error] [pid 52836:tid 52904] [client 20.216.166.200:56869] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acwRypjk_YTY8bXnEz5kAQAAAEw"]
[Wed Apr 01 02:26:18.621062 2026] [:error] [pid 52836:tid 52896] [client 20.216.166.200:56885] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acwRypjk_YTY8bXnEz5kAgAAAEQ"]
[Wed Apr 01 02:26:19.093595 2026] [:error] [pid 52836:tid 52902] [client 20.216.166.200:56317] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acwRy5jk_YTY8bXnEz5kBgAAAEo"]
[Wed Apr 01 02:26:19.568045 2026] [:error] [pid 52836:tid 52906] [client 20.216.166.200:56237] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "acwRy5jk_YTY8bXnEz5kCgAAAE4"]
[Wed Apr 01 02:26:20.040336 2026] [:error] [pid 52836:tid 52893] [client 20.216.166.200:56941] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acwRzJjk_YTY8bXnEz5kDwAAAEE"]
[Wed Apr 01 02:26:20.516546 2026] [:error] [pid 52593:tid 52685] [client 20.216.166.200:56289] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acwRzOKOtxqtcDhRtD-b_QAAAIs"]
[Wed Apr 01 02:26:21.007605 2026] [:error] [pid 52836:tid 52904] [client 20.216.166.200:56940] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acwRzZjk_YTY8bXnEz5kFQAAAEw"]
[Wed Apr 01 02:26:21.510609 2026] [:error] [pid 52836:tid 52899] [client 20.216.166.200:56930] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "acwRzZjk_YTY8bXnEz5kGgAAAEc"]
[Wed Apr 01 02:26:21.984875 2026] [:error] [pid 52836:tid 52900] [client 20.216.166.200:56268] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acwRzZjk_YTY8bXnEz5kHAAAAEg"]
[Wed Apr 01 02:26:22.467534 2026] [:error] [pid 52593:tid 52686] [client 20.216.166.200:56943] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acwRzuKOtxqtcDhRtD-cBAAAAIw"]
[Wed Apr 01 02:26:22.982181 2026] [:error] [pid 19113:tid 19137] [client 20.216.166.200:56257] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acwRzvXQdXnDyA4XYbbzcwAAARY"]
[Wed Apr 01 02:26:23.471832 2026] [:error] [pid 52836:tid 52909] [client 20.216.166.200:56927] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "acwRz5jk_YTY8bXnEz5kJQAAAFE"]
[Wed Apr 01 02:26:23.957716 2026] [:error] [pid 52593:tid 52697] [client 20.216.166.200:56232] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "acwRz-KOtxqtcDhRtD-cCQAAAJc"]
[Wed Apr 01 02:26:24.446731 2026] [:error] [pid 19113:tid 19129] [client 20.216.166.200:56199] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "acwR0PXQdXnDyA4XYbbzegAAAQ4"]
[Wed Apr 01 02:26:24.942156 2026] [:error] [pid 52836:tid 52894] [client 20.216.166.200:56193] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "acwR0Jjk_YTY8bXnEz5kKQAAAEI"]
[Wed Apr 01 02:26:25.465055 2026] [:error] [pid 52836:tid 52899] [client 20.216.166.200:55907] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "acwR0Zjk_YTY8bXnEz5kKwAAAEc"]
[Wed Apr 01 02:26:26.006468 2026] [:error] [pid 52593:tid 52690] [client 20.216.166.200:55919] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "acwR0uKOtxqtcDhRtD-cCwAAAJA"]
[Wed Apr 01 02:26:26.477253 2026] [:error] [pid 19113:tid 19137] [client 20.216.166.200:55872] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "acwR0vXQdXnDyA4XYbbzggAAARY"]
[Wed Apr 01 02:26:26.953320 2026] [:error] [pid 52593:tid 52675] [client 20.216.166.200:56200] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "acwR0uKOtxqtcDhRtD-cDAAAAIE"]
[Wed Apr 01 02:26:27.466174 2026] [:error] [pid 52593:tid 52694] [client 20.216.166.200:56278] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "acwR0-KOtxqtcDhRtD-cDQAAAJQ"]
[Wed Apr 01 02:26:27.955236 2026] [:error] [pid 52593:tid 52687] [client 20.216.166.200:56875] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "acwR0-KOtxqtcDhRtD-cEQAAAI0"]
[Wed Apr 01 02:26:28.437664 2026] [:error] [pid 19113:tid 19129] [client 20.216.166.200:56892] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "acwR1PXQdXnDyA4XYbbzhwAAAQ4"]
[Wed Apr 01 02:26:28.936315 2026] [:error] [pid 52593:tid 52675] [client 20.216.166.200:56292] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "acwR1OKOtxqtcDhRtD-cFQAAAIE"]
[Wed Apr 01 02:26:29.512853 2026] [:error] [pid 52594:tid 52708] [client 20.216.166.200:55809] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "acwR1Ue53suVMS91e0Q_-gAAAMc"]
[Wed Apr 01 02:26:30.017848 2026] [:error] [pid 52593:tid 52698] [client 20.216.166.200:56896] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acwR1uKOtxqtcDhRtD-cFwAAAJg"]
[Wed Apr 01 02:26:30.519666 2026] [:error] [pid 52593:tid 52684] [client 20.216.166.200:56221] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acwR1uKOtxqtcDhRtD-cGAAAAIo"]
[Wed Apr 01 02:26:30.992800 2026] [:error] [pid 52592:tid 52661] [client 20.216.166.200:56223] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acwR1j-61iqkPKUhqlbzFQAAAA4"]
[Wed Apr 01 02:26:31.466268 2026] [:error] [pid 52593:tid 52690] [client 20.216.166.200:56865] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "acwR1-KOtxqtcDhRtD-cHgAAAJA"]
[Wed Apr 01 02:26:31.944062 2026] [:error] [pid 52592:tid 52663] [client 20.216.166.200:56241] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acwR1z-61iqkPKUhqlbzFgAAABA"]
[Wed Apr 01 02:26:32.434115 2026] [:error] [pid 52593:tid 52698] [client 20.216.166.200:56944] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acwR2OKOtxqtcDhRtD-cIwAAAJg"]
[Wed Apr 01 02:26:32.907451 2026] [:error] [pid 52594:tid 52707] [client 20.216.166.200:56204] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acwR2Ee53suVMS91e0RADQAAAMY"]
[Wed Apr 01 02:26:33.435626 2026] [:error] [pid 52593:tid 52694] [client 20.216.166.200:56276] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "acwR2eKOtxqtcDhRtD-cJwAAAJQ"]
[Wed Apr 01 02:26:33.948538 2026] [:error] [pid 52593:tid 52681] [client 20.216.166.200:56904] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acwR2eKOtxqtcDhRtD-cKQAAAIc"]
[Wed Apr 01 02:26:34.423396 2026] [:error] [pid 19113:tid 19129] [client 20.216.166.200:56959] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acwR2vXQdXnDyA4XYbbzjwAAAQ4"]
[Wed Apr 01 02:26:34.913250 2026] [:error] [pid 19113:tid 19138] [client 20.216.166.200:56274] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acwR2vXQdXnDyA4XYbbzlAAAARc"]
[Wed Apr 01 02:26:35.432512 2026] [:error] [pid 52594:tid 52716] [client 20.216.166.200:56231] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "acwR20e53suVMS91e0RAEwAAAM8"]
[Wed Apr 01 02:26:35.916727 2026] [:error] [pid 52592:tid 52668] [client 20.216.166.200:56267] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acwR2z-61iqkPKUhqlbzIAAAABU"]
[Wed Apr 01 02:26:36.432196 2026] [:error] [pid 52594:tid 52707] [client 20.216.166.200:56211] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acwR3Ee53suVMS91e0RAGQAAAMY"]
[Wed Apr 01 02:26:36.907501 2026] [:error] [pid 52836:tid 52906] [client 20.216.166.200:56290] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acwR3Jjk_YTY8bXnEz5kPQAAAE4"]
[Wed Apr 01 02:26:37.381077 2026] [:error] [pid 52592:tid 52650] [client 20.216.166.200:56284] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "acwR3T-61iqkPKUhqlbzIgAAAAM"]
[Wed Apr 01 02:26:37.869044 2026] [:error] [pid 52836:tid 52896] [client 20.216.166.200:56269] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acwR3Zjk_YTY8bXnEz5kPgAAAEQ"]
[Wed Apr 01 02:26:38.423893 2026] [:error] [pid 19113:tid 19132] [client 20.216.166.200:56194] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acwR3vXQdXnDyA4XYbbzpQAAARE"]
[Wed Apr 01 02:26:38.896231 2026] [:error] [pid 52593:tid 52696] [client 20.216.166.200:55873] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acwR3uKOtxqtcDhRtD-cLgAAAJY"]
[Wed Apr 01 02:26:39.373612 2026] [:error] [pid 19113:tid 19119] [client 20.216.166.200:55810] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "acwR3_XQdXnDyA4XYbbzqQAAAQQ"]
[Wed Apr 01 02:26:39.845382 2026] [:error] [pid 52592:tid 52667] [client 20.216.166.200:56834] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acwR3z-61iqkPKUhqlbzKQAAABQ"]
[Wed Apr 01 02:26:40.347729 2026] [:error] [pid 19113:tid 19115] [client 20.216.166.200:56217] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acwR4PXQdXnDyA4XYbbzrwAAAQA"]
[Wed Apr 01 02:26:40.826048 2026] [:error] [pid 19113:tid 19136] [client 20.216.166.200:55935] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acwR4PXQdXnDyA4XYbbzswAAARU"]
[Wed Apr 01 02:26:41.303263 2026] [:error] [pid 19113:tid 19127] [client 20.216.166.200:56845] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "acwR4fXQdXnDyA4XYbbztwAAAQw"]
[Wed Apr 01 02:26:41.781397 2026] [:error] [pid 52594:tid 52709] [client 20.216.166.200:56245] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acwR4Ue53suVMS91e0RAIAAAAMg"]
[Wed Apr 01 02:26:42.295000 2026] [:error] [pid 52592:tid 52668] [client 20.216.166.200:56858] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acwR4j-61iqkPKUhqlbzLgAAABU"]
[Wed Apr 01 02:26:42.764903 2026] [:error] [pid 19113:tid 19127] [client 20.216.166.200:56932] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acwR4vXQdXnDyA4XYbbzwgAAAQw"]
[Wed Apr 01 02:26:43.245853 2026] [:error] [pid 52594:tid 52708] [client 20.216.166.200:56216] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "acwR40e53suVMS91e0RAJQAAAMc"]
[Wed Apr 01 02:26:43.720514 2026] [:error] [pid 19113:tid 19121] [client 20.216.166.200:56212] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acwR4_XQdXnDyA4XYbbzxwAAAQY"]
[Wed Apr 01 02:26:44.227222 2026] [:error] [pid 52592:tid 52663] [client 20.216.166.200:55926] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acwR5D-61iqkPKUhqlbzMQAAABA"]
[Wed Apr 01 02:26:44.706857 2026] [:error] [pid 52836:tid 52899] [client 20.216.166.200:56295] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acwR5Jjk_YTY8bXnEz5kRgAAAEc"]
[Wed Apr 01 02:26:45.237069 2026] [:error] [pid 52836:tid 52903] [client 20.216.166.200:55904] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "acwR5Zjk_YTY8bXnEz5kSQAAAEs"]
[Wed Apr 01 02:26:45.739160 2026] [:error] [pid 52592:tid 52655] [client 20.216.166.200:56946] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "acwR5T-61iqkPKUhqlbzNwAAAAg"]
[Wed Apr 01 02:26:46.222372 2026] [:error] [pid 52836:tid 52895] [client 20.216.166.200:56316] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "acwR5pjk_YTY8bXnEz5kTQAAAEM"]
[Wed Apr 01 02:26:46.693875 2026] [:error] [pid 52836:tid 52911] [client 20.216.166.200:56305] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "acwR5pjk_YTY8bXnEz5kUAAAAFM"]
[Wed Apr 01 02:26:47.220281 2026] [:error] [pid 19113:tid 19118] [client 20.216.166.200:56286] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "acwR5_XQdXnDyA4XYbbz0QAAAQM"]
[Wed Apr 01 02:26:47.741072 2026] [:error] [pid 52592:tid 52659] [client 20.216.166.200:55901] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acwR5z-61iqkPKUhqlbzPwAAAAw"]
[Wed Apr 01 02:26:48.217790 2026] [:error] [pid 19113:tid 19128] [client 20.216.166.200:55928] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acwR6PXQdXnDyA4XYbbz1wAAAQ0"]
[Wed Apr 01 02:26:48.715046 2026] [:error] [pid 52593:tid 52675] [client 20.216.166.200:55923] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acwR6OKOtxqtcDhRtD-cNAAAAIE"]
[Wed Apr 01 02:26:49.196933 2026] [:error] [pid 52836:tid 52915] [client 20.216.166.200:56198] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "acwR6Zjk_YTY8bXnEz5kVQAAAFc"]
[Wed Apr 01 02:26:49.667466 2026] [:error] [pid 52836:tid 52906] [client 20.216.166.200:56300] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwR6Zjk_YTY8bXnEz5kWgAAAE4"]
[Wed Apr 01 02:26:50.168560 2026] [:error] [pid 52592:tid 52654] [client 20.216.166.200:56192] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwR6j-61iqkPKUhqlbzRAAAAAc"]
[Wed Apr 01 02:26:50.676122 2026] [:error] [pid 19113:tid 19129] [client 20.216.166.200:55896] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwR6vXQdXnDyA4XYbbz3gAAAQ4"]
[Wed Apr 01 02:26:51.187103 2026] [:error] [pid 19113:tid 19121] [client 20.216.166.200:56218] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwR6_XQdXnDyA4XYbbz4gAAAQY"]
[Wed Apr 01 02:26:51.675298 2026] [:error] [pid 52594:tid 52720] [client 20.216.166.200:56306] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "acwR60e53suVMS91e0RANAAAANM"]
[Wed Apr 01 02:26:52.151498 2026] [:error] [pid 52836:tid 52913] [client 20.216.166.200:56238] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "acwR7Jjk_YTY8bXnEz5kXgAAAFU"]
[Wed Apr 01 02:26:52.642328 2026] [:error] [pid 19113:tid 19115] [client 20.216.166.200:55891] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "acwR7PXQdXnDyA4XYbbz6QAAAQA"]
[Wed Apr 01 02:26:53.116326 2026] [:error] [pid 52593:tid 52674] [client 20.216.166.200:56311] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "acwR7eKOtxqtcDhRtD-cOwAAAIA"]
[Wed Apr 01 02:26:53.593880 2026] [:error] [pid 52836:tid 52911] [client 20.216.166.200:56228] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acwR7Zjk_YTY8bXnEz5kYQAAAFM"]
[Wed Apr 01 02:26:54.121821 2026] [:error] [pid 52836:tid 52913] [client 20.216.166.200:56219] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acwR7pjk_YTY8bXnEz5kZQAAAFU"]
[Wed Apr 01 02:26:54.641007 2026] [:error] [pid 52594:tid 52705] [client 20.216.166.200:56297] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acwR7ke53suVMS91e0RAPQAAAMQ"]
[Wed Apr 01 02:26:55.119667 2026] [:error] [pid 19113:tid 19115] [client 20.216.166.200:56852] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "acwR7_XQdXnDyA4XYbbz9AAAAQA"]
[Wed Apr 01 02:26:55.624633 2026] [:error] [pid 52593:tid 52689] [client 20.216.166.200:55883] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "acwR7-KOtxqtcDhRtD-cPQAAAI8"]
[Wed Apr 01 02:26:56.098399 2026] [:error] [pid 52592:tid 52661] [client 20.216.166.200:56296] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "acwR8D-61iqkPKUhqlbzRwAAAA4"]
[Wed Apr 01 02:26:56.595935 2026] [:error] [pid 52594:tid 52717] [client 20.216.166.200:56252] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "acwR8Ee53suVMS91e0RAQwAAANA"]
[Wed Apr 01 02:26:57.087561 2026] [:error] [pid 19113:tid 19115] [client 20.216.166.200:55854] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "acwR8fXQdXnDyA4XYbbz_QAAAQA"]
[Wed Apr 01 02:26:57.633637 2026] [:error] [pid 52592:tid 52657] [client 20.216.166.200:56209] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acwR8T-61iqkPKUhqlbzTQAAAAo"]
[Wed Apr 01 02:26:58.127298 2026] [:error] [pid 19113:tid 19129] [client 20.216.166.200:56253] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acwR8vXQdXnDyA4XYbb0AAAAAQ4"]
[Wed Apr 01 02:26:58.607249 2026] [:error] [pid 52593:tid 52685] [client 20.216.166.200:55882] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acwR8uKOtxqtcDhRtD-cRgAAAIs"]
[Wed Apr 01 02:26:59.095019 2026] [:error] [pid 52594:tid 52717] [client 20.216.166.200:56282] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acwR80e53suVMS91e0RATQAAANA"]
[Wed Apr 01 02:26:59.625211 2026] [:error] [pid 52593:tid 52676] [client 20.216.166.200:56265] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "acwR8-KOtxqtcDhRtD-cSQAAAII"]
[Wed Apr 01 02:27:00.130508 2026] [:error] [pid 19113:tid 19137] [client 20.216.166.200:56293] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "acwR9PXQdXnDyA4XYbb0AwAAARY"]
[Wed Apr 01 02:27:00.614418 2026] [:error] [pid 52592:tid 52650] [client 20.216.166.200:55897] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "acwR9D-61iqkPKUhqlbzWgAAAAM"]
[Wed Apr 01 02:27:01.151354 2026] [:error] [pid 52592:tid 52658] [client 20.216.166.200:56255] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "acwR9T-61iqkPKUhqlbzXwAAAAs"]
[Wed Apr 01 02:27:01.704245 2026] [:error] [pid 52592:tid 52670] [client 20.216.166.200:55884] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "acwR9T-61iqkPKUhqlbzZAAAABc"]
[Wed Apr 01 02:27:02.180658 2026] [:error] [pid 19113:tid 19136] [client 20.216.166.200:55910] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "acwR9vXQdXnDyA4XYbb0DAAAARU"]
[Wed Apr 01 02:27:02.706805 2026] [:error] [pid 19113:tid 19124] [client 20.216.166.200:55909] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "acwR9vXQdXnDyA4XYbb0DwAAAQk"]
[Wed Apr 01 02:27:03.226890 2026] [:error] [pid 19113:tid 19138] [client 20.216.166.200:56208] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "acwR9_XQdXnDyA4XYbb0FgAAARc"]
[Wed Apr 01 02:27:03.709317 2026] [:error] [pid 19113:tid 19135] [client 20.216.166.200:56254] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "acwR9_XQdXnDyA4XYbb0GQAAARQ"]
[Wed Apr 01 02:27:10.378041 2026] [:error] [pid 52593:tid 52676] [client 20.216.166.200:56842] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "acwR_uKOtxqtcDhRtD-cZgAAAII"]
[Wed Apr 01 02:27:10.866539 2026] [:error] [pid 52593:tid 52688] [client 20.216.166.200:56888] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "acwR_uKOtxqtcDhRtD-cZwAAAI4"]
[Wed Apr 01 02:27:11.342665 2026] [:error] [pid 19113:tid 19118] [client 20.216.166.200:55933] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "acwR__XQdXnDyA4XYbb0SwAAAQM"]
[Wed Apr 01 02:27:11.838831 2026] [:error] [pid 19113:tid 19122] [client 20.216.166.200:55824] [client 20.216.166.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "acwR__XQdXnDyA4XYbb0TgAAAQc"]
[Wed Apr 01 06:54:04.132428 2026] [:error] [pid 24348:tid 24379] [client 20.203.130.156:18844] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "acxQjG0Vs69Y5nF1HA_cyAAAAYA"]
[Wed Apr 01 06:54:04.610661 2026] [:error] [pid 24314:tid 24337] [client 20.203.130.156:20250] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "acxQjJRF3FCzjmMUX5bnlgAAARM"]
[Wed Apr 01 07:06:22.875800 2026] [:error] [pid 23714:tid 23754] [client 122.51.236.174:60664] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acxTbkHxDDU2ETcG9DTeKAAAABQ"]
[Wed Apr 01 07:11:54.655407 2026] [:error] [pid 23715:tid 23774] [client 20.116.48.67:34803] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acxUuq-REzOruNbiT9xYEwAAAE0"]
[Wed Apr 01 07:11:56.071132 2026] [:error] [pid 23714:tid 23756] [client 20.116.48.67:34766] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acxUvEHxDDU2ETcG9DTgvgAAABY"]
[Wed Apr 01 07:11:57.523982 2026] [:error] [pid 23716:tid 23808] [client 20.116.48.67:34773] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acxUvXVtFUg_mx-RYb5sjwAAAJQ"]
[Wed Apr 01 07:11:58.981766 2026] [:error] [pid 23819:tid 23842] [client 20.116.48.67:34698] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acxUvtdfUS_37wFAM77r4gAAANQ"]
[Wed Apr 01 07:31:28.013384 2026] [:error] [pid 24348:tid 24390] [client 43.159.132.207:35316] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acxZUG0Vs69Y5nF1HA_o0QAAAYs"]
[Wed Apr 01 12:30:39.399561 2026] [:error] [pid 23716:tid 23797] [client 20.116.48.67:44996] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "acyfb3VtFUg_mx-RYb77zwAAAIk"]
[Wed Apr 01 12:30:40.872010 2026] [:error] [pid 24346:tid 24367] [client 20.116.48.67:44942] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "acyfcLc1l8kg9MhGHILb4gAAAU8"]
[Wed Apr 01 12:30:42.291290 2026] [:error] [pid 24314:tid 24325] [client 20.116.48.67:45027] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "acyfcpRF3FCzjmMUX5YqzAAAAQc"]
[Wed Apr 01 12:30:43.714030 2026] [:error] [pid 24348:tid 24394] [client 20.116.48.67:45013] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "acyfc20Vs69Y5nF1HA9fcAAAAY8"]
[Wed Apr 01 12:30:45.149429 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:44945] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tanjiro.php"] [unique_id "acyfdUHxDDU2ETcG9DTQsgAAAAg"]
[Wed Apr 01 12:30:46.637047 2026] [:error] [pid 23819:tid 23831] [client 20.116.48.67:45022] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tanjiro.php"] [unique_id "acyfdtdfUS_37wFAM75FcgAAAMk"]
[Wed Apr 01 12:30:48.119663 2026] [:error] [pid 23819:tid 23824] [client 20.116.48.67:44943] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tanjiro.php"] [unique_id "acyfeNdfUS_37wFAM75FegAAAMI"]
[Wed Apr 01 12:30:49.589278 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:44998] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tanjiro.php"] [unique_id "acyfeUHxDDU2ETcG9DTQxwAAABM"]
[Wed Apr 01 12:30:51.044776 2026] [:error] [pid 24348:tid 24402] [client 20.116.48.67:45049] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "acyfe20Vs69Y5nF1HA9fgAAAAZc"]
[Wed Apr 01 12:30:52.530942 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:45028] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "acyffEHxDDU2ETcG9DTQ0AAAAAw"]
[Wed Apr 01 12:30:53.949886 2026] [:error] [pid 23716:tid 23797] [client 20.116.48.67:44934] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "acyffXVtFUg_mx-RYb779QAAAIk"]
[Wed Apr 01 12:30:55.376726 2026] [:error] [pid 24346:tid 24371] [client 20.116.48.67:44930] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "acyff7c1l8kg9MhGHILb7gAAAVM"]
[Wed Apr 01 12:30:56.870472 2026] [:error] [pid 23716:tid 23811] [client 20.116.48.67:45008] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file22.php"] [unique_id "acyfgHVtFUg_mx-RYb77_AAAAJc"]
[Wed Apr 01 12:30:58.376697 2026] [:error] [pid 24314:tid 24326] [client 20.116.48.67:45038] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file22.php"] [unique_id "acyfgpRF3FCzjmMUX5Yq4QAAAQg"]
[Wed Apr 01 12:30:59.846204 2026] [:error] [pid 24314:tid 24331] [client 20.116.48.67:44941] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file22.php"] [unique_id "acyfg5RF3FCzjmMUX5Yq5gAAAQ0"]
[Wed Apr 01 12:31:01.289457 2026] [:error] [pid 23715:tid 23764] [client 20.116.48.67:45021] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file22.php"] [unique_id "acyfha-REzOruNbiT9zD4QAAAEM"]
[Wed Apr 01 12:31:02.824203 2026] [:error] [pid 23715:tid 23763] [client 20.116.48.67:45048] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inwp.php"] [unique_id "acyfhq-REzOruNbiT9zD5wAAAEI"]
[Wed Apr 01 12:31:04.341416 2026] [:error] [pid 23715:tid 23779] [client 20.116.48.67:44936] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inwp.php"] [unique_id "acyfiK-REzOruNbiT9zD7QAAAFI"]
[Wed Apr 01 12:31:05.884760 2026] [:error] [pid 23716:tid 23811] [client 20.116.48.67:44993] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inwp.php"] [unique_id "acyfiXVtFUg_mx-RYb78JAAAAJc"]
[Wed Apr 01 12:31:07.502770 2026] [:error] [pid 23819:tid 23826] [client 20.116.48.67:45010] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inwp.php"] [unique_id "acyfi9dfUS_37wFAM75FlgAAAMQ"]
[Wed Apr 01 12:31:08.934255 2026] [:error] [pid 23716:tid 23810] [client 20.116.48.67:45032] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ca4.php"] [unique_id "acyfjHVtFUg_mx-RYb78LgAAAJY"]
[Wed Apr 01 12:31:10.365479 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:44940] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ca4.php"] [unique_id "acyfjkHxDDU2ETcG9DTREwAAAAw"]
[Wed Apr 01 12:31:11.795496 2026] [:error] [pid 23716:tid 23799] [client 20.116.48.67:45033] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ca4.php"] [unique_id "acyfj3VtFUg_mx-RYb78NgAAAIs"]
[Wed Apr 01 12:31:13.301388 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:45026] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ca4.php"] [unique_id "acyfkUHxDDU2ETcG9DTRIQAAAAk"]
[Wed Apr 01 12:31:14.725327 2026] [:error] [pid 23715:tid 23762] [client 20.116.48.67:44928] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nz.php"] [unique_id "acyfkq-REzOruNbiT9zD-AAAAEE"]
[Wed Apr 01 12:31:16.156950 2026] [:error] [pid 24348:tid 24393] [client 20.116.48.67:44958] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nz.php"] [unique_id "acyflG0Vs69Y5nF1HA9fogAAAY4"]
[Wed Apr 01 12:31:36.073496 2026] [:error] [pid 23715:tid 23777] [client 20.116.48.67:44960] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "acyfqK-REzOruNbiT9zEDAAAAFA"]
[Wed Apr 01 12:31:37.493868 2026] [:error] [pid 23714:tid 23734] [client 20.116.48.67:45034] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "acyfqUHxDDU2ETcG9DTRUwAAAAA"]
[Wed Apr 01 12:31:38.914915 2026] [:error] [pid 24348:tid 24396] [client 20.116.48.67:45019] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnn_.php"] [unique_id "acyfqm0Vs69Y5nF1HA9ftAAAAZE"]
[Wed Apr 01 12:31:47.002635 2026] [:error] [pid 24346:tid 24369] [client 20.116.48.67:45045] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "acyfs7c1l8kg9MhGHILcIwAAAVE"]
[Wed Apr 01 12:31:48.446078 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:44953] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "acyftEHxDDU2ETcG9DTRewAAAAU"]
[Wed Apr 01 12:31:49.880833 2026] [:error] [pid 23819:tid 23824] [client 20.116.48.67:45005] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "acyftddfUS_37wFAM75F1AAAAMI"]
[Wed Apr 01 12:31:51.319869 2026] [:error] [pid 23819:tid 23832] [client 20.116.48.67:45031] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "acyft9dfUS_37wFAM75F2gAAAMo"]
[Wed Apr 01 12:31:52.748435 2026] [:error] [pid 23819:tid 23842] [client 20.116.48.67:44944] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sef.php"] [unique_id "acyfuNdfUS_37wFAM75F3gAAANQ"]
[Wed Apr 01 12:31:54.173121 2026] [:error] [pid 24348:tid 24379] [client 20.116.48.67:44948] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sef.php"] [unique_id "acyfum0Vs69Y5nF1HA9f1AAAAYA"]
[Wed Apr 01 12:31:55.595650 2026] [:error] [pid 23716:tid 23800] [client 20.116.48.67:45040] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sef.php"] [unique_id "acyfu3VtFUg_mx-RYb78kwAAAIw"]
[Wed Apr 01 12:31:57.023230 2026] [:error] [pid 23714:tid 23744] [client 20.116.48.67:45041] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sef.php"] [unique_id "acyfvUHxDDU2ETcG9DTRgQAAAAo"]
[Wed Apr 01 12:31:58.461133 2026] [:error] [pid 23819:tid 23823] [client 20.116.48.67:44873] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ztv.php"] [unique_id "acyfvtdfUS_37wFAM75F5AAAAME"]
[Wed Apr 01 12:31:59.891544 2026] [:error] [pid 23716:tid 23792] [client 20.116.48.67:44962] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ztv.php"] [unique_id "acyfv3VtFUg_mx-RYb78mQAAAIQ"]
[Wed Apr 01 12:32:01.314254 2026] [:error] [pid 23715:tid 23772] [client 20.116.48.67:44883] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ztv.php"] [unique_id "acyfwa-REzOruNbiT9zEMQAAAEs"]
[Wed Apr 01 12:32:02.750191 2026] [:error] [pid 24314:tid 24333] [client 20.116.48.67:44971] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ztv.php"] [unique_id "acyfwpRF3FCzjmMUX5YrDgAAAQ8"]
[Wed Apr 01 12:32:04.188040 2026] [:error] [pid 24346:tid 24354] [client 20.116.48.67:45003] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Rk41.php"] [unique_id "acyfxLc1l8kg9MhGHILcLAAAAUI"]
[Wed Apr 01 12:32:05.644854 2026] [:error] [pid 23716:tid 23796] [client 20.116.48.67:44868] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Rk41.php"] [unique_id "acyfxXVtFUg_mx-RYb78ngAAAIg"]
[Wed Apr 01 12:32:07.069412 2026] [:error] [pid 23716:tid 23808] [client 20.116.48.67:44879] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Rk41.php"] [unique_id "acyfx3VtFUg_mx-RYb78pAAAAJQ"]
[Wed Apr 01 12:32:08.493595 2026] [:error] [pid 24348:tid 24388] [client 20.116.48.67:45039] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Rk41.php"] [unique_id "acyfyG0Vs69Y5nF1HA9f5AAAAYk"]
[Wed Apr 01 12:32:09.915035 2026] [:error] [pid 24348:tid 24382] [client 20.116.48.67:44929] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acyfyW0Vs69Y5nF1HA9f7AAAAYM"]
[Wed Apr 01 12:32:11.350010 2026] [:error] [pid 24346:tid 24359] [client 20.116.48.67:44981] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acyfy7c1l8kg9MhGHILcMgAAAUc"]
[Wed Apr 01 12:32:12.779067 2026] [:error] [pid 23716:tid 23788] [client 20.116.48.67:44938] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acyfzHVtFUg_mx-RYb78tAAAAIA"]
[Wed Apr 01 12:32:14.223321 2026] [:error] [pid 24314:tid 24339] [client 20.116.48.67:45030] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acyfzpRF3FCzjmMUX5YrEwAAARU"]
[Wed Apr 01 12:32:15.641766 2026] [:error] [pid 23714:tid 23736] [client 20.116.48.67:44990] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acyfz0HxDDU2ETcG9DTRvAAAAAI"]
[Wed Apr 01 12:32:17.063615 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:44896] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "acyf0UHxDDU2ETcG9DTRxwAAAAs"]
[Wed Apr 01 12:32:18.480119 2026] [:error] [pid 23716:tid 23793] [client 20.116.48.67:45051] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "acyf0nVtFUg_mx-RYb78vwAAAIU"]
[Wed Apr 01 12:32:19.893552 2026] [:error] [pid 24348:tid 24381] [client 20.116.48.67:45015] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "acyf020Vs69Y5nF1HA9f_QAAAYI"]
[Wed Apr 01 12:32:21.362125 2026] [:error] [pid 24346:tid 24374] [client 20.116.48.67:45004] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/fm.php"] [unique_id "acyf1bc1l8kg9MhGHILcNQAAAVY"]
[Wed Apr 01 12:32:22.787891 2026] [:error] [pid 23716:tid 23794] [client 20.116.48.67:44983] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acyf1nVtFUg_mx-RYb78zQAAAIY"]
[Wed Apr 01 12:32:24.235625 2026] [:error] [pid 23715:tid 23775] [client 20.116.48.67:44939] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acyf2K-REzOruNbiT9zESwAAAE4"]
[Wed Apr 01 12:32:25.660855 2026] [:error] [pid 23715:tid 23780] [client 20.116.48.67:44957] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acyf2a-REzOruNbiT9zETwAAAFM"]
[Wed Apr 01 12:32:27.073732 2026] [:error] [pid 24346:tid 24354] [client 20.116.48.67:45009] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acyf27c1l8kg9MhGHILcOgAAAUI"]
[Wed Apr 01 12:32:28.541813 2026] [:error] [pid 23714:tid 23751] [client 20.116.48.67:44970] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acyf3EHxDDU2ETcG9DTR4QAAABE"]
[Wed Apr 01 12:32:29.972035 2026] [:error] [pid 24346:tid 24358] [client 20.116.48.67:44965] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acyf3bc1l8kg9MhGHILcOwAAAUY"]
[Wed Apr 01 12:32:31.402686 2026] [:error] [pid 24346:tid 24361] [client 20.116.48.67:44933] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acyf37c1l8kg9MhGHILcPQAAAUk"]
[Wed Apr 01 12:32:32.865875 2026] [:error] [pid 24314:tid 24341] [client 20.116.48.67:44917] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acyf4JRF3FCzjmMUX5YrIAAAARc"]
[Wed Apr 01 12:32:34.301657 2026] [:error] [pid 23714:tid 23740] [client 20.116.48.67:44897] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "acyf4kHxDDU2ETcG9DTR9AAAAAY"]
[Wed Apr 01 12:32:35.733276 2026] [:error] [pid 23715:tid 23765] [client 20.116.48.67:44925] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "acyf46-REzOruNbiT9zEWgAAAEQ"]
[Wed Apr 01 12:32:37.153626 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:44937] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "acyf5UHxDDU2ETcG9DTSAAAAAAU"]
[Wed Apr 01 12:32:38.593917 2026] [:error] [pid 24348:tid 24383] [client 20.116.48.67:44956] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/default.php"] [unique_id "acyf5m0Vs69Y5nF1HA9gFAAAAYQ"]
[Wed Apr 01 12:32:40.017963 2026] [:error] [pid 23715:tid 23772] [client 20.116.48.67:44954] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "acyf6K-REzOruNbiT9zEXQAAAEs"]
[Wed Apr 01 12:32:41.434483 2026] [:error] [pid 23716:tid 23797] [client 20.116.48.67:45042] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "acyf6XVtFUg_mx-RYb784QAAAIk"]
[Wed Apr 01 12:32:42.904818 2026] [:error] [pid 23716:tid 23804] [client 20.116.48.67:45054] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "acyf6nVtFUg_mx-RYb786QAAAJA"]
[Wed Apr 01 12:32:44.334303 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:44963] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ty.php"] [unique_id "acyf7EHxDDU2ETcG9DTSEgAAAAg"]
[Wed Apr 01 12:32:45.758316 2026] [:error] [pid 24348:tid 24403] [client 20.116.48.67:44904] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acyf7W0Vs69Y5nF1HA9gIQAAAZg"]
[Wed Apr 01 12:32:49.280822 2026] [:error] [pid 24346:tid 24362] [client 20.116.48.67:44978] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "acyf8bc1l8kg9MhGHILcTQAAAUo"]
[Wed Apr 01 12:32:55.087530 2026] [:error] [pid 24348:tid 24383] [client 20.116.48.67:44946] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acyf920Vs69Y5nF1HA9gPAAAAYQ"]
[Wed Apr 01 12:32:56.506388 2026] [:error] [pid 24346:tid 24369] [client 20.116.48.67:44968] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acyf-Lc1l8kg9MhGHILcUgAAAVE"]
[Wed Apr 01 12:32:57.982797 2026] [:error] [pid 23716:tid 23790] [client 20.116.48.67:45024] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acyf-XVtFUg_mx-RYb78_QAAAII"]
[Wed Apr 01 12:32:59.453608 2026] [:error] [pid 24348:tid 24403] [client 20.116.48.67:45037] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "acyf-20Vs69Y5nF1HA9gSwAAAZg"]
[Wed Apr 01 12:33:00.911667 2026] [:error] [pid 24314:tid 24328] [client 20.116.48.67:44931] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "acyf_JRF3FCzjmMUX5YrMQAAAQo"]
[Wed Apr 01 12:33:02.397602 2026] [:error] [pid 23716:tid 23795] [client 20.116.48.67:45023] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "acyf_nVtFUg_mx-RYb79DwAAAIc"]
[Wed Apr 01 12:33:03.842845 2026] [:error] [pid 23716:tid 23811] [client 20.116.48.67:44980] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "acyf_3VtFUg_mx-RYb79FwAAAJc"]
[Wed Apr 01 12:33:05.288068 2026] [:error] [pid 23714:tid 23738] [client 20.116.48.67:44994] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "acygAUHxDDU2ETcG9DTSPQAAAAQ"]
[Wed Apr 01 12:33:06.733324 2026] [:error] [pid 23716:tid 23793] [client 20.116.48.67:45025] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "acygAnVtFUg_mx-RYb79HwAAAIU"]
[Wed Apr 01 12:33:08.166403 2026] [:error] [pid 23716:tid 23808] [client 20.116.48.67:44899] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "acygBHVtFUg_mx-RYb79JQAAAJQ"]
[Wed Apr 01 12:33:09.643417 2026] [:error] [pid 24346:tid 24357] [client 20.116.48.67:44982] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "acygBbc1l8kg9MhGHILcWAAAAUU"]
[Wed Apr 01 12:33:11.073628 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:45055] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "acygB0HxDDU2ETcG9DTSSQAAAAg"]
[Wed Apr 01 12:33:12.493598 2026] [:error] [pid 24346:tid 24352] [client 20.116.48.67:44966] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "acygCLc1l8kg9MhGHILcXwAAAUA"]
[Wed Apr 01 12:33:13.923918 2026] [:error] [pid 23819:tid 23845] [client 20.116.48.67:45011] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "acygCddfUS_37wFAM75GRwAAANc"]
[Wed Apr 01 12:33:15.368046 2026] [:error] [pid 24314:tid 24329] [client 20.116.48.67:44961] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/link.php"] [unique_id "acygC5RF3FCzjmMUX5YrOQAAAQs"]
[Wed Apr 01 12:33:16.811527 2026] [:error] [pid 23819:tid 23822] [client 20.116.48.67:44885] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acygDNdfUS_37wFAM75GSwAAAMA"]
[Wed Apr 01 12:33:18.365067 2026] [:error] [pid 24348:tid 24399] [client 20.116.48.67:44894] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acygDm0Vs69Y5nF1HA9gagAAAZQ"]
[Wed Apr 01 12:33:20.163451 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:45046] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acygEEHxDDU2ETcG9DTSYAAAAAU"]
[Wed Apr 01 12:33:21.632277 2026] [:error] [pid 23714:tid 23741] [client 20.116.48.67:44995] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acygEUHxDDU2ETcG9DTSagAAAAc"]
[Wed Apr 01 12:33:23.253369 2026] [:error] [pid 23716:tid 23809] [client 20.116.48.67:44864] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acygE3VtFUg_mx-RYb79NgAAAJU"]
[Wed Apr 01 12:33:24.713167 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:44951] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acygFEHxDDU2ETcG9DTSdgAAAAk"]
[Wed Apr 01 12:33:26.135056 2026] [:error] [pid 23715:tid 23781] [client 20.116.48.67:44883] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acygFq-REzOruNbiT9zEjAAAAFQ"]
[Wed Apr 01 12:33:27.589323 2026] [:error] [pid 23714:tid 23742] [client 20.116.48.67:45036] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acygF0HxDDU2ETcG9DTShAAAAAg"]
[Wed Apr 01 12:33:29.018723 2026] [:error] [pid 23716:tid 23811] [client 20.116.48.67:44955] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "acygGXVtFUg_mx-RYb79PwAAAJc"]
[Wed Apr 01 12:33:30.461476 2026] [:error] [pid 23716:tid 23802] [client 20.116.48.67:44912] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "acygGnVtFUg_mx-RYb79QgAAAI4"]
[Wed Apr 01 12:33:31.892224 2026] [:error] [pid 24314:tid 24342] [client 20.116.48.67:44869] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "acygG5RF3FCzjmMUX5YrQgAAARg"]
[Wed Apr 01 12:33:33.319079 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:45012] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/network.php"] [unique_id "acygHUHxDDU2ETcG9DTSmgAAABM"]
[Wed Apr 01 12:33:34.749284 2026] [:error] [pid 23714:tid 23754] [client 20.116.48.67:45000] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acygHkHxDDU2ETcG9DTSngAAABQ"]
[Wed Apr 01 12:33:36.196218 2026] [:error] [pid 24346:tid 24359] [client 20.116.48.67:45050] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acygILc1l8kg9MhGHILcZgAAAUc"]
[Wed Apr 01 12:33:37.633737 2026] [:error] [pid 24348:tid 24388] [client 20.116.48.67:44976] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acygIW0Vs69Y5nF1HA9gggAAAYk"]
[Wed Apr 01 12:33:39.090837 2026] [:error] [pid 23714:tid 23752] [client 20.116.48.67:44918] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acygI0HxDDU2ETcG9DTSqgAAABI"]
[Wed Apr 01 12:33:40.611360 2026] [:error] [pid 23714:tid 23751] [client 20.116.48.67:44826] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acygJEHxDDU2ETcG9DTSsQAAABE"]
[Wed Apr 01 12:33:42.103561 2026] [:error] [pid 23715:tid 23763] [client 20.116.48.67:44977] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acygJq-REzOruNbiT9zEngAAAEI"]
[Wed Apr 01 12:33:43.528473 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:45052] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acygJ0HxDDU2ETcG9DTStQAAABM"]
[Wed Apr 01 12:33:44.953266 2026] [:error] [pid 23716:tid 23788] [client 20.116.48.67:45043] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acygKHVtFUg_mx-RYb79UAAAAIA"]
[Wed Apr 01 12:33:46.390631 2026] [:error] [pid 24348:tid 24391] [client 20.116.48.67:44973] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acygKm0Vs69Y5nF1HA9gkwAAAYw"]
[Wed Apr 01 12:33:47.817841 2026] [:error] [pid 23714:tid 23756] [client 20.116.48.67:45016] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acygK0HxDDU2ETcG9DTSugAAABY"]
[Wed Apr 01 12:33:49.279740 2026] [:error] [pid 23714:tid 23737] [client 20.116.48.67:44905] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acygLUHxDDU2ETcG9DTSwAAAAAM"]
[Wed Apr 01 12:33:50.710831 2026] [:error] [pid 23714:tid 23752] [client 20.116.48.67:44999] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acygLkHxDDU2ETcG9DTSyQAAABI"]
[Wed Apr 01 12:33:52.154769 2026] [:error] [pid 23819:tid 23836] [client 20.116.48.67:44959] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "acygMNdfUS_37wFAM75GWwAAAM4"]
[Wed Apr 01 12:33:53.621338 2026] [:error] [pid 23819:tid 23844] [client 20.116.48.67:44834] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acygMddfUS_37wFAM75GYAAAANY"]
[Wed Apr 01 12:33:57.217466 2026] [:error] [pid 23819:tid 23839] [client 20.116.48.67:44979] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acygNddfUS_37wFAM75GcQAAANE"]
[Wed Apr 01 12:33:58.676511 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:44935] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "acygNkHxDDU2ETcG9DTS1AAAAAs"]
[Wed Apr 01 12:34:01.457171 2026] [:error] [pid 23714:tid 23744] [client 20.116.48.67:45017] [client 20.116.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.48.67, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acygOUHxDDU2ETcG9DTS4gAAAAo"]
[Wed Apr 01 12:34:01.676647 2026] [:error] [pid 23716:tid 23806] [client 20.116.48.67:45041] [client 20.116.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.48.67, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acygOXVtFUg_mx-RYb79XwAAAJI"]
[Wed Apr 01 12:34:02.350350 2026] [:error] [pid 23714:tid 23757] [client 20.116.48.67:45017] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "acygOkHxDDU2ETcG9DTS6QAAABc"]
[Wed Apr 01 12:34:04.714868 2026] [:error] [pid 23714:tid 23754] [client 20.116.48.67:44984] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acygPEHxDDU2ETcG9DTS-AAAABQ"]
[Wed Apr 01 12:34:06.175906 2026] [:error] [pid 23716:tid 23804] [client 20.116.48.67:44964] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "acygPnVtFUg_mx-RYb79YwAAAJA"]
[Wed Apr 01 12:34:08.034395 2026] [:error] [pid 23716:tid 23788] [client 20.116.48.67:44975] [client 20.116.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.48.67, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acygQHVtFUg_mx-RYb79aQAAAIA"]
[Wed Apr 01 12:34:08.251305 2026] [:error] [pid 23716:tid 23808] [client 20.116.48.67:45041] [client 20.116.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.48.67, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acygQHVtFUg_mx-RYb79awAAAJQ"]
[Wed Apr 01 12:34:08.915683 2026] [:error] [pid 23716:tid 23805] [client 20.116.48.67:44975] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acygQHVtFUg_mx-RYb79bwAAAJE"]
[Wed Apr 01 12:34:10.411782 2026] [:error] [pid 23716:tid 23799] [client 20.116.48.67:44828] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acygQnVtFUg_mx-RYb79cwAAAIs"]
[Wed Apr 01 12:34:11.843908 2026] [:error] [pid 23714:tid 23738] [client 20.116.48.67:44947] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acygQ0HxDDU2ETcG9DTTMwAAAAQ"]
[Wed Apr 01 12:34:13.343626 2026] [:error] [pid 23714:tid 23741] [client 20.116.48.67:44877] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acygRUHxDDU2ETcG9DTTSgAAAAc"]
[Wed Apr 01 12:34:14.787698 2026] [:error] [pid 23716:tid 23802] [client 20.116.48.67:44906] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acygRnVtFUg_mx-RYb79fQAAAI4"]
[Wed Apr 01 12:34:16.405550 2026] [:error] [pid 23715:tid 23767] [client 20.116.48.67:45035] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acygSK-REzOruNbiT9zEuwAAAEY"]
[Wed Apr 01 12:34:17.876388 2026] [:error] [pid 24346:tid 24355] [client 20.116.48.67:44870] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acygSbc1l8kg9MhGHILcmAAAAUM"]
[Wed Apr 01 12:34:19.424683 2026] [:error] [pid 23819:tid 23842] [client 20.116.48.67:44967] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "acygS9dfUS_37wFAM75GhwAAANQ"]
[Wed Apr 01 12:34:20.999374 2026] [:error] [pid 23716:tid 23790] [client 20.116.48.67:44901] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "acygTHVtFUg_mx-RYb79hAAAAII"]
[Wed Apr 01 12:34:22.431601 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:44988] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "acygTkHxDDU2ETcG9DTTdQAAAAs"]
[Wed Apr 01 12:34:24.133097 2026] [:error] [pid 23714:tid 23746] [client 20.116.48.67:44865] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "acygUEHxDDU2ETcG9DTTggAAAAw"]
[Wed Apr 01 12:34:25.861456 2026] [:error] [pid 23716:tid 23791] [client 20.116.48.67:44874] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acygUXVtFUg_mx-RYb79kgAAAIM"]
[Wed Apr 01 12:34:27.464666 2026] [:error] [pid 23715:tid 23783] [client 20.116.48.67:44736] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acygU6-REzOruNbiT9zEwgAAAFY"]
[Wed Apr 01 12:34:29.399167 2026] [:error] [pid 24348:tid 24391] [client 20.116.48.67:44985] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acygVW0Vs69Y5nF1HA9gtAAAAYw"]
[Wed Apr 01 12:34:31.056120 2026] [:error] [pid 24346:tid 24374] [client 20.116.48.67:44805] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acygV7c1l8kg9MhGHILcpAAAAVY"]
[Wed Apr 01 12:34:32.702600 2026] [:error] [pid 23715:tid 23782] [client 20.116.48.67:44949] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acygWK-REzOruNbiT9zE0wAAAFU"]
[Wed Apr 01 12:34:34.506560 2026] [:error] [pid 23714:tid 23747] [client 20.116.48.67:44919] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acygWkHxDDU2ETcG9DTTjAAAAA0"]
[Wed Apr 01 12:34:36.130266 2026] [:error] [pid 23714:tid 23737] [client 20.116.48.67:44808] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acygXEHxDDU2ETcG9DTTlQAAAAM"]
[Wed Apr 01 12:34:37.728804 2026] [:error] [pid 24348:tid 24380] [client 20.116.48.67:45001] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acygXW0Vs69Y5nF1HA9gxQAAAYE"]
[Wed Apr 01 12:34:39.227011 2026] [:error] [pid 23819:tid 23827] [client 20.116.48.67:44992] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acygX9dfUS_37wFAM75GmAAAAMU"]
[Wed Apr 01 12:34:41.711456 2026] [:error] [pid 23715:tid 23784] [client 20.116.48.67:44906] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acygYa-REzOruNbiT9zE3AAAAFc"]
[Wed Apr 01 12:34:43.663709 2026] [:error] [pid 23819:tid 23838] [client 20.116.48.67:44991] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acygY9dfUS_37wFAM75GnQAAANA"]
[Wed Apr 01 12:34:45.722818 2026] [:error] [pid 24314:tid 24319] [client 20.116.48.67:44903] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acygZZRF3FCzjmMUX5YrbAAAAQE"]
[Wed Apr 01 12:34:47.422986 2026] [:error] [pid 23716:tid 23803] [client 20.116.48.67:44916] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acygZ3VtFUg_mx-RYb79sAAAAI8"]
[Wed Apr 01 12:34:49.207322 2026] [:error] [pid 23716:tid 23808] [client 20.116.48.67:44807] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acygaXVtFUg_mx-RYb79swAAAJQ"]
[Wed Apr 01 12:34:51.024007 2026] [:error] [pid 23716:tid 23797] [client 20.116.48.67:44907] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acyga3VtFUg_mx-RYb79tAAAAIk"]
[Wed Apr 01 12:34:54.551702 2026] [:error] [pid 23715:tid 23769] [client 20.116.48.67:45047] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acygbq-REzOruNbiT9zE3wAAAEg"]
[Wed Apr 01 12:34:56.605305 2026] [:error] [pid 23819:tid 23829] [client 20.116.48.67:44915] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/install.php"] [unique_id "acygcNdfUS_37wFAM75GqgAAAMc"]
[Wed Apr 01 12:34:59.157030 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:44803] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/install.php"] [unique_id "acygc0HxDDU2ETcG9DTT4AAAAAs"]
[Wed Apr 01 12:35:03.804229 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:44825] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/install.php"] [unique_id "acygd3VtFUg_mx-RYb79zgAAAJM"]
[Wed Apr 01 12:35:05.972201 2026] [:error] [pid 24346:tid 24376] [client 20.116.48.67:44875] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/install.php"] [unique_id "acygebc1l8kg9MhGHILcswAAAVg"]
[Wed Apr 01 12:35:07.810443 2026] [:error] [pid 24314:tid 24318] [client 20.116.48.67:44813] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "acyge5RF3FCzjmMUX5YrcQAAAQA"]
[Wed Apr 01 12:35:13.698641 2026] [:error] [pid 23819:tid 23833] [client 20.116.48.67:44927] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acyggddfUS_37wFAM75GyQAAAMs"]
[Wed Apr 01 12:35:15.709830 2026] [:error] [pid 23819:tid 23846] [client 20.116.48.67:44934] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "acygg9dfUS_37wFAM75GzQAAANg"]
[Wed Apr 01 12:35:17.946680 2026] [:error] [pid 23714:tid 23735] [client 20.116.48.67:44974] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acyghUHxDDU2ETcG9DTUQwAAAAE"]
[Wed Apr 01 12:35:21.113204 2026] [:error] [pid 23716:tid 23807] [client 20.116.48.67:44857] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acygiXVtFUg_mx-RYb794wAAAJM"]
[Wed Apr 01 12:35:26.337197 2026] [:error] [pid 23714:tid 23735] [client 20.116.48.67:44876] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "acygjkHxDDU2ETcG9DTUVAAAAAE"]
[Wed Apr 01 12:35:28.411578 2026] [:error] [pid 23715:tid 23771] [client 20.116.48.67:45032] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "acygkK-REzOruNbiT9zE9QAAAEo"]
[Wed Apr 01 12:35:30.495771 2026] [:error] [pid 23716:tid 23788] [client 20.116.48.67:44997] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "acygknVtFUg_mx-RYb7-AAAAAIA"]
[Wed Apr 01 12:35:32.424921 2026] [:error] [pid 23716:tid 23791] [client 20.116.48.67:44945] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "acyglHVtFUg_mx-RYb7-BAAAAIM"]
[Wed Apr 01 12:35:34.253355 2026] [:error] [pid 24346:tid 24368] [client 20.116.48.67:44845] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "acyglrc1l8kg9MhGHILc0gAAAVA"]
[Wed Apr 01 12:35:36.109170 2026] [:error] [pid 24346:tid 24353] [client 20.116.48.67:45053] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "acygmLc1l8kg9MhGHILc1AAAAUE"]
[Wed Apr 01 12:35:39.357841 2026] [:error] [pid 23819:tid 23825] [client 20.116.48.67:44942] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "acygm9dfUS_37wFAM75HAAAAAMM"]
[Wed Apr 01 12:35:41.421449 2026] [:error] [pid 24314:tid 24329] [client 20.116.48.67:45006] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "acygnZRF3FCzjmMUX5YrhgAAAQs"]
[Wed Apr 01 12:35:43.889046 2026] [:error] [pid 24348:tid 24385] [client 20.116.48.67:45048] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "acygn20Vs69Y5nF1HA9hMQAAAYY"]
[Wed Apr 01 12:35:45.630147 2026] [:error] [pid 23716:tid 23789] [client 20.116.48.67:45007] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sty.php"] [unique_id "acygoXVtFUg_mx-RYb7-FQAAAIE"]
[Wed Apr 01 12:35:47.541273 2026] [:error] [pid 23714:tid 23749] [client 20.116.48.67:44886] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxx.php"] [unique_id "acygo0HxDDU2ETcG9DTUjQAAAA8"]
[Wed Apr 01 12:35:49.340366 2026] [:error] [pid 23716:tid 23788] [client 20.116.48.67:45026] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxx.php"] [unique_id "acygpXVtFUg_mx-RYb7-FwAAAIA"]
[Wed Apr 01 12:35:50.880808 2026] [:error] [pid 23714:tid 23745] [client 20.116.48.67:45049] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxx.php"] [unique_id "acygpkHxDDU2ETcG9DTUlgAAAAs"]
[Wed Apr 01 12:35:52.350514 2026] [:error] [pid 23714:tid 23734] [client 20.116.48.67:45014] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxxx.php"] [unique_id "acygqEHxDDU2ETcG9DTUnwAAAAA"]
[Wed Apr 01 12:35:54.060517 2026] [:error] [pid 24348:tid 24384] [client 20.116.48.67:45034] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h.php"] [unique_id "acygqm0Vs69Y5nF1HA9hPgAAAYU"]
[Wed Apr 01 12:35:55.590192 2026] [:error] [pid 23819:tid 23822] [client 20.116.48.67:44969] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h.php"] [unique_id "acygq9dfUS_37wFAM75HGgAAAMA"]
[Wed Apr 01 12:35:57.396374 2026] [:error] [pid 23714:tid 23741] [client 20.116.48.67:44883] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h.php"] [unique_id "acygrUHxDDU2ETcG9DTUrQAAAAc"]
[Wed Apr 01 12:35:59.610956 2026] [:error] [pid 23716:tid 23797] [client 20.116.48.67:44943] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h.php"] [unique_id "acygr3VtFUg_mx-RYb7-HwAAAIk"]
[Wed Apr 01 12:36:02.481186 2026] [:error] [pid 24348:tid 24379] [client 20.116.48.67:44960] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "acygsm0Vs69Y5nF1HA9hTwAAAYA"]
[Wed Apr 01 12:36:04.928441 2026] [:error] [pid 24314:tid 24339] [client 20.116.48.67:45033] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "acygtJRF3FCzjmMUX5YrlAAAARU"]
[Wed Apr 01 12:36:06.835314 2026] [:error] [pid 24348:tid 24395] [client 20.116.48.67:44909] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "acygtm0Vs69Y5nF1HA9hVwAAAZA"]
[Wed Apr 01 12:36:08.741467 2026] [:error] [pid 23714:tid 23747] [client 20.116.48.67:45028] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "acyguEHxDDU2ETcG9DTUtAAAAA0"]
[Wed Apr 01 12:36:10.675014 2026] [:error] [pid 23714:tid 23748] [client 20.116.48.67:44891] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "acygukHxDDU2ETcG9DTUvQAAAA4"]
[Wed Apr 01 12:36:12.355055 2026] [:error] [pid 24314:tid 24325] [client 20.116.48.67:45031] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "acygvJRF3FCzjmMUX5YrngAAAQc"]
[Wed Apr 01 12:36:14.421178 2026] [:error] [pid 24348:tid 24393] [client 20.116.48.67:44950] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "acygvm0Vs69Y5nF1HA9hZQAAAY4"]
[Wed Apr 01 12:36:16.140441 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:45022] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "acygwEHxDDU2ETcG9DTU1AAAABM"]
[Wed Apr 01 12:36:17.873830 2026] [:error] [pid 23819:tid 23828] [client 20.116.48.67:44923] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "acygwddfUS_37wFAM75HOgAAAMY"]
[Wed Apr 01 12:36:20.497029 2026] [:error] [pid 24314:tid 24331] [client 20.116.48.67:44851] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "acygxJRF3FCzjmMUX5YrowAAAQ0"]
[Wed Apr 01 12:36:22.563535 2026] [:error] [pid 23716:tid 23803] [client 20.116.48.67:44940] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "acygxnVtFUg_mx-RYb7-NAAAAI8"]
[Wed Apr 01 12:36:24.891685 2026] [:error] [pid 23714:tid 23753] [client 20.116.48.67:44844] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "acygyEHxDDU2ETcG9DTU-QAAABM"]
[Wed Apr 01 12:36:27.841048 2026] [:error] [pid 23714:tid 23734] [client 20.116.48.67:45020] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "acygy0HxDDU2ETcG9DTVBwAAAAA"]
[Wed Apr 01 12:36:29.419823 2026] [:error] [pid 23714:tid 23743] [client 20.116.48.67:45029] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "acygzUHxDDU2ETcG9DTVEgAAAAk"]
[Wed Apr 01 12:36:40.002342 2026] [:error] [pid 24348:tid 24403] [client 20.116.48.67:44972] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acyg2G0Vs69Y5nF1HA9hfAAAAZg"]
[Wed Apr 01 12:36:41.932887 2026] [:error] [pid 23714:tid 23738] [client 20.116.48.67:45045] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acyg2UHxDDU2ETcG9DTVTQAAAAQ"]
[Wed Apr 01 12:36:45.211381 2026] [:error] [pid 24314:tid 24330] [client 20.116.48.67:44941] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acyg3ZRF3FCzjmMUX5YrsQAAAQw"]
[Wed Apr 01 12:36:49.708335 2026] [:error] [pid 23819:tid 23839] [client 20.116.48.67:44824] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "acyg4ddfUS_37wFAM75HVQAAANE"]
[Wed Apr 01 12:36:53.039925 2026] [:error] [pid 24346:tid 24375] [client 20.116.48.67:44998] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acyg5bc1l8kg9MhGHILdFgAAAVc"]
[Wed Apr 01 12:36:55.646876 2026] [:error] [pid 23819:tid 23840] [client 20.116.48.67:45018] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acyg59dfUS_37wFAM75HZAAAANI"]
[Wed Apr 01 12:36:57.547942 2026] [:error] [pid 23715:tid 23761] [client 20.116.48.67:44831] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acyg6a-REzOruNbiT9zFQgAAAEA"]
[Wed Apr 01 12:36:59.628263 2026] [:error] [pid 23715:tid 23764] [client 20.116.48.67:44913] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/agg.php"] [unique_id "acyg66-REzOruNbiT9zFRAAAAEM"]
[Wed Apr 01 12:37:01.187089 2026] [:error] [pid 23715:tid 23768] [client 20.116.48.67:45039] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "acyg7a-REzOruNbiT9zFSQAAAEc"]
[Wed Apr 01 12:37:03.130608 2026] [:error] [pid 24348:tid 24388] [client 20.116.48.67:44868] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "acyg720Vs69Y5nF1HA9hpgAAAYk"]
[Wed Apr 01 12:37:06.041181 2026] [:error] [pid 23716:tid 23811] [client 20.116.48.67:44963] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "acyg8nVtFUg_mx-RYb7-ZAAAAJc"]
[Wed Apr 01 12:37:07.606673 2026] [:error] [pid 24348:tid 24402] [client 20.116.48.67:44833] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "acyg820Vs69Y5nF1HA9hqgAAAZc"]
[Wed Apr 01 12:37:09.379903 2026] [:error] [pid 23716:tid 23800] [client 20.116.48.67:45038] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "acyg9XVtFUg_mx-RYb7-cAAAAIw"]
[Wed Apr 01 12:37:11.209434 2026] [:error] [pid 24348:tid 24400] [client 20.116.48.67:45054] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "acyg920Vs69Y5nF1HA9huQAAAZU"]
[Wed Apr 01 12:37:12.910106 2026] [:error] [pid 23714:tid 23739] [client 20.116.48.67:44939] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "acyg-EHxDDU2ETcG9DTVmwAAAAU"]
[Wed Apr 01 12:37:15.044354 2026] [:error] [pid 24348:tid 24399] [client 20.116.48.67:44956] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsvvs.php"] [unique_id "acyg-20Vs69Y5nF1HA9hxwAAAZQ"]
[Wed Apr 01 12:37:16.643906 2026] [:error] [pid 23714:tid 23734] [client 20.116.48.67:45037] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "acyg_EHxDDU2ETcG9DTVqgAAAAA"]
[Wed Apr 01 12:37:18.444976 2026] [:error] [pid 24346:tid 24364] [client 20.116.48.67:45019] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "acyg_rc1l8kg9MhGHILdHwAAAUw"]
[Wed Apr 01 12:37:20.149752 2026] [:error] [pid 23819:tid 23830] [client 20.116.48.67:45024] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "acyhANdfUS_37wFAM75HeQAAAMg"]
[Wed Apr 01 12:37:21.649139 2026] [:error] [pid 23716:tid 23795] [client 20.116.48.67:44802] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "acyhAXVtFUg_mx-RYb7-fAAAAIc"]
[Wed Apr 01 12:37:23.163119 2026] [:error] [pid 23714:tid 23747] [client 20.116.48.67:44978] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acyhA0HxDDU2ETcG9DTVxwAAAA0"]
[Wed Apr 01 12:37:25.149171 2026] [:error] [pid 24346:tid 24363] [client 20.116.48.67:45025] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acyhBbc1l8kg9MhGHILdJAAAAUs"]
[Wed Apr 01 12:37:26.804392 2026] [:error] [pid 23819:tid 23833] [client 20.116.48.67:45002] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acyhBtdfUS_37wFAM75HhwAAAMs"]
[Wed Apr 01 12:37:28.501395 2026] [:error] [pid 23716:tid 23789] [client 20.116.48.67:44926] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "acyhCHVtFUg_mx-RYb7-jgAAAIE"]
[Wed Apr 01 12:37:31.108182 2026] [:error] [pid 23714:tid 23757] [client 20.116.48.67:44946] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acyhC0HxDDU2ETcG9DTV4AAAABc"]
[Wed Apr 01 12:37:34.121455 2026] [:error] [pid 23819:tid 23841] [client 20.116.48.67:44928] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acyhDtdfUS_37wFAM75HqgAAANM"]
[Wed Apr 01 12:37:36.239096 2026] [:error] [pid 24346:tid 24363] [client 20.116.48.67:44951] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acyhELc1l8kg9MhGHILdLQAAAUs"]
[Wed Apr 01 12:37:37.743252 2026] [:error] [pid 23714:tid 23744] [client 20.116.48.67:45009] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "acyhEUHxDDU2ETcG9DTWDgAAAAo"]
[Wed Apr 01 12:37:42.680924 2026] [:error] [pid 24346:tid 24358] [client 20.116.48.67:44986] [client 20.116.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acyhFrc1l8kg9MhGHILdOAAAAUY"]
[Wed Apr 01 14:11:40.093655 2026] [:error] [pid 17856:tid 17858] [client 43.133.69.37:42634] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "acy3HD7Idlm5j9frhqQOKwAAAEA"]
[Wed Apr 01 15:30:18.798902 2026] [:error] [pid 8909:tid 8946] [client 84.247.168.251:63223] [client 84.247.168.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.168.251, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aczJijvP_a0662gDl6DITgAAAMU"]
[Wed Apr 01 15:48:57.383559 2026] [:error] [pid 8908:tid 8925] [client 173.239.218.38:55335] [client 173.239.218.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aczN6fkmxtJXGnLdvgDmlgAAAIw"]
[Wed Apr 01 16:39:24.728701 2026] [:error] [pid 8909:tid 8946] [client 49.51.73.183:35542] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aczZvDvP_a0662gDl6DlqAAAAMU"]
[Wed Apr 01 19:18:22.796189 2026] [:error] [pid 8909:tid 8963] [client 122.3.150.61:51818] [client 122.3.150.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.3.150.61, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "acz-_jvP_a0662gDl6Bn5wAAANY"]
[Wed Apr 01 19:54:42.391949 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:40552] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "ac0HgjvP_a0662gDl6CI7wAAANc"]
[Wed Apr 01 19:54:42.886801 2026] [:error] [pid 17856:tid 17859] [client 158.158.32.26:40574] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "ac0Hgj7Idlm5j9frhqQCfAAAAEE"]
[Wed Apr 01 19:54:43.370489 2026] [:error] [pid 8909:tid 8963] [client 158.158.32.26:13197] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "ac0HgzvP_a0662gDl6CI8wAAANY"]
[Wed Apr 01 19:54:43.856938 2026] [:error] [pid 17856:tid 17880] [client 158.158.32.26:10712] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-true.php"] [unique_id "ac0Hgz7Idlm5j9frhqQCgwAAAFY"]
[Wed Apr 01 19:54:44.368194 2026] [:error] [pid 8908:tid 8927] [client 158.158.32.26:13212] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "ac0HhPkmxtJXGnLdvgBmswAAAI4"]
[Wed Apr 01 19:54:44.848663 2026] [:error] [pid 8995:tid 8998] [client 158.158.32.26:40528] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "ac0HhOonaBjs3qxcReex1wAAAAA"]
[Wed Apr 01 19:54:45.329653 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:13191] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "ac0HhTvP_a0662gDl6CI-gAAAMU"]
[Wed Apr 01 19:54:45.821646 2026] [:error] [pid 8995:tid 9000] [client 158.158.32.26:13195] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws42.php"] [unique_id "ac0HheonaBjs3qxcReex2AAAAAI"]
[Wed Apr 01 19:54:46.305836 2026] [:error] [pid 8908:tid 8921] [client 158.158.32.26:40522] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "ac0HhvkmxtJXGnLdvgBmugAAAIg"]
[Wed Apr 01 19:54:46.786161 2026] [:error] [pid 17856:tid 17878] [client 158.158.32.26:40529] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "ac0Hhj7Idlm5j9frhqQChAAAAFQ"]
[Wed Apr 01 19:54:47.268124 2026] [:error] [pid 17856:tid 17866] [client 158.158.32.26:40523] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "ac0Hhz7Idlm5j9frhqQChgAAAEg"]
[Wed Apr 01 19:54:47.781790 2026] [:error] [pid 8909:tid 8941] [client 158.158.32.26:40560] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "ac0HhzvP_a0662gDl6CJDAAAAMA"]
[Wed Apr 01 19:54:48.266143 2026] [:error] [pid 8908:tid 8922] [client 158.158.32.26:13245] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "ac0HiPkmxtJXGnLdvgBmvgAAAIk"]
[Wed Apr 01 19:54:48.766565 2026] [:error] [pid 8908:tid 8927] [client 158.158.32.26:40534] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "ac0HiPkmxtJXGnLdvgBmwQAAAI4"]
[Wed Apr 01 19:54:49.250311 2026] [:error] [pid 8995:tid 9022] [client 158.158.32.26:13206] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "ac0HieonaBjs3qxcReex3QAAABg"]
[Wed Apr 01 19:54:49.757935 2026] [:error] [pid 8908:tid 8917] [client 158.158.32.26:40526] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "ac0HifkmxtJXGnLdvgBmxAAAAIQ"]
[Wed Apr 01 19:54:50.238052 2026] [:error] [pid 8909:tid 8954] [client 158.158.32.26:40564] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "ac0HijvP_a0662gDl6CJEQAAAM0"]
[Wed Apr 01 19:54:50.729729 2026] [:error] [pid 8909:tid 8961] [client 158.158.32.26:40524] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "ac0HijvP_a0662gDl6CJEwAAANQ"]
[Wed Apr 01 19:54:51.209814 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:40537] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "ac0Hi_kmxtJXGnLdvgBmywAAAJI"]
[Wed Apr 01 19:54:51.695531 2026] [:error] [pid 62559:tid 62575] [client 158.158.32.26:13192] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "ac0Hiy7NKI8IaNKZFIeD2wAAAU4"]
[Wed Apr 01 19:54:52.185230 2026] [:error] [pid 8995:tid 9021] [client 158.158.32.26:40546] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "ac0HjOonaBjs3qxcReex4wAAABc"]
[Wed Apr 01 19:54:52.668079 2026] [:error] [pid 62559:tid 62583] [client 158.158.32.26:40535] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "ac0HjC7NKI8IaNKZFIeD3wAAAVY"]
[Wed Apr 01 19:54:53.154038 2026] [:error] [pid 17856:tid 17867] [client 158.158.32.26:13209] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "ac0HjT7Idlm5j9frhqQCigAAAEk"]
[Wed Apr 01 19:54:53.642044 2026] [:error] [pid 62559:tid 62571] [client 158.158.32.26:40556] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/north1.php"] [unique_id "ac0HjS7NKI8IaNKZFIeD4QAAAUo"]
[Wed Apr 01 19:54:54.124250 2026] [:error] [pid 17856:tid 17868] [client 158.158.32.26:40550] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "ac0Hjj7Idlm5j9frhqQCjQAAAEo"]
[Wed Apr 01 19:54:54.603161 2026] [:error] [pid 8910:tid 8976] [client 158.158.32.26:40571] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "ac0HjqJZINUcF3tYgExO3wAAAQg"]
[Wed Apr 01 19:54:55.112267 2026] [:error] [pid 17856:tid 17872] [client 158.158.32.26:40561] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "ac0Hjz7Idlm5j9frhqQCjwAAAE4"]
[Wed Apr 01 19:54:55.594039 2026] [:error] [pid 17856:tid 17858] [client 158.158.32.26:10697] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eee.php"] [unique_id "ac0Hjz7Idlm5j9frhqQCkAAAAEA"]
[Wed Apr 01 19:54:56.074415 2026] [:error] [pid 8909:tid 8943] [client 158.158.32.26:40547] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "ac0HkDvP_a0662gDl6CJIgAAAMI"]
[Wed Apr 01 19:54:56.589317 2026] [:error] [pid 8908:tid 8916] [client 158.158.32.26:13238] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "ac0HkPkmxtJXGnLdvgBmzQAAAIM"]
[Wed Apr 01 19:54:57.080684 2026] [:error] [pid 8909:tid 8948] [client 158.158.32.26:13207] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "ac0HkTvP_a0662gDl6CJKAAAAMc"]
[Wed Apr 01 19:54:57.561690 2026] [:error] [pid 8909:tid 8963] [client 158.158.32.26:13194] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "ac0HkTvP_a0662gDl6CJLAAAANY"]
[Wed Apr 01 19:54:58.047716 2026] [:error] [pid 8909:tid 8942] [client 158.158.32.26:40572] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0HkjvP_a0662gDl6CJMAAAAME"]
[Wed Apr 01 19:54:58.575343 2026] [:error] [pid 8909:tid 8959] [client 158.158.32.26:13201] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0HkjvP_a0662gDl6CJNQAAANI"]
[Wed Apr 01 19:54:59.054152 2026] [:error] [pid 8995:tid 9015] [client 158.158.32.26:13231] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0Hk-onaBjs3qxcReex7AAAABE"]
[Wed Apr 01 19:54:59.534912 2026] [:error] [pid 8908:tid 8913] [client 158.158.32.26:40542] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "ac0Hk_kmxtJXGnLdvgBm0wAAAIA"]
[Wed Apr 01 19:55:00.019849 2026] [:error] [pid 8908:tid 8914] [client 158.158.32.26:13184] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "ac0HlPkmxtJXGnLdvgBm1gAAAIE"]
[Wed Apr 01 19:55:00.514809 2026] [:error] [pid 8909:tid 8941] [client 158.158.32.26:10705] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "ac0HlDvP_a0662gDl6CJPQAAAMA"]
[Wed Apr 01 19:55:01.013035 2026] [:error] [pid 62559:tid 62562] [client 158.158.32.26:13185] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "ac0HlS7NKI8IaNKZFIeD9wAAAUE"]
[Wed Apr 01 19:55:01.493788 2026] [:error] [pid 17856:tid 17867] [client 158.158.32.26:13223] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "ac0HlT7Idlm5j9frhqQClAAAAEk"]
[Wed Apr 01 19:55:01.974123 2026] [:error] [pid 8909:tid 8956] [client 158.158.32.26:40531] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0HlTvP_a0662gDl6CJQgAAAM8"]
[Wed Apr 01 19:55:02.454743 2026] [:error] [pid 8908:tid 8918] [client 158.158.32.26:40566] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0HlvkmxtJXGnLdvgBm2AAAAIU"]
[Wed Apr 01 19:55:02.933653 2026] [:error] [pid 8908:tid 8923] [client 158.158.32.26:40569] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0HlvkmxtJXGnLdvgBm2gAAAIo"]
[Wed Apr 01 19:55:03.417567 2026] [:error] [pid 62559:tid 62568] [client 158.158.32.26:40516] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "ac0Hly7NKI8IaNKZFIeD-wAAAUc"]
[Wed Apr 01 19:55:03.908470 2026] [:error] [pid 62559:tid 62571] [client 158.158.32.26:13203] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "ac0Hly7NKI8IaNKZFIeD_wAAAUo"]
[Wed Apr 01 19:55:04.386771 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:13239] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "ac0HmDvP_a0662gDl6CJaAAAANc"]
[Wed Apr 01 19:55:04.882610 2026] [:error] [pid 8909:tid 8965] [client 158.158.32.26:40520] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "ac0HmDvP_a0662gDl6CJqgAAANg"]
[Wed Apr 01 19:55:05.364062 2026] [:error] [pid 8995:tid 9009] [client 158.158.32.26:13199] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "ac0HmeonaBjs3qxcReex9wAAAAs"]
[Wed Apr 01 19:55:05.849587 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:13204] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "ac0HmTvP_a0662gDl6CJtwAAAMU"]
[Wed Apr 01 19:55:06.327381 2026] [:error] [pid 8908:tid 8918] [client 158.158.32.26:40573] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "ac0HmvkmxtJXGnLdvgBnGgAAAIU"]
[Wed Apr 01 19:55:06.807382 2026] [:error] [pid 8909:tid 8943] [client 158.158.32.26:13247] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "ac0HmjvP_a0662gDl6CJvwAAAMI"]
[Wed Apr 01 19:55:07.306531 2026] [:error] [pid 17856:tid 17879] [client 158.158.32.26:40544] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "ac0Hmz7Idlm5j9frhqQCmgAAAFU"]
[Wed Apr 01 19:55:07.792758 2026] [:error] [pid 8910:tid 8989] [client 158.158.32.26:10730] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "ac0Hm6JZINUcF3tYgExO7wAAARU"]
[Wed Apr 01 19:55:08.275787 2026] [:error] [pid 17856:tid 17863] [client 158.158.32.26:40527] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "ac0HnD7Idlm5j9frhqQCnwAAAEU"]
[Wed Apr 01 19:55:08.754715 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:10679] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "ac0HnDvP_a0662gDl6CJzwAAANc"]
[Wed Apr 01 19:55:09.237433 2026] [:error] [pid 8909:tid 8951] [client 158.158.32.26:10720] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wander.php"] [unique_id "ac0HnTvP_a0662gDl6CJ0wAAAMo"]
[Wed Apr 01 19:55:09.715292 2026] [:error] [pid 8909:tid 8953] [client 158.158.32.26:40563] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0HnTvP_a0662gDl6CJ2AAAAMw"]
[Wed Apr 01 19:55:10.193577 2026] [:error] [pid 17856:tid 17871] [client 158.158.32.26:40513] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0Hnj7Idlm5j9frhqQCpwAAAE0"]
[Wed Apr 01 19:55:10.677955 2026] [:error] [pid 17856:tid 17858] [client 158.158.32.26:40562] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0Hnj7Idlm5j9frhqQCqwAAAEA"]
[Wed Apr 01 19:55:11.158792 2026] [:error] [pid 8909:tid 8957] [client 158.158.32.26:10731] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h02ugyh.php"] [unique_id "ac0HnzvP_a0662gDl6CJ3QAAANA"]
[Wed Apr 01 19:55:11.656541 2026] [:error] [pid 17856:tid 17870] [client 158.158.32.26:13228] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "ac0Hnz7Idlm5j9frhqQCsgAAAEw"]
[Wed Apr 01 19:55:12.137973 2026] [:error] [pid 8909:tid 8956] [client 158.158.32.26:13213] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "ac0HoDvP_a0662gDl6CJ4wAAAM8"]
[Wed Apr 01 19:55:12.618700 2026] [:error] [pid 62559:tid 62575] [client 158.158.32.26:40554] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "ac0HoC7NKI8IaNKZFIeEDgAAAU4"]
[Wed Apr 01 19:55:13.098469 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:10707] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ad.php"] [unique_id "ac0HoTvP_a0662gDl6CJ5AAAANc"]
[Wed Apr 01 19:55:13.588059 2026] [:error] [pid 8908:tid 8935] [client 158.158.32.26:40518] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "ac0HofkmxtJXGnLdvgBnJwAAAJY"]
[Wed Apr 01 19:55:14.069415 2026] [:error] [pid 8908:tid 8923] [client 158.158.32.26:13190] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "ac0HovkmxtJXGnLdvgBnKwAAAIo"]
[Wed Apr 01 19:55:14.557592 2026] [:error] [pid 8908:tid 8921] [client 158.158.32.26:13200] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "ac0HovkmxtJXGnLdvgBnLAAAAIg"]
[Wed Apr 01 19:55:15.041526 2026] [:error] [pid 8995:tid 9013] [client 158.158.32.26:13189] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "ac0Ho-onaBjs3qxcReeyAQAAAA8"]
[Wed Apr 01 19:55:15.537644 2026] [:error] [pid 8910:tid 8983] [client 158.158.32.26:40533] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "ac0Ho6JZINUcF3tYgExO9wAAAQ8"]
[Wed Apr 01 19:55:16.031461 2026] [:error] [pid 8908:tid 8925] [client 158.158.32.26:40530] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "ac0HpPkmxtJXGnLdvgBnMAAAAIw"]
[Wed Apr 01 19:55:16.528518 2026] [:error] [pid 8908:tid 8924] [client 158.158.32.26:40539] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "ac0HpPkmxtJXGnLdvgBnMQAAAIs"]
[Wed Apr 01 19:55:17.006723 2026] [:error] [pid 8909:tid 8964] [client 158.158.32.26:13208] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "ac0HpTvP_a0662gDl6CJ8AAAANc"]
[Wed Apr 01 19:55:17.484108 2026] [:error] [pid 8995:tid 9014] [client 158.158.32.26:13187] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0HpeonaBjs3qxcReeyCgAAABA"]
[Wed Apr 01 19:55:17.967470 2026] [:error] [pid 8910:tid 8978] [client 158.158.32.26:10747] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0HpaJZINUcF3tYgExO_wAAAQo"]
[Wed Apr 01 19:55:18.451614 2026] [:error] [pid 17856:tid 17875] [client 158.158.32.26:10703] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0Hpj7Idlm5j9frhqQCuwAAAFE"]
[Wed Apr 01 19:55:19.009050 2026] [:error] [pid 8908:tid 8937] [client 158.158.32.26:40545] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "ac0Hp_kmxtJXGnLdvgBnMgAAAJg"]
[Wed Apr 01 19:55:19.491505 2026] [:error] [pid 8908:tid 8935] [client 158.158.32.26:13215] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "ac0Hp_kmxtJXGnLdvgBnNAAAAJY"]
[Wed Apr 01 19:55:19.978060 2026] [:error] [pid 62559:tid 62573] [client 158.158.32.26:40575] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "ac0Hpy7NKI8IaNKZFIeEFwAAAUw"]
[Wed Apr 01 19:55:20.459249 2026] [:error] [pid 62559:tid 62564] [client 158.158.32.26:40512] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "ac0HqC7NKI8IaNKZFIeEGQAAAUM"]
[Wed Apr 01 19:55:20.943550 2026] [:error] [pid 62559:tid 62561] [client 158.158.32.26:13186] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sql.php"] [unique_id "ac0HqC7NKI8IaNKZFIeEHAAAAUA"]
[Wed Apr 01 19:55:21.423048 2026] [:error] [pid 8908:tid 8925] [client 158.158.32.26:40551] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "ac0HqfkmxtJXGnLdvgBnPAAAAIw"]
[Wed Apr 01 19:55:21.918721 2026] [:error] [pid 8995:tid 9004] [client 158.158.32.26:40541] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "ac0HqeonaBjs3qxcReeyDgAAAAY"]
[Wed Apr 01 19:55:22.398968 2026] [:error] [pid 8909:tid 8943] [client 158.158.32.26:13220] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "ac0HqjvP_a0662gDl6CJ_AAAAMI"]
[Wed Apr 01 19:55:22.878353 2026] [:error] [pid 17856:tid 17870] [client 158.158.32.26:40555] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "ac0Hqj7Idlm5j9frhqQCwwAAAEw"]
[Wed Apr 01 19:55:23.383500 2026] [:error] [pid 8908:tid 8913] [client 158.158.32.26:40565] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "ac0Hq_kmxtJXGnLdvgBnRAAAAIA"]
[Wed Apr 01 19:55:23.869907 2026] [:error] [pid 8908:tid 8927] [client 158.158.32.26:13216] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "ac0Hq_kmxtJXGnLdvgBnRgAAAI4"]
[Wed Apr 01 19:55:24.364987 2026] [:error] [pid 8909:tid 8953] [client 158.158.32.26:40567] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "ac0HrDvP_a0662gDl6CJ_wAAAMw"]
[Wed Apr 01 19:55:24.853073 2026] [:error] [pid 8909:tid 8951] [client 158.158.32.26:10717] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "ac0HrDvP_a0662gDl6CKAQAAAMo"]
[Wed Apr 01 19:55:25.355116 2026] [:error] [pid 8909:tid 8946] [client 158.158.32.26:10741] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "ac0HrTvP_a0662gDl6CKBQAAAMU"]
[Wed Apr 01 19:55:25.835006 2026] [:error] [pid 17856:tid 17878] [client 158.158.32.26:13225] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "ac0HrT7Idlm5j9frhqQCzAAAAFQ"]
[Wed Apr 01 19:55:26.335076 2026] [:error] [pid 8995:tid 9021] [client 158.158.32.26:10701] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "ac0HruonaBjs3qxcReeyFAAAABc"]
[Wed Apr 01 19:55:26.836100 2026] [:error] [pid 8995:tid 9007] [client 158.158.32.26:13211] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "ac0HruonaBjs3qxcReeyGAAAAAk"]
[Wed Apr 01 19:55:27.317266 2026] [:error] [pid 17856:tid 17860] [client 158.158.32.26:10721] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "ac0Hrz7Idlm5j9frhqQCzwAAAEI"]
[Wed Apr 01 19:55:27.811284 2026] [:error] [pid 8908:tid 8937] [client 158.158.32.26:10690] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "ac0Hr_kmxtJXGnLdvgBnTQAAAJg"]
[Wed Apr 01 19:55:28.289510 2026] [:error] [pid 17856:tid 17868] [client 158.158.32.26:13214] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "ac0HsD7Idlm5j9frhqQC1QAAAEo"]
[Wed Apr 01 19:55:28.771938 2026] [:error] [pid 62559:tid 62582] [client 158.158.32.26:10713] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "ac0HsC7NKI8IaNKZFIeEIwAAAVU"]
[Wed Apr 01 19:55:29.255031 2026] [:error] [pid 8909:tid 8957] [client 158.158.32.26:13226] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uang.php"] [unique_id "ac0HsTvP_a0662gDl6CKEwAAANA"]
[Wed Apr 01 19:55:29.766702 2026] [:error] [pid 8909:tid 8944] [client 158.158.32.26:10718] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uang.php"] [unique_id "ac0HsTvP_a0662gDl6CKGgAAAMM"]
[Wed Apr 01 19:55:30.270177 2026] [:error] [pid 8908:tid 8927] [client 158.158.32.26:10739] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uang.php"] [unique_id "ac0HsvkmxtJXGnLdvgBnTwAAAI4"]
[Wed Apr 01 19:55:30.754148 2026] [:error] [pid 8909:tid 8962] [client 158.158.32.26:13205] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uang.php"] [unique_id "ac0HsjvP_a0662gDl6CKJwAAANU"]
[Wed Apr 01 19:55:31.250065 2026] [:error] [pid 8909:tid 8948] [client 158.158.32.26:10734] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "ac0HszvP_a0662gDl6CKLgAAAMc"]
[Wed Apr 01 19:55:31.749421 2026] [:error] [pid 8909:tid 8965] [client 158.158.32.26:13224] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "ac0HszvP_a0662gDl6CKNQAAANg"]
[Wed Apr 01 19:55:32.234232 2026] [:error] [pid 8995:tid 9009] [client 158.158.32.26:10691] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "ac0HtOonaBjs3qxcReeyHgAAAAs"]
[Wed Apr 01 19:55:32.718118 2026] [:error] [pid 8909:tid 8953] [client 158.158.32.26:40559] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/save.php"] [unique_id "ac0HtDvP_a0662gDl6CKPwAAAMw"]
[Wed Apr 01 19:55:33.221017 2026] [:error] [pid 17856:tid 17867] [client 158.158.32.26:13229] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "ac0HtT7Idlm5j9frhqQC1wAAAEk"]
[Wed Apr 01 19:55:33.712753 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:10645] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "ac0HtfkmxtJXGnLdvgBnVAAAAJI"]
[Wed Apr 01 19:55:34.201066 2026] [:error] [pid 8908:tid 8919] [client 158.158.32.26:13217] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "ac0HtvkmxtJXGnLdvgBnVwAAAIY"]
[Wed Apr 01 19:55:34.679961 2026] [:error] [pid 8908:tid 8926] [client 158.158.32.26:40540] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "ac0HtvkmxtJXGnLdvgBnXQAAAI0"]
[Wed Apr 01 19:55:35.180728 2026] [:error] [pid 8909:tid 8945] [client 158.158.32.26:10694] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "ac0HtzvP_a0662gDl6CKQQAAAMQ"]
[Wed Apr 01 19:55:35.686884 2026] [:error] [pid 17856:tid 17862] [client 158.158.32.26:40536] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "ac0Htz7Idlm5j9frhqQC3QAAAEQ"]
[Wed Apr 01 19:55:36.172876 2026] [:error] [pid 8908:tid 8913] [client 158.158.32.26:13193] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "ac0HuPkmxtJXGnLdvgBnaQAAAIA"]
[Wed Apr 01 19:55:36.660716 2026] [:error] [pid 17856:tid 17876] [client 158.158.32.26:13241] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "ac0HuD7Idlm5j9frhqQC4gAAAFI"]
[Wed Apr 01 19:55:37.143001 2026] [:error] [pid 8909:tid 8942] [client 158.158.32.26:10646] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "ac0HuTvP_a0662gDl6CKRwAAAME"]
[Wed Apr 01 19:55:37.625785 2026] [:error] [pid 8908:tid 8916] [client 158.158.32.26:40549] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "ac0HufkmxtJXGnLdvgBncAAAAIM"]
[Wed Apr 01 19:55:38.105115 2026] [:error] [pid 8910:tid 8990] [client 158.158.32.26:10634] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "ac0HuqJZINUcF3tYgExPEwAAARY"]
[Wed Apr 01 19:55:38.588885 2026] [:error] [pid 8909:tid 8945] [client 158.158.32.26:10706] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "ac0HujvP_a0662gDl6CKVQAAAMQ"]
[Wed Apr 01 19:55:39.069130 2026] [:error] [pid 8995:tid 9018] [client 158.158.32.26:13237] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "ac0Hu-onaBjs3qxcReeyKQAAABQ"]
[Wed Apr 01 19:55:39.551317 2026] [:error] [pid 8910:tid 8968] [client 158.158.32.26:10661] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "ac0Hu6JZINUcF3tYgExPFgAAAQA"]
[Wed Apr 01 19:55:40.043902 2026] [:error] [pid 8910:tid 8985] [client 158.158.32.26:10704] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "ac0HvKJZINUcF3tYgExPGQAAARE"]
[Wed Apr 01 19:55:40.523867 2026] [:error] [pid 17856:tid 17881] [client 158.158.32.26:13232] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "ac0HvD7Idlm5j9frhqQC6QAAAFc"]
[Wed Apr 01 19:55:41.007588 2026] [:error] [pid 8909:tid 8957] [client 158.158.32.26:10709] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ac0HvTvP_a0662gDl6CKWgAAANA"]
[Wed Apr 01 19:55:41.487527 2026] [:error] [pid 8909:tid 8948] [client 158.158.32.26:10728] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ac0HvTvP_a0662gDl6CKXgAAAMc"]
[Wed Apr 01 19:55:41.974335 2026] [:error] [pid 8909:tid 8963] [client 158.158.32.26:40514] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ac0HvTvP_a0662gDl6CKZQAAANY"]
[Wed Apr 01 19:55:48.776404 2026] [:error] [pid 17856:tid 17870] [client 158.158.32.26:10746] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "ac0HxD7Idlm5j9frhqQDGAAAAEw"]
[Wed Apr 01 19:55:49.311794 2026] [:error] [pid 8909:tid 8958] [client 158.158.32.26:10668] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "ac0HxTvP_a0662gDl6CKsAAAANE"]
[Wed Apr 01 19:55:49.857526 2026] [:error] [pid 8909:tid 8957] [client 158.158.32.26:13240] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "ac0HxTvP_a0662gDl6CKtAAAANA"]
[Wed Apr 01 19:55:50.363779 2026] [:error] [pid 8909:tid 8954] [client 158.158.32.26:10736] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "ac0HxjvP_a0662gDl6CKugAAAM0"]
[Wed Apr 01 19:55:50.894546 2026] [:error] [pid 8909:tid 8952] [client 158.158.32.26:13235] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ac0HxjvP_a0662gDl6CKwQAAAMs"]
[Wed Apr 01 19:55:51.388782 2026] [:error] [pid 8909:tid 8944] [client 158.158.32.26:13243] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ac0HxzvP_a0662gDl6CKxwAAAMM"]
[Wed Apr 01 19:55:51.901713 2026] [:error] [pid 17856:tid 17860] [client 158.158.32.26:10710] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ac0Hxz7Idlm5j9frhqQDIQAAAEI"]
[Wed Apr 01 19:55:52.381222 2026] [:error] [pid 17856:tid 17868] [client 158.158.32.26:10699] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ac0HyD7Idlm5j9frhqQDJAAAAEo"]
[Wed Apr 01 19:55:52.870180 2026] [:error] [pid 8908:tid 8916] [client 158.158.32.26:10650] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "ac0HyPkmxtJXGnLdvgBnjAAAAIM"]
[Wed Apr 01 19:55:53.357808 2026] [:error] [pid 8908:tid 8924] [client 158.158.32.26:13222] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "ac0HyfkmxtJXGnLdvgBnkAAAAIs"]
[Wed Apr 01 19:55:53.855759 2026] [:error] [pid 8908:tid 8918] [client 158.158.32.26:10689] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "ac0HyfkmxtJXGnLdvgBnkgAAAIU"]
[Wed Apr 01 19:55:54.350040 2026] [:error] [pid 8910:tid 8984] [client 158.158.32.26:10629] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ant.php"] [unique_id "ac0HyqJZINUcF3tYgExPKQAAARA"]
[Wed Apr 01 19:55:54.831039 2026] [:error] [pid 17856:tid 17861] [client 158.158.32.26:10643] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "ac0Hyj7Idlm5j9frhqQDKAAAAEM"]
[Wed Apr 01 19:55:55.314735 2026] [:error] [pid 17856:tid 17877] [client 158.158.32.26:13246] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "ac0Hyz7Idlm5j9frhqQDKgAAAFM"]
[Wed Apr 01 19:55:55.825171 2026] [:error] [pid 8910:tid 8977] [client 158.158.32.26:10658] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "ac0Hy6JZINUcF3tYgExPLgAAAQk"]
[Wed Apr 01 19:55:56.321346 2026] [:error] [pid 8995:tid 9004] [client 158.158.32.26:10726] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "ac0HzOonaBjs3qxcReeyRAAAAAY"]
[Wed Apr 01 19:55:56.806656 2026] [:error] [pid 8909:tid 8944] [client 158.158.32.26:10640] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "ac0HzDvP_a0662gDl6CK2gAAAMM"]
[Wed Apr 01 19:55:57.358511 2026] [:error] [pid 8910:tid 8990] [client 158.158.32.26:10693] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "ac0HzaJZINUcF3tYgExPMgAAARY"]
[Wed Apr 01 19:55:57.894471 2026] [:error] [pid 8909:tid 8956] [client 158.158.32.26:10732] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "ac0HzTvP_a0662gDl6CK2wAAAM8"]
[Wed Apr 01 19:55:58.445183 2026] [:error] [pid 62559:tid 62563] [client 158.158.32.26:10735] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "ac0Hzi7NKI8IaNKZFIeEVgAAAUI"]
[Wed Apr 01 19:55:58.987867 2026] [:error] [pid 8910:tid 8972] [client 158.158.32.26:40519] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "ac0HzqJZINUcF3tYgExPMwAAAQQ"]
[Wed Apr 01 19:55:59.562560 2026] [:error] [pid 8908:tid 8919] [client 158.158.32.26:13188] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "ac0Hz_kmxtJXGnLdvgBnrwAAAIY"]
[Wed Apr 01 19:56:00.060668 2026] [:error] [pid 62559:tid 62567] [client 158.158.32.26:13196] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "ac0H0C7NKI8IaNKZFIeEXwAAAUY"]
[Wed Apr 01 19:56:00.631967 2026] [:error] [pid 17856:tid 17876] [client 158.158.32.26:10708] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "ac0H0D7Idlm5j9frhqQDOgAAAFI"]
[Wed Apr 01 19:56:01.128379 2026] [:error] [pid 8908:tid 8919] [client 158.158.32.26:10675] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "ac0H0fkmxtJXGnLdvgBnugAAAIY"]
[Wed Apr 01 19:56:01.610829 2026] [:error] [pid 17856:tid 17860] [client 158.158.32.26:40553] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "ac0H0T7Idlm5j9frhqQDPQAAAEI"]
[Wed Apr 01 19:56:02.092799 2026] [:error] [pid 8909:tid 8959] [client 158.158.32.26:10631] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "ac0H0jvP_a0662gDl6CK5AAAANI"]
[Wed Apr 01 19:56:02.574791 2026] [:error] [pid 8909:tid 8947] [client 158.158.32.26:10719] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "ac0H0jvP_a0662gDl6CK5wAAAMY"]
[Wed Apr 01 19:56:03.081246 2026] [:error] [pid 8908:tid 8933] [client 158.158.32.26:10635] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "ac0H0_kmxtJXGnLdvgBnxQAAAJQ"]
[Wed Apr 01 19:56:03.621121 2026] [:error] [pid 8909:tid 8958] [client 158.158.32.26:40568] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "ac0H0zvP_a0662gDl6CK8gAAANE"]
[Wed Apr 01 19:56:04.099393 2026] [:error] [pid 8909:tid 8947] [client 158.158.32.26:10714] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "ac0H1DvP_a0662gDl6CK-gAAAMY"]
[Wed Apr 01 19:56:04.727519 2026] [:error] [pid 8908:tid 8935] [client 158.158.32.26:10666] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "ac0H1PkmxtJXGnLdvgBnxgAAAJY"]
[Wed Apr 01 19:56:05.213399 2026] [:error] [pid 8910:tid 8968] [client 158.158.32.26:10749] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "ac0H1aJZINUcF3tYgExPNAAAAQA"]
[Wed Apr 01 19:56:05.759931 2026] [:error] [pid 8908:tid 8924] [client 158.158.32.26:10673] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "ac0H1fkmxtJXGnLdvgBnywAAAIs"]
[Wed Apr 01 19:56:06.264568 2026] [:error] [pid 8910:tid 8980] [client 158.158.32.26:10651] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "ac0H1qJZINUcF3tYgExPNwAAAQw"]
[Wed Apr 01 19:56:06.834032 2026] [:error] [pid 8910:tid 8978] [client 158.158.32.26:10725] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws43.php"] [unique_id "ac0H1qJZINUcF3tYgExPOQAAAQo"]
[Wed Apr 01 19:56:07.315578 2026] [:error] [pid 8909:tid 8945] [client 158.158.32.26:13202] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "ac0H1zvP_a0662gDl6CLAgAAAMQ"]
[Wed Apr 01 19:56:07.800767 2026] [:error] [pid 8909:tid 8941] [client 158.158.32.26:10654] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "ac0H1zvP_a0662gDl6CLBgAAAMA"]
[Wed Apr 01 19:56:08.291421 2026] [:error] [pid 8908:tid 8928] [client 158.158.32.26:10592] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "ac0H2PkmxtJXGnLdvgBn5gAAAI8"]
[Wed Apr 01 19:56:08.774352 2026] [:error] [pid 8908:tid 8932] [client 158.158.32.26:10711] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gec.php"] [unique_id "ac0H2PkmxtJXGnLdvgBn7AAAAJM"]
[Wed Apr 01 19:56:09.263650 2026] [:error] [pid 17856:tid 17872] [client 158.158.32.26:10727] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "ac0H2T7Idlm5j9frhqQDUQAAAE4"]
[Wed Apr 01 19:56:09.745819 2026] [:error] [pid 8995:tid 9015] [client 158.158.32.26:10662] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "ac0H2eonaBjs3qxcReeyUQAAABE"]
[Wed Apr 01 19:56:10.238465 2026] [:error] [pid 17856:tid 17864] [client 158.158.32.26:10700] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "ac0H2j7Idlm5j9frhqQDVQAAAEY"]
[Wed Apr 01 19:56:10.774956 2026] [:error] [pid 8910:tid 8974] [client 158.158.32.26:13218] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "ac0H2qJZINUcF3tYgExPQwAAAQY"]
[Wed Apr 01 19:56:11.258249 2026] [:error] [pid 8908:tid 8924] [client 158.158.32.26:13227] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ac0H2_kmxtJXGnLdvgBn-wAAAIs"]
[Wed Apr 01 19:56:11.769823 2026] [:error] [pid 8995:tid 9009] [client 158.158.32.26:13210] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ac0H2-onaBjs3qxcReeyVAAAAAs"]
[Wed Apr 01 19:56:12.315424 2026] [:error] [pid 8908:tid 8920] [client 158.158.32.26:10531] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ac0H3PkmxtJXGnLdvgBoBgAAAIc"]
[Wed Apr 01 19:56:12.857750 2026] [:error] [pid 8908:tid 8914] [client 158.158.32.26:10616] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ac0H3PkmxtJXGnLdvgBoCQAAAIE"]
[Wed Apr 01 19:56:13.353393 2026] [:error] [pid 8995:tid 9006] [client 158.158.32.26:40557] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "ac0H3eonaBjs3qxcReeyWAAAAAg"]
[Wed Apr 01 19:56:13.858379 2026] [:error] [pid 8908:tid 8920] [client 158.158.32.26:10684] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "ac0H3fkmxtJXGnLdvgBoDwAAAIc"]
[Wed Apr 01 19:56:14.352598 2026] [:error] [pid 62559:tid 62566] [client 158.158.32.26:10681] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "ac0H3i7NKI8IaNKZFIeEeAAAAUU"]
[Wed Apr 01 19:56:14.867165 2026] [:error] [pid 17856:tid 17863] [client 158.158.32.26:10630] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/size.php"] [unique_id "ac0H3j7Idlm5j9frhqQDZgAAAEU"]
[Wed Apr 01 19:56:15.354535 2026] [:error] [pid 17856:tid 17873] [client 158.158.32.26:40538] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ac0H3z7Idlm5j9frhqQDawAAAE8"]
[Wed Apr 01 19:56:15.859911 2026] [:error] [pid 17856:tid 17861] [client 158.158.32.26:10722] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ac0H3z7Idlm5j9frhqQDbQAAAEM"]
[Wed Apr 01 19:56:16.367004 2026] [:error] [pid 17856:tid 17877] [client 158.158.32.26:13198] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ac0H4D7Idlm5j9frhqQDcAAAAFM"]
[Wed Apr 01 19:56:16.883653 2026] [:error] [pid 17856:tid 17876] [client 158.158.32.26:40548] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ac0H4D7Idlm5j9frhqQDdwAAAFI"]
[Wed Apr 01 19:56:17.373730 2026] [:error] [pid 17856:tid 17873] [client 158.158.32.26:10644] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "ac0H4T7Idlm5j9frhqQDegAAAE8"]
[Wed Apr 01 19:56:17.894932 2026] [:error] [pid 17856:tid 17870] [client 158.158.32.26:10579] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "ac0H4T7Idlm5j9frhqQDfgAAAEw"]
[Wed Apr 01 19:56:18.437929 2026] [:error] [pid 8909:tid 8949] [client 158.158.32.26:10750] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "ac0H4jvP_a0662gDl6CLEgAAAMg"]
[Wed Apr 01 19:56:18.941186 2026] [:error] [pid 8909:tid 8959] [client 158.158.32.26:13219] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "ac0H4jvP_a0662gDl6CLFAAAANI"]
[Wed Apr 01 19:56:19.454099 2026] [:error] [pid 17856:tid 17866] [client 158.158.32.26:40525] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "ac0H4z7Idlm5j9frhqQDiwAAAEg"]
[Wed Apr 01 19:56:19.938786 2026] [:error] [pid 62559:tid 62575] [client 158.158.32.26:10647] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "ac0H4y7NKI8IaNKZFIeEfQAAAU4"]
[Wed Apr 01 19:56:20.448370 2026] [:error] [pid 8909:tid 8958] [client 158.158.32.26:13242] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "ac0H5DvP_a0662gDl6CLHgAAANE"]
[Wed Apr 01 19:56:20.949139 2026] [:error] [pid 62559:tid 62566] [client 158.158.32.26:10723] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "ac0H5C7NKI8IaNKZFIeEgAAAAUU"]
[Wed Apr 01 19:56:21.477892 2026] [:error] [pid 17856:tid 17874] [client 158.158.32.26:10563] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "ac0H5T7Idlm5j9frhqQDjwAAAFA"]
[Wed Apr 01 19:56:21.981259 2026] [:error] [pid 8909:tid 8944] [client 158.158.32.26:10588] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "ac0H5TvP_a0662gDl6CLJgAAAMM"]
[Wed Apr 01 19:56:22.631187 2026] [:error] [pid 8909:tid 8961] [client 158.158.32.26:10627] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "ac0H5jvP_a0662gDl6CLJwAAANQ"]
[Wed Apr 01 19:56:23.131668 2026] [:error] [pid 8909:tid 8948] [client 158.158.32.26:10580] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "ac0H5zvP_a0662gDl6CLKQAAAMc"]
[Wed Apr 01 19:56:23.643512 2026] [:error] [pid 8909:tid 8943] [client 158.158.32.26:10633] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "ac0H5zvP_a0662gDl6CLMAAAAMI"]
[Wed Apr 01 19:56:24.139058 2026] [:error] [pid 8909:tid 8961] [client 158.158.32.26:10560] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "ac0H6DvP_a0662gDl6CLNQAAANQ"]
[Wed Apr 01 19:56:24.644194 2026] [:error] [pid 8909:tid 8952] [client 158.158.32.26:10653] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "ac0H6DvP_a0662gDl6CLOwAAAMs"]
[Wed Apr 01 19:56:25.180872 2026] [:error] [pid 8909:tid 8960] [client 158.158.32.26:10659] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vaza.php"] [unique_id "ac0H6TvP_a0662gDl6CLQwAAANM"]
[Wed Apr 01 19:56:25.688496 2026] [:error] [pid 8909:tid 8965] [client 158.158.32.26:10656] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "ac0H6TvP_a0662gDl6CLRwAAANg"]
[Wed Apr 01 19:56:26.172951 2026] [:error] [pid 8908:tid 8913] [client 158.158.32.26:10602] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "ac0H6vkmxtJXGnLdvgBoIgAAAIA"]
[Wed Apr 01 19:56:26.664394 2026] [:error] [pid 8908:tid 8935] [client 158.158.32.26:10688] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "ac0H6vkmxtJXGnLdvgBoJwAAAJY"]
[Wed Apr 01 19:56:27.163853 2026] [:error] [pid 8909:tid 8941] [client 158.158.32.26:10702] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "ac0H6zvP_a0662gDl6CLTAAAAMA"]
[Wed Apr 01 19:56:27.672968 2026] [:error] [pid 62559:tid 62585] [client 158.158.32.26:10733] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac0H6y7NKI8IaNKZFIeEhgAAAVg"]
[Wed Apr 01 19:56:28.194279 2026] [:error] [pid 17856:tid 17870] [client 158.158.32.26:10561] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac0H7D7Idlm5j9frhqQDmgAAAEw"]
[Wed Apr 01 19:56:28.683848 2026] [:error] [pid 17856:tid 17878] [client 158.158.32.26:10748] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac0H7D7Idlm5j9frhqQDmwAAAFQ"]
[Wed Apr 01 19:56:29.170325 2026] [:error] [pid 62559:tid 62571] [client 158.158.32.26:10724] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac0H7S7NKI8IaNKZFIeEigAAAUo"]
[Wed Apr 01 19:56:29.659898 2026] [:error] [pid 8995:tid 8999] [client 158.158.32.26:10686] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "ac0H7eonaBjs3qxcReeyawAAAAE"]
[Wed Apr 01 19:56:30.160853 2026] [:error] [pid 8908:tid 8931] [client 158.158.32.26:10652] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "ac0H7vkmxtJXGnLdvgBoNQAAAJI"]
[Wed Apr 01 19:56:30.644782 2026] [:error] [pid 8910:tid 8992] [client 158.158.32.26:10564] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "ac0H7qJZINUcF3tYgExPVwAAARg"]
[Wed Apr 01 19:56:31.140326 2026] [:error] [pid 17856:tid 17867] [client 158.158.32.26:10648] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "ac0H7z7Idlm5j9frhqQDngAAAEk"]
[Wed Apr 01 19:56:31.625777 2026] [:error] [pid 17856:tid 17863] [client 158.158.32.26:10649] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "ac0H7z7Idlm5j9frhqQDnwAAAEU"]
[Wed Apr 01 19:56:32.103886 2026] [:error] [pid 8908:tid 8918] [client 158.158.32.26:10655] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "ac0H8PkmxtJXGnLdvgBoOwAAAIU"]
[Wed Apr 01 19:56:32.599364 2026] [:error] [pid 8995:tid 9007] [client 158.158.32.26:10670] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "ac0H8OonaBjs3qxcReeydQAAAAk"]
[Wed Apr 01 19:56:33.096605 2026] [:error] [pid 8995:tid 9016] [client 158.158.32.26:13234] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "ac0H8eonaBjs3qxcReeyegAAABI"]
[Wed Apr 01 19:56:33.588922 2026] [:error] [pid 62559:tid 62565] [client 158.158.32.26:10682] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "ac0H8S7NKI8IaNKZFIeElgAAAUQ"]
[Wed Apr 01 19:56:34.108082 2026] [:error] [pid 62559:tid 62576] [client 158.158.32.26:10672] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "ac0H8i7NKI8IaNKZFIeEnAAAAU8"]
[Wed Apr 01 19:56:34.742754 2026] [:error] [pid 62559:tid 62581] [client 158.158.32.26:10567] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "ac0H8i7NKI8IaNKZFIeEogAAAVQ"]
[Wed Apr 01 19:56:35.237320 2026] [:error] [pid 62559:tid 62578] [client 158.158.32.26:10639] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "ac0H8y7NKI8IaNKZFIeEpwAAAVE"]
[Wed Apr 01 19:56:35.724691 2026] [:error] [pid 8908:tid 8921] [client 158.158.32.26:10743] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0H8_kmxtJXGnLdvgBoQgAAAIg"]
[Wed Apr 01 19:56:36.215071 2026] [:error] [pid 8909:tid 8956] [client 158.158.32.26:10597] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0H9DvP_a0662gDl6CLWwAAAM8"]
[Wed Apr 01 19:56:36.705743 2026] [:error] [pid 8909:tid 8950] [client 158.158.32.26:10632] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0H9DvP_a0662gDl6CLXQAAAMk"]
[Wed Apr 01 19:56:37.213758 2026] [:error] [pid 62559:tid 62583] [client 158.158.32.26:10624] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac0H9S7NKI8IaNKZFIeErQAAAVY"]
[Wed Apr 01 19:56:37.701058 2026] [:error] [pid 17856:tid 17864] [client 158.158.32.26:10738] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "ac0H9T7Idlm5j9frhqQDrQAAAEY"]
[Wed Apr 01 19:56:38.185331 2026] [:error] [pid 8909:tid 8944] [client 158.158.32.26:10502] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "ac0H9jvP_a0662gDl6CLYwAAAMM"]
[Wed Apr 01 19:56:38.696167 2026] [:error] [pid 17856:tid 17871] [client 158.158.32.26:10576] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "ac0H9j7Idlm5j9frhqQDsgAAAE0"]
[Wed Apr 01 19:56:39.192089 2026] [:error] [pid 62559:tid 62568] [client 158.158.32.26:10607] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "ac0H9y7NKI8IaNKZFIeEtQAAAUc"]
[Wed Apr 01 19:56:39.670093 2026] [:error] [pid 8910:tid 8986] [client 158.158.32.26:10685] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "ac0H96JZINUcF3tYgExPYQAAARI"]
[Wed Apr 01 19:56:40.148799 2026] [:error] [pid 8910:tid 8981] [client 158.158.32.26:10667] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "ac0H-KJZINUcF3tYgExPZQAAAQ0"]
[Wed Apr 01 19:56:40.638484 2026] [:error] [pid 62559:tid 62576] [client 158.158.32.26:10641] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "ac0H-C7NKI8IaNKZFIeEuAAAAU8"]
[Wed Apr 01 19:56:41.118073 2026] [:error] [pid 8909:tid 8955] [client 158.158.32.26:10696] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "ac0H-TvP_a0662gDl6CLZwAAAM4"]
[Wed Apr 01 19:56:41.601433 2026] [:error] [pid 8995:tid 9013] [client 158.158.32.26:10680] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "ac0H-eonaBjs3qxcReeyfwAAAA8"]
[Wed Apr 01 19:56:42.125568 2026] [:error] [pid 8910:tid 8978] [client 158.158.32.26:10715] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "ac0H-qJZINUcF3tYgExPawAAAQo"]
[Wed Apr 01 19:56:42.609089 2026] [:error] [pid 8995:tid 9002] [client 158.158.32.26:10687] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "ac0H-uonaBjs3qxcReeygwAAAAQ"]
[Wed Apr 01 19:56:43.089694 2026] [:error] [pid 17856:tid 17882] [client 158.158.32.26:10663] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "ac0H-z7Idlm5j9frhqQDxQAAAFg"]
[Wed Apr 01 19:56:43.569716 2026] [:error] [pid 8910:tid 8984] [client 158.158.32.26:10512] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d2.php"] [unique_id "ac0H-6JZINUcF3tYgExPbQAAARA"]
[Wed Apr 01 19:56:44.064843 2026] [:error] [pid 8910:tid 8973] [client 158.158.32.26:10636] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d2.php"] [unique_id "ac0H_KJZINUcF3tYgExPcQAAAQU"]
[Wed Apr 01 19:56:44.560204 2026] [:error] [pid 8908:tid 8936] [client 158.158.32.26:10609] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d2.php"] [unique_id "ac0H_PkmxtJXGnLdvgBoWAAAAJc"]
[Wed Apr 01 19:56:45.040896 2026] [:error] [pid 8910:tid 8983] [client 158.158.32.26:10587] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d2.php"] [unique_id "ac0H_aJZINUcF3tYgExPdgAAAQ8"]
[Wed Apr 01 19:56:45.545684 2026] [:error] [pid 8908:tid 8934] [client 158.158.32.26:10574] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc.php"] [unique_id "ac0H_fkmxtJXGnLdvgBoWQAAAJU"]
[Wed Apr 01 19:56:46.033796 2026] [:error] [pid 62559:tid 62566] [client 158.158.32.26:10665] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc.php"] [unique_id "ac0H_i7NKI8IaNKZFIeExAAAAUU"]
[Wed Apr 01 19:56:46.512648 2026] [:error] [pid 17856:tid 17878] [client 158.158.32.26:40570] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc.php"] [unique_id "ac0H_j7Idlm5j9frhqQD2AAAAFQ"]
[Wed Apr 01 19:56:46.992010 2026] [:error] [pid 8995:tid 9010] [client 158.158.32.26:10740] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xc.php"] [unique_id "ac0H_uonaBjs3qxcReeykwAAAAw"]
[Wed Apr 01 19:56:47.472102 2026] [:error] [pid 8995:tid 8999] [client 158.158.32.26:10507] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "ac0H_-onaBjs3qxcReeymAAAAAE"]
[Wed Apr 01 19:56:47.957680 2026] [:error] [pid 8909:tid 8945] [client 158.158.32.26:13230] [client 158.158.32.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "ac0H_zvP_a0662gDl6CLdgAAAMQ"]
[Wed Apr 01 22:34:51.308295 2026] [:error] [pid 17856:tid 17871] [client 170.106.187.106:32822] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ac0tCz7Idlm5j9frhqRqXQAAAE0"]
[Wed Apr 01 22:41:47.413798 2026] [:error] [pid 8908:tid 8920] [client 172.70.248.145:11316] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/refs/heads/main"] [unique_id "ac0uq_kmxtJXGnLdvgC3_gAAAIc"]
[Wed Apr 01 22:41:47.414976 2026] [:error] [pid 8995:tid 9003] [client 172.70.248.166:12593] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ac0uq-onaBjs3qxcReflpwAAAAU"]
[Wed Apr 01 22:41:47.421021 2026] [:error] [pid 8908:tid 8926] [client 172.70.248.167:11303] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/index"] [unique_id "ac0uq_kmxtJXGnLdvgC3_wAAAI0"]
[Wed Apr 01 22:41:47.424902 2026] [:error] [pid 8908:tid 8923] [client 172.70.248.145:11321] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/logs/HEAD"] [unique_id "ac0uq_kmxtJXGnLdvgC4AAAAAIo"]
[Wed Apr 01 22:41:47.445426 2026] [:error] [pid 8908:tid 8924] [client 172.70.248.145:11318] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/refs/heads/master"] [unique_id "ac0uq_kmxtJXGnLdvgC4AgAAAIs"]
[Wed Apr 01 22:41:47.445559 2026] [:error] [pid 8908:tid 8918] [client 172.70.248.145:11322] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "ac0uq_kmxtJXGnLdvgC4AQAAAIU"]
[Wed Apr 01 22:41:48.404135 2026] [:error] [pid 62559:tid 62580] [client 172.70.248.145:11324] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "ac0urC7NKI8IaNKZFIfObgAAAVM"]
[Wed Apr 01 22:41:48.412443 2026] [:error] [pid 8995:tid 9013] [client 172.70.248.144:11386] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "ac0urOonaBjs3qxcReflrwAAAA8"]
[Wed Apr 01 22:41:48.425755 2026] [:error] [pid 62559:tid 62564] [client 172.70.248.144:11391] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "ac0urC7NKI8IaNKZFIfObwAAAUM"]
[Wed Apr 01 22:41:48.434480 2026] [:error] [pid 62559:tid 62583] [client 172.70.248.144:11384] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "ac0urC7NKI8IaNKZFIfOcAAAAVY"]
[Wed Apr 01 22:41:48.451474 2026] [:error] [pid 8995:tid 8998] [client 172.70.248.167:11309] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "ac0urOonaBjs3qxcReflsAAAAAA"]
[Wed Apr 01 22:41:48.477734 2026] [:error] [pid 8995:tid 8999] [client 172.70.248.144:11392] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "ac0urOonaBjs3qxcReflsQAAAAE"]
[Wed Apr 01 22:41:49.404532 2026] [:error] [pid 62559:tid 62568] [client 172.70.248.145:11332] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "ac0urS7NKI8IaNKZFIfOdQAAAUc"]
[Wed Apr 01 22:41:49.432865 2026] [:error] [pid 17856:tid 17879] [client 172.70.248.166:12599] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "ac0urT7Idlm5j9frhqRs-gAAAFU"]
[Wed Apr 01 22:41:49.449790 2026] [:error] [pid 17856:tid 17872] [client 172.70.248.166:12607] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "ac0urT7Idlm5j9frhqRs-wAAAE4"]
[Wed Apr 01 22:41:49.466059 2026] [:error] [pid 62559:tid 62582] [client 172.70.248.145:11336] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "ac0urS7NKI8IaNKZFIfOdgAAAVU"]
[Wed Apr 01 22:41:49.489580 2026] [:error] [pid 8995:tid 9003] [client 172.70.248.166:12610] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.tmp"] [unique_id "ac0ureonaBjs3qxcRefluwAAAAU"]
[Wed Apr 01 22:41:49.499619 2026] [:error] [pid 62559:tid 62570] [client 172.70.248.144:11397] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "ac0urS7NKI8IaNKZFIfOdwAAAUk"]
[Wed Apr 01 22:41:50.411371 2026] [:error] [pid 8910:tid 8977] [client 172.70.248.144:11405] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "ac0urqJZINUcF3tYgEx5qAAAAQk"]
[Wed Apr 01 22:41:50.465693 2026] [:error] [pid 8910:tid 8981] [client 172.70.248.167:11315] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development.local"] [unique_id "ac0urqJZINUcF3tYgEx5qQAAAQ0"]
[Wed Apr 01 22:41:50.480927 2026] [:error] [pid 8910:tid 8983] [client 172.70.248.145:11337] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "ac0urqJZINUcF3tYgEx5qgAAAQ8"]
[Wed Apr 01 22:41:50.498028 2026] [:error] [pid 17856:tid 17861] [client 172.70.248.166:12611] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production.local"] [unique_id "ac0urj7Idlm5j9frhqRs_AAAAEM"]
[Wed Apr 01 22:41:50.534922 2026] [:error] [pid 8910:tid 8988] [client 172.70.248.167:11318] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "ac0urqJZINUcF3tYgEx5qwAAARQ"]
[Wed Apr 01 22:41:50.554826 2026] [:error] [pid 8910:tid 8975] [client 172.70.248.144:11410] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "ac0urqJZINUcF3tYgEx5rAAAAQc"]
[Wed Apr 01 22:41:51.412453 2026] [:error] [pid 62559:tid 62583] [client 172.70.248.145:11342] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "ac0ury7NKI8IaNKZFIfOhAAAAVY"]
[Wed Apr 01 22:41:51.479716 2026] [:error] [pid 62559:tid 62577] [client 172.70.248.144:11414] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env"] [unique_id "ac0ury7NKI8IaNKZFIfOhQAAAVA"]
[Wed Apr 01 22:41:51.483469 2026] [:error] [pid 8908:tid 8914] [client 172.70.248.145:11348] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "ac0ur_kmxtJXGnLdvgC4CAAAAIE"]
[Wed Apr 01 22:41:51.493410 2026] [:error] [pid 62559:tid 62572] [client 172.70.248.145:11356] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env"] [unique_id "ac0ury7NKI8IaNKZFIfOhgAAAUs"]
[Wed Apr 01 22:41:51.562986 2026] [:error] [pid 8908:tid 8928] [client 172.70.248.145:11362] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/private/.env"] [unique_id "ac0ur_kmxtJXGnLdvgC4CQAAAI8"]
[Wed Apr 01 22:41:51.873423 2026] [:error] [pid 62559:tid 62573] [client 172.70.248.167:11320] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env1"] [unique_id "ac0ury7NKI8IaNKZFIfOiwAAAUw"]
[Wed Apr 01 22:41:52.434108 2026] [:error] [pid 8908:tid 8920] [client 172.70.248.167:11322] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.local"] [unique_id "ac0usPkmxtJXGnLdvgC4DQAAAIc"]
[Wed Apr 01 22:41:52.484376 2026] [:error] [pid 8908:tid 8923] [client 172.70.248.167:11330] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_backup"] [unique_id "ac0usPkmxtJXGnLdvgC4DgAAAIo"]
[Wed Apr 01 22:41:52.499046 2026] [:error] [pid 8908:tid 8926] [client 172.70.248.166:12616] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.php"] [unique_id "ac0usPkmxtJXGnLdvgC4DwAAAI0"]
[Wed Apr 01 22:41:52.534980 2026] [:error] [pid 62559:tid 62585] [client 172.70.248.166:12618] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.json"] [unique_id "ac0usC7NKI8IaNKZFIfOjgAAAVg"]
[Wed Apr 01 22:41:52.591872 2026] [:error] [pid 62559:tid 62579] [client 172.70.248.144:11419] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env~"] [unique_id "ac0usC7NKI8IaNKZFIfOkQAAAVI"]
[Wed Apr 01 22:41:52.899795 2026] [:error] [pid 62559:tid 62568] [client 172.70.248.144:11423] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env2"] [unique_id "ac0usC7NKI8IaNKZFIfOlAAAAUc"]
[Wed Apr 01 22:41:53.431086 2026] [:error] [pid 62559:tid 62581] [client 172.70.248.166:12620] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "ac0usS7NKI8IaNKZFIfOmgAAAVQ"]
[Wed Apr 01 22:41:53.512871 2026] [:error] [pid 62559:tid 62578] [client 172.70.248.167:11337] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.orig"] [unique_id "ac0usS7NKI8IaNKZFIfOnAAAAVE"]
[Wed Apr 01 22:41:53.516273 2026] [:error] [pid 8908:tid 8931] [client 172.70.248.167:11336] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.envrc"] [unique_id "ac0usfkmxtJXGnLdvgC4FAAAAJI"]
[Wed Apr 01 22:41:53.587162 2026] [:error] [pid 62559:tid 62573] [client 172.70.248.144:11428] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production.bak"] [unique_id "ac0usS7NKI8IaNKZFIfOngAAAUw"]
[Wed Apr 01 22:41:53.623190 2026] [:error] [pid 8908:tid 8927] [client 172.70.248.167:11344] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "ac0usfkmxtJXGnLdvgC4FQAAAI4"]
[Wed Apr 01 22:41:53.913034 2026] [:error] [pid 62559:tid 62585] [client 172.70.248.166:12625] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev.local"] [unique_id "ac0usS7NKI8IaNKZFIfOpQAAAVg"]
[Wed Apr 01 22:41:54.420870 2026] [:error] [pid 8995:tid 8999] [client 172.70.248.144:11430] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.docker"] [unique_id "ac0usuonaBjs3qxcReflvwAAAAE"]
[Wed Apr 01 22:41:54.516384 2026] [:error] [pid 8908:tid 8930] [client 172.70.248.144:11437] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.container"] [unique_id "ac0usvkmxtJXGnLdvgC4GQAAAJE"]
[Wed Apr 01 22:41:54.528775 2026] [:error] [pid 8908:tid 8919] [client 172.70.248.144:11443] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/docker/.env"] [unique_id "ac0usvkmxtJXGnLdvgC4GgAAAIY"]
[Wed Apr 01 22:41:54.647549 2026] [:error] [pid 8908:tid 8920] [client 172.70.248.167:11359] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/docker/.env.local"] [unique_id "ac0usvkmxtJXGnLdvgC4HgAAAIc"]
[Wed Apr 01 22:41:54.892605 2026] [:error] [pid 8908:tid 8937] [client 172.70.248.167:11352] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/www/.env"] [unique_id "ac0usvkmxtJXGnLdvgC4HwAAAJg"]
[Wed Apr 01 22:41:54.912843 2026] [:error] [pid 8908:tid 8918] [client 172.70.248.167:11363] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/server/.env"] [unique_id "ac0usvkmxtJXGnLdvgC4IAAAAIU"]
[Wed Apr 01 22:41:55.421057 2026] [:error] [pid 62559:tid 62565] [client 172.70.248.144:10207] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/srv/.env"] [unique_id "ac0usy7NKI8IaNKZFIfOrQAAAUQ"]
[Wed Apr 01 22:41:55.519035 2026] [:error] [pid 62559:tid 62562] [client 172.70.248.144:10210] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web/.env"] [unique_id "ac0usy7NKI8IaNKZFIfOsAAAAUE"]
[Wed Apr 01 22:41:55.558433 2026] [:error] [pid 62559:tid 62563] [client 172.70.248.166:12628] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/site/.env"] [unique_id "ac0usy7NKI8IaNKZFIfOsQAAAUI"]
[Wed Apr 01 22:41:55.649513 2026] [:error] [pid 62559:tid 62566] [client 172.70.248.167:11366] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/var/www/.env"] [unique_id "ac0usy7NKI8IaNKZFIfOswAAAUU"]
[Wed Apr 01 22:41:55.913528 2026] [:error] [pid 62559:tid 62585] [client 172.70.248.145:11095] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/var/www/html/.env"] [unique_id "ac0usy7NKI8IaNKZFIfOtQAAAVg"]
[Wed Apr 01 22:41:55.962019 2026] [:error] [pid 62559:tid 62575] [client 172.70.248.145:11097] [client 172.70.248.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/home/.env"] [unique_id "ac0usy7NKI8IaNKZFIfOuAAAAU4"]
[Wed Apr 01 22:41:56.438533 2026] [:error] [pid 62559:tid 62578] [client 172.70.248.167:11372] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/root/.env"] [unique_id "ac0utC7NKI8IaNKZFIfOugAAAVE"]
[Wed Apr 01 22:41:56.488307 2026] [:error] [pid 8908:tid 8920] [client 172.70.248.144:9770] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "ac0utPkmxtJXGnLdvgC4JQAAAIc"]
[Wed Apr 01 22:41:56.542912 2026] [:error] [pid 8908:tid 8914] [client 172.70.248.166:11610] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_config"] [unique_id "ac0utPkmxtJXGnLdvgC4JgAAAIE"]
[Wed Apr 01 22:41:56.668693 2026] [:error] [pid 8995:tid 9014] [client 172.70.248.167:9516] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_settings"] [unique_id "ac0utOonaBjs3qxcReflwgAAABA"]
[Wed Apr 01 22:41:56.913431 2026] [:error] [pid 8908:tid 8930] [client 172.70.248.167:9523] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local.backup"] [unique_id "ac0utPkmxtJXGnLdvgC4KwAAAJE"]
[Wed Apr 01 22:41:56.940625 2026] [:error] [pid 8908:tid 8937] [client 172.70.248.144:9772] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ac0utPkmxtJXGnLdvgC4LAAAAJg"]
[Wed Apr 01 22:41:57.000702 2026] [:error] [pid 17856:tid 17862] [client 172.70.248.144:9778] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/index"] [unique_id "ac0utT7Idlm5j9frhqRs_gAAAEQ"]
[Wed Apr 01 22:41:57.062109 2026] [:error] [pid 8909:tid 8956] [client 172.70.248.167:10001] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/logs/HEAD"] [unique_id "ac0utTvP_a0662gDl6D9swAAAM8"]
[Wed Apr 01 22:41:57.183742 2026] [:error] [pid 8909:tid 8947] [client 172.70.248.167:10004] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/refs/heads/master"] [unique_id "ac0utTvP_a0662gDl6D9tAAAAMY"]
[Wed Apr 01 22:41:57.418137 2026] [:error] [pid 62559:tid 62564] [client 172.70.248.144:9781] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/refs/heads/main"] [unique_id "ac0utS7NKI8IaNKZFIfOwAAAAUM"]
[Wed Apr 01 22:41:57.508595 2026] [:error] [pid 62559:tid 62574] [client 172.70.248.167:10012] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "ac0utS7NKI8IaNKZFIfOwQAAAU0"]
[Wed Apr 01 22:41:57.575612 2026] [:error] [pid 17856:tid 17881] [client 172.70.248.167:10017] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "ac0utT7Idlm5j9frhqRs_wAAAFc"]
[Wed Apr 01 22:41:57.692925 2026] [:error] [pid 8908:tid 8922] [client 172.70.248.166:12722] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "ac0utfkmxtJXGnLdvgC4LQAAAIk"]
[Wed Apr 01 22:41:57.923572 2026] [:error] [pid 62559:tid 62580] [client 172.70.248.144:9785] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "ac0utS7NKI8IaNKZFIfOxAAAAVM"]
[Wed Apr 01 22:41:58.022754 2026] [:error] [pid 62559:tid 62578] [client 172.70.248.167:10018] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "ac0uti7NKI8IaNKZFIfOxgAAAVE"]
[Wed Apr 01 22:41:58.075610 2026] [:error] [pid 8909:tid 8961] [client 172.70.248.144:9786] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "ac0utjvP_a0662gDl6D9twAAANQ"]
[Wed Apr 01 22:41:58.188627 2026] [:error] [pid 17856:tid 17864] [client 172.70.248.166:12729] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "ac0utj7Idlm5j9frhqRtAQAAAEY"]
[Wed Apr 01 22:41:58.435727 2026] [:error] [pid 8908:tid 8915] [client 172.70.248.167:10021] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "ac0utvkmxtJXGnLdvgC4MAAAAII"]
[Wed Apr 01 22:41:58.537847 2026] [:error] [pid 62559:tid 62577] [client 172.70.248.144:9787] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "ac0uti7NKI8IaNKZFIfOzQAAAVA"]
[Wed Apr 01 22:41:58.581969 2026] [:error] [pid 8995:tid 9007] [client 172.70.248.166:12732] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "ac0utuonaBjs3qxcReflxQAAAAk"]
[Wed Apr 01 22:41:58.693408 2026] [:error] [pid 8995:tid 9018] [client 172.70.248.167:10026] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.tmp"] [unique_id "ac0utuonaBjs3qxcReflxwAAABQ"]
[Wed Apr 01 22:41:59.105759 2026] [:error] [pid 17856:tid 17875] [client 172.70.248.167:10034] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development.local"] [unique_id "ac0utz7Idlm5j9frhqRtAgAAAFE"]
[Wed Apr 01 22:41:59.606878 2026] [:error] [pid 17856:tid 17858] [client 172.70.248.166:12737] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "ac0utz7Idlm5j9frhqRtBQAAAEA"]
[Wed Apr 01 22:42:00.112887 2026] [:error] [pid 62559:tid 62573] [client 172.70.248.144:9791] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "ac0uuC7NKI8IaNKZFIfO2QAAAUw"]
[Wed Apr 01 22:42:00.635623 2026] [:error] [pid 62559:tid 62581] [client 172.70.248.167:10037] [client 172.70.248.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "ac0uuC7NKI8IaNKZFIfO3wAAAVQ"]
[Wed Apr 01 22:42:01.154000 2026] [:error] [pid 8995:tid 9011] [client 172.70.248.144:9795] [client 172.70.248.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "ac0uueonaBjs3qxcReflywAAAA0"]
[Wed Apr 01 22:42:18.102669 2026] [:error] [pid 8995:tid 9012] [client 172.69.186.142:10022] [client 172.69.186.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/private/.env"] [unique_id "ac0uyuonaBjs3qxcRefl3QAAAA4"]
[Wed Apr 01 22:42:18.612893 2026] [:error] [pid 62559:tid 62582] [client 172.69.186.178:10185] [client 172.69.186.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.php"] [unique_id "ac0uyi7NKI8IaNKZFIfPdAAAAVU"]
[Wed Apr 01 22:42:21.173462 2026] [:error] [pid 62559:tid 62561] [client 172.69.186.182:11141] [client 172.69.186.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_backup"] [unique_id "ac0uzS7NKI8IaNKZFIfPfwAAAUA"]
[Wed Apr 01 22:42:35.823743 2026] [:error] [pid 8908:tid 8918] [client 172.69.186.33:11400] [client 172.69.186.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env1"] [unique_id "ac0u2_kmxtJXGnLdvgC4kAAAAIU"]
[Wed Apr 01 22:42:36.100270 2026] [:error] [pid 8908:tid 8921] [client 172.69.186.32:14115] [client 172.69.186.32] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env2"] [unique_id "ac0u3PkmxtJXGnLdvgC4kQAAAIg"]
[Wed Apr 01 22:42:36.376138 2026] [:error] [pid 8909:tid 8949] [client 172.69.186.6:13944] [client 172.69.186.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "ac0u3DvP_a0662gDl6D99gAAAMg"]
[Wed Apr 01 22:42:37.388153 2026] [:error] [pid 8910:tid 8979] [client 172.69.186.172:12061] [client 172.69.186.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.orig"] [unique_id "ac0u3aJZINUcF3tYgEx58QAAAQs"]
[Wed Apr 01 22:42:37.571385 2026] [:error] [pid 8909:tid 8953] [client 172.69.186.33:11406] [client 172.69.186.33] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production.bak"] [unique_id "ac0u3TvP_a0662gDl6D9-gAAAMw"]
[Wed Apr 01 22:42:37.849687 2026] [:error] [pid 8908:tid 8918] [client 172.69.186.172:12068] [client 172.69.186.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev.local"] [unique_id "ac0u3fkmxtJXGnLdvgC4ngAAAIU"]
[Wed Apr 01 22:42:37.871159 2026] [:error] [pid 62559:tid 62584] [client 172.69.186.206:11119] [client 172.69.186.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.docker"] [unique_id "ac0u3S7NKI8IaNKZFIfPtgAAAVc"]
[Wed Apr 01 22:42:37.889379 2026] [:error] [pid 62559:tid 62571] [client 172.70.248.166:11136] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "ac0u3S7NKI8IaNKZFIfPuAAAAUo"]
[Wed Apr 01 22:42:38.132194 2026] [:error] [pid 8909:tid 8952] [client 172.69.186.183:11043] [client 172.69.186.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.container"] [unique_id "ac0u3jvP_a0662gDl6D9_QAAAMs"]
[Wed Apr 01 22:42:38.148444 2026] [:error] [pid 62559:tid 62563] [client 172.69.186.179:11799] [client 172.69.186.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/docker/.env"] [unique_id "ac0u3i7NKI8IaNKZFIfPugAAAUI"]
[Wed Apr 01 22:42:38.384341 2026] [:error] [pid 62559:tid 62579] [client 172.69.186.6:13952] [client 172.69.186.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/docker/.env.local"] [unique_id "ac0u3i7NKI8IaNKZFIfPvAAAAVI"]
[Wed Apr 01 22:42:38.410097 2026] [:error] [pid 8995:tid 9008] [client 172.69.186.182:10388] [client 172.69.186.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/server/.env"] [unique_id "ac0u3uonaBjs3qxcRefl_AAAAAo"]
[Wed Apr 01 22:42:38.426029 2026] [:error] [pid 8995:tid 9021] [client 172.69.186.142:10022] [client 172.69.186.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/srv/.env"] [unique_id "ac0u3uonaBjs3qxcRefl_QAAABc"]
[Wed Apr 01 22:42:38.660042 2026] [:error] [pid 8995:tid 9001] [client 172.69.186.179:11803] [client 172.69.186.179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web/.env"] [unique_id "ac0u3uonaBjs3qxcRefl_wAAAAM"]
[Wed Apr 01 22:42:38.673060 2026] [:error] [pid 8995:tid 9016] [client 172.70.248.166:11138] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/var/www/.env"] [unique_id "ac0u3uonaBjs3qxcRefmAQAAABI"]
[Wed Apr 01 22:42:38.687749 2026] [:error] [pid 8909:tid 8954] [client 172.69.186.26:13642] [client 172.69.186.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/site/.env"] [unique_id "ac0u3jvP_a0662gDl6D-AwAAAM0"]
[Wed Apr 01 22:42:38.702660 2026] [:error] [pid 17856:tid 17882] [client 172.69.186.216:10000] [client 172.69.186.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/www/.env"] [unique_id "ac0u3j7Idlm5j9frhqRtSwAAAFg"]
[Wed Apr 01 22:42:38.935535 2026] [:error] [pid 8909:tid 8947] [client 172.69.186.93:14089] [client 172.69.186.93] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/var/www/html/.env"] [unique_id "ac0u3jvP_a0662gDl6D-BQAAAMY"]
[Wed Apr 01 22:42:38.971029 2026] [:error] [pid 8909:tid 8958] [client 172.69.186.183:11047] [client 172.69.186.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/root/.env"] [unique_id "ac0u3jvP_a0662gDl6D-BwAAANE"]
[Wed Apr 01 22:42:38.982795 2026] [:error] [pid 8909:tid 8944] [client 172.69.186.142:10024] [client 172.69.186.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_config"] [unique_id "ac0u3jvP_a0662gDl6D-CAAAAMM"]
[Wed Apr 01 22:42:39.179097 2026] [:error] [pid 17856:tid 17880] [client 172.70.248.166:11139] [client 172.70.248.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/home/.env"] [unique_id "ac0u3z7Idlm5j9frhqRtTAAAAFY"]
[Wed Apr 01 22:42:39.212565 2026] [:error] [pid 8909:tid 8951] [client 172.69.186.178:13519] [client 172.69.186.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_secret"] [unique_id "ac0u3zvP_a0662gDl6D-CwAAAMo"]
[Wed Apr 01 22:42:39.249526 2026] [:error] [pid 8909:tid 8962] [client 172.69.186.7:12035] [client 172.69.186.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env_settings"] [unique_id "ac0u3zvP_a0662gDl6D-DAAAANU"]
[Wed Apr 01 22:42:40.185691 2026] [:error] [pid 62559:tid 62577] [client 172.69.186.216:10002] [client 172.69.186.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local.backup"] [unique_id "ac0u4C7NKI8IaNKZFIfPwQAAAVA"]
[Wed Apr 01 22:42:55.986872 2026] [:error] [pid 8909:tid 8963] [client 172.69.186.152:9367] [client 172.69.186.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.envrc"] [unique_id "ac0u7zvP_a0662gDl6D-RAAAANY"]
[Wed Apr 01 22:53:17.005678 2026] [:error] [pid 8910:tid 8972] [client 4.233.57.137:64564] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hnphq.php"] [unique_id "ac0xXaJZINUcF3tYgEx8gQAAAQQ"]
[Wed Apr 01 22:53:17.517730 2026] [:error] [pid 62559:tid 62584] [client 4.233.57.137:38005] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hnphq.php"] [unique_id "ac0xXS7NKI8IaNKZFIfbbAAAAVc"]
[Wed Apr 01 22:53:17.988832 2026] [:error] [pid 8908:tid 8919] [client 4.233.57.137:60882] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hnphq.php"] [unique_id "ac0xXfkmxtJXGnLdvgC_MAAAAIY"]
[Wed Apr 01 22:53:18.490284 2026] [:error] [pid 8909:tid 8948] [client 4.233.57.137:65263] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hnphq.php"] [unique_id "ac0xXjvP_a0662gDl6ADbQAAAMc"]
[Wed Apr 01 22:53:18.989809 2026] [:error] [pid 62559:tid 62582] [client 4.233.57.137:65277] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0xXi7NKI8IaNKZFIfbcgAAAVU"]
[Wed Apr 01 22:53:19.575942 2026] [:error] [pid 62559:tid 62578] [client 4.233.57.137:55720] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0xXy7NKI8IaNKZFIfbdQAAAVE"]
[Wed Apr 01 22:53:20.071918 2026] [:error] [pid 8995:tid 9016] [client 4.233.57.137:40302] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0xYOonaBjs3qxcRefpOgAAABI"]
[Wed Apr 01 22:53:20.572330 2026] [:error] [pid 62559:tid 62577] [client 4.233.57.137:40688] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac0xYC7NKI8IaNKZFIfbeAAAAVA"]
[Wed Apr 01 22:53:21.079850 2026] [:error] [pid 8995:tid 9004] [client 4.233.57.137:40683] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "ac0xYeonaBjs3qxcRefpQQAAAAY"]
[Wed Apr 01 22:53:21.565708 2026] [:error] [pid 62559:tid 62563] [client 4.233.57.137:47016] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "ac0xYS7NKI8IaNKZFIfbgwAAAUI"]
[Wed Apr 01 22:53:22.091162 2026] [:error] [pid 62559:tid 62576] [client 4.233.57.137:37956] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "ac0xYi7NKI8IaNKZFIfbigAAAU8"]
[Wed Apr 01 22:53:22.617737 2026] [:error] [pid 17856:tid 17865] [client 4.233.57.137:37976] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "ac0xYj7Idlm5j9frhqRxUQAAAEc"]
[Wed Apr 01 22:53:23.109793 2026] [:error] [pid 8910:tid 8968] [client 4.233.57.137:37960] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "ac0xY6JZINUcF3tYgEx8iAAAAQA"]
[Wed Apr 01 22:53:23.697606 2026] [:error] [pid 8908:tid 8915] [client 4.233.57.137:37971] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "ac0xY_kmxtJXGnLdvgC_XAAAAII"]
[Wed Apr 01 22:53:24.210290 2026] [:error] [pid 8908:tid 8930] [client 4.233.57.137:6127] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "ac0xZPkmxtJXGnLdvgC_XgAAAJE"]
[Wed Apr 01 22:53:24.786286 2026] [:error] [pid 8995:tid 9019] [client 4.233.57.137:55749] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "ac0xZOonaBjs3qxcRefpTAAAABU"]
[Wed Apr 01 22:53:25.269175 2026] [:error] [pid 62559:tid 62571] [client 4.233.57.137:40292] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0xZS7NKI8IaNKZFIfbngAAAUo"]
[Wed Apr 01 22:53:25.762782 2026] [:error] [pid 62559:tid 62585] [client 4.233.57.137:45772] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0xZS7NKI8IaNKZFIfbogAAAVg"]
[Wed Apr 01 22:53:26.268737 2026] [:error] [pid 8910:tid 8989] [client 4.233.57.137:45767] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0xZqJZINUcF3tYgEx8jwAAARU"]
[Wed Apr 01 22:53:26.770559 2026] [:error] [pid 62559:tid 62563] [client 4.233.57.137:55785] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac0xZi7NKI8IaNKZFIfbqAAAAUI"]
[Wed Apr 01 22:53:27.265039 2026] [:error] [pid 62559:tid 62581] [client 4.233.57.137:65265] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0xZy7NKI8IaNKZFIfbqwAAAVQ"]
[Wed Apr 01 22:53:27.738972 2026] [:error] [pid 62559:tid 62564] [client 4.233.57.137:45820] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0xZy7NKI8IaNKZFIfbsgAAAUM"]
[Wed Apr 01 22:53:28.503090 2026] [:error] [pid 8995:tid 9004] [client 4.233.57.137:47013] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0xaOonaBjs3qxcRefpUgAAAAY"]
[Wed Apr 01 22:53:29.208567 2026] [:error] [pid 62559:tid 62565] [client 4.233.57.137:47028] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac0xaS7NKI8IaNKZFIfbuwAAAUQ"]
[Wed Apr 01 22:53:29.939045 2026] [:error] [pid 62559:tid 62571] [client 4.233.57.137:47035] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "ac0xaS7NKI8IaNKZFIfbvQAAAUo"]
[Wed Apr 01 22:53:30.755608 2026] [:error] [pid 8908:tid 8924] [client 4.233.57.137:55723] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "ac0xavkmxtJXGnLdvgC_ZQAAAIs"]
[Wed Apr 01 22:53:31.510046 2026] [:error] [pid 8908:tid 8930] [client 4.233.57.137:55740] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "ac0xa_kmxtJXGnLdvgC_ZwAAAJE"]
[Wed Apr 01 22:53:32.142864 2026] [:error] [pid 8909:tid 8952] [client 4.233.57.137:47012] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Okxob.php"] [unique_id "ac0xbDvP_a0662gDl6ADowAAAMs"]
[Wed Apr 01 22:53:33.361037 2026] [:error] [pid 62559:tid 62561] [client 4.233.57.137:65244] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0xbS7NKI8IaNKZFIfbzwAAAUA"]
[Wed Apr 01 22:53:34.010544 2026] [:error] [pid 62559:tid 62575] [client 4.233.57.137:40650] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0xbi7NKI8IaNKZFIfb0wAAAU4"]
[Wed Apr 01 22:53:34.779602 2026] [:error] [pid 62559:tid 62578] [client 4.233.57.137:55683] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0xbi7NKI8IaNKZFIfb3QAAAVE"]
[Wed Apr 01 22:53:35.549880 2026] [:error] [pid 8995:tid 9008] [client 4.233.57.137:40665] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac0xb-onaBjs3qxcRefpXAAAAAo"]
[Wed Apr 01 22:53:37.012481 2026] [:error] [pid 8995:tid 9003] [client 4.233.57.137:60890] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0xceonaBjs3qxcRefpYAAAAAU"]
[Wed Apr 01 22:53:37.963733 2026] [:error] [pid 17856:tid 17865] [client 4.233.57.137:40319] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0xcT7Idlm5j9frhqRxbQAAAEc"]
[Wed Apr 01 22:53:38.528130 2026] [:error] [pid 62559:tid 62585] [client 4.233.57.137:46999] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0xci7NKI8IaNKZFIfcCQAAAVg"]
[Wed Apr 01 22:53:39.033614 2026] [:error] [pid 8908:tid 8914] [client 4.233.57.137:60880] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac0xc_kmxtJXGnLdvgC_dQAAAIE"]
[Wed Apr 01 22:53:39.568170 2026] [:error] [pid 8995:tid 9013] [client 4.233.57.137:65252] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/only.php"] [unique_id "ac0xc-onaBjs3qxcRefpbQAAAA8"]
[Wed Apr 01 22:53:40.313201 2026] [:error] [pid 8910:tid 8978] [client 4.233.57.137:6117] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/only.php"] [unique_id "ac0xdKJZINUcF3tYgEx8oAAAAQo"]
[Wed Apr 01 22:53:40.914299 2026] [:error] [pid 8910:tid 8984] [client 4.233.57.137:63189] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/only.php"] [unique_id "ac0xdKJZINUcF3tYgEx8ogAAARA"]
[Wed Apr 01 22:53:41.432997 2026] [:error] [pid 8995:tid 9000] [client 4.233.57.137:40268] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/only.php"] [unique_id "ac0xdeonaBjs3qxcRefpeQAAAAI"]
[Wed Apr 01 22:53:42.288117 2026] [:error] [pid 8909:tid 8954] [client 4.233.57.137:47007] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/repurify.php"] [unique_id "ac0xdjvP_a0662gDl6AD0QAAAM0"]
[Wed Apr 01 22:53:42.892287 2026] [:error] [pid 62559:tid 62576] [client 4.233.57.137:55807] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/repurify.php"] [unique_id "ac0xdi7NKI8IaNKZFIfcEQAAAU8"]
[Wed Apr 01 22:53:43.758541 2026] [:error] [pid 8995:tid 9022] [client 4.233.57.137:40261] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/repurify.php"] [unique_id "ac0xd-onaBjs3qxcRefphgAAABg"]
[Wed Apr 01 22:53:44.280736 2026] [:error] [pid 8908:tid 8922] [client 4.233.57.137:65266] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/repurify.php"] [unique_id "ac0xePkmxtJXGnLdvgC_igAAAIk"]
[Wed Apr 01 22:53:44.918226 2026] [:error] [pid 8908:tid 8915] [client 4.233.57.137:55768] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tdsaz.php"] [unique_id "ac0xePkmxtJXGnLdvgC_kQAAAII"]
[Wed Apr 01 22:53:45.658178 2026] [:error] [pid 8995:tid 9012] [client 4.233.57.137:40698] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tdsaz.php"] [unique_id "ac0xeeonaBjs3qxcRefpjgAAAA4"]
[Wed Apr 01 22:53:46.305599 2026] [:error] [pid 8909:tid 8955] [client 4.233.57.137:38003] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tdsaz.php"] [unique_id "ac0xejvP_a0662gDl6AD1wAAAM4"]
[Wed Apr 01 22:53:46.875413 2026] [:error] [pid 17856:tid 17861] [client 4.233.57.137:65223] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tdsaz.php"] [unique_id "ac0xej7Idlm5j9frhqRxeAAAAEM"]
[Wed Apr 01 22:53:47.614351 2026] [:error] [pid 8909:tid 8961] [client 4.233.57.137:37986] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ac0xezvP_a0662gDl6AD3wAAANQ"]
[Wed Apr 01 22:53:48.152229 2026] [:error] [pid 8995:tid 8999] [client 4.233.57.137:65235] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ac0xfOonaBjs3qxcRefplwAAAAE"]
[Wed Apr 01 22:53:48.653129 2026] [:error] [pid 8909:tid 8951] [client 4.233.57.137:38010] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ac0xfDvP_a0662gDl6AD5QAAAMo"]
[Wed Apr 01 22:53:49.137523 2026] [:error] [pid 8908:tid 8923] [client 4.233.57.137:55752] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ac0xffkmxtJXGnLdvgC_oQAAAIo"]
[Wed Apr 01 22:53:49.623614 2026] [:error] [pid 62559:tid 62562] [client 4.233.57.137:47026] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hfles.php"] [unique_id "ac0xfS7NKI8IaNKZFIfcHAAAAUE"]
[Wed Apr 01 22:53:50.240572 2026] [:error] [pid 8908:tid 8934] [client 4.233.57.137:60924] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hfles.php"] [unique_id "ac0xfvkmxtJXGnLdvgC_pgAAAJU"]
[Wed Apr 01 22:53:50.855624 2026] [:error] [pid 8908:tid 8925] [client 4.233.57.137:55718] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hfles.php"] [unique_id "ac0xfvkmxtJXGnLdvgC_qQAAAIw"]
[Wed Apr 01 22:53:51.479803 2026] [:error] [pid 62559:tid 62579] [client 4.233.57.137:40689] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hfles.php"] [unique_id "ac0xfy7NKI8IaNKZFIfcJwAAAVI"]
[Wed Apr 01 22:53:52.012295 2026] [:error] [pid 8909:tid 8951] [client 4.233.57.137:55787] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0xgDvP_a0662gDl6AD7QAAAMo"]
[Wed Apr 01 22:53:52.577838 2026] [:error] [pid 8995:tid 9001] [client 4.233.57.137:49315] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0xgOonaBjs3qxcRefpogAAAAM"]
[Wed Apr 01 22:53:53.781684 2026] [:error] [pid 62559:tid 62572] [client 4.233.57.137:40700] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0xgS7NKI8IaNKZFIfcNQAAAUs"]
[Wed Apr 01 22:53:54.783534 2026] [:error] [pid 17856:tid 17876] [client 4.233.57.137:40278] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac0xgj7Idlm5j9frhqRxewAAAFI"]
[Wed Apr 01 22:53:55.343817 2026] [:error] [pid 17856:tid 17866] [client 4.233.57.137:55694] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "ac0xgz7Idlm5j9frhqRxfgAAAEg"]
[Wed Apr 01 22:53:55.834046 2026] [:error] [pid 17856:tid 17881] [client 4.233.57.137:40679] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "ac0xgz7Idlm5j9frhqRxgQAAAFc"]
[Wed Apr 01 22:53:56.322730 2026] [:error] [pid 17856:tid 17877] [client 4.233.57.137:55764] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "ac0xhD7Idlm5j9frhqRxhwAAAFM"]
[Wed Apr 01 22:53:56.796368 2026] [:error] [pid 8910:tid 8990] [client 4.233.57.137:45778] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "ac0xhKJZINUcF3tYgEx8swAAARY"]
[Wed Apr 01 22:53:57.268980 2026] [:error] [pid 8995:tid 9013] [client 4.233.57.137:60881] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0xheonaBjs3qxcRefprQAAAA8"]
[Wed Apr 01 22:53:57.757715 2026] [:error] [pid 17856:tid 17873] [client 4.233.57.137:55738] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0xhT7Idlm5j9frhqRxkwAAAE8"]
[Wed Apr 01 22:53:58.235907 2026] [:error] [pid 62559:tid 62572] [client 4.233.57.137:55799] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0xhi7NKI8IaNKZFIfcSgAAAUs"]
[Wed Apr 01 22:53:58.758777 2026] [:error] [pid 62559:tid 62581] [client 4.233.57.137:40684] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac0xhi7NKI8IaNKZFIfcTQAAAVQ"]
[Wed Apr 01 22:53:59.262216 2026] [:error] [pid 8908:tid 8917] [client 4.233.57.137:40652] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "ac0xh_kmxtJXGnLdvgC_yAAAAIQ"]
[Wed Apr 01 22:53:59.751304 2026] [:error] [pid 62559:tid 62577] [client 4.233.57.137:65238] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "ac0xhy7NKI8IaNKZFIfcVgAAAVA"]
[Wed Apr 01 22:54:00.252000 2026] [:error] [pid 8995:tid 9002] [client 4.233.57.137:6124] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "ac0xiOonaBjs3qxcRefpsAAAAAQ"]
[Wed Apr 01 22:54:00.759512 2026] [:error] [pid 8908:tid 8913] [client 4.233.57.137:46978] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "ac0xiPkmxtJXGnLdvgC_0wAAAIA"]
[Wed Apr 01 22:54:01.271917 2026] [:error] [pid 62559:tid 62578] [client 4.233.57.137:55795] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0xiS7NKI8IaNKZFIfcVwAAAVE"]
[Wed Apr 01 22:54:01.777168 2026] [:error] [pid 62559:tid 62561] [client 4.233.57.137:65248] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0xiS7NKI8IaNKZFIfcWwAAAUA"]
[Wed Apr 01 22:54:02.275512 2026] [:error] [pid 8908:tid 8933] [client 4.233.57.137:65272] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0xivkmxtJXGnLdvgC_2gAAAJQ"]
[Wed Apr 01 22:54:02.770001 2026] [:error] [pid 8909:tid 8965] [client 4.233.57.137:6102] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-moonka.php"] [unique_id "ac0xijvP_a0662gDl6AD-gAAANg"]
[Wed Apr 01 22:54:03.252756 2026] [:error] [pid 8908:tid 8925] [client 4.233.57.137:47000] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "ac0xi_kmxtJXGnLdvgC_3AAAAIw"]
[Wed Apr 01 22:54:03.725354 2026] [:error] [pid 62559:tid 62585] [client 4.233.57.137:60893] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "ac0xiy7NKI8IaNKZFIfcZAAAAVg"]
[Wed Apr 01 22:54:04.206694 2026] [:error] [pid 62559:tid 62578] [client 4.233.57.137:65253] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "ac0xjC7NKI8IaNKZFIfcZgAAAVE"]
[Wed Apr 01 22:54:04.698574 2026] [:error] [pid 8909:tid 8950] [client 4.233.57.137:38013] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "ac0xjDvP_a0662gDl6AD_wAAAMk"]
[Wed Apr 01 22:54:05.182167 2026] [:error] [pid 62559:tid 62566] [client 4.233.57.137:45792] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "ac0xjS7NKI8IaNKZFIfccwAAAUU"]
[Wed Apr 01 22:54:05.685371 2026] [:error] [pid 62559:tid 62575] [client 4.233.57.137:6101] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "ac0xjS7NKI8IaNKZFIfceAAAAU4"]
[Wed Apr 01 22:54:06.199548 2026] [:error] [pid 8910:tid 8975] [client 4.233.57.137:60900] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "ac0xjqJZINUcF3tYgEx8uQAAAQc"]
[Wed Apr 01 22:54:06.691612 2026] [:error] [pid 62559:tid 62572] [client 4.233.57.137:6100] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "ac0xji7NKI8IaNKZFIfcgwAAAUs"]
[Wed Apr 01 22:54:07.173587 2026] [:error] [pid 62559:tid 62581] [client 4.233.57.137:55798] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0xjy7NKI8IaNKZFIfciAAAAVQ"]
[Wed Apr 01 22:54:07.694062 2026] [:error] [pid 62559:tid 62568] [client 4.233.57.137:55781] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0xjy7NKI8IaNKZFIfciwAAAUc"]
[Wed Apr 01 22:54:08.189805 2026] [:error] [pid 8909:tid 8963] [client 4.233.57.137:47023] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0xkDvP_a0662gDl6AEBwAAANY"]
[Wed Apr 01 22:54:08.695956 2026] [:error] [pid 62559:tid 62566] [client 4.233.57.137:40312] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac0xkC7NKI8IaNKZFIfcjwAAAUU"]
[Wed Apr 01 22:54:09.178697 2026] [:error] [pid 62559:tid 62580] [client 4.233.57.137:46977] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ac0xkS7NKI8IaNKZFIfclAAAAVM"]
[Wed Apr 01 22:54:09.687075 2026] [:error] [pid 62559:tid 62582] [client 4.233.57.137:6134] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ac0xkS7NKI8IaNKZFIfcmQAAAVU"]
[Wed Apr 01 22:54:10.204886 2026] [:error] [pid 62559:tid 62562] [client 4.233.57.137:38009] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ac0xki7NKI8IaNKZFIfcogAAAUE"]
[Wed Apr 01 22:54:10.689729 2026] [:error] [pid 62559:tid 62579] [client 4.233.57.137:40297] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ac0xki7NKI8IaNKZFIfcpAAAAVI"]
[Wed Apr 01 22:54:11.210442 2026] [:error] [pid 8908:tid 8936] [client 4.233.57.137:47030] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "ac0xk_kmxtJXGnLdvgC_9QAAAJc"]
[Wed Apr 01 22:54:11.732906 2026] [:error] [pid 8910:tid 8983] [client 4.233.57.137:55700] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "ac0xk6JZINUcF3tYgEx8vwAAAQ8"]
[Wed Apr 01 22:54:12.235810 2026] [:error] [pid 8910:tid 8979] [client 4.233.57.137:45789] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "ac0xlKJZINUcF3tYgEx8wgAAAQs"]
[Wed Apr 01 22:54:12.745492 2026] [:error] [pid 8995:tid 9018] [client 4.233.57.137:40273] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "ac0xlOonaBjs3qxcRefpugAAABQ"]
[Wed Apr 01 22:54:13.239184 2026] [:error] [pid 8910:tid 8968] [client 4.233.57.137:40277] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0xlaJZINUcF3tYgEx8xgAAAQA"]
[Wed Apr 01 22:54:13.751672 2026] [:error] [pid 17856:tid 17870] [client 4.233.57.137:64533] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0xlT7Idlm5j9frhqRxoQAAAEw"]
[Wed Apr 01 22:54:14.232890 2026] [:error] [pid 8908:tid 8928] [client 4.233.57.137:55730] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0xlvkmxtJXGnLdvgC__AAAAI8"]
[Wed Apr 01 22:54:14.724230 2026] [:error] [pid 8908:tid 8935] [client 4.233.57.137:40682] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac0xlvkmxtJXGnLdvgC__gAAAJY"]
[Wed Apr 01 22:54:15.209215 2026] [:error] [pid 8995:tid 9021] [client 4.233.57.137:45771] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/less.php"] [unique_id "ac0xl-onaBjs3qxcRefpvwAAABc"]
[Wed Apr 01 22:54:15.701135 2026] [:error] [pid 62559:tid 62580] [client 4.233.57.137:6082] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/less.php"] [unique_id "ac0xly7NKI8IaNKZFIfcxAAAAVM"]
[Wed Apr 01 22:54:22.587160 2026] [:error] [pid 62559:tid 62578] [client 4.233.57.137:47022] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ynjli.php"] [unique_id "ac0xni7NKI8IaNKZFIfc6wAAAVE"]
[Wed Apr 01 22:54:23.094335 2026] [:error] [pid 62559:tid 62577] [client 4.233.57.137:40299] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ynjli.php"] [unique_id "ac0xny7NKI8IaNKZFIfc8gAAAVA"]
[Wed Apr 01 22:54:23.581749 2026] [:error] [pid 8995:tid 9014] [client 4.233.57.137:40686] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ynjli.php"] [unique_id "ac0xn-onaBjs3qxcRefp0wAAABA"]
[Wed Apr 01 22:54:24.073179 2026] [:error] [pid 8908:tid 8921] [client 4.233.57.137:55780] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ynjli.php"] [unique_id "ac0xoPkmxtJXGnLdvgDAFgAAAIg"]
[Wed Apr 01 22:54:24.575109 2026] [:error] [pid 17856:tid 17860] [client 4.233.57.137:45765] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a6.php"] [unique_id "ac0xoD7Idlm5j9frhqRxrQAAAEI"]
[Wed Apr 01 22:54:25.052326 2026] [:error] [pid 62559:tid 62565] [client 4.233.57.137:65264] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a6.php"] [unique_id "ac0xoS7NKI8IaNKZFIfc_gAAAUQ"]
[Wed Apr 01 22:54:25.555382 2026] [:error] [pid 62559:tid 62575] [client 4.233.57.137:47036] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a6.php"] [unique_id "ac0xoS7NKI8IaNKZFIfdAQAAAU4"]
[Wed Apr 01 22:54:26.051910 2026] [:error] [pid 62559:tid 62585] [client 4.233.57.137:37954] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a6.php"] [unique_id "ac0xoi7NKI8IaNKZFIfdAwAAAVg"]
[Wed Apr 01 22:54:26.541181 2026] [:error] [pid 62559:tid 62579] [client 4.233.57.137:65264] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0xoi7NKI8IaNKZFIfdBgAAAVI"]
[Wed Apr 01 22:54:27.051334 2026] [:error] [pid 8909:tid 8949] [client 4.233.57.137:40683] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0xozvP_a0662gDl6AEJQAAAMg"]
[Wed Apr 01 22:54:27.526150 2026] [:error] [pid 8909:tid 8957] [client 4.233.57.137:63169] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0xozvP_a0662gDl6AEJwAAANA"]
[Wed Apr 01 22:54:28.012806 2026] [:error] [pid 8995:tid 9014] [client 4.233.57.137:55733] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac0xpOonaBjs3qxcRefp4QAAABA"]
[Wed Apr 01 22:54:28.550950 2026] [:error] [pid 17856:tid 17872] [client 4.233.57.137:65245] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sts.php"] [unique_id "ac0xpD7Idlm5j9frhqRxuQAAAE4"]
[Wed Apr 01 22:54:29.076412 2026] [:error] [pid 17856:tid 17882] [client 4.233.57.137:6110] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sts.php"] [unique_id "ac0xpT7Idlm5j9frhqRxvwAAAFg"]
[Wed Apr 01 22:54:29.556321 2026] [:error] [pid 8908:tid 8931] [client 4.233.57.137:60910] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sts.php"] [unique_id "ac0xpfkmxtJXGnLdvgDAJQAAAJI"]
[Wed Apr 01 22:54:30.049676 2026] [:error] [pid 62559:tid 62582] [client 4.233.57.137:6136] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sts.php"] [unique_id "ac0xpi7NKI8IaNKZFIfdFAAAAVU"]
[Wed Apr 01 22:54:30.529813 2026] [:error] [pid 8908:tid 8916] [client 4.233.57.137:40658] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac0xpvkmxtJXGnLdvgDALQAAAIM"]
[Wed Apr 01 22:54:31.070036 2026] [:error] [pid 8908:tid 8933] [client 4.233.57.137:6106] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac0xp_kmxtJXGnLdvgDAMQAAAJQ"]
[Wed Apr 01 22:54:31.565591 2026] [:error] [pid 8908:tid 8914] [client 4.233.57.137:65273] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac0xp_kmxtJXGnLdvgDAMwAAAIE"]
[Wed Apr 01 22:54:32.056339 2026] [:error] [pid 8910:tid 8983] [client 4.233.57.137:65270] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac0xqKJZINUcF3tYgEx84AAAAQ8"]
[Wed Apr 01 22:54:32.556150 2026] [:error] [pid 8908:tid 8935] [client 4.233.57.137:47008] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "ac0xqPkmxtJXGnLdvgDAOAAAAJY"]
[Wed Apr 01 22:54:33.059933 2026] [:error] [pid 8908:tid 8926] [client 4.233.57.137:55788] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "ac0xqfkmxtJXGnLdvgDAPgAAAI0"]
[Wed Apr 01 22:54:33.581173 2026] [:error] [pid 17856:tid 17880] [client 4.233.57.137:40664] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "ac0xqT7Idlm5j9frhqRxywAAAFY"]
[Wed Apr 01 22:54:34.186667 2026] [:error] [pid 8908:tid 8917] [client 4.233.57.137:64521] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "ac0xqvkmxtJXGnLdvgDASQAAAIQ"]
[Wed Apr 01 22:54:34.690903 2026] [:error] [pid 8909:tid 8964] [client 4.233.57.137:37994] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0xqjvP_a0662gDl6AEOAAAANc"]
[Wed Apr 01 22:54:35.213291 2026] [:error] [pid 8909:tid 8963] [client 4.233.57.137:40641] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0xqzvP_a0662gDl6AEPAAAANY"]
[Wed Apr 01 22:54:35.868583 2026] [:error] [pid 17856:tid 17860] [client 4.233.57.137:40680] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0xqz7Idlm5j9frhqRxzgAAAEI"]
[Wed Apr 01 22:54:36.487992 2026] [:error] [pid 8909:tid 8957] [client 4.233.57.137:60914] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac0xrDvP_a0662gDl6AERQAAANA"]
[Wed Apr 01 22:54:37.181726 2026] [:error] [pid 8909:tid 8950] [client 4.233.57.137:55793] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0xrTvP_a0662gDl6AESQAAAMk"]
[Wed Apr 01 22:54:37.852210 2026] [:error] [pid 62559:tid 62561] [client 4.233.57.137:40270] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0xrS7NKI8IaNKZFIfdHAAAAUA"]
[Wed Apr 01 22:54:38.654321 2026] [:error] [pid 8908:tid 8929] [client 4.233.57.137:60921] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0xrvkmxtJXGnLdvgDAUQAAAJA"]
[Wed Apr 01 22:54:39.170612 2026] [:error] [pid 17856:tid 17859] [client 4.233.57.137:65254] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac0xrz7Idlm5j9frhqRx1AAAAEE"]
[Wed Apr 01 22:54:39.831068 2026] [:error] [pid 62559:tid 62578] [client 4.233.57.137:55736] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "ac0xry7NKI8IaNKZFIfdIgAAAVE"]
[Wed Apr 01 22:54:40.404866 2026] [:error] [pid 17856:tid 17879] [client 4.233.57.137:55734] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "ac0xsD7Idlm5j9frhqRx2AAAAFU"]
[Wed Apr 01 22:54:41.070710 2026] [:error] [pid 62559:tid 62568] [client 4.233.57.137:40266] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "ac0xsS7NKI8IaNKZFIfdLAAAAUc"]
[Wed Apr 01 22:54:41.684654 2026] [:error] [pid 62559:tid 62574] [client 4.233.57.137:38002] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "ac0xsS7NKI8IaNKZFIfdMAAAAU0"]
[Wed Apr 01 22:54:42.204286 2026] [:error] [pid 8909:tid 8944] [client 4.233.57.137:65230] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a8.php"] [unique_id "ac0xsjvP_a0662gDl6AEXwAAAMM"]
[Wed Apr 01 22:54:43.060004 2026] [:error] [pid 8908:tid 8916] [client 4.233.57.137:40661] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a8.php"] [unique_id "ac0xs_kmxtJXGnLdvgDAYAAAAIM"]
[Wed Apr 01 22:54:44.079630 2026] [:error] [pid 8908:tid 8934] [client 4.233.57.137:40674] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a8.php"] [unique_id "ac0xtPkmxtJXGnLdvgDAZQAAAJU"]
[Wed Apr 01 22:54:45.004119 2026] [:error] [pid 62559:tid 62566] [client 4.233.57.137:55804] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a8.php"] [unique_id "ac0xtS7NKI8IaNKZFIfdQAAAAUU"]
[Wed Apr 01 22:54:45.560887 2026] [:error] [pid 62559:tid 62564] [client 4.233.57.137:47006] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0xtS7NKI8IaNKZFIfdRQAAAUM"]
[Wed Apr 01 22:54:46.148880 2026] [:error] [pid 8908:tid 8921] [client 4.233.57.137:60872] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0xtvkmxtJXGnLdvgDAZwAAAIg"]
[Wed Apr 01 22:54:47.048837 2026] [:error] [pid 8995:tid 9001] [client 4.233.57.137:55722] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0xt-onaBjs3qxcRefp-wAAAAM"]
[Wed Apr 01 22:54:47.804542 2026] [:error] [pid 8995:tid 9009] [client 4.233.57.137:40308] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac0xt-onaBjs3qxcRefqAgAAAAs"]
[Wed Apr 01 22:54:48.475525 2026] [:error] [pid 8909:tid 8964] [client 4.233.57.137:47034] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0xuDvP_a0662gDl6AEcgAAANc"]
[Wed Apr 01 22:54:49.039971 2026] [:error] [pid 8908:tid 8922] [client 4.233.57.137:45763] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0xufkmxtJXGnLdvgDAawAAAIk"]
[Wed Apr 01 22:54:49.908292 2026] [:error] [pid 17856:tid 17858] [client 4.233.57.137:42087] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0xuT7Idlm5j9frhqRx7AAAAEA"]
[Wed Apr 01 22:54:50.566963 2026] [:error] [pid 8908:tid 8916] [client 4.233.57.137:41762] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac0xuvkmxtJXGnLdvgDAbQAAAIM"]
[Wed Apr 01 22:54:51.087287 2026] [:error] [pid 8908:tid 8917] [client 4.233.57.137:60894] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "ac0xu_kmxtJXGnLdvgDAbgAAAIQ"]
[Wed Apr 01 22:54:51.586763 2026] [:error] [pid 8910:tid 8991] [client 4.233.57.137:64519] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "ac0xu6JZINUcF3tYgEx88wAAARc"]
[Wed Apr 01 22:54:52.107850 2026] [:error] [pid 8910:tid 8976] [client 4.233.57.137:55806] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "ac0xvKJZINUcF3tYgEx89gAAAQg"]
[Wed Apr 01 22:54:52.790178 2026] [:error] [pid 8910:tid 8985] [client 4.233.57.137:47021] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "ac0xvKJZINUcF3tYgEx89wAAARE"]
[Wed Apr 01 22:54:53.341533 2026] [:error] [pid 8910:tid 8983] [client 4.233.57.137:60926] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0xvaJZINUcF3tYgEx8-QAAAQ8"]
[Wed Apr 01 22:54:53.950868 2026] [:error] [pid 62559:tid 62581] [client 4.233.57.137:46984] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0xvS7NKI8IaNKZFIfdWgAAAVQ"]
[Wed Apr 01 22:54:54.601775 2026] [:error] [pid 8909:tid 8950] [client 4.233.57.137:55774] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0xvjvP_a0662gDl6AEeAAAAMk"]
[Wed Apr 01 22:54:55.186546 2026] [:error] [pid 8995:tid 9019] [client 4.233.57.137:47020] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac0xv-onaBjs3qxcRefqDQAAABU"]
[Wed Apr 01 22:54:55.713519 2026] [:error] [pid 8908:tid 8916] [client 4.233.57.137:6081] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Geforce.php"] [unique_id "ac0xv_kmxtJXGnLdvgDAeQAAAIM"]
[Wed Apr 01 22:54:56.374439 2026] [:error] [pid 62559:tid 62579] [client 4.233.57.137:6116] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Geforce.php"] [unique_id "ac0xwC7NKI8IaNKZFIfdZgAAAVI"]
[Wed Apr 01 22:54:56.883990 2026] [:error] [pid 8995:tid 9009] [client 4.233.57.137:64516] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Geforce.php"] [unique_id "ac0xwOonaBjs3qxcRefqEAAAAAs"]
[Wed Apr 01 22:54:57.685082 2026] [:error] [pid 8909:tid 8963] [client 4.233.57.137:45804] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Geforce.php"] [unique_id "ac0xwTvP_a0662gDl6AEewAAANY"]
[Wed Apr 01 22:54:58.534482 2026] [:error] [pid 62559:tid 62582] [client 4.233.57.137:40696] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "ac0xwi7NKI8IaNKZFIfdbwAAAVU"]
[Wed Apr 01 22:54:59.123435 2026] [:error] [pid 8909:tid 8950] [client 4.233.57.137:45799] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "ac0xwzvP_a0662gDl6AEgwAAAMk"]
[Wed Apr 01 22:55:00.161152 2026] [:error] [pid 17856:tid 17873] [client 4.233.57.137:64523] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "ac0xxD7Idlm5j9frhqRyBQAAAE8"]
[Wed Apr 01 22:55:01.269622 2026] [:error] [pid 8909:tid 8956] [client 4.233.57.137:55800] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "ac0xxTvP_a0662gDl6AEiQAAAM8"]
[Wed Apr 01 22:55:02.054629 2026] [:error] [pid 8909:tid 8941] [client 4.233.57.137:6103] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ccv.php"] [unique_id "ac0xxjvP_a0662gDl6AEigAAAMA"]
[Wed Apr 01 22:55:03.339442 2026] [:error] [pid 8908:tid 8929] [client 4.233.57.137:47670] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ccv.php"] [unique_id "ac0xx_kmxtJXGnLdvgDAlAAAAJA"]
[Wed Apr 01 22:55:04.430936 2026] [:error] [pid 62559:tid 62570] [client 4.233.57.137:38003] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ccv.php"] [unique_id "ac0xyC7NKI8IaNKZFIfdfgAAAUk"]
[Wed Apr 01 22:55:05.249848 2026] [:error] [pid 8909:tid 8953] [client 4.233.57.137:6139] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ccv.php"] [unique_id "ac0xyTvP_a0662gDl6AEkgAAAMw"]
[Wed Apr 01 22:55:06.255070 2026] [:error] [pid 8909:tid 8949] [client 4.233.57.137:55786] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luyuc.php"] [unique_id "ac0xyjvP_a0662gDl6AElwAAAMg"]
[Wed Apr 01 22:55:06.829166 2026] [:error] [pid 62559:tid 62577] [client 4.233.57.137:38000] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luyuc.php"] [unique_id "ac0xyi7NKI8IaNKZFIfdhwAAAVA"]
[Wed Apr 01 22:55:07.535383 2026] [:error] [pid 62559:tid 62583] [client 4.233.57.137:60901] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luyuc.php"] [unique_id "ac0xyy7NKI8IaNKZFIfdigAAAVY"]
[Wed Apr 01 22:55:08.491204 2026] [:error] [pid 62559:tid 62568] [client 4.233.57.137:55687] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/luyuc.php"] [unique_id "ac0xzC7NKI8IaNKZFIfdkwAAAUc"]
[Wed Apr 01 22:55:09.246210 2026] [:error] [pid 8910:tid 8973] [client 4.233.57.137:55771] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "ac0xzaJZINUcF3tYgEx9BwAAAQU"]
[Wed Apr 01 22:55:09.855113 2026] [:error] [pid 62559:tid 62571] [client 4.233.57.137:40265] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "ac0xzS7NKI8IaNKZFIfdmgAAAUo"]
[Wed Apr 01 22:55:10.676380 2026] [:error] [pid 62559:tid 62572] [client 4.233.57.137:47033] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "ac0xzi7NKI8IaNKZFIfdngAAAUs"]
[Wed Apr 01 22:55:11.390083 2026] [:error] [pid 8908:tid 8916] [client 4.233.57.137:55746] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "ac0xz_kmxtJXGnLdvgDAqQAAAIM"]
[Wed Apr 01 22:55:11.872901 2026] [:error] [pid 8908:tid 8936] [client 4.233.57.137:6112] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htto.php"] [unique_id "ac0xz_kmxtJXGnLdvgDArAAAAJc"]
[Wed Apr 01 22:55:12.389493 2026] [:error] [pid 8908:tid 8923] [client 4.233.57.137:55710] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htto.php"] [unique_id "ac0x0PkmxtJXGnLdvgDAswAAAIo"]
[Wed Apr 01 22:55:12.871900 2026] [:error] [pid 8908:tid 8914] [client 4.233.57.137:40280] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htto.php"] [unique_id "ac0x0PkmxtJXGnLdvgDAtgAAAIE"]
[Wed Apr 01 22:55:13.421790 2026] [:error] [pid 8908:tid 8926] [client 4.233.57.137:64515] [client 4.233.57.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htto.php"] [unique_id "ac0x0fkmxtJXGnLdvgDAvQAAAI0"]
[Thu Apr 02 00:18:47.542505 2026] [:error] [pid 8908:tid 8927] [client 102.165.48.81:63899] [client 102.165.48.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.165.48.81, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ac1FZ_kmxtJXGnLdvgD5mgAAAI4"]
[Thu Apr 02 00:18:49.943834 2026] [:error] [pid 8908:tid 8936] [client 102.165.48.81:63899] [client 102.165.48.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ac1FafkmxtJXGnLdvgD5qgAAAJc"]
[Thu Apr 02 00:18:50.942095 2026] [:error] [pid 8909:tid 8942] [client 102.165.48.81:64700] [client 102.165.48.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ac1FajvP_a0662gDl6AwsQAAAME"]
[Thu Apr 02 00:18:51.944792 2026] [:error] [pid 8908:tid 8914] [client 102.165.48.81:64889] [client 102.165.48.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ac1Fa_kmxtJXGnLdvgD5sgAAAIE"]
[Thu Apr 02 00:18:52.956729 2026] [:error] [pid 8910:tid 8979] [client 102.165.48.81:65067] [client 102.165.48.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ac1FbKJZINUcF3tYgEyQpAAAAQs"]
[Thu Apr 02 02:52:54.586189 2026] [:error] [pid 16761:tid 16786] [client 49.51.39.209:60622] [client 49.51.39.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ac1pht4bJXDGRqKZnzx1OQAAAFY"]
[Thu Apr 02 07:26:52.416046 2026] [:error] [pid 37543:tid 37560] [client 20.111.63.125:57586] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac2pvHhdk2bEYJCvILY-6gAAAU8"]
[Thu Apr 02 07:26:54.316802 2026] [:error] [pid 37543:tid 37548] [client 20.111.63.125:53959] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac2pvnhdk2bEYJCvILY-7QAAAUM"]
[Thu Apr 02 07:26:56.142032 2026] [:error] [pid 59201:tid 59286] [client 20.111.63.125:61909] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac2pwMAC0Tw8eL6gzZ6XAQAAAJM"]
[Thu Apr 02 07:26:59.929048 2026] [:error] [pid 37543:tid 37549] [client 20.111.63.125:6569] [client 20.111.63.125] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac2pw3hdk2bEYJCvILY-8wAAAUQ"]
[Thu Apr 02 09:56:27.298267 2026] [:error] [pid 37543:tid 37564] [client 43.155.129.131:52770] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ac3My3hdk2bEYJCvILZd3gAAAVM"]
[Thu Apr 02 10:02:09.764673 2026] [:error] [pid 23927:tid 23945] [client 105.99.104.226:61798] [client 105.99.104.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.99.104.226, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ac3OIUsZwqCndhl9uKC1nwAAAZA"]
[Thu Apr 02 12:12:59.448435 2026] [:error] [pid 59305:tid 59331] [client 43.164.197.224:44522] [client 43.164.197.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ac3sy6r2tV4rDwKFxKeP8AAAANY"]
[Thu Apr 02 20:04:22.115777 2026] [:error] [pid 29467:tid 29484] [client 20.240.235.228:16253] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5bRr4VUBFCJAq-WOmEFAAAAQ4"]
[Thu Apr 02 20:04:22.668593 2026] [:error] [pid 29467:tid 29487] [client 20.240.235.228:16243] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5bRr4VUBFCJAq-WOmEFwAAARE"]
[Thu Apr 02 20:04:23.238905 2026] [:error] [pid 54384:tid 54391] [client 20.240.235.228:16159] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5bR9WWpaby3TVN7McRBAAAAcU"]
[Thu Apr 02 20:04:24.777864 2026] [:error] [pid 29467:tid 29489] [client 20.240.235.228:16250] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5bSL4VUBFCJAq-WOmEIQAAARM"]
[Thu Apr 02 21:32:43.183629 2026] [:error] [pid 37543:tid 37554] [client 120.71.59.24:40674] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ac5v-3hdk2bEYJCvILb2IQAAAUk"]
[Fri Apr 03 02:00:15.590541 2026] [:error] [pid 25470:tid 25472] [client 106.195.3.179:46871] [client 106.195.3.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.195.3.179, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ac6ur3hROcck6_9HYyg2IwAAAMA"]
[Fri Apr 03 03:09:02.247680 2026] [ssl:error] [pid 6718:tid 6724] [client 15.204.161.7:4974] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourcause.com/
[Fri Apr 03 03:56:58.961376 2026] [ssl:error] [pid 22672:tid 22735] [client 15.204.161.7:8446] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourcause.com/
[Fri Apr 03 05:48:23.163272 2026] [:error] [pid 22672:tid 22731] [client 43.153.7.191:35864] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ac7kJ6zrgXkFSOK0fvqKXAAAAEw"]
[Fri Apr 03 05:57:54.850625 2026] [ssl:error] [pid 58590:tid 58615] [client 40.160.16.154:55466] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourcause.com/
[Fri Apr 03 06:28:06.408007 2026] [ssl:error] [pid 22673:tid 22766] [client 40.160.16.154:59336] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourcause.com/
[Fri Apr 03 13:07:28.393017 2026] [:error] [pid 33446:tid 33485] [client 77.90.185.105:59874] [client 77.90.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "ac9LENg3dCqFYIIdw0qGzAAAAEg"]
[Fri Apr 03 13:07:28.393748 2026] [:error] [pid 33446:tid 33486] [client 77.90.185.105:59878] [client 77.90.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "ac9LENg3dCqFYIIdw0qGzQAAAEk"]
[Fri Apr 03 13:07:29.947764 2026] [:error] [pid 33447:tid 33524] [client 77.90.185.105:58894] [client 77.90.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "ac9LEUgaPmDHz92j4lPhSwAAAJQ"]
[Fri Apr 03 13:07:29.953143 2026] [:error] [pid 33445:tid 33466] [client 77.90.185.105:58884] [client 77.90.185.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "ac9LEVlRNZ0iDVmJWM0BRAAAABA"]
[Fri Apr 03 17:11:47.495338 2026] [:error] [pid 33445:tid 33465] [client 45.131.195.95:62713] [client 45.131.195.95] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac-EU1lRNZ0iDVmJWM2ImAAAAA8"]
[Fri Apr 03 19:03:36.255947 2026] [:error] [pid 35469:tid 35487] [client 103.10.31.79:52704] [client 103.10.31.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.10.31.79, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ac-eiKGvTIc8-wY3jUQoRAAAARA"]
[Fri Apr 03 19:03:40.794906 2026] [:error] [pid 33445:tid 33468] [client 117.198.99.189:53641] [client 117.198.99.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.198.99.189, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ac-ejFlRNZ0iDVmJWM3MugAAABI"]
[Fri Apr 03 21:42:35.865129 2026] [:error] [pid 35469:tid 35487] [client 49.51.132.100:43006] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ac_Dy6GvTIc8-wY3jUSoxQAAARA"]
[Fri Apr 03 23:01:25.710623 2026] [:error] [pid 33446:tid 33487] [client 45.92.1.144:65063] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "ac_WRdg3dCqFYIIdw0qR7QAAAEo"]
[Fri Apr 03 23:01:26.193868 2026] [:error] [pid 33445:tid 33465] [client 45.92.1.144:59787] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "ac_WRllRNZ0iDVmJWM1K4gAAAA8"]
[Fri Apr 03 23:01:26.687992 2026] [:error] [pid 40562:tid 40584] [client 45.92.1.144:60340] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "ac_WRjfFMXuP9zvqCeqn1AAAAZM"]
[Fri Apr 03 23:01:27.665228 2026] [:error] [pid 33542:tid 33549] [client 45.92.1.144:61457] [client 45.92.1.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/txets.php"] [unique_id "ac_WR3wb6uB1LaGtepYeQQAAAMQ"]
[Sat Apr 04 00:49:03.160262 2026] [:error] [pid 12089:tid 12141] [client 4.233.94.87:48879] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "ac_vf0SCG1Z_hi7I_jJX1wAAAI4"]
[Sat Apr 04 00:49:03.673921 2026] [:error] [pid 12081:tid 12109] [client 4.233.94.87:42597] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "ac_vf6MJBCYerZTQdmLg3gAAAEk"]
[Sat Apr 04 00:49:04.390133 2026] [:error] [pid 12097:tid 12174] [client 4.233.94.87:5627] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "ac_vgBnkcvJ01y2CY3mYfgAAANM"]
[Sat Apr 04 00:49:04.879671 2026] [:error] [pid 12081:tid 12102] [client 4.233.94.87:63013] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "ac_vgKMJBCYerZTQdmLg5AAAAEI"]
[Sat Apr 04 00:49:05.364184 2026] [:error] [pid 12081:tid 12108] [client 4.233.94.87:63015] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mail.php"] [unique_id "ac_vgaMJBCYerZTQdmLg6AAAAEg"]
[Sat Apr 04 00:49:05.974561 2026] [:error] [pid 12089:tid 12144] [client 4.233.94.87:5626] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mail.php"] [unique_id "ac_vgUSCG1Z_hi7I_jJX2AAAAJE"]
[Sat Apr 04 00:49:06.498435 2026] [:error] [pid 12233:tid 12241] [client 4.233.94.87:52632] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mail.php"] [unique_id "ac_vghQDAzkmdfiSgI1-pQAAAQY"]
[Sat Apr 04 00:49:07.025765 2026] [:error] [pid 12081:tid 12120] [client 4.233.94.87:42605] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mail.php"] [unique_id "ac_vg6MJBCYerZTQdmLg9AAAAFQ"]
[Sat Apr 04 00:49:07.592837 2026] [:error] [pid 12233:tid 12258] [client 4.233.94.87:62403] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aapig.php"] [unique_id "ac_vgxQDAzkmdfiSgI1-qQAAARc"]
[Sat Apr 04 00:49:08.286000 2026] [:error] [pid 12097:tid 12166] [client 4.233.94.87:62407] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aapig.php"] [unique_id "ac_vhBnkcvJ01y2CY3mYgwAAAMs"]
[Sat Apr 04 00:49:08.804635 2026] [:error] [pid 12089:tid 12150] [client 4.233.94.87:48882] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aapig.php"] [unique_id "ac_vhESCG1Z_hi7I_jJX3AAAAJc"]
[Sat Apr 04 00:49:09.274902 2026] [:error] [pid 12089:tid 12140] [client 4.233.94.87:62442] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aapig.php"] [unique_id "ac_vhUSCG1Z_hi7I_jJX3gAAAI0"]
[Sat Apr 04 00:49:09.764914 2026] [:error] [pid 12233:tid 12236] [client 4.233.94.87:5589] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/web.php"] [unique_id "ac_vhRQDAzkmdfiSgI1-rgAAAQE"]
[Sat Apr 04 00:49:10.286406 2026] [:error] [pid 12089:tid 12131] [client 4.233.94.87:62431] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/web.php"] [unique_id "ac_vhkSCG1Z_hi7I_jJX4QAAAIQ"]
[Sat Apr 04 00:49:10.806406 2026] [:error] [pid 12089:tid 12144] [client 4.233.94.87:63028] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/web.php"] [unique_id "ac_vhkSCG1Z_hi7I_jJX5QAAAJE"]
[Sat Apr 04 00:49:11.301399 2026] [:error] [pid 12097:tid 12168] [client 4.233.94.87:47068] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/web.php"] [unique_id "ac_vhxnkcvJ01y2CY3mYjAAAAM0"]
[Sat Apr 04 00:49:11.803486 2026] [:error] [pid 12097:tid 12164] [client 4.233.94.87:48867] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class.php"] [unique_id "ac_vhxnkcvJ01y2CY3mYjgAAAMk"]
[Sat Apr 04 00:49:12.297500 2026] [:error] [pid 12089:tid 12143] [client 4.233.94.87:62411] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class.php"] [unique_id "ac_viESCG1Z_hi7I_jJX6AAAAJA"]
[Sat Apr 04 00:49:12.776555 2026] [:error] [pid 12233:tid 12235] [client 4.233.94.87:5599] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class.php"] [unique_id "ac_viBQDAzkmdfiSgI1-tAAAAQA"]
[Sat Apr 04 00:49:13.265775 2026] [:error] [pid 12089:tid 12145] [client 4.233.94.87:47099] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class.php"] [unique_id "ac_viUSCG1Z_hi7I_jJX7QAAAJI"]
[Sat Apr 04 00:49:13.743494 2026] [:error] [pid 12233:tid 12259] [client 4.233.94.87:42622] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wander.php"] [unique_id "ac_viRQDAzkmdfiSgI1-tgAAARg"]
[Sat Apr 04 00:49:14.351725 2026] [:error] [pid 12097:tid 12163] [client 4.233.94.87:48858] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wander.php"] [unique_id "ac_vihnkcvJ01y2CY3mYlgAAAMg"]
[Sat Apr 04 00:49:14.900534 2026] [:error] [pid 12097:tid 12171] [client 4.233.94.87:55536] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wander.php"] [unique_id "ac_vihnkcvJ01y2CY3mYmQAAANA"]
[Sat Apr 04 00:49:15.391627 2026] [:error] [pid 12089:tid 12144] [client 4.233.94.87:45283] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wander.php"] [unique_id "ac_vi0SCG1Z_hi7I_jJX8AAAAJE"]
[Sat Apr 04 00:49:16.062419 2026] [:error] [pid 12097:tid 12170] [client 4.233.94.87:52659] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "ac_vjBnkcvJ01y2CY3mYnQAAAM8"]
[Sat Apr 04 00:49:16.615647 2026] [:error] [pid 12233:tid 12241] [client 4.233.94.87:5593] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "ac_vjBQDAzkmdfiSgI1-xQAAAQY"]
[Sat Apr 04 00:49:17.123035 2026] [:error] [pid 12081:tid 12115] [client 4.233.94.87:45273] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "ac_vjaMJBCYerZTQdmLg_wAAAE8"]
[Sat Apr 04 00:49:17.617539 2026] [:error] [pid 12233:tid 12237] [client 4.233.94.87:45297] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "ac_vjRQDAzkmdfiSgI1-ygAAAQI"]
[Sat Apr 04 00:49:18.189056 2026] [:error] [pid 12233:tid 12251] [client 4.233.94.87:44559] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "ac_vjhQDAzkmdfiSgI1-zgAAARA"]
[Sat Apr 04 00:49:18.665599 2026] [:error] [pid 12097:tid 12166] [client 4.233.94.87:62981] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "ac_vjhnkcvJ01y2CY3mYoQAAAMs"]
[Sat Apr 04 00:49:19.142806 2026] [:error] [pid 12081:tid 12105] [client 4.233.94.87:48844] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "ac_vj6MJBCYerZTQdmLhAQAAAEU"]
[Sat Apr 04 00:49:19.681822 2026] [:error] [pid 12081:tid 12116] [client 4.233.94.87:48859] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lp6.php"] [unique_id "ac_vj6MJBCYerZTQdmLhBAAAAFA"]
[Sat Apr 04 00:49:20.161741 2026] [:error] [pid 12097:tid 12154] [client 4.233.94.87:41354] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_vkBnkcvJ01y2CY3mYpQAAAMA"]
[Sat Apr 04 00:49:20.648414 2026] [:error] [pid 12233:tid 12243] [client 4.233.94.87:47063] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_vkBQDAzkmdfiSgI1-1wAAAQg"]
[Sat Apr 04 00:49:21.150358 2026] [:error] [pid 12233:tid 12258] [client 4.233.94.87:45270] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_vkRQDAzkmdfiSgI1-2QAAARc"]
[Sat Apr 04 00:49:21.635048 2026] [:error] [pid 12081:tid 12118] [client 4.233.94.87:47059] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_vkaMJBCYerZTQdmLhCAAAAFI"]
[Sat Apr 04 00:49:22.113415 2026] [:error] [pid 12233:tid 12241] [client 4.233.94.87:62986] [client 4.233.94.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac_vkhQDAzkmdfiSgI1-3AAAAQY"]
[Sat Apr 04 00:49:22.589983 2026] [:error] [pid 12081:tid 12120] [client 4.233.94.87:62429] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aves.php"] [unique_id "ac_vkqMJBCYerZTQdmLhCwAAAFQ"]
[Sat Apr 04 00:49:23.097632 2026] [:error] [pid 12233:tid 12249] [client 4.233.94.87:47042] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aves.php"] [unique_id "ac_vkxQDAzkmdfiSgI1-4AAAAQ4"]
[Sat Apr 04 00:49:23.599548 2026] [:error] [pid 12233:tid 12252] [client 4.233.94.87:52616] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aves.php"] [unique_id "ac_vkxQDAzkmdfiSgI1-4wAAARE"]
[Sat Apr 04 00:49:24.083774 2026] [:error] [pid 12233:tid 12256] [client 4.233.94.87:5597] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/webadmin.php"] [unique_id "ac_vlBQDAzkmdfiSgI1-5wAAARU"]
[Sat Apr 04 00:49:24.599138 2026] [:error] [pid 12081:tid 12104] [client 4.233.94.87:47045] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/webadmin.php"] [unique_id "ac_vlKMJBCYerZTQdmLhDQAAAEQ"]
[Sat Apr 04 00:49:25.104645 2026] [:error] [pid 12081:tid 12116] [client 4.233.94.87:62433] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/webadmin.php"] [unique_id "ac_vlaMJBCYerZTQdmLhEAAAAFA"]
[Sat Apr 04 00:49:25.583228 2026] [:error] [pid 12081:tid 12121] [client 4.233.94.87:48845] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/webadmin.php"] [unique_id "ac_vlaMJBCYerZTQdmLhEwAAAFU"]
[Sat Apr 04 00:49:26.057560 2026] [:error] [pid 12097:tid 12171] [client 4.233.94.87:5584] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/to.php"] [unique_id "ac_vlhnkcvJ01y2CY3mYsAAAANA"]
[Sat Apr 04 00:49:26.612333 2026] [:error] [pid 12081:tid 12118] [client 4.233.94.87:5579] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/to.php"] [unique_id "ac_vlqMJBCYerZTQdmLhFwAAAFI"]
[Sat Apr 04 00:49:27.181080 2026] [:error] [pid 12081:tid 12100] [client 4.233.94.87:5628] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/to.php"] [unique_id "ac_vl6MJBCYerZTQdmLhGQAAAEA"]
[Sat Apr 04 00:49:27.696473 2026] [:error] [pid 12081:tid 12104] [client 4.233.94.87:54409] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/to.php"] [unique_id "ac_vl6MJBCYerZTQdmLhHAAAAEQ"]
[Sat Apr 04 00:49:28.190052 2026] [:error] [pid 12233:tid 12240] [client 4.233.94.87:48861] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_vmBQDAzkmdfiSgI1-8QAAAQU"]
[Sat Apr 04 00:49:28.684855 2026] [:error] [pid 12089:tid 12127] [client 4.233.94.87:45296] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_vmESCG1Z_hi7I_jJYBAAAAIA"]
[Sat Apr 04 00:49:29.168872 2026] [:error] [pid 12081:tid 12103] [client 4.233.94.87:45271] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_vmaMJBCYerZTQdmLhJAAAAEM"]
[Sat Apr 04 00:49:29.660817 2026] [:error] [pid 12081:tid 12106] [client 4.233.94.87:48857] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_vmaMJBCYerZTQdmLhJgAAAEY"]
[Sat Apr 04 00:49:30.207667 2026] [:error] [pid 12089:tid 12144] [client 4.233.94.87:63014] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "ac_vmkSCG1Z_hi7I_jJYBgAAAJE"]
[Sat Apr 04 00:49:30.694185 2026] [:error] [pid 12081:tid 12103] [client 4.233.94.87:52663] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "ac_vmqMJBCYerZTQdmLhLwAAAEM"]
[Sat Apr 04 00:49:31.209317 2026] [:error] [pid 12097:tid 12155] [client 4.233.94.87:42567] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "ac_vmxnkcvJ01y2CY3mYugAAAME"]
[Sat Apr 04 00:49:31.740616 2026] [:error] [pid 12081:tid 12105] [client 4.233.94.87:62980] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/yanz.php"] [unique_id "ac_vm6MJBCYerZTQdmLhNQAAAEU"]
[Sat Apr 04 00:49:32.216480 2026] [:error] [pid 12097:tid 12165] [client 4.233.94.87:52652] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/v3.php"] [unique_id "ac_vnBnkcvJ01y2CY3mYvQAAAMo"]
[Sat Apr 04 00:49:32.689666 2026] [:error] [pid 12081:tid 12117] [client 4.233.94.87:42619] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/v3.php"] [unique_id "ac_vnKMJBCYerZTQdmLhNgAAAFE"]
[Sat Apr 04 00:49:33.166962 2026] [:error] [pid 12089:tid 12128] [client 4.233.94.87:45266] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/v3.php"] [unique_id "ac_vnUSCG1Z_hi7I_jJYCQAAAIE"]
[Sat Apr 04 00:49:33.642013 2026] [:error] [pid 12081:tid 12104] [client 4.233.94.87:42587] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/v3.php"] [unique_id "ac_vnaMJBCYerZTQdmLhOQAAAEQ"]
[Sat Apr 04 00:49:34.114877 2026] [:error] [pid 12233:tid 12242] [client 4.233.94.87:47043] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ac_vnhQDAzkmdfiSgI1-_AAAAQc"]
[Sat Apr 04 00:49:34.608045 2026] [:error] [pid 12081:tid 12114] [client 4.233.94.87:5623] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ac_vnqMJBCYerZTQdmLhPAAAAE4"]
[Sat Apr 04 00:49:35.117412 2026] [:error] [pid 12233:tid 12248] [client 4.233.94.87:45306] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ac_vnxQDAzkmdfiSgI1_AQAAAQ0"]
[Sat Apr 04 00:49:35.597997 2026] [:error] [pid 12233:tid 12236] [client 4.233.94.87:42577] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ac_vnxQDAzkmdfiSgI1_AwAAAQE"]
[Sat Apr 04 00:49:36.075650 2026] [:error] [pid 12233:tid 12255] [client 4.233.94.87:63007] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/24.php"] [unique_id "ac_voBQDAzkmdfiSgI1_BwAAARQ"]
[Sat Apr 04 00:49:36.548700 2026] [:error] [pid 12233:tid 12258] [client 4.233.94.87:48850] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/24.php"] [unique_id "ac_voBQDAzkmdfiSgI1_CwAAARc"]
[Sat Apr 04 00:49:37.043276 2026] [:error] [pid 12081:tid 12113] [client 4.233.94.87:48865] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/24.php"] [unique_id "ac_voaMJBCYerZTQdmLhQwAAAE0"]
[Sat Apr 04 00:49:37.521248 2026] [:error] [pid 12233:tid 12257] [client 4.233.94.87:52642] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/24.php"] [unique_id "ac_voRQDAzkmdfiSgI1_DwAAARY"]
[Sat Apr 04 00:49:38.053694 2026] [:error] [pid 12233:tid 12253] [client 4.233.94.87:48846] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock.php"] [unique_id "ac_vohQDAzkmdfiSgI1_EAAAARI"]
[Sat Apr 04 00:49:38.599779 2026] [:error] [pid 12081:tid 12116] [client 4.233.94.87:5585] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock.php"] [unique_id "ac_voqMJBCYerZTQdmLhRwAAAFA"]
[Sat Apr 04 00:49:39.141194 2026] [:error] [pid 12081:tid 12117] [client 4.233.94.87:42590] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock.php"] [unique_id "ac_vo6MJBCYerZTQdmLhSwAAAFE"]
[Sat Apr 04 00:49:39.628949 2026] [:error] [pid 12233:tid 12236] [client 4.233.94.87:48878] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lock.php"] [unique_id "ac_voxQDAzkmdfiSgI1_EgAAAQE"]
[Sat Apr 04 00:49:40.226227 2026] [:error] [pid 12233:tid 12255] [client 4.233.94.87:47091] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aj.php"] [unique_id "ac_vpBQDAzkmdfiSgI1_FgAAARQ"]
[Sat Apr 04 00:49:40.710887 2026] [:error] [pid 12089:tid 12135] [client 4.233.94.87:42621] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aj.php"] [unique_id "ac_vpESCG1Z_hi7I_jJYGQAAAIg"]
[Sat Apr 04 00:49:41.223757 2026] [:error] [pid 12233:tid 12239] [client 4.233.94.87:45266] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aj.php"] [unique_id "ac_vpRQDAzkmdfiSgI1_GQAAAQQ"]
[Sat Apr 04 00:49:41.707254 2026] [:error] [pid 12089:tid 12151] [client 4.233.94.87:52645] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aj.php"] [unique_id "ac_vpUSCG1Z_hi7I_jJYHQAAAJg"]
[Sat Apr 04 00:49:42.260550 2026] [:error] [pid 12233:tid 12249] [client 4.233.94.87:47070] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "ac_vphQDAzkmdfiSgI1_HAAAAQ4"]
[Sat Apr 04 00:49:42.836389 2026] [:error] [pid 12081:tid 12122] [client 4.233.94.87:62430] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "ac_vpqMJBCYerZTQdmLhUQAAAFY"]
[Sat Apr 04 00:49:43.325115 2026] [:error] [pid 12233:tid 12241] [client 4.233.94.87:47103] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "ac_vpxQDAzkmdfiSgI1_HQAAAQY"]
[Sat Apr 04 00:49:43.830181 2026] [:error] [pid 12089:tid 12141] [client 4.233.94.87:45295] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "ac_vp0SCG1Z_hi7I_jJYJQAAAI4"]
[Sat Apr 04 00:49:44.313707 2026] [:error] [pid 12233:tid 12235] [client 4.233.94.87:52670] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wqqs.php"] [unique_id "ac_vqBQDAzkmdfiSgI1_IAAAAQA"]
[Sat Apr 04 00:49:44.794012 2026] [:error] [pid 12233:tid 12239] [client 4.233.94.87:44547] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wqqs.php"] [unique_id "ac_vqBQDAzkmdfiSgI1_IQAAAQQ"]
[Sat Apr 04 00:49:45.280089 2026] [:error] [pid 12081:tid 12103] [client 4.233.94.87:5629] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wqqs.php"] [unique_id "ac_vqaMJBCYerZTQdmLhVQAAAEM"]
[Sat Apr 04 00:49:45.757550 2026] [:error] [pid 12233:tid 12237] [client 4.233.94.87:52669] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wqqs.php"] [unique_id "ac_vqRQDAzkmdfiSgI1_JQAAAQI"]
[Sat Apr 04 00:49:46.260917 2026] [:error] [pid 12081:tid 12110] [client 4.233.94.87:5590] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ac_vqqMJBCYerZTQdmLhWgAAAEo"]
[Sat Apr 04 00:49:46.743671 2026] [:error] [pid 12233:tid 12252] [client 4.233.94.87:45298] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ac_vqhQDAzkmdfiSgI1_KgAAARE"]
[Sat Apr 04 00:49:47.320902 2026] [:error] [pid 12089:tid 12148] [client 4.233.94.87:42618] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ac_vq0SCG1Z_hi7I_jJYLAAAAJU"]
[Sat Apr 04 00:49:47.850027 2026] [:error] [pid 12097:tid 12166] [client 4.233.94.87:47052] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ac_vqxnkcvJ01y2CY3mY3AAAAMs"]
[Sat Apr 04 00:49:48.329117 2026] [:error] [pid 12081:tid 12111] [client 4.233.94.87:48841] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_vrKMJBCYerZTQdmLhYgAAAEs"]
[Sat Apr 04 00:49:48.811672 2026] [:error] [pid 12233:tid 12242] [client 4.233.94.87:5575] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_vrBQDAzkmdfiSgI1_LQAAAQc"]
[Sat Apr 04 00:49:49.286362 2026] [:error] [pid 12097:tid 12168] [client 4.233.94.87:52627] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_vrRnkcvJ01y2CY3mY3wAAAM0"]
[Sat Apr 04 00:49:49.759638 2026] [:error] [pid 12233:tid 12253] [client 4.233.94.87:5603] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_vrRQDAzkmdfiSgI1_MQAAARI"]
[Sat Apr 04 00:49:50.235946 2026] [:error] [pid 12089:tid 12145] [client 4.233.94.87:62415] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "ac_vrkSCG1Z_hi7I_jJYMgAAAJI"]
[Sat Apr 04 00:49:50.738807 2026] [:error] [pid 12089:tid 12137] [client 4.233.94.87:45275] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "ac_vrkSCG1Z_hi7I_jJYNAAAAIo"]
[Sat Apr 04 00:49:51.282848 2026] [:error] [pid 12081:tid 12113] [client 4.233.94.87:42573] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "ac_vr6MJBCYerZTQdmLhagAAAE0"]
[Sat Apr 04 00:49:51.762580 2026] [:error] [pid 12233:tid 12244] [client 4.233.94.87:48876] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xc0252.php"] [unique_id "ac_vrxQDAzkmdfiSgI1_NgAAAQk"]
[Sat Apr 04 00:49:52.314331 2026] [:error] [pid 12233:tid 12250] [client 4.233.94.87:45274] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "ac_vsBQDAzkmdfiSgI1_OgAAAQ8"]
[Sat Apr 04 00:49:52.813064 2026] [:error] [pid 12097:tid 12178] [client 4.233.94.87:47080] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "ac_vsBnkcvJ01y2CY3mY5wAAANc"]
[Sat Apr 04 00:49:53.310207 2026] [:error] [pid 12089:tid 12147] [client 4.233.94.87:45262] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "ac_vsUSCG1Z_hi7I_jJYOAAAAJQ"]
[Sat Apr 04 00:49:53.912718 2026] [:error] [pid 12233:tid 12255] [client 4.233.94.87:5602] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "ac_vsRQDAzkmdfiSgI1_PwAAARQ"]
[Sat Apr 04 00:49:54.387775 2026] [:error] [pid 12233:tid 12244] [client 4.233.94.87:48866] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "ac_vshQDAzkmdfiSgI1_QQAAAQk"]
[Sat Apr 04 00:49:54.898944 2026] [:error] [pid 12233:tid 12253] [client 4.233.94.87:45287] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "ac_vshQDAzkmdfiSgI1_RgAAARI"]
[Sat Apr 04 00:49:55.390471 2026] [:error] [pid 12233:tid 12244] [client 4.233.94.87:52657] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "ac_vsxQDAzkmdfiSgI1_TAAAAQk"]
[Sat Apr 04 00:49:55.884046 2026] [:error] [pid 12089:tid 12145] [client 4.233.94.87:48871] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "ac_vs0SCG1Z_hi7I_jJYPgAAAJI"]
[Sat Apr 04 00:49:56.479797 2026] [:error] [pid 12081:tid 12123] [client 4.233.94.87:5614] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac_vtKMJBCYerZTQdmLhcgAAAFc"]
[Sat Apr 04 00:49:57.241124 2026] [:error] [pid 12097:tid 12162] [client 4.233.94.87:47087] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac_vtRnkcvJ01y2CY3mY-AAAAMc"]
[Sat Apr 04 00:49:57.766287 2026] [:error] [pid 12097:tid 12161] [client 4.233.94.87:42602] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac_vtRnkcvJ01y2CY3mY-gAAAMY"]
[Sat Apr 04 00:49:58.271834 2026] [:error] [pid 12233:tid 12249] [client 4.233.94.87:62449] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac_vthQDAzkmdfiSgI1_WAAAAQ4"]
[Sat Apr 04 00:49:58.767561 2026] [:error] [pid 12081:tid 12108] [client 4.233.94.87:42607] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/com.php"] [unique_id "ac_vtqMJBCYerZTQdmLhdgAAAEg"]
[Sat Apr 04 00:49:59.249786 2026] [:error] [pid 12233:tid 12248] [client 4.233.94.87:48885] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/com.php"] [unique_id "ac_vtxQDAzkmdfiSgI1_XgAAAQ0"]
[Sat Apr 04 00:49:59.754748 2026] [:error] [pid 12233:tid 12236] [client 4.233.94.87:47056] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/com.php"] [unique_id "ac_vtxQDAzkmdfiSgI1_YgAAAQE"]
[Sat Apr 04 00:50:00.228910 2026] [:error] [pid 12089:tid 12138] [client 4.233.94.87:49623] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/com.php"] [unique_id "ac_vuESCG1Z_hi7I_jJYRQAAAIs"]
[Sat Apr 04 00:50:00.742127 2026] [:error] [pid 12233:tid 12253] [client 4.233.94.87:42563] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/filer.php"] [unique_id "ac_vuBQDAzkmdfiSgI1_agAAARI"]
[Sat Apr 04 00:50:01.423749 2026] [:error] [pid 12089:tid 12130] [client 4.233.94.87:61711] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/filer.php"] [unique_id "ac_vuUSCG1Z_hi7I_jJYSAAAAIM"]
[Sat Apr 04 00:50:01.994876 2026] [:error] [pid 12081:tid 12111] [client 4.233.94.87:5602] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/filer.php"] [unique_id "ac_vuaMJBCYerZTQdmLhgQAAAEs"]
[Sat Apr 04 00:50:08.745491 2026] [:error] [pid 12081:tid 12117] [client 4.233.94.87:52671] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xvs.php"] [unique_id "ac_vwKMJBCYerZTQdmLhmwAAAFE"]
[Sat Apr 04 00:50:09.458360 2026] [:error] [pid 12089:tid 12140] [client 4.233.94.87:47069] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xvs.php"] [unique_id "ac_vwUSCG1Z_hi7I_jJYTwAAAI0"]
[Sat Apr 04 00:50:10.194138 2026] [:error] [pid 12081:tid 12101] [client 4.233.94.87:48873] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xvs.php"] [unique_id "ac_vwqMJBCYerZTQdmLhoAAAAEE"]
[Sat Apr 04 00:50:10.757484 2026] [:error] [pid 12089:tid 12129] [client 4.233.94.87:42571] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xvs.php"] [unique_id "ac_vwkSCG1Z_hi7I_jJYVAAAAII"]
[Sat Apr 04 00:50:12.739277 2026] [:error] [pid 12233:tid 12254] [client 4.233.94.87:62444] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ass.php"] [unique_id "ac_vxBQDAzkmdfiSgI1_qwAAARM"]
[Sat Apr 04 00:50:13.758765 2026] [:error] [pid 12081:tid 12106] [client 4.233.94.87:45307] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ass.php"] [unique_id "ac_vxaMJBCYerZTQdmLhsQAAAEY"]
[Sat Apr 04 00:50:14.265128 2026] [:error] [pid 12233:tid 12238] [client 4.233.94.87:63020] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ass.php"] [unique_id "ac_vxhQDAzkmdfiSgI1_rwAAAQM"]
[Sat Apr 04 00:50:14.763680 2026] [:error] [pid 12233:tid 12240] [client 4.233.94.87:63024] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ass.php"] [unique_id "ac_vxhQDAzkmdfiSgI1_tAAAAQU"]
[Sat Apr 04 00:50:15.251578 2026] [:error] [pid 12081:tid 12115] [client 4.233.94.87:52608] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ac_vx6MJBCYerZTQdmLhuAAAAE8"]
[Sat Apr 04 00:50:15.773957 2026] [:error] [pid 12081:tid 12108] [client 4.233.94.87:62985] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ac_vx6MJBCYerZTQdmLhuwAAAEg"]
[Sat Apr 04 00:50:16.553383 2026] [:error] [pid 12233:tid 12254] [client 4.233.94.87:42614] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ac_vyBQDAzkmdfiSgI1_vwAAARM"]
[Sat Apr 04 00:50:17.178612 2026] [:error] [pid 12233:tid 12259] [client 4.233.94.87:52643] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ac_vyRQDAzkmdfiSgI1_xQAAARg"]
[Sat Apr 04 00:50:17.707025 2026] [:error] [pid 12089:tid 12145] [client 4.233.94.87:62426] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gorila.php"] [unique_id "ac_vyUSCG1Z_hi7I_jJYYQAAAJI"]
[Sat Apr 04 00:50:18.583572 2026] [:error] [pid 12233:tid 12250] [client 4.233.94.87:62421] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gorila.php"] [unique_id "ac_vyhQDAzkmdfiSgI1_zAAAAQ8"]
[Sat Apr 04 00:50:19.157027 2026] [:error] [pid 12233:tid 12237] [client 4.233.94.87:42585] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gorila.php"] [unique_id "ac_vyxQDAzkmdfiSgI1_0QAAAQI"]
[Sat Apr 04 00:50:19.818052 2026] [:error] [pid 12081:tid 12112] [client 4.233.94.87:45248] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gorila.php"] [unique_id "ac_vy6MJBCYerZTQdmLhxAAAAEw"]
[Sat Apr 04 00:50:20.306779 2026] [:error] [pid 12233:tid 12249] [client 4.233.94.87:49605] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0.php"] [unique_id "ac_vzBQDAzkmdfiSgI1_2gAAAQ4"]
[Sat Apr 04 00:50:20.783413 2026] [:error] [pid 12081:tid 12111] [client 4.233.94.87:63038] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0.php"] [unique_id "ac_vzKMJBCYerZTQdmLhxgAAAEs"]
[Sat Apr 04 00:50:21.312601 2026] [:error] [pid 12233:tid 12253] [client 4.233.94.87:54432] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0.php"] [unique_id "ac_vzRQDAzkmdfiSgI1_4wAAARI"]
[Sat Apr 04 00:50:21.803649 2026] [:error] [pid 12233:tid 12254] [client 4.233.94.87:48851] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0.php"] [unique_id "ac_vzRQDAzkmdfiSgI1_6QAAARM"]
[Sat Apr 04 00:50:22.275496 2026] [:error] [pid 12081:tid 12120] [client 4.233.94.87:42569] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "ac_vzqMJBCYerZTQdmLhxwAAAFQ"]
[Sat Apr 04 00:50:22.788536 2026] [:error] [pid 12089:tid 12134] [client 4.233.94.87:5569] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "ac_vzkSCG1Z_hi7I_jJYZwAAAIc"]
[Sat Apr 04 00:50:23.317788 2026] [:error] [pid 12081:tid 12124] [client 4.233.94.87:61201] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "ac_vz6MJBCYerZTQdmLhzQAAAFg"]
[Sat Apr 04 00:50:23.993627 2026] [:error] [pid 12233:tid 12249] [client 4.233.94.87:45285] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/333.php"] [unique_id "ac_vzxQDAzkmdfiSgI1__QAAAQ4"]
[Sat Apr 04 00:50:25.577469 2026] [:error] [pid 12233:tid 12255] [client 4.233.94.87:45302] [client 4.233.94.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac_v0RQDAzkmdfiSgI2ADQAAARQ"]
[Sat Apr 04 00:50:28.471228 2026] [:error] [pid 12233:tid 12239] [client 4.233.94.87:5582] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "ac_v1BQDAzkmdfiSgI2AKAAAAQQ"]
[Sat Apr 04 00:50:30.302804 2026] [:error] [pid 12081:tid 12118] [client 4.233.94.87:52646] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "ac_v1qMJBCYerZTQdmLh2QAAAFI"]
[Sat Apr 04 00:50:30.936619 2026] [:error] [pid 12233:tid 12250] [client 4.233.94.87:48891] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "ac_v1hQDAzkmdfiSgI2APQAAAQ8"]
[Sat Apr 04 00:50:31.648298 2026] [:error] [pid 12233:tid 12235] [client 4.233.94.87:63034] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "ac_v1xQDAzkmdfiSgI2ARgAAAQA"]
[Sat Apr 04 00:50:32.407363 2026] [:error] [pid 12081:tid 12115] [client 4.233.94.87:42591] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ac_v2KMJBCYerZTQdmLh4AAAAE8"]
[Sat Apr 04 00:50:32.917596 2026] [:error] [pid 12081:tid 12108] [client 4.233.94.87:62422] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ac_v2KMJBCYerZTQdmLh4wAAAEg"]
[Sat Apr 04 00:50:33.761205 2026] [:error] [pid 12081:tid 12118] [client 4.233.94.87:62413] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ac_v2aMJBCYerZTQdmLh6AAAAFI"]
[Sat Apr 04 00:50:34.826138 2026] [:error] [pid 12081:tid 12105] [client 4.233.94.87:5609] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ac_v2qMJBCYerZTQdmLh8gAAAEU"]
[Sat Apr 04 00:50:35.795407 2026] [:error] [pid 12233:tid 12242] [client 4.233.94.87:47090] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1.php"] [unique_id "ac_v2xQDAzkmdfiSgI2AaAAAAQc"]
[Sat Apr 04 00:50:36.325931 2026] [:error] [pid 12081:tid 12104] [client 4.233.94.87:45311] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1.php"] [unique_id "ac_v3KMJBCYerZTQdmLh-QAAAEQ"]
[Sat Apr 04 00:50:36.855930 2026] [:error] [pid 12081:tid 12114] [client 4.233.94.87:49611] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1.php"] [unique_id "ac_v3KMJBCYerZTQdmLh-wAAAE4"]
[Sat Apr 04 00:50:37.461532 2026] [:error] [pid 12097:tid 12165] [client 4.233.94.87:45279] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1.php"] [unique_id "ac_v3RnkcvJ01y2CY3mZSAAAAMo"]
[Sat Apr 04 00:50:37.943122 2026] [:error] [pid 12081:tid 12122] [client 4.233.94.87:48893] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "ac_v3aMJBCYerZTQdmLiAwAAAFY"]
[Sat Apr 04 00:50:38.493949 2026] [:error] [pid 12081:tid 12104] [client 4.233.94.87:62400] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "ac_v3qMJBCYerZTQdmLiBgAAAEQ"]
[Sat Apr 04 00:50:38.999930 2026] [:error] [pid 12233:tid 12243] [client 4.233.94.87:63010] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "ac_v3hQDAzkmdfiSgI2AgAAAAQg"]
[Sat Apr 04 00:50:39.474108 2026] [:error] [pid 12081:tid 12114] [client 4.233.94.87:45258] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "ac_v36MJBCYerZTQdmLiCQAAAE4"]
[Sat Apr 04 00:50:39.947639 2026] [:error] [pid 12097:tid 12158] [client 4.233.94.87:62979] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_v3xnkcvJ01y2CY3mZVgAAAMM"]
[Sat Apr 04 00:50:40.442889 2026] [:error] [pid 12097:tid 12164] [client 4.233.94.87:47073] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_v4BnkcvJ01y2CY3mZWAAAAMk"]
[Sat Apr 04 00:50:40.968099 2026] [:error] [pid 12097:tid 12159] [client 4.233.94.87:62423] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_v4BnkcvJ01y2CY3mZWwAAAMQ"]
[Sat Apr 04 00:50:41.461685 2026] [:error] [pid 12097:tid 12154] [client 4.233.94.87:48874] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_v4RnkcvJ01y2CY3mZXgAAAMA"]
[Sat Apr 04 00:50:41.986370 2026] [:error] [pid 12089:tid 12144] [client 4.233.94.87:45290] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ac_v4USCG1Z_hi7I_jJYfwAAAJE"]
[Sat Apr 04 00:50:42.502695 2026] [:error] [pid 12233:tid 12259] [client 4.233.94.87:48863] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ac_v4hQDAzkmdfiSgI2AkQAAARg"]
[Sat Apr 04 00:50:43.021390 2026] [:error] [pid 12233:tid 12252] [client 4.233.94.87:63029] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ac_v4xQDAzkmdfiSgI2AmAAAARE"]
[Sat Apr 04 00:50:43.574049 2026] [:error] [pid 12081:tid 12102] [client 4.233.94.87:42598] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ac_v46MJBCYerZTQdmLiFwAAAEI"]
[Sat Apr 04 00:50:44.112922 2026] [:error] [pid 12081:tid 12103] [client 4.233.94.87:48869] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "ac_v5KMJBCYerZTQdmLiGwAAAEM"]
[Sat Apr 04 00:50:44.758041 2026] [:error] [pid 12081:tid 12113] [client 4.233.94.87:62428] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "ac_v5KMJBCYerZTQdmLiHAAAAE0"]
[Sat Apr 04 00:50:45.251307 2026] [:error] [pid 12233:tid 12241] [client 4.233.94.87:42582] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "ac_v5RQDAzkmdfiSgI2AqQAAAQY"]
[Sat Apr 04 00:50:45.782110 2026] [:error] [pid 12097:tid 12172] [client 4.233.94.87:52650] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nc4.php"] [unique_id "ac_v5RnkcvJ01y2CY3mZcAAAANE"]
[Sat Apr 04 00:50:46.353341 2026] [:error] [pid 12081:tid 12102] [client 4.233.94.87:63033] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sh3ll.php"] [unique_id "ac_v5qMJBCYerZTQdmLiIgAAAEI"]
[Sat Apr 04 00:50:46.932092 2026] [:error] [pid 12097:tid 12168] [client 4.233.94.87:42589] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sh3ll.php"] [unique_id "ac_v5hnkcvJ01y2CY3mZdwAAAM0"]
[Sat Apr 04 00:50:47.451220 2026] [:error] [pid 12081:tid 12110] [client 4.233.94.87:62412] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sh3ll.php"] [unique_id "ac_v56MJBCYerZTQdmLiJwAAAEo"]
[Sat Apr 04 00:50:47.933866 2026] [:error] [pid 12089:tid 12146] [client 4.233.94.87:45280] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sh3ll.php"] [unique_id "ac_v50SCG1Z_hi7I_jJYjQAAAJM"]
[Sat Apr 04 00:50:48.513907 2026] [:error] [pid 12097:tid 12168] [client 4.233.94.87:61229] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "ac_v6BnkcvJ01y2CY3mZhAAAAM0"]
[Sat Apr 04 00:50:49.677218 2026] [:error] [pid 12097:tid 12158] [client 4.233.94.87:5578] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "ac_v6RnkcvJ01y2CY3mZkAAAAMM"]
[Sat Apr 04 00:50:50.687123 2026] [:error] [pid 12089:tid 12138] [client 4.233.94.87:55490] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "ac_v6kSCG1Z_hi7I_jJYmQAAAIs"]
[Sat Apr 04 00:50:51.251923 2026] [:error] [pid 12233:tid 12255] [client 4.233.94.87:62457] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "ac_v6xQDAzkmdfiSgI2AuQAAARQ"]
[Sat Apr 04 00:50:51.864874 2026] [:error] [pid 12097:tid 12174] [client 4.233.94.87:62978] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "ac_v6xnkcvJ01y2CY3mZlwAAANM"]
[Sat Apr 04 00:50:52.684973 2026] [:error] [pid 12233:tid 12243] [client 4.233.94.87:62992] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "ac_v7BQDAzkmdfiSgI2AvwAAAQg"]
[Sat Apr 04 00:50:53.303592 2026] [:error] [pid 12081:tid 12105] [client 4.233.94.87:47071] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "ac_v7aMJBCYerZTQdmLiOgAAAEU"]
[Sat Apr 04 00:50:53.805465 2026] [:error] [pid 12097:tid 12159] [client 4.233.94.87:54439] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goat1.php"] [unique_id "ac_v7RnkcvJ01y2CY3mZngAAAMQ"]
[Sat Apr 04 00:50:54.369535 2026] [:error] [pid 12081:tid 12108] [client 4.233.94.87:47079] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mis.php"] [unique_id "ac_v7qMJBCYerZTQdmLiPwAAAEg"]
[Sat Apr 04 00:50:55.559664 2026] [:error] [pid 12097:tid 12166] [client 4.233.94.87:52618] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mis.php"] [unique_id "ac_v7xnkcvJ01y2CY3mZpgAAAMs"]
[Sat Apr 04 00:50:57.015170 2026] [:error] [pid 12233:tid 12255] [client 4.233.94.87:47053] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mis.php"] [unique_id "ac_v8RQDAzkmdfiSgI2AxwAAARQ"]
[Sat Apr 04 00:50:57.709713 2026] [:error] [pid 12081:tid 12112] [client 4.233.94.87:63000] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mis.php"] [unique_id "ac_v8aMJBCYerZTQdmLiTwAAAEw"]
[Sat Apr 04 00:50:58.280644 2026] [:error] [pid 12233:tid 12250] [client 4.233.94.87:63003] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "ac_v8hQDAzkmdfiSgI2AzwAAAQ8"]
[Sat Apr 04 00:50:58.891113 2026] [:error] [pid 12097:tid 12179] [client 4.233.94.87:45263] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "ac_v8hnkcvJ01y2CY3mZrgAAANg"]
[Sat Apr 04 00:50:59.417860 2026] [:error] [pid 12097:tid 12173] [client 4.233.94.87:62416] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "ac_v8xnkcvJ01y2CY3mZswAAANI"]
[Sat Apr 04 00:50:59.900545 2026] [:error] [pid 12233:tid 12241] [client 4.233.94.87:49652] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "ac_v8xQDAzkmdfiSgI2A1AAAAQY"]
[Sat Apr 04 00:51:00.484454 2026] [:error] [pid 12233:tid 12253] [client 4.233.94.87:62445] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admir.php"] [unique_id "ac_v9BQDAzkmdfiSgI2A2wAAARI"]
[Sat Apr 04 00:51:00.987649 2026] [:error] [pid 12081:tid 12113] [client 4.233.94.87:5606] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admir.php"] [unique_id "ac_v9KMJBCYerZTQdmLiWAAAAE0"]
[Sat Apr 04 00:51:01.473043 2026] [:error] [pid 12233:tid 12244] [client 4.233.94.87:48860] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admir.php"] [unique_id "ac_v9RQDAzkmdfiSgI2A5AAAAQk"]
[Sat Apr 04 00:51:01.953933 2026] [:error] [pid 12097:tid 12175] [client 4.233.94.87:5615] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admir.php"] [unique_id "ac_v9RnkcvJ01y2CY3mZtgAAANQ"]
[Sat Apr 04 00:51:02.553532 2026] [:error] [pid 12081:tid 12108] [client 4.233.94.87:5596] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "ac_v9qMJBCYerZTQdmLiXAAAAEg"]
[Sat Apr 04 00:51:03.039329 2026] [:error] [pid 12081:tid 12112] [client 4.233.94.87:44545] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "ac_v96MJBCYerZTQdmLiXgAAAEw"]
[Sat Apr 04 00:51:03.565300 2026] [:error] [pid 12081:tid 12102] [client 4.233.94.87:47060] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "ac_v96MJBCYerZTQdmLiYAAAAEI"]
[Sat Apr 04 00:51:04.069254 2026] [:error] [pid 12233:tid 12235] [client 4.233.94.87:42618] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "ac_v-BQDAzkmdfiSgI2A8AAAAQA"]
[Sat Apr 04 00:51:04.562346 2026] [:error] [pid 12097:tid 12176] [client 4.233.94.87:45265] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fyiiz.php"] [unique_id "ac_v-BnkcvJ01y2CY3mZwgAAANU"]
[Sat Apr 04 00:51:05.036515 2026] [:error] [pid 12233:tid 12244] [client 4.233.94.87:48870] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fyiiz.php"] [unique_id "ac_v-RQDAzkmdfiSgI2A9AAAAQk"]
[Sat Apr 04 00:51:05.518458 2026] [:error] [pid 12097:tid 12159] [client 4.233.94.87:5600] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fyiiz.php"] [unique_id "ac_v-RnkcvJ01y2CY3mZxwAAAMQ"]
[Sat Apr 04 00:51:06.170602 2026] [:error] [pid 12089:tid 12134] [client 4.233.94.87:45300] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fyiiz.php"] [unique_id "ac_v-kSCG1Z_hi7I_jJY7gAAAIc"]
[Sat Apr 04 00:51:06.727025 2026] [:error] [pid 12089:tid 12130] [client 4.233.94.87:45291] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_v-kSCG1Z_hi7I_jJY8AAAAIM"]
[Sat Apr 04 00:51:07.268134 2026] [:error] [pid 12081:tid 12105] [client 4.233.94.87:48840] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_v-6MJBCYerZTQdmLicgAAAEU"]
[Sat Apr 04 00:51:07.782311 2026] [:error] [pid 12097:tid 12161] [client 4.233.94.87:5592] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_v-xnkcvJ01y2CY3mZ1AAAAMY"]
[Sat Apr 04 00:51:13.867864 2026] [:error] [pid 12097:tid 12176] [client 4.233.94.87:47101] [client 4.233.94.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac_wARnkcvJ01y2CY3mZ_QAAANU"]
[Sat Apr 04 00:51:16.598852 2026] [:error] [pid 12089:tid 12133] [client 4.233.94.87:45255] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "ac_wBESCG1Z_hi7I_jJZBAAAAIY"]
[Sat Apr 04 00:51:17.368648 2026] [:error] [pid 12081:tid 12120] [client 4.233.94.87:63000] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "ac_wBaMJBCYerZTQdmLipwAAAFQ"]
[Sat Apr 04 00:51:18.147283 2026] [:error] [pid 12097:tid 12178] [client 4.233.94.87:49662] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "ac_wBhnkcvJ01y2CY3maDQAAANc"]
[Sat Apr 04 00:51:18.740946 2026] [:error] [pid 12089:tid 12142] [client 4.233.94.87:42572] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/JKydQumkIarjMJ4default.php"] [unique_id "ac_wBkSCG1Z_hi7I_jJZEwAAAI8"]
[Sat Apr 04 00:51:19.429921 2026] [:error] [pid 12089:tid 12134] [client 4.233.94.87:62447] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/he.php"] [unique_id "ac_wB0SCG1Z_hi7I_jJZFAAAAIc"]
[Sat Apr 04 00:51:20.003907 2026] [:error] [pid 12081:tid 12103] [client 4.233.94.87:45261] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/he.php"] [unique_id "ac_wCKMJBCYerZTQdmLirAAAAEM"]
[Sat Apr 04 00:51:20.536845 2026] [:error] [pid 12081:tid 12122] [client 4.233.94.87:45305] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/he.php"] [unique_id "ac_wCKMJBCYerZTQdmLisAAAAFY"]
[Sat Apr 04 00:51:21.055873 2026] [:error] [pid 12233:tid 12238] [client 4.233.94.87:42574] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/he.php"] [unique_id "ac_wCRQDAzkmdfiSgI2BRAAAAQM"]
[Sat Apr 04 00:51:21.586994 2026] [:error] [pid 12233:tid 12250] [client 4.233.94.87:61698] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "ac_wCRQDAzkmdfiSgI2BSwAAAQ8"]
[Sat Apr 04 00:51:22.091068 2026] [:error] [pid 12081:tid 12121] [client 4.233.94.87:42609] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "ac_wCqMJBCYerZTQdmLisgAAAFU"]
[Sat Apr 04 00:51:22.784714 2026] [:error] [pid 12089:tid 12150] [client 4.233.94.87:48833] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "ac_wCkSCG1Z_hi7I_jJZHAAAAJc"]
[Sat Apr 04 00:51:23.269906 2026] [:error] [pid 12097:tid 12160] [client 4.233.94.87:54412] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-cron.php"] [unique_id "ac_wCxnkcvJ01y2CY3maFwAAAMU"]
[Sat Apr 04 00:51:23.746179 2026] [:error] [pid 12081:tid 12101] [client 4.233.94.87:48892] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "ac_wC6MJBCYerZTQdmLivAAAAEE"]
[Sat Apr 04 00:51:24.222030 2026] [:error] [pid 12233:tid 12257] [client 4.233.94.87:62994] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "ac_wDBQDAzkmdfiSgI2BXAAAARY"]
[Sat Apr 04 00:51:24.730214 2026] [:error] [pid 12233:tid 12255] [client 4.233.94.87:48877] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "ac_wDBQDAzkmdfiSgI2BYwAAARQ"]
[Sat Apr 04 00:51:25.205956 2026] [:error] [pid 12081:tid 12104] [client 4.233.94.87:62401] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zwq13.php"] [unique_id "ac_wDaMJBCYerZTQdmLiwgAAAEQ"]
[Sat Apr 04 00:51:25.753600 2026] [:error] [pid 12097:tid 12179] [client 4.233.94.87:52633] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/marijuana.php"] [unique_id "ac_wDRnkcvJ01y2CY3maIwAAANg"]
[Sat Apr 04 00:51:26.227406 2026] [:error] [pid 12233:tid 12246] [client 4.233.94.87:54422] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/marijuana.php"] [unique_id "ac_wDhQDAzkmdfiSgI2BaAAAAQs"]
[Sat Apr 04 00:51:26.800225 2026] [:error] [pid 12097:tid 12162] [client 4.233.94.87:42604] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/marijuana.php"] [unique_id "ac_wDhnkcvJ01y2CY3maKwAAAMc"]
[Sat Apr 04 00:51:27.285926 2026] [:error] [pid 12233:tid 12254] [client 4.233.94.87:5583] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/marijuana.php"] [unique_id "ac_wDxQDAzkmdfiSgI2BcgAAARM"]
[Sat Apr 04 00:51:27.764492 2026] [:error] [pid 12081:tid 12100] [client 4.233.94.87:45281] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "ac_wD6MJBCYerZTQdmLizwAAAEA"]
[Sat Apr 04 00:51:28.289969 2026] [:error] [pid 12233:tid 12247] [client 4.233.94.87:62435] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "ac_wEBQDAzkmdfiSgI2BeQAAAQw"]
[Sat Apr 04 00:51:28.811210 2026] [:error] [pid 12089:tid 12150] [client 4.233.94.87:45301] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "ac_wEESCG1Z_hi7I_jJZJAAAAJc"]
[Sat Apr 04 00:51:29.290834 2026] [:error] [pid 12233:tid 12248] [client 4.233.94.87:62451] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "ac_wERQDAzkmdfiSgI2BggAAAQ0"]
[Sat Apr 04 00:51:29.770105 2026] [:error] [pid 12081:tid 12119] [client 4.233.94.87:45289] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "ac_wEaMJBCYerZTQdmLi1gAAAFM"]
[Sat Apr 04 00:51:30.289032 2026] [:error] [pid 12081:tid 12100] [client 4.233.94.87:47078] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "ac_wEqMJBCYerZTQdmLi3QAAAEA"]
[Sat Apr 04 00:51:30.792284 2026] [:error] [pid 12089:tid 12139] [client 4.233.94.87:62436] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "ac_wEkSCG1Z_hi7I_jJZKQAAAIw"]
[Sat Apr 04 00:51:31.293852 2026] [:error] [pid 12097:tid 12174] [client 4.233.94.87:5613] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "ac_wExnkcvJ01y2CY3maPQAAANM"]
[Sat Apr 04 00:51:31.768812 2026] [:error] [pid 12097:tid 12175] [client 4.233.94.87:63030] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "ac_wExnkcvJ01y2CY3maQAAAANQ"]
[Sat Apr 04 00:51:32.255010 2026] [:error] [pid 12233:tid 12244] [client 4.233.94.87:63002] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "ac_wFBQDAzkmdfiSgI2BiQAAAQk"]
[Sat Apr 04 00:51:32.728902 2026] [:error] [pid 12097:tid 12162] [client 4.233.94.87:5572] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "ac_wFBnkcvJ01y2CY3maRAAAAMc"]
[Sat Apr 04 00:51:33.237605 2026] [:error] [pid 12081:tid 12108] [client 4.233.94.87:62408] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "ac_wFaMJBCYerZTQdmLi6wAAAEg"]
[Sat Apr 04 00:51:33.861164 2026] [:error] [pid 12233:tid 12257] [client 4.233.94.87:49648] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/erty.php"] [unique_id "ac_wFRQDAzkmdfiSgI2BlAAAARY"]
[Sat Apr 04 00:51:34.573270 2026] [:error] [pid 12233:tid 12248] [client 4.233.94.87:42612] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/erty.php"] [unique_id "ac_wFhQDAzkmdfiSgI2BlgAAAQ0"]
[Sat Apr 04 00:51:35.228720 2026] [:error] [pid 12081:tid 12102] [client 4.233.94.87:48838] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/erty.php"] [unique_id "ac_wF6MJBCYerZTQdmLi8gAAAEI"]
[Sat Apr 04 00:51:35.715115 2026] [:error] [pid 12233:tid 12242] [client 4.233.94.87:47100] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/erty.php"] [unique_id "ac_wFxQDAzkmdfiSgI2BngAAAQc"]
[Sat Apr 04 00:51:36.329073 2026] [:error] [pid 12233:tid 12241] [client 4.233.94.87:52611] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_wGBQDAzkmdfiSgI2BogAAAQY"]
[Sat Apr 04 00:51:36.889725 2026] [:error] [pid 12233:tid 12250] [client 4.233.94.87:52622] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_wGBQDAzkmdfiSgI2BrQAAAQ8"]
[Sat Apr 04 00:51:37.367849 2026] [:error] [pid 12097:tid 12177] [client 4.233.94.87:44596] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_wGRnkcvJ01y2CY3maUgAAANY"]
[Sat Apr 04 00:51:37.884749 2026] [:error] [pid 12097:tid 12164] [client 4.233.94.87:54435] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_wGRnkcvJ01y2CY3maVQAAAMk"]
[Sat Apr 04 00:51:38.372752 2026] [:error] [pid 12081:tid 12104] [client 4.233.94.87:52612] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "ac_wGqMJBCYerZTQdmLi_AAAAEQ"]
[Sat Apr 04 00:51:38.877521 2026] [:error] [pid 12233:tid 12251] [client 4.233.94.87:42616] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "ac_wGhQDAzkmdfiSgI2BvQAAARA"]
[Sat Apr 04 00:51:39.348449 2026] [:error] [pid 12081:tid 12102] [client 4.233.94.87:63036] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "ac_wG6MJBCYerZTQdmLjAwAAAEI"]
[Sat Apr 04 00:51:39.932161 2026] [:error] [pid 12081:tid 12114] [client 4.233.94.87:52647] [client 4.233.94.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "ac_wG6MJBCYerZTQdmLjDgAAAE4"]
[Sat Apr 04 03:21:15.185851 2026] [:error] [pid 12081:tid 12123] [client 4.225.220.243:61883] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adATK6MJBCYerZTQdmI-8wAAAFc"]
[Sat Apr 04 03:21:17.047521 2026] [:error] [pid 44382:tid 44396] [client 4.225.220.243:35635] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adATLZpzSLFOX5FpZ8rvLQAAAAw"]
[Sat Apr 04 03:21:17.574776 2026] [:error] [pid 44382:tid 44406] [client 4.225.220.243:61780] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adATLZpzSLFOX5FpZ8rvMQAAABY"]
[Sat Apr 04 03:21:18.115663 2026] [:error] [pid 44382:tid 44400] [client 4.225.220.243:61775] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adATLppzSLFOX5FpZ8rvMwAAABA"]
[Sat Apr 04 03:21:18.645306 2026] [:error] [pid 12233:tid 12247] [client 4.225.220.243:63183] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adATLhQDAzkmdfiSgI0B5wAAAQw"]
[Sat Apr 04 03:21:19.180849 2026] [:error] [pid 12233:tid 12240] [client 4.225.220.243:57650] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adATLxQDAzkmdfiSgI0B6wAAAQU"]
[Sat Apr 04 03:21:19.708218 2026] [:error] [pid 12233:tid 12243] [client 4.225.220.243:36976] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adATLxQDAzkmdfiSgI0B7QAAAQg"]
[Sat Apr 04 03:21:20.278394 2026] [:error] [pid 44382:tid 44408] [client 4.225.220.243:38901] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adATMJpzSLFOX5FpZ8rvOQAAABg"]
[Sat Apr 04 03:21:20.825184 2026] [:error] [pid 44382:tid 44391] [client 4.225.220.243:52952] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adATMJpzSLFOX5FpZ8rvPgAAAAc"]
[Sat Apr 04 03:21:21.380722 2026] [:error] [pid 12097:tid 12170] [client 4.225.220.243:7029] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adATMRnkcvJ01y2CY3nj-gAAAM8"]
[Sat Apr 04 03:21:21.922513 2026] [:error] [pid 12081:tid 12105] [client 4.225.220.243:38852] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adATMaMJBCYerZTQdmI--AAAAEU"]
[Sat Apr 04 03:21:22.447855 2026] [:error] [pid 12233:tid 12243] [client 4.225.220.243:57644] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adATMhQDAzkmdfiSgI0B9gAAAQg"]
[Sat Apr 04 03:21:22.974633 2026] [:error] [pid 12233:tid 12255] [client 4.225.220.243:57633] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adATMhQDAzkmdfiSgI0B9wAAARQ"]
[Sat Apr 04 03:21:23.536131 2026] [:error] [pid 12081:tid 12106] [client 4.225.220.243:57613] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adATM6MJBCYerZTQdmI--wAAAEY"]
[Sat Apr 04 03:21:24.066169 2026] [:error] [pid 12089:tid 12137] [client 4.225.220.243:45733] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adATNESCG1Z_hi7I_jKVlQAAAIo"]
[Sat Apr 04 03:21:24.594573 2026] [:error] [pid 12089:tid 12132] [client 4.225.220.243:6409] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adATNESCG1Z_hi7I_jKVlgAAAIU"]
[Sat Apr 04 03:21:25.120753 2026] [:error] [pid 12233:tid 12235] [client 4.225.220.243:59962] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adATNRQDAzkmdfiSgI0CAgAAAQA"]
[Sat Apr 04 03:21:25.697168 2026] [:error] [pid 12233:tid 12238] [client 4.225.220.243:34952] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adATNRQDAzkmdfiSgI0CBAAAAQM"]
[Sat Apr 04 03:21:26.234078 2026] [:error] [pid 12233:tid 12244] [client 4.225.220.243:34977] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adATNhQDAzkmdfiSgI0CBwAAAQk"]
[Sat Apr 04 03:21:26.825232 2026] [:error] [pid 12233:tid 12253] [client 4.225.220.243:38895] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adATNhQDAzkmdfiSgI0CCgAAARI"]
[Sat Apr 04 03:21:27.354985 2026] [:error] [pid 12081:tid 12101] [client 4.225.220.243:57661] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adATN6MJBCYerZTQdmI_AAAAAEE"]
[Sat Apr 04 03:21:27.902904 2026] [:error] [pid 12081:tid 12108] [client 4.225.220.243:6420] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adATN6MJBCYerZTQdmI_AwAAAEg"]
[Sat Apr 04 03:21:28.445484 2026] [:error] [pid 44382:tid 44405] [client 4.225.220.243:59923] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adATOJpzSLFOX5FpZ8rvXQAAABU"]
[Sat Apr 04 03:21:28.982724 2026] [:error] [pid 12097:tid 12169] [client 4.225.220.243:6407] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adATOBnkcvJ01y2CY3nkAwAAAM4"]
[Sat Apr 04 03:21:29.535157 2026] [:error] [pid 12081:tid 12114] [client 4.225.220.243:52947] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adATOaMJBCYerZTQdmI_BwAAAE4"]
[Sat Apr 04 03:21:30.109219 2026] [:error] [pid 12089:tid 12144] [client 4.225.220.243:6575] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adATOkSCG1Z_hi7I_jKVmwAAAJE"]
[Sat Apr 04 03:21:30.635829 2026] [:error] [pid 44382:tid 44404] [client 4.225.220.243:7038] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adATOppzSLFOX5FpZ8rvZgAAABQ"]
[Sat Apr 04 03:21:31.179985 2026] [:error] [pid 44382:tid 44391] [client 4.225.220.243:45720] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adATO5pzSLFOX5FpZ8rvaQAAAAc"]
[Sat Apr 04 03:21:31.725633 2026] [:error] [pid 12089:tid 12139] [client 4.225.220.243:6574] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adATO0SCG1Z_hi7I_jKVnQAAAIw"]
[Sat Apr 04 03:21:32.270849 2026] [:error] [pid 44382:tid 44398] [client 4.225.220.243:58348] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adATPJpzSLFOX5FpZ8rvcQAAAA4"]
[Sat Apr 04 03:21:32.805636 2026] [:error] [pid 12089:tid 12137] [client 4.225.220.243:6541] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adATPESCG1Z_hi7I_jKVoQAAAIo"]
[Sat Apr 04 03:21:33.378919 2026] [:error] [pid 44382:tid 44395] [client 4.225.220.243:45752] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adATPZpzSLFOX5FpZ8rvdwAAAAs"]
[Sat Apr 04 03:21:33.948428 2026] [:error] [pid 12081:tid 12121] [client 4.225.220.243:52990] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adATPaMJBCYerZTQdmI_CQAAAFU"]
[Sat Apr 04 03:21:34.518150 2026] [:error] [pid 44382:tid 44389] [client 4.225.220.243:50072] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adATPppzSLFOX5FpZ8rvfAAAAAU"]
[Sat Apr 04 03:21:35.059501 2026] [:error] [pid 12233:tid 12245] [client 4.225.220.243:50691] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adATPxQDAzkmdfiSgI0CGAAAAQo"]
[Sat Apr 04 03:21:35.641735 2026] [:error] [pid 12233:tid 12255] [client 4.225.220.243:34953] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adATPxQDAzkmdfiSgI0CGgAAARQ"]
[Sat Apr 04 03:21:36.224212 2026] [:error] [pid 44382:tid 44399] [client 4.225.220.243:6579] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adATQJpzSLFOX5FpZ8rvjgAAAA8"]
[Sat Apr 04 03:21:36.797268 2026] [:error] [pid 12097:tid 12160] [client 4.225.220.243:50758] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adATQBnkcvJ01y2CY3nkDAAAAMU"]
[Sat Apr 04 03:21:37.390181 2026] [:error] [pid 44382:tid 44404] [client 4.225.220.243:6529] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adATQZpzSLFOX5FpZ8rvnAAAABQ"]
[Sat Apr 04 03:21:37.946554 2026] [:error] [pid 44382:tid 44402] [client 4.225.220.243:50812] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adATQZpzSLFOX5FpZ8rvpAAAABI"]
[Sat Apr 04 03:21:38.497147 2026] [:error] [pid 44382:tid 44396] [client 4.225.220.243:6573] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adATQppzSLFOX5FpZ8rvrwAAAAw"]
[Sat Apr 04 03:21:39.081878 2026] [:error] [pid 12081:tid 12103] [client 4.225.220.243:6568] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adATQ6MJBCYerZTQdmI_DQAAAEM"]
[Sat Apr 04 03:21:39.620014 2026] [:error] [pid 12097:tid 12159] [client 4.225.220.243:48192] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adATQxnkcvJ01y2CY3nkEQAAAMQ"]
[Sat Apr 04 03:21:40.230079 2026] [:error] [pid 12233:tid 12236] [client 4.225.220.243:50794] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adATRBQDAzkmdfiSgI0CHQAAAQE"]
[Sat Apr 04 03:21:40.810901 2026] [:error] [pid 12097:tid 12167] [client 4.225.220.243:58266] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adATRBnkcvJ01y2CY3nkFgAAAMw"]
[Sat Apr 04 03:21:41.341680 2026] [:error] [pid 12233:tid 12241] [client 4.225.220.243:58256] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adATRRQDAzkmdfiSgI0CIQAAAQY"]
[Sat Apr 04 03:21:41.882305 2026] [:error] [pid 12233:tid 12249] [client 4.225.220.243:50727] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adATRRQDAzkmdfiSgI0CIwAAAQ4"]
[Sat Apr 04 03:21:42.410930 2026] [:error] [pid 44382:tid 44397] [client 4.225.220.243:46439] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adATRppzSLFOX5FpZ8rvwAAAAA0"]
[Sat Apr 04 03:21:42.945282 2026] [:error] [pid 12233:tid 12239] [client 4.225.220.243:58300] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "adATRhQDAzkmdfiSgI0CKQAAAQQ"]
[Sat Apr 04 03:21:43.473504 2026] [:error] [pid 12233:tid 12250] [client 4.225.220.243:34979] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "adATRxQDAzkmdfiSgI0CLQAAAQ8"]
[Sat Apr 04 03:21:44.015632 2026] [:error] [pid 12233:tid 12257] [client 4.225.220.243:34965] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "adATSBQDAzkmdfiSgI0CMwAAARY"]
[Sat Apr 04 03:21:44.549487 2026] [:error] [pid 12089:tid 12148] [client 4.225.220.243:51313] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "adATSESCG1Z_hi7I_jKVqQAAAJU"]
[Sat Apr 04 03:21:45.078901 2026] [:error] [pid 44382:tid 44387] [client 4.225.220.243:6535] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adATSZpzSLFOX5FpZ8rvxgAAAAM"]
[Sat Apr 04 03:21:45.616989 2026] [:error] [pid 12081:tid 12113] [client 4.225.220.243:50747] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adATSaMJBCYerZTQdmI_FQAAAE0"]
[Sat Apr 04 03:21:46.169862 2026] [:error] [pid 12081:tid 12117] [client 4.225.220.243:51324] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adATSqMJBCYerZTQdmI_GAAAAFE"]
[Sat Apr 04 03:21:46.702157 2026] [:error] [pid 12233:tid 12252] [client 4.225.220.243:51327] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adATShQDAzkmdfiSgI0CQAAAARE"]
[Sat Apr 04 03:21:47.241119 2026] [:error] [pid 12097:tid 12170] [client 4.225.220.243:50704] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adATSxnkcvJ01y2CY3nkJAAAAM8"]
[Sat Apr 04 03:21:47.787010 2026] [:error] [pid 12097:tid 12163] [client 4.225.220.243:34978] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adATSxnkcvJ01y2CY3nkJgAAAMg"]
[Sat Apr 04 03:21:48.328550 2026] [:error] [pid 12081:tid 12111] [client 4.225.220.243:51292] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adATTKMJBCYerZTQdmI_IAAAAEs"]
[Sat Apr 04 03:21:48.868633 2026] [:error] [pid 12081:tid 12115] [client 4.225.220.243:46411] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adATTKMJBCYerZTQdmI_JQAAAE8"]
[Sat Apr 04 03:21:49.418095 2026] [:error] [pid 12097:tid 12164] [client 4.225.220.243:58303] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adATTRnkcvJ01y2CY3nkLQAAAMk"]
[Sat Apr 04 03:21:49.959558 2026] [:error] [pid 12089:tid 12144] [client 4.225.220.243:48208] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adATTUSCG1Z_hi7I_jKVtAAAAJE"]
[Sat Apr 04 03:21:50.524286 2026] [:error] [pid 12097:tid 12170] [client 4.225.220.243:50805] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adATThnkcvJ01y2CY3nkMQAAAM8"]
[Sat Apr 04 03:21:51.077972 2026] [:error] [pid 12081:tid 12119] [client 4.225.220.243:48200] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adATT6MJBCYerZTQdmI_LAAAAFM"]
[Sat Apr 04 03:21:51.632789 2026] [:error] [pid 12233:tid 12246] [client 4.225.220.243:58339] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adATTxQDAzkmdfiSgI0CSgAAAQs"]
[Sat Apr 04 03:21:52.197186 2026] [:error] [pid 12233:tid 12256] [client 4.225.220.243:46414] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adATUBQDAzkmdfiSgI0CTQAAARU"]
[Sat Apr 04 03:21:52.801098 2026] [:error] [pid 44382:tid 44402] [client 4.225.220.243:59946] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adATUJpzSLFOX5FpZ8rvygAAABI"]
[Sat Apr 04 03:21:53.346172 2026] [:error] [pid 12233:tid 12238] [client 4.225.220.243:57602] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adATURQDAzkmdfiSgI0CWQAAAQM"]
[Sat Apr 04 03:21:53.926825 2026] [:error] [pid 12081:tid 12112] [client 4.225.220.243:58305] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adATUaMJBCYerZTQdmI_MwAAAEw"]
[Sat Apr 04 03:21:54.476280 2026] [:error] [pid 44382:tid 44401] [client 4.225.220.243:59964] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adATUppzSLFOX5FpZ8rv0AAAABE"]
[Sat Apr 04 03:21:55.048514 2026] [:error] [pid 12081:tid 12124] [client 4.225.220.243:46402] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adATU6MJBCYerZTQdmI_NQAAAFg"]
[Sat Apr 04 03:21:55.586324 2026] [:error] [pid 44382:tid 44391] [client 4.225.220.243:48201] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adATU5pzSLFOX5FpZ8rv3QAAAAc"]
[Sat Apr 04 03:21:56.130543 2026] [:error] [pid 44382:tid 44400] [client 4.225.220.243:46400] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adATVJpzSLFOX5FpZ8rv4wAAABA"]
[Sat Apr 04 03:21:56.675584 2026] [:error] [pid 44382:tid 44391] [client 4.225.220.243:50769] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adATVJpzSLFOX5FpZ8rv6AAAAAc"]
[Sat Apr 04 03:21:57.211303 2026] [:error] [pid 12233:tid 12255] [client 4.225.220.243:6583] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adATVRQDAzkmdfiSgI0CXQAAARQ"]
[Sat Apr 04 03:21:57.747948 2026] [:error] [pid 12089:tid 12151] [client 4.225.220.243:59921] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adATVUSCG1Z_hi7I_jKVvwAAAJg"]
[Sat Apr 04 03:21:58.279418 2026] [:error] [pid 12233:tid 12244] [client 4.225.220.243:58299] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adATVhQDAzkmdfiSgI0CYwAAAQk"]
[Sat Apr 04 03:21:58.825113 2026] [:error] [pid 12233:tid 12253] [client 4.225.220.243:50711] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adATVhQDAzkmdfiSgI0CaQAAARI"]
[Sat Apr 04 03:21:59.366720 2026] [:error] [pid 12089:tid 12149] [client 4.225.220.243:51280] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adATV0SCG1Z_hi7I_jKVwgAAAJY"]
[Sat Apr 04 03:21:59.904076 2026] [:error] [pid 44382:tid 44393] [client 4.225.220.243:8049] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adATV5pzSLFOX5FpZ8rv7QAAAAk"]
[Sat Apr 04 03:22:00.461867 2026] [:error] [pid 12233:tid 12254] [client 4.225.220.243:48206] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adATWBQDAzkmdfiSgI0CcgAAARM"]
[Sat Apr 04 03:22:00.998850 2026] [:error] [pid 12233:tid 12252] [client 4.225.220.243:6585] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adATWBQDAzkmdfiSgI0CdwAAARE"]
[Sat Apr 04 03:22:01.559358 2026] [:error] [pid 12233:tid 12241] [client 4.225.220.243:58262] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adATWRQDAzkmdfiSgI0CfQAAAQY"]
[Sat Apr 04 03:22:02.090768 2026] [:error] [pid 44382:tid 44397] [client 4.225.220.243:58310] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adATWppzSLFOX5FpZ8rv7gAAAA0"]
[Sat Apr 04 03:22:02.624661 2026] [:error] [pid 12233:tid 12240] [client 4.225.220.243:51279] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adATWhQDAzkmdfiSgI0CggAAAQU"]
[Sat Apr 04 03:22:03.171401 2026] [:error] [pid 44382:tid 44398] [client 4.225.220.243:6547] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adATW5pzSLFOX5FpZ8rv8AAAAA4"]
[Sat Apr 04 03:22:03.700828 2026] [:error] [pid 12089:tid 12148] [client 4.225.220.243:8043] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adATW0SCG1Z_hi7I_jKV0QAAAJU"]
[Sat Apr 04 03:22:04.232553 2026] [:error] [pid 12081:tid 12106] [client 4.225.220.243:50793] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adATXKMJBCYerZTQdmI_SwAAAEY"]
[Sat Apr 04 03:22:04.784767 2026] [:error] [pid 12097:tid 12174] [client 4.225.220.243:50801] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adATXBnkcvJ01y2CY3nkQwAAANM"]
[Sat Apr 04 03:22:05.319104 2026] [:error] [pid 12081:tid 12122] [client 4.225.220.243:6569] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adATXaMJBCYerZTQdmI_UgAAAFY"]
[Sat Apr 04 03:22:05.855090 2026] [:error] [pid 44382:tid 44394] [client 4.225.220.243:8024] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adATXZpzSLFOX5FpZ8rv_gAAAAo"]
[Sat Apr 04 03:22:06.392478 2026] [:error] [pid 44382:tid 44388] [client 4.225.220.243:48194] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adATXppzSLFOX5FpZ8rwAgAAAAQ"]
[Sat Apr 04 03:22:06.918495 2026] [:error] [pid 44382:tid 44408] [client 4.225.220.243:50796] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adATXppzSLFOX5FpZ8rwCAAAABg"]
[Sat Apr 04 03:22:07.451386 2026] [:error] [pid 12233:tid 12247] [client 4.225.220.243:8037] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adATXxQDAzkmdfiSgI0CkQAAAQw"]
[Sat Apr 04 03:22:07.993991 2026] [:error] [pid 12081:tid 12121] [client 4.225.220.243:58319] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adATX6MJBCYerZTQdmI_VQAAAFU"]
[Sat Apr 04 03:22:08.529954 2026] [:error] [pid 12089:tid 12144] [client 4.225.220.243:46401] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adATYESCG1Z_hi7I_jKV1AAAAJE"]
[Sat Apr 04 03:22:09.061289 2026] [:error] [pid 12089:tid 12149] [client 4.225.220.243:58288] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adATYUSCG1Z_hi7I_jKV1wAAAJY"]
[Sat Apr 04 03:22:09.615550 2026] [:error] [pid 12081:tid 12114] [client 4.225.220.243:58298] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adATYaMJBCYerZTQdmI_WwAAAE4"]
[Sat Apr 04 03:22:10.151905 2026] [:error] [pid 44382:tid 44386] [client 4.225.220.243:50752] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adATYppzSLFOX5FpZ8rwFwAAAAI"]
[Sat Apr 04 03:22:10.680613 2026] [:error] [pid 44382:tid 44388] [client 4.225.220.243:50792] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adATYppzSLFOX5FpZ8rwHAAAAAQ"]
[Sat Apr 04 03:22:11.216827 2026] [:error] [pid 12233:tid 12237] [client 4.225.220.243:58304] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adATYxQDAzkmdfiSgI0CowAAAQI"]
[Sat Apr 04 03:22:11.745104 2026] [:error] [pid 12081:tid 12107] [client 4.225.220.243:6994] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adATY6MJBCYerZTQdmI_YAAAAEc"]
[Sat Apr 04 03:22:12.273734 2026] [:error] [pid 44382:tid 44384] [client 4.225.220.243:50808] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adATZJpzSLFOX5FpZ8rwJgAAAAA"]
[Sat Apr 04 03:22:12.805861 2026] [:error] [pid 44382:tid 44388] [client 4.225.220.243:6553] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adATZJpzSLFOX5FpZ8rwKAAAAAQ"]
[Sat Apr 04 03:22:13.347061 2026] [:error] [pid 44382:tid 44391] [client 4.225.220.243:58242] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "adATZZpzSLFOX5FpZ8rwMQAAAAc"]
[Sat Apr 04 03:22:13.899263 2026] [:error] [pid 44382:tid 44396] [client 4.225.220.243:51269] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "adATZZpzSLFOX5FpZ8rwNgAAAAw"]
[Sat Apr 04 03:22:21.223672 2026] [:error] [pid 44382:tid 44396] [client 4.225.220.243:50797] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adATbZpzSLFOX5FpZ8rwfwAAAAw"]
[Sat Apr 04 03:22:21.756425 2026] [:error] [pid 12097:tid 12168] [client 4.225.220.243:8035] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adATbRnkcvJ01y2CY3nkYQAAAM0"]
[Sat Apr 04 03:22:22.283322 2026] [:error] [pid 44382:tid 44394] [client 4.225.220.243:46462] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adATbppzSLFOX5FpZ8rwhAAAAAo"]
[Sat Apr 04 03:22:22.821464 2026] [:error] [pid 12081:tid 12101] [client 4.225.220.243:58281] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adATbqMJBCYerZTQdmI_fAAAAEE"]
[Sat Apr 04 03:22:23.347250 2026] [:error] [pid 12097:tid 12157] [client 4.225.220.243:8054] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adATbxnkcvJ01y2CY3nkawAAAMI"]
[Sat Apr 04 03:22:23.875938 2026] [:error] [pid 44382:tid 44386] [client 4.225.220.243:58681] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adATb5pzSLFOX5FpZ8rwjQAAAAI"]
[Sat Apr 04 03:22:24.455901 2026] [:error] [pid 12233:tid 12251] [client 4.225.220.243:6533] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adATcBQDAzkmdfiSgI0CwgAAARA"]
[Sat Apr 04 03:22:24.986491 2026] [:error] [pid 44382:tid 44391] [client 4.225.220.243:6549] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adATcJpzSLFOX5FpZ8rwlwAAAAc"]
[Sat Apr 04 03:22:25.517521 2026] [:error] [pid 12089:tid 12150] [client 4.225.220.243:34951] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adATcUSCG1Z_hi7I_jKV8gAAAJc"]
[Sat Apr 04 03:22:26.055972 2026] [:error] [pid 12233:tid 12250] [client 4.225.220.243:46412] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adATchQDAzkmdfiSgI0CxAAAAQ8"]
[Sat Apr 04 03:22:26.645753 2026] [:error] [pid 44382:tid 44402] [client 4.225.220.243:48229] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adATcppzSLFOX5FpZ8rwpwAAABI"]
[Sat Apr 04 03:22:27.177195 2026] [:error] [pid 44382:tid 44408] [client 4.225.220.243:50810] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adATc5pzSLFOX5FpZ8rwqgAAABg"]
[Sat Apr 04 03:22:27.752994 2026] [:error] [pid 12081:tid 12112] [client 4.225.220.243:58637] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adATc6MJBCYerZTQdmI_ggAAAEw"]
[Sat Apr 04 03:22:28.282137 2026] [:error] [pid 12233:tid 12253] [client 4.225.220.243:50772] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adATdBQDAzkmdfiSgI0CzwAAARI"]
[Sat Apr 04 03:22:28.847771 2026] [:error] [pid 12097:tid 12169] [client 4.225.220.243:35000] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adATdBnkcvJ01y2CY3nkdAAAAM4"]
[Sat Apr 04 03:22:29.380937 2026] [:error] [pid 12081:tid 12107] [client 4.225.220.243:51305] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adATdaMJBCYerZTQdmI_iQAAAEc"]
[Sat Apr 04 03:22:29.933942 2026] [:error] [pid 12097:tid 12171] [client 4.225.220.243:58290] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adATdRnkcvJ01y2CY3nkdgAAANA"]
[Sat Apr 04 03:22:30.487557 2026] [:error] [pid 44382:tid 44406] [client 4.225.220.243:8016] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adATdppzSLFOX5FpZ8rwtAAAABY"]
[Sat Apr 04 03:22:31.044052 2026] [:error] [pid 12089:tid 12129] [client 4.225.220.243:58263] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adATd0SCG1Z_hi7I_jKV_gAAAII"]
[Sat Apr 04 03:22:31.630585 2026] [:error] [pid 12233:tid 12258] [client 4.225.220.243:44539] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adATdxQDAzkmdfiSgI0C4QAAARc"]
[Sat Apr 04 03:22:32.179873 2026] [:error] [pid 44382:tid 44401] [client 4.225.220.243:44522] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adATeJpzSLFOX5FpZ8rwtwAAABE"]
[Sat Apr 04 03:22:32.724392 2026] [:error] [pid 12233:tid 12246] [client 4.225.220.243:44528] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adATeBQDAzkmdfiSgI0C5wAAAQs"]
[Sat Apr 04 03:22:33.254765 2026] [:error] [pid 12233:tid 12241] [client 4.225.220.243:58668] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adATeRQDAzkmdfiSgI0C7wAAAQY"]
[Sat Apr 04 03:22:33.790518 2026] [:error] [pid 12233:tid 12256] [client 4.225.220.243:8030] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adATeRQDAzkmdfiSgI0C8gAAARU"]
[Sat Apr 04 03:22:34.320506 2026] [:error] [pid 12089:tid 12133] [client 4.225.220.243:50799] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adATekSCG1Z_hi7I_jKWBAAAAIY"]
[Sat Apr 04 03:22:34.861692 2026] [:error] [pid 44382:tid 44384] [client 4.225.220.243:8027] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adATeppzSLFOX5FpZ8rwugAAAAA"]
[Sat Apr 04 03:22:35.416180 2026] [:error] [pid 12089:tid 12147] [client 4.225.220.243:58269] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adATe0SCG1Z_hi7I_jKWCQAAAJQ"]
[Sat Apr 04 03:22:35.950221 2026] [:error] [pid 12089:tid 12148] [client 4.225.220.243:46460] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adATe0SCG1Z_hi7I_jKWDAAAAJU"]
[Sat Apr 04 03:22:36.485952 2026] [:error] [pid 12097:tid 12172] [client 4.225.220.243:50716] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adATfBnkcvJ01y2CY3nkhgAAANE"]
[Sat Apr 04 03:22:37.034705 2026] [:error] [pid 12097:tid 12157] [client 4.225.220.243:48247] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adATfRnkcvJ01y2CY3nkjAAAAMI"]
[Sat Apr 04 03:22:37.595463 2026] [:error] [pid 44382:tid 44401] [client 4.225.220.243:51289] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adATfZpzSLFOX5FpZ8rwwQAAABE"]
[Sat Apr 04 03:22:38.129947 2026] [:error] [pid 12097:tid 12160] [client 4.225.220.243:34948] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adATfhnkcvJ01y2CY3nkkAAAAMU"]
[Sat Apr 04 03:22:38.674605 2026] [:error] [pid 44382:tid 44384] [client 4.225.220.243:6519] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adATfppzSLFOX5FpZ8rwyQAAAAA"]
[Sat Apr 04 03:22:39.210904 2026] [:error] [pid 44382:tid 44385] [client 4.225.220.243:50809] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adATf5pzSLFOX5FpZ8rwzgAAAAE"]
[Sat Apr 04 03:22:39.746341 2026] [:error] [pid 44382:tid 44405] [client 4.225.220.243:58291] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adATf5pzSLFOX5FpZ8rw0gAAABU"]
[Sat Apr 04 03:22:40.273219 2026] [:error] [pid 12081:tid 12101] [client 4.225.220.243:58343] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adATgKMJBCYerZTQdmI_nQAAAEE"]
[Sat Apr 04 03:22:40.808449 2026] [:error] [pid 44382:tid 44387] [client 4.225.220.243:58659] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adATgJpzSLFOX5FpZ8rw1wAAAAM"]
[Sat Apr 04 03:22:41.338282 2026] [:error] [pid 12233:tid 12243] [client 4.225.220.243:50757] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adATgRQDAzkmdfiSgI0DGwAAAQg"]
[Sat Apr 04 03:22:41.863872 2026] [:error] [pid 12097:tid 12177] [client 4.225.220.243:8059] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adATgRnkcvJ01y2CY3nklgAAANY"]
[Sat Apr 04 03:22:42.405635 2026] [:error] [pid 12233:tid 12250] [client 4.225.220.243:58655] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adATghQDAzkmdfiSgI0DJQAAAQ8"]
[Sat Apr 04 03:22:42.944086 2026] [:error] [pid 12233:tid 12256] [client 4.225.220.243:46428] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adATghQDAzkmdfiSgI0DKgAAARU"]
[Sat Apr 04 03:22:43.510109 2026] [:error] [pid 44382:tid 44391] [client 4.225.220.243:59933] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adATg5pzSLFOX5FpZ8rw7QAAAAc"]
[Sat Apr 04 03:22:44.060280 2026] [:error] [pid 12089:tid 12129] [client 4.225.220.243:48212] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adAThESCG1Z_hi7I_jKWEwAAAII"]
[Sat Apr 04 03:22:44.639077 2026] [:error] [pid 12089:tid 12127] [client 4.225.220.243:50688] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adAThESCG1Z_hi7I_jKWFQAAAIA"]
[Sat Apr 04 03:22:45.202888 2026] [:error] [pid 44382:tid 44390] [client 4.225.220.243:44525] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adAThZpzSLFOX5FpZ8rw9gAAAAY"]
[Sat Apr 04 03:22:45.765711 2026] [:error] [pid 44382:tid 44388] [client 4.225.220.243:50811] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adAThZpzSLFOX5FpZ8rw_QAAAAQ"]
[Sat Apr 04 03:22:46.315612 2026] [:error] [pid 12097:tid 12168] [client 4.225.220.243:46421] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adAThhnkcvJ01y2CY3nkoAAAAM0"]
[Sat Apr 04 03:22:46.897618 2026] [:error] [pid 12081:tid 12119] [client 4.225.220.243:58666] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adAThqMJBCYerZTQdmI_qwAAAFM"]
[Sat Apr 04 03:22:47.525011 2026] [:error] [pid 12081:tid 12115] [client 4.225.220.243:46410] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adATh6MJBCYerZTQdmI_rwAAAE8"]
[Sat Apr 04 03:22:48.067076 2026] [:error] [pid 44382:tid 44396] [client 4.225.220.243:46454] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adATiJpzSLFOX5FpZ8rxCAAAAAw"]
[Sat Apr 04 03:22:48.641079 2026] [:error] [pid 12081:tid 12117] [client 4.225.220.243:50706] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adATiKMJBCYerZTQdmI_sgAAAFE"]
[Sat Apr 04 03:22:49.259316 2026] [:error] [pid 44382:tid 44393] [client 4.225.220.243:46413] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adATiZpzSLFOX5FpZ8rxDwAAAAk"]
[Sat Apr 04 03:22:49.994057 2026] [:error] [pid 44382:tid 44396] [client 4.225.220.243:58295] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adATiZpzSLFOX5FpZ8rxFgAAAAw"]
[Sat Apr 04 03:22:50.759021 2026] [:error] [pid 12233:tid 12250] [client 4.225.220.243:51325] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adATihQDAzkmdfiSgI0DVwAAAQ8"]
[Sat Apr 04 03:22:51.575979 2026] [:error] [pid 44382:tid 44385] [client 4.225.220.243:46432] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adATi5pzSLFOX5FpZ8rxIgAAAAE"]
[Sat Apr 04 03:22:52.164652 2026] [:error] [pid 12233:tid 12238] [client 4.225.220.243:50768] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adATjBQDAzkmdfiSgI0DYQAAAQM"]
[Sat Apr 04 03:22:52.805086 2026] [:error] [pid 12233:tid 12253] [client 4.225.220.243:51303] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adATjBQDAzkmdfiSgI0DZQAAARI"]
[Sat Apr 04 03:22:53.624170 2026] [:error] [pid 12089:tid 12136] [client 4.225.220.243:44481] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adATjUSCG1Z_hi7I_jKWIAAAAIk"]
[Sat Apr 04 03:22:54.438864 2026] [:error] [pid 12081:tid 12120] [client 4.225.220.243:44482] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adATjqMJBCYerZTQdmI_vQAAAFQ"]
[Sat Apr 04 03:22:55.152854 2026] [:error] [pid 12097:tid 12154] [client 4.225.220.243:50710] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adATjxnkcvJ01y2CY3nkuQAAAMA"]
[Sat Apr 04 03:22:56.081089 2026] [:error] [pid 44382:tid 44402] [client 4.225.220.243:8057] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "adATkJpzSLFOX5FpZ8rxLAAAABI"]
[Sat Apr 04 03:22:57.719935 2026] [:error] [pid 12081:tid 12109] [client 4.225.220.243:50702] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "adATkaMJBCYerZTQdmI_ygAAAEk"]
[Sat Apr 04 03:22:58.396125 2026] [:error] [pid 44382:tid 44402] [client 4.225.220.243:6911] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "adATkppzSLFOX5FpZ8rxNAAAABI"]
[Sat Apr 04 03:22:58.949348 2026] [:error] [pid 12233:tid 12257] [client 4.225.220.243:44484] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "adATkhQDAzkmdfiSgI0DkgAAARY"]
[Sat Apr 04 03:22:59.797782 2026] [:error] [pid 12081:tid 12122] [client 4.225.220.243:46455] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adATk6MJBCYerZTQdmI_1QAAAFY"]
[Sat Apr 04 03:23:00.531288 2026] [:error] [pid 12233:tid 12243] [client 4.225.220.243:6899] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adATlBQDAzkmdfiSgI0DnwAAAQg"]
[Sat Apr 04 03:23:02.108783 2026] [:error] [pid 12097:tid 12154] [client 4.225.220.243:44492] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adATlhnkcvJ01y2CY3nkwwAAAMA"]
[Sat Apr 04 03:23:03.033546 2026] [:error] [pid 12097:tid 12173] [client 4.225.220.243:44519] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "adATlxnkcvJ01y2CY3nkxgAAANI"]
[Sat Apr 04 03:23:03.804926 2026] [:error] [pid 12233:tid 12241] [client 4.225.220.243:6469] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adATlxQDAzkmdfiSgI0DswAAAQY"]
[Sat Apr 04 03:23:04.652834 2026] [:error] [pid 12233:tid 12235] [client 4.225.220.243:64505] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adATmBQDAzkmdfiSgI0DuwAAAQA"]
[Sat Apr 04 03:23:06.567928 2026] [:error] [pid 12233:tid 12254] [client 4.225.220.243:6903] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adATmhQDAzkmdfiSgI0DxgAAARM"]
[Sat Apr 04 03:23:07.301301 2026] [:error] [pid 12089:tid 12129] [client 4.225.220.243:58251] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adATm0SCG1Z_hi7I_jKWLAAAAII"]
[Sat Apr 04 03:23:07.906923 2026] [:error] [pid 44382:tid 44401] [client 4.225.220.243:58280] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adATm5pzSLFOX5FpZ8rxYAAAABE"]
[Sat Apr 04 03:23:10.100845 2026] [:error] [pid 44382:tid 44397] [client 4.225.220.243:64448] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adATnppzSLFOX5FpZ8rxeAAAAA0"]
[Sat Apr 04 03:23:11.086210 2026] [:error] [pid 12081:tid 12111] [client 4.225.220.243:6492] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adATn6MJBCYerZTQdmI_3QAAAEs"]
[Sat Apr 04 03:23:11.899150 2026] [:error] [pid 44382:tid 44385] [client 4.225.220.243:64508] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adATn5pzSLFOX5FpZ8rxiQAAAAE"]
[Sat Apr 04 03:23:12.891321 2026] [:error] [pid 44382:tid 44408] [client 4.225.220.243:58272] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adAToJpzSLFOX5FpZ8rxkQAAABg"]
[Sat Apr 04 03:23:14.368501 2026] [:error] [pid 12081:tid 12120] [client 4.225.220.243:8051] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adAToqMJBCYerZTQdmI_5wAAAFQ"]
[Sat Apr 04 03:23:15.232843 2026] [:error] [pid 12233:tid 12241] [client 4.225.220.243:6468] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adAToxQDAzkmdfiSgI0D_wAAAQY"]
[Sat Apr 04 03:23:16.711608 2026] [:error] [pid 12089:tid 12143] [client 4.225.220.243:44496] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adATpESCG1Z_hi7I_jKWNAAAAJA"]
[Sat Apr 04 03:23:18.907065 2026] [:error] [pid 12081:tid 12103] [client 4.225.220.243:8047] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "adATpqMJBCYerZTQdmI_7wAAAEM"]
[Sat Apr 04 03:23:27.535081 2026] [:error] [pid 12233:tid 12238] [client 4.225.220.243:46381] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adATrxQDAzkmdfiSgI0ERwAAAQM"]
[Sat Apr 04 03:23:28.345088 2026] [:error] [pid 12097:tid 12176] [client 4.225.220.243:6495] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adATsBnkcvJ01y2CY3nk9wAAANU"]
[Sat Apr 04 03:23:28.976591 2026] [:error] [pid 12233:tid 12248] [client 4.225.220.243:64493] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adATsBQDAzkmdfiSgI0ETQAAAQ0"]
[Sat Apr 04 03:23:29.586761 2026] [:error] [pid 44382:tid 44404] [client 4.225.220.243:58241] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adATsZpzSLFOX5FpZ8rx4AAAABQ"]
[Sat Apr 04 03:23:30.199916 2026] [:error] [pid 44382:tid 44397] [client 4.225.220.243:6872] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "adATsppzSLFOX5FpZ8rx5gAAAA0"]
[Sat Apr 04 03:23:30.812570 2026] [:error] [pid 12097:tid 12166] [client 4.225.220.243:6853] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "adATshnkcvJ01y2CY3nk_AAAAMs"]
[Sat Apr 04 03:23:31.453298 2026] [:error] [pid 12097:tid 12167] [client 4.225.220.243:8007] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "adATsxnkcvJ01y2CY3nlAwAAAMw"]
[Sat Apr 04 03:23:32.242632 2026] [:error] [pid 44382:tid 44385] [client 4.225.220.243:44526] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "adATtJpzSLFOX5FpZ8rx9AAAAAE"]
[Sat Apr 04 03:23:32.792394 2026] [:error] [pid 12233:tid 12244] [client 4.225.220.243:44543] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adATtBQDAzkmdfiSgI0EVAAAAQk"]
[Sat Apr 04 03:23:33.389213 2026] [:error] [pid 44382:tid 44404] [client 4.225.220.243:37505] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adATtZpzSLFOX5FpZ8rx_QAAABQ"]
[Sat Apr 04 03:23:33.989854 2026] [:error] [pid 12097:tid 12155] [client 4.225.220.243:37545] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adATtRnkcvJ01y2CY3nlCgAAAME"]
[Sat Apr 04 03:23:34.584305 2026] [:error] [pid 12097:tid 12172] [client 4.225.220.243:46414] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adATthnkcvJ01y2CY3nlDAAAANE"]
[Sat Apr 04 03:23:35.191779 2026] [:error] [pid 12233:tid 12243] [client 4.225.220.243:44494] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adATtxQDAzkmdfiSgI0EXAAAAQg"]
[Sat Apr 04 03:23:35.897092 2026] [:error] [pid 12097:tid 12167] [client 4.225.220.243:58642] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adATtxnkcvJ01y2CY3nlEQAAAMw"]
[Sat Apr 04 03:23:36.483687 2026] [:error] [pid 12081:tid 12107] [client 4.225.220.243:46369] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adATuKMJBCYerZTQdmJAEAAAAEc"]
[Sat Apr 04 03:23:37.071063 2026] [:error] [pid 12081:tid 12115] [client 4.225.220.243:58329] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adATuaMJBCYerZTQdmJAFwAAAE8"]
[Sat Apr 04 03:23:37.627380 2026] [:error] [pid 12233:tid 12235] [client 4.225.220.243:8009] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adATuRQDAzkmdfiSgI0EXwAAAQA"]
[Sat Apr 04 03:23:38.308703 2026] [:error] [pid 44382:tid 44385] [client 4.225.220.243:58665] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adATuppzSLFOX5FpZ8ryCwAAAAE"]
[Sat Apr 04 03:23:39.040725 2026] [:error] [pid 44382:tid 44406] [client 4.225.220.243:58640] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adATu5pzSLFOX5FpZ8ryEQAAABY"]
[Sat Apr 04 03:23:39.871697 2026] [:error] [pid 12081:tid 12111] [client 4.225.220.243:52603] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adATu6MJBCYerZTQdmJAJAAAAEs"]
[Sat Apr 04 03:23:40.481092 2026] [:error] [pid 12081:tid 12104] [client 4.225.220.243:46395] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adATvKMJBCYerZTQdmJAKwAAAEQ"]
[Sat Apr 04 03:23:41.150127 2026] [:error] [pid 12089:tid 12150] [client 4.225.220.243:46406] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adATvUSCG1Z_hi7I_jKWVgAAAJc"]
[Sat Apr 04 03:23:41.711542 2026] [:error] [pid 12097:tid 12173] [client 4.225.220.243:37528] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adATvRnkcvJ01y2CY3nlHgAAANI"]
[Sat Apr 04 03:23:42.338976 2026] [:error] [pid 12081:tid 12123] [client 4.225.220.243:50703] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adATvqMJBCYerZTQdmJALwAAAFc"]
[Sat Apr 04 03:23:42.983731 2026] [:error] [pid 12081:tid 12117] [client 4.225.220.243:46360] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adATvqMJBCYerZTQdmJAMgAAAFE"]
[Sat Apr 04 03:23:43.642782 2026] [:error] [pid 12081:tid 12115] [client 4.225.220.243:6511] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adATv6MJBCYerZTQdmJANgAAAE8"]
[Sat Apr 04 03:23:44.221964 2026] [:error] [pid 44382:tid 44397] [client 4.225.220.243:64468] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adATwJpzSLFOX5FpZ8ryLQAAAA0"]
[Sat Apr 04 03:23:45.010787 2026] [:error] [pid 12081:tid 12116] [client 4.225.220.243:8061] [client 4.225.220.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adATwaMJBCYerZTQdmJAPAAAAFA"]
[Sat Apr 04 04:37:47.426073 2026] [:error] [pid 2457:tid 2481] [client 72.146.45.53:18985] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymi.php"] [unique_id "adAlG0mNHppaMd92ZpdEtQAAAAQ"]
[Sat Apr 04 04:37:47.900293 2026] [:error] [pid 2567:tid 2593] [client 72.146.45.53:41389] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymi.php"] [unique_id "adAlG2JJmfRsTrAKjdQugAAAANM"]
[Sat Apr 04 04:37:48.370839 2026] [:error] [pid 37114:tid 37129] [client 72.146.45.53:44269] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymi.php"] [unique_id "adAlHM-DnSj3fGMexeJftQAAAQ0"]
[Sat Apr 04 04:37:48.844157 2026] [:error] [pid 2567:tid 2598] [client 72.146.45.53:55164] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymi.php"] [unique_id "adAlHGJJmfRsTrAKjdQuhwAAANg"]
[Sat Apr 04 04:37:49.315071 2026] [:error] [pid 37114:tid 37122] [client 72.146.45.53:26317] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adAlHc-DnSj3fGMexeJftwAAAQY"]
[Sat Apr 04 04:37:49.779306 2026] [:error] [pid 2567:tid 2584] [client 72.146.45.53:55109] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adAlHWJJmfRsTrAKjdQujAAAAMo"]
[Sat Apr 04 04:37:50.246339 2026] [:error] [pid 2567:tid 2581] [client 72.146.45.53:63048] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adAlHmJJmfRsTrAKjdQukAAAAMc"]
[Sat Apr 04 04:37:50.710587 2026] [:error] [pid 2567:tid 2588] [client 72.146.45.53:18949] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adAlHmJJmfRsTrAKjdQukwAAAM4"]
[Sat Apr 04 04:37:51.174536 2026] [:error] [pid 37114:tid 37138] [client 72.146.45.53:39986] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adAlH8-DnSj3fGMexeJfvgAAARY"]
[Sat Apr 04 04:37:51.638804 2026] [:error] [pid 2567:tid 2577] [client 72.146.45.53:41363] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adAlH2JJmfRsTrAKjdQumgAAAMM"]
[Sat Apr 04 04:37:52.104483 2026] [:error] [pid 2457:tid 2496] [client 72.146.45.53:16893] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adAlIEmNHppaMd92ZpdEuAAAABM"]
[Sat Apr 04 04:37:52.571302 2026] [:error] [pid 2567:tid 2583] [client 72.146.45.53:55140] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adAlIGJJmfRsTrAKjdQunwAAAMk"]
[Sat Apr 04 04:37:53.038175 2026] [:error] [pid 2458:tid 2523] [client 72.146.45.53:19006] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "adAlISNozic5SuWqclnJZAAAAFM"]
[Sat Apr 04 04:37:53.512640 2026] [:error] [pid 2567:tid 2596] [client 72.146.45.53:16868] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "adAlIWJJmfRsTrAKjdQupAAAANY"]
[Sat Apr 04 04:37:53.988130 2026] [:error] [pid 2457:tid 2488] [client 72.146.45.53:47923] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "adAlIUmNHppaMd92ZpdEuQAAAAs"]
[Sat Apr 04 04:37:54.454303 2026] [:error] [pid 2457:tid 2501] [client 72.146.45.53:39995] [client 72.146.45.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "adAlIkmNHppaMd92ZpdEvQAAABg"]
[Sat Apr 04 07:41:37.522286 2026] [:error] [pid 2457:tid 2484] [client 43.157.149.188:47226] [client 43.157.149.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adBQMUmNHppaMd92ZpdwHQAAAAc"]
[Sat Apr 04 11:11:09.965683 2026] [:error] [pid 2567:tid 2590] [client 182.42.105.85:50575] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adCBTWJJmfRsTrAKjdRCrwAAANA"]
[Sat Apr 04 12:43:21.040168 2026] [:error] [pid 2459:tid 2544] [client 188.27.87.68:52203] [client 188.27.87.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.27.87.68, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adCW6QefyCmu4LR_PloKtQAAAIw"]
[Sat Apr 04 12:50:48.371766 2026] [:error] [pid 37114:tid 37137] [client 136.158.61.105:60909] [client 136.158.61.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.61.105, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adCYqM-DnSj3fGMexeJUiwAAARU"]
[Sat Apr 04 17:36:37.262526 2026] [:error] [pid 37114:tid 37122] [client 43.140.247.223:50610] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adDbpc-DnSj3fGMexeIDqQAAAQY"]
[Sat Apr 04 17:47:31.875893 2026] [:error] [pid 2459:tid 2534] [client 173.239.214.45:24385] [client 173.239.214.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adDeMwefyCmu4LR_PlqXSwAAAIM"]
[Sat Apr 04 18:14:38.973684 2026] [:error] [pid 2458:tid 2510] [client 159.89.55.133:53608] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adDkjiNozic5SuWqclnRwgAAAEY"]
[Sun Apr 05 03:07:12.224616 2026] [:error] [pid 54081:tid 54162] [client 216.73.216.145:21679] [client 216.73.216.145] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourcause.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "adFhYFJcnxTrqYU7_fpc9QAAANM"]
[Sun Apr 05 03:09:59.431498 2026] [:error] [pid 63313:tid 63322] [client 4.193.176.33:18617] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/"] [unique_id "adFiB-1cPeVj2b7ZXSSEyAAAAQM"]
[Sun Apr 05 03:09:59.788927 2026] [:error] [pid 63313:tid 63332] [client 4.193.176.33:18087] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/"] [unique_id "adFiB-1cPeVj2b7ZXSSEyQAAAQ0"]
[Sun Apr 05 03:10:00.143682 2026] [:error] [pid 63313:tid 63325] [client 4.193.176.33:18593] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/"] [unique_id "adFiCO1cPeVj2b7ZXSSEzQAAAQY"]
[Sun Apr 05 03:10:00.519587 2026] [:error] [pid 63313:tid 63321] [client 4.193.176.33:18587] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/"] [unique_id "adFiCO1cPeVj2b7ZXSSE0QAAAQI"]
[Sun Apr 05 03:58:44.550664 2026] [:error] [pid 45305:tid 45376] [client 43.166.134.47:52958] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adFtdOjDQjr7aWhjflC-cgAAAIU"]
[Sun Apr 05 06:20:38.749860 2026] [:error] [pid 30921:tid 30936] [client 182.44.67.97:55151] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adGOtmFGQVn8Q0ueB256vwAAAQ0"]
[Sun Apr 05 06:43:43.991675 2026] [:error] [pid 30921:tid 30933] [client 217.216.37.56:62987] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adGUH2FGQVn8Q0ueB26G-AAAAQo"]
[Sun Apr 05 06:43:44.203177 2026] [:error] [pid 45305:tid 45395] [client 217.216.37.56:60246] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adGUIOjDQjr7aWhjflBD3gAAAJg"]
[Sun Apr 05 06:43:44.414501 2026] [:error] [pid 45303:tid 45331] [client 217.216.37.56:58497] [client 217.216.37.56] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/media/system/js/core.js"] [unique_id "adGUILboQ9eViZ4hdnmXKwAAAA4"]
[Sun Apr 05 07:45:32.295989 2026] [:error] [pid 45409:tid 45413] [client 172.213.234.56:37891] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGinNHt_Oyw03gjCNgNBQAAAMI"]
[Sun Apr 05 07:45:38.978962 2026] [:error] [pid 45409:tid 45435] [client 172.213.234.56:38529] [client 172.213.234.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adGiotHt_Oyw03gjCNgNFwAAANg"]
[Sun Apr 05 12:19:39.390163 2026] [:error] [pid 45305:tid 45384] [client 43.154.140.188:38222] [client 43.154.140.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adHi2-jDQjr7aWhjflBR1gAAAI0"]
[Sun Apr 05 13:31:34.675757 2026] [:error] [pid 45303:tid 45328] [client 109.107.253.17:37593] [client 109.107.253.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.107.253.17, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adHztrboQ9eViZ4hdnkhEQAAAAs"]
[Sun Apr 05 13:32:48.034936 2026] [:error] [pid 45305:tid 45381] [client 4.193.176.33:20155] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adH0AOjDQjr7aWhjflCKLQAAAIo"]
[Sun Apr 05 13:32:48.387789 2026] [:error] [pid 45303:tid 45331] [client 4.193.176.33:3256] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adH0ALboQ9eViZ4hdnkhjQAAAA4"]
[Sun Apr 05 13:32:48.738774 2026] [:error] [pid 45409:tid 45430] [client 4.193.176.33:22088] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adH0ANHt_Oyw03gjCNjXUAAAANM"]
[Sun Apr 05 13:32:49.145418 2026] [:error] [pid 45409:tid 45413] [client 4.193.176.33:20119] [client 4.193.176.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adH0AdHt_Oyw03gjCNjXUwAAAMI"]
[Sun Apr 05 14:50:45.114571 2026] [:error] [pid 45304:tid 45356] [client 159.198.37.208:43010] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "adIGRQ5jnqDKKovdRkmiggAAAEw"]
[Sun Apr 05 14:50:49.129632 2026] [:error] [pid 45305:tid 45379] [client 159.198.37.208:43024] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "adIGSejDQjr7aWhjflC3iAAAAIg"]
[Sun Apr 05 14:50:56.606570 2026] [:error] [pid 30921:tid 30945] [client 159.198.37.208:57804] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "adIGUGFGQVn8Q0ueB25SuQAAARY"]
[Sun Apr 05 14:50:59.027805 2026] [:error] [pid 45305:tid 45389] [client 159.198.37.208:57828] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "adIGU-jDQjr7aWhjflC3kQAAAJI"]
[Sun Apr 05 14:51:03.062431 2026] [:error] [pid 45409:tid 45422] [client 159.198.37.208:8030] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "adIGV9Ht_Oyw03gjCNgOGgAAAMs"]
[Sun Apr 05 14:51:05.003852 2026] [:error] [pid 45305:tid 45383] [client 159.198.37.208:8050] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "adIGWejDQjr7aWhjflC3ngAAAIw"]
[Sun Apr 05 14:51:08.281023 2026] [:error] [pid 45303:tid 45337] [client 159.198.37.208:8060] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "adIGXLboQ9eViZ4hdnk82wAAABQ"]
[Sun Apr 05 14:51:11.267103 2026] [:error] [pid 30921:tid 30923] [client 159.198.37.208:13642] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "adIGX2FGQVn8Q0ueB25S3AAAAQA"]
[Sun Apr 05 14:51:13.195976 2026] [:error] [pid 45304:tid 45367] [client 159.198.37.208:13668] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "adIGYQ5jnqDKKovdRkmiswAAAFc"]
[Sun Apr 05 14:51:15.735313 2026] [:error] [pid 30921:tid 30923] [client 159.198.37.208:13682] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "adIGY2FGQVn8Q0ueB25S5AAAAQA"]
[Sun Apr 05 14:51:17.085565 2026] [:error] [pid 45305:tid 45388] [client 159.198.37.208:13708] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "adIGZejDQjr7aWhjflC3twAAAJE"]
[Sun Apr 05 14:51:20.279487 2026] [:error] [pid 45303:tid 45329] [client 159.198.37.208:13716] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.swp"] [unique_id "adIGaLboQ9eViZ4hdnk87gAAAAw"]
[Sun Apr 05 14:51:28.520084 2026] [:error] [pid 45303:tid 45336] [client 159.198.37.208:47832] [client 159.198.37.208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env"] [unique_id "adIGcLboQ9eViZ4hdnk8-AAAABM"]
[Sun Apr 05 15:01:17.727254 2026] [:error] [pid 45304:tid 45363] [client 43.128.149.102:40146] [client 43.128.149.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adIIvQ5jnqDKKovdRkmlIAAAAFM"]
[Sun Apr 05 19:07:23.726780 2026] [:error] [pid 45409:tid 45431] [client 36.41.75.167:54054] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adJCa9Ht_Oyw03gjCNiJcAAAANQ"]
[Sun Apr 05 21:24:15.814127 2026] [:error] [pid 30921:tid 30926] [client 43.133.139.6:54052] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adJif2FGQVn8Q0ueB24eVAAAAQM"]
[Sun Apr 05 23:27:55.493166 2026] [:error] [pid 45409:tid 45414] [client 172.161.76.59:57250] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adJ_e9Ht_Oyw03gjCNh53QAAAMM"]
[Sun Apr 05 23:27:56.961365 2026] [:error] [pid 45305:tid 45372] [client 172.161.76.59:57231] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adJ_fOjDQjr7aWhjflCRXgAAAIE"]
[Sun Apr 05 23:27:58.893177 2026] [:error] [pid 45409:tid 45417] [client 172.161.76.59:55610] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adJ_ftHt_Oyw03gjCNh57QAAAMY"]
[Sun Apr 05 23:28:00.618107 2026] [:error] [pid 45304:tid 45347] [client 172.161.76.59:6696] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adJ_gA5jnqDKKovdRklG4gAAAEM"]
[Sun Apr 05 23:28:09.978938 2026] [:error] [pid 45304:tid 45357] [client 172.161.76.59:54732] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adJ_iQ5jnqDKKovdRklG8gAAAE0"]
[Sun Apr 05 23:28:20.496889 2026] [:error] [pid 45303:tid 45323] [client 172.161.76.59:54796] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adJ_lLboQ9eViZ4hdnmQuQAAAAY"]
[Sun Apr 05 23:28:21.563639 2026] [:error] [pid 45409:tid 45434] [client 172.161.76.59:6686] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adJ_ldHt_Oyw03gjCNh6SwAAANc"]
[Sun Apr 05 23:28:22.172151 2026] [:error] [pid 45409:tid 45419] [client 172.161.76.59:55611] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adJ_ltHt_Oyw03gjCNh6TwAAAMg"]
[Sun Apr 05 23:28:22.720565 2026] [:error] [pid 45409:tid 45412] [client 172.161.76.59:54807] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adJ_ltHt_Oyw03gjCNh6VAAAAME"]
[Sun Apr 05 23:28:23.348880 2026] [:error] [pid 45409:tid 45430] [client 172.161.76.59:54802] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adJ_l9Ht_Oyw03gjCNh6WwAAANM"]
[Sun Apr 05 23:28:24.386686 2026] [:error] [pid 45304:tid 45356] [client 172.161.76.59:53313] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adJ_mA5jnqDKKovdRklHEwAAAEw"]
[Sun Apr 05 23:28:24.960345 2026] [:error] [pid 45304:tid 45365] [client 172.161.76.59:55581] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adJ_mA5jnqDKKovdRklHFwAAAFU"]
[Sun Apr 05 23:28:25.734121 2026] [:error] [pid 45409:tid 45419] [client 172.161.76.59:57230] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adJ_mdHt_Oyw03gjCNh6aAAAAMg"]
[Sun Apr 05 23:28:26.301518 2026] [:error] [pid 45409:tid 45423] [client 172.161.76.59:55607] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adJ_mtHt_Oyw03gjCNh6bgAAAMw"]
[Sun Apr 05 23:28:26.850043 2026] [:error] [pid 45304:tid 45356] [client 172.161.76.59:53338] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adJ_mg5jnqDKKovdRklHGwAAAEw"]
[Sun Apr 05 23:28:27.367861 2026] [:error] [pid 45303:tid 45323] [client 172.161.76.59:55559] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adJ_m7boQ9eViZ4hdnmQxAAAAAY"]
[Sun Apr 05 23:28:28.494165 2026] [:error] [pid 45303:tid 45320] [client 172.161.76.59:7005] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adJ_nLboQ9eViZ4hdnmQyAAAAAM"]
[Sun Apr 05 23:28:29.124791 2026] [:error] [pid 45304:tid 45344] [client 172.161.76.59:6663] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adJ_nQ5jnqDKKovdRklHHQAAAEA"]
[Sun Apr 05 23:28:29.607282 2026] [:error] [pid 45305:tid 45375] [client 172.161.76.59:54820] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adJ_nejDQjr7aWhjflCRggAAAIQ"]
[Sun Apr 05 23:28:30.272598 2026] [:error] [pid 30921:tid 30941] [client 172.161.76.59:6989] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adJ_nmFGQVn8Q0ueB25cLwAAARI"]
[Sun Apr 05 23:28:30.806887 2026] [:error] [pid 45303:tid 45318] [client 172.161.76.59:54738] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adJ_nrboQ9eViZ4hdnmQzgAAAAE"]
[Sun Apr 05 23:28:31.282501 2026] [:error] [pid 45303:tid 45325] [client 172.161.76.59:7002] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adJ_n7boQ9eViZ4hdnmQ0QAAAAg"]
[Sun Apr 05 23:28:32.091875 2026] [:error] [pid 45304:tid 45353] [client 172.161.76.59:54735] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adJ_oA5jnqDKKovdRklHIwAAAEk"]
[Sun Apr 05 23:28:32.935564 2026] [:error] [pid 45304:tid 45346] [client 172.161.76.59:54811] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adJ_oA5jnqDKKovdRklHJwAAAEI"]
[Sun Apr 05 23:28:34.991643 2026] [:error] [pid 45409:tid 45435] [client 172.161.76.59:54844] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adJ_otHt_Oyw03gjCNh6jQAAANg"]
[Sun Apr 05 23:28:37.516827 2026] [:error] [pid 45303:tid 45325] [client 172.161.76.59:6705] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adJ_pbboQ9eViZ4hdnmQ5wAAAAg"]
[Sun Apr 05 23:28:41.190732 2026] [:error] [pid 45303:tid 45324] [client 172.161.76.59:7013] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adJ_qbboQ9eViZ4hdnmQ8gAAAAc"]
[Sun Apr 05 23:28:44.607820 2026] [:error] [pid 45303:tid 45323] [client 172.161.76.59:59073] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adJ_rLboQ9eViZ4hdnmQ_QAAAAY"]
[Sun Apr 05 23:28:45.954514 2026] [:error] [pid 45305:tid 45395] [client 172.161.76.59:6700] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adJ_rejDQjr7aWhjflCRmQAAAJg"]
[Sun Apr 05 23:28:47.615308 2026] [:error] [pid 45305:tid 45371] [client 172.161.76.59:61530] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adJ_r-jDQjr7aWhjflCRnwAAAIA"]
[Sun Apr 05 23:28:48.231191 2026] [:error] [pid 45409:tid 45419] [client 172.161.76.59:54801] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adJ_sNHt_Oyw03gjCNh6pgAAAMg"]
[Sun Apr 05 23:28:49.737319 2026] [:error] [pid 45305:tid 45386] [client 172.161.76.59:7031] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adJ_sejDQjr7aWhjflCRoQAAAI8"]
[Sun Apr 05 23:28:50.822569 2026] [:error] [pid 45409:tid 45412] [client 172.161.76.59:61511] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adJ_stHt_Oyw03gjCNh6wQAAAME"]
[Sun Apr 05 23:28:53.323283 2026] [:error] [pid 45409:tid 45420] [client 172.161.76.59:6669] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adJ_tdHt_Oyw03gjCNh63gAAAMk"]
[Sun Apr 05 23:29:17.445058 2026] [:error] [pid 45409:tid 45431] [client 172.161.76.59:53875] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adJ_zdHt_Oyw03gjCNh7OQAAANQ"]
[Sun Apr 05 23:29:18.970811 2026] [:error] [pid 30921:tid 30930] [client 172.161.76.59:59087] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adJ_zmFGQVn8Q0ueB25cnAAAAQc"]
[Sun Apr 05 23:29:21.310429 2026] [:error] [pid 45409:tid 45429] [client 172.161.76.59:61521] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adJ_0dHt_Oyw03gjCNh7QQAAANI"]
[Sun Apr 05 23:29:23.660841 2026] [:error] [pid 45409:tid 45434] [client 172.161.76.59:59122] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adJ_09Ht_Oyw03gjCNh7UwAAANc"]
[Sun Apr 05 23:29:25.613032 2026] [:error] [pid 45409:tid 45434] [client 172.161.76.59:55626] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adJ_1dHt_Oyw03gjCNh7XQAAANc"]
[Sun Apr 05 23:29:26.721302 2026] [:error] [pid 45409:tid 45433] [client 172.161.76.59:53276] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adJ_1tHt_Oyw03gjCNh7awAAANY"]
[Sun Apr 05 23:29:27.770963 2026] [:error] [pid 45409:tid 45423] [client 172.161.76.59:51290] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adJ_19Ht_Oyw03gjCNh7dgAAAMw"]
[Sun Apr 05 23:29:29.105859 2026] [:error] [pid 45303:tid 45324] [client 172.161.76.59:53847] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adJ_2bboQ9eViZ4hdnmRgAAAAAc"]
[Sun Apr 05 23:29:30.105715 2026] [:error] [pid 30921:tid 30943] [client 172.161.76.59:59103] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adJ_2mFGQVn8Q0ueB25crAAAARQ"]
[Sun Apr 05 23:29:30.898019 2026] [:error] [pid 45409:tid 45435] [client 172.161.76.59:53298] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adJ_2tHt_Oyw03gjCNh7fQAAANg"]
[Sun Apr 05 23:29:32.426527 2026] [:error] [pid 45409:tid 45414] [client 172.161.76.59:51210] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adJ_3NHt_Oyw03gjCNh7mwAAAMM"]
[Sun Apr 05 23:29:34.308471 2026] [:error] [pid 45409:tid 45430] [client 172.161.76.59:51253] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adJ_3tHt_Oyw03gjCNh7swAAANM"]
[Sun Apr 05 23:29:39.127561 2026] [:error] [pid 30921:tid 30936] [client 172.161.76.59:63289] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adJ_42FGQVn8Q0ueB25cvwAAAQ0"]
[Sun Apr 05 23:29:41.409427 2026] [:error] [pid 45409:tid 45424] [client 172.161.76.59:55191] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adJ_5dHt_Oyw03gjCNh7ywAAAM0"]
[Sun Apr 05 23:29:42.430040 2026] [:error] [pid 45303:tid 45335] [client 172.161.76.59:55203] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adJ_5rboQ9eViZ4hdnmRsgAAABI"]
[Sun Apr 05 23:29:43.516993 2026] [:error] [pid 45409:tid 45424] [client 172.161.76.59:52886] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adJ_59Ht_Oyw03gjCNh71AAAAM0"]
[Sun Apr 05 23:29:44.527277 2026] [:error] [pid 45409:tid 45423] [client 172.161.76.59:57803] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adJ_6NHt_Oyw03gjCNh76gAAAMw"]
[Sun Apr 05 23:29:45.542371 2026] [:error] [pid 30921:tid 30925] [client 172.161.76.59:58663] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adJ_6WFGQVn8Q0ueB25czgAAAQI"]
[Sun Apr 05 23:29:46.573823 2026] [:error] [pid 30921:tid 30938] [client 172.161.76.59:61007] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adJ_6mFGQVn8Q0ueB25c1wAAAQ8"]
[Sun Apr 05 23:29:47.814799 2026] [:error] [pid 45409:tid 45414] [client 172.161.76.59:65094] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adJ_69Ht_Oyw03gjCNh7-gAAAMM"]
[Sun Apr 05 23:29:49.159711 2026] [:error] [pid 45409:tid 45415] [client 172.161.76.59:6377] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adJ_7dHt_Oyw03gjCNh8BAAAAMQ"]
[Sun Apr 05 23:29:50.260794 2026] [:error] [pid 30921:tid 30930] [client 172.161.76.59:6362] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adJ_7mFGQVn8Q0ueB25c5wAAAQc"]
[Sun Apr 05 23:29:53.176453 2026] [:error] [pid 45303:tid 45333] [client 172.161.76.59:52866] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adJ_8bboQ9eViZ4hdnmRwwAAABA"]
[Sun Apr 05 23:29:55.502404 2026] [:error] [pid 45303:tid 45321] [client 172.161.76.59:59471] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adJ_87boQ9eViZ4hdnmRyAAAAAQ"]
[Sun Apr 05 23:29:59.314599 2026] [:error] [pid 45305:tid 45378] [client 172.161.76.59:54128] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "adJ_9-jDQjr7aWhjflCSHwAAAIc"]
[Sun Apr 05 23:30:00.891227 2026] [:error] [pid 30921:tid 30932] [client 172.161.76.59:56762] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "adJ_-GFGQVn8Q0ueB25c-wAAAQk"]
[Sun Apr 05 23:30:01.779001 2026] [:error] [pid 30921:tid 30937] [client 172.161.76.59:58247] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "adJ_-WFGQVn8Q0ueB25dAAAAAQ4"]
[Sun Apr 05 23:30:02.633702 2026] [:error] [pid 45305:tid 45375] [client 172.161.76.59:59507] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "adJ_-ujDQjr7aWhjflCSJAAAAIQ"]
[Sun Apr 05 23:30:03.904449 2026] [:error] [pid 45409:tid 45430] [client 172.161.76.59:56717] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adJ_-9Ht_Oyw03gjCNh8cAAAANM"]
[Sun Apr 05 23:30:04.938013 2026] [:error] [pid 45305:tid 45395] [client 172.161.76.59:61962] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adJ__OjDQjr7aWhjflCSJwAAAJg"]
[Sun Apr 05 23:30:05.701052 2026] [:error] [pid 45305:tid 45373] [client 172.161.76.59:6762] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adJ__ejDQjr7aWhjflCSKQAAAII"]
[Sun Apr 05 23:30:06.391265 2026] [:error] [pid 45305:tid 45376] [client 172.161.76.59:6758] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adJ__ujDQjr7aWhjflCSMQAAAIU"]
[Sun Apr 05 23:30:07.098434 2026] [:error] [pid 45305:tid 45395] [client 172.161.76.59:58288] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adJ__-jDQjr7aWhjflCSNgAAAJg"]
[Sun Apr 05 23:30:07.854629 2026] [:error] [pid 45305:tid 45388] [client 172.161.76.59:61968] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adJ__-jDQjr7aWhjflCSPAAAAJE"]
[Sun Apr 05 23:30:09.151563 2026] [:error] [pid 45409:tid 45419] [client 172.161.76.59:61064] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adKAAdHt_Oyw03gjCNh8fAAAAMg"]
[Sun Apr 05 23:30:09.956611 2026] [:error] [pid 45303:tid 45320] [client 172.161.76.59:61996] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adKAAbboQ9eViZ4hdnmR_gAAAAM"]
[Sun Apr 05 23:30:10.500136 2026] [:error] [pid 45303:tid 45325] [client 172.161.76.59:56722] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adKAArboQ9eViZ4hdnmSAAAAAAg"]
[Sun Apr 05 23:30:11.316183 2026] [:error] [pid 30921:tid 30945] [client 172.161.76.59:6604] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adKAA2FGQVn8Q0ueB25dGAAAARY"]
[Sun Apr 05 23:30:12.290285 2026] [:error] [pid 45303:tid 45336] [client 172.161.76.59:6722] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adKABLboQ9eViZ4hdnmSBAAAABM"]
[Sun Apr 05 23:30:13.901142 2026] [:error] [pid 45409:tid 45422] [client 172.161.76.59:61966] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adKABdHt_Oyw03gjCNh8lQAAAMs"]
[Sun Apr 05 23:30:15.629335 2026] [:error] [pid 45303:tid 45318] [client 172.161.76.59:54064] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adKAB7boQ9eViZ4hdnmSCwAAAAE"]
[Sun Apr 05 23:30:28.078096 2026] [:error] [pid 45303:tid 45340] [client 172.161.76.59:56728] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adKAFLboQ9eViZ4hdnmSKAAAABc"]
[Sun Apr 05 23:30:29.373796 2026] [:error] [pid 45409:tid 45416] [client 172.161.76.59:6627] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adKAFdHt_Oyw03gjCNh8_gAAAMU"]
[Sun Apr 05 23:30:30.677657 2026] [:error] [pid 45303:tid 45318] [client 172.161.76.59:59828] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adKAFrboQ9eViZ4hdnmSLgAAAAE"]
[Sun Apr 05 23:30:31.792844 2026] [:error] [pid 45304:tid 45361] [client 172.161.76.59:6601] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adKAFw5jnqDKKovdRklH7AAAAFE"]
[Sun Apr 05 23:30:33.613929 2026] [:error] [pid 45409:tid 45416] [client 172.161.76.59:52427] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adKAGdHt_Oyw03gjCNh9DgAAAMU"]
[Sun Apr 05 23:30:34.214594 2026] [:error] [pid 30921:tid 30941] [client 172.161.76.59:61067] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adKAGmFGQVn8Q0ueB25dRgAAARI"]
[Sun Apr 05 23:30:35.948051 2026] [:error] [pid 45303:tid 45328] [client 172.161.76.59:52453] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adKAG7boQ9eViZ4hdnmSNwAAAAs"]
[Sun Apr 05 23:30:42.920502 2026] [:error] [pid 45409:tid 45411] [client 172.161.76.59:52450] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adKAItHt_Oyw03gjCNh9NQAAAMA"]
[Sun Apr 05 23:30:46.136939 2026] [:error] [pid 45409:tid 45426] [client 172.161.76.59:61118] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adKAJtHt_Oyw03gjCNh9QAAAAM8"]
[Sun Apr 05 23:30:49.946547 2026] [:error] [pid 45305:tid 45386] [client 172.161.76.59:59802] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adKAKejDQjr7aWhjflCSgwAAAI8"]
[Sun Apr 05 23:30:50.903710 2026] [:error] [pid 45303:tid 45324] [client 172.161.76.59:52455] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adKAKrboQ9eViZ4hdnmSjgAAAAc"]
[Sun Apr 05 23:30:52.527879 2026] [:error] [pid 45305:tid 45378] [client 172.161.76.59:56003] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adKALOjDQjr7aWhjflCShQAAAIc"]
[Sun Apr 05 23:30:54.282947 2026] [:error] [pid 45303:tid 45322] [client 172.161.76.59:61098] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adKALrboQ9eViZ4hdnmSogAAAAU"]
[Sun Apr 05 23:30:55.094894 2026] [:error] [pid 45409:tid 45426] [client 172.161.76.59:59785] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adKAL9Ht_Oyw03gjCNh9WAAAAM8"]
[Sun Apr 05 23:30:57.192728 2026] [:error] [pid 45409:tid 45425] [client 172.161.76.59:59836] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adKAMdHt_Oyw03gjCNh9agAAAM4"]
[Sun Apr 05 23:30:57.918713 2026] [:error] [pid 45409:tid 45426] [client 172.161.76.59:6817] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adKAMdHt_Oyw03gjCNh9cgAAAM8"]
[Sun Apr 05 23:30:59.251545 2026] [:error] [pid 45409:tid 45421] [client 172.161.76.59:6819] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKAM9Ht_Oyw03gjCNh9eQAAAMo"]
[Sun Apr 05 23:31:00.310756 2026] [:error] [pid 45409:tid 45421] [client 172.161.76.59:52468] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKANNHt_Oyw03gjCNh9gwAAAMo"]
[Sun Apr 05 23:31:01.298438 2026] [:error] [pid 45303:tid 45333] [client 172.161.76.59:54039] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKANbboQ9eViZ4hdnmSsQAAABA"]
[Sun Apr 05 23:31:02.477865 2026] [:error] [pid 45409:tid 45427] [client 172.161.76.59:61604] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adKANtHt_Oyw03gjCNh9lQAAANA"]
[Sun Apr 05 23:31:03.457490 2026] [:error] [pid 45305:tid 45382] [client 172.161.76.59:52442] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adKAN-jDQjr7aWhjflCSkwAAAIs"]
[Sun Apr 05 23:31:04.236209 2026] [:error] [pid 45304:tid 45344] [client 172.161.76.59:6652] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adKAOA5jnqDKKovdRklICQAAAEA"]
[Sun Apr 05 23:31:05.049400 2026] [:error] [pid 45303:tid 45317] [client 172.161.76.59:59777] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adKAObboQ9eViZ4hdnmSuAAAAAA"]
[Sun Apr 05 23:31:05.988680 2026] [:error] [pid 30921:tid 30934] [client 172.161.76.59:59818] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adKAOWFGQVn8Q0ueB25dcgAAAQs"]
[Sun Apr 05 23:31:06.670059 2026] [:error] [pid 45303:tid 45333] [client 172.161.76.59:61613] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adKAOrboQ9eViZ4hdnmSvgAAABA"]
[Sun Apr 05 23:31:07.335463 2026] [:error] [pid 45305:tid 45383] [client 172.161.76.59:59823] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adKAO-jDQjr7aWhjflCSnwAAAIw"]
[Sun Apr 05 23:31:08.417336 2026] [:error] [pid 45305:tid 45390] [client 172.161.76.59:54050] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adKAPOjDQjr7aWhjflCSpQAAAJM"]
[Sun Apr 05 23:31:10.092963 2026] [:error] [pid 30921:tid 30934] [client 172.161.76.59:61600] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adKAPmFGQVn8Q0ueB25dgwAAAQs"]
[Sun Apr 05 23:31:14.505281 2026] [:error] [pid 45409:tid 45412] [client 172.161.76.59:54068] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adKAQtHt_Oyw03gjCNh9xgAAAME"]
[Sun Apr 05 23:31:15.433441 2026] [:error] [pid 45409:tid 45422] [client 172.161.76.59:59835] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adKAQ9Ht_Oyw03gjCNh9ygAAAMs"]
[Sun Apr 05 23:31:16.507585 2026] [:error] [pid 45305:tid 45371] [client 172.161.76.59:6845] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adKAROjDQjr7aWhjflCSrQAAAIA"]
[Sun Apr 05 23:31:17.826276 2026] [:error] [pid 45409:tid 45412] [client 172.161.76.59:54020] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adKARdHt_Oyw03gjCNh90wAAAME"]
[Sun Apr 05 23:31:19.302202 2026] [:error] [pid 45409:tid 45428] [client 172.161.76.59:54016] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adKAR9Ht_Oyw03gjCNh94AAAANE"]
[Sun Apr 05 23:31:20.942666 2026] [:error] [pid 45305:tid 45373] [client 172.161.76.59:52436] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adKASOjDQjr7aWhjflCStAAAAII"]
[Sun Apr 05 23:31:23.714673 2026] [:error] [pid 45409:tid 45427] [client 172.161.76.59:52454] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adKAS9Ht_Oyw03gjCNh95wAAANA"]
[Sun Apr 05 23:31:26.011766 2026] [:error] [pid 45305:tid 45389] [client 172.161.76.59:6771] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adKATujDQjr7aWhjflCSvgAAAJI"]
[Sun Apr 05 23:31:35.187625 2026] [:error] [pid 45409:tid 45430] [client 172.161.76.59:52475] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adKAV9Ht_Oyw03gjCNh-LQAAANM"]
[Sun Apr 05 23:31:36.231113 2026] [:error] [pid 45409:tid 45428] [client 172.161.76.59:58243] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adKAWNHt_Oyw03gjCNh-MgAAANE"]
[Sun Apr 05 23:31:37.872613 2026] [:error] [pid 45305:tid 45393] [client 172.161.76.59:54035] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adKAWejDQjr7aWhjflCSyQAAAJY"]
[Sun Apr 05 23:31:38.923881 2026] [:error] [pid 45409:tid 45427] [client 172.161.76.59:56719] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adKAWtHt_Oyw03gjCNh-QwAAANA"]
[Sun Apr 05 23:31:40.941769 2026] [:error] [pid 45409:tid 45424] [client 172.161.76.59:6797] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adKAXNHt_Oyw03gjCNh-SwAAAM0"]
[Sun Apr 05 23:31:43.723152 2026] [:error] [pid 45303:tid 45319] [client 172.161.76.59:61599] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adKAX7boQ9eViZ4hdnmTCgAAAAI"]
[Sun Apr 05 23:31:46.246293 2026] [:error] [pid 45409:tid 45432] [client 172.161.76.59:61591] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adKAYtHt_Oyw03gjCNh-aAAAANU"]
[Sun Apr 05 23:31:50.017439 2026] [:error] [pid 45305:tid 45395] [client 172.161.76.59:52456] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adKAZujDQjr7aWhjflCS4AAAAJg"]
[Sun Apr 05 23:31:52.054100 2026] [:error] [pid 45303:tid 45322] [client 172.161.76.59:61614] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adKAaLboQ9eViZ4hdnmTIQAAAAU"]
[Sun Apr 05 23:31:53.479958 2026] [:error] [pid 45409:tid 45430] [client 172.161.76.59:61605] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adKAadHt_Oyw03gjCNh-mwAAANM"]
[Sun Apr 05 23:31:54.486858 2026] [:error] [pid 45303:tid 45323] [client 172.161.76.59:51946] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adKAarboQ9eViZ4hdnmTJAAAAAY"]
[Sun Apr 05 23:31:55.647730 2026] [:error] [pid 45303:tid 45328] [client 172.161.76.59:51943] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adKAa7boQ9eViZ4hdnmTKQAAAAs"]
[Sun Apr 05 23:31:56.248492 2026] [:error] [pid 45303:tid 45320] [client 172.161.76.59:51951] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "adKAbLboQ9eViZ4hdnmTLQAAAAM"]
[Sun Apr 05 23:31:56.972845 2026] [:error] [pid 45303:tid 45337] [client 172.161.76.59:59787] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "adKAbLboQ9eViZ4hdnmTMwAAABQ"]
[Sun Apr 05 23:31:57.911089 2026] [:error] [pid 45409:tid 45432] [client 172.161.76.59:59034] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "adKAbdHt_Oyw03gjCNh-qwAAANU"]
[Sun Apr 05 23:31:58.464425 2026] [:error] [pid 45303:tid 45320] [client 172.161.76.59:59058] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "adKAbrboQ9eViZ4hdnmTPQAAAAM"]
[Sun Apr 05 23:31:59.442250 2026] [:error] [pid 45409:tid 45420] [client 172.161.76.59:59833] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adKAb9Ht_Oyw03gjCNh-vQAAAMk"]
[Sun Apr 05 23:32:00.274181 2026] [:error] [pid 45409:tid 45415] [client 172.161.76.59:55263] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adKAcNHt_Oyw03gjCNh-yAAAAMQ"]
[Sun Apr 05 23:32:01.443655 2026] [:error] [pid 30921:tid 30942] [client 172.161.76.59:61579] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adKAcWFGQVn8Q0ueB25eBgAAARM"]
[Sun Apr 05 23:32:02.830534 2026] [:error] [pid 45409:tid 45418] [client 172.161.76.59:6813] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adKActHt_Oyw03gjCNh-2QAAAMc"]
[Sun Apr 05 23:32:03.527363 2026] [:error] [pid 45409:tid 45412] [client 172.161.76.59:59045] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adKAc9Ht_Oyw03gjCNh-4QAAAME"]
[Sun Apr 05 23:32:04.284448 2026] [:error] [pid 30921:tid 30945] [client 172.161.76.59:59790] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adKAdGFGQVn8Q0ueB25eDgAAARY"]
[Sun Apr 05 23:32:05.545798 2026] [:error] [pid 45409:tid 45421] [client 172.161.76.59:51909] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adKAddHt_Oyw03gjCNh-8QAAAMo"]
[Sun Apr 05 23:32:06.198287 2026] [:error] [pid 45303:tid 45330] [client 172.161.76.59:51960] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adKAdrboQ9eViZ4hdnmTQgAAAA0"]
[Sun Apr 05 23:32:07.148736 2026] [:error] [pid 45409:tid 45414] [client 172.161.76.59:59052] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adKAd9Ht_Oyw03gjCNh_AAAAAMM"]
[Sun Apr 05 23:32:07.911426 2026] [:error] [pid 45409:tid 45412] [client 172.161.76.59:6808] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adKAd9Ht_Oyw03gjCNh_BQAAAME"]
[Sun Apr 05 23:32:08.979544 2026] [:error] [pid 45409:tid 45412] [client 172.161.76.59:59794] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adKAeNHt_Oyw03gjCNh_DgAAAME"]
[Sun Apr 05 23:32:09.803545 2026] [:error] [pid 45305:tid 45382] [client 172.161.76.59:55267] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adKAeejDQjr7aWhjflCTDQAAAIs"]
[Sun Apr 05 23:32:10.904075 2026] [:error] [pid 45303:tid 45332] [client 172.161.76.59:61608] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adKAerboQ9eViZ4hdnmTUAAAAA8"]
[Sun Apr 05 23:32:12.277157 2026] [:error] [pid 45303:tid 45339] [client 172.161.76.59:51931] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adKAfLboQ9eViZ4hdnmTVgAAABY"]
[Sun Apr 05 23:32:14.668625 2026] [:error] [pid 45304:tid 45345] [client 172.161.76.59:59038] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adKAfg5jnqDKKovdRklIlQAAAEE"]
[Sun Apr 05 23:32:15.885076 2026] [:error] [pid 30921:tid 30928] [client 172.161.76.59:6823] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adKAf2FGQVn8Q0ueB25eIQAAAQU"]
[Sun Apr 05 23:32:17.267760 2026] [:error] [pid 30921:tid 30938] [client 172.161.76.59:6785] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "adKAgWFGQVn8Q0ueB25eJgAAAQ8"]
[Sun Apr 05 23:32:18.467998 2026] [:error] [pid 45303:tid 45341] [client 172.161.76.59:55256] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "adKAgrboQ9eViZ4hdnmTYwAAABg"]
[Sun Apr 05 23:32:19.613948 2026] [:error] [pid 30921:tid 30932] [client 172.161.76.59:61586] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "adKAg2FGQVn8Q0ueB25eLQAAAQk"]
[Sun Apr 05 23:32:22.117738 2026] [:error] [pid 45305:tid 45382] [client 172.161.76.59:6826] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "adKAhujDQjr7aWhjflCTMgAAAIs"]
[Sun Apr 05 23:32:24.523177 2026] [:error] [pid 30921:tid 30941] [client 172.161.76.59:54066] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adKAiGFGQVn8Q0ueB25eOAAAARI"]
[Sun Apr 05 23:32:25.982390 2026] [:error] [pid 30921:tid 30927] [client 172.161.76.59:59799] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adKAiWFGQVn8Q0ueB25eQgAAAQQ"]
[Sun Apr 05 23:32:27.510171 2026] [:error] [pid 45304:tid 45349] [client 172.161.76.59:51930] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adKAiw5jnqDKKovdRklIvQAAAEU"]
[Sun Apr 05 23:32:29.409858 2026] [:error] [pid 45409:tid 45414] [client 172.161.76.59:51910] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adKAjdHt_Oyw03gjCNh_ZQAAAMM"]
[Sun Apr 05 23:32:31.087846 2026] [:error] [pid 45303:tid 45332] [client 172.161.76.59:51907] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adKAj7boQ9eViZ4hdnmTcgAAAA8"]
[Sun Apr 05 23:32:32.687969 2026] [:error] [pid 45303:tid 45335] [client 172.161.76.59:6796] [client 172.161.76.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adKAkLboQ9eViZ4hdnmTgQAAABI"]
[Mon Apr 06 02:24:51.118703 2026] [:error] [pid 51584:tid 51714] [client 20.215.186.86:30133] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adKo88Z4qY_GoNCPARBGWAAAANE"]
[Mon Apr 06 02:24:51.882604 2026] [:error] [pid 51581:tid 51691] [client 20.215.186.86:59799] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adKo894k74fhQLPUy7FdwgAAAJU"]
[Mon Apr 06 02:24:52.530524 2026] [:error] [pid 51584:tid 51699] [client 20.215.186.86:26908] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adKo9MZ4qY_GoNCPARBGWQAAAMI"]
[Mon Apr 06 02:24:53.642181 2026] [:error] [pid 51580:tid 51651] [client 20.215.186.86:7143] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adKo9VNFl1NiyNgNZAlbLAAAAEw"]
[Mon Apr 06 02:24:54.464937 2026] [:error] [pid 51580:tid 51662] [client 20.215.186.86:29104] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n.php"] [unique_id "adKo9lNFl1NiyNgNZAlbMwAAAFc"]
[Mon Apr 06 02:24:55.331344 2026] [:error] [pid 51584:tid 51698] [client 20.215.186.86:46228] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n.php"] [unique_id "adKo98Z4qY_GoNCPARBGXQAAAME"]
[Mon Apr 06 02:24:56.123857 2026] [:error] [pid 51584:tid 51710] [client 20.215.186.86:26890] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n.php"] [unique_id "adKo-MZ4qY_GoNCPARBGYgAAAM0"]
[Mon Apr 06 02:24:56.685880 2026] [:error] [pid 51581:tid 51674] [client 20.215.186.86:26889] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n.php"] [unique_id "adKo-N4k74fhQLPUy7Fd2QAAAIU"]
[Mon Apr 06 02:24:57.256679 2026] [:error] [pid 51753:tid 51816] [client 20.215.186.86:45485] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adKo-a3pmp1JkaicYbu5ZQAAAQU"]
[Mon Apr 06 02:24:57.822326 2026] [:error] [pid 51753:tid 51826] [client 20.215.186.86:30138] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adKo-a3pmp1JkaicYbu5agAAAQ8"]
[Mon Apr 06 02:24:58.366353 2026] [:error] [pid 51584:tid 51713] [client 20.215.186.86:30135] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adKo-sZ4qY_GoNCPARBGZwAAANA"]
[Mon Apr 06 02:24:58.944383 2026] [:error] [pid 51580:tid 51656] [client 20.215.186.86:59829] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adKo-lNFl1NiyNgNZAlbQwAAAFE"]
[Mon Apr 06 02:24:59.562834 2026] [:error] [pid 51581:tid 51692] [client 20.215.186.86:28293] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "adKo-94k74fhQLPUy7Fd6wAAAJY"]
[Mon Apr 06 02:25:00.111650 2026] [:error] [pid 51580:tid 51657] [client 20.215.186.86:29090] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "adKo_FNFl1NiyNgNZAlbRgAAAFI"]
[Mon Apr 06 02:25:00.744593 2026] [:error] [pid 51580:tid 51661] [client 20.215.186.86:28310] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "adKo_FNFl1NiyNgNZAlbSgAAAFY"]
[Mon Apr 06 02:25:01.570643 2026] [:error] [pid 51584:tid 51705] [client 20.215.186.86:28361] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "adKo_cZ4qY_GoNCPARBGbAAAAMg"]
[Mon Apr 06 02:25:02.174758 2026] [:error] [pid 51584:tid 51713] [client 20.215.186.86:28371] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r4f_1.php"] [unique_id "adKo_sZ4qY_GoNCPARBGcAAAANA"]
[Mon Apr 06 02:25:02.945511 2026] [:error] [pid 51580:tid 51644] [client 20.215.186.86:30112] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r4f_1.php"] [unique_id "adKo_lNFl1NiyNgNZAlbVgAAAEU"]
[Mon Apr 06 02:25:03.952483 2026] [:error] [pid 51753:tid 51830] [client 20.215.186.86:59819] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r4f_1.php"] [unique_id "adKo_63pmp1JkaicYbu5iQAAARM"]
[Mon Apr 06 02:25:04.488613 2026] [:error] [pid 51753:tid 51822] [client 20.215.186.86:35432] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r4f_1.php"] [unique_id "adKpAK3pmp1JkaicYbu5jwAAAQs"]
[Mon Apr 06 02:25:05.148208 2026] [:error] [pid 51581:tid 51691] [client 20.215.186.86:55853] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKpAd4k74fhQLPUy7FeIwAAAJU"]
[Mon Apr 06 02:25:05.700906 2026] [:error] [pid 51580:tid 51642] [client 20.215.186.86:24990] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKpAVNFl1NiyNgNZAlbYAAAAEM"]
[Mon Apr 06 02:25:06.308845 2026] [:error] [pid 51580:tid 51639] [client 20.215.186.86:35408] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKpAlNFl1NiyNgNZAlbZgAAAEA"]
[Mon Apr 06 02:25:06.822579 2026] [:error] [pid 51584:tid 51703] [client 20.215.186.86:42486] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKpAsZ4qY_GoNCPARBGeAAAAMY"]
[Mon Apr 06 02:25:07.442713 2026] [:error] [pid 51584:tid 51712] [client 20.215.186.86:59836] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "adKpA8Z4qY_GoNCPARBGegAAAM8"]
[Mon Apr 06 02:25:07.971981 2026] [:error] [pid 51584:tid 51702] [client 20.215.186.86:39563] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "adKpA8Z4qY_GoNCPARBGfQAAAMU"]
[Mon Apr 06 02:25:08.610748 2026] [:error] [pid 51584:tid 51699] [client 20.215.186.86:7125] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "adKpBMZ4qY_GoNCPARBGfwAAAMI"]
[Mon Apr 06 02:25:09.149037 2026] [:error] [pid 51753:tid 51826] [client 20.215.186.86:63086] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "adKpBa3pmp1JkaicYbu5rQAAAQ8"]
[Mon Apr 06 02:25:09.838065 2026] [:error] [pid 51584:tid 51716] [client 20.215.186.86:35446] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "adKpBcZ4qY_GoNCPARBGgAAAANM"]
[Mon Apr 06 02:25:10.380684 2026] [:error] [pid 51584:tid 51698] [client 20.215.186.86:28383] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "adKpBsZ4qY_GoNCPARBGggAAAME"]
[Mon Apr 06 02:25:10.918401 2026] [:error] [pid 51580:tid 51653] [client 20.215.186.86:26923] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "adKpBlNFl1NiyNgNZAlbcwAAAE4"]
[Mon Apr 06 02:25:11.517842 2026] [:error] [pid 51753:tid 51835] [client 20.215.186.86:28385] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "adKpB63pmp1JkaicYbu5uAAAARc"]
[Mon Apr 06 02:25:12.221090 2026] [:error] [pid 51584:tid 51701] [client 20.215.186.86:63094] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "adKpCMZ4qY_GoNCPARBGigAAAMQ"]
[Mon Apr 06 02:25:13.036316 2026] [:error] [pid 51584:tid 51700] [client 20.215.186.86:47412] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "adKpCcZ4qY_GoNCPARBGjQAAAMM"]
[Mon Apr 06 02:25:13.933509 2026] [:error] [pid 51581:tid 51691] [client 20.215.186.86:26914] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "adKpCd4k74fhQLPUy7FeRAAAAJU"]
[Mon Apr 06 02:25:14.848070 2026] [:error] [pid 51581:tid 51688] [client 20.215.186.86:24334] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/o.php"] [unique_id "adKpCt4k74fhQLPUy7FeSAAAAJM"]
[Mon Apr 06 02:25:15.608351 2026] [:error] [pid 51753:tid 51816] [client 20.215.186.86:28368] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "adKpC63pmp1JkaicYbu5xwAAAQU"]
[Mon Apr 06 02:25:16.438924 2026] [:error] [pid 51584:tid 51710] [client 20.215.186.86:47408] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "adKpDMZ4qY_GoNCPARBGmQAAAM0"]
[Mon Apr 06 02:25:17.414092 2026] [:error] [pid 51581:tid 51670] [client 20.215.186.86:47834] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "adKpDd4k74fhQLPUy7FeUAAAAIE"]
[Mon Apr 06 02:25:18.164725 2026] [:error] [pid 51580:tid 51654] [client 20.215.186.86:24348] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a.php"] [unique_id "adKpDlNFl1NiyNgNZAlbfAAAAE8"]
[Mon Apr 06 02:25:18.878480 2026] [:error] [pid 51584:tid 51721] [client 20.215.186.86:47374] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "adKpDsZ4qY_GoNCPARBGpAAAANg"]
[Mon Apr 06 02:25:19.808711 2026] [:error] [pid 51753:tid 51817] [client 20.215.186.86:7079] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "adKpD63pmp1JkaicYbu53wAAAQY"]
[Mon Apr 06 02:25:20.740733 2026] [:error] [pid 51753:tid 51817] [client 20.215.186.86:45491] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "adKpEK3pmp1JkaicYbu56gAAAQY"]
[Mon Apr 06 02:25:21.367602 2026] [:error] [pid 51584:tid 51714] [client 20.215.186.86:28290] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system_log.php"] [unique_id "adKpEcZ4qY_GoNCPARBGqQAAANE"]
[Mon Apr 06 02:25:21.888276 2026] [:error] [pid 51753:tid 51812] [client 20.215.186.86:24382] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKpEa3pmp1JkaicYbu59gAAAQE"]
[Mon Apr 06 02:25:22.576025 2026] [:error] [pid 51753:tid 51811] [client 20.215.186.86:39582] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKpEq3pmp1JkaicYbu6AAAAAQA"]
[Mon Apr 06 02:25:23.176215 2026] [:error] [pid 51580:tid 51652] [client 20.215.186.86:7054] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKpE1NFl1NiyNgNZAlbhgAAAE0"]
[Mon Apr 06 02:25:23.693815 2026] [:error] [pid 51753:tid 51815] [client 20.215.186.86:25017] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKpE63pmp1JkaicYbu6DQAAAQQ"]
[Mon Apr 06 02:25:24.222499 2026] [:error] [pid 51753:tid 51823] [client 20.215.186.86:50463] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adKpFK3pmp1JkaicYbu6EwAAAQw"]
[Mon Apr 06 02:25:24.810741 2026] [:error] [pid 51580:tid 51661] [client 20.215.186.86:35393] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adKpFFNFl1NiyNgNZAlbjAAAAFY"]
[Mon Apr 06 02:25:25.722908 2026] [:error] [pid 51580:tid 51646] [client 20.215.186.86:33305] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adKpFVNFl1NiyNgNZAlbkQAAAEc"]
[Mon Apr 06 02:25:26.614595 2026] [:error] [pid 51580:tid 51653] [client 20.215.186.86:45468] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adKpFlNFl1NiyNgNZAlblQAAAE4"]
[Mon Apr 06 02:25:27.766948 2026] [:error] [pid 51580:tid 51654] [client 20.215.186.86:33338] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adKpF1NFl1NiyNgNZAlbmQAAAE8"]
[Mon Apr 06 02:25:28.983674 2026] [:error] [pid 51753:tid 51818] [client 20.215.186.86:7059] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adKpGK3pmp1JkaicYbu6NQAAAQc"]
[Mon Apr 06 02:25:29.887977 2026] [:error] [pid 51580:tid 51650] [client 20.215.186.86:7050] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adKpGVNFl1NiyNgNZAlbpQAAAEs"]
[Mon Apr 06 02:25:31.672282 2026] [:error] [pid 51584:tid 51698] [client 20.215.186.86:50433] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adKpG8Z4qY_GoNCPARBG6QAAAME"]
[Mon Apr 06 02:25:33.202381 2026] [:error] [pid 51584:tid 51718] [client 20.215.186.86:53866] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adKpHcZ4qY_GoNCPARBG-AAAANU"]
[Mon Apr 06 02:25:34.989516 2026] [:error] [pid 51580:tid 51657] [client 20.215.186.86:6464] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adKpHlNFl1NiyNgNZAlbsgAAAFI"]
[Mon Apr 06 02:25:35.955352 2026] [:error] [pid 51580:tid 51650] [client 20.215.186.86:33282] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adKpH1NFl1NiyNgNZAlbuAAAAEs"]
[Mon Apr 06 02:25:37.081837 2026] [:error] [pid 51584:tid 51720] [client 20.215.186.86:63045] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adKpIcZ4qY_GoNCPARBHDAAAANc"]
[Mon Apr 06 02:25:38.329906 2026] [:error] [pid 51753:tid 51825] [client 20.215.186.86:44250] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "adKpIq3pmp1JkaicYbu6gAAAAQ4"]
[Mon Apr 06 02:25:40.325982 2026] [:error] [pid 51753:tid 51830] [client 20.215.186.86:53889] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "adKpJK3pmp1JkaicYbu6lAAAARM"]
[Mon Apr 06 02:25:41.131506 2026] [:error] [pid 51753:tid 51818] [client 20.215.186.86:44228] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "adKpJa3pmp1JkaicYbu6nAAAAQc"]
[Mon Apr 06 02:25:42.277109 2026] [:error] [pid 51753:tid 51832] [client 20.215.186.86:53903] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file32.php"] [unique_id "adKpJq3pmp1JkaicYbu6rAAAARU"]
[Mon Apr 06 02:25:43.484940 2026] [:error] [pid 51581:tid 51672] [client 20.215.186.86:47358] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "adKpJ94k74fhQLPUy7FefAAAAIM"]
[Mon Apr 06 02:25:44.303165 2026] [:error] [pid 51753:tid 51831] [client 20.215.186.86:44332] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "adKpKK3pmp1JkaicYbu6zAAAARQ"]
[Mon Apr 06 02:25:45.478334 2026] [:error] [pid 51753:tid 51829] [client 20.215.186.86:39507] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "adKpKa3pmp1JkaicYbu67wAAARI"]
[Mon Apr 06 02:25:46.732011 2026] [:error] [pid 51580:tid 51647] [client 20.215.186.86:53898] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nope.php"] [unique_id "adKpKlNFl1NiyNgNZAlb3gAAAEg"]
[Mon Apr 06 02:25:47.616919 2026] [:error] [pid 51753:tid 51818] [client 20.215.186.86:6633] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "adKpK63pmp1JkaicYbu7HwAAAQc"]
[Mon Apr 06 02:25:48.204033 2026] [:error] [pid 51753:tid 51811] [client 20.215.186.86:49869] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "adKpLK3pmp1JkaicYbu7JwAAAQA"]
[Mon Apr 06 02:25:49.093218 2026] [:error] [pid 51581:tid 51683] [client 20.215.186.86:55391] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "adKpLd4k74fhQLPUy7FelgAAAI4"]
[Mon Apr 06 02:25:49.907612 2026] [:error] [pid 51581:tid 51674] [client 20.215.186.86:55380] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js.php"] [unique_id "adKpLd4k74fhQLPUy7FemwAAAIU"]
[Mon Apr 06 02:25:50.666041 2026] [:error] [pid 51753:tid 51827] [client 20.215.186.86:6611] [client 20.215.186.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adKpLq3pmp1JkaicYbu7OAAAARA"]
[Mon Apr 06 02:25:57.853971 2026] [:error] [pid 51753:tid 51825] [client 20.215.186.86:55363] [client 20.215.186.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "adKpNa3pmp1JkaicYbu7agAAAQ4"]
[Mon Apr 06 02:26:01.847802 2026] [:error] [pid 51580:tid 51652] [client 20.215.186.86:46737] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "adKpOVNFl1NiyNgNZAlcIAAAAE0"]
[Mon Apr 06 02:26:03.127666 2026] [:error] [pid 51581:tid 51676] [client 20.215.186.86:6656] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "adKpO94k74fhQLPUy7FeswAAAIc"]
[Mon Apr 06 02:26:04.064938 2026] [:error] [pid 51584:tid 51697] [client 20.215.186.86:37963] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "adKpPMZ4qY_GoNCPARBHlwAAAMA"]
[Mon Apr 06 02:26:04.718911 2026] [:error] [pid 51580:tid 51653] [client 20.215.186.86:48344] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moon.php"] [unique_id "adKpPFNFl1NiyNgNZAlcJAAAAE4"]
[Mon Apr 06 02:26:05.698320 2026] [:error] [pid 51584:tid 51718] [client 20.215.186.86:24419] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "adKpPcZ4qY_GoNCPARBHnAAAANU"]
[Mon Apr 06 02:26:06.419150 2026] [:error] [pid 51581:tid 51685] [client 20.215.186.86:38197] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "adKpPt4k74fhQLPUy7FeuQAAAJA"]
[Mon Apr 06 02:26:07.501416 2026] [:error] [pid 51581:tid 51675] [client 20.215.186.86:6686] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "adKpP94k74fhQLPUy7FevgAAAIY"]
[Mon Apr 06 02:26:09.298395 2026] [:error] [pid 51580:tid 51662] [client 20.215.186.86:37968] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/33.php"] [unique_id "adKpQVNFl1NiyNgNZAlcKgAAAFc"]
[Mon Apr 06 02:26:11.111611 2026] [:error] [pid 51753:tid 51835] [client 20.215.186.86:37966] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adKpQ63pmp1JkaicYbu7jAAAARc"]
[Mon Apr 06 02:26:12.069197 2026] [:error] [pid 51753:tid 51834] [client 20.215.186.86:58371] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adKpRK3pmp1JkaicYbu7kAAAARY"]
[Mon Apr 06 02:26:13.758957 2026] [:error] [pid 51581:tid 51684] [client 20.215.186.86:33906] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adKpRd4k74fhQLPUy7Fe2AAAAI8"]
[Mon Apr 06 02:26:14.629980 2026] [:error] [pid 51584:tid 51697] [client 20.215.186.86:41911] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adKpRsZ4qY_GoNCPARBHtwAAAMA"]
[Mon Apr 06 02:26:15.355026 2026] [:error] [pid 51580:tid 51648] [client 20.215.186.86:30624] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adKpR1NFl1NiyNgNZAlcNQAAAEk"]
[Mon Apr 06 02:26:16.272203 2026] [:error] [pid 51580:tid 51654] [client 20.215.186.86:33916] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adKpSFNFl1NiyNgNZAlcOwAAAE8"]
[Mon Apr 06 02:26:17.356115 2026] [:error] [pid 51580:tid 51663] [client 20.215.186.86:30639] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adKpSVNFl1NiyNgNZAlcPwAAAFg"]
[Mon Apr 06 02:26:17.952887 2026] [:error] [pid 51753:tid 51820] [client 20.215.186.86:41910] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adKpSa3pmp1JkaicYbu7qAAAAQk"]
[Mon Apr 06 02:26:18.879465 2026] [:error] [pid 51580:tid 51649] [client 20.215.186.86:6528] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adKpSlNFl1NiyNgNZAlcQgAAAEo"]
[Mon Apr 06 02:26:19.457612 2026] [:error] [pid 51753:tid 51828] [client 20.215.186.86:41916] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adKpS63pmp1JkaicYbu7rQAAARE"]
[Mon Apr 06 02:26:20.059086 2026] [:error] [pid 51753:tid 51822] [client 20.215.186.86:6901] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adKpTK3pmp1JkaicYbu7sAAAAQs"]
[Mon Apr 06 02:26:20.925858 2026] [:error] [pid 51753:tid 51828] [client 20.215.186.86:61792] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adKpTK3pmp1JkaicYbu7twAAARE"]
[Mon Apr 06 02:26:21.508453 2026] [:error] [pid 51580:tid 51640] [client 20.215.186.86:35847] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x7.php"] [unique_id "adKpTVNFl1NiyNgNZAlcRwAAAEE"]
[Mon Apr 06 02:26:22.373435 2026] [:error] [pid 51753:tid 51813] [client 20.215.186.86:34859] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x7.php"] [unique_id "adKpTq3pmp1JkaicYbu7wgAAAQI"]
[Mon Apr 06 02:26:23.510170 2026] [:error] [pid 51584:tid 51700] [client 20.215.186.86:62733] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x7.php"] [unique_id "adKpT8Z4qY_GoNCPARBH0QAAAMM"]
[Mon Apr 06 02:26:24.064347 2026] [:error] [pid 51581:tid 51680] [client 20.215.186.86:43079] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-x7.php"] [unique_id "adKpUN4k74fhQLPUy7Fe3gAAAIs"]
[Mon Apr 06 02:26:24.695325 2026] [:error] [pid 51753:tid 51828] [client 20.215.186.86:6288] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "adKpUK3pmp1JkaicYbu7zwAAARE"]
[Mon Apr 06 02:26:25.257524 2026] [:error] [pid 51753:tid 51817] [client 20.215.186.86:26241] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "adKpUa3pmp1JkaicYbu70gAAAQY"]
[Mon Apr 06 02:26:25.780673 2026] [:error] [pid 51753:tid 51820] [client 20.215.186.86:6273] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "adKpUa3pmp1JkaicYbu71gAAAQk"]
[Mon Apr 06 02:26:26.433643 2026] [:error] [pid 51584:tid 51697] [client 20.215.186.86:43094] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/log.php"] [unique_id "adKpUsZ4qY_GoNCPARBH2gAAAMA"]
[Mon Apr 06 02:26:27.058612 2026] [:error] [pid 51753:tid 51824] [client 20.215.186.86:60350] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "adKpU63pmp1JkaicYbu71wAAAQ0"]
[Mon Apr 06 02:26:27.691351 2026] [:error] [pid 51584:tid 51715] [client 20.215.186.86:60278] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "adKpU8Z4qY_GoNCPARBH3gAAANI"]
[Mon Apr 06 02:26:28.235155 2026] [:error] [pid 51580:tid 51649] [client 20.215.186.86:32855] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "adKpVFNFl1NiyNgNZAlcVwAAAEo"]
[Mon Apr 06 02:26:29.015940 2026] [:error] [pid 51753:tid 51822] [client 20.215.186.86:32868] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v4.php"] [unique_id "adKpVa3pmp1JkaicYbu73AAAAQs"]
[Mon Apr 06 02:26:29.545337 2026] [:error] [pid 51753:tid 51831] [client 20.215.186.86:6402] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adKpVa3pmp1JkaicYbu74gAAARQ"]
[Mon Apr 06 02:26:30.072358 2026] [:error] [pid 51584:tid 51704] [client 20.215.186.86:36508] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adKpVsZ4qY_GoNCPARBH5gAAAMc"]
[Mon Apr 06 02:26:30.698275 2026] [:error] [pid 51753:tid 51822] [client 20.215.186.86:36487] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adKpVq3pmp1JkaicYbu76AAAAQs"]
[Mon Apr 06 02:26:31.276959 2026] [:error] [pid 51584:tid 51699] [client 20.215.186.86:34338] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adKpV8Z4qY_GoNCPARBH6gAAAMI"]
[Mon Apr 06 02:26:31.876482 2026] [:error] [pid 51580:tid 51658] [client 20.215.186.86:6147] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adKpV1NFl1NiyNgNZAlcZgAAAFM"]
[Mon Apr 06 02:26:32.583057 2026] [:error] [pid 51753:tid 51831] [client 20.215.186.86:60232] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adKpWK3pmp1JkaicYbu77QAAARQ"]
[Mon Apr 06 02:26:33.104666 2026] [:error] [pid 51753:tid 51835] [client 20.215.186.86:60252] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adKpWa3pmp1JkaicYbu78gAAARc"]
[Mon Apr 06 02:26:33.621169 2026] [:error] [pid 51753:tid 51830] [client 20.215.186.86:42540] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adKpWa3pmp1JkaicYbu7-AAAARM"]
[Mon Apr 06 02:26:34.186441 2026] [:error] [pid 51753:tid 51831] [client 20.215.186.86:60240] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "adKpWq3pmp1JkaicYbu7-wAAARQ"]
[Mon Apr 06 02:26:34.898009 2026] [:error] [pid 51580:tid 51650] [client 20.215.186.86:37231] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "adKpWlNFl1NiyNgNZAlceAAAAEs"]
[Mon Apr 06 02:26:35.536938 2026] [:error] [pid 51753:tid 51813] [client 20.215.186.86:36576] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "adKpW63pmp1JkaicYbu7_gAAAQI"]
[Mon Apr 06 02:26:36.106708 2026] [:error] [pid 51753:tid 51817] [client 20.215.186.86:60233] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "adKpXK3pmp1JkaicYbu8AQAAAQY"]
[Mon Apr 06 02:26:36.820566 2026] [:error] [pid 51580:tid 51658] [client 20.215.186.86:31717] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-gr.php"] [unique_id "adKpXFNFl1NiyNgNZAlcgQAAAFM"]
[Mon Apr 06 02:26:37.623064 2026] [:error] [pid 51753:tid 51819] [client 20.215.186.86:54445] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-gr.php"] [unique_id "adKpXa3pmp1JkaicYbu8DQAAAQg"]
[Mon Apr 06 02:26:38.242859 2026] [:error] [pid 51753:tid 51826] [client 20.215.186.86:37208] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-gr.php"] [unique_id "adKpXq3pmp1JkaicYbu8DgAAAQ8"]
[Mon Apr 06 02:26:38.882097 2026] [:error] [pid 51753:tid 51828] [client 20.215.186.86:34938] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-gr.php"] [unique_id "adKpXq3pmp1JkaicYbu8EgAAARE"]
[Mon Apr 06 02:26:39.510863 2026] [:error] [pid 51753:tid 51825] [client 20.215.186.86:37538] [client 20.215.186.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adKpX63pmp1JkaicYbu8GwAAAQ4"]
[Mon Apr 06 02:26:40.062852 2026] [:error] [pid 51584:tid 51705] [client 20.215.186.86:54405] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adKpYMZ4qY_GoNCPARBH9gAAAMg"]
[Mon Apr 06 02:26:40.677318 2026] [:error] [pid 51753:tid 51817] [client 20.215.186.86:36523] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adKpYK3pmp1JkaicYbu8IwAAAQY"]
[Mon Apr 06 02:26:41.199596 2026] [:error] [pid 51580:tid 51645] [client 20.215.186.86:51677] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adKpYVNFl1NiyNgNZAlcjwAAAEY"]
[Mon Apr 06 02:26:41.844827 2026] [:error] [pid 51581:tid 51685] [client 20.215.186.86:56268] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adKpYd4k74fhQLPUy7FfBgAAAJA"]
[Mon Apr 06 02:26:42.551709 2026] [:error] [pid 51584:tid 51718] [client 20.215.186.86:54427] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "adKpYsZ4qY_GoNCPARBH_wAAANU"]
[Mon Apr 06 02:26:43.082788 2026] [:error] [pid 51580:tid 51648] [client 20.215.186.86:51681] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "adKpY1NFl1NiyNgNZAlclgAAAEk"]
[Mon Apr 06 02:26:43.608790 2026] [:error] [pid 51580:tid 51645] [client 20.215.186.86:60230] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "adKpY1NFl1NiyNgNZAlcmQAAAEY"]
[Mon Apr 06 02:26:44.210787 2026] [:error] [pid 51580:tid 51663] [client 20.215.186.86:51678] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ext.php"] [unique_id "adKpZFNFl1NiyNgNZAlcoAAAAFg"]
[Mon Apr 06 02:26:44.886871 2026] [:error] [pid 51753:tid 51819] [client 20.215.186.86:58692] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "adKpZK3pmp1JkaicYbu8MgAAAQg"]
[Mon Apr 06 02:26:45.557620 2026] [:error] [pid 51753:tid 51811] [client 20.215.186.86:58739] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "adKpZa3pmp1JkaicYbu8NQAAAQA"]
[Mon Apr 06 02:26:46.207437 2026] [:error] [pid 51753:tid 51819] [client 20.215.186.86:37211] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "adKpZq3pmp1JkaicYbu8OgAAAQg"]
[Mon Apr 06 02:26:46.981074 2026] [:error] [pid 51580:tid 51639] [client 20.215.186.86:27951] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about3.php"] [unique_id "adKpZlNFl1NiyNgNZAlcqgAAAEA"]
[Mon Apr 06 02:26:47.856083 2026] [:error] [pid 51580:tid 51640] [client 20.215.186.86:63125] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adKpZ1NFl1NiyNgNZAlcrQAAAEE"]
[Mon Apr 06 02:26:48.539688 2026] [:error] [pid 51580:tid 51641] [client 20.215.186.86:37557] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adKpaFNFl1NiyNgNZAlcsAAAAEI"]
[Mon Apr 06 02:26:49.101193 2026] [:error] [pid 51581:tid 51693] [client 20.215.186.86:58716] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adKpad4k74fhQLPUy7FfGQAAAJc"]
[Mon Apr 06 02:26:49.889645 2026] [:error] [pid 51580:tid 51641] [client 20.215.186.86:41266] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adKpaVNFl1NiyNgNZAlcvgAAAEI"]
[Mon Apr 06 02:26:50.542638 2026] [:error] [pid 51753:tid 51836] [client 20.215.186.86:28027] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "adKpaq3pmp1JkaicYbu8SgAAARg"]
[Mon Apr 06 02:26:51.234784 2026] [:error] [pid 51581:tid 51688] [client 20.215.186.86:27952] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "adKpa94k74fhQLPUy7FfHQAAAJM"]
[Mon Apr 06 02:26:51.884328 2026] [:error] [pid 51581:tid 51671] [client 20.215.186.86:41255] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "adKpa94k74fhQLPUy7FfIgAAAII"]
[Mon Apr 06 02:26:52.770790 2026] [:error] [pid 51584:tid 51721] [client 20.215.186.86:45418] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "adKpbMZ4qY_GoNCPARBICAAAANg"]
[Mon Apr 06 02:26:53.508181 2026] [:error] [pid 51580:tid 51650] [client 20.215.186.86:37128] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "adKpbVNFl1NiyNgNZAlcygAAAEs"]
[Mon Apr 06 02:26:54.120527 2026] [:error] [pid 51580:tid 51652] [client 20.215.186.86:41262] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "adKpblNFl1NiyNgNZAlc0QAAAE0"]
[Mon Apr 06 02:26:54.669853 2026] [:error] [pid 51581:tid 51680] [client 20.215.186.86:31652] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "adKpbt4k74fhQLPUy7FfKAAAAIs"]
[Mon Apr 06 02:26:55.225797 2026] [:error] [pid 51584:tid 51712] [client 20.215.186.86:63111] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "adKpb8Z4qY_GoNCPARBIDAAAAM8"]
[Mon Apr 06 02:26:55.771322 2026] [:error] [pid 51753:tid 51819] [client 20.215.186.86:44968] [client 20.215.186.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "adKpb63pmp1JkaicYbu8XQAAAQg"]
[Mon Apr 06 02:26:56.788298 2026] [:error] [pid 51581:tid 51682] [client 20.215.186.86:44949] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "adKpcN4k74fhQLPUy7FfKwAAAI0"]
[Mon Apr 06 02:26:57.392924 2026] [:error] [pid 51753:tid 51832] [client 20.215.186.86:51725] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "adKpca3pmp1JkaicYbu8YQAAARU"]
[Mon Apr 06 02:26:57.959328 2026] [:error] [pid 51753:tid 51813] [client 20.215.186.86:27982] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "adKpca3pmp1JkaicYbu8ZAAAAQI"]
[Mon Apr 06 02:26:58.623946 2026] [:error] [pid 51584:tid 51697] [client 20.215.186.86:31655] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "adKpcsZ4qY_GoNCPARBIDwAAAMA"]
[Mon Apr 06 02:26:59.378587 2026] [:error] [pid 51753:tid 51823] [client 20.215.186.86:41216] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adKpc63pmp1JkaicYbu8bgAAAQw"]
[Mon Apr 06 02:27:00.100519 2026] [:error] [pid 51584:tid 51713] [client 20.215.186.86:31139] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adKpdMZ4qY_GoNCPARBIEgAAANA"]
[Mon Apr 06 02:27:04.919550 2026] [:error] [pid 51580:tid 51650] [client 20.215.186.86:54906] [client 20.215.186.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adKpeFNFl1NiyNgNZAlc7gAAAEs"]
[Mon Apr 06 02:27:11.880522 2026] [:error] [pid 51580:tid 51663] [client 20.215.186.86:63116] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "adKpf1NFl1NiyNgNZAldDgAAAFg"]
[Mon Apr 06 02:27:13.162568 2026] [:error] [pid 51584:tid 51715] [client 20.215.186.86:38669] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "adKpgcZ4qY_GoNCPARBIJwAAANI"]
[Mon Apr 06 02:27:13.944843 2026] [:error] [pid 51753:tid 51825] [client 20.215.186.86:29143] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "adKpga3pmp1JkaicYbu8vQAAAQ4"]
[Mon Apr 06 02:27:15.430574 2026] [:error] [pid 51581:tid 51681] [client 20.215.186.86:44960] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tox.php"] [unique_id "adKpg94k74fhQLPUy7FfQwAAAIw"]
[Mon Apr 06 02:27:16.280493 2026] [:error] [pid 51581:tid 51671] [client 20.215.186.86:31116] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adKphN4k74fhQLPUy7FfRgAAAII"]
[Mon Apr 06 02:27:17.056127 2026] [:error] [pid 51580:tid 51645] [client 20.215.186.86:31122] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adKphVNFl1NiyNgNZAldHgAAAEY"]
[Mon Apr 06 02:27:17.945409 2026] [:error] [pid 51584:tid 51717] [client 20.215.186.86:38681] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adKphcZ4qY_GoNCPARBILgAAANQ"]
[Mon Apr 06 02:27:19.137302 2026] [:error] [pid 51753:tid 51821] [client 20.215.186.86:29128] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adKph63pmp1JkaicYbu80AAAAQo"]
[Mon Apr 06 02:27:19.763494 2026] [:error] [pid 51753:tid 51835] [client 20.215.186.86:31672] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hook.php"] [unique_id "adKph63pmp1JkaicYbu81AAAARc"]
[Mon Apr 06 02:27:20.345032 2026] [:error] [pid 51753:tid 51827] [client 20.215.186.86:40198] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hook.php"] [unique_id "adKpiK3pmp1JkaicYbu82AAAARA"]
[Mon Apr 06 02:27:21.314437 2026] [:error] [pid 51753:tid 51818] [client 20.215.186.86:41159] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hook.php"] [unique_id "adKpia3pmp1JkaicYbu82wAAAQc"]
[Mon Apr 06 02:27:21.986859 2026] [:error] [pid 51584:tid 51719] [client 20.215.186.86:38240] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hook.php"] [unique_id "adKpicZ4qY_GoNCPARBIMAAAANY"]
[Mon Apr 06 02:27:22.585366 2026] [:error] [pid 51580:tid 51649] [client 20.215.186.86:6248] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adKpilNFl1NiyNgNZAldMAAAAEo"]
[Mon Apr 06 02:27:23.339375 2026] [:error] [pid 51584:tid 51717] [client 20.215.186.86:31147] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adKpi8Z4qY_GoNCPARBINwAAANQ"]
[Mon Apr 06 02:27:24.165686 2026] [:error] [pid 51580:tid 51650] [client 20.215.186.86:38675] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adKpjFNFl1NiyNgNZAldNgAAAEs"]
[Mon Apr 06 02:27:24.798111 2026] [:error] [pid 51753:tid 51825] [client 20.215.186.86:40236] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adKpjK3pmp1JkaicYbu87AAAAQ4"]
[Mon Apr 06 02:27:25.770864 2026] [:error] [pid 51753:tid 51817] [client 20.215.186.86:6217] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adKpja3pmp1JkaicYbu88wAAAQY"]
[Mon Apr 06 02:27:26.627982 2026] [:error] [pid 51753:tid 51832] [client 20.215.186.86:41178] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adKpjq3pmp1JkaicYbu89wAAARU"]
[Mon Apr 06 02:27:27.660311 2026] [:error] [pid 51580:tid 51648] [client 20.215.186.86:45412] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adKpj1NFl1NiyNgNZAldQQAAAEk"]
[Mon Apr 06 02:27:28.721420 2026] [:error] [pid 51580:tid 51647] [client 20.215.186.86:29170] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adKpkFNFl1NiyNgNZAldSQAAAEg"]
[Mon Apr 06 02:27:29.523826 2026] [:error] [pid 51580:tid 51645] [client 20.215.186.86:40201] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "adKpkVNFl1NiyNgNZAldUQAAAEY"]
[Mon Apr 06 02:27:30.534574 2026] [:error] [pid 51753:tid 51819] [client 20.215.186.86:44951] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "adKpkq3pmp1JkaicYbu9BQAAAQg"]
[Mon Apr 06 02:27:31.435497 2026] [:error] [pid 51580:tid 51639] [client 20.215.186.86:38676] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "adKpk1NFl1NiyNgNZAldVQAAAEA"]
[Mon Apr 06 02:27:32.456575 2026] [:error] [pid 51753:tid 51827] [client 20.215.186.86:38717] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v.php"] [unique_id "adKplK3pmp1JkaicYbu9FwAAARA"]
[Mon Apr 06 02:27:33.592814 2026] [:error] [pid 51581:tid 51688] [client 20.215.186.86:29140] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "adKpld4k74fhQLPUy7FfVQAAAJM"]
[Mon Apr 06 02:27:35.262177 2026] [:error] [pid 51580:tid 51641] [client 20.215.186.86:29133] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "adKpl1NFl1NiyNgNZAldZgAAAEI"]
[Mon Apr 06 02:27:36.173661 2026] [:error] [pid 51753:tid 51835] [client 20.215.186.86:54908] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "adKpmK3pmp1JkaicYbu9IgAAARc"]
[Mon Apr 06 02:27:37.259550 2026] [:error] [pid 51753:tid 51821] [client 20.215.186.86:58735] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/te.php"] [unique_id "adKpma3pmp1JkaicYbu9KAAAAQo"]
[Mon Apr 06 02:27:38.062146 2026] [:error] [pid 51584:tid 51710] [client 20.215.186.86:29138] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adKpmsZ4qY_GoNCPARBITAAAAM0"]
[Mon Apr 06 02:27:39.534730 2026] [:error] [pid 51753:tid 51834] [client 20.215.186.86:33839] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adKpm63pmp1JkaicYbu9LgAAARY"]
[Mon Apr 06 02:27:40.583752 2026] [:error] [pid 51584:tid 51703] [client 20.215.186.86:27984] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adKpnMZ4qY_GoNCPARBIUwAAAMY"]
[Mon Apr 06 02:27:41.617091 2026] [:error] [pid 51584:tid 51697] [client 20.215.186.86:31649] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adKpncZ4qY_GoNCPARBIXQAAAMA"]
[Mon Apr 06 02:27:42.461155 2026] [:error] [pid 51584:tid 51702] [client 20.215.186.86:33854] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adKpnsZ4qY_GoNCPARBIYwAAAMU"]
[Mon Apr 06 02:27:43.007765 2026] [:error] [pid 51581:tid 51671] [client 20.215.186.86:56311] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adKpn94k74fhQLPUy7FfagAAAII"]
[Mon Apr 06 02:27:43.890785 2026] [:error] [pid 51580:tid 51641] [client 20.215.186.86:37175] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adKpn1NFl1NiyNgNZAldewAAAEI"]
[Mon Apr 06 02:27:44.628047 2026] [:error] [pid 51581:tid 51686] [client 20.215.186.86:27947] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adKpoN4k74fhQLPUy7FfbgAAAJE"]
[Mon Apr 06 02:27:45.366971 2026] [:error] [pid 51580:tid 51645] [client 20.215.186.86:54909] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "adKpoVNFl1NiyNgNZAldhAAAAEY"]
[Mon Apr 06 02:27:46.281856 2026] [:error] [pid 51753:tid 51821] [client 20.215.186.86:27910] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "adKpoq3pmp1JkaicYbu9QAAAAQo"]
[Mon Apr 06 02:27:47.711294 2026] [:error] [pid 51580:tid 51639] [client 20.215.186.86:28026] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "adKpo1NFl1NiyNgNZAldkgAAAEA"]
[Mon Apr 06 02:27:48.873177 2026] [:error] [pid 51753:tid 51822] [client 20.215.186.86:27919] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "adKppK3pmp1JkaicYbu9UQAAAQs"]
[Mon Apr 06 02:27:50.184382 2026] [:error] [pid 51753:tid 51831] [client 20.215.186.86:41264] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adKppq3pmp1JkaicYbu9WAAAARQ"]
[Mon Apr 06 02:27:51.357307 2026] [:error] [pid 51584:tid 51712] [client 20.215.186.86:37547] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adKpp8Z4qY_GoNCPARBIugAAAM8"]
[Mon Apr 06 02:27:52.173076 2026] [:error] [pid 51584:tid 51700] [client 20.215.186.86:27954] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adKpqMZ4qY_GoNCPARBIvAAAAMM"]
[Mon Apr 06 02:27:53.282056 2026] [:error] [pid 51580:tid 51659] [client 20.215.186.86:41221] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adKpqVNFl1NiyNgNZAldogAAAFQ"]
[Mon Apr 06 02:27:55.108538 2026] [:error] [pid 51581:tid 51675] [client 20.215.186.86:27964] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "adKpq94k74fhQLPUy7FfvgAAAIY"]
[Mon Apr 06 02:27:56.269004 2026] [:error] [pid 51581:tid 51681] [client 20.215.186.86:41235] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "adKprN4k74fhQLPUy7FfvwAAAIw"]
[Mon Apr 06 02:27:57.643394 2026] [:error] [pid 51581:tid 51685] [client 20.215.186.86:54402] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "adKprd4k74fhQLPUy7FfygAAAJA"]
[Mon Apr 06 02:27:58.450812 2026] [:error] [pid 51753:tid 51834] [client 20.215.186.86:37555] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "adKprq3pmp1JkaicYbu9fQAAARY"]
[Mon Apr 06 02:27:59.069795 2026] [:error] [pid 51580:tid 51658] [client 20.215.186.86:27994] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/manager.php"] [unique_id "adKpr1NFl1NiyNgNZAldrgAAAFM"]
[Mon Apr 06 02:27:59.864851 2026] [:error] [pid 51753:tid 51812] [client 20.215.186.86:42496] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/manager.php"] [unique_id "adKpr63pmp1JkaicYbu9hQAAAQE"]
[Mon Apr 06 02:28:00.949326 2026] [:error] [pid 51753:tid 51835] [client 20.215.186.86:36516] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/manager.php"] [unique_id "adKpsK3pmp1JkaicYbu9jgAAARc"]
[Mon Apr 06 02:28:02.487764 2026] [:error] [pid 51581:tid 51688] [client 20.215.186.86:37205] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/manager.php"] [unique_id "adKpst4k74fhQLPUy7Ff0AAAAJM"]
[Mon Apr 06 02:28:03.087777 2026] [:error] [pid 51753:tid 51826] [client 20.215.186.86:51661] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adKps63pmp1JkaicYbu9pAAAAQ8"]
[Mon Apr 06 02:28:05.632918 2026] [:error] [pid 51753:tid 51831] [client 20.215.186.86:60266] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adKpta3pmp1JkaicYbu9rwAAARQ"]
[Mon Apr 06 02:28:08.463132 2026] [:error] [pid 51753:tid 51834] [client 20.215.186.86:32895] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adKpuK3pmp1JkaicYbu9uwAAARY"]
[Mon Apr 06 02:28:19.901206 2026] [:error] [pid 51580:tid 51654] [client 20.215.186.86:26355] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "adKpw1NFl1NiyNgNZAld3AAAAE8"]
[Mon Apr 06 02:28:21.663280 2026] [:error] [pid 51753:tid 51828] [client 20.215.186.86:7118] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "adKpxa3pmp1JkaicYbu-AQAAARE"]
[Mon Apr 06 02:28:23.289645 2026] [:error] [pid 51753:tid 51817] [client 20.215.186.86:47400] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "adKpx63pmp1JkaicYbu-EQAAAQY"]
[Mon Apr 06 02:28:24.969768 2026] [:error] [pid 51584:tid 51716] [client 20.215.186.86:7071] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inde.php"] [unique_id "adKpyMZ4qY_GoNCPARBI6gAAANM"]
[Mon Apr 06 02:28:25.543449 2026] [:error] [pid 51580:tid 51648] [client 20.215.186.86:28330] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adKpyVNFl1NiyNgNZAld5AAAAEk"]
[Mon Apr 06 02:28:26.616638 2026] [:error] [pid 51580:tid 51660] [client 20.215.186.86:28311] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adKpylNFl1NiyNgNZAld5gAAAFU"]
[Mon Apr 06 02:28:27.738496 2026] [:error] [pid 51753:tid 51818] [client 20.215.186.86:39608] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adKpy63pmp1JkaicYbu-JAAAAQc"]
[Mon Apr 06 02:28:28.576983 2026] [:error] [pid 51584:tid 51721] [client 20.215.186.86:35392] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adKpzMZ4qY_GoNCPARBI8AAAANg"]
[Mon Apr 06 02:28:29.119699 2026] [:error] [pid 51580:tid 51657] [client 20.215.186.86:29636] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adKpzVNFl1NiyNgNZAld6QAAAFI"]
[Mon Apr 06 02:28:29.670729 2026] [:error] [pid 51581:tid 51688] [client 20.215.186.86:39596] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adKpzd4k74fhQLPUy7FgEAAAAJM"]
[Mon Apr 06 02:28:30.238934 2026] [:error] [pid 51580:tid 51647] [client 20.215.186.86:7155] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adKpzlNFl1NiyNgNZAld7gAAAEg"]
[Mon Apr 06 02:28:30.869339 2026] [:error] [pid 51753:tid 51827] [client 20.215.186.86:25023] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adKpzq3pmp1JkaicYbu-KQAAARA"]
[Mon Apr 06 02:28:31.420385 2026] [:error] [pid 51753:tid 51832] [client 20.215.186.86:46182] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "adKpz63pmp1JkaicYbu-LgAAARU"]
[Mon Apr 06 02:28:31.946894 2026] [:error] [pid 51580:tid 51654] [client 20.215.186.86:28370] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "adKpz1NFl1NiyNgNZAld8AAAAE8"]
[Mon Apr 06 02:28:32.554497 2026] [:error] [pid 51580:tid 51643] [client 20.215.186.86:50451] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "adKp0FNFl1NiyNgNZAld8QAAAEQ"]
[Mon Apr 06 02:28:34.122020 2026] [:error] [pid 51580:tid 51647] [client 20.215.186.86:28333] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxin.php"] [unique_id "adKp0lNFl1NiyNgNZAld-wAAAEg"]
[Mon Apr 06 02:28:35.651251 2026] [:error] [pid 51753:tid 51836] [client 20.215.186.86:45477] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "adKp063pmp1JkaicYbu-PwAAARg"]
[Mon Apr 06 02:28:36.443563 2026] [:error] [pid 51753:tid 51825] [client 20.215.186.86:46176] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "adKp1K3pmp1JkaicYbu-QgAAAQ4"]
[Mon Apr 06 02:28:37.060731 2026] [:error] [pid 51581:tid 51672] [client 20.215.186.86:29641] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "adKp1d4k74fhQLPUy7FgFgAAAIM"]
[Mon Apr 06 02:28:37.806093 2026] [:error] [pid 51580:tid 51642] [client 20.215.186.86:25661] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "adKp1VNFl1NiyNgNZAld_wAAAEM"]
[Mon Apr 06 02:28:38.674050 2026] [:error] [pid 51753:tid 51820] [client 20.215.186.86:25650] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "adKp1q3pmp1JkaicYbu-SgAAAQk"]
[Mon Apr 06 02:28:39.435998 2026] [:error] [pid 51753:tid 51826] [client 20.215.186.86:29670] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "adKp163pmp1JkaicYbu-TgAAAQ8"]
[Mon Apr 06 02:28:40.248984 2026] [:error] [pid 51753:tid 51815] [client 20.215.186.86:59315] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "adKp2K3pmp1JkaicYbu-UwAAAQQ"]
[Mon Apr 06 02:28:41.704149 2026] [:error] [pid 51753:tid 51836] [client 20.215.186.86:25617] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "adKp2a3pmp1JkaicYbu-WgAAARg"]
[Mon Apr 06 02:28:42.585462 2026] [:error] [pid 51580:tid 51648] [client 20.215.186.86:6979] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adKp2lNFl1NiyNgNZAleEAAAAEk"]
[Mon Apr 06 02:28:43.488137 2026] [:error] [pid 51581:tid 51686] [client 20.215.186.86:59296] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adKp294k74fhQLPUy7FgHQAAAJE"]
[Mon Apr 06 02:28:44.386758 2026] [:error] [pid 51580:tid 51647] [client 20.215.186.86:30696] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adKp3FNFl1NiyNgNZAleFAAAAEg"]
[Mon Apr 06 02:28:45.109078 2026] [:error] [pid 51580:tid 51656] [client 20.215.186.86:42489] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adKp3VNFl1NiyNgNZAleFQAAAFE"]
[Mon Apr 06 02:28:46.094170 2026] [:error] [pid 51753:tid 51834] [client 20.215.186.86:53419] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "adKp3q3pmp1JkaicYbu-ZwAAARY"]
[Mon Apr 06 02:28:46.686597 2026] [:error] [pid 51584:tid 51697] [client 20.215.186.86:53413] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "adKp3sZ4qY_GoNCPARBJJgAAAMA"]
[Mon Apr 06 02:28:47.465629 2026] [:error] [pid 51753:tid 51830] [client 20.215.186.86:53412] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "adKp363pmp1JkaicYbu-bwAAARM"]
[Mon Apr 06 02:28:48.407328 2026] [:error] [pid 51581:tid 51691] [client 20.215.186.86:53384] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolv2.php"] [unique_id "adKp4N4k74fhQLPUy7FgJgAAAJU"]
[Mon Apr 06 02:28:49.907158 2026] [:error] [pid 51581:tid 51684] [client 20.215.186.86:34398] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geck.php"] [unique_id "adKp4d4k74fhQLPUy7FgLAAAAI8"]
[Mon Apr 06 02:28:51.284179 2026] [:error] [pid 51581:tid 51680] [client 20.215.186.86:42485] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geck.php"] [unique_id "adKp494k74fhQLPUy7FgMwAAAIs"]
[Mon Apr 06 02:28:52.103003 2026] [:error] [pid 51581:tid 51676] [client 20.215.186.86:6989] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geck.php"] [unique_id "adKp5N4k74fhQLPUy7FgNgAAAIc"]
[Mon Apr 06 02:28:53.158851 2026] [:error] [pid 51580:tid 51653] [client 20.215.186.86:34395] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geck.php"] [unique_id "adKp5VNFl1NiyNgNZAleIQAAAE4"]
[Mon Apr 06 02:28:54.539323 2026] [:error] [pid 51580:tid 51657] [client 20.215.186.86:49378] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "adKp5lNFl1NiyNgNZAleJwAAAFI"]
[Mon Apr 06 02:28:55.338133 2026] [:error] [pid 51753:tid 51830] [client 20.215.186.86:35361] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "adKp563pmp1JkaicYbu-fgAAARM"]
[Mon Apr 06 02:28:56.265567 2026] [:error] [pid 51753:tid 51831] [client 20.215.186.86:28786] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "adKp6K3pmp1JkaicYbu-hgAAARQ"]
[Mon Apr 06 02:28:56.938672 2026] [:error] [pid 51580:tid 51651] [client 20.215.186.86:53381] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xtt.php"] [unique_id "adKp6FNFl1NiyNgNZAleMQAAAEw"]
[Mon Apr 06 02:28:58.258879 2026] [:error] [pid 51580:tid 51656] [client 20.215.186.86:28745] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adKp6lNFl1NiyNgNZAlePAAAAFE"]
[Mon Apr 06 02:28:59.117736 2026] [:error] [pid 51753:tid 51835] [client 20.215.186.86:6387] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adKp663pmp1JkaicYbu-jgAAARc"]
[Mon Apr 06 02:29:00.735993 2026] [:error] [pid 51753:tid 51815] [client 20.215.186.86:35352] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adKp7K3pmp1JkaicYbu-lAAAAQQ"]
[Mon Apr 06 02:29:02.203712 2026] [:error] [pid 51753:tid 51824] [client 20.215.186.86:46684] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adKp7q3pmp1JkaicYbu-mgAAAQ0"]
[Mon Apr 06 02:29:04.385893 2026] [:error] [pid 51581:tid 51669] [client 20.215.186.86:59731] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "adKp8N4k74fhQLPUy7FgTwAAAIA"]
[Mon Apr 06 02:29:07.003416 2026] [:error] [pid 51753:tid 51812] [client 20.215.186.86:35367] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "adKp863pmp1JkaicYbu-pgAAAQE"]
[Mon Apr 06 02:29:08.782644 2026] [:error] [pid 51580:tid 51645] [client 20.215.186.86:35374] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "adKp9FNFl1NiyNgNZAleYwAAAEY"]
[Mon Apr 06 02:29:11.604850 2026] [:error] [pid 51581:tid 51686] [client 20.215.186.86:35346] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/system.php"] [unique_id "adKp994k74fhQLPUy7FgYQAAAJE"]
[Mon Apr 06 02:29:13.695662 2026] [:error] [pid 51584:tid 51701] [client 20.215.186.86:54912] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "adKp-cZ4qY_GoNCPARBJcwAAAMQ"]
[Mon Apr 06 02:29:14.780344 2026] [:error] [pid 51580:tid 51647] [client 20.215.186.86:46677] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "adKp-lNFl1NiyNgNZAlecwAAAEg"]
[Mon Apr 06 02:29:15.669547 2026] [:error] [pid 51753:tid 51816] [client 20.215.186.86:43139] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "adKp-63pmp1JkaicYbu-xQAAAQU"]
[Mon Apr 06 02:29:16.507343 2026] [:error] [pid 51753:tid 51825] [client 20.215.186.86:55845] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "adKp_K3pmp1JkaicYbu-zgAAAQ4"]
[Mon Apr 06 02:29:17.234916 2026] [:error] [pid 51753:tid 51817] [client 20.215.186.86:47850] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adKp_a3pmp1JkaicYbu-0gAAAQY"]
[Mon Apr 06 02:29:17.782714 2026] [:error] [pid 51753:tid 51823] [client 20.215.186.86:37578] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adKp_a3pmp1JkaicYbu-1gAAAQw"]
[Mon Apr 06 02:29:18.450005 2026] [:error] [pid 51753:tid 51818] [client 20.215.186.86:27931] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adKp_q3pmp1JkaicYbu-2QAAAQc"]
[Mon Apr 06 02:29:26.430596 2026] [:error] [pid 51753:tid 51830] [client 20.215.186.86:43142] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adKqBq3pmp1JkaicYbu_DAAAARM"]
[Mon Apr 06 02:29:27.194619 2026] [:error] [pid 51581:tid 51682] [client 20.215.186.86:25043] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adKqB94k74fhQLPUy7FggAAAAI0"]
[Mon Apr 06 02:29:27.924443 2026] [:error] [pid 51753:tid 51817] [client 20.215.186.86:56357] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adKqB63pmp1JkaicYbu_EwAAAQY"]
[Mon Apr 06 02:29:28.495410 2026] [:error] [pid 51580:tid 51651] [client 20.215.186.86:26930] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adKqCFNFl1NiyNgNZAlelwAAAEw"]
[Mon Apr 06 02:29:30.432902 2026] [:error] [pid 51753:tid 51812] [client 20.215.186.86:62230] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "adKqCq3pmp1JkaicYbu_HQAAAQE"]
[Mon Apr 06 02:29:32.976076 2026] [:error] [pid 51753:tid 51818] [client 20.215.186.86:43147] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "adKqDK3pmp1JkaicYbu_LQAAAQc"]
[Mon Apr 06 02:29:34.008476 2026] [:error] [pid 51581:tid 51670] [client 20.215.186.86:27959] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "adKqDt4k74fhQLPUy7FgiwAAAIE"]
[Mon Apr 06 02:29:35.228297 2026] [:error] [pid 51580:tid 51646] [client 20.215.186.86:38999] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/layout.php"] [unique_id "adKqD1NFl1NiyNgNZAlengAAAEc"]
[Mon Apr 06 02:29:36.371159 2026] [:error] [pid 51584:tid 51721] [client 20.215.186.86:56327] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adKqEMZ4qY_GoNCPARBJiQAAANg"]
[Mon Apr 06 02:29:37.863739 2026] [:error] [pid 51581:tid 51682] [client 20.215.186.86:26885] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adKqEd4k74fhQLPUy7FgkgAAAI0"]
[Mon Apr 06 02:29:39.155510 2026] [:error] [pid 51753:tid 51826] [client 20.215.186.86:55838] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adKqE63pmp1JkaicYbu_QgAAAQ8"]
[Mon Apr 06 02:29:39.899344 2026] [:error] [pid 51580:tid 51641] [client 20.215.186.86:55821] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adKqE1NFl1NiyNgNZAlerQAAAEI"]
[Mon Apr 06 02:29:40.788693 2026] [:error] [pid 51580:tid 51639] [client 20.215.186.86:56326] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adKqFFNFl1NiyNgNZAlerwAAAEA"]
[Mon Apr 06 02:29:41.638160 2026] [:error] [pid 51584:tid 51714] [client 20.215.186.86:46223] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adKqFcZ4qY_GoNCPARBJlQAAANE"]
[Mon Apr 06 02:29:42.373252 2026] [:error] [pid 51753:tid 51826] [client 20.215.186.86:55831] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adKqFq3pmp1JkaicYbu_SQAAAQ8"]
[Mon Apr 06 02:29:43.087705 2026] [:error] [pid 51584:tid 51702] [client 20.215.186.86:46217] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adKqF8Z4qY_GoNCPARBJnQAAAMU"]
[Mon Apr 06 02:29:43.729707 2026] [:error] [pid 51753:tid 51815] [client 20.215.186.86:56339] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adKqF63pmp1JkaicYbu_UgAAAQQ"]
[Mon Apr 06 02:29:44.290060 2026] [:error] [pid 51584:tid 51721] [client 20.215.186.86:27935] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adKqGMZ4qY_GoNCPARBJoQAAANg"]
[Mon Apr 06 02:29:44.946840 2026] [:error] [pid 51753:tid 51824] [client 20.215.186.86:27939] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adKqGK3pmp1JkaicYbu_WQAAAQ0"]
[Mon Apr 06 02:29:45.702868 2026] [:error] [pid 51580:tid 51639] [client 20.215.186.86:30196] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adKqGVNFl1NiyNgNZAletwAAAEA"]
[Mon Apr 06 02:29:46.389861 2026] [:error] [pid 51580:tid 51647] [client 20.215.186.86:39002] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "adKqGlNFl1NiyNgNZAleuAAAAEg"]
[Mon Apr 06 02:29:47.427449 2026] [:error] [pid 51580:tid 51652] [client 20.215.186.86:27943] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "adKqG1NFl1NiyNgNZAlevAAAAE0"]
[Mon Apr 06 02:29:48.216882 2026] [:error] [pid 51580:tid 51641] [client 20.215.186.86:29081] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "adKqHFNFl1NiyNgNZAlevgAAAEI"]
[Mon Apr 06 02:29:48.902005 2026] [:error] [pid 51580:tid 51646] [client 20.215.186.86:62242] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configs.php"] [unique_id "adKqHFNFl1NiyNgNZAlewAAAAEc"]
[Mon Apr 06 02:29:49.553372 2026] [:error] [pid 51753:tid 51823] [client 20.215.186.86:62228] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "adKqHa3pmp1JkaicYbu_cgAAAQw"]
[Mon Apr 06 02:29:50.261451 2026] [:error] [pid 51753:tid 51821] [client 20.215.186.86:26943] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "adKqHq3pmp1JkaicYbu_dgAAAQo"]
[Mon Apr 06 02:29:50.946689 2026] [:error] [pid 51753:tid 51826] [client 20.215.186.86:46264] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "adKqHq3pmp1JkaicYbu_fAAAAQ8"]
[Mon Apr 06 02:29:51.607993 2026] [:error] [pid 51753:tid 51812] [client 20.215.186.86:61845] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yas.php"] [unique_id "adKqH63pmp1JkaicYbu_gQAAAQE"]
[Mon Apr 06 02:29:52.273744 2026] [:error] [pid 51753:tid 51836] [client 20.215.186.86:26965] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "adKqIK3pmp1JkaicYbu_jAAAARg"]
[Mon Apr 06 02:29:52.874705 2026] [:error] [pid 51584:tid 51711] [client 20.215.186.86:46662] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "adKqIMZ4qY_GoNCPARBJtgAAAM4"]
[Mon Apr 06 02:29:53.419751 2026] [:error] [pid 51581:tid 51691] [client 20.215.186.86:55842] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "adKqId4k74fhQLPUy7FgpAAAAJU"]
[Mon Apr 06 02:29:54.207133 2026] [:error] [pid 51581:tid 51689] [client 20.215.186.86:43149] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file5.php"] [unique_id "adKqIt4k74fhQLPUy7FgpQAAAJQ"]
[Mon Apr 06 02:29:55.406379 2026] [:error] [pid 51580:tid 51639] [client 20.215.186.86:39016] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "adKqI1NFl1NiyNgNZAlezAAAAEA"]
[Mon Apr 06 02:29:56.365491 2026] [:error] [pid 51584:tid 51713] [client 20.215.186.86:29084] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "adKqJMZ4qY_GoNCPARBJuQAAANA"]
[Mon Apr 06 02:29:56.930599 2026] [:error] [pid 51753:tid 51828] [client 20.215.186.86:25063] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "adKqJK3pmp1JkaicYbu_rAAAARE"]
[Mon Apr 06 02:29:57.684527 2026] [:error] [pid 51584:tid 51718] [client 20.215.186.86:49966] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v3.php"] [unique_id "adKqJcZ4qY_GoNCPARBJwQAAANU"]
[Mon Apr 06 02:29:58.294568 2026] [:error] [pid 51584:tid 51698] [client 20.215.186.86:43171] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adKqJsZ4qY_GoNCPARBJxQAAAME"]
[Mon Apr 06 02:29:59.086757 2026] [:error] [pid 51584:tid 51699] [client 20.215.186.86:30192] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adKqJ8Z4qY_GoNCPARBJyQAAAMI"]
[Mon Apr 06 02:29:59.707610 2026] [:error] [pid 51581:tid 51674] [client 20.215.186.86:27415] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adKqJ94k74fhQLPUy7FgqQAAAIU"]
[Mon Apr 06 02:30:00.426823 2026] [:error] [pid 51584:tid 51711] [client 20.215.186.86:27399] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adKqKMZ4qY_GoNCPARBJzQAAAM4"]
[Mon Apr 06 02:30:01.064295 2026] [:error] [pid 51581:tid 51671] [client 20.215.186.86:55855] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "adKqKd4k74fhQLPUy7FgrQAAAII"]
[Mon Apr 06 02:30:01.617520 2026] [:error] [pid 51580:tid 51661] [client 20.215.186.86:33282] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "adKqKVNFl1NiyNgNZAle2gAAAFY"]
[Mon Apr 06 02:30:02.189438 2026] [:error] [pid 51753:tid 51824] [client 20.215.186.86:47315] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "adKqKq3pmp1JkaicYbu_uAAAAQ0"]
[Mon Apr 06 02:30:05.701606 2026] [:error] [pid 51753:tid 51814] [client 20.215.186.86:26929] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "adKqLa3pmp1JkaicYbu_xQAAAQM"]
[Mon Apr 06 02:30:06.512424 2026] [:error] [pid 51753:tid 51813] [client 20.215.186.86:33295] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adKqLq3pmp1JkaicYbu_yQAAAQI"]
[Mon Apr 06 02:30:07.125945 2026] [:error] [pid 51580:tid 51662] [client 20.215.186.86:47346] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adKqL1NFl1NiyNgNZAle5QAAAFc"]
[Mon Apr 06 02:30:07.958974 2026] [:error] [pid 51584:tid 51717] [client 20.215.186.86:56374] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adKqL8Z4qY_GoNCPARBJ4gAAANQ"]
[Mon Apr 06 02:30:08.662102 2026] [:error] [pid 51584:tid 51713] [client 20.215.186.86:36985] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adKqMMZ4qY_GoNCPARBJ6QAAANA"]
[Mon Apr 06 02:30:09.305480 2026] [:error] [pid 51584:tid 51714] [client 20.215.186.86:53940] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/himu.php"] [unique_id "adKqMcZ4qY_GoNCPARBJ7gAAANE"]
[Mon Apr 06 02:30:10.193797 2026] [:error] [pid 51584:tid 51715] [client 20.215.186.86:33324] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/himu.php"] [unique_id "adKqMsZ4qY_GoNCPARBJ9wAAANI"]
[Mon Apr 06 02:30:11.074817 2026] [:error] [pid 51753:tid 51811] [client 20.215.186.86:49934] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/himu.php"] [unique_id "adKqM63pmp1JkaicYbu_0gAAAQA"]
[Mon Apr 06 02:30:11.827436 2026] [:error] [pid 51584:tid 51715] [client 20.215.186.86:33352] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/himu.php"] [unique_id "adKqM8Z4qY_GoNCPARBKAAAAANI"]
[Mon Apr 06 02:30:12.539767 2026] [:error] [pid 51753:tid 51824] [client 20.215.186.86:49914] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "adKqNK3pmp1JkaicYbu_1gAAAQ0"]
[Mon Apr 06 02:30:13.210915 2026] [:error] [pid 51584:tid 51716] [client 20.215.186.86:36986] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "adKqNcZ4qY_GoNCPARBKBQAAANM"]
[Mon Apr 06 02:30:13.964173 2026] [:error] [pid 51580:tid 51653] [client 20.215.186.86:33906] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "adKqNVNFl1NiyNgNZAle9wAAAE4"]
[Mon Apr 06 02:30:14.813086 2026] [:error] [pid 51584:tid 51714] [client 20.215.186.86:32831] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "adKqNsZ4qY_GoNCPARBKDAAAANE"]
[Mon Apr 06 02:30:15.602629 2026] [:error] [pid 51753:tid 51819] [client 20.215.186.86:33391] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "adKqN63pmp1JkaicYbu_4gAAAQg"]
[Mon Apr 06 02:30:16.338802 2026] [:error] [pid 51581:tid 51693] [client 20.215.186.86:48442] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "adKqON4k74fhQLPUy7FgyQAAAJc"]
[Mon Apr 06 02:30:16.955884 2026] [:error] [pid 51581:tid 51671] [client 20.215.186.86:32282] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "adKqON4k74fhQLPUy7FgygAAAII"]
[Mon Apr 06 02:30:17.564855 2026] [:error] [pid 51584:tid 51715] [client 20.215.186.86:47898] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "adKqOcZ4qY_GoNCPARBKFwAAANI"]
[Mon Apr 06 02:30:18.160943 2026] [:error] [pid 51580:tid 51656] [client 20.215.186.86:36940] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mds.php"] [unique_id "adKqOlNFl1NiyNgNZAlfAgAAAFE"]
[Mon Apr 06 02:30:18.786691 2026] [:error] [pid 51584:tid 51717] [client 20.215.186.86:32295] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mds.php"] [unique_id "adKqOsZ4qY_GoNCPARBKGwAAANQ"]
[Mon Apr 06 02:30:19.434496 2026] [:error] [pid 51753:tid 51818] [client 20.215.186.86:32305] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mds.php"] [unique_id "adKqO63pmp1JkaicYbu_8wAAAQc"]
[Mon Apr 06 02:30:20.246752 2026] [:error] [pid 51753:tid 51830] [client 20.215.186.86:46732] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mds.php"] [unique_id "adKqPK3pmp1JkaicYbu_-gAAARM"]
[Mon Apr 06 02:30:20.822898 2026] [:error] [pid 51580:tid 51649] [client 20.215.186.86:32276] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adKqPFNFl1NiyNgNZAlfBgAAAEo"]
[Mon Apr 06 02:30:21.550675 2026] [:error] [pid 51753:tid 51822] [client 20.215.186.86:44224] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adKqPa3pmp1JkaicYbu__wAAAQs"]
[Mon Apr 06 02:30:22.298080 2026] [:error] [pid 51753:tid 51828] [client 20.215.186.86:32290] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adKqPq3pmp1JkaicYbvABAAAARE"]
[Mon Apr 06 02:30:22.970192 2026] [:error] [pid 51580:tid 51651] [client 20.215.186.86:31175] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adKqPlNFl1NiyNgNZAlfDgAAAEw"]
[Mon Apr 06 02:30:23.594609 2026] [:error] [pid 51753:tid 51821] [client 20.215.186.86:59260] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "adKqP63pmp1JkaicYbvADgAAAQo"]
[Mon Apr 06 02:30:24.182650 2026] [:error] [pid 51753:tid 51829] [client 20.215.186.86:32257] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "adKqQK3pmp1JkaicYbvAEAAAARI"]
[Mon Apr 06 02:30:24.948130 2026] [:error] [pid 51753:tid 51826] [client 20.215.186.86:40139] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "adKqQK3pmp1JkaicYbvAEwAAAQ8"]
[Mon Apr 06 02:30:25.698812 2026] [:error] [pid 51753:tid 51822] [client 20.215.186.86:32267] [client 20.215.186.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/m.php"] [unique_id "adKqQa3pmp1JkaicYbvAHAAAAQs"]
[Mon Apr 06 03:09:26.742976 2026] [:error] [pid 51580:tid 51652] [client 209.38.46.97:57355] [client 209.38.46.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.38.46.97, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adKzZlNFl1NiyNgNZAl87gAAAE0"]
[Mon Apr 06 03:09:27.774926 2026] [:error] [pid 51580:tid 51663] [client 209.38.46.97:57355] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "adKzZ1NFl1NiyNgNZAl8-QAAAFg"]
[Mon Apr 06 03:09:28.770182 2026] [:error] [pid 51584:tid 51713] [client 209.38.46.97:60859] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "adKzaMZ4qY_GoNCPARBgqAAAANA"]
[Mon Apr 06 03:09:29.774011 2026] [:error] [pid 51753:tid 51815] [client 209.38.46.97:57146] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "adKzaa3pmp1JkaicYbvpswAAAQQ"]
[Mon Apr 06 03:09:30.777374 2026] [:error] [pid 51581:tid 51674] [client 209.38.46.97:59067] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adKzat4k74fhQLPUy7F0UAAAAIU"]
[Mon Apr 06 03:09:31.779477 2026] [:error] [pid 51584:tid 51721] [client 209.38.46.97:53185] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adKza8Z4qY_GoNCPARBgswAAANg"]
[Mon Apr 06 03:09:32.781624 2026] [:error] [pid 51580:tid 51651] [client 209.38.46.97:51616] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adKzbFNFl1NiyNgNZAl9EQAAAEw"]
[Mon Apr 06 03:09:33.801694 2026] [:error] [pid 51753:tid 51835] [client 209.38.46.97:60025] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adKzba3pmp1JkaicYbvpxAAAARc"]
[Mon Apr 06 03:09:34.797066 2026] [:error] [pid 51584:tid 51698] [client 209.38.46.97:63381] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adKzbsZ4qY_GoNCPARBgvwAAAME"]
[Mon Apr 06 03:09:35.794778 2026] [:error] [pid 51580:tid 51663] [client 209.38.46.97:54555] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adKzb1NFl1NiyNgNZAl9IQAAAFg"]
[Mon Apr 06 03:09:36.793085 2026] [:error] [pid 51584:tid 51713] [client 209.38.46.97:57523] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adKzcMZ4qY_GoNCPARBgxgAAANA"]
[Mon Apr 06 03:09:37.791623 2026] [:error] [pid 51753:tid 51835] [client 209.38.46.97:61270] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adKzca3pmp1JkaicYbvp5gAAARc"]
[Mon Apr 06 03:09:38.791663 2026] [:error] [pid 51581:tid 51671] [client 209.38.46.97:54312] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adKzct4k74fhQLPUy7F0ZgAAAII"]
[Mon Apr 06 03:09:39.792141 2026] [:error] [pid 51584:tid 51707] [client 209.38.46.97:49202] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adKzc8Z4qY_GoNCPARBg3QAAAMo"]
[Mon Apr 06 03:09:40.790733 2026] [:error] [pid 51580:tid 51641] [client 209.38.46.97:61915] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adKzdFNFl1NiyNgNZAl9KwAAAEI"]
[Mon Apr 06 04:02:59.445743 2026] [:error] [pid 35686:tid 35698] [client 162.62.231.139:40182] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adK_88MKdea6oORd2fwcrQAAAAI"]
[Mon Apr 06 08:29:11.869647 2026] [:error] [pid 9442:tid 9453] [client 43.130.16.140:43470] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adL-V0PsNnAJTnmz6sZCGgAAAQk"]
[Mon Apr 06 11:08:10.857406 2026] [:error] [pid 9442:tid 9459] [client 43.157.52.37:49138] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adMjmkPsNnAJTnmz6saUZgAAAQ8"]
[Mon Apr 06 15:24:05.270143 2026] [:error] [pid 35786:tid 35812] [client 43.166.134.114:41756] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adNflWgkfCKTaLhwaKTtCQAAANM"]
[Mon Apr 06 17:01:04.097365 2026] [:error] [pid 38562:tid 38586] [client 4.231.218.60:4962] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adN2UKeD6Ohe6wzRuy4zKAAAAVU"]
[Mon Apr 06 17:01:04.100079 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:28442] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adN2UMMKdea6oORd2fyDSgAAABc"]
[Mon Apr 06 17:01:05.499808 2026] [:error] [pid 35688:tid 35755] [client 4.231.218.60:59952] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adN2UeZ85qg4jLsRpQxMWwAAAIU"]
[Mon Apr 06 17:01:05.697662 2026] [:error] [pid 35786:tid 35796] [client 4.231.218.60:61784] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adN2UWgkfCKTaLhwaKT_AQAAAMM"]
[Mon Apr 06 17:01:06.596491 2026] [:error] [pid 35686:tid 35701] [client 4.231.218.60:50532] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adN2UsMKdea6oORd2fyDWQAAAAU"]
[Mon Apr 06 17:01:09.234649 2026] [:error] [pid 10280:tid 10300] [client 4.231.218.60:61816] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adN2VV8QUJkf8g-BFfOYpwAAAdE"]
[Mon Apr 06 17:01:09.284352 2026] [:error] [pid 35686:tid 35714] [client 4.231.218.60:38316] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adN2VcMKdea6oORd2fyDkQAAABI"]
[Mon Apr 06 17:01:10.058946 2026] [:error] [pid 35686:tid 35700] [client 4.231.218.60:61810] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adN2VsMKdea6oORd2fyDlwAAAAQ"]
[Mon Apr 06 17:01:10.368776 2026] [:error] [pid 35687:tid 35730] [client 4.231.218.60:37453] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adN2Vp3LtDozV0i8Bis7gAAAAEc"]
[Mon Apr 06 17:01:11.117057 2026] [:error] [pid 9413:tid 9437] [client 4.231.218.60:4394] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adN2V3llvEK3chn01wGhEAAAAZY"]
[Mon Apr 06 17:01:11.294478 2026] [:error] [pid 35687:tid 35739] [client 4.231.218.60:65438] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adN2V53LtDozV0i8Bis7hQAAAFA"]
[Mon Apr 06 17:01:12.053736 2026] [:error] [pid 35688:tid 35762] [client 4.231.218.60:59968] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adN2WOZ85qg4jLsRpQxMXAAAAIw"]
[Mon Apr 06 17:01:12.188790 2026] [:error] [pid 10280:tid 10303] [client 4.231.218.60:59930] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adN2WF8QUJkf8g-BFfOYrAAAAdQ"]
[Mon Apr 06 17:01:13.176861 2026] [:error] [pid 35687:tid 35737] [client 4.231.218.60:50553] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adN2WZ3LtDozV0i8Bis7hgAAAE4"]
[Mon Apr 06 17:01:13.395979 2026] [:error] [pid 35686:tid 35704] [client 4.231.218.60:40900] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adN2WcMKdea6oORd2fyDnwAAAAg"]
[Mon Apr 06 17:01:14.128014 2026] [:error] [pid 9442:tid 9463] [client 4.231.218.60:29003] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "adN2WkPsNnAJTnmz6sZixQAAARM"]
[Mon Apr 06 17:01:14.352908 2026] [:error] [pid 35687:tid 35731] [client 4.231.218.60:29039] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adN2Wp3LtDozV0i8Bis7hwAAAEg"]
[Mon Apr 06 17:01:14.836765 2026] [:error] [pid 38562:tid 38574] [client 4.231.218.60:61781] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "adN2WqeD6Ohe6wzRuy4zPAAAAUk"]
[Mon Apr 06 17:01:14.975679 2026] [:error] [pid 10280:tid 10307] [client 4.231.218.60:50525] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "adN2Wl8QUJkf8g-BFfOYsgAAAdg"]
[Mon Apr 06 17:01:16.031847 2026] [:error] [pid 9442:tid 9453] [client 4.231.218.60:44015] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "adN2XEPsNnAJTnmz6sZiygAAAQk"]
[Mon Apr 06 17:01:16.640063 2026] [:error] [pid 35687:tid 35748] [client 4.231.218.60:33092] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "adN2XJ3LtDozV0i8Bis7iwAAAFg"]
[Mon Apr 06 17:01:17.496764 2026] [:error] [pid 35687:tid 35736] [client 4.231.218.60:34755] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "adN2XZ3LtDozV0i8Bis7jAAAAE0"]
[Mon Apr 06 17:01:17.849310 2026] [:error] [pid 35687:tid 35738] [client 4.231.218.60:37534] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bogles.php"] [unique_id "adN2XZ3LtDozV0i8Bis7jgAAAE8"]
[Mon Apr 06 17:01:18.427665 2026] [:error] [pid 35687:tid 35740] [client 4.231.218.60:37507] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "adN2Xp3LtDozV0i8Bis7kwAAAFE"]
[Mon Apr 06 17:01:18.706069 2026] [:error] [pid 9442:tid 9463] [client 4.231.218.60:40917] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bogles.php"] [unique_id "adN2XkPsNnAJTnmz6sZi1AAAARM"]
[Mon Apr 06 17:01:19.176476 2026] [:error] [pid 9442:tid 9466] [client 4.231.218.60:40907] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "adN2X0PsNnAJTnmz6sZi2AAAARY"]
[Mon Apr 06 17:01:19.474115 2026] [:error] [pid 9442:tid 9465] [client 4.231.218.60:43538] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bogles.php"] [unique_id "adN2X0PsNnAJTnmz6sZi3AAAARU"]
[Mon Apr 06 17:01:20.134522 2026] [:error] [pid 38562:tid 38589] [client 4.231.218.60:52755] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bogles.php"] [unique_id "adN2YKeD6Ohe6wzRuy4zRwAAAVg"]
[Mon Apr 06 17:01:20.581969 2026] [:error] [pid 9442:tid 9468] [client 4.231.218.60:46357] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bogles.php"] [unique_id "adN2YEPsNnAJTnmz6sZi4gAAARg"]
[Mon Apr 06 17:01:20.858593 2026] [:error] [pid 38562:tid 38581] [client 4.231.218.60:4097] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bogles.php"] [unique_id "adN2YKeD6Ohe6wzRuy4zSgAAAVA"]
[Mon Apr 06 17:01:21.709626 2026] [:error] [pid 35688:tid 35760] [client 4.231.218.60:30073] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adN2YeZ85qg4jLsRpQxMYwAAAIo"]
[Mon Apr 06 17:01:22.039761 2026] [:error] [pid 10280:tid 10290] [client 4.231.218.60:60531] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bogles.php"] [unique_id "adN2Yl8QUJkf8g-BFfOYvQAAAcc"]
[Mon Apr 06 17:01:23.094532 2026] [:error] [pid 38562:tid 38577] [client 4.231.218.60:52797] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adN2Y6eD6Ohe6wzRuy4zWAAAAUw"]
[Mon Apr 06 17:01:23.710906 2026] [:error] [pid 35786:tid 35801] [client 4.231.218.60:46384] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bogles.php"] [unique_id "adN2Y2gkfCKTaLhwaKT_DAAAAMg"]
[Mon Apr 06 17:01:23.961536 2026] [:error] [pid 10280:tid 10291] [client 4.231.218.60:49291] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adN2Y18QUJkf8g-BFfOYwwAAAcg"]
[Mon Apr 06 17:01:24.371232 2026] [:error] [pid 35786:tid 35812] [client 4.231.218.60:60543] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adN2ZGgkfCKTaLhwaKT_EAAAANM"]
[Mon Apr 06 17:01:24.922316 2026] [:error] [pid 35786:tid 35793] [client 4.231.218.60:60521] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adN2ZGgkfCKTaLhwaKT_EwAAAMA"]
[Mon Apr 06 17:01:25.534964 2026] [:error] [pid 35687:tid 35723] [client 4.231.218.60:51637] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adN2ZZ3LtDozV0i8Bis7mwAAAEA"]
[Mon Apr 06 17:01:25.654388 2026] [:error] [pid 35687:tid 35726] [client 4.231.218.60:49313] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adN2ZZ3LtDozV0i8Bis7nAAAAEM"]
[Mon Apr 06 17:01:26.439608 2026] [:error] [pid 38562:tid 38565] [client 4.231.218.60:51588] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adN2ZqeD6Ohe6wzRuy4zXAAAAUA"]
[Mon Apr 06 17:01:26.473823 2026] [:error] [pid 10280:tid 10304] [client 4.231.218.60:49306] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adN2Zl8QUJkf8g-BFfOYyAAAAdU"]
[Mon Apr 06 17:01:27.137158 2026] [:error] [pid 35687:tid 35727] [client 4.231.218.60:49321] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adN2Z53LtDozV0i8Bis7oAAAAEQ"]
[Mon Apr 06 17:01:27.218589 2026] [:error] [pid 35687:tid 35743] [client 4.231.218.60:30041] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adN2Z53LtDozV0i8Bis7oQAAAFQ"]
[Mon Apr 06 17:01:27.853363 2026] [:error] [pid 38562:tid 38568] [client 4.231.218.60:5037] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adN2Z6eD6Ohe6wzRuy4zYQAAAUM"]
[Mon Apr 06 17:01:28.320476 2026] [:error] [pid 35686:tid 35701] [client 4.231.218.60:51595] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adN2aMMKdea6oORd2fyDuQAAAAU"]
[Mon Apr 06 17:01:28.489118 2026] [:error] [pid 35686:tid 35703] [client 4.231.218.60:30028] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adN2aMMKdea6oORd2fyDugAAAAc"]
[Mon Apr 06 17:01:29.064071 2026] [:error] [pid 38562:tid 38588] [client 4.231.218.60:51587] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adN2aaeD6Ohe6wzRuy4zZAAAAVc"]
[Mon Apr 06 17:01:29.582584 2026] [:error] [pid 35688:tid 35757] [client 4.231.218.60:35683] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adN2aeZ85qg4jLsRpQxMZwAAAIc"]
[Mon Apr 06 17:01:30.187539 2026] [:error] [pid 38562:tid 38571] [client 4.231.218.60:55575] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adN2aqeD6Ohe6wzRuy4zZgAAAUY"]
[Mon Apr 06 17:01:30.809397 2026] [:error] [pid 9442:tid 9444] [client 4.231.218.60:60529] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adN2akPsNnAJTnmz6sZi6AAAAQA"]
[Mon Apr 06 17:01:31.260699 2026] [:error] [pid 9442:tid 9447] [client 4.231.218.60:51593] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adN2a0PsNnAJTnmz6sZi6QAAAQM"]
[Mon Apr 06 17:01:32.148197 2026] [:error] [pid 38562:tid 38576] [client 4.231.218.60:4159] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adN2bKeD6Ohe6wzRuy4zdAAAAUs"]
[Mon Apr 06 17:01:32.343050 2026] [:error] [pid 35686:tid 35696] [client 4.231.218.60:43019] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adN2bMMKdea6oORd2fyDvwAAAAA"]
[Mon Apr 06 17:01:33.055717 2026] [:error] [pid 9442:tid 9452] [client 4.231.218.60:4146] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adN2bUPsNnAJTnmz6sZi6gAAAQg"]
[Mon Apr 06 17:01:33.816852 2026] [:error] [pid 9413:tid 9418] [client 4.231.218.60:60494] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adN2bXllvEK3chn01wGhKgAAAYM"]
[Mon Apr 06 17:01:34.083769 2026] [:error] [pid 38562:tid 38586] [client 4.231.218.60:49502] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adN2bqeD6Ohe6wzRuy4zegAAAVU"]
[Mon Apr 06 17:01:34.919110 2026] [:error] [pid 35688:tid 35772] [client 4.231.218.60:35652] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adN2buZ85qg4jLsRpQxMbAAAAJY"]
[Mon Apr 06 17:01:36.101665 2026] [:error] [pid 35786:tid 35812] [client 4.231.218.60:64425] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adN2cGgkfCKTaLhwaKT_IwAAANM"]
[Mon Apr 06 17:01:36.565004 2026] [:error] [pid 9413:tid 9424] [client 4.231.218.60:44973] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adN2cHllvEK3chn01wGhLQAAAYk"]
[Mon Apr 06 17:01:37.506849 2026] [:error] [pid 10280:tid 10287] [client 4.231.218.60:45771] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adN2cV8QUJkf8g-BFfOY4AAAAcQ"]
[Mon Apr 06 17:01:37.884382 2026] [:error] [pid 10280:tid 10307] [client 4.231.218.60:34804] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adN2cV8QUJkf8g-BFfOY4QAAAdg"]
[Mon Apr 06 17:01:39.228715 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:43022] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adN2c8MKdea6oORd2fyDywAAAAs"]
[Mon Apr 06 17:01:39.892482 2026] [:error] [pid 9442:tid 9460] [client 4.231.218.60:29450] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adN2c0PsNnAJTnmz6sZi7gAAARA"]
[Mon Apr 06 17:01:41.069655 2026] [:error] [pid 9442:tid 9457] [client 4.231.218.60:49529] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adN2dUPsNnAJTnmz6sZi8AAAAQ0"]
[Mon Apr 06 17:01:41.320848 2026] [:error] [pid 35686:tid 35711] [client 4.231.218.60:53446] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adN2dcMKdea6oORd2fyD2QAAAA8"]
[Mon Apr 06 17:01:42.085548 2026] [:error] [pid 38562:tid 38567] [client 4.231.218.60:60447] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adN2dqeD6Ohe6wzRuy4zhwAAAUI"]
[Mon Apr 06 17:01:43.123100 2026] [:error] [pid 35686:tid 35712] [client 4.231.218.60:4757] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adN2d8MKdea6oORd2fyD4AAAABA"]
[Mon Apr 06 17:01:44.005443 2026] [:error] [pid 10280:tid 10307] [client 4.231.218.60:42027] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adN2eF8QUJkf8g-BFfOY7wAAAdg"]
[Mon Apr 06 17:01:46.095987 2026] [:error] [pid 10280:tid 10290] [client 4.231.218.60:35025] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adN2el8QUJkf8g-BFfOY-QAAAcc"]
[Mon Apr 06 17:01:47.172925 2026] [:error] [pid 35687:tid 35745] [client 4.231.218.60:4478] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adN2e53LtDozV0i8Bis7rwAAAFY"]
[Mon Apr 06 17:01:52.370273 2026] [:error] [pid 38562:tid 38574] [client 4.231.218.60:44984] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adN2gKeD6Ohe6wzRuy4zlwAAAUk"]
[Mon Apr 06 17:01:53.158697 2026] [:error] [pid 9442:tid 9463] [client 4.231.218.60:64400] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adN2gUPsNnAJTnmz6sZi-AAAARM"]
[Mon Apr 06 17:01:53.437061 2026] [:error] [pid 9442:tid 9446] [client 4.231.218.60:29473] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adN2gUPsNnAJTnmz6sZi-gAAAQI"]
[Mon Apr 06 17:01:54.154287 2026] [:error] [pid 10280:tid 10301] [client 4.231.218.60:60417] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adN2gl8QUJkf8g-BFfOZHAAAAdI"]
[Mon Apr 06 17:01:54.891592 2026] [:error] [pid 10280:tid 10297] [client 4.231.218.60:60432] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adN2gl8QUJkf8g-BFfOZIQAAAc4"]
[Mon Apr 06 17:01:55.239356 2026] [:error] [pid 35786:tid 35812] [client 4.231.218.60:62998] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adN2g2gkfCKTaLhwaKT_NwAAANM"]
[Mon Apr 06 17:01:56.134169 2026] [:error] [pid 38562:tid 38575] [client 4.231.218.60:29962] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adN2hKeD6Ohe6wzRuy4zmQAAAUo"]
[Mon Apr 06 17:01:56.437627 2026] [:error] [pid 35687:tid 35727] [client 4.231.218.60:37871] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adN2hJ3LtDozV0i8Bis7swAAAEQ"]
[Mon Apr 06 17:01:57.199947 2026] [:error] [pid 35686:tid 35709] [client 4.231.218.60:29454] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adN2hcMKdea6oORd2fyEGQAAAA0"]
[Mon Apr 06 17:01:57.731748 2026] [:error] [pid 35686:tid 35710] [client 4.231.218.60:51191] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adN2hcMKdea6oORd2fyEHQAAAA4"]
[Mon Apr 06 17:01:59.982648 2026] [:error] [pid 9442:tid 9448] [client 4.231.218.60:49900] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adN2h0PsNnAJTnmz6sZjBAAAAQQ"]
[Mon Apr 06 17:02:00.350363 2026] [:error] [pid 35686:tid 35711] [client 4.231.218.60:49859] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adN2iMMKdea6oORd2fyEKgAAAA8"]
[Mon Apr 06 17:02:01.173283 2026] [:error] [pid 9442:tid 9446] [client 4.231.218.60:54673] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adN2iUPsNnAJTnmz6sZjBwAAAQI"]
[Mon Apr 06 17:02:07.945113 2026] [:error] [pid 35686:tid 35714] [client 4.231.218.60:29960] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "adN2j8MKdea6oORd2fyEbAAAABI"]
[Mon Apr 06 17:02:07.965633 2026] [:error] [pid 38562:tid 38585] [client 4.231.218.60:50475] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adN2j6eD6Ohe6wzRuy4zsAAAAVQ"]
[Mon Apr 06 17:02:08.909901 2026] [:error] [pid 38562:tid 38584] [client 4.231.218.60:47674] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "adN2kKeD6Ohe6wzRuy4ztgAAAVM"]
[Mon Apr 06 17:02:09.064222 2026] [:error] [pid 10280:tid 10301] [client 4.231.218.60:51188] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adN2kV8QUJkf8g-BFfOZQgAAAdI"]
[Mon Apr 06 17:02:09.971373 2026] [:error] [pid 10280:tid 10289] [client 4.231.218.60:4623] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adN2kV8QUJkf8g-BFfOZRQAAAcY"]
[Mon Apr 06 17:02:09.993040 2026] [:error] [pid 35687:tid 35730] [client 4.231.218.60:29993] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "adN2kZ3LtDozV0i8Bis7vAAAAEc"]
[Mon Apr 06 17:02:10.810508 2026] [:error] [pid 38562:tid 38574] [client 4.231.218.60:38974] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "adN2kqeD6Ohe6wzRuy4zuQAAAUk"]
[Mon Apr 06 17:02:11.081921 2026] [:error] [pid 9413:tid 9435] [client 4.231.218.60:29990] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adN2k3llvEK3chn01wGhQAAAAZQ"]
[Mon Apr 06 17:02:11.771028 2026] [:error] [pid 9442:tid 9456] [client 4.231.218.60:40488] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adN2k0PsNnAJTnmz6sZjFgAAAQw"]
[Mon Apr 06 17:02:12.800505 2026] [:error] [pid 38562:tid 38582] [client 4.231.218.60:44083] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adN2lKeD6Ohe6wzRuy4zwAAAAVE"]
[Mon Apr 06 17:02:13.051627 2026] [:error] [pid 38562:tid 38577] [client 4.231.218.60:40457] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "adN2laeD6Ohe6wzRuy4zxAAAAUw"]
[Mon Apr 06 17:02:13.815248 2026] [:error] [pid 9442:tid 9455] [client 4.231.218.60:44055] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adN2lUPsNnAJTnmz6sZjFwAAAQs"]
[Mon Apr 06 17:02:13.819824 2026] [:error] [pid 9413:tid 9439] [client 4.231.218.60:50475] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "adN2lXllvEK3chn01wGhRQAAAZg"]
[Mon Apr 06 17:02:15.046599 2026] [:error] [pid 9413:tid 9415] [client 4.231.218.60:47739] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adN2l3llvEK3chn01wGhRwAAAYA"]
[Mon Apr 06 17:02:15.055725 2026] [:error] [pid 9442:tid 9463] [client 4.231.218.60:40509] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "adN2l0PsNnAJTnmz6sZjGgAAARM"]
[Mon Apr 06 17:02:15.783811 2026] [:error] [pid 35687:tid 35736] [client 4.231.218.60:55628] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "adN2l53LtDozV0i8Bis7xAAAAE0"]
[Mon Apr 06 17:02:15.919994 2026] [:error] [pid 35687:tid 35738] [client 4.231.218.60:59275] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "adN2l53LtDozV0i8Bis7xwAAAE8"]
[Mon Apr 06 17:02:16.784942 2026] [:error] [pid 38562:tid 38589] [client 4.231.218.60:36680] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "adN2mKeD6Ohe6wzRuy4zygAAAVg"]
[Mon Apr 06 17:02:16.885318 2026] [:error] [pid 38562:tid 38582] [client 4.231.218.60:40465] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "adN2mKeD6Ohe6wzRuy4zzAAAAVE"]
[Mon Apr 06 17:02:17.611157 2026] [:error] [pid 38562:tid 38573] [client 4.231.218.60:36699] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "adN2maeD6Ohe6wzRuy4z1AAAAUg"]
[Mon Apr 06 17:02:17.926784 2026] [:error] [pid 35686:tid 35702] [client 4.231.218.60:44522] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "adN2mcMKdea6oORd2fyEewAAAAY"]
[Mon Apr 06 17:02:18.823878 2026] [:error] [pid 10280:tid 10297] [client 4.231.218.60:47740] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "adN2ml8QUJkf8g-BFfOZYQAAAc4"]
[Mon Apr 06 17:02:19.587116 2026] [:error] [pid 35686:tid 35715] [client 4.231.218.60:48813] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "adN2m8MKdea6oORd2fyEgAAAABM"]
[Mon Apr 06 17:02:20.077762 2026] [:error] [pid 10280:tid 10306] [client 4.231.218.60:38927] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "adN2nF8QUJkf8g-BFfOZZQAAAdc"]
[Mon Apr 06 17:02:20.725212 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:58006] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "adN2nMMKdea6oORd2fyEhwAAABQ"]
[Mon Apr 06 17:02:21.024853 2026] [:error] [pid 9413:tid 9436] [client 4.231.218.60:54777] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "adN2nXllvEK3chn01wGhTgAAAZU"]
[Mon Apr 06 17:02:21.655998 2026] [:error] [pid 35688:tid 35772] [client 4.231.218.60:44541] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "adN2neZ85qg4jLsRpQxMigAAAJY"]
[Mon Apr 06 17:02:21.899689 2026] [:error] [pid 38562:tid 38587] [client 4.231.218.60:54733] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "adN2naeD6Ohe6wzRuy4z4QAAAVY"]
[Mon Apr 06 17:02:22.676071 2026] [:error] [pid 10280:tid 10285] [client 4.231.218.60:44495] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "adN2nl8QUJkf8g-BFfOZbQAAAcI"]
[Mon Apr 06 17:02:23.303280 2026] [:error] [pid 35686:tid 35708] [client 4.231.218.60:49359] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "adN2n8MKdea6oORd2fyEkQAAAAw"]
[Mon Apr 06 17:02:23.765147 2026] [:error] [pid 35686:tid 35715] [client 4.231.218.60:47698] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "adN2n8MKdea6oORd2fyElAAAABM"]
[Mon Apr 06 17:02:23.997637 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:40497] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "adN2n8MKdea6oORd2fyElgAAABc"]
[Mon Apr 06 17:02:24.403007 2026] [:error] [pid 10280:tid 10295] [client 4.231.218.60:59271] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "adN2oF8QUJkf8g-BFfOZcQAAAcw"]
[Mon Apr 06 17:02:24.814260 2026] [:error] [pid 9442:tid 9457] [client 4.231.218.60:47695] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "adN2oEPsNnAJTnmz6sZjHgAAAQ0"]
[Mon Apr 06 17:02:25.564245 2026] [:error] [pid 38562:tid 38576] [client 4.231.218.60:49351] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "adN2oaeD6Ohe6wzRuy4z7QAAAUs"]
[Mon Apr 06 17:02:26.105032 2026] [:error] [pid 38562:tid 38573] [client 4.231.218.60:4626] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "adN2oqeD6Ohe6wzRuy4z8AAAAUg"]
[Mon Apr 06 17:02:26.297529 2026] [:error] [pid 38562:tid 38583] [client 4.231.218.60:37900] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "adN2oqeD6Ohe6wzRuy4z8QAAAVI"]
[Mon Apr 06 17:02:26.793055 2026] [:error] [pid 35687:tid 35734] [client 4.231.218.60:49366] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "adN2op3LtDozV0i8Bis70QAAAEs"]
[Mon Apr 06 17:02:27.490719 2026] [:error] [pid 10280:tid 10283] [client 4.231.218.60:49388] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "adN2o18QUJkf8g-BFfOZeQAAAcA"]
[Mon Apr 06 17:02:27.805277 2026] [:error] [pid 35687:tid 35746] [client 4.231.218.60:65494] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "adN2o53LtDozV0i8Bis71gAAAFc"]
[Mon Apr 06 17:02:28.414198 2026] [:error] [pid 38562:tid 38575] [client 4.231.218.60:39248] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "adN2pKeD6Ohe6wzRuy4z9AAAAUo"]
[Mon Apr 06 17:02:29.112324 2026] [:error] [pid 35686:tid 35709] [client 4.231.218.60:49355] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "adN2pcMKdea6oORd2fyEqAAAAA0"]
[Mon Apr 06 17:02:29.119553 2026] [:error] [pid 35686:tid 35699] [client 4.231.218.60:4196] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "adN2pcMKdea6oORd2fyEqQAAAAM"]
[Mon Apr 06 17:02:30.341205 2026] [:error] [pid 10280:tid 10303] [client 4.231.218.60:44511] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file31.php"] [unique_id "adN2pl8QUJkf8g-BFfOZgQAAAdQ"]
[Mon Apr 06 17:02:31.609452 2026] [:error] [pid 35686:tid 35713] [client 4.231.218.60:52848] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "adN2p8MKdea6oORd2fyEtwAAABE"]
[Mon Apr 06 17:02:31.789250 2026] [:error] [pid 35686:tid 35712] [client 4.231.218.60:32086] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "adN2p8MKdea6oORd2fyEugAAABA"]
[Mon Apr 06 17:02:32.578725 2026] [:error] [pid 38562:tid 38582] [client 4.231.218.60:36715] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "adN2qKeD6Ohe6wzRuy4z-wAAAVE"]
[Mon Apr 06 17:02:33.907897 2026] [:error] [pid 38562:tid 38576] [client 4.231.218.60:52853] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "adN2qaeD6Ohe6wzRuy40AwAAAUs"]
[Mon Apr 06 17:02:34.817151 2026] [:error] [pid 38562:tid 38569] [client 4.231.218.60:52858] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "adN2qqeD6Ohe6wzRuy40BAAAAUQ"]
[Mon Apr 06 17:02:35.026871 2026] [:error] [pid 9413:tid 9434] [client 4.231.218.60:32522] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "adN2q3llvEK3chn01wGhVQAAAZM"]
[Mon Apr 06 17:02:36.413042 2026] [:error] [pid 38562:tid 38583] [client 4.231.218.60:4544] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "adN2rKeD6Ohe6wzRuy40CQAAAVI"]
[Mon Apr 06 17:02:36.422509 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:4200] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/control.php"] [unique_id "adN2rMMKdea6oORd2fyExwAAAAs"]
[Mon Apr 06 17:02:37.828321 2026] [:error] [pid 9413:tid 9419] [client 4.231.218.60:39258] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/control.php"] [unique_id "adN2rXllvEK3chn01wGhWQAAAYQ"]
[Mon Apr 06 17:02:38.208375 2026] [:error] [pid 35687:tid 35723] [client 4.231.218.60:4573] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "adN2rp3LtDozV0i8Bis73gAAAEA"]
[Mon Apr 06 17:02:41.462824 2026] [:error] [pid 38562:tid 38576] [client 4.231.218.60:56211] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/control.php"] [unique_id "adN2saeD6Ohe6wzRuy40GAAAAUs"]
[Mon Apr 06 17:02:42.025319 2026] [:error] [pid 35686:tid 35713] [client 4.231.218.60:59332] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/control.php"] [unique_id "adN2ssMKdea6oORd2fyEzwAAABE"]
[Mon Apr 06 17:02:44.085130 2026] [:error] [pid 35688:tid 35764] [client 4.231.218.60:32060] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/control.php"] [unique_id "adN2tOZ85qg4jLsRpQxMjQAAAI4"]
[Mon Apr 06 17:02:48.629771 2026] [:error] [pid 35686:tid 35711] [client 4.231.218.60:32559] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/control.php"] [unique_id "adN2uMMKdea6oORd2fyE_AAAAA8"]
[Mon Apr 06 17:02:48.725683 2026] [:error] [pid 10280:tid 10296] [client 4.231.218.60:34702] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1111.php"] [unique_id "adN2uF8QUJkf8g-BFfOZoAAAAc0"]
[Mon Apr 06 17:02:50.373607 2026] [:error] [pid 35686:tid 35717] [client 4.231.218.60:34690] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/control.php"] [unique_id "adN2usMKdea6oORd2fyFAgAAABU"]
[Mon Apr 06 17:02:52.641497 2026] [:error] [pid 35686:tid 35701] [client 4.231.218.60:61133] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1111.php"] [unique_id "adN2vMMKdea6oORd2fyFEwAAAAU"]
[Mon Apr 06 17:02:53.952851 2026] [:error] [pid 9442:tid 9452] [client 4.231.218.60:57467] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1111.php"] [unique_id "adN2vUPsNnAJTnmz6sZjMgAAAQg"]
[Mon Apr 06 17:02:54.307141 2026] [:error] [pid 35688:tid 35763] [client 4.231.218.60:30519] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1111.php"] [unique_id "adN2vuZ85qg4jLsRpQxMkAAAAI0"]
[Mon Apr 06 17:02:55.302884 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:32048] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1111.php"] [unique_id "adN2v8MKdea6oORd2fyFIAAAABc"]
[Mon Apr 06 17:02:55.805113 2026] [:error] [pid 35686:tid 35702] [client 4.231.218.60:28028] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1111.php"] [unique_id "adN2v8MKdea6oORd2fyFJQAAAAY"]
[Mon Apr 06 17:02:56.081818 2026] [:error] [pid 35686:tid 35712] [client 4.231.218.60:52808] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1111.php"] [unique_id "adN2wMMKdea6oORd2fyFKQAAABA"]
[Mon Apr 06 17:02:57.001719 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:28019] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adN2wcMKdea6oORd2fyFLAAAAAs"]
[Mon Apr 06 17:02:57.273828 2026] [:error] [pid 35686:tid 35698] [client 4.231.218.60:45423] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1111.php"] [unique_id "adN2wcMKdea6oORd2fyFLgAAAAI"]
[Mon Apr 06 17:02:57.845440 2026] [:error] [pid 35686:tid 35702] [client 4.231.218.60:56221] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adN2wcMKdea6oORd2fyFMwAAAAY"]
[Mon Apr 06 17:02:58.815225 2026] [:error] [pid 10280:tid 10297] [client 4.231.218.60:30505] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adN2wl8QUJkf8g-BFfOZygAAAc4"]
[Mon Apr 06 17:02:59.184808 2026] [:error] [pid 35686:tid 35709] [client 4.231.218.60:34698] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adN2w8MKdea6oORd2fyFPgAAAA0"]
[Mon Apr 06 17:02:59.517809 2026] [:error] [pid 10280:tid 10285] [client 4.231.218.60:61718] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adN2w18QUJkf8g-BFfOZzAAAAcI"]
[Mon Apr 06 17:03:00.236178 2026] [:error] [pid 38562:tid 38584] [client 4.231.218.60:32532] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adN2xKeD6Ohe6wzRuy40agAAAVM"]
[Mon Apr 06 17:03:00.267675 2026] [:error] [pid 38562:tid 38567] [client 4.231.218.60:45388] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adN2xKeD6Ohe6wzRuy40awAAAUI"]
[Mon Apr 06 17:03:00.965309 2026] [:error] [pid 10280:tid 10304] [client 4.231.218.60:57425] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adN2xF8QUJkf8g-BFfOZzgAAAdU"]
[Mon Apr 06 17:03:01.085100 2026] [:error] [pid 10280:tid 10306] [client 4.231.218.60:30525] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "adN2xV8QUJkf8g-BFfOZ0AAAAdc"]
[Mon Apr 06 17:03:01.655524 2026] [:error] [pid 38562:tid 38578] [client 4.231.218.60:30488] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "adN2xaeD6Ohe6wzRuy40cgAAAU0"]
[Mon Apr 06 17:03:01.777382 2026] [:error] [pid 38562:tid 38572] [client 4.231.218.60:45386] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "adN2xaeD6Ohe6wzRuy40cwAAAUc"]
[Mon Apr 06 17:03:02.433974 2026] [:error] [pid 38562:tid 38588] [client 4.231.218.60:30467] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "adN2xqeD6Ohe6wzRuy40egAAAVc"]
[Mon Apr 06 17:03:02.537566 2026] [:error] [pid 38562:tid 38582] [client 4.231.218.60:28006] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "adN2xqeD6Ohe6wzRuy40ewAAAVE"]
[Mon Apr 06 17:03:03.211694 2026] [:error] [pid 35686:tid 35698] [client 4.231.218.60:30490] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "adN2x8MKdea6oORd2fyFSAAAAAI"]
[Mon Apr 06 17:03:03.256083 2026] [:error] [pid 38562:tid 38581] [client 4.231.218.60:52844] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "adN2x6eD6Ohe6wzRuy40gwAAAVA"]
[Mon Apr 06 17:03:03.953250 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:30503] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "adN2x8MKdea6oORd2fyFSgAAAAs"]
[Mon Apr 06 17:03:04.172200 2026] [:error] [pid 35687:tid 35726] [client 4.231.218.60:30472] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adN2yJ3LtDozV0i8Bis77AAAAEM"]
[Mon Apr 06 17:03:04.677844 2026] [:error] [pid 35688:tid 35770] [client 4.231.218.60:52815] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adN2yOZ85qg4jLsRpQxMlQAAAJQ"]
[Mon Apr 06 17:03:04.932277 2026] [:error] [pid 38562:tid 38576] [client 4.231.218.60:56223] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adN2yKeD6Ohe6wzRuy40jgAAAUs"]
[Mon Apr 06 17:03:05.434928 2026] [:error] [pid 9442:tid 9468] [client 4.231.218.60:34748] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adN2yUPsNnAJTnmz6sZjNwAAARg"]
[Mon Apr 06 17:03:05.672427 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:28018] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adN2ycMKdea6oORd2fyFTAAAABQ"]
[Mon Apr 06 17:03:06.502654 2026] [:error] [pid 35688:tid 35771] [client 4.231.218.60:34744] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adN2yuZ85qg4jLsRpQxMlwAAAJU"]
[Mon Apr 06 17:03:06.821794 2026] [:error] [pid 35786:tid 35798] [client 4.231.218.60:34699] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adN2ymgkfCKTaLhwaKT_WQAAAMU"]
[Mon Apr 06 17:03:12.868222 2026] [:error] [pid 35686:tid 35702] [client 4.231.218.60:57452] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adN20MMKdea6oORd2fyFfwAAAAY"]
[Mon Apr 06 17:03:13.150207 2026] [:error] [pid 35786:tid 35797] [client 4.231.218.60:61710] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adN20WgkfCKTaLhwaKT_aQAAAMQ"]
[Mon Apr 06 17:03:14.281095 2026] [:error] [pid 38562:tid 38584] [client 4.231.218.60:64912] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adN20qeD6Ohe6wzRuy40mwAAAVM"]
[Mon Apr 06 17:03:14.382704 2026] [:error] [pid 38562:tid 38575] [client 4.231.218.60:38881] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adN20qeD6Ohe6wzRuy40nQAAAUo"]
[Mon Apr 06 17:03:15.114047 2026] [:error] [pid 10280:tid 10295] [client 4.231.218.60:34728] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adN2018QUJkf8g-BFfOZ8wAAAcw"]
[Mon Apr 06 17:03:15.726463 2026] [:error] [pid 10280:tid 10284] [client 4.231.218.60:32063] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adN2018QUJkf8g-BFfOZ9AAAAcE"]
[Mon Apr 06 17:03:16.128442 2026] [:error] [pid 35686:tid 35714] [client 4.231.218.60:32051] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adN21MMKdea6oORd2fyFjwAAABI"]
[Mon Apr 06 17:03:17.009656 2026] [:error] [pid 35688:tid 35769] [client 4.231.218.60:30483] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adN21eZ85qg4jLsRpQxMogAAAJM"]
[Mon Apr 06 17:03:17.440925 2026] [:error] [pid 35686:tid 35710] [client 4.231.218.60:61716] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adN21cMKdea6oORd2fyFlQAAAA4"]
[Mon Apr 06 17:03:18.066345 2026] [:error] [pid 38562:tid 38588] [client 4.231.218.60:32032] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adN21qeD6Ohe6wzRuy40pQAAAVc"]
[Mon Apr 06 17:03:18.410031 2026] [:error] [pid 10280:tid 10288] [client 4.231.218.60:65474] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/read.php"] [unique_id "adN21l8QUJkf8g-BFfOZ_AAAAcU"]
[Mon Apr 06 17:03:18.754305 2026] [:error] [pid 35687:tid 35725] [client 4.231.218.60:28002] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adN21p3LtDozV0i8Bis8AAAAAEI"]
[Mon Apr 06 17:03:19.481752 2026] [:error] [pid 35786:tid 35800] [client 4.231.218.60:28000] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/read.php"] [unique_id "adN212gkfCKTaLhwaKT_bQAAAMc"]
[Mon Apr 06 17:03:19.698299 2026] [:error] [pid 35786:tid 35810] [client 4.231.218.60:61111] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adN212gkfCKTaLhwaKT_bgAAANE"]
[Mon Apr 06 17:03:20.360423 2026] [:error] [pid 38562:tid 38579] [client 4.231.218.60:56202] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/read.php"] [unique_id "adN22KeD6Ohe6wzRuy40qgAAAU4"]
[Mon Apr 06 17:03:20.908648 2026] [:error] [pid 38562:tid 38582] [client 4.231.218.60:61071] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adN22KeD6Ohe6wzRuy40rAAAAVE"]
[Mon Apr 06 17:03:21.382142 2026] [:error] [pid 10280:tid 10301] [client 4.231.218.60:32004] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adN22V8QUJkf8g-BFfOaBQAAAdI"]
[Mon Apr 06 17:03:21.704645 2026] [:error] [pid 38562:tid 38572] [client 4.231.218.60:45399] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adN22aeD6Ohe6wzRuy40rgAAAUc"]
[Mon Apr 06 17:03:22.298666 2026] [:error] [pid 9442:tid 9459] [client 4.231.218.60:56279] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adN22kPsNnAJTnmz6sZjPwAAAQ8"]
[Mon Apr 06 17:03:22.713427 2026] [:error] [pid 38562:tid 38585] [client 4.231.218.60:38858] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adN22qeD6Ohe6wzRuy40sgAAAVQ"]
[Mon Apr 06 17:03:23.210630 2026] [:error] [pid 35687:tid 35744] [client 4.231.218.60:30468] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adN2253LtDozV0i8Bis8CAAAAFU"]
[Mon Apr 06 17:03:23.338342 2026] [:error] [pid 38562:tid 38571] [client 4.231.218.60:30522] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adN226eD6Ohe6wzRuy40swAAAUY"]
[Mon Apr 06 17:03:23.967762 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:32052] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adN228MKdea6oORd2fyFmQAAABQ"]
[Mon Apr 06 17:03:24.632498 2026] [:error] [pid 10280:tid 10289] [client 4.231.218.60:61754] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/read.php"] [unique_id "adN23F8QUJkf8g-BFfOaFAAAAcY"]
[Mon Apr 06 17:03:24.656524 2026] [:error] [pid 35786:tid 35794] [client 4.231.218.60:31614] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adN23GgkfCKTaLhwaKT_dgAAAME"]
[Mon Apr 06 17:03:25.338943 2026] [:error] [pid 35687:tid 35733] [client 4.231.218.60:56197] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adN23Z3LtDozV0i8Bis8DQAAAEo"]
[Mon Apr 06 17:03:25.966023 2026] [:error] [pid 35686:tid 35704] [client 4.231.218.60:30518] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/read.php"] [unique_id "adN23cMKdea6oORd2fyFngAAAAg"]
[Mon Apr 06 17:03:26.205339 2026] [:error] [pid 35686:tid 35696] [client 4.231.218.60:32044] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adN23sMKdea6oORd2fyFnwAAAAA"]
[Mon Apr 06 17:03:26.793565 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:31562] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/read.php"] [unique_id "adN23sMKdea6oORd2fyFqQAAABc"]
[Mon Apr 06 17:03:27.102245 2026] [:error] [pid 10280:tid 10292] [client 4.231.218.60:34715] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adN2318QUJkf8g-BFfOaGwAAAck"]
[Mon Apr 06 17:03:27.465198 2026] [:error] [pid 10280:tid 10303] [client 4.231.218.60:38897] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/read.php"] [unique_id "adN2318QUJkf8g-BFfOaHQAAAdQ"]
[Mon Apr 06 17:03:27.935726 2026] [:error] [pid 10280:tid 10290] [client 4.231.218.60:54110] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adN2318QUJkf8g-BFfOaIgAAAcc"]
[Mon Apr 06 17:03:28.067153 2026] [:error] [pid 35688:tid 35772] [client 4.231.218.60:34713] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adN24OZ85qg4jLsRpQxMpgAAAJY"]
[Mon Apr 06 17:03:28.676416 2026] [:error] [pid 38562:tid 38576] [client 4.231.218.60:31605] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adN24KeD6Ohe6wzRuy40ugAAAUs"]
[Mon Apr 06 17:03:28.931950 2026] [:error] [pid 9413:tid 9416] [client 4.231.218.60:61087] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adN24HllvEK3chn01wGhdgAAAYE"]
[Mon Apr 06 17:03:29.357725 2026] [:error] [pid 35687:tid 35730] [client 4.231.218.60:38864] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adN24Z3LtDozV0i8Bis8EwAAAEc"]
[Mon Apr 06 17:03:29.765293 2026] [:error] [pid 35786:tid 35814] [client 4.231.218.60:34693] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adN24WgkfCKTaLhwaKT_gQAAANU"]
[Mon Apr 06 17:03:29.995055 2026] [:error] [pid 38562:tid 38581] [client 4.231.218.60:38881] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adN24aeD6Ohe6wzRuy40vQAAAVA"]
[Mon Apr 06 17:03:30.401382 2026] [:error] [pid 38562:tid 38570] [client 4.231.218.60:45428] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adN24qeD6Ohe6wzRuy40wQAAAUU"]
[Mon Apr 06 17:03:30.902509 2026] [:error] [pid 38562:tid 38574] [client 4.231.218.60:57454] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adN24qeD6Ohe6wzRuy40xwAAAUk"]
[Mon Apr 06 17:03:31.358610 2026] [:error] [pid 35686:tid 35697] [client 4.231.218.60:27992] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adN248MKdea6oORd2fyFqwAAAAE"]
[Mon Apr 06 17:03:31.661026 2026] [:error] [pid 35686:tid 35711] [client 4.231.218.60:64902] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adN248MKdea6oORd2fyFrQAAAA8"]
[Mon Apr 06 17:03:32.254723 2026] [:error] [pid 38562:tid 38571] [client 4.231.218.60:54139] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adN25KeD6Ohe6wzRuy40ywAAAUY"]
[Mon Apr 06 17:03:32.716276 2026] [:error] [pid 35686:tid 35710] [client 4.231.218.60:45409] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adN25MMKdea6oORd2fyFrgAAAA4"]
[Mon Apr 06 17:03:34.524286 2026] [:error] [pid 10280:tid 10288] [client 4.231.218.60:54122] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adN25l8QUJkf8g-BFfOaNAAAAcU"]
[Mon Apr 06 17:03:34.955581 2026] [:error] [pid 9442:tid 9447] [client 4.231.218.60:32029] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adN25kPsNnAJTnmz6sZjRwAAAQM"]
[Mon Apr 06 17:03:35.835928 2026] [:error] [pid 9442:tid 9456] [client 4.231.218.60:34688] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mter.php"] [unique_id "adN250PsNnAJTnmz6sZjSQAAAQw"]
[Mon Apr 06 17:03:36.221538 2026] [:error] [pid 38562:tid 38575] [client 4.231.218.60:57468] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adN26KeD6Ohe6wzRuy401AAAAUo"]
[Mon Apr 06 17:03:37.514408 2026] [:error] [pid 38562:tid 38569] [client 4.231.218.60:48143] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mter.php"] [unique_id "adN26aeD6Ohe6wzRuy402QAAAUQ"]
[Mon Apr 06 17:03:37.748519 2026] [:error] [pid 9442:tid 9459] [client 4.231.218.60:54106] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adN26UPsNnAJTnmz6sZjSwAAAQ8"]
[Mon Apr 06 17:03:39.012666 2026] [:error] [pid 9442:tid 9452] [client 4.231.218.60:64906] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adN260PsNnAJTnmz6sZjTAAAAQg"]
[Mon Apr 06 17:03:40.073190 2026] [:error] [pid 10280:tid 10302] [client 4.231.218.60:48176] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mter.php"] [unique_id "adN27F8QUJkf8g-BFfOaRAAAAdM"]
[Mon Apr 06 17:03:40.355188 2026] [:error] [pid 35686:tid 35715] [client 4.231.218.60:64911] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adN27MMKdea6oORd2fyF0AAAABM"]
[Mon Apr 06 17:03:41.965387 2026] [:error] [pid 38562:tid 38588] [client 4.231.218.60:38849] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adN27aeD6Ohe6wzRuy405AAAAVc"]
[Mon Apr 06 17:03:43.940621 2026] [:error] [pid 35686:tid 35697] [client 4.231.218.60:58074] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adN278MKdea6oORd2fyF3AAAAAE"]
[Mon Apr 06 17:03:44.913579 2026] [:error] [pid 35688:tid 35750] [client 4.231.218.60:38899] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adN28OZ85qg4jLsRpQxMqwAAAIA"]
[Mon Apr 06 17:03:48.214002 2026] [:error] [pid 35686:tid 35712] [client 4.231.218.60:61104] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mter.php"] [unique_id "adN29MMKdea6oORd2fyF5AAAABA"]
[Mon Apr 06 17:03:48.576726 2026] [:error] [pid 35686:tid 35699] [client 4.231.218.60:58050] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adN29MMKdea6oORd2fyF6AAAAAM"]
[Mon Apr 06 17:03:49.443510 2026] [:error] [pid 9442:tid 9458] [client 4.231.218.60:57426] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adN29UPsNnAJTnmz6sZjYQAAAQ4"]
[Mon Apr 06 17:03:50.914485 2026] [:error] [pid 35687:tid 35746] [client 4.231.218.60:56291] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adN29p3LtDozV0i8Bis8KAAAAFc"]
[Mon Apr 06 17:03:52.433543 2026] [:error] [pid 35687:tid 35740] [client 4.231.218.60:48158] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adN2-J3LtDozV0i8Bis8KwAAAFE"]
[Mon Apr 06 17:03:52.715833 2026] [:error] [pid 35686:tid 35718] [client 4.231.218.60:56268] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adN2-MMKdea6oORd2fyGBgAAABY"]
[Mon Apr 06 17:03:53.522896 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:61721] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mter.php"] [unique_id "adN2-cMKdea6oORd2fyGCwAAABc"]
[Mon Apr 06 17:03:53.979459 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:61742] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adN2-cMKdea6oORd2fyGEAAAAAs"]
[Mon Apr 06 17:03:55.236622 2026] [:error] [pid 10280:tid 10285] [client 4.231.218.60:61135] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mter.php"] [unique_id "adN2-18QUJkf8g-BFfOaZwAAAcI"]
[Mon Apr 06 17:03:55.298278 2026] [:error] [pid 10280:tid 10287] [client 4.231.218.60:35762] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "adN2-18QUJkf8g-BFfOaaAAAAcQ"]
[Mon Apr 06 17:03:56.148567 2026] [:error] [pid 38562:tid 38566] [client 4.231.218.60:46898] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mter.php"] [unique_id "adN2_KeD6Ohe6wzRuy40-AAAAUE"]
[Mon Apr 06 17:03:56.609531 2026] [:error] [pid 35686:tid 35697] [client 4.231.218.60:56289] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "adN2_MMKdea6oORd2fyGHgAAAAE"]
[Mon Apr 06 17:03:57.244503 2026] [:error] [pid 9442:tid 9447] [client 4.231.218.60:61735] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-mter.php"] [unique_id "adN2_UPsNnAJTnmz6sZjaQAAAQM"]
[Mon Apr 06 17:03:57.529857 2026] [:error] [pid 35786:tid 35817] [client 4.231.218.60:48181] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "adN2_WgkfCKTaLhwaKT_iwAAANg"]
[Mon Apr 06 17:03:58.329752 2026] [:error] [pid 38562:tid 38581] [client 4.231.218.60:56306] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adN2_qeD6Ohe6wzRuy41AgAAAVA"]
[Mon Apr 06 17:03:58.573294 2026] [:error] [pid 9442:tid 9444] [client 4.231.218.60:33983] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "adN2_kPsNnAJTnmz6sZjagAAAQA"]
[Mon Apr 06 17:03:59.062415 2026] [:error] [pid 9442:tid 9451] [client 4.231.218.60:54087] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adN2_0PsNnAJTnmz6sZjawAAAQc"]
[Mon Apr 06 17:03:59.393924 2026] [:error] [pid 9413:tid 9424] [client 4.231.218.60:48131] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adN2_3llvEK3chn01wGhhwAAAYk"]
[Mon Apr 06 17:03:59.908231 2026] [:error] [pid 38562:tid 38572] [client 4.231.218.60:51092] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adN2_6eD6Ohe6wzRuy41BQAAAUc"]
[Mon Apr 06 17:04:00.221493 2026] [:error] [pid 35686:tid 35717] [client 4.231.218.60:31092] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adN3AMMKdea6oORd2fyGLgAAABU"]
[Mon Apr 06 17:04:00.478133 2026] [:error] [pid 9442:tid 9467] [client 4.231.218.60:57381] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adN3AEPsNnAJTnmz6sZjbQAAARc"]
[Mon Apr 06 17:04:01.172761 2026] [:error] [pid 10280:tid 10283] [client 4.231.218.60:51112] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "adN3AV8QUJkf8g-BFfOacAAAAcA"]
[Mon Apr 06 17:04:01.214232 2026] [:error] [pid 38562:tid 38579] [client 4.231.218.60:56310] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adN3AaeD6Ohe6wzRuy41CQAAAU4"]
[Mon Apr 06 17:04:01.930139 2026] [:error] [pid 35687:tid 35743] [client 4.231.218.60:46872] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "adN3AZ3LtDozV0i8Bis8MwAAAFQ"]
[Mon Apr 06 17:04:02.200706 2026] [:error] [pid 10280:tid 10295] [client 4.231.218.60:31094] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adN3Al8QUJkf8g-BFfOacwAAAcw"]
[Mon Apr 06 17:04:02.804589 2026] [:error] [pid 10280:tid 10301] [client 4.231.218.60:33938] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "adN3Al8QUJkf8g-BFfOaeAAAAdI"]
[Mon Apr 06 17:04:02.912596 2026] [:error] [pid 10280:tid 10307] [client 4.231.218.60:48180] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adN3Al8QUJkf8g-BFfOaegAAAdg"]
[Mon Apr 06 17:04:03.422461 2026] [:error] [pid 35688:tid 35761] [client 4.231.218.60:46890] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/19.php"] [unique_id "adN3A-Z85qg4jLsRpQxMtQAAAIs"]
[Mon Apr 06 17:04:03.551992 2026] [:error] [pid 9413:tid 9439] [client 4.231.218.60:31065] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adN3A3llvEK3chn01wGhigAAAZg"]
[Mon Apr 06 17:04:04.117441 2026] [:error] [pid 9442:tid 9450] [client 4.231.218.60:33944] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adN3BEPsNnAJTnmz6sZjcgAAAQY"]
[Mon Apr 06 17:04:04.349076 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:54109] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adN3BMMKdea6oORd2fyGPAAAAAs"]
[Mon Apr 06 17:04:05.000866 2026] [:error] [pid 10280:tid 10291] [client 4.231.218.60:34373] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adN3BF8QUJkf8g-BFfOaggAAAcg"]
[Mon Apr 06 17:04:05.347014 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:58076] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adN3BcMKdea6oORd2fyGQgAAABQ"]
[Mon Apr 06 17:04:05.970024 2026] [:error] [pid 35688:tid 35765] [client 4.231.218.60:61090] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adN3BeZ85qg4jLsRpQxMtgAAAI8"]
[Mon Apr 06 17:04:06.374612 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:34368] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adN3BsMKdea6oORd2fyGSQAAABc"]
[Mon Apr 06 17:04:06.881533 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:35748] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adN3BsMKdea6oORd2fyGSwAAABQ"]
[Mon Apr 06 17:04:07.032235 2026] [:error] [pid 10280:tid 10292] [client 4.231.218.60:34414] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adN3B18QUJkf8g-BFfOaiAAAAck"]
[Mon Apr 06 17:04:07.535471 2026] [:error] [pid 35687:tid 35748] [client 4.231.218.60:34375] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adN3B53LtDozV0i8Bis8NQAAAFg"]
[Mon Apr 06 17:04:08.458555 2026] [:error] [pid 35687:tid 35726] [client 4.231.218.60:56304] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adN3CJ3LtDozV0i8Bis8OQAAAEM"]
[Mon Apr 06 17:04:09.247000 2026] [:error] [pid 10280:tid 10300] [client 4.231.218.60:46887] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adN3CV8QUJkf8g-BFfOajQAAAdE"]
[Mon Apr 06 17:04:09.445887 2026] [:error] [pid 10280:tid 10291] [client 4.231.218.60:58052] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adN3CV8QUJkf8g-BFfOajwAAAcg"]
[Mon Apr 06 17:04:09.964315 2026] [:error] [pid 35688:tid 35754] [client 4.231.218.60:34419] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adN3CeZ85qg4jLsRpQxMugAAAIQ"]
[Mon Apr 06 17:04:10.621381 2026] [:error] [pid 38562:tid 38566] [client 4.231.218.60:51708] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adN3CqeD6Ohe6wzRuy41EwAAAUE"]
[Mon Apr 06 17:04:10.945683 2026] [:error] [pid 35686:tid 35700] [client 4.231.218.60:57358] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adN3CsMKdea6oORd2fyGVQAAAAQ"]
[Mon Apr 06 17:04:11.545058 2026] [:error] [pid 35686:tid 35711] [client 4.231.218.60:33981] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adN3C8MKdea6oORd2fyGWwAAAA8"]
[Mon Apr 06 17:04:11.927053 2026] [:error] [pid 35687:tid 35739] [client 4.231.218.60:4858] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adN3C53LtDozV0i8Bis8PQAAAFA"]
[Mon Apr 06 17:04:16.961545 2026] [:error] [pid 35686:tid 35704] [client 4.231.218.60:56273] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swallowable.php"] [unique_id "adN3EMMKdea6oORd2fyGdgAAAAg"]
[Mon Apr 06 17:04:17.072253 2026] [:error] [pid 35786:tid 35814] [client 4.231.218.60:58105] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adN3EWgkfCKTaLhwaKT_pAAAANU"]
[Mon Apr 06 17:04:18.497864 2026] [:error] [pid 35687:tid 35738] [client 4.231.218.60:43512] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adN3Ep3LtDozV0i8Bis8SwAAAE8"]
[Mon Apr 06 17:04:18.700577 2026] [:error] [pid 38562:tid 38574] [client 4.231.218.60:43515] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swallowable.php"] [unique_id "adN3EqeD6Ohe6wzRuy41MAAAAUk"]
[Mon Apr 06 17:04:19.458168 2026] [:error] [pid 35687:tid 35730] [client 4.231.218.60:43479] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adN3E53LtDozV0i8Bis8UAAAAEc"]
[Mon Apr 06 17:04:23.361015 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:46904] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adN3F8MKdea6oORd2fyGjwAAABc"]
[Mon Apr 06 17:04:24.024798 2026] [:error] [pid 9413:tid 9431] [client 4.231.218.60:4302] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swallowable.php"] [unique_id "adN3GHllvEK3chn01wGhlQAAAZA"]
[Mon Apr 06 17:04:27.285632 2026] [:error] [pid 9413:tid 9421] [client 4.231.218.60:51663] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adN3G3llvEK3chn01wGhmAAAAYY"]
[Mon Apr 06 17:04:31.282168 2026] [:error] [pid 9442:tid 9444] [client 4.231.218.60:42975] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/swallowable.php"] [unique_id "adN3H0PsNnAJTnmz6sZjkQAAAQA"]
[Mon Apr 06 17:04:31.443143 2026] [:error] [pid 9442:tid 9452] [client 4.231.218.60:45477] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adN3H0PsNnAJTnmz6sZjkwAAAQg"]
[Mon Apr 06 17:04:32.627584 2026] [:error] [pid 9442:tid 9453] [client 4.231.218.60:42988] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adN3IEPsNnAJTnmz6sZjmAAAAQk"]
[Mon Apr 06 17:04:34.275120 2026] [:error] [pid 35687:tid 35738] [client 4.231.218.60:54061] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adN3Ip3LtDozV0i8Bis8ZAAAAE8"]
[Mon Apr 06 17:04:34.611842 2026] [:error] [pid 9442:tid 9447] [client 4.231.218.60:54045] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adN3IkPsNnAJTnmz6sZjnAAAAQM"]
[Mon Apr 06 17:04:34.922629 2026] [:error] [pid 35687:tid 35740] [client 4.231.218.60:48193] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adN3Ip3LtDozV0i8Bis8ZgAAAFE"]
[Mon Apr 06 17:04:35.673807 2026] [:error] [pid 35688:tid 35750] [client 4.231.218.60:34321] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adN3I-Z85qg4jLsRpQxMxQAAAIA"]
[Mon Apr 06 17:04:36.536441 2026] [:error] [pid 35688:tid 35764] [client 4.231.218.60:39313] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adN3JOZ85qg4jLsRpQxMyAAAAI4"]
[Mon Apr 06 17:04:37.133317 2026] [:error] [pid 35686:tid 35710] [client 4.231.218.60:4299] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adN3JcMKdea6oORd2fyGtQAAAA4"]
[Mon Apr 06 17:04:37.568793 2026] [:error] [pid 10280:tid 10300] [client 4.231.218.60:41479] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adN3JV8QUJkf8g-BFfOaxwAAAdE"]
[Mon Apr 06 17:04:37.942143 2026] [:error] [pid 38562:tid 38581] [client 4.231.218.60:45475] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adN3JaeD6Ohe6wzRuy41SwAAAVA"]
[Mon Apr 06 17:04:38.741766 2026] [:error] [pid 35686:tid 35713] [client 4.231.218.60:4293] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adN3JsMKdea6oORd2fyG7gAAABE"]
[Mon Apr 06 17:04:38.928534 2026] [:error] [pid 35686:tid 35714] [client 4.231.218.60:45880] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adN3JsMKdea6oORd2fyG-QAAABI"]
[Mon Apr 06 17:04:39.685404 2026] [:error] [pid 9442:tid 9447] [client 4.231.218.60:4313] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3J0PsNnAJTnmz6sZjuwAAAQM"]
[Mon Apr 06 17:04:41.043542 2026] [:error] [pid 10280:tid 10285] [client 4.231.218.60:40965] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3KV8QUJkf8g-BFfObBwAAAcI"]
[Mon Apr 06 17:04:41.937338 2026] [:error] [pid 10280:tid 10301] [client 4.231.218.60:4351] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adN3KV8QUJkf8g-BFfObEwAAAdI"]
[Mon Apr 06 17:04:43.505773 2026] [:error] [pid 38562:tid 38587] [client 4.231.218.60:39351] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adN3K6eD6Ohe6wzRuy41igAAAVY"]
[Mon Apr 06 17:04:44.921643 2026] [:error] [pid 35688:tid 35756] [client 4.231.218.60:39342] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3LOZ85qg4jLsRpQxM7QAAAIY"]
[Mon Apr 06 17:04:45.960325 2026] [:error] [pid 10280:tid 10303] [client 4.231.218.60:42944] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3LV8QUJkf8g-BFfObHAAAAdQ"]
[Mon Apr 06 17:04:46.515312 2026] [:error] [pid 38562:tid 38587] [client 4.231.218.60:45443] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adN3LqeD6Ohe6wzRuy41mQAAAVY"]
[Mon Apr 06 17:04:47.635380 2026] [:error] [pid 35687:tid 35730] [client 4.231.218.60:48856] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adN3L53LtDozV0i8Bis8lgAAAEc"]
[Mon Apr 06 17:04:47.855820 2026] [:error] [pid 10280:tid 10293] [client 4.231.218.60:40986] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adN3L18QUJkf8g-BFfObJwAAAco"]
[Mon Apr 06 17:04:50.102318 2026] [:error] [pid 10280:tid 10301] [client 4.231.218.60:34340] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adN3Ml8QUJkf8g-BFfObMAAAAdI"]
[Mon Apr 06 17:04:51.702598 2026] [:error] [pid 35687:tid 35723] [client 4.231.218.60:48841] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adN3M53LtDozV0i8Bis8nAAAAEA"]
[Mon Apr 06 17:04:53.492681 2026] [:error] [pid 35687:tid 35731] [client 4.231.218.60:41484] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adN3NZ3LtDozV0i8Bis8qQAAAEg"]
[Mon Apr 06 17:04:56.040297 2026] [:error] [pid 35686:tid 35714] [client 4.231.218.60:41508] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adN3OMMKdea6oORd2fyHMQAAABI"]
[Mon Apr 06 17:04:56.351867 2026] [:error] [pid 35686:tid 35708] [client 4.231.218.60:45460] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adN3OMMKdea6oORd2fyHNQAAAAw"]
[Mon Apr 06 17:04:57.312576 2026] [:error] [pid 35686:tid 35709] [client 4.231.218.60:45839] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adN3OcMKdea6oORd2fyHOgAAAA0"]
[Mon Apr 06 17:04:58.515501 2026] [:error] [pid 9413:tid 9439] [client 4.231.218.60:29532] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adN3OnllvEK3chn01wGh3QAAAZg"]
[Mon Apr 06 17:05:00.515432 2026] [:error] [pid 35687:tid 35726] [client 4.231.218.60:36232] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adN3PJ3LtDozV0i8Bis8uQAAAEM"]
[Mon Apr 06 17:05:01.697104 2026] [:error] [pid 38562:tid 38584] [client 4.231.218.60:44572] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adN3PaeD6Ohe6wzRuy41wwAAAVM"]
[Mon Apr 06 17:05:02.730894 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:53379] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3PsMKdea6oORd2fyHRgAAABc"]
[Mon Apr 06 17:05:03.653340 2026] [:error] [pid 9442:tid 9465] [client 4.231.218.60:4254] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3P0PsNnAJTnmz6sZj1AAAARU"]
[Mon Apr 06 17:05:04.627715 2026] [:error] [pid 10280:tid 10294] [client 4.231.218.60:53392] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adN3QF8QUJkf8g-BFfObUgAAAcs"]
[Mon Apr 06 17:05:04.966034 2026] [:error] [pid 35786:tid 35807] [client 4.231.218.60:36271] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3QGgkfCKTaLhwaKT_xwAAAM4"]
[Mon Apr 06 17:05:05.697131 2026] [:error] [pid 10280:tid 10288] [client 4.231.218.60:41520] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3QV8QUJkf8g-BFfObVgAAAcU"]
[Mon Apr 06 17:05:06.565164 2026] [:error] [pid 9442:tid 9458] [client 4.231.218.60:53411] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adN3QkPsNnAJTnmz6sZj2QAAAQ4"]
[Mon Apr 06 17:05:06.659356 2026] [:error] [pid 9413:tid 9432] [client 4.231.218.60:46299] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adN3QnllvEK3chn01wGh4AAAAZE"]
[Mon Apr 06 17:05:08.009559 2026] [:error] [pid 9442:tid 9466] [client 4.231.218.60:37173] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adN3REPsNnAJTnmz6sZj3gAAARY"]
[Mon Apr 06 17:05:08.329037 2026] [:error] [pid 38562:tid 38566] [client 4.231.218.60:64451] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adN3RKeD6Ohe6wzRuy42CgAAAUE"]
[Mon Apr 06 17:05:08.817667 2026] [:error] [pid 9413:tid 9430] [client 4.231.218.60:44589] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adN3RHllvEK3chn01wGh5AAAAY8"]
[Mon Apr 06 17:05:09.050658 2026] [:error] [pid 38562:tid 38573] [client 4.231.218.60:46319] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adN3RaeD6Ohe6wzRuy42CwAAAUg"]
[Mon Apr 06 17:05:09.740522 2026] [:error] [pid 38562:tid 38575] [client 4.231.218.60:37135] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adN3RaeD6Ohe6wzRuy42DgAAAUo"]
[Mon Apr 06 17:05:10.373134 2026] [:error] [pid 9413:tid 9429] [client 4.231.218.60:39319] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adN3RnllvEK3chn01wGh6QAAAY4"]
[Mon Apr 06 17:05:10.456437 2026] [:error] [pid 35786:tid 35796] [client 4.231.218.60:37160] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adN3RmgkfCKTaLhwaKT_1wAAAMM"]
[Mon Apr 06 17:05:11.144278 2026] [:error] [pid 38562:tid 38587] [client 4.231.218.60:36268] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adN3R6eD6Ohe6wzRuy42EwAAAVY"]
[Mon Apr 06 17:05:11.241306 2026] [:error] [pid 38562:tid 38584] [client 4.231.218.60:46288] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adN3R6eD6Ohe6wzRuy42FAAAAVM"]
[Mon Apr 06 17:05:11.857758 2026] [:error] [pid 9442:tid 9444] [client 4.231.218.60:53407] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adN3R0PsNnAJTnmz6sZj4QAAAQA"]
[Mon Apr 06 17:05:11.911189 2026] [:error] [pid 9442:tid 9455] [client 4.231.218.60:28955] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adN3R0PsNnAJTnmz6sZj4gAAAQs"]
[Mon Apr 06 17:05:12.577187 2026] [:error] [pid 9442:tid 9446] [client 4.231.218.60:53396] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adN3SEPsNnAJTnmz6sZj6AAAAQI"]
[Mon Apr 06 17:05:12.905416 2026] [:error] [pid 38562:tid 38569] [client 4.231.218.60:53387] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adN3SKeD6Ohe6wzRuy42FwAAAUQ"]
[Mon Apr 06 17:05:13.802678 2026] [:error] [pid 35687:tid 35726] [client 4.231.218.60:35367] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adN3SZ3LtDozV0i8Bis8xAAAAEM"]
[Mon Apr 06 17:05:14.312057 2026] [:error] [pid 35687:tid 35724] [client 4.231.218.60:29536] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adN3Sp3LtDozV0i8Bis8xQAAAEE"]
[Mon Apr 06 17:05:14.965913 2026] [:error] [pid 35686:tid 35703] [client 4.231.218.60:46290] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adN3SsMKdea6oORd2fyHiQAAAAc"]
[Mon Apr 06 17:05:15.972808 2026] [:error] [pid 38562:tid 38584] [client 4.231.218.60:49822] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adN3S6eD6Ohe6wzRuy42HQAAAVM"]
[Mon Apr 06 17:05:24.161033 2026] [:error] [pid 38562:tid 38571] [client 4.231.218.60:46333] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "adN3VKeD6Ohe6wzRuy42WAAAAUY"]
[Mon Apr 06 17:05:24.366846 2026] [:error] [pid 35686:tid 35702] [client 4.231.218.60:30556] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adN3VMMKdea6oORd2fyHtAAAAAY"]
[Mon Apr 06 17:05:25.087063 2026] [:error] [pid 35687:tid 35723] [client 4.231.218.60:29567] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "adN3VZ3LtDozV0i8Bis80wAAAEA"]
[Mon Apr 06 17:05:26.152833 2026] [:error] [pid 38562:tid 38568] [client 4.231.218.60:64488] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adN3VqeD6Ohe6wzRuy42XQAAAUM"]
[Mon Apr 06 17:05:26.937544 2026] [:error] [pid 35686:tid 35715] [client 4.231.218.60:44550] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adN3VsMKdea6oORd2fyHuQAAABM"]
[Mon Apr 06 17:05:27.304491 2026] [:error] [pid 38562:tid 38580] [client 4.231.218.60:49813] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "adN3V6eD6Ohe6wzRuy42XwAAAU8"]
[Mon Apr 06 17:05:27.640621 2026] [:error] [pid 38562:tid 38569] [client 4.231.218.60:46816] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adN3V6eD6Ohe6wzRuy42YQAAAUQ"]
[Mon Apr 06 17:05:28.126594 2026] [:error] [pid 9413:tid 9430] [client 4.231.218.60:31032] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "adN3WHllvEK3chn01wGiAAAAAY8"]
[Mon Apr 06 17:05:28.493029 2026] [:error] [pid 38562:tid 38578] [client 4.231.218.60:49831] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adN3WKeD6Ohe6wzRuy42YwAAAU0"]
[Mon Apr 06 17:05:28.932544 2026] [:error] [pid 35686:tid 35704] [client 4.231.218.60:46792] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "adN3WMMKdea6oORd2fyHuwAAAAg"]
[Mon Apr 06 17:05:29.342175 2026] [:error] [pid 35786:tid 35816] [client 4.231.218.60:29556] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adN3WWgkfCKTaLhwaKT_4AAAANc"]
[Mon Apr 06 17:05:29.585264 2026] [:error] [pid 9442:tid 9468] [client 4.231.218.60:30588] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "adN3WUPsNnAJTnmz6sZkAQAAARg"]
[Mon Apr 06 17:05:30.565362 2026] [:error] [pid 35686:tid 35703] [client 4.231.218.60:29519] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adN3WsMKdea6oORd2fyHxQAAAAc"]
[Mon Apr 06 17:05:31.306056 2026] [:error] [pid 10280:tid 10302] [client 4.231.218.60:28941] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "adN3W18QUJkf8g-BFfObhAAAAdM"]
[Mon Apr 06 17:05:32.283721 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:4263] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "adN3XMMKdea6oORd2fyHzAAAABQ"]
[Mon Apr 06 17:05:32.753101 2026] [:error] [pid 9442:tid 9463] [client 4.231.218.60:37141] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adN3XEPsNnAJTnmz6sZkBQAAARM"]
[Mon Apr 06 17:05:33.010178 2026] [:error] [pid 35687:tid 35741] [client 4.231.218.60:37177] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "adN3XZ3LtDozV0i8Bis84AAAAFI"]
[Mon Apr 06 17:05:33.912553 2026] [:error] [pid 38562:tid 38579] [client 4.231.218.60:46846] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adN3XaeD6Ohe6wzRuy42aAAAAU4"]
[Mon Apr 06 17:05:34.044657 2026] [:error] [pid 35688:tid 35757] [client 4.231.218.60:37148] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "adN3XuZ85qg4jLsRpQxNCwAAAIc"]
[Mon Apr 06 17:05:34.856145 2026] [:error] [pid 38562:tid 38578] [client 4.231.218.60:30573] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "adN3XqeD6Ohe6wzRuy42bAAAAU0"]
[Mon Apr 06 17:05:35.470751 2026] [:error] [pid 10280:tid 10302] [client 4.231.218.60:31516] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adN3X18QUJkf8g-BFfOblAAAAdM"]
[Mon Apr 06 17:05:35.676193 2026] [:error] [pid 35686:tid 35705] [client 4.231.218.60:37141] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "adN3X8MKdea6oORd2fyH2AAAAAk"]
[Mon Apr 06 17:05:36.354878 2026] [:error] [pid 35686:tid 35720] [client 4.231.218.60:49808] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adN3YMMKdea6oORd2fyH3gAAABg"]
[Mon Apr 06 17:05:36.922141 2026] [:error] [pid 38562:tid 38572] [client 4.231.218.60:49810] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adN3YKeD6Ohe6wzRuy42eAAAAUc"]
[Mon Apr 06 17:05:37.424136 2026] [:error] [pid 38562:tid 38589] [client 4.231.218.60:65412] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adN3YaeD6Ohe6wzRuy42fAAAAVg"]
[Mon Apr 06 17:05:37.953096 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:31532] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adN3YcMKdea6oORd2fyH4wAAAAs"]
[Mon Apr 06 17:05:38.024261 2026] [:error] [pid 35786:tid 35809] [client 4.231.218.60:27450] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adN3YmgkfCKTaLhwaKT_4gAAANA"]
[Mon Apr 06 17:05:38.608338 2026] [:error] [pid 35686:tid 35702] [client 4.231.218.60:63066] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adN3YsMKdea6oORd2fyH7wAAAAY"]
[Mon Apr 06 17:05:38.914650 2026] [:error] [pid 38562:tid 38571] [client 4.231.218.60:31549] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adN3YqeD6Ohe6wzRuy42gAAAAUY"]
[Mon Apr 06 17:05:39.683336 2026] [:error] [pid 35786:tid 35811] [client 4.231.218.60:31538] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adN3Y2gkfCKTaLhwaKT_5QAAANI"]
[Mon Apr 06 17:05:40.110920 2026] [:error] [pid 35688:tid 35771] [client 4.231.218.60:5098] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adN3ZOZ85qg4jLsRpQxNEgAAAJU"]
[Mon Apr 06 17:05:40.306676 2026] [:error] [pid 35686:tid 35697] [client 4.231.218.60:41412] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adN3ZMMKdea6oORd2fyH9AAAAAE"]
[Mon Apr 06 17:05:40.799129 2026] [:error] [pid 38562:tid 38579] [client 4.231.218.60:44869] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adN3ZKeD6Ohe6wzRuy42iAAAAU4"]
[Mon Apr 06 17:05:40.907996 2026] [:error] [pid 38562:tid 38567] [client 4.231.218.60:27437] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adN3ZKeD6Ohe6wzRuy42iQAAAUI"]
[Mon Apr 06 17:05:41.759329 2026] [:error] [pid 35687:tid 35745] [client 4.231.218.60:63585] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adN3ZZ3LtDozV0i8Bis84wAAAFY"]
[Mon Apr 06 17:05:41.782151 2026] [:error] [pid 38562:tid 38565] [client 4.231.218.60:35319] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adN3ZaeD6Ohe6wzRuy42kQAAAUA"]
[Mon Apr 06 17:05:42.691778 2026] [:error] [pid 35686:tid 35708] [client 4.231.218.60:27488] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adN3ZsMKdea6oORd2fyH_AAAAAw"]
[Mon Apr 06 17:05:42.806464 2026] [:error] [pid 35686:tid 35715] [client 4.231.218.60:27499] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "adN3ZsMKdea6oORd2fyH_QAAABM"]
[Mon Apr 06 17:05:43.542166 2026] [:error] [pid 9442:tid 9445] [client 4.231.218.60:38575] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adN3Z0PsNnAJTnmz6sZkDAAAAQE"]
[Mon Apr 06 17:05:43.918315 2026] [:error] [pid 38562:tid 38566] [client 4.231.218.60:40389] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "adN3Z6eD6Ohe6wzRuy42ngAAAUE"]
[Mon Apr 06 17:05:44.608424 2026] [:error] [pid 35687:tid 35723] [client 4.231.218.60:56279] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "adN3aJ3LtDozV0i8Bis85wAAAEA"]
[Mon Apr 06 17:05:44.680928 2026] [:error] [pid 38562:tid 38587] [client 4.231.218.60:29011] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adN3aKeD6Ohe6wzRuy42owAAAVY"]
[Mon Apr 06 17:05:45.414121 2026] [:error] [pid 38562:tid 38588] [client 4.231.218.60:65416] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adN3aaeD6Ohe6wzRuy42qAAAAVc"]
[Mon Apr 06 17:05:45.644078 2026] [:error] [pid 9442:tid 9463] [client 4.231.218.60:63560] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "adN3aUPsNnAJTnmz6sZkEAAAARM"]
[Mon Apr 06 17:05:46.211829 2026] [:error] [pid 9442:tid 9457] [client 4.231.218.60:41442] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "adN3akPsNnAJTnmz6sZkEQAAAQ0"]
[Mon Apr 06 17:05:46.236839 2026] [:error] [pid 38562:tid 38565] [client 4.231.218.60:41410] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adN3aqeD6Ohe6wzRuy42rgAAAUA"]
[Mon Apr 06 17:05:47.039198 2026] [:error] [pid 9442:tid 9459] [client 4.231.218.60:65450] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adN3a0PsNnAJTnmz6sZkFAAAAQ8"]
[Mon Apr 06 17:05:47.084952 2026] [:error] [pid 9442:tid 9444] [client 4.231.218.60:41450] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "adN3a0PsNnAJTnmz6sZkFQAAAQA"]
[Mon Apr 06 17:05:48.226949 2026] [:error] [pid 38562:tid 38579] [client 4.231.218.60:35327] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adN3bKeD6Ohe6wzRuy42twAAAU4"]
[Mon Apr 06 17:05:48.238100 2026] [:error] [pid 38562:tid 38574] [client 4.231.218.60:40411] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "adN3bKeD6Ohe6wzRuy42uAAAAUk"]
[Mon Apr 06 17:05:49.409575 2026] [:error] [pid 10280:tid 10292] [client 4.231.218.60:4623] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adN3bV8QUJkf8g-BFfObqQAAAck"]
[Mon Apr 06 17:05:49.994517 2026] [:error] [pid 10280:tid 10303] [client 4.231.218.60:65415] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "adN3bV8QUJkf8g-BFfObrgAAAdQ"]
[Mon Apr 06 17:05:50.068752 2026] [:error] [pid 35688:tid 35767] [client 4.231.218.60:4676] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "adN3buZ85qg4jLsRpQxNGwAAAJE"]
[Mon Apr 06 17:05:50.766690 2026] [:error] [pid 35686:tid 35698] [client 4.231.218.60:5115] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "adN3bsMKdea6oORd2fyIGAAAAAI"]
[Mon Apr 06 17:05:51.498645 2026] [:error] [pid 38562:tid 38572] [client 4.231.218.60:5104] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "adN3b6eD6Ohe6wzRuy42wgAAAUc"]
[Mon Apr 06 17:05:52.150122 2026] [:error] [pid 38562:tid 38567] [client 4.231.218.60:36192] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "adN3cKeD6Ohe6wzRuy42xgAAAUI"]
[Mon Apr 06 17:05:52.782649 2026] [:error] [pid 10280:tid 10294] [client 4.231.218.60:4975] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "adN3cF8QUJkf8g-BFfObtwAAAcs"]
[Mon Apr 06 17:05:53.017946 2026] [:error] [pid 38562:tid 38583] [client 4.231.218.60:65460] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "adN3caeD6Ohe6wzRuy42ygAAAVI"]
[Mon Apr 06 17:05:53.447333 2026] [:error] [pid 35687:tid 35735] [client 4.231.218.60:41459] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "adN3cZ3LtDozV0i8Bis87wAAAEw"]
[Mon Apr 06 17:05:54.115166 2026] [:error] [pid 9413:tid 9424] [client 4.231.218.60:36174] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "adN3cnllvEK3chn01wGiHwAAAYk"]
[Mon Apr 06 17:05:54.397787 2026] [:error] [pid 38562:tid 38586] [client 4.231.218.60:33620] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adN3cqeD6Ohe6wzRuy420QAAAVU"]
[Mon Apr 06 17:05:54.801071 2026] [:error] [pid 10280:tid 10291] [client 4.231.218.60:40394] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "adN3cl8QUJkf8g-BFfObvgAAAcg"]
[Mon Apr 06 17:05:55.320673 2026] [:error] [pid 10280:tid 10305] [client 4.231.218.60:5082] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adN3c18QUJkf8g-BFfObwAAAAdY"]
[Mon Apr 06 17:05:56.061630 2026] [:error] [pid 35687:tid 35743] [client 4.231.218.60:33550] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adN3dJ3LtDozV0i8Bis89QAAAFQ"]
[Mon Apr 06 17:05:56.111893 2026] [:error] [pid 10280:tid 10299] [client 4.231.218.60:4683] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "adN3dF8QUJkf8g-BFfObxAAAAdA"]
[Mon Apr 06 17:05:57.078714 2026] [:error] [pid 9413:tid 9415] [client 4.231.218.60:33603] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "adN3dXllvEK3chn01wGiKwAAAYA"]
[Mon Apr 06 17:05:57.327690 2026] [:error] [pid 10280:tid 10290] [client 4.231.218.60:31512] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adN3dV8QUJkf8g-BFfObxgAAAcc"]
[Mon Apr 06 17:05:58.134066 2026] [:error] [pid 35686:tid 35720] [client 4.231.218.60:5057] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "adN3dsMKdea6oORd2fyIIAAAABg"]
[Mon Apr 06 17:05:58.486869 2026] [:error] [pid 10280:tid 10299] [client 4.231.218.60:29023] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adN3dl8QUJkf8g-BFfObzwAAAdA"]
[Mon Apr 06 17:05:59.109746 2026] [:error] [pid 35688:tid 35771] [client 4.231.218.60:33089] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "adN3d-Z85qg4jLsRpQxNHgAAAJU"]
[Mon Apr 06 17:05:59.662320 2026] [:error] [pid 35687:tid 35733] [client 4.231.218.60:40397] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adN3d53LtDozV0i8Bis8_wAAAEo"]
[Mon Apr 06 17:06:00.437832 2026] [:error] [pid 10280:tid 10283] [client 4.231.218.60:29039] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adN3eF8QUJkf8g-BFfOb1AAAAcA"]
[Mon Apr 06 17:06:00.928480 2026] [:error] [pid 35786:tid 35812] [client 4.231.218.60:40423] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "adN3eGgkfCKTaLhwaKT_-AAAANM"]
[Mon Apr 06 17:06:01.388687 2026] [:error] [pid 35687:tid 35730] [client 4.231.218.60:33613] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adN3eZ3LtDozV0i8Bis9BQAAAEc"]
[Mon Apr 06 17:06:02.179198 2026] [:error] [pid 35686:tid 35703] [client 4.231.218.60:42505] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3esMKdea6oORd2fyIKQAAAAc"]
[Mon Apr 06 17:06:02.349711 2026] [:error] [pid 35686:tid 35714] [client 4.231.218.60:38283] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "adN3esMKdea6oORd2fyIKgAAABI"]
[Mon Apr 06 17:06:02.979185 2026] [:error] [pid 10280:tid 10299] [client 4.231.218.60:4508] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3el8QUJkf8g-BFfOb2QAAAdA"]
[Mon Apr 06 17:06:03.034196 2026] [:error] [pid 35686:tid 35706] [client 4.231.218.60:4357] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "adN3e8MKdea6oORd2fyILQAAAAo"]
[Mon Apr 06 17:06:03.708640 2026] [:error] [pid 38562:tid 38571] [client 4.231.218.60:43567] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3e6eD6Ohe6wzRuy427AAAAUY"]
[Mon Apr 06 17:06:03.736409 2026] [:error] [pid 35688:tid 35751] [client 4.231.218.60:31532] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adN3e-Z85qg4jLsRpQxNIQAAAIE"]
[Mon Apr 06 17:06:04.345273 2026] [:error] [pid 38562:tid 38582] [client 4.231.218.60:42558] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adN3fKeD6Ohe6wzRuy428AAAAVE"]
[Mon Apr 06 17:06:04.612994 2026] [:error] [pid 38562:tid 38575] [client 4.231.218.60:4355] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adN3fKeD6Ohe6wzRuy428wAAAUo"]
[Mon Apr 06 17:06:04.973453 2026] [:error] [pid 38562:tid 38576] [client 4.231.218.60:33641] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adN3fKeD6Ohe6wzRuy429QAAAUs"]
[Mon Apr 06 17:06:05.398945 2026] [:error] [pid 10280:tid 10283] [client 4.231.218.60:4940] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adN3fV8QUJkf8g-BFfOb3wAAAcA"]
[Mon Apr 06 17:06:05.596627 2026] [:error] [pid 35786:tid 35811] [client 4.231.218.60:63520] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adN3fWgkfCKTaLhwaKQAAgAAANI"]
[Mon Apr 06 17:06:06.396782 2026] [:error] [pid 38562:tid 38570] [client 4.231.218.60:4388] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adN3fqeD6Ohe6wzRuy429wAAAUU"]
[Mon Apr 06 17:06:06.509841 2026] [:error] [pid 38562:tid 38587] [client 4.231.218.60:29005] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adN3fqeD6Ohe6wzRuy42-AAAAVY"]
[Mon Apr 06 17:06:07.211378 2026] [:error] [pid 38562:tid 38566] [client 4.231.218.60:4480] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adN3f6eD6Ohe6wzRuy42_QAAAUE"]
[Mon Apr 06 17:06:07.324448 2026] [:error] [pid 9442:tid 9462] [client 4.231.218.60:4103] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adN3f0PsNnAJTnmz6sZkJgAAARI"]
[Mon Apr 06 17:06:07.987531 2026] [:error] [pid 10280:tid 10299] [client 4.231.218.60:38286] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adN3f18QUJkf8g-BFfOb5QAAAdA"]
[Mon Apr 06 17:06:08.817898 2026] [:error] [pid 35688:tid 35752] [client 4.231.218.60:38295] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adN3gOZ85qg4jLsRpQxNJQAAAII"]
[Mon Apr 06 17:06:08.907090 2026] [:error] [pid 35686:tid 35717] [client 4.231.218.60:4990] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adN3gMMKdea6oORd2fyINwAAABU"]
[Mon Apr 06 17:06:09.485622 2026] [:error] [pid 9413:tid 9430] [client 4.231.218.60:38319] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adN3gXllvEK3chn01wGiPwAAAY8"]
[Mon Apr 06 17:06:09.735876 2026] [:error] [pid 35687:tid 35746] [client 4.231.218.60:33125] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adN3gZ3LtDozV0i8Bis9FwAAAFc"]
[Mon Apr 06 17:06:10.419450 2026] [:error] [pid 10280:tid 10304] [client 4.231.218.60:4412] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adN3gl8QUJkf8g-BFfOb6gAAAdU"]
[Mon Apr 06 17:06:10.848348 2026] [:error] [pid 35786:tid 35810] [client 4.231.218.60:36767] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adN3gmgkfCKTaLhwaKQABwAAANE"]
[Mon Apr 06 17:06:11.268884 2026] [:error] [pid 35686:tid 35708] [client 4.231.218.60:42546] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adN3g8MKdea6oORd2fyIPQAAAAw"]
[Mon Apr 06 17:06:11.724539 2026] [:error] [pid 35686:tid 35701] [client 4.231.218.60:36756] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adN3g8MKdea6oORd2fyIQAAAAAU"]
[Mon Apr 06 17:06:11.882950 2026] [:error] [pid 35686:tid 35709] [client 4.231.218.60:4526] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adN3g8MKdea6oORd2fyIRQAAAA0"]
[Mon Apr 06 17:06:12.485666 2026] [:error] [pid 35686:tid 35717] [client 4.231.218.60:4357] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adN3hMMKdea6oORd2fyITQAAABU"]
[Mon Apr 06 17:06:12.689631 2026] [:error] [pid 35686:tid 35703] [client 4.231.218.60:36736] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adN3hMMKdea6oORd2fyIUgAAAAc"]
[Mon Apr 06 17:06:13.292406 2026] [:error] [pid 10280:tid 10290] [client 4.231.218.60:43547] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adN3hV8QUJkf8g-BFfOb7QAAAcc"]
[Mon Apr 06 17:06:13.476060 2026] [:error] [pid 38562:tid 38583] [client 4.231.218.60:33593] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adN3haeD6Ohe6wzRuy43CAAAAVI"]
[Mon Apr 06 17:06:14.169441 2026] [:error] [pid 35688:tid 35774] [client 4.231.218.60:42513] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "adN3huZ85qg4jLsRpQxNJwAAAJg"]
[Mon Apr 06 17:06:14.525155 2026] [:error] [pid 9413:tid 9420] [client 4.231.218.60:36740] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adN3hnllvEK3chn01wGiSAAAAYU"]
[Mon Apr 06 17:06:15.020914 2026] [:error] [pid 10280:tid 10295] [client 4.231.218.60:4931] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "adN3h18QUJkf8g-BFfOb8AAAAcw"]
[Mon Apr 06 17:06:15.531688 2026] [:error] [pid 9442:tid 9467] [client 4.231.218.60:34767] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adN3h0PsNnAJTnmz6sZkNgAAARc"]
[Mon Apr 06 17:06:15.794625 2026] [:error] [pid 35786:tid 35809] [client 4.231.218.60:38334] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "adN3h2gkfCKTaLhwaKQACQAAANA"]
[Mon Apr 06 17:06:16.432076 2026] [:error] [pid 9413:tid 9423] [client 4.231.218.60:43529] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adN3iHllvEK3chn01wGiSgAAAYg"]
[Mon Apr 06 17:06:17.112516 2026] [:error] [pid 35786:tid 35800] [client 4.231.218.60:4528] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "adN3iWgkfCKTaLhwaKQADQAAAMc"]
[Mon Apr 06 17:06:17.619450 2026] [:error] [pid 9413:tid 9434] [client 4.231.218.60:43533] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adN3iXllvEK3chn01wGiTAAAAZM"]
[Mon Apr 06 17:06:18.117036 2026] [:error] [pid 10280:tid 10305] [client 4.231.218.60:36748] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "adN3il8QUJkf8g-BFfOb-wAAAdY"]
[Mon Apr 06 17:06:19.195048 2026] [:error] [pid 35686:tid 35699] [client 4.231.218.60:4153] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "adN3i8MKdea6oORd2fyIXAAAAAM"]
[Mon Apr 06 17:06:19.811249 2026] [:error] [pid 38562:tid 38581] [client 4.231.218.60:64999] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adN3i6eD6Ohe6wzRuy43EAAAAVA"]
[Mon Apr 06 17:06:20.092216 2026] [:error] [pid 9442:tid 9455] [client 4.231.218.60:47271] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "adN3jEPsNnAJTnmz6sZkQAAAAQs"]
[Mon Apr 06 17:06:20.944562 2026] [:error] [pid 35686:tid 35717] [client 4.231.218.60:47251] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "adN3jMMKdea6oORd2fyIYwAAABU"]
[Mon Apr 06 17:06:22.267394 2026] [:error] [pid 35687:tid 35740] [client 4.231.218.60:4519] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adN3jp3LtDozV0i8Bis9KAAAAFE"]
[Mon Apr 06 17:06:23.103700 2026] [:error] [pid 38562:tid 38574] [client 4.231.218.60:61811] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adN3j6eD6Ohe6wzRuy43FwAAAUk"]
[Mon Apr 06 17:06:23.498487 2026] [:error] [pid 35687:tid 35739] [client 4.231.218.60:38288] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adN3j53LtDozV0i8Bis9KgAAAFA"]
[Mon Apr 06 17:06:29.406033 2026] [:error] [pid 9442:tid 9453] [client 4.231.218.60:33991] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adN3lUPsNnAJTnmz6sZkYQAAAQk"]
[Mon Apr 06 17:06:29.673101 2026] [:error] [pid 35686:tid 35709] [client 4.231.218.60:38316] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adN3lcMKdea6oORd2fyIngAAAA0"]
[Mon Apr 06 17:06:30.284058 2026] [:error] [pid 35688:tid 35772] [client 4.231.218.60:52745] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adN3luZ85qg4jLsRpQxNLQAAAJY"]
[Mon Apr 06 17:06:30.562300 2026] [:error] [pid 38562:tid 38573] [client 4.231.218.60:36758] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adN3lqeD6Ohe6wzRuy43IAAAAUg"]
[Mon Apr 06 17:06:31.167876 2026] [:error] [pid 9413:tid 9434] [client 4.231.218.60:4541] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adN3l3llvEK3chn01wGiXQAAAZM"]
[Mon Apr 06 17:06:31.447514 2026] [:error] [pid 35687:tid 35742] [client 4.231.218.60:52760] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adN3l53LtDozV0i8Bis9QgAAAFM"]
[Mon Apr 06 17:06:32.351983 2026] [:error] [pid 9442:tid 9464] [client 4.231.218.60:61776] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adN3mEPsNnAJTnmz6sZkZAAAARQ"]
[Mon Apr 06 17:06:33.349310 2026] [:error] [pid 35687:tid 35748] [client 4.231.218.60:62396] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adN3mZ3LtDozV0i8Bis9SAAAAFg"]
[Mon Apr 06 17:06:33.911057 2026] [:error] [pid 35687:tid 35741] [client 4.231.218.60:51627] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adN3mZ3LtDozV0i8Bis9TAAAAFI"]
[Mon Apr 06 17:06:34.049018 2026] [:error] [pid 38562:tid 38575] [client 4.231.218.60:47234] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adN3mqeD6Ohe6wzRuy43LAAAAUo"]
[Mon Apr 06 17:06:35.327406 2026] [:error] [pid 10280:tid 10296] [client 4.231.218.60:4744] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adN3m18QUJkf8g-BFfOcEwAAAc0"]
[Mon Apr 06 17:06:35.365202 2026] [:error] [pid 38562:tid 38573] [client 4.231.218.60:35034] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adN3m6eD6Ohe6wzRuy43MwAAAUg"]
[Mon Apr 06 17:06:36.278370 2026] [:error] [pid 35687:tid 35738] [client 4.231.218.60:51615] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adN3nJ3LtDozV0i8Bis9UAAAAE8"]
[Mon Apr 06 17:06:36.781897 2026] [:error] [pid 10280:tid 10285] [client 4.231.218.60:38519] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adN3nF8QUJkf8g-BFfOcFwAAAcI"]
[Mon Apr 06 17:06:37.021874 2026] [:error] [pid 35687:tid 35730] [client 4.231.218.60:38467] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adN3nZ3LtDozV0i8Bis9UQAAAEc"]
[Mon Apr 06 17:06:38.345733 2026] [:error] [pid 10280:tid 10304] [client 4.231.218.60:34765] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adN3nl8QUJkf8g-BFfOcGgAAAdU"]
[Mon Apr 06 17:06:38.847621 2026] [:error] [pid 35688:tid 35757] [client 4.231.218.60:62404] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adN3nuZ85qg4jLsRpQxNMwAAAIc"]
[Mon Apr 06 17:06:39.451484 2026] [:error] [pid 35687:tid 35746] [client 4.231.218.60:28458] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adN3n53LtDozV0i8Bis9XQAAAFc"]
[Mon Apr 06 17:06:39.469734 2026] [:error] [pid 10280:tid 10296] [client 4.231.218.60:47282] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adN3n18QUJkf8g-BFfOcIQAAAc0"]
[Mon Apr 06 17:06:40.216202 2026] [:error] [pid 35687:tid 35730] [client 4.231.218.60:50525] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adN3oJ3LtDozV0i8Bis9YAAAAEc"]
[Mon Apr 06 17:06:40.427318 2026] [:error] [pid 35686:tid 35703] [client 4.231.218.60:62359] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adN3oMMKdea6oORd2fyIygAAAAc"]
[Mon Apr 06 17:06:41.336530 2026] [:error] [pid 35687:tid 35726] [client 4.231.218.60:28425] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adN3oZ3LtDozV0i8Bis9ZQAAAEM"]
[Mon Apr 06 17:06:41.874651 2026] [:error] [pid 9413:tid 9433] [client 4.231.218.60:28419] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adN3oXllvEK3chn01wGiYQAAAZI"]
[Mon Apr 06 17:06:42.611111 2026] [:error] [pid 35688:tid 35762] [client 4.231.218.60:49337] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adN3ouZ85qg4jLsRpQxNOAAAAIw"]
[Mon Apr 06 17:06:43.264086 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:35047] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adN3o8MKdea6oORd2fyIzQAAABQ"]
[Mon Apr 06 17:06:43.466078 2026] [:error] [pid 10280:tid 10307] [client 4.231.218.60:4738] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adN3o18QUJkf8g-BFfOcJgAAAdg"]
[Mon Apr 06 17:06:44.416575 2026] [:error] [pid 35687:tid 35740] [client 4.231.218.60:51598] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN3pJ3LtDozV0i8Bis9awAAAFE"]
[Mon Apr 06 17:06:44.483652 2026] [:error] [pid 35687:tid 35724] [client 4.231.218.60:38510] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adN3pJ3LtDozV0i8Bis9bAAAAEE"]
[Mon Apr 06 17:06:47.375500 2026] [:error] [pid 35688:tid 35772] [client 4.231.218.60:64420] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adN3p-Z85qg4jLsRpQxNRgAAAJY"]
[Mon Apr 06 17:06:47.654103 2026] [:error] [pid 35687:tid 35743] [client 4.231.218.60:55593] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN3p53LtDozV0i8Bis9bwAAAFQ"]
[Mon Apr 06 17:06:49.214428 2026] [:error] [pid 9442:tid 9456] [client 4.231.218.60:57454] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN3qUPsNnAJTnmz6sZkfwAAAQw"]
[Mon Apr 06 17:06:49.707050 2026] [:error] [pid 38562:tid 38586] [client 4.231.218.60:55565] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adN3qaeD6Ohe6wzRuy43QwAAAVU"]
[Mon Apr 06 17:06:50.100918 2026] [:error] [pid 38562:tid 38579] [client 4.231.218.60:55594] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN3qqeD6Ohe6wzRuy43RQAAAU4"]
[Mon Apr 06 17:06:50.842663 2026] [:error] [pid 9413:tid 9433] [client 4.231.218.60:40956] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adN3qnllvEK3chn01wGiawAAAZI"]
[Mon Apr 06 17:06:50.990353 2026] [:error] [pid 35687:tid 35742] [client 4.231.218.60:4907] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adN3qp3LtDozV0i8Bis9dQAAAFM"]
[Mon Apr 06 17:06:51.743868 2026] [:error] [pid 38562:tid 38580] [client 4.231.218.60:49301] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adN3q6eD6Ohe6wzRuy43SgAAAU8"]
[Mon Apr 06 17:06:51.948055 2026] [:error] [pid 35687:tid 35728] [client 4.231.218.60:50497] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adN3q53LtDozV0i8Bis9eAAAAEU"]
[Mon Apr 06 17:06:53.256682 2026] [:error] [pid 35786:tid 35794] [client 4.231.218.60:28439] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adN3rWgkfCKTaLhwaKQAIgAAAME"]
[Mon Apr 06 17:06:54.293036 2026] [:error] [pid 9413:tid 9428] [client 4.231.218.60:64389] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adN3rnllvEK3chn01wGicgAAAY0"]
[Mon Apr 06 17:06:55.106302 2026] [:error] [pid 35686:tid 35715] [client 4.231.218.60:42440] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adN3r8MKdea6oORd2fyI2gAAABM"]
[Mon Apr 06 17:06:56.914927 2026] [:error] [pid 35688:tid 35764] [client 4.231.218.60:56776] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adN3sOZ85qg4jLsRpQxNUwAAAI4"]
[Mon Apr 06 17:06:57.761899 2026] [:error] [pid 10280:tid 10298] [client 4.231.218.60:59999] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adN3sV8QUJkf8g-BFfOcPQAAAc8"]
[Mon Apr 06 17:06:57.811552 2026] [:error] [pid 38562:tid 38588] [client 4.231.218.60:34983] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adN3saeD6Ohe6wzRuy43YgAAAVc"]
[Mon Apr 06 17:06:58.731102 2026] [:error] [pid 9442:tid 9447] [client 4.231.218.60:37490] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adN3skPsNnAJTnmz6sZkhQAAAQM"]
[Mon Apr 06 17:06:58.963600 2026] [:error] [pid 38562:tid 38589] [client 4.231.218.60:4924] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adN3sqeD6Ohe6wzRuy43ZAAAAVg"]
[Mon Apr 06 17:06:59.459106 2026] [:error] [pid 38562:tid 38576] [client 4.231.218.60:39964] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adN3s6eD6Ohe6wzRuy43ZQAAAUs"]
[Mon Apr 06 17:06:59.613855 2026] [:error] [pid 10280:tid 10300] [client 4.231.218.60:60002] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adN3s18QUJkf8g-BFfOcRQAAAdE"]
[Mon Apr 06 17:07:00.406973 2026] [:error] [pid 35686:tid 35713] [client 4.231.218.60:35692] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adN3tMMKdea6oORd2fyI5wAAABE"]
[Mon Apr 06 17:07:00.727104 2026] [:error] [pid 35786:tid 35815] [client 4.231.218.60:37440] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adN3tGgkfCKTaLhwaKQAKgAAANY"]
[Mon Apr 06 17:07:01.690744 2026] [:error] [pid 38562:tid 38569] [client 4.231.218.60:44942] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adN3taeD6Ohe6wzRuy43bgAAAUQ"]
[Mon Apr 06 17:07:02.594285 2026] [:error] [pid 38562:tid 38568] [client 4.231.218.60:56823] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adN3tqeD6Ohe6wzRuy43dAAAAUM"]
[Mon Apr 06 17:07:03.529778 2026] [:error] [pid 10280:tid 10291] [client 4.231.218.60:44007] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adN3t18QUJkf8g-BFfOcSQAAAcg"]
[Mon Apr 06 17:07:06.335937 2026] [:error] [pid 10280:tid 10295] [client 4.231.218.60:39982] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adN3ul8QUJkf8g-BFfOcTgAAAcw"]
[Mon Apr 06 17:07:08.113421 2026] [:error] [pid 10280:tid 10303] [client 4.231.218.60:60497] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adN3vF8QUJkf8g-BFfOcVAAAAdQ"]
[Mon Apr 06 17:07:09.472518 2026] [:error] [pid 35687:tid 35730] [client 4.231.218.60:60520] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adN3vZ3LtDozV0i8Bis9iQAAAEc"]
[Mon Apr 06 17:07:10.262786 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:44975] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adN3vsMKdea6oORd2fyJCAAAABQ"]
[Mon Apr 06 17:07:10.736733 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:56789] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adN3vsMKdea6oORd2fyJDAAAAAs"]
[Mon Apr 06 17:07:12.418396 2026] [:error] [pid 9413:tid 9418] [client 4.231.218.60:28519] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adN3wHllvEK3chn01wGifAAAAYM"]
[Mon Apr 06 17:07:15.744746 2026] [:error] [pid 35688:tid 35773] [client 4.231.218.60:47658] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adN3w-Z85qg4jLsRpQxNYwAAAJc"]
[Mon Apr 06 17:07:16.426776 2026] [:error] [pid 35686:tid 35714] [client 4.231.218.60:56806] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adN3xMMKdea6oORd2fyJGgAAABI"]
[Mon Apr 06 17:07:17.051487 2026] [:error] [pid 10280:tid 10290] [client 4.231.218.60:60489] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adN3xV8QUJkf8g-BFfOcZgAAAcc"]
[Mon Apr 06 17:07:17.383316 2026] [:error] [pid 9442:tid 9458] [client 4.231.218.60:37093] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adN3xUPsNnAJTnmz6sZkjwAAAQ4"]
[Mon Apr 06 17:07:18.188367 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:37498] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adN3xsMKdea6oORd2fyJJAAAAAs"]
[Mon Apr 06 17:07:19.043870 2026] [:error] [pid 35687:tid 35724] [client 4.231.218.60:56798] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adN3x53LtDozV0i8Bis9nAAAAEE"]
[Mon Apr 06 17:07:19.516316 2026] [:error] [pid 35687:tid 35723] [client 4.231.218.60:39962] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adN3x53LtDozV0i8Bis9ogAAAEA"]
[Mon Apr 06 17:07:20.011571 2026] [:error] [pid 35686:tid 35701] [client 4.231.218.60:59947] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adN3yMMKdea6oORd2fyJJwAAAAU"]
[Mon Apr 06 17:07:20.837286 2026] [:error] [pid 10280:tid 10290] [client 4.231.218.60:37115] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adN3yF8QUJkf8g-BFfOcjgAAAcc"]
[Mon Apr 06 17:07:20.937379 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:49919] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adN3yMMKdea6oORd2fyJKgAAAAs"]
[Mon Apr 06 17:07:21.596286 2026] [:error] [pid 10280:tid 10292] [client 4.231.218.60:44029] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adN3yV8QUJkf8g-BFfOcjwAAAck"]
[Mon Apr 06 17:07:21.957439 2026] [:error] [pid 9413:tid 9436] [client 4.231.218.60:58696] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adN3yXllvEK3chn01wGiiAAAAZU"]
[Mon Apr 06 17:07:22.615527 2026] [:error] [pid 38562:tid 38589] [client 4.231.218.60:43034] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adN3yqeD6Ohe6wzRuy43mwAAAVg"]
[Mon Apr 06 17:07:23.153297 2026] [:error] [pid 38562:tid 38568] [client 4.231.218.60:50453] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adN3y6eD6Ohe6wzRuy43nQAAAUM"]
[Mon Apr 06 17:07:23.343372 2026] [:error] [pid 35686:tid 35698] [client 4.231.218.60:43996] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adN3y8MKdea6oORd2fyJNQAAAAI"]
[Mon Apr 06 17:07:23.886420 2026] [:error] [pid 35687:tid 35728] [client 4.231.218.60:50460] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adN3y53LtDozV0i8Bis9vwAAAEU"]
[Mon Apr 06 17:07:24.185444 2026] [:error] [pid 35687:tid 35740] [client 4.231.218.60:50474] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adN3zJ3LtDozV0i8Bis9wAAAAFE"]
[Mon Apr 06 17:07:25.290346 2026] [:error] [pid 35686:tid 35708] [client 4.231.218.60:37487] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adN3zcMKdea6oORd2fyJOwAAAAw"]
[Mon Apr 06 17:07:25.757914 2026] [:error] [pid 38562:tid 38567] [client 4.231.218.60:50450] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adN3zaeD6Ohe6wzRuy43ogAAAUI"]
[Mon Apr 06 17:07:26.126330 2026] [:error] [pid 35687:tid 35741] [client 4.231.218.60:59942] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adN3zp3LtDozV0i8Bis9xgAAAFI"]
[Mon Apr 06 17:07:26.856665 2026] [:error] [pid 35686:tid 35706] [client 4.231.218.60:58751] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adN3zsMKdea6oORd2fyJQgAAAAo"]
[Mon Apr 06 17:07:27.198648 2026] [:error] [pid 35686:tid 35713] [client 4.231.218.60:44073] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adN3z8MKdea6oORd2fyJRQAAABE"]
[Mon Apr 06 17:07:27.554809 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:35675] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adN3z8MKdea6oORd2fyJRwAAABQ"]
[Mon Apr 06 17:07:27.797683 2026] [:error] [pid 10280:tid 10295] [client 4.231.218.60:58739] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adN3z18QUJkf8g-BFfOclwAAAcw"]
[Mon Apr 06 17:07:28.422668 2026] [:error] [pid 35687:tid 35746] [client 4.231.218.60:59906] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adN30J3LtDozV0i8Bis9yQAAAFc"]
[Mon Apr 06 17:07:28.472880 2026] [:error] [pid 9442:tid 9457] [client 4.231.218.60:58693] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adN30EPsNnAJTnmz6sZkmgAAAQ0"]
[Mon Apr 06 17:07:33.355374 2026] [:error] [pid 9442:tid 9450] [client 4.231.218.60:58692] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adN31UPsNnAJTnmz6sZkpAAAAQY"]
[Mon Apr 06 17:07:33.555965 2026] [:error] [pid 35686:tid 35708] [client 4.231.218.60:53470] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adN31cMKdea6oORd2fyJdAAAAAw"]
[Mon Apr 06 17:07:34.071609 2026] [:error] [pid 9442:tid 9452] [client 4.231.218.60:59917] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adN31kPsNnAJTnmz6sZkpwAAAQg"]
[Mon Apr 06 17:07:34.556429 2026] [:error] [pid 35688:tid 35756] [client 4.231.218.60:35762] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adN31uZ85qg4jLsRpQxNagAAAIY"]
[Mon Apr 06 17:07:35.209665 2026] [:error] [pid 38562:tid 38580] [client 4.231.218.60:47641] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adN316eD6Ohe6wzRuy43rwAAAU8"]
[Mon Apr 06 17:07:35.498208 2026] [:error] [pid 35687:tid 35730] [client 4.231.218.60:47665] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adN3153LtDozV0i8Bis91AAAAEc"]
[Mon Apr 06 17:07:36.237099 2026] [:error] [pid 38562:tid 38576] [client 4.231.218.60:59905] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adN32KeD6Ohe6wzRuy43twAAAUs"]
[Mon Apr 06 17:07:36.403923 2026] [:error] [pid 38562:tid 38568] [client 4.231.218.60:40510] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adN32KeD6Ohe6wzRuy43ugAAAUM"]
[Mon Apr 06 17:07:36.971513 2026] [:error] [pid 9413:tid 9418] [client 4.231.218.60:46378] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about2.php"] [unique_id "adN32HllvEK3chn01wGikgAAAYM"]
[Mon Apr 06 17:07:37.132362 2026] [:error] [pid 9413:tid 9429] [client 4.231.218.60:35658] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adN32XllvEK3chn01wGikwAAAY4"]
[Mon Apr 06 17:07:37.707666 2026] [:error] [pid 35687:tid 35727] [client 4.231.218.60:56728] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about2.php"] [unique_id "adN32Z3LtDozV0i8Bis92gAAAEQ"]
[Mon Apr 06 17:07:37.831046 2026] [:error] [pid 9413:tid 9432] [client 4.231.218.60:53474] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adN32XllvEK3chn01wGilwAAAZE"]
[Mon Apr 06 17:07:38.558488 2026] [:error] [pid 38562:tid 38577] [client 4.231.218.60:60510] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adN32qeD6Ohe6wzRuy43xQAAAUw"]
[Mon Apr 06 17:07:38.811084 2026] [:error] [pid 38562:tid 38569] [client 4.231.218.60:53478] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about2.php"] [unique_id "adN32qeD6Ohe6wzRuy43yQAAAUQ"]
[Mon Apr 06 17:07:39.675685 2026] [:error] [pid 38562:tid 38577] [client 4.231.218.60:53498] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about2.php"] [unique_id "adN326eD6Ohe6wzRuy431AAAAUw"]
[Mon Apr 06 17:07:39.820680 2026] [:error] [pid 38562:tid 38584] [client 4.231.218.60:49857] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adN326eD6Ohe6wzRuy431wAAAVM"]
[Mon Apr 06 17:07:40.530587 2026] [:error] [pid 35687:tid 35746] [client 4.231.218.60:49859] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adN33J3LtDozV0i8Bis93QAAAFc"]
[Mon Apr 06 17:07:40.877749 2026] [:error] [pid 10280:tid 10302] [client 4.231.218.60:47679] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adN33F8QUJkf8g-BFfOcnwAAAdM"]
[Mon Apr 06 17:07:41.123447 2026] [:error] [pid 10280:tid 10294] [client 4.231.218.60:28485] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adN33V8QUJkf8g-BFfOcoQAAAcs"]
[Mon Apr 06 17:07:41.612935 2026] [:error] [pid 35686:tid 35713] [client 4.231.218.60:49892] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adN33cMKdea6oORd2fyJhAAAABE"]
[Mon Apr 06 17:07:41.945612 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:28512] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adN33cMKdea6oORd2fyJhQAAABc"]
[Mon Apr 06 17:07:42.468607 2026] [:error] [pid 35786:tid 35797] [client 4.231.218.60:43028] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adN33mgkfCKTaLhwaKQATQAAAMQ"]
[Mon Apr 06 17:07:42.636016 2026] [:error] [pid 9413:tid 9424] [client 4.231.218.60:60500] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adN33nllvEK3chn01wGinAAAAYk"]
[Mon Apr 06 17:07:43.190737 2026] [:error] [pid 10280:tid 10286] [client 4.231.218.60:49914] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adN3318QUJkf8g-BFfOcpQAAAcM"]
[Mon Apr 06 17:07:43.833738 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:49903] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adN338MKdea6oORd2fyJkAAAABQ"]
[Mon Apr 06 17:07:44.419922 2026] [:error] [pid 38562:tid 38575] [client 4.231.218.60:56719] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adN34KeD6Ohe6wzRuy434gAAAUo"]
[Mon Apr 06 17:07:44.834888 2026] [:error] [pid 10280:tid 10306] [client 4.231.218.60:63019] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adN34F8QUJkf8g-BFfOcpgAAAdc"]
[Mon Apr 06 17:07:45.127390 2026] [:error] [pid 35686:tid 35696] [client 4.231.218.60:43033] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adN34cMKdea6oORd2fyJlwAAAAA"]
[Mon Apr 06 17:07:45.610161 2026] [:error] [pid 38562:tid 38580] [client 4.231.218.60:49896] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adN34aeD6Ohe6wzRuy435gAAAU8"]
[Mon Apr 06 17:07:46.181878 2026] [:error] [pid 9442:tid 9452] [client 4.231.218.60:53499] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adN34kPsNnAJTnmz6sZktgAAAQg"]
[Mon Apr 06 17:07:46.810963 2026] [:error] [pid 35686:tid 35698] [client 4.231.218.60:37943] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adN34sMKdea6oORd2fyJngAAAAI"]
[Mon Apr 06 17:07:47.041925 2026] [:error] [pid 35686:tid 35703] [client 4.231.218.60:40456] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adN348MKdea6oORd2fyJoAAAAAc"]
[Mon Apr 06 17:07:47.808060 2026] [:error] [pid 35686:tid 35712] [client 4.231.218.60:43998] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adN348MKdea6oORd2fyJpgAAABA"]
[Mon Apr 06 17:07:48.123315 2026] [:error] [pid 10280:tid 10307] [client 4.231.218.60:40462] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about2.php"] [unique_id "adN35F8QUJkf8g-BFfOcqwAAAdg"]
[Mon Apr 06 17:07:48.596276 2026] [:error] [pid 35786:tid 35815] [client 4.231.218.60:53464] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adN35GgkfCKTaLhwaKQAVAAAANY"]
[Mon Apr 06 17:07:49.301466 2026] [:error] [pid 9442:tid 9463] [client 4.231.218.60:63009] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about2.php"] [unique_id "adN35UPsNnAJTnmz6sZkuQAAARM"]
[Mon Apr 06 17:07:49.358185 2026] [:error] [pid 10280:tid 10284] [client 4.231.218.60:53471] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adN35V8QUJkf8g-BFfOcsAAAAcE"]
[Mon Apr 06 17:07:50.388513 2026] [:error] [pid 35687:tid 35743] [client 4.231.218.60:49889] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about2.php"] [unique_id "adN35p3LtDozV0i8Bis95gAAAFQ"]
[Mon Apr 06 17:07:50.751365 2026] [:error] [pid 10280:tid 10286] [client 4.231.218.60:4436] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adN35l8QUJkf8g-BFfOctAAAAcM"]
[Mon Apr 06 17:07:51.055103 2026] [:error] [pid 38562:tid 38565] [client 4.231.218.60:40452] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about2.php"] [unique_id "adN356eD6Ohe6wzRuy436wAAAUA"]
[Mon Apr 06 17:07:52.185484 2026] [:error] [pid 38562:tid 38583] [client 4.231.218.60:50478] [client 4.231.218.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adN36KeD6Ohe6wzRuy437AAAAVI"]
[Mon Apr 06 17:07:52.413633 2026] [:error] [pid 9413:tid 9430] [client 4.231.218.60:28524] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adN36HllvEK3chn01wGiowAAAY8"]
[Mon Apr 06 17:07:53.082563 2026] [:error] [pid 10280:tid 10305] [client 4.231.218.60:28526] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adN36V8QUJkf8g-BFfOcvQAAAdY"]
[Mon Apr 06 17:07:54.149654 2026] [:error] [pid 9413:tid 9424] [client 4.231.218.60:40506] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adN36nllvEK3chn01wGipAAAAYk"]
[Mon Apr 06 17:07:54.434231 2026] [:error] [pid 35688:tid 35771] [client 4.231.218.60:36678] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adN36uZ85qg4jLsRpQxNbgAAAJU"]
[Mon Apr 06 17:07:55.504412 2026] [:error] [pid 35786:tid 35816] [client 4.231.218.60:40481] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adN362gkfCKTaLhwaKQAWAAAANc"]
[Mon Apr 06 17:07:55.776187 2026] [:error] [pid 9413:tid 9427] [client 4.231.218.60:37904] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adN363llvEK3chn01wGiqwAAAYw"]
[Mon Apr 06 17:07:56.934667 2026] [:error] [pid 35786:tid 35814] [client 4.231.218.60:40501] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adN37GgkfCKTaLhwaKQAWQAAANU"]
[Mon Apr 06 17:07:57.041811 2026] [:error] [pid 35686:tid 35705] [client 4.231.218.60:47633] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adN37cMKdea6oORd2fyJsgAAAAk"]
[Mon Apr 06 17:07:57.868715 2026] [:error] [pid 35687:tid 35744] [client 4.231.218.60:36696] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adN37Z3LtDozV0i8Bis98QAAAFU"]
[Mon Apr 06 17:08:00.072124 2026] [:error] [pid 9442:tid 9444] [client 4.231.218.60:4445] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adN38EPsNnAJTnmz6sZkxQAAAQA"]
[Mon Apr 06 17:08:01.419920 2026] [:error] [pid 35686:tid 35699] [client 4.231.218.60:4431] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adN38cMKdea6oORd2fyJwQAAAAM"]
[Mon Apr 06 17:08:01.650299 2026] [:error] [pid 10280:tid 10288] [client 4.231.218.60:4455] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adN38V8QUJkf8g-BFfOc1wAAAcU"]
[Mon Apr 06 17:08:02.531648 2026] [:error] [pid 35688:tid 35752] [client 4.231.218.60:56715] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adN38uZ85qg4jLsRpQxNdAAAAII"]
[Mon Apr 06 17:08:03.709050 2026] [:error] [pid 9442:tid 9466] [client 4.231.218.60:56758] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adN380PsNnAJTnmz6sZkyQAAARY"]
[Mon Apr 06 17:08:04.336107 2026] [:error] [pid 35786:tid 35809] [client 4.231.218.60:38233] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adN39GgkfCKTaLhwaKQAWwAAANA"]
[Mon Apr 06 17:08:04.543870 2026] [:error] [pid 35688:tid 35753] [client 4.231.218.60:56731] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adN39OZ85qg4jLsRpQxNdwAAAIM"]
[Mon Apr 06 17:08:05.448748 2026] [:error] [pid 35688:tid 35754] [client 4.231.218.60:56722] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adN39eZ85qg4jLsRpQxNeAAAAIQ"]
[Mon Apr 06 17:08:06.170024 2026] [:error] [pid 9442:tid 9445] [client 4.231.218.60:65475] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adN39kPsNnAJTnmz6sZkzAAAAQE"]
[Mon Apr 06 17:08:06.827519 2026] [:error] [pid 10280:tid 10304] [client 4.231.218.60:36733] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adN39l8QUJkf8g-BFfOc5gAAAdU"]
[Mon Apr 06 17:08:07.893170 2026] [:error] [pid 10280:tid 10285] [client 4.231.218.60:37939] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adN3918QUJkf8g-BFfOc6gAAAcI"]
[Mon Apr 06 17:08:08.935998 2026] [:error] [pid 35686:tid 35713] [client 4.231.218.60:53501] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adN3-MMKdea6oORd2fyJ0wAAABE"]
[Mon Apr 06 17:08:08.955141 2026] [:error] [pid 35686:tid 35705] [client 4.231.218.60:59308] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adN3-MMKdea6oORd2fyJ1AAAAAk"]
[Mon Apr 06 17:08:09.678433 2026] [:error] [pid 35687:tid 35733] [client 4.231.218.60:40451] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adN3-Z3LtDozV0i8Bis99wAAAEo"]
[Mon Apr 06 17:08:09.870053 2026] [:error] [pid 38562:tid 38584] [client 4.231.218.60:40458] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adN3-aeD6Ohe6wzRuy439wAAAVM"]
[Mon Apr 06 17:08:10.362522 2026] [:error] [pid 35686:tid 35696] [client 4.231.218.60:48768] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "adN3-sMKdea6oORd2fyJ2AAAAAA"]
[Mon Apr 06 17:08:10.816376 2026] [:error] [pid 38562:tid 38571] [client 4.231.218.60:60446] [client 4.231.218.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adN3-qeD6Ohe6wzRuy43_gAAAUY"]
[Mon Apr 06 17:08:11.416829 2026] [:error] [pid 38562:tid 38588] [client 4.231.218.60:36732] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "adN3-6eD6Ohe6wzRuy44AgAAAVc"]
[Mon Apr 06 17:08:11.731181 2026] [:error] [pid 38562:tid 38576] [client 4.231.218.60:44481] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adN3-6eD6Ohe6wzRuy44BgAAAUs"]
[Mon Apr 06 17:08:12.213805 2026] [:error] [pid 9442:tid 9450] [client 4.231.218.60:60432] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "adN3_EPsNnAJTnmz6sZkzgAAAQY"]
[Mon Apr 06 17:08:12.372868 2026] [:error] [pid 38562:tid 38565] [client 4.231.218.60:38245] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adN3_KeD6Ohe6wzRuy44DQAAAUA"]
[Mon Apr 06 17:08:13.039050 2026] [:error] [pid 9442:tid 9461] [client 4.231.218.60:42026] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "adN3_UPsNnAJTnmz6sZkzwAAARE"]
[Mon Apr 06 17:08:13.336872 2026] [:error] [pid 9442:tid 9457] [client 4.231.218.60:65524] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adN3_UPsNnAJTnmz6sZk0AAAAQ0"]
[Mon Apr 06 17:08:13.938859 2026] [:error] [pid 9442:tid 9451] [client 4.231.218.60:36697] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "adN3_UPsNnAJTnmz6sZk0gAAAQc"]
[Mon Apr 06 17:08:14.425699 2026] [:error] [pid 35686:tid 35701] [client 4.231.218.60:37892] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adN3_sMKdea6oORd2fyJ3gAAAAU"]
[Mon Apr 06 17:08:14.576087 2026] [:error] [pid 35686:tid 35716] [client 4.231.218.60:59305] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "adN3_sMKdea6oORd2fyJ4AAAABQ"]
[Mon Apr 06 17:08:15.432043 2026] [:error] [pid 9442:tid 9467] [client 4.231.218.60:48805] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adN3_0PsNnAJTnmz6sZk1QAAARc"]
[Mon Apr 06 17:08:15.571588 2026] [:error] [pid 9442:tid 9465] [client 4.231.218.60:60433] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "adN3_0PsNnAJTnmz6sZk1gAAARU"]
[Mon Apr 06 17:08:16.101836 2026] [:error] [pid 9442:tid 9466] [client 4.231.218.60:57989] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adN4AEPsNnAJTnmz6sZk2AAAARY"]
[Mon Apr 06 17:08:16.177189 2026] [:error] [pid 35688:tid 35773] [client 4.231.218.60:65472] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "adN4AOZ85qg4jLsRpQxNfgAAAJc"]
[Mon Apr 06 17:08:16.864309 2026] [:error] [pid 35688:tid 35756] [client 4.231.218.60:49475] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adN4AOZ85qg4jLsRpQxNgAAAAIY"]
[Mon Apr 06 17:08:16.927501 2026] [:error] [pid 35686:tid 35708] [client 4.231.218.60:44529] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "adN4AMMKdea6oORd2fyJ6QAAAAw"]
[Mon Apr 06 17:08:17.558059 2026] [:error] [pid 35688:tid 35757] [client 4.231.218.60:38238] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adN4AeZ85qg4jLsRpQxNggAAAIc"]
[Mon Apr 06 17:08:17.655747 2026] [:error] [pid 35786:tid 35813] [client 4.231.218.60:54751] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "adN4AWgkfCKTaLhwaKQAYwAAANQ"]
[Mon Apr 06 17:08:18.347146 2026] [:error] [pid 10280:tid 10296] [client 4.231.218.60:48797] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adN4Al8QUJkf8g-BFfOc9AAAAc0"]
[Mon Apr 06 17:08:18.676279 2026] [:error] [pid 35786:tid 35797] [client 4.231.218.60:29968] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "adN4AmgkfCKTaLhwaKQAaAAAAMQ"]
[Mon Apr 06 17:08:19.161792 2026] [:error] [pid 9413:tid 9437] [client 4.231.218.60:65520] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adN4A3llvEK3chn01wGivAAAAZY"]
[Mon Apr 06 17:08:19.801422 2026] [:error] [pid 9442:tid 9461] [client 4.231.218.60:59267] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "adN4A0PsNnAJTnmz6sZk3QAAARE"]
[Mon Apr 06 17:08:20.080001 2026] [:error] [pid 38562:tid 38566] [client 4.231.218.60:38234] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adN4BKeD6Ohe6wzRuy44FgAAAUE"]
[Mon Apr 06 17:08:20.446520 2026] [:error] [pid 38562:tid 38568] [client 4.231.218.60:44490] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "adN4BKeD6Ohe6wzRuy44FwAAAUM"]
[Mon Apr 06 17:08:21.197148 2026] [:error] [pid 35786:tid 35815] [client 4.231.218.60:56199] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "adN4BWgkfCKTaLhwaKQAawAAANY"]
[Mon Apr 06 17:08:21.246283 2026] [:error] [pid 35786:tid 35808] [client 4.231.218.60:38256] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adN4BWgkfCKTaLhwaKQAbAAAAM8"]
[Mon Apr 06 17:08:22.348611 2026] [:error] [pid 38562:tid 38575] [client 4.231.218.60:56212] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "adN4BqeD6Ohe6wzRuy44HwAAAUo"]
[Mon Apr 06 17:08:22.861512 2026] [:error] [pid 38562:tid 38587] [client 4.231.218.60:59326] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "adN4BqeD6Ohe6wzRuy44JAAAAVY"]
[Mon Apr 06 17:08:23.245814 2026] [:error] [pid 38562:tid 38580] [client 4.231.218.60:58045] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "adN4B6eD6Ohe6wzRuy44KQAAAU8"]
[Mon Apr 06 17:08:24.156431 2026] [:error] [pid 9442:tid 9445] [client 4.231.218.60:48819] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "adN4CEPsNnAJTnmz6sZk5AAAAQE"]
[Mon Apr 06 17:08:24.439052 2026] [:error] [pid 35686:tid 35703] [client 4.231.218.60:29462] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "adN4CMMKdea6oORd2fyJ8wAAAAc"]
[Mon Apr 06 17:08:24.925389 2026] [:error] [pid 35686:tid 35718] [client 4.231.218.60:59347] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "adN4CMMKdea6oORd2fyJ-QAAABY"]
[Mon Apr 06 17:08:25.290105 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:49529] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "adN4CcMKdea6oORd2fyJ_QAAABc"]
[Mon Apr 06 17:08:25.883310 2026] [:error] [pid 38562:tid 38570] [client 4.231.218.60:48779] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "adN4CaeD6Ohe6wzRuy44NQAAAUU"]
[Mon Apr 06 17:08:26.680166 2026] [:error] [pid 10280:tid 10286] [client 4.231.218.60:49526] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "adN4Cl8QUJkf8g-BFfOc-gAAAcM"]
[Mon Apr 06 17:08:26.919976 2026] [:error] [pid 9442:tid 9446] [client 4.231.218.60:37828] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "adN4CkPsNnAJTnmz6sZk5QAAAQI"]
[Mon Apr 06 17:08:27.649280 2026] [:error] [pid 35688:tid 35773] [client 4.231.218.60:54748] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "adN4C-Z85qg4jLsRpQxNigAAAJc"]
[Mon Apr 06 17:08:27.836462 2026] [:error] [pid 35687:tid 35733] [client 4.231.218.60:54766] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "adN4C53LtDozV0i8Bis-EQAAAEo"]
[Mon Apr 06 17:08:28.625424 2026] [:error] [pid 35688:tid 35766] [client 4.231.218.60:39241] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "adN4DOZ85qg4jLsRpQxNiwAAAJA"]
[Mon Apr 06 17:08:28.750300 2026] [:error] [pid 9442:tid 9459] [client 4.231.218.60:37849] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "adN4DEPsNnAJTnmz6sZk6QAAAQ8"]
[Mon Apr 06 17:08:30.151093 2026] [:error] [pid 35687:tid 35724] [client 4.231.218.60:54730] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "adN4Dp3LtDozV0i8Bis-FgAAAEE"]
[Mon Apr 06 17:08:30.207743 2026] [:error] [pid 38562:tid 38573] [client 4.231.218.60:42027] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "adN4DqeD6Ohe6wzRuy44PwAAAUg"]
[Mon Apr 06 17:08:31.300812 2026] [:error] [pid 38562:tid 38574] [client 4.231.218.60:48801] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "adN4D6eD6Ohe6wzRuy44QwAAAUk"]
[Mon Apr 06 17:08:31.650486 2026] [:error] [pid 9413:tid 9432] [client 4.231.218.60:54735] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "adN4D3llvEK3chn01wGiwwAAAZE"]
[Mon Apr 06 17:08:32.220131 2026] [:error] [pid 35687:tid 35732] [client 4.231.218.60:49511] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "adN4EJ3LtDozV0i8Bis-HgAAAEk"]
[Mon Apr 06 17:08:39.389255 2026] [:error] [pid 35687:tid 35732] [client 4.231.218.60:31609] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adN4F53LtDozV0i8Bis-LAAAAEk"]
[Mon Apr 06 17:08:39.625598 2026] [:error] [pid 38562:tid 38580] [client 4.231.218.60:37851] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adN4F6eD6Ohe6wzRuy44XgAAAU8"]
[Mon Apr 06 17:08:40.293884 2026] [:error] [pid 35687:tid 35741] [client 4.231.218.60:59377] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adN4GJ3LtDozV0i8Bis-LQAAAFI"]
[Mon Apr 06 17:08:40.742110 2026] [:error] [pid 10280:tid 10292] [client 4.231.218.60:58039] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adN4GF8QUJkf8g-BFfOdEAAAAck"]
[Mon Apr 06 17:08:41.589129 2026] [:error] [pid 10280:tid 10284] [client 4.231.218.60:37853] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adN4GV8QUJkf8g-BFfOdEwAAAcE"]
[Mon Apr 06 17:08:42.294683 2026] [:error] [pid 10280:tid 10302] [client 4.231.218.60:52860] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adN4Gl8QUJkf8g-BFfOdFQAAAdM"]
[Mon Apr 06 17:08:42.386817 2026] [:error] [pid 35686:tid 35702] [client 4.231.218.60:56253] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adN4GsMKdea6oORd2fyKQwAAAAY"]
[Mon Apr 06 17:08:43.401578 2026] [:error] [pid 35786:tid 35803] [client 4.231.218.60:38913] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adN4G2gkfCKTaLhwaKQAegAAAMo"]
[Mon Apr 06 17:08:43.763128 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:31601] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adN4G8MKdea6oORd2fyKUQAAABc"]
[Mon Apr 06 17:08:44.750424 2026] [:error] [pid 35686:tid 35710] [client 4.231.218.60:47717] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adN4HMMKdea6oORd2fyKWgAAAA4"]
[Mon Apr 06 17:08:45.336986 2026] [:error] [pid 9442:tid 9445] [client 4.231.218.60:58661] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adN4HUPsNnAJTnmz6sZlBQAAAQE"]
[Mon Apr 06 17:08:45.866297 2026] [:error] [pid 9442:tid 9458] [client 4.231.218.60:32081] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adN4HUPsNnAJTnmz6sZlCQAAAQ4"]
[Mon Apr 06 17:08:46.561844 2026] [:error] [pid 35686:tid 35703] [client 4.231.218.60:47691] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adN4HsMKdea6oORd2fyKZAAAAAc"]
[Mon Apr 06 17:08:46.916112 2026] [:error] [pid 35686:tid 35696] [client 4.231.218.60:38972] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adN4HsMKdea6oORd2fyKZwAAAAA"]
[Mon Apr 06 17:08:47.253528 2026] [:error] [pid 9413:tid 9439] [client 4.231.218.60:58627] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adN4H3llvEK3chn01wGi0AAAAZg"]
[Mon Apr 06 17:08:48.832121 2026] [:error] [pid 38562:tid 38569] [client 4.231.218.60:57395] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adN4IKeD6Ohe6wzRuy44aQAAAUQ"]
[Mon Apr 06 17:08:49.546035 2026] [:error] [pid 9413:tid 9425] [client 4.231.218.60:58642] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adN4IXllvEK3chn01wGi0wAAAYo"]
[Mon Apr 06 17:08:49.599659 2026] [:error] [pid 38562:tid 38578] [client 4.231.218.60:31601] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adN4IaeD6Ohe6wzRuy44bwAAAU0"]
[Mon Apr 06 17:08:50.595284 2026] [:error] [pid 38562:tid 38583] [client 4.231.218.60:4186] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adN4IqeD6Ohe6wzRuy44cAAAAVI"]
[Mon Apr 06 17:08:51.666827 2026] [:error] [pid 38562:tid 38584] [client 4.231.218.60:51177] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adN4I6eD6Ohe6wzRuy44cwAAAVM"]
[Mon Apr 06 17:08:52.125638 2026] [:error] [pid 38562:tid 38572] [client 4.231.218.60:32530] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adN4JKeD6Ohe6wzRuy44dQAAAUc"]
[Mon Apr 06 17:08:52.490811 2026] [:error] [pid 35688:tid 35764] [client 4.231.218.60:32525] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adN4JOZ85qg4jLsRpQxNmwAAAI4"]
[Mon Apr 06 17:08:53.503930 2026] [:error] [pid 9413:tid 9429] [client 4.231.218.60:46873] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adN4JXllvEK3chn01wGi2AAAAY4"]
[Mon Apr 06 17:08:54.287364 2026] [:error] [pid 35686:tid 35714] [client 4.231.218.60:4591] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adN4JsMKdea6oORd2fyKgQAAABI"]
[Mon Apr 06 17:08:55.227602 2026] [:error] [pid 35686:tid 35717] [client 4.231.218.60:51141] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adN4J8MKdea6oORd2fyKgwAAABU"]
[Mon Apr 06 17:08:55.338741 2026] [:error] [pid 9442:tid 9466] [client 4.231.218.60:31574] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adN4J0PsNnAJTnmz6sZlDwAAARY"]
[Mon Apr 06 17:08:56.082469 2026] [:error] [pid 9442:tid 9468] [client 4.231.218.60:45821] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adN4KEPsNnAJTnmz6sZlEAAAARg"]
[Mon Apr 06 17:08:56.230444 2026] [:error] [pid 35686:tid 35702] [client 4.231.218.60:31568] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adN4KMMKdea6oORd2fyKigAAAAY"]
[Mon Apr 06 17:08:58.839099 2026] [:error] [pid 10280:tid 10302] [client 4.231.218.60:51174] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adN4Kl8QUJkf8g-BFfOdMAAAAdM"]
[Mon Apr 06 17:08:59.164874 2026] [:error] [pid 38562:tid 38565] [client 4.231.218.60:57367] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adN4K6eD6Ohe6wzRuy44hQAAAUA"]
[Mon Apr 06 17:08:59.577410 2026] [:error] [pid 10280:tid 10297] [client 4.231.218.60:47720] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adN4K18QUJkf8g-BFfOdMwAAAc4"]
[Mon Apr 06 17:09:00.103186 2026] [:error] [pid 35688:tid 35770] [client 4.231.218.60:58045] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adN4LOZ85qg4jLsRpQxNnwAAAJQ"]
[Mon Apr 06 17:09:00.384895 2026] [:error] [pid 9413:tid 9416] [client 4.231.218.60:45786] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adN4LHllvEK3chn01wGi4gAAAYE"]
[Mon Apr 06 17:09:00.921156 2026] [:error] [pid 35686:tid 35718] [client 4.231.218.60:52827] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adN4LMMKdea6oORd2fyKlwAAABY"]
[Mon Apr 06 17:09:01.711617 2026] [:error] [pid 35686:tid 35708] [client 4.231.218.60:46855] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adN4LcMKdea6oORd2fyKmwAAAAw"]
[Mon Apr 06 17:09:01.811977 2026] [:error] [pid 10280:tid 10294] [client 4.231.218.60:57382] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adN4LV8QUJkf8g-BFfOdOgAAAcs"]
[Mon Apr 06 17:09:02.650180 2026] [:error] [pid 35786:tid 35810] [client 4.231.218.60:34385] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adN4LmgkfCKTaLhwaKQAhwAAANE"]
[Mon Apr 06 17:09:02.739139 2026] [:error] [pid 10280:tid 10299] [client 4.231.218.60:46863] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adN4Ll8QUJkf8g-BFfOdPAAAAdA"]
[Mon Apr 06 17:09:03.845281 2026] [:error] [pid 35687:tid 35727] [client 4.231.218.60:57384] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adN4L53LtDozV0i8Bis-PAAAAEQ"]
[Mon Apr 06 17:09:04.064751 2026] [:error] [pid 38562:tid 38582] [client 4.231.218.60:28013] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adN4MKeD6Ohe6wzRuy44jAAAAVE"]
[Mon Apr 06 17:09:04.894453 2026] [:error] [pid 35786:tid 35807] [client 4.231.218.60:38934] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adN4MGgkfCKTaLhwaKQAkQAAAM4"]
[Mon Apr 06 17:09:05.168053 2026] [:error] [pid 35688:tid 35752] [client 4.231.218.60:46874] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adN4MeZ85qg4jLsRpQxNpAAAAII"]
[Mon Apr 06 17:09:06.126117 2026] [:error] [pid 35687:tid 35737] [client 4.231.218.60:46850] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adN4Mp3LtDozV0i8Bis-PgAAAE4"]
[Mon Apr 06 17:09:06.194446 2026] [:error] [pid 35786:tid 35804] [client 4.231.218.60:34372] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adN4MmgkfCKTaLhwaKQAkwAAAMs"]
[Mon Apr 06 17:09:07.629698 2026] [:error] [pid 9413:tid 9419] [client 4.231.218.60:34381] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adN4M3llvEK3chn01wGi7QAAAYQ"]
[Mon Apr 06 17:09:09.406729 2026] [:error] [pid 35686:tid 35697] [client 4.231.218.60:43461] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adN4NcMKdea6oORd2fyKpQAAAAE"]
[Mon Apr 06 17:09:10.428685 2026] [:error] [pid 35686:tid 35719] [client 4.231.218.60:34374] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adN4NsMKdea6oORd2fyKpwAAABc"]
[Mon Apr 06 17:09:10.680755 2026] [:error] [pid 38562:tid 38577] [client 4.231.218.60:4550] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN4NqeD6Ohe6wzRuy44pwAAAUw"]
[Mon Apr 06 17:09:12.082777 2026] [:error] [pid 38562:tid 38578] [client 4.231.218.60:4584] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adN4OKeD6Ohe6wzRuy44swAAAU0"]
[Mon Apr 06 17:09:12.109682 2026] [:error] [pid 38562:tid 38585] [client 4.231.218.60:61746] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN4OKeD6Ohe6wzRuy44tQAAAVQ"]
[Mon Apr 06 17:09:15.867478 2026] [:error] [pid 35686:tid 35698] [client 4.231.218.60:34406] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adN4O8MKdea6oORd2fyKtwAAAAI"]
[Mon Apr 06 17:09:16.121124 2026] [:error] [pid 35686:tid 35715] [client 4.231.218.60:4597] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN4PMMKdea6oORd2fyKuwAAABM"]
[Mon Apr 06 17:09:17.803746 2026] [:error] [pid 35687:tid 35740] [client 4.231.218.60:51098] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adN4PZ3LtDozV0i8Bis-QQAAAFE"]
[Mon Apr 06 17:09:19.976902 2026] [:error] [pid 35687:tid 35733] [client 4.231.218.60:39274] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN4P53LtDozV0i8Bis-RwAAAEo"]
[Mon Apr 06 17:09:22.860874 2026] [:error] [pid 35686:tid 35712] [client 4.231.218.60:4586] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adN4QsMKdea6oORd2fyK3QAAABA"]
[Mon Apr 06 17:09:23.695962 2026] [:error] [pid 35786:tid 35801] [client 4.231.218.60:43479] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN4Q2gkfCKTaLhwaKQAnAAAAMg"]
[Mon Apr 06 17:09:25.246892 2026] [:error] [pid 35786:tid 35795] [client 4.231.218.60:46859] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adN4RWgkfCKTaLhwaKQAnQAAAMI"]
[Mon Apr 06 17:09:26.251292 2026] [:error] [pid 35688:tid 35769] [client 4.231.218.60:43502] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adN4RuZ85qg4jLsRpQxNuQAAAJM"]
[Mon Apr 06 17:09:26.999384 2026] [:error] [pid 35687:tid 35724] [client 4.231.218.60:33935] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN4Rp3LtDozV0i8Bis-TAAAAEE"]
[Mon Apr 06 17:09:27.528313 2026] [:error] [pid 35688:tid 35757] [client 4.231.218.60:34403] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adN4R-Z85qg4jLsRpQxNwAAAAIc"]
[Mon Apr 06 17:09:28.651184 2026] [:error] [pid 35786:tid 35809] [client 4.231.218.60:33927] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adN4SGgkfCKTaLhwaKQAoAAAANA"]
[Mon Apr 06 17:09:28.751990 2026] [:error] [pid 38562:tid 38582] [client 4.231.218.60:34408] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN4SKeD6Ohe6wzRuy44zgAAAVE"]
[Mon Apr 06 17:09:29.652266 2026] [:error] [pid 35688:tid 35768] [client 4.231.218.60:55636] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adN4SeZ85qg4jLsRpQxNwwAAAJI"]
[Mon Apr 06 17:09:29.799532 2026] [:error] [pid 35688:tid 35761] [client 4.231.218.60:4170] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adN4SeZ85qg4jLsRpQxNxAAAAIs"]
[Mon Apr 06 17:09:30.785726 2026] [:error] [pid 38562:tid 38566] [client 4.231.218.60:27981] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adN4SqeD6Ohe6wzRuy441QAAAUE"]
[Mon Apr 06 17:09:30.863760 2026] [:error] [pid 10280:tid 10290] [client 4.231.218.60:31051] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adN4Sl8QUJkf8g-BFfOdbwAAAcc"]
[Mon Apr 06 17:09:31.704057 2026] [:error] [pid 9442:tid 9462] [client 4.231.218.60:4585] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adN4S0PsNnAJTnmz6sZlNAAAARI"]
[Mon Apr 06 17:09:31.953809 2026] [:error] [pid 35686:tid 35698] [client 4.231.218.60:28026] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adN4S8MKdea6oORd2fyK6gAAAAI"]
[Mon Apr 06 17:09:32.409214 2026] [:error] [pid 9442:tid 9444] [client 4.231.218.60:31075] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adN4TEPsNnAJTnmz6sZlNQAAAQA"]
[Mon Apr 06 17:09:32.944643 2026] [:error] [pid 9413:tid 9425] [client 4.231.218.60:54100] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adN4THllvEK3chn01wGjBAAAAYo"]
[Mon Apr 06 17:09:33.010706 2026] [:error] [pid 35688:tid 35760] [client 4.231.218.60:64914] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adN4TeZ85qg4jLsRpQxNyAAAAIo"]
[Mon Apr 06 17:09:34.045962 2026] [:error] [pid 35686:tid 35713] [client 4.231.218.60:61089] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adN4TsMKdea6oORd2fyK7QAAABE"]
[Mon Apr 06 17:09:34.063819 2026] [:error] [pid 38562:tid 38565] [client 4.231.218.60:48215] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adN4TqeD6Ohe6wzRuy444QAAAUA"]
[Mon Apr 06 17:09:34.857766 2026] [:error] [pid 10280:tid 10292] [client 4.231.218.60:64900] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adN4Tl8QUJkf8g-BFfOdeQAAAck"]
[Mon Apr 06 17:09:34.883314 2026] [:error] [pid 10280:tid 10305] [client 4.231.218.60:27968] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adN4Tl8QUJkf8g-BFfOdegAAAdY"]
[Mon Apr 06 17:09:35.607721 2026] [:error] [pid 38562:tid 38588] [client 4.231.218.60:33962] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adN4T6eD6Ohe6wzRuy446AAAAVc"]
[Mon Apr 06 17:09:35.747744 2026] [:error] [pid 38562:tid 38579] [client 4.231.218.60:55646] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adN4T6eD6Ohe6wzRuy446gAAAU4"]
[Mon Apr 06 17:09:36.256331 2026] [:error] [pid 35686:tid 35702] [client 4.231.218.60:51074] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adN4UMMKdea6oORd2fyK8QAAAAY"]
[Mon Apr 06 17:09:36.716293 2026] [:error] [pid 10280:tid 10285] [client 4.231.218.60:51102] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adN4UF8QUJkf8g-BFfOdfQAAAcI"]
[Mon Apr 06 17:09:37.139848 2026] [:error] [pid 35686:tid 35707] [client 4.231.218.60:35761] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adN4UcMKdea6oORd2fyK9wAAAAs"]
[Mon Apr 06 17:09:37.542527 2026] [:error] [pid 10280:tid 10301] [client 4.231.218.60:49387] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adN4UV8QUJkf8g-BFfOdgAAAAdI"]
[Mon Apr 06 17:09:38.259070 2026] [:error] [pid 35686:tid 35702] [client 4.231.218.60:61117] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adN4UsMKdea6oORd2fyK_QAAAAY"]
[Mon Apr 06 17:09:38.540451 2026] [:error] [pid 35688:tid 35765] [client 4.231.218.60:37853] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adN4UuZ85qg4jLsRpQxNzwAAAI8"]
[Mon Apr 06 17:09:44.128719 2026] [:error] [pid 9442:tid 9466] [client 4.231.218.60:49397] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adN4WEPsNnAJTnmz6sZlSAAAARY"]
[Mon Apr 06 17:09:44.245448 2026] [:error] [pid 35688:tid 35751] [client 4.231.218.60:49367] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adN4WOZ85qg4jLsRpQxN1wAAAIE"]
[Mon Apr 06 17:09:45.539305 2026] [:error] [pid 38562:tid 38577] [client 4.231.218.60:35774] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adN4WaeD6Ohe6wzRuy45BAAAAUw"]
[Mon Apr 06 17:09:45.913839 2026] [:error] [pid 38562:tid 38566] [client 4.231.218.60:49404] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adN4WaeD6Ohe6wzRuy45BgAAAUE"]
[Mon Apr 06 17:09:46.664764 2026] [:error] [pid 9413:tid 9423] [client 4.231.218.60:4830] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adN4WnllvEK3chn01wGjEgAAAYg"]
[Mon Apr 06 17:09:47.749610 2026] [:error] [pid 35687:tid 35739] [client 4.231.218.60:48189] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adN4W53LtDozV0i8Bis-XAAAAFA"]
[Mon Apr 06 17:09:48.115180 2026] [:error] [pid 38562:tid 38583] [client 4.231.218.60:51655] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adN4XKeD6Ohe6wzRuy45CwAAAVI"]
[Mon Apr 06 17:09:49.528449 2026] [:error] [pid 9413:tid 9428] [client 4.231.218.60:61142] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adN4XXllvEK3chn01wGjGwAAAY0"]
[Mon Apr 06 17:09:49.629084 2026] [:error] [pid 9413:tid 9436] [client 4.231.218.60:41478] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adN4XXllvEK3chn01wGjHAAAAZU"]
[Mon Apr 06 17:09:50.686304 2026] [:error] [pid 35687:tid 35746] [client 4.231.218.60:45405] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adN4Xp3LtDozV0i8Bis-ZAAAAFc"]
[Mon Apr 06 17:09:51.856278 2026] [:error] [pid 35687:tid 35726] [client 4.231.218.60:61174] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adN4X53LtDozV0i8Bis-bAAAAEM"]
[Mon Apr 06 17:09:51.900070 2026] [:error] [pid 35687:tid 35733] [client 4.231.218.60:54665] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adN4X53LtDozV0i8Bis-bQAAAEo"]
[Mon Apr 06 17:09:52.936747 2026] [:error] [pid 10280:tid 10296] [client 4.231.218.60:61134] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adN4YF8QUJkf8g-BFfOdkwAAAc0"]
[Mon Apr 06 17:09:53.731934 2026] [:error] [pid 10280:tid 10291] [client 4.231.218.60:30565] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adN4YV8QUJkf8g-BFfOdlwAAAcg"]
[Mon Apr 06 17:09:55.409009 2026] [:error] [pid 9442:tid 9454] [client 4.231.218.60:51679] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adN4Y0PsNnAJTnmz6sZlTgAAAQo"]
[Mon Apr 06 17:09:55.808387 2026] [:error] [pid 38562:tid 38574] [client 4.231.218.60:4319] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adN4Y6eD6Ohe6wzRuy45HQAAAUk"]
[Mon Apr 06 17:09:57.797324 2026] [:error] [pid 9442:tid 9466] [client 4.231.218.60:38880] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adN4ZUPsNnAJTnmz6sZlUQAAARY"]
[Mon Apr 06 17:09:58.654949 2026] [:error] [pid 35687:tid 35734] [client 4.231.218.60:34718] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adN4Zp3LtDozV0i8Bis-cgAAAEs"]
[Mon Apr 06 17:09:59.798300 2026] [:error] [pid 10280:tid 10298] [client 4.231.218.60:49396] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adN4Z18QUJkf8g-BFfOdtAAAAc8"]
[Mon Apr 06 17:10:00.104069 2026] [:error] [pid 10280:tid 10288] [client 4.231.218.60:38850] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adN4aF8QUJkf8g-BFfOdtQAAAcU"]
[Mon Apr 06 17:10:01.676210 2026] [:error] [pid 35688:tid 35771] [client 4.231.218.60:27473] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adN4aeZ85qg4jLsRpQxN4gAAAJU"]
[Mon Apr 06 17:10:02.884149 2026] [:error] [pid 10280:tid 10287] [client 4.231.218.60:51697] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adN4al8QUJkf8g-BFfOdvQAAAcQ"]
[Mon Apr 06 17:10:03.340070 2026] [:error] [pid 10280:tid 10286] [client 4.231.218.60:41489] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adN4a18QUJkf8g-BFfOdvgAAAcM"]
[Mon Apr 06 17:10:04.982604 2026] [:error] [pid 38562:tid 38578] [client 4.231.218.60:45380] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adN4bKeD6Ohe6wzRuy45iQAAAU0"]
[Mon Apr 06 17:10:05.961801 2026] [:error] [pid 38562:tid 38572] [client 4.231.218.60:34744] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adN4baeD6Ohe6wzRuy45jwAAAUc"]
[Mon Apr 06 17:10:06.702102 2026] [:error] [pid 9442:tid 9459] [client 4.231.218.60:41513] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adN4bkPsNnAJTnmz6sZlXAAAAQ8"]
[Mon Apr 06 17:10:08.940144 2026] [:error] [pid 10280:tid 10297] [client 4.231.218.60:33076] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adN4cF8QUJkf8g-BFfOdzQAAAc4"]
[Mon Apr 06 17:10:12.803515 2026] [:error] [pid 35687:tid 35723] [client 4.231.218.60:33071] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adN4dJ3LtDozV0i8Bis-fwAAAEA"]
[Mon Apr 06 17:10:13.053852 2026] [:error] [pid 35686:tid 35714] [client 4.231.218.60:35390] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adN4dcMKdea6oORd2fyLhwAAABI"]
[Mon Apr 06 17:10:15.866250 2026] [:error] [pid 35688:tid 35758] [client 4.231.218.60:36166] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adN4d-Z85qg4jLsRpQxN6gAAAIg"]
[Mon Apr 06 17:10:17.095487 2026] [:error] [pid 35687:tid 35741] [client 4.231.218.60:46326] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adN4eZ3LtDozV0i8Bis-ngAAAFI"]
[Mon Apr 06 17:10:18.919620 2026] [:error] [pid 10280:tid 10289] [client 4.231.218.60:35372] [client 4.231.218.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adN4el8QUJkf8g-BFfOd3gAAAcY"]
[Mon Apr 06 17:48:59.535447 2026] [:error] [pid 35786:tid 35799] [client 43.159.145.153:47046] [client 43.159.145.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adOBi2gkfCKTaLhwaKQIXAAAAMY"]
[Mon Apr 06 19:23:47.942982 2026] [:error] [pid 9442:tid 9463] [client 62.197.144.85:43880] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adOXw0PsNnAJTnmz6sad6AAAARM"]
[Mon Apr 06 19:23:50.023725 2026] [:error] [pid 35686:tid 35712] [client 62.197.144.85:50758] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adOXxsMKdea6oORd2fzJXAAAABA"]
[Mon Apr 06 19:23:53.379200 2026] [:error] [pid 35686:tid 35707] [client 62.197.144.85:50786] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adOXycMKdea6oORd2fzJZQAAAAs"]
[Mon Apr 06 19:23:55.491191 2026] [:error] [pid 35687:tid 35748] [client 62.197.144.85:50794] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adOXy53LtDozV0i8BitgGgAAAFg"]
[Mon Apr 06 19:24:00.003752 2026] [:error] [pid 35688:tid 35774] [client 62.197.144.85:48928] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adOX0OZ85qg4jLsRpQyHhgAAAJg"]
[Mon Apr 06 19:24:01.314697 2026] [:error] [pid 1827:tid 1838] [client 62.197.144.85:48936] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adOX0eVeb6S_DnjZ2xEAjAAAAgk"]
[Mon Apr 06 19:24:02.164880 2026] [:error] [pid 35686:tid 35712] [client 62.197.144.85:48948] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adOX0sMKdea6oORd2fzJbAAAABA"]
[Mon Apr 06 19:24:02.990564 2026] [:error] [pid 35686:tid 35716] [client 62.197.144.85:48952] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adOX0sMKdea6oORd2fzJbQAAABQ"]
[Mon Apr 06 19:24:03.814251 2026] [:error] [pid 38562:tid 38580] [client 62.197.144.85:48964] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adOX06eD6Ohe6wzRuy5xcAAAAU8"]
[Mon Apr 06 19:24:04.660832 2026] [:error] [pid 10280:tid 10286] [client 62.197.144.85:48994] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adOX1F8QUJkf8g-BFfPcHwAAAcM"]
[Mon Apr 06 19:24:05.917219 2026] [:error] [pid 38562:tid 38579] [client 62.197.144.85:36456] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adOX1aeD6Ohe6wzRuy5xdQAAAU4"]
[Mon Apr 06 19:24:07.626675 2026] [:error] [pid 10280:tid 10297] [client 62.197.144.85:36476] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "adOX118QUJkf8g-BFfPcKQAAAc4"]
[Mon Apr 06 19:24:09.272820 2026] [:error] [pid 35688:tid 35754] [client 62.197.144.85:36488] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adOX2eZ85qg4jLsRpQyHuQAAAIQ"]
[Mon Apr 06 19:24:10.513363 2026] [:error] [pid 10280:tid 10304] [client 62.197.144.85:36496] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adOX2l8QUJkf8g-BFfPcLwAAAdU"]
[Mon Apr 06 19:24:11.768930 2026] [:error] [pid 10280:tid 10286] [client 62.197.144.85:36508] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adOX218QUJkf8g-BFfPcPwAAAcM"]
[Mon Apr 06 19:24:15.064718 2026] [:error] [pid 10280:tid 10283] [client 62.197.144.85:36514] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adOX318QUJkf8g-BFfPcSgAAAcA"]
[Mon Apr 06 19:24:16.302846 2026] [:error] [pid 9442:tid 9466] [client 62.197.144.85:48552] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adOX4EPsNnAJTnmz6saeswAAARY"]
[Mon Apr 06 19:24:17.956613 2026] [:error] [pid 38562:tid 38584] [client 62.197.144.85:48574] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adOX4aeD6Ohe6wzRuy5xjgAAAVM"]
[Mon Apr 06 19:24:23.007655 2026] [:error] [pid 35687:tid 35723] [client 62.197.144.85:48622] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adOX553LtDozV0i8BitgJwAAAEA"]
[Mon Apr 06 19:24:25.530689 2026] [:error] [pid 9442:tid 9449] [client 62.197.144.85:48648] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adOX6UPsNnAJTnmz6sae5gAAAQU"]
[Mon Apr 06 19:24:26.793458 2026] [:error] [pid 9442:tid 9448] [client 62.197.144.85:36798] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adOX6kPsNnAJTnmz6sae7QAAAQQ"]
[Mon Apr 06 19:24:28.064529 2026] [:error] [pid 9442:tid 9444] [client 62.197.144.85:36812] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adOX7EPsNnAJTnmz6sae-AAAAQA"]
[Mon Apr 06 19:24:28.889330 2026] [:error] [pid 1827:tid 1852] [client 62.197.144.85:36826] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adOX7OVeb6S_DnjZ2xEAvQAAAhc"]
[Mon Apr 06 19:24:29.723364 2026] [:error] [pid 10280:tid 10299] [client 62.197.144.85:36840] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adOX7V8QUJkf8g-BFfPcagAAAdA"]
[Mon Apr 06 19:24:31.806877 2026] [:error] [pid 9413:tid 9416] [client 62.197.144.85:36856] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adOX73llvEK3chn01wG7IgAAAYE"]
[Mon Apr 06 19:24:32.638684 2026] [:error] [pid 35688:tid 35767] [client 62.197.144.85:36894] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adOX8OZ85qg4jLsRpQyIOwAAAJE"]
[Mon Apr 06 19:24:33.469661 2026] [:error] [pid 10280:tid 10286] [client 62.197.144.85:36902] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adOX8V8QUJkf8g-BFfPcdwAAAcM"]
[Mon Apr 06 19:24:37.591575 2026] [:error] [pid 38562:tid 38567] [client 62.197.144.85:36930] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adOX9aeD6Ohe6wzRuy5xvAAAAUI"]
[Mon Apr 06 19:24:39.650758 2026] [:error] [pid 38562:tid 38589] [client 62.197.144.85:39734] [client 62.197.144.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.197.144.85, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adOX96eD6Ohe6wzRuy5xwwAAAVg"]
[Mon Apr 06 19:24:44.630500 2026] [:error] [pid 38562:tid 38572] [client 62.197.144.85:39734] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adOX_KeD6Ohe6wzRuy5x2AAAAUc"]
[Mon Apr 06 19:24:46.265498 2026] [:error] [pid 9442:tid 9461] [client 62.197.144.85:60296] [client 62.197.144.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.197.144.85, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adOX_kPsNnAJTnmz6safJwAAARE"]
[Mon Apr 06 19:24:47.084908 2026] [:error] [pid 9442:tid 9451] [client 62.197.144.85:60296] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "adOX_0PsNnAJTnmz6safKQAAAQc"]
[Mon Apr 06 19:24:51.224011 2026] [:error] [pid 9442:tid 9456] [client 62.197.144.85:60356] [client 62.197.144.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adOYA0PsNnAJTnmz6safTwAAAQw"]
[Mon Apr 06 19:24:53.297443 2026] [:error] [pid 35688:tid 35767] [client 62.197.144.85:60410] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-header.php"] [unique_id "adOYBeZ85qg4jLsRpQyIhwAAAJE"]
[Mon Apr 06 19:24:54.114716 2026] [:error] [pid 9442:tid 9458] [client 62.197.144.85:60478] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-header.php"] [unique_id "adOYBkPsNnAJTnmz6safXwAAAQ4"]
[Mon Apr 06 19:24:54.932149 2026] [:error] [pid 10280:tid 10293] [client 62.197.144.85:60498] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-header.php"] [unique_id "adOYBl8QUJkf8g-BFfPc1gAAAco"]
[Mon Apr 06 19:24:55.751142 2026] [:error] [pid 38562:tid 38583] [client 62.197.144.85:57618] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-header.php"] [unique_id "adOYB6eD6Ohe6wzRuy5yEQAAAVI"]
[Mon Apr 06 19:24:56.582604 2026] [:error] [pid 35688:tid 35762] [client 62.197.144.85:57644] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-header.php"] [unique_id "adOYCOZ85qg4jLsRpQyIlgAAAIw"]
[Mon Apr 06 19:24:57.420801 2026] [:error] [pid 9442:tid 9460] [client 62.197.144.85:57662] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adOYCUPsNnAJTnmz6safbQAAARA"]
[Mon Apr 06 19:24:58.240709 2026] [:error] [pid 9442:tid 9446] [client 62.197.144.85:57694] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adOYCkPsNnAJTnmz6safcwAAAQI"]
[Mon Apr 06 19:24:59.071650 2026] [:error] [pid 9442:tid 9453] [client 62.197.144.85:57756] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adOYC0PsNnAJTnmz6saffAAAAQk"]
[Mon Apr 06 19:24:59.887519 2026] [:error] [pid 9413:tid 9425] [client 62.197.144.85:57786] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adOYC3llvEK3chn01wG7LgAAAYo"]
[Mon Apr 06 19:25:00.779833 2026] [:error] [pid 1827:tid 1831] [client 62.197.144.85:57820] [client 62.197.144.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adOYDOVeb6S_DnjZ2xEA_AAAAgI"]
[Mon Apr 06 20:44:43.983322 2026] [:error] [pid 10280:tid 10288] [client 1.15.52.154:54618] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adOqu18QUJkf8g-BFfMGewAAAcU"]
[Mon Apr 06 22:03:54.546752 2026] [:error] [pid 35687:tid 35741] [client 195.86.27.10:37496] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adO9Sp3LtDozV0i8Bit9jgAAAFI"]
[Mon Apr 06 22:03:55.097055 2026] [:error] [pid 35786:tid 35808] [client 195.86.27.10:37510] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adO9S2gkfCKTaLhwaKQpqAAAAM8"]
[Mon Apr 06 22:03:55.986112 2026] [:error] [pid 35688:tid 35773] [client 195.86.27.10:39290] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adO9S-Z85qg4jLsRpQzplQAAAJc"]
[Mon Apr 06 22:03:56.526832 2026] [:error] [pid 10280:tid 10301] [client 195.86.27.10:39304] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adO9TF8QUJkf8g-BFfMlqQAAAdI"]
[Mon Apr 06 22:03:57.393176 2026] [:error] [pid 9442:tid 9464] [client 195.86.27.10:39310] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adO9TUPsNnAJTnmz6sYhQwAAARQ"]
[Mon Apr 06 22:03:57.715177 2026] [:error] [pid 10280:tid 10303] [client 195.86.27.10:39312] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adO9TV8QUJkf8g-BFfMlsAAAAdQ"]
[Mon Apr 06 22:03:57.924965 2026] [:error] [pid 35688:tid 35770] [client 195.86.27.10:39328] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adO9TeZ85qg4jLsRpQzplgAAAJQ"]
[Mon Apr 06 22:03:58.135789 2026] [:error] [pid 35686:tid 35709] [client 195.86.27.10:39336] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adO9TsMKdea6oORd2fztTwAAAA0"]
[Mon Apr 06 22:03:58.345891 2026] [:error] [pid 35688:tid 35755] [client 195.86.27.10:39346] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adO9TuZ85qg4jLsRpQzpmQAAAIU"]
[Mon Apr 06 22:03:58.556022 2026] [:error] [pid 35686:tid 35701] [client 195.86.27.10:39352] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adO9TsMKdea6oORd2fztUQAAAAU"]
[Mon Apr 06 22:03:58.876785 2026] [:error] [pid 10280:tid 10301] [client 195.86.27.10:39362] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adO9Tl8QUJkf8g-BFfMltAAAAdI"]
[Mon Apr 06 22:03:59.308054 2026] [:error] [pid 10280:tid 10304] [client 195.86.27.10:39370] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "adO9T18QUJkf8g-BFfMltwAAAdU"]
[Mon Apr 06 22:03:59.737186 2026] [:error] [pid 10280:tid 10300] [client 195.86.27.10:39376] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adO9T18QUJkf8g-BFfMluwAAAdE"]
[Mon Apr 06 22:04:00.059817 2026] [:error] [pid 10280:tid 10301] [client 195.86.27.10:39390] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adO9UF8QUJkf8g-BFfMlvQAAAdI"]
[Mon Apr 06 22:04:00.387561 2026] [:error] [pid 1827:tid 1838] [client 195.86.27.10:39398] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adO9UOVeb6S_DnjZ2xEtFwAAAgk"]
[Mon Apr 06 22:04:01.250044 2026] [:error] [pid 35687:tid 35741] [client 195.86.27.10:39402] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adO9UZ3LtDozV0i8Bit9nQAAAFI"]
[Mon Apr 06 22:04:01.568997 2026] [:error] [pid 35688:tid 35763] [client 195.86.27.10:39408] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adO9UeZ85qg4jLsRpQzpngAAAI0"]
[Mon Apr 06 22:04:02.014738 2026] [:error] [pid 10280:tid 10298] [client 195.86.27.10:39418] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adO9Ul8QUJkf8g-BFfMlxgAAAc8"]
[Mon Apr 06 22:04:02.333802 2026] [:error] [pid 10280:tid 10305] [client 195.86.27.10:39434] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adO9Ul8QUJkf8g-BFfMlyQAAAdY"]
[Mon Apr 06 22:04:02.986178 2026] [:error] [pid 10280:tid 10289] [client 195.86.27.10:39450] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adO9Ul8QUJkf8g-BFfMl0wAAAcY"]
[Mon Apr 06 22:04:03.304723 2026] [:error] [pid 35688:tid 35752] [client 195.86.27.10:39466] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adO9U-Z85qg4jLsRpQzpoAAAAII"]
[Mon Apr 06 22:04:03.623676 2026] [:error] [pid 1827:tid 1839] [client 195.86.27.10:39472] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adO9U-Veb6S_DnjZ2xEtGwAAAgo"]
[Mon Apr 06 22:04:03.832843 2026] [:error] [pid 9442:tid 9462] [client 195.86.27.10:39476] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adO9U0PsNnAJTnmz6sYhSQAAARI"]
[Mon Apr 06 22:04:04.042489 2026] [:error] [pid 9442:tid 9455] [client 195.86.27.10:39478] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adO9VEPsNnAJTnmz6sYhSgAAAQs"]
[Mon Apr 06 22:04:04.584498 2026] [:error] [pid 9442:tid 9457] [client 195.86.27.10:39484] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adO9VEPsNnAJTnmz6sYhUAAAAQ0"]
[Mon Apr 06 22:04:04.794296 2026] [:error] [pid 35687:tid 35745] [client 195.86.27.10:39498] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adO9VJ3LtDozV0i8Bit9ngAAAFY"]
[Mon Apr 06 22:04:05.015878 2026] [:error] [pid 1827:tid 1848] [client 195.86.27.10:39506] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adO9VeVeb6S_DnjZ2xEtHgAAAhM"]
[Mon Apr 06 22:04:06.108499 2026] [:error] [pid 1827:tid 1829] [client 195.86.27.10:39510] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adO9VuVeb6S_DnjZ2xEtKwAAAgA"]
[Mon Apr 06 22:04:06.661416 2026] [:error] [pid 1827:tid 1846] [client 195.86.27.10:38134] [client 195.86.27.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adO9VuVeb6S_DnjZ2xEtMQAAAhE"]
[Mon Apr 06 22:04:07.989937 2026] [:error] [pid 1827:tid 1843] [client 195.86.27.10:38134] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adO9V-Veb6S_DnjZ2xEtPQAAAg4"]
[Mon Apr 06 22:04:08.417938 2026] [:error] [pid 10280:tid 10294] [client 195.86.27.10:38136] [client 195.86.27.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adO9WF8QUJkf8g-BFfMl3gAAAcs"]
[Mon Apr 06 22:04:08.639363 2026] [:error] [pid 10280:tid 10303] [client 195.86.27.10:38136] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "adO9WF8QUJkf8g-BFfMl4AAAAdQ"]
[Mon Apr 06 22:04:09.733574 2026] [:error] [pid 10280:tid 10301] [client 195.86.27.10:38146] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adO9WV8QUJkf8g-BFfMl6wAAAdI"]
[Mon Apr 06 22:04:10.846625 2026] [:error] [pid 10280:tid 10304] [client 195.86.27.10:38148] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adO9Wl8QUJkf8g-BFfMl9QAAAdU"]
[Mon Apr 06 22:04:11.274465 2026] [:error] [pid 9442:tid 9465] [client 195.86.27.10:38162] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adO9W0PsNnAJTnmz6sYhWgAAARU"]
[Mon Apr 06 22:04:11.811084 2026] [:error] [pid 9442:tid 9463] [client 195.86.27.10:38164] [client 195.86.27.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adO9W0PsNnAJTnmz6sYhXwAAARM"]
[Mon Apr 06 22:04:11.919613 2026] [:error] [pid 9442:tid 9447] [client 195.86.27.10:38164] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adO9W0PsNnAJTnmz6sYhYQAAAQM"]
[Mon Apr 06 22:04:13.994857 2026] [:error] [pid 9442:tid 9456] [client 195.86.27.10:38172] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adO9XUPsNnAJTnmz6sYhhAAAAQw"]
[Mon Apr 06 22:04:14.532013 2026] [:error] [pid 35686:tid 35698] [client 195.86.27.10:38186] [client 195.86.27.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adO9XsMKdea6oORd2fztYwAAAAI"]
[Mon Apr 06 22:04:14.966219 2026] [:error] [pid 35686:tid 35718] [client 195.86.27.10:38186] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adO9XsMKdea6oORd2fztaAAAABY"]
[Mon Apr 06 22:04:15.285186 2026] [:error] [pid 9442:tid 9459] [client 195.86.27.10:38196] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adO9X0PsNnAJTnmz6sYhhwAAAQ8"]
[Mon Apr 06 22:04:15.727377 2026] [:error] [pid 9442:tid 9451] [client 195.86.27.10:58850] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adO9X0PsNnAJTnmz6sYhjQAAAQc"]
[Mon Apr 06 22:04:16.263691 2026] [:error] [pid 9442:tid 9459] [client 195.86.27.10:58856] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adO9YEPsNnAJTnmz6sYhkgAAAQ8"]
[Mon Apr 06 22:04:16.474030 2026] [:error] [pid 9442:tid 9448] [client 195.86.27.10:58858] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adO9YEPsNnAJTnmz6sYhlgAAAQQ"]
[Mon Apr 06 22:04:17.230821 2026] [:error] [pid 35688:tid 35769] [client 195.86.27.10:58868] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adO9YeZ85qg4jLsRpQzpyQAAAJM"]
[Mon Apr 06 22:04:17.549906 2026] [:error] [pid 9442:tid 9453] [client 195.86.27.10:58880] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adO9YUPsNnAJTnmz6sYhmwAAAQk"]
[Mon Apr 06 22:04:18.088372 2026] [:error] [pid 9442:tid 9447] [client 195.86.27.10:58896] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adO9YkPsNnAJTnmz6sYhoQAAAQM"]
[Mon Apr 06 22:04:18.622680 2026] [:error] [pid 9442:tid 9444] [client 195.86.27.10:58906] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adO9YkPsNnAJTnmz6sYhpwAAAQA"]
[Mon Apr 06 22:04:19.049514 2026] [:error] [pid 9442:tid 9452] [client 195.86.27.10:58908] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "adO9Y0PsNnAJTnmz6sYhrAAAAQg"]
[Mon Apr 06 22:04:19.589639 2026] [:error] [pid 35688:tid 35754] [client 195.86.27.10:58914] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adO9Y-Z85qg4jLsRpQzp0QAAAIQ"]
[Mon Apr 06 22:04:20.558648 2026] [:error] [pid 10280:tid 10298] [client 195.86.27.10:58920] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adO9ZF8QUJkf8g-BFfMmEwAAAc8"]
[Mon Apr 06 22:04:20.769428 2026] [:error] [pid 9442:tid 9454] [client 195.86.27.10:58936] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adO9ZEPsNnAJTnmz6sYhsAAAAQo"]
[Mon Apr 06 22:04:20.984285 2026] [:error] [pid 38562:tid 38574] [client 195.86.27.10:58944] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adO9ZKeD6Ohe6wzRuy6oZQAAAUk"]
[Mon Apr 06 22:04:21.197682 2026] [:error] [pid 35688:tid 35771] [client 195.86.27.10:58950] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adO9ZeZ85qg4jLsRpQzp1wAAAJU"]
[Mon Apr 06 22:04:21.528186 2026] [:error] [pid 9442:tid 9455] [client 195.86.27.10:58962] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adO9ZUPsNnAJTnmz6sYhtQAAAQs"]
[Mon Apr 06 22:04:21.737425 2026] [:error] [pid 35687:tid 35735] [client 195.86.27.10:58964] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adO9ZZ3LtDozV0i8Bit9rQAAAEw"]
[Mon Apr 06 22:04:22.165779 2026] [:error] [pid 35686:tid 35711] [client 195.86.27.10:58966] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adO9ZsMKdea6oORd2fztbwAAAA8"]
[Mon Apr 06 22:04:22.374725 2026] [:error] [pid 35786:tid 35806] [client 195.86.27.10:58970] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adO9ZmgkfCKTaLhwaKQpsQAAAM0"]
[Mon Apr 06 22:04:22.585993 2026] [:error] [pid 35686:tid 35698] [client 195.86.27.10:58976] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adO9ZsMKdea6oORd2fztcQAAAAI"]
[Mon Apr 06 22:04:22.796065 2026] [:error] [pid 9442:tid 9463] [client 195.86.27.10:58986] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adO9ZkPsNnAJTnmz6sYhtwAAARM"]
[Mon Apr 06 22:04:23.114819 2026] [:error] [pid 1827:tid 1831] [client 195.86.27.10:58990] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adO9Z-Veb6S_DnjZ2xEtQwAAAgI"]
[Mon Apr 06 22:04:23.541076 2026] [:error] [pid 35786:tid 35799] [client 195.86.27.10:58996] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adO9Z2gkfCKTaLhwaKQptQAAAMY"]
[Mon Apr 06 22:04:24.181309 2026] [:error] [pid 9442:tid 9464] [client 195.86.27.10:59004] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adO9aEPsNnAJTnmz6sYhvgAAARQ"]
[Mon Apr 06 22:04:25.155892 2026] [:error] [pid 9442:tid 9450] [client 195.86.27.10:59012] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adO9aUPsNnAJTnmz6sYhzQAAAQY"]
[Mon Apr 06 22:04:25.695670 2026] [:error] [pid 9442:tid 9446] [client 195.86.27.10:33650] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adO9aUPsNnAJTnmz6sYh0wAAAQI"]
[Mon Apr 06 22:04:25.909040 2026] [:error] [pid 10280:tid 10292] [client 195.86.27.10:33662] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adO9aV8QUJkf8g-BFfMmGgAAAck"]
[Mon Apr 06 22:04:26.566788 2026] [:error] [pid 9442:tid 9454] [client 195.86.27.10:33674] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adO9akPsNnAJTnmz6sYh2wAAAQo"]
[Mon Apr 06 22:04:27.117126 2026] [proxy_fcgi:error] [pid 9442:tid 9468] [client 195.86.27.10:33686] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:04:27.227354 2026] [proxy_fcgi:error] [pid 9442:tid 9447] [client 195.86.27.10:33686] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:04:27.336530 2026] [proxy_fcgi:error] [pid 9442:tid 9464] [client 195.86.27.10:33686] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:04:27.875314 2026] [:error] [pid 9442:tid 9454] [client 195.86.27.10:33686] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adO9a0PsNnAJTnmz6sYh6QAAAQo"]
[Mon Apr 06 22:04:28.086141 2026] [:error] [pid 9442:tid 9458] [client 195.86.27.10:33692] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adO9bEPsNnAJTnmz6sYh6gAAAQ4"]
[Mon Apr 06 22:04:28.298103 2026] [:error] [pid 1827:tid 1829] [client 195.86.27.10:33708] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adO9bOVeb6S_DnjZ2xEtRgAAAgA"]
[Mon Apr 06 22:04:28.511732 2026] [:error] [pid 10280:tid 10302] [client 195.86.27.10:33722] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adO9bF8QUJkf8g-BFfMmJQAAAdM"]
[Mon Apr 06 22:04:28.721335 2026] [:error] [pid 10280:tid 10285] [client 195.86.27.10:33730] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adO9bF8QUJkf8g-BFfMmJgAAAcI"]
[Mon Apr 06 22:04:28.930107 2026] [:error] [pid 35687:tid 35737] [client 195.86.27.10:33742] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adO9bJ3LtDozV0i8Bit9swAAAE4"]
[Mon Apr 06 22:04:29.250533 2026] [:error] [pid 38562:tid 38567] [client 195.86.27.10:33754] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adO9baeD6Ohe6wzRuy6obgAAAUI"]
[Mon Apr 06 22:04:29.459928 2026] [:error] [pid 9413:tid 9421] [client 195.86.27.10:33758] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adO9bXllvEK3chn01wHTIQAAAYY"]
[Mon Apr 06 22:04:29.673614 2026] [:error] [pid 35687:tid 35748] [client 195.86.27.10:33774] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adO9bZ3LtDozV0i8Bit9tAAAAFg"]
[Mon Apr 06 22:04:29.883418 2026] [:error] [pid 35687:tid 35734] [client 195.86.27.10:33780] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adO9bZ3LtDozV0i8Bit9tQAAAEs"]
[Mon Apr 06 22:04:30.313970 2026] [:error] [pid 35688:tid 35752] [client 195.86.27.10:33784] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adO9buZ85qg4jLsRpQzp4QAAAII"]
[Mon Apr 06 22:04:30.639787 2026] [:error] [pid 38562:tid 38574] [client 195.86.27.10:33800] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adO9bqeD6Ohe6wzRuy6ocAAAAUk"]
[Mon Apr 06 22:04:31.067203 2026] [:error] [pid 9413:tid 9425] [client 195.86.27.10:33810] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adO9b3llvEK3chn01wHTJAAAAYo"]
[Mon Apr 06 22:04:31.496356 2026] [:error] [pid 35688:tid 35758] [client 195.86.27.10:33822] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adO9b-Z85qg4jLsRpQzp6gAAAIg"]
[Mon Apr 06 22:04:32.032448 2026] [:error] [pid 35688:tid 35762] [client 195.86.27.10:33826] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adO9cOZ85qg4jLsRpQzp7wAAAIw"]
[Mon Apr 06 22:04:32.681783 2026] [:error] [pid 1827:tid 1845] [client 195.86.27.10:33834] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adO9cOVeb6S_DnjZ2xEtUgAAAhA"]
[Mon Apr 06 22:04:33.001040 2026] [:error] [pid 9442:tid 9446] [client 195.86.27.10:33846] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adO9cUPsNnAJTnmz6sYh8QAAAQI"]
[Mon Apr 06 22:04:34.964945 2026] [:error] [pid 38562:tid 38574] [client 195.86.27.10:33856] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adO9cqeD6Ohe6wzRuy6ohQAAAUk"]
[Mon Apr 06 22:04:35.186986 2026] [:error] [pid 9442:tid 9454] [client 195.86.27.10:33860] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adO9c0PsNnAJTnmz6sYh-QAAAQo"]
[Mon Apr 06 22:04:35.511063 2026] [:error] [pid 35688:tid 35752] [client 195.86.27.10:59782] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adO9c-Z85qg4jLsRpQzp-gAAAII"]
[Mon Apr 06 22:04:35.944387 2026] [:error] [pid 1827:tid 1840] [client 195.86.27.10:59786] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adO9c-Veb6S_DnjZ2xEtWQAAAgs"]
[Mon Apr 06 22:04:36.159770 2026] [:error] [pid 9442:tid 9447] [client 195.86.27.10:59792] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adO9dEPsNnAJTnmz6sYh_wAAAQM"]
[Mon Apr 06 22:04:36.815802 2026] [:error] [pid 10280:tid 10305] [client 195.86.27.10:59794] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adO9dF8QUJkf8g-BFfMmOwAAAdY"]
[Mon Apr 06 22:04:37.027205 2026] [:error] [pid 10280:tid 10295] [client 195.86.27.10:59802] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "adO9dV8QUJkf8g-BFfMmPQAAAcw"]
[Mon Apr 06 22:04:37.808690 2026] [:error] [pid 10280:tid 10305] [client 195.86.27.10:59818] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adO9dV8QUJkf8g-BFfMmRgAAAdY"]
[Mon Apr 06 22:04:38.135620 2026] [proxy_fcgi:error] [pid 1827:tid 1850] [client 195.86.27.10:59824] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:04:38.358675 2026] [:error] [pid 1827:tid 1835] [client 195.86.27.10:59824] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "adO9duVeb6S_DnjZ2xEtXgAAAgY"]
[Mon Apr 06 22:04:38.570689 2026] [:error] [pid 38562:tid 38569] [client 195.86.27.10:59828] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adO9dqeD6Ohe6wzRuy6ohgAAAUQ"]
[Mon Apr 06 22:04:38.998740 2026] [:error] [pid 35688:tid 35756] [client 195.86.27.10:59844] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adO9duZ85qg4jLsRpQzqAAAAAIY"]
[Mon Apr 06 22:04:39.207881 2026] [:error] [pid 35786:tid 35806] [client 195.86.27.10:59854] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adO9d2gkfCKTaLhwaKQpuwAAAM0"]
[Mon Apr 06 22:04:40.203333 2026] [:error] [pid 9442:tid 9451] [client 195.86.27.10:59856] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adO9eEPsNnAJTnmz6sYiDQAAAQc"]
[Mon Apr 06 22:04:40.418607 2026] [:error] [pid 35686:tid 35717] [client 195.86.27.10:59858] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adO9eMMKdea6oORd2fzteAAAABU"]
[Mon Apr 06 22:04:41.060277 2026] [:error] [pid 10280:tid 10307] [client 195.86.27.10:59870] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "adO9eV8QUJkf8g-BFfMmTgAAAdg"]
[Mon Apr 06 22:04:41.269698 2026] [:error] [pid 9442:tid 9452] [client 195.86.27.10:59882] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adO9eUPsNnAJTnmz6sYiDgAAAQg"]
[Mon Apr 06 22:04:41.487869 2026] [:error] [pid 9442:tid 9445] [client 195.86.27.10:59890] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adO9eUPsNnAJTnmz6sYiDwAAAQE"]
[Mon Apr 06 22:04:42.258102 2026] [:error] [pid 9442:tid 9448] [client 195.86.27.10:59902] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adO9ekPsNnAJTnmz6sYiHAAAAQQ"]
[Mon Apr 06 22:04:42.592132 2026] [:error] [pid 35688:tid 35758] [client 195.86.27.10:59904] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adO9euZ85qg4jLsRpQzqBgAAAIg"]
[Mon Apr 06 22:04:43.601579 2026] [:error] [pid 35687:tid 35744] [client 195.86.27.10:59908] [client 195.86.27.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "adO9e53LtDozV0i8Bit9xAAAAFU"]
[Mon Apr 06 22:04:44.262147 2026] [:error] [pid 35687:tid 35740] [client 195.86.27.10:59908] [client 195.86.27.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adO9fJ3LtDozV0i8Bit9ywAAAFE"]
[Mon Apr 06 22:04:46.158606 2026] [proxy_fcgi:error] [pid 35687:tid 35734] [client 195.86.27.10:59908] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:04:47.810902 2026] [:error] [pid 35687:tid 35737] [client 195.86.27.10:59908] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adO9f53LtDozV0i8Bit95gAAAE4"]
[Mon Apr 06 22:04:48.352490 2026] [:error] [pid 10280:tid 10304] [client 195.86.27.10:39186] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adO9gF8QUJkf8g-BFfMmXAAAAdU"]
[Mon Apr 06 22:04:48.778177 2026] [:error] [pid 35686:tid 35697] [client 195.86.27.10:39202] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adO9gMMKdea6oORd2fztiAAAAAE"]
[Mon Apr 06 22:04:49.971284 2026] [:error] [pid 35686:tid 35710] [client 195.86.27.10:39210] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adO9gcMKdea6oORd2fztlAAAAA4"]
[Mon Apr 06 22:04:51.807778 2026] [:error] [pid 35688:tid 35769] [client 195.86.27.10:39226] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adO9g-Z85qg4jLsRpQzqGwAAAJM"]
[Mon Apr 06 22:04:52.138814 2026] [:error] [pid 35688:tid 35763] [client 195.86.27.10:39232] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adO9hOZ85qg4jLsRpQzqHgAAAI0"]
[Mon Apr 06 22:04:52.792670 2026] [proxy_fcgi:error] [pid 35688:tid 35759] [client 195.86.27.10:39244] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:04:52.902109 2026] [proxy_fcgi:error] [pid 35688:tid 35756] [client 195.86.27.10:39244] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:04:53.007455 2026] [:error] [pid 35688:tid 35769] [client 195.86.27.10:39244] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adO9heZ85qg4jLsRpQzqKAAAAJM"]
[Mon Apr 06 22:04:53.216507 2026] [:error] [pid 10280:tid 10288] [client 195.86.27.10:39254] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adO9hV8QUJkf8g-BFfMmYQAAAcU"]
[Mon Apr 06 22:04:54.184079 2026] [:error] [pid 10280:tid 10290] [client 195.86.27.10:39258] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adO9hl8QUJkf8g-BFfMmawAAAcc"]
[Mon Apr 06 22:04:54.501561 2026] [:error] [pid 9442:tid 9461] [client 195.86.27.10:39268] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "adO9hkPsNnAJTnmz6sYiJAAAARE"]
[Mon Apr 06 22:04:55.037215 2026] [:error] [pid 10280:tid 10294] [client 195.86.27.10:39284] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adO9h18QUJkf8g-BFfMmcAAAAcs"]
[Mon Apr 06 22:04:56.011172 2026] [:error] [pid 9413:tid 9438] [client 195.86.27.10:52474] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adO9iHllvEK3chn01wHTMgAAAZc"]
[Mon Apr 06 22:04:56.230055 2026] [proxy_fcgi:error] [pid 35688:tid 35757] [client 195.86.27.10:52488] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:04:56.557926 2026] [:error] [pid 35688:tid 35760] [client 195.86.27.10:52488] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adO9iOZ85qg4jLsRpQzqMQAAAIo"]
[Mon Apr 06 22:04:57.326689 2026] [proxy_fcgi:error] [pid 35688:tid 35759] [client 195.86.27.10:52496] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:04:57.539667 2026] [:error] [pid 35688:tid 35756] [client 195.86.27.10:52496] [client 195.86.27.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adO9ieZ85qg4jLsRpQzqPwAAAIY"]
[Mon Apr 06 22:04:58.092625 2026] [:error] [pid 35688:tid 35758] [client 195.86.27.10:52496] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adO9iuZ85qg4jLsRpQzqRAAAAIg"]
[Mon Apr 06 22:04:58.408673 2026] [:error] [pid 10280:tid 10307] [client 195.86.27.10:52498] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adO9il8QUJkf8g-BFfMmgAAAAdg"]
[Mon Apr 06 22:05:00.502591 2026] [:error] [pid 1827:tid 1850] [client 195.86.27.10:52512] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adO9jOVeb6S_DnjZ2xEtcwAAAhU"]
[Mon Apr 06 22:05:01.039771 2026] [:error] [pid 9442:tid 9465] [client 195.86.27.10:52518] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adO9jUPsNnAJTnmz6sYiLQAAARU"]
[Mon Apr 06 22:05:01.250411 2026] [:error] [pid 10280:tid 10298] [client 195.86.27.10:52530] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adO9jV8QUJkf8g-BFfMmiwAAAc8"]
[Mon Apr 06 22:05:01.807431 2026] [:error] [pid 35688:tid 35769] [client 195.86.27.10:52544] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adO9jeZ85qg4jLsRpQzqTgAAAJM"]
[Mon Apr 06 22:05:02.271857 2026] [proxy_fcgi:error] [pid 35688:tid 35774] [client 195.86.27.10:52546] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:05:02.384459 2026] [:error] [pid 35688:tid 35765] [client 195.86.27.10:52546] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adO9juZ85qg4jLsRpQzqVQAAAI8"]
[Mon Apr 06 22:05:02.717124 2026] [:error] [pid 9442:tid 9454] [client 195.86.27.10:52552] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "adO9jkPsNnAJTnmz6sYiNQAAAQo"]
[Mon Apr 06 22:05:02.933526 2026] [:error] [pid 38562:tid 38572] [client 195.86.27.10:52564] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adO9jqeD6Ohe6wzRuy6orQAAAUc"]
[Mon Apr 06 22:05:03.148696 2026] [:error] [pid 35687:tid 35748] [client 195.86.27.10:52568] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adO9j53LtDozV0i8Bit9-AAAAFg"]
[Mon Apr 06 22:05:03.385640 2026] [:error] [pid 1827:tid 1836] [client 195.86.27.10:52580] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adO9j-Veb6S_DnjZ2xEtdAAAAgc"]
[Mon Apr 06 22:05:03.604483 2026] [:error] [pid 1827:tid 1847] [client 195.86.27.10:52590] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adO9j-Veb6S_DnjZ2xEtdgAAAhI"]
[Mon Apr 06 22:05:03.823670 2026] [:error] [pid 38562:tid 38586] [client 195.86.27.10:52594] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adO9j6eD6Ohe6wzRuy6osQAAAVU"]
[Mon Apr 06 22:05:04.260155 2026] [:error] [pid 38562:tid 38565] [client 195.86.27.10:52608] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adO9kKeD6Ohe6wzRuy6otQAAAUA"]
[Mon Apr 06 22:05:04.470627 2026] [:error] [pid 35688:tid 35764] [client 195.86.27.10:52610] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adO9kOZ85qg4jLsRpQzqWwAAAI4"]
[Mon Apr 06 22:05:04.681355 2026] [:error] [pid 9442:tid 9455] [client 195.86.27.10:52620] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adO9kEPsNnAJTnmz6sYiOwAAAQs"]
[Mon Apr 06 22:05:04.897076 2026] [:error] [pid 35688:tid 35767] [client 195.86.27.10:52634] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adO9kOZ85qg4jLsRpQzqXQAAAJE"]
[Mon Apr 06 22:05:05.107557 2026] [:error] [pid 10280:tid 10303] [client 195.86.27.10:52644] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adO9kV8QUJkf8g-BFfMmkgAAAdQ"]
[Mon Apr 06 22:05:05.330407 2026] [proxy_fcgi:error] [pid 1827:tid 1833] [client 195.86.27.10:34220] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:05:05.655151 2026] [:error] [pid 1827:tid 1841] [client 195.86.27.10:34220] [client 195.86.27.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adO9keVeb6S_DnjZ2xEtfQAAAgw"]
[Mon Apr 06 22:05:06.214680 2026] [:error] [pid 1827:tid 1849] [client 195.86.27.10:34220] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adO9kuVeb6S_DnjZ2xEtggAAAhQ"]
[Mon Apr 06 22:05:08.195769 2026] [:error] [pid 35688:tid 35774] [client 195.86.27.10:34228] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adO9lOZ85qg4jLsRpQzqcQAAAJg"]
[Mon Apr 06 22:05:08.405329 2026] [:error] [pid 9442:tid 9468] [client 195.86.27.10:34236] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adO9lEPsNnAJTnmz6sYiSwAAARg"]
[Mon Apr 06 22:05:08.614955 2026] [:error] [pid 9442:tid 9463] [client 195.86.27.10:34252] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adO9lEPsNnAJTnmz6sYiTgAAARM"]
[Mon Apr 06 22:05:09.485666 2026] [:error] [pid 9442:tid 9448] [client 195.86.27.10:34258] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adO9lUPsNnAJTnmz6sYiWAAAAQQ"]
[Mon Apr 06 22:05:09.694376 2026] [:error] [pid 35687:tid 35744] [client 195.86.27.10:34260] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adO9lZ3LtDozV0i8Bit9-gAAAFU"]
[Mon Apr 06 22:05:09.903911 2026] [:error] [pid 9442:tid 9465] [client 195.86.27.10:34262] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adO9lUPsNnAJTnmz6sYiWwAAARU"]
[Mon Apr 06 22:05:10.546027 2026] [:error] [pid 10280:tid 10289] [client 195.86.27.10:34268] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adO9ll8QUJkf8g-BFfMmpQAAAcY"]
[Mon Apr 06 22:05:10.863149 2026] [:error] [pid 38562:tid 38570] [client 195.86.27.10:34274] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adO9lqeD6Ohe6wzRuy6owgAAAUU"]
[Mon Apr 06 22:05:11.290841 2026] [:error] [pid 38562:tid 38589] [client 195.86.27.10:34280] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adO9l6eD6Ohe6wzRuy6oxgAAAVg"]
[Mon Apr 06 22:05:12.700941 2026] [:error] [pid 9413:tid 9432] [client 195.86.27.10:34292] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adO9mHllvEK3chn01wHTRAAAAZE"]
[Mon Apr 06 22:05:13.025120 2026] [:error] [pid 9442:tid 9452] [client 195.86.27.10:34298] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "adO9mUPsNnAJTnmz6sYiYAAAAQg"]
[Mon Apr 06 22:05:13.906552 2026] [:error] [pid 35688:tid 35760] [client 195.86.27.10:61476] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adO9meZ85qg4jLsRpQzqhwAAAIo"]
[Mon Apr 06 22:05:14.343647 2026] [:error] [pid 9442:tid 9457] [client 195.86.27.10:34312] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adO9mkPsNnAJTnmz6sYiZQAAAQ0"]
[Mon Apr 06 22:05:15.029481 2026] [:error] [pid 10280:tid 10292] [client 195.86.27.10:34322] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adO9m18QUJkf8g-BFfMmsQAAAck"]
[Mon Apr 06 22:05:15.677547 2026] [:error] [pid 35688:tid 35757] [client 195.86.27.10:48122] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adO9m-Z85qg4jLsRpQzqkQAAAIc"]
[Mon Apr 06 22:05:16.116848 2026] [:error] [pid 10280:tid 10298] [client 195.86.27.10:48134] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adO9nF8QUJkf8g-BFfMmuwAAAc8"]
[Mon Apr 06 22:05:16.326726 2026] [:error] [pid 9442:tid 9450] [client 195.86.27.10:48150] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adO9nEPsNnAJTnmz6sYibgAAAQY"]
[Mon Apr 06 22:05:17.098903 2026] [:error] [pid 10280:tid 10289] [client 195.86.27.10:48156] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adO9nV8QUJkf8g-BFfMmwgAAAcY"]
[Mon Apr 06 22:05:19.207483 2026] [:error] [pid 35688:tid 35767] [client 195.86.27.10:48166] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adO9n-Z85qg4jLsRpQzqnQAAAJE"]
[Mon Apr 06 22:05:19.917971 2026] [:error] [pid 9442:tid 9462] [client 195.86.27.10:48168] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adO9n0PsNnAJTnmz6sYifwAAARI"]
[Mon Apr 06 22:05:20.127707 2026] [:error] [pid 9442:tid 9451] [client 195.86.27.10:48178] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adO9oEPsNnAJTnmz6sYiggAAAQc"]
[Mon Apr 06 22:05:20.446397 2026] [:error] [pid 9442:tid 9450] [client 195.86.27.10:48184] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adO9oEPsNnAJTnmz6sYihAAAAQY"]
[Mon Apr 06 22:05:20.880909 2026] [:error] [pid 9442:tid 9467] [client 195.86.27.10:48198] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adO9oEPsNnAJTnmz6sYiiQAAARc"]
[Mon Apr 06 22:05:21.090352 2026] [:error] [pid 10280:tid 10301] [client 195.86.27.10:48212] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adO9oV8QUJkf8g-BFfMmxQAAAdI"]
[Mon Apr 06 22:05:21.957204 2026] [:error] [pid 9442:tid 9459] [client 195.86.27.10:48222] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adO9oUPsNnAJTnmz6sYikwAAAQ8"]
[Mon Apr 06 22:05:22.383961 2026] [:error] [pid 35688:tid 35754] [client 195.86.27.10:48238] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adO9ouZ85qg4jLsRpQzqpwAAAIQ"]
[Mon Apr 06 22:05:22.593425 2026] [:error] [pid 35688:tid 35766] [client 195.86.27.10:48252] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adO9ouZ85qg4jLsRpQzqqQAAAJA"]
[Mon Apr 06 22:05:23.019794 2026] [:error] [pid 35688:tid 35769] [client 195.86.27.10:48254] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adO9o-Z85qg4jLsRpQzqrgAAAJM"]
[Mon Apr 06 22:05:23.338771 2026] [:error] [pid 9413:tid 9428] [client 195.86.27.10:48256] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adO9o3llvEK3chn01wHTRgAAAY0"]
[Mon Apr 06 22:05:24.103585 2026] [:error] [pid 9442:tid 9451] [client 195.86.27.10:48258] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adO9pEPsNnAJTnmz6sYipAAAAQc"]
[Mon Apr 06 22:05:24.535557 2026] [:error] [pid 10280:tid 10283] [client 195.86.27.10:48264] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adO9pF8QUJkf8g-BFfMmzQAAAcA"]
[Mon Apr 06 22:05:24.967861 2026] [:error] [pid 35688:tid 35764] [client 195.86.27.10:48276] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adO9pOZ85qg4jLsRpQzquAAAAI4"]
[Mon Apr 06 22:05:25.287054 2026] [:error] [pid 35688:tid 35750] [client 195.86.27.10:48288] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "adO9peZ85qg4jLsRpQzqvAAAAIA"]
[Mon Apr 06 22:05:25.604407 2026] [:error] [pid 38562:tid 38587] [client 195.86.27.10:38762] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adO9paeD6Ohe6wzRuy6o0AAAAVY"]
[Mon Apr 06 22:05:25.837014 2026] [:error] [pid 35686:tid 35696] [client 195.86.27.10:38776] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "adO9pcMKdea6oORd2fztnQAAAAA"]
[Mon Apr 06 22:05:26.047191 2026] [:error] [pid 10280:tid 10295] [client 195.86.27.10:38780] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adO9pl8QUJkf8g-BFfMm1AAAAcw"]
[Mon Apr 06 22:05:26.931207 2026] [:error] [pid 10280:tid 10306] [client 195.86.27.10:38796] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adO9pl8QUJkf8g-BFfMm2wAAAdc"]
[Mon Apr 06 22:05:27.474914 2026] [:error] [pid 35786:tid 35812] [client 195.86.27.10:38810] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adO9p2gkfCKTaLhwaKQpxgAAANM"]
[Mon Apr 06 22:05:27.901768 2026] [:error] [pid 10280:tid 10295] [client 195.86.27.10:38820] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adO9p18QUJkf8g-BFfMm4QAAAcw"]
[Mon Apr 06 22:05:28.328248 2026] [:error] [pid 10280:tid 10289] [client 195.86.27.10:38832] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adO9qF8QUJkf8g-BFfMm5AAAAcY"]
[Mon Apr 06 22:05:29.097680 2026] [:error] [pid 9442:tid 9459] [client 195.86.27.10:38836] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adO9qUPsNnAJTnmz6sYisgAAAQ8"]
[Mon Apr 06 22:05:29.415207 2026] [:error] [pid 9442:tid 9463] [client 195.86.27.10:38844] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adO9qUPsNnAJTnmz6sYitQAAARM"]
[Mon Apr 06 22:05:29.733787 2026] [:error] [pid 9442:tid 9454] [client 195.86.27.10:38856] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adO9qUPsNnAJTnmz6sYiuQAAAQo"]
[Mon Apr 06 22:05:30.167883 2026] [:error] [pid 10280:tid 10293] [client 195.86.27.10:38868] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adO9ql8QUJkf8g-BFfMm7gAAAco"]
[Mon Apr 06 22:05:31.314645 2026] [:error] [pid 9442:tid 9453] [client 195.86.27.10:38870] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adO9q0PsNnAJTnmz6sYizAAAAQk"]
[Mon Apr 06 22:05:31.523885 2026] [:error] [pid 9442:tid 9465] [client 195.86.27.10:38886] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adO9q0PsNnAJTnmz6sYizQAAARU"]
[Mon Apr 06 22:05:32.063737 2026] [:error] [pid 9413:tid 9415] [client 195.86.27.10:38888] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adO9rHllvEK3chn01wHTSwAAAYA"]
[Mon Apr 06 22:05:32.273289 2026] [:error] [pid 38562:tid 38567] [client 195.86.27.10:38892] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adO9rKeD6Ohe6wzRuy6o2AAAAUI"]
[Mon Apr 06 22:05:32.727061 2026] [:error] [pid 35686:tid 35705] [client 195.86.27.10:38908] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adO9rMMKdea6oORd2fztoQAAAAk"]
[Mon Apr 06 22:05:32.938442 2026] [:error] [pid 1827:tid 1851] [client 195.86.27.10:38918] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adO9rOVeb6S_DnjZ2xEtjgAAAhY"]
[Mon Apr 06 22:05:33.147888 2026] [:error] [pid 9442:tid 9454] [client 195.86.27.10:38924] [client 195.86.27.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adO9rUPsNnAJTnmz6sYi0gAAAQo"]
[Mon Apr 06 22:05:33.158029 2026] [proxy_fcgi:error] [pid 9442:tid 9454] [client 195.86.27.10:38924] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:05:33.263284 2026] [:error] [pid 9442:tid 9456] [client 195.86.27.10:38924] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adO9rUPsNnAJTnmz6sYi1AAAAQw"]
[Mon Apr 06 22:05:33.691925 2026] [:error] [pid 35686:tid 35714] [client 195.86.27.10:38928] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adO9rcMKdea6oORd2fztpAAAABI"]
[Mon Apr 06 22:05:33.916922 2026] [:error] [pid 9442:tid 9452] [client 195.86.27.10:38936] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "adO9rUPsNnAJTnmz6sYi2QAAAQg"]
[Mon Apr 06 22:05:34.891030 2026] [:error] [pid 35786:tid 35804] [client 195.86.27.10:38952] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adO9rmgkfCKTaLhwaKQpzwAAAMs"]
[Mon Apr 06 22:05:35.100445 2026] [:error] [pid 35687:tid 35728] [client 195.86.27.10:38968] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adO9r53LtDozV0i8Bit-CgAAAEU"]
[Mon Apr 06 22:05:35.529269 2026] [:error] [pid 35686:tid 35706] [client 195.86.27.10:47292] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adO9r8MKdea6oORd2fztrAAAAAo"]
[Mon Apr 06 22:05:35.742292 2026] [:error] [pid 9442:tid 9457] [client 195.86.27.10:47294] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adO9r0PsNnAJTnmz6sYi3AAAAQ0"]
[Mon Apr 06 22:05:35.969766 2026] [proxy_fcgi:error] [pid 38562:tid 38578] [client 195.86.27.10:47304] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:05:36.076398 2026] [:error] [pid 38562:tid 38583] [client 195.86.27.10:47304] [client 195.86.27.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.86.27.10, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adO9sKeD6Ohe6wzRuy6o3wAAAVI"]
[Mon Apr 06 22:05:36.300894 2026] [:error] [pid 38562:tid 38586] [client 195.86.27.10:47304] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adO9sKeD6Ohe6wzRuy6o4gAAAVU"]
[Mon Apr 06 22:05:36.841841 2026] [:error] [pid 38562:tid 38589] [client 195.86.27.10:47320] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adO9sKeD6Ohe6wzRuy6o6AAAAVg"]
[Mon Apr 06 22:05:37.161340 2026] [:error] [pid 1827:tid 1833] [client 195.86.27.10:47324] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adO9seVeb6S_DnjZ2xEtkwAAAgQ"]
[Mon Apr 06 22:05:37.373306 2026] [:error] [pid 35686:tid 35720] [client 195.86.27.10:47334] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adO9scMKdea6oORd2fztrwAAABg"]
[Mon Apr 06 22:05:37.912782 2026] [:error] [pid 35687:tid 35733] [client 195.86.27.10:47342] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adO9sZ3LtDozV0i8Bit-EAAAAEo"]
[Mon Apr 06 22:05:38.339876 2026] [:error] [pid 9413:tid 9435] [client 195.86.27.10:47356] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adO9snllvEK3chn01wHTVQAAAZQ"]
[Mon Apr 06 22:05:38.988774 2026] [:error] [pid 35686:tid 35710] [client 195.86.27.10:47358] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adO9ssMKdea6oORd2fzttQAAAA4"]
[Mon Apr 06 22:05:39.201876 2026] [:error] [pid 10280:tid 10295] [client 195.86.27.10:47364] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adO9s18QUJkf8g-BFfMm_wAAAcw"]
[Mon Apr 06 22:05:39.524119 2026] [:error] [pid 10280:tid 10294] [client 195.86.27.10:47378] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "adO9s18QUJkf8g-BFfMnAwAAAcs"]
[Mon Apr 06 22:05:45.665716 2026] [:error] [pid 35686:tid 35704] [client 195.86.27.10:47382] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adO9ucMKdea6oORd2fztxgAAAAg"]
[Mon Apr 06 22:05:46.102866 2026] [:error] [pid 9442:tid 9458] [client 195.86.27.10:61476] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "adO9ukPsNnAJTnmz6sYi8wAAAQ4"]
[Mon Apr 06 22:05:46.208967 2026] [:error] [pid 9442:tid 9459] [client 195.86.27.10:61476] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adO9ukPsNnAJTnmz6sYi9AAAAQ8"]
[Mon Apr 06 22:05:46.634972 2026] [:error] [pid 35688:tid 35758] [client 195.86.27.10:34306] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adO9uuZ85qg4jLsRpQzq2wAAAIg"]
[Mon Apr 06 22:05:46.845029 2026] [:error] [pid 9413:tid 9439] [client 195.86.27.10:34314] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adO9unllvEK3chn01wHTWQAAAZg"]
[Mon Apr 06 22:05:47.710512 2026] [:error] [pid 38562:tid 38568] [client 195.86.27.10:34322] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adO9u6eD6Ohe6wzRuy6pAAAAAUM"]
[Mon Apr 06 22:05:48.139889 2026] [:error] [pid 35687:tid 35744] [client 195.86.27.10:34338] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adO9vJ3LtDozV0i8Bit-GgAAAFU"]
[Mon Apr 06 22:05:48.492802 2026] [:error] [pid 35786:tid 35793] [client 195.86.27.10:34352] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adO9vGgkfCKTaLhwaKQp2AAAAMA"]
[Mon Apr 06 22:05:49.248683 2026] [:error] [pid 35688:tid 35773] [client 195.86.27.10:34362] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adO9veZ85qg4jLsRpQzq5AAAAJc"]
[Mon Apr 06 22:05:49.458359 2026] [:error] [pid 35688:tid 35753] [client 195.86.27.10:34366] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adO9veZ85qg4jLsRpQzq5QAAAIM"]
[Mon Apr 06 22:05:49.780194 2026] [:error] [pid 9442:tid 9462] [client 195.86.27.10:38340] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adO9vUPsNnAJTnmz6sYi_QAAARI"]
[Mon Apr 06 22:05:49.989171 2026] [:error] [pid 10280:tid 10307] [client 195.86.27.10:34378] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "adO9vV8QUJkf8g-BFfMnFQAAAdg"]
[Mon Apr 06 22:05:51.883572 2026] [:error] [pid 9413:tid 9431] [client 195.86.27.10:34390] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adO9v3llvEK3chn01wHTYgAAAZA"]
[Mon Apr 06 22:05:52.312702 2026] [:error] [pid 10280:tid 10296] [client 195.86.27.10:34396] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adO9wF8QUJkf8g-BFfMnHAAAAc0"]
[Mon Apr 06 22:05:52.536017 2026] [:error] [pid 10280:tid 10284] [client 195.86.27.10:34406] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "adO9wF8QUJkf8g-BFfMnHQAAAcE"]
[Mon Apr 06 22:05:53.203149 2026] [:error] [pid 9442:tid 9448] [client 195.86.27.10:34410] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "adO9wUPsNnAJTnmz6sYjAwAAAQQ"]
[Mon Apr 06 22:05:53.628192 2026] [:error] [pid 35688:tid 35772] [client 195.86.27.10:34418] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adO9weZ85qg4jLsRpQzq8QAAAJY"]
[Mon Apr 06 22:05:54.165410 2026] [:error] [pid 35688:tid 35765] [client 195.86.27.10:34420] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adO9wuZ85qg4jLsRpQzq9gAAAI8"]
[Mon Apr 06 22:05:54.375219 2026] [:error] [pid 35688:tid 35767] [client 195.86.27.10:34430] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adO9wuZ85qg4jLsRpQzq-QAAAJE"]
[Mon Apr 06 22:05:54.584770 2026] [:error] [pid 35688:tid 35751] [client 195.86.27.10:34442] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adO9wuZ85qg4jLsRpQzq-gAAAIE"]
[Mon Apr 06 22:05:55.017942 2026] [:error] [pid 35686:tid 35702] [client 195.86.27.10:34458] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adO9w8MKdea6oORd2fztzAAAAAY"]
[Mon Apr 06 22:05:55.462209 2026] [:error] [pid 9442:tid 9463] [client 195.86.27.10:34464] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adO9w0PsNnAJTnmz6sYjCwAAARM"]
[Mon Apr 06 22:05:55.672089 2026] [:error] [pid 1827:tid 1847] [client 195.86.27.10:60348] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adO9w-Veb6S_DnjZ2xEtqQAAAhI"]
[Mon Apr 06 22:05:55.989559 2026] [:error] [pid 35786:tid 35803] [client 195.86.27.10:60362] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adO9w2gkfCKTaLhwaKQp3gAAAMo"]
[Mon Apr 06 22:05:56.204006 2026] [:error] [pid 9442:tid 9448] [client 195.86.27.10:60372] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "adO9xEPsNnAJTnmz6sYjDQAAAQQ"]
[Mon Apr 06 22:05:56.628919 2026] [:error] [pid 35686:tid 35717] [client 195.86.27.10:60388] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adO9xMMKdea6oORd2fzt0QAAABU"]
[Mon Apr 06 22:05:56.951644 2026] [:error] [pid 9442:tid 9456] [client 195.86.27.10:60398] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adO9xEPsNnAJTnmz6sYjEwAAAQw"]
[Mon Apr 06 22:05:57.160722 2026] [:error] [pid 10280:tid 10283] [client 195.86.27.10:60414] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adO9xV8QUJkf8g-BFfMnIwAAAcA"]
[Mon Apr 06 22:05:57.370975 2026] [:error] [pid 10280:tid 10290] [client 195.86.27.10:60422] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adO9xV8QUJkf8g-BFfMnJAAAAcc"]
[Mon Apr 06 22:05:57.803875 2026] [:error] [pid 9413:tid 9419] [client 195.86.27.10:60436] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adO9xXllvEK3chn01wHTaQAAAYQ"]
[Mon Apr 06 22:05:58.231175 2026] [:error] [pid 35687:tid 35728] [client 195.86.27.10:60440] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adO9xp3LtDozV0i8Bit-IQAAAEU"]
[Mon Apr 06 22:05:58.551767 2026] [:error] [pid 35786:tid 35807] [client 195.86.27.10:60444] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adO9xmgkfCKTaLhwaKQp4QAAAM4"]
[Mon Apr 06 22:05:58.867997 2026] [:error] [pid 10280:tid 10285] [client 195.86.27.10:60448] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adO9xl8QUJkf8g-BFfMnKwAAAcI"]
[Mon Apr 06 22:05:59.735291 2026] [:error] [pid 10280:tid 10299] [client 195.86.27.10:60450] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "adO9x18QUJkf8g-BFfMnOAAAAdA"]
[Mon Apr 06 22:05:59.945849 2026] [:error] [pid 10280:tid 10290] [client 195.86.27.10:60460] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adO9x18QUJkf8g-BFfMnOgAAAcc"]
[Mon Apr 06 22:06:00.378427 2026] [:error] [pid 35786:tid 35805] [client 195.86.27.10:38222] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adO9yGgkfCKTaLhwaKQp5AAAAMw"]
[Mon Apr 06 22:06:01.051550 2026] [:error] [pid 35688:tid 35763] [client 195.86.27.10:60476] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adO9yeZ85qg4jLsRpQzrEAAAAI0"]
[Mon Apr 06 22:06:01.507667 2026] [:error] [pid 1827:tid 1845] [client 195.86.27.10:60484] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "adO9yeVeb6S_DnjZ2xEtrQAAAhA"]
[Mon Apr 06 22:06:01.949778 2026] [:error] [pid 35686:tid 35700] [client 195.86.27.10:60496] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "adO9ycMKdea6oORd2fzt2gAAAAQ"]
[Mon Apr 06 22:06:02.276312 2026] [:error] [pid 9442:tid 9444] [client 195.86.27.10:60504] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "adO9ykPsNnAJTnmz6sYjHAAAAQA"]
[Mon Apr 06 22:06:02.618630 2026] [:error] [pid 38562:tid 38567] [client 195.86.27.10:60512] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "adO9yqeD6Ohe6wzRuy6pBgAAAUI"]
[Mon Apr 06 22:06:03.264116 2026] [:error] [pid 35688:tid 35758] [client 195.86.27.10:60520] [client 195.86.27.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "adO9y-Z85qg4jLsRpQzrFgAAAIg"]
[Mon Apr 06 22:06:08.905576 2026] [:error] [pid 35688:tid 35757] [client 103.192.80.140:60186] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "adO90OZ85qg4jLsRpQzrJwAAAIc"]
[Mon Apr 06 22:06:09.126218 2026] [proxy_fcgi:error] [pid 35688:tid 35773] [client 103.192.80.140:60194] AH01071: Got error 'Primary script unknown'
[Mon Apr 06 22:06:09.230826 2026] [:error] [pid 35688:tid 35763] [client 103.192.80.140:60194] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "adO90eZ85qg4jLsRpQzrLQAAAI0"]
[Mon Apr 06 22:06:09.441021 2026] [:error] [pid 35687:tid 35737] [client 103.192.80.140:60196] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "adO90Z3LtDozV0i8Bit-JwAAAE4"]
[Mon Apr 06 22:06:09.868718 2026] [:error] [pid 35687:tid 35738] [client 103.192.80.140:60212] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "adO90Z3LtDozV0i8Bit-KwAAAE8"]
[Mon Apr 06 22:06:10.078928 2026] [:error] [pid 35687:tid 35728] [client 103.192.80.140:60228] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "adO90p3LtDozV0i8Bit-LAAAAEU"]
[Mon Apr 06 22:06:10.943286 2026] [:error] [pid 38562:tid 38565] [client 103.192.80.140:60242] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "adO90qeD6Ohe6wzRuy6pDQAAAUA"]
[Mon Apr 06 22:06:11.152575 2026] [:error] [pid 38562:tid 38574] [client 103.192.80.140:60252] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "adO906eD6Ohe6wzRuy6pEAAAAUk"]
[Mon Apr 06 22:06:11.470391 2026] [:error] [pid 38562:tid 38584] [client 103.192.80.140:60258] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "adO906eD6Ohe6wzRuy6pEwAAAVM"]
[Mon Apr 06 22:06:11.679359 2026] [:error] [pid 1827:tid 1845] [client 103.192.80.140:60274] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "adO90-Veb6S_DnjZ2xEtugAAAhA"]
[Mon Apr 06 22:06:11.890900 2026] [:error] [pid 9442:tid 9466] [client 103.192.80.140:60284] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "adO900PsNnAJTnmz6sYjHQAAARY"]
[Mon Apr 06 22:06:12.105762 2026] [:error] [pid 1827:tid 1850] [client 103.192.80.140:60298] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "adO91OVeb6S_DnjZ2xEtvAAAAhU"]
[Mon Apr 06 22:06:12.749975 2026] [:error] [pid 10280:tid 10303] [client 103.192.80.140:60306] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "adO91F8QUJkf8g-BFfMnawAAAdQ"]
[Mon Apr 06 22:06:12.959485 2026] [:error] [pid 10280:tid 10283] [client 103.192.80.140:60310] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "adO91F8QUJkf8g-BFfMnbQAAAcA"]
[Mon Apr 06 22:06:13.389195 2026] [:error] [pid 35688:tid 35759] [client 103.192.80.140:60314] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "adO91eZ85qg4jLsRpQzrPAAAAIk"]
[Mon Apr 06 22:06:13.598999 2026] [:error] [pid 35688:tid 35763] [client 103.192.80.140:60318] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "adO91eZ85qg4jLsRpQzrPwAAAI0"]
[Mon Apr 06 22:06:14.025857 2026] [:error] [pid 10280:tid 10304] [client 103.192.80.140:60330] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "adO91l8QUJkf8g-BFfMncAAAAdU"]
[Mon Apr 06 22:06:14.237814 2026] [:error] [pid 35688:tid 35769] [client 103.192.80.140:60338] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "adO91uZ85qg4jLsRpQzrQwAAAJM"]
[Mon Apr 06 22:06:15.219584 2026] [:error] [pid 35688:tid 35765] [client 103.192.80.140:60350] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "adO91-Z85qg4jLsRpQzrUQAAAI8"]
[Mon Apr 06 22:06:15.429999 2026] [:error] [pid 35688:tid 35756] [client 103.192.80.140:43634] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adO91-Z85qg4jLsRpQzrUwAAAIY"]
[Mon Apr 06 22:06:15.856828 2026] [:error] [pid 9413:tid 9421] [client 103.192.80.140:43638] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "adO913llvEK3chn01wHTcgAAAYY"]
[Mon Apr 06 22:06:16.176971 2026] [:error] [pid 1827:tid 1835] [client 103.192.80.140:43644] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "adO92OVeb6S_DnjZ2xEtxwAAAgY"]
[Mon Apr 06 22:06:16.498308 2026] [:error] [pid 1827:tid 1842] [client 103.192.80.140:43658] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "adO92OVeb6S_DnjZ2xEtygAAAg0"]
[Mon Apr 06 22:06:16.714837 2026] [:error] [pid 1827:tid 1840] [client 103.192.80.140:43670] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "adO92OVeb6S_DnjZ2xEtywAAAgs"]
[Mon Apr 06 22:06:16.924641 2026] [:error] [pid 9413:tid 9429] [client 103.192.80.140:43676] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "adO92HllvEK3chn01wHTdwAAAY4"]
[Mon Apr 06 22:06:17.460584 2026] [:error] [pid 1827:tid 1850] [client 103.192.80.140:43684] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "adO92eVeb6S_DnjZ2xEt0wAAAhU"]
[Mon Apr 06 22:06:17.778768 2026] [:error] [pid 10280:tid 10284] [client 103.192.80.140:43692] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "adO92V8QUJkf8g-BFfMnegAAAcE"]
[Mon Apr 06 22:06:18.206827 2026] [:error] [pid 35686:tid 35697] [client 103.192.80.140:43704] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "adO92sMKdea6oORd2fzt6wAAAAE"]
[Mon Apr 06 22:06:18.421766 2026] [:error] [pid 9442:tid 9452] [client 103.192.80.140:43706] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "adO92kPsNnAJTnmz6sYjHgAAAQg"]
[Mon Apr 06 22:06:18.630990 2026] [:error] [pid 9442:tid 9451] [client 103.192.80.140:43710] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "adO92kPsNnAJTnmz6sYjIQAAAQc"]
[Mon Apr 06 22:06:19.712663 2026] [:error] [pid 9442:tid 9462] [client 103.192.80.140:43712] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "adO920PsNnAJTnmz6sYjMAAAARI"]
[Mon Apr 06 22:06:20.029537 2026] [:error] [pid 10280:tid 10283] [client 103.192.80.140:43722] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "adO93F8QUJkf8g-BFfMngAAAAcA"]
[Mon Apr 06 22:06:20.458144 2026] [:error] [pid 10280:tid 10297] [client 103.192.80.140:43732] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "adO93F8QUJkf8g-BFfMnhQAAAc4"]
[Mon Apr 06 22:06:20.667038 2026] [:error] [pid 10280:tid 10301] [client 103.192.80.140:43736] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "adO93F8QUJkf8g-BFfMnhgAAAdI"]
[Mon Apr 06 22:06:20.877010 2026] [:error] [pid 1827:tid 1842] [client 103.192.80.140:43740] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "adO93OVeb6S_DnjZ2xEt1AAAAg0"]
[Mon Apr 06 22:06:21.313630 2026] [:error] [pid 1827:tid 1844] [client 103.192.80.140:43748] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "adO93eVeb6S_DnjZ2xEt2QAAAg8"]
[Mon Apr 06 22:06:22.293144 2026] [:error] [pid 35687:tid 35741] [client 103.192.80.140:43764] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "adO93p3LtDozV0i8Bit-PAAAAFI"]
[Mon Apr 06 22:06:22.945497 2026] [:error] [pid 1827:tid 1849] [client 103.192.80.140:43770] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "adO93uVeb6S_DnjZ2xEt4AAAAhQ"]
[Mon Apr 06 22:06:23.371573 2026] [:error] [pid 35686:tid 35700] [client 103.192.80.140:43780] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "adO938MKdea6oORd2fzt9gAAAAQ"]
[Mon Apr 06 22:06:23.580764 2026] [:error] [pid 35686:tid 35710] [client 103.192.80.140:43782] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "adO938MKdea6oORd2fzt9wAAAA4"]
[Mon Apr 06 22:06:24.999753 2026] [:error] [pid 35687:tid 35746] [client 103.192.80.140:43786] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "adO94J3LtDozV0i8Bit-TgAAAFc"]
[Mon Apr 06 22:06:25.213852 2026] [:error] [pid 35688:tid 35773] [client 103.192.80.140:43788] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "adO94eZ85qg4jLsRpQzrYQAAAJc"]
[Mon Apr 06 22:06:25.423278 2026] [:error] [pid 35688:tid 35765] [client 103.192.80.140:32930] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "adO94eZ85qg4jLsRpQzrZAAAAI8"]
[Mon Apr 06 22:06:25.744090 2026] [:error] [pid 9442:tid 9464] [client 103.192.80.140:32940] [client 103.192.80.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.192.80.140, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "adO94UPsNnAJTnmz6sYjMwAAARQ"]
[Mon Apr 06 22:06:25.963425 2026] [:error] [pid 9442:tid 9457] [client 103.192.80.140:32940] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "adO94UPsNnAJTnmz6sYjNQAAAQ0"]
[Mon Apr 06 22:06:26.174362 2026] [:error] [pid 9442:tid 9448] [client 103.192.80.140:32954] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "adO94kPsNnAJTnmz6sYjOAAAAQQ"]
[Mon Apr 06 22:06:26.385506 2026] [:error] [pid 9442:tid 9459] [client 103.192.80.140:32964] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "adO94kPsNnAJTnmz6sYjOwAAAQ8"]
[Mon Apr 06 22:06:27.252658 2026] [:error] [pid 1827:tid 1849] [client 103.192.80.140:32978] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "adO94-Veb6S_DnjZ2xEt7wAAAhQ"]
[Mon Apr 06 22:06:28.233477 2026] [:error] [pid 35686:tid 35701] [client 103.192.80.140:32988] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "adO95MMKdea6oORd2fzuBgAAAAU"]
[Mon Apr 06 22:06:28.657028 2026] [:error] [pid 35688:tid 35769] [client 103.192.80.140:33004] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "adO95OZ85qg4jLsRpQzrbwAAAJM"]
[Mon Apr 06 22:06:30.205689 2026] [:error] [pid 35686:tid 35707] [client 103.192.80.140:33006] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adO95sMKdea6oORd2fzuHgAAAAs"]
[Mon Apr 06 22:06:30.415040 2026] [:error] [pid 35786:tid 35795] [client 103.192.80.140:33018] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "adO95mgkfCKTaLhwaKQp7AAAAMI"]
[Mon Apr 06 22:06:30.628014 2026] [:error] [pid 35688:tid 35750] [client 103.192.80.140:33022] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "adO95uZ85qg4jLsRpQzrewAAAIA"]
[Mon Apr 06 22:06:30.836989 2026] [:error] [pid 35688:tid 35769] [client 103.192.80.140:33024] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "adO95uZ85qg4jLsRpQzrfQAAAJM"]
[Mon Apr 06 22:06:31.369861 2026] [:error] [pid 9442:tid 9454] [client 103.192.80.140:33032] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "adO950PsNnAJTnmz6sYjSgAAAQo"]
[Mon Apr 06 22:06:31.579991 2026] [:error] [pid 9442:tid 9461] [client 103.192.80.140:33040] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "adO950PsNnAJTnmz6sYjSwAAARE"]
[Mon Apr 06 22:06:32.342353 2026] [:error] [pid 38562:tid 38582] [client 103.192.80.140:16532] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "adO96KeD6Ohe6wzRuy6pKQAAAVE"]
[Mon Apr 06 22:06:32.998489 2026] [:error] [pid 35686:tid 35716] [client 103.192.80.140:33056] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "adO96MMKdea6oORd2fzuJgAAABQ"]
[Mon Apr 06 22:06:33.208284 2026] [:error] [pid 1827:tid 1843] [client 103.192.80.140:33062] [client 103.192.80.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "adO96eVeb6S_DnjZ2xEt8wAAAg4"]
[Mon Apr 06 22:06:44.700069 2026] [autoindex:error] [pid 1827:tid 1841] [client 103.192.80.140:33066] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 06 23:46:36.593822 2026] [:error] [pid 35686:tid 35715] [client 43.166.244.66:46986] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adPVXMMKdea6oORd2fwBVwAAABM"]
[Tue Apr 07 02:41:18.839050 2026] [:error] [pid 55003:tid 55023] [client 146.70.160.238:35628] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adP-TgiMyAbcUkWpJeAhzAAAARA"]
[Tue Apr 07 02:41:20.152833 2026] [:error] [pid 39328:tid 39347] [client 146.70.160.238:51878] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adP-UDhTc4A7DPq5yJh9NwAAAA8"]
[Tue Apr 07 02:41:22.288077 2026] [:error] [pid 55003:tid 55028] [client 146.70.160.238:51888] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adP-UgiMyAbcUkWpJeAh4QAAARU"]
[Tue Apr 07 02:41:23.627315 2026] [:error] [pid 39328:tid 39336] [client 146.70.160.238:51904] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adP-UzhTc4A7DPq5yJh9RwAAAAQ"]
[Tue Apr 07 02:41:25.820735 2026] [:error] [pid 55003:tid 55026] [client 146.70.160.238:37370] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adP-VQiMyAbcUkWpJeAh7gAAARM"]
[Tue Apr 07 02:41:26.624703 2026] [:error] [pid 39330:tid 39435] [client 146.70.160.238:37374] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adP-VnXef-xW6Zktbj_KPAAAAIU"]
[Tue Apr 07 02:41:27.148031 2026] [:error] [pid 39748:tid 39755] [client 146.70.160.238:37388] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adP-Vygic31vPbqmSIrZrgAAAMA"]
[Tue Apr 07 02:41:27.691100 2026] [:error] [pid 39330:tid 39451] [client 146.70.160.238:37398] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adP-V3Xef-xW6Zktbj_KPwAAAJQ"]
[Tue Apr 07 02:41:28.222477 2026] [:error] [pid 39748:tid 39776] [client 146.70.160.238:37412] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adP-WCgic31vPbqmSIrZsQAAANU"]
[Tue Apr 07 02:41:28.752861 2026] [:error] [pid 55003:tid 55026] [client 146.70.160.238:37420] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adP-WAiMyAbcUkWpJeAh9wAAARM"]
[Tue Apr 07 02:41:29.542992 2026] [:error] [pid 39748:tid 39775] [client 146.70.160.238:12677] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adP-WSgic31vPbqmSIrZuAAAANQ"]
[Tue Apr 07 02:41:30.611836 2026] [:error] [pid 55003:tid 55022] [client 146.70.160.238:37440] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "adP-WgiMyAbcUkWpJeAh_QAAAQ8"]
[Tue Apr 07 02:41:31.682217 2026] [:error] [pid 39330:tid 39448] [client 146.70.160.238:37446] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adP-W3Xef-xW6Zktbj_KSAAAAJE"]
[Tue Apr 07 02:41:32.546232 2026] [:error] [pid 39328:tid 39335] [client 146.70.160.238:37460] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adP-XDhTc4A7DPq5yJh9WgAAAAM"]
[Tue Apr 07 02:41:33.421457 2026] [:error] [pid 39330:tid 39449] [client 146.70.160.238:37476] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adP-XXXef-xW6Zktbj_KSwAAAJI"]
[Tue Apr 07 02:41:35.559032 2026] [:error] [pid 39328:tid 39333] [client 146.70.160.238:27883] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adP-XzhTc4A7DPq5yJh9bgAAAAE"]
[Tue Apr 07 02:41:36.345935 2026] [:error] [pid 39748:tid 39757] [client 146.70.160.238:36186] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adP-YCgic31vPbqmSIrZxwAAAMI"]
[Tue Apr 07 02:41:37.406410 2026] [:error] [pid 55003:tid 55010] [client 146.70.160.238:36200] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adP-YQiMyAbcUkWpJeAiBwAAAQM"]
[Tue Apr 07 02:41:38.209333 2026] [:error] [pid 39330:tid 39447] [client 146.70.160.238:36214] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adP-YnXef-xW6Zktbj_KUwAAAJA"]
[Tue Apr 07 02:41:39.827951 2026] [:error] [pid 39329:tid 39408] [client 146.70.160.238:36216] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adP-Y1b3ztKMBQDfFBy3MAAAAEY"]
[Tue Apr 07 02:41:40.615473 2026] [:error] [pid 55003:tid 55014] [client 146.70.160.238:36220] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adP-ZAiMyAbcUkWpJeAiDwAAAQc"]
[Tue Apr 07 02:41:41.397070 2026] [:error] [pid 39330:tid 39432] [client 146.70.160.238:36226] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adP-ZXXef-xW6Zktbj_KVgAAAII"]
[Tue Apr 07 02:41:41.927784 2026] [:error] [pid 39329:tid 39423] [client 146.70.160.238:36232] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adP-ZVb3ztKMBQDfFBy3MwAAAFU"]
[Tue Apr 07 02:41:42.450436 2026] [:error] [pid 39330:tid 39436] [client 146.70.160.238:36246] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adP-ZnXef-xW6Zktbj_KVwAAAIY"]
[Tue Apr 07 02:41:43.781122 2026] [:error] [pid 55003:tid 55011] [client 146.70.160.238:36252] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adP-ZwiMyAbcUkWpJeAiFwAAAQQ"]
[Tue Apr 07 02:41:44.312045 2026] [:error] [pid 39748:tid 39775] [client 146.70.160.238:32856] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adP-aCgic31vPbqmSIrZ1gAAANQ"]
[Tue Apr 07 02:41:44.835197 2026] [:error] [pid 39748:tid 39764] [client 146.70.160.238:32872] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adP-aCgic31vPbqmSIrZ2QAAAMk"]
[Tue Apr 07 02:41:47.535625 2026] [:error] [pid 39329:tid 39421] [client 146.70.160.238:32884] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adP-a1b3ztKMBQDfFBy3TQAAAFM"]
[Tue Apr 07 02:41:48.871468 2026] [:error] [pid 55003:tid 55028] [client 146.70.160.238:32894] [client 146.70.160.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.160.238, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adP-bAiMyAbcUkWpJeAiJQAAARU"]
[Tue Apr 07 02:41:52.092898 2026] [:error] [pid 55003:tid 55031] [client 146.70.160.238:32894] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adP-cAiMyAbcUkWpJeAiOgAAARg"]
[Tue Apr 07 02:41:53.155126 2026] [:error] [pid 55003:tid 55029] [client 146.70.160.238:32910] [client 146.70.160.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.160.238, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adP-cQiMyAbcUkWpJeAiRgAAARY"]
[Tue Apr 07 02:41:53.685860 2026] [:error] [pid 55003:tid 55012] [client 146.70.160.238:32910] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "adP-cQiMyAbcUkWpJeAiSAAAAQU"]
[Tue Apr 07 02:41:56.309512 2026] [:error] [pid 55003:tid 55021] [client 146.70.160.238:39834] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adP-dAiMyAbcUkWpJeAiXAAAAQ4"]
[Tue Apr 07 02:41:59.190509 2026] [:error] [pid 39748:tid 39762] [client 146.70.160.238:39850] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adP-dygic31vPbqmSIrZ_QAAAMc"]
[Tue Apr 07 02:42:00.264424 2026] [:error] [pid 39748:tid 39770] [client 146.70.160.238:56376] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adP-eCgic31vPbqmSIraBgAAAM8"]
[Tue Apr 07 02:42:01.611171 2026] [:error] [pid 39748:tid 39778] [client 146.70.160.238:39868] [client 146.70.160.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.160.238, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adP-eSgic31vPbqmSIraEQAAANc"]
[Tue Apr 07 02:42:01.890130 2026] [:error] [pid 39748:tid 39770] [client 146.70.160.238:39868] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adP-eSgic31vPbqmSIraEwAAAM8"]
[Tue Apr 07 02:42:07.113055 2026] [:error] [pid 55003:tid 55015] [client 146.70.160.238:39884] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adP-fwiMyAbcUkWpJeAidwAAAQg"]
[Tue Apr 07 02:42:08.463936 2026] [:error] [pid 55003:tid 55022] [client 146.70.160.238:40398] [client 146.70.160.238] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.70.160.238, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adP-gAiMyAbcUkWpJeAiewAAAQ8"]
[Tue Apr 07 02:42:09.561415 2026] [:error] [pid 55003:tid 55028] [client 146.70.160.238:40398] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adP-gQiMyAbcUkWpJeAigQAAARU"]
[Tue Apr 07 02:42:10.406179 2026] [:error] [pid 39329:tid 39407] [client 146.70.160.238:40406] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adP-glb3ztKMBQDfFBy3XgAAAEU"]
[Tue Apr 07 02:42:11.475988 2026] [:error] [pid 39748:tid 39769] [client 146.70.160.238:40410] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adP-gygic31vPbqmSIraKwAAAM4"]
[Tue Apr 07 02:42:12.812339 2026] [:error] [pid 39328:tid 39334] [client 146.70.160.238:40422] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adP-hDhTc4A7DPq5yJh9pAAAAAI"]
[Tue Apr 07 02:42:13.345598 2026] [:error] [pid 39748:tid 39762] [client 146.70.160.238:40438] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adP-hSgic31vPbqmSIraMAAAAMc"]
[Tue Apr 07 02:42:15.181997 2026] [:error] [pid 39748:tid 39766] [client 146.70.160.238:59854] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adP-hygic31vPbqmSIraQAAAAMs"]
[Tue Apr 07 02:42:15.971175 2026] [:error] [pid 39330:tid 39447] [client 146.70.160.238:59862] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adP-h3Xef-xW6Zktbj_KdwAAAJA"]
[Tue Apr 07 02:42:17.352139 2026] [:error] [pid 39748:tid 39778] [client 146.70.160.238:59870] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adP-iSgic31vPbqmSIraSgAAANc"]
[Tue Apr 07 02:42:18.708545 2026] [:error] [pid 55003:tid 55016] [client 146.70.160.238:59882] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adP-igiMyAbcUkWpJeAinQAAAQk"]
[Tue Apr 07 02:42:19.755712 2026] [:error] [pid 39328:tid 39355] [client 146.70.160.238:59886] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "adP-izhTc4A7DPq5yJh9rQAAABc"]
[Tue Apr 07 02:42:21.120983 2026] [:error] [pid 39328:tid 39347] [client 146.70.160.238:59894] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adP-jThTc4A7DPq5yJh9tQAAAA8"]
[Tue Apr 07 02:42:23.615335 2026] [:error] [pid 39748:tid 39757] [client 146.70.160.238:59898] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adP-jygic31vPbqmSIraWwAAAMI"]
[Tue Apr 07 02:42:24.145669 2026] [:error] [pid 39748:tid 39766] [client 146.70.160.238:50792] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adP-kCgic31vPbqmSIraXQAAAMs"]
[Tue Apr 07 02:42:24.671295 2026] [:error] [pid 39748:tid 39769] [client 146.70.160.238:50798] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adP-kCgic31vPbqmSIraXwAAAM4"]
[Tue Apr 07 02:42:25.206824 2026] [:error] [pid 39748:tid 39763] [client 146.70.160.238:50808] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adP-kSgic31vPbqmSIraYQAAAMg"]
[Tue Apr 07 02:42:25.994549 2026] [:error] [pid 39328:tid 39347] [client 146.70.160.238:50814] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adP-kThTc4A7DPq5yJh9ugAAAA8"]
[Tue Apr 07 02:42:26.511148 2026] [:error] [pid 39329:tid 39414] [client 146.70.160.238:50818] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adP-klb3ztKMBQDfFBy3agAAAEw"]
[Tue Apr 07 02:42:27.565763 2026] [:error] [pid 39748:tid 39776] [client 146.70.160.238:50828] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adP-kygic31vPbqmSIrabAAAANU"]
[Tue Apr 07 02:42:28.086735 2026] [:error] [pid 39748:tid 39761] [client 146.70.160.238:50832] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adP-lCgic31vPbqmSIrabQAAAMY"]
[Tue Apr 07 02:42:30.093514 2026] [:error] [pid 39748:tid 39766] [client 146.70.160.238:50846] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adP-ligic31vPbqmSIrabwAAAMs"]
[Tue Apr 07 02:42:30.620921 2026] [:error] [pid 39328:tid 39333] [client 146.70.160.238:50858] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adP-ljhTc4A7DPq5yJh9wwAAAAE"]
[Tue Apr 07 02:42:31.407794 2026] [:error] [pid 39328:tid 39341] [client 146.70.160.238:50862] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adP-lzhTc4A7DPq5yJh9yAAAAAk"]
[Tue Apr 07 02:42:32.503901 2026] [:error] [pid 39748:tid 39771] [client 146.70.160.238:50864] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adP-mCgic31vPbqmSIradgAAANA"]
[Tue Apr 07 02:42:34.112970 2026] [:error] [pid 55003:tid 55027] [client 146.70.160.238:50878] [client 146.70.160.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adP-mgiMyAbcUkWpJeAizQAAARQ"]
[Tue Apr 07 02:42:36.361137 2026] [:error] [pid 39748:tid 39779] [client 188.95.65.41:57452] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adP-nCgic31vPbqmSIrafgAAANg"]
[Tue Apr 07 02:42:37.594061 2026] [:error] [pid 39328:tid 39332] [client 188.95.65.41:57456] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adP-nThTc4A7DPq5yJh92wAAAAA"]
[Tue Apr 07 02:42:38.083270 2026] [:error] [pid 55003:tid 55023] [client 188.95.65.41:57458] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adP-ngiMyAbcUkWpJeAi2gAAARA"]
[Tue Apr 07 02:42:39.560124 2026] [:error] [pid 39330:tid 39432] [client 188.95.65.41:57462] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adP-n3Xef-xW6Zktbj_KjwAAAII"]
[Tue Apr 07 02:42:40.804440 2026] [proxy_fcgi:error] [pid 39328:tid 39349] [client 188.95.65.41:57472] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:42:41.055340 2026] [proxy_fcgi:error] [pid 39328:tid 39343] [client 188.95.65.41:57472] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:42:42.627267 2026] [proxy_fcgi:error] [pid 39328:tid 39338] [client 188.95.65.41:57472] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:42:43.868262 2026] [:error] [pid 39328:tid 39356] [client 188.95.65.41:57472] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adP-ozhTc4A7DPq5yJh97gAAABg"]
[Tue Apr 07 02:42:44.357897 2026] [:error] [pid 39748:tid 39772] [client 188.95.65.41:57034] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adP-pCgic31vPbqmSIraiQAAANE"]
[Tue Apr 07 02:42:44.850542 2026] [:error] [pid 39328:tid 39353] [client 188.95.65.41:57050] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adP-pDhTc4A7DPq5yJh97wAAABU"]
[Tue Apr 07 02:42:45.343522 2026] [:error] [pid 39748:tid 39756] [client 188.95.65.41:57052] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adP-pSgic31vPbqmSIraigAAAME"]
[Tue Apr 07 02:42:45.840125 2026] [:error] [pid 39328:tid 39335] [client 188.95.65.41:57062] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adP-pThTc4A7DPq5yJh98gAAAAM"]
[Tue Apr 07 02:42:46.326985 2026] [:error] [pid 39329:tid 39404] [client 188.95.65.41:57064] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adP-plb3ztKMBQDfFBy3gQAAAEI"]
[Tue Apr 07 02:42:47.056943 2026] [:error] [pid 39328:tid 39344] [client 188.95.65.41:57066] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adP-pzhTc4A7DPq5yJh9-QAAAAw"]
[Tue Apr 07 02:42:47.564452 2026] [:error] [pid 39329:tid 39413] [client 188.95.65.41:57078] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adP-p1b3ztKMBQDfFBy3gwAAAEs"]
[Tue Apr 07 02:42:48.083140 2026] [:error] [pid 39330:tid 39446] [client 188.95.65.41:57084] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adP-qHXef-xW6Zktbj_KpgAAAI8"]
[Tue Apr 07 02:42:48.573805 2026] [:error] [pid 39330:tid 39432] [client 188.95.65.41:57096] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adP-qHXef-xW6Zktbj_KqAAAAII"]
[Tue Apr 07 02:42:49.555883 2026] [:error] [pid 39748:tid 39776] [client 188.95.65.41:57100] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adP-qSgic31vPbqmSIralAAAANU"]
[Tue Apr 07 02:42:50.292280 2026] [:error] [pid 39748:tid 39759] [client 188.95.65.41:57114] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adP-qigic31vPbqmSIramAAAAMQ"]
[Tue Apr 07 02:42:51.271043 2026] [:error] [pid 39330:tid 39437] [client 188.95.65.41:57120] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adP-q3Xef-xW6Zktbj_KswAAAIc"]
[Tue Apr 07 02:42:52.249307 2026] [:error] [pid 55003:tid 55030] [client 188.95.65.41:57122] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adP-rAiMyAbcUkWpJeAi8QAAARc"]
[Tue Apr 07 02:42:53.468692 2026] [:error] [pid 55003:tid 55014] [client 188.95.65.41:57126] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adP-rQiMyAbcUkWpJeAi_gAAAQc"]
[Tue Apr 07 02:42:54.958098 2026] [:error] [pid 39748:tid 39765] [client 188.95.65.41:39586] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adP-rigic31vPbqmSIraqQAAAMo"]
[Tue Apr 07 02:42:55.707036 2026] [:error] [pid 39748:tid 39772] [client 188.95.65.41:39602] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adP-rygic31vPbqmSIrarQAAANE"]
[Tue Apr 07 02:43:01.477011 2026] [:error] [pid 39748:tid 39774] [client 188.95.65.41:39606] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adP-tSgic31vPbqmSIraxwAAANM"]
[Tue Apr 07 02:43:01.964434 2026] [:error] [pid 39748:tid 39771] [client 188.95.65.41:39620] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adP-tSgic31vPbqmSIrayQAAANA"]
[Tue Apr 07 02:43:02.705292 2026] [:error] [pid 55003:tid 55012] [client 188.95.65.41:39624] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adP-tgiMyAbcUkWpJeAjKgAAAQU"]
[Tue Apr 07 02:43:03.694323 2026] [:error] [pid 39748:tid 39769] [client 188.95.65.41:39626] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adP-tygic31vPbqmSIra0AAAAM4"]
[Tue Apr 07 02:43:04.191693 2026] [:error] [pid 55003:tid 55019] [client 188.95.65.41:40610] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adP-uAiMyAbcUkWpJeAjNQAAAQw"]
[Tue Apr 07 02:43:05.702720 2026] [:error] [pid 39748:tid 39765] [client 188.95.65.41:40612] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adP-uSgic31vPbqmSIra1wAAAMo"]
[Tue Apr 07 02:43:06.205542 2026] [:error] [pid 39329:tid 39416] [client 188.95.65.41:40618] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "adP-ulb3ztKMBQDfFBy3lgAAAE4"]
[Tue Apr 07 02:43:07.928921 2026] [:error] [pid 39330:tid 39454] [client 188.95.65.41:40626] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adP-u3Xef-xW6Zktbj_K0QAAAJc"]
[Tue Apr 07 02:43:08.672054 2026] [proxy_fcgi:error] [pid 39329:tid 39412] [client 188.95.65.41:40638] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:43:09.166847 2026] [:error] [pid 39329:tid 39419] [client 188.95.65.41:40638] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "adP-vVb3ztKMBQDfFBy3oAAAAFE"]
[Tue Apr 07 02:43:09.660637 2026] [:error] [pid 39329:tid 39407] [client 188.95.65.41:40642] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adP-vVb3ztKMBQDfFBy3owAAAEU"]
[Tue Apr 07 02:43:10.658640 2026] [:error] [pid 55003:tid 55012] [client 188.95.65.41:40646] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adP-vgiMyAbcUkWpJeAjSAAAAQU"]
[Tue Apr 07 02:43:11.148320 2026] [:error] [pid 55003:tid 55020] [client 188.95.65.41:40660] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adP-vwiMyAbcUkWpJeAjSgAAAQ0"]
[Tue Apr 07 02:43:13.398851 2026] [:error] [pid 55003:tid 55007] [client 188.95.65.41:40670] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adP-wQiMyAbcUkWpJeAjVwAAAQA"]
[Tue Apr 07 02:43:13.904390 2026] [:error] [pid 39330:tid 39440] [client 188.95.65.41:47042] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adP-wXXef-xW6Zktbj_K2wAAAIk"]
[Tue Apr 07 02:43:15.391159 2026] [:error] [pid 39330:tid 39434] [client 188.95.65.41:47058] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "adP-w3Xef-xW6Zktbj_K5gAAAIQ"]
[Tue Apr 07 02:43:15.879106 2026] [:error] [pid 39330:tid 39450] [client 188.95.65.41:47064] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adP-w3Xef-xW6Zktbj_K6QAAAJM"]
[Tue Apr 07 02:43:16.369018 2026] [:error] [pid 39330:tid 39445] [client 188.95.65.41:47072] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adP-xHXef-xW6Zktbj_K7QAAAI4"]
[Tue Apr 07 02:43:18.132483 2026] [:error] [pid 55003:tid 55009] [client 188.95.65.41:47080] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adP-xgiMyAbcUkWpJeAjbQAAAQI"]
[Tue Apr 07 02:43:18.885296 2026] [:error] [pid 39328:tid 39345] [client 188.95.65.41:47086] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adP-xjhTc4A7DPq5yJh-IwAAAA0"]
[Tue Apr 07 02:43:21.098720 2026] [:error] [pid 39329:tid 39408] [client 188.95.65.41:47096] [client 188.95.65.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.65.41, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "adP-yVb3ztKMBQDfFBy3zAAAAEY"]
[Tue Apr 07 02:43:22.573734 2026] [:error] [pid 39329:tid 39413] [client 188.95.65.41:47096] [client 188.95.65.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.65.41, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adP-ylb3ztKMBQDfFBy31AAAAEs"]
[Tue Apr 07 02:43:25.328742 2026] [proxy_fcgi:error] [pid 39329:tid 39423] [client 188.95.65.41:47096] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:43:29.030316 2026] [:error] [pid 39329:tid 39423] [client 188.95.65.41:47096] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adP-0Vb3ztKMBQDfFBy3_QAAAFU"]
[Tue Apr 07 02:43:30.307054 2026] [:error] [pid 39328:tid 39338] [client 188.95.65.41:32964] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adP-0jhTc4A7DPq5yJh-PwAAAAY"]
[Tue Apr 07 02:43:31.348719 2026] [:error] [pid 39748:tid 39765] [client 188.95.65.41:32968] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adP-0ygic31vPbqmSIra_gAAAMo"]
[Tue Apr 07 02:43:34.101913 2026] [:error] [pid 55003:tid 55020] [client 188.95.65.41:32972] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adP-1giMyAbcUkWpJeAjpQAAAQ0"]
[Tue Apr 07 02:43:36.398987 2026] [:error] [pid 39748:tid 39773] [client 188.95.65.41:40558] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adP-2Cgic31vPbqmSIrbEQAAANI"]
[Tue Apr 07 02:43:37.145126 2026] [:error] [pid 39748:tid 39778] [client 188.95.65.41:40564] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adP-2Sgic31vPbqmSIrbEwAAANc"]
[Tue Apr 07 02:43:38.659475 2026] [proxy_fcgi:error] [pid 55003:tid 55019] [client 188.95.65.41:40566] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:43:38.916547 2026] [proxy_fcgi:error] [pid 55003:tid 55017] [client 188.95.65.41:40566] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:43:39.168608 2026] [:error] [pid 55003:tid 55028] [client 188.95.65.41:40566] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adP-2wiMyAbcUkWpJeAjtAAAARU"]
[Tue Apr 07 02:43:39.665635 2026] [:error] [pid 39748:tid 39776] [client 188.95.65.41:40568] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adP-2ygic31vPbqmSIrbGAAAANU"]
[Tue Apr 07 02:43:41.948130 2026] [:error] [pid 39329:tid 39406] [client 188.95.65.41:40574] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adP-3Vb3ztKMBQDfFBy4DQAAAEQ"]
[Tue Apr 07 02:43:42.691583 2026] [:error] [pid 55003:tid 55017] [client 188.95.65.41:40588] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "adP-3giMyAbcUkWpJeAjvgAAAQo"]
[Tue Apr 07 02:43:43.933896 2026] [:error] [pid 39329:tid 39402] [client 188.95.65.41:40590] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adP-31b3ztKMBQDfFBy4GwAAAEA"]
[Tue Apr 07 02:43:46.141714 2026] [:error] [pid 55003:tid 55020] [client 188.95.65.41:43506] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adP-4giMyAbcUkWpJeAj0AAAAQ0"]
[Tue Apr 07 02:43:46.632185 2026] [proxy_fcgi:error] [pid 39748:tid 39760] [client 188.95.65.41:43518] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:43:48.175305 2026] [:error] [pid 39748:tid 39765] [client 188.95.65.41:43518] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adP-5Cgic31vPbqmSIrbIgAAAMo"]
[Tue Apr 07 02:43:49.928719 2026] [proxy_fcgi:error] [pid 39329:tid 39415] [client 188.95.65.41:43526] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:43:50.418669 2026] [:error] [pid 39329:tid 39418] [client 188.95.65.41:43526] [client 188.95.65.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.65.41, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adP-5lb3ztKMBQDfFBy4LwAAAFA"]
[Tue Apr 07 02:43:51.656523 2026] [:error] [pid 39329:tid 39408] [client 188.95.65.41:43526] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adP-51b3ztKMBQDfFBy4OAAAAEY"]
[Tue Apr 07 02:43:52.395704 2026] [:error] [pid 39330:tid 39455] [client 188.95.65.41:43534] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adP-6HXef-xW6Zktbj_LIQAAAJg"]
[Tue Apr 07 02:43:53.922801 2026] [:error] [pid 39330:tid 39434] [client 188.95.65.41:43540] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adP-6XXef-xW6Zktbj_LLQAAAIQ"]
[Tue Apr 07 02:43:55.185215 2026] [:error] [pid 55003:tid 55012] [client 188.95.65.41:43160] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adP-6wiMyAbcUkWpJeAj6wAAAQU"]
[Tue Apr 07 02:43:55.761391 2026] [:error] [pid 39748:tid 39758] [client 188.95.65.41:43168] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adP-6ygic31vPbqmSIrbQgAAAMM"]
[Tue Apr 07 02:43:57.008403 2026] [:error] [pid 55003:tid 55016] [client 188.95.65.41:43176] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adP-7QiMyAbcUkWpJeAj9gAAAQk"]
[Tue Apr 07 02:43:58.036578 2026] [proxy_fcgi:error] [pid 55003:tid 55010] [client 188.95.65.41:43186] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:43:58.288606 2026] [:error] [pid 55003:tid 55009] [client 188.95.65.41:43186] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adP-7giMyAbcUkWpJeAkAQAAAQI"]
[Tue Apr 07 02:43:59.197401 2026] [:error] [pid 39328:tid 39348] [client 188.95.65.41:43200] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "adP-7zhTc4A7DPq5yJh-eQAAABA"]
[Tue Apr 07 02:43:59.690436 2026] [:error] [pid 55003:tid 55019] [client 188.95.65.41:43206] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adP-7wiMyAbcUkWpJeAkAwAAAQw"]
[Tue Apr 07 02:44:00.197647 2026] [:error] [pid 39329:tid 39422] [client 188.95.65.41:43210] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adP-8Fb3ztKMBQDfFBy4PAAAAFQ"]
[Tue Apr 07 02:44:00.746154 2026] [:error] [pid 39330:tid 39448] [client 188.95.65.41:43220] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adP-8HXef-xW6Zktbj_LPQAAAJE"]
[Tue Apr 07 02:44:01.242295 2026] [:error] [pid 55003:tid 55022] [client 188.95.65.41:43230] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adP-8QiMyAbcUkWpJeAkDQAAAQ8"]
[Tue Apr 07 02:44:01.759833 2026] [:error] [pid 39328:tid 39332] [client 188.95.65.41:43232] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adP-8ThTc4A7DPq5yJh-iQAAAAA"]
[Tue Apr 07 02:44:02.776488 2026] [:error] [pid 39748:tid 39775] [client 188.95.65.41:43234] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adP-8igic31vPbqmSIrbTAAAANQ"]
[Tue Apr 07 02:44:03.273217 2026] [:error] [pid 39748:tid 39769] [client 188.95.65.41:43248] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adP-8ygic31vPbqmSIrbTQAAAM4"]
[Tue Apr 07 02:44:03.763694 2026] [:error] [pid 39329:tid 39413] [client 188.95.65.41:51620] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adP-81b3ztKMBQDfFBy4RAAAAEs"]
[Tue Apr 07 02:44:04.253644 2026] [:error] [pid 39748:tid 39757] [client 188.95.65.41:51628] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adP-9Cgic31vPbqmSIrbUQAAAMI"]
[Tue Apr 07 02:44:04.772153 2026] [:error] [pid 39748:tid 39765] [client 188.95.65.41:51634] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adP-9Cgic31vPbqmSIrbVgAAAMo"]
[Tue Apr 07 02:44:05.306866 2026] [proxy_fcgi:error] [pid 39328:tid 39341] [client 188.95.65.41:51640] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:44:06.055284 2026] [:error] [pid 39328:tid 39339] [client 188.95.65.41:51640] [client 188.95.65.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.65.41, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adP-9jhTc4A7DPq5yJh-nwAAAAc"]
[Tue Apr 07 02:44:07.316308 2026] [:error] [pid 39328:tid 39354] [client 188.95.65.41:51640] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adP-9zhTc4A7DPq5yJh-qQAAABY"]
[Tue Apr 07 02:44:11.883307 2026] [:error] [pid 39328:tid 39350] [client 188.95.65.41:51644] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adP--zhTc4A7DPq5yJh-xwAAABI"]
[Tue Apr 07 02:44:12.383778 2026] [:error] [pid 39328:tid 39342] [client 188.95.65.41:51656] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adP-_DhTc4A7DPq5yJh-yAAAAAo"]
[Tue Apr 07 02:44:12.872219 2026] [:error] [pid 39328:tid 39356] [client 188.95.65.41:51662] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adP-_DhTc4A7DPq5yJh-yQAAABg"]
[Tue Apr 07 02:44:14.999312 2026] [:error] [pid 55003:tid 55023] [client 188.95.65.41:51670] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adP-_giMyAbcUkWpJeAkPQAAARA"]
[Tue Apr 07 02:44:15.493931 2026] [:error] [pid 39330:tid 39453] [client 188.95.65.41:47278] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adP-_3Xef-xW6Zktbj_LUgAAAJY"]
[Tue Apr 07 02:44:16.118586 2026] [:error] [pid 55003:tid 55028] [client 188.95.65.41:47280] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adP_AAiMyAbcUkWpJeAkQQAAARU"]
[Tue Apr 07 02:44:17.608072 2026] [:error] [pid 39330:tid 39447] [client 188.95.65.41:47288] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adP_AXXef-xW6Zktbj_LXgAAAJA"]
[Tue Apr 07 02:44:18.355963 2026] [:error] [pid 39329:tid 39422] [client 188.95.65.41:47304] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adP_Alb3ztKMBQDfFBy4VAAAAFQ"]
[Tue Apr 07 02:44:19.358750 2026] [:error] [pid 39328:tid 39348] [client 188.95.65.41:47306] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adP_AzhTc4A7DPq5yJh-_AAAABA"]
[Tue Apr 07 02:44:22.834735 2026] [:error] [pid 39328:tid 39354] [client 188.95.65.41:47316] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adP_BjhTc4A7DPq5yJh_DAAAABY"]
[Tue Apr 07 02:44:23.570262 2026] [:error] [pid 39329:tid 39420] [client 188.95.65.41:47318] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "adP_B1b3ztKMBQDfFBy4WAAAAFI"]
[Tue Apr 07 02:44:25.558670 2026] [:error] [pid 39329:tid 39426] [client 188.95.65.41:35846] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adP_CVb3ztKMBQDfFBy4aQAAAFg"]
[Tue Apr 07 02:44:26.558500 2026] [:error] [pid 39748:tid 39763] [client 188.95.65.41:35848] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adP_Cigic31vPbqmSIrbqgAAAMg"]
[Tue Apr 07 02:44:29.127847 2026] [:error] [pid 55003:tid 55024] [client 188.95.65.41:35864] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adP_DQiMyAbcUkWpJeAkewAAARE"]
[Tue Apr 07 02:44:30.652586 2026] [:error] [pid 39748:tid 39775] [client 188.95.65.41:35870] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adP_Digic31vPbqmSIrbwwAAANQ"]
[Tue Apr 07 02:44:31.647479 2026] [:error] [pid 39330:tid 39444] [client 188.95.65.41:35882] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adP_D3Xef-xW6Zktbj_LhAAAAI0"]
[Tue Apr 07 02:44:32.140887 2026] [:error] [pid 55003:tid 55007] [client 188.95.65.41:35890] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adP_EAiMyAbcUkWpJeAkkAAAAQA"]
[Tue Apr 07 02:44:33.865393 2026] [:error] [pid 39328:tid 39348] [client 188.95.65.41:35904] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adP_EThTc4A7DPq5yJh_LAAAABA"]
[Tue Apr 07 02:44:35.646004 2026] [:error] [pid 39328:tid 39335] [client 188.95.65.41:57628] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adP_EzhTc4A7DPq5yJh_OQAAAAM"]
[Tue Apr 07 02:44:37.146487 2026] [:error] [pid 39328:tid 39343] [client 188.95.65.41:57640] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adP_FThTc4A7DPq5yJh_QAAAAAs"]
[Tue Apr 07 02:44:37.648579 2026] [:error] [pid 39328:tid 39341] [client 188.95.65.41:57642] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adP_FThTc4A7DPq5yJh_QQAAAAk"]
[Tue Apr 07 02:44:38.390565 2026] [:error] [pid 55003:tid 55009] [client 188.95.65.41:57648] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adP_FgiMyAbcUkWpJeAkpgAAAQI"]
[Tue Apr 07 02:44:39.385216 2026] [:error] [pid 39328:tid 39351] [client 188.95.65.41:57664] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adP_FzhTc4A7DPq5yJh_TAAAABM"]
[Tue Apr 07 02:44:39.897415 2026] [:error] [pid 55003:tid 55025] [client 188.95.65.41:57668] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adP_FwiMyAbcUkWpJeAkqgAAARI"]
[Tue Apr 07 02:44:43.198498 2026] [:error] [pid 39748:tid 39755] [client 188.95.65.41:57678] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adP_Gygic31vPbqmSIrb3AAAAMA"]
[Tue Apr 07 02:44:44.251191 2026] [:error] [pid 39330:tid 39436] [client 188.95.65.41:44562] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adP_HHXef-xW6Zktbj_LmAAAAIY"]
[Tue Apr 07 02:44:44.741850 2026] [:error] [pid 55003:tid 55012] [client 188.95.65.41:44574] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adP_HAiMyAbcUkWpJeAktwAAAQU"]
[Tue Apr 07 02:44:45.761932 2026] [:error] [pid 55003:tid 55023] [client 188.95.65.41:44576] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adP_HQiMyAbcUkWpJeAkvwAAARA"]
[Tue Apr 07 02:44:46.511201 2026] [:error] [pid 39748:tid 39778] [client 188.95.65.41:44586] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adP_Higic31vPbqmSIrb4wAAANc"]
[Tue Apr 07 02:44:48.265512 2026] [:error] [pid 55003:tid 55017] [client 188.95.65.41:44600] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adP_IAiMyAbcUkWpJeAkzgAAAQo"]
[Tue Apr 07 02:44:49.259365 2026] [:error] [pid 39328:tid 39347] [client 188.95.65.41:44602] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adP_IThTc4A7DPq5yJh_XgAAAA8"]
[Tue Apr 07 02:44:50.291008 2026] [:error] [pid 39330:tid 39455] [client 188.95.65.41:44604] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adP_InXef-xW6Zktbj_LqQAAAJg"]
[Tue Apr 07 02:44:51.035508 2026] [:error] [pid 55003:tid 55021] [client 188.95.65.41:44606] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "adP_IwiMyAbcUkWpJeAk2gAAAQ4"]
[Tue Apr 07 02:44:51.774628 2026] [:error] [pid 39330:tid 39440] [client 188.95.65.41:44610] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adP_I3Xef-xW6Zktbj_LrwAAAIk"]
[Tue Apr 07 02:44:52.309854 2026] [:error] [pid 39328:tid 39352] [client 188.95.65.41:44612] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "adP_JDhTc4A7DPq5yJh_aAAAABQ"]
[Tue Apr 07 02:44:52.806645 2026] [:error] [pid 39328:tid 39345] [client 188.95.65.41:44628] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adP_JDhTc4A7DPq5yJh_bQAAAA0"]
[Tue Apr 07 02:44:54.832560 2026] [:error] [pid 55003:tid 55017] [client 188.95.65.41:44644] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adP_JgiMyAbcUkWpJeAk7AAAAQo"]
[Tue Apr 07 02:44:56.096763 2026] [:error] [pid 55003:tid 55021] [client 188.95.65.41:42786] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adP_KAiMyAbcUkWpJeAk-wAAAQ4"]
[Tue Apr 07 02:44:57.096719 2026] [:error] [pid 39330:tid 39453] [client 188.95.65.41:42788] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adP_KXXef-xW6Zktbj_LvAAAAJY"]
[Tue Apr 07 02:44:58.079909 2026] [:error] [pid 55003:tid 55026] [client 188.95.65.41:42804] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adP_KgiMyAbcUkWpJeAlBAAAARM"]
[Tue Apr 07 02:44:59.846365 2026] [:error] [pid 39328:tid 39349] [client 188.95.65.41:42816] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adP_KzhTc4A7DPq5yJh_fwAAABE"]
[Tue Apr 07 02:45:00.594992 2026] [:error] [pid 39329:tid 39419] [client 188.95.65.41:42824] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adP_LFb3ztKMBQDfFBy4lAAAAFE"]
[Tue Apr 07 02:45:02.783705 2026] [:error] [pid 55003:tid 55014] [client 188.95.65.41:42834] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adP_LgiMyAbcUkWpJeAlJgAAAQc"]
[Tue Apr 07 02:45:03.945941 2026] [:error] [pid 55003:tid 55019] [client 188.95.65.41:42842] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adP_LwiMyAbcUkWpJeAlMQAAAQw"]
[Tue Apr 07 02:45:07.799569 2026] [:error] [pid 39330:tid 39433] [client 188.95.65.41:60580] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adP_M3Xef-xW6Zktbj_L0gAAAIM"]
[Tue Apr 07 02:45:08.302161 2026] [:error] [pid 39328:tid 39346] [client 188.95.65.41:60586] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adP_NDhTc4A7DPq5yJh_igAAAA4"]
[Tue Apr 07 02:45:09.569016 2026] [:error] [pid 55003:tid 55020] [client 188.95.65.41:60600] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adP_NQiMyAbcUkWpJeAlUQAAAQ0"]
[Tue Apr 07 02:45:10.055292 2026] [:error] [pid 55003:tid 55016] [client 188.95.65.41:60610] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adP_NgiMyAbcUkWpJeAlVAAAAQk"]
[Tue Apr 07 02:45:11.065300 2026] [:error] [pid 39748:tid 39758] [client 188.95.65.41:60626] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adP_Nygic31vPbqmSIrcHwAAAMM"]
[Tue Apr 07 02:45:11.582217 2026] [:error] [pid 39330:tid 39453] [client 188.95.65.41:60642] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adP_N3Xef-xW6Zktbj_L1QAAAJY"]
[Tue Apr 07 02:45:12.075090 2026] [:error] [pid 55003:tid 55017] [client 188.95.65.41:60658] [client 188.95.65.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.65.41, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adP_OAiMyAbcUkWpJeAlWQAAAQo"]
[Tue Apr 07 02:45:12.084688 2026] [proxy_fcgi:error] [pid 55003:tid 55017] [client 188.95.65.41:60658] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:45:12.330537 2026] [:error] [pid 55003:tid 55024] [client 188.95.65.41:60658] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adP_OAiMyAbcUkWpJeAlWwAAARE"]
[Tue Apr 07 02:45:13.345781 2026] [:error] [pid 55003:tid 55011] [client 188.95.65.41:60660] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adP_OQiMyAbcUkWpJeAlZwAAAQQ"]
[Tue Apr 07 02:45:13.835018 2026] [:error] [pid 39748:tid 39767] [client 188.95.65.41:51134] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "adP_OSgic31vPbqmSIrcJQAAAMw"]
[Tue Apr 07 02:45:16.232084 2026] [:error] [pid 39330:tid 39430] [client 188.95.65.41:51140] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adP_PHXef-xW6Zktbj_L6QAAAIA"]
[Tue Apr 07 02:45:16.764298 2026] [:error] [pid 39330:tid 39433] [client 188.95.65.41:51148] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adP_PHXef-xW6Zktbj_L7QAAAIM"]
[Tue Apr 07 02:45:17.906784 2026] [:error] [pid 39748:tid 39773] [client 188.95.65.41:51162] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adP_PSgic31vPbqmSIrcQwAAANI"]
[Tue Apr 07 02:45:18.402777 2026] [:error] [pid 39330:tid 39453] [client 188.95.65.41:51170] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adP_PnXef-xW6Zktbj_L8gAAAJY"]
[Tue Apr 07 02:45:18.904381 2026] [proxy_fcgi:error] [pid 39328:tid 39340] [client 188.95.65.41:51172] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:45:19.155129 2026] [:error] [pid 39328:tid 39348] [client 188.95.65.41:51172] [client 188.95.65.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.65.41, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adP_PzhTc4A7DPq5yJh_nQAAABA"]
[Tue Apr 07 02:45:19.657721 2026] [:error] [pid 39328:tid 39333] [client 188.95.65.41:51172] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adP_PzhTc4A7DPq5yJh_oAAAAAE"]
[Tue Apr 07 02:45:20.922650 2026] [:error] [pid 39748:tid 39760] [client 188.95.65.41:51178] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adP_QCgic31vPbqmSIrcWQAAAMU"]
[Tue Apr 07 02:45:21.662742 2026] [:error] [pid 55003:tid 55012] [client 188.95.65.41:51194] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adP_QQiMyAbcUkWpJeAlpQAAAQU"]
[Tue Apr 07 02:45:22.151405 2026] [:error] [pid 55003:tid 55024] [client 188.95.65.41:51196] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adP_QgiMyAbcUkWpJeAlqgAAARE"]
[Tue Apr 07 02:45:23.393477 2026] [:error] [pid 39748:tid 39761] [client 188.95.65.41:51200] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adP_Qygic31vPbqmSIrcYAAAAMY"]
[Tue Apr 07 02:45:24.392156 2026] [:error] [pid 39748:tid 39771] [client 188.95.65.41:51950] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adP_RCgic31vPbqmSIrcZQAAANA"]
[Tue Apr 07 02:45:25.911183 2026] [:error] [pid 39328:tid 39352] [client 188.95.65.41:51964] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adP_RThTc4A7DPq5yJh_wQAAABQ"]
[Tue Apr 07 02:45:26.400095 2026] [:error] [pid 39329:tid 39414] [client 188.95.65.41:51980] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adP_Rlb3ztKMBQDfFBy4tgAAAEw"]
[Tue Apr 07 02:45:27.130470 2026] [:error] [pid 39328:tid 39342] [client 188.95.65.41:51982] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "adP_RzhTc4A7DPq5yJh_xwAAAAo"]
[Tue Apr 07 02:45:29.125128 2026] [:error] [pid 39330:tid 39449] [client 188.95.65.41:51996] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adP_SXXef-xW6Zktbj_MFwAAAJI"]
[Tue Apr 07 02:45:30.114249 2026] [:error] [pid 39330:tid 39435] [client 188.95.65.41:52004] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "adP_SnXef-xW6Zktbj_MGwAAAIU"]
[Tue Apr 07 02:45:30.360726 2026] [:error] [pid 39330:tid 39436] [client 188.95.65.41:52004] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adP_SnXef-xW6Zktbj_MHQAAAIY"]
[Tue Apr 07 02:45:31.350054 2026] [:error] [pid 39328:tid 39344] [client 188.95.65.41:52006] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adP_SzhTc4A7DPq5yJh_4gAAAAw"]
[Tue Apr 07 02:45:31.851893 2026] [:error] [pid 39748:tid 39763] [client 188.95.65.41:52016] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adP_Sygic31vPbqmSIrcmwAAAMg"]
[Tue Apr 07 02:45:33.853788 2026] [:error] [pid 39330:tid 39436] [client 188.95.65.41:52026] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adP_TXXef-xW6Zktbj_MKwAAAIY"]
[Tue Apr 07 02:45:34.850765 2026] [:error] [pid 39329:tid 39416] [client 188.95.65.41:55072] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adP_Tlb3ztKMBQDfFBy4xQAAAE4"]
[Tue Apr 07 02:45:35.665506 2026] [:error] [pid 55003:tid 55022] [client 188.95.65.41:55080] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adP_TwiMyAbcUkWpJeAlywAAAQ8"]
[Tue Apr 07 02:45:37.403937 2026] [:error] [pid 39748:tid 39778] [client 188.95.65.41:55092] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adP_USgic31vPbqmSIrcsgAAANc"]
[Tue Apr 07 02:45:37.892854 2026] [:error] [pid 55003:tid 55016] [client 188.95.65.41:55096] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adP_UQiMyAbcUkWpJeAlzgAAAQk"]
[Tue Apr 07 02:45:38.622061 2026] [:error] [pid 55003:tid 55028] [client 188.95.65.41:55098] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adP_UgiMyAbcUkWpJeAl0AAAARU"]
[Tue Apr 07 02:45:39.115198 2026] [:error] [pid 55003:tid 55013] [client 188.95.65.41:55112] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "adP_UwiMyAbcUkWpJeAl1wAAAQY"]
[Tue Apr 07 02:45:40.097312 2026] [:error] [pid 39330:tid 39436] [client 188.95.65.41:55128] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adP_VHXef-xW6Zktbj_MMwAAAIY"]
[Tue Apr 07 02:45:41.092756 2026] [:error] [pid 55003:tid 55020] [client 188.95.65.41:55136] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adP_VQiMyAbcUkWpJeAl4QAAAQ0"]
[Tue Apr 07 02:45:41.594807 2026] [:error] [pid 55003:tid 55016] [client 188.95.65.41:55148] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "adP_VQiMyAbcUkWpJeAl5wAAAQk"]
[Tue Apr 07 02:45:43.240863 2026] [:error] [pid 55003:tid 55017] [client 188.95.65.41:55160] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "adP_VwiMyAbcUkWpJeAl8wAAAQo"]
[Tue Apr 07 02:45:44.221855 2026] [:error] [pid 39328:tid 39337] [client 188.95.65.41:43806] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adP_WDhTc4A7DPq5yJh_8AAAAAU"]
[Tue Apr 07 02:45:45.462216 2026] [:error] [pid 39328:tid 39335] [client 188.95.65.41:43810] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adP_WThTc4A7DPq5yJh_-AAAAAM"]
[Tue Apr 07 02:45:45.956339 2026] [:error] [pid 39748:tid 39775] [client 188.95.65.41:43820] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adP_WSgic31vPbqmSIrcwwAAANQ"]
[Tue Apr 07 02:45:46.452071 2026] [:error] [pid 39330:tid 39435] [client 188.95.65.41:43822] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adP_WnXef-xW6Zktbj_MQQAAAIU"]
[Tue Apr 07 02:45:47.431526 2026] [:error] [pid 39748:tid 39766] [client 188.95.65.41:43828] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adP_Wygic31vPbqmSIrcxwAAAMs"]
[Tue Apr 07 02:45:48.413872 2026] [:error] [pid 55003:tid 55018] [client 188.95.65.41:43830] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adP_XAiMyAbcUkWpJeAmBAAAAQs"]
[Tue Apr 07 02:45:48.903940 2026] [:error] [pid 39330:tid 39441] [client 188.95.65.41:43838] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adP_XHXef-xW6Zktbj_MSAAAAIo"]
[Tue Apr 07 02:45:49.665054 2026] [:error] [pid 55003:tid 55017] [client 188.95.65.41:43842] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adP_XQiMyAbcUkWpJeAmDwAAAQo"]
[Tue Apr 07 02:45:50.158725 2026] [:error] [pid 39328:tid 39340] [client 188.95.65.41:43846] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "adP_XjhTc4A7DPq5yJiABwAAAAg"]
[Tue Apr 07 02:45:51.155497 2026] [:error] [pid 39748:tid 39772] [client 188.95.65.41:43850] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adP_Xygic31vPbqmSIrc1gAAANE"]
[Tue Apr 07 02:45:51.889469 2026] [:error] [pid 55003:tid 55015] [client 188.95.65.41:43856] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adP_XwiMyAbcUkWpJeAmGwAAAQg"]
[Tue Apr 07 02:45:52.377569 2026] [:error] [pid 39328:tid 39345] [client 188.95.65.41:43866] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adP_YDhTc4A7DPq5yJiAEAAAAA0"]
[Tue Apr 07 02:45:52.864921 2026] [:error] [pid 39330:tid 39435] [client 188.95.65.41:43870] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adP_YHXef-xW6Zktbj_MVgAAAIU"]
[Tue Apr 07 02:45:53.868162 2026] [:error] [pid 55003:tid 55015] [client 188.95.65.41:43880] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adP_YQiMyAbcUkWpJeAmJAAAAQg"]
[Tue Apr 07 02:45:54.867758 2026] [:error] [pid 39328:tid 39354] [client 188.95.65.41:55328] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adP_YjhTc4A7DPq5yJiAHAAAABY"]
[Tue Apr 07 02:45:55.616003 2026] [:error] [pid 55003:tid 55015] [client 188.95.65.41:55338] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adP_YwiMyAbcUkWpJeAmLQAAAQg"]
[Tue Apr 07 02:45:56.364841 2026] [:error] [pid 55003:tid 55007] [client 188.95.65.41:55340] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adP_ZAiMyAbcUkWpJeAmOwAAAQA"]
[Tue Apr 07 02:45:58.384742 2026] [:error] [pid 55003:tid 55027] [client 188.95.65.41:55342] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "adP_ZgiMyAbcUkWpJeAmRwAAARQ"]
[Tue Apr 07 02:45:58.919519 2026] [:error] [pid 39748:tid 39760] [client 188.95.65.41:55344] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adP_Zigic31vPbqmSIrc6QAAAMU"]
[Tue Apr 07 02:45:59.952353 2026] [:error] [pid 39748:tid 39768] [client 188.95.65.41:55346] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adP_Zygic31vPbqmSIrc8wAAAM0"]
[Tue Apr 07 02:46:01.586041 2026] [:error] [pid 39330:tid 39446] [client 188.95.65.41:55354] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adP_aXXef-xW6Zktbj_MbQAAAI8"]
[Tue Apr 07 02:46:02.634614 2026] [:error] [pid 39748:tid 39771] [client 188.95.65.41:55370] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "adP_aigic31vPbqmSIrdAAAAANA"]
[Tue Apr 07 02:46:03.672120 2026] [:error] [pid 39330:tid 39437] [client 188.95.65.41:55378] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "adP_a3Xef-xW6Zktbj_MfQAAAIc"]
[Tue Apr 07 02:46:04.445917 2026] [:error] [pid 39328:tid 39334] [client 188.95.65.41:39296] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "adP_bDhTc4A7DPq5yJiANQAAAAI"]
[Tue Apr 07 02:46:05.184701 2026] [:error] [pid 55003:tid 55015] [client 188.95.65.41:39300] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "adP_bQiMyAbcUkWpJeAmUAAAAQg"]
[Tue Apr 07 02:46:06.850049 2026] [:error] [pid 39748:tid 39765] [client 188.95.65.41:39308] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "adP_bigic31vPbqmSIrdDwAAAMo"]
[Tue Apr 07 02:46:08.106534 2026] [:error] [pid 39328:tid 39334] [client 188.95.65.41:39316] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "adP_cDhTc4A7DPq5yJiARwAAAAI"]
[Tue Apr 07 02:46:08.655029 2026] [proxy_fcgi:error] [pid 39328:tid 39353] [client 188.95.65.41:39318] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 02:46:08.900833 2026] [:error] [pid 39328:tid 39349] [client 188.95.65.41:39318] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "adP_cDhTc4A7DPq5yJiASgAAABE"]
[Tue Apr 07 02:46:09.391330 2026] [:error] [pid 55003:tid 55016] [client 188.95.65.41:39322] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "adP_cQiMyAbcUkWpJeAmaQAAAQk"]
[Tue Apr 07 02:46:10.373356 2026] [:error] [pid 39329:tid 39422] [client 188.95.65.41:4788] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "adP_clb3ztKMBQDfFBy5CAAAAFQ"]
[Tue Apr 07 02:46:10.973644 2026] [:error] [pid 39748:tid 39775] [client 188.95.65.41:39336] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "adP_cigic31vPbqmSIrdGwAAANQ"]
[Tue Apr 07 02:46:13.567599 2026] [:error] [pid 39748:tid 39761] [client 188.95.65.41:54168] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "adP_dSgic31vPbqmSIrdLgAAAMY"]
[Tue Apr 07 02:46:14.071694 2026] [:error] [pid 39328:tid 39343] [client 188.95.65.41:33896] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "adP_djhTc4A7DPq5yJiAVQAAAAs"]
[Tue Apr 07 02:46:14.834051 2026] [:error] [pid 55003:tid 55013] [client 188.95.65.41:33906] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "adP_dgiMyAbcUkWpJeAmggAAAQY"]
[Tue Apr 07 02:46:15.321886 2026] [:error] [pid 39329:tid 39416] [client 188.95.65.41:33912] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "adP_d1b3ztKMBQDfFBy5CwAAAE4"]
[Tue Apr 07 02:46:15.814815 2026] [:error] [pid 39328:tid 39350] [client 188.95.65.41:33918] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "adP_dzhTc4A7DPq5yJiAVwAAABI"]
[Tue Apr 07 02:46:16.307401 2026] [:error] [pid 39330:tid 39452] [client 188.95.65.41:33926] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "adP_eHXef-xW6Zktbj_MjAAAAJU"]
[Tue Apr 07 02:46:17.822162 2026] [:error] [pid 55003:tid 55028] [client 188.95.65.41:33930] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "adP_eQiMyAbcUkWpJeAmlAAAARU"]
[Tue Apr 07 02:46:18.328050 2026] [:error] [pid 39748:tid 39779] [client 188.95.65.41:33944] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "adP_eigic31vPbqmSIrdRAAAANg"]
[Tue Apr 07 02:46:19.361285 2026] [:error] [pid 55003:tid 55009] [client 188.95.65.41:33956] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "adP_ewiMyAbcUkWpJeAmngAAAQI"]
[Tue Apr 07 02:46:19.857591 2026] [:error] [pid 55003:tid 55021] [client 188.95.65.41:33958] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "adP_ewiMyAbcUkWpJeAmoQAAAQ4"]
[Tue Apr 07 02:46:20.931324 2026] [:error] [pid 39328:tid 39354] [client 188.95.65.41:33964] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "adP_fDhTc4A7DPq5yJiAXgAAABY"]
[Tue Apr 07 02:46:21.425575 2026] [:error] [pid 39329:tid 39408] [client 188.95.65.41:33980] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "adP_fVb3ztKMBQDfFBy5FAAAAEY"]
[Tue Apr 07 02:46:25.664614 2026] [:error] [pid 39330:tid 39455] [client 188.95.65.41:33996] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "adP_gXXef-xW6Zktbj_MowAAAJg"]
[Tue Apr 07 02:46:27.737985 2026] [:error] [pid 55003:tid 55018] [client 188.95.65.41:47108] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adP_gwiMyAbcUkWpJeAmsAAAAQs"]
[Tue Apr 07 02:46:28.787117 2026] [:error] [pid 39329:tid 39411] [client 188.95.65.41:47112] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "adP_hFb3ztKMBQDfFBy5JwAAAEk"]
[Tue Apr 07 02:46:29.519946 2026] [:error] [pid 55003:tid 55025] [client 188.95.65.41:47114] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "adP_hQiMyAbcUkWpJeAmtgAAARI"]
[Tue Apr 07 02:46:30.269324 2026] [:error] [pid 39748:tid 39776] [client 188.95.65.41:47124] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "adP_higic31vPbqmSIrdTAAAANU"]
[Tue Apr 07 02:46:30.778348 2026] [:error] [pid 39329:tid 39423] [client 188.95.65.41:47130] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "adP_hlb3ztKMBQDfFBy5LAAAAFU"]
[Tue Apr 07 02:46:31.305801 2026] [:error] [pid 55003:tid 55026] [client 188.95.65.41:47136] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "adP_hwiMyAbcUkWpJeAmugAAARM"]
[Tue Apr 07 02:46:32.549049 2026] [:error] [pid 55003:tid 55011] [client 188.95.65.41:47150] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "adP_iAiMyAbcUkWpJeAmxAAAAQQ"]
[Tue Apr 07 02:46:33.315662 2026] [:error] [pid 55003:tid 55010] [client 188.95.65.41:47154] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "adP_iQiMyAbcUkWpJeAmzgAAAQM"]
[Tue Apr 07 02:46:34.306701 2026] [:error] [pid 55003:tid 55027] [client 188.95.65.41:53016] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "adP_igiMyAbcUkWpJeAm1gAAARQ"]
[Tue Apr 07 02:46:34.901725 2026] [:error] [pid 55003:tid 55020] [client 188.95.65.41:53022] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "adP_igiMyAbcUkWpJeAm2QAAAQ0"]
[Tue Apr 07 02:46:35.395591 2026] [:error] [pid 39328:tid 39354] [client 188.95.65.41:53034] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "adP_izhTc4A7DPq5yJiAZgAAABY"]
[Tue Apr 07 02:46:39.174328 2026] [:error] [pid 39328:tid 39355] [client 188.95.65.41:53048] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "adP_jzhTc4A7DPq5yJiAfQAAABc"]
[Tue Apr 07 02:46:39.988408 2026] [:error] [pid 39748:tid 39765] [client 188.95.65.41:53064] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "adP_jygic31vPbqmSIrdYgAAAMo"]
[Tue Apr 07 02:46:41.048846 2026] [:error] [pid 39748:tid 39764] [client 188.95.65.41:53072] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "adP_kSgic31vPbqmSIrdaQAAAMk"]
[Tue Apr 07 02:46:41.539595 2026] [:error] [pid 39328:tid 39344] [client 188.95.65.41:53074] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "adP_kThTc4A7DPq5yJiAgwAAAAw"]
[Tue Apr 07 02:46:42.057268 2026] [:error] [pid 39330:tid 39450] [client 188.95.65.41:53078] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "adP_knXef-xW6Zktbj_MxAAAAJM"]
[Tue Apr 07 02:46:44.264323 2026] [:error] [pid 39330:tid 39446] [client 188.95.65.41:53090] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "adP_lHXef-xW6Zktbj_MygAAAI8"]
[Tue Apr 07 02:46:46.564292 2026] [:error] [pid 39330:tid 39433] [client 188.95.65.41:55778] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "adP_lnXef-xW6Zktbj_M1AAAAIM"]
[Tue Apr 07 02:46:48.073625 2026] [:error] [pid 55003:tid 55031] [client 188.95.65.41:55784] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "adP_mAiMyAbcUkWpJeAnAwAAARg"]
[Tue Apr 07 02:46:49.092710 2026] [:error] [pid 39330:tid 39437] [client 188.95.65.41:55786] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "adP_mXXef-xW6Zktbj_M2wAAAIc"]
[Tue Apr 07 02:46:49.587378 2026] [:error] [pid 55003:tid 55027] [client 188.95.65.41:55800] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "adP_mQiMyAbcUkWpJeAnBQAAARQ"]
[Tue Apr 07 02:46:52.848521 2026] [:error] [pid 55003:tid 55027] [client 188.95.65.41:55810] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "adP_nAiMyAbcUkWpJeAnFQAAARQ"]
[Tue Apr 07 02:46:53.392742 2026] [:error] [pid 39328:tid 39334] [client 188.95.65.41:55826] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "adP_nThTc4A7DPq5yJiApQAAAAI"]
[Tue Apr 07 02:46:55.376717 2026] [:error] [pid 55003:tid 55018] [client 188.95.65.41:47660] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "adP_nwiMyAbcUkWpJeAnIQAAAQs"]
[Tue Apr 07 02:46:56.112084 2026] [:error] [pid 39328:tid 39336] [client 188.95.65.41:47674] [client 188.95.65.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.95.65.41, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "adP_oDhTc4A7DPq5yJiArQAAAAQ"]
[Tue Apr 07 02:46:56.607530 2026] [:error] [pid 39328:tid 39333] [client 188.95.65.41:47674] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "adP_oDhTc4A7DPq5yJiAsAAAAAE"]
[Tue Apr 07 02:46:57.117780 2026] [:error] [pid 55003:tid 55030] [client 188.95.65.41:47688] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "adP_oQiMyAbcUkWpJeAnKQAAARc"]
[Tue Apr 07 02:46:57.630587 2026] [:error] [pid 39328:tid 39338] [client 188.95.65.41:47698] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "adP_oThTc4A7DPq5yJiAsQAAAAY"]
[Tue Apr 07 02:46:59.722894 2026] [:error] [pid 39328:tid 39347] [client 188.95.65.41:47706] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "adP_ozhTc4A7DPq5yJiAvgAAAA8"]
[Tue Apr 07 02:47:03.212424 2026] [:error] [pid 39748:tid 39768] [client 188.95.65.41:47722] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "adP_pygic31vPbqmSIrdsAAAAM0"]
[Tue Apr 07 02:47:04.337731 2026] [:error] [pid 55003:tid 55015] [client 188.95.65.41:55296] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "adP_qAiMyAbcUkWpJeAnRwAAAQg"]
[Tue Apr 07 02:47:07.914565 2026] [:error] [pid 55003:tid 55025] [client 188.95.65.41:55308] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adP_qwiMyAbcUkWpJeAnbgAAARI"]
[Tue Apr 07 02:47:08.487828 2026] [:error] [pid 39330:tid 39430] [client 188.95.65.41:55314] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "adP_rHXef-xW6Zktbj_M-wAAAIA"]
[Tue Apr 07 02:47:08.990547 2026] [:error] [pid 55003:tid 55017] [client 188.95.65.41:55320] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "adP_rAiMyAbcUkWpJeAncgAAAQo"]
[Tue Apr 07 02:47:09.488747 2026] [:error] [pid 39328:tid 39341] [client 188.95.65.41:55336] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "adP_rThTc4A7DPq5yJiAygAAAAk"]
[Tue Apr 07 02:47:10.734946 2026] [:error] [pid 55003:tid 55007] [client 188.95.65.41:55342] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "adP_rgiMyAbcUkWpJeAnfQAAAQA"]
[Tue Apr 07 02:47:11.223724 2026] [:error] [pid 55003:tid 55024] [client 188.95.65.41:55358] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "adP_rwiMyAbcUkWpJeAnhAAAARE"]
[Tue Apr 07 02:47:13.115735 2026] [:error] [pid 39328:tid 39342] [client 188.95.65.41:55362] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "adP_sThTc4A7DPq5yJiA4QAAAAo"]
[Tue Apr 07 02:47:14.649949 2026] [:error] [pid 39330:tid 39450] [client 188.95.65.41:55370] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "adP_snXef-xW6Zktbj_NCwAAAJM"]
[Tue Apr 07 02:47:15.257295 2026] [:error] [pid 39748:tid 39764] [client 188.95.65.41:36990] [client 188.95.65.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "adP_sygic31vPbqmSIrdtgAAAMk"]
[Tue Apr 07 02:47:45.612957 2026] [autoindex:error] [pid 39748:tid 39778] [client 146.70.160.244:33436] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 06:25:08.787286 2026] [:error] [pid 12948:tid 12963] [client 45.55.136.183:52280] [client 45.55.136.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adQyxMbeSPAN8LvMqsYuFgAAAQw"]
[Tue Apr 07 06:25:11.625134 2026] [:error] [pid 37596:tid 37629] [client 45.55.136.183:57124] [client 45.55.136.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adQyx6paAOZHEjRWjP39EgAAABc"]
[Tue Apr 07 08:03:40.462734 2026] [:error] [pid 12948:tid 12962] [client 194.26.192.92:60166] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "adRJ3MbeSPAN8LvMqsaQSQAAAQs"]
[Tue Apr 07 08:03:40.954185 2026] [:error] [pid 37719:tid 37733] [client 194.26.192.92:60258] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "adRJ3E09Xv52u2xXGLB-YAAAAMs"]
[Tue Apr 07 08:03:41.437864 2026] [:error] [pid 37719:tid 37727] [client 194.26.192.92:60381] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "adRJ3U09Xv52u2xXGLB-YQAAAMU"]
[Tue Apr 07 08:03:42.409493 2026] [:error] [pid 37598:tid 37678] [client 194.26.192.92:60641] [client 194.26.192.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/txets.php"] [unique_id "adRJ3u9g7q_cV2WhPay64QAAAJE"]
[Tue Apr 07 10:41:59.334721 2026] [:error] [pid 37597:tid 37636] [client 43.164.195.17:57144] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adRu9w6uAY0QAy-8EEK6CQAAAEI"]
[Tue Apr 07 10:56:44.500091 2026] [:error] [pid 37596:tid 37626] [client 217.216.72.68:59273] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adRybKpaAOZHEjRWjP1W8QAAABQ"]
[Tue Apr 07 10:56:48.139976 2026] [:error] [pid 37598:tid 37680] [client 217.216.72.68:61620] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/"] [unique_id "adRycO9g7q_cV2WhPawS6wAAAJM"]
[Tue Apr 07 10:56:48.247404 2026] [:error] [pid 37598:tid 37682] [client 217.216.72.68:61843] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "adRycO9g7q_cV2WhPawS7AAAAJU"]
[Tue Apr 07 10:56:58.544906 2026] [:error] [pid 37598:tid 37679] [client 217.216.72.68:63067] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adRyeu9g7q_cV2WhPawTPAAAAJI"]
[Tue Apr 07 10:56:58.711809 2026] [:error] [pid 37719:tid 37736] [client 217.216.72.68:59106] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adRyek09Xv52u2xXGLDvJAAAAM4"]
[Tue Apr 07 10:57:08.014919 2026] [:error] [pid 12948:tid 12962] [client 217.216.72.68:60743] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/"] [unique_id "adRyhMbeSPAN8LvMqsY3FgAAAQs"]
[Tue Apr 07 10:57:16.113632 2026] [:error] [pid 59490:tid 59512] [client 217.216.72.68:54136] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "adRyjEcw8OFbiUZ7Rx0SEgAAAVQ"]
[Tue Apr 07 10:57:16.322189 2026] [:error] [pid 59490:tid 59514] [client 217.216.72.68:53578] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adRyjEcw8OFbiUZ7Rx0SFQAAAVY"]
[Tue Apr 07 11:33:08.236030 2026] [:error] [pid 37598:tid 37665] [client 159.223.184.140:44242] [client 159.223.184.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adR69O9g7q_cV2WhPawsDgAAAIQ"]
[Tue Apr 07 13:21:08.230447 2026] [:error] [pid 37597:tid 37648] [client 103.111.230.153:64994] [client 103.111.230.153] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.111.230.153, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adSURA6uAY0QAy-8EEI0sQAAAE4"]
[Tue Apr 07 15:12:12.082792 2026] [:error] [pid 59660:tid 59677] [client 94.247.172.129:50419] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adSuTDp3-oiX2o5bTszWTwAAAc8"]
[Tue Apr 07 15:43:29.927777 2026] [:error] [pid 37719:tid 37740] [client 182.42.105.144:56668] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adS1oU09Xv52u2xXGLBv4wAAANI"]
[Tue Apr 07 16:04:12.225451 2026] [:error] [pid 59490:tid 59494] [client 185.198.191.225:57286] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adS6fEcw8OFbiUZ7Rx07bAAAAUI"]
[Tue Apr 07 16:04:13.548646 2026] [:error] [pid 37719:tid 37742] [client 185.198.191.225:57416] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adS6fU09Xv52u2xXGLB73QAAANQ"]
[Tue Apr 07 16:04:16.826161 2026] [:error] [pid 37596:tid 37615] [client 185.198.191.225:57418] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adS6gKpaAOZHEjRWjP13xQAAAAk"]
[Tue Apr 07 16:04:18.137072 2026] [:error] [pid 37597:tid 37653] [client 185.198.191.225:60758] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adS6gg6uAY0QAy-8EEKhagAAAFM"]
[Tue Apr 07 16:04:20.255001 2026] [:error] [pid 59804:tid 59806] [client 185.198.191.225:60762] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adS6hHYVIXiPh5_eJTlIhwAAAgA"]
[Tue Apr 07 16:04:21.028279 2026] [:error] [pid 37597:tid 37640] [client 185.198.191.225:60768] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adS6hQ6uAY0QAy-8EEKhggAAAEY"]
[Tue Apr 07 16:04:21.541122 2026] [:error] [pid 37597:tid 37647] [client 185.198.191.225:60782] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adS6hQ6uAY0QAy-8EEKhigAAAE0"]
[Tue Apr 07 16:04:22.061906 2026] [:error] [pid 37597:tid 37640] [client 185.198.191.225:60792] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adS6hg6uAY0QAy-8EEKhkAAAAEY"]
[Tue Apr 07 16:04:22.582501 2026] [:error] [pid 37597:tid 37645] [client 185.198.191.225:60796] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adS6hg6uAY0QAy-8EEKhlAAAAEs"]
[Tue Apr 07 16:04:23.103194 2026] [:error] [pid 37598:tid 37674] [client 185.198.191.225:60804] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adS6h-9g7q_cV2WhPaxqLgAAAI0"]
[Tue Apr 07 16:04:23.890602 2026] [:error] [pid 37597:tid 37651] [client 185.198.191.225:60806] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adS6hw6uAY0QAy-8EEKhpAAAAFE"]
[Tue Apr 07 16:04:24.925408 2026] [:error] [pid 37598:tid 37663] [client 185.198.191.225:52490] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "adS6iO9g7q_cV2WhPaxqMwAAAII"]
[Tue Apr 07 16:04:25.975588 2026] [:error] [pid 12948:tid 12974] [client 185.198.191.225:52500] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adS6icbeSPAN8LvMqsZyCQAAARc"]
[Tue Apr 07 16:04:26.750188 2026] [:error] [pid 37598:tid 37667] [client 185.198.191.225:52516] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adS6iu9g7q_cV2WhPaxqOgAAAIY"]
[Tue Apr 07 16:04:27.531673 2026] [:error] [pid 59551:tid 59561] [client 185.198.191.225:52528] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adS6i17LN7Ubyqs-sVuUIgAAAYg"]
[Tue Apr 07 16:04:29.631462 2026] [:error] [pid 37597:tid 37636] [client 185.198.191.225:52536] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adS6jQ6uAY0QAy-8EEKhvwAAAEI"]
[Tue Apr 07 16:04:30.410665 2026] [:error] [pid 12948:tid 12966] [client 185.198.191.225:40304] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adS6jsbeSPAN8LvMqsZyFAAAAQ8"]
[Tue Apr 07 16:04:31.439891 2026] [:error] [pid 37719:tid 37746] [client 185.198.191.225:52556] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adS6j009Xv52u2xXGLB8MAAAANg"]
[Tue Apr 07 16:04:32.221366 2026] [:error] [pid 59490:tid 59511] [client 185.198.191.225:52572] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adS6kEcw8OFbiUZ7Rx07fAAAAVM"]
[Tue Apr 07 16:04:33.782078 2026] [:error] [pid 37597:tid 37651] [client 185.198.191.225:52578] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adS6kQ6uAY0QAy-8EEKh2AAAAFE"]
[Tue Apr 07 16:04:34.565771 2026] [:error] [pid 37597:tid 37635] [client 185.198.191.225:52594] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adS6kg6uAY0QAy-8EEKh4gAAAEE"]
[Tue Apr 07 16:04:35.345860 2026] [:error] [pid 59804:tid 59807] [client 185.198.191.225:38552] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adS6k3YVIXiPh5_eJTlIlwAAAgE"]
[Tue Apr 07 16:04:35.864205 2026] [:error] [pid 37597:tid 37644] [client 185.198.191.225:38558] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adS6kw6uAY0QAy-8EEKh6gAAAEo"]
[Tue Apr 07 16:04:36.378112 2026] [:error] [pid 37597:tid 37635] [client 185.198.191.225:38570] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adS6lA6uAY0QAy-8EEKh7gAAAEE"]
[Tue Apr 07 16:04:37.670463 2026] [:error] [pid 59804:tid 59817] [client 185.198.191.225:38574] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adS6lXYVIXiPh5_eJTlIrAAAAgs"]
[Tue Apr 07 16:04:38.187578 2026] [:error] [pid 12948:tid 12971] [client 185.198.191.225:38584] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adS6lsbeSPAN8LvMqsZyHgAAARQ"]
[Tue Apr 07 16:04:38.700417 2026] [:error] [pid 59660:tid 59674] [client 185.198.191.225:38600] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adS6ljp3-oiX2o5bTszfSwAAAcw"]
[Tue Apr 07 16:04:41.306209 2026] [:error] [pid 37597:tid 37641] [client 185.198.191.225:38602] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adS6mQ6uAY0QAy-8EEKiAwAAAEc"]
[Tue Apr 07 16:04:42.620442 2026] [:error] [pid 37597:tid 37645] [client 185.198.191.225:38612] [client 185.198.191.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.191.225, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adS6mg6uAY0QAy-8EEKiDQAAAEs"]
[Tue Apr 07 16:04:45.801717 2026] [:error] [pid 37597:tid 37642] [client 185.198.191.225:38612] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adS6nQ6uAY0QAy-8EEKiGwAAAEg"]
[Tue Apr 07 16:04:46.833095 2026] [:error] [pid 59804:tid 59809] [client 185.198.191.225:50036] [client 185.198.191.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.191.225, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adS6nnYVIXiPh5_eJTlIwwAAAgM"]
[Tue Apr 07 16:04:47.355871 2026] [:error] [pid 59804:tid 59820] [client 185.198.191.225:50036] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "adS6n3YVIXiPh5_eJTlIyQAAAg4"]
[Tue Apr 07 16:04:49.949884 2026] [:error] [pid 59490:tid 59505] [client 185.198.191.225:50048] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adS6oUcw8OFbiUZ7Rx07pQAAAU0"]
[Tue Apr 07 16:04:52.553759 2026] [:error] [pid 59660:tid 59678] [client 185.198.191.225:50058] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adS6pDp3-oiX2o5bTszfZgAAAdA"]
[Tue Apr 07 16:04:53.600345 2026] [:error] [pid 12948:tid 12963] [client 185.198.191.225:50072] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adS6pcbeSPAN8LvMqsZyQwAAAQw"]
[Tue Apr 07 16:04:54.909135 2026] [:error] [pid 37596:tid 37616] [client 185.198.191.225:50078] [client 185.198.191.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.191.225, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adS6pqpaAOZHEjRWjP139QAAAAo"]
[Tue Apr 07 16:04:55.172651 2026] [:error] [pid 37596:tid 37625] [client 185.198.191.225:50078] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adS6p6paAOZHEjRWjP139wAAABM"]
[Tue Apr 07 16:05:00.108956 2026] [:error] [pid 59490:tid 59509] [client 185.198.191.225:55994] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adS6rEcw8OFbiUZ7Rx07ygAAAVE"]
[Tue Apr 07 16:05:01.403707 2026] [:error] [pid 59804:tid 59828] [client 185.198.191.225:55996] [client 185.198.191.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.191.225, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adS6rXYVIXiPh5_eJTlI_gAAAhY"]
[Tue Apr 07 16:05:02.446744 2026] [:error] [pid 59804:tid 59811] [client 185.198.191.225:55996] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adS6rnYVIXiPh5_eJTlJBwAAAgU"]
[Tue Apr 07 16:05:03.234097 2026] [:error] [pid 12948:tid 12966] [client 185.198.191.225:56002] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adS6r8beSPAN8LvMqsZyWQAAAQ8"]
[Tue Apr 07 16:05:04.271196 2026] [:error] [pid 59490:tid 59492] [client 185.198.191.225:56018] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adS6sEcw8OFbiUZ7Rx071QAAAUA"]
[Tue Apr 07 16:05:05.570558 2026] [:error] [pid 37598:tid 37662] [client 185.198.191.225:34120] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adS6se9g7q_cV2WhPaxqrQAAAIE"]
[Tue Apr 07 16:05:06.098021 2026] [:error] [pid 59551:tid 59567] [client 185.198.191.225:34126] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adS6sl7LN7Ubyqs-sVuUiwAAAY4"]
[Tue Apr 07 16:05:07.943955 2026] [:error] [pid 59660:tid 59678] [client 185.198.191.225:34140] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adS6szp3-oiX2o5bTszfiAAAAdA"]
[Tue Apr 07 16:05:08.719029 2026] [:error] [pid 37719:tid 37740] [client 185.198.191.225:34156] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adS6tE09Xv52u2xXGLB8iwAAANI"]
[Tue Apr 07 16:05:10.034266 2026] [:error] [pid 37597:tid 37640] [client 185.198.191.225:34170] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adS6tg6uAY0QAy-8EEKiQQAAAEY"]
[Tue Apr 07 16:05:11.352838 2026] [:error] [pid 37598:tid 37670] [client 185.198.191.225:34184] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adS6t-9g7q_cV2WhPaxqugAAAIk"]
[Tue Apr 07 16:05:12.386872 2026] [:error] [pid 37719:tid 37738] [client 185.198.191.225:34200] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "adS6uE09Xv52u2xXGLB8nwAAANA"]
[Tue Apr 07 16:05:13.704009 2026] [:error] [pid 59804:tid 59817] [client 185.198.191.225:34210] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adS6uXYVIXiPh5_eJTlJHQAAAgs"]
[Tue Apr 07 16:05:16.042336 2026] [:error] [pid 59804:tid 59812] [client 185.198.191.225:34224] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adS6vHYVIXiPh5_eJTlJKgAAAgY"]
[Tue Apr 07 16:05:16.560099 2026] [:error] [pid 37597:tid 37649] [client 185.198.191.225:59880] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adS6vA6uAY0QAy-8EEKiUgAAAE8"]
[Tue Apr 07 16:05:17.080748 2026] [:error] [pid 12948:tid 12963] [client 185.198.191.225:59894] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adS6vcbeSPAN8LvMqsZyagAAAQw"]
[Tue Apr 07 16:05:17.600709 2026] [:error] [pid 37598:tid 37676] [client 185.198.191.225:59902] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adS6ve9g7q_cV2WhPaxqxQAAAI8"]
[Tue Apr 07 16:05:18.386377 2026] [:error] [pid 37597:tid 37651] [client 185.198.191.225:59914] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adS6vg6uAY0QAy-8EEKiXgAAAFE"]
[Tue Apr 07 16:05:18.900956 2026] [:error] [pid 59660:tid 59683] [client 185.198.191.225:59926] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adS6vjp3-oiX2o5bTszfngAAAdU"]
[Tue Apr 07 16:05:19.946514 2026] [:error] [pid 37597:tid 37653] [client 185.198.191.225:59942] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adS6vw6uAY0QAy-8EEKiawAAAFM"]
[Tue Apr 07 16:05:20.464763 2026] [:error] [pid 59551:tid 59554] [client 185.198.191.225:59948] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adS6wF7LN7Ubyqs-sVuUoQAAAYE"]
[Tue Apr 07 16:05:20.977607 2026] [:error] [pid 37597:tid 37645] [client 185.198.191.225:59960] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adS6wA6uAY0QAy-8EEKicAAAAEs"]
[Tue Apr 07 16:05:21.492048 2026] [:error] [pid 37719:tid 37724] [client 185.198.191.225:59964] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adS6wU09Xv52u2xXGLB8xAAAAMI"]
[Tue Apr 07 16:05:22.276221 2026] [:error] [pid 37597:tid 37654] [client 185.198.191.225:59974] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adS6wg6uAY0QAy-8EEKieQAAAFQ"]
[Tue Apr 07 16:05:23.309799 2026] [:error] [pid 59490:tid 59506] [client 185.198.191.225:59984] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adS6w0cw8OFbiUZ7Rx076QAAAU4"]
[Tue Apr 07 16:05:24.891363 2026] [:error] [pid 37596:tid 37623] [client 185.198.191.225:60000] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adS6xKpaAOZHEjRWjP14GQAAABE"]
[Tue Apr 07 16:05:28.448399 2026] [:error] [pid 59551:tid 59569] [client 185.198.191.225:36080] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adS6yF7LN7Ubyqs-sVuUvwAAAZA"]
[Tue Apr 07 16:05:29.744811 2026] [:error] [pid 59804:tid 59811] [client 185.198.191.225:36092] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adS6yXYVIXiPh5_eJTlJSQAAAgU"]
[Tue Apr 07 16:05:30.265209 2026] [:error] [pid 37597:tid 37636] [client 185.198.191.225:36096] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adS6yg6uAY0QAy-8EEKinQAAAEI"]
[Tue Apr 07 16:05:31.854812 2026] [:error] [pid 59660:tid 59681] [client 185.198.191.225:36104] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adS6yzp3-oiX2o5bTszftAAAAdM"]
[Tue Apr 07 16:05:33.170528 2026] [proxy_fcgi:error] [pid 37597:tid 37634] [client 185.198.191.225:36110] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:05:33.433079 2026] [proxy_fcgi:error] [pid 37597:tid 37643] [client 185.198.191.225:36110] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:05:33.695736 2026] [proxy_fcgi:error] [pid 37597:tid 37653] [client 185.198.191.225:36110] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:05:35.008312 2026] [:error] [pid 37597:tid 37641] [client 185.198.191.225:36110] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adS6zw6uAY0QAy-8EEKi3AAAAEc"]
[Tue Apr 07 16:05:35.527717 2026] [:error] [pid 37597:tid 37643] [client 185.198.191.225:54338] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adS6zw6uAY0QAy-8EEKi5wAAAEk"]
[Tue Apr 07 16:05:36.074876 2026] [:error] [pid 37597:tid 37654] [client 185.198.191.225:27285] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adS60A6uAY0QAy-8EEKi7AAAAFQ"]
[Tue Apr 07 16:05:36.585190 2026] [:error] [pid 59804:tid 59811] [client 185.198.191.225:54356] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adS60HYVIXiPh5_eJTlJUwAAAgU"]
[Tue Apr 07 16:05:37.097974 2026] [:error] [pid 37598:tid 37673] [client 185.198.191.225:54364] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adS60e9g7q_cV2WhPaxq5gAAAIw"]
[Tue Apr 07 16:05:37.617036 2026] [:error] [pid 37597:tid 37658] [client 185.198.191.225:54368] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adS60Q6uAY0QAy-8EEKi-gAAAFg"]
[Tue Apr 07 16:05:38.404334 2026] [:error] [pid 37598:tid 37684] [client 185.198.191.225:54384] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adS60u9g7q_cV2WhPaxq7wAAAJc"]
[Tue Apr 07 16:05:40.605692 2026] [:error] [pid 37596:tid 37622] [client 185.198.191.225:54390] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adS61KpaAOZHEjRWjP14JQAAABA"]
[Tue Apr 07 16:05:41.118759 2026] [:error] [pid 59490:tid 59506] [client 185.198.191.225:54406] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adS61Ucw8OFbiUZ7Rx08AgAAAU4"]
[Tue Apr 07 16:05:41.630325 2026] [:error] [pid 37598:tid 37675] [client 185.198.191.225:54408] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adS61e9g7q_cV2WhPaxq_wAAAI4"]
[Tue Apr 07 16:05:42.665177 2026] [:error] [pid 37598:tid 37679] [client 185.198.191.225:54412] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adS61u9g7q_cV2WhPaxrCQAAAJI"]
[Tue Apr 07 16:05:43.491146 2026] [:error] [pid 37719:tid 37733] [client 185.198.191.225:54416] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adS61009Xv52u2xXGLB89AAAAMs"]
[Tue Apr 07 16:05:44.542531 2026] [:error] [pid 37597:tid 37657] [client 185.198.191.225:54428] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adS62A6uAY0QAy-8EEKjKQAAAFc"]
[Tue Apr 07 16:05:45.579560 2026] [:error] [pid 37719:tid 37742] [client 185.198.191.225:39692] [client 185.198.191.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adS62U09Xv52u2xXGLB8-AAAANQ"]
[Tue Apr 07 16:05:52.185002 2026] [:error] [pid 59551:tid 59560] [client 149.40.63.163:39718] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adS64F7LN7Ubyqs-sVuU6wAAAYc"]
[Tue Apr 07 16:05:53.939929 2026] [:error] [pid 59490:tid 59494] [client 149.40.63.163:39724] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adS64Ucw8OFbiUZ7Rx08EgAAAUI"]
[Tue Apr 07 16:05:54.804337 2026] [:error] [pid 37597:tid 37635] [client 149.40.63.163:47542] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adS64g6uAY0QAy-8EEKjcAAAAEE"]
[Tue Apr 07 16:06:01.196213 2026] [:error] [pid 37597:tid 37652] [client 149.40.63.163:47552] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adS66Q6uAY0QAy-8EEKjogAAAFI"]
[Tue Apr 07 16:06:01.771941 2026] [:error] [pid 37719:tid 37740] [client 149.40.63.163:47558] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adS66U09Xv52u2xXGLB9MQAAANI"]
[Tue Apr 07 16:06:02.647340 2026] [:error] [pid 37719:tid 37737] [client 149.40.63.163:47572] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adS66k09Xv52u2xXGLB9NwAAAM8"]
[Tue Apr 07 16:06:03.782251 2026] [:error] [pid 59490:tid 59509] [client 149.40.63.163:47584] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adS660cw8OFbiUZ7Rx08JAAAAVE"]
[Tue Apr 07 16:06:04.347956 2026] [:error] [pid 37719:tid 37724] [client 149.40.63.163:47586] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adS67E09Xv52u2xXGLB9QgAAAMI"]
[Tue Apr 07 16:06:06.045810 2026] [:error] [pid 37597:tid 37654] [client 149.40.63.163:59484] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adS67g6uAY0QAy-8EEKjxwAAAFQ"]
[Tue Apr 07 16:06:06.605520 2026] [:error] [pid 37597:tid 37652] [client 149.40.63.163:59494] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "adS67g6uAY0QAy-8EEKj0wAAAFI"]
[Tue Apr 07 16:06:08.585666 2026] [:error] [pid 37597:tid 37635] [client 149.40.63.163:27775] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adS68A6uAY0QAy-8EEKj7QAAAEE"]
[Tue Apr 07 16:06:09.439502 2026] [proxy_fcgi:error] [pid 37598:tid 37674] [client 149.40.63.163:59518] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:06:10.001377 2026] [:error] [pid 37598:tid 37661] [client 149.40.63.163:59518] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "adS68u9g7q_cV2WhPaxrKgAAAIA"]
[Tue Apr 07 16:06:10.562511 2026] [:error] [pid 59490:tid 59505] [client 149.40.63.163:59528] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adS68kcw8OFbiUZ7Rx08LAAAAU0"]
[Tue Apr 07 16:06:11.731338 2026] [:error] [pid 37596:tid 37630] [client 149.40.63.163:59532] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adS686paAOZHEjRWjP14UgAAABg"]
[Tue Apr 07 16:06:12.292371 2026] [:error] [pid 59660:tid 59674] [client 149.40.63.163:59536] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adS69Dp3-oiX2o5bTszf4QAAAcw"]
[Tue Apr 07 16:06:14.847759 2026] [:error] [pid 12948:tid 12974] [client 149.40.63.163:59540] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adS69sbeSPAN8LvMqsZyxwAAARc"]
[Tue Apr 07 16:06:15.408147 2026] [:error] [pid 12948:tid 12967] [client 149.40.63.163:43432] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adS698beSPAN8LvMqsZyyAAAARA"]
[Tue Apr 07 16:06:17.111569 2026] [:error] [pid 37597:tid 37635] [client 149.40.63.163:43434] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "adS6-Q6uAY0QAy-8EEKkBwAAAEE"]
[Tue Apr 07 16:06:17.668720 2026] [:error] [pid 59660:tid 59683] [client 149.40.63.163:43442] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adS6-Tp3-oiX2o5bTszf6AAAAdU"]
[Tue Apr 07 16:06:18.226617 2026] [:error] [pid 59804:tid 59809] [client 149.40.63.163:43444] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adS6-nYVIXiPh5_eJTlJmQAAAgM"]
[Tue Apr 07 16:06:21.535485 2026] [:error] [pid 37596:tid 37618] [client 149.40.63.163:43454] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adS6_apaAOZHEjRWjP14YwAAAAw"]
[Tue Apr 07 16:06:22.382558 2026] [:error] [pid 37597:tid 37645] [client 149.40.63.163:43464] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adS6_g6uAY0QAy-8EEKkLAAAAEs"]
[Tue Apr 07 16:06:24.930316 2026] [:error] [pid 37596:tid 37618] [client 149.40.63.163:43476] [client 149.40.63.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.40.63.163, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "adS7AKpaAOZHEjRWjP14dQAAAAw"]
[Tue Apr 07 16:06:26.629745 2026] [:error] [pid 37596:tid 37621] [client 149.40.63.163:43476] [client 149.40.63.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.40.63.163, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adS7AqpaAOZHEjRWjP14fgAAAA8"]
[Tue Apr 07 16:06:29.753010 2026] [proxy_fcgi:error] [pid 37596:tid 37611] [client 149.40.63.163:43476] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:06:34.006106 2026] [:error] [pid 37596:tid 37613] [client 149.40.63.163:43476] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adS7CqpaAOZHEjRWjP14ngAAAAc"]
[Tue Apr 07 16:06:35.413474 2026] [:error] [pid 59804:tid 59809] [client 149.40.63.163:50522] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adS7C3YVIXiPh5_eJTlJ0AAAAgM"]
[Tue Apr 07 16:06:36.534067 2026] [:error] [pid 59490:tid 59495] [client 149.40.63.163:50532] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adS7DEcw8OFbiUZ7Rx08UwAAAUM"]
[Tue Apr 07 16:06:39.647071 2026] [:error] [pid 59551:tid 59562] [client 149.40.63.163:50536] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adS7D17LN7Ubyqs-sVuVkQAAAYk"]
[Tue Apr 07 16:06:40.780519 2026] [:error] [pid 37596:tid 37609] [client 149.40.63.163:50550] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adS7EKpaAOZHEjRWjP14ugAAAAM"]
[Tue Apr 07 16:06:41.622572 2026] [:error] [pid 37597:tid 37654] [client 149.40.63.163:50558] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adS7EQ6uAY0QAy-8EEKkgwAAAFQ"]
[Tue Apr 07 16:06:43.338909 2026] [proxy_fcgi:error] [pid 59551:tid 59558] [client 149.40.63.163:50568] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:06:44.964386 2026] [proxy_fcgi:error] [pid 59551:tid 59573] [client 149.40.63.163:50568] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:06:45.247368 2026] [:error] [pid 59551:tid 59560] [client 149.40.63.163:50568] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adS7FV7LN7Ubyqs-sVuVrAAAAYc"]
[Tue Apr 07 16:06:45.804151 2026] [:error] [pid 37597:tid 37652] [client 149.40.63.163:45774] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adS7FQ6uAY0QAy-8EEKklAAAAFI"]
[Tue Apr 07 16:06:48.356310 2026] [:error] [pid 37597:tid 37644] [client 149.40.63.163:45782] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adS7GA6uAY0QAy-8EEKktAAAAEo"]
[Tue Apr 07 16:06:49.204620 2026] [:error] [pid 37597:tid 37648] [client 149.40.63.163:45798] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "adS7GQ6uAY0QAy-8EEKkuAAAAE4"]
[Tue Apr 07 16:06:50.655689 2026] [:error] [pid 59804:tid 59828] [client 149.40.63.163:45802] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adS7GnYVIXiPh5_eJTlJ9wAAAhY"]
[Tue Apr 07 16:06:53.183472 2026] [:error] [pid 37719:tid 37743] [client 149.40.63.163:45812] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adS7HU09Xv52u2xXGLB9pQAAANU"]
[Tue Apr 07 16:06:53.747866 2026] [proxy_fcgi:error] [pid 59490:tid 59503] [client 149.40.63.163:45826] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:06:54.602996 2026] [:error] [pid 59490:tid 59503] [client 149.40.63.163:45826] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adS7Hkcw8OFbiUZ7Rx08dQAAAUs"]
[Tue Apr 07 16:06:56.642287 2026] [proxy_fcgi:error] [pid 59804:tid 59825] [client 149.40.63.163:39790] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:06:57.222690 2026] [:error] [pid 59804:tid 59827] [client 149.40.63.163:39790] [client 149.40.63.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.40.63.163, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adS7IXYVIXiPh5_eJTlKHgAAAhU"]
[Tue Apr 07 16:06:58.681074 2026] [:error] [pid 59804:tid 59811] [client 149.40.63.163:39790] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adS7InYVIXiPh5_eJTlKJgAAAgU"]
[Tue Apr 07 16:06:59.537584 2026] [:error] [pid 59660:tid 59677] [client 149.40.63.163:39792] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adS7Izp3-oiX2o5bTszgHgAAAc8"]
[Tue Apr 07 16:07:01.251213 2026] [:error] [pid 59490:tid 59495] [client 149.40.63.163:39800] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adS7JUcw8OFbiUZ7Rx08igAAAUM"]
[Tue Apr 07 16:07:02.671622 2026] [:error] [pid 37596:tid 37625] [client 149.40.63.163:39806] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adS7JqpaAOZHEjRWjP141QAAABM"]
[Tue Apr 07 16:07:03.425628 2026] [:error] [pid 37719:tid 37733] [client 149.40.63.163:39814] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adS7J009Xv52u2xXGLB9xwAAAMs"]
[Tue Apr 07 16:07:04.843106 2026] [:error] [pid 37597:tid 37656] [client 149.40.63.163:39820] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adS7KA6uAY0QAy-8EEKk4QAAAFY"]
[Tue Apr 07 16:07:06.004093 2026] [proxy_fcgi:error] [pid 37719:tid 37740] [client 149.40.63.163:52674] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:07:06.292589 2026] [:error] [pid 37719:tid 37728] [client 149.40.63.163:52674] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adS7Kk09Xv52u2xXGLB94AAAAMY"]
[Tue Apr 07 16:07:07.135377 2026] [:error] [pid 37719:tid 37736] [client 149.40.63.163:52686] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "adS7K009Xv52u2xXGLB97wAAAM4"]
[Tue Apr 07 16:07:07.698291 2026] [:error] [pid 12948:tid 12957] [client 149.40.63.163:52700] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adS7K8beSPAN8LvMqsZy-gAAAQY"]
[Tue Apr 07 16:07:08.256175 2026] [:error] [pid 12948:tid 12959] [client 149.40.63.163:52702] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adS7LMbeSPAN8LvMqsZy-wAAAQg"]
[Tue Apr 07 16:07:08.828992 2026] [:error] [pid 37719:tid 37727] [client 149.40.63.163:38384] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adS7LE09Xv52u2xXGLB9-QAAAMU"]
[Tue Apr 07 16:07:09.392703 2026] [:error] [pid 37719:tid 37737] [client 149.40.63.163:52726] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adS7LU09Xv52u2xXGLB9_QAAAM8"]
[Tue Apr 07 16:07:09.957646 2026] [:error] [pid 37598:tid 37685] [client 149.40.63.163:52738] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adS7Le9g7q_cV2WhPaxrqgAAAJg"]
[Tue Apr 07 16:07:11.092773 2026] [:error] [pid 37597:tid 37637] [client 149.40.63.163:52754] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adS7Lw6uAY0QAy-8EEKlCAAAAEM"]
[Tue Apr 07 16:07:11.652925 2026] [:error] [pid 37597:tid 37636] [client 149.40.63.163:52760] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adS7Lw6uAY0QAy-8EEKlEAAAAEI"]
[Tue Apr 07 16:07:12.234663 2026] [:error] [pid 12948:tid 12966] [client 149.40.63.163:52772] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adS7MMbeSPAN8LvMqsZy_AAAAQ8"]
[Tue Apr 07 16:07:12.800651 2026] [:error] [pid 59551:tid 59566] [client 149.40.63.163:52774] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adS7MF7LN7Ubyqs-sVuV3gAAAY0"]
[Tue Apr 07 16:07:13.358708 2026] [:error] [pid 37596:tid 37630] [client 149.40.63.163:52790] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adS7MapaAOZHEjRWjP142gAAABg"]
[Tue Apr 07 16:07:13.918602 2026] [proxy_fcgi:error] [pid 12948:tid 12953] [client 149.40.63.163:52806] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:07:14.766359 2026] [:error] [pid 12948:tid 12970] [client 149.40.63.163:52806] [client 149.40.63.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.40.63.163, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adS7MsbeSPAN8LvMqsZzDQAAARM"]
[Tue Apr 07 16:07:16.185394 2026] [:error] [pid 12948:tid 12973] [client 149.40.63.163:52806] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adS7NMbeSPAN8LvMqsZzEgAAARY"]
[Tue Apr 07 16:07:21.426940 2026] [:error] [pid 59551:tid 59554] [client 149.40.63.163:54382] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adS7OV7LN7Ubyqs-sVuV9QAAAYE"]
[Tue Apr 07 16:07:21.985948 2026] [:error] [pid 59660:tid 59679] [client 149.40.63.163:54384] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adS7OTp3-oiX2o5bTszgLAAAAdE"]
[Tue Apr 07 16:07:22.562423 2026] [:error] [pid 37598:tid 37663] [client 149.40.63.163:54386] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adS7Ou9g7q_cV2WhPaxrugAAAII"]
[Tue Apr 07 16:07:24.817724 2026] [:error] [pid 59804:tid 59815] [client 149.40.63.163:54402] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adS7PHYVIXiPh5_eJTlKWQAAAgk"]
[Tue Apr 07 16:07:25.378410 2026] [:error] [pid 59804:tid 59809] [client 149.40.63.163:48082] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adS7PXYVIXiPh5_eJTlKWwAAAgM"]
[Tue Apr 07 16:07:27.407982 2026] [:error] [pid 12948:tid 12966] [client 149.40.63.163:48086] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adS7P8beSPAN8LvMqsZzKAAAAQ8"]
[Tue Apr 07 16:07:29.116078 2026] [:error] [pid 37598:tid 37681] [client 149.40.63.163:48100] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adS7Qe9g7q_cV2WhPaxr2wAAAJQ"]
[Tue Apr 07 16:07:29.963584 2026] [:error] [pid 37597:tid 37644] [client 149.40.63.163:48102] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adS7QQ6uAY0QAy-8EEKlNgAAAEo"]
[Tue Apr 07 16:07:31.099735 2026] [:error] [pid 59804:tid 59825] [client 149.40.63.163:48112] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adS7Q3YVIXiPh5_eJTlKawAAAhM"]
[Tue Apr 07 16:07:34.922599 2026] [:error] [pid 59551:tid 59571] [client 149.40.63.163:48122] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adS7Rl7LN7Ubyqs-sVuWFAAAAZI"]
[Tue Apr 07 16:07:35.767799 2026] [:error] [pid 59490:tid 59508] [client 149.40.63.163:34448] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "adS7R0cw8OFbiUZ7Rx08rAAAAVA"]
[Tue Apr 07 16:07:38.047863 2026] [:error] [pid 59804:tid 59813] [client 149.40.63.163:34458] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adS7SnYVIXiPh5_eJTlKiQAAAgc"]
[Tue Apr 07 16:07:39.164040 2026] [:error] [pid 59551:tid 59558] [client 149.40.63.163:34468] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adS7S17LN7Ubyqs-sVuWHAAAAYU"]
[Tue Apr 07 16:07:40.876955 2026] [:error] [pid 37719:tid 37746] [client 149.40.63.163:34480] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adS7TE09Xv52u2xXGLB-VwAAANg"]
[Tue Apr 07 16:07:42.751124 2026] [:error] [pid 12948:tid 12963] [client 149.40.63.163:34496] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adS7TsbeSPAN8LvMqsZzSQAAAQw"]
[Tue Apr 07 16:07:43.890304 2026] [:error] [pid 37719:tid 37735] [client 149.40.63.163:34504] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adS7T009Xv52u2xXGLB-aAAAAM0"]
[Tue Apr 07 16:07:44.467577 2026] [:error] [pid 37597:tid 37655] [client 149.40.63.163:35284] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adS7UA6uAY0QAy-8EEKlbgAAAFU"]
[Tue Apr 07 16:07:46.529350 2026] [:error] [pid 59490:tid 59515] [client 149.40.63.163:35298] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adS7Ukcw8OFbiUZ7Rx08uwAAAVc"]
[Tue Apr 07 16:07:48.543118 2026] [:error] [pid 59490:tid 59498] [client 149.40.63.163:35308] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adS7VEcw8OFbiUZ7Rx08xAAAAUY"]
[Tue Apr 07 16:07:50.284427 2026] [:error] [pid 59660:tid 59662] [client 149.40.63.163:35312] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adS7Vjp3-oiX2o5bTszgWAAAAcA"]
[Tue Apr 07 16:07:50.849387 2026] [:error] [pid 37719:tid 37731] [client 149.40.63.163:35328] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adS7Vk09Xv52u2xXGLB-gAAAAMk"]
[Tue Apr 07 16:07:51.685490 2026] [:error] [pid 59660:tid 59668] [client 149.40.63.163:35338] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adS7Vzp3-oiX2o5bTszgWwAAAcY"]
[Tue Apr 07 16:07:52.818846 2026] [:error] [pid 59490:tid 59511] [client 149.40.63.163:35352] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adS7WEcw8OFbiUZ7Rx080QAAAVM"]
[Tue Apr 07 16:07:53.382195 2026] [:error] [pid 59551:tid 59554] [client 149.40.63.163:35364] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adS7WV7LN7Ubyqs-sVuWTgAAAYE"]
[Tue Apr 07 16:07:55.624071 2026] [:error] [pid 12948:tid 12969] [client 149.40.63.163:35370] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adS7W8beSPAN8LvMqsZzbAAAARI"]
[Tue Apr 07 16:07:56.749656 2026] [:error] [pid 37597:tid 37657] [client 149.40.63.163:48802] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adS7XA6uAY0QAy-8EEKlkgAAAFc"]
[Tue Apr 07 16:07:57.308418 2026] [:error] [pid 37719:tid 37728] [client 149.40.63.163:48804] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adS7XU09Xv52u2xXGLB-oQAAAMY"]
[Tue Apr 07 16:07:58.468901 2026] [:error] [pid 37719:tid 37743] [client 149.40.63.163:48808] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adS7Xk09Xv52u2xXGLB-sQAAANU"]
[Tue Apr 07 16:07:59.308785 2026] [:error] [pid 59551:tid 59565] [client 149.40.63.163:48820] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adS7X17LN7Ubyqs-sVuWawAAAYw"]
[Tue Apr 07 16:08:01.295011 2026] [:error] [pid 37596:tid 37626] [client 149.40.63.163:48822] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adS7YapaAOZHEjRWjP15CgAAABQ"]
[Tue Apr 07 16:08:02.429392 2026] [:error] [pid 12948:tid 12965] [client 149.40.63.163:48838] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adS7YsbeSPAN8LvMqsZzcQAAAQ4"]
[Tue Apr 07 16:08:03.561879 2026] [:error] [pid 59804:tid 59817] [client 149.40.63.163:48850] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adS7Y3YVIXiPh5_eJTlKsQAAAgs"]
[Tue Apr 07 16:08:04.403618 2026] [:error] [pid 59804:tid 59822] [client 149.40.63.163:48854] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "adS7ZHYVIXiPh5_eJTlKuwAAAhA"]
[Tue Apr 07 16:08:06.727978 2026] [:error] [pid 37719:tid 37727] [client 149.40.63.163:42504] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adS7Zk09Xv52u2xXGLB-0AAAAMU"]
[Tue Apr 07 16:08:07.294164 2026] [:error] [pid 37719:tid 37741] [client 149.40.63.163:42516] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "adS7Z009Xv52u2xXGLB-1gAAANM"]
[Tue Apr 07 16:08:07.855589 2026] [:error] [pid 37597:tid 37658] [client 149.40.63.163:42532] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adS7Zw6uAY0QAy-8EEKltAAAAFg"]
[Tue Apr 07 16:08:10.138809 2026] [:error] [pid 37719:tid 37734] [client 149.40.63.163:42540] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adS7ak09Xv52u2xXGLB-6QAAAMw"]
[Tue Apr 07 16:08:11.556257 2026] [:error] [pid 37597:tid 37644] [client 149.40.63.163:42554] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adS7aw6uAY0QAy-8EEKlyAAAAEo"]
[Tue Apr 07 16:08:12.679606 2026] [:error] [pid 37597:tid 37637] [client 149.40.63.163:42556] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adS7bA6uAY0QAy-8EEKlzwAAAEM"]
[Tue Apr 07 16:08:13.806975 2026] [:error] [pid 37597:tid 37645] [client 149.40.63.163:42568] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adS7bQ6uAY0QAy-8EEKl2gAAAEs"]
[Tue Apr 07 16:08:15.784708 2026] [:error] [pid 37597:tid 37655] [client 149.40.63.163:42574] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adS7bw6uAY0QAy-8EEKl7gAAAFU"]
[Tue Apr 07 16:08:16.627615 2026] [:error] [pid 59551:tid 59567] [client 149.40.63.163:34814] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adS7cF7LN7Ubyqs-sVuWewAAAY4"]
[Tue Apr 07 16:08:17.465871 2026] [:error] [pid 37597:tid 37637] [client 149.40.63.163:34820] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adS7cQ6uAY0QAy-8EEKl_gAAAEM"]
[Tue Apr 07 16:08:18.639381 2026] [:error] [pid 59490:tid 59511] [client 149.40.63.163:34834] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adS7ckcw8OFbiUZ7Rx08-AAAAVM"]
[Tue Apr 07 16:08:21.464687 2026] [:error] [pid 59804:tid 59822] [client 149.40.63.163:34846] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adS7dXYVIXiPh5_eJTlK5gAAAhA"]
[Tue Apr 07 16:08:22.031783 2026] [:error] [pid 37597:tid 37647] [client 149.40.63.163:34848] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adS7dg6uAY0QAy-8EEKmFAAAAE0"]
[Tue Apr 07 16:08:23.429302 2026] [:error] [pid 37719:tid 37742] [client 149.40.63.163:34850] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adS7d009Xv52u2xXGLB_AAAAANQ"]
[Tue Apr 07 16:08:23.985593 2026] [:error] [pid 59551:tid 59567] [client 149.40.63.163:34866] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adS7d17LN7Ubyqs-sVuWjAAAAY4"]
[Tue Apr 07 16:08:25.140852 2026] [:error] [pid 59490:tid 59496] [client 149.40.63.163:55250] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adS7eUcw8OFbiUZ7Rx09AAAAAUQ"]
[Tue Apr 07 16:08:25.698929 2026] [:error] [pid 37598:tid 37668] [client 149.40.63.163:55262] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adS7ee9g7q_cV2WhPaxsFAAAAIc"]
[Tue Apr 07 16:08:28.162490 2026] [:error] [pid 37596:tid 37614] [client 149.40.63.163:55278] [client 149.40.63.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.40.63.163, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adS7fKpaAOZHEjRWjP15GAAAAAg"]
[Tue Apr 07 16:08:28.172129 2026] [proxy_fcgi:error] [pid 37596:tid 37614] [client 149.40.63.163:55278] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:08:28.452423 2026] [:error] [pid 37596:tid 37609] [client 149.40.63.163:55278] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adS7fKpaAOZHEjRWjP15GQAAAAM"]
[Tue Apr 07 16:08:29.595178 2026] [:error] [pid 59490:tid 59514] [client 149.40.63.163:55286] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adS7fUcw8OFbiUZ7Rx09BwAAAVY"]
[Tue Apr 07 16:08:30.159713 2026] [:error] [pid 37598:tid 37675] [client 149.40.63.163:55288] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "adS7fu9g7q_cV2WhPaxsIQAAAI4"]
[Tue Apr 07 16:08:32.675919 2026] [:error] [pid 59551:tid 59559] [client 149.40.63.163:55292] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adS7gF7LN7Ubyqs-sVuWpwAAAYY"]
[Tue Apr 07 16:08:33.254615 2026] [:error] [pid 59551:tid 59567] [client 149.40.63.163:55306] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adS7gV7LN7Ubyqs-sVuWqAAAAY4"]
[Tue Apr 07 16:08:34.382807 2026] [:error] [pid 37596:tid 37611] [client 149.40.63.163:55320] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adS7gqpaAOZHEjRWjP15JQAAAAU"]
[Tue Apr 07 16:08:34.946034 2026] [:error] [pid 59804:tid 59819] [client 149.40.63.163:52238] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adS7gnYVIXiPh5_eJTlK_wAAAg0"]
[Tue Apr 07 16:08:35.514506 2026] [proxy_fcgi:error] [pid 37719:tid 37743] [client 149.40.63.163:52242] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:08:35.794052 2026] [:error] [pid 37719:tid 37739] [client 149.40.63.163:52242] [client 149.40.63.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.40.63.163, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adS7g009Xv52u2xXGLB_JgAAANE"]
[Tue Apr 07 16:08:37.459998 2026] [:error] [pid 37719:tid 37744] [client 149.40.63.163:52242] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adS7hU09Xv52u2xXGLB_NgAAANY"]
[Tue Apr 07 16:08:38.889338 2026] [:error] [pid 37719:tid 37733] [client 149.40.63.163:52244] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adS7hk09Xv52u2xXGLB_PQAAAMs"]
[Tue Apr 07 16:08:39.740753 2026] [:error] [pid 37597:tid 37645] [client 149.40.63.163:7882] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adS7hw6uAY0QAy-8EEKmTAAAAEs"]
[Tue Apr 07 16:08:40.320543 2026] [:error] [pid 37719:tid 37739] [client 149.40.63.163:52276] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adS7iE09Xv52u2xXGLB_QAAAANE"]
[Tue Apr 07 16:08:41.738498 2026] [:error] [pid 37597:tid 37649] [client 149.40.63.163:52292] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adS7iQ6uAY0QAy-8EEKmVQAAAE8"]
[Tue Apr 07 16:08:42.877859 2026] [:error] [pid 59660:tid 59684] [client 149.40.63.163:52306] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adS7ijp3-oiX2o5bTszgjAAAAdY"]
[Tue Apr 07 16:08:44.589602 2026] [:error] [pid 59490:tid 59515] [client 149.40.63.163:52318] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adS7jEcw8OFbiUZ7Rx09FQAAAVc"]
[Tue Apr 07 16:08:45.153357 2026] [:error] [pid 59804:tid 59810] [client 149.40.63.163:44520] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adS7jXYVIXiPh5_eJTlLBgAAAgQ"]
[Tue Apr 07 16:08:46.003780 2026] [:error] [pid 59551:tid 59566] [client 149.40.63.163:44522] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "adS7jl7LN7Ubyqs-sVuWvAAAAY0"]
[Tue Apr 07 16:08:49.565780 2026] [:error] [pid 37598:tid 37673] [client 149.40.63.163:44530] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adS7ke9g7q_cV2WhPaxsNQAAAIw"]
[Tue Apr 07 16:08:50.697725 2026] [:error] [pid 37597:tid 37645] [client 149.40.63.163:18197] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "adS7kg6uAY0QAy-8EEKmZgAAAEs"]
[Tue Apr 07 16:08:50.976883 2026] [:error] [pid 37597:tid 37642] [client 149.40.63.163:18197] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adS7kg6uAY0QAy-8EEKmaQAAAEg"]
[Tue Apr 07 16:08:52.135915 2026] [:error] [pid 37597:tid 37635] [client 149.40.63.163:44538] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adS7lA6uAY0QAy-8EEKmbwAAAEE"]
[Tue Apr 07 16:08:52.715071 2026] [:error] [pid 37719:tid 37746] [client 149.40.63.163:44540] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adS7lE09Xv52u2xXGLB_TAAAANg"]
[Tue Apr 07 16:08:54.977478 2026] [:error] [pid 37597:tid 37650] [client 149.40.63.163:44550] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adS7lg6uAY0QAy-8EEKmfAAAAFA"]
[Tue Apr 07 16:08:57.598969 2026] [:error] [pid 59660:tid 59681] [client 149.40.63.163:53994] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adS7mTp3-oiX2o5bTszgnAAAAdM"]
[Tue Apr 07 16:08:58.443794 2026] [:error] [pid 37597:tid 37638] [client 149.40.63.163:54002] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adS7mg6uAY0QAy-8EEKmjQAAAEQ"]
[Tue Apr 07 16:09:00.447195 2026] [:error] [pid 59804:tid 59828] [client 149.40.63.163:54014] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adS7nHYVIXiPh5_eJTlLFAAAAhY"]
[Tue Apr 07 16:09:01.025711 2026] [:error] [pid 59804:tid 59810] [client 149.40.63.163:54028] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adS7nXYVIXiPh5_eJTlLFQAAAgQ"]
[Tue Apr 07 16:09:01.868109 2026] [:error] [pid 37596:tid 37610] [client 149.40.63.163:54038] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adS7napaAOZHEjRWjP15NwAAAAQ"]
[Tue Apr 07 16:09:02.443651 2026] [:error] [pid 37597:tid 37651] [client 149.40.63.163:54044] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "adS7ng6uAY0QAy-8EEKmlwAAAFE"]
[Tue Apr 07 16:09:03.578599 2026] [:error] [pid 37597:tid 37640] [client 149.40.63.163:54060] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adS7nw6uAY0QAy-8EEKmnwAAAEY"]
[Tue Apr 07 16:09:04.744783 2026] [:error] [pid 37597:tid 37644] [client 149.40.63.163:54070] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adS7oA6uAY0QAy-8EEKmowAAAEo"]
[Tue Apr 07 16:09:05.306366 2026] [:error] [pid 59490:tid 59492] [client 149.40.63.163:34320] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "adS7oUcw8OFbiUZ7Rx09IgAAAUA"]
[Tue Apr 07 16:09:07.003006 2026] [:error] [pid 37597:tid 37639] [client 149.40.63.163:34324] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "adS7ow6uAY0QAy-8EEKmtwAAAEU"]
[Tue Apr 07 16:09:08.131799 2026] [:error] [pid 37597:tid 37634] [client 149.40.63.163:34340] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adS7pA6uAY0QAy-8EEKmvQAAAEA"]
[Tue Apr 07 16:09:09.525791 2026] [:error] [pid 37597:tid 37636] [client 149.40.63.163:34344] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adS7pQ6uAY0QAy-8EEKmxAAAAEI"]
[Tue Apr 07 16:09:10.086882 2026] [:error] [pid 37597:tid 37656] [client 149.40.63.163:34358] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adS7pg6uAY0QAy-8EEKmyQAAAFY"]
[Tue Apr 07 16:09:10.653800 2026] [:error] [pid 37719:tid 37732] [client 149.40.63.163:34360] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adS7pk09Xv52u2xXGLB_bAAAAMo"]
[Tue Apr 07 16:09:11.793448 2026] [:error] [pid 59551:tid 59568] [client 149.40.63.163:34366] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adS7p17LN7Ubyqs-sVuW2AAAAY8"]
[Tue Apr 07 16:09:12.944870 2026] [:error] [pid 37597:tid 37655] [client 149.40.63.163:34380] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adS7qA6uAY0QAy-8EEKm1QAAAFU"]
[Tue Apr 07 16:09:13.502620 2026] [:error] [pid 37596:tid 37609] [client 149.40.63.163:34386] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adS7qapaAOZHEjRWjP15RAAAAAM"]
[Tue Apr 07 16:09:14.344574 2026] [:error] [pid 59660:tid 59665] [client 149.40.63.163:34388] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adS7qjp3-oiX2o5bTszgpAAAAcM"]
[Tue Apr 07 16:09:14.915317 2026] [:error] [pid 59804:tid 59821] [client 149.40.63.163:55494] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "adS7qnYVIXiPh5_eJTlLHgAAAg8"]
[Tue Apr 07 16:09:16.037467 2026] [:error] [pid 12948:tid 12975] [client 149.40.63.163:55500] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adS7rMbeSPAN8LvMqsZzrgAAARg"]
[Tue Apr 07 16:09:16.915848 2026] [:error] [pid 37597:tid 37643] [client 149.40.63.163:55502] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adS7rA6uAY0QAy-8EEKm2gAAAEk"]
[Tue Apr 07 16:09:17.481126 2026] [:error] [pid 37597:tid 37642] [client 149.40.63.163:55518] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adS7rQ6uAY0QAy-8EEKm3AAAAEg"]
[Tue Apr 07 16:09:18.045037 2026] [:error] [pid 37597:tid 37649] [client 149.40.63.163:55520] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adS7rg6uAY0QAy-8EEKm3wAAAE8"]
[Tue Apr 07 16:09:19.182087 2026] [:error] [pid 37719:tid 37729] [client 149.40.63.163:55534] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adS7r009Xv52u2xXGLB_eQAAAMc"]
[Tue Apr 07 16:09:20.300389 2026] [:error] [pid 37597:tid 37639] [client 149.40.63.163:55550] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adS7sA6uAY0QAy-8EEKm5wAAAEU"]
[Tue Apr 07 16:09:21.138668 2026] [:error] [pid 37597:tid 37636] [client 149.40.63.163:55558] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adS7sQ6uAY0QAy-8EEKm7wAAAEI"]
[Tue Apr 07 16:09:21.990057 2026] [:error] [pid 59551:tid 59568] [client 149.40.63.163:55562] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adS7sV7LN7Ubyqs-sVuW5QAAAY8"]
[Tue Apr 07 16:09:24.235530 2026] [:error] [pid 59551:tid 59561] [client 149.40.63.163:55566] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "adS7tF7LN7Ubyqs-sVuW_gAAAYg"]
[Tue Apr 07 16:09:24.793214 2026] [:error] [pid 37719:tid 37722] [client 149.40.63.163:34898] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adS7tE09Xv52u2xXGLB_hwAAAMA"]
[Tue Apr 07 16:09:25.923667 2026] [:error] [pid 37597:tid 37650] [client 149.40.63.163:34914] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adS7tQ6uAY0QAy-8EEKm_QAAAFA"]
[Tue Apr 07 16:09:27.616339 2026] [:error] [pid 59804:tid 59826] [client 149.40.63.163:34922] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adS7t3YVIXiPh5_eJTlLKwAAAhQ"]
[Tue Apr 07 16:09:28.772307 2026] [:error] [pid 37597:tid 37643] [client 149.40.63.163:34928] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "adS7uA6uAY0QAy-8EEKnBgAAAEk"]
[Tue Apr 07 16:09:29.885570 2026] [:error] [pid 37719:tid 37732] [client 149.40.63.163:34938] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "adS7uU09Xv52u2xXGLB_mAAAAMo"]
[Tue Apr 07 16:09:30.744935 2026] [:error] [pid 37596:tid 37608] [client 149.40.63.163:34954] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "adS7uqpaAOZHEjRWjP15TAAAAAI"]
[Tue Apr 07 16:09:31.593681 2026] [:error] [pid 12948:tid 12964] [client 149.40.63.163:34956] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "adS7u8beSPAN8LvMqsZzugAAAQ0"]
[Tue Apr 07 16:09:33.308338 2026] [:error] [pid 12948:tid 12967] [client 149.40.63.163:34970] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "adS7vcbeSPAN8LvMqsZz0gAAARA"]
[Tue Apr 07 16:09:34.748275 2026] [:error] [pid 59551:tid 59564] [client 149.40.63.163:34980] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "adS7vl7LN7Ubyqs-sVuXEQAAAYs"]
[Tue Apr 07 16:09:35.324687 2026] [proxy_fcgi:error] [pid 59804:tid 59822] [client 149.40.63.163:45212] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 16:09:35.608673 2026] [:error] [pid 59804:tid 59829] [client 149.40.63.163:45212] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "adS7v3YVIXiPh5_eJTlLNwAAAhc"]
[Tue Apr 07 16:09:36.174337 2026] [:error] [pid 37596:tid 37628] [client 149.40.63.163:45228] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "adS7wKpaAOZHEjRWjP15VwAAABY"]
[Tue Apr 07 16:09:37.344779 2026] [:error] [pid 37719:tid 37726] [client 149.40.63.163:45230] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "adS7wU09Xv52u2xXGLB_ogAAAMQ"]
[Tue Apr 07 16:09:37.905355 2026] [:error] [pid 37598:tid 37668] [client 149.40.63.163:45232] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "adS7we9g7q_cV2WhPaxsbAAAAIc"]
[Tue Apr 07 16:09:40.214130 2026] [:error] [pid 37597:tid 37637] [client 149.40.63.163:45240] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "adS7xA6uAY0QAy-8EEKnJQAAAEM"]
[Tue Apr 07 16:09:40.770791 2026] [:error] [pid 37597:tid 37647] [client 149.40.63.163:45254] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "adS7xA6uAY0QAy-8EEKnKwAAAE0"]
[Tue Apr 07 16:09:41.619861 2026] [:error] [pid 37719:tid 37736] [client 149.40.63.163:45270] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "adS7xU09Xv52u2xXGLB_swAAAM4"]
[Tue Apr 07 16:09:42.186590 2026] [:error] [pid 37597:tid 37638] [client 149.40.63.163:45274] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "adS7xg6uAY0QAy-8EEKnQQAAAEQ"]
[Tue Apr 07 16:09:42.742495 2026] [:error] [pid 37597:tid 37649] [client 149.40.63.163:45288] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "adS7xg6uAY0QAy-8EEKnSgAAAE8"]
[Tue Apr 07 16:09:43.315732 2026] [:error] [pid 59551:tid 59566] [client 149.40.63.163:45294] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "adS7x17LN7Ubyqs-sVuXHAAAAY0"]
[Tue Apr 07 16:09:44.994650 2026] [:error] [pid 37597:tid 37649] [client 149.40.63.163:45296] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "adS7yA6uAY0QAy-8EEKnVwAAAE8"]
[Tue Apr 07 16:09:45.553429 2026] [:error] [pid 37719:tid 37729] [client 149.40.63.163:55720] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "adS7yU09Xv52u2xXGLB_yAAAAMc"]
[Tue Apr 07 16:09:46.688980 2026] [:error] [pid 37598:tid 37661] [client 149.40.63.163:55736] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "adS7yu9g7q_cV2WhPaxseQAAAIA"]
[Tue Apr 07 16:09:47.245612 2026] [:error] [pid 59660:tid 59671] [client 149.40.63.163:55746] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "adS7yzp3-oiX2o5bTszgwQAAAck"]
[Tue Apr 07 16:09:48.382718 2026] [:error] [pid 37719:tid 37728] [client 149.40.63.163:55748] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "adS7zE09Xv52u2xXGLB_2wAAAMY"]
[Tue Apr 07 16:09:48.947019 2026] [:error] [pid 59804:tid 59811] [client 149.40.63.163:55750] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "adS7zHYVIXiPh5_eJTlLWAAAAgU"]
[Tue Apr 07 16:09:51.497232 2026] [:error] [pid 37719:tid 37726] [client 149.40.63.163:55758] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "adS7z009Xv52u2xXGLB_7gAAAMQ"]
[Tue Apr 07 16:09:52.057789 2026] [:error] [pid 59490:tid 59497] [client 149.40.63.163:55772] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adS70Ecw8OFbiUZ7Rx09SAAAAUU"]
[Tue Apr 07 16:09:53.368659 2026] [:error] [pid 37597:tid 37634] [client 149.40.63.163:55778] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "adS70Q6uAY0QAy-8EEKncQAAAEA"]
[Tue Apr 07 16:09:54.221130 2026] [:error] [pid 37719:tid 37728] [client 149.40.63.163:55782] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "adS70k09Xv52u2xXGLCAAgAAAMY"]
[Tue Apr 07 16:09:55.060509 2026] [:error] [pid 59804:tid 59814] [client 149.40.63.163:38822] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "adS703YVIXiPh5_eJTlLXwAAAgg"]
[Tue Apr 07 16:09:55.623343 2026] [:error] [pid 37598:tid 37671] [client 149.40.63.163:38834] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "adS70-9g7q_cV2WhPaxshgAAAIo"]
[Tue Apr 07 16:09:56.184371 2026] [:error] [pid 59804:tid 59806] [client 149.40.63.163:38842] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "adS71HYVIXiPh5_eJTlLYQAAAgA"]
[Tue Apr 07 16:09:57.596114 2026] [:error] [pid 12948:tid 12953] [client 149.40.63.163:38846] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "adS71cbeSPAN8LvMqsZz9QAAAQI"]
[Tue Apr 07 16:09:58.443446 2026] [:error] [pid 37598:tid 37684] [client 149.40.63.163:38860] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "adS71u9g7q_cV2WhPaxsjAAAAJc"]
[Tue Apr 07 16:09:59.676974 2026] [:error] [pid 59490:tid 59510] [client 149.40.63.163:38870] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "adS710cw8OFbiUZ7Rx09TQAAAVI"]
[Tue Apr 07 16:10:00.246716 2026] [:error] [pid 59551:tid 59554] [client 149.40.63.163:38884] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "adS72F7LN7Ubyqs-sVuXQwAAAYE"]
[Tue Apr 07 16:10:00.817311 2026] [:error] [pid 59490:tid 59503] [client 149.40.63.163:38900] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "adS72Ecw8OFbiUZ7Rx09TwAAAUs"]
[Tue Apr 07 16:10:03.665017 2026] [:error] [pid 12948:tid 12968] [client 149.40.63.163:38916] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "adS728beSPAN8LvMqsZ0EAAAARE"]
[Tue Apr 07 16:10:04.503598 2026] [:error] [pid 37597:tid 37640] [client 149.40.63.163:38924] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "adS73A6uAY0QAy-8EEKnngAAAEY"]
[Tue Apr 07 16:10:05.632406 2026] [:error] [pid 37597:tid 37646] [client 149.40.63.163:49184] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "adS73Q6uAY0QAy-8EEKnqgAAAEw"]
[Tue Apr 07 16:10:06.187478 2026] [:error] [pid 37596:tid 37628] [client 149.40.63.163:49198] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "adS73qpaAOZHEjRWjP15ZQAAABY"]
[Tue Apr 07 16:10:06.768712 2026] [:error] [pid 59551:tid 59576] [client 149.40.63.163:49212] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "adS73l7LN7Ubyqs-sVuXUwAAAZc"]
[Tue Apr 07 16:10:07.946540 2026] [:error] [pid 59490:tid 59504] [client 149.40.63.163:49214] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "adS730cw8OFbiUZ7Rx09bQAAAUw"]
[Tue Apr 07 16:10:10.522344 2026] [:error] [pid 37719:tid 37726] [client 149.40.63.163:49226] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "adS74k09Xv52u2xXGLCANwAAAMQ"]
[Tue Apr 07 16:10:12.216127 2026] [:error] [pid 59551:tid 59572] [client 149.40.63.163:49236] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "adS75F7LN7Ubyqs-sVuXbQAAAZM"]
[Tue Apr 07 16:10:13.341734 2026] [:error] [pid 59490:tid 59507] [client 149.40.63.163:49242] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "adS75Ucw8OFbiUZ7Rx09jgAAAU8"]
[Tue Apr 07 16:10:13.900926 2026] [:error] [pid 59804:tid 59824] [client 149.40.63.163:49258] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "adS75XYVIXiPh5_eJTlLgwAAAhI"]
[Tue Apr 07 16:10:17.733284 2026] [:error] [pid 37598:tid 37680] [client 149.40.63.163:56168] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "adS76e9g7q_cV2WhPaxsugAAAJM"]
[Tue Apr 07 16:10:18.314282 2026] [:error] [pid 59804:tid 59830] [client 149.40.63.163:56176] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "adS76nYVIXiPh5_eJTlLlgAAAhg"]
[Tue Apr 07 16:10:18.881108 2026] [:error] [pid 59804:tid 59821] [client 149.40.63.163:56184] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "adS76nYVIXiPh5_eJTlLlwAAAg8"]
[Tue Apr 07 16:10:19.755681 2026] [:error] [pid 37597:tid 37650] [client 149.40.63.163:56196] [client 149.40.63.163] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.40.63.163, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "adS76w6uAY0QAy-8EEKnywAAAFA"]
[Tue Apr 07 16:10:20.876666 2026] [:error] [pid 37597:tid 37641] [client 149.40.63.163:56196] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "adS77A6uAY0QAy-8EEKnzQAAAEc"]
[Tue Apr 07 16:10:21.438209 2026] [:error] [pid 37596:tid 37610] [client 149.40.63.163:56212] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "adS77apaAOZHEjRWjP15cQAAAAQ"]
[Tue Apr 07 16:10:22.014242 2026] [:error] [pid 37719:tid 37724] [client 149.40.63.163:56218] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "adS77k09Xv52u2xXGLCAQgAAAMI"]
[Tue Apr 07 16:10:24.300979 2026] [:error] [pid 37597:tid 37635] [client 149.40.63.163:16649] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "adS78A6uAY0QAy-8EEKn5wAAAEE"]
[Tue Apr 07 16:10:26.875559 2026] [:error] [pid 12948:tid 12954] [client 149.40.63.163:59036] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "adS78sbeSPAN8LvMqsZ0NQAAAQM"]
[Tue Apr 07 16:10:28.014504 2026] [:error] [pid 37719:tid 37746] [client 149.40.63.163:59052] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "adS79E09Xv52u2xXGLCAZAAAANg"]
[Tue Apr 07 16:10:31.987638 2026] [:error] [pid 37719:tid 37738] [client 149.40.63.163:59062] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adS79009Xv52u2xXGLCAiAAAANA"]
[Tue Apr 07 16:10:32.543297 2026] [:error] [pid 37597:tid 37643] [client 149.40.63.163:59070] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "adS7-A6uAY0QAy-8EEKn_wAAAEk"]
[Tue Apr 07 16:10:33.108382 2026] [:error] [pid 59551:tid 59561] [client 149.40.63.163:59084] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "adS7-V7LN7Ubyqs-sVuXvwAAAYg"]
[Tue Apr 07 16:10:33.670935 2026] [:error] [pid 59490:tid 59508] [client 149.40.63.163:59096] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "adS7-Ucw8OFbiUZ7Rx09nwAAAVA"]
[Tue Apr 07 16:10:35.068317 2026] [:error] [pid 59804:tid 59822] [client 149.40.63.163:59104] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "adS7-3YVIXiPh5_eJTlLtQAAAhA"]
[Tue Apr 07 16:10:35.623684 2026] [:error] [pid 37597:tid 37635] [client 149.40.63.163:45384] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "adS7-w6uAY0QAy-8EEKoBgAAAEE"]
[Tue Apr 07 16:10:39.013392 2026] [:error] [pid 37598:tid 37681] [client 149.40.63.163:45396] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "adS7_-9g7q_cV2WhPaxs3wAAAJQ"]
[Tue Apr 07 16:10:40.777769 2026] [:error] [pid 59804:tid 59811] [client 149.40.63.163:45404] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "adS8AHYVIXiPh5_eJTlLzAAAAgU"]
[Tue Apr 07 16:10:41.345553 2026] [:error] [pid 59551:tid 59563] [client 149.40.63.163:45412] [client 149.40.63.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "adS8AV7LN7Ubyqs-sVuXzAAAAYo"]
[Tue Apr 07 16:11:14.672611 2026] [autoindex:error] [pid 37719:tid 37740] [client 103.138.124.49:50476] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 17:31:44.456611 2026] [:error] [pid 37597:tid 37635] [client 159.89.55.133:47050] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adTPAA6uAY0QAy-8EELetQAAAEE"]
[Tue Apr 07 17:37:42.907379 2026] [:error] [pid 37597:tid 37638] [client 3.34.2.126:45752] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "adTQZg6uAY0QAy-8EELjvgAAAEQ"]
[Tue Apr 07 17:37:43.539553 2026] [:error] [pid 37597:tid 37640] [client 3.34.2.126:46830] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "adTQZw6uAY0QAy-8EELjxAAAAEY"]
[Tue Apr 07 17:37:44.151769 2026] [:error] [pid 59804:tid 59815] [client 3.34.2.126:46850] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "adTQaHYVIXiPh5_eJTlkcQAAAgk"]
[Tue Apr 07 17:37:44.757168 2026] [:error] [pid 37719:tid 37742] [client 3.34.2.126:46864] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "adTQaE09Xv52u2xXGLCr7QAAANQ"]
[Tue Apr 07 17:37:45.373594 2026] [:error] [pid 59551:tid 59559] [client 3.34.2.126:46884] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "adTQaV7LN7Ubyqs-sVu3XAAAAYY"]
[Tue Apr 07 17:37:45.987356 2026] [:error] [pid 37598:tid 37668] [client 3.34.2.126:46900] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "adTQae9g7q_cV2WhPayBmQAAAIc"]
[Tue Apr 07 17:37:46.608839 2026] [:error] [pid 37597:tid 37655] [client 3.34.2.126:46920] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.remote"] [unique_id "adTQag6uAY0QAy-8EELj4gAAAFU"]
[Tue Apr 07 17:37:47.221274 2026] [:error] [pid 59490:tid 59511] [client 3.34.2.126:46942] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "adTQa0cw8OFbiUZ7Rx1I5AAAAVM"]
[Tue Apr 07 17:37:47.858737 2026] [:error] [pid 59804:tid 59806] [client 3.34.2.126:46958] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "adTQa3YVIXiPh5_eJTlkcgAAAgA"]
[Tue Apr 07 17:37:48.468390 2026] [:error] [pid 37597:tid 37640] [client 3.34.2.126:46988] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "adTQbA6uAY0QAy-8EELj8wAAAEY"]
[Tue Apr 07 17:37:49.084581 2026] [:error] [pid 37719:tid 37737] [client 3.34.2.126:47006] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "adTQbU09Xv52u2xXGLCr8gAAAM8"]
[Tue Apr 07 17:37:49.704696 2026] [:error] [pid 59551:tid 59569] [client 3.34.2.126:47020] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "adTQbV7LN7Ubyqs-sVu3YQAAAZA"]
[Tue Apr 07 17:37:50.329349 2026] [:error] [pid 59551:tid 59573] [client 3.34.2.126:47032] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "adTQbl7LN7Ubyqs-sVu3ZAAAAZQ"]
[Tue Apr 07 17:37:50.939336 2026] [:error] [pid 59551:tid 59568] [client 3.34.2.126:47044] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "adTQbl7LN7Ubyqs-sVu3aAAAAY8"]
[Tue Apr 07 17:37:51.554045 2026] [:error] [pid 59490:tid 59492] [client 3.34.2.126:47056] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "adTQb0cw8OFbiUZ7Rx1I6AAAAUA"]
[Tue Apr 07 17:37:52.164366 2026] [:error] [pid 37597:tid 37656] [client 3.34.2.126:47068] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.stage"] [unique_id "adTQcA6uAY0QAy-8EELkBgAAAFY"]
[Tue Apr 07 17:37:52.779845 2026] [:error] [pid 37597:tid 37650] [client 3.34.2.126:51302] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.ci"] [unique_id "adTQcA6uAY0QAy-8EELkCwAAAFA"]
[Tue Apr 07 17:37:53.389158 2026] [:error] [pid 37719:tid 37725] [client 3.34.2.126:51322] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.docker"] [unique_id "adTQcU09Xv52u2xXGLCr-wAAAMM"]
[Tue Apr 07 17:37:54.010461 2026] [:error] [pid 37598:tid 37685] [client 3.34.2.126:51342] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.live"] [unique_id "adTQcu9g7q_cV2WhPayBqgAAAJg"]
[Tue Apr 07 17:37:54.620118 2026] [:error] [pid 59551:tid 59553] [client 3.34.2.126:51366] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.preprod"] [unique_id "adTQcl7LN7Ubyqs-sVu3awAAAYA"]
[Tue Apr 07 17:37:55.249736 2026] [:error] [pid 37597:tid 37642] [client 3.34.2.126:51386] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.uat"] [unique_id "adTQcw6uAY0QAy-8EELkGwAAAEg"]
[Tue Apr 07 17:37:55.862411 2026] [:error] [pid 37598:tid 37681] [client 3.34.2.126:51404] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "adTQc-9g7q_cV2WhPayBrwAAAJQ"]
[Tue Apr 07 17:37:56.473473 2026] [:error] [pid 59551:tid 59560] [client 3.34.2.126:51422] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.swp"] [unique_id "adTQdF7LN7Ubyqs-sVu3dAAAAYc"]
[Tue Apr 07 17:37:57.079489 2026] [:error] [pid 59804:tid 59828] [client 3.34.2.126:51440] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env~"] [unique_id "adTQdXYVIXiPh5_eJTlkgwAAAhY"]
[Tue Apr 07 17:37:57.684565 2026] [:error] [pid 37598:tid 37672] [client 3.34.2.126:51468] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "adTQde9g7q_cV2WhPayBsgAAAIs"]
[Tue Apr 07 17:37:58.293424 2026] [:error] [pid 37719:tid 37740] [client 3.34.2.126:51480] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/apps/.env"] [unique_id "adTQdk09Xv52u2xXGLCsBQAAANI"]
[Tue Apr 07 17:37:58.906116 2026] [:error] [pid 37719:tid 37729] [client 3.34.2.126:51496] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "adTQdk09Xv52u2xXGLCsCQAAAMc"]
[Tue Apr 07 17:37:59.518614 2026] [:error] [pid 37597:tid 37639] [client 3.34.2.126:51514] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web/.env"] [unique_id "adTQdw6uAY0QAy-8EELkIQAAAEU"]
[Tue Apr 07 17:38:00.125569 2026] [:error] [pid 37719:tid 37742] [client 3.34.2.126:51526] [client 3.34.2.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/site/.env"] [unique_id "adTQeE09Xv52u2xXGLCsCwAAANQ"]
[Tue Apr 07 19:01:04.745266 2026] [:error] [pid 59804:tid 59820] [client 43.157.149.188:48000] [client 43.157.149.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adTj8HYVIXiPh5_eJTmG8AAAAg4"]
[Tue Apr 07 19:14:31.801762 2026] [:error] [pid 37597:tid 37637] [client 212.116.231.6:35690] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adTnFw6uAY0QAy-8EEJB2AAAAEM"]
[Tue Apr 07 19:14:33.329999 2026] [:error] [pid 37597:tid 37653] [client 212.116.231.6:60756] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adTnGQ6uAY0QAy-8EEJB-QAAAFM"]
[Tue Apr 07 19:14:35.683187 2026] [:error] [pid 59804:tid 59807] [client 212.116.231.6:39792] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adTnG3YVIXiPh5_eJTmQdwAAAgE"]
[Tue Apr 07 19:14:37.155888 2026] [:error] [pid 37719:tid 37745] [client 212.116.231.6:39796] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adTnHU09Xv52u2xXGLDx_AAAANc"]
[Tue Apr 07 19:14:39.502556 2026] [:error] [pid 59551:tid 59574] [client 212.116.231.6:39804] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adTnH17LN7Ubyqs-sVvr6AAAAZU"]
[Tue Apr 07 19:14:40.416643 2026] [:error] [pid 37719:tid 37734] [client 212.116.231.6:39814] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adTnIE09Xv52u2xXGLDyEQAAAMw"]
[Tue Apr 07 19:14:41.006155 2026] [:error] [pid 59551:tid 59557] [client 212.116.231.6:39824] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adTnIV7LN7Ubyqs-sVvr7QAAAYQ"]
[Tue Apr 07 19:14:41.593847 2026] [:error] [pid 37719:tid 37745] [client 212.116.231.6:39836] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adTnIU09Xv52u2xXGLDyGQAAANc"]
[Tue Apr 07 19:14:42.171515 2026] [:error] [pid 37597:tid 37651] [client 212.116.231.6:39848] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adTnIg6uAY0QAy-8EEJCMQAAAFE"]
[Tue Apr 07 19:14:42.780067 2026] [:error] [pid 37596:tid 37625] [client 212.116.231.6:55874] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adTnIqpaAOZHEjRWjP2T5gAAABM"]
[Tue Apr 07 19:14:43.696684 2026] [:error] [pid 37597:tid 37658] [client 212.116.231.6:55890] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adTnIw6uAY0QAy-8EEJCOwAAAFg"]
[Tue Apr 07 19:14:44.869106 2026] [:error] [pid 59551:tid 59569] [client 212.116.231.6:55904] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "adTnJF7LN7Ubyqs-sVvsAQAAAZA"]
[Tue Apr 07 19:14:47.252497 2026] [:error] [pid 59551:tid 59567] [client 212.116.231.6:55920] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adTnJ17LN7Ubyqs-sVvsEwAAAY4"]
[Tue Apr 07 19:14:48.124367 2026] [:error] [pid 59804:tid 59807] [client 212.116.231.6:55932] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adTnKHYVIXiPh5_eJTmQjwAAAgE"]
[Tue Apr 07 19:14:49.042196 2026] [:error] [pid 59804:tid 59816] [client 212.116.231.6:26514] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adTnKXYVIXiPh5_eJTmQlAAAAgo"]
[Tue Apr 07 19:14:51.499808 2026] [:error] [pid 59551:tid 59562] [client 212.116.231.6:55958] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adTnK17LN7Ubyqs-sVvsSQAAAYk"]
[Tue Apr 07 19:14:52.380342 2026] [:error] [pid 59804:tid 59809] [client 212.116.231.6:55964] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adTnLHYVIXiPh5_eJTmQoAAAAgM"]
[Tue Apr 07 19:14:53.554151 2026] [:error] [pid 37597:tid 37646] [client 212.116.231.6:43620] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adTnLQ6uAY0QAy-8EEJCdwAAAEw"]
[Tue Apr 07 19:14:54.425510 2026] [:error] [pid 12948:tid 12970] [client 212.116.231.6:43636] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adTnLsbeSPAN8LvMqsafsAAAARM"]
[Tue Apr 07 19:14:56.278702 2026] [:error] [pid 37597:tid 37654] [client 212.116.231.6:43638] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adTnMA6uAY0QAy-8EEJCnQAAAFQ"]
[Tue Apr 07 19:14:57.150096 2026] [:error] [pid 12948:tid 12961] [client 212.116.231.6:43652] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adTnMcbeSPAN8LvMqsafvwAAAQo"]
[Tue Apr 07 19:14:58.021334 2026] [:error] [pid 37597:tid 37646] [client 212.116.231.6:43656] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adTnMg6uAY0QAy-8EEJCvAAAAEw"]
[Tue Apr 07 19:14:58.629987 2026] [:error] [pid 59660:tid 59670] [client 212.116.231.6:43670] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adTnMjp3-oiX2o5bTswF_AAAAcg"]
[Tue Apr 07 19:14:59.242504 2026] [:error] [pid 37598:tid 37675] [client 212.116.231.6:43682] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adTnM-9g7q_cV2WhPaykQwAAAI4"]
[Tue Apr 07 19:15:00.709609 2026] [:error] [pid 37719:tid 37736] [client 212.116.231.6:43684] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adTnNE09Xv52u2xXGLDybwAAAM4"]
[Tue Apr 07 19:15:01.296692 2026] [:error] [pid 59804:tid 59829] [client 212.116.231.6:43700] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adTnNXYVIXiPh5_eJTmQxgAAAhc"]
[Tue Apr 07 19:15:01.910252 2026] [:error] [pid 59660:tid 59680] [client 212.116.231.6:43710] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adTnNTp3-oiX2o5bTswGAwAAAdI"]
[Tue Apr 07 19:15:07.586522 2026] [:error] [pid 37719:tid 37736] [client 212.116.231.6:43716] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adTnO009Xv52u2xXGLDykAAAAM4"]
[Tue Apr 07 19:15:09.127650 2026] [:error] [pid 12948:tid 12956] [client 212.116.231.6:57636] [client 212.116.231.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.116.231.6, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adTnPcbeSPAN8LvMqsaf1QAAAQU"]
[Tue Apr 07 19:15:12.845579 2026] [:error] [pid 12948:tid 12961] [client 212.116.231.6:57636] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adTnQMbeSPAN8LvMqsaf7QAAAQo"]
[Tue Apr 07 19:15:14.081983 2026] [:error] [pid 37597:tid 37655] [client 212.116.231.6:56760] [client 212.116.231.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.116.231.6, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adTnQg6uAY0QAy-8EEJDLgAAAFU"]
[Tue Apr 07 19:15:14.702754 2026] [:error] [pid 37597:tid 37658] [client 212.116.231.6:56760] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "adTnQg6uAY0QAy-8EEJDMAAAAFg"]
[Tue Apr 07 19:15:17.631068 2026] [:error] [pid 37597:tid 37634] [client 212.116.231.6:56766] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adTnRQ6uAY0QAy-8EEJDRgAAAEA"]
[Tue Apr 07 19:15:20.578687 2026] [:error] [pid 59804:tid 59825] [client 212.116.231.6:56770] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adTnSHYVIXiPh5_eJTmRHQAAAhM"]
[Tue Apr 07 19:15:21.755077 2026] [:error] [pid 37597:tid 37647] [client 212.116.231.6:56782] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adTnSQ6uAY0QAy-8EEJDbQAAAE0"]
[Tue Apr 07 19:15:23.214426 2026] [:error] [pid 59804:tid 59825] [client 212.116.231.6:56798] [client 212.116.231.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.116.231.6, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adTnS3YVIXiPh5_eJTmRJgAAAhM"]
[Tue Apr 07 19:15:23.507039 2026] [:error] [pid 59804:tid 59824] [client 212.116.231.6:56798] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adTnS3YVIXiPh5_eJTmRKAAAAhI"]
[Tue Apr 07 19:15:29.361427 2026] [:error] [pid 59804:tid 59826] [client 212.116.231.6:49524] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adTnUXYVIXiPh5_eJTmRQQAAAhQ"]
[Tue Apr 07 19:15:30.897865 2026] [:error] [pid 37597:tid 37654] [client 212.116.231.6:49528] [client 212.116.231.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.116.231.6, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adTnUg6uAY0QAy-8EEJDowAAAFQ"]
[Tue Apr 07 19:15:33.377403 2026] [:error] [pid 37597:tid 37657] [client 212.116.231.6:49528] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adTnVQ6uAY0QAy-8EEJDtQAAAFc"]
[Tue Apr 07 19:15:34.254802 2026] [:error] [pid 12948:tid 12965] [client 212.116.231.6:54144] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adTnVsbeSPAN8LvMqsagCAAAAQ4"]
[Tue Apr 07 19:15:35.481811 2026] [:error] [pid 37719:tid 37731] [client 212.116.231.6:54154] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adTnV009Xv52u2xXGLDy5wAAAMk"]
[Tue Apr 07 19:15:36.960941 2026] [:error] [pid 59660:tid 59677] [client 212.116.231.6:54156] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adTnWDp3-oiX2o5bTswGLgAAAc8"]
[Tue Apr 07 19:15:37.545806 2026] [:error] [pid 37597:tid 37658] [client 212.116.231.6:54164] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adTnWQ6uAY0QAy-8EEJDvgAAAFg"]
[Tue Apr 07 19:15:39.607695 2026] [:error] [pid 37597:tid 37650] [client 212.116.231.6:54168] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adTnWw6uAY0QAy-8EEJD0gAAAFA"]
[Tue Apr 07 19:15:40.525446 2026] [:error] [pid 37597:tid 37641] [client 212.116.231.6:54174] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adTnXA6uAY0QAy-8EEJD3wAAAEc"]
[Tue Apr 07 19:15:42.053246 2026] [:error] [pid 37598:tid 37678] [client 212.116.231.6:54190] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adTnXu9g7q_cV2WhPaykygAAAJE"]
[Tue Apr 07 19:15:43.598356 2026] [:error] [pid 59551:tid 59564] [client 212.116.231.6:60692] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adTnX17LN7Ubyqs-sVvs9wAAAYs"]
[Tue Apr 07 19:15:44.819866 2026] [:error] [pid 37597:tid 37645] [client 212.116.231.6:60708] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "adTnYA6uAY0QAy-8EEJD9wAAAEs"]
[Tue Apr 07 19:15:46.300761 2026] [:error] [pid 37597:tid 37658] [client 212.116.231.6:60710] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adTnYg6uAY0QAy-8EEJEDQAAAFg"]
[Tue Apr 07 19:15:51.774220 2026] [:error] [pid 37596:tid 37608] [client 212.116.231.6:60722] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adTnZ6paAOZHEjRWjP2URQAAAAI"]
[Tue Apr 07 19:15:52.358103 2026] [:error] [pid 59551:tid 59570] [client 212.116.231.6:60738] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adTnaF7LN7Ubyqs-sVvs_wAAAZE"]
[Tue Apr 07 19:15:52.965298 2026] [:error] [pid 37719:tid 37723] [client 212.116.231.6:35232] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adTnaE09Xv52u2xXGLDzWQAAAME"]
[Tue Apr 07 19:15:53.542607 2026] [:error] [pid 59804:tid 59813] [client 212.116.231.6:35242] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adTnaXYVIXiPh5_eJTmRcgAAAgc"]
[Tue Apr 07 19:15:54.421720 2026] [:error] [pid 59804:tid 59806] [client 212.116.231.6:35250] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adTnanYVIXiPh5_eJTmRdAAAAgA"]
[Tue Apr 07 19:15:55.006397 2026] [:error] [pid 59490:tid 59500] [client 212.116.231.6:35254] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adTna0cw8OFbiUZ7Rx1eNgAAAUg"]
[Tue Apr 07 19:15:56.180063 2026] [:error] [pid 37597:tid 37650] [client 212.116.231.6:35258] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adTnbA6uAY0QAy-8EEJEbwAAAFA"]
[Tue Apr 07 19:15:56.757328 2026] [:error] [pid 59551:tid 59559] [client 212.116.231.6:35270] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adTnbF7LN7Ubyqs-sVvtCAAAAYY"]
[Tue Apr 07 19:15:57.334676 2026] [:error] [pid 37597:tid 37658] [client 212.116.231.6:35278] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adTnbQ6uAY0QAy-8EEJEdQAAAFg"]
[Tue Apr 07 19:15:59.865173 2026] [:error] [pid 37597:tid 37638] [client 212.116.231.6:35286] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adTnbw6uAY0QAy-8EEJEeQAAAEQ"]
[Tue Apr 07 19:16:00.784365 2026] [:error] [pid 37719:tid 37732] [client 212.116.231.6:35292] [client 212.116.231.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adTncE09Xv52u2xXGLDzcAAAAMo"]
[Tue Apr 07 19:16:07.260490 2026] [:error] [pid 37597:tid 37638] [client 154.47.24.90:38774] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adTndw6uAY0QAy-8EEJEkAAAAEQ"]
[Tue Apr 07 19:16:08.949939 2026] [:error] [pid 12948:tid 12960] [client 154.47.24.90:38778] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adTneMbeSPAN8LvMqsagUgAAAQk"]
[Tue Apr 07 19:16:11.465903 2026] [:error] [pid 37719:tid 37727] [client 154.47.24.90:38780] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adTne009Xv52u2xXGLDznAAAAMU"]
[Tue Apr 07 19:16:12.864384 2026] [:error] [pid 37719:tid 37736] [client 154.47.24.90:38790] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adTnfE09Xv52u2xXGLDzpAAAAM4"]
[Tue Apr 07 19:16:13.438475 2026] [:error] [pid 12948:tid 12975] [client 154.47.24.90:37830] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adTnfcbeSPAN8LvMqsagVgAAARg"]
[Tue Apr 07 19:16:15.142779 2026] [:error] [pid 59551:tid 59572] [client 154.47.24.90:37840] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adTnf17LN7Ubyqs-sVvtNwAAAZM"]
[Tue Apr 07 19:16:16.565658 2026] [proxy_fcgi:error] [pid 37719:tid 37723] [client 154.47.24.90:37850] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:16:17.958764 2026] [proxy_fcgi:error] [pid 37719:tid 37743] [client 154.47.24.90:37850] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:16:18.240833 2026] [proxy_fcgi:error] [pid 37719:tid 37736] [client 154.47.24.90:37850] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:16:19.676476 2026] [:error] [pid 37719:tid 37744] [client 154.47.24.90:37850] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adTng009Xv52u2xXGLDzzgAAANY"]
[Tue Apr 07 19:16:20.255573 2026] [:error] [pid 37719:tid 37730] [client 154.47.24.90:37864] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adTnhE09Xv52u2xXGLDz0wAAAMg"]
[Tue Apr 07 19:16:20.810370 2026] [:error] [pid 59551:tid 59555] [client 154.47.24.90:37876] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adTnhF7LN7Ubyqs-sVvtPgAAAYI"]
[Tue Apr 07 19:16:21.368323 2026] [:error] [pid 37597:tid 37655] [client 154.47.24.90:37880] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adTnhQ6uAY0QAy-8EEJEwgAAAFU"]
[Tue Apr 07 19:16:21.922091 2026] [:error] [pid 37597:tid 37649] [client 154.47.24.90:37888] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adTnhQ6uAY0QAy-8EEJEyAAAAE8"]
[Tue Apr 07 19:16:22.496843 2026] [:error] [pid 37719:tid 37740] [client 154.47.24.90:37890] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adTnhk09Xv52u2xXGLDz3AAAANI"]
[Tue Apr 07 19:16:23.329257 2026] [:error] [pid 59804:tid 59830] [client 154.47.24.90:37380] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adTnh3YVIXiPh5_eJTmRpAAAAhg"]
[Tue Apr 07 19:16:23.888827 2026] [:error] [pid 59551:tid 59562] [client 154.47.24.90:37396] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adTnh17LN7Ubyqs-sVvtQQAAAYk"]
[Tue Apr 07 19:16:24.438107 2026] [:error] [pid 37719:tid 37743] [client 154.47.24.90:37406] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adTniE09Xv52u2xXGLDz5wAAANU"]
[Tue Apr 07 19:16:25.014479 2026] [:error] [pid 59660:tid 59685] [client 154.47.24.90:37418] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adTniTp3-oiX2o5bTswGRAAAAdc"]
[Tue Apr 07 19:16:26.129197 2026] [:error] [pid 37597:tid 37651] [client 154.47.24.90:37420] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adTnig6uAY0QAy-8EEJE4QAAAFE"]
[Tue Apr 07 19:16:26.962334 2026] [:error] [pid 37719:tid 37726] [client 154.47.24.90:37434] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adTnik09Xv52u2xXGLDz9wAAAMQ"]
[Tue Apr 07 19:16:28.083987 2026] [:error] [pid 37596:tid 37608] [client 154.47.24.90:37438] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adTnjKpaAOZHEjRWjP2UVgAAAAI"]
[Tue Apr 07 19:16:29.196464 2026] [:error] [pid 59490:tid 59498] [client 154.47.24.90:37444] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adTnjUcw8OFbiUZ7Rx1eSQAAAUY"]
[Tue Apr 07 19:16:30.590585 2026] [:error] [pid 37597:tid 37641] [client 154.47.24.90:37456] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adTnjg6uAY0QAy-8EEJFAwAAAEc"]
[Tue Apr 07 19:16:32.335148 2026] [:error] [pid 12948:tid 12967] [client 154.47.24.90:37462] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adTnkMbeSPAN8LvMqsagawAAARA"]
[Tue Apr 07 19:16:33.180370 2026] [:error] [pid 37719:tid 37731] [client 154.47.24.90:57516] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adTnkU09Xv52u2xXGLD0AwAAAMk"]
[Tue Apr 07 19:16:38.485081 2026] [:error] [pid 37719:tid 37733] [client 154.47.24.90:57530] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adTnlk09Xv52u2xXGLD0KwAAAMs"]
[Tue Apr 07 19:16:39.036737 2026] [:error] [pid 37719:tid 37729] [client 154.47.24.90:57538] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adTnl009Xv52u2xXGLD0NgAAAMc"]
[Tue Apr 07 19:16:39.874559 2026] [:error] [pid 59804:tid 59810] [client 154.47.24.90:57548] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adTnl3YVIXiPh5_eJTmR0wAAAgQ"]
[Tue Apr 07 19:16:41.017674 2026] [:error] [pid 37719:tid 37725] [client 154.47.24.90:57550] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adTnmU09Xv52u2xXGLD0VgAAAMM"]
[Tue Apr 07 19:16:41.586164 2026] [:error] [pid 59551:tid 59559] [client 154.47.24.90:57566] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adTnmV7LN7Ubyqs-sVvtegAAAYY"]
[Tue Apr 07 19:16:43.260762 2026] [:error] [pid 37597:tid 37643] [client 154.47.24.90:57576] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adTnmw6uAY0QAy-8EEJFTwAAAEk"]
[Tue Apr 07 19:16:43.809588 2026] [:error] [pid 37597:tid 37658] [client 154.47.24.90:39666] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "adTnmw6uAY0QAy-8EEJFUwAAAFg"]
[Tue Apr 07 19:16:45.765454 2026] [:error] [pid 59660:tid 59675] [client 154.47.24.90:39672] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adTnnTp3-oiX2o5bTswGXwAAAc0"]
[Tue Apr 07 19:16:46.637305 2026] [proxy_fcgi:error] [pid 37597:tid 37639] [client 154.47.24.90:39682] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:16:47.201801 2026] [:error] [pid 37597:tid 37651] [client 154.47.24.90:39682] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "adTnnw6uAY0QAy-8EEJFhQAAAFE"]
[Tue Apr 07 19:16:47.753845 2026] [:error] [pid 59551:tid 59565] [client 154.47.24.90:39690] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adTnn17LN7Ubyqs-sVvtigAAAYw"]
[Tue Apr 07 19:16:48.855292 2026] [:error] [pid 37719:tid 37737] [client 154.47.24.90:39694] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adTnoE09Xv52u2xXGLD0cQAAAM8"]
[Tue Apr 07 19:16:49.408782 2026] [:error] [pid 37596:tid 37613] [client 154.47.24.90:39710] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adTnoapaAOZHEjRWjP2UawAAAAc"]
[Tue Apr 07 19:16:51.903100 2026] [:error] [pid 59660:tid 59686] [client 154.47.24.90:39714] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adTnozp3-oiX2o5bTswGcAAAAdg"]
[Tue Apr 07 19:16:52.478845 2026] [:error] [pid 37597:tid 37650] [client 154.47.24.90:39716] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adTnpA6uAY0QAy-8EEJFmQAAAFA"]
[Tue Apr 07 19:16:54.164811 2026] [:error] [pid 59490:tid 59500] [client 154.47.24.90:52086] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "adTnpkcw8OFbiUZ7Rx1ecwAAAUg"]
[Tue Apr 07 19:16:54.715058 2026] [:error] [pid 37596:tid 37611] [client 154.47.24.90:52100] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adTnpqpaAOZHEjRWjP2UcgAAAAU"]
[Tue Apr 07 19:16:55.269110 2026] [:error] [pid 37719:tid 37734] [client 154.47.24.90:52110] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adTnp009Xv52u2xXGLD0hwAAAMw"]
[Tue Apr 07 19:16:57.231571 2026] [:error] [pid 37597:tid 37640] [client 154.47.24.90:52126] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adTnqQ6uAY0QAy-8EEJFrwAAAEY"]
[Tue Apr 07 19:16:58.095510 2026] [:error] [pid 59551:tid 59565] [client 154.47.24.90:52140] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adTnql7LN7Ubyqs-sVvtvwAAAYw"]
[Tue Apr 07 19:17:00.608178 2026] [:error] [pid 59804:tid 59816] [client 154.47.24.90:52146] [client 154.47.24.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.47.24.90, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "adTnrHYVIXiPh5_eJTmSDgAAAgo"]
[Tue Apr 07 19:17:02.291581 2026] [:error] [pid 59804:tid 59817] [client 154.47.24.90:52146] [client 154.47.24.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.47.24.90, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adTnrnYVIXiPh5_eJTmSFwAAAgs"]
[Tue Apr 07 19:17:05.378121 2026] [proxy_fcgi:error] [pid 59804:tid 59813] [client 154.47.24.90:52146] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:17:09.577393 2026] [:error] [pid 59804:tid 59822] [client 154.47.24.90:52146] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adTntXYVIXiPh5_eJTmSOAAAAhA"]
[Tue Apr 07 19:17:10.965794 2026] [:error] [pid 59660:tid 59672] [client 154.47.24.90:46992] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adTntjp3-oiX2o5bTswGgwAAAco"]
[Tue Apr 07 19:17:12.081780 2026] [:error] [pid 59804:tid 59826] [client 154.47.24.90:47000] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adTnuHYVIXiPh5_eJTmSPwAAAhQ"]
[Tue Apr 07 19:17:15.158110 2026] [:error] [pid 37719:tid 37746] [client 154.47.24.90:42788] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adTnu009Xv52u2xXGLD0ygAAANg"]
[Tue Apr 07 19:17:16.321923 2026] [:error] [pid 59551:tid 59573] [client 154.47.24.90:42800] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adTnvF7LN7Ubyqs-sVvt7AAAAZQ"]
[Tue Apr 07 19:17:17.181691 2026] [:error] [pid 59660:tid 59666] [client 154.47.24.90:42802] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adTnvTp3-oiX2o5bTswGiAAAAcQ"]
[Tue Apr 07 19:17:18.868258 2026] [proxy_fcgi:error] [pid 59804:tid 59809] [client 154.47.24.90:42810] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:17:19.156156 2026] [proxy_fcgi:error] [pid 59804:tid 59808] [client 154.47.24.90:42810] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:17:20.818732 2026] [:error] [pid 59804:tid 59825] [client 154.47.24.90:42810] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adTnwHYVIXiPh5_eJTmSZgAAAhM"]
[Tue Apr 07 19:17:21.391621 2026] [:error] [pid 59490:tid 59507] [client 154.47.24.90:42820] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adTnwUcw8OFbiUZ7Rx1engAAAU8"]
[Tue Apr 07 19:17:23.882145 2026] [:error] [pid 59804:tid 59809] [client 154.47.24.90:42822] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adTnw3YVIXiPh5_eJTmSbwAAAgM"]
[Tue Apr 07 19:17:24.741484 2026] [:error] [pid 37719:tid 37744] [client 154.47.24.90:45316] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "adTnxE09Xv52u2xXGLD1CgAAANY"]
[Tue Apr 07 19:17:26.146438 2026] [:error] [pid 37719:tid 37732] [client 154.47.24.90:45326] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adTnxk09Xv52u2xXGLD1FQAAAMo"]
[Tue Apr 07 19:17:28.676803 2026] [:error] [pid 37719:tid 37724] [client 154.47.24.90:45340] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adTnyE09Xv52u2xXGLD1KwAAAMI"]
[Tue Apr 07 19:17:29.235571 2026] [proxy_fcgi:error] [pid 37719:tid 37730] [client 154.47.24.90:45354] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:17:30.069568 2026] [:error] [pid 37719:tid 37734] [client 154.47.24.90:45354] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adTnyk09Xv52u2xXGLD1OAAAAMw"]
[Tue Apr 07 19:17:32.105778 2026] [proxy_fcgi:error] [pid 37719:tid 37733] [client 154.47.24.90:45362] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:17:32.685358 2026] [:error] [pid 37719:tid 37744] [client 154.47.24.90:45362] [client 154.47.24.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.47.24.90, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adTnzE09Xv52u2xXGLD1SwAAANY"]
[Tue Apr 07 19:17:34.140269 2026] [:error] [pid 37719:tid 37742] [client 154.47.24.90:45362] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adTnzk09Xv52u2xXGLD1UQAAANQ"]
[Tue Apr 07 19:17:34.978942 2026] [:error] [pid 59804:tid 59823] [client 154.47.24.90:34370] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adTnznYVIXiPh5_eJTmSgwAAAhE"]
[Tue Apr 07 19:17:36.664910 2026] [:error] [pid 59804:tid 59827] [client 154.47.24.90:34382] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adTn0HYVIXiPh5_eJTmSlwAAAhU"]
[Tue Apr 07 19:17:38.068103 2026] [:error] [pid 37598:tid 37665] [client 154.47.24.90:34396] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adTn0u9g7q_cV2WhPaylZwAAAIQ"]
[Tue Apr 07 19:17:38.640178 2026] [:error] [pid 37597:tid 37642] [client 154.47.24.90:34400] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adTn0g6uAY0QAy-8EEJGOgAAAEg"]
[Tue Apr 07 19:17:40.035036 2026] [:error] [pid 59490:tid 59494] [client 154.47.24.90:34416] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adTn1Ecw8OFbiUZ7Rx1esgAAAUI"]
[Tue Apr 07 19:17:41.194448 2026] [proxy_fcgi:error] [pid 37597:tid 37654] [client 154.47.24.90:34432] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:17:41.482928 2026] [:error] [pid 37597:tid 37649] [client 154.47.24.90:34432] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adTn1Q6uAY0QAy-8EEJGYAAAAE8"]
[Tue Apr 07 19:17:42.309131 2026] [:error] [pid 59660:tid 59672] [client 154.47.24.90:34448] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "adTn1jp3-oiX2o5bTswGoAAAAco"]
[Tue Apr 07 19:17:42.862479 2026] [:error] [pid 37596:tid 37621] [client 154.47.24.90:51754] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adTn1qpaAOZHEjRWjP2UpgAAAA8"]
[Tue Apr 07 19:17:43.416681 2026] [:error] [pid 37597:tid 37655] [client 154.47.24.90:51770] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adTn1w6uAY0QAy-8EEJGZwAAAFU"]
[Tue Apr 07 19:17:43.965687 2026] [:error] [pid 37719:tid 37725] [client 154.47.24.90:51778] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adTn1009Xv52u2xXGLD1dwAAAMM"]
[Tue Apr 07 19:17:44.518881 2026] [:error] [pid 37719:tid 37745] [client 154.47.24.90:51794] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adTn2E09Xv52u2xXGLD1egAAANc"]
[Tue Apr 07 19:17:45.073663 2026] [:error] [pid 37597:tid 37638] [client 154.47.24.90:51808] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adTn2Q6uAY0QAy-8EEJGcAAAAEQ"]
[Tue Apr 07 19:17:46.183556 2026] [:error] [pid 59551:tid 59558] [client 154.47.24.90:51814] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adTn2l7LN7Ubyqs-sVvuXwAAAYU"]
[Tue Apr 07 19:17:46.728921 2026] [:error] [pid 37597:tid 37644] [client 154.47.24.90:51822] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adTn2g6uAY0QAy-8EEJGcQAAAEo"]
[Tue Apr 07 19:17:47.278760 2026] [:error] [pid 59660:tid 59665] [client 154.47.24.90:51826] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adTn2zp3-oiX2o5bTswGpgAAAcM"]
[Tue Apr 07 19:17:47.847441 2026] [:error] [pid 37719:tid 37727] [client 154.47.24.90:51838] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adTn2009Xv52u2xXGLD1jgAAAMU"]
[Tue Apr 07 19:17:48.400932 2026] [:error] [pid 59804:tid 59825] [client 154.47.24.90:51842] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adTn3HYVIXiPh5_eJTmSuQAAAhM"]
[Tue Apr 07 19:17:48.962660 2026] [proxy_fcgi:error] [pid 59551:tid 59577] [client 154.47.24.90:51852] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:17:49.796285 2026] [:error] [pid 59551:tid 59576] [client 154.47.24.90:51852] [client 154.47.24.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.47.24.90, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adTn3V7LN7Ubyqs-sVvufAAAAZc"]
[Tue Apr 07 19:17:51.191997 2026] [:error] [pid 59551:tid 59556] [client 154.47.24.90:51852] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adTn317LN7Ubyqs-sVvuggAAAYM"]
[Tue Apr 07 19:17:57.469588 2026] [:error] [pid 12948:tid 12956] [client 154.47.24.90:51862] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adTn5cbeSPAN8LvMqsag7wAAAQU"]
[Tue Apr 07 19:17:58.040095 2026] [:error] [pid 59804:tid 59810] [client 154.47.24.90:43724] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adTn5nYVIXiPh5_eJTmSzgAAAgQ"]
[Tue Apr 07 19:17:58.594717 2026] [:error] [pid 59551:tid 59571] [client 154.47.24.90:43738] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adTn5l7LN7Ubyqs-sVvuigAAAZI"]
[Tue Apr 07 19:18:00.828707 2026] [:error] [pid 37597:tid 37637] [client 154.47.24.90:43748] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adTn6A6uAY0QAy-8EEJGswAAAEM"]
[Tue Apr 07 19:18:01.404836 2026] [:error] [pid 59804:tid 59811] [client 154.47.24.90:43756] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adTn6XYVIXiPh5_eJTmS1gAAAgU"]
[Tue Apr 07 19:18:01.967786 2026] [:error] [pid 37719:tid 37744] [client 154.47.24.90:43772] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adTn6U09Xv52u2xXGLD1pwAAANY"]
[Tue Apr 07 19:18:03.657361 2026] [:error] [pid 37719:tid 37735] [client 154.47.24.90:43784] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adTn6009Xv52u2xXGLD1vAAAAM0"]
[Tue Apr 07 19:18:04.490301 2026] [:error] [pid 59490:tid 59509] [client 154.47.24.90:45000] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adTn7Ecw8OFbiUZ7Rx1ewAAAAVE"]
[Tue Apr 07 19:18:05.625450 2026] [:error] [pid 59551:tid 59555] [client 154.47.24.90:45008] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adTn7V7LN7Ubyqs-sVvumQAAAYI"]
[Tue Apr 07 19:18:09.251626 2026] [:error] [pid 59804:tid 59821] [client 154.47.24.90:45020] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adTn8XYVIXiPh5_eJTmS6gAAAg8"]
[Tue Apr 07 19:18:10.081021 2026] [:error] [pid 12948:tid 12962] [client 154.47.24.90:45036] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "adTn8sbeSPAN8LvMqsag9gAAAQs"]
[Tue Apr 07 19:18:13.793108 2026] [:error] [pid 37597:tid 37639] [client 154.47.24.90:45050] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adTn9Q6uAY0QAy-8EEJG0wAAAEU"]
[Tue Apr 07 19:18:14.908225 2026] [:error] [pid 59804:tid 59817] [client 154.47.24.90:36836] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adTn9nYVIXiPh5_eJTmS9gAAAgs"]
[Tue Apr 07 19:18:16.576586 2026] [:error] [pid 37597:tid 37643] [client 154.47.24.90:36850] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adTn-A6uAY0QAy-8EEJG5QAAAEk"]
[Tue Apr 07 19:18:18.252822 2026] [:error] [pid 59804:tid 59809] [client 154.47.24.90:36852] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adTn-nYVIXiPh5_eJTmTBQAAAgM"]
[Tue Apr 07 19:18:19.379368 2026] [:error] [pid 37597:tid 37650] [client 154.47.24.90:36854] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adTn-w6uAY0QAy-8EEJG9gAAAFA"]
[Tue Apr 07 19:18:19.937453 2026] [:error] [pid 37719:tid 37745] [client 154.47.24.90:36870] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adTn-009Xv52u2xXGLD14wAAANc"]
[Tue Apr 07 19:18:21.889716 2026] [:error] [pid 37597:tid 37641] [client 154.47.24.90:36874] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adTn_Q6uAY0QAy-8EEJHCwAAAEc"]
[Tue Apr 07 19:18:23.852131 2026] [:error] [pid 37597:tid 37658] [client 154.47.24.90:36878] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adTn_w6uAY0QAy-8EEJHGQAAAFg"]
[Tue Apr 07 19:18:26.762555 2026] [:error] [pid 37719:tid 37743] [client 154.47.24.90:33670] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adToAk09Xv52u2xXGLD1_AAAANU"]
[Tue Apr 07 19:18:27.314980 2026] [:error] [pid 59551:tid 59559] [client 154.47.24.90:33678] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adToA17LN7Ubyqs-sVvuqAAAAYY"]
[Tue Apr 07 19:18:28.136598 2026] [:error] [pid 59804:tid 59811] [client 154.47.24.90:33692] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adToBHYVIXiPh5_eJTmTEwAAAgU"]
[Tue Apr 07 19:18:29.237018 2026] [:error] [pid 59551:tid 59577] [client 154.47.24.90:33696] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adToBV7LN7Ubyqs-sVvurQAAAZg"]
[Tue Apr 07 19:18:29.790337 2026] [:error] [pid 59551:tid 59560] [client 154.47.24.90:33702] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adToBV7LN7Ubyqs-sVvurgAAAYc"]
[Tue Apr 07 19:18:33.660442 2026] [:error] [pid 59804:tid 59827] [client 154.47.24.90:33714] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adToCXYVIXiPh5_eJTmTIwAAAhU"]
[Tue Apr 07 19:18:34.769942 2026] [:error] [pid 59490:tid 59497] [client 154.47.24.90:54590] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adToCkcw8OFbiUZ7Rx1e1gAAAUU"]
[Tue Apr 07 19:18:35.339294 2026] [:error] [pid 37719:tid 37722] [client 154.47.24.90:54606] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adToC009Xv52u2xXGLD2BQAAAMA"]
[Tue Apr 07 19:18:36.447351 2026] [:error] [pid 59551:tid 59575] [client 154.47.24.90:54616] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adToDF7LN7Ubyqs-sVvuvwAAAZY"]
[Tue Apr 07 19:18:37.279671 2026] [:error] [pid 37598:tid 37670] [client 154.47.24.90:54630] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adToDe9g7q_cV2WhPaylvwAAAIk"]
[Tue Apr 07 19:18:39.313403 2026] [:error] [pid 59804:tid 59815] [client 154.47.24.90:54636] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adToD3YVIXiPh5_eJTmTMAAAAgk"]
[Tue Apr 07 19:18:40.432921 2026] [:error] [pid 37597:tid 37639] [client 154.47.24.90:54648] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adToEA6uAY0QAy-8EEJHfAAAAEU"]
[Tue Apr 07 19:18:41.596292 2026] [:error] [pid 37719:tid 37744] [client 154.47.24.90:54658] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adToEU09Xv52u2xXGLD2JgAAANY"]
[Tue Apr 07 19:18:42.431273 2026] [:error] [pid 59804:tid 59823] [client 154.47.24.90:54666] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "adToEnYVIXiPh5_eJTmTNQAAAhE"]
[Tue Apr 07 19:18:43.273920 2026] [:error] [pid 12948:tid 12968] [client 154.47.24.90:46596] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adToE8beSPAN8LvMqsahKQAAARE"]
[Tue Apr 07 19:18:43.822731 2026] [:error] [pid 59551:tid 59561] [client 154.47.24.90:46604] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "adToE17LN7Ubyqs-sVvuzwAAAYg"]
[Tue Apr 07 19:18:44.375636 2026] [:error] [pid 37597:tid 37645] [client 154.47.24.90:46620] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adToFA6uAY0QAy-8EEJHjQAAAEs"]
[Tue Apr 07 19:18:46.679684 2026] [:error] [pid 37719:tid 37723] [client 154.47.24.90:46626] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adToFk09Xv52u2xXGLD2PgAAAME"]
[Tue Apr 07 19:18:48.056003 2026] [:error] [pid 37719:tid 37735] [client 154.47.24.90:46640] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adToGE09Xv52u2xXGLD2SwAAAM0"]
[Tue Apr 07 19:18:49.163446 2026] [:error] [pid 59804:tid 59814] [client 154.47.24.90:46652] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adToGXYVIXiPh5_eJTmTTgAAAgg"]
[Tue Apr 07 19:18:50.271469 2026] [:error] [pid 59660:tid 59681] [client 154.47.24.90:46666] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adToGjp3-oiX2o5bTswG4QAAAdM"]
[Tue Apr 07 19:18:52.218318 2026] [:error] [pid 37719:tid 37723] [client 154.47.24.90:46676] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adToHE09Xv52u2xXGLD2YAAAAME"]
[Tue Apr 07 19:18:53.042227 2026] [:error] [pid 37719:tid 37743] [client 154.47.24.90:32772] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adToHU09Xv52u2xXGLD2ZAAAANU"]
[Tue Apr 07 19:18:53.877598 2026] [:error] [pid 37597:tid 37642] [client 154.47.24.90:32780] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adToHQ6uAY0QAy-8EEJHxQAAAEg"]
[Tue Apr 07 19:18:54.997598 2026] [:error] [pid 37719:tid 37728] [client 154.47.24.90:32784] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adToHk09Xv52u2xXGLD2bAAAAMY"]
[Tue Apr 07 19:18:57.790505 2026] [:error] [pid 37719:tid 37722] [client 154.47.24.90:32800] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adToIU09Xv52u2xXGLD2jAAAAMA"]
[Tue Apr 07 19:18:58.355630 2026] [:error] [pid 59551:tid 59558] [client 154.47.24.90:32816] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adToIl7LN7Ubyqs-sVvu3QAAAYU"]
[Tue Apr 07 19:18:59.746289 2026] [:error] [pid 59804:tid 59821] [client 154.47.24.90:32822] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adToI3YVIXiPh5_eJTmTeQAAAg8"]
[Tue Apr 07 19:19:00.313517 2026] [:error] [pid 37597:tid 37641] [client 154.47.24.90:32838] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adToJA6uAY0QAy-8EEJIHgAAAEc"]
[Tue Apr 07 19:19:01.412991 2026] [:error] [pid 37719:tid 37723] [client 154.47.24.90:32848] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adToJU09Xv52u2xXGLD2nwAAAME"]
[Tue Apr 07 19:19:01.960711 2026] [:error] [pid 37719:tid 37734] [client 154.47.24.90:32860] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adToJU09Xv52u2xXGLD2ogAAAMw"]
[Tue Apr 07 19:19:02.514653 2026] [:error] [pid 37597:tid 37652] [client 154.47.24.90:32872] [client 154.47.24.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.47.24.90, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adToJg6uAY0QAy-8EEJILwAAAFI"]
[Tue Apr 07 19:19:02.526549 2026] [proxy_fcgi:error] [pid 37597:tid 37652] [client 154.47.24.90:32872] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:19:02.804982 2026] [:error] [pid 37597:tid 37635] [client 154.47.24.90:32872] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adToJg6uAY0QAy-8EEJIMgAAAEE"]
[Tue Apr 07 19:19:03.909027 2026] [:error] [pid 37719:tid 37726] [client 154.47.24.90:57470] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adToJ009Xv52u2xXGLD2rgAAAMQ"]
[Tue Apr 07 19:19:04.457770 2026] [:error] [pid 37719:tid 37739] [client 154.47.24.90:57478] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "adToKE09Xv52u2xXGLD2tQAAANE"]
[Tue Apr 07 19:19:06.979955 2026] [:error] [pid 59490:tid 59503] [client 154.47.24.90:57492] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adToKkcw8OFbiUZ7Rx1fHwAAAUs"]
[Tue Apr 07 19:19:07.530868 2026] [:error] [pid 59804:tid 59807] [client 154.47.24.90:57494] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adToK3YVIXiPh5_eJTmTmQAAAgE"]
[Tue Apr 07 19:19:08.645406 2026] [:error] [pid 37597:tid 37652] [client 154.47.24.90:57500] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adToLA6uAY0QAy-8EEJIUQAAAFI"]
[Tue Apr 07 19:19:09.198280 2026] [:error] [pid 37597:tid 37650] [client 154.47.24.90:57508] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adToLQ6uAY0QAy-8EEJIVwAAAFA"]
[Tue Apr 07 19:19:09.751744 2026] [proxy_fcgi:error] [pid 37719:tid 37746] [client 154.47.24.90:57522] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:19:10.028061 2026] [:error] [pid 37719:tid 37733] [client 154.47.24.90:57522] [client 154.47.24.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.47.24.90, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adToLk09Xv52u2xXGLD22AAAAMs"]
[Tue Apr 07 19:19:10.590088 2026] [:error] [pid 37719:tid 37728] [client 154.47.24.90:57522] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adToLk09Xv52u2xXGLD23QAAAMY"]
[Tue Apr 07 19:19:12.038670 2026] [:error] [pid 59551:tid 59575] [client 154.47.24.90:57524] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adToMF7LN7Ubyqs-sVvvBgAAAZY"]
[Tue Apr 07 19:19:12.877112 2026] [:error] [pid 12948:tid 12951] [client 154.47.24.90:57534] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adToMMbeSPAN8LvMqsahWgAAAQA"]
[Tue Apr 07 19:19:13.434200 2026] [:error] [pid 59660:tid 59663] [client 154.47.24.90:53830] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adToMTp3-oiX2o5bTswHAAAAAcE"]
[Tue Apr 07 19:19:14.825750 2026] [:error] [pid 37598:tid 37661] [client 154.47.24.90:53844] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adToMu9g7q_cV2WhPaymCAAAAIA"]
[Tue Apr 07 19:19:15.926961 2026] [:error] [pid 59660:tid 59662] [client 154.47.24.90:53858] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adToMzp3-oiX2o5bTswHBwAAAcA"]
[Tue Apr 07 19:19:17.600183 2026] [:error] [pid 37597:tid 37646] [client 154.47.24.90:53874] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adToNQ6uAY0QAy-8EEJIlAAAAEw"]
[Tue Apr 07 19:19:18.159330 2026] [:error] [pid 59660:tid 59667] [client 154.47.24.90:53886] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adToNjp3-oiX2o5bTswHDAAAAcU"]
[Tue Apr 07 19:19:19.033332 2026] [:error] [pid 37719:tid 37742] [client 154.47.24.90:53890] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "adToN009Xv52u2xXGLD28wAAANQ"]
[Tue Apr 07 19:19:21.352931 2026] [:error] [pid 37597:tid 37641] [client 154.47.24.90:53892] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adToOQ6uAY0QAy-8EEJIyAAAAEc"]
[Tue Apr 07 19:19:22.459870 2026] [:error] [pid 37598:tid 37675] [client 154.47.24.90:53908] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "adToOu9g7q_cV2WhPaymFQAAAI4"]
[Tue Apr 07 19:19:22.732109 2026] [:error] [pid 37598:tid 37673] [client 154.47.24.90:53908] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adToOu9g7q_cV2WhPaymFgAAAIw"]
[Tue Apr 07 19:19:23.829659 2026] [:error] [pid 59490:tid 59499] [client 154.47.24.90:36166] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adToO0cw8OFbiUZ7Rx1fLAAAAUc"]
[Tue Apr 07 19:19:24.381121 2026] [:error] [pid 37598:tid 37662] [client 154.47.24.90:36180] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adToPO9g7q_cV2WhPaymFwAAAIE"]
[Tue Apr 07 19:19:26.605820 2026] [:error] [pid 37598:tid 37675] [client 154.47.24.90:36192] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adToPu9g7q_cV2WhPaymJwAAAI4"]
[Tue Apr 07 19:19:27.729969 2026] [:error] [pid 37597:tid 37650] [client 154.47.24.90:36204] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adToPw6uAY0QAy-8EEJI_QAAAFA"]
[Tue Apr 07 19:19:30.279714 2026] [:error] [pid 37719:tid 37733] [client 154.47.24.90:36214] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adToQk09Xv52u2xXGLD3KgAAAMs"]
[Tue Apr 07 19:19:32.291930 2026] [:error] [pid 37719:tid 37745] [client 154.47.24.90:36228] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adToRE09Xv52u2xXGLD3PgAAANc"]
[Tue Apr 07 19:19:32.850035 2026] [:error] [pid 37597:tid 37647] [client 154.47.24.90:55792] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adToRA6uAY0QAy-8EEJJFwAAAE0"]
[Tue Apr 07 19:19:33.710416 2026] [:error] [pid 37598:tid 37673] [client 154.47.24.90:55796] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adToRe9g7q_cV2WhPaymQwAAAIw"]
[Tue Apr 07 19:19:34.267819 2026] [:error] [pid 37597:tid 37639] [client 154.47.24.90:55800] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "adToRg6uAY0QAy-8EEJJIgAAAEU"]
[Tue Apr 07 19:19:35.391680 2026] [:error] [pid 37598:tid 37671] [client 154.47.24.90:55802] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adToR-9g7q_cV2WhPaymSQAAAIo"]
[Tue Apr 07 19:19:36.504485 2026] [:error] [pid 59804:tid 59820] [client 154.47.24.90:55810] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adToSHYVIXiPh5_eJTmT0wAAAg4"]
[Tue Apr 07 19:19:37.054887 2026] [:error] [pid 59804:tid 59824] [client 154.47.24.90:55824] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "adToSXYVIXiPh5_eJTmT1gAAAhI"]
[Tue Apr 07 19:19:38.726886 2026] [:error] [pid 12948:tid 12956] [client 154.47.24.90:55836] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "adToSsbeSPAN8LvMqsahdAAAAQU"]
[Tue Apr 07 19:19:39.854913 2026] [:error] [pid 37598:tid 37674] [client 154.47.24.90:55846] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adToS-9g7q_cV2WhPaymUQAAAI0"]
[Tue Apr 07 19:19:41.261504 2026] [:error] [pid 59804:tid 59814] [client 154.47.24.90:55856] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adToTXYVIXiPh5_eJTmT4gAAAgg"]
[Tue Apr 07 19:19:41.831551 2026] [:error] [pid 59490:tid 59494] [client 154.47.24.90:55872] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adToTUcw8OFbiUZ7Rx1fNQAAAUI"]
[Tue Apr 07 19:19:42.406111 2026] [:error] [pid 59660:tid 59685] [client 154.47.24.90:55876] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adToTjp3-oiX2o5bTswHLgAAAdc"]
[Tue Apr 07 19:19:43.523349 2026] [:error] [pid 37597:tid 37647] [client 154.47.24.90:52150] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adToTw6uAY0QAy-8EEJJSwAAAE0"]
[Tue Apr 07 19:19:44.634915 2026] [:error] [pid 59490:tid 59516] [client 154.47.24.90:52158] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adToUEcw8OFbiUZ7Rx1fOwAAAVg"]
[Tue Apr 07 19:19:45.187960 2026] [:error] [pid 59551:tid 59553] [client 154.47.24.90:52168] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adToUV7LN7Ubyqs-sVvvZAAAAYA"]
[Tue Apr 07 19:19:46.015602 2026] [:error] [pid 12948:tid 12966] [client 154.47.24.90:52174] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adToUsbeSPAN8LvMqsahfwAAAQ8"]
[Tue Apr 07 19:19:46.565995 2026] [:error] [pid 37596:tid 37607] [client 154.47.24.90:52184] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "adToUqpaAOZHEjRWjP2VJgAAAAE"]
[Tue Apr 07 19:19:47.713318 2026] [:error] [pid 37597:tid 37644] [client 154.47.24.90:52200] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adToUw6uAY0QAy-8EEJJYQAAAEo"]
[Tue Apr 07 19:19:48.540167 2026] [:error] [pid 59551:tid 59577] [client 154.47.24.90:52204] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adToVF7LN7Ubyqs-sVvvZwAAAZg"]
[Tue Apr 07 19:19:49.093887 2026] [:error] [pid 37597:tid 37651] [client 154.47.24.90:52210] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adToVQ6uAY0QAy-8EEJJZwAAAFE"]
[Tue Apr 07 19:19:49.641962 2026] [:error] [pid 37596:tid 37613] [client 154.47.24.90:52212] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adToVapaAOZHEjRWjP2VNQAAAAc"]
[Tue Apr 07 19:19:50.768574 2026] [:error] [pid 59804:tid 59806] [client 154.47.24.90:52226] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adToVnYVIXiPh5_eJTmUDQAAAgA"]
[Tue Apr 07 19:19:51.880364 2026] [:error] [pid 37598:tid 37682] [client 154.47.24.90:52240] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adToV-9g7q_cV2WhPaymawAAAJU"]
[Tue Apr 07 19:19:52.725300 2026] [:error] [pid 59660:tid 59672] [client 154.47.24.90:52254] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adToWDp3-oiX2o5bTswHRwAAAco"]
[Tue Apr 07 19:19:53.560651 2026] [:error] [pid 37597:tid 37649] [client 154.47.24.90:52714] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adToWQ6uAY0QAy-8EEJJbwAAAE8"]
[Tue Apr 07 19:19:55.920014 2026] [:error] [pid 59551:tid 59564] [client 154.47.24.90:52716] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "adToW17LN7Ubyqs-sVvvdwAAAYs"]
[Tue Apr 07 19:19:56.535770 2026] [:error] [pid 59804:tid 59806] [client 154.47.24.90:52732] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adToXHYVIXiPh5_eJTmUJQAAAgA"]
[Tue Apr 07 19:19:57.651936 2026] [:error] [pid 37597:tid 37647] [client 154.47.24.90:52746] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adToXQ6uAY0QAy-8EEJJfgAAAE0"]
[Tue Apr 07 19:19:59.333770 2026] [:error] [pid 59490:tid 59511] [client 154.47.24.90:52760] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adToX0cw8OFbiUZ7Rx1fWwAAAVM"]
[Tue Apr 07 19:20:00.459514 2026] [:error] [pid 37598:tid 37671] [client 154.47.24.90:52764] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "adToYO9g7q_cV2WhPaymfwAAAIo"]
[Tue Apr 07 19:20:01.612204 2026] [:error] [pid 37719:tid 37732] [client 154.47.24.90:52766] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "adToYU09Xv52u2xXGLD3oQAAAMo"]
[Tue Apr 07 19:20:02.442397 2026] [:error] [pid 37597:tid 37652] [client 154.47.24.90:52776] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "adToYg6uAY0QAy-8EEJJlgAAAFI"]
[Tue Apr 07 19:20:03.280260 2026] [:error] [pid 59804:tid 59811] [client 154.47.24.90:55326] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "adToY3YVIXiPh5_eJTmUQgAAAgU"]
[Tue Apr 07 19:20:04.951937 2026] [:error] [pid 37719:tid 37743] [client 154.47.24.90:55336] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "adToZE09Xv52u2xXGLD3vAAAANU"]
[Tue Apr 07 19:20:06.354127 2026] [:error] [pid 37597:tid 37638] [client 154.47.24.90:55342] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "adToZg6uAY0QAy-8EEJJogAAAEQ"]
[Tue Apr 07 19:20:06.912449 2026] [proxy_fcgi:error] [pid 37598:tid 37670] [client 154.47.24.90:55344] AH01071: Got error 'Primary script unknown'
[Tue Apr 07 19:20:07.185464 2026] [:error] [pid 37598:tid 37666] [client 154.47.24.90:55344] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "adToZ-9g7q_cV2WhPaymiAAAAIU"]
[Tue Apr 07 19:20:07.732261 2026] [:error] [pid 37597:tid 37636] [client 154.47.24.90:55346] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "adToZw6uAY0QAy-8EEJJqwAAAEI"]
[Tue Apr 07 19:20:08.840858 2026] [:error] [pid 59490:tid 59511] [client 154.47.24.90:55354] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "adToaEcw8OFbiUZ7Rx1fZgAAAVM"]
[Tue Apr 07 19:20:09.384940 2026] [:error] [pid 59551:tid 59563] [client 154.47.24.90:55358] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "adToaV7LN7Ubyqs-sVvvoQAAAYo"]
[Tue Apr 07 19:20:11.665293 2026] [:error] [pid 59804:tid 59808] [client 154.47.24.90:55360] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "adToa3YVIXiPh5_eJTmUbQAAAgI"]
[Tue Apr 07 19:20:12.215871 2026] [:error] [pid 37719:tid 37732] [client 154.47.24.90:55368] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "adTobE09Xv52u2xXGLD33QAAAMo"]
[Tue Apr 07 19:20:13.035680 2026] [:error] [pid 37596:tid 37625] [client 154.47.24.90:57726] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "adTobapaAOZHEjRWjP2VYQAAABM"]
[Tue Apr 07 19:20:13.588125 2026] [:error] [pid 12948:tid 12975] [client 154.47.24.90:57728] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "adTobcbeSPAN8LvMqsahtQAAARg"]
[Tue Apr 07 19:20:14.143968 2026] [:error] [pid 59660:tid 59684] [client 154.47.24.90:57732] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "adTobjp3-oiX2o5bTswHdAAAAdY"]
[Tue Apr 07 19:20:14.692723 2026] [:error] [pid 12948:tid 12959] [client 154.47.24.90:57744] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "adTobsbeSPAN8LvMqsahuQAAAQg"]
[Tue Apr 07 19:20:16.365725 2026] [:error] [pid 37596:tid 37628] [client 154.47.24.90:57746] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "adTocKpaAOZHEjRWjP2VbQAAABY"]
[Tue Apr 07 19:20:16.920344 2026] [:error] [pid 59804:tid 59830] [client 154.47.24.90:57750] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "adTocHYVIXiPh5_eJTmUgAAAAhg"]
[Tue Apr 07 19:20:18.042355 2026] [:error] [pid 59804:tid 59821] [client 154.47.24.90:57760] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "adTocnYVIXiPh5_eJTmUkAAAAg8"]
[Tue Apr 07 19:20:18.618714 2026] [:error] [pid 59660:tid 59663] [client 154.47.24.90:57764] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "adTocjp3-oiX2o5bTswHhgAAAcE"]
[Tue Apr 07 19:20:19.741954 2026] [:error] [pid 37719:tid 37741] [client 154.47.24.90:57776] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "adToc009Xv52u2xXGLD4FQAAANM"]
[Tue Apr 07 19:20:20.300454 2026] [:error] [pid 37598:tid 37672] [client 154.47.24.90:57782] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "adTodO9g7q_cV2WhPaymmQAAAIs"]
[Tue Apr 07 19:20:22.836883 2026] [:error] [pid 59660:tid 59682] [client 154.47.24.90:57792] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "adTodjp3-oiX2o5bTswHmAAAAdQ"]
[Tue Apr 07 19:20:23.392139 2026] [:error] [pid 59490:tid 59502] [client 154.47.24.90:50996] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adTod0cw8OFbiUZ7Rx1ffgAAAUo"]
[Tue Apr 07 19:20:24.503874 2026] [:error] [pid 12948:tid 12952] [client 154.47.24.90:51008] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "adToeMbeSPAN8LvMqsahygAAAQE"]
[Tue Apr 07 19:20:25.334269 2026] [:error] [pid 37597:tid 37647] [client 154.47.24.90:51012] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "adToeQ6uAY0QAy-8EEJJ0AAAAE0"]
[Tue Apr 07 19:20:26.192356 2026] [:error] [pid 59490:tid 59503] [client 154.47.24.90:51016] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "adToekcw8OFbiUZ7Rx1fhgAAAUs"]
[Tue Apr 07 19:20:26.740000 2026] [:error] [pid 59551:tid 59567] [client 154.47.24.90:51020] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "adToel7LN7Ubyqs-sVvvwQAAAY4"]
[Tue Apr 07 19:20:27.284723 2026] [:error] [pid 12948:tid 12974] [client 154.47.24.90:51032] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "adToe8beSPAN8LvMqsah0gAAARc"]
[Tue Apr 07 19:20:28.674647 2026] [:error] [pid 37597:tid 37650] [client 154.47.24.90:51036] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "adTofA6uAY0QAy-8EEJJ8AAAAFA"]
[Tue Apr 07 19:20:29.509904 2026] [:error] [pid 59490:tid 59516] [client 154.47.24.90:51050] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "adTofUcw8OFbiUZ7Rx1flgAAAVg"]
[Tue Apr 07 19:20:30.622222 2026] [:error] [pid 12948:tid 12973] [client 154.47.24.90:51052] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "adTofsbeSPAN8LvMqsah5AAAARY"]
[Tue Apr 07 19:20:31.176301 2026] [:error] [pid 59551:tid 59574] [client 154.47.24.90:51054] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "adTof17LN7Ubyqs-sVvv2QAAAZU"]
[Tue Apr 07 19:20:31.726014 2026] [:error] [pid 59551:tid 59565] [client 154.47.24.90:51064] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "adTof17LN7Ubyqs-sVvv2wAAAYw"]
[Tue Apr 07 19:20:34.556713 2026] [:error] [pid 37597:tid 37645] [client 154.47.24.90:51070] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "adTogg6uAY0QAy-8EEJKDAAAAEs"]
[Tue Apr 07 19:20:35.419913 2026] [:error] [pid 37597:tid 37658] [client 154.47.24.90:45108] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "adTogw6uAY0QAy-8EEJKEQAAAFg"]
[Tue Apr 07 19:20:38.024875 2026] [:error] [pid 37597:tid 37643] [client 154.47.24.90:45114] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "adTohg6uAY0QAy-8EEJKHAAAAEk"]
[Tue Apr 07 19:20:38.592339 2026] [:error] [pid 37597:tid 37644] [client 154.47.24.90:45122] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "adTohg6uAY0QAy-8EEJKIQAAAEo"]
[Tue Apr 07 19:20:39.146420 2026] [:error] [pid 37596:tid 37613] [client 154.47.24.90:45134] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "adToh6paAOZHEjRWjP2VhwAAAAc"]
[Tue Apr 07 19:20:40.263184 2026] [:error] [pid 37719:tid 37734] [client 154.47.24.90:45140] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "adToiE09Xv52u2xXGLD4WAAAAMw"]
[Tue Apr 07 19:20:42.794682 2026] [:error] [pid 37597:tid 37653] [client 154.47.24.90:45156] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "adToig6uAY0QAy-8EEJKOAAAAFM"]
[Tue Apr 07 19:20:44.479890 2026] [:error] [pid 37597:tid 37644] [client 154.47.24.90:46052] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "adTojA6uAY0QAy-8EEJKQAAAAEo"]
[Tue Apr 07 19:20:45.593602 2026] [:error] [pid 59551:tid 59555] [client 154.47.24.90:46068] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "adTojV7LN7Ubyqs-sVvwCAAAAYI"]
[Tue Apr 07 19:20:46.146533 2026] [:error] [pid 59551:tid 59562] [client 154.47.24.90:46072] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "adTojl7LN7Ubyqs-sVvwCgAAAYk"]
[Tue Apr 07 19:20:49.800954 2026] [:error] [pid 59490:tid 59516] [client 154.47.24.90:46074] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "adTokUcw8OFbiUZ7Rx1ftwAAAVg"]
[Tue Apr 07 19:20:50.355137 2026] [:error] [pid 59660:tid 59677] [client 154.47.24.90:46078] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "adTokjp3-oiX2o5bTswHwQAAAc8"]
[Tue Apr 07 19:20:50.907742 2026] [:error] [pid 59660:tid 59663] [client 154.47.24.90:46094] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "adTokjp3-oiX2o5bTswHxQAAAcE"]
[Tue Apr 07 19:20:51.739713 2026] [:error] [pid 59804:tid 59816] [client 154.47.24.90:46098] [client 154.47.24.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.47.24.90, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "adTok3YVIXiPh5_eJTmUtQAAAgo"]
[Tue Apr 07 19:20:52.299016 2026] [:error] [pid 59804:tid 59823] [client 154.47.24.90:46098] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "adTolHYVIXiPh5_eJTmUuQAAAhE"]
[Tue Apr 07 19:20:52.874860 2026] [:error] [pid 37597:tid 37648] [client 154.47.24.90:45306] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "adTolA6uAY0QAy-8EEJKRwAAAE4"]
[Tue Apr 07 19:20:53.426892 2026] [:error] [pid 59660:tid 59673] [client 154.47.24.90:45310] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "adTolTp3-oiX2o5bTswHyQAAAcs"]
[Tue Apr 07 19:20:55.643197 2026] [:error] [pid 37719:tid 37740] [client 154.47.24.90:45312] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "adTol009Xv52u2xXGLD4kAAAANI"]
[Tue Apr 07 19:20:58.236731 2026] [:error] [pid 59804:tid 59821] [client 154.47.24.90:45316] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "adTomnYVIXiPh5_eJTmU3QAAAg8"]
[Tue Apr 07 19:20:59.334758 2026] [:error] [pid 12948:tid 12956] [client 154.47.24.90:45332] [client 154.47.24.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "adTom8beSPAN8LvMqsaiAwAAAQU"]
[Tue Apr 07 19:21:08.379331 2026] [:error] [pid 59551:tid 59566] [client 178.239.163.68:43234] [client 178.239.163.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adTopF7LN7Ubyqs-sVvwcwAAAY0"]
[Tue Apr 07 19:21:08.887282 2026] [:error] [pid 59551:tid 59574] [client 178.239.163.68:43240] [client 178.239.163.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "adTopF7LN7Ubyqs-sVvwfQAAAZU"]
[Tue Apr 07 19:21:10.902349 2026] [:error] [pid 12948:tid 12959] [client 178.239.163.68:43244] [client 178.239.163.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "adTopsbeSPAN8LvMqsaiGQAAAQg"]
[Tue Apr 07 19:21:11.415839 2026] [:error] [pid 12948:tid 12974] [client 178.239.163.68:43258] [client 178.239.163.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "adTop8beSPAN8LvMqsaiHQAAARc"]
[Tue Apr 07 19:21:12.704378 2026] [:error] [pid 37597:tid 37637] [client 178.239.163.68:43264] [client 178.239.163.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "adToqA6uAY0QAy-8EEJKkwAAAEM"]
[Tue Apr 07 19:21:13.217197 2026] [:error] [pid 59551:tid 59569] [client 178.239.163.68:56370] [client 178.239.163.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "adToqV7LN7Ubyqs-sVvwkwAAAZA"]
[Tue Apr 07 19:21:15.075207 2026] [:error] [pid 59551:tid 59575] [client 178.239.163.68:56376] [client 178.239.163.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "adToq17LN7Ubyqs-sVvwrQAAAZY"]
[Tue Apr 07 19:21:16.637387 2026] [:error] [pid 59551:tid 59573] [client 178.239.163.68:22328] [client 178.239.163.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "adTorF7LN7Ubyqs-sVvwvgAAAZQ"]
[Tue Apr 07 19:21:17.151409 2026] [:error] [pid 37596:tid 37619] [client 178.239.163.68:56392] [client 178.239.163.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "adTorapaAOZHEjRWjP2VygAAAA0"]
[Tue Apr 07 19:21:42.611464 2026] [autoindex:error] [pid 59551:tid 59555] [client 178.239.163.68:56408] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 07 20:42:57.453567 2026] [:error] [pid 37597:tid 37636] [client 35.178.182.193:49328] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "adT70Q6uAY0QAy-8EEJ_TQAAAEI"]
[Tue Apr 07 20:42:58.427888 2026] [:error] [pid 37596:tid 37618] [client 35.178.182.193:49346] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "adT70qpaAOZHEjRWjP2eJQAAAAw"]
[Tue Apr 07 20:42:59.406132 2026] [:error] [pid 37597:tid 37654] [client 35.178.182.193:49352] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "adT70w6uAY0QAy-8EEJ_UQAAAFQ"]
[Tue Apr 07 20:43:00.377913 2026] [:error] [pid 59660:tid 59683] [client 35.178.182.193:49370] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "adT71Dp3-oiX2o5bTswU5AAAAdU"]
[Tue Apr 07 20:43:01.349344 2026] [:error] [pid 37596:tid 37620] [client 35.178.182.193:49400] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.development"] [unique_id "adT71apaAOZHEjRWjP2eLAAAAA4"]
[Tue Apr 07 20:43:02.327855 2026] [:error] [pid 37596:tid 37608] [client 35.178.182.193:49414] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.test"] [unique_id "adT71qpaAOZHEjRWjP2eMQAAAAI"]
[Tue Apr 07 20:43:03.296468 2026] [:error] [pid 37719:tid 37727] [client 35.178.182.193:49434] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.remote"] [unique_id "adT71009Xv52u2xXGLAgDQAAAMU"]
[Tue Apr 07 20:43:04.266812 2026] [:error] [pid 37596:tid 37606] [client 35.178.182.193:52474] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "adT72KpaAOZHEjRWjP2eNQAAAAA"]
[Tue Apr 07 20:43:06.786378 2026] [:error] [pid 59551:tid 59571] [client 35.178.182.193:52504] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.save"] [unique_id "adT72l7LN7Ubyqs-sVsMrwAAAZI"]
[Tue Apr 07 20:43:07.764207 2026] [:error] [pid 59551:tid 59568] [client 35.178.182.193:52512] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.old"] [unique_id "adT7217LN7Ubyqs-sVsMuAAAAY8"]
[Tue Apr 07 20:43:08.740451 2026] [:error] [pid 59490:tid 59497] [client 35.178.182.193:52524] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "adT73Ecw8OFbiUZ7Rx1rPwAAAUU"]
[Tue Apr 07 20:43:09.718053 2026] [:error] [pid 37719:tid 37729] [client 35.178.182.193:52546] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.example"] [unique_id "adT73U09Xv52u2xXGLAgGgAAAMc"]
[Tue Apr 07 20:43:10.684932 2026] [:error] [pid 37719:tid 37735] [client 35.178.182.193:52562] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "adT73k09Xv52u2xXGLAgHgAAAM0"]
[Tue Apr 07 20:43:11.650915 2026] [:error] [pid 59551:tid 59575] [client 35.178.182.193:52570] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "adT7317LN7Ubyqs-sVsMwwAAAZY"]
[Tue Apr 07 20:43:12.619689 2026] [:error] [pid 37719:tid 37746] [client 35.178.182.193:52596] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.stage"] [unique_id "adT74E09Xv52u2xXGLAgJQAAANg"]
[Tue Apr 07 20:43:13.587599 2026] [:error] [pid 37719:tid 37734] [client 35.178.182.193:52618] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.ci"] [unique_id "adT74U09Xv52u2xXGLAgKAAAAMw"]
[Tue Apr 07 20:43:14.553643 2026] [:error] [pid 59551:tid 59574] [client 35.178.182.193:49498] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.docker"] [unique_id "adT74l7LN7Ubyqs-sVsM1AAAAZU"]
[Tue Apr 07 20:43:15.532129 2026] [:error] [pid 37597:tid 37652] [client 35.178.182.193:49512] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.live"] [unique_id "adT74w6uAY0QAy-8EEJ_dgAAAFI"]
[Tue Apr 07 20:43:16.509456 2026] [:error] [pid 37597:tid 37649] [client 35.178.182.193:49518] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.preprod"] [unique_id "adT75A6uAY0QAy-8EEJ_fAAAAE8"]
[Tue Apr 07 20:43:17.479510 2026] [:error] [pid 37719:tid 37722] [client 35.178.182.193:49538] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.uat"] [unique_id "adT75U09Xv52u2xXGLAgLwAAAMA"]
[Tue Apr 07 20:43:18.446940 2026] [:error] [pid 59551:tid 59573] [client 35.178.182.193:49550] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "adT75l7LN7Ubyqs-sVsM3AAAAZQ"]
[Tue Apr 07 20:43:19.412926 2026] [:error] [pid 37719:tid 37731] [client 35.178.182.193:49572] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.swp"] [unique_id "adT75009Xv52u2xXGLAgMwAAAMk"]
[Tue Apr 07 20:43:20.386225 2026] [:error] [pid 59551:tid 59572] [client 35.178.182.193:49592] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env~"] [unique_id "adT76F7LN7Ubyqs-sVsM5QAAAZM"]
[Tue Apr 07 20:43:21.359309 2026] [:error] [pid 59551:tid 59566] [client 35.178.182.193:49610] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/app/.env"] [unique_id "adT76V7LN7Ubyqs-sVsM5wAAAY0"]
[Tue Apr 07 20:43:22.339911 2026] [:error] [pid 12948:tid 12966] [client 35.178.182.193:49628] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/apps/.env"] [unique_id "adT76sbeSPAN8LvMqsaw1gAAAQ8"]
[Tue Apr 07 20:43:23.320065 2026] [:error] [pid 59551:tid 59559] [client 35.178.182.193:49654] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/api/.env"] [unique_id "adT7617LN7Ubyqs-sVsM6wAAAYY"]
[Tue Apr 07 20:43:24.302559 2026] [:error] [pid 59551:tid 59563] [client 35.178.182.193:39450] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/web/.env"] [unique_id "adT77F7LN7Ubyqs-sVsM7gAAAYo"]
[Tue Apr 07 20:43:25.273916 2026] [:error] [pid 59490:tid 59502] [client 35.178.182.193:39466] [client 35.178.182.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/site/.env"] [unique_id "adT77Ucw8OFbiUZ7Rx1rQwAAAUo"]
[Tue Apr 07 22:09:44.992625 2026] [:error] [pid 59804:tid 59818] [client 43.140.247.223:43280] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adUQKHYVIXiPh5_eJTnPjQAAAgw"]
[Tue Apr 07 22:37:48.297582 2026] [:error] [pid 12948:tid 12970] [client 74.248.155.160:12530] [client 74.248.155.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "adUWvMbeSPAN8LvMqsbGtwAAARM"]
[Tue Apr 07 22:37:49.376095 2026] [:error] [pid 37596:tid 37628] [client 74.248.155.160:42210] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "adUWvapaAOZHEjRWjP2qvAAAABY"]
[Tue Apr 07 22:37:49.920194 2026] [:error] [pid 37597:tid 37636] [client 74.248.155.160:43482] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "adUWvQ6uAY0QAy-8EELHNwAAAEI"]
[Tue Apr 07 22:37:50.481735 2026] [:error] [pid 59804:tid 59821] [client 74.248.155.160:8729] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "adUWvnYVIXiPh5_eJTnlAQAAAg8"]
[Tue Apr 07 22:37:51.005878 2026] [:error] [pid 59660:tid 59665] [client 74.248.155.160:8920] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "adUWvzp3-oiX2o5bTswm-gAAAcM"]
[Tue Apr 07 22:37:51.543126 2026] [:error] [pid 59804:tid 59808] [client 74.248.155.160:1660] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "adUWv3YVIXiPh5_eJTnlAwAAAgI"]
[Tue Apr 07 22:37:52.091405 2026] [:error] [pid 59804:tid 59815] [client 74.248.155.160:1839] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "adUWwHYVIXiPh5_eJTnlBgAAAgk"]
[Tue Apr 07 22:37:52.647158 2026] [:error] [pid 37597:tid 37655] [client 74.248.155.160:7407] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "adUWwA6uAY0QAy-8EELHOQAAAFU"]
[Tue Apr 07 22:37:53.208645 2026] [:error] [pid 12948:tid 12958] [client 74.248.155.160:19765] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "adUWwcbeSPAN8LvMqsbGwAAAAQc"]
[Tue Apr 07 22:37:53.725389 2026] [:error] [pid 59804:tid 59809] [client 74.248.155.160:28903] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adUWwXYVIXiPh5_eJTnlCwAAAgM"]
[Tue Apr 07 22:37:54.251494 2026] [:error] [pid 59660:tid 59667] [client 74.248.155.160:12495] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adUWwjp3-oiX2o5bTswm-wAAAcU"]
[Tue Apr 07 22:37:54.777385 2026] [:error] [pid 59804:tid 59818] [client 74.248.155.160:20147] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adUWwnYVIXiPh5_eJTnlDAAAAgw"]
[Tue Apr 07 22:37:55.306884 2026] [:error] [pid 12948:tid 12970] [client 74.248.155.160:48453] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adUWw8beSPAN8LvMqsbGwwAAARM"]
[Tue Apr 07 22:37:55.849931 2026] [:error] [pid 59804:tid 59811] [client 74.248.155.160:28868] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adUWw3YVIXiPh5_eJTnlDgAAAgU"]
[Tue Apr 07 22:37:56.387047 2026] [:error] [pid 59804:tid 59826] [client 74.248.155.160:8900] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adUWxHYVIXiPh5_eJTnlEgAAAhQ"]
[Tue Apr 07 22:37:56.927470 2026] [:error] [pid 37719:tid 37734] [client 74.248.155.160:1637] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adUWxE09Xv52u2xXGLBVYgAAAMw"]
[Tue Apr 07 22:37:57.468802 2026] [:error] [pid 37596:tid 37608] [client 74.248.155.160:43516] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adUWxapaAOZHEjRWjP2qwgAAAAI"]
[Tue Apr 07 22:37:57.991147 2026] [:error] [pid 37597:tid 37639] [client 74.248.155.160:1889] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "adUWxQ6uAY0QAy-8EELHPgAAAEU"]
[Tue Apr 07 22:37:58.528815 2026] [:error] [pid 37596:tid 37617] [client 74.248.155.160:24035] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "adUWxqpaAOZHEjRWjP2qxQAAAAs"]
[Tue Apr 07 22:37:59.056150 2026] [:error] [pid 37597:tid 37646] [client 74.248.155.160:14038] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "adUWxw6uAY0QAy-8EELHQQAAAEw"]
[Tue Apr 07 22:37:59.585536 2026] [:error] [pid 59804:tid 59812] [client 74.248.155.160:25531] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "adUWx3YVIXiPh5_eJTnlHgAAAgY"]
[Tue Apr 07 22:38:00.121569 2026] [:error] [pid 59804:tid 59806] [client 74.248.155.160:1894] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aee.php"] [unique_id "adUWyHYVIXiPh5_eJTnlIQAAAgA"]
[Tue Apr 07 22:38:00.661293 2026] [:error] [pid 59804:tid 59817] [client 74.248.155.160:7394] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aee.php"] [unique_id "adUWyHYVIXiPh5_eJTnlJQAAAgs"]
[Tue Apr 07 22:38:01.194159 2026] [:error] [pid 37598:tid 37665] [client 74.248.155.160:1841] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aee.php"] [unique_id "adUWye9g7q_cV2WhPazaAwAAAIQ"]
[Tue Apr 07 22:38:01.704426 2026] [:error] [pid 37719:tid 37745] [client 74.248.155.160:44095] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aee.php"] [unique_id "adUWyU09Xv52u2xXGLBVZwAAANc"]
[Tue Apr 07 22:38:02.297723 2026] [:error] [pid 59804:tid 59829] [client 74.248.155.160:19745] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adUWynYVIXiPh5_eJTnlKwAAAhc"]
[Tue Apr 07 22:38:02.914743 2026] [:error] [pid 37719:tid 37722] [client 74.248.155.160:1646] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adUWyk09Xv52u2xXGLBVbAAAAMA"]
[Tue Apr 07 22:38:03.466305 2026] [:error] [pid 59490:tid 59515] [client 74.248.155.160:12515] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adUWy0cw8OFbiUZ7Rx153AAAAVc"]
[Tue Apr 07 22:38:04.049058 2026] [:error] [pid 37597:tid 37654] [client 74.248.155.160:12487] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adUWzA6uAY0QAy-8EELHSgAAAFQ"]
[Tue Apr 07 22:38:04.607402 2026] [:error] [pid 37597:tid 37656] [client 74.248.155.160:10700] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ruabjw00.php"] [unique_id "adUWzA6uAY0QAy-8EELHTQAAAFY"]
[Tue Apr 07 22:38:05.162879 2026] [:error] [pid 59804:tid 59825] [client 74.248.155.160:43499] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ruabjw00.php"] [unique_id "adUWzXYVIXiPh5_eJTnlLwAAAhM"]
[Tue Apr 07 22:38:05.700049 2026] [:error] [pid 12948:tid 12956] [client 74.248.155.160:23660] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ruabjw00.php"] [unique_id "adUWzcbeSPAN8LvMqsbGyQAAAQU"]
[Tue Apr 07 22:38:06.270316 2026] [:error] [pid 12948:tid 12960] [client 74.248.155.160:44087] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ruabjw00.php"] [unique_id "adUWzsbeSPAN8LvMqsbGygAAAQk"]
[Tue Apr 07 22:38:06.799318 2026] [:error] [pid 37598:tid 37685] [client 74.248.155.160:1867] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adUWzu9g7q_cV2WhPazaCgAAAJg"]
[Tue Apr 07 22:38:07.348449 2026] [:error] [pid 37719:tid 37729] [client 74.248.155.160:8710] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adUWz009Xv52u2xXGLBVggAAAMc"]
[Tue Apr 07 22:38:07.888518 2026] [:error] [pid 37719:tid 37722] [client 74.248.155.160:26629] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adUWz009Xv52u2xXGLBVgwAAAMA"]
[Tue Apr 07 22:38:08.439080 2026] [:error] [pid 37597:tid 37655] [client 74.248.155.160:8305] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adUW0A6uAY0QAy-8EELHTwAAAFU"]
[Tue Apr 07 22:38:08.955389 2026] [:error] [pid 37719:tid 37743] [client 74.248.155.160:43487] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webx.php"] [unique_id "adUW0E09Xv52u2xXGLBVhgAAANU"]
[Tue Apr 07 22:38:09.475529 2026] [:error] [pid 37598:tid 37678] [client 74.248.155.160:58926] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webx.php"] [unique_id "adUW0e9g7q_cV2WhPazaEwAAAJE"]
[Tue Apr 07 22:38:10.014310 2026] [:error] [pid 37597:tid 37645] [client 74.248.155.160:19724] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webx.php"] [unique_id "adUW0g6uAY0QAy-8EELHUwAAAEs"]
[Tue Apr 07 22:38:10.541643 2026] [:error] [pid 59804:tid 59812] [client 74.248.155.160:1080] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webx.php"] [unique_id "adUW0nYVIXiPh5_eJTnlOAAAAgY"]
[Tue Apr 07 22:38:11.115471 2026] [:error] [pid 37597:tid 37646] [client 74.248.155.160:11415] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adUW0w6uAY0QAy-8EELHVwAAAEw"]
[Tue Apr 07 22:38:11.669190 2026] [:error] [pid 37597:tid 37656] [client 74.248.155.160:1874] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adUW0w6uAY0QAy-8EELHWQAAAFY"]
[Tue Apr 07 22:38:12.215799 2026] [:error] [pid 37597:tid 37640] [client 74.248.155.160:58923] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adUW1A6uAY0QAy-8EELHWwAAAEY"]
[Tue Apr 07 22:38:12.732540 2026] [:error] [pid 37598:tid 37674] [client 74.248.155.160:1085] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adUW1O9g7q_cV2WhPazaGAAAAI0"]
[Tue Apr 07 22:38:13.250819 2026] [:error] [pid 59551:tid 59565] [client 74.248.155.160:26633] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-22.php"] [unique_id "adUW1V7LN7Ubyqs-sVs1_AAAAYw"]
[Tue Apr 07 22:38:13.779043 2026] [:error] [pid 59804:tid 59808] [client 74.248.155.160:48478] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-22.php"] [unique_id "adUW1XYVIXiPh5_eJTnlQQAAAgI"]
[Tue Apr 07 22:38:14.291929 2026] [:error] [pid 12948:tid 12963] [client 74.248.155.160:1074] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-22.php"] [unique_id "adUW1sbeSPAN8LvMqsbGzwAAAQw"]
[Tue Apr 07 22:38:14.844329 2026] [:error] [pid 37598:tid 37671] [client 74.248.155.160:15200] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-22.php"] [unique_id "adUW1u9g7q_cV2WhPazaJAAAAIo"]
[Tue Apr 07 22:38:15.359720 2026] [:error] [pid 59551:tid 59568] [client 74.248.155.160:7724] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/villain.php"] [unique_id "adUW117LN7Ubyqs-sVs2AAAAAY8"]
[Tue Apr 07 22:38:15.894942 2026] [:error] [pid 59804:tid 59826] [client 74.248.155.160:24038] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/villain.php"] [unique_id "adUW13YVIXiPh5_eJTnlSgAAAhQ"]
[Tue Apr 07 22:38:16.428849 2026] [:error] [pid 37597:tid 37657] [client 74.248.155.160:27077] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/villain.php"] [unique_id "adUW2A6uAY0QAy-8EELHXQAAAFc"]
[Tue Apr 07 22:38:16.955496 2026] [:error] [pid 37597:tid 37650] [client 74.248.155.160:23656] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/villain.php"] [unique_id "adUW2A6uAY0QAy-8EELHXgAAAFA"]
[Tue Apr 07 22:38:17.487829 2026] [:error] [pid 37597:tid 37646] [client 74.248.155.160:44046] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-db.php"] [unique_id "adUW2Q6uAY0QAy-8EELHYwAAAEw"]
[Tue Apr 07 22:38:18.028032 2026] [:error] [pid 37597:tid 37651] [client 74.248.155.160:22436] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-db.php"] [unique_id "adUW2g6uAY0QAy-8EELHaAAAAFE"]
[Tue Apr 07 22:38:18.545693 2026] [:error] [pid 37597:tid 37655] [client 74.248.155.160:7689] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-db.php"] [unique_id "adUW2g6uAY0QAy-8EELHbAAAAFU"]
[Tue Apr 07 22:38:19.066895 2026] [:error] [pid 59490:tid 59508] [client 74.248.155.160:9316] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-db.php"] [unique_id "adUW20cw8OFbiUZ7Rx154AAAAVA"]
[Tue Apr 07 22:38:19.618117 2026] [:error] [pid 37598:tid 37683] [client 74.248.155.160:7363] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adUW2-9g7q_cV2WhPazaLAAAAJY"]
[Tue Apr 07 22:38:20.158977 2026] [:error] [pid 37719:tid 37723] [client 74.248.155.160:7410] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adUW3E09Xv52u2xXGLBVkAAAAME"]
[Tue Apr 07 22:38:20.678266 2026] [:error] [pid 12948:tid 12971] [client 74.248.155.160:26646] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adUW3MbeSPAN8LvMqsbG2AAAARQ"]
[Tue Apr 07 22:38:21.187492 2026] [:error] [pid 37719:tid 37724] [client 74.248.155.160:48448] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adUW3U09Xv52u2xXGLBVlQAAAMI"]
[Tue Apr 07 22:38:21.696299 2026] [:error] [pid 37598:tid 37677] [client 74.248.155.160:7273] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "adUW3e9g7q_cV2WhPazaLwAAAJA"]
[Tue Apr 07 22:38:22.237768 2026] [:error] [pid 37597:tid 37646] [client 74.248.155.160:7253] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "adUW3g6uAY0QAy-8EELHcAAAAEw"]
[Tue Apr 07 22:38:22.803521 2026] [:error] [pid 37597:tid 37651] [client 74.248.155.160:14060] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "adUW3g6uAY0QAy-8EELHdAAAAFE"]
[Tue Apr 07 22:38:23.323450 2026] [:error] [pid 37598:tid 37676] [client 74.248.155.160:28915] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an7.php"] [unique_id "adUW3-9g7q_cV2WhPazaMgAAAI8"]
[Tue Apr 07 22:38:23.843046 2026] [:error] [pid 37719:tid 37739] [client 74.248.155.160:20127] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adUW3009Xv52u2xXGLBVnQAAANE"]
[Tue Apr 07 22:38:24.368652 2026] [:error] [pid 37597:tid 37657] [client 74.248.155.160:7729] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adUW4A6uAY0QAy-8EELHdgAAAFc"]
[Tue Apr 07 22:38:24.897309 2026] [:error] [pid 37597:tid 37648] [client 74.248.155.160:9319] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adUW4A6uAY0QAy-8EELHegAAAE4"]
[Tue Apr 07 22:38:25.416636 2026] [:error] [pid 59804:tid 59816] [client 74.248.155.160:53149] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adUW4XYVIXiPh5_eJTnlUwAAAgo"]
[Tue Apr 07 22:38:25.966008 2026] [:error] [pid 59551:tid 59563] [client 74.248.155.160:53171] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "adUW4V7LN7Ubyqs-sVs2CwAAAYo"]
[Tue Apr 07 22:38:26.506580 2026] [:error] [pid 37596:tid 37619] [client 74.248.155.160:7247] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "adUW4qpaAOZHEjRWjP2qygAAAA0"]
[Tue Apr 07 22:38:27.050560 2026] [:error] [pid 59660:tid 59662] [client 74.248.155.160:11139] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "adUW4zp3-oiX2o5bTswnAQAAAcA"]
[Tue Apr 07 22:38:27.568294 2026] [:error] [pid 37598:tid 37679] [client 74.248.155.160:7703] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uxijj.php"] [unique_id "adUW4-9g7q_cV2WhPazaOQAAAJI"]
[Tue Apr 07 22:38:28.100135 2026] [:error] [pid 59490:tid 59515] [client 74.248.155.160:57093] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "adUW5Ecw8OFbiUZ7Rx155gAAAVc"]
[Tue Apr 07 22:38:28.644700 2026] [:error] [pid 37719:tid 37733] [client 74.248.155.160:19453] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "adUW5E09Xv52u2xXGLBVpAAAAMs"]
[Tue Apr 07 22:38:29.165633 2026] [:error] [pid 59660:tid 59676] [client 74.248.155.160:23231] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "adUW5Tp3-oiX2o5bTswnAgAAAc4"]
[Tue Apr 07 22:38:29.683871 2026] [:error] [pid 59660:tid 59668] [client 74.248.155.160:14573] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs7.php"] [unique_id "adUW5Tp3-oiX2o5bTswnBAAAAcY"]
[Tue Apr 07 22:38:30.294001 2026] [:error] [pid 59490:tid 59513] [client 74.248.155.160:53152] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool2.php"] [unique_id "adUW5kcw8OFbiUZ7Rx156QAAAVU"]
[Tue Apr 07 22:38:30.844865 2026] [:error] [pid 12948:tid 12957] [client 74.248.155.160:11136] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool2.php"] [unique_id "adUW5sbeSPAN8LvMqsbG5wAAAQY"]
[Tue Apr 07 22:38:31.393273 2026] [:error] [pid 59490:tid 59504] [client 74.248.155.160:7761] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool2.php"] [unique_id "adUW50cw8OFbiUZ7Rx157QAAAUw"]
[Tue Apr 07 22:38:31.919169 2026] [:error] [pid 37597:tid 37653] [client 74.248.155.160:1735] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool2.php"] [unique_id "adUW5w6uAY0QAy-8EELHjAAAAFM"]
[Tue Apr 07 22:38:32.444529 2026] [:error] [pid 37598:tid 37677] [client 74.248.155.160:22055] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zjllx.php"] [unique_id "adUW6O9g7q_cV2WhPazaPgAAAJA"]
[Tue Apr 07 22:38:32.959688 2026] [:error] [pid 59490:tid 59496] [client 74.248.155.160:62087] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zjllx.php"] [unique_id "adUW6Ecw8OFbiUZ7Rx158gAAAUQ"]
[Tue Apr 07 22:38:33.476390 2026] [:error] [pid 37719:tid 37736] [client 74.248.155.160:44117] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zjllx.php"] [unique_id "adUW6U09Xv52u2xXGLBVrQAAAM4"]
[Tue Apr 07 22:38:34.001298 2026] [:error] [pid 37597:tid 37652] [client 74.248.155.160:14548] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zjllx.php"] [unique_id "adUW6g6uAY0QAy-8EELHmQAAAFI"]
[Tue Apr 07 22:38:34.520564 2026] [:error] [pid 59804:tid 59814] [client 74.248.155.160:8713] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "adUW6nYVIXiPh5_eJTnlgQAAAgg"]
[Tue Apr 07 22:38:35.050058 2026] [:error] [pid 59804:tid 59806] [client 74.248.155.160:48500] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "adUW63YVIXiPh5_eJTnlgwAAAgA"]
[Tue Apr 07 22:38:35.575766 2026] [:error] [pid 37597:tid 37639] [client 74.248.155.160:7782] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "adUW6w6uAY0QAy-8EELHrAAAAEU"]
[Tue Apr 07 22:38:36.097669 2026] [:error] [pid 37597:tid 37649] [client 74.248.155.160:1224] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "adUW7A6uAY0QAy-8EELHrwAAAE8"]
[Tue Apr 07 22:38:36.617340 2026] [:error] [pid 37597:tid 37655] [client 74.248.155.160:16685] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "adUW7A6uAY0QAy-8EELHtAAAAFU"]
[Tue Apr 07 22:38:37.131271 2026] [:error] [pid 37719:tid 37724] [client 74.248.155.160:24770] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "adUW7U09Xv52u2xXGLBVsgAAAMI"]
[Tue Apr 07 22:38:37.667101 2026] [:error] [pid 37719:tid 37736] [client 74.248.155.160:23294] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "adUW7U09Xv52u2xXGLBVtgAAAM4"]
[Tue Apr 07 22:38:38.210361 2026] [:error] [pid 37597:tid 37657] [client 74.248.155.160:24781] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "adUW7g6uAY0QAy-8EELHvgAAAFc"]
[Tue Apr 07 22:38:38.719544 2026] [:error] [pid 59804:tid 59810] [client 74.248.155.160:42803] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "adUW7nYVIXiPh5_eJTnliwAAAgQ"]
[Tue Apr 07 22:38:39.253119 2026] [:error] [pid 37598:tid 37680] [client 74.248.155.160:19445] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "adUW7-9g7q_cV2WhPazaRQAAAJM"]
[Tue Apr 07 22:38:39.775109 2026] [:error] [pid 37598:tid 37670] [client 74.248.155.160:12981] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "adUW7-9g7q_cV2WhPazaRgAAAIk"]
[Tue Apr 07 22:38:40.289554 2026] [:error] [pid 37596:tid 37617] [client 74.248.155.160:18561] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "adUW8KpaAOZHEjRWjP2q2QAAAAs"]
[Tue Apr 07 22:38:40.807772 2026] [:error] [pid 59804:tid 59806] [client 74.248.155.160:7785] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dbc.php"] [unique_id "adUW8HYVIXiPh5_eJTnlkQAAAgA"]
[Tue Apr 07 22:38:41.322045 2026] [:error] [pid 59551:tid 59569] [client 74.248.155.160:7802] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dbc.php"] [unique_id "adUW8V7LN7Ubyqs-sVs2GwAAAZA"]
[Tue Apr 07 22:38:41.835896 2026] [:error] [pid 59804:tid 59825] [client 74.248.155.160:22786] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dbc.php"] [unique_id "adUW8XYVIXiPh5_eJTnllAAAAhM"]
[Tue Apr 07 22:38:42.354090 2026] [:error] [pid 37597:tid 37651] [client 74.248.155.160:19443] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dbc.php"] [unique_id "adUW8g6uAY0QAy-8EELH0AAAAFE"]
[Tue Apr 07 22:38:42.867732 2026] [:error] [pid 37597:tid 37634] [client 74.248.155.160:18589] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adUW8g6uAY0QAy-8EELH1AAAAEA"]
[Tue Apr 07 22:38:43.398363 2026] [:error] [pid 37597:tid 37649] [client 74.248.155.160:43409] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adUW8w6uAY0QAy-8EELH2gAAAE8"]
[Tue Apr 07 22:38:43.930295 2026] [:error] [pid 37598:tid 37670] [client 74.248.155.160:21357] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adUW8-9g7q_cV2WhPazaUwAAAIk"]
[Tue Apr 07 22:38:44.457119 2026] [:error] [pid 59804:tid 59825] [client 74.248.155.160:9854] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adUW9HYVIXiPh5_eJTnlngAAAhM"]
[Tue Apr 07 22:38:45.004511 2026] [:error] [pid 59804:tid 59819] [client 74.248.155.160:20210] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ukaa.php"] [unique_id "adUW9XYVIXiPh5_eJTnlogAAAg0"]
[Tue Apr 07 22:38:45.547673 2026] [:error] [pid 59804:tid 59811] [client 74.248.155.160:11774] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ukaa.php"] [unique_id "adUW9XYVIXiPh5_eJTnlqAAAAgU"]
[Tue Apr 07 22:38:46.075667 2026] [:error] [pid 12948:tid 12951] [client 74.248.155.160:18601] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ukaa.php"] [unique_id "adUW9sbeSPAN8LvMqsbG8wAAAQA"]
[Tue Apr 07 22:38:46.590451 2026] [:error] [pid 59660:tid 59674] [client 74.248.155.160:24387] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ukaa.php"] [unique_id "adUW9jp3-oiX2o5bTswnCgAAAcw"]
[Tue Apr 07 22:38:47.113755 2026] [:error] [pid 59660:tid 59663] [client 74.248.155.160:22799] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "adUW9zp3-oiX2o5bTswnDAAAAcE"]
[Tue Apr 07 22:38:47.635038 2026] [:error] [pid 59551:tid 59572] [client 74.248.155.160:22828] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "adUW917LN7Ubyqs-sVs2LQAAAZM"]
[Tue Apr 07 22:38:48.159270 2026] [:error] [pid 59804:tid 59818] [client 74.248.155.160:57156] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "adUW-HYVIXiPh5_eJTnltwAAAgw"]
[Tue Apr 07 22:38:48.689563 2026] [:error] [pid 59551:tid 59565] [client 74.248.155.160:56822] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "adUW-F7LN7Ubyqs-sVs2MgAAAYw"]
[Tue Apr 07 22:38:55.919920 2026] [:error] [pid 37719:tid 37744] [client 74.248.155.160:8773] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adUW_009Xv52u2xXGLBV3QAAANY"]
[Tue Apr 07 22:38:56.445331 2026] [:error] [pid 37598:tid 37667] [client 74.248.155.160:33047] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adUXAO9g7q_cV2WhPazaWQAAAIY"]
[Tue Apr 07 22:38:56.987564 2026] [:error] [pid 59660:tid 59677] [client 74.248.155.160:1578] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adUXADp3-oiX2o5bTswnDwAAAc8"]
[Tue Apr 07 22:38:57.523002 2026] [:error] [pid 59804:tid 59816] [client 74.248.155.160:56786] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adUXAXYVIXiPh5_eJTnl6wAAAgo"]
[Tue Apr 07 22:38:58.048119 2026] [:error] [pid 59551:tid 59557] [client 74.248.155.160:22832] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "adUXAl7LN7Ubyqs-sVs2VQAAAYQ"]
[Tue Apr 07 22:38:58.560655 2026] [:error] [pid 59804:tid 59817] [client 74.248.155.160:57207] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "adUXAnYVIXiPh5_eJTnl7wAAAgs"]
[Tue Apr 07 22:38:59.076765 2026] [:error] [pid 59804:tid 59818] [client 74.248.155.160:1292] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "adUXA3YVIXiPh5_eJTnl8gAAAgw"]
[Tue Apr 07 22:38:59.593808 2026] [:error] [pid 59804:tid 59814] [client 74.248.155.160:24784] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "adUXA3YVIXiPh5_eJTnl-AAAAgg"]
[Tue Apr 07 22:39:00.109461 2026] [:error] [pid 59660:tid 59671] [client 74.248.155.160:37209] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yussef.php"] [unique_id "adUXBDp3-oiX2o5bTswnEQAAAck"]
[Tue Apr 07 22:39:00.630249 2026] [:error] [pid 12948:tid 12965] [client 74.248.155.160:1138] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yussef.php"] [unique_id "adUXBMbeSPAN8LvMqsbHBAAAAQ4"]
[Tue Apr 07 22:39:01.151612 2026] [:error] [pid 12948:tid 12958] [client 74.248.155.160:53152] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yussef.php"] [unique_id "adUXBcbeSPAN8LvMqsbHCgAAAQc"]
[Tue Apr 07 22:39:01.674019 2026] [:error] [pid 37598:tid 37685] [client 74.248.155.160:1572] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yussef.php"] [unique_id "adUXBe9g7q_cV2WhPazaZAAAAJg"]
[Tue Apr 07 22:39:02.188254 2026] [:error] [pid 37597:tid 37648] [client 74.248.155.160:22827] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "adUXBg6uAY0QAy-8EELH6gAAAE4"]
[Tue Apr 07 22:39:02.697500 2026] [:error] [pid 37596:tid 37610] [client 74.248.155.160:57183] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "adUXBqpaAOZHEjRWjP2q3gAAAAQ"]
[Tue Apr 07 22:39:03.222083 2026] [:error] [pid 59804:tid 59810] [client 74.248.155.160:11719] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "adUXB3YVIXiPh5_eJTnmCAAAAgQ"]
[Tue Apr 07 22:39:03.734897 2026] [:error] [pid 59804:tid 59824] [client 74.248.155.160:8227] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "adUXB3YVIXiPh5_eJTnmCwAAAhI"]
[Tue Apr 07 22:39:04.269917 2026] [:error] [pid 37719:tid 37724] [client 74.248.155.160:17874] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adUXCE09Xv52u2xXGLBV4QAAAMI"]
[Tue Apr 07 22:39:04.812771 2026] [:error] [pid 37719:tid 37736] [client 74.248.155.160:56785] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adUXCE09Xv52u2xXGLBV6QAAAM4"]
[Tue Apr 07 22:39:05.324664 2026] [:error] [pid 37719:tid 37742] [client 74.248.155.160:57153] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adUXCU09Xv52u2xXGLBV-QAAANQ"]
[Tue Apr 07 22:39:05.834526 2026] [:error] [pid 37597:tid 37656] [client 74.248.155.160:21719] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adUXCQ6uAY0QAy-8EELH7wAAAFY"]
[Tue Apr 07 22:39:06.350438 2026] [:error] [pid 37598:tid 37671] [client 74.248.155.160:9801] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "adUXCu9g7q_cV2WhPazacgAAAIo"]
[Tue Apr 07 22:39:06.866162 2026] [:error] [pid 37598:tid 37663] [client 74.248.155.160:22788] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "adUXCu9g7q_cV2WhPazacwAAAII"]
[Tue Apr 07 22:39:07.392206 2026] [:error] [pid 37597:tid 37641] [client 74.248.155.160:21759] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "adUXCw6uAY0QAy-8EELH9AAAAEc"]
[Tue Apr 07 22:39:07.931278 2026] [:error] [pid 37719:tid 37726] [client 74.248.155.160:42852] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/btx25.php"] [unique_id "adUXC009Xv52u2xXGLBWCgAAAMQ"]
[Tue Apr 07 22:39:08.443804 2026] [:error] [pid 59660:tid 59686] [client 74.248.155.160:17500] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "adUXDDp3-oiX2o5bTswnFgAAAdg"]
[Tue Apr 07 22:39:08.956856 2026] [:error] [pid 37719:tid 37738] [client 74.248.155.160:22804] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "adUXDE09Xv52u2xXGLBWDgAAANA"]
[Tue Apr 07 22:39:09.475661 2026] [:error] [pid 59490:tid 59498] [client 74.248.155.160:24399] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "adUXDUcw8OFbiUZ7Rx16FQAAAUY"]
[Tue Apr 07 22:39:09.995035 2026] [:error] [pid 59804:tid 59814] [client 74.248.155.160:1150] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123x.php"] [unique_id "adUXDXYVIXiPh5_eJTnmOAAAAgg"]
[Tue Apr 07 22:39:10.509691 2026] [:error] [pid 59804:tid 59821] [client 74.248.155.160:21328] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "adUXDnYVIXiPh5_eJTnmPQAAAg8"]
[Tue Apr 07 22:39:11.036171 2026] [:error] [pid 59804:tid 59829] [client 74.248.155.160:40295] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "adUXD3YVIXiPh5_eJTnmQgAAAhc"]
[Tue Apr 07 22:39:11.559967 2026] [:error] [pid 37597:tid 37643] [client 74.248.155.160:42149] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "adUXDw6uAY0QAy-8EELH_QAAAEk"]
[Tue Apr 07 22:39:12.083668 2026] [:error] [pid 59551:tid 59558] [client 74.248.155.160:24427] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "adUXEF7LN7Ubyqs-sVs2YwAAAYU"]
[Tue Apr 07 22:39:12.613663 2026] [:error] [pid 59551:tid 59562] [client 74.248.155.160:21346] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adUXEF7LN7Ubyqs-sVs2ZAAAAYk"]
[Tue Apr 07 22:39:13.138690 2026] [:error] [pid 12948:tid 12959] [client 74.248.155.160:42173] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adUXEcbeSPAN8LvMqsbHHwAAAQg"]
[Tue Apr 07 22:39:13.673959 2026] [:error] [pid 59804:tid 59815] [client 74.248.155.160:21329] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adUXEXYVIXiPh5_eJTnmTQAAAgk"]
[Tue Apr 07 22:39:14.201885 2026] [:error] [pid 59804:tid 59821] [client 74.248.155.160:22837] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adUXEnYVIXiPh5_eJTnmTwAAAg8"]
[Tue Apr 07 22:39:14.719310 2026] [:error] [pid 37597:tid 37658] [client 74.248.155.160:40310] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adUXEg6uAY0QAy-8EELIBAAAAFg"]
[Tue Apr 07 22:39:15.239501 2026] [:error] [pid 12948:tid 12966] [client 74.248.155.160:43445] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adUXE8beSPAN8LvMqsbHIgAAAQ8"]
[Tue Apr 07 22:39:15.759349 2026] [:error] [pid 37597:tid 37646] [client 74.248.155.160:17901] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adUXEw6uAY0QAy-8EELICgAAAEw"]
[Tue Apr 07 22:39:16.270123 2026] [:error] [pid 37597:tid 37637] [client 74.248.155.160:20981] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adUXFA6uAY0QAy-8EELIDQAAAEM"]
[Tue Apr 07 22:39:16.788251 2026] [:error] [pid 37596:tid 37608] [client 74.248.155.160:18569] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/less.php"] [unique_id "adUXFKpaAOZHEjRWjP2q4wAAAAI"]
[Tue Apr 07 22:39:17.345113 2026] [:error] [pid 37597:tid 37635] [client 74.248.155.160:42136] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/less.php"] [unique_id "adUXFQ6uAY0QAy-8EELIEQAAAEE"]
[Tue Apr 07 22:39:17.863341 2026] [:error] [pid 59660:tid 59686] [client 74.248.155.160:40263] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/less.php"] [unique_id "adUXFTp3-oiX2o5bTswnIwAAAdg"]
[Tue Apr 07 22:39:18.390797 2026] [:error] [pid 37598:tid 37664] [client 74.248.155.160:11766] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/less.php"] [unique_id "adUXFu9g7q_cV2WhPazafwAAAIM"]
[Tue Apr 07 22:39:18.924428 2026] [:error] [pid 12948:tid 12965] [client 74.248.155.160:9809] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adUXFsbeSPAN8LvMqsbHJQAAAQ4"]
[Tue Apr 07 22:39:19.447300 2026] [:error] [pid 59551:tid 59555] [client 74.248.155.160:20178] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adUXF17LN7Ubyqs-sVs2aQAAAYI"]
[Tue Apr 07 22:39:19.962151 2026] [:error] [pid 37597:tid 37657] [client 74.248.155.160:56710] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adUXFw6uAY0QAy-8EELIFQAAAFc"]
[Tue Apr 07 22:39:20.475661 2026] [:error] [pid 59551:tid 59574] [client 74.248.155.160:25883] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adUXGF7LN7Ubyqs-sVs2bQAAAZU"]
[Tue Apr 07 22:39:21.014743 2026] [:error] [pid 59551:tid 59559] [client 74.248.155.160:1282] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xdd.php"] [unique_id "adUXGV7LN7Ubyqs-sVs2cAAAAYY"]
[Tue Apr 07 22:39:21.527960 2026] [:error] [pid 37597:tid 37649] [client 74.248.155.160:9807] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xdd.php"] [unique_id "adUXGQ6uAY0QAy-8EELIGAAAAE8"]
[Tue Apr 07 22:39:22.041205 2026] [:error] [pid 37596:tid 37618] [client 74.248.155.160:20209] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xdd.php"] [unique_id "adUXGqpaAOZHEjRWjP2q6AAAAAw"]
[Tue Apr 07 22:39:22.551286 2026] [:error] [pid 12948:tid 12958] [client 74.248.155.160:22824] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xdd.php"] [unique_id "adUXGsbeSPAN8LvMqsbHKgAAAQc"]
[Tue Apr 07 22:39:23.082151 2026] [:error] [pid 37596:tid 37621] [client 74.248.155.160:17912] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adUXG6paAOZHEjRWjP2q6wAAAA8"]
[Tue Apr 07 22:39:23.618300 2026] [:error] [pid 59551:tid 59554] [client 74.248.155.160:11756] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adUXG17LN7Ubyqs-sVs2dwAAAYE"]
[Tue Apr 07 22:39:24.135084 2026] [:error] [pid 37596:tid 37622] [client 74.248.155.160:1291] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adUXHKpaAOZHEjRWjP2q7AAAABA"]
[Tue Apr 07 22:39:24.660021 2026] [:error] [pid 37597:tid 37638] [client 74.248.155.160:11727] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adUXHA6uAY0QAy-8EELIIwAAAEQ"]
[Tue Apr 07 22:39:25.185305 2026] [:error] [pid 37598:tid 37671] [client 74.248.155.160:8523] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "adUXHe9g7q_cV2WhPazahQAAAIo"]
[Tue Apr 07 22:39:25.723183 2026] [:error] [pid 37598:tid 37670] [client 74.248.155.160:44142] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "adUXHe9g7q_cV2WhPazahgAAAIk"]
[Tue Apr 07 22:39:26.252640 2026] [:error] [pid 12948:tid 12965] [client 74.248.155.160:44119] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "adUXHsbeSPAN8LvMqsbHMAAAAQ4"]
[Tue Apr 07 22:39:26.772669 2026] [:error] [pid 59660:tid 59682] [client 74.248.155.160:40257] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "adUXHjp3-oiX2o5bTswnKgAAAdQ"]
[Tue Apr 07 22:39:27.310975 2026] [:error] [pid 59551:tid 59573] [client 74.248.155.160:38752] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update1.php"] [unique_id "adUXH17LN7Ubyqs-sVs2gQAAAZQ"]
[Tue Apr 07 22:39:27.850512 2026] [:error] [pid 59804:tid 59830] [client 74.248.155.160:38743] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update1.php"] [unique_id "adUXH3YVIXiPh5_eJTnmYgAAAhg"]
[Tue Apr 07 22:39:28.367720 2026] [:error] [pid 59804:tid 59825] [client 74.248.155.160:17457] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update1.php"] [unique_id "adUXIHYVIXiPh5_eJTnmZQAAAhM"]
[Tue Apr 07 22:39:28.884399 2026] [:error] [pid 59804:tid 59827] [client 74.248.155.160:22833] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update1.php"] [unique_id "adUXIHYVIXiPh5_eJTnmaAAAAhU"]
[Tue Apr 07 22:39:29.428031 2026] [:error] [pid 59804:tid 59826] [client 74.248.155.160:26348] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adUXIXYVIXiPh5_eJTnmbQAAAhQ"]
[Tue Apr 07 22:39:29.951825 2026] [:error] [pid 59490:tid 59495] [client 74.248.155.160:14278] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adUXIUcw8OFbiUZ7Rx16JQAAAUM"]
[Tue Apr 07 22:39:30.463152 2026] [:error] [pid 37597:tid 37657] [client 74.248.155.160:14281] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adUXIg6uAY0QAy-8EELIKQAAAFc"]
[Tue Apr 07 22:39:30.989006 2026] [:error] [pid 59804:tid 59828] [client 74.248.155.160:17114] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adUXInYVIXiPh5_eJTnmdQAAAhY"]
[Tue Apr 07 22:39:31.525479 2026] [:error] [pid 37597:tid 37653] [client 74.248.155.160:40308] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adUXIw6uAY0QAy-8EELILAAAAFM"]
[Tue Apr 07 22:39:32.057400 2026] [:error] [pid 59804:tid 59824] [client 74.248.155.160:17110] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adUXJHYVIXiPh5_eJTnmgQAAAhI"]
[Tue Apr 07 22:39:32.594919 2026] [:error] [pid 59804:tid 59828] [client 74.248.155.160:43450] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adUXJHYVIXiPh5_eJTnmhQAAAhY"]
[Tue Apr 07 22:39:33.113930 2026] [:error] [pid 37597:tid 37639] [client 74.248.155.160:38767] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adUXJQ6uAY0QAy-8EELILQAAAEU"]
[Tue Apr 07 22:39:33.640992 2026] [:error] [pid 37597:tid 37647] [client 74.248.155.160:22522] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new2.php"] [unique_id "adUXJQ6uAY0QAy-8EELIMAAAAE0"]
[Tue Apr 07 22:39:34.161439 2026] [:error] [pid 37597:tid 37651] [client 74.248.155.160:26350] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new2.php"] [unique_id "adUXJg6uAY0QAy-8EELIMgAAAFE"]
[Tue Apr 07 22:39:34.685728 2026] [:error] [pid 12948:tid 12954] [client 74.248.155.160:43421] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new2.php"] [unique_id "adUXJsbeSPAN8LvMqsbHQQAAAQM"]
[Tue Apr 07 22:39:35.210113 2026] [:error] [pid 37597:tid 37653] [client 74.248.155.160:24437] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new2.php"] [unique_id "adUXJw6uAY0QAy-8EELIOAAAAFM"]
[Tue Apr 07 22:39:35.751616 2026] [:error] [pid 37597:tid 37655] [client 74.248.155.160:38778] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adUXJw6uAY0QAy-8EELIPgAAAFU"]
[Tue Apr 07 22:39:36.277895 2026] [:error] [pid 59804:tid 59821] [client 74.248.155.160:24441] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adUXKHYVIXiPh5_eJTnmjAAAAg8"]
[Tue Apr 07 22:39:36.796383 2026] [:error] [pid 12948:tid 12975] [client 74.248.155.160:26314] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adUXKMbeSPAN8LvMqsbHQgAAARg"]
[Tue Apr 07 22:39:37.314858 2026] [:error] [pid 59551:tid 59574] [client 74.248.155.160:21335] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adUXKV7LN7Ubyqs-sVs2iwAAAZU"]
[Tue Apr 07 22:39:37.829009 2026] [:error] [pid 37596:tid 37607] [client 74.248.155.160:20156] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adUXKapaAOZHEjRWjP2q9AAAAAE"]
[Tue Apr 07 22:39:38.378175 2026] [:error] [pid 37597:tid 37644] [client 74.248.155.160:42112] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adUXKg6uAY0QAy-8EELIRgAAAEo"]
[Tue Apr 07 22:39:38.899387 2026] [:error] [pid 37597:tid 37655] [client 74.248.155.160:51795] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adUXKg6uAY0QAy-8EELISQAAAFU"]
[Tue Apr 07 22:39:39.431069 2026] [:error] [pid 59804:tid 59828] [client 74.248.155.160:18600] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adUXK3YVIXiPh5_eJTnmkQAAAhY"]
[Tue Apr 07 22:39:39.954138 2026] [:error] [pid 59804:tid 59826] [client 74.248.155.160:17095] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adUXK3YVIXiPh5_eJTnmlwAAAhQ"]
[Tue Apr 07 22:39:40.474374 2026] [:error] [pid 37719:tid 37741] [client 74.248.155.160:57165] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adUXLE09Xv52u2xXGLBWSwAAANM"]
[Tue Apr 07 22:39:41.011530 2026] [:error] [pid 37719:tid 37726] [client 74.248.155.160:7787] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adUXLU09Xv52u2xXGLBWTQAAAMQ"]
[Tue Apr 07 22:39:41.531950 2026] [:error] [pid 37597:tid 37636] [client 74.248.155.160:17416] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adUXLQ6uAY0QAy-8EELITgAAAEI"]
[Tue Apr 07 22:39:42.057055 2026] [:error] [pid 37597:tid 37651] [client 74.248.155.160:47119] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ccv.php"] [unique_id "adUXLg6uAY0QAy-8EELIVQAAAFE"]
[Tue Apr 07 22:39:42.586311 2026] [:error] [pid 59804:tid 59817] [client 74.248.155.160:47130] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ccv.php"] [unique_id "adUXLnYVIXiPh5_eJTnmoAAAAgs"]
[Tue Apr 07 22:39:43.108099 2026] [:error] [pid 37596:tid 37622] [client 74.248.155.160:26356] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ccv.php"] [unique_id "adUXL6paAOZHEjRWjP2q9wAAABA"]
[Tue Apr 07 22:39:43.618722 2026] [:error] [pid 37597:tid 37642] [client 74.248.155.160:25908] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ccv.php"] [unique_id "adUXLw6uAY0QAy-8EELIXgAAAEg"]
[Tue Apr 07 22:39:44.142092 2026] [:error] [pid 37598:tid 37685] [client 74.248.155.160:20107] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wo.php"] [unique_id "adUXMO9g7q_cV2WhPazakAAAAJg"]
[Tue Apr 07 22:39:44.656744 2026] [:error] [pid 37598:tid 37663] [client 74.248.155.160:42159] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wo.php"] [unique_id "adUXMO9g7q_cV2WhPazakwAAAII"]
[Tue Apr 07 22:39:45.181763 2026] [:error] [pid 59551:tid 59558] [client 74.248.155.160:17439] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wo.php"] [unique_id "adUXMV7LN7Ubyqs-sVs2kQAAAYU"]
[Tue Apr 07 22:39:45.692030 2026] [:error] [pid 37596:tid 37608] [client 74.248.155.160:60230] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wo.php"] [unique_id "adUXMapaAOZHEjRWjP2q-wAAAAI"]
[Tue Apr 07 22:39:46.215676 2026] [:error] [pid 12948:tid 12975] [client 74.248.155.160:26347] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adUXMsbeSPAN8LvMqsbHTgAAARg"]
[Tue Apr 07 22:39:46.767873 2026] [:error] [pid 12948:tid 12956] [client 74.248.155.160:25547] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adUXMsbeSPAN8LvMqsbHUQAAAQU"]
[Tue Apr 07 22:39:47.311071 2026] [:error] [pid 12948:tid 12967] [client 74.248.155.160:59557] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adUXM8beSPAN8LvMqsbHVQAAARA"]
[Tue Apr 07 22:39:47.823500 2026] [:error] [pid 37597:tid 37649] [client 74.248.155.160:17151] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adUXMw6uAY0QAy-8EELIawAAAE8"]
[Tue Apr 07 22:39:48.354070 2026] [:error] [pid 59804:tid 59823] [client 74.248.155.160:51833] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/floya.php"] [unique_id "adUXNHYVIXiPh5_eJTnmtQAAAhE"]
[Tue Apr 07 22:39:48.878026 2026] [:error] [pid 59804:tid 59808] [client 74.248.155.160:7750] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/floya.php"] [unique_id "adUXNHYVIXiPh5_eJTnmuAAAAgI"]
[Tue Apr 07 22:39:49.408044 2026] [:error] [pid 59804:tid 59828] [client 74.248.155.160:17124] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/floya.php"] [unique_id "adUXNXYVIXiPh5_eJTnmvAAAAhY"]
[Tue Apr 07 22:39:49.951516 2026] [:error] [pid 59804:tid 59817] [client 74.248.155.160:42142] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/floya.php"] [unique_id "adUXNXYVIXiPh5_eJTnmvgAAAgs"]
[Tue Apr 07 22:39:50.468139 2026] [:error] [pid 12948:tid 12952] [client 74.248.155.160:26343] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf.php"] [unique_id "adUXNsbeSPAN8LvMqsbHXAAAAQE"]
[Tue Apr 07 22:39:51.020661 2026] [:error] [pid 37597:tid 37656] [client 74.248.155.160:19444] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf.php"] [unique_id "adUXNw6uAY0QAy-8EELIcwAAAFY"]
[Tue Apr 07 22:39:51.541598 2026] [:error] [pid 12948:tid 12957] [client 74.248.155.160:7767] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf.php"] [unique_id "adUXN8beSPAN8LvMqsbHXgAAAQY"]
[Tue Apr 07 22:39:52.062646 2026] [:error] [pid 59490:tid 59492] [client 74.248.155.160:17109] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf.php"] [unique_id "adUXOEcw8OFbiUZ7Rx16PQAAAUA"]
[Tue Apr 07 22:39:52.590310 2026] [:error] [pid 59804:tid 59810] [client 74.248.155.160:25911] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/only.php"] [unique_id "adUXOHYVIXiPh5_eJTnmyQAAAgQ"]
[Tue Apr 07 22:39:53.124192 2026] [:error] [pid 59804:tid 59826] [client 74.248.155.160:60862] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/only.php"] [unique_id "adUXOXYVIXiPh5_eJTnmywAAAhQ"]
[Tue Apr 07 22:39:53.638280 2026] [:error] [pid 59804:tid 59813] [client 74.248.155.160:51809] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/only.php"] [unique_id "adUXOXYVIXiPh5_eJTnmzAAAAgc"]
[Tue Apr 07 22:39:54.156765 2026] [:error] [pid 59804:tid 59814] [client 74.248.155.160:42137] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/only.php"] [unique_id "adUXOnYVIXiPh5_eJTnm0AAAAgg"]
[Tue Apr 07 22:39:54.686545 2026] [:error] [pid 59660:tid 59677] [client 74.248.155.160:37121] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vdb.php"] [unique_id "adUXOjp3-oiX2o5bTswnMwAAAc8"]
[Tue Apr 07 22:40:02.182073 2026] [:error] [pid 59804:tid 59827] [client 74.248.155.160:24050] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpyur.php"] [unique_id "adUXQnYVIXiPh5_eJTnm7wAAAhU"]
[Tue Apr 07 22:40:02.696415 2026] [:error] [pid 59490:tid 59507] [client 74.248.155.160:8734] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpyur.php"] [unique_id "adUXQkcw8OFbiUZ7Rx16TgAAAU8"]
[Tue Apr 07 22:40:03.213244 2026] [:error] [pid 37598:tid 37666] [client 74.248.155.160:10627] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpyur.php"] [unique_id "adUXQ-9g7q_cV2WhPazaowAAAIU"]
[Tue Apr 07 22:40:03.743198 2026] [:error] [pid 37598:tid 37663] [client 74.248.155.160:11694] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpyur.php"] [unique_id "adUXQ-9g7q_cV2WhPazaqAAAAII"]
[Tue Apr 07 22:40:04.260198 2026] [:error] [pid 59660:tid 59670] [client 74.248.155.160:8458] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum.php"] [unique_id "adUXRDp3-oiX2o5bTswnPgAAAcg"]
[Tue Apr 07 22:40:04.784548 2026] [:error] [pid 59490:tid 59512] [client 74.248.155.160:9230] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum.php"] [unique_id "adUXREcw8OFbiUZ7Rx16UAAAAVQ"]
[Tue Apr 07 22:40:05.310200 2026] [:error] [pid 59804:tid 59820] [client 74.248.155.160:19816] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum.php"] [unique_id "adUXRXYVIXiPh5_eJTnnBwAAAg4"]
[Tue Apr 07 22:40:05.847685 2026] [:error] [pid 59804:tid 59818] [client 74.248.155.160:10657] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum.php"] [unique_id "adUXRXYVIXiPh5_eJTnnCgAAAgw"]
[Tue Apr 07 22:40:06.373078 2026] [:error] [pid 59804:tid 59828] [client 74.248.155.160:14018] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adUXRnYVIXiPh5_eJTnnEAAAAhY"]
[Tue Apr 07 22:40:06.895412 2026] [:error] [pid 59804:tid 59820] [client 74.248.155.160:27528] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adUXRnYVIXiPh5_eJTnnFwAAAg4"]
[Tue Apr 07 22:40:07.414249 2026] [:error] [pid 59804:tid 59828] [client 74.248.155.160:20155] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adUXR3YVIXiPh5_eJTnnHwAAAhY"]
[Tue Apr 07 22:40:07.937348 2026] [:error] [pid 37597:tid 37646] [client 74.248.155.160:57639] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adUXRw6uAY0QAy-8EELIewAAAEw"]
[Tue Apr 07 22:40:08.457525 2026] [:error] [pid 59804:tid 59825] [client 74.248.155.160:64140] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "adUXSHYVIXiPh5_eJTnnKwAAAhM"]
[Tue Apr 07 22:40:08.981790 2026] [:error] [pid 59804:tid 59812] [client 74.248.155.160:27040] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "adUXSHYVIXiPh5_eJTnnMwAAAgY"]
[Tue Apr 07 22:40:09.500588 2026] [:error] [pid 59804:tid 59807] [client 74.248.155.160:1238] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "adUXSXYVIXiPh5_eJTnnOgAAAgE"]
[Tue Apr 07 22:40:10.026865 2026] [:error] [pid 59804:tid 59806] [client 74.248.155.160:1840] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp8.php"] [unique_id "adUXSnYVIXiPh5_eJTnnQQAAAgA"]
[Tue Apr 07 22:40:10.561311 2026] [:error] [pid 59804:tid 59812] [client 74.248.155.160:57675] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "adUXSnYVIXiPh5_eJTnnRwAAAgY"]
[Tue Apr 07 22:40:11.083323 2026] [:error] [pid 37597:tid 37635] [client 74.248.155.160:7818] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "adUXSw6uAY0QAy-8EELIggAAAEE"]
[Tue Apr 07 22:40:11.615197 2026] [:error] [pid 59804:tid 59807] [client 74.248.155.160:24019] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "adUXS3YVIXiPh5_eJTnnUAAAAgE"]
[Tue Apr 07 22:40:12.151944 2026] [:error] [pid 59804:tid 59822] [client 74.248.155.160:11262] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "adUXTHYVIXiPh5_eJTnnVAAAAhA"]
[Tue Apr 07 22:40:12.690787 2026] [:error] [pid 12948:tid 12971] [client 74.248.155.160:57669] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gilo.php"] [unique_id "adUXTMbeSPAN8LvMqsbHbQAAARQ"]
[Tue Apr 07 22:40:13.218087 2026] [:error] [pid 12948:tid 12970] [client 74.248.155.160:1262] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gilo.php"] [unique_id "adUXTcbeSPAN8LvMqsbHcAAAARM"]
[Tue Apr 07 22:40:13.754805 2026] [:error] [pid 59804:tid 59828] [client 74.248.155.160:7860] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gilo.php"] [unique_id "adUXTXYVIXiPh5_eJTnnXwAAAhY"]
[Tue Apr 07 22:40:14.286569 2026] [:error] [pid 59551:tid 59560] [client 74.248.155.160:13525] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gilo.php"] [unique_id "adUXTl7LN7Ubyqs-sVs2xgAAAYc"]
[Tue Apr 07 22:40:14.811062 2026] [:error] [pid 37597:tid 37652] [client 74.248.155.160:23652] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adUXTg6uAY0QAy-8EELIjAAAAFI"]
[Tue Apr 07 22:40:15.341290 2026] [:error] [pid 59804:tid 59830] [client 74.248.155.160:26674] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adUXT3YVIXiPh5_eJTnndgAAAhg"]
[Tue Apr 07 22:40:15.861317 2026] [:error] [pid 59804:tid 59825] [client 74.248.155.160:27556] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adUXT3YVIXiPh5_eJTnnfwAAAhM"]
[Tue Apr 07 22:40:16.374365 2026] [:error] [pid 59804:tid 59813] [client 74.248.155.160:7836] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adUXUHYVIXiPh5_eJTnnhAAAAgc"]
[Tue Apr 07 22:40:16.914772 2026] [:error] [pid 59804:tid 59818] [client 74.248.155.160:8641] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7r.php"] [unique_id "adUXUHYVIXiPh5_eJTnnjAAAAgw"]
[Tue Apr 07 22:40:17.439935 2026] [:error] [pid 59804:tid 59818] [client 74.248.155.160:11668] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7r.php"] [unique_id "adUXUXYVIXiPh5_eJTnnkgAAAgw"]
[Tue Apr 07 22:40:17.982684 2026] [:error] [pid 59804:tid 59826] [client 74.248.155.160:20115] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7r.php"] [unique_id "adUXUXYVIXiPh5_eJTnnmwAAAhQ"]
[Tue Apr 07 22:40:18.505748 2026] [:error] [pid 37598:tid 37666] [client 74.248.155.160:60886] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7r.php"] [unique_id "adUXUu9g7q_cV2WhPazatAAAAIU"]
[Tue Apr 07 22:40:19.021298 2026] [:error] [pid 37719:tid 37726] [client 74.248.155.160:23665] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adUXU009Xv52u2xXGLBWhwAAAMQ"]
[Tue Apr 07 22:40:19.545303 2026] [:error] [pid 37719:tid 37723] [client 74.248.155.160:57725] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adUXU009Xv52u2xXGLBWiwAAAME"]
[Tue Apr 07 22:40:20.074525 2026] [:error] [pid 59660:tid 59685] [client 74.248.155.160:11688] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adUXVDp3-oiX2o5bTswnQQAAAdc"]
[Tue Apr 07 22:40:20.594550 2026] [:error] [pid 37598:tid 37680] [client 74.248.155.160:14030] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adUXVO9g7q_cV2WhPazauQAAAJM"]
[Tue Apr 07 22:40:21.127823 2026] [:error] [pid 37719:tid 37743] [client 74.248.155.160:13751] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "adUXVU09Xv52u2xXGLBWjgAAANU"]
[Tue Apr 07 22:40:21.658971 2026] [:error] [pid 59551:tid 59560] [client 74.248.155.160:14223] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "adUXVV7LN7Ubyqs-sVs21QAAAYc"]
[Tue Apr 07 22:40:22.188749 2026] [:error] [pid 59551:tid 59553] [client 74.248.155.160:8755] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "adUXVl7LN7Ubyqs-sVs21wAAAYA"]
[Tue Apr 07 22:40:22.703589 2026] [:error] [pid 59804:tid 59822] [client 74.248.155.160:8088] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp3.php"] [unique_id "adUXVnYVIXiPh5_eJTnnvQAAAhA"]
[Tue Apr 07 22:40:23.221618 2026] [:error] [pid 59551:tid 59559] [client 74.248.155.160:14253] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adUXV17LN7Ubyqs-sVs22gAAAYY"]
[Tue Apr 07 22:40:23.740781 2026] [:error] [pid 59551:tid 59574] [client 74.248.155.160:13213] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adUXV17LN7Ubyqs-sVs23gAAAZU"]
[Tue Apr 07 22:40:24.259697 2026] [:error] [pid 37597:tid 37658] [client 74.248.155.160:60918] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adUXWA6uAY0QAy-8EELInAAAAFg"]
[Tue Apr 07 22:40:24.771641 2026] [:error] [pid 37597:tid 37639] [client 74.248.155.160:13226] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adUXWA6uAY0QAy-8EELInQAAAEU"]
[Tue Apr 07 22:40:25.293964 2026] [:error] [pid 59660:tid 59665] [client 74.248.155.160:10843] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ympoo.php"] [unique_id "adUXWTp3-oiX2o5bTswnQgAAAcM"]
[Tue Apr 07 22:40:25.835862 2026] [:error] [pid 37598:tid 37677] [client 74.248.155.160:11705] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ympoo.php"] [unique_id "adUXWe9g7q_cV2WhPazavwAAAJA"]
[Tue Apr 07 22:40:26.364917 2026] [:error] [pid 59804:tid 59807] [client 74.248.155.160:20121] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ympoo.php"] [unique_id "adUXWnYVIXiPh5_eJTnn0wAAAgE"]
[Tue Apr 07 22:40:26.875350 2026] [:error] [pid 59804:tid 59830] [client 74.248.155.160:31789] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ympoo.php"] [unique_id "adUXWnYVIXiPh5_eJTnn2QAAAhg"]
[Tue Apr 07 22:40:27.398305 2026] [:error] [pid 59804:tid 59824] [client 74.248.155.160:48492] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/she.php"] [unique_id "adUXW3YVIXiPh5_eJTnn3AAAAhI"]
[Tue Apr 07 22:40:27.919690 2026] [:error] [pid 59804:tid 59823] [client 74.248.155.160:20209] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/she.php"] [unique_id "adUXW3YVIXiPh5_eJTnn4wAAAhE"]
[Tue Apr 07 22:40:28.431579 2026] [:error] [pid 59804:tid 59828] [client 74.248.155.160:8661] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/she.php"] [unique_id "adUXXHYVIXiPh5_eJTnn5wAAAhY"]
[Tue Apr 07 22:40:28.949689 2026] [:error] [pid 59804:tid 59818] [client 74.248.155.160:8117] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/she.php"] [unique_id "adUXXHYVIXiPh5_eJTnn7AAAAgw"]
[Tue Apr 07 22:40:29.486983 2026] [:error] [pid 37598:tid 37666] [client 74.248.155.160:10654] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haojj.php"] [unique_id "adUXXe9g7q_cV2WhPazaxgAAAIU"]
[Tue Apr 07 22:40:30.002564 2026] [:error] [pid 37598:tid 37661] [client 74.248.155.160:31801] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haojj.php"] [unique_id "adUXXu9g7q_cV2WhPazayAAAAIA"]
[Tue Apr 07 22:40:30.523003 2026] [:error] [pid 59804:tid 59813] [client 74.248.155.160:10871] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haojj.php"] [unique_id "adUXXnYVIXiPh5_eJTnn8gAAAgc"]
[Tue Apr 07 22:40:31.032756 2026] [:error] [pid 59804:tid 59828] [client 74.248.155.160:23623] [client 74.248.155.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/haojj.php"] [unique_id "adUXX3YVIXiPh5_eJTnn9AAAAhY"]
[Tue Apr 07 22:48:40.641186 2026] [:error] [pid 37719:tid 37730] [client 43.157.95.239:46606] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adUZSE09Xv52u2xXGLBY1AAAAMg"]
[Wed Apr 08 00:17:04.967130 2026] [:error] [pid 59804:tid 59809] [client 206.212.255.116:52386] [client 206.212.255.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.212.255.116, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "adUuAHYVIXiPh5_eJTkY7gAAAgM"]
[Wed Apr 08 01:04:37.729688 2026] [:error] [pid 4840:tid 5168] [client 43.133.187.11:32984] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adU5JRsUwg2fEe9p9LSx7AAAAAg"]
[Wed Apr 08 04:36:22.210877 2026] [:error] [pid 47626:tid 47678] [client 182.44.9.147:57585] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adVqxqjWI8TWtHx2sdbnLQAAAEo"]
[Wed Apr 08 04:58:25.218279 2026] [:error] [pid 47627:tid 47707] [client 20.251.32.17:26868] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adVv8XOljf1Quv_kDjmDXwAAAIg"]
[Wed Apr 08 04:58:26.306558 2026] [:error] [pid 16630:tid 16650] [client 20.251.32.17:16825] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adVv8ijfVAkPG-jgJEpyJAAAARI"]
[Wed Apr 08 04:58:26.896987 2026] [:error] [pid 16630:tid 16632] [client 20.251.32.17:26873] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adVv8ijfVAkPG-jgJEpyJwAAAQA"]
[Wed Apr 08 04:58:27.485569 2026] [:error] [pid 16630:tid 16643] [client 20.251.32.17:29591] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adVv8yjfVAkPG-jgJEpyLwAAAQs"]
[Wed Apr 08 04:58:29.382037 2026] [:error] [pid 16630:tid 16645] [client 20.251.32.17:57291] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adVv9SjfVAkPG-jgJEpyOwAAAQ0"]
[Wed Apr 08 04:58:29.968191 2026] [:error] [pid 16630:tid 16637] [client 20.251.32.17:39169] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adVv9SjfVAkPG-jgJEpyQgAAAQU"]
[Wed Apr 08 04:58:30.707082 2026] [:error] [pid 16630:tid 16646] [client 20.251.32.17:39213] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adVv9ijfVAkPG-jgJEpySwAAAQ4"]
[Wed Apr 08 04:58:31.470030 2026] [:error] [pid 47732:tid 47753] [client 20.251.32.17:3348] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adVv94m4N5QW9Mh7G10g5gAAANM"]
[Wed Apr 08 04:58:32.089150 2026] [:error] [pid 47627:tid 47711] [client 20.251.32.17:16796] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adVv-HOljf1Quv_kDjmDbwAAAIw"]
[Wed Apr 08 04:58:33.068084 2026] [:error] [pid 47626:tid 47673] [client 20.251.32.17:39223] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adVv-ajWI8TWtHx2sdbxSQAAAEU"]
[Wed Apr 08 04:58:33.995630 2026] [:error] [pid 47732:tid 47740] [client 20.251.32.17:26818] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adVv-Ym4N5QW9Mh7G10g6gAAAMY"]
[Wed Apr 08 04:58:34.747076 2026] [:error] [pid 47626:tid 47691] [client 20.251.32.17:39201] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adVv-qjWI8TWtHx2sdbxUQAAAFc"]
[Wed Apr 08 04:58:35.523145 2026] [:error] [pid 16630:tid 16649] [client 20.251.32.17:29604] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "adVv-yjfVAkPG-jgJEpyVAAAARE"]
[Wed Apr 08 04:58:36.669801 2026] [:error] [pid 47627:tid 47717] [client 20.251.32.17:3284] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "adVv_HOljf1Quv_kDjmDiQAAAJI"]
[Wed Apr 08 04:58:37.253605 2026] [:error] [pid 47732:tid 47737] [client 20.251.32.17:39204] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "adVv_Ym4N5QW9Mh7G10g8AAAAMM"]
[Wed Apr 08 04:58:37.829517 2026] [:error] [pid 47732:tid 47755] [client 20.251.32.17:57305] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pass4.php"] [unique_id "adVv_Ym4N5QW9Mh7G10g8wAAANU"]
[Wed Apr 08 04:58:38.451338 2026] [:error] [pid 47732:tid 47744] [client 20.251.32.17:3579] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adVv_om4N5QW9Mh7G10g9wAAAMo"]
[Wed Apr 08 04:58:39.348047 2026] [:error] [pid 47626:tid 47687] [client 20.251.32.17:26867] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adVv_6jWI8TWtHx2sdbxWQAAAFM"]
[Wed Apr 08 04:58:40.185610 2026] [:error] [pid 16630:tid 16637] [client 20.251.32.17:3283] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adVwACjfVAkPG-jgJEpyegAAAQU"]
[Wed Apr 08 04:58:41.003650 2026] [:error] [pid 16630:tid 16638] [client 20.251.32.17:50543] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adVwASjfVAkPG-jgJEpyggAAAQY"]
[Wed Apr 08 04:58:42.952909 2026] [:error] [pid 47626:tid 47688] [client 20.251.32.17:29578] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adVwAqjWI8TWtHx2sdbxXAAAAFQ"]
[Wed Apr 08 04:58:43.717364 2026] [:error] [pid 47625:tid 47646] [client 20.251.32.17:3571] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adVwAyVuHyNWzZlE8PDvFgAAAAw"]
[Wed Apr 08 04:58:44.411162 2026] [:error] [pid 47732:tid 47747] [client 20.251.32.17:28092] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adVwBIm4N5QW9Mh7G10hGAAAAM0"]
[Wed Apr 08 04:58:45.242114 2026] [:error] [pid 47732:tid 47748] [client 20.251.32.17:28048] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adVwBYm4N5QW9Mh7G10hHAAAAM4"]
[Wed Apr 08 04:58:46.495674 2026] [:error] [pid 16630:tid 16649] [client 20.251.32.17:3538] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adVwBijfVAkPG-jgJEpyuwAAARE"]
[Wed Apr 08 04:58:47.491252 2026] [:error] [pid 47626:tid 47690] [client 20.251.32.17:53735] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adVwB6jWI8TWtHx2sdbxawAAAFY"]
[Wed Apr 08 04:58:48.170413 2026] [:error] [pid 47626:tid 47687] [client 20.251.32.17:16060] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adVwCKjWI8TWtHx2sdbxbAAAAFM"]
[Wed Apr 08 04:58:48.699204 2026] [:error] [pid 47625:tid 47651] [client 20.251.32.17:27490] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adVwCCVuHyNWzZlE8PDvHwAAABE"]
[Wed Apr 08 04:58:49.433203 2026] [:error] [pid 47627:tid 47716] [client 20.251.32.17:3575] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adVwCXOljf1Quv_kDjmDtAAAAJE"]
[Wed Apr 08 04:58:50.596985 2026] [:error] [pid 47625:tid 47636] [client 20.251.32.17:60652] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adVwCiVuHyNWzZlE8PDvLAAAAAI"]
[Wed Apr 08 04:58:52.037983 2026] [:error] [pid 47627:tid 47699] [client 20.251.32.17:3136] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adVwDHOljf1Quv_kDjmDuQAAAIA"]
[Wed Apr 08 04:58:52.674868 2026] [:error] [pid 16630:tid 16647] [client 20.251.32.17:37332] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adVwDCjfVAkPG-jgJEpyvQAAAQ8"]
[Wed Apr 08 04:58:53.220110 2026] [:error] [pid 47732:tid 47748] [client 20.251.32.17:28053] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adVwDYm4N5QW9Mh7G10hJgAAAM4"]
[Wed Apr 08 04:58:53.905006 2026] [:error] [pid 47732:tid 47756] [client 20.251.32.17:54852] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adVwDYm4N5QW9Mh7G10hJwAAANY"]
[Wed Apr 08 04:58:55.061023 2026] [:error] [pid 16630:tid 16636] [client 20.251.32.17:20880] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adVwDyjfVAkPG-jgJEpyxwAAAQQ"]
[Wed Apr 08 04:58:56.054240 2026] [:error] [pid 47625:tid 47641] [client 20.251.32.17:20872] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adVwECVuHyNWzZlE8PDvOwAAAAc"]
[Wed Apr 08 04:58:56.630297 2026] [:error] [pid 47625:tid 47634] [client 20.251.32.17:3276] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "adVwECVuHyNWzZlE8PDvPwAAAAA"]
[Wed Apr 08 04:58:57.568046 2026] [:error] [pid 47627:tid 47701] [client 20.251.32.17:29609] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "adVwEXOljf1Quv_kDjmDyQAAAII"]
[Wed Apr 08 04:58:58.795646 2026] [:error] [pid 47732:tid 47758] [client 20.251.32.17:27469] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adVwEom4N5QW9Mh7G10hOwAAANg"]
[Wed Apr 08 04:58:59.595976 2026] [:error] [pid 47627:tid 47723] [client 20.251.32.17:55508] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adVwE3Oljf1Quv_kDjmDywAAAJg"]
[Wed Apr 08 04:59:00.506959 2026] [:error] [pid 47732:tid 47744] [client 20.251.32.17:28066] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adVwFIm4N5QW9Mh7G10hRwAAAMo"]
[Wed Apr 08 04:59:01.090151 2026] [:error] [pid 47627:tid 47709] [client 20.251.32.17:60637] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adVwFXOljf1Quv_kDjmDzwAAAIo"]
[Wed Apr 08 04:59:01.657705 2026] [:error] [pid 47627:tid 47719] [client 20.251.32.17:46471] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "adVwFXOljf1Quv_kDjmD0wAAAJQ"]
[Wed Apr 08 04:59:02.352393 2026] [:error] [pid 47627:tid 47721] [client 20.251.32.17:46513] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "adVwFnOljf1Quv_kDjmD2QAAAJY"]
[Wed Apr 08 04:59:02.980464 2026] [:error] [pid 47732:tid 47758] [client 20.251.32.17:64447] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "adVwFom4N5QW9Mh7G10hTQAAANg"]
[Wed Apr 08 04:59:03.761346 2026] [:error] [pid 47732:tid 47754] [client 20.251.32.17:33471] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "adVwF4m4N5QW9Mh7G10hUAAAANQ"]
[Wed Apr 08 04:59:04.361673 2026] [:error] [pid 16630:tid 16637] [client 20.251.32.17:3137] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adVwGCjfVAkPG-jgJEpy4gAAAQU"]
[Wed Apr 08 04:59:05.166107 2026] [:error] [pid 16630:tid 16638] [client 20.251.32.17:60645] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adVwGSjfVAkPG-jgJEpy6AAAAQY"]
[Wed Apr 08 04:59:05.926114 2026] [:error] [pid 47626:tid 47671] [client 20.251.32.17:46484] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adVwGajWI8TWtHx2sdbxnQAAAEM"]
[Wed Apr 08 04:59:06.790122 2026] [:error] [pid 47625:tid 47656] [client 20.251.32.17:55543] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adVwGiVuHyNWzZlE8PDvVAAAABY"]
[Wed Apr 08 04:59:09.643740 2026] [:error] [pid 16630:tid 16634] [client 20.251.32.17:28090] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adVwHSjfVAkPG-jgJEpzAQAAAQI"]
[Wed Apr 08 04:59:10.458489 2026] [:error] [pid 16630:tid 16635] [client 20.251.32.17:29642] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adVwHijfVAkPG-jgJEpzBgAAAQM"]
[Wed Apr 08 04:59:12.183188 2026] [:error] [pid 16630:tid 16648] [client 20.251.32.17:34743] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adVwICjfVAkPG-jgJEpzDAAAARA"]
[Wed Apr 08 04:59:13.134627 2026] [:error] [pid 16630:tid 16652] [client 20.251.32.17:17379] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adVwISjfVAkPG-jgJEpzFAAAARQ"]
[Wed Apr 08 04:59:14.182504 2026] [:error] [pid 16630:tid 16642] [client 20.251.32.17:28076] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adVwIijfVAkPG-jgJEpzHgAAAQo"]
[Wed Apr 08 04:59:15.738552 2026] [:error] [pid 47626:tid 47684] [client 20.251.32.17:3170] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adVwI6jWI8TWtHx2sdbxrwAAAFA"]
[Wed Apr 08 04:59:16.702855 2026] [:error] [pid 16630:tid 16643] [client 20.251.32.17:28051] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adVwJCjfVAkPG-jgJEpzNAAAAQs"]
[Wed Apr 08 04:59:17.356021 2026] [:error] [pid 16630:tid 16635] [client 20.251.32.17:3198] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adVwJSjfVAkPG-jgJEpzOwAAAQM"]
[Wed Apr 08 04:59:18.094003 2026] [:error] [pid 47732:tid 47755] [client 20.251.32.17:51535] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adVwJom4N5QW9Mh7G10heQAAANU"]
[Wed Apr 08 04:59:19.010643 2026] [:error] [pid 16630:tid 16650] [client 20.251.32.17:37255] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adVwJyjfVAkPG-jgJEpzTgAAARI"]
[Wed Apr 08 04:59:19.742376 2026] [:error] [pid 16630:tid 16654] [client 20.251.32.17:29693] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adVwJyjfVAkPG-jgJEpzVQAAARY"]
[Wed Apr 08 04:59:20.614104 2026] [:error] [pid 47732:tid 47734] [client 20.251.32.17:17380] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adVwKIm4N5QW9Mh7G10hfwAAAMA"]
[Wed Apr 08 04:59:21.429127 2026] [:error] [pid 47627:tid 47716] [client 20.251.32.17:46515] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adVwKXOljf1Quv_kDjmD_wAAAJE"]
[Wed Apr 08 04:59:22.523131 2026] [:error] [pid 47625:tid 47656] [client 20.251.32.17:37283] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adVwKiVuHyNWzZlE8PDvcgAAABY"]
[Wed Apr 08 04:59:32.582438 2026] [:error] [pid 16630:tid 16654] [client 20.251.32.17:55540] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adVwNCjfVAkPG-jgJEpznAAAARY"]
[Wed Apr 08 04:59:33.294325 2026] [:error] [pid 47625:tid 47646] [client 20.251.32.17:22825] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adVwNSVuHyNWzZlE8PDvgwAAAAw"]
[Wed Apr 08 04:59:33.860011 2026] [:error] [pid 47732:tid 47741] [client 20.251.32.17:12937] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adVwNYm4N5QW9Mh7G10howAAAMc"]
[Wed Apr 08 04:59:34.406002 2026] [:error] [pid 47626:tid 47688] [client 20.251.32.17:51571] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adVwNqjWI8TWtHx2sdbxxwAAAFQ"]
[Wed Apr 08 04:59:34.963765 2026] [:error] [pid 47732:tid 47752] [client 20.251.32.17:14535] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adVwNom4N5QW9Mh7G10hpAAAANI"]
[Wed Apr 08 04:59:37.373859 2026] [:error] [pid 47627:tid 47723] [client 20.251.32.17:64437] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adVwOXOljf1Quv_kDjmEJQAAAJg"]
[Wed Apr 08 04:59:40.649308 2026] [:error] [pid 16630:tid 16640] [client 20.251.32.17:4087] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adVwPCjfVAkPG-jgJEpzvgAAAQg"]
[Wed Apr 08 04:59:44.518069 2026] [:error] [pid 16630:tid 16653] [client 20.251.32.17:51195] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adVwQCjfVAkPG-jgJEpz5QAAARU"]
[Wed Apr 08 04:59:45.961433 2026] [:error] [pid 47627:tid 47705] [client 20.251.32.17:11494] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adVwQXOljf1Quv_kDjmEQAAAAIY"]
[Wed Apr 08 04:59:46.836731 2026] [:error] [pid 47626:tid 47688] [client 20.251.32.17:3248] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adVwQqjWI8TWtHx2sdbx4QAAAFQ"]
[Wed Apr 08 04:59:47.498431 2026] [:error] [pid 47626:tid 47679] [client 20.251.32.17:21558] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adVwQ6jWI8TWtHx2sdbx4wAAAEs"]
[Wed Apr 08 04:59:48.201813 2026] [:error] [pid 47732:tid 47736] [client 20.251.32.17:10298] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adVwRIm4N5QW9Mh7G10hwAAAAMI"]
[Wed Apr 08 04:59:48.788247 2026] [:error] [pid 16630:tid 16651] [client 20.251.32.17:13337] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adVwRCjfVAkPG-jgJEpz_QAAARM"]
[Wed Apr 08 04:59:49.385900 2026] [:error] [pid 16630:tid 16646] [client 20.251.32.17:11131] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adVwRSjfVAkPG-jgJEp0BAAAAQ4"]
[Wed Apr 08 04:59:50.108946 2026] [:error] [pid 16630:tid 16650] [client 20.251.32.17:4067] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adVwRijfVAkPG-jgJEp0CQAAARI"]
[Wed Apr 08 04:59:50.649720 2026] [:error] [pid 16630:tid 16651] [client 20.251.32.17:51188] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adVwRijfVAkPG-jgJEp0DAAAARM"]
[Wed Apr 08 04:59:51.320084 2026] [:error] [pid 47732:tid 47752] [client 20.251.32.17:51164] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVwR4m4N5QW9Mh7G10hywAAANI"]
[Wed Apr 08 04:59:52.257860 2026] [:error] [pid 47625:tid 47638] [client 20.251.32.17:11093] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVwSCVuHyNWzZlE8PDvmAAAAAQ"]
[Wed Apr 08 04:59:52.876457 2026] [:error] [pid 47627:tid 47722] [client 20.251.32.17:30863] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVwSHOljf1Quv_kDjmERwAAAJc"]
[Wed Apr 08 04:59:53.540131 2026] [:error] [pid 47625:tid 47643] [client 20.251.32.17:53653] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adVwSSVuHyNWzZlE8PDvmwAAAAk"]
[Wed Apr 08 04:59:54.121573 2026] [:error] [pid 47626:tid 47679] [client 20.251.32.17:40775] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adVwSqjWI8TWtHx2sdbx8gAAAEs"]
[Wed Apr 08 04:59:54.651466 2026] [:error] [pid 47732:tid 47757] [client 20.251.32.17:23754] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adVwSom4N5QW9Mh7G10hzwAAANc"]
[Wed Apr 08 04:59:55.225201 2026] [:error] [pid 47732:tid 47743] [client 20.251.32.17:53670] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adVwS4m4N5QW9Mh7G10h0wAAAMk"]
[Wed Apr 08 04:59:55.868771 2026] [:error] [pid 16630:tid 16656] [client 20.251.32.17:23755] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "adVwSyjfVAkPG-jgJEp0JQAAARg"]
[Wed Apr 08 04:59:56.992436 2026] [:error] [pid 47626:tid 47672] [client 20.251.32.17:53679] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adVwTKjWI8TWtHx2sdbx-QAAAEQ"]
[Wed Apr 08 04:59:57.847971 2026] [:error] [pid 47732:tid 47742] [client 20.251.32.17:32875] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adVwTYm4N5QW9Mh7G10h5gAAAMg"]
[Wed Apr 08 04:59:58.870452 2026] [:error] [pid 47625:tid 47634] [client 20.251.32.17:11500] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adVwTiVuHyNWzZlE8PDvowAAAAA"]
[Wed Apr 08 05:00:00.121503 2026] [:error] [pid 47625:tid 47653] [client 20.251.32.17:55704] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adVwUCVuHyNWzZlE8PDvpQAAABM"]
[Wed Apr 08 05:00:01.230037 2026] [:error] [pid 47625:tid 47644] [client 20.251.32.17:32868] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adVwUSVuHyNWzZlE8PDvpwAAAAo"]
[Wed Apr 08 05:00:02.218608 2026] [:error] [pid 47625:tid 47654] [client 20.251.32.17:22155] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adVwUiVuHyNWzZlE8PDvqAAAABQ"]
[Wed Apr 08 05:00:03.375366 2026] [:error] [pid 16630:tid 16645] [client 20.251.32.17:22177] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adVwUyjfVAkPG-jgJEp0TQAAAQ0"]
[Wed Apr 08 05:00:04.493870 2026] [:error] [pid 47732:tid 47755] [client 20.251.32.17:12211] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adVwVIm4N5QW9Mh7G10h9wAAANU"]
[Wed Apr 08 05:00:05.384017 2026] [:error] [pid 47627:tid 47705] [client 20.251.32.17:55425] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adVwVXOljf1Quv_kDjmEWgAAAIY"]
[Wed Apr 08 05:00:06.212358 2026] [:error] [pid 47626:tid 47668] [client 20.251.32.17:57358] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adVwVqjWI8TWtHx2sdbyCgAAAEA"]
[Wed Apr 08 05:00:07.398688 2026] [:error] [pid 16630:tid 16643] [client 20.251.32.17:29124] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adVwVyjfVAkPG-jgJEp0WQAAAQs"]
[Wed Apr 08 05:00:08.112103 2026] [:error] [pid 16630:tid 16639] [client 20.251.32.17:29177] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adVwWCjfVAkPG-jgJEp0XQAAAQc"]
[Wed Apr 08 05:00:08.776844 2026] [:error] [pid 47626:tid 47672] [client 20.251.32.17:30270] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adVwWKjWI8TWtHx2sdbyFAAAAEQ"]
[Wed Apr 08 05:00:09.375979 2026] [:error] [pid 47732:tid 47758] [client 20.251.32.17:13013] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adVwWYm4N5QW9Mh7G10h_AAAANg"]
[Wed Apr 08 05:00:09.977828 2026] [:error] [pid 47732:tid 47739] [client 20.251.32.17:22188] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adVwWYm4N5QW9Mh7G10iAAAAAMU"]
[Wed Apr 08 05:00:10.547839 2026] [:error] [pid 16630:tid 16656] [client 20.251.32.17:26769] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adVwWijfVAkPG-jgJEp0YQAAARg"]
[Wed Apr 08 05:00:11.453832 2026] [:error] [pid 16630:tid 16632] [client 20.251.32.17:60105] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adVwWyjfVAkPG-jgJEp0aAAAAQA"]
[Wed Apr 08 05:00:12.732805 2026] [:error] [pid 47625:tid 47645] [client 20.251.32.17:42694] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adVwXCVuHyNWzZlE8PDvsAAAAAs"]
[Wed Apr 08 05:00:13.617852 2026] [:error] [pid 47732:tid 47746] [client 20.251.32.17:51511] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adVwXYm4N5QW9Mh7G10iCgAAAMw"]
[Wed Apr 08 05:00:14.603188 2026] [:error] [pid 16630:tid 16634] [client 20.251.32.17:55481] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adVwXijfVAkPG-jgJEp0fwAAAQI"]
[Wed Apr 08 05:00:17.035718 2026] [:error] [pid 47625:tid 47637] [client 20.251.32.17:12169] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adVwYSVuHyNWzZlE8PDvtgAAAAM"]
[Wed Apr 08 05:00:18.534087 2026] [:error] [pid 47627:tid 47712] [client 20.251.32.17:45351] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adVwYnOljf1Quv_kDjmEdgAAAI0"]
[Wed Apr 08 05:00:21.402044 2026] [:error] [pid 47625:tid 47639] [client 20.251.32.17:25532] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adVwZSVuHyNWzZlE8PDvvAAAAAU"]
[Wed Apr 08 05:00:22.452674 2026] [:error] [pid 47625:tid 47645] [client 20.251.32.17:25522] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adVwZiVuHyNWzZlE8PDvwQAAAAs"]
[Wed Apr 08 05:00:23.481150 2026] [:error] [pid 47732:tid 47745] [client 20.251.32.17:30217] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adVwZ4m4N5QW9Mh7G10iJgAAAMs"]
[Wed Apr 08 05:00:24.509826 2026] [:error] [pid 47732:tid 47741] [client 20.251.32.17:30326] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adVwaIm4N5QW9Mh7G10iKAAAAMc"]
[Wed Apr 08 05:00:25.230457 2026] [:error] [pid 16630:tid 16634] [client 20.251.32.17:12556] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adVwaSjfVAkPG-jgJEp01gAAAQI"]
[Wed Apr 08 05:00:26.117014 2026] [:error] [pid 47625:tid 47640] [client 20.251.32.17:30315] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adVwaiVuHyNWzZlE8PDvxwAAAAY"]
[Wed Apr 08 05:00:27.440795 2026] [:error] [pid 47732:tid 47737] [client 20.251.32.17:12578] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adVwa4m4N5QW9Mh7G10iMwAAAMM"]
[Wed Apr 08 05:00:29.107416 2026] [:error] [pid 47732:tid 47749] [client 20.251.32.17:49195] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adVwbYm4N5QW9Mh7G10iQgAAAM8"]
[Wed Apr 08 05:00:29.948512 2026] [:error] [pid 16630:tid 16656] [client 20.251.32.17:27447] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adVwbSjfVAkPG-jgJEp0_wAAARg"]
[Wed Apr 08 05:00:30.674795 2026] [:error] [pid 16630:tid 16635] [client 20.251.32.17:16085] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adVwbijfVAkPG-jgJEp1CAAAAQM"]
[Wed Apr 08 05:00:31.480111 2026] [:error] [pid 16630:tid 16654] [client 20.251.32.17:30297] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adVwbyjfVAkPG-jgJEp1DQAAARY"]
[Wed Apr 08 05:00:39.518316 2026] [:error] [pid 47627:tid 47714] [client 20.251.32.17:30275] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adVwd3Oljf1Quv_kDjmElAAAAI8"]
[Wed Apr 08 05:00:40.859497 2026] [:error] [pid 47627:tid 47711] [client 20.251.32.17:35305] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adVweHOljf1Quv_kDjmElwAAAIw"]
[Wed Apr 08 05:00:41.667610 2026] [:error] [pid 47627:tid 47720] [client 20.251.32.17:36644] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adVweXOljf1Quv_kDjmEmAAAAJU"]
[Wed Apr 08 05:00:42.641608 2026] [:error] [pid 47625:tid 47642] [client 20.251.32.17:43347] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adVweiVuHyNWzZlE8PDv2gAAAAg"]
[Wed Apr 08 05:00:43.707383 2026] [:error] [pid 47732:tid 47741] [client 20.251.32.17:24432] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adVwe4m4N5QW9Mh7G10icQAAAMc"]
[Wed Apr 08 05:00:45.029508 2026] [:error] [pid 47732:tid 47755] [client 20.251.32.17:58592] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adVwfYm4N5QW9Mh7G10ieQAAANU"]
[Wed Apr 08 05:00:46.397802 2026] [:error] [pid 47625:tid 47656] [client 20.251.32.17:58581] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adVwfiVuHyNWzZlE8PDv4AAAABY"]
[Wed Apr 08 05:00:47.075469 2026] [:error] [pid 47626:tid 47681] [client 20.251.32.17:35225] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adVwf6jWI8TWtHx2sdbyawAAAE0"]
[Wed Apr 08 05:00:47.979626 2026] [:error] [pid 47732:tid 47742] [client 20.251.32.17:36671] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adVwf4m4N5QW9Mh7G10ihAAAAMg"]
[Wed Apr 08 05:00:48.579862 2026] [:error] [pid 47732:tid 47752] [client 20.251.32.17:4014] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adVwgIm4N5QW9Mh7G10iiAAAANI"]
[Wed Apr 08 05:00:49.231897 2026] [:error] [pid 47732:tid 47756] [client 20.251.32.17:36639] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adVwgYm4N5QW9Mh7G10ijQAAANY"]
[Wed Apr 08 05:00:49.839387 2026] [:error] [pid 47626:tid 47671] [client 20.251.32.17:57822] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adVwgajWI8TWtHx2sdbycgAAAEM"]
[Wed Apr 08 05:00:50.853092 2026] [:error] [pid 47627:tid 47712] [client 20.251.32.17:4006] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adVwgnOljf1Quv_kDjmEqAAAAI0"]
[Wed Apr 08 05:00:52.046229 2026] [:error] [pid 47626:tid 47670] [client 20.251.32.17:31499] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adVwhKjWI8TWtHx2sdbydgAAAEI"]
[Wed Apr 08 05:00:52.677054 2026] [:error] [pid 47627:tid 47711] [client 20.251.32.17:11054] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adVwhHOljf1Quv_kDjmErgAAAIw"]
[Wed Apr 08 05:00:53.321902 2026] [:error] [pid 47625:tid 47634] [client 20.251.32.17:45802] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adVwhSVuHyNWzZlE8PDv6gAAAAA"]
[Wed Apr 08 05:00:53.844124 2026] [:error] [pid 47626:tid 47672] [client 20.251.32.17:35234] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adVwhajWI8TWtHx2sdbyeQAAAEQ"]
[Wed Apr 08 05:00:54.533213 2026] [:error] [pid 47626:tid 47679] [client 20.251.32.17:35227] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adVwhqjWI8TWtHx2sdbyfAAAAEs"]
[Wed Apr 08 05:00:55.158440 2026] [:error] [pid 16630:tid 16655] [client 20.251.32.17:45809] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adVwhyjfVAkPG-jgJEp1gAAAARc"]
[Wed Apr 08 05:00:55.920326 2026] [:error] [pid 47626:tid 47671] [client 20.251.32.17:3697] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adVwh6jWI8TWtHx2sdbygQAAAEM"]
[Wed Apr 08 05:00:56.536669 2026] [:error] [pid 47732:tid 47743] [client 20.251.32.17:31489] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adVwiIm4N5QW9Mh7G10ingAAAMk"]
[Wed Apr 08 05:00:57.090759 2026] [:error] [pid 47625:tid 47650] [client 20.251.32.17:35205] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adVwiSVuHyNWzZlE8PDv8gAAABA"]
[Wed Apr 08 05:00:58.016877 2026] [:error] [pid 47627:tid 47709] [client 20.251.32.17:37970] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adVwinOljf1Quv_kDjmEtwAAAIo"]
[Wed Apr 08 05:00:59.981050 2026] [:error] [pid 47732:tid 47752] [client 20.251.32.17:18591] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adVwi4m4N5QW9Mh7G10iogAAANI"]
[Wed Apr 08 05:01:00.814596 2026] [:error] [pid 16630:tid 16649] [client 20.251.32.17:19852] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jga.php"] [unique_id "adVwjCjfVAkPG-jgJEp1iQAAARE"]
[Wed Apr 08 05:01:01.712211 2026] [:error] [pid 16630:tid 16643] [client 20.251.32.17:38566] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jga.php"] [unique_id "adVwjSjfVAkPG-jgJEp1jQAAAQs"]
[Wed Apr 08 05:01:02.689872 2026] [:error] [pid 47732:tid 47758] [client 20.251.32.17:49911] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jga.php"] [unique_id "adVwjom4N5QW9Mh7G10iqQAAANg"]
[Wed Apr 08 05:01:03.895272 2026] [:error] [pid 47732:tid 47752] [client 20.251.32.17:55540] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jga.php"] [unique_id "adVwj4m4N5QW9Mh7G10isAAAANI"]
[Wed Apr 08 05:01:04.907482 2026] [:error] [pid 47627:tid 47706] [client 20.251.32.17:12269] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/buc.php"] [unique_id "adVwkHOljf1Quv_kDjmEyAAAAIc"]
[Wed Apr 08 05:01:05.448049 2026] [:error] [pid 16630:tid 16656] [client 20.251.32.17:35755] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/buc.php"] [unique_id "adVwkSjfVAkPG-jgJEp1oQAAARg"]
[Wed Apr 08 05:01:05.984273 2026] [:error] [pid 47627:tid 47699] [client 20.251.32.17:29069] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/buc.php"] [unique_id "adVwkXOljf1Quv_kDjmEzQAAAIA"]
[Wed Apr 08 05:01:06.711064 2026] [:error] [pid 16630:tid 16633] [client 20.251.32.17:19878] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/buc.php"] [unique_id "adVwkijfVAkPG-jgJEp1pgAAAQE"]
[Wed Apr 08 05:01:07.325065 2026] [:error] [pid 47626:tid 47681] [client 20.251.32.17:58759] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "adVwk6jWI8TWtHx2sdbyjQAAAE0"]
[Wed Apr 08 05:01:07.989066 2026] [:error] [pid 47627:tid 47706] [client 20.251.32.17:11788] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "adVwk3Oljf1Quv_kDjmE2gAAAIc"]
[Wed Apr 08 05:01:08.738860 2026] [:error] [pid 47626:tid 47669] [client 20.251.32.17:38544] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "adVwlKjWI8TWtHx2sdbykAAAAEE"]
[Wed Apr 08 05:01:09.580421 2026] [:error] [pid 47626:tid 47668] [client 20.251.32.17:49808] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "adVwlajWI8TWtHx2sdbylgAAAEA"]
[Wed Apr 08 05:01:10.122623 2026] [:error] [pid 47732:tid 47740] [client 20.251.32.17:12271] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adVwlom4N5QW9Mh7G10ivQAAAMY"]
[Wed Apr 08 05:01:10.875877 2026] [:error] [pid 47625:tid 47636] [client 20.251.32.17:18575] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adVwliVuHyNWzZlE8PDwAgAAAAI"]
[Wed Apr 08 05:01:11.500743 2026] [:error] [pid 47627:tid 47703] [client 20.251.32.17:12230] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adVwl3Oljf1Quv_kDjmE5gAAAIQ"]
[Wed Apr 08 05:01:12.018826 2026] [:error] [pid 16630:tid 16637] [client 20.251.32.17:20954] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adVwmCjfVAkPG-jgJEp1twAAAQU"]
[Wed Apr 08 05:01:12.573319 2026] [:error] [pid 47627:tid 47713] [client 20.251.32.17:55775] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "adVwmHOljf1Quv_kDjmE6wAAAI4"]
[Wed Apr 08 05:01:13.118171 2026] [:error] [pid 16630:tid 16656] [client 20.251.32.17:22233] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "adVwmSjfVAkPG-jgJEp1vAAAARg"]
[Wed Apr 08 05:01:13.666169 2026] [:error] [pid 16630:tid 16649] [client 20.251.32.17:18046] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "adVwmSjfVAkPG-jgJEp1wAAAARE"]
[Wed Apr 08 05:01:14.199906 2026] [:error] [pid 47732:tid 47740] [client 20.251.32.17:64993] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gpt-sh.php"] [unique_id "adVwmom4N5QW9Mh7G10iywAAAMY"]
[Wed Apr 08 05:01:14.958546 2026] [:error] [pid 47625:tid 47655] [client 20.251.32.17:17986] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adVwmiVuHyNWzZlE8PDwAwAAABU"]
[Wed Apr 08 05:01:15.883404 2026] [:error] [pid 47732:tid 47739] [client 20.251.32.17:3410] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adVwm4m4N5QW9Mh7G10i2QAAAMU"]
[Wed Apr 08 05:01:16.790645 2026] [:error] [pid 16630:tid 16643] [client 20.251.32.17:40404] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adVwnCjfVAkPG-jgJEp1wwAAAQs"]
[Wed Apr 08 05:01:17.779647 2026] [:error] [pid 47626:tid 47673] [client 20.251.32.17:32826] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adVwnajWI8TWtHx2sdbyrwAAAEU"]
[Wed Apr 08 05:01:18.620772 2026] [:error] [pid 47627:tid 47710] [client 20.251.32.17:54391] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adVwnnOljf1Quv_kDjmE8gAAAIs"]
[Wed Apr 08 05:01:19.677079 2026] [:error] [pid 47625:tid 47651] [client 20.251.32.17:16434] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adVwnyVuHyNWzZlE8PDwDAAAABE"]
[Wed Apr 08 05:01:20.423894 2026] [:error] [pid 47625:tid 47637] [client 20.251.32.17:44730] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adVwoCVuHyNWzZlE8PDwDQAAAAM"]
[Wed Apr 08 05:01:21.336831 2026] [:error] [pid 47626:tid 47688] [client 20.251.32.17:44711] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adVwoajWI8TWtHx2sdbytAAAAFQ"]
[Wed Apr 08 05:01:21.929075 2026] [:error] [pid 47732:tid 47758] [client 20.251.32.17:16470] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adVwoYm4N5QW9Mh7G10i6AAAANg"]
[Wed Apr 08 05:01:22.616903 2026] [:error] [pid 16630:tid 16650] [client 20.251.32.17:40392] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adVwoijfVAkPG-jgJEp10QAAARI"]
[Wed Apr 08 05:01:23.359312 2026] [:error] [pid 16630:tid 16644] [client 20.251.32.17:47468] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adVwoyjfVAkPG-jgJEp13AAAAQw"]
[Wed Apr 08 05:01:24.387950 2026] [:error] [pid 47732:tid 47754] [client 20.251.32.17:3495] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adVwpIm4N5QW9Mh7G10i7AAAANQ"]
[Wed Apr 08 05:01:25.266119 2026] [:error] [pid 16630:tid 16632] [client 20.251.32.17:47473] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adVwpSjfVAkPG-jgJEp16gAAAQA"]
[Wed Apr 08 05:01:26.034859 2026] [:error] [pid 47625:tid 47652] [client 20.251.32.17:60675] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adVwpiVuHyNWzZlE8PDwFAAAABI"]
[Wed Apr 08 05:01:26.717860 2026] [:error] [pid 47625:tid 47643] [client 20.251.32.17:60726] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adVwpiVuHyNWzZlE8PDwFwAAAAk"]
[Wed Apr 08 05:01:27.254974 2026] [:error] [pid 16630:tid 16632] [client 20.251.32.17:23689] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/0yellow.php"] [unique_id "adVwpyjfVAkPG-jgJEp1-QAAAQA"]
[Wed Apr 08 05:01:27.779037 2026] [:error] [pid 16630:tid 16643] [client 20.251.32.17:3916] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/only.php"] [unique_id "adVwpyjfVAkPG-jgJEp1_gAAAQs"]
[Wed Apr 08 05:01:28.301806 2026] [:error] [pid 47625:tid 47646] [client 20.251.32.17:15696] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/only.php"] [unique_id "adVwqCVuHyNWzZlE8PDwHAAAAAw"]
[Wed Apr 08 05:01:28.891518 2026] [:error] [pid 16630:tid 16642] [client 20.251.32.17:57897] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/only.php"] [unique_id "adVwqCjfVAkPG-jgJEp2AgAAAQo"]
[Wed Apr 08 05:01:29.515838 2026] [:error] [pid 47626:tid 47679] [client 20.251.32.17:57879] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/only.php"] [unique_id "adVwqajWI8TWtHx2sdbyvQAAAEs"]
[Wed Apr 08 05:01:30.134724 2026] [:error] [pid 47626:tid 47676] [client 20.251.32.17:57885] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adVwqqjWI8TWtHx2sdbywgAAAEg"]
[Wed Apr 08 05:01:30.744987 2026] [:error] [pid 47625:tid 47658] [client 20.251.32.17:19944] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adVwqiVuHyNWzZlE8PDwJQAAABg"]
[Wed Apr 08 05:01:31.344770 2026] [:error] [pid 16630:tid 16642] [client 20.251.32.17:39248] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adVwqyjfVAkPG-jgJEp2DAAAAQo"]
[Wed Apr 08 05:01:31.968085 2026] [:error] [pid 16630:tid 16632] [client 20.251.32.17:13730] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adVwqyjfVAkPG-jgJEp2DgAAAQA"]
[Wed Apr 08 05:01:32.515558 2026] [:error] [pid 47627:tid 47712] [client 20.251.32.17:47446] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adVwrHOljf1Quv_kDjmFCAAAAI0"]
[Wed Apr 08 05:01:33.058282 2026] [:error] [pid 47627:tid 47710] [client 20.251.32.17:15688] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adVwrXOljf1Quv_kDjmFCwAAAIs"]
[Wed Apr 08 05:01:33.758581 2026] [:error] [pid 16630:tid 16643] [client 20.251.32.17:18658] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adVwrSjfVAkPG-jgJEp2FwAAAQs"]
[Wed Apr 08 05:01:34.506000 2026] [:error] [pid 16630:tid 16645] [client 20.251.32.17:60217] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adVwrijfVAkPG-jgJEp2HAAAAQ0"]
[Wed Apr 08 05:01:35.071744 2026] [:error] [pid 47732:tid 47734] [client 20.251.32.17:60188] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adVwr4m4N5QW9Mh7G10i8wAAAMA"]
[Wed Apr 08 05:01:35.656357 2026] [:error] [pid 16630:tid 16654] [client 20.251.32.17:11877] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adVwryjfVAkPG-jgJEp2JwAAARY"]
[Wed Apr 08 05:01:36.197980 2026] [:error] [pid 16630:tid 16653] [client 20.251.32.17:13396] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adVwsCjfVAkPG-jgJEp2KwAAARU"]
[Wed Apr 08 05:01:36.790436 2026] [:error] [pid 47626:tid 47670] [client 20.251.32.17:13714] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adVwsKjWI8TWtHx2sdbyyAAAAEI"]
[Wed Apr 08 05:01:37.308806 2026] [:error] [pid 16630:tid 16646] [client 20.251.32.17:15719] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adVwsSjfVAkPG-jgJEp2MgAAAQ4"]
[Wed Apr 08 05:01:37.840227 2026] [:error] [pid 16630:tid 16638] [client 20.251.32.17:48020] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adVwsSjfVAkPG-jgJEp2NAAAAQY"]
[Wed Apr 08 05:01:38.364989 2026] [:error] [pid 47626:tid 47687] [client 20.251.32.17:3962] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adVwsqjWI8TWtHx2sdbyzQAAAFM"]
[Wed Apr 08 05:01:38.908195 2026] [:error] [pid 47626:tid 47671] [client 20.251.32.17:3908] [client 20.251.32.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adVwsqjWI8TWtHx2sdbyzwAAAEM"]
[Wed Apr 08 07:55:12.859837 2026] [:error] [pid 16630:tid 16655] [client 43.159.149.56:54082] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adWZYCjfVAkPG-jgJEoK8wAAARc"]
[Wed Apr 08 08:32:25.183118 2026] [:error] [pid 16630:tid 16636] [client 78.137.218.133:3812] [client 78.137.218.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.137.218.133, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adWiGSjfVAkPG-jgJEonYAAAAQQ"]
[Wed Apr 08 09:25:33.714302 2026] [:error] [pid 47626:tid 47668] [client 103.168.67.159:3336] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adWujajWI8TWtHx2sdZKLQAAAEA"]
[Wed Apr 08 09:25:34.469438 2026] [:error] [pid 47732:tid 47758] [client 103.168.67.159:3922] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adWujom4N5QW9Mh7G127_gAAANg"]
[Wed Apr 08 09:25:35.167250 2026] [:error] [pid 47627:tid 47700] [client 103.168.67.159:4414] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adWuj3Oljf1Quv_kDjn0rwAAAIE"]
[Wed Apr 08 09:25:35.898395 2026] [:error] [pid 16630:tid 16632] [client 103.168.67.159:5014] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adWujyjfVAkPG-jgJEpRGAAAAQA"]
[Wed Apr 08 09:25:36.619516 2026] [:error] [pid 47625:tid 47650] [client 103.168.67.159:5554] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dashboard"] [unique_id "adWukCVuHyNWzZlE8PA2-QAAABA"]
[Wed Apr 08 09:25:37.322577 2026] [:error] [pid 47625:tid 47640] [client 103.168.67.159:6020] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dashboard"] [unique_id "adWukSVuHyNWzZlE8PA3BAAAAAY"]
[Wed Apr 08 09:25:38.032768 2026] [:error] [pid 47732:tid 47746] [client 103.168.67.159:6560] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dashboard"] [unique_id "adWukom4N5QW9Mh7G128PwAAAMw"]
[Wed Apr 08 09:25:38.735879 2026] [:error] [pid 47626:tid 47677] [client 103.168.67.159:7028] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dashboard"] [unique_id "adWukqjWI8TWtHx2sdZKXgAAAEk"]
[Wed Apr 08 11:50:32.955979 2026] [:error] [pid 47732:tid 47753] [client 173.239.214.60:28589] [client 173.239.214.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adXQiIm4N5QW9Mh7G132JQAAANM"]
[Wed Apr 08 14:35:31.818085 2026] [:error] [pid 35642:tid 35657] [client 124.156.157.91:33188] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adX3Mw-CqryxdEs5DN-BQQAAAE0"]
[Wed Apr 08 20:53:57.458897 2026] [:error] [pid 12453:tid 12462] [client 43.131.39.179:59760] [client 43.131.39.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adZP5RjtW7S6XsLPvrQsNQAAAIc"]
[Wed Apr 08 21:56:25.451485 2026] [:error] [pid 7047:tid 7071] [client 51.107.219.233:63890] [client 51.107.219.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adZeieNh3oGO3pKiCzw5CQAAAZY"]
[Wed Apr 08 21:56:28.727398 2026] [:error] [pid 12453:tid 12456] [client 51.107.219.233:64449] [client 51.107.219.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adZejBjtW7S6XsLPvrRJvQAAAIE"]
[Thu Apr 09 02:06:38.386482 2026] [:error] [pid 22056:tid 22082] [client 20.205.10.248:3846] [client 20.205.10.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "adaZLmQ3CidOGkmVXZhJLQAAANg"]
[Thu Apr 09 02:06:38.948655 2026] [:error] [pid 40053:tid 40080] [client 20.205.10.248:3861] [client 20.205.10.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "adaZLtdyKTqfO6aiQ6UaIQAAABY"]
[Thu Apr 09 02:06:39.503141 2026] [:error] [pid 22056:tid 22080] [client 20.205.10.248:4011] [client 20.205.10.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "adaZL2Q3CidOGkmVXZhJNAAAANY"]
[Thu Apr 09 02:06:39.994694 2026] [:error] [pid 40055:tid 40144] [client 20.205.10.248:4070] [client 20.205.10.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "adaZL3_5SjAJycOw5k_O6gAAAI4"]
[Thu Apr 09 05:43:53.523251 2026] [:error] [pid 20536:tid 20577] [client 110.166.71.39:35001] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adbMGcPqyUJM1s3YpIYfNwAAAEY"]
[Thu Apr 09 08:32:07.759157 2026] [:error] [pid 22627:tid 22644] [client 20.63.32.44:1208] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adbzh_r8glsF_jKQpr6MRAAAAQ4"]
[Thu Apr 09 08:32:08.583671 2026] [:error] [pid 20535:tid 20563] [client 20.63.32.44:60684] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adbziAWiD9hWnEUHWdOInwAAABM"]
[Thu Apr 09 08:32:09.410834 2026] [:error] [pid 20535:tid 20562] [client 20.63.32.44:63244] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adbziQWiD9hWnEUHWdOIpQAAABI"]
[Thu Apr 09 08:32:10.273327 2026] [:error] [pid 20641:tid 20654] [client 20.63.32.44:63265] [client 20.63.32.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adbzim3LksBSF-6rlka0-QAAAMk"]
[Thu Apr 09 13:29:45.465330 2026] [:error] [pid 24927:tid 24951] [client 20.205.10.248:7164] [client 20.205.10.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "adc5STXObuzEuw8mNJtX6gAAARU"]
[Thu Apr 09 13:29:46.939252 2026] [:error] [pid 24516:tid 24570] [client 20.205.10.248:7253] [client 20.205.10.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "adc5SthW7vSS-UkeWCXsLQAAAFc"]
[Thu Apr 09 13:29:47.456482 2026] [:error] [pid 24624:tid 24645] [client 20.205.10.248:2717] [client 20.205.10.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "adc5S-4Jn-WvK1ZBTvhnwwAAANM"]
[Thu Apr 09 13:29:47.929363 2026] [:error] [pid 24624:tid 24649] [client 20.205.10.248:5322] [client 20.205.10.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "adc5S-4Jn-WvK1ZBTvhnxgAAANc"]
[Thu Apr 09 13:29:48.403642 2026] [:error] [pid 24517:tid 24592] [client 20.205.10.248:1348] [client 20.205.10.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "adc5THboYEn2ZFM_PS86XAAAAJI"]
[Thu Apr 09 15:51:57.906704 2026] [:error] [pid 24515:tid 24543] [client 43.163.95.253:36974] [client 43.163.95.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "addana1OMnvM2fMnB1NJDgAAABg"]
[Thu Apr 09 16:47:04.547641 2026] [:error] [pid 18477:tid 18496] [client 20.199.96.18:64253] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxx.php"] [unique_id "addniMDe826HlFeoLPJLLgAAAVE"]
[Thu Apr 09 16:47:05.127010 2026] [:error] [pid 20837:tid 20855] [client 20.199.96.18:64809] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxx.php"] [unique_id "addnifSL71FHZkjrGzO1jQAAAZA"]
[Thu Apr 09 16:47:05.860597 2026] [:error] [pid 24516:tid 24561] [client 20.199.96.18:63567] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxx.php"] [unique_id "addnidhW7vSS-UkeWCUM6QAAAE4"]
[Thu Apr 09 16:47:06.685281 2026] [:error] [pid 24927:tid 24944] [client 20.199.96.18:64895] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-cxx.php"] [unique_id "addnijXObuzEuw8mNJuzJgAAAQ4"]
[Thu Apr 09 16:47:07.225644 2026] [:error] [pid 24927:tid 24937] [client 20.199.96.18:64247] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "addnizXObuzEuw8mNJuzKQAAAQc"]
[Thu Apr 09 16:47:07.887371 2026] [:error] [pid 24516:tid 24547] [client 20.199.96.18:63505] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "addni9hW7vSS-UkeWCUM7wAAAEA"]
[Thu Apr 09 16:47:08.684056 2026] [:error] [pid 24516:tid 24555] [client 20.199.96.18:59460] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "addnjNhW7vSS-UkeWCUM8AAAAEg"]
[Thu Apr 09 16:47:09.185511 2026] [:error] [pid 24516:tid 24566] [client 20.199.96.18:64245] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "addnjdhW7vSS-UkeWCUM8gAAAFM"]
[Thu Apr 09 16:47:09.694068 2026] [:error] [pid 24516:tid 24557] [client 20.199.96.18:59395] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "addnjdhW7vSS-UkeWCUM9QAAAEo"]
[Thu Apr 09 16:47:10.219739 2026] [:error] [pid 24516:tid 24559] [client 20.199.96.18:60184] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "addnjthW7vSS-UkeWCUM9gAAAEw"]
[Thu Apr 09 16:47:10.790433 2026] [:error] [pid 24517:tid 24598] [client 20.199.96.18:60239] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "addnjnboYEn2ZFM_PS9kSwAAAJg"]
[Thu Apr 09 16:47:11.456581 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:63552] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "addnjzXObuzEuw8mNJuzLwAAAQI"]
[Thu Apr 09 16:47:12.029892 2026] [:error] [pid 24516:tid 24553] [client 20.199.96.18:59488] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "addnkNhW7vSS-UkeWCUM_AAAAEY"]
[Thu Apr 09 16:47:13.125956 2026] [:error] [pid 24516:tid 24547] [client 20.199.96.18:64218] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "addnkdhW7vSS-UkeWCUM_gAAAEA"]
[Thu Apr 09 16:47:13.864138 2026] [:error] [pid 24517:tid 24578] [client 20.199.96.18:64787] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "addnkXboYEn2ZFM_PS9kTQAAAIQ"]
[Thu Apr 09 16:47:14.499683 2026] [:error] [pid 24927:tid 24936] [client 20.199.96.18:64826] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "addnkjXObuzEuw8mNJuzMgAAAQY"]
[Thu Apr 09 16:47:15.508093 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:64236] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "addnkzXObuzEuw8mNJuzNgAAAQg"]
[Thu Apr 09 16:47:16.290956 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:57921] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "addnlK1OMnvM2fMnB1NXfQAAABU"]
[Thu Apr 09 16:47:16.908007 2026] [:error] [pid 24516:tid 24569] [client 20.199.96.18:59500] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "addnlNhW7vSS-UkeWCUNAgAAAFY"]
[Thu Apr 09 16:47:18.177827 2026] [:error] [pid 24927:tid 24939] [client 20.199.96.18:63583] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "addnljXObuzEuw8mNJuzOgAAAQk"]
[Thu Apr 09 16:47:18.931032 2026] [:error] [pid 20837:tid 20844] [client 20.199.96.18:63606] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "addnlvSL71FHZkjrGzO1kQAAAYU"]
[Thu Apr 09 16:47:20.102481 2026] [:error] [pid 24515:tid 24529] [client 20.199.96.18:60190] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "addnmK1OMnvM2fMnB1NXiQAAAAo"]
[Thu Apr 09 16:47:20.775197 2026] [:error] [pid 24927:tid 24948] [client 20.199.96.18:60283] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "addnmDXObuzEuw8mNJuzOwAAARI"]
[Thu Apr 09 16:47:21.625799 2026] [:error] [pid 18477:tid 18487] [client 20.199.96.18:64797] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "addnmcDe826HlFeoLPJLMwAAAUg"]
[Thu Apr 09 16:47:22.266924 2026] [:error] [pid 24517:tid 24591] [client 20.199.96.18:64869] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "addnmnboYEn2ZFM_PS9kVQAAAJE"]
[Thu Apr 09 16:47:22.851899 2026] [:error] [pid 24927:tid 24947] [client 20.199.96.18:59422] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "addnmjXObuzEuw8mNJuzPwAAARE"]
[Thu Apr 09 16:47:23.560347 2026] [:error] [pid 24927:tid 24936] [client 20.199.96.18:63497] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "addnmzXObuzEuw8mNJuzQQAAAQY"]
[Thu Apr 09 16:47:24.229903 2026] [:error] [pid 24927:tid 24940] [client 20.199.96.18:63607] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "addnnDXObuzEuw8mNJuzRQAAAQo"]
[Thu Apr 09 16:47:24.838826 2026] [:error] [pid 24927:tid 24952] [client 20.199.96.18:64200] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "addnnDXObuzEuw8mNJuzSAAAARY"]
[Thu Apr 09 16:47:25.414802 2026] [:error] [pid 24517:tid 24576] [client 20.199.96.18:59407] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "addnnXboYEn2ZFM_PS9kVwAAAII"]
[Thu Apr 09 16:47:26.167170 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:64871] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "addnnjXObuzEuw8mNJuzTgAAAQI"]
[Thu Apr 09 16:47:26.781158 2026] [:error] [pid 24927:tid 24953] [client 20.199.96.18:60191] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "addnnjXObuzEuw8mNJuzUQAAARc"]
[Thu Apr 09 16:47:27.336073 2026] [:error] [pid 18477:tid 18490] [client 20.199.96.18:59481] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "addnn8De826HlFeoLPJLOgAAAUs"]
[Thu Apr 09 16:47:28.169831 2026] [:error] [pid 24927:tid 24943] [client 20.199.96.18:59430] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "addnoDXObuzEuw8mNJuzVAAAAQ0"]
[Thu Apr 09 16:47:28.940201 2026] [:error] [pid 24927:tid 24944] [client 20.199.96.18:59396] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "addnoDXObuzEuw8mNJuzVgAAAQ4"]
[Thu Apr 09 16:47:29.511044 2026] [:error] [pid 20837:tid 20842] [client 20.199.96.18:63566] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "addnofSL71FHZkjrGzO1lQAAAYM"]
[Thu Apr 09 16:47:30.222075 2026] [:error] [pid 24515:tid 24524] [client 20.199.96.18:60214] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "addnoq1OMnvM2fMnB1NXkAAAAAU"]
[Thu Apr 09 16:47:30.878814 2026] [:error] [pid 18477:tid 18500] [client 20.199.96.18:64781] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "addnosDe826HlFeoLPJLRAAAAVU"]
[Thu Apr 09 16:47:32.453468 2026] [:error] [pid 24927:tid 24947] [client 20.199.96.18:60180] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "addnpDXObuzEuw8mNJuzWQAAARE"]
[Thu Apr 09 16:47:33.094224 2026] [:error] [pid 24624:tid 24638] [client 20.199.96.18:64150] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "addnpe4Jn-WvK1ZBTvid7QAAAMw"]
[Thu Apr 09 16:47:33.712412 2026] [:error] [pid 24927:tid 24952] [client 20.199.96.18:63613] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "addnpTXObuzEuw8mNJuzXQAAARY"]
[Thu Apr 09 16:47:34.301711 2026] [:error] [pid 18477:tid 18488] [client 20.199.96.18:64162] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "addnpsDe826HlFeoLPJLTwAAAUk"]
[Thu Apr 09 16:47:35.217452 2026] [:error] [pid 24624:tid 24644] [client 20.199.96.18:64812] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "addnp-4Jn-WvK1ZBTvid7gAAANI"]
[Thu Apr 09 16:47:35.943356 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:64195] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "addnpzXObuzEuw8mNJuzYAAAAQI"]
[Thu Apr 09 16:47:36.438709 2026] [:error] [pid 24624:tid 24627] [client 20.199.96.18:60272] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "addnqO4Jn-WvK1ZBTvid8gAAAME"]
[Thu Apr 09 16:47:36.956814 2026] [:error] [pid 24624:tid 24641] [client 20.199.96.18:59415] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "addnqO4Jn-WvK1ZBTvid8wAAAM8"]
[Thu Apr 09 16:47:37.780745 2026] [:error] [pid 24927:tid 24941] [client 20.199.96.18:64168] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "addnqTXObuzEuw8mNJuzYQAAAQs"]
[Thu Apr 09 16:47:38.568215 2026] [:error] [pid 24927:tid 24934] [client 20.199.96.18:60209] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "addnqjXObuzEuw8mNJuzYwAAAQQ"]
[Thu Apr 09 16:47:39.343176 2026] [:error] [pid 18477:tid 18482] [client 20.199.96.18:59446] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "addnq8De826HlFeoLPJLVwAAAUM"]
[Thu Apr 09 16:47:40.128278 2026] [:error] [pid 24927:tid 24948] [client 20.199.96.18:63591] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "addnrDXObuzEuw8mNJuzZgAAARI"]
[Thu Apr 09 16:47:40.643687 2026] [:error] [pid 24927:tid 24939] [client 20.199.96.18:63555] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "addnrDXObuzEuw8mNJuzagAAAQk"]
[Thu Apr 09 16:47:41.132891 2026] [:error] [pid 24517:tid 24580] [client 20.199.96.18:64788] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "addnrXboYEn2ZFM_PS9kXAAAAIY"]
[Thu Apr 09 16:47:41.715332 2026] [:error] [pid 24517:tid 24583] [client 20.199.96.18:59478] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "addnrXboYEn2ZFM_PS9kXwAAAIk"]
[Thu Apr 09 16:47:42.834843 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:59515] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "addnrjXObuzEuw8mNJuzawAAAQg"]
[Thu Apr 09 16:47:43.454364 2026] [:error] [pid 24515:tid 24542] [client 20.199.96.18:57876] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "addnr61OMnvM2fMnB1NXlQAAABc"]
[Thu Apr 09 16:47:44.573377 2026] [:error] [pid 24927:tid 24946] [client 20.199.96.18:60236] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "addnsDXObuzEuw8mNJuzcAAAARA"]
[Thu Apr 09 16:47:45.508684 2026] [:error] [pid 18477:tid 18503] [client 20.199.96.18:64197] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "addnscDe826HlFeoLPJLXwAAAVg"]
[Thu Apr 09 16:47:46.110980 2026] [:error] [pid 18477:tid 18483] [client 20.199.96.18:64187] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "addnssDe826HlFeoLPJLYQAAAUQ"]
[Thu Apr 09 16:47:46.710537 2026] [:error] [pid 24927:tid 24943] [client 20.199.96.18:64161] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "addnsjXObuzEuw8mNJuzdwAAAQ0"]
[Thu Apr 09 16:47:47.387072 2026] [:error] [pid 24927:tid 24937] [client 20.199.96.18:60266] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "addnszXObuzEuw8mNJuzeQAAAQc"]
[Thu Apr 09 16:47:47.946180 2026] [:error] [pid 24516:tid 24550] [client 20.199.96.18:60224] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "addns9hW7vSS-UkeWCUNHQAAAEM"]
[Thu Apr 09 16:47:48.553109 2026] [:error] [pid 24516:tid 24560] [client 20.199.96.18:59461] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "addntNhW7vSS-UkeWCUNIAAAAE0"]
[Thu Apr 09 16:47:49.095385 2026] [:error] [pid 24515:tid 24519] [client 20.199.96.18:60219] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "addnta1OMnvM2fMnB1NXmgAAAAA"]
[Thu Apr 09 16:47:49.693919 2026] [:error] [pid 24517:tid 24593] [client 20.199.96.18:59456] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "addntXboYEn2ZFM_PS9kYAAAAJM"]
[Thu Apr 09 16:47:50.224762 2026] [:error] [pid 24516:tid 24569] [client 20.199.96.18:60287] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "addntthW7vSS-UkeWCUNIwAAAFY"]
[Thu Apr 09 16:47:50.883649 2026] [:error] [pid 24516:tid 24561] [client 20.199.96.18:64130] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "addntthW7vSS-UkeWCUNJgAAAE4"]
[Thu Apr 09 16:47:51.595202 2026] [:error] [pid 24624:tid 24629] [client 20.199.96.18:59462] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "addnt-4Jn-WvK1ZBTvid9gAAAMM"]
[Thu Apr 09 16:47:52.135097 2026] [:error] [pid 24517:tid 24591] [client 20.199.96.18:64206] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "addnuHboYEn2ZFM_PS9kZAAAAJE"]
[Thu Apr 09 16:47:53.103956 2026] [:error] [pid 24517:tid 24587] [client 20.199.96.18:64183] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "addnuXboYEn2ZFM_PS9kZgAAAI0"]
[Thu Apr 09 16:47:53.696512 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:63614] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "addnua1OMnvM2fMnB1NXoAAAAA8"]
[Thu Apr 09 16:47:54.264690 2026] [:error] [pid 20837:tid 20858] [client 20.199.96.18:63544] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "addnuvSL71FHZkjrGzO1oQAAAZM"]
[Thu Apr 09 16:47:55.015707 2026] [:error] [pid 24517:tid 24576] [client 20.199.96.18:60269] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "addnu3boYEn2ZFM_PS9kZwAAAII"]
[Thu Apr 09 16:47:55.749880 2026] [:error] [pid 24624:tid 24644] [client 20.199.96.18:59452] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "addnu-4Jn-WvK1ZBTvid-wAAANI"]
[Thu Apr 09 16:47:56.352398 2026] [:error] [pid 24624:tid 24639] [client 20.199.96.18:64170] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "addnvO4Jn-WvK1ZBTvid_QAAAM0"]
[Thu Apr 09 16:47:57.198059 2026] [:error] [pid 18477:tid 18493] [client 20.199.96.18:63576] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "addnvcDe826HlFeoLPJLZgAAAU4"]
[Thu Apr 09 16:47:57.709454 2026] [:error] [pid 20837:tid 20848] [client 20.199.96.18:64893] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "addnvfSL71FHZkjrGzO1rAAAAYk"]
[Thu Apr 09 16:47:58.337026 2026] [:error] [pid 18477:tid 18479] [client 20.199.96.18:64861] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "addnvsDe826HlFeoLPJLZwAAAUA"]
[Thu Apr 09 16:47:58.930405 2026] [:error] [pid 18477:tid 18487] [client 20.199.96.18:63540] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "addnvsDe826HlFeoLPJLawAAAUg"]
[Thu Apr 09 16:47:59.653844 2026] [:error] [pid 18477:tid 18500] [client 20.199.96.18:60169] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "addnv8De826HlFeoLPJLbgAAAVU"]
[Thu Apr 09 16:48:00.344425 2026] [:error] [pid 18477:tid 18502] [client 20.199.96.18:59505] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "addnwMDe826HlFeoLPJLcgAAAVc"]
[Thu Apr 09 16:48:01.056324 2026] [:error] [pid 18477:tid 18492] [client 20.199.96.18:64158] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "addnwcDe826HlFeoLPJLdQAAAU0"]
[Thu Apr 09 16:48:01.586046 2026] [:error] [pid 18477:tid 18499] [client 20.199.96.18:59475] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "addnwcDe826HlFeoLPJLeAAAAVQ"]
[Thu Apr 09 16:48:02.211022 2026] [:error] [pid 18477:tid 18486] [client 20.199.96.18:59421] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "addnwsDe826HlFeoLPJLeQAAAUc"]
[Thu Apr 09 16:48:02.880308 2026] [:error] [pid 24624:tid 24641] [client 20.199.96.18:64884] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "addnwu4Jn-WvK1ZBTvieAAAAAM8"]
[Thu Apr 09 16:48:03.906773 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:64202] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "addnw61OMnvM2fMnB1NXpAAAABQ"]
[Thu Apr 09 16:48:58.861647 2026] [:error] [pid 18477:tid 18493] [client 20.199.96.18:57885] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "addn-sDe826HlFeoLPJL0wAAAU4"]
[Thu Apr 09 16:48:59.546244 2026] [:error] [pid 24515:tid 24528] [client 20.199.96.18:59510] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "addn-61OMnvM2fMnB1NX0gAAAAk"]
[Thu Apr 09 16:49:00.350411 2026] [:error] [pid 18477:tid 18485] [client 20.199.96.18:64169] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "addn_MDe826HlFeoLPJL1QAAAUY"]
[Thu Apr 09 16:49:01.164585 2026] [:error] [pid 24927:tid 24934] [client 20.199.96.18:64210] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "addn_TXObuzEuw8mNJuz5QAAAQQ"]
[Thu Apr 09 16:49:02.478866 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:56062] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "addn_jXObuzEuw8mNJuz6gAAARU"]
[Thu Apr 09 16:49:03.760569 2026] [:error] [pid 24927:tid 24942] [client 20.199.96.18:63592] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "addn_zXObuzEuw8mNJuz6wAAAQw"]
[Thu Apr 09 16:49:04.587928 2026] [:error] [pid 24516:tid 24562] [client 20.199.96.18:60256] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "addoANhW7vSS-UkeWCUNTQAAAE8"]
[Thu Apr 09 16:49:05.330285 2026] [:error] [pid 20837:tid 20860] [client 20.199.96.18:60164] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "addoAfSL71FHZkjrGzO16AAAAZU"]
[Thu Apr 09 16:49:06.125278 2026] [:error] [pid 24516:tid 24566] [client 20.199.96.18:63568] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "addoAthW7vSS-UkeWCUNTgAAAFM"]
[Thu Apr 09 16:49:06.960111 2026] [:error] [pid 24927:tid 24950] [client 20.199.96.18:63582] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "addoAjXObuzEuw8mNJuz7AAAARQ"]
[Thu Apr 09 16:49:07.504442 2026] [:error] [pid 18477:tid 18500] [client 20.199.96.18:64223] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "addoA8De826HlFeoLPJL3AAAAVU"]
[Thu Apr 09 16:49:08.203969 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:59494] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "addoBPSL71FHZkjrGzO16wAAAYw"]
[Thu Apr 09 16:49:08.787296 2026] [:error] [pid 24516:tid 24569] [client 20.199.96.18:64209] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "addoBNhW7vSS-UkeWCUNUAAAAFY"]
[Thu Apr 09 16:49:09.384189 2026] [:error] [pid 18477:tid 18492] [client 20.199.96.18:64227] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "addoBcDe826HlFeoLPJL4QAAAU0"]
[Thu Apr 09 16:49:10.856486 2026] [:error] [pid 18477:tid 18503] [client 20.199.96.18:59394] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "addoBsDe826HlFeoLPJL4wAAAVg"]
[Thu Apr 09 16:49:12.035714 2026] [:error] [pid 24516:tid 24557] [client 20.199.96.18:59402] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "addoCNhW7vSS-UkeWCUNUQAAAEo"]
[Thu Apr 09 16:49:12.618082 2026] [:error] [pid 24927:tid 24934] [client 20.199.96.18:60282] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "addoCDXObuzEuw8mNJuz9AAAAQQ"]
[Thu Apr 09 16:49:13.182046 2026] [:error] [pid 18477:tid 18498] [client 20.199.96.18:59466] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "addoCcDe826HlFeoLPJL6AAAAVM"]
[Thu Apr 09 16:49:13.905775 2026] [:error] [pid 18477:tid 18484] [client 20.199.96.18:64881] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "addoCcDe826HlFeoLPJL6gAAAUU"]
[Thu Apr 09 16:49:14.455098 2026] [:error] [pid 18477:tid 18485] [client 20.199.96.18:63499] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "addoCsDe826HlFeoLPJL7wAAAUY"]
[Thu Apr 09 16:49:15.020612 2026] [:error] [pid 24927:tid 24950] [client 20.199.96.18:64785] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "addoCzXObuzEuw8mNJuz_QAAARQ"]
[Thu Apr 09 16:49:15.994397 2026] [:error] [pid 18477:tid 18481] [client 20.199.96.18:64770] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "addoC8De826HlFeoLPJL8QAAAUI"]
[Thu Apr 09 16:49:17.502968 2026] [:error] [pid 24927:tid 24930] [client 20.199.96.18:59406] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "addoDTXObuzEuw8mNJu0AAAAAQA"]
[Thu Apr 09 16:49:18.129492 2026] [:error] [pid 24516:tid 24551] [client 20.199.96.18:64780] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "addoDthW7vSS-UkeWCUNVQAAAEQ"]
[Thu Apr 09 16:49:19.393677 2026] [:error] [pid 20837:tid 20859] [client 20.199.96.18:63574] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "addoD_SL71FHZkjrGzO19QAAAZQ"]
[Thu Apr 09 16:49:19.924524 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:59418] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "addoDzXObuzEuw8mNJu0AwAAAQg"]
[Thu Apr 09 16:49:20.581491 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:63542] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "addoEK1OMnvM2fMnB1NX3wAAAAE"]
[Thu Apr 09 16:49:21.917435 2026] [:error] [pid 24624:tid 24637] [client 20.199.96.18:57899] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "addoEe4Jn-WvK1ZBTvieKwAAAMs"]
[Thu Apr 09 16:49:22.414866 2026] [:error] [pid 24927:tid 24933] [client 20.199.96.18:59405] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "addoEjXObuzEuw8mNJu0CgAAAQM"]
[Thu Apr 09 16:49:23.006899 2026] [:error] [pid 24515:tid 24526] [client 20.199.96.18:60247] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "addoE61OMnvM2fMnB1NX4wAAAAc"]
[Thu Apr 09 16:49:23.613369 2026] [:error] [pid 24927:tid 24937] [client 20.199.96.18:59509] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "addoEzXObuzEuw8mNJu0EAAAAQc"]
[Thu Apr 09 16:49:24.132942 2026] [:error] [pid 24516:tid 24565] [client 20.199.96.18:59513] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "addoFNhW7vSS-UkeWCUNVwAAAFI"]
[Thu Apr 09 16:49:24.650954 2026] [:error] [pid 24515:tid 24542] [client 20.199.96.18:64189] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "addoFK1OMnvM2fMnB1NX5AAAABc"]
[Thu Apr 09 16:49:25.194487 2026] [:error] [pid 24516:tid 24552] [client 20.199.96.18:59409] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "addoFdhW7vSS-UkeWCUNWwAAAEU"]
[Thu Apr 09 16:49:25.811200 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:59412] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "addoFa1OMnvM2fMnB1NX5wAAAAI"]
[Thu Apr 09 16:49:26.460943 2026] [:error] [pid 24516:tid 24549] [client 20.199.96.18:59437] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "addoFthW7vSS-UkeWCUNYQAAAEI"]
[Thu Apr 09 16:49:27.198023 2026] [:error] [pid 18477:tid 18500] [client 20.199.96.18:59476] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "addoF8De826HlFeoLPJL-gAAAVU"]
[Thu Apr 09 16:49:27.687489 2026] [:error] [pid 18477:tid 18487] [client 20.199.96.18:60228] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "addoF8De826HlFeoLPJL-wAAAUg"]
[Thu Apr 09 16:49:28.349398 2026] [:error] [pid 24624:tid 24626] [client 20.199.96.18:64199] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "addoGO4Jn-WvK1ZBTvieLAAAAMA"]
[Thu Apr 09 16:49:29.039812 2026] [:error] [pid 24624:tid 24650] [client 20.199.96.18:64845] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "addoGe4Jn-WvK1ZBTvieLgAAANg"]
[Thu Apr 09 16:49:30.177642 2026] [:error] [pid 24624:tid 24645] [client 20.199.96.18:64213] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "addoGu4Jn-WvK1ZBTvieMQAAANM"]
[Thu Apr 09 16:49:30.830794 2026] [:error] [pid 24517:tid 24591] [client 20.199.96.18:60220] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "addoGnboYEn2ZFM_PS9kgAAAAJE"]
[Thu Apr 09 16:49:31.495912 2026] [:error] [pid 24516:tid 24556] [client 20.199.96.18:60250] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "addoG9hW7vSS-UkeWCUNZQAAAEk"]
[Thu Apr 09 16:49:32.225682 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:60200] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "addoHK1OMnvM2fMnB1NX9AAAABU"]
[Thu Apr 09 16:49:32.924384 2026] [:error] [pid 24515:tid 24531] [client 20.199.96.18:56670] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "addoHK1OMnvM2fMnB1NX9gAAAAw"]
[Thu Apr 09 16:49:33.868119 2026] [:error] [pid 20837:tid 20848] [client 20.199.96.18:64177] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "addoHfSL71FHZkjrGzO1_gAAAYk"]
[Thu Apr 09 16:49:34.491775 2026] [:error] [pid 20837:tid 20843] [client 20.199.96.18:60251] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "addoHvSL71FHZkjrGzO2AAAAAYQ"]
[Thu Apr 09 16:49:35.291010 2026] [:error] [pid 24515:tid 24533] [client 20.199.96.18:60286] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "addoH61OMnvM2fMnB1NX-gAAAA4"]
[Thu Apr 09 16:49:35.766412 2026] [:error] [pid 24927:tid 24930] [client 20.199.96.18:63519] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "addoHzXObuzEuw8mNJu0HQAAAQA"]
[Thu Apr 09 16:49:36.266982 2026] [:error] [pid 24517:tid 24586] [client 20.199.96.18:64249] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "addoIHboYEn2ZFM_PS9khAAAAIw"]
[Thu Apr 09 16:49:36.919828 2026] [:error] [pid 18477:tid 18485] [client 20.199.96.18:64834] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "addoIMDe826HlFeoLPJL_AAAAUY"]
[Thu Apr 09 16:49:37.515206 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:59440] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "addoITXObuzEuw8mNJu0JQAAARU"]
[Thu Apr 09 16:49:38.221079 2026] [:error] [pid 24927:tid 24931] [client 20.199.96.18:64152] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "addoIjXObuzEuw8mNJu0JwAAAQE"]
[Thu Apr 09 16:49:38.737724 2026] [:error] [pid 18477:tid 18488] [client 20.199.96.18:64888] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "addoIsDe826HlFeoLPJMBAAAAUk"]
[Thu Apr 09 16:49:39.323316 2026] [:error] [pid 24515:tid 24542] [client 20.199.96.18:60211] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "addoI61OMnvM2fMnB1NYAQAAABc"]
[Thu Apr 09 16:49:39.916998 2026] [:error] [pid 24515:tid 24540] [client 20.199.96.18:59416] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "addoI61OMnvM2fMnB1NYAwAAABU"]
[Thu Apr 09 16:49:40.545260 2026] [:error] [pid 24516:tid 24566] [client 20.199.96.18:64796] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "addoJNhW7vSS-UkeWCUNagAAAFM"]
[Thu Apr 09 16:49:41.339184 2026] [:error] [pid 24516:tid 24555] [client 20.199.96.18:55988] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "addoJdhW7vSS-UkeWCUNbgAAAEg"]
[Thu Apr 09 16:49:41.846523 2026] [:error] [pid 24517:tid 24580] [client 20.199.96.18:64215] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "addoJXboYEn2ZFM_PS9khgAAAIY"]
[Thu Apr 09 16:49:42.441653 2026] [:error] [pid 18477:tid 18479] [client 20.199.96.18:60279] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "addoJsDe826HlFeoLPJMBgAAAUA"]
[Thu Apr 09 16:49:43.578625 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:59439] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "addoJ61OMnvM2fMnB1NYMQAAAA8"]
[Thu Apr 09 16:49:44.139208 2026] [:error] [pid 24927:tid 24954] [client 20.199.96.18:63600] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "addoKDXObuzEuw8mNJu0LwAAARg"]
[Thu Apr 09 16:49:44.632781 2026] [:error] [pid 24927:tid 24931] [client 20.199.96.18:57875] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "addoKDXObuzEuw8mNJu0MAAAAQE"]
[Thu Apr 09 16:49:45.191937 2026] [:error] [pid 24927:tid 24945] [client 20.199.96.18:63611] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "addoKTXObuzEuw8mNJu0MwAAAQ8"]
[Thu Apr 09 16:49:45.956536 2026] [:error] [pid 20837:tid 20861] [client 20.199.96.18:64862] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "addoKfSL71FHZkjrGzO2BgAAAZY"]
[Thu Apr 09 16:49:46.637846 2026] [:error] [pid 24927:tid 24935] [client 20.199.96.18:63504] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "addoKjXObuzEuw8mNJu0OQAAAQU"]
[Thu Apr 09 16:49:47.405789 2026] [:error] [pid 24516:tid 24556] [client 20.199.96.18:60231] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "addoK9hW7vSS-UkeWCUNcgAAAEk"]
[Thu Apr 09 16:49:48.060719 2026] [:error] [pid 24927:tid 24942] [client 20.199.96.18:56585] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "addoLDXObuzEuw8mNJu0OwAAAQw"]
[Thu Apr 09 16:49:48.972372 2026] [:error] [pid 24515:tid 24543] [client 20.199.96.18:57962] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "addoLK1OMnvM2fMnB1NYOgAAABg"]
[Thu Apr 09 16:49:49.560492 2026] [:error] [pid 24927:tid 24943] [client 20.199.96.18:60274] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "addoLTXObuzEuw8mNJu0PwAAAQ0"]
[Thu Apr 09 16:49:50.059361 2026] [:error] [pid 24515:tid 24526] [client 20.199.96.18:64248] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "addoLq1OMnvM2fMnB1NYPQAAAAc"]
[Thu Apr 09 16:49:50.639332 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:59443] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "addoLjXObuzEuw8mNJu0QwAAARU"]
[Thu Apr 09 16:49:51.566675 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:60167] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "addoLzXObuzEuw8mNJu0RgAAAQg"]
[Thu Apr 09 16:49:52.569182 2026] [:error] [pid 24927:tid 24950] [client 20.199.96.18:55319] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "addoMDXObuzEuw8mNJu0RwAAARQ"]
[Thu Apr 09 16:49:53.190882 2026] [:error] [pid 24516:tid 24553] [client 20.199.96.18:59497] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "addoMdhW7vSS-UkeWCUNdgAAAEY"]
[Thu Apr 09 16:49:53.733032 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:55422] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "addoMTXObuzEuw8mNJu0TgAAAQI"]
[Thu Apr 09 16:49:54.453417 2026] [:error] [pid 24517:tid 24591] [client 20.199.96.18:64221] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "addoMnboYEn2ZFM_PS9kjAAAAJE"]
[Thu Apr 09 16:49:55.199895 2026] [:error] [pid 24516:tid 24548] [client 20.199.96.18:56679] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "addoM9hW7vSS-UkeWCUNdwAAAEE"]
[Thu Apr 09 16:49:55.775050 2026] [:error] [pid 24624:tid 24649] [client 20.199.96.18:59433] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "addoM-4Jn-WvK1ZBTviefAAAANc"]
[Thu Apr 09 16:49:56.619409 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:64846] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "addoNDXObuzEuw8mNJu0UwAAAQg"]
[Thu Apr 09 16:49:57.539723 2026] [:error] [pid 20837:tid 20841] [client 20.199.96.18:64865] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "addoNfSL71FHZkjrGzO2EwAAAYI"]
[Thu Apr 09 16:50:05.347951 2026] [:error] [pid 24927:tid 24937] [client 20.199.96.18:60265] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "addoPTXObuzEuw8mNJu0jQAAAQc"]
[Thu Apr 09 16:50:05.878632 2026] [:error] [pid 20837:tid 20847] [client 20.199.96.18:63589] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "addoPfSL71FHZkjrGzO2FgAAAYg"]
[Thu Apr 09 16:50:06.445985 2026] [:error] [pid 18477:tid 18495] [client 20.199.96.18:64808] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "addoPsDe826HlFeoLPJMHgAAAVA"]
[Thu Apr 09 16:50:07.034683 2026] [:error] [pid 24516:tid 24566] [client 20.199.96.18:64175] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "addoP9hW7vSS-UkeWCUNeAAAAFM"]
[Thu Apr 09 16:50:07.697113 2026] [:error] [pid 24515:tid 24532] [client 20.199.96.18:63577] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "addoP61OMnvM2fMnB1NYVgAAAA0"]
[Thu Apr 09 16:50:08.375613 2026] [:error] [pid 18477:tid 18479] [client 20.199.96.18:55326] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "addoQMDe826HlFeoLPJMIwAAAUA"]
[Thu Apr 09 16:50:09.177988 2026] [:error] [pid 20837:tid 20839] [client 20.199.96.18:55964] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "addoQfSL71FHZkjrGzO2FwAAAYA"]
[Thu Apr 09 16:50:09.824094 2026] [:error] [pid 18477:tid 18482] [client 20.199.96.18:59504] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "addoQcDe826HlFeoLPJMKAAAAUM"]
[Thu Apr 09 16:50:10.634975 2026] [:error] [pid 24624:tid 24648] [client 20.199.96.18:60241] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "addoQu4Jn-WvK1ZBTviehQAAANY"]
[Thu Apr 09 16:50:11.559529 2026] [:error] [pid 20837:tid 20840] [client 20.199.96.18:60261] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "addoQ_SL71FHZkjrGzO2GwAAAYE"]
[Thu Apr 09 16:50:12.048255 2026] [:error] [pid 24517:tid 24587] [client 20.199.96.18:59502] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "addoRHboYEn2ZFM_PS9kjwAAAI0"]
[Thu Apr 09 16:50:12.786436 2026] [:error] [pid 24516:tid 24552] [client 20.199.96.18:64166] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "addoRNhW7vSS-UkeWCUNegAAAEU"]
[Thu Apr 09 16:50:13.411442 2026] [:error] [pid 18477:tid 18498] [client 20.199.96.18:64237] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "addoRcDe826HlFeoLPJMLwAAAVM"]
[Thu Apr 09 16:50:14.192361 2026] [:error] [pid 20837:tid 20851] [client 20.199.96.18:63565] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "addoRvSL71FHZkjrGzO2HAAAAYw"]
[Thu Apr 09 16:50:14.895041 2026] [:error] [pid 24927:tid 24943] [client 20.199.96.18:59498] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "addoRjXObuzEuw8mNJu0ogAAAQ0"]
[Thu Apr 09 16:50:15.707344 2026] [:error] [pid 24927:tid 24935] [client 20.199.96.18:54665] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "addoRzXObuzEuw8mNJu0pwAAAQU"]
[Thu Apr 09 16:50:16.362138 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:60196] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addoSDXObuzEuw8mNJu0qwAAAQg"]
[Thu Apr 09 16:50:16.958734 2026] [:error] [pid 24515:tid 24528] [client 20.199.96.18:60185] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addoSK1OMnvM2fMnB1NYZwAAAAk"]
[Thu Apr 09 16:50:17.484835 2026] [:error] [pid 24927:tid 24953] [client 20.199.96.18:60237] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addoSTXObuzEuw8mNJu0rQAAARc"]
[Thu Apr 09 16:50:18.227724 2026] [:error] [pid 18477:tid 18482] [client 20.199.96.18:64210] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "addoSsDe826HlFeoLPJMMgAAAUM"]
[Thu Apr 09 16:50:18.732558 2026] [:error] [pid 24927:tid 24930] [client 20.199.96.18:55979] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "addoSjXObuzEuw8mNJu0rwAAAQA"]
[Thu Apr 09 16:50:19.461700 2026] [:error] [pid 24624:tid 24631] [client 20.199.96.18:64892] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "addoS-4Jn-WvK1ZBTvieiAAAAMU"]
[Thu Apr 09 16:50:20.600940 2026] [:error] [pid 24517:tid 24592] [client 20.199.96.18:56027] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "addoTHboYEn2ZFM_PS9knAAAAJI"]
[Thu Apr 09 16:50:21.137654 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:57974] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "addoTTXObuzEuw8mNJu0swAAAQg"]
[Thu Apr 09 16:50:21.618261 2026] [:error] [pid 18477:tid 18497] [client 20.199.96.18:56647] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "addoTcDe826HlFeoLPJMNQAAAVI"]
[Thu Apr 09 16:50:22.132340 2026] [:error] [pid 24517:tid 24579] [client 20.199.96.18:64867] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "addoTnboYEn2ZFM_PS9kngAAAIU"]
[Thu Apr 09 16:50:22.752311 2026] [:error] [pid 18477:tid 18480] [client 20.199.96.18:55398] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "addoTsDe826HlFeoLPJMNgAAAUE"]
[Thu Apr 09 16:50:23.330854 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:57978] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "addoT61OMnvM2fMnB1NYbwAAAAY"]
[Thu Apr 09 16:50:23.930955 2026] [:error] [pid 24927:tid 24933] [client 20.199.96.18:60208] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "addoTzXObuzEuw8mNJu0tgAAAQM"]
[Thu Apr 09 16:50:24.560667 2026] [:error] [pid 24515:tid 24522] [client 20.199.96.18:64849] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "addoUK1OMnvM2fMnB1NYcAAAAAM"]
[Thu Apr 09 16:50:25.124119 2026] [:error] [pid 18477:tid 18491] [client 20.199.96.18:64243] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "addoUcDe826HlFeoLPJMOAAAAUw"]
[Thu Apr 09 16:50:25.729623 2026] [:error] [pid 24515:tid 24537] [client 20.199.96.18:57909] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "addoUa1OMnvM2fMnB1NYdAAAABI"]
[Thu Apr 09 16:50:26.257722 2026] [:error] [pid 20837:tid 20844] [client 20.199.96.18:64233] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addoUvSL71FHZkjrGzO2HwAAAYU"]
[Thu Apr 09 16:50:26.826189 2026] [:error] [pid 24515:tid 24531] [client 20.199.96.18:56612] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addoUq1OMnvM2fMnB1NYdwAAAAw"]
[Thu Apr 09 16:50:27.529836 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:59423] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addoU61OMnvM2fMnB1NYfAAAABM"]
[Thu Apr 09 16:50:28.139134 2026] [:error] [pid 24515:tid 24543] [client 20.199.96.18:59518] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "addoVK1OMnvM2fMnB1NYfwAAABg"]
[Thu Apr 09 16:50:29.160495 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:60248] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "addoVa1OMnvM2fMnB1NYgQAAABQ"]
[Thu Apr 09 16:50:29.806576 2026] [:error] [pid 20837:tid 20863] [client 20.199.96.18:60202] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "addoVfSL71FHZkjrGzO2IgAAAZg"]
[Thu Apr 09 16:50:30.442389 2026] [:error] [pid 24624:tid 24632] [client 20.199.96.18:63506] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "addoVu4Jn-WvK1ZBTviekgAAAMY"]
[Thu Apr 09 16:50:31.150215 2026] [:error] [pid 24515:tid 24536] [client 20.199.96.18:55411] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "addoV61OMnvM2fMnB1NYhAAAABE"]
[Thu Apr 09 16:50:31.776044 2026] [:error] [pid 24515:tid 24537] [client 20.199.96.18:55408] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "addoV61OMnvM2fMnB1NYhwAAABI"]
[Thu Apr 09 16:50:32.398676 2026] [:error] [pid 18477:tid 18492] [client 20.199.96.18:57897] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "addoWMDe826HlFeoLPJMOgAAAU0"]
[Thu Apr 09 16:50:33.127830 2026] [:error] [pid 24515:tid 24532] [client 20.199.96.18:59491] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "addoWa1OMnvM2fMnB1NYiwAAAA0"]
[Thu Apr 09 16:50:33.634700 2026] [:error] [pid 20837:tid 20856] [client 20.199.96.18:64807] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "addoWfSL71FHZkjrGzO2KAAAAZE"]
[Thu Apr 09 16:50:34.332993 2026] [:error] [pid 20837:tid 20855] [client 20.199.96.18:59429] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "addoWvSL71FHZkjrGzO2KwAAAZA"]
[Thu Apr 09 16:50:34.844747 2026] [:error] [pid 18477:tid 18498] [client 20.199.96.18:59480] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "addoWsDe826HlFeoLPJMPAAAAVM"]
[Thu Apr 09 16:50:35.506609 2026] [:error] [pid 24515:tid 24539] [client 20.199.96.18:59455] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "addoW61OMnvM2fMnB1NYjgAAABQ"]
[Thu Apr 09 16:50:36.192126 2026] [:error] [pid 24515:tid 24542] [client 20.199.96.18:59473] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "addoXK1OMnvM2fMnB1NYkQAAABc"]
[Thu Apr 09 16:50:37.025554 2026] [:error] [pid 24516:tid 24555] [client 20.199.96.18:55376] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "addoXdhW7vSS-UkeWCUNiQAAAEg"]
[Thu Apr 09 16:50:37.962740 2026] [:error] [pid 18477:tid 18501] [client 20.199.96.18:55997] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "addoXcDe826HlFeoLPJMQQAAAVY"]
[Thu Apr 09 16:50:38.798679 2026] [:error] [pid 20837:tid 20839] [client 20.199.96.18:57866] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "addoXvSL71FHZkjrGzO2OQAAAYA"]
[Thu Apr 09 16:50:39.505080 2026] [:error] [pid 24515:tid 24529] [client 20.199.96.18:60168] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "addoX61OMnvM2fMnB1NYmAAAAAo"]
[Thu Apr 09 16:50:40.575029 2026] [:error] [pid 18477:tid 18503] [client 20.199.96.18:56621] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "addoYMDe826HlFeoLPJMQgAAAVg"]
[Thu Apr 09 16:50:41.415027 2026] [:error] [pid 18477:tid 18480] [client 20.199.96.18:59442] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "addoYcDe826HlFeoLPJMRQAAAUE"]
[Thu Apr 09 16:50:42.027479 2026] [:error] [pid 18477:tid 18499] [client 20.199.96.18:64151] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "addoYsDe826HlFeoLPJMRwAAAVQ"]
[Thu Apr 09 16:50:42.590044 2026] [:error] [pid 18477:tid 18498] [client 20.199.96.18:64235] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "addoYsDe826HlFeoLPJMSQAAAVM"]
[Thu Apr 09 16:50:43.629539 2026] [:error] [pid 18477:tid 18486] [client 20.199.96.18:60263] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "addoY8De826HlFeoLPJMSwAAAUc"]
[Thu Apr 09 16:50:44.223679 2026] [:error] [pid 24515:tid 24530] [client 20.199.96.18:59453] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "addoZK1OMnvM2fMnB1NYnAAAAAs"]
[Thu Apr 09 16:50:45.265722 2026] [:error] [pid 18477:tid 18502] [client 20.199.96.18:63595] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "addoZcDe826HlFeoLPJMTwAAAVc"]
[Thu Apr 09 16:50:46.682984 2026] [:error] [pid 18477:tid 18493] [client 20.199.96.18:59411] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "addoZsDe826HlFeoLPJMVgAAAU4"]
[Thu Apr 09 16:50:47.822094 2026] [:error] [pid 18477:tid 18488] [client 20.199.96.18:64224] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addoZ8De826HlFeoLPJMXgAAAUk"]
[Thu Apr 09 16:50:48.514409 2026] [:error] [pid 18477:tid 18498] [client 20.199.96.18:63493] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addoaMDe826HlFeoLPJMYwAAAVM"]
[Thu Apr 09 16:50:49.483429 2026] [:error] [pid 20837:tid 20843] [client 20.199.96.18:64822] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addoafSL71FHZkjrGzO2PAAAAYQ"]
[Thu Apr 09 16:50:50.144795 2026] [:error] [pid 24515:tid 24537] [client 20.199.96.18:56593] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "addoaq1OMnvM2fMnB1NYnwAAABI"]
[Thu Apr 09 16:50:50.783169 2026] [:error] [pid 24927:tid 24940] [client 20.199.96.18:64802] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "addoajXObuzEuw8mNJu0wQAAAQo"]
[Thu Apr 09 16:50:51.366311 2026] [:error] [pid 18477:tid 18495] [client 20.199.96.18:63615] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "addoa8De826HlFeoLPJMcAAAAVA"]
[Thu Apr 09 16:50:51.996986 2026] [:error] [pid 18477:tid 18496] [client 20.199.96.18:64833] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "addoa8De826HlFeoLPJMcgAAAVE"]
[Thu Apr 09 16:50:52.984388 2026] [:error] [pid 18477:tid 18492] [client 20.199.96.18:63522] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "addobMDe826HlFeoLPJMdgAAAU0"]
[Thu Apr 09 16:50:54.475357 2026] [:error] [pid 24516:tid 24551] [client 20.199.96.18:59512] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "addobthW7vSS-UkeWCUNkgAAAEQ"]
[Thu Apr 09 16:50:55.079979 2026] [:error] [pid 24624:tid 24629] [client 20.199.96.18:59417] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "addob-4Jn-WvK1ZBTvienAAAAMM"]
[Thu Apr 09 16:50:56.994204 2026] [:error] [pid 24515:tid 24524] [client 20.199.96.18:56693] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "addocK1OMnvM2fMnB1NYpwAAAAU"]
[Thu Apr 09 16:50:57.564616 2026] [:error] [pid 18477:tid 18490] [client 20.199.96.18:64818] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "addoccDe826HlFeoLPJMhgAAAUs"]
[Thu Apr 09 16:50:58.998213 2026] [:error] [pid 18477:tid 18481] [client 20.199.96.18:64778] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "addocsDe826HlFeoLPJMjgAAAUI"]
[Thu Apr 09 16:50:59.533992 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:57912] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "addoczXObuzEuw8mNJu0ywAAAQg"]
[Thu Apr 09 16:51:00.472447 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:64848] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "addodK1OMnvM2fMnB1NYsQAAAAI"]
[Thu Apr 09 16:51:00.971819 2026] [:error] [pid 24515:tid 24528] [client 20.199.96.18:63549] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "addodK1OMnvM2fMnB1NYuQAAAAk"]
[Thu Apr 09 16:51:01.483167 2026] [:error] [pid 24517:tid 24591] [client 20.199.96.18:59474] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "addodXboYEn2ZFM_PS9kuAAAAJE"]
[Thu Apr 09 16:51:02.437050 2026] [:error] [pid 18477:tid 18503] [client 20.199.96.18:57945] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "addodsDe826HlFeoLPJMqgAAAVg"]
[Thu Apr 09 16:51:03.184190 2026] [:error] [pid 24517:tid 24576] [client 20.199.96.18:64226] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "addod3boYEn2ZFM_PS9kuwAAAII"]
[Thu Apr 09 16:51:03.752283 2026] [:error] [pid 24517:tid 24590] [client 20.199.96.18:59398] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "addod3boYEn2ZFM_PS9kvQAAAJA"]
[Thu Apr 09 16:51:04.412928 2026] [:error] [pid 24624:tid 24636] [client 20.199.96.18:60242] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "addoeO4Jn-WvK1ZBTviengAAAMo"]
[Thu Apr 09 16:51:14.209121 2026] [:error] [pid 24515:tid 24534] [client 20.199.96.18:60171] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "addogq1OMnvM2fMnB1NY3QAAAA8"]
[Thu Apr 09 16:51:15.802612 2026] [:error] [pid 18477:tid 18501] [client 20.199.96.18:60188] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "addog8De826HlFeoLPJMvQAAAVY"]
[Thu Apr 09 16:51:16.650574 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:59403] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "addohDXObuzEuw8mNJu07gAAARU"]
[Thu Apr 09 16:51:17.697841 2026] [:error] [pid 24517:tid 24584] [client 20.199.96.18:57933] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "addohXboYEn2ZFM_PS9kxQAAAIo"]
[Thu Apr 09 16:51:18.532232 2026] [:error] [pid 24927:tid 24948] [client 20.199.96.18:60249] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "addohjXObuzEuw8mNJu08QAAARI"]
[Thu Apr 09 16:51:19.128630 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:60160] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "addohzXObuzEuw8mNJu09AAAAQI"]
[Thu Apr 09 16:51:19.854952 2026] [:error] [pid 24516:tid 24561] [client 20.199.96.18:60213] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "addoh9hW7vSS-UkeWCUNswAAAE4"]
[Thu Apr 09 16:51:20.553771 2026] [:error] [pid 24516:tid 24556] [client 20.199.96.18:64774] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "addoiNhW7vSS-UkeWCUNtgAAAEk"]
[Thu Apr 09 16:51:21.247454 2026] [:error] [pid 24515:tid 24521] [client 20.199.96.18:64877] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "addoia1OMnvM2fMnB1NY4AAAAAI"]
[Thu Apr 09 16:51:21.754914 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:59435] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "addoiTXObuzEuw8mNJu0_gAAARU"]
[Thu Apr 09 16:51:25.238543 2026] [:error] [pid 24927:tid 24940] [client 20.199.96.18:64863] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "addojTXObuzEuw8mNJu1BgAAAQo"]
[Thu Apr 09 16:51:26.339893 2026] [:error] [pid 18477:tid 18492] [client 20.199.96.18:55958] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "addojsDe826HlFeoLPJNCAAAAU0"]
[Thu Apr 09 16:51:26.920229 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:64852] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "addojjXObuzEuw8mNJu1CgAAARU"]
[Thu Apr 09 16:51:27.917886 2026] [:error] [pid 20837:tid 20856] [client 20.199.96.18:57915] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "addoj_SL71FHZkjrGzO2UgAAAZE"]
[Thu Apr 09 16:51:28.434030 2026] [:error] [pid 24927:tid 24931] [client 20.199.96.18:57879] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "addokDXObuzEuw8mNJu1DgAAAQE"]
[Thu Apr 09 16:51:29.120717 2026] [:error] [pid 24517:tid 24581] [client 20.199.96.18:64145] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "addokXboYEn2ZFM_PS9k2QAAAIc"]
[Thu Apr 09 16:51:29.807333 2026] [:error] [pid 20837:tid 20855] [client 20.199.96.18:64164] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "addokfSL71FHZkjrGzO2VAAAAZA"]
[Thu Apr 09 16:51:30.934822 2026] [:error] [pid 24515:tid 24528] [client 20.199.96.18:64841] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "addokq1OMnvM2fMnB1NY5gAAAAk"]
[Thu Apr 09 16:51:31.522735 2026] [:error] [pid 24624:tid 24645] [client 20.199.96.18:56008] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "addok-4Jn-WvK1ZBTvie0gAAANM"]
[Thu Apr 09 16:51:32.352247 2026] [:error] [pid 24624:tid 24644] [client 20.199.96.18:57952] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "addolO4Jn-WvK1ZBTvie1QAAANI"]
[Thu Apr 09 16:51:32.962308 2026] [:error] [pid 20837:tid 20843] [client 20.199.96.18:57867] [client 20.199.96.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "addolPSL71FHZkjrGzO2VwAAAYQ"]
[Thu Apr 09 16:51:33.848638 2026] [:error] [pid 24624:tid 24629] [client 20.199.96.18:60285] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "addole4Jn-WvK1ZBTvie2QAAAMM"]
[Thu Apr 09 16:51:34.631222 2026] [:error] [pid 24624:tid 24641] [client 20.199.96.18:60230] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "addolu4Jn-WvK1ZBTvie3AAAAM8"]
[Thu Apr 09 16:51:35.491035 2026] [:error] [pid 18477:tid 18481] [client 20.199.96.18:60189] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "addol8De826HlFeoLPJNIgAAAUI"]
[Thu Apr 09 16:51:36.211167 2026] [:error] [pid 24927:tid 24938] [client 20.199.96.18:63523] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "addomDXObuzEuw8mNJu1HAAAAQg"]
[Thu Apr 09 16:51:37.518018 2026] [:error] [pid 24927:tid 24937] [client 20.199.96.18:64824] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "addomTXObuzEuw8mNJu1JAAAAQc"]
[Thu Apr 09 16:51:38.232145 2026] [:error] [pid 24516:tid 24548] [client 20.199.96.18:64786] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "addomthW7vSS-UkeWCUNzAAAAEE"]
[Thu Apr 09 16:51:38.730281 2026] [:error] [pid 20837:tid 20850] [client 20.199.96.18:64847] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "addomvSL71FHZkjrGzO2XgAAAYs"]
[Thu Apr 09 16:51:39.650758 2026] [:error] [pid 24624:tid 24632] [client 20.199.96.18:63550] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "addom-4Jn-WvK1ZBTvie3wAAAMY"]
[Thu Apr 09 16:51:40.614536 2026] [:error] [pid 24927:tid 24931] [client 20.199.96.18:64143] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "addonDXObuzEuw8mNJu1OgAAAQE"]
[Thu Apr 09 16:51:41.261091 2026] [:error] [pid 24515:tid 24520] [client 20.199.96.18:59431] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "addona1OMnvM2fMnB1NY8wAAAAE"]
[Thu Apr 09 16:51:44.392199 2026] [:error] [pid 24516:tid 24571] [client 20.199.96.18:60173] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "addooNhW7vSS-UkeWCUN7QAAAFg"]
[Thu Apr 09 16:51:45.251899 2026] [:error] [pid 24516:tid 24554] [client 20.199.96.18:63528] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "addoodhW7vSS-UkeWCUN8QAAAEc"]
[Thu Apr 09 16:51:46.148335 2026] [:error] [pid 24515:tid 24535] [client 20.199.96.18:64144] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "addooq1OMnvM2fMnB1NZAwAAABA"]
[Thu Apr 09 16:51:47.132386 2026] [:error] [pid 20837:tid 20849] [client 20.199.96.18:64138] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "addoo_SL71FHZkjrGzO2jgAAAYo"]
[Thu Apr 09 16:51:47.841660 2026] [:error] [pid 24927:tid 24942] [client 20.199.96.18:64812] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "addoozXObuzEuw8mNJu1ZgAAAQw"]
[Thu Apr 09 16:51:49.667655 2026] [:error] [pid 24515:tid 24531] [client 20.199.96.18:64246] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "addopa1OMnvM2fMnB1NZCAAAAAw"]
[Thu Apr 09 16:51:51.358686 2026] [:error] [pid 18477:tid 18484] [client 20.199.96.18:60183] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "addop8De826HlFeoLPJNOQAAAUU"]
[Thu Apr 09 16:51:52.657658 2026] [:error] [pid 24624:tid 24628] [client 20.199.96.18:59410] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "addoqO4Jn-WvK1ZBTvie7gAAAMI"]
[Thu Apr 09 16:51:53.534306 2026] [:error] [pid 24516:tid 24556] [client 20.199.96.18:60277] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "addoqdhW7vSS-UkeWCUN_AAAAEk"]
[Thu Apr 09 16:51:54.232743 2026] [:error] [pid 20837:tid 20862] [client 20.199.96.18:60176] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "addoqvSL71FHZkjrGzO2kwAAAZc"]
[Thu Apr 09 16:51:55.528405 2026] [:error] [pid 24516:tid 24548] [client 20.199.96.18:59446] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "addoq9hW7vSS-UkeWCUOAgAAAEE"]
[Thu Apr 09 16:51:56.721750 2026] [:error] [pid 24927:tid 24942] [client 20.199.96.18:64176] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "addorDXObuzEuw8mNJu1cgAAAQw"]
[Thu Apr 09 16:51:57.959099 2026] [:error] [pid 24927:tid 24946] [client 20.199.96.18:63583] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "addorTXObuzEuw8mNJu1dAAAARA"]
[Thu Apr 09 16:51:58.816426 2026] [:error] [pid 24624:tid 24634] [client 20.199.96.18:59470] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "addoru4Jn-WvK1ZBTvie9QAAAMg"]
[Thu Apr 09 16:51:59.505882 2026] [:error] [pid 24515:tid 24538] [client 20.199.96.18:64128] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "addor61OMnvM2fMnB1NZJAAAABM"]
[Thu Apr 09 16:52:00.055579 2026] [:error] [pid 24517:tid 24594] [client 20.199.96.18:63543] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "addosHboYEn2ZFM_PS9k-AAAAJQ"]
[Thu Apr 09 16:52:00.668311 2026] [:error] [pid 24624:tid 24641] [client 20.199.96.18:59448] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "addosO4Jn-WvK1ZBTvie-AAAAM8"]
[Thu Apr 09 16:52:01.407762 2026] [:error] [pid 18477:tid 18490] [client 20.199.96.18:60271] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "addoscDe826HlFeoLPJNYAAAAUs"]
[Thu Apr 09 16:52:02.201353 2026] [:error] [pid 24516:tid 24551] [client 20.199.96.18:64816] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "addosthW7vSS-UkeWCUODgAAAEQ"]
[Thu Apr 09 16:52:02.823029 2026] [:error] [pid 24927:tid 24944] [client 20.199.96.18:63603] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "addosjXObuzEuw8mNJu1ewAAAQ4"]
[Thu Apr 09 16:52:03.455503 2026] [:error] [pid 24927:tid 24930] [client 20.199.96.18:60269] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "addoszXObuzEuw8mNJu1gQAAAQA"]
[Thu Apr 09 16:52:04.842834 2026] [:error] [pid 24515:tid 24524] [client 20.199.96.18:60187] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "addotK1OMnvM2fMnB1NZLQAAAAU"]
[Thu Apr 09 16:52:05.938187 2026] [:error] [pid 24927:tid 24931] [client 20.199.96.18:64197] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "addotTXObuzEuw8mNJu1iQAAAQE"]
[Thu Apr 09 16:52:07.441287 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:64886] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "addotzXObuzEuw8mNJu1jwAAARU"]
[Thu Apr 09 16:52:08.153877 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:64140] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "addouDXObuzEuw8mNJu1kgAAAQI"]
[Thu Apr 09 16:52:08.946645 2026] [:error] [pid 24927:tid 24944] [client 20.199.96.18:60254] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "addouDXObuzEuw8mNJu1mwAAAQ4"]
[Thu Apr 09 16:52:09.797484 2026] [:error] [pid 18477:tid 18492] [client 20.199.96.18:64195] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "addoucDe826HlFeoLPJNagAAAU0"]
[Thu Apr 09 16:52:10.412448 2026] [:error] [pid 24515:tid 24525] [client 20.199.96.18:59467] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "addouq1OMnvM2fMnB1NZNwAAAAY"]
[Thu Apr 09 16:52:10.972209 2026] [:error] [pid 18477:tid 18496] [client 20.199.96.18:64179] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "addousDe826HlFeoLPJNcAAAAVE"]
[Thu Apr 09 16:52:11.551528 2026] [:error] [pid 20837:tid 20856] [client 20.199.96.18:60270] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "addou_SL71FHZkjrGzO2pAAAAZE"]
[Thu Apr 09 16:52:12.609507 2026] [:error] [pid 18477:tid 18483] [client 20.199.96.18:56644] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "addovMDe826HlFeoLPJNcwAAAUQ"]
[Thu Apr 09 16:52:20.460983 2026] [:error] [pid 24516:tid 24558] [client 20.199.96.18:64784] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "addoxNhW7vSS-UkeWCUOOgAAAEs"]
[Thu Apr 09 16:52:20.992115 2026] [:error] [pid 24517:tid 24576] [client 20.199.96.18:63502] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "addoxHboYEn2ZFM_PS9lEAAAAII"]
[Thu Apr 09 16:52:21.524528 2026] [:error] [pid 24517:tid 24598] [client 20.199.96.18:59451] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "addoxXboYEn2ZFM_PS9lFAAAAJg"]
[Thu Apr 09 16:52:22.032288 2026] [:error] [pid 24516:tid 24561] [client 20.199.96.18:64171] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "addoxthW7vSS-UkeWCUORAAAAE4"]
[Thu Apr 09 16:52:22.550507 2026] [:error] [pid 20837:tid 20853] [client 20.199.96.18:59500] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "addoxvSL71FHZkjrGzO2qwAAAY4"]
[Thu Apr 09 16:52:23.114424 2026] [:error] [pid 24516:tid 24569] [client 20.199.96.18:59456] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "addox9hW7vSS-UkeWCUORQAAAFY"]
[Thu Apr 09 16:52:23.620033 2026] [:error] [pid 20837:tid 20845] [client 20.199.96.18:64837] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "addox_SL71FHZkjrGzO2sgAAAYY"]
[Thu Apr 09 16:52:24.188995 2026] [:error] [pid 20837:tid 20841] [client 20.199.96.18:64815] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "addoyPSL71FHZkjrGzO2twAAAYI"]
[Thu Apr 09 16:52:24.685978 2026] [:error] [pid 24515:tid 24532] [client 20.199.96.18:64214] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "addoyK1OMnvM2fMnB1NZQgAAAA0"]
[Thu Apr 09 16:52:25.185391 2026] [:error] [pid 24517:tid 24579] [client 20.199.96.18:56036] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "addoyXboYEn2ZFM_PS9lHQAAAIU"]
[Thu Apr 09 16:52:25.694891 2026] [:error] [pid 24517:tid 24585] [client 20.199.96.18:64172] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "addoyXboYEn2ZFM_PS9lIAAAAIs"]
[Thu Apr 09 16:52:26.187334 2026] [:error] [pid 20837:tid 20843] [client 20.199.96.18:59488] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "addoyvSL71FHZkjrGzO2uQAAAYQ"]
[Thu Apr 09 16:52:26.746653 2026] [:error] [pid 18477:tid 18498] [client 20.199.96.18:59452] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "addoysDe826HlFeoLPJNiAAAAVM"]
[Thu Apr 09 16:52:27.239360 2026] [:error] [pid 24517:tid 24595] [client 20.199.96.18:63605] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "addoy3boYEn2ZFM_PS9lJQAAAJU"]
[Thu Apr 09 16:52:27.747860 2026] [:error] [pid 24624:tid 24637] [client 20.199.96.18:59471] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "addoy-4Jn-WvK1ZBTvifHgAAAMs"]
[Thu Apr 09 16:52:28.425043 2026] [:error] [pid 18477:tid 18499] [client 20.199.96.18:55945] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "addozMDe826HlFeoLPJNigAAAVQ"]
[Thu Apr 09 16:52:28.993929 2026] [:error] [pid 24624:tid 24648] [client 20.199.96.18:55397] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "addozO4Jn-WvK1ZBTvifIgAAANY"]
[Thu Apr 09 16:52:29.605185 2026] [:error] [pid 24516:tid 24567] [client 20.199.96.18:59492] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "addozdhW7vSS-UkeWCUOTgAAAFQ"]
[Thu Apr 09 16:52:30.179320 2026] [:error] [pid 18477:tid 18491] [client 20.199.96.18:59404] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "addozsDe826HlFeoLPJNjgAAAUw"]
[Thu Apr 09 16:52:30.670865 2026] [:error] [pid 18477:tid 18503] [client 20.199.96.18:56683] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "addozsDe826HlFeoLPJNkQAAAVg"]
[Thu Apr 09 16:52:31.276518 2026] [:error] [pid 18477:tid 18501] [client 20.199.96.18:64797] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "addoz8De826HlFeoLPJNkwAAAVY"]
[Thu Apr 09 16:52:32.136180 2026] [:error] [pid 18477:tid 18484] [client 20.199.96.18:64168] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "addo0MDe826HlFeoLPJNlgAAAUU"]
[Thu Apr 09 16:52:32.698727 2026] [:error] [pid 24927:tid 24951] [client 20.199.96.18:63606] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "addo0DXObuzEuw8mNJu1uwAAARU"]
[Thu Apr 09 16:52:33.264906 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:59427] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "addo0TXObuzEuw8mNJu1vwAAAQI"]
[Thu Apr 09 16:52:33.931079 2026] [:error] [pid 24927:tid 24940] [client 20.199.96.18:60172] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "addo0TXObuzEuw8mNJu1wQAAAQo"]
[Thu Apr 09 16:52:34.546448 2026] [:error] [pid 18477:tid 18482] [client 20.199.96.18:64839] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "addo0sDe826HlFeoLPJNnwAAAUM"]
[Thu Apr 09 16:52:35.177362 2026] [:error] [pid 24927:tid 24945] [client 20.199.96.18:60217] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "addo0zXObuzEuw8mNJu1xgAAAQ8"]
[Thu Apr 09 16:52:36.415629 2026] [:error] [pid 24516:tid 24552] [client 20.199.96.18:64208] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "addo1NhW7vSS-UkeWCUOWgAAAEU"]
[Thu Apr 09 16:52:36.983015 2026] [:error] [pid 24624:tid 24640] [client 20.199.96.18:63578] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "addo1O4Jn-WvK1ZBTvifKQAAAM4"]
[Thu Apr 09 16:52:37.583613 2026] [:error] [pid 24927:tid 24954] [client 20.199.96.18:59481] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "addo1TXObuzEuw8mNJu1zQAAARg"]
[Thu Apr 09 16:52:38.433487 2026] [:error] [pid 24624:tid 24630] [client 20.199.96.18:64890] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "addo1u4Jn-WvK1ZBTvifLgAAAMQ"]
[Thu Apr 09 16:52:39.035859 2026] [:error] [pid 24624:tid 24643] [client 20.199.96.18:60195] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "addo1-4Jn-WvK1ZBTvifMQAAANE"]
[Thu Apr 09 16:52:39.584677 2026] [:error] [pid 24624:tid 24642] [client 20.199.96.18:60214] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "addo1-4Jn-WvK1ZBTvifNAAAANA"]
[Thu Apr 09 16:52:40.397546 2026] [:error] [pid 24927:tid 24949] [client 20.199.96.18:54727] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "addo2DXObuzEuw8mNJu1zgAAARM"]
[Thu Apr 09 16:52:41.147800 2026] [:error] [pid 20837:tid 20862] [client 20.199.96.18:63497] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "addo2fSL71FHZkjrGzO2xQAAAZc"]
[Thu Apr 09 16:52:42.117989 2026] [:error] [pid 18477:tid 18490] [client 20.199.96.18:64185] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "addo2sDe826HlFeoLPJNpQAAAUs"]
[Thu Apr 09 16:52:43.058941 2026] [:error] [pid 18477:tid 18495] [client 20.199.96.18:64239] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "addo28De826HlFeoLPJNsAAAAVA"]
[Thu Apr 09 16:52:43.720910 2026] [:error] [pid 18477:tid 18492] [client 20.199.96.18:57965] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "addo28De826HlFeoLPJNuwAAAU0"]
[Thu Apr 09 16:52:44.541557 2026] [:error] [pid 24516:tid 24550] [client 20.199.96.18:59425] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "addo3NhW7vSS-UkeWCUOZAAAAEM"]
[Thu Apr 09 16:52:46.878572 2026] [:error] [pid 24927:tid 24932] [client 20.199.96.18:64789] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "addo3jXObuzEuw8mNJu12QAAAQI"]
[Thu Apr 09 16:52:47.559445 2026] [:error] [pid 24927:tid 24937] [client 20.199.96.18:64817] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "addo3zXObuzEuw8mNJu13QAAAQc"]
[Thu Apr 09 16:52:48.414794 2026] [:error] [pid 24927:tid 24931] [client 20.199.96.18:64253] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "addo4DXObuzEuw8mNJu14QAAAQE"]
[Thu Apr 09 16:52:49.839852 2026] [:error] [pid 24515:tid 24529] [client 20.199.96.18:64801] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "addo4a1OMnvM2fMnB1NZTAAAAAo"]
[Thu Apr 09 16:52:53.221021 2026] [:error] [pid 24515:tid 24541] [client 20.199.96.18:64859] [client 20.199.96.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "addo5a1OMnvM2fMnB1NZWwAAABY"]
[Thu Apr 09 18:10:55.849456 2026] [:error] [pid 20837:tid 20861] [client 49.51.178.45:51606] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "add7L_SL71FHZkjrGzPG4gAAAZY"]
[Thu Apr 09 22:05:24.427856 2026] [:error] [pid 24624:tid 24647] [client 43.130.131.18:57392] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adeyJO4Jn-WvK1ZBTvjqQgAAANU"]
[Thu Apr 09 23:49:57.858799 2026] [:error] [pid 24624:tid 24631] [client 34.11.42.77:40842] [client 34.11.42.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adfKpe4Jn-WvK1ZBTvj_wAAAAMU"]
[Thu Apr 09 23:49:57.870484 2026] [:error] [pid 24624:tid 24643] [client 34.11.42.77:40832] [client 34.11.42.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adfKpe4Jn-WvK1ZBTvj_wQAAANE"]
[Fri Apr 10 02:13:44.963328 2026] [:error] [pid 36399:tid 36468] [client 197.186.42.173:34045] [client 197.186.42.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.186.42.173, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adfsWK8Hkxpyh6_TlVQ9nAAAAI0"]
[Fri Apr 10 04:27:26.335939 2026] [autoindex:error] [pid 12685:tid 12699] [client 212.47.77.99:54375] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Apr 10 06:12:36.497023 2026] [:error] [pid 59218:tid 59243] [client 136.107.164.182:52685] [client 136.107.164.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.164.182, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adgkVIjSO_Wp4VS3Qe_v3wAAAZc"]
[Fri Apr 10 06:12:36.737756 2026] [:error] [pid 59218:tid 59232] [client 136.107.164.182:52685] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adgkVIjSO_Wp4VS3Qe_v4gAAAYw"]
[Fri Apr 10 06:12:37.756330 2026] [:error] [pid 12685:tid 12697] [client 136.107.164.182:53364] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "adgkVc8f5ssYShsynap3PAAAAMo"]
[Fri Apr 10 06:12:38.704206 2026] [:error] [pid 12685:tid 12689] [client 136.107.164.182:53669] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "adgkVs8f5ssYShsynap3PwAAAMI"]
[Fri Apr 10 06:12:39.587662 2026] [:error] [pid 59286:tid 59298] [client 136.107.164.182:49395] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "adgkV21gMezN4JEr-RWrKQAAAco"]
[Fri Apr 10 06:12:40.638150 2026] [:error] [pid 59144:tid 59162] [client 136.107.164.182:49880] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "adgkWBta6MlufQo3_oruLQAAAVA"]
[Fri Apr 10 06:12:41.632714 2026] [:error] [pid 59098:tid 59117] [client 136.107.164.182:51318] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "adgkWSZshs05JVy8bJ4XZAAAARA"]
[Fri Apr 10 06:12:42.635634 2026] [:error] [pid 59144:tid 59160] [client 136.107.164.182:59858] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adgkWhta6MlufQo3_oruLwAAAU4"]
[Fri Apr 10 06:12:43.606626 2026] [:error] [pid 59144:tid 59169] [client 136.107.164.182:64180] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adgkWxta6MlufQo3_oruMgAAAVc"]
[Fri Apr 10 06:12:44.550776 2026] [:error] [pid 59098:tid 59104] [client 136.107.164.182:54908] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adgkXCZshs05JVy8bJ4XZwAAAQM"]
[Fri Apr 10 06:12:45.591759 2026] [:error] [pid 12575:tid 12630] [client 136.107.164.182:54586] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adgkXSjFTOT5X6zsPClQNwAAAEg"]
[Fri Apr 10 06:12:46.470714 2026] [:error] [pid 12575:tid 12624] [client 136.107.164.182:54861] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adgkXijFTOT5X6zsPClQOgAAAEI"]
[Fri Apr 10 06:12:47.371413 2026] [:error] [pid 12575:tid 12628] [client 136.107.164.182:54446] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adgkXyjFTOT5X6zsPClQOwAAAEY"]
[Fri Apr 10 06:12:48.326383 2026] [:error] [pid 12576:tid 12670] [client 136.107.164.182:53770] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adgkYAZp1JUS4li1Qnu1_gAAAJU"]
[Fri Apr 10 06:12:49.187954 2026] [:error] [pid 59098:tid 59114] [client 136.107.164.182:61557] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adgkYSZshs05JVy8bJ4XaAAAAQ0"]
[Fri Apr 10 06:12:50.148011 2026] [:error] [pid 59218:tid 59235] [client 136.107.164.182:57849] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adgkYojSO_Wp4VS3Qe_v6QAAAY8"]
[Fri Apr 10 06:12:51.161732 2026] [:error] [pid 59218:tid 59223] [client 136.107.164.182:61533] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adgkY4jSO_Wp4VS3Qe_v7QAAAYM"]
[Fri Apr 10 06:12:52.042946 2026] [:error] [pid 12576:tid 12660] [client 136.107.164.182:58979] [client 136.107.164.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adgkZAZp1JUS4li1Qnu2AQAAAIs"]
[Fri Apr 10 07:13:11.650710 2026] [:error] [pid 59286:tid 59302] [client 223.15.245.170:60325] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adgyh21gMezN4JEr-RW0yQAAAc4"]
[Fri Apr 10 07:28:51.667886 2026] [:error] [pid 12685:tid 12690] [client 43.131.32.36:42736] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adg2M88f5ssYShsynaqNrwAAAMM"]
[Fri Apr 10 13:22:00.191002 2026] [:error] [pid 13102:tid 13162] [client 117.33.163.216:42864] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adiI-P9xLvjW2guI55a0iAAAAAI"]
[Fri Apr 10 18:37:00.284733 2026] [:error] [pid 3934:tid 3954] [client 43.130.100.35:55818] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adjSzIa41m-BS8mg82eTrAAAAM8"]
[Fri Apr 10 18:53:43.470872 2026] [:error] [pid 13101:tid 13147] [client 113.19.183.18:35250] [client 113.19.183.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 113.19.183.18, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adjWt98Ldw85818pj2qkEQAAAI4"]
[Fri Apr 10 19:43:30.137201 2026] [:error] [pid 25984:tid 25992] [client 182.42.111.213:34699] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adjiYrsdbY_MC14OH17H7gAAAUM"]
[Fri Apr 10 21:33:13.555809 2026] [:error] [pid 62769:tid 62785] [client 51.103.21.74:16970] [client 51.103.21.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adj8GcWsSnfLoB8ifjBW7AAAAk4"]
[Fri Apr 10 21:33:16.447291 2026] [:error] [pid 62651:tid 62667] [client 51.103.21.74:16987] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-gertdxz.php"] [unique_id "adj8HDbAH0le57SIaqwj3gAAAc4"]
[Fri Apr 10 21:33:16.920994 2026] [:error] [pid 62769:tid 62780] [client 51.103.21.74:16972] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-gertdxz.php"] [unique_id "adj8HMWsSnfLoB8ifjBXCAAAAkk"]
[Fri Apr 10 21:33:17.386839 2026] [:error] [pid 62769:tid 62781] [client 51.103.21.74:16982] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-gertdxz.php"] [unique_id "adj8HcWsSnfLoB8ifjBXDAAAAko"]
[Fri Apr 10 21:33:17.880519 2026] [:error] [pid 13189:tid 13193] [client 51.103.21.74:13713] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-gertdxz.php"] [unique_id "adj8HZAxiJKPums3eBC-ewAAAEE"]
[Fri Apr 10 21:33:18.346551 2026] [:error] [pid 13189:tid 13211] [client 51.103.21.74:16979] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adj8HpAxiJKPums3eBC-fQAAAFM"]
[Fri Apr 10 21:33:18.810409 2026] [:error] [pid 62769:tid 62784] [client 51.103.21.74:30793] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adj8HsWsSnfLoB8ifjBXFwAAAk0"]
[Fri Apr 10 21:33:19.276853 2026] [:error] [pid 62769:tid 62780] [client 51.103.21.74:17017] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adj8H8WsSnfLoB8ifjBXIAAAAkk"]
[Fri Apr 10 21:33:19.746105 2026] [:error] [pid 62769:tid 62783] [client 51.103.21.74:13732] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adj8H8WsSnfLoB8ifjBXIwAAAkw"]
[Fri Apr 10 21:33:20.212230 2026] [:error] [pid 62769:tid 62772] [client 51.103.21.74:13735] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adj8IMWsSnfLoB8ifjBXJQAAAkE"]
[Fri Apr 10 21:33:20.681550 2026] [:error] [pid 62769:tid 62777] [client 51.103.21.74:17011] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adj8IMWsSnfLoB8ifjBXJwAAAkY"]
[Fri Apr 10 21:33:21.151501 2026] [:error] [pid 62710:tid 62725] [client 51.103.21.74:17023] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adj8IeME7qrf5xEWWJsVTgAAAgw"]
[Fri Apr 10 21:33:21.644923 2026] [:error] [pid 13101:tid 13150] [client 51.103.21.74:16961] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adj8Id8Ldw85818pj2rfbgAAAJE"]
[Fri Apr 10 21:33:22.110441 2026] [:error] [pid 13100:tid 13110] [client 51.103.21.74:13717] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adj8Ilzg-ZkZ0InWIP2_agAAAQU"]
[Fri Apr 10 21:33:22.574336 2026] [:error] [pid 62884:tid 62906] [client 51.103.21.74:16983] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adj8IuUCK1xrhnnmpo2DEwAAAs8"]
[Fri Apr 10 21:33:23.039207 2026] [:error] [pid 13189:tid 13197] [client 51.103.21.74:17002] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adj8I5AxiJKPums3eBC-gwAAAEU"]
[Fri Apr 10 21:33:23.501509 2026] [:error] [pid 13101:tid 13151] [client 51.103.21.74:16991] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adj8I98Ldw85818pj2rfdQAAAJI"]
[Fri Apr 10 21:33:23.975097 2026] [:error] [pid 62769:tid 62782] [client 51.103.21.74:30786] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adj8I8WsSnfLoB8ifjBXLQAAAks"]
[Fri Apr 10 21:33:24.443288 2026] [:error] [pid 13101:tid 13154] [client 51.103.21.74:16999] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adj8JN8Ldw85818pj2rfewAAAJU"]
[Fri Apr 10 21:33:24.911133 2026] [:error] [pid 13101:tid 13141] [client 51.103.21.74:17001] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adj8JN8Ldw85818pj2rffAAAAIg"]
[Fri Apr 10 21:33:25.376673 2026] [:error] [pid 13189:tid 13210] [client 51.103.21.74:13733] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adj8JZAxiJKPums3eBC-iAAAAFI"]
[Fri Apr 10 21:33:25.842897 2026] [:error] [pid 13189:tid 13206] [client 51.103.21.74:13728] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adj8JZAxiJKPums3eBC-iwAAAE4"]
[Fri Apr 10 21:33:26.307430 2026] [:error] [pid 62884:tid 62893] [client 51.103.21.74:16998] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adj8JuUCK1xrhnnmpo2DJwAAAsI"]
[Fri Apr 10 21:33:26.773284 2026] [:error] [pid 63134:tid 63149] [client 51.103.21.74:17008] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adj8JtFALqPDwWi6eJKi-gAAA8w"]
[Fri Apr 10 21:33:27.241991 2026] [:error] [pid 13189:tid 13195] [client 51.103.21.74:13715] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adj8J5AxiJKPums3eBC-jwAAAEM"]
[Fri Apr 10 21:33:27.712777 2026] [:error] [pid 62819:tid 62835] [client 51.103.21.74:17021] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adj8J_U20EyPf7NlsldolgAAAo0"]
[Fri Apr 10 21:33:28.178282 2026] [:error] [pid 62884:tid 62901] [client 51.103.21.74:13724] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adj8KOUCK1xrhnnmpo2DKwAAAso"]
[Fri Apr 10 21:33:28.645108 2026] [:error] [pid 62710:tid 62726] [client 51.103.21.74:16971] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adj8KOME7qrf5xEWWJsVVQAAAg0"]
[Fri Apr 10 21:33:29.111942 2026] [:error] [pid 63134:tid 63142] [client 51.103.21.74:16994] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adj8KdFALqPDwWi6eJKjAgAAA8U"]
[Fri Apr 10 21:33:29.582470 2026] [:error] [pid 13100:tid 13111] [client 51.103.21.74:16981] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adj8KVzg-ZkZ0InWIP2_bgAAAQY"]
[Fri Apr 10 21:33:30.048335 2026] [:error] [pid 62710:tid 62734] [client 51.103.21.74:16976] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adj8KuME7qrf5xEWWJsVXAAAAhU"]
[Fri Apr 10 21:33:30.515761 2026] [:error] [pid 62769:tid 62781] [client 51.103.21.74:13730] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adj8KsWsSnfLoB8ifjBXMwAAAko"]
[Fri Apr 10 21:33:30.979946 2026] [:error] [pid 62769:tid 62778] [client 51.103.21.74:16995] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adj8KsWsSnfLoB8ifjBXNgAAAkc"]
[Fri Apr 10 21:33:31.443594 2026] [:error] [pid 62769:tid 62793] [client 51.103.21.74:13701] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adj8K8WsSnfLoB8ifjBXOgAAAlY"]
[Fri Apr 10 21:33:31.914457 2026] [:error] [pid 62769:tid 62794] [client 51.103.21.74:13744] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adj8K8WsSnfLoB8ifjBXPgAAAlc"]
[Fri Apr 10 21:33:32.380940 2026] [:error] [pid 63134:tid 63142] [client 51.103.21.74:13704] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adj8LNFALqPDwWi6eJKjEgAAA8U"]
[Fri Apr 10 21:33:32.860173 2026] [:error] [pid 62651:tid 62674] [client 51.103.21.74:30797] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adj8LDbAH0le57SIaqwj7QAAAdU"]
[Fri Apr 10 21:33:33.323998 2026] [:error] [pid 62884:tid 62902] [client 51.103.21.74:17005] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adj8LeUCK1xrhnnmpo2DLQAAAss"]
[Fri Apr 10 21:33:33.791449 2026] [:error] [pid 62710:tid 62719] [client 51.103.21.74:13696] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adj8LeME7qrf5xEWWJsVYgAAAgY"]
[Fri Apr 10 21:33:34.255708 2026] [:error] [pid 62651:tid 62666] [client 51.103.21.74:17015] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adj8LjbAH0le57SIaqwj8QAAAc0"]
[Fri Apr 10 21:33:34.729466 2026] [:error] [pid 62651:tid 62659] [client 51.103.21.74:16965] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adj8LjbAH0le57SIaqwj9AAAAcY"]
[Fri Apr 10 21:33:35.196946 2026] [:error] [pid 62769:tid 62778] [client 51.103.21.74:16969] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adj8L8WsSnfLoB8ifjBXSAAAAkc"]
[Fri Apr 10 21:33:35.673088 2026] [:error] [pid 62819:tid 62822] [client 51.103.21.74:17013] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adj8L_U20EyPf7NlsldomQAAAoA"]
[Fri Apr 10 21:33:36.142845 2026] [:error] [pid 62769:tid 62785] [client 51.103.21.74:13752] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adj8MMWsSnfLoB8ifjBXSQAAAk4"]
[Fri Apr 10 21:33:36.614877 2026] [:error] [pid 62769:tid 62773] [client 51.103.21.74:30798] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adj8MMWsSnfLoB8ifjBXTgAAAkI"]
[Fri Apr 10 21:33:37.089554 2026] [:error] [pid 62769:tid 62783] [client 51.103.21.74:16992] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adj8McWsSnfLoB8ifjBXWAAAAkw"]
[Fri Apr 10 21:33:37.555008 2026] [:error] [pid 62884:tid 62912] [client 51.103.21.74:30836] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adj8MeUCK1xrhnnmpo2DMwAAAtU"]
[Fri Apr 10 21:33:38.025163 2026] [:error] [pid 62769:tid 62788] [client 51.103.21.74:30799] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adj8MsWsSnfLoB8ifjBXaAAAAlE"]
[Fri Apr 10 21:33:38.492564 2026] [:error] [pid 63062:tid 63083] [client 51.103.21.74:13699] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adj8Mp2HtsmV85NqkMfu5gAAA5M"]
[Fri Apr 10 21:33:38.962255 2026] [:error] [pid 63062:tid 63073] [client 51.103.21.74:17018] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adj8Mp2HtsmV85NqkMfu6AAAA4k"]
[Fri Apr 10 21:33:39.423371 2026] [:error] [pid 13101:tid 13154] [client 51.103.21.74:13698] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adj8M98Ldw85818pj2rfgQAAAJU"]
[Fri Apr 10 21:33:39.886193 2026] [:error] [pid 13189:tid 13199] [client 51.103.21.74:16974] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adj8M5AxiJKPums3eBC-lwAAAEc"]
[Fri Apr 10 21:33:40.352658 2026] [:error] [pid 13100:tid 13116] [client 51.103.21.74:30785] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adj8NFzg-ZkZ0InWIP2_cQAAAQs"]
[Fri Apr 10 21:33:40.827030 2026] [:error] [pid 13100:tid 13112] [client 51.103.21.74:16967] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-turn.php"] [unique_id "adj8NFzg-ZkZ0InWIP2_cgAAAQc"]
[Fri Apr 10 21:33:41.292884 2026] [:error] [pid 62769:tid 62786] [client 51.103.21.74:13719] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-turn.php"] [unique_id "adj8NcWsSnfLoB8ifjBXcAAAAk8"]
[Fri Apr 10 21:33:41.758662 2026] [:error] [pid 62819:tid 62838] [client 51.103.21.74:16985] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-turn.php"] [unique_id "adj8NfU20EyPf7NlsldonAAAApA"]
[Fri Apr 10 21:33:42.222680 2026] [:error] [pid 62819:tid 62830] [client 51.103.21.74:17009] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-turn.php"] [unique_id "adj8NvU20EyPf7NlsldonQAAAog"]
[Fri Apr 10 21:33:42.686383 2026] [:error] [pid 63134:tid 63156] [client 51.103.21.74:17019] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adj8NtFALqPDwWi6eJKjJgAAA9M"]
[Fri Apr 10 21:33:43.156730 2026] [:error] [pid 62819:tid 62837] [client 51.103.21.74:17003] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adj8N_U20EyPf7NlsldooAAAAo8"]
[Fri Apr 10 21:33:43.622713 2026] [:error] [pid 62884:tid 62913] [client 51.103.21.74:30800] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adj8N-UCK1xrhnnmpo2DOQAAAtY"]
[Fri Apr 10 21:33:44.101113 2026] [:error] [pid 62884:tid 62902] [client 51.103.21.74:13729] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adj8OOUCK1xrhnnmpo2DOgAAAss"]
[Fri Apr 10 21:33:44.569928 2026] [:error] [pid 63062:tid 63064] [client 51.103.21.74:16978] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adj8OJ2HtsmV85NqkMfu8AAAA4A"]
[Fri Apr 10 21:33:45.039752 2026] [:error] [pid 63134:tid 63145] [client 51.103.21.74:17006] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adj8OdFALqPDwWi6eJKjOgAAA8g"]
[Fri Apr 10 21:33:45.502344 2026] [:error] [pid 13101:tid 13136] [client 51.103.21.74:13706] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adj8Od8Ldw85818pj2rfhwAAAIM"]
[Fri Apr 10 21:33:45.969471 2026] [:error] [pid 63062:tid 63075] [client 51.103.21.74:27051] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adj8OZ2HtsmV85NqkMfu8wAAA4s"]
[Fri Apr 10 21:33:46.436894 2026] [:error] [pid 13189:tid 13196] [client 51.103.21.74:16973] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adj8OpAxiJKPums3eBC-tAAAAEQ"]
[Fri Apr 10 21:33:46.901232 2026] [:error] [pid 13189:tid 13210] [client 51.103.21.74:17022] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adj8OpAxiJKPums3eBC-uAAAAFI"]
[Fri Apr 10 21:33:47.369293 2026] [:error] [pid 63062:tid 63073] [client 51.103.21.74:13725] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adj8O52HtsmV85NqkMfu9QAAA4k"]
[Fri Apr 10 21:33:47.834033 2026] [:error] [pid 63134:tid 63145] [client 51.103.21.74:13721] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adj8O9FALqPDwWi6eJKjRAAAA8g"]
[Fri Apr 10 21:33:48.302649 2026] [:error] [pid 63134:tid 63159] [client 51.103.21.74:13714] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adj8PNFALqPDwWi6eJKjRgAAA9Y"]
[Fri Apr 10 21:33:48.769128 2026] [:error] [pid 63062:tid 63066] [client 51.103.21.74:27018] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adj8PJ2HtsmV85NqkMfvAAAAA4I"]
[Fri Apr 10 21:33:49.236495 2026] [:error] [pid 62710:tid 62731] [client 51.103.21.74:17016] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adj8PeME7qrf5xEWWJsVdwAAAhI"]
[Fri Apr 10 21:33:49.708582 2026] [:error] [pid 63134:tid 63154] [client 51.103.21.74:16993] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adj8PdFALqPDwWi6eJKjUgAAA9E"]
[Fri Apr 10 21:33:50.173112 2026] [:error] [pid 62769:tid 62792] [client 51.103.21.74:13736] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adj8PsWsSnfLoB8ifjBXdwAAAlU"]
[Fri Apr 10 21:33:50.638605 2026] [:error] [pid 63134:tid 63159] [client 51.103.21.74:13748] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adj8PtFALqPDwWi6eJKjWAAAA9Y"]
[Fri Apr 10 21:33:51.110891 2026] [:error] [pid 62819:tid 62843] [client 51.103.21.74:13749] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adj8P_U20EyPf7NlsldopQAAApU"]
[Fri Apr 10 21:33:51.577552 2026] [:error] [pid 62710:tid 62730] [client 51.103.21.74:17007] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adj8P-ME7qrf5xEWWJsVegAAAhE"]
[Fri Apr 10 21:33:52.050001 2026] [:error] [pid 63134:tid 63137] [client 51.103.21.74:30842] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adj8QNFALqPDwWi6eJKjZAAAA8A"]
[Fri Apr 10 21:33:52.515476 2026] [:error] [pid 13189:tid 13212] [client 51.103.21.74:13737] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adj8QJAxiJKPums3eBC-wgAAAFQ"]
[Fri Apr 10 21:33:52.979996 2026] [:error] [pid 63134:tid 63155] [client 51.103.21.74:13720] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adj8QNFALqPDwWi6eJKjagAAA9I"]
[Fri Apr 10 21:33:53.447851 2026] [:error] [pid 13189:tid 13210] [client 51.103.21.74:13697] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adj8QZAxiJKPums3eBC-wwAAAFI"]
[Fri Apr 10 21:33:53.925408 2026] [:error] [pid 62769:tid 62781] [client 51.103.21.74:17000] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "adj8QcWsSnfLoB8ifjBXfwAAAko"]
[Fri Apr 10 21:33:54.391559 2026] [:error] [pid 13101:tid 13152] [client 51.103.21.74:13702] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "adj8Qt8Ldw85818pj2rfjQAAAJM"]
[Fri Apr 10 21:33:54.858664 2026] [:error] [pid 13189:tid 13211] [client 51.103.21.74:17002] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "adj8QpAxiJKPums3eBC-yAAAAFM"]
[Fri Apr 10 21:33:55.322430 2026] [:error] [pid 62710:tid 62732] [client 51.103.21.74:13700] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "adj8Q-ME7qrf5xEWWJsVggAAAhM"]
[Fri Apr 10 21:33:55.793063 2026] [:error] [pid 13101:tid 13133] [client 51.103.21.74:13718] [client 51.103.21.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adj8Q98Ldw85818pj2rfkwAAAIA"]
[Fri Apr 10 21:33:56.259003 2026] [:error] [pid 62819:tid 62846] [client 51.103.21.74:30784] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "adj8RPU20EyPf7NlsldorAAAApg"]
[Fri Apr 10 21:33:56.724391 2026] [:error] [pid 62710:tid 62726] [client 51.103.21.74:30796] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "adj8ROME7qrf5xEWWJsVgwAAAg0"]
[Fri Apr 10 21:33:57.216481 2026] [:error] [pid 62710:tid 62731] [client 51.103.21.74:13740] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "adj8ReME7qrf5xEWWJsVhwAAAhI"]
[Fri Apr 10 21:33:57.683572 2026] [:error] [pid 62819:tid 62834] [client 51.103.21.74:16980] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "adj8RfU20EyPf7NlsldotgAAAow"]
[Fri Apr 10 21:33:58.146487 2026] [:error] [pid 13101:tid 13156] [client 51.103.21.74:17012] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myy.php"] [unique_id "adj8Rt8Ldw85818pj2rfmgAAAJc"]
[Fri Apr 10 21:33:58.623779 2026] [:error] [pid 62769:tid 62776] [client 51.103.21.74:13708] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myy.php"] [unique_id "adj8RsWsSnfLoB8ifjBXhgAAAkU"]
[Fri Apr 10 21:33:59.089950 2026] [:error] [pid 63134:tid 63141] [client 51.103.21.74:13727] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myy.php"] [unique_id "adj8R9FALqPDwWi6eJKjcQAAA8Q"]
[Fri Apr 10 21:33:59.555349 2026] [:error] [pid 13101:tid 13141] [client 51.103.21.74:17020] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myy.php"] [unique_id "adj8R98Ldw85818pj2rfngAAAIg"]
[Fri Apr 10 21:34:00.026462 2026] [:error] [pid 13101:tid 13157] [client 51.103.21.74:13712] [client 51.103.21.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "adj8SN8Ldw85818pj2rfoAAAAJg"]
[Fri Apr 10 21:34:00.513759 2026] [:error] [pid 13101:tid 13137] [client 51.103.21.74:13711] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "adj8SN8Ldw85818pj2rfogAAAIQ"]
[Fri Apr 10 21:34:00.979463 2026] [:error] [pid 62769:tid 62793] [client 51.103.21.74:30820] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "adj8SMWsSnfLoB8ifjBXjgAAAlY"]
[Fri Apr 10 21:34:01.445194 2026] [:error] [pid 13101:tid 13156] [client 51.103.21.74:17004] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "adj8Sd8Ldw85818pj2rfqAAAAJc"]
[Fri Apr 10 21:34:01.913252 2026] [:error] [pid 13189:tid 13200] [client 51.103.21.74:30790] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adj8SZAxiJKPums3eBC-2AAAAEg"]
[Fri Apr 10 21:34:02.384012 2026] [:error] [pid 62769:tid 62775] [client 51.103.21.74:13753] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adj8SsWsSnfLoB8ifjBXkwAAAkQ"]
[Fri Apr 10 21:34:02.848315 2026] [:error] [pid 62769:tid 62789] [client 51.103.21.74:30816] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adj8SsWsSnfLoB8ifjBXlQAAAlI"]
[Fri Apr 10 21:34:03.319331 2026] [:error] [pid 13101:tid 13144] [client 51.103.21.74:13755] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adj8S98Ldw85818pj2rfrAAAAIs"]
[Fri Apr 10 21:34:03.788293 2026] [:error] [pid 13189:tid 13207] [client 51.103.21.74:13709] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "adj8S5AxiJKPums3eBC-2wAAAE8"]
[Fri Apr 10 21:34:04.252666 2026] [:error] [pid 13101:tid 13148] [client 51.103.21.74:13750] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "adj8TN8Ldw85818pj2rfsAAAAI8"]
[Fri Apr 10 21:34:04.716681 2026] [:error] [pid 62819:tid 62827] [client 51.103.21.74:16968] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "adj8TPU20EyPf7NlsldowQAAAoU"]
[Fri Apr 10 21:34:05.181756 2026] [:error] [pid 13101:tid 13140] [client 51.103.21.74:13738] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsheet1.php"] [unique_id "adj8Td8Ldw85818pj2rftQAAAIc"]
[Fri Apr 10 21:34:05.647036 2026] [:error] [pid 13189:tid 13204] [client 51.103.21.74:13759] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "adj8TZAxiJKPums3eBC-4wAAAEw"]
[Fri Apr 10 21:34:06.117099 2026] [:error] [pid 13101:tid 13144] [client 51.103.21.74:17014] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "adj8Tt8Ldw85818pj2rfvAAAAIs"]
[Fri Apr 10 21:34:06.589496 2026] [:error] [pid 62769:tid 62790] [client 51.103.21.74:13758] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "adj8TsWsSnfLoB8ifjBXnwAAAlM"]
[Fri Apr 10 21:34:07.058600 2026] [:error] [pid 62769:tid 62788] [client 51.103.21.74:16977] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "adj8T8WsSnfLoB8ifjBXogAAAlE"]
[Fri Apr 10 21:34:07.526703 2026] [:error] [pid 62769:tid 62795] [client 51.103.21.74:27023] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "adj8T8WsSnfLoB8ifjBXqAAAAlg"]
[Fri Apr 10 21:34:07.992576 2026] [:error] [pid 62769:tid 62786] [client 51.103.21.74:16966] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "adj8T8WsSnfLoB8ifjBXrwAAAk8"]
[Fri Apr 10 21:34:08.464479 2026] [:error] [pid 62710:tid 62726] [client 51.103.21.74:27045] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "adj8UOME7qrf5xEWWJsVrwAAAg0"]
[Fri Apr 10 21:34:08.929491 2026] [:error] [pid 62769:tid 62775] [client 51.103.21.74:30789] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "adj8UMWsSnfLoB8ifjBXtAAAAkQ"]
[Fri Apr 10 21:34:09.396336 2026] [:error] [pid 13189:tid 13202] [client 51.103.21.74:27035] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adj8UZAxiJKPums3eBC-8AAAAEo"]
[Fri Apr 10 21:34:09.863881 2026] [:error] [pid 13189:tid 13211] [client 51.103.21.74:13739] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adj8UZAxiJKPums3eBC-8wAAAFM"]
[Fri Apr 10 21:34:10.329840 2026] [:error] [pid 62769:tid 62771] [client 51.103.21.74:30825] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adj8UsWsSnfLoB8ifjBXwgAAAkA"]
[Fri Apr 10 21:34:10.796621 2026] [:error] [pid 63134:tid 63138] [client 51.103.21.74:27020] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adj8UtFALqPDwWi6eJKjfgAAA8E"]
[Fri Apr 10 21:34:11.267394 2026] [:error] [pid 63134:tid 63149] [client 51.103.21.74:30818] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adj8U9FALqPDwWi6eJKjggAAA8w"]
[Fri Apr 10 21:34:11.771590 2026] [:error] [pid 62769:tid 62774] [client 51.103.21.74:30839] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adj8U8WsSnfLoB8ifjBXzgAAAkM"]
[Fri Apr 10 21:34:12.239608 2026] [:error] [pid 62819:tid 62832] [client 51.103.21.74:17010] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adj8VPU20EyPf7NlsldoywAAAoo"]
[Fri Apr 10 21:34:12.703759 2026] [:error] [pid 62819:tid 62828] [client 51.103.21.74:27042] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adj8VPU20EyPf7NlsldozgAAAoY"]
[Fri Apr 10 21:34:13.164644 2026] [:error] [pid 62769:tid 62789] [client 51.103.21.74:27055] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "adj8VcWsSnfLoB8ifjBX2gAAAlI"]
[Fri Apr 10 21:34:13.630524 2026] [:error] [pid 62819:tid 62843] [client 51.103.21.74:13731] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "adj8VfU20EyPf7Nlsldo0AAAApU"]
[Fri Apr 10 21:34:14.099151 2026] [:error] [pid 62651:tid 62658] [client 51.103.21.74:13710] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "adj8VjbAH0le57SIaqwkCwAAAcU"]
[Fri Apr 10 21:34:14.577899 2026] [:error] [pid 63062:tid 63073] [client 51.103.21.74:13742] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "adj8Vp2HtsmV85NqkMfvFAAAA4k"]
[Fri Apr 10 21:34:15.042077 2026] [:error] [pid 63062:tid 63067] [client 51.103.21.74:30791] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adj8V52HtsmV85NqkMfvFQAAA4M"]
[Fri Apr 10 21:34:15.509385 2026] [:error] [pid 62769:tid 62789] [client 51.103.21.74:30829] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adj8V8WsSnfLoB8ifjBX5gAAAlI"]
[Fri Apr 10 21:34:15.982642 2026] [:error] [pid 63134:tid 63137] [client 51.103.21.74:30822] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adj8V9FALqPDwWi6eJKjhwAAA8A"]
[Fri Apr 10 21:34:22.877000 2026] [:error] [pid 63134:tid 63159] [client 51.103.21.74:13716] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "adj8XtFALqPDwWi6eJKjqwAAA9Y"]
[Fri Apr 10 21:34:23.345716 2026] [:error] [pid 62651:tid 62660] [client 51.103.21.74:27032] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "adj8XzbAH0le57SIaqwkGQAAAcc"]
[Fri Apr 10 21:34:23.810814 2026] [:error] [pid 62769:tid 62778] [client 51.103.21.74:27037] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "adj8X8WsSnfLoB8ifjBYBAAAAkc"]
[Fri Apr 10 21:34:24.276651 2026] [:error] [pid 63062:tid 63087] [client 51.103.21.74:30832] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "adj8YJ2HtsmV85NqkMfvNQAAA5c"]
[Fri Apr 10 21:34:24.747330 2026] [:error] [pid 13101:tid 13140] [client 51.103.21.74:30806] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf.php"] [unique_id "adj8YN8Ldw85818pj2rf2gAAAIc"]
[Fri Apr 10 21:34:25.213565 2026] [:error] [pid 62769:tid 62794] [client 51.103.21.74:13722] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf.php"] [unique_id "adj8YcWsSnfLoB8ifjBYDwAAAlc"]
[Fri Apr 10 21:34:25.678321 2026] [:error] [pid 13189:tid 13194] [client 51.103.21.74:13705] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf.php"] [unique_id "adj8YZAxiJKPums3eBC_GQAAAEI"]
[Fri Apr 10 21:34:26.180058 2026] [:error] [pid 13189:tid 13204] [client 51.103.21.74:30843] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wolf.php"] [unique_id "adj8YpAxiJKPums3eBC_GgAAAEw"]
[Fri Apr 10 21:34:26.654211 2026] [:error] [pid 13189:tid 13200] [client 51.103.21.74:11202] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adj8YpAxiJKPums3eBC_HgAAAEg"]
[Fri Apr 10 21:34:27.121466 2026] [:error] [pid 62884:tid 62894] [client 51.103.21.74:16984] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adj8Y-UCK1xrhnnmpo2DVQAAAsM"]
[Fri Apr 10 21:34:27.589712 2026] [:error] [pid 62769:tid 62781] [client 51.103.21.74:30826] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adj8Y8WsSnfLoB8ifjBYIwAAAko"]
[Fri Apr 10 21:34:28.055350 2026] [:error] [pid 13101:tid 13136] [client 51.103.21.74:30824] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adj8ZN8Ldw85818pj2rf4QAAAIM"]
[Fri Apr 10 21:34:28.521809 2026] [:error] [pid 62769:tid 62785] [client 51.103.21.74:30808] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adj8ZMWsSnfLoB8ifjBYLgAAAk4"]
[Fri Apr 10 21:34:28.997783 2026] [:error] [pid 63134:tid 63152] [client 51.103.21.74:30845] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adj8ZNFALqPDwWi6eJKjrgAAA88"]
[Fri Apr 10 21:34:29.460092 2026] [:error] [pid 63134:tid 63139] [client 51.103.21.74:27015] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adj8ZdFALqPDwWi6eJKjsgAAA8I"]
[Fri Apr 10 21:34:29.921701 2026] [:error] [pid 62884:tid 62901] [client 51.103.21.74:30787] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adj8ZeUCK1xrhnnmpo2DVgAAAso"]
[Fri Apr 10 21:34:30.398018 2026] [:error] [pid 13189:tid 13211] [client 51.103.21.74:16975] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adj8ZpAxiJKPums3eBC_OgAAAFM"]
[Fri Apr 10 21:34:30.861882 2026] [:error] [pid 62651:tid 62653] [client 51.103.21.74:30814] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adj8ZjbAH0le57SIaqwkHQAAAcA"]
[Fri Apr 10 21:34:31.335949 2026] [:error] [pid 63134:tid 63151] [client 51.103.21.74:27009] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adj8Z9FALqPDwWi6eJKjtgAAA84"]
[Fri Apr 10 21:34:31.802743 2026] [:error] [pid 62819:tid 62832] [client 51.103.21.74:13756] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adj8Z_U20EyPf7Nlsldo5gAAAoo"]
[Fri Apr 10 21:34:32.284721 2026] [:error] [pid 63134:tid 63148] [client 51.103.21.74:11210] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adj8aNFALqPDwWi6eJKjuQAAA8s"]
[Fri Apr 10 21:34:32.752461 2026] [:error] [pid 13189:tid 13211] [client 51.103.21.74:11136] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adj8aJAxiJKPums3eBC_TAAAAFM"]
[Fri Apr 10 21:34:33.222923 2026] [:error] [pid 13100:tid 13122] [client 51.103.21.74:13746] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adj8aVzg-ZkZ0InWIP2_hAAAARE"]
[Fri Apr 10 21:34:33.686317 2026] [:error] [pid 62819:tid 62844] [client 51.103.21.74:16996] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adj8afU20EyPf7Nlsldo6QAAApY"]
[Fri Apr 10 21:34:34.176610 2026] [:error] [pid 13189:tid 13192] [client 51.103.21.74:11208] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adj8apAxiJKPums3eBC_VgAAAEA"]
[Fri Apr 10 21:34:34.644453 2026] [:error] [pid 13189:tid 13210] [client 51.103.21.74:30830] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adj8apAxiJKPums3eBC_WQAAAFI"]
[Fri Apr 10 21:34:35.113887 2026] [:error] [pid 62769:tid 62789] [client 51.103.21.74:30821] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adj8a8WsSnfLoB8ifjBYSgAAAlI"]
[Fri Apr 10 21:34:35.585844 2026] [:error] [pid 62710:tid 62717] [client 51.103.21.74:27008] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adj8a-ME7qrf5xEWWJsV4wAAAgQ"]
[Fri Apr 10 21:34:36.059383 2026] [:error] [pid 13189:tid 13212] [client 51.103.21.74:13741] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "adj8bJAxiJKPums3eBC_XAAAAFQ"]
[Fri Apr 10 21:34:36.531746 2026] [:error] [pid 13189:tid 13213] [client 51.103.21.74:30828] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "adj8bJAxiJKPums3eBC_XgAAAFU"]
[Fri Apr 10 21:34:37.016856 2026] [:error] [pid 63062:tid 63065] [client 51.103.21.74:30807] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "adj8bZ2HtsmV85NqkMfvPgAAA4E"]
[Fri Apr 10 21:34:37.484563 2026] [:error] [pid 62710:tid 62716] [client 51.103.21.74:27054] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/image.php"] [unique_id "adj8beME7qrf5xEWWJsV7QAAAgM"]
[Fri Apr 10 21:34:37.949564 2026] [:error] [pid 13189:tid 13204] [client 51.103.21.74:30837] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adj8bZAxiJKPums3eBC_aQAAAEw"]
[Fri Apr 10 21:34:38.413109 2026] [:error] [pid 13189:tid 13202] [client 51.103.21.74:11217] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adj8bpAxiJKPums3eBC_cAAAAEo"]
[Fri Apr 10 21:34:38.882633 2026] [:error] [pid 13189:tid 13209] [client 51.103.21.74:27022] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adj8bpAxiJKPums3eBC_dwAAAFE"]
[Fri Apr 10 21:34:39.359514 2026] [:error] [pid 13100:tid 13107] [client 51.103.21.74:11222] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adj8b1zg-ZkZ0InWIP2_iAAAAQI"]
[Fri Apr 10 21:34:39.822110 2026] [:error] [pid 62884:tid 62896] [client 51.103.21.74:27062] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adj8b-UCK1xrhnnmpo2DWgAAAsU"]
[Fri Apr 10 21:34:40.285559 2026] [:error] [pid 62884:tid 62911] [client 51.103.21.74:27016] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adj8cOUCK1xrhnnmpo2DXQAAAtQ"]
[Fri Apr 10 21:34:40.755996 2026] [:error] [pid 62710:tid 62717] [client 51.103.21.74:11235] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adj8cOME7qrf5xEWWJsV8AAAAgQ"]
[Fri Apr 10 21:34:41.220290 2026] [:error] [pid 63062:tid 63086] [client 51.103.21.74:13757] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adj8cZ2HtsmV85NqkMfvQAAAA5Y"]
[Fri Apr 10 21:34:41.692867 2026] [:error] [pid 13189:tid 13214] [client 51.103.21.74:13726] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adj8cZAxiJKPums3eBC_gAAAAFY"]
[Fri Apr 10 21:34:42.162905 2026] [:error] [pid 13100:tid 13105] [client 51.103.21.74:11259] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adj8clzg-ZkZ0InWIP2_igAAAQA"]
[Fri Apr 10 21:34:42.631194 2026] [:error] [pid 62819:tid 62846] [client 51.103.21.74:30846] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adj8cvU20EyPf7Nlsldo8wAAApg"]
[Fri Apr 10 21:34:43.099396 2026] [:error] [pid 62884:tid 62901] [client 51.103.21.74:27024] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adj8c-UCK1xrhnnmpo2DZgAAAso"]
[Fri Apr 10 21:34:43.602794 2026] [:error] [pid 62884:tid 62902] [client 51.103.21.74:27028] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adj8c-UCK1xrhnnmpo2DawAAAss"]
[Fri Apr 10 21:34:44.071169 2026] [:error] [pid 63062:tid 63066] [client 51.103.21.74:30809] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adj8dJ2HtsmV85NqkMfvRAAAA4I"]
[Fri Apr 10 21:34:44.539388 2026] [:error] [pid 13100:tid 13121] [client 51.103.21.74:30805] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adj8dFzg-ZkZ0InWIP2_jAAAARA"]
[Fri Apr 10 21:34:45.007040 2026] [:error] [pid 13189:tid 13197] [client 51.103.21.74:27031] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adj8dZAxiJKPums3eBC_iwAAAEU"]
[Fri Apr 10 21:34:45.475187 2026] [:error] [pid 13100:tid 13127] [client 51.103.21.74:27064] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "adj8dVzg-ZkZ0InWIP2_kQAAARY"]
[Fri Apr 10 21:34:45.951945 2026] [:error] [pid 62710:tid 62724] [client 51.103.21.74:11203] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "adj8deME7qrf5xEWWJsV8QAAAgs"]
[Fri Apr 10 21:34:46.435602 2026] [:error] [pid 62710:tid 62713] [client 51.103.21.74:27038] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "adj8duME7qrf5xEWWJsV8wAAAgA"]
[Fri Apr 10 21:34:46.911439 2026] [:error] [pid 62819:tid 62824] [client 51.103.21.74:27021] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "adj8dvU20EyPf7Nlsldo9QAAAoI"]
[Fri Apr 10 21:34:47.378771 2026] [:error] [pid 62651:tid 62664] [client 51.103.21.74:11260] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adj8dzbAH0le57SIaqwkKgAAAcs"]
[Fri Apr 10 21:34:47.859618 2026] [:error] [pid 63062:tid 63075] [client 51.103.21.74:30827] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adj8d52HtsmV85NqkMfvTAAAA4s"]
[Fri Apr 10 21:34:48.327541 2026] [:error] [pid 63134:tid 63143] [client 51.103.21.74:30844] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adj8eNFALqPDwWi6eJKjyQAAA8Y"]
[Fri Apr 10 21:34:48.812621 2026] [:error] [pid 63134:tid 63138] [client 51.103.21.74:13747] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adj8eNFALqPDwWi6eJKjywAAA8E"]
[Fri Apr 10 21:34:49.278417 2026] [:error] [pid 13189:tid 13203] [client 51.103.21.74:30831] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adj8eZAxiJKPums3eBC_kQAAAEs"]
[Fri Apr 10 21:34:49.750710 2026] [:error] [pid 13189:tid 13202] [client 51.103.21.74:16990] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adj8eZAxiJKPums3eBC_lgAAAEo"]
[Fri Apr 10 21:34:50.216370 2026] [:error] [pid 62710:tid 62732] [client 51.103.21.74:30811] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adj8euME7qrf5xEWWJsV_AAAAhM"]
[Fri Apr 10 21:34:50.685525 2026] [:error] [pid 62710:tid 62722] [client 51.103.21.74:16964] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adj8euME7qrf5xEWWJsV_QAAAgk"]
[Fri Apr 10 21:34:51.174315 2026] [:error] [pid 62884:tid 62894] [client 51.103.21.74:30815] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "adj8e-UCK1xrhnnmpo2DcwAAAsM"]
[Fri Apr 10 21:34:51.674111 2026] [:error] [pid 62710:tid 62734] [client 51.103.21.74:13723] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "adj8e-ME7qrf5xEWWJsWBQAAAhU"]
[Fri Apr 10 21:34:52.160635 2026] [:error] [pid 62819:tid 62842] [client 51.103.21.74:30792] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "adj8fPU20EyPf7Nlsldo_AAAApQ"]
[Fri Apr 10 21:34:52.633294 2026] [:error] [pid 62819:tid 62840] [client 51.103.21.74:30819] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "adj8fPU20EyPf7Nlsldo_wAAApI"]
[Fri Apr 10 21:34:53.118025 2026] [:error] [pid 62819:tid 62826] [client 51.103.21.74:27057] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adj8ffU20EyPf7NlsldpAgAAAoQ"]
[Fri Apr 10 21:34:53.581683 2026] [:error] [pid 13101:tid 13155] [client 51.103.21.74:27049] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adj8fd8Ldw85818pj2rf8QAAAJY"]
[Fri Apr 10 21:34:54.050505 2026] [:error] [pid 62819:tid 62827] [client 51.103.21.74:27050] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adj8fvU20EyPf7NlsldpDQAAAoU"]
[Fri Apr 10 21:34:54.516721 2026] [:error] [pid 62769:tid 62771] [client 51.103.21.74:27048] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adj8fsWsSnfLoB8ifjBYXQAAAkA"]
[Fri Apr 10 21:34:54.981417 2026] [:error] [pid 62819:tid 62841] [client 51.103.21.74:30807] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adj8fvU20EyPf7NlsldpEAAAApM"]
[Fri Apr 10 21:34:55.444116 2026] [:error] [pid 13189:tid 13194] [client 51.103.21.74:30823] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adj8f5AxiJKPums3eBC_ogAAAEI"]
[Fri Apr 10 21:34:55.910637 2026] [:error] [pid 13189:tid 13215] [client 51.103.21.74:30806] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adj8f5AxiJKPums3eBC_qQAAAFc"]
[Fri Apr 10 21:34:56.376592 2026] [:error] [pid 13189:tid 13199] [client 51.103.21.74:27060] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adj8gJAxiJKPums3eBC_rwAAAEc"]
[Fri Apr 10 21:34:56.839340 2026] [:error] [pid 63062:tid 63078] [client 51.103.21.74:27052] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adj8gJ2HtsmV85NqkMfvVwAAA44"]
[Fri Apr 10 21:34:57.306018 2026] [:error] [pid 62769:tid 62781] [client 51.103.21.74:27010] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adj8gcWsSnfLoB8ifjBYYwAAAko"]
[Fri Apr 10 21:34:57.776748 2026] [:error] [pid 62884:tid 62907] [client 51.103.21.74:27027] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adj8geUCK1xrhnnmpo2DdgAAAtA"]
[Fri Apr 10 21:34:58.245167 2026] [:error] [pid 62651:tid 62666] [client 51.103.21.74:27030] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adj8gjbAH0le57SIaqwkRAAAAc0"]
[Fri Apr 10 21:34:58.714838 2026] [:error] [pid 62769:tid 62775] [client 51.103.21.74:27044] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adj8gsWsSnfLoB8ifjBYagAAAkQ"]
[Fri Apr 10 21:34:59.185566 2026] [:error] [pid 62769:tid 62791] [client 51.103.21.74:27025] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adj8g8WsSnfLoB8ifjBYbwAAAlQ"]
[Fri Apr 10 21:34:59.651453 2026] [:error] [pid 13100:tid 13124] [client 51.103.21.74:16963] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adj8g1zg-ZkZ0InWIP2_nwAAARM"]
[Fri Apr 10 21:35:00.128448 2026] [:error] [pid 62769:tid 62777] [client 51.103.21.74:30840] [client 51.103.21.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adj8hMWsSnfLoB8ifjBYcwAAAkY"]
[Sat Apr 11 00:46:52.921724 2026] [:error] [pid 21568:tid 21586] [client 158.158.53.142:45571] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkpfIiz5v_ljZxkpR-W6gAAAQ4"]
[Sat Apr 11 00:46:53.492761 2026] [:error] [pid 21570:tid 21672] [client 158.158.53.142:45621] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkpfTKs5t9xRSNL6cmbCgAAAEU"]
[Sat Apr 11 00:46:54.019013 2026] [:error] [pid 21706:tid 21717] [client 158.158.53.142:45609] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkpfiGQ1M5d8fQSsLFfkQAAAAk"]
[Sat Apr 11 00:46:54.567016 2026] [:error] [pid 21706:tid 21728] [client 158.158.53.142:38907] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkpfiGQ1M5d8fQSsLFfmgAAABQ"]
[Sat Apr 11 01:04:34.066621 2026] [:error] [pid 21569:tid 21649] [client 43.156.109.53:49534] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adktonAvQTgvXJ6vHoqCJAAAAIQ"]
[Sat Apr 11 02:10:01.274949 2026] [:error] [pid 21706:tid 21712] [client 51.103.82.36:64114] [client 51.103.82.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adk8-SGQ1M5d8fQSsLGyEQAAAAQ"]
[Sat Apr 11 02:10:03.146879 2026] [:error] [pid 55451:tid 55454] [client 51.103.82.36:64931] [client 51.103.82.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adk8-3ApxuyB7yCS5RkWHAAAAME"]
[Sat Apr 11 02:10:04.542396 2026] [:error] [pid 21569:tid 21652] [client 51.103.82.36:64050] [client 51.103.82.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adk8_HAvQTgvXJ6vHoqhbAAAAIc"]
[Sat Apr 11 02:10:10.875193 2026] [:error] [pid 55451:tid 55465] [client 51.103.82.36:64016] [client 51.103.82.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adk9AnApxuyB7yCS5RkWOQAAAMw"]
[Sat Apr 11 02:11:01.263105 2026] [:error] [pid 21569:tid 21680] [client 111.172.249.49:41699] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adk9NXAvQTgvXJ6vHoqh8AAAAJc"]
[Sat Apr 11 03:20:49.282625 2026] [:error] [pid 21568:tid 21585] [client 68.221.64.41:48301] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlNkYiz5v_ljZxkpR_9mwAAAQ0"]
[Sat Apr 11 03:20:50.257765 2026] [:error] [pid 21568:tid 21590] [client 68.221.64.41:23525] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlNkoiz5v_ljZxkpR_9nQAAARI"]
[Sat Apr 11 03:20:50.988153 2026] [:error] [pid 21706:tid 21713] [client 68.221.64.41:23518] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlNkiGQ1M5d8fQSsLEBOAAAAAU"]
[Sat Apr 11 03:20:51.531699 2026] [:error] [pid 21706:tid 21723] [client 68.221.64.41:62871] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adlNkyGQ1M5d8fQSsLEBPQAAAA8"]
[Sat Apr 11 03:20:52.894604 2026] [:error] [pid 21570:tid 21679] [client 68.221.64.41:62895] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "adlNlDKs5t9xRSNL6cnznQAAAEk"]
[Sat Apr 11 03:20:53.765704 2026] [:error] [pid 21568:tid 21596] [client 68.221.64.41:62868] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "adlNlYiz5v_ljZxkpR_9oAAAARg"]
[Sat Apr 11 03:20:54.350374 2026] [:error] [pid 21569:tid 21664] [client 68.221.64.41:48294] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "adlNlnAvQTgvXJ6vHorAhgAAAJA"]
[Sat Apr 11 03:20:55.763076 2026] [:error] [pid 21570:tid 21668] [client 68.221.64.41:36559] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "adlNlzKs5t9xRSNL6cnzqwAAAEM"]
[Sat Apr 11 03:20:56.395023 2026] [:error] [pid 21569:tid 21680] [client 68.221.64.41:62872] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlNmHAvQTgvXJ6vHorAjgAAAJc"]
[Sat Apr 11 03:20:57.142447 2026] [:error] [pid 21569:tid 21655] [client 68.221.64.41:39448] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlNmXAvQTgvXJ6vHorAkwAAAIo"]
[Sat Apr 11 03:20:57.960545 2026] [:error] [pid 55451:tid 55468] [client 68.221.64.41:39482] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlNmXApxuyB7yCS5RlOWQAAAM8"]
[Sat Apr 11 03:20:59.025901 2026] [:error] [pid 55451:tid 55475] [client 68.221.64.41:39479] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adlNm3ApxuyB7yCS5RlOYAAAANY"]
[Sat Apr 11 03:20:59.565645 2026] [:error] [pid 21570:tid 21685] [client 68.221.64.41:36549] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "adlNmzKs5t9xRSNL6cnztgAAAEw"]
[Sat Apr 11 03:21:00.083554 2026] [:error] [pid 21568:tid 21594] [client 68.221.64.41:62903] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "adlNnIiz5v_ljZxkpR_9pAAAARY"]
[Sat Apr 11 03:21:00.955672 2026] [:error] [pid 21706:tid 21728] [client 68.221.64.41:23515] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "adlNnCGQ1M5d8fQSsLEBSgAAABQ"]
[Sat Apr 11 03:21:01.883965 2026] [:error] [pid 21569:tid 21646] [client 68.221.64.41:39427] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "adlNnXAvQTgvXJ6vHorAmAAAAIE"]
[Sat Apr 11 03:21:02.490743 2026] [:error] [pid 21569:tid 21652] [client 68.221.64.41:62901] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adlNnnAvQTgvXJ6vHorAmQAAAIc"]
[Sat Apr 11 03:21:03.099517 2026] [:error] [pid 21706:tid 21715] [client 68.221.64.41:62894] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adlNnyGQ1M5d8fQSsLEBUQAAAAc"]
[Sat Apr 11 03:21:04.220014 2026] [:error] [pid 55451:tid 55463] [client 68.221.64.41:36554] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adlNoHApxuyB7yCS5RlOgAAAAMo"]
[Sat Apr 11 03:21:04.776906 2026] [:error] [pid 55451:tid 55460] [client 68.221.64.41:48303] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adlNoHApxuyB7yCS5RlOggAAAMc"]
[Sat Apr 11 03:21:05.940480 2026] [:error] [pid 21706:tid 21723] [client 68.221.64.41:23491] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "adlNoSGQ1M5d8fQSsLEBXAAAAA8"]
[Sat Apr 11 03:21:06.968981 2026] [:error] [pid 21706:tid 21722] [client 68.221.64.41:39476] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "adlNoiGQ1M5d8fQSsLEBXwAAAA4"]
[Sat Apr 11 03:21:07.769903 2026] [:error] [pid 55451:tid 55459] [client 68.221.64.41:62888] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "adlNo3ApxuyB7yCS5RlOjAAAAMY"]
[Sat Apr 11 03:21:08.306115 2026] [:error] [pid 21706:tid 21717] [client 68.221.64.41:39453] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "adlNpCGQ1M5d8fQSsLEBZwAAAAk"]
[Sat Apr 11 03:21:09.504119 2026] [:error] [pid 21569:tid 21678] [client 68.221.64.41:62899] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "adlNpXAvQTgvXJ6vHorAnwAAAJY"]
[Sat Apr 11 03:21:10.003211 2026] [:error] [pid 21569:tid 21647] [client 68.221.64.41:48305] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "adlNpnAvQTgvXJ6vHorAqAAAAII"]
[Sat Apr 11 03:21:10.646551 2026] [:error] [pid 21569:tid 21676] [client 68.221.64.41:39432] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "adlNpnAvQTgvXJ6vHorArQAAAJU"]
[Sat Apr 11 03:21:11.131900 2026] [:error] [pid 21570:tid 21694] [client 68.221.64.41:32576] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "adlNpzKs5t9xRSNL6cnzzQAAAFQ"]
[Sat Apr 11 03:21:11.674066 2026] [:error] [pid 55451:tid 55472] [client 68.221.64.41:23494] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlNp3ApxuyB7yCS5RlOkgAAANM"]
[Sat Apr 11 03:21:12.284690 2026] [:error] [pid 55451:tid 55463] [client 68.221.64.41:39475] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlNqHApxuyB7yCS5RlOlQAAAMo"]
[Sat Apr 11 03:21:13.678718 2026] [:error] [pid 55451:tid 55458] [client 68.221.64.41:39434] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlNqXApxuyB7yCS5RlOnAAAAMU"]
[Sat Apr 11 03:21:14.206842 2026] [:error] [pid 21569:tid 21667] [client 68.221.64.41:39454] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adlNqnAvQTgvXJ6vHorAuQAAAJE"]
[Sat Apr 11 03:21:14.723686 2026] [:error] [pid 21706:tid 21727] [client 68.221.64.41:23510] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adlNqiGQ1M5d8fQSsLEBdgAAABM"]
[Sat Apr 11 03:21:15.594931 2026] [:error] [pid 21706:tid 21710] [client 68.221.64.41:36593] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adlNqyGQ1M5d8fQSsLEBewAAAAI"]
[Sat Apr 11 03:21:16.127373 2026] [:error] [pid 21706:tid 21715] [client 68.221.64.41:23490] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adlNrCGQ1M5d8fQSsLEBfwAAAAc"]
[Sat Apr 11 03:21:16.621619 2026] [:error] [pid 21569:tid 21655] [client 68.221.64.41:62902] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adlNrHAvQTgvXJ6vHorAugAAAIo"]
[Sat Apr 11 03:21:17.179670 2026] [:error] [pid 21570:tid 21695] [client 68.221.64.41:36597] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adlNrTKs5t9xRSNL6cnz2QAAAFU"]
[Sat Apr 11 03:21:17.693164 2026] [:error] [pid 21706:tid 21708] [client 68.221.64.41:39440] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adlNrSGQ1M5d8fQSsLEBggAAAAA"]
[Sat Apr 11 03:21:18.186371 2026] [:error] [pid 21706:tid 21727] [client 68.221.64.41:36557] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adlNriGQ1M5d8fQSsLEBhgAAABM"]
[Sat Apr 11 03:21:18.784592 2026] [:error] [pid 21706:tid 21719] [client 68.221.64.41:48291] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adlNriGQ1M5d8fQSsLEBjAAAAAs"]
[Sat Apr 11 03:21:19.893766 2026] [:error] [pid 55451:tid 55467] [client 68.221.64.41:48281] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "adlNr3ApxuyB7yCS5RlOrQAAAM4"]
[Sat Apr 11 03:21:20.496183 2026] [:error] [pid 21706:tid 21719] [client 68.221.64.41:32630] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "adlNsCGQ1M5d8fQSsLEBlgAAAAs"]
[Sat Apr 11 03:21:21.009780 2026] [:error] [pid 21706:tid 21710] [client 68.221.64.41:62860] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "adlNsSGQ1M5d8fQSsLEBmgAAAAI"]
[Sat Apr 11 03:21:21.628709 2026] [:error] [pid 21569:tid 21676] [client 68.221.64.41:48263] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "adlNsXAvQTgvXJ6vHorAvQAAAJU"]
[Sat Apr 11 03:21:22.747097 2026] [:error] [pid 55451:tid 55475] [client 68.221.64.41:23507] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "adlNsnApxuyB7yCS5RlOugAAANY"]
[Sat Apr 11 03:21:23.265250 2026] [:error] [pid 21569:tid 21649] [client 68.221.64.41:36580] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "adlNs3AvQTgvXJ6vHorAwAAAAIQ"]
[Sat Apr 11 03:21:23.749734 2026] [:error] [pid 55451:tid 55474] [client 68.221.64.41:23496] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "adlNs3ApxuyB7yCS5RlOwAAAANU"]
[Sat Apr 11 03:21:24.348493 2026] [:error] [pid 55451:tid 55463] [client 68.221.64.41:48314] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "adlNtHApxuyB7yCS5RlOxgAAAMo"]
[Sat Apr 11 03:21:24.878160 2026] [:error] [pid 55451:tid 55473] [client 68.221.64.41:36595] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adlNtHApxuyB7yCS5RlOywAAANQ"]
[Sat Apr 11 03:21:25.845830 2026] [:error] [pid 55451:tid 55458] [client 68.221.64.41:39462] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adlNtXApxuyB7yCS5RlOzwAAAMU"]
[Sat Apr 11 03:21:26.426437 2026] [:error] [pid 21569:tid 21662] [client 68.221.64.41:36547] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adlNtnAvQTgvXJ6vHorAyQAAAI8"]
[Sat Apr 11 03:21:26.954469 2026] [:error] [pid 55451:tid 55469] [client 68.221.64.41:18155] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adlNtnApxuyB7yCS5RlO1QAAANA"]
[Sat Apr 11 03:21:27.519257 2026] [:error] [pid 21570:tid 21668] [client 68.221.64.41:36558] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlNtzKs5t9xRSNL6cnz6AAAAEM"]
[Sat Apr 11 03:21:28.020650 2026] [:error] [pid 21569:tid 21680] [client 68.221.64.41:48275] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlNuHAvQTgvXJ6vHorAzgAAAJc"]
[Sat Apr 11 03:21:28.542768 2026] [:error] [pid 55451:tid 55464] [client 68.221.64.41:39433] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlNuHApxuyB7yCS5RlO1wAAAMs"]
[Sat Apr 11 03:21:29.085604 2026] [:error] [pid 55451:tid 55462] [client 68.221.64.41:23501] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adlNuXApxuyB7yCS5RlO3AAAAMk"]
[Sat Apr 11 03:21:29.725488 2026] [:error] [pid 21569:tid 21683] [client 68.221.64.41:62900] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlNuXAvQTgvXJ6vHorA1AAAAJg"]
[Sat Apr 11 03:21:30.374509 2026] [:error] [pid 21569:tid 21650] [client 68.221.64.41:48308] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlNunAvQTgvXJ6vHorA1wAAAIU"]
[Sat Apr 11 03:21:31.080190 2026] [:error] [pid 21568:tid 21583] [client 68.221.64.41:62848] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlNu4iz5v_ljZxkpR_9uAAAAQs"]
[Sat Apr 11 03:21:31.597825 2026] [:error] [pid 21570:tid 21696] [client 68.221.64.41:48313] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adlNuzKs5t9xRSNL6cnz-AAAAFY"]
[Sat Apr 11 03:21:32.161634 2026] [:error] [pid 21568:tid 21576] [client 68.221.64.41:48256] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oircv.php"] [unique_id "adlNvIiz5v_ljZxkpR_9vQAAAQQ"]
[Sat Apr 11 03:21:33.113323 2026] [:error] [pid 55451:tid 55472] [client 68.221.64.41:39485] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oircv.php"] [unique_id "adlNvXApxuyB7yCS5RlO7QAAANM"]
[Sat Apr 11 03:21:33.734065 2026] [:error] [pid 21570:tid 21694] [client 68.221.64.41:48280] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oircv.php"] [unique_id "adlNvTKs5t9xRSNL6cnz_gAAAFQ"]
[Sat Apr 11 03:21:34.264228 2026] [:error] [pid 55451:tid 55455] [client 68.221.64.41:62864] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oircv.php"] [unique_id "adlNvnApxuyB7yCS5RlO8gAAAMI"]
[Sat Apr 11 03:21:34.810316 2026] [:error] [pid 21706:tid 21721] [client 68.221.64.41:48311] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "adlNviGQ1M5d8fQSsLEBswAAAA0"]
[Sat Apr 11 03:21:35.779123 2026] [:error] [pid 21706:tid 21708] [client 68.221.64.41:48306] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "adlNvyGQ1M5d8fQSsLEBxQAAAAA"]
[Sat Apr 11 03:21:36.407629 2026] [:error] [pid 21706:tid 21713] [client 68.221.64.41:32637] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "adlNwCGQ1M5d8fQSsLEBzgAAAAU"]
[Sat Apr 11 03:21:36.945309 2026] [:error] [pid 21706:tid 21723] [client 68.221.64.41:39456] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "adlNwCGQ1M5d8fQSsLEB0AAAAA8"]
[Sat Apr 11 03:21:37.459843 2026] [:error] [pid 21706:tid 21722] [client 68.221.64.41:48288] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlNwSGQ1M5d8fQSsLEB1AAAAA4"]
[Sat Apr 11 03:21:37.975027 2026] [:error] [pid 21706:tid 21730] [client 68.221.64.41:62893] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlNwSGQ1M5d8fQSsLEB2AAAABY"]
[Sat Apr 11 03:21:38.487229 2026] [:error] [pid 21706:tid 21713] [client 68.221.64.41:23516] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlNwiGQ1M5d8fQSsLEB3wAAAAU"]
[Sat Apr 11 03:21:38.979169 2026] [:error] [pid 21570:tid 21697] [client 68.221.64.41:39464] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adlNwjKs5t9xRSNL6cn0CQAAAFc"]
[Sat Apr 11 03:21:39.654449 2026] [:error] [pid 21569:tid 21669] [client 68.221.64.41:23522] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlNw3AvQTgvXJ6vHorA-gAAAJI"]
[Sat Apr 11 03:21:40.220701 2026] [:error] [pid 21706:tid 21727] [client 68.221.64.41:36581] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlNxCGQ1M5d8fQSsLEB8QAAABM"]
[Sat Apr 11 03:21:40.814656 2026] [:error] [pid 55451:tid 55461] [client 68.221.64.41:48271] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlNxHApxuyB7yCS5RlO_QAAAMg"]
[Sat Apr 11 03:21:41.392871 2026] [:error] [pid 55451:tid 55460] [client 68.221.64.41:62911] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Spow_SRw.php"] [unique_id "adlNxXApxuyB7yCS5RlPAgAAAMc"]
[Sat Apr 11 03:21:42.011656 2026] [:error] [pid 21706:tid 21731] [client 68.221.64.41:23493] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "adlNxiGQ1M5d8fQSsLEB_AAAABc"]
[Sat Apr 11 03:21:42.904849 2026] [:error] [pid 55451:tid 55472] [client 68.221.64.41:39428] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "adlNxnApxuyB7yCS5RlPBAAAANM"]
[Sat Apr 11 03:21:43.608673 2026] [:error] [pid 55451:tid 55453] [client 68.221.64.41:48309] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "adlNx3ApxuyB7yCS5RlPCAAAAMA"]
[Sat Apr 11 03:21:44.309659 2026] [:error] [pid 55451:tid 55475] [client 68.221.64.41:32624] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "adlNyHApxuyB7yCS5RlPDQAAANY"]
[Sat Apr 11 03:21:45.716817 2026] [:error] [pid 21706:tid 21713] [client 68.221.64.41:36553] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlNySGQ1M5d8fQSsLECDQAAAAU"]
[Sat Apr 11 03:21:46.730356 2026] [:error] [pid 21706:tid 21717] [client 68.221.64.41:36574] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlNyiGQ1M5d8fQSsLECEAAAAAk"]
[Sat Apr 11 03:21:47.204582 2026] [:error] [pid 21706:tid 21720] [client 68.221.64.41:23513] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxivicLhot.php"] [unique_id "adlNyyGQ1M5d8fQSsLECEQAAAAw"]
[Sat Apr 11 03:21:55.887073 2026] [:error] [pid 21706:tid 21708] [client 68.221.64.41:62857] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adlN0yGQ1M5d8fQSsLECPgAAAAA"]
[Sat Apr 11 03:21:56.421984 2026] [:error] [pid 21706:tid 21711] [client 68.221.64.41:32608] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adlN1CGQ1M5d8fQSsLECQQAAAAM"]
[Sat Apr 11 03:21:56.919552 2026] [:error] [pid 55451:tid 55474] [client 68.221.64.41:62879] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adlN1HApxuyB7yCS5RlPJQAAANU"]
[Sat Apr 11 03:21:57.563408 2026] [:error] [pid 21706:tid 21729] [client 68.221.64.41:32597] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adlN1SGQ1M5d8fQSsLECRgAAABU"]
[Sat Apr 11 03:21:58.186986 2026] [:error] [pid 21570:tid 21682] [client 68.221.64.41:48267] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "adlN1jKs5t9xRSNL6cn0JgAAAEs"]
[Sat Apr 11 03:21:58.740735 2026] [:error] [pid 55451:tid 55456] [client 68.221.64.41:23503] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "adlN1nApxuyB7yCS5RlPKwAAAMM"]
[Sat Apr 11 03:21:59.575949 2026] [:error] [pid 21569:tid 21654] [client 68.221.64.41:43331] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "adlN13AvQTgvXJ6vHorBOQAAAIk"]
[Sat Apr 11 03:22:00.104529 2026] [:error] [pid 21570:tid 21665] [client 68.221.64.41:39480] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "adlN2DKs5t9xRSNL6cn0KgAAAEI"]
[Sat Apr 11 03:22:30.441262 2026] [:error] [pid 21569:tid 21678] [client 68.221.64.41:52226] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "adlN9nAvQTgvXJ6vHorBbgAAAJY"]
[Sat Apr 11 03:22:31.493844 2026] [:error] [pid 21706:tid 21731] [client 68.221.64.41:39444] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "adlN9yGQ1M5d8fQSsLEC6wAAABc"]
[Sat Apr 11 03:22:32.585228 2026] [:error] [pid 21568:tid 21572] [client 68.221.64.41:39431] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "adlN-Iiz5v_ljZxkpR_-PAAAAQA"]
[Sat Apr 11 03:22:33.328115 2026] [:error] [pid 21569:tid 21657] [client 68.221.64.41:36600] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "adlN-XAvQTgvXJ6vHorBdAAAAIw"]
[Sat Apr 11 03:22:33.987191 2026] [:error] [pid 21569:tid 21671] [client 68.221.64.41:23505] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "adlN-XAvQTgvXJ6vHorBdgAAAJM"]
[Sat Apr 11 03:22:34.540485 2026] [:error] [pid 21569:tid 21669] [client 68.221.64.41:32585] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "adlN-nAvQTgvXJ6vHorBegAAAJI"]
[Sat Apr 11 03:22:35.414715 2026] [:error] [pid 55451:tid 55473] [client 68.221.64.41:48296] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "adlN-3ApxuyB7yCS5RlPoQAAANQ"]
[Sat Apr 11 03:22:35.912737 2026] [:error] [pid 21570:tid 21690] [client 68.221.64.41:48283] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "adlN-zKs5t9xRSNL6cn0XgAAAFA"]
[Sat Apr 11 03:22:36.402639 2026] [:error] [pid 55451:tid 55463] [client 68.221.64.41:23528] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adlN_HApxuyB7yCS5RlPpgAAAMo"]
[Sat Apr 11 03:22:37.200596 2026] [:error] [pid 21706:tid 21715] [client 68.221.64.41:32611] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adlN_SGQ1M5d8fQSsLEC_gAAAAc"]
[Sat Apr 11 03:22:37.893392 2026] [:error] [pid 21570:tid 21681] [client 68.221.64.41:62898] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adlN_TKs5t9xRSNL6cn0YQAAAEo"]
[Sat Apr 11 03:22:38.463229 2026] [:error] [pid 21568:tid 21584] [client 68.221.64.41:23517] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adlN_oiz5v_ljZxkpR_-TAAAAQw"]
[Sat Apr 11 03:22:39.013180 2026] [:error] [pid 21706:tid 21722] [client 68.221.64.41:36602] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adlN_yGQ1M5d8fQSsLEDDAAAAA4"]
[Sat Apr 11 03:22:39.649841 2026] [:error] [pid 21568:tid 21575] [client 68.221.64.41:36588] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adlN_4iz5v_ljZxkpR_-TwAAAQM"]
[Sat Apr 11 03:22:40.570561 2026] [:error] [pid 55451:tid 55470] [client 68.221.64.41:52978] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adlOAHApxuyB7yCS5RlPtwAAANE"]
[Sat Apr 11 03:22:41.401992 2026] [:error] [pid 21706:tid 21716] [client 68.221.64.41:36565] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adlOASGQ1M5d8fQSsLEDGwAAAAg"]
[Sat Apr 11 03:22:42.031189 2026] [:error] [pid 21568:tid 21578] [client 68.221.64.41:48312] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlOAoiz5v_ljZxkpR_-WwAAAQY"]
[Sat Apr 11 03:22:42.900442 2026] [:error] [pid 55451:tid 55468] [client 68.221.64.41:48264] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlOAnApxuyB7yCS5RlPugAAAM8"]
[Sat Apr 11 03:22:43.628283 2026] [:error] [pid 21706:tid 21720] [client 68.221.64.41:23499] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlOAyGQ1M5d8fQSsLEDKAAAAAw"]
[Sat Apr 11 03:22:44.299945 2026] [:error] [pid 21706:tid 21728] [client 68.221.64.41:39452] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adlOBCGQ1M5d8fQSsLEDKwAAABQ"]
[Sat Apr 11 03:22:44.873134 2026] [:error] [pid 55451:tid 55469] [client 68.221.64.41:48307] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iindv.php"] [unique_id "adlOBHApxuyB7yCS5RlPvQAAANA"]
[Sat Apr 11 03:22:45.475441 2026] [:error] [pid 21568:tid 21588] [client 68.221.64.41:39450] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iindv.php"] [unique_id "adlOBYiz5v_ljZxkpR_-ZwAAARA"]
[Sat Apr 11 03:22:46.095620 2026] [:error] [pid 21568:tid 21593] [client 68.221.64.41:48259] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iindv.php"] [unique_id "adlOBoiz5v_ljZxkpR_-bgAAARU"]
[Sat Apr 11 03:22:46.792972 2026] [:error] [pid 21568:tid 21587] [client 68.221.64.41:62863] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iindv.php"] [unique_id "adlOBoiz5v_ljZxkpR_-cwAAAQ8"]
[Sat Apr 11 03:22:47.375296 2026] [:error] [pid 21706:tid 21713] [client 68.221.64.41:48310] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maintura.php"] [unique_id "adlOByGQ1M5d8fQSsLEDOwAAAAU"]
[Sat Apr 11 03:22:47.928250 2026] [:error] [pid 21706:tid 21710] [client 68.221.64.41:23511] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maintura.php"] [unique_id "adlOByGQ1M5d8fQSsLEDPwAAAAI"]
[Sat Apr 11 03:22:48.670805 2026] [:error] [pid 21706:tid 21731] [client 68.221.64.41:36571] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maintura.php"] [unique_id "adlOCCGQ1M5d8fQSsLEDRQAAABc"]
[Sat Apr 11 03:22:49.244338 2026] [:error] [pid 21706:tid 21729] [client 68.221.64.41:36599] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maintura.php"] [unique_id "adlOCSGQ1M5d8fQSsLEDSgAAABU"]
[Sat Apr 11 03:22:49.943151 2026] [:error] [pid 55451:tid 55462] [client 68.221.64.41:62850] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlOCXApxuyB7yCS5RlPzgAAAMk"]
[Sat Apr 11 03:22:50.766010 2026] [:error] [pid 21706:tid 21731] [client 68.221.64.41:23524] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlOCiGQ1M5d8fQSsLEDUQAAABc"]
[Sat Apr 11 03:22:52.835660 2026] [:error] [pid 21706:tid 21710] [client 68.221.64.41:23549] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlODCGQ1M5d8fQSsLEDYwAAAAI"]
[Sat Apr 11 03:22:53.575962 2026] [:error] [pid 21706:tid 21724] [client 68.221.64.41:48278] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adlODSGQ1M5d8fQSsLEDaQAAABA"]
[Sat Apr 11 03:22:54.203418 2026] [:error] [pid 55451:tid 55454] [client 68.221.64.41:62874] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlODnApxuyB7yCS5RlP4AAAAME"]
[Sat Apr 11 03:22:54.850972 2026] [:error] [pid 21570:tid 21682] [client 68.221.64.41:36567] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adlODjKs5t9xRSNL6cn0fgAAAEs"]
[Sat Apr 11 03:23:04.563076 2026] [:error] [pid 21568:tid 21593] [client 68.221.64.41:23550] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlOGIiz5v_ljZxkpR_-owAAARU"]
[Sat Apr 11 03:23:05.533204 2026] [:error] [pid 55451:tid 55459] [client 68.221.64.41:32613] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlOGXApxuyB7yCS5RlQCgAAAMY"]
[Sat Apr 11 03:23:06.950972 2026] [:error] [pid 55451:tid 55474] [client 68.221.64.41:62878] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlOGnApxuyB7yCS5RlQFgAAANU"]
[Sat Apr 11 03:23:09.915989 2026] [:error] [pid 21706:tid 21725] [client 68.221.64.41:23498] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adlOHSGQ1M5d8fQSsLEDkQAAABE"]
[Sat Apr 11 03:23:11.988120 2026] [:error] [pid 21706:tid 21732] [client 68.221.64.41:62892] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adlOHyGQ1M5d8fQSsLEDnQAAABg"]
[Sat Apr 11 03:23:12.666200 2026] [:error] [pid 21706:tid 21713] [client 68.221.64.41:48293] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adlOICGQ1M5d8fQSsLEDowAAAAU"]
[Sat Apr 11 03:23:14.039801 2026] [:error] [pid 21569:tid 21652] [client 68.221.64.41:39467] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adlOInAvQTgvXJ6vHorBsgAAAIc"]
[Sat Apr 11 03:23:14.884753 2026] [:error] [pid 21570:tid 21691] [client 68.221.64.41:48318] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adlOIjKs5t9xRSNL6cn0oQAAAFE"]
[Sat Apr 11 03:23:15.645392 2026] [:error] [pid 21570:tid 21688] [client 68.221.64.41:23538] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlOIzKs5t9xRSNL6cn0ogAAAE4"]
[Sat Apr 11 03:23:17.051815 2026] [:error] [pid 21706:tid 21721] [client 68.221.64.41:36592] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlOJSGQ1M5d8fQSsLEDtwAAAA0"]
[Sat Apr 11 03:23:17.832751 2026] [:error] [pid 21570:tid 21690] [client 68.221.64.41:48304] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlOJTKs5t9xRSNL6cn0pwAAAFA"]
[Sat Apr 11 03:23:18.430413 2026] [:error] [pid 21568:tid 21594] [client 68.221.64.41:62881] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlOJoiz5v_ljZxkpR_-ugAAARY"]
[Sat Apr 11 03:23:18.950903 2026] [:error] [pid 21568:tid 21578] [client 68.221.64.41:52286] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlOJoiz5v_ljZxkpR_-uwAAAQY"]
[Sat Apr 11 03:23:19.474206 2026] [:error] [pid 21706:tid 21721] [client 68.221.64.41:39447] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlOJyGQ1M5d8fQSsLED1AAAAA0"]
[Sat Apr 11 03:23:20.540863 2026] [:error] [pid 21570:tid 21679] [client 68.221.64.41:36576] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlOKDKs5t9xRSNL6cn0sAAAAEk"]
[Sat Apr 11 03:23:21.058984 2026] [:error] [pid 55451:tid 55462] [client 68.221.64.41:23519] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adlOKXApxuyB7yCS5RlQSgAAAMk"]
[Sat Apr 11 03:23:21.565109 2026] [:error] [pid 21706:tid 21718] [client 68.221.64.41:52957] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlOKSGQ1M5d8fQSsLED2gAAAAo"]
[Sat Apr 11 03:23:22.353944 2026] [:error] [pid 21706:tid 21719] [client 68.221.64.41:23531] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlOKiGQ1M5d8fQSsLED3gAAAAs"]
[Sat Apr 11 03:23:22.856440 2026] [:error] [pid 21706:tid 21725] [client 68.221.64.41:52938] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlOKiGQ1M5d8fQSsLED4QAAABE"]
[Sat Apr 11 03:23:23.465344 2026] [:error] [pid 55451:tid 55461] [client 68.221.64.41:39483] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adlOK3ApxuyB7yCS5RlQUQAAAMg"]
[Sat Apr 11 03:23:24.213371 2026] [:error] [pid 55451:tid 55465] [client 68.221.64.41:48268] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adlOLHApxuyB7yCS5RlQWwAAAMw"]
[Sat Apr 11 03:23:24.845883 2026] [:error] [pid 55451:tid 55457] [client 68.221.64.41:62856] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adlOLHApxuyB7yCS5RlQYgAAAMQ"]
[Sat Apr 11 03:23:25.416908 2026] [:error] [pid 21570:tid 21679] [client 68.221.64.41:39459] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adlOLTKs5t9xRSNL6cn0uQAAAEk"]
[Sat Apr 11 03:23:26.251771 2026] [:error] [pid 55451:tid 55465] [client 68.221.64.41:48277] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adlOLnApxuyB7yCS5RlQZgAAAMw"]
[Sat Apr 11 03:23:26.831992 2026] [:error] [pid 21570:tid 21697] [client 68.221.64.41:39478] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adlOLjKs5t9xRSNL6cn0wAAAAFc"]
[Sat Apr 11 03:23:27.450549 2026] [:error] [pid 55451:tid 55455] [client 68.221.64.41:62862] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adlOL3ApxuyB7yCS5RlQaQAAAMI"]
[Sat Apr 11 03:23:27.928003 2026] [:error] [pid 21568:tid 21581] [client 68.221.64.41:18135] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adlOL4iz5v_ljZxkpR_-yAAAAQk"]
[Sat Apr 11 03:23:28.414727 2026] [:error] [pid 21568:tid 21575] [client 68.221.64.41:62887] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adlOMIiz5v_ljZxkpR_-ygAAAQM"]
[Sat Apr 11 03:23:29.956307 2026] [:error] [pid 21568:tid 21593] [client 68.221.64.41:39445] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adlOMYiz5v_ljZxkpR_-1QAAARU"]
[Sat Apr 11 03:23:30.633368 2026] [:error] [pid 21706:tid 21713] [client 68.221.64.41:23512] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adlOMiGQ1M5d8fQSsLED7QAAAAU"]
[Sat Apr 11 03:23:31.294678 2026] [:error] [pid 55451:tid 55462] [client 68.221.64.41:48276] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adlOM3ApxuyB7yCS5RlQeAAAAMk"]
[Sat Apr 11 03:23:32.239961 2026] [:error] [pid 21706:tid 21722] [client 68.221.64.41:39473] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adlONCGQ1M5d8fQSsLED9gAAAA4"]
[Sat Apr 11 03:23:32.770754 2026] [:error] [pid 21568:tid 21575] [client 68.221.64.41:36569] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adlONIiz5v_ljZxkpR_-2AAAAQM"]
[Sat Apr 11 03:23:33.283229 2026] [:error] [pid 21706:tid 21726] [client 68.221.64.41:48315] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adlONSGQ1M5d8fQSsLED_AAAABI"]
[Sat Apr 11 03:23:33.769685 2026] [:error] [pid 21570:tid 21661] [client 68.221.64.41:23504] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adlONTKs5t9xRSNL6cn00AAAAEA"]
[Sat Apr 11 03:23:34.329930 2026] [:error] [pid 21568:tid 21591] [client 68.221.64.41:36601] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adlONoiz5v_ljZxkpR_-3gAAARM"]
[Sat Apr 11 03:23:34.830724 2026] [:error] [pid 21706:tid 21711] [client 68.221.64.41:48257] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "adlONiGQ1M5d8fQSsLED_wAAAAM"]
[Sat Apr 11 03:23:35.383324 2026] [:error] [pid 21570:tid 21672] [client 68.221.64.41:32638] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "adlONzKs5t9xRSNL6cn01AAAAEU"]
[Sat Apr 11 03:23:36.059076 2026] [:error] [pid 21569:tid 21645] [client 68.221.64.41:48295] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "adlOOHAvQTgvXJ6vHorB4wAAAIA"]
[Sat Apr 11 03:23:36.754387 2026] [:error] [pid 21568:tid 21587] [client 68.221.64.41:32620] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "adlOOIiz5v_ljZxkpR_-6AAAAQ8"]
[Sat Apr 11 03:23:37.322017 2026] [:error] [pid 55451:tid 55466] [client 68.221.64.41:52929] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adlOOXApxuyB7yCS5RlQgwAAAM0"]
[Sat Apr 11 03:23:38.647505 2026] [:error] [pid 21570:tid 21691] [client 68.221.64.41:39436] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adlOOjKs5t9xRSNL6cn02gAAAFE"]
[Sat Apr 11 03:23:39.167815 2026] [:error] [pid 55451:tid 55456] [client 68.221.64.41:23497] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adlOO3ApxuyB7yCS5RlQkwAAAMM"]
[Sat Apr 11 03:23:39.729256 2026] [:error] [pid 21570:tid 21689] [client 68.221.64.41:48272] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adlOOzKs5t9xRSNL6cn03gAAAE8"]
[Sat Apr 11 03:23:40.276732 2026] [:error] [pid 55451:tid 55468] [client 68.221.64.41:32583] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adlOPHApxuyB7yCS5RlQmQAAAM8"]
[Sat Apr 11 03:23:40.995568 2026] [:error] [pid 55451:tid 55469] [client 68.221.64.41:48316] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adlOPHApxuyB7yCS5RlQnwAAANA"]
[Sat Apr 11 03:23:42.262060 2026] [:error] [pid 21706:tid 21720] [client 68.221.64.41:48298] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adlOPiGQ1M5d8fQSsLEEHAAAAAw"]
[Sat Apr 11 03:23:43.248052 2026] [:error] [pid 21706:tid 21719] [client 68.221.64.41:23545] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adlOPyGQ1M5d8fQSsLEEIQAAAAs"]
[Sat Apr 11 03:23:43.811867 2026] [:error] [pid 21706:tid 21728] [client 68.221.64.41:36546] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adlOPyGQ1M5d8fQSsLEEJgAAABQ"]
[Sat Apr 11 03:23:44.295197 2026] [:error] [pid 21568:tid 21584] [client 68.221.64.41:39457] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adlOQIiz5v_ljZxkpR_-9AAAAQw"]
[Sat Apr 11 03:23:45.191230 2026] [:error] [pid 21706:tid 21716] [client 68.221.64.41:32586] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adlOQSGQ1M5d8fQSsLEELwAAAAg"]
[Sat Apr 11 03:23:48.180305 2026] [:error] [pid 21569:tid 21671] [client 68.221.64.41:52968] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adlORHAvQTgvXJ6vHorB6wAAAJM"]
[Sat Apr 11 03:23:49.155371 2026] [:error] [pid 21570:tid 21694] [client 68.221.64.41:23508] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlORTKs5t9xRSNL6cn07QAAAFQ"]
[Sat Apr 11 03:23:49.644160 2026] [:error] [pid 21706:tid 21709] [client 68.221.64.41:39484] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlORSGQ1M5d8fQSsLEESwAAAAE"]
[Sat Apr 11 03:23:50.173266 2026] [:error] [pid 21570:tid 21682] [client 68.221.64.41:39449] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlORjKs5t9xRSNL6cn08gAAAEs"]
[Sat Apr 11 03:23:50.761707 2026] [:error] [pid 21706:tid 21709] [client 68.221.64.41:52249] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlORiGQ1M5d8fQSsLEEVQAAAAE"]
[Sat Apr 11 03:23:52.064064 2026] [:error] [pid 21568:tid 21592] [client 68.221.64.41:39486] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adlOSIiz5v_ljZxkpR__CgAAARQ"]
[Sat Apr 11 03:23:53.088324 2026] [:error] [pid 21706:tid 21729] [client 68.221.64.41:23548] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adlOSSGQ1M5d8fQSsLEEZwAAABU"]
[Sat Apr 11 03:23:54.520018 2026] [:error] [pid 21706:tid 21713] [client 68.221.64.41:32577] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adlOSiGQ1M5d8fQSsLEEeAAAAAU"]
[Sat Apr 11 03:23:59.410069 2026] [:error] [pid 55451:tid 55477] [client 68.221.64.41:23536] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adlOT3ApxuyB7yCS5RlQyAAAANg"]
[Sat Apr 11 03:24:01.784559 2026] [:error] [pid 55451:tid 55464] [client 68.221.64.41:52987] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlOUXApxuyB7yCS5RlQzwAAAMs"]
[Sat Apr 11 03:24:15.447693 2026] [:error] [pid 21706:tid 21714] [client 68.221.64.41:32579] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlOXyGQ1M5d8fQSsLEE2QAAAAY"]
[Sat Apr 11 03:24:16.260952 2026] [:error] [pid 21569:tid 21660] [client 68.221.64.41:18144] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlOYHAvQTgvXJ6vHorCBwAAAI4"]
[Sat Apr 11 03:24:17.832119 2026] [:error] [pid 21568:tid 21580] [client 68.221.64.41:36594] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlOYYiz5v_ljZxkpR__NgAAAQg"]
[Sat Apr 11 03:24:19.829734 2026] [:error] [pid 21570:tid 21681] [client 68.221.64.41:39441] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlOYzKs5t9xRSNL6cn1FgAAAEo"]
[Sat Apr 11 03:24:22.044891 2026] [:error] [pid 21706:tid 21720] [client 68.221.64.41:39481] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlOZiGQ1M5d8fQSsLEE-AAAAAw"]
[Sat Apr 11 03:24:23.517311 2026] [:error] [pid 21568:tid 21577] [client 68.221.64.41:62908] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlOZ4iz5v_ljZxkpR__SAAAAQU"]
[Sat Apr 11 03:24:24.432881 2026] [:error] [pid 21706:tid 21732] [client 68.221.64.41:62908] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlOaCGQ1M5d8fQSsLEFBQAAABg"]
[Sat Apr 11 03:24:25.322152 2026] [:error] [pid 21568:tid 21583] [client 68.221.64.41:52234] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlOaYiz5v_ljZxkpR__TgAAAQs"]
[Sat Apr 11 03:24:41.319655 2026] [:error] [pid 21569:tid 21652] [client 68.221.64.41:18153] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adlOeXAvQTgvXJ6vHorCMAAAAIc"]
[Sat Apr 11 03:24:42.698384 2026] [:error] [pid 55451:tid 55467] [client 68.221.64.41:18160] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adlOenApxuyB7yCS5RlRKgAAAM4"]
[Sat Apr 11 03:24:43.407764 2026] [:error] [pid 21706:tid 21730] [client 68.221.64.41:39455] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adlOeyGQ1M5d8fQSsLEFYgAAABY"]
[Sat Apr 11 03:24:44.404125 2026] [:error] [pid 55451:tid 55468] [client 68.221.64.41:62884] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adlOfHApxuyB7yCS5RlRLgAAAM8"]
[Sat Apr 11 03:24:46.010670 2026] [:error] [pid 21706:tid 21715] [client 68.221.64.41:52952] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlOfiGQ1M5d8fQSsLEFbwAAAAc"]
[Sat Apr 11 03:24:46.925119 2026] [:error] [pid 21706:tid 21709] [client 68.221.64.41:18166] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlOfiGQ1M5d8fQSsLEFcgAAAAE"]
[Sat Apr 11 03:24:47.807744 2026] [:error] [pid 21706:tid 21725] [client 68.221.64.41:52941] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlOfyGQ1M5d8fQSsLEFeQAAABE"]
[Sat Apr 11 03:24:48.506348 2026] [:error] [pid 21568:tid 21592] [client 68.221.64.41:18118] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlOgIiz5v_ljZxkpR__ewAAARQ"]
[Sat Apr 11 03:24:49.129278 2026] [:error] [pid 21568:tid 21593] [client 68.221.64.41:62873] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlOgYiz5v_ljZxkpR__fQAAARU"]
[Sat Apr 11 03:24:50.110986 2026] [:error] [pid 21706:tid 21725] [client 68.221.64.41:62883] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlOgiGQ1M5d8fQSsLEFhAAAABE"]
[Sat Apr 11 03:24:50.703671 2026] [:error] [pid 21706:tid 21711] [client 68.221.64.41:23523] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlOgiGQ1M5d8fQSsLEFiAAAAAM"]
[Sat Apr 11 03:24:51.279355 2026] [:error] [pid 21706:tid 21729] [client 68.221.64.41:48268] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlOgyGQ1M5d8fQSsLEFjwAAABU"]
[Sat Apr 11 03:24:52.597211 2026] [:error] [pid 21570:tid 21675] [client 68.221.64.41:23489] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlOhDKs5t9xRSNL6cn1RAAAAEc"]
[Sat Apr 11 03:24:53.151299 2026] [:error] [pid 55451:tid 55462] [client 68.221.64.41:23506] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlOhXApxuyB7yCS5RlRPgAAAMk"]
[Sat Apr 11 03:24:54.201153 2026] [:error] [pid 21706:tid 21730] [client 68.221.64.41:48290] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlOhiGQ1M5d8fQSsLEFmAAAABY"]
[Sat Apr 11 03:24:54.730431 2026] [:error] [pid 21568:tid 21596] [client 68.221.64.41:18116] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlOhoiz5v_ljZxkpR__jgAAARg"]
[Sat Apr 11 03:24:55.488998 2026] [:error] [pid 21570:tid 21685] [client 68.221.64.41:62865] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adlOhzKs5t9xRSNL6cn1SwAAAEw"]
[Sat Apr 11 03:24:56.679759 2026] [:error] [pid 55451:tid 55457] [client 68.221.64.41:62875] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adlOiHApxuyB7yCS5RlRSQAAAMQ"]
[Sat Apr 11 03:24:57.199558 2026] [:error] [pid 21570:tid 21670] [client 68.221.64.41:36545] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adlOiTKs5t9xRSNL6cn1VgAAAEQ"]
[Sat Apr 11 03:24:57.726168 2026] [:error] [pid 21706:tid 21731] [client 68.221.64.41:18122] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adlOiSGQ1M5d8fQSsLEFowAAABc"]
[Sat Apr 11 03:24:58.445135 2026] [:error] [pid 21568:tid 21572] [client 68.221.64.41:52989] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adlOioiz5v_ljZxkpR__lQAAAQA"]
[Sat Apr 11 03:24:58.939244 2026] [:error] [pid 21706:tid 21716] [client 68.221.64.41:48266] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adlOiiGQ1M5d8fQSsLEFqwAAAAg"]
[Sat Apr 11 03:24:59.752457 2026] [:error] [pid 21706:tid 21727] [client 68.221.64.41:36570] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adlOiyGQ1M5d8fQSsLEFsgAAABM"]
[Sat Apr 11 03:25:01.054351 2026] [:error] [pid 21570:tid 21688] [client 68.221.64.41:48305] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adlOjTKs5t9xRSNL6cn1WwAAAE4"]
[Sat Apr 11 03:25:01.797007 2026] [:error] [pid 21706:tid 21715] [client 68.221.64.41:48284] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adlOjSGQ1M5d8fQSsLEFxQAAAAc"]
[Sat Apr 11 03:25:02.344406 2026] [:error] [pid 21568:tid 21581] [client 68.221.64.41:65246] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adlOjoiz5v_ljZxkpR__nAAAAQk"]
[Sat Apr 11 03:25:03.030559 2026] [:error] [pid 21568:tid 21592] [client 68.221.64.41:48273] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adlOj4iz5v_ljZxkpR__nwAAARQ"]
[Sat Apr 11 03:25:03.719492 2026] [:error] [pid 21568:tid 21580] [client 68.221.64.41:39429] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adlOj4iz5v_ljZxkpR__pgAAAQg"]
[Sat Apr 11 03:25:04.382958 2026] [:error] [pid 21706:tid 21729] [client 68.221.64.41:52282] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlOkCGQ1M5d8fQSsLEF1wAAABU"]
[Sat Apr 11 03:25:05.018525 2026] [:error] [pid 21568:tid 21591] [client 68.221.64.41:18170] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlOkYiz5v_ljZxkpR__rAAAARM"]
[Sat Apr 11 03:25:05.595695 2026] [:error] [pid 21569:tid 21676] [client 68.221.64.41:52953] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlOkXAvQTgvXJ6vHorCUwAAAJU"]
[Sat Apr 11 03:25:07.129987 2026] [:error] [pid 55451:tid 55458] [client 68.221.64.41:48317] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adlOk3ApxuyB7yCS5RlRXgAAAMU"]
[Sat Apr 11 03:25:07.752872 2026] [:error] [pid 55451:tid 55461] [client 68.221.64.41:48270] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adlOk3ApxuyB7yCS5RlRYgAAAMg"]
[Sat Apr 11 03:25:08.367799 2026] [:error] [pid 55451:tid 55474] [client 68.221.64.41:48286] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adlOlHApxuyB7yCS5RlRZQAAANU"]
[Sat Apr 11 03:25:09.303575 2026] [:error] [pid 21568:tid 21594] [client 68.221.64.41:43354] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adlOlYiz5v_ljZxkpR__twAAARY"]
[Sat Apr 11 03:25:09.906831 2026] [:error] [pid 21570:tid 21670] [client 68.221.64.41:48300] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adlOlTKs5t9xRSNL6cn1bgAAAEQ"]
[Sat Apr 11 03:25:10.645860 2026] [:error] [pid 21570:tid 21695] [client 68.221.64.41:39463] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlOljKs5t9xRSNL6cn1dAAAAFU"]
[Sat Apr 11 03:25:11.754170 2026] [:error] [pid 21706:tid 21711] [client 68.221.64.41:39461] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlOlyGQ1M5d8fQSsLEF9QAAAAM"]
[Sat Apr 11 03:25:13.005102 2026] [:error] [pid 21569:tid 21674] [client 68.221.64.41:48297] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlOmXAvQTgvXJ6vHorCXgAAAJQ"]
[Sat Apr 11 03:25:13.588696 2026] [:error] [pid 21570:tid 21688] [client 68.221.64.41:36579] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adlOmTKs5t9xRSNL6cn1hgAAAE4"]
[Sat Apr 11 03:25:14.112850 2026] [:error] [pid 21570:tid 21677] [client 68.221.64.41:39482] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "adlOmjKs5t9xRSNL6cn1igAAAEg"]
[Sat Apr 11 03:25:23.824664 2026] [:error] [pid 21569:tid 21667] [client 68.221.64.41:52945] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adlOo3AvQTgvXJ6vHorChAAAAJE"]
[Sat Apr 11 03:25:24.586308 2026] [:error] [pid 21706:tid 21728] [client 68.221.64.41:23518] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adlOpCGQ1M5d8fQSsLEGRwAAABQ"]
[Sat Apr 11 03:25:25.070565 2026] [:error] [pid 55451:tid 55458] [client 68.221.64.41:39440] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adlOpXApxuyB7yCS5RlRkwAAAMU"]
[Sat Apr 11 03:25:26.090828 2026] [:error] [pid 21569:tid 21647] [client 68.221.64.41:62904] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adlOpnAvQTgvXJ6vHorChwAAAII"]
[Sat Apr 11 03:25:26.810433 2026] [:error] [pid 21706:tid 21711] [client 68.221.64.41:62903] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adlOpiGQ1M5d8fQSsLEGTwAAAAM"]
[Sat Apr 11 03:25:27.469187 2026] [:error] [pid 21706:tid 21720] [client 68.221.64.41:48269] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adlOpyGQ1M5d8fQSsLEGUwAAAAw"]
[Sat Apr 11 03:25:28.640189 2026] [:error] [pid 21568:tid 21574] [client 68.221.64.41:62880] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adlOqIiz5v_ljZxkpR__2AAAAQI"]
[Sat Apr 11 03:25:29.393843 2026] [:error] [pid 55451:tid 55475] [client 68.221.64.41:18127] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "adlOqXApxuyB7yCS5RlRqAAAANY"]
[Sat Apr 11 03:25:33.103794 2026] [:error] [pid 21706:tid 21729] [client 68.221.64.41:32593] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlOrSGQ1M5d8fQSsLEGbAAAABU"]
[Sat Apr 11 03:25:33.980561 2026] [:error] [pid 21568:tid 21586] [client 68.221.64.41:62858] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlOrYiz5v_ljZxkpR__4QAAAQ4"]
[Sat Apr 11 03:25:34.797475 2026] [:error] [pid 21706:tid 21718] [client 68.221.64.41:23492] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlOriGQ1M5d8fQSsLEGdAAAAAo"]
[Sat Apr 11 03:25:35.552707 2026] [:error] [pid 21706:tid 21730] [client 68.221.64.41:39477] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlOryGQ1M5d8fQSsLEGegAAABY"]
[Sat Apr 11 03:25:36.112922 2026] [:error] [pid 21706:tid 21708] [client 68.221.64.41:18168] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adlOsCGQ1M5d8fQSsLEGfwAAAAA"]
[Sat Apr 11 03:25:36.750575 2026] [:error] [pid 21706:tid 21727] [client 68.221.64.41:23529] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adlOsCGQ1M5d8fQSsLEGiQAAABM"]
[Sat Apr 11 03:25:37.397585 2026] [:error] [pid 21569:tid 21662] [client 68.221.64.41:32606] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adlOsXAvQTgvXJ6vHorClgAAAI8"]
[Sat Apr 11 03:25:39.364463 2026] [:error] [pid 55451:tid 55454] [client 68.221.64.41:39454] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "adlOs3ApxuyB7yCS5RlRvAAAAME"]
[Sat Apr 11 03:25:39.954858 2026] [:error] [pid 21570:tid 21675] [client 68.221.64.41:39479] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlOszKs5t9xRSNL6cn11wAAAEc"]
[Sat Apr 11 03:25:40.731774 2026] [:error] [pid 55451:tid 55469] [client 68.221.64.41:23541] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlOtHApxuyB7yCS5RlRxAAAANA"]
[Sat Apr 11 03:25:41.745800 2026] [:error] [pid 55451:tid 55468] [client 68.221.64.41:36561] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlOtXApxuyB7yCS5RlRyQAAAM8"]
[Sat Apr 11 03:25:42.787838 2026] [:error] [pid 21706:tid 21731] [client 68.221.64.41:23551] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlOtiGQ1M5d8fQSsLEGlAAAABc"]
[Sat Apr 11 03:25:44.010777 2026] [:error] [pid 21568:tid 21592] [client 68.221.64.41:48280] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/jp.php"] [unique_id "adlOuIiz5v_ljZxkpR__8AAAARQ"]
[Sat Apr 11 03:25:44.636732 2026] [:error] [pid 21706:tid 21720] [client 68.221.64.41:36580] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/jp.php"] [unique_id "adlOuCGQ1M5d8fQSsLEGqAAAAAw"]
[Sat Apr 11 03:25:45.698614 2026] [:error] [pid 21568:tid 21575] [client 68.221.64.41:62861] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/jp.php"] [unique_id "adlOuYiz5v_ljZxkpR__9gAAAQM"]
[Sat Apr 11 03:25:47.135411 2026] [:error] [pid 21706:tid 21726] [client 68.221.64.41:52976] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/jp.php"] [unique_id "adlOuyGQ1M5d8fQSsLEGuAAAABI"]
[Sat Apr 11 03:25:47.722019 2026] [:error] [pid 21706:tid 21728] [client 68.221.64.41:36590] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adlOuyGQ1M5d8fQSsLEGuwAAABQ"]
[Sat Apr 11 03:25:48.459803 2026] [:error] [pid 21568:tid 21586] [client 68.221.64.41:62906] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adlOvIiz5v_ljZxkpR__-AAAAQ4"]
[Sat Apr 11 03:25:49.448179 2026] [:error] [pid 21569:tid 21652] [client 68.221.64.41:23542] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adlOvXAvQTgvXJ6vHorCowAAAIc"]
[Sat Apr 11 03:25:50.168790 2026] [:error] [pid 21570:tid 21681] [client 68.221.64.41:18156] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adlOvjKs5t9xRSNL6cn17gAAAEo"]
[Sat Apr 11 03:25:50.818422 2026] [:error] [pid 21568:tid 21590] [client 68.221.64.41:48289] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "adlOvoiz5v_ljZxkpR___AAAARI"]
[Sat Apr 11 03:25:51.487561 2026] [:error] [pid 21569:tid 21680] [client 68.221.64.41:18139] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "adlOv3AvQTgvXJ6vHorCpQAAAJc"]
[Sat Apr 11 03:25:52.116948 2026] [:error] [pid 21568:tid 21595] [client 68.221.64.41:36573] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "adlOwIiz5v_ljZxkpR8AAAAAARc"]
[Sat Apr 11 03:25:52.737893 2026] [:error] [pid 21569:tid 21645] [client 68.221.64.41:48294] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "adlOwHAvQTgvXJ6vHorCqQAAAIA"]
[Sat Apr 11 03:25:53.265723 2026] [:error] [pid 55451:tid 55473] [client 68.221.64.41:36553] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlOwXApxuyB7yCS5RlR5AAAANQ"]
[Sat Apr 11 03:25:53.834077 2026] [:error] [pid 21706:tid 21716] [client 68.221.64.41:36591] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlOwSGQ1M5d8fQSsLEGzAAAAAg"]
[Sat Apr 11 03:25:54.564934 2026] [:error] [pid 21706:tid 21727] [client 68.221.64.41:32576] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlOwiGQ1M5d8fQSsLEG0AAAABM"]
[Sat Apr 11 03:25:55.413519 2026] [:error] [pid 21706:tid 21723] [client 68.221.64.41:32580] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlOwyGQ1M5d8fQSsLEG3wAAAA8"]
[Sat Apr 11 03:25:55.992245 2026] [:error] [pid 21706:tid 21709] [client 68.221.64.41:39460] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlOwyGQ1M5d8fQSsLEG5wAAAAE"]
[Sat Apr 11 03:25:57.804612 2026] [:error] [pid 21569:tid 21676] [client 68.221.64.41:52964] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlOxXAvQTgvXJ6vHorCuQAAAJU"]
[Sat Apr 11 03:25:58.570061 2026] [:error] [pid 21568:tid 21581] [client 68.221.64.41:48306] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlOxoiz5v_ljZxkpR8ACgAAAQk"]
[Sat Apr 11 03:26:00.211203 2026] [:error] [pid 21706:tid 21713] [client 68.221.64.41:52934] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlOyCGQ1M5d8fQSsLEHFAAAAAU"]
[Sat Apr 11 03:26:00.877662 2026] [:error] [pid 21568:tid 21582] [client 68.221.64.41:18172] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlOyIiz5v_ljZxkpR8AFAAAAQo"]
[Sat Apr 11 03:26:01.549317 2026] [:error] [pid 55451:tid 55474] [client 68.221.64.41:36547] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlOyXApxuyB7yCS5RlR9wAAANU"]
[Sat Apr 11 03:26:02.124426 2026] [:error] [pid 55451:tid 55469] [client 68.221.64.41:18114] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlOynApxuyB7yCS5RlR_AAAANA"]
[Sat Apr 11 03:26:02.617474 2026] [:error] [pid 55451:tid 55453] [client 68.221.64.41:23516] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlOynApxuyB7yCS5RlSAAAAAMA"]
[Sat Apr 11 03:26:03.182035 2026] [:error] [pid 21569:tid 21680] [client 68.221.64.41:52266] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlOy3AvQTgvXJ6vHorCyQAAAJc"]
[Sat Apr 11 03:26:03.995904 2026] [:error] [pid 55451:tid 55462] [client 68.221.64.41:23514] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlOy3ApxuyB7yCS5RlSBAAAAMk"]
[Sat Apr 11 03:26:05.268256 2026] [:error] [pid 55451:tid 55476] [client 68.221.64.41:52238] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlOzXApxuyB7yCS5RlSDQAAANc"]
[Sat Apr 11 03:26:06.007622 2026] [:error] [pid 21706:tid 21718] [client 68.221.64.41:18112] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adlOziGQ1M5d8fQSsLEHUAAAAAo"]
[Sat Apr 11 04:55:52.130487 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:37299] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "adlj2K8109xRDP2izWirlAAAAII"]
[Sat Apr 11 04:55:52.206119 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:4003] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adlj2K8109xRDP2izWirmAAAAI4"]
[Sat Apr 11 04:55:52.782189 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:3822] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adlj2GJmwJFFPEgRHfEALAAAAME"]
[Sat Apr 11 04:55:53.217642 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3174] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "adlj2WJmwJFFPEgRHfEAMQAAAMM"]
[Sat Apr 11 04:55:53.453501 2026] [:error] [pid 33172:tid 33225] [client 158.158.33.175:3542] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adlj2Tn2G0IJw5EZY9kW7QAAAEc"]
[Sat Apr 11 04:55:54.272878 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:3538] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adlj2q8109xRDP2izWirpwAAAJQ"]
[Sat Apr 11 04:55:54.516838 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3640] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "adlj2mJmwJFFPEgRHfEAPAAAANQ"]
[Sat Apr 11 04:55:54.860005 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:3159] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "adlj2roqTMlo30hcVw89XAAAAAk"]
[Sat Apr 11 04:55:55.493949 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:4029] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "adlj268109xRDP2izWirsQAAAIc"]
[Sat Apr 11 04:55:56.107627 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:3397] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "adlj3Dn2G0IJw5EZY9kW8gAAAEg"]
[Sat Apr 11 04:55:56.267896 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:58990] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "adlj3Dn2G0IJw5EZY9kW9QAAAE0"]
[Sat Apr 11 04:55:56.653178 2026] [:error] [pid 33172:tid 33223] [client 158.158.33.175:3832] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws60.php"] [unique_id "adlj3Dn2G0IJw5EZY9kW9wAAAEU"]
[Sat Apr 11 04:55:56.699655 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3143] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "adlj3K8109xRDP2izWiruQAAAJY"]
[Sat Apr 11 04:55:57.221631 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:37304] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "adlj3WJmwJFFPEgRHfEASQAAAMQ"]
[Sat Apr 11 04:55:57.455688 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:32994] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "adlj3WJmwJFFPEgRHfEATAAAAMc"]
[Sat Apr 11 04:55:57.990474 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:3502] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "adlj3a8109xRDP2izWirwgAAAIQ"]
[Sat Apr 11 04:55:58.634504 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:37279] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "adlj3q8109xRDP2izWirxwAAAJA"]
[Sat Apr 11 04:55:59.210365 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:3494] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "adlj37oqTMlo30hcVw89bQAAABY"]
[Sat Apr 11 04:55:59.873162 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:3178] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "adlj368109xRDP2izWir0QAAAIQ"]
[Sat Apr 11 04:56:00.071871 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:3817] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "adlj4LoqTMlo30hcVw89dAAAAAs"]
[Sat Apr 11 04:56:00.418669 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:3410] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "adlj4LoqTMlo30hcVw89dQAAABI"]
[Sat Apr 11 04:56:01.065372 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:4000] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "adlj4a8109xRDP2izWir2QAAAJg"]
[Sat Apr 11 04:56:01.643939 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:3440] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "adlj4a8109xRDP2izWir4AAAAIg"]
[Sat Apr 11 04:56:01.657865 2026] [:error] [pid 33171:tid 33196] [client 158.158.33.175:37282] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "adlj4boqTMlo30hcVw89fAAAAAo"]
[Sat Apr 11 04:56:02.202899 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:37288] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "adlj4roqTMlo30hcVw89fwAAAAg"]
[Sat Apr 11 04:56:02.239523 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:37274] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vanda.php"] [unique_id "adlj4mJmwJFFPEgRHfEAagAAAMs"]
[Sat Apr 11 04:56:02.846541 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:3566] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "adlj4q8109xRDP2izWir6gAAAJM"]
[Sat Apr 11 04:56:02.927503 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:3487] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "adlj4mJmwJFFPEgRHfEAbgAAANU"]
[Sat Apr 11 04:56:03.333027 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:58981] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "adlj468109xRDP2izWir7wAAAJY"]
[Sat Apr 11 04:56:03.506433 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:3409] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "adlj4zn2G0IJw5EZY9kXAQAAAEk"]
[Sat Apr 11 04:56:04.012571 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:58956] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "adlj5K8109xRDP2izWir8AAAAIs"]
[Sat Apr 11 04:56:04.098499 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:3808] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "adlj5K8109xRDP2izWir8gAAAIk"]
[Sat Apr 11 04:56:04.510158 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:37289] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/domains.php"] [unique_id "adlj5GJmwJFFPEgRHfEAdgAAANY"]
[Sat Apr 11 04:56:04.860177 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:3896] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "adlj5K8109xRDP2izWir_AAAAJQ"]
[Sat Apr 11 04:56:05.164471 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:58999] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "adlj5a8109xRDP2izWir_gAAAJE"]
[Sat Apr 11 04:56:05.557470 2026] [:error] [pid 33171:tid 33203] [client 158.158.33.175:3720] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "adlj5boqTMlo30hcVw89lAAAABE"]
[Sat Apr 11 04:56:05.724791 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:3727] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "adlj5a8109xRDP2izWisAwAAAIs"]
[Sat Apr 11 04:56:06.201250 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:3769] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "adlj5roqTMlo30hcVw89ngAAAAw"]
[Sat Apr 11 04:56:06.272329 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:3594] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "adlj5q8109xRDP2izWisCQAAAJQ"]
[Sat Apr 11 04:56:06.687129 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:3534] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "adlj5q8109xRDP2izWisDQAAAJI"]
[Sat Apr 11 04:56:06.755810 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:3394] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/144.php"] [unique_id "adlj5q8109xRDP2izWisDgAAAIU"]
[Sat Apr 11 04:56:07.316472 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:3533] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "adlj568109xRDP2izWisEwAAAJM"]
[Sat Apr 11 04:56:07.505917 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:3714] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "adlj57oqTMlo30hcVw89qwAAAAs"]
[Sat Apr 11 04:56:07.842590 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3741] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "adlj52JmwJFFPEgRHfEAhwAAAMA"]
[Sat Apr 11 04:56:08.047420 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:3794] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "adlj6GJmwJFFPEgRHfEAigAAAMg"]
[Sat Apr 11 04:56:08.336342 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3608] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "adlj6GJmwJFFPEgRHfEAkAAAAMM"]
[Sat Apr 11 04:56:08.524892 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:3569] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "adlj6Dn2G0IJw5EZY9kXCQAAAFI"]
[Sat Apr 11 04:56:08.913675 2026] [:error] [pid 33172:tid 33239] [client 158.158.33.175:3971] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd.php"] [unique_id "adlj6Dn2G0IJw5EZY9kXCwAAAFU"]
[Sat Apr 11 04:56:09.034928 2026] [:error] [pid 33172:tid 33223] [client 158.158.33.175:3789] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "adlj6Tn2G0IJw5EZY9kXDQAAAEU"]
[Sat Apr 11 04:56:09.409854 2026] [:error] [pid 33172:tid 33230] [client 158.158.33.175:3718] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "adlj6Tn2G0IJw5EZY9kXEQAAAEw"]
[Sat Apr 11 04:56:09.526987 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:35538] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "adlj6a8109xRDP2izWisJQAAAII"]
[Sat Apr 11 04:56:09.899499 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:4011] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "adlj6a8109xRDP2izWisKgAAAJI"]
[Sat Apr 11 04:56:10.019227 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:3158] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "adlj6jn2G0IJw5EZY9kXFgAAAFQ"]
[Sat Apr 11 04:56:10.442403 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:37299] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "adlj6q8109xRDP2izWisLwAAAIc"]
[Sat Apr 11 04:56:10.572411 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:3457] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "adlj6q8109xRDP2izWisMgAAAI8"]
[Sat Apr 11 04:56:10.927617 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3973] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-104.php"] [unique_id "adlj6mJmwJFFPEgRHfEAngAAAMM"]
[Sat Apr 11 04:56:11.142250 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:59007] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlj62JmwJFFPEgRHfEAoQAAANg"]
[Sat Apr 11 04:56:11.492290 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3598] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "adlj62JmwJFFPEgRHfEAqQAAANQ"]
[Sat Apr 11 04:56:11.723754 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:3985] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlj62JmwJFFPEgRHfEAqwAAAMg"]
[Sat Apr 11 04:56:11.988462 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:3586] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "adlj668109xRDP2izWisPgAAAIw"]
[Sat Apr 11 04:56:12.235359 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:3619] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlj7GJmwJFFPEgRHfEAsAAAANc"]
[Sat Apr 11 04:56:12.512519 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:58971] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "adlj7GJmwJFFPEgRHfEAswAAAME"]
[Sat Apr 11 04:56:12.820752 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3510] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlj7GJmwJFFPEgRHfEAuQAAANY"]
[Sat Apr 11 04:56:13.097775 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:37273] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rzki.php"] [unique_id "adlj7a8109xRDP2izWisSwAAAIk"]
[Sat Apr 11 04:56:13.402177 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:3825] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "adlj7Tn2G0IJw5EZY9kXIAAAAEk"]
[Sat Apr 11 04:56:13.701279 2026] [:error] [pid 33172:tid 33219] [client 158.158.33.175:3463] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlj7Tn2G0IJw5EZY9kXIQAAAEE"]
[Sat Apr 11 04:56:13.894159 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:3328] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "adlj7Tn2G0IJw5EZY9kXIgAAAFg"]
[Sat Apr 11 04:56:14.202820 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:3796] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlj7roqTMlo30hcVw89xQAAAAk"]
[Sat Apr 11 04:56:14.481311 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:3439] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "adlj7jn2G0IJw5EZY9kXIwAAAEM"]
[Sat Apr 11 04:56:14.696156 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:32996] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlj7jn2G0IJw5EZY9kXJAAAAFI"]
[Sat Apr 11 04:56:15.012210 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:3517] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "adlj77oqTMlo30hcVw890wAAABg"]
[Sat Apr 11 04:56:15.183107 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:32991] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xsas.php"] [unique_id "adlj768109xRDP2izWisVAAAAIU"]
[Sat Apr 11 04:56:15.586855 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:3983] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "adlj768109xRDP2izWisWAAAAJc"]
[Sat Apr 11 04:56:15.683012 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:4030] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "adlj77oqTMlo30hcVw891gAAAAI"]
[Sat Apr 11 04:56:16.213285 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:34251] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "adlj8K8109xRDP2izWisYQAAAJg"]
[Sat Apr 11 04:56:16.217652 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:3433] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "adlj8GJmwJFFPEgRHfEAyQAAAM4"]
[Sat Apr 11 04:56:16.712453 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:58976] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "adlj8GJmwJFFPEgRHfEAzwAAAMM"]
[Sat Apr 11 04:56:16.779860 2026] [:error] [pid 33171:tid 33193] [client 158.158.33.175:58972] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "adlj8LoqTMlo30hcVw892wAAAAc"]
[Sat Apr 11 04:56:17.217173 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:4026] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d12.php"] [unique_id "adlj8WJmwJFFPEgRHfEA0wAAAMQ"]
[Sat Apr 11 04:56:17.300718 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:32997] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "adlj8WJmwJFFPEgRHfEA1QAAAMY"]
[Sat Apr 11 04:56:17.793930 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:3774] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "adlj8WJmwJFFPEgRHfEA2QAAAM4"]
[Sat Apr 11 04:56:17.824817 2026] [:error] [pid 33172:tid 33218] [client 158.158.33.175:4008] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "adlj8Tn2G0IJw5EZY9kXLQAAAEA"]
[Sat Apr 11 04:56:18.285136 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:58989] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "adlj8jn2G0IJw5EZY9kXLwAAAFI"]
[Sat Apr 11 04:56:18.306445 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:37306] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "adlj8mJmwJFFPEgRHfEA3gAAANQ"]
[Sat Apr 11 04:56:18.823247 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:58945] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "adlj8mJmwJFFPEgRHfEA4gAAAMQ"]
[Sat Apr 11 04:56:18.870808 2026] [:error] [pid 33173:tid 33266] [client 158.158.33.175:3535] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "adlj8q8109xRDP2izWisfwAAAJU"]
[Sat Apr 11 04:56:19.313362 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:3193] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/okxh.php"] [unique_id "adlj82JmwJFFPEgRHfEA5wAAAME"]
[Sat Apr 11 04:56:19.389640 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:3978] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "adlj868109xRDP2izWishQAAAIk"]
[Sat Apr 11 04:56:19.795172 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:58966] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "adlj868109xRDP2izWisigAAAIE"]
[Sat Apr 11 04:56:20.011675 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:3531] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "adlj9K8109xRDP2izWisjgAAAIo"]
[Sat Apr 11 04:56:20.278375 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:34272] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "adlj9Dn2G0IJw5EZY9kXNQAAAEY"]
[Sat Apr 11 04:56:20.536820 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:4013] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "adlj9K8109xRDP2izWiskwAAAJg"]
[Sat Apr 11 04:56:20.765782 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3170] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "adlj9GJmwJFFPEgRHfEA8gAAANQ"]
[Sat Apr 11 04:56:21.034783 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:3490] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "adlj9a8109xRDP2izWislwAAAJI"]
[Sat Apr 11 04:56:21.284103 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:37259] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/55b76.php"] [unique_id "adlj9WJmwJFFPEgRHfEA_QAAAMo"]
[Sat Apr 11 04:56:21.509419 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:32974] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "adlj9WJmwJFFPEgRHfEBAAAAANA"]
[Sat Apr 11 04:56:21.761563 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3176] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "adlj9a8109xRDP2izWisnAAAAJY"]
[Sat Apr 11 04:56:22.001466 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:4021] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "adlj9mJmwJFFPEgRHfEBBQAAAMk"]
[Sat Apr 11 04:56:22.340338 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:37308] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "adlj9mJmwJFFPEgRHfEBCAAAAMI"]
[Sat Apr 11 04:56:22.804936 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3860] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "adlj9mJmwJFFPEgRHfEBDAAAAMQ"]
[Sat Apr 11 04:56:22.837899 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:4031] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "adlj9mJmwJFFPEgRHfEBDQAAAMY"]
[Sat Apr 11 04:56:23.317739 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:3814] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "adlj92JmwJFFPEgRHfEBEgAAAMg"]
[Sat Apr 11 04:56:23.323633 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:3981] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "adlj9zn2G0IJw5EZY9kXQAAAAEI"]
[Sat Apr 11 04:56:23.808063 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:3488] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "adlj9zn2G0IJw5EZY9kXQgAAAFg"]
[Sat Apr 11 04:56:23.846917 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:3191] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "adlj97oqTMlo30hcVw895wAAABg"]
[Sat Apr 11 04:56:24.381921 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3830] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "adlj-GJmwJFFPEgRHfEBGwAAANQ"]
[Sat Apr 11 04:56:24.409661 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:3188] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "adlj-GJmwJFFPEgRHfEBHAAAAME"]
[Sat Apr 11 04:56:24.918374 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3829] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "adlj-GJmwJFFPEgRHfEBIwAAAMQ"]
[Sat Apr 11 04:56:24.938048 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:37286] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "adlj-GJmwJFFPEgRHfEBJQAAAMI"]
[Sat Apr 11 04:56:25.496108 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:3786] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "adlj-WJmwJFFPEgRHfEBMAAAAMo"]
[Sat Apr 11 04:56:25.516672 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3576] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maul.php"] [unique_id "adlj-WJmwJFFPEgRHfEBMQAAAMw"]
[Sat Apr 11 04:56:26.005176 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:58955] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "adlj-jn2G0IJw5EZY9kXSQAAAFM"]
[Sat Apr 11 04:56:26.123786 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:3571] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "adlj-jn2G0IJw5EZY9kXSgAAAEk"]
[Sat Apr 11 04:56:26.507157 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:33010] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "adlj-q8109xRDP2izWissgAAAIc"]
[Sat Apr 11 04:56:26.609310 2026] [:error] [pid 33171:tid 33191] [client 158.158.33.175:3451] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "adlj-roqTMlo30hcVw897AAAAAU"]
[Sat Apr 11 04:56:27.066444 2026] [:error] [pid 33172:tid 33235] [client 158.158.33.175:58954] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "adlj-zn2G0IJw5EZY9kXVQAAAFE"]
[Sat Apr 11 04:56:27.100000 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:3420] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "adlj-68109xRDP2izWistAAAAI0"]
[Sat Apr 11 04:56:27.637675 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:33006] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5b9ac.php"] [unique_id "adlj-zn2G0IJw5EZY9kXWgAAAFM"]
[Sat Apr 11 04:56:27.801632 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:4027] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "adlj-2JmwJFFPEgRHfEBQQAAAMs"]
[Sat Apr 11 04:56:28.144740 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:3174] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "adlj_GJmwJFFPEgRHfEBRwAAAMo"]
[Sat Apr 11 04:56:28.308871 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:37294] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "adlj_GJmwJFFPEgRHfEBTQAAANE"]
[Sat Apr 11 04:56:28.729695 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:33537] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "adlj_K8109xRDP2izWisugAAAIM"]
[Sat Apr 11 04:56:28.788336 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:37292] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adlj_GJmwJFFPEgRHfEBVQAAAMg"]
[Sat Apr 11 04:56:29.370592 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:3402] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adlj_WJmwJFFPEgRHfEBXAAAANE"]
[Sat Apr 11 04:56:29.413967 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:4010] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "adlj_WJmwJFFPEgRHfEBXQAAAMQ"]
[Sat Apr 11 04:56:29.946131 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:33014] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hehe.php"] [unique_id "adlj_WJmwJFFPEgRHfEBZgAAAM4"]
[Sat Apr 11 04:56:29.950662 2026] [:error] [pid 33172:tid 33230] [client 158.158.33.175:32985] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adlj_Tn2G0IJw5EZY9kXYgAAAEw"]
[Sat Apr 11 04:56:30.444504 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3561] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adlj_mJmwJFFPEgRHfEBagAAAMQ"]
[Sat Apr 11 04:56:30.552433 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:37264] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adlj_mJmwJFFPEgRHfEBbAAAANA"]
[Sat Apr 11 04:56:31.055605 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3831] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "adlj_2JmwJFFPEgRHfEBcgAAAMw"]
[Sat Apr 11 04:56:31.081780 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:3553] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adlj_zn2G0IJw5EZY9kXcQAAAFg"]
[Sat Apr 11 04:56:31.531775 2026] [:error] [pid 33171:tid 33202] [client 158.158.33.175:37291] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "adlj_7oqTMlo30hcVw899AAAABA"]
[Sat Apr 11 04:56:31.559747 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:3415] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adlj_2JmwJFFPEgRHfEBdgAAANI"]
[Sat Apr 11 04:56:32.058933 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:3156] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adlkALoqTMlo30hcVw899wAAABU"]
[Sat Apr 11 04:56:32.078128 2026] [:error] [pid 33171:tid 33196] [client 158.158.33.175:37293] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "adlkALoqTMlo30hcVw89-AAAAAo"]
[Sat Apr 11 04:56:32.573809 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:3604] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "adlkAK8109xRDP2izWiswwAAAJE"]
[Sat Apr 11 04:56:32.738230 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:3778] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "adlkAGJmwJFFPEgRHfEBgwAAAMs"]
[Sat Apr 11 04:56:33.074080 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:3862] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "adlkAa8109xRDP2izWisxwAAAIE"]
[Sat Apr 11 04:56:33.238157 2026] [:error] [pid 33172:tid 33222] [client 158.158.33.175:3634] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "adlkATn2G0IJw5EZY9kXdwAAAEQ"]
[Sat Apr 11 04:56:33.556040 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:37271] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "adlkATn2G0IJw5EZY9kXeQAAAFA"]
[Sat Apr 11 04:56:33.986720 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3638] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "adlkAWJmwJFFPEgRHfEBkQAAAMk"]
[Sat Apr 11 04:56:34.059063 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3611] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/varb.php"] [unique_id "adlkAmJmwJFFPEgRHfEBlAAAANY"]
[Sat Apr 11 04:56:34.567875 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:3585] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "adlkAmJmwJFFPEgRHfEBmgAAAMs"]
[Sat Apr 11 04:56:35.069293 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:3736] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "adlkAzn2G0IJw5EZY9kXhAAAAEI"]
[Sat Apr 11 04:56:35.133459 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:37303] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "adlkA2JmwJFFPEgRHfEBoQAAAMo"]
[Sat Apr 11 04:56:35.548310 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:32992] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "adlkA68109xRDP2izWisyQAAAI8"]
[Sat Apr 11 04:56:35.689172 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:3995] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "adlkA68109xRDP2izWiszQAAAIU"]
[Sat Apr 11 04:56:36.039686 2026] [:error] [pid 33172:tid 33219] [client 158.158.33.175:3600] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lm15.php"] [unique_id "adlkBDn2G0IJw5EZY9kXhwAAAEE"]
[Sat Apr 11 04:56:36.238574 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:3635] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "adlkBGJmwJFFPEgRHfEBrgAAAMo"]
[Sat Apr 11 04:56:36.523646 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:3528] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "adlkBDn2G0IJw5EZY9kXjAAAAFI"]
[Sat Apr 11 04:56:36.862066 2026] [:error] [pid 33172:tid 33235] [client 158.158.33.175:58978] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "adlkBDn2G0IJw5EZY9kXkAAAAFE"]
[Sat Apr 11 04:56:37.399633 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:3167] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "adlkBboqTMlo30hcVw89_QAAAAk"]
[Sat Apr 11 04:56:37.513229 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:58948] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "adlkBWJmwJFFPEgRHfEBtwAAAMs"]
[Sat Apr 11 04:56:37.999887 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3428] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "adlkBWJmwJFFPEgRHfEBugAAAMk"]
[Sat Apr 11 04:56:38.205512 2026] [:error] [pid 33172:tid 33228] [client 158.158.33.175:37254] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "adlkBjn2G0IJw5EZY9kXmAAAAEo"]
[Sat Apr 11 04:56:38.706784 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:3142] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clss.php"] [unique_id "adlkBq8109xRDP2izWis0QAAAIY"]
[Sat Apr 11 04:56:38.816784 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:3765] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "adlkBjn2G0IJw5EZY9kXnQAAAFM"]
[Sat Apr 11 04:56:39.262024 2026] [:error] [pid 33172:tid 33239] [client 158.158.33.175:3745] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "adlkBzn2G0IJw5EZY9kXoQAAAFU"]
[Sat Apr 11 04:56:39.433534 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:3454] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "adlkB68109xRDP2izWis0wAAAJQ"]
[Sat Apr 11 04:56:39.834284 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:33000] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "adlkB2JmwJFFPEgRHfEBxwAAAMI"]
[Sat Apr 11 04:56:40.101647 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:35532] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "adlkCGJmwJFFPEgRHfEBywAAAME"]
[Sat Apr 11 04:56:40.517642 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:3462] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "adlkCK8109xRDP2izWis2AAAAIM"]
[Sat Apr 11 04:56:40.705802 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:3764] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "adlkCGJmwJFFPEgRHfEB1QAAAMY"]
[Sat Apr 11 04:56:41.227133 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:3745] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/44.php"] [unique_id "adlkCWJmwJFFPEgRHfEB2wAAANg"]
[Sat Apr 11 04:56:41.293048 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:3458] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "adlkCa8109xRDP2izWis2QAAAI8"]
[Sat Apr 11 04:56:41.770976 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:3495] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "adlkCWJmwJFFPEgRHfEB4QAAAMY"]
[Sat Apr 11 04:56:42.484936 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3155] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "adlkCq8109xRDP2izWis3wAAAJg"]
[Sat Apr 11 04:56:42.904209 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:3609] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "adlkCq8109xRDP2izWis4gAAAJE"]
[Sat Apr 11 04:56:43.208677 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:32979] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "adlkCzn2G0IJw5EZY9kXpwAAAEg"]
[Sat Apr 11 04:56:43.464054 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:3431] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "adlkC68109xRDP2izWis6wAAAIQ"]
[Sat Apr 11 04:56:43.781927 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3642] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "adlkC68109xRDP2izWis8AAAAJg"]
[Sat Apr 11 04:56:44.061633 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:3991] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5e0a.php"] [unique_id "adlkDK8109xRDP2izWis8gAAAIE"]
[Sat Apr 11 04:56:44.525849 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:3767] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "adlkDLoqTMlo30hcVw8-BQAAABU"]
[Sat Apr 11 04:56:44.652776 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:58953] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "adlkDGJmwJFFPEgRHfEB7gAAAME"]
[Sat Apr 11 04:56:45.145312 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:3142] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "adlkDboqTMlo30hcVw8-CgAAABc"]
[Sat Apr 11 04:56:45.222727 2026] [:error] [pid 33172:tid 33228] [client 158.158.33.175:37307] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "adlkDTn2G0IJw5EZY9kXqwAAAEo"]
[Sat Apr 11 04:56:45.770206 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:3498] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "adlkDTn2G0IJw5EZY9kXrwAAAEM"]
[Sat Apr 11 04:56:45.779492 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:3177] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "adlkDboqTMlo30hcVw8-DQAAAAk"]
[Sat Apr 11 04:56:46.282693 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3646] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "adlkDq8109xRDP2izWis_AAAAJg"]
[Sat Apr 11 04:56:46.709491 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:58946] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bo.php"] [unique_id "adlkDq8109xRDP2izWis_wAAAIs"]
[Sat Apr 11 04:56:46.863937 2026] [:error] [pid 33172:tid 33225] [client 158.158.33.175:3541] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "adlkDjn2G0IJw5EZY9kXtQAAAEc"]
[Sat Apr 11 04:56:47.385872 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:4009] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "adlkD68109xRDP2izWitAwAAAIU"]
[Sat Apr 11 04:56:47.477389 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:3419] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "adlkDzn2G0IJw5EZY9kXuwAAAFA"]
[Sat Apr 11 04:56:48.007632 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:37275] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "adlkEK8109xRDP2izWitBgAAAI8"]
[Sat Apr 11 04:56:48.257807 2026] [:error] [pid 33172:tid 33222] [client 158.158.33.175:3403] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "adlkEDn2G0IJw5EZY9kXvgAAAEQ"]
[Sat Apr 11 04:56:48.588937 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:3742] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "adlkEK8109xRDP2izWitBwAAAIQ"]
[Sat Apr 11 04:56:48.898875 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:33007] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "adlkEDn2G0IJw5EZY9kXwQAAAFQ"]
[Sat Apr 11 04:56:49.195312 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:32980] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/56c53.php"] [unique_id "adlkETn2G0IJw5EZY9kXwwAAAE0"]
[Sat Apr 11 04:56:49.526200 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:37280] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "adlkETn2G0IJw5EZY9kXxgAAAEg"]
[Sat Apr 11 04:56:49.791150 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:32993] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "adlkEWJmwJFFPEgRHfEB8QAAAMA"]
[Sat Apr 11 04:56:50.067260 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:35535] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "adlkEjn2G0IJw5EZY9kXygAAAFA"]
[Sat Apr 11 04:56:50.510454 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:3779] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "adlkEq8109xRDP2izWitDgAAAIU"]
[Sat Apr 11 04:56:50.628789 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:37263] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx78.php"] [unique_id "adlkEmJmwJFFPEgRHfEB9gAAAMo"]
[Sat Apr 11 04:56:55.099716 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:35553] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "adlkFzn2G0IJw5EZY9kX9AAAAFY"]
[Sat Apr 11 04:56:55.225910 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:3722] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "adlkFzn2G0IJw5EZY9kX9gAAAEY"]
[Sat Apr 11 04:56:55.662274 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:3447] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "adlkF7oqTMlo30hcVw8-JgAAABU"]
[Sat Apr 11 04:56:56.095852 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3806] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "adlkGGJmwJFFPEgRHfECCAAAAMk"]
[Sat Apr 11 04:56:56.501112 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:3783] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "adlkGGJmwJFFPEgRHfECCQAAAME"]
[Sat Apr 11 04:56:56.639956 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:3513] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "adlkGK8109xRDP2izWitIwAAAII"]
[Sat Apr 11 04:56:57.032028 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:3418] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "adlkGa8109xRDP2izWitJQAAAJE"]
[Sat Apr 11 04:56:57.306090 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:3405] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "adlkGTn2G0IJw5EZY9kYBAAAAFM"]
[Sat Apr 11 04:56:57.537835 2026] [:error] [pid 33172:tid 33241] [client 158.158.33.175:37269] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "adlkGTn2G0IJw5EZY9kYBgAAAFc"]
[Sat Apr 11 04:56:58.031644 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:3914] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "adlkGjn2G0IJw5EZY9kYCAAAAEM"]
[Sat Apr 11 04:56:58.108192 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3447] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "adlkGmJmwJFFPEgRHfECDAAAAMQ"]
[Sat Apr 11 04:56:58.656985 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:3606] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "adlkGq8109xRDP2izWitLgAAAIo"]
[Sat Apr 11 04:56:58.809365 2026] [:error] [pid 33172:tid 33235] [client 158.158.33.175:3819] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "adlkGjn2G0IJw5EZY9kYDAAAAFE"]
[Sat Apr 11 04:56:59.357485 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:58958] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "adlkG68109xRDP2izWitMQAAAIY"]
[Sat Apr 11 04:56:59.581391 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:3543] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "adlkG2JmwJFFPEgRHfECEAAAANE"]
[Sat Apr 11 04:57:00.128386 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:3478] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "adlkHLoqTMlo30hcVw8-MgAAABg"]
[Sat Apr 11 04:57:00.349173 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:37284] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "adlkHGJmwJFFPEgRHfECEwAAAM4"]
[Sat Apr 11 04:57:00.782451 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:3818] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlkHK8109xRDP2izWitNQAAAIw"]
[Sat Apr 11 04:57:00.912591 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:3476] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "adlkHK8109xRDP2izWitNgAAAJI"]
[Sat Apr 11 04:57:01.412290 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:3401] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlkHWJmwJFFPEgRHfECJQAAAM8"]
[Sat Apr 11 04:57:01.475413 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:3895] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "adlkHWJmwJFFPEgRHfECJgAAAME"]
[Sat Apr 11 04:57:02.022148 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:3298] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "adlkHroqTMlo30hcVw8-NQAAABY"]
[Sat Apr 11 04:57:02.050854 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:3527] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlkHroqTMlo30hcVw8-NgAAABI"]
[Sat Apr 11 04:57:02.517680 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:3464] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlkHjn2G0IJw5EZY9kYFAAAAFA"]
[Sat Apr 11 04:57:02.546142 2026] [:error] [pid 33171:tid 33190] [client 158.158.33.175:3927] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlkHroqTMlo30hcVw8-OAAAAAQ"]
[Sat Apr 11 04:57:03.046826 2026] [:error] [pid 33172:tid 33225] [client 158.158.33.175:3407] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlkHzn2G0IJw5EZY9kYFwAAAEc"]
[Sat Apr 11 04:57:03.559066 2026] [:error] [pid 33172:tid 33218] [client 158.158.33.175:37288] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adlkHzn2G0IJw5EZY9kYHAAAAEA"]
[Sat Apr 11 04:57:03.573287 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:3169] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlkH7oqTMlo30hcVw8-PgAAAA0"]
[Sat Apr 11 04:57:04.137897 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:3581] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adlkIK8109xRDP2izWitQQAAAI4"]
[Sat Apr 11 04:57:04.216992 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:3309] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adlkIK8109xRDP2izWitQgAAAIQ"]
[Sat Apr 11 04:57:04.699685 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:37248] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adlkIK8109xRDP2izWitQwAAAJg"]
[Sat Apr 11 04:57:04.763743 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:3500] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adlkIK8109xRDP2izWitRAAAAJQ"]
[Sat Apr 11 04:57:05.248428 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:3877] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adlkITn2G0IJw5EZY9kYJwAAAFY"]
[Sat Apr 11 04:57:05.264343 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:37298] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adlkIa8109xRDP2izWitRQAAAJY"]
[Sat Apr 11 04:57:05.771741 2026] [:error] [pid 33171:tid 33193] [client 158.158.33.175:3459] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adlkIboqTMlo30hcVw8-TAAAAAc"]
[Sat Apr 11 04:57:05.844059 2026] [:error] [pid 33171:tid 33201] [client 158.158.33.175:3508] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "adlkIboqTMlo30hcVw8-TQAAAA8"]
[Sat Apr 11 04:57:06.358621 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:3857] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gfd.php"] [unique_id "adlkIroqTMlo30hcVw8-UAAAAA4"]
[Sat Apr 11 04:57:06.443976 2026] [:error] [pid 33171:tid 33202] [client 158.158.33.175:3602] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "adlkIroqTMlo30hcVw8-UwAAABA"]
[Sat Apr 11 04:57:06.848264 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:3643] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "adlkIq8109xRDP2izWitTgAAAIA"]
[Sat Apr 11 04:57:07.178715 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:3477] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "adlkI68109xRDP2izWitUAAAAJA"]
[Sat Apr 11 04:57:07.406513 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:3729] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "adlkI68109xRDP2izWitUQAAAJI"]
[Sat Apr 11 04:57:07.677065 2026] [:error] [pid 33171:tid 33196] [client 158.158.33.175:3583] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "adlkI7oqTMlo30hcVw8-WwAAAAo"]
[Sat Apr 11 04:57:07.888715 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:3504] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "adlkI7oqTMlo30hcVw8-XAAAAAA"]
[Sat Apr 11 04:57:08.183011 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:37302] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adlkJK8109xRDP2izWitVwAAAJc"]
[Sat Apr 11 04:57:08.543449 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3503] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/callback.php"] [unique_id "adlkJGJmwJFFPEgRHfECLwAAANQ"]
[Sat Apr 11 04:57:08.748442 2026] [:error] [pid 33172:tid 33230] [client 158.158.33.175:3584] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adlkJDn2G0IJw5EZY9kYMQAAAEw"]
[Sat Apr 11 04:57:09.116622 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:3411] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adlkJboqTMlo30hcVw8-YwAAAAg"]
[Sat Apr 11 04:57:09.399479 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:3999] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adlkJa8109xRDP2izWitXwAAAJI"]
[Sat Apr 11 04:57:09.619312 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:3628] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adlkJboqTMlo30hcVw8-ZwAAAAs"]
[Sat Apr 11 04:57:09.953153 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:3920] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adlkJa8109xRDP2izWitZQAAAJM"]
[Sat Apr 11 04:57:10.165724 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:3187] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adlkJq8109xRDP2izWitZwAAAIc"]
[Sat Apr 11 04:57:10.460868 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:33541] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlkJq8109xRDP2izWitagAAAIk"]
[Sat Apr 11 04:57:10.651826 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:33578] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adlkJq8109xRDP2izWitbAAAAIM"]
[Sat Apr 11 04:57:11.045645 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:3291] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlkJ2JmwJFFPEgRHfECOQAAANI"]
[Sat Apr 11 04:57:11.316635 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3750] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlkJ2JmwJFFPEgRHfECOwAAAMk"]
[Sat Apr 11 04:57:11.549862 2026] [:error] [pid 33171:tid 33187] [client 158.158.33.175:3617] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlkJ7oqTMlo30hcVw8-bgAAAAE"]
[Sat Apr 11 04:57:11.876494 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:3436] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlkJ7oqTMlo30hcVw8-cgAAAAs"]
[Sat Apr 11 04:57:12.204878 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:37262] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlkKGJmwJFFPEgRHfECQQAAANc"]
[Sat Apr 11 04:57:12.480028 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:4005] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlkKGJmwJFFPEgRHfECRAAAAMo"]
[Sat Apr 11 04:57:12.721302 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:33540] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "adlkKGJmwJFFPEgRHfECRgAAAMI"]
[Sat Apr 11 04:57:12.985565 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:3810] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adlkKGJmwJFFPEgRHfECSgAAANE"]
[Sat Apr 11 04:57:13.283546 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:34240] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "adlkKboqTMlo30hcVw8-dwAAAA4"]
[Sat Apr 11 04:57:13.474445 2026] [:error] [pid 33171:tid 33193] [client 158.158.33.175:32975] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "adlkKboqTMlo30hcVw8-eQAAAAc"]
[Sat Apr 11 04:57:13.945970 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:34267] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "adlkKWJmwJFFPEgRHfECVgAAAMI"]
[Sat Apr 11 04:57:14.268908 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:3748] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "adlkKq8109xRDP2izWitdAAAAIQ"]
[Sat Apr 11 04:57:14.462422 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3886] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "adlkKmJmwJFFPEgRHfECYgAAAMk"]
[Sat Apr 11 04:57:14.763138 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:36160] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "adlkKroqTMlo30hcVw8-gAAAAAg"]
[Sat Apr 11 04:57:14.991861 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:3749] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "adlkKq8109xRDP2izWitdgAAAJc"]
[Sat Apr 11 04:57:15.258493 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3515] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blogs.php"] [unique_id "adlkK68109xRDP2izWitdwAAAJY"]
[Sat Apr 11 04:57:15.575933 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:3833] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "adlkK7oqTMlo30hcVw8-gwAAAA0"]
[Sat Apr 11 04:57:15.744041 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:3442] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "adlkK68109xRDP2izWitfQAAAJE"]
[Sat Apr 11 04:57:16.152674 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:37268] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "adlkLLoqTMlo30hcVw8-hgAAABg"]
[Sat Apr 11 04:57:16.348484 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:3810] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "adlkLK8109xRDP2izWithgAAAIo"]
[Sat Apr 11 04:57:16.673653 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:58980] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "adlkLK8109xRDP2izWitiQAAAJY"]
[Sat Apr 11 04:57:16.934552 2026] [:error] [pid 33172:tid 33239] [client 158.158.33.175:58954] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "adlkLDn2G0IJw5EZY9kYOQAAAFU"]
[Sat Apr 11 04:57:17.195354 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:3480] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "adlkLa8109xRDP2izWitjQAAAJQ"]
[Sat Apr 11 04:57:17.454335 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:3879] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zlnckdxn.php"] [unique_id "adlkLa8109xRDP2izWitkQAAAI4"]
[Sat Apr 11 04:57:17.674126 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:3726] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "adlkLa8109xRDP2izWitlAAAAIU"]
[Sat Apr 11 04:57:17.937658 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:33017] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "adlkLa8109xRDP2izWitmgAAAJM"]
[Sat Apr 11 04:57:18.208909 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:3144] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "adlkLmJmwJFFPEgRHfECbwAAANc"]
[Sat Apr 11 04:57:18.461088 2026] [:error] [pid 33173:tid 33266] [client 158.158.33.175:3288] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "adlkLq8109xRDP2izWitnwAAAJU"]
[Sat Apr 11 04:57:18.721823 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:3647] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "adlkLq8109xRDP2izWitoQAAAI4"]
[Sat Apr 11 04:57:19.050109 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:3564] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "adlkL68109xRDP2izWitpQAAAIo"]
[Sat Apr 11 04:57:19.353673 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:3955] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwzs.php"] [unique_id "adlkL68109xRDP2izWitqgAAAJM"]
[Sat Apr 11 04:57:19.584712 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:3989] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs6.php"] [unique_id "adlkL2JmwJFFPEgRHfECdAAAAMU"]
[Sat Apr 11 04:57:20.061087 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:3582] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwzs.php"] [unique_id "adlkMLoqTMlo30hcVw8-kwAAAA4"]
[Sat Apr 11 04:57:20.145821 2026] [:error] [pid 33171:tid 33191] [client 158.158.33.175:3573] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwzs.php"] [unique_id "adlkMLoqTMlo30hcVw8-lAAAAAU"]
[Sat Apr 11 04:57:20.704804 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:3766] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwzs.php"] [unique_id "adlkMGJmwJFFPEgRHfECfQAAAMc"]
[Sat Apr 11 04:57:20.724130 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:3960] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwzs.php"] [unique_id "adlkMGJmwJFFPEgRHfECfgAAANM"]
[Sat Apr 11 04:57:21.212196 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:36201] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwzs.php"] [unique_id "adlkMTn2G0IJw5EZY9kYQwAAAE8"]
[Sat Apr 11 04:57:21.323025 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:3723] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwzs.php"] [unique_id "adlkMTn2G0IJw5EZY9kYRQAAAE0"]
[Sat Apr 11 04:57:21.826476 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:3917] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwzs.php"] [unique_id "adlkMWJmwJFFPEgRHfECigAAAM8"]
[Sat Apr 11 04:57:21.834316 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:3987] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adlkMWJmwJFFPEgRHfECiwAAAMc"]
[Sat Apr 11 04:57:22.317094 2026] [:error] [pid 33172:tid 33230] [client 158.158.33.175:36185] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adlkMjn2G0IJw5EZY9kYRwAAAEw"]
[Sat Apr 11 04:57:22.326604 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:3177] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adlkMjn2G0IJw5EZY9kYSAAAAFI"]
[Sat Apr 11 04:57:22.821232 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:32984] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adlkMq8109xRDP2izWitrAAAAIw"]
[Sat Apr 11 04:57:22.921708 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:3827] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adlkMmJmwJFFPEgRHfEClwAAAM8"]
[Sat Apr 11 04:57:23.399896 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3746] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adlkM2JmwJFFPEgRHfECoAAAANY"]
[Sat Apr 11 04:57:23.416753 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:32987] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adlkM2JmwJFFPEgRHfECoQAAAMk"]
[Sat Apr 11 04:57:23.892646 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:33568] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adlkM2JmwJFFPEgRHfECqAAAAMQ"]
[Sat Apr 11 04:57:23.915389 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3557] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "adlkM2JmwJFFPEgRHfECqQAAAMA"]
[Sat Apr 11 04:57:24.425892 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:32999] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "adlkNDn2G0IJw5EZY9kYTgAAAFY"]
[Sat Apr 11 04:57:24.527289 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:59005] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "adlkNLoqTMlo30hcVw8-mQAAAAw"]
[Sat Apr 11 04:57:25.076181 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:3570] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "adlkNboqTMlo30hcVw8-nAAAABc"]
[Sat Apr 11 04:57:25.204222 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3424] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "adlkNa8109xRDP2izWitrwAAAJY"]
[Sat Apr 11 04:57:25.598808 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3446] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "adlkNWJmwJFFPEgRHfECvQAAAMA"]
[Sat Apr 11 04:57:25.750831 2026] [:error] [pid 33171:tid 33196] [client 158.158.33.175:34254] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "adlkNboqTMlo30hcVw8-nQAAAAo"]
[Sat Apr 11 04:57:26.235813 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:3162] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "adlkNmJmwJFFPEgRHfECwwAAAM0"]
[Sat Apr 11 04:57:26.349035 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:32986] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewe.php"] [unique_id "adlkNmJmwJFFPEgRHfECxAAAANI"]
[Sat Apr 11 04:57:26.849702 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:36212] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewe.php"] [unique_id "adlkNmJmwJFFPEgRHfECygAAANM"]
[Sat Apr 11 04:57:27.087690 2026] [:error] [pid 33172:tid 33222] [client 158.158.33.175:3738] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewe.php"] [unique_id "adlkNzn2G0IJw5EZY9kYUwAAAEQ"]
[Sat Apr 11 04:57:27.397419 2026] [:error] [pid 33171:tid 33189] [client 158.158.33.175:3521] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewe.php"] [unique_id "adlkN7oqTMlo30hcVw8-pwAAAAM"]
[Sat Apr 11 04:57:27.600641 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3199] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewe.php"] [unique_id "adlkN2JmwJFFPEgRHfECzwAAAMw"]
[Sat Apr 11 04:57:27.958452 2026] [:error] [pid 33171:tid 33187] [client 158.158.33.175:33550] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewe.php"] [unique_id "adlkN7oqTMlo30hcVw8-qQAAAAE"]
[Sat Apr 11 04:57:28.154712 2026] [:error] [pid 33171:tid 33201] [client 158.158.33.175:35555] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewe.php"] [unique_id "adlkOLoqTMlo30hcVw8-qwAAAA8"]
[Sat Apr 11 04:57:28.460223 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:3858] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adlkODn2G0IJw5EZY9kYXAAAAFY"]
[Sat Apr 11 04:57:28.672250 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:58973] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewe.php"] [unique_id "adlkODn2G0IJw5EZY9kYXwAAAFg"]
[Sat Apr 11 04:57:29.025353 2026] [:error] [pid 33172:tid 33218] [client 158.158.33.175:3577] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adlkOTn2G0IJw5EZY9kYYgAAAEA"]
[Sat Apr 11 04:57:29.188998 2026] [:error] [pid 33172:tid 33235] [client 158.158.33.175:3848] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adlkOTn2G0IJw5EZY9kYZQAAAFE"]
[Sat Apr 11 04:57:29.520690 2026] [:error] [pid 33172:tid 33228] [client 158.158.33.175:3844] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adlkOTn2G0IJw5EZY9kYaQAAAEo"]
[Sat Apr 11 04:57:29.748891 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:32988] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adlkOTn2G0IJw5EZY9kYbAAAAFY"]
[Sat Apr 11 04:57:30.030805 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3387] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adlkOq8109xRDP2izWittAAAAJg"]
[Sat Apr 11 04:57:30.435474 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:37272] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adlkOmJmwJFFPEgRHfEC2gAAAM0"]
[Sat Apr 11 04:57:30.508643 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:34282] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "adlkOmJmwJFFPEgRHfEC2wAAANg"]
[Sat Apr 11 04:57:30.945679 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3555] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adlkOmJmwJFFPEgRHfEC3gAAAMQ"]
[Sat Apr 11 04:57:31.027660 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3752] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "adlkO2JmwJFFPEgRHfEC4AAAAMA"]
[Sat Apr 11 04:57:31.507453 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:3138] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "adlkO2JmwJFFPEgRHfEC5gAAAM4"]
[Sat Apr 11 04:57:31.646428 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:3183] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "adlkO2JmwJFFPEgRHfEC6AAAAME"]
[Sat Apr 11 04:57:31.992312 2026] [:error] [pid 33172:tid 33222] [client 158.158.33.175:3277] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "adlkOzn2G0IJw5EZY9kYcwAAAEQ"]
[Sat Apr 11 04:57:32.356383 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:33011] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "adlkPGJmwJFFPEgRHfEC9AAAANY"]
[Sat Apr 11 04:57:32.485743 2026] [:error] [pid 33172:tid 33235] [client 158.158.33.175:58984] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "adlkPDn2G0IJw5EZY9kYdQAAAFE"]
[Sat Apr 11 04:57:32.870442 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:33560] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "adlkPDn2G0IJw5EZY9kYeQAAAEg"]
[Sat Apr 11 04:57:32.977490 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:3266] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "adlkPGJmwJFFPEgRHfEC_wAAAMI"]
[Sat Apr 11 04:57:33.447211 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:3624] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x9.php"] [unique_id "adlkPTn2G0IJw5EZY9kYfQAAAFQ"]
[Sat Apr 11 04:57:33.519393 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:58962] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "adlkPTn2G0IJw5EZY9kYfwAAAEM"]
[Sat Apr 11 04:57:33.958087 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:35568] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "adlkPTn2G0IJw5EZY9kYgAAAAEk"]
[Sat Apr 11 04:57:34.239635 2026] [:error] [pid 33172:tid 33222] [client 158.158.33.175:3512] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "adlkPjn2G0IJw5EZY9kYgwAAAEQ"]
[Sat Apr 11 04:57:34.551436 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:34285] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "adlkPq8109xRDP2izWitvAAAAIY"]
[Sat Apr 11 04:57:34.809601 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:58965] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "adlkPmJmwJFFPEgRHfEDCgAAAM4"]
[Sat Apr 11 04:57:35.179773 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:4028] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "adlkP2JmwJFFPEgRHfEDDgAAAMc"]
[Sat Apr 11 04:57:35.330576 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:3316] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "adlkP68109xRDP2izWitxAAAAI0"]
[Sat Apr 11 04:57:35.866085 2026] [:error] [pid 33171:tid 33192] [client 158.158.33.175:3414] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "adlkP7oqTMlo30hcVw8-vQAAAAY"]
[Sat Apr 11 04:57:35.958630 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3461] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "adlkP2JmwJFFPEgRHfEDEQAAAMQ"]
[Sat Apr 11 04:57:36.575694 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3180] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "adlkQGJmwJFFPEgRHfEDFQAAANY"]
[Sat Apr 11 04:57:36.625467 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:58982] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "adlkQGJmwJFFPEgRHfEDFwAAAMo"]
[Sat Apr 11 04:57:37.119165 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:3580] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "adlkQWJmwJFFPEgRHfEDGwAAAMc"]
[Sat Apr 11 04:57:37.218105 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:32350] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adlkQTn2G0IJw5EZY9kYhAAAAEY"]
[Sat Apr 11 04:57:37.717838 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:3636] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "adlkQWJmwJFFPEgRHfEDHQAAANM"]
[Sat Apr 11 04:57:37.738964 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3496] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adlkQWJmwJFFPEgRHfEDHgAAAMQ"]
[Sat Apr 11 04:57:38.245324 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3580] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "adlkQmJmwJFFPEgRHfEDJAAAAMM"]
[Sat Apr 11 04:57:38.284534 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:58987] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adlkQq8109xRDP2izWit0wAAAI0"]
[Sat Apr 11 04:57:38.785997 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:34249] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adlkQq8109xRDP2izWit1AAAAI8"]
[Sat Apr 11 04:57:38.826176 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3183] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adlkQmJmwJFFPEgRHfEDLAAAAMk"]
[Sat Apr 11 04:57:39.272398 2026] [:error] [pid 33171:tid 33193] [client 158.158.33.175:32960] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "adlkQ7oqTMlo30hcVw8-yAAAAAc"]
[Sat Apr 11 04:57:39.349571 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:32990] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adlkQ2JmwJFFPEgRHfEDMwAAAMc"]
[Sat Apr 11 04:57:39.922123 2026] [:error] [pid 33172:tid 33232] [client 158.158.33.175:36163] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adlkQzn2G0IJw5EZY9kYiwAAAE4"]
[Sat Apr 11 04:57:39.950607 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:34269] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "adlkQzn2G0IJw5EZY9kYjAAAAE8"]
[Sat Apr 11 04:57:40.497872 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3777] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adlkRGJmwJFFPEgRHfEDPQAAAMw"]
[Sat Apr 11 04:57:40.501973 2026] [:error] [pid 33171:tid 33189] [client 158.158.33.175:3429] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "adlkRLoqTMlo30hcVw8-ygAAAAM"]
[Sat Apr 11 04:57:40.999321 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:3915] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "adlkRLoqTMlo30hcVw8-zQAAABg"]
[Sat Apr 11 04:57:41.087738 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:58961] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "adlkRboqTMlo30hcVw8-0AAAABQ"]
[Sat Apr 11 04:57:41.585182 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:58988] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "adlkRTn2G0IJw5EZY9kYkgAAAEY"]
[Sat Apr 11 04:57:41.699034 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:36128] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "adlkRWJmwJFFPEgRHfEDQQAAANg"]
[Sat Apr 11 04:57:42.132569 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:3610] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "adlkRjn2G0IJw5EZY9kYlgAAAFQ"]
[Sat Apr 11 04:57:42.291758 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:37256] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "adlkRq8109xRDP2izWit2QAAAIY"]
[Sat Apr 11 04:57:42.645591 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3618] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "adlkRmJmwJFFPEgRHfEDRwAAANY"]
[Sat Apr 11 04:57:42.997602 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:36171] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "adlkRroqTMlo30hcVw8-4QAAABc"]
[Sat Apr 11 04:57:43.565931 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:3732] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "adlkR68109xRDP2izWit2gAAAIw"]
[Sat Apr 11 04:57:43.594022 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3437] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "adlkR2JmwJFFPEgRHfEDTgAAANQ"]
[Sat Apr 11 04:57:44.090870 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:3856] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "adlkSGJmwJFFPEgRHfEDVgAAAMg"]
[Sat Apr 11 04:57:44.207640 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3470] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cpp2.php"] [unique_id "adlkSGJmwJFFPEgRHfEDWAAAANY"]
[Sat Apr 11 04:57:44.658012 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:35560] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "adlkSGJmwJFFPEgRHfEDYAAAAM8"]
[Sat Apr 11 04:57:45.070270 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:4023] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cpp2.php"] [unique_id "adlkSTn2G0IJw5EZY9kYmgAAAFM"]
[Sat Apr 11 04:57:45.501367 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:37310] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "adlkSWJmwJFFPEgRHfEDbgAAANY"]
[Sat Apr 11 04:57:45.649146 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3181] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cpp2.php"] [unique_id "adlkSWJmwJFFPEgRHfEDcAAAAMM"]
[Sat Apr 11 04:57:46.127940 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:38957] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cpp2.php"] [unique_id "adlkSmJmwJFFPEgRHfEDdQAAAMk"]
[Sat Apr 11 04:57:46.269301 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:3615] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cpp2.php"] [unique_id "adlkSmJmwJFFPEgRHfEDdgAAANg"]
[Sat Apr 11 04:57:46.638340 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:35571] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cpp2.php"] [unique_id "adlkSq8109xRDP2izWit4wAAAJc"]
[Sat Apr 11 04:57:46.769435 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:3812] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "adlkSjn2G0IJw5EZY9kYnQAAAE0"]
[Sat Apr 11 04:57:47.213326 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:3506] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cpp2.php"] [unique_id "adlkS2JmwJFFPEgRHfEDggAAANU"]
[Sat Apr 11 04:57:47.255032 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:3423] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "adlkS2JmwJFFPEgRHfEDgwAAANc"]
[Sat Apr 11 04:57:47.812364 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:4024] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "adlkS7oqTMlo30hcVw8--wAAABI"]
[Sat Apr 11 04:57:47.844353 2026] [:error] [pid 33171:tid 33187] [client 158.158.33.175:33593] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cpp2.php"] [unique_id "adlkS7oqTMlo30hcVw8-_AAAAAE"]
[Sat Apr 11 04:57:48.455349 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:3713] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "adlkTLoqTMlo30hcVw8_AgAAAAs"]
[Sat Apr 11 04:57:48.582858 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:3719] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "adlkTLoqTMlo30hcVw8_BQAAAAw"]
[Sat Apr 11 04:57:49.072248 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:3558] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "adlkTa8109xRDP2izWit7AAAAIQ"]
[Sat Apr 11 04:57:49.140604 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3516] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-ajax.php"] [unique_id "adlkTWJmwJFFPEgRHfEDiAAAAMw"]
[Sat Apr 11 04:57:49.579512 2026] [:error] [pid 33172:tid 33229] [client 158.158.33.175:3164] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "adlkTTn2G0IJw5EZY9kYoQAAAEs"]
[Sat Apr 11 04:57:49.662772 2026] [:error] [pid 33171:tid 33203] [client 158.158.33.175:3790] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-ajax.php"] [unique_id "adlkTboqTMlo30hcVw8_DQAAABE"]
[Sat Apr 11 04:57:50.096762 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:3712] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "adlkTmJmwJFFPEgRHfEDkAAAAM8"]
[Sat Apr 11 04:57:50.387261 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:58947] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-ajax.php"] [unique_id "adlkTmJmwJFFPEgRHfEDkwAAANQ"]
[Sat Apr 11 04:57:50.701649 2026] [:error] [pid 33171:tid 33190] [client 158.158.33.175:4018] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-ajax.php"] [unique_id "adlkTroqTMlo30hcVw8_EwAAAAQ"]
[Sat Apr 11 04:57:51.074923 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:3164] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-ajax.php"] [unique_id "adlkT7oqTMlo30hcVw8_FgAAABc"]
[Sat Apr 11 04:57:51.276746 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:37257] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-ajax.php"] [unique_id "adlkT7oqTMlo30hcVw8_GAAAAAw"]
[Sat Apr 11 04:57:51.590736 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:3474] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amthd.php"] [unique_id "adlkT68109xRDP2izWit-gAAAIE"]
[Sat Apr 11 04:57:51.875669 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:3395] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-ajax.php"] [unique_id "adlkT2JmwJFFPEgRHfEDmQAAANM"]
[Sat Apr 11 04:57:52.136429 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:36213] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amthd.php"] [unique_id "adlkUDn2G0IJw5EZY9kYqAAAAFM"]
[Sat Apr 11 04:57:52.504705 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:3847] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin-ajax.php"] [unique_id "adlkULoqTMlo30hcVw8_JAAAAAg"]
[Sat Apr 11 04:57:52.624240 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:32964] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amthd.php"] [unique_id "adlkUGJmwJFFPEgRHfEDnAAAAMg"]
[Sat Apr 11 04:57:53.045943 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:36193] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amthd.php"] [unique_id "adlkUTn2G0IJw5EZY9kYqgAAAE8"]
[Sat Apr 11 04:57:53.149093 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:3469] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amthd.php"] [unique_id "adlkUWJmwJFFPEgRHfEDngAAANI"]
[Sat Apr 11 04:57:53.523948 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3197] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amthd.php"] [unique_id "adlkUWJmwJFFPEgRHfEDoQAAAMw"]
[Sat Apr 11 04:57:53.985852 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:3839] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "adlkUboqTMlo30hcVw8_MgAAABU"]
[Sat Apr 11 04:57:57.879683 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:3906] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adlkVboqTMlo30hcVw8_XQAAABI"]
[Sat Apr 11 04:57:58.056592 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:3432] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adlkVroqTMlo30hcVw8_YAAAAAw"]
[Sat Apr 11 04:57:58.504874 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:3552] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adlkVmJmwJFFPEgRHfEDyQAAAM4"]
[Sat Apr 11 04:57:58.529166 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:3323] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adlkVmJmwJFFPEgRHfEDygAAAMo"]
[Sat Apr 11 04:57:59.112080 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:3716] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adlkVzn2G0IJw5EZY9kYrgAAAEY"]
[Sat Apr 11 04:57:59.244444 2026] [:error] [pid 33171:tid 33203] [client 158.158.33.175:36157] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adlkV7oqTMlo30hcVw8_ZwAAABE"]
[Sat Apr 11 04:57:59.779136 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:58992] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adlkV2JmwJFFPEgRHfEDzgAAAM8"]
[Sat Apr 11 04:57:59.873249 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3560] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "adlkV2JmwJFFPEgRHfED0QAAAMQ"]
[Sat Apr 11 04:58:00.314844 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:37311] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "adlkWDn2G0IJw5EZY9kYtwAAAE8"]
[Sat Apr 11 04:58:00.384178 2026] [:error] [pid 33172:tid 33232] [client 158.158.33.175:3456] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "adlkWDn2G0IJw5EZY9kYuAAAAE4"]
[Sat Apr 11 04:58:00.943951 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:33002] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "adlkWK8109xRDP2izWiuHgAAAJA"]
[Sat Apr 11 04:58:01.294351 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:3785] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "adlkWTn2G0IJw5EZY9kYuwAAAE0"]
[Sat Apr 11 04:58:01.642649 2026] [:error] [pid 33172:tid 33219] [client 158.158.33.175:3813] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "adlkWTn2G0IJw5EZY9kYvQAAAEE"]
[Sat Apr 11 04:58:02.175045 2026] [:error] [pid 33171:tid 33191] [client 158.158.33.175:37277] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "adlkWroqTMlo30hcVw8_dgAAAAU"]
[Sat Apr 11 04:58:02.721417 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:4007] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iyy.php"] [unique_id "adlkWroqTMlo30hcVw8_fAAAAAI"]
[Sat Apr 11 04:58:03.319311 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:33553] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iyy.php"] [unique_id "adlkW68109xRDP2izWiuKQAAAJE"]
[Sat Apr 11 04:58:03.802115 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:3168] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iyy.php"] [unique_id "adlkW2JmwJFFPEgRHfED3wAAAMI"]
[Sat Apr 11 04:58:04.496691 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:3475] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iyy.php"] [unique_id "adlkXLoqTMlo30hcVw8_jQAAAAg"]
[Sat Apr 11 04:58:04.970916 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:3811] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "adlkXGJmwJFFPEgRHfED5QAAAM8"]
[Sat Apr 11 04:58:04.993302 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:33586] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "adlkXGJmwJFFPEgRHfED5gAAAMY"]
[Sat Apr 11 04:58:05.546502 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:3823] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "adlkXTn2G0IJw5EZY9kYxgAAAEI"]
[Sat Apr 11 04:58:06.111961 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:3873] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "adlkXjn2G0IJw5EZY9kYywAAAE0"]
[Sat Apr 11 04:58:06.592761 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3612] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "adlkXq8109xRDP2izWiuLwAAAJY"]
[Sat Apr 11 04:58:07.097568 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:36117] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "adlkX68109xRDP2izWiuMwAAAIo"]
[Sat Apr 11 04:58:07.154107 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:33003] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adlkX68109xRDP2izWiuNAAAAJA"]
[Sat Apr 11 04:58:07.648284 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:59005] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adlkX2JmwJFFPEgRHfED7QAAANE"]
[Sat Apr 11 04:58:07.707054 2026] [:error] [pid 33172:tid 33241] [client 158.158.33.175:3430] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iyy.php"] [unique_id "adlkXzn2G0IJw5EZY9kYzAAAAFc"]
[Sat Apr 11 04:58:08.208304 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:3157] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iyy.php"] [unique_id "adlkYDn2G0IJw5EZY9kYzgAAAEM"]
[Sat Apr 11 04:58:08.208575 2026] [:error] [pid 33171:tid 33189] [client 158.158.33.175:32330] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adlkYLoqTMlo30hcVw8_qQAAAAM"]
[Sat Apr 11 04:58:08.736698 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:3599] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iyy.php"] [unique_id "adlkYGJmwJFFPEgRHfED9QAAANU"]
[Sat Apr 11 04:58:08.776941 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:3791] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adlkYDn2G0IJw5EZY9kY0AAAAFY"]
[Sat Apr 11 04:58:09.293792 2026] [:error] [pid 33171:tid 33193] [client 158.158.33.175:3923] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gqhyti.php"] [unique_id "adlkYboqTMlo30hcVw8_rwAAAAc"]
[Sat Apr 11 04:58:09.379428 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3739] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iyy.php"] [unique_id "adlkYWJmwJFFPEgRHfED-QAAAMQ"]
[Sat Apr 11 04:58:09.785623 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:3563] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gqhyti.php"] [unique_id "adlkYWJmwJFFPEgRHfEEAgAAAMI"]
[Sat Apr 11 04:58:09.962309 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:3267] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "adlkYTn2G0IJw5EZY9kY1QAAAFg"]
[Sat Apr 11 04:58:10.346189 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:33576] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gqhyti.php"] [unique_id "adlkYjn2G0IJw5EZY9kY2QAAAE8"]
[Sat Apr 11 04:58:10.482594 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:3317] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "adlkYjn2G0IJw5EZY9kY2gAAAFM"]
[Sat Apr 11 04:58:10.969741 2026] [:error] [pid 33172:tid 33230] [client 158.158.33.175:3467] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "adlkYjn2G0IJw5EZY9kY3gAAAEw"]
[Sat Apr 11 04:58:11.099054 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:3396] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gqhyti.php"] [unique_id "adlkYzn2G0IJw5EZY9kY4AAAAFA"]
[Sat Apr 11 04:58:11.538335 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:3275] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "adlkY7oqTMlo30hcVw8_swAAABI"]
[Sat Apr 11 04:58:11.699789 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:3795] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoxxi.php"] [unique_id "adlkY2JmwJFFPEgRHfEEEQAAAMU"]
[Sat Apr 11 04:58:12.072639 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:3784] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adlkZDn2G0IJw5EZY9kY5QAAAEI"]
[Sat Apr 11 04:58:12.298163 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3289] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoxxi.php"] [unique_id "adlkZGJmwJFFPEgRHfEEFgAAANY"]
[Sat Apr 11 04:58:12.620060 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:3492] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adlkZGJmwJFFPEgRHfEEGwAAAM8"]
[Sat Apr 11 04:58:12.854945 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:3505] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoxxi.php"] [unique_id "adlkZK8109xRDP2izWiuQAAAAIg"]
[Sat Apr 11 04:58:13.156625 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:3984] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adlkZWJmwJFFPEgRHfEEIgAAAMU"]
[Sat Apr 11 04:58:13.357307 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:34289] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoxxi.php"] [unique_id "adlkZa8109xRDP2izWiuQQAAAJg"]
[Sat Apr 11 04:58:13.642816 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:3453] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adlkZTn2G0IJw5EZY9kY6AAAAFM"]
[Sat Apr 11 04:58:14.093550 2026] [:error] [pid 33172:tid 33235] [client 158.158.33.175:3920] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adlkZjn2G0IJw5EZY9kY7gAAAFE"]
[Sat Apr 11 04:58:14.177861 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:3781] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gqhyti.php"] [unique_id "adlkZjn2G0IJw5EZY9kY7wAAAFQ"]
[Sat Apr 11 04:58:14.693696 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:33008] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adlkZmJmwJFFPEgRHfEELgAAAMo"]
[Sat Apr 11 04:58:14.836817 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3493] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gqhyti.php"] [unique_id "adlkZmJmwJFFPEgRHfEEMAAAAMQ"]
[Sat Apr 11 04:58:15.324010 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:33591] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gqhyti.php"] [unique_id "adlkZzn2G0IJw5EZY9kY-AAAAEg"]
[Sat Apr 11 04:58:15.351413 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3916] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adlkZ2JmwJFFPEgRHfEENQAAANY"]
[Sat Apr 11 04:58:15.843428 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:37281] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adlkZzn2G0IJw5EZY9kY-wAAAFA"]
[Sat Apr 11 04:58:15.974309 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:58977] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gqhyti.php"] [unique_id "adlkZ68109xRDP2izWiuSQAAAJQ"]
[Sat Apr 11 04:58:16.330705 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:3775] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "adlkaK8109xRDP2izWiuSwAAAIY"]
[Sat Apr 11 04:58:16.591438 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3161] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoxxi.php"] [unique_id "adlkaGJmwJFFPEgRHfEEPAAAANQ"]
[Sat Apr 11 04:58:16.813218 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:3279] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "adlkaK8109xRDP2izWiuUAAAAIM"]
[Sat Apr 11 04:58:17.070503 2026] [:error] [pid 33171:tid 33203] [client 158.158.33.175:3966] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoxxi.php"] [unique_id "adlkaboqTMlo30hcVw8_vQAAABE"]
[Sat Apr 11 04:58:17.412223 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:3980] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "adlkaboqTMlo30hcVw8_vgAAAAA"]
[Sat Apr 11 04:58:17.550447 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:3882] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoxxi.php"] [unique_id "adlkaa8109xRDP2izWiuVQAAAIw"]
[Sat Apr 11 04:58:17.917333 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:33001] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "adlkaboqTMlo30hcVw8_wwAAAAw"]
[Sat Apr 11 04:58:18.089142 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:3285] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/autoxxi.php"] [unique_id "adlkaq8109xRDP2izWiuWAAAAJc"]
[Sat Apr 11 04:58:18.498619 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:32967] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adlkaq8109xRDP2izWiuWgAAAJQ"]
[Sat Apr 11 04:58:18.568652 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:3943] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adlkaq8109xRDP2izWiuWwAAAJM"]
[Sat Apr 11 04:58:19.034948 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:3140] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adlka68109xRDP2izWiuXwAAAIA"]
[Sat Apr 11 04:58:19.081899 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:37261] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adlka68109xRDP2izWiuYAAAAI8"]
[Sat Apr 11 04:58:19.508539 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:58998] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adlkazn2G0IJw5EZY9kZDQAAAFQ"]
[Sat Apr 11 04:58:19.593759 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:3744] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adlka68109xRDP2izWiuYwAAAIo"]
[Sat Apr 11 04:58:20.038747 2026] [:error] [pid 33172:tid 33239] [client 158.158.33.175:3625] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adlkbDn2G0IJw5EZY9kZEAAAAFU"]
[Sat Apr 11 04:58:20.181249 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:3404] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adlkbDn2G0IJw5EZY9kZEgAAAEY"]
[Sat Apr 11 04:58:20.516859 2026] [:error] [pid 33171:tid 33187] [client 158.158.33.175:3725] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schallfuns.php"] [unique_id "adlkbLoqTMlo30hcVw8_zgAAAAE"]
[Sat Apr 11 04:58:20.753088 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:3731] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "adlkbLoqTMlo30hcVw8_0AAAAA0"]
[Sat Apr 11 04:58:21.047891 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:3802] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schallfuns.php"] [unique_id "adlkba8109xRDP2izWiuaQAAAI0"]
[Sat Apr 11 04:58:21.255100 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:3489] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "adlkba8109xRDP2izWiubAAAAJQ"]
[Sat Apr 11 04:58:21.522530 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:3616] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schallfuns.php"] [unique_id "adlkbTn2G0IJw5EZY9kZGgAAAE0"]
[Sat Apr 11 04:58:21.817313 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:3507] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "adlkba8109xRDP2izWiucwAAAIo"]
[Sat Apr 11 04:58:22.009354 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3939] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schallfuns.php"] [unique_id "adlkbq8109xRDP2izWiudgAAAJg"]
[Sat Apr 11 04:58:22.322856 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:3715] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "adlkbq8109xRDP2izWiueQAAAI0"]
[Sat Apr 11 04:58:22.518524 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:3912] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlkbq8109xRDP2izWiufAAAAIY"]
[Sat Apr 11 04:58:22.882347 2026] [:error] [pid 33172:tid 33232] [client 158.158.33.175:3880] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adlkbjn2G0IJw5EZY9kZHwAAAE4"]
[Sat Apr 11 04:58:23.062634 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:36129] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlkb68109xRDP2izWiugAAAAIA"]
[Sat Apr 11 04:58:23.527193 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:3756] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adlkbzn2G0IJw5EZY9kZIwAAAEM"]
[Sat Apr 11 04:58:23.590538 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:4016] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlkb68109xRDP2izWiuhQAAAJY"]
[Sat Apr 11 04:58:24.024686 2026] [:error] [pid 33172:tid 33239] [client 158.158.33.175:3435] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adlkcDn2G0IJw5EZY9kZJgAAAFU"]
[Sat Apr 11 04:58:24.086938 2026] [:error] [pid 33172:tid 33225] [client 158.158.33.175:35523] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlkcDn2G0IJw5EZY9kZKAAAAEc"]
[Sat Apr 11 04:58:24.549350 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:3524] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "adlkcK8109xRDP2izWiuiwAAAI4"]
[Sat Apr 11 04:58:24.610442 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:3800] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "adlkcK8109xRDP2izWiujQAAAJM"]
[Sat Apr 11 04:58:25.095913 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:3734] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schallfuns.php"] [unique_id "adlkcTn2G0IJw5EZY9kZLgAAAFg"]
[Sat Apr 11 04:58:25.274801 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:36188] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "adlkcWJmwJFFPEgRHfEEVQAAANU"]
[Sat Apr 11 04:58:25.592406 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:32972] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schallfuns.php"] [unique_id "adlkcWJmwJFFPEgRHfEEWAAAAMU"]
[Sat Apr 11 04:58:25.846505 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:3511] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "adlkcWJmwJFFPEgRHfEEWwAAAMo"]
[Sat Apr 11 04:58:26.084746 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:3968] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schallfuns.php"] [unique_id "adlkcroqTMlo30hcVw8_2AAAAA4"]
[Sat Apr 11 04:58:26.372710 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:3872] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "adlkcq8109xRDP2izWiulAAAAJE"]
[Sat Apr 11 04:58:26.576588 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3519] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/schallfuns.php"] [unique_id "adlkcmJmwJFFPEgRHfEEXwAAAMw"]
[Sat Apr 11 04:58:26.872369 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3497] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfilexxx.php"] [unique_id "adlkcmJmwJFFPEgRHfEEYAAAAMA"]
[Sat Apr 11 04:58:27.175813 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:3837] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlkc2JmwJFFPEgRHfEEZQAAAM4"]
[Sat Apr 11 04:58:27.393000 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:33584] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfilexxx.php"] [unique_id "adlkc2JmwJFFPEgRHfEEZwAAAME"]
[Sat Apr 11 04:58:27.759898 2026] [:error] [pid 33172:tid 33228] [client 158.158.33.175:3354] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlkczn2G0IJw5EZY9kZNwAAAEo"]
[Sat Apr 11 04:58:27.888187 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3473] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfilexxx.php"] [unique_id "adlkc2JmwJFFPEgRHfEEbAAAANQ"]
[Sat Apr 11 04:58:28.301388 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3547] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlkdK8109xRDP2izWiulgAAAJY"]
[Sat Apr 11 04:58:28.458709 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3730] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfilexxx.php"] [unique_id "adlkdGJmwJFFPEgRHfEEcQAAAMA"]
[Sat Apr 11 04:58:28.830248 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:3639] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adlkdGJmwJFFPEgRHfEEdwAAANA"]
[Sat Apr 11 04:58:29.059972 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:3828] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_144a.php"] [unique_id "adlkdWJmwJFFPEgRHfEEeQAAAMU"]
[Sat Apr 11 04:58:29.557760 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3450] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_144a.php"] [unique_id "adlkdWJmwJFFPEgRHfEEfgAAAMA"]
[Sat Apr 11 04:58:29.819559 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:3194] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "adlkdWJmwJFFPEgRHfEEgQAAANg"]
[Sat Apr 11 04:58:30.123636 2026] [:error] [pid 33172:tid 33241] [client 158.158.33.175:3525] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_144a.php"] [unique_id "adlkdjn2G0IJw5EZY9kZPQAAAFc"]
[Sat Apr 11 04:58:30.311688 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:36130] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "adlkdroqTMlo30hcVw8_3QAAAAA"]
[Sat Apr 11 04:58:30.673366 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:3930] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_144a.php"] [unique_id "adlkdq8109xRDP2izWiumwAAAJM"]
[Sat Apr 11 04:58:30.893933 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:33571] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "adlkdmJmwJFFPEgRHfEEiAAAANM"]
[Sat Apr 11 04:58:31.276531 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:32977] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3586%20b64.php"] [unique_id "adlkdzn2G0IJw5EZY9kZRAAAAFM"]
[Sat Apr 11 04:58:31.444670 2026] [:error] [pid 33171:tid 33191] [client 158.158.33.175:3760] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clasa99.php"] [unique_id "adlkd7oqTMlo30hcVw8_3gAAAAU"]
[Sat Apr 11 04:58:31.789845 2026] [:error] [pid 33172:tid 33219] [client 158.158.33.175:3843] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3586%20b64.php"] [unique_id "adlkdzn2G0IJw5EZY9kZSAAAAEE"]
[Sat Apr 11 04:58:31.945800 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:37255] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfilexxx.php"] [unique_id "adlkdzn2G0IJw5EZY9kZSgAAAEM"]
[Sat Apr 11 04:58:32.352030 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:3820] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3586%20b64.php"] [unique_id "adlkeLoqTMlo30hcVw8_4wAAAA0"]
[Sat Apr 11 04:58:32.472282 2026] [:error] [pid 33172:tid 33229] [client 158.158.33.175:3445] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfilexxx.php"] [unique_id "adlkeDn2G0IJw5EZY9kZTwAAAEs"]
[Sat Apr 11 04:58:32.843482 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:3772] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3586%20b64.php"] [unique_id "adlkeK8109xRDP2izWiunQAAAJc"]
[Sat Apr 11 04:58:33.005962 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:3345] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfilexxx.php"] [unique_id "adlkeWJmwJFFPEgRHfEEjwAAANA"]
[Sat Apr 11 04:58:33.377801 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:58959] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adlkeWJmwJFFPEgRHfEEkQAAANE"]
[Sat Apr 11 04:58:33.499909 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:34283] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfilexxx.php"] [unique_id "adlkeWJmwJFFPEgRHfEEkgAAAMg"]
[Sat Apr 11 04:58:33.886094 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:37309] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adlkeWJmwJFFPEgRHfEElQAAANI"]
[Sat Apr 11 04:58:34.002182 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:3735] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_144a.php"] [unique_id "adlkemJmwJFFPEgRHfEElwAAAM8"]
[Sat Apr 11 04:58:34.413519 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3856] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adlkemJmwJFFPEgRHfEEmgAAAMQ"]
[Sat Apr 11 04:58:34.599669 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:3375] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_144a.php"] [unique_id "adlkemJmwJFFPEgRHfEEnQAAAMs"]
[Sat Apr 11 04:58:35.010087 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:33547] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adlke68109xRDP2izWiuowAAAIs"]
[Sat Apr 11 04:58:35.201040 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:3721] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_144a.php"] [unique_id "adlke68109xRDP2izWiupQAAAIo"]
[Sat Apr 11 04:58:35.582089 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:3294] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bmi.php"] [unique_id "adlke7oqTMlo30hcVw8_7AAAABI"]
[Sat Apr 11 04:58:35.715371 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:3444] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/karma_144a.php"] [unique_id "adlke68109xRDP2izWiuqAAAAJM"]
[Sat Apr 11 04:58:36.087477 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:3631] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bmi.php"] [unique_id "adlkfGJmwJFFPEgRHfEEowAAAM4"]
[Sat Apr 11 04:58:36.201836 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:3908] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3586%20b64.php"] [unique_id "adlkfK8109xRDP2izWiuqQAAAJA"]
[Sat Apr 11 04:58:36.599659 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:3792] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bmi.php"] [unique_id "adlkfK8109xRDP2izWiuqwAAAJE"]
[Sat Apr 11 04:58:36.702437 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3139] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3586%20b64.php"] [unique_id "adlkfK8109xRDP2izWiurAAAAJY"]
[Sat Apr 11 04:58:37.092679 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:36175] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bmi.php"] [unique_id "adlkfboqTMlo30hcVw8_9QAAABg"]
[Sat Apr 11 04:58:37.261942 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:3484] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3586%20b64.php"] [unique_id "adlkfa8109xRDP2izWiuswAAAIg"]
[Sat Apr 11 04:58:37.688280 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:3905] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adlkfWJmwJFFPEgRHfEEqAAAAM0"]
[Sat Apr 11 04:58:37.829884 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:58950] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3586%20b64.php"] [unique_id "adlkfa8109xRDP2izWiutQAAAI0"]
[Sat Apr 11 04:58:38.195009 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:3466] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adlkfjn2G0IJw5EZY9kZWQAAAFA"]
[Sat Apr 11 04:58:38.369284 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:3153] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adlkfq8109xRDP2izWiutgAAAIo"]
[Sat Apr 11 04:58:38.791266 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:3633] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adlkfq8109xRDP2izWiutwAAAIM"]
[Sat Apr 11 04:58:39.150284 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:3360] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adlkf7oqTMlo30hcVw9AAgAAAAI"]
[Sat Apr 11 04:58:39.361461 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:3141] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypltspd.php"] [unique_id "adlkf2JmwJFFPEgRHfEEsAAAANI"]
[Sat Apr 11 04:58:39.645920 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:32962] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adlkf2JmwJFFPEgRHfEEsgAAAM8"]
[Sat Apr 11 04:58:40.084673 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:58990] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adlkgGJmwJFFPEgRHfEEtgAAAMs"]
[Sat Apr 11 04:58:40.135940 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:3751] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adlkgGJmwJFFPEgRHfEEtwAAAMc"]
[Sat Apr 11 04:58:40.632476 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:3940] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bmi.php"] [unique_id "adlkgGJmwJFFPEgRHfEEugAAAMg"]
[Sat Apr 11 04:58:40.696864 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:35575] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adlkgK8109xRDP2izWiuuQAAAJA"]
[Sat Apr 11 04:58:41.170883 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:3867] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bmi.php"] [unique_id "adlkgboqTMlo30hcVw9ACQAAAAA"]
[Sat Apr 11 04:58:41.192861 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:3801] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adlkga8109xRDP2izWiuugAAAJc"]
[Sat Apr 11 04:58:41.677544 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:3443] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adlkga8109xRDP2izWiuvAAAAIw"]
[Sat Apr 11 04:58:41.711631 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:58964] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bmi.php"] [unique_id "adlkga8109xRDP2izWiuvQAAAIA"]
[Sat Apr 11 04:58:42.224117 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:34281] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bmi.php"] [unique_id "adlkgroqTMlo30hcVw9ADwAAAAw"]
[Sat Apr 11 04:58:42.226028 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:36177] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "adlkgq8109xRDP2izWiuvgAAAII"]
[Sat Apr 11 04:58:42.722452 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:3413] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "adlkgq8109xRDP2izWiuwQAAAIg"]
[Sat Apr 11 04:58:42.846417 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:33000] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adlkgq8109xRDP2izWiuwgAAAIY"]
[Sat Apr 11 04:58:43.260048 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:33596] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "adlkg68109xRDP2izWiuxAAAAIM"]
[Sat Apr 11 04:58:43.365925 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:36142] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adlkg68109xRDP2izWiuxQAAAJM"]
[Sat Apr 11 04:58:43.770561 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:4006] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "adlkg68109xRDP2izWiuygAAAJc"]
[Sat Apr 11 04:58:43.866656 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:3303] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adlkg2JmwJFFPEgRHfEEvwAAAMQ"]
[Sat Apr 11 04:58:44.273152 2026] [:error] [pid 33171:tid 33192] [client 158.158.33.175:3576] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adlkhLoqTMlo30hcVw9AFAAAAAY"]
[Sat Apr 11 04:58:44.507190 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:3358] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "adlkhDn2G0IJw5EZY9kZXwAAAFM"]
[Sat Apr 11 04:58:44.840470 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:33009] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adlkhLoqTMlo30hcVw9AFQAAAAI"]
[Sat Apr 11 04:58:45.202936 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:3441] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "adlkhboqTMlo30hcVw9AFgAAABY"]
[Sat Apr 11 04:58:45.333198 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:3590] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adlkha8109xRDP2izWiuzgAAAIQ"]
[Sat Apr 11 04:58:45.690041 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:36164] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "adlkhboqTMlo30hcVw9AGAAAAAg"]
[Sat Apr 11 04:58:45.859512 2026] [:error] [pid 33171:tid 33205] [client 158.158.33.175:3640] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adlkhboqTMlo30hcVw9AGQAAABM"]
[Sat Apr 11 04:58:46.194832 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:3551] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "adlkhjn2G0IJw5EZY9kZZwAAAEY"]
[Sat Apr 11 04:58:46.348183 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:3754] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "adlkhjn2G0IJw5EZY9kZaQAAAEI"]
[Sat Apr 11 04:58:46.715159 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:3342] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "adlkhq8109xRDP2izWiu0wAAAIM"]
[Sat Apr 11 04:58:46.929371 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:3399] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "adlkhroqTMlo30hcVw9AHgAAAAA"]
[Sat Apr 11 04:58:47.222106 2026] [:error] [pid 33171:tid 33187] [client 158.158.33.175:34300] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adlkh7oqTMlo30hcVw9AIQAAAAE"]
[Sat Apr 11 04:58:47.455828 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:59004] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "adlkhzn2G0IJw5EZY9kZbQAAAFM"]
[Sat Apr 11 04:58:47.728828 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:3596] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adlkhzn2G0IJw5EZY9kZbgAAAFA"]
[Sat Apr 11 04:58:47.970543 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:35570] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "adlkh2JmwJFFPEgRHfEEzgAAAMM"]
[Sat Apr 11 04:58:48.289380 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:4022] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adlkiGJmwJFFPEgRHfEE0AAAAMI"]
[Sat Apr 11 04:58:48.454481 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:3341] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "adlkiGJmwJFFPEgRHfEE0gAAANc"]
[Sat Apr 11 04:58:48.794886 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:3204] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adlkiDn2G0IJw5EZY9kZdgAAAFQ"]
[Sat Apr 11 04:58:48.982810 2026] [:error] [pid 33172:tid 33228] [client 158.158.33.175:4015] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "adlkiDn2G0IJw5EZY9kZeAAAAEo"]
[Sat Apr 11 04:58:49.287824 2026] [:error] [pid 33172:tid 33229] [client 158.158.33.175:35529] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "adlkiTn2G0IJw5EZY9kZegAAAEs"]
[Sat Apr 11 04:58:49.471519 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:36169] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "adlkiWJmwJFFPEgRHfEE3AAAAMs"]
[Sat Apr 11 04:58:49.797441 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:36210] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "adlkia8109xRDP2izWiu2gAAAIs"]
[Sat Apr 11 04:58:49.993100 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:3773] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "adlkiWJmwJFFPEgRHfEE4wAAANA"]
[Sat Apr 11 04:58:50.396840 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3926] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "adlkimJmwJFFPEgRHfEE5QAAANY"]
[Sat Apr 11 04:58:50.532298 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:3913] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "adlkimJmwJFFPEgRHfEE6AAAANg"]
[Sat Apr 11 04:58:50.907774 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:3614] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "adlkijn2G0IJw5EZY9kZfgAAAFI"]
[Sat Apr 11 04:58:51.020227 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:36173] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "adlki2JmwJFFPEgRHfEE6gAAAMA"]
[Sat Apr 11 04:58:51.425687 2026] [:error] [pid 33172:tid 33222] [client 158.158.33.175:34933] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "adlkizn2G0IJw5EZY9kZgAAAAEQ"]
[Sat Apr 11 04:58:51.525309 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:33543] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "adlkizn2G0IJw5EZY9kZgQAAAEI"]
[Sat Apr 11 04:58:51.936960 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:33559] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "adlki2JmwJFFPEgRHfEE8wAAAMI"]
[Sat Apr 11 04:58:52.010859 2026] [:error] [pid 33172:tid 33228] [client 158.158.33.175:35544] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "adlkjDn2G0IJw5EZY9kZhAAAAEo"]
[Sat Apr 11 04:58:52.494510 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:3556] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "adlkjGJmwJFFPEgRHfEE-AAAAMo"]
[Sat Apr 11 04:58:52.594653 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:3468] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adlkjDn2G0IJw5EZY9kZiQAAAE0"]
[Sat Apr 11 04:58:52.980150 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:32963] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "adlkjDn2G0IJw5EZY9kZjQAAAEM"]
[Sat Apr 11 04:58:53.072789 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3759] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adlkja8109xRDP2izWiu3gAAAJY"]
[Sat Apr 11 04:58:53.542529 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:3455] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "adlkja8109xRDP2izWiu3wAAAJc"]
[Sat Apr 11 04:58:53.589074 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3393] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adlkjWJmwJFFPEgRHfEFAAAAAMk"]
[Sat Apr 11 04:58:54.170075 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:3861] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "adlkjq8109xRDP2izWiu4AAAAI4"]
[Sat Apr 11 04:58:54.183803 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:3967] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adlkjroqTMlo30hcVw9ALAAAAAk"]
[Sat Apr 11 04:58:54.710375 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:34888] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adlkjjn2G0IJw5EZY9kZkwAAAFA"]
[Sat Apr 11 04:58:54.732978 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:3178] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "adlkjq8109xRDP2izWiu4gAAAIw"]
[Sat Apr 11 04:58:55.223801 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:3213] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adlkj68109xRDP2izWiu4wAAAJQ"]
[Sat Apr 11 04:58:55.313190 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:34297] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "adlkjzn2G0IJw5EZY9kZlwAAAFY"]
[Sat Apr 11 04:58:55.759599 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:36174] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adlkj68109xRDP2izWiu5wAAAIY"]
[Sat Apr 11 04:58:55.952412 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:33559] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adlkj68109xRDP2izWiu6QAAAI8"]
[Sat Apr 11 04:58:56.246092 2026] [:error] [pid 33172:tid 33218] [client 158.158.33.175:3935] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adlkkDn2G0IJw5EZY9kZmwAAAEA"]
[Sat Apr 11 04:58:56.466734 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:3373] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adlkkGJmwJFFPEgRHfEFEwAAAME"]
[Sat Apr 11 04:58:56.759101 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:36105] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "adlkkGJmwJFFPEgRHfEFFwAAAMs"]
[Sat Apr 11 04:58:56.979034 2026] [:error] [pid 33172:tid 33223] [client 158.158.33.175:3976] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-mancvgertdxz.php"] [unique_id "adlkkDn2G0IJw5EZY9kZnQAAAEU"]
[Sat Apr 11 04:59:01.193572 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3461] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "adlklWJmwJFFPEgRHfEFOgAAAMw"]
[Sat Apr 11 04:59:01.411545 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:3327] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlklTn2G0IJw5EZY9kZvQAAAEg"]
[Sat Apr 11 04:59:01.903583 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:3899] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlklWJmwJFFPEgRHfEFQgAAAM0"]
[Sat Apr 11 04:59:02.223029 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3161] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "adlklmJmwJFFPEgRHfEFSAAAAMM"]
[Sat Apr 11 04:59:02.381344 2026] [:error] [pid 33171:tid 33190] [client 158.158.33.175:3268] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlklroqTMlo30hcVw9ANgAAAAQ"]
[Sat Apr 11 04:59:02.994506 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:33018] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlklmJmwJFFPEgRHfEFTwAAAMk"]
[Sat Apr 11 04:59:03.348650 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:3835] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "adlkl7oqTMlo30hcVw9AOwAAABg"]
[Sat Apr 11 04:59:03.540902 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3843] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adlkl68109xRDP2izWiu-QAAAJg"]
[Sat Apr 11 04:59:04.058850 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:37252] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adlkmDn2G0IJw5EZY9kZwAAAAE0"]
[Sat Apr 11 04:59:04.314823 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:37271] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "adlkmLoqTMlo30hcVw9APQAAAAA"]
[Sat Apr 11 04:59:04.540617 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:36136] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adlkmGJmwJFFPEgRHfEFWwAAAMA"]
[Sat Apr 11 04:59:04.611652 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:3522] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "adlkmDn2G0IJw5EZY9kZwgAAAFA"]
[Sat Apr 11 04:59:05.044185 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3757] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adlkmWJmwJFFPEgRHfEFXwAAAMk"]
[Sat Apr 11 04:59:05.186556 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:32982] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "adlkmTn2G0IJw5EZY9kZxgAAAFM"]
[Sat Apr 11 04:59:05.518903 2026] [:error] [pid 33172:tid 33239] [client 158.158.33.175:32998] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "adlkmTn2G0IJw5EZY9kZyAAAAFU"]
[Sat Apr 11 04:59:05.665951 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:34891] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "adlkmWJmwJFFPEgRHfEFaAAAANM"]
[Sat Apr 11 04:59:06.067431 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:36219] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "adlkmmJmwJFFPEgRHfEFbQAAANU"]
[Sat Apr 11 04:59:06.181639 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:3945] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "adlkmmJmwJFFPEgRHfEFcAAAANg"]
[Sat Apr 11 04:59:06.607027 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:35551] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "adlkmmJmwJFFPEgRHfEFdgAAAM8"]
[Sat Apr 11 04:59:06.827247 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:36211] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "adlkmmJmwJFFPEgRHfEFeQAAAMQ"]
[Sat Apr 11 04:59:07.112057 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:35583] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "adlkm2JmwJFFPEgRHfEFewAAAMY"]
[Sat Apr 11 04:59:07.364981 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:3965] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "adlkm2JmwJFFPEgRHfEFfgAAAMc"]
[Sat Apr 11 04:59:07.632047 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:4064] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adlkm68109xRDP2izWivAgAAAIg"]
[Sat Apr 11 04:59:07.861744 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:3824] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "adlkm2JmwJFFPEgRHfEFhQAAANg"]
[Sat Apr 11 04:59:08.115057 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:59003] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adlknGJmwJFFPEgRHfEFiAAAANY"]
[Sat Apr 11 04:59:08.386289 2026] [:error] [pid 33172:tid 33228] [client 158.158.33.175:36204] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "adlknDn2G0IJw5EZY9kZ0QAAAEo"]
[Sat Apr 11 04:59:08.823634 2026] [:error] [pid 33171:tid 33201] [client 158.158.33.175:35552] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adlknLoqTMlo30hcVw9AQAAAAA8"]
[Sat Apr 11 04:59:08.871413 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3379] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlknGJmwJFFPEgRHfEFkQAAAMw"]
[Sat Apr 11 04:59:09.321633 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:3421] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adlknboqTMlo30hcVw9AQQAAABQ"]
[Sat Apr 11 04:59:09.353863 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:3566] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlknWJmwJFFPEgRHfEFlgAAAMI"]
[Sat Apr 11 04:59:09.801526 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:36141] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "adlknWJmwJFFPEgRHfEFnAAAANI"]
[Sat Apr 11 04:59:09.855794 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:36125] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlknWJmwJFFPEgRHfEFnQAAAMo"]
[Sat Apr 11 04:59:10.283704 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:32365] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "adlknmJmwJFFPEgRHfEFoQAAAMA"]
[Sat Apr 11 04:59:10.342815 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:3331] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adlknmJmwJFFPEgRHfEFogAAAMI"]
[Sat Apr 11 04:59:10.800441 2026] [:error] [pid 33172:tid 33239] [client 158.158.33.175:34298] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "adlknjn2G0IJw5EZY9kZ1wAAAFU"]
[Sat Apr 11 04:59:10.837647 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:3918] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adlknq8109xRDP2izWivCQAAAIk"]
[Sat Apr 11 04:59:11.324931 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:37296] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adlkn2JmwJFFPEgRHfEFrgAAAMA"]
[Sat Apr 11 04:59:11.325874 2026] [:error] [pid 33172:tid 33235] [client 158.158.33.175:34257] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "adlknzn2G0IJw5EZY9kZ2AAAAFE"]
[Sat Apr 11 04:59:11.816739 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:3883] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adlkn68109xRDP2izWivCwAAAIs"]
[Sat Apr 11 04:59:11.951832 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:36125] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adlkn2JmwJFFPEgRHfEFtgAAAMU"]
[Sat Apr 11 04:59:12.306336 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:36214] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "adlkoLoqTMlo30hcVw9ARwAAABc"]
[Sat Apr 11 04:59:12.514313 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:33545] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adlkoLoqTMlo30hcVw9ASgAAABg"]
[Sat Apr 11 04:59:12.822523 2026] [:error] [pid 33171:tid 33192] [client 158.158.33.175:3835] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "adlkoLoqTMlo30hcVw9ATQAAAAY"]
[Sat Apr 11 04:59:13.110693 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:3149] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adlkoboqTMlo30hcVw9ATwAAAA4"]
[Sat Apr 11 04:59:13.302622 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:34279] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "adlkoa8109xRDP2izWivDgAAAIg"]
[Sat Apr 11 04:59:13.607189 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:36159] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adlkoboqTMlo30hcVw9AUgAAABY"]
[Sat Apr 11 04:59:13.804547 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:3865] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "adlkoboqTMlo30hcVw9AVAAAAAI"]
[Sat Apr 11 04:59:14.114608 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:4004] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "adlkoq8109xRDP2izWivDwAAAII"]
[Sat Apr 11 04:59:14.313249 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3567] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "adlkomJmwJFFPEgRHfEFygAAAMw"]
[Sat Apr 11 04:59:14.595471 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:3863] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "adlkoroqTMlo30hcVw9AWwAAABg"]
[Sat Apr 11 04:59:14.827071 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:3838] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adlkomJmwJFFPEgRHfEF0AAAANI"]
[Sat Apr 11 04:59:15.131867 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:4025] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "adlko2JmwJFFPEgRHfEF0wAAAMU"]
[Sat Apr 11 04:59:15.405940 2026] [:error] [pid 33172:tid 33232] [client 158.158.33.175:34938] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adlkozn2G0IJw5EZY9kZ5gAAAE4"]
[Sat Apr 11 04:59:15.616644 2026] [:error] [pid 33172:tid 33230] [client 158.158.33.175:3536] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "adlkozn2G0IJw5EZY9kZ6AAAAEw"]
[Sat Apr 11 04:59:15.930442 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:36196] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adlkozn2G0IJw5EZY9kZ6wAAAFg"]
[Sat Apr 11 04:59:16.088625 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:3645] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "adlkpDn2G0IJw5EZY9kZ7gAAAFY"]
[Sat Apr 11 04:59:16.449976 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:32966] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "adlkpDn2G0IJw5EZY9kZ7wAAAE8"]
[Sat Apr 11 04:59:16.620872 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:32969] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "adlkpK8109xRDP2izWivEwAAAJE"]
[Sat Apr 11 04:59:16.937623 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:4095] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "adlkpLoqTMlo30hcVw9AYwAAABQ"]
[Sat Apr 11 04:59:17.207471 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:3809] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "adlkpa8109xRDP2izWivFgAAAIk"]
[Sat Apr 11 04:59:17.509937 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:3911] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "adlkpboqTMlo30hcVw9AaAAAAAg"]
[Sat Apr 11 04:59:17.715296 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:3308] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "adlkpboqTMlo30hcVw9AawAAAAs"]
[Sat Apr 11 04:59:17.999621 2026] [:error] [pid 33172:tid 33218] [client 158.158.33.175:3949] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "adlkpTn2G0IJw5EZY9kZ8wAAAEA"]
[Sat Apr 11 04:59:18.320107 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:3990] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adlkproqTMlo30hcVw9AcAAAAAA"]
[Sat Apr 11 04:59:18.475729 2026] [:error] [pid 33171:tid 33203] [client 158.158.33.175:33594] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "adlkproqTMlo30hcVw9AcQAAABE"]
[Sat Apr 11 04:59:18.861113 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:3897] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adlkpjn2G0IJw5EZY9kZ-AAAAFg"]
[Sat Apr 11 04:59:19.014332 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:4031] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adlkp68109xRDP2izWivGwAAAIU"]
[Sat Apr 11 04:59:19.391371 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:36149] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adlkp7oqTMlo30hcVw9AdAAAABI"]
[Sat Apr 11 04:59:19.559194 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:33588] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adlkp7oqTMlo30hcVw9AdQAAAAg"]
[Sat Apr 11 04:59:19.886422 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:3747] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adlkp7oqTMlo30hcVw9AdwAAAAI"]
[Sat Apr 11 04:59:20.103680 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:3189] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adlkqLoqTMlo30hcVw9AeAAAAAw"]
[Sat Apr 11 04:59:20.391062 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:3460] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adlkqGJmwJFFPEgRHfEF4QAAAMI"]
[Sat Apr 11 04:59:20.669497 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3347] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adlkqGJmwJFFPEgRHfEF5wAAAMw"]
[Sat Apr 11 04:59:20.925917 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:36143] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adlkqK8109xRDP2izWivIQAAAJc"]
[Sat Apr 11 04:59:21.175780 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:33567] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "adlkqa8109xRDP2izWivIwAAAJM"]
[Sat Apr 11 04:59:21.488264 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:33569] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adlkqa8109xRDP2izWivJAAAAIY"]
[Sat Apr 11 04:59:21.687694 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:36113] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "adlkqTn2G0IJw5EZY9kZ_wAAAFA"]
[Sat Apr 11 04:59:22.032233 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:3821] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adlkqq8109xRDP2izWivJwAAAIs"]
[Sat Apr 11 04:59:22.191469 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3758] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "adlkqmJmwJFFPEgRHfEF7QAAAMM"]
[Sat Apr 11 04:59:22.535390 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3357] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlkqq8109xRDP2izWivKgAAAJY"]
[Sat Apr 11 04:59:22.673104 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:38925] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws83.php"] [unique_id "adlkqq8109xRDP2izWivKwAAAIM"]
[Sat Apr 11 04:59:23.022936 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:4001] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlkqzn2G0IJw5EZY9kaBwAAAFM"]
[Sat Apr 11 04:59:23.168829 2026] [:error] [pid 33172:tid 33228] [client 158.158.33.175:59001] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "adlkqzn2G0IJw5EZY9kaCQAAAEo"]
[Sat Apr 11 04:59:23.515604 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3909] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlkq68109xRDP2izWivMAAAAJg"]
[Sat Apr 11 04:59:23.700908 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:3755] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "adlkq68109xRDP2izWivMwAAAJc"]
[Sat Apr 11 04:59:23.998489 2026] [:error] [pid 33172:tid 33218] [client 158.158.33.175:36154] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlkqzn2G0IJw5EZY9kaEAAAAEA"]
[Sat Apr 11 04:59:24.194633 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:3875] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "adlkrK8109xRDP2izWivNQAAAIs"]
[Sat Apr 11 04:59:24.531570 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3953] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adlkrGJmwJFFPEgRHfEF8gAAAMw"]
[Sat Apr 11 04:59:24.763685 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:3225] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws75.php"] [unique_id "adlkrLoqTMlo30hcVw9AfAAAABI"]
[Sat Apr 11 04:59:25.074161 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:36203] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adlkra8109xRDP2izWivNgAAAJY"]
[Sat Apr 11 04:59:25.267564 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:3482] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adlkrboqTMlo30hcVw9AfgAAABc"]
[Sat Apr 11 04:59:25.569244 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:3593] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adlkrWJmwJFFPEgRHfEF_AAAANM"]
[Sat Apr 11 04:59:25.766797 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3265] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adlkrWJmwJFFPEgRHfEF_gAAAMA"]
[Sat Apr 11 04:59:26.052144 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:35558] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adlkrmJmwJFFPEgRHfEGAwAAAMY"]
[Sat Apr 11 04:59:26.287602 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:4019] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adlkrmJmwJFFPEgRHfEGBQAAAMo"]
[Sat Apr 11 04:59:26.572167 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:3953] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlkrmJmwJFFPEgRHfEGCAAAANA"]
[Sat Apr 11 04:59:26.773439 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:3192] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adlkrq8109xRDP2izWivOQAAAJA"]
[Sat Apr 11 04:59:27.107726 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:3959] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlkrzn2G0IJw5EZY9kaHAAAAEg"]
[Sat Apr 11 04:59:27.257536 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3907] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adlkr2JmwJFFPEgRHfEGEQAAAMA"]
[Sat Apr 11 04:59:27.664283 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:36146] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlkrzn2G0IJw5EZY9kaHgAAAFA"]
[Sat Apr 11 04:59:27.844534 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:3422] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adlkr2JmwJFFPEgRHfEGFQAAAMc"]
[Sat Apr 11 04:59:28.247786 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:3622] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlksGJmwJFFPEgRHfEGFgAAAM0"]
[Sat Apr 11 04:59:28.367158 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3855] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adlksGJmwJFFPEgRHfEGGAAAAMk"]
[Sat Apr 11 04:59:28.817028 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:3881] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "adlksGJmwJFFPEgRHfEGGwAAAME"]
[Sat Apr 11 04:59:28.873454 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3481] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "adlksGJmwJFFPEgRHfEGHQAAANQ"]
[Sat Apr 11 04:59:29.325385 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:3871] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "adlksWJmwJFFPEgRHfEGIwAAAM4"]
[Sat Apr 11 04:59:29.470808 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:33012] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlksWJmwJFFPEgRHfEGJAAAAM0"]
[Sat Apr 11 04:59:29.862659 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:3922] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "adlksWJmwJFFPEgRHfEGJwAAANc"]
[Sat Apr 11 04:59:30.010992 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:3623] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlksmJmwJFFPEgRHfEGKgAAAME"]
[Sat Apr 11 04:59:30.448249 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:33573] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "adlksroqTMlo30hcVw9AgwAAAAA"]
[Sat Apr 11 04:59:30.520647 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:33023] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlksmJmwJFFPEgRHfEGMQAAAM4"]
[Sat Apr 11 04:59:30.955302 2026] [:error] [pid 33172:tid 33240] [client 158.158.33.175:3951] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adlksjn2G0IJw5EZY9kaIgAAAFY"]
[Sat Apr 11 04:59:31.011193 2026] [:error] [pid 33171:tid 33201] [client 158.158.33.175:34937] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adlks7oqTMlo30hcVw9AhQAAAA8"]
[Sat Apr 11 04:59:31.492304 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:35472] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adlks68109xRDP2izWivQQAAAI0"]
[Sat Apr 11 04:59:31.504969 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:3426] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adlks7oqTMlo30hcVw9AiQAAABU"]
[Sat Apr 11 04:59:31.989982 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:32263] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adlks2JmwJFFPEgRHfEGNwAAAMo"]
[Sat Apr 11 04:59:31.995913 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3325] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adlks2JmwJFFPEgRHfEGOAAAAMk"]
[Sat Apr 11 04:59:32.480991 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:3621] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adlktDn2G0IJw5EZY9kaJQAAAEY"]
[Sat Apr 11 04:59:32.493763 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:32300] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adlktGJmwJFFPEgRHfEGPAAAANA"]
[Sat Apr 11 04:59:32.981706 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3175] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlktGJmwJFFPEgRHfEGQAAAANQ"]
[Sat Apr 11 04:59:33.022361 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:34292] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adlktboqTMlo30hcVw9AjwAAAAs"]
[Sat Apr 11 04:59:33.477338 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3465] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlktWJmwJFFPEgRHfEGRwAAANY"]
[Sat Apr 11 04:59:33.517795 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:3501] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlktTn2G0IJw5EZY9kaJgAAAFQ"]
[Sat Apr 11 04:59:33.982885 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:34890] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlkta8109xRDP2izWivRQAAAIM"]
[Sat Apr 11 04:59:34.022683 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:32265] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlktmJmwJFFPEgRHfEGSgAAAMM"]
[Sat Apr 11 04:59:34.530298 2026] [:error] [pid 33171:tid 33198] [client 158.158.33.175:3315] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlktroqTMlo30hcVw9AkQAAAAw"]
[Sat Apr 11 04:59:34.554165 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:3928] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlktmJmwJFFPEgRHfEGSwAAAMg"]
[Sat Apr 11 04:59:35.047924 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:4002] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "adlkt2JmwJFFPEgRHfEGUgAAAMA"]
[Sat Apr 11 04:59:35.090561 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:33590] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "adlkt2JmwJFFPEgRHfEGVAAAAMk"]
[Sat Apr 11 04:59:35.607259 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:36112] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "adlkt2JmwJFFPEgRHfEGWQAAAMM"]
[Sat Apr 11 04:59:35.608095 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:32321] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "adlkt2JmwJFFPEgRHfEGWgAAANc"]
[Sat Apr 11 04:59:36.109450 2026] [:error] [pid 33172:tid 33228] [client 158.158.33.175:3206] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "adlkuDn2G0IJw5EZY9kaLQAAAEo"]
[Sat Apr 11 04:59:36.114794 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:34250] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "adlkuDn2G0IJw5EZY9kaLgAAAEI"]
[Sat Apr 11 04:59:36.602936 2026] [:error] [pid 33171:tid 33191] [client 158.158.33.175:37267] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "adlkuLoqTMlo30hcVw9AkwAAAAU"]
[Sat Apr 11 04:59:36.603454 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:3297] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "adlkuGJmwJFFPEgRHfEGYAAAAMk"]
[Sat Apr 11 04:59:37.078431 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3887] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adlkuWJmwJFFPEgRHfEGaAAAAMw"]
[Sat Apr 11 04:59:37.080381 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:3295] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/vx.php"] [unique_id "adlkuTn2G0IJw5EZY9kaMQAAAFM"]
[Sat Apr 11 04:59:37.587911 2026] [:error] [pid 33172:tid 33225] [client 158.158.33.175:36118] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adlkuTn2G0IJw5EZY9kaMgAAAEc"]
[Sat Apr 11 04:59:37.588232 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:3117] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adlkuTn2G0IJw5EZY9kaMwAAAEY"]
[Sat Apr 11 04:59:38.088870 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:35504] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adlkumJmwJFFPEgRHfEGagAAAM0"]
[Sat Apr 11 04:59:38.232747 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:3368] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adlkujn2G0IJw5EZY9kaOQAAAFg"]
[Sat Apr 11 04:59:38.603854 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3171] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adlkumJmwJFFPEgRHfEGbgAAAMM"]
[Sat Apr 11 04:59:38.742652 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:36126] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adlkumJmwJFFPEgRHfEGbwAAANQ"]
[Sat Apr 11 04:59:39.092695 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:36121] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adlku68109xRDP2izWivTAAAAI8"]
[Sat Apr 11 04:59:39.257822 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:3904] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "adlku68109xRDP2izWivTQAAAJI"]
[Sat Apr 11 04:59:39.604204 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:58944] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlku7oqTMlo30hcVw9AlwAAABU"]
[Sat Apr 11 04:59:39.846581 2026] [:error] [pid 33172:tid 33219] [client 158.158.33.175:3589] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "adlkuzn2G0IJw5EZY9kaQAAAAEE"]
[Sat Apr 11 04:59:40.246708 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:32324] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlkvDn2G0IJw5EZY9kaQwAAAFI"]
[Sat Apr 11 04:59:40.369573 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:3388] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "adlkvDn2G0IJw5EZY9kaRQAAAFQ"]
[Sat Apr 11 04:59:40.826882 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:3152] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlkvLoqTMlo30hcVw9AmwAAABc"]
[Sat Apr 11 04:59:40.896536 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:36151] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "adlkvDn2G0IJw5EZY9kaSAAAAE8"]
[Sat Apr 11 04:59:41.439357 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:3427] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlkvWJmwJFFPEgRHfEGdQAAAM8"]
[Sat Apr 11 04:59:41.531950 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:3803] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adlkvWJmwJFFPEgRHfEGdgAAANU"]
[Sat Apr 11 04:59:41.979376 2026] [:error] [pid 33171:tid 33188] [client 158.158.33.175:3530] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "adlkvboqTMlo30hcVw9AoAAAAAI"]
[Sat Apr 11 04:59:42.027130 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:35539] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adlkvq8109xRDP2izWivTwAAAJM"]
[Sat Apr 11 04:59:42.473140 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:3771] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "adlkvroqTMlo30hcVw9AowAAAAA"]
[Sat Apr 11 04:59:42.515299 2026] [:error] [pid 33171:tid 33192] [client 158.158.33.175:3362] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adlkvroqTMlo30hcVw9ApAAAAAY"]
[Sat Apr 11 04:59:42.983995 2026] [:error] [pid 33173:tid 33266] [client 158.158.33.175:3133] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "adlkvq8109xRDP2izWivUgAAAJU"]
[Sat Apr 11 04:59:43.027822 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:3578] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adlkv2JmwJFFPEgRHfEGfAAAAME"]
[Sat Apr 11 04:59:43.509746 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:32369] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "adlkv2JmwJFFPEgRHfEGfwAAANE"]
[Sat Apr 11 04:59:43.530050 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:33544] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "adlkv2JmwJFFPEgRHfEGgAAAAMA"]
[Sat Apr 11 04:59:44.009323 2026] [:error] [pid 33173:tid 33265] [client 158.158.33.175:3804] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "adlkwK8109xRDP2izWivVQAAAJQ"]
[Sat Apr 11 04:59:44.075372 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:36162] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adlkwDn2G0IJw5EZY9kaUgAAAFA"]
[Sat Apr 11 04:59:44.512972 2026] [:error] [pid 33172:tid 33218] [client 158.158.33.175:34286] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "adlkwDn2G0IJw5EZY9kaUwAAAEA"]
[Sat Apr 11 04:59:44.582607 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:33004] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adlkwDn2G0IJw5EZY9kaVAAAAE8"]
[Sat Apr 11 04:59:45.025457 2026] [:error] [pid 33172:tid 33229] [client 158.158.33.175:3400] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "adlkwTn2G0IJw5EZY9kaVQAAAEs"]
[Sat Apr 11 04:59:45.076508 2026] [:error] [pid 33172:tid 33226] [client 158.158.33.175:3599] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adlkwTn2G0IJw5EZY9kaVgAAAEg"]
[Sat Apr 11 04:59:45.519028 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:35545] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adlkwa8109xRDP2izWivWAAAAIc"]
[Sat Apr 11 04:59:45.626911 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:33005] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adlkwWJmwJFFPEgRHfEGiQAAAMg"]
[Sat Apr 11 04:59:46.052605 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:3216] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adlkwjn2G0IJw5EZY9kaWQAAAEI"]
[Sat Apr 11 04:59:46.197953 2026] [:error] [pid 33172:tid 33219] [client 158.158.33.175:3954] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "adlkwjn2G0IJw5EZY9kaWgAAAEE"]
[Sat Apr 11 04:59:46.567438 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:3272] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adlkwmJmwJFFPEgRHfEGiwAAANM"]
[Sat Apr 11 04:59:46.732123 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:37250] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "adlkwmJmwJFFPEgRHfEGjQAAAM0"]
[Sat Apr 11 04:59:47.220047 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:33538] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "adlkw2JmwJFFPEgRHfEGkQAAANc"]
[Sat Apr 11 04:59:47.265591 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:58975] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adlkw68109xRDP2izWivXAAAAIw"]
[Sat Apr 11 04:59:47.791371 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:35534] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/ws49.php"] [unique_id "adlkw2JmwJFFPEgRHfEGkgAAANA"]
[Sat Apr 11 04:59:47.799863 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:3753] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adlkw2JmwJFFPEgRHfEGlAAAANI"]
[Sat Apr 11 04:59:48.304102 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:37285] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adlkxGJmwJFFPEgRHfEGmQAAAMw"]
[Sat Apr 11 04:59:48.369015 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:34926] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adlkxK8109xRDP2izWivYAAAAJM"]
[Sat Apr 11 04:59:48.860736 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:36166] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adlkxDn2G0IJw5EZY9kaXwAAAE8"]
[Sat Apr 11 04:59:48.929929 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:3231] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adlkxLoqTMlo30hcVw9AswAAAAA"]
[Sat Apr 11 04:59:49.443855 2026] [:error] [pid 33172:tid 33223] [client 158.158.33.175:35573] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adlkxTn2G0IJw5EZY9kaYwAAAEU"]
[Sat Apr 11 04:59:49.470430 2026] [:error] [pid 33171:tid 33201] [client 158.158.33.175:33556] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adlkxboqTMlo30hcVw9AtgAAAA8"]
[Sat Apr 11 04:59:49.946213 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:34906] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adlkxTn2G0IJw5EZY9kaaQAAAE0"]
[Sat Apr 11 04:59:49.977659 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:3165] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlkxTn2G0IJw5EZY9kaagAAAEY"]
[Sat Apr 11 04:59:50.454684 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:38951] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "adlkxjn2G0IJw5EZY9kabQAAAFQ"]
[Sat Apr 11 04:59:50.478086 2026] [:error] [pid 33171:tid 33205] [client 158.158.33.175:33013] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlkxroqTMlo30hcVw9AvgAAABM"]
[Sat Apr 11 04:59:50.965866 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:36741] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlkxmJmwJFFPEgRHfEGnAAAAM0"]
[Sat Apr 11 04:59:50.988580 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:32354] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "adlkxroqTMlo30hcVw9AwwAAAAs"]
[Sat Apr 11 04:59:51.488312 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:35554] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlkx68109xRDP2izWivaAAAAJA"]
[Sat Apr 11 04:59:51.516018 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:3449] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "adlkx68109xRDP2izWivaQAAAIw"]
[Sat Apr 11 04:59:51.970068 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:3518] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "adlkx7oqTMlo30hcVw9AzAAAAA4"]
[Sat Apr 11 04:59:52.018768 2026] [:error] [pid 33171:tid 33196] [client 158.158.33.175:36114] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "adlkyLoqTMlo30hcVw9AzQAAAAo"]
[Sat Apr 11 04:59:52.508037 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:34299] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "adlkyDn2G0IJw5EZY9kacQAAAE8"]
[Sat Apr 11 04:59:52.586848 2026] [:error] [pid 33172:tid 33218] [client 158.158.33.175:3952] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adlkyDn2G0IJw5EZY9kacgAAAEA"]
[Sat Apr 11 04:59:53.064099 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:3805] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "adlkya8109xRDP2izWivbAAAAJE"]
[Sat Apr 11 04:59:53.136887 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:32271] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adlkya8109xRDP2izWivbQAAAIk"]
[Sat Apr 11 04:59:53.613163 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:34895] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amp.php"] [unique_id "adlkyboqTMlo30hcVw9A3QAAAA4"]
[Sat Apr 11 04:59:53.661305 2026] [:error] [pid 33172:tid 33228] [client 158.158.33.175:37276] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adlkyTn2G0IJw5EZY9kaeQAAAEo"]
[Sat Apr 11 04:59:54.142105 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:3597] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "adlkymJmwJFFPEgRHfEGoQAAAMc"]
[Sat Apr 11 04:59:54.227372 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:3613] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adlkyroqTMlo30hcVw9A3wAAAAk"]
[Sat Apr 11 04:59:54.630531 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:33597] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "adlkymJmwJFFPEgRHfEGpAAAAMg"]
[Sat Apr 11 04:59:54.861541 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:3733] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adlkymJmwJFFPEgRHfEGqAAAAMo"]
[Sat Apr 11 04:59:55.165461 2026] [:error] [pid 33171:tid 33205] [client 158.158.33.175:34925] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "adlky7oqTMlo30hcVw9A5QAAABM"]
[Sat Apr 11 04:59:55.371894 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:33551] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adlky2JmwJFFPEgRHfEGqQAAANY"]
[Sat Apr 11 04:59:55.665521 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:3776] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "adlkyzn2G0IJw5EZY9kafQAAAFI"]
[Sat Apr 11 04:59:56.393689 2026] [:error] [pid 33172:tid 33222] [client 158.158.33.175:58952] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adlkzDn2G0IJw5EZY9kagAAAAEQ"]
[Sat Apr 11 04:59:56.889547 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:35563] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adlkzGJmwJFFPEgRHfEGqwAAANA"]
[Sat Apr 11 04:59:57.123007 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:32272] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adlkzWJmwJFFPEgRHfEGrgAAANg"]
[Sat Apr 11 04:59:57.531314 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:37278] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adlkzWJmwJFFPEgRHfEGtAAAANQ"]
[Sat Apr 11 04:59:57.873630 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:3728] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adlkza8109xRDP2izWivgAAAAIs"]
[Sat Apr 11 04:59:58.096193 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:37251] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adlkzmJmwJFFPEgRHfEGtgAAAMo"]
[Sat Apr 11 04:59:58.592528 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:33566] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adlkzq8109xRDP2izWivggAAAIM"]
[Sat Apr 11 04:59:58.598084 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:34277] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlkzq8109xRDP2izWivgwAAAJA"]
[Sat Apr 11 04:59:59.116609 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:33023] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adlkzzn2G0IJw5EZY9kahQAAAEk"]
[Sat Apr 11 04:59:59.477674 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3866] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlkz2JmwJFFPEgRHfEGwAAAAMM"]
[Sat Apr 11 04:59:59.717670 2026] [:error] [pid 33172:tid 33232] [client 158.158.33.175:3573] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adlkzzn2G0IJw5EZY9kaiAAAAE4"]
[Sat Apr 11 04:59:59.995421 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:32361] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlkz2JmwJFFPEgRHfEGwgAAANE"]
[Sat Apr 11 05:00:00.239391 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:3961] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adlk0Dn2G0IJw5EZY9kaigAAAFg"]
[Sat Apr 11 05:00:00.496245 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:37305] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adlk0K8109xRDP2izWiviAAAAI0"]
[Sat Apr 11 05:00:00.795890 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3968] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "adlk0K8109xRDP2izWiviQAAAJY"]
[Sat Apr 11 05:00:05.235223 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:35582] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adlk1a8109xRDP2izWivpgAAAIg"]
[Sat Apr 11 05:00:05.844184 2026] [:error] [pid 33171:tid 33196] [client 158.158.33.175:34915] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adlk1boqTMlo30hcVw9BHgAAAAo"]
[Sat Apr 11 05:00:05.878730 2026] [:error] [pid 33171:tid 33193] [client 158.158.33.175:32961] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adlk1boqTMlo30hcVw9BHwAAAAc"]
[Sat Apr 11 05:00:06.364775 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3499] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adlk1mJmwJFFPEgRHfEG3gAAANY"]
[Sat Apr 11 05:00:06.527192 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:3836] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adlk1q8109xRDP2izWivqgAAAIU"]
[Sat Apr 11 05:00:06.871641 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:3377] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adlk1q8109xRDP2izWivqwAAAII"]
[Sat Apr 11 05:00:07.054489 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:33623] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adlk168109xRDP2izWivrQAAAIE"]
[Sat Apr 11 05:00:07.464305 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:3143] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "adlk12JmwJFFPEgRHfEG5gAAAMU"]
[Sat Apr 11 05:00:07.696654 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3972] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adlk12JmwJFFPEgRHfEG6QAAANY"]
[Sat Apr 11 05:00:07.980574 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:34260] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "adlk12JmwJFFPEgRHfEG7gAAANE"]
[Sat Apr 11 05:00:08.201317 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:36165] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adlk2GJmwJFFPEgRHfEG7wAAANQ"]
[Sat Apr 11 05:00:08.488627 2026] [:error] [pid 33171:tid 33194] [client 158.158.33.175:3282] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "adlk2LoqTMlo30hcVw9BIwAAAAg"]
[Sat Apr 11 05:00:08.710161 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:37282] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adlk2GJmwJFFPEgRHfEG8QAAAMY"]
[Sat Apr 11 05:00:09.132719 2026] [:error] [pid 33171:tid 33189] [client 158.158.33.175:36138] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxw.php"] [unique_id "adlk2boqTMlo30hcVw9BJQAAAAM"]
[Sat Apr 11 05:00:09.312188 2026] [:error] [pid 33171:tid 33192] [client 158.158.33.175:3352] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adlk2boqTMlo30hcVw9BKAAAAAY"]
[Sat Apr 11 05:00:09.618609 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:36132] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adlk2WJmwJFFPEgRHfEG-wAAAMw"]
[Sat Apr 11 05:00:09.901628 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:32981] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adlk2WJmwJFFPEgRHfEG_QAAANI"]
[Sat Apr 11 05:00:10.177353 2026] [:error] [pid 33171:tid 33190] [client 158.158.33.175:3579] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adlk2roqTMlo30hcVw9BKgAAAAQ"]
[Sat Apr 11 05:00:10.414673 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:36134] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adlk2mJmwJFFPEgRHfEG_wAAANE"]
[Sat Apr 11 05:00:10.718887 2026] [:error] [pid 33288:tid 33296] [client 158.158.33.175:36158] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adlk2mJmwJFFPEgRHfEHAgAAAMY"]
[Sat Apr 11 05:00:10.938536 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:32978] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adlk2mJmwJFFPEgRHfEHAwAAANA"]
[Sat Apr 11 05:00:11.296297 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:58968] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adlk22JmwJFFPEgRHfEHBwAAAMU"]
[Sat Apr 11 05:00:11.558520 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:58949] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adlk22JmwJFFPEgRHfEHCQAAAMw"]
[Sat Apr 11 05:00:11.874172 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:4020] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adlk22JmwJFFPEgRHfEHDAAAANE"]
[Sat Apr 11 05:00:12.037697 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3869] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adlk3GJmwJFFPEgRHfEHDQAAAMM"]
[Sat Apr 11 05:00:12.474867 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3572] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adlk3K8109xRDP2izWivsQAAAJY"]
[Sat Apr 11 05:00:12.635800 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:59002] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlk3K8109xRDP2izWivtAAAAIk"]
[Sat Apr 11 05:00:12.963534 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:3159] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adlk3Dn2G0IJw5EZY9kanQAAAEk"]
[Sat Apr 11 05:00:13.172604 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:3179] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlk3a8109xRDP2izWivtgAAAIA"]
[Sat Apr 11 05:00:13.502566 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:3807] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adlk3boqTMlo30hcVw9BMAAAAA4"]
[Sat Apr 11 05:00:13.652021 2026] [:error] [pid 33171:tid 33192] [client 158.158.33.175:3440] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlk3boqTMlo30hcVw9BMQAAAAY"]
[Sat Apr 11 05:00:14.132754 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:36140] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adlk3mJmwJFFPEgRHfEHFAAAAMw"]
[Sat Apr 11 05:00:14.159841 2026] [:error] [pid 33171:tid 33196] [client 158.158.33.175:58960] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlk3roqTMlo30hcVw9BNAAAAAo"]
[Sat Apr 11 05:00:14.680908 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3925] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adlk3q8109xRDP2izWivwAAAAJY"]
[Sat Apr 11 05:00:14.820392 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:4049] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adlk3roqTMlo30hcVw9BNQAAABQ"]
[Sat Apr 11 05:00:15.201060 2026] [:error] [pid 33173:tid 33249] [client 158.158.33.175:3937] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adlk368109xRDP2izWivwgAAAIQ"]
[Sat Apr 11 05:00:15.407523 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:58994] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adlk368109xRDP2izWivxQAAAIw"]
[Sat Apr 11 05:00:15.699620 2026] [:error] [pid 33172:tid 33219] [client 158.158.33.175:3487] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adlk3zn2G0IJw5EZY9kaoQAAAEE"]
[Sat Apr 11 05:00:15.941683 2026] [:error] [pid 33172:tid 33222] [client 158.158.33.175:3190] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adlk3zn2G0IJw5EZY9kaogAAAEQ"]
[Sat Apr 11 05:00:16.287786 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:33015] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adlk4K8109xRDP2izWivygAAAIE"]
[Sat Apr 11 05:00:16.470990 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:3919] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adlk4LoqTMlo30hcVw9BOgAAABI"]
[Sat Apr 11 05:00:16.790068 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:3554] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adlk4K8109xRDP2izWivzwAAAI0"]
[Sat Apr 11 05:00:16.961204 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:3409] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adlk4LoqTMlo30hcVw9BPQAAAAs"]
[Sat Apr 11 05:00:17.349486 2026] [:error] [pid 33171:tid 33196] [client 158.158.33.175:33565] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adlk4boqTMlo30hcVw9BQwAAAAo"]
[Sat Apr 11 05:00:17.448631 2026] [:error] [pid 33172:tid 33241] [client 158.158.33.175:3274] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adlk4Tn2G0IJw5EZY9kapAAAAFc"]
[Sat Apr 11 05:00:17.933831 2026] [:error] [pid 33173:tid 33266] [client 158.158.33.175:36115] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adlk4a8109xRDP2izWiv1gAAAJU"]
[Sat Apr 11 05:00:17.997168 2026] [:error] [pid 33171:tid 33205] [client 158.158.33.175:3471] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adlk4boqTMlo30hcVw9BRQAAABM"]
[Sat Apr 11 05:00:18.497977 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:34256] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adlk4mJmwJFFPEgRHfEHGQAAAMU"]
[Sat Apr 11 05:00:18.599762 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:34940] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlk4q8109xRDP2izWiv2AAAAIg"]
[Sat Apr 11 05:00:18.987171 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:33584] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "adlk4q8109xRDP2izWiv2wAAAIE"]
[Sat Apr 11 05:00:19.170897 2026] [:error] [pid 33173:tid 33252] [client 158.158.33.175:3270] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlk468109xRDP2izWiv3QAAAIc"]
[Sat Apr 11 05:00:19.525306 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3145] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "adlk468109xRDP2izWiv3gAAAJY"]
[Sat Apr 11 05:00:19.658703 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:34255] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlk468109xRDP2izWiv3wAAAI4"]
[Sat Apr 11 05:00:20.042473 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:38943] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "adlk5GJmwJFFPEgRHfEHHAAAANM"]
[Sat Apr 11 05:00:20.224996 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:33557] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adlk5GJmwJFFPEgRHfEHHgAAANg"]
[Sat Apr 11 05:00:20.526603 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3718] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "adlk5K8109xRDP2izWiv4wAAAJg"]
[Sat Apr 11 05:00:20.772400 2026] [:error] [pid 33172:tid 33230] [client 158.158.33.175:36153] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adlk5Dn2G0IJw5EZY9kaqgAAAEw"]
[Sat Apr 11 05:00:21.065682 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:35550] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "adlk5Tn2G0IJw5EZY9kaqwAAAFg"]
[Sat Apr 11 05:00:21.273157 2026] [:error] [pid 33171:tid 33187] [client 158.158.33.175:3832] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adlk5boqTMlo30hcVw9BSAAAAAE"]
[Sat Apr 11 05:00:21.610639 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:3280] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "adlk5Tn2G0IJw5EZY9karQAAAFM"]
[Sat Apr 11 05:00:21.753045 2026] [:error] [pid 33172:tid 33231] [client 158.158.33.175:33563] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adlk5Tn2G0IJw5EZY9kasAAAAE0"]
[Sat Apr 11 05:00:22.110304 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:34273] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "adlk5mJmwJFFPEgRHfEHIwAAAMc"]
[Sat Apr 11 05:00:22.284708 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:32994] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adlk5mJmwJFFPEgRHfEHJAAAAMs"]
[Sat Apr 11 05:00:22.603556 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3986] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "adlk5mJmwJFFPEgRHfEHJQAAAMw"]
[Sat Apr 11 05:00:22.780544 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:35546] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adlk5mJmwJFFPEgRHfEHJgAAAM4"]
[Sat Apr 11 05:00:23.105840 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:37258] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "adlk52JmwJFFPEgRHfEHJwAAANY"]
[Sat Apr 11 05:00:23.279936 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3425] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adlk52JmwJFFPEgRHfEHKAAAAMM"]
[Sat Apr 11 05:00:23.597838 2026] [:error] [pid 33172:tid 33242] [client 158.158.33.175:34920] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "adlk5zn2G0IJw5EZY9katwAAAFg"]
[Sat Apr 11 05:00:23.759294 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:3417] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adlk568109xRDP2izWiv7QAAAIA"]
[Sat Apr 11 05:00:24.105512 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:3854] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "adlk6K8109xRDP2izWiv7wAAAJA"]
[Sat Apr 11 05:00:24.246722 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:3598] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adlk6K8109xRDP2izWiv8QAAAIU"]
[Sat Apr 11 05:00:24.697978 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:3770] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "adlk6K8109xRDP2izWiv8gAAAJM"]
[Sat Apr 11 05:00:24.729122 2026] [:error] [pid 33172:tid 33221] [client 158.158.33.175:3406] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "adlk6Dn2G0IJw5EZY9kaugAAAEM"]
[Sat Apr 11 05:00:25.224856 2026] [:error] [pid 33288:tid 33291] [client 158.158.33.175:58963] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlk6WJmwJFFPEgRHfEHLQAAAME"]
[Sat Apr 11 05:00:25.267395 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:4030] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "adlk6WJmwJFFPEgRHfEHLgAAAMA"]
[Sat Apr 11 05:00:25.741823 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:3433] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlk6WJmwJFFPEgRHfEHMgAAAMU"]
[Sat Apr 11 05:00:25.761948 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:3346] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "adlk6WJmwJFFPEgRHfEHMwAAAM0"]
[Sat Apr 11 05:00:26.258985 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:3305] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlk6q8109xRDP2izWiv-gAAAI0"]
[Sat Apr 11 05:00:26.282753 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:33558] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ajax.php"] [unique_id "adlk6q8109xRDP2izWiv-wAAAIk"]
[Sat Apr 11 05:00:26.781550 2026] [:error] [pid 33288:tid 33294] [client 158.158.33.175:37304] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "adlk6mJmwJFFPEgRHfEHNQAAAMQ"]
[Sat Apr 11 05:00:26.825874 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:32307] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlk6q8109xRDP2izWiv_wAAAI4"]
[Sat Apr 11 05:00:27.340356 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:34941] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "adlk62JmwJFFPEgRHfEHOQAAANA"]
[Sat Apr 11 05:00:27.372501 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:3452] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "adlk62JmwJFFPEgRHfEHOgAAAMg"]
[Sat Apr 11 05:00:27.828720 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:3394] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "adlk67oqTMlo30hcVw9BTQAAABQ"]
[Sat Apr 11 05:00:27.881272 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:36181] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "adlk62JmwJFFPEgRHfEHPgAAAM0"]
[Sat Apr 11 05:00:28.306947 2026] [:error] [pid 33171:tid 33205] [client 158.158.33.175:34899] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/install.php"] [unique_id "adlk7LoqTMlo30hcVw9BUAAAABM"]
[Sat Apr 11 05:00:28.365616 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:3975] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "adlk7GJmwJFFPEgRHfEHQgAAANI"]
[Sat Apr 11 05:00:28.782449 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:3244] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "adlk7K8109xRDP2izWiwAgAAAIE"]
[Sat Apr 11 05:00:28.880321 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:3971] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "adlk7GJmwJFFPEgRHfEHRwAAANA"]
[Sat Apr 11 05:00:29.276668 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:3909] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "adlk7WJmwJFFPEgRHfEHSgAAAMg"]
[Sat Apr 11 05:00:29.377702 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:3296] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "adlk7WJmwJFFPEgRHfEHTAAAAM0"]
[Sat Apr 11 05:00:29.785940 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:3148] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "adlk7WJmwJFFPEgRHfEHTwAAAMU"]
[Sat Apr 11 05:00:29.871445 2026] [:error] [pid 33171:tid 33191] [client 158.158.33.175:38937] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "adlk7boqTMlo30hcVw9BUgAAAAU"]
[Sat Apr 11 05:00:30.268511 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:34887] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/wp-blog.php"] [unique_id "adlk7roqTMlo30hcVw9BVwAAAA0"]
[Sat Apr 11 05:00:30.354388 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:3630] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "adlk7roqTMlo30hcVw9BWAAAAA4"]
[Sat Apr 11 05:00:30.755823 2026] [:error] [pid 33171:tid 33206] [client 158.158.33.175:32996] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlk7roqTMlo30hcVw9BWwAAABQ"]
[Sat Apr 11 05:00:30.845642 2026] [:error] [pid 33171:tid 33196] [client 158.158.33.175:3720] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "adlk7roqTMlo30hcVw9BXAAAAAo"]
[Sat Apr 11 05:00:31.246399 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:3250] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlk77oqTMlo30hcVw9BXgAAABY"]
[Sat Apr 11 05:00:31.353294 2026] [:error] [pid 33171:tid 33201] [client 158.158.33.175:37279] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "adlk77oqTMlo30hcVw9BYAAAAA8"]
[Sat Apr 11 05:00:31.773051 2026] [:error] [pid 33171:tid 33192] [client 158.158.33.175:32973] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlk77oqTMlo30hcVw9BZgAAAAY"]
[Sat Apr 11 05:00:31.893572 2026] [:error] [pid 33172:tid 33238] [client 158.158.33.175:36107] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "adlk7zn2G0IJw5EZY9kawQAAAFQ"]
[Sat Apr 11 05:00:32.267149 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:3793] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adlk8K8109xRDP2izWiwBQAAAJE"]
[Sat Apr 11 05:00:32.422959 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3786] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "adlk8K8109xRDP2izWiwBgAAAJg"]
[Sat Apr 11 05:00:32.773609 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3169] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "adlk8K8109xRDP2izWiwCQAAAJY"]
[Sat Apr 11 05:00:32.912965 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:35581] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "adlk8K8109xRDP2izWiwCgAAAI4"]
[Sat Apr 11 05:00:33.255394 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:36144] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "adlk8a8109xRDP2izWiwDgAAAII"]
[Sat Apr 11 05:00:33.401727 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:37253] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk8a8109xRDP2izWiwEAAAAJc"]
[Sat Apr 11 05:00:33.742747 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:4001] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "adlk8boqTMlo30hcVw9BbAAAABY"]
[Sat Apr 11 05:00:33.952337 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:34883] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk8boqTMlo30hcVw9BbQAAABU"]
[Sat Apr 11 05:00:34.472749 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3301] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk8mJmwJFFPEgRHfEHUgAAANY"]
[Sat Apr 11 05:00:34.865864 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3782] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "adlk8mJmwJFFPEgRHfEHVQAAANQ"]
[Sat Apr 11 05:00:34.976815 2026] [:error] [pid 33288:tid 33297] [client 158.158.33.175:36109] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk8mJmwJFFPEgRHfEHVwAAAMc"]
[Sat Apr 11 05:00:35.357343 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:3979] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "adlk8zn2G0IJw5EZY9kawwAAAEY"]
[Sat Apr 11 05:00:35.527773 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:3472] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlk8zn2G0IJw5EZY9kaxQAAAFI"]
[Sat Apr 11 05:00:35.830770 2026] [:error] [pid 33171:tid 33203] [client 158.158.33.175:3355] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "adlk87oqTMlo30hcVw9BdAAAABE"]
[Sat Apr 11 05:00:36.183521 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:3483] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlk9GJmwJFFPEgRHfEHXQAAANY"]
[Sat Apr 11 05:00:36.319588 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:3307] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "adlk9LoqTMlo30hcVw9BdgAAAAk"]
[Sat Apr 11 05:00:36.708470 2026] [:error] [pid 33172:tid 33234] [client 158.158.33.175:32997] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlk9Dn2G0IJw5EZY9kaxwAAAFA"]
[Sat Apr 11 05:00:36.808572 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:34892] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drhunthq.php"] [unique_id "adlk9LoqTMlo30hcVw9BeAAAAA0"]
[Sat Apr 11 05:00:37.224546 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3613] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlk9a8109xRDP2izWiwFAAAAJg"]
[Sat Apr 11 05:00:37.306529 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:3902] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "adlk9a8109xRDP2izWiwFQAAAIk"]
[Sat Apr 11 05:00:37.725591 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:34922] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adlk9a8109xRDP2izWiwFwAAAIM"]
[Sat Apr 11 05:00:37.805934 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:33013] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "adlk9a8109xRDP2izWiwGAAAAIo"]
[Sat Apr 11 05:00:38.234961 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:3550] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adlk9q8109xRDP2izWiwHAAAAIA"]
[Sat Apr 11 05:00:38.286361 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:3344] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "adlk9mJmwJFFPEgRHfEHYwAAANg"]
[Sat Apr 11 05:00:38.726619 2026] [:error] [pid 33173:tid 33258] [client 158.158.33.175:35536] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adlk9q8109xRDP2izWiwIQAAAI0"]
[Sat Apr 11 05:00:38.769132 2026] [:error] [pid 33173:tid 33255] [client 158.158.33.175:3588] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/index.php"] [unique_id "adlk9q8109xRDP2izWiwIwAAAIo"]
[Sat Apr 11 05:00:39.212416 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:36155] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adlk968109xRDP2izWiwJAAAAIs"]
[Sat Apr 11 05:00:39.250685 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:3538] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk9zn2G0IJw5EZY9kazgAAAFM"]
[Sat Apr 11 05:00:39.729426 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:34290] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk92JmwJFFPEgRHfEHaAAAAMA"]
[Sat Apr 11 05:00:39.738045 2026] [:error] [pid 33171:tid 33190] [client 158.158.33.175:36116] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "adlk97oqTMlo30hcVw9BeQAAAAQ"]
[Sat Apr 11 05:00:40.213212 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:34929] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk-GJmwJFFPEgRHfEHawAAAMM"]
[Sat Apr 11 05:00:40.250331 2026] [:error] [pid 33171:tid 33191] [client 158.158.33.175:4017] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "adlk-LoqTMlo30hcVw9BfAAAAAU"]
[Sat Apr 11 05:00:40.714997 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:4021] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk-K8109xRDP2izWiwJgAAAI4"]
[Sat Apr 11 05:00:40.790000 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:34884] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "adlk-GJmwJFFPEgRHfEHbgAAANI"]
[Sat Apr 11 05:00:41.209056 2026] [:error] [pid 33172:tid 33241] [client 158.158.33.175:3890] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlk-Tn2G0IJw5EZY9ka0QAAAFc"]
[Sat Apr 11 05:00:41.339829 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3378] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "adlk-WJmwJFFPEgRHfEHcwAAAMA"]
[Sat Apr 11 05:00:41.731814 2026] [:error] [pid 33288:tid 33304] [client 158.158.33.175:36192] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlk-WJmwJFFPEgRHfEHdgAAAM4"]
[Sat Apr 11 05:00:41.883818 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:35564] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adlk-boqTMlo30hcVw9BfQAAAA0"]
[Sat Apr 11 05:00:42.226589 2026] [:error] [pid 33173:tid 33266] [client 158.158.33.175:58985] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlk-q8109xRDP2izWiwKwAAAJU"]
[Sat Apr 11 05:00:42.367176 2026] [:error] [pid 33173:tid 33262] [client 158.158.33.175:4026] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adlk-q8109xRDP2izWiwLAAAAJE"]
[Sat Apr 11 05:00:42.702184 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:58996] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "adlk-q8109xRDP2izWiwLgAAAIM"]
[Sat Apr 11 05:00:42.952867 2026] [:error] [pid 33173:tid 33247] [client 158.158.33.175:36199] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adlk-q8109xRDP2izWiwMQAAAII"]
[Sat Apr 11 05:00:43.226008 2026] [:error] [pid 33171:tid 33205] [client 158.158.33.175:33574] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adlk-7oqTMlo30hcVw9BgAAAABM"]
[Sat Apr 11 05:00:43.441276 2026] [:error] [pid 33173:tid 33257] [client 158.158.33.175:3994] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adlk-68109xRDP2izWiwMwAAAIw"]
[Sat Apr 11 05:00:43.716831 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:3517] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adlk-68109xRDP2izWiwNAAAAI4"]
[Sat Apr 11 05:00:43.980578 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:37287] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk-2JmwJFFPEgRHfEHeQAAAMw"]
[Sat Apr 11 05:00:44.226645 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:36179] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adlk_GJmwJFFPEgRHfEHegAAAMA"]
[Sat Apr 11 05:00:44.465079 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:58967] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk_GJmwJFFPEgRHfEHfAAAAMs"]
[Sat Apr 11 05:00:44.733077 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:32355] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adlk_K8109xRDP2izWiwOQAAAIM"]
[Sat Apr 11 05:00:45.077560 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:33589] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk_WJmwJFFPEgRHfEHgQAAANQ"]
[Sat Apr 11 05:00:45.212616 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:36127] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "adlk_WJmwJFFPEgRHfEHgwAAAMU"]
[Sat Apr 11 05:00:45.579715 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:3956] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adlk_WJmwJFFPEgRHfEHhAAAAMs"]
[Sat Apr 11 05:00:45.714715 2026] [:error] [pid 33288:tid 33312] [client 158.158.33.175:35530] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "adlk_WJmwJFFPEgRHfEHhQAAANY"]
[Sat Apr 11 05:00:46.165600 2026] [:error] [pid 33171:tid 33202] [client 158.158.33.175:3321] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adlk_roqTMlo30hcVw9BgwAAABA"]
[Sat Apr 11 05:00:46.310327 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:3575] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "adlk_mJmwJFFPEgRHfEHiQAAANA"]
[Sat Apr 11 05:00:46.660020 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3568] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adlk_mJmwJFFPEgRHfEHjAAAAMM"]
[Sat Apr 11 05:00:46.831349 2026] [:error] [pid 33171:tid 33189] [client 158.158.33.175:3205] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "adlk_roqTMlo30hcVw9BhgAAAAM"]
[Sat Apr 11 05:00:47.170293 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:3735] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adlk_7oqTMlo30hcVw9BiAAAAAk"]
[Sat Apr 11 05:00:47.335569 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:37260] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adlk_68109xRDP2izWiwPwAAAIE"]
[Sat Apr 11 05:00:47.666782 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3627] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adlk_2JmwJFFPEgRHfEHjwAAAMw"]
[Sat Apr 11 05:00:47.848096 2026] [:error] [pid 33288:tid 33290] [client 158.158.33.175:3300] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adlk_2JmwJFFPEgRHfEHkQAAAMA"]
[Sat Apr 11 05:00:48.201685 2026] [:error] [pid 33171:tid 33186] [client 158.158.33.175:32992] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adllALoqTMlo30hcVw9BiwAAAAA"]
[Sat Apr 11 05:00:48.461807 2026] [:error] [pid 33171:tid 33197] [client 158.158.33.175:32303] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adllALoqTMlo30hcVw9BjAAAAAs"]
[Sat Apr 11 05:00:48.691852 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:34259] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adllAGJmwJFFPEgRHfEHlgAAANI"]
[Sat Apr 11 05:00:48.948222 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:34934] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adllAGJmwJFFPEgRHfEHmQAAAM0"]
[Sat Apr 11 05:00:49.298007 2026] [:error] [pid 33173:tid 33261] [client 158.158.33.175:3642] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adllAa8109xRDP2izWiwQwAAAJA"]
[Sat Apr 11 05:00:49.424007 2026] [:error] [pid 33171:tid 33210] [client 158.158.33.175:3528] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adllAboqTMlo30hcVw9BkQAAABg"]
[Sat Apr 11 05:00:49.808393 2026] [:error] [pid 33171:tid 33204] [client 158.158.33.175:35562] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adllAboqTMlo30hcVw9BlAAAABI"]
[Sat Apr 11 05:00:49.901500 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:3774] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adllAWJmwJFFPEgRHfEHmwAAANE"]
[Sat Apr 11 05:00:50.294367 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:37286] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "adllAmJmwJFFPEgRHfEHnQAAAMw"]
[Sat Apr 11 05:00:50.400364 2026] [:error] [pid 33288:tid 33299] [client 158.158.33.175:4038] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adllAmJmwJFFPEgRHfEHngAAAMk"]
[Sat Apr 11 05:00:50.855786 2026] [:error] [pid 33171:tid 33193] [client 158.158.33.175:3637] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "adllAroqTMlo30hcVw9BmAAAAAc"]
[Sat Apr 11 05:00:50.979179 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:3340] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adllAmJmwJFFPEgRHfEHowAAANM"]
[Sat Apr 11 05:00:51.408496 2026] [:error] [pid 33173:tid 33250] [client 158.158.33.175:3238] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "adllA68109xRDP2izWiwRQAAAIU"]
[Sat Apr 11 05:00:51.515588 2026] [:error] [pid 33171:tid 33203] [client 158.158.33.175:3415] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adllA7oqTMlo30hcVw9BmQAAABE"]
[Sat Apr 11 05:00:52.009080 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:3741] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adllBGJmwJFFPEgRHfEHpwAAAMw"]
[Sat Apr 11 05:00:52.512962 2026] [:error] [pid 33173:tid 33268] [client 158.158.33.175:35484] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "adllBK8109xRDP2izWiwSQAAAJc"]
[Sat Apr 11 05:00:52.512977 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:3727] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adllBK8109xRDP2izWiwSAAAAIA"]
[Sat Apr 11 05:00:53.004174 2026] [:error] [pid 33171:tid 33208] [client 158.158.33.175:32262] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "adllBboqTMlo30hcVw9BnwAAABY"]
[Sat Apr 11 05:00:53.042099 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:3797] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "adllBWJmwJFFPEgRHfEHqAAAAM8"]
[Sat Apr 11 05:00:53.487724 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:4051] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adllBWJmwJFFPEgRHfEHqQAAANI"]
[Sat Apr 11 05:00:53.524831 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:36194] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "adllBWJmwJFFPEgRHfEHqwAAAMs"]
[Sat Apr 11 05:00:54.005567 2026] [:error] [pid 33172:tid 33223] [client 158.158.33.175:3223] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "adllBjn2G0IJw5EZY9ka1QAAAEU"]
[Sat Apr 11 05:00:54.024464 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:34880] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adllBq8109xRDP2izWiwTQAAAIY"]
[Sat Apr 11 05:00:54.578389 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:36145] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adllBjn2G0IJw5EZY9ka1gAAAEI"]
[Sat Apr 11 05:00:54.801879 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:3510] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "adllBjn2G0IJw5EZY9ka2AAAAE8"]
[Sat Apr 11 05:00:55.071084 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:37307] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adllBzn2G0IJw5EZY9ka2QAAAEY"]
[Sat Apr 11 05:00:55.319986 2026] [:error] [pid 33171:tid 33187] [client 158.158.33.175:37289] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "adllB7oqTMlo30hcVw9BpQAAAAE"]
[Sat Apr 11 05:00:55.546944 2026] [:error] [pid 33172:tid 33232] [client 158.158.33.175:39442] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "adllBzn2G0IJw5EZY9ka3AAAAE4"]
[Sat Apr 11 05:00:55.852869 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:33006] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "adllB2JmwJFFPEgRHfEHrgAAANE"]
[Sat Apr 11 05:00:56.138817 2026] [:error] [pid 33288:tid 33302] [client 158.158.33.175:59000] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "adllCGJmwJFFPEgRHfEHsQAAAMw"]
[Sat Apr 11 05:00:56.535727 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:3520] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "adllCK8109xRDP2izWiwVgAAAIk"]
[Sat Apr 11 05:00:56.748900 2026] [:error] [pid 33288:tid 33309] [client 158.158.33.175:3392] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "adllCGJmwJFFPEgRHfEHtQAAANM"]
[Sat Apr 11 05:00:57.156250 2026] [:error] [pid 33288:tid 33292] [client 158.158.33.175:3585] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "adllCWJmwJFFPEgRHfEHuAAAAMI"]
[Sat Apr 11 05:00:57.283856 2026] [:error] [pid 33288:tid 33307] [client 158.158.33.175:3488] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "adllCWJmwJFFPEgRHfEHuwAAANE"]
[Sat Apr 11 05:00:57.655320 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:35527] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adllCa8109xRDP2izWiwWAAAAJM"]
[Sat Apr 11 05:00:57.996547 2026] [:error] [pid 33288:tid 33314] [client 158.158.33.175:4027] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "adllCWJmwJFFPEgRHfEHwAAAANg"]
[Sat Apr 11 05:00:58.152286 2026] [:error] [pid 33172:tid 33227] [client 158.158.33.175:3768] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adllCjn2G0IJw5EZY9ka4QAAAEk"]
[Sat Apr 11 05:00:58.719596 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:32314] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "adllCq8109xRDP2izWiwWgAAAJY"]
[Sat Apr 11 05:00:58.828733 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:3343] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adllCq8109xRDP2izWiwXwAAAIM"]
[Sat Apr 11 05:00:59.235064 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:32976] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "adllC68109xRDP2izWiwYQAAAI4"]
[Sat Apr 11 05:00:59.355662 2026] [:error] [pid 33172:tid 33237] [client 158.158.33.175:39453] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adllCzn2G0IJw5EZY9ka5AAAAFM"]
[Sat Apr 11 05:00:59.747856 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:38946] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "adllC2JmwJFFPEgRHfEHwwAAAMs"]
[Sat Apr 11 05:00:59.903653 2026] [:error] [pid 33172:tid 33241] [client 158.158.33.175:37264] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "adllCzn2G0IJw5EZY9ka6AAAAFc"]
[Sat Apr 11 05:01:00.352557 2026] [:error] [pid 33172:tid 33222] [client 158.158.33.175:33570] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "adllDDn2G0IJw5EZY9ka6wAAAEQ"]
[Sat Apr 11 05:01:00.403146 2026] [:error] [pid 33288:tid 33293] [client 158.158.33.175:3142] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "adllDGJmwJFFPEgRHfEHxgAAAMM"]
[Sat Apr 11 05:01:00.911250 2026] [:error] [pid 33173:tid 33264] [client 158.158.33.175:3768] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "adllDK8109xRDP2izWiwZAAAAJM"]
[Sat Apr 11 05:01:01.055743 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:3285] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "adllDWJmwJFFPEgRHfEHzAAAAMg"]
[Sat Apr 11 05:01:01.435807 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:3868] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "adllDa8109xRDP2izWiwZQAAAJY"]
[Sat Apr 11 05:01:01.542483 2026] [:error] [pid 33173:tid 33251] [client 158.158.33.175:3463] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "adllDa8109xRDP2izWiwZwAAAIY"]
[Sat Apr 11 05:01:01.941847 2026] [:error] [pid 33173:tid 33266] [client 158.158.33.175:36189] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/155.php"] [unique_id "adllDa8109xRDP2izWiwaQAAAJU"]
[Sat Apr 11 05:01:02.104247 2026] [:error] [pid 33288:tid 33305] [client 158.158.33.175:34889] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "adllDmJmwJFFPEgRHfEHzgAAAM8"]
[Sat Apr 11 05:01:02.549544 2026] [:error] [pid 33171:tid 33193] [client 158.158.33.175:3571] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adllDroqTMlo30hcVw9BqwAAAAc"]
[Sat Apr 11 05:01:02.661091 2026] [:error] [pid 33173:tid 33260] [client 158.158.33.175:3938] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "adllDq8109xRDP2izWiwbAAAAI8"]
[Sat Apr 11 05:01:03.096623 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:3910] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adllDzn2G0IJw5EZY9ka8QAAAEI"]
[Sat Apr 11 05:01:03.278194 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:3604] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "adllD68109xRDP2izWiwbgAAAJI"]
[Sat Apr 11 05:01:03.762970 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:3333] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "adllD68109xRDP2izWiwcgAAAIs"]
[Sat Apr 11 05:01:03.781061 2026] [:error] [pid 33288:tid 33310] [client 158.158.33.175:3742] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adllD2JmwJFFPEgRHfEH0wAAANQ"]
[Sat Apr 11 05:01:08.878384 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:3569] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adllFGJmwJFFPEgRHfEH9AAAAMo"]
[Sat Apr 11 05:01:09.038468 2026] [:error] [pid 33288:tid 33295] [client 158.158.33.175:3585] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "adllFWJmwJFFPEgRHfEH9gAAAMU"]
[Sat Apr 11 05:01:09.635154 2026] [:error] [pid 33172:tid 33220] [client 158.158.33.175:34902] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "adllFTn2G0IJw5EZY9ka-AAAAEI"]
[Sat Apr 11 05:01:09.945696 2026] [:error] [pid 33172:tid 33223] [client 158.158.33.175:3502] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adllFTn2G0IJw5EZY9ka-gAAAEU"]
[Sat Apr 11 05:01:10.275462 2026] [:error] [pid 33172:tid 33224] [client 158.158.33.175:3431] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "adllFjn2G0IJw5EZY9ka_QAAAEY"]
[Sat Apr 11 05:01:10.817087 2026] [:error] [pid 33171:tid 33200] [client 158.158.33.175:33575] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "adllFroqTMlo30hcVw9BsQAAAA4"]
[Sat Apr 11 05:01:11.005769 2026] [:error] [pid 33173:tid 33253] [client 158.158.33.175:3817] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adllF68109xRDP2izWiwlQAAAIg"]
[Sat Apr 11 05:01:11.366908 2026] [:error] [pid 33173:tid 33263] [client 158.158.33.175:33014] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adllF68109xRDP2izWiwmAAAAJI"]
[Sat Apr 11 05:01:11.862564 2026] [:error] [pid 33172:tid 33236] [client 158.158.33.175:33585] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adllFzn2G0IJw5EZY9kbAgAAAFI"]
[Sat Apr 11 05:01:12.011129 2026] [:error] [pid 33173:tid 33246] [client 158.158.33.175:58978] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adllGK8109xRDP2izWiwmwAAAIE"]
[Sat Apr 11 05:01:12.265319 2026] [:error] [pid 33173:tid 33259] [client 158.158.33.175:3434] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "adllGK8109xRDP2izWiwngAAAI4"]
[Sat Apr 11 05:01:12.390840 2026] [:error] [pid 33172:tid 33219] [client 158.158.33.175:3443] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adllGDn2G0IJw5EZY9kbBQAAAEE"]
[Sat Apr 11 05:01:12.789625 2026] [:error] [pid 33173:tid 33267] [client 158.158.33.175:33549] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "adllGK8109xRDP2izWiwogAAAJY"]
[Sat Apr 11 05:01:12.870648 2026] [:error] [pid 33172:tid 33223] [client 158.158.33.175:4042] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "adllGDn2G0IJw5EZY9kbBwAAAEU"]
[Sat Apr 11 05:01:13.305774 2026] [:error] [pid 33172:tid 33233] [client 158.158.33.175:35456] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "adllGTn2G0IJw5EZY9kbCwAAAE8"]
[Sat Apr 11 05:01:13.512941 2026] [:error] [pid 33172:tid 33241] [client 158.158.33.175:3384] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adllGTn2G0IJw5EZY9kbDQAAAFc"]
[Sat Apr 11 05:01:13.877342 2026] [:error] [pid 33171:tid 33207] [client 158.158.33.175:34909] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "adllGboqTMlo30hcVw9BswAAABU"]
[Sat Apr 11 05:01:14.031279 2026] [:error] [pid 33173:tid 33256] [client 158.158.33.175:3380] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adllGq8109xRDP2izWiwpgAAAIs"]
[Sat Apr 11 05:01:14.420341 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:3428] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "adllGmJmwJFFPEgRHfEH-AAAAMo"]
[Sat Apr 11 05:01:14.513594 2026] [:error] [pid 33288:tid 33298] [client 158.158.33.175:3412] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adllGmJmwJFFPEgRHfEH-QAAAMg"]
[Sat Apr 11 05:01:15.054130 2026] [:error] [pid 33173:tid 33269] [client 158.158.33.175:3857] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adllG68109xRDP2izWiwqQAAAJg"]
[Sat Apr 11 05:01:15.223318 2026] [:error] [pid 33173:tid 33248] [client 158.158.33.175:32319] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "adllG68109xRDP2izWiwqwAAAIM"]
[Sat Apr 11 05:01:15.537690 2026] [:error] [pid 33288:tid 33311] [client 158.158.33.175:38919] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "adllG2JmwJFFPEgRHfEIBAAAANU"]
[Sat Apr 11 05:01:15.768813 2026] [:error] [pid 33288:tid 33303] [client 158.158.33.175:34263] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "adllG2JmwJFFPEgRHfEIBgAAAM0"]
[Sat Apr 11 05:01:16.095374 2026] [:error] [pid 33171:tid 33209] [client 158.158.33.175:3584] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "adllHLoqTMlo30hcVw9BuAAAABc"]
[Sat Apr 11 05:01:16.279339 2026] [:error] [pid 33288:tid 33313] [client 158.158.33.175:37291] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "adllHGJmwJFFPEgRHfEIBwAAANc"]
[Sat Apr 11 05:01:16.689398 2026] [:error] [pid 33171:tid 33202] [client 158.158.33.175:36120] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "adllHLoqTMlo30hcVw9BuwAAABA"]
[Sat Apr 11 05:01:16.880358 2026] [:error] [pid 33173:tid 33245] [client 158.158.33.175:34264] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "adllHK8109xRDP2izWiwswAAAIA"]
[Sat Apr 11 05:01:17.274159 2026] [:error] [pid 33288:tid 33308] [client 158.158.33.175:34900] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/file.php"] [unique_id "adllHWJmwJFFPEgRHfEIDQAAANI"]
[Sat Apr 11 05:01:17.530684 2026] [:error] [pid 33171:tid 33196] [client 158.158.33.175:3458] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "adllHboqTMlo30hcVw9BvAAAAAo"]
[Sat Apr 11 05:01:17.797332 2026] [:error] [pid 33171:tid 33195] [client 158.158.33.175:3372] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "adllHboqTMlo30hcVw9BvgAAAAk"]
[Sat Apr 11 05:01:18.109306 2026] [:error] [pid 33172:tid 33230] [client 158.158.33.175:3439] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "adllHjn2G0IJw5EZY9kbFQAAAEw"]
[Sat Apr 11 05:01:18.313070 2026] [:error] [pid 33171:tid 33201] [client 158.158.33.175:32287] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "adllHroqTMlo30hcVw9BvwAAAA8"]
[Sat Apr 11 05:01:18.680992 2026] [:error] [pid 33288:tid 33306] [client 158.158.33.175:4062] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "adllHmJmwJFFPEgRHfEIGgAAANA"]
[Sat Apr 11 05:01:18.872495 2026] [:error] [pid 33288:tid 33301] [client 158.158.33.175:3787] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "adllHmJmwJFFPEgRHfEIHQAAAMs"]
[Sat Apr 11 05:01:19.356087 2026] [:error] [pid 33173:tid 33254] [client 158.158.33.175:38944] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "adllH68109xRDP2izWiwuQAAAIk"]
[Sat Apr 11 05:01:19.913192 2026] [:error] [pid 33171:tid 33199] [client 158.158.33.175:3606] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "adllH7oqTMlo30hcVw9BxgAAAA0"]
[Sat Apr 11 05:01:20.409413 2026] [:error] [pid 33172:tid 33232] [client 158.158.33.175:38965] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "adllIDn2G0IJw5EZY9kbFwAAAE4"]
[Sat Apr 11 05:01:20.920127 2026] [:error] [pid 33172:tid 33223] [client 158.158.33.175:32995] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "adllIDn2G0IJw5EZY9kbGQAAAEU"]
[Sat Apr 11 05:01:21.541987 2026] [:error] [pid 33288:tid 33300] [client 158.158.33.175:34903] [client 158.158.33.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws77.php"] [unique_id "adllIWJmwJFFPEgRHfEIJAAAAMo"]
[Sat Apr 11 06:07:15.364749 2026] [:error] [pid 15244:tid 15264] [client 20.100.191.67:53095] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adl0k4kdEsz5NeAq8w0f2wAAARI"]
[Sat Apr 11 06:07:15.954195 2026] [:error] [pid 33288:tid 33298] [client 20.100.191.67:57300] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adl0k2JmwJFFPEgRHfFFEwAAAMg"]
[Sat Apr 11 06:07:16.533857 2026] [:error] [pid 33171:tid 33199] [client 20.100.191.67:53512] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adl0lLoqTMlo30hcVw9h0QAAAA0"]
[Sat Apr 11 06:07:17.111062 2026] [:error] [pid 33288:tid 33291] [client 20.100.191.67:58716] [client 20.100.191.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adl0lWJmwJFFPEgRHfFFGwAAAME"]
[Sat Apr 11 06:20:54.891755 2026] [:error] [pid 33173:tid 33259] [client 170.106.82.209:52644] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adl3xq8109xRDP2izWjmwwAAAI4"]
[Sat Apr 11 07:12:34.183375 2026] [:error] [pid 33172:tid 33225] [client 20.250.31.31:46093] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admD4jn2G0IJw5EZY9li6AAAAEc"]
[Sat Apr 11 07:12:35.112406 2026] [:error] [pid 33173:tid 33255] [client 20.250.31.31:50582] [client 20.250.31.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admD468109xRDP2izWgIrgAAAIo"]
[Sat Apr 11 09:42:49.501140 2026] [:error] [pid 34822:tid 34851] [client 157.15.40.61:60456] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnGdoScBMkNZUKMZ3Z1wAAARg"]
[Sat Apr 11 10:34:05.696804 2026] [:error] [pid 58194:tid 58205] [client 74.248.145.185:42505] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "admzHaT4IiVFj-rhcaX8wQAAAQY"]
[Sat Apr 11 10:34:06.201309 2026] [:error] [pid 58194:tid 58211] [client 74.248.145.185:42622] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "admzHqT4IiVFj-rhcaX8xgAAAQw"]
[Sat Apr 11 10:34:06.707577 2026] [:error] [pid 58288:tid 58305] [client 74.248.145.185:42611] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "admzHnf_USd3ofWlU3smXwAAAE8"]
[Sat Apr 11 10:34:07.217105 2026] [:error] [pid 58195:tid 58243] [client 74.248.145.185:42498] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "admzHwPvj06vzrczQjv8dwAAAJA"]
[Sat Apr 11 10:34:07.727170 2026] [:error] [pid 58194:tid 58217] [client 74.248.145.185:55291] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "admzH6T4IiVFj-rhcaX8ygAAARI"]
[Sat Apr 11 10:34:08.234893 2026] [:error] [pid 58196:tid 58278] [client 74.248.145.185:42513] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "admzIBmf0L5kNLP6dTlHtQAAABg"]
[Sat Apr 11 10:34:08.739919 2026] [:error] [pid 58195:tid 58232] [client 74.248.145.185:42584] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "admzIAPvj06vzrczQjv8egAAAIU"]
[Sat Apr 11 10:34:09.255320 2026] [:error] [pid 58196:tid 58271] [client 74.248.145.185:42593] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "admzIRmf0L5kNLP6dTlHuAAAABE"]
[Sat Apr 11 10:34:09.770989 2026] [:error] [pid 58196:tid 58258] [client 74.248.145.185:42521] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xff.php"] [unique_id "admzIRmf0L5kNLP6dTlHvAAAAAQ"]
[Sat Apr 11 10:34:10.279892 2026] [:error] [pid 58195:tid 58242] [client 74.248.145.185:42589] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xff.php"] [unique_id "admzIgPvj06vzrczQjv8fQAAAI8"]
[Sat Apr 11 10:34:10.785938 2026] [:error] [pid 58194:tid 58208] [client 74.248.145.185:42522] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xff.php"] [unique_id "admzIqT4IiVFj-rhcaX80AAAAQk"]
[Sat Apr 11 10:34:11.292527 2026] [:error] [pid 58196:tid 58255] [client 74.248.145.185:42587] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xff.php"] [unique_id "admzIxmf0L5kNLP6dTlHvgAAAAE"]
[Sat Apr 11 10:34:11.804738 2026] [:error] [pid 58196:tid 58260] [client 74.248.145.185:42589] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "admzIxmf0L5kNLP6dTlHvwAAAAY"]
[Sat Apr 11 10:34:12.312310 2026] [:error] [pid 58196:tid 58257] [client 74.248.145.185:20010] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "admzJBmf0L5kNLP6dTlHwwAAAAM"]
[Sat Apr 11 10:34:12.819848 2026] [:error] [pid 58194:tid 58206] [client 74.248.145.185:42528] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "admzJKT4IiVFj-rhcaX80gAAAQc"]
[Sat Apr 11 10:34:13.330914 2026] [:error] [pid 58194:tid 58219] [client 74.248.145.185:55295] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "admzJaT4IiVFj-rhcaX80wAAARQ"]
[Sat Apr 11 10:34:13.839151 2026] [:error] [pid 58288:tid 58299] [client 74.248.145.185:42602] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/awa.php"] [unique_id "admzJXf_USd3ofWlU3smawAAAEk"]
[Sat Apr 11 10:34:14.348788 2026] [:error] [pid 58196:tid 58266] [client 74.248.145.185:42619] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/awa.php"] [unique_id "admzJhmf0L5kNLP6dTlHyQAAAAw"]
[Sat Apr 11 10:34:14.866119 2026] [:error] [pid 58194:tid 58209] [client 74.248.145.185:55266] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/awa.php"] [unique_id "admzJqT4IiVFj-rhcaX81gAAAQo"]
[Sat Apr 11 10:34:15.372939 2026] [:error] [pid 58195:tid 58237] [client 74.248.145.185:55256] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/awa.php"] [unique_id "admzJwPvj06vzrczQjv8kAAAAIo"]
[Sat Apr 11 10:34:15.887106 2026] [:error] [pid 58196:tid 58269] [client 74.248.145.185:42610] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "admzJxmf0L5kNLP6dTlHzwAAAA8"]
[Sat Apr 11 10:34:16.393679 2026] [:error] [pid 58196:tid 58259] [client 74.248.145.185:42523] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "admzKBmf0L5kNLP6dTlH0QAAAAU"]
[Sat Apr 11 10:34:16.915185 2026] [:error] [pid 58195:tid 58240] [client 74.248.145.185:42553] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "admzKAPvj06vzrczQjv8lQAAAI0"]
[Sat Apr 11 10:34:17.426921 2026] [:error] [pid 58194:tid 58206] [client 74.248.145.185:42564] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "admzKaT4IiVFj-rhcaX83wAAAQc"]
[Sat Apr 11 10:34:17.940370 2026] [:error] [pid 58194:tid 58210] [client 74.248.145.185:42560] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/popo.php"] [unique_id "admzKaT4IiVFj-rhcaX84gAAAQs"]
[Sat Apr 11 10:34:18.461829 2026] [:error] [pid 58195:tid 58250] [client 74.248.145.185:42502] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/popo.php"] [unique_id "admzKgPvj06vzrczQjv8mAAAAJc"]
[Sat Apr 11 10:34:18.976715 2026] [:error] [pid 58194:tid 58203] [client 74.248.145.185:42506] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/popo.php"] [unique_id "admzKqT4IiVFj-rhcaX85QAAAQQ"]
[Sat Apr 11 10:34:19.507932 2026] [:error] [pid 58194:tid 58199] [client 74.248.145.185:19974] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/popo.php"] [unique_id "admzK6T4IiVFj-rhcaX85wAAAQA"]
[Sat Apr 11 10:34:20.017884 2026] [:error] [pid 58194:tid 58211] [client 74.248.145.185:55261] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/water.php"] [unique_id "admzLKT4IiVFj-rhcaX87AAAAQw"]
[Sat Apr 11 10:34:20.528012 2026] [:error] [pid 58194:tid 58210] [client 74.248.145.185:42499] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/water.php"] [unique_id "admzLKT4IiVFj-rhcaX88AAAAQs"]
[Sat Apr 11 10:34:21.039113 2026] [:error] [pid 58288:tid 58305] [client 74.248.145.185:42501] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/water.php"] [unique_id "admzLXf_USd3ofWlU3smcAAAAE8"]
[Sat Apr 11 10:34:21.547143 2026] [:error] [pid 58194:tid 58199] [client 74.248.145.185:42579] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/water.php"] [unique_id "admzLaT4IiVFj-rhcaX89QAAAQA"]
[Sat Apr 11 10:34:22.061513 2026] [:error] [pid 58194:tid 58204] [client 74.248.145.185:42550] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "admzLqT4IiVFj-rhcaX8-QAAAQU"]
[Sat Apr 11 10:34:22.574210 2026] [:error] [pid 58195:tid 58250] [client 74.248.145.185:55247] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "admzLgPvj06vzrczQjv8nwAAAJc"]
[Sat Apr 11 10:34:23.088639 2026] [:error] [pid 58195:tid 58229] [client 74.248.145.185:55257] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "admzLwPvj06vzrczQjv8owAAAII"]
[Sat Apr 11 10:34:23.595253 2026] [:error] [pid 58196:tid 58268] [client 74.248.145.185:55258] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "admzLxmf0L5kNLP6dTlH1gAAAA4"]
[Sat Apr 11 10:34:24.105985 2026] [:error] [pid 58196:tid 58267] [client 74.248.145.185:42582] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/13.php"] [unique_id "admzMBmf0L5kNLP6dTlH1wAAAA0"]
[Sat Apr 11 10:34:24.621922 2026] [:error] [pid 58194:tid 58222] [client 74.248.145.185:42586] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/13.php"] [unique_id "admzMKT4IiVFj-rhcaX9AgAAARc"]
[Sat Apr 11 10:34:25.129935 2026] [:error] [pid 58288:tid 58301] [client 74.248.145.185:20025] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/13.php"] [unique_id "admzMXf_USd3ofWlU3smcwAAAEs"]
[Sat Apr 11 10:34:25.638491 2026] [:error] [pid 58195:tid 58246] [client 74.248.145.185:42575] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/13.php"] [unique_id "admzMQPvj06vzrczQjv8pwAAAJM"]
[Sat Apr 11 10:34:26.150575 2026] [:error] [pid 58196:tid 58258] [client 74.248.145.185:42565] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wert.php"] [unique_id "admzMhmf0L5kNLP6dTlH2wAAAAQ"]
[Sat Apr 11 10:34:26.661844 2026] [:error] [pid 58196:tid 58254] [client 74.248.145.185:19802] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wert.php"] [unique_id "admzMhmf0L5kNLP6dTlH3wAAAAA"]
[Sat Apr 11 10:34:27.168179 2026] [:error] [pid 58194:tid 58215] [client 74.248.145.185:55237] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wert.php"] [unique_id "admzM6T4IiVFj-rhcaX9DwAAARA"]
[Sat Apr 11 10:34:27.674040 2026] [:error] [pid 58196:tid 58268] [client 74.248.145.185:55278] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wert.php"] [unique_id "admzMxmf0L5kNLP6dTlH4gAAAA4"]
[Sat Apr 11 10:34:28.182562 2026] [:error] [pid 58196:tid 58275] [client 74.248.145.185:42511] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/11.php"] [unique_id "admzNBmf0L5kNLP6dTlH5QAAABU"]
[Sat Apr 11 10:34:28.696748 2026] [:error] [pid 58196:tid 58258] [client 74.248.145.185:42566] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/11.php"] [unique_id "admzNBmf0L5kNLP6dTlH6AAAAAQ"]
[Sat Apr 11 10:34:29.211576 2026] [:error] [pid 58194:tid 58220] [client 74.248.145.185:42604] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/11.php"] [unique_id "admzNaT4IiVFj-rhcaX9EwAAARU"]
[Sat Apr 11 10:34:29.717962 2026] [:error] [pid 58288:tid 58291] [client 74.248.145.185:55263] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/11.php"] [unique_id "admzNXf_USd3ofWlU3smfgAAAEE"]
[Sat Apr 11 10:34:30.230759 2026] [:error] [pid 58194:tid 58221] [client 74.248.145.185:42507] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/p.php"] [unique_id "admzNqT4IiVFj-rhcaX9GgAAARY"]
[Sat Apr 11 10:34:30.736692 2026] [:error] [pid 58196:tid 58270] [client 74.248.145.185:42598] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/p.php"] [unique_id "admzNhmf0L5kNLP6dTlH6wAAABA"]
[Sat Apr 11 10:34:31.256053 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:55289] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/p.php"] [unique_id "admzN6T4IiVFj-rhcaX9HAAAAQE"]
[Sat Apr 11 10:34:31.764383 2026] [:error] [pid 58196:tid 58268] [client 74.248.145.185:42509] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/p.php"] [unique_id "admzNxmf0L5kNLP6dTlH7QAAAA4"]
[Sat Apr 11 10:34:32.277721 2026] [:error] [pid 58196:tid 58259] [client 74.248.145.185:55248] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "admzOBmf0L5kNLP6dTlH7gAAAAU"]
[Sat Apr 11 10:34:32.789614 2026] [:error] [pid 58288:tid 58290] [client 74.248.145.185:55255] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "admzOHf_USd3ofWlU3smhQAAAEA"]
[Sat Apr 11 10:34:33.310192 2026] [:error] [pid 58196:tid 58275] [client 74.248.145.185:42536] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "admzORmf0L5kNLP6dTlH8AAAABU"]
[Sat Apr 11 10:34:33.817861 2026] [:error] [pid 58196:tid 58263] [client 74.248.145.185:20003] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "admzORmf0L5kNLP6dTlH8wAAAAk"]
[Sat Apr 11 10:34:34.334581 2026] [:error] [pid 58196:tid 58257] [client 74.248.145.185:42508] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "admzOhmf0L5kNLP6dTlH9QAAAAM"]
[Sat Apr 11 10:34:34.843362 2026] [:error] [pid 58194:tid 58211] [client 74.248.145.185:19980] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "admzOqT4IiVFj-rhcaX9IgAAAQw"]
[Sat Apr 11 10:34:35.348543 2026] [:error] [pid 58196:tid 58260] [client 74.248.145.185:55241] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "admzOxmf0L5kNLP6dTlH-AAAAAY"]
[Sat Apr 11 10:34:35.861167 2026] [:error] [pid 58288:tid 58304] [client 74.248.145.185:42569] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "admzO3f_USd3ofWlU3smiQAAAE4"]
[Sat Apr 11 10:34:36.373260 2026] [:error] [pid 58288:tid 58293] [client 74.248.145.185:42512] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "admzPHf_USd3ofWlU3smiwAAAEM"]
[Sat Apr 11 10:34:36.889825 2026] [:error] [pid 58288:tid 58311] [client 74.248.145.185:55249] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "admzPHf_USd3ofWlU3smjgAAAFU"]
[Sat Apr 11 10:34:37.393898 2026] [:error] [pid 58288:tid 58296] [client 74.248.145.185:55286] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "admzPXf_USd3ofWlU3smkAAAAEY"]
[Sat Apr 11 10:34:37.901738 2026] [:error] [pid 58288:tid 58291] [client 74.248.145.185:19807] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "admzPXf_USd3ofWlU3smlAAAAEE"]
[Sat Apr 11 10:34:38.413161 2026] [:error] [pid 58288:tid 58303] [client 74.248.145.185:19781] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "admzPnf_USd3ofWlU3smlwAAAE0"]
[Sat Apr 11 10:34:38.931694 2026] [:error] [pid 58196:tid 58272] [client 74.248.145.185:42618] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "admzPhmf0L5kNLP6dTlH-wAAABI"]
[Sat Apr 11 10:34:39.440980 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:55234] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "admzP6T4IiVFj-rhcaX9LAAAAQE"]
[Sat Apr 11 10:34:39.948957 2026] [:error] [pid 58194:tid 58214] [client 74.248.145.185:55262] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "admzP6T4IiVFj-rhcaX9LgAAAQ8"]
[Sat Apr 11 10:34:40.484053 2026] [:error] [pid 58194:tid 58213] [client 74.248.145.185:42517] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "admzQKT4IiVFj-rhcaX9MQAAAQ4"]
[Sat Apr 11 10:34:40.993883 2026] [:error] [pid 58195:tid 58237] [client 74.248.145.185:42516] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "admzQAPvj06vzrczQjv8tgAAAIo"]
[Sat Apr 11 10:34:41.518668 2026] [:error] [pid 58196:tid 58255] [client 74.248.145.185:20013] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "admzQRmf0L5kNLP6dTlH_wAAAAE"]
[Sat Apr 11 10:34:42.033967 2026] [:error] [pid 58195:tid 58243] [client 74.248.145.185:55294] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "admzQgPvj06vzrczQjv8uAAAAJA"]
[Sat Apr 11 10:34:42.573020 2026] [:error] [pid 58195:tid 58242] [client 74.248.145.185:42613] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "admzQgPvj06vzrczQjv8ugAAAI8"]
[Sat Apr 11 10:34:43.097883 2026] [:error] [pid 58288:tid 58308] [client 74.248.145.185:42596] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "admzQ3f_USd3ofWlU3smowAAAFI"]
[Sat Apr 11 10:34:43.608014 2026] [:error] [pid 58195:tid 58230] [client 74.248.145.185:42574] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "admzQwPvj06vzrczQjv8vAAAAIM"]
[Sat Apr 11 10:34:44.137719 2026] [:error] [pid 58194:tid 58207] [client 74.248.145.185:20008] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "admzRKT4IiVFj-rhcaX9OAAAAQg"]
[Sat Apr 11 10:34:44.645893 2026] [:error] [pid 58196:tid 58272] [client 74.248.145.185:42514] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "admzRBmf0L5kNLP6dTlIBwAAABI"]
[Sat Apr 11 10:34:45.150993 2026] [:error] [pid 58194:tid 58212] [client 74.248.145.185:19984] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "admzRaT4IiVFj-rhcaX9OwAAAQ0"]
[Sat Apr 11 10:34:45.657157 2026] [:error] [pid 58196:tid 58254] [client 74.248.145.185:20011] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "admzRRmf0L5kNLP6dTlICwAAAAA"]
[Sat Apr 11 10:34:46.174167 2026] [:error] [pid 58196:tid 58265] [client 74.248.145.185:42608] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "admzRhmf0L5kNLP6dTlIDAAAAAs"]
[Sat Apr 11 10:34:46.700397 2026] [:error] [pid 58196:tid 58264] [client 74.248.145.185:55280] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "admzRhmf0L5kNLP6dTlIDwAAAAo"]
[Sat Apr 11 10:34:47.212270 2026] [:error] [pid 58195:tid 58240] [client 74.248.145.185:42590] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "admzRwPvj06vzrczQjv8wQAAAI0"]
[Sat Apr 11 10:34:47.717436 2026] [:error] [pid 58196:tid 58277] [client 74.248.145.185:42524] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "admzRxmf0L5kNLP6dTlIFQAAABc"]
[Sat Apr 11 10:34:48.221812 2026] [:error] [pid 58196:tid 58273] [client 74.248.145.185:42577] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "admzSBmf0L5kNLP6dTlIGAAAABM"]
[Sat Apr 11 10:34:48.736597 2026] [:error] [pid 58196:tid 58270] [client 74.248.145.185:19790] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "admzSBmf0L5kNLP6dTlIGwAAABA"]
[Sat Apr 11 10:34:49.255621 2026] [:error] [pid 58195:tid 58247] [client 74.248.145.185:42541] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "admzSQPvj06vzrczQjv8xgAAAJQ"]
[Sat Apr 11 10:34:49.785274 2026] [:error] [pid 58288:tid 58311] [client 74.248.145.185:19801] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "admzSXf_USd3ofWlU3smqQAAAFU"]
[Sat Apr 11 10:34:50.299903 2026] [:error] [pid 58195:tid 58251] [client 74.248.145.185:42581] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "admzSgPvj06vzrczQjv8xwAAAJg"]
[Sat Apr 11 10:34:50.817811 2026] [:error] [pid 58288:tid 58310] [client 74.248.145.185:42614] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "admzSnf_USd3ofWlU3smqgAAAFQ"]
[Sat Apr 11 10:34:51.332347 2026] [:error] [pid 58196:tid 58258] [client 74.248.145.185:42603] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "admzSxmf0L5kNLP6dTlIJQAAAAQ"]
[Sat Apr 11 10:34:51.844122 2026] [:error] [pid 58288:tid 58296] [client 74.248.145.185:19999] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "admzS3f_USd3ofWlU3smrQAAAEY"]
[Sat Apr 11 10:34:52.381302 2026] [:error] [pid 58196:tid 58273] [client 74.248.145.185:55285] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "admzTBmf0L5kNLP6dTlIKQAAABM"]
[Sat Apr 11 10:34:52.897080 2026] [:error] [pid 58195:tid 58236] [client 74.248.145.185:42545] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "admzTAPvj06vzrczQjv8ywAAAIk"]
[Sat Apr 11 10:34:53.417336 2026] [:error] [pid 58196:tid 58254] [client 74.248.145.185:42544] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "admzTRmf0L5kNLP6dTlILwAAAAA"]
[Sat Apr 11 10:34:53.930029 2026] [:error] [pid 58195:tid 58250] [client 74.248.145.185:20006] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "admzTQPvj06vzrczQjv8zgAAAJc"]
[Sat Apr 11 10:34:54.450808 2026] [:error] [pid 58195:tid 58241] [client 74.248.145.185:42515] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "admzTgPvj06vzrczQjv8zwAAAI4"]
[Sat Apr 11 10:34:54.961341 2026] [:error] [pid 58195:tid 58230] [client 74.248.145.185:19981] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "admzTgPvj06vzrczQjv80gAAAIM"]
[Sat Apr 11 10:34:55.475004 2026] [:error] [pid 58195:tid 58248] [client 74.248.145.185:19818] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "admzTwPvj06vzrczQjv81QAAAJU"]
[Sat Apr 11 10:34:55.988133 2026] [:error] [pid 58288:tid 58297] [client 74.248.145.185:19780] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "admzT3f_USd3ofWlU3smsQAAAEc"]
[Sat Apr 11 10:34:56.510729 2026] [:error] [pid 58194:tid 58209] [client 74.248.145.185:55284] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "admzUKT4IiVFj-rhcaX9RgAAAQo"]
[Sat Apr 11 10:34:57.029550 2026] [:error] [pid 58288:tid 58311] [client 74.248.145.185:42616] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "admzUXf_USd3ofWlU3smtQAAAFU"]
[Sat Apr 11 10:34:57.550403 2026] [:error] [pid 58288:tid 58310] [client 74.248.145.185:19783] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "admzUXf_USd3ofWlU3smuAAAAFQ"]
[Sat Apr 11 10:34:58.074395 2026] [:error] [pid 58194:tid 58219] [client 74.248.145.185:55264] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "admzUqT4IiVFj-rhcaX9SQAAARQ"]
[Sat Apr 11 10:34:58.586296 2026] [:error] [pid 58196:tid 58268] [client 74.248.145.185:42576] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "admzUhmf0L5kNLP6dTlIOwAAAA4"]
[Sat Apr 11 10:34:59.100688 2026] [:error] [pid 58194:tid 58199] [client 74.248.145.185:42551] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "admzU6T4IiVFj-rhcaX9SwAAAQA"]
[Sat Apr 11 10:34:59.617678 2026] [:error] [pid 58288:tid 58303] [client 74.248.145.185:42520] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "admzU3f_USd3ofWlU3smuwAAAE0"]
[Sat Apr 11 10:35:00.128840 2026] [:error] [pid 58194:tid 58202] [client 74.248.145.185:56719] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "admzVKT4IiVFj-rhcaX9TwAAAQM"]
[Sat Apr 11 10:35:00.638634 2026] [:error] [pid 58288:tid 58308] [client 74.248.145.185:42530] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "admzVHf_USd3ofWlU3smvgAAAFI"]
[Sat Apr 11 10:35:01.148926 2026] [:error] [pid 58194:tid 58217] [client 74.248.145.185:42615] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "admzVaT4IiVFj-rhcaX9VAAAARI"]
[Sat Apr 11 10:35:01.660390 2026] [:error] [pid 58196:tid 58274] [client 74.248.145.185:42540] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "admzVRmf0L5kNLP6dTlIPQAAABQ"]
[Sat Apr 11 10:35:02.181415 2026] [:error] [pid 58288:tid 58301] [client 74.248.145.185:42527] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "admzVnf_USd3ofWlU3smwAAAAEs"]
[Sat Apr 11 10:35:02.685842 2026] [:error] [pid 58288:tid 58311] [client 74.248.145.185:55275] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "admzVnf_USd3ofWlU3smxAAAAFU"]
[Sat Apr 11 10:35:03.200878 2026] [:error] [pid 58288:tid 58295] [client 74.248.145.185:42529] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "admzV3f_USd3ofWlU3smxwAAAEU"]
[Sat Apr 11 10:35:03.709785 2026] [:error] [pid 58195:tid 58235] [client 74.248.145.185:20017] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "admzVwPvj06vzrczQjv83QAAAIg"]
[Sat Apr 11 10:35:04.215450 2026] [:error] [pid 58195:tid 58231] [client 74.248.145.185:42497] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "admzWAPvj06vzrczQjv83wAAAIQ"]
[Sat Apr 11 10:35:04.728937 2026] [:error] [pid 58288:tid 58293] [client 74.248.145.185:56710] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "admzWHf_USd3ofWlU3smzwAAAEM"]
[Sat Apr 11 10:35:11.796944 2026] [:error] [pid 58195:tid 58246] [client 74.248.145.185:42623] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "admzXwPvj06vzrczQjv89wAAAJM"]
[Sat Apr 11 10:35:12.325326 2026] [:error] [pid 58195:tid 58247] [client 74.248.145.185:55251] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "admzYAPvj06vzrczQjv8-AAAAJQ"]
[Sat Apr 11 10:35:12.833908 2026] [:error] [pid 58195:tid 58236] [client 74.248.145.185:55235] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "admzYAPvj06vzrczQjv8-QAAAIk"]
[Sat Apr 11 10:35:13.340656 2026] [:error] [pid 58288:tid 58309] [client 74.248.145.185:19789] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "admzYXf_USd3ofWlU3sm4wAAAFM"]
[Sat Apr 11 10:35:13.846311 2026] [:error] [pid 58194:tid 58208] [client 74.248.145.185:42525] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fine.php"] [unique_id "admzYaT4IiVFj-rhcaX9bwAAAQk"]
[Sat Apr 11 10:35:14.368185 2026] [:error] [pid 58195:tid 58241] [client 74.248.145.185:42526] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fine.php"] [unique_id "admzYgPvj06vzrczQjv8-gAAAI4"]
[Sat Apr 11 10:35:14.876866 2026] [:error] [pid 58288:tid 58310] [client 74.248.145.185:42504] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fine.php"] [unique_id "admzYnf_USd3ofWlU3sm5wAAAFQ"]
[Sat Apr 11 10:35:15.387835 2026] [:error] [pid 58194:tid 58213] [client 74.248.145.185:42592] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fine.php"] [unique_id "admzY6T4IiVFj-rhcaX9cwAAAQ4"]
[Sat Apr 11 10:35:15.900544 2026] [:error] [pid 58194:tid 58204] [client 74.248.145.185:19791] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zample.php"] [unique_id "admzY6T4IiVFj-rhcaX9dQAAAQU"]
[Sat Apr 11 10:35:16.405456 2026] [:error] [pid 58196:tid 58273] [client 74.248.145.185:42554] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zample.php"] [unique_id "admzZBmf0L5kNLP6dTlIYgAAABM"]
[Sat Apr 11 10:35:16.917350 2026] [:error] [pid 58195:tid 58230] [client 74.248.145.185:55282] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zample.php"] [unique_id "admzZAPvj06vzrczQjv8-wAAAIM"]
[Sat Apr 11 10:35:17.431028 2026] [:error] [pid 58194:tid 58222] [client 74.248.145.185:20007] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zample.php"] [unique_id "admzZaT4IiVFj-rhcaX9eQAAARc"]
[Sat Apr 11 10:35:17.943559 2026] [:error] [pid 58194:tid 58210] [client 74.248.145.185:42512] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "admzZaT4IiVFj-rhcaX9fAAAAQs"]
[Sat Apr 11 10:35:18.451468 2026] [:error] [pid 58195:tid 58228] [client 74.248.145.185:55279] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "admzZgPvj06vzrczQjv8_AAAAIE"]
[Sat Apr 11 10:35:18.962934 2026] [:error] [pid 58195:tid 58251] [client 74.248.145.185:19982] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "admzZgPvj06vzrczQjv8_QAAAJg"]
[Sat Apr 11 10:35:19.478021 2026] [:error] [pid 58195:tid 58239] [client 74.248.145.185:19979] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "admzZwPvj06vzrczQjv8_wAAAIw"]
[Sat Apr 11 10:35:19.981051 2026] [:error] [pid 58195:tid 58233] [client 74.248.145.185:42588] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "admzZwPvj06vzrczQjv9AQAAAIY"]
[Sat Apr 11 10:35:20.524370 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:42548] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "admzaKT4IiVFj-rhcaX9iQAAAQE"]
[Sat Apr 11 10:35:21.035167 2026] [:error] [pid 58194:tid 58206] [client 74.248.145.185:42557] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "admzaaT4IiVFj-rhcaX9jAAAAQc"]
[Sat Apr 11 10:35:21.557883 2026] [:error] [pid 58194:tid 58216] [client 74.248.145.185:55254] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "admzaaT4IiVFj-rhcaX9jwAAARE"]
[Sat Apr 11 10:35:22.070366 2026] [:error] [pid 58195:tid 58246] [client 74.248.145.185:55271] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "admzagPvj06vzrczQjv9AwAAAJM"]
[Sat Apr 11 10:35:22.580519 2026] [:error] [pid 58195:tid 58247] [client 74.248.145.185:42620] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "admzagPvj06vzrczQjv9BAAAAJQ"]
[Sat Apr 11 10:35:23.093017 2026] [:error] [pid 58288:tid 58303] [client 74.248.145.185:20009] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "admza3f_USd3ofWlU3sm-gAAAE0"]
[Sat Apr 11 10:35:23.602595 2026] [:error] [pid 58288:tid 58312] [client 74.248.145.185:55276] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "admza3f_USd3ofWlU3sm_AAAAFY"]
[Sat Apr 11 10:35:24.117441 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:42594] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "admzbKT4IiVFj-rhcaX9lgAAAQE"]
[Sat Apr 11 10:35:24.628048 2026] [:error] [pid 58194:tid 58202] [client 74.248.145.185:19788] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "admzbKT4IiVFj-rhcaX9mgAAAQM"]
[Sat Apr 11 10:35:25.148720 2026] [:error] [pid 58194:tid 58208] [client 74.248.145.185:42583] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "admzbaT4IiVFj-rhcaX9ngAAAQk"]
[Sat Apr 11 10:35:25.661754 2026] [:error] [pid 58194:tid 58207] [client 74.248.145.185:42503] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "admzbaT4IiVFj-rhcaX9oAAAAQg"]
[Sat Apr 11 10:35:26.178200 2026] [:error] [pid 58194:tid 58220] [client 74.248.145.185:19805] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "admzbqT4IiVFj-rhcaX9ogAAARU"]
[Sat Apr 11 10:35:26.723851 2026] [:error] [pid 58288:tid 58290] [client 74.248.145.185:42559] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "admzbnf_USd3ofWlU3snAgAAAEA"]
[Sat Apr 11 10:35:27.230676 2026] [:error] [pid 58196:tid 58275] [client 74.248.145.185:55277] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "admzbxmf0L5kNLP6dTlIeAAAABU"]
[Sat Apr 11 10:35:27.772375 2026] [:error] [pid 58194:tid 58203] [client 74.248.145.185:19976] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "admzb6T4IiVFj-rhcaX9qwAAAQQ"]
[Sat Apr 11 10:35:28.305411 2026] [:error] [pid 58194:tid 58218] [client 74.248.145.185:42572] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "admzcKT4IiVFj-rhcaX9sAAAARM"]
[Sat Apr 11 10:35:28.846771 2026] [:error] [pid 58288:tid 58304] [client 74.248.145.185:51979] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "admzcHf_USd3ofWlU3snCAAAAE4"]
[Sat Apr 11 10:35:29.355520 2026] [:error] [pid 58288:tid 58297] [client 74.248.145.185:20001] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "admzcXf_USd3ofWlU3snDAAAAEc"]
[Sat Apr 11 10:35:29.872789 2026] [:error] [pid 58196:tid 58262] [client 74.248.145.185:19830] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "admzcRmf0L5kNLP6dTlIgwAAAAg"]
[Sat Apr 11 10:35:30.384134 2026] [:error] [pid 58196:tid 58275] [client 74.248.145.185:56706] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sf.php"] [unique_id "admzchmf0L5kNLP6dTlIhQAAABU"]
[Sat Apr 11 10:35:30.936611 2026] [:error] [pid 58195:tid 58237] [client 74.248.145.185:55240] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sf.php"] [unique_id "admzcgPvj06vzrczQjv9DgAAAIo"]
[Sat Apr 11 10:35:31.458017 2026] [:error] [pid 58194:tid 58209] [client 74.248.145.185:42549] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sf.php"] [unique_id "admzc6T4IiVFj-rhcaX9ugAAAQo"]
[Sat Apr 11 10:35:31.997479 2026] [:error] [pid 58196:tid 58257] [client 74.248.145.185:42563] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sf.php"] [unique_id "admzcxmf0L5kNLP6dTlIiQAAAAM"]
[Sat Apr 11 10:35:32.522269 2026] [:error] [pid 58288:tid 58298] [client 74.248.145.185:42573] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no1.php"] [unique_id "admzdHf_USd3ofWlU3snEwAAAEg"]
[Sat Apr 11 10:35:33.058300 2026] [:error] [pid 58288:tid 58297] [client 74.248.145.185:42546] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no1.php"] [unique_id "admzdXf_USd3ofWlU3snFAAAAEc"]
[Sat Apr 11 10:35:33.582936 2026] [:error] [pid 58288:tid 58310] [client 74.248.145.185:55252] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no1.php"] [unique_id "admzdXf_USd3ofWlU3snFQAAAFQ"]
[Sat Apr 11 10:35:34.097835 2026] [:error] [pid 58195:tid 58245] [client 74.248.145.185:19815] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no1.php"] [unique_id "admzdgPvj06vzrczQjv9EAAAAJI"]
[Sat Apr 11 10:35:34.623397 2026] [:error] [pid 58194:tid 58207] [client 74.248.145.185:20014] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "admzdqT4IiVFj-rhcaX9wwAAAQg"]
[Sat Apr 11 10:35:35.132809 2026] [:error] [pid 58196:tid 58266] [client 74.248.145.185:19969] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "admzdxmf0L5kNLP6dTlIlAAAAAw"]
[Sat Apr 11 10:35:35.662590 2026] [:error] [pid 58194:tid 58201] [client 74.248.145.185:55267] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "admzd6T4IiVFj-rhcaX9yAAAAQI"]
[Sat Apr 11 10:35:36.176359 2026] [:error] [pid 58196:tid 58276] [client 74.248.145.185:55274] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "admzeBmf0L5kNLP6dTlImQAAABY"]
[Sat Apr 11 10:35:36.702480 2026] [:error] [pid 58194:tid 58206] [client 74.248.145.185:55265] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "admzeKT4IiVFj-rhcaX9ygAAAQc"]
[Sat Apr 11 10:35:37.211615 2026] [:error] [pid 58196:tid 58277] [client 74.248.145.185:42552] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "admzeRmf0L5kNLP6dTlInAAAABc"]
[Sat Apr 11 10:35:37.772508 2026] [:error] [pid 58195:tid 58228] [client 74.248.145.185:19794] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "admzeQPvj06vzrczQjv9FAAAAIE"]
[Sat Apr 11 10:35:38.296840 2026] [:error] [pid 58288:tid 58301] [client 74.248.145.185:42555] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "admzenf_USd3ofWlU3snHwAAAEs"]
[Sat Apr 11 10:35:38.830927 2026] [:error] [pid 58195:tid 58233] [client 74.248.145.185:42531] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a2.php"] [unique_id "admzegPvj06vzrczQjv9FgAAAIY"]
[Sat Apr 11 10:35:39.374397 2026] [:error] [pid 58196:tid 58269] [client 74.248.145.185:56739] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a2.php"] [unique_id "admzexmf0L5kNLP6dTlInQAAAA8"]
[Sat Apr 11 10:35:39.887602 2026] [:error] [pid 58195:tid 58227] [client 74.248.145.185:42543] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a2.php"] [unique_id "admzewPvj06vzrczQjv9GwAAAIA"]
[Sat Apr 11 10:35:40.395840 2026] [:error] [pid 58196:tid 58259] [client 74.248.145.185:55281] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a2.php"] [unique_id "admzfBmf0L5kNLP6dTlInwAAAAU"]
[Sat Apr 11 10:35:40.910304 2026] [:error] [pid 58194:tid 58215] [client 74.248.145.185:42568] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "admzfKT4IiVFj-rhcaX92wAAARA"]
[Sat Apr 11 10:35:41.437999 2026] [:error] [pid 58195:tid 58228] [client 74.248.145.185:56767] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "admzfQPvj06vzrczQjv9IAAAAIE"]
[Sat Apr 11 10:35:41.972317 2026] [:error] [pid 58194:tid 58218] [client 74.248.145.185:51994] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "admzfaT4IiVFj-rhcaX94AAAARM"]
[Sat Apr 11 10:35:42.495248 2026] [:error] [pid 58194:tid 58205] [client 74.248.145.185:19995] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "admzfqT4IiVFj-rhcaX94wAAAQY"]
[Sat Apr 11 10:35:43.023687 2026] [:error] [pid 58194:tid 58203] [client 74.248.145.185:42496] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "admzf6T4IiVFj-rhcaX95AAAAQQ"]
[Sat Apr 11 10:35:43.546120 2026] [:error] [pid 58195:tid 58233] [client 74.248.145.185:19816] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "admzfwPvj06vzrczQjv9IgAAAIY"]
[Sat Apr 11 10:35:44.061842 2026] [:error] [pid 58195:tid 58246] [client 74.248.145.185:42562] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "admzgAPvj06vzrczQjv9IwAAAJM"]
[Sat Apr 11 10:35:44.571030 2026] [:error] [pid 58196:tid 58267] [client 74.248.145.185:55245] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "admzgBmf0L5kNLP6dTlIpgAAAA0"]
[Sat Apr 11 10:35:45.087301 2026] [:error] [pid 58288:tid 58299] [client 74.248.145.185:55246] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "admzgXf_USd3ofWlU3snJAAAAEk"]
[Sat Apr 11 10:35:45.609749 2026] [:error] [pid 58194:tid 58206] [client 74.248.145.185:19796] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "admzgaT4IiVFj-rhcaX97wAAAQc"]
[Sat Apr 11 10:35:46.125490 2026] [:error] [pid 58194:tid 58212] [client 74.248.145.185:20005] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "admzgqT4IiVFj-rhcaX98gAAAQ0"]
[Sat Apr 11 10:35:46.649352 2026] [:error] [pid 58194:tid 58217] [client 74.248.145.185:55293] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "admzgqT4IiVFj-rhcaX99QAAARI"]
[Sat Apr 11 10:35:47.164571 2026] [:error] [pid 58288:tid 58293] [client 74.248.145.185:19836] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "admzg3f_USd3ofWlU3snJwAAAEM"]
[Sat Apr 11 10:35:47.688961 2026] [:error] [pid 58288:tid 58305] [client 74.248.145.185:20012] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "admzg3f_USd3ofWlU3snKQAAAE8"]
[Sat Apr 11 10:35:48.211284 2026] [:error] [pid 58288:tid 58311] [client 74.248.145.185:19813] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "admzhHf_USd3ofWlU3snKwAAAFU"]
[Sat Apr 11 10:35:48.732590 2026] [:error] [pid 58288:tid 58297] [client 74.248.145.185:42556] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "admzhHf_USd3ofWlU3snLQAAAEc"]
[Sat Apr 11 10:35:49.262072 2026] [:error] [pid 58196:tid 58271] [client 74.248.145.185:19821] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "admzhRmf0L5kNLP6dTlIrgAAABE"]
[Sat Apr 11 10:35:49.773405 2026] [:error] [pid 58288:tid 58291] [client 74.248.145.185:42518] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "admzhXf_USd3ofWlU3snMgAAAEE"]
[Sat Apr 11 10:35:50.298305 2026] [:error] [pid 58288:tid 58304] [client 74.248.145.185:51975] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "admzhnf_USd3ofWlU3snNQAAAE4"]
[Sat Apr 11 10:35:50.804693 2026] [:error] [pid 58194:tid 58215] [client 74.248.145.185:20023] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "admzhqT4IiVFj-rhcaX9_QAAARA"]
[Sat Apr 11 10:35:51.324090 2026] [:error] [pid 58195:tid 58229] [client 74.248.145.185:19810] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ol.php"] [unique_id "admzhwPvj06vzrczQjv9LwAAAII"]
[Sat Apr 11 10:35:51.866948 2026] [:error] [pid 58195:tid 58250] [client 74.248.145.185:56725] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ol.php"] [unique_id "admzhwPvj06vzrczQjv9MQAAAJc"]
[Sat Apr 11 10:35:52.379172 2026] [:error] [pid 58195:tid 58233] [client 74.248.145.185:42500] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ol.php"] [unique_id "admziAPvj06vzrczQjv9NAAAAIY"]
[Sat Apr 11 10:35:52.891430 2026] [:error] [pid 58195:tid 58235] [client 74.248.145.185:42612] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ol.php"] [unique_id "admziAPvj06vzrczQjv9OAAAAIg"]
[Sat Apr 11 10:35:53.401741 2026] [:error] [pid 58194:tid 58219] [client 74.248.145.185:42580] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "admziaT4IiVFj-rhcaX-BQAAARQ"]
[Sat Apr 11 10:35:53.910176 2026] [:error] [pid 58195:tid 58240] [client 74.248.145.185:42547] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "admziQPvj06vzrczQjv9PgAAAI0"]
[Sat Apr 11 10:35:54.428770 2026] [:error] [pid 58288:tid 58296] [client 74.248.145.185:56765] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "admzinf_USd3ofWlU3snPAAAAEY"]
[Sat Apr 11 10:35:54.938522 2026] [:error] [pid 58195:tid 58250] [client 74.248.145.185:51971] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "admzigPvj06vzrczQjv9QAAAAJc"]
[Sat Apr 11 10:35:55.502894 2026] [:error] [pid 58288:tid 58308] [client 74.248.145.185:19776] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "admzi3f_USd3ofWlU3snPwAAAFI"]
[Sat Apr 11 10:35:56.014731 2026] [:error] [pid 58288:tid 58309] [client 74.248.145.185:20020] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "admzjHf_USd3ofWlU3snSQAAAFM"]
[Sat Apr 11 10:35:56.524730 2026] [:error] [pid 58194:tid 58217] [client 74.248.145.185:19803] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "admzjKT4IiVFj-rhcaX-GAAAARI"]
[Sat Apr 11 10:35:57.042051 2026] [:error] [pid 58195:tid 58234] [client 74.248.145.185:42617] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "admzjQPvj06vzrczQjv9RQAAAIc"]
[Sat Apr 11 10:35:57.563517 2026] [:error] [pid 58288:tid 58304] [client 74.248.145.185:19819] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "admzjXf_USd3ofWlU3snYQAAAE4"]
[Sat Apr 11 10:35:58.084135 2026] [:error] [pid 58196:tid 58272] [client 74.248.145.185:19978] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "admzjhmf0L5kNLP6dTlIvgAAABI"]
[Sat Apr 11 10:35:58.693668 2026] [:error] [pid 58288:tid 58308] [client 74.248.145.185:55290] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "admzjnf_USd3ofWlU3snZQAAAFI"]
[Sat Apr 11 10:35:59.252382 2026] [:error] [pid 58196:tid 58260] [client 74.248.145.185:19826] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "admzjxmf0L5kNLP6dTlIwAAAAAY"]
[Sat Apr 11 10:35:59.772978 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:56737] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "admzj6T4IiVFj-rhcaX-KAAAAQE"]
[Sat Apr 11 10:36:00.288830 2026] [:error] [pid 58196:tid 58254] [client 74.248.145.185:56727] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "admzkBmf0L5kNLP6dTlIwgAAAAA"]
[Sat Apr 11 10:36:00.798929 2026] [:error] [pid 58196:tid 58259] [client 74.248.145.185:19991] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "admzkBmf0L5kNLP6dTlIxQAAAAU"]
[Sat Apr 11 10:36:01.311978 2026] [:error] [pid 58196:tid 58262] [client 74.248.145.185:42542] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "admzkRmf0L5kNLP6dTlIyAAAAAg"]
[Sat Apr 11 10:36:01.845693 2026] [:error] [pid 58288:tid 58306] [client 74.248.145.185:42578] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "admzkXf_USd3ofWlU3snbgAAAFA"]
[Sat Apr 11 10:36:02.365927 2026] [:error] [pid 58288:tid 58305] [client 74.248.145.185:56729] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "admzknf_USd3ofWlU3sncAAAAE8"]
[Sat Apr 11 10:36:02.892729 2026] [:error] [pid 58194:tid 58222] [client 74.248.145.185:56743] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "admzkqT4IiVFj-rhcaX-LgAAARc"]
[Sat Apr 11 10:36:03.406402 2026] [:error] [pid 58288:tid 58309] [client 74.248.145.185:56730] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "admzk3f_USd3ofWlU3sndQAAAFM"]
[Sat Apr 11 10:36:03.918537 2026] [:error] [pid 58194:tid 58206] [client 74.248.145.185:42567] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admzk6T4IiVFj-rhcaX-MgAAAQc"]
[Sat Apr 11 10:36:04.433308 2026] [:error] [pid 58194:tid 58223] [client 74.248.145.185:42601] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admzlKT4IiVFj-rhcaX-NAAAARg"]
[Sat Apr 11 10:36:04.946372 2026] [:error] [pid 58288:tid 58295] [client 74.248.145.185:55292] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admzlHf_USd3ofWlU3snewAAAEU"]
[Sat Apr 11 10:36:05.470397 2026] [:error] [pid 58288:tid 58312] [client 74.248.145.185:52007] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "admzlXf_USd3ofWlU3snfAAAAFY"]
[Sat Apr 11 10:36:05.986376 2026] [:error] [pid 58194:tid 58207] [client 74.248.145.185:42561] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "admzlaT4IiVFj-rhcaX-OwAAAQg"]
[Sat Apr 11 10:36:06.509151 2026] [:error] [pid 58194:tid 58217] [client 74.248.145.185:42535] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "admzlqT4IiVFj-rhcaX-QAAAARI"]
[Sat Apr 11 10:36:07.115535 2026] [:error] [pid 58288:tid 58301] [client 74.248.145.185:56731] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "admzl3f_USd3ofWlU3snggAAAEs"]
[Sat Apr 11 10:36:07.623443 2026] [:error] [pid 58194:tid 58213] [client 74.248.145.185:19822] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "admzl6T4IiVFj-rhcaX-QgAAAQ4"]
[Sat Apr 11 10:36:08.135599 2026] [:error] [pid 58194:tid 58203] [client 74.248.145.185:42609] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "admzmKT4IiVFj-rhcaX-RwAAAQQ"]
[Sat Apr 11 10:36:08.655689 2026] [:error] [pid 58194:tid 58204] [client 74.248.145.185:55260] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "admzmKT4IiVFj-rhcaX-SwAAAQU"]
[Sat Apr 11 10:36:09.175364 2026] [:error] [pid 58194:tid 58220] [client 74.248.145.185:36929] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "admzmaT4IiVFj-rhcaX-TgAAARU"]
[Sat Apr 11 10:36:09.682310 2026] [:error] [pid 58196:tid 58275] [client 74.248.145.185:20018] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "admzmRmf0L5kNLP6dTlI0wAAABU"]
[Sat Apr 11 10:36:10.196090 2026] [:error] [pid 58194:tid 58218] [client 74.248.145.185:42606] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "admzmqT4IiVFj-rhcaX-VwAAARM"]
[Sat Apr 11 10:36:10.720409 2026] [:error] [pid 58194:tid 58210] [client 74.248.145.185:56763] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "admzmqT4IiVFj-rhcaX-WwAAAQs"]
[Sat Apr 11 10:36:18.722664 2026] [:error] [pid 58194:tid 58222] [client 74.248.145.185:19973] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "admzoqT4IiVFj-rhcaX-kQAAARc"]
[Sat Apr 11 10:36:19.251539 2026] [:error] [pid 58194:tid 58218] [client 74.248.145.185:56717] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "admzo6T4IiVFj-rhcaX-lAAAARM"]
[Sat Apr 11 10:36:19.765922 2026] [:error] [pid 58288:tid 58290] [client 74.248.145.185:51969] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "admzo3f_USd3ofWlU3snpQAAAEA"]
[Sat Apr 11 10:36:20.273987 2026] [:error] [pid 58194:tid 58206] [client 74.248.145.185:19998] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "admzpKT4IiVFj-rhcaX-mQAAAQc"]
[Sat Apr 11 10:36:20.800470 2026] [:error] [pid 58194:tid 58214] [client 74.248.145.185:51997] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "admzpKT4IiVFj-rhcaX-ngAAAQ8"]
[Sat Apr 11 10:36:21.311683 2026] [:error] [pid 58196:tid 58268] [client 74.248.145.185:20029] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "admzpRmf0L5kNLP6dTlI2wAAAA4"]
[Sat Apr 11 10:36:21.817578 2026] [:error] [pid 58196:tid 58275] [client 74.248.145.185:56745] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "admzpRmf0L5kNLP6dTlI3AAAABU"]
[Sat Apr 11 10:36:22.322034 2026] [:error] [pid 58288:tid 58302] [client 74.248.145.185:56754] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "admzpnf_USd3ofWlU3snqgAAAEw"]
[Sat Apr 11 10:36:22.834328 2026] [:error] [pid 58288:tid 58304] [client 74.248.145.185:42533] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods.php"] [unique_id "admzpnf_USd3ofWlU3snqwAAAE4"]
[Sat Apr 11 10:36:23.358348 2026] [:error] [pid 58194:tid 58212] [client 74.248.145.185:19782] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods.php"] [unique_id "admzp6T4IiVFj-rhcaX-qAAAAQ0"]
[Sat Apr 11 10:36:23.881060 2026] [:error] [pid 58194:tid 58215] [client 74.248.145.185:20026] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods.php"] [unique_id "admzp6T4IiVFj-rhcaX-qQAAARA"]
[Sat Apr 11 10:36:24.388673 2026] [:error] [pid 58194:tid 58203] [client 74.248.145.185:19986] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods.php"] [unique_id "admzqKT4IiVFj-rhcaX-rQAAAQQ"]
[Sat Apr 11 10:36:24.906029 2026] [:error] [pid 58288:tid 58308] [client 74.248.145.185:52011] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "admzqHf_USd3ofWlU3snuAAAAFI"]
[Sat Apr 11 10:36:25.423390 2026] [:error] [pid 58195:tid 58239] [client 74.248.145.185:19817] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "admzqQPvj06vzrczQjv9XgAAAIw"]
[Sat Apr 11 10:36:25.954823 2026] [:error] [pid 58288:tid 58305] [client 74.248.145.185:19983] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "admzqXf_USd3ofWlU3snvgAAAE8"]
[Sat Apr 11 10:36:26.476799 2026] [:error] [pid 58194:tid 58202] [client 74.248.145.185:19987] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "admzqqT4IiVFj-rhcaX-swAAAQM"]
[Sat Apr 11 10:36:27.032789 2026] [:error] [pid 58194:tid 58210] [client 74.248.145.185:55273] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "admzq6T4IiVFj-rhcaX-twAAAQs"]
[Sat Apr 11 10:36:27.543356 2026] [:error] [pid 58194:tid 58212] [client 74.248.145.185:51984] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "admzq6T4IiVFj-rhcaX-uwAAAQ0"]
[Sat Apr 11 10:36:28.063658 2026] [:error] [pid 58194:tid 58215] [client 74.248.145.185:19793] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "admzrKT4IiVFj-rhcaX-vwAAARA"]
[Sat Apr 11 10:36:28.602309 2026] [:error] [pid 58194:tid 58205] [client 74.248.145.185:19800] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "admzrKT4IiVFj-rhcaX-wwAAAQY"]
[Sat Apr 11 10:36:29.122876 2026] [:error] [pid 58195:tid 58247] [client 74.248.145.185:42585] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "admzrQPvj06vzrczQjv9ZgAAAJQ"]
[Sat Apr 11 10:36:29.631152 2026] [:error] [pid 58196:tid 58263] [client 74.248.145.185:42614] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "admzrRmf0L5kNLP6dTlI6AAAAAk"]
[Sat Apr 11 10:36:30.139233 2026] [:error] [pid 58194:tid 58207] [client 74.248.145.185:55272] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "admzrqT4IiVFj-rhcaX-xwAAAQg"]
[Sat Apr 11 10:36:30.654056 2026] [:error] [pid 58194:tid 58199] [client 74.248.145.185:19812] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "admzrqT4IiVFj-rhcaX-yQAAAQA"]
[Sat Apr 11 10:36:31.169574 2026] [:error] [pid 58196:tid 58265] [client 74.248.145.185:55268] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "admzrxmf0L5kNLP6dTlI7QAAAAs"]
[Sat Apr 11 10:36:31.681009 2026] [:error] [pid 58195:tid 58242] [client 74.248.145.185:19970] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "admzrwPvj06vzrczQjv9bwAAAI8"]
[Sat Apr 11 10:36:32.213059 2026] [:error] [pid 58196:tid 58254] [client 74.248.145.185:36291] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "admzsBmf0L5kNLP6dTlI8gAAAAA"]
[Sat Apr 11 10:36:32.724392 2026] [:error] [pid 58196:tid 58264] [client 74.248.145.185:36949] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "admzsBmf0L5kNLP6dTlI9QAAAAo"]
[Sat Apr 11 10:36:33.238228 2026] [:error] [pid 58194:tid 58199] [client 74.248.145.185:19799] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "admzsaT4IiVFj-rhcaX-0QAAAQA"]
[Sat Apr 11 10:36:33.764539 2026] [:error] [pid 58195:tid 58249] [client 74.248.145.185:42595] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "admzsQPvj06vzrczQjv9dQAAAJY"]
[Sat Apr 11 10:36:34.281543 2026] [:error] [pid 58196:tid 58260] [client 74.248.145.185:42534] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "admzshmf0L5kNLP6dTlI_AAAAAY"]
[Sat Apr 11 10:36:34.791142 2026] [:error] [pid 58194:tid 58221] [client 74.248.145.185:42532] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "admzsqT4IiVFj-rhcaX-2AAAARY"]
[Sat Apr 11 10:36:35.333881 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:19832] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we.php"] [unique_id "admzs6T4IiVFj-rhcaX-3AAAAQE"]
[Sat Apr 11 10:36:35.843552 2026] [:error] [pid 58196:tid 58268] [client 74.248.145.185:42538] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we.php"] [unique_id "admzsxmf0L5kNLP6dTlJBgAAAA4"]
[Sat Apr 11 10:36:36.352416 2026] [:error] [pid 58196:tid 58265] [client 74.248.145.185:56720] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we.php"] [unique_id "admztBmf0L5kNLP6dTlJCgAAAAs"]
[Sat Apr 11 10:36:36.868777 2026] [:error] [pid 58195:tid 58230] [client 74.248.145.185:19829] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we.php"] [unique_id "admztAPvj06vzrczQjv9ewAAAIM"]
[Sat Apr 11 10:36:37.403473 2026] [:error] [pid 58195:tid 58239] [client 74.248.145.185:42599] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "admztQPvj06vzrczQjv9gQAAAIw"]
[Sat Apr 11 10:36:37.912438 2026] [:error] [pid 58288:tid 58305] [client 74.248.145.185:19833] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "admztXf_USd3ofWlU3snzgAAAE8"]
[Sat Apr 11 10:36:38.426946 2026] [:error] [pid 58196:tid 58268] [client 74.248.145.185:55269] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "admzthmf0L5kNLP6dTlJDgAAAA4"]
[Sat Apr 11 10:36:38.952100 2026] [:error] [pid 58288:tid 58302] [client 74.248.145.185:55233] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "admztnf_USd3ofWlU3sn1QAAAEw"]
[Sat Apr 11 10:36:39.470078 2026] [:error] [pid 58288:tid 58297] [client 74.248.145.185:19838] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "admzt3f_USd3ofWlU3sn2AAAAEc"]
[Sat Apr 11 10:36:39.981992 2026] [:error] [pid 58196:tid 58260] [client 74.248.145.185:56762] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "admztxmf0L5kNLP6dTlJFgAAAAY"]
[Sat Apr 11 10:36:40.500008 2026] [:error] [pid 58194:tid 58205] [client 74.248.145.185:42570] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "admzuKT4IiVFj-rhcaX-6AAAAQY"]
[Sat Apr 11 10:36:41.009350 2026] [:error] [pid 58195:tid 58231] [client 74.248.145.185:51968] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "admzuQPvj06vzrczQjv9hwAAAIQ"]
[Sat Apr 11 10:36:41.520946 2026] [:error] [pid 58288:tid 58304] [client 74.248.145.185:36943] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "admzuXf_USd3ofWlU3sn3QAAAE4"]
[Sat Apr 11 10:36:42.034645 2026] [:error] [pid 58288:tid 58300] [client 74.248.145.185:19814] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "admzunf_USd3ofWlU3sn3wAAAEo"]
[Sat Apr 11 10:36:42.547914 2026] [:error] [pid 58195:tid 58232] [client 74.248.145.185:19994] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "admzugPvj06vzrczQjv9iQAAAIU"]
[Sat Apr 11 10:36:43.072708 2026] [:error] [pid 58288:tid 58310] [client 74.248.145.185:19990] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "admzu3f_USd3ofWlU3sn4QAAAFQ"]
[Sat Apr 11 10:36:43.608347 2026] [:error] [pid 58195:tid 58239] [client 74.248.145.185:19820] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "admzuwPvj06vzrczQjv9iwAAAIw"]
[Sat Apr 11 10:36:44.144993 2026] [:error] [pid 58196:tid 58263] [client 74.248.145.185:56715] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "admzvBmf0L5kNLP6dTlJJgAAAAk"]
[Sat Apr 11 10:36:44.714084 2026] [:error] [pid 58196:tid 58266] [client 74.248.145.185:19985] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "admzvBmf0L5kNLP6dTlJKQAAAAw"]
[Sat Apr 11 10:36:45.229932 2026] [:error] [pid 58196:tid 58267] [client 74.248.145.185:56714] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "admzvRmf0L5kNLP6dTlJLgAAAA0"]
[Sat Apr 11 10:36:45.750567 2026] [:error] [pid 58195:tid 58244] [client 74.248.145.185:55283] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "admzvQPvj06vzrczQjv9jgAAAJE"]
[Sat Apr 11 10:36:46.277886 2026] [:error] [pid 58196:tid 58264] [client 74.248.145.185:19828] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "admzvhmf0L5kNLP6dTlJMgAAAAo"]
[Sat Apr 11 10:36:46.799111 2026] [:error] [pid 58288:tid 58313] [client 74.248.145.185:19839] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "admzvnf_USd3ofWlU3sn7AAAAFc"]
[Sat Apr 11 10:36:47.319842 2026] [:error] [pid 58196:tid 58262] [client 74.248.145.185:20028] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "admzvxmf0L5kNLP6dTlJNAAAAAg"]
[Sat Apr 11 10:36:47.839653 2026] [:error] [pid 58288:tid 58303] [client 74.248.145.185:55244] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "admzv3f_USd3ofWlU3sn8AAAAE0"]
[Sat Apr 11 10:36:48.350646 2026] [:error] [pid 58194:tid 58218] [client 74.248.145.185:36946] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "admzwKT4IiVFj-rhcaX_BQAAARM"]
[Sat Apr 11 10:36:48.869740 2026] [:error] [pid 58196:tid 58254] [client 74.248.145.185:51970] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "admzwBmf0L5kNLP6dTlJNQAAAAA"]
[Sat Apr 11 10:36:49.388709 2026] [:error] [pid 58195:tid 58229] [client 74.248.145.185:56748] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "admzwQPvj06vzrczQjv9kQAAAII"]
[Sat Apr 11 10:36:49.917637 2026] [:error] [pid 58196:tid 58256] [client 74.248.145.185:52024] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "admzwRmf0L5kNLP6dTlJOAAAAAI"]
[Sat Apr 11 10:36:50.443829 2026] [:error] [pid 58196:tid 58277] [client 74.248.145.185:36310] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "admzwhmf0L5kNLP6dTlJOwAAABc"]
[Sat Apr 11 10:36:51.045628 2026] [:error] [pid 58196:tid 58268] [client 74.248.145.185:55253] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "admzwxmf0L5kNLP6dTlJPwAAAA4"]
[Sat Apr 11 10:36:51.591887 2026] [:error] [pid 58288:tid 58296] [client 74.248.145.185:56758] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "admzw3f_USd3ofWlU3sn9wAAAEY"]
[Sat Apr 11 10:36:52.107332 2026] [:error] [pid 58194:tid 58206] [client 74.248.145.185:56704] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wen.php"] [unique_id "admzxKT4IiVFj-rhcaX_FAAAAQc"]
[Sat Apr 11 10:36:52.633228 2026] [:error] [pid 58196:tid 58254] [client 74.248.145.185:42571] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wen.php"] [unique_id "admzxBmf0L5kNLP6dTlJQgAAAAA"]
[Sat Apr 11 10:36:53.148811 2026] [:error] [pid 58196:tid 58256] [client 74.248.145.185:56724] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wen.php"] [unique_id "admzxRmf0L5kNLP6dTlJRgAAAAI"]
[Sat Apr 11 10:36:53.665810 2026] [:error] [pid 58195:tid 58250] [client 74.248.145.185:19825] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wen.php"] [unique_id "admzxQPvj06vzrczQjv9mgAAAJc"]
[Sat Apr 11 10:36:54.188300 2026] [:error] [pid 58195:tid 58241] [client 74.248.145.185:56744] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "admzxgPvj06vzrczQjv9nAAAAI4"]
[Sat Apr 11 10:36:54.718775 2026] [:error] [pid 58196:tid 58263] [client 74.248.145.185:51998] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "admzxhmf0L5kNLP6dTlJUQAAAAk"]
[Sat Apr 11 10:36:55.231969 2026] [:error] [pid 58195:tid 58251] [client 74.248.145.185:42605] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "admzxwPvj06vzrczQjv9oAAAAJg"]
[Sat Apr 11 10:36:55.744828 2026] [:error] [pid 58195:tid 58238] [client 74.248.145.185:20002] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "admzxwPvj06vzrczQjv9pQAAAIs"]
[Sat Apr 11 10:36:56.254988 2026] [:error] [pid 58288:tid 58304] [client 74.248.145.185:19992] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "admzyHf_USd3ofWlU3sn-gAAAE4"]
[Sat Apr 11 10:36:56.768155 2026] [:error] [pid 58195:tid 58245] [client 74.248.145.185:19989] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "admzyAPvj06vzrczQjv9rgAAAJI"]
[Sat Apr 11 10:36:57.322134 2026] [:error] [pid 58195:tid 58227] [client 74.248.145.185:56764] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "admzyQPvj06vzrczQjv9sAAAAIA"]
[Sat Apr 11 10:36:57.864532 2026] [:error] [pid 58196:tid 58257] [client 74.248.145.185:19827] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "admzyRmf0L5kNLP6dTlJWQAAAAM"]
[Sat Apr 11 10:36:58.376398 2026] [:error] [pid 58196:tid 58263] [client 74.248.145.185:19787] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "admzyhmf0L5kNLP6dTlJWwAAAAk"]
[Sat Apr 11 10:36:58.951948 2026] [:error] [pid 58196:tid 58274] [client 74.248.145.185:19977] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "admzyhmf0L5kNLP6dTlJXQAAABQ"]
[Sat Apr 11 10:36:59.500562 2026] [:error] [pid 58288:tid 58312] [client 74.248.145.185:42591] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "admzy3f_USd3ofWlU3soDAAAAFY"]
[Sat Apr 11 10:37:00.026552 2026] [:error] [pid 58288:tid 58309] [client 74.248.145.185:56749] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "admzzHf_USd3ofWlU3soDwAAAFM"]
[Sat Apr 11 10:37:00.542443 2026] [:error] [pid 58194:tid 58219] [client 74.248.145.185:51999] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "admzzKT4IiVFj-rhcaX_GAAAARQ"]
[Sat Apr 11 10:37:01.078934 2026] [:error] [pid 58196:tid 58257] [client 74.248.145.185:19792] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "admzzRmf0L5kNLP6dTlJYwAAAAM"]
[Sat Apr 11 10:37:01.585624 2026] [:error] [pid 58196:tid 58271] [client 74.248.145.185:19831] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "admzzRmf0L5kNLP6dTlJZAAAABE"]
[Sat Apr 11 10:37:02.096876 2026] [:error] [pid 58195:tid 58237] [client 74.248.145.185:51974] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "admzzgPvj06vzrczQjv9vAAAAIo"]
[Sat Apr 11 10:37:02.599823 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:19997] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "admzzqT4IiVFj-rhcaX_IQAAAQE"]
[Sat Apr 11 10:37:03.124406 2026] [:error] [pid 58194:tid 58204] [client 74.248.145.185:19996] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "admzz6T4IiVFj-rhcaX_JQAAAQU"]
[Sat Apr 11 10:37:03.637878 2026] [:error] [pid 58195:tid 58240] [client 74.248.145.185:52002] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "admzzwPvj06vzrczQjv9vgAAAI0"]
[Sat Apr 11 10:37:04.170022 2026] [:error] [pid 58195:tid 58231] [client 74.248.145.185:55270] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "admz0APvj06vzrczQjv9wAAAAIQ"]
[Sat Apr 11 10:37:04.690233 2026] [:error] [pid 58194:tid 58208] [client 74.248.145.185:52008] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "admz0KT4IiVFj-rhcaX_LAAAAQk"]
[Sat Apr 11 10:37:05.209856 2026] [:error] [pid 58194:tid 58223] [client 74.248.145.185:19835] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "admz0aT4IiVFj-rhcaX_MAAAARg"]
[Sat Apr 11 10:37:05.727612 2026] [:error] [pid 58195:tid 58245] [client 74.248.145.185:19971] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "admz0QPvj06vzrczQjv9wQAAAJI"]
[Sat Apr 11 10:37:06.278340 2026] [:error] [pid 58288:tid 58309] [client 74.248.145.185:36950] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "admz0nf_USd3ofWlU3soLAAAAFM"]
[Sat Apr 11 10:37:06.800598 2026] [:error] [pid 58195:tid 58227] [client 74.248.145.185:20000] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fi.php"] [unique_id "admz0gPvj06vzrczQjv9wgAAAIA"]
[Sat Apr 11 10:37:07.324847 2026] [:error] [pid 58194:tid 58202] [client 74.248.145.185:20030] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fi.php"] [unique_id "admz06T4IiVFj-rhcaX_PAAAAQM"]
[Sat Apr 11 10:37:07.856275 2026] [:error] [pid 58288:tid 58308] [client 74.248.145.185:51988] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fi.php"] [unique_id "admz03f_USd3ofWlU3soMAAAAFI"]
[Sat Apr 11 10:37:08.393832 2026] [:error] [pid 58288:tid 58313] [client 74.248.145.185:42510] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fi.php"] [unique_id "admz1Hf_USd3ofWlU3soMgAAAFc"]
[Sat Apr 11 10:37:08.904519 2026] [:error] [pid 58194:tid 58204] [client 74.248.145.185:42621] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1.php"] [unique_id "admz1KT4IiVFj-rhcaX_QQAAAQU"]
[Sat Apr 11 10:37:09.427570 2026] [:error] [pid 58196:tid 58265] [client 74.248.145.185:52017] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1.php"] [unique_id "admz1Rmf0L5kNLP6dTlJegAAAAs"]
[Sat Apr 11 10:37:09.935761 2026] [:error] [pid 58288:tid 58312] [client 74.248.145.185:36962] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1.php"] [unique_id "admz1Xf_USd3ofWlU3soNgAAAFY"]
[Sat Apr 11 10:37:10.464922 2026] [:error] [pid 58196:tid 58267] [client 74.248.145.185:19988] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1.php"] [unique_id "admz1hmf0L5kNLP6dTlJfgAAAA0"]
[Sat Apr 11 10:37:10.975960 2026] [:error] [pid 58288:tid 58297] [client 74.248.145.185:52026] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "admz1nf_USd3ofWlU3soOgAAAEc"]
[Sat Apr 11 10:37:11.516391 2026] [:error] [pid 58288:tid 58308] [client 74.248.145.185:55232] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "admz13f_USd3ofWlU3soQAAAAFI"]
[Sat Apr 11 10:37:12.039265 2026] [:error] [pid 58195:tid 58236] [client 74.248.145.185:56723] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "admz2APvj06vzrczQjv9zAAAAIk"]
[Sat Apr 11 10:37:12.576360 2026] [:error] [pid 58196:tid 58262] [client 74.248.145.185:36961] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "admz2Bmf0L5kNLP6dTlJhQAAAAg"]
[Sat Apr 11 10:37:13.113422 2026] [:error] [pid 58194:tid 58222] [client 74.248.145.185:52005] [client 74.248.145.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "admz2aT4IiVFj-rhcaX_UAAAARc"]
[Sat Apr 11 10:37:13.626835 2026] [:error] [pid 58195:tid 58231] [client 74.248.145.185:19786] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35.php"] [unique_id "admz2QPvj06vzrczQjv9zgAAAIQ"]
[Sat Apr 11 10:37:14.137230 2026] [:error] [pid 58196:tid 58269] [client 74.248.145.185:19777] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35.php"] [unique_id "admz2hmf0L5kNLP6dTlJiwAAAA8"]
[Sat Apr 11 10:37:14.649630 2026] [:error] [pid 58196:tid 58272] [client 74.248.145.185:56755] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35.php"] [unique_id "admz2hmf0L5kNLP6dTlJjQAAABI"]
[Sat Apr 11 10:37:15.172380 2026] [:error] [pid 58195:tid 58230] [client 74.248.145.185:56728] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "admz2wPvj06vzrczQjv90gAAAIM"]
[Sat Apr 11 10:37:15.688061 2026] [:error] [pid 58196:tid 58260] [client 74.248.145.185:55239] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "admz2xmf0L5kNLP6dTlJjgAAAAY"]
[Sat Apr 11 10:37:16.212113 2026] [:error] [pid 58195:tid 58237] [client 74.248.145.185:36941] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "admz3APvj06vzrczQjv92AAAAIo"]
[Sat Apr 11 10:37:16.721969 2026] [:error] [pid 58288:tid 58291] [client 74.248.145.185:19798] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "admz3Hf_USd3ofWlU3soUwAAAEE"]
[Sat Apr 11 10:37:17.252989 2026] [:error] [pid 58288:tid 58302] [client 74.248.145.185:56734] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "admz3Xf_USd3ofWlU3soWAAAAEw"]
[Sat Apr 11 10:37:17.764947 2026] [:error] [pid 58288:tid 58303] [client 74.248.145.185:20015] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "admz3Xf_USd3ofWlU3soWgAAAE0"]
[Sat Apr 11 10:37:25.814395 2026] [:error] [pid 58196:tid 58269] [client 74.248.145.185:36991] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/axx.php"] [unique_id "admz5Rmf0L5kNLP6dTlJugAAAA8"]
[Sat Apr 11 10:37:26.322462 2026] [:error] [pid 58288:tid 58314] [client 74.248.145.185:20022] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/axx.php"] [unique_id "admz5nf_USd3ofWlU3sofAAAAFg"]
[Sat Apr 11 10:37:26.831802 2026] [:error] [pid 58195:tid 58245] [client 74.248.145.185:52016] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/axx.php"] [unique_id "admz5gPvj06vzrczQjv96gAAAJI"]
[Sat Apr 11 10:37:27.345649 2026] [:error] [pid 58195:tid 58242] [client 74.248.145.185:42558] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/axx.php"] [unique_id "admz5wPvj06vzrczQjv97wAAAI8"]
[Sat Apr 11 10:37:27.871555 2026] [:error] [pid 58196:tid 58274] [client 74.248.145.185:36973] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "admz5xmf0L5kNLP6dTlJwwAAABQ"]
[Sat Apr 11 10:37:28.378001 2026] [:error] [pid 58288:tid 58290] [client 74.248.145.185:36939] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "admz6Hf_USd3ofWlU3sohwAAAEA"]
[Sat Apr 11 10:37:28.888263 2026] [:error] [pid 58288:tid 58298] [client 74.248.145.185:42622] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "admz6Hf_USd3ofWlU3soigAAAEg"]
[Sat Apr 11 10:37:29.407304 2026] [:error] [pid 58196:tid 58276] [client 74.248.145.185:56707] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "admz6Rmf0L5kNLP6dTlJyQAAABY"]
[Sat Apr 11 10:37:29.929161 2026] [:error] [pid 58288:tid 58299] [client 74.248.145.185:52028] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "admz6Xf_USd3ofWlU3sojQAAAEk"]
[Sat Apr 11 10:37:30.436608 2026] [:error] [pid 58194:tid 58207] [client 74.248.145.185:56722] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "admz6qT4IiVFj-rhcaX_hwAAAQg"]
[Sat Apr 11 10:37:30.942699 2026] [:error] [pid 58194:tid 58221] [client 74.248.145.185:55259] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "admz6qT4IiVFj-rhcaX_jQAAARY"]
[Sat Apr 11 10:37:31.477509 2026] [:error] [pid 58196:tid 58274] [client 74.248.145.185:52020] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "admz6xmf0L5kNLP6dTlJzQAAABQ"]
[Sat Apr 11 10:37:31.987216 2026] [:error] [pid 58194:tid 58199] [client 74.248.145.185:36308] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/acp.php"] [unique_id "admz66T4IiVFj-rhcaX_mQAAAQA"]
[Sat Apr 11 10:37:32.501459 2026] [:error] [pid 58288:tid 58311] [client 74.248.145.185:56766] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/acp.php"] [unique_id "admz7Hf_USd3ofWlU3solQAAAFU"]
[Sat Apr 11 10:37:33.014919 2026] [:error] [pid 58196:tid 58258] [client 74.248.145.185:27990] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/acp.php"] [unique_id "admz7Rmf0L5kNLP6dTlJ0QAAAAQ"]
[Sat Apr 11 10:37:33.540857 2026] [:error] [pid 58288:tid 58307] [client 74.248.145.185:51990] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/acp.php"] [unique_id "admz7Xf_USd3ofWlU3sonwAAAFE"]
[Sat Apr 11 10:37:34.048530 2026] [:error] [pid 58196:tid 58267] [client 74.248.145.185:56712] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file48.php"] [unique_id "admz7hmf0L5kNLP6dTlJ1QAAAA0"]
[Sat Apr 11 10:37:34.567530 2026] [:error] [pid 58288:tid 58309] [client 74.248.145.185:56721] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file48.php"] [unique_id "admz7nf_USd3ofWlU3sopwAAAFM"]
[Sat Apr 11 10:37:35.081883 2026] [:error] [pid 58194:tid 58219] [client 74.248.145.185:36332] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file48.php"] [unique_id "admz76T4IiVFj-rhcaX_oAAAARQ"]
[Sat Apr 11 10:37:35.592787 2026] [:error] [pid 58196:tid 58254] [client 74.248.145.185:56747] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file48.php"] [unique_id "admz7xmf0L5kNLP6dTlJ2gAAAAA"]
[Sat Apr 11 10:37:36.115982 2026] [:error] [pid 58194:tid 58218] [client 74.248.145.185:27982] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/g.php"] [unique_id "admz8KT4IiVFj-rhcaX_pQAAARM"]
[Sat Apr 11 10:37:36.630332 2026] [:error] [pid 58195:tid 58227] [client 74.248.145.185:36928] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/g.php"] [unique_id "admz8APvj06vzrczQjv9_wAAAIA"]
[Sat Apr 11 10:37:37.168387 2026] [:error] [pid 58195:tid 58239] [client 74.248.145.185:56713] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/g.php"] [unique_id "admz8QPvj06vzrczQjv-AgAAAIw"]
[Sat Apr 11 10:37:37.676726 2026] [:error] [pid 58194:tid 58210] [client 74.248.145.185:42597] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/g.php"] [unique_id "admz8aT4IiVFj-rhcaX_qAAAAQs"]
[Sat Apr 11 10:37:38.184609 2026] [:error] [pid 58194:tid 58199] [client 74.248.145.185:56732] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "admz8qT4IiVFj-rhcaX_rAAAAQA"]
[Sat Apr 11 10:37:38.695352 2026] [:error] [pid 58194:tid 58201] [client 74.248.145.185:36955] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "admz8qT4IiVFj-rhcaX_sgAAAQI"]
[Sat Apr 11 10:37:39.200588 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:42607] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "admz86T4IiVFj-rhcaX_tgAAAQE"]
[Sat Apr 11 10:37:39.733486 2026] [:error] [pid 58196:tid 58277] [client 74.248.145.185:56741] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "admz8xmf0L5kNLP6dTlJ4wAAABc"]
[Sat Apr 11 10:37:40.269176 2026] [:error] [pid 58195:tid 58231] [client 74.248.145.185:20019] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "admz9APvj06vzrczQjv-DQAAAIQ"]
[Sat Apr 11 10:37:40.792257 2026] [:error] [pid 58194:tid 58207] [client 74.248.145.185:56759] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "admz9KT4IiVFj-rhcaX_wQAAAQg"]
[Sat Apr 11 10:37:41.296408 2026] [:error] [pid 58288:tid 58296] [client 74.248.145.185:28027] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "admz9Xf_USd3ofWlU3souAAAAEY"]
[Sat Apr 11 10:37:41.815535 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:52023] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "admz9aT4IiVFj-rhcaX_xgAAAQE"]
[Sat Apr 11 10:37:42.345082 2026] [:error] [pid 58288:tid 58308] [client 74.248.145.185:36309] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ew.php"] [unique_id "admz9nf_USd3ofWlU3souwAAAFI"]
[Sat Apr 11 10:37:42.853438 2026] [:error] [pid 58288:tid 58300] [client 74.248.145.185:55287] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ew.php"] [unique_id "admz9nf_USd3ofWlU3sovAAAAEo"]
[Sat Apr 11 10:37:43.374613 2026] [:error] [pid 58288:tid 58295] [client 74.248.145.185:19968] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ew.php"] [unique_id "admz93f_USd3ofWlU3sowAAAAEU"]
[Sat Apr 11 10:37:43.894048 2026] [:error] [pid 58194:tid 58201] [client 74.248.145.185:36966] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ew.php"] [unique_id "admz96T4IiVFj-rhcaX_0AAAAQI"]
[Sat Apr 11 10:37:44.397350 2026] [:error] [pid 58195:tid 58250] [client 74.248.145.185:36970] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file21.php"] [unique_id "admz-APvj06vzrczQjv-FQAAAJc"]
[Sat Apr 11 10:37:44.903865 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:36978] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file21.php"] [unique_id "admz-KT4IiVFj-rhcaX_1QAAAQE"]
[Sat Apr 11 10:37:45.408196 2026] [:error] [pid 58194:tid 58204] [client 74.248.145.185:20016] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file21.php"] [unique_id "admz-aT4IiVFj-rhcaX_2wAAAQU"]
[Sat Apr 11 10:37:45.919438 2026] [:error] [pid 58288:tid 58300] [client 74.248.145.185:51977] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file21.php"] [unique_id "admz-Xf_USd3ofWlU3soywAAAEo"]
[Sat Apr 11 10:37:46.432322 2026] [:error] [pid 58194:tid 58221] [client 74.248.145.185:19993] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class19.php"] [unique_id "admz-qT4IiVFj-rhcaX_3wAAARY"]
[Sat Apr 11 10:37:46.937732 2026] [:error] [pid 58194:tid 58206] [client 74.248.145.185:27983] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class19.php"] [unique_id "admz-qT4IiVFj-rhcaX_5AAAAQc"]
[Sat Apr 11 10:37:47.458066 2026] [:error] [pid 58194:tid 58201] [client 74.248.145.185:56711] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class19.php"] [unique_id "admz-6T4IiVFj-rhcaX_6QAAAQI"]
[Sat Apr 11 10:37:47.969643 2026] [:error] [pid 58194:tid 58220] [client 74.248.145.185:36959] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class19.php"] [unique_id "admz-6T4IiVFj-rhcaX_7QAAARU"]
[Sat Apr 11 10:37:48.481626 2026] [:error] [pid 58194:tid 58201] [client 74.248.145.185:52027] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class20.php"] [unique_id "admz_KT4IiVFj-rhcaX_9gAAAQI"]
[Sat Apr 11 10:37:48.993566 2026] [:error] [pid 58288:tid 58294] [client 74.248.145.185:56736] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class20.php"] [unique_id "admz_Hf_USd3ofWlU3so0gAAAEQ"]
[Sat Apr 11 10:37:49.507474 2026] [:error] [pid 58288:tid 58296] [client 74.248.145.185:36963] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class20.php"] [unique_id "admz_Xf_USd3ofWlU3so1wAAAEY"]
[Sat Apr 11 10:37:50.016326 2026] [:error] [pid 58288:tid 58308] [client 74.248.145.185:36321] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class20.php"] [unique_id "admz_nf_USd3ofWlU3so2gAAAFI"]
[Sat Apr 11 10:37:50.526691 2026] [:error] [pid 58194:tid 58201] [client 74.248.145.185:52013] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file18.php"] [unique_id "admz_qT4IiVFj-rhcaUABQAAAQI"]
[Sat Apr 11 10:37:51.038692 2026] [:error] [pid 58194:tid 58217] [client 74.248.145.185:19824] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file18.php"] [unique_id "admz_6T4IiVFj-rhcaUACAAAARI"]
[Sat Apr 11 10:37:51.568014 2026] [:error] [pid 58288:tid 58311] [client 74.248.145.185:36990] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file18.php"] [unique_id "admz_3f_USd3ofWlU3so4QAAAFU"]
[Sat Apr 11 10:37:52.084136 2026] [:error] [pid 58288:tid 58293] [client 74.248.145.185:36978] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file18.php"] [unique_id "adm0AHf_USd3ofWlU3so4wAAAEM"]
[Sat Apr 11 10:37:52.590406 2026] [:error] [pid 58288:tid 58306] [client 74.248.145.185:19779] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adm0AHf_USd3ofWlU3so6gAAAFA"]
[Sat Apr 11 10:37:53.096692 2026] [:error] [pid 58194:tid 58208] [client 74.248.145.185:51978] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adm0AaT4IiVFj-rhcaUADQAAAQk"]
[Sat Apr 11 10:37:53.606075 2026] [:error] [pid 58288:tid 58305] [client 74.248.145.185:55250] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adm0AXf_USd3ofWlU3so8QAAAE8"]
[Sat Apr 11 10:37:54.112615 2026] [:error] [pid 58195:tid 58247] [client 74.248.145.185:42600] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adm0AgPvj06vzrczQjv-HAAAAJQ"]
[Sat Apr 11 10:37:54.627351 2026] [:error] [pid 58195:tid 58232] [client 74.248.145.185:36335] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adm0AgPvj06vzrczQjv-IAAAAIU"]
[Sat Apr 11 10:37:55.137276 2026] [:error] [pid 58288:tid 58296] [client 74.248.145.185:56726] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adm0A3f_USd3ofWlU3so9wAAAEY"]
[Sat Apr 11 10:37:55.655351 2026] [:error] [pid 58195:tid 58243] [client 74.248.145.185:36985] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adm0AwPvj06vzrczQjv-IgAAAJA"]
[Sat Apr 11 10:37:56.163699 2026] [:error] [pid 58288:tid 58292] [client 74.248.145.185:52006] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adm0BHf_USd3ofWlU3so_AAAAEI"]
[Sat Apr 11 10:37:56.682202 2026] [:error] [pid 58194:tid 58200] [client 74.248.145.185:52014] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adm0BKT4IiVFj-rhcaUAHgAAAQE"]
[Sat Apr 11 10:37:57.195077 2026] [:error] [pid 58288:tid 58307] [client 74.248.145.185:20004] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adm0BXf_USd3ofWlU3so_wAAAFE"]
[Sat Apr 11 10:37:57.703208 2026] [:error] [pid 58196:tid 58265] [client 74.248.145.185:19784] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adm0BRmf0L5kNLP6dTlJ-gAAAAs"]
[Sat Apr 11 10:37:58.211603 2026] [:error] [pid 58194:tid 58205] [client 74.248.145.185:36945] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adm0BqT4IiVFj-rhcaUAJQAAAQY"]
[Sat Apr 11 10:37:58.728486 2026] [:error] [pid 58194:tid 58213] [client 74.248.145.185:27974] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adm0BqT4IiVFj-rhcaUAJwAAAQ4"]
[Sat Apr 11 10:37:59.244890 2026] [:error] [pid 58288:tid 58292] [client 74.248.145.185:28012] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adm0B3f_USd3ofWlU3spBwAAAEI"]
[Sat Apr 11 10:37:59.752575 2026] [:error] [pid 58194:tid 58208] [client 74.248.145.185:19837] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adm0B6T4IiVFj-rhcaUALAAAAQk"]
[Sat Apr 11 10:38:00.265284 2026] [:error] [pid 58194:tid 58214] [client 74.248.145.185:52019] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adm0CKT4IiVFj-rhcaUALwAAAQ8"]
[Sat Apr 11 10:38:00.773383 2026] [:error] [pid 58288:tid 58309] [client 74.248.145.185:19806] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adm0CHf_USd3ofWlU3spDAAAAFM"]
[Sat Apr 11 10:38:01.280854 2026] [:error] [pid 58288:tid 58304] [client 74.248.145.185:36975] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adm0CXf_USd3ofWlU3spEAAAAE4"]
[Sat Apr 11 10:38:01.792143 2026] [:error] [pid 58196:tid 58265] [client 74.248.145.185:19809] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adm0CRmf0L5kNLP6dTlKCgAAAAs"]
[Sat Apr 11 10:38:02.312596 2026] [:error] [pid 58196:tid 58267] [client 74.248.145.185:36316] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adm0Chmf0L5kNLP6dTlKDgAAAA0"]
[Sat Apr 11 10:38:02.856333 2026] [:error] [pid 58196:tid 58256] [client 74.248.145.185:36934] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adm0Chmf0L5kNLP6dTlKEgAAAAI"]
[Sat Apr 11 10:38:03.368622 2026] [:error] [pid 58288:tid 58301] [client 74.248.145.185:55243] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adm0C3f_USd3ofWlU3spJAAAAEs"]
[Sat Apr 11 10:38:03.887968 2026] [:error] [pid 58288:tid 58305] [client 74.248.145.185:51972] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adm0C3f_USd3ofWlU3spKwAAAE8"]
[Sat Apr 11 10:38:04.405253 2026] [:error] [pid 58288:tid 58303] [client 74.248.145.185:56761] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adm0DHf_USd3ofWlU3spMAAAAE0"]
[Sat Apr 11 11:45:53.666451 2026] [:error] [pid 11067:tid 11069] [client 24.157.184.65:61606] [client 24.157.184.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.157.184.65, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adnD8cW3w7N67R04YCIshgAAAEA"]
[Sat Apr 11 11:55:13.526223 2026] [:error] [pid 2186:tid 2206] [client 203.177.237.112:62561] [client 203.177.237.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.177.237.112, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adnGIcibnOEEvcO8wPLdeQAAAJA"]
[Sat Apr 11 13:33:10.255141 2026] [:error] [pid 2186:tid 2212] [client 170.106.197.109:46700] [client 170.106.197.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adndFsibnOEEvcO8wPL05wAAAJU"]
[Sat Apr 11 13:44:34.110925 2026] [:error] [pid 2297:tid 2307] [client 2.56.248.217:63738] [client 2.56.248.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.56.248.217, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "adnfwrXJS-Jji11jZk3NJgAAAQY"]
[Sat Apr 11 13:44:34.706961 2026] [:error] [pid 2188:tid 2260] [client 2.56.248.217:63949] [client 2.56.248.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.56.248.217, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "adnfwoDhDA-Xtn2nRScBAgAAAMQ"]
[Sat Apr 11 13:44:35.001350 2026] [:error] [pid 2297:tid 2316] [client 2.56.248.217:63738] [client 2.56.248.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.56.248.217, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "adnfw7XJS-Jji11jZk3NKAAAAQ8"]
[Sat Apr 11 14:11:36.087160 2026] [:error] [pid 2297:tid 2305] [client 157.15.40.61:55830] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adnmGLXJS-Jji11jZk3YrQAAAQQ"]
[Sat Apr 11 14:11:36.360450 2026] [:error] [pid 2188:tid 2274] [client 157.15.40.61:55899] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmGIDhDA-Xtn2nRScJhAAAANI"]
[Sat Apr 11 14:11:36.638907 2026] [:error] [pid 11067:tid 11082] [client 157.15.40.61:55991] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmGMW3w7N67R04YCKQYAAAAE0"]
[Sat Apr 11 14:11:36.917427 2026] [:error] [pid 2187:tid 2238] [client 157.15.40.61:56067] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmGA4J29_qQi0FkjiH9QAAAAo"]
[Sat Apr 11 14:11:37.213498 2026] [:error] [pid 2297:tid 2320] [client 157.15.40.61:56151] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmGbXJS-Jji11jZk3Y4AAAARM"]
[Sat Apr 11 14:11:37.476555 2026] [:error] [pid 2186:tid 2212] [client 157.15.40.61:56229] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adnmGcibnOEEvcO8wPL9MQAAAJU"]
[Sat Apr 11 14:11:37.733603 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:56328] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "adnmGcW3w7N67R04YCKQmgAAAEg"]
[Sat Apr 11 14:11:38.054110 2026] [:error] [pid 2297:tid 2313] [client 157.15.40.61:56424] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/flower.php"] [unique_id "adnmGrXJS-Jji11jZk3ZJgAAAQw"]
[Sat Apr 11 14:11:41.431545 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:56918] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "adnmHcW3w7N67R04YCKRDAAAAEg"]
[Sat Apr 11 14:11:42.251006 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:57236] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "adnmHsW3w7N67R04YCKRfQAAAEg"]
[Sat Apr 11 14:11:42.512756 2026] [:error] [pid 2297:tid 2312] [client 157.15.40.61:57286] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "adnmHrXJS-Jji11jZk3Z2gAAAQs"]
[Sat Apr 11 14:11:43.785184 2026] [:error] [pid 2297:tid 2317] [client 157.15.40.61:57517] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/blurbs.php"] [unique_id "adnmH7XJS-Jji11jZk3aFgAAARA"]
[Sat Apr 11 14:11:44.059780 2026] [:error] [pid 2187:tid 2235] [client 157.15.40.61:57569] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/akcc.php"] [unique_id "adnmIA4J29_qQi0FkjiIjAAAAAc"]
[Sat Apr 11 14:11:44.323015 2026] [:error] [pid 2186:tid 2205] [client 157.15.40.61:57624] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adnmIMibnOEEvcO8wPL93QAAAI8"]
[Sat Apr 11 14:11:46.887580 2026] [:error] [pid 2297:tid 2312] [client 157.15.40.61:57676] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/shelp.php"] [unique_id "adnmIrXJS-Jji11jZk3amgAAAQs"]
[Sat Apr 11 14:11:48.345391 2026] [:error] [pid 2188:tid 2265] [client 157.15.40.61:58254] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/cord.php"] [unique_id "adnmJIDhDA-Xtn2nRScKfgAAAMk"]
[Sat Apr 11 14:11:50.689046 2026] [:error] [pid 2188:tid 2278] [client 157.15.40.61:58306] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/dex.php"] [unique_id "adnmJoDhDA-Xtn2nRScK0AAAANY"]
[Sat Apr 11 14:11:50.944476 2026] [:error] [pid 2297:tid 2306] [client 157.15.40.61:58838] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmJrXJS-Jji11jZk3bVgAAAQU"]
[Sat Apr 11 14:11:52.997654 2026] [:error] [pid 2187:tid 2243] [client 157.15.40.61:59062] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/file2.php"] [unique_id "adnmKA4J29_qQi0FkjiJCQAAAA8"]
[Sat Apr 11 14:11:53.296718 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:59312] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "adnmKcW3w7N67R04YCKTmQAAAE8"]
[Sat Apr 11 14:11:55.694647 2026] [:error] [pid 2186:tid 2208] [client 157.15.40.61:59359] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmK8ibnOEEvcO8wPL-vgAAAJI"]
[Sat Apr 11 14:11:55.955785 2026] [:error] [pid 11067:tid 11072] [client 157.15.40.61:59856] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmK8W3w7N67R04YCKUmAAAAEM"]
[Sat Apr 11 14:11:57.758822 2026] [:error] [pid 2188:tid 2267] [client 157.15.40.61:60038] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adnmLYDhDA-Xtn2nRScLrAAAAMs"]
[Sat Apr 11 14:11:58.019974 2026] [:error] [pid 2187:tid 2231] [client 157.15.40.61:60339] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/shlo.php"] [unique_id "adnmLg4J29_qQi0FkjiJogAAAAM"]
[Sat Apr 11 14:11:58.303516 2026] [:error] [pid 11067:tid 11075] [client 157.15.40.61:60420] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "adnmLsW3w7N67R04YCKVjQAAAEY"]
[Sat Apr 11 14:11:58.567673 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:60508] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/ahax.php"] [unique_id "adnmLsW3w7N67R04YCKVxwAAAE8"]
[Sat Apr 11 14:11:58.824802 2026] [:error] [pid 11067:tid 11076] [client 157.15.40.61:60588] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/php8.php"] [unique_id "adnmLsW3w7N67R04YCKV8AAAAEc"]
[Sat Apr 11 14:12:00.850368 2026] [:error] [pid 2188:tid 2265] [client 157.15.40.61:60989] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/lufix1.php"] [unique_id "adnmMIDhDA-Xtn2nRScL4AAAAMk"]
[Sat Apr 11 14:12:03.245504 2026] [:error] [pid 2188:tid 2259] [client 157.15.40.61:61220] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/witmm.php"] [unique_id "adnmM4DhDA-Xtn2nRScMGwAAAMM"]
[Sat Apr 11 14:12:04.955664 2026] [:error] [pid 2187:tid 2241] [client 157.15.40.61:61783] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmNA4J29_qQi0FkjiJ_QAAAA0"]
[Sat Apr 11 14:12:06.935078 2026] [:error] [pid 11067:tid 11084] [client 157.15.40.61:49732] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmNsW3w7N67R04YCKXHwAAAE8"]
[Sat Apr 11 14:12:09.995944 2026] [:error] [pid 2186:tid 2205] [client 157.15.40.61:50091] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "adnmOcibnOEEvcO8wPL_hAAAAI8"]
[Sat Apr 11 14:12:13.056012 2026] [:error] [pid 2297:tid 2301] [client 157.15.40.61:50585] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adnmPbXJS-Jji11jZk3dCQAAAQA"]
[Sat Apr 11 14:12:13.849292 2026] [:error] [pid 2188:tid 2266] [client 157.15.40.61:50927] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adnmPYDhDA-Xtn2nRScMkwAAAMo"]
[Sat Apr 11 14:12:16.147416 2026] [:error] [pid 2188:tid 2258] [client 157.15.40.61:51101] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "adnmQIDhDA-Xtn2nRScMswAAAMI"]
[Sat Apr 11 14:12:18.731616 2026] [:error] [pid 2186:tid 2209] [client 157.15.40.61:51388] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-editor.php"] [unique_id "adnmQsibnOEEvcO8wPL_xgAAAJM"]
[Sat Apr 11 15:14:31.794322 2026] [:error] [pid 11067:tid 11088] [client 103.129.238.246:55197] [client 103.129.238.246] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.129.238.246, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adn018W3w7N67R04YCLCqAAAAFM"]
[Sat Apr 11 16:45:40.783795 2026] [:error] [pid 2186:tid 2201] [client 170.106.192.208:48342] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adoKNMibnOEEvcO8wPIinwAAAIs"]
[Sat Apr 11 18:28:23.977389 2026] [:error] [pid 54518:tid 54540] [client 20.91.201.27:6307] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "adoiR6Ki5dAhX05ubq01sgAAAJI"]
[Sat Apr 11 18:28:24.533280 2026] [:error] [pid 54518:tid 54539] [client 20.91.201.27:47048] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "adoiSKKi5dAhX05ubq01tQAAAJE"]
[Sat Apr 11 18:28:25.092407 2026] [:error] [pid 54518:tid 54545] [client 20.91.201.27:13602] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "adoiSaKi5dAhX05ubq01uAAAAJc"]
[Sat Apr 11 18:28:25.657729 2026] [:error] [pid 54520:tid 54586] [client 20.91.201.27:33557] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "adoiScOfMlnGwwoJrMCMKQAAAEo"]
[Sat Apr 11 18:28:26.199709 2026] [:error] [pid 54610:tid 54636] [client 20.91.201.27:47079] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adoiSge-u3uFASN-RPGXAwAAARc"]
[Sat Apr 11 18:28:26.734968 2026] [:error] [pid 54518:tid 54542] [client 20.91.201.27:13604] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adoiSqKi5dAhX05ubq01vQAAAJQ"]
[Sat Apr 11 18:28:27.289461 2026] [:error] [pid 54519:tid 54569] [client 20.91.201.27:32317] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adoiSx3fdONpCON3MUiXEgAAANQ"]
[Sat Apr 11 18:28:27.833354 2026] [:error] [pid 54520:tid 54597] [client 20.91.201.27:32318] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adoiS8OfMlnGwwoJrMCMLgAAAFU"]
[Sat Apr 11 18:28:28.359458 2026] [:error] [pid 54520:tid 54590] [client 20.91.201.27:6325] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adoiTMOfMlnGwwoJrMCMMQAAAE4"]
[Sat Apr 11 18:28:28.879712 2026] [:error] [pid 54519:tid 54572] [client 20.91.201.27:61281] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adoiTB3fdONpCON3MUiXFQAAANc"]
[Sat Apr 11 18:28:29.412065 2026] [:error] [pid 54519:tid 54553] [client 20.91.201.27:7155] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adoiTR3fdONpCON3MUiXGAAAAMQ"]
[Sat Apr 11 18:28:29.938300 2026] [:error] [pid 65248:tid 65254] [client 20.91.201.27:6275] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adoiTTI-iGHcq-8gSqrlqQAAAAQ"]
[Sat Apr 11 18:28:30.463513 2026] [:error] [pid 54610:tid 54630] [client 20.91.201.27:44905] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "adoiTge-u3uFASN-RPGXCAAAARE"]
[Sat Apr 11 18:28:30.986406 2026] [:error] [pid 54610:tid 54621] [client 20.91.201.27:44883] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "adoiTge-u3uFASN-RPGXCQAAAQg"]
[Sat Apr 11 18:28:31.515949 2026] [:error] [pid 54519:tid 54556] [client 20.91.201.27:31250] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "adoiTx3fdONpCON3MUiXHAAAAMc"]
[Sat Apr 11 18:28:32.041246 2026] [:error] [pid 54520:tid 54579] [client 20.91.201.27:17683] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "adoiUMOfMlnGwwoJrMCMNgAAAEM"]
[Sat Apr 11 18:28:32.567085 2026] [:error] [pid 54520:tid 54598] [client 20.91.201.27:33552] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "adoiUMOfMlnGwwoJrMCMOQAAAFY"]
[Sat Apr 11 18:28:33.096763 2026] [:error] [pid 54520:tid 54576] [client 20.91.201.27:36020] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "adoiUcOfMlnGwwoJrMCMPAAAAEA"]
[Sat Apr 11 18:28:33.614190 2026] [:error] [pid 65248:tid 65250] [client 20.91.201.27:44887] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "adoiUTI-iGHcq-8gSqrltQAAAAA"]
[Sat Apr 11 18:28:34.141834 2026] [:error] [pid 65248:tid 65267] [client 20.91.201.27:6278] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "adoiUjI-iGHcq-8gSqrlvwAAABE"]
[Sat Apr 11 18:28:34.664590 2026] [:error] [pid 65248:tid 65262] [client 20.91.201.27:43008] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adoiUjI-iGHcq-8gSqrlwgAAAAw"]
[Sat Apr 11 18:28:35.234751 2026] [:error] [pid 65248:tid 65267] [client 20.91.201.27:33540] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adoiUzI-iGHcq-8gSqrlyQAAABE"]
[Sat Apr 11 18:28:35.755049 2026] [:error] [pid 54518:tid 54526] [client 20.91.201.27:61287] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adoiU6Ki5dAhX05ubq01wgAAAIQ"]
[Sat Apr 11 18:28:36.287871 2026] [:error] [pid 54610:tid 54616] [client 20.91.201.27:43056] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adoiVAe-u3uFASN-RPGXDgAAAQM"]
[Sat Apr 11 18:28:36.824857 2026] [:error] [pid 54519:tid 54555] [client 20.91.201.27:13579] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "adoiVB3fdONpCON3MUiXIQAAAMY"]
[Sat Apr 11 18:28:37.360730 2026] [:error] [pid 54520:tid 54598] [client 20.91.201.27:42404] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "adoiVcOfMlnGwwoJrMCMRAAAAFY"]
[Sat Apr 11 18:28:37.888490 2026] [:error] [pid 54610:tid 54614] [client 20.91.201.27:44906] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "adoiVQe-u3uFASN-RPGXEgAAAQE"]
[Sat Apr 11 18:28:38.418485 2026] [:error] [pid 54610:tid 54629] [client 20.91.201.27:31258] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "adoiVge-u3uFASN-RPGXFAAAARA"]
[Sat Apr 11 18:28:38.939304 2026] [:error] [pid 54519:tid 54557] [client 20.91.201.27:44900] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "adoiVh3fdONpCON3MUiXKAAAAMg"]
[Sat Apr 11 18:28:39.516536 2026] [:error] [pid 65248:tid 65255] [client 20.91.201.27:13407] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "adoiVzI-iGHcq-8gSqrl0QAAAAU"]
[Sat Apr 11 18:28:40.037864 2026] [:error] [pid 54520:tid 54590] [client 20.91.201.27:61302] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "adoiWMOfMlnGwwoJrMCMSQAAAE4"]
[Sat Apr 11 18:28:40.563278 2026] [:error] [pid 54519:tid 54569] [client 20.91.201.27:31239] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "adoiWB3fdONpCON3MUiXLgAAANQ"]
[Sat Apr 11 18:28:41.086393 2026] [:error] [pid 54519:tid 54555] [client 20.91.201.27:17703] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adoiWR3fdONpCON3MUiXLwAAAMY"]
[Sat Apr 11 18:28:41.609114 2026] [:error] [pid 54520:tid 54586] [client 20.91.201.27:13595] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adoiWcOfMlnGwwoJrMCMSwAAAEo"]
[Sat Apr 11 18:28:42.153960 2026] [:error] [pid 54520:tid 54600] [client 20.91.201.27:44874] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adoiWsOfMlnGwwoJrMCMTAAAAFg"]
[Sat Apr 11 18:28:42.684562 2026] [:error] [pid 54520:tid 54598] [client 20.91.201.27:43040] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adoiWsOfMlnGwwoJrMCMTgAAAFY"]
[Sat Apr 11 18:28:43.256769 2026] [:error] [pid 54610:tid 54626] [client 20.91.201.27:32302] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "adoiWwe-u3uFASN-RPGXGwAAAQ0"]
[Sat Apr 11 18:28:43.799781 2026] [:error] [pid 54520:tid 54576] [client 20.91.201.27:6296] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "adoiW8OfMlnGwwoJrMCMUwAAAEA"]
[Sat Apr 11 18:28:44.354353 2026] [:error] [pid 54519:tid 54561] [client 20.91.201.27:13393] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "adoiXB3fdONpCON3MUiXNAAAAMw"]
[Sat Apr 11 18:28:44.909871 2026] [:error] [pid 54519:tid 54556] [client 20.91.201.27:31289] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "adoiXB3fdONpCON3MUiXNgAAAMc"]
[Sat Apr 11 18:28:45.433441 2026] [:error] [pid 65248:tid 65254] [client 20.91.201.27:33599] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "adoiXTI-iGHcq-8gSqrl3gAAAAQ"]
[Sat Apr 11 18:28:45.967180 2026] [:error] [pid 54518:tid 54543] [client 20.91.201.27:6305] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "adoiXaKi5dAhX05ubq012QAAAJU"]
[Sat Apr 11 18:28:46.505678 2026] [:error] [pid 54520:tid 54586] [client 20.91.201.27:42396] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "adoiXsOfMlnGwwoJrMCMWwAAAEo"]
[Sat Apr 11 18:28:47.035989 2026] [:error] [pid 54518:tid 54538] [client 20.91.201.27:43046] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "adoiX6Ki5dAhX05ubq012gAAAJA"]
[Sat Apr 11 18:28:47.569353 2026] [:error] [pid 54518:tid 54530] [client 20.91.201.27:6326] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "adoiX6Ki5dAhX05ubq012wAAAIg"]
[Sat Apr 11 18:28:48.111106 2026] [:error] [pid 65248:tid 65252] [client 20.91.201.27:13377] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "adoiYDI-iGHcq-8gSqrl4wAAAAI"]
[Sat Apr 11 18:28:48.652338 2026] [:error] [pid 65248:tid 65270] [client 20.91.201.27:45430] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "adoiYDI-iGHcq-8gSqrl5QAAABQ"]
[Sat Apr 11 18:28:49.188811 2026] [:error] [pid 65248:tid 65263] [client 20.91.201.27:17682] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "adoiYTI-iGHcq-8gSqrl6QAAAA0"]
[Sat Apr 11 18:28:49.723725 2026] [:error] [pid 54610:tid 54618] [client 20.91.201.27:61263] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "adoiYQe-u3uFASN-RPGXIgAAAQU"]
[Sat Apr 11 18:28:50.270369 2026] [:error] [pid 54610:tid 54632] [client 20.91.201.27:13376] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "adoiYge-u3uFASN-RPGXJgAAARM"]
[Sat Apr 11 18:28:50.852870 2026] [:error] [pid 54610:tid 54623] [client 20.91.201.27:43023] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "adoiYge-u3uFASN-RPGXKAAAAQo"]
[Sat Apr 11 18:28:51.437104 2026] [:error] [pid 54610:tid 54616] [client 20.91.201.27:61308] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "adoiYwe-u3uFASN-RPGXLQAAAQM"]
[Sat Apr 11 18:28:51.982842 2026] [:error] [pid 54518:tid 54523] [client 20.91.201.27:31236] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "adoiY6Ki5dAhX05ubq014AAAAIE"]
[Sat Apr 11 18:28:52.533224 2026] [:error] [pid 54610:tid 54627] [client 20.91.201.27:42394] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "adoiZAe-u3uFASN-RPGXMAAAAQ4"]
[Sat Apr 11 18:28:53.258167 2026] [:error] [pid 65248:tid 65260] [client 20.91.201.27:13422] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "adoiZTI-iGHcq-8gSqrl9gAAAAo"]
[Sat Apr 11 18:28:53.810535 2026] [:error] [pid 65248:tid 65267] [client 20.91.201.27:32286] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "adoiZTI-iGHcq-8gSqrl-AAAABE"]
[Sat Apr 11 18:28:54.458461 2026] [:error] [pid 54520:tid 54578] [client 20.91.201.27:13404] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "adoiZsOfMlnGwwoJrMCMYQAAAEI"]
[Sat Apr 11 18:28:55.060007 2026] [:error] [pid 54520:tid 54599] [client 20.91.201.27:33594] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "adoiZ8OfMlnGwwoJrMCMYgAAAFc"]
[Sat Apr 11 18:28:55.595567 2026] [:error] [pid 65248:tid 65274] [client 20.91.201.27:31290] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "adoiZzI-iGHcq-8gSqrmBAAAABg"]
[Sat Apr 11 18:28:56.162288 2026] [:error] [pid 54520:tid 54591] [client 20.91.201.27:44876] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "adoiaMOfMlnGwwoJrMCMZQAAAE8"]
[Sat Apr 11 18:28:56.705928 2026] [:error] [pid 54519:tid 54551] [client 20.91.201.27:7110] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "adoiaB3fdONpCON3MUiXPgAAAMI"]
[Sat Apr 11 18:28:57.234446 2026] [:error] [pid 54518:tid 54535] [client 20.91.201.27:27536] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "adoiaaKi5dAhX05ubq014gAAAI0"]
[Sat Apr 11 18:28:57.792500 2026] [:error] [pid 54520:tid 54593] [client 20.91.201.27:44867] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "adoiacOfMlnGwwoJrMCMawAAAFE"]
[Sat Apr 11 18:28:58.382628 2026] [:error] [pid 54519:tid 54566] [client 20.91.201.27:13385] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "adoiah3fdONpCON3MUiXQAAAANE"]
[Sat Apr 11 18:28:58.914899 2026] [:error] [pid 54520:tid 54582] [client 20.91.201.27:13599] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adoiasOfMlnGwwoJrMCMcQAAAEY"]
[Sat Apr 11 18:28:59.440649 2026] [:error] [pid 54520:tid 54597] [client 20.91.201.27:6283] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adoia8OfMlnGwwoJrMCMcwAAAFU"]
[Sat Apr 11 18:28:59.969815 2026] [:error] [pid 65248:tid 65255] [client 20.91.201.27:13617] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adoiazI-iGHcq-8gSqrmCQAAAAU"]
[Sat Apr 11 18:29:00.505456 2026] [:error] [pid 54519:tid 54555] [client 20.91.201.27:13383] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adoibB3fdONpCON3MUiXRwAAAMY"]
[Sat Apr 11 18:29:01.025780 2026] [:error] [pid 65248:tid 65269] [client 20.91.201.27:17715] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adoibTI-iGHcq-8gSqrmDwAAABM"]
[Sat Apr 11 18:29:01.568834 2026] [:error] [pid 54519:tid 54565] [client 20.91.201.27:45432] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adoibR3fdONpCON3MUiXSgAAANA"]
[Sat Apr 11 18:29:02.106757 2026] [:error] [pid 54518:tid 54543] [client 20.91.201.27:45429] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adoibqKi5dAhX05ubq015QAAAJU"]
[Sat Apr 11 18:29:02.638502 2026] [:error] [pid 65248:tid 65264] [client 20.91.201.27:45425] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adoibjI-iGHcq-8gSqrmEwAAAA4"]
[Sat Apr 11 18:29:03.198734 2026] [:error] [pid 54518:tid 54538] [client 20.91.201.27:43051] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adoib6Ki5dAhX05ubq016QAAAJA"]
[Sat Apr 11 18:29:03.717315 2026] [:error] [pid 54519:tid 54563] [client 20.91.201.27:17685] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adoibx3fdONpCON3MUiXTAAAAM4"]
[Sat Apr 11 18:29:04.246003 2026] [:error] [pid 65248:tid 65262] [client 20.91.201.27:6330] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adoicDI-iGHcq-8gSqrmGAAAAAw"]
[Sat Apr 11 18:29:04.773836 2026] [:error] [pid 54518:tid 54536] [client 20.91.201.27:33583] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adoicKKi5dAhX05ubq016wAAAI4"]
[Sat Apr 11 18:29:05.305586 2026] [:error] [pid 54610:tid 54632] [client 20.91.201.27:17675] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adoicQe-u3uFASN-RPGXOwAAARM"]
[Sat Apr 11 18:29:05.856626 2026] [:error] [pid 54519:tid 54550] [client 20.91.201.27:17693] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adoicR3fdONpCON3MUiXTgAAAME"]
[Sat Apr 11 18:29:06.378842 2026] [:error] [pid 54519:tid 54572] [client 20.91.201.27:17686] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adoich3fdONpCON3MUiXUAAAANc"]
[Sat Apr 11 18:29:06.948911 2026] [:error] [pid 54518:tid 54523] [client 20.91.201.27:16946] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adoicqKi5dAhX05ubq017QAAAIE"]
[Sat Apr 11 18:29:07.472549 2026] [:error] [pid 54518:tid 54527] [client 20.91.201.27:27529] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adoic6Ki5dAhX05ubq018QAAAIU"]
[Sat Apr 11 18:29:07.994792 2026] [:error] [pid 54518:tid 54531] [client 20.91.201.27:45384] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adoic6Ki5dAhX05ubq018gAAAIk"]
[Sat Apr 11 18:29:08.528857 2026] [:error] [pid 54519:tid 54554] [client 20.91.201.27:45387] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adoidB3fdONpCON3MUiXUwAAAMU"]
[Sat Apr 11 18:29:09.050903 2026] [:error] [pid 54518:tid 54538] [client 20.91.201.27:61285] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adoidaKi5dAhX05ubq019QAAAJA"]
[Sat Apr 11 18:29:09.568971 2026] [:error] [pid 54518:tid 54529] [client 20.91.201.27:13390] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adoidaKi5dAhX05ubq019wAAAIc"]
[Sat Apr 11 18:29:10.102004 2026] [:error] [pid 54520:tid 54593] [client 20.91.201.27:18988] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adoidsOfMlnGwwoJrMCMhQAAAFE"]
[Sat Apr 11 18:29:10.624754 2026] [:error] [pid 54519:tid 54569] [client 20.91.201.27:13151] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adoidh3fdONpCON3MUiXWQAAANQ"]
[Sat Apr 11 18:29:11.144881 2026] [:error] [pid 54520:tid 54582] [client 20.91.201.27:16923] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adoid8OfMlnGwwoJrMCMiQAAAEY"]
[Sat Apr 11 18:29:11.682685 2026] [:error] [pid 54519:tid 54551] [client 20.91.201.27:45422] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adoidx3fdONpCON3MUiXXQAAAMI"]
[Sat Apr 11 18:29:12.207658 2026] [:error] [pid 65248:tid 65255] [client 20.91.201.27:16934] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adoieDI-iGHcq-8gSqrmHwAAAAU"]
[Sat Apr 11 18:29:12.728270 2026] [:error] [pid 65248:tid 65260] [client 20.91.201.27:6749] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adoieDI-iGHcq-8gSqrmIQAAAAo"]
[Sat Apr 11 18:29:13.250333 2026] [:error] [pid 54519:tid 54557] [client 20.91.201.27:47091] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adoieR3fdONpCON3MUiXZAAAAMg"]
[Sat Apr 11 18:29:13.805388 2026] [:error] [pid 54610:tid 54630] [client 20.91.201.27:44903] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adoieQe-u3uFASN-RPGXPQAAARE"]
[Sat Apr 11 18:29:14.346798 2026] [:error] [pid 54610:tid 54631] [client 20.91.201.27:44879] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adoiege-u3uFASN-RPGXQgAAARI"]
[Sat Apr 11 18:29:14.879932 2026] [:error] [pid 54610:tid 54622] [client 20.91.201.27:61307] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adoiege-u3uFASN-RPGXRAAAAQk"]
[Sat Apr 11 18:29:15.409319 2026] [:error] [pid 54518:tid 54526] [client 20.91.201.27:61311] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adoie6Ki5dAhX05ubq01-gAAAIQ"]
[Sat Apr 11 18:29:15.942502 2026] [:error] [pid 54610:tid 54621] [client 20.91.201.27:13145] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "adoiewe-u3uFASN-RPGXSwAAAQg"]
[Sat Apr 11 18:29:16.472633 2026] [:error] [pid 65248:tid 65262] [client 20.91.201.27:14809] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "adoifDI-iGHcq-8gSqrmJAAAAAw"]
[Sat Apr 11 18:29:16.996028 2026] [:error] [pid 65248:tid 65268] [client 20.91.201.27:27571] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "adoifDI-iGHcq-8gSqrmJgAAABI"]
[Sat Apr 11 18:29:17.519713 2026] [:error] [pid 54518:tid 54535] [client 20.91.201.27:18951] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "adoifaKi5dAhX05ubq01_QAAAI0"]
[Sat Apr 11 18:29:18.047101 2026] [:error] [pid 54518:tid 54532] [client 20.91.201.27:14438] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "adoifqKi5dAhX05ubq01_gAAAIo"]
[Sat Apr 11 18:29:18.578394 2026] [:error] [pid 65248:tid 65272] [client 20.91.201.27:13131] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "adoifjI-iGHcq-8gSqrmLgAAABY"]
[Sat Apr 11 18:29:19.111314 2026] [:error] [pid 54610:tid 54628] [client 20.91.201.27:13148] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "adoifwe-u3uFASN-RPGXTgAAAQ8"]
[Sat Apr 11 18:29:19.643026 2026] [:error] [pid 54610:tid 54635] [client 20.91.201.27:18966] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "adoifwe-u3uFASN-RPGXTwAAARY"]
[Sat Apr 11 18:29:20.170686 2026] [:error] [pid 65248:tid 65258] [client 20.91.201.27:28400] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adoigDI-iGHcq-8gSqrmMgAAAAg"]
[Sat Apr 11 18:29:20.754118 2026] [:error] [pid 65248:tid 65251] [client 20.91.201.27:28398] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adoigDI-iGHcq-8gSqrmNgAAAAE"]
[Sat Apr 11 18:29:21.279734 2026] [:error] [pid 65248:tid 65272] [client 20.91.201.27:19007] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adoigTI-iGHcq-8gSqrmNwAAABY"]
[Sat Apr 11 18:29:21.817346 2026] [:error] [pid 65248:tid 65273] [client 20.91.201.27:44868] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adoigTI-iGHcq-8gSqrmOwAAABc"]
[Sat Apr 11 18:29:22.354301 2026] [:error] [pid 65248:tid 65267] [client 20.91.201.27:13124] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "adoigjI-iGHcq-8gSqrmPwAAABE"]
[Sat Apr 11 18:29:22.915846 2026] [:error] [pid 65248:tid 65250] [client 20.91.201.27:6767] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "adoigjI-iGHcq-8gSqrmQAAAAAA"]
[Sat Apr 11 18:29:30.217439 2026] [:error] [pid 65248:tid 65263] [client 20.91.201.27:14451] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "adoiijI-iGHcq-8gSqrmawAAAA0"]
[Sat Apr 11 18:29:30.751355 2026] [:error] [pid 54610:tid 54632] [client 20.91.201.27:14443] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "adoiige-u3uFASN-RPGXVgAAARM"]
[Sat Apr 11 18:29:31.273137 2026] [:error] [pid 54610:tid 54631] [client 20.91.201.27:13186] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "adoiiwe-u3uFASN-RPGXWAAAARI"]
[Sat Apr 11 18:29:31.810789 2026] [:error] [pid 65248:tid 65258] [client 20.91.201.27:18677] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "adoiizI-iGHcq-8gSqrmbgAAAAg"]
[Sat Apr 11 18:29:32.344052 2026] [:error] [pid 65248:tid 65261] [client 20.91.201.27:24306] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "adoijDI-iGHcq-8gSqrmbwAAAAs"]
[Sat Apr 11 18:29:32.878453 2026] [:error] [pid 65248:tid 65265] [client 20.91.201.27:24265] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "adoijDI-iGHcq-8gSqrmcgAAAA8"]
[Sat Apr 11 18:29:33.453807 2026] [:error] [pid 54520:tid 54583] [client 20.91.201.27:18274] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "adoijcOfMlnGwwoJrMCMkgAAAEc"]
[Sat Apr 11 18:29:34.035069 2026] [:error] [pid 54518:tid 54527] [client 20.91.201.27:18653] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "adoijqKi5dAhX05ubq02CgAAAIU"]
[Sat Apr 11 18:29:34.573170 2026] [:error] [pid 65248:tid 65253] [client 20.91.201.27:16614] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adoijjI-iGHcq-8gSqrmdQAAAAM"]
[Sat Apr 11 18:29:35.156061 2026] [:error] [pid 54610:tid 54635] [client 20.91.201.27:6865] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adoijwe-u3uFASN-RPGXXAAAARY"]
[Sat Apr 11 18:29:35.691673 2026] [:error] [pid 54610:tid 54622] [client 20.91.201.27:6881] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adoijwe-u3uFASN-RPGXXgAAAQk"]
[Sat Apr 11 18:29:36.236801 2026] [:error] [pid 54610:tid 54615] [client 20.91.201.27:14425] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adoikAe-u3uFASN-RPGXYQAAAQI"]
[Sat Apr 11 18:29:36.775686 2026] [:error] [pid 65248:tid 65271] [client 20.91.201.27:13210] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adoikDI-iGHcq-8gSqrmewAAABU"]
[Sat Apr 11 18:29:37.299013 2026] [:error] [pid 65248:tid 65265] [client 20.91.201.27:14537] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adoikTI-iGHcq-8gSqrmfQAAAA8"]
[Sat Apr 11 18:29:37.853847 2026] [:error] [pid 65248:tid 65252] [client 20.91.201.27:28829] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adoikTI-iGHcq-8gSqrmggAAAAI"]
[Sat Apr 11 18:29:38.388974 2026] [:error] [pid 65248:tid 65269] [client 20.91.201.27:18255] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adoikjI-iGHcq-8gSqrmhQAAABM"]
[Sat Apr 11 18:29:38.915244 2026] [:error] [pid 54519:tid 54559] [client 20.91.201.27:26440] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adoikh3fdONpCON3MUiXbgAAAMo"]
[Sat Apr 11 18:29:39.442318 2026] [:error] [pid 54518:tid 54541] [client 20.91.201.27:45317] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adoik6Ki5dAhX05ubq02DAAAAJM"]
[Sat Apr 11 18:29:39.964450 2026] [:error] [pid 54519:tid 54571] [client 20.91.201.27:13227] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adoikx3fdONpCON3MUiXcAAAANY"]
[Sat Apr 11 18:29:40.483774 2026] [:error] [pid 54610:tid 54625] [client 20.91.201.27:15000] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adoilAe-u3uFASN-RPGXZAAAAQw"]
[Sat Apr 11 18:29:41.002927 2026] [:error] [pid 54520:tid 54592] [client 20.91.201.27:18245] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adoilcOfMlnGwwoJrMCMmAAAAFA"]
[Sat Apr 11 18:29:41.528626 2026] [:error] [pid 54610:tid 54619] [client 20.91.201.27:19803] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adoilQe-u3uFASN-RPGXaAAAAQY"]
[Sat Apr 11 18:29:42.047278 2026] [:error] [pid 54519:tid 54555] [client 20.91.201.27:23762] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adoilh3fdONpCON3MUiXcQAAAMY"]
[Sat Apr 11 18:29:42.574426 2026] [:error] [pid 65248:tid 65259] [client 20.91.201.27:26456] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adoiljI-iGHcq-8gSqrmjwAAAAk"]
[Sat Apr 11 18:29:43.096480 2026] [:error] [pid 65248:tid 65261] [client 20.91.201.27:26481] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adoilzI-iGHcq-8gSqrmlQAAAAs"]
[Sat Apr 11 18:29:43.620474 2026] [:error] [pid 65248:tid 65271] [client 20.91.201.27:46664] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adoilzI-iGHcq-8gSqrmlwAAABU"]
[Sat Apr 11 18:29:44.151085 2026] [:error] [pid 54610:tid 54634] [client 20.91.201.27:26480] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adoimAe-u3uFASN-RPGXbQAAARU"]
[Sat Apr 11 18:29:44.678893 2026] [:error] [pid 54520:tid 54595] [client 20.91.201.27:46693] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adoimMOfMlnGwwoJrMCMmwAAAFM"]
[Sat Apr 11 18:29:45.236506 2026] [:error] [pid 54520:tid 54588] [client 20.91.201.27:34086] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adoimcOfMlnGwwoJrMCMnAAAAEw"]
[Sat Apr 11 18:29:45.797270 2026] [:error] [pid 54610:tid 54625] [client 20.91.201.27:17416] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adoimQe-u3uFASN-RPGXcwAAAQw"]
[Sat Apr 11 18:29:46.361340 2026] [:error] [pid 54610:tid 54630] [client 20.91.201.27:19782] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adoimge-u3uFASN-RPGXdAAAARE"]
[Sat Apr 11 18:29:46.900824 2026] [:error] [pid 54520:tid 54596] [client 20.91.201.27:46717] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adoimsOfMlnGwwoJrMCMnwAAAFQ"]
[Sat Apr 11 18:29:47.439164 2026] [:error] [pid 54518:tid 54536] [client 20.91.201.27:19806] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adoim6Ki5dAhX05ubq02EgAAAI4"]
[Sat Apr 11 18:29:47.992041 2026] [:error] [pid 54610:tid 54633] [client 20.91.201.27:34055] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adoimwe-u3uFASN-RPGXeAAAARQ"]
[Sat Apr 11 18:29:48.523510 2026] [:error] [pid 54610:tid 54615] [client 20.91.201.27:7003] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adoinAe-u3uFASN-RPGXfgAAAQI"]
[Sat Apr 11 18:29:49.041899 2026] [:error] [pid 54520:tid 54578] [client 20.91.201.27:33485] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adoincOfMlnGwwoJrMCMpQAAAEI"]
[Sat Apr 11 18:29:49.584997 2026] [:error] [pid 65248:tid 65258] [client 20.91.201.27:31706] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adoinTI-iGHcq-8gSqrmoAAAAAg"]
[Sat Apr 11 18:29:50.120810 2026] [:error] [pid 65248:tid 65254] [client 20.91.201.27:7039] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adoinjI-iGHcq-8gSqrmogAAAAQ"]
[Sat Apr 11 18:29:50.674026 2026] [:error] [pid 54610:tid 54621] [client 20.91.201.27:33489] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adoinge-u3uFASN-RPGXgwAAAQg"]
[Sat Apr 11 18:29:51.218833 2026] [:error] [pid 65248:tid 65262] [client 20.91.201.27:46179] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adoinzI-iGHcq-8gSqrmowAAAAw"]
[Sat Apr 11 18:29:51.758495 2026] [:error] [pid 65248:tid 65259] [client 20.91.201.27:17761] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adoinzI-iGHcq-8gSqrmpgAAAAk"]
[Sat Apr 11 18:29:52.340370 2026] [:error] [pid 65248:tid 65264] [client 20.91.201.27:12622] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adoioDI-iGHcq-8gSqrmqwAAAA4"]
[Sat Apr 11 18:29:52.863498 2026] [:error] [pid 54519:tid 54549] [client 20.91.201.27:6980] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adoioB3fdONpCON3MUiXeAAAAMA"]
[Sat Apr 11 18:29:53.384692 2026] [:error] [pid 65248:tid 65260] [client 20.91.201.27:17745] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adoioTI-iGHcq-8gSqrmrgAAAAo"]
[Sat Apr 11 18:29:53.925865 2026] [:error] [pid 54520:tid 54594] [client 20.91.201.27:13486] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adoiocOfMlnGwwoJrMCMrAAAAFI"]
[Sat Apr 11 18:29:54.461395 2026] [:error] [pid 54519:tid 54556] [client 20.91.201.27:13752] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adoioh3fdONpCON3MUiXfgAAAMc"]
[Sat Apr 11 18:29:54.984274 2026] [:error] [pid 54519:tid 54555] [client 20.91.201.27:38586] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adoioh3fdONpCON3MUiXfwAAAMY"]
[Sat Apr 11 18:29:55.510037 2026] [:error] [pid 54520:tid 54593] [client 20.91.201.27:46174] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adoio8OfMlnGwwoJrMCMrwAAAFE"]
[Sat Apr 11 18:29:56.094533 2026] [:error] [pid 54610:tid 54621] [client 20.91.201.27:17789] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "adoipAe-u3uFASN-RPGXjwAAAQg"]
[Sat Apr 11 18:29:56.623027 2026] [:error] [pid 54518:tid 54525] [client 20.91.201.27:35905] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "adoipKKi5dAhX05ubq02GQAAAIM"]
[Sat Apr 11 18:29:57.145703 2026] [:error] [pid 54610:tid 54616] [client 20.91.201.27:14070] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "adoipQe-u3uFASN-RPGXkwAAAQM"]
[Sat Apr 11 18:29:57.672527 2026] [:error] [pid 54519:tid 54564] [client 20.91.201.27:46652] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "adoipR3fdONpCON3MUiXhAAAAM8"]
[Sat Apr 11 18:29:58.234143 2026] [:error] [pid 54519:tid 54553] [client 20.91.201.27:46632] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "adoiph3fdONpCON3MUiXiAAAAMQ"]
[Sat Apr 11 18:29:58.761851 2026] [:error] [pid 54520:tid 54589] [client 20.91.201.27:23850] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "adoipsOfMlnGwwoJrMCMsgAAAE0"]
[Sat Apr 11 18:29:59.304781 2026] [:error] [pid 65248:tid 65254] [client 20.91.201.27:13546] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "adoipzI-iGHcq-8gSqrmsQAAAAQ"]
[Sat Apr 11 18:29:59.883630 2026] [:error] [pid 54520:tid 54597] [client 20.91.201.27:34011] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "adoip8OfMlnGwwoJrMCMswAAAFU"]
[Sat Apr 11 18:30:00.424942 2026] [:error] [pid 54610:tid 54631] [client 20.91.201.27:44331] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adoiqAe-u3uFASN-RPGXmgAAARI"]
[Sat Apr 11 18:30:00.947387 2026] [:error] [pid 54519:tid 54555] [client 20.91.201.27:12729] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adoiqB3fdONpCON3MUiXjgAAAMY"]
[Sat Apr 11 18:30:01.474103 2026] [:error] [pid 54610:tid 54621] [client 20.91.201.27:13055] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adoiqQe-u3uFASN-RPGXmwAAAQg"]
[Sat Apr 11 18:30:02.000866 2026] [:error] [pid 54518:tid 54537] [client 20.91.201.27:17166] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adoiqaKi5dAhX05ubq02HQAAAI8"]
[Sat Apr 11 18:30:02.544466 2026] [:error] [pid 54519:tid 54560] [client 20.91.201.27:17990] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adoiqh3fdONpCON3MUiXkAAAAMs"]
[Sat Apr 11 18:30:03.066136 2026] [:error] [pid 54519:tid 54564] [client 20.91.201.27:15059] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adoiqx3fdONpCON3MUiXkgAAAM8"]
[Sat Apr 11 18:30:03.604063 2026] [:error] [pid 54610:tid 54623] [client 20.91.201.27:15495] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adoiqwe-u3uFASN-RPGXngAAAQo"]
[Sat Apr 11 18:30:04.155816 2026] [:error] [pid 54520:tid 54577] [client 20.91.201.27:16377] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adoirMOfMlnGwwoJrMCMvAAAAEE"]
[Sat Apr 11 18:30:04.692328 2026] [:error] [pid 54520:tid 54581] [client 20.91.201.27:18245] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adoirMOfMlnGwwoJrMCMwAAAAEU"]
[Sat Apr 11 18:30:05.231307 2026] [:error] [pid 54519:tid 54562] [client 20.91.201.27:13291] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adoirR3fdONpCON3MUiXlgAAAM0"]
[Sat Apr 11 18:30:05.790021 2026] [:error] [pid 54518:tid 54524] [client 20.91.201.27:15098] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adoiraKi5dAhX05ubq02IQAAAII"]
[Sat Apr 11 18:30:06.322530 2026] [:error] [pid 54610:tid 54617] [client 20.91.201.27:15083] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adoirge-u3uFASN-RPGXowAAAQQ"]
[Sat Apr 11 18:30:06.844630 2026] [:error] [pid 54518:tid 54523] [client 20.91.201.27:15075] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adoirqKi5dAhX05ubq02JQAAAIE"]
[Sat Apr 11 18:30:07.442827 2026] [:error] [pid 54518:tid 54544] [client 20.91.201.27:26533] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adoir6Ki5dAhX05ubq02KQAAAJY"]
[Sat Apr 11 18:30:08.052728 2026] [:error] [pid 54518:tid 54524] [client 20.91.201.27:28772] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adoisKKi5dAhX05ubq02MAAAAII"]
[Sat Apr 11 18:30:08.672757 2026] [:error] [pid 54518:tid 54527] [client 20.91.201.27:26523] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adoisKKi5dAhX05ubq02MQAAAIU"]
[Sat Apr 11 18:30:09.257834 2026] [:error] [pid 54610:tid 54613] [client 20.91.201.27:12860] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adoisQe-u3uFASN-RPGXpwAAAQA"]
[Sat Apr 11 18:30:09.807054 2026] [:error] [pid 54610:tid 54621] [client 20.91.201.27:13289] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adoisQe-u3uFASN-RPGXqwAAAQg"]
[Sat Apr 11 18:30:10.359102 2026] [:error] [pid 54610:tid 54623] [client 20.91.201.27:15798] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adoisge-u3uFASN-RPGXrQAAAQo"]
[Sat Apr 11 18:30:10.952617 2026] [:error] [pid 54610:tid 54620] [client 20.91.201.27:16364] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adoisge-u3uFASN-RPGXswAAAQc"]
[Sat Apr 11 18:30:11.498072 2026] [:error] [pid 54519:tid 54564] [client 20.91.201.27:13255] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adoisx3fdONpCON3MUiXngAAAM8"]
[Sat Apr 11 18:30:12.077495 2026] [:error] [pid 65248:tid 65261] [client 20.91.201.27:13248] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adoitDI-iGHcq-8gSqrmugAAAAs"]
[Sat Apr 11 18:30:12.625166 2026] [:error] [pid 65248:tid 65258] [client 20.91.201.27:18584] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adoitDI-iGHcq-8gSqrmvQAAAAg"]
[Sat Apr 11 18:30:13.211377 2026] [:error] [pid 65248:tid 65255] [client 20.91.201.27:23180] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adoitTI-iGHcq-8gSqrmwQAAAAU"]
[Sat Apr 11 18:30:13.860413 2026] [:error] [pid 54610:tid 54619] [client 20.91.201.27:15781] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adoitQe-u3uFASN-RPGXzwAAAQY"]
[Sat Apr 11 18:30:14.444252 2026] [:error] [pid 54610:tid 54614] [client 20.91.201.27:61945] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adoitge-u3uFASN-RPGX0AAAAQE"]
[Sat Apr 11 18:30:15.004734 2026] [:error] [pid 65248:tid 65260] [client 20.91.201.27:23188] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adoitzI-iGHcq-8gSqrmxwAAAAo"]
[Sat Apr 11 18:30:15.565387 2026] [:error] [pid 65248:tid 65254] [client 20.91.201.27:14312] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adoitzI-iGHcq-8gSqrmygAAAAQ"]
[Sat Apr 11 18:30:16.091495 2026] [:error] [pid 65248:tid 65265] [client 20.91.201.27:15760] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adoiuDI-iGHcq-8gSqrmzAAAAA8"]
[Sat Apr 11 18:30:16.611853 2026] [:error] [pid 54610:tid 54621] [client 20.91.201.27:6705] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adoiuAe-u3uFASN-RPGX1AAAAQg"]
[Sat Apr 11 18:30:17.137596 2026] [:error] [pid 54520:tid 54590] [client 20.91.201.27:13793] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adoiucOfMlnGwwoJrMCMzwAAAE4"]
[Sat Apr 11 18:30:17.658399 2026] [:error] [pid 65248:tid 65252] [client 20.91.201.27:14280] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adoiuTI-iGHcq-8gSqrm0wAAAAI"]
[Sat Apr 11 18:30:18.199903 2026] [:error] [pid 54519:tid 54556] [client 20.91.201.27:6697] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adoiuh3fdONpCON3MUiXowAAAMc"]
[Sat Apr 11 18:30:18.719665 2026] [:error] [pid 65248:tid 65251] [client 20.91.201.27:13654] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adoiujI-iGHcq-8gSqrm4AAAAAE"]
[Sat Apr 11 18:30:19.268589 2026] [:error] [pid 65248:tid 65256] [client 20.91.201.27:13252] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adoiuzI-iGHcq-8gSqrm4wAAAAY"]
[Sat Apr 11 18:30:19.789418 2026] [:error] [pid 65248:tid 65258] [client 20.91.201.27:16375] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adoiuzI-iGHcq-8gSqrm5gAAAAg"]
[Sat Apr 11 18:30:20.316161 2026] [:error] [pid 54519:tid 54554] [client 20.91.201.27:42453] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adoivB3fdONpCON3MUiXpQAAAMU"]
[Sat Apr 11 18:30:20.885675 2026] [:error] [pid 54520:tid 54581] [client 20.91.201.27:12833] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adoivMOfMlnGwwoJrMCM4AAAAEU"]
[Sat Apr 11 18:30:21.422005 2026] [:error] [pid 65248:tid 65250] [client 20.91.201.27:6717] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adoivTI-iGHcq-8gSqrm8gAAAAA"]
[Sat Apr 11 18:30:21.969718 2026] [:error] [pid 65248:tid 65274] [client 20.91.201.27:42465] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adoivTI-iGHcq-8gSqrm9gAAABg"]
[Sat Apr 11 18:30:22.504387 2026] [:error] [pid 65248:tid 65259] [client 20.91.201.27:37251] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adoivjI-iGHcq-8gSqrm_AAAAAk"]
[Sat Apr 11 18:30:23.039110 2026] [:error] [pid 54520:tid 54598] [client 20.91.201.27:37292] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adoiv8OfMlnGwwoJrMCM5AAAAFY"]
[Sat Apr 11 18:30:23.564066 2026] [:error] [pid 65248:tid 65261] [client 20.91.201.27:15747] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adoivzI-iGHcq-8gSqrnBAAAAAs"]
[Sat Apr 11 18:30:24.092086 2026] [:error] [pid 65248:tid 65254] [client 20.91.201.27:12853] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adoiwDI-iGHcq-8gSqrnBgAAAAQ"]
[Sat Apr 11 18:30:24.630018 2026] [:error] [pid 54610:tid 54631] [client 20.91.201.27:14284] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adoiwAe-u3uFASN-RPGX2wAAARI"]
[Sat Apr 11 18:30:25.152687 2026] [:error] [pid 65248:tid 65252] [client 20.91.201.27:13790] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adoiwTI-iGHcq-8gSqrnCgAAAAI"]
[Sat Apr 11 18:30:25.678059 2026] [:error] [pid 54520:tid 54588] [client 20.91.201.27:15763] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adoiwcOfMlnGwwoJrMCM5wAAAEw"]
[Sat Apr 11 18:30:26.207894 2026] [:error] [pid 54520:tid 54591] [client 20.91.201.27:29292] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adoiwsOfMlnGwwoJrMCM6wAAAE8"]
[Sat Apr 11 18:30:26.763156 2026] [:error] [pid 54520:tid 54582] [client 20.91.201.27:13131] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adoiwsOfMlnGwwoJrMCM7wAAAEY"]
[Sat Apr 11 18:30:27.311179 2026] [:error] [pid 54520:tid 54599] [client 20.91.201.27:26554] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adoiw8OfMlnGwwoJrMCM8gAAAFc"]
[Sat Apr 11 18:30:27.836333 2026] [:error] [pid 65248:tid 65265] [client 20.91.201.27:15783] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adoiwzI-iGHcq-8gSqrnDQAAAA8"]
[Sat Apr 11 18:30:28.387204 2026] [:error] [pid 65248:tid 65254] [client 20.91.201.27:26513] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adoixDI-iGHcq-8gSqrnEAAAAAQ"]
[Sat Apr 11 18:30:28.939110 2026] [:error] [pid 54610:tid 54624] [client 20.91.201.27:26529] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adoixAe-u3uFASN-RPGX5AAAAQs"]
[Sat Apr 11 18:30:36.288512 2026] [:error] [pid 54518:tid 54533] [client 20.91.201.27:6221] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adoizKKi5dAhX05ubq02UQAAAIs"]
[Sat Apr 11 18:30:36.862095 2026] [:error] [pid 54610:tid 54614] [client 20.91.201.27:26509] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adoizAe-u3uFASN-RPGX7QAAAQE"]
[Sat Apr 11 18:30:37.390478 2026] [:error] [pid 65248:tid 65261] [client 20.91.201.27:6688] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adoizTI-iGHcq-8gSqrnJwAAAAs"]
[Sat Apr 11 18:30:37.948350 2026] [:error] [pid 54520:tid 54598] [client 20.91.201.27:32686] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "adoizcOfMlnGwwoJrMCM_wAAAFY"]
[Sat Apr 11 18:30:38.471757 2026] [:error] [pid 54610:tid 54621] [client 20.91.201.27:37301] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adoizge-u3uFASN-RPGX8gAAAQg"]
[Sat Apr 11 18:30:39.000984 2026] [:error] [pid 54520:tid 54586] [client 20.91.201.27:37278] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adoizsOfMlnGwwoJrMCNAAAAAEo"]
[Sat Apr 11 18:30:39.544160 2026] [:error] [pid 65248:tid 65256] [client 20.91.201.27:43767] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adoizzI-iGHcq-8gSqrnKwAAAAY"]
[Sat Apr 11 18:30:40.071093 2026] [:error] [pid 65248:tid 65253] [client 20.91.201.27:6693] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adoi0DI-iGHcq-8gSqrnLwAAAAM"]
[Sat Apr 11 18:30:40.588453 2026] [:error] [pid 65248:tid 65265] [client 20.91.201.27:43723] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adoi0DI-iGHcq-8gSqrnMQAAAA8"]
[Sat Apr 11 18:30:41.107643 2026] [:error] [pid 65248:tid 65273] [client 20.91.201.27:13804] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adoi0TI-iGHcq-8gSqrnMgAAABc"]
[Sat Apr 11 18:30:41.646844 2026] [:error] [pid 65248:tid 65270] [client 20.91.201.27:6262] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adoi0TI-iGHcq-8gSqrnNQAAABQ"]
[Sat Apr 11 18:30:42.170832 2026] [:error] [pid 65248:tid 65262] [client 20.91.201.27:12813] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adoi0jI-iGHcq-8gSqrnNwAAAAw"]
[Sat Apr 11 18:30:42.692407 2026] [:error] [pid 54519:tid 54558] [client 20.91.201.27:32645] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adoi0h3fdONpCON3MUiXvQAAAMk"]
[Sat Apr 11 18:30:43.283913 2026] [:error] [pid 65248:tid 65250] [client 20.91.201.27:19452] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adoi0zI-iGHcq-8gSqrnOAAAAAA"]
[Sat Apr 11 18:30:43.845634 2026] [:error] [pid 65248:tid 65271] [client 20.91.201.27:29302] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adoi0zI-iGHcq-8gSqrnPAAAABU"]
[Sat Apr 11 18:30:44.366084 2026] [:error] [pid 54518:tid 54525] [client 20.91.201.27:12816] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adoi1KKi5dAhX05ubq02VQAAAIM"]
[Sat Apr 11 18:30:44.907804 2026] [:error] [pid 54520:tid 54582] [client 20.91.201.27:13792] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adoi1MOfMlnGwwoJrMCNCQAAAEY"]
[Sat Apr 11 18:30:45.435896 2026] [:error] [pid 54518:tid 54541] [client 20.91.201.27:12801] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adoi1aKi5dAhX05ubq02VwAAAJM"]
[Sat Apr 11 18:30:45.964706 2026] [:error] [pid 54520:tid 54597] [client 20.91.201.27:6254] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adoi1cOfMlnGwwoJrMCNDAAAAFU"]
[Sat Apr 11 18:30:46.498674 2026] [:error] [pid 54520:tid 54600] [client 20.91.201.27:32677] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adoi1sOfMlnGwwoJrMCNDwAAAFg"]
[Sat Apr 11 18:30:47.025287 2026] [:error] [pid 54519:tid 54554] [client 20.91.201.27:6209] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adoi1x3fdONpCON3MUiXwwAAAMU"]
[Sat Apr 11 18:30:47.553414 2026] [:error] [pid 54518:tid 54540] [client 20.91.201.27:14299] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adoi16Ki5dAhX05ubq02WwAAAJI"]
[Sat Apr 11 18:30:48.100903 2026] [:error] [pid 54520:tid 54596] [client 20.91.201.27:43731] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adoi2MOfMlnGwwoJrMCNEwAAAFQ"]
[Sat Apr 11 18:30:48.636377 2026] [:error] [pid 65248:tid 65258] [client 20.91.201.27:15801] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adoi2DI-iGHcq-8gSqrnSQAAAAg"]
[Sat Apr 11 18:30:49.165751 2026] [:error] [pid 54520:tid 54578] [client 20.91.201.27:13771] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adoi2cOfMlnGwwoJrMCNFAAAAEI"]
[Sat Apr 11 18:30:49.736043 2026] [:error] [pid 54520:tid 54581] [client 20.91.201.27:14289] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adoi2cOfMlnGwwoJrMCNFgAAAEU"]
[Sat Apr 11 18:30:50.259977 2026] [:error] [pid 65248:tid 65268] [client 20.91.201.27:13690] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adoi2jI-iGHcq-8gSqrnTAAAABI"]
[Sat Apr 11 18:30:50.786679 2026] [:error] [pid 65248:tid 65252] [client 20.91.201.27:32642] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adoi2jI-iGHcq-8gSqrnTQAAAAI"]
[Sat Apr 11 18:30:51.332519 2026] [:error] [pid 54520:tid 54597] [client 20.91.201.27:44839] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adoi28OfMlnGwwoJrMCNGAAAAFU"]
[Sat Apr 11 18:30:51.886588 2026] [:error] [pid 54610:tid 54628] [client 20.91.201.27:15768] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adoi2we-u3uFASN-RPGX_AAAAQ8"]
[Sat Apr 11 18:30:52.415887 2026] [:error] [pid 65248:tid 65266] [client 20.91.201.27:13688] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adoi3DI-iGHcq-8gSqrnUgAAABA"]
[Sat Apr 11 18:30:52.945216 2026] [:error] [pid 54610:tid 54634] [client 20.91.201.27:29308] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adoi3Ae-u3uFASN-RPGYAQAAARU"]
[Sat Apr 11 18:30:53.466713 2026] [:error] [pid 54610:tid 54636] [client 20.91.201.27:6714] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adoi3Qe-u3uFASN-RPGYBQAAARc"]
[Sat Apr 11 18:30:53.989108 2026] [:error] [pid 54610:tid 54613] [client 20.91.201.27:13648] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adoi3Qe-u3uFASN-RPGYCAAAAQA"]
[Sat Apr 11 18:30:54.557421 2026] [:error] [pid 54519:tid 54568] [client 20.91.201.27:37275] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adoi3h3fdONpCON3MUiXxwAAANM"]
[Sat Apr 11 18:30:55.085025 2026] [:error] [pid 54518:tid 54535] [client 20.91.201.27:43753] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adoi36Ki5dAhX05ubq02XgAAAI0"]
[Sat Apr 11 18:30:55.608572 2026] [:error] [pid 54520:tid 54590] [client 20.91.201.27:29275] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adoi38OfMlnGwwoJrMCNGwAAAE4"]
[Sat Apr 11 18:30:56.135219 2026] [:error] [pid 65248:tid 65265] [client 20.91.201.27:44810] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adoi4DI-iGHcq-8gSqrnVQAAAA8"]
[Sat Apr 11 18:30:56.671498 2026] [:error] [pid 65248:tid 65258] [client 20.91.201.27:13632] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adoi4DI-iGHcq-8gSqrnVgAAAAg"]
[Sat Apr 11 18:30:57.213530 2026] [:error] [pid 54520:tid 54587] [client 20.91.201.27:37260] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adoi4cOfMlnGwwoJrMCNHgAAAEs"]
[Sat Apr 11 18:30:57.739647 2026] [:error] [pid 54520:tid 54588] [client 20.91.201.27:32640] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adoi4cOfMlnGwwoJrMCNHwAAAEw"]
[Sat Apr 11 18:30:58.330983 2026] [:error] [pid 54610:tid 54623] [client 20.91.201.27:13260] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adoi4ge-u3uFASN-RPGYDAAAAQo"]
[Sat Apr 11 18:30:58.857804 2026] [:error] [pid 54610:tid 54619] [client 20.91.201.27:43749] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adoi4ge-u3uFASN-RPGYDgAAAQY"]
[Sat Apr 11 18:30:59.392420 2026] [:error] [pid 65248:tid 65250] [client 20.91.201.27:16117] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adoi4zI-iGHcq-8gSqrnYQAAAAA"]
[Sat Apr 11 18:30:59.925662 2026] [:error] [pid 65248:tid 65269] [client 20.91.201.27:29264] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adoi4zI-iGHcq-8gSqrnYwAAABM"]
[Sat Apr 11 18:31:00.475468 2026] [:error] [pid 54520:tid 54584] [client 20.91.201.27:13689] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adoi5MOfMlnGwwoJrMCNIwAAAEg"]
[Sat Apr 11 18:31:01.003678 2026] [:error] [pid 65248:tid 65273] [client 20.91.201.27:16096] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adoi5TI-iGHcq-8gSqrnZAAAABc"]
[Sat Apr 11 18:31:01.540299 2026] [:error] [pid 65248:tid 65265] [client 20.91.201.27:14722] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adoi5TI-iGHcq-8gSqrnZQAAAA8"]
[Sat Apr 11 18:31:02.095389 2026] [:error] [pid 65248:tid 65268] [client 20.91.201.27:44836] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adoi5jI-iGHcq-8gSqrnaQAAABI"]
[Sat Apr 11 18:31:02.630741 2026] [:error] [pid 65248:tid 65259] [client 20.91.201.27:44858] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adoi5jI-iGHcq-8gSqrnbgAAAAk"]
[Sat Apr 11 18:31:03.157060 2026] [:error] [pid 65248:tid 65250] [client 20.91.201.27:44802] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adoi5zI-iGHcq-8gSqrncQAAAAA"]
[Sat Apr 11 18:31:03.694665 2026] [:error] [pid 54518:tid 54522] [client 20.91.201.27:37291] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adoi56Ki5dAhX05ubq02ZAAAAIA"]
[Sat Apr 11 18:31:04.228282 2026] [:error] [pid 54610:tid 54614] [client 20.91.201.27:32991] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adoi6Ae-u3uFASN-RPGYFQAAAQE"]
[Sat Apr 11 18:31:04.750593 2026] [:error] [pid 54518:tid 54536] [client 20.91.201.27:29299] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adoi6KKi5dAhX05ubq02ZgAAAI4"]
[Sat Apr 11 18:31:05.290033 2026] [:error] [pid 54518:tid 54528] [client 20.91.201.27:13694] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adoi6aKi5dAhX05ubq02ZwAAAIY"]
[Sat Apr 11 18:31:05.841404 2026] [:error] [pid 54519:tid 54573] [client 20.91.201.27:37306] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adoi6R3fdONpCON3MUiXygAAANg"]
[Sat Apr 11 18:31:06.360444 2026] [:error] [pid 54610:tid 54629] [client 20.91.201.27:13655] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adoi6ge-u3uFASN-RPGYFwAAARA"]
[Sat Apr 11 18:31:06.892490 2026] [:error] [pid 65248:tid 65269] [client 20.91.201.27:16085] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adoi6jI-iGHcq-8gSqrnfgAAABM"]
[Sat Apr 11 18:31:07.436554 2026] [:error] [pid 65248:tid 65265] [client 20.91.201.27:32697] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adoi6zI-iGHcq-8gSqrnfwAAAA8"]
[Sat Apr 11 18:31:07.970568 2026] [:error] [pid 54518:tid 54546] [client 20.91.201.27:16093] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adoi66Ki5dAhX05ubq02agAAAJg"]
[Sat Apr 11 18:31:08.493596 2026] [:error] [pid 54519:tid 54557] [client 20.91.201.27:14734] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adoi7B3fdONpCON3MUiXzQAAAMg"]
[Sat Apr 11 18:31:09.036718 2026] [:error] [pid 54610:tid 54624] [client 20.91.201.27:26546] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adoi7Qe-u3uFASN-RPGYIgAAAQs"]
[Sat Apr 11 18:31:09.573431 2026] [:error] [pid 54610:tid 54615] [client 20.91.201.27:6240] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adoi7Qe-u3uFASN-RPGYKAAAAQI"]
[Sat Apr 11 18:31:10.102047 2026] [:error] [pid 54610:tid 54618] [client 20.91.201.27:32993] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adoi7ge-u3uFASN-RPGYKgAAAQU"]
[Sat Apr 11 18:31:10.653163 2026] [:error] [pid 54519:tid 54566] [client 20.91.201.27:14770] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adoi7h3fdONpCON3MUiX0AAAANE"]
[Sat Apr 11 18:31:11.184359 2026] [:error] [pid 54520:tid 54590] [client 20.91.201.27:39043] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adoi78OfMlnGwwoJrMCNKQAAAE4"]
[Sat Apr 11 18:31:11.708986 2026] [:error] [pid 54610:tid 54631] [client 20.91.201.27:22703] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adoi7we-u3uFASN-RPGYLwAAARI"]
[Sat Apr 11 18:31:12.232994 2026] [:error] [pid 54520:tid 54596] [client 20.91.201.27:13650] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adoi8MOfMlnGwwoJrMCNLAAAAFQ"]
[Sat Apr 11 18:31:12.751281 2026] [:error] [pid 54520:tid 54594] [client 20.91.201.27:32679] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adoi8MOfMlnGwwoJrMCNLQAAAFI"]
[Sat Apr 11 18:31:13.268492 2026] [:error] [pid 54519:tid 54568] [client 20.91.201.27:33010] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adoi8R3fdONpCON3MUiX1QAAANM"]
[Sat Apr 11 18:31:13.794054 2026] [:error] [pid 54518:tid 54536] [client 20.91.201.27:32961] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adoi8aKi5dAhX05ubq02dAAAAI4"]
[Sat Apr 11 18:31:14.319651 2026] [:error] [pid 54520:tid 54599] [client 20.91.201.27:22709] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adoi8sOfMlnGwwoJrMCNNAAAAFc"]
[Sat Apr 11 18:31:14.848530 2026] [:error] [pid 54520:tid 54597] [client 20.91.201.27:39095] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adoi8sOfMlnGwwoJrMCNNQAAAFU"]
[Sat Apr 11 18:31:15.379672 2026] [:error] [pid 54520:tid 54586] [client 20.91.201.27:19428] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adoi88OfMlnGwwoJrMCNOAAAAEo"]
[Sat Apr 11 18:31:15.898889 2026] [:error] [pid 54518:tid 54546] [client 20.91.201.27:22666] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adoi86Ki5dAhX05ubq02dwAAAJg"]
[Sat Apr 11 18:31:16.419543 2026] [:error] [pid 54520:tid 54587] [client 20.91.201.27:32968] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adoi9MOfMlnGwwoJrMCNOgAAAEs"]
[Sat Apr 11 18:31:16.958430 2026] [:error] [pid 54520:tid 54588] [client 20.91.201.27:44813] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adoi9MOfMlnGwwoJrMCNPAAAAEw"]
[Sat Apr 11 18:31:17.512672 2026] [:error] [pid 54519:tid 54572] [client 20.91.201.27:38523] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adoi9R3fdONpCON3MUiX2gAAANc"]
[Sat Apr 11 18:31:18.034722 2026] [:error] [pid 54518:tid 54543] [client 20.91.201.27:16120] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adoi9qKi5dAhX05ubq02fgAAAJU"]
[Sat Apr 11 18:31:18.554000 2026] [:error] [pid 54518:tid 54522] [client 20.91.201.27:33017] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adoi9qKi5dAhX05ubq02gAAAAIA"]
[Sat Apr 11 18:31:19.075340 2026] [:error] [pid 54520:tid 54577] [client 20.91.201.27:19439] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adoi98OfMlnGwwoJrMCNPQAAAEE"]
[Sat Apr 11 18:31:19.618703 2026] [:error] [pid 54520:tid 54576] [client 20.91.201.27:20124] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adoi98OfMlnGwwoJrMCNQAAAAEA"]
[Sat Apr 11 18:31:20.135794 2026] [:error] [pid 54610:tid 54617] [client 20.91.201.27:14768] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adoi-Ae-u3uFASN-RPGYQQAAAQQ"]
[Sat Apr 11 18:31:20.742963 2026] [:error] [pid 54518:tid 54538] [client 20.91.201.27:61227] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adoi-KKi5dAhX05ubq02hAAAAJA"]
[Sat Apr 11 18:31:21.353124 2026] [:error] [pid 54520:tid 54586] [client 20.91.201.27:35308] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adoi-cOfMlnGwwoJrMCNRAAAAEo"]
[Sat Apr 11 18:31:21.891730 2026] [:error] [pid 65248:tid 65267] [client 20.91.201.27:32986] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adoi-TI-iGHcq-8gSqrnkgAAABE"]
[Sat Apr 11 18:31:22.430654 2026] [:error] [pid 54518:tid 54535] [client 20.91.201.27:24836] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adoi-qKi5dAhX05ubq02hwAAAI0"]
[Sat Apr 11 18:31:22.959690 2026] [:error] [pid 65248:tid 65266] [client 20.91.201.27:22717] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adoi-jI-iGHcq-8gSqrnkwAAABA"]
[Sat Apr 11 18:31:23.488992 2026] [:error] [pid 65248:tid 65256] [client 20.91.201.27:32644] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adoi-zI-iGHcq-8gSqrnlQAAAAY"]
[Sat Apr 11 18:31:24.019536 2026] [:error] [pid 65248:tid 65269] [client 20.91.201.27:19402] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adoi_DI-iGHcq-8gSqrnlwAAABM"]
[Sat Apr 11 18:31:24.543834 2026] [:error] [pid 54518:tid 54530] [client 20.91.201.27:16100] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adoi_KKi5dAhX05ubq02iQAAAIg"]
[Sat Apr 11 18:31:25.083837 2026] [:error] [pid 54520:tid 54588] [client 20.91.201.27:32643] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adoi_cOfMlnGwwoJrMCNRgAAAEw"]
[Sat Apr 11 18:31:25.614689 2026] [:error] [pid 54519:tid 54556] [client 20.91.201.27:13650] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adoi_R3fdONpCON3MUiX3gAAAMc"]
[Sat Apr 11 18:31:26.137992 2026] [:error] [pid 65248:tid 65250] [client 20.91.201.27:22686] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adoi_jI-iGHcq-8gSqrnpAAAAAA"]
[Sat Apr 11 18:31:26.718305 2026] [:error] [pid 65248:tid 65263] [client 20.91.201.27:32674] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adoi_jI-iGHcq-8gSqrnpwAAAA0"]
[Sat Apr 11 18:31:27.239209 2026] [:error] [pid 65248:tid 65268] [client 20.91.201.27:39084] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adoi_zI-iGHcq-8gSqrnqQAAABI"]
[Sat Apr 11 18:31:27.757926 2026] [:error] [pid 54610:tid 54616] [client 20.91.201.27:39659] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adoi_we-u3uFASN-RPGYVQAAAQM"]
[Sat Apr 11 18:31:28.299422 2026] [:error] [pid 65248:tid 65261] [client 20.91.201.27:35272] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adojADI-iGHcq-8gSqrnqwAAAAs"]
[Sat Apr 11 18:31:28.886981 2026] [:error] [pid 54519:tid 54555] [client 20.91.201.27:14754] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adojAB3fdONpCON3MUiX4QAAAMY"]
[Sat Apr 11 18:31:29.416876 2026] [:error] [pid 54519:tid 54559] [client 20.91.201.27:35299] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adojAR3fdONpCON3MUiX4gAAAMo"]
[Sat Apr 11 18:31:29.943453 2026] [:error] [pid 54519:tid 54568] [client 20.91.201.27:24840] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adojAR3fdONpCON3MUiX5AAAANM"]
[Sat Apr 11 18:31:30.470115 2026] [:error] [pid 54518:tid 54524] [client 20.91.201.27:14775] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adojAqKi5dAhX05ubq02kAAAAII"]
[Sat Apr 11 18:31:31.007759 2026] [:error] [pid 54610:tid 54623] [client 20.91.201.27:32693] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adojAwe-u3uFASN-RPGYXwAAAQo"]
[Sat Apr 11 18:31:31.525635 2026] [:error] [pid 65248:tid 65257] [client 20.91.201.27:14728] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adojAzI-iGHcq-8gSqrntwAAAAc"]
[Sat Apr 11 18:31:32.049454 2026] [:error] [pid 54610:tid 54622] [client 20.91.201.27:39062] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adojBAe-u3uFASN-RPGYYgAAAQk"]
[Sat Apr 11 18:31:32.569663 2026] [:error] [pid 54610:tid 54636] [client 20.91.201.27:16122] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adojBAe-u3uFASN-RPGYZAAAARc"]
[Sat Apr 11 18:31:33.090861 2026] [:error] [pid 54520:tid 54576] [client 20.91.201.27:17990] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adojBcOfMlnGwwoJrMCNTAAAAEA"]
[Sat Apr 11 18:31:33.637299 2026] [:error] [pid 54518:tid 54531] [client 20.91.201.27:37302] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adojBaKi5dAhX05ubq02lAAAAIk"]
[Sat Apr 11 18:31:34.157796 2026] [:error] [pid 54610:tid 54615] [client 20.91.201.27:43738] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adojBge-u3uFASN-RPGYbAAAAQI"]
[Sat Apr 11 18:31:34.687911 2026] [:error] [pid 54520:tid 54578] [client 20.91.201.27:6238] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adojBsOfMlnGwwoJrMCNTQAAAEI"]
[Sat Apr 11 18:31:35.255764 2026] [:error] [pid 54520:tid 54581] [client 20.91.201.27:13649] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adojB8OfMlnGwwoJrMCNTgAAAEU"]
[Sat Apr 11 18:31:35.775906 2026] [:error] [pid 54519:tid 54557] [client 20.91.201.27:14737] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adojBx3fdONpCON3MUiX6QAAAMg"]
[Sat Apr 11 18:31:37.654687 2026] [:error] [pid 65248:tid 65273] [client 20.91.201.27:32692] [client 20.91.201.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adojCTI-iGHcq-8gSqrnywAAABc"]
[Sat Apr 11 18:31:43.548734 2026] [:error] [pid 54520:tid 54588] [client 20.91.201.27:13664] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "adojD8OfMlnGwwoJrMCNbgAAAEw"]
[Sat Apr 11 18:31:44.076636 2026] [:error] [pid 65248:tid 65272] [client 20.91.201.27:23178] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "adojEDI-iGHcq-8gSqrn3QAAABY"]
[Sat Apr 11 18:31:44.714771 2026] [:error] [pid 65248:tid 65264] [client 20.91.201.27:18577] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "adojEDI-iGHcq-8gSqrn5AAAAA4"]
[Sat Apr 11 18:31:45.289823 2026] [:error] [pid 65248:tid 65256] [client 20.91.201.27:12727] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "adojETI-iGHcq-8gSqrn6QAAAAY"]
[Sat Apr 11 18:31:45.816632 2026] [:error] [pid 54520:tid 54583] [client 20.91.201.27:14270] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "adojEcOfMlnGwwoJrMCNcQAAAEc"]
[Sat Apr 11 18:31:46.354168 2026] [:error] [pid 65248:tid 65258] [client 20.91.201.27:18021] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "adojEjI-iGHcq-8gSqrn7QAAAAg"]
[Sat Apr 11 18:31:46.913289 2026] [:error] [pid 65248:tid 65262] [client 20.91.201.27:15574] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "adojEjI-iGHcq-8gSqrn8AAAAAw"]
[Sat Apr 11 18:31:47.427830 2026] [:error] [pid 65248:tid 65263] [client 20.91.201.27:15603] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "adojEzI-iGHcq-8gSqrn9AAAAA0"]
[Sat Apr 11 18:31:47.942209 2026] [:error] [pid 65248:tid 65271] [client 20.91.201.27:18007] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adojEzI-iGHcq-8gSqrn-AAAABU"]
[Sat Apr 11 18:31:48.473676 2026] [:error] [pid 65248:tid 65266] [client 20.91.201.27:14059] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adojFDI-iGHcq-8gSqrn_AAAABA"]
[Sat Apr 11 18:31:48.999316 2026] [:error] [pid 65248:tid 65259] [client 20.91.201.27:46629] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adojFDI-iGHcq-8gSqroAQAAAAk"]
[Sat Apr 11 18:31:49.526110 2026] [:error] [pid 54610:tid 54634] [client 20.91.201.27:34044] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adojFQe-u3uFASN-RPGYfgAAARU"]
[Sat Apr 11 18:31:50.064280 2026] [:error] [pid 54519:tid 54563] [client 20.91.201.27:34028] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adojFh3fdONpCON3MUiX8wAAAM4"]
[Sat Apr 11 18:31:50.587308 2026] [:error] [pid 65248:tid 65267] [client 20.91.201.27:12621] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adojFjI-iGHcq-8gSqroDQAAABE"]
[Sat Apr 11 18:31:51.108100 2026] [:error] [pid 54520:tid 54582] [client 20.91.201.27:17759] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adojF8OfMlnGwwoJrMCNdgAAAEY"]
[Sat Apr 11 18:31:51.635812 2026] [:error] [pid 65248:tid 65255] [client 20.91.201.27:7056] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adojFzI-iGHcq-8gSqroEwAAAAU"]
[Sat Apr 11 18:31:52.156767 2026] [:error] [pid 65248:tid 65261] [client 20.91.201.27:17734] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adojGDI-iGHcq-8gSqroGQAAAAs"]
[Sat Apr 11 18:31:52.687080 2026] [:error] [pid 65248:tid 65274] [client 20.91.201.27:34103] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adojGDI-iGHcq-8gSqroHgAAABg"]
[Sat Apr 11 18:31:53.210470 2026] [:error] [pid 65248:tid 65262] [client 20.91.201.27:29345] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adojGTI-iGHcq-8gSqroIQAAAAw"]
[Sat Apr 11 18:31:53.731284 2026] [:error] [pid 65248:tid 65251] [client 20.91.201.27:18245] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adojGTI-iGHcq-8gSqroJgAAAAE"]
[Sat Apr 11 18:31:54.261270 2026] [:error] [pid 65248:tid 65252] [client 20.91.201.27:31199] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adojGjI-iGHcq-8gSqroLgAAAAI"]
[Sat Apr 11 18:31:54.786685 2026] [:error] [pid 65248:tid 65250] [client 20.91.201.27:44359] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adojGjI-iGHcq-8gSqroNgAAAAA"]
[Sat Apr 11 18:31:55.310329 2026] [:error] [pid 65248:tid 65268] [client 20.91.201.27:19824] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adojGzI-iGHcq-8gSqroPwAAABI"]
[Sat Apr 11 18:31:55.972523 2026] [:error] [pid 65248:tid 65267] [client 20.91.201.27:26470] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adojGzI-iGHcq-8gSqroSQAAABE"]
[Sat Apr 11 18:31:56.506849 2026] [:error] [pid 54519:tid 54553] [client 20.91.201.27:18257] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adojHB3fdONpCON3MUiX-AAAAMQ"]
[Sat Apr 11 18:31:57.094146 2026] [:error] [pid 65248:tid 65251] [client 20.91.201.27:6980] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adojHTI-iGHcq-8gSqroUQAAAAE"]
[Sat Apr 11 18:31:57.614909 2026] [:error] [pid 54610:tid 54637] [client 20.91.201.27:18686] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adojHQe-u3uFASN-RPGYgQAAARg"]
[Sat Apr 11 18:31:58.192050 2026] [:error] [pid 65248:tid 65271] [client 20.91.201.27:6723] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adojHjI-iGHcq-8gSqroXgAAABU"]
[Sat Apr 11 18:31:58.753442 2026] [:error] [pid 65248:tid 65268] [client 20.91.201.27:28407] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adojHjI-iGHcq-8gSqroZwAAABI"]
[Sat Apr 11 18:31:59.285511 2026] [:error] [pid 54520:tid 54591] [client 20.91.201.27:13136] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adojH8OfMlnGwwoJrMCNfQAAAE8"]
[Sat Apr 11 18:31:59.816178 2026] [:error] [pid 54518:tid 54538] [client 20.91.201.27:13175] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adojH6Ki5dAhX05ubq02mgAAAJA"]
[Sat Apr 11 18:32:00.402362 2026] [:error] [pid 54520:tid 54576] [client 20.91.201.27:27542] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adojIMOfMlnGwwoJrMCNggAAAEA"]
[Sat Apr 11 18:32:00.984588 2026] [:error] [pid 54610:tid 54621] [client 20.91.201.27:6409] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adojIAe-u3uFASN-RPGYhQAAAQg"]
[Sat Apr 11 18:32:01.532591 2026] [:error] [pid 65248:tid 65268] [client 20.91.201.27:31281] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adojITI-iGHcq-8gSqroeAAAABI"]
[Sat Apr 11 18:32:02.064796 2026] [:error] [pid 54610:tid 54614] [client 20.91.201.27:32310] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adojIge-u3uFASN-RPGYhwAAAQE"]
[Sat Apr 11 18:32:02.612394 2026] [:error] [pid 54610:tid 54630] [client 20.91.201.27:16788] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adojIge-u3uFASN-RPGYiAAAARE"]
[Sat Apr 11 18:32:03.144029 2026] [:error] [pid 54610:tid 54629] [client 20.91.201.27:13605] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adojIwe-u3uFASN-RPGYiQAAARA"]
[Sat Apr 11 18:32:03.684762 2026] [:error] [pid 54518:tid 54543] [client 20.91.201.27:6317] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adojI6Ki5dAhX05ubq02ogAAAJU"]
[Sat Apr 11 18:32:04.243069 2026] [:error] [pid 54519:tid 54561] [client 20.91.201.27:33578] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adojJB3fdONpCON3MUiX_gAAAMw"]
[Sat Apr 11 18:32:04.825686 2026] [:error] [pid 54520:tid 54587] [client 20.91.201.27:16806] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adojJMOfMlnGwwoJrMCNhwAAAEs"]
[Sat Apr 11 18:32:05.366528 2026] [:error] [pid 54519:tid 54567] [client 20.91.201.27:6289] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adojJR3fdONpCON3MUiYAAAAANI"]
[Sat Apr 11 18:32:05.936689 2026] [:error] [pid 65248:tid 65261] [client 20.91.201.27:43041] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adojJTI-iGHcq-8gSqrogQAAAAs"]
[Sat Apr 11 18:32:06.453969 2026] [:error] [pid 65248:tid 65250] [client 20.91.201.27:6314] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adojJjI-iGHcq-8gSqrohAAAAAA"]
[Sat Apr 11 18:32:06.972579 2026] [:error] [pid 54518:tid 54537] [client 20.91.201.27:12550] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adojJqKi5dAhX05ubq02pAAAAI8"]
[Sat Apr 11 18:32:07.489832 2026] [:error] [pid 54610:tid 54630] [client 20.91.201.27:43057] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adojJwe-u3uFASN-RPGYkgAAARE"]
[Sat Apr 11 18:32:08.018705 2026] [:error] [pid 65248:tid 65270] [client 20.91.201.27:12577] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adojKDI-iGHcq-8gSqrohwAAABQ"]
[Sat Apr 11 18:32:08.537985 2026] [:error] [pid 65248:tid 65273] [client 20.91.201.27:7141] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adojKDI-iGHcq-8gSqroiQAAABc"]
[Sat Apr 11 18:32:09.058923 2026] [:error] [pid 65248:tid 65261] [client 20.91.201.27:12562] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adojKTI-iGHcq-8gSqrojAAAAAs"]
[Sat Apr 11 18:32:09.639575 2026] [:error] [pid 54518:tid 54525] [client 20.91.201.27:16793] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adojKaKi5dAhX05ubq02pgAAAIM"]
[Sat Apr 11 18:32:10.187611 2026] [:error] [pid 65248:tid 65256] [client 20.91.201.27:7108] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adojKjI-iGHcq-8gSqrokAAAAAY"]
[Sat Apr 11 18:32:10.714535 2026] [:error] [pid 65248:tid 65270] [client 20.91.201.27:36621] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adojKjI-iGHcq-8gSqrokwAAABQ"]
[Sat Apr 11 18:32:11.244809 2026] [:error] [pid 65248:tid 65269] [client 20.91.201.27:36602] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adojKzI-iGHcq-8gSqrolgAAABM"]
[Sat Apr 11 18:32:11.772423 2026] [:error] [pid 65248:tid 65273] [client 20.91.201.27:37914] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adojKzI-iGHcq-8gSqrolwAAABc"]
[Sat Apr 11 18:32:12.304777 2026] [:error] [pid 65248:tid 65260] [client 20.91.201.27:42411] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adojLDI-iGHcq-8gSqromQAAAAo"]
[Sat Apr 11 18:32:12.826011 2026] [:error] [pid 54610:tid 54624] [client 20.91.201.27:6372] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adojLAe-u3uFASN-RPGYnAAAAQs"]
[Sat Apr 11 18:32:13.368922 2026] [:error] [pid 54519:tid 54572] [client 20.91.201.27:17521] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adojLR3fdONpCON3MUiYBAAAANc"]
[Sat Apr 11 18:32:13.902328 2026] [:error] [pid 54610:tid 54625] [client 20.91.201.27:12891] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "adojLQe-u3uFASN-RPGYnQAAAQw"]
[Sat Apr 11 18:32:14.437604 2026] [:error] [pid 54520:tid 54586] [client 20.91.201.27:14478] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "adojLsOfMlnGwwoJrMCNkgAAAEo"]
[Sat Apr 11 18:32:14.963647 2026] [:error] [pid 54520:tid 54588] [client 20.91.201.27:12564] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "adojLsOfMlnGwwoJrMCNlQAAAEw"]
[Sat Apr 11 18:32:15.512471 2026] [:error] [pid 54610:tid 54621] [client 20.91.201.27:36623] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "adojLwe-u3uFASN-RPGYngAAAQg"]
[Sat Apr 11 18:32:16.053487 2026] [:error] [pid 54519:tid 54554] [client 20.91.201.27:56357] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "adojMB3fdONpCON3MUiYCQAAAMU"]
[Sat Apr 11 18:32:16.583761 2026] [:error] [pid 54610:tid 54630] [client 20.91.201.27:15285] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "adojMAe-u3uFASN-RPGYoAAAARE"]
[Sat Apr 11 18:32:17.127715 2026] [:error] [pid 54519:tid 54560] [client 20.91.201.27:32638] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "adojMR3fdONpCON3MUiYCwAAAMs"]
[Sat Apr 11 18:32:17.721432 2026] [:error] [pid 54610:tid 54634] [client 20.91.201.27:26952] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "adojMQe-u3uFASN-RPGYowAAARU"]
[Sat Apr 11 18:32:18.252503 2026] [:error] [pid 54519:tid 54568] [client 20.91.201.27:26991] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adojMh3fdONpCON3MUiYDAAAANM"]
[Sat Apr 11 18:32:18.785640 2026] [:error] [pid 54610:tid 54629] [client 20.91.201.27:56405] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adojMge-u3uFASN-RPGYpwAAARA"]
[Sat Apr 11 18:32:19.316179 2026] [:error] [pid 54518:tid 54535] [client 20.91.201.27:6388] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adojM6Ki5dAhX05ubq02rAAAAI0"]
[Sat Apr 11 18:32:19.838660 2026] [:error] [pid 54520:tid 54597] [client 20.91.201.27:26945] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adojM8OfMlnGwwoJrMCNnQAAAFU"]
[Sat Apr 11 18:32:20.370295 2026] [:error] [pid 65248:tid 65271] [client 20.91.201.27:24347] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adojNDI-iGHcq-8gSqroqQAAABU"]
[Sat Apr 11 18:32:20.920225 2026] [:error] [pid 65248:tid 65250] [client 20.91.201.27:61866] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adojNDI-iGHcq-8gSqroqwAAAAA"]
[Sat Apr 11 18:32:21.488065 2026] [:error] [pid 65248:tid 65251] [client 20.91.201.27:37916] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adojNTI-iGHcq-8gSqrosAAAAAE"]
[Sat Apr 11 18:32:22.013714 2026] [:error] [pid 65248:tid 65253] [client 20.91.201.27:39013] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adojNjI-iGHcq-8gSqrosQAAAAM"]
[Sat Apr 11 18:32:22.547968 2026] [:error] [pid 65248:tid 65262] [client 20.91.201.27:36636] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adojNjI-iGHcq-8gSqrotgAAAAw"]
[Sat Apr 11 18:32:23.181558 2026] [:error] [pid 65248:tid 65266] [client 20.91.201.27:36544] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adojNzI-iGHcq-8gSqrowAAAABA"]
[Sat Apr 11 18:32:23.711916 2026] [:error] [pid 65248:tid 65270] [client 20.91.201.27:36568] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adojNzI-iGHcq-8gSqrowgAAABQ"]
[Sat Apr 11 18:32:24.252877 2026] [:error] [pid 65248:tid 65260] [client 20.91.201.27:36609] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adojODI-iGHcq-8gSqroxAAAAAo"]
[Sat Apr 11 18:32:24.907462 2026] [:error] [pid 54610:tid 54615] [client 20.91.201.27:6544] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adojOAe-u3uFASN-RPGYrQAAAQI"]
[Sat Apr 11 18:32:25.515634 2026] [:error] [pid 65248:tid 65251] [client 20.91.201.27:17519] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adojOTI-iGHcq-8gSqroyQAAAAE"]
[Sat Apr 11 18:32:26.369071 2026] [:error] [pid 54610:tid 54635] [client 20.91.201.27:19020] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adojOge-u3uFASN-RPGYrwAAARY"]
[Sat Apr 11 18:32:26.907425 2026] [:error] [pid 54518:tid 54541] [client 20.91.201.27:24366] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adojOqKi5dAhX05ubq02tQAAAJM"]
[Sat Apr 11 18:32:27.510000 2026] [:error] [pid 54610:tid 54632] [client 20.91.201.27:6193] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adojOwe-u3uFASN-RPGYswAAARM"]
[Sat Apr 11 18:32:28.070461 2026] [:error] [pid 54610:tid 54622] [client 20.91.201.27:6540] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adojPAe-u3uFASN-RPGYtgAAAQk"]
[Sat Apr 11 18:32:28.609849 2026] [:error] [pid 54610:tid 54619] [client 20.91.201.27:26956] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adojPAe-u3uFASN-RPGYtwAAAQY"]
[Sat Apr 11 18:32:29.242305 2026] [:error] [pid 54610:tid 54627] [client 20.91.201.27:37850] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adojPQe-u3uFASN-RPGYuQAAAQ4"]
[Sat Apr 11 18:32:29.782506 2026] [:error] [pid 54520:tid 54581] [client 20.91.201.27:6189] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adojPcOfMlnGwwoJrMCNqgAAAEU"]
[Sat Apr 11 18:32:30.350712 2026] [:error] [pid 54610:tid 54636] [client 20.91.201.27:26987] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adojPge-u3uFASN-RPGYuwAAARc"]
[Sat Apr 11 18:32:30.878863 2026] [:error] [pid 54520:tid 54577] [client 20.91.201.27:36613] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adojPsOfMlnGwwoJrMCNrQAAAEE"]
[Sat Apr 11 18:32:31.441482 2026] [:error] [pid 65248:tid 65266] [client 20.91.201.27:14128] [client 20.91.201.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adojPzI-iGHcq-8gSqro1QAAABA"]
[Sat Apr 11 21:11:03.931377 2026] [:error] [pid 54610:tid 54613] [client 182.42.111.213:51551] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adpIZwe-u3uFASN-RPHn5wAAAQA"]
[Sat Apr 11 23:46:01.363130 2026] [:error] [pid 42313:tid 42316] [client 170.106.11.141:39082] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adpsuV2P8TxdbaN018Jv8wAAAAA"]
[Sun Apr 12 02:05:26.837282 2026] [:error] [pid 44698:tid 44703] [client 209.38.77.153:51996] [client 209.38.77.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adqNZhgoH9UWd-U3D55utQAAAIA"]
[Sun Apr 12 02:42:12.420934 2026] [:error] [pid 44701:tid 44771] [client 154.192.176.245:56142] [client 154.192.176.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.192.176.245, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adqWBBGZAP4MrlxEPFdSxQAAAEA"]
[Sun Apr 12 04:46:16.845516 2026] [:error] [pid 26600:tid 26633] [client 20.104.18.4:12284] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adqzGO1YwAZiXhQKLYpnLwAAAYQ"]
[Sun Apr 12 04:46:19.693913 2026] [:error] [pid 60280:tid 60305] [client 20.104.18.4:12244] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adqzG3BlLnDOYuIykkjMkAAAAdc"]
[Sun Apr 12 04:46:27.239374 2026] [:error] [pid 26599:tid 26609] [client 20.104.18.4:12171] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adqzI3G89LXoQbk_rwAp1wAAAUc"]
[Sun Apr 12 04:46:30.210090 2026] [:error] [pid 25329:tid 25374] [client 20.104.18.4:12163] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adqzJmdcIYsS8Iyaj10jsQAAAIA"]
[Sun Apr 12 04:46:32.324150 2026] [:error] [pid 60280:tid 60303] [client 20.104.18.4:12179] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "adqzKHBlLnDOYuIykkjMowAAAdU"]
[Sun Apr 12 04:46:37.224603 2026] [:error] [pid 26600:tid 26646] [client 20.104.18.4:12262] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "adqzLe1YwAZiXhQKLYpnNwAAAZE"]
[Sun Apr 12 04:47:01.262651 2026] [:error] [pid 25328:tid 25401] [client 20.104.18.4:12180] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adqzRcxUaQZxT-e0YsDDEQAAAFU"]
[Sun Apr 12 04:47:46.079136 2026] [:error] [pid 26599:tid 26613] [client 20.104.18.4:12178] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adqzcnG89LXoQbk_rwAqLwAAAUs"]
[Sun Apr 12 04:47:49.133546 2026] [:error] [pid 25329:tid 25395] [client 20.104.18.4:12254] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adqzdWdcIYsS8Iyaj10kCAAAAIs"]
[Sun Apr 12 04:47:50.475992 2026] [:error] [pid 25328:tid 25405] [client 20.104.18.4:12270] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adqzdsxUaQZxT-e0YsDDZgAAAFc"]
[Sun Apr 12 04:47:51.680635 2026] [:error] [pid 26599:tid 26612] [client 20.104.18.4:12230] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adqzd3G89LXoQbk_rwAqMwAAAUo"]
[Sun Apr 12 04:47:53.979197 2026] [:error] [pid 25327:tid 25355] [client 20.104.18.4:12161] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "adqzeS6h2tZEVJo9JFI5LAAAABM"]
[Sun Apr 12 04:47:54.504391 2026] [:error] [pid 26600:tid 26633] [client 20.104.18.4:12236] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "adqzeu1YwAZiXhQKLYpnbAAAAYQ"]
[Sun Apr 12 04:47:55.385671 2026] [:error] [pid 26567:tid 26582] [client 20.104.18.4:12165] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "adqze3hRpg6ptWFyFx3qiwAAAQ0"]
[Sun Apr 12 04:47:56.939968 2026] [:error] [pid 25437:tid 25454] [client 20.104.18.4:12243] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "adqzfHf97wYZje1ep_NBLAAAAM8"]
[Sun Apr 12 04:47:57.548811 2026] [:error] [pid 25437:tid 25460] [client 20.104.18.4:12164] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php"] [unique_id "adqzfXf97wYZje1ep_NBNQAAANU"]
[Sun Apr 12 04:47:58.408497 2026] [:error] [pid 25328:tid 25408] [client 20.104.18.4:12225] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php"] [unique_id "adqzfsxUaQZxT-e0YsDDawAAAFg"]
[Sun Apr 12 04:47:59.200704 2026] [:error] [pid 25437:tid 25456] [client 20.104.18.4:12258] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php"] [unique_id "adqzf3f97wYZje1ep_NBSQAAANE"]
[Sun Apr 12 04:48:00.765047 2026] [:error] [pid 25437:tid 25458] [client 20.104.18.4:12287] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php"] [unique_id "adqzgHf97wYZje1ep_NBVwAAANM"]
[Sun Apr 12 04:48:01.994179 2026] [:error] [pid 25437:tid 25460] [client 20.104.18.4:12263] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lf.php"] [unique_id "adqzgXf97wYZje1ep_NBWgAAANU"]
[Sun Apr 12 04:48:02.635891 2026] [:error] [pid 26599:tid 26622] [client 20.104.18.4:12222] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lf.php"] [unique_id "adqzgnG89LXoQbk_rwAqSAAAAVQ"]
[Sun Apr 12 04:48:03.529193 2026] [:error] [pid 25328:tid 25373] [client 20.104.18.4:12266] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lf.php"] [unique_id "adqzg8xUaQZxT-e0YsDDbwAAAEg"]
[Sun Apr 12 04:48:04.764794 2026] [:error] [pid 26599:tid 26617] [client 20.104.18.4:12199] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lf.php"] [unique_id "adqzhHG89LXoQbk_rwAqTwAAAU8"]
[Sun Apr 12 04:48:10.239066 2026] [:error] [pid 25328:tid 25387] [client 20.104.18.4:12261] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WSO.php"] [unique_id "adqzisxUaQZxT-e0YsDDpgAAAE8"]
[Sun Apr 12 04:48:23.524079 2026] [:error] [pid 26567:tid 26591] [client 20.104.18.4:12196] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adqzl3hRpg6ptWFyFx3qmAAAARY"]
[Sun Apr 12 04:48:25.289460 2026] [:error] [pid 25328:tid 25364] [client 20.104.18.4:12252] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adqzmcxUaQZxT-e0YsDD7QAAAEA"]
[Sun Apr 12 04:48:26.210399 2026] [:error] [pid 25437:tid 25457] [client 20.104.18.4:12267] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adqzmnf97wYZje1ep_NBdQAAANI"]
[Sun Apr 12 04:48:26.989369 2026] [:error] [pid 25437:tid 25453] [client 20.104.18.4:12274] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adqzmnf97wYZje1ep_NBdgAAAM4"]
[Sun Apr 12 04:48:27.902423 2026] [:error] [pid 25328:tid 25387] [client 20.104.18.4:12241] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "adqzm8xUaQZxT-e0YsDD-wAAAE8"]
[Sun Apr 12 04:48:28.537287 2026] [:error] [pid 25437:tid 25443] [client 20.104.18.4:12256] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "adqznHf97wYZje1ep_NBegAAAMQ"]
[Sun Apr 12 04:48:29.219968 2026] [:error] [pid 25437:tid 25445] [client 20.104.18.4:12283] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "adqznXf97wYZje1ep_NBewAAAMY"]
[Sun Apr 12 04:48:30.184333 2026] [:error] [pid 26599:tid 26616] [client 20.104.18.4:12273] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "adqznnG89LXoQbk_rwAqhgAAAU4"]
[Sun Apr 12 04:48:30.915979 2026] [:error] [pid 25328:tid 25370] [client 20.104.18.4:12278] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "adqznsxUaQZxT-e0YsDECAAAAEY"]
[Sun Apr 12 04:48:31.728489 2026] [:error] [pid 25327:tid 25348] [client 20.104.18.4:12170] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "adqzny6h2tZEVJo9JFI5OQAAAAw"]
[Sun Apr 12 04:48:32.541934 2026] [:error] [pid 25437:tid 25455] [client 20.104.18.4:12249] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "adqzoHf97wYZje1ep_NBgAAAANA"]
[Sun Apr 12 04:48:33.566805 2026] [:error] [pid 25329:tid 25381] [client 20.104.18.4:12168] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "adqzoWdcIYsS8Iyaj10kNAAAAIM"]
[Sun Apr 12 04:48:34.445073 2026] [:error] [pid 25329:tid 25407] [client 20.104.18.4:12279] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "adqzomdcIYsS8Iyaj10kNQAAAJI"]
[Sun Apr 12 04:48:35.761384 2026] [:error] [pid 25327:tid 25349] [client 20.104.18.4:12192] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "adqzoy6h2tZEVJo9JFI5QQAAAA0"]
[Sun Apr 12 04:48:36.588517 2026] [:error] [pid 26599:tid 26603] [client 20.104.18.4:12272] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "adqzpHG89LXoQbk_rwAqkAAAAUE"]
[Sun Apr 12 04:48:37.770031 2026] [:error] [pid 25328:tid 25379] [client 20.104.18.4:12203] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "adqzpcxUaQZxT-e0YsDEGAAAAEs"]
[Sun Apr 12 04:48:38.964452 2026] [:error] [pid 25328:tid 25366] [client 20.104.18.4:12167] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/if.php"] [unique_id "adqzpsxUaQZxT-e0YsDEHAAAAEI"]
[Sun Apr 12 04:48:40.416184 2026] [:error] [pid 25327:tid 25356] [client 20.104.18.4:12176] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/if.php"] [unique_id "adqzqC6h2tZEVJo9JFI5QgAAABQ"]
[Sun Apr 12 04:48:41.129482 2026] [:error] [pid 60280:tid 60284] [client 20.104.18.4:12251] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/if.php"] [unique_id "adqzqXBlLnDOYuIykkjNHQAAAcI"]
[Sun Apr 12 04:48:41.707378 2026] [:error] [pid 25329:tid 25393] [client 20.104.18.4:12240] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/if.php"] [unique_id "adqzqWdcIYsS8Iyaj10kOAAAAIo"]
[Sun Apr 12 04:48:43.157965 2026] [:error] [pid 25437:tid 25446] [client 20.104.18.4:12257] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kk.php"] [unique_id "adqzq3f97wYZje1ep_NBkAAAAMc"]
[Sun Apr 12 04:48:43.846023 2026] [:error] [pid 25437:tid 25453] [client 20.104.18.4:12285] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kk.php"] [unique_id "adqzq3f97wYZje1ep_NBmQAAAM4"]
[Sun Apr 12 04:48:44.455347 2026] [:error] [pid 25437:tid 25440] [client 20.104.18.4:12226] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kk.php"] [unique_id "adqzrHf97wYZje1ep_NBnQAAAME"]
[Sun Apr 12 04:48:54.964139 2026] [:error] [pid 25328:tid 25379] [client 20.104.18.4:12193] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adqztsxUaQZxT-e0YsDERAAAAEs"]
[Sun Apr 12 04:48:55.843214 2026] [:error] [pid 26599:tid 26613] [client 20.104.18.4:12177] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adqzt3G89LXoQbk_rwAqqQAAAUs"]
[Sun Apr 12 04:48:57.193063 2026] [:error] [pid 26599:tid 26626] [client 20.104.18.4:12114] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adqzuXG89LXoQbk_rwAqsQAAAVg"]
[Sun Apr 12 04:48:58.345584 2026] [:error] [pid 60280:tid 60282] [client 20.104.18.4:12280] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adqzunBlLnDOYuIykkjNJwAAAcA"]
[Sun Apr 12 04:48:59.132636 2026] [:error] [pid 60280:tid 60292] [client 20.104.18.4:12237] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adqzu3BlLnDOYuIykkjNKQAAAco"]
[Sun Apr 12 04:48:59.977020 2026] [:error] [pid 60280:tid 60306] [client 20.104.18.4:12248] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adqzu3BlLnDOYuIykkjNLQAAAdg"]
[Sun Apr 12 04:49:00.771125 2026] [:error] [pid 25437:tid 25460] [client 20.104.18.4:12282] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adqzvHf97wYZje1ep_NBwwAAANU"]
[Sun Apr 12 04:49:01.333076 2026] [:error] [pid 25437:tid 25450] [client 20.104.18.4:12259] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adqzvXf97wYZje1ep_NBywAAAMs"]
[Sun Apr 12 04:49:01.844406 2026] [:error] [pid 25437:tid 25440] [client 20.104.18.4:12220] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendmail.php"] [unique_id "adqzvXf97wYZje1ep_NBzwAAAME"]
[Sun Apr 12 04:49:02.859079 2026] [:error] [pid 25329:tid 25381] [client 20.104.18.4:12253] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendmail.php"] [unique_id "adqzvmdcIYsS8Iyaj10kRQAAAIM"]
[Sun Apr 12 04:49:04.120660 2026] [:error] [pid 60280:tid 60283] [client 20.104.18.4:12166] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendmail.php"] [unique_id "adqzwHBlLnDOYuIykkjNNAAAAcE"]
[Sun Apr 12 04:49:04.850574 2026] [:error] [pid 25329:tid 25406] [client 20.104.18.4:12255] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendmail.php"] [unique_id "adqzwGdcIYsS8Iyaj10kSAAAAJE"]
[Sun Apr 12 04:49:07.259940 2026] [:error] [pid 25437:tid 25442] [client 20.104.18.4:12200] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rahma.php"] [unique_id "adqzw3f97wYZje1ep_NB1gAAAMM"]
[Sun Apr 12 04:49:09.885155 2026] [:error] [pid 60280:tid 60305] [client 20.104.18.4:12194] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rahma.php"] [unique_id "adqzxXBlLnDOYuIykkjNOwAAAdc"]
[Sun Apr 12 04:49:11.013070 2026] [:error] [pid 26599:tid 26616] [client 20.104.18.4:12097] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rahma.php"] [unique_id "adqzx3G89LXoQbk_rwAqxgAAAU4"]
[Sun Apr 12 04:49:13.066493 2026] [:error] [pid 25328:tid 25401] [client 20.104.18.4:12103] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rahma.php"] [unique_id "adqzycxUaQZxT-e0YsDEUwAAAFU"]
[Sun Apr 12 04:49:15.665009 2026] [:error] [pid 25437:tid 25454] [client 20.104.18.4:12174] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nasgor.php"] [unique_id "adqzy3f97wYZje1ep_NB4gAAAM8"]
[Sun Apr 12 04:49:17.073730 2026] [:error] [pid 25328:tid 25364] [client 20.104.18.4:12105] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nasgor.php"] [unique_id "adqzzcxUaQZxT-e0YsDEXQAAAEA"]
[Sun Apr 12 04:49:18.591059 2026] [:error] [pid 26599:tid 26605] [client 20.104.18.4:12182] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nasgor.php"] [unique_id "adqzznG89LXoQbk_rwAq0QAAAUM"]
[Sun Apr 12 04:49:19.950970 2026] [:error] [pid 26600:tid 26637] [client 20.104.18.4:12216] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nasgor.php"] [unique_id "adqzz-1YwAZiXhQKLYpnwQAAAYg"]
[Sun Apr 12 04:49:20.680000 2026] [:error] [pid 25437:tid 25443] [client 20.104.18.4:12172] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confirm.php"] [unique_id "adqz0Hf97wYZje1ep_NB7QAAAMQ"]
[Sun Apr 12 04:49:21.621850 2026] [:error] [pid 26567:tid 26591] [client 20.104.18.4:12276] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confirm.php"] [unique_id "adqz0XhRpg6ptWFyFx3qqQAAARY"]
[Sun Apr 12 04:49:22.819696 2026] [:error] [pid 26567:tid 26588] [client 20.104.18.4:12269] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confirm.php"] [unique_id "adqz0nhRpg6ptWFyFx3qqwAAARM"]
[Sun Apr 12 04:49:23.890190 2026] [:error] [pid 25329:tid 25376] [client 20.104.18.4:12175] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confirm.php"] [unique_id "adqz02dcIYsS8Iyaj10kWAAAAIE"]
[Sun Apr 12 04:49:25.043965 2026] [:error] [pid 26600:tid 26638] [client 20.104.18.4:12217] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa123.php"] [unique_id "adqz1e1YwAZiXhQKLYpnyQAAAYk"]
[Sun Apr 12 04:49:26.068966 2026] [:error] [pid 26600:tid 26652] [client 20.104.18.4:12250] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa123.php"] [unique_id "adqz1u1YwAZiXhQKLYpnzgAAAZc"]
[Sun Apr 12 04:49:26.889421 2026] [:error] [pid 26600:tid 26642] [client 20.104.18.4:12201] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa123.php"] [unique_id "adqz1u1YwAZiXhQKLYpn0wAAAY0"]
[Sun Apr 12 04:49:28.622741 2026] [:error] [pid 25437:tid 25455] [client 20.104.18.4:12190] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa123.php"] [unique_id "adqz2Hf97wYZje1ep_NB9wAAANA"]
[Sun Apr 12 04:49:29.631300 2026] [:error] [pid 25328:tid 25391] [client 20.104.18.4:12122] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload.php"] [unique_id "adqz2cxUaQZxT-e0YsDEYgAAAFE"]
[Sun Apr 12 04:49:30.272756 2026] [:error] [pid 25328:tid 25370] [client 20.104.18.4:12183] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload.php"] [unique_id "adqz2sxUaQZxT-e0YsDEZwAAAEY"]
[Sun Apr 12 04:49:31.010911 2026] [:error] [pid 60280:tid 60291] [client 20.104.18.4:12113] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload.php"] [unique_id "adqz23BlLnDOYuIykkjNXwAAAck"]
[Sun Apr 12 04:49:32.201103 2026] [:error] [pid 25437:tid 25443] [client 20.104.18.4:12238] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload.php"] [unique_id "adqz3Hf97wYZje1ep_NB-gAAAMQ"]
[Sun Apr 12 04:49:35.237841 2026] [:error] [pid 26599:tid 26609] [client 20.104.18.4:12235] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "adqz33G89LXoQbk_rwAq4gAAAUc"]
[Sun Apr 12 04:49:36.069729 2026] [:error] [pid 60280:tid 60300] [client 20.104.18.4:12234] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "adqz4HBlLnDOYuIykkjNcQAAAdI"]
[Sun Apr 12 04:49:37.207616 2026] [:error] [pid 25329:tid 25384] [client 20.104.18.4:12169] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "adqz4WdcIYsS8Iyaj10kZgAAAIU"]
[Sun Apr 12 04:49:38.036096 2026] [:error] [pid 25437:tid 25462] [client 20.104.18.4:12231] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bypass.php"] [unique_id "adqz4nf97wYZje1ep_NCCQAAANc"]
[Sun Apr 12 04:49:38.688458 2026] [:error] [pid 25437:tid 25456] [client 20.104.18.4:12286] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-one.php"] [unique_id "adqz4nf97wYZje1ep_NCDQAAANE"]
[Sun Apr 12 04:49:39.214903 2026] [:error] [pid 26599:tid 26614] [client 20.104.18.4:12210] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-one.php"] [unique_id "adqz43G89LXoQbk_rwAq6QAAAUw"]
[Sun Apr 12 04:49:39.860964 2026] [:error] [pid 25437:tid 25459] [client 20.104.18.4:12162] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-one.php"] [unique_id "adqz43f97wYZje1ep_NCEgAAANQ"]
[Sun Apr 12 04:49:40.622903 2026] [:error] [pid 26600:tid 26633] [client 20.104.18.4:12191] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-one.php"] [unique_id "adqz5O1YwAZiXhQKLYpn3QAAAYQ"]
[Sun Apr 12 04:49:41.326716 2026] [:error] [pid 26599:tid 26624] [client 20.104.18.4:12111] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "adqz5XG89LXoQbk_rwAq7AAAAVY"]
[Sun Apr 12 04:49:41.905712 2026] [:error] [pid 25437:tid 25445] [client 20.104.18.4:12208] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "adqz5Xf97wYZje1ep_NCFwAAAMY"]
[Sun Apr 12 04:49:42.902817 2026] [:error] [pid 26600:tid 26642] [client 20.104.18.4:12223] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "adqz5u1YwAZiXhQKLYpn4AAAAY0"]
[Sun Apr 12 04:49:45.137252 2026] [:error] [pid 26599:tid 26622] [client 20.104.18.4:12110] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "adqz6XG89LXoQbk_rwAq8AAAAVQ"]
[Sun Apr 12 04:49:45.864179 2026] [:error] [pid 25327:tid 25348] [client 20.104.18.4:12047] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso1337.php"] [unique_id "adqz6S6h2tZEVJo9JFI5awAAAAw"]
[Sun Apr 12 04:49:46.480478 2026] [:error] [pid 26600:tid 26634] [client 20.104.18.4:12147] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso1337.php"] [unique_id "adqz6u1YwAZiXhQKLYpn6AAAAYU"]
[Sun Apr 12 04:49:47.380665 2026] [:error] [pid 25328:tid 25373] [client 20.104.18.4:12287] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso1337.php"] [unique_id "adqz68xUaQZxT-e0YsDEdgAAAEg"]
[Sun Apr 12 04:49:48.203997 2026] [:error] [pid 25329:tid 25413] [client 20.104.18.4:12139] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso1337.php"] [unique_id "adqz7GdcIYsS8Iyaj10kbQAAAJY"]
[Sun Apr 12 04:49:48.678393 2026] [:error] [pid 25328:tid 25372] [client 20.104.18.4:12211] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog.php"] [unique_id "adqz7MxUaQZxT-e0YsDEeAAAAEc"]
[Sun Apr 12 04:49:49.439279 2026] [:error] [pid 26599:tid 26625] [client 20.104.18.4:12205] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog.php"] [unique_id "adqz7XG89LXoQbk_rwAq9wAAAVc"]
[Sun Apr 12 04:49:50.328330 2026] [:error] [pid 25328:tid 25373] [client 20.104.18.4:12118] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog.php"] [unique_id "adqz7sxUaQZxT-e0YsDEhgAAAEg"]
[Sun Apr 12 04:49:51.324457 2026] [:error] [pid 26600:tid 26648] [client 20.104.18.4:12106] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog.php"] [unique_id "adqz7-1YwAZiXhQKLYpn8AAAAZM"]
[Sun Apr 12 04:49:53.491129 2026] [:error] [pid 26567:tid 26591] [client 20.104.18.4:12265] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/it.php"] [unique_id "adqz8XhRpg6ptWFyFx3qygAAARY"]
[Sun Apr 12 04:49:57.751132 2026] [:error] [pid 25437:tid 25454] [client 20.104.18.4:12206] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adqz9Xf97wYZje1ep_NCLwAAAM8"]
[Sun Apr 12 04:49:58.900136 2026] [:error] [pid 25328:tid 25385] [client 20.104.18.4:12133] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adqz9sxUaQZxT-e0YsDEmQAAAE4"]
[Sun Apr 12 04:50:05.053655 2026] [:error] [pid 26599:tid 26613] [client 20.104.18.4:12130] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4price.php"] [unique_id "adqz_XG89LXoQbk_rwArHgAAAUs"]
[Sun Apr 12 04:50:06.571948 2026] [:error] [pid 26599:tid 26608] [client 20.104.18.4:12281] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4price.php"] [unique_id "adqz_nG89LXoQbk_rwArHwAAAUY"]
[Sun Apr 12 04:50:07.944640 2026] [:error] [pid 60280:tid 60294] [client 20.104.18.4:12108] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4price.php"] [unique_id "adqz_3BlLnDOYuIykkjNgQAAAcw"]
[Sun Apr 12 04:50:08.697787 2026] [:error] [pid 26567:tid 26593] [client 20.104.18.4:12213] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4price.php"] [unique_id "adq0AHhRpg6ptWFyFx3qzgAAARg"]
[Sun Apr 12 04:50:09.635607 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:12260] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MARIJUANA.php"] [unique_id "adq0AcxUaQZxT-e0YsDErwAAAFI"]
[Sun Apr 12 04:50:10.389530 2026] [:error] [pid 25328:tid 25375] [client 20.104.18.4:12264] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MARIJUANA.php"] [unique_id "adq0AsxUaQZxT-e0YsDEtQAAAEk"]
[Sun Apr 12 04:50:12.819090 2026] [:error] [pid 25328:tid 25379] [client 20.104.18.4:12212] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MARIJUANA.php"] [unique_id "adq0BMxUaQZxT-e0YsDEvAAAAEs"]
[Sun Apr 12 04:50:14.453612 2026] [:error] [pid 25328:tid 25403] [client 20.104.18.4:12062] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MARIJUANA.php"] [unique_id "adq0BsxUaQZxT-e0YsDE0AAAAFY"]
[Sun Apr 12 04:50:18.766043 2026] [:error] [pid 26599:tid 26604] [client 20.104.18.4:12275] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.fk.php"] [unique_id "adq0CnG89LXoQbk_rwArMwAAAUI"]
[Sun Apr 12 04:50:27.360148 2026] [:error] [pid 26600:tid 26639] [client 20.104.18.4:12284] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.fk.php"] [unique_id "adq0E-1YwAZiXhQKLYpoGAAAAYo"]
[Sun Apr 12 04:50:33.681343 2026] [:error] [pid 60280:tid 60295] [client 20.104.18.4:12099] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/XxX.php"] [unique_id "adq0GXBlLnDOYuIykkjNogAAAc0"]
[Sun Apr 12 04:50:35.746730 2026] [:error] [pid 60280:tid 60287] [client 20.104.18.4:12224] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/XxX.php"] [unique_id "adq0G3BlLnDOYuIykkjNpAAAAcU"]
[Sun Apr 12 04:50:37.320602 2026] [:error] [pid 25328:tid 25405] [client 20.104.18.4:12232] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/XxX.php"] [unique_id "adq0HcxUaQZxT-e0YsDE6gAAAFc"]
[Sun Apr 12 04:50:38.886407 2026] [:error] [pid 25328:tid 25364] [client 20.104.18.4:12197] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/XxX.php"] [unique_id "adq0HsxUaQZxT-e0YsDE9QAAAEA"]
[Sun Apr 12 04:50:40.392757 2026] [:error] [pid 25328:tid 25389] [client 20.104.18.4:12207] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexuse.php"] [unique_id "adq0IMxUaQZxT-e0YsDFAAAAAFA"]
[Sun Apr 12 04:50:41.657193 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:12204] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexuse.php"] [unique_id "adq0IcxUaQZxT-e0YsDFBgAAAFI"]
[Sun Apr 12 04:50:42.998823 2026] [:error] [pid 26567:tid 26570] [client 20.104.18.4:12195] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexuse.php"] [unique_id "adq0InhRpg6ptWFyFx3q5gAAAQE"]
[Sun Apr 12 04:50:43.677534 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:12117] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexuse.php"] [unique_id "adq0I3f97wYZje1ep_NCZAAAAMI"]
[Sun Apr 12 04:50:44.319705 2026] [:error] [pid 25328:tid 25405] [client 20.104.18.4:12187] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sendemail.php"] [unique_id "adq0JMxUaQZxT-e0YsDFFAAAAFc"]
[Sun Apr 12 04:50:44.836352 2026] [:error] [pid 25328:tid 25366] [client 20.104.18.4:12054] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sendemail.php"] [unique_id "adq0JMxUaQZxT-e0YsDFFwAAAEI"]
[Sun Apr 12 04:50:45.539091 2026] [:error] [pid 25328:tid 25373] [client 20.104.18.4:12185] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sendemail.php"] [unique_id "adq0JcxUaQZxT-e0YsDFHgAAAEg"]
[Sun Apr 12 04:50:46.119335 2026] [:error] [pid 25328:tid 25377] [client 20.104.18.4:12181] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sendemail.php"] [unique_id "adq0JsxUaQZxT-e0YsDFIQAAAEo"]
[Sun Apr 12 04:50:47.265583 2026] [:error] [pid 25437:tid 25439] [client 20.104.18.4:12189] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adq0J3f97wYZje1ep_NCdAAAAMA"]
[Sun Apr 12 04:50:48.761208 2026] [:error] [pid 26600:tid 26652] [client 20.104.18.4:12131] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adq0KO1YwAZiXhQKLYpoLAAAAZc"]
[Sun Apr 12 04:50:51.252653 2026] [:error] [pid 60280:tid 60288] [client 20.104.18.4:12143] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adq0K3BlLnDOYuIykkjNqAAAAcY"]
[Sun Apr 12 04:50:54.236822 2026] [:error] [pid 25437:tid 25449] [client 20.104.18.4:12219] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/content.php"] [unique_id "adq0Lnf97wYZje1ep_NChAAAAMo"]
[Sun Apr 12 04:50:56.160904 2026] [:error] [pid 25437:tid 25452] [client 20.104.18.4:12102] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olu.php"] [unique_id "adq0MHf97wYZje1ep_NCjAAAAM0"]
[Sun Apr 12 04:50:58.829964 2026] [:error] [pid 26599:tid 26611] [client 20.104.18.4:12123] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olu.php"] [unique_id "adq0MnG89LXoQbk_rwArUwAAAUk"]
[Sun Apr 12 04:51:00.953143 2026] [:error] [pid 25328:tid 25387] [client 20.104.18.4:12277] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olu.php"] [unique_id "adq0NMxUaQZxT-e0YsDFNwAAAE8"]
[Sun Apr 12 04:51:08.992295 2026] [proxy_fcgi:error] [pid 25328:tid 25380] [client 20.104.18.4:12128] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 04:51:09.209906 2026] [proxy_fcgi:error] [pid 25328:tid 25391] [client 20.104.18.4:12128] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 04:51:13.692435 2026] [:error] [pid 25328:tid 25369] [client 20.104.18.4:12128] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso1.php"] [unique_id "adq0QcxUaQZxT-e0YsDFcgAAAEU"]
[Sun Apr 12 04:51:17.662526 2026] [:error] [pid 26600:tid 26632] [client 20.104.18.4:12033] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso1.php"] [unique_id "adq0Re1YwAZiXhQKLYpoRQAAAYM"]
[Sun Apr 12 04:51:21.356800 2026] [:error] [pid 25328:tid 25383] [client 20.104.18.4:12228] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso1.php"] [unique_id "adq0ScxUaQZxT-e0YsDFgQAAAE0"]
[Sun Apr 12 04:51:27.485212 2026] [:error] [pid 26599:tid 26623] [client 20.104.18.4:12179] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wso1.php"] [unique_id "adq0T3G89LXoQbk_rwArZwAAAVU"]
[Sun Apr 12 04:51:31.490728 2026] [:error] [pid 26599:tid 26608] [client 20.104.18.4:12247] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olux.php"] [unique_id "adq0U3G89LXoQbk_rwArbQAAAUY"]
[Sun Apr 12 04:51:32.456345 2026] [:error] [pid 25437:tid 25440] [client 20.104.18.4:12163] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olux.php"] [unique_id "adq0VHf97wYZje1ep_NDEQAAAME"]
[Sun Apr 12 04:51:33.685430 2026] [:error] [pid 25328:tid 25396] [client 20.104.18.4:12188] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olux.php"] [unique_id "adq0VcxUaQZxT-e0YsDFoQAAAFM"]
[Sun Apr 12 04:51:34.517526 2026] [:error] [pid 25328:tid 25401] [client 20.104.18.4:12271] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olux.php"] [unique_id "adq0VsxUaQZxT-e0YsDFpgAAAFU"]
[Sun Apr 12 04:51:39.333939 2026] [:error] [pid 60280:tid 60305] [client 20.104.18.4:12115] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "adq0W3BlLnDOYuIykkjN0QAAAdc"]
[Sun Apr 12 04:51:40.791858 2026] [:error] [pid 25328:tid 25370] [client 20.104.18.4:12229] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "adq0XMxUaQZxT-e0YsDFrgAAAEY"]
[Sun Apr 12 04:51:44.319177 2026] [:error] [pid 26599:tid 26620] [client 20.104.18.4:12100] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "adq0YHG89LXoQbk_rwArcwAAAVI"]
[Sun Apr 12 04:51:59.126019 2026] [:error] [pid 26599:tid 26626] [client 20.104.18.4:12104] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl.php"] [unique_id "adq0b3G89LXoQbk_rwAr3wAAAVg"]
[Sun Apr 12 04:52:06.276637 2026] [:error] [pid 25329:tid 25388] [client 20.104.18.4:12132] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl.php"] [unique_id "adq0dmdcIYsS8Iyaj10lEwAAAIc"]
[Sun Apr 12 04:52:09.512296 2026] [:error] [pid 26567:tid 26592] [client 20.104.18.4:12057] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl.php"] [unique_id "adq0eXhRpg6ptWFyFx3rdwAAARc"]
[Sun Apr 12 04:52:11.388451 2026] [:error] [pid 25328:tid 25385] [client 20.104.18.4:12270] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl.php"] [unique_id "adq0e8xUaQZxT-e0YsDGAAAAAE4"]
[Sun Apr 12 04:52:21.828535 2026] [:error] [pid 26567:tid 26585] [client 20.104.18.4:12242] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0hXhRpg6ptWFyFx3rpAAAARA"]
[Sun Apr 12 04:52:23.456485 2026] [:error] [pid 26600:tid 26645] [client 20.104.18.4:12137] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0h-1YwAZiXhQKLYpohgAAAZA"]
[Sun Apr 12 04:52:24.729983 2026] [:error] [pid 26599:tid 26620] [client 20.104.18.4:12125] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0iHG89LXoQbk_rwAr5QAAAVI"]
[Sun Apr 12 04:52:25.967293 2026] [:error] [pid 25328:tid 25367] [client 20.104.18.4:12227] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0icxUaQZxT-e0YsDGEAAAAEM"]
[Sun Apr 12 04:52:27.566117 2026] [:error] [pid 25437:tid 25450] [client 20.104.18.4:12218] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0i3f97wYZje1ep_NDpAAAAMs"]
[Sun Apr 12 04:52:29.541439 2026] [:error] [pid 25328:tid 25403] [client 20.104.18.4:12148] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0jcxUaQZxT-e0YsDGHAAAAFY"]
[Sun Apr 12 04:52:30.906727 2026] [:error] [pid 60280:tid 60294] [client 20.104.18.4:12209] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0jnBlLnDOYuIykkjONgAAAcw"]
[Sun Apr 12 04:52:32.565754 2026] [:error] [pid 26600:tid 26639] [client 20.104.18.4:12140] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0kO1YwAZiXhQKLYpohwAAAYo"]
[Sun Apr 12 04:52:35.271106 2026] [:error] [pid 26599:tid 26614] [client 20.104.18.4:12266] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0k3G89LXoQbk_rwAr8QAAAUw"]
[Sun Apr 12 04:52:36.530995 2026] [:error] [pid 26567:tid 26582] [client 20.104.18.4:12160] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0lHhRpg6ptWFyFx3rqwAAAQ0"]
[Sun Apr 12 04:52:37.842023 2026] [:error] [pid 26567:tid 26572] [client 20.104.18.4:12222] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0lXhRpg6ptWFyFx3rrwAAAQM"]
[Sun Apr 12 04:52:38.921471 2026] [:error] [pid 26567:tid 26585] [client 20.104.18.4:12170] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0lnhRpg6ptWFyFx3rsgAAARA"]
[Sun Apr 12 04:52:39.730017 2026] [:error] [pid 25328:tid 25365] [client 20.104.18.4:12119] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adq0l8xUaQZxT-e0YsDGMgAAAEE"]
[Sun Apr 12 04:52:40.795875 2026] [:error] [pid 25437:tid 25445] [client 20.104.18.4:12180] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adq0mHf97wYZje1ep_NDtAAAAMY"]
[Sun Apr 12 04:52:42.512431 2026] [:error] [pid 60280:tid 60289] [client 20.104.18.4:12283] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adq0mnBlLnDOYuIykkjOQQAAAcc"]
[Sun Apr 12 04:52:44.552521 2026] [:error] [pid 26567:tid 26571] [client 20.104.18.4:12040] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adq0nHhRpg6ptWFyFx3rwQAAAQI"]
[Sun Apr 12 04:52:46.812925 2026] [:error] [pid 26599:tid 26622] [client 20.104.18.4:12241] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0nnG89LXoQbk_rwAr9gAAAVQ"]
[Sun Apr 12 04:52:50.979554 2026] [:error] [pid 25327:tid 25359] [client 20.104.18.4:12261] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0oi6h2tZEVJo9JFI59wAAABc"]
[Sun Apr 12 04:52:52.462899 2026] [:error] [pid 25437:tid 25446] [client 20.104.18.4:12120] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0pHf97wYZje1ep_NDyQAAAMc"]
[Sun Apr 12 04:52:53.653432 2026] [:error] [pid 25437:tid 25449] [client 20.104.18.4:12117] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0pXf97wYZje1ep_NDzQAAAMo"]
[Sun Apr 12 04:52:54.600175 2026] [:error] [pid 26599:tid 26626] [client 20.104.18.4:12267] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0pnG89LXoQbk_rwAr_AAAAVg"]
[Sun Apr 12 04:52:56.427880 2026] [:error] [pid 26567:tid 26579] [client 20.104.18.4:12245] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0qHhRpg6ptWFyFx3r7AAAAQo"]
[Sun Apr 12 04:52:57.921977 2026] [:error] [pid 26599:tid 26625] [client 20.104.18.4:12085] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0qXG89LXoQbk_rwAr_wAAAVc"]
[Sun Apr 12 04:52:59.042772 2026] [:error] [pid 25437:tid 25449] [client 20.104.18.4:12285] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adq0q3f97wYZje1ep_ND2QAAAMo"]
[Sun Apr 12 04:53:01.247817 2026] [:error] [pid 25328:tid 25405] [client 20.104.18.4:12225] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date.php"] [unique_id "adq0rcxUaQZxT-e0YsDGTAAAAFc"]
[Sun Apr 12 04:53:02.771509 2026] [:error] [pid 25329:tid 25404] [client 20.104.18.4:12038] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date.php"] [unique_id "adq0rmdcIYsS8Iyaj10lOwAAAJA"]
[Sun Apr 12 04:53:06.678389 2026] [:error] [pid 60280:tid 60296] [client 20.104.18.4:12112] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date.php"] [unique_id "adq0snBlLnDOYuIykkjOSQAAAc4"]
[Sun Apr 12 04:53:10.690737 2026] [:error] [pid 25328:tid 25370] [client 20.104.18.4:12215] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date.php"] [unique_id "adq0tsxUaQZxT-e0YsDGXgAAAEY"]
[Sun Apr 12 04:53:12.740283 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:12248] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pomo.php"] [unique_id "adq0uMxUaQZxT-e0YsDGaQAAAFI"]
[Sun Apr 12 04:53:18.572939 2026] [:error] [pid 25437:tid 25452] [client 20.104.18.4:12220] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pomo.php"] [unique_id "adq0vnf97wYZje1ep_ND_QAAAM0"]
[Sun Apr 12 04:53:32.568593 2026] [:error] [pid 26599:tid 26625] [client 20.104.18.4:12142] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adq0zHG89LXoQbk_rwAsMQAAAVc"]
[Sun Apr 12 04:53:33.836752 2026] [:error] [pid 25328:tid 25369] [client 20.104.18.4:12259] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adq0zcxUaQZxT-e0YsDGkQAAAEU"]
[Sun Apr 12 04:53:34.694575 2026] [:error] [pid 26599:tid 26603] [client 20.104.18.4:12161] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adq0znG89LXoQbk_rwAsOAAAAUE"]
[Sun Apr 12 04:53:35.627243 2026] [:error] [pid 25328:tid 25370] [client 20.104.18.4:12175] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adq0z8xUaQZxT-e0YsDGlAAAAEY"]
[Sun Apr 12 04:53:36.715641 2026] [:error] [pid 26567:tid 26587] [client 20.104.18.4:12186] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adq00HhRpg6ptWFyFx3sGwAAARI"]
[Sun Apr 12 05:53:51.540436 2026] [:error] [pid 60280:tid 60295] [client 62.197.152.148:47620] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adrC73BlLnDOYuIykkjowwAAAc0"]
[Sun Apr 12 05:53:53.132300 2026] [:error] [pid 26567:tid 26590] [client 62.197.152.148:57766] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adrC8XhRpg6ptWFyFx0BngAAARU"]
[Sun Apr 12 05:53:54.369698 2026] [:error] [pid 26600:tid 26649] [client 62.197.152.148:58004] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "adrC8u1YwAZiXhQKLYp84AAAAZQ"]
[Sun Apr 12 05:53:54.977271 2026] [:error] [pid 60280:tid 60304] [client 62.197.152.148:58126] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "adrC8nBlLnDOYuIykkjo-AAAAdY"]
[Sun Apr 12 05:53:55.609646 2026] [:error] [pid 60280:tid 60291] [client 62.197.152.148:58234] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "adrC83BlLnDOYuIykkjpDwAAAck"]
[Sun Apr 12 05:53:56.223363 2026] [:error] [pid 25328:tid 25369] [client 62.197.152.148:58340] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "adrC9MxUaQZxT-e0YsDmtwAAAEU"]
[Sun Apr 12 05:53:56.851668 2026] [:error] [pid 25329:tid 25393] [client 62.197.152.148:58428] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/envato-css.php"] [unique_id "adrC9GdcIYsS8Iyaj10yjQAAAIo"]
[Sun Apr 12 05:53:57.459830 2026] [:error] [pid 25437:tid 25453] [client 62.197.152.148:58590] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/"] [unique_id "adrC9Xf97wYZje1ep_NWHgAAAM4"]
[Sun Apr 12 05:53:58.072030 2026] [:error] [pid 25328:tid 25367] [client 62.197.152.148:58678] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/"] [unique_id "adrC9sxUaQZxT-e0YsDmzQAAAEM"]
[Sun Apr 12 05:53:58.712503 2026] [:error] [pid 26567:tid 26587] [client 62.197.152.148:58776] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/"] [unique_id "adrC9nhRpg6ptWFyFx0BtwAAARI"]
[Sun Apr 12 05:53:59.323061 2026] [:error] [pid 25327:tid 25358] [client 62.197.152.148:35973] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/"] [unique_id "adrC9y6h2tZEVJo9JFJESQAAABY"]
[Sun Apr 12 05:53:59.935325 2026] [:error] [pid 25328:tid 25364] [client 62.197.152.148:33336] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/"] [unique_id "adrC98xUaQZxT-e0YsDm1wAAAEA"]
[Sun Apr 12 05:58:09.139286 2026] [:error] [pid 25437:tid 25441] [client 43.135.142.7:32812] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adrD8Xf97wYZje1ep_NX5gAAAMI"]
[Sun Apr 12 06:31:23.817631 2026] [:error] [pid 25437:tid 25439] [client 20.104.18.4:28668] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adrLu3f97wYZje1ep_Nk7gAAAMA"]
[Sun Apr 12 06:31:27.587069 2026] [:error] [pid 25329:tid 25400] [client 20.104.18.4:28669] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adrLv2dcIYsS8Iyaj10-4AAAAI4"]
[Sun Apr 12 06:31:29.222590 2026] [:error] [pid 26600:tid 26637] [client 20.104.18.4:28657] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/chosen.php"] [unique_id "adrLwe1YwAZiXhQKLYqDDgAAAYg"]
[Sun Apr 12 06:31:30.138007 2026] [:error] [pid 25437:tid 25447] [client 20.104.18.4:28601] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adrLwnf97wYZje1ep_Nk-wAAAMg"]
[Sun Apr 12 06:31:33.603313 2026] [:error] [pid 26599:tid 26625] [client 20.104.18.4:28557] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/chosen.php"] [unique_id "adrLxXG89LXoQbk_rwBLEwAAAVc"]
[Sun Apr 12 06:31:33.952357 2026] [:error] [pid 25437:tid 25462] [client 20.104.18.4:28633] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adrLxXf97wYZje1ep_NlAwAAANc"]
[Sun Apr 12 06:31:36.759001 2026] [:error] [pid 25329:tid 25376] [client 20.104.18.4:28561] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adrLyGdcIYsS8Iyaj10--wAAAIE"]
[Sun Apr 12 06:31:40.523343 2026] [:error] [pid 26600:tid 26653] [client 20.104.18.4:28495] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as/chosen.php"] [unique_id "adrLzO1YwAZiXhQKLYqDEwAAAZg"]
[Sun Apr 12 06:31:43.813753 2026] [:error] [pid 26600:tid 26649] [client 20.104.18.4:28546] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adrLz-1YwAZiXhQKLYqDFwAAAZQ"]
[Sun Apr 12 06:31:46.460391 2026] [:error] [pid 26567:tid 26582] [client 20.104.18.4:28656] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adrL0nhRpg6ptWFyFx0O2gAAAQ0"]
[Sun Apr 12 06:31:46.686941 2026] [:error] [pid 26567:tid 26585] [client 20.104.18.4:28642] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as/chosen.php"] [unique_id "adrL0nhRpg6ptWFyFx0O2wAAARA"]
[Sun Apr 12 06:31:47.814911 2026] [:error] [pid 25328:tid 25365] [client 20.104.18.4:28553] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adrL08xUaQZxT-e0YsD3RgAAAEE"]
[Sun Apr 12 06:31:49.303916 2026] [:error] [pid 26599:tid 26620] [client 20.104.18.4:28598] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "adrL1XG89LXoQbk_rwBLKgAAAVI"]
[Sun Apr 12 06:31:49.323263 2026] [:error] [pid 26599:tid 26611] [client 20.104.18.4:28554] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as/chosen.php"] [unique_id "adrL1XG89LXoQbk_rwBLKwAAAUk"]
[Sun Apr 12 06:31:50.929382 2026] [:error] [pid 25327:tid 25348] [client 20.104.18.4:28650] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "adrL1i6h2tZEVJo9JFJKBAAAAAw"]
[Sun Apr 12 06:31:51.583408 2026] [:error] [pid 26600:tid 26639] [client 20.104.18.4:28643] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file/chosen.php"] [unique_id "adrL1-1YwAZiXhQKLYqDGgAAAYo"]
[Sun Apr 12 06:31:53.480519 2026] [:error] [pid 25327:tid 25340] [client 20.104.18.4:28628] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file/chosen.php"] [unique_id "adrL2S6h2tZEVJo9JFJKCAAAAAQ"]
[Sun Apr 12 06:31:55.279364 2026] [:error] [pid 26567:tid 26574] [client 20.104.18.4:28635] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "adrL23hRpg6ptWFyFx0O5QAAAQU"]
[Sun Apr 12 06:31:56.814290 2026] [:error] [pid 26567:tid 26572] [client 20.104.18.4:28614] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file/chosen.php"] [unique_id "adrL3HhRpg6ptWFyFx0O6gAAAQM"]
[Sun Apr 12 06:32:00.194726 2026] [:error] [pid 26567:tid 26573] [client 20.104.18.4:28634] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file/chosen.php"] [unique_id "adrL4HhRpg6ptWFyFx0O7AAAAQQ"]
[Sun Apr 12 06:32:06.006979 2026] [:error] [pid 26599:tid 26618] [client 20.104.18.4:28613] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "adrL5nG89LXoQbk_rwBLQQAAAVA"]
[Sun Apr 12 06:32:12.654289 2026] [:error] [pid 60280:tid 60301] [client 20.104.18.4:28608] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adrL7HBlLnDOYuIykkj8DAAAAdM"]
[Sun Apr 12 06:32:16.897109 2026] [:error] [pid 26567:tid 26593] [client 20.104.18.4:28620] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "adrL8HhRpg6ptWFyFx0PEwAAARg"]
[Sun Apr 12 06:32:38.111307 2026] [:error] [pid 25437:tid 25453] [client 20.104.18.4:28617] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "adrMBnf97wYZje1ep_NlKQAAAM4"]
[Sun Apr 12 06:32:40.868021 2026] [:error] [pid 25328:tid 25364] [client 20.104.18.4:28671] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "adrMCMxUaQZxT-e0YsD3nQAAAEA"]
[Sun Apr 12 06:32:56.546903 2026] [:error] [pid 25437:tid 25460] [client 20.104.18.4:28662] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adrMGHf97wYZje1ep_NlQQAAANU"]
[Sun Apr 12 06:32:58.473684 2026] [:error] [pid 25437:tid 25443] [client 20.104.18.4:28610] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "adrMGnf97wYZje1ep_NlSwAAAMQ"]
[Sun Apr 12 06:33:03.342692 2026] [:error] [pid 25437:tid 25442] [client 20.104.18.4:28657] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adrMH3f97wYZje1ep_NlXQAAAMM"]
[Sun Apr 12 06:33:03.467853 2026] [:error] [pid 25437:tid 25451] [client 20.104.18.4:28667] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "adrMH3f97wYZje1ep_NlXwAAAMw"]
[Sun Apr 12 06:33:06.446691 2026] [:error] [pid 26600:tid 26642] [client 20.104.18.4:28607] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adrMIu1YwAZiXhQKLYqDcAAAAY0"]
[Sun Apr 12 06:33:08.117950 2026] [:error] [pid 26567:tid 26578] [client 20.104.18.4:28648] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adrMJHhRpg6ptWFyFx0PRwAAAQk"]
[Sun Apr 12 06:33:10.646101 2026] [:error] [pid 25437:tid 25457] [client 20.104.18.4:28547] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adrMJnf97wYZje1ep_NlcAAAANI"]
[Sun Apr 12 06:33:14.471157 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:28660] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adrMKnf97wYZje1ep_NlegAAAMI"]
[Sun Apr 12 06:33:16.875325 2026] [:error] [pid 25437:tid 25445] [client 20.104.18.4:28629] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adrMLHf97wYZje1ep_NlfgAAAMY"]
[Sun Apr 12 06:33:17.937585 2026] [:error] [pid 25327:tid 25360] [client 20.104.18.4:28644] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adrMLS6h2tZEVJo9JFJKVgAAABg"]
[Sun Apr 12 06:33:18.256437 2026] [:error] [pid 26600:tid 26643] [client 20.104.18.4:28555] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "adrMLu1YwAZiXhQKLYqDiAAAAY4"]
[Sun Apr 12 06:33:19.194371 2026] [:error] [pid 25328:tid 25398] [client 20.104.18.4:28545] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adrML8xUaQZxT-e0YsD37gAAAFQ"]
[Sun Apr 12 06:33:20.200300 2026] [:error] [pid 25328:tid 25370] [client 20.104.18.4:28655] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "adrMMMxUaQZxT-e0YsD39gAAAEY"]
[Sun Apr 12 06:33:20.619502 2026] [:error] [pid 25329:tid 25412] [client 20.104.18.4:28500] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adrMMGdcIYsS8Iyaj10_cAAAAJU"]
[Sun Apr 12 06:33:21.709716 2026] [:error] [pid 25329:tid 25407] [client 20.104.18.4:28551] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adrMMWdcIYsS8Iyaj10_eAAAAJI"]
[Sun Apr 12 06:33:23.163972 2026] [:error] [pid 26600:tid 26651] [client 20.104.18.4:28622] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adrMM-1YwAZiXhQKLYqDkwAAAZY"]
[Sun Apr 12 06:33:25.202307 2026] [:error] [pid 25328:tid 25403] [client 20.104.18.4:28666] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adrMNcxUaQZxT-e0YsD3-QAAAFY"]
[Sun Apr 12 06:33:26.689622 2026] [:error] [pid 25327:tid 25357] [client 20.104.18.4:28550] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adrMNi6h2tZEVJo9JFJKXAAAABU"]
[Sun Apr 12 06:33:30.278782 2026] [:error] [pid 26567:tid 26586] [client 20.104.18.4:28649] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adrMOnhRpg6ptWFyFx0PYQAAARE"]
[Sun Apr 12 06:33:32.579297 2026] [:error] [pid 26567:tid 26570] [client 20.104.18.4:28559] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "adrMPHhRpg6ptWFyFx0PagAAAQE"]
[Sun Apr 12 06:33:34.069521 2026] [:error] [pid 25327:tid 25336] [client 20.104.18.4:28619] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adrMPi6h2tZEVJo9JFJKcgAAAAA"]
[Sun Apr 12 06:33:36.182323 2026] [:error] [pid 26567:tid 26590] [client 20.104.18.4:28654] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adrMQHhRpg6ptWFyFx0PcgAAARU"]
[Sun Apr 12 06:33:36.904953 2026] [:error] [pid 26567:tid 26578] [client 20.104.18.4:28661] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/init.php"] [unique_id "adrMQHhRpg6ptWFyFx0PdgAAAQk"]
[Sun Apr 12 06:33:48.740795 2026] [:error] [pid 25437:tid 25453] [client 20.104.18.4:28637] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "adrMTHf97wYZje1ep_NlvQAAAM4"]
[Sun Apr 12 06:33:49.917143 2026] [:error] [pid 25329:tid 25402] [client 20.104.18.4:28548] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "adrMTWdcIYsS8Iyaj10_kwAAAI8"]
[Sun Apr 12 06:33:50.922361 2026] [:error] [pid 60280:tid 60290] [client 20.104.18.4:28560] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "adrMTnBlLnDOYuIykkj8eAAAAcg"]
[Sun Apr 12 06:33:52.616943 2026] [:error] [pid 26600:tid 26632] [client 20.104.18.4:28558] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "adrMUO1YwAZiXhQKLYqDnAAAAYM"]
[Sun Apr 12 06:33:57.219072 2026] [:error] [pid 25437:tid 25463] [client 20.104.18.4:28593] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/install.php"] [unique_id "adrMVXf97wYZje1ep_NlyQAAANg"]
[Sun Apr 12 06:34:04.710683 2026] [:error] [pid 25437:tid 25463] [client 20.104.18.4:28481] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/install.php"] [unique_id "adrMXHf97wYZje1ep_NmAgAAANg"]
[Sun Apr 12 06:34:06.572363 2026] [:error] [pid 26567:tid 26589] [client 20.104.18.4:28627] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/install.php"] [unique_id "adrMXnhRpg6ptWFyFx0P5QAAARQ"]
[Sun Apr 12 06:34:09.254417 2026] [:error] [pid 26567:tid 26571] [client 20.104.18.4:28606] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/privacy.php"] [unique_id "adrMYXhRpg6ptWFyFx0P8gAAAQI"]
[Sun Apr 12 06:34:11.712256 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:28489] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php"] [unique_id "adrMY8xUaQZxT-e0YsD4lAAAAFI"]
[Sun Apr 12 06:34:12.656200 2026] [:error] [pid 25328:tid 25373] [client 20.104.18.4:28556] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/privacy.php"] [unique_id "adrMZMxUaQZxT-e0YsD4lwAAAEg"]
[Sun Apr 12 06:34:14.629017 2026] [:error] [pid 60280:tid 60282] [client 20.104.18.4:28498] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bb.php"] [unique_id "adrMZnBlLnDOYuIykkj8jwAAAcA"]
[Sun Apr 12 06:34:17.925043 2026] [:error] [pid 26599:tid 26607] [client 20.104.18.4:28540] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lf.php"] [unique_id "adrMaXG89LXoQbk_rwBMBwAAAUU"]
[Sun Apr 12 06:34:22.947195 2026] [:error] [pid 25328:tid 25379] [client 20.104.18.4:28640] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/privacy.php"] [unique_id "adrMbsxUaQZxT-e0YsD4qwAAAEs"]
[Sun Apr 12 06:34:24.801162 2026] [:error] [pid 25437:tid 25445] [client 20.104.18.4:28665] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "adrMcHf97wYZje1ep_NmTwAAAMY"]
[Sun Apr 12 06:34:28.807753 2026] [:error] [pid 26600:tid 26647] [client 20.104.18.4:28594] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "adrMdO1YwAZiXhQKLYqDzgAAAZI"]
[Sun Apr 12 06:34:29.546864 2026] [:error] [pid 25437:tid 25447] [client 20.104.18.4:28658] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lf.php"] [unique_id "adrMdXf97wYZje1ep_NmXgAAAMg"]
[Sun Apr 12 06:34:30.360049 2026] [:error] [pid 26567:tid 26587] [client 20.104.18.4:28577] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "adrMdnhRpg6ptWFyFx0QIgAAARI"]
[Sun Apr 12 06:34:31.783195 2026] [:error] [pid 26567:tid 26573] [client 20.104.18.4:28426] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lf.php"] [unique_id "adrMd3hRpg6ptWFyFx0QJwAAAQQ"]
[Sun Apr 12 06:34:33.154725 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:28596] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "adrMeXf97wYZje1ep_NmYgAAAMI"]
[Sun Apr 12 06:34:35.498073 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:28603] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adrMe3f97wYZje1ep_NmcQAAAMI"]
[Sun Apr 12 06:34:41.972681 2026] [:error] [pid 25437:tid 25461] [client 20.104.18.4:28569] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adrMgXf97wYZje1ep_NmhgAAANY"]
[Sun Apr 12 06:34:44.616275 2026] [:error] [pid 25437:tid 25446] [client 20.104.18.4:28562] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WSO.php"] [unique_id "adrMhHf97wYZje1ep_NmjQAAAMc"]
[Sun Apr 12 06:34:45.411041 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:28482] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conffg.php"] [unique_id "adrMhcxUaQZxT-e0YsD4vQAAAFI"]
[Sun Apr 12 06:34:45.481517 2026] [:error] [pid 26599:tid 26623] [client 20.104.18.4:28564] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WSO.php"] [unique_id "adrMhXG89LXoQbk_rwBMFAAAAVU"]
[Sun Apr 12 06:34:46.279079 2026] [:error] [pid 25328:tid 25364] [client 20.104.18.4:28485] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WSO.php"] [unique_id "adrMhsxUaQZxT-e0YsD4vwAAAEA"]
[Sun Apr 12 06:34:46.848021 2026] [:error] [pid 25437:tid 25460] [client 20.104.18.4:28588] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WSO.php"] [unique_id "adrMhnf97wYZje1ep_NmjwAAANU"]
[Sun Apr 12 06:34:47.621798 2026] [:error] [pid 25437:tid 25447] [client 20.104.18.4:28592] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/atomlib.php"] [unique_id "adrMh3f97wYZje1ep_NmkQAAAMg"]
[Sun Apr 12 06:34:57.397464 2026] [:error] [pid 26600:tid 26651] [client 20.104.18.4:28574] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php"] [unique_id "adrMke1YwAZiXhQKLYqD5AAAAZY"]
[Sun Apr 12 06:34:58.031297 2026] [:error] [pid 25329:tid 25411] [client 20.104.18.4:28578] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php"] [unique_id "adrMkmdcIYsS8Iyaj11ADwAAAJQ"]
[Sun Apr 12 06:34:58.867782 2026] [:error] [pid 25327:tid 25340] [client 20.104.18.4:28617] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "adrMki6h2tZEVJo9JFJKiwAAAAQ"]
[Sun Apr 12 06:34:59.006584 2026] [:error] [pid 25328:tid 25389] [client 20.104.18.4:28581] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php"] [unique_id "adrMk8xUaQZxT-e0YsD4yQAAAFA"]
[Sun Apr 12 06:35:02.695336 2026] [:error] [pid 25329:tid 25388] [client 20.104.18.4:28587] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php"] [unique_id "adrMlmdcIYsS8Iyaj11AFgAAAIc"]
[Sun Apr 12 06:35:07.700343 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:28627] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anone.php"] [unique_id "adrMm3f97wYZje1ep_NmpgAAAMI"]
[Sun Apr 12 06:35:09.221434 2026] [:error] [pid 25437:tid 25451] [client 20.104.18.4:28575] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anone.php"] [unique_id "adrMnXf97wYZje1ep_NmqwAAAMw"]
[Sun Apr 12 06:35:10.924969 2026] [:error] [pid 60280:tid 60285] [client 20.104.18.4:28567] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anone.php"] [unique_id "adrMnnBlLnDOYuIykkj8uAAAAcM"]
[Sun Apr 12 06:35:13.623760 2026] [:error] [pid 60280:tid 60283] [client 20.104.18.4:28599] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anone.php"] [unique_id "adrMoXBlLnDOYuIykkj8ugAAAcE"]
[Sun Apr 12 06:35:24.450313 2026] [:error] [pid 25437:tid 25458] [client 20.104.18.4:28519] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configer.php"] [unique_id "adrMrHf97wYZje1ep_NmrgAAANM"]
[Sun Apr 12 06:35:28.629825 2026] [:error] [pid 25329:tid 25404] [client 20.104.18.4:28626] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-configer.php"] [unique_id "adrMsGdcIYsS8Iyaj11AJAAAAJA"]
[Sun Apr 12 06:35:31.344830 2026] [:error] [pid 25329:tid 25413] [client 20.104.18.4:28584] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ad.php"] [unique_id "adrMs2dcIYsS8Iyaj11AJgAAAJY"]
[Sun Apr 12 06:35:33.146505 2026] [:error] [pid 25327:tid 25341] [client 20.104.18.4:28566] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ad.php"] [unique_id "adrMtS6h2tZEVJo9JFJKogAAAAU"]
[Sun Apr 12 06:35:33.681873 2026] [:error] [pid 26600:tid 26643] [client 20.104.18.4:28486] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ad.php"] [unique_id "adrMte1YwAZiXhQKLYqD_AAAAY4"]
[Sun Apr 12 06:35:34.523345 2026] [:error] [pid 25329:tid 25414] [client 20.104.18.4:28549] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ad.php"] [unique_id "adrMtmdcIYsS8Iyaj11AKAAAAJc"]
[Sun Apr 12 06:35:35.388168 2026] [:error] [pid 26599:tid 26621] [client 20.104.18.4:28652] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/send.php"] [unique_id "adrMt3G89LXoQbk_rwBMJwAAAVM"]
[Sun Apr 12 06:35:37.009618 2026] [:error] [pid 26599:tid 26626] [client 20.104.18.4:28651] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/send.php"] [unique_id "adrMuXG89LXoQbk_rwBMKgAAAVg"]
[Sun Apr 12 06:35:38.047320 2026] [:error] [pid 25329:tid 25409] [client 20.104.18.4:28582] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/send.php"] [unique_id "adrMumdcIYsS8Iyaj11ALwAAAJM"]
[Sun Apr 12 06:35:39.430678 2026] [:error] [pid 60280:tid 60289] [client 20.104.18.4:28529] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/send.php"] [unique_id "adrMu3BlLnDOYuIykkj80AAAAcc"]
[Sun Apr 12 06:35:41.423495 2026] [:error] [pid 25437:tid 25445] [client 20.104.18.4:28506] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adrMvXf97wYZje1ep_Nm7gAAAMY"]
[Sun Apr 12 06:35:42.001408 2026] [:error] [pid 25437:tid 25446] [client 20.104.18.4:28508] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adrMvnf97wYZje1ep_Nm8AAAAMc"]
[Sun Apr 12 06:35:43.050411 2026] [:error] [pid 25329:tid 25414] [client 20.104.18.4:28466] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adrMv2dcIYsS8Iyaj11ANQAAAJc"]
[Sun Apr 12 06:35:44.856445 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:28625] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adrMwHf97wYZje1ep_Nm9QAAAMI"]
[Sun Apr 12 06:35:46.240410 2026] [:error] [pid 26567:tid 26591] [client 20.104.18.4:28570] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adrMwnhRpg6ptWFyFx0QfQAAARY"]
[Sun Apr 12 06:35:47.626276 2026] [:error] [pid 25437:tid 25439] [client 20.104.18.4:28514] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adrMw3f97wYZje1ep_Nm_AAAAMA"]
[Sun Apr 12 06:35:49.064070 2026] [:error] [pid 25437:tid 25446] [client 20.104.18.4:28452] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adrMxXf97wYZje1ep_NnAgAAAMc"]
[Sun Apr 12 06:35:50.109886 2026] [:error] [pid 25437:tid 25440] [client 20.104.18.4:28611] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adrMxnf97wYZje1ep_NnBwAAAME"]
[Sun Apr 12 06:35:51.410623 2026] [:error] [pid 25437:tid 25444] [client 20.104.18.4:28516] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendmail.php"] [unique_id "adrMx3f97wYZje1ep_NnDgAAAMU"]
[Sun Apr 12 06:35:52.599413 2026] [:error] [pid 25437:tid 25458] [client 20.104.18.4:28600] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lf.php"] [unique_id "adrMyHf97wYZje1ep_NnEwAAANM"]
[Sun Apr 12 06:35:54.469175 2026] [:error] [pid 25437:tid 25456] [client 20.104.18.4:28590] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendmail.php"] [unique_id "adrMynf97wYZje1ep_NnGgAAANE"]
[Sun Apr 12 06:35:54.730285 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:28561] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lf.php"] [unique_id "adrMysxUaQZxT-e0YsD48AAAAFI"]
[Sun Apr 12 06:35:55.970518 2026] [:error] [pid 25437:tid 25452] [client 20.104.18.4:28638] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lf.php"] [unique_id "adrMy3f97wYZje1ep_NnHwAAAM0"]
[Sun Apr 12 06:36:03.326720 2026] [:error] [pid 25437:tid 25455] [client 20.104.18.4:28491] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confirm.php"] [unique_id "adrM03f97wYZje1ep_NnQAAAANA"]
[Sun Apr 12 06:36:03.483643 2026] [:error] [pid 25437:tid 25462] [client 20.104.18.4:28659] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mrjn.php"] [unique_id "adrM03f97wYZje1ep_NnQQAAANc"]
[Sun Apr 12 06:36:05.757831 2026] [:error] [pid 25329:tid 25397] [client 20.104.18.4:28597] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confirm.php"] [unique_id "adrM1WdcIYsS8Iyaj11ATAAAAIw"]
[Sun Apr 12 06:36:05.982999 2026] [:error] [pid 25329:tid 25381] [client 20.104.18.4:28583] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mrjn.php"] [unique_id "adrM1WdcIYsS8Iyaj11ATwAAAIM"]
[Sun Apr 12 06:36:08.032797 2026] [:error] [pid 25329:tid 25384] [client 20.104.18.4:28444] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confirm.php"] [unique_id "adrM2GdcIYsS8Iyaj11AVAAAAIU"]
[Sun Apr 12 06:36:09.106732 2026] [:error] [pid 25329:tid 25382] [client 20.104.18.4:28492] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mrjn.php"] [unique_id "adrM2WdcIYsS8Iyaj11AVQAAAIQ"]
[Sun Apr 12 06:36:10.079008 2026] [:error] [pid 26600:tid 26639] [client 20.104.18.4:28668] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confirm.php"] [unique_id "adrM2u1YwAZiXhQKLYqECwAAAYo"]
[Sun Apr 12 06:36:11.694290 2026] [:error] [pid 25328:tid 25364] [client 20.104.18.4:28631] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mrjn.php"] [unique_id "adrM28xUaQZxT-e0YsD4_AAAAEA"]
[Sun Apr 12 06:36:13.352344 2026] [:error] [pid 26600:tid 26636] [client 20.104.18.4:28565] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa123.php"] [unique_id "adrM3e1YwAZiXhQKLYqEDAAAAYc"]
[Sun Apr 12 06:36:13.640284 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:28628] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kn.php"] [unique_id "adrM3Xf97wYZje1ep_NnSQAAAMI"]
[Sun Apr 12 06:36:14.757869 2026] [:error] [pid 25328:tid 25403] [client 20.104.18.4:28633] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kn.php"] [unique_id "adrM3sxUaQZxT-e0YsD5AwAAAFY"]
[Sun Apr 12 06:36:15.682817 2026] [:error] [pid 26599:tid 26621] [client 20.104.18.4:28636] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kn.php"] [unique_id "adrM33G89LXoQbk_rwBMQwAAAVM"]
[Sun Apr 12 06:36:16.393337 2026] [:error] [pid 25328:tid 25375] [client 20.104.18.4:28554] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kn.php"] [unique_id "adrM4MxUaQZxT-e0YsD5BQAAAEk"]
[Sun Apr 12 06:36:16.402401 2026] [:error] [pid 25328:tid 25398] [client 20.104.18.4:28642] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa123.php"] [unique_id "adrM4MxUaQZxT-e0YsD5BgAAAFQ"]
[Sun Apr 12 06:36:17.988952 2026] [:error] [pid 25329:tid 25376] [client 20.104.18.4:28624] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3301.php"] [unique_id "adrM4WdcIYsS8Iyaj11AbAAAAIE"]
[Sun Apr 12 06:36:18.272396 2026] [:error] [pid 26599:tid 26608] [client 20.104.18.4:28535] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa123.php"] [unique_id "adrM4nG89LXoQbk_rwBMRgAAAUY"]
[Sun Apr 12 06:36:20.394709 2026] [:error] [pid 25329:tid 25415] [client 20.104.18.4:28632] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa123.php"] [unique_id "adrM5GdcIYsS8Iyaj11AeAAAAJg"]
[Sun Apr 12 06:36:20.655408 2026] [:error] [pid 25328:tid 25364] [client 20.104.18.4:28546] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3301.php"] [unique_id "adrM5MxUaQZxT-e0YsD5CwAAAEA"]
[Sun Apr 12 06:36:22.342793 2026] [:error] [pid 25329:tid 25400] [client 20.104.18.4:28557] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3301.php"] [unique_id "adrM5mdcIYsS8Iyaj11AgQAAAI4"]
[Sun Apr 12 06:36:23.809206 2026] [:error] [pid 26567:tid 26569] [client 20.104.18.4:28615] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3301.php"] [unique_id "adrM53hRpg6ptWFyFx0QiAAAAQA"]
[Sun Apr 12 06:36:24.077981 2026] [:error] [pid 26599:tid 26626] [client 20.104.18.4:28533] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload.php"] [unique_id "adrM6HG89LXoQbk_rwBMSQAAAVg"]
[Sun Apr 12 06:36:25.160046 2026] [:error] [pid 26599:tid 26614] [client 20.104.18.4:28531] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leaf.php"] [unique_id "adrM6XG89LXoQbk_rwBMTgAAAUw"]
[Sun Apr 12 06:36:26.109529 2026] [:error] [pid 25328:tid 25398] [client 20.104.18.4:28536] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leaf.php"] [unique_id "adrM6sxUaQZxT-e0YsD5EgAAAFQ"]
[Sun Apr 12 06:36:29.942832 2026] [:error] [pid 25437:tid 25443] [client 20.104.18.4:28595] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leaf.php"] [unique_id "adrM7Xf97wYZje1ep_NnUgAAAMQ"]
[Sun Apr 12 06:36:31.353027 2026] [:error] [pid 26567:tid 26573] [client 20.104.18.4:28563] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/leaf.php"] [unique_id "adrM73hRpg6ptWFyFx0QiwAAAQQ"]
[Sun Apr 12 06:36:33.183608 2026] [:error] [pid 26599:tid 26626] [client 20.104.18.4:28601] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alex.php"] [unique_id "adrM8XG89LXoQbk_rwBMVQAAAVg"]
[Sun Apr 12 06:36:35.940045 2026] [:error] [pid 25328:tid 25398] [client 20.104.18.4:28614] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload.php"] [unique_id "adrM88xUaQZxT-e0YsD5LgAAAFQ"]
[Sun Apr 12 06:36:38.655775 2026] [:error] [pid 60280:tid 60303] [client 20.104.18.4:28670] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alex.php"] [unique_id "adrM9nBlLnDOYuIykkj8-gAAAdU"]
[Sun Apr 12 06:36:43.137839 2026] [:error] [pid 25437:tid 25458] [client 20.104.18.4:28608] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alex.php"] [unique_id "adrM-3f97wYZje1ep_NnZAAAANM"]
[Sun Apr 12 06:36:49.532993 2026] [:error] [pid 25328:tid 25408] [client 20.104.18.4:28645] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php"] [unique_id "adrNAcxUaQZxT-e0YsD5RAAAAFg"]
[Sun Apr 12 06:36:50.941959 2026] [:error] [pid 25327:tid 25347] [client 20.104.18.4:28623] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php"] [unique_id "adrNAi6h2tZEVJo9JFJKtgAAAAs"]
[Sun Apr 12 06:36:54.459273 2026] [:error] [pid 60280:tid 60291] [client 20.104.18.4:28579] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php"] [unique_id "adrNBnBlLnDOYuIykkj9AgAAAck"]
[Sun Apr 12 06:36:55.779004 2026] [:error] [pid 26599:tid 26622] [client 20.104.18.4:28609] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-one.php"] [unique_id "adrNB3G89LXoQbk_rwBMXwAAAVQ"]
[Sun Apr 12 06:36:56.159658 2026] [:error] [pid 26599:tid 26619] [client 20.104.18.4:28613] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mailer.php"] [unique_id "adrNCHG89LXoQbk_rwBMYQAAAVE"]
[Sun Apr 12 06:36:57.182833 2026] [:error] [pid 26599:tid 26614] [client 20.104.18.4:28639] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-one.php"] [unique_id "adrNCXG89LXoQbk_rwBMaAAAAUw"]
[Sun Apr 12 06:36:58.141430 2026] [:error] [pid 26600:tid 26631] [client 20.104.18.4:28572] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-one.php"] [unique_id "adrNCu1YwAZiXhQKLYqEKgAAAYI"]
[Sun Apr 12 06:36:59.543877 2026] [:error] [pid 25328:tid 25373] [client 20.104.18.4:28499] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-one.php"] [unique_id "adrNC8xUaQZxT-e0YsD5SwAAAEg"]
[Sun Apr 12 06:36:59.625080 2026] [:error] [pid 25328:tid 25387] [client 20.104.18.4:28558] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anone.php"] [unique_id "adrNC8xUaQZxT-e0YsD5TAAAAE8"]
[Sun Apr 12 06:37:00.793170 2026] [:error] [pid 26599:tid 26617] [client 20.104.18.4:28427] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anone.php"] [unique_id "adrNDHG89LXoQbk_rwBMcAAAAU8"]
[Sun Apr 12 06:37:01.182737 2026] [:error] [pid 25329:tid 25400] [client 20.104.18.4:28493] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "adrNDWdcIYsS8Iyaj11AtQAAAI4"]
[Sun Apr 12 06:37:01.660200 2026] [:error] [pid 25327:tid 25344] [client 20.104.18.4:28512] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/anone.php"] [unique_id "adrNDS6h2tZEVJo9JFJKtwAAAAg"]
[Sun Apr 12 06:37:02.032315 2026] [:error] [pid 26600:tid 26641] [client 20.104.18.4:28525] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexus.php"] [unique_id "adrNDu1YwAZiXhQKLYqELgAAAYw"]
[Sun Apr 12 06:37:06.562097 2026] [:error] [pid 25437:tid 25453] [client 20.104.18.4:28616] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adrNEnf97wYZje1ep_NnfwAAAM4"]
[Sun Apr 12 06:37:07.510676 2026] [:error] [pid 25328:tid 25389] [client 20.104.18.4:28465] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adrNE8xUaQZxT-e0YsD5UgAAAFA"]
[Sun Apr 12 06:37:10.437350 2026] [:error] [pid 25437:tid 25459] [client 20.104.18.4:28635] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adrNFnf97wYZje1ep_NnlAAAANQ"]
[Sun Apr 12 06:37:10.733316 2026] [:error] [pid 25437:tid 25442] [client 20.104.18.4:28488] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "adrNFnf97wYZje1ep_NnmAAAAMM"]
[Sun Apr 12 06:37:13.428508 2026] [:error] [pid 26600:tid 26648] [client 20.104.18.4:28591] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "adrNGe1YwAZiXhQKLYqEMgAAAZM"]
[Sun Apr 12 06:37:14.312798 2026] [:error] [pid 26600:tid 26630] [client 20.104.18.4:28585] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "adrNGu1YwAZiXhQKLYqENAAAAYE"]
[Sun Apr 12 06:37:15.179725 2026] [:error] [pid 25437:tid 25459] [client 20.104.18.4:28423] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adrNG3f97wYZje1ep_NnpQAAANQ"]
[Sun Apr 12 06:37:15.228966 2026] [:error] [pid 25329:tid 25376] [client 20.104.18.4:28646] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "adrNG2dcIYsS8Iyaj11AxAAAAIE"]
[Sun Apr 12 06:37:17.061797 2026] [:error] [pid 25328:tid 25391] [client 20.104.18.4:28518] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ohayo.php"] [unique_id "adrNHcxUaQZxT-e0YsD5XgAAAFE"]
[Sun Apr 12 06:37:18.027801 2026] [:error] [pid 25329:tid 25412] [client 20.104.18.4:28621] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adrNHmdcIYsS8Iyaj11AyQAAAJU"]
[Sun Apr 12 06:37:18.531756 2026] [:error] [pid 25437:tid 25460] [client 20.104.18.4:28630] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ohayo.php"] [unique_id "adrNHnf97wYZje1ep_NnqQAAANU"]
[Sun Apr 12 06:37:18.866082 2026] [:error] [pid 25437:tid 25450] [client 20.104.18.4:28437] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adrNHnf97wYZje1ep_NnqwAAAMs"]
[Sun Apr 12 06:37:19.353719 2026] [:error] [pid 26567:tid 26569] [client 20.104.18.4:28490] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ohayo.php"] [unique_id "adrNH3hRpg6ptWFyFx0QpAAAAQA"]
[Sun Apr 12 06:37:20.567668 2026] [:error] [pid 25437:tid 25439] [client 20.104.18.4:28537] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ohayo.php"] [unique_id "adrNIHf97wYZje1ep_NnsAAAAMA"]
[Sun Apr 12 06:37:21.275987 2026] [:error] [pid 25329:tid 25414] [client 20.104.18.4:28422] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin.php"] [unique_id "adrNIWdcIYsS8Iyaj11AzgAAAJc"]
[Sun Apr 12 06:37:21.327324 2026] [:error] [pid 25328:tid 25401] [client 20.104.18.4:28650] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adrNIcxUaQZxT-e0YsD5ZQAAAFU"]
[Sun Apr 12 06:37:22.193741 2026] [:error] [pid 25437:tid 25440] [client 20.104.18.4:28480] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin.php"] [unique_id "adrNInf97wYZje1ep_NnygAAAME"]
[Sun Apr 12 06:37:23.593058 2026] [:error] [pid 25328:tid 25377] [client 20.104.18.4:28434] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin.php"] [unique_id "adrNI8xUaQZxT-e0YsD5cQAAAEo"]
[Sun Apr 12 06:37:24.222833 2026] [:error] [pid 25437:tid 25456] [client 20.104.18.4:28454] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adrNJHf97wYZje1ep_Nn4QAAANE"]
[Sun Apr 12 06:37:25.206629 2026] [:error] [pid 25437:tid 25462] [client 20.104.18.4:28618] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin.php"] [unique_id "adrNJXf97wYZje1ep_Nn5QAAANc"]
[Sun Apr 12 06:37:26.715821 2026] [:error] [pid 25437:tid 25448] [client 20.104.18.4:28607] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms.php"] [unique_id "adrNJnf97wYZje1ep_Nn6gAAAMk"]
[Sun Apr 12 06:37:28.450826 2026] [:error] [pid 25437:tid 25446] [client 20.104.18.4:28568] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adrNKHf97wYZje1ep_Nn9QAAAMc"]
[Sun Apr 12 06:37:28.889340 2026] [:error] [pid 26567:tid 26587] [client 20.104.18.4:28551] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms.php"] [unique_id "adrNKHhRpg6ptWFyFx0QswAAARI"]
[Sun Apr 12 06:37:31.084148 2026] [:error] [pid 60280:tid 60300] [client 20.104.18.4:28365] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms.php"] [unique_id "adrNK3BlLnDOYuIykkj9FAAAAdI"]
[Sun Apr 12 06:37:32.415463 2026] [:error] [pid 25437:tid 25443] [client 20.104.18.4:28648] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms.php"] [unique_id "adrNLHf97wYZje1ep_NoAAAAAMQ"]
[Sun Apr 12 06:37:33.368286 2026] [:error] [pid 25437:tid 25463] [client 20.104.18.4:28573] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-uploads.php"] [unique_id "adrNLXf97wYZje1ep_NoBAAAANg"]
[Sun Apr 12 06:37:33.944104 2026] [:error] [pid 26600:tid 26629] [client 20.104.18.4:28644] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.wp-cache.php"] [unique_id "adrNLe1YwAZiXhQKLYqEPQAAAYA"]
[Sun Apr 12 06:37:35.581864 2026] [:error] [pid 60280:tid 60295] [client 20.104.18.4:28662] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-uploads.php"] [unique_id "adrNL3BlLnDOYuIykkj9FQAAAc0"]
[Sun Apr 12 06:37:37.898052 2026] [:error] [pid 26567:tid 26581] [client 20.104.18.4:28509] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-uploads.php"] [unique_id "adrNMXhRpg6ptWFyFx0QwgAAAQw"]
[Sun Apr 12 06:37:39.144051 2026] [:error] [pid 26600:tid 26641] [client 20.104.18.4:28545] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-uploads.php"] [unique_id "adrNM-1YwAZiXhQKLYqEPwAAAYw"]
[Sun Apr 12 06:37:39.474542 2026] [:error] [pid 26567:tid 26593] [client 20.104.18.4:28550] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendmail.php"] [unique_id "adrNM3hRpg6ptWFyFx0QzQAAARg"]
[Sun Apr 12 06:37:45.444571 2026] [:error] [pid 25437:tid 25458] [client 20.104.18.4:28433] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gel.php"] [unique_id "adrNOXf97wYZje1ep_NoGAAAANM"]
[Sun Apr 12 06:37:46.680003 2026] [:error] [pid 26567:tid 26591] [client 20.104.18.4:28495] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sendmail.php"] [unique_id "adrNOnhRpg6ptWFyFx0Q0gAAARY"]
[Sun Apr 12 06:37:48.073215 2026] [:error] [pid 26567:tid 26578] [client 20.104.18.4:28361] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gel.php"] [unique_id "adrNPHhRpg6ptWFyFx0Q2AAAAQk"]
[Sun Apr 12 06:37:49.412108 2026] [:error] [pid 25437:tid 25457] [client 20.104.18.4:28671] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rahma.php"] [unique_id "adrNPXf97wYZje1ep_NoGwAAANI"]
[Sun Apr 12 06:37:49.898967 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:28502] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gel.php"] [unique_id "adrNPXf97wYZje1ep_NoIQAAAMI"]
[Sun Apr 12 06:37:53.674310 2026] [:error] [pid 60280:tid 60285] [client 20.104.18.4:28657] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gel.php"] [unique_id "adrNQXBlLnDOYuIykkj9IAAAAcM"]
[Sun Apr 12 06:38:03.565426 2026] [:error] [pid 25437:tid 25440] [client 20.104.18.4:28547] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rahma.php"] [unique_id "adrNS3f97wYZje1ep_NoKgAAAME"]
[Sun Apr 12 06:38:05.927330 2026] [:error] [pid 26567:tid 26575] [client 20.104.18.4:28629] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/41.php"] [unique_id "adrNTXhRpg6ptWFyFx0Q6wAAAQY"]
[Sun Apr 12 06:38:17.797641 2026] [:error] [pid 25437:tid 25451] [client 20.104.18.4:28479] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/niil.php"] [unique_id "adrNWXf97wYZje1ep_NoQQAAAMw"]
[Sun Apr 12 06:38:18.240619 2026] [:error] [pid 25328:tid 25383] [client 20.104.18.4:28664] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MARIJUANA.php"] [unique_id "adrNWsxUaQZxT-e0YsD5qwAAAE0"]
[Sun Apr 12 06:38:19.469196 2026] [:error] [pid 26600:tid 26640] [client 20.104.18.4:28487] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519-items.php"] [unique_id "adrNW-1YwAZiXhQKLYqEZgAAAYs"]
[Sun Apr 12 06:38:20.519309 2026] [:error] [pid 26567:tid 26576] [client 20.104.18.4:28669] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kiss.php"] [unique_id "adrNXHhRpg6ptWFyFx0REQAAAQc"]
[Sun Apr 12 06:38:21.268488 2026] [:error] [pid 25327:tid 25358] [client 20.104.18.4:28559] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kiss.php"] [unique_id "adrNXS6h2tZEVJo9JFJKxgAAABY"]
[Sun Apr 12 06:38:23.288880 2026] [:error] [pid 25329:tid 25412] [client 20.104.18.4:28641] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kiss.php"] [unique_id "adrNX2dcIYsS8Iyaj11A7QAAAJU"]
[Sun Apr 12 06:38:24.421143 2026] [:error] [pid 25329:tid 25395] [client 20.104.18.4:28606] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MARIJUANA.php"] [unique_id "adrNYGdcIYsS8Iyaj11A8QAAAIs"]
[Sun Apr 12 06:38:24.796442 2026] [:error] [pid 26600:tid 26634] [client 20.104.18.4:28510] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kiss.php"] [unique_id "adrNYO1YwAZiXhQKLYqEbAAAAYU"]
[Sun Apr 12 06:38:26.056023 2026] [:error] [pid 25328:tid 25377] [client 20.104.18.4:28425] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "adrNYsxUaQZxT-e0YsD5rgAAAEo"]
[Sun Apr 12 06:38:27.062708 2026] [:error] [pid 26599:tid 26625] [client 20.104.18.4:28521] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "adrNY3G89LXoQbk_rwBMwAAAAVc"]
[Sun Apr 12 06:38:32.177028 2026] [:error] [pid 25437:tid 25444] [client 20.104.18.4:28643] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "adrNaHf97wYZje1ep_NoTwAAAMU"]
[Sun Apr 12 06:38:32.196654 2026] [:error] [pid 25437:tid 25461] [client 20.104.18.4:28556] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/MARIJUANA.php"] [unique_id "adrNaHf97wYZje1ep_NoUAAAANY"]
[Sun Apr 12 06:38:33.852812 2026] [:error] [pid 25437:tid 25456] [client 20.104.18.4:28610] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0.php"] [unique_id "adrNaXf97wYZje1ep_NoVQAAANE"]
[Sun Apr 12 06:38:36.693902 2026] [:error] [pid 25437:tid 25448] [client 20.104.18.4:28647] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/owl.php"] [unique_id "adrNbHf97wYZje1ep_NoXgAAAMk"]
[Sun Apr 12 06:38:37.972251 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:28577] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.fk.php"] [unique_id "adrNbcxUaQZxT-e0YsD5wwAAAFI"]
[Sun Apr 12 06:38:45.927135 2026] [:error] [pid 26599:tid 26619] [client 20.104.18.4:28598] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/owl.php"] [unique_id "adrNdXG89LXoQbk_rwBNEAAAAVE"]
[Sun Apr 12 06:38:57.413963 2026] [:error] [pid 26567:tid 26590] [client 20.104.18.4:28445] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/XxX.php"] [unique_id "adrNgXhRpg6ptWFyFx0RUQAAARU"]
[Sun Apr 12 06:38:59.338943 2026] [:error] [pid 25437:tid 25458] [client 20.104.18.4:28553] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/XxX.php"] [unique_id "adrNg3f97wYZje1ep_NovgAAANM"]
[Sun Apr 12 06:39:04.258584 2026] [:error] [pid 25437:tid 25456] [client 20.104.18.4:28496] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/XxX.php"] [unique_id "adrNiHf97wYZje1ep_No0AAAANE"]
[Sun Apr 12 06:39:07.397948 2026] [:error] [pid 26567:tid 26591] [client 20.104.18.4:28418] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/XxX.php"] [unique_id "adrNi3hRpg6ptWFyFx0RbwAAARY"]
[Sun Apr 12 06:39:08.445412 2026] [:error] [pid 26600:tid 26633] [client 20.104.18.4:28504] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexuse.php"] [unique_id "adrNjO1YwAZiXhQKLYqEgwAAAYQ"]
[Sun Apr 12 06:39:09.067170 2026] [:error] [pid 25329:tid 25390] [client 20.104.18.4:28540] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexuse.php"] [unique_id "adrNjWdcIYsS8Iyaj11BHQAAAIg"]
[Sun Apr 12 06:39:09.626998 2026] [:error] [pid 25329:tid 25415] [client 20.104.18.4:28500] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ohayo.php"] [unique_id "adrNjWdcIYsS8Iyaj11BIAAAAJg"]
[Sun Apr 12 06:39:10.656742 2026] [:error] [pid 26567:tid 26569] [client 20.104.18.4:28634] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ohayo.php"] [unique_id "adrNjnhRpg6ptWFyFx0RdwAAAQA"]
[Sun Apr 12 06:39:11.115909 2026] [:error] [pid 26599:tid 26605] [client 20.104.18.4:28649] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexuse.php"] [unique_id "adrNj3G89LXoQbk_rwBNIgAAAUM"]
[Sun Apr 12 06:39:13.133324 2026] [:error] [pid 25329:tid 25412] [client 20.104.18.4:28661] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ohayo.php"] [unique_id "adrNkWdcIYsS8Iyaj11BKgAAAJU"]
[Sun Apr 12 06:39:16.859449 2026] [:error] [pid 26567:tid 26577] [client 20.104.18.4:28574] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ohayo.php"] [unique_id "adrNlHhRpg6ptWFyFx0RhAAAAQg"]
[Sun Apr 12 06:39:23.775722 2026] [proxy_fcgi:error] [pid 60280:tid 60289] [client 20.104.18.4:28653] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 06:39:23.995848 2026] [proxy_fcgi:error] [pid 60280:tid 60303] [client 20.104.18.4:28653] AH01071: Got error 'Primary script unknown'
[Sun Apr 12 06:39:25.321149 2026] [:error] [pid 26599:tid 26615] [client 20.104.18.4:28644] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adrNnXG89LXoQbk_rwBNNwAAAU0"]
[Sun Apr 12 06:39:26.367056 2026] [:error] [pid 60280:tid 60304] [client 20.104.18.4:28522] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gel.php"] [unique_id "adrNnnBlLnDOYuIykkj9egAAAdY"]
[Sun Apr 12 06:39:28.261915 2026] [:error] [pid 25437:tid 25445] [client 20.104.18.4:28593] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Gel.php"] [unique_id "adrNoHf97wYZje1ep_NpCQAAAMY"]
[Sun Apr 12 06:39:36.469432 2026] [:error] [pid 25327:tid 25341] [client 20.104.18.4:28667] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adrNqC6h2tZEVJo9JFJLBwAAAAU"]
[Sun Apr 12 06:39:45.737812 2026] [:error] [pid 25437:tid 25450] [client 20.104.18.4:28569] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/41.php"] [unique_id "adrNsXf97wYZje1ep_NpKgAAAMs"]
[Sun Apr 12 06:39:53.283293 2026] [:error] [pid 25327:tid 25340] [client 20.104.18.4:28567] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "adrNuS6h2tZEVJo9JFJLFgAAAAQ"]
[Sun Apr 12 06:39:53.496221 2026] [:error] [pid 25437:tid 25440] [client 20.104.18.4:28524] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/41.php"] [unique_id "adrNuXf97wYZje1ep_NpbwAAAME"]
[Sun Apr 12 06:40:08.614791 2026] [:error] [pid 26567:tid 26572] [client 20.104.18.4:28498] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adrNyHhRpg6ptWFyFx0R2QAAAQM"]
[Sun Apr 12 06:40:23.571921 2026] [:error] [pid 26567:tid 26591] [client 20.104.18.4:28617] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "adrN13hRpg6ptWFyFx0R8wAAARY"]
[Sun Apr 12 06:41:06.428288 2026] [:error] [pid 25437:tid 25451] [client 20.104.18.4:28667] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adrOAnf97wYZje1ep_Nq8wAAAMw"]
[Sun Apr 12 06:41:06.519621 2026] [:error] [pid 26599:tid 26624] [client 20.104.18.4:28628] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "adrOAnG89LXoQbk_rwBNiwAAAVY"]
[Sun Apr 12 06:41:07.157441 2026] [:error] [pid 26599:tid 26610] [client 20.104.18.4:28632] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adrOA3G89LXoQbk_rwBNjQAAAUg"]
[Sun Apr 12 06:41:08.228195 2026] [:error] [pid 25328:tid 25403] [client 20.104.18.4:28659] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "adrOBMxUaQZxT-e0YsD6bgAAAFY"]
[Sun Apr 12 06:41:08.740727 2026] [:error] [pid 25327:tid 25344] [client 20.104.18.4:28638] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adrOBC6h2tZEVJo9JFJLTQAAAAg"]
[Sun Apr 12 06:41:09.511798 2026] [:error] [pid 26567:tid 26593] [client 20.104.18.4:28645] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "adrOBXhRpg6ptWFyFx0SJQAAARg"]
[Sun Apr 12 06:41:10.169959 2026] [:error] [pid 26567:tid 26585] [client 20.104.18.4:28558] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "adrOBnhRpg6ptWFyFx0SKgAAARA"]
[Sun Apr 12 06:41:11.148019 2026] [:error] [pid 25437:tid 25452] [client 20.104.18.4:28668] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "adrOB3f97wYZje1ep_Nq-AAAAM0"]
[Sun Apr 12 06:41:11.153064 2026] [:error] [pid 25437:tid 25463] [client 20.104.18.4:28624] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-info.php"] [unique_id "adrOB3f97wYZje1ep_Nq-QAAANg"]
[Sun Apr 12 06:41:12.373469 2026] [:error] [pid 25437:tid 25459] [client 20.104.18.4:28600] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl.php"] [unique_id "adrOCHf97wYZje1ep_NrAwAAANQ"]
[Sun Apr 12 06:41:12.706407 2026] [:error] [pid 25437:tid 25457] [client 20.104.18.4:28560] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "adrOCHf97wYZje1ep_NrBQAAANI"]
[Sun Apr 12 06:41:13.479485 2026] [:error] [pid 25329:tid 25402] [client 20.104.18.4:28594] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl.php"] [unique_id "adrOCWdcIYsS8Iyaj11B4QAAAI8"]
[Sun Apr 12 06:41:14.198076 2026] [:error] [pid 25327:tid 25347] [client 20.104.18.4:28511] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl.php"] [unique_id "adrOCi6h2tZEVJo9JFJLUgAAAAs"]
[Sun Apr 12 06:41:16.999854 2026] [:error] [pid 25328:tid 25383] [client 20.104.18.4:28587] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl.php"] [unique_id "adrODMxUaQZxT-e0YsD6eAAAAE0"]
[Sun Apr 12 06:41:19.417826 2026] [:error] [pid 25328:tid 25398] [client 20.104.18.4:28663] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confiig.php"] [unique_id "adrOD8xUaQZxT-e0YsD6hAAAAFQ"]
[Sun Apr 12 06:41:20.565589 2026] [:error] [pid 26600:tid 26646] [client 20.104.18.4:28656] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "adrOEO1YwAZiXhQKLYqE_wAAAZE"]
[Sun Apr 12 06:41:20.941369 2026] [:error] [pid 25328:tid 25377] [client 20.104.18.4:28666] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confiig.php"] [unique_id "adrOEMxUaQZxT-e0YsD6iAAAAEo"]
[Sun Apr 12 06:41:22.876746 2026] [:error] [pid 25327:tid 25337] [client 20.104.18.4:28581] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "adrOEi6h2tZEVJo9JFJLWgAAAAE"]
[Sun Apr 12 06:41:23.194082 2026] [:error] [pid 26599:tid 26623] [client 20.104.18.4:28585] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confiig.php"] [unique_id "adrOE3G89LXoQbk_rwBNmAAAAVU"]
[Sun Apr 12 06:41:24.721542 2026] [:error] [pid 25437:tid 25447] [client 20.104.18.4:28563] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adrOFHf97wYZje1ep_NrHQAAAMg"]
[Sun Apr 12 06:41:25.779784 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:28601] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adrOFXf97wYZje1ep_NrIQAAAMI"]
[Sun Apr 12 06:41:27.000844 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:28655] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adrOFnf97wYZje1ep_NrMAAAAMI"]
[Sun Apr 12 06:41:27.969345 2026] [:error] [pid 25437:tid 25461] [client 20.104.18.4:28546] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adrOF3f97wYZje1ep_NrOwAAANY"]
[Sun Apr 12 06:41:29.160783 2026] [:error] [pid 25437:tid 25462] [client 20.104.18.4:28611] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad/about.php"] [unique_id "adrOGXf97wYZje1ep_NrSQAAANc"]
[Sun Apr 12 06:41:30.484792 2026] [:error] [pid 25437:tid 25452] [client 20.104.18.4:28633] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-confiig.php"] [unique_id "adrOGnf97wYZje1ep_NrTwAAAM0"]
[Sun Apr 12 06:41:31.925859 2026] [:error] [pid 26567:tid 26593] [client 20.104.18.4:28554] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad/about.php"] [unique_id "adrOG3hRpg6ptWFyFx0SNgAAARg"]
[Sun Apr 12 06:41:32.944621 2026] [:error] [pid 25437:tid 25453] [client 20.104.18.4:28620] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-manager.php"] [unique_id "adrOHHf97wYZje1ep_NrWQAAAM4"]
[Sun Apr 12 06:41:33.409678 2026] [:error] [pid 25437:tid 25460] [client 20.104.18.4:28503] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad/about.php"] [unique_id "adrOHXf97wYZje1ep_NrXwAAANU"]
[Sun Apr 12 06:41:34.944052 2026] [:error] [pid 25328:tid 25369] [client 20.104.18.4:28480] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad/about.php"] [unique_id "adrOHsxUaQZxT-e0YsD6pQAAAEU"]
[Sun Apr 12 06:41:36.149451 2026] [:error] [pid 25328:tid 25403] [client 20.104.18.4:28582] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adrOIMxUaQZxT-e0YsD6qAAAAFY"]
[Sun Apr 12 06:41:37.995075 2026] [:error] [pid 26567:tid 26582] [client 20.104.18.4:28568] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adrOIXhRpg6ptWFyFx0SRQAAAQ0"]
[Sun Apr 12 06:41:38.291380 2026] [:error] [pid 25328:tid 25367] [client 20.104.18.4:28631] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-manager.php"] [unique_id "adrOIsxUaQZxT-e0YsD6rwAAAEM"]
[Sun Apr 12 06:41:39.195472 2026] [:error] [pid 26567:tid 26581] [client 20.104.18.4:28599] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adrOI3hRpg6ptWFyFx0SSgAAAQw"]
[Sun Apr 12 06:41:40.342513 2026] [:error] [pid 25437:tid 25441] [client 20.104.18.4:28548] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "adrOJHf97wYZje1ep_NrdgAAAMI"]
[Sun Apr 12 06:41:41.542847 2026] [:error] [pid 26567:tid 26575] [client 20.104.18.4:28446] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "adrOJXhRpg6ptWFyFx0SVAAAAQY"]
[Sun Apr 12 06:41:42.743153 2026] [:error] [pid 26599:tid 26604] [client 20.104.18.4:28651] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "adrOJnG89LXoQbk_rwBNpgAAAUI"]
[Sun Apr 12 06:41:43.695988 2026] [:error] [pid 26567:tid 26581] [client 20.104.18.4:28572] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "adrOJ3hRpg6ptWFyFx0SXQAAAQw"]
[Sun Apr 12 06:41:45.087404 2026] [:error] [pid 25437:tid 25461] [client 20.104.18.4:28652] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goat.php"] [unique_id "adrOKXf97wYZje1ep_NrgAAAANY"]
[Sun Apr 12 06:41:46.293201 2026] [:error] [pid 25437:tid 25457] [client 20.104.18.4:28555] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-manager.php"] [unique_id "adrOKnf97wYZje1ep_NrjgAAANI"]
[Sun Apr 12 06:41:46.942056 2026] [:error] [pid 25329:tid 25395] [client 20.104.18.4:28584] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adrOKmdcIYsS8Iyaj11CJgAAAIs"]
[Sun Apr 12 06:41:50.347747 2026] [:error] [pid 25437:tid 25453] [client 20.104.18.4:28551] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adrOLnf97wYZje1ep_NrqgAAAM4"]
[Sun Apr 12 06:41:52.496671 2026] [:error] [pid 25327:tid 25344] [client 20.104.18.4:28561] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adrOMC6h2tZEVJo9JFJLXwAAAAg"]
[Sun Apr 12 06:41:54.007942 2026] [:error] [pid 25327:tid 25360] [client 20.104.18.4:28570] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alexusmailer%202.0.php"] [unique_id "adrOMi6h2tZEVJo9JFJLYAAAABg"]
[Sun Apr 12 06:41:58.130002 2026] [:error] [pid 26600:tid 26636] [client 20.104.18.4:28614] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "adrONu1YwAZiXhQKLYqFQQAAAYc"]
[Sun Apr 12 06:41:58.911398 2026] [:error] [pid 26599:tid 26617] [client 20.104.18.4:28509] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "adrONnG89LXoQbk_rwBNwgAAAU8"]
[Sun Apr 12 06:42:01.125800 2026] [:error] [pid 26600:tid 26645] [client 20.104.18.4:28507] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "adrOOe1YwAZiXhQKLYqFRAAAAZA"]
[Sun Apr 12 06:42:04.652122 2026] [:error] [pid 25437:tid 25451] [client 20.104.18.4:28596] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rss.php"] [unique_id "adrOPHf97wYZje1ep_Nr1AAAAMw"]
[Sun Apr 12 06:42:31.467841 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:28591] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrOV8xUaQZxT-e0YsD7AwAAAFI"]
[Sun Apr 12 06:42:32.980027 2026] [:error] [pid 26599:tid 26617] [client 20.104.18.4:28628] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOWHG89LXoQbk_rwBOHAAAAU8"]
[Sun Apr 12 06:42:33.056554 2026] [:error] [pid 25437:tid 25448] [client 20.104.18.4:28502] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrOWXf97wYZje1ep_Nr8wAAAMk"]
[Sun Apr 12 06:42:34.474042 2026] [:error] [pid 26600:tid 26638] [client 20.104.18.4:28490] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrOWu1YwAZiXhQKLYqFXAAAAYk"]
[Sun Apr 12 06:42:35.880230 2026] [:error] [pid 25437:tid 25449] [client 20.104.18.4:28623] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOW3f97wYZje1ep_NsBAAAAMo"]
[Sun Apr 12 06:42:37.459131 2026] [:error] [pid 25437:tid 25453] [client 20.104.18.4:28616] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrOXXf97wYZje1ep_NsCgAAAM4"]
[Sun Apr 12 06:42:38.294544 2026] [:error] [pid 25328:tid 25372] [client 20.104.18.4:28551] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOXsxUaQZxT-e0YsD7BAAAAEc"]
[Sun Apr 12 06:42:38.467845 2026] [:error] [pid 60280:tid 60291] [client 20.104.18.4:28627] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adrOXnBlLnDOYuIykkj-SAAAAck"]
[Sun Apr 12 06:42:44.004075 2026] [:error] [pid 25437:tid 25440] [client 20.104.18.4:28669] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adrOZHf97wYZje1ep_NsKgAAAME"]
[Sun Apr 12 06:42:46.540756 2026] [:error] [pid 25329:tid 25397] [client 20.104.18.4:28579] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOZmdcIYsS8Iyaj11CmwAAAIw"]
[Sun Apr 12 06:42:47.205857 2026] [:error] [pid 25329:tid 25409] [client 20.104.18.4:28639] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOZ2dcIYsS8Iyaj11CnAAAAJM"]
[Sun Apr 12 06:42:47.885037 2026] [:error] [pid 26600:tid 26632] [client 20.104.18.4:28547] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOZ-1YwAZiXhQKLYqFwgAAAYM"]
[Sun Apr 12 06:42:50.007070 2026] [:error] [pid 26567:tid 26585] [client 20.104.18.4:28654] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adrOanhRpg6ptWFyFx0S9QAAARA"]
[Sun Apr 12 06:42:50.815342 2026] [:error] [pid 26600:tid 26643] [client 20.104.18.4:28552] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOau1YwAZiXhQKLYqF2AAAAY4"]
[Sun Apr 12 06:42:51.523560 2026] [:error] [pid 25329:tid 25384] [client 20.104.18.4:28549] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/alfacgiapi/perl.alfa"] [unique_id "adrOa2dcIYsS8Iyaj11CswAAAIU"]
[Sun Apr 12 06:42:52.590885 2026] [:error] [pid 25328:tid 25368] [client 20.104.18.4:28606] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adrObMxUaQZxT-e0YsD7cgAAAEQ"]
[Sun Apr 12 06:42:53.783357 2026] [:error] [pid 26599:tid 26620] [client 20.104.18.4:28648] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adrObXG89LXoQbk_rwBOZQAAAVI"]
[Sun Apr 12 06:42:55.092621 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:28662] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adrOb8xUaQZxT-e0YsD7dwAAAFI"]
[Sun Apr 12 06:42:57.631013 2026] [:error] [pid 25328:tid 25408] [client 20.104.18.4:28583] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrOccxUaQZxT-e0YsD7gwAAAFg"]
[Sun Apr 12 06:43:00.673401 2026] [:error] [pid 26599:tid 26602] [client 20.104.18.4:28576] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/alfacgiapi/perl.alfa"] [unique_id "adrOdHG89LXoQbk_rwBOagAAAUA"]
[Sun Apr 12 06:43:01.640278 2026] [:error] [pid 25327:tid 25340] [client 20.104.18.4:28520] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrOdS6h2tZEVJo9JFJLkwAAAAQ"]
[Sun Apr 12 06:43:05.679110 2026] [:error] [pid 26567:tid 26569] [client 20.104.18.4:28497] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adrOeXhRpg6ptWFyFx0TDgAAAQA"]
[Sun Apr 12 06:43:05.988453 2026] [:error] [pid 25328:tid 25379] [client 20.104.18.4:28550] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmp_images/alfacgiapi/perl.alfa"] [unique_id "adrOecxUaQZxT-e0YsD7kwAAAEs"]
[Sun Apr 12 06:43:13.172950 2026] [:error] [pid 25437:tid 25446] [client 20.104.18.4:28636] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adrOgXf97wYZje1ep_NslAAAAMc"]
[Sun Apr 12 06:43:15.256954 2026] [:error] [pid 25328:tid 25391] [client 20.104.18.4:28417] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/alfacgiapi/perl.alfa"] [unique_id "adrOg8xUaQZxT-e0YsD7qAAAAFE"]
[Sun Apr 12 06:43:18.763314 2026] [:error] [pid 26567:tid 26582] [client 20.104.18.4:28640] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adrOhnhRpg6ptWFyFx0TLgAAAQ0"]
[Sun Apr 12 06:43:20.238292 2026] [:error] [pid 26567:tid 26588] [client 20.104.18.4:28514] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adrOiHhRpg6ptWFyFx0TMwAAARM"]
[Sun Apr 12 06:43:24.977659 2026] [:error] [pid 25437:tid 25457] [client 20.104.18.4:28619] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adrOjHf97wYZje1ep_NspAAAANI"]
[Sun Apr 12 06:43:27.592501 2026] [:error] [pid 26600:tid 26629] [client 20.104.18.4:28486] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "adrOj-1YwAZiXhQKLYqF-AAAAYA"]
[Sun Apr 12 06:43:29.019737 2026] [:error] [pid 25437:tid 25440] [client 20.104.18.4:28556] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOkXf97wYZje1ep_NssgAAAME"]
[Sun Apr 12 06:43:29.894425 2026] [:error] [pid 26600:tid 26651] [client 20.104.18.4:28493] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOke1YwAZiXhQKLYqF_gAAAZY"]
[Sun Apr 12 06:43:36.947607 2026] [:error] [pid 25437:tid 25439] [client 20.104.18.4:28613] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOmHf97wYZje1ep_NsuwAAAMA"]
[Sun Apr 12 06:43:36.992270 2026] [:error] [pid 26599:tid 26606] [client 20.104.18.4:28484] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adrOmHG89LXoQbk_rwBOmQAAAUQ"]
[Sun Apr 12 06:43:37.812082 2026] [:error] [pid 26599:tid 26622] [client 20.104.18.4:28559] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adrOmXG89LXoQbk_rwBOnAAAAVQ"]
[Sun Apr 12 06:43:38.860029 2026] [:error] [pid 60280:tid 60304] [client 20.104.18.4:28566] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adrOmnBlLnDOYuIykkj-dgAAAdY"]
[Sun Apr 12 06:43:39.211080 2026] [:error] [pid 25329:tid 25386] [client 20.104.18.4:28515] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOm2dcIYsS8Iyaj11C7QAAAIY"]
[Sun Apr 12 06:43:40.176617 2026] [:error] [pid 26600:tid 26640] [client 20.104.18.4:28441] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adrOnO1YwAZiXhQKLYqGEQAAAYs"]
[Sun Apr 12 06:43:41.200894 2026] [:error] [pid 26567:tid 26581] [client 20.104.18.4:28532] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOnXhRpg6ptWFyFx0TQwAAAQw"]
[Sun Apr 12 06:43:41.664677 2026] [:error] [pid 25327:tid 25347] [client 20.104.18.4:28634] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrOnS6h2tZEVJo9JFJLrgAAAAs"]
[Sun Apr 12 06:43:42.438123 2026] [:error] [pid 25328:tid 25383] [client 20.104.18.4:28609] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOnsxUaQZxT-e0YsD70gAAAE0"]
[Sun Apr 12 06:43:42.670291 2026] [:error] [pid 26600:tid 26632] [client 20.104.18.4:28622] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrOnu1YwAZiXhQKLYqGFAAAAYM"]
[Sun Apr 12 06:43:43.682657 2026] [:error] [pid 26599:tid 26612] [client 20.104.18.4:28436] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrOn3G89LXoQbk_rwBOpAAAAUo"]
[Sun Apr 12 06:43:44.147120 2026] [:error] [pid 25437:tid 25444] [client 20.104.18.4:28575] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOoHf97wYZje1ep_NsvwAAAMU"]
[Sun Apr 12 06:43:44.997817 2026] [:error] [pid 25329:tid 25388] [client 20.104.18.4:28528] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOoGdcIYsS8Iyaj11C9AAAAIc"]
[Sun Apr 12 06:43:45.141577 2026] [:error] [pid 25329:tid 25381] [client 20.104.18.4:28598] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/includes/pomo.php"] [unique_id "adrOoWdcIYsS8Iyaj11C9gAAAIM"]
[Sun Apr 12 06:43:45.995917 2026] [:error] [pid 25329:tid 25397] [client 20.104.18.4:28671] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOoWdcIYsS8Iyaj11C_AAAAIw"]
[Sun Apr 12 06:43:46.587196 2026] [:error] [pid 25329:tid 25404] [client 20.104.18.4:28553] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adrOomdcIYsS8Iyaj11C_gAAAJA"]
[Sun Apr 12 06:43:47.441777 2026] [:error] [pid 26599:tid 26616] [client 20.104.18.4:28562] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/images/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOo3G89LXoQbk_rwBOqAAAAU4"]
[Sun Apr 12 06:43:47.721034 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:28494] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adrOo8xUaQZxT-e0YsD72wAAAFI"]
[Sun Apr 12 06:43:48.612216 2026] [:error] [pid 25329:tid 25411] [client 20.104.18.4:28660] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adrOpGdcIYsS8Iyaj11DBQAAAJQ"]
[Sun Apr 12 06:43:49.139611 2026] [:error] [pid 25328:tid 25389] [client 20.104.18.4:28589] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adrOpcxUaQZxT-e0YsD74AAAAFA"]
[Sun Apr 12 06:43:50.587587 2026] [:error] [pid 26567:tid 26585] [client 20.104.18.4:28571] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/widgets/pomo.php"] [unique_id "adrOpnhRpg6ptWFyFx0TSAAAARA"]
[Sun Apr 12 06:43:50.945946 2026] [:error] [pid 25328:tid 25377] [client 20.104.18.4:28664] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adrOpsxUaQZxT-e0YsD75QAAAEo"]
[Sun Apr 12 06:43:51.124197 2026] [:error] [pid 25328:tid 25375] [client 20.104.18.4:28670] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adrOp8xUaQZxT-e0YsD75gAAAEk"]
[Sun Apr 12 06:43:52.399083 2026] [:error] [pid 26567:tid 26570] [client 20.104.18.4:28580] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adrOqHhRpg6ptWFyFx0TTwAAAQE"]
[Sun Apr 12 06:43:53.820928 2026] [:error] [pid 26567:tid 26583] [client 20.104.18.4:28625] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adrOqXhRpg6ptWFyFx0TVwAAAQ4"]
[Sun Apr 12 06:43:55.077993 2026] [:error] [pid 26599:tid 26622] [client 20.104.18.4:28608] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/pomo.php"] [unique_id "adrOq3G89LXoQbk_rwBOrAAAAVQ"]
[Sun Apr 12 06:43:56.026085 2026] [:error] [pid 25329:tid 25399] [client 20.104.18.4:28646] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adrOrGdcIYsS8Iyaj11DDQAAAI0"]
[Sun Apr 12 06:43:56.251893 2026] [:error] [pid 26567:tid 26578] [client 20.104.18.4:28435] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/pomo.php"] [unique_id "adrOrHhRpg6ptWFyFx0TawAAAQk"]
[Sun Apr 12 06:44:00.596348 2026] [:error] [pid 25328:tid 25398] [client 20.104.18.4:28495] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/pomo.php"] [unique_id "adrOsMxUaQZxT-e0YsD77AAAAFQ"]
[Sun Apr 12 06:44:02.224177 2026] [:error] [pid 26567:tid 26575] [client 20.104.18.4:28567] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa%22"] [unique_id "adrOsnhRpg6ptWFyFx0ThgAAAQY"]
[Sun Apr 12 06:44:04.340346 2026] [:error] [pid 26600:tid 26636] [client 20.104.18.4:28462] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/pomo.php"] [unique_id "adrOtO1YwAZiXhQKLYqGGgAAAYc"]
[Sun Apr 12 06:44:04.581405 2026] [:error] [pid 26600:tid 26633] [client 20.104.18.4:28516] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOtO1YwAZiXhQKLYqGGwAAAYQ"]
[Sun Apr 12 06:44:05.755542 2026] [:error] [pid 25328:tid 25367] [client 20.104.18.4:28527] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOtcxUaQZxT-e0YsD7_gAAAEM"]
[Sun Apr 12 06:44:06.671315 2026] [:error] [pid 26567:tid 26570] [client 20.104.18.4:28653] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/pomo.php"] [unique_id "adrOtnhRpg6ptWFyFx0TlgAAAQE"]
[Sun Apr 12 06:44:07.316373 2026] [:error] [pid 26600:tid 26653] [client 20.104.18.4:28644] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOt-1YwAZiXhQKLYqGHwAAAZg"]
[Sun Apr 12 06:44:08.047872 2026] [:error] [pid 25329:tid 25381] [client 20.104.18.4:28657] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adrOuGdcIYsS8Iyaj11DGAAAAIM"]
[Sun Apr 12 06:44:09.705374 2026] [:error] [pid 25328:tid 25385] [client 20.104.18.4:28649] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adrOucxUaQZxT-e0YsD8CQAAAE4"]
[Sun Apr 12 06:44:09.775040 2026] [:error] [pid 25328:tid 25394] [client 20.104.18.4:28637] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOucxUaQZxT-e0YsD8CwAAAFI"]
[Sun Apr 12 06:44:10.845659 2026] [:error] [pid 26600:tid 26641] [client 20.104.18.4:28537] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOuu1YwAZiXhQKLYqGIwAAAYw"]
[Sun Apr 12 06:44:11.954746 2026] [:error] [pid 25437:tid 25450] [client 20.104.18.4:28565] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adrOu3f97wYZje1ep_Ns3gAAAMs"]
[Sun Apr 12 06:44:11.979503 2026] [:error] [pid 26567:tid 26577] [client 20.104.18.4:28590] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOu3hRpg6ptWFyFx0TsAAAAQg"]
[Sun Apr 12 06:44:12.585608 2026] [:error] [pid 25437:tid 25455] [client 20.104.18.4:28545] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOvHf97wYZje1ep_Ns4QAAANA"]
[Sun Apr 12 06:44:13.093011 2026] [:error] [pid 26600:tid 26630] [client 20.104.18.4:28517] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/pomo.php"] [unique_id "adrOve1YwAZiXhQKLYqGJQAAAYE"]
[Sun Apr 12 06:44:13.916387 2026] [:error] [pid 26600:tid 26647] [client 20.104.18.4:28641] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "adrOve1YwAZiXhQKLYqGJwAAAZI"]
[Sun Apr 12 06:44:14.404875 2026] [:error] [pid 26600:tid 26650] [client 20.104.18.4:28506] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adrOvu1YwAZiXhQKLYqGLAAAAZU"]
[Sun Apr 12 06:44:14.879473 2026] [:error] [pid 26567:tid 26575] [client 20.104.18.4:28650] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date.php"] [unique_id "adrOvnhRpg6ptWFyFx0TvgAAAQY"]
[Sun Apr 12 06:44:16.539268 2026] [:error] [pid 60280:tid 60296] [client 20.104.18.4:28540] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date.php"] [unique_id "adrOwHBlLnDOYuIykkj-hQAAAc4"]
[Sun Apr 12 06:44:17.436511 2026] [:error] [pid 25329:tid 25407] [client 20.104.18.4:28592] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adrOwWdcIYsS8Iyaj11DIQAAAJI"]
[Sun Apr 12 06:44:18.365228 2026] [:error] [pid 26600:tid 26641] [client 20.104.18.4:28586] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date.php"] [unique_id "adrOwu1YwAZiXhQKLYqGNgAAAYw"]
[Sun Apr 12 06:44:21.140625 2026] [:error] [pid 25328:tid 25377] [client 20.104.18.4:28536] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date.php"] [unique_id "adrOxcxUaQZxT-e0YsD8FgAAAEo"]
[Sun Apr 12 06:44:24.052183 2026] [:error] [pid 25327:tid 25355] [client 20.104.18.4:28647] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/pomo.php"] [unique_id "adrOyC6h2tZEVJo9JFJLvwAAABM"]
[Sun Apr 12 06:44:24.157275 2026] [:error] [pid 26600:tid 26645] [client 20.104.18.4:28573] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pomo.php"] [unique_id "adrOyO1YwAZiXhQKLYqGPwAAAZA"]
[Sun Apr 12 06:44:25.742282 2026] [:error] [pid 60280:tid 60302] [client 20.104.18.4:28388] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pomo.php"] [unique_id "adrOyXBlLnDOYuIykkj-igAAAdQ"]
[Sun Apr 12 06:44:27.182513 2026] [:error] [pid 25328:tid 25389] [client 20.104.18.4:28538] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pomo.php"] [unique_id "adrOy8xUaQZxT-e0YsD8IgAAAFA"]
[Sun Apr 12 06:44:29.187323 2026] [:error] [pid 26600:tid 26636] [client 20.104.18.4:28432] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pomo.php"] [unique_id "adrOze1YwAZiXhQKLYqGSAAAAYc"]
[Sun Apr 12 06:44:30.072567 2026] [:error] [pid 26567:tid 26575] [client 20.104.18.4:28439] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/pomo.php"] [unique_id "adrOznhRpg6ptWFyFx0T5AAAAQY"]
[Sun Apr 12 06:44:33.269547 2026] [:error] [pid 25329:tid 25388] [client 20.104.18.4:28523] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/pomo.php"] [unique_id "adrO0WdcIYsS8Iyaj11DJQAAAIc"]
[Sun Apr 12 06:44:51.127114 2026] [:error] [pid 60280:tid 60298] [client 20.104.18.4:28428] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrO43BlLnDOYuIykkj-qAAAAdA"]
[Sun Apr 12 06:44:51.314665 2026] [:error] [pid 25437:tid 25439] [client 20.104.18.4:28430] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/pomo.php"] [unique_id "adrO43f97wYZje1ep_NtCQAAAMA"]
[Sun Apr 12 06:44:52.418858 2026] [:error] [pid 26567:tid 26590] [client 20.104.18.4:28574] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/pomo.php"] [unique_id "adrO5HhRpg6ptWFyFx0UDQAAARU"]
[Sun Apr 12 06:44:54.087281 2026] [:error] [pid 25328:tid 25366] [client 20.104.18.4:28505] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/pomo.php"] [unique_id "adrO5sxUaQZxT-e0YsD8VgAAAEI"]
[Sun Apr 12 06:44:55.139784 2026] [:error] [pid 26600:tid 26653] [client 20.104.18.4:28418] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrO5-1YwAZiXhQKLYqGbwAAAZg"]
[Sun Apr 12 06:44:55.403707 2026] [:error] [pid 26600:tid 26636] [client 20.104.18.4:28513] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/pomo.php"] [unique_id "adrO5-1YwAZiXhQKLYqGcQAAAYc"]
[Sun Apr 12 06:44:56.628962 2026] [:error] [pid 26567:tid 26585] [client 20.104.18.4:28603] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrO6HhRpg6ptWFyFx0UFQAAARA"]
[Sun Apr 12 06:44:57.448725 2026] [:error] [pid 26567:tid 26590] [client 20.104.18.4:28500] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrO6XhRpg6ptWFyFx0UGQAAARU"]
[Sun Apr 12 06:44:59.237092 2026] [:error] [pid 26567:tid 26574] [client 20.104.18.4:28531] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrO63hRpg6ptWFyFx0UIwAAAQU"]
[Sun Apr 12 06:44:59.397794 2026] [:error] [pid 25328:tid 25370] [client 20.104.18.4:28483] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrO68xUaQZxT-e0YsD8WAAAAEY"]
[Sun Apr 12 06:45:00.685534 2026] [:error] [pid 25328:tid 25383] [client 20.104.18.4:28498] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pomo.php"] [unique_id "adrO7MxUaQZxT-e0YsD8YAAAAE0"]
[Sun Apr 12 06:45:02.274952 2026] [:error] [pid 25329:tid 25388] [client 20.104.18.4:28544] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/pomo.php"] [unique_id "adrO7mdcIYsS8Iyaj11DNgAAAIc"]
[Sun Apr 12 06:45:03.037463 2026] [:error] [pid 26567:tid 26577] [client 20.104.18.4:28463] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrO73hRpg6ptWFyFx0UMAAAAQg"]
[Sun Apr 12 06:45:04.032421 2026] [:error] [pid 26567:tid 26581] [client 20.104.18.4:28588] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/pomo.php"] [unique_id "adrO8HhRpg6ptWFyFx0UMQAAAQw"]
[Sun Apr 12 06:45:05.569881 2026] [:error] [pid 26567:tid 26574] [client 20.104.18.4:28597] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/pomo.php"] [unique_id "adrO8XhRpg6ptWFyFx0UOAAAAQU"]
[Sun Apr 12 06:45:08.061944 2026] [:error] [pid 25329:tid 25390] [client 20.104.18.4:28577] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/pomo.php"] [unique_id "adrO9GdcIYsS8Iyaj11DOQAAAIg"]
[Sun Apr 12 06:45:10.108544 2026] [:error] [pid 26600:tid 26646] [client 20.104.18.4:28522] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrO9u1YwAZiXhQKLYqGggAAAZE"]
[Sun Apr 12 06:45:13.959711 2026] [:error] [pid 26567:tid 26573] [client 20.104.18.4:28504] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrO-XhRpg6ptWFyFx0USAAAAQQ"]
[Sun Apr 12 06:45:19.185038 2026] [:error] [pid 26567:tid 26570] [client 20.104.18.4:28542] [client 20.104.18.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/languages/themes/pomo.php"] [unique_id "adrO_3hRpg6ptWFyFx0USwAAAQE"]
[Sun Apr 12 06:45:21.199399 2026] [:error] [pid 25327:tid 25359] [client 20.104.18.4:28519] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adrPAS6h2tZEVJo9JFJL1wAAABc"]
[Sun Apr 12 06:45:56.959088 2026] [:error] [pid 25328:tid 25372] [client 20.104.18.4:28642] [client 20.104.18.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/pomo.php"] [unique_id "adrPJMxUaQZxT-e0YsD8kgAAAEc"]
[Sun Apr 12 07:24:44.553133 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:9205] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adrYPC6h2tZEVJo9JFJVWAAAABQ"]
[Sun Apr 12 07:24:45.087199 2026] [:error] [pid 25329:tid 25381] [client 4.232.184.116:9156] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adrYPWdcIYsS8Iyaj11N8wAAAIM"]
[Sun Apr 12 07:24:45.601858 2026] [:error] [pid 25328:tid 25383] [client 4.232.184.116:9172] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adrYPcxUaQZxT-e0YsAL3QAAAE0"]
[Sun Apr 12 07:24:46.178403 2026] [:error] [pid 60280:tid 60298] [client 4.232.184.116:9183] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adrYPnBlLnDOYuIykkgGwwAAAdA"]
[Sun Apr 12 07:24:46.753805 2026] [:error] [pid 25329:tid 25384] [client 4.232.184.116:9092] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "adrYPmdcIYsS8Iyaj11N9QAAAIU"]
[Sun Apr 12 07:24:47.294863 2026] [:error] [pid 25327:tid 25357] [client 4.232.184.116:9152] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "adrYPy6h2tZEVJo9JFJVXAAAABU"]
[Sun Apr 12 07:24:47.777783 2026] [:error] [pid 25327:tid 25341] [client 4.232.184.116:9177] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "adrYPy6h2tZEVJo9JFJVXgAAAAU"]
[Sun Apr 12 07:24:48.316070 2026] [:error] [pid 60280:tid 60302] [client 4.232.184.116:9099] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "adrYQHBlLnDOYuIykkgGxgAAAdQ"]
[Sun Apr 12 07:24:48.852123 2026] [:error] [pid 25329:tid 25409] [client 4.232.184.116:9198] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrYQGdcIYsS8Iyaj11OBQAAAJM"]
[Sun Apr 12 07:24:49.693973 2026] [:error] [pid 26599:tid 26619] [client 4.232.184.116:9096] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrYQXG89LXoQbk_rwBV2AAAAVE"]
[Sun Apr 12 07:24:50.229951 2026] [:error] [pid 60280:tid 60286] [client 4.232.184.116:9197] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrYQnBlLnDOYuIykkgG-wAAAcQ"]
[Sun Apr 12 07:24:50.765493 2026] [:error] [pid 25327:tid 25336] [client 4.232.184.116:9195] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adrYQi6h2tZEVJo9JFJVhgAAAAA"]
[Sun Apr 12 07:24:51.320167 2026] [:error] [pid 60280:tid 60303] [client 4.232.184.116:9178] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "adrYQ3BlLnDOYuIykkgHGAAAAdU"]
[Sun Apr 12 07:24:51.964620 2026] [:error] [pid 25328:tid 25365] [client 4.232.184.116:9154] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "adrYQ8xUaQZxT-e0YsAMAgAAAEE"]
[Sun Apr 12 07:24:52.611441 2026] [:error] [pid 26599:tid 26610] [client 4.232.184.116:9114] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "adrYRHG89LXoQbk_rwBWCQAAAUg"]
[Sun Apr 12 07:24:53.330271 2026] [:error] [pid 60280:tid 60300] [client 4.232.184.116:9180] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "adrYRXBlLnDOYuIykkgHKAAAAdI"]
[Sun Apr 12 07:24:53.980374 2026] [:error] [pid 26599:tid 26602] [client 4.232.184.116:9091] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adrYRXG89LXoQbk_rwBWCgAAAUA"]
[Sun Apr 12 07:24:54.587386 2026] [:error] [pid 26599:tid 26614] [client 4.232.184.116:9211] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adrYRnG89LXoQbk_rwBWDAAAAUw"]
[Sun Apr 12 07:24:55.315646 2026] [:error] [pid 25329:tid 25395] [client 4.232.184.116:9141] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adrYR2dcIYsS8Iyaj11ONQAAAIs"]
[Sun Apr 12 07:24:56.106811 2026] [:error] [pid 25328:tid 25372] [client 4.232.184.116:9187] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "adrYSMxUaQZxT-e0YsAMAwAAAEc"]
[Sun Apr 12 07:24:57.170950 2026] [:error] [pid 25328:tid 25394] [client 4.232.184.116:9192] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "adrYScxUaQZxT-e0YsAMBgAAAFI"]
[Sun Apr 12 07:24:57.823583 2026] [:error] [pid 26599:tid 26620] [client 4.232.184.116:9202] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "adrYSXG89LXoQbk_rwBWEwAAAVI"]
[Sun Apr 12 07:24:58.496411 2026] [:error] [pid 25329:tid 25376] [client 4.232.184.116:9098] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "adrYSmdcIYsS8Iyaj11OQQAAAIE"]
[Sun Apr 12 07:24:59.054090 2026] [:error] [pid 60280:tid 60299] [client 4.232.184.116:9095] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "adrYS3BlLnDOYuIykkgHLgAAAdE"]
[Sun Apr 12 07:25:00.091606 2026] [:error] [pid 26567:tid 26575] [client 4.232.184.116:9121] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "adrYTHhRpg6ptWFyFx0drwAAAQY"]
[Sun Apr 12 07:25:01.064128 2026] [:error] [pid 25328:tid 25379] [client 4.232.184.116:9163] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "adrYTcxUaQZxT-e0YsAMDAAAAEs"]
[Sun Apr 12 07:25:02.994370 2026] [:error] [pid 26600:tid 26647] [client 4.232.184.116:9175] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "adrYTu1YwAZiXhQKLYqRfAAAAZI"]
[Sun Apr 12 07:25:03.942455 2026] [:error] [pid 25327:tid 25347] [client 4.232.184.116:9160] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "adrYTy6h2tZEVJo9JFJVmwAAAAs"]
[Sun Apr 12 07:25:05.024905 2026] [:error] [pid 60280:tid 60291] [client 4.232.184.116:9161] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrYUXBlLnDOYuIykkgHNQAAAck"]
[Sun Apr 12 07:25:05.940098 2026] [:error] [pid 26567:tid 26582] [client 4.232.184.116:9153] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrYUXhRpg6ptWFyFx0dsAAAAQ0"]
[Sun Apr 12 07:25:06.463227 2026] [:error] [pid 25329:tid 25378] [client 4.232.184.116:9191] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrYUmdcIYsS8Iyaj11OYAAAAII"]
[Sun Apr 12 07:25:07.034341 2026] [:error] [pid 25328:tid 25401] [client 4.232.184.116:9106] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adrYU8xUaQZxT-e0YsAMEAAAAFU"]
[Sun Apr 12 07:25:07.991605 2026] [:error] [pid 26599:tid 26619] [client 4.232.184.116:9174] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adrYU3G89LXoQbk_rwBWIwAAAVE"]
[Sun Apr 12 07:25:08.881923 2026] [:error] [pid 25329:tid 25382] [client 4.232.184.116:9169] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adrYVGdcIYsS8Iyaj11ObQAAAIQ"]
[Sun Apr 12 07:25:09.808292 2026] [:error] [pid 25329:tid 25415] [client 4.232.184.116:9188] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adrYVWdcIYsS8Iyaj11OcgAAAJg"]
[Sun Apr 12 07:25:10.566306 2026] [:error] [pid 60280:tid 60299] [client 4.232.184.116:9113] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adrYVnBlLnDOYuIykkgHOQAAAdE"]
[Sun Apr 12 07:25:11.162475 2026] [:error] [pid 25329:tid 25374] [client 4.232.184.116:9093] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adrYV2dcIYsS8Iyaj11OeQAAAIA"]
[Sun Apr 12 07:25:11.859599 2026] [:error] [pid 25329:tid 25406] [client 4.232.184.116:9146] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adrYV2dcIYsS8Iyaj11OfgAAAJE"]
[Sun Apr 12 07:25:12.407314 2026] [:error] [pid 26599:tid 26625] [client 4.232.184.116:9107] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adrYWHG89LXoQbk_rwBWKQAAAVc"]
[Sun Apr 12 07:25:12.923922 2026] [:error] [pid 26600:tid 26653] [client 4.232.184.116:9145] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adrYWO1YwAZiXhQKLYqRgAAAAZg"]
[Sun Apr 12 07:25:13.418551 2026] [:error] [pid 25328:tid 25394] [client 4.232.184.116:9158] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "adrYWcxUaQZxT-e0YsAMEwAAAFI"]
[Sun Apr 12 07:25:13.928188 2026] [:error] [pid 25327:tid 25355] [client 4.232.184.116:9088] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "adrYWS6h2tZEVJo9JFJVpwAAABM"]
[Sun Apr 12 07:25:14.537481 2026] [:error] [pid 60280:tid 60289] [client 4.232.184.116:9108] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "adrYWnBlLnDOYuIykkgHQgAAAcc"]
[Sun Apr 12 07:25:15.048056 2026] [:error] [pid 25328:tid 25391] [client 4.232.184.116:9028] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "adrYW8xUaQZxT-e0YsAMFgAAAFE"]
[Sun Apr 12 07:25:15.661666 2026] [:error] [pid 25329:tid 25378] [client 4.232.184.116:9056] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "adrYW2dcIYsS8Iyaj11OiwAAAII"]
[Sun Apr 12 07:25:16.145163 2026] [:error] [pid 25327:tid 25347] [client 4.232.184.116:9055] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "adrYXC6h2tZEVJo9JFJVqQAAAAs"]
[Sun Apr 12 07:25:16.689501 2026] [:error] [pid 60280:tid 60282] [client 4.232.184.116:9102] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "adrYXHBlLnDOYuIykkgHSgAAAcA"]
[Sun Apr 12 07:25:17.155139 2026] [:error] [pid 60280:tid 60297] [client 4.232.184.116:9200] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "adrYXXBlLnDOYuIykkgHTQAAAc8"]
[Sun Apr 12 07:25:17.621686 2026] [:error] [pid 60280:tid 60305] [client 4.232.184.116:9209] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adrYXXBlLnDOYuIykkgHTwAAAdc"]
[Sun Apr 12 07:25:18.099189 2026] [:error] [pid 60280:tid 60284] [client 4.232.184.116:9116] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adrYXnBlLnDOYuIykkgHUAAAAcI"]
[Sun Apr 12 07:25:18.579274 2026] [:error] [pid 26599:tid 26617] [client 4.232.184.116:9159] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adrYXnG89LXoQbk_rwBWLQAAAU8"]
[Sun Apr 12 07:25:19.047191 2026] [:error] [pid 26599:tid 26613] [client 4.232.184.116:9166] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "adrYX3G89LXoQbk_rwBWMQAAAUs"]
[Sun Apr 12 07:25:19.553453 2026] [:error] [pid 26599:tid 26609] [client 4.232.184.116:9185] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrYX3G89LXoQbk_rwBWNQAAAUc"]
[Sun Apr 12 07:25:20.166779 2026] [:error] [pid 26599:tid 26605] [client 4.232.184.116:9089] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrYYHG89LXoQbk_rwBWOgAAAUM"]
[Sun Apr 12 07:25:20.664685 2026] [:error] [pid 26599:tid 26604] [client 4.232.184.116:9179] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrYYHG89LXoQbk_rwBWPwAAAUI"]
[Sun Apr 12 07:25:21.129650 2026] [:error] [pid 26599:tid 26603] [client 4.232.184.116:9190] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrYYXG89LXoQbk_rwBWQAAAAUE"]
[Sun Apr 12 07:25:21.594110 2026] [:error] [pid 26599:tid 26602] [client 4.232.184.116:9103] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adrYYXG89LXoQbk_rwBWQgAAAUA"]
[Sun Apr 12 07:25:22.071579 2026] [:error] [pid 25327:tid 25358] [client 4.232.184.116:9171] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adrYYi6h2tZEVJo9JFJVsQAAABY"]
[Sun Apr 12 07:25:22.581923 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:9162] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adrYYi6h2tZEVJo9JFJVtAAAABQ"]
[Sun Apr 12 07:25:23.061147 2026] [:error] [pid 26599:tid 26607] [client 4.232.184.116:9118] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adrYY3G89LXoQbk_rwBWRQAAAUU"]
[Sun Apr 12 07:25:23.550706 2026] [:error] [pid 26567:tid 26588] [client 4.232.184.116:9104] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oircv.php"] [unique_id "adrYY3hRpg6ptWFyFx0dtQAAARM"]
[Sun Apr 12 07:25:24.092529 2026] [:error] [pid 25327:tid 25351] [client 4.232.184.116:9119] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oircv.php"] [unique_id "adrYZC6h2tZEVJo9JFJVugAAAA8"]
[Sun Apr 12 07:25:24.569588 2026] [:error] [pid 26599:tid 26616] [client 4.232.184.116:9100] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oircv.php"] [unique_id "adrYZHG89LXoQbk_rwBWSQAAAU4"]
[Sun Apr 12 07:25:25.050778 2026] [:error] [pid 26599:tid 26620] [client 4.232.184.116:9034] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oircv.php"] [unique_id "adrYZXG89LXoQbk_rwBWTQAAAVI"]
[Sun Apr 12 07:25:25.518458 2026] [:error] [pid 25329:tid 25393] [client 4.232.184.116:9120] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "adrYZWdcIYsS8Iyaj11OkQAAAIo"]
[Sun Apr 12 07:25:25.998138 2026] [:error] [pid 25329:tid 25382] [client 4.232.184.116:9208] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "adrYZWdcIYsS8Iyaj11OlAAAAIQ"]
[Sun Apr 12 07:25:26.469613 2026] [:error] [pid 25327:tid 25353] [client 4.232.184.116:9164] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "adrYZi6h2tZEVJo9JFJVvwAAABE"]
[Sun Apr 12 07:25:27.008609 2026] [:error] [pid 26599:tid 26613] [client 4.232.184.116:9117] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blnux.php"] [unique_id "adrYZ3G89LXoQbk_rwBWVAAAAUs"]
[Sun Apr 12 07:25:27.522022 2026] [:error] [pid 26599:tid 26607] [client 4.232.184.116:9214] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adrYZ3G89LXoQbk_rwBWVgAAAUU"]
[Sun Apr 12 07:25:28.021800 2026] [:error] [pid 26599:tid 26608] [client 4.232.184.116:9110] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adrYaHG89LXoQbk_rwBWVwAAAUY"]
[Sun Apr 12 07:25:28.649050 2026] [:error] [pid 25327:tid 25345] [client 4.232.184.116:9196] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adrYaC6h2tZEVJo9JFJVwQAAAAk"]
[Sun Apr 12 07:25:29.140684 2026] [:error] [pid 25437:tid 25449] [client 4.232.184.116:9129] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adrYaXf97wYZje1ep_N1GAAAAMo"]
[Sun Apr 12 07:25:29.904072 2026] [:error] [pid 25437:tid 25463] [client 4.232.184.116:9167] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Spow_SRw.php"] [unique_id "adrYaXf97wYZje1ep_N1GQAAANg"]
[Sun Apr 12 07:25:30.509784 2026] [:error] [pid 25327:tid 25358] [client 4.232.184.116:9040] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Spow_SRw.php"] [unique_id "adrYai6h2tZEVJo9JFJVwwAAABY"]
[Sun Apr 12 07:25:31.083569 2026] [:error] [pid 25329:tid 25399] [client 4.232.184.116:9049] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Spow_SRw.php"] [unique_id "adrYa2dcIYsS8Iyaj11OlwAAAI0"]
[Sun Apr 12 07:25:31.793282 2026] [:error] [pid 25329:tid 25395] [client 4.232.184.116:9030] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Spow_SRw.php"] [unique_id "adrYa2dcIYsS8Iyaj11OmgAAAIs"]
[Sun Apr 12 07:25:32.401556 2026] [:error] [pid 26599:tid 26618] [client 4.232.184.116:9206] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "adrYbHG89LXoQbk_rwBWXQAAAVA"]
[Sun Apr 12 07:25:32.944718 2026] [:error] [pid 25437:tid 25440] [client 4.232.184.116:9112] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "adrYbHf97wYZje1ep_N1GwAAAME"]
[Sun Apr 12 07:25:33.434803 2026] [:error] [pid 25437:tid 25453] [client 4.232.184.116:9204] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "adrYbXf97wYZje1ep_N1HQAAAM4"]
[Sun Apr 12 07:25:33.957972 2026] [:error] [pid 25327:tid 25352] [client 4.232.184.116:9130] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "adrYbS6h2tZEVJo9JFJVxwAAABA"]
[Sun Apr 12 07:25:34.562436 2026] [:error] [pid 25327:tid 25341] [client 4.232.184.116:9203] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxivicLhot.php"] [unique_id "adrYbi6h2tZEVJo9JFJVywAAAAU"]
[Sun Apr 12 07:25:35.209685 2026] [:error] [pid 25327:tid 25336] [client 4.232.184.116:9122] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxivicLhot.php"] [unique_id "adrYby6h2tZEVJo9JFJVzQAAAAA"]
[Sun Apr 12 07:25:35.704496 2026] [:error] [pid 25329:tid 25390] [client 4.232.184.116:9159] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxivicLhot.php"] [unique_id "adrYb2dcIYsS8Iyaj11OnQAAAIg"]
[Sun Apr 12 07:25:36.198583 2026] [:error] [pid 25327:tid 25339] [client 4.232.184.116:9044] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxivicLhot.php"] [unique_id "adrYcC6h2tZEVJo9JFJV0QAAAAM"]
[Sun Apr 12 07:25:36.677779 2026] [:error] [pid 60280:tid 60294] [client 4.232.184.116:9213] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "adrYcHBlLnDOYuIykkgHXwAAAcw"]
[Sun Apr 12 07:25:37.294859 2026] [:error] [pid 25329:tid 25386] [client 4.232.184.116:9037] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "adrYcWdcIYsS8Iyaj11OnwAAAIY"]
[Sun Apr 12 07:25:37.943874 2026] [:error] [pid 25329:tid 25406] [client 4.232.184.116:9137] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "adrYcWdcIYsS8Iyaj11OogAAAJE"]
[Sun Apr 12 07:25:38.535983 2026] [:error] [pid 26599:tid 26605] [client 4.232.184.116:9144] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "adrYcnG89LXoQbk_rwBWcAAAAUM"]
[Sun Apr 12 07:25:39.045982 2026] [:error] [pid 60280:tid 60300] [client 4.232.184.116:8975] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acc.php"] [unique_id "adrYc3BlLnDOYuIykkgHYwAAAdI"]
[Sun Apr 12 07:25:39.552329 2026] [:error] [pid 26599:tid 26613] [client 4.232.184.116:9140] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acc.php"] [unique_id "adrYc3G89LXoQbk_rwBWcgAAAUs"]
[Sun Apr 12 07:25:40.065079 2026] [:error] [pid 25328:tid 25372] [client 4.232.184.116:9057] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acc.php"] [unique_id "adrYdMxUaQZxT-e0YsAMIAAAAEc"]
[Sun Apr 12 07:25:40.619911 2026] [:error] [pid 60280:tid 60304] [client 4.232.184.116:9193] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acc.php"] [unique_id "adrYdHBlLnDOYuIykkgHaAAAAdY"]
[Sun Apr 12 07:25:41.087122 2026] [:error] [pid 25328:tid 25367] [client 4.232.184.116:9074] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxeyc.php"] [unique_id "adrYdcxUaQZxT-e0YsAMIgAAAEM"]
[Sun Apr 12 07:25:41.551098 2026] [:error] [pid 25327:tid 25337] [client 4.232.184.116:9151] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxeyc.php"] [unique_id "adrYdS6h2tZEVJo9JFJV2AAAAAE"]
[Sun Apr 12 07:25:42.014035 2026] [:error] [pid 25327:tid 25340] [client 4.232.184.116:9064] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxeyc.php"] [unique_id "adrYdi6h2tZEVJo9JFJV2QAAAAQ"]
[Sun Apr 12 07:25:42.487160 2026] [:error] [pid 60280:tid 60282] [client 4.232.184.116:9186] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxeyc.php"] [unique_id "adrYdnBlLnDOYuIykkgHawAAAcA"]
[Sun Apr 12 07:25:42.951063 2026] [:error] [pid 25328:tid 25408] [client 4.232.184.116:9097] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "adrYdsxUaQZxT-e0YsAMJQAAAFg"]
[Sun Apr 12 07:25:43.416680 2026] [:error] [pid 25437:tid 25454] [client 4.232.184.116:9035] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "adrYd3f97wYZje1ep_N1IQAAAM8"]
[Sun Apr 12 07:25:43.917055 2026] [:error] [pid 25437:tid 25447] [client 4.232.184.116:9039] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "adrYd3f97wYZje1ep_N1IgAAAMg"]
[Sun Apr 12 07:25:50.555181 2026] [:error] [pid 26599:tid 26625] [client 4.232.184.116:9215] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "adrYfnG89LXoQbk_rwBWlgAAAVc"]
[Sun Apr 12 07:25:51.019123 2026] [:error] [pid 25437:tid 25441] [client 4.232.184.116:9070] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "adrYf3f97wYZje1ep_N1JAAAAMI"]
[Sun Apr 12 07:25:51.555846 2026] [:error] [pid 25328:tid 25379] [client 4.232.184.116:9105] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "adrYf8xUaQZxT-e0YsAMKAAAAEs"]
[Sun Apr 12 07:25:52.033320 2026] [:error] [pid 25329:tid 25386] [client 4.232.184.116:9126] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "adrYgGdcIYsS8Iyaj11OsAAAAIY"]
[Sun Apr 12 07:25:52.531517 2026] [:error] [pid 60280:tid 60297] [client 4.232.184.116:9029] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adrYgHBlLnDOYuIykkgHdwAAAc8"]
[Sun Apr 12 07:25:53.029815 2026] [:error] [pid 26599:tid 26616] [client 4.232.184.116:9054] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adrYgXG89LXoQbk_rwBWmgAAAU4"]
[Sun Apr 12 07:25:53.728218 2026] [:error] [pid 26599:tid 26612] [client 4.232.184.116:9149] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adrYgXG89LXoQbk_rwBWmwAAAUo"]
[Sun Apr 12 07:25:54.205560 2026] [:error] [pid 26567:tid 26586] [client 4.232.184.116:9134] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adrYgnhRpg6ptWFyFx0dwAAAARE"]
[Sun Apr 12 07:25:54.737781 2026] [:error] [pid 26567:tid 26581] [client 4.232.184.116:8966] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adrYgnhRpg6ptWFyFx0dwQAAAQw"]
[Sun Apr 12 07:25:55.269874 2026] [:error] [pid 25437:tid 25457] [client 4.232.184.116:9182] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adrYg3f97wYZje1ep_N1JwAAANI"]
[Sun Apr 12 07:25:55.851908 2026] [:error] [pid 60280:tid 60305] [client 4.232.184.116:9066] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adrYg3BlLnDOYuIykkgHegAAAdc"]
[Sun Apr 12 07:25:56.350844 2026] [:error] [pid 25329:tid 25397] [client 4.232.184.116:9128] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "adrYhGdcIYsS8Iyaj11OswAAAIw"]
[Sun Apr 12 07:25:56.848734 2026] [:error] [pid 26567:tid 26585] [client 4.232.184.116:9085] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adrYhHhRpg6ptWFyFx0dxAAAARA"]
[Sun Apr 12 07:25:57.329482 2026] [:error] [pid 26567:tid 26576] [client 4.232.184.116:9155] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adrYhXhRpg6ptWFyFx0dxQAAAQc"]
[Sun Apr 12 07:25:57.818289 2026] [:error] [pid 26599:tid 26603] [client 4.232.184.116:9080] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adrYhXG89LXoQbk_rwBWoAAAAUE"]
[Sun Apr 12 07:25:58.298923 2026] [:error] [pid 25327:tid 25349] [client 4.232.184.116:9125] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adrYhi6h2tZEVJo9JFJV_AAAAA0"]
[Sun Apr 12 07:25:58.763819 2026] [:error] [pid 25327:tid 25344] [client 4.232.184.116:9101] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iindv.php"] [unique_id "adrYhi6h2tZEVJo9JFJWAAAAAAg"]
[Sun Apr 12 07:25:59.280256 2026] [:error] [pid 60280:tid 60294] [client 4.232.184.116:9050] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iindv.php"] [unique_id "adrYh3BlLnDOYuIykkgHfAAAAcw"]
[Sun Apr 12 07:25:59.761200 2026] [:error] [pid 25329:tid 25415] [client 4.232.184.116:9069] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iindv.php"] [unique_id "adrYh2dcIYsS8Iyaj11OuAAAAJg"]
[Sun Apr 12 07:26:00.261091 2026] [:error] [pid 60280:tid 60286] [client 4.232.184.116:9133] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iindv.php"] [unique_id "adrYiHBlLnDOYuIykkgHfQAAAcQ"]
[Sun Apr 12 07:26:00.751210 2026] [:error] [pid 26599:tid 26625] [client 4.232.184.116:9033] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maintura.php"] [unique_id "adrYiHG89LXoQbk_rwBWpAAAAVc"]
[Sun Apr 12 07:26:01.224017 2026] [:error] [pid 25327:tid 25358] [client 4.232.184.116:9038] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maintura.php"] [unique_id "adrYiS6h2tZEVJo9JFJWBAAAABY"]
[Sun Apr 12 07:26:01.728667 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:9025] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maintura.php"] [unique_id "adrYiS6h2tZEVJo9JFJWBQAAABQ"]
[Sun Apr 12 07:26:02.246399 2026] [:error] [pid 26599:tid 26624] [client 4.232.184.116:8897] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maintura.php"] [unique_id "adrYinG89LXoQbk_rwBWqQAAAVY"]
[Sun Apr 12 07:26:02.719300 2026] [:error] [pid 26599:tid 26604] [client 4.232.184.116:9181] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adrYinG89LXoQbk_rwBWqwAAAUI"]
[Sun Apr 12 07:26:03.192757 2026] [:error] [pid 25328:tid 25391] [client 4.232.184.116:9026] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adrYi8xUaQZxT-e0YsAMMQAAAFE"]
[Sun Apr 12 07:26:03.704881 2026] [:error] [pid 60280:tid 60288] [client 4.232.184.116:9027] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adrYi3BlLnDOYuIykkgHggAAAcY"]
[Sun Apr 12 07:26:04.196783 2026] [:error] [pid 60280:tid 60298] [client 4.232.184.116:9115] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adrYjHBlLnDOYuIykkgHhQAAAdA"]
[Sun Apr 12 07:26:04.686971 2026] [:error] [pid 25327:tid 25337] [client 4.232.184.116:9062] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adrYjC6h2tZEVJo9JFJWBgAAAAE"]
[Sun Apr 12 07:26:05.170250 2026] [:error] [pid 60280:tid 60290] [client 4.232.184.116:9150] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adrYjXBlLnDOYuIykkgHhwAAAcg"]
[Sun Apr 12 07:26:05.654823 2026] [:error] [pid 60280:tid 60284] [client 4.232.184.116:9048] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adrYjXBlLnDOYuIykkgHigAAAcI"]
[Sun Apr 12 07:26:06.116707 2026] [:error] [pid 25327:tid 25360] [client 4.232.184.116:9178] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adrYji6h2tZEVJo9JFJWBwAAABg"]
[Sun Apr 12 07:26:06.601104 2026] [:error] [pid 25437:tid 25460] [client 4.232.184.116:9090] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-220.php"] [unique_id "adrYjnf97wYZje1ep_N1LQAAANU"]
[Sun Apr 12 07:26:07.058369 2026] [:error] [pid 60280:tid 60301] [client 4.232.184.116:9194] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-220.php"] [unique_id "adrYj3BlLnDOYuIykkgHjgAAAdM"]
[Sun Apr 12 07:26:07.519366 2026] [:error] [pid 26600:tid 26636] [client 4.232.184.116:9131] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-220.php"] [unique_id "adrYj-1YwAZiXhQKLYqRmQAAAYc"]
[Sun Apr 12 07:26:07.975933 2026] [:error] [pid 26600:tid 26644] [client 4.232.184.116:9132] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-220.php"] [unique_id "adrYj-1YwAZiXhQKLYqRmgAAAY8"]
[Sun Apr 12 07:26:08.465593 2026] [:error] [pid 25437:tid 25455] [client 4.232.184.116:9081] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adrYkHf97wYZje1ep_N1LgAAANA"]
[Sun Apr 12 07:26:08.926385 2026] [:error] [pid 26600:tid 26640] [client 4.232.184.116:8983] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adrYkO1YwAZiXhQKLYqRnwAAAYs"]
[Sun Apr 12 07:26:09.395278 2026] [:error] [pid 25327:tid 25342] [client 4.232.184.116:9072] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adrYkS6h2tZEVJo9JFJWCAAAAAY"]
[Sun Apr 12 07:26:09.861475 2026] [:error] [pid 26599:tid 26620] [client 4.232.184.116:9053] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adrYkXG89LXoQbk_rwBWswAAAVI"]
[Sun Apr 12 07:26:10.339349 2026] [:error] [pid 26599:tid 26607] [client 4.232.184.116:9094] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "adrYknG89LXoQbk_rwBWtQAAAUU"]
[Sun Apr 12 07:26:10.813762 2026] [:error] [pid 25328:tid 25379] [client 4.232.184.116:9084] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "adrYksxUaQZxT-e0YsAMMwAAAEs"]
[Sun Apr 12 07:26:11.273861 2026] [:error] [pid 26599:tid 26610] [client 4.232.184.116:9052] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "adrYk3G89LXoQbk_rwBWuAAAAUg"]
[Sun Apr 12 07:26:11.732424 2026] [:error] [pid 25329:tid 25399] [client 4.232.184.116:8970] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "adrYk2dcIYsS8Iyaj11OugAAAI0"]
[Sun Apr 12 07:26:12.193193 2026] [:error] [pid 25329:tid 25411] [client 4.232.184.116:9079] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adrYlGdcIYsS8Iyaj11OvQAAAJQ"]
[Sun Apr 12 07:26:12.656258 2026] [:error] [pid 26600:tid 26639] [client 4.232.184.116:9073] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adrYlO1YwAZiXhQKLYqRoQAAAYo"]
[Sun Apr 12 07:26:13.120622 2026] [:error] [pid 25329:tid 25393] [client 4.232.184.116:9124] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adrYlWdcIYsS8Iyaj11OwAAAAIo"]
[Sun Apr 12 07:26:13.587906 2026] [:error] [pid 26599:tid 26618] [client 4.232.184.116:8988] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adrYlXG89LXoQbk_rwBWwAAAAVA"]
[Sun Apr 12 07:26:14.047343 2026] [:error] [pid 25329:tid 25409] [client 4.232.184.116:9083] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adrYlmdcIYsS8Iyaj11OygAAAJM"]
[Sun Apr 12 07:26:14.525367 2026] [:error] [pid 26599:tid 26625] [client 4.232.184.116:9046] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adrYlnG89LXoQbk_rwBWygAAAVc"]
[Sun Apr 12 07:26:14.986575 2026] [:error] [pid 26599:tid 26616] [client 4.232.184.116:9058] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adrYlnG89LXoQbk_rwBWzwAAAU4"]
[Sun Apr 12 07:26:15.475611 2026] [:error] [pid 26599:tid 26606] [client 4.232.184.116:8963] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adrYl3G89LXoQbk_rwBW1AAAAUQ"]
[Sun Apr 12 07:26:15.956317 2026] [:error] [pid 60280:tid 60301] [client 4.232.184.116:9087] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adrYl3BlLnDOYuIykkgHoQAAAdM"]
[Sun Apr 12 07:26:16.433496 2026] [:error] [pid 26599:tid 26626] [client 4.232.184.116:9075] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adrYmHG89LXoQbk_rwBW1gAAAVg"]
[Sun Apr 12 07:26:16.914065 2026] [:error] [pid 26599:tid 26621] [client 4.232.184.116:9067] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adrYmHG89LXoQbk_rwBW2wAAAVM"]
[Sun Apr 12 07:26:17.381418 2026] [:error] [pid 26599:tid 26611] [client 4.232.184.116:8960] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adrYmXG89LXoQbk_rwBW3gAAAUk"]
[Sun Apr 12 07:26:17.839634 2026] [:error] [pid 60280:tid 60288] [client 4.232.184.116:9210] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upll22.php"] [unique_id "adrYmXBlLnDOYuIykkgHpAAAAcY"]
[Sun Apr 12 07:26:18.310372 2026] [:error] [pid 26599:tid 26604] [client 4.232.184.116:8971] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upll22.php"] [unique_id "adrYmnG89LXoQbk_rwBW3wAAAUI"]
[Sun Apr 12 07:26:18.786194 2026] [:error] [pid 26599:tid 26619] [client 4.232.184.116:9015] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upll22.php"] [unique_id "adrYmnG89LXoQbk_rwBW4AAAAVE"]
[Sun Apr 12 07:26:19.279612 2026] [:error] [pid 26599:tid 26622] [client 4.232.184.116:9109] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upll22.php"] [unique_id "adrYm3G89LXoQbk_rwBW5wAAAVQ"]
[Sun Apr 12 07:26:19.757712 2026] [:error] [pid 26599:tid 26613] [client 4.232.184.116:9041] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adrYm3G89LXoQbk_rwBW6QAAAUs"]
[Sun Apr 12 07:26:20.366543 2026] [:error] [pid 25328:tid 25369] [client 4.232.184.116:8961] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adrYnMxUaQZxT-e0YsAMQwAAAEU"]
[Sun Apr 12 07:26:20.896059 2026] [:error] [pid 25327:tid 25359] [client 4.232.184.116:9018] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adrYnC6h2tZEVJo9JFJWGwAAABc"]
[Sun Apr 12 07:26:21.373063 2026] [:error] [pid 25327:tid 25351] [client 4.232.184.116:9063] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "adrYnS6h2tZEVJo9JFJWHgAAAA8"]
[Sun Apr 12 07:26:21.856276 2026] [:error] [pid 60280:tid 60297] [client 4.232.184.116:9127] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "adrYnXBlLnDOYuIykkgHqgAAAc8"]
[Sun Apr 12 07:26:22.356364 2026] [:error] [pid 26599:tid 26603] [client 4.232.184.116:9086] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "adrYnnG89LXoQbk_rwBW8AAAAUE"]
[Sun Apr 12 07:26:22.860226 2026] [:error] [pid 26599:tid 26605] [client 4.232.184.116:9010] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "adrYnnG89LXoQbk_rwBW8QAAAUM"]
[Sun Apr 12 07:26:23.333104 2026] [:error] [pid 26599:tid 26610] [client 4.232.184.116:9000] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "adrYn3G89LXoQbk_rwBW8wAAAUg"]
[Sun Apr 12 07:26:23.802985 2026] [:error] [pid 26599:tid 26620] [client 4.232.184.116:8994] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "adrYn3G89LXoQbk_rwBW9gAAAVI"]
[Sun Apr 12 07:26:24.302360 2026] [:error] [pid 25327:tid 25343] [client 4.232.184.116:9071] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "adrYoC6h2tZEVJo9JFJWKwAAAAc"]
[Sun Apr 12 07:26:24.773923 2026] [:error] [pid 25328:tid 25403] [client 4.232.184.116:9157] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "adrYoMxUaQZxT-e0YsAMRQAAAFY"]
[Sun Apr 12 07:26:25.271801 2026] [:error] [pid 26599:tid 26602] [client 4.232.184.116:9047] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "adrYoXG89LXoQbk_rwBW-gAAAUA"]
[Sun Apr 12 07:26:25.761390 2026] [:error] [pid 26599:tid 26605] [client 4.232.184.116:9201] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adrYoXG89LXoQbk_rwBW_gAAAUM"]
[Sun Apr 12 07:26:26.234969 2026] [:error] [pid 26599:tid 26613] [client 4.232.184.116:8979] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adrYonG89LXoQbk_rwBXAQAAAUs"]
[Sun Apr 12 07:26:26.696255 2026] [:error] [pid 25328:tid 25368] [client 4.232.184.116:8972] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adrYosxUaQZxT-e0YsAMRgAAAEQ"]
[Sun Apr 12 07:26:27.159819 2026] [:error] [pid 25329:tid 25411] [client 4.232.184.116:9138] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adrYo2dcIYsS8Iyaj11O0QAAAJQ"]
[Sun Apr 12 07:26:27.625304 2026] [:error] [pid 60280:tid 60295] [client 4.232.184.116:8986] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adrYo3BlLnDOYuIykkgHrAAAAc0"]
[Sun Apr 12 07:26:28.086672 2026] [:error] [pid 26599:tid 26623] [client 4.232.184.116:9012] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adrYpHG89LXoQbk_rwBXBAAAAVU"]
[Sun Apr 12 07:26:28.585520 2026] [:error] [pid 25327:tid 25351] [client 4.232.184.116:9207] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adrYpC6h2tZEVJo9JFJWMAAAAA8"]
[Sun Apr 12 07:26:29.084888 2026] [:error] [pid 25329:tid 25390] [client 4.232.184.116:9045] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "adrYpWdcIYsS8Iyaj11O0gAAAIg"]
[Sun Apr 12 07:26:29.598803 2026] [:error] [pid 25329:tid 25392] [client 4.232.184.116:8969] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adrYpWdcIYsS8Iyaj11O0wAAAIk"]
[Sun Apr 12 07:26:30.060958 2026] [:error] [pid 26599:tid 26622] [client 4.232.184.116:9212] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adrYpnG89LXoQbk_rwBXDAAAAVQ"]
[Sun Apr 12 07:26:30.551623 2026] [:error] [pid 26599:tid 26610] [client 4.232.184.116:9032] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adrYpnG89LXoQbk_rwBXEAAAAUg"]
[Sun Apr 12 07:26:31.022395 2026] [:error] [pid 25327:tid 25357] [client 4.232.184.116:8964] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adrYpy6h2tZEVJo9JFJWNQAAABU"]
[Sun Apr 12 07:26:31.511463 2026] [:error] [pid 26599:tid 26617] [client 4.232.184.116:8973] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adrYp3G89LXoQbk_rwBXHgAAAU8"]
[Sun Apr 12 07:26:32.016665 2026] [:error] [pid 26599:tid 26623] [client 4.232.184.116:8978] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adrYqHG89LXoQbk_rwBXIgAAAVU"]
[Sun Apr 12 07:26:32.560705 2026] [:error] [pid 26599:tid 26611] [client 4.232.184.116:8977] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adrYqHG89LXoQbk_rwBXJgAAAUk"]
[Sun Apr 12 07:26:33.034392 2026] [:error] [pid 26599:tid 26615] [client 4.232.184.116:9148] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adrYqXG89LXoQbk_rwBXKgAAAU0"]
[Sun Apr 12 07:26:33.534727 2026] [:error] [pid 26599:tid 26603] [client 4.232.184.116:9007] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adrYqXG89LXoQbk_rwBXLwAAAUE"]
[Sun Apr 12 07:26:33.995143 2026] [:error] [pid 26599:tid 26621] [client 4.232.184.116:8925] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adrYqXG89LXoQbk_rwBXMwAAAVM"]
[Sun Apr 12 07:26:34.494484 2026] [:error] [pid 26599:tid 26618] [client 4.232.184.116:9076] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adrYqnG89LXoQbk_rwBXNwAAAVA"]
[Sun Apr 12 07:26:34.965061 2026] [:error] [pid 26599:tid 26610] [client 4.232.184.116:9001] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "adrYqnG89LXoQbk_rwBXOwAAAUg"]
[Sun Apr 12 07:26:35.518525 2026] [:error] [pid 25329:tid 25393] [client 4.232.184.116:9068] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adrYq2dcIYsS8Iyaj11O1AAAAIo"]
[Sun Apr 12 07:26:35.981358 2026] [:error] [pid 25437:tid 25450] [client 4.232.184.116:9123] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adrYq3f97wYZje1ep_N1NQAAAMs"]
[Sun Apr 12 07:26:36.442170 2026] [:error] [pid 60280:tid 60304] [client 4.232.184.116:9136] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adrYrHBlLnDOYuIykkgHuAAAAdY"]
[Sun Apr 12 07:26:36.902291 2026] [:error] [pid 25328:tid 25380] [client 4.232.184.116:8981] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adrYrMxUaQZxT-e0YsAMTAAAAEw"]
[Sun Apr 12 07:26:37.374014 2026] [:error] [pid 26600:tid 26649] [client 4.232.184.116:8991] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adrYre1YwAZiXhQKLYqRsgAAAZQ"]
[Sun Apr 12 07:26:37.890813 2026] [:error] [pid 26600:tid 26641] [client 4.232.184.116:9142] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adrYre1YwAZiXhQKLYqRswAAAYw"]
[Sun Apr 12 07:26:38.391340 2026] [:error] [pid 25327:tid 25358] [client 4.232.184.116:8990] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adrYri6h2tZEVJo9JFJWOgAAABY"]
[Sun Apr 12 07:26:38.884036 2026] [:error] [pid 26599:tid 26625] [client 4.232.184.116:9036] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adrYrnG89LXoQbk_rwBXUwAAAVc"]
[Sun Apr 12 07:26:39.367653 2026] [:error] [pid 26599:tid 26618] [client 4.232.184.116:9060] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adrYr3G89LXoQbk_rwBXWQAAAVA"]
[Sun Apr 12 07:26:39.850883 2026] [:error] [pid 26599:tid 26622] [client 4.232.184.116:8920] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adrYr3G89LXoQbk_rwBXYAAAAVQ"]
[Sun Apr 12 07:26:40.334299 2026] [:error] [pid 26599:tid 26612] [client 4.232.184.116:9061] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adrYsHG89LXoQbk_rwBXYwAAAUo"]
[Sun Apr 12 07:26:40.823399 2026] [:error] [pid 25329:tid 25381] [client 4.232.184.116:8930] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adrYsGdcIYsS8Iyaj11O1wAAAIM"]
[Sun Apr 12 07:26:41.291895 2026] [:error] [pid 26599:tid 26608] [client 4.232.184.116:9176] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "adrYsXG89LXoQbk_rwBXawAAAUY"]
[Sun Apr 12 07:26:41.925328 2026] [:error] [pid 25327:tid 25336] [client 4.232.184.116:8951] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "adrYsS6h2tZEVJo9JFJWQgAAAAA"]
[Sun Apr 12 07:26:42.385700 2026] [:error] [pid 26599:tid 26626] [client 4.232.184.116:8980] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "adrYsnG89LXoQbk_rwBXcwAAAVg"]
[Sun Apr 12 07:26:42.943068 2026] [:error] [pid 60280:tid 60299] [client 4.232.184.116:9139] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "adrYsnBlLnDOYuIykkgHvQAAAdE"]
[Sun Apr 12 07:26:43.424446 2026] [:error] [pid 60280:tid 60302] [client 4.232.184.116:9017] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adrYs3BlLnDOYuIykkgHwQAAAdQ"]
[Sun Apr 12 07:26:43.908302 2026] [:error] [pid 60280:tid 60287] [client 4.232.184.116:8998] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adrYs3BlLnDOYuIykkgHwgAAAcU"]
[Sun Apr 12 07:26:44.486169 2026] [:error] [pid 60280:tid 60293] [client 4.232.184.116:9004] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adrYtHBlLnDOYuIykkgHxwAAAcs"]
[Sun Apr 12 07:26:44.947811 2026] [:error] [pid 60280:tid 60282] [client 4.232.184.116:8913] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "adrYtHBlLnDOYuIykkgHygAAAcA"]
[Sun Apr 12 07:26:45.423313 2026] [:error] [pid 60280:tid 60303] [client 4.232.184.116:8984] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adrYtXBlLnDOYuIykkgHzAAAAdU"]
[Sun Apr 12 07:26:45.913013 2026] [:error] [pid 26567:tid 26574] [client 4.232.184.116:8992] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adrYtXhRpg6ptWFyFx0d0AAAAQU"]
[Sun Apr 12 07:26:46.387896 2026] [:error] [pid 26599:tid 26618] [client 4.232.184.116:8905] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adrYtnG89LXoQbk_rwBXhQAAAVA"]
[Sun Apr 12 07:26:46.877302 2026] [:error] [pid 25327:tid 25338] [client 4.232.184.116:8989] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wtiiy.php"] [unique_id "adrYti6h2tZEVJo9JFJWRQAAAAI"]
[Sun Apr 12 07:26:47.353651 2026] [:error] [pid 25327:tid 25343] [client 4.232.184.116:8910] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adrYty6h2tZEVJo9JFJWRgAAAAc"]
[Sun Apr 12 07:26:47.841936 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:9143] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adrYty6h2tZEVJo9JFJWSQAAABQ"]
[Sun Apr 12 07:26:48.304073 2026] [:error] [pid 25327:tid 25352] [client 4.232.184.116:8976] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adrYuC6h2tZEVJo9JFJWSgAAABA"]
[Sun Apr 12 07:26:48.814303 2026] [:error] [pid 26599:tid 26608] [client 4.232.184.116:8899] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "adrYuHG89LXoQbk_rwBXkQAAAUY"]
[Sun Apr 12 07:26:49.292111 2026] [:error] [pid 26599:tid 26616] [client 4.232.184.116:8842] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adrYuXG89LXoQbk_rwBXlQAAAU4"]
[Sun Apr 12 07:26:49.795464 2026] [:error] [pid 25437:tid 25452] [client 4.232.184.116:9078] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "adrYuXf97wYZje1ep_N1PAAAAM0"]
[Sun Apr 12 07:26:56.458701 2026] [:error] [pid 25327:tid 25350] [client 4.232.184.116:9082] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adrYwC6h2tZEVJo9JFJWZAAAAA4"]
[Sun Apr 12 07:26:57.027513 2026] [:error] [pid 60280:tid 60282] [client 4.232.184.116:9043] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adrYwXBlLnDOYuIykkgH1wAAAcA"]
[Sun Apr 12 07:26:57.524710 2026] [:error] [pid 26599:tid 26603] [client 4.232.184.116:8939] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adrYwXG89LXoQbk_rwBXxQAAAUE"]
[Sun Apr 12 07:26:57.987731 2026] [:error] [pid 26600:tid 26629] [client 4.232.184.116:9006] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "adrYwe1YwAZiXhQKLYqRvgAAAYA"]
[Sun Apr 12 07:26:58.457520 2026] [:error] [pid 26567:tid 26585] [client 4.232.184.116:9199] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adrYwnhRpg6ptWFyFx0d0wAAARA"]
[Sun Apr 12 07:26:59.041333 2026] [:error] [pid 26600:tid 26648] [client 4.232.184.116:8902] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adrYw-1YwAZiXhQKLYqRvwAAAZM"]
[Sun Apr 12 07:26:59.595579 2026] [:error] [pid 26599:tid 26616] [client 4.232.184.116:9168] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adrYw3G89LXoQbk_rwBX0AAAAU4"]
[Sun Apr 12 07:27:00.094469 2026] [:error] [pid 25437:tid 25454] [client 4.232.184.116:8999] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "adrYxHf97wYZje1ep_N1PwAAAM8"]
[Sun Apr 12 07:27:00.602632 2026] [:error] [pid 26599:tid 26626] [client 4.232.184.116:9147] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adrYxHG89LXoQbk_rwBX2AAAAVg"]
[Sun Apr 12 07:27:01.135228 2026] [:error] [pid 25437:tid 25458] [client 4.232.184.116:9020] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adrYxXf97wYZje1ep_N1QQAAANM"]
[Sun Apr 12 07:27:01.619705 2026] [:error] [pid 26599:tid 26605] [client 4.232.184.116:9002] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adrYxXG89LXoQbk_rwBX3wAAAUM"]
[Sun Apr 12 07:27:02.194819 2026] [:error] [pid 26599:tid 26608] [client 4.232.184.116:8985] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "adrYxnG89LXoQbk_rwBX5AAAAUY"]
[Sun Apr 12 07:27:02.711756 2026] [:error] [pid 26600:tid 26653] [client 4.232.184.116:9065] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adrYxu1YwAZiXhQKLYqRwQAAAZg"]
[Sun Apr 12 07:27:03.182612 2026] [:error] [pid 26599:tid 26615] [client 4.232.184.116:8919] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adrYx3G89LXoQbk_rwBX7AAAAU0"]
[Sun Apr 12 07:27:03.648623 2026] [:error] [pid 26599:tid 26612] [client 4.232.184.116:8903] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adrYx3G89LXoQbk_rwBX7wAAAUo"]
[Sun Apr 12 07:27:04.141414 2026] [:error] [pid 26599:tid 26614] [client 4.232.184.116:9008] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adrYyHG89LXoQbk_rwBX8wAAAUw"]
[Sun Apr 12 07:27:04.634529 2026] [:error] [pid 26599:tid 26616] [client 4.232.184.116:9189] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adrYyHG89LXoQbk_rwBX-AAAAU4"]
[Sun Apr 12 07:27:05.104343 2026] [:error] [pid 26599:tid 26609] [client 4.232.184.116:8935] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adrYyXG89LXoQbk_rwBX_gAAAUc"]
[Sun Apr 12 07:27:05.601695 2026] [:error] [pid 60280:tid 60289] [client 4.232.184.116:8929] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adrYyXBlLnDOYuIykkgH4QAAAcc"]
[Sun Apr 12 07:27:06.277179 2026] [:error] [pid 60280:tid 60297] [client 4.232.184.116:8921] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "adrYynBlLnDOYuIykkgH4wAAAc8"]
[Sun Apr 12 07:27:06.753061 2026] [:error] [pid 60280:tid 60304] [client 4.232.184.116:9059] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adrYynBlLnDOYuIykkgH5gAAAdY"]
[Sun Apr 12 07:27:07.251017 2026] [:error] [pid 60280:tid 60292] [client 4.232.184.116:9024] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adrYy3BlLnDOYuIykkgH6QAAAco"]
[Sun Apr 12 07:27:07.776383 2026] [:error] [pid 25327:tid 25360] [client 4.232.184.116:8875] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adrYyy6h2tZEVJo9JFJWaAAAABg"]
[Sun Apr 12 07:27:08.269004 2026] [:error] [pid 25327:tid 25337] [client 4.232.184.116:8907] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "adrYzC6h2tZEVJo9JFJWaQAAAAE"]
[Sun Apr 12 07:27:08.991855 2026] [:error] [pid 26567:tid 26573] [client 4.232.184.116:9019] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adrYzHhRpg6ptWFyFx0d2AAAAQQ"]
[Sun Apr 12 07:27:09.531931 2026] [:error] [pid 26600:tid 26630] [client 4.232.184.116:8997] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adrYze1YwAZiXhQKLYqRxwAAAYE"]
[Sun Apr 12 07:27:10.137671 2026] [:error] [pid 25327:tid 25354] [client 4.232.184.116:8918] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adrYzi6h2tZEVJo9JFJWawAAABI"]
[Sun Apr 12 07:27:10.817355 2026] [:error] [pid 25327:tid 25344] [client 4.232.184.116:9042] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "adrYzi6h2tZEVJo9JFJWbQAAAAg"]
[Sun Apr 12 07:27:11.326486 2026] [:error] [pid 25328:tid 25398] [client 4.232.184.116:8848] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adrYz8xUaQZxT-e0YsAMYgAAAFQ"]
[Sun Apr 12 07:27:11.854200 2026] [:error] [pid 25328:tid 25369] [client 4.232.184.116:9009] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adrYz8xUaQZxT-e0YsAMZAAAAEU"]
[Sun Apr 12 07:27:12.371582 2026] [:error] [pid 60280:tid 60300] [client 4.232.184.116:8965] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adrY0HBlLnDOYuIykkgH7wAAAdI"]
[Sun Apr 12 07:27:12.896289 2026] [:error] [pid 60280:tid 60291] [client 4.232.184.116:8933] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adrY0HBlLnDOYuIykkgH8AAAAck"]
[Sun Apr 12 07:27:13.430957 2026] [:error] [pid 25327:tid 25345] [client 4.232.184.116:8934] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adrY0S6h2tZEVJo9JFJWcQAAAAk"]
[Sun Apr 12 07:27:13.906036 2026] [:error] [pid 25329:tid 25381] [client 4.232.184.116:8901] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adrY0WdcIYsS8Iyaj11O9AAAAIM"]
[Sun Apr 12 07:27:14.369092 2026] [:error] [pid 26600:tid 26647] [client 4.232.184.116:8928] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adrY0u1YwAZiXhQKLYqRyAAAAZI"]
[Sun Apr 12 07:27:14.884010 2026] [:error] [pid 26567:tid 26582] [client 4.232.184.116:8944] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "adrY0nhRpg6ptWFyFx0d3AAAAQ0"]
[Sun Apr 12 07:27:15.410104 2026] [:error] [pid 60280:tid 60284] [client 4.232.184.116:9016] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adrY03BlLnDOYuIykkgH9AAAAcI"]
[Sun Apr 12 07:27:15.894008 2026] [:error] [pid 26600:tid 26652] [client 4.232.184.116:8995] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adrY0-1YwAZiXhQKLYqRzAAAAZc"]
[Sun Apr 12 07:27:16.359875 2026] [:error] [pid 26600:tid 26638] [client 4.232.184.116:8833] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adrY1O1YwAZiXhQKLYqRzQAAAYk"]
[Sun Apr 12 07:27:16.884247 2026] [:error] [pid 60280:tid 60290] [client 4.232.184.116:8943] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "adrY1HBlLnDOYuIykkgH9wAAAcg"]
[Sun Apr 12 07:27:17.368521 2026] [:error] [pid 60280:tid 60301] [client 4.232.184.116:9021] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adrY1XBlLnDOYuIykkgH-QAAAdM"]
[Sun Apr 12 07:27:17.853640 2026] [:error] [pid 25327:tid 25346] [client 4.232.184.116:8946] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adrY1S6h2tZEVJo9JFJWeAAAAAo"]
[Sun Apr 12 07:27:18.314105 2026] [:error] [pid 25327:tid 25337] [client 4.232.184.116:8940] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adrY1i6h2tZEVJo9JFJWegAAAAE"]
[Sun Apr 12 07:27:18.811418 2026] [:error] [pid 25327:tid 25344] [client 4.232.184.116:8841] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adrY1i6h2tZEVJo9JFJWfQAAAAg"]
[Sun Apr 12 07:27:19.436741 2026] [:error] [pid 26599:tid 26618] [client 4.232.184.116:9202] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adrY13G89LXoQbk_rwBYEQAAAVA"]
[Sun Apr 12 07:27:19.989373 2026] [:error] [pid 26599:tid 26606] [client 4.232.184.116:8859] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adrY13G89LXoQbk_rwBYFQAAAUQ"]
[Sun Apr 12 07:27:20.481014 2026] [:error] [pid 26599:tid 26616] [client 4.232.184.116:8974] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adrY2HG89LXoQbk_rwBYFwAAAU4"]
[Sun Apr 12 07:27:21.032145 2026] [:error] [pid 25329:tid 25413] [client 4.232.184.116:9170] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "adrY2WdcIYsS8Iyaj11O_gAAAJY"]
[Sun Apr 12 07:27:21.596071 2026] [:error] [pid 25327:tid 25345] [client 4.232.184.116:8915] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adrY2S6h2tZEVJo9JFJWfwAAAAk"]
[Sun Apr 12 07:27:22.125034 2026] [:error] [pid 25329:tid 25395] [client 4.232.184.116:8914] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adrY2mdcIYsS8Iyaj11PAgAAAIs"]
[Sun Apr 12 07:27:22.618890 2026] [:error] [pid 25327:tid 25356] [client 4.232.184.116:8926] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adrY2i6h2tZEVJo9JFJWggAAABQ"]
[Sun Apr 12 07:27:23.128628 2026] [:error] [pid 25329:tid 25411] [client 4.232.184.116:8922] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adrY22dcIYsS8Iyaj11PAwAAAJQ"]
[Sun Apr 12 07:27:23.675785 2026] [:error] [pid 60280:tid 60306] [client 4.232.184.116:9011] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adrY23BlLnDOYuIykkgH_AAAAdg"]
[Sun Apr 12 07:27:24.168639 2026] [:error] [pid 26600:tid 26633] [client 4.232.184.116:8917] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adrY3O1YwAZiXhQKLYqR1wAAAYQ"]
[Sun Apr 12 07:27:24.727347 2026] [:error] [pid 25329:tid 25407] [client 4.232.184.116:8912] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adrY3GdcIYsS8Iyaj11PCAAAAJI"]
[Sun Apr 12 07:27:25.446007 2026] [:error] [pid 25327:tid 25352] [client 4.232.184.116:8941] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "adrY3S6h2tZEVJo9JFJWhwAAABA"]
[Sun Apr 12 07:27:26.023300 2026] [:error] [pid 25327:tid 25360] [client 4.232.184.116:8894] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adrY3i6h2tZEVJo9JFJWigAAABg"]
[Sun Apr 12 07:27:26.505898 2026] [:error] [pid 26599:tid 26614] [client 4.232.184.116:9005] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adrY3nG89LXoQbk_rwBYIQAAAUw"]
[Sun Apr 12 07:27:26.982653 2026] [:error] [pid 26599:tid 26625] [client 4.232.184.116:8908] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adrY3nG89LXoQbk_rwBYIgAAAVc"]
[Sun Apr 12 07:27:27.563831 2026] [:error] [pid 25328:tid 25391] [client 4.232.184.116:8834] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adrY38xUaQZxT-e0YsAMcAAAAFE"]
[Sun Apr 12 07:27:28.195923 2026] [:error] [pid 60280:tid 60282] [client 4.232.184.116:8948] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "adrY4HBlLnDOYuIykkgIAwAAAcA"]
[Sun Apr 12 07:27:28.754090 2026] [:error] [pid 25328:tid 25368] [client 4.232.184.116:8846] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "adrY4MxUaQZxT-e0YsAMcgAAAEQ"]
[Sun Apr 12 07:27:29.244466 2026] [:error] [pid 60280:tid 60299] [client 4.232.184.116:8840] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "adrY4XBlLnDOYuIykkgIBgAAAdE"]
[Sun Apr 12 07:27:29.817042 2026] [:error] [pid 60280:tid 60305] [client 4.232.184.116:8836] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "adrY4XBlLnDOYuIykkgICwAAAdc"]
[Sun Apr 12 07:27:30.358153 2026] [:error] [pid 60280:tid 60287] [client 4.232.184.116:8873] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adrY4nBlLnDOYuIykkgIDQAAAcU"]
[Sun Apr 12 07:27:31.199204 2026] [:error] [pid 25437:tid 25440] [client 4.232.184.116:9077] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adrY43f97wYZje1ep_N1SAAAAME"]
[Sun Apr 12 07:27:31.836611 2026] [:error] [pid 25437:tid 25459] [client 4.232.184.116:9022] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adrY43f97wYZje1ep_N1SwAAANQ"]
[Sun Apr 12 07:27:32.649294 2026] [:error] [pid 25329:tid 25392] [client 4.232.184.116:8889] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adrY5GdcIYsS8Iyaj11PEAAAAIk"]
[Sun Apr 12 07:27:33.400869 2026] [:error] [pid 25329:tid 25393] [client 4.232.184.116:8906] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adrY5WdcIYsS8Iyaj11PEQAAAIo"]
[Sun Apr 12 07:27:34.001872 2026] [:error] [pid 60280:tid 60303] [client 4.232.184.116:9003] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adrY5nBlLnDOYuIykkgIEgAAAdU"]
[Sun Apr 12 07:27:34.855986 2026] [:error] [pid 25328:tid 25401] [client 4.232.184.116:8959] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adrY5sxUaQZxT-e0YsAMgAAAAFU"]
[Sun Apr 12 07:27:36.142739 2026] [:error] [pid 60280:tid 60301] [client 4.232.184.116:8967] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adrY6HBlLnDOYuIykkgIFQAAAdM"]
[Sun Apr 12 07:27:36.912518 2026] [:error] [pid 25327:tid 25345] [client 4.232.184.116:9184] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adrY6C6h2tZEVJo9JFJWjAAAAAk"]
[Sun Apr 12 07:27:37.397559 2026] [:error] [pid 60280:tid 60305] [client 4.232.184.116:8896] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adrY6XBlLnDOYuIykkgIGAAAAdc"]
[Sun Apr 12 07:27:37.880728 2026] [:error] [pid 60280:tid 60300] [client 4.232.184.116:8931] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adrY6XBlLnDOYuIykkgIGwAAAdI"]
[Sun Apr 12 07:27:38.348996 2026] [:error] [pid 60280:tid 60293] [client 4.232.184.116:8924] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adrY6nBlLnDOYuIykkgIIAAAAcs"]
[Sun Apr 12 07:27:38.838777 2026] [:error] [pid 60280:tid 60303] [client 4.232.184.116:8858] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "adrY6nBlLnDOYuIykkgIJgAAAdU"]
[Sun Apr 12 07:27:39.311943 2026] [:error] [pid 25327:tid 25343] [client 4.232.184.116:8957] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "adrY6y6h2tZEVJo9JFJWkAAAAAc"]
[Sun Apr 12 07:27:39.817547 2026] [:error] [pid 26567:tid 26579] [client 4.232.184.116:9173] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "adrY63hRpg6ptWFyFx0d4AAAAQo"]
[Sun Apr 12 07:27:40.353370 2026] [:error] [pid 25327:tid 25348] [client 4.232.184.116:8860] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "adrY7C6h2tZEVJo9JFJWkwAAAAw"]
[Sun Apr 12 07:27:40.846668 2026] [:error] [pid 25327:tid 25352] [client 4.232.184.116:8996] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adrY7C6h2tZEVJo9JFJWlAAAABA"]
[Sun Apr 12 07:27:41.610333 2026] [:error] [pid 25329:tid 25384] [client 4.232.184.116:9023] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adrY7WdcIYsS8Iyaj11PFwAAAIU"]
[Sun Apr 12 07:27:42.068386 2026] [:error] [pid 26600:tid 26639] [client 4.232.184.116:8949] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adrY7u1YwAZiXhQKLYqR3QAAAYo"]
[Sun Apr 12 07:27:42.550574 2026] [:error] [pid 25329:tid 25412] [client 4.232.184.116:8898] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "adrY7mdcIYsS8Iyaj11PGAAAAJU"]
[Sun Apr 12 07:27:43.020025 2026] [:error] [pid 60280:tid 60304] [client 4.232.184.116:8993] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adrY73BlLnDOYuIykkgILwAAAdY"]
[Sun Apr 12 07:27:43.594155 2026] [:error] [pid 25437:tid 25455] [client 4.232.184.116:8938] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adrY73f97wYZje1ep_N1WQAAANA"]
[Sun Apr 12 07:27:44.158786 2026] [:error] [pid 60280:tid 60296] [client 4.232.184.116:9014] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adrY8HBlLnDOYuIykkgINAAAAc4"]
[Sun Apr 12 07:27:44.622902 2026] [:error] [pid 60280:tid 60305] [client 4.232.184.116:8958] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "adrY8HBlLnDOYuIykkgINQAAAdc"]
[Sun Apr 12 07:27:45.168341 2026] [:error] [pid 25329:tid 25409] [client 4.232.184.116:8885] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adrY8WdcIYsS8Iyaj11PGwAAAJM"]
[Sun Apr 12 07:27:45.828582 2026] [:error] [pid 26599:tid 26615] [client 4.232.184.116:8911] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adrY8XG89LXoQbk_rwBYKwAAAU0"]
[Sun Apr 12 07:27:46.322989 2026] [:error] [pid 26599:tid 26621] [client 4.232.184.116:9192] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adrY8nG89LXoQbk_rwBYMAAAAVM"]
[Sun Apr 12 07:27:46.835927 2026] [:error] [pid 26599:tid 26626] [client 4.232.184.116:8968] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "adrY8nG89LXoQbk_rwBYMgAAAVg"]
[Sun Apr 12 07:27:47.383347 2026] [:error] [pid 60280:tid 60287] [client 4.232.184.116:8937] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adrY83BlLnDOYuIykkgINgAAAcU"]
[Sun Apr 12 07:27:48.171396 2026] [:error] [pid 60280:tid 60284] [client 4.232.184.116:8857] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adrY9HBlLnDOYuIykkgIOQAAAcI"]
[Sun Apr 12 07:27:48.711069 2026] [:error] [pid 25329:tid 25378] [client 4.232.184.116:8904] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adrY9GdcIYsS8Iyaj11PHQAAAII"]
[Sun Apr 12 07:27:49.262460 2026] [:error] [pid 26600:tid 26650] [client 4.232.184.116:8936] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "adrY9e1YwAZiXhQKLYqR4wAAAZU"]
[Sun Apr 12 07:27:49.828592 2026] [:error] [pid 26600:tid 26647] [client 4.232.184.116:8871] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adrY9e1YwAZiXhQKLYqR5AAAAZI"]
[Sun Apr 12 07:27:50.381486 2026] [:error] [pid 26567:tid 26578] [client 4.232.184.116:8955] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adrY9nhRpg6ptWFyFx0d5QAAAQk"]
[Sun Apr 12 07:27:50.854531 2026] [:error] [pid 25329:tid 25392] [client 4.232.184.116:8923] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adrY9mdcIYsS8Iyaj11PHgAAAIk"]
[Sun Apr 12 07:27:51.350384 2026] [:error] [pid 25328:tid 25383] [client 4.232.184.116:9031] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adrY98xUaQZxT-e0YsAMhgAAAE0"]
[Sun Apr 12 07:27:51.832083 2026] [:error] [pid 25328:tid 25380] [client 4.232.184.116:8826] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adrY98xUaQZxT-e0YsAMhwAAAEw"]
[Sun Apr 12 07:27:52.351687 2026] [:error] [pid 60280:tid 60285] [client 4.232.184.116:8987] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adrY-HBlLnDOYuIykkgIRAAAAcM"]
[Sun Apr 12 07:27:52.873358 2026] [:error] [pid 60280:tid 60293] [client 4.232.184.116:8795] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adrY-HBlLnDOYuIykkgIRQAAAcs"]
[Sun Apr 12 07:27:53.444620 2026] [:error] [pid 25327:tid 25339] [client 4.232.184.116:8839] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nw.php"] [unique_id "adrY-S6h2tZEVJo9JFJWogAAAAM"]
[Sun Apr 12 07:27:54.015269 2026] [:error] [pid 60280:tid 60292] [client 4.232.184.116:8862] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adrY-nBlLnDOYuIykkgIRwAAAco"]
[Sun Apr 12 07:27:54.533516 2026] [:error] [pid 25328:tid 25401] [client 4.232.184.116:8851] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adrY-sxUaQZxT-e0YsAMiwAAAFU"]
[Sun Apr 12 07:27:55.012917 2026] [:error] [pid 26600:tid 26648] [client 4.232.184.116:8909] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adrY--1YwAZiXhQKLYqR6gAAAZM"]
[Sun Apr 12 07:27:55.482137 2026] [:error] [pid 60280:tid 60294] [client 4.232.184.116:8884] [client 4.232.184.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "adrY-3BlLnDOYuIykkgISgAAAcw"]
[Sun Apr 12 09:43:23.971156 2026] [:error] [pid 26600:tid 26632] [client 43.153.76.247:58870] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adr4u-1YwAZiXhQKLYqxgQAAAYM"]
[Sun Apr 12 09:54:13.466563 2026] [:error] [pid 26600:tid 26634] [client 49.235.136.28:35520] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adr7Re1YwAZiXhQKLYq0YAAAAYU"]
[Sun Apr 12 12:21:26.778078 2026] [:error] [pid 60280:tid 60289] [client 172.213.233.8:44186] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adsdxnBlLnDOYuIykkiokAAAAcc"]
[Sun Apr 12 12:21:27.502801 2026] [:error] [pid 60280:tid 60299] [client 172.213.233.8:48151] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adsdx3BlLnDOYuIykkiokgAAAdE"]
[Sun Apr 12 12:21:28.401719 2026] [:error] [pid 26600:tid 26646] [client 172.213.233.8:45528] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adsdyO1YwAZiXhQKLYrafAAAAZE"]
[Sun Apr 12 12:21:29.252287 2026] [:error] [pid 60280:tid 60286] [client 172.213.233.8:54183] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adsdyXBlLnDOYuIykkiongAAAcQ"]
[Sun Apr 12 12:21:29.879166 2026] [:error] [pid 26600:tid 26630] [client 172.213.233.8:34930] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/97.php"] [unique_id "adsdye1YwAZiXhQKLYrafQAAAYE"]
[Sun Apr 12 12:21:30.754431 2026] [:error] [pid 60280:tid 60291] [client 172.213.233.8:4979] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/97.php"] [unique_id "adsdynBlLnDOYuIykkioqQAAAck"]
[Sun Apr 12 12:21:32.256760 2026] [:error] [pid 60280:tid 60293] [client 172.213.233.8:50063] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/97.php"] [unique_id "adsdzHBlLnDOYuIykkiotQAAAcs"]
[Sun Apr 12 12:21:33.178958 2026] [:error] [pid 60280:tid 60303] [client 172.213.233.8:38438] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/97.php"] [unique_id "adsdzXBlLnDOYuIykkiougAAAdU"]
[Sun Apr 12 12:21:35.803561 2026] [:error] [pid 26567:tid 26569] [client 172.213.233.8:50107] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adsdz3hRpg6ptWFyFx1f2QAAAQA"]
[Sun Apr 12 12:21:36.741987 2026] [:error] [pid 25437:tid 25442] [client 172.213.233.8:56120] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adsd0Hf97wYZje1ep_PKXwAAAMM"]
[Sun Apr 12 12:21:38.354986 2026] [:error] [pid 25437:tid 25446] [client 172.213.233.8:48247] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adsd0nf97wYZje1ep_PKYgAAAMc"]
[Sun Apr 12 12:21:39.490858 2026] [:error] [pid 26567:tid 26584] [client 172.213.233.8:38369] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adsd03hRpg6ptWFyFx1f2wAAAQ8"]
[Sun Apr 12 12:21:41.441339 2026] [:error] [pid 25327:tid 25350] [client 172.213.233.8:59367] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adsd1S6h2tZEVJo9JFKVuAAAAA4"]
[Sun Apr 12 12:21:42.656160 2026] [:error] [pid 60280:tid 60294] [client 172.213.233.8:49674] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adsd1nBlLnDOYuIykkio6gAAAcw"]
[Sun Apr 12 12:21:44.685660 2026] [:error] [pid 60280:tid 60304] [client 172.213.233.8:42587] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adsd2HBlLnDOYuIykkio6wAAAdY"]
[Sun Apr 12 12:21:46.089929 2026] [:error] [pid 25437:tid 25454] [client 172.213.233.8:35358] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adsd2nf97wYZje1ep_PKawAAAM8"]
[Sun Apr 12 12:21:46.848360 2026] [:error] [pid 25437:tid 25457] [client 172.213.233.8:42592] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adsd2nf97wYZje1ep_PKcgAAANI"]
[Sun Apr 12 12:21:48.061433 2026] [:error] [pid 60280:tid 60301] [client 172.213.233.8:44731] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adsd3HBlLnDOYuIykkio7wAAAdM"]
[Sun Apr 12 12:21:48.974037 2026] [:error] [pid 60280:tid 60306] [client 172.213.233.8:44705] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adsd3HBlLnDOYuIykkio8wAAAdg"]
[Sun Apr 12 12:21:50.478207 2026] [:error] [pid 25437:tid 25445] [client 172.213.233.8:49722] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adsd3nf97wYZje1ep_PKegAAAMY"]
[Sun Apr 12 12:21:51.698936 2026] [:error] [pid 26600:tid 26635] [client 172.213.233.8:4397] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adsd3-1YwAZiXhQKLYrajAAAAYY"]
[Sun Apr 12 12:21:53.327684 2026] [:error] [pid 60280:tid 60304] [client 172.213.233.8:46803] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adsd4XBlLnDOYuIykkipAQAAAdY"]
[Sun Apr 12 12:21:54.524193 2026] [:error] [pid 25328:tid 25370] [client 172.213.233.8:59360] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adsd4sxUaQZxT-e0YsCGbgAAAEY"]
[Sun Apr 12 12:21:55.601893 2026] [:error] [pid 25437:tid 25441] [client 172.213.233.8:48231] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adsd43f97wYZje1ep_PKhwAAAMI"]
[Sun Apr 12 12:21:57.083817 2026] [:error] [pid 26567:tid 26570] [client 172.213.233.8:47523] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adsd5XhRpg6ptWFyFx1f6wAAAQE"]
[Sun Apr 12 12:21:58.499191 2026] [:error] [pid 60280:tid 60301] [client 172.213.233.8:42588] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adsd5nBlLnDOYuIykkipAwAAAdM"]
[Sun Apr 12 12:21:59.330029 2026] [:error] [pid 26567:tid 26588] [client 172.213.233.8:48202] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adsd53hRpg6ptWFyFx1f7wAAARM"]
[Sun Apr 12 12:22:00.221725 2026] [:error] [pid 25329:tid 25374] [client 172.213.233.8:49692] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adsd6GdcIYsS8Iyaj119EQAAAIA"]
[Sun Apr 12 12:22:01.355463 2026] [:error] [pid 26567:tid 26580] [client 172.213.233.8:42579] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adsd6XhRpg6ptWFyFx1f8AAAAQs"]
[Sun Apr 12 12:22:04.522094 2026] [:error] [pid 60280:tid 60303] [client 172.213.233.8:47816] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adsd7HBlLnDOYuIykkipCAAAAdU"]
[Sun Apr 12 12:22:05.259899 2026] [:error] [pid 60280:tid 60296] [client 172.213.233.8:62479] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adsd7XBlLnDOYuIykkipCgAAAc4"]
[Sun Apr 12 12:22:06.018272 2026] [:error] [pid 25327:tid 25348] [client 172.213.233.8:62476] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adsd7i6h2tZEVJo9JFKVvwAAAAw"]
[Sun Apr 12 12:22:06.969415 2026] [:error] [pid 25328:tid 25364] [client 172.213.233.8:47517] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adsd7sxUaQZxT-e0YsCGdgAAAEA"]
[Sun Apr 12 12:22:07.695449 2026] [:error] [pid 60280:tid 60287] [client 172.213.233.8:46808] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adsd73BlLnDOYuIykkipDwAAAcU"]
[Sun Apr 12 12:22:08.419717 2026] [:error] [pid 25328:tid 25366] [client 172.213.233.8:58626] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adsd8MxUaQZxT-e0YsCGegAAAEI"]
[Sun Apr 12 12:22:09.000310 2026] [:error] [pid 60280:tid 60289] [client 172.213.233.8:53084] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adsd8HBlLnDOYuIykkipEQAAAcc"]
[Sun Apr 12 12:22:09.729968 2026] [:error] [pid 60280:tid 60300] [client 172.213.233.8:41429] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adsd8XBlLnDOYuIykkipEwAAAdI"]
[Sun Apr 12 12:22:10.525016 2026] [:error] [pid 60280:tid 60285] [client 172.213.233.8:47865] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adsd8nBlLnDOYuIykkipGAAAAcM"]
[Sun Apr 12 12:22:11.713181 2026] [:error] [pid 26600:tid 26653] [client 172.213.233.8:58632] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adsd8-1YwAZiXhQKLYramQAAAZg"]
[Sun Apr 12 12:22:12.358379 2026] [:error] [pid 60280:tid 60293] [client 172.213.233.8:53060] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adsd9HBlLnDOYuIykkipHAAAAcs"]
[Sun Apr 12 12:22:12.983776 2026] [:error] [pid 26567:tid 26583] [client 172.213.233.8:36062] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adsd9HhRpg6ptWFyFx1f-AAAAQ4"]
[Sun Apr 12 12:22:14.088615 2026] [:error] [pid 25329:tid 25393] [client 172.213.233.8:58666] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adsd9mdcIYsS8Iyaj119FgAAAIo"]
[Sun Apr 12 12:22:15.102384 2026] [:error] [pid 26600:tid 26636] [client 172.213.233.8:60613] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adsd9-1YwAZiXhQKLYramwAAAYc"]
[Sun Apr 12 12:22:15.605834 2026] [:error] [pid 60280:tid 60305] [client 172.213.233.8:53058] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adsd93BlLnDOYuIykkipKgAAAdc"]
[Sun Apr 12 12:22:16.362448 2026] [:error] [pid 60280:tid 60303] [client 172.213.233.8:53110] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adsd-HBlLnDOYuIykkipKwAAAdU"]
[Sun Apr 12 12:22:17.278820 2026] [:error] [pid 26567:tid 26569] [client 172.213.233.8:41529] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adsd-XhRpg6ptWFyFx1f-wAAAQA"]
[Sun Apr 12 12:22:17.952915 2026] [:error] [pid 60280:tid 60298] [client 172.213.233.8:50564] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adsd-XBlLnDOYuIykkipLAAAAdA"]
[Sun Apr 12 12:22:18.501987 2026] [:error] [pid 60280:tid 60286] [client 172.213.233.8:50615] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adsd-nBlLnDOYuIykkipLwAAAcQ"]
[Sun Apr 12 12:22:19.418483 2026] [:error] [pid 60280:tid 60300] [client 172.213.233.8:50588] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adsd-3BlLnDOYuIykkipNwAAAdI"]
[Sun Apr 12 12:22:21.266914 2026] [:error] [pid 60280:tid 60293] [client 172.213.233.8:48003] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adsd_XBlLnDOYuIykkipQAAAAcs"]
[Sun Apr 12 12:22:21.980389 2026] [:error] [pid 25327:tid 25337] [client 172.213.233.8:50579] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adsd_S6h2tZEVJo9JFKVxwAAAAE"]
[Sun Apr 12 12:22:22.624093 2026] [:error] [pid 26599:tid 26609] [client 172.213.233.8:41524] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adsd_nG89LXoQbk_rwCYKwAAAUc"]
[Sun Apr 12 12:22:23.423088 2026] [:error] [pid 26567:tid 26589] [client 172.213.233.8:47089] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adsd_3hRpg6ptWFyFx1f_gAAARQ"]
[Sun Apr 12 12:22:24.526274 2026] [:error] [pid 60280:tid 60291] [client 172.213.233.8:50130] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adseAHBlLnDOYuIykkipTwAAAck"]
[Sun Apr 12 12:22:25.292855 2026] [:error] [pid 60280:tid 60284] [client 172.213.233.8:50155] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adseAXBlLnDOYuIykkipVAAAAcI"]
[Sun Apr 12 12:22:32.582957 2026] [:error] [pid 60280:tid 60297] [client 172.213.233.8:58590] [client 172.213.233.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adseCHBlLnDOYuIykkipgAAAAc8"]
[Sun Apr 12 12:22:34.640381 2026] [:error] [pid 26600:tid 26652] [client 172.213.233.8:50605] [client 172.213.233.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "adseCu1YwAZiXhQKLYrapQAAAZc"]
[Sun Apr 12 12:22:35.931056 2026] [:error] [pid 25437:tid 25463] [client 172.213.233.8:42929] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "adseC3f97wYZje1ep_PKmwAAANg"]
[Sun Apr 12 12:22:37.285079 2026] [:error] [pid 25328:tid 25372] [client 172.213.233.8:60608] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "adseDcxUaQZxT-e0YsCGoAAAAEc"]
[Sun Apr 12 12:22:38.014921 2026] [:error] [pid 60280:tid 60306] [client 172.213.233.8:59045] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wdone1.php"] [unique_id "adseDnBlLnDOYuIykkipjQAAAdg"]
[Sun Apr 12 12:22:39.077586 2026] [:error] [pid 60280:tid 60289] [client 172.213.233.8:59009] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adseD3BlLnDOYuIykkipjwAAAcc"]
[Sun Apr 12 12:22:39.973101 2026] [:error] [pid 60280:tid 60294] [client 172.213.233.8:53787] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adseD3BlLnDOYuIykkiplgAAAcw"]
[Sun Apr 12 12:22:40.811840 2026] [:error] [pid 26567:tid 26577] [client 172.213.233.8:39608] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adseEHhRpg6ptWFyFx1gBAAAAQg"]
[Sun Apr 12 12:22:41.786998 2026] [:error] [pid 26567:tid 26583] [client 172.213.233.8:60634] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adseEXhRpg6ptWFyFx1gBQAAAQ4"]
[Sun Apr 12 12:22:42.602848 2026] [:error] [pid 25329:tid 25378] [client 172.213.233.8:50580] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adseEmdcIYsS8Iyaj119IgAAAII"]
[Sun Apr 12 12:22:43.340381 2026] [:error] [pid 25329:tid 25382] [client 172.213.233.8:58623] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adseE2dcIYsS8Iyaj119IwAAAIQ"]
[Sun Apr 12 12:22:45.631141 2026] [:error] [pid 25328:tid 25370] [client 172.213.233.8:57339] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adseFcxUaQZxT-e0YsCGqAAAAEY"]
[Sun Apr 12 12:22:48.072445 2026] [:error] [pid 25329:tid 25390] [client 172.213.233.8:4397] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adseGGdcIYsS8Iyaj119JgAAAIg"]
[Sun Apr 12 12:22:48.888802 2026] [:error] [pid 26600:tid 26643] [client 172.213.233.8:58624] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adseGO1YwAZiXhQKLYrargAAAY4"]
[Sun Apr 12 12:22:50.228894 2026] [:error] [pid 26567:tid 26584] [client 172.213.233.8:58658] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adseGnhRpg6ptWFyFx1gCwAAAQ8"]
[Sun Apr 12 12:22:51.645907 2026] [:error] [pid 25437:tid 25454] [client 172.213.233.8:58653] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adseG3f97wYZje1ep_PKpgAAAM8"]
[Sun Apr 12 12:22:52.184154 2026] [:error] [pid 60280:tid 60302] [client 172.213.233.8:36064] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ava.php"] [unique_id "adseHHBlLnDOYuIykkipoQAAAdQ"]
[Sun Apr 12 12:22:53.389075 2026] [:error] [pid 26600:tid 26649] [client 172.213.233.8:58642] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "adseHe1YwAZiXhQKLYrarwAAAZQ"]
[Sun Apr 12 12:22:54.176027 2026] [:error] [pid 25328:tid 25383] [client 172.213.233.8:4390] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "adseHsxUaQZxT-e0YsCGrgAAAE0"]
[Sun Apr 12 12:22:55.510369 2026] [:error] [pid 26600:tid 26650] [client 172.213.233.8:58685] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "adseH-1YwAZiXhQKLYraswAAAZU"]
[Sun Apr 12 12:22:57.777743 2026] [:error] [pid 25328:tid 25367] [client 172.213.233.8:58667] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awh.php"] [unique_id "adseIcxUaQZxT-e0YsCGtwAAAEM"]
[Sun Apr 12 12:22:58.867702 2026] [:error] [pid 26600:tid 26636] [client 172.213.233.8:35382] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r2.php"] [unique_id "adseIu1YwAZiXhQKLYrauQAAAYc"]
[Sun Apr 12 12:23:00.758370 2026] [:error] [pid 60280:tid 60295] [client 172.213.233.8:62510] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r2.php"] [unique_id "adseJHBlLnDOYuIykkiprgAAAc0"]
[Sun Apr 12 12:23:02.131296 2026] [:error] [pid 25328:tid 25375] [client 172.213.233.8:46827] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r2.php"] [unique_id "adseJsxUaQZxT-e0YsCGuQAAAEk"]
[Sun Apr 12 12:23:03.186736 2026] [:error] [pid 60280:tid 60303] [client 172.213.233.8:51336] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/r2.php"] [unique_id "adseJ3BlLnDOYuIykkiptAAAAdU"]
[Sun Apr 12 12:23:04.316074 2026] [:error] [pid 26600:tid 26630] [client 172.213.233.8:47858] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adseKO1YwAZiXhQKLYravQAAAYE"]
[Sun Apr 12 12:23:05.050791 2026] [:error] [pid 26600:tid 26652] [client 172.213.233.8:47499] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adseKe1YwAZiXhQKLYrawAAAAZc"]
[Sun Apr 12 12:23:05.932468 2026] [:error] [pid 26600:tid 26640] [client 172.213.233.8:47531] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adseKe1YwAZiXhQKLYrawwAAAYs"]
[Sun Apr 12 12:23:08.411525 2026] [:error] [pid 25437:tid 25454] [client 172.213.233.8:37765] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adseLHf97wYZje1ep_PKsgAAAM8"]
[Sun Apr 12 12:23:09.504525 2026] [:error] [pid 26599:tid 26613] [client 172.213.233.8:37765] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "adseLXG89LXoQbk_rwCYNwAAAUs"]
[Sun Apr 12 12:23:10.632195 2026] [:error] [pid 25327:tid 25344] [client 172.213.233.8:46797] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "adseLi6h2tZEVJo9JFKV2wAAAAg"]
[Sun Apr 12 12:23:12.268349 2026] [:error] [pid 25329:tid 25404] [client 172.213.233.8:62499] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "adseMGdcIYsS8Iyaj119LAAAAJA"]
[Sun Apr 12 12:23:15.412421 2026] [:error] [pid 60280:tid 60302] [client 172.213.233.8:44675] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "adseM3BlLnDOYuIykkipxgAAAdQ"]
[Sun Apr 12 12:23:16.683226 2026] [:error] [pid 25437:tid 25451] [client 172.213.233.8:54710] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "adseNHf97wYZje1ep_PKtgAAAMw"]
[Sun Apr 12 12:23:18.286738 2026] [:error] [pid 26599:tid 26604] [client 172.213.233.8:42618] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "adseNnG89LXoQbk_rwCYQgAAAUI"]
[Sun Apr 12 12:23:19.858108 2026] [:error] [pid 25329:tid 25399] [client 172.213.233.8:44730] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "adseN2dcIYsS8Iyaj119MQAAAI0"]
[Sun Apr 12 12:23:20.856472 2026] [:error] [pid 25437:tid 25462] [client 172.213.233.8:48207] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "adseOHf97wYZje1ep_PKvQAAANc"]
[Sun Apr 12 12:23:21.569779 2026] [:error] [pid 26567:tid 26573] [client 172.213.233.8:56065] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adseOXhRpg6ptWFyFx1gJwAAAQQ"]
[Sun Apr 12 12:23:22.198624 2026] [:error] [pid 25328:tid 25401] [client 172.213.233.8:56491] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adseOsxUaQZxT-e0YsCGyAAAAFU"]
[Sun Apr 12 12:23:23.115196 2026] [:error] [pid 25329:tid 25392] [client 172.213.233.8:4898] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adseO2dcIYsS8Iyaj119MwAAAIk"]
[Sun Apr 12 12:23:23.773653 2026] [:error] [pid 25327:tid 25339] [client 172.213.233.8:51063] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adseOy6h2tZEVJo9JFKV3gAAAAM"]
[Sun Apr 12 12:23:24.593351 2026] [:error] [pid 26567:tid 26583] [client 172.213.233.8:38380] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adsePHhRpg6ptWFyFx1gKgAAAQ4"]
[Sun Apr 12 12:23:25.649612 2026] [:error] [pid 25327:tid 25348] [client 172.213.233.8:38386] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adsePS6h2tZEVJo9JFKV4gAAAAw"]
[Sun Apr 12 12:23:27.910292 2026] [:error] [pid 60280:tid 60305] [client 172.213.233.8:56453] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adseP3BlLnDOYuIykkip1AAAAdc"]
[Sun Apr 12 12:23:28.452520 2026] [:error] [pid 25328:tid 25367] [client 172.213.233.8:54697] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adseQMxUaQZxT-e0YsCGzQAAAEM"]
[Sun Apr 12 12:23:29.638175 2026] [:error] [pid 25328:tid 25365] [client 172.213.233.8:37786] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "adseQcxUaQZxT-e0YsCG0QAAAEE"]
[Sun Apr 12 12:23:30.558273 2026] [:error] [pid 26567:tid 26575] [client 172.213.233.8:48233] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "adseQnhRpg6ptWFyFx1gLwAAAQY"]
[Sun Apr 12 12:23:32.895384 2026] [:error] [pid 26567:tid 26573] [client 172.213.233.8:56494] [client 172.213.233.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "adseRHhRpg6ptWFyFx1gNAAAAQQ"]
[Sun Apr 12 12:24:48.459142 2026] [:error] [pid 25437:tid 25447] [client 20.100.203.99:38748] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adsekHf97wYZje1ep_PLQAAAAMg"]
[Sun Apr 12 12:24:49.159035 2026] [:error] [pid 25327:tid 25344] [client 20.100.203.99:29899] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adsekS6h2tZEVJo9JFKV8wAAAAg"]
[Sun Apr 12 12:24:49.667798 2026] [:error] [pid 60280:tid 60301] [client 20.100.203.99:29934] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adsekXBlLnDOYuIykkirMwAAAdM"]
[Sun Apr 12 12:24:50.340163 2026] [:error] [pid 25437:tid 25448] [client 20.100.203.99:29447] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adseknf97wYZje1ep_PLQgAAAMk"]
[Sun Apr 12 12:24:50.879976 2026] [:error] [pid 25328:tid 25380] [client 20.100.203.99:29941] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/97.php"] [unique_id "adseksxUaQZxT-e0YsCHnAAAAEw"]
[Sun Apr 12 12:24:51.475896 2026] [:error] [pid 25437:tid 25445] [client 20.100.203.99:29943] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/97.php"] [unique_id "adsek3f97wYZje1ep_PLRQAAAMY"]
[Sun Apr 12 12:24:52.029300 2026] [:error] [pid 25329:tid 25397] [client 20.100.203.99:29464] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/97.php"] [unique_id "adselGdcIYsS8Iyaj119QAAAAIw"]
[Sun Apr 12 12:24:52.796805 2026] [:error] [pid 25329:tid 25406] [client 20.100.203.99:38772] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/97.php"] [unique_id "adselGdcIYsS8Iyaj119QgAAAJE"]
[Sun Apr 12 12:24:53.397021 2026] [:error] [pid 26599:tid 26610] [client 20.100.203.99:38759] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adselXG89LXoQbk_rwCYWwAAAUg"]
[Sun Apr 12 12:24:54.147764 2026] [:error] [pid 25328:tid 25364] [client 20.100.203.99:29945] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adselsxUaQZxT-e0YsCHowAAAEA"]
[Sun Apr 12 12:24:54.865029 2026] [:error] [pid 26600:tid 26652] [client 20.100.203.99:38769] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adselu1YwAZiXhQKLYrbHQAAAZc"]
[Sun Apr 12 12:24:55.592555 2026] [:error] [pid 60280:tid 60304] [client 20.100.203.99:29454] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "adsel3BlLnDOYuIykkirNwAAAdY"]
[Sun Apr 12 12:24:56.429216 2026] [:error] [pid 60280:tid 60305] [client 20.100.203.99:29443] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adsemHBlLnDOYuIykkirOQAAAdc"]
[Sun Apr 12 12:24:57.080562 2026] [:error] [pid 26567:tid 26580] [client 20.100.203.99:40524] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adsemXhRpg6ptWFyFx1gbgAAAQs"]
[Sun Apr 12 12:24:57.814220 2026] [:error] [pid 25327:tid 25354] [client 20.100.203.99:29902] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adsemS6h2tZEVJo9JFKV9QAAABI"]
[Sun Apr 12 12:24:58.439578 2026] [:error] [pid 26567:tid 26581] [client 20.100.203.99:29932] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lv.php"] [unique_id "adsemnhRpg6ptWFyFx1gcQAAAQw"]
[Sun Apr 12 12:24:59.121982 2026] [:error] [pid 26567:tid 26577] [client 20.100.203.99:29927] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adsem3hRpg6ptWFyFx1gcgAAAQg"]
[Sun Apr 12 12:24:59.777480 2026] [:error] [pid 25328:tid 25405] [client 20.100.203.99:38726] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adsem8xUaQZxT-e0YsCHqAAAAFc"]
[Sun Apr 12 12:25:00.664073 2026] [:error] [pid 25437:tid 25443] [client 20.100.203.99:29894] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adsenHf97wYZje1ep_PLSwAAAMQ"]
[Sun Apr 12 12:25:01.349807 2026] [:error] [pid 60280:tid 60303] [client 20.100.203.99:40516] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "adsenXBlLnDOYuIykkirPAAAAdU"]
[Sun Apr 12 12:25:02.045252 2026] [:error] [pid 60280:tid 60285] [client 20.100.203.99:38738] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adsennBlLnDOYuIykkirPwAAAcM"]
[Sun Apr 12 12:25:02.776584 2026] [:error] [pid 25437:tid 25460] [client 20.100.203.99:29448] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adsennf97wYZje1ep_PLTAAAANU"]
[Sun Apr 12 12:25:03.407128 2026] [:error] [pid 25328:tid 25391] [client 20.100.203.99:38782] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adsen8xUaQZxT-e0YsCHsQAAAFE"]
[Sun Apr 12 12:25:04.249030 2026] [:error] [pid 25328:tid 25396] [client 20.100.203.99:38764] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "adseoMxUaQZxT-e0YsCHtAAAAFM"]
[Sun Apr 12 12:25:05.095248 2026] [:error] [pid 25328:tid 25364] [client 20.100.203.99:29944] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adseocxUaQZxT-e0YsCHtQAAAEA"]
[Sun Apr 12 12:25:06.025876 2026] [:error] [pid 25437:tid 25462] [client 20.100.203.99:40571] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adseonf97wYZje1ep_PLUgAAANc"]
[Sun Apr 12 12:25:07.357559 2026] [:error] [pid 25328:tid 25408] [client 20.100.203.99:40561] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adseo8xUaQZxT-e0YsCHugAAAFg"]
[Sun Apr 12 12:25:08.372015 2026] [:error] [pid 25328:tid 25394] [client 20.100.203.99:40568] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adsepMxUaQZxT-e0YsCHvQAAAFI"]
[Sun Apr 12 12:25:09.365430 2026] [:error] [pid 25327:tid 25359] [client 20.100.203.99:38768] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adsepS6h2tZEVJo9JFKV-QAAABc"]
[Sun Apr 12 12:25:09.962354 2026] [:error] [pid 25328:tid 25372] [client 20.100.203.99:29948] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adsepcxUaQZxT-e0YsCHwwAAAEc"]
[Sun Apr 12 12:25:10.844275 2026] [:error] [pid 25328:tid 25405] [client 20.100.203.99:40541] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adsepsxUaQZxT-e0YsCHxgAAAFc"]
[Sun Apr 12 12:25:11.438139 2026] [:error] [pid 25328:tid 25367] [client 20.100.203.99:38727] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "adsep8xUaQZxT-e0YsCHxwAAAEM"]
[Sun Apr 12 12:25:12.118243 2026] [:error] [pid 25437:tid 25443] [client 20.100.203.99:38737] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adseqHf97wYZje1ep_PLVwAAAMQ"]
[Sun Apr 12 12:25:12.756702 2026] [:error] [pid 25437:tid 25451] [client 20.100.203.99:29909] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adseqHf97wYZje1ep_PLWwAAAMw"]
[Sun Apr 12 12:25:13.365337 2026] [:error] [pid 26599:tid 26621] [client 20.100.203.99:40533] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adseqXG89LXoQbk_rwCYXQAAAVM"]
[Sun Apr 12 12:25:14.412429 2026] [:error] [pid 25328:tid 25389] [client 20.100.203.99:38736] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adseqsxUaQZxT-e0YsCHygAAAFA"]
[Sun Apr 12 12:25:14.997347 2026] [:error] [pid 60280:tid 60298] [client 20.100.203.99:29929] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adseqnBlLnDOYuIykkirQAAAAdA"]
[Sun Apr 12 12:25:15.690998 2026] [:error] [pid 26599:tid 26609] [client 20.100.203.99:29460] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adseq3G89LXoQbk_rwCYXgAAAUc"]
[Sun Apr 12 12:25:16.413119 2026] [:error] [pid 25328:tid 25391] [client 20.100.203.99:29906] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adserMxUaQZxT-e0YsCHzwAAAFE"]
[Sun Apr 12 12:25:17.113417 2026] [:error] [pid 25437:tid 25463] [client 20.100.203.99:29446] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wswer1.php"] [unique_id "adserXf97wYZje1ep_PLcQAAANg"]
[Sun Apr 12 12:25:17.814827 2026] [:error] [pid 25328:tid 25398] [client 20.100.203.99:29908] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adsercxUaQZxT-e0YsCH0gAAAFQ"]
[Sun Apr 12 12:25:18.482089 2026] [:error] [pid 25437:tid 25446] [client 20.100.203.99:65375] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adsernf97wYZje1ep_PLdQAAAMc"]
[Sun Apr 12 12:25:19.346702 2026] [:error] [pid 26599:tid 26606] [client 20.100.203.99:29928] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adser3G89LXoQbk_rwCYYAAAAUQ"]
[Sun Apr 12 12:25:20.137518 2026] [:error] [pid 60280:tid 60301] [client 20.100.203.99:29496] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "adsesHBlLnDOYuIykkirQQAAAdM"]
[Sun Apr 12 12:25:20.719769 2026] [:error] [pid 60280:tid 60299] [client 20.100.203.99:29940] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adsesHBlLnDOYuIykkirQgAAAdE"]
[Sun Apr 12 12:25:21.700876 2026] [:error] [pid 25327:tid 25360] [client 20.100.203.99:40566] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adsesS6h2tZEVJo9JFKV_QAAABg"]
[Sun Apr 12 12:25:22.605582 2026] [:error] [pid 60280:tid 60283] [client 20.100.203.99:29451] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adsesnBlLnDOYuIykkirRQAAAcE"]
[Sun Apr 12 12:25:23.337497 2026] [:error] [pid 60280:tid 60286] [client 20.100.203.99:29920] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "adses3BlLnDOYuIykkirSAAAAcQ"]
[Sun Apr 12 12:25:24.271655 2026] [:error] [pid 60280:tid 60301] [client 20.100.203.99:38776] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adsetHBlLnDOYuIykkirUgAAAdM"]
[Sun Apr 12 12:25:24.950982 2026] [:error] [pid 60280:tid 60306] [client 20.100.203.99:40552] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adsetHBlLnDOYuIykkirVgAAAdg"]
[Sun Apr 12 12:25:25.652197 2026] [:error] [pid 60280:tid 60300] [client 20.100.203.99:29926] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adsetXBlLnDOYuIykkirWwAAAdI"]
[Sun Apr 12 12:25:26.524630 2026] [:error] [pid 25328:tid 25372] [client 20.100.203.99:38721] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "adsetsxUaQZxT-e0YsCH2wAAAEc"]
[Sun Apr 12 12:25:27.709762 2026] [:error] [pid 25329:tid 25376] [client 20.100.203.99:40515] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adset2dcIYsS8Iyaj119SAAAAIE"]
[Sun Apr 12 12:25:28.464492 2026] [:error] [pid 25437:tid 25451] [client 20.100.203.99:65366] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adseuHf97wYZje1ep_PLewAAAMw"]
[Sun Apr 12 12:25:29.186789 2026] [:error] [pid 25328:tid 25383] [client 20.100.203.99:38781] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adseucxUaQZxT-e0YsCH4wAAAE0"]
[Sun Apr 12 12:25:29.748660 2026] [:error] [pid 26600:tid 26648] [client 20.100.203.99:40542] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new3.php"] [unique_id "adseue1YwAZiXhQKLYrbSQAAAZM"]
[Sun Apr 12 12:25:30.284039 2026] [:error] [pid 60280:tid 60304] [client 20.100.203.99:29914] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-turn.php"] [unique_id "adseunBlLnDOYuIykkirZwAAAdY"]
[Sun Apr 12 12:25:30.813579 2026] [:error] [pid 25328:tid 25372] [client 20.100.203.99:38730] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-turn.php"] [unique_id "adseusxUaQZxT-e0YsCH5QAAAEc"]
[Sun Apr 12 12:25:31.393465 2026] [:error] [pid 60280:tid 60294] [client 20.100.203.99:38783] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-turn.php"] [unique_id "adseu3BlLnDOYuIykkirawAAAcw"]
[Sun Apr 12 12:25:31.955605 2026] [:error] [pid 60280:tid 60306] [client 20.100.203.99:40546] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-turn.php"] [unique_id "adseu3BlLnDOYuIykkirbAAAAdg"]
[Sun Apr 12 12:25:32.496483 2026] [:error] [pid 60280:tid 60303] [client 20.100.203.99:65314] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adsevHBlLnDOYuIykkirbwAAAdU"]
[Sun Apr 12 12:25:33.040280 2026] [:error] [pid 60280:tid 60283] [client 20.100.203.99:29452] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adsevXBlLnDOYuIykkircQAAAcE"]
[Sun Apr 12 12:25:33.633818 2026] [:error] [pid 60280:tid 60299] [client 20.100.203.99:40540] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adsevXBlLnDOYuIykkirdAAAAdE"]
[Sun Apr 12 12:25:34.176893 2026] [:error] [pid 60280:tid 60293] [client 20.100.203.99:29473] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "adsevnBlLnDOYuIykkirdQAAAcs"]
[Sun Apr 12 12:25:34.812508 2026] [:error] [pid 26600:tid 26639] [client 20.100.203.99:38742] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adsevu1YwAZiXhQKLYrbTQAAAYo"]
[Sun Apr 12 12:25:35.591664 2026] [:error] [pid 26600:tid 26633] [client 20.100.203.99:38756] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adsev-1YwAZiXhQKLYrbTwAAAYQ"]
[Sun Apr 12 12:25:36.288073 2026] [:error] [pid 26567:tid 26573] [client 20.100.203.99:29910] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adsewHhRpg6ptWFyFx1gmwAAAQQ"]
[Sun Apr 12 12:25:36.824412 2026] [:error] [pid 25329:tid 25374] [client 20.100.203.99:65453] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/red.php"] [unique_id "adsewGdcIYsS8Iyaj119SQAAAIA"]
[Sun Apr 12 12:25:37.547694 2026] [:error] [pid 25328:tid 25403] [client 20.100.203.99:29456] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adsewcxUaQZxT-e0YsCH6QAAAFY"]
[Sun Apr 12 12:25:38.120985 2026] [:error] [pid 25328:tid 25367] [client 20.100.203.99:29444] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adsewsxUaQZxT-e0YsCH6gAAAEM"]
[Sun Apr 12 12:25:38.679517 2026] [:error] [pid 25328:tid 25396] [client 20.100.203.99:65287] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adsewsxUaQZxT-e0YsCH7QAAAFM"]
[Sun Apr 12 12:25:39.356152 2026] [:error] [pid 25327:tid 25353] [client 20.100.203.99:65457] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "adsewy6h2tZEVJo9JFKWAQAAABE"]
[Sun Apr 12 12:25:40.074776 2026] [:error] [pid 25328:tid 25368] [client 20.100.203.99:29459] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adsexMxUaQZxT-e0YsCH9gAAAEQ"]
[Sun Apr 12 12:25:40.620204 2026] [:error] [pid 60280:tid 60289] [client 20.100.203.99:29933] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adsexHBlLnDOYuIykkirgAAAAcc"]
[Sun Apr 12 12:25:41.144309 2026] [:error] [pid 26567:tid 26572] [client 20.100.203.99:29462] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adsexXhRpg6ptWFyFx1gogAAAQM"]
[Sun Apr 12 12:25:41.804584 2026] [:error] [pid 25327:tid 25344] [client 20.100.203.99:29891] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "adsexS6h2tZEVJo9JFKWAgAAAAg"]
[Sun Apr 12 12:25:42.356112 2026] [:error] [pid 25437:tid 25450] [client 20.100.203.99:40534] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adsexnf97wYZje1ep_PLhQAAAMs"]
[Sun Apr 12 12:25:42.956204 2026] [:error] [pid 26567:tid 26577] [client 20.100.203.99:29915] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adsexnhRpg6ptWFyFx1gpQAAAQg"]
[Sun Apr 12 12:25:43.493477 2026] [:error] [pid 25437:tid 25455] [client 20.100.203.99:29466] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adsex3f97wYZje1ep_PLhwAAANA"]
[Sun Apr 12 12:25:44.106717 2026] [:error] [pid 26600:tid 26653] [client 20.100.203.99:38765] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "adseyO1YwAZiXhQKLYrbVgAAAZg"]
[Sun Apr 12 12:25:44.622016 2026] [:error] [pid 26600:tid 26638] [client 20.100.203.99:29950] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adseyO1YwAZiXhQKLYrbWAAAAYk"]
[Sun Apr 12 12:25:45.204060 2026] [:error] [pid 26600:tid 26643] [client 20.100.203.99:29476] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adseye1YwAZiXhQKLYrbWgAAAY4"]
[Sun Apr 12 12:25:45.840839 2026] [:error] [pid 60280:tid 60285] [client 20.100.203.99:65414] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adseyXBlLnDOYuIykkirgQAAAcM"]
[Sun Apr 12 12:25:46.375961 2026] [:error] [pid 60280:tid 60303] [client 20.100.203.99:29485] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "adseynBlLnDOYuIykkirhgAAAdU"]
[Sun Apr 12 12:25:47.016376 2026] [:error] [pid 60280:tid 60283] [client 20.100.203.99:29911] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "adsey3BlLnDOYuIykkirhwAAAcE"]
[Sun Apr 12 12:25:47.934085 2026] [:error] [pid 26600:tid 26636] [client 20.100.203.99:65421] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "adsey-1YwAZiXhQKLYrbXwAAAYc"]
[Sun Apr 12 12:25:50.573896 2026] [:error] [pid 60280:tid 60290] [client 20.100.203.99:40543] [client 20.100.203.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adseznBlLnDOYuIykkirkgAAAcg"]
[Sun Apr 12 12:25:52.271812 2026] [:error] [pid 60280:tid 60304] [client 20.100.203.99:38761] [client 20.100.203.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "adse0HBlLnDOYuIykkirmQAAAdY"]
[Sun Apr 12 12:25:58.876741 2026] [:error] [pid 26599:tid 26618] [client 20.100.203.99:40522] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "adse1nG89LXoQbk_rwCYdQAAAVA"]
[Sun Apr 12 12:25:59.641685 2026] [:error] [pid 25437:tid 25442] [client 20.100.203.99:29889] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "adse13f97wYZje1ep_PLmAAAAMM"]
[Sun Apr 12 12:26:00.553016 2026] [:error] [pid 60280:tid 60289] [client 20.100.203.99:29907] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "adse2HBlLnDOYuIykkirowAAAcc"]
[Sun Apr 12 12:26:01.171771 2026] [:error] [pid 26600:tid 26649] [client 20.100.203.99:29922] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "adse2e1YwAZiXhQKLYrbZwAAAZQ"]
[Sun Apr 12 12:26:02.024454 2026] [:error] [pid 25328:tid 25405] [client 20.100.203.99:40536] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adse2sxUaQZxT-e0YsCIEQAAAFc"]
[Sun Apr 12 12:26:02.729869 2026] [:error] [pid 25328:tid 25373] [client 20.100.203.99:40554] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adse2sxUaQZxT-e0YsCIFAAAAEg"]
[Sun Apr 12 12:26:03.611684 2026] [:error] [pid 25437:tid 25462] [client 20.100.203.99:29893] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adse23f97wYZje1ep_PLnAAAANc"]
[Sun Apr 12 12:26:04.221433 2026] [:error] [pid 26600:tid 26631] [client 20.100.203.99:40563] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/riz.php"] [unique_id "adse3O1YwAZiXhQKLYrbagAAAYI"]
[Sun Apr 12 12:26:05.075856 2026] [:error] [pid 26567:tid 26580] [client 20.100.203.99:65467] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adse3XhRpg6ptWFyFx1grwAAAQs"]
[Sun Apr 12 12:26:05.809288 2026] [:error] [pid 26567:tid 26572] [client 20.100.203.99:29930] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adse3XhRpg6ptWFyFx1gsAAAAQM"]
[Sun Apr 12 12:26:06.436397 2026] [:error] [pid 60280:tid 60300] [client 20.100.203.99:65462] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adse3nBlLnDOYuIykkirsAAAAdI"]
[Sun Apr 12 12:26:07.022261 2026] [:error] [pid 60280:tid 60285] [client 20.100.203.99:65379] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "adse33BlLnDOYuIykkirtAAAAcM"]
[Sun Apr 12 12:26:07.729563 2026] [:error] [pid 60280:tid 60296] [client 20.100.203.99:29925] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "adse33BlLnDOYuIykkirtgAAAc4"]
[Sun Apr 12 12:26:08.631711 2026] [:error] [pid 25328:tid 25401] [client 20.100.203.99:65413] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "adse4MxUaQZxT-e0YsCIGAAAAFU"]
[Sun Apr 12 12:26:09.325270 2026] [:error] [pid 25329:tid 25395] [client 20.100.203.99:65378] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "adse4WdcIYsS8Iyaj119UAAAAIs"]
[Sun Apr 12 12:26:10.015602 2026] [:error] [pid 26600:tid 26633] [client 20.100.203.99:29442] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/om.php"] [unique_id "adse4u1YwAZiXhQKLYrbbAAAAYQ"]
[Sun Apr 12 12:26:10.634377 2026] [:error] [pid 25437:tid 25460] [client 20.100.203.99:40517] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/006.php"] [unique_id "adse4nf97wYZje1ep_PLqQAAANU"]
[Sun Apr 12 12:26:11.201654 2026] [:error] [pid 26600:tid 26646] [client 20.100.203.99:29458] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/006.php"] [unique_id "adse4-1YwAZiXhQKLYrbbQAAAZE"]
[Sun Apr 12 12:26:11.959608 2026] [:error] [pid 26567:tid 26570] [client 20.100.203.99:29503] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/006.php"] [unique_id "adse43hRpg6ptWFyFx1gtQAAAQE"]
[Sun Apr 12 12:26:12.684908 2026] [:error] [pid 60280:tid 60300] [client 20.100.203.99:29480] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/006.php"] [unique_id "adse5HBlLnDOYuIykkirvQAAAdI"]
[Sun Apr 12 12:26:13.340397 2026] [:error] [pid 60280:tid 60285] [client 20.100.203.99:38744] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adse5XBlLnDOYuIykkirwAAAAcM"]
[Sun Apr 12 12:26:14.035835 2026] [:error] [pid 60280:tid 60286] [client 20.100.203.99:29903] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adse5nBlLnDOYuIykkirxAAAAcQ"]
[Sun Apr 12 12:26:14.558180 2026] [:error] [pid 26567:tid 26593] [client 20.100.203.99:40573] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adse5nhRpg6ptWFyFx1gtgAAARg"]
[Sun Apr 12 12:26:15.110982 2026] [:error] [pid 60280:tid 60289] [client 20.100.203.99:40525] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "adse53BlLnDOYuIykkirygAAAcc"]
[Sun Apr 12 12:26:15.795795 2026] [:error] [pid 25328:tid 25408] [client 20.100.203.99:38733] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adse58xUaQZxT-e0YsCIHwAAAFg"]
[Sun Apr 12 12:26:16.364057 2026] [:error] [pid 60280:tid 60296] [client 20.100.203.99:65354] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adse6HBlLnDOYuIykkir0AAAAc4"]
[Sun Apr 12 12:26:17.025819 2026] [:error] [pid 25437:tid 25453] [client 20.100.203.99:65395] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adse6Xf97wYZje1ep_PLrQAAAM4"]
[Sun Apr 12 12:26:17.697062 2026] [:error] [pid 25327:tid 25347] [client 20.100.203.99:40555] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "adse6S6h2tZEVJo9JFKWEwAAAAs"]
[Sun Apr 12 12:26:18.282033 2026] [:error] [pid 25327:tid 25353] [client 20.100.203.99:29497] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adse6i6h2tZEVJo9JFKWFAAAABE"]
[Sun Apr 12 12:26:19.131030 2026] [:error] [pid 25328:tid 25401] [client 20.100.203.99:65455] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adse68xUaQZxT-e0YsCIJAAAAFU"]
[Sun Apr 12 12:26:19.708586 2026] [:error] [pid 25328:tid 25389] [client 20.100.203.99:40575] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adse68xUaQZxT-e0YsCIJQAAAFA"]
[Sun Apr 12 12:26:20.325336 2026] [:error] [pid 25327:tid 25344] [client 20.100.203.99:38751] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adse7C6h2tZEVJo9JFKWFQAAAAg"]
[Sun Apr 12 12:26:21.028078 2026] [:error] [pid 26567:tid 26584] [client 20.100.203.99:29919] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "adse7XhRpg6ptWFyFx1guwAAAQ8"]
[Sun Apr 12 12:26:21.824053 2026] [:error] [pid 26599:tid 26615] [client 20.100.203.99:40559] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "adse7XG89LXoQbk_rwCYeAAAAU0"]
[Sun Apr 12 12:26:22.613104 2026] [:error] [pid 25328:tid 25385] [client 20.100.203.99:38760] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "adse7sxUaQZxT-e0YsCIJgAAAE4"]
[Sun Apr 12 12:26:23.237555 2026] [:error] [pid 25329:tid 25381] [client 20.100.203.99:40557] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1aa.php"] [unique_id "adse72dcIYsS8Iyaj119VQAAAIM"]
[Sun Apr 12 12:26:23.923850 2026] [:error] [pid 60280:tid 60285] [client 20.100.203.99:38763] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adse73BlLnDOYuIykkir2wAAAcM"]
[Sun Apr 12 12:26:24.609196 2026] [:error] [pid 60280:tid 60302] [client 20.100.203.99:29478] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adse8HBlLnDOYuIykkir3wAAAdQ"]
[Sun Apr 12 12:26:25.263145 2026] [:error] [pid 25328:tid 25380] [client 20.100.203.99:29463] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adse8cxUaQZxT-e0YsCILwAAAEw"]
[Sun Apr 12 12:26:25.879448 2026] [:error] [pid 25437:tid 25445] [client 20.100.203.99:40527] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "adse8Xf97wYZje1ep_PLsgAAAMY"]
[Sun Apr 12 12:26:26.507432 2026] [:error] [pid 25328:tid 25364] [client 20.100.203.99:38778] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adse8sxUaQZxT-e0YsCINQAAAEA"]
[Sun Apr 12 12:26:27.200462 2026] [:error] [pid 25327:tid 25356] [client 20.100.203.99:29493] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adse8y6h2tZEVJo9JFKWGAAAABQ"]
[Sun Apr 12 12:26:27.998678 2026] [:error] [pid 25328:tid 25379] [client 20.100.203.99:38740] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adse88xUaQZxT-e0YsCIOQAAAEs"]
[Sun Apr 12 12:26:28.650954 2026] [:error] [pid 25328:tid 25380] [client 20.100.203.99:40528] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adse9MxUaQZxT-e0YsCIOwAAAEw"]
[Sun Apr 12 14:10:17.027525 2026] [:error] [pid 60280:tid 60285] [client 20.100.203.99:59925] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ads3SXBlLnDOYuIykkjdgAAAAcM"]
[Sun Apr 12 14:10:21.380043 2026] [:error] [pid 60280:tid 60298] [client 20.100.203.99:54921] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ads3TXBlLnDOYuIykkjdjwAAAdA"]
[Sun Apr 12 14:16:47.056215 2026] [autoindex:error] [pid 26599:tid 26623] [client 143.110.240.70:59841] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 12 16:23:41.168585 2026] [:error] [pid 25328:tid 25389] [client 180.110.203.108:51881] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adtWjcxUaQZxT-e0YsDawwAAAFA"]
[Sun Apr 12 17:22:09.869568 2026] [autoindex:error] [pid 26600:tid 26648] [client 143.110.240.70:63004] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 12 17:57:26.230001 2026] [:error] [pid 60280:tid 60297] [client 150.109.230.210:58744] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adtshnBlLnDOYuIykkhRvgAAAc8"]
[Sun Apr 12 18:43:51.765202 2026] [:error] [pid 25328:tid 25394] [client 20.223.244.88:26958] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adt3Z8xUaQZxT-e0YsAYPwAAAFI"]
[Sun Apr 12 18:43:57.730379 2026] [:error] [pid 25437:tid 25439] [client 20.223.244.88:19935] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "adt3bXf97wYZje1ep_M54QAAAMA"]
[Sun Apr 12 18:43:58.259894 2026] [:error] [pid 25437:tid 25450] [client 20.223.244.88:18411] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "adt3bnf97wYZje1ep_M55AAAAMs"]
[Sun Apr 12 18:43:58.763225 2026] [:error] [pid 25437:tid 25451] [client 20.223.244.88:14019] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "adt3bnf97wYZje1ep_M55gAAAMw"]
[Sun Apr 12 18:43:59.264776 2026] [:error] [pid 60280:tid 60303] [client 20.223.244.88:9824] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "adt3b3BlLnDOYuIykkhxLwAAAdU"]
[Sun Apr 12 18:43:59.825591 2026] [:error] [pid 25329:tid 25392] [client 20.223.244.88:27644] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "adt3b2dcIYsS8Iyaj12p6gAAAIk"]
[Sun Apr 12 18:44:00.342597 2026] [:error] [pid 60280:tid 60293] [client 20.223.244.88:27634] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "adt3cHBlLnDOYuIykkhxMQAAAcs"]
[Sun Apr 12 18:44:00.848828 2026] [:error] [pid 25437:tid 25456] [client 20.223.244.88:9831] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "adt3cHf97wYZje1ep_M58QAAANE"]
[Sun Apr 12 18:44:01.346878 2026] [:error] [pid 25327:tid 25339] [client 20.223.244.88:15347] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "adt3cS6h2tZEVJo9JFLQWQAAAAM"]
[Sun Apr 12 18:44:01.856188 2026] [:error] [pid 60280:tid 60304] [client 20.223.244.88:18860] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "adt3cXBlLnDOYuIykkhxNAAAAdY"]
[Sun Apr 12 18:44:02.362863 2026] [:error] [pid 25329:tid 25384] [client 20.223.244.88:15787] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "adt3cmdcIYsS8Iyaj12p8QAAAIU"]
[Sun Apr 12 18:44:02.866108 2026] [:error] [pid 25329:tid 25376] [client 20.223.244.88:25408] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "adt3cmdcIYsS8Iyaj12p8wAAAIE"]
[Sun Apr 12 18:44:03.362839 2026] [:error] [pid 26600:tid 26635] [client 20.223.244.88:27587] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "adt3c-1YwAZiXhQKLYoxTQAAAYY"]
[Sun Apr 12 18:44:03.890099 2026] [:error] [pid 26600:tid 26650] [client 20.223.244.88:22529] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adt3c-1YwAZiXhQKLYoxUAAAAZU"]
[Sun Apr 12 18:44:04.394409 2026] [:error] [pid 25329:tid 25388] [client 20.223.244.88:19637] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adt3dGdcIYsS8Iyaj12p9wAAAIc"]
[Sun Apr 12 18:44:04.913924 2026] [:error] [pid 25329:tid 25409] [client 20.223.244.88:18871] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adt3dGdcIYsS8Iyaj12p_AAAAJM"]
[Sun Apr 12 18:44:05.420638 2026] [:error] [pid 25327:tid 25351] [client 20.223.244.88:27052] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "adt3dS6h2tZEVJo9JFLQWwAAAA8"]
[Sun Apr 12 18:44:05.932569 2026] [:error] [pid 26599:tid 26620] [client 20.223.244.88:15302] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adt3dXG89LXoQbk_rwDINAAAAVI"]
[Sun Apr 12 18:44:06.445722 2026] [:error] [pid 25328:tid 25372] [client 20.223.244.88:25424] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adt3dsxUaQZxT-e0YsAYVgAAAEc"]
[Sun Apr 12 18:44:06.945136 2026] [:error] [pid 25437:tid 25450] [client 20.223.244.88:28538] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adt3dnf97wYZje1ep_M6AQAAAMs"]
[Sun Apr 12 18:44:07.446816 2026] [:error] [pid 25437:tid 25460] [client 20.223.244.88:15515] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "adt3d3f97wYZje1ep_M6BAAAANU"]
[Sun Apr 12 18:44:07.942478 2026] [:error] [pid 25328:tid 25391] [client 20.223.244.88:9825] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "adt3d8xUaQZxT-e0YsAYXAAAAFE"]
[Sun Apr 12 18:44:08.446536 2026] [:error] [pid 60280:tid 60285] [client 20.223.244.88:18060] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "adt3eHBlLnDOYuIykkhxSAAAAcM"]
[Sun Apr 12 18:44:08.943858 2026] [:error] [pid 25329:tid 25409] [client 20.223.244.88:25447] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "adt3eGdcIYsS8Iyaj12qBAAAAJM"]
[Sun Apr 12 18:44:09.452338 2026] [:error] [pid 25329:tid 25399] [client 20.223.244.88:25445] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "adt3eWdcIYsS8Iyaj12qBwAAAI0"]
[Sun Apr 12 18:44:09.950200 2026] [:error] [pid 26567:tid 26589] [client 20.223.244.88:15838] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "adt3eXhRpg6ptWFyFx2lbwAAARQ"]
[Sun Apr 12 18:44:10.458100 2026] [:error] [pid 26600:tid 26637] [client 20.223.244.88:19623] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "adt3eu1YwAZiXhQKLYoxVgAAAYg"]
[Sun Apr 12 18:44:10.954283 2026] [:error] [pid 25328:tid 25375] [client 20.223.244.88:26868] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "adt3esxUaQZxT-e0YsAYZwAAAEk"]
[Sun Apr 12 18:44:11.450467 2026] [:error] [pid 25437:tid 25452] [client 20.223.244.88:14731] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "adt3e3f97wYZje1ep_M6DAAAAM0"]
[Sun Apr 12 18:44:11.949877 2026] [:error] [pid 25329:tid 25392] [client 20.223.244.88:14546] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "adt3e2dcIYsS8Iyaj12qDgAAAIk"]
[Sun Apr 12 18:44:12.449239 2026] [:error] [pid 25329:tid 25409] [client 20.223.244.88:26859] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "adt3fGdcIYsS8Iyaj12qDwAAAJM"]
[Sun Apr 12 18:44:12.944100 2026] [:error] [pid 60280:tid 60288] [client 20.223.244.88:25460] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "adt3fHBlLnDOYuIykkhxSgAAAcY"]
[Sun Apr 12 18:44:13.441859 2026] [:error] [pid 25437:tid 25462] [client 20.223.244.88:14725] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "adt3fXf97wYZje1ep_M6EQAAANc"]
[Sun Apr 12 18:44:13.931687 2026] [:error] [pid 26599:tid 26603] [client 20.223.244.88:14561] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "adt3fXG89LXoQbk_rwDIOAAAAUE"]
[Sun Apr 12 18:44:14.424303 2026] [:error] [pid 25327:tid 25342] [client 20.223.244.88:18397] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "adt3fi6h2tZEVJo9JFLQZQAAAAY"]
[Sun Apr 12 18:44:14.922727 2026] [:error] [pid 25327:tid 25351] [client 20.223.244.88:28496] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "adt3fi6h2tZEVJo9JFLQZwAAAA8"]
[Sun Apr 12 18:44:15.421466 2026] [:error] [pid 25327:tid 25345] [client 20.223.244.88:26508] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "adt3fy6h2tZEVJo9JFLQawAAAAk"]
[Sun Apr 12 18:44:15.915352 2026] [:error] [pid 25328:tid 25377] [client 20.223.244.88:26556] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adt3f8xUaQZxT-e0YsAYbQAAAEo"]
[Sun Apr 12 18:44:16.409877 2026] [:error] [pid 25328:tid 25369] [client 20.223.244.88:19635] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adt3gMxUaQZxT-e0YsAYcQAAAEU"]
[Sun Apr 12 18:44:16.908413 2026] [:error] [pid 25327:tid 25346] [client 20.223.244.88:15491] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adt3gC6h2tZEVJo9JFLQcgAAAAo"]
[Sun Apr 12 18:44:17.473217 2026] [:error] [pid 25327:tid 25343] [client 20.223.244.88:14560] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "adt3gS6h2tZEVJo9JFLQcwAAAAc"]
[Sun Apr 12 18:44:17.966125 2026] [:error] [pid 60280:tid 60292] [client 20.223.244.88:28537] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "adt3gXBlLnDOYuIykkhxVQAAAco"]
[Sun Apr 12 18:44:18.476964 2026] [:error] [pid 25328:tid 25367] [client 20.223.244.88:26501] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "adt3gsxUaQZxT-e0YsAYeAAAAEM"]
[Sun Apr 12 18:44:18.979284 2026] [:error] [pid 26600:tid 26643] [client 20.223.244.88:26515] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "adt3gu1YwAZiXhQKLYoxWwAAAY4"]
[Sun Apr 12 18:44:19.475147 2026] [:error] [pid 26567:tid 26584] [client 20.223.244.88:18166] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "adt3g3hRpg6ptWFyFx2lcwAAAQ8"]
[Sun Apr 12 18:44:19.975003 2026] [:error] [pid 25329:tid 25397] [client 20.223.244.88:25429] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "adt3g2dcIYsS8Iyaj12qGAAAAIw"]
[Sun Apr 12 18:44:20.547510 2026] [:error] [pid 25329:tid 25409] [client 20.223.244.88:18136] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "adt3hGdcIYsS8Iyaj12qGwAAAJM"]
[Sun Apr 12 18:44:21.051693 2026] [:error] [pid 25329:tid 25412] [client 20.223.244.88:15531] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "adt3hWdcIYsS8Iyaj12qHgAAAJU"]
[Sun Apr 12 18:44:21.557182 2026] [:error] [pid 25329:tid 25374] [client 20.223.244.88:19594] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "adt3hWdcIYsS8Iyaj12qIgAAAIA"]
[Sun Apr 12 18:44:22.077051 2026] [:error] [pid 25328:tid 25385] [client 20.223.244.88:25415] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "adt3hsxUaQZxT-e0YsAYfgAAAE4"]
[Sun Apr 12 18:44:22.654665 2026] [:error] [pid 26567:tid 26585] [client 20.223.244.88:27877] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "adt3hnhRpg6ptWFyFx2ldAAAARA"]
[Sun Apr 12 18:44:23.192360 2026] [:error] [pid 25437:tid 25459] [client 20.223.244.88:25422] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "adt3h3f97wYZje1ep_M6HgAAANQ"]
[Sun Apr 12 18:44:23.725251 2026] [:error] [pid 60280:tid 60297] [client 20.223.244.88:26557] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "adt3h3BlLnDOYuIykkhxWwAAAc8"]
[Sun Apr 12 18:44:24.241519 2026] [:error] [pid 25327:tid 25338] [client 20.223.244.88:19604] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "adt3iC6h2tZEVJo9JFLQeAAAAAI"]
[Sun Apr 12 18:44:24.771028 2026] [:error] [pid 60280:tid 60283] [client 20.223.244.88:26553] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "adt3iHBlLnDOYuIykkhxXgAAAcE"]
[Sun Apr 12 18:44:25.326881 2026] [:error] [pid 25437:tid 25454] [client 20.223.244.88:23907] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "adt3iXf97wYZje1ep_M6IwAAAM8"]
[Sun Apr 12 18:44:25.881477 2026] [:error] [pid 26599:tid 26619] [client 20.223.244.88:9833] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "adt3iXG89LXoQbk_rwDITAAAAVE"]
[Sun Apr 12 18:44:26.429046 2026] [:error] [pid 25329:tid 25392] [client 20.223.244.88:15488] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "adt3imdcIYsS8Iyaj12qMQAAAIk"]
[Sun Apr 12 18:44:26.973180 2026] [:error] [pid 25329:tid 25406] [client 20.223.244.88:15350] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "adt3imdcIYsS8Iyaj12qNAAAAJE"]
[Sun Apr 12 18:44:27.531703 2026] [:error] [pid 25327:tid 25351] [client 20.223.244.88:25446] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "adt3iy6h2tZEVJo9JFLQfgAAAA8"]
[Sun Apr 12 18:44:28.074624 2026] [:error] [pid 26567:tid 26571] [client 20.223.244.88:28480] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "adt3jHhRpg6ptWFyFx2lewAAAQI"]
[Sun Apr 12 18:44:28.629510 2026] [:error] [pid 25329:tid 25409] [client 20.223.244.88:18848] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "adt3jGdcIYsS8Iyaj12qOAAAAJM"]
[Sun Apr 12 18:44:29.136220 2026] [:error] [pid 25329:tid 25400] [client 20.223.244.88:18134] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "adt3jWdcIYsS8Iyaj12qOwAAAI4"]
[Sun Apr 12 18:44:29.655910 2026] [:error] [pid 25329:tid 25415] [client 20.223.244.88:13430] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "adt3jWdcIYsS8Iyaj12qPQAAAJg"]
[Sun Apr 12 18:44:30.160583 2026] [:error] [pid 26599:tid 26604] [client 20.223.244.88:10028] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "adt3jnG89LXoQbk_rwDIWAAAAUI"]
[Sun Apr 12 18:44:30.662560 2026] [:error] [pid 25328:tid 25365] [client 20.223.244.88:15534] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "adt3jsxUaQZxT-e0YsAYjwAAAEE"]
[Sun Apr 12 18:44:31.271444 2026] [:error] [pid 25437:tid 25460] [client 20.223.244.88:10007] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "adt3j3f97wYZje1ep_M6KQAAANU"]
[Sun Apr 12 18:44:31.789004 2026] [:error] [pid 60280:tid 60291] [client 20.223.244.88:15765] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "adt3j3BlLnDOYuIykkhxaAAAAck"]
[Sun Apr 12 18:44:32.323116 2026] [:error] [pid 60280:tid 60296] [client 20.223.244.88:9803] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "adt3kHBlLnDOYuIykkhxagAAAc4"]
[Sun Apr 12 18:44:32.836830 2026] [:error] [pid 25329:tid 25415] [client 20.223.244.88:28520] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adt3kGdcIYsS8Iyaj12qSwAAAJg"]
[Sun Apr 12 18:44:33.357711 2026] [:error] [pid 25327:tid 25344] [client 20.223.244.88:15800] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adt3kS6h2tZEVJo9JFLQgwAAAAg"]
[Sun Apr 12 18:44:33.865294 2026] [:error] [pid 25327:tid 25340] [client 20.223.244.88:9839] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adt3kS6h2tZEVJo9JFLQhgAAAAQ"]
[Sun Apr 12 18:44:34.383010 2026] [:error] [pid 25327:tid 25336] [client 20.223.244.88:26844] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "adt3ki6h2tZEVJo9JFLQiAAAAAA"]
[Sun Apr 12 18:44:34.893267 2026] [:error] [pid 26600:tid 26652] [client 20.223.244.88:9807] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adt3ku1YwAZiXhQKLYoxbQAAAZc"]
[Sun Apr 12 18:44:35.415543 2026] [:error] [pid 25327:tid 25357] [client 20.223.244.88:15355] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adt3ky6h2tZEVJo9JFLQjAAAABU"]
[Sun Apr 12 18:44:35.930075 2026] [:error] [pid 25327:tid 25351] [client 20.223.244.88:18138] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adt3ky6h2tZEVJo9JFLQjgAAAA8"]
[Sun Apr 12 18:44:36.443736 2026] [:error] [pid 25437:tid 25443] [client 20.223.244.88:10041] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adt3lHf97wYZje1ep_M6NgAAAMQ"]
[Sun Apr 12 18:44:36.950249 2026] [:error] [pid 25327:tid 25345] [client 20.223.244.88:9808] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adt3lC6h2tZEVJo9JFLQjwAAAAk"]
[Sun Apr 12 18:44:37.459184 2026] [:error] [pid 25327:tid 25341] [client 20.223.244.88:9502] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adt3lS6h2tZEVJo9JFLQkgAAAAU"]
[Sun Apr 12 18:44:37.984393 2026] [:error] [pid 26599:tid 26625] [client 20.223.244.88:9845] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adt3lXG89LXoQbk_rwDIZwAAAVc"]
[Sun Apr 12 18:44:38.485806 2026] [:error] [pid 25327:tid 25359] [client 20.223.244.88:15332] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "adt3li6h2tZEVJo9JFLQmwAAABc"]
[Sun Apr 12 18:44:38.993544 2026] [:error] [pid 25327:tid 25345] [client 20.223.244.88:9998] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adt3li6h2tZEVJo9JFLQnwAAAAk"]
[Sun Apr 12 18:44:39.501998 2026] [:error] [pid 26599:tid 26612] [client 20.223.244.88:27874] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adt3l3G89LXoQbk_rwDIaAAAAUo"]
[Sun Apr 12 18:44:40.005870 2026] [:error] [pid 60280:tid 60301] [client 20.223.244.88:9844] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adt3mHBlLnDOYuIykkhxeAAAAdM"]
[Sun Apr 12 18:44:40.521739 2026] [:error] [pid 25437:tid 25454] [client 20.223.244.88:10022] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "adt3mHf97wYZje1ep_M6QgAAAM8"]
[Sun Apr 12 18:44:41.041335 2026] [:error] [pid 25328:tid 25364] [client 20.223.244.88:18405] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adt3mcxUaQZxT-e0YsAYlQAAAEA"]
[Sun Apr 12 18:44:41.543374 2026] [:error] [pid 60280:tid 60295] [client 20.223.244.88:14043] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adt3mXBlLnDOYuIykkhxfwAAAc0"]
[Sun Apr 12 18:44:42.047185 2026] [:error] [pid 25328:tid 25377] [client 20.223.244.88:15324] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adt3msxUaQZxT-e0YsAYmAAAAEo"]
[Sun Apr 12 18:44:42.635358 2026] [:error] [pid 26600:tid 26637] [client 20.223.244.88:18132] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "adt3mu1YwAZiXhQKLYoxgAAAAYg"]
[Sun Apr 12 18:44:43.226938 2026] [:error] [pid 26599:tid 26608] [client 20.223.244.88:15356] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adt3m3G89LXoQbk_rwDIbwAAAUY"]
[Sun Apr 12 18:44:43.743034 2026] [:error] [pid 25328:tid 25380] [client 20.223.244.88:14045] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adt3m8xUaQZxT-e0YsAYmgAAAEw"]
[Sun Apr 12 18:44:44.264228 2026] [:error] [pid 25327:tid 25338] [client 20.223.244.88:14496] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adt3nC6h2tZEVJo9JFLQpwAAAAI"]
[Sun Apr 12 18:44:44.815880 2026] [:error] [pid 25437:tid 25446] [client 20.223.244.88:28488] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "adt3nHf97wYZje1ep_M6RgAAAMc"]
[Sun Apr 12 18:44:45.321248 2026] [:error] [pid 26600:tid 26636] [client 20.223.244.88:18414] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adt3ne1YwAZiXhQKLYoxhgAAAYc"]
[Sun Apr 12 18:44:45.830390 2026] [:error] [pid 60280:tid 60302] [client 20.223.244.88:18833] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adt3nXBlLnDOYuIykkhxjQAAAdQ"]
[Sun Apr 12 18:44:46.329413 2026] [:error] [pid 60280:tid 60290] [client 20.223.244.88:27855] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adt3nnBlLnDOYuIykkhxkAAAAcg"]
[Sun Apr 12 18:44:46.864554 2026] [:error] [pid 60280:tid 60301] [client 20.223.244.88:10018] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "adt3nnBlLnDOYuIykkhxlwAAAdM"]
[Sun Apr 12 18:44:47.381017 2026] [:error] [pid 26600:tid 26638] [client 20.223.244.88:22565] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adt3n-1YwAZiXhQKLYoxiAAAAYk"]
[Sun Apr 12 18:44:47.956809 2026] [:error] [pid 60280:tid 60306] [client 20.223.244.88:18165] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adt3n3BlLnDOYuIykkhxmgAAAdg"]
[Sun Apr 12 18:44:48.494906 2026] [:error] [pid 25437:tid 25443] [client 20.223.244.88:18148] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adt3oHf97wYZje1ep_M6UwAAAMQ"]
[Sun Apr 12 18:44:48.988577 2026] [:error] [pid 25329:tid 25386] [client 20.223.244.88:18867] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "adt3oGdcIYsS8Iyaj12qVwAAAIY"]
[Sun Apr 12 18:44:49.526723 2026] [:error] [pid 25328:tid 25370] [client 20.223.244.88:15751] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "adt3ocxUaQZxT-e0YsAYogAAAEY"]
[Sun Apr 12 18:44:50.056684 2026] [:error] [pid 26567:tid 26593] [client 20.223.244.88:27276] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "adt3onhRpg6ptWFyFx2ljwAAARg"]
[Sun Apr 12 18:44:50.553479 2026] [:error] [pid 26600:tid 26631] [client 20.223.244.88:22538] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "adt3ou1YwAZiXhQKLYoxkAAAAYI"]
[Sun Apr 12 18:44:51.082853 2026] [:error] [pid 25437:tid 25440] [client 20.223.244.88:26845] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "adt3o3f97wYZje1ep_M6YAAAAME"]
[Sun Apr 12 18:44:51.576321 2026] [:error] [pid 60280:tid 60301] [client 20.223.244.88:10020] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "adt3o3BlLnDOYuIykkhxowAAAdM"]
[Sun Apr 12 18:44:52.105515 2026] [:error] [pid 25328:tid 25377] [client 20.223.244.88:18146] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "adt3pMxUaQZxT-e0YsAYowAAAEo"]
[Sun Apr 12 18:44:52.626945 2026] [:error] [pid 25329:tid 25400] [client 20.223.244.88:27036] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "adt3pGdcIYsS8Iyaj12qXAAAAI4"]
[Sun Apr 12 18:44:53.177181 2026] [:error] [pid 25329:tid 25392] [client 20.223.244.88:26867] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "adt3pWdcIYsS8Iyaj12qXQAAAIk"]
[Sun Apr 12 18:44:53.699391 2026] [:error] [pid 25328:tid 25385] [client 20.223.244.88:9805] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adt3pcxUaQZxT-e0YsAYqwAAAE4"]
[Sun Apr 12 18:44:54.225186 2026] [:error] [pid 60280:tid 60296] [client 20.223.244.88:27067] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adt3pnBlLnDOYuIykkhxrgAAAc4"]
[Sun Apr 12 18:44:54.730008 2026] [:error] [pid 60280:tid 60291] [client 20.223.244.88:34969] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adt3pnBlLnDOYuIykkhxsgAAAck"]
[Sun Apr 12 18:44:55.232664 2026] [:error] [pid 25327:tid 25356] [client 20.223.244.88:34985] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "adt3py6h2tZEVJo9JFLQrgAAABQ"]
[Sun Apr 12 18:44:55.771740 2026] [:error] [pid 60280:tid 60297] [client 20.223.244.88:18168] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "adt3p3BlLnDOYuIykkhxtgAAAc8"]
[Sun Apr 12 18:44:56.276573 2026] [:error] [pid 26600:tid 26633] [client 20.223.244.88:18124] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "adt3qO1YwAZiXhQKLYoxnQAAAYQ"]
[Sun Apr 12 18:44:56.780972 2026] [:error] [pid 60280:tid 60292] [client 20.223.244.88:14772] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "adt3qHBlLnDOYuIykkhxvQAAAco"]
[Sun Apr 12 18:45:03.705870 2026] [:error] [pid 25328:tid 25367] [client 20.223.244.88:34967] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "adt3r8xUaQZxT-e0YsAY3AAAAEM"]
[Sun Apr 12 18:45:04.231190 2026] [:error] [pid 25328:tid 25387] [client 20.223.244.88:15298] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "adt3sMxUaQZxT-e0YsAY4AAAAE8"]
[Sun Apr 12 18:45:04.733912 2026] [:error] [pid 25328:tid 25403] [client 20.223.244.88:15312] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "adt3sMxUaQZxT-e0YsAY5QAAAFY"]
[Sun Apr 12 18:45:05.244443 2026] [:error] [pid 25328:tid 25389] [client 20.223.244.88:14750] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "adt3scxUaQZxT-e0YsAY6QAAAFA"]
[Sun Apr 12 18:45:05.789120 2026] [:error] [pid 25328:tid 25373] [client 20.223.244.88:15512] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "adt3scxUaQZxT-e0YsAY6gAAAEg"]
[Sun Apr 12 18:45:06.370535 2026] [:error] [pid 25328:tid 25387] [client 20.223.244.88:19424] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "adt3ssxUaQZxT-e0YsAY7QAAAE8"]
[Sun Apr 12 18:45:06.888050 2026] [:error] [pid 26600:tid 26637] [client 20.223.244.88:26838] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "adt3su1YwAZiXhQKLYoxpgAAAYg"]
[Sun Apr 12 18:45:07.431714 2026] [:error] [pid 60280:tid 60305] [client 20.223.244.88:27051] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "adt3s3BlLnDOYuIykkhx4QAAAdc"]
[Sun Apr 12 18:45:07.947215 2026] [:error] [pid 25328:tid 25391] [client 20.223.244.88:27054] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adt3s8xUaQZxT-e0YsAY8QAAAFE"]
[Sun Apr 12 18:45:08.448521 2026] [:error] [pid 26600:tid 26646] [client 20.223.244.88:18155] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adt3tO1YwAZiXhQKLYoxqgAAAZE"]
[Sun Apr 12 18:45:08.950680 2026] [:error] [pid 25437:tid 25447] [client 20.223.244.88:28533] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adt3tHf97wYZje1ep_M6gQAAAMg"]
[Sun Apr 12 18:45:09.457591 2026] [:error] [pid 26567:tid 26591] [client 20.223.244.88:14781] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "adt3tXhRpg6ptWFyFx2lpwAAARY"]
[Sun Apr 12 18:45:09.963595 2026] [:error] [pid 60280:tid 60306] [client 20.223.244.88:28518] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adt3tXBlLnDOYuIykkhx6AAAAdg"]
[Sun Apr 12 18:45:10.472748 2026] [:error] [pid 60280:tid 60305] [client 20.223.244.88:28501] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adt3tnBlLnDOYuIykkhx7QAAAdc"]
[Sun Apr 12 18:45:10.991578 2026] [:error] [pid 60280:tid 60286] [client 20.223.244.88:28534] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adt3tnBlLnDOYuIykkhx8AAAAcQ"]
[Sun Apr 12 18:45:11.514209 2026] [:error] [pid 26600:tid 26630] [client 20.223.244.88:18157] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "adt3t-1YwAZiXhQKLYoxuwAAAYE"]
[Sun Apr 12 18:45:12.020477 2026] [:error] [pid 60280:tid 60291] [client 20.223.244.88:18164] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adt3uHBlLnDOYuIykkhx-AAAAck"]
[Sun Apr 12 18:45:12.576778 2026] [:error] [pid 25437:tid 25444] [client 20.223.244.88:28531] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adt3uHf97wYZje1ep_M6rwAAAMU"]
[Sun Apr 12 18:45:13.118929 2026] [:error] [pid 60280:tid 60286] [client 20.223.244.88:15539] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adt3uXBlLnDOYuIykkhx_AAAAcQ"]
[Sun Apr 12 18:45:13.613077 2026] [:error] [pid 60280:tid 60284] [client 20.223.244.88:18173] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "adt3uXBlLnDOYuIykkhx_gAAAcI"]
[Sun Apr 12 18:45:14.120224 2026] [:error] [pid 60280:tid 60296] [client 20.223.244.88:18847] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adt3unBlLnDOYuIykkhx_wAAAc4"]
[Sun Apr 12 18:45:14.622684 2026] [:error] [pid 25329:tid 25406] [client 20.223.244.88:34966] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adt3umdcIYsS8Iyaj12qYgAAAJE"]
[Sun Apr 12 18:45:15.176035 2026] [:error] [pid 25329:tid 25388] [client 20.223.244.88:34972] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adt3u2dcIYsS8Iyaj12qZAAAAIc"]
[Sun Apr 12 18:45:15.703182 2026] [:error] [pid 25437:tid 25449] [client 20.223.244.88:10026] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "adt3u3f97wYZje1ep_M6tgAAAMo"]
[Sun Apr 12 18:45:16.244331 2026] [:error] [pid 25328:tid 25383] [client 20.223.244.88:29068] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adt3vMxUaQZxT-e0YsAZGwAAAE0"]
[Sun Apr 12 18:45:16.795526 2026] [:error] [pid 25328:tid 25377] [client 20.223.244.88:29062] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adt3vMxUaQZxT-e0YsAZIAAAAEo"]
[Sun Apr 12 18:45:17.295912 2026] [:error] [pid 25328:tid 25380] [client 20.223.244.88:10032] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adt3vcxUaQZxT-e0YsAZIwAAAEw"]
[Sun Apr 12 18:45:17.830297 2026] [:error] [pid 26567:tid 26584] [client 20.223.244.88:27040] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "adt3vXhRpg6ptWFyFx2lyQAAAQ8"]
[Sun Apr 12 18:45:18.334100 2026] [:error] [pid 25328:tid 25383] [client 20.223.244.88:25435] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adt3vsxUaQZxT-e0YsAZJwAAAE0"]
[Sun Apr 12 18:45:18.946073 2026] [:error] [pid 25327:tid 25356] [client 20.223.244.88:26917] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adt3vi6h2tZEVJo9JFLQugAAABQ"]
[Sun Apr 12 18:45:19.465203 2026] [:error] [pid 26567:tid 26586] [client 20.223.244.88:18154] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adt3v3hRpg6ptWFyFx2lzAAAARE"]
[Sun Apr 12 18:45:19.968736 2026] [:error] [pid 26600:tid 26638] [client 20.223.244.88:29170] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "adt3v-1YwAZiXhQKLYoxwgAAAYk"]
[Sun Apr 12 18:45:20.484880 2026] [:error] [pid 25437:tid 25458] [client 20.223.244.88:26855] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adt3wHf97wYZje1ep_M6vQAAANM"]
[Sun Apr 12 18:45:20.979909 2026] [:error] [pid 26567:tid 26570] [client 20.223.244.88:10000] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adt3wHhRpg6ptWFyFx2lzQAAAQE"]
[Sun Apr 12 18:45:21.481496 2026] [:error] [pid 26567:tid 26578] [client 20.223.244.88:26943] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adt3wXhRpg6ptWFyFx2lzgAAAQk"]
[Sun Apr 12 18:45:21.996158 2026] [:error] [pid 25328:tid 25379] [client 20.223.244.88:18074] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "adt3wcxUaQZxT-e0YsAZKgAAAEs"]
[Sun Apr 12 18:45:22.510133 2026] [:error] [pid 25328:tid 25375] [client 20.223.244.88:15749] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adt3wsxUaQZxT-e0YsAZLAAAAEk"]
[Sun Apr 12 18:45:23.013960 2026] [:error] [pid 26567:tid 26569] [client 20.223.244.88:34992] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adt3w3hRpg6ptWFyFx2l0QAAAQA"]
[Sun Apr 12 18:45:23.540332 2026] [:error] [pid 25328:tid 25379] [client 20.223.244.88:18066] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adt3w8xUaQZxT-e0YsAZNwAAAEs"]
[Sun Apr 12 18:45:24.041103 2026] [:error] [pid 25328:tid 25380] [client 20.223.244.88:10027] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adt3xMxUaQZxT-e0YsAZOwAAAEw"]
[Sun Apr 12 18:45:24.540317 2026] [:error] [pid 26600:tid 26652] [client 20.223.244.88:25465] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adt3xO1YwAZiXhQKLYoxzAAAAZc"]
[Sun Apr 12 18:45:25.085209 2026] [:error] [pid 26600:tid 26632] [client 20.223.244.88:35002] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adt3xe1YwAZiXhQKLYoxzgAAAYM"]
[Sun Apr 12 18:45:25.586746 2026] [:error] [pid 60280:tid 60300] [client 20.223.244.88:27035] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adt3xXBlLnDOYuIykkhyEwAAAdI"]
[Sun Apr 12 18:45:26.117349 2026] [:error] [pid 25327:tid 25358] [client 20.223.244.88:18162] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "adt3xi6h2tZEVJo9JFLQvAAAABY"]
[Sun Apr 12 18:45:26.652905 2026] [:error] [pid 26600:tid 26638] [client 20.223.244.88:26873] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adt3xu1YwAZiXhQKLYox0QAAAYk"]
[Sun Apr 12 18:45:27.177596 2026] [:error] [pid 25437:tid 25441] [client 20.223.244.88:29095] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adt3x3f97wYZje1ep_M6xAAAAMI"]
[Sun Apr 12 18:45:27.735626 2026] [:error] [pid 60280:tid 60297] [client 20.223.244.88:29088] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adt3x3BlLnDOYuIykkhyFwAAAc8"]
[Sun Apr 12 18:45:28.253486 2026] [:error] [pid 60280:tid 60300] [client 20.223.244.88:34963] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adt3yHBlLnDOYuIykkhyHQAAAdI"]
[Sun Apr 12 18:45:28.756810 2026] [:error] [pid 60280:tid 60302] [client 20.223.244.88:29076] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "adt3yHBlLnDOYuIykkhyIAAAAdQ"]
[Sun Apr 12 18:45:29.278368 2026] [:error] [pid 25437:tid 25453] [client 20.223.244.88:29081] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "adt3yXf97wYZje1ep_M6xgAAAM4"]
[Sun Apr 12 18:45:29.804365 2026] [:error] [pid 25329:tid 25406] [client 20.223.244.88:35000] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "adt3yWdcIYsS8Iyaj12qbwAAAJE"]
[Sun Apr 12 18:45:30.310123 2026] [:error] [pid 60280:tid 60285] [client 20.223.244.88:15536] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "adt3ynBlLnDOYuIykkhyJAAAAcM"]
[Sun Apr 12 18:45:30.810733 2026] [:error] [pid 60280:tid 60284] [client 20.223.244.88:14753] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "adt3ynBlLnDOYuIykkhyKAAAAcI"]
[Sun Apr 12 18:45:31.377479 2026] [:error] [pid 25437:tid 25462] [client 20.223.244.88:28522] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "adt3y3f97wYZje1ep_M6ywAAANc"]
[Sun Apr 12 18:45:31.907132 2026] [:error] [pid 25328:tid 25394] [client 20.223.244.88:27013] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "adt3y8xUaQZxT-e0YsAZRgAAAFI"]
[Sun Apr 12 18:45:32.417249 2026] [:error] [pid 25328:tid 25372] [client 20.223.244.88:29147] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "adt3zMxUaQZxT-e0YsAZSQAAAEc"]
[Sun Apr 12 18:45:32.952798 2026] [:error] [pid 60280:tid 60293] [client 20.223.244.88:28508] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adt3zHBlLnDOYuIykkhyNgAAAcs"]
[Sun Apr 12 18:45:33.461584 2026] [:error] [pid 60280:tid 60287] [client 20.223.244.88:29129] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adt3zXBlLnDOYuIykkhyPAAAAcU"]
[Sun Apr 12 18:45:33.981957 2026] [:error] [pid 25328:tid 25396] [client 20.223.244.88:26858] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adt3zcxUaQZxT-e0YsAZTAAAAFM"]
[Sun Apr 12 18:45:34.539476 2026] [:error] [pid 25327:tid 25340] [client 20.223.244.88:14745] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "adt3zi6h2tZEVJo9JFLQwQAAAAQ"]
[Sun Apr 12 18:45:35.043280 2026] [:error] [pid 26567:tid 26570] [client 20.223.244.88:29153] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adt3z3hRpg6ptWFyFx2l2AAAAQE"]
[Sun Apr 12 18:45:35.581573 2026] [:error] [pid 25328:tid 25408] [client 20.223.244.88:29154] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adt3z8xUaQZxT-e0YsAZTwAAAFg"]
[Sun Apr 12 18:45:36.134013 2026] [:error] [pid 25437:tid 25454] [client 20.223.244.88:25423] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adt30Hf97wYZje1ep_M61AAAAM8"]
[Sun Apr 12 18:45:36.651078 2026] [:error] [pid 25437:tid 25461] [client 20.223.244.88:10043] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "adt30Hf97wYZje1ep_M61gAAANY"]
[Sun Apr 12 18:45:37.250491 2026] [:error] [pid 60280:tid 60305] [client 20.223.244.88:30590] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adt30XBlLnDOYuIykkhyQwAAAdc"]
[Sun Apr 12 18:45:37.753749 2026] [:error] [pid 60280:tid 60299] [client 20.223.244.88:9986] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adt30XBlLnDOYuIykkhyRgAAAdE"]
[Sun Apr 12 18:45:38.286041 2026] [:error] [pid 25328:tid 25394] [client 20.223.244.88:25421] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adt30sxUaQZxT-e0YsAZVAAAAFI"]
[Sun Apr 12 18:45:38.788466 2026] [:error] [pid 26567:tid 26574] [client 20.223.244.88:29161] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "adt30nhRpg6ptWFyFx2l4wAAAQU"]
[Sun Apr 12 18:45:39.302347 2026] [:error] [pid 25437:tid 25439] [client 20.223.244.88:14767] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adt303f97wYZje1ep_M63AAAAMA"]
[Sun Apr 12 18:45:39.813387 2026] [:error] [pid 60280:tid 60291] [client 20.223.244.88:14757] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adt303BlLnDOYuIykkhyUAAAAck"]
[Sun Apr 12 18:45:40.363746 2026] [:error] [pid 60280:tid 60301] [client 20.223.244.88:27065] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adt31HBlLnDOYuIykkhyVgAAAdM"]
[Sun Apr 12 18:45:40.970934 2026] [:error] [pid 60280:tid 60282] [client 20.223.244.88:18152] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "adt31HBlLnDOYuIykkhyXgAAAcA"]
[Sun Apr 12 18:45:41.470793 2026] [:error] [pid 60280:tid 60304] [client 20.223.244.88:30538] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adt31XBlLnDOYuIykkhyYgAAAdY"]
[Sun Apr 12 18:45:41.974668 2026] [:error] [pid 25437:tid 25450] [client 20.223.244.88:34997] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adt31Xf97wYZje1ep_M65wAAAMs"]
[Sun Apr 12 18:45:42.477941 2026] [:error] [pid 26600:tid 26653] [client 20.223.244.88:26868] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adt31u1YwAZiXhQKLYox5gAAAZg"]
[Sun Apr 12 18:45:42.999719 2026] [:error] [pid 25328:tid 25387] [client 20.223.244.88:18399] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adt31sxUaQZxT-e0YsAZWQAAAE8"]
[Sun Apr 12 18:45:43.510420 2026] [:error] [pid 25328:tid 25391] [client 20.223.244.88:28527] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adt318xUaQZxT-e0YsAZXQAAAFE"]
[Sun Apr 12 18:45:44.025302 2026] [:error] [pid 26600:tid 26636] [client 20.223.244.88:14740] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adt32O1YwAZiXhQKLYox6gAAAYc"]
[Sun Apr 12 18:45:44.522315 2026] [:error] [pid 25437:tid 25456] [client 20.223.244.88:19445] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adt32Hf97wYZje1ep_M68gAAANE"]
[Sun Apr 12 18:45:45.019214 2026] [:error] [pid 25328:tid 25368] [client 20.223.244.88:29125] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "adt32cxUaQZxT-e0YsAZYwAAAEQ"]
[Sun Apr 12 18:45:45.550490 2026] [:error] [pid 25327:tid 25346] [client 20.223.244.88:27048] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adt32S6h2tZEVJo9JFLQyQAAAAo"]
[Sun Apr 12 18:45:46.052251 2026] [:error] [pid 25328:tid 25380] [client 20.223.244.88:18868] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adt32sxUaQZxT-e0YsAZagAAAEw"]
[Sun Apr 12 18:45:46.552286 2026] [:error] [pid 25328:tid 25375] [client 20.223.244.88:30533] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adt32sxUaQZxT-e0YsAZcAAAAEk"]
[Sun Apr 12 18:45:47.061249 2026] [:error] [pid 25328:tid 25401] [client 20.223.244.88:26652] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "adt328xUaQZxT-e0YsAZdAAAAFU"]
[Sun Apr 12 18:45:47.559309 2026] [:error] [pid 60280:tid 60299] [client 20.223.244.88:25427] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adt323BlLnDOYuIykkhyagAAAdE"]
[Sun Apr 12 18:45:48.056049 2026] [:error] [pid 25328:tid 25408] [client 20.223.244.88:25444] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adt33MxUaQZxT-e0YsAZfgAAAFg"]
[Sun Apr 12 18:45:48.550502 2026] [:error] [pid 26599:tid 26618] [client 20.223.244.88:30553] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adt33HG89LXoQbk_rwDIlgAAAVA"]
[Sun Apr 12 18:45:49.055404 2026] [:error] [pid 26600:tid 26641] [client 20.223.244.88:29103] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "adt33e1YwAZiXhQKLYox8gAAAYw"]
[Sun Apr 12 18:45:49.575802 2026] [:error] [pid 25437:tid 25445] [client 20.223.244.88:25414] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adt33Xf97wYZje1ep_M6-QAAAMY"]
[Sun Apr 12 18:45:50.089556 2026] [:error] [pid 25437:tid 25459] [client 20.223.244.88:26640] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adt33nf97wYZje1ep_M6_AAAANQ"]
[Sun Apr 12 18:45:50.592275 2026] [:error] [pid 25328:tid 25398] [client 20.223.244.88:10042] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adt33sxUaQZxT-e0YsAZgwAAAFQ"]
[Sun Apr 12 18:45:51.083312 2026] [:error] [pid 25328:tid 25408] [client 20.223.244.88:26828] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "adt338xUaQZxT-e0YsAZhgAAAFg"]
[Sun Apr 12 18:45:51.577900 2026] [:error] [pid 25329:tid 25382] [client 20.223.244.88:26642] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adt332dcIYsS8Iyaj12qfgAAAIQ"]
[Sun Apr 12 18:45:52.087951 2026] [:error] [pid 26600:tid 26637] [client 20.223.244.88:10019] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adt34O1YwAZiXhQKLYox9AAAAYg"]
[Sun Apr 12 18:45:52.582523 2026] [:error] [pid 26567:tid 26573] [client 20.223.244.88:22033] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adt34HhRpg6ptWFyFx2l-gAAAQQ"]
[Sun Apr 12 18:45:53.078995 2026] [:error] [pid 26567:tid 26577] [client 20.223.244.88:29176] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "adt34XhRpg6ptWFyFx2l_AAAAQg"]
[Sun Apr 12 18:45:53.575054 2026] [:error] [pid 26567:tid 26570] [client 20.223.244.88:26682] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adt34XhRpg6ptWFyFx2mAQAAAQE"]
[Sun Apr 12 18:45:54.075998 2026] [:error] [pid 25328:tid 25405] [client 20.223.244.88:26629] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adt34sxUaQZxT-e0YsAZiwAAAFc"]
[Sun Apr 12 18:45:54.570217 2026] [:error] [pid 60280:tid 60287] [client 20.223.244.88:26677] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adt34nBlLnDOYuIykkhybAAAAcU"]
[Sun Apr 12 18:45:55.060265 2026] [:error] [pid 25437:tid 25459] [client 20.223.244.88:34975] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "adt343f97wYZje1ep_M7BwAAANQ"]
[Sun Apr 12 18:45:55.552663 2026] [:error] [pid 25437:tid 25456] [client 20.223.244.88:18129] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adt343f97wYZje1ep_M7CwAAANE"]
[Sun Apr 12 18:45:56.046747 2026] [:error] [pid 25437:tid 25448] [client 20.223.244.88:25411] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adt35Hf97wYZje1ep_M7DgAAAMk"]
[Sun Apr 12 18:45:56.541113 2026] [:error] [pid 25437:tid 25440] [client 20.223.244.88:18837] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adt35Hf97wYZje1ep_M7EQAAAME"]
[Sun Apr 12 18:45:57.034248 2026] [:error] [pid 25329:tid 25411] [client 20.223.244.88:9995] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "adt35WdcIYsS8Iyaj12qhwAAAJQ"]
[Sun Apr 12 18:45:57.533298 2026] [:error] [pid 25327:tid 25351] [client 20.223.244.88:18171] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adt35S6h2tZEVJo9JFLQ1AAAAA8"]
[Sun Apr 12 18:45:58.031944 2026] [:error] [pid 25437:tid 25439] [client 20.223.244.88:26670] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adt35nf97wYZje1ep_M7FwAAAMA"]
[Sun Apr 12 18:45:58.533720 2026] [:error] [pid 25327:tid 25341] [client 20.223.244.88:29075] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adt35i6h2tZEVJo9JFLQ1wAAAAU"]
[Sun Apr 12 18:45:59.039350 2026] [:error] [pid 25437:tid 25442] [client 20.223.244.88:19432] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adt353f97wYZje1ep_M7GgAAAMM"]
[Sun Apr 12 18:45:59.533737 2026] [:error] [pid 25329:tid 25381] [client 20.223.244.88:10030] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adt352dcIYsS8Iyaj12qigAAAIM"]
[Sun Apr 12 18:46:00.068632 2026] [:error] [pid 25327:tid 25347] [client 20.223.244.88:19422] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adt36C6h2tZEVJo9JFLQ2QAAAAs"]
[Sun Apr 12 18:46:00.562378 2026] [:error] [pid 25437:tid 25443] [client 20.223.244.88:18419] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adt36Hf97wYZje1ep_M7HQAAAMQ"]
[Sun Apr 12 18:46:01.060685 2026] [:error] [pid 25327:tid 25336] [client 20.223.244.88:14741] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adt36S6h2tZEVJo9JFLQ2gAAAAA"]
[Sun Apr 12 18:46:01.563212 2026] [:error] [pid 26600:tid 26641] [client 20.223.244.88:34948] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "adt36e1YwAZiXhQKLYox_gAAAYw"]
[Sun Apr 12 18:46:02.132639 2026] [:error] [pid 26600:tid 26630] [client 20.223.244.88:29119] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "adt36u1YwAZiXhQKLYoyAgAAAYE"]
[Sun Apr 12 18:46:02.629462 2026] [:error] [pid 60280:tid 60293] [client 20.223.244.88:19438] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "adt36nBlLnDOYuIykkhybwAAAcs"]
[Sun Apr 12 18:46:10.522134 2026] [:error] [pid 25328:tid 25401] [client 20.223.244.88:15765] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adt38sxUaQZxT-e0YsAZ0QAAAFU"]
[Sun Apr 12 18:46:11.019445 2026] [:error] [pid 25437:tid 25463] [client 20.223.244.88:28510] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adt383f97wYZje1ep_M7KwAAANg"]
[Sun Apr 12 18:46:11.536486 2026] [:error] [pid 25327:tid 25343] [client 20.223.244.88:26778] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adt38y6h2tZEVJo9JFLQ5AAAAAc"]
[Sun Apr 12 18:46:12.040134 2026] [:error] [pid 26600:tid 26638] [client 20.223.244.88:15794] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adt39O1YwAZiXhQKLYoyFgAAAYk"]
[Sun Apr 12 18:46:12.535700 2026] [:error] [pid 25437:tid 25439] [client 20.223.244.88:29097] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adt39Hf97wYZje1ep_M7MAAAAMA"]
[Sun Apr 12 18:46:13.032297 2026] [:error] [pid 26599:tid 26605] [client 20.223.244.88:29112] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adt39XG89LXoQbk_rwDIsgAAAUM"]
[Sun Apr 12 18:46:13.527560 2026] [:error] [pid 26599:tid 26615] [client 20.223.244.88:26624] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adt39XG89LXoQbk_rwDIswAAAU0"]
[Sun Apr 12 18:46:14.027341 2026] [:error] [pid 25328:tid 25367] [client 20.223.244.88:29158] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "adt39sxUaQZxT-e0YsAZ2AAAAEM"]
[Sun Apr 12 18:46:14.521649 2026] [:error] [pid 25437:tid 25445] [client 20.223.244.88:30554] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adt39nf97wYZje1ep_M7OgAAAMY"]
[Sun Apr 12 18:46:15.019824 2026] [:error] [pid 26600:tid 26642] [client 20.223.244.88:25880] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adt39-1YwAZiXhQKLYoyHAAAAY0"]
[Sun Apr 12 18:46:15.536564 2026] [:error] [pid 25328:tid 25398] [client 20.223.244.88:25913] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adt398xUaQZxT-e0YsAZ3wAAAFQ"]
[Sun Apr 12 18:46:16.052589 2026] [:error] [pid 26600:tid 26633] [client 20.223.244.88:9882] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adt3-O1YwAZiXhQKLYoyHQAAAYQ"]
[Sun Apr 12 18:46:16.549452 2026] [:error] [pid 60280:tid 60287] [client 20.223.244.88:17832] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adt3-HBlLnDOYuIykkhyhQAAAcU"]
[Sun Apr 12 18:46:17.044072 2026] [:error] [pid 60280:tid 60301] [client 20.223.244.88:30580] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adt3-XBlLnDOYuIykkhyiQAAAdM"]
[Sun Apr 12 18:46:17.543932 2026] [:error] [pid 25327:tid 25349] [client 20.223.244.88:20885] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adt3-S6h2tZEVJo9JFLQ8AAAAA0"]
[Sun Apr 12 18:46:18.053411 2026] [:error] [pid 60280:tid 60303] [client 20.223.244.88:17803] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "adt3-nBlLnDOYuIykkhykQAAAdU"]
[Sun Apr 12 18:46:18.547458 2026] [:error] [pid 25437:tid 25458] [client 20.223.244.88:26680] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adt3-nf97wYZje1ep_M7QgAAANM"]
[Sun Apr 12 18:46:19.045902 2026] [:error] [pid 60280:tid 60297] [client 20.223.244.88:17895] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adt3-3BlLnDOYuIykkhymQAAAc8"]
[Sun Apr 12 18:46:19.544500 2026] [:error] [pid 60280:tid 60292] [client 20.223.244.88:19451] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adt3-3BlLnDOYuIykkhynQAAAco"]
[Sun Apr 12 18:46:20.046556 2026] [:error] [pid 60280:tid 60301] [client 20.223.244.88:20873] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "adt3_HBlLnDOYuIykkhyoQAAAdM"]
[Sun Apr 12 18:46:20.560832 2026] [:error] [pid 60280:tid 60298] [client 20.223.244.88:30558] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adt3_HBlLnDOYuIykkhysAAAAdA"]
[Sun Apr 12 18:46:21.068588 2026] [:error] [pid 25327:tid 25336] [client 20.223.244.88:9905] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adt3_S6h2tZEVJo9JFLQ9QAAAAA"]
[Sun Apr 12 18:46:21.567317 2026] [:error] [pid 25437:tid 25455] [client 20.223.244.88:17875] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adt3_Xf97wYZje1ep_M7RQAAANA"]
[Sun Apr 12 18:46:22.067440 2026] [:error] [pid 25328:tid 25375] [client 20.223.244.88:17865] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "adt3_sxUaQZxT-e0YsAZ8wAAAEk"]
[Sun Apr 12 18:46:22.568308 2026] [:error] [pid 60280:tid 60305] [client 20.223.244.88:19401] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adt3_nBlLnDOYuIykkhywAAAAdc"]
[Sun Apr 12 18:46:23.063718 2026] [:error] [pid 25437:tid 25453] [client 20.223.244.88:16790] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adt3_3f97wYZje1ep_M7SQAAAM4"]
[Sun Apr 12 18:46:23.556260 2026] [:error] [pid 25328:tid 25385] [client 20.223.244.88:19680] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adt3_8xUaQZxT-e0YsAZ_wAAAE4"]
[Sun Apr 12 18:46:24.057832 2026] [:error] [pid 26599:tid 26613] [client 20.223.244.88:30564] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "adt4AHG89LXoQbk_rwDIuQAAAUs"]
[Sun Apr 12 18:46:24.567279 2026] [:error] [pid 60280:tid 60290] [client 20.223.244.88:26662] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adt4AHBlLnDOYuIykkhyzAAAAcg"]
[Sun Apr 12 18:46:25.069826 2026] [:error] [pid 25437:tid 25445] [client 20.223.244.88:17850] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adt4AXf97wYZje1ep_M7VAAAAMY"]
[Sun Apr 12 18:46:25.561087 2026] [:error] [pid 60280:tid 60300] [client 20.223.244.88:9856] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adt4AXBlLnDOYuIykkhy2gAAAdI"]
[Sun Apr 12 18:46:26.053780 2026] [:error] [pid 25328:tid 25367] [client 20.223.244.88:26745] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adt4AsxUaQZxT-e0YsAaHQAAAEM"]
[Sun Apr 12 18:46:26.550488 2026] [:error] [pid 25328:tid 25387] [client 20.223.244.88:9879] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adt4AsxUaQZxT-e0YsAaJAAAAE8"]
[Sun Apr 12 18:46:27.049874 2026] [:error] [pid 25437:tid 25456] [client 20.223.244.88:19660] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adt4A3f97wYZje1ep_M7VgAAANE"]
[Sun Apr 12 18:46:27.547947 2026] [:error] [pid 25437:tid 25463] [client 20.223.244.88:22865] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adt4A3f97wYZje1ep_M7VwAAANg"]
[Sun Apr 12 18:46:28.075854 2026] [:error] [pid 25328:tid 25379] [client 20.223.244.88:17899] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "adt4BMxUaQZxT-e0YsAaLwAAAEs"]
[Sun Apr 12 18:46:28.575863 2026] [:error] [pid 25437:tid 25448] [client 20.223.244.88:17881] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adt4BHf97wYZje1ep_M7WwAAAMk"]
[Sun Apr 12 18:46:29.070278 2026] [:error] [pid 25328:tid 25367] [client 20.223.244.88:20888] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adt4BcxUaQZxT-e0YsAaMwAAAEM"]
[Sun Apr 12 18:46:29.573074 2026] [:error] [pid 25328:tid 25401] [client 20.223.244.88:25652] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adt4BcxUaQZxT-e0YsAaNQAAAFU"]
[Sun Apr 12 18:46:30.092100 2026] [:error] [pid 25327:tid 25344] [client 20.223.244.88:15277] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adt4Bi6h2tZEVJo9JFLRCgAAAAg"]
[Sun Apr 12 18:46:30.630901 2026] [:error] [pid 60280:tid 60297] [client 20.223.244.88:20927] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adt4BnBlLnDOYuIykkhy_QAAAc8"]
[Sun Apr 12 18:46:31.124782 2026] [:error] [pid 25328:tid 25380] [client 20.223.244.88:9890] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adt4B8xUaQZxT-e0YsAaNwAAAEw"]
[Sun Apr 12 18:46:31.620793 2026] [:error] [pid 26599:tid 26622] [client 20.223.244.88:15285] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adt4B3G89LXoQbk_rwDIvQAAAVQ"]
[Sun Apr 12 18:46:32.120408 2026] [:error] [pid 25329:tid 25412] [client 20.223.244.88:25600] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "adt4CGdcIYsS8Iyaj12qqgAAAJU"]
[Sun Apr 12 18:46:32.627440 2026] [:error] [pid 26600:tid 26652] [client 20.223.244.88:20963] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adt4CO1YwAZiXhQKLYoyLgAAAZc"]
[Sun Apr 12 18:46:33.124248 2026] [:error] [pid 25437:tid 25454] [client 20.223.244.88:20987] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adt4CXf97wYZje1ep_M7YQAAAM8"]
[Sun Apr 12 18:46:33.617541 2026] [:error] [pid 60280:tid 60297] [client 20.223.244.88:22871] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adt4CXBlLnDOYuIykkhzAgAAAc8"]
[Sun Apr 12 18:46:34.112518 2026] [:error] [pid 26600:tid 26635] [client 20.223.244.88:26697] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "adt4Cu1YwAZiXhQKLYoyMgAAAYY"]
[Sun Apr 12 18:46:34.608475 2026] [:error] [pid 25328:tid 25366] [client 20.223.244.88:9898] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adt4CsxUaQZxT-e0YsAaPQAAAEI"]
[Sun Apr 12 18:46:35.102185 2026] [:error] [pid 25328:tid 25370] [client 20.223.244.88:20991] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adt4C8xUaQZxT-e0YsAaQQAAAEY"]
[Sun Apr 12 18:46:35.623315 2026] [:error] [pid 25328:tid 25367] [client 20.223.244.88:24892] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adt4C8xUaQZxT-e0YsAaRwAAAEM"]
[Sun Apr 12 18:46:36.116763 2026] [:error] [pid 25328:tid 25366] [client 20.223.244.88:12842] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "adt4DMxUaQZxT-e0YsAaSQAAAEI"]
[Sun Apr 12 18:46:36.614619 2026] [:error] [pid 60280:tid 60282] [client 20.223.244.88:22848] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adt4DHBlLnDOYuIykkhzDwAAAcA"]
[Sun Apr 12 18:46:37.111678 2026] [:error] [pid 60280:tid 60288] [client 20.223.244.88:19663] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adt4DXBlLnDOYuIykkhzEAAAAcY"]
[Sun Apr 12 18:46:37.609944 2026] [:error] [pid 26567:tid 26583] [client 20.223.244.88:26705] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adt4DXhRpg6ptWFyFx2mJwAAAQ4"]
[Sun Apr 12 18:46:38.107553 2026] [:error] [pid 26600:tid 26651] [client 20.223.244.88:20871] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "adt4Du1YwAZiXhQKLYoyNAAAAZY"]
[Sun Apr 12 18:46:38.611458 2026] [:error] [pid 25437:tid 25463] [client 20.223.244.88:17898] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adt4Dnf97wYZje1ep_M7bwAAANg"]
[Sun Apr 12 18:46:39.108012 2026] [:error] [pid 26600:tid 26643] [client 20.223.244.88:20976] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adt4D-1YwAZiXhQKLYoyOgAAAY4"]
[Sun Apr 12 18:46:39.605985 2026] [:error] [pid 25329:tid 25415] [client 20.223.244.88:20958] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adt4D2dcIYsS8Iyaj12qrgAAAJg"]
[Sun Apr 12 18:46:40.112302 2026] [:error] [pid 25437:tid 25440] [client 20.223.244.88:9865] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "adt4EHf97wYZje1ep_M7cQAAAME"]
[Sun Apr 12 18:46:40.610603 2026] [:error] [pid 60280:tid 60295] [client 20.223.244.88:15240] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adt4EHBlLnDOYuIykkhzJQAAAc0"]
[Sun Apr 12 18:46:41.111980 2026] [:error] [pid 25437:tid 25463] [client 20.223.244.88:9915] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adt4EXf97wYZje1ep_M7eQAAANg"]
[Sun Apr 12 18:46:41.617538 2026] [:error] [pid 60280:tid 60302] [client 20.223.244.88:26691] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adt4EXBlLnDOYuIykkhzLQAAAdQ"]
[Sun Apr 12 18:46:42.114454 2026] [:error] [pid 25327:tid 25346] [client 20.223.244.88:20907] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adt4Ei6h2tZEVJo9JFLREAAAAAo"]
[Sun Apr 12 18:46:42.609721 2026] [:error] [pid 25328:tid 25408] [client 20.223.244.88:26698] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adt4EsxUaQZxT-e0YsAaZwAAAFg"]
[Sun Apr 12 18:46:43.109739 2026] [:error] [pid 25328:tid 25380] [client 20.223.244.88:9909] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adt4E8xUaQZxT-e0YsAaaQAAAEw"]
[Sun Apr 12 18:46:43.603454 2026] [:error] [pid 25327:tid 25341] [client 20.223.244.88:9814] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adt4Ey6h2tZEVJo9JFLREQAAAAU"]
[Sun Apr 12 18:46:44.097941 2026] [:error] [pid 26600:tid 26646] [client 20.223.244.88:20915] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "adt4FO1YwAZiXhQKLYoySwAAAZE"]
[Sun Apr 12 18:46:44.589676 2026] [:error] [pid 25329:tid 25381] [client 20.223.244.88:25918] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adt4FGdcIYsS8Iyaj12qtgAAAIM"]
[Sun Apr 12 18:46:45.080010 2026] [:error] [pid 60280:tid 60288] [client 20.223.244.88:22911] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adt4FXBlLnDOYuIykkhzNwAAAcY"]
[Sun Apr 12 18:46:45.570622 2026] [:error] [pid 26567:tid 26586] [client 20.223.244.88:19678] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adt4FXhRpg6ptWFyFx2mMQAAARE"]
[Sun Apr 12 18:46:46.065026 2026] [:error] [pid 60280:tid 60300] [client 20.223.244.88:25622] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adt4FnBlLnDOYuIykkhzPgAAAdI"]
[Sun Apr 12 18:46:46.563922 2026] [:error] [pid 26599:tid 26605] [client 20.223.244.88:15292] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adt4FnG89LXoQbk_rwDIzwAAAUM"]
[Sun Apr 12 18:46:47.057407 2026] [:error] [pid 60280:tid 60306] [client 20.223.244.88:24858] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adt4F3BlLnDOYuIykkhzSwAAAdg"]
[Sun Apr 12 18:46:47.552654 2026] [:error] [pid 60280:tid 60296] [client 20.223.244.88:20908] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adt4F3BlLnDOYuIykkhzTgAAAc4"]
[Sun Apr 12 18:46:48.052680 2026] [:error] [pid 60280:tid 60287] [client 20.223.244.88:25644] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "adt4GHBlLnDOYuIykkhzUgAAAcU"]
[Sun Apr 12 18:46:48.555176 2026] [:error] [pid 60280:tid 60302] [client 20.223.244.88:22875] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adt4GHBlLnDOYuIykkhzVAAAAdQ"]
[Sun Apr 12 18:46:49.048922 2026] [:error] [pid 60280:tid 60285] [client 20.223.244.88:19651] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adt4GXBlLnDOYuIykkhzWAAAAcM"]
[Sun Apr 12 18:46:49.543095 2026] [:error] [pid 60280:tid 60300] [client 20.223.244.88:12811] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adt4GXBlLnDOYuIykkhzWgAAAdI"]
[Sun Apr 12 18:46:50.052668 2026] [:error] [pid 26600:tid 26629] [client 20.223.244.88:20965] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "adt4Gu1YwAZiXhQKLYoyWwAAAYA"]
[Sun Apr 12 18:46:50.568602 2026] [:error] [pid 26599:tid 26610] [client 20.223.244.88:26737] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adt4GnG89LXoQbk_rwDI0AAAAUg"]
[Sun Apr 12 18:46:51.070840 2026] [:error] [pid 25328:tid 25383] [client 20.223.244.88:26714] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adt4G8xUaQZxT-e0YsAacwAAAE0"]
[Sun Apr 12 18:46:51.570969 2026] [:error] [pid 25328:tid 25368] [client 20.223.244.88:20933] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adt4G8xUaQZxT-e0YsAadwAAAEQ"]
[Sun Apr 12 18:46:52.064275 2026] [:error] [pid 26567:tid 26584] [client 20.223.244.88:24877] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adt4HHhRpg6ptWFyFx2mNgAAAQ8"]
[Sun Apr 12 18:46:52.566356 2026] [:error] [pid 60280:tid 60298] [client 20.223.244.88:17801] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adt4HHBlLnDOYuIykkhzaQAAAdA"]
[Sun Apr 12 18:46:53.062920 2026] [:error] [pid 26567:tid 26571] [client 20.223.244.88:15250] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adt4HXhRpg6ptWFyFx2mNwAAAQI"]
[Sun Apr 12 18:46:53.566355 2026] [:error] [pid 60280:tid 60292] [client 20.223.244.88:20867] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adt4HXBlLnDOYuIykkhzdQAAAco"]
[Sun Apr 12 18:46:54.077880 2026] [:error] [pid 60280:tid 60294] [client 20.223.244.88:24846] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "adt4HnBlLnDOYuIykkhzewAAAcw"]
[Sun Apr 12 18:46:54.632696 2026] [:error] [pid 25437:tid 25456] [client 20.223.244.88:26647] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adt4Hnf97wYZje1ep_M7iAAAANE"]
[Sun Apr 12 18:46:55.132567 2026] [:error] [pid 26567:tid 26593] [client 20.223.244.88:15260] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adt4H3hRpg6ptWFyFx2mOwAAARg"]
[Sun Apr 12 18:46:55.667942 2026] [:error] [pid 26599:tid 26617] [client 20.223.244.88:26699] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adt4H3G89LXoQbk_rwDI0QAAAU8"]
[Sun Apr 12 18:46:56.182202 2026] [:error] [pid 26567:tid 26577] [client 20.223.244.88:26951] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adt4IHhRpg6ptWFyFx2mQAAAAQg"]
[Sun Apr 12 18:46:56.704177 2026] [:error] [pid 26567:tid 26589] [client 20.223.244.88:26719] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adt4IHhRpg6ptWFyFx2mQgAAARQ"]
[Sun Apr 12 18:46:57.226285 2026] [:error] [pid 26599:tid 26606] [client 20.223.244.88:9891] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adt4IXG89LXoQbk_rwDI1QAAAUQ"]
[Sun Apr 12 18:46:57.726244 2026] [:error] [pid 25437:tid 25453] [client 20.223.244.88:12822] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adt4IXf97wYZje1ep_M7jAAAAM4"]
[Sun Apr 12 18:46:58.229876 2026] [:error] [pid 60280:tid 60295] [client 20.223.244.88:12827] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "adt4InBlLnDOYuIykkhzjwAAAc0"]
[Sun Apr 12 18:46:58.769332 2026] [:error] [pid 25328:tid 25385] [client 20.223.244.88:20910] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adt4IsxUaQZxT-e0YsAahQAAAE4"]
[Sun Apr 12 18:46:59.264154 2026] [:error] [pid 25327:tid 25360] [client 20.223.244.88:20864] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adt4Iy6h2tZEVJo9JFLRHwAAABg"]
[Sun Apr 12 18:46:59.776978 2026] [:error] [pid 25327:tid 25346] [client 20.223.244.88:25617] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adt4Iy6h2tZEVJo9JFLRIgAAAAo"]
[Sun Apr 12 18:47:00.293097 2026] [:error] [pid 25437:tid 25440] [client 20.223.244.88:25601] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "adt4JHf97wYZje1ep_M7kgAAAME"]
[Sun Apr 12 18:47:00.797905 2026] [:error] [pid 60280:tid 60298] [client 20.223.244.88:20920] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adt4JHBlLnDOYuIykkhzlwAAAdA"]
[Sun Apr 12 18:47:01.308077 2026] [:error] [pid 26599:tid 26620] [client 20.223.244.88:26727] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adt4JXG89LXoQbk_rwDI2QAAAVI"]
[Sun Apr 12 18:47:01.824841 2026] [:error] [pid 60280:tid 60295] [client 20.223.244.88:22873] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adt4JXBlLnDOYuIykkhzmAAAAc0"]
[Sun Apr 12 18:47:02.360444 2026] [:error] [pid 25437:tid 25461] [client 20.223.244.88:22849] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "adt4Jnf97wYZje1ep_M7lgAAANY"]
[Sun Apr 12 18:47:02.867053 2026] [:error] [pid 60280:tid 60282] [client 20.223.244.88:25658] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adt4JnBlLnDOYuIykkhzngAAAcA"]
[Sun Apr 12 18:47:03.364148 2026] [:error] [pid 60280:tid 60300] [client 20.223.244.88:21821] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adt4J3BlLnDOYuIykkhzowAAAdI"]
[Sun Apr 12 18:47:03.894113 2026] [:error] [pid 25327:tid 25360] [client 20.223.244.88:17914] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adt4Jy6h2tZEVJo9JFLRKgAAABg"]
[Sun Apr 12 18:47:04.405222 2026] [:error] [pid 26599:tid 26624] [client 20.223.244.88:12800] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "adt4KHG89LXoQbk_rwDI3QAAAVY"]
[Sun Apr 12 18:47:04.925332 2026] [:error] [pid 60280:tid 60306] [client 20.223.244.88:20884] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adt4KHBlLnDOYuIykkhzqQAAAdg"]
[Sun Apr 12 18:47:05.436854 2026] [:error] [pid 26567:tid 26582] [client 20.223.244.88:19923] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adt4KXhRpg6ptWFyFx2mSAAAAQ0"]
[Sun Apr 12 18:47:05.938007 2026] [:error] [pid 25328:tid 25385] [client 20.223.244.88:19693] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adt4KcxUaQZxT-e0YsAajwAAAE4"]
[Sun Apr 12 18:47:06.476694 2026] [:error] [pid 26567:tid 26586] [client 20.223.244.88:22868] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "adt4KnhRpg6ptWFyFx2mTAAAARE"]
[Sun Apr 12 18:47:06.971593 2026] [:error] [pid 25437:tid 25462] [client 20.223.244.88:26710] [client 20.223.244.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adt4Knf97wYZje1ep_M7mQAAANc"]
[Sun Apr 12 18:47:07.485227 2026] [:error] [pid 25329:tid 25384] [client 20.223.244.88:22896] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adt4K2dcIYsS8Iyaj12qvwAAAIU"]
[Sun Apr 12 18:47:07.981065 2026] [:error] [pid 25437:tid 25447] [client 20.223.244.88:25883] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adt4K3f97wYZje1ep_M7oQAAAMg"]
[Sun Apr 12 18:47:08.498671 2026] [:error] [pid 25328:tid 25377] [client 20.223.244.88:25604] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adt4LMxUaQZxT-e0YsAalgAAAEo"]
[Sun Apr 12 18:47:08.994334 2026] [:error] [pid 26567:tid 26589] [client 20.223.244.88:19670] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "adt4LHhRpg6ptWFyFx2mUQAAARQ"]
[Sun Apr 12 18:47:09.497113 2026] [:error] [pid 26567:tid 26570] [client 20.223.244.88:17909] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adt4LXhRpg6ptWFyFx2mUgAAAQE"]
[Sun Apr 12 18:47:09.998598 2026] [:error] [pid 25328:tid 25401] [client 20.223.244.88:21778] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adt4LcxUaQZxT-e0YsAanAAAAFU"]
[Sun Apr 12 18:47:17.916311 2026] [:error] [pid 26567:tid 26579] [client 20.223.244.88:16801] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adt4NXhRpg6ptWFyFx2mZwAAAQo"]
[Sun Apr 12 18:47:18.425451 2026] [:error] [pid 26567:tid 26578] [client 20.223.244.88:20990] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adt4NnhRpg6ptWFyFx2magAAAQk"]
[Sun Apr 12 18:47:18.956273 2026] [:error] [pid 60280:tid 60300] [client 20.223.244.88:25659] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adt4NnBlLnDOYuIykkhzvQAAAdI"]
[Sun Apr 12 18:47:19.455190 2026] [:error] [pid 60280:tid 60301] [client 20.223.244.88:22876] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adt4N3BlLnDOYuIykkhzwAAAAdM"]
[Sun Apr 12 18:47:19.953466 2026] [:error] [pid 60280:tid 60289] [client 20.223.244.88:20959] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adt4N3BlLnDOYuIykkhzxAAAAcc"]
[Sun Apr 12 18:47:20.464266 2026] [:error] [pid 26567:tid 26591] [client 20.223.244.88:19667] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adt4OHhRpg6ptWFyFx2mbgAAARY"]
[Sun Apr 12 18:47:20.963755 2026] [:error] [pid 26567:tid 26590] [client 20.223.244.88:15809] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adt4OHhRpg6ptWFyFx2mcAAAARU"]
[Sun Apr 12 18:47:21.457935 2026] [:error] [pid 25329:tid 25378] [client 20.223.244.88:19406] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "adt4OWdcIYsS8Iyaj12qxAAAAII"]
[Sun Apr 12 18:47:21.985367 2026] [:error] [pid 25327:tid 25341] [client 20.223.244.88:20989] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adt4OS6h2tZEVJo9JFLRPwAAAAU"]
[Sun Apr 12 18:47:22.510899 2026] [:error] [pid 25437:tid 25439] [client 20.223.244.88:24865] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adt4Onf97wYZje1ep_M7wQAAAMA"]
[Sun Apr 12 18:47:23.014721 2026] [:error] [pid 25327:tid 25347] [client 20.223.244.88:26723] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adt4Oy6h2tZEVJo9JFLRQQAAAAs"]
[Sun Apr 12 18:47:23.570303 2026] [:error] [pid 25327:tid 25342] [client 20.223.244.88:15276] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "adt4Oy6h2tZEVJo9JFLRQgAAAAY"]
[Sun Apr 12 18:47:24.070045 2026] [:error] [pid 26599:tid 26622] [client 20.223.244.88:25623] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adt4PHG89LXoQbk_rwDI8gAAAVQ"]
[Sun Apr 12 18:47:24.582421 2026] [:error] [pid 25329:tid 25413] [client 20.223.244.88:24840] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adt4PGdcIYsS8Iyaj12qxQAAAJY"]
[Sun Apr 12 18:47:25.113679 2026] [:error] [pid 26600:tid 26634] [client 20.223.244.88:25607] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adt4Pe1YwAZiXhQKLYoygQAAAYU"]
[Sun Apr 12 18:47:25.621298 2026] [:error] [pid 60280:tid 60289] [client 20.223.244.88:22881] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "adt4PXBlLnDOYuIykkhz0gAAAcc"]
[Sun Apr 12 18:47:26.130451 2026] [:error] [pid 25328:tid 25389] [client 20.223.244.88:21812] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adt4PsxUaQZxT-e0YsAaqQAAAFA"]
[Sun Apr 12 18:47:26.629866 2026] [:error] [pid 26600:tid 26644] [client 20.223.244.88:20950] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adt4Pu1YwAZiXhQKLYoyhQAAAY8"]
[Sun Apr 12 18:47:27.134939 2026] [:error] [pid 60280:tid 60283] [client 20.223.244.88:14050] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adt4P3BlLnDOYuIykkhz1gAAAcE"]
[Sun Apr 12 18:47:27.643459 2026] [:error] [pid 26600:tid 26640] [client 20.223.244.88:24887] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "adt4P-1YwAZiXhQKLYoyhwAAAYs"]
[Sun Apr 12 18:47:28.233787 2026] [:error] [pid 60280:tid 60282] [client 20.223.244.88:9868] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adt4QHBlLnDOYuIykkhz2QAAAcA"]
[Sun Apr 12 18:47:28.736555 2026] [:error] [pid 26567:tid 26584] [client 20.223.244.88:19708] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adt4QHhRpg6ptWFyFx2meQAAAQ8"]
[Sun Apr 12 18:47:29.239764 2026] [:error] [pid 26599:tid 26608] [client 20.223.244.88:22909] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adt4QXG89LXoQbk_rwDI-QAAAUY"]
[Sun Apr 12 18:47:29.753031 2026] [:error] [pid 25328:tid 25383] [client 20.223.244.88:15247] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "adt4QcxUaQZxT-e0YsAargAAAE0"]
[Sun Apr 12 18:47:30.262458 2026] [:error] [pid 25329:tid 25412] [client 20.223.244.88:21786] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adt4QmdcIYsS8Iyaj12qzwAAAJU"]
[Sun Apr 12 18:47:30.795646 2026] [:error] [pid 25437:tid 25456] [client 20.223.244.88:25659] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adt4Qnf97wYZje1ep_M7ygAAANE"]
[Sun Apr 12 18:47:31.289821 2026] [:error] [pid 60280:tid 60293] [client 20.223.244.88:25608] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adt4Q3BlLnDOYuIykkhz4QAAAcs"]
[Sun Apr 12 18:47:31.803952 2026] [:error] [pid 25327:tid 25339] [client 20.223.244.88:19659] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "adt4Qy6h2tZEVJo9JFLRSAAAAAM"]
[Sun Apr 12 18:47:32.295060 2026] [:error] [pid 25328:tid 25372] [client 20.223.244.88:19947] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adt4RMxUaQZxT-e0YsAasgAAAEc"]
[Sun Apr 12 18:47:32.848059 2026] [:error] [pid 25328:tid 25364] [client 20.223.244.88:12809] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adt4RMxUaQZxT-e0YsAatAAAAEA"]
[Sun Apr 12 18:47:33.346308 2026] [:error] [pid 26599:tid 26626] [client 20.223.244.88:17909] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adt4RXG89LXoQbk_rwDJAQAAAVg"]
[Sun Apr 12 18:47:33.851901 2026] [:error] [pid 25328:tid 25408] [client 20.223.244.88:22884] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "adt4RcxUaQZxT-e0YsAaugAAAFg"]
[Sun Apr 12 18:47:34.376626 2026] [:error] [pid 25328:tid 25405] [client 20.223.244.88:26696] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adt4RsxUaQZxT-e0YsAavwAAAFc"]
[Sun Apr 12 18:47:34.897794 2026] [:error] [pid 26600:tid 26635] [client 20.223.244.88:26756] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adt4Ru1YwAZiXhQKLYoyjQAAAYY"]
[Sun Apr 12 18:47:35.391723 2026] [:error] [pid 60280:tid 60284] [client 20.223.244.88:20879] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adt4R3BlLnDOYuIykkhz6AAAAcI"]
[Sun Apr 12 18:47:35.885788 2026] [:error] [pid 26599:tid 26614] [client 20.223.244.88:20865] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "adt4R3G89LXoQbk_rwDJBAAAAUw"]
[Sun Apr 12 18:47:36.427148 2026] [:error] [pid 60280:tid 60301] [client 20.223.244.88:20896] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adt4SHBlLnDOYuIykkhz6wAAAdM"]
[Sun Apr 12 18:47:36.934094 2026] [:error] [pid 60280:tid 60283] [client 20.223.244.88:19666] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adt4SHBlLnDOYuIykkhz7gAAAcE"]
[Sun Apr 12 18:47:37.431824 2026] [:error] [pid 26600:tid 26630] [client 20.223.244.88:26689] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adt4Se1YwAZiXhQKLYoykgAAAYE"]
[Sun Apr 12 18:47:37.989494 2026] [:error] [pid 60280:tid 60303] [client 20.223.244.88:25645] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "adt4SXBlLnDOYuIykkhz9wAAAdU"]
[Sun Apr 12 18:47:38.513415 2026] [:error] [pid 26567:tid 26581] [client 20.223.244.88:25621] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adt4SnhRpg6ptWFyFx2mhwAAAQw"]
[Sun Apr 12 18:47:39.016531 2026] [:error] [pid 26599:tid 26621] [client 20.223.244.88:25629] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adt4S3G89LXoQbk_rwDJCAAAAVM"]
[Sun Apr 12 18:47:39.588415 2026] [:error] [pid 25328:tid 25379] [client 20.223.244.88:21784] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adt4S8xUaQZxT-e0YsAazQAAAEs"]
[Sun Apr 12 18:47:40.124098 2026] [:error] [pid 25328:tid 25375] [client 20.223.244.88:20882] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "adt4TMxUaQZxT-e0YsAa0gAAAEk"]
[Sun Apr 12 18:47:40.659919 2026] [:error] [pid 60280:tid 60300] [client 20.223.244.88:22861] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adt4THBlLnDOYuIykkh0AAAAAdI"]
[Sun Apr 12 18:47:41.177748 2026] [:error] [pid 26599:tid 26602] [client 20.223.244.88:17808] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adt4TXG89LXoQbk_rwDJCgAAAUA"]
[Sun Apr 12 18:47:41.737774 2026] [:error] [pid 26599:tid 26611] [client 20.223.244.88:12821] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adt4TXG89LXoQbk_rwDJCwAAAUk"]
[Sun Apr 12 18:47:42.264963 2026] [:error] [pid 26599:tid 26607] [client 20.223.244.88:12858] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "adt4TnG89LXoQbk_rwDJDwAAAUU"]
[Sun Apr 12 18:47:42.800996 2026] [:error] [pid 25328:tid 25405] [client 20.223.244.88:26638] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "adt4TsxUaQZxT-e0YsAa1gAAAFc"]
[Sun Apr 12 18:47:43.341192 2026] [:error] [pid 26600:tid 26639] [client 20.223.244.88:20967] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "adt4T-1YwAZiXhQKLYoynAAAAYo"]
[Sun Apr 12 18:47:43.872364 2026] [:error] [pid 25327:tid 25342] [client 20.223.244.88:26728] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "adt4Ty6h2tZEVJo9JFLRSwAAAAY"]
[Sun Apr 12 18:47:44.398502 2026] [:error] [pid 25327:tid 25359] [client 20.223.244.88:20891] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "adt4UC6h2tZEVJo9JFLRTAAAABc"]
[Sun Apr 12 18:47:44.946487 2026] [:error] [pid 25327:tid 25337] [client 20.223.244.88:17886] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "adt4UC6h2tZEVJo9JFLRTQAAAAE"]
[Sun Apr 12 18:47:45.484296 2026] [:error] [pid 25328:tid 25370] [client 20.223.244.88:15273] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "adt4UcxUaQZxT-e0YsAa2gAAAEY"]
[Sun Apr 12 18:47:46.086769 2026] [:error] [pid 26599:tid 26616] [client 20.223.244.88:26703] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "adt4UnG89LXoQbk_rwDJGQAAAU4"]
[Sun Apr 12 18:47:46.616525 2026] [:error] [pid 25327:tid 25340] [client 20.223.244.88:24874] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "adt4Ui6h2tZEVJo9JFLRUAAAAAQ"]
[Sun Apr 12 18:47:47.121516 2026] [:error] [pid 60280:tid 60284] [client 20.223.244.88:26740] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adt4U3BlLnDOYuIykkh0CwAAAcI"]
[Sun Apr 12 18:47:47.632074 2026] [:error] [pid 25328:tid 25373] [client 20.223.244.88:19409] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adt4U8xUaQZxT-e0YsAa4AAAAEg"]
[Sun Apr 12 18:47:48.144032 2026] [:error] [pid 60280:tid 60290] [client 20.223.244.88:22872] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adt4VHBlLnDOYuIykkh0EAAAAcg"]
[Sun Apr 12 18:47:48.660215 2026] [:error] [pid 60280:tid 60288] [client 20.223.244.88:22880] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "adt4VHBlLnDOYuIykkh0EgAAAcY"]
[Sun Apr 12 18:47:49.183792 2026] [:error] [pid 26600:tid 26649] [client 20.223.244.88:19704] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adt4Ve1YwAZiXhQKLYoyowAAAZQ"]
[Sun Apr 12 18:47:49.696825 2026] [:error] [pid 25328:tid 25365] [client 20.223.244.88:12854] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adt4VcxUaQZxT-e0YsAa4wAAAEE"]
[Sun Apr 12 18:47:50.222062 2026] [:error] [pid 26600:tid 26651] [client 20.223.244.88:17913] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adt4Vu1YwAZiXhQKLYoypwAAAZY"]
[Sun Apr 12 18:47:50.870790 2026] [:error] [pid 26600:tid 26629] [client 20.223.244.88:19677] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "adt4Vu1YwAZiXhQKLYoyrAAAAYA"]
[Sun Apr 12 18:47:51.493524 2026] [:error] [pid 25329:tid 25381] [client 20.223.244.88:15246] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adt4V2dcIYsS8Iyaj12q2AAAAIM"]
[Sun Apr 12 18:47:52.013856 2026] [:error] [pid 25329:tid 25378] [client 20.223.244.88:24889] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adt4WGdcIYsS8Iyaj12q3AAAAII"]
[Sun Apr 12 18:47:52.577509 2026] [:error] [pid 26567:tid 26580] [client 20.223.244.88:18596] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adt4WHhRpg6ptWFyFx2mkAAAAQs"]
[Sun Apr 12 18:47:53.122671 2026] [:error] [pid 26567:tid 26569] [client 20.223.244.88:26722] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "adt4WXhRpg6ptWFyFx2mkgAAAQA"]
[Sun Apr 12 18:47:53.653711 2026] [:error] [pid 25329:tid 25415] [client 20.223.244.88:12832] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adt4WWdcIYsS8Iyaj12q4QAAAJg"]
[Sun Apr 12 18:47:54.188799 2026] [:error] [pid 25327:tid 25342] [client 20.223.244.88:15291] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adt4Wi6h2tZEVJo9JFLRWQAAAAY"]
[Sun Apr 12 18:47:54.733464 2026] [:error] [pid 25437:tid 25458] [client 20.223.244.88:17879] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adt4Wnf97wYZje1ep_M71gAAANM"]
[Sun Apr 12 18:47:55.266842 2026] [:error] [pid 25328:tid 25380] [client 20.223.244.88:18590] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "adt4W8xUaQZxT-e0YsAa7AAAAEw"]
[Sun Apr 12 18:47:55.785336 2026] [:error] [pid 25328:tid 25372] [client 20.223.244.88:22897] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adt4W8xUaQZxT-e0YsAa9AAAAEc"]
[Sun Apr 12 18:47:56.386200 2026] [:error] [pid 25328:tid 25394] [client 20.223.244.88:25614] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adt4XMxUaQZxT-e0YsAa_wAAAFI"]
[Sun Apr 12 18:47:56.909227 2026] [:error] [pid 60280:tid 60283] [client 20.223.244.88:9839] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adt4XHBlLnDOYuIykkh0JAAAAcE"]
[Sun Apr 12 18:47:57.475592 2026] [:error] [pid 60280:tid 60300] [client 20.223.244.88:18871] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adt4XXBlLnDOYuIykkh0KQAAAdI"]
[Sun Apr 12 18:47:58.077880 2026] [:error] [pid 25327:tid 25338] [client 20.223.244.88:22887] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adt4Xi6h2tZEVJo9JFLRZgAAAAI"]
[Sun Apr 12 18:47:58.639332 2026] [:error] [pid 25327:tid 25350] [client 20.223.244.88:21779] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adt4Xi6h2tZEVJo9JFLRaAAAAA4"]
[Sun Apr 12 18:47:59.209301 2026] [:error] [pid 60280:tid 60282] [client 20.223.244.88:17862] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adt4X3BlLnDOYuIykkh0LgAAAcA"]
[Sun Apr 12 18:47:59.815012 2026] [:error] [pid 60280:tid 60283] [client 20.223.244.88:9913] [client 20.223.244.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "adt4X3BlLnDOYuIykkh0NAAAAcE"]
[Sun Apr 12 19:45:32.157478 2026] [:error] [pid 60280:tid 60300] [client 223.228.154.222:60770] [client 223.228.154.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.154.222, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aduF3HBlLnDOYuIykkieZAAAAdI"]
[Sun Apr 12 20:21:59.447825 2026] [:error] [pid 26600:tid 26632] [client 20.199.118.89:46805] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aduOZ-1YwAZiXhQKLYpL6AAAAYM"]
[Sun Apr 12 20:22:01.528326 2026] [:error] [pid 26599:tid 26602] [client 20.199.118.89:46817] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aduOaXG89LXoQbk_rwDYKgAAAUA"]
[Sun Apr 12 20:22:04.851895 2026] [:error] [pid 26599:tid 26624] [client 20.199.118.89:46801] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aduObHG89LXoQbk_rwDYLAAAAVY"]
[Sun Apr 12 20:22:07.979938 2026] [:error] [pid 60280:tid 60290] [client 20.199.118.89:39353] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aduOb3BlLnDOYuIykkizHAAAAcg"]
[Sun Apr 12 20:22:09.890703 2026] [:error] [pid 25437:tid 25440] [client 20.199.118.89:30491] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aduOcXf97wYZje1ep_NeDQAAAME"]
[Sun Apr 12 20:22:12.605268 2026] [:error] [pid 60280:tid 60293] [client 20.199.118.89:30507] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aduOdHBlLnDOYuIykkizJwAAAcs"]
[Sun Apr 12 20:22:15.998281 2026] [:error] [pid 25328:tid 25383] [client 20.199.118.89:40117] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aduOd8xUaQZxT-e0YsBGIQAAAE0"]
[Sun Apr 12 20:22:19.087689 2026] [:error] [pid 25437:tid 25452] [client 20.199.118.89:40068] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aduOe3f97wYZje1ep_NeJQAAAM0"]
[Sun Apr 12 20:22:20.596596 2026] [:error] [pid 25329:tid 25392] [client 20.199.118.89:39311] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aduOfGdcIYsS8Iyaj125UQAAAIk"]
[Sun Apr 12 20:22:21.720422 2026] [:error] [pid 25327:tid 25347] [client 20.199.118.89:46790] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aduOfS6h2tZEVJo9JFLjZQAAAAs"]
[Sun Apr 12 20:22:22.914737 2026] [:error] [pid 26600:tid 26641] [client 20.199.118.89:27567] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aduOfu1YwAZiXhQKLYpMAgAAAYw"]
[Sun Apr 12 20:22:25.201952 2026] [:error] [pid 26567:tid 26588] [client 20.199.118.89:40094] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aduOgXhRpg6ptWFyFx29RgAAARM"]
[Sun Apr 12 20:22:25.991759 2026] [:error] [pid 26599:tid 26610] [client 20.199.118.89:40064] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aduOgXG89LXoQbk_rwDYOwAAAUg"]
[Sun Apr 12 20:22:26.728404 2026] [:error] [pid 26599:tid 26626] [client 20.199.118.89:39325] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aduOgnG89LXoQbk_rwDYPgAAAVg"]
[Sun Apr 12 20:22:27.685110 2026] [:error] [pid 25328:tid 25379] [client 20.199.118.89:27537] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aduOg8xUaQZxT-e0YsBGJQAAAEs"]
[Sun Apr 12 20:22:28.883540 2026] [:error] [pid 60280:tid 60293] [client 20.199.118.89:40071] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aduOhHBlLnDOYuIykkizQAAAAcs"]
[Sun Apr 12 20:22:29.798095 2026] [:error] [pid 60280:tid 60289] [client 20.199.118.89:40113] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aduOhXBlLnDOYuIykkizQwAAAcc"]
[Sun Apr 12 20:22:30.902747 2026] [:error] [pid 60280:tid 60298] [client 20.199.118.89:40108] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aduOhnBlLnDOYuIykkizRwAAAdA"]
[Sun Apr 12 20:22:32.686843 2026] [:error] [pid 25328:tid 25377] [client 20.199.118.89:30509] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aduOiMxUaQZxT-e0YsBGOAAAAEo"]
[Sun Apr 12 20:22:33.464302 2026] [:error] [pid 60280:tid 60303] [client 20.199.118.89:43819] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aduOiXBlLnDOYuIykkizTAAAAdU"]
[Sun Apr 12 20:22:34.391004 2026] [:error] [pid 60280:tid 60282] [client 20.199.118.89:49672] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aduOinBlLnDOYuIykkizVAAAAcA"]
[Sun Apr 12 20:22:35.195301 2026] [:error] [pid 26600:tid 26649] [client 20.199.118.89:59918] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aduOi-1YwAZiXhQKLYpMCwAAAZQ"]
[Sun Apr 12 20:22:35.986542 2026] [:error] [pid 25328:tid 25377] [client 20.199.118.89:40092] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aduOi8xUaQZxT-e0YsBGPAAAAEo"]
[Sun Apr 12 20:22:36.922534 2026] [:error] [pid 26600:tid 26641] [client 20.199.118.89:49702] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aduOjO1YwAZiXhQKLYpMDQAAAYw"]
[Sun Apr 12 20:22:37.640562 2026] [:error] [pid 26600:tid 26634] [client 20.199.118.89:40076] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aduOje1YwAZiXhQKLYpMDwAAAYU"]
[Sun Apr 12 20:22:38.714439 2026] [:error] [pid 25328:tid 25373] [client 20.199.118.89:49727] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aduOjsxUaQZxT-e0YsBGQAAAAEg"]
[Sun Apr 12 20:22:39.456915 2026] [:error] [pid 26567:tid 26593] [client 20.199.118.89:59934] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aduOj3hRpg6ptWFyFx29SwAAARg"]
[Sun Apr 12 20:22:40.061945 2026] [:error] [pid 26567:tid 26573] [client 20.199.118.89:39298] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aduOkHhRpg6ptWFyFx29TgAAAQQ"]
[Sun Apr 12 20:22:40.601395 2026] [:error] [pid 60280:tid 60295] [client 20.199.118.89:59935] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aduOkHBlLnDOYuIykkizZwAAAc0"]
[Sun Apr 12 20:22:41.298193 2026] [:error] [pid 25328:tid 25396] [client 20.199.118.89:30476] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aduOkcxUaQZxT-e0YsBGQQAAAFM"]
[Sun Apr 12 20:22:42.015012 2026] [:error] [pid 26600:tid 26629] [client 20.199.118.89:59939] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aduOku1YwAZiXhQKLYpMHAAAAYA"]
[Sun Apr 12 20:22:43.259023 2026] [:error] [pid 25327:tid 25356] [client 20.199.118.89:59955] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aduOky6h2tZEVJo9JFLjbAAAABQ"]
[Sun Apr 12 20:22:43.765431 2026] [:error] [pid 26599:tid 26613] [client 20.199.118.89:30487] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aduOk3G89LXoQbk_rwDYSAAAAUs"]
[Sun Apr 12 20:22:45.785732 2026] [:error] [pid 25437:tid 25443] [client 20.199.118.89:40118] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aduOlXf97wYZje1ep_NeNQAAAMQ"]
[Sun Apr 12 20:22:47.415426 2026] [:error] [pid 25437:tid 25459] [client 20.199.118.89:40096] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aduOl3f97wYZje1ep_NePgAAANQ"]
[Sun Apr 12 20:22:48.697995 2026] [:error] [pid 25327:tid 25339] [client 20.199.118.89:40073] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aduOmC6h2tZEVJo9JFLjbgAAAAM"]
[Sun Apr 12 20:22:52.995537 2026] [:error] [pid 25437:tid 25458] [client 20.199.118.89:30511] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aduOnHf97wYZje1ep_NeQgAAANM"]
[Sun Apr 12 20:22:54.640180 2026] [:error] [pid 60280:tid 60283] [client 20.199.118.89:49706] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aduOnnBlLnDOYuIykkizcgAAAcE"]
[Sun Apr 12 20:22:56.353616 2026] [:error] [pid 25327:tid 25354] [client 20.199.118.89:59960] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aduOoC6h2tZEVJo9JFLjcAAAABI"]
[Sun Apr 12 20:22:58.489189 2026] [:error] [pid 25327:tid 25357] [client 20.199.118.89:39307] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aduOoi6h2tZEVJo9JFLjcwAAABU"]
[Sun Apr 12 20:23:07.512075 2026] [:error] [pid 26567:tid 26578] [client 20.199.118.89:39300] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aduOq3hRpg6ptWFyFx29agAAAQk"]
[Sun Apr 12 20:23:08.115377 2026] [:error] [pid 26600:tid 26642] [client 20.199.118.89:39299] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aduOrO1YwAZiXhQKLYpMKwAAAY0"]
[Sun Apr 12 20:23:08.873316 2026] [:error] [pid 25328:tid 25401] [client 20.199.118.89:65286] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aduOrMxUaQZxT-e0YsBGgAAAAFU"]
[Sun Apr 12 20:23:09.582344 2026] [:error] [pid 25327:tid 25341] [client 20.199.118.89:49690] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aduOrS6h2tZEVJo9JFLjeAAAAAU"]
[Sun Apr 12 20:23:10.697344 2026] [:error] [pid 25327:tid 25348] [client 20.199.118.89:30505] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aduOri6h2tZEVJo9JFLjfAAAAAw"]
[Sun Apr 12 20:23:11.502924 2026] [:error] [pid 25437:tid 25461] [client 20.199.118.89:40109] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aduOr3f97wYZje1ep_NeSwAAANY"]
[Sun Apr 12 20:23:12.208759 2026] [:error] [pid 26600:tid 26650] [client 20.199.118.89:65291] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aduOsO1YwAZiXhQKLYpMMAAAAZU"]
[Sun Apr 12 20:23:13.676685 2026] [:error] [pid 26600:tid 26630] [client 20.199.118.89:27533] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aduOse1YwAZiXhQKLYpMMgAAAYE"]
[Sun Apr 12 20:23:14.397223 2026] [:error] [pid 25329:tid 25378] [client 20.199.118.89:64174] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aduOsmdcIYsS8Iyaj125dwAAAII"]
[Sun Apr 12 20:23:15.066278 2026] [:error] [pid 26567:tid 26589] [client 20.199.118.89:40122] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aduOs3hRpg6ptWFyFx29bgAAARQ"]
[Sun Apr 12 20:23:16.767452 2026] [:error] [pid 60280:tid 60294] [client 20.199.118.89:40126] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aduOtHBlLnDOYuIykkizswAAAcw"]
[Sun Apr 12 20:23:17.777887 2026] [:error] [pid 26600:tid 26641] [client 20.199.118.89:64134] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aduOte1YwAZiXhQKLYpMNwAAAYw"]
[Sun Apr 12 20:23:19.063576 2026] [:error] [pid 26600:tid 26649] [client 20.199.118.89:65295] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aduOt-1YwAZiXhQKLYpMPwAAAZQ"]
[Sun Apr 12 20:23:20.142772 2026] [:error] [pid 25328:tid 25379] [client 20.199.118.89:65309] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aduOuMxUaQZxT-e0YsBGkwAAAEs"]
[Sun Apr 12 20:23:21.001311 2026] [:error] [pid 60280:tid 60294] [client 20.199.118.89:40099] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aduOuXBlLnDOYuIykkizugAAAcw"]
[Sun Apr 12 20:23:22.398975 2026] [:error] [pid 25328:tid 25380] [client 20.199.118.89:49710] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aduOusxUaQZxT-e0YsBGmQAAAEw"]
[Sun Apr 12 20:23:23.603043 2026] [:error] [pid 26567:tid 26573] [client 20.199.118.89:64185] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aduOu3hRpg6ptWFyFx29dAAAAQQ"]
[Sun Apr 12 20:23:24.976771 2026] [:error] [pid 25437:tid 25449] [client 20.199.118.89:65308] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aduOvHf97wYZje1ep_NeVwAAAMo"]
[Sun Apr 12 20:23:25.818918 2026] [:error] [pid 60280:tid 60305] [client 20.199.118.89:39330] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aduOvXBlLnDOYuIykkiz2AAAAdc"]
[Sun Apr 12 20:23:27.304805 2026] [:error] [pid 25328:tid 25370] [client 20.199.118.89:49724] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aduOv8xUaQZxT-e0YsBGtAAAAEY"]
[Sun Apr 12 20:23:28.239851 2026] [:error] [pid 25328:tid 25373] [client 20.199.118.89:64130] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aduOwMxUaQZxT-e0YsBGuQAAAEg"]
[Sun Apr 12 20:23:29.046084 2026] [:error] [pid 25327:tid 25358] [client 20.199.118.89:49678] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aduOwS6h2tZEVJo9JFLjiwAAABY"]
[Sun Apr 12 20:23:30.848119 2026] [:error] [pid 25437:tid 25463] [client 20.199.118.89:64173] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aduOwnf97wYZje1ep_NeXgAAANg"]
[Sun Apr 12 20:23:31.814183 2026] [:error] [pid 25437:tid 25448] [client 20.199.118.89:64183] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aduOw3f97wYZje1ep_NeYgAAAMk"]
[Sun Apr 12 20:23:32.696029 2026] [:error] [pid 26567:tid 26580] [client 20.199.118.89:30503] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "aduOxHhRpg6ptWFyFx29egAAAQs"]
[Sun Apr 12 20:23:33.753080 2026] [:error] [pid 26567:tid 26592] [client 20.199.118.89:64178] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "aduOxXhRpg6ptWFyFx29ewAAARc"]
[Sun Apr 12 20:23:34.872601 2026] [:error] [pid 25437:tid 25445] [client 20.199.118.89:49708] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "aduOxnf97wYZje1ep_NeZQAAAMY"]
[Sun Apr 12 20:23:35.883038 2026] [:error] [pid 25437:tid 25439] [client 20.199.118.89:40085] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "aduOx3f97wYZje1ep_NeZwAAAMA"]
[Sun Apr 12 20:23:36.449328 2026] [:error] [pid 26567:tid 26575] [client 20.199.118.89:59928] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aduOyHhRpg6ptWFyFx29gAAAAQY"]
[Sun Apr 12 20:23:37.245814 2026] [:error] [pid 26599:tid 26607] [client 20.199.118.89:64172] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aduOyXG89LXoQbk_rwDYYAAAAUU"]
[Sun Apr 12 20:23:40.022960 2026] [:error] [pid 25327:tid 25358] [client 20.199.118.89:64179] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aduOzC6h2tZEVJo9JFLjlgAAABY"]
[Sun Apr 12 20:23:41.988354 2026] [:error] [pid 26600:tid 26652] [client 20.199.118.89:49681] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aduOze1YwAZiXhQKLYpMTQAAAZc"]
[Sun Apr 12 20:23:42.874968 2026] [:error] [pid 25327:tid 25342] [client 20.199.118.89:39319] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "aduOzi6h2tZEVJo9JFLjmwAAAAY"]
[Sun Apr 12 20:23:44.071502 2026] [:error] [pid 25327:tid 25344] [client 20.199.118.89:59911] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "aduO0C6h2tZEVJo9JFLjnAAAAAg"]
[Sun Apr 12 20:23:46.186084 2026] [:error] [pid 60280:tid 60296] [client 20.199.118.89:40078] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "aduO0nBlLnDOYuIykkiz4QAAAc4"]
[Sun Apr 12 20:23:47.871482 2026] [:error] [pid 25437:tid 25454] [client 20.199.118.89:40069] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "aduO03f97wYZje1ep_NeegAAAM8"]
[Sun Apr 12 20:23:48.830528 2026] [:error] [pid 25327:tid 25346] [client 20.199.118.89:64151] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aduO1C6h2tZEVJo9JFLjowAAAAo"]
[Sun Apr 12 20:23:50.228203 2026] [:error] [pid 25437:tid 25448] [client 20.199.118.89:65319] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aduO1nf97wYZje1ep_NehAAAAMk"]
[Sun Apr 12 20:23:51.479702 2026] [:error] [pid 25328:tid 25375] [client 20.199.118.89:49671] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aduO18xUaQZxT-e0YsBG0QAAAEk"]
[Sun Apr 12 20:23:52.533004 2026] [:error] [pid 26567:tid 26589] [client 20.199.118.89:59924] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aduO2HhRpg6ptWFyFx29mwAAARQ"]
[Sun Apr 12 20:23:53.463071 2026] [:error] [pid 25437:tid 25457] [client 20.199.118.89:49666] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aduO2Xf97wYZje1ep_NeiQAAANI"]
[Sun Apr 12 20:23:54.482935 2026] [:error] [pid 25327:tid 25343] [client 20.199.118.89:59910] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aduO2i6h2tZEVJo9JFLjpgAAAAc"]
[Sun Apr 12 20:23:55.366947 2026] [:error] [pid 25329:tid 25376] [client 20.199.118.89:40079] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aduO22dcIYsS8Iyaj125jQAAAIE"]
[Sun Apr 12 20:23:55.943910 2026] [:error] [pid 26599:tid 26615] [client 20.199.118.89:40107] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aduO23G89LXoQbk_rwDYawAAAU0"]
[Sun Apr 12 20:23:56.492002 2026] [:error] [pid 25327:tid 25340] [client 20.199.118.89:49673] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aduO3C6h2tZEVJo9JFLjqAAAAAQ"]
[Sun Apr 12 20:23:57.071439 2026] [:error] [pid 25437:tid 25457] [client 20.199.118.89:30488] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aduO3Xf97wYZje1ep_NekQAAANI"]
[Sun Apr 12 20:23:57.746675 2026] [:error] [pid 25437:tid 25446] [client 20.199.118.89:49685] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aduO3Xf97wYZje1ep_NekgAAAMc"]
[Sun Apr 12 20:23:58.975519 2026] [:error] [pid 25328:tid 25398] [client 20.199.118.89:64137] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aduO3sxUaQZxT-e0YsBG3QAAAFQ"]
[Sun Apr 12 20:24:00.210775 2026] [:error] [pid 26567:tid 26590] [client 20.199.118.89:49699] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aduO4HhRpg6ptWFyFx29owAAARU"]
[Sun Apr 12 20:24:01.637355 2026] [:error] [pid 26567:tid 26579] [client 20.199.118.89:49674] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aduO4XhRpg6ptWFyFx29pQAAAQo"]
[Sun Apr 12 20:24:02.841083 2026] [:error] [pid 25437:tid 25455] [client 20.199.118.89:64166] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aduO4nf97wYZje1ep_NenwAAANA"]
[Sun Apr 12 20:24:04.428740 2026] [:error] [pid 25437:tid 25446] [client 20.199.118.89:64145] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aduO5Hf97wYZje1ep_NeqAAAAMc"]
[Sun Apr 12 20:24:06.521178 2026] [:error] [pid 26600:tid 26652] [client 20.199.118.89:40093] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aduO5u1YwAZiXhQKLYpMVwAAAZc"]
[Sun Apr 12 20:24:21.763471 2026] [:error] [pid 26567:tid 26574] [client 20.199.118.89:65331] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aduO9XhRpg6ptWFyFx29wAAAAQU"]
[Sun Apr 12 20:24:23.550435 2026] [:error] [pid 25328:tid 25379] [client 20.199.118.89:49689] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aduO98xUaQZxT-e0YsBHBwAAAEs"]
[Sun Apr 12 20:24:24.676623 2026] [:error] [pid 25328:tid 25396] [client 20.199.118.89:64154] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aduO-MxUaQZxT-e0YsBHCwAAAFM"]
[Sun Apr 12 20:24:25.693301 2026] [:error] [pid 25327:tid 25341] [client 20.199.118.89:64139] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aduO-S6h2tZEVJo9JFLjtgAAAAU"]
[Sun Apr 12 20:24:26.700437 2026] [:error] [pid 26567:tid 26581] [client 20.199.118.89:64180] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aduO-nhRpg6ptWFyFx29yAAAAQw"]
[Sun Apr 12 20:24:27.378426 2026] [:error] [pid 25327:tid 25347] [client 20.199.118.89:40075] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aduO-y6h2tZEVJo9JFLjvQAAAAs"]
[Sun Apr 12 20:24:29.981439 2026] [:error] [pid 25328:tid 25367] [client 20.199.118.89:49712] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aduO_cxUaQZxT-e0YsBHHgAAAEM"]
[Sun Apr 12 20:24:31.514555 2026] [:error] [pid 60280:tid 60292] [client 20.199.118.89:59951] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aduO_3BlLnDOYuIykki0GAAAAco"]
[Sun Apr 12 20:24:33.213377 2026] [:error] [pid 26600:tid 26646] [client 20.199.118.89:64170] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aduPAe1YwAZiXhQKLYpMbwAAAZE"]
[Sun Apr 12 20:24:34.950296 2026] [:error] [pid 25437:tid 25445] [client 20.199.118.89:59908] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aduPAnf97wYZje1ep_NezQAAAMY"]
[Sun Apr 12 20:24:35.926384 2026] [:error] [pid 60280:tid 60306] [client 20.199.118.89:65322] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aduPA3BlLnDOYuIykki0GQAAAdg"]
[Sun Apr 12 20:24:37.093739 2026] [:error] [pid 26600:tid 26645] [client 20.199.118.89:64161] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aduPBe1YwAZiXhQKLYpMdwAAAZA"]
[Sun Apr 12 20:24:38.977929 2026] [:error] [pid 60280:tid 60289] [client 20.199.118.89:39344] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "aduPBnBlLnDOYuIykki0IgAAAcc"]
[Sun Apr 12 20:24:41.148188 2026] [:error] [pid 26600:tid 26639] [client 20.199.118.89:39313] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "aduPCe1YwAZiXhQKLYpMewAAAYo"]
[Sun Apr 12 20:24:42.065474 2026] [:error] [pid 26600:tid 26630] [client 20.199.118.89:65339] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "aduPCu1YwAZiXhQKLYpMfgAAAYE"]
[Sun Apr 12 20:24:43.180933 2026] [:error] [pid 60280:tid 60294] [client 20.199.118.89:65313] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "aduPC3BlLnDOYuIykki0KwAAAcw"]
[Sun Apr 12 20:24:44.636740 2026] [:error] [pid 26599:tid 26616] [client 20.199.118.89:64177] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "aduPDHG89LXoQbk_rwDYeAAAAU4"]
[Sun Apr 12 20:24:47.771764 2026] [:error] [pid 60280:tid 60285] [client 20.199.118.89:59930] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "aduPD3BlLnDOYuIykki0MwAAAcM"]
[Sun Apr 12 20:24:49.077950 2026] [:error] [pid 25328:tid 25401] [client 20.199.118.89:64189] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "aduPEcxUaQZxT-e0YsBHMAAAAFU"]
[Sun Apr 12 20:24:51.533962 2026] [:error] [pid 26600:tid 26653] [client 20.199.118.89:59932] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "aduPE-1YwAZiXhQKLYpMhwAAAZg"]
[Sun Apr 12 20:24:53.761591 2026] [:error] [pid 25437:tid 25443] [client 20.199.118.89:49700] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aduPFXf97wYZje1ep_Ne3AAAAMQ"]
[Sun Apr 12 20:24:54.505682 2026] [:error] [pid 26567:tid 26580] [client 20.199.118.89:59956] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aduPFnhRpg6ptWFyFx294gAAAQs"]
[Sun Apr 12 20:24:55.214680 2026] [:error] [pid 26600:tid 26631] [client 20.199.118.89:46794] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aduPF-1YwAZiXhQKLYpMjAAAAYI"]
[Sun Apr 12 20:24:55.896463 2026] [:error] [pid 25437:tid 25461] [client 20.199.118.89:65304] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aduPF3f97wYZje1ep_Ne5AAAANY"]
[Sun Apr 12 20:24:56.646875 2026] [:error] [pid 25437:tid 25445] [client 20.199.118.89:49693] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aduPGHf97wYZje1ep_Ne6gAAAMY"]
[Sun Apr 12 20:24:57.172667 2026] [:error] [pid 26567:tid 26585] [client 20.199.118.89:40119] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aduPGXhRpg6ptWFyFx295AAAARA"]
[Sun Apr 12 20:24:57.751275 2026] [:error] [pid 25328:tid 25370] [client 20.199.118.89:64171] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aduPGcxUaQZxT-e0YsBHRAAAAEY"]
[Sun Apr 12 20:24:58.305929 2026] [:error] [pid 26600:tid 26646] [client 20.199.118.89:49716] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aduPGu1YwAZiXhQKLYpMjgAAAZE"]
[Sun Apr 12 20:24:58.914733 2026] [:error] [pid 60280:tid 60286] [client 20.199.118.89:39352] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aduPGnBlLnDOYuIykki0OQAAAcQ"]
[Sun Apr 12 20:24:59.612119 2026] [:error] [pid 26600:tid 26643] [client 20.199.118.89:59940] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aduPG-1YwAZiXhQKLYpMjwAAAY4"]
[Sun Apr 12 20:25:00.189222 2026] [:error] [pid 60280:tid 60297] [client 20.199.118.89:59941] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aduPHHBlLnDOYuIykki0PAAAAc8"]
[Sun Apr 12 20:25:00.988515 2026] [:error] [pid 60280:tid 60289] [client 20.199.118.89:39359] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aduPHHBlLnDOYuIykki0PwAAAcc"]
[Sun Apr 12 20:25:01.551318 2026] [:error] [pid 25327:tid 25358] [client 20.199.118.89:64143] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aduPHS6h2tZEVJo9JFLj2gAAABY"]
[Sun Apr 12 20:25:02.283566 2026] [:error] [pid 25328:tid 25401] [client 20.199.118.89:64168] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aduPHsxUaQZxT-e0YsBHSgAAAFU"]
[Sun Apr 12 20:25:02.832109 2026] [:error] [pid 26600:tid 26651] [client 20.199.118.89:65311] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aduPHu1YwAZiXhQKLYpMlQAAAZY"]
[Sun Apr 12 20:25:03.513897 2026] [:error] [pid 60280:tid 60305] [client 20.199.118.89:64165] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aduPH3BlLnDOYuIykki0RwAAAdc"]
[Sun Apr 12 20:25:04.258531 2026] [:error] [pid 60280:tid 60285] [client 20.199.118.89:65330] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aduPIHBlLnDOYuIykki0SwAAAcM"]
[Sun Apr 12 20:25:04.812866 2026] [:error] [pid 60280:tid 60306] [client 20.199.118.89:59924] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aduPIHBlLnDOYuIykki0TgAAAdg"]
[Sun Apr 12 20:25:05.398457 2026] [:error] [pid 25437:tid 25451] [client 20.199.118.89:65343] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aduPIXf97wYZje1ep_Ne8QAAAMw"]
[Sun Apr 12 20:25:06.054860 2026] [:error] [pid 26567:tid 26588] [client 20.199.118.89:65340] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aduPInhRpg6ptWFyFx296wAAARM"]
[Sun Apr 12 20:25:06.707991 2026] [:error] [pid 25327:tid 25343] [client 20.199.118.89:64164] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aduPIi6h2tZEVJo9JFLj3wAAAAc"]
[Sun Apr 12 20:25:07.545436 2026] [:error] [pid 60280:tid 60291] [client 20.199.118.89:59946] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aduPI3BlLnDOYuIykki0VQAAAck"]
[Sun Apr 12 20:25:08.218624 2026] [:error] [pid 60280:tid 60284] [client 20.199.118.89:65300] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aduPJHBlLnDOYuIykki0VwAAAcI"]
[Sun Apr 12 20:25:08.829937 2026] [:error] [pid 26600:tid 26649] [client 20.199.118.89:59965] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aduPJO1YwAZiXhQKLYpMmwAAAZQ"]
[Sun Apr 12 20:25:09.564936 2026] [:error] [pid 60280:tid 60299] [client 20.199.118.89:40100] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aduPJXBlLnDOYuIykki0YAAAAdE"]
[Sun Apr 12 20:25:10.936940 2026] [:error] [pid 60280:tid 60293] [client 20.199.118.89:43797] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aduPJnBlLnDOYuIykki0YwAAAcs"]
[Sun Apr 12 20:25:11.872397 2026] [:error] [pid 25437:tid 25463] [client 20.199.118.89:40116] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aduPJ3f97wYZje1ep_Ne9wAAANg"]
[Sun Apr 12 20:25:12.661476 2026] [:error] [pid 60280:tid 60286] [client 20.199.118.89:65296] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aduPKHBlLnDOYuIykki0aAAAAcQ"]
[Sun Apr 12 20:25:13.475298 2026] [:error] [pid 25328:tid 25396] [client 20.199.118.89:49725] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aduPKcxUaQZxT-e0YsBHVAAAAFM"]
[Sun Apr 12 20:25:14.218424 2026] [:error] [pid 60280:tid 60284] [client 20.199.118.89:49717] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aduPKnBlLnDOYuIykki0bAAAAcI"]
[Sun Apr 12 20:25:15.465988 2026] [:error] [pid 60280:tid 60304] [client 20.199.118.89:64142] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aduPK3BlLnDOYuIykki0bgAAAdY"]
[Sun Apr 12 20:25:16.161507 2026] [:error] [pid 25327:tid 25360] [client 20.199.118.89:59938] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aduPLC6h2tZEVJo9JFLj5gAAABg"]
[Sun Apr 12 20:25:16.945115 2026] [:error] [pid 25437:tid 25452] [client 20.199.118.89:40067] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aduPLHf97wYZje1ep_Ne_QAAAM0"]
[Sun Apr 12 20:25:19.434473 2026] [:error] [pid 25328:tid 25369] [client 20.199.118.89:65284] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aduPL8xUaQZxT-e0YsBHXQAAAEU"]
[Sun Apr 12 20:25:20.441618 2026] [:error] [pid 60280:tid 60292] [client 20.199.118.89:40102] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aduPMHBlLnDOYuIykki0iQAAAco"]
[Sun Apr 12 20:25:29.558600 2026] [:error] [pid 25437:tid 25448] [client 20.199.118.89:64153] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aduPOXf97wYZje1ep_NfHQAAAMk"]
[Sun Apr 12 20:25:30.909726 2026] [:error] [pid 25329:tid 25409] [client 20.199.118.89:49669] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aduPOmdcIYsS8Iyaj125wAAAAJM"]
[Sun Apr 12 20:25:33.771224 2026] [:error] [pid 25437:tid 25458] [client 20.199.118.89:64146] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aduPPXf97wYZje1ep_NfHwAAANM"]
[Sun Apr 12 20:25:35.159297 2026] [:error] [pid 60280:tid 60299] [client 20.199.118.89:46841] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aduPP3BlLnDOYuIykki0swAAAdE"]
[Sun Apr 12 20:25:37.347591 2026] [:error] [pid 26567:tid 26590] [client 20.199.118.89:27559] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aduPQXhRpg6ptWFyFx29_gAAARU"]
[Sun Apr 12 20:25:38.888149 2026] [:error] [pid 25328:tid 25391] [client 20.199.118.89:59912] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aduPQsxUaQZxT-e0YsBHgAAAAFE"]
[Sun Apr 12 20:25:40.997712 2026] [:error] [pid 25329:tid 25411] [client 20.199.118.89:59966] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aduPRGdcIYsS8Iyaj125yQAAAJQ"]
[Sun Apr 12 20:25:41.819814 2026] [:error] [pid 25327:tid 25357] [client 20.199.118.89:59927] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aduPRS6h2tZEVJo9JFLj8QAAABU"]
[Sun Apr 12 20:25:43.728007 2026] [:error] [pid 25329:tid 25378] [client 20.199.118.89:49723] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aduPR2dcIYsS8Iyaj125zQAAAII"]
[Sun Apr 12 20:25:44.999740 2026] [:error] [pid 25437:tid 25458] [client 20.199.118.89:40120] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aduPSHf97wYZje1ep_NfLAAAANM"]
[Sun Apr 12 20:25:46.675044 2026] [:error] [pid 25327:tid 25339] [client 20.199.118.89:39341] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aduPSi6h2tZEVJo9JFLj-AAAAAM"]
[Sun Apr 12 20:25:48.787850 2026] [:error] [pid 25437:tid 25452] [client 20.199.118.89:40112] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aduPTHf97wYZje1ep_NfNgAAAM0"]
[Sun Apr 12 20:25:50.277659 2026] [:error] [pid 25327:tid 25343] [client 20.199.118.89:39296] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aduPTi6h2tZEVJo9JFLj_QAAAAc"]
[Sun Apr 12 20:25:51.333761 2026] [:error] [pid 26599:tid 26622] [client 20.199.118.89:65282] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aduPT3G89LXoQbk_rwDYoAAAAVQ"]
[Sun Apr 12 20:25:52.353378 2026] [:error] [pid 25328:tid 25389] [client 20.199.118.89:40123] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aduPUMxUaQZxT-e0YsBHjgAAAFA"]
[Sun Apr 12 20:25:54.427356 2026] [:error] [pid 25327:tid 25348] [client 20.199.118.89:59925] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aduPUi6h2tZEVJo9JFLj_wAAAAw"]
[Sun Apr 12 20:25:55.188832 2026] [:error] [pid 26600:tid 26642] [client 20.199.118.89:49722] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aduPU-1YwAZiXhQKLYpMwgAAAY0"]
[Sun Apr 12 20:25:56.525561 2026] [:error] [pid 26567:tid 26587] [client 20.199.118.89:40087] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aduPVHhRpg6ptWFyFx2-BgAAARI"]
[Sun Apr 12 20:25:57.374860 2026] [:error] [pid 25437:tid 25457] [client 20.199.118.89:49694] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aduPVXf97wYZje1ep_NfRgAAANI"]
[Sun Apr 12 20:25:58.306857 2026] [:error] [pid 26600:tid 26651] [client 20.199.118.89:49726] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aduPVu1YwAZiXhQKLYpMyAAAAZY"]
[Sun Apr 12 20:25:59.142252 2026] [:error] [pid 26600:tid 26637] [client 20.199.118.89:40095] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aduPV-1YwAZiXhQKLYpMygAAAYg"]
[Sun Apr 12 20:26:00.657231 2026] [:error] [pid 26600:tid 26642] [client 20.199.118.89:49691] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aduPWO1YwAZiXhQKLYpM0QAAAY0"]
[Sun Apr 12 20:26:02.239155 2026] [:error] [pid 26600:tid 26631] [client 20.199.118.89:40111] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aduPWu1YwAZiXhQKLYpM0wAAAYI"]
[Sun Apr 12 20:26:03.289808 2026] [:error] [pid 26567:tid 26572] [client 20.199.118.89:40097] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aduPW3hRpg6ptWFyFx2-DgAAAQM"]
[Sun Apr 12 20:26:04.127812 2026] [:error] [pid 26600:tid 26629] [client 20.199.118.89:59933] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aduPXO1YwAZiXhQKLYpM2AAAAYA"]
[Sun Apr 12 20:26:04.946702 2026] [:error] [pid 26600:tid 26641] [client 20.199.118.89:40086] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aduPXO1YwAZiXhQKLYpM2gAAAYw"]
[Sun Apr 12 20:26:05.666777 2026] [:error] [pid 26599:tid 26605] [client 20.199.118.89:27557] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aduPXXG89LXoQbk_rwDYqQAAAUM"]
[Sun Apr 12 20:26:06.634413 2026] [:error] [pid 25329:tid 25397] [client 20.199.118.89:40072] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aduPXmdcIYsS8Iyaj1253gAAAIw"]
[Sun Apr 12 20:26:07.330033 2026] [:error] [pid 25329:tid 25384] [client 20.199.118.89:39340] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aduPX2dcIYsS8Iyaj1254QAAAIU"]
[Sun Apr 12 20:26:08.422271 2026] [:error] [pid 25329:tid 25404] [client 20.199.118.89:49720] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aduPYGdcIYsS8Iyaj1255QAAAJA"]
[Sun Apr 12 20:26:09.542510 2026] [:error] [pid 25329:tid 25392] [client 20.199.118.89:49697] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aduPYWdcIYsS8Iyaj1256gAAAIk"]
[Sun Apr 12 20:26:10.442717 2026] [:error] [pid 25437:tid 25439] [client 20.199.118.89:49707] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aduPYnf97wYZje1ep_NfUAAAAMA"]
[Sun Apr 12 20:26:11.650481 2026] [:error] [pid 26600:tid 26651] [client 20.199.118.89:46813] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aduPY-1YwAZiXhQKLYpM4gAAAZY"]
[Sun Apr 12 20:26:12.532808 2026] [:error] [pid 60280:tid 60282] [client 20.199.118.89:30464] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aduPZHBlLnDOYuIykki02wAAAcA"]
[Sun Apr 12 20:26:14.290763 2026] [:error] [pid 26600:tid 26634] [client 20.199.118.89:40080] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aduPZu1YwAZiXhQKLYpM5wAAAYU"]
[Sun Apr 12 20:26:15.867842 2026] [:error] [pid 26600:tid 26638] [client 20.199.118.89:49705] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aduPZ-1YwAZiXhQKLYpM7QAAAYk"]
[Sun Apr 12 20:26:16.777497 2026] [:error] [pid 25327:tid 25358] [client 20.199.118.89:40104] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aduPaC6h2tZEVJo9JFLkGwAAABY"]
[Sun Apr 12 20:26:17.355027 2026] [:error] [pid 60280:tid 60285] [client 20.199.118.89:65289] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aduPaXBlLnDOYuIykki06gAAAcM"]
[Sun Apr 12 20:26:18.264448 2026] [:error] [pid 25328:tid 25396] [client 20.199.118.89:30499] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aduPasxUaQZxT-e0YsBHrQAAAFM"]
[Sun Apr 12 20:26:20.323450 2026] [:error] [pid 25328:tid 25383] [client 20.199.118.89:40090] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aduPbMxUaQZxT-e0YsBHtAAAAE0"]
[Sun Apr 12 20:26:21.025429 2026] [:error] [pid 25328:tid 25398] [client 20.199.118.89:40121] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aduPbcxUaQZxT-e0YsBHuAAAAFQ"]
[Sun Apr 12 20:26:22.133879 2026] [:error] [pid 25328:tid 25385] [client 20.199.118.89:40088] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aduPbsxUaQZxT-e0YsBHwAAAAE4"]
[Sun Apr 12 20:26:23.257527 2026] [:error] [pid 60280:tid 60299] [client 20.199.118.89:43820] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aduPb3BlLnDOYuIykki1PQAAAdE"]
[Sun Apr 12 20:26:25.746336 2026] [:error] [pid 25328:tid 25398] [client 20.199.118.89:64188] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aduPccxUaQZxT-e0YsBHwwAAAFQ"]
[Sun Apr 12 20:26:27.822678 2026] [:error] [pid 25328:tid 25366] [client 20.199.118.89:49679] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aduPc8xUaQZxT-e0YsBHywAAAEI"]
[Sun Apr 12 20:26:36.859695 2026] [:error] [pid 26599:tid 26614] [client 20.199.118.89:59907] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aduPfHG89LXoQbk_rwDYyAAAAUw"]
[Sun Apr 12 20:26:37.657990 2026] [:error] [pid 60280:tid 60304] [client 20.199.118.89:65334] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aduPfXBlLnDOYuIykki1WwAAAdY"]
[Sun Apr 12 20:26:38.458995 2026] [:error] [pid 60280:tid 60285] [client 20.199.118.89:64149] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aduPfnBlLnDOYuIykki1YQAAAcM"]
[Sun Apr 12 20:26:39.465448 2026] [:error] [pid 25437:tid 25449] [client 20.199.118.89:59915] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aduPf3f97wYZje1ep_NfZgAAAMo"]
[Sun Apr 12 20:26:41.146948 2026] [:error] [pid 25437:tid 25442] [client 20.199.118.89:59904] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aduPgXf97wYZje1ep_NfaQAAAMM"]
[Sun Apr 12 20:26:44.301597 2026] [:error] [pid 25328:tid 25365] [client 20.199.118.89:40098] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aduPhMxUaQZxT-e0YsBH6wAAAEE"]
[Sun Apr 12 20:26:45.902531 2026] [:error] [pid 25437:tid 25444] [client 20.199.118.89:43824] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aduPhXf97wYZje1ep_NfbQAAAMU"]
[Sun Apr 12 20:26:47.583347 2026] [:error] [pid 60280:tid 60289] [client 20.199.118.89:64159] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aduPh3BlLnDOYuIykki1lgAAAcc"]
[Sun Apr 12 20:26:48.865698 2026] [:error] [pid 26599:tid 26615] [client 20.199.118.89:40089] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aduPiHG89LXoQbk_rwDYywAAAU0"]
[Sun Apr 12 20:26:50.647892 2026] [:error] [pid 60280:tid 60300] [client 20.199.118.89:40110] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aduPinBlLnDOYuIykki1ogAAAdI"]
[Sun Apr 12 20:26:52.403416 2026] [:error] [pid 60280:tid 60305] [client 20.199.118.89:40065] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aduPjHBlLnDOYuIykki1pgAAAdc"]
[Sun Apr 12 20:26:53.781368 2026] [:error] [pid 25329:tid 25390] [client 20.199.118.89:64144] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aduPjWdcIYsS8Iyaj126AgAAAIg"]
[Sun Apr 12 20:26:55.142682 2026] [:error] [pid 25437:tid 25449] [client 20.199.118.89:65288] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aduPj3f97wYZje1ep_NfeQAAAMo"]
[Sun Apr 12 20:26:56.396654 2026] [:error] [pid 25327:tid 25343] [client 20.199.118.89:46792] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aduPkC6h2tZEVJo9JFLkMQAAAAc"]
[Sun Apr 12 20:26:57.883322 2026] [:error] [pid 25437:tid 25457] [client 20.199.118.89:59935] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aduPkXf97wYZje1ep_NfgAAAANI"]
[Sun Apr 12 20:26:58.703091 2026] [:error] [pid 25328:tid 25394] [client 20.199.118.89:39303] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aduPksxUaQZxT-e0YsBIBQAAAFI"]
[Sun Apr 12 20:26:59.563850 2026] [:error] [pid 25328:tid 25368] [client 20.199.118.89:39333] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aduPk8xUaQZxT-e0YsBICgAAAEQ"]
[Sun Apr 12 20:27:01.813448 2026] [:error] [pid 60280:tid 60306] [client 20.199.118.89:49686] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aduPlXBlLnDOYuIykki1wQAAAdg"]
[Sun Apr 12 20:27:02.984142 2026] [:error] [pid 26599:tid 26610] [client 20.199.118.89:64187] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aduPlnG89LXoQbk_rwDYzwAAAUg"]
[Sun Apr 12 20:27:04.120054 2026] [:error] [pid 25329:tid 25409] [client 20.199.118.89:49678] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aduPmGdcIYsS8Iyaj126CAAAAJM"]
[Sun Apr 12 20:27:06.081058 2026] [:error] [pid 25437:tid 25457] [client 20.199.118.89:39315] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aduPmnf97wYZje1ep_NfjAAAANI"]
[Sun Apr 12 20:27:07.198338 2026] [:error] [pid 25437:tid 25456] [client 20.199.118.89:51869] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aduPm3f97wYZje1ep_NflQAAANE"]
[Sun Apr 12 20:27:08.306110 2026] [:error] [pid 25437:tid 25450] [client 20.199.118.89:40076] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aduPnHf97wYZje1ep_NfmQAAAMs"]
[Sun Apr 12 20:27:09.714379 2026] [:error] [pid 25327:tid 25358] [client 20.199.118.89:64148] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aduPnS6h2tZEVJo9JFLkPAAAABY"]
[Sun Apr 12 20:27:11.232203 2026] [:error] [pid 25329:tid 25374] [client 20.199.118.89:40124] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aduPn2dcIYsS8Iyaj126CwAAAIA"]
[Sun Apr 12 20:27:12.915315 2026] [:error] [pid 60280:tid 60291] [client 20.199.118.89:49719] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aduPoHBlLnDOYuIykki10wAAAck"]
[Sun Apr 12 20:27:14.797569 2026] [:error] [pid 25329:tid 25404] [client 20.199.118.89:65283] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aduPomdcIYsS8Iyaj126DgAAAJA"]
[Sun Apr 12 20:27:16.643088 2026] [:error] [pid 60280:tid 60287] [client 20.199.118.89:52290] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aduPpHBlLnDOYuIykki12QAAAcU"]
[Sun Apr 12 20:27:18.009140 2026] [:error] [pid 25328:tid 25373] [client 20.199.118.89:49683] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aduPpsxUaQZxT-e0YsBIIgAAAEg"]
[Sun Apr 12 20:27:18.914286 2026] [:error] [pid 25328:tid 25377] [client 20.199.118.89:46828] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aduPpsxUaQZxT-e0YsBIIwAAAEo"]
[Sun Apr 12 20:27:20.774782 2026] [:error] [pid 60280:tid 60282] [client 20.199.118.89:59923] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aduPqHBlLnDOYuIykki1-gAAAcA"]
[Sun Apr 12 20:27:21.642963 2026] [:error] [pid 25327:tid 25338] [client 20.199.118.89:59944] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aduPqS6h2tZEVJo9JFLkQAAAAAI"]
[Sun Apr 12 20:27:22.630453 2026] [:error] [pid 26599:tid 26610] [client 20.199.118.89:64169] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aduPqnG89LXoQbk_rwDY2AAAAUg"]
[Sun Apr 12 20:27:23.666785 2026] [:error] [pid 26567:tid 26576] [client 20.199.118.89:40117] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aduPq3hRpg6ptWFyFx2-MwAAAQc"]
[Sun Apr 12 20:27:24.947169 2026] [:error] [pid 26599:tid 26609] [client 20.199.118.89:49677] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aduPrHG89LXoQbk_rwDY2wAAAUc"]
[Sun Apr 12 20:27:25.584883 2026] [:error] [pid 26567:tid 26582] [client 20.199.118.89:46820] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aduPrXhRpg6ptWFyFx2-NwAAAQ0"]
[Sun Apr 12 20:27:26.330783 2026] [:error] [pid 25328:tid 25391] [client 20.199.118.89:39343] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aduPrsxUaQZxT-e0YsBIKwAAAFE"]
[Sun Apr 12 20:27:27.576141 2026] [:error] [pid 60280:tid 60288] [client 20.199.118.89:65342] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aduPr3BlLnDOYuIykki2GAAAAcY"]
[Sun Apr 12 20:27:28.674052 2026] [:error] [pid 25329:tid 25411] [client 20.199.118.89:59922] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aduPsGdcIYsS8Iyaj126EgAAAJQ"]
[Sun Apr 12 20:27:29.652912 2026] [:error] [pid 26567:tid 26573] [client 20.199.118.89:59914] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aduPsXhRpg6ptWFyFx2-OgAAAQQ"]
[Sun Apr 12 20:27:31.125984 2026] [:error] [pid 60280:tid 60293] [client 20.199.118.89:65303] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aduPs3BlLnDOYuIykki2JgAAAcs"]
[Sun Apr 12 20:27:31.719677 2026] [:error] [pid 60280:tid 60295] [client 20.199.118.89:65335] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aduPs3BlLnDOYuIykki2KQAAAc0"]
[Sun Apr 12 20:27:32.427061 2026] [:error] [pid 60280:tid 60304] [client 20.199.118.89:49664] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aduPtHBlLnDOYuIykki2LQAAAdY"]
[Sun Apr 12 20:27:33.099095 2026] [:error] [pid 25329:tid 25402] [client 20.199.118.89:39297] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aduPtWdcIYsS8Iyaj126FgAAAI8"]
[Sun Apr 12 20:27:33.766822 2026] [:error] [pid 26599:tid 26606] [client 20.199.118.89:30486] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aduPtXG89LXoQbk_rwDY5wAAAUQ"]
[Sun Apr 12 20:27:34.458613 2026] [:error] [pid 25437:tid 25451] [client 20.199.118.89:59909] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aduPtnf97wYZje1ep_NfvQAAAMw"]
[Sun Apr 12 20:27:35.708401 2026] [:error] [pid 25328:tid 25375] [client 20.199.118.89:30482] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aduPt8xUaQZxT-e0YsBIPAAAAEk"]
[Sun Apr 12 20:27:39.225299 2026] [:error] [pid 25327:tid 25344] [client 20.199.118.89:49704] [client 20.199.118.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aduPuy6h2tZEVJo9JFLkUAAAAAg"]
[Sun Apr 12 20:27:45.473405 2026] [:error] [pid 25329:tid 25397] [client 20.199.118.89:59918] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aduPwWdcIYsS8Iyaj126JwAAAIw"]
[Sun Apr 12 20:27:47.448690 2026] [:error] [pid 25328:tid 25379] [client 20.199.118.89:59931] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aduPw8xUaQZxT-e0YsBIXAAAAEs"]
[Sun Apr 12 20:27:48.533505 2026] [:error] [pid 60280:tid 60284] [client 20.199.118.89:65309] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aduPxHBlLnDOYuIykki2aAAAAcI"]
[Sun Apr 12 20:27:49.570721 2026] [:error] [pid 26599:tid 26617] [client 20.199.118.89:64129] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aduPxXG89LXoQbk_rwDY8gAAAU8"]
[Sun Apr 12 20:27:50.544757 2026] [:error] [pid 60280:tid 60294] [client 20.199.118.89:39299] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aduPxnBlLnDOYuIykki2bwAAAcw"]
[Sun Apr 12 20:27:52.304282 2026] [:error] [pid 26599:tid 26610] [client 20.199.118.89:46795] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aduPyHG89LXoQbk_rwDY-wAAAUg"]
[Sun Apr 12 20:27:53.536313 2026] [:error] [pid 26567:tid 26581] [client 20.199.118.89:59911] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aduPyXhRpg6ptWFyFx2-VgAAAQw"]
[Sun Apr 12 20:27:54.866036 2026] [:error] [pid 26567:tid 26593] [client 20.199.118.89:30513] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aduPynhRpg6ptWFyFx2-XAAAARg"]
[Sun Apr 12 20:27:56.011598 2026] [:error] [pid 25328:tid 25368] [client 20.199.118.89:64158] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aduPzMxUaQZxT-e0YsBIagAAAEQ"]
[Sun Apr 12 20:27:56.681102 2026] [:error] [pid 25328:tid 25394] [client 20.199.118.89:46837] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aduPzMxUaQZxT-e0YsBIbgAAAFI"]
[Sun Apr 12 20:27:57.352529 2026] [:error] [pid 25327:tid 25342] [client 20.199.118.89:40115] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aduPzS6h2tZEVJo9JFLkYgAAAAY"]
[Sun Apr 12 20:27:58.463104 2026] [:error] [pid 25437:tid 25442] [client 20.199.118.89:59952] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aduPznf97wYZje1ep_Nf4AAAAMM"]
[Sun Apr 12 20:27:59.378451 2026] [:error] [pid 26599:tid 26604] [client 20.199.118.89:65312] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aduPz3G89LXoQbk_rwDY_QAAAUI"]
[Sun Apr 12 20:27:59.994644 2026] [:error] [pid 26600:tid 26630] [client 20.199.118.89:27526] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aduPz-1YwAZiXhQKLYpNrwAAAYE"]
[Sun Apr 12 20:28:01.462036 2026] [:error] [pid 26567:tid 26574] [client 20.199.118.89:59905] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aduP0XhRpg6ptWFyFx2-ZgAAAQU"]
[Sun Apr 12 20:28:02.249504 2026] [:error] [pid 26567:tid 26586] [client 20.199.118.89:49711] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aduP0nhRpg6ptWFyFx2-agAAARE"]
[Sun Apr 12 20:28:03.132547 2026] [:error] [pid 25437:tid 25450] [client 20.199.118.89:27567] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aduP03f97wYZje1ep_Nf4QAAAMs"]
[Sun Apr 12 20:28:03.979428 2026] [:error] [pid 26567:tid 26587] [client 20.199.118.89:40092] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aduP03hRpg6ptWFyFx2-cQAAARI"]
[Sun Apr 12 20:28:04.799569 2026] [:error] [pid 26567:tid 26579] [client 20.199.118.89:40103] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aduP1HhRpg6ptWFyFx2-dQAAAQo"]
[Sun Apr 12 20:28:07.389361 2026] [:error] [pid 60280:tid 60285] [client 20.199.118.89:40107] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aduP13BlLnDOYuIykki2iQAAAcM"]
[Sun Apr 12 20:28:09.061112 2026] [:error] [pid 26567:tid 26577] [client 20.199.118.89:49709] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aduP2XhRpg6ptWFyFx2-ggAAAQg"]
[Sun Apr 12 20:28:10.054548 2026] [:error] [pid 26600:tid 26637] [client 20.199.118.89:59960] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aduP2u1YwAZiXhQKLYpNxgAAAYg"]
[Sun Apr 12 20:28:11.452344 2026] [:error] [pid 60280:tid 60305] [client 20.199.118.89:65320] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aduP23BlLnDOYuIykki2lwAAAdc"]
[Sun Apr 12 20:28:12.702829 2026] [:error] [pid 26599:tid 26602] [client 20.199.118.89:59957] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aduP3HG89LXoQbk_rwDZAgAAAUA"]
[Sun Apr 12 20:28:14.090385 2026] [:error] [pid 26567:tid 26574] [client 20.199.118.89:39336] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aduP3nhRpg6ptWFyFx2-jwAAAQU"]
[Sun Apr 12 20:28:14.846924 2026] [:error] [pid 25329:tid 25404] [client 20.199.118.89:65338] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aduP3mdcIYsS8Iyaj126RQAAAJA"]
[Sun Apr 12 20:28:16.037395 2026] [:error] [pid 60280:tid 60290] [client 20.199.118.89:30506] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aduP4HBlLnDOYuIykki2uQAAAcg"]
[Sun Apr 12 20:28:16.767580 2026] [:error] [pid 25329:tid 25415] [client 20.199.118.89:49710] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aduP4GdcIYsS8Iyaj126SgAAAJg"]
[Sun Apr 12 20:28:17.493380 2026] [:error] [pid 26567:tid 26581] [client 20.199.118.89:30500] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aduP4XhRpg6ptWFyFx2-lQAAAQw"]
[Sun Apr 12 20:28:18.599765 2026] [:error] [pid 60280:tid 60291] [client 20.199.118.89:30505] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aduP4nBlLnDOYuIykki2xAAAAck"]
[Sun Apr 12 20:28:19.478915 2026] [:error] [pid 25437:tid 25461] [client 20.199.118.89:64173] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aduP43f97wYZje1ep_Nf9QAAANY"]
[Sun Apr 12 20:28:20.162929 2026] [:error] [pid 25327:tid 25346] [client 20.199.118.89:46791] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aduP5C6h2tZEVJo9JFLkdAAAAAo"]
[Sun Apr 12 20:28:21.162557 2026] [:error] [pid 60280:tid 60290] [client 20.199.118.89:43809] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aduP5XBlLnDOYuIykki22QAAAcg"]
[Sun Apr 12 20:28:21.796777 2026] [:error] [pid 60280:tid 60305] [client 20.199.118.89:59917] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aduP5XBlLnDOYuIykki24AAAAdc"]
[Sun Apr 12 20:28:22.703565 2026] [:error] [pid 26600:tid 26651] [client 20.199.118.89:40082] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aduP5u1YwAZiXhQKLYpN0QAAAZY"]
[Sun Apr 12 20:28:23.969102 2026] [:error] [pid 25327:tid 25356] [client 20.199.118.89:64163] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aduP5y6h2tZEVJo9JFLkeAAAABQ"]
[Sun Apr 12 20:28:24.885718 2026] [:error] [pid 26567:tid 26573] [client 20.199.118.89:65285] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aduP6HhRpg6ptWFyFx2-rwAAAQQ"]
[Sun Apr 12 20:28:25.679617 2026] [:error] [pid 25327:tid 25351] [client 20.199.118.89:39301] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aduP6S6h2tZEVJo9JFLkegAAAA8"]
[Sun Apr 12 20:28:26.433390 2026] [:error] [pid 25329:tid 25402] [client 20.199.118.89:64130] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aduP6mdcIYsS8Iyaj126VgAAAI8"]
[Sun Apr 12 20:28:27.507508 2026] [:error] [pid 25329:tid 25400] [client 20.199.118.89:65310] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aduP62dcIYsS8Iyaj126WAAAAI4"]
[Sun Apr 12 20:28:28.291385 2026] [:error] [pid 60280:tid 60289] [client 20.199.118.89:39330] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aduP7HBlLnDOYuIykki2-AAAAcc"]
[Sun Apr 12 20:28:29.340795 2026] [:error] [pid 25328:tid 25379] [client 20.199.118.89:65308] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aduP7cxUaQZxT-e0YsBIpwAAAEs"]
[Sun Apr 12 20:28:30.360595 2026] [:error] [pid 25328:tid 25387] [client 20.199.118.89:39331] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aduP7sxUaQZxT-e0YsBIqQAAAE8"]
[Sun Apr 12 20:28:31.350310 2026] [:error] [pid 25437:tid 25451] [client 20.199.118.89:59926] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aduP73f97wYZje1ep_NgAAAAAMw"]
[Sun Apr 12 20:28:32.122675 2026] [:error] [pid 60280:tid 60306] [client 20.199.118.89:65328] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aduP8HBlLnDOYuIykki3AwAAAdg"]
[Sun Apr 12 20:28:33.105120 2026] [:error] [pid 26600:tid 26637] [client 20.199.118.89:64134] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aduP8e1YwAZiXhQKLYpN4wAAAYg"]
[Sun Apr 12 20:28:33.996430 2026] [:error] [pid 26600:tid 26653] [client 20.199.118.89:40114] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aduP8e1YwAZiXhQKLYpN6AAAAZg"]
[Sun Apr 12 20:28:35.431585 2026] [:error] [pid 25327:tid 25337] [client 20.199.118.89:49684] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aduP8y6h2tZEVJo9JFLkhgAAAAE"]
[Sun Apr 12 20:28:36.513449 2026] [:error] [pid 60280:tid 60295] [client 20.199.118.89:59942] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aduP9HBlLnDOYuIykki3JQAAAc0"]
[Sun Apr 12 20:28:37.575427 2026] [:error] [pid 60280:tid 60299] [client 20.199.118.89:39304] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aduP9XBlLnDOYuIykki3MwAAAdE"]
[Sun Apr 12 20:28:39.355776 2026] [:error] [pid 25328:tid 25367] [client 20.199.118.89:39325] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aduP98xUaQZxT-e0YsBIuQAAAEM"]
[Sun Apr 12 20:28:40.321849 2026] [:error] [pid 25437:tid 25454] [client 20.199.118.89:40118] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aduP-Hf97wYZje1ep_NgEAAAAM8"]
[Sun Apr 12 20:28:41.454797 2026] [:error] [pid 60280:tid 60302] [client 20.199.118.89:40073] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aduP-XBlLnDOYuIykki3QgAAAdQ"]
[Sun Apr 12 20:28:42.375464 2026] [:error] [pid 25327:tid 25354] [client 20.199.118.89:49666] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aduP-i6h2tZEVJo9JFLkigAAABI"]
[Sun Apr 12 20:28:43.343591 2026] [:error] [pid 25329:tid 25411] [client 20.199.118.89:65331] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aduP-2dcIYsS8Iyaj126XgAAAJQ"]
[Sun Apr 12 20:28:44.313194 2026] [:error] [pid 25437:tid 25455] [client 20.199.118.89:59955] [client 20.199.118.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aduP_Hf97wYZje1ep_NgFAAAANA"]
[Sun Apr 12 22:18:30.209460 2026] [:error] [pid 60280:tid 60294] [client 49.51.72.236:50438] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aduptnBlLnDOYuIykkjyHQAAAcw"]
[Sun Apr 12 23:09:26.081127 2026] [:error] [pid 60280:tid 60296] [client 34.83.162.25:51727] [client 34.83.162.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.162.25, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adu1pnBlLnDOYuIykkgShwAAAc4"]
[Sun Apr 12 23:09:26.448274 2026] [:error] [pid 60280:tid 60288] [client 34.83.162.25:51727] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "adu1pnBlLnDOYuIykkgSjQAAAcY"]
[Sun Apr 12 23:09:27.196086 2026] [:error] [pid 25327:tid 25347] [client 34.83.162.25:52729] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "adu1py6h2tZEVJo9JFIVeAAAAAs"]
[Sun Apr 12 23:09:27.946784 2026] [:error] [pid 60280:tid 60289] [client 34.83.162.25:49603] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "adu1p3BlLnDOYuIykkgSkwAAAcc"]
[Sun Apr 12 23:09:28.653201 2026] [:error] [pid 25329:tid 25414] [client 34.83.162.25:58453] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "adu1qGdcIYsS8Iyaj13d4QAAAJc"]
[Sun Apr 12 23:09:29.384749 2026] [:error] [pid 25329:tid 25400] [client 34.83.162.25:62274] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "adu1qWdcIYsS8Iyaj13d6gAAAI4"]
[Sun Apr 12 23:09:30.142976 2026] [:error] [pid 60280:tid 60305] [client 34.83.162.25:62522] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adu1qnBlLnDOYuIykkgSngAAAdc"]
[Sun Apr 12 23:09:30.883416 2026] [:error] [pid 25437:tid 25451] [client 34.83.162.25:62075] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adu1qnf97wYZje1ep_ONdAAAAMw"]
[Sun Apr 12 23:09:31.633851 2026] [:error] [pid 25329:tid 25382] [client 34.83.162.25:62902] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adu1q2dcIYsS8Iyaj13d7gAAAIQ"]
[Sun Apr 12 23:09:32.358847 2026] [:error] [pid 26600:tid 26639] [client 34.83.162.25:50579] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adu1rO1YwAZiXhQKLYpw5QAAAYo"]
[Sun Apr 12 23:09:33.021200 2026] [:error] [pid 60280:tid 60285] [client 34.83.162.25:50367] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adu1rXBlLnDOYuIykkgSqwAAAcM"]
[Sun Apr 12 23:09:33.703380 2026] [:error] [pid 25437:tid 25448] [client 34.83.162.25:61174] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adu1rXf97wYZje1ep_ONdgAAAMk"]
[Sun Apr 12 23:09:34.415082 2026] [:error] [pid 25437:tid 25456] [client 34.83.162.25:56573] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adu1rnf97wYZje1ep_ONdwAAANE"]
[Sun Apr 12 23:09:35.123391 2026] [:error] [pid 26567:tid 26569] [client 34.83.162.25:53899] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adu1r3hRpg6ptWFyFx3cRAAAAQA"]
[Sun Apr 12 23:09:35.786971 2026] [:error] [pid 25327:tid 25336] [client 34.83.162.25:55682] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adu1ry6h2tZEVJo9JFIVgQAAAAA"]
[Sun Apr 12 23:09:36.447427 2026] [:error] [pid 25327:tid 25344] [client 34.83.162.25:58461] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adu1sC6h2tZEVJo9JFIVgwAAAAg"]
[Sun Apr 12 23:09:37.159496 2026] [:error] [pid 60280:tid 60284] [client 34.83.162.25:63455] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adu1sXBlLnDOYuIykkgStwAAAcI"]
[Mon Apr 13 01:00:23.211890 2026] [:error] [pid 31607:tid 31757] [client 43.157.153.236:47718] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "advPp2jn_I-KYTWngjImgAAAAJQ"]
[Mon Apr 13 04:08:33.766461 2026] [:error] [pid 34048:tid 34072] [client 104.28.163.29:16350] [client 104.28.163.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "adv7wfSiQ_PJjlY5EhzI0gAAANY"]
[Mon Apr 13 05:13:20.859113 2026] [:error] [pid 33942:tid 34003] [client 36.111.67.189:57360] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adwK8BNHe8geO_lMeFaNUgAAAFg"]
[Mon Apr 13 05:49:15.691602 2026] [:error] [pid 11325:tid 11347] [client 20.151.248.149:30686] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "adwTW-CGj3EEJtCwa0OVewAAARQ"]
[Mon Apr 13 05:49:16.102772 2026] [:error] [pid 33943:tid 34023] [client 20.151.248.149:30604] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "adwTXKyoXuZjocnxM5Ft3wAAAJE"]
[Mon Apr 13 05:49:16.515540 2026] [:error] [pid 33943:tid 34009] [client 20.151.248.149:30696] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "adwTXKyoXuZjocnxM5Ft4AAAAIM"]
[Mon Apr 13 05:49:16.925790 2026] [:error] [pid 33943:tid 34015] [client 20.151.248.149:30658] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "adwTXKyoXuZjocnxM5Ft5AAAAIk"]
[Mon Apr 13 09:29:12.796424 2026] [:error] [pid 7228:tid 7247] [client 67.205.187.227:36874] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adxG6AEnn1dQrOSHHNUnIQAAARE"]
[Mon Apr 13 09:29:18.219302 2026] [:error] [pid 63309:tid 63323] [client 67.205.187.227:56324] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adxG7kpIKZ10weXpf0WndwAAAAo"]
[Mon Apr 13 11:18:20.591497 2026] [:error] [pid 7228:tid 7235] [client 223.244.35.77:56837] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adxgfAEnn1dQrOSHHNV6OgAAAQU"]
[Mon Apr 13 12:38:49.148751 2026] [:error] [pid 57183:tid 57207] [client 2.56.248.217:64233] [client 2.56.248.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.56.248.217, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "adxzWTDO3t8R5NaxzYQ0LgAAAVY"], referer: https://www.facebook.com/
[Mon Apr 13 12:38:49.777168 2026] [:error] [pid 7228:tid 7250] [client 2.56.248.217:64602] [client 2.56.248.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.56.248.217, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "adxzWQEnn1dQrOSHHNWufAAAARQ"]
[Mon Apr 13 12:38:50.091474 2026] [:error] [pid 57183:tid 57201] [client 2.56.248.217:64233] [client 2.56.248.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 2.56.248.217, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "adxzWjDO3t8R5NaxzYQ0MAAAAVA"]
[Mon Apr 13 14:37:24.656992 2026] [:error] [pid 63309:tid 63320] [client 20.104.245.70:36059] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lef.php"] [unique_id "adyPJEpIKZ10weXpf0XpGAAAAAc"]
[Mon Apr 13 14:37:26.556662 2026] [:error] [pid 7228:tid 7231] [client 20.104.245.70:36047] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lef.php"] [unique_id "adyPJgEnn1dQrOSHHNUMmAAAAQE"]
[Mon Apr 13 14:37:27.737911 2026] [:error] [pid 63406:tid 63425] [client 20.104.245.70:35443] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lef.php"] [unique_id "adyPJ7HZEIkQ0Zmgp5qyywAAAM4"]
[Mon Apr 13 14:37:29.139248 2026] [:error] [pid 7228:tid 7252] [client 20.104.245.70:36054] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lef.php"] [unique_id "adyPKQEnn1dQrOSHHNUMpgAAARY"]
[Mon Apr 13 14:37:31.070648 2026] [:error] [pid 57183:tid 57198] [client 20.104.245.70:35427] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new2.php"] [unique_id "adyPKzDO3t8R5NaxzYR2MQAAAU0"]
[Mon Apr 13 14:37:31.786027 2026] [:error] [pid 63310:tid 63366] [client 20.104.245.70:36061] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new2.php"] [unique_id "adyPK3oXpRU5ztmwPjIRKwAAAFY"]
[Mon Apr 13 14:37:32.483072 2026] [:error] [pid 57183:tid 57203] [client 20.104.245.70:36035] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new2.php"] [unique_id "adyPLDDO3t8R5NaxzYR2OAAAAVI"]
[Mon Apr 13 14:37:33.093711 2026] [:error] [pid 7228:tid 7247] [client 20.104.245.70:35426] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new2.php"] [unique_id "adyPLQEnn1dQrOSHHNUMtwAAARE"]
[Mon Apr 13 14:37:33.594356 2026] [:error] [pid 63310:tid 63354] [client 20.104.245.70:35407] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fallbackapi.php"] [unique_id "adyPLXoXpRU5ztmwPjIRLAAAAEo"]
[Mon Apr 13 14:37:34.489735 2026] [:error] [pid 57183:tid 57191] [client 20.104.245.70:36051] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fallbackapi.php"] [unique_id "adyPLjDO3t8R5NaxzYR2QAAAAUY"]
[Mon Apr 13 14:37:35.070702 2026] [:error] [pid 57183:tid 57192] [client 20.104.245.70:35405] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fallbackapi.php"] [unique_id "adyPLzDO3t8R5NaxzYR2RAAAAUc"]
[Mon Apr 13 14:37:37.769392 2026] [:error] [pid 63311:tid 63375] [client 20.104.245.70:36050] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fallbackapi.php"] [unique_id "adyPMaHjrGN1MqBCVFmn_gAAAIQ"]
[Mon Apr 13 14:37:39.600019 2026] [:error] [pid 7228:tid 7248] [client 20.104.245.70:36065] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-0fsdhv.php"] [unique_id "adyPMwEnn1dQrOSHHNUMwgAAARI"]
[Mon Apr 13 14:37:40.227874 2026] [:error] [pid 7228:tid 7254] [client 20.104.245.70:35414] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-0fsdhv.php"] [unique_id "adyPNAEnn1dQrOSHHNUMxwAAARg"]
[Mon Apr 13 14:37:41.543276 2026] [:error] [pid 7228:tid 7248] [client 20.104.245.70:35450] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-0fsdhv.php"] [unique_id "adyPNQEnn1dQrOSHHNUMzwAAARI"]
[Mon Apr 13 14:37:42.526968 2026] [:error] [pid 63311:tid 63380] [client 20.104.245.70:35396] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-0fsdhv.php"] [unique_id "adyPNqHjrGN1MqBCVFmoAAAAAIk"]
[Mon Apr 13 14:37:43.579175 2026] [:error] [pid 7228:tid 7236] [client 20.104.245.70:36062] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rnenu.php"] [unique_id "adyPNwEnn1dQrOSHHNUM2gAAAQY"]
[Mon Apr 13 14:37:44.513578 2026] [:error] [pid 57183:tid 57205] [client 20.104.245.70:35420] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rnenu.php"] [unique_id "adyPODDO3t8R5NaxzYR2TwAAAVQ"]
[Mon Apr 13 14:37:45.189900 2026] [:error] [pid 63309:tid 63325] [client 20.104.245.70:35428] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rnenu.php"] [unique_id "adyPOUpIKZ10weXpf0XpIwAAAAw"]
[Mon Apr 13 14:37:45.884993 2026] [:error] [pid 7228:tid 7234] [client 20.104.245.70:35432] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rnenu.php"] [unique_id "adyPOQEnn1dQrOSHHNUM4QAAAQQ"]
[Mon Apr 13 14:37:46.782079 2026] [:error] [pid 7228:tid 7251] [client 20.104.245.70:35414] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/congeree.php"] [unique_id "adyPOgEnn1dQrOSHHNUM5gAAARU"]
[Mon Apr 13 14:37:47.244347 2026] [:error] [pid 7228:tid 7234] [client 20.104.245.70:36040] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/congeree.php"] [unique_id "adyPOwEnn1dQrOSHHNUM6QAAAQQ"]
[Mon Apr 13 14:37:47.847451 2026] [:error] [pid 63311:tid 63371] [client 20.104.245.70:35397] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/congeree.php"] [unique_id "adyPO6HjrGN1MqBCVFmoDgAAAIA"]
[Mon Apr 13 14:37:48.391937 2026] [:error] [pid 57183:tid 57195] [client 20.104.245.70:35591] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/congeree.php"] [unique_id "adyPPDDO3t8R5NaxzYR2XAAAAUo"]
[Mon Apr 13 14:37:49.010405 2026] [:error] [pid 63310:tid 63356] [client 20.104.245.70:35444] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adyPPXoXpRU5ztmwPjIRQAAAAEw"]
[Mon Apr 13 14:37:49.662721 2026] [:error] [pid 63309:tid 63326] [client 20.104.245.70:35597] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adyPPUpIKZ10weXpf0XpLAAAAA0"]
[Mon Apr 13 14:37:50.262413 2026] [:error] [pid 63310:tid 63357] [client 20.104.245.70:36075] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adyPPnoXpRU5ztmwPjIRQgAAAE0"]
[Mon Apr 13 14:37:50.857532 2026] [:error] [pid 63406:tid 63419] [client 20.104.245.70:35437] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "adyPPrHZEIkQ0Zmgp5qy7AAAAMg"]
[Mon Apr 13 14:37:51.558923 2026] [:error] [pid 63406:tid 63434] [client 20.104.245.70:35438] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jatuh.php"] [unique_id "adyPP7HZEIkQ0Zmgp5qy7wAAANc"]
[Mon Apr 13 14:37:52.531641 2026] [:error] [pid 57183:tid 57185] [client 20.104.245.70:35419] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jatuh.php"] [unique_id "adyPQDDO3t8R5NaxzYR2aAAAAUA"]
[Mon Apr 13 14:37:53.357401 2026] [:error] [pid 63310:tid 63345] [client 20.104.245.70:36076] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jatuh.php"] [unique_id "adyPQXoXpRU5ztmwPjIRRQAAAEE"]
[Mon Apr 13 14:37:54.050677 2026] [:error] [pid 63310:tid 63368] [client 20.104.245.70:36063] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jatuh.php"] [unique_id "adyPQnoXpRU5ztmwPjIRRwAAAFg"]
[Mon Apr 13 14:37:55.201123 2026] [:error] [pid 63311:tid 63388] [client 20.104.245.70:36053] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adyPQ6HjrGN1MqBCVFmoFAAAAJE"]
[Mon Apr 13 14:37:56.716979 2026] [:error] [pid 7228:tid 7239] [client 20.104.245.70:36038] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adyPRAEnn1dQrOSHHNUM9AAAAQk"]
[Mon Apr 13 14:37:57.744964 2026] [:error] [pid 57183:tid 57203] [client 20.104.245.70:36037] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adyPRTDO3t8R5NaxzYR2cwAAAVI"]
[Mon Apr 13 14:37:58.400291 2026] [:error] [pid 63406:tid 63411] [client 20.104.245.70:35399] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/green.php"] [unique_id "adyPRrHZEIkQ0Zmgp5qy-AAAAMA"]
[Mon Apr 13 14:37:59.118879 2026] [:error] [pid 63309:tid 63322] [client 20.104.245.70:36034] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/multirole.php"] [unique_id "adyPR0pIKZ10weXpf0XpNQAAAAk"]
[Mon Apr 13 14:37:59.915009 2026] [:error] [pid 63406:tid 63430] [client 20.104.245.70:35398] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/multirole.php"] [unique_id "adyPR7HZEIkQ0Zmgp5qy_AAAANM"]
[Mon Apr 13 14:38:01.113523 2026] [:error] [pid 7228:tid 7240] [client 20.104.245.70:36071] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/multirole.php"] [unique_id "adyPSQEnn1dQrOSHHNUM_AAAAQo"]
[Mon Apr 13 14:38:02.324361 2026] [:error] [pid 63406:tid 63418] [client 20.104.245.70:35594] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/multirole.php"] [unique_id "adyPSrHZEIkQ0Zmgp5qy_gAAAMc"]
[Mon Apr 13 14:38:03.170362 2026] [:error] [pid 57183:tid 57207] [client 20.104.245.70:35442] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adyPSzDO3t8R5NaxzYR2eAAAAVY"]
[Mon Apr 13 14:38:04.052042 2026] [:error] [pid 57183:tid 57185] [client 20.104.245.70:35446] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adyPTDDO3t8R5NaxzYR2fAAAAUA"]
[Mon Apr 13 14:38:04.812904 2026] [:error] [pid 63310:tid 63355] [client 20.104.245.70:36068] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adyPTHoXpRU5ztmwPjIRUQAAAEs"]
[Mon Apr 13 14:38:05.508500 2026] [:error] [pid 7228:tid 7249] [client 20.104.245.70:35614] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "adyPTQEnn1dQrOSHHNUNBwAAARM"]
[Mon Apr 13 14:38:06.883429 2026] [:error] [pid 7228:tid 7248] [client 20.104.245.70:35587] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adyPTgEnn1dQrOSHHNUNDAAAARI"]
[Mon Apr 13 14:38:08.421320 2026] [:error] [pid 7228:tid 7246] [client 20.104.245.70:36072] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adyPUAEnn1dQrOSHHNUNFQAAARA"]
[Mon Apr 13 14:38:09.527104 2026] [:error] [pid 57183:tid 57206] [client 20.104.245.70:35448] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adyPUTDO3t8R5NaxzYR2iQAAAVU"]
[Mon Apr 13 14:38:10.509434 2026] [:error] [pid 63406:tid 63429] [client 20.104.245.70:36036] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "adyPUrHZEIkQ0Zmgp5qzAwAAANI"]
[Mon Apr 13 14:38:11.798994 2026] [:error] [pid 63406:tid 63434] [client 20.104.245.70:36055] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cobaini.php"] [unique_id "adyPU7HZEIkQ0Zmgp5qzCgAAANc"]
[Mon Apr 13 14:38:12.766389 2026] [:error] [pid 63310:tid 63350] [client 20.104.245.70:35602] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cobaini.php"] [unique_id "adyPVHoXpRU5ztmwPjIRXQAAAEY"]
[Mon Apr 13 14:38:13.405266 2026] [:error] [pid 63311:tid 63372] [client 20.104.245.70:35416] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cobaini.php"] [unique_id "adyPVaHjrGN1MqBCVFmoLgAAAIE"]
[Mon Apr 13 14:38:14.252274 2026] [:error] [pid 63406:tid 63427] [client 20.104.245.70:35599] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cobaini.php"] [unique_id "adyPVrHZEIkQ0Zmgp5qzFgAAANA"]
[Mon Apr 13 14:38:14.945148 2026] [:error] [pid 57183:tid 57193] [client 20.104.245.70:35599] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmp.php"] [unique_id "adyPVjDO3t8R5NaxzYR2lQAAAUg"]
[Mon Apr 13 14:38:15.889128 2026] [:error] [pid 63311:tid 63377] [client 20.104.245.70:35451] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmp.php"] [unique_id "adyPV6HjrGN1MqBCVFmoMQAAAIY"]
[Mon Apr 13 14:38:16.468004 2026] [:error] [pid 63311:tid 63385] [client 20.104.245.70:36066] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmp.php"] [unique_id "adyPWKHjrGN1MqBCVFmoMwAAAI4"]
[Mon Apr 13 14:38:17.125859 2026] [:error] [pid 57183:tid 57191] [client 20.104.245.70:35455] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmp.php"] [unique_id "adyPWTDO3t8R5NaxzYR2nQAAAUY"]
[Mon Apr 13 14:38:17.695276 2026] [:error] [pid 7228:tid 7252] [client 20.104.245.70:36079] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adyPWQEnn1dQrOSHHNUNKgAAARY"]
[Mon Apr 13 14:38:19.253684 2026] [:error] [pid 63309:tid 63330] [client 20.104.245.70:35631] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adyPW0pIKZ10weXpf0XpPwAAABE"]
[Mon Apr 13 14:38:23.722414 2026] [:error] [pid 63310:tid 63350] [client 20.104.245.70:35453] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "adyPX3oXpRU5ztmwPjIRaQAAAEY"]
[Mon Apr 13 14:38:32.711671 2026] [:error] [pid 7228:tid 7252] [client 20.104.245.70:35425] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doo.php"] [unique_id "adyPaAEnn1dQrOSHHNUNcgAAARY"]
[Mon Apr 13 14:38:34.687614 2026] [:error] [pid 7228:tid 7247] [client 20.104.245.70:35409] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doo.php"] [unique_id "adyPagEnn1dQrOSHHNUNewAAARE"]
[Mon Apr 13 14:38:39.130925 2026] [:error] [pid 57183:tid 57195] [client 20.104.245.70:35403] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doo.php"] [unique_id "adyPbzDO3t8R5NaxzYR2twAAAUo"]
[Mon Apr 13 14:38:41.485052 2026] [:error] [pid 7228:tid 7241] [client 20.104.245.70:36039] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doo.php"] [unique_id "adyPcQEnn1dQrOSHHNUNkwAAAQs"]
[Mon Apr 13 14:38:42.930796 2026] [:error] [pid 7228:tid 7245] [client 20.104.245.70:35622] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123.php"] [unique_id "adyPcgEnn1dQrOSHHNUNnAAAAQ8"]
[Mon Apr 13 14:38:43.933012 2026] [:error] [pid 63310:tid 63351] [client 20.104.245.70:36056] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123.php"] [unique_id "adyPc3oXpRU5ztmwPjIRgAAAAEc"]
[Mon Apr 13 14:38:45.047434 2026] [:error] [pid 63311:tid 63372] [client 20.104.245.70:35439] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123.php"] [unique_id "adyPdaHjrGN1MqBCVFmoVAAAAIE"]
[Mon Apr 13 14:38:45.765624 2026] [:error] [pid 7228:tid 7250] [client 20.104.245.70:36069] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x123.php"] [unique_id "adyPdQEnn1dQrOSHHNUNowAAARQ"]
[Mon Apr 13 14:38:46.429247 2026] [:error] [pid 7228:tid 7245] [client 20.104.245.70:35433] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "adyPdgEnn1dQrOSHHNUNpQAAAQ8"]
[Mon Apr 13 14:38:46.911991 2026] [:error] [pid 7228:tid 7232] [client 20.104.245.70:35406] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "adyPdgEnn1dQrOSHHNUNqAAAAQI"]
[Mon Apr 13 14:38:47.472653 2026] [:error] [pid 7228:tid 7249] [client 20.104.245.70:35593] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "adyPdwEnn1dQrOSHHNUNrAAAARM"]
[Mon Apr 13 14:38:48.058009 2026] [:error] [pid 57183:tid 57192] [client 20.104.245.70:35625] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h2.php"] [unique_id "adyPeDDO3t8R5NaxzYR2wAAAAUc"]
[Mon Apr 13 14:38:48.856100 2026] [:error] [pid 63310:tid 63360] [client 20.104.245.70:36043] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/greateb.php"] [unique_id "adyPeHoXpRU5ztmwPjIRhgAAAFA"]
[Mon Apr 13 14:38:49.653462 2026] [:error] [pid 63310:tid 63365] [client 20.104.245.70:35619] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/greateb.php"] [unique_id "adyPeXoXpRU5ztmwPjIRigAAAFU"]
[Mon Apr 13 14:38:50.243585 2026] [:error] [pid 63309:tid 63315] [client 20.104.245.70:27588] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/greateb.php"] [unique_id "adyPekpIKZ10weXpf0XpZAAAAAI"]
[Mon Apr 13 14:38:50.808518 2026] [:error] [pid 63311:tid 63382] [client 20.104.245.70:36052] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/greateb.php"] [unique_id "adyPeqHjrGN1MqBCVFmoXwAAAIs"]
[Mon Apr 13 14:38:51.266182 2026] [:error] [pid 63406:tid 63421] [client 20.104.245.70:35600] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "adyPe7HZEIkQ0Zmgp5qzUQAAAMo"]
[Mon Apr 13 14:38:51.860612 2026] [:error] [pid 57183:tid 57196] [client 20.104.245.70:36078] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "adyPezDO3t8R5NaxzYR2wwAAAUs"]
[Mon Apr 13 14:38:52.389092 2026] [:error] [pid 57183:tid 57197] [client 20.104.245.70:35447] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "adyPfDDO3t8R5NaxzYR2xAAAAUw"]
[Mon Apr 13 14:38:52.935863 2026] [:error] [pid 63311:tid 63393] [client 20.104.245.70:35421] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "adyPfKHjrGN1MqBCVFmoYQAAAJY"]
[Mon Apr 13 14:38:53.486473 2026] [:error] [pid 63406:tid 63427] [client 20.104.245.70:35403] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mjq.php/kma.php"] [unique_id "adyPfbHZEIkQ0Zmgp5qzWgAAANA"]
[Mon Apr 13 14:38:54.114170 2026] [:error] [pid 57183:tid 57195] [client 20.104.245.70:35452] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mjq.php/kma.php"] [unique_id "adyPfjDO3t8R5NaxzYR2zQAAAUo"]
[Mon Apr 13 14:38:54.882930 2026] [:error] [pid 57183:tid 57198] [client 20.104.245.70:36073] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mjq.php/kma.php"] [unique_id "adyPfjDO3t8R5NaxzYR20QAAAU0"]
[Mon Apr 13 14:38:55.575281 2026] [:error] [pid 63406:tid 63426] [client 20.104.245.70:35392] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mjq.php/kma.php"] [unique_id "adyPf7HZEIkQ0Zmgp5qzZgAAAM8"]
[Mon Apr 13 14:38:56.081753 2026] [:error] [pid 63310:tid 63357] [client 20.104.245.70:36085] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjeni.php"] [unique_id "adyPgHoXpRU5ztmwPjIRlAAAAE0"]
[Mon Apr 13 14:38:57.564131 2026] [:error] [pid 63406:tid 63423] [client 20.104.245.70:35395] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjeni.php"] [unique_id "adyPgbHZEIkQ0Zmgp5qzbAAAAMw"]
[Mon Apr 13 14:39:00.187371 2026] [:error] [pid 63310:tid 63349] [client 20.104.245.70:35401] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjeni.php"] [unique_id "adyPhHoXpRU5ztmwPjIRngAAAEU"]
[Mon Apr 13 14:39:06.064312 2026] [:error] [pid 7228:tid 7243] [client 20.104.245.70:36093] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bjeni.php"] [unique_id "adyPigEnn1dQrOSHHNUNzgAAAQ0"]
[Mon Apr 13 14:40:08.982719 2026] [:error] [pid 63310:tid 63344] [client 20.104.245.70:35627] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "adyPyHoXpRU5ztmwPjIR0AAAAEA"]
[Mon Apr 13 14:40:18.918191 2026] [:error] [pid 63310:tid 63348] [client 20.104.245.70:35394] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adyP0noXpRU5ztmwPjIR6QAAAEQ"]
[Mon Apr 13 14:40:22.643184 2026] [:error] [pid 63310:tid 63353] [client 20.104.245.70:36048] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adyP1noXpRU5ztmwPjIR7gAAAEk"]
[Mon Apr 13 14:40:25.059688 2026] [:error] [pid 63310:tid 63354] [client 20.104.245.70:35590] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adyP2XoXpRU5ztmwPjIR7wAAAEo"]
[Mon Apr 13 14:40:28.162631 2026] [:error] [pid 63309:tid 63322] [client 20.104.245.70:35418] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gdn.php"] [unique_id "adyP3EpIKZ10weXpf0XpwAAAAAk"]
[Mon Apr 13 14:40:30.387174 2026] [:error] [pid 63406:tid 63424] [client 20.104.245.70:35454] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-wlx.php"] [unique_id "adyP3rHZEIkQ0Zmgp5q0TgAAAM0"]
[Mon Apr 13 14:40:31.550767 2026] [:error] [pid 7228:tid 7234] [client 20.104.245.70:35613] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-wlx.php"] [unique_id "adyP3wEnn1dQrOSHHNUPjAAAAQQ"]
[Mon Apr 13 14:40:33.347727 2026] [:error] [pid 57183:tid 57199] [client 20.104.245.70:35603] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-wlx.php"] [unique_id "adyP4TDO3t8R5NaxzYR3xQAAAU4"]
[Mon Apr 13 14:40:34.890154 2026] [:error] [pid 57183:tid 57201] [client 20.104.245.70:36060] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-wlx.php"] [unique_id "adyP4jDO3t8R5NaxzYR30AAAAVA"]
[Mon Apr 13 14:40:36.358758 2026] [:error] [pid 57183:tid 57198] [client 20.104.245.70:36041] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zvz89.php"] [unique_id "adyP5DDO3t8R5NaxzYR33gAAAU0"]
[Mon Apr 13 14:40:38.228579 2026] [:error] [pid 7228:tid 7237] [client 20.104.245.70:36090] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zvz89.php"] [unique_id "adyP5gEnn1dQrOSHHNUPsAAAAQc"]
[Mon Apr 13 14:40:41.168437 2026] [:error] [pid 7228:tid 7245] [client 20.104.245.70:36058] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zvz89.php"] [unique_id "adyP6QEnn1dQrOSHHNUP0AAAAQ8"]
[Mon Apr 13 14:40:43.122013 2026] [:error] [pid 7228:tid 7231] [client 20.104.245.70:36064] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zvz89.php"] [unique_id "adyP6wEnn1dQrOSHHNUP4gAAAQE"]
[Mon Apr 13 14:40:44.655597 2026] [:error] [pid 7228:tid 7237] [client 20.104.245.70:35409] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i6z19N.php"] [unique_id "adyP7AEnn1dQrOSHHNUP6gAAAQc"]
[Mon Apr 13 14:40:46.628193 2026] [:error] [pid 7228:tid 7232] [client 20.104.245.70:36092] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i6z19N.php"] [unique_id "adyP7gEnn1dQrOSHHNUP_gAAAQI"]
[Mon Apr 13 14:40:47.866247 2026] [:error] [pid 57183:tid 57201] [client 20.104.245.70:27600] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i6z19N.php"] [unique_id "adyP7zDO3t8R5NaxzYR4MQAAAVA"]
[Mon Apr 13 14:40:50.988034 2026] [:error] [pid 57183:tid 57185] [client 20.104.245.70:27593] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i6z19N.php"] [unique_id "adyP8jDO3t8R5NaxzYR4NgAAAUA"]
[Mon Apr 13 14:40:52.844525 2026] [:error] [pid 7228:tid 7245] [client 20.104.245.70:35616] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl9.php"] [unique_id "adyP9AEnn1dQrOSHHNUQEQAAAQ8"]
[Mon Apr 13 14:40:58.005542 2026] [:error] [pid 57183:tid 57205] [client 20.104.245.70:35585] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl9.php"] [unique_id "adyP-jDO3t8R5NaxzYR4TAAAAVQ"]
[Mon Apr 13 14:40:59.205682 2026] [:error] [pid 7228:tid 7237] [client 20.104.245.70:36033] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl9.php"] [unique_id "adyP-wEnn1dQrOSHHNUQMAAAAQc"]
[Mon Apr 13 14:40:59.940935 2026] [:error] [pid 63310:tid 63360] [client 20.104.245.70:35608] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl9.php"] [unique_id "adyP-3oXpRU5ztmwPjISGAAAAFA"]
[Mon Apr 13 14:41:01.092739 2026] [:error] [pid 63406:tid 63428] [client 20.104.245.70:36077] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "adyP_bHZEIkQ0Zmgp5q03gAAANE"]
[Mon Apr 13 14:41:01.766556 2026] [:error] [pid 63309:tid 63319] [client 20.104.245.70:35429] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "adyP_UpIKZ10weXpf0Xp8wAAAAY"]
[Mon Apr 13 14:41:02.797335 2026] [:error] [pid 63311:tid 63372] [client 20.104.245.70:35393] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "adyP_qHjrGN1MqBCVFmpTAAAAIE"]
[Mon Apr 13 14:41:04.421212 2026] [:error] [pid 63311:tid 63374] [client 20.104.245.70:35632] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "adyQAKHjrGN1MqBCVFmpTgAAAIM"]
[Mon Apr 13 14:41:06.302952 2026] [:error] [pid 63309:tid 63332] [client 20.104.245.70:35641] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccu.php"] [unique_id "adyQAkpIKZ10weXpf0Xp9QAAABM"]
[Mon Apr 13 14:41:12.721636 2026] [:error] [pid 57183:tid 57191] [client 20.104.245.70:35423] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "adyQCDDO3t8R5NaxzYR4dgAAAUY"]
[Mon Apr 13 14:41:15.152451 2026] [:error] [pid 63309:tid 63313] [client 20.104.245.70:36058] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "adyQC0pIKZ10weXpf0XqDAAAAAA"]
[Mon Apr 13 14:41:17.142398 2026] [:error] [pid 7228:tid 7250] [client 20.104.245.70:36051] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "adyQDQEnn1dQrOSHHNUQVwAAARQ"]
[Mon Apr 13 14:41:19.176185 2026] [:error] [pid 63311:tid 63393] [client 20.104.245.70:35436] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "adyQD6HjrGN1MqBCVFmpYgAAAJY"]
[Mon Apr 13 14:41:22.193668 2026] [:error] [pid 63310:tid 63363] [client 20.104.245.70:27594] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/disagrsxr.php"] [unique_id "adyQEnoXpRU5ztmwPjISNAAAAFM"]
[Mon Apr 13 14:41:23.010847 2026] [:error] [pid 7228:tid 7247] [client 20.104.245.70:27617] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/disagrsxr.php"] [unique_id "adyQEwEnn1dQrOSHHNUQbQAAARE"]
[Mon Apr 13 14:41:24.428585 2026] [:error] [pid 57183:tid 57190] [client 20.104.245.70:36095] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/disagrsxr.php"] [unique_id "adyQFDDO3t8R5NaxzYR4oQAAAUU"]
[Mon Apr 13 14:41:25.329643 2026] [:error] [pid 63311:tid 63393] [client 20.104.245.70:35628] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/disagrsxr.php"] [unique_id "adyQFaHjrGN1MqBCVFmpdAAAAJY"]
[Mon Apr 13 14:41:27.446703 2026] [:error] [pid 63406:tid 63424] [client 20.104.245.70:27641] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adyQF7HZEIkQ0Zmgp5q1DgAAAM0"]
[Mon Apr 13 14:41:29.203735 2026] [:error] [pid 63406:tid 63421] [client 20.104.245.70:36081] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adyQGbHZEIkQ0Zmgp5q1FwAAAMo"]
[Mon Apr 13 14:41:30.816663 2026] [:error] [pid 57183:tid 57195] [client 20.104.245.70:35644] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adyQGjDO3t8R5NaxzYR4xgAAAUo"]
[Mon Apr 13 14:41:31.581289 2026] [:error] [pid 63309:tid 63326] [client 20.104.245.70:35445] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "adyQG0pIKZ10weXpf0XqIwAAAA0"]
[Mon Apr 13 14:41:32.558981 2026] [:error] [pid 63310:tid 63358] [client 20.104.245.70:27595] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7W.php"] [unique_id "adyQHHoXpRU5ztmwPjISOAAAAE4"]
[Mon Apr 13 14:41:33.205083 2026] [:error] [pid 7228:tid 7253] [client 20.104.245.70:35629] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7W.php"] [unique_id "adyQHQEnn1dQrOSHHNUQfgAAARc"]
[Mon Apr 13 14:41:33.793797 2026] [:error] [pid 7228:tid 7236] [client 20.104.245.70:35609] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7W.php"] [unique_id "adyQHQEnn1dQrOSHHNUQgQAAAQY"]
[Mon Apr 13 14:41:34.462660 2026] [:error] [pid 63311:tid 63373] [client 20.104.245.70:36045] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x7W.php"] [unique_id "adyQHqHjrGN1MqBCVFmpigAAAII"]
[Mon Apr 13 14:41:34.993285 2026] [:error] [pid 63406:tid 63434] [client 20.104.245.70:35435] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "adyQHrHZEIkQ0Zmgp5q1QgAAANc"]
[Mon Apr 13 14:41:36.458618 2026] [:error] [pid 7228:tid 7251] [client 20.104.245.70:36042] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "adyQIAEnn1dQrOSHHNUQmAAAARU"]
[Mon Apr 13 14:41:39.174141 2026] [:error] [pid 63310:tid 63366] [client 20.104.245.70:36059] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "adyQI3oXpRU5ztmwPjISSgAAAFY"]
[Mon Apr 13 14:41:40.542286 2026] [:error] [pid 63406:tid 63423] [client 20.104.245.70:36070] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "adyQJLHZEIkQ0Zmgp5q1TQAAAMw"]
[Mon Apr 13 14:41:41.197037 2026] [:error] [pid 7228:tid 7233] [client 20.104.245.70:35617] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "adyQJQEnn1dQrOSHHNUQuQAAAQM"]
[Mon Apr 13 14:41:42.136999 2026] [:error] [pid 7228:tid 7245] [client 20.104.245.70:36046] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "adyQJgEnn1dQrOSHHNUQvgAAAQ8"]
[Mon Apr 13 14:41:42.642189 2026] [:error] [pid 63309:tid 63319] [client 20.104.245.70:27616] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "adyQJkpIKZ10weXpf0XqLQAAAAY"]
[Mon Apr 13 14:41:43.360217 2026] [:error] [pid 63309:tid 63318] [client 20.104.245.70:35407] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "adyQJ0pIKZ10weXpf0XqLgAAAAU"]
[Mon Apr 13 14:41:44.376492 2026] [:error] [pid 63309:tid 63331] [client 20.104.245.70:35410] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adyQKEpIKZ10weXpf0XqMQAAABI"]
[Mon Apr 13 14:41:45.052182 2026] [:error] [pid 63309:tid 63335] [client 20.104.245.70:35646] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adyQKUpIKZ10weXpf0XqNAAAABY"]
[Mon Apr 13 14:41:45.842428 2026] [:error] [pid 7228:tid 7241] [client 20.104.245.70:36039] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "adyQKQEnn1dQrOSHHNUQ0gAAAQs"]
[Mon Apr 13 15:09:07.751708 2026] [:error] [pid 7228:tid 7243] [client 8.229.162.101:58484] [client 8.229.162.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.229.162.101, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "adyWkwEnn1dQrOSHHNUjwQAAAQ0"]
[Mon Apr 13 15:09:09.042279 2026] [:error] [pid 7228:tid 7241] [client 8.229.162.101:58484] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adyWlQEnn1dQrOSHHNUjyAAAAQs"]
[Mon Apr 13 15:09:09.734066 2026] [:error] [pid 63309:tid 63332] [client 8.229.162.101:63055] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adyWlUpIKZ10weXpf0XuMwAAABM"]
[Mon Apr 13 15:09:10.434346 2026] [:error] [pid 7228:tid 7252] [client 8.229.162.101:64296] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adyWlgEnn1dQrOSHHNUjygAAARY"]
[Mon Apr 13 15:09:11.137195 2026] [:error] [pid 63309:tid 63318] [client 8.229.162.101:65419] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adyWl0pIKZ10weXpf0XuNQAAAAU"]
[Mon Apr 13 15:09:11.840548 2026] [:error] [pid 7228:tid 7232] [client 8.229.162.101:50474] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adyWlwEnn1dQrOSHHNUj0AAAAQI"]
[Mon Apr 13 15:09:12.542906 2026] [:error] [pid 63406:tid 63428] [client 8.229.162.101:52024] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adyWmLHZEIkQ0Zmgp5q-HQAAANE"]
[Mon Apr 13 15:09:13.246313 2026] [:error] [pid 7228:tid 7230] [client 8.229.162.101:53374] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adyWmQEnn1dQrOSHHNUj1AAAAQA"]
[Mon Apr 13 15:09:13.946726 2026] [:error] [pid 7228:tid 7235] [client 8.229.162.101:54777] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adyWmQEnn1dQrOSHHNUj2AAAAQU"]
[Mon Apr 13 15:09:14.649668 2026] [:error] [pid 57183:tid 57200] [client 8.229.162.101:55620] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adyWmjDO3t8R5NaxzYSF9wAAAU8"]
[Mon Apr 13 15:09:15.352628 2026] [:error] [pid 7228:tid 7249] [client 8.229.162.101:56421] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adyWmwEnn1dQrOSHHNUj4AAAARM"]
[Mon Apr 13 15:09:16.056203 2026] [:error] [pid 57183:tid 57202] [client 8.229.162.101:57377] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adyWnDDO3t8R5NaxzYSF-gAAAVE"]
[Mon Apr 13 16:00:59.785212 2026] [:error] [pid 63406:tid 63417] [client 45.130.202.103:49625] [client 45.130.202.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adyiu7HZEIkQ0Zmgp5reDAAAAMY"]
[Mon Apr 13 16:01:45.469532 2026] [autoindex:error] [pid 63311:tid 63387] [client 45.130.202.101:30417] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 13 16:23:28.511478 2026] [:error] [pid 9314:tid 9322] [client 43.173.1.69:32790] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "adyoAG_r4W8fX2GWyGSzAgAAAYY"]
[Mon Apr 13 17:32:40.053992 2026] [:error] [pid 57183:tid 57192] [client 192.144.148.122:39108] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ady4ODDO3t8R5NaxzYTc6gAAAUc"]
[Mon Apr 13 18:58:11.573843 2026] [:error] [pid 63311:tid 63375] [client 67.205.187.227:54982] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adzMQ6HjrGN1MqBCVFnpjAAAAIQ"]
[Mon Apr 13 18:58:14.471994 2026] [:error] [pid 63406:tid 63413] [client 67.205.187.227:55476] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "adzMRrHZEIkQ0Zmgp5poAwAAAMI"]
[Mon Apr 13 20:39:52.922556 2026] [:error] [pid 57183:tid 57185] [client 103.77.107.178:60002] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "adzkGDDO3t8R5NaxzYQ7zgAAAUA"]
[Mon Apr 13 20:39:53.123400 2026] [:error] [pid 63310:tid 63359] [client 103.77.107.178:60016] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "adzkGXoXpRU5ztmwPjJYOgAAAE8"]
[Mon Apr 13 20:47:03.897826 2026] [:error] [pid 9314:tid 9322] [client 43.155.140.157:36068] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "adzlx2_r4W8fX2GWyGQazwAAAYY"]
[Mon Apr 13 22:12:42.740790 2026] [:error] [pid 9314:tid 9338] [client 20.104.99.158:46742] [client 20.104.99.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adz52m_r4W8fX2GWyGRBiAAAAZY"]
[Mon Apr 13 22:12:43.154911 2026] [:error] [pid 63406:tid 63426] [client 20.104.99.158:46744] [client 20.104.99.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adz527HZEIkQ0Zmgp5rtywAAAM8"]
[Mon Apr 13 22:12:43.616596 2026] [:error] [pid 63406:tid 63417] [client 20.104.99.158:46750] [client 20.104.99.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adz527HZEIkQ0Zmgp5rt0AAAAMY"]
[Mon Apr 13 22:12:44.043737 2026] [:error] [pid 9314:tid 9329] [client 20.104.99.158:47041] [client 20.104.99.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adz53G_r4W8fX2GWyGRBiQAAAY0"]
[Mon Apr 13 23:24:48.916047 2026] [:error] [pid 63406:tid 63422] [client 43.130.9.111:35730] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ad0KwLHZEIkQ0Zmgp5ooxgAAAMs"]
[Mon Apr 13 23:26:07.576693 2026] [:error] [pid 63311:tid 63383] [client 74.248.132.51:8805] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad0LD6HjrGN1MqBCVFkv1wAAAIw"]
[Mon Apr 13 23:26:08.103011 2026] [:error] [pid 9314:tid 9339] [client 74.248.132.51:59360] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad0LEG_r4W8fX2GWyGRhSQAAAZc"]
[Mon Apr 13 23:26:08.633866 2026] [:error] [pid 63406:tid 63417] [client 74.248.132.51:8822] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad0LELHZEIkQ0Zmgp5op2gAAAMY"]
[Mon Apr 13 23:26:09.179109 2026] [:error] [pid 57183:tid 57202] [client 74.248.132.51:8806] [client 74.248.132.51] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad0LETDO3t8R5NaxzYSZXQAAAVE"]
[Mon Apr 13 23:31:17.576815 2026] [:error] [pid 63310:tid 63361] [client 67.205.187.227:56608] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad0MRXoXpRU5ztmwPjJ-qwAAAFE"]
[Mon Apr 13 23:31:22.435474 2026] [:error] [pid 63406:tid 63417] [client 67.205.187.227:34312] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad0MSrHZEIkQ0Zmgp5ouhwAAAMY"]
[Mon Apr 13 23:32:33.904375 2026] [:error] [pid 63406:tid 63432] [client 103.178.208.43:54883] [client 103.178.208.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.208.43, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ad0MkbHZEIkQ0Zmgp5ovXwAAANU"]
[Tue Apr 14 00:09:15.368304 2026] [:error] [pid 63311:tid 63379] [client 43.138.68.113:41546] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ad0VK6HjrGN1MqBCVFk68QAAAIg"]
[Tue Apr 14 04:47:31.345521 2026] [:error] [pid 19687:tid 19706] [client 43.159.148.221:45374] [client 43.159.148.221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ad1WY2BZImnR12CCWFotpgAAAAo"]
[Tue Apr 14 04:55:29.646500 2026] [:error] [pid 19793:tid 19817] [client 67.205.187.227:46370] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad1YQQGEQsZw9TkmIA4PZAAAANY"]
[Tue Apr 14 04:55:35.888312 2026] [:error] [pid 19793:tid 19807] [client 67.205.187.227:37216] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad1YRwGEQsZw9TkmIA4PeAAAAMw"]
[Tue Apr 14 04:59:54.241082 2026] [:error] [pid 19687:tid 19711] [client 67.205.187.227:60724] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad1ZSmBZImnR12CCWFow2AAAAA8"]
[Tue Apr 14 04:59:57.294526 2026] [:error] [pid 19689:tid 19757] [client 67.205.187.227:47126] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad1ZTZWU15arjG3aJyRQmQAAAII"]
[Tue Apr 14 06:09:57.629653 2026] [:error] [pid 19687:tid 19713] [client 67.205.187.227:39396] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad1ptWBZImnR12CCWFo-NwAAABE"]
[Tue Apr 14 06:10:03.427216 2026] [:error] [pid 19688:tid 19737] [client 67.205.187.227:51502] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad1pu4Hoi57o76xPstLIDAAAAEk"]
[Tue Apr 14 06:33:38.114590 2026] [:error] [pid 35629:tid 35662] [client 185.82.72.175:32745] [client 185.82.72.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ad1vQjY8VahzC1YJBSiL-wAAAEM"]
[Tue Apr 14 06:33:39.509708 2026] [:error] [pid 35713:tid 35717] [client 185.82.72.118:62839] [client 185.82.72.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ad1vQ66-hhx6ZepqOSlMTwAAAME"]
[Tue Apr 14 06:33:41.706602 2026] [:error] [pid 35629:tid 35670] [client 185.82.72.169:26619] [client 185.82.72.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ad1vRTY8VahzC1YJBSiMGwAAAEs"]
[Tue Apr 14 06:33:43.129143 2026] [:error] [pid 35630:tid 35689] [client 185.82.72.192:58879] [client 185.82.72.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ad1vRzer0pVFxOiOauWLJAAAAIM"]
[Tue Apr 14 06:33:45.423364 2026] [:error] [pid 35630:tid 35688] [client 185.82.72.133:63963] [client 185.82.72.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ad1vSTer0pVFxOiOauWLPAAAAII"]
[Tue Apr 14 06:33:46.252415 2026] [:error] [pid 37226:tid 37252] [client 185.82.72.166:43765] [client 185.82.72.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ad1vSpOA5-IQ0IVmQCpqdAAAAVg"]
[Tue Apr 14 06:33:47.923682 2026] [:error] [pid 35713:tid 35727] [client 185.82.72.143:44711] [client 185.82.72.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ad1vS66-hhx6ZepqOSlMlAAAAMs"]
[Tue Apr 14 06:33:48.493053 2026] [:error] [pid 35628:tid 35654] [client 185.82.72.173:25201] [client 185.82.72.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ad1vTOfPm-ozGuwCWXJ9-AAAABY"]
[Tue Apr 14 06:33:49.035953 2026] [:error] [pid 35713:tid 35717] [client 185.82.72.156:40903] [client 185.82.72.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ad1vTa6-hhx6ZepqOSlMnwAAAME"]
[Tue Apr 14 06:33:49.601362 2026] [:error] [pid 35629:tid 35676] [client 185.82.72.197:62501] [client 185.82.72.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ad1vTTY8VahzC1YJBSiMZgAAAFE"]
[Tue Apr 14 06:33:50.422941 2026] [:error] [pid 35629:tid 35677] [client 185.82.72.197:61505] [client 185.82.72.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ad1vTjY8VahzC1YJBSiMbAAAAFI"]
[Tue Apr 14 06:33:51.506183 2026] [:error] [pid 35713:tid 35729] [client 185.82.72.152:48157] [client 185.82.72.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "ad1vT66-hhx6ZepqOSlMswAAAM0"]
[Tue Apr 14 06:33:52.609885 2026] [:error] [pid 37226:tid 37237] [client 185.82.72.133:45225] [client 185.82.72.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ad1vUJOA5-IQ0IVmQCpq1gAAAUk"]
[Tue Apr 14 06:33:53.436546 2026] [:error] [pid 35630:tid 35690] [client 185.82.72.152:59841] [client 185.82.72.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ad1vUTer0pVFxOiOauWLegAAAIQ"]
[Tue Apr 14 06:33:54.259087 2026] [:error] [pid 37226:tid 37230] [client 185.82.72.149:39141] [client 185.82.72.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ad1vUpOA5-IQ0IVmQCpq3wAAAUI"]
[Tue Apr 14 06:33:56.490324 2026] [:error] [pid 35630:tid 35697] [client 185.82.72.173:23893] [client 185.82.72.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ad1vVDer0pVFxOiOauWLmgAAAIs"]
[Tue Apr 14 06:33:57.325433 2026] [:error] [pid 37226:tid 37243] [client 185.82.72.130:43075] [client 185.82.72.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ad1vVZOA5-IQ0IVmQCprFQAAAU8"]
[Tue Apr 14 06:33:59.504786 2026] [:error] [pid 35630:tid 35695] [client 185.82.72.164:20169] [client 185.82.72.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ad1vVzer0pVFxOiOauWLuwAAAIk"]
[Tue Apr 14 06:34:00.345731 2026] [:error] [pid 35713:tid 35721] [client 185.82.72.175:60683] [client 185.82.72.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ad1vWK6-hhx6ZepqOSlM9wAAAMU"]
[Tue Apr 14 06:34:02.047255 2026] [:error] [pid 37226:tid 37244] [client 185.82.72.146:55435] [client 185.82.72.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ad1vWpOA5-IQ0IVmQCprVwAAAVA"]
[Tue Apr 14 06:34:02.864320 2026] [:error] [pid 37226:tid 37248] [client 185.82.72.169:26283] [client 185.82.72.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ad1vWpOA5-IQ0IVmQCprZwAAAVQ"]
[Tue Apr 14 06:34:03.709530 2026] [:error] [pid 35713:tid 35721] [client 185.82.72.172:64791] [client 185.82.72.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ad1vW66-hhx6ZepqOSlNCgAAAMU"]
[Tue Apr 14 06:34:04.245608 2026] [:error] [pid 35630:tid 35701] [client 185.82.72.12:61985] [client 185.82.72.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ad1vXDer0pVFxOiOauWL4wAAAI8"]
[Tue Apr 14 06:34:05.945005 2026] [:error] [pid 35628:tid 35653] [client 185.82.72.164:60561] [client 185.82.72.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ad1vXefPm-ozGuwCWXJ-jgAAABU"]
[Tue Apr 14 06:34:08.368021 2026] [:error] [pid 35630:tid 35707] [client 185.82.72.165:44079] [client 185.82.72.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ad1vYDer0pVFxOiOauWMHAAAAJU"]
[Tue Apr 14 06:34:08.893433 2026] [:error] [pid 37048:tid 37060] [client 185.82.72.194:33987] [client 185.82.72.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ad1vYJ52Bo1OyzeXo_xSTwAAAQo"]
[Tue Apr 14 06:34:09.430138 2026] [:error] [pid 37226:tid 37236] [client 185.82.72.198:34015] [client 185.82.72.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ad1vYZOA5-IQ0IVmQCprqAAAAUg"]
[Tue Apr 14 06:34:13.255626 2026] [:error] [pid 37226:tid 37245] [client 185.82.72.131:64701] [client 185.82.72.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ad1vZZOA5-IQ0IVmQCpr6AAAAVE"]
[Tue Apr 14 06:34:14.614926 2026] [:error] [pid 37226:tid 37248] [client 185.82.72.136:45375] [client 185.82.72.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.136, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ad1vZpOA5-IQ0IVmQCpr9QAAAVQ"]
[Tue Apr 14 06:34:17.959273 2026] [:error] [pid 37226:tid 37239] [client 185.82.72.136:45375] [client 185.82.72.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ad1vaZOA5-IQ0IVmQCpsJQAAAUs"]
[Tue Apr 14 06:34:20.095866 2026] [:error] [pid 35628:tid 35633] [client 185.82.72.193:56839] [client 185.82.72.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.193, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ad1vbOfPm-ozGuwCWXJ_RgAAAAE"]
[Tue Apr 14 06:34:20.644750 2026] [:error] [pid 35628:tid 35639] [client 185.82.72.193:56839] [client 185.82.72.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "ad1vbOfPm-ozGuwCWXJ_TgAAAAc"]
[Tue Apr 14 06:34:23.445243 2026] [:error] [pid 35629:tid 35663] [client 185.82.72.166:48601] [client 185.82.72.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ad1vbzY8VahzC1YJBSiNlAAAAEQ"]
[Tue Apr 14 06:34:26.203415 2026] [:error] [pid 37226:tid 37231] [client 185.82.72.191:33575] [client 185.82.72.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ad1vcpOA5-IQ0IVmQCpswgAAAUM"]
[Tue Apr 14 06:34:27.283438 2026] [:error] [pid 35713:tid 35732] [client 185.82.72.156:25409] [client 185.82.72.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ad1vc66-hhx6ZepqOSlODAAAANA"]
[Tue Apr 14 06:34:28.647059 2026] [:error] [pid 35713:tid 35726] [client 185.82.72.114:32825] [client 185.82.72.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.114, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ad1vdK6-hhx6ZepqOSlOGgAAAMo"]
[Tue Apr 14 06:34:28.926167 2026] [:error] [pid 35713:tid 35731] [client 185.82.72.114:32825] [client 185.82.72.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ad1vdK6-hhx6ZepqOSlOHgAAAM8"]
[Tue Apr 14 06:34:40.246315 2026] [:error] [pid 37048:tid 37060] [client 185.82.72.12:64355] [client 185.82.72.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ad1vgJ52Bo1OyzeXo_xULgAAAQo"]
[Tue Apr 14 06:34:41.673613 2026] [:error] [pid 35629:tid 35677] [client 185.82.72.144:61081] [client 185.82.72.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.144, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ad1vgTY8VahzC1YJBSiOMAAAAFI"]
[Tue Apr 14 06:34:42.819810 2026] [:error] [pid 35629:tid 35670] [client 185.82.72.144:61081] [client 185.82.72.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ad1vgjY8VahzC1YJBSiOPgAAAEs"]
[Tue Apr 14 06:34:43.643942 2026] [:error] [pid 35713:tid 35723] [client 185.82.72.122:45361] [client 185.82.72.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ad1vg66-hhx6ZepqOSlOugAAAMc"]
[Tue Apr 14 06:34:44.759204 2026] [:error] [pid 37048:tid 37063] [client 185.82.72.165:52187] [client 185.82.72.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ad1vhJ52Bo1OyzeXo_xUWAAAAQ0"]
[Tue Apr 14 06:34:46.122607 2026] [:error] [pid 35713:tid 35717] [client 185.82.72.153:58061] [client 185.82.72.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ad1vhq6-hhx6ZepqOSlO1QAAAME"]
[Tue Apr 14 06:34:46.655279 2026] [:error] [pid 37048:tid 37067] [client 185.82.72.171:58157] [client 185.82.72.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ad1vhp52Bo1OyzeXo_xUewAAARE"]
[Tue Apr 14 06:34:48.571781 2026] [:error] [pid 37226:tid 37234] [client 185.82.72.160:21941] [client 185.82.72.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ad1viJOA5-IQ0IVmQCpuogAAAUY"]
[Tue Apr 14 06:34:50.470247 2026] [:error] [pid 35713:tid 35732] [client 185.82.72.191:63619] [client 185.82.72.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ad1viq6-hhx6ZepqOSlO-AAAANA"]
[Tue Apr 14 06:34:51.836630 2026] [:error] [pid 37048:tid 37052] [client 185.82.72.129:46165] [client 185.82.72.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "ad1vi552Bo1OyzeXo_xUvAAAAQI"]
[Tue Apr 14 06:34:53.202715 2026] [:error] [pid 37226:tid 37234] [client 185.82.72.197:60409] [client 185.82.72.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ad1vjZOA5-IQ0IVmQCpu5AAAAUY"]
[Tue Apr 14 06:34:54.287018 2026] [:error] [pid 35713:tid 35740] [client 185.82.72.152:41145] [client 185.82.72.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "ad1vjq6-hhx6ZepqOSlPSQAAANg"]
[Tue Apr 14 06:34:55.650575 2026] [:error] [pid 35713:tid 35740] [client 185.82.72.133:22077] [client 185.82.72.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ad1vj66-hhx6ZepqOSlPdQAAANg"]
[Tue Apr 14 06:35:01.191725 2026] [:error] [pid 35630:tid 35694] [client 185.82.72.168:38131] [client 185.82.72.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ad1vlTer0pVFxOiOauWOUQAAAIg"]
[Tue Apr 14 06:35:01.726651 2026] [:error] [pid 37226:tid 37237] [client 185.82.72.151:36381] [client 185.82.72.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ad1vlZOA5-IQ0IVmQCpvWwAAAUk"]
[Tue Apr 14 06:35:02.264453 2026] [:error] [pid 37048:tid 37056] [client 185.82.72.11:46011] [client 185.82.72.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ad1vlp52Bo1OyzeXo_xVRQAAAQY"]
[Tue Apr 14 06:35:02.801798 2026] [:error] [pid 35629:tid 35662] [client 185.82.72.175:47173] [client 185.82.72.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ad1vljY8VahzC1YJBSiO4AAAAEM"]
[Tue Apr 14 06:35:03.655849 2026] [:error] [pid 37048:tid 37051] [client 185.82.72.193:24209] [client 185.82.72.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ad1vl552Bo1OyzeXo_xVUwAAAQE"]
[Tue Apr 14 06:35:05.252544 2026] [:error] [pid 37226:tid 37232] [client 185.82.72.123:31171] [client 185.82.72.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ad1vmZOA5-IQ0IVmQCpvnwAAAUQ"]
[Tue Apr 14 06:35:06.345373 2026] [:error] [pid 35713:tid 35730] [client 185.82.72.159:28753] [client 185.82.72.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad1vmq6-hhx6ZepqOSlQJgAAAM4"]
[Tue Apr 14 06:35:06.880717 2026] [:error] [pid 37048:tid 37053] [client 185.82.72.140:33861] [client 185.82.72.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ad1vmp52Bo1OyzeXo_xVbAAAAQM"]
[Tue Apr 14 06:35:07.417616 2026] [:error] [pid 37048:tid 37061] [client 185.82.72.197:62159] [client 185.82.72.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ad1vm552Bo1OyzeXo_xVbwAAAQs"]
[Tue Apr 14 06:35:07.972612 2026] [:error] [pid 35629:tid 35674] [client 185.82.72.173:65159] [client 185.82.72.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ad1vmzY8VahzC1YJBSiPJgAAAE8"]
[Tue Apr 14 06:35:48.905878 2026] [autoindex:error] [pid 35713:tid 35730] [client 185.82.72.122:32857] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 14 07:04:22.452649 2026] [:error] [pid 35630:tid 35692] [client 175.6.217.4:35782] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ad12djer0pVFxOiOauWujQAAAIY"]
[Tue Apr 14 07:16:40.063133 2026] [:error] [pid 35628:tid 35647] [client 67.205.187.227:59718] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad15WOfPm-ozGuwCWXKe1wAAAA8"]
[Tue Apr 14 07:16:44.426493 2026] [:error] [pid 35713:tid 35723] [client 67.205.187.227:55714] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad15XK6-hhx6ZepqOSmeTwAAAMc"]
[Tue Apr 14 12:32:54.670799 2026] [:error] [pid 35628:tid 35638] [client 67.205.187.227:32776] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad3DdufPm-ozGuwCWXLHQQAAAAY"]
[Tue Apr 14 12:32:59.113589 2026] [:error] [pid 37048:tid 37062] [client 67.205.187.227:33554] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad3De552Bo1OyzeXo_zT4wAAAQw"]
[Tue Apr 14 12:39:04.817009 2026] [:error] [pid 4902:tid 4919] [client 67.205.187.227:56718] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad3E6Iv8vJvl9lGy39hTOwAAAY8"]
[Tue Apr 14 12:39:09.983481 2026] [:error] [pid 35628:tid 35656] [client 67.205.187.227:38682] [client 67.205.187.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad3E7efPm-ozGuwCWXLHxAAAABg"]
[Tue Apr 14 13:12:36.805857 2026] [:error] [pid 4902:tid 4913] [client 43.157.46.118:50002] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ad3MxIv8vJvl9lGy39hZkAAAAYk"]
[Tue Apr 14 15:38:14.579800 2026] [:error] [pid 60074:tid 60088] [client 43.134.28.2:49754] [client 43.134.28.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ad3u5utqnEmNU9vpHCnuGwAAAMw"]
[Tue Apr 14 16:34:05.735093 2026] [:error] [pid 59987:tid 60050] [client 34.85.144.184:64112] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ad37_VWpk-Tfi6_vLKrKlAAAAIM"]
[Tue Apr 14 16:34:06.167292 2026] [:error] [pid 59987:tid 60068] [client 34.85.144.184:65478] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ad37_lWpk-Tfi6_vLKrKlgAAAJU"]
[Tue Apr 14 16:34:06.599470 2026] [:error] [pid 59987:tid 60066] [client 34.85.144.184:63429] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ad37_lWpk-Tfi6_vLKrKmgAAAJM"]
[Tue Apr 14 20:47:46.458015 2026] [:error] [pid 3778:tid 3800] [client 49.233.45.47:37292] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ad43chx5DfpNmYF_PaHd6wAAAVQ"]
[Tue Apr 14 22:17:11.313724 2026] [:error] [pid 60074:tid 60089] [client 216.81.248.211:53776] [client 216.81.248.211] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ad5MZ-tqnEmNU9vpHCm6IwAAAM0"]
[Tue Apr 14 22:30:37.951856 2026] [:error] [pid 59986:tid 60035] [client 129.226.213.145:59192] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ad5PjZ6axKeW6bX4H7emCgAAAE8"]
[Wed Apr 15 01:01:06.094437 2026] [:error] [pid 62297:tid 62369] [client 74.248.158.124:17574] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad5y0qvogcWlrafOEaG6LAAAAQ8"]
[Wed Apr 15 01:01:06.664368 2026] [:error] [pid 62296:tid 62338] [client 74.248.158.124:20966] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad5y0sTNd04nWM2DK4SBKgAAAEs"]
[Wed Apr 15 01:01:07.750341 2026] [:error] [pid 17926:tid 17933] [client 74.248.158.124:3285] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad5y0_KxFvgDwMI04zBQAQAAAcA"]
[Wed Apr 15 01:01:08.647823 2026] [:error] [pid 62296:tid 62348] [client 74.248.158.124:50412] [client 74.248.158.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad5y1MTNd04nWM2DK4SBMgAAAFU"]
[Wed Apr 15 03:34:22.526334 2026] [:error] [pid 62296:tid 62328] [client 193.19.109.135:24379] [client 193.19.109.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.135, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ad6WvsTNd04nWM2DK4TFZAAAAEE"]
[Wed Apr 15 09:04:34.947006 2026] [:error] [pid 30644:tid 30655] [client 105.113.124.70:15370] [client 105.113.124.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.113.124.70, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ad7kIq8vuyJ0N41zsM_3qgAAAMU"]
[Wed Apr 15 11:14:54.861546 2026] [:error] [pid 30554:tid 30611] [client 43.153.62.161:54536] [client 43.153.62.161] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ad8Crl6Jrdy3caXvUku9pwAAAFg"]
[Wed Apr 15 11:29:35.940074 2026] [:error] [pid 51186:tid 51200] [client 20.219.218.121:10662] [client 20.219.218.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "ad8GH1fx1CjK_ZPfY1R_UQAAAUw"]
[Wed Apr 15 11:29:36.524982 2026] [:error] [pid 50234:tid 50256] [client 20.219.218.121:17070] [client 20.219.218.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "ad8GINr0cDjH19-BoGzMfAAAARQ"]
[Wed Apr 15 11:29:37.130418 2026] [:error] [pid 51186:tid 51210] [client 20.219.218.121:6547] [client 20.219.218.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "ad8GIVfx1CjK_ZPfY1R_UgAAAVY"]
[Wed Apr 15 11:29:37.749204 2026] [:error] [pid 50234:tid 50257] [client 20.219.218.121:17074] [client 20.219.218.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "ad8GIdr0cDjH19-BoGzMfwAAARU"]
[Wed Apr 15 21:16:07.679872 2026] [:error] [pid 31053:tid 31062] [client 170.106.35.187:60142] [client 170.106.35.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ad-PlxcEkLCmvF0fjDfnLAAAAIY"]
[Wed Apr 15 22:18:07.437393 2026] [:error] [pid 23913:tid 23916] [client 192.144.148.122:52970] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ad-eH1UaK3MLdSaLOyjAgAAAAUE"]
[Wed Apr 15 23:32:07.501683 2026] [:error] [pid 30958:tid 31023] [client 124.123.154.179:7984] [client 124.123.154.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.123.154.179, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ad-vd8eG3wSKTO7NWFHtVAAAAMc"]
[Thu Apr 16 01:11:18.026458 2026] [rewrite:error] [pid 30958:tid 31040] [client 107.172.195.4:39768] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 01:12:22.506851 2026] [rewrite:error] [pid 31053:tid 31076] [client 104.164.126.164:13978] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 01:33:16.881519 2026] [rewrite:error] [pid 16664:tid 16728] [client 104.164.126.62:60020] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 01:59:14.508594 2026] [rewrite:error] [pid 34542:tid 34558] [client 104.252.191.137:42344] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 02:14:00.438561 2026] [rewrite:error] [pid 792:tid 876] [client 104.164.126.10:8796] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 02:27:50.438765 2026] [rewrite:error] [pid 20548:tid 20558] [client 107.172.195.169:29272] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 02:43:15.069411 2026] [:error] [pid 792:tid 893] [client 91.200.101.138:62220] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/graphql"] [unique_id "ad_cQ93PZ8z30TezIkZoegAAAM8"]
[Thu Apr 16 02:47:04.226763 2026] [rewrite:error] [pid 20548:tid 20564] [client 104.164.126.6:21668] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Thu Apr 16 03:26:20.476853 2026] [:error] [pid 54814:tid 54834] [client 216.73.216.213:62361] [client 216.73.216.213] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.measureyourcause.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "ad_mXDrHu_-tAAe-BOXKkAAAAY4"]
[Thu Apr 16 04:44:15.558599 2026] [:error] [pid 57639:tid 57668] [client 182.40.104.255:56908] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ad_4n6MCQoTw7TsxWumi9QAAANY"]
[Thu Apr 16 05:19:21.075424 2026] [:error] [pid 57639:tid 57651] [client 49.51.72.236:50162] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeAA2aMCQoTw7TsxWum1pgAAAMU"]
[Thu Apr 16 09:49:39.102061 2026] [:error] [pid 49094:tid 49101] [client 98.93.160.221:35572] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aeBAMzbDwvcXorHR_MzwfgAAAUU"]
[Thu Apr 16 10:56:22.015579 2026] [:error] [pid 7880:tid 7903] [client 20.193.52.210:1762] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeBP1qaezm4fSGc0yULygQAAAZI"]
[Thu Apr 16 10:56:22.119560 2026] [:error] [pid 57536:tid 57550] [client 20.193.52.210:6856] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeBP1iQU4faGja6jpDurTwAAAAI"]
[Thu Apr 16 10:56:22.181223 2026] [:error] [pid 57538:tid 57603] [client 20.193.52.210:1744] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeBP1suMaiEF5SVR2Bd5yQAAAIE"]
[Thu Apr 16 10:56:22.247262 2026] [:error] [pid 57538:tid 57624] [client 20.193.52.210:6855] [client 20.193.52.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeBP1suMaiEF5SVR2Bd5ygAAAJY"]
[Thu Apr 16 11:14:22.411162 2026] [:error] [pid 7880:tid 7901] [client 98.93.160.221:60928] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aeBUDqaezm4fSGc0yUL6KgAAAZA"]
[Thu Apr 16 16:30:43.218351 2026] [:error] [pid 57639:tid 57647] [client 101.33.81.73:44992] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeCeM6MCQoTw7TsxWunbxwAAAME"]
[Thu Apr 16 17:07:55.943784 2026] [:error] [pid 57639:tid 57646] [client 43.140.247.223:48778] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeCm66MCQoTw7TsxWunvsAAAAMA"]
[Thu Apr 16 18:39:45.937377 2026] [:error] [pid 49094:tid 49099] [client 43.153.204.189:55940] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeC8cTbDwvcXorHR_MyBDAAAAUM"]
[Thu Apr 16 20:55:23.393541 2026] [:error] [pid 57536:tid 57566] [client 4.225.163.126:56403] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeDcOyQU4faGja6jpDtxDgAAABI"]
[Thu Apr 16 20:55:27.195425 2026] [:error] [pid 29603:tid 29609] [client 4.225.163.126:46189] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeDcP1fGOR6fpTWUAzqQhAAAAQQ"]
[Thu Apr 16 20:55:38.558804 2026] [:error] [pid 29603:tid 29605] [client 4.225.163.126:43850] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeDcSlfGOR6fpTWUAzqQiQAAAQA"]
[Thu Apr 16 20:55:40.210375 2026] [:error] [pid 57639:tid 57650] [client 4.225.163.126:41601] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeDcTKMCQoTw7TsxWumUhgAAAMQ"]
[Thu Apr 16 20:55:43.701407 2026] [:error] [pid 29603:tid 29622] [client 4.225.163.126:61933] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "aeDcT1fGOR6fpTWUAzqQiwAAARE"]
[Thu Apr 16 20:55:47.220300 2026] [:error] [pid 57639:tid 57659] [client 4.225.163.126:46164] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "aeDcU6MCQoTw7TsxWumUkgAAAM0"]
[Thu Apr 16 20:55:48.950753 2026] [:error] [pid 57538:tid 57626] [client 4.225.163.126:61946] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "aeDcVMuMaiEF5SVR2Bfc1QAAAJg"]
[Thu Apr 16 20:55:50.288431 2026] [:error] [pid 29603:tid 29624] [client 4.225.163.126:46188] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "aeDcVlfGOR6fpTWUAzqQlAAAARM"]
[Thu Apr 16 20:55:51.134698 2026] [:error] [pid 49094:tid 49105] [client 4.225.163.126:55636] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeDcVzbDwvcXorHR_MzM_gAAAUk"]
[Thu Apr 16 20:55:53.670546 2026] [:error] [pid 57538:tid 57602] [client 4.225.163.126:63793] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeDcWcuMaiEF5SVR2Bfc2QAAAIA"]
[Thu Apr 16 20:55:55.138157 2026] [:error] [pid 49094:tid 49102] [client 4.225.163.126:57227] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeDcWzbDwvcXorHR_MzNBQAAAUY"]
[Thu Apr 16 20:55:57.018211 2026] [:error] [pid 57536:tid 57551] [client 4.225.163.126:63975] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeDcXSQU4faGja6jpDtxNQAAAAM"]
[Thu Apr 16 20:55:58.454759 2026] [:error] [pid 57639:tid 57668] [client 4.225.163.126:56001] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeDcXqMCQoTw7TsxWumUsAAAANY"]
[Thu Apr 16 20:56:03.130150 2026] [:error] [pid 29603:tid 29619] [client 4.225.163.126:63755] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeDcY1fGOR6fpTWUAzqQmgAAAQ4"]
[Thu Apr 16 20:56:17.101969 2026] [:error] [pid 57536:tid 57552] [client 4.225.163.126:5739] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeDccSQU4faGja6jpDtxUwAAAAQ"]
[Thu Apr 16 20:56:18.299872 2026] [:error] [pid 57536:tid 57564] [client 4.225.163.126:62367] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeDcciQU4faGja6jpDtxVgAAABA"]
[Thu Apr 16 20:56:19.197450 2026] [:error] [pid 49094:tid 49102] [client 4.225.163.126:62916] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeDcczbDwvcXorHR_MzNMAAAAUY"]
[Thu Apr 16 20:56:20.683015 2026] [:error] [pid 49094:tid 49100] [client 4.225.163.126:36684] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeDcdDbDwvcXorHR_MzNNQAAAUQ"]
[Thu Apr 16 20:56:35.350020 2026] [:error] [pid 49094:tid 49117] [client 4.225.163.126:56019] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aeDcgzbDwvcXorHR_MzNXAAAAVU"]
[Thu Apr 16 20:56:52.850342 2026] [:error] [pid 49094:tid 49099] [client 4.225.163.126:41206] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeDclDbDwvcXorHR_MzNhwAAAUM"]
[Thu Apr 16 20:56:54.151404 2026] [:error] [pid 49094:tid 49115] [client 4.225.163.126:6013] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeDcljbDwvcXorHR_MzNiwAAAVM"]
[Thu Apr 16 20:56:55.353312 2026] [:error] [pid 57639:tid 57660] [client 4.225.163.126:62979] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeDcl6MCQoTw7TsxWumVZgAAAM4"]
[Thu Apr 16 20:56:56.497626 2026] [:error] [pid 57639:tid 57659] [client 4.225.163.126:5842] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeDcmKMCQoTw7TsxWumVagAAAM0"]
[Thu Apr 16 20:56:58.228382 2026] [:error] [pid 49094:tid 49098] [client 4.225.163.126:62317] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeDcmjbDwvcXorHR_MzNjQAAAUI"]
[Thu Apr 16 20:56:59.554896 2026] [:error] [pid 57639:tid 57661] [client 4.225.163.126:48209] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeDcm6MCQoTw7TsxWumVcwAAAM8"]
[Thu Apr 16 20:57:01.098035 2026] [:error] [pid 49094:tid 49100] [client 4.225.163.126:63029] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeDcnTbDwvcXorHR_MzNkgAAAUQ"]
[Thu Apr 16 20:57:03.164549 2026] [:error] [pid 49094:tid 49119] [client 4.225.163.126:48240] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeDcnzbDwvcXorHR_MzNlQAAAVc"]
[Thu Apr 16 20:57:04.517082 2026] [:error] [pid 57538:tid 57602] [client 4.225.163.126:51145] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/footer.php"] [unique_id "aeDcoMuMaiEF5SVR2BfdBAAAAIA"]
[Thu Apr 16 20:57:05.764259 2026] [:error] [pid 57639:tid 57656] [client 4.225.163.126:50176] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/footer.php"] [unique_id "aeDcoaMCQoTw7TsxWumVjwAAAMo"]
[Thu Apr 16 20:57:31.017608 2026] [:error] [pid 57536:tid 57564] [client 4.225.163.126:58873] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "aeDcuyQU4faGja6jpDtxuAAAABA"]
[Thu Apr 16 20:57:34.010556 2026] [:error] [pid 29603:tid 29625] [client 4.225.163.126:46536] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeDcvlfGOR6fpTWUAzqRGAAAARQ"]
[Thu Apr 16 20:57:36.029426 2026] [:error] [pid 29603:tid 29611] [client 4.225.163.126:58825] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeDcwFfGOR6fpTWUAzqRHAAAAQY"]
[Thu Apr 16 20:57:38.249633 2026] [:error] [pid 57639:tid 57662] [client 4.225.163.126:53072] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeDcwqMCQoTw7TsxWumWOgAAANA"]
[Thu Apr 16 20:57:40.098295 2026] [:error] [pid 57639:tid 57649] [client 4.225.163.126:55160] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeDcxKMCQoTw7TsxWumWQgAAAMM"]
[Thu Apr 16 20:57:41.650434 2026] [:error] [pid 57536:tid 57561] [client 4.225.163.126:36213] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeDcxSQU4faGja6jpDtxwgAAAA0"]
[Thu Apr 16 20:57:45.837130 2026] [:error] [pid 49094:tid 49116] [client 4.225.163.126:46530] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeDcyTbDwvcXorHR_MzN_AAAAVQ"]
[Thu Apr 16 20:57:47.749957 2026] [:error] [pid 49094:tid 49102] [client 4.225.163.126:36277] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeDcyzbDwvcXorHR_MzN_QAAAUY"]
[Thu Apr 16 20:57:51.986448 2026] [:error] [pid 29603:tid 29623] [client 4.225.163.126:65218] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeDcz1fGOR6fpTWUAzqRNQAAARI"]
[Thu Apr 16 20:58:03.050460 2026] [:error] [pid 57639:tid 57649] [client 4.225.163.126:65257] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeDc26MCQoTw7TsxWumWjAAAAMM"]
[Thu Apr 16 20:58:05.040572 2026] [:error] [pid 57536:tid 57554] [client 4.225.163.126:46900] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeDc3SQU4faGja6jpDtx-gAAAAY"]
[Thu Apr 16 20:58:08.519225 2026] [:error] [pid 57536:tid 57565] [client 4.225.163.126:39279] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeDc4CQU4faGja6jpDtyAgAAABE"]
[Thu Apr 16 20:58:10.237547 2026] [:error] [pid 7880:tid 7896] [client 4.225.163.126:40500] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeDc4qaezm4fSGc0yUKhOgAAAYs"]
[Thu Apr 16 20:58:19.755129 2026] [:error] [pid 7880:tid 7886] [client 4.225.163.126:42357] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeDc66aezm4fSGc0yUKhPgAAAYE"]
[Thu Apr 16 20:58:26.982324 2026] [:error] [pid 57536:tid 57548] [client 4.225.163.126:60252] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bdktk.php"] [unique_id "aeDc8iQU4faGja6jpDtyOwAAAAA"]
[Thu Apr 16 20:58:28.330968 2026] [:error] [pid 57639:tid 57655] [client 4.225.163.126:48286] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bdktk.php"] [unique_id "aeDc9KMCQoTw7TsxWumWogAAAMk"]
[Thu Apr 16 20:58:31.241147 2026] [:error] [pid 57639:tid 57666] [client 4.225.163.126:40478] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bdktk.php"] [unique_id "aeDc96MCQoTw7TsxWumWqQAAANQ"]
[Thu Apr 16 20:58:35.874151 2026] [:error] [pid 57639:tid 57652] [client 4.225.163.126:56875] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bdktk.php"] [unique_id "aeDc-6MCQoTw7TsxWumWswAAAMY"]
[Thu Apr 16 20:58:41.576393 2026] [:error] [pid 57536:tid 57557] [client 4.225.163.126:43144] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v5.php"] [unique_id "aeDdASQU4faGja6jpDtyRAAAAAk"]
[Thu Apr 16 20:58:43.962652 2026] [:error] [pid 7880:tid 7904] [client 4.225.163.126:5555] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v5.php"] [unique_id "aeDdA6aezm4fSGc0yUKhWwAAAZM"]
[Thu Apr 16 20:58:44.933715 2026] [:error] [pid 49094:tid 49106] [client 4.225.163.126:56862] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v5.php"] [unique_id "aeDdBDbDwvcXorHR_MzOYgAAAUo"]
[Thu Apr 16 20:58:46.374212 2026] [:error] [pid 7880:tid 7899] [client 4.225.163.126:48712] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/v5.php"] [unique_id "aeDdBqaezm4fSGc0yUKhYAAAAY4"]
[Thu Apr 16 20:58:48.971392 2026] [:error] [pid 57537:tid 57596] [client 4.225.163.126:42377] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "aeDdCFVQRS8nm73ENAmzzQAAAFU"]
[Thu Apr 16 20:58:51.322922 2026] [:error] [pid 57639:tid 57646] [client 4.225.163.126:5544] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "aeDdC6MCQoTw7TsxWumW0QAAAMA"]
[Thu Apr 16 20:58:54.084519 2026] [:error] [pid 57639:tid 57652] [client 4.225.163.126:48302] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "aeDdDqMCQoTw7TsxWumW0gAAAMY"]
[Thu Apr 16 20:58:56.248540 2026] [:error] [pid 7880:tid 7907] [client 4.225.163.126:48732] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws85.php"] [unique_id "aeDdEKaezm4fSGc0yUKhbQAAAZY"]
[Thu Apr 16 20:59:00.353176 2026] [:error] [pid 57639:tid 57655] [client 4.225.163.126:48266] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws87.php"] [unique_id "aeDdFKMCQoTw7TsxWumW2wAAAMk"]
[Thu Apr 16 20:59:12.128926 2026] [:error] [pid 57639:tid 57657] [client 4.225.163.126:61183] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/areak1.php"] [unique_id "aeDdIKMCQoTw7TsxWumXKQAAAMs"]
[Thu Apr 16 20:59:16.976911 2026] [:error] [pid 57639:tid 57664] [client 4.225.163.126:44345] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/areak1.php"] [unique_id "aeDdJKMCQoTw7TsxWumXPAAAANI"]
[Thu Apr 16 20:59:20.612911 2026] [:error] [pid 49094:tid 49116] [client 4.225.163.126:41586] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/areak1.php"] [unique_id "aeDdKDbDwvcXorHR_MzOewAAAVQ"]
[Thu Apr 16 20:59:22.502718 2026] [:error] [pid 57538:tid 57603] [client 4.225.163.126:48735] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/areak1.php"] [unique_id "aeDdKsuMaiEF5SVR2BfdbAAAAIE"]
[Thu Apr 16 20:59:23.616310 2026] [:error] [pid 49094:tid 49113] [client 4.225.163.126:47262] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "aeDdKzbDwvcXorHR_MzOigAAAVE"]
[Thu Apr 16 20:59:32.319309 2026] [:error] [pid 57536:tid 57559] [client 4.225.163.126:48739] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "aeDdNCQU4faGja6jpDtybAAAAAs"]
[Thu Apr 16 20:59:33.995240 2026] [:error] [pid 57536:tid 57566] [client 4.225.163.126:5660] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "aeDdNSQU4faGja6jpDtybwAAABI"]
[Thu Apr 16 20:59:35.489304 2026] [:error] [pid 49094:tid 49116] [client 4.225.163.126:64425] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "aeDdNzbDwvcXorHR_MzOtQAAAVQ"]
[Thu Apr 16 20:59:56.429745 2026] [:error] [pid 49094:tid 49102] [client 4.225.163.126:5611] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ga.php"] [unique_id "aeDdTDbDwvcXorHR_MzOygAAAUY"]
[Thu Apr 16 21:00:01.365470 2026] [:error] [pid 49094:tid 49108] [client 4.225.163.126:54711] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ga.php"] [unique_id "aeDdUTbDwvcXorHR_MzO1AAAAUw"]
[Thu Apr 16 21:00:08.993223 2026] [:error] [pid 57639:tid 57667] [client 4.225.163.126:46796] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ga.php"] [unique_id "aeDdWKMCQoTw7TsxWumXnwAAANU"]
[Thu Apr 16 21:00:22.953911 2026] [:error] [pid 57536:tid 57558] [client 4.225.163.126:52469] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "aeDdZiQU4faGja6jpDty4gAAAAo"]
[Thu Apr 16 21:00:26.090276 2026] [:error] [pid 49094:tid 49104] [client 4.225.163.126:60610] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "aeDdajbDwvcXorHR_MzPAAAAAUg"]
[Thu Apr 16 21:00:30.764446 2026] [:error] [pid 57639:tid 57650] [client 4.225.163.126:49464] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "aeDdbqMCQoTw7TsxWumXuwAAAMQ"]
[Thu Apr 16 21:00:33.176440 2026] [:error] [pid 7880:tid 7897] [client 4.225.163.126:59394] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "aeDdcaaezm4fSGc0yUKhsgAAAYw"]
[Thu Apr 16 21:00:41.904872 2026] [:error] [pid 57639:tid 57666] [client 4.225.163.126:59366] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeDdeaMCQoTw7TsxWumX7AAAANQ"]
[Thu Apr 16 21:00:42.944597 2026] [:error] [pid 57536:tid 57555] [client 4.225.163.126:38121] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeDdeiQU4faGja6jpDty8gAAAAc"]
[Thu Apr 16 21:00:44.284885 2026] [:error] [pid 57537:tid 57587] [client 4.225.163.126:59088] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeDdfFVQRS8nm73ENAmz_gAAAEw"]
[Thu Apr 16 21:00:45.288129 2026] [:error] [pid 7880:tid 7886] [client 4.225.163.126:59609] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeDdfaaezm4fSGc0yUKhyQAAAYE"]
[Thu Apr 16 21:00:47.208402 2026] [:error] [pid 7880:tid 7909] [client 4.225.163.126:45821] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper.php"] [unique_id "aeDdf6aezm4fSGc0yUKhywAAAZg"]
[Thu Apr 16 21:00:48.185577 2026] [:error] [pid 49094:tid 49114] [client 4.225.163.126:59628] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper.php"] [unique_id "aeDdgDbDwvcXorHR_MzPGwAAAVI"]
[Thu Apr 16 21:00:51.450077 2026] [:error] [pid 7880:tid 7906] [client 4.225.163.126:60639] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper.php"] [unique_id "aeDdg6aezm4fSGc0yUKhzgAAAZU"]
[Thu Apr 16 21:00:55.748621 2026] [:error] [pid 7880:tid 7906] [client 4.225.163.126:37232] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper.php"] [unique_id "aeDdh6aezm4fSGc0yUKh4QAAAZU"]
[Thu Apr 16 21:01:04.264343 2026] [:error] [pid 29603:tid 29625] [client 4.225.163.126:58380] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxpass.php"] [unique_id "aeDdkFfGOR6fpTWUAzqR4AAAARQ"]
[Thu Apr 16 21:01:06.451628 2026] [:error] [pid 7880:tid 7901] [client 4.225.163.126:58400] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxpass.php"] [unique_id "aeDdkqaezm4fSGc0yUKiBAAAAZA"]
[Thu Apr 16 21:01:08.461070 2026] [:error] [pid 57538:tid 57607] [client 4.225.163.126:58429] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wxpass.php"] [unique_id "aeDdlMuMaiEF5SVR2BfdtQAAAIU"]
[Thu Apr 16 21:01:19.577162 2026] [:error] [pid 29603:tid 29617] [client 4.225.163.126:40393] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aeDdn1fGOR6fpTWUAzqR-gAAAQw"]
[Thu Apr 16 21:01:21.192171 2026] [:error] [pid 57639:tid 57661] [client 4.225.163.126:53739] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aeDdoaMCQoTw7TsxWumYQgAAAM8"]
[Thu Apr 16 21:01:30.109474 2026] [:error] [pid 7880:tid 7888] [client 4.225.163.126:53757] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeDdqqaezm4fSGc0yUKiIgAAAYM"]
[Thu Apr 16 21:01:34.138737 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:5487] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeDdrqMCQoTw7TsxWumYdAAAAMU"]
[Thu Apr 16 21:01:37.786668 2026] [:error] [pid 57639:tid 57649] [client 4.225.163.126:5494] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeDdsaMCQoTw7TsxWumYfQAAAMM"]
[Thu Apr 16 21:01:39.758803 2026] [:error] [pid 7880:tid 7888] [client 4.225.163.126:40412] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeDds6aezm4fSGc0yUKiLgAAAYM"]
[Thu Apr 16 21:01:40.868930 2026] [:error] [pid 57639:tid 57651] [client 4.225.163.126:37790] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeDdtKMCQoTw7TsxWumYggAAAMU"]
[Thu Apr 16 21:01:41.809408 2026] [:error] [pid 57537:tid 57590] [client 4.225.163.126:42000] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "aeDdtVVQRS8nm73ENAm0MwAAAE8"]
[Thu Apr 16 21:01:43.250010 2026] [:error] [pid 7880:tid 7898] [client 4.225.163.126:55735] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "aeDdt6aezm4fSGc0yUKiOgAAAY0"]
[Thu Apr 16 21:01:46.079612 2026] [:error] [pid 49094:tid 49119] [client 4.225.163.126:53715] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "aeDdujbDwvcXorHR_MzPZwAAAVc"]
[Thu Apr 16 21:01:47.795778 2026] [:error] [pid 29603:tid 29628] [client 4.225.163.126:43955] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "aeDdu1fGOR6fpTWUAzqSDAAAARc"]
[Thu Apr 16 21:01:56.728581 2026] [:error] [pid 57639:tid 57665] [client 4.225.163.126:53725] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aeDdxKMCQoTw7TsxWumY3QAAANM"]
[Thu Apr 16 21:01:58.041047 2026] [:error] [pid 49094:tid 49104] [client 4.225.163.126:38718] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aeDdxjbDwvcXorHR_MzPhgAAAUg"]
[Thu Apr 16 21:02:00.907487 2026] [:error] [pid 7880:tid 7890] [client 4.225.163.126:53719] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aeDdyKaezm4fSGc0yUKiVwAAAYU"]
[Thu Apr 16 21:02:02.518908 2026] [:error] [pid 29603:tid 29613] [client 4.225.163.126:42021] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aeDdylfGOR6fpTWUAzqSFwAAAQg"]
[Thu Apr 16 21:02:04.001047 2026] [:error] [pid 57537:tid 57585] [client 4.225.163.126:53772] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aeDdzFVQRS8nm73ENAm0VgAAAEo"]
[Thu Apr 16 21:02:06.063729 2026] [:error] [pid 29603:tid 29608] [client 4.225.163.126:51246] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aeDdzlfGOR6fpTWUAzqSGwAAAQM"]
[Thu Apr 16 21:02:08.857247 2026] [:error] [pid 7880:tid 7890] [client 4.225.163.126:56447] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws66.php"] [unique_id "aeDd0Kaezm4fSGc0yUKibAAAAYU"]
[Thu Apr 16 21:02:47.665694 2026] [:error] [pid 57639:tid 57655] [client 4.225.163.126:47586] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeDd96MCQoTw7TsxWumZ6AAAAMk"]
[Thu Apr 16 21:02:49.578188 2026] [:error] [pid 29603:tid 29621] [client 4.225.163.126:6141] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeDd-VfGOR6fpTWUAzqSdQAAARA"]
[Thu Apr 16 21:02:52.567888 2026] [:error] [pid 57536:tid 57568] [client 4.225.163.126:5123] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeDd_CQU4faGja6jpDtz9AAAABQ"]
[Thu Apr 16 21:02:57.533514 2026] [:error] [pid 7880:tid 7885] [client 4.225.163.126:47207] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeDeAaaezm4fSGc0yUKi1wAAAYA"]
[Thu Apr 16 21:02:58.489337 2026] [:error] [pid 57536:tid 57568] [client 4.225.163.126:39840] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/curl.php"] [unique_id "aeDeAiQU4faGja6jpDt0DQAAABQ"]
[Thu Apr 16 21:02:59.784447 2026] [:error] [pid 57537:tid 57586] [client 4.225.163.126:51153] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/curl.php"] [unique_id "aeDeA1VQRS8nm73ENAm0hAAAAEs"]
[Thu Apr 16 21:03:00.477906 2026] [:error] [pid 57538:tid 57625] [client 4.225.163.126:5121] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/curl.php"] [unique_id "aeDeBMuMaiEF5SVR2BfeNQAAAJc"]
[Thu Apr 16 21:03:02.005018 2026] [:error] [pid 57536:tid 57553] [client 4.225.163.126:47228] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/curl.php"] [unique_id "aeDeBiQU4faGja6jpDt0GAAAAAU"]
[Thu Apr 16 21:03:04.096485 2026] [:error] [pid 49094:tid 49116] [client 4.225.163.126:47567] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sallu.php"] [unique_id "aeDeCDbDwvcXorHR_MzQDAAAAVQ"]
[Thu Apr 16 21:03:05.580771 2026] [:error] [pid 57639:tid 57666] [client 4.225.163.126:47564] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sallu.php"] [unique_id "aeDeCaMCQoTw7TsxWumaNgAAANQ"]
[Thu Apr 16 21:03:07.010548 2026] [:error] [pid 57639:tid 57668] [client 4.225.163.126:47587] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sallu.php"] [unique_id "aeDeC6MCQoTw7TsxWumaRQAAANY"]
[Thu Apr 16 21:03:08.297006 2026] [:error] [pid 57639:tid 57653] [client 4.225.163.126:58021] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sallu.php"] [unique_id "aeDeDKMCQoTw7TsxWumaWQAAAMc"]
[Thu Apr 16 21:03:09.244727 2026] [:error] [pid 57639:tid 57646] [client 4.225.163.126:62318] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeDeDaMCQoTw7TsxWumaYwAAAMA"]
[Thu Apr 16 21:03:11.193386 2026] [:error] [pid 7880:tid 7896] [client 4.225.163.126:43090] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeDeD6aezm4fSGc0yUKi7AAAAYs"]
[Thu Apr 16 21:03:12.521636 2026] [:error] [pid 49094:tid 49107] [client 4.225.163.126:62335] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeDeEDbDwvcXorHR_MzQJwAAAUs"]
[Thu Apr 16 21:03:14.057894 2026] [:error] [pid 49094:tid 49099] [client 4.225.163.126:58037] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeDeEjbDwvcXorHR_MzQKwAAAUM"]
[Thu Apr 16 21:03:16.085640 2026] [:error] [pid 57639:tid 57660] [client 4.225.163.126:47184] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeDeFKMCQoTw7TsxWumajgAAAM4"]
[Thu Apr 16 21:03:21.150703 2026] [:error] [pid 7880:tid 7889] [client 4.225.163.126:6128] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeDeGaaezm4fSGc0yUKi9wAAAYQ"]
[Thu Apr 16 21:03:31.408076 2026] [:error] [pid 29603:tid 29627] [client 4.225.163.126:44236] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeDeI1fGOR6fpTWUAzqSoQAAARY"]
[Thu Apr 16 21:03:43.175490 2026] [:error] [pid 57639:tid 57665] [client 4.225.163.126:62658] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeDeL6MCQoTw7TsxWuma3wAAANM"]
[Thu Apr 16 21:05:47.248202 2026] [:error] [pid 57536:tid 57566] [client 167.99.144.145:56731] [client 167.99.144.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.144.145, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aeDeqyQU4faGja6jpDt14gAAABI"]
[Thu Apr 16 21:05:48.125251 2026] [:error] [pid 57639:tid 57669] [client 167.99.144.145:61966] [client 167.99.144.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.99.144.145, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aeDerKMCQoTw7TsxWumc3AAAANc"]
[Thu Apr 16 21:51:13.444308 2026] [:error] [pid 49094:tid 49112] [client 59.126.168.24:65463] [client 59.126.168.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/go.php"] [unique_id "aeDpUTbDwvcXorHR_MzzxQAAAVA"]
[Thu Apr 16 22:16:39.903828 2026] [:error] [pid 57536:tid 57552] [client 43.166.242.189:56478] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeDvRyQU4faGja6jpDuXVQAAAAQ"]
[Thu Apr 16 22:37:32.229882 2026] [:error] [pid 57639:tid 57653] [client 45.130.203.152:34559] [client 45.130.203.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aeD0LKMCQoTw7TsxWunoOwAAAMc"]
[Thu Apr 16 22:37:32.915202 2026] [:error] [pid 57639:tid 57661] [client 45.130.203.139:59261] [client 45.130.203.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aeD0LKMCQoTw7TsxWunoPQAAAM8"]
[Thu Apr 16 23:11:36.827013 2026] [:error] [pid 57639:tid 57647] [client 35.197.38.167:51534] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aeD8KKMCQoTw7TsxWukJvAAAAME"]
[Thu Apr 16 23:11:42.209001 2026] [:error] [pid 7880:tid 7892] [client 35.197.38.167:50686] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aeD8Lqaezm4fSGc0yULT-AAAAYc"]
[Thu Apr 16 23:12:15.922713 2026] [:error] [pid 57639:tid 57648] [client 35.197.38.167:34334] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aeD8T6MCQoTw7TsxWukKIAAAAMI"]
[Thu Apr 16 23:12:46.072711 2026] [:error] [pid 57536:tid 57568] [client 35.197.38.167:40846] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aeD8biQU4faGja6jpDuyhwAAABQ"]
[Thu Apr 16 23:12:49.968273 2026] [:error] [pid 57639:tid 57670] [client 35.197.38.167:40902] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/core/.env"] [unique_id "aeD8caMCQoTw7TsxWukKwgAAANg"]
[Fri Apr 17 00:48:31.998944 2026] [:error] [pid 3245:tid 3267] [client 51.103.127.33:55265] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeES36ESOMTHVLs-uFDFSwAAAQU"]
[Fri Apr 17 00:48:33.234067 2026] [:error] [pid 43482:tid 43494] [client 51.103.127.33:5623] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeES4T9SZnuKxlHrct2DbgAAAMo"]
[Fri Apr 17 00:48:34.210355 2026] [:error] [pid 4086:tid 4091] [client 51.103.127.33:5565] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeES4llz7gxl_exM0Fo4FgAAAUM"]
[Fri Apr 17 00:48:34.976465 2026] [:error] [pid 3245:tid 3281] [client 51.103.127.33:5833] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeES4qESOMTHVLs-uFDFTgAAARM"]
[Fri Apr 17 00:48:35.705649 2026] [:error] [pid 3245:tid 3284] [client 51.103.127.33:5414] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "aeES46ESOMTHVLs-uFDFUAAAARY"]
[Fri Apr 17 00:48:36.609281 2026] [:error] [pid 4086:tid 4099] [client 51.103.127.33:5515] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "aeES5Flz7gxl_exM0Fo4HwAAAUs"]
[Fri Apr 17 00:48:37.844755 2026] [:error] [pid 3245:tid 3285] [client 51.103.127.33:55252] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "aeES5aESOMTHVLs-uFDFXQAAARc"]
[Fri Apr 17 00:48:38.798018 2026] [:error] [pid 43385:tid 43391] [client 51.103.127.33:5573] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cdn3.php"] [unique_id "aeES5snIxkJaUI8KNs736AAAAAI"]
[Fri Apr 17 00:48:39.610534 2026] [:error] [pid 43387:tid 43467] [client 51.103.127.33:5535] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeES5yBNsONqHxWTakUw6wAAAI4"]
[Fri Apr 17 00:48:40.587714 2026] [:error] [pid 4086:tid 4096] [client 51.103.127.33:55237] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeES6Flz7gxl_exM0Fo4LgAAAUg"]
[Fri Apr 17 00:48:41.530710 2026] [:error] [pid 43387:tid 43474] [client 51.103.127.33:5407] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeES6SBNsONqHxWTakUw8AAAAJU"]
[Fri Apr 17 00:48:42.611587 2026] [:error] [pid 4086:tid 4089] [client 51.103.127.33:55261] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeES6llz7gxl_exM0Fo4NwAAAUE"]
[Fri Apr 17 00:48:44.035867 2026] [:error] [pid 43387:tid 43448] [client 51.103.127.33:5584] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "aeES7CBNsONqHxWTakUw8wAAAIA"]
[Fri Apr 17 00:48:45.571390 2026] [:error] [pid 3245:tid 3272] [client 51.103.127.33:55255] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "aeES7aESOMTHVLs-uFDFagAAAQo"]
[Fri Apr 17 00:48:46.654618 2026] [:error] [pid 43387:tid 43466] [client 51.103.127.33:5396] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "aeES7iBNsONqHxWTakUw9gAAAI0"]
[Fri Apr 17 00:48:47.487269 2026] [:error] [pid 3245:tid 3285] [client 51.103.127.33:5321] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/beerd.php"] [unique_id "aeES76ESOMTHVLs-uFDFbQAAARc"]
[Fri Apr 17 00:48:48.190756 2026] [:error] [pid 4086:tid 4113] [client 51.103.127.33:5533] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "aeES8Flz7gxl_exM0Fo4XgAAAVg"]
[Fri Apr 17 00:48:48.899184 2026] [:error] [pid 43482:tid 43498] [client 51.103.127.33:5321] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "aeES8D9SZnuKxlHrct2DegAAAM4"]
[Fri Apr 17 00:48:49.674939 2026] [:error] [pid 4086:tid 4100] [client 51.103.127.33:5571] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "aeES8Vlz7gxl_exM0Fo4ZwAAAUw"]
[Fri Apr 17 00:48:50.619452 2026] [:error] [pid 43386:tid 43430] [client 51.103.127.33:5376] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hhxc.php"] [unique_id "aeES8u91GAVgUfhPVDG03gAAAEo"]
[Fri Apr 17 00:48:51.391701 2026] [:error] [pid 3245:tid 3269] [client 51.103.127.33:5611] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "aeES86ESOMTHVLs-uFDFeAAAAQc"]
[Fri Apr 17 00:48:51.912948 2026] [:error] [pid 4086:tid 4100] [client 51.103.127.33:5425] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "aeES81lz7gxl_exM0Fo4bQAAAUw"]
[Fri Apr 17 00:48:52.639404 2026] [:error] [pid 3245:tid 3271] [client 51.103.127.33:5604] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "aeES9KESOMTHVLs-uFDFfgAAAQk"]
[Fri Apr 17 00:48:53.171277 2026] [:error] [pid 43482:tid 43499] [client 51.103.127.33:5519] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/161dfd072f.php"] [unique_id "aeES9T9SZnuKxlHrct2DfgAAAM8"]
[Fri Apr 17 00:48:53.792405 2026] [:error] [pid 3245:tid 3264] [client 51.103.127.33:5834] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeES9aESOMTHVLs-uFDFgwAAAQI"]
[Fri Apr 17 00:48:55.254983 2026] [:error] [pid 43387:tid 43472] [client 51.103.127.33:5838] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeES9yBNsONqHxWTakUw9wAAAJM"]
[Fri Apr 17 00:48:56.941297 2026] [:error] [pid 43482:tid 43493] [client 51.103.127.33:5589] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeES-D9SZnuKxlHrct2DhgAAAMk"]
[Fri Apr 17 00:48:57.868866 2026] [:error] [pid 43482:tid 43506] [client 51.103.127.33:55286] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeES-T9SZnuKxlHrct2DhwAAANY"]
[Fri Apr 17 00:48:59.409473 2026] [:error] [pid 43482:tid 43487] [client 51.103.127.33:5602] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeES-z9SZnuKxlHrct2DjAAAAMM"]
[Fri Apr 17 00:49:02.532302 2026] [:error] [pid 43387:tid 43474] [client 51.103.127.33:5385] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeES_iBNsONqHxWTakUw_QAAAJU"]
[Fri Apr 17 00:49:06.012462 2026] [:error] [pid 4086:tid 4091] [client 51.103.127.33:55242] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeETAllz7gxl_exM0Fo4lAAAAUM"]
[Fri Apr 17 00:49:06.946691 2026] [:error] [pid 43482:tid 43495] [client 51.103.127.33:5861] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeETAj9SZnuKxlHrct2DjgAAAMs"]
[Fri Apr 17 00:49:07.706491 2026] [:error] [pid 4086:tid 4098] [client 51.103.127.33:55262] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aeETA1lz7gxl_exM0Fo4ngAAAUo"]
[Fri Apr 17 00:49:08.253765 2026] [:error] [pid 43387:tid 43477] [client 51.103.127.33:5585] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aeETBCBNsONqHxWTakUw_wAAAJg"]
[Fri Apr 17 00:49:08.889311 2026] [:error] [pid 43386:tid 43432] [client 51.103.127.33:5403] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aeETBO91GAVgUfhPVDG05gAAAEw"]
[Fri Apr 17 00:49:09.555042 2026] [:error] [pid 4086:tid 4103] [client 51.103.127.33:5402] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/RIP.php"] [unique_id "aeETBVlz7gxl_exM0Fo4owAAAU8"]
[Fri Apr 17 00:49:10.139874 2026] [:error] [pid 4086:tid 4091] [client 51.103.127.33:5522] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeETBllz7gxl_exM0Fo4pQAAAUM"]
[Fri Apr 17 00:49:10.676475 2026] [:error] [pid 4086:tid 4101] [client 51.103.127.33:5422] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeETBllz7gxl_exM0Fo4qAAAAU0"]
[Fri Apr 17 00:49:11.498731 2026] [:error] [pid 3245:tid 3281] [client 51.103.127.33:5518] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeETB6ESOMTHVLs-uFDFkAAAARM"]
[Fri Apr 17 00:49:12.057266 2026] [:error] [pid 4086:tid 4108] [client 51.103.127.33:5411] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeETCFlz7gxl_exM0Fo4rAAAAVQ"]
[Fri Apr 17 00:49:12.730185 2026] [:error] [pid 4086:tid 4098] [client 51.103.127.33:5866] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "aeETCFlz7gxl_exM0Fo4rgAAAUo"]
[Fri Apr 17 00:49:13.338688 2026] [:error] [pid 3245:tid 3275] [client 51.103.127.33:5526] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "aeETCaESOMTHVLs-uFDFmAAAAQ0"]
[Fri Apr 17 00:49:14.424156 2026] [:error] [pid 3245:tid 3268] [client 51.103.127.33:5626] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "aeETCqESOMTHVLs-uFDFnAAAAQY"]
[Fri Apr 17 00:49:15.202687 2026] [:error] [pid 43386:tid 43431] [client 51.103.127.33:55295] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/blqjs.php"] [unique_id "aeETC-91GAVgUfhPVDG05wAAAEs"]
[Fri Apr 17 00:49:16.374811 2026] [:error] [pid 43386:tid 43442] [client 51.103.127.33:5421] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "aeETDO91GAVgUfhPVDG06QAAAFU"]
[Fri Apr 17 00:49:17.504066 2026] [:error] [pid 43387:tid 43448] [client 51.103.127.33:5390] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "aeETDSBNsONqHxWTakUxAwAAAIA"]
[Fri Apr 17 00:49:18.625250 2026] [:error] [pid 3245:tid 3264] [client 51.103.127.33:55292] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "aeETDqESOMTHVLs-uFDFpAAAAQI"]
[Fri Apr 17 00:49:19.299992 2026] [:error] [pid 4086:tid 4108] [client 51.103.127.33:5591] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sk25_1.php"] [unique_id "aeETD1lz7gxl_exM0Fo4vAAAAVQ"]
[Fri Apr 17 00:49:19.929110 2026] [:error] [pid 4086:tid 4089] [client 51.103.127.33:5618] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "aeETD1lz7gxl_exM0Fo4vwAAAUE"]
[Fri Apr 17 00:49:20.519243 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:55290] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "aeETEFlz7gxl_exM0Fo4wgAAAVY"]
[Fri Apr 17 00:49:21.404722 2026] [:error] [pid 4086:tid 4104] [client 51.103.127.33:5872] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "aeETEVlz7gxl_exM0Fo4wwAAAVA"]
[Fri Apr 17 00:49:22.127853 2026] [:error] [pid 3245:tid 3269] [client 51.103.127.33:5613] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fetch.php"] [unique_id "aeETEqESOMTHVLs-uFDFqwAAAQc"]
[Fri Apr 17 00:49:22.795785 2026] [:error] [pid 3245:tid 3274] [client 51.103.127.33:5392] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeETEqESOMTHVLs-uFDFrAAAAQw"]
[Fri Apr 17 00:49:23.607661 2026] [:error] [pid 43482:tid 43496] [client 51.103.127.33:55254] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeETEz9SZnuKxlHrct2DnAAAAMw"]
[Fri Apr 17 00:49:24.507956 2026] [:error] [pid 43482:tid 43500] [client 51.103.127.33:64720] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeETFD9SZnuKxlHrct2DngAAANA"]
[Fri Apr 17 00:49:25.460781 2026] [:error] [pid 43387:tid 43471] [client 51.103.127.33:5858] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeETFSBNsONqHxWTakUxCgAAAJI"]
[Fri Apr 17 00:49:26.549469 2026] [:error] [pid 43386:tid 43435] [client 51.103.127.33:5401] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeETFu91GAVgUfhPVDG07QAAAE8"]
[Fri Apr 17 00:49:27.472119 2026] [:error] [pid 43385:tid 43391] [client 51.103.127.33:5375] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeETF8nIxkJaUI8KNs74BQAAAAI"]
[Fri Apr 17 00:49:28.102660 2026] [:error] [pid 43385:tid 43410] [client 51.103.127.33:5396] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeETGMnIxkJaUI8KNs74CQAAABQ"]
[Fri Apr 17 00:49:28.717212 2026] [:error] [pid 43386:tid 43430] [client 51.103.127.33:55251] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeETGO91GAVgUfhPVDG07wAAAEo"]
[Fri Apr 17 00:49:30.010924 2026] [:error] [pid 43387:tid 43474] [client 51.103.127.33:55275] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/oircv.php"] [unique_id "aeETGiBNsONqHxWTakUxEAAAAJU"]
[Fri Apr 17 00:49:30.835702 2026] [:error] [pid 4086:tid 4089] [client 51.103.127.33:5424] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/oircv.php"] [unique_id "aeETGllz7gxl_exM0Fo44gAAAUE"]
[Fri Apr 17 00:49:40.302705 2026] [:error] [pid 3245:tid 3262] [client 51.103.127.33:5510] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fyflv.php"] [unique_id "aeETJKESOMTHVLs-uFDF8QAAAQA"]
[Fri Apr 17 00:49:42.931795 2026] [:error] [pid 43385:tid 43410] [client 51.103.127.33:5404] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fyflv.php"] [unique_id "aeETJsnIxkJaUI8KNs74EwAAABQ"]
[Fri Apr 17 00:49:46.203478 2026] [:error] [pid 4086:tid 4113] [client 51.103.127.33:5857] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fyflv.php"] [unique_id "aeETKllz7gxl_exM0Fo5GgAAAVg"]
[Fri Apr 17 00:49:48.788191 2026] [:error] [pid 43482:tid 43508] [client 51.103.127.33:5416] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fyflv.php"] [unique_id "aeETLD9SZnuKxlHrct2D1QAAANg"]
[Fri Apr 17 00:49:51.954923 2026] [:error] [pid 43482:tid 43492] [client 51.103.127.33:65234] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zc-942.php"] [unique_id "aeETLz9SZnuKxlHrct2D3AAAAMg"]
[Fri Apr 17 00:49:52.994499 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:5383] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zc-942.php"] [unique_id "aeETMFlz7gxl_exM0Fo5KwAAAVY"]
[Fri Apr 17 00:49:56.056581 2026] [:error] [pid 43385:tid 43405] [client 51.103.127.33:55269] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zc-942.php"] [unique_id "aeETNMnIxkJaUI8KNs74HAAAABA"]
[Fri Apr 17 00:49:57.389401 2026] [:error] [pid 43482:tid 43492] [client 51.103.127.33:5544] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zc-942.php"] [unique_id "aeETNT9SZnuKxlHrct2D5QAAAMg"]
[Fri Apr 17 00:50:00.405198 2026] [:error] [pid 43386:tid 43420] [client 51.103.127.33:5587] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sde.php"] [unique_id "aeETOO91GAVgUfhPVDG1AAAAAEA"]
[Fri Apr 17 00:50:02.001755 2026] [:error] [pid 43482:tid 43502] [client 51.103.127.33:5581] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sde.php"] [unique_id "aeETOj9SZnuKxlHrct2D6wAAANI"]
[Fri Apr 17 00:50:04.859875 2026] [:error] [pid 43482:tid 43493] [client 51.103.127.33:5546] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sde.php"] [unique_id "aeETPD9SZnuKxlHrct2D8QAAAMk"]
[Fri Apr 17 00:50:05.849717 2026] [:error] [pid 43385:tid 43413] [client 51.103.127.33:5606] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sde.php"] [unique_id "aeETPcnIxkJaUI8KNs74JQAAABc"]
[Fri Apr 17 00:50:07.261544 2026] [:error] [pid 4086:tid 4108] [client 51.103.127.33:65173] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpb.php"] [unique_id "aeETP1lz7gxl_exM0Fo5OgAAAVQ"]
[Fri Apr 17 00:50:08.782173 2026] [:error] [pid 4086:tid 4102] [client 51.103.127.33:5620] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpb.php"] [unique_id "aeETQFlz7gxl_exM0Fo5PgAAAU4"]
[Fri Apr 17 00:50:10.311073 2026] [:error] [pid 43386:tid 43433] [client 51.103.127.33:5829] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpb.php"] [unique_id "aeETQu91GAVgUfhPVDG1CQAAAE0"]
[Fri Apr 17 00:50:11.220044 2026] [:error] [pid 43482:tid 43485] [client 51.103.127.33:5428] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpb.php"] [unique_id "aeETQz9SZnuKxlHrct2D_QAAAME"]
[Fri Apr 17 00:50:12.620253 2026] [:error] [pid 4086:tid 4091] [client 51.103.127.33:5627] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Geforce.php"] [unique_id "aeETRFlz7gxl_exM0Fo5SAAAAUM"]
[Fri Apr 17 00:50:14.010338 2026] [:error] [pid 43387:tid 43460] [client 51.103.127.33:5570] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Geforce.php"] [unique_id "aeETRiBNsONqHxWTakUxNgAAAIk"]
[Fri Apr 17 00:50:17.202498 2026] [:error] [pid 43387:tid 43449] [client 51.103.127.33:5826] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Geforce.php"] [unique_id "aeETSSBNsONqHxWTakUxOwAAAIE"]
[Fri Apr 17 00:50:19.292558 2026] [:error] [pid 3245:tid 3265] [client 51.103.127.33:55264] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Geforce.php"] [unique_id "aeETS6ESOMTHVLs-uFDGIgAAAQM"]
[Fri Apr 17 00:50:21.627313 2026] [:error] [pid 43386:tid 43439] [client 51.103.127.33:5845] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeETTe91GAVgUfhPVDG1EgAAAFM"]
[Fri Apr 17 00:50:24.318061 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:5508] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeETUFlz7gxl_exM0Fo5YwAAAVY"]
[Fri Apr 17 00:50:28.116284 2026] [:error] [pid 3245:tid 3269] [client 51.103.127.33:5398] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeETVKESOMTHVLs-uFDGLwAAAQc"]
[Fri Apr 17 00:50:30.918123 2026] [:error] [pid 43386:tid 43425] [client 51.103.127.33:5552] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeETVu91GAVgUfhPVDG1HAAAAEU"]
[Fri Apr 17 00:50:32.019736 2026] [:error] [pid 43386:tid 43430] [client 51.103.127.33:5529] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "aeETWO91GAVgUfhPVDG1IQAAAEo"]
[Fri Apr 17 00:50:33.183964 2026] [:error] [pid 43482:tid 43498] [client 51.103.127.33:5843] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "aeETWT9SZnuKxlHrct2ECgAAAM4"]
[Fri Apr 17 00:50:33.912018 2026] [:error] [pid 43482:tid 43503] [client 51.103.127.33:5607] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "aeETWT9SZnuKxlHrct2ECwAAANM"]
[Fri Apr 17 00:50:34.600398 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:5410] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "aeETWllz7gxl_exM0Fo5cAAAAVY"]
[Fri Apr 17 00:50:35.498289 2026] [:error] [pid 4086:tid 4091] [client 51.103.127.33:5593] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeETW1lz7gxl_exM0Fo5cgAAAUM"]
[Fri Apr 17 00:50:36.127004 2026] [:error] [pid 4086:tid 4089] [client 51.103.127.33:5567] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeETXFlz7gxl_exM0Fo5cwAAAUE"]
[Fri Apr 17 00:50:36.831322 2026] [:error] [pid 43482:tid 43507] [client 51.103.127.33:65200] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeETXD9SZnuKxlHrct2EDAAAANc"]
[Fri Apr 17 00:50:37.592715 2026] [:error] [pid 3245:tid 3267] [client 51.103.127.33:5622] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeETXaESOMTHVLs-uFDGPAAAAQU"]
[Fri Apr 17 00:50:38.824546 2026] [:error] [pid 3245:tid 3278] [client 51.103.127.33:5576] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "aeETXqESOMTHVLs-uFDGQgAAARA"]
[Fri Apr 17 00:50:47.299134 2026] [:error] [pid 3245:tid 3264] [client 51.103.127.33:5874] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeETZ6ESOMTHVLs-uFDGUQAAAQI"]
[Fri Apr 17 00:50:50.323156 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:55239] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeETallz7gxl_exM0Fo5jgAAAVY"]
[Fri Apr 17 00:50:51.725123 2026] [:error] [pid 43387:tid 43461] [client 51.103.127.33:5559] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeETayBNsONqHxWTakUxYgAAAIo"]
[Fri Apr 17 00:50:54.242577 2026] [:error] [pid 43385:tid 43406] [client 51.103.127.33:5381] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeETbsnIxkJaUI8KNs74VwAAABE"]
[Fri Apr 17 00:50:57.190965 2026] [:error] [pid 43386:tid 43423] [client 51.103.127.33:65155] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeETce91GAVgUfhPVDG1MgAAAEM"]
[Fri Apr 17 00:50:58.579109 2026] [:error] [pid 3245:tid 3283] [client 51.103.127.33:55250] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeETcqESOMTHVLs-uFDGYAAAARU"]
[Fri Apr 17 00:50:59.662133 2026] [:error] [pid 4086:tid 4096] [client 51.103.127.33:5539] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeETc1lz7gxl_exM0Fo5pQAAAUg"]
[Fri Apr 17 00:51:00.695610 2026] [:error] [pid 4086:tid 4113] [client 51.103.127.33:5514] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeETdFlz7gxl_exM0Fo5qgAAAVg"]
[Fri Apr 17 00:51:01.914062 2026] [:error] [pid 43482:tid 43490] [client 51.103.127.33:5560] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeETdT9SZnuKxlHrct2EJgAAAMY"]
[Fri Apr 17 00:51:02.860020 2026] [:error] [pid 43386:tid 43434] [client 51.103.127.33:5435] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeETdu91GAVgUfhPVDG1OwAAAE4"]
[Fri Apr 17 00:51:03.915965 2026] [:error] [pid 3245:tid 3280] [client 51.103.127.33:5397] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeETd6ESOMTHVLs-uFDGawAAARI"]
[Fri Apr 17 00:51:08.424007 2026] [:error] [pid 4086:tid 4098] [client 51.103.127.33:5346] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeETfFlz7gxl_exM0Fo5xQAAAUo"]
[Fri Apr 17 00:51:10.746170 2026] [:error] [pid 43387:tid 43459] [client 51.103.127.33:5520] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeETfiBNsONqHxWTakUxkwAAAIg"]
[Fri Apr 17 00:51:15.542249 2026] [:error] [pid 4086:tid 4090] [client 51.103.127.33:5386] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeETg1lz7gxl_exM0Fo50QAAAUI"]
[Fri Apr 17 00:51:18.559995 2026] [:error] [pid 43387:tid 43465] [client 51.103.127.33:5831] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeEThiBNsONqHxWTakUxlQAAAIw"]
[Fri Apr 17 00:51:20.632229 2026] [:error] [pid 43386:tid 43443] [client 51.103.127.33:5405] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeETiO91GAVgUfhPVDG1YwAAAFY"]
[Fri Apr 17 00:51:24.383051 2026] [:error] [pid 43386:tid 43444] [client 51.103.127.33:5337] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/upll22.php"] [unique_id "aeETjO91GAVgUfhPVDG1agAAAFc"]
[Fri Apr 17 00:51:25.658803 2026] [:error] [pid 4086:tid 4103] [client 51.103.127.33:5886] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/upll22.php"] [unique_id "aeETjVlz7gxl_exM0Fo51gAAAU8"]
[Fri Apr 17 00:51:26.899941 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:5827] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/upll22.php"] [unique_id "aeETjllz7gxl_exM0Fo52gAAAVY"]
[Fri Apr 17 00:51:28.548749 2026] [:error] [pid 4086:tid 4098] [client 51.103.127.33:5535] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/upll22.php"] [unique_id "aeETkFlz7gxl_exM0Fo52wAAAUo"]
[Fri Apr 17 00:51:29.437198 2026] [:error] [pid 43387:tid 43473] [client 51.103.127.33:5563] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeETkSBNsONqHxWTakUxmAAAAJQ"]
[Fri Apr 17 00:51:30.835821 2026] [:error] [pid 43482:tid 43484] [client 51.103.127.33:5534] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeETkj9SZnuKxlHrct2ERgAAAMA"]
[Fri Apr 17 00:51:31.389435 2026] [:error] [pid 43385:tid 43411] [client 51.103.127.33:5569] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeETk8nIxkJaUI8KNs74cwAAABU"]
[Fri Apr 17 00:51:32.310556 2026] [:error] [pid 43387:tid 43453] [client 51.103.127.33:5859] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeETlCBNsONqHxWTakUxmwAAAIM"]
[Fri Apr 17 00:51:33.371808 2026] [:error] [pid 43387:tid 43460] [client 51.103.127.33:65183] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeETlSBNsONqHxWTakUxngAAAIk"]
[Fri Apr 17 00:51:34.125941 2026] [:error] [pid 43387:tid 43449] [client 51.103.127.33:5592] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeETliBNsONqHxWTakUxoQAAAIE"]
[Fri Apr 17 00:51:35.014662 2026] [:error] [pid 43482:tid 43497] [client 51.103.127.33:5379] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeETlz9SZnuKxlHrct2ETAAAAM0"]
[Fri Apr 17 00:51:36.344362 2026] [:error] [pid 3245:tid 3283] [client 51.103.127.33:5881] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeETmKESOMTHVLs-uFDGfAAAARU"]
[Fri Apr 17 00:51:37.573155 2026] [:error] [pid 43387:tid 43461] [client 51.103.127.33:65198] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "aeETmSBNsONqHxWTakUxrQAAAIo"]
[Fri Apr 17 00:51:38.534834 2026] [:error] [pid 43386:tid 43424] [client 51.103.127.33:5152] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "aeETmu91GAVgUfhPVDG1dQAAAEQ"]
[Fri Apr 17 00:51:39.381021 2026] [:error] [pid 3245:tid 3269] [client 51.103.127.33:55244] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "aeETm6ESOMTHVLs-uFDGfwAAAQc"]
[Fri Apr 17 00:51:40.255597 2026] [:error] [pid 4086:tid 4088] [client 51.103.127.33:5608] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "aeETnFlz7gxl_exM0Fo56AAAAUA"]
[Fri Apr 17 00:51:41.622658 2026] [:error] [pid 4086:tid 4108] [client 51.103.127.33:5382] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeETnVlz7gxl_exM0Fo57AAAAVQ"]
[Fri Apr 17 00:51:42.810319 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:5391] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeETnllz7gxl_exM0Fo58QAAAVY"]
[Fri Apr 17 00:51:44.396078 2026] [:error] [pid 43385:tid 43404] [client 51.103.127.33:5871] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeEToMnIxkJaUI8KNs74dAAAAA8"]
[Fri Apr 17 00:51:46.897770 2026] [:error] [pid 4086:tid 4099] [client 51.103.127.33:64741] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "aeETollz7gxl_exM0Fo5_QAAAUs"]
[Fri Apr 17 00:51:58.184574 2026] [:error] [pid 43385:tid 43411] [client 51.103.127.33:5547] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeETrsnIxkJaUI8KNs74hwAAABU"]
[Fri Apr 17 00:52:00.421075 2026] [:error] [pid 4086:tid 4112] [client 51.103.127.33:5521] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeETsFlz7gxl_exM0Fo6GAAAAVc"]
[Fri Apr 17 00:52:01.336611 2026] [:error] [pid 43386:tid 43422] [client 51.103.127.33:5554] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeETse91GAVgUfhPVDG1hgAAAEI"]
[Fri Apr 17 00:52:03.706783 2026] [:error] [pid 43386:tid 43445] [client 51.103.127.33:5864] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeETs-91GAVgUfhPVDG1iQAAAFg"]
[Fri Apr 17 00:52:04.842475 2026] [:error] [pid 43482:tid 43488] [client 51.103.127.33:5621] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aeETtD9SZnuKxlHrct2EcgAAAMQ"]
[Fri Apr 17 00:52:06.838498 2026] [:error] [pid 43482:tid 43489] [client 51.103.127.33:5123] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aeETtj9SZnuKxlHrct2EdAAAAMU"]
[Fri Apr 17 00:52:08.181425 2026] [:error] [pid 4086:tid 4101] [client 51.103.127.33:5432] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aeETuFlz7gxl_exM0Fo6HgAAAU0"]
[Fri Apr 17 00:52:09.382946 2026] [:error] [pid 3245:tid 3269] [client 51.103.127.33:5333] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aeETuaESOMTHVLs-uFDGqQAAAQc"]
[Fri Apr 17 00:52:10.646140 2026] [:error] [pid 43386:tid 43426] [client 51.103.127.33:5561] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeETuu91GAVgUfhPVDG1igAAAEY"]
[Fri Apr 17 00:52:11.991988 2026] [:error] [pid 43385:tid 43402] [client 51.103.127.33:5568] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeETu8nIxkJaUI8KNs74kQAAAA0"]
[Fri Apr 17 00:52:12.663861 2026] [:error] [pid 4086:tid 4091] [client 51.103.127.33:65192] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeETvFlz7gxl_exM0Fo6IwAAAUM"]
[Fri Apr 17 00:52:13.614922 2026] [:error] [pid 4086:tid 4098] [client 51.103.127.33:5600] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeETvVlz7gxl_exM0Fo6JgAAAUo"]
[Fri Apr 17 00:52:14.409658 2026] [:error] [pid 4086:tid 4096] [client 51.103.127.33:5371] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aeETvllz7gxl_exM0Fo6KQAAAUg"]
[Fri Apr 17 00:52:15.856293 2026] [:error] [pid 43387:tid 43472] [client 51.103.127.33:55284] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aeETvyBNsONqHxWTakUxwwAAAJM"]
[Fri Apr 17 00:52:16.906848 2026] [:error] [pid 43385:tid 43404] [client 51.103.127.33:64713] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aeETwMnIxkJaUI8KNs74lQAAAA8"]
[Fri Apr 17 00:52:18.306012 2026] [:error] [pid 43385:tid 43398] [client 51.103.127.33:5598] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aeETwsnIxkJaUI8KNs74mgAAAAk"]
[Fri Apr 17 00:52:20.337957 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:5364] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeETxFlz7gxl_exM0Fo6LwAAAVY"]
[Fri Apr 17 00:52:21.175901 2026] [:error] [pid 4086:tid 4105] [client 51.103.127.33:5335] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeETxVlz7gxl_exM0Fo6NAAAAVE"]
[Fri Apr 17 00:52:22.475944 2026] [:error] [pid 4086:tid 4092] [client 51.103.127.33:5549] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeETxllz7gxl_exM0Fo6NgAAAUQ"]
[Fri Apr 17 00:52:24.161684 2026] [:error] [pid 43385:tid 43393] [client 51.103.127.33:5389] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeETyMnIxkJaUI8KNs74ogAAAAQ"]
[Fri Apr 17 00:52:25.868734 2026] [:error] [pid 4086:tid 4101] [client 51.103.127.33:5418] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aeETyVlz7gxl_exM0Fo6SAAAAU0"]
[Fri Apr 17 00:52:26.891173 2026] [:error] [pid 4086:tid 4098] [client 51.103.127.33:5336] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aeETyllz7gxl_exM0Fo6TQAAAUo"]
[Fri Apr 17 00:52:27.891786 2026] [:error] [pid 43482:tid 43499] [client 51.103.127.33:5543] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aeETyz9SZnuKxlHrct2EjAAAAM8"]
[Fri Apr 17 00:52:29.565134 2026] [:error] [pid 43385:tid 43405] [client 51.103.127.33:5579] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jga.php"] [unique_id "aeETzcnIxkJaUI8KNs74pwAAABA"]
[Fri Apr 17 00:52:32.540114 2026] [:error] [pid 4086:tid 4089] [client 51.103.127.33:5532] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/term.php"] [unique_id "aeET0Flz7gxl_exM0Fo6WwAAAUE"]
[Fri Apr 17 00:52:33.289532 2026] [:error] [pid 43386:tid 43432] [client 51.103.127.33:5145] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/term.php"] [unique_id "aeET0e91GAVgUfhPVDG1owAAAEw"]
[Fri Apr 17 00:52:34.017741 2026] [:error] [pid 43482:tid 43490] [client 51.103.127.33:65237] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/term.php"] [unique_id "aeET0j9SZnuKxlHrct2EkwAAAMY"]
[Fri Apr 17 00:52:35.399165 2026] [:error] [pid 4086:tid 4102] [client 51.103.127.33:64652] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/term.php"] [unique_id "aeET01lz7gxl_exM0Fo6XgAAAU4"]
[Fri Apr 17 00:52:36.782095 2026] [:error] [pid 43386:tid 43443] [client 51.103.127.33:65258] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeET1O91GAVgUfhPVDG1pgAAAFY"]
[Fri Apr 17 00:52:37.510696 2026] [:error] [pid 43387:tid 43467] [client 51.103.127.33:5505] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeET1SBNsONqHxWTakUxyAAAAI4"]
[Fri Apr 17 00:52:38.545816 2026] [:error] [pid 43387:tid 43459] [client 51.103.127.33:5586] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeET1iBNsONqHxWTakUxywAAAIg"]
[Fri Apr 17 00:52:39.841524 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:5852] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeET11lz7gxl_exM0Fo6YAAAAVY"]
[Fri Apr 17 00:52:40.863210 2026] [:error] [pid 43385:tid 43415] [client 51.103.127.33:5133] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeET2MnIxkJaUI8KNs74ugAAABg"]
[Fri Apr 17 00:52:41.948808 2026] [:error] [pid 4086:tid 4098] [client 51.103.127.33:5388] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeET2Vlz7gxl_exM0Fo6YwAAAUo"]
[Fri Apr 17 00:52:43.501958 2026] [:error] [pid 4086:tid 4100] [client 51.103.127.33:55245] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeET21lz7gxl_exM0Fo6ZAAAAUw"]
[Fri Apr 17 00:52:44.223016 2026] [:error] [pid 4086:tid 4112] [client 51.103.127.33:5873] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeET3Flz7gxl_exM0Fo6ZQAAAVc"]
[Fri Apr 17 00:52:44.964939 2026] [:error] [pid 4086:tid 4108] [client 51.103.127.33:5628] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeET3Flz7gxl_exM0Fo6aQAAAVQ"]
[Fri Apr 17 00:52:45.726628 2026] [:error] [pid 3245:tid 3270] [client 51.103.127.33:5330] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeET3aESOMTHVLs-uFDGxgAAAQg"]
[Fri Apr 17 00:52:46.723785 2026] [:error] [pid 4086:tid 4098] [client 51.103.127.33:5865] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeET3llz7gxl_exM0Fo6cwAAAUo"]
[Fri Apr 17 00:52:47.510389 2026] [:error] [pid 4086:tid 4093] [client 51.103.127.33:5558] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeET31lz7gxl_exM0Fo6eQAAAUU"]
[Fri Apr 17 00:52:48.230786 2026] [:error] [pid 4086:tid 4099] [client 51.103.127.33:65259] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeET4Flz7gxl_exM0Fo6fgAAAUs"]
[Fri Apr 17 00:52:50.106414 2026] [:error] [pid 3245:tid 3274] [client 51.103.127.33:55266] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeET4qESOMTHVLs-uFDG0AAAAQw"]
[Fri Apr 17 00:52:51.237606 2026] [:error] [pid 4086:tid 4104] [client 51.103.127.33:5393] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeET41lz7gxl_exM0Fo6ggAAAVA"]
[Fri Apr 17 00:52:52.343020 2026] [:error] [pid 43387:tid 43462] [client 51.103.127.33:5352] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeET5CBNsONqHxWTakUx1QAAAIs"]
[Fri Apr 17 00:52:53.961460 2026] [:error] [pid 43482:tid 43495] [client 51.103.127.33:5870] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "aeET5T9SZnuKxlHrct2EngAAAMs"]
[Fri Apr 17 00:52:55.000750 2026] [:error] [pid 43386:tid 43428] [client 51.103.127.33:5577] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ta0ol.php"] [unique_id "aeET5u91GAVgUfhPVDG1tQAAAEg"]
[Fri Apr 17 00:53:07.455326 2026] [:error] [pid 3245:tid 3282] [client 51.103.127.33:5516] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "aeET86ESOMTHVLs-uFDHCQAAARQ"]
[Fri Apr 17 00:53:08.857014 2026] [:error] [pid 3245:tid 3267] [client 51.103.127.33:5528] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "aeET9KESOMTHVLs-uFDHDAAAAQU"]
[Fri Apr 17 00:53:09.808700 2026] [:error] [pid 4086:tid 4113] [client 51.103.127.33:5377] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "aeET9Vlz7gxl_exM0Fo6qgAAAVg"]
[Fri Apr 17 00:53:10.662780 2026] [:error] [pid 4086:tid 4103] [client 51.103.127.33:55279] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "aeET9llz7gxl_exM0Fo6rgAAAU8"]
[Fri Apr 17 00:53:11.393907 2026] [:error] [pid 4086:tid 4104] [client 51.103.127.33:65246] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeET91lz7gxl_exM0Fo6sQAAAVA"]
[Fri Apr 17 00:53:12.102397 2026] [:error] [pid 43387:tid 43459] [client 51.103.127.33:5571] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeET-CBNsONqHxWTakUx5wAAAIg"]
[Fri Apr 17 00:53:13.200663 2026] [:error] [pid 4086:tid 4110] [client 51.103.127.33:55276] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeET-Vlz7gxl_exM0Fo6uAAAAVY"]
[Fri Apr 17 00:53:13.850901 2026] [:error] [pid 3245:tid 3282] [client 51.103.127.33:5602] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeET-aESOMTHVLs-uFDHFgAAARQ"]
[Fri Apr 17 00:53:14.444471 2026] [:error] [pid 43387:tid 43450] [client 51.103.127.33:5589] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aeET-iBNsONqHxWTakUx6AAAAII"]
[Fri Apr 17 00:53:15.077514 2026] [:error] [pid 43387:tid 43460] [client 51.103.127.33:5533] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aeET-yBNsONqHxWTakUx7AAAAIk"]
[Fri Apr 17 00:53:15.807193 2026] [:error] [pid 43385:tid 43395] [client 51.103.127.33:55233] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aeET-8nIxkJaUI8KNs74zgAAAAY"]
[Fri Apr 17 00:53:16.588181 2026] [:error] [pid 43386:tid 43428] [client 51.103.127.33:5402] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aeET_O91GAVgUfhPVDG1wgAAAEg"]
[Fri Apr 17 00:53:17.271869 2026] [:error] [pid 4086:tid 4108] [client 51.103.127.33:65217] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeET_Vlz7gxl_exM0Fo6vAAAAVQ"]
[Fri Apr 17 00:53:17.966308 2026] [:error] [pid 4086:tid 4093] [client 51.103.127.33:5417] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeET_Vlz7gxl_exM0Fo6vwAAAUU"]
[Fri Apr 17 00:53:18.578348 2026] [:error] [pid 43385:tid 43405] [client 51.103.127.33:5556] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeET_snIxkJaUI8KNs740QAAABA"]
[Fri Apr 17 00:53:19.200827 2026] [:error] [pid 4086:tid 4089] [client 51.103.127.33:55267] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeET_1lz7gxl_exM0Fo6wgAAAUE"]
[Fri Apr 17 00:53:19.852147 2026] [:error] [pid 43387:tid 43459] [client 51.103.127.33:5851] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aeET_yBNsONqHxWTakUx-gAAAIg"]
[Fri Apr 17 00:53:20.593485 2026] [:error] [pid 4086:tid 4091] [client 51.103.127.33:5868] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aeEUAFlz7gxl_exM0Fo6xAAAAUM"]
[Fri Apr 17 00:53:21.367668 2026] [:error] [pid 3245:tid 3272] [client 51.103.127.33:55247] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aeEUAaESOMTHVLs-uFDHGAAAAQo"]
[Fri Apr 17 00:53:22.062055 2026] [:error] [pid 43482:tid 43485] [client 51.103.127.33:55237] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aeEUAj9SZnuKxlHrct2EwAAAAME"]
[Fri Apr 17 00:53:23.221530 2026] [:error] [pid 43482:tid 43498] [client 51.103.127.33:5879] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEUAz9SZnuKxlHrct2EwwAAAM4"]
[Fri Apr 17 00:53:23.918060 2026] [:error] [pid 43386:tid 43421] [client 51.103.127.33:5415] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEUA-91GAVgUfhPVDG10gAAAEE"]
[Fri Apr 17 00:53:24.931249 2026] [:error] [pid 3245:tid 3267] [client 51.103.127.33:5527] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEUBKESOMTHVLs-uFDHGgAAAQU"]
[Fri Apr 17 00:53:25.666326 2026] [:error] [pid 43386:tid 43425] [client 51.103.127.33:5423] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeEUBe91GAVgUfhPVDG10wAAAEU"]
[Fri Apr 17 00:53:26.437406 2026] [:error] [pid 43386:tid 43430] [client 51.103.127.33:5526] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "aeEUBu91GAVgUfhPVDG11AAAAEo"]
[Fri Apr 17 00:53:27.329564 2026] [:error] [pid 43482:tid 43490] [client 51.103.127.33:55248] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "aeEUBz9SZnuKxlHrct2ExgAAAMY"]
[Fri Apr 17 00:53:28.006496 2026] [:error] [pid 4086:tid 4103] [client 51.103.127.33:65266] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "aeEUCFlz7gxl_exM0Fo6zQAAAU8"]
[Fri Apr 17 00:53:28.780039 2026] [:error] [pid 43386:tid 43439] [client 51.103.127.33:55274] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/torsa1.php"] [unique_id "aeEUCO91GAVgUfhPVDG11wAAAFM"]
[Fri Apr 17 00:53:29.399583 2026] [:error] [pid 43387:tid 43467] [client 51.103.127.33:5429] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeEUCSBNsONqHxWTakUyBwAAAI4"]
[Fri Apr 17 00:53:30.312153 2026] [:error] [pid 43385:tid 43401] [client 51.103.127.33:5876] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeEUCsnIxkJaUI8KNs743gAAAAw"]
[Fri Apr 17 00:53:30.941452 2026] [:error] [pid 43386:tid 43426] [client 51.103.127.33:55258] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeEUCu91GAVgUfhPVDG13wAAAEY"]
[Fri Apr 17 00:53:31.593864 2026] [:error] [pid 4086:tid 4091] [client 51.103.127.33:55272] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeEUC1lz7gxl_exM0Fo60AAAAUM"]
[Fri Apr 17 00:53:32.317603 2026] [:error] [pid 4086:tid 4103] [client 51.103.127.33:5132] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "aeEUDFlz7gxl_exM0Fo61AAAAU8"]
[Fri Apr 17 00:53:33.095653 2026] [:error] [pid 43385:tid 43405] [client 51.103.127.33:5830] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "aeEUDcnIxkJaUI8KNs743wAAABA"]
[Fri Apr 17 00:53:34.339089 2026] [:error] [pid 4086:tid 4090] [client 51.103.127.33:65256] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "aeEUDllz7gxl_exM0Fo62AAAAUI"]
[Fri Apr 17 00:53:35.258684 2026] [:error] [pid 43385:tid 43410] [client 51.103.127.33:5399] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "aeEUD8nIxkJaUI8KNs744wAAABQ"]
[Fri Apr 17 00:53:36.530261 2026] [:error] [pid 43386:tid 43421] [client 51.103.127.33:5619] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEUEO91GAVgUfhPVDG14QAAAEE"]
[Fri Apr 17 00:53:37.933934 2026] [:error] [pid 4086:tid 4098] [client 51.103.127.33:5625] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEUEVlz7gxl_exM0Fo64gAAAUo"]
[Fri Apr 17 00:53:38.789308 2026] [:error] [pid 43482:tid 43497] [client 51.103.127.33:5612] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEUEj9SZnuKxlHrct2E0AAAAM0"]
[Fri Apr 17 00:53:39.764342 2026] [:error] [pid 43482:tid 43493] [client 51.103.127.33:55294] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeEUEz9SZnuKxlHrct2E0wAAAMk"]
[Fri Apr 17 00:53:40.702493 2026] [:error] [pid 43482:tid 43485] [client 51.103.127.33:5507] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aeEUFD9SZnuKxlHrct2E1gAAAME"]
[Fri Apr 17 00:53:41.496089 2026] [:error] [pid 3245:tid 3285] [client 51.103.127.33:5601] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aeEUFaESOMTHVLs-uFDHHAAAARc"]
[Fri Apr 17 00:53:42.095935 2026] [:error] [pid 3245:tid 3273] [client 51.103.127.33:65173] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aeEUFqESOMTHVLs-uFDHIQAAAQs"]
[Fri Apr 17 00:53:43.093914 2026] [:error] [pid 43482:tid 43494] [client 51.103.127.33:55246] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aeEUFz9SZnuKxlHrct2E3AAAAMo"]
[Fri Apr 17 00:53:43.846800 2026] [:error] [pid 43385:tid 43398] [client 51.103.127.33:5390] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeEUF8nIxkJaUI8KNs747QAAAAk"]
[Fri Apr 17 00:53:44.993829 2026] [:error] [pid 43482:tid 43502] [client 51.103.127.33:5129] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeEUGD9SZnuKxlHrct2E3QAAANI"]
[Fri Apr 17 00:53:45.711159 2026] [:error] [pid 3245:tid 3282] [client 51.103.127.33:5557] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeEUGaESOMTHVLs-uFDHKgAAARQ"]
[Fri Apr 17 00:53:46.651002 2026] [:error] [pid 43387:tid 43460] [client 51.103.127.33:5144] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeEUGiBNsONqHxWTakUyDAAAAIk"]
[Fri Apr 17 00:53:47.245682 2026] [:error] [pid 43385:tid 43406] [client 51.103.127.33:5319] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new3.php"] [unique_id "aeEUG8nIxkJaUI8KNs747gAAABE"]
[Fri Apr 17 00:53:48.545816 2026] [:error] [pid 43385:tid 43407] [client 51.103.127.33:5166] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new3.php"] [unique_id "aeEUHMnIxkJaUI8KNs748QAAABI"]
[Fri Apr 17 00:53:49.332286 2026] [:error] [pid 4086:tid 4099] [client 51.103.127.33:5414] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new3.php"] [unique_id "aeEUHVlz7gxl_exM0Fo67AAAAUs"]
[Fri Apr 17 00:53:51.304894 2026] [:error] [pid 3245:tid 3273] [client 51.103.127.33:5524] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new3.php"] [unique_id "aeEUH6ESOMTHVLs-uFDHMQAAAQs"]
[Fri Apr 17 00:53:53.116861 2026] [:error] [pid 43482:tid 43503] [client 51.103.127.33:5425] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aeEUIT9SZnuKxlHrct2E3wAAANM"]
[Fri Apr 17 00:53:54.444622 2026] [:error] [pid 3245:tid 3286] [client 51.103.127.33:5566] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aeEUIqESOMTHVLs-uFDHMwAAARg"]
[Fri Apr 17 00:53:57.149346 2026] [:error] [pid 43482:tid 43489] [client 51.103.127.33:5832] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aeEUJT9SZnuKxlHrct2E5QAAAMU"]
[Fri Apr 17 00:53:58.268025 2026] [:error] [pid 43482:tid 43504] [client 51.103.127.33:55275] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nw.php"] [unique_id "aeEUJj9SZnuKxlHrct2E5gAAANQ"]
[Fri Apr 17 00:53:59.584763 2026] [:error] [pid 43482:tid 43491] [client 51.103.127.33:5857] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "aeEUJz9SZnuKxlHrct2E6AAAAMc"]
[Fri Apr 17 00:54:00.621801 2026] [:error] [pid 4086:tid 4107] [client 51.103.127.33:5844] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "aeEUKFlz7gxl_exM0Fo7BwAAAVM"]
[Fri Apr 17 00:54:02.119652 2026] [:error] [pid 3245:tid 3273] [client 51.103.127.33:5835] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "aeEUKqESOMTHVLs-uFDHTQAAAQs"]
[Fri Apr 17 00:54:02.865186 2026] [:error] [pid 26102:tid 26106] [client 51.103.127.33:65203] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "aeEUKv127aFqw6ALdngEZQAAAYE"]
[Fri Apr 17 00:54:03.902782 2026] [:error] [pid 43482:tid 43497] [client 51.103.127.33:5120] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "aeEUKz9SZnuKxlHrct2FCQAAAM0"]
[Fri Apr 17 00:54:04.992398 2026] [:error] [pid 43482:tid 43497] [client 51.103.127.33:5408] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "aeEULD9SZnuKxlHrct2FDQAAAM0"]
[Fri Apr 17 00:54:06.272343 2026] [:error] [pid 43385:tid 43401] [client 51.103.127.33:5860] [client 51.103.127.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rithin.php"] [unique_id "aeEULsnIxkJaUI8KNs75IgAAAAw"]
[Fri Apr 17 01:47:02.873581 2026] [:error] [pid 43386:tid 43427] [client 20.166.31.184:9624] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeEglu91GAVgUfhPVDHPEAAAAEc"]
[Fri Apr 17 01:47:03.418522 2026] [:error] [pid 43386:tid 43431] [client 20.166.31.184:9644] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeEgl-91GAVgUfhPVDHPFgAAAEs"]
[Fri Apr 17 01:47:03.957657 2026] [:error] [pid 43482:tid 43498] [client 20.166.31.184:9613] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeEglz9SZnuKxlHrct2n4gAAAM4"]
[Fri Apr 17 01:47:04.493107 2026] [:error] [pid 43482:tid 43497] [client 20.166.31.184:9658] [client 20.166.31.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeEgmD9SZnuKxlHrct2n6AAAAM0"]
[Fri Apr 17 04:01:38.622434 2026] [:error] [pid 9263:tid 9266] [client 209.38.89.62:52498] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeFAIhP68VyHNvj1e56LzAAAAME"]
[Fri Apr 17 04:01:38.760716 2026] [:error] [pid 9263:tid 9288] [client 209.38.89.62:52518] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFAIhP68VyHNvj1e56LzwAAANc"]
[Fri Apr 17 04:01:39.169583 2026] [:error] [pid 9152:tid 9196] [client 209.38.89.62:52550] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFAI5JYca8I3TNCwIfMWgAAAEY"]
[Fri Apr 17 04:01:41.381884 2026] [:error] [pid 9263:tid 9268] [client 209.38.89.62:52560] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFAJRP68VyHNvj1e56L4QAAAMM"]
[Fri Apr 17 04:01:41.467408 2026] [:error] [pid 9263:tid 9275] [client 209.38.89.62:52578] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFAJRP68VyHNvj1e56L5AAAAMo"]
[Fri Apr 17 04:01:41.525093 2026] [:error] [pid 9263:tid 9271] [client 209.38.89.62:52590] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFAJRP68VyHNvj1e56L5gAAAMY"]
[Fri Apr 17 04:01:41.600292 2026] [:error] [pid 9263:tid 9266] [client 209.38.89.62:52612] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFAJRP68VyHNvj1e56L5wAAAME"]
[Fri Apr 17 04:01:41.772830 2026] [:error] [pid 9151:tid 9179] [client 209.38.89.62:52642] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFAJchTVuRPkua22vRhogAAABI"]
[Fri Apr 17 04:01:41.855301 2026] [:error] [pid 9153:tid 9224] [client 209.38.89.62:52658] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFAJeMHGxkTZX3c45etJQAAAIY"]
[Fri Apr 17 04:01:41.945545 2026] [:error] [pid 9263:tid 9278] [client 209.38.89.62:52682] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFAJRP68VyHNvj1e56L6AAAAM0"]
[Fri Apr 17 04:01:42.136977 2026] [:error] [pid 9153:tid 9229] [client 209.38.89.62:52698] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFAJuMHGxkTZX3c45etKAAAAIs"]
[Fri Apr 17 04:01:42.457199 2026] [:error] [pid 9263:tid 9276] [client 209.38.89.62:52712] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFAJhP68VyHNvj1e56L7gAAAMs"]
[Fri Apr 17 04:01:42.716751 2026] [:error] [pid 9263:tid 9277] [client 209.38.89.62:52726] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFAJhP68VyHNvj1e56L7wAAAMw"]
[Fri Apr 17 05:17:11.020976 2026] [:error] [pid 51878:tid 51899] [client 34.168.100.28:44570] [client 34.168.100.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env"] [unique_id "aeFR10nQhUtMbw9EsgZSagAAARM"]
[Fri Apr 17 05:17:16.348599 2026] [:error] [pid 9263:tid 9274] [client 34.168.100.28:46538] [client 34.168.100.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.vercel/.env.production.local"] [unique_id "aeFR3BP68VyHNvj1e57oAwAAAMk"]
[Fri Apr 17 05:22:41.703882 2026] [:error] [pid 9153:tid 9218] [client 158.158.35.197:32201] [client 158.158.35.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeFTIeMHGxkTZX3c45fzdgAAAIA"]
[Fri Apr 17 05:22:44.092861 2026] [:error] [pid 9152:tid 9190] [client 158.158.35.197:32271] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeFTJJJYca8I3TNCwIcF7gAAAEA"]
[Fri Apr 17 05:22:44.853776 2026] [:error] [pid 9263:tid 9282] [client 158.158.35.197:32319] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeFTJBP68VyHNvj1e57riwAAANE"]
[Fri Apr 17 05:22:45.750159 2026] [:error] [pid 9263:tid 9276] [client 158.158.35.197:60757] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeFTJRP68VyHNvj1e57rkAAAAMs"]
[Fri Apr 17 05:22:46.593087 2026] [:error] [pid 51878:tid 51883] [client 158.158.35.197:32200] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeFTJknQhUtMbw9EsgZX0QAAAQM"]
[Fri Apr 17 05:22:47.699762 2026] [:error] [pid 9263:tid 9271] [client 158.158.35.197:60796] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "aeFTJxP68VyHNvj1e57rlgAAAMY"]
[Fri Apr 17 05:22:48.841148 2026] [:error] [pid 9263:tid 9282] [client 158.158.35.197:32256] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "aeFTKBP68VyHNvj1e57rnwAAANE"]
[Fri Apr 17 05:22:49.935170 2026] [:error] [pid 9153:tid 9238] [client 158.158.35.197:60758] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "aeFTKeMHGxkTZX3c45fzfwAAAJQ"]
[Fri Apr 17 05:22:50.575899 2026] [:error] [pid 9152:tid 9195] [client 158.158.35.197:32318] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "aeFTKpJYca8I3TNCwIcF9QAAAEU"]
[Fri Apr 17 05:22:51.202370 2026] [:error] [pid 9151:tid 9165] [client 158.158.35.197:32254] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeFTK8hTVuRPkua22vSTewAAAAQ"]
[Fri Apr 17 05:22:52.547855 2026] [:error] [pid 9151:tid 9177] [client 158.158.35.197:32267] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeFTLMhTVuRPkua22vSThAAAABA"]
[Fri Apr 17 05:22:53.737335 2026] [:error] [pid 51878:tid 51892] [client 158.158.35.197:60791] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeFTLUnQhUtMbw9EsgZX4AAAAQw"]
[Fri Apr 17 05:22:55.212830 2026] [:error] [pid 51878:tid 51903] [client 158.158.35.197:60799] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeFTL0nQhUtMbw9EsgZX7wAAARc"]
[Fri Apr 17 05:22:57.686651 2026] [:error] [pid 9263:tid 9273] [client 158.158.35.197:60940] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeFTMRP68VyHNvj1e57rpQAAAMg"]
[Fri Apr 17 05:22:58.546554 2026] [:error] [pid 51878:tid 51897] [client 158.158.35.197:60932] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeFTMknQhUtMbw9EsgZYBgAAARE"]
[Fri Apr 17 05:22:59.472341 2026] [:error] [pid 9152:tid 9202] [client 158.158.35.197:32316] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeFTM5JYca8I3TNCwIcGBgAAAEw"]
[Fri Apr 17 05:23:00.437304 2026] [:error] [pid 51878:tid 51880] [client 158.158.35.197:32234] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeFTNEnQhUtMbw9EsgZYDwAAAQA"]
[Fri Apr 17 05:23:00.989592 2026] [:error] [pid 9151:tid 9170] [client 158.158.35.197:32216] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeFTNMhTVuRPkua22vSTkgAAAAk"]
[Fri Apr 17 05:23:01.722584 2026] [:error] [pid 9263:tid 9286] [client 158.158.35.197:5291] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeFTNRP68VyHNvj1e57rqgAAANU"]
[Fri Apr 17 05:23:02.348583 2026] [:error] [pid 51878:tid 51886] [client 158.158.35.197:60750] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeFTNknQhUtMbw9EsgZYEgAAAQY"]
[Fri Apr 17 05:23:03.029318 2026] [:error] [pid 51878:tid 51903] [client 158.158.35.197:60966] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeFTN0nQhUtMbw9EsgZYEwAAARc"]
[Fri Apr 17 05:23:04.190997 2026] [:error] [pid 51878:tid 51883] [client 158.158.35.197:60959] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeFTOEnQhUtMbw9EsgZYGwAAAQM"]
[Fri Apr 17 05:23:05.057083 2026] [:error] [pid 51878:tid 51893] [client 158.158.35.197:60988] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeFTOUnQhUtMbw9EsgZYJAAAAQ0"]
[Fri Apr 17 05:23:06.267346 2026] [:error] [pid 51878:tid 51904] [client 158.158.35.197:60753] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeFTOknQhUtMbw9EsgZYMQAAARg"]
[Fri Apr 17 05:23:07.194590 2026] [:error] [pid 9153:tid 9234] [client 158.158.35.197:32286] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeFTO-MHGxkTZX3c45fzmgAAAJA"]
[Fri Apr 17 05:23:08.104865 2026] [:error] [pid 9263:tid 9269] [client 158.158.35.197:60783] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "aeFTPBP68VyHNvj1e57ruAAAAMQ"]
[Fri Apr 17 05:23:09.168740 2026] [:error] [pid 51878:tid 51891] [client 158.158.35.197:60929] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "aeFTPUnQhUtMbw9EsgZYSgAAAQs"]
[Fri Apr 17 05:23:10.574393 2026] [:error] [pid 9151:tid 9178] [client 158.158.35.197:5297] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "aeFTPshTVuRPkua22vSTmQAAABE"]
[Fri Apr 17 05:23:11.758451 2026] [:error] [pid 9153:tid 9227] [client 158.158.35.197:32268] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "aeFTP-MHGxkTZX3c45fznQAAAIk"]
[Fri Apr 17 05:23:13.099488 2026] [:error] [pid 9263:tid 9274] [client 158.158.35.197:60941] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aeFTQRP68VyHNvj1e57rxgAAAMk"]
[Fri Apr 17 05:23:14.501392 2026] [:error] [pid 9263:tid 9280] [client 158.158.35.197:32240] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aeFTQhP68VyHNvj1e57rzAAAAM8"]
[Fri Apr 17 05:23:15.556867 2026] [:error] [pid 9263:tid 9285] [client 158.158.35.197:5254] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aeFTQxP68VyHNvj1e57r1AAAANQ"]
[Fri Apr 17 05:23:16.496427 2026] [:error] [pid 9153:tid 9229] [client 158.158.35.197:60984] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aeFTROMHGxkTZX3c45fzqAAAAIs"]
[Fri Apr 17 05:23:17.572374 2026] [:error] [pid 9152:tid 9210] [client 158.158.35.197:32218] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aeFTRZJYca8I3TNCwIcGHwAAAFQ"]
[Fri Apr 17 05:23:18.583529 2026] [:error] [pid 9263:tid 9280] [client 158.158.35.197:60962] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aeFTRhP68VyHNvj1e57r7gAAAM8"]
[Fri Apr 17 05:23:19.313926 2026] [:error] [pid 51878:tid 51900] [client 158.158.35.197:32210] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aeFTR0nQhUtMbw9EsgZYaAAAARQ"]
[Fri Apr 17 05:23:19.924340 2026] [:error] [pid 51878:tid 51880] [client 158.158.35.197:32228] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aeFTR0nQhUtMbw9EsgZYbwAAAQA"]
[Fri Apr 17 05:23:20.865857 2026] [:error] [pid 9263:tid 9277] [client 158.158.35.197:60779] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeFTSBP68VyHNvj1e57r-wAAAMw"]
[Fri Apr 17 05:23:21.397432 2026] [:error] [pid 9151:tid 9177] [client 158.158.35.197:32250] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeFTSchTVuRPkua22vSTsAAAABA"]
[Fri Apr 17 05:23:22.069385 2026] [:error] [pid 9153:tid 9237] [client 158.158.35.197:60785] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeFTSuMHGxkTZX3c45fzswAAAJM"]
[Fri Apr 17 05:23:23.245749 2026] [:error] [pid 9153:tid 9221] [client 158.158.35.197:32196] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeFTS-MHGxkTZX3c45fztQAAAIM"]
[Fri Apr 17 05:23:24.239195 2026] [:error] [pid 9151:tid 9169] [client 158.158.35.197:60960] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFTTMhTVuRPkua22vSTtAAAAAg"]
[Fri Apr 17 05:23:24.883561 2026] [:error] [pid 51878:tid 51884] [client 158.158.35.197:60752] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFTTEnQhUtMbw9EsgZYnQAAAQQ"]
[Fri Apr 17 05:23:25.901283 2026] [:error] [pid 9151:tid 9177] [client 158.158.35.197:60752] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFTTchTVuRPkua22vSTuwAAABA"]
[Fri Apr 17 05:23:26.983618 2026] [:error] [pid 51878:tid 51888] [client 158.158.35.197:5671] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeFTTknQhUtMbw9EsgZYpwAAAQg"]
[Fri Apr 17 05:23:27.869383 2026] [:error] [pid 9153:tid 9224] [client 158.158.35.197:60949] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeFTT-MHGxkTZX3c45fzwAAAAIY"]
[Fri Apr 17 05:23:29.099574 2026] [:error] [pid 9152:tid 9194] [client 158.158.35.197:32233] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeFTUZJYca8I3TNCwIcGPgAAAEQ"]
[Fri Apr 17 05:23:29.919371 2026] [:error] [pid 51878:tid 51884] [client 158.158.35.197:60973] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeFTUUnQhUtMbw9EsgZYsAAAAQQ"]
[Fri Apr 17 05:23:30.905725 2026] [:error] [pid 9152:tid 9195] [client 158.158.35.197:60977] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeFTUpJYca8I3TNCwIcGQwAAAEU"]
[Fri Apr 17 05:23:32.235584 2026] [:error] [pid 9152:tid 9190] [client 158.158.35.197:32289] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aeFTVJJYca8I3TNCwIcGSAAAAEA"]
[Fri Apr 17 05:23:33.014456 2026] [:error] [pid 9152:tid 9192] [client 158.158.35.197:60979] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aeFTVZJYca8I3TNCwIcGTAAAAEI"]
[Fri Apr 17 05:23:33.645432 2026] [:error] [pid 9152:tid 9194] [client 158.158.35.197:32221] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aeFTVZJYca8I3TNCwIcGUgAAAEQ"]
[Fri Apr 17 05:23:34.444944 2026] [:error] [pid 9152:tid 9198] [client 158.158.35.197:32198] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aeFTVpJYca8I3TNCwIcGXwAAAEg"]
[Fri Apr 17 05:23:35.275370 2026] [:error] [pid 9153:tid 9236] [client 158.158.35.197:60990] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny"] [unique_id "aeFTV-MHGxkTZX3c45fz0QAAAJI"]
[Fri Apr 17 05:23:36.060243 2026] [:error] [pid 9152:tid 9195] [client 158.158.35.197:32278] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny"] [unique_id "aeFTWJJYca8I3TNCwIcGaQAAAEU"]
[Fri Apr 17 05:23:36.817849 2026] [:error] [pid 9151:tid 9184] [client 158.158.35.197:5872] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny"] [unique_id "aeFTWMhTVuRPkua22vST3gAAABc"]
[Fri Apr 17 05:23:37.510789 2026] [:error] [pid 51878:tid 51900] [client 158.158.35.197:32311] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tiny"] [unique_id "aeFTWUnQhUtMbw9EsgZYywAAARQ"]
[Fri Apr 17 05:23:38.175524 2026] [:error] [pid 9152:tid 9190] [client 158.158.35.197:32264] [client 158.158.35.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aeFTWpJYca8I3TNCwIcGcAAAAEA"]
[Fri Apr 17 05:23:39.101558 2026] [:error] [pid 9152:tid 9203] [client 158.158.35.197:32308] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFTW5JYca8I3TNCwIcGdQAAAE0"]
[Fri Apr 17 05:23:39.664884 2026] [:error] [pid 51878:tid 51896] [client 158.158.35.197:32238] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFTW0nQhUtMbw9EsgZY1gAAARA"]
[Fri Apr 17 05:23:40.211154 2026] [:error] [pid 51878:tid 51900] [client 158.158.35.197:32231] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFTXEnQhUtMbw9EsgZY2wAAARQ"]
[Fri Apr 17 05:23:40.883658 2026] [:error] [pid 9263:tid 9286] [client 158.158.35.197:60976] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeFTXBP68VyHNvj1e57sJQAAANU"]
[Fri Apr 17 05:23:41.479402 2026] [:error] [pid 9153:tid 9230] [client 158.158.35.197:60991] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "aeFTXeMHGxkTZX3c45fz3AAAAIw"]
[Fri Apr 17 05:23:42.177069 2026] [:error] [pid 9153:tid 9239] [client 158.158.35.197:32207] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "aeFTXuMHGxkTZX3c45fz3wAAAJU"]
[Fri Apr 17 05:23:42.959390 2026] [:error] [pid 51878:tid 51884] [client 158.158.35.197:60793] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "aeFTXknQhUtMbw9EsgZY4wAAAQQ"]
[Fri Apr 17 05:23:50.946697 2026] [:error] [pid 9152:tid 9205] [client 158.158.35.197:60981] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeFTZpJYca8I3TNCwIcGigAAAE8"]
[Fri Apr 17 05:23:52.039607 2026] [:error] [pid 9153:tid 9240] [client 158.158.35.197:5649] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeFTaOMHGxkTZX3c45fz8wAAAJY"]
[Fri Apr 17 05:23:53.196914 2026] [:error] [pid 51878:tid 51898] [client 158.158.35.197:60755] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeFTaUnQhUtMbw9EsgZY_wAAARI"]
[Fri Apr 17 05:23:54.204733 2026] [:error] [pid 51878:tid 51890] [client 158.158.35.197:32282] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeFTaknQhUtMbw9EsgZZBwAAAQo"]
[Fri Apr 17 05:23:55.278889 2026] [:error] [pid 9153:tid 9235] [client 158.158.35.197:32315] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeFTa-MHGxkTZX3c45fz9QAAAJE"]
[Fri Apr 17 05:23:57.217283 2026] [:error] [pid 51878:tid 51885] [client 158.158.35.197:32239] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeFTbUnQhUtMbw9EsgZZHgAAAQU"]
[Fri Apr 17 05:23:58.902220 2026] [:error] [pid 9151:tid 9163] [client 158.158.35.197:60780] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeFTbshTVuRPkua22vSUAwAAAAI"]
[Fri Apr 17 05:24:00.477048 2026] [:error] [pid 9152:tid 9211] [client 158.158.35.197:60975] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeFTcJJYca8I3TNCwIcGlAAAAFU"]
[Fri Apr 17 05:24:02.340935 2026] [:error] [pid 51878:tid 51892] [client 158.158.35.197:60787] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeFTcknQhUtMbw9EsgZZNQAAAQw"]
[Fri Apr 17 05:24:03.661065 2026] [:error] [pid 9152:tid 9209] [client 158.158.35.197:32300] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeFTc5JYca8I3TNCwIcGnAAAAFM"]
[Fri Apr 17 05:24:05.230551 2026] [:error] [pid 9153:tid 9222] [client 158.158.35.197:32193] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeFTdeMHGxkTZX3c45fz_QAAAIQ"]
[Fri Apr 17 05:24:07.350267 2026] [:error] [pid 51878:tid 51886] [client 158.158.35.197:5263] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeFTd0nQhUtMbw9EsgZZRwAAAQY"]
[Fri Apr 17 05:24:08.471526 2026] [:error] [pid 9153:tid 9224] [client 158.158.35.197:60743] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/db.php"] [unique_id "aeFTeOMHGxkTZX3c45f0BgAAAIY"]
[Fri Apr 17 05:24:09.854009 2026] [:error] [pid 9263:tid 9285] [client 158.158.35.197:60748] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/db.php"] [unique_id "aeFTeRP68VyHNvj1e57sSAAAANQ"]
[Fri Apr 17 05:24:10.901580 2026] [:error] [pid 9263:tid 9271] [client 158.158.35.197:32219] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/db.php"] [unique_id "aeFTehP68VyHNvj1e57sSgAAAMY"]
[Fri Apr 17 05:24:13.166252 2026] [:error] [pid 9151:tid 9161] [client 158.158.35.197:5661] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/db.php"] [unique_id "aeFTfchTVuRPkua22vSUFQAAAAA"]
[Fri Apr 17 05:24:14.642455 2026] [:error] [pid 9153:tid 9225] [client 158.158.35.197:60985] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/less.php"] [unique_id "aeFTfuMHGxkTZX3c45f0EgAAAIc"]
[Fri Apr 17 05:24:15.603187 2026] [:error] [pid 9263:tid 9268] [client 158.158.35.197:60953] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/less.php"] [unique_id "aeFTfxP68VyHNvj1e57sUgAAAMM"]
[Fri Apr 17 05:24:16.681875 2026] [:error] [pid 9263:tid 9289] [client 158.158.35.197:32306] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/less.php"] [unique_id "aeFTgBP68VyHNvj1e57sVgAAANg"]
[Fri Apr 17 05:24:17.707867 2026] [:error] [pid 9152:tid 9208] [client 158.158.35.197:32244] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/less.php"] [unique_id "aeFTgZJYca8I3TNCwIcGuAAAAFI"]
[Fri Apr 17 05:24:18.607694 2026] [:error] [pid 51878:tid 51902] [client 158.158.35.197:32309] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeFTgknQhUtMbw9EsgZZTwAAARY"]
[Fri Apr 17 05:24:20.049020 2026] [:error] [pid 9151:tid 9162] [client 158.158.35.197:60944] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeFThMhTVuRPkua22vSUJQAAAAE"]
[Fri Apr 17 05:24:24.885651 2026] [:error] [pid 9153:tid 9224] [client 158.158.35.197:32265] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeFTiOMHGxkTZX3c45f0HQAAAIY"]
[Fri Apr 17 05:24:28.213345 2026] [:error] [pid 9263:tid 9281] [client 158.158.35.197:60954] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeFTjBP68VyHNvj1e57sdgAAANA"]
[Fri Apr 17 05:24:30.649929 2026] [:error] [pid 9153:tid 9225] [client 158.158.35.197:32232] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aeFTjuMHGxkTZX3c45f0KwAAAIc"]
[Fri Apr 17 05:24:32.423323 2026] [:error] [pid 9153:tid 9238] [client 158.158.35.197:60766] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aeFTkOMHGxkTZX3c45f0MAAAAJQ"]
[Fri Apr 17 05:24:37.616444 2026] [:error] [pid 9152:tid 9213] [client 158.158.35.197:32312] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aeFTlZJYca8I3TNCwIcGyAAAAFc"]
[Fri Apr 17 05:24:38.370147 2026] [:error] [pid 9263:tid 9287] [client 158.158.35.197:32203] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aeFTlhP68VyHNvj1e57soQAAANY"]
[Fri Apr 17 05:24:39.931873 2026] [:error] [pid 9152:tid 9191] [client 158.158.35.197:60980] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeFTl5JYca8I3TNCwIcGywAAAEE"]
[Fri Apr 17 05:24:42.148206 2026] [:error] [pid 9152:tid 9196] [client 158.158.35.197:60767] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeFTmpJYca8I3TNCwIcGzQAAAEY"]
[Fri Apr 17 05:24:42.978404 2026] [:error] [pid 9152:tid 9200] [client 158.158.35.197:5255] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeFTmpJYca8I3TNCwIcGzgAAAEo"]
[Fri Apr 17 05:24:44.108969 2026] [:error] [pid 9153:tid 9229] [client 158.158.35.197:60776] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeFTnOMHGxkTZX3c45f0RQAAAIs"]
[Fri Apr 17 05:24:44.807247 2026] [:error] [pid 9153:tid 9220] [client 158.158.35.197:60956] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFTnOMHGxkTZX3c45f0SwAAAII"]
[Fri Apr 17 05:24:45.347714 2026] [:error] [pid 9153:tid 9241] [client 158.158.35.197:32283] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFTneMHGxkTZX3c45f0TwAAAJc"]
[Fri Apr 17 05:24:45.964457 2026] [:error] [pid 9152:tid 9199] [client 158.158.35.197:60939] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFTnZJYca8I3TNCwIcG1QAAAEk"]
[Fri Apr 17 05:24:46.649187 2026] [:error] [pid 9151:tid 9180] [client 158.158.35.197:32220] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeFTnshTVuRPkua22vSUOgAAABM"]
[Fri Apr 17 05:24:47.402877 2026] [:error] [pid 9153:tid 9229] [client 158.158.35.197:6079] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bdktk.php"] [unique_id "aeFTn-MHGxkTZX3c45f0WwAAAIs"]
[Fri Apr 17 05:24:48.263354 2026] [:error] [pid 9152:tid 9196] [client 158.158.35.197:32295] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bdktk.php"] [unique_id "aeFToJJYca8I3TNCwIcG3QAAAEY"]
[Fri Apr 17 05:24:49.633088 2026] [:error] [pid 9152:tid 9190] [client 158.158.35.197:5684] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bdktk.php"] [unique_id "aeFToZJYca8I3TNCwIcG4wAAAEA"]
[Fri Apr 17 05:24:57.527141 2026] [:error] [pid 9151:tid 9181] [client 158.158.35.197:60789] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aeFTqchTVuRPkua22vSUXwAAABQ"]
[Fri Apr 17 05:24:59.231100 2026] [:error] [pid 9151:tid 9185] [client 158.158.35.197:60742] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aeFTq8hTVuRPkua22vSUYQAAABg"]
[Fri Apr 17 05:25:00.889286 2026] [:error] [pid 9151:tid 9164] [client 158.158.35.197:32287] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aeFTrMhTVuRPkua22vSUYwAAAAM"]
[Fri Apr 17 05:25:05.779411 2026] [:error] [pid 9152:tid 9198] [client 158.158.35.197:5915] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aeFTsZJYca8I3TNCwIcG_wAAAEg"]
[Fri Apr 17 05:25:07.023730 2026] [:error] [pid 9152:tid 9207] [client 158.158.35.197:32298] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gz.php"] [unique_id "aeFTs5JYca8I3TNCwIcHBwAAAFE"]
[Fri Apr 17 05:25:07.774193 2026] [:error] [pid 9151:tid 9168] [client 158.158.35.197:32224] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gz.php"] [unique_id "aeFTs8hTVuRPkua22vSUdAAAAAc"]
[Fri Apr 17 05:25:08.843026 2026] [:error] [pid 9263:tid 9280] [client 158.158.35.197:32262] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gz.php"] [unique_id "aeFTtBP68VyHNvj1e57sywAAAM8"]
[Fri Apr 17 05:25:10.224120 2026] [:error] [pid 51878:tid 51903] [client 158.158.35.197:60931] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gz.php"] [unique_id "aeFTtknQhUtMbw9EsgZZngAAARc"]
[Fri Apr 17 05:25:10.982175 2026] [:error] [pid 9153:tid 9240] [client 158.158.35.197:60795] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "aeFTtuMHGxkTZX3c45f0lgAAAJY"]
[Fri Apr 17 05:25:13.304515 2026] [:error] [pid 9151:tid 9176] [client 158.158.35.197:5686] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "aeFTuchTVuRPkua22vSUgQAAAA8"]
[Fri Apr 17 05:25:14.690245 2026] [:error] [pid 9263:tid 9272] [client 158.158.35.197:32296] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "aeFTuhP68VyHNvj1e57s0wAAAMc"]
[Fri Apr 17 05:25:18.042788 2026] [:error] [pid 51878:tid 51902] [client 158.158.35.197:60745] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gelio1.php"] [unique_id "aeFTvknQhUtMbw9EsgZZuAAAARY"]
[Fri Apr 17 05:25:26.402784 2026] [:error] [pid 51878:tid 51882] [client 158.158.35.197:60786] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/areak1.php"] [unique_id "aeFTxknQhUtMbw9EsgZZywAAAQI"]
[Fri Apr 17 05:25:31.208859 2026] [:error] [pid 9153:tid 9232] [client 158.158.35.197:5825] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/areak1.php"] [unique_id "aeFTy-MHGxkTZX3c45f0wgAAAI4"]
[Fri Apr 17 05:25:32.569788 2026] [:error] [pid 9153:tid 9218] [client 158.158.35.197:60971] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/areak1.php"] [unique_id "aeFTzOMHGxkTZX3c45f0zAAAAIA"]
[Fri Apr 17 05:25:33.312976 2026] [:error] [pid 51878:tid 51885] [client 158.158.35.197:60781] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/areak1.php"] [unique_id "aeFTzUnQhUtMbw9EsgZZ4QAAAQU"]
[Fri Apr 17 05:25:34.099351 2026] [:error] [pid 51878:tid 51902] [client 158.158.35.197:6060] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "aeFTzknQhUtMbw9EsgZZ5gAAARY"]
[Fri Apr 17 05:25:39.119168 2026] [:error] [pid 51878:tid 51899] [client 158.158.35.197:60989] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "aeFT00nQhUtMbw9EsgZZ-AAAARM"]
[Fri Apr 17 05:25:40.355685 2026] [:error] [pid 9152:tid 9200] [client 158.158.35.197:32259] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "aeFT1JJYca8I3TNCwIcHRgAAAEo"]
[Fri Apr 17 05:25:42.014033 2026] [:error] [pid 9152:tid 9206] [client 158.158.35.197:60965] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/qqa.php"] [unique_id "aeFT1pJYca8I3TNCwIcHSgAAAFA"]
[Fri Apr 17 05:25:42.868899 2026] [:error] [pid 9152:tid 9210] [client 158.158.35.197:5670] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeFT1pJYca8I3TNCwIcHSwAAAFQ"]
[Fri Apr 17 05:25:43.505007 2026] [:error] [pid 9152:tid 9212] [client 158.158.35.197:32225] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeFT15JYca8I3TNCwIcHTAAAAFY"]
[Fri Apr 17 05:25:45.006224 2026] [:error] [pid 9153:tid 9237] [client 158.158.35.197:5680] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeFT2eMHGxkTZX3c45f02wAAAJM"]
[Fri Apr 17 05:25:45.933760 2026] [:error] [pid 9152:tid 9199] [client 158.158.35.197:60751] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeFT2ZJYca8I3TNCwIcHUgAAAEk"]
[Fri Apr 17 05:25:47.456490 2026] [:error] [pid 9152:tid 9205] [client 158.158.35.197:5256] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ga.php"] [unique_id "aeFT25JYca8I3TNCwIcHVAAAAE8"]
[Fri Apr 17 05:25:48.407461 2026] [:error] [pid 9152:tid 9192] [client 158.158.35.197:32242] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ga.php"] [unique_id "aeFT3JJYca8I3TNCwIcHVwAAAEI"]
[Fri Apr 17 05:25:48.995426 2026] [:error] [pid 9263:tid 9270] [client 158.158.35.197:60749] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ga.php"] [unique_id "aeFT3BP68VyHNvj1e57tEwAAAMU"]
[Fri Apr 17 05:25:49.831656 2026] [:error] [pid 9151:tid 9169] [client 158.158.35.197:5273] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ga.php"] [unique_id "aeFT3chTVuRPkua22vSUmwAAAAg"]
[Fri Apr 17 05:25:50.446356 2026] [:error] [pid 9152:tid 9195] [client 158.158.35.197:32297] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeFT3pJYca8I3TNCwIcHWgAAAEU"]
[Fri Apr 17 05:25:51.048899 2026] [:error] [pid 51878:tid 51882] [client 158.158.35.197:5303] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeFT30nQhUtMbw9EsgZaJwAAAQI"]
[Fri Apr 17 05:25:52.022217 2026] [:error] [pid 9152:tid 9209] [client 158.158.35.197:60943] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeFT4JJYca8I3TNCwIcHXAAAAFM"]
[Fri Apr 17 05:25:52.853018 2026] [:error] [pid 9151:tid 9179] [client 158.158.35.197:32299] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeFT4MhTVuRPkua22vSUoAAAABI"]
[Fri Apr 17 05:25:54.068399 2026] [:error] [pid 9151:tid 9165] [client 158.158.35.197:60737] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1100.php"] [unique_id "aeFT4shTVuRPkua22vSUpAAAAAQ"]
[Fri Apr 17 05:25:56.027773 2026] [:error] [pid 9152:tid 9191] [client 158.158.35.197:32275] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1100.php"] [unique_id "aeFT5JJYca8I3TNCwIcHZwAAAEE"]
[Fri Apr 17 05:25:56.880446 2026] [:error] [pid 51878:tid 51889] [client 158.158.35.197:32247] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1100.php"] [unique_id "aeFT5EnQhUtMbw9EsgZaMAAAAQk"]
[Fri Apr 17 05:26:05.788626 2026] [:error] [pid 51878:tid 51897] [client 158.158.35.197:60754] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeFT7UnQhUtMbw9EsgZacQAAARE"]
[Fri Apr 17 05:26:06.793356 2026] [:error] [pid 9263:tid 9278] [client 158.158.35.197:5266] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeFT7hP68VyHNvj1e57tJwAAAM0"]
[Fri Apr 17 05:26:07.523287 2026] [:error] [pid 9263:tid 9283] [client 158.158.35.197:5280] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeFT7xP68VyHNvj1e57tKwAAANI"]
[Fri Apr 17 05:26:08.769326 2026] [:error] [pid 9151:tid 9166] [client 158.158.35.197:60933] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeFT8MhTVuRPkua22vSUvQAAAAU"]
[Fri Apr 17 05:26:10.036552 2026] [:error] [pid 51878:tid 51895] [client 158.158.35.197:5691] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xper.php"] [unique_id "aeFT8knQhUtMbw9EsgZafwAAAQ8"]
[Fri Apr 17 05:26:11.359286 2026] [:error] [pid 9263:tid 9270] [client 158.158.35.197:6049] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xper.php"] [unique_id "aeFT8xP68VyHNvj1e57tMwAAAMU"]
[Fri Apr 17 05:26:12.182283 2026] [:error] [pid 9263:tid 9285] [client 158.158.35.197:5281] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xper.php"] [unique_id "aeFT9BP68VyHNvj1e57tNgAAANQ"]
[Fri Apr 17 05:26:13.871630 2026] [:error] [pid 51878:tid 51885] [client 158.158.35.197:32292] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xper.php"] [unique_id "aeFT9UnQhUtMbw9EsgZakAAAAQU"]
[Fri Apr 17 05:26:14.716108 2026] [:error] [pid 9263:tid 9274] [client 158.158.35.197:32277] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wxpass.php"] [unique_id "aeFT9hP68VyHNvj1e57tQgAAAMk"]
[Fri Apr 17 05:26:15.969119 2026] [:error] [pid 9263:tid 9276] [client 158.158.35.197:5300] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wxpass.php"] [unique_id "aeFT9xP68VyHNvj1e57tRQAAAMs"]
[Fri Apr 17 05:26:17.069091 2026] [:error] [pid 9153:tid 9224] [client 158.158.35.197:32284] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wxpass.php"] [unique_id "aeFT-eMHGxkTZX3c45f1EQAAAIY"]
[Fri Apr 17 05:26:17.988017 2026] [:error] [pid 51878:tid 51893] [client 158.158.35.197:60773] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wxpass.php"] [unique_id "aeFT-UnQhUtMbw9EsgZaoQAAAQ0"]
[Fri Apr 17 05:26:18.726432 2026] [:error] [pid 51878:tid 51898] [client 158.158.35.197:32206] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/000.php"] [unique_id "aeFT-knQhUtMbw9EsgZapgAAARI"]
[Fri Apr 17 05:26:19.711362 2026] [:error] [pid 9153:tid 9219] [client 158.158.35.197:32313] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/000.php"] [unique_id "aeFT--MHGxkTZX3c45f1EwAAAIE"]
[Fri Apr 17 05:26:21.123363 2026] [:error] [pid 9263:tid 9285] [client 158.158.35.197:32305] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/000.php"] [unique_id "aeFT_RP68VyHNvj1e57tTwAAANQ"]
[Fri Apr 17 05:26:21.781224 2026] [:error] [pid 9263:tid 9283] [client 158.158.35.197:5648] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/000.php"] [unique_id "aeFT_RP68VyHNvj1e57tVQAAANI"]
[Fri Apr 17 05:26:23.123284 2026] [:error] [pid 9263:tid 9269] [client 158.158.35.197:60777] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeFT_xP68VyHNvj1e57tXAAAAMQ"]
[Fri Apr 17 05:26:24.040057 2026] [:error] [pid 9263:tid 9265] [client 158.158.35.197:32243] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeFUABP68VyHNvj1e57tZQAAAMA"]
[Fri Apr 17 05:26:25.163030 2026] [:error] [pid 9263:tid 9270] [client 158.158.35.197:5694] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeFUARP68VyHNvj1e57tZwAAAMU"]
[Fri Apr 17 05:26:25.901543 2026] [:error] [pid 9263:tid 9268] [client 158.158.35.197:5636] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeFUARP68VyHNvj1e57tawAAAMM"]
[Fri Apr 17 05:26:26.959627 2026] [:error] [pid 9152:tid 9213] [client 158.158.35.197:5660] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x3x.php"] [unique_id "aeFUApJYca8I3TNCwIcHiQAAAFc"]
[Fri Apr 17 05:26:27.604227 2026] [:error] [pid 9153:tid 9231] [client 158.158.35.197:32223] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x3x.php"] [unique_id "aeFUA-MHGxkTZX3c45f1IAAAAI0"]
[Fri Apr 17 05:26:28.620919 2026] [:error] [pid 51878:tid 51885] [client 158.158.35.197:60790] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x3x.php"] [unique_id "aeFUBEnQhUtMbw9EsgZarQAAAQU"]
[Fri Apr 17 05:26:30.831243 2026] [:error] [pid 9151:tid 9181] [client 158.158.35.197:60763] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x3x.php"] [unique_id "aeFUBshTVuRPkua22vSU6QAAABQ"]
[Fri Apr 17 05:26:33.014557 2026] [:error] [pid 9263:tid 9265] [client 158.158.35.197:6031] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aeFUCRP68VyHNvj1e57tdgAAAMA"]
[Fri Apr 17 05:26:34.280342 2026] [:error] [pid 9152:tid 9201] [client 158.158.35.197:60983] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aeFUCpJYca8I3TNCwIcHjwAAAEs"]
[Fri Apr 17 05:26:39.096001 2026] [:error] [pid 9152:tid 9212] [client 158.158.35.197:32215] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aeFUD5JYca8I3TNCwIcHmAAAAFY"]
[Fri Apr 17 05:26:40.419727 2026] [:error] [pid 9263:tid 9286] [client 158.158.35.197:5693] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aeFUEBP68VyHNvj1e57tggAAANU"]
[Fri Apr 17 05:26:41.122727 2026] [:error] [pid 51878:tid 51892] [client 158.158.35.197:5262] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/global.php"] [unique_id "aeFUEUnQhUtMbw9EsgZawgAAAQw"]
[Fri Apr 17 05:26:42.073046 2026] [:error] [pid 51878:tid 51893] [client 158.158.35.197:5274] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/global.php"] [unique_id "aeFUEknQhUtMbw9EsgZaxQAAAQ0"]
[Fri Apr 17 05:26:42.870035 2026] [:error] [pid 9151:tid 9176] [client 158.158.35.197:60788] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/global.php"] [unique_id "aeFUEshTVuRPkua22vSU-AAAAA8"]
[Fri Apr 17 05:26:43.695737 2026] [:error] [pid 51878:tid 51885] [client 158.158.35.197:32304] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/global.php"] [unique_id "aeFUE0nQhUtMbw9EsgZazAAAAQU"]
[Fri Apr 17 05:26:44.310855 2026] [:error] [pid 51878:tid 51895] [client 158.158.35.197:5268] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeFUFEnQhUtMbw9EsgZazgAAAQ8"]
[Fri Apr 17 05:26:45.620204 2026] [:error] [pid 9153:tid 9230] [client 158.158.35.197:5288] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeFUFeMHGxkTZX3c45f1OAAAAIw"]
[Fri Apr 17 05:26:46.282975 2026] [:error] [pid 9151:tid 9175] [client 158.158.35.197:32195] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeFUFshTVuRPkua22vSVBQAAAA4"]
[Fri Apr 17 05:26:47.696469 2026] [:error] [pid 9151:tid 9162] [client 158.158.35.197:32209] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeFUF8hTVuRPkua22vSVCgAAAAE"]
[Fri Apr 17 05:26:49.676702 2026] [:error] [pid 9153:tid 9221] [client 158.158.35.197:60741] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/link.php"] [unique_id "aeFUGeMHGxkTZX3c45f1QwAAAIM"]
[Fri Apr 17 05:26:50.983021 2026] [:error] [pid 9153:tid 9220] [client 158.158.35.197:32211] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/link.php"] [unique_id "aeFUGuMHGxkTZX3c45f1SgAAAII"]
[Fri Apr 17 05:26:52.805980 2026] [:error] [pid 51878:tid 51901] [client 158.158.35.197:32276] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/link.php"] [unique_id "aeFUHEnQhUtMbw9EsgZa7AAAARU"]
[Fri Apr 17 05:26:53.530407 2026] [:error] [pid 9263:tid 9277] [client 158.158.35.197:60952] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/link.php"] [unique_id "aeFUHRP68VyHNvj1e57tiAAAAMw"]
[Fri Apr 17 05:26:54.412499 2026] [:error] [pid 51878:tid 51886] [client 158.158.35.197:60796] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFUHknQhUtMbw9EsgZa9AAAAQY"]
[Fri Apr 17 05:26:55.449402 2026] [:error] [pid 9151:tid 9173] [client 158.158.35.197:32271] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFUH8hTVuRPkua22vSVEwAAAAw"]
[Fri Apr 17 05:26:56.441862 2026] [:error] [pid 9263:tid 9286] [client 158.158.35.197:5257] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFUIBP68VyHNvj1e57tkAAAANU"]
[Fri Apr 17 05:26:58.883679 2026] [:error] [pid 9263:tid 9289] [client 158.158.35.197:60792] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeFUIhP68VyHNvj1e57tlQAAANg"]
[Fri Apr 17 05:27:00.518792 2026] [:error] [pid 9263:tid 9286] [client 158.158.35.197:60771] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeFUJBP68VyHNvj1e57togAAANU"]
[Fri Apr 17 05:27:02.386287 2026] [:error] [pid 9263:tid 9276] [client 158.158.35.197:32205] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeFUJhP68VyHNvj1e57tswAAAMs"]
[Fri Apr 17 05:27:03.973545 2026] [:error] [pid 9152:tid 9209] [client 158.158.35.197:32290] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeFUJ5JYca8I3TNCwIcHqwAAAFM"]
[Fri Apr 17 05:27:07.637694 2026] [:error] [pid 51878:tid 51904] [client 158.158.35.197:60797] [client 158.158.35.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeFUK0nQhUtMbw9EsgZbIAAAARg"]
[Fri Apr 17 05:27:14.192523 2026] [:error] [pid 51878:tid 51885] [client 158.158.35.197:5639] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aeFUMknQhUtMbw9EsgZbRgAAAQU"]
[Fri Apr 17 05:27:14.917801 2026] [:error] [pid 9263:tid 9278] [client 158.158.35.197:5300] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aeFUMhP68VyHNvj1e57uBgAAAM0"]
[Fri Apr 17 05:27:16.074892 2026] [:error] [pid 9153:tid 9221] [client 158.158.35.197:6046] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aeFUNOMHGxkTZX3c45f1WwAAAIM"]
[Fri Apr 17 05:27:16.796355 2026] [:error] [pid 9153:tid 9223] [client 158.158.35.197:60796] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aeFUNOMHGxkTZX3c45f1YQAAAIU"]
[Fri Apr 17 05:27:17.747400 2026] [:error] [pid 51878:tid 51885] [client 158.158.35.197:60957] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aeFUNUnQhUtMbw9EsgZbUwAAAQU"]
[Fri Apr 17 05:27:18.445446 2026] [:error] [pid 51878:tid 51883] [client 158.158.35.197:32318] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aeFUNknQhUtMbw9EsgZbVwAAAQM"]
[Fri Apr 17 05:27:19.577201 2026] [:error] [pid 9152:tid 9210] [client 158.158.35.197:32194] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aeFUN5JYca8I3TNCwIcHxgAAAFQ"]
[Fri Apr 17 05:27:20.263897 2026] [:error] [pid 9152:tid 9192] [client 158.158.35.197:5261] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aeFUOJJYca8I3TNCwIcHzAAAAEI"]
[Fri Apr 17 05:27:20.831317 2026] [:error] [pid 9153:tid 9231] [client 158.158.35.197:60770] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeFUOOMHGxkTZX3c45f1bwAAAI0"]
[Fri Apr 17 05:27:21.723442 2026] [:error] [pid 9263:tid 9276] [client 158.158.35.197:5275] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeFUORP68VyHNvj1e57uMQAAAMs"]
[Fri Apr 17 05:27:22.832387 2026] [:error] [pid 51878:tid 51892] [client 158.158.35.197:60959] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeFUOknQhUtMbw9EsgZbaQAAAQw"]
[Fri Apr 17 05:27:24.432492 2026] [:error] [pid 9151:tid 9175] [client 158.158.35.197:32288] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeFUPMhTVuRPkua22vSVXQAAAA4"]
[Fri Apr 17 05:27:25.360812 2026] [:error] [pid 51878:tid 51885] [client 158.158.35.197:32249] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "aeFUPUnQhUtMbw9EsgZbfAAAAQU"]
[Fri Apr 17 05:27:26.708805 2026] [:error] [pid 9153:tid 9225] [client 158.158.35.197:32286] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "aeFUPuMHGxkTZX3c45f1eQAAAIc"]
[Fri Apr 17 05:27:28.073079 2026] [:error] [pid 9151:tid 9170] [client 158.158.35.197:60753] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "aeFUQMhTVuRPkua22vSVcQAAAAk"]
[Fri Apr 17 05:27:29.348991 2026] [:error] [pid 9263:tid 9267] [client 158.158.35.197:32222] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-class.php"] [unique_id "aeFUQRP68VyHNvj1e57uWQAAAMI"]
[Fri Apr 17 05:27:30.505919 2026] [:error] [pid 9263:tid 9272] [client 158.158.35.197:5295] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aeFUQhP68VyHNvj1e57uYQAAAMc"]
[Fri Apr 17 05:27:31.526689 2026] [:error] [pid 9152:tid 9211] [client 158.158.35.197:60757] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aeFUQ5JYca8I3TNCwIcH7QAAAFU"]
[Fri Apr 17 05:27:32.704927 2026] [:error] [pid 9263:tid 9267] [client 158.158.35.197:32301] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aeFURBP68VyHNvj1e57uawAAAMI"]
[Fri Apr 17 05:27:33.843959 2026] [:error] [pid 9263:tid 9278] [client 158.158.35.197:60798] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aeFURRP68VyHNvj1e57ubwAAAM0"]
[Fri Apr 17 05:27:34.916501 2026] [:error] [pid 9263:tid 9288] [client 158.158.35.197:5284] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/d.php"] [unique_id "aeFURhP68VyHNvj1e57ucwAAANc"]
[Fri Apr 17 05:27:35.531157 2026] [:error] [pid 51878:tid 51894] [client 158.158.35.197:6038] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/d.php"] [unique_id "aeFUR0nQhUtMbw9EsgZbsgAAAQ4"]
[Fri Apr 17 05:27:36.367300 2026] [:error] [pid 9263:tid 9267] [client 158.158.35.197:60940] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/d.php"] [unique_id "aeFUSBP68VyHNvj1e57ueQAAAMI"]
[Fri Apr 17 05:27:37.042266 2026] [:error] [pid 9151:tid 9183] [client 158.158.35.197:5664] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/d.php"] [unique_id "aeFUSchTVuRPkua22vSVgQAAABY"]
[Fri Apr 17 05:27:37.905581 2026] [:error] [pid 9263:tid 9288] [client 158.158.35.197:32253] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeFUSRP68VyHNvj1e57ugwAAANc"]
[Fri Apr 17 05:27:38.692147 2026] [:error] [pid 9263:tid 9277] [client 158.158.35.197:60963] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeFUShP68VyHNvj1e57uigAAAMw"]
[Fri Apr 17 05:27:39.482577 2026] [:error] [pid 51878:tid 51890] [client 158.158.35.197:32269] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeFUS0nQhUtMbw9EsgZbvwAAAQo"]
[Fri Apr 17 05:27:40.425609 2026] [:error] [pid 9263:tid 9281] [client 158.158.35.197:32229] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeFUTBP68VyHNvj1e57ulgAAANA"]
[Fri Apr 17 05:27:41.639391 2026] [:error] [pid 51878:tid 51896] [client 158.158.35.197:32246] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFUTUnQhUtMbw9EsgZbxAAAARA"]
[Fri Apr 17 05:27:42.373689 2026] [:error] [pid 51878:tid 51884] [client 158.158.35.197:5270] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFUTknQhUtMbw9EsgZbyAAAAQQ"]
[Fri Apr 17 05:27:43.181335 2026] [:error] [pid 51878:tid 51890] [client 158.158.35.197:60942] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFUT0nQhUtMbw9EsgZbzAAAAQo"]
[Fri Apr 17 05:27:44.094057 2026] [:error] [pid 9263:tid 9272] [client 158.158.35.197:32236] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeFUUBP68VyHNvj1e57uoQAAAMc"]
[Fri Apr 17 05:27:45.173546 2026] [:error] [pid 51878:tid 51880] [client 158.158.35.197:5291] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/curl.php"] [unique_id "aeFUUUnQhUtMbw9EsgZb1wAAAQA"]
[Fri Apr 17 05:27:45.991490 2026] [:error] [pid 9263:tid 9282] [client 158.158.35.197:32285] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/curl.php"] [unique_id "aeFUURP68VyHNvj1e57urAAAANE"]
[Fri Apr 17 05:27:46.703851 2026] [:error] [pid 51878:tid 51903] [client 158.158.35.197:5640] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/curl.php"] [unique_id "aeFUUknQhUtMbw9EsgZb2gAAARc"]
[Fri Apr 17 05:27:47.220916 2026] [:error] [pid 51878:tid 51897] [client 158.158.35.197:60799] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/curl.php"] [unique_id "aeFUU0nQhUtMbw9EsgZb3QAAARE"]
[Fri Apr 17 05:27:48.096278 2026] [:error] [pid 9153:tid 9232] [client 158.158.35.197:5253] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sallu.php"] [unique_id "aeFUVOMHGxkTZX3c45f1lwAAAI4"]
[Fri Apr 17 05:27:48.903413 2026] [:error] [pid 9152:tid 9198] [client 158.158.35.197:60747] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sallu.php"] [unique_id "aeFUVJJYca8I3TNCwIcIEwAAAEg"]
[Fri Apr 17 05:27:50.225290 2026] [:error] [pid 51878:tid 51901] [client 158.158.35.197:60972] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sallu.php"] [unique_id "aeFUVknQhUtMbw9EsgZb5AAAARU"]
[Fri Apr 17 05:27:51.244416 2026] [:error] [pid 51878:tid 51903] [client 158.158.35.197:60750] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sallu.php"] [unique_id "aeFUV0nQhUtMbw9EsgZb6QAAARc"]
[Fri Apr 17 05:27:51.951411 2026] [:error] [pid 51878:tid 51891] [client 158.158.35.197:32221] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeFUV0nQhUtMbw9EsgZb6wAAAQs"]
[Fri Apr 17 05:27:52.539009 2026] [:error] [pid 51878:tid 51893] [client 158.158.35.197:32196] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeFUWEnQhUtMbw9EsgZb7QAAAQ0"]
[Fri Apr 17 05:27:53.331471 2026] [:error] [pid 51878:tid 51904] [client 158.158.35.197:6037] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeFUWUnQhUtMbw9EsgZb8QAAARg"]
[Fri Apr 17 05:27:54.549401 2026] [:error] [pid 9263:tid 9278] [client 158.158.35.197:32263] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeFUWhP68VyHNvj1e57u0wAAAM0"]
[Fri Apr 17 05:27:55.237982 2026] [:error] [pid 51878:tid 51882] [client 158.158.35.197:32234] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeFUW0nQhUtMbw9EsgZb9gAAAQI"]
[Fri Apr 17 05:27:56.126579 2026] [:error] [pid 51878:tid 51883] [client 158.158.35.197:60784] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeFUXEnQhUtMbw9EsgZb_QAAAQM"]
[Fri Apr 17 05:27:57.358454 2026] [:error] [pid 51878:tid 51899] [client 158.158.35.197:60744] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeFUXUnQhUtMbw9EsgZcAwAAARM"]
[Fri Apr 17 05:27:58.049304 2026] [:error] [pid 51878:tid 51881] [client 158.158.35.197:5676] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeFUXknQhUtMbw9EsgZcCAAAAQE"]
[Fri Apr 17 05:27:58.756882 2026] [:error] [pid 9263:tid 9285] [client 158.158.35.197:32241] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeFUXhP68VyHNvj1e57u3AAAANQ"]
[Fri Apr 17 05:28:00.316153 2026] [:error] [pid 9151:tid 9168] [client 158.158.35.197:5658] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeFUYMhTVuRPkua22vSVpAAAAAc"]
[Fri Apr 17 05:28:01.658329 2026] [:error] [pid 9153:tid 9230] [client 158.158.35.197:60974] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeFUYeMHGxkTZX3c45f1rQAAAIw"]
[Fri Apr 17 05:28:02.598069 2026] [:error] [pid 51878:tid 51897] [client 158.158.35.197:32213] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeFUYknQhUtMbw9EsgZcJQAAARE"]
[Fri Apr 17 05:28:03.262642 2026] [:error] [pid 9263:tid 9268] [client 158.158.35.197:5675] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeFUYxP68VyHNvj1e57u4QAAAMM"]
[Fri Apr 17 05:28:04.389033 2026] [:error] [pid 9153:tid 9220] [client 158.158.35.197:60988] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeFUZOMHGxkTZX3c45f1sgAAAII"]
[Fri Apr 17 05:28:05.088314 2026] [:error] [pid 9263:tid 9270] [client 158.158.35.197:32216] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeFUZRP68VyHNvj1e57u8QAAAMU"]
[Fri Apr 17 05:28:06.375813 2026] [:error] [pid 9152:tid 9212] [client 158.158.35.197:5889] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeFUZpJYca8I3TNCwIcILwAAAFY"]
[Fri Apr 17 05:28:07.991592 2026] [:error] [pid 9263:tid 9287] [client 158.158.35.197:32235] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeFUZxP68VyHNvj1e57vCgAAANY"]
[Fri Apr 17 05:28:09.734347 2026] [:error] [pid 9263:tid 9282] [client 158.158.35.197:60761] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeFUaRP68VyHNvj1e57vGwAAANE"]
[Fri Apr 17 05:28:10.668503 2026] [:error] [pid 9263:tid 9278] [client 158.158.35.197:32258] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeFUahP68VyHNvj1e57vIQAAAM0"]
[Fri Apr 17 05:28:12.481592 2026] [:error] [pid 9263:tid 9274] [client 158.158.35.197:60982] [client 158.158.35.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeFUbBP68VyHNvj1e57vJQAAAMk"]
[Fri Apr 17 07:32:52.937644 2026] [:error] [pid 51878:tid 51880] [client 43.156.204.134:35312] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeFxpEnQhUtMbw9EsgbPgwAAAQA"]
[Fri Apr 17 11:49:13.472870 2026] [:error] [pid 25010:tid 25031] [client 182.44.9.147:49870] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeGtuY-7kkf42RarqQ0wWQAAAVI"]
[Fri Apr 17 20:15:20.276983 2026] [:error] [pid 51878:tid 51881] [client 43.130.74.193:48290] [client 43.130.74.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeIkWEnQhUtMbw9EsgZ7OAAAAQE"]
[Fri Apr 17 23:57:07.793064 2026] [:error] [pid 9152:tid 9209] [client 43.157.82.252:55882] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeJYU5JYca8I3TNCwIeQvwAAAFM"]
[Sat Apr 18 00:32:43.531344 2026] [:error] [pid 59044:tid 59102] [client 192.144.148.122:49312] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeJgqwFamkFyEtD_SMGvGgAAAIE"]
[Sat Apr 18 00:33:35.294353 2026] [:error] [pid 59042:tid 59047] [client 192.227.231.190:59676] [client 192.227.231.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeJg356p5oql0UklEBIyPQAAAAA"], referer: https://www.bing.com/
[Sat Apr 18 04:25:12.919594 2026] [:error] [pid 9865:tid 9961] [client 49.51.183.75:52810] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeKXKKzb5knECIY-C-h5YwAAAJg"]
[Sat Apr 18 04:40:41.900822 2026] [:error] [pid 9865:tid 9952] [client 45.86.202.80:37561] [client 45.86.202.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeKayazb5knECIY-C-iCyAAAAI8"]
[Sat Apr 18 04:40:44.268041 2026] [:error] [pid 9863:tid 9895] [client 45.86.202.82:62711] [client 45.86.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeKazDjjiypiFrTucbL16gAAABY"]
[Sat Apr 18 04:40:47.328825 2026] [:error] [pid 9863:tid 9873] [client 45.86.202.72:35143] [client 45.86.202.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeKazzjjiypiFrTucbL2AAAAAAA"]
[Sat Apr 18 04:40:49.541371 2026] [:error] [pid 9865:tid 9939] [client 45.86.202.88:55675] [client 45.86.202.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeKa0azb5knECIY-C-iC1gAAAII"]
[Sat Apr 18 04:40:53.024008 2026] [:error] [pid 9970:tid 9987] [client 45.86.202.65:45437] [client 45.86.202.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeKa1SYdRLRhVmaIMx2TGQAAAM0"]
[Sat Apr 18 04:40:54.779571 2026] [:error] [pid 9864:tid 9909] [client 45.86.202.83:23091] [client 45.86.202.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeKa1oCFeowknfXHM7kY2QAAAEQ"]
[Sat Apr 18 04:40:57.048336 2026] [:error] [pid 9865:tid 9957] [client 45.86.202.82:40127] [client 45.86.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeKa2azb5knECIY-C-iC6gAAAJQ"]
[Sat Apr 18 04:40:58.202017 2026] [:error] [pid 9970:tid 9983] [client 45.86.202.71:53733] [client 45.86.202.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeKa2iYdRLRhVmaIMx2TIAAAAMk"]
[Sat Apr 18 04:40:59.397062 2026] [:error] [pid 9970:tid 9987] [client 45.86.202.97:60821] [client 45.86.202.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeKa2yYdRLRhVmaIMx2TIwAAAM0"]
[Sat Apr 18 04:41:01.097863 2026] [:error] [pid 9970:tid 9993] [client 45.86.202.95:27491] [client 45.86.202.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeKa3SYdRLRhVmaIMx2TJwAAANM"]
[Sat Apr 18 04:41:03.690846 2026] [:error] [pid 9970:tid 9991] [client 45.86.202.82:20129] [client 45.86.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeKa3yYdRLRhVmaIMx2TNwAAANE"]
[Sat Apr 18 04:41:05.748592 2026] [:error] [pid 9970:tid 9974] [client 45.86.202.55:64347] [client 45.86.202.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aeKa4SYdRLRhVmaIMx2TQQAAAMA"]
[Sat Apr 18 04:41:54.184073 2026] [autoindex:error] [pid 9864:tid 9922] [client 45.86.202.92:38155] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 04:46:51.597408 2026] [:error] [pid 9864:tid 9906] [client 132.196.3.209:27619] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ubbgmq.php"] [unique_id "aeKcO4CFeowknfXHM7kb1wAAAEE"]
[Sat Apr 18 04:46:51.825006 2026] [:error] [pid 9970:tid 9997] [client 132.196.3.209:27621] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ubbgmq.php"] [unique_id "aeKcOyYdRLRhVmaIMx2YwQAAANc"]
[Sat Apr 18 04:46:52.206614 2026] [:error] [pid 9970:tid 9979] [client 132.196.3.209:27647] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/oqjlcq.php"] [unique_id "aeKcPCYdRLRhVmaIMx2YwgAAAMU"]
[Sat Apr 18 04:46:54.202985 2026] [:error] [pid 9970:tid 9989] [client 132.196.3.209:27608] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/oqjlcq.php"] [unique_id "aeKcPiYdRLRhVmaIMx2YzgAAAM8"]
[Sat Apr 18 04:46:55.228187 2026] [:error] [pid 9970:tid 9980] [client 132.196.3.209:27523] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aeKcPyYdRLRhVmaIMx2Y1AAAAMY"]
[Sat Apr 18 04:46:56.731711 2026] [:error] [pid 9865:tid 9939] [client 132.196.3.209:27633] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "aeKcQKzb5knECIY-C-iGJAAAAII"]
[Sat Apr 18 04:46:56.803009 2026] [:error] [pid 9970:tid 9978] [client 132.196.3.209:27635] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aeKcQCYdRLRhVmaIMx2Y3AAAAMQ"]
[Sat Apr 18 04:46:57.270733 2026] [:error] [pid 9865:tid 9957] [client 132.196.3.209:27600] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "aeKcQazb5knECIY-C-iGJQAAAJQ"]
[Sat Apr 18 04:46:57.703401 2026] [:error] [pid 9865:tid 9943] [client 132.196.3.209:27606] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aeKcQazb5knECIY-C-iGJgAAAIY"]
[Sat Apr 18 04:46:58.135164 2026] [:error] [pid 9970:tid 9987] [client 132.196.3.209:27532] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "aeKcQiYdRLRhVmaIMx2Y3wAAAM0"]
[Sat Apr 18 04:46:58.555369 2026] [:error] [pid 9865:tid 9950] [client 132.196.3.209:27594] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aeKcQqzb5knECIY-C-iGKAAAAI0"]
[Sat Apr 18 04:46:59.188979 2026] [:error] [pid 9970:tid 9988] [client 132.196.3.209:27636] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-settings.php"] [unique_id "aeKcQyYdRLRhVmaIMx2Y5AAAAM4"]
[Sat Apr 18 04:46:59.260608 2026] [:error] [pid 9970:tid 9991] [client 132.196.3.209:27528] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aeKcQyYdRLRhVmaIMx2Y5gAAANE"]
[Sat Apr 18 04:46:59.944106 2026] [:error] [pid 9970:tid 9975] [client 132.196.3.209:27614] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "aeKcQyYdRLRhVmaIMx2Y6QAAAME"]
[Sat Apr 18 04:46:59.969429 2026] [:error] [pid 9970:tid 9985] [client 132.196.3.209:27607] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aeKcQyYdRLRhVmaIMx2Y6gAAAMs"]
[Sat Apr 18 04:47:00.590886 2026] [:error] [pid 9863:tid 9894] [client 132.196.3.209:27542] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aeKcRDjjiypiFrTucbL4JQAAABU"]
[Sat Apr 18 04:47:00.614135 2026] [:error] [pid 9970:tid 9996] [client 132.196.3.209:27522] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aeKcRCYdRLRhVmaIMx2Y7QAAANY"]
[Sat Apr 18 04:47:01.405981 2026] [:error] [pid 9865:tid 9951] [client 132.196.3.209:27530] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aeKcRazb5knECIY-C-iGLgAAAI4"]
[Sat Apr 18 04:47:01.703016 2026] [:error] [pid 9865:tid 9961] [client 132.196.3.209:27617] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aeKcRazb5knECIY-C-iGMAAAAJg"]
[Sat Apr 18 04:47:01.902377 2026] [:error] [pid 9865:tid 9954] [client 132.196.3.209:27638] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aeKcRazb5knECIY-C-iGMQAAAJE"]
[Sat Apr 18 04:47:02.545740 2026] [:error] [pid 9865:tid 9947] [client 132.196.3.209:27626] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/nav-menus.php"] [unique_id "aeKcRqzb5knECIY-C-iGNgAAAIo"]
[Sat Apr 18 04:47:02.738179 2026] [:error] [pid 9865:tid 9939] [client 132.196.3.209:27520] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aeKcRqzb5knECIY-C-iGOAAAAII"]
[Sat Apr 18 04:47:03.024194 2026] [:error] [pid 9865:tid 9957] [client 132.196.3.209:27637] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/nav-menus.php"] [unique_id "aeKcR6zb5knECIY-C-iGOQAAAJQ"]
[Sat Apr 18 04:47:03.673754 2026] [:error] [pid 9970:tid 9990] [client 132.196.3.209:27567] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "aeKcRyYdRLRhVmaIMx2Y7gAAANA"]
[Sat Apr 18 04:47:03.731246 2026] [:error] [pid 9970:tid 9988] [client 132.196.3.209:27531] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/nav-menus.php"] [unique_id "aeKcRyYdRLRhVmaIMx2Y8AAAAM4"]
[Sat Apr 18 04:47:04.407688 2026] [:error] [pid 9970:tid 9992] [client 132.196.3.209:27597] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/nav-menus.php"] [unique_id "aeKcSCYdRLRhVmaIMx2Y8wAAANI"]
[Sat Apr 18 04:47:04.855852 2026] [:error] [pid 9970:tid 9986] [client 132.196.3.209:27595] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeKcSCYdRLRhVmaIMx2Y9AAAAMw"]
[Sat Apr 18 04:47:04.930871 2026] [:error] [pid 9970:tid 9985] [client 132.196.3.209:27539] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeKcSCYdRLRhVmaIMx2Y9gAAAMs"]
[Sat Apr 18 04:47:05.395886 2026] [:error] [pid 9864:tid 9913] [client 132.196.3.209:27632] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeKcSYCFeowknfXHM7kb2gAAAEc"]
[Sat Apr 18 04:47:05.716348 2026] [:error] [pid 9865:tid 9951] [client 132.196.3.209:27550] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeKcSazb5knECIY-C-iGPwAAAI4"]
[Sat Apr 18 04:47:05.994761 2026] [:error] [pid 9863:tid 9886] [client 132.196.3.209:27630] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeKcSTjjiypiFrTucbL4KAAAAA0"]
[Sat Apr 18 04:47:06.749374 2026] [:error] [pid 9863:tid 9880] [client 132.196.3.209:27540] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeKcSjjjiypiFrTucbL4KQAAAAc"]
[Sat Apr 18 04:47:07.515021 2026] [:error] [pid 9865:tid 9956] [client 132.196.3.209:27527] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeKcS6zb5knECIY-C-iGQQAAAJM"]
[Sat Apr 18 04:47:08.040653 2026] [:error] [pid 9864:tid 9924] [client 132.196.3.209:27524] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeKcTICFeowknfXHM7kb3wAAAFI"]
[Sat Apr 18 04:47:08.264713 2026] [:error] [pid 9864:tid 9905] [client 132.196.3.209:27605] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aeKcTICFeowknfXHM7kb4AAAAEA"]
[Sat Apr 18 04:47:08.823120 2026] [:error] [pid 9970:tid 9981] [client 132.196.3.209:27541] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aeKcTCYdRLRhVmaIMx2Y_gAAAMc"]
[Sat Apr 18 04:47:09.489286 2026] [:error] [pid 9970:tid 9986] [client 132.196.3.209:27628] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aeKcTSYdRLRhVmaIMx2ZAwAAAMw"]
[Sat Apr 18 04:47:10.180488 2026] [:error] [pid 9970:tid 9995] [client 132.196.3.209:27640] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aeKcTiYdRLRhVmaIMx2ZBQAAANU"]
[Sat Apr 18 04:47:11.062089 2026] [:error] [pid 9970:tid 9989] [client 132.196.3.209:27588] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aeKcTyYdRLRhVmaIMx2ZCQAAAM8"]
[Sat Apr 18 04:47:11.807896 2026] [:error] [pid 9863:tid 9883] [client 132.196.3.209:27645] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aeKcTzjjiypiFrTucbL4LAAAAAo"]
[Sat Apr 18 04:47:12.399839 2026] [:error] [pid 9970:tid 9991] [client 132.196.3.209:27599] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aeKcUCYdRLRhVmaIMx2ZDAAAANE"]
[Sat Apr 18 04:47:13.040491 2026] [:error] [pid 9863:tid 9884] [client 132.196.3.209:27602] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aeKcUTjjiypiFrTucbL4LQAAAAs"]
[Sat Apr 18 04:47:13.197691 2026] [:error] [pid 9864:tid 9907] [client 132.196.3.209:27604] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aeKcUYCFeowknfXHM7kb4gAAAEI"]
[Sat Apr 18 04:47:13.600143 2026] [:error] [pid 9863:tid 9879] [client 132.196.3.209:27623] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/nav-menus.php"] [unique_id "aeKcUTjjiypiFrTucbL4LgAAAAY"]
[Sat Apr 18 04:47:14.068977 2026] [:error] [pid 9865:tid 9942] [client 132.196.3.209:27586] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/nav-menus.php"] [unique_id "aeKcUqzb5knECIY-C-iGSQAAAIU"]
[Sat Apr 18 04:47:14.636138 2026] [:error] [pid 9970:tid 9978] [client 132.196.3.209:27620] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/nav-menus.php"] [unique_id "aeKcUiYdRLRhVmaIMx2ZEAAAAMQ"]
[Sat Apr 18 04:47:15.244883 2026] [:error] [pid 9970:tid 9987] [client 132.196.3.209:27624] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/nav-menus.php"] [unique_id "aeKcUyYdRLRhVmaIMx2ZEgAAAM0"]
[Sat Apr 18 04:47:15.755366 2026] [:error] [pid 9863:tid 9888] [client 132.196.3.209:27587] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeKcUzjjiypiFrTucbL4MwAAAA8"]
[Sat Apr 18 04:47:16.228220 2026] [:error] [pid 9863:tid 9881] [client 132.196.3.209:27471] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeKcVDjjiypiFrTucbL4NgAAAAg"]
[Sat Apr 18 04:47:16.881257 2026] [:error] [pid 9970:tid 9997] [client 132.196.3.209:27615] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeKcVCYdRLRhVmaIMx2ZFAAAANc"]
[Sat Apr 18 04:47:17.418687 2026] [:error] [pid 9864:tid 9906] [client 132.196.3.209:27627] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeKcVYCFeowknfXHM7kb5QAAAEE"]
[Sat Apr 18 04:47:18.129964 2026] [:error] [pid 9863:tid 9886] [client 132.196.3.209:27629] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aeKcVjjjiypiFrTucbL4OgAAAA0"]
[Sat Apr 18 04:47:18.691429 2026] [:error] [pid 9863:tid 9880] [client 132.196.3.209:27644] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aeKcVjjjiypiFrTucbL4OwAAAAc"]
[Sat Apr 18 04:47:19.456567 2026] [:error] [pid 9863:tid 9891] [client 132.196.3.209:27554] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aeKcVzjjiypiFrTucbL4PQAAABI"]
[Sat Apr 18 04:47:20.310118 2026] [:error] [pid 9865:tid 9961] [client 132.196.3.209:27589] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "aeKcWKzb5knECIY-C-iGUgAAAJg"]
[Sat Apr 18 04:47:20.807417 2026] [:error] [pid 9863:tid 9890] [client 132.196.3.209:27535] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "aeKcWDjjiypiFrTucbL4QAAAABE"]
[Sat Apr 18 04:47:21.473425 2026] [:error] [pid 9863:tid 9882] [client 132.196.3.209:27533] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "aeKcWTjjiypiFrTucbL4RAAAAAk"]
[Sat Apr 18 04:47:22.501707 2026] [:error] [pid 9863:tid 9889] [client 132.196.3.209:27641] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "aeKcWjjjiypiFrTucbL4SAAAABA"]
[Sat Apr 18 04:47:23.475624 2026] [:error] [pid 9865:tid 9939] [client 132.196.3.209:27483] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "aeKcW6zb5knECIY-C-iGWAAAAII"]
[Sat Apr 18 04:47:24.928710 2026] [:error] [pid 9970:tid 9982] [client 132.196.3.209:27529] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aeKcXCYdRLRhVmaIMx2ZGgAAAMg"]
[Sat Apr 18 04:47:25.826686 2026] [:error] [pid 9865:tid 9939] [client 132.196.3.209:27553] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aeKcXazb5knECIY-C-iGYwAAAII"]
[Sat Apr 18 04:47:27.013684 2026] [:error] [pid 9970:tid 9981] [client 132.196.3.209:27577] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aeKcXyYdRLRhVmaIMx2ZIgAAAMc"]
[Sat Apr 18 04:47:29.935204 2026] [:error] [pid 9970:tid 9996] [client 132.196.3.209:27581] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test1.php"] [unique_id "aeKcYSYdRLRhVmaIMx2ZKwAAANY"]
[Sat Apr 18 04:47:31.559606 2026] [:error] [pid 9865:tid 9961] [client 132.196.3.209:27583] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeKcY6zb5knECIY-C-iGbAAAAJg"]
[Sat Apr 18 04:47:32.963522 2026] [:error] [pid 9865:tid 9958] [client 132.196.3.209:27611] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeKcZKzb5knECIY-C-iGcQAAAJU"]
[Sat Apr 18 04:47:33.790849 2026] [:error] [pid 9865:tid 9938] [client 132.196.3.209:27646] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeKcZazb5knECIY-C-iGcgAAAIE"]
[Sat Apr 18 04:47:34.407650 2026] [:error] [pid 9970:tid 9977] [client 132.196.3.209:27570] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeKcZiYdRLRhVmaIMx2ZMwAAAMM"]
[Sat Apr 18 04:47:35.310893 2026] [:error] [pid 9970:tid 9980] [client 132.196.3.209:27233] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aeKcZyYdRLRhVmaIMx2ZNwAAAMY"]
[Sat Apr 18 04:47:36.051984 2026] [:error] [pid 9970:tid 9978] [client 132.196.3.209:27465] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aeKcaCYdRLRhVmaIMx2ZOwAAAMQ"]
[Sat Apr 18 04:47:36.910458 2026] [:error] [pid 9970:tid 9979] [client 132.196.3.209:27472] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aeKcaCYdRLRhVmaIMx2ZQAAAAMU"]
[Sat Apr 18 04:47:37.814056 2026] [:error] [pid 9970:tid 9994] [client 132.196.3.209:27537] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "aeKcaSYdRLRhVmaIMx2ZRQAAANQ"]
[Sat Apr 18 04:47:39.246996 2026] [:error] [pid 9863:tid 9879] [client 132.196.3.209:27536] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aeKcazjjiypiFrTucbL4YgAAAAY"]
[Sat Apr 18 04:47:41.267834 2026] [:error] [pid 9864:tid 9918] [client 132.196.3.209:27476] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aeKcbYCFeowknfXHM7kcDgAAAEw"]
[Sat Apr 18 04:47:42.845573 2026] [:error] [pid 9863:tid 9881] [client 132.196.3.209:27561] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aeKcbjjjiypiFrTucbL4aAAAAAg"]
[Sat Apr 18 04:47:43.939412 2026] [:error] [pid 9970:tid 9993] [client 132.196.3.209:27584] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "aeKcbyYdRLRhVmaIMx2ZUAAAANM"]
[Sat Apr 18 04:47:46.310170 2026] [:error] [pid 9863:tid 9891] [client 132.196.3.209:27547] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aeKccjjjiypiFrTucbL4bQAAABI"]
[Sat Apr 18 04:47:47.993554 2026] [:error] [pid 9863:tid 9882] [client 132.196.3.209:27643] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeKcczjjiypiFrTucbL4cQAAAAk"]
[Sat Apr 18 04:47:49.408397 2026] [:error] [pid 9970:tid 9990] [client 132.196.3.209:27201] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeKcdSYdRLRhVmaIMx2ZUwAAANA"]
[Sat Apr 18 04:47:50.517014 2026] [:error] [pid 9970:tid 9977] [client 132.196.3.209:27568] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeKcdiYdRLRhVmaIMx2ZVwAAAMM"]
[Sat Apr 18 04:47:51.729030 2026] [:error] [pid 9970:tid 9984] [client 132.196.3.209:27576] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeKcdyYdRLRhVmaIMx2ZWAAAAMo"]
[Sat Apr 18 04:47:52.914007 2026] [:error] [pid 9865:tid 9960] [client 132.196.3.209:27562] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeKceKzb5knECIY-C-iGjwAAAJc"]
[Sat Apr 18 04:47:54.320922 2026] [:error] [pid 9865:tid 9949] [client 132.196.3.209:27498] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeKceqzb5knECIY-C-iG4QAAAIw"]
[Sat Apr 18 04:47:55.572945 2026] [:error] [pid 9970:tid 9983] [client 132.196.3.209:27485] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeKceyYdRLRhVmaIMx2ZWgAAAMk"]
[Sat Apr 18 04:48:04.673515 2026] [:error] [pid 9970:tid 9981] [client 132.196.3.209:27634] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aeKchCYdRLRhVmaIMx2ZeAAAAMc"]
[Sat Apr 18 04:48:06.199716 2026] [:error] [pid 9970:tid 9998] [client 132.196.3.209:27591] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aeKchiYdRLRhVmaIMx2ZfgAAANg"]
[Sat Apr 18 04:48:08.144000 2026] [:error] [pid 9970:tid 9995] [client 132.196.3.209:27559] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aeKciCYdRLRhVmaIMx2ZhgAAANU"]
[Sat Apr 18 04:48:09.326430 2026] [:error] [pid 9863:tid 9895] [client 132.196.3.209:27546] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "aeKciTjjiypiFrTucbL4ggAAABY"]
[Sat Apr 18 04:48:09.630795 2026] [:error] [pid 9865:tid 9958] [client 132.196.3.209:27491] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aeKciazb5knECIY-C-iHCwAAAJU"]
[Sat Apr 18 04:48:11.371911 2026] [:error] [pid 9865:tid 9953] [client 132.196.3.209:27592] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeKci6zb5knECIY-C-iHEAAAAJA"]
[Sat Apr 18 04:48:13.162777 2026] [:error] [pid 9970:tid 9980] [client 132.196.3.209:27521] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeKcjSYdRLRhVmaIMx2ZkwAAAMY"]
[Sat Apr 18 04:48:14.170552 2026] [:error] [pid 9970:tid 9989] [client 132.196.3.209:27538] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeKcjiYdRLRhVmaIMx2ZlwAAAM8"]
[Sat Apr 18 04:48:15.089579 2026] [:error] [pid 9970:tid 9981] [client 132.196.3.209:27590] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeKcjyYdRLRhVmaIMx2ZmgAAAMc"]
[Sat Apr 18 04:48:15.855145 2026] [:error] [pid 9970:tid 9979] [client 132.196.3.209:27222] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKcjyYdRLRhVmaIMx2ZnQAAAMU"]
[Sat Apr 18 04:48:17.042034 2026] [:error] [pid 9970:tid 9983] [client 132.196.3.209:27610] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKckSYdRLRhVmaIMx2ZpQAAAMk"]
[Sat Apr 18 04:48:17.853036 2026] [:error] [pid 9865:tid 9946] [client 132.196.3.209:27225] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKckazb5knECIY-C-iHFgAAAIk"]
[Sat Apr 18 04:48:18.789320 2026] [:error] [pid 9863:tid 9873] [client 132.196.3.209:27209] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKckjjjiypiFrTucbL4iAAAAAA"]
[Sat Apr 18 04:48:19.472908 2026] [:error] [pid 9865:tid 9941] [client 132.196.3.209:27603] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeKck6zb5knECIY-C-iHGgAAAIQ"]
[Sat Apr 18 04:48:20.452142 2026] [:error] [pid 9865:tid 9959] [client 132.196.3.209:27486] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeKclKzb5knECIY-C-iHHwAAAJY"]
[Sat Apr 18 04:48:21.440998 2026] [:error] [pid 9865:tid 9948] [client 132.196.3.209:27613] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aeKclazb5knECIY-C-iHIgAAAIs"]
[Sat Apr 18 04:48:22.206584 2026] [:error] [pid 9865:tid 9954] [client 132.196.3.209:27571] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aeKclqzb5knECIY-C-iHJQAAAJE"]
[Sat Apr 18 04:48:23.147430 2026] [:error] [pid 9970:tid 9977] [client 132.196.3.209:27625] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aeKclyYdRLRhVmaIMx2ZsQAAAMM"]
[Sat Apr 18 04:48:24.256375 2026] [:error] [pid 9864:tid 9926] [client 132.196.3.209:27580] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aeKcmICFeowknfXHM7kcVgAAAFQ"]
[Sat Apr 18 04:48:25.297264 2026] [:error] [pid 9864:tid 9925] [client 132.196.3.209:27543] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aeKcmYCFeowknfXHM7kcWgAAAFM"]
[Sat Apr 18 04:48:26.177902 2026] [:error] [pid 9863:tid 9892] [client 132.196.3.209:27237] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aeKcmjjjiypiFrTucbL4lAAAABM"]
[Sat Apr 18 04:48:28.205921 2026] [:error] [pid 9865:tid 9939] [client 132.196.3.209:27616] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aeKcnKzb5knECIY-C-iHKwAAAII"]
[Sat Apr 18 04:48:29.348200 2026] [:error] [pid 9970:tid 9989] [client 132.196.3.209:27203] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aeKcnSYdRLRhVmaIMx2ZtgAAAM8"]
[Sat Apr 18 04:48:30.187278 2026] [:error] [pid 9863:tid 9886] [client 132.196.3.209:27545] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeKcnjjjiypiFrTucbL4lwAAAA0"]
[Sat Apr 18 04:48:32.357726 2026] [:error] [pid 9863:tid 9890] [client 132.196.3.209:27470] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeKcoDjjiypiFrTucbL4ngAAABE"]
[Sat Apr 18 04:48:33.841163 2026] [:error] [pid 9865:tid 9938] [client 132.196.3.209:27548] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeKcoazb5knECIY-C-iHNQAAAIE"]
[Sat Apr 18 04:48:35.732647 2026] [:error] [pid 9970:tid 9991] [client 132.196.3.209:27458] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeKcoyYdRLRhVmaIMx2ZuQAAANE"]
[Sat Apr 18 04:48:37.430310 2026] [:error] [pid 9970:tid 9980] [client 132.196.3.209:27564] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aeKcpSYdRLRhVmaIMx2ZvwAAAMY"]
[Sat Apr 18 04:48:38.864761 2026] [:error] [pid 9864:tid 9910] [client 132.196.3.209:27582] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aeKcpoCFeowknfXHM7kcaQAAAEU"]
[Sat Apr 18 04:48:40.329831 2026] [:error] [pid 9970:tid 9993] [client 132.196.3.209:27477] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aeKcqCYdRLRhVmaIMx2ZxAAAANM"]
[Sat Apr 18 04:48:41.589282 2026] [:error] [pid 9970:tid 9976] [client 132.196.3.209:27227] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aeKcqSYdRLRhVmaIMx2ZyAAAAMI"]
[Sat Apr 18 04:48:42.478338 2026] [:error] [pid 9865:tid 9948] [client 132.196.3.209:27200] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aeKcqqzb5knECIY-C-iHOQAAAIs"]
[Sat Apr 18 04:48:43.691418 2026] [:error] [pid 9864:tid 9923] [client 132.196.3.209:27499] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aeKcq4CFeowknfXHM7kcbgAAAFE"]
[Sat Apr 18 04:48:44.423702 2026] [:error] [pid 9864:tid 9917] [client 132.196.3.209:27556] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aeKcrICFeowknfXHM7kccQAAAEs"]
[Sat Apr 18 04:48:45.342606 2026] [:error] [pid 9970:tid 9990] [client 132.196.3.209:27466] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aeKcrSYdRLRhVmaIMx2Z0AAAANA"]
[Sat Apr 18 04:48:46.367543 2026] [:error] [pid 9865:tid 9942] [client 132.196.3.209:27642] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aeKcrqzb5knECIY-C-iHQAAAAIU"]
[Sat Apr 18 04:48:46.945126 2026] [:error] [pid 9865:tid 9938] [client 132.196.3.209:27609] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aeKcrqzb5knECIY-C-iHQgAAAIE"]
[Sat Apr 18 04:48:47.690402 2026] [:error] [pid 9865:tid 9956] [client 132.196.3.209:27252] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aeKcr6zb5knECIY-C-iHRwAAAJM"]
[Sat Apr 18 04:48:48.787305 2026] [:error] [pid 9865:tid 9944] [client 132.196.3.209:27558] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aeKcsKzb5knECIY-C-iHTAAAAIc"]
[Sat Apr 18 04:48:49.475788 2026] [:error] [pid 9865:tid 9941] [client 132.196.3.209:27468] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aeKcsazb5knECIY-C-iHUAAAAIQ"]
[Sat Apr 18 04:48:50.067278 2026] [:error] [pid 9865:tid 9959] [client 132.196.3.209:27218] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aeKcsqzb5knECIY-C-iHUwAAAJY"]
[Sat Apr 18 04:48:51.137151 2026] [:error] [pid 9865:tid 9944] [client 132.196.3.209:27526] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aeKcs6zb5knECIY-C-iHVgAAAIc"]
[Sat Apr 18 04:48:51.620495 2026] [:error] [pid 9864:tid 9915] [client 132.196.3.209:27475] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aeKcs4CFeowknfXHM7kcdAAAAEk"]
[Sat Apr 18 04:48:52.583116 2026] [:error] [pid 9865:tid 9941] [client 132.196.3.209:27566] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeKctKzb5knECIY-C-iHXAAAAIQ"]
[Sat Apr 18 04:48:53.262162 2026] [:error] [pid 9863:tid 9876] [client 132.196.3.209:27616] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aeKctTjjiypiFrTucbL4vAAAAAM"]
[Sat Apr 18 04:48:53.664142 2026] [:error] [pid 9970:tid 9982] [client 132.196.3.209:27555] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aeKctSYdRLRhVmaIMx2Z2QAAAMg"]
[Sat Apr 18 04:48:54.335548 2026] [:error] [pid 9970:tid 9998] [client 132.196.3.209:27484] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aeKctiYdRLRhVmaIMx2Z3QAAANg"]
[Sat Apr 18 04:48:55.012460 2026] [:error] [pid 9970:tid 9977] [client 132.196.3.209:27496] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aeKctyYdRLRhVmaIMx2Z4gAAAMM"]
[Sat Apr 18 04:48:55.497008 2026] [:error] [pid 9970:tid 9974] [client 132.196.3.209:27467] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "aeKctyYdRLRhVmaIMx2Z5AAAAMA"]
[Sat Apr 18 04:48:55.995649 2026] [:error] [pid 9863:tid 9877] [client 132.196.3.209:27514] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "aeKctzjjiypiFrTucbL4vgAAAAQ"]
[Sat Apr 18 04:48:56.697465 2026] [:error] [pid 9970:tid 9993] [client 132.196.3.209:27601] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "aeKcuCYdRLRhVmaIMx2Z6gAAANM"]
[Sat Apr 18 04:48:57.271601 2026] [:error] [pid 9865:tid 9961] [client 132.196.3.209:27490] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws49.php"] [unique_id "aeKcuazb5knECIY-C-iHYgAAAJg"]
[Sat Apr 18 04:48:57.813181 2026] [:error] [pid 9970:tid 9975] [client 132.196.3.209:27512] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeKcuSYdRLRhVmaIMx2Z7QAAAME"]
[Sat Apr 18 04:48:58.253850 2026] [:error] [pid 9970:tid 9991] [client 132.196.3.209:27575] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeKcuiYdRLRhVmaIMx2Z8AAAANE"]
[Sat Apr 18 04:48:59.002308 2026] [:error] [pid 9865:tid 9953] [client 132.196.3.209:27579] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeKcu6zb5knECIY-C-iHZQAAAJA"]
[Sat Apr 18 04:48:59.619658 2026] [:error] [pid 9864:tid 9912] [client 132.196.3.209:27519] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeKcu4CFeowknfXHM7kcegAAAEY"]
[Sat Apr 18 04:49:00.216633 2026] [:error] [pid 9865:tid 9958] [client 132.196.3.209:27596] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeKcvKzb5knECIY-C-iHZwAAAJU"]
[Sat Apr 18 04:49:00.839062 2026] [:error] [pid 9863:tid 9882] [client 132.196.3.209:27478] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeKcvDjjiypiFrTucbL4wQAAAAk"]
[Sat Apr 18 04:49:01.377399 2026] [:error] [pid 9864:tid 9907] [client 132.196.3.209:27489] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeKcvYCFeowknfXHM7kcgQAAAEI"]
[Sat Apr 18 04:49:01.974989 2026] [:error] [pid 9970:tid 9988] [client 132.196.3.209:27221] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeKcvSYdRLRhVmaIMx2Z8wAAAM4"]
[Sat Apr 18 04:49:02.964800 2026] [:error] [pid 9970:tid 9975] [client 132.196.3.209:27505] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeKcviYdRLRhVmaIMx2Z-QAAAME"]
[Sat Apr 18 04:49:03.525697 2026] [:error] [pid 9970:tid 9984] [client 132.196.3.209:27456] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeKcvyYdRLRhVmaIMx2Z-wAAAMo"]
[Sat Apr 18 04:49:08.211026 2026] [:error] [pid 9864:tid 9925] [client 132.196.3.209:27479] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aeKcxICFeowknfXHM7kcjAAAAFM"]
[Sat Apr 18 04:49:09.462204 2026] [:error] [pid 9970:tid 9997] [client 132.196.3.209:27511] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeKcxSYdRLRhVmaIMx2aDQAAANc"]
[Sat Apr 18 04:49:09.557631 2026] [:error] [pid 9865:tid 9957] [client 132.196.3.209:27507] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeKcxazb5knECIY-C-iHhwAAAJQ"]
[Sat Apr 18 04:49:10.362409 2026] [:error] [pid 9864:tid 9921] [client 132.196.3.209:27516] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeKcxoCFeowknfXHM7kckQAAAE8"]
[Sat Apr 18 04:49:10.710554 2026] [:error] [pid 9970:tid 9996] [client 132.196.3.209:27525] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeKcxiYdRLRhVmaIMx2aGAAAANY"]
[Sat Apr 18 04:49:10.946934 2026] [:error] [pid 9970:tid 9992] [client 132.196.3.209:27544] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeKcxiYdRLRhVmaIMx2aGwAAANI"]
[Sat Apr 18 04:49:11.669164 2026] [:error] [pid 9970:tid 9988] [client 132.196.3.209:27488] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeKcxyYdRLRhVmaIMx2aIgAAAM4"]
[Sat Apr 18 04:49:11.813306 2026] [:error] [pid 9865:tid 9939] [client 132.196.3.209:27220] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeKcx6zb5knECIY-C-iHiQAAAII"]
[Sat Apr 18 04:49:12.375506 2026] [:error] [pid 9865:tid 9950] [client 132.196.3.209:27214] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeKcyKzb5knECIY-C-iHiwAAAI0"]
[Sat Apr 18 04:49:12.796076 2026] [:error] [pid 9970:tid 9978] [client 132.196.3.209:27495] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeKcyCYdRLRhVmaIMx2aJQAAAMQ"]
[Sat Apr 18 04:49:13.189645 2026] [:error] [pid 9865:tid 9938] [client 132.196.3.209:27481] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeKcyazb5knECIY-C-iHjAAAAIE"]
[Sat Apr 18 04:49:13.820677 2026] [:error] [pid 9970:tid 9984] [client 132.196.3.209:27461] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeKcySYdRLRhVmaIMx2aKAAAAMo"]
[Sat Apr 18 04:49:14.060428 2026] [:error] [pid 9865:tid 9961] [client 132.196.3.209:27618] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKcyqzb5knECIY-C-iHjQAAAJg"]
[Sat Apr 18 04:49:14.506376 2026] [:error] [pid 9970:tid 9987] [client 132.196.3.209:27235] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeKcyiYdRLRhVmaIMx2aKgAAAM0"]
[Sat Apr 18 04:49:14.863829 2026] [:error] [pid 9863:tid 9893] [client 132.196.3.209:27557] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKcyjjjiypiFrTucbL4xAAAABQ"]
[Sat Apr 18 04:49:15.071776 2026] [:error] [pid 9863:tid 9876] [client 132.196.3.209:27464] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "aeKcyzjjiypiFrTucbL4xQAAAAM"]
[Sat Apr 18 04:49:15.706894 2026] [:error] [pid 9970:tid 9974] [client 132.196.3.209:27480] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "aeKcyyYdRLRhVmaIMx2aMAAAAMA"]
[Sat Apr 18 04:49:16.203246 2026] [:error] [pid 9865:tid 9953] [client 132.196.3.209:27631] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKczKzb5knECIY-C-iHkAAAAJA"]
[Sat Apr 18 04:49:16.346402 2026] [:error] [pid 9864:tid 9908] [client 132.196.3.209:27549] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "aeKczICFeowknfXHM7kcmQAAAEM"]
[Sat Apr 18 04:49:17.137701 2026] [:error] [pid 9864:tid 9924] [client 132.196.3.209:27497] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "aeKczYCFeowknfXHM7kcmgAAAFI"]
[Sat Apr 18 04:49:17.250410 2026] [:error] [pid 9864:tid 9910] [client 132.196.3.209:27585] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKczYCFeowknfXHM7kcmwAAAEU"]
[Sat Apr 18 04:49:18.111466 2026] [:error] [pid 9863:tid 9896] [client 132.196.3.209:27460] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "aeKczjjjiypiFrTucbL40wAAABc"]
[Sat Apr 18 04:49:18.317224 2026] [:error] [pid 9863:tid 9878] [client 132.196.3.209:27251] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aeKczjjjiypiFrTucbL41AAAAAU"]
[Sat Apr 18 04:49:18.746187 2026] [:error] [pid 9970:tid 9985] [client 132.196.3.209:27206] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "aeKcziYdRLRhVmaIMx2aPgAAAMs"]
[Sat Apr 18 04:49:19.506020 2026] [:error] [pid 9865:tid 9952] [client 132.196.3.209:27569] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "aeKcz6zb5knECIY-C-iHlwAAAI8"]
[Sat Apr 18 04:49:19.589684 2026] [:error] [pid 9970:tid 9994] [client 132.196.3.209:27502] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aeKczyYdRLRhVmaIMx2aPwAAANQ"]
[Sat Apr 18 04:49:20.390082 2026] [:error] [pid 9865:tid 9949] [client 132.196.3.209:27518] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aeKc0Kzb5knECIY-C-iHmQAAAIw"]
[Sat Apr 18 04:49:20.481941 2026] [:error] [pid 9865:tid 9938] [client 132.196.3.209:27230] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "aeKc0Kzb5knECIY-C-iHmgAAAIE"]
[Sat Apr 18 04:49:21.259517 2026] [:error] [pid 9865:tid 9959] [client 132.196.3.209:27238] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aeKc0azb5knECIY-C-iHngAAAJY"]
[Sat Apr 18 04:49:21.444171 2026] [:error] [pid 9865:tid 9941] [client 132.196.3.209:27474] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an.php"] [unique_id "aeKc0azb5knECIY-C-iHoAAAAIQ"]
[Sat Apr 18 04:49:21.964778 2026] [:error] [pid 9864:tid 9921] [client 132.196.3.209:27419] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aeKc0YCFeowknfXHM7kcnQAAAE8"]
[Sat Apr 18 04:49:22.184804 2026] [:error] [pid 9865:tid 9954] [client 132.196.3.209:27432] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/archive.php"] [unique_id "aeKc0qzb5knECIY-C-iHowAAAJE"]
[Sat Apr 18 04:49:22.721839 2026] [:error] [pid 9865:tid 9939] [client 132.196.3.209:27216] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aeKc0qzb5knECIY-C-iHpgAAAII"]
[Sat Apr 18 04:49:23.108795 2026] [:error] [pid 9864:tid 9909] [client 132.196.3.209:27260] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/archive.php"] [unique_id "aeKc04CFeowknfXHM7kcnwAAAEQ"]
[Sat Apr 18 04:49:23.581374 2026] [:error] [pid 9970:tid 9998] [client 132.196.3.209:27517] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aeKc0yYdRLRhVmaIMx2aRAAAANg"]
[Sat Apr 18 04:49:24.116130 2026] [:error] [pid 9864:tid 9929] [client 132.196.3.209:27245] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/archive.php"] [unique_id "aeKc1ICFeowknfXHM7kcogAAAFc"]
[Sat Apr 18 04:49:25.418991 2026] [:error] [pid 9865:tid 9946] [client 132.196.3.209:27534] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/archive.php"] [unique_id "aeKc1azb5knECIY-C-iHqQAAAIk"]
[Sat Apr 18 04:49:26.079973 2026] [:error] [pid 9865:tid 9961] [client 132.196.3.209:27506] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeKc1qzb5knECIY-C-iHrAAAAJg"]
[Sat Apr 18 04:49:26.370659 2026] [:error] [pid 9863:tid 9873] [client 132.196.3.209:27622] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aeKc1jjjiypiFrTucbL42wAAAAA"]
[Sat Apr 18 04:49:27.187953 2026] [:error] [pid 9864:tid 9910] [client 132.196.3.209:27639] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aeKc14CFeowknfXHM7kcqgAAAEU"]
[Sat Apr 18 04:49:27.806717 2026] [:error] [pid 9970:tid 9976] [client 132.196.3.209:27502] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aeKc1yYdRLRhVmaIMx2aSAAAAMI"]
[Sat Apr 18 04:49:27.972580 2026] [:error] [pid 9863:tid 9894] [client 132.196.3.209:27572] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeKc1zjjiypiFrTucbL43QAAABU"]
[Sat Apr 18 04:49:28.361484 2026] [:error] [pid 9863:tid 9879] [client 132.196.3.209:27403] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aeKc2DjjiypiFrTucbL43wAAAAY"]
[Sat Apr 18 04:49:28.908377 2026] [:error] [pid 9865:tid 9951] [client 132.196.3.209:27473] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aeKc2Kzb5knECIY-C-iHsgAAAI4"]
[Sat Apr 18 04:49:29.604858 2026] [:error] [pid 9863:tid 9895] [client 132.196.3.209:27563] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aeKc2TjjiypiFrTucbL45gAAABY"]
[Sat Apr 18 04:49:29.633177 2026] [:error] [pid 9865:tid 9950] [client 132.196.3.209:27404] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeKc2azb5knECIY-C-iHtAAAAI0"]
[Sat Apr 18 04:49:31.082553 2026] [:error] [pid 9863:tid 9883] [client 132.196.3.209:27208] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aeKc2zjjiypiFrTucbL47QAAAAo"]
[Sat Apr 18 04:49:31.195392 2026] [:error] [pid 9863:tid 9873] [client 132.196.3.209:27204] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeKc2zjjiypiFrTucbL47gAAAAA"]
[Sat Apr 18 04:49:31.601244 2026] [:error] [pid 9863:tid 9886] [client 132.196.3.209:27215] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "aeKc2zjjiypiFrTucbL48QAAAA0"]
[Sat Apr 18 04:49:32.297574 2026] [:error] [pid 9863:tid 9874] [client 132.196.3.209:27236] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aeKc3DjjiypiFrTucbL48wAAAAE"]
[Sat Apr 18 04:49:32.793518 2026] [:error] [pid 9864:tid 9929] [client 132.196.3.209:27427] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aeKc3ICFeowknfXHM7kcrgAAAFc"]
[Sat Apr 18 04:49:32.935122 2026] [:error] [pid 9865:tid 9946] [client 132.196.3.209:27231] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aeKc3Kzb5knECIY-C-iHtgAAAIk"]
[Sat Apr 18 04:49:33.665545 2026] [:error] [pid 9970:tid 9998] [client 132.196.3.209:27492] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aeKc3SYdRLRhVmaIMx2aTQAAANg"]
[Sat Apr 18 04:49:34.113612 2026] [:error] [pid 9970:tid 9977] [client 132.196.3.209:27482] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aeKc3iYdRLRhVmaIMx2aUQAAAMM"]
[Sat Apr 18 04:49:34.150385 2026] [:error] [pid 9863:tid 9875] [client 132.196.3.209:27398] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "aeKc3jjjiypiFrTucbL49wAAAAI"]
[Sat Apr 18 04:49:34.673973 2026] [:error] [pid 9863:tid 9882] [client 132.196.3.209:27217] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKc3jjjiypiFrTucbL4-QAAAAk"]
[Sat Apr 18 04:49:35.346043 2026] [:error] [pid 9970:tid 9992] [client 132.196.3.209:27213] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKc3yYdRLRhVmaIMx2aUwAAANI"]
[Sat Apr 18 04:49:35.849751 2026] [:error] [pid 9865:tid 9954] [client 132.196.3.209:27239] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKc36zb5knECIY-C-iHuAAAAJE"]
[Sat Apr 18 04:49:36.673665 2026] [:error] [pid 9865:tid 9958] [client 132.196.3.209:27574] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKc4Kzb5knECIY-C-iHuQAAAJU"]
[Sat Apr 18 04:49:36.871890 2026] [:error] [pid 9970:tid 9994] [client 132.196.3.209:27338] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aeKc4CYdRLRhVmaIMx2aVQAAANQ"]
[Sat Apr 18 04:49:37.226287 2026] [:error] [pid 9863:tid 9882] [client 132.196.3.209:27598] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKc4TjjiypiFrTucbL5BgAAAAk"]
[Sat Apr 18 04:49:37.778362 2026] [:error] [pid 9863:tid 9890] [client 132.196.3.209:27459] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "aeKc4TjjiypiFrTucbL5CgAAABE"]
[Sat Apr 18 04:49:38.129326 2026] [:error] [pid 9863:tid 9883] [client 132.196.3.209:27463] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKc4jjjiypiFrTucbL5CwAAAAo"]
[Sat Apr 18 04:49:38.552929 2026] [:error] [pid 9970:tid 9976] [client 132.196.3.209:27242] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aeKc4iYdRLRhVmaIMx2aVgAAAMI"]
[Sat Apr 18 04:49:38.639540 2026] [:error] [pid 9970:tid 9975] [client 132.196.3.209:27469] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKc4iYdRLRhVmaIMx2aWAAAAME"]
[Sat Apr 18 04:49:39.385224 2026] [:error] [pid 9863:tid 9881] [client 132.196.3.209:27402] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aeKc4zjjiypiFrTucbL5DgAAAAg"]
[Sat Apr 18 04:49:39.431536 2026] [:error] [pid 9970:tid 9990] [client 132.196.3.209:27229] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeKc4yYdRLRhVmaIMx2aWgAAANA"]
[Sat Apr 18 04:49:39.925831 2026] [:error] [pid 9864:tid 9925] [client 132.196.3.209:27232] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-http-client.php"] [unique_id "aeKc44CFeowknfXHM7kcsgAAAFM"]
[Sat Apr 18 04:49:40.334693 2026] [:error] [pid 9970:tid 9974] [client 132.196.3.209:27261] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aeKc5CYdRLRhVmaIMx2aWwAAAMA"]
[Sat Apr 18 04:49:40.496565 2026] [:error] [pid 9864:tid 9930] [client 132.196.3.209:27413] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/configuration.php"] [unique_id "aeKc5ICFeowknfXHM7kctwAAAFg"]
[Sat Apr 18 04:49:41.147484 2026] [:error] [pid 9864:tid 9918] [client 132.196.3.209:27234] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aeKc5YCFeowknfXHM7kcvAAAAEw"]
[Sat Apr 18 04:49:41.172868 2026] [:error] [pid 9864:tid 9921] [client 132.196.3.209:27262] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aeKc5YCFeowknfXHM7kcvgAAAE8"]
[Sat Apr 18 04:49:41.776918 2026] [:error] [pid 9970:tid 9998] [client 132.196.3.209:27515] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aeKc5SYdRLRhVmaIMx2aXgAAANg"]
[Sat Apr 18 04:49:41.990521 2026] [:error] [pid 9865:tid 9951] [client 132.196.3.209:27415] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aeKc5azb5knECIY-C-iHvQAAAI4"]
[Sat Apr 18 04:49:42.370123 2026] [:error] [pid 9865:tid 9950] [client 132.196.3.209:27552] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aeKc5qzb5knECIY-C-iHvgAAAI0"]
[Sat Apr 18 04:49:42.747078 2026] [:error] [pid 9865:tid 9957] [client 132.196.3.209:27565] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aeKc5qzb5knECIY-C-iHwQAAAJQ"]
[Sat Apr 18 04:49:43.039739 2026] [:error] [pid 9865:tid 9949] [client 132.196.3.209:27578] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aeKc56zb5knECIY-C-iHwwAAAIw"]
[Sat Apr 18 04:49:43.580847 2026] [:error] [pid 9865:tid 9959] [client 132.196.3.209:27410] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "aeKc56zb5knECIY-C-iHxQAAAJY"]
[Sat Apr 18 04:49:43.701794 2026] [:error] [pid 9865:tid 9942] [client 132.196.3.209:27462] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "aeKc56zb5knECIY-C-iHxgAAAIU"]
[Sat Apr 18 04:49:44.224422 2026] [:error] [pid 9864:tid 9919] [client 132.196.3.209:27248] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aeKc6ICFeowknfXHM7kcxQAAAE0"]
[Sat Apr 18 04:49:44.510630 2026] [:error] [pid 9970:tid 9984] [client 132.196.3.209:27487] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeKc6CYdRLRhVmaIMx2aZAAAAMo"]
[Sat Apr 18 04:49:44.866300 2026] [:error] [pid 9864:tid 9926] [client 132.196.3.209:27407] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aeKc6ICFeowknfXHM7kcxwAAAFQ"]
[Sat Apr 18 04:49:45.611420 2026] [:error] [pid 9865:tid 9952] [client 132.196.3.209:27258] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeKc6azb5knECIY-C-iHyAAAAI8"]
[Sat Apr 18 04:49:45.629461 2026] [:error] [pid 9970:tid 9988] [client 132.196.3.209:27442] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aeKc6SYdRLRhVmaIMx2aZwAAAM4"]
[Sat Apr 18 04:49:46.190942 2026] [:error] [pid 9970:tid 9976] [client 132.196.3.209:27500] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeKc6iYdRLRhVmaIMx2aagAAAMI"]
[Sat Apr 18 04:49:46.279777 2026] [:error] [pid 9970:tid 9979] [client 132.196.3.209:27430] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "aeKc6iYdRLRhVmaIMx2abAAAAMU"]
[Sat Apr 18 04:49:46.721461 2026] [:error] [pid 9864:tid 9930] [client 132.196.3.209:27438] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aeKc6oCFeowknfXHM7kcywAAAFg"]
[Sat Apr 18 04:49:47.196823 2026] [:error] [pid 9863:tid 9879] [client 132.196.3.209:27205] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aeKc6zjjiypiFrTucbL5FAAAAAY"]
[Sat Apr 18 04:49:47.238947 2026] [:error] [pid 9863:tid 9890] [client 132.196.3.209:27256] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeKc6zjjiypiFrTucbL5FQAAABE"]
[Sat Apr 18 04:49:47.770078 2026] [:error] [pid 9970:tid 9998] [client 132.196.3.209:27593] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aeKc6yYdRLRhVmaIMx2acQAAANg"]
[Sat Apr 18 04:49:48.080533 2026] [:error] [pid 9970:tid 9985] [client 132.196.3.209:27212] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aeKc7CYdRLRhVmaIMx2adQAAAMs"]
[Sat Apr 18 04:49:48.384514 2026] [:error] [pid 9970:tid 9974] [client 132.196.3.209:27210] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core.php"] [unique_id "aeKc7CYdRLRhVmaIMx2adgAAAMA"]
[Sat Apr 18 04:49:48.869163 2026] [:error] [pid 9863:tid 9873] [client 132.196.3.209:27337] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aeKc7DjjiypiFrTucbL5GAAAAAA"]
[Sat Apr 18 04:49:48.990924 2026] [:error] [pid 9970:tid 9994] [client 132.196.3.209:27246] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aeKc7CYdRLRhVmaIMx2aegAAANQ"]
[Sat Apr 18 04:49:49.529808 2026] [:error] [pid 9864:tid 9921] [client 132.196.3.209:27508] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aeKc7YCFeowknfXHM7kczQAAAE8"]
[Sat Apr 18 04:49:49.838813 2026] [:error] [pid 9864:tid 9916] [client 132.196.3.209:27263] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aeKc7YCFeowknfXHM7kczgAAAEo"]
[Sat Apr 18 04:49:50.038625 2026] [:error] [pid 9970:tid 9975] [client 132.196.3.209:27612] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aeKc7iYdRLRhVmaIMx2afgAAAME"]
[Sat Apr 18 04:49:50.567097 2026] [:error] [pid 9970:tid 9996] [client 132.196.3.209:27581] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "aeKc7iYdRLRhVmaIMx2agAAAANY"]
[Sat Apr 18 04:49:50.567295 2026] [:error] [pid 9970:tid 9991] [client 132.196.3.209:27249] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock360.php"] [unique_id "aeKc7iYdRLRhVmaIMx2agQAAANE"]
[Sat Apr 18 04:49:51.072558 2026] [:error] [pid 9864:tid 9929] [client 132.196.3.209:27399] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeKc74CFeowknfXHM7kc0QAAAFc"]
[Sat Apr 18 04:49:51.346088 2026] [:error] [pid 9865:tid 9945] [client 132.196.3.209:27228] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aeKc76zb5knECIY-C-iHygAAAIg"]
[Sat Apr 18 04:49:51.614827 2026] [:error] [pid 9864:tid 9923] [client 132.196.3.209:27596] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeKc74CFeowknfXHM7kc1AAAAFE"]
[Sat Apr 18 04:49:52.109594 2026] [:error] [pid 9863:tid 9880] [client 132.196.3.209:27446] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aeKc8DjjiypiFrTucbL5HwAAAAc"]
[Sat Apr 18 04:49:52.115440 2026] [:error] [pid 9863:tid 9896] [client 132.196.3.209:27394] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeKc8DjjiypiFrTucbL5IAAAABc"]
[Sat Apr 18 04:49:52.610841 2026] [:error] [pid 9970:tid 9983] [client 132.196.3.209:27493] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeKc8CYdRLRhVmaIMx2ahAAAAMk"]
[Sat Apr 18 04:49:52.925719 2026] [:error] [pid 9865:tid 9955] [client 132.196.3.209:27501] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aeKc8Kzb5knECIY-C-iHzQAAAJI"]
[Sat Apr 18 04:49:53.114328 2026] [:error] [pid 9865:tid 9957] [client 132.196.3.209:27455] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKc8azb5knECIY-C-iHzwAAAJQ"]
[Sat Apr 18 04:49:53.781015 2026] [:error] [pid 9865:tid 9942] [client 132.196.3.209:27247] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKc8azb5knECIY-C-iH1AAAAIU"]
[Sat Apr 18 04:49:53.814123 2026] [:error] [pid 9865:tid 9940] [client 132.196.3.209:27494] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dropdown.php"] [unique_id "aeKc8azb5knECIY-C-iH1QAAAIM"]
[Sat Apr 18 04:49:54.272608 2026] [:error] [pid 9865:tid 9948] [client 132.196.3.209:27409] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKc8qzb5knECIY-C-iH2QAAAIs"]
[Sat Apr 18 04:49:54.507975 2026] [:error] [pid 9865:tid 9944] [client 132.196.3.209:27256] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aeKc8qzb5knECIY-C-iH3AAAAIc"]
[Sat Apr 18 04:49:54.983656 2026] [:error] [pid 9863:tid 9879] [client 132.196.3.209:27255] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeKc8jjjiypiFrTucbL5IwAAAAY"]
[Sat Apr 18 04:49:55.011430 2026] [:error] [pid 9863:tid 9890] [client 132.196.3.209:27426] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aeKc8zjjiypiFrTucbL5JAAAABE"]
[Sat Apr 18 04:49:55.436574 2026] [:error] [pid 9970:tid 9976] [client 132.196.3.209:27202] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aeKc8yYdRLRhVmaIMx2ahgAAAMI"]
[Sat Apr 18 04:49:55.493657 2026] [:error] [pid 9864:tid 9927] [client 132.196.3.209:27369] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeKc84CFeowknfXHM7kc1QAAAFU"]
[Sat Apr 18 04:49:55.882787 2026] [:error] [pid 9864:tid 9924] [client 132.196.3.209:27211] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aeKc84CFeowknfXHM7kc1gAAAFI"]
[Sat Apr 18 04:49:56.039980 2026] [:error] [pid 9970:tid 9979] [client 132.196.3.209:27243] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeKc9CYdRLRhVmaIMx2ahwAAAMU"]
[Sat Apr 18 04:49:56.590108 2026] [:error] [pid 9863:tid 9883] [client 132.196.3.209:27451] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aeKc9DjjiypiFrTucbL5JQAAAAo"]
[Sat Apr 18 04:49:56.597605 2026] [:error] [pid 9863:tid 9873] [client 132.196.3.209:27425] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aeKc9DjjiypiFrTucbL5JgAAAAA"]
[Sat Apr 18 04:49:57.181931 2026] [:error] [pid 9863:tid 9894] [client 132.196.3.209:27503] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aeKc9TjjiypiFrTucbL5KAAAABU"]
[Sat Apr 18 04:49:57.326386 2026] [:error] [pid 9865:tid 9943] [client 132.196.3.209:27510] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aeKc9azb5knECIY-C-iH4AAAAIY"]
[Sat Apr 18 04:49:57.854427 2026] [:error] [pid 9970:tid 9984] [client 132.196.3.209:27431] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "aeKc9SYdRLRhVmaIMx2aiQAAAMo"]
[Sat Apr 18 04:49:58.303736 2026] [:error] [pid 9970:tid 9974] [client 132.196.3.209:27396] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aeKc9iYdRLRhVmaIMx2ajAAAAMA"]
[Sat Apr 18 04:49:58.322399 2026] [:error] [pid 9970:tid 9977] [client 132.196.3.209:27250] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aeKc9iYdRLRhVmaIMx2ajQAAAMM"]
[Sat Apr 18 04:49:58.739241 2026] [:error] [pid 9864:tid 9928] [client 132.196.3.209:27332] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aeKc9oCFeowknfXHM7kc2wAAAFY"]
[Sat Apr 18 04:49:59.155384 2026] [:error] [pid 9865:tid 9946] [client 132.196.3.209:27457] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aeKc96zb5knECIY-C-iH4QAAAIk"]
[Sat Apr 18 04:49:59.260511 2026] [:error] [pid 9865:tid 9949] [client 132.196.3.209:27360] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aeKc96zb5knECIY-C-iH4gAAAIw"]
[Sat Apr 18 04:49:59.887949 2026] [:error] [pid 9864:tid 9913] [client 132.196.3.209:27437] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless.php"] [unique_id "aeKc94CFeowknfXHM7kc4AAAAEc"]
[Sat Apr 18 04:50:00.474823 2026] [:error] [pid 9970:tid 9991] [client 132.196.3.209:27219] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeKc-CYdRLRhVmaIMx2ajgAAANE"]
[Sat Apr 18 04:50:00.527804 2026] [:error] [pid 9864:tid 9907] [client 132.196.3.209:27207] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/option.php"] [unique_id "aeKc-ICFeowknfXHM7kc5gAAAEI"]
[Sat Apr 18 04:50:01.020899 2026] [:error] [pid 9970:tid 9997] [client 132.196.3.209:27355] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeKc-SYdRLRhVmaIMx2ajwAAANc"]
[Sat Apr 18 04:50:01.626919 2026] [:error] [pid 9863:tid 9885] [client 132.196.3.209:27380] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeKc-TjjiypiFrTucbL5MAAAAAw"]
[Sat Apr 18 04:50:01.945812 2026] [:error] [pid 9864:tid 9906] [client 132.196.3.209:27513] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/option.php"] [unique_id "aeKc-YCFeowknfXHM7kc7QAAAEE"]
[Sat Apr 18 04:50:02.149434 2026] [:error] [pid 9970:tid 9993] [client 132.196.3.209:27421] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeKc-iYdRLRhVmaIMx2alAAAANM"]
[Sat Apr 18 04:50:02.666668 2026] [:error] [pid 9864:tid 9909] [client 132.196.3.209:27412] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aeKc-oCFeowknfXHM7kc8QAAAEQ"]
[Sat Apr 18 04:50:02.692977 2026] [:error] [pid 9864:tid 9929] [client 132.196.3.209:27445] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/option.php"] [unique_id "aeKc-oCFeowknfXHM7kc8gAAAFc"]
[Sat Apr 18 04:50:03.331187 2026] [:error] [pid 9970:tid 9984] [client 132.196.3.209:27429] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aeKc-yYdRLRhVmaIMx2amQAAAMo"]
[Sat Apr 18 04:50:03.895980 2026] [:error] [pid 9970:tid 9985] [client 132.196.3.209:27573] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/option.php"] [unique_id "aeKc-yYdRLRhVmaIMx2anAAAAMs"]
[Sat Apr 18 04:50:04.682333 2026] [:error] [pid 9863:tid 9883] [client 132.196.3.209:27397] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aeKc_DjjiypiFrTucbL5NgAAAAo"]
[Sat Apr 18 04:50:04.912190 2026] [:error] [pid 9865:tid 9939] [client 132.196.3.209:27428] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aeKc_Kzb5knECIY-C-iH6QAAAII"]
[Sat Apr 18 04:50:05.511327 2026] [:error] [pid 9865:tid 9953] [client 132.196.3.209:27224] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "aeKc_azb5knECIY-C-iH6gAAAJA"]
[Sat Apr 18 04:50:06.356816 2026] [:error] [pid 9865:tid 9955] [client 132.196.3.209:27424] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aeKc_qzb5knECIY-C-iH7AAAAJI"]
[Sat Apr 18 04:50:06.425471 2026] [:error] [pid 9865:tid 9956] [client 132.196.3.209:27504] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aeKc_qzb5knECIY-C-iH7QAAAJM"]
[Sat Apr 18 04:50:07.519070 2026] [:error] [pid 9970:tid 9974] [client 132.196.3.209:27280] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aeKc_yYdRLRhVmaIMx2aqQAAAMA"]
[Sat Apr 18 04:50:07.758181 2026] [:error] [pid 9864:tid 9913] [client 132.196.3.209:27363] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aeKc_4CFeowknfXHM7kdBwAAAEc"]
[Sat Apr 18 04:50:08.164732 2026] [:error] [pid 9970:tid 9991] [client 132.196.3.209:27331] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aeKdACYdRLRhVmaIMx2arAAAANE"]
[Sat Apr 18 04:50:08.933351 2026] [:error] [pid 9864:tid 9917] [client 132.196.3.209:27347] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "aeKdAICFeowknfXHM7kdDgAAAEs"]
[Sat Apr 18 04:50:11.969362 2026] [:error] [pid 9864:tid 9914] [client 132.196.3.209:27452] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeKdA4CFeowknfXHM7kdIAAAAEg"]
[Sat Apr 18 04:50:13.363489 2026] [:error] [pid 9864:tid 9924] [client 132.196.3.209:27253] [client 132.196.3.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeKdBYCFeowknfXHM7kdKQAAAFI"]
[Sat Apr 18 04:50:14.311936 2026] [:error] [pid 9864:tid 9916] [client 132.196.3.209:27439] [client 132.196.3.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.196.3.209, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeKdBoCFeowknfXHM7kdLwAAAEo"]
[Sat Apr 18 04:50:14.502204 2026] [:error] [pid 9865:tid 9956] [client 132.196.3.209:27626] [client 132.196.3.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.196.3.209, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeKdBqzb5knECIY-C-iH_wAAAJM"]
[Sat Apr 18 04:50:15.474888 2026] [:error] [pid 9970:tid 9983] [client 132.196.3.209:27257] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "aeKdByYdRLRhVmaIMx2awAAAAMk"]
[Sat Apr 18 04:50:15.927985 2026] [:error] [pid 9865:tid 9958] [client 132.196.3.209:27626] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeKdB6zb5knECIY-C-iIAQAAAJU"]
[Sat Apr 18 04:50:16.041874 2026] [:error] [pid 9863:tid 9890] [client 132.196.3.209:27392] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "aeKdCDjjiypiFrTucbL5RQAAABE"]
[Sat Apr 18 04:50:16.732754 2026] [:error] [pid 9970:tid 9979] [client 132.196.3.209:27406] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "aeKdCCYdRLRhVmaIMx2awwAAAMU"]
[Sat Apr 18 04:50:17.083224 2026] [:error] [pid 9863:tid 9881] [client 132.196.3.209:27587] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeKdCTjjiypiFrTucbL5TAAAAAg"]
[Sat Apr 18 04:50:17.436760 2026] [:error] [pid 9970:tid 9974] [client 132.196.3.209:27448] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "aeKdCSYdRLRhVmaIMx2axQAAAMA"]
[Sat Apr 18 04:50:18.102980 2026] [:error] [pid 9970:tid 9986] [client 132.196.3.209:27259] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aeKdCiYdRLRhVmaIMx2ayQAAAMw"]
[Sat Apr 18 04:50:18.114482 2026] [:error] [pid 9970:tid 9982] [client 132.196.3.209:27526] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeKdCiYdRLRhVmaIMx2aygAAAMg"]
[Sat Apr 18 04:50:18.623485 2026] [:error] [pid 9970:tid 9993] [client 132.196.3.209:27240] [client 132.196.3.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "aeKdCiYdRLRhVmaIMx2azAAAANM"]
[Sat Apr 18 06:31:56.769374 2026] [:error] [pid 9970:tid 9985] [client 172.213.146.73:13242] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeK03CYdRLRhVmaIMx3dPAAAAMs"]
[Sat Apr 18 06:31:57.262690 2026] [:error] [pid 9863:tid 9883] [client 172.213.146.73:13233] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeK03TjjiypiFrTucbIYawAAAAo"]
[Sat Apr 18 06:31:57.823139 2026] [:error] [pid 9864:tid 9929] [client 172.213.146.73:13222] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeK03YCFeowknfXHM7lBzwAAAFc"]
[Sat Apr 18 06:31:58.293862 2026] [:error] [pid 9864:tid 9916] [client 172.213.146.73:8145] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeK03oCFeowknfXHM7lB0AAAAEo"]
[Sat Apr 18 06:31:58.819364 2026] [:error] [pid 9865:tid 9948] [client 172.213.146.73:13194] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeK03qzb5knECIY-C-i31gAAAIs"]
[Sat Apr 18 06:31:59.406538 2026] [:error] [pid 9865:tid 9943] [client 172.213.146.73:13246] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeK036zb5knECIY-C-i31wAAAIY"]
[Sat Apr 18 06:31:59.886030 2026] [:error] [pid 13023:tid 13041] [client 172.213.146.73:8148] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeK03_1e7hG8DAeABB8DPgAAARA"]
[Sat Apr 18 06:32:00.364195 2026] [:error] [pid 13023:tid 13034] [client 172.213.146.73:13239] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeK04P1e7hG8DAeABB8DQQAAAQk"]
[Sat Apr 18 06:32:00.874351 2026] [:error] [pid 9970:tid 9995] [client 172.213.146.73:8132] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeK04CYdRLRhVmaIMx3dPwAAANU"]
[Sat Apr 18 06:32:01.491214 2026] [:error] [pid 9865:tid 9952] [client 172.213.146.73:13202] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeK04azb5knECIY-C-i32QAAAI8"]
[Sat Apr 18 06:32:02.027697 2026] [:error] [pid 13023:tid 13045] [client 172.213.146.73:13185] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeK04v1e7hG8DAeABB8DQwAAARQ"]
[Sat Apr 18 06:32:02.663384 2026] [:error] [pid 9864:tid 9926] [client 172.213.146.73:13244] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeK04oCFeowknfXHM7lB2AAAAFQ"]
[Sat Apr 18 06:32:03.131255 2026] [:error] [pid 9863:tid 9888] [client 172.213.146.73:13209] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aeK04zjjiypiFrTucbIYcAAAAA8"]
[Sat Apr 18 06:32:03.706905 2026] [:error] [pid 13023:tid 13038] [client 172.213.146.73:13234] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aeK04_1e7hG8DAeABB8DRQAAAQ0"]
[Sat Apr 18 06:32:04.185166 2026] [:error] [pid 13023:tid 13035] [client 172.213.146.73:8190] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aeK05P1e7hG8DAeABB8DRgAAAQo"]
[Sat Apr 18 06:32:04.676377 2026] [:error] [pid 13023:tid 13048] [client 172.213.146.73:13199] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aeK05P1e7hG8DAeABB8DSQAAARc"]
[Sat Apr 18 06:32:05.179307 2026] [:error] [pid 13023:tid 13026] [client 172.213.146.73:13247] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aeK05f1e7hG8DAeABB8DTAAAAQE"]
[Sat Apr 18 06:32:05.659931 2026] [:error] [pid 13023:tid 13030] [client 172.213.146.73:13192] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aeK05f1e7hG8DAeABB8DTwAAAQU"]
[Sat Apr 18 06:32:06.217630 2026] [:error] [pid 9863:tid 9886] [client 172.213.146.73:13186] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aeK05jjjiypiFrTucbIYdAAAAA0"]
[Sat Apr 18 06:32:06.686283 2026] [:error] [pid 13023:tid 13044] [client 172.213.146.73:13193] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aeK05v1e7hG8DAeABB8DUgAAARM"]
[Sat Apr 18 06:32:07.184194 2026] [:error] [pid 9865:tid 9956] [client 172.213.146.73:8087] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeK056zb5knECIY-C-i34QAAAJM"]
[Sat Apr 18 06:32:07.686250 2026] [:error] [pid 9865:tid 9960] [client 172.213.146.73:8134] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeK056zb5knECIY-C-i34wAAAJc"]
[Sat Apr 18 06:32:08.193770 2026] [:error] [pid 13023:tid 13027] [client 172.213.146.73:13189] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeK06P1e7hG8DAeABB8DVgAAAQI"]
[Sat Apr 18 06:32:08.663842 2026] [:error] [pid 9865:tid 9957] [client 172.213.146.73:13230] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeK06Kzb5knECIY-C-i35QAAAJQ"]
[Sat Apr 18 06:32:09.158304 2026] [:error] [pid 9865:tid 9944] [client 172.213.146.73:8138] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aeK06azb5knECIY-C-i35gAAAIc"]
[Sat Apr 18 06:32:09.641161 2026] [:error] [pid 9865:tid 9953] [client 172.213.146.73:8098] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aeK06azb5knECIY-C-i36AAAAJA"]
[Sat Apr 18 06:32:10.136134 2026] [:error] [pid 9863:tid 9897] [client 172.213.146.73:13219] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aeK06jjjiypiFrTucbIYewAAABg"]
[Sat Apr 18 06:32:10.741556 2026] [:error] [pid 9865:tid 9952] [client 172.213.146.73:8171] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aeK06qzb5knECIY-C-i37AAAAI8"]
[Sat Apr 18 06:32:11.290620 2026] [:error] [pid 13023:tid 13040] [client 172.213.146.73:8142] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aeK06_1e7hG8DAeABB8DWgAAAQ8"]
[Sat Apr 18 06:32:11.803527 2026] [:error] [pid 9864:tid 9913] [client 172.213.146.73:13200] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aeK064CFeowknfXHM7lB3wAAAEc"]
[Sat Apr 18 06:32:12.341110 2026] [:error] [pid 9865:tid 9946] [client 172.213.146.73:8183] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aeK07Kzb5knECIY-C-i37wAAAIk"]
[Sat Apr 18 06:32:12.819120 2026] [:error] [pid 9865:tid 9951] [client 172.213.146.73:13213] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aeK07Kzb5knECIY-C-i38QAAAI4"]
[Sat Apr 18 06:32:13.310445 2026] [:error] [pid 9970:tid 9978] [client 172.213.146.73:8143] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aeK07SYdRLRhVmaIMx3dTAAAAMQ"]
[Sat Apr 18 06:32:13.825274 2026] [:error] [pid 9970:tid 9987] [client 172.213.146.73:13187] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aeK07SYdRLRhVmaIMx3dTQAAAM0"]
[Sat Apr 18 06:32:14.293153 2026] [:error] [pid 13023:tid 13028] [client 172.213.146.73:8064] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aeK07v1e7hG8DAeABB8DXAAAAQM"]
[Sat Apr 18 06:32:14.769112 2026] [:error] [pid 9865:tid 9956] [client 172.213.146.73:8178] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aeK07qzb5knECIY-C-i39QAAAJM"]
[Sat Apr 18 06:32:15.243522 2026] [:error] [pid 13023:tid 13035] [client 172.213.146.73:13216] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aeK07_1e7hG8DAeABB8DYgAAAQo"]
[Sat Apr 18 06:32:15.720261 2026] [:error] [pid 9970:tid 9991] [client 172.213.146.73:13220] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aeK07yYdRLRhVmaIMx3dTwAAANE"]
[Sat Apr 18 06:32:16.281085 2026] [:error] [pid 9864:tid 9930] [client 172.213.146.73:13191] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aeK08ICFeowknfXHM7lB4gAAAFg"]
[Sat Apr 18 06:32:17.055914 2026] [:error] [pid 9864:tid 9929] [client 172.213.146.73:8144] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aeK08YCFeowknfXHM7lB5AAAAFc"]
[Sat Apr 18 06:32:17.555224 2026] [:error] [pid 9865:tid 9938] [client 172.213.146.73:13206] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aeK08azb5knECIY-C-i39gAAAIE"]
[Sat Apr 18 06:32:18.210104 2026] [:error] [pid 9970:tid 9988] [client 172.213.146.73:13195] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aeK08iYdRLRhVmaIMx3dUQAAAM4"]
[Sat Apr 18 06:32:18.712536 2026] [:error] [pid 9865:tid 9955] [client 172.213.146.73:8115] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aeK08qzb5knECIY-C-i3-AAAAJI"]
[Sat Apr 18 06:32:19.301503 2026] [:error] [pid 9865:tid 9949] [client 172.213.146.73:13224] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aeK086zb5knECIY-C-i3-gAAAIw"]
[Sat Apr 18 06:32:19.940407 2026] [:error] [pid 9864:tid 9927] [client 172.213.146.73:13235] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aeK084CFeowknfXHM7lB5wAAAFU"]
[Sat Apr 18 06:32:20.813254 2026] [:error] [pid 9864:tid 9922] [client 172.213.146.73:8180] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aeK09ICFeowknfXHM7lB6AAAAFA"]
[Sat Apr 18 06:32:21.390338 2026] [:error] [pid 9865:tid 9953] [client 172.213.146.73:8126] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aeK09azb5knECIY-C-i3-wAAAJA"]
[Sat Apr 18 06:32:21.873311 2026] [:error] [pid 13023:tid 13032] [client 172.213.146.73:13223] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aeK09f1e7hG8DAeABB8DZQAAAQc"]
[Sat Apr 18 06:32:22.361568 2026] [:error] [pid 9863:tid 9878] [client 172.213.146.73:13197] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeK09jjjiypiFrTucbIYjAAAAAU"]
[Sat Apr 18 06:32:22.975852 2026] [:error] [pid 9863:tid 9873] [client 172.213.146.73:8067] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeK09jjjiypiFrTucbIYkAAAAAA"]
[Sat Apr 18 06:32:23.766527 2026] [:error] [pid 13023:tid 13043] [client 172.213.146.73:13215] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeK09_1e7hG8DAeABB8DZgAAARI"]
[Sat Apr 18 06:32:24.670728 2026] [:error] [pid 9865:tid 9961] [client 172.213.146.73:8153] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeK0-Kzb5knECIY-C-i4AgAAAJg"]
[Sat Apr 18 06:32:25.256925 2026] [:error] [pid 9865:tid 9937] [client 172.213.146.73:8136] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "aeK0-azb5knECIY-C-i4BQAAAIA"]
[Sat Apr 18 06:32:26.138765 2026] [:error] [pid 9970:tid 9992] [client 172.213.146.73:13237] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "aeK0-iYdRLRhVmaIMx3dWQAAANI"]
[Sat Apr 18 06:32:26.929183 2026] [:error] [pid 9864:tid 9919] [client 172.213.146.73:8121] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "aeK0-oCFeowknfXHM7lB7gAAAE0"]
[Sat Apr 18 06:32:27.480700 2026] [:error] [pid 13023:tid 13044] [client 172.213.146.73:13231] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "aeK0-_1e7hG8DAeABB8DbQAAARM"]
[Sat Apr 18 06:32:28.097623 2026] [:error] [pid 13023:tid 13046] [client 172.213.146.73:8133] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeK0_P1e7hG8DAeABB8DcAAAARU"]
[Sat Apr 18 06:32:28.615211 2026] [:error] [pid 13023:tid 13042] [client 172.213.146.73:8084] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeK0_P1e7hG8DAeABB8DcQAAARE"]
[Sat Apr 18 06:32:29.167484 2026] [:error] [pid 9863:tid 9876] [client 172.213.146.73:8176] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeK0_TjjiypiFrTucbIYmwAAAAM"]
[Sat Apr 18 06:32:29.637951 2026] [:error] [pid 9863:tid 9883] [client 172.213.146.73:13207] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeK0_TjjiypiFrTucbIYnQAAAAo"]
[Sat Apr 18 06:32:30.140913 2026] [:error] [pid 9864:tid 9909] [client 172.213.146.73:8147] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "aeK0_oCFeowknfXHM7lB8AAAAEQ"]
[Sat Apr 18 06:32:30.607095 2026] [:error] [pid 9970:tid 9991] [client 172.213.146.73:8146] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "aeK0_iYdRLRhVmaIMx3dYAAAANE"]
[Sat Apr 18 06:32:31.094843 2026] [:error] [pid 9865:tid 9944] [client 172.213.146.73:13241] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "aeK0_6zb5knECIY-C-i4CwAAAIc"]
[Sat Apr 18 06:32:31.576512 2026] [:error] [pid 9865:tid 9942] [client 172.213.146.73:8129] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "aeK0_6zb5knECIY-C-i4EAAAAIU"]
[Sat Apr 18 06:32:32.486916 2026] [:error] [pid 13023:tid 13030] [client 172.213.146.73:8177] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeK1AP1e7hG8DAeABB8DfAAAAQU"]
[Sat Apr 18 06:32:33.605496 2026] [:error] [pid 9864:tid 9922] [client 172.213.146.73:13229] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeK1AYCFeowknfXHM7lB9gAAAFA"]
[Sat Apr 18 06:32:34.664515 2026] [:error] [pid 9865:tid 9940] [client 172.213.146.73:13227] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeK1Aqzb5knECIY-C-i4FwAAAIM"]
[Sat Apr 18 06:32:35.536323 2026] [:error] [pid 13023:tid 13028] [client 172.213.146.73:8167] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeK1A_1e7hG8DAeABB8DhAAAAQM"]
[Sat Apr 18 06:32:36.421417 2026] [:error] [pid 9864:tid 9924] [client 172.213.146.73:13204] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeK1BICFeowknfXHM7lB_QAAAFI"]
[Sat Apr 18 06:32:37.474837 2026] [:error] [pid 9970:tid 9977] [client 172.213.146.73:8071] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeK1BSYdRLRhVmaIMx3dcgAAAMM"]
[Sat Apr 18 06:32:38.278819 2026] [:error] [pid 13023:tid 13042] [client 172.213.146.73:8103] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeK1Bv1e7hG8DAeABB8DjAAAARE"]
[Sat Apr 18 06:32:39.511249 2026] [:error] [pid 13023:tid 13033] [client 172.213.146.73:8137] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeK1B_1e7hG8DAeABB8DkgAAAQg"]
[Sat Apr 18 06:32:40.416378 2026] [:error] [pid 13023:tid 13040] [client 172.213.146.73:8003] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeK1CP1e7hG8DAeABB8DlwAAAQ8"]
[Sat Apr 18 06:32:40.916651 2026] [:error] [pid 9865:tid 9952] [client 172.213.146.73:13243] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeK1CKzb5knECIY-C-i4HQAAAI8"]
[Sat Apr 18 06:32:41.529482 2026] [:error] [pid 9865:tid 9937] [client 172.213.146.73:8083] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeK1Cazb5knECIY-C-i4IQAAAIA"]
[Sat Apr 18 06:32:42.111851 2026] [:error] [pid 9865:tid 9950] [client 172.213.146.73:8159] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeK1Cqzb5knECIY-C-i4JAAAAI0"]
[Sat Apr 18 06:32:42.813920 2026] [:error] [pid 9970:tid 9982] [client 172.213.146.73:8182] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeK1CiYdRLRhVmaIMx3degAAAMg"]
[Sat Apr 18 06:32:43.295536 2026] [:error] [pid 13023:tid 13048] [client 172.213.146.73:8166] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeK1C_1e7hG8DAeABB8DnAAAARc"]
[Sat Apr 18 06:32:43.860314 2026] [:error] [pid 9970:tid 9981] [client 172.213.146.73:13226] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeK1CyYdRLRhVmaIMx3dewAAAMc"]
[Sat Apr 18 06:32:44.459040 2026] [:error] [pid 9865:tid 9941] [client 172.213.146.73:13232] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeK1DKzb5knECIY-C-i4KwAAAIQ"]
[Sat Apr 18 06:32:44.976759 2026] [:error] [pid 13023:tid 13034] [client 172.213.146.73:13225] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeK1DP1e7hG8DAeABB8DnQAAAQk"]
[Sat Apr 18 06:32:45.441295 2026] [:error] [pid 9865:tid 9953] [client 172.213.146.73:8152] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeK1Dazb5knECIY-C-i4LAAAAJA"]
[Sat Apr 18 06:32:46.073566 2026] [:error] [pid 9864:tid 9916] [client 172.213.146.73:8131] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeK1DoCFeowknfXHM7lCAgAAAEo"]
[Sat Apr 18 06:32:47.118174 2026] [:error] [pid 9865:tid 9945] [client 172.213.146.73:8010] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeK1D6zb5knECIY-C-i4LgAAAIg"]
[Sat Apr 18 06:32:47.776907 2026] [:error] [pid 9865:tid 9942] [client 172.213.146.73:8172] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeK1D6zb5knECIY-C-i4MAAAAIU"]
[Sat Apr 18 06:32:48.589288 2026] [:error] [pid 13023:tid 13036] [client 172.213.146.73:8149] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeK1EP1e7hG8DAeABB8DrAAAAQs"]
[Sat Apr 18 06:32:49.437667 2026] [:error] [pid 9865:tid 9958] [client 172.213.146.73:8156] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeK1Eazb5knECIY-C-i4NQAAAJU"]
[Sat Apr 18 06:32:50.068158 2026] [:error] [pid 9864:tid 9914] [client 172.213.146.73:8169] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeK1EoCFeowknfXHM7lCBgAAAEg"]
[Sat Apr 18 06:32:50.710487 2026] [:error] [pid 9865:tid 9960] [client 172.213.146.73:8187] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeK1Eqzb5knECIY-C-i4OQAAAJc"]
[Sat Apr 18 06:32:51.539406 2026] [:error] [pid 9970:tid 9975] [client 172.213.146.73:13203] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeK1EyYdRLRhVmaIMx3dhwAAAME"]
[Sat Apr 18 06:32:52.134339 2026] [:error] [pid 13023:tid 13039] [client 172.213.146.73:8113] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeK1FP1e7hG8DAeABB8DsgAAAQ4"]
[Sat Apr 18 06:32:52.658284 2026] [:error] [pid 9865:tid 9944] [client 172.213.146.73:13245] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeK1FKzb5knECIY-C-i4OwAAAIc"]
[Sat Apr 18 06:32:53.513159 2026] [:error] [pid 13023:tid 13047] [client 172.213.146.73:13208] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeK1Ff1e7hG8DAeABB8DtgAAARY"]
[Sat Apr 18 06:32:54.237172 2026] [:error] [pid 13023:tid 13044] [client 172.213.146.73:8135] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeK1Fv1e7hG8DAeABB8DuQAAARM"]
[Sat Apr 18 06:32:55.258661 2026] [:error] [pid 9863:tid 9889] [client 172.213.146.73:8120] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeK1FzjjiypiFrTucbIYowAAABA"]
[Sat Apr 18 06:32:55.870615 2026] [:error] [pid 13023:tid 13033] [client 172.213.146.73:8119] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeK1F_1e7hG8DAeABB8DvwAAAQg"]
[Sat Apr 18 06:33:04.035507 2026] [:error] [pid 13023:tid 13025] [client 172.213.146.73:8139] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeK1IP1e7hG8DAeABB8D4wAAAQA"]
[Sat Apr 18 06:33:04.510054 2026] [:error] [pid 13023:tid 13046] [client 172.213.146.73:8174] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeK1IP1e7hG8DAeABB8D5gAAARU"]
[Sat Apr 18 06:33:05.042821 2026] [:error] [pid 9863:tid 9885] [client 172.213.146.73:8053] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeK1ITjjiypiFrTucbIYrAAAAAw"]
[Sat Apr 18 06:33:05.644356 2026] [:error] [pid 13023:tid 13045] [client 172.213.146.73:8090] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeK1If1e7hG8DAeABB8D7QAAARQ"]
[Sat Apr 18 06:33:06.349784 2026] [:error] [pid 9865:tid 9941] [client 172.213.146.73:13188] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeK1Iqzb5knECIY-C-i4TgAAAIQ"]
[Sat Apr 18 06:33:07.635873 2026] [:error] [pid 9863:tid 9895] [client 172.213.146.73:8141] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeK1IzjjiypiFrTucbIYrgAAABY"]
[Sat Apr 18 06:33:08.476406 2026] [:error] [pid 13023:tid 13043] [client 172.213.146.73:8165] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeK1JP1e7hG8DAeABB8D9QAAARI"]
[Sat Apr 18 06:33:09.714858 2026] [:error] [pid 13023:tid 13039] [client 172.213.146.73:13196] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeK1Jf1e7hG8DAeABB8D-QAAAQ4"]
[Sat Apr 18 06:33:11.104499 2026] [:error] [pid 9865:tid 9949] [client 172.213.146.73:8072] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeK1J6zb5knECIY-C-i4UAAAAIw"]
[Sat Apr 18 06:33:13.017285 2026] [:error] [pid 9863:tid 9887] [client 172.213.146.73:8012] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeK1KTjjiypiFrTucbIYswAAAA4"]
[Sat Apr 18 06:33:17.551876 2026] [:error] [pid 9865:tid 9940] [client 172.213.146.73:8108] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeK1Lazb5knECIY-C-i4eQAAAIM"]
[Sat Apr 18 06:33:18.735974 2026] [:error] [pid 9863:tid 9876] [client 172.213.146.73:13211] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeK1LjjjiypiFrTucbIYuwAAAAM"]
[Sat Apr 18 06:33:19.592037 2026] [:error] [pid 9863:tid 9885] [client 172.213.146.73:8069] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeK1LzjjiypiFrTucbIYvgAAAAw"]
[Sat Apr 18 06:33:20.309427 2026] [:error] [pid 9865:tid 9947] [client 172.213.146.73:8093] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeK1MKzb5knECIY-C-i4hwAAAIo"]
[Sat Apr 18 06:33:20.829214 2026] [:error] [pid 9865:tid 9940] [client 172.213.146.73:8074] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeK1MKzb5knECIY-C-i4iQAAAIM"]
[Sat Apr 18 06:33:21.336661 2026] [:error] [pid 9970:tid 9984] [client 172.213.146.73:8163] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeK1MSYdRLRhVmaIMx3dowAAAMo"]
[Sat Apr 18 06:33:22.095907 2026] [:error] [pid 9970:tid 9979] [client 172.213.146.73:7937] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeK1MiYdRLRhVmaIMx3dpAAAAMU"]
[Sat Apr 18 06:33:22.675193 2026] [:error] [pid 9865:tid 9950] [client 172.213.146.73:13226] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeK1Mqzb5knECIY-C-i4jAAAAI0"]
[Sat Apr 18 06:33:23.204012 2026] [:error] [pid 9863:tid 9891] [client 172.213.146.73:8040] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeK1MzjjiypiFrTucbIYxgAAABI"]
[Sat Apr 18 06:33:23.686318 2026] [:error] [pid 9970:tid 9978] [client 172.213.146.73:8160] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeK1MyYdRLRhVmaIMx3dpwAAAMQ"]
[Sat Apr 18 06:33:24.181690 2026] [:error] [pid 9865:tid 9946] [client 172.213.146.73:13228] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeK1NKzb5knECIY-C-i4jgAAAIk"]
[Sat Apr 18 06:33:24.649559 2026] [:error] [pid 9863:tid 9876] [client 172.213.146.73:8179] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeK1NDjjiypiFrTucbIYzAAAAAM"]
[Sat Apr 18 06:33:25.202482 2026] [:error] [pid 9970:tid 9991] [client 172.213.146.73:8066] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeK1NSYdRLRhVmaIMx3dqwAAANE"]
[Sat Apr 18 06:33:25.672719 2026] [:error] [pid 13023:tid 13027] [client 172.213.146.73:8162] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeK1Nf1e7hG8DAeABB8EBQAAAQI"]
[Sat Apr 18 06:33:26.187003 2026] [:error] [pid 9863:tid 9897] [client 172.213.146.73:8079] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeK1NjjjiypiFrTucbIY0AAAABg"]
[Sat Apr 18 06:33:26.759595 2026] [:error] [pid 9863:tid 9895] [client 172.213.146.73:8181] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeK1NjjjiypiFrTucbIY0gAAABY"]
[Sat Apr 18 06:33:27.264727 2026] [:error] [pid 9863:tid 9892] [client 172.213.146.73:13210] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeK1NzjjiypiFrTucbIY0wAAABM"]
[Sat Apr 18 06:33:27.752669 2026] [:error] [pid 13023:tid 13044] [client 172.213.146.73:8019] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeK1N_1e7hG8DAeABB8ECQAAARM"]
[Sat Apr 18 06:33:28.268964 2026] [:error] [pid 9970:tid 9977] [client 172.213.146.73:8081] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeK1OCYdRLRhVmaIMx3drwAAAMM"]
[Sat Apr 18 06:33:28.763995 2026] [:error] [pid 9970:tid 9989] [client 172.213.146.73:8110] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeK1OCYdRLRhVmaIMx3dsAAAAM8"]
[Sat Apr 18 06:33:29.229492 2026] [:error] [pid 9970:tid 9983] [client 172.213.146.73:8075] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeK1OSYdRLRhVmaIMx3dsQAAAMk"]
[Sat Apr 18 06:33:29.853372 2026] [:error] [pid 13023:tid 13033] [client 172.213.146.73:8039] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeK1Of1e7hG8DAeABB8EEgAAAQg"]
[Sat Apr 18 06:33:30.432417 2026] [:error] [pid 9863:tid 9884] [client 172.213.146.73:8101] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeK1OjjjiypiFrTucbIY2wAAAAs"]
[Sat Apr 18 06:33:31.325586 2026] [:error] [pid 13023:tid 13031] [client 172.213.146.73:8001] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeK1O_1e7hG8DAeABB8EGQAAAQY"]
[Sat Apr 18 06:33:31.826937 2026] [:error] [pid 9863:tid 9874] [client 172.213.146.73:8077] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeK1OzjjiypiFrTucbIY3AAAAAE"]
[Sat Apr 18 06:33:32.470510 2026] [:error] [pid 9865:tid 9947] [client 172.213.146.73:13217] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeK1PKzb5knECIY-C-i4lwAAAIo"]
[Sat Apr 18 06:33:32.944722 2026] [:error] [pid 13023:tid 13032] [client 172.213.146.73:8155] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeK1PP1e7hG8DAeABB8EIgAAAQc"]
[Sat Apr 18 06:33:33.484331 2026] [:error] [pid 9970:tid 9987] [client 172.213.146.73:8082] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeK1PSYdRLRhVmaIMx3dugAAAM0"]
[Sat Apr 18 06:33:34.072650 2026] [:error] [pid 13023:tid 13040] [client 172.213.146.73:8128] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeK1Pv1e7hG8DAeABB8EJQAAAQ8"]
[Sat Apr 18 06:33:34.652861 2026] [:error] [pid 9970:tid 9995] [client 172.213.146.73:8009] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeK1PiYdRLRhVmaIMx3dvwAAANU"]
[Sat Apr 18 06:33:35.331565 2026] [:error] [pid 9863:tid 9892] [client 172.213.146.73:8042] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeK1PzjjiypiFrTucbIY4gAAABM"]
[Sat Apr 18 06:33:35.860674 2026] [:error] [pid 9970:tid 9977] [client 172.213.146.73:8002] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeK1PyYdRLRhVmaIMx3dwQAAAMM"]
[Sat Apr 18 06:33:36.381667 2026] [:error] [pid 9970:tid 9990] [client 172.213.146.73:8018] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeK1QCYdRLRhVmaIMx3dwwAAANA"]
[Sat Apr 18 06:33:36.987997 2026] [:error] [pid 9970:tid 9985] [client 172.213.146.73:8024] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeK1QCYdRLRhVmaIMx3dxgAAAMs"]
[Sat Apr 18 06:33:37.467533 2026] [:error] [pid 9970:tid 9975] [client 172.213.146.73:13190] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aeK1QSYdRLRhVmaIMx3dygAAAME"]
[Sat Apr 18 06:33:38.028988 2026] [:error] [pid 13023:tid 13037] [client 172.213.146.73:8158] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aeK1Qv1e7hG8DAeABB8ELAAAAQw"]
[Sat Apr 18 06:33:38.760518 2026] [:error] [pid 13023:tid 13026] [client 172.213.146.73:8020] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aeK1Qv1e7hG8DAeABB8ELQAAAQE"]
[Sat Apr 18 06:33:39.282835 2026] [:error] [pid 9970:tid 9990] [client 172.213.146.73:13214] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aeK1QyYdRLRhVmaIMx3d0wAAANA"]
[Sat Apr 18 06:33:39.762612 2026] [:error] [pid 13023:tid 13040] [client 172.213.146.73:8094] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeK1Q_1e7hG8DAeABB8EMAAAAQ8"]
[Sat Apr 18 06:33:40.285366 2026] [:error] [pid 9970:tid 9975] [client 172.213.146.73:8185] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeK1RCYdRLRhVmaIMx3d1wAAAME"]
[Sat Apr 18 06:33:40.755675 2026] [:error] [pid 9970:tid 9976] [client 172.213.146.73:8154] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeK1RCYdRLRhVmaIMx3d3AAAAMI"]
[Sat Apr 18 06:33:41.282211 2026] [:error] [pid 9970:tid 9981] [client 172.213.146.73:8140] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeK1RSYdRLRhVmaIMx3d3gAAAMc"]
[Sat Apr 18 06:33:41.753345 2026] [:error] [pid 9865:tid 9944] [client 172.213.146.73:8088] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aeK1Razb5knECIY-C-i4pgAAAIc"]
[Sat Apr 18 06:33:42.230150 2026] [:error] [pid 9865:tid 9950] [client 172.213.146.73:8184] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aeK1Rqzb5knECIY-C-i4qgAAAI0"]
[Sat Apr 18 06:33:42.715473 2026] [:error] [pid 13023:tid 13043] [client 172.213.146.73:8091] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aeK1Rv1e7hG8DAeABB8ENQAAARI"]
[Sat Apr 18 06:33:43.198763 2026] [:error] [pid 9864:tid 9912] [client 172.213.146.73:8168] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aeK1R4CFeowknfXHM7lCaAAAAEY"]
[Sat Apr 18 06:33:43.700297 2026] [:error] [pid 9864:tid 9913] [client 172.213.146.73:8100] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "aeK1R4CFeowknfXHM7lCagAAAEc"]
[Sat Apr 18 06:33:44.172741 2026] [:error] [pid 9865:tid 9954] [client 172.213.146.73:8005] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "aeK1SKzb5knECIY-C-i4sQAAAJE"]
[Sat Apr 18 06:33:44.679734 2026] [:error] [pid 9970:tid 9980] [client 172.213.146.73:8078] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "aeK1SCYdRLRhVmaIMx3d5AAAAMY"]
[Sat Apr 18 06:33:45.160125 2026] [:error] [pid 9970:tid 9991] [client 172.213.146.73:8106] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sf.php"] [unique_id "aeK1SSYdRLRhVmaIMx3d6QAAANE"]
[Sat Apr 18 06:33:45.744678 2026] [:error] [pid 9865:tid 9943] [client 172.213.146.73:8065] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "aeK1Sazb5knECIY-C-i4tAAAAIY"]
[Sat Apr 18 06:33:46.231533 2026] [:error] [pid 9970:tid 9995] [client 172.213.146.73:8107] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "aeK1SiYdRLRhVmaIMx3d6wAAANU"]
[Sat Apr 18 06:33:46.709016 2026] [:error] [pid 9865:tid 9960] [client 172.213.146.73:8097] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "aeK1Sqzb5knECIY-C-i4tQAAAJc"]
[Sat Apr 18 06:33:47.199840 2026] [:error] [pid 13023:tid 13029] [client 172.213.146.73:13218] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "aeK1S_1e7hG8DAeABB8EOgAAAQQ"]
[Sat Apr 18 06:33:47.685001 2026] [:error] [pid 9970:tid 9980] [client 172.213.146.73:13201] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeK1SyYdRLRhVmaIMx3d8AAAAMY"]
[Sat Apr 18 06:33:48.200559 2026] [:error] [pid 9865:tid 9944] [client 172.213.146.73:8086] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeK1TKzb5knECIY-C-i4tgAAAIc"]
[Sat Apr 18 06:33:48.676458 2026] [:error] [pid 9864:tid 9922] [client 172.213.146.73:8191] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeK1TICFeowknfXHM7lCcwAAAFA"]
[Sat Apr 18 06:33:49.144569 2026] [:error] [pid 13023:tid 13039] [client 172.213.146.73:8061] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeK1Tf1e7hG8DAeABB8EPgAAAQ4"]
[Sat Apr 18 06:33:49.618771 2026] [:error] [pid 13023:tid 13048] [client 172.213.146.73:8125] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeK1Tf1e7hG8DAeABB8EQQAAARc"]
[Sat Apr 18 06:33:50.200510 2026] [:error] [pid 9865:tid 9946] [client 172.213.146.73:8095] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeK1Tqzb5knECIY-C-i4twAAAIk"]
[Sat Apr 18 06:33:51.046204 2026] [:error] [pid 9970:tid 9991] [client 172.213.146.73:8007] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeK1TyYdRLRhVmaIMx3d9AAAANE"]
[Sat Apr 18 06:33:51.644336 2026] [:error] [pid 9863:tid 9891] [client 172.213.146.73:8189] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeK1TzjjiypiFrTucbIY9gAAABI"]
[Sat Apr 18 06:33:52.274440 2026] [:error] [pid 9970:tid 9996] [client 172.213.146.73:13212] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aeK1UCYdRLRhVmaIMx3d9wAAANY"]
[Sat Apr 18 06:33:52.806008 2026] [:error] [pid 9864:tid 9905] [client 172.213.146.73:8096] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aeK1UICFeowknfXHM7lCdwAAAEA"]
[Sat Apr 18 06:33:53.484218 2026] [:error] [pid 9864:tid 9920] [client 172.213.146.73:8186] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aeK1UYCFeowknfXHM7lCeAAAAE4"]
[Sat Apr 18 06:33:54.397259 2026] [:error] [pid 9864:tid 9919] [client 172.213.146.73:8080] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aeK1UoCFeowknfXHM7lCegAAAE0"]
[Sat Apr 18 06:33:55.082933 2026] [:error] [pid 13023:tid 13043] [client 172.213.146.73:8068] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeK1U_1e7hG8DAeABB8EQgAAARI"]
[Sat Apr 18 06:33:55.640629 2026] [:error] [pid 9864:tid 9928] [client 172.213.146.73:8151] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeK1U4CFeowknfXHM7lCfwAAAFY"]
[Sat Apr 18 06:33:56.135884 2026] [:error] [pid 9865:tid 9949] [client 172.213.146.73:8033] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeK1VKzb5knECIY-C-i4vAAAAIw"]
[Sat Apr 18 06:33:56.720557 2026] [:error] [pid 9863:tid 9887] [client 172.213.146.73:8170] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeK1VDjjiypiFrTucbIY-gAAAA4"]
[Sat Apr 18 06:33:57.199772 2026] [:error] [pid 9863:tid 9888] [client 172.213.146.73:8085] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeK1VTjjiypiFrTucbIY-wAAAA8"]
[Sat Apr 18 06:33:57.744610 2026] [:error] [pid 9864:tid 9910] [client 172.213.146.73:8076] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeK1VYCFeowknfXHM7lCggAAAEU"]
[Sat Apr 18 06:33:58.329066 2026] [:error] [pid 9865:tid 9944] [client 172.213.146.73:8056] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeK1Vqzb5knECIY-C-i4wgAAAIc"]
[Sat Apr 18 06:33:58.898300 2026] [:error] [pid 9865:tid 9950] [client 172.213.146.73:8049] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeK1Vqzb5knECIY-C-i4wwAAAI0"]
[Sat Apr 18 06:33:59.368839 2026] [:error] [pid 9865:tid 9942] [client 172.213.146.73:13240] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeK1V6zb5knECIY-C-i4xwAAAIU"]
[Sat Apr 18 06:33:59.842594 2026] [:error] [pid 9865:tid 9945] [client 172.213.146.73:7997] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeK1V6zb5knECIY-C-i4ywAAAIg"]
[Sat Apr 18 06:34:00.374077 2026] [:error] [pid 13023:tid 13032] [client 172.213.146.73:7936] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeK1WP1e7hG8DAeABB8ESgAAAQc"]
[Sat Apr 18 06:34:00.872130 2026] [:error] [pid 13023:tid 13033] [client 172.213.146.73:7971] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeK1WP1e7hG8DAeABB8ESwAAAQg"]
[Sat Apr 18 06:34:01.373823 2026] [:error] [pid 13023:tid 13040] [client 172.213.146.73:8004] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeK1Wf1e7hG8DAeABB8ETQAAAQ8"]
[Sat Apr 18 06:34:01.838615 2026] [:error] [pid 9863:tid 9895] [client 172.213.146.73:8114] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeK1WTjjiypiFrTucbIZAgAAABY"]
[Sat Apr 18 06:34:02.347575 2026] [:error] [pid 13023:tid 13034] [client 172.213.146.73:8030] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeK1Wv1e7hG8DAeABB8EUAAAAQk"]
[Sat Apr 18 06:34:02.884599 2026] [:error] [pid 13023:tid 13025] [client 172.213.146.73:8116] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeK1Wv1e7hG8DAeABB8EUQAAAQA"]
[Sat Apr 18 06:34:09.641942 2026] [:error] [pid 13023:tid 13042] [client 172.213.146.73:8022] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeK1Yf1e7hG8DAeABB8EcQAAARE"]
[Sat Apr 18 06:34:10.169238 2026] [:error] [pid 9864:tid 9926] [client 172.213.146.73:8089] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeK1YoCFeowknfXHM7lCgwAAAFQ"]
[Sat Apr 18 06:34:10.858455 2026] [:error] [pid 13023:tid 13049] [client 172.213.146.73:7956] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeK1Yv1e7hG8DAeABB8EdAAAARg"]
[Sat Apr 18 06:34:11.536379 2026] [:error] [pid 13023:tid 13038] [client 172.213.146.73:13205] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeK1Y_1e7hG8DAeABB8EdgAAAQ0"]
[Sat Apr 18 06:34:12.178382 2026] [:error] [pid 9865:tid 9954] [client 172.213.146.73:13238] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeK1ZKzb5knECIY-C-i42QAAAJE"]
[Sat Apr 18 06:34:12.721661 2026] [:error] [pid 13023:tid 13039] [client 172.213.146.73:8112] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeK1ZP1e7hG8DAeABB8EdwAAAQ4"]
[Sat Apr 18 06:34:13.393180 2026] [:error] [pid 13023:tid 13040] [client 172.213.146.73:13221] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeK1Zf1e7hG8DAeABB8EeQAAAQ8"]
[Sat Apr 18 06:34:14.038680 2026] [:error] [pid 13023:tid 13034] [client 172.213.146.73:8050] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeK1Zv1e7hG8DAeABB8EegAAAQk"]
[Sat Apr 18 06:34:14.847850 2026] [:error] [pid 13023:tid 13042] [client 172.213.146.73:8070] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeK1Zv1e7hG8DAeABB8EfwAAARE"]
[Sat Apr 18 06:34:15.825148 2026] [:error] [pid 13023:tid 13037] [client 172.213.146.73:8188] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeK1Z_1e7hG8DAeABB8EhgAAAQw"]
[Sat Apr 18 06:34:16.454550 2026] [:error] [pid 13023:tid 13036] [client 172.213.146.73:8122] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeK1aP1e7hG8DAeABB8EiwAAAQs"]
[Sat Apr 18 06:34:16.971711 2026] [:error] [pid 9865:tid 9953] [client 172.213.146.73:7992] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeK1aKzb5knECIY-C-i43QAAAJA"]
[Sat Apr 18 06:34:17.448870 2026] [:error] [pid 9970:tid 9991] [client 172.213.146.73:8164] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeK1aSYdRLRhVmaIMx3eEgAAANE"]
[Sat Apr 18 06:34:17.920428 2026] [:error] [pid 9970:tid 9986] [client 172.213.146.73:7953] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeK1aSYdRLRhVmaIMx3eEwAAAMw"]
[Sat Apr 18 06:34:18.385957 2026] [:error] [pid 9970:tid 9984] [client 172.213.146.73:13198] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeK1aiYdRLRhVmaIMx3eFgAAAMo"]
[Sat Apr 18 06:34:18.969878 2026] [:error] [pid 9970:tid 9976] [client 172.213.146.73:8041] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeK1aiYdRLRhVmaIMx3eGAAAAMI"]
[Sat Apr 18 06:34:19.462426 2026] [:error] [pid 13023:tid 13030] [client 172.213.146.73:7875] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeK1a_1e7hG8DAeABB8ElAAAAQU"]
[Sat Apr 18 06:34:19.945786 2026] [:error] [pid 13023:tid 13047] [client 172.213.146.73:8008] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeK1a_1e7hG8DAeABB8ElgAAARY"]
[Sat Apr 18 06:34:20.561601 2026] [:error] [pid 9865:tid 9944] [client 172.213.146.73:7996] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeK1bKzb5knECIY-C-i43gAAAIc"]
[Sat Apr 18 06:34:21.271584 2026] [:error] [pid 9864:tid 9913] [client 172.213.146.73:8045] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeK1bYCFeowknfXHM7lCigAAAEc"]
[Sat Apr 18 06:34:22.148975 2026] [:error] [pid 9970:tid 9994] [client 172.213.146.73:8123] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aeK1biYdRLRhVmaIMx3eGgAAANQ"]
[Sat Apr 18 06:34:22.786379 2026] [:error] [pid 13023:tid 13027] [client 172.213.146.73:8021] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aeK1bv1e7hG8DAeABB8EmgAAAQI"]
[Sat Apr 18 06:34:23.408391 2026] [:error] [pid 9970:tid 9977] [client 172.213.146.73:8051] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aeK1byYdRLRhVmaIMx3eHAAAAMM"]
[Sat Apr 18 06:34:24.376930 2026] [:error] [pid 13023:tid 13036] [client 172.213.146.73:8037] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aeK1cP1e7hG8DAeABB8EnQAAAQs"]
[Sat Apr 18 06:34:25.009518 2026] [:error] [pid 13023:tid 13032] [client 172.213.146.73:8092] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aeK1cf1e7hG8DAeABB8EnwAAAQc"]
[Sat Apr 18 06:34:26.115927 2026] [:error] [pid 13023:tid 13031] [client 172.213.146.73:8027] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aeK1cv1e7hG8DAeABB8EogAAAQY"]
[Sat Apr 18 06:34:27.157971 2026] [:error] [pid 13023:tid 13045] [client 172.213.146.73:13184] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aeK1c_1e7hG8DAeABB8EpwAAARQ"]
[Sat Apr 18 06:34:27.809580 2026] [:error] [pid 13023:tid 13039] [client 172.213.146.73:8172] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "aeK1c_1e7hG8DAeABB8EqQAAAQ4"]
[Sat Apr 18 06:34:28.464659 2026] [:error] [pid 9970:tid 9979] [client 172.213.146.73:13236] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeK1dCYdRLRhVmaIMx3eIAAAAMU"]
[Sat Apr 18 06:34:29.034155 2026] [:error] [pid 13023:tid 13037] [client 172.213.146.73:7955] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeK1df1e7hG8DAeABB8EqgAAAQw"]
[Sat Apr 18 06:34:29.683251 2026] [:error] [pid 13023:tid 13033] [client 172.213.146.73:7970] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeK1df1e7hG8DAeABB8EqwAAAQg"]
[Sat Apr 18 06:34:30.277568 2026] [:error] [pid 9970:tid 9998] [client 172.213.146.73:8173] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "aeK1diYdRLRhVmaIMx3eKQAAANg"]
[Sat Apr 18 06:34:30.803852 2026] [:error] [pid 13023:tid 13027] [client 172.213.146.73:8117] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeK1dv1e7hG8DAeABB8ErQAAAQI"]
[Sat Apr 18 06:34:31.662041 2026] [:error] [pid 13023:tid 13040] [client 172.213.146.73:8006] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeK1d_1e7hG8DAeABB8ErgAAAQ8"]
[Sat Apr 18 06:34:32.137843 2026] [:error] [pid 9863:tid 9884] [client 172.213.146.73:8157] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeK1eDjjiypiFrTucbIZCQAAAAs"]
[Sat Apr 18 06:34:32.667581 2026] [:error] [pid 9863:tid 9876] [client 172.213.146.73:7893] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeK1eDjjiypiFrTucbIZCgAAAAM"]
[Sat Apr 18 06:34:33.183777 2026] [:error] [pid 13023:tid 13043] [client 172.213.146.73:8175] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeK1ef1e7hG8DAeABB8EsQAAARI"]
[Sat Apr 18 06:34:33.704523 2026] [:error] [pid 9864:tid 9910] [client 172.213.146.73:8118] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeK1eYCFeowknfXHM7lCjwAAAEU"]
[Sat Apr 18 06:34:34.373965 2026] [:error] [pid 13023:tid 13041] [client 172.213.146.73:8109] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeK1ev1e7hG8DAeABB8EtQAAARA"]
[Sat Apr 18 06:34:34.898707 2026] [:error] [pid 13023:tid 13039] [client 172.213.146.73:7964] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeK1ev1e7hG8DAeABB8EuAAAAQ4"]
[Sat Apr 18 06:34:35.406770 2026] [:error] [pid 13023:tid 13037] [client 172.213.146.73:7949] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeK1e_1e7hG8DAeABB8EuwAAAQw"]
[Sat Apr 18 06:34:35.911431 2026] [:error] [pid 13023:tid 13033] [client 172.213.146.73:8058] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeK1e_1e7hG8DAeABB8EvAAAAQg"]
[Sat Apr 18 06:34:36.533889 2026] [:error] [pid 13023:tid 13027] [client 172.213.146.73:8130] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeK1fP1e7hG8DAeABB8EvgAAAQI"]
[Sat Apr 18 06:34:37.010454 2026] [:error] [pid 9863:tid 9880] [client 172.213.146.73:8034] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeK1fTjjiypiFrTucbIZDQAAAAc"]
[Sat Apr 18 06:34:37.551104 2026] [:error] [pid 9863:tid 9895] [client 172.213.146.73:13195] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeK1fTjjiypiFrTucbIZDgAAABY"]
[Sat Apr 18 06:34:38.326873 2026] [:error] [pid 9863:tid 9885] [client 172.213.146.73:8073] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeK1fjjjiypiFrTucbIZEAAAAAw"]
[Sat Apr 18 06:34:38.945766 2026] [:error] [pid 13023:tid 13032] [client 172.213.146.73:7950] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeK1fv1e7hG8DAeABB8ExAAAAQc"]
[Sat Apr 18 06:34:39.446187 2026] [:error] [pid 9865:tid 9951] [client 172.213.146.73:8054] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeK1f6zb5knECIY-C-i46QAAAI4"]
[Sat Apr 18 06:34:40.014937 2026] [:error] [pid 9864:tid 9917] [client 172.213.146.73:8014] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aeK1gICFeowknfXHM7lClAAAAEs"]
[Sat Apr 18 06:34:40.549500 2026] [:error] [pid 9970:tid 9991] [client 172.213.146.73:7877] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aeK1gCYdRLRhVmaIMx3eNAAAANE"]
[Sat Apr 18 06:34:41.188144 2026] [:error] [pid 13023:tid 13041] [client 172.213.146.73:7988] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aeK1gf1e7hG8DAeABB8EyAAAARA"]
[Sat Apr 18 06:34:41.897763 2026] [:error] [pid 9865:tid 9961] [client 172.213.146.73:7963] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aeK1gazb5knECIY-C-i47AAAAJg"]
[Sat Apr 18 06:34:42.430451 2026] [:error] [pid 13023:tid 13026] [client 172.213.146.73:8015] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeK1gv1e7hG8DAeABB8EygAAAQE"]
[Sat Apr 18 06:34:43.013020 2026] [:error] [pid 9865:tid 9950] [client 172.213.146.73:8099] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeK1g6zb5knECIY-C-i48gAAAI0"]
[Sat Apr 18 06:34:43.624816 2026] [:error] [pid 9865:tid 9941] [client 172.213.146.73:8115] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeK1g6zb5knECIY-C-i49gAAAIQ"]
[Sat Apr 18 06:34:44.299895 2026] [:error] [pid 9865:tid 9945] [client 172.213.146.73:8060] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeK1hKzb5knECIY-C-i4-QAAAIg"]
[Sat Apr 18 06:34:45.104638 2026] [:error] [pid 9970:tid 9989] [client 172.213.146.73:7897] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aeK1hSYdRLRhVmaIMx3eOAAAAM8"]
[Sat Apr 18 06:34:45.623345 2026] [:error] [pid 9865:tid 9954] [client 172.213.146.73:8150] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aeK1hazb5knECIY-C-i4_AAAAJE"]
[Sat Apr 18 06:34:46.152133 2026] [:error] [pid 13023:tid 13038] [client 172.213.146.73:8016] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aeK1hv1e7hG8DAeABB8EzQAAAQ0"]
[Sat Apr 18 06:34:46.781233 2026] [:error] [pid 9864:tid 9915] [client 172.213.146.73:7993] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aeK1hoCFeowknfXHM7lCnwAAAEk"]
[Sat Apr 18 06:34:47.437811 2026] [:error] [pid 13023:tid 13040] [client 172.213.146.73:7889] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeK1h_1e7hG8DAeABB8E0AAAAQ8"]
[Sat Apr 18 06:34:47.977314 2026] [:error] [pid 13023:tid 13025] [client 172.213.146.73:8124] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeK1h_1e7hG8DAeABB8E1AAAAQA"]
[Sat Apr 18 06:34:48.476320 2026] [:error] [pid 9865:tid 9955] [client 172.213.146.73:7951] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeK1iKzb5knECIY-C-i5BwAAAJI"]
[Sat Apr 18 06:34:49.009082 2026] [:error] [pid 9970:tid 9980] [client 172.213.146.73:7945] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeK1iSYdRLRhVmaIMx3eOgAAAMY"]
[Sat Apr 18 06:34:49.574749 2026] [:error] [pid 9970:tid 9988] [client 172.213.146.73:8028] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeK1iSYdRLRhVmaIMx3eOwAAAM4"]
[Sat Apr 18 06:34:50.050551 2026] [:error] [pid 9970:tid 9979] [client 172.213.146.73:7973] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeK1iiYdRLRhVmaIMx3ePQAAAMU"]
[Sat Apr 18 06:34:50.523797 2026] [:error] [pid 13023:tid 13046] [client 172.213.146.73:7882] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeK1iv1e7hG8DAeABB8E2wAAARU"]
[Sat Apr 18 06:34:51.030930 2026] [:error] [pid 9863:tid 9894] [client 172.213.146.73:7975] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeK1izjjiypiFrTucbIZVwAAABU"]
[Sat Apr 18 06:34:51.511189 2026] [:error] [pid 9863:tid 9891] [client 172.213.146.73:7892] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeK1izjjiypiFrTucbIZWgAAABI"]
[Sat Apr 18 06:34:52.020626 2026] [:error] [pid 13023:tid 13045] [client 172.213.146.73:8000] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeK1jP1e7hG8DAeABB8E4QAAARQ"]
[Sat Apr 18 06:34:52.530143 2026] [:error] [pid 13023:tid 13043] [client 172.213.146.73:8038] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeK1jP1e7hG8DAeABB8E5AAAARI"]
[Sat Apr 18 06:34:53.090572 2026] [:error] [pid 9864:tid 9913] [client 172.213.146.73:8025] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeK1jYCFeowknfXHM7lCrwAAAEc"]
[Sat Apr 18 06:34:53.628117 2026] [:error] [pid 9865:tid 9940] [client 172.213.146.73:8017] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeK1jazb5knECIY-C-i5EwAAAIM"]
[Sat Apr 18 06:34:54.357292 2026] [:error] [pid 9865:tid 9951] [client 172.213.146.73:8029] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeK1jqzb5knECIY-C-i5FQAAAI4"]
[Sat Apr 18 06:34:54.970364 2026] [:error] [pid 9865:tid 9943] [client 172.213.146.73:7966] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeK1jqzb5knECIY-C-i5FwAAAIY"]
[Sat Apr 18 06:34:55.441307 2026] [:error] [pid 13023:tid 13039] [client 172.213.146.73:7940] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeK1j_1e7hG8DAeABB8E6QAAAQ4"]
[Sat Apr 18 06:34:56.001847 2026] [:error] [pid 9863:tid 9882] [client 172.213.146.73:7922] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeK1kDjjiypiFrTucbIZYAAAAAk"]
[Sat Apr 18 06:34:56.543054 2026] [:error] [pid 13023:tid 13046] [client 172.213.146.73:8047] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeK1kP1e7hG8DAeABB8E7AAAARU"]
[Sat Apr 18 06:34:57.039119 2026] [:error] [pid 9863:tid 9881] [client 172.213.146.73:8063] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeK1kTjjiypiFrTucbIZZAAAAAg"]
[Sat Apr 18 06:34:57.599929 2026] [:error] [pid 9864:tid 9915] [client 172.213.146.73:7986] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeK1kYCFeowknfXHM7lCtAAAAEk"]
[Sat Apr 18 06:34:58.216791 2026] [:error] [pid 9863:tid 9897] [client 172.213.146.73:8055] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeK1kjjjiypiFrTucbIZZwAAABg"]
[Sat Apr 18 06:34:58.765899 2026] [:error] [pid 9864:tid 9908] [client 172.213.146.73:7927] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeK1koCFeowknfXHM7lCtQAAAEM"]
[Sat Apr 18 06:34:59.357655 2026] [:error] [pid 13023:tid 13036] [client 172.213.146.73:7958] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeK1k_1e7hG8DAeABB8E9QAAAQs"]
[Sat Apr 18 06:35:00.089736 2026] [:error] [pid 9864:tid 9922] [client 172.213.146.73:7982] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeK1lICFeowknfXHM7lCtwAAAFA"]
[Sat Apr 18 06:35:00.781284 2026] [:error] [pid 9864:tid 9929] [client 172.213.146.73:7881] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeK1lICFeowknfXHM7lCuQAAAFc"]
[Sat Apr 18 06:35:01.322643 2026] [:error] [pid 9970:tid 9993] [client 172.213.146.73:7974] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeK1lSYdRLRhVmaIMx3ePgAAANM"]
[Sat Apr 18 06:35:01.868655 2026] [:error] [pid 9864:tid 9918] [client 172.213.146.73:7938] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeK1lYCFeowknfXHM7lCuwAAAEw"]
[Sat Apr 18 06:35:03.172461 2026] [:error] [pid 13023:tid 13036] [client 172.213.146.73:7884] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeK1l_1e7hG8DAeABB8FCAAAAQs"]
[Sat Apr 18 06:35:04.030016 2026] [:error] [pid 13023:tid 13030] [client 172.213.146.73:8044] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeK1mP1e7hG8DAeABB8FDQAAAQU"]
[Sat Apr 18 06:35:05.278472 2026] [:error] [pid 13023:tid 13037] [client 172.213.146.73:8043] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeK1mf1e7hG8DAeABB8FEgAAAQw"]
[Sat Apr 18 06:35:06.876960 2026] [:error] [pid 9865:tid 9957] [client 172.213.146.73:7990] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeK1mqzb5knECIY-C-i5IgAAAJQ"]
[Sat Apr 18 06:35:07.665383 2026] [:error] [pid 13023:tid 13041] [client 172.213.146.73:7952] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeK1m_1e7hG8DAeABB8FIAAAARA"]
[Sat Apr 18 06:35:18.522809 2026] [:error] [pid 9865:tid 9944] [client 172.213.146.73:7883] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeK1pqzb5knECIY-C-i5OgAAAIc"]
[Sat Apr 18 06:35:19.254331 2026] [:error] [pid 13023:tid 13048] [client 172.213.146.73:8104] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeK1p_1e7hG8DAeABB8FQAAAARc"]
[Sat Apr 18 06:35:19.960868 2026] [:error] [pid 13023:tid 13036] [client 172.213.146.73:7915] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeK1p_1e7hG8DAeABB8FQwAAAQs"]
[Sat Apr 18 06:35:20.899338 2026] [:error] [pid 9865:tid 9945] [client 172.213.146.73:7998] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeK1qKzb5knECIY-C-i5QgAAAIg"]
[Sat Apr 18 06:35:21.929759 2026] [:error] [pid 9865:tid 9949] [client 172.213.146.73:8140] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeK1qazb5knECIY-C-i5RwAAAIw"]
[Sat Apr 18 06:35:22.650262 2026] [:error] [pid 13023:tid 13036] [client 172.213.146.73:8111] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeK1qv1e7hG8DAeABB8FUQAAAQs"]
[Sat Apr 18 06:35:23.202134 2026] [:error] [pid 9864:tid 9905] [client 172.213.146.73:7931] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeK1q4CFeowknfXHM7lC1wAAAEA"]
[Sat Apr 18 06:35:23.857548 2026] [:error] [pid 13023:tid 13040] [client 172.213.146.73:8051] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeK1q_1e7hG8DAeABB8FWgAAAQ8"]
[Sat Apr 18 06:35:24.690325 2026] [:error] [pid 9863:tid 9881] [client 172.213.146.73:7887] [client 172.213.146.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeK1rDjjiypiFrTucbIZhgAAAAg"]
[Sat Apr 18 06:35:25.452481 2026] [:error] [pid 13023:tid 13047] [client 172.213.146.73:8011] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeK1rf1e7hG8DAeABB8FYAAAARY"]
[Sat Apr 18 06:35:25.961784 2026] [:error] [pid 13023:tid 13035] [client 172.213.146.73:7946] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeK1rf1e7hG8DAeABB8FZQAAAQo"]
[Sat Apr 18 06:35:26.494188 2026] [:error] [pid 13023:tid 13041] [client 172.213.146.73:7899] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeK1rv1e7hG8DAeABB8FbAAAARA"]
[Sat Apr 18 06:35:26.980042 2026] [:error] [pid 9863:tid 9876] [client 172.213.146.73:8013] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeK1rjjjiypiFrTucbIZiQAAAAM"]
[Sat Apr 18 06:35:27.494951 2026] [:error] [pid 9863:tid 9880] [client 172.213.146.73:8102] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeK1rzjjiypiFrTucbIZiwAAAAc"]
[Sat Apr 18 06:35:27.966696 2026] [:error] [pid 9970:tid 9977] [client 172.213.146.73:7880] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeK1ryYdRLRhVmaIMx3eYQAAAMM"]
[Sat Apr 18 06:35:28.610794 2026] [:error] [pid 9970:tid 9985] [client 172.213.146.73:8105] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeK1sCYdRLRhVmaIMx3eZAAAAMs"]
[Sat Apr 18 06:35:29.396771 2026] [:error] [pid 9970:tid 9991] [client 172.213.146.73:7968] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeK1sSYdRLRhVmaIMx3ebAAAANE"]
[Sat Apr 18 06:35:29.999896 2026] [:error] [pid 9970:tid 9976] [client 172.213.146.73:7962] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeK1sSYdRLRhVmaIMx3ecAAAAMI"]
[Sat Apr 18 06:35:30.514431 2026] [:error] [pid 13023:tid 13034] [client 172.213.146.73:8026] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeK1sv1e7hG8DAeABB8FdAAAAQk"]
[Sat Apr 18 06:35:31.056657 2026] [:error] [pid 13023:tid 13041] [client 172.213.146.73:7934] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeK1s_1e7hG8DAeABB8FeAAAARA"]
[Sat Apr 18 06:35:31.582602 2026] [:error] [pid 9863:tid 9895] [client 172.213.146.73:8048] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeK1szjjiypiFrTucbIZjAAAABY"]
[Sat Apr 18 06:35:32.063415 2026] [:error] [pid 9863:tid 9885] [client 172.213.146.73:7978] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aeK1tDjjiypiFrTucbIZjwAAAAw"]
[Sat Apr 18 06:35:32.548967 2026] [:error] [pid 9865:tid 9951] [client 172.213.146.73:7957] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aeK1tKzb5knECIY-C-i5WgAAAI4"]
[Sat Apr 18 06:35:33.118154 2026] [:error] [pid 9865:tid 9943] [client 172.213.146.73:7891] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aeK1tazb5knECIY-C-i5XAAAAIY"]
[Sat Apr 18 06:35:33.967918 2026] [:error] [pid 13023:tid 13033] [client 172.213.146.73:7812] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prv8.php"] [unique_id "aeK1tf1e7hG8DAeABB8FjAAAAQg"]
[Sat Apr 18 06:35:34.585260 2026] [:error] [pid 13023:tid 13047] [client 172.213.146.73:8161] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeK1tv1e7hG8DAeABB8FkwAAARY"]
[Sat Apr 18 06:35:35.167880 2026] [:error] [pid 13023:tid 13034] [client 172.213.146.73:7976] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeK1t_1e7hG8DAeABB8FmAAAAQk"]
[Sat Apr 18 06:35:36.485225 2026] [:error] [pid 13023:tid 13046] [client 172.213.146.73:7813] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeK1uP1e7hG8DAeABB8FowAAARU"]
[Sat Apr 18 06:35:37.902722 2026] [:error] [pid 9970:tid 9984] [client 172.213.146.73:7947] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeK1uSYdRLRhVmaIMx3efwAAAMo"]
[Sat Apr 18 06:35:40.090644 2026] [:error] [pid 9864:tid 9927] [client 172.213.146.73:8059] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeK1vICFeowknfXHM7lC4wAAAFU"]
[Sat Apr 18 06:35:40.992989 2026] [:error] [pid 9864:tid 9905] [client 172.213.146.73:7834] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeK1vICFeowknfXHM7lC6QAAAEA"]
[Sat Apr 18 06:35:41.677762 2026] [:error] [pid 13023:tid 13037] [client 172.213.146.73:7995] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeK1vf1e7hG8DAeABB8FrwAAAQw"]
[Sat Apr 18 06:35:43.764720 2026] [:error] [pid 9865:tid 9952] [client 172.213.146.73:7902] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeK1v6zb5knECIY-C-i5ZQAAAI8"]
[Sat Apr 18 06:35:44.395308 2026] [:error] [pid 13023:tid 13043] [client 172.213.146.73:7987] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeK1wP1e7hG8DAeABB8FxwAAARI"]
[Sat Apr 18 06:35:45.230599 2026] [:error] [pid 13023:tid 13035] [client 172.213.146.73:7896] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeK1wf1e7hG8DAeABB8FzAAAAQo"]
[Sat Apr 18 06:35:46.030944 2026] [:error] [pid 13023:tid 13039] [client 172.213.146.73:8127] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeK1wv1e7hG8DAeABB8F1wAAAQ4"]
[Sat Apr 18 06:35:46.898867 2026] [:error] [pid 9970:tid 9979] [client 172.213.146.73:7895] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeK1wiYdRLRhVmaIMx3ehwAAAMU"]
[Sat Apr 18 06:35:48.545748 2026] [:error] [pid 13023:tid 13049] [client 172.213.146.73:7904] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aeK1xP1e7hG8DAeABB8F3gAAARg"]
[Sat Apr 18 06:35:50.196275 2026] [:error] [pid 9864:tid 9922] [client 172.213.146.73:8062] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aeK1xoCFeowknfXHM7lC-AAAAFA"]
[Sat Apr 18 06:35:53.595604 2026] [:error] [pid 13023:tid 13032] [client 172.213.146.73:7890] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aeK1yf1e7hG8DAeABB8F7gAAAQc"]
[Sat Apr 18 06:35:56.571456 2026] [:error] [pid 9865:tid 9961] [client 172.213.146.73:8038] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aeK1zKzb5knECIY-C-i5agAAAJg"]
[Sat Apr 18 06:35:57.802841 2026] [:error] [pid 9863:tid 9885] [client 172.213.146.73:8032] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aeK1zTjjiypiFrTucbIZnwAAAAw"]
[Sat Apr 18 06:35:58.696931 2026] [:error] [pid 9970:tid 9989] [client 172.213.146.73:7920] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aeK1ziYdRLRhVmaIMx3esAAAAM8"]
[Sat Apr 18 06:35:59.568358 2026] [:error] [pid 9970:tid 9983] [client 172.213.146.73:7832] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aeK1zyYdRLRhVmaIMx3eswAAAMk"]
[Sat Apr 18 06:36:00.341188 2026] [:error] [pid 13023:tid 13041] [client 172.213.146.73:7856] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aeK10P1e7hG8DAeABB8GCQAAARA"]
[Sat Apr 18 06:36:02.912940 2026] [:error] [pid 9863:tid 9891] [client 172.213.146.73:7911] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeK10jjjiypiFrTucbIZowAAABI"]
[Sat Apr 18 06:36:03.759375 2026] [:error] [pid 9970:tid 9994] [client 172.213.146.73:7919] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeK10yYdRLRhVmaIMx3eugAAANQ"]
[Sat Apr 18 06:36:04.724939 2026] [:error] [pid 9865:tid 9947] [client 172.213.146.73:13233] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeK11Kzb5knECIY-C-i5cAAAAIo"]
[Sat Apr 18 06:36:05.577779 2026] [:error] [pid 13023:tid 13044] [client 172.213.146.73:7888] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeK11f1e7hG8DAeABB8GDgAAARM"]
[Sat Apr 18 06:36:06.605540 2026] [:error] [pid 13023:tid 13037] [client 172.213.146.73:7908] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeK11v1e7hG8DAeABB8GEgAAAQw"]
[Sat Apr 18 06:36:07.661837 2026] [:error] [pid 9863:tid 9881] [client 172.213.146.73:7814] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeK11zjjiypiFrTucbIZqAAAAAg"]
[Sat Apr 18 06:36:08.391844 2026] [:error] [pid 9865:tid 9957] [client 172.213.146.73:7921] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeK12Kzb5knECIY-C-i5cwAAAJQ"]
[Sat Apr 18 06:36:09.289437 2026] [:error] [pid 9864:tid 9914] [client 172.213.146.73:13239] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeK12YCFeowknfXHM7lC_gAAAEg"]
[Sat Apr 18 06:36:10.352003 2026] [:error] [pid 13023:tid 13034] [client 172.213.146.73:13234] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeK12v1e7hG8DAeABB8GGAAAAQk"]
[Sat Apr 18 06:36:11.141763 2026] [:error] [pid 13023:tid 13038] [client 172.213.146.73:7825] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeK12_1e7hG8DAeABB8GGQAAAQ0"]
[Sat Apr 18 06:36:11.747474 2026] [:error] [pid 13023:tid 13031] [client 172.213.146.73:13244] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeK12_1e7hG8DAeABB8GHAAAAQY"]
[Sat Apr 18 06:36:12.762987 2026] [:error] [pid 9970:tid 9989] [client 172.213.146.73:13246] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeK13CYdRLRhVmaIMx3evwAAAM8"]
[Sat Apr 18 06:36:13.722163 2026] [:error] [pid 9864:tid 9928] [client 172.213.146.73:7965] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeK13YCFeowknfXHM7lC_wAAAFY"]
[Sat Apr 18 06:36:14.274676 2026] [:error] [pid 9863:tid 9895] [client 172.213.146.73:7876] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeK13jjjiypiFrTucbIZqgAAABY"]
[Sat Apr 18 06:36:14.859859 2026] [:error] [pid 13023:tid 13042] [client 172.213.146.73:8132] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeK13v1e7hG8DAeABB8GHQAAARE"]
[Sat Apr 18 06:36:15.631324 2026] [:error] [pid 9864:tid 9919] [client 172.213.146.73:7985] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeK134CFeowknfXHM7lDAAAAAE0"]
[Sat Apr 18 06:36:16.117686 2026] [:error] [pid 13023:tid 13028] [client 172.213.146.73:13193] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeK14P1e7hG8DAeABB8GHwAAAQM"]
[Sat Apr 18 06:36:16.782224 2026] [:error] [pid 13023:tid 13048] [client 172.213.146.73:8190] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeK14P1e7hG8DAeABB8GIgAAARc"]
[Sat Apr 18 06:36:17.408955 2026] [:error] [pid 13023:tid 13038] [client 172.213.146.73:7935] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeK14f1e7hG8DAeABB8GIwAAAQ0"]
[Sat Apr 18 06:36:25.733541 2026] [:error] [pid 13023:tid 13029] [client 172.213.146.73:13230] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aeK16f1e7hG8DAeABB8GSwAAAQQ"]
[Sat Apr 18 06:36:26.454012 2026] [:error] [pid 9863:tid 9873] [client 172.213.146.73:8138] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aeK16jjjiypiFrTucbIZuAAAAAA"]
[Sat Apr 18 06:36:27.198096 2026] [:error] [pid 13023:tid 13038] [client 172.213.146.73:7859] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aeK16_1e7hG8DAeABB8GVgAAAQ0"]
[Sat Apr 18 06:36:28.131028 2026] [:error] [pid 13023:tid 13025] [client 172.213.146.73:7972] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aeK17P1e7hG8DAeABB8GWwAAAQA"]
[Sat Apr 18 06:36:28.731885 2026] [:error] [pid 9970:tid 9991] [client 172.213.146.73:13191] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeK17CYdRLRhVmaIMx3ewwAAANE"]
[Sat Apr 18 06:36:29.426362 2026] [:error] [pid 9864:tid 9913] [client 172.213.146.73:8134] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeK17YCFeowknfXHM7lDAQAAAEc"]
[Sat Apr 18 06:36:29.913300 2026] [:error] [pid 9970:tid 9978] [client 172.213.146.73:7873] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeK17SYdRLRhVmaIMx3exAAAAMQ"]
[Sat Apr 18 06:36:30.393301 2026] [:error] [pid 9970:tid 9980] [client 172.213.146.73:7878] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeK17iYdRLRhVmaIMx3exgAAAMY"]
[Sat Apr 18 06:36:31.104069 2026] [:error] [pid 9970:tid 9997] [client 172.213.146.73:8087] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aeK17yYdRLRhVmaIMx3eyAAAANc"]
[Sat Apr 18 06:36:31.651438 2026] [:error] [pid 9970:tid 9995] [client 172.213.146.73:8031] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aeK17yYdRLRhVmaIMx3eyQAAANU"]
[Sat Apr 18 06:36:32.453538 2026] [:error] [pid 13023:tid 13031] [client 172.213.146.73:8057] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aeK18P1e7hG8DAeABB8GZQAAAQY"]
[Sat Apr 18 06:36:32.999066 2026] [:error] [pid 13023:tid 13045] [client 172.213.146.73:7959] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aeK18P1e7hG8DAeABB8GZwAAARQ"]
[Sat Apr 18 06:36:33.905546 2026] [:error] [pid 13023:tid 13027] [client 172.213.146.73:13235] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeK18f1e7hG8DAeABB8GaQAAAQI"]
[Sat Apr 18 06:36:35.062123 2026] [:error] [pid 13023:tid 13036] [client 172.213.146.73:13216] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeK18_1e7hG8DAeABB8GagAAAQs"]
[Sat Apr 18 06:36:36.499427 2026] [:error] [pid 9970:tid 9998] [client 172.213.146.73:7917] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeK19CYdRLRhVmaIMx3ezAAAANg"]
[Sat Apr 18 06:36:38.178803 2026] [:error] [pid 13023:tid 13044] [client 172.213.146.73:7909] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeK19v1e7hG8DAeABB8GawAAARM"]
[Sat Apr 18 06:36:38.696775 2026] [:error] [pid 9865:tid 9938] [client 172.213.146.73:13224] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeK19qzb5knECIY-C-i5egAAAIE"]
[Sat Apr 18 06:36:39.438149 2026] [:error] [pid 13023:tid 13042] [client 172.213.146.73:8183] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeK19_1e7hG8DAeABB8GbgAAARE"]
[Sat Apr 18 06:36:40.175886 2026] [:error] [pid 9970:tid 9981] [client 172.213.146.73:8178] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeK1-CYdRLRhVmaIMx3ezgAAAMc"]
[Sat Apr 18 06:36:41.077105 2026] [:error] [pid 13023:tid 13049] [client 172.213.146.73:13194] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeK1-f1e7hG8DAeABB8GcQAAARg"]
[Sat Apr 18 06:36:41.556305 2026] [:error] [pid 9864:tid 9905] [client 172.213.146.73:8136] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "aeK1-YCFeowknfXHM7lDBwAAAEA"]
[Sat Apr 18 06:36:42.064306 2026] [:error] [pid 9970:tid 9990] [client 172.213.146.73:13207] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "aeK1-iYdRLRhVmaIMx3e0AAAANA"]
[Sat Apr 18 06:36:42.549280 2026] [:error] [pid 9970:tid 9994] [client 172.213.146.73:8148] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "aeK1-iYdRLRhVmaIMx3e0QAAANQ"]
[Sat Apr 18 06:36:43.039445 2026] [:error] [pid 9970:tid 9991] [client 172.213.146.73:8180] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "aeK1-yYdRLRhVmaIMx3e0wAAANE"]
[Sat Apr 18 06:36:43.725518 2026] [:error] [pid 13023:tid 13036] [client 172.213.146.73:13229] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeK1-_1e7hG8DAeABB8GdAAAAQs"]
[Sat Apr 18 06:36:44.287014 2026] [:error] [pid 9863:tid 9896] [client 172.213.146.73:13209] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeK1_DjjiypiFrTucbIZvQAAABc"]
[Sat Apr 18 06:36:44.809636 2026] [:error] [pid 13023:tid 13043] [client 172.213.146.73:8142] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeK1_P1e7hG8DAeABB8GdgAAARI"]
[Sat Apr 18 06:36:45.306425 2026] [:error] [pid 9864:tid 9918] [client 172.213.146.73:8147] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeK1_YCFeowknfXHM7lDCAAAAEw"]
[Sat Apr 18 06:36:45.961249 2026] [:error] [pid 13023:tid 13042] [client 172.213.146.73:13219] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeK1_f1e7hG8DAeABB8GewAAARE"]
[Sat Apr 18 06:36:46.543796 2026] [:error] [pid 9864:tid 9926] [client 172.213.146.73:7926] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeK1_oCFeowknfXHM7lDCQAAAFQ"]
[Sat Apr 18 06:36:47.178599 2026] [:error] [pid 9970:tid 9997] [client 172.213.146.73:7824] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeK1_yYdRLRhVmaIMx3e2gAAANc"]
[Sat Apr 18 06:36:47.670597 2026] [:error] [pid 9864:tid 9910] [client 172.213.146.73:13204] [client 172.213.146.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeK1_4CFeowknfXHM7lDDAAAAEU"]
[Sat Apr 18 06:41:08.952144 2026] [:error] [pid 9863:tid 9886] [client 182.42.104.32:41831] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeK3BDjjiypiFrTucbIaNQAAAA0"]
[Sat Apr 18 08:58:28.403195 2026] [:error] [pid 34290:tid 34342] [client 4.223.163.152:17311] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flox.php"] [unique_id "aeLXNBqX6WpmmAXOBi983gAAAdc"]
[Sat Apr 18 08:58:29.307602 2026] [:error] [pid 9865:tid 9952] [client 4.223.163.152:17301] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flox.php"] [unique_id "aeLXNazb5knECIY-C-jdPAAAAI8"]
[Sat Apr 18 08:58:30.178509 2026] [:error] [pid 34288:tid 34292] [client 4.223.163.152:17373] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flox.php"] [unique_id "aeLXNuTIiy__PtiLmplSHQAAAYA"]
[Sat Apr 18 08:58:30.807869 2026] [:error] [pid 34288:tid 34302] [client 4.223.163.152:17360] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/flox.php"] [unique_id "aeLXNuTIiy__PtiLmplSIQAAAYo"]
[Sat Apr 18 08:58:31.422761 2026] [:error] [pid 34288:tid 34295] [client 4.223.163.152:17380] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mff.php"] [unique_id "aeLXN-TIiy__PtiLmplSJwAAAYM"]
[Sat Apr 18 08:58:32.080177 2026] [:error] [pid 9970:tid 9980] [client 4.223.163.152:3053] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mff.php"] [unique_id "aeLXOCYdRLRhVmaIMx0SOQAAAMY"]
[Sat Apr 18 08:58:32.941920 2026] [:error] [pid 9970:tid 9986] [client 4.223.163.152:17310] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mff.php"] [unique_id "aeLXOCYdRLRhVmaIMx0SPAAAAMw"]
[Sat Apr 18 08:58:33.502848 2026] [:error] [pid 34237:tid 34256] [client 4.223.163.152:17382] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mff.php"] [unique_id "aeLXORBmX4Wq5a6rxfbwhAAAAVE"]
[Sat Apr 18 08:58:34.056185 2026] [:error] [pid 9864:tid 9919] [client 4.223.163.152:17286] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aeLXOoCFeowknfXHM7lffgAAAE0"]
[Sat Apr 18 08:58:34.610355 2026] [:error] [pid 34288:tid 34294] [client 4.223.163.152:17383] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aeLXOuTIiy__PtiLmplSMwAAAYI"]
[Sat Apr 18 08:58:35.140012 2026] [:error] [pid 34288:tid 34305] [client 4.223.163.152:17389] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aeLXO-TIiy__PtiLmplSNQAAAY0"]
[Sat Apr 18 08:58:35.816196 2026] [:error] [pid 9864:tid 9906] [client 4.223.163.152:17363] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aq.php"] [unique_id "aeLXO4CFeowknfXHM7lfgQAAAEE"]
[Sat Apr 18 08:58:36.463202 2026] [:error] [pid 9970:tid 9991] [client 4.223.163.152:17345] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanger2.php"] [unique_id "aeLXPCYdRLRhVmaIMx0SRAAAANE"]
[Sat Apr 18 08:58:37.092032 2026] [:error] [pid 9970:tid 9994] [client 4.223.163.152:3060] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanger2.php"] [unique_id "aeLXPSYdRLRhVmaIMx0SRwAAANQ"]
[Sat Apr 18 08:58:37.693376 2026] [:error] [pid 13023:tid 13042] [client 4.223.163.152:17399] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanger2.php"] [unique_id "aeLXPf1e7hG8DAeABB9UKAAAARE"]
[Sat Apr 18 08:58:38.236869 2026] [:error] [pid 9865:tid 9940] [client 4.223.163.152:17348] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanger2.php"] [unique_id "aeLXPqzb5knECIY-C-jdTAAAAIM"]
[Sat Apr 18 08:58:39.036660 2026] [:error] [pid 9864:tid 9912] [client 4.223.163.152:17377] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeLXP4CFeowknfXHM7lfiQAAAEY"]
[Sat Apr 18 08:58:39.822580 2026] [:error] [pid 13023:tid 13035] [client 4.223.163.152:17367] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeLXP_1e7hG8DAeABB9ULgAAAQo"]
[Sat Apr 18 08:58:40.528658 2026] [:error] [pid 34237:tid 34244] [client 4.223.163.152:17395] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeLXQBBmX4Wq5a6rxfbwjAAAAUU"]
[Sat Apr 18 08:58:41.075019 2026] [:error] [pid 9865:tid 9939] [client 4.223.163.152:17401] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeLXQazb5knECIY-C-jdXQAAAII"]
[Sat Apr 18 08:58:41.634507 2026] [:error] [pid 34237:tid 34246] [client 4.223.163.152:17370] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-vn1.php"] [unique_id "aeLXQRBmX4Wq5a6rxfbwkAAAAUc"]
[Sat Apr 18 08:58:42.262369 2026] [:error] [pid 34290:tid 34320] [client 4.223.163.152:17297] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-vn1.php"] [unique_id "aeLXQhqX6WpmmAXOBi986gAAAcE"]
[Sat Apr 18 08:58:42.835500 2026] [:error] [pid 9970:tid 9977] [client 4.223.163.152:17350] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-vn1.php"] [unique_id "aeLXQiYdRLRhVmaIMx0SUQAAAMM"]
[Sat Apr 18 08:58:43.451129 2026] [:error] [pid 9970:tid 9988] [client 4.223.163.152:17374] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-vn1.php"] [unique_id "aeLXQyYdRLRhVmaIMx0SUwAAAM4"]
[Sat Apr 18 08:58:43.986763 2026] [:error] [pid 9970:tid 9978] [client 4.223.163.152:17333] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "aeLXQyYdRLRhVmaIMx0SVgAAAMQ"]
[Sat Apr 18 08:58:44.565747 2026] [:error] [pid 9970:tid 9975] [client 4.223.163.152:2964] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "aeLXRCYdRLRhVmaIMx0SWgAAAME"]
[Sat Apr 18 08:58:45.105381 2026] [:error] [pid 34237:tid 34242] [client 4.223.163.152:17407] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "aeLXRRBmX4Wq5a6rxfbwlQAAAUM"]
[Sat Apr 18 08:58:45.706064 2026] [:error] [pid 34237:tid 34245] [client 4.223.163.152:17397] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "aeLXRRBmX4Wq5a6rxfbwlwAAAUY"]
[Sat Apr 18 08:58:46.243440 2026] [:error] [pid 9864:tid 9917] [client 4.223.163.152:17352] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aeLXRoCFeowknfXHM7lfmAAAAEs"]
[Sat Apr 18 08:58:46.812434 2026] [:error] [pid 9864:tid 9924] [client 4.223.163.152:17361] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aeLXRoCFeowknfXHM7lfmQAAAFI"]
[Sat Apr 18 08:58:47.372991 2026] [:error] [pid 34237:tid 34262] [client 4.223.163.152:17365] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aeLXRxBmX4Wq5a6rxfbwnQAAAVc"]
[Sat Apr 18 08:58:47.913149 2026] [:error] [pid 9863:tid 9890] [client 4.223.163.152:17375] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aeLXRzjjiypiFrTucbI13QAAABE"]
[Sat Apr 18 08:58:48.495914 2026] [:error] [pid 13023:tid 13027] [client 4.223.163.152:17302] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeLXSP1e7hG8DAeABB9UNgAAAQI"]
[Sat Apr 18 08:58:49.028672 2026] [:error] [pid 34288:tid 34300] [client 4.223.163.152:17396] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeLXSeTIiy__PtiLmplSPgAAAYg"]
[Sat Apr 18 08:58:49.581170 2026] [:error] [pid 9865:tid 9957] [client 4.223.163.152:17329] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeLXSazb5knECIY-C-jdaQAAAJQ"]
[Sat Apr 18 08:58:50.136099 2026] [:error] [pid 9865:tid 9960] [client 4.223.163.152:17364] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeLXSqzb5knECIY-C-jdbwAAAJc"]
[Sat Apr 18 08:58:50.659908 2026] [:error] [pid 34237:tid 34240] [client 4.223.163.152:17335] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeLXShBmX4Wq5a6rxfbwoQAAAUE"]
[Sat Apr 18 08:58:51.202343 2026] [:error] [pid 9865:tid 9938] [client 4.223.163.152:17400] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeLXS6zb5knECIY-C-jddwAAAIE"]
[Sat Apr 18 08:58:51.750723 2026] [:error] [pid 9864:tid 9929] [client 4.223.163.152:17284] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeLXS4CFeowknfXHM7lfnQAAAFc"]
[Sat Apr 18 08:58:52.416173 2026] [:error] [pid 9865:tid 9958] [client 4.223.163.152:3027] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeLXTKzb5knECIY-C-jdeQAAAJU"]
[Sat Apr 18 08:58:53.059098 2026] [:error] [pid 9865:tid 9961] [client 4.223.163.152:17298] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeLXTazb5knECIY-C-jdewAAAJg"]
[Sat Apr 18 08:58:53.656521 2026] [:error] [pid 9864:tid 9910] [client 4.223.163.152:3022] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeLXTYCFeowknfXHM7lfoQAAAEU"]
[Sat Apr 18 08:58:54.330053 2026] [:error] [pid 9864:tid 9907] [client 4.223.163.152:17405] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeLXToCFeowknfXHM7lfpgAAAEI"]
[Sat Apr 18 08:58:55.164909 2026] [:error] [pid 9970:tid 9987] [client 4.223.163.152:3014] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeLXTyYdRLRhVmaIMx0SYwAAAM0"]
[Sat Apr 18 08:58:55.832091 2026] [:error] [pid 13023:tid 13025] [client 4.223.163.152:17293] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aeLXT_1e7hG8DAeABB9URAAAAQA"]
[Sat Apr 18 08:58:56.421275 2026] [:error] [pid 9863:tid 9879] [client 4.223.163.152:3008] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aeLXUDjjiypiFrTucbI16gAAAAY"]
[Sat Apr 18 08:58:57.020569 2026] [:error] [pid 9970:tid 9981] [client 4.223.163.152:17337] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aeLXUSYdRLRhVmaIMx0SZQAAAMc"]
[Sat Apr 18 08:58:57.605777 2026] [:error] [pid 9864:tid 9927] [client 4.223.163.152:17366] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "aeLXUYCFeowknfXHM7lfrAAAAFU"]
[Sat Apr 18 08:58:58.287806 2026] [:error] [pid 34288:tid 34297] [client 4.223.163.152:3035] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aeLXUuTIiy__PtiLmplSSwAAAYU"]
[Sat Apr 18 08:58:58.997127 2026] [:error] [pid 34290:tid 34330] [client 4.223.163.152:17282] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aeLXUhqX6WpmmAXOBi98_AAAAcs"]
[Sat Apr 18 08:58:59.784086 2026] [:error] [pid 34290:tid 34334] [client 4.223.163.152:17406] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aeLXUxqX6WpmmAXOBi99AQAAAc8"]
[Sat Apr 18 08:59:00.454507 2026] [:error] [pid 13023:tid 13049] [client 4.223.163.152:3058] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "aeLXVP1e7hG8DAeABB9UTwAAARg"]
[Sat Apr 18 08:59:01.254683 2026] [:error] [pid 34237:tid 34258] [client 4.223.163.152:17306] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeLXVRBmX4Wq5a6rxfbwsAAAAVM"]
[Sat Apr 18 08:59:02.136722 2026] [:error] [pid 34237:tid 34246] [client 4.223.163.152:17361] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeLXVhBmX4Wq5a6rxfbwtQAAAUc"]
[Sat Apr 18 08:59:02.800623 2026] [:error] [pid 9865:tid 9940] [client 4.223.163.152:17357] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeLXVqzb5knECIY-C-jdiwAAAIM"]
[Sat Apr 18 08:59:03.339117 2026] [:error] [pid 34237:tid 34253] [client 4.223.163.152:17296] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeLXVxBmX4Wq5a6rxfbwtwAAAU4"]
[Sat Apr 18 08:59:03.984453 2026] [:error] [pid 13023:tid 13040] [client 4.223.163.152:17386] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aeLXV_1e7hG8DAeABB9UYwAAAQ8"]
[Sat Apr 18 08:59:04.582868 2026] [:error] [pid 13023:tid 13027] [client 4.223.163.152:17292] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aeLXWP1e7hG8DAeABB9UawAAAQI"]
[Sat Apr 18 08:59:05.195495 2026] [:error] [pid 9865:tid 9951] [client 4.223.163.152:17321] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aeLXWazb5knECIY-C-jdlwAAAI4"]
[Sat Apr 18 08:59:05.763697 2026] [:error] [pid 9865:tid 9958] [client 4.223.163.152:17281] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "aeLXWazb5knECIY-C-jdnQAAAJU"]
[Sat Apr 18 08:59:06.374529 2026] [:error] [pid 34237:tid 34256] [client 4.223.163.152:17392] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aeLXWhBmX4Wq5a6rxfbw1wAAAVE"]
[Sat Apr 18 08:59:06.921421 2026] [:error] [pid 9863:tid 9882] [client 4.223.163.152:17303] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aeLXWjjjiypiFrTucbI17AAAAAk"]
[Sat Apr 18 08:59:07.772504 2026] [:error] [pid 9970:tid 9998] [client 4.223.163.152:17317] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aeLXWyYdRLRhVmaIMx0ScwAAANg"]
[Sat Apr 18 08:59:08.660683 2026] [:error] [pid 9970:tid 9989] [client 4.223.163.152:3029] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/water.php"] [unique_id "aeLXXCYdRLRhVmaIMx0SegAAAM8"]
[Sat Apr 18 08:59:09.243707 2026] [:error] [pid 9864:tid 9919] [client 4.223.163.152:17385] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aeLXXYCFeowknfXHM7lfwQAAAE0"]
[Sat Apr 18 08:59:09.784491 2026] [:error] [pid 34237:tid 34244] [client 4.223.163.152:17404] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aeLXXRBmX4Wq5a6rxfbw3AAAAUU"]
[Sat Apr 18 08:59:10.362378 2026] [:error] [pid 34290:tid 34334] [client 4.223.163.152:17403] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aeLXXhqX6WpmmAXOBi99EAAAAc8"]
[Sat Apr 18 08:59:11.094427 2026] [:error] [pid 34237:tid 34257] [client 4.223.163.152:17393] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aeLXXxBmX4Wq5a6rxfbw3gAAAVI"]
[Sat Apr 18 08:59:11.856699 2026] [:error] [pid 9865:tid 9945] [client 4.223.163.152:17349] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aeLXX6zb5knECIY-C-jdqwAAAIg"]
[Sat Apr 18 08:59:12.766822 2026] [:error] [pid 9863:tid 9893] [client 4.223.163.152:17307] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aeLXYDjjiypiFrTucbI19wAAABQ"]
[Sat Apr 18 08:59:13.767925 2026] [:error] [pid 34237:tid 34243] [client 4.223.163.152:17291] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aeLXYRBmX4Wq5a6rxfbw5QAAAUQ"]
[Sat Apr 18 08:59:15.066979 2026] [:error] [pid 9863:tid 9886] [client 4.223.163.152:17354] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "aeLXYzjjiypiFrTucbI1-gAAAA0"]
[Sat Apr 18 08:59:16.352714 2026] [:error] [pid 13023:tid 13027] [client 4.223.163.152:17305] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aeLXZP1e7hG8DAeABB9UgwAAAQI"]
[Sat Apr 18 08:59:17.291704 2026] [:error] [pid 9865:tid 9949] [client 4.223.163.152:3032] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aeLXZazb5knECIY-C-jdtAAAAIw"]
[Sat Apr 18 08:59:18.154205 2026] [:error] [pid 34237:tid 34246] [client 4.223.163.152:17304] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aeLXZhBmX4Wq5a6rxfbw7wAAAUc"]
[Sat Apr 18 08:59:18.936464 2026] [:error] [pid 9970:tid 9985] [client 4.223.163.152:17355] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "aeLXZiYdRLRhVmaIMx0SigAAAMs"]
[Sat Apr 18 08:59:19.724161 2026] [:error] [pid 9970:tid 9979] [client 4.223.163.152:17308] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aeLXZyYdRLRhVmaIMx0SkQAAAMU"]
[Sat Apr 18 08:59:20.440697 2026] [:error] [pid 9865:tid 9949] [client 4.223.163.152:3037] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aeLXaKzb5knECIY-C-jdwwAAAIw"]
[Sat Apr 18 08:59:21.179126 2026] [:error] [pid 13023:tid 13041] [client 4.223.163.152:17376] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aeLXaf1e7hG8DAeABB9UjgAAARA"]
[Sat Apr 18 08:59:21.993415 2026] [:error] [pid 9865:tid 9956] [client 4.223.163.152:17332] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aeLXaazb5knECIY-C-jdzQAAAJM"]
[Sat Apr 18 08:59:22.699827 2026] [:error] [pid 34237:tid 34247] [client 4.223.163.152:17384] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeLXahBmX4Wq5a6rxfbw9QAAAUg"]
[Sat Apr 18 08:59:23.664867 2026] [:error] [pid 34237:tid 34257] [client 4.223.163.152:17287] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeLXaxBmX4Wq5a6rxfbw-gAAAVI"]
[Sat Apr 18 08:59:24.644598 2026] [:error] [pid 13023:tid 13045] [client 4.223.163.152:3059] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeLXbP1e7hG8DAeABB9UlAAAARQ"]
[Sat Apr 18 08:59:25.576025 2026] [:error] [pid 34288:tid 34307] [client 4.223.163.152:17356] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeLXbeTIiy__PtiLmplSnAAAAY8"]
[Sat Apr 18 08:59:26.672301 2026] [:error] [pid 13023:tid 13031] [client 4.223.163.152:17290] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "aeLXbv1e7hG8DAeABB9UnQAAAQY"]
[Sat Apr 18 08:59:27.412898 2026] [:error] [pid 34288:tid 34292] [client 4.223.163.152:3016] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oij98gy.php"] [unique_id "aeLXb-TIiy__PtiLmplSqAAAAYA"]
[Sat Apr 18 08:59:36.549043 2026] [:error] [pid 34288:tid 34292] [client 4.223.163.152:17379] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeLXeOTIiy__PtiLmplS6gAAAYA"]
[Sat Apr 18 08:59:37.080766 2026] [:error] [pid 9864:tid 9910] [client 4.223.163.152:3015] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeLXeYCFeowknfXHM7lf8QAAAEU"]
[Sat Apr 18 08:59:37.706447 2026] [:error] [pid 34290:tid 34333] [client 4.223.163.152:17294] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeLXeRqX6WpmmAXOBi99IgAAAc4"]
[Sat Apr 18 08:59:38.585262 2026] [:error] [pid 9863:tid 9877] [client 4.223.163.152:17280] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeLXejjjiypiFrTucbI2LgAAAAQ"]
[Sat Apr 18 08:59:39.269250 2026] [:error] [pid 9864:tid 9915] [client 4.223.163.152:17391] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeLXe4CFeowknfXHM7lf9AAAAEk"]
[Sat Apr 18 08:59:39.824277 2026] [:error] [pid 34288:tid 34308] [client 4.223.163.152:3041] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeLXe-TIiy__PtiLmplS-wAAAZA"]
[Sat Apr 18 08:59:40.561041 2026] [:error] [pid 13023:tid 13032] [client 4.223.163.152:17402] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeLXfP1e7hG8DAeABB9U2gAAAQc"]
[Sat Apr 18 08:59:41.193433 2026] [:error] [pid 9865:tid 9953] [client 4.223.163.152:3042] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeLXfazb5knECIY-C-jeFQAAAJA"]
[Sat Apr 18 08:59:42.164294 2026] [:error] [pid 34237:tid 34246] [client 4.223.163.152:17319] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeLXfhBmX4Wq5a6rxfbxAwAAAUc"]
[Sat Apr 18 08:59:43.070298 2026] [:error] [pid 9865:tid 9953] [client 4.223.163.152:3018] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeLXf6zb5knECIY-C-jeLQAAAJA"]
[Sat Apr 18 08:59:44.019794 2026] [:error] [pid 9864:tid 9906] [client 4.223.163.152:3067] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeLXgICFeowknfXHM7lf-AAAAEE"]
[Sat Apr 18 08:59:45.660990 2026] [:error] [pid 34288:tid 34307] [client 4.223.163.152:17325] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeLXgeTIiy__PtiLmplTEAAAAY8"]
[Sat Apr 18 08:59:46.254314 2026] [:error] [pid 13023:tid 13027] [client 4.223.163.152:17322] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeLXgv1e7hG8DAeABB9U4AAAAQI"]
[Sat Apr 18 08:59:47.085645 2026] [:error] [pid 13023:tid 13038] [client 4.223.163.152:3043] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeLXg_1e7hG8DAeABB9U4gAAAQ0"]
[Sat Apr 18 08:59:48.045743 2026] [:error] [pid 9865:tid 9938] [client 4.223.163.152:17381] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeLXhKzb5knECIY-C-jeZQAAAIE"]
[Sat Apr 18 08:59:48.764941 2026] [:error] [pid 9863:tid 9882] [client 4.223.163.152:3010] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeLXhDjjiypiFrTucbI2RAAAAAk"]
[Sat Apr 18 08:59:49.411541 2026] [:error] [pid 34237:tid 34258] [client 4.223.163.152:3009] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "aeLXhRBmX4Wq5a6rxfbxDgAAAVM"]
[Sat Apr 18 08:59:50.173409 2026] [:error] [pid 9865:tid 9937] [client 4.223.163.152:17330] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "aeLXhqzb5knECIY-C-jefQAAAIA"]
[Sat Apr 18 08:59:51.823417 2026] [:error] [pid 9865:tid 9953] [client 4.223.163.152:17339] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "aeLXh6zb5knECIY-C-jemwAAAJA"]
[Sat Apr 18 08:59:52.544989 2026] [:error] [pid 9865:tid 9958] [client 4.223.163.152:3050] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "aeLXiKzb5knECIY-C-jeqQAAAJU"]
[Sat Apr 18 08:59:54.164585 2026] [:error] [pid 34288:tid 34313] [client 4.223.163.152:3051] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeLXiuTIiy__PtiLmplTGAAAAZU"]
[Sat Apr 18 08:59:54.874498 2026] [:error] [pid 9865:tid 9939] [client 4.223.163.152:2994] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeLXiqzb5knECIY-C-jewQAAAII"]
[Sat Apr 18 08:59:56.200446 2026] [:error] [pid 13023:tid 13037] [client 4.223.163.152:3028] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeLXjP1e7hG8DAeABB9U9gAAAQw"]
[Sat Apr 18 08:59:57.033311 2026] [:error] [pid 13023:tid 13033] [client 4.223.163.152:17343] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeLXjf1e7hG8DAeABB9U-wAAAQg"]
[Sat Apr 18 08:59:57.749475 2026] [:error] [pid 9970:tid 9982] [client 4.223.163.152:3019] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "aeLXjSYdRLRhVmaIMx0S1wAAAMg"]
[Sat Apr 18 08:59:58.499165 2026] [:error] [pid 9864:tid 9920] [client 4.223.163.152:3064] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "aeLXjoCFeowknfXHM7lgCQAAAE4"]
[Sat Apr 18 08:59:59.074389 2026] [:error] [pid 34237:tid 34240] [client 4.223.163.152:17336] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "aeLXjxBmX4Wq5a6rxfbxHwAAAUE"]
[Sat Apr 18 08:59:59.740380 2026] [:error] [pid 9863:tid 9883] [client 4.223.163.152:3065] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nano.php"] [unique_id "aeLXjzjjiypiFrTucbI2VAAAAAo"]
[Sat Apr 18 09:00:00.388848 2026] [:error] [pid 9863:tid 9885] [client 4.223.163.152:3061] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeLXkDjjiypiFrTucbI2VwAAAAw"]
[Sat Apr 18 09:00:00.992452 2026] [:error] [pid 34237:tid 34244] [client 4.223.163.152:17315] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeLXkBBmX4Wq5a6rxfbxJgAAAUU"]
[Sat Apr 18 09:00:01.706561 2026] [:error] [pid 34288:tid 34298] [client 4.223.163.152:2961] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeLXkeTIiy__PtiLmplTLQAAAYY"]
[Sat Apr 18 09:00:02.288671 2026] [:error] [pid 34288:tid 34309] [client 4.223.163.152:17300] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeLXkuTIiy__PtiLmplTLgAAAZE"]
[Sat Apr 18 09:00:02.834486 2026] [:error] [pid 9863:tid 9879] [client 4.223.163.152:17309] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeLXkjjjiypiFrTucbI2XwAAAAY"]
[Sat Apr 18 09:00:03.436518 2026] [:error] [pid 9863:tid 9892] [client 4.223.163.152:3070] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeLXkzjjiypiFrTucbI2YgAAABM"]
[Sat Apr 18 09:00:04.036536 2026] [:error] [pid 9863:tid 9897] [client 4.223.163.152:2949] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeLXlDjjiypiFrTucbI2ZgAAABg"]
[Sat Apr 18 09:00:04.581160 2026] [:error] [pid 34237:tid 34257] [client 4.223.163.152:2956] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeLXlBBmX4Wq5a6rxfbxLwAAAVI"]
[Sat Apr 18 09:00:05.165272 2026] [:error] [pid 13023:tid 13040] [client 4.223.163.152:2947] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aeLXlf1e7hG8DAeABB9VEgAAAQ8"]
[Sat Apr 18 09:00:05.776515 2026] [:error] [pid 34237:tid 34262] [client 4.223.163.152:17341] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aeLXlRBmX4Wq5a6rxfbxMgAAAVc"]
[Sat Apr 18 09:00:06.331217 2026] [:error] [pid 9863:tid 9873] [client 4.223.163.152:3048] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aeLXljjjiypiFrTucbI2cwAAAAA"]
[Sat Apr 18 09:00:06.946066 2026] [:error] [pid 34290:tid 34343] [client 4.223.163.152:2975] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aeLXlhqX6WpmmAXOBi99OwAAAdg"]
[Sat Apr 18 09:00:07.765385 2026] [:error] [pid 34237:tid 34241] [client 4.223.163.152:17358] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aeLXlxBmX4Wq5a6rxfbxNwAAAUI"]
[Sat Apr 18 09:00:08.527989 2026] [:error] [pid 9865:tid 9940] [client 4.223.163.152:3055] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aeLXmKzb5knECIY-C-je-wAAAIM"]
[Sat Apr 18 09:00:09.090721 2026] [:error] [pid 9863:tid 9889] [client 4.223.163.152:17368] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aeLXmTjjiypiFrTucbI2fwAAABA"]
[Sat Apr 18 09:00:09.859010 2026] [:error] [pid 9865:tid 9941] [client 4.223.163.152:3057] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aeLXmazb5knECIY-C-jfDwAAAIQ"]
[Sat Apr 18 09:00:10.423185 2026] [:error] [pid 9865:tid 9959] [client 4.223.163.152:2984] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeLXmqzb5knECIY-C-jfFwAAAJY"]
[Sat Apr 18 09:00:11.176653 2026] [:error] [pid 34288:tid 34312] [client 4.223.163.152:2954] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeLXm-TIiy__PtiLmplTPgAAAZQ"]
[Sat Apr 18 09:00:12.037628 2026] [:error] [pid 34288:tid 34316] [client 4.223.163.152:2948] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeLXnOTIiy__PtiLmplTRQAAAZg"]
[Sat Apr 18 09:00:12.919865 2026] [:error] [pid 34288:tid 34303] [client 4.223.163.152:17285] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeLXnOTIiy__PtiLmplTSwAAAYs"]
[Sat Apr 18 09:00:13.646178 2026] [:error] [pid 34288:tid 34294] [client 4.223.163.152:2915] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeLXneTIiy__PtiLmplTUAAAAYI"]
[Sat Apr 18 09:00:14.386796 2026] [:error] [pid 34288:tid 34292] [client 4.223.163.152:2977] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeLXnuTIiy__PtiLmplTVgAAAYA"]
[Sat Apr 18 09:00:15.103115 2026] [:error] [pid 9864:tid 9912] [client 4.223.163.152:3030] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeLXn4CFeowknfXHM7lgIgAAAEY"]
[Sat Apr 18 09:00:15.782043 2026] [:error] [pid 34288:tid 34315] [client 4.223.163.152:2970] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeLXn-TIiy__PtiLmplTWQAAAZc"]
[Sat Apr 18 09:00:16.557860 2026] [:error] [pid 13023:tid 13038] [client 4.223.163.152:2895] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeLXoP1e7hG8DAeABB9VPQAAAQ0"]
[Sat Apr 18 09:00:17.104666 2026] [:error] [pid 9865:tid 9943] [client 4.223.163.152:2965] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeLXoazb5knECIY-C-jfJQAAAIY"]
[Sat Apr 18 09:00:17.694936 2026] [:error] [pid 9865:tid 9951] [client 4.223.163.152:2989] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeLXoazb5knECIY-C-jfKQAAAI4"]
[Sat Apr 18 09:00:18.238902 2026] [:error] [pid 9865:tid 9947] [client 4.223.163.152:17312] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeLXoqzb5knECIY-C-jfKgAAAIo"]
[Sat Apr 18 09:00:18.859756 2026] [:error] [pid 9865:tid 9938] [client 4.223.163.152:17390] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeLXoqzb5knECIY-C-jfLAAAAIE"]
[Sat Apr 18 09:00:19.414936 2026] [:error] [pid 9863:tid 9893] [client 4.223.163.152:3021] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeLXozjjiypiFrTucbI2jgAAABQ"]
[Sat Apr 18 09:00:19.982644 2026] [:error] [pid 34288:tid 34298] [client 4.223.163.152:3054] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeLXo-TIiy__PtiLmplTYwAAAYY"]
[Sat Apr 18 09:00:20.596826 2026] [:error] [pid 13023:tid 13036] [client 4.223.163.152:17320] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeLXpP1e7hG8DAeABB9VUQAAAQs"]
[Sat Apr 18 09:00:21.173972 2026] [:error] [pid 9865:tid 9957] [client 4.223.163.152:2969] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeLXpazb5knECIY-C-jfNwAAAJQ"]
[Sat Apr 18 09:00:21.871459 2026] [:error] [pid 34237:tid 34260] [client 4.223.163.152:3026] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeLXpRBmX4Wq5a6rxfbxTQAAAVU"]
[Sat Apr 18 09:00:22.421953 2026] [:error] [pid 9865:tid 9950] [client 4.223.163.152:3031] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeLXpqzb5knECIY-C-jfPwAAAI0"]
[Sat Apr 18 09:00:22.977850 2026] [:error] [pid 34288:tid 34298] [client 4.223.163.152:17398] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeLXpuTIiy__PtiLmplTbQAAAYY"]
[Sat Apr 18 09:00:23.756796 2026] [:error] [pid 34288:tid 34307] [client 4.223.163.152:2951] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeLXp-TIiy__PtiLmplTcgAAAY8"]
[Sat Apr 18 09:00:24.448802 2026] [:error] [pid 9865:tid 9946] [client 4.223.163.152:2986] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeLXqKzb5knECIY-C-jfUAAAAIk"]
[Sat Apr 18 09:00:25.067109 2026] [:error] [pid 9865:tid 9959] [client 4.223.163.152:17331] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeLXqazb5knECIY-C-jfVAAAAJY"]
[Sat Apr 18 09:00:25.622118 2026] [:error] [pid 34237:tid 34243] [client 4.223.163.152:17299] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeLXqRBmX4Wq5a6rxfbxVAAAAUQ"]
[Sat Apr 18 09:00:26.228460 2026] [:error] [pid 34288:tid 34313] [client 4.223.163.152:17342] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeLXquTIiy__PtiLmplTeAAAAZU"]
[Sat Apr 18 09:00:26.820695 2026] [:error] [pid 9863:tid 9892] [client 4.223.163.152:17344] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeLXqjjjiypiFrTucbI2nwAAABM"]
[Sat Apr 18 09:00:27.503973 2026] [:error] [pid 13023:tid 13036] [client 4.223.163.152:3034] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeLXq_1e7hG8DAeABB9VXwAAAQs"]
[Sat Apr 18 09:00:28.033036 2026] [:error] [pid 9865:tid 9941] [client 4.223.163.152:17340] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeLXrKzb5knECIY-C-jfWgAAAIQ"]
[Sat Apr 18 09:00:28.815786 2026] [:error] [pid 34288:tid 34316] [client 4.223.163.152:17369] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeLXrOTIiy__PtiLmplTgQAAAZg"]
[Sat Apr 18 09:00:29.443124 2026] [:error] [pid 9970:tid 9984] [client 4.223.163.152:17394] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeLXrSYdRLRhVmaIMx0S4wAAAMo"]
[Sat Apr 18 09:00:30.002785 2026] [:error] [pid 9865:tid 9956] [client 4.223.163.152:3020] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeLXrqzb5knECIY-C-jfWwAAAJM"]
[Sat Apr 18 09:00:30.864784 2026] [:error] [pid 9865:tid 9958] [client 4.223.163.152:2993] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeLXrqzb5knECIY-C-jfZQAAAJU"]
[Sat Apr 18 09:00:31.728224 2026] [:error] [pid 34288:tid 34295] [client 4.223.163.152:17288] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeLXr-TIiy__PtiLmplThQAAAYM"]
[Sat Apr 18 09:00:32.554522 2026] [:error] [pid 34290:tid 34330] [client 4.223.163.152:17283] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeLXsBqX6WpmmAXOBi99QQAAAcs"]
[Sat Apr 18 09:00:33.204126 2026] [:error] [pid 9865:tid 9956] [client 4.223.163.152:17372] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeLXsazb5knECIY-C-jfdQAAAJM"]
[Sat Apr 18 09:00:33.871760 2026] [:error] [pid 13023:tid 13038] [client 4.223.163.152:3013] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeLXsf1e7hG8DAeABB9VZgAAAQ0"]
[Sat Apr 18 09:00:34.624904 2026] [:error] [pid 9865:tid 9955] [client 4.223.163.152:17378] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeLXsqzb5knECIY-C-jffQAAAJI"]
[Sat Apr 18 09:00:35.180139 2026] [:error] [pid 9865:tid 9958] [client 4.223.163.152:2958] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeLXs6zb5knECIY-C-jfggAAAJU"]
[Sat Apr 18 09:00:35.970317 2026] [:error] [pid 34237:tid 34244] [client 4.223.163.152:2902] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeLXsxBmX4Wq5a6rxfbxcQAAAUU"]
[Sat Apr 18 09:00:45.010950 2026] [:error] [pid 9865:tid 9953] [client 4.223.163.152:17346] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeLXvazb5knECIY-C-jfugAAAJA"]
[Sat Apr 18 09:00:45.799018 2026] [:error] [pid 9865:tid 9950] [client 4.223.163.152:17326] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeLXvazb5knECIY-C-jfxgAAAI0"]
[Sat Apr 18 09:00:46.485553 2026] [:error] [pid 9865:tid 9961] [client 4.223.163.152:17295] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeLXvqzb5knECIY-C-jfzAAAAJg"]
[Sat Apr 18 09:00:47.147756 2026] [:error] [pid 9865:tid 9952] [client 4.223.163.152:2981] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeLXv6zb5knECIY-C-jf0AAAAI8"]
[Sat Apr 18 09:00:47.859405 2026] [:error] [pid 9865:tid 9945] [client 4.223.163.152:2985] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeLXv6zb5knECIY-C-jf1QAAAIg"]
[Sat Apr 18 09:00:48.481069 2026] [:error] [pid 9865:tid 9937] [client 4.223.163.152:3071] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeLXwKzb5knECIY-C-jf2QAAAIA"]
[Sat Apr 18 09:00:49.066545 2026] [:error] [pid 9864:tid 9905] [client 4.223.163.152:2940] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeLXwYCFeowknfXHM7lgUQAAAEA"]
[Sat Apr 18 09:00:49.908766 2026] [:error] [pid 34288:tid 34315] [client 4.223.163.152:2976] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeLXweTIiy__PtiLmplTnAAAAZc"]
[Sat Apr 18 09:00:50.582649 2026] [:error] [pid 34288:tid 34295] [client 4.223.163.152:17316] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeLXwuTIiy__PtiLmplToAAAAYM"]
[Sat Apr 18 09:00:51.198068 2026] [:error] [pid 34237:tid 34242] [client 4.223.163.152:17328] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeLXwxBmX4Wq5a6rxfbxjAAAAUM"]
[Sat Apr 18 09:00:51.860209 2026] [:error] [pid 34288:tid 34307] [client 4.223.163.152:17324] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeLXw-TIiy__PtiLmplTrgAAAY8"]
[Sat Apr 18 09:00:52.430375 2026] [:error] [pid 9865:tid 9952] [client 4.223.163.152:17373] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeLXxKzb5knECIY-C-jf9QAAAI8"]
[Sat Apr 18 09:00:53.085113 2026] [:error] [pid 13023:tid 13025] [client 4.223.163.152:3003] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeLXxf1e7hG8DAeABB9VgAAAAQA"]
[Sat Apr 18 09:00:53.632665 2026] [:error] [pid 34288:tid 34295] [client 4.223.163.152:2979] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeLXxeTIiy__PtiLmplTsAAAAYM"]
[Sat Apr 18 09:00:54.327342 2026] [:error] [pid 9864:tid 9907] [client 4.223.163.152:3040] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeLXxoCFeowknfXHM7lgVQAAAEI"]
[Sat Apr 18 09:00:54.893770 2026] [:error] [pid 9864:tid 9924] [client 4.223.163.152:2983] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeLXxoCFeowknfXHM7lgVgAAAFI"]
[Sat Apr 18 09:00:55.472185 2026] [:error] [pid 34290:tid 34337] [client 4.223.163.152:17347] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeLXxxqX6WpmmAXOBi99UwAAAdI"]
[Sat Apr 18 09:00:57.173372 2026] [:error] [pid 34290:tid 34343] [client 4.223.163.152:2900] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeLXyRqX6WpmmAXOBi99VAAAAdg"]
[Sat Apr 18 09:00:57.949497 2026] [:error] [pid 13023:tid 13043] [client 4.223.163.152:17351] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeLXyf1e7hG8DAeABB9VhAAAARI"]
[Sat Apr 18 09:00:58.576045 2026] [:error] [pid 9865:tid 9958] [client 4.223.163.152:3047] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeLXyqzb5knECIY-C-jgEAAAAJU"]
[Sat Apr 18 09:00:59.698914 2026] [:error] [pid 13023:tid 13038] [client 4.223.163.152:3011] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeLXy_1e7hG8DAeABB9VigAAAQ0"]
[Sat Apr 18 09:01:00.555174 2026] [:error] [pid 9865:tid 9961] [client 4.223.163.152:2884] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeLXzKzb5knECIY-C-jgFwAAAJg"]
[Sat Apr 18 09:01:01.250245 2026] [:error] [pid 34288:tid 34310] [client 4.223.163.152:3038] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeLXzeTIiy__PtiLmplTwwAAAZI"]
[Sat Apr 18 09:01:01.912264 2026] [:error] [pid 34237:tid 34240] [client 4.223.163.152:17388] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeLXzRBmX4Wq5a6rxfbxmAAAAUE"]
[Sat Apr 18 09:01:02.640607 2026] [:error] [pid 9865:tid 9957] [client 4.223.163.152:3023] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeLXzqzb5knECIY-C-jgIwAAAJQ"]
[Sat Apr 18 09:01:03.395847 2026] [:error] [pid 34288:tid 34298] [client 4.223.163.152:2955] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeLXz-TIiy__PtiLmplTxwAAAYY"]
[Sat Apr 18 09:01:04.004362 2026] [:error] [pid 34288:tid 34297] [client 4.223.163.152:2997] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeLX0OTIiy__PtiLmplTyQAAAYU"]
[Sat Apr 18 09:01:04.554019 2026] [:error] [pid 9865:tid 9947] [client 4.223.163.152:2911] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeLX0Kzb5knECIY-C-jgKgAAAIo"]
[Sat Apr 18 09:01:05.173112 2026] [:error] [pid 34237:tid 34244] [client 4.223.163.152:2909] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeLX0RBmX4Wq5a6rxfbxnQAAAUU"]
[Sat Apr 18 09:01:06.140553 2026] [:error] [pid 34237:tid 34259] [client 4.223.163.152:3069] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeLX0hBmX4Wq5a6rxfbxogAAAVQ"]
[Sat Apr 18 09:01:07.116846 2026] [:error] [pid 34237:tid 34243] [client 4.223.163.152:17289] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeLX0xBmX4Wq5a6rxfbxpQAAAUQ"]
[Sat Apr 18 09:01:08.444982 2026] [:error] [pid 9863:tid 9877] [client 4.223.163.152:3049] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeLX1DjjiypiFrTucbI21wAAAAQ"]
[Sat Apr 18 09:01:09.385007 2026] [:error] [pid 9863:tid 9892] [client 4.223.163.152:2897] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeLX1TjjiypiFrTucbI22AAAABM"]
[Sat Apr 18 09:01:10.519504 2026] [:error] [pid 9865:tid 9938] [client 4.223.163.152:17327] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeLX1qzb5knECIY-C-jgMgAAAIE"]
[Sat Apr 18 09:01:11.175657 2026] [:error] [pid 34288:tid 34313] [client 4.223.163.152:2925] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeLX1-TIiy__PtiLmplT2wAAAZU"]
[Sat Apr 18 09:01:11.975604 2026] [:error] [pid 34288:tid 34309] [client 4.223.163.152:2996] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeLX1-TIiy__PtiLmplT3QAAAZE"]
[Sat Apr 18 09:01:13.062057 2026] [:error] [pid 34237:tid 34262] [client 4.223.163.152:2968] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeLX2RBmX4Wq5a6rxfbxvgAAAVc"]
[Sat Apr 18 09:01:14.016120 2026] [:error] [pid 13023:tid 13031] [client 4.223.163.152:3063] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeLX2v1e7hG8DAeABB9VmAAAAQY"]
[Sat Apr 18 09:01:14.897865 2026] [:error] [pid 13023:tid 13029] [client 4.223.163.152:3063] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeLX2v1e7hG8DAeABB9VmwAAAQQ"]
[Sat Apr 18 09:01:15.586538 2026] [:error] [pid 34237:tid 34256] [client 4.223.163.152:3025] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeLX2xBmX4Wq5a6rxfbxwgAAAVE"]
[Sat Apr 18 09:01:16.699339 2026] [:error] [pid 34288:tid 34305] [client 4.223.163.152:3033] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLX3OTIiy__PtiLmplUCgAAAY0"]
[Sat Apr 18 09:01:17.657756 2026] [:error] [pid 34237:tid 34243] [client 4.223.163.152:2959] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLX3RBmX4Wq5a6rxfbxxgAAAUQ"]
[Sat Apr 18 09:01:18.388150 2026] [:error] [pid 9863:tid 9873] [client 4.223.163.152:2882] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLX3jjjiypiFrTucbI24AAAAAA"]
[Sat Apr 18 09:01:19.252818 2026] [:error] [pid 34237:tid 34251] [client 4.223.163.152:2823] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeLX3xBmX4Wq5a6rxfbx0gAAAUw"]
[Sat Apr 18 09:01:20.267163 2026] [:error] [pid 9970:tid 9983] [client 4.223.163.152:2908] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "aeLX4CYdRLRhVmaIMx0TCQAAAMk"]
[Sat Apr 18 09:01:21.122904 2026] [:error] [pid 9863:tid 9885] [client 4.223.163.152:17371] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "aeLX4TjjiypiFrTucbI25QAAAAw"]
[Sat Apr 18 09:01:21.955254 2026] [:error] [pid 9863:tid 9876] [client 4.223.163.152:2952] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "aeLX4TjjiypiFrTucbI26gAAAAM"]
[Sat Apr 18 09:01:22.670304 2026] [:error] [pid 9863:tid 9882] [client 4.223.163.152:2982] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "aeLX4jjjiypiFrTucbI27gAAAAk"]
[Sat Apr 18 09:01:23.248263 2026] [:error] [pid 34290:tid 34326] [client 4.223.163.152:2896] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeLX4xqX6WpmmAXOBi99XgAAAcc"]
[Sat Apr 18 09:01:23.928527 2026] [:error] [pid 13023:tid 13038] [client 4.223.163.152:17318] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeLX4_1e7hG8DAeABB9VtQAAAQ0"]
[Sat Apr 18 09:01:25.120542 2026] [:error] [pid 13023:tid 13032] [client 4.223.163.152:2924] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeLX5f1e7hG8DAeABB9VuAAAAQc"]
[Sat Apr 18 09:01:26.087589 2026] [:error] [pid 9863:tid 9877] [client 4.223.163.152:2894] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeLX5jjjiypiFrTucbI29gAAAAQ"]
[Sat Apr 18 09:01:27.040066 2026] [:error] [pid 9864:tid 9920] [client 4.223.163.152:3062] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeLX54CFeowknfXHM7lgbwAAAE4"]
[Sat Apr 18 09:01:27.673077 2026] [:error] [pid 9864:tid 9914] [client 4.223.163.152:2999] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeLX54CFeowknfXHM7lgcQAAAEg"]
[Sat Apr 18 09:01:28.248367 2026] [:error] [pid 9970:tid 9977] [client 4.223.163.152:2880] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeLX6CYdRLRhVmaIMx0TEwAAAMM"]
[Sat Apr 18 09:01:28.880125 2026] [:error] [pid 9863:tid 9878] [client 4.223.163.152:3039] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeLX6DjjiypiFrTucbI2_QAAAAU"]
[Sat Apr 18 09:01:29.630890 2026] [:error] [pid 9970:tid 9986] [client 4.223.163.152:17334] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeLX6SYdRLRhVmaIMx0TGQAAAMw"]
[Sat Apr 18 09:01:30.162495 2026] [:error] [pid 13023:tid 13030] [client 4.223.163.152:17313] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeLX6v1e7hG8DAeABB9VwgAAAQU"]
[Sat Apr 18 09:01:30.720580 2026] [:error] [pid 34288:tid 34306] [client 4.223.163.152:2912] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeLX6uTIiy__PtiLmplUJgAAAY4"]
[Sat Apr 18 09:01:31.486506 2026] [:error] [pid 9865:tid 9960] [client 4.223.163.152:2934] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeLX66zb5knECIY-C-jgQgAAAJc"]
[Sat Apr 18 09:01:32.057931 2026] [:error] [pid 9865:tid 9939] [client 4.223.163.152:17314] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeLX7Kzb5knECIY-C-jgRAAAAII"]
[Sat Apr 18 09:01:32.631690 2026] [:error] [pid 9865:tid 9943] [client 4.223.163.152:2921] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeLX7Kzb5knECIY-C-jgSgAAAIY"]
[Sat Apr 18 09:01:33.227115 2026] [:error] [pid 9865:tid 9942] [client 4.223.163.152:2938] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeLX7azb5knECIY-C-jgTwAAAIU"]
[Sat Apr 18 09:01:33.810483 2026] [:error] [pid 9865:tid 9939] [client 4.223.163.152:17338] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeLX7azb5knECIY-C-jgVQAAAII"]
[Sat Apr 18 09:01:34.419861 2026] [:error] [pid 9865:tid 9956] [client 4.223.163.152:2904] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeLX7qzb5knECIY-C-jgWwAAAJM"]
[Sat Apr 18 09:01:35.089020 2026] [:error] [pid 34290:tid 34320] [client 4.223.163.152:17353] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeLX7xqX6WpmmAXOBi99YgAAAcE"]
[Sat Apr 18 09:01:35.749729 2026] [:error] [pid 9863:tid 9878] [client 4.223.163.152:2889] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeLX7zjjiypiFrTucbI3BgAAAAU"]
[Sat Apr 18 09:01:36.385172 2026] [:error] [pid 34288:tid 34300] [client 4.223.163.152:2926] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeLX8OTIiy__PtiLmplUKAAAAYg"]
[Sat Apr 18 09:01:37.074182 2026] [:error] [pid 34288:tid 34301] [client 4.223.163.152:3000] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeLX8eTIiy__PtiLmplUKgAAAYk"]
[Sat Apr 18 09:01:37.628287 2026] [:error] [pid 9865:tid 9953] [client 4.223.163.152:2816] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeLX8azb5knECIY-C-jgcAAAAJA"]
[Sat Apr 18 09:01:38.170039 2026] [:error] [pid 9865:tid 9942] [client 4.223.163.152:2962] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeLX8qzb5knECIY-C-jgdAAAAIU"]
[Sat Apr 18 09:01:38.875816 2026] [:error] [pid 9863:tid 9879] [client 4.223.163.152:2916] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeLX8jjjiypiFrTucbI3CQAAAAY"]
[Sat Apr 18 09:01:39.640865 2026] [:error] [pid 13023:tid 13037] [client 4.223.163.152:2995] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeLX8_1e7hG8DAeABB9VxwAAAQw"]
[Sat Apr 18 09:01:40.245442 2026] [:error] [pid 34288:tid 34295] [client 4.223.163.152:2963] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeLX9OTIiy__PtiLmplUNQAAAYM"]
[Sat Apr 18 09:01:40.853317 2026] [:error] [pid 9865:tid 9959] [client 4.223.163.152:3024] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeLX9Kzb5knECIY-C-jgfgAAAJY"]
[Sat Apr 18 09:01:41.480795 2026] [:error] [pid 34288:tid 34294] [client 4.223.163.152:2912] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeLX9eTIiy__PtiLmplUOwAAAYI"]
[Sat Apr 18 09:01:42.087111 2026] [:error] [pid 9865:tid 9948] [client 4.223.163.152:2966] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aeLX9qzb5knECIY-C-jgggAAAIs"]
[Sat Apr 18 09:01:42.759144 2026] [:error] [pid 9865:tid 9939] [client 4.223.163.152:2944] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aeLX9qzb5knECIY-C-jghwAAAII"]
[Sat Apr 18 09:01:43.646521 2026] [:error] [pid 34237:tid 34254] [client 4.223.163.152:2886] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "aeLX9xBmX4Wq5a6rxfbyEQAAAU8"]
[Sat Apr 18 09:01:51.911859 2026] [:error] [pid 9865:tid 9953] [client 4.223.163.152:3036] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeLX_6zb5knECIY-C-jgvwAAAJA"]
[Sat Apr 18 09:01:53.639530 2026] [:error] [pid 13023:tid 13043] [client 4.223.163.152:2874] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeLYAf1e7hG8DAeABB9V6QAAARI"]
[Sat Apr 18 09:01:54.698726 2026] [:error] [pid 9863:tid 9873] [client 4.223.163.152:2990] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeLYAjjjiypiFrTucbI3FAAAAAA"]
[Sat Apr 18 09:01:55.652874 2026] [:error] [pid 9970:tid 9977] [client 4.223.163.152:2987] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeLYAyYdRLRhVmaIMx0TKwAAAMM"]
[Sat Apr 18 09:01:56.286929 2026] [:error] [pid 34288:tid 34300] [client 4.223.163.152:2887] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeLYBOTIiy__PtiLmplUUAAAAYg"]
[Sat Apr 18 09:01:57.195764 2026] [:error] [pid 34288:tid 34315] [client 4.223.163.152:17323] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeLYBeTIiy__PtiLmplUUwAAAZc"]
[Sat Apr 18 09:01:57.875324 2026] [:error] [pid 34290:tid 34327] [client 4.223.163.152:2898] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeLYBRqX6WpmmAXOBi99bAAAAcg"]
[Sat Apr 18 09:01:58.702525 2026] [:error] [pid 34288:tid 34303] [client 4.223.163.152:2932] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeLYBuTIiy__PtiLmplUVwAAAYs"]
[Sat Apr 18 09:01:59.452674 2026] [:error] [pid 9865:tid 9947] [client 4.223.163.152:2953] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeLYB6zb5knECIY-C-jg0AAAAIo"]
[Sat Apr 18 09:02:00.339044 2026] [:error] [pid 9865:tid 9954] [client 4.223.163.152:2991] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeLYCKzb5knECIY-C-jg2AAAAJE"]
[Sat Apr 18 09:02:01.313439 2026] [:error] [pid 9865:tid 9945] [client 4.223.163.152:2892] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeLYCazb5knECIY-C-jg4wAAAIg"]
[Sat Apr 18 09:02:02.067799 2026] [:error] [pid 34288:tid 34299] [client 4.223.163.152:2899] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeLYCuTIiy__PtiLmplUXgAAAYc"]
[Sat Apr 18 09:02:03.687164 2026] [:error] [pid 9865:tid 9955] [client 4.223.163.152:3006] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeLYC6zb5knECIY-C-jg9QAAAJI"]
[Sat Apr 18 09:02:04.557229 2026] [:error] [pid 9865:tid 9937] [client 4.223.163.152:2839] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeLYDKzb5knECIY-C-jg_gAAAIA"]
[Sat Apr 18 09:02:05.369215 2026] [:error] [pid 13023:tid 13029] [client 4.223.163.152:2824] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeLYDf1e7hG8DAeABB9V-gAAAQQ"]
[Sat Apr 18 09:02:06.235027 2026] [:error] [pid 13023:tid 13037] [client 4.223.163.152:3046] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeLYDv1e7hG8DAeABB9V_wAAAQw"]
[Sat Apr 18 09:02:06.972670 2026] [:error] [pid 9865:tid 9957] [client 4.223.163.152:2903] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeLYDqzb5knECIY-C-jhCgAAAJQ"]
[Sat Apr 18 09:02:08.956162 2026] [:error] [pid 34237:tid 34254] [client 4.223.163.152:2861] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeLYEBBmX4Wq5a6rxfbyJwAAAU8"]
[Sat Apr 18 09:02:09.566816 2026] [:error] [pid 9863:tid 9897] [client 4.223.163.152:17387] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeLYETjjiypiFrTucbI3GQAAABg"]
[Sat Apr 18 09:02:10.173633 2026] [:error] [pid 34237:tid 34261] [client 4.223.163.152:2913] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeLYEhBmX4Wq5a6rxfbyKgAAAVY"]
[Sat Apr 18 09:02:10.860894 2026] [:error] [pid 34288:tid 34292] [client 4.223.163.152:3044] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeLYEuTIiy__PtiLmplUgAAAAYA"]
[Sat Apr 18 09:02:11.535866 2026] [:error] [pid 34290:tid 34338] [client 4.223.163.152:2919] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeLYExqX6WpmmAXOBi99dwAAAdM"]
[Sat Apr 18 09:02:12.179608 2026] [:error] [pid 13023:tid 13026] [client 4.223.163.152:2858] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeLYFP1e7hG8DAeABB9WGwAAAQE"]
[Sat Apr 18 09:02:12.908595 2026] [:error] [pid 34288:tid 34302] [client 4.223.163.152:2967] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeLYFOTIiy__PtiLmplUhwAAAYo"]
[Sat Apr 18 09:02:13.480011 2026] [:error] [pid 34288:tid 34307] [client 4.223.163.152:2837] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeLYFeTIiy__PtiLmplUjAAAAY8"]
[Sat Apr 18 09:02:14.118309 2026] [:error] [pid 9863:tid 9895] [client 4.223.163.152:2973] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeLYFjjjiypiFrTucbI3IQAAABY"]
[Sat Apr 18 09:02:14.745125 2026] [:error] [pid 9864:tid 9923] [client 4.223.163.152:2905] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeLYFoCFeowknfXHM7lgigAAAFE"]
[Sat Apr 18 09:02:15.722083 2026] [:error] [pid 9863:tid 9893] [client 4.223.163.152:2910] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeLYFzjjiypiFrTucbI3JQAAABQ"]
[Sat Apr 18 09:02:16.426457 2026] [:error] [pid 34237:tid 34253] [client 4.223.163.152:2988] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeLYGBBmX4Wq5a6rxfbyMQAAAU4"]
[Sat Apr 18 09:02:17.091745 2026] [:error] [pid 13023:tid 13032] [client 4.223.163.152:2857] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeLYGf1e7hG8DAeABB9WIAAAAQc"]
[Sat Apr 18 09:02:17.671673 2026] [:error] [pid 9863:tid 9882] [client 4.223.163.152:2957] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeLYGTjjiypiFrTucbI3LAAAAAk"]
[Sat Apr 18 09:02:18.226945 2026] [:error] [pid 13023:tid 13036] [client 4.223.163.152:3045] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeLYGv1e7hG8DAeABB9WKAAAAQs"]
[Sat Apr 18 09:02:18.810708 2026] [:error] [pid 13023:tid 13041] [client 4.223.163.152:2980] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeLYGv1e7hG8DAeABB9WLQAAARA"]
[Sat Apr 18 09:02:19.397257 2026] [:error] [pid 13023:tid 13046] [client 4.223.163.152:2841] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeLYG_1e7hG8DAeABB9WMAAAARU"]
[Sat Apr 18 09:02:19.951819 2026] [:error] [pid 13023:tid 13039] [client 4.223.163.152:2795] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeLYG_1e7hG8DAeABB9WNAAAAQ4"]
[Sat Apr 18 09:02:20.656943 2026] [:error] [pid 9865:tid 9960] [client 4.223.163.152:2841] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeLYHKzb5knECIY-C-jhGAAAAJc"]
[Sat Apr 18 09:02:21.331987 2026] [:error] [pid 9865:tid 9961] [client 4.223.163.152:17359] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeLYHazb5knECIY-C-jhGgAAAJg"]
[Sat Apr 18 09:02:21.935720 2026] [:error] [pid 9865:tid 9937] [client 4.223.163.152:2942] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeLYHazb5knECIY-C-jhHgAAAIA"]
[Sat Apr 18 09:02:22.777314 2026] [:error] [pid 34237:tid 34252] [client 4.223.163.152:2891] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeLYHhBmX4Wq5a6rxfbyQAAAAU0"]
[Sat Apr 18 09:02:24.127819 2026] [:error] [pid 9865:tid 9943] [client 4.223.163.152:2923] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeLYIKzb5knECIY-C-jhJgAAAIY"]
[Sat Apr 18 09:02:24.764592 2026] [:error] [pid 9864:tid 9930] [client 4.223.163.152:2822] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aeLYIICFeowknfXHM7lgkwAAAFg"]
[Sat Apr 18 09:02:25.384924 2026] [:error] [pid 13023:tid 13045] [client 4.223.163.152:2848] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aeLYIf1e7hG8DAeABB9WPwAAARQ"]
[Sat Apr 18 09:02:26.017971 2026] [:error] [pid 9865:tid 9954] [client 4.223.163.152:2881] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aeLYIqzb5knECIY-C-jhNAAAAJE"]
[Sat Apr 18 09:02:26.650227 2026] [:error] [pid 9865:tid 9953] [client 4.223.163.152:2922] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aeLYIqzb5knECIY-C-jhNwAAAJA"]
[Sat Apr 18 09:02:27.371541 2026] [:error] [pid 34288:tid 34306] [client 4.223.163.152:2791] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeLYI-TIiy__PtiLmplUmQAAAY4"]
[Sat Apr 18 09:02:28.207712 2026] [:error] [pid 9865:tid 9943] [client 4.223.163.152:2936] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeLYJKzb5knECIY-C-jhPwAAAIY"]
[Sat Apr 18 09:02:28.780629 2026] [:error] [pid 34288:tid 34307] [client 4.223.163.152:2941] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeLYJOTIiy__PtiLmplUngAAAY8"]
[Sat Apr 18 09:02:29.419723 2026] [:error] [pid 34288:tid 34308] [client 4.223.163.152:2907] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeLYJeTIiy__PtiLmplUogAAAZA"]
[Sat Apr 18 09:02:30.139763 2026] [:error] [pid 34288:tid 34302] [client 4.223.163.152:2960] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeLYJuTIiy__PtiLmplUqwAAAYo"]
[Sat Apr 18 09:02:30.932447 2026] [:error] [pid 13023:tid 13049] [client 4.223.163.152:2978] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeLYJv1e7hG8DAeABB9WRQAAARg"]
[Sat Apr 18 09:02:31.807174 2026] [:error] [pid 34288:tid 34292] [client 4.223.163.152:2914] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeLYJ-TIiy__PtiLmplUwwAAAYA"]
[Sat Apr 18 09:02:32.879599 2026] [:error] [pid 9970:tid 9998] [client 4.223.163.152:2855] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeLYKCYdRLRhVmaIMx0TgwAAANg"]
[Sat Apr 18 09:02:33.703244 2026] [:error] [pid 9865:tid 9946] [client 4.223.163.152:2998] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeLYKazb5knECIY-C-jhWgAAAIk"]
[Sat Apr 18 09:02:34.350498 2026] [:error] [pid 9863:tid 9889] [client 4.223.163.152:2835] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeLYKjjjiypiFrTucbI3RQAAABA"]
[Sat Apr 18 09:02:35.064968 2026] [:error] [pid 34288:tid 34313] [client 4.223.163.152:2972] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeLYK-TIiy__PtiLmplUywAAAZU"]
[Sat Apr 18 09:02:35.786847 2026] [:error] [pid 9863:tid 9876] [client 4.223.163.152:3012] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeLYKzjjiypiFrTucbI3RwAAAAM"]
[Sat Apr 18 09:02:36.627394 2026] [:error] [pid 13023:tid 13039] [client 4.223.163.152:2992] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeLYLP1e7hG8DAeABB9WSQAAAQ4"]
[Sat Apr 18 09:02:37.166270 2026] [:error] [pid 34237:tid 34258] [client 4.223.163.152:3055] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeLYLRBmX4Wq5a6rxfbyTgAAAVM"]
[Sat Apr 18 09:02:38.013158 2026] [:error] [pid 9863:tid 9896] [client 4.223.163.152:2844] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeLYLjjjiypiFrTucbI3UgAAABc"]
[Sat Apr 18 09:02:38.770829 2026] [:error] [pid 9863:tid 9889] [client 4.223.163.152:2827] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeLYLjjjiypiFrTucbI3VgAAABA"]
[Sat Apr 18 09:02:39.456729 2026] [:error] [pid 9863:tid 9895] [client 4.223.163.152:3001] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeLYLzjjiypiFrTucbI3WQAAABY"]
[Sat Apr 18 09:02:40.087564 2026] [:error] [pid 34288:tid 34296] [client 4.223.163.152:3002] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeLYMOTIiy__PtiLmplU2QAAAYQ"]
[Sat Apr 18 09:02:40.663081 2026] [:error] [pid 9863:tid 9885] [client 4.223.163.152:2946] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeLYMDjjiypiFrTucbI3XQAAAAw"]
[Sat Apr 18 09:02:41.240526 2026] [:error] [pid 9865:tid 9951] [client 4.223.163.152:2836] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeLYMazb5knECIY-C-jhZwAAAI4"]
[Sat Apr 18 09:02:41.792493 2026] [:error] [pid 9970:tid 9997] [client 4.223.163.152:2769] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeLYMSYdRLRhVmaIMx0TiAAAANc"]
[Sat Apr 18 09:02:42.362870 2026] [:error] [pid 13023:tid 13031] [client 4.223.163.152:2860] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeLYMv1e7hG8DAeABB9WTAAAAQY"]
[Sat Apr 18 09:02:42.973937 2026] [:error] [pid 34288:tid 34300] [client 4.223.163.152:3068] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeLYMuTIiy__PtiLmplU4AAAAYg"]
[Sat Apr 18 09:02:43.596371 2026] [:error] [pid 13023:tid 13032] [client 4.223.163.152:17394] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeLYM_1e7hG8DAeABB9WUAAAAQc"]
[Sat Apr 18 09:02:44.286397 2026] [:error] [pid 34290:tid 34339] [client 4.223.163.152:2774] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeLYNBqX6WpmmAXOBi99gAAAAdQ"]
[Sat Apr 18 09:02:44.829451 2026] [:error] [pid 9970:tid 9987] [client 4.223.163.152:17362] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeLYNCYdRLRhVmaIMx0TigAAAM0"]
[Sat Apr 18 09:02:45.370966 2026] [:error] [pid 13023:tid 13034] [client 4.223.163.152:3056] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeLYNf1e7hG8DAeABB9WVAAAAQk"]
[Sat Apr 18 09:02:45.945784 2026] [:error] [pid 9865:tid 9946] [client 4.223.163.152:3005] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeLYNazb5knECIY-C-jhbgAAAIk"]
[Sat Apr 18 09:02:46.572992 2026] [:error] [pid 9864:tid 9926] [client 4.223.163.152:2768] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeLYNoCFeowknfXHM7lgnQAAAFQ"]
[Sat Apr 18 09:02:47.221448 2026] [:error] [pid 13023:tid 13030] [client 4.223.163.152:2906] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeLYN_1e7hG8DAeABB9WVwAAAQU"]
[Sat Apr 18 09:02:47.936424 2026] [:error] [pid 9864:tid 9925] [client 4.223.163.152:2918] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeLYN4CFeowknfXHM7lgpwAAAFM"]
[Sat Apr 18 09:02:48.676629 2026] [:error] [pid 9864:tid 9921] [client 4.223.163.152:2876] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeLYOICFeowknfXHM7lgqgAAAE8"]
[Sat Apr 18 09:02:49.510947 2026] [:error] [pid 34290:tid 34323] [client 4.223.163.152:2901] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeLYORqX6WpmmAXOBi99iAAAAcQ"]
[Sat Apr 18 09:02:50.129948 2026] [:error] [pid 13023:tid 13028] [client 4.223.163.152:2759] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeLYOv1e7hG8DAeABB9WYQAAAQM"]
[Sat Apr 18 09:02:50.734297 2026] [:error] [pid 13023:tid 13035] [client 4.223.163.152:2850] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeLYOv1e7hG8DAeABB9WZgAAAQo"]
[Sat Apr 18 09:02:52.874403 2026] [:error] [pid 34237:tid 34263] [client 4.223.163.152:3066] [client 4.223.163.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeLYPBBmX4Wq5a6rxfbyYQAAAVg"]
[Sat Apr 18 09:02:59.108148 2026] [:error] [pid 9865:tid 9938] [client 4.223.163.152:2854] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeLYQ6zb5knECIY-C-jhrQAAAIE"]
[Sat Apr 18 09:03:00.272021 2026] [:error] [pid 34290:tid 34325] [client 4.223.163.152:2762] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeLYRBqX6WpmmAXOBi99kQAAAcY"]
[Sat Apr 18 09:03:01.033100 2026] [:error] [pid 34290:tid 34328] [client 4.223.163.152:2755] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeLYRRqX6WpmmAXOBi99mAAAAck"]
[Sat Apr 18 09:03:01.730746 2026] [:error] [pid 9863:tid 9881] [client 4.223.163.152:2840] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeLYRTjjiypiFrTucbI3bgAAAAg"]
[Sat Apr 18 09:03:02.329855 2026] [:error] [pid 9865:tid 9959] [client 4.223.163.152:2849] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeLYRqzb5knECIY-C-jhuQAAAJY"]
[Sat Apr 18 09:03:03.012000 2026] [:error] [pid 34237:tid 34259] [client 4.223.163.152:2819] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeLYRxBmX4Wq5a6rxfbyZgAAAVQ"]
[Sat Apr 18 09:03:03.644156 2026] [:error] [pid 9863:tid 9887] [client 4.223.163.152:2929] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeLYRzjjiypiFrTucbI3dQAAAA4"]
[Sat Apr 18 09:03:04.391865 2026] [:error] [pid 34290:tid 34333] [client 4.223.163.152:2828] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeLYSBqX6WpmmAXOBi99mgAAAc4"]
[Sat Apr 18 09:03:05.186313 2026] [:error] [pid 34237:tid 34256] [client 4.223.163.152:2821] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeLYSRBmX4Wq5a6rxfbybQAAAVE"]
[Sat Apr 18 09:03:05.851681 2026] [:error] [pid 9970:tid 9988] [client 4.223.163.152:2930] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeLYSSYdRLRhVmaIMx0TpQAAAM4"]
[Sat Apr 18 09:03:06.580792 2026] [:error] [pid 34288:tid 34311] [client 4.223.163.152:3007] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeLYSuTIiy__PtiLmplU9QAAAZM"]
[Sat Apr 18 09:03:07.813357 2026] [:error] [pid 9863:tid 9882] [client 4.223.163.152:2783] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeLYSzjjiypiFrTucbI3egAAAAk"]
[Sat Apr 18 09:03:08.799474 2026] [:error] [pid 9863:tid 9884] [client 4.223.163.152:2818] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeLYTDjjiypiFrTucbI3fgAAAAs"]
[Sat Apr 18 09:03:10.006194 2026] [:error] [pid 9863:tid 9880] [client 4.223.163.152:2864] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeLYTjjjiypiFrTucbI3gAAAAAc"]
[Sat Apr 18 09:03:10.910894 2026] [:error] [pid 9865:tid 9961] [client 4.223.163.152:2878] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeLYTqzb5knECIY-C-jh2wAAAJg"]
[Sat Apr 18 09:03:11.580805 2026] [:error] [pid 9864:tid 9908] [client 4.223.163.152:2885] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeLYT4CFeowknfXHM7lgsgAAAEM"]
[Sat Apr 18 09:03:12.255031 2026] [:error] [pid 9864:tid 9910] [client 4.223.163.152:2826] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aeLYUICFeowknfXHM7lgtAAAAEU"]
[Sat Apr 18 09:03:13.080526 2026] [:error] [pid 34290:tid 34331] [client 4.223.163.152:2862] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aeLYURqX6WpmmAXOBi99pgAAAcw"]
[Sat Apr 18 09:03:13.668409 2026] [:error] [pid 34237:tid 34253] [client 4.223.163.152:2843] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aeLYURBmX4Wq5a6rxfbyfgAAAU4"]
[Sat Apr 18 09:03:14.416579 2026] [:error] [pid 13023:tid 13025] [client 4.223.163.152:2782] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aeLYUv1e7hG8DAeABB9WggAAAQA"]
[Sat Apr 18 09:03:15.302901 2026] [:error] [pid 9865:tid 9938] [client 4.223.163.152:2773] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeLYU6zb5knECIY-C-jh4wAAAIE"]
[Sat Apr 18 09:03:15.958122 2026] [:error] [pid 9865:tid 9954] [client 4.223.163.152:2825] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeLYU6zb5knECIY-C-jh5wAAAJE"]
[Sat Apr 18 09:03:16.803210 2026] [:error] [pid 9863:tid 9891] [client 4.223.163.152:2796] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeLYVDjjiypiFrTucbI3iAAAABI"]
[Sat Apr 18 09:03:17.645375 2026] [:error] [pid 9863:tid 9875] [client 4.223.163.152:2787] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeLYVTjjiypiFrTucbI3jAAAAAI"]
[Sat Apr 18 09:03:18.345624 2026] [:error] [pid 13023:tid 13025] [client 4.223.163.152:2845] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aeLYVv1e7hG8DAeABB9WkgAAAQA"]
[Sat Apr 18 09:03:19.011301 2026] [:error] [pid 9865:tid 9938] [client 4.223.163.152:2830] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aeLYV6zb5knECIY-C-jh7QAAAIE"]
[Sat Apr 18 09:03:19.808840 2026] [:error] [pid 34290:tid 34339] [client 4.223.163.152:2856] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aeLYVxqX6WpmmAXOBi99tgAAAdQ"]
[Sat Apr 18 09:03:20.342769 2026] [:error] [pid 34237:tid 34260] [client 4.223.163.152:3017] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aeLYWBBmX4Wq5a6rxfbyjwAAAVU"]
[Sat Apr 18 09:03:21.229693 2026] [:error] [pid 9863:tid 9896] [client 4.223.163.152:2754] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aeLYWTjjiypiFrTucbI3jQAAABc"]
[Sat Apr 18 09:03:21.837935 2026] [:error] [pid 34237:tid 34248] [client 4.223.163.152:2775] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aeLYWRBmX4Wq5a6rxfbylQAAAUk"]
[Sat Apr 18 09:03:22.792269 2026] [:error] [pid 13023:tid 13040] [client 4.223.163.152:2943] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aeLYWv1e7hG8DAeABB9WnQAAAQ8"]
[Sat Apr 18 09:03:23.814908 2026] [:error] [pid 13023:tid 13030] [client 4.223.163.152:2928] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aeLYW_1e7hG8DAeABB9WoQAAAQU"]
[Sat Apr 18 09:03:25.207552 2026] [:error] [pid 13023:tid 13049] [client 4.223.163.152:2743] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aeLYXf1e7hG8DAeABB9WogAAARg"]
[Sat Apr 18 09:03:25.935634 2026] [:error] [pid 9865:tid 9957] [client 4.223.163.152:2931] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aeLYXazb5knECIY-C-jh8gAAAJQ"]
[Sat Apr 18 09:03:26.889901 2026] [:error] [pid 34237:tid 34252] [client 4.223.163.152:3052] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aeLYXhBmX4Wq5a6rxfbyogAAAU0"]
[Sat Apr 18 09:03:27.719106 2026] [:error] [pid 13023:tid 13038] [client 4.223.163.152:17286] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aeLYX_1e7hG8DAeABB9WpgAAAQ0"]
[Sat Apr 18 09:03:28.441073 2026] [:error] [pid 34288:tid 34295] [client 4.223.163.152:2829] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeLYYOTIiy__PtiLmplVAgAAAYM"]
[Sat Apr 18 09:03:29.480620 2026] [:error] [pid 34288:tid 34303] [client 4.223.163.152:17358] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeLYYeTIiy__PtiLmplVBgAAAYs"]
[Sat Apr 18 09:03:30.184178 2026] [:error] [pid 34288:tid 34302] [client 4.223.163.152:2868] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeLYYuTIiy__PtiLmplVCQAAAYo"]
[Sat Apr 18 09:03:31.088078 2026] [:error] [pid 34288:tid 34301] [client 4.223.163.152:2833] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeLYY-TIiy__PtiLmplVDgAAAYk"]
[Sat Apr 18 09:03:31.643972 2026] [:error] [pid 34288:tid 34312] [client 4.223.163.152:2927] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeLYY-TIiy__PtiLmplVDwAAAZQ"]
[Sat Apr 18 09:03:32.325811 2026] [:error] [pid 34288:tid 34299] [client 4.223.163.152:2920] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeLYZOTIiy__PtiLmplVEwAAAYc"]
[Sat Apr 18 09:03:32.875896 2026] [:error] [pid 34288:tid 34292] [client 4.223.163.152:2813] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeLYZOTIiy__PtiLmplVFQAAAYA"]
[Sat Apr 18 09:03:33.798455 2026] [:error] [pid 13023:tid 13041] [client 4.223.163.152:17297] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeLYZf1e7hG8DAeABB9WrwAAARA"]
[Sat Apr 18 09:03:34.463541 2026] [:error] [pid 34288:tid 34296] [client 4.223.163.152:2890] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeLYZuTIiy__PtiLmplVGwAAAYQ"]
[Sat Apr 18 09:03:35.030216 2026] [:error] [pid 9865:tid 9957] [client 4.223.163.152:2937] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeLYZ6zb5knECIY-C-jiAQAAAJQ"]
[Sat Apr 18 09:03:35.556762 2026] [:error] [pid 34288:tid 34300] [client 4.223.163.152:17374] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeLYZ-TIiy__PtiLmplVJAAAAYg"]
[Sat Apr 18 09:03:36.168425 2026] [:error] [pid 34237:tid 34259] [client 4.223.163.152:17300] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeLYaBBmX4Wq5a6rxfbypAAAAVQ"]
[Sat Apr 18 09:03:36.771160 2026] [:error] [pid 13023:tid 13045] [client 4.223.163.152:2766] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeLYaP1e7hG8DAeABB9WvgAAARQ"]
[Sat Apr 18 09:03:37.408791 2026] [:error] [pid 13023:tid 13039] [client 4.223.163.152:2935] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeLYaf1e7hG8DAeABB9WwQAAAQ4"]
[Sat Apr 18 09:03:38.156903 2026] [:error] [pid 34237:tid 34243] [client 4.223.163.152:2794] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeLYahBmX4Wq5a6rxfbypQAAAUQ"]
[Sat Apr 18 09:03:38.909190 2026] [:error] [pid 9863:tid 9889] [client 4.223.163.152:2772] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeLYajjjiypiFrTucbI3lgAAABA"]
[Sat Apr 18 09:03:39.661031 2026] [:error] [pid 9970:tid 9974] [client 4.223.163.152:2778] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aeLYayYdRLRhVmaIMx0TvgAAAMA"]
[Sat Apr 18 09:03:40.436451 2026] [:error] [pid 34290:tid 34333] [client 4.223.163.152:2851] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aeLYbBqX6WpmmAXOBi99xwAAAc4"]
[Sat Apr 18 09:03:40.999898 2026] [:error] [pid 13023:tid 13036] [client 4.223.163.152:3027] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aeLYbP1e7hG8DAeABB9W1AAAAQs"]
[Sat Apr 18 09:03:41.544442 2026] [:error] [pid 13023:tid 13045] [client 4.223.163.152:17364] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class19.php"] [unique_id "aeLYbf1e7hG8DAeABB9W1QAAARQ"]
[Sat Apr 18 09:03:42.241500 2026] [:error] [pid 9863:tid 9890] [client 4.223.163.152:2890] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aeLYbjjjiypiFrTucbI3oQAAABE"]
[Sat Apr 18 09:03:42.873955 2026] [:error] [pid 9970:tid 9982] [client 4.223.163.152:17397] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aeLYbiYdRLRhVmaIMx0TwQAAAMg"]
[Sat Apr 18 09:03:43.627752 2026] [:error] [pid 13023:tid 13043] [client 4.223.163.152:2939] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aeLYb_1e7hG8DAeABB9W3QAAARI"]
[Sat Apr 18 09:03:44.331763 2026] [:error] [pid 13023:tid 13036] [client 4.223.163.152:17301] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class20.php"] [unique_id "aeLYcP1e7hG8DAeABB9W4wAAAQs"]
[Sat Apr 18 09:03:45.018776 2026] [:error] [pid 9863:tid 9887] [client 4.223.163.152:17293] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeLYcTjjiypiFrTucbI3pAAAAA4"]
[Sat Apr 18 09:03:46.008799 2026] [:error] [pid 34290:tid 34324] [client 4.223.163.152:2834] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeLYchqX6WpmmAXOBi99zQAAAcU"]
[Sat Apr 18 09:03:46.783147 2026] [:error] [pid 34288:tid 34297] [client 4.223.163.152:17282] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeLYcuTIiy__PtiLmplVTwAAAYU"]
[Sat Apr 18 09:03:47.625300 2026] [:error] [pid 34288:tid 34315] [client 4.223.163.152:2852] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeLYc-TIiy__PtiLmplVVQAAAZc"]
[Sat Apr 18 09:03:48.395746 2026] [:error] [pid 9865:tid 9939] [client 4.223.163.152:2831] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aeLYdKzb5knECIY-C-jiCQAAAII"]
[Sat Apr 18 09:03:48.967194 2026] [:error] [pid 9865:tid 9943] [client 4.223.163.152:2790] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aeLYdKzb5knECIY-C-jiCwAAAIY"]
[Sat Apr 18 09:03:49.644969 2026] [:error] [pid 34288:tid 34306] [client 4.223.163.152:17345] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aeLYdeTIiy__PtiLmplVZAAAAY4"]
[Sat Apr 18 09:03:50.246469 2026] [:error] [pid 13023:tid 13039] [client 4.223.163.152:2792] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vee.php"] [unique_id "aeLYdv1e7hG8DAeABB9W5QAAAQ4"]
[Sat Apr 18 09:03:50.842584 2026] [:error] [pid 34288:tid 34309] [client 4.223.163.152:17389] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeLYduTIiy__PtiLmplVhQAAAZE"]
[Sat Apr 18 09:03:51.452136 2026] [:error] [pid 34288:tid 34313] [client 4.223.163.152:2893] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeLYd-TIiy__PtiLmplVmAAAAZU"]
[Sat Apr 18 09:03:52.106593 2026] [:error] [pid 9865:tid 9950] [client 4.223.163.152:17306] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeLYeKzb5knECIY-C-jiEgAAAI0"]
[Sat Apr 18 09:03:52.687717 2026] [:error] [pid 34288:tid 34307] [client 4.223.163.152:17366] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeLYeOTIiy__PtiLmplVpQAAAY8"]
[Sat Apr 18 09:03:53.548341 2026] [:error] [pid 13023:tid 13028] [client 4.223.163.152:17392] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeLYef1e7hG8DAeABB9W6AAAAQM"]
[Sat Apr 18 09:03:54.271265 2026] [:error] [pid 9865:tid 9940] [client 4.223.163.152:17400] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeLYeqzb5knECIY-C-jiGAAAAIM"]
[Sat Apr 18 09:03:55.020204 2026] [:error] [pid 9865:tid 9958] [client 4.223.163.152:2765] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeLYe6zb5knECIY-C-jiGgAAAJU"]
[Sat Apr 18 09:03:55.960286 2026] [:error] [pid 34237:tid 34240] [client 4.223.163.152:2838] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeLYexBmX4Wq5a6rxfbysQAAAUE"]
[Sat Apr 18 09:03:56.885077 2026] [:error] [pid 34237:tid 34259] [client 4.223.163.152:17396] [client 4.223.163.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "aeLYfBBmX4Wq5a6rxfbytAAAAVQ"]
[Sat Apr 18 11:06:21.524891 2026] [:error] [pid 34237:tid 34263] [client 68.221.134.82:46468] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeL1LRBmX4Wq5a6rxfYelwAAAVg"]
[Sat Apr 18 11:06:22.016909 2026] [:error] [pid 9970:tid 9997] [client 68.221.134.82:36742] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeL1LiYdRLRhVmaIMx036gAAANc"]
[Sat Apr 18 11:06:22.509417 2026] [:error] [pid 34290:tid 34340] [client 68.221.134.82:14573] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeL1LhqX6WpmmAXOBi-gbwAAAdU"]
[Sat Apr 18 11:06:23.003151 2026] [:error] [pid 9970:tid 9990] [client 68.221.134.82:59636] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeL1LyYdRLRhVmaIMx037wAAANA"]
[Sat Apr 18 11:06:23.517505 2026] [:error] [pid 34290:tid 34338] [client 68.221.134.82:48286] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "aeL1LxqX6WpmmAXOBi-gcwAAAdM"]
[Sat Apr 18 11:06:24.011101 2026] [:error] [pid 34290:tid 34329] [client 68.221.134.82:7768] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "aeL1MBqX6WpmmAXOBi-geAAAAco"]
[Sat Apr 18 11:06:24.509914 2026] [:error] [pid 34288:tid 34308] [client 68.221.134.82:12889] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "aeL1MOTIiy__PtiLmpmCFQAAAZA"]
[Sat Apr 18 11:06:25.005026 2026] [:error] [pid 9865:tid 9945] [client 68.221.134.82:46525] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "aeL1Mazb5knECIY-C-gApQAAAIg"]
[Sat Apr 18 11:06:25.507977 2026] [:error] [pid 34288:tid 34299] [client 68.221.134.82:59616] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/block-template-utils.php"] [unique_id "aeL1MeTIiy__PtiLmpmCGAAAAYc"]
[Sat Apr 18 11:06:26.000391 2026] [:error] [pid 9865:tid 9961] [client 68.221.134.82:53930] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/block-template-utils.php"] [unique_id "aeL1Mazb5knECIY-C-gApgAAAJg"]
[Sat Apr 18 11:06:26.480385 2026] [:error] [pid 34288:tid 34304] [client 68.221.134.82:12880] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/block-template-utils.php"] [unique_id "aeL1MuTIiy__PtiLmpmCHQAAAYw"]
[Sat Apr 18 11:06:26.979888 2026] [:error] [pid 34237:tid 34244] [client 68.221.134.82:62488] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/block-template-utils.php"] [unique_id "aeL1MhBmX4Wq5a6rxfYenQAAAUU"]
[Sat Apr 18 11:06:27.475433 2026] [:error] [pid 34237:tid 34261] [client 68.221.134.82:36186] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/14.php"] [unique_id "aeL1MxBmX4Wq5a6rxfYengAAAVY"]
[Sat Apr 18 11:06:27.955229 2026] [:error] [pid 34288:tid 34299] [client 68.221.134.82:12900] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/14.php"] [unique_id "aeL1M-TIiy__PtiLmpmCJwAAAYc"]
[Sat Apr 18 11:06:28.433781 2026] [:error] [pid 34288:tid 34305] [client 68.221.134.82:48315] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/14.php"] [unique_id "aeL1NOTIiy__PtiLmpmCKgAAAY0"]
[Sat Apr 18 11:06:28.928780 2026] [:error] [pid 34288:tid 34300] [client 68.221.134.82:53905] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/14.php"] [unique_id "aeL1NOTIiy__PtiLmpmCLQAAAYg"]
[Sat Apr 18 11:06:29.446184 2026] [:error] [pid 9970:tid 9981] [client 68.221.134.82:36221] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update_with_pics.php"] [unique_id "aeL1NSYdRLRhVmaIMx039wAAAMc"]
[Sat Apr 18 11:06:29.955957 2026] [:error] [pid 34290:tid 34332] [client 68.221.134.82:36204] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update_with_pics.php"] [unique_id "aeL1NRqX6WpmmAXOBi-glQAAAc0"]
[Sat Apr 18 11:06:30.461603 2026] [:error] [pid 34288:tid 34310] [client 68.221.134.82:48300] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update_with_pics.php"] [unique_id "aeL1NuTIiy__PtiLmpmCNAAAAZI"]
[Sat Apr 18 11:06:30.966625 2026] [:error] [pid 34288:tid 34316] [client 68.221.134.82:59633] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update_with_pics.php"] [unique_id "aeL1NuTIiy__PtiLmpmCOgAAAZg"]
[Sat Apr 18 11:06:31.464183 2026] [:error] [pid 9865:tid 9954] [client 68.221.134.82:62469] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date-object.php"] [unique_id "aeL1N6zb5knECIY-C-gAqQAAAJE"]
[Sat Apr 18 11:06:31.958164 2026] [:error] [pid 34290:tid 34332] [client 68.221.134.82:62602] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date-object.php"] [unique_id "aeL1NxqX6WpmmAXOBi-gnQAAAc0"]
[Sat Apr 18 11:06:32.461018 2026] [:error] [pid 34290:tid 34322] [client 68.221.134.82:57334] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date-object.php"] [unique_id "aeL1OBqX6WpmmAXOBi-goAAAAcM"]
[Sat Apr 18 11:06:32.954734 2026] [:error] [pid 34288:tid 34295] [client 68.221.134.82:62626] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/date-object.php"] [unique_id "aeL1OOTIiy__PtiLmpmCPwAAAYM"]
[Sat Apr 18 11:06:33.471827 2026] [:error] [pid 9865:tid 9959] [client 68.221.134.82:36173] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w-1.php"] [unique_id "aeL1Oazb5knECIY-C-gArgAAAJY"]
[Sat Apr 18 11:06:33.969181 2026] [:error] [pid 9865:tid 9955] [client 68.221.134.82:48303] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w-1.php"] [unique_id "aeL1Oazb5knECIY-C-gArwAAAJI"]
[Sat Apr 18 11:06:34.462177 2026] [:error] [pid 13023:tid 13025] [client 68.221.134.82:59970] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w-1.php"] [unique_id "aeL1Ov1e7hG8DAeABB-C1gAAAQA"]
[Sat Apr 18 11:06:34.955859 2026] [:error] [pid 34288:tid 34301] [client 68.221.134.82:7779] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w-1.php"] [unique_id "aeL1OuTIiy__PtiLmpmCRQAAAYk"]
[Sat Apr 18 11:06:35.440462 2026] [:error] [pid 34290:tid 34332] [client 68.221.134.82:12892] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aeL1OxqX6WpmmAXOBi-gqAAAAc0"]
[Sat Apr 18 11:06:35.934684 2026] [:error] [pid 9865:tid 9950] [client 68.221.134.82:58363] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aeL1O6zb5knECIY-C-gAtgAAAI0"]
[Sat Apr 18 11:06:36.444539 2026] [:error] [pid 13023:tid 13037] [client 68.221.134.82:58327] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aeL1PP1e7hG8DAeABB-C2QAAAQw"]
[Sat Apr 18 11:06:36.925568 2026] [:error] [pid 9865:tid 9952] [client 68.221.134.82:58310] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwso.php"] [unique_id "aeL1PKzb5knECIY-C-gAtwAAAI8"]
[Sat Apr 18 11:06:37.419049 2026] [:error] [pid 34290:tid 34343] [client 68.221.134.82:12990] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bbh.php"] [unique_id "aeL1PRqX6WpmmAXOBi-gqgAAAdg"]
[Sat Apr 18 11:06:37.914672 2026] [:error] [pid 9970:tid 9986] [client 68.221.134.82:12870] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bbh.php"] [unique_id "aeL1PSYdRLRhVmaIMx03_AAAAMw"]
[Sat Apr 18 11:06:38.407611 2026] [:error] [pid 9864:tid 9929] [client 68.221.134.82:62473] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bbh.php"] [unique_id "aeL1PoCFeowknfXHM7l0PQAAAFc"]
[Sat Apr 18 11:06:38.903347 2026] [:error] [pid 9865:tid 9938] [client 68.221.134.82:12948] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bbh.php"] [unique_id "aeL1Pqzb5knECIY-C-gAuwAAAIE"]
[Sat Apr 18 11:06:39.399405 2026] [:error] [pid 9864:tid 9920] [client 68.221.134.82:58306] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gool.php"] [unique_id "aeL1P4CFeowknfXHM7l0QwAAAE4"]
[Sat Apr 18 11:06:39.897221 2026] [:error] [pid 34288:tid 34302] [client 68.221.134.82:36171] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gool.php"] [unique_id "aeL1P-TIiy__PtiLmpmCVAAAAYo"]
[Sat Apr 18 11:06:40.377376 2026] [:error] [pid 9865:tid 9944] [client 68.221.134.82:12898] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gool.php"] [unique_id "aeL1QKzb5knECIY-C-gAvgAAAIc"]
[Sat Apr 18 11:06:40.878624 2026] [:error] [pid 13023:tid 13027] [client 68.221.134.82:36184] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gool.php"] [unique_id "aeL1QP1e7hG8DAeABB-C2wAAAQI"]
[Sat Apr 18 11:06:41.387039 2026] [:error] [pid 13023:tid 13048] [client 68.221.134.82:48268] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeL1Qf1e7hG8DAeABB-C3gAAARc"]
[Sat Apr 18 11:06:41.895032 2026] [:error] [pid 9864:tid 9909] [client 68.221.134.82:62478] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeL1QYCFeowknfXHM7l0TwAAAEQ"]
[Sat Apr 18 11:06:42.381671 2026] [:error] [pid 9864:tid 9925] [client 68.221.134.82:53903] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeL1QoCFeowknfXHM7l0VAAAAFM"]
[Sat Apr 18 11:06:42.884215 2026] [:error] [pid 9864:tid 9930] [client 68.221.134.82:7793] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeL1QoCFeowknfXHM7l0WQAAAFg"]
[Sat Apr 18 11:06:43.397372 2026] [:error] [pid 13023:tid 13033] [client 68.221.134.82:62971] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeL1Q_1e7hG8DAeABB-C6AAAAQg"]
[Sat Apr 18 11:06:43.952631 2026] [:error] [pid 9864:tid 9916] [client 68.221.134.82:62510] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeL1Q4CFeowknfXHM7l0YAAAAEo"]
[Sat Apr 18 11:06:44.466415 2026] [:error] [pid 9864:tid 9930] [client 68.221.134.82:62593] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeL1RICFeowknfXHM7l0ZAAAAFg"]
[Sat Apr 18 11:06:45.002926 2026] [:error] [pid 34288:tid 34314] [client 68.221.134.82:58358] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeL1ReTIiy__PtiLmpmCZQAAAZY"]
[Sat Apr 18 11:06:45.485728 2026] [:error] [pid 9863:tid 9878] [client 68.221.134.82:48273] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeL1RTjjiypiFrTucbJhAAAAAAU"]
[Sat Apr 18 11:06:45.968052 2026] [:error] [pid 34237:tid 34241] [client 68.221.134.82:36218] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeL1RRBmX4Wq5a6rxfYepAAAAUI"]
[Sat Apr 18 11:06:46.468904 2026] [:error] [pid 9864:tid 9916] [client 68.221.134.82:36198] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeL1RoCFeowknfXHM7l0dgAAAEo"]
[Sat Apr 18 11:06:46.954583 2026] [:error] [pid 34237:tid 34248] [client 68.221.134.82:14539] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeL1RhBmX4Wq5a6rxfYeqQAAAUk"]
[Sat Apr 18 11:06:47.458407 2026] [:error] [pid 34290:tid 34325] [client 68.221.134.82:45933] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpputty.php"] [unique_id "aeL1RxqX6WpmmAXOBi-gswAAAcY"]
[Sat Apr 18 11:06:47.937855 2026] [:error] [pid 9970:tid 9981] [client 68.221.134.82:62637] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpputty.php"] [unique_id "aeL1RyYdRLRhVmaIMx04AQAAAMc"]
[Sat Apr 18 11:06:48.448850 2026] [:error] [pid 9864:tid 9919] [client 68.221.134.82:12903] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpputty.php"] [unique_id "aeL1SICFeowknfXHM7l0ewAAAE0"]
[Sat Apr 18 11:06:48.960373 2026] [:error] [pid 9864:tid 9908] [client 68.221.134.82:12886] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpputty.php"] [unique_id "aeL1SICFeowknfXHM7l0fgAAAEM"]
[Sat Apr 18 11:06:49.467286 2026] [:error] [pid 9864:tid 9922] [client 68.221.134.82:45915] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dodo.php"] [unique_id "aeL1SYCFeowknfXHM7l0hQAAAFA"]
[Sat Apr 18 11:06:49.949218 2026] [:error] [pid 9970:tid 9978] [client 68.221.134.82:12941] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dodo.php"] [unique_id "aeL1SSYdRLRhVmaIMx04BQAAAMQ"]
[Sat Apr 18 11:06:50.460687 2026] [:error] [pid 9970:tid 9980] [client 68.221.134.82:7751] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dodo.php"] [unique_id "aeL1SiYdRLRhVmaIMx04CQAAAMY"]
[Sat Apr 18 11:06:50.942668 2026] [:error] [pid 9970:tid 9995] [client 68.221.134.82:36210] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dodo.php"] [unique_id "aeL1SiYdRLRhVmaIMx04DQAAANU"]
[Sat Apr 18 11:06:51.445571 2026] [:error] [pid 34290:tid 34319] [client 68.221.134.82:7791] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-post-data.php"] [unique_id "aeL1SxqX6WpmmAXOBi-guwAAAcA"]
[Sat Apr 18 11:06:51.938824 2026] [:error] [pid 34290:tid 34323] [client 68.221.134.82:35587] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-post-data.php"] [unique_id "aeL1SxqX6WpmmAXOBi-gvgAAAcQ"]
[Sat Apr 18 11:06:52.428551 2026] [:error] [pid 34237:tid 34239] [client 68.221.134.82:51968] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-post-data.php"] [unique_id "aeL1TBBmX4Wq5a6rxfYerwAAAUA"]
[Sat Apr 18 11:06:52.923801 2026] [:error] [pid 34288:tid 34296] [client 68.221.134.82:12865] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-post-data.php"] [unique_id "aeL1TOTIiy__PtiLmpmCagAAAYQ"]
[Sat Apr 18 11:06:53.421786 2026] [:error] [pid 9863:tid 9879] [client 68.221.134.82:58332] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeL1TTjjiypiFrTucbJhBAAAAAY"]
[Sat Apr 18 11:06:53.916737 2026] [:error] [pid 13023:tid 13035] [client 68.221.134.82:51986] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeL1Tf1e7hG8DAeABB-C7wAAAQo"]
[Sat Apr 18 11:06:54.412930 2026] [:error] [pid 13023:tid 13048] [client 68.221.134.82:36168] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeL1Tv1e7hG8DAeABB-C8AAAARc"]
[Sat Apr 18 11:06:54.897653 2026] [:error] [pid 9864:tid 9913] [client 68.221.134.82:62503] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeL1ToCFeowknfXHM7l0jgAAAEc"]
[Sat Apr 18 11:06:55.377974 2026] [:error] [pid 34237:tid 34246] [client 68.221.134.82:59268] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Marvins.php"] [unique_id "aeL1TxBmX4Wq5a6rxfYesgAAAUc"]
[Sat Apr 18 11:06:55.854917 2026] [:error] [pid 34288:tid 34295] [client 68.221.134.82:57360] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Marvins.php"] [unique_id "aeL1T-TIiy__PtiLmpmCcQAAAYM"]
[Sat Apr 18 11:06:56.348915 2026] [:error] [pid 9864:tid 9927] [client 68.221.134.82:14585] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Marvins.php"] [unique_id "aeL1UICFeowknfXHM7l0kQAAAFU"]
[Sat Apr 18 11:06:56.871049 2026] [:error] [pid 9864:tid 9926] [client 68.221.134.82:35621] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Marvins.php"] [unique_id "aeL1UICFeowknfXHM7l0lQAAAFQ"]
[Sat Apr 18 11:06:57.370228 2026] [:error] [pid 34290:tid 34342] [client 68.221.134.82:58341] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/astab.php"] [unique_id "aeL1URqX6WpmmAXOBi-gyAAAAdc"]
[Sat Apr 18 11:06:57.847395 2026] [:error] [pid 9864:tid 9906] [client 68.221.134.82:36182] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/astab.php"] [unique_id "aeL1UYCFeowknfXHM7l0mAAAAEE"]
[Sat Apr 18 11:06:58.340202 2026] [:error] [pid 9863:tid 9876] [client 68.221.134.82:35625] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/astab.php"] [unique_id "aeL1UjjjiypiFrTucbJhCgAAAAM"]
[Sat Apr 18 11:06:58.845951 2026] [:error] [pid 9865:tid 9942] [client 68.221.134.82:36163] [client 68.221.134.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/astab.php"] [unique_id "aeL1Uqzb5knECIY-C-gAygAAAIU"]
[Sat Apr 18 11:15:43.835436 2026] [:error] [pid 9863:tid 9892] [client 43.155.195.141:54772] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeL3XzjjiypiFrTucbJj-QAAABM"]
[Sat Apr 18 12:44:24.699191 2026] [:error] [pid 34288:tid 34301] [client 111.172.249.49:43360] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeMMKOTIiy__PtiLmpmVUgAAAYk"]
[Sat Apr 18 14:03:39.502106 2026] [:error] [pid 9865:tid 9953] [client 125.165.105.99:14366] [client 125.165.105.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.165.105.99, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeMeu6zb5knECIY-C-gw5wAAAJA"]
[Sat Apr 18 17:35:05.299787 2026] [:error] [pid 13023:tid 13035] [client 136.109.247.201:49567] [client 136.109.247.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.247.201, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNQSf1e7hG8DAeABB_ePQAAAQo"]
[Sat Apr 18 17:35:05.362833 2026] [:error] [pid 9970:tid 9983] [client 136.109.247.201:57839] [client 136.109.247.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.247.201, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNQSSYdRLRhVmaIMx2SOwAAAMk"]
[Sat Apr 18 17:35:05.877289 2026] [:error] [pid 9970:tid 9988] [client 136.109.247.201:57839] [client 136.109.247.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeNQSSYdRLRhVmaIMx2SPQAAAM4"]
[Sat Apr 18 17:35:05.978361 2026] [:error] [pid 13023:tid 13030] [client 136.109.247.201:49567] [client 136.109.247.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeNQSf1e7hG8DAeABB_eRgAAAQU"]
[Sat Apr 18 17:35:06.635996 2026] [:error] [pid 13023:tid 13027] [client 136.109.247.201:62087] [client 136.109.247.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeNQSv1e7hG8DAeABB_eSQAAAQI"]
[Sat Apr 18 17:35:06.806292 2026] [:error] [pid 34290:tid 34336] [client 136.109.247.201:57318] [client 136.109.247.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeNQShqX6WpmmAXOBi_tYwAAAdE"]
[Sat Apr 18 18:22:11.900212 2026] [:error] [pid 9864:tid 9909] [client 43.157.147.3:44528] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeNbU4CFeowknfXHM7ny-QAAAEQ"]
[Sat Apr 18 20:17:43.402324 2026] [:error] [pid 34290:tid 34321] [client 104.28.246.113:61831] [client 104.28.246.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeN2ZxqX6WpmmAXOBi8bagAAAcI"]
[Sat Apr 18 20:17:43.855465 2026] [:error] [pid 34237:tid 34250] [client 104.28.246.112:26838] [client 104.28.246.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/style.php"] [unique_id "aeN2ZxBmX4Wq5a6rxfapzQAAAUs"]
[Sat Apr 18 20:18:05.109562 2026] [:error] [pid 9865:tid 9958] [client 104.28.163.78:64672] [client 104.28.163.78] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "aeN2fazb5knECIY-C-iCAwAAAJU"]
[Sat Apr 18 20:37:12.611764 2026] [:error] [pid 32647:tid 32659] [client 43.157.98.187:48622] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeN6-EkxooM0iRo6e54jGgAAAgk"]
[Sat Apr 18 21:33:16.645814 2026] [:error] [pid 32678:tid 32717] [client 20.215.249.162:5105] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeOIHBUlAXU_ZWUu5y8AbwAAAoo"]
[Sat Apr 18 21:33:17.203658 2026] [:error] [pid 13023:tid 13027] [client 20.215.249.162:5095] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeOIHf1e7hG8DAeABB8d0wAAAQI"]
[Sat Apr 18 21:33:17.747293 2026] [:error] [pid 32678:tid 32731] [client 20.215.249.162:5081] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeOIHRUlAXU_ZWUu5y8AcgAAApg"]
[Sat Apr 18 21:33:18.302987 2026] [:error] [pid 34288:tid 34293] [client 20.215.249.162:4999] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeOIHuTIiy__PtiLmpnY3AAAAYE"]
[Sun Apr 19 00:17:50.165447 2026] [:error] [pid 32165:tid 32172] [client 43.153.48.240:36932] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeOurqe2vKwEk_N0Brbj8AAAAAM"]
[Sun Apr 19 01:30:45.504882 2026] [:error] [pid 41277:tid 41296] [client 182.43.70.143:42258] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeO_xUH3ayszMLZYflvtwwAAAZE"]
[Sun Apr 19 03:17:00.678599 2026] [:error] [pid 60910:tid 60935] [client 45.132.115.85:60691] [client 45.132.115.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.85, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aePYrHFWunkyacYqsD1ZeAAAAVc"]
[Sun Apr 19 03:33:43.217395 2026] [:error] [pid 32166:tid 32201] [client 43.166.255.122:54962] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aePcl5CHNkWwdiZnafLgLwAAAEM"]
[Sun Apr 19 04:44:32.966072 2026] [:error] [pid 47772:tid 47803] [client 3.39.244.108:53884] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aePtMIc0L16cb4smAz-IqAAAAA4"]
[Sun Apr 19 04:44:33.751313 2026] [:error] [pid 47773:tid 47817] [client 3.39.244.108:54012] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aePtMeiBHdnCJDuPq9AzdwAAAEE"]
[Sun Apr 19 04:44:34.360636 2026] [:error] [pid 47772:tid 47797] [client 3.39.244.108:54046] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aePtMoc0L16cb4smAz-IqQAAAAg"]
[Sun Apr 19 04:44:34.967790 2026] [:error] [pid 15760:tid 15784] [client 3.39.244.108:54086] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aePtMvSdD_XHQMJ_ISsQOQAAAdA"]
[Sun Apr 19 04:44:35.582373 2026] [:error] [pid 47773:tid 47831] [client 3.39.244.108:34618] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aePtM-iBHdnCJDuPq9AziAAAAE8"]
[Sun Apr 19 04:44:36.195706 2026] [:error] [pid 47886:tid 47899] [client 3.39.244.108:34644] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aePtNESe8yiyuPrD7yPcjwAAAMs"]
[Sun Apr 19 04:44:36.810104 2026] [:error] [pid 47775:tid 47850] [client 3.39.244.108:34696] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aePtNLmztjlk9tsmoexe0wAAAIc"]
[Sun Apr 19 06:23:58.925353 2026] [:error] [pid 15765:tid 15870] [client 3.250.2.106:52436] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aeQEfvRqinw-W5EwQ76OegAAApE"]
[Sun Apr 19 06:24:00.240876 2026] [:error] [pid 47775:tid 47849] [client 3.250.2.106:52530] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aeQEgLmztjlk9tsmoeyA4gAAAIY"]
[Sun Apr 19 06:24:01.273338 2026] [:error] [pid 15765:tid 15877] [client 3.250.2.106:52568] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aeQEgfRqinw-W5EwQ76OfAAAApg"]
[Sun Apr 19 06:24:02.305283 2026] [:error] [pid 47772:tid 47797] [client 3.250.2.106:52618] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aeQEgoc0L16cb4smAz-1qAAAAAg"]
[Sun Apr 19 07:37:05.712297 2026] [:error] [pid 47773:tid 47824] [client 93.123.109.79:52890] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aeQVoeiBHdnCJDuPq9CTugAAAEg"]
[Sun Apr 19 11:50:44.970738 2026] [:error] [pid 47773:tid 47832] [client 43.157.156.190:34940] [client 43.157.156.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeRRFOiBHdnCJDuPq9DeFAAAAFA"]
[Sun Apr 19 12:15:24.988168 2026] [:error] [pid 47772:tid 47805] [client 117.192.188.183:52958] [client 117.192.188.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.192.188.183, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeRW3Ic0L16cb4smAz8rGwAAABA"]
[Sun Apr 19 18:17:23.019102 2026] [:error] [pid 15764:tid 15841] [client 52.236.49.63:59139] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeSrs2LL_sqdSHoVp-TQKgAAAk8"]
[Sun Apr 19 18:17:23.549158 2026] [:error] [pid 47772:tid 47790] [client 52.236.49.63:34476] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeSrs4c0L16cb4smAz-D8QAAAAE"]
[Sun Apr 19 18:17:24.133639 2026] [:error] [pid 15764:tid 15838] [client 52.236.49.63:25655] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeSrtGLL_sqdSHoVp-TQLQAAAkw"]
[Sun Apr 19 18:17:24.807155 2026] [:error] [pid 47773:tid 47816] [client 52.236.49.63:59169] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeSrtOiBHdnCJDuPq9AdkgAAAEA"]
[Sun Apr 19 18:17:25.382777 2026] [:error] [pid 15764:tid 15829] [client 52.236.49.63:25695] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "aeSrtWLL_sqdSHoVp-TQMgAAAkM"]
[Sun Apr 19 18:17:25.999917 2026] [:error] [pid 15764:tid 15845] [client 52.236.49.63:34453] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "aeSrtWLL_sqdSHoVp-TQNAAAAlM"]
[Sun Apr 19 18:17:26.645550 2026] [:error] [pid 47773:tid 47830] [client 52.236.49.63:59196] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "aeSrtuiBHdnCJDuPq9AdlQAAAE4"]
[Sun Apr 19 18:17:27.246614 2026] [:error] [pid 15760:tid 15779] [client 52.236.49.63:25698] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "aeSrt_SdD_XHQMJ_ISvP-gAAAcs"]
[Sun Apr 19 18:17:27.895672 2026] [:error] [pid 15764:tid 15851] [client 52.236.49.63:2748] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "aeSrt2LL_sqdSHoVp-TQNwAAAlg"]
[Sun Apr 19 18:17:28.520017 2026] [:error] [pid 47772:tid 47792] [client 52.236.49.63:34435] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "aeSruIc0L16cb4smAz-D9gAAAAM"]
[Sun Apr 19 18:17:29.151269 2026] [:error] [pid 47773:tid 47835] [client 52.236.49.63:34465] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "aeSrueiBHdnCJDuPq9AdmAAAAFM"]
[Sun Apr 19 18:17:29.707560 2026] [:error] [pid 47772:tid 47804] [client 52.236.49.63:25678] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX2.php"] [unique_id "aeSruYc0L16cb4smAz-D_AAAAA8"]
[Sun Apr 19 18:17:30.366098 2026] [:error] [pid 47886:tid 47903] [client 52.236.49.63:34490] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aeSrukSe8yiyuPrD7yNeAAAAAM8"]
[Sun Apr 19 18:17:30.926283 2026] [:error] [pid 47775:tid 47856] [client 52.236.49.63:34491] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aeSrurmztjlk9tsmoez3oQAAAI0"]
[Sun Apr 19 18:17:31.537611 2026] [:error] [pid 15764:tid 15839] [client 52.236.49.63:25667] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aeSru2LL_sqdSHoVp-TQOwAAAk0"]
[Sun Apr 19 18:17:32.108133 2026] [:error] [pid 15763:tid 15818] [client 52.236.49.63:34462] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aeSrvLMXv1Y1THOoxaDKKQAAAhY"]
[Sun Apr 19 18:17:32.689926 2026] [:error] [pid 15763:tid 15801] [client 52.236.49.63:34483] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "aeSrvLMXv1Y1THOoxaDKKgAAAgU"]
[Sun Apr 19 18:17:33.405771 2026] [:error] [pid 15763:tid 15811] [client 52.236.49.63:42043] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "aeSrvbMXv1Y1THOoxaDKMAAAAg8"]
[Sun Apr 19 18:17:34.025275 2026] [:error] [pid 15764:tid 15851] [client 52.236.49.63:25706] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "aeSrvmLL_sqdSHoVp-TQPwAAAlg"]
[Sun Apr 19 18:17:34.822005 2026] [:error] [pid 15765:tid 15867] [client 52.236.49.63:2705] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/CDX1.php"] [unique_id "aeSrvvRqinw-W5EwQ77kDQAAAo4"]
[Sun Apr 19 18:17:35.408941 2026] [:error] [pid 15764:tid 15842] [client 52.236.49.63:2309] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeSrv2LL_sqdSHoVp-TQRQAAAlA"]
[Sun Apr 19 18:17:36.017438 2026] [:error] [pid 47775:tid 47863] [client 52.236.49.63:34485] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeSrwLmztjlk9tsmoez3pQAAAJQ"]
[Sun Apr 19 18:17:36.623400 2026] [:error] [pid 15763:tid 15803] [client 52.236.49.63:42036] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeSrwLMXv1Y1THOoxaDKNgAAAgc"]
[Sun Apr 19 18:17:37.271432 2026] [:error] [pid 15763:tid 15817] [client 52.236.49.63:59194] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeSrwbMXv1Y1THOoxaDKOAAAAhU"]
[Sun Apr 19 18:17:38.041991 2026] [:error] [pid 15764:tid 15835] [client 52.236.49.63:2750] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeSrwmLL_sqdSHoVp-TQSwAAAkk"]
[Sun Apr 19 18:17:38.805415 2026] [:error] [pid 15763:tid 15798] [client 52.236.49.63:34488] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeSrwrMXv1Y1THOoxaDKOgAAAgI"]
[Sun Apr 19 18:17:39.449647 2026] [:error] [pid 15693:tid 15697] [client 52.236.49.63:42024] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeSrw8NMD-ccazQlTslJagAAAUE"]
[Sun Apr 19 18:17:40.123456 2026] [:error] [pid 47773:tid 47830] [client 52.236.49.63:59141] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeSrxOiBHdnCJDuPq9AdoQAAAE4"]
[Sun Apr 19 18:17:40.768229 2026] [:error] [pid 15763:tid 15811] [client 52.236.49.63:25615] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "aeSrxLMXv1Y1THOoxaDKPgAAAg8"]
[Sun Apr 19 18:17:41.360678 2026] [:error] [pid 47886:tid 47890] [client 52.236.49.63:42013] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "aeSrxUSe8yiyuPrD7yNeCAAAAMI"]
[Sun Apr 19 18:17:42.061091 2026] [:error] [pid 15760:tid 15783] [client 52.236.49.63:25685] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "aeSrxvSdD_XHQMJ_ISvQEQAAAc8"]
[Sun Apr 19 18:17:42.650341 2026] [:error] [pid 47886:tid 47895] [client 52.236.49.63:2733] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "aeSrxkSe8yiyuPrD7yNeCgAAAMc"]
[Sun Apr 19 18:17:43.340132 2026] [:error] [pid 15760:tid 15791] [client 52.236.49.63:25683] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "aeSrx_SdD_XHQMJ_ISvQFgAAAdc"]
[Sun Apr 19 18:17:43.869913 2026] [:error] [pid 15760:tid 15776] [client 52.236.49.63:25631] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "aeSrx_SdD_XHQMJ_ISvQGAAAAcg"]
[Sun Apr 19 18:17:44.445766 2026] [:error] [pid 47773:tid 47831] [client 52.236.49.63:25694] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "aeSryOiBHdnCJDuPq9AdpQAAAE8"]
[Sun Apr 19 18:17:45.031009 2026] [:error] [pid 47773:tid 47820] [client 52.236.49.63:2691] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "aeSryeiBHdnCJDuPq9AdqQAAAEQ"]
[Sun Apr 19 18:17:45.551712 2026] [:error] [pid 15694:tid 15738] [client 52.236.49.63:34445] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeSrybimB-jol1fwqAr6UQAAAYw"]
[Sun Apr 19 18:17:46.155300 2026] [:error] [pid 15763:tid 15810] [client 52.236.49.63:59193] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeSryrMXv1Y1THOoxaDKRQAAAg4"]
[Sun Apr 19 18:17:46.700896 2026] [:error] [pid 47773:tid 47822] [client 52.236.49.63:42007] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeSryuiBHdnCJDuPq9AdrwAAAEY"]
[Sun Apr 19 18:17:47.285175 2026] [:error] [pid 47886:tid 47901] [client 52.236.49.63:59162] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeSry0Se8yiyuPrD7yNeCwAAAM0"]
[Sun Apr 19 18:17:47.845806 2026] [:error] [pid 15760:tid 15783] [client 52.236.49.63:25656] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeSry_SdD_XHQMJ_ISvQHgAAAc8"]
[Sun Apr 19 18:17:48.365466 2026] [:error] [pid 15760:tid 15789] [client 52.236.49.63:34460] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeSrzPSdD_XHQMJ_ISvQHwAAAdU"]
[Sun Apr 19 18:17:48.988078 2026] [:error] [pid 15764:tid 15829] [client 52.236.49.63:2738] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeSrzGLL_sqdSHoVp-TQVgAAAkM"]
[Sun Apr 19 18:17:49.526838 2026] [:error] [pid 15760:tid 15781] [client 52.236.49.63:41987] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeSrzfSdD_XHQMJ_ISvQIwAAAc0"]
[Sun Apr 19 18:17:50.034671 2026] [:error] [pid 15760:tid 15788] [client 52.236.49.63:25701] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "aeSrzvSdD_XHQMJ_ISvQJgAAAdQ"]
[Sun Apr 19 18:17:50.581154 2026] [:error] [pid 15760:tid 15787] [client 52.236.49.63:2728] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "aeSrzvSdD_XHQMJ_ISvQKAAAAdM"]
[Sun Apr 19 18:17:51.169503 2026] [:error] [pid 15765:tid 15855] [client 52.236.49.63:25702] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "aeSrz_Rqinw-W5EwQ77kFAAAAoI"]
[Sun Apr 19 18:17:51.704348 2026] [:error] [pid 15693:tid 15702] [client 52.236.49.63:42042] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "aeSrz8NMD-ccazQlTslJbwAAAUY"]
[Sun Apr 19 18:17:52.249795 2026] [:error] [pid 15764:tid 15851] [client 52.236.49.63:34459] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ref.php"] [unique_id "aeSr0GLL_sqdSHoVp-TQWAAAAlg"]
[Sun Apr 19 18:17:52.752332 2026] [:error] [pid 47772:tid 47797] [client 52.236.49.63:25609] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ref.php"] [unique_id "aeSr0Ic0L16cb4smAz-D_wAAAAg"]
[Sun Apr 19 18:17:53.280831 2026] [:error] [pid 47773:tid 47838] [client 52.236.49.63:59142] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ref.php"] [unique_id "aeSr0eiBHdnCJDuPq9AduwAAAFY"]
[Sun Apr 19 18:17:53.810978 2026] [:error] [pid 15763:tid 15819] [client 52.236.49.63:25700] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ref.php"] [unique_id "aeSr0bMXv1Y1THOoxaDKRwAAAhc"]
[Sun Apr 19 18:17:54.359151 2026] [:error] [pid 47773:tid 47837] [client 52.236.49.63:37905] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "aeSr0uiBHdnCJDuPq9AdwgAAAFU"]
[Sun Apr 19 18:17:54.898877 2026] [:error] [pid 47773:tid 47820] [client 52.236.49.63:37954] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "aeSr0uiBHdnCJDuPq9AdxgAAAEQ"]
[Sun Apr 19 18:17:55.428398 2026] [:error] [pid 47773:tid 47825] [client 52.236.49.63:2749] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "aeSr0-iBHdnCJDuPq9AdxwAAAEk"]
[Sun Apr 19 18:17:55.988594 2026] [:error] [pid 15760:tid 15781] [client 52.236.49.63:41992] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "aeSr0_SdD_XHQMJ_ISvQLgAAAc0"]
[Sun Apr 19 18:17:56.545090 2026] [:error] [pid 15693:tid 15711] [client 52.236.49.63:25687] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "aeSr1MNMD-ccazQlTslJcQAAAU8"]
[Sun Apr 19 18:17:57.081906 2026] [:error] [pid 15763:tid 15814] [client 52.236.49.63:37927] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "aeSr1bMXv1Y1THOoxaDKTAAAAhI"]
[Sun Apr 19 18:17:57.613230 2026] [:error] [pid 47775:tid 47850] [client 52.236.49.63:41995] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "aeSr1bmztjlk9tsmoez3tQAAAIc"]
[Sun Apr 19 18:17:58.195058 2026] [:error] [pid 15760:tid 15790] [client 52.236.49.63:41999] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "aeSr1vSdD_XHQMJ_ISvQMQAAAdY"]
[Sun Apr 19 18:17:58.738764 2026] [:error] [pid 15694:tid 15723] [client 52.236.49.63:25624] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "aeSr1rimB-jol1fwqAr6WQAAAYA"]
[Sun Apr 19 18:17:59.275678 2026] [:error] [pid 47773:tid 47834] [client 52.236.49.63:2715] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "aeSr1-iBHdnCJDuPq9AdyQAAAFI"]
[Sun Apr 19 18:17:59.821215 2026] [:error] [pid 15693:tid 15707] [client 52.236.49.63:25720] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "aeSr18NMD-ccazQlTslJdgAAAUs"]
[Sun Apr 19 18:18:00.387460 2026] [:error] [pid 47773:tid 47837] [client 52.236.49.63:25705] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "aeSr2OiBHdnCJDuPq9AdzAAAAFU"]
[Sun Apr 19 18:18:00.974076 2026] [:error] [pid 15763:tid 15800] [client 52.236.49.63:59175] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeSr2LMXv1Y1THOoxaDKTgAAAgQ"]
[Sun Apr 19 18:18:01.529869 2026] [:error] [pid 15760:tid 15792] [client 52.236.49.63:42020] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeSr2fSdD_XHQMJ_ISvQNgAAAdg"]
[Sun Apr 19 18:18:02.139307 2026] [:error] [pid 15760:tid 15777] [client 52.236.49.63:25688] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeSr2vSdD_XHQMJ_ISvQOQAAAck"]
[Sun Apr 19 18:18:02.652146 2026] [:error] [pid 15760:tid 15773] [client 52.236.49.63:34450] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeSr2vSdD_XHQMJ_ISvQPAAAAcU"]
[Sun Apr 19 18:18:03.165439 2026] [:error] [pid 47773:tid 47817] [client 52.236.49.63:25704] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Xx.php"] [unique_id "aeSr2-iBHdnCJDuPq9AdzQAAAEE"]
[Sun Apr 19 18:18:03.740849 2026] [:error] [pid 15763:tid 15810] [client 52.236.49.63:25652] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Xx.php"] [unique_id "aeSr27MXv1Y1THOoxaDKUQAAAg4"]
[Sun Apr 19 18:18:04.297149 2026] [:error] [pid 15693:tid 15712] [client 52.236.49.63:25722] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Xx.php"] [unique_id "aeSr3MNMD-ccazQlTslJdwAAAVA"]
[Sun Apr 19 18:18:04.852413 2026] [:error] [pid 15693:tid 15702] [client 52.236.49.63:25637] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Xx.php"] [unique_id "aeSr3MNMD-ccazQlTslJeAAAAUY"]
[Sun Apr 19 18:18:05.377498 2026] [:error] [pid 15760:tid 15769] [client 52.236.49.63:34439] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aeSr3fSdD_XHQMJ_ISvQSQAAAcE"]
[Sun Apr 19 18:18:05.889979 2026] [:error] [pid 15760:tid 15777] [client 52.236.49.63:2710] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aeSr3fSdD_XHQMJ_ISvQSwAAAck"]
[Sun Apr 19 18:18:06.417512 2026] [:error] [pid 47886:tid 47901] [client 52.236.49.63:34441] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aeSr3kSe8yiyuPrD7yNeGAAAAM0"]
[Sun Apr 19 18:18:06.966791 2026] [:error] [pid 47775:tid 47858] [client 52.236.49.63:38002] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aeSr3rmztjlk9tsmoez3ugAAAI8"]
[Sun Apr 19 18:18:07.533267 2026] [:error] [pid 47775:tid 47860] [client 52.236.49.63:25665] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aeSr37mztjlk9tsmoez3vgAAAJE"]
[Sun Apr 19 18:18:08.103224 2026] [:error] [pid 47775:tid 47851] [client 52.236.49.63:2704] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aeSr4Lmztjlk9tsmoez3wQAAAIg"]
[Sun Apr 19 18:18:08.655219 2026] [:error] [pid 47886:tid 47909] [client 52.236.49.63:34432] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aeSr4ESe8yiyuPrD7yNeHAAAANU"]
[Sun Apr 19 18:18:09.210179 2026] [:error] [pid 15764:tid 15848] [client 52.236.49.63:25638] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aeSr4WLL_sqdSHoVp-TQWwAAAlY"]
[Sun Apr 19 18:18:09.760310 2026] [:error] [pid 47775:tid 47843] [client 52.236.49.63:59155] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeSr4bmztjlk9tsmoez3wwAAAIA"]
[Sun Apr 19 18:18:10.338733 2026] [:error] [pid 15694:tid 15731] [client 52.236.49.63:34433] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeSr4rimB-jol1fwqAr6YgAAAYU"]
[Sun Apr 19 18:18:10.911938 2026] [:error] [pid 47773:tid 47834] [client 52.236.49.63:2307] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeSr4uiBHdnCJDuPq9Ad0gAAAFI"]
[Sun Apr 19 18:18:11.456780 2026] [:error] [pid 47773:tid 47819] [client 52.236.49.63:25703] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeSr4-iBHdnCJDuPq9Ad1QAAAEM"]
[Sun Apr 19 18:18:12.008194 2026] [:error] [pid 47886:tid 47894] [client 52.236.49.63:59178] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeSr5ESe8yiyuPrD7yNeHQAAAMY"]
[Sun Apr 19 18:18:12.593049 2026] [:error] [pid 15763:tid 15801] [client 52.236.49.63:25675] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeSr5LMXv1Y1THOoxaDKUwAAAgU"]
[Sun Apr 19 18:18:13.161718 2026] [:error] [pid 15760:tid 15772] [client 52.236.49.63:25601] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeSr5fSdD_XHQMJ_ISvQUwAAAcQ"]
[Sun Apr 19 18:18:13.708965 2026] [:error] [pid 15760:tid 15788] [client 52.236.49.63:25714] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeSr5fSdD_XHQMJ_ISvQVwAAAdQ"]
[Sun Apr 19 18:18:14.264912 2026] [:error] [pid 47772:tid 47792] [client 52.236.49.63:25708] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aeSr5oc0L16cb4smAz-EAgAAAAM"]
[Sun Apr 19 18:18:14.878354 2026] [:error] [pid 47886:tid 47890] [client 52.236.49.63:59137] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aeSr5kSe8yiyuPrD7yNeIgAAAMI"]
[Sun Apr 19 18:18:15.429019 2026] [:error] [pid 15764:tid 15843] [client 52.236.49.63:34495] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aeSr52LL_sqdSHoVp-TQYQAAAlE"]
[Sun Apr 19 18:18:16.009535 2026] [:error] [pid 15764:tid 15839] [client 52.236.49.63:59184] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aeSr6GLL_sqdSHoVp-TQYgAAAk0"]
[Sun Apr 19 18:18:16.555616 2026] [:error] [pid 47772:tid 47812] [client 52.236.49.63:25626] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aeSr6Ic0L16cb4smAz-EBgAAABc"]
[Sun Apr 19 18:18:17.132825 2026] [:error] [pid 47772:tid 47803] [client 52.236.49.63:2743] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aeSr6Yc0L16cb4smAz-ECQAAAA4"]
[Sun Apr 19 18:18:17.717456 2026] [:error] [pid 47772:tid 47811] [client 52.236.49.63:25650] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aeSr6Yc0L16cb4smAz-EDAAAABY"]
[Sun Apr 19 18:18:18.301082 2026] [:error] [pid 47772:tid 47797] [client 52.236.49.63:59180] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aeSr6oc0L16cb4smAz-EEAAAAAg"]
[Sun Apr 19 18:18:18.830065 2026] [:error] [pid 15760:tid 15780] [client 52.236.49.63:63851] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "aeSr6vSdD_XHQMJ_ISvQYgAAAcw"]
[Sun Apr 19 18:18:19.352311 2026] [:error] [pid 15760:tid 15771] [client 52.236.49.63:42046] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "aeSr6_SdD_XHQMJ_ISvQZQAAAcM"]
[Sun Apr 19 18:18:19.901338 2026] [:error] [pid 15764:tid 15844] [client 52.236.49.63:25692] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "aeSr62LL_sqdSHoVp-TQZwAAAlI"]
[Sun Apr 19 18:18:20.434301 2026] [:error] [pid 47886:tid 47902] [client 52.236.49.63:34456] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "aeSr7ESe8yiyuPrD7yNeJAAAAM4"]
[Sun Apr 19 18:18:20.987725 2026] [:error] [pid 47772:tid 47805] [client 52.236.49.63:2736] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeSr7Ic0L16cb4smAz-EFQAAABA"]
[Sun Apr 19 18:18:21.509823 2026] [:error] [pid 15763:tid 15820] [client 52.236.49.63:25711] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeSr7bMXv1Y1THOoxaDKVgAAAhg"]
[Sun Apr 19 18:18:28.563483 2026] [:error] [pid 47886:tid 47903] [client 52.236.49.63:37952] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeSr9ESe8yiyuPrD7yNeMwAAAM8"]
[Sun Apr 19 18:18:29.088733 2026] [:error] [pid 15763:tid 15799] [client 52.236.49.63:34468] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeSr9bMXv1Y1THOoxaDKaAAAAgM"]
[Sun Apr 19 18:18:29.607755 2026] [:error] [pid 47772:tid 47798] [client 52.236.49.63:25721] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeSr9Yc0L16cb4smAz-EHwAAAAk"]
[Sun Apr 19 18:18:30.139244 2026] [:error] [pid 47772:tid 47793] [client 52.236.49.63:42010] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aeSr9oc0L16cb4smAz-EIgAAAAQ"]
[Sun Apr 19 18:18:30.657825 2026] [:error] [pid 47772:tid 47809] [client 52.236.49.63:42036] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeSr9oc0L16cb4smAz-EJQAAABQ"]
[Sun Apr 19 18:18:31.199430 2026] [:error] [pid 47773:tid 47839] [client 52.236.49.63:34464] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeSr9-iBHdnCJDuPq9Ad4gAAAFc"]
[Sun Apr 19 18:18:31.717997 2026] [:error] [pid 15764:tid 15842] [client 52.236.49.63:59151] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeSr92LL_sqdSHoVp-TQcAAAAlA"]
[Sun Apr 19 18:18:32.279451 2026] [:error] [pid 15760:tid 15770] [client 52.236.49.63:2707] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeSr-PSdD_XHQMJ_ISvQdwAAAcI"]
[Sun Apr 19 18:18:32.844246 2026] [:error] [pid 47772:tid 47810] [client 52.236.49.63:34446] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeSr-Ic0L16cb4smAz-ELAAAABU"]
[Sun Apr 19 18:18:33.344523 2026] [:error] [pid 47773:tid 47827] [client 52.236.49.63:59153] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeSr-eiBHdnCJDuPq9Ad5wAAAEs"]
[Sun Apr 19 18:18:33.917572 2026] [:error] [pid 15765:tid 15868] [client 52.236.49.63:25629] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeSr-fRqinw-W5EwQ77kJAAAAo8"]
[Sun Apr 19 18:18:34.456913 2026] [:error] [pid 47773:tid 47835] [client 52.236.49.63:25715] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeSr-uiBHdnCJDuPq9Ad6QAAAFM"]
[Sun Apr 19 18:18:35.004584 2026] [:error] [pid 15760:tid 15784] [client 52.236.49.63:2699] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aeSr-_SdD_XHQMJ_ISvQfAAAAdA"]
[Sun Apr 19 18:18:35.548169 2026] [:error] [pid 47775:tid 47858] [client 52.236.49.63:34461] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aeSr-7mztjlk9tsmoez30AAAAI8"]
[Sun Apr 19 18:18:36.096019 2026] [:error] [pid 47775:tid 47847] [client 52.236.49.63:2713] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aeSr_Lmztjlk9tsmoez30gAAAIQ"]
[Sun Apr 19 18:18:36.649705 2026] [:error] [pid 47773:tid 47829] [client 52.236.49.63:2719] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aeSr_OiBHdnCJDuPq9Ad7AAAAE0"]
[Sun Apr 19 18:18:37.155336 2026] [:error] [pid 15760:tid 15769] [client 52.236.49.63:37940] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeSr_fSdD_XHQMJ_ISvQgQAAAcE"]
[Sun Apr 19 18:18:37.669414 2026] [:error] [pid 15760:tid 15792] [client 52.236.49.63:2746] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeSr_fSdD_XHQMJ_ISvQhAAAAdg"]
[Sun Apr 19 18:18:38.264100 2026] [:error] [pid 15760:tid 15779] [client 52.236.49.63:42023] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeSr_vSdD_XHQMJ_ISvQiAAAAcs"]
[Sun Apr 19 18:18:38.782465 2026] [:error] [pid 47772:tid 47790] [client 52.236.49.63:59199] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeSr_oc0L16cb4smAz-ENwAAAAE"]
[Sun Apr 19 18:18:39.326644 2026] [:error] [pid 15764:tid 15840] [client 52.236.49.63:41989] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeSr_2LL_sqdSHoVp-TQegAAAk4"]
[Sun Apr 19 18:18:39.922424 2026] [:error] [pid 47775:tid 47867] [client 52.236.49.63:2697] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeSr_7mztjlk9tsmoez31AAAAJg"]
[Sun Apr 19 18:18:40.501859 2026] [:error] [pid 15760:tid 15776] [client 52.236.49.63:2696] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeSsAPSdD_XHQMJ_ISvQkgAAAcg"]
[Sun Apr 19 18:18:41.068926 2026] [:error] [pid 15693:tid 15717] [client 52.236.49.63:17421] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeSsAcNMD-ccazQlTslJfAAAAVU"]
[Sun Apr 19 18:18:41.621763 2026] [:error] [pid 47775:tid 47850] [client 52.236.49.63:42037] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeSsAbmztjlk9tsmoez31wAAAIc"]
[Sun Apr 19 18:18:42.158619 2026] [:error] [pid 15694:tid 15744] [client 52.236.49.63:34494] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeSsArimB-jol1fwqAr6cAAAAZI"]
[Sun Apr 19 18:18:42.685047 2026] [:error] [pid 15760:tid 15779] [client 52.236.49.63:59166] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeSsAvSdD_XHQMJ_ISvQlwAAAcs"]
[Sun Apr 19 18:18:43.213657 2026] [:error] [pid 15693:tid 15715] [client 52.236.49.63:26813] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeSsA8NMD-ccazQlTslJfgAAAVM"]
[Sun Apr 19 18:18:43.770898 2026] [:error] [pid 15760:tid 15791] [client 52.236.49.63:25645] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeSsA_SdD_XHQMJ_ISvQmAAAAdc"]
[Sun Apr 19 18:18:44.334803 2026] [:error] [pid 15763:tid 15796] [client 52.236.49.63:59168] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeSsBLMXv1Y1THOoxaDKcwAAAgA"]
[Sun Apr 19 18:18:44.924769 2026] [:error] [pid 15763:tid 15803] [client 52.236.49.63:2708] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeSsBLMXv1Y1THOoxaDKdQAAAgc"]
[Sun Apr 19 18:18:45.433161 2026] [:error] [pid 47772:tid 47791] [client 52.236.49.63:25713] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeSsBYc0L16cb4smAz-EPAAAAAI"]
[Sun Apr 19 18:18:46.015775 2026] [:error] [pid 15764:tid 15846] [client 52.236.49.63:59147] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeSsBmLL_sqdSHoVp-TQfgAAAlQ"]
[Sun Apr 19 18:18:46.643276 2026] [:error] [pid 15763:tid 15809] [client 52.236.49.63:2737] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeSsBrMXv1Y1THOoxaDKeAAAAg0"]
[Sun Apr 19 18:18:47.174361 2026] [:error] [pid 15763:tid 15817] [client 52.236.49.63:25640] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeSsB7MXv1Y1THOoxaDKeQAAAhU"]
[Sun Apr 19 18:18:47.716007 2026] [:error] [pid 47772:tid 47795] [client 52.236.49.63:59167] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeSsB4c0L16cb4smAz-EPgAAAAY"]
[Sun Apr 19 18:18:48.356101 2026] [:error] [pid 47772:tid 47804] [client 52.236.49.63:2716] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeSsCIc0L16cb4smAz-EPwAAAA8"]
[Sun Apr 19 18:18:48.957351 2026] [:error] [pid 15763:tid 15814] [client 52.236.49.63:59190] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeSsCLMXv1Y1THOoxaDKegAAAhI"]
[Sun Apr 19 18:18:49.527619 2026] [:error] [pid 47886:tid 47899] [client 52.236.49.63:25697] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeSsCUSe8yiyuPrD7yNeOAAAAMs"]
[Sun Apr 19 18:18:50.066161 2026] [:error] [pid 15764:tid 15841] [client 52.236.49.63:25610] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeSsCmLL_sqdSHoVp-TQhgAAAk8"]
[Sun Apr 19 18:18:50.621932 2026] [:error] [pid 47886:tid 47897] [client 52.236.49.63:59190] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeSsCkSe8yiyuPrD7yNeOQAAAMk"]
[Sun Apr 19 18:18:51.239606 2026] [:error] [pid 47772:tid 47790] [client 52.236.49.63:59181] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeSsC4c0L16cb4smAz-EQgAAAAE"]
[Sun Apr 19 18:18:51.774967 2026] [:error] [pid 47772:tid 47807] [client 52.236.49.63:37913] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeSsC4c0L16cb4smAz-EQwAAABI"]
[Sun Apr 19 18:18:52.313072 2026] [:error] [pid 15764:tid 15844] [client 52.236.49.63:59146] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeSsDGLL_sqdSHoVp-TQiQAAAlI"]
[Sun Apr 19 18:18:52.828672 2026] [:error] [pid 15764:tid 15838] [client 52.236.49.63:37933] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeSsDGLL_sqdSHoVp-TQiwAAAkw"]
[Sun Apr 19 18:18:53.364766 2026] [:error] [pid 15764:tid 15826] [client 52.236.49.63:59185] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeSsDWLL_sqdSHoVp-TQjgAAAkA"]
[Sun Apr 19 18:18:53.897119 2026] [:error] [pid 47775:tid 47858] [client 52.236.49.63:2739] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeSsDbmztjlk9tsmoez32wAAAI8"]
[Sun Apr 19 18:18:54.416046 2026] [:error] [pid 47886:tid 47906] [client 52.236.49.63:34479] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeSsDkSe8yiyuPrD7yNeOwAAANI"]
[Sun Apr 19 18:18:54.948723 2026] [:error] [pid 47772:tid 47800] [client 52.236.49.63:59189] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeSsDoc0L16cb4smAz-ERAAAAAs"]
[Sun Apr 19 18:18:55.517659 2026] [:error] [pid 15763:tid 15815] [client 52.236.49.63:41993] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeSsD7MXv1Y1THOoxaDKhgAAAhM"]
[Sun Apr 19 18:18:56.090449 2026] [:error] [pid 15763:tid 15809] [client 52.236.49.63:25717] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeSsELMXv1Y1THOoxaDKhwAAAg0"]
[Sun Apr 19 18:18:56.738383 2026] [:error] [pid 15763:tid 15818] [client 52.236.49.63:2729] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeSsELMXv1Y1THOoxaDKigAAAhY"]
[Sun Apr 19 18:18:57.269011 2026] [:error] [pid 15763:tid 15806] [client 52.236.49.63:25707] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeSsEbMXv1Y1THOoxaDKiwAAAgo"]
[Sun Apr 19 18:18:57.779395 2026] [:error] [pid 47773:tid 47817] [client 52.236.49.63:25684] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeSsEeiBHdnCJDuPq9Ad-wAAAEE"]
[Sun Apr 19 18:18:58.316145 2026] [:error] [pid 47773:tid 47821] [client 52.236.49.63:25608] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeSsEuiBHdnCJDuPq9Ad_AAAAEU"]
[Sun Apr 19 18:18:58.925092 2026] [:error] [pid 47773:tid 47831] [client 52.236.49.63:25628] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeSsEuiBHdnCJDuPq9Ad_gAAAE8"]
[Sun Apr 19 18:18:59.476478 2026] [:error] [pid 47772:tid 47796] [client 52.236.49.63:59176] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeSsE4c0L16cb4smAz-ESAAAAAc"]
[Sun Apr 19 18:19:00.089372 2026] [:error] [pid 15764:tid 15838] [client 52.236.49.63:25674] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeSsFGLL_sqdSHoVp-TQlQAAAkw"]
[Sun Apr 19 18:19:00.653948 2026] [:error] [pid 15764:tid 15830] [client 52.236.49.63:25644] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeSsFGLL_sqdSHoVp-TQlwAAAkQ"]
[Sun Apr 19 18:19:01.244686 2026] [:error] [pid 15764:tid 15826] [client 52.236.49.63:2714] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeSsFWLL_sqdSHoVp-TQmQAAAkA"]
[Sun Apr 19 18:19:01.796127 2026] [:error] [pid 47775:tid 47862] [client 52.236.49.63:42014] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeSsFbmztjlk9tsmoez33gAAAJM"]
[Sun Apr 19 18:19:02.372083 2026] [:error] [pid 47775:tid 47856] [client 52.236.49.63:59157] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeSsFrmztjlk9tsmoez34QAAAI0"]
[Sun Apr 19 18:19:02.911342 2026] [:error] [pid 15693:tid 15702] [client 52.236.49.63:25622] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeSsFsNMD-ccazQlTslJhgAAAUY"]
[Sun Apr 19 18:19:03.478015 2026] [:error] [pid 15763:tid 15819] [client 52.236.49.63:42033] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeSsF7MXv1Y1THOoxaDKjgAAAhc"]
[Sun Apr 19 18:19:04.178396 2026] [:error] [pid 15694:tid 15751] [client 52.236.49.63:59186] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeSsGLimB-jol1fwqAr6hAAAAZg"]
[Sun Apr 19 18:19:04.800945 2026] [:error] [pid 15765:tid 15859] [client 52.236.49.63:17439] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeSsGPRqinw-W5EwQ77kLgAAAoY"]
[Sun Apr 19 18:19:05.373971 2026] [:error] [pid 47773:tid 47825] [client 52.236.49.63:25613] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeSsGeiBHdnCJDuPq9AeAQAAAEk"]
[Sun Apr 19 18:19:06.024521 2026] [:error] [pid 47775:tid 47863] [client 52.236.49.63:26752] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeSsGrmztjlk9tsmoez36AAAAJQ"]
[Sun Apr 19 18:19:06.571090 2026] [:error] [pid 15693:tid 15701] [client 52.236.49.63:59197] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeSsGsNMD-ccazQlTslJiQAAAUU"]
[Sun Apr 19 18:19:07.215411 2026] [:error] [pid 47773:tid 47822] [client 52.236.49.63:2740] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeSsG-iBHdnCJDuPq9AeBgAAAEY"]
[Sun Apr 19 18:19:07.950032 2026] [:error] [pid 47886:tid 47890] [client 52.236.49.63:41994] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeSsG0Se8yiyuPrD7yNePAAAAMI"]
[Sun Apr 19 18:19:08.596624 2026] [:error] [pid 15693:tid 15706] [client 52.236.49.63:59143] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeSsHMNMD-ccazQlTslJjAAAAUo"]
[Sun Apr 19 18:19:09.157250 2026] [:error] [pid 47773:tid 47840] [client 52.236.49.63:25617] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeSsHeiBHdnCJDuPq9AeBwAAAFg"]
[Sun Apr 19 18:19:09.737184 2026] [:error] [pid 47773:tid 47835] [client 52.236.49.63:25727] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeSsHeiBHdnCJDuPq9AeCQAAAFM"]
[Sun Apr 19 18:19:10.467365 2026] [:error] [pid 47886:tid 47904] [client 52.236.49.63:42021] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeSsHkSe8yiyuPrD7yNePgAAANA"]
[Sun Apr 19 18:19:11.112627 2026] [:error] [pid 15693:tid 15708] [client 52.236.49.63:63852] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeSsH8NMD-ccazQlTslJkQAAAUw"]
[Sun Apr 19 18:19:11.693985 2026] [:error] [pid 47773:tid 47819] [client 52.236.49.63:63816] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeSsH-iBHdnCJDuPq9AeCwAAAEM"]
[Sun Apr 19 18:19:12.241267 2026] [:error] [pid 15765:tid 15877] [client 52.236.49.63:25671] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeSsIPRqinw-W5EwQ77kMQAAApg"]
[Sun Apr 19 18:19:12.820912 2026] [:error] [pid 15765:tid 15876] [client 52.236.49.63:26802] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeSsIPRqinw-W5EwQ77kMgAAApc"]
[Sun Apr 19 18:19:13.424832 2026] [:error] [pid 15693:tid 15719] [client 52.236.49.63:59160] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeSsIcNMD-ccazQlTslJlAAAAVc"]
[Sun Apr 19 18:19:13.955023 2026] [:error] [pid 15693:tid 15702] [client 52.236.49.63:25696] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aeSsIcNMD-ccazQlTslJlQAAAUY"]
[Sun Apr 19 18:19:14.555164 2026] [:error] [pid 15765:tid 15857] [client 52.236.49.63:2701] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aeSsIvRqinw-W5EwQ77kNQAAAoQ"]
[Sun Apr 19 18:19:15.188970 2026] [:error] [pid 15693:tid 15717] [client 52.236.49.63:25600] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aeSsI8NMD-ccazQlTslJmAAAAVU"]
[Sun Apr 19 18:19:15.758334 2026] [:error] [pid 15693:tid 15696] [client 52.236.49.63:37907] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aeSsI8NMD-ccazQlTslJmgAAAUA"]
[Sun Apr 19 18:19:16.480699 2026] [:error] [pid 47886:tid 47898] [client 52.236.49.63:63861] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aeSsJESe8yiyuPrD7yNeQwAAAMo"]
[Sun Apr 19 18:19:17.073198 2026] [:error] [pid 47772:tid 47802] [client 52.236.49.63:63844] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aeSsJYc0L16cb4smAz-ETwAAAA0"]
[Sun Apr 19 18:19:17.710168 2026] [:error] [pid 47772:tid 47797] [client 52.236.49.63:41997] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aeSsJYc0L16cb4smAz-EUAAAAAg"]
[Sun Apr 19 18:19:18.366343 2026] [:error] [pid 47772:tid 47806] [client 52.236.49.63:17454] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aeSsJoc0L16cb4smAz-EUgAAABE"]
[Sun Apr 19 18:19:19.076180 2026] [:error] [pid 47773:tid 47828] [client 52.236.49.63:2692] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeSsJ-iBHdnCJDuPq9AeEwAAAEw"]
[Sun Apr 19 18:19:19.657707 2026] [:error] [pid 47773:tid 47816] [client 52.236.49.63:38015] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeSsJ-iBHdnCJDuPq9AeFQAAAEA"]
[Sun Apr 19 18:19:20.226505 2026] [:error] [pid 47773:tid 47836] [client 52.236.49.63:25663] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeSsKOiBHdnCJDuPq9AeFgAAAFQ"]
[Sun Apr 19 18:19:20.765512 2026] [:error] [pid 15764:tid 15841] [client 52.236.49.63:37988] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aeSsKGLL_sqdSHoVp-TQqwAAAk8"]
[Sun Apr 19 18:19:21.378031 2026] [:error] [pid 15760:tid 15776] [client 52.236.49.63:25680] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeSsKfSdD_XHQMJ_ISvQpQAAAcg"]
[Sun Apr 19 18:19:22.010863 2026] [:error] [pid 15760:tid 15769] [client 52.236.49.63:37996] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeSsKvSdD_XHQMJ_ISvQqwAAAcE"]
[Sun Apr 19 18:19:22.577501 2026] [:error] [pid 15763:tid 15816] [client 52.236.49.63:37964] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeSsKrMXv1Y1THOoxaDKkgAAAhQ"]
[Sun Apr 19 18:19:23.204465 2026] [:error] [pid 47773:tid 47818] [client 52.236.49.63:59191] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aeSsK-iBHdnCJDuPq9AeHgAAAEI"]
[Sun Apr 19 18:19:23.763102 2026] [:error] [pid 15763:tid 15807] [client 52.236.49.63:34472] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeSsK7MXv1Y1THOoxaDKkwAAAgs"]
[Sun Apr 19 18:19:24.484707 2026] [:error] [pid 15764:tid 15846] [client 52.236.49.63:2724] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeSsLGLL_sqdSHoVp-TQrwAAAlQ"]
[Sun Apr 19 18:19:25.082047 2026] [:error] [pid 15764:tid 15837] [client 52.236.49.63:41994] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeSsLWLL_sqdSHoVp-TQsAAAAks"]
[Sun Apr 19 18:19:25.665029 2026] [:error] [pid 15764:tid 15835] [client 52.236.49.63:34484] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeSsLWLL_sqdSHoVp-TQsgAAAkk"]
[Sun Apr 19 18:19:26.360348 2026] [:error] [pid 47886:tid 47906] [client 52.236.49.63:42009] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeSsLkSe8yiyuPrD7yNeRgAAANI"]
[Sun Apr 19 18:19:26.958761 2026] [:error] [pid 47775:tid 47847] [client 52.236.49.63:17423] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeSsLrmztjlk9tsmoez39AAAAIQ"]
[Sun Apr 19 18:19:27.562950 2026] [:error] [pid 15765:tid 15871] [client 52.236.49.63:59192] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeSsL_Rqinw-W5EwQ77kOQAAApI"]
[Sun Apr 19 18:19:35.011012 2026] [:error] [pid 15764:tid 15831] [client 52.236.49.63:63850] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeSsN2LL_sqdSHoVp-TQygAAAkU"]
[Sun Apr 19 18:19:35.641729 2026] [:error] [pid 47775:tid 47845] [client 52.236.49.63:59140] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeSsN7mztjlk9tsmoez4BgAAAII"]
[Sun Apr 19 18:19:36.640344 2026] [:error] [pid 15763:tid 15815] [client 52.236.49.63:42045] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeSsOLMXv1Y1THOoxaDKmAAAAhM"]
[Sun Apr 19 18:19:37.388456 2026] [:error] [pid 15765:tid 15858] [client 52.236.49.63:25666] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeSsOfRqinw-W5EwQ77kPwAAAoU"]
[Sun Apr 19 18:19:38.201093 2026] [:error] [pid 15763:tid 15806] [client 52.236.49.63:59156] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeSsOrMXv1Y1THOoxaDKmwAAAgo"]
[Sun Apr 19 18:19:39.200690 2026] [:error] [pid 15764:tid 15830] [client 52.236.49.63:59188] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeSsO2LL_sqdSHoVp-TQ0AAAAkQ"]
[Sun Apr 19 18:19:39.967746 2026] [:error] [pid 15760:tid 15781] [client 52.236.49.63:41990] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeSsO_SdD_XHQMJ_ISvQyQAAAc0"]
[Sun Apr 19 18:19:40.788799 2026] [:error] [pid 15764:tid 15836] [client 52.236.49.63:26768] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeSsPGLL_sqdSHoVp-TQ1gAAAko"]
[Sun Apr 19 18:19:41.534394 2026] [:error] [pid 15764:tid 15831] [client 52.236.49.63:25616] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aeSsPWLL_sqdSHoVp-TQ2QAAAkU"]
[Sun Apr 19 18:19:42.240133 2026] [:error] [pid 47775:tid 47849] [client 52.236.49.63:26773] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aeSsPrmztjlk9tsmoez4DgAAAIY"]
[Sun Apr 19 18:19:43.191520 2026] [:error] [pid 15693:tid 15710] [client 52.236.49.63:59170] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aeSsP8NMD-ccazQlTslJqgAAAU4"]
[Sun Apr 19 18:19:43.805228 2026] [:error] [pid 15760:tid 15776] [client 52.236.49.63:25618] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "aeSsP_SdD_XHQMJ_ISvQ0QAAAcg"]
[Sun Apr 19 18:19:44.406763 2026] [:error] [pid 15764:tid 15839] [client 52.236.49.63:34448] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeSsQGLL_sqdSHoVp-TQ3QAAAk0"]
[Sun Apr 19 18:19:45.074028 2026] [:error] [pid 15760:tid 15782] [client 52.236.49.63:25619] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeSsQfSdD_XHQMJ_ISvQ1AAAAc4"]
[Sun Apr 19 18:19:45.679126 2026] [:error] [pid 15760:tid 15785] [client 52.236.49.63:42029] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeSsQfSdD_XHQMJ_ISvQ1wAAAdE"]
[Sun Apr 19 18:19:46.291925 2026] [:error] [pid 15760:tid 15768] [client 52.236.49.63:25663] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeSsQvSdD_XHQMJ_ISvQ2AAAAcA"]
[Sun Apr 19 18:19:46.922269 2026] [:error] [pid 15760:tid 15792] [client 52.236.49.63:59152] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeSsQvSdD_XHQMJ_ISvQ2wAAAdg"]
[Sun Apr 19 18:19:47.553891 2026] [:error] [pid 15760:tid 15784] [client 52.236.49.63:63845] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeSsQ_SdD_XHQMJ_ISvQ4AAAAdA"]
[Sun Apr 19 18:19:48.137651 2026] [:error] [pid 15760:tid 15775] [client 52.236.49.63:2696] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeSsRPSdD_XHQMJ_ISvQ5AAAAcc"]
[Sun Apr 19 18:19:48.735177 2026] [:error] [pid 15764:tid 15829] [client 52.236.49.63:59144] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeSsRGLL_sqdSHoVp-TQ6AAAAkM"]
[Sun Apr 19 18:19:49.337049 2026] [:error] [pid 15764:tid 15834] [client 52.236.49.63:42034] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeSsRWLL_sqdSHoVp-TQ6gAAAkg"]
[Sun Apr 19 18:19:49.911193 2026] [:error] [pid 15760:tid 15783] [client 52.236.49.63:25699] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeSsRfSdD_XHQMJ_ISvQ6AAAAc8"]
[Sun Apr 19 18:19:50.544307 2026] [:error] [pid 47886:tid 47903] [client 52.236.49.63:26812] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeSsRkSe8yiyuPrD7yNeVgAAAM8"]
[Sun Apr 19 18:19:51.239146 2026] [:error] [pid 15764:tid 15836] [client 52.236.49.63:42028] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeSsR2LL_sqdSHoVp-TQ7AAAAko"]
[Sun Apr 19 18:19:51.977965 2026] [:error] [pid 47886:tid 47908] [client 52.236.49.63:34480] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeSsR0Se8yiyuPrD7yNeWAAAANQ"]
[Sun Apr 19 18:19:52.774861 2026] [:error] [pid 15760:tid 15787] [client 52.236.49.63:37925] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeSsSPSdD_XHQMJ_ISvQ8gAAAdM"]
[Sun Apr 19 18:19:53.395048 2026] [:error] [pid 15760:tid 15776] [client 52.236.49.63:63836] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeSsSfSdD_XHQMJ_ISvQ9wAAAcg"]
[Sun Apr 19 18:19:53.925429 2026] [:error] [pid 47775:tid 47845] [client 52.236.49.63:25625] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeSsSbmztjlk9tsmoez4EAAAAII"]
[Sun Apr 19 18:19:54.495314 2026] [:error] [pid 15694:tid 15746] [client 52.236.49.63:26766] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeSsSrimB-jol1fwqAr6jQAAAZQ"]
[Sun Apr 19 18:19:55.240538 2026] [:error] [pid 15764:tid 15847] [client 52.236.49.63:2703] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeSsS2LL_sqdSHoVp-TQ7gAAAlU"]
[Sun Apr 19 18:19:55.907309 2026] [:error] [pid 15693:tid 15701] [client 52.236.49.63:2330] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeSsS8NMD-ccazQlTslJrwAAAUU"]
[Sun Apr 19 18:19:56.486266 2026] [:error] [pid 15763:tid 15808] [client 52.236.49.63:2730] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeSsTLMXv1Y1THOoxaDKqAAAAgw"]
[Sun Apr 19 18:19:57.294482 2026] [:error] [pid 15694:tid 15726] [client 52.236.49.63:25710] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeSsTbimB-jol1fwqAr6jgAAAYM"]
[Sun Apr 19 18:19:57.883712 2026] [:error] [pid 15694:tid 15747] [client 52.236.49.63:42005] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeSsTbimB-jol1fwqAr6jwAAAZU"]
[Sun Apr 19 18:19:58.457855 2026] [:error] [pid 15760:tid 15770] [client 52.236.49.63:41991] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeSsTvSdD_XHQMJ_ISvRBgAAAcI"]
[Sun Apr 19 18:19:59.060380 2026] [:error] [pid 15764:tid 15826] [client 52.236.49.63:25649] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeSsT2LL_sqdSHoVp-TQ9QAAAkA"]
[Sun Apr 19 18:19:59.741625 2026] [:error] [pid 15764:tid 15836] [client 52.236.49.63:37987] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeSsT2LL_sqdSHoVp-TQ9wAAAko"]
[Sun Apr 19 18:20:00.356749 2026] [:error] [pid 15694:tid 15751] [client 52.236.49.63:38000] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeSsULimB-jol1fwqAr6kQAAAZg"]
[Sun Apr 19 18:20:00.968049 2026] [:error] [pid 15693:tid 15699] [client 52.236.49.63:25690] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeSsUMNMD-ccazQlTslJsQAAAUM"]
[Sun Apr 19 18:20:01.617830 2026] [:error] [pid 15765:tid 15873] [client 52.236.49.63:2318] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeSsUfRqinw-W5EwQ77kRwAAApQ"]
[Sun Apr 19 18:20:02.214670 2026] [:error] [pid 15765:tid 15869] [client 52.236.49.63:25641] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeSsUvRqinw-W5EwQ77kSAAAApA"]
[Sun Apr 19 18:20:02.895937 2026] [:error] [pid 15693:tid 15702] [client 52.236.49.63:37929] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeSsUsNMD-ccazQlTslJtgAAAUY"]
[Sun Apr 19 18:20:03.500281 2026] [:error] [pid 47773:tid 47818] [client 52.236.49.63:25668] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeSsU-iBHdnCJDuPq9AeKwAAAEI"]
[Sun Apr 19 18:20:04.471948 2026] [:error] [pid 15764:tid 15827] [client 52.236.49.63:21986] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeSsVGLL_sqdSHoVp-TQ-gAAAkE"]
[Sun Apr 19 18:20:05.221048 2026] [:error] [pid 15764:tid 15836] [client 52.236.49.63:21956] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeSsVWLL_sqdSHoVp-TQ_wAAAko"]
[Sun Apr 19 18:20:05.911320 2026] [:error] [pid 47773:tid 47816] [client 52.236.49.63:59173] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeSsVeiBHdnCJDuPq9AeMAAAAEA"]
[Sun Apr 19 18:20:06.701409 2026] [:error] [pid 47773:tid 47837] [client 52.236.49.63:25664] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeSsVuiBHdnCJDuPq9AeMQAAAFU"]
[Sun Apr 19 18:20:07.413636 2026] [:error] [pid 15763:tid 15807] [client 52.236.49.63:38004] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeSsV7MXv1Y1THOoxaDKqgAAAgs"]
[Sun Apr 19 18:20:08.071307 2026] [:error] [pid 15694:tid 15736] [client 52.236.49.63:17410] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeSsWLimB-jol1fwqAr6kgAAAYo"]
[Sun Apr 19 18:20:08.802228 2026] [:error] [pid 15764:tid 15829] [client 52.236.49.63:21980] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeSsWGLL_sqdSHoVp-TRCAAAAkM"]
[Sun Apr 19 18:20:09.444692 2026] [:error] [pid 15694:tid 15734] [client 52.236.49.63:21989] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeSsWbimB-jol1fwqAr6lAAAAYg"]
[Sun Apr 19 18:20:10.059722 2026] [:error] [pid 15764:tid 15837] [client 52.236.49.63:2735] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeSsWmLL_sqdSHoVp-TRDAAAAks"]
[Sun Apr 19 18:20:10.701611 2026] [:error] [pid 15763:tid 15803] [client 52.236.49.63:17468] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeSsWrMXv1Y1THOoxaDKrQAAAgc"]
[Sun Apr 19 18:20:11.404292 2026] [:error] [pid 15763:tid 15796] [client 52.236.49.63:41999] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeSsW7MXv1Y1THOoxaDKrgAAAgA"]
[Sun Apr 19 18:20:12.176048 2026] [:error] [pid 15760:tid 15769] [client 52.236.49.63:22012] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeSsXPSdD_XHQMJ_ISvRHQAAAcE"]
[Sun Apr 19 18:20:12.940562 2026] [:error] [pid 47772:tid 47804] [client 52.236.49.63:12701] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeSsXIc0L16cb4smAz-EYgAAAA8"]
[Sun Apr 19 18:20:13.509363 2026] [:error] [pid 47773:tid 47821] [client 52.236.49.63:25712] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeSsXeiBHdnCJDuPq9AeNgAAAEU"]
[Sun Apr 19 18:20:14.127601 2026] [:error] [pid 47772:tid 47810] [client 52.236.49.63:26760] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeSsXoc0L16cb4smAz-EZAAAABU"]
[Sun Apr 19 18:20:14.872499 2026] [:error] [pid 15765:tid 15868] [client 52.236.49.63:63832] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeSsXvRqinw-W5EwQ77kTQAAAo8"]
[Sun Apr 19 18:20:15.471925 2026] [:error] [pid 47886:tid 47900] [client 52.236.49.63:12714] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeSsX0Se8yiyuPrD7yNeXgAAAMw"]
[Sun Apr 19 18:20:16.034714 2026] [:error] [pid 47772:tid 47797] [client 52.236.49.63:22010] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeSsYIc0L16cb4smAz-EaQAAAAg"]
[Sun Apr 19 18:20:16.677826 2026] [:error] [pid 15765:tid 15863] [client 52.236.49.63:21972] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeSsYPRqinw-W5EwQ77kTgAAAoo"]
[Sun Apr 19 18:20:17.206357 2026] [:error] [pid 15760:tid 15784] [client 52.236.49.63:34443] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeSsYfSdD_XHQMJ_ISvRJAAAAdA"]
[Sun Apr 19 18:20:17.902013 2026] [:error] [pid 15763:tid 15818] [client 52.236.49.63:59163] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeSsYbMXv1Y1THOoxaDKswAAAhY"]
[Sun Apr 19 18:20:18.456707 2026] [:error] [pid 15763:tid 15811] [client 52.236.49.63:37949] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeSsYrMXv1Y1THOoxaDKtQAAAg8"]
[Sun Apr 19 18:20:19.057839 2026] [:error] [pid 47886:tid 47904] [client 52.236.49.63:63862] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeSsY0Se8yiyuPrD7yNeYgAAANA"]
[Sun Apr 19 18:20:19.754415 2026] [:error] [pid 15763:tid 15807] [client 52.236.49.63:22014] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeSsY7MXv1Y1THOoxaDKuAAAAgs"]
[Sun Apr 19 18:20:20.467220 2026] [:error] [pid 15765:tid 15873] [client 52.236.49.63:37944] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeSsZPRqinw-W5EwQ77kUgAAApQ"]
[Sun Apr 19 18:20:21.153003 2026] [:error] [pid 47772:tid 47809] [client 52.236.49.63:42026] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeSsZYc0L16cb4smAz-EbQAAABQ"]
[Sun Apr 19 18:20:21.769836 2026] [:error] [pid 47773:tid 47816] [client 52.236.49.63:25651] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeSsZeiBHdnCJDuPq9AePAAAAEA"]
[Sun Apr 19 18:20:22.548077 2026] [:error] [pid 47886:tid 47910] [client 52.236.49.63:41984] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeSsZkSe8yiyuPrD7yNeZQAAANY"]
[Sun Apr 19 18:20:23.288885 2026] [:error] [pid 47772:tid 47804] [client 52.236.49.63:21988] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeSsZ4c0L16cb4smAz-EbwAAAA8"]
[Sun Apr 19 18:20:24.007734 2026] [:error] [pid 15763:tid 15819] [client 52.236.49.63:52006] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeSsaLMXv1Y1THOoxaDKuwAAAhc"]
[Sun Apr 19 18:20:24.715424 2026] [:error] [pid 47773:tid 47830] [client 52.236.49.63:12699] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeSsaOiBHdnCJDuPq9AePwAAAE4"]
[Sun Apr 19 18:20:25.392326 2026] [:error] [pid 47775:tid 47856] [client 52.236.49.63:37941] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeSsabmztjlk9tsmoez4FwAAAI0"]
[Sun Apr 19 18:20:26.059152 2026] [:error] [pid 47773:tid 47832] [client 52.236.49.63:51995] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeSsauiBHdnCJDuPq9AeRgAAAFA"]
[Sun Apr 19 18:20:26.669090 2026] [:error] [pid 47772:tid 47803] [client 52.236.49.63:2718] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeSsaoc0L16cb4smAz-EcAAAAA4"]
[Sun Apr 19 18:20:27.334077 2026] [:error] [pid 15765:tid 15864] [client 52.236.49.63:37961] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeSsa_Rqinw-W5EwQ77kWAAAAos"]
[Sun Apr 19 18:20:28.051849 2026] [:error] [pid 15764:tid 15837] [client 52.236.49.63:2689] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeSsbGLL_sqdSHoVp-TRFQAAAks"]
[Sun Apr 19 18:20:28.610502 2026] [:error] [pid 15764:tid 15830] [client 52.236.49.63:26806] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeSsbGLL_sqdSHoVp-TRFwAAAkQ"]
[Sun Apr 19 18:20:29.355534 2026] [:error] [pid 47772:tid 47790] [client 52.236.49.63:22006] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeSsbYc0L16cb4smAz-EdQAAAAE"]
[Sun Apr 19 18:20:29.957785 2026] [:error] [pid 15763:tid 15801] [client 52.236.49.63:12690] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeSsbbMXv1Y1THOoxaDKwgAAAgU"]
[Sun Apr 19 18:20:30.533049 2026] [:error] [pid 15760:tid 15782] [client 52.236.49.63:52020] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeSsbvSdD_XHQMJ_ISvRKAAAAc4"]
[Sun Apr 19 18:20:31.145527 2026] [:error] [pid 15760:tid 15771] [client 52.236.49.63:34492] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeSsb_SdD_XHQMJ_ISvRKgAAAcM"]
[Sun Apr 19 18:20:31.790133 2026] [:error] [pid 47772:tid 47794] [client 52.236.49.63:25611] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeSsb4c0L16cb4smAz-EeQAAAAU"]
[Sun Apr 19 18:20:32.464753 2026] [:error] [pid 15763:tid 15810] [client 52.236.49.63:38008] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeSscLMXv1Y1THOoxaDKwwAAAg4"]
[Sun Apr 19 18:20:33.185998 2026] [:error] [pid 47772:tid 47809] [client 52.236.49.63:22001] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeSscYc0L16cb4smAz-EfAAAABQ"]
[Sun Apr 19 18:20:33.742047 2026] [:error] [pid 47773:tid 47825] [client 52.236.49.63:12679] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeSsceiBHdnCJDuPq9AeTQAAAEk"]
[Sun Apr 19 18:20:41.305886 2026] [:error] [pid 15760:tid 15772] [client 52.236.49.63:21962] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeSsefSdD_XHQMJ_ISvRRAAAAcQ"]
[Sun Apr 19 18:20:41.918878 2026] [:error] [pid 47773:tid 47834] [client 52.236.49.63:37893] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeSseeiBHdnCJDuPq9AeagAAAFI"]
[Sun Apr 19 18:20:42.508797 2026] [:error] [pid 15763:tid 15806] [client 52.236.49.63:34470] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeSserMXv1Y1THOoxaDKxQAAAgo"]
[Sun Apr 19 18:20:43.154804 2026] [:error] [pid 47775:tid 47852] [client 52.236.49.63:37945] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeSse7mztjlk9tsmoez4HwAAAIk"]
[Sun Apr 19 18:20:43.778269 2026] [:error] [pid 47775:tid 47864] [client 52.236.49.63:2693] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeSse7mztjlk9tsmoez4IAAAAJU"]
[Sun Apr 19 18:20:44.532645 2026] [:error] [pid 15694:tid 15740] [client 52.236.49.63:25646] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeSsfLimB-jol1fwqAr6nQAAAY4"]
[Sun Apr 19 18:20:45.087012 2026] [:error] [pid 47772:tid 47805] [client 52.236.49.63:21984] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeSsfYc0L16cb4smAz-EggAAABA"]
[Sun Apr 19 18:20:45.669468 2026] [:error] [pid 15763:tid 15807] [client 52.236.49.63:22004] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeSsfbMXv1Y1THOoxaDKywAAAgs"]
[Sun Apr 19 18:20:46.238646 2026] [:error] [pid 15693:tid 15716] [client 52.236.49.63:63826] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeSsfsNMD-ccazQlTslJzAAAAVQ"]
[Sun Apr 19 18:20:46.773710 2026] [:error] [pid 15760:tid 15791] [client 52.236.49.63:52019] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeSsfvSdD_XHQMJ_ISvRWQAAAdc"]
[Sun Apr 19 18:20:47.314865 2026] [:error] [pid 15694:tid 15732] [client 52.236.49.63:51993] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeSsf7imB-jol1fwqAr6oAAAAYY"]
[Sun Apr 19 18:20:47.867936 2026] [:error] [pid 15763:tid 15796] [client 52.236.49.63:21952] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeSsf7MXv1Y1THOoxaDKzwAAAgA"]
[Sun Apr 19 18:20:48.391411 2026] [:error] [pid 15760:tid 15771] [client 52.236.49.63:51979] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeSsgPSdD_XHQMJ_ISvRYQAAAcM"]
[Sun Apr 19 18:20:49.021792 2026] [:error] [pid 15764:tid 15832] [client 52.236.49.63:52004] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeSsgWLL_sqdSHoVp-TRKQAAAkY"]
[Sun Apr 19 18:20:49.594643 2026] [:error] [pid 15764:tid 15850] [client 52.236.49.63:17458] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeSsgWLL_sqdSHoVp-TRKgAAAlc"]
[Sun Apr 19 18:20:50.152279 2026] [:error] [pid 15760:tid 15789] [client 52.236.49.63:12695] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeSsgvSdD_XHQMJ_ISvRawAAAdU"]
[Sun Apr 19 18:20:50.686181 2026] [:error] [pid 47775:tid 47849] [client 52.236.49.63:38006] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeSsgrmztjlk9tsmoez4JwAAAIY"]
[Sun Apr 19 18:20:51.235777 2026] [:error] [pid 15765:tid 15867] [client 52.236.49.63:42041] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeSsg_Rqinw-W5EwQ77kXAAAAo4"]
[Sun Apr 19 18:20:51.789754 2026] [:error] [pid 47775:tid 47843] [client 52.236.49.63:22008] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeSsg7mztjlk9tsmoez4KQAAAIA"]
[Sun Apr 19 18:20:52.318179 2026] [:error] [pid 15764:tid 15848] [client 52.236.49.63:25661] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeSshGLL_sqdSHoVp-TRKwAAAlY"]
[Sun Apr 19 18:20:52.847841 2026] [:error] [pid 15764:tid 15846] [client 52.236.49.63:12733] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeSshGLL_sqdSHoVp-TRLQAAAlQ"]
[Sun Apr 19 18:20:53.378031 2026] [:error] [pid 47775:tid 47858] [client 52.236.49.63:2722] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeSshbmztjlk9tsmoez4LQAAAI8"]
[Sun Apr 19 18:20:53.893874 2026] [:error] [pid 15693:tid 15702] [client 52.236.49.63:59171] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeSshcNMD-ccazQlTslJzQAAAUY"]
[Sun Apr 19 18:20:54.438430 2026] [:error] [pid 15763:tid 15816] [client 52.236.49.63:63837] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeSshrMXv1Y1THOoxaDK0QAAAhQ"]
[Sun Apr 19 18:20:54.951897 2026] [:error] [pid 15763:tid 15807] [client 52.236.49.63:41988] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aeSshrMXv1Y1THOoxaDK0gAAAgs"]
[Sun Apr 19 18:20:55.554340 2026] [:error] [pid 15694:tid 15725] [client 52.236.49.63:12730] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aeSsh7imB-jol1fwqAr6pAAAAYI"]
[Sun Apr 19 18:20:56.111261 2026] [:error] [pid 47772:tid 47811] [client 52.236.49.63:63870] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aeSsiIc0L16cb4smAz-EiwAAABY"]
[Sun Apr 19 18:20:56.650363 2026] [:error] [pid 47773:tid 47816] [client 52.236.49.63:42047] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aeSsiOiBHdnCJDuPq9AeeQAAAEA"]
[Sun Apr 19 18:20:57.169278 2026] [:error] [pid 47773:tid 47834] [client 52.236.49.63:52029] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeSsieiBHdnCJDuPq9AefQAAAFI"]
[Sun Apr 19 18:20:57.704365 2026] [:error] [pid 15764:tid 15826] [client 52.236.49.63:52012] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeSsiWLL_sqdSHoVp-TRMAAAAkA"]
[Sun Apr 19 18:20:58.207292 2026] [:error] [pid 15764:tid 15834] [client 52.236.49.63:52019] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeSsimLL_sqdSHoVp-TRMQAAAkg"]
[Sun Apr 19 18:20:58.770687 2026] [:error] [pid 15764:tid 15845] [client 52.236.49.63:37965] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeSsimLL_sqdSHoVp-TRNQAAAlM"]
[Sun Apr 19 18:20:59.311633 2026] [:error] [pid 47773:tid 47819] [client 52.236.49.63:51994] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeSsi-iBHdnCJDuPq9AehAAAAEM"]
[Sun Apr 19 18:20:59.863014 2026] [:error] [pid 15693:tid 15712] [client 52.236.49.63:12703] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeSsi8NMD-ccazQlTslJ0gAAAVA"]
[Sun Apr 19 18:21:00.411539 2026] [:error] [pid 47773:tid 47817] [client 52.236.49.63:12695] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeSsjOiBHdnCJDuPq9AehwAAAEE"]
[Sun Apr 19 18:21:00.991020 2026] [:error] [pid 15693:tid 15696] [client 52.236.49.63:25636] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeSsjMNMD-ccazQlTslJ1gAAAUA"]
[Sun Apr 19 18:21:01.511361 2026] [:error] [pid 15693:tid 15698] [client 52.236.49.63:59182] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeSsjcNMD-ccazQlTslJ2AAAAUI"]
[Sun Apr 19 18:21:02.076045 2026] [:error] [pid 15763:tid 15813] [client 52.236.49.63:25621] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeSsjrMXv1Y1THOoxaDK1gAAAhE"]
[Sun Apr 19 18:21:02.636487 2026] [:error] [pid 15763:tid 15809] [client 52.236.49.63:2741] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeSsjrMXv1Y1THOoxaDK2QAAAg0"]
[Sun Apr 19 18:21:03.156163 2026] [:error] [pid 15765:tid 15873] [client 52.236.49.63:25606] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeSsj_Rqinw-W5EwQ77kaAAAApQ"]
[Sun Apr 19 18:21:03.681596 2026] [:error] [pid 47772:tid 47812] [client 52.236.49.63:2709] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aeSsj4c0L16cb4smAz-EkwAAABc"]
[Sun Apr 19 18:21:04.200442 2026] [:error] [pid 47773:tid 47824] [client 52.236.49.63:42015] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aeSskOiBHdnCJDuPq9AeigAAAEg"]
[Sun Apr 19 18:21:04.735263 2026] [:error] [pid 15694:tid 15724] [client 52.236.49.63:21999] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aeSskLimB-jol1fwqAr6rwAAAYE"]
[Sun Apr 19 18:21:05.257931 2026] [:error] [pid 15763:tid 15798] [client 52.236.49.63:25659] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wen.php"] [unique_id "aeSskbMXv1Y1THOoxaDK3AAAAgI"]
[Sun Apr 19 18:21:05.793403 2026] [:error] [pid 15694:tid 15737] [client 52.236.49.63:25676] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeSskbimB-jol1fwqAr6sAAAAYs"]
[Sun Apr 19 18:21:06.327736 2026] [:error] [pid 47772:tid 47799] [client 52.236.49.63:12711] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeSskoc0L16cb4smAz-ElwAAAAo"]
[Sun Apr 19 18:21:06.861967 2026] [:error] [pid 47773:tid 47830] [client 52.236.49.63:51982] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeSskuiBHdnCJDuPq9AejgAAAE4"]
[Sun Apr 19 18:21:07.418299 2026] [:error] [pid 15764:tid 15840] [client 52.236.49.63:37965] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeSsk2LL_sqdSHoVp-TRPAAAAk4"]
[Sun Apr 19 18:21:07.952250 2026] [:error] [pid 47886:tid 47892] [client 52.236.49.63:12732] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeSsk0Se8yiyuPrD7yNebQAAAMQ"]
[Sun Apr 19 18:21:08.500837 2026] [:error] [pid 47773:tid 47839] [client 52.236.49.63:59195] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeSslOiBHdnCJDuPq9AejwAAAFc"]
[Sun Apr 19 18:21:09.052389 2026] [:error] [pid 15694:tid 15736] [client 52.236.49.63:41986] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeSslbimB-jol1fwqAr6tAAAAYo"]
[Sun Apr 19 18:21:09.598312 2026] [:error] [pid 47772:tid 47796] [client 52.236.49.63:34493] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeSslYc0L16cb4smAz-EmgAAAAc"]
[Sun Apr 19 18:21:10.140284 2026] [:error] [pid 15760:tid 15777] [client 52.236.49.63:42016] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeSslvSdD_XHQMJ_ISvRdAAAAck"]
[Sun Apr 19 18:21:10.680312 2026] [:error] [pid 15760:tid 15774] [client 52.236.49.63:12678] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeSslvSdD_XHQMJ_ISvRdQAAAcY"]
[Sun Apr 19 18:21:11.267594 2026] [:error] [pid 15765:tid 15873] [client 52.236.49.63:25639] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeSsl_Rqinw-W5EwQ77kbwAAApQ"]
[Sun Apr 19 18:21:11.809365 2026] [:error] [pid 47772:tid 47808] [client 52.236.49.63:37997] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeSsl4c0L16cb4smAz-EoAAAABM"]
[Sun Apr 19 18:21:12.360269 2026] [:error] [pid 15763:tid 15803] [client 52.236.49.63:34475] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeSsmLMXv1Y1THOoxaDK3gAAAgc"]
[Sun Apr 19 18:21:12.896163 2026] [:error] [pid 15763:tid 15809] [client 52.236.49.63:21994] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeSsmLMXv1Y1THOoxaDK4AAAAg0"]
[Sun Apr 19 18:21:13.428416 2026] [:error] [pid 15763:tid 15810] [client 52.236.49.63:37931] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeSsmbMXv1Y1THOoxaDK5AAAAg4"]
[Sun Apr 19 18:21:13.965899 2026] [:error] [pid 15760:tid 15783] [client 52.236.49.63:2734] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeSsmfSdD_XHQMJ_ISvReAAAAc8"]
[Sun Apr 19 18:21:14.497874 2026] [:error] [pid 47773:tid 47826] [client 52.236.49.63:51977] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeSsmuiBHdnCJDuPq9AelwAAAEo"]
[Sun Apr 19 18:21:15.029667 2026] [:error] [pid 47772:tid 47799] [client 52.236.49.63:34452] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeSsm4c0L16cb4smAz-EpAAAAAo"]
[Sun Apr 19 18:21:15.549287 2026] [:error] [pid 15764:tid 15831] [client 52.236.49.63:25627] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeSsm2LL_sqdSHoVp-TRPQAAAkU"]
[Sun Apr 19 18:21:16.106097 2026] [:error] [pid 47772:tid 47803] [client 52.236.49.63:26777] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeSsnIc0L16cb4smAz-EqQAAAA4"]
[Sun Apr 19 18:21:16.643180 2026] [:error] [pid 47886:tid 47912] [client 52.236.49.63:26759] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeSsnESe8yiyuPrD7yNebgAAANg"]
[Sun Apr 19 18:21:17.199516 2026] [:error] [pid 15763:tid 15815] [client 52.236.49.63:52028] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeSsnbMXv1Y1THOoxaDK6AAAAhM"]
[Sun Apr 19 18:21:17.715744 2026] [:error] [pid 15760:tid 15775] [client 52.236.49.63:34444] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeSsnfSdD_XHQMJ_ISvRfQAAAcc"]
[Sun Apr 19 18:21:18.216894 2026] [:error] [pid 15764:tid 15841] [client 52.236.49.63:37991] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeSsnmLL_sqdSHoVp-TRPgAAAk8"]
[Sun Apr 19 18:21:18.761647 2026] [:error] [pid 15760:tid 15772] [client 52.236.49.63:17437] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeSsnvSdD_XHQMJ_ISvRfwAAAcQ"]
[Sun Apr 19 18:21:19.292189 2026] [:error] [pid 47773:tid 47839] [client 52.236.49.63:42032] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeSsn-iBHdnCJDuPq9AenQAAAFc"]
[Sun Apr 19 18:21:19.856664 2026] [:error] [pid 47886:tid 47899] [client 52.236.49.63:25677] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeSsn0Se8yiyuPrD7yNebwAAAMs"]
[Sun Apr 19 18:21:20.360859 2026] [:error] [pid 47773:tid 47838] [client 52.236.49.63:37912] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeSsoOiBHdnCJDuPq9AengAAAFY"]
[Sun Apr 19 18:21:20.883681 2026] [:error] [pid 15760:tid 15788] [client 52.236.49.63:59154] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeSsoPSdD_XHQMJ_ISvRhgAAAdQ"]
[Sun Apr 19 18:21:21.401682 2026] [:error] [pid 15765:tid 15870] [client 52.236.49.63:37982] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeSsofRqinw-W5EwQ77kgwAAApE"]
[Sun Apr 19 18:21:21.929523 2026] [:error] [pid 15760:tid 15781] [client 52.236.49.63:21954] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeSsofSdD_XHQMJ_ISvRiwAAAc0"]
[Sun Apr 19 18:21:22.473256 2026] [:error] [pid 15760:tid 15768] [client 52.236.49.63:21973] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeSsovSdD_XHQMJ_ISvRjAAAAcA"]
[Sun Apr 19 18:21:23.004104 2026] [:error] [pid 15760:tid 15780] [client 52.236.49.63:37992] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeSso_SdD_XHQMJ_ISvRjwAAAcw"]
[Sun Apr 19 18:21:23.509174 2026] [:error] [pid 47773:tid 47818] [client 52.236.49.63:25602] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeSso-iBHdnCJDuPq9AeogAAAEI"]
[Sun Apr 19 18:21:24.085858 2026] [:error] [pid 47773:tid 47827] [client 52.236.49.63:21960] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeSspOiBHdnCJDuPq9AepAAAAEs"]
[Sun Apr 19 18:21:24.627392 2026] [:error] [pid 15760:tid 15783] [client 52.236.49.63:38005] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeSspPSdD_XHQMJ_ISvRkwAAAc8"]
[Sun Apr 19 18:21:25.202986 2026] [:error] [pid 15694:tid 15740] [client 52.236.49.63:26784] [client 52.236.49.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeSspbimB-jol1fwqAr6uwAAAY4"]
[Sun Apr 19 18:21:25.737577 2026] [:error] [pid 15760:tid 15787] [client 52.236.49.63:52021] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeSspfSdD_XHQMJ_ISvRlwAAAdM"]
[Sun Apr 19 18:21:26.265672 2026] [:error] [pid 15760:tid 15792] [client 52.236.49.63:51986] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeSspvSdD_XHQMJ_ISvRmQAAAdg"]
[Sun Apr 19 18:21:26.778949 2026] [:error] [pid 15760:tid 15778] [client 52.236.49.63:51990] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeSspvSdD_XHQMJ_ISvRnAAAAco"]
[Sun Apr 19 18:21:27.296903 2026] [:error] [pid 47775:tid 47857] [client 52.236.49.63:37918] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeSsp7mztjlk9tsmoez4RwAAAI4"]
[Sun Apr 19 18:21:27.805678 2026] [:error] [pid 47772:tid 47800] [client 52.236.49.63:34451] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeSsp4c0L16cb4smAz-ErQAAAAs"]
[Sun Apr 19 18:21:28.348190 2026] [:error] [pid 15694:tid 15723] [client 52.236.49.63:12687] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeSsqLimB-jol1fwqAr6wwAAAYA"]
[Sun Apr 19 18:21:28.894463 2026] [:error] [pid 47772:tid 47805] [client 52.236.49.63:52024] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeSsqIc0L16cb4smAz-EsQAAABA"]
[Sun Apr 19 18:21:29.442084 2026] [:error] [pid 47772:tid 47807] [client 52.236.49.63:37994] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeSsqYc0L16cb4smAz-EtAAAABI"]
[Sun Apr 19 18:21:29.996263 2026] [:error] [pid 47772:tid 47793] [client 52.236.49.63:25647] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeSsqYc0L16cb4smAz-EtgAAAAQ"]
[Sun Apr 19 18:21:30.543850 2026] [:error] [pid 15763:tid 15817] [client 52.236.49.63:12726] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeSsqrMXv1Y1THOoxaDK7QAAAhU"]
[Sun Apr 19 18:21:31.099705 2026] [:error] [pid 47773:tid 47839] [client 52.236.49.63:34477] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeSsq-iBHdnCJDuPq9AepgAAAFc"]
[Sun Apr 19 18:21:31.611183 2026] [:error] [pid 15763:tid 15796] [client 52.236.49.63:2664] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeSsq7MXv1Y1THOoxaDK7gAAAgA"]
[Sun Apr 19 18:21:32.160383 2026] [:error] [pid 15760:tid 15780] [client 52.236.49.63:51975] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeSsrPSdD_XHQMJ_ISvRowAAAcw"]
[Sun Apr 19 18:21:32.694993 2026] [:error] [pid 15765:tid 15852] [client 52.236.49.63:12728] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeSsrPRqinw-W5EwQ77ktQAAAoA"]
[Sun Apr 19 18:21:33.244595 2026] [:error] [pid 15694:tid 15740] [client 52.236.49.63:51997] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeSsrbimB-jol1fwqAr6ygAAAY4"]
[Sun Apr 19 18:21:33.780789 2026] [:error] [pid 47775:tid 47852] [client 52.236.49.63:21963] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeSsrbmztjlk9tsmoez4SgAAAIk"]
[Sun Apr 19 18:21:34.315311 2026] [:error] [pid 47775:tid 47862] [client 52.236.49.63:52030] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeSsrrmztjlk9tsmoez4TQAAAJM"]
[Sun Apr 19 18:21:34.840704 2026] [:error] [pid 15763:tid 15816] [client 52.236.49.63:63821] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeSsrrMXv1Y1THOoxaDK8wAAAhQ"]
[Sun Apr 19 18:21:35.390080 2026] [:error] [pid 47772:tid 47799] [client 52.236.49.63:37980] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeSsr4c0L16cb4smAz-EuwAAAAo"]
[Sun Apr 19 18:21:35.890350 2026] [:error] [pid 47772:tid 47807] [client 52.236.49.63:25633] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeSsr4c0L16cb4smAz-EvQAAABI"]
[Sun Apr 19 18:21:36.447415 2026] [:error] [pid 47772:tid 47803] [client 52.236.49.63:59159] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeSssIc0L16cb4smAz-EwgAAAA4"]
[Sun Apr 19 18:21:37.037750 2026] [:error] [pid 47772:tid 47813] [client 52.236.49.63:12674] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeSssYc0L16cb4smAz-ExAAAABg"]
[Sun Apr 19 18:21:37.591534 2026] [:error] [pid 15763:tid 15803] [client 52.236.49.63:2720] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeSssbMXv1Y1THOoxaDK-AAAAgc"]
[Sun Apr 19 18:21:38.162204 2026] [:error] [pid 15764:tid 15846] [client 52.236.49.63:12712] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeSssmLL_sqdSHoVp-TRQQAAAlQ"]
[Sun Apr 19 18:21:38.751154 2026] [:error] [pid 15764:tid 15839] [client 52.236.49.63:41985] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeSssmLL_sqdSHoVp-TRQwAAAk0"]
[Sun Apr 19 18:21:39.285033 2026] [:error] [pid 15760:tid 15790] [client 52.236.49.63:21959] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeSss_SdD_XHQMJ_ISvRrAAAAdY"]
[Sun Apr 19 18:21:39.814883 2026] [:error] [pid 15764:tid 15826] [client 52.236.49.63:37960] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeSss2LL_sqdSHoVp-TRRQAAAkA"]
[Sun Apr 19 18:21:47.242446 2026] [:error] [pid 15764:tid 15844] [client 52.236.49.63:26805] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeSsu2LL_sqdSHoVp-TRWgAAAlI"]
[Sun Apr 19 18:21:47.895000 2026] [:error] [pid 47773:tid 47820] [client 52.236.49.63:63847] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeSsu-iBHdnCJDuPq9AesQAAAEQ"]
[Sun Apr 19 18:21:48.457361 2026] [:error] [pid 47773:tid 47830] [client 52.236.49.63:34486] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeSsvOiBHdnCJDuPq9AetAAAAE4"]
[Sun Apr 19 18:21:49.025089 2026] [:error] [pid 47773:tid 47817] [client 52.236.49.63:63868] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeSsveiBHdnCJDuPq9AetgAAAEE"]
[Sun Apr 19 18:21:49.614837 2026] [:error] [pid 47773:tid 47818] [client 52.236.49.63:51999] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeSsveiBHdnCJDuPq9AeuQAAAEI"]
[Sun Apr 19 18:21:50.135411 2026] [:error] [pid 47886:tid 47901] [client 52.236.49.63:63820] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeSsvkSe8yiyuPrD7yNejAAAAM0"]
[Sun Apr 19 18:21:50.647547 2026] [:error] [pid 47773:tid 47816] [client 52.236.49.63:21964] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeSsvuiBHdnCJDuPq9AevAAAAEA"]
[Sun Apr 19 18:21:51.202863 2026] [:error] [pid 47886:tid 47911] [client 52.236.49.63:21966] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeSsv0Se8yiyuPrD7yNejgAAANc"]
[Sun Apr 19 18:21:51.738149 2026] [:error] [pid 15693:tid 15699] [client 52.236.49.63:2712] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeSsv8NMD-ccazQlTslJ4gAAAUM"]
[Sun Apr 19 18:21:52.318859 2026] [:error] [pid 47886:tid 47894] [client 52.236.49.63:34487] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeSswESe8yiyuPrD7yNelgAAAMY"]
[Sun Apr 19 18:21:52.854739 2026] [:error] [pid 15763:tid 15818] [client 52.236.49.63:63828] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeSswLMXv1Y1THOoxaDLBQAAAhY"]
[Sun Apr 19 18:21:53.375074 2026] [:error] [pid 47775:tid 47854] [client 52.236.49.63:2744] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeSswbmztjlk9tsmoez4UQAAAIs"]
[Sun Apr 19 18:21:53.917602 2026] [:error] [pid 47773:tid 47836] [client 52.236.49.63:37910] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeSsweiBHdnCJDuPq9AexgAAAFQ"]
[Sun Apr 19 18:21:54.449792 2026] [:error] [pid 15693:tid 15720] [client 52.236.49.63:12682] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeSswsNMD-ccazQlTslJ5wAAAVg"]
[Sun Apr 19 18:21:54.974703 2026] [:error] [pid 47775:tid 47861] [client 52.236.49.63:34482] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeSswrmztjlk9tsmoez4UwAAAJI"]
[Sun Apr 19 18:21:55.516479 2026] [:error] [pid 47775:tid 47850] [client 52.236.49.63:51970] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeSsw7mztjlk9tsmoez4VAAAAIc"]
[Sun Apr 19 18:21:56.055559 2026] [:error] [pid 15764:tid 15834] [client 52.236.49.63:51998] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "aeSsxGLL_sqdSHoVp-TRXwAAAkg"]
[Sun Apr 19 18:21:56.611107 2026] [:error] [pid 15764:tid 15826] [client 52.236.49.63:34458] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "aeSsxGLL_sqdSHoVp-TRYQAAAkA"]
[Sun Apr 19 18:21:57.255198 2026] [:error] [pid 15764:tid 15844] [client 52.236.49.63:63857] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "aeSsxWLL_sqdSHoVp-TRYwAAAlI"]
[Sun Apr 19 18:21:57.775895 2026] [:error] [pid 15764:tid 15828] [client 52.236.49.63:63849] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "aeSsxWLL_sqdSHoVp-TRZgAAAkI"]
[Sun Apr 19 18:21:58.358592 2026] [:error] [pid 15760:tid 15789] [client 52.236.49.63:42004] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeSsxvSdD_XHQMJ_ISvRvAAAAdU"]
[Sun Apr 19 18:21:58.918132 2026] [:error] [pid 15760:tid 15777] [client 52.236.49.63:2694] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeSsxvSdD_XHQMJ_ISvRvwAAAck"]
[Sun Apr 19 18:21:59.450584 2026] [:error] [pid 15760:tid 15792] [client 52.236.49.63:25653] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeSsx_SdD_XHQMJ_ISvRxAAAAdg"]
[Sun Apr 19 18:22:00.000049 2026] [:error] [pid 15694:tid 15751] [client 52.236.49.63:52008] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeSsx7imB-jol1fwqAr60QAAAZg"]
[Sun Apr 19 18:22:00.522943 2026] [:error] [pid 47775:tid 47863] [client 52.236.49.63:52009] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeSsyLmztjlk9tsmoez4VQAAAJQ"]
[Sun Apr 19 18:22:01.072982 2026] [:error] [pid 47775:tid 47852] [client 52.236.49.63:12689] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeSsybmztjlk9tsmoez4VwAAAIk"]
[Sun Apr 19 18:22:01.597578 2026] [:error] [pid 15760:tid 15786] [client 52.236.49.63:12710] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeSsyfSdD_XHQMJ_ISvRyQAAAdI"]
[Sun Apr 19 18:22:02.138716 2026] [:error] [pid 15764:tid 15834] [client 52.236.49.63:21985] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeSsymLL_sqdSHoVp-TRagAAAkg"]
[Sun Apr 19 18:22:02.675648 2026] [:error] [pid 47773:tid 47818] [client 52.236.49.63:2665] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeSsyuiBHdnCJDuPq9AeygAAAEI"]
[Sun Apr 19 18:22:03.262866 2026] [:error] [pid 47773:tid 47827] [client 52.236.49.63:21978] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeSsy-iBHdnCJDuPq9AezAAAAEs"]
[Sun Apr 19 18:22:03.881013 2026] [:error] [pid 47773:tid 47840] [client 52.236.49.63:2350] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeSsy-iBHdnCJDuPq9AezQAAAFg"]
[Sun Apr 19 18:22:04.476517 2026] [:error] [pid 47775:tid 47845] [client 52.236.49.63:25648] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeSszLmztjlk9tsmoez4XwAAAII"]
[Sun Apr 19 18:22:05.040544 2026] [:error] [pid 15760:tid 15790] [client 52.236.49.63:59139] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeSszfSdD_XHQMJ_ISvR0wAAAdY"]
[Sun Apr 19 18:22:05.591117 2026] [:error] [pid 15760:tid 15783] [client 52.236.49.63:21975] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeSszfSdD_XHQMJ_ISvR1wAAAc8"]
[Sun Apr 19 18:22:06.151436 2026] [:error] [pid 47772:tid 47806] [client 52.236.49.63:21971] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeSszoc0L16cb4smAz-E1gAAABE"]
[Sun Apr 19 18:22:06.674819 2026] [:error] [pid 15763:tid 15799] [client 52.236.49.63:42025] [client 52.236.49.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeSszrMXv1Y1THOoxaDLFQAAAgM"]
[Sun Apr 19 18:48:49.077530 2026] [:error] [pid 47773:tid 47836] [client 43.155.140.157:33080] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeSzEeiBHdnCJDuPq9Ai2AAAAFQ"]
[Sun Apr 19 19:13:10.401859 2026] [:error] [pid 15764:tid 15840] [client 213.35.109.170:52657] [client 213.35.109.170] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:auth outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||measureyourcause.com.au|F|3"] [data "ARGS:auth=\\x00"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "aeS4xmLL_sqdSHoVp-TgxgAAAk4"]
[Sun Apr 19 21:01:45.362405 2026] [:error] [pid 47773:tid 47816] [client 68.221.185.36:9179] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeTSOeiBHdnCJDuPq9A9YQAAAEA"]
[Sun Apr 19 21:01:49.880940 2026] [:error] [pid 15763:tid 15800] [client 68.221.185.36:9192] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeTSPbMXv1Y1THOoxaDyiQAAAgQ"]
[Sun Apr 19 21:01:57.959384 2026] [:error] [pid 47773:tid 47827] [client 68.221.185.36:9200] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nwflm.php"] [unique_id "aeTSReiBHdnCJDuPq9A9eAAAAEs"]
[Sun Apr 19 21:04:08.706972 2026] [:error] [pid 15763:tid 15818] [client 68.221.185.36:9202] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeTSyLMXv1Y1THOoxaDziAAAAhY"]
[Sun Apr 19 21:04:09.499289 2026] [:error] [pid 15764:tid 15828] [client 68.221.185.36:9101] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeTSyWLL_sqdSHoVp-QMgAAAAkI"]
[Sun Apr 19 21:04:10.743419 2026] [:error] [pid 15764:tid 15838] [client 68.221.185.36:9188] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeTSymLL_sqdSHoVp-QMgwAAAkw"]
[Sun Apr 19 21:04:11.816451 2026] [:error] [pid 15764:tid 15833] [client 68.221.185.36:9193] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aeTSy2LL_sqdSHoVp-QMhwAAAkc"]
[Sun Apr 19 21:04:12.894682 2026] [:error] [pid 15760:tid 15789] [client 68.221.185.36:9211] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "aeTSzPSdD_XHQMJ_ISsiHgAAAdU"]
[Sun Apr 19 21:04:13.990054 2026] [:error] [pid 15764:tid 15840] [client 68.221.185.36:9104] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "aeTSzWLL_sqdSHoVp-QMlwAAAk4"]
[Sun Apr 19 21:04:15.474114 2026] [:error] [pid 47772:tid 47796] [client 68.221.185.36:9206] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "aeTSz4c0L16cb4smAz-2nQAAAAc"]
[Sun Apr 19 21:04:16.310109 2026] [:error] [pid 15760:tid 15768] [client 68.221.185.36:9184] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/turkshell.php"] [unique_id "aeTS0PSdD_XHQMJ_ISsiJgAAAcA"]
[Sun Apr 19 21:04:17.668221 2026] [:error] [pid 47775:tid 47849] [client 68.221.185.36:9100] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeTS0bmztjlk9tsmoewRbgAAAIY"]
[Sun Apr 19 21:04:18.493999 2026] [:error] [pid 47886:tid 47888] [client 68.221.185.36:9152] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeTS0kSe8yiyuPrD7yN0YgAAAMA"]
[Sun Apr 19 21:04:19.194876 2026] [:error] [pid 15694:tid 15725] [client 68.221.185.36:9212] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeTS07imB-jol1fwqAoKngAAAYI"]
[Sun Apr 19 21:04:19.917607 2026] [:error] [pid 47886:tid 47892] [client 68.221.185.36:9161] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeTS00Se8yiyuPrD7yN0ZAAAAMQ"]
[Sun Apr 19 21:04:21.522327 2026] [:error] [pid 15760:tid 15768] [client 68.221.185.36:9156] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeTS1fSdD_XHQMJ_ISsiLQAAAcA"]
[Sun Apr 19 21:04:22.253053 2026] [:error] [pid 15764:tid 15843] [client 68.221.185.36:9190] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeTS1mLL_sqdSHoVp-QMqAAAAlE"]
[Sun Apr 19 21:04:22.825025 2026] [:error] [pid 15764:tid 15841] [client 68.221.185.36:9134] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeTS1mLL_sqdSHoVp-QMqwAAAk8"]
[Sun Apr 19 21:04:23.534374 2026] [:error] [pid 15760:tid 15788] [client 68.221.185.36:9157] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeTS1_SdD_XHQMJ_ISsiLwAAAdQ"]
[Sun Apr 19 21:04:24.386362 2026] [:error] [pid 15760:tid 15781] [client 68.221.185.36:9186] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeTS2PSdD_XHQMJ_ISsiNAAAAc0"]
[Sun Apr 19 21:04:25.231625 2026] [:error] [pid 15760:tid 15772] [client 68.221.185.36:9204] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeTS2fSdD_XHQMJ_ISsiOgAAAcQ"]
[Sun Apr 19 21:04:26.067029 2026] [:error] [pid 15760:tid 15786] [client 68.221.185.36:9172] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeTS2vSdD_XHQMJ_ISsiQgAAAdI"]
[Sun Apr 19 21:04:26.746814 2026] [:error] [pid 15760:tid 15779] [client 68.221.185.36:9090] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeTS2vSdD_XHQMJ_ISsiSQAAAcs"]
[Sun Apr 19 21:04:27.278708 2026] [:error] [pid 15694:tid 15749] [client 68.221.185.36:9103] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeTS27imB-jol1fwqAoKoQAAAZc"]
[Sun Apr 19 21:04:28.356605 2026] [:error] [pid 47773:tid 47833] [client 68.221.185.36:9178] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeTS3OiBHdnCJDuPq9A-FQAAAFE"]
[Sun Apr 19 21:04:29.062261 2026] [:error] [pid 15694:tid 15726] [client 68.221.185.36:9199] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeTS3bimB-jol1fwqAoKogAAAYM"]
[Sun Apr 19 21:04:30.158296 2026] [:error] [pid 15760:tid 15769] [client 68.221.185.36:9108] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeTS3vSdD_XHQMJ_ISsiTQAAAcE"]
[Sun Apr 19 21:04:30.927633 2026] [:error] [pid 15760:tid 15783] [client 68.221.185.36:9177] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeTS3vSdD_XHQMJ_ISsiUwAAAc8"]
[Sun Apr 19 21:04:31.686912 2026] [:error] [pid 15765:tid 15868] [client 68.221.185.36:9093] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeTS3_Rqinw-W5EwQ774PwAAAo8"]
[Sun Apr 19 21:04:32.271814 2026] [:error] [pid 15764:tid 15840] [client 68.221.185.36:9182] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeTS4GLL_sqdSHoVp-QMswAAAk4"]
[Sun Apr 19 21:04:32.920885 2026] [:error] [pid 15764:tid 15828] [client 68.221.185.36:9180] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeTS4GLL_sqdSHoVp-QMtAAAAkI"]
[Sun Apr 19 21:04:33.793354 2026] [:error] [pid 47772:tid 47795] [client 68.221.185.36:9044] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeTS4Yc0L16cb4smAz-2qAAAAAY"]
[Sun Apr 19 21:04:34.752520 2026] [:error] [pid 15760:tid 15777] [client 68.221.185.36:9044] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeTS4vSdD_XHQMJ_ISsiWAAAAck"]
[Sun Apr 19 21:04:35.412123 2026] [:error] [pid 15764:tid 15837] [client 68.221.185.36:9032] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeTS42LL_sqdSHoVp-QMuAAAAks"]
[Sun Apr 19 21:04:36.057792 2026] [:error] [pid 15763:tid 15815] [client 68.221.185.36:9107] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeTS5LMXv1Y1THOoxaDzswAAAhM"]
[Sun Apr 19 21:04:37.280428 2026] [:error] [pid 15765:tid 15858] [client 68.221.185.36:9092] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeTS5fRqinw-W5EwQ774QgAAAoU"]
[Sun Apr 19 21:04:38.231000 2026] [:error] [pid 47775:tid 47844] [client 68.221.185.36:9159] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeTS5rmztjlk9tsmoewRfgAAAIE"]
[Sun Apr 19 21:04:39.170487 2026] [:error] [pid 15764:tid 15851] [client 68.221.185.36:9166] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeTS52LL_sqdSHoVp-QMwQAAAlg"]
[Sun Apr 19 21:04:40.092391 2026] [:error] [pid 15765:tid 15875] [client 68.221.185.36:9113] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeTS6PRqinw-W5EwQ774QwAAApY"]
[Sun Apr 19 21:04:41.445539 2026] [:error] [pid 15763:tid 15809] [client 68.221.185.36:9203] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeTS6bMXv1Y1THOoxaDzugAAAg0"]
[Sun Apr 19 21:04:42.617670 2026] [:error] [pid 47773:tid 47821] [client 68.221.185.36:9115] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeTS6uiBHdnCJDuPq9A-HQAAAEU"]
[Sun Apr 19 21:04:44.070749 2026] [:error] [pid 15763:tid 15798] [client 68.221.185.36:9207] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeTS7LMXv1Y1THOoxaDzvwAAAgI"]
[Sun Apr 19 21:04:45.556619 2026] [:error] [pid 15760:tid 15780] [client 68.221.185.36:9175] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeTS7fSdD_XHQMJ_ISsiZQAAAcw"]
[Sun Apr 19 21:04:46.931719 2026] [:error] [pid 15693:tid 15712] [client 68.221.185.36:9198] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeTS7sNMD-ccazQlTslY9wAAAVA"]
[Sun Apr 19 21:04:47.618903 2026] [:error] [pid 15763:tid 15814] [client 68.221.185.36:9215] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeTS77MXv1Y1THOoxaDzxAAAAhI"]
[Sun Apr 19 21:04:48.736948 2026] [:error] [pid 15764:tid 15829] [client 68.221.185.36:9119] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeTS8GLL_sqdSHoVp-QMzAAAAkM"]
[Sun Apr 19 21:04:50.528417 2026] [:error] [pid 47886:tid 47896] [client 68.221.185.36:9094] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeTS8kSe8yiyuPrD7yN0cwAAAMg"]
[Sun Apr 19 21:04:52.341878 2026] [:error] [pid 47772:tid 47790] [client 68.221.185.36:9118] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeTS9Ic0L16cb4smAz-2uQAAAAE"]
[Sun Apr 19 21:04:53.755994 2026] [:error] [pid 15763:tid 15819] [client 68.221.185.36:9170] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeTS9bMXv1Y1THOoxaDzygAAAhc"]
[Sun Apr 19 21:04:55.779333 2026] [:error] [pid 15694:tid 15736] [client 68.221.185.36:9145] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeTS97imB-jol1fwqAoKuQAAAYo"]
[Sun Apr 19 21:04:57.127573 2026] [:error] [pid 15760:tid 15778] [client 68.221.185.36:9176] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeTS-fSdD_XHQMJ_ISsieAAAAco"]
[Sun Apr 19 21:04:58.858943 2026] [:error] [pid 15694:tid 15724] [client 68.221.185.36:9210] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeTS-rimB-jol1fwqAoKvQAAAYE"]
[Sun Apr 19 21:05:01.256318 2026] [:error] [pid 47772:tid 47791] [client 68.221.185.36:9140] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeTS_Yc0L16cb4smAz-2ywAAAAI"]
[Sun Apr 19 21:05:02.505614 2026] [:error] [pid 15764:tid 15834] [client 68.221.185.36:9125] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeTS_mLL_sqdSHoVp-QM2QAAAkg"]
[Sun Apr 19 21:05:03.224434 2026] [:error] [pid 15763:tid 15798] [client 68.221.185.36:9106] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeTS_7MXv1Y1THOoxaDz0QAAAgI"]
[Sun Apr 19 21:05:03.910267 2026] [:error] [pid 47773:tid 47819] [client 68.221.185.36:9185] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeTS_-iBHdnCJDuPq9A-LAAAAEM"]
[Sun Apr 19 21:05:04.555518 2026] [:error] [pid 15764:tid 15826] [client 68.221.185.36:9143] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeTTAGLL_sqdSHoVp-QM2wAAAkA"]
[Sun Apr 19 21:05:05.616187 2026] [:error] [pid 15694:tid 15725] [client 68.221.185.36:9102] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeTTAbimB-jol1fwqAoKwwAAAYI"]
[Sun Apr 19 21:05:06.547489 2026] [:error] [pid 15763:tid 15817] [client 68.221.185.36:9181] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeTTArMXv1Y1THOoxaDz2QAAAhU"]
[Sun Apr 19 21:05:07.786940 2026] [:error] [pid 47773:tid 47836] [client 68.221.185.36:9176] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.mopj.php"] [unique_id "aeTTA-iBHdnCJDuPq9A-NwAAAFQ"]
[Sun Apr 19 21:05:18.684778 2026] [:error] [pid 15693:tid 15702] [client 68.221.185.36:9196] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeTTDsNMD-ccazQlTslZOQAAAUY"]
[Sun Apr 19 21:05:20.128799 2026] [:error] [pid 47772:tid 47811] [client 68.221.185.36:9105] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeTTEIc0L16cb4smAz-23QAAABY"]
[Sun Apr 19 21:05:21.594400 2026] [:error] [pid 15763:tid 15806] [client 68.221.185.36:9126] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeTTEbMXv1Y1THOoxaDz4gAAAgo"]
[Sun Apr 19 21:05:23.053427 2026] [:error] [pid 47886:tid 47900] [client 68.221.185.36:9149] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/about.php"] [unique_id "aeTTE0Se8yiyuPrD7yN0jQAAAMw"]
[Sun Apr 19 21:05:24.332048 2026] [:error] [pid 15694:tid 15738] [client 68.221.185.36:9147] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeTTFLimB-jol1fwqAoKzAAAAYw"]
[Sun Apr 19 21:05:26.873506 2026] [:error] [pid 15760:tid 15773] [client 68.221.185.36:9133] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeTTFvSdD_XHQMJ_ISsigwAAAcU"]
[Sun Apr 19 21:05:30.671029 2026] [:error] [pid 15764:tid 15827] [client 68.221.185.36:9030] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aeTTGmLL_sqdSHoVp-QNDQAAAkE"]
[Sun Apr 19 21:05:43.120279 2026] [:error] [pid 15693:tid 15717] [client 68.221.185.36:9187] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeTTJ8NMD-ccazQlTslZRgAAAVU"]
[Sun Apr 19 21:05:44.541295 2026] [:error] [pid 47773:tid 47820] [client 68.221.185.36:9155] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeTTKOiBHdnCJDuPq9A-dwAAAEQ"]
[Sun Apr 19 21:05:45.702226 2026] [:error] [pid 15694:tid 15747] [client 68.221.185.36:9191] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeTTKbimB-jol1fwqAoK4QAAAZU"]
[Sun Apr 19 21:05:46.617964 2026] [:error] [pid 47772:tid 47812] [client 68.221.185.36:9213] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aeTTKoc0L16cb4smAz-28gAAABc"]
[Sun Apr 19 21:05:47.732190 2026] [:error] [pid 47886:tid 47899] [client 68.221.185.36:9088] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeTTK0Se8yiyuPrD7yN0uwAAAMs"]
[Sun Apr 19 21:05:48.514341 2026] [:error] [pid 15763:tid 15814] [client 68.221.185.36:9114] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeTTLLMXv1Y1THOoxaD0AQAAAhI"]
[Sun Apr 19 21:05:49.346186 2026] [:error] [pid 15693:tid 15714] [client 68.221.185.36:9194] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeTTLcNMD-ccazQlTslZTQAAAVI"]
[Sun Apr 19 21:05:50.012440 2026] [:error] [pid 47886:tid 47904] [client 68.221.185.36:9028] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zample.php"] [unique_id "aeTTLkSe8yiyuPrD7yN0vwAAANA"]
[Sun Apr 19 21:05:51.481836 2026] [:error] [pid 15763:tid 15799] [client 68.221.185.36:9084] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeTTL7MXv1Y1THOoxaD0BgAAAgM"]
[Sun Apr 19 21:05:53.071374 2026] [:error] [pid 15693:tid 15710] [client 68.221.185.36:9095] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeTTMcNMD-ccazQlTslZTwAAAU4"]
[Sun Apr 19 21:05:53.693750 2026] [:error] [pid 47772:tid 47792] [client 68.221.185.36:9179] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeTTMYc0L16cb4smAz-3CgAAAAM"]
[Sun Apr 19 21:05:55.300019 2026] [:error] [pid 47772:tid 47813] [client 68.221.185.36:9137] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aeTTM4c0L16cb4smAz-3EgAAABg"]
[Sun Apr 19 21:05:55.987006 2026] [:error] [pid 15760:tid 15778] [client 68.221.185.36:9127] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeTTM_SdD_XHQMJ_ISsimQAAAco"]
[Sun Apr 19 21:05:56.909255 2026] [:error] [pid 15760:tid 15781] [client 68.221.185.36:9065] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeTTNPSdD_XHQMJ_ISsiogAAAc0"]
[Sun Apr 19 21:05:57.856292 2026] [:error] [pid 15760:tid 15773] [client 68.221.185.36:9026] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeTTNfSdD_XHQMJ_ISsirQAAAcU"]
[Sun Apr 19 21:05:59.289956 2026] [:error] [pid 15760:tid 15775] [client 68.221.185.36:9164] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aeTTN_SdD_XHQMJ_ISsisgAAAcc"]
[Sun Apr 19 21:06:00.012979 2026] [:error] [pid 47775:tid 47848] [client 68.221.185.36:9054] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeTTOLmztjlk9tsmoewRzQAAAIU"]
[Sun Apr 19 21:06:00.781618 2026] [:error] [pid 15764:tid 15826] [client 68.221.185.36:9173] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeTTOGLL_sqdSHoVp-QNOQAAAkA"]
[Sun Apr 19 21:06:01.576083 2026] [:error] [pid 15763:tid 15796] [client 68.221.185.36:9039] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeTTObMXv1Y1THOoxaD0EQAAAgA"]
[Sun Apr 19 21:06:02.329834 2026] [:error] [pid 15760:tid 15785] [client 68.221.185.36:9154] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin.php"] [unique_id "aeTTOvSdD_XHQMJ_ISsiuQAAAdE"]
[Sun Apr 19 21:06:03.606589 2026] [:error] [pid 15760:tid 15781] [client 68.221.185.36:9174] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aeTTO_SdD_XHQMJ_ISsivAAAAc0"]
[Sun Apr 19 21:06:04.674437 2026] [:error] [pid 15760:tid 15777] [client 68.221.185.36:9208] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aeTTPPSdD_XHQMJ_ISsixAAAAck"]
[Sun Apr 19 21:06:06.135368 2026] [:error] [pid 15760:tid 15779] [client 68.221.185.36:9132] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aeTTPvSdD_XHQMJ_ISsizAAAAcs"]
[Sun Apr 19 21:06:07.131145 2026] [:error] [pid 15694:tid 15732] [client 68.221.185.36:9209] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inege.php"] [unique_id "aeTTP7imB-jol1fwqAoK6QAAAYY"]
[Sun Apr 19 21:06:07.887616 2026] [:error] [pid 15760:tid 15769] [client 68.221.185.36:9027] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeTTP_SdD_XHQMJ_ISsi0gAAAcE"]
[Sun Apr 19 21:06:08.700480 2026] [:error] [pid 15764:tid 15845] [client 68.221.185.36:9031] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeTTQGLL_sqdSHoVp-QNPAAAAlM"]
[Sun Apr 19 21:06:09.462816 2026] [:error] [pid 15760:tid 15791] [client 68.221.185.36:9158] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeTTQfSdD_XHQMJ_ISsi1AAAAdc"]
[Sun Apr 19 21:06:10.010993 2026] [:error] [pid 47775:tid 47855] [client 68.221.185.36:9086] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeTTQrmztjlk9tsmoewR0gAAAIw"]
[Sun Apr 19 21:06:10.561256 2026] [:error] [pid 15760:tid 15779] [client 68.221.185.36:9129] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aeTTQvSdD_XHQMJ_ISsi1wAAAcs"]
[Sun Apr 19 21:06:11.556631 2026] [:error] [pid 47773:tid 47830] [client 68.221.185.36:9138] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aeTTQ-iBHdnCJDuPq9A-hQAAAE4"]
[Sun Apr 19 21:06:13.253838 2026] [:error] [pid 15764:tid 15830] [client 68.221.185.36:9024] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aeTTRWLL_sqdSHoVp-QNQwAAAkQ"]
[Sun Apr 19 21:06:17.111981 2026] [:error] [pid 47772:tid 47795] [client 68.221.185.36:9098] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "aeTTSYc0L16cb4smAz-3KAAAAAY"]
[Sun Apr 19 21:06:35.620049 2026] [:error] [pid 15764:tid 15847] [client 68.221.185.36:9110] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeTTW2LL_sqdSHoVp-QNbgAAAlU"]
[Sun Apr 19 21:06:37.131003 2026] [:error] [pid 47772:tid 47810] [client 68.221.185.36:9195] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeTTXYc0L16cb4smAz-3RgAAABU"]
[Sun Apr 19 21:06:37.677542 2026] [:error] [pid 15760:tid 15785] [client 68.221.185.36:9035] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeTTXfSdD_XHQMJ_ISsjYAAAAdE"]
[Sun Apr 19 21:06:38.730167 2026] [:error] [pid 15764:tid 15841] [client 68.221.185.36:9153] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeTTXmLL_sqdSHoVp-QNgQAAAk8"]
[Sun Apr 19 21:06:39.967568 2026] [:error] [pid 15693:tid 15710] [client 68.221.185.36:9148] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeTTX8NMD-ccazQlTslZWwAAAU4"]
[Sun Apr 19 21:06:41.835871 2026] [:error] [pid 15764:tid 15848] [client 68.221.185.36:9082] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeTTYWLL_sqdSHoVp-QNlgAAAlY"]
[Sun Apr 19 21:06:43.934317 2026] [:error] [pid 47772:tid 47808] [client 68.221.185.36:9025] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeTTY4c0L16cb4smAz-3SQAAABM"]
[Sun Apr 19 21:06:45.541954 2026] [:error] [pid 15763:tid 15819] [client 68.221.185.36:9091] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeTTZbMXv1Y1THOoxaD0KAAAAhc"]
[Sun Apr 19 21:06:46.577946 2026] [:error] [pid 47775:tid 47858] [client 68.221.185.36:9066] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeTTZrmztjlk9tsmoewR_wAAAI8"]
[Sun Apr 19 21:06:48.811151 2026] [:error] [pid 47773:tid 47832] [client 68.221.185.36:9122] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeTTaOiBHdnCJDuPq9A-6wAAAFA"]
[Sun Apr 19 21:06:51.166639 2026] [:error] [pid 47775:tid 47848] [client 68.221.185.36:9029] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeTTa7mztjlk9tsmoewSAQAAAIU"]
[Sun Apr 19 21:06:53.121413 2026] [:error] [pid 47886:tid 47900] [client 68.221.185.36:9040] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeTTbUSe8yiyuPrD7yN1MQAAAMw"]
[Sun Apr 19 21:06:55.003167 2026] [:error] [pid 15765:tid 15855] [client 68.221.185.36:9128] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeTTb_Rqinw-W5EwQ774rgAAAoI"]
[Sun Apr 19 21:06:59.115820 2026] [:error] [pid 15764:tid 15848] [client 68.221.185.36:9171] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeTTc2LL_sqdSHoVp-QNnAAAAlY"]
[Sun Apr 19 21:07:01.446046 2026] [:error] [pid 15763:tid 15818] [client 68.221.185.36:8966] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeTTdbMXv1Y1THOoxaD0NQAAAhY"]
[Sun Apr 19 21:07:05.609448 2026] [:error] [pid 15764:tid 15828] [client 68.221.185.36:9205] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeTTeWLL_sqdSHoVp-QNrQAAAkI"]
[Sun Apr 19 21:07:06.997161 2026] [:error] [pid 15764:tid 15842] [client 68.221.185.36:9096] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeTTemLL_sqdSHoVp-QNtwAAAlA"]
[Sun Apr 19 21:07:08.714435 2026] [:error] [pid 15760:tid 15771] [client 68.221.185.36:8973] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeTTfPSdD_XHQMJ_ISsjnQAAAcM"]
[Sun Apr 19 21:07:10.176102 2026] [:error] [pid 15764:tid 15837] [client 68.221.185.36:9141] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeTTfmLL_sqdSHoVp-QNxQAAAks"]
[Sun Apr 19 21:07:11.008696 2026] [:error] [pid 47772:tid 47813] [client 68.221.185.36:9189] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeTTf4c0L16cb4smAz-3aQAAABg"]
[Sun Apr 19 21:07:11.717793 2026] [:error] [pid 15694:tid 15751] [client 68.221.185.36:9192] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTTf7imB-jol1fwqAoK_wAAAZg"]
[Sun Apr 19 21:07:12.389598 2026] [:error] [pid 15764:tid 15830] [client 68.221.185.36:9053] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTTgGLL_sqdSHoVp-QNxwAAAkQ"]
[Sun Apr 19 21:07:13.238896 2026] [:error] [pid 47772:tid 47797] [client 68.221.185.36:9060] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTTgYc0L16cb4smAz-3bAAAAAg"]
[Sun Apr 19 21:07:14.769293 2026] [:error] [pid 15694:tid 15738] [client 68.221.185.36:9036] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeTTgrimB-jol1fwqAoLAAAAAYw"]
[Sun Apr 19 21:07:15.401571 2026] [:error] [pid 15694:tid 15724] [client 68.221.185.36:8964] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "aeTTg7imB-jol1fwqAoLAQAAAYE"]
[Sun Apr 19 21:07:15.904481 2026] [:error] [pid 15764:tid 15847] [client 68.221.185.36:9144] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "aeTTg2LL_sqdSHoVp-QN0AAAAlU"]
[Sun Apr 19 21:07:16.603296 2026] [:error] [pid 15764:tid 15837] [client 68.221.185.36:9005] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "aeTThGLL_sqdSHoVp-QN0gAAAks"]
[Sun Apr 19 21:07:17.540191 2026] [:error] [pid 47775:tid 47866] [client 68.221.185.36:9097] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bless4.php"] [unique_id "aeTThbmztjlk9tsmoewSEgAAAJc"]
[Sun Apr 19 21:07:18.805669 2026] [:error] [pid 15765:tid 15859] [client 68.221.185.36:9142] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeTThvRqinw-W5EwQ774yAAAAoY"]
[Sun Apr 19 21:07:19.457695 2026] [:error] [pid 15764:tid 15845] [client 68.221.185.36:9162] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeTTh2LL_sqdSHoVp-QN3QAAAlM"]
[Sun Apr 19 21:07:21.228873 2026] [:error] [pid 47775:tid 47844] [client 68.221.185.36:9135] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeTTibmztjlk9tsmoewSFgAAAIE"]
[Sun Apr 19 21:07:22.908746 2026] [:error] [pid 15763:tid 15810] [client 68.221.185.36:9120] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeTTirMXv1Y1THOoxaD0SAAAAg4"]
[Sun Apr 19 21:07:24.363201 2026] [:error] [pid 15764:tid 15850] [client 68.221.185.36:9045] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeTTjGLL_sqdSHoVp-QN5AAAAlc"]
[Sun Apr 19 21:07:25.381174 2026] [:error] [pid 47772:tid 47810] [client 68.221.185.36:9099] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeTTjYc0L16cb4smAz-3ewAAABU"]
[Sun Apr 19 21:07:26.512084 2026] [:error] [pid 47775:tid 47858] [client 68.221.185.36:9046] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeTTjrmztjlk9tsmoewSGAAAAI8"]
[Sun Apr 19 21:07:27.764270 2026] [:error] [pid 47773:tid 47836] [client 68.221.185.36:9214] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeTTj-iBHdnCJDuPq9A_HQAAAFQ"]
[Sun Apr 19 21:07:28.520676 2026] [:error] [pid 15763:tid 15810] [client 68.221.185.36:9123] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeTTkLMXv1Y1THOoxaD0WQAAAg4"]
[Sun Apr 19 21:07:30.279317 2026] [:error] [pid 15764:tid 15834] [client 68.221.185.36:9057] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeTTkmLL_sqdSHoVp-QN9AAAAkg"]
[Sun Apr 19 21:07:31.411264 2026] [:error] [pid 15694:tid 15724] [client 68.221.185.36:9183] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeTTk7imB-jol1fwqAoLDAAAAYE"]
[Sun Apr 19 21:07:32.466780 2026] [:error] [pid 15760:tid 15768] [client 68.221.185.36:8976] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeTTlPSdD_XHQMJ_ISsjtQAAAcA"]
[Sun Apr 19 21:07:33.260351 2026] [:error] [pid 15694:tid 15739] [client 68.221.185.36:9075] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeTTlbimB-jol1fwqAoLDgAAAY0"]
[Sun Apr 19 21:07:34.203729 2026] [:error] [pid 15760:tid 15769] [client 68.221.185.36:9074] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeTTlvSdD_XHQMJ_ISsjtwAAAcE"]
[Sun Apr 19 21:07:48.140834 2026] [:error] [pid 15763:tid 15817] [client 68.221.185.36:9070] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aeTTpLMXv1Y1THOoxaD0kwAAAhU"]
[Sun Apr 19 21:07:49.792521 2026] [:error] [pid 47772:tid 47804] [client 68.221.185.36:9112] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aeTTpYc0L16cb4smAz-3zwAAAA8"]
[Sun Apr 19 21:07:51.308651 2026] [:error] [pid 15760:tid 15781] [client 68.221.185.36:9139] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aeTTp_SdD_XHQMJ_ISsj1gAAAc0"]
[Sun Apr 19 21:07:52.274940 2026] [:error] [pid 15764:tid 15828] [client 68.221.185.36:9059] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/goods.php"] [unique_id "aeTTqGLL_sqdSHoVp-QOFwAAAkI"]
[Sun Apr 19 21:07:53.293448 2026] [:error] [pid 15764:tid 15838] [client 68.221.185.36:9043] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeTTqWLL_sqdSHoVp-QOHwAAAkw"]
[Sun Apr 19 21:07:54.958228 2026] [:error] [pid 47773:tid 47822] [client 68.221.185.36:9201] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeTTquiBHdnCJDuPq9A_OgAAAEY"]
[Sun Apr 19 21:08:01.645896 2026] [:error] [pid 15764:tid 15847] [client 68.221.185.36:9055] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeTTsWLL_sqdSHoVp-QOLwAAAlU"]
[Sun Apr 19 21:08:07.511022 2026] [:error] [pid 15760:tid 15781] [client 68.221.185.36:9078] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aeTTt_SdD_XHQMJ_ISsj8wAAAc0"]
[Sun Apr 19 21:08:17.760893 2026] [:error] [pid 15693:tid 15696] [client 68.221.185.36:9048] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/222.php"] [unique_id "aeTTwcNMD-ccazQlTslZbQAAAUA"]
[Sun Apr 19 21:09:28.582338 2026] [:error] [pid 15763:tid 15800] [client 68.221.185.36:9159] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeTUCLMXv1Y1THOoxaD1ugAAAgQ"]
[Sun Apr 19 21:09:59.921557 2026] [:error] [pid 15763:tid 15816] [client 68.221.185.36:9172] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeTUJ7MXv1Y1THOoxaD15AAAAhQ"]
[Sun Apr 19 21:10:53.945031 2026] [:error] [pid 15760:tid 15769] [client 68.221.185.36:9127] [client 68.221.185.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeTUXfSdD_XHQMJ_ISslGgAAAcE"]
[Sun Apr 19 21:10:59.301608 2026] [:error] [pid 15760:tid 15790] [client 68.221.185.36:9207] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeTUY_SdD_XHQMJ_ISslNwAAAdY"]
[Sun Apr 19 21:11:05.237691 2026] [:error] [pid 15693:tid 15699] [client 68.221.185.36:9147] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeTUacNMD-ccazQlTslZrwAAAUM"]
[Sun Apr 19 21:11:10.108730 2026] [:error] [pid 15764:tid 15841] [client 68.221.185.36:9170] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeTUbmLL_sqdSHoVp-QPngAAAk8"]
[Sun Apr 19 21:11:14.073122 2026] [:error] [pid 47772:tid 47793] [client 68.221.185.36:9163] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeTUcoc0L16cb4smAz-4ygAAAAQ"]
[Sun Apr 19 21:11:15.856378 2026] [:error] [pid 47772:tid 47790] [client 68.221.185.36:9161] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeTUc4c0L16cb4smAz-4zwAAAAE"]
[Sun Apr 19 21:11:16.555341 2026] [:error] [pid 15760:tid 15772] [client 68.221.185.36:9209] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeTUdPSdD_XHQMJ_ISslWgAAAcQ"]
[Sun Apr 19 21:11:17.701434 2026] [:error] [pid 15760:tid 15771] [client 68.221.185.36:9094] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeTUdfSdD_XHQMJ_ISslXQAAAcM"]
[Sun Apr 19 21:11:18.974162 2026] [:error] [pid 15763:tid 15812] [client 68.221.185.36:9092] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeTUdrMXv1Y1THOoxaD2TQAAAhA"]
[Sun Apr 19 21:11:20.428460 2026] [:error] [pid 47773:tid 47836] [client 68.221.185.36:9096] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/in.php"] [unique_id "aeTUeOiBHdnCJDuPq9BAIQAAAFQ"]
[Sun Apr 19 21:11:21.244806 2026] [:error] [pid 47773:tid 47828] [client 68.221.185.36:9205] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/in.php"] [unique_id "aeTUeeiBHdnCJDuPq9BAJAAAAEw"]
[Sun Apr 19 21:11:22.624365 2026] [:error] [pid 15760:tid 15790] [client 68.221.185.36:9179] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/in.php"] [unique_id "aeTUevSdD_XHQMJ_ISslawAAAdY"]
[Sun Apr 19 21:11:23.762546 2026] [:error] [pid 47773:tid 47833] [client 68.221.185.36:9179] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/in.php"] [unique_id "aeTUe-iBHdnCJDuPq9BALgAAAFE"]
[Sun Apr 19 21:11:24.925751 2026] [:error] [pid 47773:tid 47839] [client 68.221.185.36:9182] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aeTUfOiBHdnCJDuPq9BALwAAAFc"]
[Sun Apr 19 21:11:26.573840 2026] [:error] [pid 15763:tid 15815] [client 68.221.185.36:9212] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aeTUfrMXv1Y1THOoxaD2UgAAAhM"]
[Sun Apr 19 21:11:27.912214 2026] [:error] [pid 47775:tid 47843] [client 68.221.185.36:9090] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aeTUf7mztjlk9tsmoewSwQAAAIA"]
[Sun Apr 19 21:11:28.700888 2026] [:error] [pid 15760:tid 15770] [client 68.221.185.36:9107] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aeTUgPSdD_XHQMJ_ISsldQAAAcI"]
[Sun Apr 19 21:11:30.436907 2026] [:error] [pid 15760:tid 15783] [client 68.221.185.36:9166] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeTUgvSdD_XHQMJ_ISslggAAAc8"]
[Sun Apr 19 21:11:31.548906 2026] [:error] [pid 15760:tid 15775] [client 68.221.185.36:9174] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeTUg_SdD_XHQMJ_ISsljgAAAcc"]
[Sun Apr 19 21:11:32.426194 2026] [:error] [pid 47772:tid 47791] [client 68.221.185.36:9101] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeTUhIc0L16cb4smAz-46AAAAAI"]
[Sun Apr 19 21:11:33.331826 2026] [:error] [pid 47772:tid 47789] [client 68.221.185.36:9157] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aeTUhYc0L16cb4smAz-48AAAAAA"]
[Sun Apr 19 21:11:34.346078 2026] [:error] [pid 47772:tid 47795] [client 68.221.185.36:9095] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeTUhoc0L16cb4smAz-49QAAAAY"]
[Sun Apr 19 21:11:35.086413 2026] [:error] [pid 15694:tid 15740] [client 68.221.185.36:9030] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeTUh7imB-jol1fwqAoLpgAAAY4"]
[Sun Apr 19 21:11:35.641221 2026] [:error] [pid 15763:tid 15812] [client 68.221.185.36:9190] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeTUh7MXv1Y1THOoxaD2WgAAAhA"]
[Sun Apr 19 21:11:38.487723 2026] [:error] [pid 15765:tid 15853] [client 68.221.185.36:9173] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aeTUivRqinw-W5EwQ775UgAAAoE"]
[Sun Apr 19 21:11:39.930325 2026] [:error] [pid 15765:tid 15859] [client 68.221.185.36:9104] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeTUi_Rqinw-W5EwQ775VwAAAoY"]
[Sun Apr 19 21:11:41.554872 2026] [:error] [pid 15694:tid 15735] [client 68.221.185.36:9102] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeTUjbimB-jol1fwqAoLqQAAAYk"]
[Sun Apr 19 21:11:42.729541 2026] [:error] [pid 15760:tid 15781] [client 68.221.185.36:9199] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeTUjvSdD_XHQMJ_ISsloAAAAc0"]
[Sun Apr 19 21:11:43.572476 2026] [:error] [pid 15760:tid 15789] [client 68.221.185.36:9158] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bengi.php"] [unique_id "aeTUj_SdD_XHQMJ_ISslpgAAAdU"]
[Sun Apr 19 21:11:44.407862 2026] [:error] [pid 47773:tid 47837] [client 68.221.185.36:9155] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTUkOiBHdnCJDuPq9BAOgAAAFU"]
[Sun Apr 19 21:11:45.119434 2026] [:error] [pid 47775:tid 47852] [client 68.221.185.36:9195] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTUkbmztjlk9tsmoewSwgAAAIk"]
[Sun Apr 19 21:11:46.233522 2026] [:error] [pid 15763:tid 15811] [client 68.221.185.36:9196] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTUkrMXv1Y1THOoxaD2XAAAAg8"]
[Sun Apr 19 21:11:47.342326 2026] [:error] [pid 15760:tid 15769] [client 68.221.185.36:9123] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTUk_SdD_XHQMJ_ISsltAAAAcE"]
[Sun Apr 19 21:11:48.047300 2026] [:error] [pid 15760:tid 15782] [client 68.221.185.36:9211] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeTUlPSdD_XHQMJ_ISsluwAAAc4"]
[Sun Apr 19 21:11:48.595873 2026] [:error] [pid 47772:tid 47794] [client 68.221.185.36:9105] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeTUlIc0L16cb4smAz-5BgAAAAU"]
[Sun Apr 19 21:11:49.374361 2026] [:error] [pid 47772:tid 47804] [client 68.221.185.36:9131] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeTUlYc0L16cb4smAz-5BwAAAA8"]
[Sun Apr 19 21:11:50.073688 2026] [:error] [pid 15763:tid 15796] [client 68.221.185.36:9176] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aeTUlrMXv1Y1THOoxaD2ZAAAAgA"]
[Sun Apr 19 21:11:50.786455 2026] [:error] [pid 15763:tid 15813] [client 68.221.185.36:9215] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aeTUlrMXv1Y1THOoxaD2bgAAAhE"]
[Sun Apr 19 21:11:51.551935 2026] [:error] [pid 15693:tid 15709] [client 68.221.185.36:9178] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aeTUl8NMD-ccazQlTslZwgAAAU0"]
[Sun Apr 19 21:11:52.616830 2026] [:error] [pid 47772:tid 47803] [client 68.221.185.36:9108] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aeTUmIc0L16cb4smAz-5CwAAAA4"]
[Sun Apr 19 21:11:53.817849 2026] [:error] [pid 15694:tid 15738] [client 68.221.185.36:9175] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aeTUmbimB-jol1fwqAoLrQAAAYw"]
[Sun Apr 19 21:11:54.907587 2026] [:error] [pid 15694:tid 15724] [client 68.221.185.36:9098] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeTUmrimB-jol1fwqAoLrgAAAYE"]
[Sun Apr 19 21:11:56.018264 2026] [:error] [pid 47773:tid 47818] [client 68.221.185.36:9153] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeTUnOiBHdnCJDuPq9BAQgAAAEI"]
[Sun Apr 19 21:11:56.760925 2026] [:error] [pid 15763:tid 15796] [client 68.221.185.36:9188] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeTUnLMXv1Y1THOoxaD2jgAAAgA"]
[Sun Apr 19 21:11:57.734847 2026] [:error] [pid 15760:tid 15784] [client 68.221.185.36:9118] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeTUnfSdD_XHQMJ_ISslwQAAAdA"]
[Sun Apr 19 21:12:08.708189 2026] [:error] [pid 15765:tid 15852] [client 68.221.185.36:9125] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeTUqPRqinw-W5EwQ775agAAAoA"]
[Sun Apr 19 21:12:09.914608 2026] [:error] [pid 47775:tid 47851] [client 68.221.185.36:9141] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeTUqbmztjlk9tsmoewSzwAAAIg"]
[Sun Apr 19 21:12:11.159151 2026] [:error] [pid 15760:tid 15774] [client 68.221.185.36:9156] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeTUq_SdD_XHQMJ_ISsl9AAAAcY"]
[Sun Apr 19 21:12:11.903993 2026] [:error] [pid 47772:tid 47800] [client 68.221.185.36:9197] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cabs.php"] [unique_id "aeTUq4c0L16cb4smAz-5JwAAAAs"]
[Sun Apr 19 21:12:12.787609 2026] [:error] [pid 15694:tid 15733] [client 68.221.185.36:9038] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeTUrLimB-jol1fwqAoLswAAAYc"]
[Sun Apr 19 21:12:13.832438 2026] [:error] [pid 15760:tid 15775] [client 68.221.185.36:9171] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeTUrfSdD_XHQMJ_ISsl_QAAAcc"]
[Sun Apr 19 21:12:14.490909 2026] [:error] [pid 47886:tid 47905] [client 68.221.185.36:9033] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeTUrkSe8yiyuPrD7yN11gAAANE"]
[Sun Apr 19 21:12:15.578002 2026] [:error] [pid 15760:tid 15789] [client 68.221.185.36:9186] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeTUr_SdD_XHQMJ_ISsmAAAAAdU"]
[Sun Apr 19 21:12:16.885161 2026] [:error] [pid 15760:tid 15771] [client 68.221.185.36:9213] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "aeTUsPSdD_XHQMJ_ISsmCgAAAcM"]
[Sun Apr 19 21:12:17.905157 2026] [:error] [pid 15764:tid 15833] [client 68.221.185.36:9184] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "aeTUsWLL_sqdSHoVp-QP-gAAAkc"]
[Sun Apr 19 21:12:18.831045 2026] [:error] [pid 15760:tid 15781] [client 68.221.185.36:9194] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "aeTUsvSdD_XHQMJ_ISsmGAAAAc0"]
[Sun Apr 19 21:12:19.661035 2026] [:error] [pid 15760:tid 15775] [client 68.221.185.36:9091] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/x1da.php"] [unique_id "aeTUs_SdD_XHQMJ_ISsmGwAAAcc"]
[Sun Apr 19 21:12:20.491008 2026] [:error] [pid 15760:tid 15768] [client 68.221.185.36:9076] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeTUtPSdD_XHQMJ_ISsmIAAAAcA"]
[Sun Apr 19 21:12:21.437169 2026] [:error] [pid 15760:tid 15789] [client 68.221.185.36:9121] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeTUtfSdD_XHQMJ_ISsmIwAAAdU"]
[Sun Apr 19 21:12:23.067474 2026] [:error] [pid 15765:tid 15859] [client 68.221.185.36:8967] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeTUt_Rqinw-W5EwQ775bQAAAoY"]
[Sun Apr 19 21:12:25.244826 2026] [:error] [pid 47772:tid 47789] [client 68.221.185.36:9152] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jp.php"] [unique_id "aeTUuYc0L16cb4smAz-5NgAAAAA"]
[Sun Apr 19 21:12:26.945021 2026] [:error] [pid 15763:tid 15804] [client 68.221.185.36:9195] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeTUurMXv1Y1THOoxaD2pQAAAgg"]
[Sun Apr 19 21:12:28.115749 2026] [:error] [pid 15694:tid 15743] [client 68.221.185.36:9160] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeTUvLimB-jol1fwqAoLuwAAAZE"]
[Sun Apr 19 21:12:29.938138 2026] [:error] [pid 15760:tid 15788] [client 68.221.185.36:9206] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeTUvfSdD_XHQMJ_ISsmMQAAAdQ"]
[Sun Apr 19 21:12:31.565198 2026] [:error] [pid 15760:tid 15789] [client 68.221.185.36:9177] [client 68.221.185.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeTUv_SdD_XHQMJ_ISsmPwAAAdU"]
[Sun Apr 19 22:04:14.669659 2026] [:error] [pid 15764:tid 15833] [client 138.68.5.226:51868] [client 138.68.5.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeTg3mLL_sqdSHoVp-QpAAAAAkc"]
[Sun Apr 19 22:22:59.658581 2026] [autoindex:error] [pid 15693:tid 15701] [client 212.47.77.100:57896] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 19 22:30:13.517927 2026] [:error] [pid 15764:tid 15829] [client 172.213.245.217:38415] [client 172.213.245.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTm9WLL_sqdSHoVp-Qx7AAAAkM"]
[Sun Apr 19 22:30:14.849627 2026] [:error] [pid 15760:tid 15791] [client 172.213.245.217:38462] [client 172.213.245.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTm9vSdD_XHQMJ_IStT1wAAAdc"]
[Sun Apr 19 22:30:16.242190 2026] [:error] [pid 15693:tid 15696] [client 172.213.245.217:47644] [client 172.213.245.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTm-MNMD-ccazQlTsliKAAAAUA"]
[Sun Apr 19 22:30:17.378187 2026] [:error] [pid 15765:tid 15861] [client 172.213.245.217:38410] [client 172.213.245.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeTm-fRqinw-W5EwQ74FWQAAAog"]
[Sun Apr 19 22:39:05.898421 2026] [:error] [pid 15760:tid 15784] [client 4.223.83.231:59805] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeTpCfSdD_XHQMJ_IStY1QAAAdA"]
[Sun Apr 19 22:39:06.631739 2026] [:error] [pid 15763:tid 15802] [client 4.223.83.231:54346] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeTpCrMXv1Y1THOoxaAPpQAAAgY"]
[Sun Apr 19 22:39:07.468070 2026] [:error] [pid 47886:tid 47902] [client 4.223.83.231:6441] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeTpC0Se8yiyuPrD7yOEJAAAAM4"]
[Sun Apr 19 22:39:08.327119 2026] [:error] [pid 15693:tid 15718] [client 4.223.83.231:6590] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeTpDMNMD-ccazQlTsljBQAAAVY"]
[Sun Apr 19 22:39:09.191745 2026] [:error] [pid 15763:tid 15813] [client 4.223.83.231:52177] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeTpDbMXv1Y1THOoxaAPqAAAAhE"]
[Sun Apr 19 22:39:10.783510 2026] [:error] [pid 15764:tid 15840] [client 4.223.83.231:61705] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeTpDmLL_sqdSHoVp-Q1dAAAAk4"]
[Sun Apr 19 22:39:11.523944 2026] [:error] [pid 47772:tid 47794] [client 4.223.83.231:54549] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeTpD4c0L16cb4smAz_WiwAAAAU"]
[Sun Apr 19 22:39:12.356899 2026] [:error] [pid 15764:tid 15829] [client 4.223.83.231:6569] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeTpEGLL_sqdSHoVp-Q1dwAAAkM"]
[Sun Apr 19 22:39:13.161597 2026] [:error] [pid 47773:tid 47823] [client 4.223.83.231:52186] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeTpEeiBHdnCJDuPq9BUkgAAAEc"]
[Sun Apr 19 22:39:14.012271 2026] [:error] [pid 47772:tid 47807] [client 4.223.83.231:59793] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeTpEoc0L16cb4smAz_WkgAAABI"]
[Sun Apr 19 22:39:14.944539 2026] [:error] [pid 47773:tid 47840] [client 4.223.83.231:61716] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeTpEuiBHdnCJDuPq9BUkwAAAFg"]
[Sun Apr 19 22:39:15.824992 2026] [:error] [pid 47773:tid 47825] [client 4.223.83.231:6529] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeTpE-iBHdnCJDuPq9BUlAAAAEk"]
[Sun Apr 19 22:39:16.644325 2026] [:error] [pid 47886:tid 47899] [client 4.223.83.231:52174] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aeTpFESe8yiyuPrD7yOEKAAAAMs"]
[Sun Apr 19 22:39:17.262036 2026] [:error] [pid 15764:tid 15839] [client 4.223.83.231:6459] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aeTpFWLL_sqdSHoVp-Q1gwAAAk0"]
[Sun Apr 19 22:39:18.820361 2026] [:error] [pid 15764:tid 15836] [client 4.223.83.231:54577] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aeTpFmLL_sqdSHoVp-Q1iQAAAko"]
[Sun Apr 19 22:39:19.646755 2026] [:error] [pid 15760:tid 15776] [client 4.223.83.231:61723] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aeTpF_SdD_XHQMJ_IStY6QAAAcg"]
[Sun Apr 19 22:39:20.366017 2026] [:error] [pid 15760:tid 15790] [client 4.223.83.231:6535] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeTpGPSdD_XHQMJ_IStY6wAAAdY"]
[Sun Apr 19 22:39:21.048783 2026] [:error] [pid 15764:tid 15846] [client 4.223.83.231:61708] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeTpGWLL_sqdSHoVp-Q1lQAAAlQ"]
[Sun Apr 19 22:39:21.925962 2026] [:error] [pid 15765:tid 15872] [client 4.223.83.231:54568] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeTpGfRqinw-W5EwQ74G4QAAApM"]
[Sun Apr 19 22:39:22.577367 2026] [:error] [pid 47772:tid 47807] [client 4.223.83.231:6536] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeTpGoc0L16cb4smAz_WmQAAABI"]
[Sun Apr 19 22:39:24.163580 2026] [:error] [pid 15764:tid 15840] [client 4.223.83.231:6389] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeTpHGLL_sqdSHoVp-Q1nAAAAk4"]
[Sun Apr 19 22:39:24.985388 2026] [:error] [pid 15764:tid 15835] [client 4.223.83.231:6455] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeTpHGLL_sqdSHoVp-Q1nwAAAkk"]
[Sun Apr 19 22:39:25.792344 2026] [:error] [pid 47772:tid 47798] [client 4.223.83.231:59821] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeTpHYc0L16cb4smAz_WmwAAAAk"]
[Sun Apr 19 22:39:26.633764 2026] [:error] [pid 47772:tid 47804] [client 4.223.83.231:52167] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeTpHoc0L16cb4smAz_WngAAAA8"]
[Sun Apr 19 22:39:27.336132 2026] [:error] [pid 47772:tid 47810] [client 4.223.83.231:6590] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ganja.php"] [unique_id "aeTpH4c0L16cb4smAz_WoQAAABU"]
[Sun Apr 19 22:39:28.255032 2026] [:error] [pid 47775:tid 47852] [client 4.223.83.231:6371] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ganja.php"] [unique_id "aeTpILmztjlk9tsmoewk4wAAAIk"]
[Sun Apr 19 22:39:29.079932 2026] [:error] [pid 15765:tid 15858] [client 4.223.83.231:6528] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ganja.php"] [unique_id "aeTpIfRqinw-W5EwQ74G5AAAAoU"]
[Sun Apr 19 22:39:29.688153 2026] [:error] [pid 15765:tid 15876] [client 4.223.83.231:54374] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ganja.php"] [unique_id "aeTpIfRqinw-W5EwQ74G5QAAApc"]
[Sun Apr 19 22:39:30.411058 2026] [:error] [pid 15693:tid 15701] [client 4.223.83.231:6342] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aeTpIsNMD-ccazQlTsljCgAAAUU"]
[Sun Apr 19 22:39:31.169454 2026] [:error] [pid 15764:tid 15826] [client 4.223.83.231:6557] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aeTpI2LL_sqdSHoVp-Q1sQAAAkA"]
[Sun Apr 19 22:39:32.261797 2026] [:error] [pid 15765:tid 15859] [client 4.223.83.231:61698] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aeTpJPRqinw-W5EwQ74G6AAAAoY"]
[Sun Apr 19 22:39:33.208543 2026] [:error] [pid 15763:tid 15809] [client 4.223.83.231:6433] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aeTpJbMXv1Y1THOoxaAPvQAAAg0"]
[Sun Apr 19 22:39:34.112619 2026] [:error] [pid 47886:tid 47903] [client 4.223.83.231:59800] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad821.php"] [unique_id "aeTpJkSe8yiyuPrD7yOELQAAAM8"]
[Sun Apr 19 22:39:35.520523 2026] [:error] [pid 15764:tid 15837] [client 4.223.83.231:59786] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad821.php"] [unique_id "aeTpJ2LL_sqdSHoVp-Q1uAAAAks"]
[Sun Apr 19 22:39:36.208576 2026] [:error] [pid 15764:tid 15831] [client 4.223.83.231:6532] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad821.php"] [unique_id "aeTpKGLL_sqdSHoVp-Q1uwAAAkU"]
[Sun Apr 19 22:39:36.901665 2026] [:error] [pid 15764:tid 15836] [client 4.223.83.231:61746] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad821.php"] [unique_id "aeTpKGLL_sqdSHoVp-Q1xQAAAko"]
[Sun Apr 19 22:39:37.752913 2026] [:error] [pid 47886:tid 47899] [client 4.223.83.231:52163] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8210.php"] [unique_id "aeTpKUSe8yiyuPrD7yOEMAAAAMs"]
[Sun Apr 19 22:39:38.580681 2026] [:error] [pid 15765:tid 15861] [client 4.223.83.231:54574] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8210.php"] [unique_id "aeTpKvRqinw-W5EwQ74G8AAAAog"]
[Sun Apr 19 22:39:39.888763 2026] [:error] [pid 15760:tid 15775] [client 4.223.83.231:54373] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8210.php"] [unique_id "aeTpK_SdD_XHQMJ_IStZBAAAAcc"]
[Sun Apr 19 22:39:40.956085 2026] [:error] [pid 15764:tid 15831] [client 4.223.83.231:6559] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8210.php"] [unique_id "aeTpLGLL_sqdSHoVp-Q1zAAAAkU"]
[Sun Apr 19 22:39:41.718843 2026] [:error] [pid 15764:tid 15827] [client 4.223.83.231:61738] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTpLWLL_sqdSHoVp-Q1zQAAAkE"]
[Sun Apr 19 22:39:42.689628 2026] [:error] [pid 15765:tid 15877] [client 4.223.83.231:61749] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTpLvRqinw-W5EwQ74G8wAAApg"]
[Sun Apr 19 22:39:43.857293 2026] [:error] [pid 15765:tid 15853] [client 4.223.83.231:59783] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTpL_Rqinw-W5EwQ74G9QAAAoE"]
[Sun Apr 19 22:39:44.865923 2026] [:error] [pid 15763:tid 15799] [client 4.223.83.231:65480] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTpMLMXv1Y1THOoxaAPzQAAAgM"]
[Sun Apr 19 22:39:45.621148 2026] [:error] [pid 47772:tid 47805] [client 4.223.83.231:6396] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aeTpMYc0L16cb4smAz_WywAAABA"]
[Sun Apr 19 22:39:46.238733 2026] [:error] [pid 15765:tid 15859] [client 4.223.83.231:6378] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aeTpMvRqinw-W5EwQ74G9gAAAoY"]
[Sun Apr 19 22:39:47.095611 2026] [:error] [pid 15764:tid 15842] [client 4.223.83.231:59817] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aeTpM2LL_sqdSHoVp-Q11QAAAlA"]
[Sun Apr 19 22:39:47.772720 2026] [:error] [pid 15764:tid 15839] [client 4.223.83.231:52178] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aeTpM2LL_sqdSHoVp-Q12AAAAk0"]
[Sun Apr 19 22:39:48.877843 2026] [:error] [pid 15763:tid 15815] [client 4.223.83.231:6369] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aeTpNLMXv1Y1THOoxaAP0gAAAhM"]
[Sun Apr 19 22:39:49.539465 2026] [:error] [pid 15763:tid 15810] [client 4.223.83.231:61731] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aeTpNbMXv1Y1THOoxaAP0wAAAg4"]
[Sun Apr 19 22:39:50.326342 2026] [:error] [pid 15764:tid 15827] [client 4.223.83.231:65519] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aeTpNmLL_sqdSHoVp-Q14QAAAkE"]
[Sun Apr 19 22:39:51.768786 2026] [:error] [pid 15760:tid 15786] [client 4.223.83.231:6530] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aeTpN_SdD_XHQMJ_IStZBwAAAdI"]
[Sun Apr 19 22:39:52.684224 2026] [:error] [pid 47775:tid 47866] [client 4.223.83.231:52218] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeTpOLmztjlk9tsmoewlNgAAAJc"]
[Sun Apr 19 22:39:53.621588 2026] [:error] [pid 15760:tid 15775] [client 4.223.83.231:54340] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeTpOfSdD_XHQMJ_IStZCwAAAcc"]
[Sun Apr 19 22:39:54.482685 2026] [:error] [pid 15763:tid 15805] [client 4.223.83.231:61736] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeTpOrMXv1Y1THOoxaAP3AAAAgk"]
[Sun Apr 19 22:39:55.572690 2026] [:error] [pid 15764:tid 15851] [client 4.223.83.231:54392] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeTpO2LL_sqdSHoVp-Q15QAAAlg"]
[Sun Apr 19 22:39:56.484597 2026] [:error] [pid 15760:tid 15774] [client 4.223.83.231:54398] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeTpPPSdD_XHQMJ_IStZDgAAAcY"]
[Sun Apr 19 22:39:57.180959 2026] [:error] [pid 47775:tid 47860] [client 4.223.83.231:53982] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeTpPbmztjlk9tsmoewlSQAAAJE"]
[Sun Apr 19 22:39:57.910466 2026] [:error] [pid 47772:tid 47806] [client 4.223.83.231:54391] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeTpPYc0L16cb4smAz_W0wAAABE"]
[Sun Apr 19 22:39:58.849889 2026] [:error] [pid 15760:tid 15787] [client 4.223.83.231:59796] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeTpPvSdD_XHQMJ_IStZGAAAAdM"]
[Sun Apr 19 22:39:59.652074 2026] [:error] [pid 15764:tid 15835] [client 4.223.83.231:61755] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeTpP2LL_sqdSHoVp-Q17QAAAkk"]
[Sun Apr 19 22:40:00.619989 2026] [:error] [pid 15764:tid 15833] [client 4.223.83.231:6432] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeTpQGLL_sqdSHoVp-Q17wAAAkc"]
[Sun Apr 19 22:40:01.273083 2026] [:error] [pid 15764:tid 15838] [client 4.223.83.231:65484] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeTpQWLL_sqdSHoVp-Q18wAAAkw"]
[Sun Apr 19 22:40:02.177102 2026] [:error] [pid 15763:tid 15810] [client 4.223.83.231:54565] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeTpQrMXv1Y1THOoxaAP6gAAAg4"]
[Sun Apr 19 22:40:03.210279 2026] [:error] [pid 15694:tid 15739] [client 4.223.83.231:6400] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeTpQ7imB-jol1fwqAoXoAAAAY0"]
[Sun Apr 19 22:40:03.955836 2026] [:error] [pid 15765:tid 15872] [client 4.223.83.231:54528] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeTpQ_Rqinw-W5EwQ74G-gAAApM"]
[Sun Apr 19 22:40:04.703211 2026] [:error] [pid 47773:tid 47819] [client 4.223.83.231:65490] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeTpROiBHdnCJDuPq9BUrgAAAEM"]
[Sun Apr 19 22:40:11.862802 2026] [:error] [pid 15763:tid 15797] [client 4.223.83.231:58142] [client 4.223.83.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aeTpS7MXv1Y1THOoxaAQAwAAAgE"]
[Sun Apr 19 22:40:14.133298 2026] [:error] [pid 15760:tid 15780] [client 4.223.83.231:59829] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "aeTpTvSdD_XHQMJ_IStZPgAAAcw"]
[Sun Apr 19 22:40:15.092487 2026] [:error] [pid 47773:tid 47835] [client 4.223.83.231:6558] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "aeTpT-iBHdnCJDuPq9BUsQAAAFM"]
[Sun Apr 19 22:40:15.760341 2026] [:error] [pid 15763:tid 15799] [client 4.223.83.231:6373] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "aeTpT7MXv1Y1THOoxaAQFgAAAgM"]
[Sun Apr 19 22:40:16.603663 2026] [:error] [pid 15760:tid 15785] [client 4.223.83.231:6546] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "aeTpUPSdD_XHQMJ_IStZQQAAAdE"]
[Sun Apr 19 22:40:17.379610 2026] [:error] [pid 15764:tid 15838] [client 4.223.83.231:61715] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeTpUWLL_sqdSHoVp-Q2BQAAAkw"]
[Sun Apr 19 22:40:18.110828 2026] [:error] [pid 47886:tid 47912] [client 4.223.83.231:65474] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeTpUkSe8yiyuPrD7yOEPgAAANg"]
[Sun Apr 19 22:40:18.670392 2026] [:error] [pid 15764:tid 15828] [client 4.223.83.231:53979] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeTpUmLL_sqdSHoVp-Q2CgAAAkI"]
[Sun Apr 19 22:40:19.534481 2026] [:error] [pid 15763:tid 15799] [client 4.223.83.231:6345] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeTpU7MXv1Y1THOoxaAQJwAAAgM"]
[Sun Apr 19 22:40:20.343093 2026] [:error] [pid 15763:tid 15798] [client 4.223.83.231:6451] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeTpVLMXv1Y1THOoxaAQKgAAAgI"]
[Sun Apr 19 22:40:21.228735 2026] [:error] [pid 15763:tid 15819] [client 4.223.83.231:6555] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeTpVbMXv1Y1THOoxaAQMQAAAhc"]
[Sun Apr 19 22:40:22.195351 2026] [:error] [pid 47773:tid 47837] [client 4.223.83.231:6548] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeTpVuiBHdnCJDuPq9BUtAAAAFU"]
[Sun Apr 19 22:40:23.232335 2026] [:error] [pid 15764:tid 15844] [client 4.223.83.231:54543] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeTpV2LL_sqdSHoVp-Q2FQAAAlI"]
[Sun Apr 19 22:40:23.956696 2026] [:error] [pid 47773:tid 47818] [client 4.223.83.231:65495] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeTpV-iBHdnCJDuPq9BUtQAAAEI"]
[Sun Apr 19 22:40:24.740344 2026] [:error] [pid 47775:tid 47858] [client 4.223.83.231:6458] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeTpWLmztjlk9tsmoewldwAAAI8"]
[Sun Apr 19 22:40:25.379085 2026] [:error] [pid 47775:tid 47844] [client 4.223.83.231:6547] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeTpWbmztjlk9tsmoewlegAAAIE"]
[Sun Apr 19 22:40:26.200285 2026] [:error] [pid 47775:tid 47848] [client 4.223.83.231:59820] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeTpWrmztjlk9tsmoewlfAAAAIU"]
[Sun Apr 19 22:40:27.268462 2026] [:error] [pid 15764:tid 15847] [client 4.223.83.231:61751] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeTpW2LL_sqdSHoVp-Q2GwAAAlU"]
[Sun Apr 19 22:40:28.215864 2026] [:error] [pid 15693:tid 15708] [client 4.223.83.231:52161] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeTpXMNMD-ccazQlTsljGwAAAUw"]
[Sun Apr 19 22:40:29.283900 2026] [:error] [pid 15765:tid 15874] [client 4.223.83.231:54554] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeTpXfRqinw-W5EwQ74HBwAAApU"]
[Sun Apr 19 22:40:29.971479 2026] [:error] [pid 47886:tid 47905] [client 4.223.83.231:54560] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeTpXUSe8yiyuPrD7yOEQAAAANE"]
[Sun Apr 19 22:40:30.565792 2026] [:error] [pid 15763:tid 15816] [client 4.223.83.231:6358] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeTpXrMXv1Y1THOoxaAQPAAAAhQ"]
[Sun Apr 19 22:40:31.345538 2026] [:error] [pid 15763:tid 15796] [client 4.223.83.231:65479] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeTpX7MXv1Y1THOoxaAQQQAAAgA"]
[Sun Apr 19 22:40:32.237746 2026] [:error] [pid 47772:tid 47805] [client 4.223.83.231:54349] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeTpYIc0L16cb4smAz_W7QAAABA"]
[Sun Apr 19 22:40:33.131284 2026] [:error] [pid 47772:tid 47813] [client 4.223.83.231:54558] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeTpYYc0L16cb4smAz_W8AAAABg"]
[Sun Apr 19 22:40:34.093395 2026] [:error] [pid 47772:tid 47810] [client 4.223.83.231:54345] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeTpYoc0L16cb4smAz_W9AAAABU"]
[Sun Apr 19 22:40:35.253807 2026] [:error] [pid 47775:tid 47845] [client 4.223.83.231:61740] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeTpY7mztjlk9tsmoewlfwAAAII"]
[Sun Apr 19 22:40:36.228905 2026] [:error] [pid 15763:tid 15820] [client 4.223.83.231:6561] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeTpZLMXv1Y1THOoxaAQRgAAAhg"]
[Sun Apr 19 22:40:37.239969 2026] [:error] [pid 15764:tid 15839] [client 4.223.83.231:61700] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aeTpZWLL_sqdSHoVp-Q2JAAAAk0"]
[Sun Apr 19 22:40:37.861756 2026] [:error] [pid 47886:tid 47909] [client 4.223.83.231:54583] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "aeTpZUSe8yiyuPrD7yOEQgAAANU"]
[Sun Apr 19 22:40:38.622318 2026] [:error] [pid 47775:tid 47856] [client 4.223.83.231:59839] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "aeTpZrmztjlk9tsmoewlggAAAI0"]
[Sun Apr 19 22:40:39.697683 2026] [:error] [pid 47775:tid 47866] [client 4.223.83.231:65488] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "aeTpZ7mztjlk9tsmoewlgwAAAJc"]
[Sun Apr 19 22:40:40.563085 2026] [:error] [pid 15764:tid 15834] [client 4.223.83.231:53995] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wglum1.php"] [unique_id "aeTpaGLL_sqdSHoVp-Q2JQAAAkg"]
[Sun Apr 19 22:40:41.228025 2026] [:error] [pid 15763:tid 15812] [client 4.223.83.231:6449] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeTpabMXv1Y1THOoxaAQTAAAAhA"]
[Sun Apr 19 22:40:42.179366 2026] [:error] [pid 47775:tid 47862] [client 4.223.83.231:65505] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeTparmztjlk9tsmoewliAAAAJM"]
[Sun Apr 19 22:40:42.840713 2026] [:error] [pid 15764:tid 15847] [client 4.223.83.231:52184] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeTpamLL_sqdSHoVp-Q2LgAAAlU"]
[Sun Apr 19 22:40:43.600318 2026] [:error] [pid 15764:tid 15834] [client 4.223.83.231:61734] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "aeTpa2LL_sqdSHoVp-Q2MwAAAkg"]
[Sun Apr 19 22:40:44.253964 2026] [:error] [pid 15763:tid 15818] [client 4.223.83.231:59319] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "aeTpbLMXv1Y1THOoxaAQTQAAAhY"]
[Sun Apr 19 22:40:44.898185 2026] [:error] [pid 15764:tid 15827] [client 4.223.83.231:6566] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "aeTpbGLL_sqdSHoVp-Q2OgAAAkE"]
[Sun Apr 19 22:40:45.579919 2026] [:error] [pid 47775:tid 47867] [client 4.223.83.231:6341] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "aeTpbbmztjlk9tsmoewliwAAAJg"]
[Sun Apr 19 22:40:46.225839 2026] [:error] [pid 15760:tid 15779] [client 4.223.83.231:6398] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wgift1.php"] [unique_id "aeTpbvSdD_XHQMJ_IStZewAAAcs"]
[Sun Apr 19 22:40:46.913648 2026] [:error] [pid 15765:tid 15855] [client 4.223.83.231:59817] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xynz.php"] [unique_id "aeTpbvRqinw-W5EwQ74HCwAAAoI"]
[Sun Apr 19 22:40:47.710901 2026] [:error] [pid 47772:tid 47806] [client 4.223.83.231:54559] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xynz.php"] [unique_id "aeTpb4c0L16cb4smAz_W-QAAABE"]
[Sun Apr 19 22:40:48.644306 2026] [:error] [pid 47772:tid 47797] [client 4.223.83.231:65524] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xynz.php"] [unique_id "aeTpcIc0L16cb4smAz_W-gAAAAg"]
[Sun Apr 19 22:40:49.299021 2026] [:error] [pid 15760:tid 15770] [client 4.223.83.231:53965] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xynz.php"] [unique_id "aeTpcfSdD_XHQMJ_IStZggAAAcI"]
[Sun Apr 19 22:40:50.025438 2026] [:error] [pid 15760:tid 15778] [client 4.223.83.231:54353] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeTpcvSdD_XHQMJ_IStZiAAAAco"]
[Sun Apr 19 22:40:50.589999 2026] [:error] [pid 15765:tid 15872] [client 4.223.83.231:54384] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeTpcvRqinw-W5EwQ74HEQAAApM"]
[Sun Apr 19 22:40:51.792846 2026] [:error] [pid 47772:tid 47798] [client 4.223.83.231:65527] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeTpc4c0L16cb4smAz_XAwAAAAk"]
[Sun Apr 19 22:40:52.501993 2026] [:error] [pid 15760:tid 15782] [client 4.223.83.231:6425] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeTpdPSdD_XHQMJ_IStZkAAAAc4"]
[Sun Apr 19 22:40:53.093996 2026] [:error] [pid 15764:tid 15842] [client 4.223.83.231:6580] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "aeTpdWLL_sqdSHoVp-Q2QwAAAlA"]
[Sun Apr 19 22:40:53.820431 2026] [:error] [pid 15764:tid 15833] [client 4.223.83.231:6585] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "aeTpdWLL_sqdSHoVp-Q2SAAAAkc"]
[Sun Apr 19 22:40:54.550928 2026] [:error] [pid 15763:tid 15804] [client 4.223.83.231:52165] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "aeTpdrMXv1Y1THOoxaAQVAAAAgg"]
[Sun Apr 19 22:40:55.262492 2026] [:error] [pid 47773:tid 47818] [client 4.223.83.231:59836] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "aeTpd-iBHdnCJDuPq9BUvwAAAEI"]
[Sun Apr 19 22:40:56.736095 2026] [:error] [pid 15760:tid 15782] [client 4.223.83.231:59827] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeTpePSdD_XHQMJ_IStZnAAAAc4"]
[Sun Apr 19 22:40:57.495953 2026] [:error] [pid 15694:tid 15749] [client 4.223.83.231:6379] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeTpebimB-jol1fwqAoXrQAAAZc"]
[Sun Apr 19 22:40:58.308476 2026] [:error] [pid 47886:tid 47905] [client 4.223.83.231:54557] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeTpekSe8yiyuPrD7yOEUAAAANE"]
[Sun Apr 19 22:40:59.253963 2026] [:error] [pid 47772:tid 47799] [client 4.223.83.231:52180] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeTpe4c0L16cb4smAz_XDgAAAAo"]
[Sun Apr 19 22:41:00.205988 2026] [:error] [pid 15760:tid 15771] [client 4.223.83.231:54582] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aeTpfPSdD_XHQMJ_IStZogAAAcM"]
[Sun Apr 19 22:41:00.934381 2026] [:error] [pid 47772:tid 47812] [client 4.223.83.231:54548] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aeTpfIc0L16cb4smAz_XFwAAABc"]
[Sun Apr 19 22:41:01.942344 2026] [:error] [pid 15760:tid 15779] [client 4.223.83.231:6367] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aeTpffSdD_XHQMJ_IStZqQAAAcs"]
[Sun Apr 19 22:41:02.897168 2026] [:error] [pid 15760:tid 15792] [client 4.223.83.231:61756] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aeTpfvSdD_XHQMJ_IStZrAAAAdg"]
[Sun Apr 19 22:41:03.809317 2026] [:error] [pid 15760:tid 15788] [client 4.223.83.231:6539] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aeTpf_SdD_XHQMJ_IStZsAAAAdQ"]
[Sun Apr 19 22:41:04.505945 2026] [:error] [pid 15765:tid 15853] [client 4.223.83.231:65525] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aeTpgPRqinw-W5EwQ74HEwAAAoE"]
[Sun Apr 19 22:41:05.263849 2026] [:error] [pid 15760:tid 15773] [client 4.223.83.231:54535] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aeTpgfSdD_XHQMJ_IStZwgAAAcU"]
[Sun Apr 19 22:41:05.960575 2026] [:error] [pid 15760:tid 15775] [client 4.223.83.231:6768] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aeTpgfSdD_XHQMJ_IStZxQAAAcc"]
[Sun Apr 19 22:41:06.758486 2026] [:error] [pid 47773:tid 47838] [client 4.223.83.231:61710] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeTpguiBHdnCJDuPq9BUwAAAAFY"]
[Sun Apr 19 22:41:07.495012 2026] [:error] [pid 15760:tid 15789] [client 4.223.83.231:6565] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeTpg_SdD_XHQMJ_IStZzgAAAdU"]
[Sun Apr 19 22:41:08.377540 2026] [:error] [pid 15764:tid 15838] [client 4.223.83.231:6570] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeTphGLL_sqdSHoVp-Q2WQAAAkw"]
[Sun Apr 19 22:41:09.311169 2026] [:error] [pid 47772:tid 47789] [client 4.223.83.231:6589] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeTphYc0L16cb4smAz_XHgAAAAA"]
[Sun Apr 19 22:41:09.934601 2026] [:error] [pid 47772:tid 47800] [client 4.223.83.231:58145] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aeTphYc0L16cb4smAz_XKgAAAAs"]
[Sun Apr 19 22:41:10.631423 2026] [:error] [pid 47775:tid 47848] [client 4.223.83.231:6538] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aeTphrmztjlk9tsmoewloAAAAIU"]
[Sun Apr 19 22:41:11.813471 2026] [:error] [pid 15764:tid 15834] [client 4.223.83.231:6187] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aeTph2LL_sqdSHoVp-Q2YgAAAkg"]
[Sun Apr 19 22:41:12.631187 2026] [:error] [pid 47772:tid 47801] [client 4.223.83.231:59799] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aeTpiIc0L16cb4smAz_XXwAAAAw"]
[Sun Apr 19 22:41:18.673287 2026] [:error] [pid 15760:tid 15790] [client 4.223.83.231:65526] [client 4.223.83.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeTpjvSdD_XHQMJ_IStZ4gAAAdY"]
[Sun Apr 19 22:41:21.847543 2026] [:error] [pid 15760:tid 15789] [client 4.223.83.231:61732] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeTpkfSdD_XHQMJ_IStZ7QAAAdU"]
[Sun Apr 19 22:41:22.671963 2026] [:error] [pid 47886:tid 47899] [client 4.223.83.231:54361] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeTpkkSe8yiyuPrD7yOEVgAAAMs"]
[Sun Apr 19 22:41:23.307397 2026] [:error] [pid 47886:tid 47901] [client 4.223.83.231:59802] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeTpk0Se8yiyuPrD7yOEVwAAAM0"]
[Sun Apr 19 22:41:24.257776 2026] [:error] [pid 15693:tid 15701] [client 4.223.83.231:6582] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/state.php"] [unique_id "aeTplMNMD-ccazQlTsljIwAAAUU"]
[Sun Apr 19 22:41:25.193411 2026] [:error] [pid 47773:tid 47831] [client 4.223.83.231:6394] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aeTpleiBHdnCJDuPq9BUygAAAE8"]
[Sun Apr 19 22:41:25.868405 2026] [:error] [pid 47772:tid 47809] [client 4.223.83.231:65518] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aeTplYc0L16cb4smAz_XbQAAABQ"]
[Sun Apr 19 22:41:26.618880 2026] [:error] [pid 47772:tid 47803] [client 4.223.83.231:54537] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aeTploc0L16cb4smAz_XcQAAAA4"]
[Sun Apr 19 22:41:28.125697 2026] [:error] [pid 47773:tid 47822] [client 4.223.83.231:65510] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ss.php"] [unique_id "aeTpmOiBHdnCJDuPq9BU0QAAAEY"]
[Sun Apr 19 22:41:29.713722 2026] [:error] [pid 15763:tid 15806] [client 4.223.83.231:65487] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeTpmbMXv1Y1THOoxaAQfAAAAgo"]
[Sun Apr 19 22:41:30.716535 2026] [:error] [pid 47775:tid 47849] [client 4.223.83.231:6401] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeTpmrmztjlk9tsmoewlqQAAAIY"]
[Sun Apr 19 22:41:31.465606 2026] [:error] [pid 47772:tid 47804] [client 4.223.83.231:62079] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeTpm4c0L16cb4smAz_XggAAAA8"]
[Sun Apr 19 22:41:32.339849 2026] [:error] [pid 15763:tid 15807] [client 4.223.83.231:6422] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeTpnLMXv1Y1THOoxaAQggAAAgs"]
[Sun Apr 19 22:41:33.410154 2026] [:error] [pid 47773:tid 47818] [client 4.223.83.231:62039] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mifta.php"] [unique_id "aeTpneiBHdnCJDuPq9BU1gAAAEI"]
[Sun Apr 19 22:41:34.138758 2026] [:error] [pid 47773:tid 47823] [client 4.223.83.231:6426] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mifta.php"] [unique_id "aeTpnuiBHdnCJDuPq9BU2QAAAEc"]
[Sun Apr 19 22:41:35.026140 2026] [:error] [pid 15694:tid 15749] [client 4.223.83.231:6533] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mifta.php"] [unique_id "aeTpn7imB-jol1fwqAoXtwAAAZc"]
[Sun Apr 19 22:41:35.858227 2026] [:error] [pid 47773:tid 47839] [client 4.223.83.231:6381] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mifta.php"] [unique_id "aeTpn-iBHdnCJDuPq9BU2gAAAFc"]
[Sun Apr 19 22:41:37.343321 2026] [:error] [pid 15760:tid 15781] [client 4.223.83.231:54551] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "aeTpofSdD_XHQMJ_IStZ-wAAAc0"]
[Sun Apr 19 22:41:38.119328 2026] [:error] [pid 47886:tid 47893] [client 4.223.83.231:6438] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "aeTpokSe8yiyuPrD7yOEYwAAAMU"]
[Sun Apr 19 22:41:39.163774 2026] [:error] [pid 47775:tid 47848] [client 4.223.83.231:59824] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "aeTpo7mztjlk9tsmoewlrgAAAIU"]
[Sun Apr 19 22:41:40.019461 2026] [:error] [pid 15694:tid 15730] [client 4.223.83.231:54539] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "aeTppLimB-jol1fwqAoXuQAAAYQ"]
[Sun Apr 19 22:41:40.982104 2026] [:error] [pid 47775:tid 47846] [client 4.223.83.231:6543] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeTppLmztjlk9tsmoewlsQAAAIM"]
[Sun Apr 19 22:41:41.790734 2026] [:error] [pid 15764:tid 15850] [client 4.223.83.231:65514] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeTppWLL_sqdSHoVp-Q2kQAAAlc"]
[Sun Apr 19 22:41:43.430333 2026] [:error] [pid 15693:tid 15713] [client 4.223.83.231:6349] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeTpp8NMD-ccazQlTsljJgAAAVE"]
[Sun Apr 19 22:41:44.497030 2026] [:error] [pid 15760:tid 15788] [client 4.223.83.231:6395] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeTpqPSdD_XHQMJ_IStaCgAAAdQ"]
[Sun Apr 19 22:41:46.438984 2026] [:error] [pid 47772:tid 47797] [client 4.223.83.231:6430] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeTpqoc0L16cb4smAz_XjwAAAAg"]
[Sun Apr 19 22:41:48.095132 2026] [:error] [pid 15693:tid 15696] [client 4.223.83.231:6591] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeTprMNMD-ccazQlTsljKQAAAUA"]
[Sun Apr 19 22:41:49.614519 2026] [:error] [pid 15764:tid 15830] [client 4.223.83.231:57206] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeTprWLL_sqdSHoVp-Q2ogAAAkQ"]
[Sun Apr 19 22:41:51.434717 2026] [:error] [pid 15694:tid 15748] [client 4.223.83.231:6361] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeTpr7imB-jol1fwqAoXuwAAAZY"]
[Sun Apr 19 22:41:53.036504 2026] [:error] [pid 15763:tid 15820] [client 4.223.83.231:54531] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "aeTpsbMXv1Y1THOoxaAQhwAAAhg"]
[Sun Apr 19 22:41:53.919342 2026] [:error] [pid 47886:tid 47894] [client 4.223.83.231:59832] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "aeTpsUSe8yiyuPrD7yOEcAAAAMY"]
[Sun Apr 19 22:41:54.699721 2026] [:error] [pid 15760:tid 15768] [client 4.223.83.231:54395] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "aeTpsvSdD_XHQMJ_IStaFgAAAcA"]
[Sun Apr 19 22:41:55.540744 2026] [:error] [pid 15764:tid 15836] [client 4.223.83.231:54542] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "aeTps2LL_sqdSHoVp-Q2qgAAAko"]
[Sun Apr 19 22:41:56.285132 2026] [:error] [pid 15693:tid 15702] [client 4.223.83.231:62066] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "aeTptMNMD-ccazQlTsljLwAAAUY"]
[Sun Apr 19 22:41:57.120642 2026] [:error] [pid 15764:tid 15834] [client 4.223.83.231:6374] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "aeTptWLL_sqdSHoVp-Q2tQAAAkg"]
[Sun Apr 19 22:41:57.931695 2026] [:error] [pid 15765:tid 15852] [client 4.223.83.231:62067] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "aeTptfRqinw-W5EwQ74HHwAAAoA"]
[Sun Apr 19 22:41:58.722599 2026] [:error] [pid 47775:tid 47855] [client 4.223.83.231:61742] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "aeTptrmztjlk9tsmoewlxAAAAIw"]
[Sun Apr 19 22:41:59.471816 2026] [:error] [pid 47886:tid 47904] [client 4.223.83.231:6362] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "aeTpt0Se8yiyuPrD7yOEdwAAANA"]
[Sun Apr 19 22:42:00.415656 2026] [:error] [pid 15764:tid 15841] [client 4.223.83.231:54362] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "aeTpuGLL_sqdSHoVp-Q2wwAAAk8"]
[Sun Apr 19 22:42:01.127135 2026] [:error] [pid 15764:tid 15850] [client 4.223.83.231:49004] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "aeTpuWLL_sqdSHoVp-Q2xAAAAlc"]
[Sun Apr 19 22:42:02.040196 2026] [:error] [pid 15764:tid 15834] [client 4.223.83.231:54367] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "aeTpumLL_sqdSHoVp-Q2xwAAAkg"]
[Sun Apr 19 22:42:03.097202 2026] [:error] [pid 15760:tid 15791] [client 4.223.83.231:52204] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeTpu_SdD_XHQMJ_IStaLAAAAdc"]
[Sun Apr 19 22:42:04.091305 2026] [:error] [pid 15760:tid 15770] [client 4.223.83.231:6563] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeTpvPSdD_XHQMJ_IStaLwAAAcI"]
[Sun Apr 19 22:42:05.226996 2026] [:error] [pid 15760:tid 15776] [client 4.223.83.231:61748] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeTpvfSdD_XHQMJ_IStaMwAAAcg"]
[Sun Apr 19 22:42:06.188953 2026] [:error] [pid 15694:tid 15746] [client 4.223.83.231:57170] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeTpvrimB-jol1fwqAoXxAAAAZQ"]
[Sun Apr 19 22:42:06.990575 2026] [:error] [pid 15760:tid 15788] [client 4.223.83.231:61745] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aeTpvvSdD_XHQMJ_IStaNgAAAdQ"]
[Sun Apr 19 22:42:08.027434 2026] [:error] [pid 15760:tid 15768] [client 4.223.83.231:62021] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aeTpwPSdD_XHQMJ_IStaOQAAAcA"]
[Sun Apr 19 22:42:08.923440 2026] [:error] [pid 47775:tid 47844] [client 4.223.83.231:57153] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aeTpwLmztjlk9tsmoewlxgAAAIE"]
[Sun Apr 19 22:42:10.027477 2026] [:error] [pid 15764:tid 15841] [client 4.223.83.231:54532] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/maxro.php"] [unique_id "aeTpwmLL_sqdSHoVp-Q2ygAAAk8"]
[Sun Apr 19 22:42:11.047316 2026] [:error] [pid 15764:tid 15833] [client 4.223.83.231:61753] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "aeTpw2LL_sqdSHoVp-Q2ywAAAkc"]
[Sun Apr 19 22:42:11.794041 2026] [:error] [pid 15694:tid 15747] [client 4.223.83.231:61712] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "aeTpw7imB-jol1fwqAoXywAAAZU"]
[Sun Apr 19 22:42:12.605726 2026] [:error] [pid 15764:tid 15842] [client 4.223.83.231:6530] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "aeTpxGLL_sqdSHoVp-Q20QAAAlA"]
[Sun Apr 19 22:42:13.300939 2026] [:error] [pid 15764:tid 15837] [client 4.223.83.231:61743] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "aeTpxWLL_sqdSHoVp-Q21QAAAks"]
[Sun Apr 19 22:42:14.256293 2026] [:error] [pid 47772:tid 47810] [client 4.223.83.231:6439] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeTpxoc0L16cb4smAz_XoQAAABU"]
[Sun Apr 19 22:42:15.042996 2026] [:error] [pid 15760:tid 15779] [client 4.223.83.231:6348] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeTpx_SdD_XHQMJ_IStaQgAAAcs"]
[Sun Apr 19 22:42:15.806545 2026] [:error] [pid 47773:tid 47829] [client 4.223.83.231:54585] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeTpx-iBHdnCJDuPq9BU8gAAAE0"]
[Sun Apr 19 22:42:16.806513 2026] [:error] [pid 15760:tid 15791] [client 4.223.83.231:64099] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeTpyPSdD_XHQMJ_IStaSgAAAdc"]
[Sun Apr 19 22:42:17.667045 2026] [:error] [pid 15765:tid 15875] [client 4.223.83.231:59835] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeTpyfRqinw-W5EwQ74HJAAAApY"]
[Sun Apr 19 22:42:18.625818 2026] [:error] [pid 15693:tid 15719] [client 4.223.83.231:64117] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeTpysNMD-ccazQlTsljMQAAAVc"]
[Sun Apr 19 22:42:19.563364 2026] [:error] [pid 47775:tid 47848] [client 4.223.83.231:50604] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeTpy7mztjlk9tsmoewlyAAAAIU"]
[Sun Apr 19 22:42:20.691300 2026] [:error] [pid 15760:tid 15771] [client 4.223.83.231:57168] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeTpzPSdD_XHQMJ_IStaWQAAAcM"]
[Sun Apr 19 22:42:29.629399 2026] [:error] [pid 15764:tid 15846] [client 4.223.83.231:53555] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son1.php"] [unique_id "aeTp1WLL_sqdSHoVp-Q3BAAAAlQ"]
[Sun Apr 19 22:42:30.601743 2026] [:error] [pid 15760:tid 15791] [client 4.223.83.231:45388] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son1.php"] [unique_id "aeTp1vSdD_XHQMJ_IStaXgAAAdc"]
[Sun Apr 19 22:42:31.211319 2026] [:error] [pid 47773:tid 47839] [client 4.223.83.231:49892] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son1.php"] [unique_id "aeTp1-iBHdnCJDuPq9BU9QAAAFc"]
[Sun Apr 19 22:42:32.098147 2026] [:error] [pid 15694:tid 15746] [client 4.223.83.231:52278] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son1.php"] [unique_id "aeTp2LimB-jol1fwqAoXzgAAAZQ"]
[Sun Apr 19 22:42:32.711168 2026] [:error] [pid 47772:tid 47789] [client 4.223.83.231:49893] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aeTp2Ic0L16cb4smAz_XtAAAAAA"]
[Sun Apr 19 22:42:33.590958 2026] [:error] [pid 15763:tid 15807] [client 4.223.83.231:6809] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aeTp2bMXv1Y1THOoxaAQogAAAgs"]
[Sun Apr 19 22:42:34.349149 2026] [:error] [pid 15763:tid 15809] [client 4.223.83.231:52722] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aeTp2rMXv1Y1THOoxaAQpQAAAg0"]
[Sun Apr 19 22:42:35.763770 2026] [:error] [pid 47772:tid 47813] [client 4.223.83.231:51700] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx79.php"] [unique_id "aeTp24c0L16cb4smAz_XuwAAABg"]
[Sun Apr 19 22:42:37.152559 2026] [:error] [pid 15760:tid 15768] [client 4.223.83.231:51687] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeTp3fSdD_XHQMJ_IStaZQAAAcA"]
[Sun Apr 19 22:42:38.021422 2026] [:error] [pid 15760:tid 15776] [client 4.223.83.231:51739] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeTp3vSdD_XHQMJ_IStaaAAAAcg"]
[Sun Apr 19 22:42:39.331487 2026] [:error] [pid 15694:tid 15733] [client 4.223.83.231:49070] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeTp37imB-jol1fwqAoXzwAAAYc"]
[Sun Apr 19 22:42:39.965278 2026] [:error] [pid 15760:tid 15787] [client 4.223.83.231:51126] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeTp3_SdD_XHQMJ_IStacgAAAdM"]
[Sun Apr 19 22:42:41.500456 2026] [:error] [pid 47772:tid 47793] [client 4.223.83.231:51074] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "aeTp4Yc0L16cb4smAz_XvwAAAAQ"]
[Sun Apr 19 22:42:42.251555 2026] [:error] [pid 47772:tid 47810] [client 4.223.83.231:65451] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "aeTp4oc0L16cb4smAz_XwAAAABU"]
[Sun Apr 19 22:42:43.064162 2026] [:error] [pid 15693:tid 15706] [client 4.223.83.231:52678] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "aeTp48NMD-ccazQlTsljOgAAAUo"]
[Sun Apr 19 22:42:43.895841 2026] [:error] [pid 47772:tid 47812] [client 4.223.83.231:51659] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws84.php"] [unique_id "aeTp44c0L16cb4smAz_XwwAAABc"]
[Sun Apr 19 22:42:44.603401 2026] [:error] [pid 47773:tid 47836] [client 4.223.83.231:60376] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aeTp5OiBHdnCJDuPq9BVBAAAAFQ"]
[Sun Apr 19 22:42:46.003040 2026] [:error] [pid 47773:tid 47823] [client 4.223.83.231:49029] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aeTp5uiBHdnCJDuPq9BVBgAAAEc"]
[Sun Apr 19 22:42:46.772613 2026] [:error] [pid 47773:tid 47820] [client 4.223.83.231:51698] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aeTp5uiBHdnCJDuPq9BVCwAAAEQ"]
[Sun Apr 19 22:42:47.590945 2026] [:error] [pid 15693:tid 15705] [client 4.223.83.231:59339] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws61.php"] [unique_id "aeTp58NMD-ccazQlTsljPQAAAUk"]
[Sun Apr 19 22:42:48.470062 2026] [:error] [pid 15760:tid 15779] [client 4.223.83.231:59358] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "aeTp6PSdD_XHQMJ_IStagAAAAcs"]
[Sun Apr 19 22:42:49.174112 2026] [:error] [pid 47772:tid 47803] [client 4.223.83.231:65428] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "aeTp6Yc0L16cb4smAz_XxwAAAA4"]
[Sun Apr 19 22:42:50.027833 2026] [:error] [pid 15760:tid 15777] [client 4.223.83.231:60414] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "aeTp6vSdD_XHQMJ_IStagwAAAck"]
[Sun Apr 19 22:42:50.773055 2026] [:error] [pid 15760:tid 15784] [client 4.223.83.231:59332] [client 4.223.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-wp-image.php"] [unique_id "aeTp6vSdD_XHQMJ_IStaiAAAAdA"]
[Sun Apr 19 22:50:47.598100 2026] [:error] [pid 15764:tid 15850] [client 146.70.194.222:51628] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTrx2LL_sqdSHoVp-Q6LAAAAlc"]
[Sun Apr 19 22:50:47.607255 2026] [:error] [pid 15764:tid 15827] [client 146.70.194.222:51616] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTrx2LL_sqdSHoVp-Q6MAAAAkE"]
[Sun Apr 19 22:50:48.648099 2026] [:error] [pid 47775:tid 47847] [client 146.70.194.222:51862] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeTryLmztjlk9tsmoewndgAAAIQ"]
[Sun Apr 19 22:50:48.654623 2026] [:error] [pid 47775:tid 47844] [client 146.70.194.222:51832] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeTryLmztjlk9tsmoewndwAAAIE"]
[Sun Apr 19 22:50:49.694391 2026] [:error] [pid 15765:tid 15873] [client 146.70.194.222:52006] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeTryfRqinw-W5EwQ74IPwAAApQ"]
[Sun Apr 19 22:50:49.699340 2026] [:error] [pid 15765:tid 15855] [client 146.70.194.222:51996] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeTryfRqinw-W5EwQ74IQAAAAoI"]
[Sun Apr 19 22:50:50.751245 2026] [:error] [pid 15763:tid 15811] [client 146.70.194.222:52094] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeTryrMXv1Y1THOoxaATOQAAAg8"]
[Sun Apr 19 22:50:50.755248 2026] [:error] [pid 15763:tid 15812] [client 146.70.194.222:52100] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeTryrMXv1Y1THOoxaATOgAAAhA"]
[Mon Apr 20 00:56:26.885448 2026] [:error] [pid 15694:tid 15740] [client 170.106.152.218:53806] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeUJOrimB-jol1fwqAok7wAAAY4"]
[Mon Apr 20 08:42:40.240387 2026] [:error] [pid 64440:tid 64462] [client 101.42.46.71:40574] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeV2gNkVUvTgp8p7mrMCjwAAANM"]
[Mon Apr 20 11:03:23.116190 2026] [:error] [pid 11441:tid 11444] [client 34.30.92.68:60762] [client 34.30.92.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.92.68, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWXe8ixByFUvmh319CmUgAAAME"]
[Mon Apr 20 11:03:23.122649 2026] [:error] [pid 11350:tid 11373] [client 34.30.92.68:55681] [client 34.30.92.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.92.68, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWXe_4EoMBgOJuJnT0NJwAAAA4"]
[Mon Apr 20 11:03:23.338376 2026] [:error] [pid 11441:tid 11453] [client 34.30.92.68:60762] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeWXe8ixByFUvmh319CmVQAAAMo"]
[Mon Apr 20 11:03:23.344497 2026] [:error] [pid 11350:tid 11383] [client 34.30.92.68:55681] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeWXe_4EoMBgOJuJnT0NKAAAABg"]
[Mon Apr 20 11:03:24.152288 2026] [:error] [pid 11351:tid 11401] [client 34.30.92.68:62614] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfAN8Z1-vktaI_tNeYAAAAE4"]
[Mon Apr 20 11:03:24.170524 2026] [:error] [pid 11350:tid 11382] [client 34.30.92.68:55723] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfP4EoMBgOJuJnT0NLwAAABc"]
[Mon Apr 20 11:03:24.986526 2026] [:error] [pid 11351:tid 11403] [client 34.30.92.68:63767] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfAN8Z1-vktaI_tNeYgAAAFA"]
[Mon Apr 20 11:03:25.026514 2026] [:error] [pid 11351:tid 11387] [client 34.30.92.68:61257] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfQN8Z1-vktaI_tNeYwAAAEA"]
[Mon Apr 20 11:03:25.786703 2026] [:error] [pid 11441:tid 11463] [client 34.30.92.68:62712] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfcixByFUvmh319CmXAAAANQ"]
[Mon Apr 20 11:03:25.845611 2026] [:error] [pid 11351:tid 11411] [client 34.30.92.68:58120] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfQN8Z1-vktaI_tNeZQAAAFg"]
[Mon Apr 20 11:03:26.622084 2026] [:error] [pid 11350:tid 11373] [client 34.30.92.68:58419] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfv4EoMBgOJuJnT0NOQAAAA4"]
[Mon Apr 20 11:03:26.670789 2026] [:error] [pid 11352:tid 11426] [client 34.30.92.68:58185] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfml10mhMSfJ7ir8-GwAAAIw"]
[Mon Apr 20 11:03:27.430678 2026] [:error] [pid 11352:tid 11415] [client 34.30.92.68:51802] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeWXf2l10mhMSfJ7ir8-IgAAAIE"]
[Mon Apr 20 11:03:27.472995 2026] [:error] [pid 11350:tid 11383] [client 34.30.92.68:54101] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeWXf_4EoMBgOJuJnT0NOwAAABg"]
[Mon Apr 20 11:03:28.258921 2026] [:error] [pid 11350:tid 11381] [client 34.30.92.68:50644] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeWXgP4EoMBgOJuJnT0NQQAAABY"]
[Mon Apr 20 11:03:28.356732 2026] [:error] [pid 11350:tid 11365] [client 34.30.92.68:61952] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeWXgP4EoMBgOJuJnT0NQgAAAAY"]
[Mon Apr 20 11:03:29.066204 2026] [:error] [pid 11441:tid 11463] [client 34.30.92.68:58688] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aeWXgcixByFUvmh319CmYgAAANQ"]
[Mon Apr 20 11:03:29.160762 2026] [:error] [pid 11441:tid 11454] [client 34.30.92.68:55313] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aeWXgcixByFUvmh319CmYwAAAMs"]
[Mon Apr 20 11:33:17.843677 2026] [:error] [pid 11350:tid 11359] [client 223.185.130.125:3992] [client 223.185.130.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.130.125, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWeff4EoMBgOJuJnT0UhAAAAAA"]
[Mon Apr 20 13:35:34.982578 2026] [:error] [pid 11350:tid 11373] [client 103.65.237.216:56247] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sftp-config.json"] [unique_id "aeW7Jv4EoMBgOJuJnT0uAAAAAA4"]
[Mon Apr 20 13:35:37.744160 2026] [:error] [pid 11351:tid 11396] [client 103.65.237.216:56808] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aeW7KQN8Z1-vktaI_tOGPwAAAEk"]
[Mon Apr 20 14:12:33.256204 2026] [:error] [pid 11350:tid 11378] [client 43.159.132.207:51840] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeXD0f4EoMBgOJuJnT00gAAAABM"]
[Mon Apr 20 14:42:05.084846 2026] [:error] [pid 11350:tid 11372] [client 89.251.0.41:43265] [client 89.251.0.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeXKvf4EoMBgOJuJnT045AAAAA0"]
[Mon Apr 20 14:42:07.029817 2026] [:error] [pid 42014:tid 42035] [client 89.251.0.43:51775] [client 89.251.0.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeXKv8ek-00-ZI0f1NoR3AAAARM"]
[Mon Apr 20 14:42:09.874012 2026] [:error] [pid 11352:tid 11415] [client 89.251.0.44:56253] [client 89.251.0.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeXKwWl10mhMSfJ7ir-GWAAAAIE"]
[Mon Apr 20 14:42:11.708836 2026] [:error] [pid 11441:tid 11455] [client 89.251.0.71:49059] [client 89.251.0.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeXKw8ixByFUvmh319ARXQAAAMw"]
[Mon Apr 20 14:42:14.712404 2026] [:error] [pid 11441:tid 11465] [client 89.251.0.41:47183] [client 89.251.0.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeXKxsixByFUvmh319ARagAAANY"]
[Mon Apr 20 14:42:50.418075 2026] [autoindex:error] [pid 11441:tid 11443] [client 89.251.0.74:22833] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Mon Apr 20 18:11:44.788319 2026] [:error] [pid 42014:tid 42021] [client 129.226.93.214:35096] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeX74Mek-00-ZI0f1NphagAAAQU"]
[Mon Apr 20 21:03:14.105881 2026] [:error] [pid 11441:tid 11446] [client 223.15.245.170:52826] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeYkEsixByFUvmh319Cf5QAAAMM"]
[Tue Apr 21 00:22:59.685748 2026] [:error] [pid 11494:tid 11512] [client 43.157.62.101:32782] [client 43.157.62.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeZS48gko5iFiE8YoyQeGAAAAZA"]
[Tue Apr 21 03:14:55.922811 2026] [:error] [pid 11494:tid 11508] [client 72.146.19.182:14225] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ7L8gko5iFiE8YoyRiKQAAAYw"]
[Tue Apr 21 03:14:56.474910 2026] [:error] [pid 6928:tid 6934] [client 72.146.19.182:55053] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ7MB3y7MHq1iB0qYoE4AAAAUQ"]
[Tue Apr 21 03:14:57.011765 2026] [:error] [pid 11351:tid 11390] [client 72.146.19.182:50534] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ7MQN8Z1-vktaI_tPbcwAAAEM"]
[Tue Apr 21 03:14:57.530342 2026] [:error] [pid 11351:tid 11387] [client 72.146.19.182:55043] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aeZ7MQN8Z1-vktaI_tPbdQAAAEA"]
[Tue Apr 21 03:14:58.076762 2026] [:error] [pid 11350:tid 11368] [client 72.146.19.182:50558] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ7Mv4EoMBgOJuJnT1cxAAAAAk"]
[Tue Apr 21 03:14:58.617932 2026] [:error] [pid 42014:tid 42031] [client 72.146.19.182:29776] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ7Msek-00-ZI0f1NrExQAAAQ8"]
[Tue Apr 21 03:14:59.137285 2026] [:error] [pid 6928:tid 6941] [client 72.146.19.182:55125] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ7Mx3y7MHq1iB0qYoE4gAAAUs"]
[Tue Apr 21 03:14:59.659507 2026] [:error] [pid 11494:tid 11514] [client 72.146.19.182:2047] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZ7M8gko5iFiE8YoyRiLAAAAZI"]
[Tue Apr 21 03:15:00.204462 2026] [:error] [pid 11441:tid 11445] [client 72.146.19.182:1996] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ7NMixByFUvmh319AA0QAAAMI"]
[Tue Apr 21 03:15:00.719217 2026] [:error] [pid 11350:tid 11375] [client 72.146.19.182:55112] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ7NP4EoMBgOJuJnT1cyAAAABA"]
[Tue Apr 21 03:15:01.246839 2026] [:error] [pid 11350:tid 11373] [client 72.146.19.182:21038] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ7Nf4EoMBgOJuJnT1cyQAAAA4"]
[Tue Apr 21 03:15:01.763430 2026] [:error] [pid 11494:tid 11506] [client 72.146.19.182:29762] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZ7Ncgko5iFiE8YoyRiOAAAAYo"]
[Tue Apr 21 03:15:02.327748 2026] [:error] [pid 11494:tid 11512] [client 72.146.19.182:19164] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ7Nsgko5iFiE8YoyRiOQAAAZA"]
[Tue Apr 21 03:15:02.817941 2026] [:error] [pid 11350:tid 11376] [client 72.146.19.182:14606] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ7Nv4EoMBgOJuJnT1czgAAABE"]
[Tue Apr 21 03:15:03.344434 2026] [:error] [pid 11351:tid 11403] [client 72.146.19.182:14645] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ7NwN8Z1-vktaI_tPbiwAAAFA"]
[Tue Apr 21 03:15:03.934578 2026] [:error] [pid 11441:tid 11463] [client 72.146.19.182:2016] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZ7N8ixByFUvmh319AA1QAAANQ"]
[Tue Apr 21 03:15:04.484376 2026] [:error] [pid 42014:tid 42038] [client 72.146.19.182:55130] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "aeZ7OMek-00-ZI0f1NrEyQAAARY"]
[Tue Apr 21 03:15:05.018552 2026] [:error] [pid 42014:tid 42039] [client 72.146.19.182:50510] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "aeZ7Ocek-00-ZI0f1NrEywAAARc"]
[Tue Apr 21 03:15:05.515387 2026] [:error] [pid 11494:tid 11520] [client 72.146.19.182:14632] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "aeZ7Ocgko5iFiE8YoyRiPgAAAZg"]
[Tue Apr 21 03:15:06.092602 2026] [:error] [pid 42014:tid 42036] [client 72.146.19.182:19179] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "aeZ7Osek-00-ZI0f1NrEzAAAARQ"]
[Tue Apr 21 03:15:06.688314 2026] [:error] [pid 11351:tid 11399] [client 72.146.19.182:19136] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "aeZ7OgN8Z1-vktaI_tPbmgAAAEw"]
[Tue Apr 21 03:15:07.358896 2026] [:error] [pid 42014:tid 42025] [client 72.146.19.182:29772] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "aeZ7O8ek-00-ZI0f1NrEzgAAAQk"]
[Tue Apr 21 03:15:07.890661 2026] [:error] [pid 11350:tid 11360] [client 72.146.19.182:55098] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "aeZ7O_4EoMBgOJuJnT1c4wAAAAE"]
[Tue Apr 21 03:15:08.371400 2026] [:error] [pid 11494:tid 11514] [client 72.146.19.182:55040] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "aeZ7PMgko5iFiE8YoyRiQgAAAZI"]
[Tue Apr 21 03:15:08.983035 2026] [:error] [pid 11350:tid 11373] [client 72.146.19.182:50544] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeZ7PP4EoMBgOJuJnT1c6AAAAA4"]
[Tue Apr 21 03:15:09.578943 2026] [:error] [pid 11494:tid 11515] [client 72.146.19.182:2024] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeZ7Pcgko5iFiE8YoyRiRAAAAZM"]
[Tue Apr 21 03:15:10.050028 2026] [:error] [pid 6928:tid 6937] [client 72.146.19.182:55841] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeZ7Ph3y7MHq1iB0qYoE9AAAAUc"]
[Tue Apr 21 03:15:10.546634 2026] [:error] [pid 11351:tid 11390] [client 72.146.19.182:50544] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xozx.php"] [unique_id "aeZ7PgN8Z1-vktaI_tPboQAAAEM"]
[Tue Apr 21 03:15:11.072342 2026] [:error] [pid 11351:tid 11388] [client 72.146.19.182:50529] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ7PwN8Z1-vktaI_tPbogAAAEE"]
[Tue Apr 21 03:15:11.562517 2026] [:error] [pid 11350:tid 11377] [client 72.146.19.182:19162] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ7P_4EoMBgOJuJnT1c6wAAABI"]
[Tue Apr 21 03:15:12.052574 2026] [:error] [pid 11350:tid 11379] [client 72.146.19.182:55115] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ7QP4EoMBgOJuJnT1c7AAAABQ"]
[Tue Apr 21 03:15:12.631686 2026] [:error] [pid 11441:tid 11456] [client 72.146.19.182:27821] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZ7QMixByFUvmh319AA3QAAAM0"]
[Tue Apr 21 03:15:13.143979 2026] [:error] [pid 11494:tid 11504] [client 72.146.19.182:55852] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "aeZ7Qcgko5iFiE8YoyRiRgAAAYg"]
[Tue Apr 21 03:15:13.654749 2026] [:error] [pid 6928:tid 6949] [client 72.146.19.182:50516] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "aeZ7QR3y7MHq1iB0qYoE-gAAAVM"]
[Tue Apr 21 03:15:14.152673 2026] [:error] [pid 42014:tid 42035] [client 72.146.19.182:55820] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "aeZ7Qsek-00-ZI0f1NrE0QAAARM"]
[Tue Apr 21 03:15:14.727126 2026] [:error] [pid 11351:tid 11402] [client 72.146.19.182:29784] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "aeZ7QgN8Z1-vktaI_tPbpwAAAE8"]
[Tue Apr 21 03:15:15.242294 2026] [:error] [pid 11351:tid 11393] [client 72.146.19.182:14612] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ref.php"] [unique_id "aeZ7QwN8Z1-vktaI_tPbqgAAAEY"]
[Tue Apr 21 03:15:15.850169 2026] [:error] [pid 11441:tid 11450] [client 72.146.19.182:14265] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ref.php"] [unique_id "aeZ7Q8ixByFUvmh319AA4wAAAMc"]
[Tue Apr 21 03:15:16.577393 2026] [:error] [pid 42014:tid 42019] [client 72.146.19.182:50557] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ref.php"] [unique_id "aeZ7RMek-00-ZI0f1NrE1AAAAQM"]
[Tue Apr 21 03:15:17.158850 2026] [:error] [pid 11494:tid 11519] [client 72.146.19.182:27817] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ref.php"] [unique_id "aeZ7Rcgko5iFiE8YoyRiSgAAAZc"]
[Tue Apr 21 03:15:17.699204 2026] [:error] [pid 11494:tid 11512] [client 72.146.19.182:2042] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ7Rcgko5iFiE8YoyRiSwAAAZA"]
[Tue Apr 21 03:15:18.455900 2026] [:error] [pid 42014:tid 42027] [client 72.146.19.182:14226] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ7Rsek-00-ZI0f1NrE1gAAAQs"]
[Tue Apr 21 03:15:19.093811 2026] [:error] [pid 11351:tid 11406] [client 72.146.19.182:29804] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ7RwN8Z1-vktaI_tPbrQAAAFM"]
[Tue Apr 21 03:15:19.642640 2026] [:error] [pid 11351:tid 11389] [client 72.146.19.182:50554] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "aeZ7RwN8Z1-vktaI_tPbrwAAAEI"]
[Tue Apr 21 03:15:20.218195 2026] [:error] [pid 11351:tid 11387] [client 72.146.19.182:14229] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "aeZ7SAN8Z1-vktaI_tPbsQAAAEA"]
[Tue Apr 21 03:15:20.843269 2026] [:error] [pid 11351:tid 11396] [client 72.146.19.182:29823] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "aeZ7SAN8Z1-vktaI_tPbtgAAAEk"]
[Tue Apr 21 03:15:21.404266 2026] [:error] [pid 11351:tid 11388] [client 72.146.19.182:55846] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "aeZ7SQN8Z1-vktaI_tPbuwAAAEE"]
[Tue Apr 21 03:15:22.016754 2026] [:error] [pid 11351:tid 11389] [client 72.146.19.182:29791] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "aeZ7SgN8Z1-vktaI_tPbvgAAAEI"]
[Tue Apr 21 03:15:22.576003 2026] [:error] [pid 11351:tid 11391] [client 72.146.19.182:29798] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "aeZ7SgN8Z1-vktaI_tPbwQAAAEQ"]
[Tue Apr 21 03:15:23.055512 2026] [:error] [pid 11351:tid 11392] [client 72.146.19.182:2027] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "aeZ7SwN8Z1-vktaI_tPbwwAAAEU"]
[Tue Apr 21 03:15:23.627592 2026] [:error] [pid 11441:tid 11453] [client 72.146.19.182:55126] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "aeZ7S8ixByFUvmh319AA5QAAAMo"]
[Tue Apr 21 03:15:24.110125 2026] [:error] [pid 11351:tid 11390] [client 72.146.19.182:14260] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "aeZ7TAN8Z1-vktaI_tPbyAAAAEM"]
[Tue Apr 21 03:15:24.754860 2026] [:error] [pid 11351:tid 11407] [client 72.146.19.182:1468] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeZ7TAN8Z1-vktaI_tPbygAAAFQ"]
[Tue Apr 21 03:15:25.248698 2026] [:error] [pid 11350:tid 11362] [client 72.146.19.182:29796] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeZ7Tf4EoMBgOJuJnT1c-gAAAAM"]
[Tue Apr 21 03:15:25.824412 2026] [:error] [pid 11350:tid 11372] [client 72.146.19.182:55118] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeZ7Tf4EoMBgOJuJnT1c_QAAAA0"]
[Tue Apr 21 03:15:26.390549 2026] [:error] [pid 11351:tid 11401] [client 72.146.19.182:14210] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeZ7TgN8Z1-vktaI_tPbzAAAAE4"]
[Tue Apr 21 03:15:26.908912 2026] [:error] [pid 11351:tid 11387] [client 72.146.19.182:29808] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Xx.php"] [unique_id "aeZ7TgN8Z1-vktaI_tPb0QAAAEA"]
[Tue Apr 21 03:15:27.407552 2026] [:error] [pid 11351:tid 11404] [client 72.146.19.182:1466] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Xx.php"] [unique_id "aeZ7TwN8Z1-vktaI_tPb1AAAAFE"]
[Tue Apr 21 03:15:27.930376 2026] [:error] [pid 11351:tid 11391] [client 72.146.19.182:29808] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Xx.php"] [unique_id "aeZ7TwN8Z1-vktaI_tPb2AAAAEQ"]
[Tue Apr 21 03:15:28.404039 2026] [:error] [pid 11351:tid 11401] [client 72.146.19.182:29795] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Xx.php"] [unique_id "aeZ7UAN8Z1-vktaI_tPb3QAAAE4"]
[Tue Apr 21 03:15:29.286665 2026] [:error] [pid 11351:tid 11407] [client 72.146.19.182:1451] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aeZ7UQN8Z1-vktaI_tPb3wAAAFQ"]
[Tue Apr 21 03:15:29.832095 2026] [:error] [pid 42014:tid 42016] [client 72.146.19.182:1418] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aeZ7Ucek-00-ZI0f1NrE2AAAAQA"]
[Tue Apr 21 03:15:30.338092 2026] [:error] [pid 42014:tid 42029] [client 72.146.19.182:14623] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aeZ7Usek-00-ZI0f1NrE2gAAAQ0"]
[Tue Apr 21 03:15:30.995900 2026] [:error] [pid 11494:tid 11520] [client 72.146.19.182:14266] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aeZ7Usgko5iFiE8YoyRiVgAAAZg"]
[Tue Apr 21 03:15:31.549507 2026] [:error] [pid 11351:tid 11404] [client 72.146.19.182:16503] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aeZ7UwN8Z1-vktaI_tPb6gAAAFE"]
[Tue Apr 21 03:15:32.047303 2026] [:error] [pid 6928:tid 6935] [client 72.146.19.182:14256] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aeZ7VB3y7MHq1iB0qYoFBAAAAUU"]
[Tue Apr 21 03:15:32.666316 2026] [:error] [pid 11350:tid 11359] [client 72.146.19.182:14646] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aeZ7VP4EoMBgOJuJnT1dAgAAAAA"]
[Tue Apr 21 03:15:33.254131 2026] [:error] [pid 11494:tid 11501] [client 72.146.19.182:27827] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aeZ7Vcgko5iFiE8YoyRiWQAAAYU"]
[Tue Apr 21 03:15:33.818380 2026] [:error] [pid 11441:tid 11460] [client 72.146.19.182:27199] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZ7VcixByFUvmh319AA5wAAANE"]
[Tue Apr 21 03:15:34.393975 2026] [:error] [pid 42014:tid 42040] [client 72.146.19.182:14595] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZ7Vsek-00-ZI0f1NrE3QAAARg"]
[Tue Apr 21 03:15:34.979459 2026] [:error] [pid 42014:tid 42023] [client 72.146.19.182:27193] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZ7Vsek-00-ZI0f1NrE3gAAAQc"]
[Tue Apr 21 03:15:35.557363 2026] [:error] [pid 11441:tid 11449] [client 72.146.19.182:1356] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZ7V8ixByFUvmh319AA6wAAAMY"]
[Tue Apr 21 03:15:36.341913 2026] [:error] [pid 11352:tid 11434] [client 72.146.19.182:50531] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeZ7WGl10mhMSfJ7ir8WOgAAAJQ"]
[Tue Apr 21 03:15:37.001466 2026] [:error] [pid 11441:tid 11445] [client 72.146.19.182:17581] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeZ7WcixByFUvmh319AA7QAAAMI"]
[Tue Apr 21 03:15:37.642974 2026] [:error] [pid 11441:tid 11446] [client 72.146.19.182:19176] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeZ7WcixByFUvmh319AA7gAAAMM"]
[Tue Apr 21 03:15:38.304017 2026] [:error] [pid 11352:tid 11438] [client 72.146.19.182:29778] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeZ7Wml10mhMSfJ7ir8WPAAAAJg"]
[Tue Apr 21 03:15:38.875960 2026] [:error] [pid 11494:tid 11498] [client 72.146.19.182:14232] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aeZ7Wsgko5iFiE8YoyRibQAAAYI"]
[Tue Apr 21 03:15:39.472791 2026] [:error] [pid 11350:tid 11373] [client 72.146.19.182:1345] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aeZ7W_4EoMBgOJuJnT1dCQAAAA4"]
[Tue Apr 21 03:15:40.364252 2026] [:error] [pid 11441:tid 11454] [client 72.146.19.182:14230] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aeZ7XMixByFUvmh319AA8gAAAMs"]
[Tue Apr 21 03:15:40.864297 2026] [:error] [pid 11350:tid 11371] [client 72.146.19.182:27176] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aeZ7XP4EoMBgOJuJnT1dDwAAAAw"]
[Tue Apr 21 03:15:41.724613 2026] [:error] [pid 11441:tid 11461] [client 72.146.19.182:1380] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aeZ7XcixByFUvmh319AA9AAAANI"]
[Tue Apr 21 03:15:42.250937 2026] [:error] [pid 11352:tid 11416] [client 72.146.19.182:1407] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aeZ7Xml10mhMSfJ7ir8WPwAAAII"]
[Tue Apr 21 03:15:42.760814 2026] [:error] [pid 11352:tid 11436] [client 72.146.19.182:16479] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aeZ7Xml10mhMSfJ7ir8WQgAAAJY"]
[Tue Apr 21 03:15:43.257338 2026] [:error] [pid 11350:tid 11359] [client 72.146.19.182:1401] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aeZ7X_4EoMBgOJuJnT1dEQAAAAA"]
[Tue Apr 21 03:15:43.775689 2026] [:error] [pid 11351:tid 11391] [client 72.146.19.182:14602] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/puc.php"] [unique_id "aeZ7XwN8Z1-vktaI_tPb8wAAAEQ"]
[Tue Apr 21 03:15:44.256072 2026] [:error] [pid 11350:tid 11377] [client 72.146.19.182:16505] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/puc.php"] [unique_id "aeZ7YP4EoMBgOJuJnT1dFQAAABI"]
[Tue Apr 21 03:15:44.781291 2026] [:error] [pid 11350:tid 11382] [client 72.146.19.182:31782] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/puc.php"] [unique_id "aeZ7YP4EoMBgOJuJnT1dFgAAABc"]
[Tue Apr 21 03:15:45.304401 2026] [:error] [pid 11350:tid 11367] [client 72.146.19.182:14240] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/puc.php"] [unique_id "aeZ7Yf4EoMBgOJuJnT1dGAAAAAg"]
[Tue Apr 21 03:15:46.024599 2026] [:error] [pid 11350:tid 11364] [client 72.146.19.182:17556] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeZ7Yv4EoMBgOJuJnT1dGQAAAAU"]
[Tue Apr 21 03:15:46.571768 2026] [:error] [pid 11351:tid 11410] [client 72.146.19.182:16002] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeZ7YgN8Z1-vktaI_tPb_wAAAFc"]
[Tue Apr 21 03:15:47.154208 2026] [:error] [pid 11351:tid 11401] [client 72.146.19.182:16448] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeZ7YwN8Z1-vktaI_tPcAQAAAE4"]
[Tue Apr 21 03:15:47.673186 2026] [:error] [pid 11351:tid 11399] [client 72.146.19.182:17595] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeZ7YwN8Z1-vktaI_tPcBQAAAEw"]
[Tue Apr 21 03:15:48.207392 2026] [:error] [pid 6928:tid 6938] [client 72.146.19.182:16020] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "aeZ7ZB3y7MHq1iB0qYoFCgAAAUg"]
[Tue Apr 21 03:15:48.898155 2026] [:error] [pid 42014:tid 42027] [client 72.146.19.182:16010] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "aeZ7ZMek-00-ZI0f1NrE6QAAAQs"]
[Tue Apr 21 03:15:49.636706 2026] [:error] [pid 11350:tid 11378] [client 72.146.19.182:16473] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "aeZ7Zf4EoMBgOJuJnT1dHAAAABM"]
[Tue Apr 21 03:15:50.213880 2026] [:error] [pid 11350:tid 11372] [client 72.146.19.182:16036] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "aeZ7Zv4EoMBgOJuJnT1dHQAAAA0"]
[Tue Apr 21 03:15:50.765729 2026] [:error] [pid 11351:tid 11390] [client 72.146.19.182:1420] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aeZ7ZgN8Z1-vktaI_tPcEAAAAEM"]
[Tue Apr 21 03:15:51.283197 2026] [:error] [pid 6928:tid 6945] [client 72.146.19.182:17573] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aeZ7Zx3y7MHq1iB0qYoFCwAAAU8"]
[Tue Apr 21 03:15:51.877301 2026] [:error] [pid 42014:tid 42038] [client 72.146.19.182:1353] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aeZ7Z8ek-00-ZI0f1NrE6wAAARY"]
[Tue Apr 21 03:15:52.405287 2026] [:error] [pid 11441:tid 11456] [client 72.146.19.182:1352] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aeZ7aMixByFUvmh319AA-QAAAM0"]
[Tue Apr 21 03:15:52.919563 2026] [:error] [pid 11351:tid 11400] [client 72.146.19.182:15232] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeZ7aAN8Z1-vktaI_tPcEwAAAE0"]
[Tue Apr 21 03:15:53.469533 2026] [:error] [pid 11351:tid 11411] [client 72.146.19.182:1125] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aeZ7aQN8Z1-vktaI_tPcFwAAAFg"]
[Tue Apr 21 03:16:00.542887 2026] [:error] [pid 11350:tid 11370] [client 72.146.19.182:27865] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeZ7cP4EoMBgOJuJnT1dOgAAAAs"]
[Tue Apr 21 03:16:01.029313 2026] [:error] [pid 42014:tid 42028] [client 72.146.19.182:1105] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeZ7ccek-00-ZI0f1NrE7QAAAQw"]
[Tue Apr 21 03:16:01.622005 2026] [:error] [pid 6928:tid 6947] [client 72.146.19.182:15725] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeZ7cR3y7MHq1iB0qYoFDgAAAVE"]
[Tue Apr 21 03:16:02.167174 2026] [:error] [pid 11351:tid 11388] [client 72.146.19.182:25673] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aeZ7cgN8Z1-vktaI_tPcNAAAAEE"]
[Tue Apr 21 03:16:02.843734 2026] [:error] [pid 42014:tid 42016] [client 72.146.19.182:18578] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeZ7csek-00-ZI0f1NrE7gAAAQA"]
[Tue Apr 21 03:16:03.456635 2026] [:error] [pid 11351:tid 11405] [client 72.146.19.182:18109] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeZ7cwN8Z1-vktaI_tPcOgAAAFI"]
[Tue Apr 21 03:16:04.135463 2026] [:error] [pid 11494:tid 11509] [client 72.146.19.182:16433] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeZ7dMgko5iFiE8YoyRijwAAAY0"]
[Tue Apr 21 03:16:04.986391 2026] [:error] [pid 42014:tid 42031] [client 72.146.19.182:16446] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aeZ7dMek-00-ZI0f1NrE8wAAAQ8"]
[Tue Apr 21 03:16:05.604531 2026] [:error] [pid 6928:tid 6934] [client 72.146.19.182:23675] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeZ7dR3y7MHq1iB0qYoFEgAAAUQ"]
[Tue Apr 21 03:16:06.203445 2026] [:error] [pid 6928:tid 6941] [client 72.146.19.182:27211] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeZ7dh3y7MHq1iB0qYoFFAAAAUs"]
[Tue Apr 21 03:16:06.971839 2026] [:error] [pid 11351:tid 11400] [client 72.146.19.182:27235] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeZ7dgN8Z1-vktaI_tPcQgAAAE0"]
[Tue Apr 21 03:16:07.634653 2026] [:error] [pid 11351:tid 11407] [client 72.146.19.182:27244] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeZ7dwN8Z1-vktaI_tPcSAAAAFQ"]
[Tue Apr 21 03:16:08.389683 2026] [:error] [pid 11351:tid 11406] [client 72.146.19.182:23663] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeZ7eAN8Z1-vktaI_tPcSwAAAFM"]
[Tue Apr 21 03:16:09.090843 2026] [:error] [pid 11350:tid 11363] [client 72.146.19.182:43727] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeZ7ef4EoMBgOJuJnT1dQAAAAAQ"]
[Tue Apr 21 03:16:09.612523 2026] [:error] [pid 11352:tid 11436] [client 72.146.19.182:23656] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeZ7eWl10mhMSfJ7ir8WTAAAAJY"]
[Tue Apr 21 03:16:10.168250 2026] [:error] [pid 11352:tid 11432] [client 72.146.19.182:23633] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeZ7eml10mhMSfJ7ir8WTQAAAJI"]
[Tue Apr 21 03:16:10.951930 2026] [:error] [pid 6928:tid 6950] [client 72.146.19.182:23121] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeZ7eh3y7MHq1iB0qYoFGwAAAVQ"]
[Tue Apr 21 03:16:11.485975 2026] [:error] [pid 11351:tid 11399] [client 72.146.19.182:18094] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeZ7ewN8Z1-vktaI_tPcUgAAAEw"]
[Tue Apr 21 03:16:12.071717 2026] [:error] [pid 11494:tid 11503] [client 72.146.19.182:26648] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeZ7fMgko5iFiE8YoyRimgAAAYc"]
[Tue Apr 21 03:16:12.670762 2026] [:error] [pid 11494:tid 11515] [client 72.146.19.182:27238] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeZ7fMgko5iFiE8YoyRimwAAAZM"]
[Tue Apr 21 03:16:13.534162 2026] [:error] [pid 42014:tid 42018] [client 72.146.19.182:32490] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeZ7fcek-00-ZI0f1NrE9gAAAQI"]
[Tue Apr 21 03:16:14.359090 2026] [:error] [pid 11441:tid 11460] [client 72.146.19.182:32477] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeZ7fsixByFUvmh319ABBQAAANE"]
[Tue Apr 21 03:16:15.168956 2026] [:error] [pid 11351:tid 11410] [client 72.146.19.182:23053] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeZ7fwN8Z1-vktaI_tPcXgAAAFc"]
[Tue Apr 21 03:16:15.860177 2026] [:error] [pid 11351:tid 11389] [client 72.146.19.182:32497] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2.php"] [unique_id "aeZ7fwN8Z1-vktaI_tPcYwAAAEI"]
[Tue Apr 21 03:16:16.529807 2026] [:error] [pid 42014:tid 42021] [client 72.146.19.182:13509] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeZ7gMek-00-ZI0f1NrE-AAAAQU"]
[Tue Apr 21 03:16:17.165602 2026] [:error] [pid 11352:tid 11417] [client 72.146.19.182:23077] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeZ7gWl10mhMSfJ7ir8WUAAAAIM"]
[Tue Apr 21 03:16:17.744513 2026] [:error] [pid 11352:tid 11428] [client 72.146.19.182:25656] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeZ7gWl10mhMSfJ7ir8WUQAAAI4"]
[Tue Apr 21 03:16:18.274200 2026] [:error] [pid 6928:tid 6947] [client 72.146.19.182:13553] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/3.php"] [unique_id "aeZ7gh3y7MHq1iB0qYoFKQAAAVE"]
[Tue Apr 21 03:16:18.974507 2026] [:error] [pid 11350:tid 11370] [client 72.146.19.182:13505] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeZ7gv4EoMBgOJuJnT1dSwAAAAs"]
[Tue Apr 21 03:16:19.643374 2026] [:error] [pid 11352:tid 11423] [client 72.146.19.182:1945] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeZ7g2l10mhMSfJ7ir8WUgAAAIk"]
[Tue Apr 21 03:16:20.207978 2026] [:error] [pid 11494:tid 11508] [client 72.146.19.182:23099] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeZ7hMgko5iFiE8YoyRinwAAAYw"]
[Tue Apr 21 03:16:20.817367 2026] [:error] [pid 11494:tid 11504] [client 72.146.19.182:13510] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/4.php"] [unique_id "aeZ7hMgko5iFiE8YoyRioAAAAYg"]
[Tue Apr 21 03:16:21.389989 2026] [:error] [pid 11494:tid 11514] [client 72.146.19.182:25612] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeZ7hcgko5iFiE8YoyRioQAAAZI"]
[Tue Apr 21 03:16:21.935560 2026] [:error] [pid 11494:tid 11499] [client 72.146.19.182:1943] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeZ7hcgko5iFiE8YoyRipAAAAYM"]
[Tue Apr 21 03:16:22.496918 2026] [:error] [pid 11494:tid 11518] [client 72.146.19.182:29155] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeZ7hsgko5iFiE8YoyRiqAAAAZY"]
[Tue Apr 21 03:16:23.174348 2026] [:error] [pid 11351:tid 11409] [client 72.146.19.182:1883] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/5.php"] [unique_id "aeZ7hwN8Z1-vktaI_tPcbwAAAFY"]
[Tue Apr 21 03:16:23.715088 2026] [:error] [pid 11441:tid 11462] [client 72.146.19.182:25628] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeZ7h8ixByFUvmh319ABCAAAANM"]
[Tue Apr 21 03:16:24.275958 2026] [:error] [pid 11494:tid 11498] [client 72.146.19.182:1860] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeZ7iMgko5iFiE8YoyRiqwAAAYI"]
[Tue Apr 21 03:16:24.850382 2026] [:error] [pid 11494:tid 11506] [client 72.146.19.182:29159] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeZ7iMgko5iFiE8YoyRirgAAAYo"]
[Tue Apr 21 03:16:25.386485 2026] [:error] [pid 11494:tid 11504] [client 72.146.19.182:23088] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/6.php"] [unique_id "aeZ7icgko5iFiE8YoyRisQAAAYg"]
[Tue Apr 21 03:16:25.968291 2026] [:error] [pid 11351:tid 11390] [client 72.146.19.182:25601] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeZ7iQN8Z1-vktaI_tPcfAAAAEM"]
[Tue Apr 21 03:16:26.456526 2026] [:error] [pid 11351:tid 11403] [client 72.146.19.182:51007] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeZ7igN8Z1-vktaI_tPcfgAAAFA"]
[Tue Apr 21 03:16:27.330570 2026] [:error] [pid 11350:tid 11366] [client 72.146.19.182:26679] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeZ7i_4EoMBgOJuJnT1dWgAAAAc"]
[Tue Apr 21 03:16:27.881714 2026] [:error] [pid 11441:tid 11467] [client 72.146.19.182:1517] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/9.php"] [unique_id "aeZ7i8ixByFUvmh319ABDAAAANg"]
[Tue Apr 21 03:16:28.478129 2026] [:error] [pid 11350:tid 11381] [client 72.146.19.182:26654] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeZ7jP4EoMBgOJuJnT1dXQAAABY"]
[Tue Apr 21 03:16:29.243713 2026] [:error] [pid 11352:tid 11438] [client 72.146.19.182:26636] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeZ7jWl10mhMSfJ7ir8WVAAAAJg"]
[Tue Apr 21 03:16:29.931818 2026] [:error] [pid 11441:tid 11443] [client 72.146.19.182:26635] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeZ7jcixByFUvmh319ABEQAAAMA"]
[Tue Apr 21 03:16:30.527537 2026] [:error] [pid 11350:tid 11375] [client 72.146.19.182:43761] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/10.php"] [unique_id "aeZ7jv4EoMBgOJuJnT1dYAAAABA"]
[Tue Apr 21 03:16:31.027001 2026] [:error] [pid 11352:tid 11418] [client 72.146.19.182:32395] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeZ7j2l10mhMSfJ7ir8WWAAAAIQ"]
[Tue Apr 21 03:16:31.626439 2026] [:error] [pid 11441:tid 11447] [client 72.146.19.182:32406] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeZ7j8ixByFUvmh319ABEgAAAMQ"]
[Tue Apr 21 03:16:32.228833 2026] [:error] [pid 6928:tid 6946] [client 72.146.19.182:1518] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeZ7kB3y7MHq1iB0qYoFMAAAAVA"]
[Tue Apr 21 03:16:32.776654 2026] [:error] [pid 11351:tid 11387] [client 72.146.19.182:50947] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/100.php"] [unique_id "aeZ7kAN8Z1-vktaI_tPcjQAAAEA"]
[Tue Apr 21 03:16:33.273542 2026] [:error] [pid 6928:tid 6947] [client 72.146.19.182:29141] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZ7kR3y7MHq1iB0qYoFMwAAAVE"]
[Tue Apr 21 03:16:33.940052 2026] [:error] [pid 11350:tid 11371] [client 72.146.19.182:32401] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZ7kf4EoMBgOJuJnT1dZAAAAAw"]
[Tue Apr 21 03:16:34.415753 2026] [:error] [pid 11352:tid 11426] [client 72.146.19.182:13529] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZ7kml10mhMSfJ7ir8WWwAAAIw"]
[Tue Apr 21 03:16:35.008634 2026] [:error] [pid 11350:tid 11372] [client 72.146.19.182:1496] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZ7k_4EoMBgOJuJnT1dZQAAAA0"]
[Tue Apr 21 03:16:35.587473 2026] [:error] [pid 11494:tid 11499] [client 72.146.19.182:1897] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeZ7k8gko5iFiE8YoyRiuQAAAYM"]
[Tue Apr 21 03:16:36.162403 2026] [:error] [pid 11352:tid 11432] [client 72.146.19.182:19970] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeZ7lGl10mhMSfJ7ir8WXAAAAJI"]
[Tue Apr 21 03:16:36.657482 2026] [:error] [pid 11350:tid 11382] [client 72.146.19.182:32431] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeZ7lP4EoMBgOJuJnT1dbAAAABc"]
[Tue Apr 21 03:16:37.225745 2026] [:error] [pid 11352:tid 11424] [client 72.146.19.182:32389] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35_S.php"] [unique_id "aeZ7lWl10mhMSfJ7ir8WXQAAAIo"]
[Tue Apr 21 03:16:37.758097 2026] [:error] [pid 11351:tid 11392] [client 72.146.19.182:1870] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeZ7lQN8Z1-vktaI_tPckwAAAEU"]
[Tue Apr 21 03:16:38.356682 2026] [:error] [pid 11352:tid 11428] [client 72.146.19.182:32392] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeZ7lml10mhMSfJ7ir8WXgAAAI4"]
[Tue Apr 21 03:16:38.874706 2026] [:error] [pid 42014:tid 42028] [client 72.146.19.182:23054] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeZ7lsek-00-ZI0f1NrE_wAAAQw"]
[Tue Apr 21 03:16:39.374041 2026] [:error] [pid 6928:tid 6946] [client 72.146.19.182:50983] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aeZ7lx3y7MHq1iB0qYoFRQAAAVA"]
[Tue Apr 21 03:16:39.998773 2026] [:error] [pid 11350:tid 11369] [client 72.146.19.182:19977] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/111.php"] [unique_id "aeZ7l_4EoMBgOJuJnT1deAAAAAo"]
[Tue Apr 21 03:16:56.550360 2026] [:error] [pid 31954:tid 31960] [client 72.146.19.182:13525] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeZ7qJKIMVoQEJe8YHEKpgAAAAE"]
[Tue Apr 21 03:16:57.199072 2026] [:error] [pid 31956:tid 32015] [client 72.146.19.182:32444] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeZ7qSYctE_rv-AOffKH-gAAAIE"]
[Tue Apr 21 03:16:57.890019 2026] [:error] [pid 31956:tid 32016] [client 72.146.19.182:1872] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeZ7qSYctE_rv-AOffKH-wAAAII"]
[Tue Apr 21 03:16:58.383866 2026] [:error] [pid 32043:tid 32048] [client 72.146.19.182:13538] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aeZ7qimbdBOTHRFrQQvHFwAAAMI"]
[Tue Apr 21 03:16:59.495149 2026] [:error] [pid 31956:tid 32021] [client 72.146.19.182:43235] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aeZ7qyYctE_rv-AOffKH_wAAAIc"]
[Tue Apr 21 03:17:14.768471 2026] [:error] [pid 32181:tid 32206] [client 72.146.19.182:14230] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeZ7ujU9Xotj5O2erKFWZQAAABU"]
[Tue Apr 21 03:17:15.465462 2026] [:error] [pid 32182:tid 32244] [client 72.146.19.182:1902] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeZ7u_iggdJkylcr3Q-KoQAAAEQ"]
[Tue Apr 21 03:17:15.988468 2026] [:error] [pid 32181:tid 32190] [client 72.146.19.182:20027] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeZ7uzU9Xotj5O2erKFWagAAAAU"]
[Tue Apr 21 03:17:16.788009 2026] [:error] [pid 32183:tid 32229] [client 72.146.19.182:43248] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "aeZ7vBkNBzBsmB7mwV7y9gAAANA"]
[Tue Apr 21 03:17:17.546640 2026] [:error] [pid 32267:tid 32288] [client 72.146.19.182:29136] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeZ7vSJHuU0J9VcTd9dEQQAAARM"]
[Tue Apr 21 03:17:18.496171 2026] [:error] [pid 32267:tid 32275] [client 72.146.19.182:1472] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeZ7viJHuU0J9VcTd9dERQAAAQY"]
[Tue Apr 21 03:17:21.384745 2026] [:error] [pid 32380:tid 32388] [client 72.146.19.182:13539] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeZ7wd4SB-1Y1WvnmcY0NwAAAAU"]
[Tue Apr 21 03:17:21.946806 2026] [:error] [pid 32381:tid 32410] [client 72.146.19.182:1866] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "aeZ7weLWaKbFo6tpPM4F_wAAAQA"]
[Tue Apr 21 03:17:29.639564 2026] [:error] [pid 32651:tid 32659] [client 72.146.19.182:1915] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeZ7ycv7pvXvwJ8zhipHAQAAAAM"]
[Tue Apr 21 03:17:30.247799 2026] [:error] [pid 32651:tid 32666] [client 72.146.19.182:13457] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeZ7ysv7pvXvwJ8zhipHCQAAAAo"]
[Tue Apr 21 03:17:31.014367 2026] [:error] [pid 32755:tid 32770] [client 72.146.19.182:43262] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeZ7y0SEA5ymSwfetws-gAAAAME"]
[Tue Apr 21 03:17:31.534425 2026] [:error] [pid 32755:tid 32771] [client 72.146.19.182:32410] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aeZ7y0SEA5ymSwfetws-gQAAAMI"]
[Tue Apr 21 03:17:32.117520 2026] [:error] [pid 32653:tid 32711] [client 72.146.19.182:13550] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZ7zHCgFMGdq6--9IuetgAAAIA"]
[Tue Apr 21 03:17:32.589268 2026] [:error] [pid 32653:tid 32713] [client 72.146.19.182:43213] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZ7zHCgFMGdq6--9IueuAAAAII"]
[Tue Apr 21 03:17:33.077001 2026] [:error] [pid 32755:tid 32775] [client 72.146.19.182:13512] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZ7zUSEA5ymSwfetws-hAAAAMY"]
[Tue Apr 21 03:17:33.648837 2026] [:error] [pid 32651:tid 32677] [client 72.146.19.182:25627] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZ7zcv7pvXvwJ8zhipHDgAAABU"]
[Tue Apr 21 03:17:34.285592 2026] [:error] [pid 32755:tid 32778] [client 72.146.19.182:13443] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ7zkSEA5ymSwfetws-hgAAAMk"]
[Tue Apr 21 03:17:34.913378 2026] [:error] [pid 32651:tid 32679] [client 72.146.19.182:13454] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ7zsv7pvXvwJ8zhipHEAAAABc"]
[Tue Apr 21 03:17:35.534372 2026] [:error] [pid 32755:tid 32785] [client 72.146.19.182:13445] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ7z0SEA5ymSwfetws-iwAAANA"]
[Tue Apr 21 03:17:36.069200 2026] [:error] [pid 32651:tid 32659] [client 72.146.19.182:19975] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZ70Mv7pvXvwJ8zhipHEQAAAAM"]
[Tue Apr 21 03:17:36.631381 2026] [:error] [pid 32755:tid 32788] [client 72.146.19.182:19974] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeZ70ESEA5ymSwfetws-jQAAANM"]
[Tue Apr 21 03:17:37.163617 2026] [:error] [pid 32755:tid 32789] [client 72.146.19.182:1495] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeZ70USEA5ymSwfetws-jgAAANQ"]
[Tue Apr 21 03:17:37.711063 2026] [:error] [pid 32755:tid 32770] [client 72.146.19.182:43258] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeZ70USEA5ymSwfetws-kAAAAME"]
[Tue Apr 21 03:17:38.215550 2026] [:error] [pid 32652:tid 32693] [client 72.146.19.182:1531] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeZ70nXORvfrYyHzZUMWpAAAAEk"]
[Tue Apr 21 03:17:38.967346 2026] [:error] [pid 32755:tid 32777] [client 72.146.19.182:1504] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeZ70kSEA5ymSwfetws-lAAAAMg"]
[Tue Apr 21 03:17:39.616925 2026] [:error] [pid 32651:tid 32673] [client 72.146.19.182:23065] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeZ708v7pvXvwJ8zhipHGAAAABE"]
[Tue Apr 21 03:17:40.148034 2026] [:error] [pid 32651:tid 32679] [client 72.146.19.182:13452] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeZ71Mv7pvXvwJ8zhipHGwAAABc"]
[Tue Apr 21 03:17:40.671666 2026] [:error] [pid 32651:tid 32663] [client 72.146.19.182:32416] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aeZ71Mv7pvXvwJ8zhipHHAAAAAc"]
[Tue Apr 21 03:17:41.359302 2026] [:error] [pid 32651:tid 32676] [client 72.146.19.182:13507] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeZ71cv7pvXvwJ8zhipHHwAAABQ"]
[Tue Apr 21 03:17:41.889034 2026] [:error] [pid 32652:tid 32705] [client 72.146.19.182:32434] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeZ71XXORvfrYyHzZUMWrQAAAFU"]
[Tue Apr 21 03:17:42.595385 2026] [:error] [pid 32651:tid 32665] [client 72.146.19.182:23058] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeZ71sv7pvXvwJ8zhipHIgAAAAk"]
[Tue Apr 21 03:17:43.172686 2026] [:error] [pid 32653:tid 32722] [client 72.146.19.182:13524] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aeZ713CgFMGdq6--9IuevQAAAIs"]
[Tue Apr 21 03:17:43.773979 2026] [:error] [pid 32755:tid 32770] [client 72.146.19.182:13549] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeZ710SEA5ymSwfetws-mQAAAME"]
[Tue Apr 21 03:17:44.381335 2026] [:error] [pid 32651:tid 32671] [client 72.146.19.182:13543] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeZ72Mv7pvXvwJ8zhipHJgAAAA8"]
[Tue Apr 21 03:17:45.055133 2026] [:error] [pid 32653:tid 32724] [client 72.146.19.182:43233] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeZ72XCgFMGdq6--9IuevwAAAI0"]
[Tue Apr 21 03:17:45.695137 2026] [:error] [pid 32653:tid 32726] [client 72.146.19.182:32396] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aeZ72XCgFMGdq6--9IuewQAAAI8"]
[Tue Apr 21 03:17:46.327954 2026] [:error] [pid 32651:tid 32670] [client 72.146.19.182:13498] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeZ72sv7pvXvwJ8zhipHKQAAAA4"]
[Tue Apr 21 03:17:46.961535 2026] [:error] [pid 32755:tid 32783] [client 72.146.19.182:13479] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeZ72kSEA5ymSwfetws-nwAAAM4"]
[Tue Apr 21 03:17:47.479702 2026] [:error] [pid 32755:tid 32778] [client 72.146.19.182:23046] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeZ720SEA5ymSwfetws-oQAAAMk"]
[Tue Apr 21 03:17:47.999868 2026] [:error] [pid 32651:tid 32679] [client 72.146.19.182:13550] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeZ728v7pvXvwJ8zhipHKgAAABc"]
[Tue Apr 21 03:17:48.498332 2026] [:error] [pid 32653:tid 32730] [client 72.146.19.182:1480] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeZ73HCgFMGdq6--9IuexAAAAJM"]
[Tue Apr 21 03:17:49.032409 2026] [:error] [pid 32652:tid 32696] [client 72.146.19.182:32387] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeZ73XXORvfrYyHzZUMWtgAAAEw"]
[Tue Apr 21 03:17:49.528351 2026] [:error] [pid 32653:tid 32734] [client 72.146.19.182:23081] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeZ73XCgFMGdq6--9IuexgAAAJc"]
[Tue Apr 21 03:17:50.056853 2026] [:error] [pid 32755:tid 32776] [client 72.146.19.182:19998] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/style.php"] [unique_id "aeZ73kSEA5ymSwfetws-pAAAAMc"]
[Tue Apr 21 03:17:50.530187 2026] [:error] [pid 32755:tid 32786] [client 72.146.19.182:32448] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeZ73kSEA5ymSwfetws-pgAAANE"]
[Tue Apr 21 03:17:51.120728 2026] [:error] [pid 32755:tid 32785] [client 72.146.19.182:13500] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeZ730SEA5ymSwfetws-qgAAANA"]
[Tue Apr 21 03:17:51.732188 2026] [:error] [pid 32755:tid 32791] [client 72.146.19.182:13543] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeZ730SEA5ymSwfetws-rAAAANY"]
[Tue Apr 21 03:17:52.257301 2026] [:error] [pid 32652:tid 32706] [client 72.146.19.182:1861] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aeZ74HXORvfrYyHzZUMWuwAAAFY"]
[Tue Apr 21 03:17:52.762005 2026] [:error] [pid 32652:tid 32708] [client 72.146.19.182:1479] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeZ74HXORvfrYyHzZUMWvAAAAFg"]
[Tue Apr 21 03:17:53.243745 2026] [:error] [pid 32651:tid 32667] [client 72.146.19.182:1895] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeZ74cv7pvXvwJ8zhipHLwAAAAs"]
[Tue Apr 21 03:17:53.733406 2026] [:error] [pid 32652:tid 32684] [client 72.146.19.182:43239] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeZ74XXORvfrYyHzZUMWvgAAAEA"]
[Tue Apr 21 03:17:54.260658 2026] [:error] [pid 32652:tid 32689] [client 72.146.19.182:32487] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeZ74nXORvfrYyHzZUMWwQAAAEU"]
[Tue Apr 21 03:17:54.757115 2026] [:error] [pid 32652:tid 32690] [client 72.146.19.182:43242] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZ74nXORvfrYyHzZUMWwwAAAEY"]
[Tue Apr 21 03:17:55.340459 2026] [:error] [pid 32651:tid 32666] [client 72.146.19.182:1982] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZ748v7pvXvwJ8zhipHMQAAAAo"]
[Tue Apr 21 03:17:55.987659 2026] [:error] [pid 32651:tid 32656] [client 72.146.19.182:13454] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZ748v7pvXvwJ8zhipHMgAAAAA"]
[Tue Apr 21 03:17:56.489446 2026] [:error] [pid 32651:tid 32665] [client 72.146.19.182:1858] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZ75Mv7pvXvwJ8zhipHMwAAAAk"]
[Tue Apr 21 03:17:57.091813 2026] [:error] [pid 32652:tid 32694] [client 72.146.19.182:19992] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeZ75XXORvfrYyHzZUMWxQAAAEo"]
[Tue Apr 21 03:17:57.587319 2026] [:error] [pid 32652:tid 32697] [client 72.146.19.182:1885] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeZ75XXORvfrYyHzZUMWxwAAAE0"]
[Tue Apr 21 03:17:58.110410 2026] [:error] [pid 32755:tid 32780] [client 72.146.19.182:1532] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeZ75kSEA5ymSwfetws-tAAAAMs"]
[Tue Apr 21 03:17:58.713581 2026] [:error] [pid 32652:tid 32701] [client 72.146.19.182:1528] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aeZ75nXORvfrYyHzZUMWzAAAAFE"]
[Tue Apr 21 03:17:59.359389 2026] [:error] [pid 32755:tid 32789] [client 72.146.19.182:23079] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeZ750SEA5ymSwfetws-uAAAANQ"]
[Tue Apr 21 03:18:00.004126 2026] [:error] [pid 32652:tid 32684] [client 72.146.19.182:32433] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeZ76HXORvfrYyHzZUMWzgAAAEA"]
[Tue Apr 21 03:18:00.550902 2026] [:error] [pid 32653:tid 32717] [client 72.146.19.182:13476] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeZ76HCgFMGdq6--9IueygAAAIY"]
[Tue Apr 21 03:18:01.123081 2026] [:error] [pid 32755:tid 32771] [client 72.146.19.182:32432] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "aeZ76USEA5ymSwfetws-uwAAAMI"]
[Tue Apr 21 03:18:01.730108 2026] [:error] [pid 32653:tid 32718] [client 72.146.19.182:51006] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeZ76XCgFMGdq6--9IuezAAAAIc"]
[Tue Apr 21 03:18:02.271829 2026] [:error] [pid 32755:tid 32778] [client 72.146.19.182:13530] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeZ76kSEA5ymSwfetws-vgAAAMk"]
[Tue Apr 21 03:18:02.849454 2026] [:error] [pid 32755:tid 32784] [client 72.146.19.182:43254] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeZ76kSEA5ymSwfetws-wgAAAM8"]
[Tue Apr 21 03:18:03.343520 2026] [:error] [pid 32652:tid 32690] [client 72.146.19.182:20019] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/plss3.php"] [unique_id "aeZ763XORvfrYyHzZUMW0QAAAEY"]
[Tue Apr 21 03:18:04.127793 2026] [:error] [pid 32755:tid 32787] [client 72.146.19.182:51004] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeZ77ESEA5ymSwfetws-yAAAANI"]
[Tue Apr 21 03:18:04.709881 2026] [:error] [pid 32755:tid 32773] [client 72.146.19.182:29128] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeZ77ESEA5ymSwfetws-zAAAAMQ"]
[Tue Apr 21 03:18:05.338144 2026] [:error] [pid 32755:tid 32775] [client 72.146.19.182:32397] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeZ77USEA5ymSwfetws-zwAAAMY"]
[Tue Apr 21 03:18:05.972421 2026] [:error] [pid 32755:tid 32784] [client 72.146.19.182:43222] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aeZ77USEA5ymSwfetws-0wAAAM8"]
[Tue Apr 21 03:18:06.658536 2026] [:error] [pid 32755:tid 32780] [client 72.146.19.182:1894] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZ77kSEA5ymSwfetws-1QAAAMs"]
[Tue Apr 21 03:18:07.149558 2026] [:error] [pid 32755:tid 32779] [client 72.146.19.182:1522] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZ770SEA5ymSwfetws-1gAAAMo"]
[Tue Apr 21 03:18:07.755743 2026] [:error] [pid 32755:tid 32771] [client 72.146.19.182:13506] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZ770SEA5ymSwfetws-2gAAAMI"]
[Tue Apr 21 03:18:08.248257 2026] [:error] [pid 32755:tid 32769] [client 72.146.19.182:13463] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZ78ESEA5ymSwfetws-3AAAAMA"]
[Tue Apr 21 03:18:08.855003 2026] [:error] [pid 32755:tid 32783] [client 72.146.19.182:13499] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZ78ESEA5ymSwfetws-3QAAAM4"]
[Tue Apr 21 03:18:09.792039 2026] [:error] [pid 32755:tid 32781] [client 72.146.19.182:13532] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZ78USEA5ymSwfetws-4AAAAMw"]
[Tue Apr 21 03:18:10.529252 2026] [:error] [pid 32755:tid 32776] [client 72.146.19.182:43221] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZ78kSEA5ymSwfetws-5AAAAMc"]
[Tue Apr 21 03:18:11.025283 2026] [:error] [pid 32755:tid 32786] [client 72.146.19.182:29130] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZ780SEA5ymSwfetws-5gAAANE"]
[Tue Apr 21 03:18:11.592139 2026] [:error] [pid 32755:tid 32793] [client 72.146.19.182:1873] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZ780SEA5ymSwfetws-6QAAANg"]
[Tue Apr 21 03:18:12.320591 2026] [:error] [pid 32755:tid 32785] [client 72.146.19.182:13532] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZ79ESEA5ymSwfetws-6gAAANA"]
[Tue Apr 21 03:18:12.887716 2026] [:error] [pid 32652:tid 32696] [client 72.146.19.182:32420] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZ79HXORvfrYyHzZUMW1AAAAEw"]
[Tue Apr 21 03:18:13.558144 2026] [:error] [pid 32755:tid 32790] [client 72.146.19.182:29123] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZ79USEA5ymSwfetws-7wAAANU"]
[Tue Apr 21 03:18:21.620753 2026] [:error] [pid 32652:tid 32693] [client 72.146.19.182:13520] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeZ7_XXORvfrYyHzZUMW-AAAAEk"]
[Tue Apr 21 03:18:22.121815 2026] [:error] [pid 32755:tid 32793] [client 72.146.19.182:32429] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeZ7_kSEA5ymSwfetws--AAAANg"]
[Tue Apr 21 03:18:22.708603 2026] [:error] [pid 32653:tid 32728] [client 72.146.19.182:29160] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeZ7_nCgFMGdq6--9Iue0gAAAJE"]
[Tue Apr 21 03:18:23.248546 2026] [:error] [pid 32653:tid 32729] [client 72.146.19.182:13521] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aeZ7_3CgFMGdq6--9Iue0wAAAJI"]
[Tue Apr 21 03:18:23.842066 2026] [:error] [pid 32653:tid 32731] [client 72.146.19.182:29183] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeZ7_3CgFMGdq6--9Iue1AAAAJQ"]
[Tue Apr 21 03:18:24.384121 2026] [:error] [pid 32755:tid 32773] [client 72.146.19.182:1529] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeZ8AESEA5ymSwfetws--QAAAMQ"]
[Tue Apr 21 03:18:25.084049 2026] [:error] [pid 32755:tid 32791] [client 72.146.19.182:29147] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeZ8AUSEA5ymSwfetws-_AAAANY"]
[Tue Apr 21 03:18:25.703826 2026] [:error] [pid 32652:tid 32704] [client 72.146.19.182:1917] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeZ8AXXORvfrYyHzZUMW_AAAAFQ"]
[Tue Apr 21 03:18:26.233930 2026] [:error] [pid 32755:tid 32775] [client 72.146.19.182:32485] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeZ8AkSEA5ymSwfetws_AwAAAMY"]
[Tue Apr 21 03:18:27.159416 2026] [:error] [pid 32652:tid 32708] [client 72.146.19.182:19989] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeZ8A3XORvfrYyHzZUMW_wAAAFg"]
[Tue Apr 21 03:18:27.805832 2026] [:error] [pid 32652:tid 32684] [client 72.146.19.182:13552] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeZ8A3XORvfrYyHzZUMXAAAAAEA"]
[Tue Apr 21 03:18:28.390314 2026] [:error] [pid 32755:tid 32773] [client 72.146.19.182:13469] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/we.php"] [unique_id "aeZ8BESEA5ymSwfetws_CQAAAMQ"]
[Tue Apr 21 03:18:29.247507 2026] [:error] [pid 32652:tid 32702] [client 72.146.19.182:13487] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeZ8BXXORvfrYyHzZUMXBAAAAFI"]
[Tue Apr 21 03:18:29.897507 2026] [:error] [pid 32652:tid 32693] [client 72.146.19.182:51006] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeZ8BXXORvfrYyHzZUMXBgAAAEk"]
[Tue Apr 21 03:18:30.590927 2026] [:error] [pid 32755:tid 32783] [client 72.146.19.182:43215] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeZ8BkSEA5ymSwfetws_DAAAAM4"]
[Tue Apr 21 03:18:31.434273 2026] [:error] [pid 32755:tid 32790] [client 72.146.19.182:13456] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aeZ8B0SEA5ymSwfetws_DgAAANU"]
[Tue Apr 21 03:18:31.980242 2026] [:error] [pid 32755:tid 32787] [client 72.146.19.182:29121] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZ8B0SEA5ymSwfetws_DwAAANI"]
[Tue Apr 21 03:18:32.456867 2026] [:error] [pid 32755:tid 32788] [client 72.146.19.182:26637] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZ8CESEA5ymSwfetws_EgAAANM"]
[Tue Apr 21 03:18:33.002910 2026] [:error] [pid 32755:tid 32793] [client 72.146.19.182:13508] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZ8CUSEA5ymSwfetws_EwAAANg"]
[Tue Apr 21 03:18:33.516773 2026] [:error] [pid 32653:tid 32733] [client 72.146.19.182:29145] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZ8CXCgFMGdq6--9Iue2AAAAJY"]
[Tue Apr 21 03:18:34.208539 2026] [:error] [pid 32653:tid 32715] [client 72.146.19.182:1516] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeZ8CnCgFMGdq6--9Iue2gAAAIQ"]
[Tue Apr 21 03:18:34.757987 2026] [:error] [pid 32755:tid 32782] [client 72.146.19.182:1966] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeZ8CkSEA5ymSwfetws_HAAAAM0"]
[Tue Apr 21 03:18:35.361836 2026] [:error] [pid 32755:tid 32774] [client 72.146.19.182:29169] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeZ8C0SEA5ymSwfetws_IQAAAMU"]
[Tue Apr 21 03:18:35.975299 2026] [:error] [pid 32755:tid 32773] [client 72.146.19.182:20000] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-michan.php"] [unique_id "aeZ8C0SEA5ymSwfetws_JgAAAMQ"]
[Tue Apr 21 03:18:36.538858 2026] [:error] [pid 32755:tid 32771] [client 72.146.19.182:1892] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aeZ8DESEA5ymSwfetws_KAAAAMI"]
[Tue Apr 21 03:18:37.181765 2026] [:error] [pid 32652:tid 32707] [client 72.146.19.182:43224] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aeZ8DXXORvfrYyHzZUMXFAAAAFc"]
[Tue Apr 21 03:18:37.667779 2026] [:error] [pid 32755:tid 32784] [client 72.146.19.182:32421] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aeZ8DUSEA5ymSwfetws_KQAAAM8"]
[Tue Apr 21 03:18:38.223421 2026] [:error] [pid 32652:tid 32696] [client 72.146.19.182:1913] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aeZ8DnXORvfrYyHzZUMXGAAAAEw"]
[Tue Apr 21 03:18:38.778336 2026] [:error] [pid 32653:tid 32722] [client 72.146.19.182:25602] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ8DnCgFMGdq6--9Iue4gAAAIs"]
[Tue Apr 21 03:18:39.398482 2026] [:error] [pid 32653:tid 32725] [client 72.146.19.182:32491] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ8D3CgFMGdq6--9Iue4wAAAI4"]
[Tue Apr 21 03:18:40.034550 2026] [:error] [pid 32653:tid 32727] [client 72.146.19.182:29129] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ8EHCgFMGdq6--9Iue5AAAAJA"]
[Tue Apr 21 03:18:40.553523 2026] [:error] [pid 32652:tid 32705] [client 72.146.19.182:29173] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZ8EHXORvfrYyHzZUMXHAAAAFU"]
[Tue Apr 21 03:18:41.064150 2026] [:error] [pid 32653:tid 32731] [client 72.146.19.182:13548] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ8EXCgFMGdq6--9Iue5gAAAJQ"]
[Tue Apr 21 03:18:41.535708 2026] [:error] [pid 32652:tid 32685] [client 72.146.19.182:32417] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ8EXXORvfrYyHzZUMXHwAAAEE"]
[Tue Apr 21 03:18:42.042670 2026] [:error] [pid 32651:tid 32678] [client 72.146.19.182:50960] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ8Esv7pvXvwJ8zhipHTQAAABY"]
[Tue Apr 21 03:18:42.589415 2026] [:error] [pid 32651:tid 32664] [client 72.146.19.182:29137] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZ8Esv7pvXvwJ8zhipHUAAAAAg"]
[Tue Apr 21 03:18:43.096618 2026] [:error] [pid 32652:tid 32698] [client 72.146.19.182:1981] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ8E3XORvfrYyHzZUMXIgAAAE4"]
[Tue Apr 21 03:18:43.584058 2026] [:error] [pid 32652:tid 32687] [client 72.146.19.182:1475] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ8E3XORvfrYyHzZUMXIwAAAEM"]
[Tue Apr 21 03:18:44.055981 2026] [:error] [pid 32652:tid 32704] [client 72.146.19.182:23104] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ8FHXORvfrYyHzZUMXJAAAAFQ"]
[Tue Apr 21 03:18:44.751023 2026] [:error] [pid 32652:tid 32694] [client 72.146.19.182:32480] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZ8FHXORvfrYyHzZUMXJgAAAEo"]
[Tue Apr 21 03:18:45.323187 2026] [:error] [pid 32652:tid 32699] [client 72.146.19.182:13441] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ8FXXORvfrYyHzZUMXKAAAAE8"]
[Tue Apr 21 03:18:45.828669 2026] [:error] [pid 32652:tid 32688] [client 72.146.19.182:23092] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ8FXXORvfrYyHzZUMXKwAAAEQ"]
[Tue Apr 21 03:18:46.491247 2026] [:error] [pid 32652:tid 32703] [client 72.146.19.182:1904] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ8FnXORvfrYyHzZUMXLQAAAFM"]
[Tue Apr 21 03:18:46.980877 2026] [:error] [pid 32755:tid 32789] [client 72.146.19.182:23048] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZ8FkSEA5ymSwfetws_LQAAANQ"]
[Tue Apr 21 03:18:47.500728 2026] [:error] [pid 32652:tid 32693] [client 72.146.19.182:50968] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeZ8F3XORvfrYyHzZUMXLwAAAEk"]
[Tue Apr 21 03:18:47.999676 2026] [:error] [pid 32652:tid 32698] [client 72.146.19.182:29161] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeZ8F3XORvfrYyHzZUMXMAAAAE4"]
[Tue Apr 21 03:18:48.520875 2026] [:error] [pid 32653:tid 32716] [client 72.146.19.182:1856] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeZ8GHCgFMGdq6--9Iue6wAAAIU"]
[Tue Apr 21 03:18:49.009439 2026] [:error] [pid 32652:tid 32687] [client 72.146.19.182:26663] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp.php"] [unique_id "aeZ8GXXORvfrYyHzZUMXNAAAAEM"]
[Tue Apr 21 03:18:49.638888 2026] [:error] [pid 32755:tid 32773] [client 72.146.19.182:53491] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ8GUSEA5ymSwfetws_LwAAAMQ"]
[Tue Apr 21 03:18:50.227109 2026] [:error] [pid 32755:tid 32769] [client 72.146.19.182:43232] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ8GkSEA5ymSwfetws_MQAAAMA"]
[Tue Apr 21 03:18:50.727760 2026] [:error] [pid 32652:tid 32705] [client 72.146.19.182:43212] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ8GnXORvfrYyHzZUMXOAAAAFU"]
[Tue Apr 21 03:18:51.218835 2026] [:error] [pid 32755:tid 32791] [client 72.146.19.182:20024] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZ8G0SEA5ymSwfetws_MgAAANY"]
[Tue Apr 21 03:18:51.695667 2026] [:error] [pid 32652:tid 32707] [client 72.146.19.182:32455] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeZ8G3XORvfrYyHzZUMXOQAAAFc"]
[Tue Apr 21 03:18:52.211982 2026] [:error] [pid 32755:tid 32790] [client 72.146.19.182:50999] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeZ8HESEA5ymSwfetws_OAAAANU"]
[Tue Apr 21 03:18:53.062494 2026] [:error] [pid 32653:tid 32718] [client 72.146.19.182:1899] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeZ8HXCgFMGdq6--9Iue7AAAAIc"]
[Tue Apr 21 03:18:53.625082 2026] [:error] [pid 32755:tid 32788] [client 72.146.19.182:1890] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "aeZ8HUSEA5ymSwfetws_OwAAANM"]
[Tue Apr 21 03:18:54.104482 2026] [:error] [pid 32653:tid 32719] [client 72.146.19.182:32386] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZ8HnCgFMGdq6--9Iue7QAAAIg"]
[Tue Apr 21 03:18:54.845373 2026] [:error] [pid 32755:tid 32793] [client 72.146.19.182:53465] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZ8HkSEA5ymSwfetws_QAAAANg"]
[Tue Apr 21 03:18:55.357293 2026] [:error] [pid 32652:tid 32696] [client 72.146.19.182:53483] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZ8H3XORvfrYyHzZUMXPgAAAEw"]
[Tue Apr 21 03:18:55.882479 2026] [:error] [pid 32651:tid 32675] [client 72.146.19.182:32446] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZ8H8v7pvXvwJ8zhipHWgAAABM"]
[Tue Apr 21 03:18:56.413699 2026] [:error] [pid 32653:tid 32720] [client 72.146.19.182:1476] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeZ8IHCgFMGdq6--9Iue7gAAAIk"]
[Tue Apr 21 03:18:56.898980 2026] [:error] [pid 32755:tid 32787] [client 72.146.19.182:19999] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeZ8IESEA5ymSwfetws_SgAAANI"]
[Tue Apr 21 03:18:57.395449 2026] [:error] [pid 32755:tid 32786] [client 72.146.19.182:19986] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeZ8IUSEA5ymSwfetws_TgAAANE"]
[Tue Apr 21 03:18:57.879130 2026] [:error] [pid 32755:tid 32773] [client 72.146.19.182:32408] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/av.php"] [unique_id "aeZ8IUSEA5ymSwfetws_UAAAAMQ"]
[Tue Apr 21 03:18:58.420032 2026] [:error] [pid 32755:tid 32791] [client 72.146.19.182:13528] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeZ8IkSEA5ymSwfetws_VAAAANY"]
[Tue Apr 21 03:18:58.963405 2026] [:error] [pid 32755:tid 32780] [client 72.146.19.182:29143] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeZ8IkSEA5ymSwfetws_WQAAAMs"]
[Tue Apr 21 03:18:59.727786 2026] [:error] [pid 32653:tid 32722] [client 72.146.19.182:29177] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeZ8I3CgFMGdq6--9Iue8AAAAIs"]
[Tue Apr 21 03:19:00.275819 2026] [:error] [pid 32652:tid 32690] [client 72.146.19.182:29166] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "aeZ8JHXORvfrYyHzZUMXSwAAAEY"]
[Tue Apr 21 03:19:00.810059 2026] [:error] [pid 32652:tid 32684] [client 72.146.19.182:26673] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeZ8JHXORvfrYyHzZUMXTQAAAEA"]
[Tue Apr 21 03:19:01.331203 2026] [:error] [pid 32652:tid 32706] [client 72.146.19.182:1957] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeZ8JXXORvfrYyHzZUMXTwAAAFY"]
[Tue Apr 21 03:19:01.820827 2026] [:error] [pid 32755:tid 32783] [client 72.146.19.182:29178] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeZ8JUSEA5ymSwfetws_XQAAAM4"]
[Tue Apr 21 03:19:02.348763 2026] [:error] [pid 32755:tid 32793] [client 72.146.19.182:29138] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aeZ8JkSEA5ymSwfetws_XwAAANg"]
[Tue Apr 21 03:19:02.834555 2026] [:error] [pid 32652:tid 32701] [client 72.146.19.182:1877] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeZ8JnXORvfrYyHzZUMXUAAAAFE"]
[Tue Apr 21 03:19:03.400422 2026] [:error] [pid 32755:tid 32776] [client 72.146.19.182:1513] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeZ8J0SEA5ymSwfetws_YQAAAMc"]
[Tue Apr 21 03:19:03.885798 2026] [:error] [pid 32755:tid 32771] [client 72.146.19.182:29163] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeZ8J0SEA5ymSwfetws_YwAAAMI"]
[Tue Apr 21 03:19:04.422292 2026] [:error] [pid 32755:tid 32780] [client 72.146.19.182:29167] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeZ8KESEA5ymSwfetws_ZgAAAMs"]
[Tue Apr 21 03:19:05.009676 2026] [:error] [pid 32755:tid 32789] [client 72.146.19.182:13503] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeZ8KUSEA5ymSwfetws_aAAAANQ"]
[Tue Apr 21 03:19:05.552290 2026] [:error] [pid 32755:tid 32769] [client 72.146.19.182:23112] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeZ8KUSEA5ymSwfetws_aQAAAMA"]
[Tue Apr 21 03:19:06.095475 2026] [:error] [pid 32653:tid 32734] [client 72.146.19.182:25659] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeZ8KnCgFMGdq6--9Iue9gAAAJc"]
[Tue Apr 21 03:19:06.599855 2026] [:error] [pid 32653:tid 32711] [client 72.146.19.182:13545] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "aeZ8KnCgFMGdq6--9Iue9wAAAIA"]
[Tue Apr 21 03:19:07.148074 2026] [:error] [pid 32653:tid 32733] [client 72.146.19.182:20004] [client 72.146.19.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeZ8K3CgFMGdq6--9Iue-gAAAJY"]
[Tue Apr 21 03:19:07.714373 2026] [:error] [pid 32651:tid 32658] [client 72.146.19.182:29154] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeZ8K8v7pvXvwJ8zhipHXgAAAAI"]
[Tue Apr 21 03:19:08.330886 2026] [:error] [pid 32652:tid 32686] [client 72.146.19.182:20003] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeZ8LHXORvfrYyHzZUMXUgAAAEI"]
[Tue Apr 21 03:19:08.880076 2026] [:error] [pid 32755:tid 32775] [client 72.146.19.182:53485] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeZ8LESEA5ymSwfetws_bQAAAMY"]
[Tue Apr 21 03:19:09.386501 2026] [:error] [pid 32755:tid 32785] [client 72.146.19.182:13566] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZ8LUSEA5ymSwfetws_bgAAANA"]
[Tue Apr 21 03:19:09.954780 2026] [:error] [pid 32651:tid 32656] [client 72.146.19.182:13514] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZ8Lcv7pvXvwJ8zhipHYAAAAAA"]
[Tue Apr 21 03:19:10.437461 2026] [:error] [pid 32651:tid 32662] [client 72.146.19.182:43228] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZ8Lsv7pvXvwJ8zhipHYwAAAAY"]
[Tue Apr 21 03:19:10.982864 2026] [:error] [pid 32755:tid 32771] [client 72.146.19.182:1193] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZ8LkSEA5ymSwfetws_cAAAAMI"]
[Tue Apr 21 03:19:11.462862 2026] [:error] [pid 32652:tid 32699] [client 72.146.19.182:19972] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZ8L3XORvfrYyHzZUMXUwAAAE8"]
[Tue Apr 21 03:19:12.060559 2026] [:error] [pid 32653:tid 32723] [client 72.146.19.182:29158] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZ8MHCgFMGdq6--9Iue_wAAAIw"]
[Tue Apr 21 03:19:12.675916 2026] [:error] [pid 32653:tid 32731] [client 72.146.19.182:1485] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZ8MHCgFMGdq6--9IufAQAAAJQ"]
[Tue Apr 21 03:19:13.270830 2026] [:error] [pid 32755:tid 32788] [client 72.146.19.182:13465] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZ8MUSEA5ymSwfetws_cQAAANM"]
[Tue Apr 21 03:19:13.967212 2026] [:error] [pid 32755:tid 32769] [client 72.146.19.182:1184] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeZ8MUSEA5ymSwfetws_cwAAAMA"]
[Tue Apr 21 03:19:14.504531 2026] [:error] [pid 32755:tid 32773] [client 72.146.19.182:13442] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeZ8MkSEA5ymSwfetws_dgAAAMQ"]
[Tue Apr 21 03:19:15.224467 2026] [:error] [pid 32755:tid 32772] [client 72.146.19.182:53460] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeZ8M0SEA5ymSwfetws_eAAAAMM"]
[Tue Apr 21 03:19:15.969002 2026] [:error] [pid 32652:tid 32705] [client 72.146.19.182:13161] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/k.php"] [unique_id "aeZ8M3XORvfrYyHzZUMXVgAAAFU"]
[Tue Apr 21 03:19:16.484225 2026] [:error] [pid 32653:tid 32726] [client 72.146.19.182:53441] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeZ8NHCgFMGdq6--9IufAwAAAI8"]
[Tue Apr 21 03:19:17.115010 2026] [:error] [pid 32755:tid 32793] [client 72.146.19.182:29138] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeZ8NUSEA5ymSwfetws_egAAANg"]
[Tue Apr 21 03:19:17.598466 2026] [:error] [pid 32653:tid 32733] [client 72.146.19.182:1206] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeZ8NXCgFMGdq6--9IufCAAAAJY"]
[Tue Apr 21 03:19:18.105201 2026] [:error] [pid 32755:tid 32774] [client 72.146.19.182:1160] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aeZ8NkSEA5ymSwfetws_fAAAAMU"]
[Tue Apr 21 03:19:18.727558 2026] [:error] [pid 32653:tid 32713] [client 72.146.19.182:33056] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeZ8NnCgFMGdq6--9IufCQAAAII"]
[Tue Apr 21 03:19:19.226611 2026] [:error] [pid 32755:tid 32790] [client 72.146.19.182:33031] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeZ8N0SEA5ymSwfetws_fwAAANU"]
[Tue Apr 21 03:19:19.743450 2026] [:error] [pid 32653:tid 32717] [client 72.146.19.182:18116] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeZ8N3CgFMGdq6--9IufCwAAAIY"]
[Tue Apr 21 03:19:20.240928 2026] [:error] [pid 32653:tid 32719] [client 72.146.19.182:18127] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aeZ8OHCgFMGdq6--9IufDQAAAIg"]
[Tue Apr 21 03:19:20.797030 2026] [:error] [pid 32652:tid 32703] [client 72.146.19.182:22665] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/in.php"] [unique_id "aeZ8OHXORvfrYyHzZUMXVwAAAFM"]
[Tue Apr 21 03:19:27.983989 2026] [:error] [pid 32651:tid 32668] [client 72.146.19.182:15633] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeZ8P8v7pvXvwJ8zhipHeQAAAAw"]
[Tue Apr 21 03:19:28.515606 2026] [:error] [pid 32653:tid 32715] [client 72.146.19.182:25202] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeZ8QHCgFMGdq6--9IufFAAAAIQ"]
[Tue Apr 21 03:19:29.267179 2026] [:error] [pid 32755:tid 32774] [client 72.146.19.182:28503] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeZ8QUSEA5ymSwfetws_nQAAAMU"]
[Tue Apr 21 03:19:30.000921 2026] [:error] [pid 32653:tid 32716] [client 72.146.19.182:21546] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aeZ8QnCgFMGdq6--9IufHAAAAIU"]
[Tue Apr 21 03:19:30.783856 2026] [:error] [pid 32653:tid 32712] [client 72.146.19.182:54613] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeZ8QnCgFMGdq6--9IufJAAAAIE"]
[Tue Apr 21 03:19:31.446799 2026] [:error] [pid 32755:tid 32783] [client 72.146.19.182:19690] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeZ8Q0SEA5ymSwfetws_uQAAAM4"]
[Tue Apr 21 03:19:32.139122 2026] [:error] [pid 32653:tid 32725] [client 72.146.19.182:49780] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeZ8RHCgFMGdq6--9IufLgAAAI4"]
[Tue Apr 21 03:19:32.882841 2026] [:error] [pid 32755:tid 32772] [client 72.146.19.182:24638] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aeZ8RESEA5ymSwfetws_zAAAAMM"]
[Tue Apr 21 03:19:33.379978 2026] [:error] [pid 32653:tid 32722] [client 72.146.19.182:21603] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeZ8RXCgFMGdq6--9IufMQAAAIs"]
[Tue Apr 21 03:19:33.991464 2026] [:error] [pid 32755:tid 32786] [client 72.146.19.182:56445] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeZ8RUSEA5ymSwfetws_0QAAANE"]
[Tue Apr 21 03:19:34.593351 2026] [:error] [pid 32653:tid 32730] [client 72.146.19.182:21570] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeZ8RnCgFMGdq6--9IufNAAAAJM"]
[Tue Apr 21 03:19:35.190547 2026] [:error] [pid 32652:tid 32703] [client 72.146.19.182:24114] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ew.php"] [unique_id "aeZ8R3XORvfrYyHzZUMXhAAAAFM"]
[Tue Apr 21 03:19:35.671085 2026] [:error] [pid 32653:tid 32731] [client 72.146.19.182:24626] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeZ8R3CgFMGdq6--9IufNQAAAJQ"]
[Tue Apr 21 03:19:36.204149 2026] [:error] [pid 32755:tid 32777] [client 72.146.19.182:21584] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeZ8SESEA5ymSwfetws_2QAAAMg"]
[Tue Apr 21 03:19:36.724288 2026] [:error] [pid 32755:tid 32772] [client 72.146.19.182:21583] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeZ8SESEA5ymSwfetws_3AAAAMM"]
[Tue Apr 21 03:19:37.206986 2026] [:error] [pid 32755:tid 32792] [client 72.146.19.182:16892] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file21.php"] [unique_id "aeZ8SUSEA5ymSwfetws_3QAAANc"]
[Tue Apr 21 03:19:37.722281 2026] [:error] [pid 32755:tid 32776] [client 72.146.19.182:21573] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "aeZ8SUSEA5ymSwfetws_3wAAAMc"]
[Tue Apr 21 03:19:38.251697 2026] [:error] [pid 32653:tid 32713] [client 72.146.19.182:51004] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "aeZ8SnCgFMGdq6--9IufOAAAAII"]
[Tue Apr 21 03:19:38.790908 2026] [:error] [pid 32651:tid 32673] [client 72.146.19.182:15313] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "aeZ8Ssv7pvXvwJ8zhipHjwAAABE"]
[Tue Apr 21 03:19:39.422359 2026] [:error] [pid 32652:tid 32690] [client 72.146.19.182:1276] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "aeZ8S3XORvfrYyHzZUMXhQAAAEY"]
[Tue Apr 21 03:19:39.898421 2026] [:error] [pid 32652:tid 32706] [client 72.146.19.182:56416] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeZ8S3XORvfrYyHzZUMXiAAAAFY"]
[Tue Apr 21 03:19:40.427572 2026] [:error] [pid 32651:tid 32674] [client 72.146.19.182:14951] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeZ8TMv7pvXvwJ8zhipHkAAAABI"]
[Tue Apr 21 03:19:40.973351 2026] [:error] [pid 32653:tid 32719] [client 72.146.19.182:21606] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeZ8THCgFMGdq6--9IufPQAAAIg"]
[Tue Apr 21 03:19:41.481428 2026] [:error] [pid 32653:tid 32724] [client 72.146.19.182:15341] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file18.php"] [unique_id "aeZ8TXCgFMGdq6--9IufPwAAAI0"]
[Tue Apr 21 03:19:41.980717 2026] [:error] [pid 32755:tid 32787] [client 72.146.19.182:14954] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeZ8TUSEA5ymSwfetws_4AAAANI"]
[Tue Apr 21 03:19:42.530334 2026] [:error] [pid 32755:tid 32769] [client 72.146.19.182:14965] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeZ8TkSEA5ymSwfetws_4QAAAMA"]
[Tue Apr 21 03:19:43.099818 2026] [:error] [pid 32652:tid 32689] [client 72.146.19.182:16890] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeZ8T3XORvfrYyHzZUMXigAAAEU"]
[Tue Apr 21 03:19:43.618706 2026] [:error] [pid 32652:tid 32696] [client 72.146.19.182:24077] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aeZ8T3XORvfrYyHzZUMXiwAAAEw"]
[Tue Apr 21 03:19:44.087161 2026] [:error] [pid 32652:tid 32701] [client 72.146.19.182:16848] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZ8UHXORvfrYyHzZUMXjAAAAFE"]
[Tue Apr 21 03:19:44.624539 2026] [:error] [pid 32653:tid 32711] [client 72.146.19.182:24090] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZ8UHCgFMGdq6--9IufQwAAAIA"]
[Tue Apr 21 03:19:45.117027 2026] [:error] [pid 32653:tid 32731] [client 72.146.19.182:1623] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZ8UXCgFMGdq6--9IufRQAAAJQ"]
[Tue Apr 21 03:19:45.638386 2026] [:error] [pid 32755:tid 32777] [client 72.146.19.182:16840] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZ8UUSEA5ymSwfetws_5wAAAMg"]
[Tue Apr 21 03:19:46.115803 2026] [:error] [pid 32652:tid 32691] [client 72.146.19.182:15319] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeZ8UnXORvfrYyHzZUMXjQAAAEc"]
[Tue Apr 21 03:19:46.707419 2026] [:error] [pid 32653:tid 32717] [client 72.146.19.182:56407] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeZ8UnCgFMGdq6--9IufRgAAAIY"]
[Tue Apr 21 03:19:47.273770 2026] [:error] [pid 32653:tid 32719] [client 72.146.19.182:1640] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeZ8U3CgFMGdq6--9IufSAAAAIg"]
[Tue Apr 21 03:19:47.835324 2026] [:error] [pid 32755:tid 32784] [client 72.146.19.182:56396] [client 72.146.19.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "aeZ8U0SEA5ymSwfetws_7QAAAM8"]
[Tue Apr 21 03:32:35.587076 2026] [autoindex:error] [pid 4927:tid 4953] [client 212.47.77.99:61628] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Apr 21 03:40:40.638791 2026] [:error] [pid 35321:tid 35397] [client 46.97.171.98:50099] [client 46.97.171.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.97.171.98, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aeaBODeHLhVUuu8cVXwrCwAAAE0"]
[Tue Apr 21 04:00:20.297027 2026] [:error] [pid 35415:tid 35430] [client 185.194.178.29:61463] [client 185.194.178.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.29, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aeaF1EiqDinI4_22zzjjjwAAAMM"]
[Tue Apr 21 06:47:22.854348 2026] [:error] [pid 5377:tid 5390] [client 192.96.159.129:64054] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aeas-rBKychFlrHBdvseEgAAAcQ"]
[Tue Apr 21 08:12:13.398327 2026] [:error] [pid 35321:tid 35396] [client 43.134.28.2:49886] [client 43.134.28.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aebA3TeHLhVUuu8cVXxXnAAAAEw"]
[Tue Apr 21 09:18:47.224683 2026] [:error] [pid 5377:tid 5406] [client 101.42.46.71:57274] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aebQd7BKychFlrHBdvtU-AAAAdQ"]
[Tue Apr 21 11:14:06.171361 2026] [:error] [pid 4823:tid 4857] [client 170.106.113.159:54798] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aebrfvc8mke3PfHqsxEj0gAAAYQ"]
[Tue Apr 21 13:57:59.855377 2026] [:error] [pid 4777:tid 4794] [client 104.204.221.23:51478] [client 104.204.221.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aecR56xXur6bykKyLZRhjQAAAQY"]
[Tue Apr 21 13:57:59.873685 2026] [:error] [pid 35415:tid 35427] [client 104.204.221.23:51492] [client 104.204.221.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aecR50iqDinI4_22zzg16wAAAMA"]
[Tue Apr 21 15:30:32.350137 2026] [:error] [pid 35321:tid 35407] [client 45.86.200.228:35201] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aecnmDeHLhVUuu8cVXyP_wAAAFc"]
[Tue Apr 21 15:30:33.177620 2026] [:error] [pid 5377:tid 5409] [client 45.86.200.214:21753] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aecnmbBKychFlrHBdvvX4gAAAdc"]
[Tue Apr 21 15:30:35.087465 2026] [:error] [pid 35320:tid 35334] [client 185.82.72.109:28897] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aecnm4JW6fdXWO6agMEQowAAAAQ"]
[Tue Apr 21 15:30:37.560422 2026] [:error] [pid 4822:tid 4828] [client 45.86.200.214:43303] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aecnnSAteFQFwS_23Jm0OgAAAUI"]
[Tue Apr 21 15:31:17.090150 2026] [:error] [pid 4823:tid 4866] [client 45.86.200.213:60403] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/execute.php"] [unique_id "aecnxfc8mke3PfHqsxGuNAAAAY0"]
[Tue Apr 21 15:31:25.611458 2026] [:error] [pid 5377:tid 5389] [client 45.86.200.250:40849] [client 45.86.200.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aecnzbBKychFlrHBdvvalgAAAcM"]
[Tue Apr 21 15:31:26.146604 2026] [:error] [pid 4822:tid 4849] [client 185.82.72.109:42703] [client 185.82.72.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aecnziAteFQFwS_23Jm1OAAAAVc"]
[Tue Apr 21 15:31:27.000844 2026] [:error] [pid 5377:tid 5390] [client 45.86.200.229:35829] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aecnzrBKychFlrHBdvvasQAAAcQ"]
[Tue Apr 21 15:32:30.265218 2026] [:error] [pid 4777:tid 4797] [client 182.42.105.144:37315] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aecoDqxXur6bykKyLZR_MAAAAQk"]
[Tue Apr 21 15:32:53.883506 2026] [:error] [pid 4777:tid 4797] [client 45.86.200.240:34705] [client 45.86.200.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/elementor/modules/floating-buttons/classes/render/"] [unique_id "aecoJaxXur6bykKyLZR_tgAAAQk"]
[Tue Apr 21 15:37:33.727582 2026] [:error] [pid 35321:tid 35387] [client 213.35.109.170:63373] [client 213.35.109.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-manager/initialize"] [unique_id "aecpPTeHLhVUuu8cVXysCwAAAEM"]
[Tue Apr 21 15:37:39.003807 2026] [:error] [pid 35321:tid 35391] [client 185.82.72.106:38299] [client 185.82.72.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aecpQzeHLhVUuu8cVXysqQAAAEc"]
[Tue Apr 21 15:37:39.859975 2026] [:error] [pid 5377:tid 5406] [client 45.86.200.214:42763] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aecpQ7BKychFlrHBdvvlWgAAAdQ"]
[Tue Apr 21 15:37:41.793663 2026] [:error] [pid 53832:tid 53838] [client 45.86.200.239:62371] [client 45.86.200.239] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aecpRdzkuxsE_OhM9UIXaAAAAkM"]
[Tue Apr 21 15:37:44.293735 2026] [:error] [pid 53832:tid 53857] [client 185.82.72.102:36595] [client 185.82.72.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aecpSNzkuxsE_OhM9UIXmwAAAlY"]
[Tue Apr 21 15:37:45.151608 2026] [:error] [pid 53731:tid 53754] [client 45.86.200.214:30985] [client 45.86.200.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "aecpSV2I9THUR-bRVGzbegAAAhI"]
[Tue Apr 21 15:38:56.647442 2026] [:error] [pid 54080:tid 54090] [client 45.86.200.235:25213] [client 45.86.200.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aecpkIzEbQHHxtmWbaZWeAAAAsg"]
[Tue Apr 21 19:07:54.659285 2026] [:error] [pid 54080:tid 54102] [client 101.32.52.164:56118] [client 101.32.52.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aedaiozEbQHHxtmWbaacdQAAAtQ"]
[Tue Apr 21 19:55:54.263742 2026] [:error] [pid 4777:tid 4791] [client 45.137.126.9:39201] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aedlyqxXur6bykKyLZSk6QAAAQM"]
[Tue Apr 21 19:55:56.724734 2026] [:error] [pid 53731:tid 53757] [client 45.137.126.14:49707] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aedlzF2I9THUR-bRVGxMggAAAhU"]
[Tue Apr 21 19:56:00.807782 2026] [:error] [pid 35320:tid 35349] [client 45.137.126.7:34939] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aedl0IJW6fdXWO6agMGf6wAAABM"]
[Tue Apr 21 19:56:03.253260 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.40:57791] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aedl0zeHLhVUuu8cVXxrggAAAEM"]
[Tue Apr 21 19:56:07.178559 2026] [:error] [pid 35320:tid 35346] [client 45.137.126.44:29645] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aedl14JW6fdXWO6agMGgEAAAABA"]
[Tue Apr 21 19:56:08.656190 2026] [:error] [pid 35321:tid 35389] [client 45.137.126.17:45981] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aedl2DeHLhVUuu8cVXxrmAAAAEU"]
[Tue Apr 21 19:56:09.638388 2026] [:error] [pid 4777:tid 4788] [client 45.137.126.34:61543] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aedl2axXur6bykKyLZSk6wAAAQA"]
[Tue Apr 21 19:56:10.609249 2026] [:error] [pid 53731:tid 53744] [client 45.137.126.11:38243] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aedl2l2I9THUR-bRVGxMpQAAAgk"]
[Tue Apr 21 19:56:11.588692 2026] [:error] [pid 53731:tid 53754] [client 45.137.126.21:31137] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aedl212I9THUR-bRVGxMsAAAAhI"]
[Tue Apr 21 19:56:12.569267 2026] [:error] [pid 35320:tid 35353] [client 45.137.126.32:38753] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aedl3IJW6fdXWO6agMGgHwAAABc"]
[Tue Apr 21 19:56:14.040325 2026] [:error] [pid 54080:tid 54087] [client 45.137.126.9:62639] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aedl3ozEbQHHxtmWbaapnAAAAsU"]
[Tue Apr 21 19:56:16.033496 2026] [:error] [pid 54080:tid 54090] [client 45.137.126.27:63879] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aedl4IzEbQHHxtmWbaapoQAAAsg"]
[Tue Apr 21 19:56:17.997656 2026] [:error] [pid 53731:tid 53737] [client 45.137.126.26:56089] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aedl4V2I9THUR-bRVGxM5wAAAgI"]
[Tue Apr 21 19:56:19.462994 2026] [:error] [pid 53731:tid 53754] [client 45.137.126.53:63305] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aedl412I9THUR-bRVGxM9AAAAhI"]
[Tue Apr 21 19:56:20.938831 2026] [:error] [pid 35320:tid 35346] [client 45.137.126.29:30507] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aedl5IJW6fdXWO6agMGgNgAAABA"]
[Tue Apr 21 19:56:24.875928 2026] [:error] [pid 35320:tid 35335] [client 45.137.126.41:34209] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aedl6IJW6fdXWO6agMGgQAAAAAU"]
[Tue Apr 21 19:56:26.346957 2026] [:error] [pid 53731:tid 53750] [client 45.137.126.13:30929] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aedl6l2I9THUR-bRVGxM_AAAAg8"]
[Tue Apr 21 19:56:28.316791 2026] [:error] [pid 53978:tid 53985] [client 45.137.126.42:34885] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aedl7J1ivsR4hcOSQbYOpgAAAoU"]
[Tue Apr 21 19:56:29.782284 2026] [:error] [pid 35321:tid 35391] [client 45.137.126.12:39111] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aedl7TeHLhVUuu8cVXxr7QAAAEc"]
[Tue Apr 21 19:56:32.736351 2026] [:error] [pid 54080:tid 54084] [client 45.137.126.47:35805] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aedl8IzEbQHHxtmWbaaptQAAAsI"]
[Tue Apr 21 19:56:34.223471 2026] [:error] [pid 53978:tid 53992] [client 45.137.126.17:21003] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aedl8p1ivsR4hcOSQbYOugAAAow"]
[Tue Apr 21 19:56:35.691729 2026] [:error] [pid 35321:tid 35392] [client 45.137.126.38:31295] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aedl8zeHLhVUuu8cVXxsBwAAAEg"]
[Tue Apr 21 19:56:36.667854 2026] [:error] [pid 4823:tid 4860] [client 45.137.126.23:34501] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aedl9Pc8mke3PfHqsxH2ygAAAYc"]
[Tue Apr 21 19:56:37.640340 2026] [:error] [pid 4823:tid 4874] [client 45.137.126.51:62895] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aedl9fc8mke3PfHqsxH2ywAAAZU"]
[Tue Apr 21 19:56:40.089835 2026] [:error] [pid 53978:tid 53989] [client 45.137.126.16:64227] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aedl-J1ivsR4hcOSQbYOyAAAAok"]
[Tue Apr 21 19:56:41.064866 2026] [:error] [pid 4823:tid 4873] [client 45.137.126.51:50369] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aedl-fc8mke3PfHqsxH2zgAAAZQ"]
[Tue Apr 21 19:56:42.049361 2026] [:error] [pid 35321:tid 35391] [client 45.137.126.53:22451] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aedl-jeHLhVUuu8cVXxsWQAAAEc"]
[Tue Apr 21 19:56:46.965412 2026] [:error] [pid 4823:tid 4858] [client 45.137.126.27:37185] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aedl_vc8mke3PfHqsxH22QAAAYU"]
[Tue Apr 21 19:56:49.435014 2026] [:error] [pid 35320:tid 35346] [client 45.137.126.23:33625] [client 45.137.126.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.23, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aedmAYJW6fdXWO6agMGgYwAAABA"]
[Tue Apr 21 19:56:55.310434 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.23:33625] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aedmB4JW6fdXWO6agMGgjQAAAAw"]
[Tue Apr 21 19:56:57.264213 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.9:29213] [client 45.137.126.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.9, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aedmCTeHLhVUuu8cVXxsvgAAAE0"]
[Tue Apr 21 19:56:58.245737 2026] [:error] [pid 35321:tid 35404] [client 45.137.126.9:29213] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aedmCjeHLhVUuu8cVXxsxQAAAFQ"]
[Tue Apr 21 19:57:03.314766 2026] [:error] [pid 53978:tid 53988] [client 45.137.126.36:48593] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aedmD51ivsR4hcOSQbYO7QAAAog"]
[Tue Apr 21 19:57:08.218673 2026] [:error] [pid 53731:tid 53745] [client 45.137.126.20:39899] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aedmFF2I9THUR-bRVGxNQAAAAgo"]
[Tue Apr 21 19:57:10.171879 2026] [:error] [pid 35320:tid 35353] [client 45.137.126.39:32505] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aedmFoJW6fdXWO6agMGguQAAABc"]
[Tue Apr 21 19:57:12.630498 2026] [:error] [pid 53832:tid 53851] [client 45.137.126.23:56357] [client 45.137.126.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.23, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aedmGNzkuxsE_OhM9UJh9AAAAlA"]
[Tue Apr 21 19:57:13.122949 2026] [:error] [pid 53832:tid 53847] [client 45.137.126.23:56357] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aedmGdzkuxsE_OhM9UJh9gAAAkw"]
[Tue Apr 21 19:57:22.428797 2026] [:error] [pid 53978:tid 53981] [client 45.137.126.32:34339] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aedmIp1ivsR4hcOSQbYPMwAAAoE"]
[Tue Apr 21 19:57:24.874592 2026] [:error] [pid 35321:tid 35402] [client 45.137.126.11:35233] [client 45.137.126.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.11, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aedmJDeHLhVUuu8cVXxs4AAAAFI"]
[Tue Apr 21 19:57:26.833132 2026] [:error] [pid 35321:tid 35405] [client 45.137.126.11:35233] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aedmJjeHLhVUuu8cVXxs7AAAAFU"]
[Tue Apr 21 19:57:28.293196 2026] [:error] [pid 53978:tid 54004] [client 45.137.126.40:53229] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aedmKJ1ivsR4hcOSQbYPRAAAApg"]
[Tue Apr 21 19:57:30.238670 2026] [:error] [pid 35320:tid 35332] [client 45.137.126.11:37469] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aedmKoJW6fdXWO6agMGg1QAAAAI"]
[Tue Apr 21 19:57:32.799363 2026] [:error] [pid 54080:tid 54086] [client 45.137.126.15:48847] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aedmLIzEbQHHxtmWbaap4wAAAsQ"]
[Tue Apr 21 19:57:33.769199 2026] [:error] [pid 53832:tid 53846] [client 45.137.126.8:39651] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aedmLdzkuxsE_OhM9UJiEgAAAks"]
[Tue Apr 21 19:57:37.195087 2026] [:error] [pid 35321:tid 35388] [client 45.137.126.16:30111] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aedmMTeHLhVUuu8cVXxtAwAAAEQ"]
[Tue Apr 21 19:57:38.660377 2026] [:error] [pid 53731:tid 53758] [client 45.137.126.18:25275] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aedmMl2I9THUR-bRVGxNXwAAAhY"]
[Tue Apr 21 19:57:41.131826 2026] [:error] [pid 35320:tid 35330] [client 45.137.126.42:50963] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aedmNYJW6fdXWO6agMGg-AAAAAA"]
[Tue Apr 21 19:57:43.574906 2026] [:error] [pid 4823:tid 4854] [client 45.137.126.49:64063] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aedmN_c8mke3PfHqsxH3DwAAAYE"]
[Tue Apr 21 19:57:45.545062 2026] [:error] [pid 4777:tid 4811] [client 45.137.126.4:30441] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aedmOaxXur6bykKyLZSlTAAAARc"]
[Tue Apr 21 19:57:47.995474 2026] [:error] [pid 53731:tid 53756] [client 45.137.126.41:63071] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aedmO12I9THUR-bRVGxNbgAAAhQ"]
[Tue Apr 21 19:57:52.441113 2026] [:error] [pid 35415:tid 35444] [client 45.137.126.3:60551] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aedmQEiqDinI4_22zzhuwgAAANE"]
[Tue Apr 21 19:57:53.416367 2026] [:error] [pid 53978:tid 53999] [client 45.137.126.29:35969] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aedmQZ1ivsR4hcOSQbYPYAAAApM"]
[Tue Apr 21 19:57:54.388722 2026] [:error] [pid 4777:tid 4798] [client 45.137.126.5:39335] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aedmQqxXur6bykKyLZSlTgAAAQo"]
[Tue Apr 21 19:57:55.359538 2026] [:error] [pid 53731:tid 53749] [client 45.137.126.22:42271] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aedmQ12I9THUR-bRVGxNfwAAAg4"]
[Tue Apr 21 19:57:56.829688 2026] [:error] [pid 53731:tid 53753] [client 45.137.126.29:51559] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aedmRF2I9THUR-bRVGxNhgAAAhE"]
[Tue Apr 21 19:57:57.805542 2026] [:error] [pid 53832:tid 53851] [client 45.137.126.42:22655] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aedmRdzkuxsE_OhM9UJiKwAAAlA"]
[Tue Apr 21 19:57:59.764368 2026] [:error] [pid 35321:tid 35392] [client 45.137.126.48:24231] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aedmRzeHLhVUuu8cVXxtSAAAAEg"]
[Tue Apr 21 19:58:00.739657 2026] [:error] [pid 35322:tid 35372] [client 45.137.126.14:59657] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aedmSKPoAfV40BTfVKzYlQAAAI8"]
[Tue Apr 21 19:58:01.785330 2026] [:error] [pid 53832:tid 53837] [client 45.137.126.34:30447] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aedmSdzkuxsE_OhM9UJiMQAAAkI"]
[Tue Apr 21 19:58:02.767308 2026] [:error] [pid 54080:tid 54105] [client 45.137.126.8:59603] [client 45.137.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aedmSozEbQHHxtmWbaaqAgAAAtc"]
[Tue Apr 21 19:58:04.238019 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.23:61467] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aedmTDeHLhVUuu8cVXxtZwAAAEk"]
[Tue Apr 21 19:58:06.200897 2026] [:error] [pid 35320:tid 35337] [client 45.137.126.46:64005] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aedmToJW6fdXWO6agMGhBAAAAAc"]
[Tue Apr 21 19:58:09.155167 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.41:52933] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aedmUYJW6fdXWO6agMGhEwAAAAE"]
[Tue Apr 21 19:58:13.576145 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.27:63847] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aedmVTeHLhVUuu8cVXxtmwAAAFc"]
[Tue Apr 21 19:58:16.022586 2026] [:error] [pid 35321:tid 35398] [client 45.137.126.52:50909] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aedmWDeHLhVUuu8cVXxtsQAAAE4"]
[Tue Apr 21 19:58:16.993422 2026] [:error] [pid 35321:tid 35392] [client 45.137.126.12:56803] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aedmWDeHLhVUuu8cVXxtuQAAAEg"]
[Tue Apr 21 19:58:19.972286 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.41:27175] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aedmWzeHLhVUuu8cVXxtygAAAEw"]
[Tue Apr 21 19:58:22.443288 2026] [proxy_fcgi:error] [pid 53832:tid 53836] [client 45.137.126.25:30295] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 19:58:22.946420 2026] [proxy_fcgi:error] [pid 53832:tid 53835] [client 45.137.126.25:30295] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 19:58:23.439110 2026] [proxy_fcgi:error] [pid 53832:tid 53847] [client 45.137.126.25:30295] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 19:58:25.906361 2026] [:error] [pid 53832:tid 53840] [client 45.137.126.25:30295] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aedmYdzkuxsE_OhM9UJiSgAAAkU"]
[Tue Apr 21 19:58:26.879762 2026] [:error] [pid 4777:tid 4805] [client 45.137.126.27:38441] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aedmYqxXur6bykKyLZSlWAAAARE"]
[Tue Apr 21 19:58:27.853977 2026] [:error] [pid 4823:tid 4855] [client 45.137.126.34:50329] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aedmY_c8mke3PfHqsxH3IgAAAYI"]
[Tue Apr 21 19:58:28.828250 2026] [:error] [pid 53731:tid 53756] [client 45.137.126.9:52823] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aedmZF2I9THUR-bRVGxNrAAAAhQ"]
[Tue Apr 21 19:58:29.804107 2026] [:error] [pid 54080:tid 54099] [client 45.137.126.52:22983] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aedmZYzEbQHHxtmWbaaqGwAAAtE"]
[Tue Apr 21 19:58:30.791662 2026] [:error] [pid 35320:tid 35336] [client 45.137.126.28:63979] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aedmZoJW6fdXWO6agMGhNgAAAAY"]
[Tue Apr 21 19:58:32.272855 2026] [:error] [pid 53731:tid 53745] [client 45.137.126.51:59501] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aedmaF2I9THUR-bRVGxNsgAAAgo"]
[Tue Apr 21 19:58:33.243949 2026] [:error] [pid 35321:tid 35389] [client 45.137.126.51:51371] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aedmaTeHLhVUuu8cVXxt0wAAAEU"]
[Tue Apr 21 19:58:34.234691 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.51:54197] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aedmaoJW6fdXWO6agMGhRgAAAAw"]
[Tue Apr 21 19:58:35.219535 2026] [:error] [pid 35321:tid 35399] [client 45.137.126.52:49487] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aedmazeHLhVUuu8cVXxt1wAAAE8"]
[Tue Apr 21 19:58:37.167437 2026] [:error] [pid 54080:tid 54102] [client 45.137.126.42:49859] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aedmbYzEbQHHxtmWbaaqIQAAAtQ"]
[Tue Apr 21 19:58:38.643140 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.23:30749] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aedmbjeHLhVUuu8cVXxt6QAAAE0"]
[Tue Apr 21 19:58:40.600422 2026] [:error] [pid 35321:tid 35406] [client 45.137.126.31:56991] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aedmcDeHLhVUuu8cVXxt_AAAAFY"]
[Tue Apr 21 19:58:42.563830 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.30:38647] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aedmcjeHLhVUuu8cVXxuBQAAAEo"]
[Tue Apr 21 19:58:45.025353 2026] [:error] [pid 53978:tid 54000] [client 45.137.126.25:49657] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aedmdZ1ivsR4hcOSQbYP6QAAApQ"]
[Tue Apr 21 19:58:47.960838 2026] [:error] [pid 35321:tid 35408] [client 45.137.126.27:22599] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aedmdzeHLhVUuu8cVXxuDwAAAFg"]
[Tue Apr 21 19:58:49.423363 2026] [:error] [pid 35320:tid 35333] [client 45.137.126.48:32523] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aedmeYJW6fdXWO6agMGhdgAAAAM"]
[Tue Apr 21 19:58:58.276896 2026] [:error] [pid 53731:tid 53756] [client 45.137.126.51:56377] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aedmgl2I9THUR-bRVGxN7wAAAhQ"]
[Tue Apr 21 19:58:59.252982 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.30:46227] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aedmg12I9THUR-bRVGxN9AAAAgA"]
[Tue Apr 21 19:59:00.850084 2026] [:error] [pid 54080:tid 54087] [client 45.137.126.28:50299] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aedmhIzEbQHHxtmWbaaqJwAAAsU"]
[Tue Apr 21 19:59:02.812032 2026] [:error] [pid 35322:tid 35362] [client 45.137.126.34:30351] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aedmhqPoAfV40BTfVKzYnwAAAIU"]
[Tue Apr 21 19:59:03.784476 2026] [:error] [pid 53978:tid 54000] [client 45.137.126.45:46199] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aedmh51ivsR4hcOSQbYP8AAAApQ"]
[Tue Apr 21 19:59:06.750818 2026] [:error] [pid 53978:tid 54001] [client 45.137.126.21:49331] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aedmip1ivsR4hcOSQbYP_gAAApU"]
[Tue Apr 21 19:59:07.722814 2026] [:error] [pid 54080:tid 54093] [client 45.137.126.7:52673] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aedmi4zEbQHHxtmWbaaqLQAAAss"]
[Tue Apr 21 19:59:11.140771 2026] [:error] [pid 54080:tid 54088] [client 45.137.126.45:35937] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aedmj4zEbQHHxtmWbaaqPAAAAsY"]
[Tue Apr 21 19:59:12.632990 2026] [proxy_fcgi:error] [pid 35321:tid 35402] [client 45.137.126.38:32379] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 19:59:13.616007 2026] [:error] [pid 35321:tid 35391] [client 45.137.126.38:32379] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aedmkTeHLhVUuu8cVXxuKAAAAEc"]
[Tue Apr 21 19:59:14.587179 2026] [:error] [pid 35320:tid 35352] [client 45.137.126.16:23151] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aedmkoJW6fdXWO6agMGhhgAAABY"]
[Tue Apr 21 19:59:16.536390 2026] [:error] [pid 35321:tid 35385] [client 45.137.126.19:45933] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aedmlDeHLhVUuu8cVXxuMAAAAEE"]
[Tue Apr 21 19:59:17.518922 2026] [:error] [pid 53978:tid 53996] [client 45.137.126.29:53759] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aedmlZ1ivsR4hcOSQbYQAwAAApA"]
[Tue Apr 21 19:59:21.943572 2026] [:error] [pid 4823:tid 4855] [client 45.137.126.2:51599] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aedmmfc8mke3PfHqsxH3RQAAAYI"]
[Tue Apr 21 19:59:22.930146 2026] [:error] [pid 35321:tid 35390] [client 45.137.126.27:53055] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aedmmjeHLhVUuu8cVXxuPAAAAEY"]
[Tue Apr 21 19:59:25.863932 2026] [:error] [pid 35321:tid 35386] [client 45.137.126.49:35139] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aedmnTeHLhVUuu8cVXxuSAAAAEI"]
[Tue Apr 21 19:59:26.841479 2026] [:error] [pid 35320:tid 35330] [client 45.137.126.40:53875] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aedmnoJW6fdXWO6agMGhmAAAAAA"]
[Tue Apr 21 19:59:27.818152 2026] [:error] [pid 4823:tid 4873] [client 45.137.126.50:60209] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aedmn_c8mke3PfHqsxH3SQAAAZQ"]
[Tue Apr 21 19:59:31.379085 2026] [:error] [pid 53978:tid 54002] [client 45.137.126.48:28579] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aedmo51ivsR4hcOSQbYQIQAAApY"]
[Tue Apr 21 19:59:32.850425 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.24:47679] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aedmpIJW6fdXWO6agMGhogAAAAE"]
[Tue Apr 21 19:59:37.265005 2026] [:error] [pid 35321:tid 35391] [client 45.137.126.11:58009] [client 45.137.126.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.11, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aedmqTeHLhVUuu8cVXxuYgAAAEc"]
[Tue Apr 21 19:59:40.230165 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.11:58009] [client 45.137.126.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.11, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aedmrDeHLhVUuu8cVXxubQAAAEo"]
[Tue Apr 21 19:59:45.653517 2026] [proxy_fcgi:error] [pid 35321:tid 35391] [client 45.137.126.11:58009] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 19:59:54.178094 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.11:58009] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aedmujeHLhVUuu8cVXxuqwAAAEk"]
[Tue Apr 21 19:59:56.630556 2026] [:error] [pid 35320:tid 35348] [client 45.137.126.43:23941] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aedmvIJW6fdXWO6agMGhuQAAABI"]
[Tue Apr 21 19:59:58.608801 2026] [:error] [pid 54080:tid 54083] [client 45.137.126.36:59499] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aedmvozEbQHHxtmWbaaqewAAAsE"]
[Tue Apr 21 20:00:04.130895 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.16:41445] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aedmxDeHLhVUuu8cVXxu1AAAAEk"]
[Tue Apr 21 20:00:06.146738 2026] [:error] [pid 35320:tid 35339] [client 45.137.126.19:35589] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aedmxoJW6fdXWO6agMGh0QAAAAk"]
[Tue Apr 21 20:00:07.623005 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.30:29657] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aedmx4JW6fdXWO6agMGh4wAAAAE"]
[Tue Apr 21 20:00:10.588121 2026] [proxy_fcgi:error] [pid 35321:tid 35395] [client 45.137.126.50:28611] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:00:11.080552 2026] [proxy_fcgi:error] [pid 35321:tid 35389] [client 45.137.126.50:28611] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:00:11.568381 2026] [:error] [pid 35321:tid 35403] [client 45.137.126.50:28611] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aedmyzeHLhVUuu8cVXxvHgAAAFM"]
[Tue Apr 21 20:00:12.542632 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.16:59277] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aedmzDeHLhVUuu8cVXxvIwAAAEM"]
[Tue Apr 21 20:00:16.984991 2026] [:error] [pid 35320:tid 35332] [client 45.137.126.45:46967] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aedm0IJW6fdXWO6agMGiBAAAAAI"]
[Tue Apr 21 20:00:18.452405 2026] [:error] [pid 53731:tid 53760] [client 45.137.126.43:27521] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aedm0l2I9THUR-bRVGxOQQAAAhg"]
[Tue Apr 21 20:00:20.918088 2026] [:error] [pid 35320:tid 35335] [client 45.137.126.3:53459] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aedm1IJW6fdXWO6agMGiDQAAAAU"]
[Tue Apr 21 20:00:25.358116 2026] [:error] [pid 53978:tid 53991] [client 45.137.126.23:38699] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aedm2Z1ivsR4hcOSQbYQTgAAAos"]
[Tue Apr 21 20:00:26.334916 2026] [proxy_fcgi:error] [pid 35321:tid 35406] [client 45.137.126.40:43561] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:00:30.268891 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.40:43561] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aedm3jeHLhVUuu8cVXxvbAAAAEw"]
[Tue Apr 21 20:00:33.958919 2026] [proxy_fcgi:error] [pid 35321:tid 35387] [client 45.137.126.9:37177] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:00:34.942988 2026] [:error] [pid 35321:tid 35398] [client 45.137.126.9:37177] [client 45.137.126.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.9, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aedm4jeHLhVUuu8cVXxvgwAAAE4"]
[Tue Apr 21 20:00:37.451869 2026] [:error] [pid 35321:tid 35408] [client 45.137.126.9:37177] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aedm5TeHLhVUuu8cVXxvkAAAAFg"]
[Tue Apr 21 20:00:38.938820 2026] [:error] [pid 35320:tid 35334] [client 45.137.126.3:55681] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aedm5oJW6fdXWO6agMGiIAAAAAQ"]
[Tue Apr 21 20:00:41.962849 2026] [:error] [pid 35321:tid 35406] [client 45.137.126.32:39129] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aedm6TeHLhVUuu8cVXxvpgAAAFY"]
[Tue Apr 21 20:00:44.417008 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.50:56543] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aedm7IJW6fdXWO6agMGiMAAAAAw"]
[Tue Apr 21 20:00:45.389359 2026] [:error] [pid 53832:tid 53841] [client 45.137.126.22:53795] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aedm7dzkuxsE_OhM9UJioAAAAkY"]
[Tue Apr 21 20:00:47.842398 2026] [:error] [pid 4823:tid 4856] [client 45.137.126.3:39731] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aedm7_c8mke3PfHqsxH3cQAAAYM"]
[Tue Apr 21 20:00:49.806176 2026] [proxy_fcgi:error] [pid 35320:tid 35350] [client 45.137.126.41:42875] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:00:50.300379 2026] [:error] [pid 35320:tid 35351] [client 45.137.126.41:42875] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aedm8oJW6fdXWO6agMGiQAAAABU"]
[Tue Apr 21 20:00:51.766005 2026] [:error] [pid 53731:tid 53753] [client 45.137.126.18:40807] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aedm812I9THUR-bRVGxOZgAAAhE"]
[Tue Apr 21 20:00:52.750008 2026] [:error] [pid 35321:tid 35403] [client 45.137.126.13:64825] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aedm9DeHLhVUuu8cVXxvywAAAFM"]
[Tue Apr 21 20:00:53.742547 2026] [:error] [pid 35321:tid 35395] [client 45.137.126.34:63121] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aedm9TeHLhVUuu8cVXxvzwAAAEs"]
[Tue Apr 21 20:00:54.713844 2026] [:error] [pid 35321:tid 35403] [client 45.137.126.40:62721] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aedm9jeHLhVUuu8cVXxv2AAAAFM"]
[Tue Apr 21 20:00:55.691121 2026] [:error] [pid 53832:tid 53838] [client 45.137.126.6:58807] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aedm99zkuxsE_OhM9UJiogAAAkM"]
[Tue Apr 21 20:00:56.663614 2026] [:error] [pid 53978:tid 54002] [client 45.137.126.16:34755] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aedm-J1ivsR4hcOSQbYQWgAAApY"]
[Tue Apr 21 20:00:58.630583 2026] [:error] [pid 35320:tid 35344] [client 45.137.126.47:23295] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aedm-oJW6fdXWO6agMGiTQAAAA4"]
[Tue Apr 21 20:00:59.612989 2026] [:error] [pid 53731:tid 53749] [client 45.137.126.37:23023] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aedm-12I9THUR-bRVGxOhgAAAg4"]
[Tue Apr 21 20:01:00.589961 2026] [:error] [pid 35320:tid 35334] [client 45.137.126.29:26095] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aedm_IJW6fdXWO6agMGiUwAAAAQ"]
[Tue Apr 21 20:01:01.606444 2026] [:error] [pid 35320:tid 35350] [client 45.137.126.44:52857] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aedm_YJW6fdXWO6agMGiVwAAABQ"]
[Tue Apr 21 20:01:02.578126 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.24:60825] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aedm_jeHLhVUuu8cVXxv7QAAAEw"]
[Tue Apr 21 20:01:03.553191 2026] [proxy_fcgi:error] [pid 35320:tid 35346] [client 45.137.126.4:54227] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:01:05.034106 2026] [:error] [pid 35320:tid 35351] [client 45.137.126.4:54227] [client 45.137.126.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.4, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aednAYJW6fdXWO6agMGiZAAAABU"]
[Tue Apr 21 20:01:07.509979 2026] [:error] [pid 35320:tid 35348] [client 45.137.126.4:54227] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aednA4JW6fdXWO6agMGibAAAABI"]
[Tue Apr 21 20:01:16.364247 2026] [:error] [pid 54080:tid 54087] [client 45.137.126.17:28449] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aednDIzEbQHHxtmWbaaqxQAAAsU"]
[Tue Apr 21 20:01:17.338135 2026] [:error] [pid 35320:tid 35345] [client 45.137.126.9:64379] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aednDYJW6fdXWO6agMGiegAAAA8"]
[Tue Apr 21 20:01:18.323118 2026] [:error] [pid 35415:tid 35445] [client 45.137.126.49:60421] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aednDkiqDinI4_22zzhvGAAAANI"]
[Tue Apr 21 20:01:23.874904 2026] [:error] [pid 35415:tid 35440] [client 45.137.126.46:23369] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aednE0iqDinI4_22zzhvJAAAAM0"]
[Tue Apr 21 20:01:24.858543 2026] [:error] [pid 4823:tid 4876] [client 45.137.126.42:26047] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aednFPc8mke3PfHqsxH3fQAAAZc"]
[Tue Apr 21 20:01:25.868103 2026] [:error] [pid 54080:tid 54087] [client 45.137.126.15:55373] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aednFYzEbQHHxtmWbaaq7QAAAsU"]
[Tue Apr 21 20:01:28.807906 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.41:54359] [client 45.137.126.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aednGIJW6fdXWO6agMGikQAAAAw"]
[Tue Apr 21 20:01:30.265189 2026] [:error] [pid 54080:tid 54090] [client 45.137.126.42:40419] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aednGozEbQHHxtmWbaaq-wAAAsg"]
[Tue Apr 21 20:01:32.353680 2026] [:error] [pid 35320:tid 35349] [client 45.137.126.19:20003] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aednHIJW6fdXWO6agMGinwAAABM"]
[Tue Apr 21 20:01:38.770362 2026] [:error] [pid 35320:tid 35332] [client 45.137.126.17:62185] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aednIoJW6fdXWO6agMGjKwAAAAI"]
[Tue Apr 21 20:01:40.244865 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.7:63817] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aednJDeHLhVUuu8cVXxwSgAAAE0"]
[Tue Apr 21 20:01:44.207913 2026] [:error] [pid 35320:tid 35347] [client 45.137.126.25:26045] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aednKIJW6fdXWO6agMGjVQAAABE"]
[Tue Apr 21 20:01:48.398680 2026] [:error] [pid 35321:tid 35395] [client 45.137.126.23:33039] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aednLDeHLhVUuu8cVXxwZwAAAEs"]
[Tue Apr 21 20:01:51.362294 2026] [:error] [pid 35321:tid 35394] [client 45.137.126.11:30939] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aednLzeHLhVUuu8cVXxwdwAAAEo"]
[Tue Apr 21 20:01:54.329173 2026] [:error] [pid 53731:tid 53752] [client 45.137.126.26:42265] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aednMl2I9THUR-bRVGxO3QAAAhA"]
[Tue Apr 21 20:01:56.295154 2026] [:error] [pid 35320:tid 35352] [client 45.137.126.50:27261] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aednNIJW6fdXWO6agMGjYwAAABY"]
[Tue Apr 21 20:01:57.277170 2026] [:error] [pid 35320:tid 35349] [client 45.137.126.24:27589] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aednNYJW6fdXWO6agMGjZwAAABM"]
[Tue Apr 21 20:02:00.841180 2026] [:error] [pid 54080:tid 54092] [client 45.137.126.2:60439] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aednOIzEbQHHxtmWbaarNAAAAso"]
[Tue Apr 21 20:02:04.283293 2026] [:error] [pid 4777:tid 4796] [client 45.137.126.33:39975] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aednPKxXur6bykKyLZSlqAAAAQg"]
[Tue Apr 21 20:02:07.230182 2026] [:error] [pid 35320:tid 35334] [client 45.137.126.39:54533] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aednP4JW6fdXWO6agMGjggAAAAQ"]
[Tue Apr 21 20:02:08.205025 2026] [:error] [pid 4823:tid 4856] [client 45.137.126.48:51561] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aednQPc8mke3PfHqsxH3mAAAAYM"]
[Tue Apr 21 20:02:09.667116 2026] [:error] [pid 53978:tid 53989] [client 45.137.126.51:60955] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aednQZ1ivsR4hcOSQbYQqAAAAok"]
[Tue Apr 21 20:02:11.628772 2026] [:error] [pid 35415:tid 35442] [client 45.137.126.17:25115] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aednQ0iqDinI4_22zzhvNQAAAM8"]
[Tue Apr 21 20:02:12.618706 2026] [:error] [pid 35321:tid 35384] [client 45.137.126.30:32607] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aednRDeHLhVUuu8cVXxwqAAAAEA"]
[Tue Apr 21 20:02:16.541984 2026] [:error] [pid 4777:tid 4799] [client 45.137.126.20:62457] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aednSKxXur6bykKyLZSlsQAAAQs"]
[Tue Apr 21 20:02:18.531521 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.49:45591] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aednSjeHLhVUuu8cVXxwxwAAAE0"]
[Tue Apr 21 20:02:19.533202 2026] [:error] [pid 54080:tid 54082] [client 45.137.126.47:61271] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aednS4zEbQHHxtmWbaarRQAAAsA"]
[Tue Apr 21 20:02:21.507718 2026] [:error] [pid 53731:tid 53742] [client 45.137.126.28:38767] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aednTV2I9THUR-bRVGxPFQAAAgc"]
[Tue Apr 21 20:02:22.974591 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.10:24101] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aednTjeHLhVUuu8cVXxw3wAAAFc"]
[Tue Apr 21 20:02:26.422388 2026] [:error] [pid 4823:tid 4869] [client 45.137.126.44:59263] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aednUvc8mke3PfHqsxH3qQAAAZA"]
[Tue Apr 21 20:02:28.421874 2026] [:error] [pid 35320:tid 35350] [client 45.137.126.6:47309] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aednVIJW6fdXWO6agMGjnAAAABQ"]
[Tue Apr 21 20:02:30.383114 2026] [:error] [pid 35322:tid 35357] [client 45.137.126.25:55981] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aednVqPoAfV40BTfVKzY2wAAAIA"]
[Tue Apr 21 20:02:32.011158 2026] [:error] [pid 4777:tid 4790] [client 45.137.126.47:39597] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aednWKxXur6bykKyLZSluAAAAQI"]
[Tue Apr 21 20:02:33.506635 2026] [:error] [pid 53731:tid 53741] [client 45.137.126.49:41365] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aednWV2I9THUR-bRVGxPMwAAAgY"]
[Tue Apr 21 20:02:34.525192 2026] [:error] [pid 35320:tid 35354] [client 45.137.126.12:30993] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aednWoJW6fdXWO6agMGjowAAABg"]
[Tue Apr 21 20:02:35.497568 2026] [:error] [pid 54080:tid 54084] [client 45.137.126.18:33635] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aednW4zEbQHHxtmWbaarXQAAAsI"]
[Tue Apr 21 20:02:39.424371 2026] [:error] [pid 35321:tid 35398] [client 45.137.126.10:32249] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aednXzeHLhVUuu8cVXxxDQAAAE4"]
[Tue Apr 21 20:02:41.891110 2026] [:error] [pid 35415:tid 35430] [client 45.137.126.23:24283] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aednYUiqDinI4_22zzhvQAAAAMM"]
[Tue Apr 21 20:02:43.860041 2026] [:error] [pid 53731:tid 53744] [client 45.137.126.46:63349] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aednY12I9THUR-bRVGxPOwAAAgk"]
[Tue Apr 21 20:02:45.847853 2026] [:error] [pid 35415:tid 35444] [client 45.137.126.13:65463] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aednZUiqDinI4_22zzhvRAAAANE"]
[Tue Apr 21 20:02:49.307890 2026] [:error] [pid 53978:tid 53980] [client 45.137.126.9:31371] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aednaZ1ivsR4hcOSQbYQ5gAAAoA"]
[Tue Apr 21 20:02:50.778743 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.40:49889] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aednaoJW6fdXWO6agMGjtgAAAAs"]
[Tue Apr 21 20:02:52.256179 2026] [:error] [pid 35320:tid 35351] [client 45.137.126.47:22317] [client 45.137.126.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aednbIJW6fdXWO6agMGjvwAAABU"]
[Tue Apr 21 20:02:54.213528 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.44:54311] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aednbjeHLhVUuu8cVXxxPgAAAE0"]
[Tue Apr 21 20:02:59.124017 2026] [:error] [pid 53731:tid 53755] [client 45.137.126.26:62343] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aednc12I9THUR-bRVGxPSwAAAhM"]
[Tue Apr 21 20:03:00.094635 2026] [:error] [pid 35321:tid 35398] [client 45.137.126.3:41933] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aedndDeHLhVUuu8cVXxxVwAAAE4"]
[Tue Apr 21 20:03:02.707552 2026] [:error] [pid 4823:tid 4864] [client 45.137.126.18:42207] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aedndvc8mke3PfHqsxH3wwAAAYs"]
[Tue Apr 21 20:03:03.685064 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.6:26393] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aednd4JW6fdXWO6agMGjywAAAAs"]
[Tue Apr 21 20:03:05.682211 2026] [:error] [pid 4823:tid 4862] [client 45.137.126.34:25257] [client 45.137.126.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aednefc8mke3PfHqsxH3yQAAAYk"]
[Tue Apr 21 20:03:06.659560 2026] [:error] [pid 35320:tid 35332] [client 45.137.126.23:27541] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aedneoJW6fdXWO6agMGjzQAAAAI"]
[Tue Apr 21 20:03:07.634069 2026] [:error] [pid 54080:tid 54085] [client 45.137.126.28:26793] [client 45.137.126.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.28, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aedne4zEbQHHxtmWbaardwAAAsM"]
[Tue Apr 21 20:03:07.638593 2026] [proxy_fcgi:error] [pid 54080:tid 54085] [client 45.137.126.28:26793] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:03:08.130158 2026] [:error] [pid 54080:tid 54102] [client 45.137.126.28:26793] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aednfIzEbQHHxtmWbaareAAAAtQ"]
[Tue Apr 21 20:03:10.086838 2026] [:error] [pid 35320:tid 35337] [client 45.137.126.17:32195] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aednfoJW6fdXWO6agMGj0QAAAAc"]
[Tue Apr 21 20:03:11.145293 2026] [:error] [pid 35321:tid 35388] [client 45.137.126.49:59227] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aednfzeHLhVUuu8cVXxxhgAAAEQ"]
[Tue Apr 21 20:03:15.568988 2026] [:error] [pid 54080:tid 54088] [client 45.137.126.42:20437] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aedng4zEbQHHxtmWbaariQAAAsY"]
[Tue Apr 21 20:03:16.551630 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.37:23581] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aednhDeHLhVUuu8cVXxxjAAAAFc"]
[Tue Apr 21 20:03:18.505125 2026] [:error] [pid 4823:tid 4869] [client 45.137.126.20:48061] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aednhvc8mke3PfHqsxH3zwAAAZA"]
[Tue Apr 21 20:03:19.478996 2026] [:error] [pid 35322:tid 35380] [client 45.137.126.53:37009] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aednh6PoAfV40BTfVKzY6wAAAJc"]
[Tue Apr 21 20:03:20.457412 2026] [proxy_fcgi:error] [pid 4777:tid 4805] [client 45.137.126.33:49397] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:03:20.944339 2026] [:error] [pid 4777:tid 4812] [client 45.137.126.33:49397] [client 45.137.126.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.33, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aedniKxXur6bykKyLZSl1gAAARg"]
[Tue Apr 21 20:03:21.932851 2026] [:error] [pid 4777:tid 4791] [client 45.137.126.33:49397] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aedniaxXur6bykKyLZSl2AAAAQM"]
[Tue Apr 21 20:03:24.407286 2026] [:error] [pid 35321:tid 35392] [client 45.137.126.48:33381] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aednjDeHLhVUuu8cVXxxrQAAAEg"]
[Tue Apr 21 20:03:25.874061 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.2:65297] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aednjTeHLhVUuu8cVXxxtwAAAEw"]
[Tue Apr 21 20:03:26.855445 2026] [:error] [pid 35321:tid 35393] [client 45.137.126.13:64197] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aednjjeHLhVUuu8cVXxxvAAAAEk"]
[Tue Apr 21 20:03:29.323046 2026] [:error] [pid 35415:tid 35434] [client 45.137.126.36:51367] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aednkUiqDinI4_22zzhvTQAAAMc"]
[Tue Apr 21 20:03:31.302825 2026] [:error] [pid 53978:tid 53982] [client 45.137.126.21:29187] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aednk51ivsR4hcOSQbYRCQAAAoI"]
[Tue Apr 21 20:03:36.661655 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.27:32503] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aednmDeHLhVUuu8cVXxyCAAAAEw"]
[Tue Apr 21 20:03:37.635087 2026] [:error] [pid 54080:tid 54093] [client 45.137.126.52:20889] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aednmYzEbQHHxtmWbaarlwAAAss"]
[Tue Apr 21 20:03:39.106506 2026] [:error] [pid 35415:tid 35445] [client 45.137.126.28:22035] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aednm0iqDinI4_22zzhvTwAAANI"]
[Tue Apr 21 20:03:43.029974 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.28:26639] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aednnzeHLhVUuu8cVXxyHAAAAE0"]
[Tue Apr 21 20:03:44.991223 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.45:31321] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aednoDeHLhVUuu8cVXxyIAAAAFc"]
[Tue Apr 21 20:03:45.482187 2026] [:error] [pid 35321:tid 35395] [client 45.137.126.45:31321] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aednoTeHLhVUuu8cVXxyIwAAAEs"]
[Tue Apr 21 20:03:47.441165 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.39:33195] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aedno4JW6fdXWO6agMGkJwAAAAs"]
[Tue Apr 21 20:03:48.427087 2026] [:error] [pid 53832:tid 53842] [client 45.137.126.10:28775] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aednpNzkuxsE_OhM9UJjZwAAAkc"]
[Tue Apr 21 20:03:52.366538 2026] [:error] [pid 35321:tid 35389] [client 45.137.126.11:39347] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aednqDeHLhVUuu8cVXxyVAAAAEU"]
[Tue Apr 21 20:03:54.323030 2026] [:error] [pid 53731:tid 53745] [client 45.137.126.10:26283] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aednql2I9THUR-bRVGxPdQAAAgo"]
[Tue Apr 21 20:03:55.796084 2026] [:error] [pid 53731:tid 53739] [client 45.137.126.28:55197] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aednq12I9THUR-bRVGxPegAAAgQ"]
[Tue Apr 21 20:03:59.268658 2026] [:error] [pid 35321:tid 35388] [client 45.137.126.28:36741] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aednrzeHLhVUuu8cVXxydgAAAEQ"]
[Tue Apr 21 20:04:00.255521 2026] [:error] [pid 4823:tid 4854] [client 45.137.126.29:54463] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aednsPc8mke3PfHqsxH33AAAAYE"]
[Tue Apr 21 20:04:01.838606 2026] [:error] [pid 35322:tid 35361] [client 45.137.126.4:35229] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aednsaPoAfV40BTfVKzY-gAAAIQ"]
[Tue Apr 21 20:04:02.813404 2026] [:error] [pid 35321:tid 35398] [client 45.137.126.36:61637] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aednsjeHLhVUuu8cVXxygAAAAE4"]
[Tue Apr 21 20:04:04.768584 2026] [:error] [pid 53832:tid 53845] [client 45.137.126.35:26013] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aedntNzkuxsE_OhM9UJjcgAAAko"]
[Tue Apr 21 20:04:06.720890 2026] [:error] [pid 53731:tid 53736] [client 45.137.126.16:29053] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aedntl2I9THUR-bRVGxPjQAAAgE"]
[Tue Apr 21 20:04:07.692018 2026] [:error] [pid 54080:tid 54098] [client 45.137.126.43:41689] [client 45.137.126.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aednt4zEbQHHxtmWbaaruQAAAtA"]
[Tue Apr 21 20:04:10.659160 2026] [:error] [pid 35320:tid 35339] [client 45.137.126.25:44161] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aednuoJW6fdXWO6agMGkRQAAAAk"]
[Tue Apr 21 20:04:12.620419 2026] [:error] [pid 53731:tid 53750] [client 45.137.126.53:22969] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aednvF2I9THUR-bRVGxPlgAAAg8"]
[Tue Apr 21 20:04:15.067667 2026] [:error] [pid 35321:tid 35390] [client 45.137.126.42:30799] [client 45.137.126.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aednvzeHLhVUuu8cVXxysAAAAEY"]
[Tue Apr 21 20:04:16.039667 2026] [:error] [pid 53731:tid 53735] [client 45.137.126.24:30167] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aednwF2I9THUR-bRVGxPngAAAgA"]
[Tue Apr 21 20:04:17.019457 2026] [:error] [pid 53978:tid 53993] [client 45.137.126.31:52975] [client 45.137.126.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aednwZ1ivsR4hcOSQbYRLQAAAo0"]
[Tue Apr 21 20:04:18.985110 2026] [:error] [pid 35415:tid 35451] [client 45.137.126.40:43041] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aednwkiqDinI4_22zzhvXQAAANg"]
[Tue Apr 21 20:04:20.940824 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.26:55799] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aednxDeHLhVUuu8cVXxyyAAAAEM"]
[Tue Apr 21 20:04:21.914733 2026] [:error] [pid 53731:tid 53747] [client 45.137.126.21:64127] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aednxV2I9THUR-bRVGxPpQAAAgw"]
[Tue Apr 21 20:04:23.379284 2026] [:error] [pid 35321:tid 35390] [client 45.137.126.10:47007] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aednxzeHLhVUuu8cVXxyzwAAAEY"]
[Tue Apr 21 20:04:24.354908 2026] [:error] [pid 53832:tid 53849] [client 45.137.126.26:42483] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aednyNzkuxsE_OhM9UJjgwAAAk4"]
[Tue Apr 21 20:04:26.328600 2026] [:error] [pid 35320:tid 35350] [client 45.137.126.27:50521] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aednyoJW6fdXWO6agMGkcQAAABQ"]
[Tue Apr 21 20:04:27.796945 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.35:40063] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aednyzeHLhVUuu8cVXxy1QAAAE0"]
[Tue Apr 21 20:04:28.814655 2026] [:error] [pid 54080:tid 54083] [client 45.137.126.3:47737] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aednzIzEbQHHxtmWbaarxgAAAsE"]
[Tue Apr 21 20:04:29.784288 2026] [:error] [pid 35321:tid 35402] [client 45.137.126.18:23607] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aednzTeHLhVUuu8cVXxy1gAAAFI"]
[Tue Apr 21 20:04:31.749503 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.39:43903] [client 45.137.126.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aednz4JW6fdXWO6agMGkfwAAAAs"]
[Tue Apr 21 20:04:33.710385 2026] [:error] [pid 53731:tid 53737] [client 45.137.126.24:56443] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aedn0V2I9THUR-bRVGxPvQAAAgI"]
[Tue Apr 21 20:04:35.175644 2026] [:error] [pid 53832:tid 53848] [client 45.137.126.12:45729] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aedn09zkuxsE_OhM9UJjiAAAAk0"]
[Tue Apr 21 20:04:36.641279 2026] [:error] [pid 35320:tid 35335] [client 45.137.126.37:54887] [client 45.137.126.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aedn1IJW6fdXWO6agMGkgQAAAAU"]
[Tue Apr 21 20:04:40.624292 2026] [:error] [pid 4823:tid 4856] [client 45.137.126.50:56755] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aedn2Pc8mke3PfHqsxH38QAAAYM"]
[Tue Apr 21 20:04:41.596484 2026] [:error] [pid 53832:tid 53857] [client 45.137.126.38:57997] [client 45.137.126.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aedn2dzkuxsE_OhM9UJjkAAAAlY"]
[Tue Apr 21 20:04:43.550563 2026] [:error] [pid 54080:tid 54083] [client 45.137.126.48:27587] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aedn24zEbQHHxtmWbaar4gAAAsE"]
[Tue Apr 21 20:04:46.492086 2026] [:error] [pid 53832:tid 53837] [client 45.137.126.4:32291] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aedn3tzkuxsE_OhM9UJjmgAAAkI"]
[Tue Apr 21 20:04:48.453554 2026] [:error] [pid 53731:tid 53741] [client 45.137.126.20:36227] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aedn4F2I9THUR-bRVGxP5wAAAgY"]
[Tue Apr 21 20:04:50.410102 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.40:52837] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aedn4jeHLhVUuu8cVXxy_gAAAFc"]
[Tue Apr 21 20:04:51.878431 2026] [:error] [pid 35320:tid 35334] [client 45.137.126.22:31695] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aedn44JW6fdXWO6agMGkkQAAAAQ"]
[Tue Apr 21 20:04:53.341409 2026] [:error] [pid 35415:tid 35443] [client 45.137.126.12:52787] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aedn5UiqDinI4_22zzhvZQAAANA"]
[Tue Apr 21 20:04:56.287178 2026] [:error] [pid 4823:tid 4856] [client 45.137.126.51:51189] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aedn6Pc8mke3PfHqsxH4AQAAAYM"]
[Tue Apr 21 20:04:58.745444 2026] [:error] [pid 53731:tid 53754] [client 45.137.126.24:42541] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aedn6l2I9THUR-bRVGxP9gAAAhI"]
[Tue Apr 21 20:04:59.732887 2026] [proxy_fcgi:error] [pid 53731:tid 53737] [client 45.137.126.13:30827] AH01071: Got error 'Primary script unknown'
[Tue Apr 21 20:05:00.220606 2026] [:error] [pid 53731:tid 53758] [client 45.137.126.13:30827] [client 45.137.126.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aedn7F2I9THUR-bRVGxP_AAAAhY"]
[Tue Apr 21 20:05:01.302976 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.32:43629] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aedn7YJW6fdXWO6agMGkpAAAAAs"]
[Tue Apr 21 20:05:03.251733 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.52:46475] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aedn74JW6fdXWO6agMGkwAAAAAs"]
[Tue Apr 21 20:05:04.221172 2026] [:error] [pid 35321:tid 35385] [client 45.137.126.6:20717] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aedn8DeHLhVUuu8cVXxzAQAAAEE"]
[Tue Apr 21 20:05:08.133292 2026] [:error] [pid 35415:tid 35438] [client 45.137.126.40:31271] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aedn9EiqDinI4_22zzhvewAAAMs"]
[Tue Apr 21 20:05:09.111383 2026] [:error] [pid 35321:tid 35391] [client 45.137.126.49:53097] [client 45.137.126.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aedn9TeHLhVUuu8cVXxzCgAAAEc"]
[Tue Apr 21 20:05:10.569155 2026] [:error] [pid 35321:tid 35388] [client 45.137.126.40:41609] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "aedn9jeHLhVUuu8cVXxzFgAAAEQ"]
[Tue Apr 21 20:05:11.540048 2026] [:error] [pid 35321:tid 35389] [client 45.137.126.35:59267] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aedn9zeHLhVUuu8cVXxzHwAAAEU"]
[Tue Apr 21 20:05:12.527542 2026] [:error] [pid 35321:tid 35397] [client 45.137.126.17:37039] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aedn-DeHLhVUuu8cVXxzJQAAAE0"]
[Tue Apr 21 20:05:13.522718 2026] [:error] [pid 53731:tid 53748] [client 45.137.126.17:58491] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aedn-V2I9THUR-bRVGxQBwAAAg0"]
[Tue Apr 21 20:05:16.467914 2026] [:error] [pid 53731:tid 53756] [client 45.137.126.35:43855] [client 45.137.126.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aedn_F2I9THUR-bRVGxQEQAAAhQ"]
[Tue Apr 21 20:05:17.440862 2026] [:error] [pid 35320:tid 35331] [client 45.137.126.11:32905] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aedn_YJW6fdXWO6agMGk1wAAAAE"]
[Tue Apr 21 20:05:19.403021 2026] [:error] [pid 53731:tid 53748] [client 45.137.126.2:26637] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aedn_12I9THUR-bRVGxQGAAAAg0"]
[Tue Apr 21 20:05:20.373402 2026] [:error] [pid 53731:tid 53749] [client 45.137.126.40:46297] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aedoAF2I9THUR-bRVGxQHAAAAg4"]
[Tue Apr 21 20:05:22.352743 2026] [:error] [pid 4777:tid 4810] [client 45.137.126.18:21227] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aedoAqxXur6bykKyLZSl8wAAARY"]
[Tue Apr 21 20:05:23.323654 2026] [:error] [pid 35320:tid 35341] [client 45.137.126.3:41187] [client 45.137.126.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aedoA4JW6fdXWO6agMGk2QAAAAs"]
[Tue Apr 21 20:05:27.709546 2026] [:error] [pid 4777:tid 4791] [client 45.137.126.48:21799] [client 45.137.126.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aedoB6xXur6bykKyLZSl_gAAAQM"]
[Tue Apr 21 20:05:28.690224 2026] [:error] [pid 35320:tid 35338] [client 45.137.126.12:29025] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aedoCIJW6fdXWO6agMGk5gAAAAg"]
[Tue Apr 21 20:05:30.854518 2026] [:error] [pid 35321:tid 35401] [client 45.137.126.53:64633] [client 45.137.126.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aedoCjeHLhVUuu8cVXxzSAAAAFE"]
[Tue Apr 21 20:05:32.327070 2026] [:error] [pid 35321:tid 35395] [client 45.137.126.7:61199] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aedoDDeHLhVUuu8cVXxzTQAAAEs"]
[Tue Apr 21 20:05:33.801251 2026] [:error] [pid 53978:tid 53992] [client 45.137.126.30:34415] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "aedoDZ1ivsR4hcOSQbYRhQAAAow"]
[Tue Apr 21 20:05:34.775575 2026] [:error] [pid 35320:tid 35342] [client 45.137.126.44:25201] [client 45.137.126.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aedoDoJW6fdXWO6agMGk6wAAAAw"]
[Tue Apr 21 20:05:35.774289 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.29:24119] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aedoDzeHLhVUuu8cVXxzWAAAAEw"]
[Tue Apr 21 20:05:38.226104 2026] [:error] [pid 53832:tid 53857] [client 45.137.126.18:55283] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aedoEtzkuxsE_OhM9UJjtgAAAlY"]
[Tue Apr 21 20:05:39.692868 2026] [:error] [pid 35321:tid 35399] [client 45.137.126.24:25565] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aedoEzeHLhVUuu8cVXxzXgAAAE8"]
[Tue Apr 21 20:05:41.666436 2026] [:error] [pid 35415:tid 35434] [client 45.137.126.19:25165] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aedoFUiqDinI4_22zzhvhgAAAMc"]
[Tue Apr 21 20:05:42.639505 2026] [:error] [pid 53978:tid 54004] [client 45.137.126.46:51143] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aedoFp1ivsR4hcOSQbYRiwAAApg"]
[Tue Apr 21 20:05:43.615573 2026] [:error] [pid 35320:tid 35337] [client 45.137.126.33:46233] [client 45.137.126.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aedoF4JW6fdXWO6agMGk9wAAAAc"]
[Tue Apr 21 20:05:48.517340 2026] [:error] [pid 35320:tid 35351] [client 45.137.126.10:49095] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aedoHIJW6fdXWO6agMGlBgAAABU"]
[Tue Apr 21 20:05:49.978719 2026] [:error] [pid 53731:tid 53760] [client 45.137.126.7:27721] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aedoHV2I9THUR-bRVGxQXgAAAhg"]
[Tue Apr 21 20:05:51.937597 2026] [:error] [pid 35322:tid 35358] [client 45.137.126.27:46483] [client 45.137.126.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aedoH6PoAfV40BTfVKzZGAAAAIE"]
[Tue Apr 21 20:05:52.935883 2026] [:error] [pid 35321:tid 35402] [client 45.137.126.20:42839] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aedoIDeHLhVUuu8cVXxzcgAAAFI"]
[Tue Apr 21 20:05:53.911272 2026] [:error] [pid 53978:tid 53990] [client 45.137.126.20:59553] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aedoIZ1ivsR4hcOSQbYRkgAAAoo"]
[Tue Apr 21 20:05:55.883929 2026] [:error] [pid 53978:tid 53980] [client 45.137.126.4:60353] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aedoI51ivsR4hcOSQbYRnQAAAoA"]
[Tue Apr 21 20:06:01.439250 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.2:29491] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aedoKTeHLhVUuu8cVXxzlAAAAEw"]
[Tue Apr 21 20:06:04.405188 2026] [:error] [pid 35321:tid 35396] [client 45.137.126.46:42949] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aedoLDeHLhVUuu8cVXxzpQAAAEw"]
[Tue Apr 21 20:06:06.373108 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.7:55101] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aedoLjeHLhVUuu8cVXxztQAAAEM"]
[Tue Apr 21 20:06:07.348796 2026] [:error] [pid 53978:tid 53990] [client 45.137.126.15:29103] [client 45.137.126.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aedoL51ivsR4hcOSQbYRqAAAAoo"]
[Tue Apr 21 20:06:13.731405 2026] [:error] [pid 53731:tid 53750] [client 45.137.126.4:30807] [client 45.137.126.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aedoNV2I9THUR-bRVGxQfAAAAg8"]
[Tue Apr 21 20:06:14.708022 2026] [:error] [pid 53731:tid 53738] [client 45.137.126.40:45085] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aedoNl2I9THUR-bRVGxQfQAAAgM"]
[Tue Apr 21 20:06:15.685892 2026] [:error] [pid 35321:tid 35407] [client 45.137.126.7:36853] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aedoNzeHLhVUuu8cVXxz1wAAAFc"]
[Tue Apr 21 20:06:17.151404 2026] [:error] [pid 35320:tid 35338] [client 45.137.126.21:46145] [client 45.137.126.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.21, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aedoOYJW6fdXWO6agMGlQQAAAAg"]
[Tue Apr 21 20:06:18.141026 2026] [:error] [pid 35320:tid 35337] [client 45.137.126.21:46145] [client 45.137.126.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aedoOoJW6fdXWO6agMGlRAAAAAc"]
[Tue Apr 21 20:06:19.111982 2026] [:error] [pid 53978:tid 53984] [client 45.137.126.6:38779] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aedoO51ivsR4hcOSQbYRrAAAAoQ"]
[Tue Apr 21 20:06:20.079961 2026] [:error] [pid 4823:tid 4866] [client 45.137.126.25:57487] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aedoPPc8mke3PfHqsxH4dwAAAY0"]
[Tue Apr 21 20:06:24.026868 2026] [:error] [pid 4823:tid 4863] [client 45.137.126.51:35045] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aedoQPc8mke3PfHqsxH4mQAAAYo"]
[Tue Apr 21 20:06:28.490316 2026] [:error] [pid 53978:tid 54000] [client 45.137.126.24:46005] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aedoRJ1ivsR4hcOSQbYR2QAAApQ"]
[Tue Apr 21 20:06:30.450581 2026] [:error] [pid 53832:tid 53846] [client 45.137.126.2:57453] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aedoRtzkuxsE_OhM9UJjzgAAAks"]
[Tue Apr 21 20:06:37.407847 2026] [:error] [pid 53978:tid 53986] [client 45.137.126.17:49245] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aedoTZ1ivsR4hcOSQbYR8AAAAoY"]
[Tue Apr 21 20:06:38.388070 2026] [:error] [pid 4823:tid 4863] [client 45.137.126.25:33877] [client 45.137.126.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aedoTvc8mke3PfHqsxH42QAAAYo"]
[Tue Apr 21 20:06:39.360887 2026] [:error] [pid 35321:tid 35387] [client 45.137.126.10:45153] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aedoTzeHLhVUuu8cVXx0BQAAAEM"]
[Tue Apr 21 20:06:40.337209 2026] [:error] [pid 54080:tid 54104] [client 45.137.126.9:27563] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aedoUIzEbQHHxtmWbaasYQAAAtY"]
[Tue Apr 21 20:06:42.785697 2026] [:error] [pid 54080:tid 54090] [client 45.137.126.14:33207] [client 45.137.126.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aedoUozEbQHHxtmWbaasbgAAAsg"]
[Tue Apr 21 20:06:43.766742 2026] [:error] [pid 35320:tid 35332] [client 45.137.126.12:59265] [client 45.137.126.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aedoU4JW6fdXWO6agMGlZwAAAAI"]
[Tue Apr 21 20:06:47.207540 2026] [:error] [pid 35320:tid 35338] [client 45.137.126.20:30657] [client 45.137.126.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aedoV4JW6fdXWO6agMGldgAAAAg"]
[Tue Apr 21 20:06:50.167102 2026] [:error] [pid 54080:tid 54085] [client 45.137.126.45:32595] [client 45.137.126.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aedoWozEbQHHxtmWbaasewAAAsM"]
[Tue Apr 21 20:06:51.138939 2026] [:error] [pid 53978:tid 53986] [client 45.137.126.28:49387] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aedoW51ivsR4hcOSQbYR-wAAAoY"]
[Tue Apr 21 20:07:35.732110 2026] [autoindex:error] [pid 35415:tid 35434] [client 45.137.126.10:60589] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Apr 21 21:02:31.011890 2026] [:error] [pid 35321:tid 35393] [client 176.28.175.100:10428] [client 176.28.175.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.28.175.100, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aed1ZzeHLhVUuu8cVXyiHgAAAEk"]
[Tue Apr 21 21:24:16.082607 2026] [:error] [pid 54080:tid 54089] [client 172.213.216.244:65247] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aed6gIzEbQHHxtmWbaa9xgAAAsc"]
[Tue Apr 21 21:24:16.600361 2026] [:error] [pid 35320:tid 35344] [client 172.213.216.244:65224] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aed6gIJW6fdXWO6agMHO7wAAAA4"]
[Tue Apr 21 21:24:17.139957 2026] [:error] [pid 53832:tid 53838] [client 172.213.216.244:65218] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aed6gdzkuxsE_OhM9UJvjwAAAkM"]
[Tue Apr 21 21:24:17.863040 2026] [:error] [pid 54080:tid 54086] [client 172.213.216.244:20351] [client 172.213.216.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aed6gYzEbQHHxtmWbaa9ygAAAsQ"]
[Tue Apr 21 22:06:05.537972 2026] [:error] [pid 35320:tid 35347] [client 182.44.2.148:56983] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeeETYJW6fdXWO6agMHpjwAAABE"]
[Wed Apr 22 00:39:21.652567 2026] [:error] [pid 53978:tid 53986] [client 20.251.15.140:58222] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aeeoOZ1ivsR4hcOSQbZlqAAAAoY"]
[Wed Apr 22 00:39:23.347508 2026] [:error] [pid 4777:tid 4796] [client 20.251.15.140:57290] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aeeoO6xXur6bykKyLZTGBwAAAQg"]
[Wed Apr 22 00:39:31.205007 2026] [:error] [pid 54080:tid 54096] [client 20.251.15.140:60925] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aeeoQ4zEbQHHxtmWbabxXQAAAs4"]
[Wed Apr 22 00:39:32.832956 2026] [:error] [pid 35321:tid 35397] [client 20.251.15.140:46886] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aeeoRDeHLhVUuu8cVXw2zAAAAE0"]
[Wed Apr 22 00:39:33.673990 2026] [:error] [pid 54080:tid 54087] [client 20.251.15.140:46896] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aeeoRYzEbQHHxtmWbabxYgAAAsU"]
[Wed Apr 22 00:39:34.829038 2026] [:error] [pid 53731:tid 53747] [client 20.251.15.140:52961] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aeeoRl2I9THUR-bRVGy-yQAAAgw"]
[Wed Apr 22 00:39:36.391684 2026] [:error] [pid 35415:tid 35448] [client 20.251.15.140:46905] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aeeoSEiqDinI4_22zziKWAAAANU"]
[Wed Apr 22 00:39:37.822770 2026] [:error] [pid 4777:tid 4794] [client 20.251.15.140:6905] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aeeoSaxXur6bykKyLZTGEwAAAQY"]
[Wed Apr 22 00:39:39.399021 2026] [:error] [pid 53731:tid 53740] [client 20.251.15.140:52971] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aeeoS12I9THUR-bRVGy-1wAAAgU"]
[Wed Apr 22 00:39:41.843125 2026] [:error] [pid 4777:tid 4811] [client 20.251.15.140:46424] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aeeoTaxXur6bykKyLZTGFwAAARc"]
[Wed Apr 22 00:39:45.465782 2026] [:error] [pid 35321:tid 35384] [client 20.251.15.140:43561] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aeeoUTeHLhVUuu8cVXw20wAAAEA"]
[Wed Apr 22 00:39:47.827580 2026] [:error] [pid 35321:tid 35390] [client 20.251.15.140:58120] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aeeoUzeHLhVUuu8cVXw22wAAAEY"]
[Wed Apr 22 00:39:49.802836 2026] [:error] [pid 35320:tid 35343] [client 20.251.15.140:44207] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aeeoVYJW6fdXWO6agMFWVQAAAA0"]
[Wed Apr 22 00:39:51.237204 2026] [:error] [pid 35320:tid 35333] [client 20.251.15.140:6882] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aeeoV4JW6fdXWO6agMFWWAAAAAM"]
[Wed Apr 22 00:39:54.056561 2026] [:error] [pid 35321:tid 35387] [client 20.251.15.140:52939] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aeeoWjeHLhVUuu8cVXw26gAAAEM"]
[Wed Apr 22 00:39:57.349353 2026] [:error] [pid 53978:tid 53998] [client 20.251.15.140:52967] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aeeoXZ1ivsR4hcOSQbZlxgAAApI"]
[Wed Apr 22 00:40:01.131162 2026] [:error] [pid 35320:tid 35349] [client 20.251.15.140:43577] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aeeoYYJW6fdXWO6agMFWawAAABM"]
[Wed Apr 22 00:40:03.112539 2026] [:error] [pid 35321:tid 35386] [client 20.251.15.140:6864] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aeeoYzeHLhVUuu8cVXw2_gAAAEI"]
[Wed Apr 22 00:40:03.973873 2026] [:error] [pid 35322:tid 35381] [client 20.251.15.140:60902] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aeeoY6PoAfV40BTfVKztKgAAAJg"]
[Wed Apr 22 00:40:04.918206 2026] [:error] [pid 53978:tid 53997] [client 20.251.15.140:58113] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aeeoZJ1ivsR4hcOSQbZlyQAAApE"]
[Wed Apr 22 00:40:06.636062 2026] [:error] [pid 53978:tid 54000] [client 20.251.15.140:52929] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeeoZp1ivsR4hcOSQbZlygAAApQ"]
[Wed Apr 22 00:40:09.462760 2026] [:error] [pid 35320:tid 35341] [client 20.251.15.140:50248] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeeoaYJW6fdXWO6agMFWgwAAAAs"]
[Wed Apr 22 00:40:10.750545 2026] [:error] [pid 53978:tid 53993] [client 20.251.15.140:43560] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeeoap1ivsR4hcOSQbZlzQAAAo0"]
[Wed Apr 22 00:40:12.471038 2026] [:error] [pid 53731:tid 53744] [client 20.251.15.140:6911] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aeeobF2I9THUR-bRVGy_KwAAAgk"]
[Wed Apr 22 00:40:14.139566 2026] [:error] [pid 35320:tid 35337] [client 20.251.15.140:46405] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeeoboJW6fdXWO6agMFWjAAAAAc"]
[Wed Apr 22 00:40:15.843252 2026] [:error] [pid 35320:tid 35332] [client 20.251.15.140:44176] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeeob4JW6fdXWO6agMFWlgAAAAI"]
[Wed Apr 22 00:40:18.085756 2026] [:error] [pid 53832:tid 53838] [client 20.251.15.140:52978] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeeoctzkuxsE_OhM9UKSogAAAkM"]
[Wed Apr 22 00:40:19.549490 2026] [:error] [pid 35320:tid 35335] [client 20.251.15.140:43529] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aeeoc4JW6fdXWO6agMFWqAAAAAU"]
[Wed Apr 22 00:40:30.509660 2026] [:error] [pid 53978:tid 53990] [client 20.251.15.140:46870] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aeeofp1ivsR4hcOSQbZl9QAAAoo"]
[Wed Apr 22 00:40:31.894895 2026] [:error] [pid 35321:tid 35400] [client 20.251.15.140:58124] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aeeofzeHLhVUuu8cVXw3PgAAAFA"]
[Wed Apr 22 00:40:33.030637 2026] [:error] [pid 35321:tid 35405] [client 20.251.15.140:44166] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aeeogTeHLhVUuu8cVXw3QQAAAFU"]
[Wed Apr 22 00:40:33.619630 2026] [:error] [pid 35322:tid 35365] [client 20.251.15.140:46447] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aeeogaPoAfV40BTfVKztNAAAAIg"]
[Wed Apr 22 00:40:34.326143 2026] [:error] [pid 53978:tid 53982] [client 20.251.15.140:46462] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aeeogp1ivsR4hcOSQbZl9gAAAoI"]
[Wed Apr 22 00:40:35.639621 2026] [:error] [pid 35415:tid 35435] [client 20.251.15.140:43560] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aeeog0iqDinI4_22zziKXwAAAMg"]
[Wed Apr 22 00:40:37.076545 2026] [:error] [pid 35320:tid 35343] [client 20.251.15.140:44198] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aeeohYJW6fdXWO6agMFXAwAAAA0"]
[Wed Apr 22 00:40:37.749584 2026] [:error] [pid 35321:tid 35407] [client 20.251.15.140:60926] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aeeohTeHLhVUuu8cVXw3RQAAAFc"]
[Wed Apr 22 00:40:39.773676 2026] [:error] [pid 35320:tid 35333] [client 20.251.15.140:46454] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeeoh4JW6fdXWO6agMFXCAAAAAM"]
[Wed Apr 22 00:40:41.536455 2026] [:error] [pid 35320:tid 35348] [client 20.251.15.140:44164] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeeoiYJW6fdXWO6agMFXCgAAABI"]
[Wed Apr 22 00:40:43.130151 2026] [:error] [pid 35320:tid 35330] [client 20.251.15.140:44171] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeeoi4JW6fdXWO6agMFXDgAAAAA"]
[Wed Apr 22 00:40:44.227124 2026] [:error] [pid 35321:tid 35401] [client 20.251.15.140:58149] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeeojDeHLhVUuu8cVXw3UwAAAFE"]
[Wed Apr 22 00:40:45.934590 2026] [:error] [pid 53832:tid 53840] [client 20.251.15.140:6908] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "aeeojdzkuxsE_OhM9UKSsgAAAkU"]
[Wed Apr 22 00:40:46.896207 2026] [:error] [pid 4777:tid 4797] [client 20.251.15.140:46423] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "aeeojqxXur6bykKyLZTGJwAAAQk"]
[Wed Apr 22 00:40:47.688460 2026] [:error] [pid 35321:tid 35407] [client 20.251.15.140:58162] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "aeeojzeHLhVUuu8cVXw3VQAAAFc"]
[Wed Apr 22 00:40:49.732394 2026] [:error] [pid 53832:tid 53848] [client 20.251.15.140:55441] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "aeeokdzkuxsE_OhM9UKSuwAAAk0"]
[Wed Apr 22 00:40:51.699714 2026] [:error] [pid 35320:tid 35345] [client 20.251.15.140:44211] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeeok4JW6fdXWO6agMFXLAAAAA8"]
[Wed Apr 22 00:40:52.927953 2026] [:error] [pid 35320:tid 35334] [client 20.251.15.140:52938] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeeolIJW6fdXWO6agMFXLwAAAAQ"]
[Wed Apr 22 00:40:57.423805 2026] [:error] [pid 35321:tid 35389] [client 20.251.15.140:53885] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeeomTeHLhVUuu8cVXw3XQAAAEU"]
[Wed Apr 22 00:41:00.893599 2026] [:error] [pid 53731:tid 53741] [client 20.251.15.140:62119] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeeonF2I9THUR-bRVGy_agAAAgY"]
[Wed Apr 22 00:41:03.673075 2026] [:error] [pid 35320:tid 35346] [client 20.251.15.140:42459] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeeon4JW6fdXWO6agMFXOQAAABA"]
[Wed Apr 22 00:41:07.039516 2026] [:error] [pid 53731:tid 53752] [client 20.251.15.140:62486] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeeoo12I9THUR-bRVGy_hwAAAhA"]
[Wed Apr 22 00:41:08.534126 2026] [:error] [pid 35320:tid 35346] [client 20.251.15.140:51836] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeeopIJW6fdXWO6agMFXSQAAABA"]
[Wed Apr 22 00:41:09.659345 2026] [:error] [pid 53731:tid 53755] [client 20.251.15.140:58626] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aeeopV2I9THUR-bRVGy_lQAAAhM"]
[Wed Apr 22 00:41:11.081840 2026] [:error] [pid 53832:tid 53852] [client 20.251.15.140:62125] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeeop9zkuxsE_OhM9UKSzgAAAlE"]
[Wed Apr 22 00:41:12.944543 2026] [:error] [pid 35321:tid 35408] [client 20.251.15.140:62088] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeeoqDeHLhVUuu8cVXw3bAAAAFg"]
[Wed Apr 22 00:41:15.102297 2026] [:error] [pid 53731:tid 53741] [client 20.251.15.140:62115] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeeoq12I9THUR-bRVGy_qwAAAgY"]
[Wed Apr 22 00:41:16.782983 2026] [:error] [pid 53832:tid 53846] [client 20.251.15.140:45379] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeeorNzkuxsE_OhM9UKS0AAAAks"]
[Wed Apr 22 00:41:20.862562 2026] [:error] [pid 35321:tid 35399] [client 20.251.15.140:60239] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aeeosDeHLhVUuu8cVXw3fQAAAE8"]
[Wed Apr 22 00:41:24.922341 2026] [:error] [pid 35320:tid 35353] [client 20.251.15.140:43116] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aeeotIJW6fdXWO6agMFXaQAAABc"]
[Wed Apr 22 00:41:27.647035 2026] [:error] [pid 53832:tid 53858] [client 20.251.15.140:50275] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aeeot9zkuxsE_OhM9UKS2AAAAlc"]
[Wed Apr 22 00:41:28.827467 2026] [:error] [pid 35321:tid 35401] [client 20.251.15.140:62122] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "aeeouDeHLhVUuu8cVXw3hgAAAFE"]
[Wed Apr 22 00:41:39.022738 2026] [:error] [pid 53978:tid 53997] [client 20.251.15.140:49243] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeeow51ivsR4hcOSQbZmVQAAApE"]
[Wed Apr 22 00:41:44.148559 2026] [:error] [pid 35321:tid 35405] [client 20.251.15.140:45390] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeeoyDeHLhVUuu8cVXw3kgAAAFU"]
[Wed Apr 22 00:41:49.997386 2026] [:error] [pid 53731:tid 53753] [client 20.251.15.140:43130] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeeozV2I9THUR-bRVGy_9wAAAhE"]
[Wed Apr 22 00:41:51.863472 2026] [:error] [pid 35321:tid 35387] [client 20.251.15.140:62506] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aeeozzeHLhVUuu8cVXw3owAAAEM"]
[Wed Apr 22 00:41:53.235288 2026] [:error] [pid 53832:tid 53853] [client 20.251.15.140:49223] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aeeo0dzkuxsE_OhM9UKS5wAAAlI"]
[Wed Apr 22 00:41:55.154049 2026] [:error] [pid 35321:tid 35392] [client 20.251.15.140:62472] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aeeo0zeHLhVUuu8cVXw3rAAAAEg"]
[Wed Apr 22 00:41:56.283503 2026] [:error] [pid 35322:tid 35381] [client 20.251.15.140:62098] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aeeo1KPoAfV40BTfVKztRgAAAJg"]
[Wed Apr 22 00:41:57.404602 2026] [:error] [pid 4823:tid 4869] [client 20.251.15.140:51777] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aeeo1fc8mke3PfHqsxEd3gAAAZA"]
[Wed Apr 22 00:41:58.023154 2026] [:error] [pid 53731:tid 53753] [client 20.251.15.140:52004] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeeo1l2I9THUR-bRVGzAGwAAAhE"]
[Wed Apr 22 00:41:59.439432 2026] [:error] [pid 54080:tid 54104] [client 20.251.15.140:51998] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeeo14zEbQHHxtmWbabxrgAAAtY"]
[Wed Apr 22 00:42:02.814437 2026] [:error] [pid 53731:tid 53743] [client 20.251.15.140:51991] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeeo2l2I9THUR-bRVGzAOAAAAgg"]
[Wed Apr 22 00:42:04.078440 2026] [:error] [pid 53731:tid 53741] [client 20.251.15.140:62091] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aeeo3F2I9THUR-bRVGzAPgAAAgY"]
[Wed Apr 22 00:42:05.859201 2026] [:error] [pid 54080:tid 54082] [client 20.251.15.140:51816] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeeo3YzEbQHHxtmWbabxtAAAAsA"]
[Wed Apr 22 00:42:07.339669 2026] [:error] [pid 35320:tid 35339] [client 20.251.15.140:49224] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeeo34JW6fdXWO6agMFXoQAAAAk"]
[Wed Apr 22 00:42:09.062463 2026] [:error] [pid 4823:tid 4864] [client 20.251.15.140:51791] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeeo4fc8mke3PfHqsxEd4QAAAYs"]
[Wed Apr 22 00:42:10.930601 2026] [:error] [pid 53731:tid 53742] [client 20.251.15.140:51810] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeeo4l2I9THUR-bRVGzAUAAAAgc"]
[Wed Apr 22 00:42:12.764836 2026] [:error] [pid 35321:tid 35404] [client 20.251.15.140:58684] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aeeo5DeHLhVUuu8cVXw3ygAAAFQ"]
[Wed Apr 22 00:42:14.490740 2026] [:error] [pid 53978:tid 53985] [client 20.251.15.140:60258] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aeeo5p1ivsR4hcOSQbZmhAAAAoU"]
[Wed Apr 22 00:42:16.125817 2026] [:error] [pid 35321:tid 35406] [client 20.251.15.140:62114] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aeeo6DeHLhVUuu8cVXw30wAAAFY"]
[Wed Apr 22 00:42:16.836728 2026] [:error] [pid 53978:tid 54003] [client 20.251.15.140:62493] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aeeo6J1ivsR4hcOSQbZmhgAAApc"]
[Wed Apr 22 00:42:18.359995 2026] [:error] [pid 4823:tid 4873] [client 20.251.15.140:43091] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymn.php"] [unique_id "aeeo6vc8mke3PfHqsxEd5gAAAZQ"]
[Wed Apr 22 00:42:19.966950 2026] [:error] [pid 35320:tid 35348] [client 20.251.15.140:62137] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymn.php"] [unique_id "aeeo64JW6fdXWO6agMFXwQAAABI"]
[Wed Apr 22 00:42:21.228699 2026] [:error] [pid 54080:tid 54095] [client 20.251.15.140:58633] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymn.php"] [unique_id "aeeo7YzEbQHHxtmWbabxxQAAAs0"]
[Wed Apr 22 00:42:21.944660 2026] [:error] [pid 4777:tid 4794] [client 20.251.15.140:51832] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tymn.php"] [unique_id "aeeo7axXur6bykKyLZTGSAAAAQY"]
[Wed Apr 22 00:42:23.574727 2026] [:error] [pid 35322:tid 35376] [client 20.251.15.140:43102] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeo76PoAfV40BTfVKztTgAAAJM"]
[Wed Apr 22 00:42:24.538513 2026] [:error] [pid 35321:tid 35401] [client 20.251.15.140:58640] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeo8DeHLhVUuu8cVXw34QAAAFE"]
[Wed Apr 22 00:42:26.113483 2026] [:error] [pid 35321:tid 35385] [client 20.251.15.140:51835] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeo8jeHLhVUuu8cVXw37QAAAEE"]
[Wed Apr 22 00:42:28.800790 2026] [:error] [pid 54080:tid 54090] [client 20.251.15.140:42448] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeeo9IzEbQHHxtmWbabxzgAAAsg"]
[Wed Apr 22 00:42:30.766767 2026] [:error] [pid 53978:tid 53989] [client 20.251.15.140:62120] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aeeo9p1ivsR4hcOSQbZmmAAAAok"]
[Wed Apr 22 00:42:33.429134 2026] [:error] [pid 53978:tid 54000] [client 20.251.15.140:51776] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aeeo-Z1ivsR4hcOSQbZmnQAAApQ"]
[Wed Apr 22 00:42:35.807976 2026] [:error] [pid 35320:tid 35350] [client 20.251.15.140:51796] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aeeo-4JW6fdXWO6agMFXzAAAABQ"]
[Wed Apr 22 00:42:37.808899 2026] [:error] [pid 35320:tid 35347] [client 20.251.15.140:43072] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aeeo_YJW6fdXWO6agMFX1AAAABE"]
[Wed Apr 22 00:42:49.936050 2026] [:error] [pid 35415:tid 35444] [client 20.251.15.140:49271] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeepCUiqDinI4_22zziKowAAANE"]
[Wed Apr 22 00:42:51.542788 2026] [:error] [pid 35321:tid 35385] [client 20.251.15.140:6952] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeepCzeHLhVUuu8cVXw4BQAAAEE"]
[Wed Apr 22 00:42:53.478869 2026] [:error] [pid 53731:tid 53755] [client 20.251.15.140:42497] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeepDV2I9THUR-bRVGzAmQAAAhM"]
[Wed Apr 22 00:42:55.996853 2026] [:error] [pid 53731:tid 53743] [client 20.251.15.140:6939] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeepD12I9THUR-bRVGzAnAAAAgg"]
[Wed Apr 22 00:42:58.783365 2026] [:error] [pid 54080:tid 54099] [client 20.251.15.140:42516] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeepEozEbQHHxtmWbabx3QAAAtE"]
[Wed Apr 22 00:43:00.522431 2026] [:error] [pid 53731:tid 53749] [client 20.251.15.140:55779] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeepFF2I9THUR-bRVGzAqAAAAg4"]
[Wed Apr 22 00:43:04.500487 2026] [:error] [pid 35320:tid 35333] [client 20.251.15.140:46082] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeepGIJW6fdXWO6agMFYDQAAAAM"]
[Wed Apr 22 00:43:08.211091 2026] [:error] [pid 53978:tid 53984] [client 20.251.15.140:54862] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aeepHJ1ivsR4hcOSQbZmzAAAAoQ"]
[Wed Apr 22 00:43:12.236950 2026] [:error] [pid 35320:tid 35338] [client 20.251.15.140:51335] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeepIIJW6fdXWO6agMFYJwAAAAg"]
[Wed Apr 22 00:43:14.015918 2026] [:error] [pid 53978:tid 53981] [client 20.251.15.140:61712] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeepIp1ivsR4hcOSQbZm0AAAAoE"]
[Wed Apr 22 00:43:15.385472 2026] [:error] [pid 53978:tid 53986] [client 20.251.15.140:59002] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeepI51ivsR4hcOSQbZm0wAAAoY"]
[Wed Apr 22 00:43:16.842842 2026] [:error] [pid 53978:tid 53997] [client 20.251.15.140:58998] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aeepJJ1ivsR4hcOSQbZm1QAAApE"]
[Wed Apr 22 00:43:18.593338 2026] [:error] [pid 54080:tid 54083] [client 20.251.15.140:61727] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeepJozEbQHHxtmWbabx6QAAAsE"]
[Wed Apr 22 00:43:19.352412 2026] [:error] [pid 35320:tid 35346] [client 20.251.15.140:55799] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeepJ4JW6fdXWO6agMFYOgAAABA"]
[Wed Apr 22 00:43:20.832940 2026] [:error] [pid 53832:tid 53849] [client 20.251.15.140:50758] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeepKNzkuxsE_OhM9UKTHgAAAk4"]
[Wed Apr 22 00:43:23.221531 2026] [:error] [pid 53731:tid 53749] [client 20.251.15.140:47606] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aeepK12I9THUR-bRVGzA2AAAAg4"]
[Wed Apr 22 00:43:25.991501 2026] [:error] [pid 54080:tid 54099] [client 20.251.15.140:50799] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "aeepLYzEbQHHxtmWbabx7AAAAtE"]
[Wed Apr 22 00:43:27.716996 2026] [:error] [pid 4777:tid 4807] [client 20.251.15.140:61729] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "aeepL6xXur6bykKyLZTGawAAARM"]
[Wed Apr 22 00:43:29.257194 2026] [:error] [pid 35320:tid 35348] [client 20.251.15.140:52264] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "aeepMYJW6fdXWO6agMFYYwAAABI"]
[Wed Apr 22 00:43:32.016810 2026] [:error] [pid 53978:tid 53999] [client 20.251.15.140:56487] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "aeepNJ1ivsR4hcOSQbZm4gAAApM"]
[Wed Apr 22 00:43:33.630762 2026] [:error] [pid 53731:tid 53753] [client 20.251.15.140:44149] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adoms.php"] [unique_id "aeepNV2I9THUR-bRVGzA7AAAAhE"]
[Wed Apr 22 00:43:34.896100 2026] [:error] [pid 53832:tid 53855] [client 20.251.15.140:56135] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adoms.php"] [unique_id "aeepNtzkuxsE_OhM9UKTJwAAAlQ"]
[Wed Apr 22 00:43:36.378143 2026] [:error] [pid 53731:tid 53748] [client 20.251.15.140:56187] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adoms.php"] [unique_id "aeepOF2I9THUR-bRVGzA8QAAAg0"]
[Wed Apr 22 00:43:38.521125 2026] [:error] [pid 35321:tid 35391] [client 20.251.15.140:52277] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adoms.php"] [unique_id "aeepOjeHLhVUuu8cVXw4ZwAAAEc"]
[Wed Apr 22 00:43:43.857553 2026] [:error] [pid 35321:tid 35391] [client 20.251.15.140:61701] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugin-editor.php"] [unique_id "aeepPzeHLhVUuu8cVXw4eAAAAEc"]
[Wed Apr 22 00:43:47.699078 2026] [:error] [pid 35415:tid 35448] [client 20.251.15.140:43038] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugin-editor.php"] [unique_id "aeepQ0iqDinI4_22zziKugAAANU"]
[Wed Apr 22 00:43:48.594354 2026] [:error] [pid 35321:tid 35395] [client 20.251.15.140:61697] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugin-editor.php"] [unique_id "aeepRDeHLhVUuu8cVXw4kAAAAEs"]
[Wed Apr 22 00:43:59.187129 2026] [:error] [pid 35321:tid 35403] [client 20.251.15.140:56485] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeepTzeHLhVUuu8cVXw4wwAAAFM"]
[Wed Apr 22 00:44:00.478420 2026] [:error] [pid 53731:tid 53745] [client 20.251.15.140:6647] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeepUF2I9THUR-bRVGzBGwAAAgo"]
[Wed Apr 22 00:44:01.654816 2026] [:error] [pid 53731:tid 53753] [client 20.251.15.140:44843] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeepUV2I9THUR-bRVGzBIQAAAhE"]
[Wed Apr 22 00:44:03.428625 2026] [:error] [pid 35321:tid 35385] [client 20.251.15.140:52913] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeepUzeHLhVUuu8cVXw4zAAAAEE"]
[Wed Apr 22 00:44:04.445713 2026] [:error] [pid 35320:tid 35352] [client 20.251.15.140:6599] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aeepVIJW6fdXWO6agMFYngAAABY"]
[Wed Apr 22 00:44:05.371656 2026] [:error] [pid 35320:tid 35338] [client 20.251.15.140:6635] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aeepVYJW6fdXWO6agMFYpAAAAAg"]
[Wed Apr 22 00:44:06.017348 2026] [:error] [pid 53731:tid 53749] [client 20.251.15.140:47970] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aeepVl2I9THUR-bRVGzBLgAAAg4"]
[Wed Apr 22 00:44:06.921192 2026] [:error] [pid 53731:tid 53758] [client 20.251.15.140:49207] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aeepVl2I9THUR-bRVGzBMgAAAhY"]
[Wed Apr 22 00:44:08.195196 2026] [:error] [pid 53731:tid 53744] [client 20.251.15.140:58476] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aeepWF2I9THUR-bRVGzBOQAAAgk"]
[Wed Apr 22 00:44:09.419130 2026] [:error] [pid 35321:tid 35396] [client 20.251.15.140:53480] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aeepWTeHLhVUuu8cVXw40AAAAEw"]
[Wed Apr 22 00:44:10.972048 2026] [:error] [pid 53731:tid 53750] [client 20.251.15.140:55170] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aeepWl2I9THUR-bRVGzBQQAAAg8"]
[Wed Apr 22 00:44:11.908959 2026] [:error] [pid 54080:tid 54087] [client 20.251.15.140:49158] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aeepW4zEbQHHxtmWbabx_gAAAsU"]
[Wed Apr 22 00:44:14.007713 2026] [:error] [pid 54080:tid 54105] [client 20.251.15.140:52643] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aeepXozEbQHHxtmWbabyBQAAAtc"]
[Wed Apr 22 00:44:17.087455 2026] [:error] [pid 53978:tid 53986] [client 20.251.15.140:6447] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aeepYZ1ivsR4hcOSQbZnDAAAAoY"]
[Wed Apr 22 00:44:18.760704 2026] [:error] [pid 53832:tid 53848] [client 20.251.15.140:60849] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aeepYtzkuxsE_OhM9UKTQwAAAk0"]
[Wed Apr 22 00:44:20.957073 2026] [:error] [pid 35321:tid 35408] [client 20.251.15.140:53441] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aeepZDeHLhVUuu8cVXw46gAAAFg"]
[Wed Apr 22 00:44:25.000080 2026] [:error] [pid 35321:tid 35402] [client 20.251.15.140:61314] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "aeepaDeHLhVUuu8cVXw4-AAAAFI"]
[Wed Apr 22 00:44:28.997984 2026] [:error] [pid 53832:tid 53849] [client 20.251.15.140:53398] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "aeepbNzkuxsE_OhM9UKTWwAAAk4"]
[Wed Apr 22 00:44:31.957820 2026] [:error] [pid 53832:tid 53835] [client 20.251.15.140:6226] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "aeepb9zkuxsE_OhM9UKTagAAAkA"]
[Wed Apr 22 00:44:34.276179 2026] [:error] [pid 4777:tid 4804] [client 20.251.15.140:62421] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "aeepcqxXur6bykKyLZTGkAAAARA"]
[Wed Apr 22 00:44:37.869984 2026] [:error] [pid 53978:tid 54002] [client 20.251.15.140:42751] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mk.php"] [unique_id "aeepdZ1ivsR4hcOSQbZnHwAAApY"]
[Wed Apr 22 00:44:40.199656 2026] [:error] [pid 35321:tid 35406] [client 20.251.15.140:6476] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mk.php"] [unique_id "aeepeDeHLhVUuu8cVXw5HgAAAFY"]
[Wed Apr 22 00:44:42.166838 2026] [:error] [pid 35320:tid 35345] [client 20.251.15.140:42731] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mk.php"] [unique_id "aeepeoJW6fdXWO6agMFY3QAAAA8"]
[Wed Apr 22 00:44:43.908200 2026] [:error] [pid 53731:tid 53741] [client 20.251.15.140:57685] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mk.php"] [unique_id "aeepe12I9THUR-bRVGzBeQAAAgY"]
[Wed Apr 22 00:44:45.439472 2026] [:error] [pid 35322:tid 35361] [client 20.251.15.140:57748] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeepfaPoAfV40BTfVKztdQAAAIQ"]
[Wed Apr 22 00:44:47.420107 2026] [:error] [pid 53731:tid 53755] [client 20.251.15.140:57668] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeepf12I9THUR-bRVGzBhQAAAhM"]
[Wed Apr 22 00:44:49.937974 2026] [:error] [pid 53731:tid 53759] [client 20.251.15.140:42771] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeepgV2I9THUR-bRVGzBkAAAAhc"]
[Wed Apr 22 00:44:54.344974 2026] [:error] [pid 53731:tid 53752] [client 20.251.15.140:42798] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aeephl2I9THUR-bRVGzBlAAAAhA"]
[Wed Apr 22 00:44:55.071438 2026] [:error] [pid 53731:tid 53738] [client 20.251.15.140:44168] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aeeph12I9THUR-bRVGzBlgAAAgM"]
[Wed Apr 22 00:44:57.757642 2026] [:error] [pid 35320:tid 35349] [client 20.251.15.140:46400] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a4.php"] [unique_id "aeepiYJW6fdXWO6agMFY9gAAABM"]
[Wed Apr 22 00:45:16.460286 2026] [:error] [pid 53731:tid 53747] [client 20.251.15.140:58137] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aeepnF2I9THUR-bRVGzBygAAAgw"]
[Wed Apr 22 00:45:19.316686 2026] [:error] [pid 53731:tid 53760] [client 20.251.15.140:6167] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aeepn12I9THUR-bRVGzBzAAAAhg"]
[Wed Apr 22 00:45:23.407591 2026] [:error] [pid 4823:tid 4874] [client 20.251.15.140:57530] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aeepo_c8mke3PfHqsxEeRAAAAZU"]
[Wed Apr 22 00:45:26.408217 2026] [:error] [pid 35320:tid 35352] [client 20.251.15.140:6294] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aeeppoJW6fdXWO6agMFZJAAAABY"]
[Wed Apr 22 00:45:31.007685 2026] [:error] [pid 35320:tid 35335] [client 20.251.15.140:57508] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aeepq4JW6fdXWO6agMFZQAAAAAU"]
[Wed Apr 22 00:45:34.587910 2026] [:error] [pid 35320:tid 35339] [client 20.251.15.140:58239] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aeeproJW6fdXWO6agMFZVQAAAAk"]
[Wed Apr 22 00:45:36.410349 2026] [:error] [pid 35321:tid 35391] [client 20.251.15.140:51130] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aeepsDeHLhVUuu8cVXw5UgAAAEc"]
[Wed Apr 22 00:45:38.522080 2026] [:error] [pid 35320:tid 35348] [client 20.251.15.140:6858] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "aeepsoJW6fdXWO6agMFZZQAAABI"]
[Wed Apr 22 00:45:39.417903 2026] [:error] [pid 35321:tid 35399] [client 20.251.15.140:51081] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aeepszeHLhVUuu8cVXw5VAAAAE8"]
[Wed Apr 22 00:45:41.158328 2026] [:error] [pid 53731:tid 53738] [client 20.251.15.140:57501] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aeeptV2I9THUR-bRVGzCCQAAAgM"]
[Wed Apr 22 00:45:43.133193 2026] [:error] [pid 35321:tid 35390] [client 20.251.15.140:6182] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aeeptzeHLhVUuu8cVXw5WgAAAEY"]
[Wed Apr 22 00:45:44.920495 2026] [:error] [pid 53731:tid 53757] [client 20.251.15.140:48554] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccs.php"] [unique_id "aeepuF2I9THUR-bRVGzCDgAAAhU"]
[Wed Apr 22 00:45:47.836537 2026] [:error] [pid 53832:tid 53836] [client 20.251.15.140:57474] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aeepu9zkuxsE_OhM9UKTmwAAAkE"]
[Wed Apr 22 00:45:54.441445 2026] [:error] [pid 53731:tid 53759] [client 20.251.15.140:6321] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aeepwl2I9THUR-bRVGzCHQAAAhc"]
[Wed Apr 22 00:45:59.667040 2026] [:error] [pid 53731:tid 53737] [client 20.251.15.140:6366] [client 20.251.15.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/first.php"] [unique_id "aeepx12I9THUR-bRVGzCRAAAAgI"]
[Wed Apr 22 01:33:37.069589 2026] [:error] [pid 54080:tid 54092] [client 43.166.253.58:41056] [client 43.166.253.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aee08YzEbQHHxtmWbab9hgAAAso"]
[Wed Apr 22 06:02:14.777146 2026] [:error] [pid 21788:tid 21797] [client 43.130.105.246:34474] [client 43.130.105.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aefz5n7OM27rzVpef26ZkgAAAMc"]
[Wed Apr 22 06:21:19.268145 2026] [:error] [pid 21681:tid 21699] [client 216.24.210.97:57643] [client 216.24.210.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aef4X95LmJziq-yZYawxawAAAAk"]
[Wed Apr 22 06:21:20.176515 2026] [:error] [pid 23041:tid 23061] [client 173.239.218.28:47801] [client 173.239.218.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aef4YETXx_lUa7xwAb7MAQAAARE"]
[Wed Apr 22 06:21:21.784695 2026] [:error] [pid 21788:tid 21791] [client 173.239.218.33:24341] [client 173.239.218.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aef4YX7OM27rzVpef26mxAAAAME"]
[Wed Apr 22 06:21:22.661295 2026] [:error] [pid 21788:tid 21793] [client 173.239.218.37:53927] [client 173.239.218.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aef4Yn7OM27rzVpef26m0QAAAMM"]
[Wed Apr 22 06:21:24.142337 2026] [:error] [pid 21682:tid 21739] [client 173.239.218.26:56605] [client 173.239.218.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aef4ZJlXWQZUlmPHS3r6SgAAAFA"]
[Wed Apr 22 06:21:24.706811 2026] [:error] [pid 18698:tid 18718] [client 173.239.218.57:24711] [client 173.239.218.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aef4ZMHDGrKprtci7-HuswAAAVI"]
[Wed Apr 22 06:21:25.094557 2026] [:error] [pid 21788:tid 21812] [client 98.159.37.155:42265] [client 98.159.37.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aef4ZX7OM27rzVpef26m1wAAANY"]
[Wed Apr 22 06:21:25.554055 2026] [:error] [pid 18698:tid 18701] [client 173.239.218.55:56977] [client 173.239.218.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aef4ZcHDGrKprtci7-HutgAAAUE"]
[Wed Apr 22 06:21:25.875393 2026] [:error] [pid 21681:tid 21694] [client 173.239.218.49:41921] [client 173.239.218.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aef4Zd5LmJziq-yZYawxggAAAAQ"]
[Wed Apr 22 06:21:26.222723 2026] [:error] [pid 21788:tid 21811] [client 173.239.218.62:39499] [client 173.239.218.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aef4Zn7OM27rzVpef26m3QAAANU"]
[Wed Apr 22 06:21:26.833624 2026] [:error] [pid 21788:tid 21800] [client 173.239.218.37:63225] [client 173.239.218.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aef4Zn7OM27rzVpef26m4gAAAMo"]
[Wed Apr 22 06:21:27.517788 2026] [:error] [pid 21788:tid 21793] [client 173.239.218.70:26997] [client 173.239.218.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aef4Z37OM27rzVpef26m5wAAAMM"]
[Wed Apr 22 06:21:56.121319 2026] [autoindex:error] [pid 18698:tid 18703] [client 173.239.218.52:54553] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 22 08:36:10.213081 2026] [:error] [pid 31756:tid 31815] [client 43.157.53.115:33118] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aegX-t_WbkXbHaEfhd3vhAAAAlc"]
[Wed Apr 22 13:02:45.682736 2026] [:error] [pid 21683:tid 21756] [client 43.135.145.117:34192] [client 43.135.145.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aehWdVZBWT-0diZyYybWKgAAAIY"]
[Wed Apr 22 13:09:57.294723 2026] [:error] [pid 32095:tid 32105] [client 20.215.187.59:60866] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aehYJdfu5Cv628YPe5-eVAAAA4c"]
[Wed Apr 22 13:10:00.975724 2026] [:error] [pid 32095:tid 32104] [client 20.215.187.59:36817] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aehYKNfu5Cv628YPe5-eWwAAA4Y"]
[Wed Apr 22 13:10:05.971669 2026] [:error] [pid 21682:tid 21731] [client 20.215.187.59:36806] [client 20.215.187.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aehYLZlXWQZUlmPHS3puPgAAAEg"]
[Wed Apr 22 15:01:27.003109 2026] [:error] [pid 9085:tid 9111] [client 103.112.239.34:58973] [client 103.112.239.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.112.239.34, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aehyR9-_-or9vQnlWnqTpAAAAVg"]
[Wed Apr 22 15:38:18.323800 2026] [:error] [pid 6384:tid 6408] [client 43.159.152.184:41302] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeh66j58M3t15ICeWHWn6gAAANU"]
[Wed Apr 22 16:20:04.236443 2026] [:error] [pid 6384:tid 6397] [client 125.94.144.102:52871] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeiEtD58M3t15ICeWHW2pQAAAMo"]
[Wed Apr 22 20:08:48.567458 2026] [:error] [pid 6384:tid 6395] [client 43.131.36.84:54960] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aei6UD58M3t15ICeWHUkKwAAAMg"]
[Wed Apr 22 20:31:27.158017 2026] [:error] [pid 23776:tid 23796] [client 68.221.203.118:60353] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "aei_n7RExf-1pAbSeJvm2wAAAZI"]
[Wed Apr 22 20:31:28.041980 2026] [:error] [pid 9085:tid 9099] [client 68.221.203.118:40448] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "aei_oN-_-or9vQnlWnpedgAAAUw"]
[Wed Apr 22 20:31:29.012007 2026] [:error] [pid 6384:tid 6393] [client 68.221.203.118:43588] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "aei_oT58M3t15ICeWHUtPgAAAMY"]
[Wed Apr 22 20:31:29.761949 2026] [:error] [pid 6344:tid 6356] [client 68.221.203.118:40487] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "aei_oUDOTF-pkQnDeUnp2QAAAAc"]
[Wed Apr 22 20:31:30.702303 2026] [:error] [pid 23776:tid 23781] [client 68.221.203.118:52986] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aei_orRExf-1pAbSeJvm3wAAAYM"]
[Wed Apr 22 20:31:31.450316 2026] [:error] [pid 6250:tid 6274] [client 68.221.203.118:48983] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aei_ow-iZeQkqmQVfj4JJgAAAFQ"]
[Wed Apr 22 20:31:33.601944 2026] [:error] [pid 9085:tid 9098] [client 68.221.203.118:43620] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aei_pd-_-or9vQnlWnpefQAAAUs"]
[Wed Apr 22 20:31:35.262190 2026] [:error] [pid 9085:tid 9098] [client 68.221.203.118:46538] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aei_p9-_-or9vQnlWnpehwAAAUs"]
[Wed Apr 22 20:31:36.793456 2026] [:error] [pid 6384:tid 6411] [client 68.221.203.118:14678] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "aei_qD58M3t15ICeWHUtSgAAANg"]
[Wed Apr 22 20:31:37.972172 2026] [:error] [pid 6384:tid 6396] [client 68.221.203.118:41598] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "aei_qT58M3t15ICeWHUtTwAAAMk"]
[Wed Apr 22 20:31:40.499668 2026] [:error] [pid 23776:tid 23786] [client 68.221.203.118:14863] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "aei_rLRExf-1pAbSeJvm6wAAAYg"]
[Wed Apr 22 20:31:41.522040 2026] [:error] [pid 6344:tid 6357] [client 68.221.203.118:40450] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "aei_rUDOTF-pkQnDeUnp4QAAAAg"]
[Wed Apr 22 20:31:42.269596 2026] [:error] [pid 6252:tid 6316] [client 68.221.203.118:52966] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.admin.php"] [unique_id "aei_rutGYuiYb1nWBpRJ6wAAAQQ"]
[Wed Apr 22 20:31:43.211994 2026] [:error] [pid 6384:tid 6411] [client 68.221.203.118:48967] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.admin.php"] [unique_id "aei_rz58M3t15ICeWHUtWgAAANg"]
[Wed Apr 22 20:31:43.993601 2026] [:error] [pid 9085:tid 9102] [client 68.221.203.118:49013] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.admin.php"] [unique_id "aei_r9-_-or9vQnlWnpenQAAAU8"]
[Wed Apr 22 20:31:45.038416 2026] [:error] [pid 9085:tid 9088] [client 68.221.203.118:46156] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.admin.php"] [unique_id "aei_sd-_-or9vQnlWnpepQAAAUE"]
[Wed Apr 22 20:31:45.745733 2026] [:error] [pid 6344:tid 6366] [client 68.221.203.118:43594] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sw.php"] [unique_id "aei_sUDOTF-pkQnDeUnp5gAAABE"]
[Wed Apr 22 20:31:46.738271 2026] [:error] [pid 9085:tid 9109] [client 68.221.203.118:14899] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sw.php"] [unique_id "aei_st-_-or9vQnlWnpeqQAAAVY"]
[Wed Apr 22 20:31:49.667859 2026] [:error] [pid 9085:tid 9108] [client 68.221.203.118:41566] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sw.php"] [unique_id "aei_td-_-or9vQnlWnperwAAAVU"]
[Wed Apr 22 20:31:52.588539 2026] [:error] [pid 6384:tid 6388] [client 68.221.203.118:46539] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sw.php"] [unique_id "aei_uD58M3t15ICeWHUtXQAAAME"]
[Wed Apr 22 20:31:54.648332 2026] [:error] [pid 6344:tid 6367] [client 68.221.203.118:14294] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "aei_ukDOTF-pkQnDeUnqAwAAABI"]
[Wed Apr 22 20:31:55.729410 2026] [:error] [pid 6251:tid 6290] [client 68.221.203.118:46154] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "aei_uysFAzbyObL-SQ56ZAAAAIU"]
[Wed Apr 22 20:31:57.080128 2026] [:error] [pid 6344:tid 6364] [client 68.221.203.118:14318] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "aei_vUDOTF-pkQnDeUnqCAAAAA8"]
[Wed Apr 22 20:31:58.792954 2026] [:error] [pid 6252:tid 6328] [client 68.221.203.118:43601] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "aei_vutGYuiYb1nWBpRJ9AAAARA"]
[Wed Apr 22 20:32:00.394649 2026] [:error] [pid 6251:tid 6287] [client 68.221.203.118:14692] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aei_wCsFAzbyObL-SQ56aAAAAII"]
[Wed Apr 22 20:32:03.396969 2026] [:error] [pid 6384:tid 6392] [client 68.221.203.118:41548] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aei_wz58M3t15ICeWHUtZQAAAMU"]
[Wed Apr 22 20:32:08.553878 2026] [:error] [pid 6252:tid 6329] [client 68.221.203.118:52955] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aei_yOtGYuiYb1nWBpRJ-QAAARE"]
[Wed Apr 22 20:32:11.035712 2026] [:error] [pid 9085:tid 9104] [client 68.221.203.118:61021] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "aei_y9-_-or9vQnlWnpe0AAAAVE"]
[Wed Apr 22 20:32:13.716121 2026] [:error] [pid 9085:tid 9087] [client 68.221.203.118:61044] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aei_zd-_-or9vQnlWnpe1QAAAUA"]
[Wed Apr 22 20:32:16.814995 2026] [:error] [pid 23776:tid 23796] [client 68.221.203.118:14709] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aei_0LRExf-1pAbSeJvnFAAAAZI"]
[Wed Apr 22 20:32:18.798201 2026] [:error] [pid 23776:tid 23786] [client 68.221.203.118:48960] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aei_0rRExf-1pAbSeJvnGwAAAYg"]
[Wed Apr 22 20:32:22.130413 2026] [:error] [pid 23776:tid 23779] [client 68.221.203.118:14665] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "aei_1rRExf-1pAbSeJvnHwAAAYE"]
[Wed Apr 22 20:32:25.701195 2026] [:error] [pid 23776:tid 23783] [client 68.221.203.118:61028] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aei_2bRExf-1pAbSeJvnJgAAAYU"]
[Wed Apr 22 20:32:36.403576 2026] [:error] [pid 6384:tid 6393] [client 68.221.203.118:46152] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aei_5D58M3t15ICeWHUtmwAAAMY"]
[Wed Apr 22 20:32:37.349746 2026] [:error] [pid 9085:tid 9108] [client 68.221.203.118:52933] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aei_5d-_-or9vQnlWnpfAQAAAVU"]
[Wed Apr 22 20:32:39.073187 2026] [:error] [pid 6344:tid 6350] [client 68.221.203.118:14718] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aei_50DOTF-pkQnDeUnqKwAAAAE"]
[Wed Apr 22 20:32:40.253372 2026] [:error] [pid 6250:tid 6261] [client 68.221.203.118:43586] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmini.php"] [unique_id "aei_6A-iZeQkqmQVfj4JTQAAAEc"]
[Wed Apr 22 20:32:41.769912 2026] [:error] [pid 6344:tid 6370] [client 68.221.203.118:46582] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aei_6UDOTF-pkQnDeUnqMAAAABU"]
[Wed Apr 22 20:32:44.013835 2026] [:error] [pid 9085:tid 9094] [client 68.221.203.118:54193] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aei_7N-_-or9vQnlWnpfBwAAAUc"]
[Wed Apr 22 20:32:46.565000 2026] [:error] [pid 6251:tid 6290] [client 68.221.203.118:41544] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aei_7isFAzbyObL-SQ56egAAAIU"]
[Wed Apr 22 20:32:53.603188 2026] [:error] [pid 6384:tid 6389] [client 68.221.203.118:48971] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "aei_9T58M3t15ICeWHUtpQAAAMI"]
[Wed Apr 22 20:32:56.852968 2026] [:error] [pid 6344:tid 6372] [client 68.221.203.118:41538] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aei_-EDOTF-pkQnDeUnqSAAAABc"]
[Wed Apr 22 20:32:57.830692 2026] [:error] [pid 9085:tid 9102] [client 68.221.203.118:46571] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aei_-d-_-or9vQnlWnpfQAAAAU8"]
[Wed Apr 22 20:32:59.931529 2026] [:error] [pid 9085:tid 9098] [client 68.221.203.118:41595] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aei_-9-_-or9vQnlWnpfTQAAAUs"]
[Wed Apr 22 20:33:01.216672 2026] [:error] [pid 6384:tid 6388] [client 68.221.203.118:60329] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aei__T58M3t15ICeWHUtsgAAAME"]
[Wed Apr 22 20:33:02.719594 2026] [:error] [pid 6384:tid 6405] [client 68.221.203.118:46193] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aei__j58M3t15ICeWHUttQAAANI"]
[Wed Apr 22 20:33:04.097668 2026] [:error] [pid 6384:tid 6390] [client 68.221.203.118:46153] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aejAAD58M3t15ICeWHUtugAAAMM"]
[Wed Apr 22 20:33:05.774128 2026] [:error] [pid 6250:tid 6268] [client 68.221.203.118:49009] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aejAAQ-iZeQkqmQVfj4JWwAAAE4"]
[Wed Apr 22 20:33:08.300464 2026] [:error] [pid 9085:tid 9107] [client 68.221.203.118:54705] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aejABN-_-or9vQnlWnpfaQAAAVQ"]
[Wed Apr 22 20:33:10.228431 2026] [:error] [pid 6344:tid 6373] [client 68.221.203.118:60302] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aejABkDOTF-pkQnDeUnqUAAAABg"]
[Wed Apr 22 20:33:14.082343 2026] [:error] [pid 6384:tid 6407] [client 68.221.203.118:60322] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aejACj58M3t15ICeWHUtygAAANQ"]
[Wed Apr 22 20:33:19.095437 2026] [:error] [pid 23776:tid 23787] [client 68.221.203.118:50984] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aejAD7RExf-1pAbSeJvnXgAAAYk"]
[Wed Apr 22 20:33:27.682697 2026] [:error] [pid 6344:tid 6362] [client 68.221.203.118:46499] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "aejAF0DOTF-pkQnDeUnqZwAAAA0"]
[Wed Apr 22 20:33:28.403991 2026] [:error] [pid 23776:tid 23792] [client 68.221.203.118:46466] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aejAGLRExf-1pAbSeJvndwAAAY4"]
[Wed Apr 22 20:33:30.281355 2026] [:error] [pid 6344:tid 6350] [client 68.221.203.118:50981] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aejAGkDOTF-pkQnDeUnqbgAAAAE"]
[Wed Apr 22 20:33:32.298400 2026] [:error] [pid 6344:tid 6356] [client 68.221.203.118:46130] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aejAHEDOTF-pkQnDeUnqdgAAAAc"]
[Wed Apr 22 20:33:33.364377 2026] [:error] [pid 6384:tid 6405] [client 68.221.203.118:41165] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "aejAHT58M3t15ICeWHUt7QAAANI"]
[Wed Apr 22 20:33:34.392110 2026] [:error] [pid 6251:tid 6292] [client 68.221.203.118:17658] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "aejAHisFAzbyObL-SQ56kQAAAIc"]
[Wed Apr 22 20:33:35.438020 2026] [:error] [pid 6384:tid 6393] [client 68.221.203.118:48081] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "aejAHz58M3t15ICeWHUt9gAAAMY"]
[Wed Apr 22 20:33:44.608283 2026] [:error] [pid 6252:tid 6333] [client 68.221.203.118:53444] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aejAKOtGYuiYb1nWBpRKTwAAARU"]
[Wed Apr 22 20:33:45.710108 2026] [:error] [pid 9085:tid 9098] [client 68.221.203.118:46123] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aejAKd-_-or9vQnlWnpfhwAAAUs"]
[Wed Apr 22 20:33:46.803560 2026] [:error] [pid 23776:tid 23782] [client 68.221.203.118:46090] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aejAKrRExf-1pAbSeJvnlgAAAYQ"]
[Wed Apr 22 20:33:47.488690 2026] [:error] [pid 6252:tid 6314] [client 68.221.203.118:6164] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "aejAK-tGYuiYb1nWBpRKVQAAAQI"]
[Wed Apr 22 20:33:48.230645 2026] [:error] [pid 23776:tid 23800] [client 68.221.203.118:47670] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aejALLRExf-1pAbSeJvnmgAAAZY"]
[Wed Apr 22 20:33:50.727793 2026] [:error] [pid 9085:tid 9092] [client 68.221.203.118:46110] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aejALt-_-or9vQnlWnpfkAAAAUU"]
[Wed Apr 22 20:33:55.420987 2026] [:error] [pid 6344:tid 6365] [client 68.221.203.118:48112] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aejAM0DOTF-pkQnDeUnqkQAAABA"]
[Wed Apr 22 20:33:56.869869 2026] [:error] [pid 6384:tid 6406] [client 68.221.203.118:40738] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aejAND58M3t15ICeWHUuCgAAANM"]
[Wed Apr 22 20:33:57.864008 2026] [:error] [pid 6384:tid 6395] [client 68.221.203.118:41154] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aejANT58M3t15ICeWHUuDQAAAMg"]
[Wed Apr 22 20:33:59.634640 2026] [:error] [pid 9085:tid 9107] [client 68.221.203.118:55783] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aejAN9-_-or9vQnlWnpfpwAAAVQ"]
[Wed Apr 22 20:34:00.568024 2026] [:error] [pid 23776:tid 23784] [client 68.221.203.118:46472] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aejAOLRExf-1pAbSeJvnxgAAAYY"]
[Wed Apr 22 20:34:01.891634 2026] [:error] [pid 23776:tid 23791] [client 68.221.203.118:17630] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aejAObRExf-1pAbSeJvn0gAAAY0"]
[Wed Apr 22 20:34:03.299544 2026] [:error] [pid 6384:tid 6387] [client 68.221.203.118:48101] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aejAOz58M3t15ICeWHUuIAAAAMA"]
[Wed Apr 22 20:34:04.121010 2026] [:error] [pid 6252:tid 6314] [client 68.221.203.118:51002] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aejAPOtGYuiYb1nWBpRKZQAAAQI"]
[Wed Apr 22 20:34:05.059700 2026] [:error] [pid 6252:tid 6319] [client 68.221.203.118:6172] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aejAPetGYuiYb1nWBpRKZwAAAQc"]
[Wed Apr 22 20:34:06.064547 2026] [:error] [pid 6344:tid 6366] [client 68.221.203.118:40718] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aejAPkDOTF-pkQnDeUnqowAAABE"]
[Wed Apr 22 20:34:06.850944 2026] [:error] [pid 6344:tid 6369] [client 68.221.203.118:17606] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aejAPkDOTF-pkQnDeUnqpgAAABQ"]
[Wed Apr 22 20:34:07.876225 2026] [:error] [pid 23776:tid 23798] [client 68.221.203.118:17659] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aejAP7RExf-1pAbSeJvn8QAAAZQ"]
[Wed Apr 22 20:34:08.604648 2026] [:error] [pid 9085:tid 9102] [client 68.221.203.118:17660] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aejAQN-_-or9vQnlWnpfsAAAAU8"]
[Wed Apr 22 20:34:09.586749 2026] [:error] [pid 6344:tid 6361] [client 68.221.203.118:47627] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aejAQUDOTF-pkQnDeUnqrAAAAAw"]
[Wed Apr 22 20:34:10.882980 2026] [:error] [pid 6384:tid 6403] [client 68.221.203.118:46511] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aejAQj58M3t15ICeWHUuLwAAANA"]
[Wed Apr 22 20:34:12.115170 2026] [:error] [pid 9085:tid 9095] [client 68.221.203.118:56321] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aejARN-_-or9vQnlWnpftQAAAUg"]
[Wed Apr 22 20:34:13.187956 2026] [:error] [pid 6344:tid 6369] [client 68.221.203.118:40746] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aejARUDOTF-pkQnDeUnqsAAAABQ"]
[Wed Apr 22 20:34:13.897474 2026] [:error] [pid 6251:tid 6296] [client 68.221.203.118:46097] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "aejARSsFAzbyObL-SQ56pAAAAIs"]
[Wed Apr 22 20:34:14.562791 2026] [:error] [pid 6384:tid 6402] [client 68.221.203.118:17651] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aejARj58M3t15ICeWHUuPAAAAM8"]
[Wed Apr 22 20:34:15.278994 2026] [:error] [pid 6344:tid 6370] [client 68.221.203.118:55769] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aejAR0DOTF-pkQnDeUnqtAAAABU"]
[Wed Apr 22 20:34:16.036926 2026] [:error] [pid 6384:tid 6409] [client 68.221.203.118:17663] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aejASD58M3t15ICeWHUuQgAAANY"]
[Wed Apr 22 20:34:17.172874 2026] [:error] [pid 23776:tid 23800] [client 68.221.203.118:55746] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aejASbRExf-1pAbSeJvoJQAAAZY"]
[Wed Apr 22 20:34:18.379473 2026] [:error] [pid 6250:tid 6265] [client 68.221.203.118:40765] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aejASg-iZeQkqmQVfj4J0wAAAEs"]
[Wed Apr 22 20:34:20.825975 2026] [:error] [pid 9085:tid 9093] [client 68.221.203.118:47634] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aejATN-_-or9vQnlWnpfwwAAAUY"]
[Wed Apr 22 20:34:22.201359 2026] [:error] [pid 9085:tid 9092] [client 68.221.203.118:17627] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aejATt-_-or9vQnlWnpfyAAAAUU"]
[Wed Apr 22 20:34:25.902705 2026] [:error] [pid 6384:tid 6407] [client 68.221.203.118:39957] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aejAUT58M3t15ICeWHUuTQAAANQ"]
[Wed Apr 22 20:34:28.081513 2026] [:error] [pid 6250:tid 6259] [client 68.221.203.118:48086] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aejAVA-iZeQkqmQVfj4J3wAAAEU"]
[Wed Apr 22 20:34:34.376120 2026] [:error] [pid 9085:tid 9088] [client 68.221.203.118:55801] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aejAWt-_-or9vQnlWnpf2QAAAUE"]
[Wed Apr 22 20:34:41.443145 2026] [:error] [pid 6251:tid 6308] [client 68.221.203.118:55777] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aejAYSsFAzbyObL-SQ56vQAAAJc"]
[Wed Apr 22 20:34:42.804670 2026] [:error] [pid 23776:tid 23786] [client 68.221.203.118:48123] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aejAYrRExf-1pAbSeJvoNQAAAYg"]
[Wed Apr 22 20:34:54.162891 2026] [:error] [pid 6344:tid 6352] [client 68.221.203.118:46131] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aejAbkDOTF-pkQnDeUnq8gAAAAM"]
[Wed Apr 22 20:34:54.864506 2026] [:error] [pid 6384:tid 6407] [client 68.221.203.118:46137] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aejAbj58M3t15ICeWHUulgAAANQ"]
[Wed Apr 22 20:34:55.602813 2026] [:error] [pid 6252:tid 6320] [client 68.221.203.118:47622] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aejAb-tGYuiYb1nWBpRKnwAAAQg"]
[Wed Apr 22 20:34:56.246190 2026] [:error] [pid 9085:tid 9097] [client 68.221.203.118:55778] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/111.php"] [unique_id "aejAcN-_-or9vQnlWnpf_gAAAUo"]
[Wed Apr 22 20:34:57.055150 2026] [:error] [pid 6250:tid 6265] [client 68.221.203.118:47633] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aejAcQ-iZeQkqmQVfj4KCAAAAEs"]
[Wed Apr 22 20:34:57.706573 2026] [:error] [pid 6344:tid 6353] [client 68.221.203.118:57293] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aejAcUDOTF-pkQnDeUnq9gAAAAQ"]
[Wed Apr 22 20:34:58.489522 2026] [:error] [pid 9085:tid 9089] [client 68.221.203.118:46497] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aejAct-_-or9vQnlWnpgAQAAAUI"]
[Wed Apr 22 20:34:59.394440 2026] [:error] [pid 9085:tid 9096] [client 68.221.203.118:60318] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1.php"] [unique_id "aejAc9-_-or9vQnlWnpgBgAAAUk"]
[Wed Apr 22 20:35:00.642387 2026] [:error] [pid 9085:tid 9102] [client 68.221.203.118:40717] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aejAdN-_-or9vQnlWnpgDwAAAU8"]
[Wed Apr 22 20:35:01.392111 2026] [:error] [pid 9085:tid 9101] [client 68.221.203.118:46489] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aejAdd-_-or9vQnlWnpgEgAAAU4"]
[Wed Apr 22 20:35:02.568523 2026] [:error] [pid 23776:tid 23790] [client 68.221.203.118:50948] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aejAdrRExf-1pAbSeJvoZwAAAYw"]
[Wed Apr 22 20:35:03.535341 2026] [:error] [pid 6384:tid 6407] [client 68.221.203.118:46082] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "aejAdz58M3t15ICeWHUumwAAANQ"]
[Wed Apr 22 20:35:04.619890 2026] [:error] [pid 9085:tid 9101] [client 68.221.203.118:57286] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aejAeN-_-or9vQnlWnpgGwAAAU4"]
[Wed Apr 22 20:35:06.130973 2026] [:error] [pid 6384:tid 6400] [client 68.221.203.118:40743] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aejAej58M3t15ICeWHUuoAAAAM0"]
[Wed Apr 22 20:35:06.767168 2026] [:error] [pid 6384:tid 6388] [client 68.221.203.118:46116] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aejAej58M3t15ICeWHUuoQAAAME"]
[Wed Apr 22 20:35:08.154347 2026] [:error] [pid 6251:tid 6290] [client 68.221.203.118:53490] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "aejAfCsFAzbyObL-SQ565gAAAIU"]
[Wed Apr 22 20:35:08.745682 2026] [:error] [pid 6384:tid 6410] [client 68.221.203.118:60306] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aejAfD58M3t15ICeWHUupAAAANc"]
[Wed Apr 22 20:35:09.492411 2026] [:error] [pid 9085:tid 9102] [client 68.221.203.118:47686] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aejAfd-_-or9vQnlWnpgJAAAAU8"]
[Wed Apr 22 20:35:10.640462 2026] [:error] [pid 6252:tid 6327] [client 68.221.203.118:48105] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aejAfutGYuiYb1nWBpRKpwAAAQ8"]
[Wed Apr 22 20:35:11.553775 2026] [:error] [pid 9085:tid 9105] [client 68.221.203.118:47651] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "aejAf9-_-or9vQnlWnpgKgAAAVI"]
[Wed Apr 22 20:35:12.850912 2026] [:error] [pid 6384:tid 6402] [client 68.221.203.118:48104] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aejAgD58M3t15ICeWHUuqgAAAM8"]
[Wed Apr 22 20:35:14.996964 2026] [:error] [pid 6250:tid 6265] [client 68.221.203.118:57304] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aejAgg-iZeQkqmQVfj4KGgAAAEs"]
[Wed Apr 22 20:35:17.998731 2026] [:error] [pid 9085:tid 9097] [client 68.221.203.118:60327] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aejAhd-_-or9vQnlWnpgOAAAAUo"]
[Wed Apr 22 20:35:21.475607 2026] [:error] [pid 23776:tid 23788] [client 68.221.203.118:17855] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "aejAibRExf-1pAbSeJvofAAAAYo"]
[Wed Apr 22 20:35:31.958830 2026] [:error] [pid 6252:tid 6328] [client 68.221.203.118:46526] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aejAk-tGYuiYb1nWBpRKtQAAARA"]
[Wed Apr 22 20:35:33.381599 2026] [:error] [pid 6252:tid 6313] [client 68.221.203.118:48087] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aejAletGYuiYb1nWBpRKtgAAAQE"]
[Wed Apr 22 20:35:34.315479 2026] [:error] [pid 6251:tid 6299] [client 68.221.203.118:17624] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aejAlisFAzbyObL-SQ568AAAAI4"]
[Wed Apr 22 20:35:35.321635 2026] [:error] [pid 9085:tid 9100] [client 68.221.203.118:17620] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "aejAl9-_-or9vQnlWnpgaAAAAU0"]
[Wed Apr 22 20:35:36.122979 2026] [:error] [pid 9085:tid 9107] [client 68.221.203.118:17621] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aejAmN-_-or9vQnlWnpgbgAAAVQ"]
[Wed Apr 22 20:35:37.454698 2026] [:error] [pid 6250:tid 6258] [client 68.221.203.118:17620] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aejAmQ-iZeQkqmQVfj4KMAAAAEQ"]
[Wed Apr 22 20:35:38.750897 2026] [:error] [pid 6250:tid 6257] [client 68.221.203.118:48064] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aejAmg-iZeQkqmQVfj4KNAAAAEM"]
[Wed Apr 22 20:35:39.388522 2026] [:error] [pid 9085:tid 9098] [client 68.221.203.118:57351] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "aejAm9-_-or9vQnlWnpgcwAAAUs"]
[Wed Apr 22 20:35:40.426182 2026] [:error] [pid 6384:tid 6402] [client 68.221.203.118:57347] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aejAnD58M3t15ICeWHUu1gAAAM8"]
[Wed Apr 22 20:35:43.123110 2026] [:error] [pid 9085:tid 9087] [client 68.221.203.118:57371] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "aejAn9-_-or9vQnlWnpgfAAAAUA"]
[Wed Apr 22 20:36:06.856925 2026] [:error] [pid 6344:tid 6373] [client 68.221.203.118:49912] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aejAtkDOTF-pkQnDeUnrOwAAABg"]
[Wed Apr 22 20:36:11.314927 2026] [:error] [pid 23776:tid 23790] [client 68.221.203.118:48738] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aejAu7RExf-1pAbSeJvowgAAAYw"]
[Wed Apr 22 20:36:13.140873 2026] [:error] [pid 6251:tid 6307] [client 68.221.203.118:7402] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aejAvSsFAzbyObL-SQ57DwAAAJY"]
[Wed Apr 22 20:36:15.050612 2026] [:error] [pid 6250:tid 6261] [client 68.221.203.118:40649] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aejAvw-iZeQkqmQVfj4KQQAAAEc"]
[Wed Apr 22 20:36:16.444625 2026] [:error] [pid 6384:tid 6394] [client 68.221.203.118:48749] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aejAwD58M3t15ICeWHUvBgAAAMc"]
[Wed Apr 22 20:36:17.560030 2026] [:error] [pid 6344:tid 6357] [client 68.221.203.118:48704] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aejAwUDOTF-pkQnDeUnrQgAAAAg"]
[Wed Apr 22 20:36:19.672034 2026] [:error] [pid 6251:tid 6294] [client 68.221.203.118:50461] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aejAwysFAzbyObL-SQ57FAAAAIk"]
[Wed Apr 22 20:36:23.197392 2026] [:error] [pid 6384:tid 6398] [client 68.221.203.118:15033] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "aejAxz58M3t15ICeWHUvFwAAAMs"]
[Wed Apr 22 20:36:25.081303 2026] [:error] [pid 6344:tid 6359] [client 68.221.203.118:57891] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aejAyUDOTF-pkQnDeUnrUAAAAAo"]
[Wed Apr 22 20:36:26.585381 2026] [:error] [pid 6250:tid 6276] [client 68.221.203.118:40231] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aejAyg-iZeQkqmQVfj4KSQAAAFY"]
[Wed Apr 22 20:36:29.550877 2026] [:error] [pid 6344:tid 6368] [client 68.221.203.118:52431] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aejAzUDOTF-pkQnDeUnrWgAAABM"]
[Wed Apr 22 20:36:31.221285 2026] [:error] [pid 6250:tid 6261] [client 68.221.203.118:55163] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aejAzw-iZeQkqmQVfj4KTQAAAEc"]
[Wed Apr 22 20:36:34.136306 2026] [:error] [pid 6251:tid 6288] [client 68.221.203.118:55124] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aejA0isFAzbyObL-SQ57HwAAAIM"]
[Wed Apr 22 20:36:35.385464 2026] [:error] [pid 6344:tid 6356] [client 68.221.203.118:13665] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aejA00DOTF-pkQnDeUnrYwAAAAc"]
[Wed Apr 22 20:36:37.086248 2026] [:error] [pid 6344:tid 6371] [client 68.221.203.118:56787] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aejA1UDOTF-pkQnDeUnrZQAAABY"]
[Wed Apr 22 20:36:37.876767 2026] [:error] [pid 6250:tid 6255] [client 68.221.203.118:55162] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aejA1Q-iZeQkqmQVfj4KTgAAAEE"]
[Wed Apr 22 20:36:39.650856 2026] [:error] [pid 6384:tid 6401] [client 68.221.203.118:54089] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aejA1z58M3t15ICeWHUvPgAAAM4"]
[Wed Apr 22 20:36:40.679634 2026] [:error] [pid 6252:tid 6332] [client 68.221.203.118:13645] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aejA2OtGYuiYb1nWBpRK0AAAARQ"]
[Wed Apr 22 20:36:41.602069 2026] [:error] [pid 9085:tid 9088] [client 68.221.203.118:56885] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aejA2d-_-or9vQnlWnpg0AAAAUE"]
[Wed Apr 22 20:36:42.428881 2026] [:error] [pid 9085:tid 9099] [client 68.221.203.118:56866] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ol.php"] [unique_id "aejA2t-_-or9vQnlWnpg0wAAAUw"]
[Wed Apr 22 20:36:43.538940 2026] [:error] [pid 6344:tid 6369] [client 68.221.203.118:54111] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aejA20DOTF-pkQnDeUnrawAAABQ"]
[Wed Apr 22 20:36:44.297963 2026] [:error] [pid 6384:tid 6390] [client 68.221.203.118:43798] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aejA3D58M3t15ICeWHUvUgAAAMM"]
[Wed Apr 22 20:36:45.127882 2026] [:error] [pid 6344:tid 6360] [client 68.221.203.118:54139] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aejA3UDOTF-pkQnDeUnrbQAAAAs"]
[Wed Apr 22 20:36:45.908613 2026] [:error] [pid 6252:tid 6328] [client 68.221.203.118:45428] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "aejA3etGYuiYb1nWBpRK0wAAARA"]
[Wed Apr 22 20:36:46.543909 2026] [:error] [pid 6251:tid 6298] [client 68.221.203.118:54087] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aejA3isFAzbyObL-SQ57IwAAAI0"]
[Wed Apr 22 20:36:47.520002 2026] [:error] [pid 6384:tid 6405] [client 68.221.203.118:45383] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aejA3z58M3t15ICeWHUvXAAAANI"]
[Wed Apr 22 20:36:48.265736 2026] [:error] [pid 6384:tid 6393] [client 68.221.203.118:41877] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aejA4D58M3t15ICeWHUvXwAAAMY"]
[Wed Apr 22 20:36:49.106218 2026] [:error] [pid 6384:tid 6396] [client 68.221.203.118:45010] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aejA4T58M3t15ICeWHUvZQAAAMk"]
[Wed Apr 22 20:36:49.785785 2026] [:error] [pid 6344:tid 6364] [client 68.221.203.118:45386] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aejA4UDOTF-pkQnDeUnrdwAAAA8"]
[Wed Apr 22 20:36:50.456540 2026] [:error] [pid 23776:tid 23780] [client 68.221.203.118:49811] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aejA4rRExf-1pAbSeJvo4gAAAYI"]
[Wed Apr 22 20:36:51.360459 2026] [:error] [pid 6344:tid 6369] [client 68.221.203.118:54100] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aejA40DOTF-pkQnDeUnregAAABQ"]
[Wed Apr 22 20:36:52.024185 2026] [:error] [pid 6384:tid 6397] [client 68.221.203.118:23613] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "aejA5D58M3t15ICeWHUvagAAAMo"]
[Wed Apr 22 20:36:52.919899 2026] [:error] [pid 6344:tid 6352] [client 68.221.203.118:54083] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aejA5EDOTF-pkQnDeUnrfwAAAAM"]
[Wed Apr 22 20:36:53.693840 2026] [:error] [pid 6384:tid 6400] [client 68.221.203.118:46960] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aejA5T58M3t15ICeWHUvbgAAAM0"]
[Wed Apr 22 20:36:54.287190 2026] [:error] [pid 6384:tid 6395] [client 68.221.203.118:53019] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aejA5j58M3t15ICeWHUvdAAAAMg"]
[Wed Apr 22 20:36:55.074721 2026] [:error] [pid 6252:tid 6323] [client 68.221.203.118:53040] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "aejA5-tGYuiYb1nWBpRK3AAAAQs"]
[Wed Apr 22 20:36:55.691092 2026] [:error] [pid 6384:tid 6394] [client 68.221.203.118:53017] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aejA5z58M3t15ICeWHUveQAAAMc"]
[Wed Apr 22 20:36:56.375475 2026] [:error] [pid 6344:tid 6367] [client 68.221.203.118:47279] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aejA6EDOTF-pkQnDeUnrgQAAABI"]
[Wed Apr 22 20:36:57.084965 2026] [:error] [pid 6252:tid 6324] [client 68.221.203.118:44618] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aejA6etGYuiYb1nWBpRK3wAAAQw"]
[Wed Apr 22 20:36:58.240645 2026] [:error] [pid 6384:tid 6387] [client 68.221.203.118:54623] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aejA6j58M3t15ICeWHUvfwAAAMA"]
[Wed Apr 22 20:36:59.393297 2026] [:error] [pid 6384:tid 6394] [client 68.221.203.118:54616] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aejA6z58M3t15ICeWHUvhgAAAMc"]
[Wed Apr 22 20:37:00.928600 2026] [:error] [pid 6384:tid 6389] [client 68.221.203.118:54597] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aejA7D58M3t15ICeWHUvigAAAMI"]
[Wed Apr 22 20:37:02.124033 2026] [:error] [pid 6384:tid 6390] [client 68.221.203.118:44337] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aejA7j58M3t15ICeWHUvjgAAAMM"]
[Wed Apr 22 20:37:03.270358 2026] [:error] [pid 9085:tid 9110] [client 68.221.203.118:46934] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "aejA79-_-or9vQnlWnpg2wAAAVc"]
[Wed Apr 22 20:37:05.748296 2026] [:error] [pid 6251:tid 6285] [client 68.221.203.118:59888] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "aejA8SsFAzbyObL-SQ57MgAAAIA"]
[Wed Apr 22 20:37:17.698405 2026] [:error] [pid 6252:tid 6328] [client 68.221.203.118:23580] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aejA_etGYuiYb1nWBpRLAQAAARA"]
[Wed Apr 22 20:37:18.361025 2026] [:error] [pid 6384:tid 6390] [client 68.221.203.118:44990] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aejA_j58M3t15ICeWHUvxAAAAMM"]
[Wed Apr 22 20:37:19.469855 2026] [:error] [pid 9085:tid 9088] [client 68.221.203.118:51988] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aejA_9-_-or9vQnlWnpg7QAAAUE"]
[Wed Apr 22 20:37:20.562367 2026] [:error] [pid 9085:tid 9105] [client 68.221.203.118:51060] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "aejBAN-_-or9vQnlWnpg8gAAAVI"]
[Wed Apr 22 20:37:22.829000 2026] [:error] [pid 9085:tid 9108] [client 68.221.203.118:59819] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aejBAt-_-or9vQnlWnpg-QAAAVU"]
[Wed Apr 22 20:37:25.017665 2026] [:error] [pid 6384:tid 6391] [client 68.221.203.118:44063] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aejBBT58M3t15ICeWHUvzwAAAMQ"]
[Wed Apr 22 20:37:26.065861 2026] [:error] [pid 6252:tid 6327] [client 68.221.203.118:51071] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aejBButGYuiYb1nWBpRLBgAAAQ8"]
[Wed Apr 22 20:37:27.325741 2026] [:error] [pid 6250:tid 6271] [client 68.221.203.118:7560] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aejBBw-iZeQkqmQVfj4KWwAAAFE"]
[Wed Apr 22 20:37:29.968072 2026] [:error] [pid 6250:tid 6254] [client 68.221.203.118:51015] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aejBCQ-iZeQkqmQVfj4KZAAAAEA"]
[Wed Apr 22 20:37:36.538661 2026] [:error] [pid 23776:tid 23780] [client 68.221.203.118:37439] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aejBELRExf-1pAbSeJvpAgAAAYI"]
[Wed Apr 22 20:37:37.179343 2026] [:error] [pid 9085:tid 9088] [client 68.221.203.118:44947] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aejBEd-_-or9vQnlWnphCwAAAUE"]
[Wed Apr 22 20:37:39.605757 2026] [:error] [pid 6384:tid 6389] [client 68.221.203.118:51913] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "aejBEz58M3t15ICeWHUv5QAAAMI"]
[Wed Apr 22 20:37:40.812563 2026] [:error] [pid 6252:tid 6316] [client 68.221.203.118:58869] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aejBFOtGYuiYb1nWBpRLFAAAAQQ"]
[Wed Apr 22 20:37:42.045259 2026] [:error] [pid 6344:tid 6355] [client 68.221.203.118:59835] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aejBFkDOTF-pkQnDeUnrpQAAAAY"]
[Wed Apr 22 20:37:42.907025 2026] [:error] [pid 6384:tid 6392] [client 68.221.203.118:51949] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aejBFj58M3t15ICeWHUv6wAAAMU"]
[Wed Apr 22 20:37:43.841558 2026] [:error] [pid 6250:tid 6274] [client 68.221.203.118:51955] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aejBFw-iZeQkqmQVfj4KaQAAAFQ"]
[Wed Apr 22 20:37:45.397060 2026] [:error] [pid 6250:tid 6255] [client 68.221.203.118:14621] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aejBGQ-iZeQkqmQVfj4KbwAAAEE"]
[Wed Apr 22 20:37:46.174492 2026] [:error] [pid 6344:tid 6352] [client 68.221.203.118:37411] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aejBGkDOTF-pkQnDeUnrrAAAAAM"]
[Wed Apr 22 20:37:47.323969 2026] [:error] [pid 6384:tid 6404] [client 68.221.203.118:44083] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aejBGz58M3t15ICeWHUv8QAAANE"]
[Wed Apr 22 20:37:48.198449 2026] [:error] [pid 23776:tid 23788] [client 68.221.203.118:37389] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "aejBHLRExf-1pAbSeJvpEAAAAYo"]
[Wed Apr 22 20:37:48.858670 2026] [:error] [pid 6252:tid 6312] [client 68.221.203.118:58842] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aejBHOtGYuiYb1nWBpRLGQAAAQA"]
[Wed Apr 22 20:37:49.377655 2026] [:error] [pid 6344:tid 6352] [client 68.221.203.118:51048] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aejBHUDOTF-pkQnDeUnruQAAAAM"]
[Wed Apr 22 20:37:50.045934 2026] [:error] [pid 6344:tid 6353] [client 68.221.203.118:39873] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aejBHkDOTF-pkQnDeUnrvgAAAAQ"]
[Wed Apr 22 20:37:50.651866 2026] [:error] [pid 23776:tid 23786] [client 68.221.203.118:51961] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "aejBHrRExf-1pAbSeJvpFQAAAYg"]
[Wed Apr 22 20:37:51.828697 2026] [:error] [pid 6344:tid 6361] [client 68.221.203.118:39935] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aejBH0DOTF-pkQnDeUnrxgAAAAw"]
[Wed Apr 22 20:37:52.647900 2026] [:error] [pid 9085:tid 9087] [client 68.221.203.118:14593] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aejBIN-_-or9vQnlWnphJwAAAUA"]
[Wed Apr 22 20:37:53.474086 2026] [:error] [pid 23776:tid 23802] [client 68.221.203.118:40908] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aejBIbRExf-1pAbSeJvpHQAAAZg"]
[Wed Apr 22 20:37:54.453537 2026] [:error] [pid 6251:tid 6306] [client 68.221.203.118:37434] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "aejBIisFAzbyObL-SQ57XgAAAJU"]
[Wed Apr 22 20:37:55.221538 2026] [:error] [pid 23776:tid 23787] [client 68.221.203.118:51921] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aejBI7RExf-1pAbSeJvpJQAAAYk"]
[Wed Apr 22 20:37:55.797313 2026] [:error] [pid 6251:tid 6298] [client 68.221.203.118:47304] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aejBIysFAzbyObL-SQ57XwAAAI0"]
[Wed Apr 22 20:37:57.165913 2026] [:error] [pid 23776:tid 23781] [client 68.221.203.118:51037] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aejBJbRExf-1pAbSeJvpLAAAAYM"]
[Wed Apr 22 20:37:58.001757 2026] [:error] [pid 6252:tid 6336] [client 68.221.203.118:58833] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aejBJutGYuiYb1nWBpRLHQAAARg"]
[Wed Apr 22 20:37:59.303809 2026] [:error] [pid 6384:tid 6393] [client 68.221.203.118:39934] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejBJz58M3t15ICeWHUv-gAAAMY"]
[Wed Apr 22 20:38:01.189749 2026] [:error] [pid 6250:tid 6271] [client 68.221.203.118:37437] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejBKQ-iZeQkqmQVfj4KegAAAFE"]
[Wed Apr 22 20:38:03.654187 2026] [:error] [pid 23776:tid 23801] [client 68.221.203.118:51944] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejBK7RExf-1pAbSeJvpNgAAAZc"]
[Wed Apr 22 20:38:07.530172 2026] [:error] [pid 6384:tid 6390] [client 68.221.203.118:44967] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "aejBLz58M3t15ICeWHUwCwAAAMM"]
[Wed Apr 22 20:38:09.181101 2026] [:error] [pid 6251:tid 6300] [client 68.221.203.118:59815] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aejBMSsFAzbyObL-SQ57ZgAAAI8"]
[Wed Apr 22 20:38:10.840950 2026] [:error] [pid 6384:tid 6392] [client 68.221.203.118:40904] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aejBMj58M3t15ICeWHUwDwAAAMU"]
[Wed Apr 22 20:38:11.947023 2026] [:error] [pid 6384:tid 6403] [client 68.221.203.118:40936] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aejBMz58M3t15ICeWHUwEQAAANA"]
[Wed Apr 22 20:38:13.082484 2026] [:error] [pid 23776:tid 23779] [client 68.221.203.118:51034] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aejBNbRExf-1pAbSeJvpUQAAAYE"]
[Wed Apr 22 20:38:14.159174 2026] [:error] [pid 6252:tid 6312] [client 68.221.203.118:51933] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aejBNutGYuiYb1nWBpRLMQAAAQA"]
[Wed Apr 22 20:38:15.285643 2026] [:error] [pid 6384:tid 6399] [client 68.221.203.118:51957] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aejBNz58M3t15ICeWHUwFwAAAMw"]
[Wed Apr 22 20:38:15.958128 2026] [:error] [pid 9085:tid 9104] [client 68.221.203.118:59817] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aejBN9-_-or9vQnlWnphNAAAAVE"]
[Wed Apr 22 20:38:16.799742 2026] [:error] [pid 23776:tid 23792] [client 68.221.203.118:14598] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "aejBOLRExf-1pAbSeJvpYAAAAY4"]
[Wed Apr 22 20:38:24.226165 2026] [:error] [pid 23776:tid 23782] [client 68.221.203.118:43375] [client 68.221.203.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aejBQLRExf-1pAbSeJvpeQAAAYQ"]
[Wed Apr 22 20:38:26.086180 2026] [:error] [pid 23776:tid 23786] [client 68.221.203.118:14610] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aejBQrRExf-1pAbSeJvpgAAAAYg"]
[Wed Apr 22 20:38:27.067353 2026] [:error] [pid 9085:tid 9109] [client 68.221.203.118:14618] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aejBQ9-_-or9vQnlWnphOQAAAVY"]
[Wed Apr 22 20:38:28.538814 2026] [:error] [pid 6384:tid 6405] [client 68.221.203.118:47348] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aejBRD58M3t15ICeWHUwNAAAANI"]
[Wed Apr 22 20:38:29.457785 2026] [:error] [pid 6250:tid 6264] [client 68.221.203.118:14605] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aejBRQ-iZeQkqmQVfj4KjAAAAEo"]
[Wed Apr 22 20:38:30.448830 2026] [:error] [pid 9085:tid 9087] [client 68.221.203.118:59824] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aejBRt-_-or9vQnlWnphQQAAAUA"]
[Wed Apr 22 20:38:31.186513 2026] [:error] [pid 9085:tid 9094] [client 68.221.203.118:43346] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aejBR9-_-or9vQnlWnphRAAAAUc"]
[Wed Apr 22 20:38:31.873119 2026] [:error] [pid 6344:tid 6361] [client 68.221.203.118:58876] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aejBR0DOTF-pkQnDeUnsAQAAAAw"]
[Wed Apr 22 20:38:33.204596 2026] [:error] [pid 6384:tid 6409] [client 68.221.203.118:43363] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "aejBST58M3t15ICeWHUwPgAAANY"]
[Wed Apr 22 20:38:33.935343 2026] [:error] [pid 23776:tid 23783] [client 68.221.203.118:40911] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aejBSbRExf-1pAbSeJvpjAAAAYU"]
[Wed Apr 22 20:38:34.659844 2026] [:error] [pid 6250:tid 6272] [client 68.221.203.118:44974] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aejBSg-iZeQkqmQVfj4KjgAAAFI"]
[Wed Apr 22 20:38:35.380294 2026] [:error] [pid 6252:tid 6319] [client 68.221.203.118:43382] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aejBS-tGYuiYb1nWBpRLPwAAAQc"]
[Wed Apr 22 20:38:36.485814 2026] [:error] [pid 6250:tid 6273] [client 68.221.203.118:44974] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "aejBTA-iZeQkqmQVfj4KkQAAAFM"]
[Wed Apr 22 20:38:37.427727 2026] [:error] [pid 6344:tid 6361] [client 68.221.203.118:47345] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aejBTUDOTF-pkQnDeUnsDAAAAAw"]
[Wed Apr 22 20:38:38.423526 2026] [:error] [pid 6251:tid 6288] [client 68.221.203.118:58863] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aejBTisFAzbyObL-SQ57bwAAAIM"]
[Wed Apr 22 20:38:39.848045 2026] [:error] [pid 6344:tid 6354] [client 68.221.203.118:40915] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aejBT0DOTF-pkQnDeUnsEAAAAAU"]
[Wed Apr 22 20:38:40.839940 2026] [:error] [pid 6250:tid 6263] [client 68.221.203.118:47321] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aejBUA-iZeQkqmQVfj4KmQAAAEk"]
[Wed Apr 22 20:38:41.556897 2026] [:error] [pid 23776:tid 23792] [client 68.221.203.118:39926] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aejBUbRExf-1pAbSeJvplwAAAY4"]
[Wed Apr 22 20:38:42.383811 2026] [:error] [pid 23776:tid 23789] [client 68.221.203.118:7557] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aejBUrRExf-1pAbSeJvpmQAAAYs"]
[Wed Apr 22 20:38:43.392438 2026] [:error] [pid 6252:tid 6315] [client 68.221.203.118:40941] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aejBU-tGYuiYb1nWBpRLRgAAAQM"]
[Wed Apr 22 20:38:44.006517 2026] [:error] [pid 6251:tid 6298] [client 68.221.203.118:37396] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "aejBVCsFAzbyObL-SQ57egAAAI0"]
[Wed Apr 22 20:38:44.992944 2026] [:error] [pid 23776:tid 23778] [client 68.221.203.118:14499] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aejBVLRExf-1pAbSeJvpmwAAAYA"]
[Wed Apr 22 20:38:46.114315 2026] [:error] [pid 6250:tid 6270] [client 68.221.203.118:47320] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aejBVg-iZeQkqmQVfj4KowAAAFA"]
[Wed Apr 22 20:38:47.148183 2026] [:error] [pid 6344:tid 6355] [client 68.221.203.118:51919] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aejBV0DOTF-pkQnDeUnsEwAAAAY"]
[Wed Apr 22 20:38:48.610446 2026] [:error] [pid 6251:tid 6302] [client 68.221.203.118:40910] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "aejBWCsFAzbyObL-SQ57ggAAAJE"]
[Wed Apr 22 20:38:49.223556 2026] [:error] [pid 9085:tid 9106] [client 68.221.203.118:58878] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aejBWd-_-or9vQnlWnphTgAAAVM"]
[Wed Apr 22 20:38:49.790916 2026] [:error] [pid 6251:tid 6299] [client 68.221.203.118:51943] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aejBWSsFAzbyObL-SQ57hwAAAI4"]
[Wed Apr 22 20:38:50.430362 2026] [:error] [pid 9085:tid 9092] [client 68.221.203.118:51936] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aejBWt-_-or9vQnlWnphUQAAAUU"]
[Wed Apr 22 20:38:50.992182 2026] [:error] [pid 6250:tid 6266] [client 68.221.203.118:39903] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aejBWg-iZeQkqmQVfj4KrQAAAEw"]
[Wed Apr 22 20:38:51.645019 2026] [:error] [pid 23776:tid 23792] [client 68.221.203.118:37376] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aejBW7RExf-1pAbSeJvpngAAAY4"]
[Wed Apr 22 20:38:52.165113 2026] [:error] [pid 6344:tid 6365] [client 68.221.203.118:51947] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aejBXEDOTF-pkQnDeUnsGAAAABA"]
[Wed Apr 22 20:38:52.794643 2026] [:error] [pid 6250:tid 6270] [client 68.221.203.118:44989] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aejBXA-iZeQkqmQVfj4KsAAAAFA"]
[Wed Apr 22 20:38:53.716005 2026] [:error] [pid 6344:tid 6370] [client 68.221.203.118:44052] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "aejBXUDOTF-pkQnDeUnsGgAAABU"]
[Wed Apr 22 20:38:55.361459 2026] [:error] [pid 6344:tid 6366] [client 68.221.203.118:14471] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aejBX0DOTF-pkQnDeUnsHAAAABE"]
[Wed Apr 22 20:38:55.896187 2026] [:error] [pid 6250:tid 6271] [client 68.221.203.118:58860] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aejBXw-iZeQkqmQVfj4KvQAAAFE"]
[Wed Apr 22 20:38:56.414492 2026] [:error] [pid 9085:tid 9089] [client 68.221.203.118:37406] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aejBYN-_-or9vQnlWnphWAAAAUI"]
[Wed Apr 22 20:38:57.114099 2026] [:error] [pid 6384:tid 6387] [client 68.221.203.118:39780] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aejBYT58M3t15ICeWHUwSAAAAMA"]
[Wed Apr 22 20:38:57.809998 2026] [:error] [pid 23776:tid 23795] [client 68.221.203.118:43342] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aejBYbRExf-1pAbSeJvpowAAAZE"]
[Wed Apr 22 20:38:58.610933 2026] [:error] [pid 6250:tid 6272] [client 68.221.203.118:14496] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aejBYg-iZeQkqmQVfj4KwwAAAFI"]
[Wed Apr 22 20:39:00.631706 2026] [:error] [pid 6252:tid 6325] [client 68.221.203.118:51911] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aejBZOtGYuiYb1nWBpRLUwAAAQ0"]
[Wed Apr 22 20:39:01.690269 2026] [:error] [pid 9085:tid 9098] [client 68.221.203.118:39810] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "aejBZd-_-or9vQnlWnphYgAAAUs"]
[Wed Apr 22 20:39:03.275431 2026] [:error] [pid 9085:tid 9090] [client 68.221.203.118:51028] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aejBZ9-_-or9vQnlWnphZAAAAUM"]
[Wed Apr 22 20:39:03.992580 2026] [:error] [pid 9085:tid 9111] [client 68.221.203.118:40899] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aejBZ9-_-or9vQnlWnphaAAAAVg"]
[Wed Apr 22 20:39:04.898885 2026] [:error] [pid 6344:tid 6354] [client 68.221.203.118:37421] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aejBaEDOTF-pkQnDeUnsJAAAAAU"]
[Wed Apr 22 20:39:05.566473 2026] [:error] [pid 9085:tid 9109] [client 68.221.203.118:44936] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "aejBad-_-or9vQnlWnphaQAAAVY"]
[Wed Apr 22 20:39:06.092347 2026] [:error] [pid 6384:tid 6410] [client 68.221.203.118:39845] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aejBaj58M3t15ICeWHUwUgAAANc"]
[Wed Apr 22 20:39:06.627532 2026] [:error] [pid 6344:tid 6360] [client 68.221.203.118:39933] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aejBakDOTF-pkQnDeUnsJwAAAAs"]
[Wed Apr 22 20:39:07.436635 2026] [:error] [pid 9085:tid 9098] [client 68.221.203.118:39887] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aejBa9-_-or9vQnlWnphbQAAAUs"]
[Wed Apr 22 20:39:08.165871 2026] [:error] [pid 23776:tid 23779] [client 68.221.203.118:39828] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "aejBbLRExf-1pAbSeJvppwAAAYE"]
[Wed Apr 22 20:39:08.974235 2026] [:error] [pid 6384:tid 6411] [client 68.221.203.118:58829] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aejBbD58M3t15ICeWHUwVwAAANg"]
[Wed Apr 22 20:39:09.826928 2026] [:error] [pid 6384:tid 6400] [client 68.221.203.118:43391] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aejBbT58M3t15ICeWHUwWwAAAM0"]
[Wed Apr 22 20:39:10.466778 2026] [:error] [pid 6252:tid 6322] [client 68.221.203.118:39849] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aejBbutGYuiYb1nWBpRLXAAAAQo"]
[Wed Apr 22 20:39:11.052550 2026] [:error] [pid 6252:tid 6329] [client 68.221.203.118:37421] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aejBb-tGYuiYb1nWBpRLYAAAARE"]
[Wed Apr 22 20:39:12.202029 2026] [:error] [pid 9085:tid 9098] [client 68.221.203.118:51953] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aejBcN-_-or9vQnlWnphfgAAAUs"]
[Wed Apr 22 20:39:12.893571 2026] [:error] [pid 6252:tid 6315] [client 68.221.203.118:44931] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aejBcOtGYuiYb1nWBpRLcgAAAQM"]
[Wed Apr 22 20:39:13.777309 2026] [:error] [pid 23776:tid 23784] [client 68.221.203.118:39829] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aejBcbRExf-1pAbSeJvpsgAAAYY"]
[Wed Apr 22 20:39:14.326478 2026] [:error] [pid 9085:tid 9091] [client 68.221.203.118:43859] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "aejBct-_-or9vQnlWnphkwAAAUQ"]
[Wed Apr 22 20:39:15.151974 2026] [:error] [pid 9085:tid 9089] [client 68.221.203.118:51910] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aejBc9-_-or9vQnlWnphmAAAAUI"]
[Wed Apr 22 20:39:16.147674 2026] [:error] [pid 6252:tid 6322] [client 68.221.203.118:51009] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aejBdOtGYuiYb1nWBpRLewAAAQo"]
[Wed Apr 22 20:39:17.184200 2026] [:error] [pid 6384:tid 6391] [client 68.221.203.118:37408] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aejBdT58M3t15ICeWHUwZQAAAMQ"]
[Wed Apr 22 20:39:18.111689 2026] [:error] [pid 6252:tid 6323] [client 68.221.203.118:14525] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/g.php"] [unique_id "aejBdutGYuiYb1nWBpRLfgAAAQs"]
[Wed Apr 22 20:39:19.656050 2026] [:error] [pid 6344:tid 6361] [client 68.221.203.118:39842] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aejBd0DOTF-pkQnDeUnsLAAAAAw"]
[Wed Apr 22 20:39:20.738158 2026] [:error] [pid 23776:tid 23801] [client 68.221.203.118:51922] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aejBeLRExf-1pAbSeJvpwAAAAZc"]
[Wed Apr 22 20:39:22.123582 2026] [:error] [pid 6252:tid 6315] [client 68.221.203.118:51922] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aejBeutGYuiYb1nWBpRLiAAAAQM"]
[Wed Apr 22 20:39:23.431034 2026] [:error] [pid 6252:tid 6323] [client 68.221.203.118:41518] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "aejBe-tGYuiYb1nWBpRLiwAAAQs"]
[Wed Apr 22 20:39:24.386175 2026] [:error] [pid 23776:tid 23791] [client 68.221.203.118:39760] [client 68.221.203.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "aejBfLRExf-1pAbSeJvpzAAAAY0"]
[Wed Apr 22 22:14:22.904908 2026] [:error] [pid 6250:tid 6266] [client 8.213.218.53:59298] [client 8.213.218.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aejXvg-iZeQkqmQVfj4itgAAAEw"]
[Wed Apr 22 22:14:25.188409 2026] [:error] [pid 23776:tid 23780] [client 8.213.218.53:59691] [client 8.213.218.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aejXwbRExf-1pAbSeJsVlAAAAYI"]
[Wed Apr 22 22:42:07.922763 2026] [:error] [pid 6344:tid 6362] [client 43.153.87.54:58994] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aejeP0DOTF-pkQnDeUkR4AAAAA0"]
[Wed Apr 22 22:53:16.954145 2026] [:error] [pid 6250:tid 6259] [client 45.150.174.91:56776] [client 45.150.174.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.150.174.91, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aejg3A-iZeQkqmQVfj4qIQAAAEU"]
[Wed Apr 22 22:53:18.272189 2026] [:error] [pid 23776:tid 23779] [client 45.150.174.91:33622] [client 45.150.174.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.150.174.91, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aejg3rRExf-1pAbSeJsi0gAAAYE"], referer: http://measureyourcause.com.au/wp-login.php
[Wed Apr 22 22:59:18.133151 2026] [:error] [pid 6252:tid 6312] [client 182.42.104.32:55736] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aejiRutGYuiYb1nWBpRl2AAAAQA"]
[Wed Apr 22 23:55:23.983149 2026] [:error] [pid 9085:tid 9099] [client 20.100.192.90:4084] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aejva9-_-or9vQnlWnrrnwAAAUw"]
[Wed Apr 22 23:55:24.864986 2026] [:error] [pid 9085:tid 9098] [client 20.100.192.90:4063] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aejvbN-_-or9vQnlWnrroQAAAUs"]
[Wed Apr 22 23:55:25.994531 2026] [:error] [pid 23776:tid 23786] [client 20.100.192.90:4018] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aejvbbRExf-1pAbSeJs06wAAAYg"]
[Wed Apr 22 23:55:28.953694 2026] [:error] [pid 6384:tid 6390] [client 20.100.192.90:4037] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aejvcD58M3t15ICeWHWe2wAAAMM"]
[Wed Apr 22 23:55:30.141479 2026] [:error] [pid 6384:tid 6394] [client 20.100.192.90:4040] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejvcj58M3t15ICeWHWe4AAAAMc"]
[Wed Apr 22 23:55:31.025123 2026] [:error] [pid 6384:tid 6405] [client 20.100.192.90:3977] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejvcz58M3t15ICeWHWe4gAAANI"]
[Wed Apr 22 23:55:32.849828 2026] [:error] [pid 6384:tid 6399] [client 20.100.192.90:3968] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejvdD58M3t15ICeWHWe5gAAAMw"]
[Wed Apr 22 23:55:34.285286 2026] [:error] [pid 23776:tid 23790] [client 20.100.192.90:4068] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejvdrRExf-1pAbSeJs08wAAAYw"]
[Wed Apr 22 23:55:36.217002 2026] [:error] [pid 6251:tid 6290] [client 20.100.192.90:4039] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aejveCsFAzbyObL-SQ6ayQAAAIU"]
[Wed Apr 22 23:55:38.214526 2026] [:error] [pid 6251:tid 6305] [client 20.100.192.90:3998] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aejveisFAzbyObL-SQ6aywAAAJQ"]
[Wed Apr 22 23:55:39.147200 2026] [:error] [pid 6251:tid 6307] [client 20.100.192.90:4055] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aejveysFAzbyObL-SQ6azgAAAJY"]
[Wed Apr 22 23:55:41.170734 2026] [:error] [pid 6251:tid 6292] [client 20.100.192.90:3985] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aejvfSsFAzbyObL-SQ6a0QAAAIc"]
[Wed Apr 22 23:55:44.086627 2026] [:error] [pid 6384:tid 6402] [client 20.100.192.90:3987] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejvgD58M3t15ICeWHWfLAAAAM8"]
[Wed Apr 22 23:55:47.867787 2026] [:error] [pid 6252:tid 6332] [client 20.100.192.90:4086] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejvg-tGYuiYb1nWBpRulwAAARQ"]
[Wed Apr 22 23:55:48.937544 2026] [:error] [pid 23776:tid 23780] [client 20.100.192.90:4080] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejvhLRExf-1pAbSeJs1BQAAAYI"]
[Wed Apr 22 23:55:50.185775 2026] [:error] [pid 9085:tid 9099] [client 20.100.192.90:4044] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejvht-_-or9vQnlWnrrzAAAAUw"]
[Wed Apr 22 23:55:51.518792 2026] [:error] [pid 9085:tid 9100] [client 20.100.192.90:3994] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aejvh9-_-or9vQnlWnrr0gAAAU0"]
[Wed Apr 22 23:55:52.812544 2026] [:error] [pid 6384:tid 6393] [client 20.100.192.90:4073] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aejviD58M3t15ICeWHWfNAAAAMY"]
[Wed Apr 22 23:55:54.807804 2026] [:error] [pid 6344:tid 6367] [client 20.100.192.90:4095] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aejvikDOTF-pkQnDeUkhwQAAABI"]
[Wed Apr 22 23:55:56.585936 2026] [:error] [pid 6252:tid 6334] [client 20.100.192.90:4059] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aejvjOtGYuiYb1nWBpRumgAAARY"]
[Wed Apr 22 23:55:59.073472 2026] [:error] [pid 6251:tid 6299] [client 20.100.192.90:4076] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aejvjysFAzbyObL-SQ6a7QAAAI4"]
[Wed Apr 22 23:56:00.545584 2026] [:error] [pid 6252:tid 6317] [client 20.100.192.90:3982] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aejvkOtGYuiYb1nWBpRuowAAAQU"]
[Wed Apr 22 23:56:01.914604 2026] [:error] [pid 6384:tid 6408] [client 20.100.192.90:3979] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aejvkT58M3t15ICeWHWfPAAAANU"]
[Wed Apr 22 23:56:03.014290 2026] [:error] [pid 6384:tid 6399] [client 20.100.192.90:4043] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aejvkz58M3t15ICeWHWfPgAAAMw"]
[Wed Apr 22 23:56:04.768891 2026] [:error] [pid 9085:tid 9092] [client 20.100.192.90:3981] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aejvlN-_-or9vQnlWnrr6AAAAUU"]
[Wed Apr 22 23:56:06.264899 2026] [:error] [pid 23776:tid 23787] [client 20.100.192.90:4038] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aejvlrRExf-1pAbSeJs1JAAAAYk"]
[Wed Apr 22 23:56:07.225681 2026] [:error] [pid 9085:tid 9096] [client 20.100.192.90:3971] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aejvl9-_-or9vQnlWnrr8wAAAUk"]
[Wed Apr 22 23:56:08.415537 2026] [:error] [pid 6252:tid 6322] [client 20.100.192.90:3915] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aejvmOtGYuiYb1nWBpRusAAAAQo"]
[Wed Apr 22 23:56:09.068023 2026] [:error] [pid 9085:tid 9105] [client 20.100.192.90:4094] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aejvmd-_-or9vQnlWnrr-AAAAVI"]
[Wed Apr 22 23:56:10.153691 2026] [:error] [pid 9085:tid 9111] [client 20.100.192.90:3969] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aejvmt-_-or9vQnlWnrsAQAAAVg"]
[Wed Apr 22 23:56:11.866655 2026] [:error] [pid 6252:tid 6330] [client 20.100.192.90:4089] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aejvm-tGYuiYb1nWBpRusgAAARI"]
[Wed Apr 22 23:56:13.311652 2026] [:error] [pid 6250:tid 6270] [client 20.100.192.90:4093] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aejvnQ-iZeQkqmQVfj41nAAAAFA"]
[Wed Apr 22 23:56:15.392710 2026] [:error] [pid 6252:tid 6313] [client 20.100.192.90:4054] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aejvn-tGYuiYb1nWBpRuuwAAAQE"]
[Wed Apr 22 23:56:17.029801 2026] [:error] [pid 6251:tid 6288] [client 20.100.192.90:3999] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aejvoSsFAzbyObL-SQ6bBwAAAIM"]
[Wed Apr 22 23:56:19.755004 2026] [:error] [pid 6384:tid 6408] [client 20.100.192.90:3983] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aejvoz58M3t15ICeWHWfUwAAANU"]
[Wed Apr 22 23:56:20.529798 2026] [:error] [pid 9085:tid 9094] [client 20.100.192.90:4064] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aejvpN-_-or9vQnlWnrsGgAAAUc"]
[Wed Apr 22 23:56:22.331371 2026] [:error] [pid 23776:tid 23802] [client 20.100.192.90:3980] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aejvprRExf-1pAbSeJs1YQAAAZg"]
[Wed Apr 22 23:56:31.597651 2026] [:error] [pid 6344:tid 6361] [client 20.100.192.90:4027] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aejvr0DOTF-pkQnDeUkh3QAAAAw"]
[Wed Apr 22 23:56:33.470047 2026] [:error] [pid 6344:tid 6355] [client 20.100.192.90:4079] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aejvsUDOTF-pkQnDeUkh3wAAAAY"]
[Wed Apr 22 23:56:36.458597 2026] [:error] [pid 6250:tid 6277] [client 20.100.192.90:3970] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aejvtA-iZeQkqmQVfj41tQAAAFc"]
[Wed Apr 22 23:56:39.579517 2026] [:error] [pid 9085:tid 9101] [client 20.100.192.90:4069] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aejvt9-_-or9vQnlWnrscgAAAU4"]
[Wed Apr 22 23:56:40.452753 2026] [:error] [pid 9085:tid 9089] [client 20.100.192.90:4065] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aejvuN-_-or9vQnlWnrsewAAAUI"]
[Wed Apr 22 23:56:43.692252 2026] [:error] [pid 6344:tid 6357] [client 20.100.192.90:4081] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aejvu0DOTF-pkQnDeUkh8gAAAAg"]
[Wed Apr 22 23:56:44.739437 2026] [:error] [pid 6251:tid 6307] [client 20.100.192.90:4058] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aejvvCsFAzbyObL-SQ6bOAAAAJY"]
[Wed Apr 22 23:56:46.074263 2026] [:error] [pid 6250:tid 6266] [client 20.100.192.90:4057] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aejvvg-iZeQkqmQVfj41wQAAAEw"]
[Wed Apr 22 23:56:48.416610 2026] [:error] [pid 6384:tid 6400] [client 20.100.192.90:3984] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aejvwD58M3t15ICeWHWfsgAAAM0"]
[Wed Apr 22 23:56:50.011409 2026] [:error] [pid 6344:tid 6365] [client 20.100.192.90:4074] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aejvwkDOTF-pkQnDeUkh_QAAABA"]
[Wed Apr 22 23:56:52.068808 2026] [:error] [pid 6344:tid 6351] [client 20.100.192.90:3975] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aejvxEDOTF-pkQnDeUkiAgAAAAI"]
[Wed Apr 22 23:56:53.300423 2026] [:error] [pid 23776:tid 23784] [client 20.100.192.90:4091] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aejvxbRExf-1pAbSeJs1nQAAAYY"]
[Wed Apr 22 23:56:56.007160 2026] [:error] [pid 6384:tid 6409] [client 20.100.192.90:3911] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aejvyD58M3t15ICeWHWfzQAAANY"]
[Wed Apr 22 23:56:57.987455 2026] [:error] [pid 6252:tid 6315] [client 20.100.192.90:4003] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aejvyetGYuiYb1nWBpRu5AAAAQM"]
[Wed Apr 22 23:56:58.900024 2026] [:error] [pid 23776:tid 23796] [client 20.100.192.90:3941] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aejvyrRExf-1pAbSeJs1rwAAAZI"]
[Wed Apr 22 23:57:01.806795 2026] [:error] [pid 6384:tid 6391] [client 20.100.192.90:3904] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aejvzT58M3t15ICeWHWf3wAAAMQ"]
[Wed Apr 22 23:57:02.699547 2026] [:error] [pid 9085:tid 9087] [client 20.100.192.90:4047] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aejvzt-_-or9vQnlWnrsoAAAAUA"]
[Wed Apr 22 23:57:04.790855 2026] [:error] [pid 6250:tid 6277] [client 20.100.192.90:4012] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aejv0A-iZeQkqmQVfj41yAAAAFc"]
[Wed Apr 22 23:57:05.525798 2026] [:error] [pid 9085:tid 9090] [client 20.100.192.90:4029] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aejv0d-_-or9vQnlWnrsqAAAAUM"]
[Wed Apr 22 23:57:07.983769 2026] [:error] [pid 9085:tid 9109] [client 20.100.192.90:4085] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aejv09-_-or9vQnlWnrsrgAAAVY"]
[Wed Apr 22 23:57:08.944676 2026] [:error] [pid 6344:tid 6351] [client 20.100.192.90:4034] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aejv1EDOTF-pkQnDeUkiIwAAAAI"]
[Wed Apr 22 23:57:10.047733 2026] [:error] [pid 9085:tid 9106] [client 20.100.192.90:4013] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aejv1t-_-or9vQnlWnrstgAAAVM"]
[Wed Apr 22 23:57:11.927880 2026] [:error] [pid 9085:tid 9089] [client 20.100.192.90:3909] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aejv19-_-or9vQnlWnrswwAAAUI"]
[Wed Apr 22 23:57:15.114905 2026] [:error] [pid 6384:tid 6398] [client 20.100.192.90:4062] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aejv2z58M3t15ICeWHWf8gAAAMs"]
[Wed Apr 22 23:57:16.149098 2026] [:error] [pid 23776:tid 23792] [client 20.100.192.90:4041] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aejv3LRExf-1pAbSeJs1twAAAY4"]
[Wed Apr 22 23:57:17.139972 2026] [:error] [pid 6384:tid 6388] [client 20.100.192.90:4075] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aejv3T58M3t15ICeWHWf_AAAAME"]
[Wed Apr 22 23:57:17.929176 2026] [:error] [pid 23776:tid 23799] [client 20.100.192.90:4050] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aejv3bRExf-1pAbSeJs1uAAAAZU"]
[Wed Apr 22 23:57:18.587730 2026] [:error] [pid 23776:tid 23787] [client 20.100.192.90:4000] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aejv3rRExf-1pAbSeJs1uwAAAYk"]
[Wed Apr 22 23:57:19.916926 2026] [:error] [pid 9085:tid 9100] [client 20.100.192.90:4078] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "aejv39-_-or9vQnlWnrs3AAAAU0"]
[Wed Apr 22 23:57:20.709729 2026] [:error] [pid 6384:tid 6387] [client 20.100.192.90:4056] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "aejv4D58M3t15ICeWHWgCgAAAMA"]
[Wed Apr 22 23:57:22.289502 2026] [:error] [pid 9085:tid 9088] [client 20.100.192.90:4090] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "aejv4t-_-or9vQnlWnrs4AAAAUE"]
[Wed Apr 22 23:57:24.359486 2026] [:error] [pid 6251:tid 6303] [client 20.100.192.90:4048] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "aejv5CsFAzbyObL-SQ6bcgAAAJI"]
[Wed Apr 22 23:57:25.742144 2026] [:error] [pid 6344:tid 6353] [client 20.100.192.90:4006] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aejv5UDOTF-pkQnDeUkiKQAAAAQ"]
[Wed Apr 22 23:57:27.272705 2026] [:error] [pid 6384:tid 6392] [client 20.100.192.90:4005] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aejv5z58M3t15ICeWHWgKQAAAMU"]
[Wed Apr 22 23:57:28.525023 2026] [:error] [pid 23776:tid 23780] [client 20.100.192.90:3976] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aejv6LRExf-1pAbSeJs1ywAAAYI"]
[Wed Apr 22 23:57:29.747032 2026] [:error] [pid 6250:tid 6262] [client 20.100.192.90:4015] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aejv6Q-iZeQkqmQVfj411gAAAEg"]
[Wed Apr 22 23:57:38.921509 2026] [:error] [pid 9085:tid 9101] [client 20.100.192.90:3978] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aejv8t-_-or9vQnlWnrtKQAAAU4"]
[Wed Apr 22 23:57:40.413316 2026] [:error] [pid 23776:tid 23791] [client 20.100.192.90:4066] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aejv9LRExf-1pAbSeJs15AAAAY0"]
[Wed Apr 22 23:57:42.080094 2026] [:error] [pid 23776:tid 23793] [client 20.100.192.90:3924] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aejv9rRExf-1pAbSeJs16wAAAY8"]
[Wed Apr 22 23:57:43.644623 2026] [:error] [pid 6250:tid 6267] [client 20.100.192.90:4032] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aejv9w-iZeQkqmQVfj417AAAAE0"]
[Wed Apr 22 23:57:45.211727 2026] [:error] [pid 9085:tid 9102] [client 20.100.192.90:4071] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aejv-d-_-or9vQnlWnrtRAAAAU8"]
[Wed Apr 22 23:57:46.678589 2026] [:error] [pid 6384:tid 6410] [client 20.100.192.90:3992] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aejv-j58M3t15ICeWHWgVAAAANc"]
[Wed Apr 22 23:57:47.532469 2026] [:error] [pid 23776:tid 23786] [client 20.100.192.90:3916] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aejv-7RExf-1pAbSeJs19wAAAYg"]
[Wed Apr 22 23:57:49.657222 2026] [:error] [pid 6251:tid 6297] [client 20.100.192.90:3950] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aejv_SsFAzbyObL-SQ6bhgAAAIw"]
[Wed Apr 22 23:57:51.240756 2026] [:error] [pid 6250:tid 6261] [client 20.100.192.90:4072] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aejv_w-iZeQkqmQVfj418QAAAEc"]
[Wed Apr 22 23:57:54.919098 2026] [:error] [pid 23776:tid 23801] [client 20.100.192.90:4031] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aejwArRExf-1pAbSeJs2FAAAAZc"]
[Wed Apr 22 23:57:56.937525 2026] [:error] [pid 6384:tid 6397] [client 20.100.192.90:3972] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aejwBD58M3t15ICeWHWgYwAAAMo"]
[Wed Apr 22 23:57:59.422069 2026] [:error] [pid 6251:tid 6308] [client 20.100.192.90:3966] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aejwBysFAzbyObL-SQ6bkgAAAJc"]
[Wed Apr 22 23:58:01.350496 2026] [:error] [pid 6250:tid 6256] [client 20.100.192.90:3855] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "aejwCQ-iZeQkqmQVfj41_QAAAEI"]
[Wed Apr 22 23:58:02.343870 2026] [:error] [pid 6252:tid 6317] [client 20.100.192.90:3939] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "aejwCutGYuiYb1nWBpRvNAAAAQU"]
[Wed Apr 22 23:58:04.705711 2026] [:error] [pid 23776:tid 23791] [client 20.100.192.90:3996] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "aejwDLRExf-1pAbSeJs2NgAAAY0"]
[Wed Apr 22 23:58:06.285441 2026] [:error] [pid 6251:tid 6293] [client 20.100.192.90:4087] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "aejwDisFAzbyObL-SQ6bmAAAAIg"]
[Wed Apr 22 23:58:08.430692 2026] [:error] [pid 6251:tid 6292] [client 20.100.192.90:4024] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aejwECsFAzbyObL-SQ6bnwAAAIc"]
[Wed Apr 22 23:58:12.621497 2026] [:error] [pid 6344:tid 6360] [client 20.100.192.90:3936] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aejwFEDOTF-pkQnDeUkidQAAAAs"]
[Wed Apr 22 23:58:13.766504 2026] [:error] [pid 6384:tid 6391] [client 20.100.192.90:4021] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aejwFT58M3t15ICeWHWghwAAAMQ"]
[Wed Apr 22 23:58:17.430132 2026] [:error] [pid 6384:tid 6405] [client 20.100.192.90:4046] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "aejwGT58M3t15ICeWHWgoQAAANI"]
[Wed Apr 22 23:58:19.134432 2026] [:error] [pid 9085:tid 9108] [client 20.100.192.90:3919] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "aejwG9-_-or9vQnlWnrtkAAAAVU"]
[Wed Apr 22 23:58:21.302157 2026] [:error] [pid 9085:tid 9104] [client 20.100.192.90:3932] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "aejwHd-_-or9vQnlWnrtmwAAAVE"]
[Wed Apr 22 23:58:23.278522 2026] [:error] [pid 23776:tid 23779] [client 20.100.192.90:4026] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "aejwH7RExf-1pAbSeJs2PQAAAYE"]
[Wed Apr 22 23:58:24.067517 2026] [:error] [pid 6250:tid 6275] [client 20.100.192.90:4019] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "aejwIA-iZeQkqmQVfj42CAAAAFU"]
[Wed Apr 22 23:58:24.950286 2026] [:error] [pid 6252:tid 6328] [client 20.100.192.90:3910] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "aejwIOtGYuiYb1nWBpRvVwAAARA"]
[Wed Apr 22 23:58:26.107537 2026] [:error] [pid 9085:tid 9095] [client 20.100.192.90:4092] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "aejwIt-_-or9vQnlWnrttgAAAUg"]
[Wed Apr 22 23:58:26.972022 2026] [:error] [pid 9085:tid 9091] [client 20.100.192.90:3933] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "aejwIt-_-or9vQnlWnrtvAAAAUQ"]
[Wed Apr 22 23:58:28.722755 2026] [:error] [pid 9085:tid 9094] [client 20.100.192.90:3954] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "aejwJN-_-or9vQnlWnrtxwAAAUc"]
[Wed Apr 22 23:58:30.081408 2026] [:error] [pid 23776:tid 23781] [client 20.100.192.90:3991] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "aejwJrRExf-1pAbSeJs2UAAAAYM"]
[Wed Apr 22 23:58:32.179169 2026] [:error] [pid 6251:tid 6304] [client 20.100.192.90:3993] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "aejwKCsFAzbyObL-SQ6bpwAAAJM"]
[Wed Apr 22 23:58:33.452853 2026] [:error] [pid 9085:tid 9092] [client 20.100.192.90:4042] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "aejwKd-_-or9vQnlWnrt3QAAAUU"]
[Wed Apr 22 23:58:34.272429 2026] [:error] [pid 23776:tid 23784] [client 20.100.192.90:4083] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "aejwKrRExf-1pAbSeJs2VgAAAYY"]
[Wed Apr 22 23:58:37.487834 2026] [:error] [pid 6251:tid 6293] [client 20.100.192.90:4007] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "aejwLSsFAzbyObL-SQ6bsAAAAIg"]
[Wed Apr 22 23:58:48.254232 2026] [:error] [pid 9085:tid 9095] [client 20.100.192.90:4088] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aejwON-_-or9vQnlWnruEgAAAUg"]
[Wed Apr 22 23:58:49.350517 2026] [:error] [pid 6251:tid 6297] [client 20.100.192.90:4070] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aejwOSsFAzbyObL-SQ6btgAAAIw"]
[Wed Apr 22 23:58:51.394050 2026] [:error] [pid 9085:tid 9087] [client 20.100.192.90:4010] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aejwO9-_-or9vQnlWnruHAAAAUA"]
[Wed Apr 22 23:58:54.021284 2026] [:error] [pid 9085:tid 9108] [client 20.100.192.90:3997] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aejwPt-_-or9vQnlWnruLQAAAVU"]
[Wed Apr 22 23:58:55.621975 2026] [:error] [pid 9085:tid 9094] [client 20.100.192.90:4036] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aejwP9-_-or9vQnlWnruRQAAAUc"]
[Wed Apr 22 23:58:56.699673 2026] [:error] [pid 23776:tid 23795] [client 20.100.192.90:3945] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aejwQLRExf-1pAbSeJs2kgAAAZE"]
[Wed Apr 22 23:58:59.512409 2026] [:error] [pid 9085:tid 9107] [client 20.100.192.90:3986] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aejwQ9-_-or9vQnlWnruXwAAAVQ"]
[Wed Apr 22 23:59:00.608159 2026] [:error] [pid 6384:tid 6411] [client 20.100.192.90:3989] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aejwRD58M3t15ICeWHWg_wAAANg"]
[Wed Apr 22 23:59:04.887731 2026] [:error] [pid 6251:tid 6304] [client 20.100.192.90:3929] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aejwSCsFAzbyObL-SQ6bvQAAAJM"]
[Wed Apr 22 23:59:06.479717 2026] [:error] [pid 6252:tid 6326] [client 20.100.192.90:3844] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aejwSutGYuiYb1nWBpRvegAAAQ4"]
[Wed Apr 22 23:59:12.596043 2026] [:error] [pid 23776:tid 23801] [client 20.100.192.90:3908] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aejwULRExf-1pAbSeJs2wAAAAZc"]
[Wed Apr 22 23:59:13.732904 2026] [:error] [pid 6344:tid 6354] [client 20.100.192.90:3973] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aejwUUDOTF-pkQnDeUkitgAAAAU"]
[Wed Apr 22 23:59:15.107810 2026] [:error] [pid 6344:tid 6353] [client 20.100.192.90:4001] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "aejwU0DOTF-pkQnDeUkivAAAAAQ"]
[Wed Apr 22 23:59:16.573378 2026] [:error] [pid 23776:tid 23785] [client 20.100.192.90:3943] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "aejwVLRExf-1pAbSeJs2xwAAAYc"]
[Wed Apr 22 23:59:18.096774 2026] [:error] [pid 6250:tid 6278] [client 20.100.192.90:3867] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "aejwVg-iZeQkqmQVfj42PAAAAFg"]
[Wed Apr 22 23:59:18.980412 2026] [:error] [pid 6344:tid 6360] [client 20.100.192.90:3849] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "aejwVkDOTF-pkQnDeUkiwwAAAAs"]
[Wed Apr 22 23:59:19.809047 2026] [:error] [pid 9085:tid 9097] [client 20.100.192.90:3907] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aejwV9-_-or9vQnlWnruwgAAAUo"]
[Wed Apr 22 23:59:20.437690 2026] [:error] [pid 23776:tid 23794] [client 20.100.192.90:3886] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aejwWLRExf-1pAbSeJs2zgAAAZA"]
[Wed Apr 22 23:59:21.448464 2026] [:error] [pid 9085:tid 9108] [client 20.100.192.90:3937] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aejwWd-_-or9vQnlWnruyAAAAVU"]
[Wed Apr 22 23:59:22.501199 2026] [:error] [pid 6344:tid 6366] [client 20.100.192.90:3961] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aejwWkDOTF-pkQnDeUkiyAAAABE"]
[Wed Apr 22 23:59:23.217602 2026] [:error] [pid 6384:tid 6401] [client 20.100.192.90:3857] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "aejwWz58M3t15ICeWHWhMwAAAM4"]
[Wed Apr 22 23:59:24.061780 2026] [:error] [pid 6384:tid 6409] [client 20.100.192.90:3811] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "aejwXD58M3t15ICeWHWhNwAAANY"]
[Wed Apr 22 23:59:24.766481 2026] [:error] [pid 6344:tid 6357] [client 20.100.192.90:3946] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "aejwXEDOTF-pkQnDeUkiywAAAAg"]
[Wed Apr 22 23:59:25.578611 2026] [:error] [pid 6250:tid 6273] [client 20.100.192.90:4028] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "aejwXQ-iZeQkqmQVfj42QwAAAFM"]
[Wed Apr 22 23:59:27.038914 2026] [:error] [pid 6250:tid 6266] [client 20.100.192.90:3926] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsjzs.php"] [unique_id "aejwXw-iZeQkqmQVfj42RgAAAEw"]
[Wed Apr 22 23:59:29.877385 2026] [:error] [pid 23776:tid 23783] [client 20.100.192.90:4033] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsjzs.php"] [unique_id "aejwYbRExf-1pAbSeJs24QAAAYU"]
[Wed Apr 22 23:59:36.342068 2026] [:error] [pid 23776:tid 23802] [client 20.100.192.90:3869] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsjzs.php"] [unique_id "aejwaLRExf-1pAbSeJs2-AAAAZg"]
[Wed Apr 22 23:59:38.856282 2026] [:error] [pid 9085:tid 9099] [client 20.100.192.90:3962] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsjzs.php"] [unique_id "aejwat-_-or9vQnlWnru-wAAAUw"]
[Wed Apr 22 23:59:40.090367 2026] [:error] [pid 9085:tid 9101] [client 20.100.192.90:3905] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "aejwbN-_-or9vQnlWnrvAQAAAU4"]
[Wed Apr 22 23:59:41.267780 2026] [:error] [pid 6384:tid 6391] [client 20.100.192.90:3977] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "aejwbT58M3t15ICeWHWhVQAAAMQ"]
[Wed Apr 22 23:59:43.050517 2026] [:error] [pid 9085:tid 9087] [client 20.100.192.90:4077] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "aejwb9-_-or9vQnlWnrvEwAAAUA"]
[Wed Apr 22 23:59:43.991300 2026] [:error] [pid 23776:tid 23786] [client 20.100.192.90:3884] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "aejwb7RExf-1pAbSeJs3CAAAAYg"]
[Wed Apr 22 23:59:44.734015 2026] [:error] [pid 6252:tid 6330] [client 20.100.192.90:3940] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aejwcOtGYuiYb1nWBpRvygAAARI"]
[Wed Apr 22 23:59:45.821130 2026] [:error] [pid 9085:tid 9102] [client 20.100.192.90:4016] [client 20.100.192.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "aejwcd-_-or9vQnlWnrvIwAAAU8"]
[Thu Apr 23 02:06:14.007959 2026] [:error] [pid 23776:tid 23788] [client 4.231.226.99:24784] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aekOFrRExf-1pAbSeJtlVAAAAYo"]
[Thu Apr 23 02:06:15.705700 2026] [:error] [pid 9085:tid 9089] [client 4.231.226.99:24777] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aekOF9-_-or9vQnlWno_pgAAAUI"]
[Thu Apr 23 02:06:16.673595 2026] [:error] [pid 6252:tid 6336] [client 4.231.226.99:24892] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aekOGOtGYuiYb1nWBpSGCgAAARg"]
[Thu Apr 23 02:06:18.062252 2026] [:error] [pid 9085:tid 9092] [client 4.231.226.99:24866] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aekOGt-_-or9vQnlWno_sQAAAUU"]
[Thu Apr 23 02:06:19.631611 2026] [:error] [pid 6344:tid 6354] [client 4.231.226.99:24849] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aekOG0DOTF-pkQnDeUlE_wAAAAU"]
[Thu Apr 23 02:06:21.435629 2026] [:error] [pid 6344:tid 6365] [client 4.231.226.99:24854] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aekOHUDOTF-pkQnDeUlFBAAAABA"]
[Thu Apr 23 02:06:24.642217 2026] [:error] [pid 6384:tid 6388] [client 4.231.226.99:24855] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aekOID58M3t15ICeWHXZ8wAAAME"]
[Thu Apr 23 02:06:27.023021 2026] [:error] [pid 23776:tid 23779] [client 4.231.226.99:24785] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aekOI7RExf-1pAbSeJtlYQAAAYE"]
[Thu Apr 23 02:06:29.085606 2026] [:error] [pid 6344:tid 6369] [client 4.231.226.99:24793] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aekOJUDOTF-pkQnDeUlFEgAAABQ"]
[Thu Apr 23 02:06:32.400900 2026] [:error] [pid 6384:tid 6389] [client 4.231.226.99:24840] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aekOKD58M3t15ICeWHXaAAAAAMI"]
[Thu Apr 23 02:06:35.827520 2026] [:error] [pid 6252:tid 6315] [client 4.231.226.99:24857] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aekOK-tGYuiYb1nWBpSGFQAAAQM"]
[Thu Apr 23 02:06:38.716106 2026] [:error] [pid 9085:tid 9106] [client 4.231.226.99:24858] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aekOLt-_-or9vQnlWno_0QAAAVM"]
[Thu Apr 23 02:06:41.061148 2026] [:error] [pid 6252:tid 6321] [client 4.231.226.99:24856] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aekOMetGYuiYb1nWBpSGHQAAAQk"]
[Thu Apr 23 02:06:42.557742 2026] [:error] [pid 6344:tid 6363] [client 4.231.226.99:24864] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aekOMkDOTF-pkQnDeUlFGwAAAA4"]
[Thu Apr 23 02:06:43.780436 2026] [:error] [pid 6344:tid 6368] [client 4.231.226.99:24867] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aekOM0DOTF-pkQnDeUlFHQAAABM"]
[Thu Apr 23 02:06:45.130912 2026] [:error] [pid 6384:tid 6404] [client 4.231.226.99:24871] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aekONT58M3t15ICeWHXaIwAAANE"]
[Thu Apr 23 02:06:47.378999 2026] [:error] [pid 6252:tid 6330] [client 4.231.226.99:24889] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aekON-tGYuiYb1nWBpSGHgAAARI"]
[Thu Apr 23 02:06:48.758911 2026] [:error] [pid 6384:tid 6404] [client 4.231.226.99:24813] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aekOOD58M3t15ICeWHXaLwAAANE"]
[Thu Apr 23 02:06:51.943443 2026] [:error] [pid 23776:tid 23785] [client 4.231.226.99:24872] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aekOO7RExf-1pAbSeJtlsQAAAYc"]
[Thu Apr 23 02:06:53.756576 2026] [:error] [pid 23776:tid 23796] [client 4.231.226.99:24863] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "aekOPbRExf-1pAbSeJtluQAAAZI"]
[Thu Apr 23 02:06:56.316927 2026] [:error] [pid 23776:tid 23793] [client 4.231.226.99:24841] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aekOQLRExf-1pAbSeJtlxAAAAY8"]
[Thu Apr 23 02:06:58.248888 2026] [:error] [pid 6250:tid 6259] [client 4.231.226.99:24782] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aekOQg-iZeQkqmQVfj5OpAAAAEU"]
[Thu Apr 23 02:06:59.469647 2026] [:error] [pid 9085:tid 9095] [client 4.231.226.99:24877] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aekOQ9-_-or9vQnlWnpAHAAAAUg"]
[Thu Apr 23 02:07:00.895013 2026] [:error] [pid 9085:tid 9095] [client 4.231.226.99:24890] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aekORN-_-or9vQnlWnpAJwAAAUg"]
[Thu Apr 23 02:07:01.907922 2026] [:error] [pid 6344:tid 6356] [client 4.231.226.99:24873] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aekORUDOTF-pkQnDeUlFMwAAAAc"]
[Thu Apr 23 02:07:03.797369 2026] [:error] [pid 6384:tid 6402] [client 4.231.226.99:24789] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aekORz58M3t15ICeWHXaYgAAAM8"]
[Thu Apr 23 02:07:04.787864 2026] [:error] [pid 6344:tid 6352] [client 4.231.226.99:8132] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aekOSEDOTF-pkQnDeUlFNQAAAAM"]
[Thu Apr 23 02:07:05.853129 2026] [:error] [pid 9085:tid 9108] [client 4.231.226.99:24848] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aekOSd-_-or9vQnlWnpAOwAAAVU"]
[Thu Apr 23 02:07:07.889764 2026] [:error] [pid 6384:tid 6395] [client 4.231.226.99:24816] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aekOSz58M3t15ICeWHXaaAAAAMg"]
[Thu Apr 23 02:07:08.528451 2026] [:error] [pid 6344:tid 6357] [client 4.231.226.99:24795] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aekOTEDOTF-pkQnDeUlFNwAAAAg"]
[Thu Apr 23 02:07:10.042156 2026] [:error] [pid 23776:tid 23793] [client 4.231.226.99:24845] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aekOTrRExf-1pAbSeJtl6AAAAY8"]
[Thu Apr 23 02:07:11.868546 2026] [:error] [pid 6384:tid 6410] [client 4.231.226.99:24834] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aekOTz58M3t15ICeWHXafAAAANc"]
[Thu Apr 23 02:07:29.949678 2026] [:error] [pid 23776:tid 23783] [client 4.231.226.99:24769] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aekOYbRExf-1pAbSeJtmFAAAAYU"]
[Thu Apr 23 02:07:31.892183 2026] [:error] [pid 9085:tid 9098] [client 4.231.226.99:24874] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aekOY9-_-or9vQnlWnpAhAAAAUs"]
[Thu Apr 23 02:07:35.004643 2026] [:error] [pid 6384:tid 6395] [client 4.231.226.99:24876] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aekOZz58M3t15ICeWHXawQAAAMg"]
[Thu Apr 23 02:07:42.474548 2026] [:error] [pid 9085:tid 9109] [client 4.231.226.99:24799] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aekObt-_-or9vQnlWnpAqwAAAVY"]
[Thu Apr 23 02:07:47.609725 2026] [:error] [pid 9085:tid 9092] [client 4.231.226.99:24788] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aekOc9-_-or9vQnlWnpAtgAAAUU"]
[Thu Apr 23 02:07:51.079397 2026] [:error] [pid 6384:tid 6408] [client 4.231.226.99:24786] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aekOdz58M3t15ICeWHXa6AAAANU"]
[Thu Apr 23 02:07:52.105624 2026] [:error] [pid 9085:tid 9088] [client 4.231.226.99:24828] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aekOeN-_-or9vQnlWnpAygAAAUE"]
[Thu Apr 23 02:07:53.756160 2026] [:error] [pid 23776:tid 23789] [client 4.231.226.99:24865] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aekOebRExf-1pAbSeJtmUwAAAYs"]
[Thu Apr 23 02:07:54.750791 2026] [:error] [pid 6344:tid 6368] [client 4.231.226.99:24771] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aekOekDOTF-pkQnDeUlFcQAAABM"]
[Thu Apr 23 02:07:55.718556 2026] [:error] [pid 9085:tid 9093] [client 4.231.226.99:24797] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aekOe9-_-or9vQnlWnpA2gAAAUY"]
[Thu Apr 23 02:07:56.999366 2026] [:error] [pid 23776:tid 23780] [client 4.231.226.99:24832] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aekOfLRExf-1pAbSeJtmXAAAAYI"]
[Thu Apr 23 02:07:58.846655 2026] [:error] [pid 23776:tid 23779] [client 4.231.226.99:24796] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aekOfrRExf-1pAbSeJtmZgAAAYE"]
[Thu Apr 23 02:08:00.685773 2026] [:error] [pid 9085:tid 9091] [client 4.231.226.99:24790] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aekOgN-_-or9vQnlWnpA6gAAAUQ"]
[Thu Apr 23 02:08:02.980467 2026] [:error] [pid 6384:tid 6396] [client 4.231.226.99:24837] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aekOgj58M3t15ICeWHXa-wAAAMk"]
[Thu Apr 23 02:08:10.556092 2026] [:error] [pid 9085:tid 9106] [client 4.231.226.99:24772] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aekOit-_-or9vQnlWnpBCQAAAVM"]
[Thu Apr 23 02:08:16.618708 2026] [:error] [pid 23776:tid 23797] [client 4.231.226.99:8133] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aekOkLRExf-1pAbSeJtmjwAAAZM"]
[Thu Apr 23 02:08:21.489737 2026] [:error] [pid 6344:tid 6364] [client 4.231.226.99:24881] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aekOlUDOTF-pkQnDeUlFhQAAAA8"]
[Thu Apr 23 02:08:22.786122 2026] [:error] [pid 6250:tid 6255] [client 4.231.226.99:24827] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aekOlg-iZeQkqmQVfj5OxgAAAEE"]
[Thu Apr 23 02:08:23.603264 2026] [:error] [pid 9085:tid 9088] [client 4.231.226.99:24870] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aekOl9-_-or9vQnlWnpBMQAAAUE"]
[Thu Apr 23 02:08:24.883428 2026] [:error] [pid 6250:tid 6266] [client 4.231.226.99:24817] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aekOmA-iZeQkqmQVfj5OyAAAAEw"]
[Thu Apr 23 02:08:26.943498 2026] [:error] [pid 6384:tid 6408] [client 4.231.226.99:24895] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aekOmj58M3t15ICeWHXbQwAAANU"]
[Thu Apr 23 02:08:28.297454 2026] [:error] [pid 9085:tid 9104] [client 4.231.226.99:24773] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aekOnN-_-or9vQnlWnpBPAAAAVE"]
[Thu Apr 23 02:08:39.215761 2026] [:error] [pid 6344:tid 6354] [client 4.231.226.99:24829] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "aekOp0DOTF-pkQnDeUlFmwAAAAU"]
[Thu Apr 23 02:08:40.060060 2026] [:error] [pid 6344:tid 6368] [client 4.231.226.99:24880] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "aekOqEDOTF-pkQnDeUlFnQAAABM"]
[Thu Apr 23 02:08:40.662383 2026] [:error] [pid 6252:tid 6319] [client 4.231.226.99:8138] [client 4.231.226.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "aekOqOtGYuiYb1nWBpSGUQAAAQc"]
[Thu Apr 23 05:17:43.481497 2026] [:error] [pid 25635:tid 25648] [client 182.44.10.67:36263] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aek698Rxv6UsgRGKB3KF3gAAAQk"]
[Thu Apr 23 05:56:10.915719 2026] [:error] [pid 43083:tid 43103] [client 24.77.77.1:13336] [client 24.77.77.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 24.77.77.1, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aelD-jC5hrvNXosL83KK0gAAANI"]
[Thu Apr 23 06:54:14.929908 2026] [:error] [pid 42972:tid 43038] [client 43.154.140.188:55168] [client 43.154.140.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aelRlsOAb-3sOknsk4f9IwAAAFY"]
[Thu Apr 23 07:13:34.173339 2026] [:error] [pid 42972:tid 43023] [client 89.251.0.142:30387] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelWHsOAb-3sOknsk4cAiQAAAEc"]
[Thu Apr 23 07:13:35.919973 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.119:64867] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelWH5XyGZJFeAIDWtk4vgAAAUw"]
[Thu Apr 23 07:13:38.672336 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.116:62645] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelWIsOAb-3sOknsk4cAmQAAAEM"]
[Thu Apr 23 07:13:40.356112 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.150:22629] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelWJDEP2_5RswrH8bGJBAAAAAw"]
[Thu Apr 23 07:13:42.962307 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.146:56967] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelWJm6I0QqmmmLTHE2-EAAAAIg"]
[Thu Apr 23 07:13:44.371673 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.127:55875] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelWKJXyGZJFeAIDWtk4-wAAAVU"]
[Thu Apr 23 07:13:44.985287 2026] [:error] [pid 42971:tid 43007] [client 89.251.0.126:24159] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelWKDEP2_5RswrH8bGJFQAAABU"]
[Thu Apr 23 07:13:45.577340 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.139:28483] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelWKZXyGZJFeAIDWtk4_wAAAUw"]
[Thu Apr 23 07:13:46.296296 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.141:23075] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelWKm6I0QqmmmLTHE2-OwAAAIc"]
[Thu Apr 23 07:13:47.000789 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.120:42591] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelWKpXyGZJFeAIDWtk5DAAAAVg"]
[Thu Apr 23 07:13:49.874247 2026] [:error] [pid 42973:tid 43046] [client 89.251.0.125:26963] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelWLW6I0QqmmmLTHE2-YAAAAIM"]
[Thu Apr 23 07:13:51.331466 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.140:26243] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aelWL5XyGZJFeAIDWtk5PgAAAUo"]
[Thu Apr 23 07:13:56.030884 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.144:43595] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelWNJXyGZJFeAIDWtk5hwAAAUk"]
[Thu Apr 23 07:13:57.558734 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.137:31337] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelWNZXyGZJFeAIDWtk5qAAAAU8"]
[Thu Apr 23 07:13:58.456717 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.116:58089] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelWNpXyGZJFeAIDWtk5xAAAAVg"]
[Thu Apr 23 07:14:04.193049 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.124:22845] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelWPDC5hrvNXosL83KonQAAANA"]
[Thu Apr 23 07:14:07.047792 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.132:36757] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelWP8Rxv6UsgRGKB3LGtQAAAQQ"]
[Thu Apr 23 07:14:08.350663 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.150:21461] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelWQJXyGZJFeAIDWtk6SgAAAUg"]
[Thu Apr 23 07:14:09.268903 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.134:33919] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelWQZXyGZJFeAIDWtk6WQAAAUE"]
[Thu Apr 23 07:14:11.262504 2026] [:error] [pid 42973:tid 43061] [client 89.251.0.148:30939] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelWQ26I0QqmmmLTHE2_CwAAAJI"]
[Thu Apr 23 07:14:12.129550 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.115:59489] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelWRDEP2_5RswrH8bGJmwAAABc"]
[Thu Apr 23 07:14:13.146489 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.148:57687] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelWRZXyGZJFeAIDWtk6ewAAAVQ"]
[Thu Apr 23 07:14:13.788463 2026] [:error] [pid 25635:tid 25644] [client 89.251.0.131:29003] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelWRcRxv6UsgRGKB3LG6AAAAQU"]
[Thu Apr 23 07:14:14.483759 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.113:33379] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelWRsOAb-3sOknsk4cB5AAAAFQ"]
[Thu Apr 23 07:14:16.084254 2026] [:error] [pid 42971:tid 42996] [client 89.251.0.141:43029] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelWSDEP2_5RswrH8bGJ0wAAAAo"]
[Thu Apr 23 07:14:17.735351 2026] [:error] [pid 42972:tid 43031] [client 89.251.0.134:45557] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelWScOAb-3sOknsk4cCCQAAAE8"]
[Thu Apr 23 07:14:18.419652 2026] [:error] [pid 25635:tid 25659] [client 89.251.0.129:46477] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelWSsRxv6UsgRGKB3LHBQAAARQ"]
[Thu Apr 23 07:14:22.791477 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.117:29873] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelWTsRxv6UsgRGKB3LHLAAAAQw"]
[Thu Apr 23 07:14:25.534647 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.150:27159] [client 89.251.0.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.150, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelWUcOAb-3sOknsk4cCYQAAAFQ"]
[Thu Apr 23 07:14:29.475518 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.150:27159] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelWVcOAb-3sOknsk4cC0wAAAEg"]
[Thu Apr 23 07:14:30.968082 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.140:64977] [client 89.251.0.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.140, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelWVjEP2_5RswrH8bGKbQAAAA8"]
[Thu Apr 23 07:14:31.680560 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.140:64977] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelWVzEP2_5RswrH8bGKeAAAAA8"]
[Thu Apr 23 07:14:35.466054 2026] [:error] [pid 42973:tid 43053] [client 89.251.0.124:48537] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelWW26I0QqmmmLTHE3ADAAAAIo"]
[Thu Apr 23 07:14:38.795006 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.140:52029] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelWXjC5hrvNXosL83KqTgAAAMw"]
[Thu Apr 23 07:14:40.492986 2026] [:error] [pid 42973:tid 43066] [client 89.251.0.127:48223] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelWYG6I0QqmmmLTHE3ASQAAAJc"]
[Thu Apr 23 07:14:42.427627 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.147:51261] [client 89.251.0.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.147, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelWYjC5hrvNXosL83KqeQAAAMs"]
[Thu Apr 23 07:14:42.739945 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.147:51261] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelWYjC5hrvNXosL83KqewAAAMk"]
[Thu Apr 23 07:14:54.641916 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.114:55003] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelWboAV4GfOOdX8Qzr2_AAAAYE"]
[Thu Apr 23 07:14:57.386933 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.150:38025] [client 89.251.0.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.150, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelWcTC5hrvNXosL83KrGQAAANQ"]
[Thu Apr 23 07:14:58.652813 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.150:38025] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelWcjC5hrvNXosL83KrMAAAAMQ"]
[Thu Apr 23 07:15:00.286032 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.146:62673] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelWdDC5hrvNXosL83KrTAAAANg"]
[Thu Apr 23 07:15:02.326672 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.123:23961] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelWdpXyGZJFeAIDWtk86wAAAVM"]
[Thu Apr 23 07:15:04.160812 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.137:22257] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelWeDEP2_5RswrH8bGL5wAAAA8"]
[Thu Apr 23 07:15:05.861175 2026] [:error] [pid 59700:tid 59725] [client 89.251.0.142:32361] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelWeZXyGZJFeAIDWtk9FgAAAVc"]
[Thu Apr 23 07:15:09.107513 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.138:29025] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aelWfTC5hrvNXosL83KruQAAAMo"]
[Thu Apr 23 07:15:10.345779 2026] [:error] [pid 42973:tid 43062] [client 89.251.0.131:28987] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aelWfm6I0QqmmmLTHE3A9wAAAJM"]
[Thu Apr 23 07:15:12.253412 2026] [:error] [pid 42973:tid 43054] [client 89.251.0.133:46609] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aelWgG6I0QqmmmLTHE3BCAAAAIs"]
[Thu Apr 23 07:15:15.072926 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.121:28989] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aelWgzEP2_5RswrH8bGMVgAAABM"]
[Thu Apr 23 07:15:16.512147 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.116:24093] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aelWhL6vRb9j6psK2ZZjyAAAAgY"]
[Thu Apr 23 07:15:18.791565 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.125:22047] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aelWhsOAb-3sOknsk4cFPwAAAFI"]
[Thu Apr 23 07:15:22.941837 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.113:63979] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aelWijC5hrvNXosL83KsTQAAAMs"]
[Thu Apr 23 07:15:23.563840 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.128:36595] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aelWizEP2_5RswrH8bGMiwAAABM"]
[Thu Apr 23 07:15:24.280499 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.147:47075] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aelWjL6vRb9j6psK2ZZkMgAAAgU"]
[Thu Apr 23 07:15:25.641906 2026] [:error] [pid 25635:tid 25648] [client 89.251.0.131:23847] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aelWjcRxv6UsgRGKB3LJcAAAAQk"]
[Thu Apr 23 07:15:27.068091 2026] [:error] [pid 42972:tid 43016] [client 89.251.0.123:39647] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aelWj8OAb-3sOknsk4cFowAAAEA"]
[Thu Apr 23 07:15:27.695674 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.120:23423] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aelWj4AV4GfOOdX8Qzr3_wAAAYk"]
[Thu Apr 23 07:15:29.081323 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.144:36345] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aelWkZXyGZJFeAIDWtk-KwAAAUk"]
[Thu Apr 23 07:15:30.742879 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.146:37815] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aelWkoAV4GfOOdX8Qzr4HAAAAYY"]
[Thu Apr 23 07:15:32.013614 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.115:38889] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aelWlMOAb-3sOknsk4cFzgAAAFU"]
[Thu Apr 23 07:15:32.718783 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.131:51031] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aelWlDEP2_5RswrH8bGM8gAAABE"]
[Thu Apr 23 07:15:33.691075 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.148:53375] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aelWlYV5EysYcTLjmwjWOQAAAcI"]
[Thu Apr 23 07:15:34.968521 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.139:36023] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aelWlr6vRb9j6psK2ZZk1AAAAgE"]
[Thu Apr 23 07:15:37.083301 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.123:20475] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aelWmTEP2_5RswrH8bGNSgAAAAw"]
[Thu Apr 23 07:15:40.307075 2026] [:error] [pid 42973:tid 43058] [client 89.251.0.116:41695] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aelWnG6I0QqmmmLTHE3CBgAAAI8"]
[Thu Apr 23 07:15:42.149331 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.144:35127] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aelWnsOAb-3sOknsk4cGEwAAAEU"]
[Thu Apr 23 07:15:42.796860 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.132:31887] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aelWnoAV4GfOOdX8Qzr4hQAAAZA"]
[Thu Apr 23 07:15:44.862923 2026] [:error] [pid 42972:tid 43017] [client 89.251.0.127:29707] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aelWoMOAb-3sOknsk4cGQAAAAEE"]
[Thu Apr 23 07:15:46.503324 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 89.251.0.121:53959] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:15:46.870305 2026] [proxy_fcgi:error] [pid 64998:tid 65005] [client 89.251.0.121:53959] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:15:47.200316 2026] [proxy_fcgi:error] [pid 64998:tid 65021] [client 89.251.0.121:53959] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:15:48.933944 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.121:53959] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aelWpIV5EysYcTLjmwjWywAAAcM"]
[Thu Apr 23 07:15:50.660141 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.114:46817] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aelWpjEP2_5RswrH8bGN2gAAABM"]
[Thu Apr 23 07:15:51.354624 2026] [:error] [pid 42973:tid 43067] [client 89.251.0.135:23443] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aelWp26I0QqmmmLTHE3CdAAAAJg"]
[Thu Apr 23 07:15:52.595950 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.117:65457] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aelWqJXyGZJFeAIDWtk_QQAAAUI"]
[Thu Apr 23 07:15:53.229354 2026] [:error] [pid 25635:tid 25653] [client 89.251.0.128:53029] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aelWqcRxv6UsgRGKB3LKIwAAAQ4"]
[Thu Apr 23 07:15:53.838111 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.138:48871] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aelWqZXyGZJFeAIDWtk_UwAAAUQ"]
[Thu Apr 23 07:15:54.882953 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.119:47389] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aelWqjEP2_5RswrH8bGN_wAAABE"]
[Thu Apr 23 07:15:55.576982 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.115:48477] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aelWq76vRb9j6psK2ZZl0AAAAgQ"]
[Thu Apr 23 07:15:56.224389 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.125:46127] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aelWrMOAb-3sOknsk4cGpgAAAFE"]
[Thu Apr 23 07:15:56.893569 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.142:29491] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aelWrJXyGZJFeAIDWtk_fAAAAU8"]
[Thu Apr 23 07:15:58.678374 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.119:47041] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aelWrr6vRb9j6psK2ZZmBwAAAgA"]
[Thu Apr 23 07:15:59.723942 2026] [:error] [pid 42973:tid 43062] [client 89.251.0.150:43769] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aelWr26I0QqmmmLTHE3CugAAAJM"]
[Thu Apr 23 07:16:01.551795 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.126:49741] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aelWsYV5EysYcTLjmwjXkQAAAdQ"]
[Thu Apr 23 07:16:02.982991 2026] [:error] [pid 42973:tid 43056] [client 89.251.0.114:50827] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aelWsm6I0QqmmmLTHE3CzQAAAI0"]
[Thu Apr 23 07:16:04.608252 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.132:48179] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aelWtDEP2_5RswrH8bGOnQAAABE"]
[Thu Apr 23 07:16:07.699077 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.127:44385] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aelWt76vRb9j6psK2ZZmgwAAAhQ"]
[Thu Apr 23 07:16:09.161613 2026] [:error] [pid 25635:tid 25654] [client 89.251.0.142:27407] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aelWucRxv6UsgRGKB3LKyQAAAQ8"]
[Thu Apr 23 07:16:15.318564 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.140:60945] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aelWvzC5hrvNXosL83Ku3gAAANg"]
[Thu Apr 23 07:16:15.940556 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.117:29259] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aelWvzEP2_5RswrH8bGPIwAAABI"]
[Thu Apr 23 07:16:16.892679 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.151:33859] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aelWwL6vRb9j6psK2ZZm7wAAAhI"]
[Thu Apr 23 07:16:18.210629 2026] [:error] [pid 42973:tid 43043] [client 89.251.0.147:36943] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aelWwm6I0QqmmmLTHE3DdQAAAIA"]
[Thu Apr 23 07:16:18.901627 2026] [:error] [pid 42972:tid 43017] [client 89.251.0.135:27341] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aelWwsOAb-3sOknsk4cHlAAAAEE"]
[Thu Apr 23 07:16:20.877056 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.151:38941] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aelWxMOAb-3sOknsk4cHsQAAAEQ"]
[Thu Apr 23 07:16:21.559909 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.116:26815] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aelWxZXyGZJFeAIDWtlA0gAAAUM"]
[Thu Apr 23 07:16:24.724868 2026] [:error] [pid 25635:tid 25647] [client 89.251.0.143:20427] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aelWyMRxv6UsgRGKB3LLcwAAAQg"]
[Thu Apr 23 07:16:25.777333 2026] [proxy_fcgi:error] [pid 65000:tid 65050] [client 89.251.0.131:59029] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:16:26.920249 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.131:59029] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aelWyr6vRb9j6psK2ZZnWAAAAgo"]
[Thu Apr 23 07:17:15.047149 2026] [autoindex:error] [pid 42973:tid 43053] [client 89.251.0.115:64341] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:24:09.769880 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.121:35931] [client 89.251.0.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aelYmZXyGZJFeAIDWtlSmAAAAUA"]
[Thu Apr 23 07:24:10.739812 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.148:62873] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelYmsOAb-3sOknsk4cYvgAAAEI"]
[Thu Apr 23 07:24:12.287078 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.142:28563] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelYnMRxv6UsgRGKB3Lc1QAAAQY"]
[Thu Apr 23 07:24:15.052111 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.148:52211] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelYn76vRb9j6psK2ZaOFwAAAhc"]
[Thu Apr 23 07:24:16.058656 2026] [:error] [pid 64967:tid 64982] [client 89.251.0.131:46501] [client 89.251.0.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aelYoIAV4GfOOdX8QzoLqAAAAY0"]
[Thu Apr 23 07:24:17.355067 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.134:20863] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelYob6vRb9j6psK2ZaOYwAAAgc"]
[Thu Apr 23 07:24:20.072000 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.135:41491] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelYpIV5EysYcTLjmwjufQAAAcw"]
[Thu Apr 23 07:24:21.101834 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.135:35021] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelYpYAV4GfOOdX8QzoL4gAAAYM"]
[Thu Apr 23 07:24:21.707792 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.146:57591] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelYpcOAb-3sOknsk4cZCAAAAEk"]
[Thu Apr 23 07:24:22.311678 2026] [:error] [pid 42973:tid 43055] [client 89.251.0.117:54279] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelYpm6I0QqmmmLTHE3WDQAAAIw"]
[Thu Apr 23 07:24:22.913068 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.116:31315] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelYpjC5hrvNXosL83LDKgAAAM0"]
[Thu Apr 23 07:24:23.819298 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.145:28757] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelYp8OAb-3sOknsk4cZKAAAAEU"]
[Thu Apr 23 07:24:25.790407 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.144:63875] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelYqcOAb-3sOknsk4cZQgAAAEM"]
[Thu Apr 23 07:24:27.100212 2026] [:error] [pid 42973:tid 43048] [client 89.251.0.125:41111] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "aelYq26I0QqmmmLTHE3WMQAAAIU"]
[Thu Apr 23 07:24:28.042667 2026] [:error] [pid 64967:tid 64984] [client 89.251.0.120:61173] [client 89.251.0.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/pki-validation/admin.php"] [unique_id "aelYrIAV4GfOOdX8QzoMawAAAY8"]
[Thu Apr 23 07:24:33.453677 2026] [:error] [pid 42972:tid 43016] [client 89.251.0.144:43253] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelYscOAb-3sOknsk4cZmAAAAEA"]
[Thu Apr 23 07:24:34.469482 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.125:61019] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelYsr6vRb9j6psK2ZaPgQAAAgA"]
[Thu Apr 23 07:24:35.425301 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.145:65461] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelYs8Rxv6UsgRGKB3LdxAAAAQ0"]
[Thu Apr 23 07:24:37.350824 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.120:43239] [client 89.251.0.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/file.php"] [unique_id "aelYtb6vRb9j6psK2ZaPzgAAAhE"]
[Thu Apr 23 07:24:38.594190 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.146:58369] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelYtr6vRb9j6psK2ZaP-wAAAgI"]
[Thu Apr 23 07:24:39.521499 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.137:27219] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelYt8OAb-3sOknsk4cZxQAAAFY"]
[Thu Apr 23 07:24:40.809881 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.138:26135] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelYuL6vRb9j6psK2ZaQNgAAAhQ"]
[Thu Apr 23 07:24:42.469878 2026] [:error] [pid 59700:tid 59707] [client 89.251.0.138:40935] [client 89.251.0.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/DJP9.php"] [unique_id "aelYupXyGZJFeAIDWtlTXgAAAUU"]
[Thu Apr 23 07:24:43.174927 2026] [:error] [pid 42972:tid 43028] [client 89.251.0.123:38643] [client 89.251.0.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/images/DJP9.php"] [unique_id "aelYu8OAb-3sOknsk4cZ3AAAAEw"]
[Thu Apr 23 07:24:44.176849 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.144:37685] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelYvMOAb-3sOknsk4cZ7AAAAEU"]
[Thu Apr 23 07:24:46.036455 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.129:52545] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelYvpXyGZJFeAIDWtlTiQAAAVg"]
[Thu Apr 23 07:24:47.015540 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.133:29879] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelYv8OAb-3sOknsk4caCgAAAEM"]
[Thu Apr 23 07:24:48.076662 2026] [:error] [pid 42973:tid 43067] [client 89.251.0.124:34163] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelYwG6I0QqmmmLTHE3WxwAAAJg"]
[Thu Apr 23 07:24:48.715764 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.145:25409] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelYwIAV4GfOOdX8QzoNrQAAAYI"]
[Thu Apr 23 07:24:49.357434 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.143:49385] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelYwYV5EysYcTLjmwjvzwAAAcg"]
[Thu Apr 23 07:24:50.943378 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.144:61877] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelYwpXyGZJFeAIDWtlTsQAAAUo"]
[Thu Apr 23 07:24:51.553417 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.140:20771] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelYw76vRb9j6psK2ZaRQwAAAgA"]
[Thu Apr 23 07:24:52.140326 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.142:56615] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelYxIV5EysYcTLjmwjv7wAAAdA"]
[Thu Apr 23 07:24:56.781217 2026] [:error] [pid 42972:tid 43022] [client 89.251.0.116:56469] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelYyMOAb-3sOknsk4cayAAAAEY"]
[Thu Apr 23 07:24:58.373548 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.140:50999] [client 89.251.0.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.140, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelYyr6vRb9j6psK2ZaR9AAAAhY"]
[Thu Apr 23 07:25:03.163435 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.140:50999] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelYz76vRb9j6psK2ZaSQwAAAgA"]
[Thu Apr 23 07:25:08.257577 2026] [:error] [pid 59700:tid 59716] [client 89.251.0.120:48203] [client 89.251.0.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.120, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelY1JXyGZJFeAIDWtlUWgAAAU4"]
[Thu Apr 23 07:25:08.935552 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.120:48203] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelY1JXyGZJFeAIDWtlUYQAAAVQ"]
[Thu Apr 23 07:25:12.542847 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.113:54855] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelY2JXyGZJFeAIDWtlUrAAAAUs"]
[Thu Apr 23 07:25:13.999635 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.129:52129] [client 89.251.0.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/wp-trackback.php"] [unique_id "aelY2YAV4GfOOdX8QzoOtwAAAYI"]
[Thu Apr 23 07:25:17.757501 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.116:33143] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelY3ZXyGZJFeAIDWtlU8QAAAUk"]
[Thu Apr 23 07:25:19.031515 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.147:52419] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelY3zC5hrvNXosL83LFpwAAANM"]
[Thu Apr 23 07:25:20.652248 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.113:39877] [client 89.251.0.113] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.113, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelY4IV5EysYcTLjmwjxFgAAAdA"]
[Thu Apr 23 07:25:20.958397 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.113:39877] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelY4IV5EysYcTLjmwjxHgAAAdc"]
[Thu Apr 23 07:25:27.600737 2026] [:error] [pid 25635:tid 25654] [client 89.251.0.132:65381] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelY58Rxv6UsgRGKB3LfYwAAAQ8"]
[Thu Apr 23 07:25:33.669531 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.138:42453] [client 89.251.0.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.138, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelY7b6vRb9j6psK2ZaUMgAAAgY"]
[Thu Apr 23 07:25:35.042371 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.138:42453] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelY776vRb9j6psK2ZaURAAAAhY"]
[Thu Apr 23 07:25:36.538277 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.143:31859] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelY8IV5EysYcTLjmwjyPAAAAcA"]
[Thu Apr 23 07:25:37.819632 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.140:40997] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelY8TEP2_5RswrH8bGkwwAAAAk"]
[Thu Apr 23 07:25:39.647704 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.126:60181] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelY84V5EysYcTLjmwjykwAAAdA"]
[Thu Apr 23 07:25:40.212960 2026] [:error] [pid 42971:tid 42988] [client 89.251.0.128:22095] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelY9DEP2_5RswrH8bGk4gAAAAI"]
[Thu Apr 23 07:25:43.461727 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.136:43927] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aelY9zEP2_5RswrH8bGlSwAAAAw"]
[Thu Apr 23 07:25:44.433136 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.126:64671] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aelY-MRxv6UsgRGKB3LfvAAAAQw"]
[Thu Apr 23 07:25:49.852368 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.134:32927] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aelY_TC5hrvNXosL83LG_wAAANA"]
[Thu Apr 23 07:25:51.646448 2026] [:error] [pid 42973:tid 43053] [client 89.251.0.141:41419] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aelY_26I0QqmmmLTHE3YsAAAAIo"]
[Thu Apr 23 07:25:52.945462 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.127:30385] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "aelZAIV5EysYcTLjmwjzGQAAAcA"]
[Thu Apr 23 07:25:55.116076 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.134:29045] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aelZA5XyGZJFeAIDWtlWDQAAAUw"]
[Thu Apr 23 07:25:58.206019 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.133:29503] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aelZBsOAb-3sOknsk4cdiQAAAFI"]
[Thu Apr 23 07:25:58.804940 2026] [:error] [pid 59700:tid 59725] [client 89.251.0.141:59705] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aelZBpXyGZJFeAIDWtlWIAAAAVc"]
[Thu Apr 23 07:25:59.430497 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.117:63435] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aelZB4V5EysYcTLjmwjzYQAAAcQ"]
[Thu Apr 23 07:26:00.017581 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.132:47945] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aelZCIV5EysYcTLjmwjzZwAAAcs"]
[Thu Apr 23 07:26:01.192177 2026] [:error] [pid 25635:tid 25661] [client 89.251.0.113:56295] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aelZCcRxv6UsgRGKB3LgEQAAARY"]
[Thu Apr 23 07:26:02.007015 2026] [:error] [pid 42971:tid 42988] [client 89.251.0.139:31747] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aelZCjEP2_5RswrH8bGl_wAAAAI"]
[Thu Apr 23 07:26:03.227380 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.120:25069] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aelZC4AV4GfOOdX8QzoQhAAAAYk"]
[Thu Apr 23 07:26:03.867486 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.121:41051] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aelZC4AV4GfOOdX8QzoQkQAAAZQ"]
[Thu Apr 23 07:26:05.545757 2026] [:error] [pid 59700:tid 59720] [client 89.251.0.121:46691] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aelZDZXyGZJFeAIDWtlWewAAAVI"]
[Thu Apr 23 07:26:06.153978 2026] [:error] [pid 42973:tid 43045] [client 89.251.0.139:64143] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aelZDm6I0QqmmmLTHE3ZAwAAAII"]
[Thu Apr 23 07:26:07.150957 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.145:55621] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aelZD5XyGZJFeAIDWtlWhwAAAUk"]
[Thu Apr 23 07:26:08.462371 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.117:46885] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aelZEDEP2_5RswrH8bGmPwAAAAE"]
[Thu Apr 23 07:26:13.839455 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.115:25087] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aelZFb6vRb9j6psK2ZaV4AAAAhA"]
[Thu Apr 23 07:26:16.719713 2026] [:error] [pid 59700:tid 59720] [client 89.251.0.125:49271] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aelZGJXyGZJFeAIDWtlXQAAAAVI"]
[Thu Apr 23 07:26:21.008607 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.142:44119] [client 89.251.0.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/view-more/ioxi.php"] [unique_id "aelZHb6vRb9j6psK2ZaWPQAAAg0"]
[Thu Apr 23 07:26:21.993249 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.147:31157] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aelZHYV5EysYcTLjmwjz-QAAAcQ"]
[Thu Apr 23 07:26:22.713101 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.114:55445] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aelZHoV5EysYcTLjmwj0CQAAAdc"]
[Thu Apr 23 07:26:25.364722 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.115:39783] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aelZITEP2_5RswrH8bGnRQAAAAA"]
[Thu Apr 23 07:26:26.878366 2026] [proxy_fcgi:error] [pid 64967:tid 64976] [client 89.251.0.116:45397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:27.177250 2026] [proxy_fcgi:error] [pid 64967:tid 64975] [client 89.251.0.116:45397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:27.511294 2026] [proxy_fcgi:error] [pid 64967:tid 64991] [client 89.251.0.116:45397] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:29.602489 2026] [:error] [pid 64967:tid 64981] [client 89.251.0.116:45397] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aelZJYAV4GfOOdX8QzoRYwAAAYw"]
[Thu Apr 23 07:26:30.254617 2026] [:error] [pid 42973:tid 43052] [client 89.251.0.136:50571] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aelZJm6I0QqmmmLTHE3ZpQAAAIk"]
[Thu Apr 23 07:26:30.908119 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.135:22723] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aelZJm6I0QqmmmLTHE3ZqwAAAIc"]
[Thu Apr 23 07:26:31.563150 2026] [:error] [pid 25635:tid 25661] [client 89.251.0.119:31247] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aelZJ8Rxv6UsgRGKB3LgtQAAARY"]
[Thu Apr 23 07:26:32.168810 2026] [:error] [pid 25635:tid 25641] [client 89.251.0.135:31899] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aelZKMRxv6UsgRGKB3LguwAAAQI"]
[Thu Apr 23 07:26:32.750321 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.114:21615] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aelZKDC5hrvNXosL83LIRgAAANc"]
[Thu Apr 23 07:26:33.690722 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.150:22555] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aelZKcOAb-3sOknsk4cehgAAAEg"]
[Thu Apr 23 07:26:34.287360 2026] [:error] [pid 25635:tid 25653] [client 89.251.0.123:48645] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aelZKsRxv6UsgRGKB3LgxwAAAQ4"]
[Thu Apr 23 07:26:34.963575 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.132:64153] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aelZKr6vRb9j6psK2ZaWegAAAhg"]
[Thu Apr 23 07:26:35.591950 2026] [:error] [pid 64967:tid 64974] [client 89.251.0.120:59629] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aelZK4AV4GfOOdX8QzoRlwAAAYU"]
[Thu Apr 23 07:26:36.938593 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.121:43989] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aelZLIV5EysYcTLjmwj0awAAAdM"]
[Thu Apr 23 07:26:37.841375 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.124:49451] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aelZLTEP2_5RswrH8bGoJgAAABM"]
[Thu Apr 23 07:26:39.295165 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.117:51613] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aelZLzEP2_5RswrH8bGoNgAAAAQ"]
[Thu Apr 23 07:26:40.600934 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.135:23139] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aelZML6vRb9j6psK2ZaWwAAAAgg"]
[Thu Apr 23 07:26:42.224256 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.116:52103] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aelZMjEP2_5RswrH8bGoYwAAAAE"]
[Thu Apr 23 07:26:44.060531 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.148:47065] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aelZNDC5hrvNXosL83LIqQAAAMM"]
[Thu Apr 23 07:26:46.455989 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.150:63253] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aelZNoV5EysYcTLjmwj01QAAAcw"]
[Thu Apr 23 07:26:52.113156 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.136:35919] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aelZPIV5EysYcTLjmwj1IwAAAcU"]
[Thu Apr 23 07:26:52.729697 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.139:36397] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aelZPIV5EysYcTLjmwj1LwAAAdI"]
[Thu Apr 23 07:26:53.720555 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.119:25029] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aelZPYV5EysYcTLjmwj1UgAAAcE"]
[Thu Apr 23 07:26:55.015538 2026] [:error] [pid 59700:tid 59720] [client 89.251.0.115:65117] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aelZP5XyGZJFeAIDWtlYvAAAAVI"]
[Thu Apr 23 07:26:55.726556 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.134:52225] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aelZP4V5EysYcTLjmwj1ZQAAAcY"]
[Thu Apr 23 07:26:57.664088 2026] [:error] [pid 42973:tid 43061] [client 89.251.0.128:36435] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aelZQW6I0QqmmmLTHE3aXQAAAJI"]
[Thu Apr 23 07:26:58.253378 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.132:54037] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/fm.php"] [unique_id "aelZQoV5EysYcTLjmwj1fQAAAcQ"]
[Thu Apr 23 07:27:00.599624 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.115:64873] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aelZRMOAb-3sOknsk4cfTQAAAFE"]
[Thu Apr 23 07:27:01.823429 2026] [proxy_fcgi:error] [pid 42972:tid 43023] [client 89.251.0.148:51595] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:02.502784 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.148:51595] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "aelZRsOAb-3sOknsk4cfXwAAAFE"]
[Thu Apr 23 07:27:03.194401 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.151:38565] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aelZRzC5hrvNXosL83LJnQAAAM0"]
[Thu Apr 23 07:27:04.514795 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.137:35831] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aelZSJXyGZJFeAIDWtlY5wAAAUE"]
[Thu Apr 23 07:27:05.669872 2026] [:error] [pid 42973:tid 43055] [client 89.251.0.141:48229] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aelZSW6I0QqmmmLTHE3aiQAAAIw"]
[Thu Apr 23 07:27:09.029149 2026] [:error] [pid 42973:tid 43054] [client 89.251.0.137:27123] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aelZTW6I0QqmmmLTHE3angAAAIs"]
[Thu Apr 23 07:27:10.485043 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.141:33533] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aelZTsOAb-3sOknsk4cftQAAAFU"]
[Thu Apr 23 07:27:12.585574 2026] [:error] [pid 42972:tid 43016] [client 89.251.0.115:58917] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "aelZUMOAb-3sOknsk4cf3QAAAEA"]
[Thu Apr 23 07:27:13.320560 2026] [:error] [pid 42972:tid 43022] [client 89.251.0.129:51193] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aelZUcOAb-3sOknsk4cf5wAAAEY"]
[Thu Apr 23 07:27:13.956390 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.147:35165] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aelZUZXyGZJFeAIDWtlZCgAAAUs"]
[Thu Apr 23 07:27:16.180328 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.132:52607] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aelZVJXyGZJFeAIDWtlZFgAAAVM"]
[Thu Apr 23 07:27:17.095649 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.143:27887] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aelZVYV5EysYcTLjmwj2RAAAAcE"]
[Thu Apr 23 07:27:20.509565 2026] [:error] [pid 42972:tid 43022] [client 89.251.0.131:64533] [client 89.251.0.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.131, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "aelZWMOAb-3sOknsk4cgUAAAAEY"]
[Thu Apr 23 07:27:22.536797 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.131:64533] [client 89.251.0.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.131, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aelZWsOAb-3sOknsk4cgfgAAAEI"]
[Thu Apr 23 07:27:29.379088 2026] [proxy_fcgi:error] [pid 42972:tid 43016] [client 89.251.0.131:64533] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:34.463551 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.131:64533] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aelZZsOAb-3sOknsk4cg9QAAAFE"]
[Thu Apr 23 07:27:36.027934 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.119:62145] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aelZaJXyGZJFeAIDWtlZzwAAAUA"]
[Thu Apr 23 07:27:37.409326 2026] [:error] [pid 59700:tid 59725] [client 89.251.0.145:49689] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aelZaZXyGZJFeAIDWtlZ4AAAAVc"]
[Thu Apr 23 07:27:42.397008 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.132:35347] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aelZbsOAb-3sOknsk4chVgAAAEQ"]
[Thu Apr 23 07:27:43.622898 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.145:45517] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aelZb76vRb9j6psK2ZaZnwAAAhY"]
[Thu Apr 23 07:27:44.699744 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.148:42055] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aelZcMRxv6UsgRGKB3LiOQAAARU"]
[Thu Apr 23 07:27:47.337588 2026] [proxy_fcgi:error] [pid 42973:tid 43056] [client 89.251.0.128:64033] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:47.671628 2026] [proxy_fcgi:error] [pid 42973:tid 43063] [client 89.251.0.128:64033] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:48.191001 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.128:64033] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aelZdG6I0QqmmmLTHE3bQAAAAIg"]
[Thu Apr 23 07:27:49.901049 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.119:36205] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aelZdb6vRb9j6psK2ZaaDwAAAgg"]
[Thu Apr 23 07:27:53.073973 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.123:43539] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aelZeTEP2_5RswrH8bGrRQAAABQ"]
[Thu Apr 23 07:27:54.134197 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.133:44559] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aelZer6vRb9j6psK2ZaaRQAAAgs"]
[Thu Apr 23 07:27:56.064315 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.128:40723] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aelZfIV5EysYcTLjmwj3mwAAAcU"]
[Thu Apr 23 07:28:00.120582 2026] [:error] [pid 25635:tid 25659] [client 89.251.0.115:35347] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aelZgMRxv6UsgRGKB3LiogAAARQ"]
[Thu Apr 23 07:28:00.775304 2026] [proxy_fcgi:error] [pid 42973:tid 43057] [client 89.251.0.119:25619] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:02.003413 2026] [:error] [pid 42973:tid 43046] [client 89.251.0.119:25619] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aelZgm6I0QqmmmLTHE3baAAAAIM"]
[Thu Apr 23 07:28:04.311286 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 89.251.0.145:31715] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:04.991287 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.145:31715] [client 89.251.0.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.145, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aelZhIV5EysYcTLjmwj36QAAAcI"]
[Thu Apr 23 07:28:06.713394 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.145:31715] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aelZhoV5EysYcTLjmwj3_QAAAcw"]
[Thu Apr 23 07:28:09.098423 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.133:58015] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aelZiTC5hrvNXosL83LM-wAAAMk"]
[Thu Apr 23 07:28:11.171695 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.120:37957] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aelZi4V5EysYcTLjmwj4MwAAAdI"]
[Thu Apr 23 07:28:14.837134 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.142:39697] [client 89.251.0.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/functions.php"] [unique_id "aelZjr6vRb9j6psK2ZabgwAAAgM"]
[Thu Apr 23 07:28:15.714612 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.123:23799] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aelZj76vRb9j6psK2ZablQAAAg0"]
[Thu Apr 23 07:28:16.290614 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.119:39377] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aelZkDEP2_5RswrH8bGrzwAAAAk"]
[Thu Apr 23 07:28:17.874302 2026] [:error] [pid 42971:tid 42988] [client 89.251.0.146:26409] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aelZkTEP2_5RswrH8bGr7QAAAAI"]
[Thu Apr 23 07:28:19.107657 2026] [proxy_fcgi:error] [pid 59700:tid 59724] [client 89.251.0.113:28737] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:19.448329 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.113:28737] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aelZk5XyGZJFeAIDWtlbHgAAAU0"]
[Thu Apr 23 07:28:20.353876 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.114:58175] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "aelZlJXyGZJFeAIDWtlbLgAAAVg"]
[Thu Apr 23 07:28:21.230761 2026] [:error] [pid 64967:tid 64980] [client 89.251.0.113:52451] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aelZlYAV4GfOOdX8QzoU-QAAAYs"]
[Thu Apr 23 07:28:21.832131 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.116:54063] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aelZlb6vRb9j6psK2ZabxwAAAgs"]
[Thu Apr 23 07:28:22.578611 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.124:39047] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aelZlr6vRb9j6psK2Zab0wAAAhc"]
[Thu Apr 23 07:28:23.200875 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.148:47711] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aelZl5XyGZJFeAIDWtlbSAAAAVY"]
[Thu Apr 23 07:28:23.785913 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.138:27323] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aelZl76vRb9j6psK2Zab8wAAAgs"]
[Thu Apr 23 07:28:24.958875 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.139:21359] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aelZmL6vRb9j6psK2ZacIwAAAgU"]
[Thu Apr 23 07:28:25.618466 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.117:64865] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aelZmcOAb-3sOknsk4ciWgAAAEM"]
[Thu Apr 23 07:28:26.228490 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.145:27217] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aelZmjEP2_5RswrH8bGsGwAAABc"]
[Thu Apr 23 07:28:26.850486 2026] [:error] [pid 64967:tid 64990] [client 89.251.0.123:57051] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aelZmoAV4GfOOdX8QzoVKgAAAZU"]
[Thu Apr 23 07:28:27.613157 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.138:56805] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aelZmzEP2_5RswrH8bGsIwAAAAA"]
[Thu Apr 23 07:28:28.243311 2026] [proxy_fcgi:error] [pid 42971:tid 42995] [client 89.251.0.136:45059] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:29.179372 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.136:45059] [client 89.251.0.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.136, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aelZnTEP2_5RswrH8bGsMQAAAAY"]
[Thu Apr 23 07:28:31.744180 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.136:45059] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aelZnzEP2_5RswrH8bGsRgAAAAk"]
[Thu Apr 23 07:28:37.764983 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.113:20835] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aelZpZXyGZJFeAIDWtlbzQAAAVY"]
[Thu Apr 23 07:28:38.356620 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.131:54513] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aelZpoV5EysYcTLjmwj5QgAAAcQ"]
[Thu Apr 23 07:28:40.005067 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.120:32581] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aelZqJXyGZJFeAIDWtlb4QAAAUI"]
[Thu Apr 23 07:28:42.903819 2026] [:error] [pid 25635:tid 25659] [client 89.251.0.134:61581] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aelZqsRxv6UsgRGKB3LjdQAAARQ"]
[Thu Apr 23 07:28:43.580961 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.135:28607] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aelZq76vRb9j6psK2Zac-AAAAgM"]
[Thu Apr 23 07:28:44.241822 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.125:40521] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aelZrL6vRb9j6psK2ZadBQAAAgg"]
[Thu Apr 23 07:28:46.241433 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.124:52465] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aelZrjEP2_5RswrH8bGsqwAAABE"]
[Thu Apr 23 07:28:47.178749 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.131:32255] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aelZr4AV4GfOOdX8QzoVuQAAAYk"]
[Thu Apr 23 07:28:48.555371 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.134:54399] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aelZsMRxv6UsgRGKB3LjiQAAAQY"]
[Thu Apr 23 07:28:53.608680 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.142:30339] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aelZtcOAb-3sOknsk4cjIAAAAEQ"]
[Thu Apr 23 07:28:54.641245 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.121:26671] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/about.php"] [unique_id "aelZtr6vRb9j6psK2ZadVQAAAgc"]
[Thu Apr 23 07:28:58.229821 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.114:20169] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aelZur6vRb9j6psK2ZadogAAAgk"]
[Thu Apr 23 07:29:00.624047 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.113:36025] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aelZvJXyGZJFeAIDWtlcogAAAU8"]
[Thu Apr 23 07:29:02.957298 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.127:53669] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aelZvjEP2_5RswrH8bGtSgAAAAw"]
[Thu Apr 23 07:29:05.031020 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.137:53827] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aelZwTEP2_5RswrH8bGtaQAAABM"]
[Thu Apr 23 07:29:06.525254 2026] [:error] [pid 42973:tid 43057] [client 89.251.0.131:60065] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aelZwm6I0QqmmmLTHE3c8QAAAI4"]
[Thu Apr 23 07:29:07.123087 2026] [:error] [pid 25635:tid 25663] [client 89.251.0.128:61527] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aelZw8Rxv6UsgRGKB3Lj5gAAARg"]
[Thu Apr 23 07:29:10.223086 2026] [:error] [pid 42972:tid 43017] [client 89.251.0.151:60567] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aelZxsOAb-3sOknsk4cjhQAAAEE"]
[Thu Apr 23 07:29:13.308206 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.138:43629] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aelZyYV5EysYcTLjmwj62gAAAc8"]
[Thu Apr 23 07:29:15.615951 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.140:63281] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZy5XyGZJFeAIDWtldFQAAAVM"]
[Thu Apr 23 07:29:16.288202 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.113:65469] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aelZzIAV4GfOOdX8QzoWVAAAAZE"]
[Thu Apr 23 07:29:17.333992 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.142:31473] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aelZzZXyGZJFeAIDWtldLQAAAUk"]
[Thu Apr 23 07:29:18.720067 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.114:59963] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aelZzoAV4GfOOdX8QzoWYwAAAZI"]
[Thu Apr 23 07:29:19.316269 2026] [:error] [pid 42973:tid 43063] [client 89.251.0.134:50883] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aelZz26I0QqmmmLTHE3dSQAAAJQ"]
[Thu Apr 23 07:29:21.892574 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.138:21171] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aelZ0TC5hrvNXosL83LQPQAAANc"]
[Thu Apr 23 07:29:23.551357 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.144:40187] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aelZ076vRb9j6psK2ZaegwAAAhI"]
[Thu Apr 23 07:29:24.201446 2026] [:error] [pid 25635:tid 25639] [client 89.251.0.116:23439] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aelZ1MRxv6UsgRGKB3LkTQAAAQA"]
[Thu Apr 23 07:29:25.464706 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.134:63237] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aelZ1W6I0QqmmmLTHE3dbQAAAIc"]
[Thu Apr 23 07:29:26.488741 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.140:21403] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aelZ1oV5EysYcTLjmwj7PAAAAcY"]
[Thu Apr 23 07:29:29.743897 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.142:33769] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aelZ2TC5hrvNXosL83LQqQAAANA"]
[Thu Apr 23 07:29:32.302554 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.117:57753] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aelZ3IV5EysYcTLjmwj7nAAAAcg"]
[Thu Apr 23 07:29:33.828081 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.119:63191] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aelZ3YV5EysYcTLjmwj7ygAAAcs"]
[Thu Apr 23 07:29:34.773912 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.123:37107] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/as.php"] [unique_id "aelZ3m6I0QqmmmLTHE3diAAAAIc"]
[Thu Apr 23 07:29:35.821834 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.117:51003] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aelZ3zC5hrvNXosL83LQ8AAAANQ"]
[Thu Apr 23 07:29:36.433984 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.150:60759] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/install.php"] [unique_id "aelZ4DC5hrvNXosL83LRAgAAANQ"]
[Thu Apr 23 07:29:37.045366 2026] [:error] [pid 59700:tid 59708] [client 89.251.0.140:51609] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aelZ4ZXyGZJFeAIDWtldywAAAUY"]
[Thu Apr 23 07:29:39.616565 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.143:20553] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aelZ45XyGZJFeAIDWtleAAAAAUk"]
[Thu Apr 23 07:29:41.264852 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.114:23197] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aelZ5cOAb-3sOknsk4cknwAAAE0"]
[Thu Apr 23 07:29:42.852840 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.124:23969] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aelZ5r6vRb9j6psK2ZafGwAAAgk"]
[Thu Apr 23 07:29:44.133428 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.147:32557] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aelZ6DC5hrvNXosL83LRoQAAAMI"]
[Thu Apr 23 07:29:47.001946 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.143:59465] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aelZ65XyGZJFeAIDWtleigAAAUg"]
[Thu Apr 23 07:29:47.987471 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.144:54111] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aelZ64V5EysYcTLjmwj8UQAAAdM"]
[Thu Apr 23 07:29:49.441953 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.143:42745] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aelZ7TC5hrvNXosL83LR5gAAANA"]
[Thu Apr 23 07:29:50.699687 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.133:39783] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aelZ7jC5hrvNXosL83LSBgAAAMg"]
[Thu Apr 23 07:29:54.267407 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.113:25329] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aelZ8oAV4GfOOdX8QzoW_AAAAZE"]
[Thu Apr 23 07:29:54.893423 2026] [:error] [pid 64967:tid 64980] [client 89.251.0.137:31045] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aelZ8oAV4GfOOdX8QzoW_QAAAYs"]
[Thu Apr 23 07:29:56.474995 2026] [:error] [pid 42971:tid 42988] [client 89.251.0.141:36497] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aelZ9DEP2_5RswrH8bGvlAAAAAI"]
[Thu Apr 23 07:29:57.109431 2026] [:error] [pid 42973:tid 43044] [client 89.251.0.150:29263] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZ9W6I0QqmmmLTHE3dvwAAAIE"]
[Thu Apr 23 07:29:58.473398 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.143:60645] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aelZ9oAV4GfOOdX8QzoXEAAAAZI"]
[Thu Apr 23 07:30:00.214689 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.121:27247] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aelZ-DEP2_5RswrH8bGvpwAAAA4"]
[Thu Apr 23 07:30:00.928309 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.127:57751] [client 89.251.0.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.127, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aelZ-DEP2_5RswrH8bGvtQAAABQ"]
[Thu Apr 23 07:30:00.934300 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 89.251.0.127:57751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:30:01.351835 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.127:57751] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aelZ-TEP2_5RswrH8bGvvgAAABI"]
[Thu Apr 23 07:30:03.114637 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.148:38103] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aelZ-8OAb-3sOknsk4clVgAAAFc"]
[Thu Apr 23 07:30:03.830425 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.144:22217] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/network.php"] [unique_id "aelZ-zEP2_5RswrH8bGv0wAAABc"]
[Thu Apr 23 07:30:07.671167 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.138:47509] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aelZ_4V5EysYcTLjmwj9AwAAAcI"]
[Thu Apr 23 07:30:08.391049 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.116:33881] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aelaADC5hrvNXosL83LSwgAAAM4"]
[Thu Apr 23 07:30:10.346349 2026] [:error] [pid 25635:tid 25662] [client 89.251.0.150:40999] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aelaAsRxv6UsgRGKB3LlWwAAARc"]
[Thu Apr 23 07:30:11.126370 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.129:36717] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aelaA8Rxv6UsgRGKB3LlYAAAAQw"]
[Thu Apr 23 07:30:11.813297 2026] [proxy_fcgi:error] [pid 42971:tid 42991] [client 89.251.0.136:30497] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:30:12.620898 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.136:30497] [client 89.251.0.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.136, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aelaBDEP2_5RswrH8bGwGwAAABE"]
[Thu Apr 23 07:30:13.247393 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.136:30497] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aelaBTEP2_5RswrH8bGwHgAAABM"]
[Thu Apr 23 07:30:14.947871 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.124:37911] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aelaBr6vRb9j6psK2ZagQQAAAhY"]
[Thu Apr 23 07:30:16.682158 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.150:43867] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aelaCIV5EysYcTLjmwj9LQAAAcM"]
[Thu Apr 23 07:30:17.476247 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.124:39271] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aelaCTC5hrvNXosL83LTJAAAANc"]
[Thu Apr 23 07:30:19.040382 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.126:51771] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aelaC76vRb9j6psK2ZagwAAAAhc"]
[Thu Apr 23 07:30:20.402418 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.126:48381] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aelaDL6vRb9j6psK2ZahAQAAAgM"]
[Thu Apr 23 07:30:22.464741 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.129:31747] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aelaDjC5hrvNXosL83LTPAAAAMc"]
[Thu Apr 23 07:30:23.179968 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.133:31419] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aelaD4V5EysYcTLjmwj9RgAAAcI"]
[Thu Apr 23 07:30:24.206904 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.124:37273] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/count.php"] [unique_id "aelaEIV5EysYcTLjmwj9UgAAAcg"]
[Thu Apr 23 07:30:27.988127 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.116:41429] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aelaE5XyGZJFeAIDWtlf5QAAAVQ"]
[Thu Apr 23 07:30:29.488003 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.132:43969] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.measureyourcause.com.au"] [uri "/images/stories/themes.php"] [unique_id "aelaFYV5EysYcTLjmwj9eQAAAcM"]
[Thu Apr 23 07:30:29.919067 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.132:43969] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aelaFYV5EysYcTLjmwj9fgAAAc0"]
[Thu Apr 23 07:30:31.548907 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.125:42351] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aelaFzC5hrvNXosL83LTbQAAAMc"]
[Thu Apr 23 07:30:32.241703 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.125:27243] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aelaGG6I0QqmmmLTHE3eOQAAAIg"]
[Thu Apr 23 07:30:35.423641 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.124:29487] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aelaGzC5hrvNXosL83LTkQAAAMc"]
[Thu Apr 23 07:30:36.957826 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.139:41903] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aelaHJXyGZJFeAIDWtlgUgAAAVA"]
[Thu Apr 23 07:30:37.897397 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.146:40107] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aelaHTEP2_5RswrH8bGwwAAAAA0"]
[Thu Apr 23 07:30:40.194376 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.148:42477] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aelaIIV5EysYcTLjmwj-FQAAAdE"]
[Thu Apr 23 07:30:40.812503 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.136:45039] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aelaIMRxv6UsgRGKB3LlpQAAAQ0"]
[Thu Apr 23 07:30:41.781657 2026] [:error] [pid 42973:tid 43049] [client 89.251.0.123:30221] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aelaIW6I0QqmmmLTHE3eUAAAAIY"]
[Thu Apr 23 07:30:42.614061 2026] [:error] [pid 64967:tid 64984] [client 89.251.0.126:65413] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aelaIoAV4GfOOdX8QzoX3wAAAY8"]
[Thu Apr 23 07:30:43.997508 2026] [:error] [pid 64967:tid 64988] [client 89.251.0.146:63607] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aelaI4AV4GfOOdX8QzoX6AAAAZM"]
[Thu Apr 23 07:30:46.676910 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.143:41325] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aelaJr6vRb9j6psK2ZaiOAAAAg4"]
[Thu Apr 23 07:30:47.526475 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.135:41781] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aelaJ8Rxv6UsgRGKB3LlzgAAAQw"]
[Thu Apr 23 07:30:49.785417 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.121:48369] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aelaKYAV4GfOOdX8QzoYDQAAAZI"]
[Thu Apr 23 07:30:51.340897 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.117:41155] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aelaKzC5hrvNXosL83LT9wAAAMw"]
[Thu Apr 23 07:30:53.538634 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.117:35747] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aelaLTC5hrvNXosL83LUDAAAANc"]
[Thu Apr 23 07:30:54.290053 2026] [:error] [pid 42973:tid 43046] [client 89.251.0.114:34069] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aelaLm6I0QqmmmLTHE3ejgAAAIM"]
[Thu Apr 23 07:30:55.062758 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.126:52983] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aelaL76vRb9j6psK2ZaiwgAAAg0"]
[Thu Apr 23 07:30:56.531001 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.142:48683] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aelaMIV5EysYcTLjmwj-iwAAAcc"]
[Thu Apr 23 07:30:57.943758 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.142:33763] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aelaMZXyGZJFeAIDWtlg-QAAAVM"]
[Thu Apr 23 07:30:59.775957 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.124:27267] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aelaM76vRb9j6psK2ZajBAAAAgE"]
[Thu Apr 23 07:31:00.715798 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.148:64157] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aelaNL6vRb9j6psK2ZajIgAAAgE"]
[Thu Apr 23 07:31:01.428982 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.148:47751] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aelaNYV5EysYcTLjmwj-2gAAAdA"]
[Thu Apr 23 07:31:03.000608 2026] [:error] [pid 42973:tid 43049] [client 89.251.0.114:23179] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aelaNm6I0QqmmmLTHE3epwAAAIY"]
[Thu Apr 23 07:31:04.184176 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.115:23869] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aelaOL6vRb9j6psK2ZajaAAAAgs"]
[Thu Apr 23 07:31:04.816499 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.126:23495] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aelaOL6vRb9j6psK2ZajhgAAAhY"]
[Thu Apr 23 07:31:05.670433 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.129:33295] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aelaOb6vRb9j6psK2ZajpAAAAgM"]
[Thu Apr 23 07:31:08.080136 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.120:38861] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aelaPIAV4GfOOdX8QzoYOgAAAYM"]
[Thu Apr 23 07:31:13.062193 2026] [:error] [pid 64967:tid 64993] [client 89.251.0.120:53981] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aelaQYAV4GfOOdX8QzoYTQAAAZg"]
[Thu Apr 23 07:31:14.114248 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.124:50945] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aelaQjC5hrvNXosL83LU2gAAAMM"]
[Thu Apr 23 07:31:15.359721 2026] [:error] [pid 42973:tid 43061] [client 89.251.0.148:25259] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aelaQ26I0QqmmmLTHE3e2wAAAJI"]
[Thu Apr 23 07:31:18.621554 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.137:64293] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aelaRr6vRb9j6psK2ZakiwAAAgA"]
[Thu Apr 23 07:31:19.295835 2026] [:error] [pid 59700:tid 59709] [client 89.251.0.135:60951] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aelaR5XyGZJFeAIDWtlhfAAAAUc"]
[Thu Apr 23 07:31:21.624249 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.123:27753] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aelaSb6vRb9j6psK2ZaktgAAAgw"]
[Thu Apr 23 07:31:23.715396 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.114:24771] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aelaSzC5hrvNXosL83LVKwAAANU"]
[Thu Apr 23 07:31:25.169341 2026] [:error] [pid 42971:tid 43007] [client 89.251.0.138:32929] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aelaTTEP2_5RswrH8bGxzgAAABU"]
[Thu Apr 23 07:31:26.584354 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.142:65083] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aelaToV5EysYcTLjmwj_zwAAAcc"]
[Thu Apr 23 07:31:28.585655 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.138:59223] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aelaUIV5EysYcTLjmwj_7gAAAdQ"]
[Thu Apr 23 07:31:29.585256 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.151:48853] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aelaUb6vRb9j6psK2ZalUwAAAhM"]
[Thu Apr 23 07:31:33.185823 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.126:50741] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aelaVYV5EysYcTLjmwgAMgAAAcY"]
[Thu Apr 23 07:31:35.008534 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.119:46673] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aelaV4V5EysYcTLjmwgASAAAAcw"]
[Thu Apr 23 07:31:35.712616 2026] [proxy_fcgi:error] [pid 65000:tid 65031] [client 89.251.0.127:30071] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:31:36.066000 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.127:30071] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aelaWL6vRb9j6psK2ZalkwAAAg0"]
[Thu Apr 23 07:31:36.736498 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.136:25187] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aelaWDEP2_5RswrH8bGyFQAAABM"]
[Thu Apr 23 07:31:37.996547 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.148:51837] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aelaWZXyGZJFeAIDWtlh_AAAAVg"]
[Thu Apr 23 07:31:38.683081 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.132:45225] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aelaWpXyGZJFeAIDWtliBwAAAVQ"]
[Thu Apr 23 07:31:42.570748 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.113:43843] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aelaXjEP2_5RswrH8bGyZAAAAAU"]
[Thu Apr 23 07:31:43.288323 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.133:50673] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aelaX76vRb9j6psK2ZaluAAAAgY"]
[Thu Apr 23 07:31:44.368214 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.146:28857] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/log.php"] [unique_id "aelaYMOAb-3sOknsk4cngQAAAE0"]
[Thu Apr 23 07:31:46.653385 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.147:28969] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aelaYsOAb-3sOknsk4cnkQAAAFE"]
[Thu Apr 23 07:31:47.386337 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.139:40033] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aelaYzEP2_5RswrH8bGyngAAAAQ"]
[Thu Apr 23 07:31:49.034287 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.142:43821] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aelaZb6vRb9j6psK2Zal4QAAAhE"]
[Thu Apr 23 07:31:55.304630 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.132:49965] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aelaa76vRb9j6psK2ZamCAAAAhE"]
[Thu Apr 23 07:31:56.895924 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.143:51665] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aelabIV5EysYcTLjmwgA-wAAAcU"]
[Thu Apr 23 07:32:01.004744 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.136:55551] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aelacYV5EysYcTLjmwgBMAAAAcw"]
[Thu Apr 23 07:32:02.164760 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.137:56663] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aelacr6vRb9j6psK2ZamRAAAAgg"]
[Thu Apr 23 07:32:03.506125 2026] [:error] [pid 42973:tid 43054] [client 89.251.0.117:20465] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aelac26I0QqmmmLTHE3fcwAAAIs"]
[Thu Apr 23 07:32:04.135752 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.147:60219] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aeladDC5hrvNXosL83LWiAAAANM"]
[Thu Apr 23 07:32:07.261246 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.137:26453] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aelad76vRb9j6psK2ZamngAAAgY"]
[Thu Apr 23 07:32:08.121057 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.147:60689] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aelaeJXyGZJFeAIDWtlikQAAAUM"]
[Thu Apr 23 07:32:09.420911 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.137:42617] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/file.php"] [unique_id "aelaeYAV4GfOOdX8QzoZkwAAAZQ"]
[Thu Apr 23 07:32:10.473438 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.120:61185] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aelaer6vRb9j6psK2ZamxgAAAgw"]
[Thu Apr 23 07:32:12.608421 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.137:24299] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/load.php"] [unique_id "aelafDEP2_5RswrH8bGzSwAAAAs"]
[Thu Apr 23 07:32:13.252567 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.140:44435] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aelafb6vRb9j6psK2Zam5AAAAgU"]
[Thu Apr 23 07:32:13.832750 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.113:53121] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aelafTEP2_5RswrH8bGzUgAAAA4"]
[Thu Apr 23 07:32:16.028475 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.137:57803] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aelagL6vRb9j6psK2ZanKAAAAgI"]
[Thu Apr 23 07:32:17.164158 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.123:39043] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aelagYV5EysYcTLjmwgB4wAAAcI"]
[Thu Apr 23 07:32:18.648879 2026] [:error] [pid 64967:tid 64984] [client 89.251.0.146:42315] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aelagoAV4GfOOdX8QzoZugAAAY8"]
[Thu Apr 23 07:32:19.384961 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.132:32117] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aelag76vRb9j6psK2ZanYwAAAhY"]
[Thu Apr 23 07:32:20.123494 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.125:21429] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aelahJXyGZJFeAIDWtlizwAAAVg"]
[Thu Apr 23 07:32:23.974810 2026] [:error] [pid 64967:tid 64969] [client 89.251.0.125:56697] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aelah4AV4GfOOdX8QzoZ7QAAAYA"]
[Thu Apr 23 07:32:25.005600 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.116:59099] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aelaicOAb-3sOknsk4coMgAAAFc"]
[Thu Apr 23 07:32:27.019800 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.120:32875] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aelai76vRb9j6psK2ZanwAAAAgM"]
[Thu Apr 23 07:32:27.660819 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.133:60779] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aelai5XyGZJFeAIDWtljAAAAAUI"]
[Thu Apr 23 07:32:28.422330 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.133:64867] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aelajJXyGZJFeAIDWtljBQAAAU0"]
[Thu Apr 23 07:32:30.774615 2026] [:error] [pid 25635:tid 25654] [client 89.251.0.144:44813] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aelajsRxv6UsgRGKB3LnAAAAAQ8"]
[Thu Apr 23 07:32:35.566280 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.125:35725] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aelak5XyGZJFeAIDWtljXwAAAUI"]
[Thu Apr 23 07:32:38.114785 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.144:25465] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aelaloV5EysYcTLjmwgDBAAAAcg"]
[Thu Apr 23 07:32:40.559118 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.141:54063] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aelamG6I0QqmmmLTHE3f1gAAAIg"]
[Thu Apr 23 07:32:41.218316 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.147:26667] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aelamb6vRb9j6psK2ZaoXgAAAgU"]
[Thu Apr 23 07:32:48.122878 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.128:20531] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aelaoL6vRb9j6psK2Zao5gAAAhg"]
[Thu Apr 23 07:32:48.830878 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.137:46585] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aelaoIV5EysYcTLjmwgEEgAAAco"]
[Thu Apr 23 07:32:52.694210 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.151:47241] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aelapMOAb-3sOknsk4colQAAAEk"]
[Thu Apr 23 07:32:53.805152 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.125:21913] [client 89.251.0.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.125, incrementing brute counter"] [hostname "www.measureyourcause.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aelapZXyGZJFeAIDWtlj9gAAAUI"]
[Thu Apr 23 07:32:54.549142 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.125:21913] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aelappXyGZJFeAIDWtlkBQAAAVg"]
[Thu Apr 23 07:32:57.207066 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.115:47767] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aelaqTC5hrvNXosL83LXuwAAAMk"]
[Thu Apr 23 07:32:57.968947 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.143:49267] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aelaqYV5EysYcTLjmwgE4wAAAcg"]
[Thu Apr 23 07:33:01.632013 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.147:55747] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aelarb6vRb9j6psK2ZapqwAAAhE"]
[Thu Apr 23 07:33:05.120412 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.117:59999] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aelasYV5EysYcTLjmwgFeQAAAc0"]
[Thu Apr 23 07:33:06.937068 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.144:27991] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aelasjC5hrvNXosL83LYIAAAAMA"]
[Thu Apr 23 07:33:14.331999 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.146:61729] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aelauoV5EysYcTLjmwgGSQAAAc4"]
[Thu Apr 23 07:33:15.092691 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.113:24329] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aelau4V5EysYcTLjmwgGUgAAAck"]
[Thu Apr 23 07:33:15.890906 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.141:23729] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aelau76vRb9j6psK2ZaqlQAAAhc"]
[Thu Apr 23 07:33:16.527173 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.129:25121] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aelavIV5EysYcTLjmwgGbwAAAco"]
[Thu Apr 23 07:33:18.266216 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.119:22309] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aelavpXyGZJFeAIDWtlk-gAAAVg"]
[Thu Apr 23 07:33:19.521353 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.119:22229] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aelav4V5EysYcTLjmwgGqwAAAdc"]
[Thu Apr 23 07:33:21.943319 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.132:57697] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aelawcOAb-3sOknsk4cowgAAAFA"]
[Thu Apr 23 07:33:26.417340 2026] [:error] [pid 59700:tid 59719] [client 89.251.0.148:58241] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aelaxpXyGZJFeAIDWtllUAAAAVE"]
[Thu Apr 23 07:33:27.198633 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.147:23077] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aelax4V5EysYcTLjmwgHEAAAAc0"]
[Thu Apr 23 07:34:05.187278 2026] [autoindex:error] [pid 59700:tid 59712] [client 89.251.0.139:35335] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:50:56.543613 2026] [:error] [pid 64998:tid 65026] [client 91.230.225.24:41657] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael7AIV5EysYcTLjmwhpZAAAAdg"]
[Thu Apr 23 09:50:57.914286 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.32:62521] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael7AYV5EysYcTLjmwhpgQAAAcc"]
[Thu Apr 23 09:51:33.581453 2026] [autoindex:error] [pid 43083:tid 43109] [client 185.192.71.38:51441] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 14:31:39.618795 2026] [:error] [pid 42973:tid 43048] [client 43.166.239.199:47028] [client 43.166.239.199] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aem8y26I0QqmmmLTHE2OjAAAAIU"]
[Thu Apr 23 18:12:45.498497 2026] [:error] [pid 25635:tid 25662] [client 43.155.195.141:57272] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aenwncRxv6UsgRGKB3IkkwAAARc"]
[Thu Apr 23 21:01:40.218401 2026] [:error] [pid 59700:tid 59723] [client 43.153.215.224:54824] [client 43.153.215.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeoYNJXyGZJFeAIDWtkkQAAAAVU"]
[Thu Apr 23 21:02:26.192527 2026] [:error] [pid 65000:tid 65045] [client 103.216.221.90:37265] [client 103.216.221.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "aeoYYr6vRb9j6psK2ZZ1AAAAAgw"], referer: https://measureyourcause.com.au/
[Thu Apr 23 21:02:26.321814 2026] [:error] [pid 65000:tid 65043] [client 103.216.221.90:26114] [client 103.216.221.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "aeoYYr6vRb9j6psK2ZZ1AQAAAgo"], referer: https://measureyourcause.com.au/
[Thu Apr 23 21:02:26.463940 2026] [:error] [pid 65000:tid 65052] [client 103.216.221.90:9165] [client 103.216.221.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "aeoYYr6vRb9j6psK2ZZ1AgAAAhM"], referer: https://measureyourcause.com.au/
[Thu Apr 23 21:02:26.592375 2026] [:error] [pid 42973:tid 43052] [client 103.216.221.90:21587] [client 103.216.221.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "aeoYYm6I0QqmmmLTHE0TfwAAAIk"], referer: https://measureyourcause.com.au/
[Thu Apr 23 21:02:26.720245 2026] [:error] [pid 42973:tid 43062] [client 103.216.221.90:43920] [client 103.216.221.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "aeoYYm6I0QqmmmLTHE0TgAAAAJM"], referer: https://measureyourcause.com.au/
[Thu Apr 23 21:02:26.848793 2026] [:error] [pid 65000:tid 65054] [client 103.216.221.90:24593] [client 103.216.221.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "aeoYYr6vRb9j6psK2ZZ1BAAAAhU"], referer: https://measureyourcause.com.au/
[Thu Apr 23 21:02:27.446161 2026] [:error] [pid 42973:tid 43055] [client 103.216.221.90:39565] [client 103.216.221.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "aeoYY26I0QqmmmLTHE0TgQAAAIw"], referer: https://measureyourcause.com.au/
[Thu Apr 23 21:02:28.012628 2026] [:error] [pid 65000:tid 65031] [client 103.216.221.90:10149] [client 103.216.221.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "aeoYZL6vRb9j6psK2ZZ1BgAAAgI"], referer: https://measureyourcause.com.au/
[Thu Apr 23 21:02:28.606946 2026] [:error] [pid 65000:tid 65038] [client 103.216.221.90:8055] [client 103.216.221.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "aeoYZL6vRb9j6psK2ZZ1BwAAAgU"], referer: https://measureyourcause.com.au/
[Thu Apr 23 21:02:29.193015 2026] [:error] [pid 42972:tid 43022] [client 103.216.221.90:36917] [client 103.216.221.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/favicon.ico"] [unique_id "aeoYZcOAb-3sOknsk4cy-AAAAEY"], referer: https://measureyourcause.com.au/
[Thu Apr 23 22:58:38.597348 2026] [:error] [pid 42971:tid 43009] [client 20.216.173.101:48463] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeoznjEP2_5RswrH8bE2BAAAABc"]
[Thu Apr 23 22:58:40.314565 2026] [:error] [pid 64998:tid 65011] [client 20.216.173.101:38215] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeozoIV5EysYcTLjmwiqNQAAAck"]
[Thu Apr 23 22:58:41.900303 2026] [:error] [pid 42972:tid 43028] [client 20.216.173.101:57365] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeozocOAb-3sOknsk4dgMQAAAEw"]
[Thu Apr 23 22:58:44.749368 2026] [:error] [pid 42971:tid 42989] [client 20.216.173.101:52621] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aeozpDEP2_5RswrH8bE2BgAAAAM"]
[Thu Apr 23 22:58:46.910635 2026] [:error] [pid 65000:tid 65029] [client 20.216.173.101:52608] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxcs.php"] [unique_id "aeozpr6vRb9j6psK2ZbKCgAAAgA"]
[Thu Apr 23 22:58:49.087638 2026] [:error] [pid 42971:tid 42992] [client 20.216.173.101:52623] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxcs.php"] [unique_id "aeozqTEP2_5RswrH8bE2CQAAAAY"]
[Thu Apr 23 22:58:50.242463 2026] [:error] [pid 64998:tid 65021] [client 20.216.173.101:37619] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxcs.php"] [unique_id "aeozqoV5EysYcTLjmwiqQgAAAdM"]
[Thu Apr 23 22:58:52.108227 2026] [:error] [pid 42971:tid 42990] [client 20.216.173.101:53108] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxcs.php"] [unique_id "aeozrDEP2_5RswrH8bE2DwAAAAQ"]
[Thu Apr 23 22:58:53.802133 2026] [:error] [pid 65000:tid 65057] [client 20.216.173.101:4694] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s1.php"] [unique_id "aeozrb6vRb9j6psK2ZbKFQAAAhg"]
[Thu Apr 23 22:58:55.621649 2026] [:error] [pid 25635:tid 25644] [client 20.216.173.101:13876] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s1.php"] [unique_id "aeozr8Rxv6UsgRGKB3I8YQAAAQU"]
[Thu Apr 23 22:59:00.303907 2026] [:error] [pid 25635:tid 25654] [client 20.216.173.101:55836] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s1.php"] [unique_id "aeoztMRxv6UsgRGKB3I8YgAAAQ8"]
[Thu Apr 23 22:59:02.491494 2026] [:error] [pid 42971:tid 42988] [client 20.216.173.101:62278] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s1.php"] [unique_id "aeoztjEP2_5RswrH8bE2EQAAAAI"]
[Thu Apr 23 22:59:03.828046 2026] [:error] [pid 42972:tid 43032] [client 20.216.173.101:4675] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kz.php"] [unique_id "aeozt8OAb-3sOknsk4dgTgAAAFA"]
[Thu Apr 23 22:59:04.511249 2026] [:error] [pid 64998:tid 65002] [client 20.216.173.101:13825] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kz.php"] [unique_id "aeozuIV5EysYcTLjmwiqVQAAAcA"]
[Thu Apr 23 22:59:07.093195 2026] [:error] [pid 64998:tid 65013] [client 20.216.173.101:45712] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kz.php"] [unique_id "aeozu4V5EysYcTLjmwiqYwAAAcs"]
[Thu Apr 23 22:59:09.419702 2026] [:error] [pid 64998:tid 65016] [client 20.216.173.101:64099] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kz.php"] [unique_id "aeozvYV5EysYcTLjmwiqaAAAAc4"]
[Thu Apr 23 22:59:10.907594 2026] [:error] [pid 46953:tid 46978] [client 20.216.173.101:43818] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeozvknlpdHh-P6wKbpKuQAAAlU"]
[Thu Apr 23 22:59:15.102361 2026] [:error] [pid 42971:tid 42998] [client 20.216.173.101:49703] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeozwzEP2_5RswrH8bE2FgAAAAw"]
[Thu Apr 23 22:59:19.154353 2026] [:error] [pid 64998:tid 65014] [client 20.216.173.101:47459] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeozx4V5EysYcTLjmwiqdwAAAcw"]
[Thu Apr 23 22:59:20.527162 2026] [:error] [pid 46953:tid 46979] [client 20.216.173.101:14499] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aeozyEnlpdHh-P6wKbpKvAAAAlY"]
[Thu Apr 23 22:59:24.516618 2026] [:error] [pid 42973:tid 43057] [client 20.216.173.101:49723] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeozzG6I0QqmmmLTHE02fAAAAI4"]
[Thu Apr 23 22:59:26.197617 2026] [:error] [pid 64967:tid 64985] [client 20.216.173.101:33082] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeozzoAV4GfOOdX8QzqAKwAAAZA"]
[Thu Apr 23 22:59:27.374021 2026] [:error] [pid 42973:tid 43063] [client 20.216.173.101:47463] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeozz26I0QqmmmLTHE02gQAAAJQ"]
[Thu Apr 23 22:59:29.732553 2026] [:error] [pid 46953:tid 46971] [client 20.216.173.101:33070] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "aeoz0UnlpdHh-P6wKbpKxAAAAk8"]
[Thu Apr 23 22:59:33.405371 2026] [:error] [pid 65000:tid 65057] [client 20.216.173.101:22912] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeoz1b6vRb9j6psK2ZbK0gAAAhg"]
[Thu Apr 23 22:59:35.736071 2026] [:error] [pid 43083:tid 43098] [client 20.216.173.101:57913] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "aeoz1zC5hrvNXosL83KHyAAAAM0"]
[Thu Apr 23 22:59:47.717853 2026] [:error] [pid 42973:tid 43065] [client 20.216.173.101:59677] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeoz426I0QqmmmLTHE02oQAAAJY"]
[Thu Apr 23 22:59:54.106543 2026] [:error] [pid 46953:tid 46966] [client 20.216.173.101:56426] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeoz6knlpdHh-P6wKbpK-AAAAko"]
[Thu Apr 23 23:00:01.419057 2026] [:error] [pid 43083:tid 43109] [client 20.216.173.101:59394] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aeoz8TC5hrvNXosL83KH5gAAANg"]
[Thu Apr 23 23:00:05.270253 2026] [:error] [pid 64998:tid 65020] [client 20.216.173.101:47913] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeoz9YV5EysYcTLjmwiquQAAAdI"]
[Thu Apr 23 23:00:08.825010 2026] [:error] [pid 65000:tid 65040] [client 20.216.173.101:28428] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeoz-L6vRb9j6psK2ZbLVQAAAgc"]
[Thu Apr 23 23:00:12.518965 2026] [:error] [pid 42972:tid 43036] [client 20.216.173.101:41475] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeoz_MOAb-3sOknsk4dgywAAAFQ"]
[Thu Apr 23 23:00:14.858941 2026] [:error] [pid 42973:tid 43050] [client 20.216.173.101:28425] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aeoz_m6I0QqmmmLTHE024QAAAIc"]
[Thu Apr 23 23:00:17.360999 2026] [:error] [pid 42971:tid 42988] [client 20.216.173.101:62716] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeo0ATEP2_5RswrH8bE2NwAAAAI"]
[Thu Apr 23 23:00:18.646439 2026] [:error] [pid 64967:tid 64985] [client 20.216.173.101:16396] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeo0AoAV4GfOOdX8QzqARwAAAZA"]
[Thu Apr 23 23:00:22.764343 2026] [:error] [pid 65000:tid 65044] [client 20.216.173.101:63857] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeo0Br6vRb9j6psK2ZbLbQAAAgs"]
[Thu Apr 23 23:00:29.309163 2026] [:error] [pid 59700:tid 59717] [client 20.216.173.101:18816] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aeo0DZXyGZJFeAIDWtk9AgAAAU8"]
[Thu Apr 23 23:00:35.082556 2026] [:error] [pid 64998:tid 65015] [client 20.216.173.101:52283] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeo0E4V5EysYcTLjmwirGAAAAc0"]
[Thu Apr 23 23:00:36.461207 2026] [:error] [pid 65000:tid 65054] [client 20.216.173.101:31626] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeo0FL6vRb9j6psK2ZbLeQAAAhU"]
[Thu Apr 23 23:00:38.268600 2026] [:error] [pid 64998:tid 65024] [client 20.216.173.101:18871] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeo0FoV5EysYcTLjmwirHgAAAdY"]
[Thu Apr 23 23:00:43.048215 2026] [:error] [pid 42972:tid 43023] [client 20.216.173.101:41489] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aeo0G8OAb-3sOknsk4dg7AAAAEc"]
[Thu Apr 23 23:00:44.680748 2026] [:error] [pid 65000:tid 65046] [client 20.216.173.101:62689] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acp.php"] [unique_id "aeo0HL6vRb9j6psK2ZbLogAAAg0"]
[Thu Apr 23 23:01:02.778337 2026] [:error] [pid 65000:tid 65038] [client 20.216.173.101:54152] [client 20.216.173.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aeo0Lr6vRb9j6psK2ZbL9AAAAgU"]
[Thu Apr 23 23:01:09.342872 2026] [:error] [pid 46953:tid 46964] [client 20.216.173.101:33904] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeo0NUnlpdHh-P6wKbpLYQAAAkg"]
[Thu Apr 23 23:01:11.304157 2026] [:error] [pid 42971:tid 42995] [client 20.216.173.101:25995] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeo0NzEP2_5RswrH8bE2YQAAAAk"]
[Thu Apr 23 23:01:22.157605 2026] [:error] [pid 46953:tid 46980] [client 20.216.173.101:40921] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeo0QknlpdHh-P6wKbpLcAAAAlc"]
[Thu Apr 23 23:01:24.241737 2026] [:error] [pid 64998:tid 65012] [client 20.216.173.101:25415] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aeo0RIV5EysYcTLjmwiriwAAAco"]
[Thu Apr 23 23:01:29.195976 2026] [:error] [pid 64998:tid 65019] [client 20.216.173.101:4225] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeo0SYV5EysYcTLjmwirmwAAAdE"]
[Thu Apr 23 23:01:34.450421 2026] [:error] [pid 42971:tid 42995] [client 20.216.173.101:56371] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aeo0TjEP2_5RswrH8bE2awAAAAk"]
[Thu Apr 23 23:01:38.332734 2026] [:error] [pid 64998:tid 65022] [client 8.229.166.217:36310] [client 8.229.166.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aeo0UoV5EysYcTLjmwirswAAAdQ"]
[Thu Apr 23 23:01:44.714553 2026] [:error] [pid 42973:tid 43045] [client 20.216.173.101:61470] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeo0WG6I0QqmmmLTHE03rAAAAII"]
[Thu Apr 23 23:01:48.947374 2026] [:error] [pid 64967:tid 64987] [client 20.216.173.101:15772] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeo0XIAV4GfOOdX8QzqAbgAAAZI"]
[Thu Apr 23 23:01:50.078117 2026] [:error] [pid 64967:tid 64989] [client 20.216.173.101:34462] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeo0XoAV4GfOOdX8QzqAcQAAAZQ"]
[Thu Apr 23 23:01:52.709332 2026] [:error] [pid 65000:tid 65047] [client 20.216.173.101:31707] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aeo0YL6vRb9j6psK2ZbMXQAAAg4"]
[Thu Apr 23 23:01:54.658534 2026] [:error] [pid 42972:tid 43040] [client 20.216.173.101:37114] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeo0YsOAb-3sOknsk4dhUAAAAFg"]
[Thu Apr 23 23:02:00.761154 2026] [:error] [pid 42973:tid 43058] [client 20.216.173.101:15111] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeo0aG6I0QqmmmLTHE03yQAAAI8"]
[Thu Apr 23 23:02:03.602734 2026] [:error] [pid 59700:tid 59709] [client 20.216.173.101:60131] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeo0a5XyGZJFeAIDWtk9OwAAAUc"]
[Thu Apr 23 23:02:06.294388 2026] [:error] [pid 42972:tid 43017] [client 20.216.173.101:23447] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aeo0bsOAb-3sOknsk4dhYgAAAEE"]
[Thu Apr 23 23:02:24.446367 2026] [:error] [pid 42973:tid 43049] [client 20.216.173.101:20414] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo0gG6I0QqmmmLTHE036gAAAIY"]
[Thu Apr 23 23:02:28.502192 2026] [:error] [pid 42973:tid 43064] [client 20.216.173.101:42030] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo0hG6I0QqmmmLTHE037gAAAJU"]
[Thu Apr 23 23:02:33.964293 2026] [:error] [pid 64967:tid 64993] [client 20.216.173.101:58436] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo0iYAV4GfOOdX8QzqAigAAAZg"]
[Thu Apr 23 23:02:43.277506 2026] [:error] [pid 46953:tid 46956] [client 20.216.173.101:52724] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aeo0k0nlpdHh-P6wKbpLlwAAAkA"]
[Thu Apr 23 23:02:45.984139 2026] [:error] [pid 65000:tid 65047] [client 20.216.173.101:16424] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aeo0lb6vRb9j6psK2ZbNFAAAAg4"]
[Thu Apr 23 23:02:48.140315 2026] [:error] [pid 65000:tid 65054] [client 20.216.173.101:18860] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aeo0mL6vRb9j6psK2ZbNIAAAAhU"]
[Thu Apr 23 23:02:50.358755 2026] [:error] [pid 64998:tid 65007] [client 20.216.173.101:17706] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aeo0moV5EysYcTLjmwir8QAAAcU"]
[Thu Apr 23 23:03:01.558442 2026] [:error] [pid 65000:tid 65043] [client 20.216.173.101:63536] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aeo0pb6vRb9j6psK2ZbNMgAAAgo"]
[Thu Apr 23 23:03:04.276188 2026] [:error] [pid 65000:tid 65029] [client 20.216.173.101:23039] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aeo0qL6vRb9j6psK2ZbNPwAAAgA"]
[Thu Apr 23 23:03:07.452743 2026] [:error] [pid 59700:tid 59716] [client 20.216.173.101:53028] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeo0q5XyGZJFeAIDWtk9lQAAAU4"]
[Thu Apr 23 23:03:11.363093 2026] [:error] [pid 42973:tid 43056] [client 20.216.173.101:56415] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeo0r26I0QqmmmLTHE04FgAAAI0"]
[Thu Apr 23 23:03:15.541267 2026] [:error] [pid 65000:tid 65041] [client 20.216.173.101:42660] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeo0s76vRb9j6psK2ZbNWAAAAgg"]
[Thu Apr 23 23:03:20.027565 2026] [:error] [pid 42973:tid 43063] [client 20.216.173.101:53006] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aeo0uG6I0QqmmmLTHE04HQAAAJQ"]
[Thu Apr 23 23:03:21.815575 2026] [:error] [pid 46953:tid 46965] [client 20.216.173.101:58379] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aeo0uUnlpdHh-P6wKbpLoQAAAkk"]
[Thu Apr 23 23:03:31.241954 2026] [:error] [pid 42971:tid 43001] [client 20.216.173.101:45071] [client 20.216.173.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeo0wzEP2_5RswrH8bE3AAAAAA8"]
[Thu Apr 23 23:03:38.195628 2026] [:error] [pid 65000:tid 65054] [client 20.216.173.101:63870] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeo0yr6vRb9j6psK2ZbNgQAAAhU"]
[Thu Apr 23 23:03:39.023754 2026] [:error] [pid 64998:tid 65025] [client 20.216.173.101:33811] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeo0y4V5EysYcTLjmwisJgAAAdc"]
[Thu Apr 23 23:03:41.297446 2026] [:error] [pid 64967:tid 64981] [client 20.216.173.101:58394] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeo0zYAV4GfOOdX8QzqAnQAAAYw"]
[Thu Apr 23 23:03:42.749590 2026] [:error] [pid 42972:tid 43022] [client 20.216.173.101:33833] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error_log.php"] [unique_id "aeo0zsOAb-3sOknsk4diCQAAAEY"]
[Thu Apr 23 23:03:44.570389 2026] [:error] [pid 65000:tid 65032] [client 20.216.173.101:43847] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mifta.php"] [unique_id "aeo00L6vRb9j6psK2ZbNmQAAAgM"]
[Thu Apr 23 23:03:49.538165 2026] [:error] [pid 25635:tid 25655] [client 20.216.173.101:45097] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mifta.php"] [unique_id "aeo01cRxv6UsgRGKB3I8uAAAARA"]
[Thu Apr 23 23:03:54.725924 2026] [:error] [pid 65000:tid 65041] [client 20.216.173.101:54672] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mifta.php"] [unique_id "aeo02r6vRb9j6psK2ZbNxQAAAgg"]
[Thu Apr 23 23:04:05.262503 2026] [:error] [pid 42973:tid 43061] [client 20.216.173.101:62613] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "aeo05W6I0QqmmmLTHE04QgAAAJI"]
[Thu Apr 23 23:04:12.084275 2026] [:error] [pid 64998:tid 65020] [client 20.216.173.101:37588] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws57.php"] [unique_id "aeo07IV5EysYcTLjmwisiwAAAdI"]
[Thu Apr 23 23:04:13.888105 2026] [:error] [pid 25635:tid 25659] [client 20.216.173.101:55467] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeo07cRxv6UsgRGKB3I8vAAAARQ"]
[Thu Apr 23 23:04:15.729276 2026] [:error] [pid 42972:tid 43038] [client 20.216.173.101:35118] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeo078OAb-3sOknsk4diLgAAAFY"]
[Thu Apr 23 23:04:17.224413 2026] [:error] [pid 43083:tid 43089] [client 20.216.173.101:35128] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeo08TC5hrvNXosL83KISwAAAMQ"]
[Thu Apr 23 23:04:23.163245 2026] [:error] [pid 42973:tid 43064] [client 20.216.173.101:35081] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aeo0926I0QqmmmLTHE04WgAAAJU"]
[Thu Apr 23 23:04:29.697750 2026] [:error] [pid 42971:tid 43002] [client 20.216.173.101:4766] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeo0_TEP2_5RswrH8bE3GQAAABA"]
[Thu Apr 23 23:04:33.414650 2026] [:error] [pid 65000:tid 65038] [client 20.216.173.101:38247] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeo1Ab6vRb9j6psK2ZbOaAAAAgU"]
[Thu Apr 23 23:04:36.961865 2026] [:error] [pid 59700:tid 59712] [client 20.216.173.101:50676] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aeo1BJXyGZJFeAIDWtk-YAAAAUo"]
[Thu Apr 23 23:04:55.751815 2026] [:error] [pid 65000:tid 65055] [client 20.216.173.101:64307] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeo1F76vRb9j6psK2ZbOtAAAAhY"]
[Thu Apr 23 23:05:00.976755 2026] [:error] [pid 65000:tid 65047] [client 20.216.173.101:38840] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeo1HL6vRb9j6psK2ZbOtwAAAg4"]
[Thu Apr 23 23:05:03.129179 2026] [:error] [pid 65000:tid 65040] [client 20.216.173.101:54252] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeo1H76vRb9j6psK2ZbOwAAAAgc"]
[Thu Apr 23 23:05:05.656218 2026] [:error] [pid 46953:tid 46971] [client 20.216.173.101:15217] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "aeo1IUnlpdHh-P6wKbpL0AAAAk8"]
[Thu Apr 23 23:05:07.732506 2026] [:error] [pid 65000:tid 65032] [client 20.216.173.101:38815] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gz.php"] [unique_id "aeo1I76vRb9j6psK2ZbO0wAAAgM"]
[Thu Apr 23 23:05:09.277398 2026] [:error] [pid 46953:tid 46979] [client 20.216.173.101:28508] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gz.php"] [unique_id "aeo1JUnlpdHh-P6wKbpL0wAAAlY"]
[Thu Apr 23 23:05:10.609872 2026] [:error] [pid 65000:tid 65057] [client 20.216.173.101:24082] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gz.php"] [unique_id "aeo1Jr6vRb9j6psK2ZbO5gAAAhg"]
[Thu Apr 23 23:05:12.631718 2026] [:error] [pid 65000:tid 65032] [client 20.216.173.101:38907] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gz.php"] [unique_id "aeo1KL6vRb9j6psK2ZbO9AAAAgM"]
[Thu Apr 23 23:05:15.241198 2026] [:error] [pid 43083:tid 43093] [client 20.216.173.101:4145] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeo1KzC5hrvNXosL83KIVwAAAMg"]
[Thu Apr 23 23:05:19.121730 2026] [:error] [pid 42971:tid 43002] [client 20.216.173.101:38911] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeo1LzEP2_5RswrH8bE3LAAAABA"]
[Thu Apr 23 23:05:21.933748 2026] [:error] [pid 59700:tid 59714] [client 20.216.173.101:15228] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeo1MZXyGZJFeAIDWtk-gQAAAUw"]
[Thu Apr 23 23:05:22.672947 2026] [:error] [pid 42971:tid 43007] [client 20.216.173.101:57919] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aeo1MjEP2_5RswrH8bE3LQAAABU"]
[Thu Apr 23 23:05:25.063437 2026] [:error] [pid 42973:tid 43065] [client 20.216.173.101:58880] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aeo1NW6I0QqmmmLTHE04mQAAAJY"]
[Thu Apr 23 23:05:27.405080 2026] [:error] [pid 64998:tid 65019] [client 20.216.173.101:57891] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aeo1N4V5EysYcTLjmwis3wAAAdE"]
[Thu Apr 23 23:05:34.392741 2026] [:error] [pid 42971:tid 42993] [client 20.216.173.101:24144] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aeo1PjEP2_5RswrH8bE3MgAAAAc"]
[Thu Apr 23 23:05:36.048501 2026] [:error] [pid 64967:tid 64989] [client 20.216.173.101:61585] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aeo1QIAV4GfOOdX8QzqAxQAAAZQ"]
[Thu Apr 23 23:05:40.181984 2026] [:error] [pid 65000:tid 65031] [client 20.216.173.101:22968] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aeo1RL6vRb9j6psK2ZbPIgAAAgI"]
[Thu Apr 23 23:05:43.865158 2026] [:error] [pid 59700:tid 59713] [client 20.216.173.101:24154] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aeo1R5XyGZJFeAIDWtk-kwAAAUs"]
[Thu Apr 23 23:05:48.425987 2026] [:error] [pid 42972:tid 43022] [client 20.216.173.101:61263] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aeo1TMOAb-3sOknsk4dilwAAAEY"]
[Thu Apr 23 23:05:50.293303 2026] [:error] [pid 64998:tid 65012] [client 20.216.173.101:24128] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aeo1ToV5EysYcTLjmwitCwAAAco"]
[Thu Apr 23 23:05:51.806142 2026] [:error] [pid 42973:tid 43061] [client 20.216.173.101:48454] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws68.php"] [unique_id "aeo1T26I0QqmmmLTHE04rAAAAJI"]
[Thu Apr 23 23:05:54.654720 2026] [:error] [pid 65000:tid 65032] [client 20.216.173.101:61308] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws68.php"] [unique_id "aeo1Ur6vRb9j6psK2ZbPOgAAAgM"]
[Thu Apr 23 23:43:17.872370 2026] [:error] [pid 59700:tid 59720] [client 173.239.218.47:31457] [client 173.239.218.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeo-FZXyGZJFeAIDWtlG6gAAAVI"]
[Thu Apr 23 23:43:44.540084 2026] [autoindex:error] [pid 42973:tid 43045] [client 173.239.218.54:28961] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 24 01:02:13.943380 2026] [:error] [pid 46953:tid 46981] [client 182.44.8.254:34193] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aepQlUnlpdHh-P6wKbpvuAAAAlg"]
[Fri Apr 24 01:27:38.000534 2026] [:error] [pid 64998:tid 65026] [client 64.233.209.204:50530] [client 64.233.209.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.233.209.204, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aepWiYV5EysYcTLjmwgkTQAAAdg"]
[Fri Apr 24 01:27:38.000887 2026] [:error] [pid 59700:tid 59705] [client 64.233.209.204:50528] [client 64.233.209.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.233.209.204, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aepWipXyGZJFeAIDWtlwnQAAAUM"]
[Fri Apr 24 01:30:45.340204 2026] [:error] [pid 42973:tid 43046] [client 51.12.86.92:32213] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aepXRW6I0QqmmmLTHE182AAAAIM"]
[Fri Apr 24 01:30:50.102901 2026] [:error] [pid 64998:tid 65016] [client 51.12.86.92:16665] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aepXSoV5EysYcTLjmwglkQAAAc4"]
[Fri Apr 24 01:30:54.533461 2026] [:error] [pid 59700:tid 59702] [client 51.12.86.92:32989] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aepXTpXyGZJFeAIDWtlyCgAAAUA"]
[Fri Apr 24 01:30:56.305286 2026] [:error] [pid 65000:tid 65044] [client 51.12.86.92:11664] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "aepXUL6vRb9j6psK2ZZo3QAAAgs"]
[Fri Apr 24 01:30:58.346553 2026] [:error] [pid 65000:tid 65050] [client 51.12.86.92:19887] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxcs.php"] [unique_id "aepXUr6vRb9j6psK2ZZo7gAAAhE"]
[Fri Apr 24 01:31:00.703793 2026] [:error] [pid 65000:tid 65049] [client 51.12.86.92:29250] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxcs.php"] [unique_id "aepXVL6vRb9j6psK2ZZpBwAAAhA"]
[Fri Apr 24 01:31:03.755491 2026] [:error] [pid 43083:tid 43091] [client 51.12.86.92:19879] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxcs.php"] [unique_id "aepXVzC5hrvNXosL83Kp6wAAAMY"]
[Fri Apr 24 01:31:07.394531 2026] [:error] [pid 65000:tid 65044] [client 51.12.86.92:11675] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zxcs.php"] [unique_id "aepXW76vRb9j6psK2ZZpNAAAAgs"]
[Fri Apr 24 01:31:09.986980 2026] [:error] [pid 59700:tid 59723] [client 51.12.86.92:29280] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s1.php"] [unique_id "aepXXZXyGZJFeAIDWtlyFgAAAVU"]
[Fri Apr 24 01:31:12.247030 2026] [:error] [pid 65000:tid 65041] [client 51.12.86.92:16505] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s1.php"] [unique_id "aepXYL6vRb9j6psK2ZZpUwAAAgg"]
[Fri Apr 24 01:31:14.499927 2026] [:error] [pid 46953:tid 46966] [client 51.12.86.92:31806] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s1.php"] [unique_id "aepXYknlpdHh-P6wKbp1nwAAAko"]
[Fri Apr 24 01:31:16.592123 2026] [:error] [pid 65000:tid 65040] [client 51.12.86.92:18429] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s1.php"] [unique_id "aepXZL6vRb9j6psK2ZZpbQAAAgc"]
[Fri Apr 24 01:31:17.787470 2026] [:error] [pid 64967:tid 64989] [client 51.12.86.92:19074] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kz.php"] [unique_id "aepXZYAV4GfOOdX8QzqWzQAAAZQ"]
[Fri Apr 24 01:31:22.183617 2026] [:error] [pid 64998:tid 65006] [client 51.12.86.92:13292] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kz.php"] [unique_id "aepXaoV5EysYcTLjmwgmQwAAAcQ"]
[Fri Apr 24 01:31:30.846040 2026] [:error] [pid 59700:tid 59703] [client 51.12.86.92:14400] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kz.php"] [unique_id "aepXcpXyGZJFeAIDWtlyKwAAAUE"]
[Fri Apr 24 01:31:35.190558 2026] [:error] [pid 43083:tid 43092] [client 51.12.86.92:7127] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aepXdzC5hrvNXosL83KqBAAAAMc"]
[Fri Apr 24 01:31:41.995840 2026] [:error] [pid 65000:tid 65057] [client 51.12.86.92:12677] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aepXfb6vRb9j6psK2ZZp0QAAAhg"]
[Fri Apr 24 01:32:03.428474 2026] [:error] [pid 65000:tid 65041] [client 51.12.86.92:37411] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aepXk76vRb9j6psK2ZZqkAAAAgg"]
[Fri Apr 24 01:32:06.995977 2026] [:error] [pid 43083:tid 43101] [client 51.12.86.92:11559] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aepXljC5hrvNXosL83KqFwAAANA"]
[Fri Apr 24 01:32:10.604091 2026] [:error] [pid 65000:tid 65046] [client 51.12.86.92:20670] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aepXmr6vRb9j6psK2ZZq1gAAAg0"]
[Fri Apr 24 01:32:12.324460 2026] [:error] [pid 64967:tid 64987] [client 51.12.86.92:13019] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aepXnIAV4GfOOdX8QzqW6AAAAZI"]
[Fri Apr 24 01:32:14.939428 2026] [:error] [pid 59700:tid 59715] [client 51.12.86.92:6718] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aepXnpXyGZJFeAIDWtlyUQAAAU0"]
[Fri Apr 24 01:32:17.666718 2026] [:error] [pid 42972:tid 43031] [client 51.12.86.92:56781] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aepXocOAb-3sOknsk4e56wAAAE8"]
[Fri Apr 24 01:32:21.558962 2026] [:error] [pid 64998:tid 65012] [client 51.12.86.92:21072] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aepXpYV5EysYcTLjmwgm4AAAAco"]
[Fri Apr 24 01:32:23.371670 2026] [:error] [pid 42972:tid 43021] [client 51.12.86.92:23939] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aepXp8OAb-3sOknsk4e6AwAAAEU"]
[Fri Apr 24 01:32:25.676566 2026] [:error] [pid 42973:tid 43050] [client 51.12.86.92:15150] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wps.php"] [unique_id "aepXqW6I0QqmmmLTHE19awAAAIc"]
[Fri Apr 24 01:32:41.649766 2026] [:error] [pid 65000:tid 65051] [client 51.12.86.92:18809] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aepXub6vRb9j6psK2ZZrVwAAAhI"]
[Fri Apr 24 01:32:49.186469 2026] [:error] [pid 65000:tid 65056] [client 51.12.86.92:10492] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aepXwb6vRb9j6psK2ZZrhQAAAhc"]
[Fri Apr 24 01:32:52.253548 2026] [:error] [pid 59700:tid 59711] [client 51.12.86.92:24569] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "aepXxJXyGZJFeAIDWtlyqQAAAUk"]
[Fri Apr 24 01:32:56.618701 2026] [:error] [pid 46953:tid 46981] [client 51.12.86.92:12818] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aepXyEnlpdHh-P6wKbp2KQAAAlg"]
[Fri Apr 24 01:32:58.184634 2026] [:error] [pid 59700:tid 59716] [client 51.12.86.92:12093] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aepXypXyGZJFeAIDWtlyrwAAAU4"]
[Fri Apr 24 01:33:00.342485 2026] [:error] [pid 59700:tid 59705] [client 51.12.86.92:22221] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/12.php"] [unique_id "aepXzJXyGZJFeAIDWtlyuQAAAUM"]
[Fri Apr 24 01:33:14.095159 2026] [:error] [pid 59700:tid 59709] [client 51.12.86.92:20268] [client 51.12.86.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "aepX2pXyGZJFeAIDWtlyygAAAUc"]
[Fri Apr 24 01:33:20.939357 2026] [:error] [pid 64998:tid 65010] [client 51.12.86.92:11302] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "aepX4IV5EysYcTLjmwgnxQAAAcg"]
[Fri Apr 24 01:33:22.369716 2026] [:error] [pid 42971:tid 43005] [client 51.12.86.92:6787] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "aepX4jEP2_5RswrH8bFPJgAAABM"]
[Fri Apr 24 01:33:24.509111 2026] [:error] [pid 65000:tid 65037] [client 51.12.86.92:24001] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "aepX5L6vRb9j6psK2ZZr7gAAAgQ"]
[Fri Apr 24 01:33:27.035787 2026] [:error] [pid 65000:tid 65038] [client 51.12.86.92:16759] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/roksad1.php"] [unique_id "aepX576vRb9j6psK2ZZsBAAAAgU"]
[Fri Apr 24 01:33:29.234445 2026] [:error] [pid 42973:tid 43044] [client 51.12.86.92:31864] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aepX6W6I0QqmmmLTHE19nQAAAIE"]
[Fri Apr 24 01:33:31.996637 2026] [:error] [pid 42972:tid 43025] [client 51.12.86.92:33911] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aepX68OAb-3sOknsk4e6wAAAAEk"]
[Fri Apr 24 01:33:34.693094 2026] [:error] [pid 65000:tid 65042] [client 51.12.86.92:15374] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aepX7r6vRb9j6psK2ZZsJgAAAgk"]
[Fri Apr 24 01:33:37.771211 2026] [:error] [pid 42973:tid 43052] [client 51.12.86.92:41909] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aepX8W6I0QqmmmLTHE19tQAAAIk"]
[Fri Apr 24 01:33:39.161175 2026] [:error] [pid 59700:tid 59713] [client 51.12.86.92:15435] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aepX85XyGZJFeAIDWtly3AAAAUs"]
[Fri Apr 24 01:33:41.679102 2026] [:error] [pid 64998:tid 65008] [client 51.12.86.92:17407] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aepX9YV5EysYcTLjmwgn6AAAAcY"]
[Fri Apr 24 01:33:43.896270 2026] [:error] [pid 64998:tid 65007] [client 51.12.86.92:23078] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aepX94V5EysYcTLjmwgn9AAAAcU"]
[Fri Apr 24 01:33:46.773177 2026] [:error] [pid 65000:tid 65046] [client 51.12.86.92:27256] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.php"] [unique_id "aepX-r6vRb9j6psK2ZZsWAAAAg0"]
[Fri Apr 24 01:33:53.205332 2026] [:error] [pid 59700:tid 59725] [client 51.12.86.92:11967] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aepYAZXyGZJFeAIDWtly8gAAAVc"]
[Fri Apr 24 01:33:53.895790 2026] [:error] [pid 42972:tid 43037] [client 51.12.86.92:34783] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aepYAcOAb-3sOknsk4e64gAAAFU"]
[Fri Apr 24 01:33:57.227765 2026] [:error] [pid 42972:tid 43029] [client 51.12.86.92:28247] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aepYBcOAb-3sOknsk4e6-QAAAE0"]
[Fri Apr 24 01:34:00.462805 2026] [:error] [pid 64998:tid 65019] [client 51.12.86.92:25004] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "aepYCIV5EysYcTLjmwgoGQAAAdE"]
[Fri Apr 24 01:34:02.958451 2026] [:error] [pid 65000:tid 65053] [client 51.12.86.92:37862] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aepYCr6vRb9j6psK2ZZswQAAAhQ"]
[Fri Apr 24 01:34:05.014974 2026] [:error] [pid 64967:tid 64993] [client 51.12.86.92:13132] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aepYDYAV4GfOOdX8QzqXIQAAAZg"]
[Fri Apr 24 01:34:06.465612 2026] [:error] [pid 64998:tid 65006] [client 51.12.86.92:27686] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aepYDoV5EysYcTLjmwgoKQAAAcQ"]
[Fri Apr 24 01:34:07.234166 2026] [:error] [pid 64998:tid 65021] [client 51.12.86.92:35929] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aepYD4V5EysYcTLjmwgoMAAAAdM"]
[Fri Apr 24 01:34:08.006450 2026] [:error] [pid 65000:tid 65046] [client 51.12.86.92:37825] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aepYEL6vRb9j6psK2ZZs_wAAAg0"]
[Fri Apr 24 01:34:10.861483 2026] [:error] [pid 42973:tid 43062] [client 51.12.86.92:23059] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aepYEm6I0QqmmmLTHE1-QgAAAJM"]
[Fri Apr 24 01:34:12.167088 2026] [:error] [pid 42973:tid 43050] [client 51.12.86.92:17015] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aepYFG6I0QqmmmLTHE1-RwAAAIc"]
[Fri Apr 24 01:34:14.316524 2026] [:error] [pid 42972:tid 43033] [client 51.12.86.92:35904] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aepYFsOAb-3sOknsk4e7IAAAAFE"]
[Fri Apr 24 01:34:16.590361 2026] [:error] [pid 65000:tid 65032] [client 51.12.86.92:14353] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "aepYGL6vRb9j6psK2ZZtXwAAAgM"]
[Fri Apr 24 01:34:30.053454 2026] [:error] [pid 59700:tid 59709] [client 51.12.86.92:34211] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aepYJpXyGZJFeAIDWtlzHAAAAUc"]
[Fri Apr 24 01:34:35.782296 2026] [:error] [pid 42973:tid 43062] [client 51.12.86.92:13149] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aepYK26I0QqmmmLTHE1-cAAAAJM"]
[Fri Apr 24 01:34:37.395171 2026] [:error] [pid 65000:tid 65048] [client 51.12.86.92:11912] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aepYLb6vRb9j6psK2ZZuNQAAAg8"]
[Fri Apr 24 01:34:38.336935 2026] [:error] [pid 65000:tid 65041] [client 51.12.86.92:37855] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/view.php"] [unique_id "aepYLr6vRb9j6psK2ZZuQAAAAgg"]
[Fri Apr 24 01:34:39.617162 2026] [:error] [pid 42972:tid 43037] [client 51.12.86.92:25020] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aepYL8OAb-3sOknsk4e7RwAAAFU"]
[Fri Apr 24 01:34:41.474972 2026] [:error] [pid 59700:tid 59714] [client 51.12.86.92:35912] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aepYMZXyGZJFeAIDWtlzJAAAAUw"]
[Fri Apr 24 01:34:43.256647 2026] [:error] [pid 42972:tid 43039] [client 51.12.86.92:27694] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aepYM8OAb-3sOknsk4e7TQAAAFc"]
[Fri Apr 24 01:34:45.655453 2026] [:error] [pid 42972:tid 43025] [client 51.12.86.92:17007] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aepYNcOAb-3sOknsk4e7UAAAAEk"]
[Fri Apr 24 01:34:48.710776 2026] [:error] [pid 42973:tid 43062] [client 51.12.86.92:29218] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aepYOG6I0QqmmmLTHE1-iAAAAJM"]
[Fri Apr 24 01:34:50.937941 2026] [:error] [pid 59700:tid 59703] [client 51.12.86.92:29230] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aepYOpXyGZJFeAIDWtlzLwAAAUE"]
[Fri Apr 24 01:34:53.596598 2026] [:error] [pid 65000:tid 65048] [client 51.12.86.92:24465] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aepYPb6vRb9j6psK2ZZuswAAAg8"]
[Fri Apr 24 01:34:56.730144 2026] [:error] [pid 42972:tid 43018] [client 51.12.86.92:18734] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "aepYQMOAb-3sOknsk4e7egAAAEI"]
[Fri Apr 24 01:35:00.723719 2026] [:error] [pid 43083:tid 43102] [client 51.12.86.92:13221] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aepYRDC5hrvNXosL83KqbwAAANE"]
[Fri Apr 24 01:35:03.445972 2026] [:error] [pid 59700:tid 59722] [client 51.12.86.92:11363] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aepYR5XyGZJFeAIDWtlzMgAAAVQ"]
[Fri Apr 24 01:35:04.993381 2026] [:error] [pid 64998:tid 65020] [client 51.12.86.92:37846] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aepYSIV5EysYcTLjmwgoxQAAAdI"]
[Fri Apr 24 01:35:07.322637 2026] [:error] [pid 64998:tid 65009] [client 51.12.86.92:27695] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/doc.php"] [unique_id "aepYS4V5EysYcTLjmwgozAAAAcc"]
[Fri Apr 24 01:35:09.246884 2026] [:error] [pid 42972:tid 43029] [client 51.12.86.92:13085] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "aepYTcOAb-3sOknsk4e7uAAAAE0"]
[Fri Apr 24 01:35:12.341198 2026] [:error] [pid 64998:tid 65022] [client 51.12.86.92:13189] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "aepYUIV5EysYcTLjmwgo4AAAAdQ"]
[Fri Apr 24 01:35:13.659018 2026] [:error] [pid 65000:tid 65048] [client 51.12.86.92:27648] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "aepYUb6vRb9j6psK2ZZu7wAAAg8"]
[Fri Apr 24 01:35:17.039350 2026] [:error] [pid 59700:tid 59708] [client 51.12.86.92:7056] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "aepYVZXyGZJFeAIDWtlzQQAAAUY"]
[Fri Apr 24 01:35:20.591155 2026] [:error] [pid 59700:tid 59724] [client 51.12.86.92:29216] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aepYWJXyGZJFeAIDWtlzRAAAAVY"]
[Fri Apr 24 01:35:23.473635 2026] [:error] [pid 43083:tid 43093] [client 51.12.86.92:13172] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aepYWzC5hrvNXosL83KqnwAAAMg"]
[Fri Apr 24 01:35:26.291815 2026] [:error] [pid 42973:tid 43049] [client 51.12.86.92:29247] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "aepYXm6I0QqmmmLTHE1-tQAAAIY"]
[Fri Apr 24 01:35:34.208052 2026] [:error] [pid 65000:tid 65052] [client 51.12.86.92:7072] [client 51.12.86.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aepYZr6vRb9j6psK2ZZvRgAAAhM"]
[Fri Apr 24 01:35:43.542555 2026] [:error] [pid 42972:tid 43027] [client 51.12.86.92:12120] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aepYb8OAb-3sOknsk4e8RQAAAEs"]
[Fri Apr 24 01:35:49.872715 2026] [:error] [pid 64967:tid 64975] [client 51.12.86.92:31747] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aepYdYAV4GfOOdX8QzqXSAAAAYY"]
[Fri Apr 24 01:35:52.395457 2026] [:error] [pid 42972:tid 43028] [client 51.12.86.92:34270] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aepYeMOAb-3sOknsk4e8YAAAAEw"]
[Fri Apr 24 01:35:55.130160 2026] [:error] [pid 64998:tid 65013] [client 51.12.86.92:13514] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws86.php"] [unique_id "aepYe4V5EysYcTLjmwgpswAAAcs"]
[Fri Apr 24 01:35:57.052424 2026] [:error] [pid 64998:tid 65007] [client 51.12.86.92:37441] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aepYfYV5EysYcTLjmwgpwAAAAcU"]
[Fri Apr 24 01:35:57.924639 2026] [:error] [pid 65000:tid 65049] [client 51.12.86.92:31776] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aepYfb6vRb9j6psK2ZZwDgAAAhA"]
[Fri Apr 24 01:35:59.734477 2026] [:error] [pid 64998:tid 65022] [client 51.12.86.92:37440] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aepYf4V5EysYcTLjmwgpywAAAdQ"]
[Fri Apr 24 01:36:03.793856 2026] [:error] [pid 42973:tid 43057] [client 51.12.86.92:31758] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aepYg26I0QqmmmLTHE1_CQAAAI4"]
[Fri Apr 24 01:36:06.011646 2026] [:error] [pid 59700:tid 59723] [client 51.12.86.92:23144] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "aepYhpXyGZJFeAIDWtlzbwAAAVU"]
[Fri Apr 24 01:36:09.663576 2026] [:error] [pid 42972:tid 43022] [client 51.12.86.92:35376] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "aepYicOAb-3sOknsk4e8gQAAAEY"]
[Fri Apr 24 01:36:15.750922 2026] [:error] [pid 64998:tid 65009] [client 51.12.86.92:7006] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "aepYj4V5EysYcTLjmwgp9wAAAcc"]
[Fri Apr 24 01:36:20.680133 2026] [:error] [pid 42972:tid 43037] [client 51.12.86.92:35343] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "aepYlMOAb-3sOknsk4e8yQAAAFU"]
[Fri Apr 24 01:36:31.202771 2026] [:error] [pid 42972:tid 43024] [client 51.12.86.92:20270] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xs.php"] [unique_id "aepYn8OAb-3sOknsk4e9EQAAAEg"]
[Fri Apr 24 01:36:42.537780 2026] [:error] [pid 46953:tid 46967] [client 51.12.86.92:16650] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "aepYqknlpdHh-P6wKbp3IQAAAks"]
[Fri Apr 24 01:36:55.927738 2026] [:error] [pid 65000:tid 65051] [client 51.12.86.92:16905] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aepYt76vRb9j6psK2ZZxVgAAAhI"]
[Fri Apr 24 01:36:59.611458 2026] [:error] [pid 43083:tid 43100] [client 51.12.86.92:36702] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aepYuzC5hrvNXosL83Kq6AAAAM8"]
[Fri Apr 24 01:37:04.748554 2026] [:error] [pid 65000:tid 65032] [client 51.12.86.92:34739] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aepYwL6vRb9j6psK2ZZxXQAAAgM"]
[Fri Apr 24 01:37:07.630039 2026] [:error] [pid 42972:tid 43034] [client 51.12.86.92:19558] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aepYw8OAb-3sOknsk4e9MwAAAFI"]
[Fri Apr 24 01:37:09.806434 2026] [:error] [pid 64967:tid 64984] [client 51.12.86.92:56868] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aepYxYAV4GfOOdX8QzqXlQAAAY8"]
[Fri Apr 24 01:37:13.154500 2026] [:error] [pid 65000:tid 65052] [client 51.12.86.92:30766] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aepYyb6vRb9j6psK2ZZxeQAAAhM"]
[Fri Apr 24 01:37:16.938836 2026] [:error] [pid 42972:tid 43029] [client 51.12.86.92:14175] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aepYzMOAb-3sOknsk4e9WQAAAE0"]
[Fri Apr 24 01:37:20.668346 2026] [:error] [pid 42971:tid 43008] [client 51.12.86.92:30261] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gecko.php"] [unique_id "aepY0DEP2_5RswrH8bFPnwAAABY"]
[Fri Apr 24 01:37:23.413174 2026] [:error] [pid 46953:tid 46976] [client 51.12.86.92:32201] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aepY00nlpdHh-P6wKbp3LQAAAlQ"]
[Fri Apr 24 01:37:25.510811 2026] [:error] [pid 25635:tid 25661] [client 51.12.86.92:19551] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aepY1cRxv6UsgRGKB3JP7QAAARY"]
[Fri Apr 24 01:37:28.035116 2026] [:error] [pid 65000:tid 65029] [client 51.12.86.92:32243] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aepY2L6vRb9j6psK2ZZxrgAAAgA"]
[Fri Apr 24 01:37:31.262196 2026] [:error] [pid 42971:tid 43003] [client 51.12.86.92:11717] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "aepY2zEP2_5RswrH8bFPpAAAABE"]
[Fri Apr 24 01:37:38.114420 2026] [:error] [pid 42973:tid 43049] [client 51.12.86.92:29257] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws68.php"] [unique_id "aepY4m6I0QqmmmLTHE1_dAAAAIY"]
[Fri Apr 24 01:37:40.085764 2026] [:error] [pid 64967:tid 64981] [client 51.12.86.92:11732] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws68.php"] [unique_id "aepY5IAV4GfOOdX8QzqXmwAAAYw"]
[Fri Apr 24 01:37:40.883976 2026] [:error] [pid 64998:tid 65002] [client 51.12.86.92:16187] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws68.php"] [unique_id "aepY5IV5EysYcTLjmwgrkgAAAcA"]
[Fri Apr 24 01:37:42.118196 2026] [:error] [pid 43083:tid 43096] [client 51.12.86.92:29284] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws68.php"] [unique_id "aepY5jC5hrvNXosL83KrWgAAAMs"]
[Fri Apr 24 01:37:42.976683 2026] [:error] [pid 65000:tid 65030] [client 51.12.86.92:14961] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aepY5r6vRb9j6psK2ZZx4QAAAgE"]
[Fri Apr 24 01:37:43.999013 2026] [:error] [pid 42973:tid 43043] [client 51.12.86.92:10427] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aepY526I0QqmmmLTHE1_gQAAAIA"]
[Fri Apr 24 01:37:45.430456 2026] [:error] [pid 64998:tid 65012] [client 51.12.86.92:6537] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aepY6YV5EysYcTLjmwgrqgAAAco"]
[Fri Apr 24 01:37:46.568737 2026] [:error] [pid 42972:tid 43025] [client 51.12.86.92:14147] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pp.php"] [unique_id "aepY6sOAb-3sOknsk4e9fgAAAEk"]
[Fri Apr 24 01:37:47.809251 2026] [:error] [pid 46953:tid 46963] [client 51.12.86.92:13377] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aepY60nlpdHh-P6wKbp3VgAAAkc"]
[Fri Apr 24 01:37:49.778408 2026] [:error] [pid 43083:tid 43091] [client 51.12.86.92:18388] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aepY7TC5hrvNXosL83KraAAAAMY"]
[Fri Apr 24 01:37:52.914481 2026] [:error] [pid 42973:tid 43055] [client 51.12.86.92:14159] [client 51.12.86.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aepY8G6I0QqmmmLTHE1_igAAAIw"]
[Fri Apr 24 02:04:11.554302 2026] [:error] [pid 65000:tid 65056] [client 49.51.36.179:55954] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aepfG76vRb9j6psK2ZaEzQAAAhc"]
[Fri Apr 24 03:21:49.027535 2026] [:error] [pid 65000:tid 65043] [client 51.103.174.167:26741] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aepxTb6vRb9j6psK2Za3bQAAAgo"]
[Fri Apr 24 03:21:52.665787 2026] [:error] [pid 25635:tid 25645] [client 51.103.174.167:20065] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aepxUMRxv6UsgRGKB3JZhAAAAQY"]
[Fri Apr 24 03:21:54.678324 2026] [:error] [pid 42973:tid 43067] [client 51.103.174.167:14652] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aepxUm6I0QqmmmLTHE2a3AAAAJg"]
[Fri Apr 24 03:21:57.652205 2026] [:error] [pid 64967:tid 64985] [client 51.103.174.167:26725] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "aepxVYAV4GfOOdX8QzqkggAAAZA"]
[Fri Apr 24 03:22:00.842342 2026] [:error] [pid 64998:tid 65020] [client 51.103.174.167:20041] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepxWIV5EysYcTLjmwhfdgAAAdI"]
[Fri Apr 24 03:22:03.661309 2026] [:error] [pid 65000:tid 65054] [client 51.103.174.167:26746] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepxW76vRb9j6psK2Za3dAAAAhU"]
[Fri Apr 24 03:22:05.396527 2026] [:error] [pid 59700:tid 59716] [client 51.103.174.167:28354] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepxXZXyGZJFeAIDWtmKsAAAAU4"]
[Fri Apr 24 03:22:09.054075 2026] [:error] [pid 42972:tid 43031] [client 51.103.174.167:18969] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepxYcOAb-3sOknsk4fjJwAAAE8"]
[Fri Apr 24 03:22:11.391652 2026] [:error] [pid 42973:tid 43051] [client 51.103.174.167:1876] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aepxY26I0QqmmmLTHE2a-gAAAIg"]
[Fri Apr 24 03:22:13.245200 2026] [:error] [pid 59700:tid 59715] [client 51.103.174.167:1352] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aepxZZXyGZJFeAIDWtmKvgAAAU0"]
[Fri Apr 24 03:22:16.886692 2026] [:error] [pid 59700:tid 59714] [client 51.103.174.167:18987] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aepxaJXyGZJFeAIDWtmKyQAAAUw"]
[Fri Apr 24 03:22:19.803499 2026] [:error] [pid 64967:tid 64981] [client 51.103.174.167:24366] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "aepxa4AV4GfOOdX8QzqkiwAAAYw"]
[Fri Apr 24 03:22:21.018595 2026] [:error] [pid 65000:tid 65045] [client 51.103.174.167:1381] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepxbb6vRb9j6psK2Za3fwAAAgw"]
[Fri Apr 24 03:22:22.121595 2026] [:error] [pid 59700:tid 59726] [client 51.103.174.167:21455] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepxbpXyGZJFeAIDWtmK0QAAAVg"]
[Fri Apr 24 03:22:22.794185 2026] [:error] [pid 65000:tid 65040] [client 51.103.174.167:17970] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepxbr6vRb9j6psK2Za3hgAAAgc"]
[Fri Apr 24 03:22:24.271090 2026] [:error] [pid 64998:tid 65003] [client 51.103.174.167:1369] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepxcIV5EysYcTLjmwhfmwAAAcE"]
[Fri Apr 24 03:22:25.694003 2026] [:error] [pid 42972:tid 43027] [client 51.103.174.167:1889] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aepxccOAb-3sOknsk4fjKQAAAEs"]
[Fri Apr 24 03:22:27.383630 2026] [:error] [pid 64998:tid 65006] [client 51.103.174.167:1388] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aepxc4V5EysYcTLjmwhfqAAAAcQ"]
[Fri Apr 24 03:22:29.185425 2026] [:error] [pid 64998:tid 65025] [client 51.103.174.167:21465] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aepxdYV5EysYcTLjmwhfsAAAAdc"]
[Fri Apr 24 03:22:30.321430 2026] [:error] [pid 64998:tid 65013] [client 51.103.174.167:28373] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/as.php"] [unique_id "aepxdoV5EysYcTLjmwhfswAAAcs"]
[Fri Apr 24 03:22:31.716895 2026] [:error] [pid 65000:tid 65053] [client 51.103.174.167:28407] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aepxd76vRb9j6psK2Za3lQAAAhQ"]
[Fri Apr 24 03:22:33.764698 2026] [:error] [pid 64998:tid 65022] [client 51.103.174.167:33758] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aepxeYV5EysYcTLjmwhftwAAAdQ"]
[Fri Apr 24 03:22:36.050525 2026] [:error] [pid 42973:tid 43066] [client 51.103.174.167:26748] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aepxfG6I0QqmmmLTHE2bEAAAAJc"]
[Fri Apr 24 03:22:38.590489 2026] [:error] [pid 65000:tid 65043] [client 51.103.174.167:19059] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "aepxfr6vRb9j6psK2Za3mwAAAgo"]
[Fri Apr 24 03:22:41.128212 2026] [:error] [pid 42971:tid 42996] [client 51.103.174.167:1193] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aepxgTEP2_5RswrH8bFcTgAAAAo"]
[Fri Apr 24 03:22:44.238979 2026] [:error] [pid 64967:tid 64975] [client 51.103.174.167:28391] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aepxhIAV4GfOOdX8QzqkjwAAAYY"]
[Fri Apr 24 03:22:46.361334 2026] [:error] [pid 64998:tid 65016] [client 51.103.174.167:1400] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aepxhoV5EysYcTLjmwhfxwAAAc4"]
[Fri Apr 24 03:22:47.366103 2026] [:error] [pid 64998:tid 65005] [client 51.103.174.167:18956] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/lb.php"] [unique_id "aepxh4V5EysYcTLjmwhfzAAAAcM"]
[Fri Apr 24 03:22:57.119651 2026] [:error] [pid 64967:tid 64991] [client 51.103.174.167:1379] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "aepxkYAV4GfOOdX8QzqkpgAAAZY"]
[Fri Apr 24 03:22:59.123475 2026] [:error] [pid 42973:tid 43058] [client 51.103.174.167:33737] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "aepxk26I0QqmmmLTHE2bLgAAAI8"]
[Fri Apr 24 03:23:01.875132 2026] [:error] [pid 59700:tid 59712] [client 51.103.174.167:19039] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "aepxlZXyGZJFeAIDWtmLEQAAAUo"]
[Fri Apr 24 03:23:04.235055 2026] [:error] [pid 42972:tid 43038] [client 51.103.174.167:33761] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "aepxmMOAb-3sOknsk4fjOQAAAFY"]
[Fri Apr 24 03:23:05.982376 2026] [:error] [pid 59700:tid 59708] [client 51.103.174.167:30395] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aepxmZXyGZJFeAIDWtmLEwAAAUY"]
[Fri Apr 24 03:23:07.420354 2026] [:error] [pid 46953:tid 46964] [client 51.103.174.167:24320] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aepxm0nlpdHh-P6wKbqKawAAAkg"]
[Fri Apr 24 03:23:08.374543 2026] [:error] [pid 42971:tid 42987] [client 51.103.174.167:24847] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aepxnDEP2_5RswrH8bFcVgAAAAE"]
[Fri Apr 24 03:23:10.248285 2026] [:error] [pid 59700:tid 59715] [client 51.103.174.167:1154] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aepxnpXyGZJFeAIDWtmLHwAAAU0"]
[Fri Apr 24 03:23:13.225832 2026] [:error] [pid 59700:tid 59704] [client 51.103.174.167:14399] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aepxoZXyGZJFeAIDWtmLIgAAAUI"]
[Fri Apr 24 03:23:19.611679 2026] [:error] [pid 59700:tid 59721] [client 51.103.174.167:14349] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aepxp5XyGZJFeAIDWtmLKgAAAVM"]
[Fri Apr 24 03:23:20.676120 2026] [:error] [pid 46953:tid 46958] [client 51.103.174.167:24883] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aepxqEnlpdHh-P6wKbqKdAAAAkI"]
[Fri Apr 24 03:23:21.887212 2026] [:error] [pid 42972:tid 43017] [client 51.103.174.167:1351] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "aepxqcOAb-3sOknsk4fjSgAAAEE"]
[Fri Apr 24 03:23:22.872712 2026] [:error] [pid 64998:tid 65010] [client 51.103.174.167:24868] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aepxqoV5EysYcTLjmwhgDgAAAcg"]
[Fri Apr 24 03:23:23.738882 2026] [:error] [pid 42971:tid 42997] [client 51.103.174.167:1346] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aepxqzEP2_5RswrH8bFcYwAAAAs"]
[Fri Apr 24 03:23:26.518071 2026] [:error] [pid 59700:tid 59724] [client 51.103.174.167:33755] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aepxrpXyGZJFeAIDWtmLLwAAAVY"]
[Fri Apr 24 03:23:28.490710 2026] [:error] [pid 65000:tid 65049] [client 51.103.174.167:26690] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "aepxsL6vRb9j6psK2Za4CAAAAhA"]
[Fri Apr 24 03:23:31.396806 2026] [:error] [pid 65000:tid 65049] [client 51.103.174.167:14387] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aepxs76vRb9j6psK2Za4GAAAAhA"]
[Fri Apr 24 03:23:32.637357 2026] [:error] [pid 65000:tid 65047] [client 51.103.174.167:19057] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aepxtL6vRb9j6psK2Za4HwAAAg4"]
[Fri Apr 24 03:23:33.421751 2026] [:error] [pid 64998:tid 65019] [client 51.103.174.167:1192] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aepxtYV5EysYcTLjmwhgFgAAAdE"]
[Fri Apr 24 03:23:33.993735 2026] [:error] [pid 64998:tid 65017] [client 51.103.174.167:30377] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "aepxtYV5EysYcTLjmwhgGgAAAc8"]
[Fri Apr 24 03:23:34.841701 2026] [:error] [pid 64998:tid 65005] [client 51.103.174.167:28401] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aepxtoV5EysYcTLjmwhgHwAAAcM"]
[Fri Apr 24 03:23:36.080507 2026] [:error] [pid 65000:tid 65050] [client 51.103.174.167:21445] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aepxuL6vRb9j6psK2Za4KwAAAhE"]
[Fri Apr 24 03:23:37.026646 2026] [:error] [pid 42971:tid 42986] [client 51.103.174.167:30344] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aepxuTEP2_5RswrH8bFcZQAAAAA"]
[Fri Apr 24 03:23:38.051216 2026] [:error] [pid 42973:tid 43054] [client 51.103.174.167:19064] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "aepxum6I0QqmmmLTHE2bSAAAAIs"]
[Fri Apr 24 03:23:40.587308 2026] [:error] [pid 46953:tid 46963] [client 51.103.174.167:19060] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aepxvEnlpdHh-P6wKbqKgAAAAkc"]
[Fri Apr 24 03:23:45.700889 2026] [:error] [pid 42973:tid 43064] [client 51.103.174.167:51062] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aepxwW6I0QqmmmLTHE2bVQAAAJU"]
[Fri Apr 24 03:23:48.466116 2026] [:error] [pid 43083:tid 43108] [client 51.103.174.167:33766] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aepxxDC5hrvNXosL83K7NQAAANc"]
[Fri Apr 24 03:23:51.321662 2026] [:error] [pid 65000:tid 65041] [client 51.103.174.167:24367] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/menu.php"] [unique_id "aepxx76vRb9j6psK2Za4PgAAAgg"]
[Fri Apr 24 03:23:54.881861 2026] [:error] [pid 43083:tid 43097] [client 51.103.174.167:24374] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aepxyjC5hrvNXosL83K7NwAAAMw"]
[Fri Apr 24 03:24:06.249553 2026] [:error] [pid 42972:tid 43030] [client 51.103.174.167:51071] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aepx1sOAb-3sOknsk4fj8AAAAE4"]
[Fri Apr 24 03:24:11.233383 2026] [:error] [pid 64998:tid 65014] [client 51.103.174.167:21457] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aepx24V5EysYcTLjmwhgYQAAAcw"]
[Fri Apr 24 03:24:15.592849 2026] [:error] [pid 65000:tid 65053] [client 51.103.174.167:24867] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aepx376vRb9j6psK2Za4sAAAAhQ"]
[Fri Apr 24 03:24:20.447918 2026] [:error] [pid 46953:tid 46978] [client 51.103.174.167:30392] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aepx5EnlpdHh-P6wKbqKmwAAAlU"]
[Fri Apr 24 03:24:22.548122 2026] [:error] [pid 46953:tid 46960] [client 51.103.174.167:19067] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aepx5knlpdHh-P6wKbqKoAAAAkQ"]
[Fri Apr 24 03:24:26.325498 2026] [:error] [pid 42973:tid 43049] [client 51.103.174.167:14377] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aepx6m6I0QqmmmLTHE2bhwAAAIY"]
[Fri Apr 24 03:24:27.880956 2026] [:error] [pid 43083:tid 43098] [client 51.103.174.167:19005] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aepx6zC5hrvNXosL83K7UgAAAM0"]
[Fri Apr 24 03:24:28.848569 2026] [:error] [pid 42973:tid 43055] [client 51.103.174.167:14364] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "aepx7G6I0QqmmmLTHE2biwAAAIw"]
[Fri Apr 24 03:24:29.852498 2026] [:error] [pid 64998:tid 65023] [client 51.103.174.167:24843] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a7.php"] [unique_id "aepx7YV5EysYcTLjmwhgewAAAdU"]
[Fri Apr 24 03:24:31.127759 2026] [:error] [pid 46953:tid 46970] [client 51.103.174.167:27731] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a7.php"] [unique_id "aepx70nlpdHh-P6wKbqKrAAAAk4"]
[Fri Apr 24 03:24:35.416509 2026] [:error] [pid 42972:tid 43031] [client 51.103.174.167:14385] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a7.php"] [unique_id "aepx88OAb-3sOknsk4fkCAAAAE8"]
[Fri Apr 24 03:24:36.760294 2026] [:error] [pid 42972:tid 43035] [client 51.103.174.167:14396] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a7.php"] [unique_id "aepx9MOAb-3sOknsk4fkDAAAAFM"]
[Fri Apr 24 03:24:37.836888 2026] [:error] [pid 64967:tid 64992] [client 51.103.174.167:21453] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aepx9YAV4GfOOdX8Qzqk4wAAAZc"]
[Fri Apr 24 03:24:39.410647 2026] [:error] [pid 65000:tid 65030] [client 51.103.174.167:28372] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aepx976vRb9j6psK2Za4xgAAAgE"]
[Fri Apr 24 03:24:43.369866 2026] [:error] [pid 65000:tid 65050] [client 51.103.174.167:25554] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aepx-76vRb9j6psK2Za45QAAAhE"]
[Fri Apr 24 03:24:44.459532 2026] [:error] [pid 64998:tid 65010] [client 51.103.174.167:19019] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "aepx_IV5EysYcTLjmwhgiwAAAcg"]
[Fri Apr 24 03:24:47.728116 2026] [:error] [pid 65000:tid 65045] [client 51.103.174.167:51049] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aepx_76vRb9j6psK2Za48gAAAgw"]
[Fri Apr 24 03:24:48.784893 2026] [:error] [pid 65000:tid 65032] [client 51.103.174.167:24891] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aepyAL6vRb9j6psK2Za4-gAAAgM"]
[Fri Apr 24 03:24:49.537314 2026] [:error] [pid 46953:tid 46957] [client 51.103.174.167:27735] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aepyAUnlpdHh-P6wKbqKxQAAAkE"]
[Fri Apr 24 03:24:50.568049 2026] [:error] [pid 59700:tid 59726] [client 51.103.174.167:27765] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "aepyApXyGZJFeAIDWtmLZQAAAVg"]
[Fri Apr 24 03:24:53.259772 2026] [:error] [pid 42971:tid 42997] [client 51.103.174.167:1403] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aepyBTEP2_5RswrH8bFcowAAAAs"]
[Fri Apr 24 03:24:54.652659 2026] [:error] [pid 42971:tid 42986] [client 51.103.174.167:30342] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aepyBjEP2_5RswrH8bFcqQAAAAA"]
[Fri Apr 24 03:24:55.779026 2026] [:error] [pid 64998:tid 65002] [client 51.103.174.167:25547] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aepyB4V5EysYcTLjmwhgkwAAAcA"]
[Fri Apr 24 03:24:56.762615 2026] [:error] [pid 65000:tid 65045] [client 51.103.174.167:19058] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "aepyCL6vRb9j6psK2Za5BwAAAgw"]
[Fri Apr 24 03:24:57.740844 2026] [:error] [pid 46953:tid 46968] [client 51.103.174.167:51039] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aepyCUnlpdHh-P6wKbqKzwAAAkw"]
[Fri Apr 24 03:24:59.229959 2026] [:error] [pid 65000:tid 65053] [client 51.103.174.167:14363] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aepyC76vRb9j6psK2Za5DAAAAhQ"]
[Fri Apr 24 03:25:00.475744 2026] [:error] [pid 43083:tid 43086] [client 51.103.174.167:33785] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aepyDDC5hrvNXosL83K7bwAAAME"]
[Fri Apr 24 03:25:01.813655 2026] [:error] [pid 42971:tid 43003] [client 51.103.174.167:30361] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "aepyDTEP2_5RswrH8bFcrgAAABE"]
[Fri Apr 24 03:25:02.931795 2026] [:error] [pid 25635:tid 25650] [client 51.103.174.167:1390] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file61.php"] [unique_id "aepyDsRxv6UsgRGKB3JZ8QAAAQs"]
[Fri Apr 24 03:25:03.879252 2026] [:error] [pid 65000:tid 65048] [client 51.103.174.167:27739] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/file61.php"] [unique_id "aepyD76vRb9j6psK2Za5IAAAAg8"]
[Fri Apr 24 03:25:14.537503 2026] [:error] [pid 25635:tid 25647] [client 51.103.174.167:14376] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "aepyGsRxv6UsgRGKB3JaAQAAAQg"]
[Fri Apr 24 03:25:17.221155 2026] [:error] [pid 59700:tid 59706] [client 51.103.174.167:1391] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "aepyHZXyGZJFeAIDWtmLdwAAAUQ"]
[Fri Apr 24 03:25:19.481607 2026] [:error] [pid 42972:tid 43032] [client 51.103.174.167:24871] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "aepyH8OAb-3sOknsk4fkRQAAAFA"]
[Fri Apr 24 03:25:21.672787 2026] [:error] [pid 65000:tid 65048] [client 51.103.174.167:30372] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "aepyIb6vRb9j6psK2Za5RgAAAg8"]
[Fri Apr 24 03:25:24.777214 2026] [:error] [pid 65000:tid 65031] [client 51.103.174.167:27772] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aepyJL6vRb9j6psK2Za5WAAAAgI"]
[Fri Apr 24 03:25:25.390585 2026] [:error] [pid 42973:tid 43067] [client 51.103.174.167:1385] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aepyJW6I0QqmmmLTHE2bpgAAAJg"]
[Fri Apr 24 03:25:26.759393 2026] [:error] [pid 59700:tid 59708] [client 51.103.174.167:24857] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aepyJpXyGZJFeAIDWtmLfAAAAUY"]
[Fri Apr 24 03:25:29.661674 2026] [:error] [pid 42973:tid 43049] [client 51.103.174.167:21469] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/motu.php"] [unique_id "aepyKW6I0QqmmmLTHE2bqQAAAIY"]
[Fri Apr 24 03:25:31.968295 2026] [:error] [pid 46953:tid 46960] [client 51.103.174.167:1371] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aepyK0nlpdHh-P6wKbqK8gAAAkQ"]
[Fri Apr 24 03:25:34.230556 2026] [:error] [pid 43083:tid 43093] [client 51.103.174.167:20053] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aepyLjC5hrvNXosL83K7fQAAAMg"]
[Fri Apr 24 03:25:35.563732 2026] [:error] [pid 65000:tid 65029] [client 51.103.174.167:20063] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aepyL76vRb9j6psK2Za5bgAAAgA"]
[Fri Apr 24 03:25:36.570153 2026] [:error] [pid 65000:tid 65049] [client 51.103.174.167:18808] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aepyML6vRb9j6psK2Za5cQAAAhA"]
[Fri Apr 24 03:25:37.591647 2026] [:error] [pid 65000:tid 65030] [client 51.103.174.167:8509] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aepyMb6vRb9j6psK2Za5dAAAAgE"]
[Fri Apr 24 03:25:38.481178 2026] [:error] [pid 42973:tid 43047] [client 51.103.174.167:12059] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aepyMm6I0QqmmmLTHE2bsAAAAIQ"]
[Fri Apr 24 03:25:39.512535 2026] [:error] [pid 42971:tid 42995] [client 51.103.174.167:20700] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aepyMzEP2_5RswrH8bFc0gAAAAk"]
[Fri Apr 24 03:25:40.288752 2026] [:error] [pid 42971:tid 43004] [client 51.103.174.167:24436] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xa.php"] [unique_id "aepyNDEP2_5RswrH8bFc1QAAABI"]
[Fri Apr 24 03:25:41.235328 2026] [:error] [pid 42971:tid 42999] [client 51.103.174.167:14679] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "aepyNTEP2_5RswrH8bFc2QAAAA0"]
[Fri Apr 24 03:25:42.004430 2026] [:error] [pid 43083:tid 43090] [client 51.103.174.167:24702] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "aepyNjC5hrvNXosL83K7iwAAAMU"]
[Fri Apr 24 03:25:43.346586 2026] [:error] [pid 65000:tid 65049] [client 51.103.174.167:22896] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "aepyN76vRb9j6psK2Za5ggAAAhA"]
[Fri Apr 24 03:25:45.469012 2026] [:error] [pid 59700:tid 59708] [client 51.103.174.167:22007] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/8573.php"] [unique_id "aepyOZXyGZJFeAIDWtmLhwAAAUY"]
[Fri Apr 24 03:25:47.097962 2026] [:error] [pid 42973:tid 43057] [client 51.103.174.167:48059] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aepyO26I0QqmmmLTHE2bvgAAAI4"]
[Fri Apr 24 03:25:47.796877 2026] [:error] [pid 64967:tid 64973] [client 51.103.174.167:23453] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aepyO4AV4GfOOdX8QzqlEgAAAYQ"]
[Fri Apr 24 03:25:48.833405 2026] [:error] [pid 64998:tid 65021] [client 51.103.174.167:11008] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aepyPIV5EysYcTLjmwhg2gAAAdM"]
[Fri Apr 24 03:25:50.005181 2026] [:error] [pid 42972:tid 43040] [client 51.103.174.167:28257] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "aepyPsOAb-3sOknsk4fkbAAAAFg"]
[Fri Apr 24 03:25:50.736048 2026] [:error] [pid 42972:tid 43018] [client 51.103.174.167:47937] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aepyPsOAb-3sOknsk4fkcAAAAEI"]
[Fri Apr 24 03:25:51.534002 2026] [:error] [pid 42972:tid 43021] [client 51.103.174.167:18037] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aepyP8OAb-3sOknsk4fkdQAAAEU"]
[Fri Apr 24 03:25:52.209146 2026] [:error] [pid 65000:tid 65054] [client 51.103.174.167:1662] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aepyQL6vRb9j6psK2Za5jQAAAhU"]
[Fri Apr 24 03:25:53.107350 2026] [:error] [pid 64967:tid 64993] [client 51.103.174.167:17274] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aepyQYAV4GfOOdX8QzqlFgAAAZg"]
[Fri Apr 24 03:25:54.116515 2026] [:error] [pid 65000:tid 65043] [client 51.103.174.167:26811] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aepyQr6vRb9j6psK2Za5lQAAAgo"]
[Fri Apr 24 03:25:54.969258 2026] [:error] [pid 43083:tid 43087] [client 51.103.174.167:20658] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aepyQjC5hrvNXosL83K7nAAAAMI"]
[Fri Apr 24 03:25:55.806633 2026] [:error] [pid 65000:tid 65042] [client 51.103.174.167:24124] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aepyQ76vRb9j6psK2Za5pgAAAgk"]
[Fri Apr 24 03:25:56.636286 2026] [:error] [pid 42971:tid 43001] [client 51.103.174.167:27691] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "aepyRDEP2_5RswrH8bFc5AAAAA8"]
[Fri Apr 24 03:25:57.456270 2026] [:error] [pid 42971:tid 42989] [client 51.103.174.167:27871] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "aepyRTEP2_5RswrH8bFc5gAAAAM"]
[Fri Apr 24 03:25:59.299188 2026] [:error] [pid 42972:tid 43037] [client 51.103.174.167:23312] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "aepyR8OAb-3sOknsk4fkgwAAAFU"]
[Fri Apr 24 03:26:01.488124 2026] [:error] [pid 64998:tid 65022] [client 51.103.174.167:23320] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "aepySYV5EysYcTLjmwhg_wAAAdQ"]
[Fri Apr 24 03:26:02.508287 2026] [:error] [pid 42971:tid 43000] [client 51.103.174.167:7658] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "aepySjEP2_5RswrH8bFc9QAAAA4"]
[Fri Apr 24 03:26:03.979586 2026] [:error] [pid 42972:tid 43020] [client 51.103.174.167:14889] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aepyS8OAb-3sOknsk4fkigAAAEQ"]
[Fri Apr 24 03:26:06.123449 2026] [:error] [pid 64998:tid 65011] [client 51.103.174.167:1217] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aepyToV5EysYcTLjmwhhBgAAAck"]
[Fri Apr 24 03:26:08.050152 2026] [:error] [pid 42972:tid 43016] [client 51.103.174.167:27694] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aepyUMOAb-3sOknsk4fkkgAAAEA"]
[Fri Apr 24 03:26:10.448084 2026] [:error] [pid 43083:tid 43104] [client 51.103.174.167:15182] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shop.php"] [unique_id "aepyUjC5hrvNXosL83K7owAAANM"]
[Fri Apr 24 03:26:12.056081 2026] [:error] [pid 59700:tid 59715] [client 51.103.174.167:19883] [client 51.103.174.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ww.php"] [unique_id "aepyVJXyGZJFeAIDWtmLogAAAU0"]
[Fri Apr 24 04:59:18.118277 2026] [:error] [pid 19102:tid 19180] [client 13.218.134.19:50354] [client 13.218.134.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeqIJgDSgrbLEZbkqD6mbAAAAJA"]
[Fri Apr 24 04:59:18.944919 2026] [:error] [pid 19102:tid 19170] [client 13.218.134.19:50364] [client 13.218.134.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aeqIJgDSgrbLEZbkqD6mbgAAAIY"]
[Fri Apr 24 05:32:54.781385 2026] [:error] [pid 52129:tid 52149] [client 43.157.20.63:38648] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aeqQBuKCZKf8_u2LKiBIsgAAARA"]
[Fri Apr 24 08:19:25.385149 2026] [:error] [pid 52129:tid 52154] [client 46.101.164.103:62805] [client 46.101.164.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 46.101.164.103, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "aeq3DeKCZKf8_u2LKiAEdAAAARU"]
[Fri Apr 24 10:17:06.431858 2026] [rewrite:error] [pid 17808:tid 17833] [client 104.164.173.78:34508] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Fri Apr 24 10:17:56.052386 2026] [rewrite:error] [pid 17720:tid 17765] [client 107.172.195.103:36544] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Fri Apr 24 10:32:04.852186 2026] [:error] [pid 17720:tid 17769] [client 194.26.192.182:59399] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerWJOhlUs6BS3Ng7_WoIQAAAM8"]
[Fri Apr 24 10:32:04.856126 2026] [:error] [pid 17719:tid 17740] [client 194.26.192.182:59398] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerWJMTZ9gzEyL1BkPrHGgAAAI0"]
[Fri Apr 24 10:32:05.884593 2026] [:error] [pid 17720:tid 17761] [client 194.26.192.182:59624] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerWJehlUs6BS3Ng7_WoRAAAAMc"]
[Fri Apr 24 10:32:05.885315 2026] [:error] [pid 17808:tid 17822] [client 194.26.192.182:59616] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerWJearbOEFI8qshvI8MAAAAEw"]
[Fri Apr 24 10:32:06.895393 2026] [:error] [pid 17721:tid 17802] [client 194.26.192.182:60212] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerWJuFXXkLeyDnfk_97MAAAABU"]
[Fri Apr 24 10:32:06.900398 2026] [:error] [pid 17719:tid 17727] [client 194.26.192.182:60211] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerWJsTZ9gzEyL1BkPrHagAAAIA"]
[Fri Apr 24 10:32:07.928590 2026] [:error] [pid 17808:tid 17833] [client 194.26.192.182:60940] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerWJ-arbOEFI8qshvI8owAAAFc"]
[Fri Apr 24 10:32:07.929971 2026] [:error] [pid 17808:tid 17824] [client 194.26.192.182:60949] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerWJ-arbOEFI8qshvI8qAAAAE4"]
[Fri Apr 24 10:32:08.951182 2026] [:error] [pid 17720:tid 17768] [client 194.26.192.182:61596] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerWKOhlUs6BS3Ng7_WoewAAAM4"]
[Fri Apr 24 10:32:08.951573 2026] [:error] [pid 17720:tid 17777] [client 194.26.192.182:61594] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerWKOhlUs6BS3Ng7_WofAAAANc"]
[Fri Apr 24 11:18:55.672215 2026] [:error] [pid 17808:tid 17821] [client 43.153.71.12:55814] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aerhH-arbOEFI8qshvJLdwAAAEs"]
[Fri Apr 24 11:27:56.083437 2026] [rewrite:error] [pid 17719:tid 17748] [client 103.4.250.219:51550] AH10508: Unsafe URL with %3f URL rewritten without UnsafeAllow3F
[Fri Apr 24 13:48:32.570511 2026] [:error] [pid 17721:tid 17797] [client 37.19.221.235:50779] [client 37.19.221.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.19.221.235, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aesEMOFXXkLeyDnfk__ERwAAABA"]
[Fri Apr 24 16:37:32.328845 2026] [:error] [pid 17721:tid 17800] [client 195.178.110.241:47238] [client 195.178.110.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aesrzOFXXkLeyDnfk__9LQAAABM"]
[Fri Apr 24 18:27:53.525861 2026] [:error] [pid 17720:tid 17758] [client 40.89.128.135:12277] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aetFqehlUs6BS3Ng7_VnbQAAAMQ"]
[Fri Apr 24 18:27:54.549698 2026] [:error] [pid 17720:tid 17756] [client 40.89.128.135:1179] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aetFquhlUs6BS3Ng7_VncAAAAMI"]
[Fri Apr 24 18:27:58.329944 2026] [:error] [pid 17720:tid 17754] [client 40.89.128.135:10147] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aetFruhlUs6BS3Ng7_VnfAAAAMA"]
[Fri Apr 24 18:28:04.212085 2026] [:error] [pid 17719:tid 17730] [client 40.89.128.135:15502] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aetFtMTZ9gzEyL1BkPqL7QAAAIM"]
[Fri Apr 24 18:28:08.753260 2026] [:error] [pid 17720:tid 17774] [client 40.89.128.135:10133] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aetFuOhlUs6BS3Ng7_VniAAAANQ"]
[Fri Apr 24 18:28:11.046877 2026] [:error] [pid 17719:tid 17730] [client 40.89.128.135:7496] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aetFu8TZ9gzEyL1BkPqL-AAAAIM"]
[Fri Apr 24 18:28:15.121874 2026] [:error] [pid 4177:tid 4188] [client 40.89.128.135:15510] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aetFv32asKnvdrSe0x64OAAAAYM"]
[Fri Apr 24 18:28:17.569667 2026] [:error] [pid 17721:tid 17785] [client 40.89.128.135:12712] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aetFweFXXkLeyDnfk_8afQAAAAQ"]
[Fri Apr 24 18:28:20.543594 2026] [:error] [pid 17720:tid 17763] [client 40.89.128.135:15036] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aetFxOhlUs6BS3Ng7_VnogAAAMk"]
[Fri Apr 24 18:28:22.873826 2026] [:error] [pid 4177:tid 4185] [client 40.89.128.135:12675] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aetFxn2asKnvdrSe0x64RgAAAYA"]
[Fri Apr 24 18:28:24.631349 2026] [:error] [pid 17719:tid 17731] [client 40.89.128.135:15029] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aetFyMTZ9gzEyL1BkPqMCAAAAIQ"]
[Fri Apr 24 18:28:32.000675 2026] [:error] [pid 17808:tid 17820] [client 40.89.128.135:12721] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aetFz-arbOEFI8qshvIGIgAAAEo"]
[Fri Apr 24 18:28:35.715682 2026] [:error] [pid 17808:tid 17815] [client 40.89.128.135:12677] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aetF0-arbOEFI8qshvIGLQAAAEU"]
[Fri Apr 24 18:28:40.366879 2026] [:error] [pid 4177:tid 4198] [client 40.89.128.135:30939] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aetF2H2asKnvdrSe0x64YgAAAY0"]
[Fri Apr 24 18:28:42.470833 2026] [:error] [pid 4177:tid 4186] [client 40.89.128.135:14053] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aetF2n2asKnvdrSe0x64aQAAAYE"]
[Fri Apr 24 18:28:44.524895 2026] [:error] [pid 22114:tid 22128] [client 40.89.128.135:30870] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aetF3IAuWGz3WlMQjofVogAAAQs"]
[Fri Apr 24 18:28:46.102830 2026] [:error] [pid 17719:tid 17727] [client 40.89.128.135:1217] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aetF3sTZ9gzEyL1BkPqMFAAAAIA"]
[Fri Apr 24 18:28:48.422655 2026] [:error] [pid 17720:tid 17776] [client 40.89.128.135:9048] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aetF4OhlUs6BS3Ng7_Vn2wAAANY"]
[Fri Apr 24 18:28:52.948272 2026] [:error] [pid 17720:tid 17764] [client 40.89.128.135:17112] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aetF5OhlUs6BS3Ng7_Vn5AAAAMo"]
[Fri Apr 24 18:29:17.707569 2026] [:error] [pid 17720:tid 17766] [client 40.89.128.135:30853] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aetF_ehlUs6BS3Ng7_VoNwAAAMw"]
[Fri Apr 24 18:29:18.944132 2026] [:error] [pid 17721:tid 17790] [client 40.89.128.135:14229] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aetF_uFXXkLeyDnfk_8avwAAAAk"]
[Fri Apr 24 18:29:21.102037 2026] [:error] [pid 4177:tid 4185] [client 40.89.128.135:7872] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aetGAX2asKnvdrSe0x64qgAAAYA"]
[Fri Apr 24 18:29:23.247635 2026] [:error] [pid 17721:tid 17782] [client 40.89.128.135:16369] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aetGA-FXXkLeyDnfk_8axgAAAAE"]
[Fri Apr 24 18:29:27.430615 2026] [:error] [pid 17721:tid 17790] [client 40.89.128.135:1670] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aetGB-FXXkLeyDnfk_8a3AAAAAk"]
[Fri Apr 24 18:29:29.166273 2026] [:error] [pid 17719:tid 17727] [client 40.89.128.135:16097] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aetGCcTZ9gzEyL1BkPqMMAAAAIA"]
[Fri Apr 24 18:29:34.150222 2026] [:error] [pid 17720:tid 17757] [client 40.89.128.135:9702] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aetGDuhlUs6BS3Ng7_VoWAAAAMM"]
[Fri Apr 24 18:29:35.279993 2026] [:error] [pid 4177:tid 4206] [client 40.89.128.135:8259] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aetGD32asKnvdrSe0x64xwAAAZU"]
[Fri Apr 24 18:29:38.797495 2026] [:error] [pid 17720:tid 17765] [client 40.89.128.135:16593] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aetGEuhlUs6BS3Ng7_VoZAAAAMs"]
[Fri Apr 24 18:29:41.097267 2026] [:error] [pid 4177:tid 4209] [client 40.89.128.135:8448] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aetGFX2asKnvdrSe0x641QAAAZg"]
[Fri Apr 24 18:29:43.755664 2026] [:error] [pid 17808:tid 17828] [client 40.89.128.135:10215] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aetGF-arbOEFI8qshvIGeQAAAFI"]
[Fri Apr 24 18:30:08.742071 2026] [:error] [pid 14531:tid 14540] [client 40.89.128.135:9560] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetGMHfLU2gw-6KR-GaiPgAAAUc"]
[Fri Apr 24 18:30:10.144507 2026] [:error] [pid 17721:tid 17796] [client 40.89.128.135:14813] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetGMuFXXkLeyDnfk_8bAgAAAA8"]
[Fri Apr 24 18:30:12.041103 2026] [:error] [pid 17720:tid 17766] [client 40.89.128.135:16781] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetGNOhlUs6BS3Ng7_VomgAAAMw"]
[Fri Apr 24 18:30:13.857178 2026] [:error] [pid 4177:tid 4199] [client 40.89.128.135:9967] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetGNX2asKnvdrSe0x65CgAAAY4"]
[Fri Apr 24 18:30:15.188742 2026] [:error] [pid 17721:tid 17787] [client 40.89.128.135:9946] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "aetGN-FXXkLeyDnfk_8bBwAAAAY"]
[Fri Apr 24 18:30:25.457192 2026] [:error] [pid 4177:tid 4187] [client 40.89.128.135:12205] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aetGQX2asKnvdrSe0x65WgAAAYI"]
[Fri Apr 24 18:30:28.386602 2026] [:error] [pid 17721:tid 17801] [client 40.89.128.135:16809] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aetGROFXXkLeyDnfk_8bEAAAABQ"]
[Fri Apr 24 18:30:30.053734 2026] [:error] [pid 22114:tid 22127] [client 40.89.128.135:8898] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aetGRoAuWGz3WlMQjofV8QAAAQo"]
[Fri Apr 24 18:30:32.324847 2026] [:error] [pid 4177:tid 4190] [client 40.89.128.135:9920] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aetGSH2asKnvdrSe0x65bwAAAYU"]
[Fri Apr 24 18:30:33.616568 2026] [:error] [pid 22114:tid 22125] [client 40.89.128.135:11247] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aetGSYAuWGz3WlMQjofV9gAAAQg"]
[Fri Apr 24 18:30:34.797340 2026] [:error] [pid 17720:tid 17770] [client 40.89.128.135:9524] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aetGSuhlUs6BS3Ng7_VorgAAANA"]
[Fri Apr 24 18:30:36.459754 2026] [:error] [pid 22114:tid 22137] [client 40.89.128.135:8926] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aetGTIAuWGz3WlMQjofV9wAAARQ"]
[Fri Apr 24 18:30:40.397710 2026] [:error] [pid 14531:tid 14537] [client 40.89.128.135:8908] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aetGUHfLU2gw-6KR-GaiYAAAAUQ"]
[Fri Apr 24 18:30:43.776335 2026] [:error] [pid 17721:tid 17801] [client 40.89.128.135:11212] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aetGU-FXXkLeyDnfk_8bJAAAABQ"]
[Fri Apr 24 18:30:48.000504 2026] [:error] [pid 17721:tid 17782] [client 40.89.128.135:17077] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aetGV-FXXkLeyDnfk_8bKwAAAAE"]
[Fri Apr 24 18:30:48.967892 2026] [:error] [pid 17719:tid 17750] [client 40.89.128.135:11245] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aetGWMTZ9gzEyL1BkPqMkgAAAJc"]
[Fri Apr 24 18:30:52.302991 2026] [:error] [pid 17808:tid 17829] [client 40.89.128.135:9477] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aetGXOarbOEFI8qshvIG2QAAAFM"]
[Fri Apr 24 18:30:55.635273 2026] [:error] [pid 17721:tid 17783] [client 40.89.128.135:15354] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aetGX-FXXkLeyDnfk_8bMAAAAAI"]
[Fri Apr 24 18:30:57.114938 2026] [:error] [pid 4177:tid 4203] [client 40.89.128.135:9486] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aetGYX2asKnvdrSe0x65tgAAAZI"]
[Fri Apr 24 18:30:59.045840 2026] [:error] [pid 17721:tid 17805] [client 40.89.128.135:17048] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aetGY-FXXkLeyDnfk_8bNQAAABg"]
[Fri Apr 24 18:31:02.216311 2026] [:error] [pid 14531:tid 14546] [client 40.89.128.135:9473] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aetGZnfLU2gw-6KR-GaidAAAAU0"]
[Fri Apr 24 18:31:05.234942 2026] [:error] [pid 17720:tid 17773] [client 40.89.128.135:8822] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aetGaehlUs6BS3Ng7_Vo5gAAANM"]
[Fri Apr 24 18:31:06.315026 2026] [:error] [pid 4177:tid 4193] [client 40.89.128.135:8829] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aetGan2asKnvdrSe0x65ywAAAYg"]
[Fri Apr 24 18:31:08.690791 2026] [:error] [pid 4177:tid 4196] [client 40.89.128.135:9509] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aetGbH2asKnvdrSe0x651wAAAYs"]
[Fri Apr 24 18:31:09.826869 2026] [:error] [pid 14531:tid 14537] [client 40.89.128.135:16546] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aetGbXfLU2gw-6KR-GaigQAAAUQ"]
[Fri Apr 24 18:31:12.119627 2026] [:error] [pid 4177:tid 4194] [client 40.89.128.135:11262] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aetGcH2asKnvdrSe0x656wAAAYk"]
[Fri Apr 24 18:31:15.083859 2026] [:error] [pid 17721:tid 17805] [client 40.89.128.135:11214] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aetGc-FXXkLeyDnfk_8bQAAAABg"]
[Fri Apr 24 18:31:16.921858 2026] [:error] [pid 4177:tid 4205] [client 40.89.128.135:11225] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aetGdH2asKnvdrSe0x66AQAAAZQ"]
[Fri Apr 24 18:31:19.000553 2026] [:error] [pid 14531:tid 14542] [client 40.89.128.135:17040] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aetGdnfLU2gw-6KR-GaijwAAAUk"]
[Fri Apr 24 18:31:22.928923 2026] [:error] [pid 17720:tid 17757] [client 40.89.128.135:16551] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aetGeuhlUs6BS3Ng7_VpCQAAAMM"]
[Fri Apr 24 18:31:37.173530 2026] [:error] [pid 17720:tid 17763] [client 40.89.128.135:9852] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-atom.php"] [unique_id "aetGiehlUs6BS3Ng7_VpOgAAAMk"]
[Fri Apr 24 18:31:41.548611 2026] [:error] [pid 17719:tid 17738] [client 40.89.128.135:10018] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-atom.php"] [unique_id "aetGjcTZ9gzEyL1BkPqM1QAAAIs"]
[Fri Apr 24 18:31:47.638453 2026] [:error] [pid 17721:tid 17800] [client 40.89.128.135:1761] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-atom.php"] [unique_id "aetGk-FXXkLeyDnfk_8bfQAAABM"]
[Fri Apr 24 18:31:53.908746 2026] [:error] [pid 17720:tid 17755] [client 40.89.128.135:7206] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aetGmehlUs6BS3Ng7_VpiwAAAME"]
[Fri Apr 24 18:31:54.893543 2026] [:error] [pid 4177:tid 4194] [client 40.89.128.135:7355] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aetGmn2asKnvdrSe0x66ZwAAAYk"]
[Fri Apr 24 18:31:55.720894 2026] [:error] [pid 4177:tid 4191] [client 40.89.128.135:1364] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aetGm32asKnvdrSe0x66cgAAAYY"]
[Fri Apr 24 18:31:56.298613 2026] [:error] [pid 4177:tid 4205] [client 40.89.128.135:1402] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aetGnH2asKnvdrSe0x66eQAAAZQ"]
[Fri Apr 24 18:31:56.908471 2026] [:error] [pid 4177:tid 4192] [client 40.89.128.135:7190] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "aetGnH2asKnvdrSe0x66fwAAAYc"]
[Fri Apr 24 18:31:57.531678 2026] [:error] [pid 4177:tid 4196] [client 40.89.128.135:7475] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "aetGnX2asKnvdrSe0x66ggAAAYs"]
[Fri Apr 24 18:31:58.254658 2026] [:error] [pid 17720:tid 17768] [client 40.89.128.135:15572] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "aetGnuhlUs6BS3Ng7_VpkgAAAM4"]
[Fri Apr 24 18:31:58.987856 2026] [:error] [pid 4177:tid 4193] [client 40.89.128.135:7259] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "aetGnn2asKnvdrSe0x66gwAAAYg"]
[Fri Apr 24 18:31:59.741110 2026] [:error] [pid 4177:tid 4205] [client 40.89.128.135:7317] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "aetGn32asKnvdrSe0x66hgAAAZQ"]
[Fri Apr 24 18:32:00.610521 2026] [:error] [pid 4177:tid 4203] [client 40.89.128.135:12450] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "aetGoH2asKnvdrSe0x66jAAAAZI"]
[Fri Apr 24 18:32:02.214026 2026] [:error] [pid 22114:tid 22124] [client 40.89.128.135:15559] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "aetGooAuWGz3WlMQjofWOAAAAQc"]
[Fri Apr 24 18:32:05.717759 2026] [:error] [pid 17720:tid 17771] [client 40.89.128.135:15062] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "aetGpehlUs6BS3Ng7_VpoAAAANE"]
[Fri Apr 24 18:32:06.760944 2026] [:error] [pid 4177:tid 4200] [client 40.89.128.135:15102] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetGpn2asKnvdrSe0x66sAAAAY8"]
[Fri Apr 24 18:32:07.650385 2026] [:error] [pid 17720:tid 17762] [client 40.89.128.135:7753] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetGp-hlUs6BS3Ng7_VppAAAAMg"]
[Fri Apr 24 18:32:09.904095 2026] [:error] [pid 17720:tid 17767] [client 40.89.128.135:13774] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetGqehlUs6BS3Ng7_VppQAAAM0"]
[Fri Apr 24 18:32:11.944171 2026] [:error] [pid 22114:tid 22135] [client 40.89.128.135:8612] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aetGq4AuWGz3WlMQjofWRgAAARI"]
[Fri Apr 24 18:32:22.225034 2026] [:error] [pid 17720:tid 17762] [client 40.89.128.135:7815] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aetGtuhlUs6BS3Ng7_Vp0gAAAMg"]
[Fri Apr 24 18:32:23.450146 2026] [:error] [pid 17720:tid 17775] [client 40.89.128.135:12432] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aetGt-hlUs6BS3Ng7_Vp1AAAANU"]
[Fri Apr 24 18:32:25.346687 2026] [:error] [pid 17721:tid 17800] [client 40.89.128.135:13769] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aetGueFXXkLeyDnfk_8boAAAABM"]
[Fri Apr 24 18:32:27.144153 2026] [:error] [pid 4177:tid 4203] [client 40.89.128.135:12015] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aetGu32asKnvdrSe0x67GgAAAZI"]
[Fri Apr 24 18:32:28.350000 2026] [:error] [pid 17808:tid 17815] [client 40.89.128.135:1634] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aetGvOarbOEFI8qshvIHhAAAAEU"]
[Fri Apr 24 18:32:29.900651 2026] [:error] [pid 22114:tid 22136] [client 40.89.128.135:1494] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aetGvYAuWGz3WlMQjofWWAAAARM"]
[Fri Apr 24 18:32:31.716443 2026] [:error] [pid 17720:tid 17772] [client 40.89.128.135:11459] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aetGv-hlUs6BS3Ng7_Vp2gAAANI"]
[Fri Apr 24 18:32:35.361665 2026] [:error] [pid 17720:tid 17770] [client 40.89.128.135:7840] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aetGw-hlUs6BS3Ng7_Vp3QAAANA"]
[Fri Apr 24 18:32:41.564366 2026] [:error] [pid 17721:tid 17804] [client 40.89.128.135:7605] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aetGyeFXXkLeyDnfk_8bwQAAABc"]
[Fri Apr 24 18:32:45.208812 2026] [:error] [pid 17721:tid 17796] [client 40.89.128.135:7565] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aetGzeFXXkLeyDnfk_8b0AAAAA8"]
[Fri Apr 24 18:32:47.039918 2026] [:error] [pid 4177:tid 4185] [client 40.89.128.135:7396] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aetGz32asKnvdrSe0x67XwAAAYA"]
[Fri Apr 24 18:32:49.993728 2026] [:error] [pid 4177:tid 4185] [client 40.89.128.135:1303] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aetG0X2asKnvdrSe0x67bgAAAYA"]
[Fri Apr 24 18:32:51.798179 2026] [:error] [pid 17808:tid 17827] [client 40.89.128.135:8064] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aetG0-arbOEFI8qshvIHrAAAAFE"]
[Fri Apr 24 18:32:54.759144 2026] [:error] [pid 17721:tid 17801] [client 40.89.128.135:11483] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aetG1uFXXkLeyDnfk_8b4AAAABQ"]
[Fri Apr 24 18:32:59.613106 2026] [:error] [pid 22114:tid 22141] [client 40.89.128.135:14540] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aetG24AuWGz3WlMQjofWbAAAARg"]
[Fri Apr 24 18:33:03.910525 2026] [:error] [pid 14531:tid 14540] [client 40.89.128.135:7379] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aetG33fLU2gw-6KR-GajFQAAAUc"]
[Fri Apr 24 18:33:04.973644 2026] [:error] [pid 17721:tid 17793] [client 40.89.128.135:7393] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aetG4OFXXkLeyDnfk_8b7QAAAAw"]
[Fri Apr 24 18:33:06.753526 2026] [:error] [pid 4177:tid 4190] [client 40.89.128.135:1587] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aetG4n2asKnvdrSe0x67pAAAAYU"]
[Fri Apr 24 18:33:09.316875 2026] [:error] [pid 17719:tid 17735] [client 40.89.128.135:15288] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aetG5cTZ9gzEyL1BkPqNPQAAAIg"]
[Fri Apr 24 18:33:13.354869 2026] [:error] [pid 4177:tid 4197] [client 40.89.128.135:10129] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aetG6X2asKnvdrSe0x67rwAAAYw"]
[Fri Apr 24 18:33:19.405321 2026] [:error] [pid 17719:tid 17727] [client 40.89.128.135:1098] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aetG78TZ9gzEyL1BkPqNSgAAAIA"]
[Fri Apr 24 18:33:23.353808 2026] [:error] [pid 4177:tid 4186] [client 40.89.128.135:1138] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aetG832asKnvdrSe0x67ywAAAYE"]
[Fri Apr 24 18:33:25.935166 2026] [:error] [pid 17719:tid 17750] [client 40.89.128.135:10150] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aetG9cTZ9gzEyL1BkPqNVAAAAJc"]
[Fri Apr 24 18:33:27.818821 2026] [:error] [pid 17720:tid 17760] [client 40.89.128.135:1087] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aetG9-hlUs6BS3Ng7_VqSQAAAMY"]
[Fri Apr 24 18:33:31.208639 2026] [:error] [pid 17721:tid 17782] [client 40.89.128.135:15039] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aetG--FXXkLeyDnfk_8cDAAAAAE"]
[Fri Apr 24 18:33:36.227564 2026] [:error] [pid 17808:tid 17823] [client 40.89.128.135:11763] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aetHAOarbOEFI8qshvIIKQAAAE0"]
[Fri Apr 24 18:33:38.943672 2026] [:error] [pid 4177:tid 4193] [client 40.89.128.135:11767] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aetHAn2asKnvdrSe0x67-AAAAYg"]
[Fri Apr 24 18:33:44.300216 2026] [:error] [pid 17808:tid 17816] [client 40.89.128.135:30940] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aetHCOarbOEFI8qshvIINAAAAEY"]
[Fri Apr 24 18:33:47.386608 2026] [:error] [pid 17720:tid 17762] [client 40.89.128.135:14021] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aetHC-hlUs6BS3Ng7_VqfgAAAMg"]
[Fri Apr 24 18:33:49.342044 2026] [:error] [pid 4177:tid 4188] [client 40.89.128.135:14063] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aetHDX2asKnvdrSe0x68AgAAAYM"]
[Fri Apr 24 18:33:57.430410 2026] [:error] [pid 17808:tid 17825] [client 40.89.128.135:1039] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-block.php"] [unique_id "aetHFearbOEFI8qshvIIUAAAAE8"]
[Fri Apr 24 18:34:02.967298 2026] [:error] [pid 17808:tid 17810] [client 40.89.128.135:1176] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "aetHGuarbOEFI8qshvIIYAAAAEA"]
[Fri Apr 24 18:34:03.953361 2026] [:error] [pid 14531:tid 14552] [client 40.89.128.135:30891] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "aetHG3fLU2gw-6KR-GajewAAAVM"]
[Fri Apr 24 18:34:05.497520 2026] [:error] [pid 17808:tid 17825] [client 40.89.128.135:30963] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "aetHHearbOEFI8qshvIIbgAAAE8"]
[Fri Apr 24 18:34:06.982311 2026] [:error] [pid 22114:tid 22129] [client 40.89.128.135:30967] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws88.php"] [unique_id "aetHHoAuWGz3WlMQjofWuAAAAQw"]
[Fri Apr 24 18:34:07.965726 2026] [:error] [pid 17721:tid 17786] [client 40.89.128.135:11728] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adoms.php"] [unique_id "aetHH-FXXkLeyDnfk_8cNgAAAAU"]
[Fri Apr 24 18:34:12.916598 2026] [:error] [pid 17719:tid 17734] [client 40.89.128.135:7535] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adoms.php"] [unique_id "aetHJMTZ9gzEyL1BkPqNiwAAAIc"]
[Fri Apr 24 18:34:14.521703 2026] [:error] [pid 14531:tid 14534] [client 40.89.128.135:7730] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adoms.php"] [unique_id "aetHJnfLU2gw-6KR-GajiwAAAUE"]
[Fri Apr 24 18:34:16.385849 2026] [:error] [pid 17719:tid 17729] [client 40.89.128.135:1895] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adoms.php"] [unique_id "aetHKMTZ9gzEyL1BkPqNlQAAAII"]
[Fri Apr 24 18:34:18.368951 2026] [:error] [pid 14531:tid 14551] [client 40.89.128.135:12720] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugin-editor.php"] [unique_id "aetHKnfLU2gw-6KR-GajkgAAAVI"]
[Fri Apr 24 18:34:24.346671 2026] [:error] [pid 17720:tid 17777] [client 40.89.128.135:15509] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugin-editor.php"] [unique_id "aetHMOhlUs6BS3Ng7_VquAAAANc"]
[Fri Apr 24 18:34:25.791657 2026] [:error] [pid 17808:tid 17827] [client 40.89.128.135:30923] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugin-editor.php"] [unique_id "aetHMearbOEFI8qshvIIhQAAAFE"]
[Fri Apr 24 18:34:26.729318 2026] [:error] [pid 17720:tid 17756] [client 40.89.128.135:1206] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugin-editor.php"] [unique_id "aetHMuhlUs6BS3Ng7_VquQAAAMI"]
[Fri Apr 24 18:34:28.745297 2026] [:error] [pid 17808:tid 17829] [client 40.89.128.135:12690] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "aetHNOarbOEFI8qshvIIjAAAAFM"]
[Fri Apr 24 18:34:32.466303 2026] [:error] [pid 4177:tid 4189] [client 40.89.128.135:1153] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "aetHOH2asKnvdrSe0x68YwAAAYQ"]
[Fri Apr 24 18:34:40.255320 2026] [:error] [pid 17719:tid 17739] [client 40.89.128.135:7522] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "aetHQMTZ9gzEyL1BkPqNrwAAAIw"]
[Fri Apr 24 18:34:45.772089 2026] [:error] [pid 17720:tid 17767] [client 40.89.128.135:30897] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aetHRehlUs6BS3Ng7_Vq_AAAAM0"]
[Fri Apr 24 18:34:46.916559 2026] [:error] [pid 4177:tid 4188] [client 40.89.128.135:11769] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aetHRn2asKnvdrSe0x68mAAAAYM"]
[Fri Apr 24 18:34:49.096694 2026] [:error] [pid 4177:tid 4198] [client 40.89.128.135:11723] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aetHSX2asKnvdrSe0x68owAAAY0"]
[Fri Apr 24 18:34:50.954048 2026] [:error] [pid 17808:tid 17812] [client 40.89.128.135:1211] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t.php"] [unique_id "aetHSuarbOEFI8qshvIIpQAAAEI"]
[Fri Apr 24 18:34:53.123049 2026] [:error] [pid 14531:tid 14540] [client 40.89.128.135:11747] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aetHTXfLU2gw-6KR-GajuQAAAUc"]
[Fri Apr 24 18:34:54.330732 2026] [:error] [pid 17720:tid 17764] [client 40.89.128.135:9275] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aetHTuhlUs6BS3Ng7_VrIwAAAMo"]
[Fri Apr 24 18:34:57.161783 2026] [:error] [pid 4177:tid 4188] [client 40.89.128.135:7539] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aetHUX2asKnvdrSe0x69EQAAAYM"]
[Fri Apr 24 18:34:58.764973 2026] [:error] [pid 17720:tid 17769] [client 40.89.128.135:1173] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aetHUuhlUs6BS3Ng7_VrQQAAAM8"]
[Fri Apr 24 18:35:02.059709 2026] [:error] [pid 17721:tid 17795] [client 40.89.128.135:1182] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "aetHVuFXXkLeyDnfk_8cdgAAAA4"]
[Fri Apr 24 18:35:03.940428 2026] [:error] [pid 14531:tid 14556] [client 40.89.128.135:1238] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "aetHV3fLU2gw-6KR-GajwgAAAVc"]
[Fri Apr 24 18:35:08.898034 2026] [:error] [pid 17720:tid 17758] [client 40.89.128.135:30900] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "aetHXOhlUs6BS3Ng7_VrUQAAAMQ"]
[Fri Apr 24 18:35:11.770217 2026] [:error] [pid 17721:tid 17799] [client 40.89.128.135:1199] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "aetHX-FXXkLeyDnfk_8chQAAABI"]
[Fri Apr 24 18:35:15.517747 2026] [:error] [pid 22114:tid 22123] [client 40.89.128.135:7504] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaza.php"] [unique_id "aetHY4AuWGz3WlMQjofW7gAAAQY"]
[Fri Apr 24 18:35:17.669844 2026] [:error] [pid 14531:tid 14538] [client 40.89.128.135:7531] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaza.php"] [unique_id "aetHZXfLU2gw-6KR-Gaj2AAAAUU"]
[Fri Apr 24 18:35:19.546329 2026] [:error] [pid 22114:tid 22119] [client 40.89.128.135:9255] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaza.php"] [unique_id "aetHZ4AuWGz3WlMQjofW9gAAAQI"]
[Fri Apr 24 18:35:21.996146 2026] [:error] [pid 17720:tid 17758] [client 40.89.128.135:17111] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gaza.php"] [unique_id "aetHaehlUs6BS3Ng7_VrcwAAAMQ"]
[Fri Apr 24 18:35:23.870698 2026] [:error] [pid 17721:tid 17791] [client 40.89.128.135:30910] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aetHa-FXXkLeyDnfk_8ckAAAAAo"]
[Fri Apr 24 18:35:25.052301 2026] [:error] [pid 4177:tid 4196] [client 40.89.128.135:15307] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aetHbX2asKnvdrSe0x69RwAAAYs"]
[Fri Apr 24 18:35:27.478357 2026] [:error] [pid 17719:tid 17740] [client 40.89.128.135:12710] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aetHb8TZ9gzEyL1BkPqN1AAAAI0"]
[Fri Apr 24 18:35:30.707974 2026] [:error] [pid 17808:tid 17832] [client 40.89.128.135:15353] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aetHcuarbOEFI8qshvII4QAAAFY"]
[Fri Apr 24 18:35:33.024043 2026] [:error] [pid 17720:tid 17761] [client 40.89.128.135:1279] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aetHdehlUs6BS3Ng7_VrgAAAAMc"]
[Fri Apr 24 18:35:35.433775 2026] [:error] [pid 14531:tid 14552] [client 40.89.128.135:11762] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aetHd3fLU2gw-6KR-Gaj5gAAAVM"]
[Fri Apr 24 18:35:36.826053 2026] [:error] [pid 17720:tid 17755] [client 40.89.128.135:1191] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aetHeOhlUs6BS3Ng7_VrgwAAAME"]
[Fri Apr 24 18:35:39.562609 2026] [:error] [pid 17721:tid 17804] [client 40.89.128.135:12702] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aetHe-FXXkLeyDnfk_8cnQAAABc"]
[Fri Apr 24 18:35:40.323472 2026] [:error] [pid 22114:tid 22134] [client 40.89.128.135:1916] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "aetHfIAuWGz3WlMQjofXAwAAARE"]
[Fri Apr 24 18:35:43.359131 2026] [:error] [pid 17808:tid 17833] [client 40.89.128.135:30965] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "aetHf-arbOEFI8qshvII7QAAAFc"]
[Fri Apr 24 18:35:55.102406 2026] [:error] [pid 17808:tid 17830] [client 40.89.128.135:17116] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aetHi-arbOEFI8qshvII_gAAAFQ"]
[Fri Apr 24 18:35:59.954193 2026] [:error] [pid 17808:tid 17827] [client 40.89.128.135:7725] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aetHj-arbOEFI8qshvIJAAAAAFE"]
[Fri Apr 24 18:36:02.842348 2026] [:error] [pid 4177:tid 4201] [client 40.89.128.135:30886] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aetHkn2asKnvdrSe0x69pwAAAZA"]
[Fri Apr 24 18:36:04.456488 2026] [:error] [pid 22114:tid 22126] [client 40.89.128.135:1164] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aetHlIAuWGz3WlMQjofXGgAAAQk"]
[Fri Apr 24 18:36:11.278393 2026] [:error] [pid 4177:tid 4191] [client 40.89.128.135:7739] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aetHm32asKnvdrSe0x69uwAAAYY"]
[Fri Apr 24 18:36:15.034448 2026] [:error] [pid 17721:tid 17786] [client 40.89.128.135:1219] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aetHn-FXXkLeyDnfk_8c5QAAAAU"]
[Fri Apr 24 18:36:16.509416 2026] [:error] [pid 22114:tid 22117] [client 40.89.128.135:1175] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aetHoIAuWGz3WlMQjofXKgAAAQA"]
[Fri Apr 24 18:36:18.660634 2026] [:error] [pid 14531:tid 14555] [client 40.89.128.135:7501] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aetHonfLU2gw-6KR-GakTQAAAVY"]
[Fri Apr 24 18:36:21.461201 2026] [:error] [pid 17719:tid 17744] [client 40.89.128.135:30872] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aetHpcTZ9gzEyL1BkPqOTQAAAJE"]
[Fri Apr 24 18:36:25.348678 2026] [:error] [pid 14531:tid 14544] [client 40.89.128.135:1262] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aetHqXfLU2gw-6KR-GakbQAAAUs"]
[Fri Apr 24 18:36:28.760062 2026] [:error] [pid 14531:tid 14539] [client 40.89.128.135:30938] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aetHrHfLU2gw-6KR-GakdQAAAUY"]
[Fri Apr 24 18:36:30.267465 2026] [:error] [pid 17808:tid 17832] [client 40.89.128.135:7717] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aetHruarbOEFI8qshvIJVAAAAFY"]
[Fri Apr 24 18:36:32.582681 2026] [:error] [pid 17721:tid 17783] [client 40.89.128.135:1237] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "aetHsOFXXkLeyDnfk_8dMgAAAAI"]
[Fri Apr 24 18:36:35.903938 2026] [:error] [pid 17808:tid 17821] [client 40.89.128.135:1269] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "aetHs-arbOEFI8qshvIJXwAAAEs"]
[Fri Apr 24 18:36:43.227905 2026] [:error] [pid 17719:tid 17746] [client 40.89.128.135:30960] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "aetHu8TZ9gzEyL1BkPqOVgAAAJM"]
[Fri Apr 24 18:36:49.200979 2026] [:error] [pid 17721:tid 17789] [client 40.89.128.135:17141] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gcqoa.php"] [unique_id "aetHweFXXkLeyDnfk_8dcwAAAAg"]
[Fri Apr 24 18:36:52.696413 2026] [:error] [pid 17808:tid 17833] [client 40.89.128.135:17104] [client 40.89.128.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gcqoa.php"] [unique_id "aetHxOarbOEFI8qshvIJeAAAAFc"]
[Fri Apr 24 19:17:16.019713 2026] [:error] [pid 22114:tid 22122] [client 72.146.2.23:33587] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aetRPIAuWGz3WlMQjofergAAAQU"]
[Fri Apr 24 19:17:17.768068 2026] [:error] [pid 17808:tid 17833] [client 72.146.2.23:34317] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aetRPearbOEFI8qshvIaIQAAAFc"]
[Fri Apr 24 19:17:20.833553 2026] [:error] [pid 14531:tid 14552] [client 72.146.2.23:34324] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aetRQHfLU2gw-6KR-GaxNwAAAVM"]
[Fri Apr 24 19:17:23.056840 2026] [:error] [pid 4177:tid 4197] [client 72.146.2.23:33274] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/166.php"] [unique_id "aetRQ32asKnvdrSe0x7XkAAAAYw"]
[Fri Apr 24 19:17:24.848656 2026] [:error] [pid 17720:tid 17767] [client 72.146.2.23:34350] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aetRROhlUs6BS3Ng7_V_QwAAAM0"]
[Fri Apr 24 19:17:25.859252 2026] [:error] [pid 17720:tid 17770] [client 72.146.2.23:33229] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aetRRehlUs6BS3Ng7_V_TAAAANA"]
[Fri Apr 24 19:17:28.350553 2026] [:error] [pid 17808:tid 17831] [client 72.146.2.23:44033] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aetRSOarbOEFI8qshvIaLAAAAFU"]
[Fri Apr 24 19:17:32.884204 2026] [:error] [pid 14531:tid 14551] [client 72.146.2.23:41056] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "aetRTHfLU2gw-6KR-GaxTgAAAVI"]
[Fri Apr 24 19:17:36.094994 2026] [:error] [pid 17808:tid 17831] [client 72.146.2.23:43540] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aetRUOarbOEFI8qshvIaPAAAAFU"]
[Fri Apr 24 19:17:37.657275 2026] [:error] [pid 17720:tid 17772] [client 72.146.2.23:44650] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aetRUehlUs6BS3Ng7_V_awAAANI"]
[Fri Apr 24 19:17:40.202569 2026] [:error] [pid 4177:tid 4191] [client 72.146.2.23:44876] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aetRVH2asKnvdrSe0x7XwwAAAYY"]
[Fri Apr 24 19:17:41.275884 2026] [:error] [pid 17720:tid 17754] [client 72.146.2.23:54846] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "aetRVehlUs6BS3Ng7_V_dQAAAMA"]
[Fri Apr 24 19:17:41.943960 2026] [:error] [pid 17720:tid 17777] [client 72.146.2.23:43809] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aetRVehlUs6BS3Ng7_V_fAAAANc"]
[Fri Apr 24 19:17:54.614491 2026] [:error] [pid 14531:tid 14542] [client 72.146.2.23:44317] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aetRYnfLU2gw-6KR-GaxZQAAAUk"]
[Fri Apr 24 19:17:55.411786 2026] [:error] [pid 4177:tid 4197] [client 72.146.2.23:39285] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aetRY32asKnvdrSe0x7X9AAAAYw"]
[Fri Apr 24 19:17:58.185105 2026] [:error] [pid 4177:tid 4193] [client 72.146.2.23:5972] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aetRZn2asKnvdrSe0x7X-gAAAYg"]
[Fri Apr 24 19:18:02.035572 2026] [:error] [pid 17719:tid 17750] [client 72.146.2.23:39243] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aetRasTZ9gzEyL1BkPqZHAAAAJc"]
[Fri Apr 24 19:18:05.403958 2026] [:error] [pid 22114:tid 22140] [client 72.146.2.23:36164] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aetRbYAuWGz3WlMQjofeuwAAARc"]
[Fri Apr 24 19:18:07.206758 2026] [:error] [pid 4177:tid 4207] [client 72.146.2.23:41472] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aetRb32asKnvdrSe0x7YCwAAAZY"]
[Fri Apr 24 19:18:09.445870 2026] [:error] [pid 4177:tid 4190] [client 72.146.2.23:44337] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aetRcX2asKnvdrSe0x7YGgAAAYU"]
[Fri Apr 24 19:18:10.718211 2026] [:error] [pid 14531:tid 14547] [client 72.146.2.23:36251] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "aetRcnfLU2gw-6KR-GaxegAAAU4"]
[Fri Apr 24 19:18:12.110665 2026] [:error] [pid 14531:tid 14552] [client 72.146.2.23:54797] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aetRdHfLU2gw-6KR-GaxfAAAAVM"]
[Fri Apr 24 19:18:14.878779 2026] [:error] [pid 4177:tid 4207] [client 72.146.2.23:54782] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "aetRdn2asKnvdrSe0x7YLgAAAZY"]
[Fri Apr 24 19:18:24.653108 2026] [:error] [pid 4177:tid 4208] [client 72.146.2.23:44332] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aetRgH2asKnvdrSe0x7YXgAAAZc"]
[Fri Apr 24 19:18:25.255539 2026] [:error] [pid 4177:tid 4203] [client 72.146.2.23:36277] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aetRgX2asKnvdrSe0x7YYQAAAZI"]
[Fri Apr 24 19:18:27.167577 2026] [:error] [pid 22114:tid 22117] [client 72.146.2.23:41497] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aetRg4AuWGz3WlMQjofeyQAAAQA"]
[Fri Apr 24 19:18:29.294173 2026] [:error] [pid 17720:tid 17754] [client 72.146.2.23:42556] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aetRhehlUs6BS3Ng7_WAjQAAAMA"]
[Fri Apr 24 19:18:30.848664 2026] [:error] [pid 22114:tid 22137] [client 72.146.2.23:36278] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aetRhoAuWGz3WlMQjofezQAAARQ"]
[Fri Apr 24 19:18:34.312149 2026] [:error] [pid 17720:tid 17770] [client 72.146.2.23:47259] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aetRiuhlUs6BS3Ng7_WApQAAANA"]
[Fri Apr 24 19:18:35.256404 2026] [:error] [pid 17720:tid 17776] [client 72.146.2.23:36200] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aetRi-hlUs6BS3Ng7_WArgAAANY"]
[Fri Apr 24 19:18:36.739547 2026] [:error] [pid 14531:tid 14545] [client 72.146.2.23:5987] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aetRjHfLU2gw-6KR-GaxqAAAAUw"]
[Fri Apr 24 19:18:38.108766 2026] [:error] [pid 14531:tid 14544] [client 72.146.2.23:33169] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aetRjnfLU2gw-6KR-GaxrgAAAUs"]
[Fri Apr 24 19:18:40.026719 2026] [:error] [pid 17720:tid 17759] [client 72.146.2.23:54791] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aetRkOhlUs6BS3Ng7_WAvwAAAMU"]
[Fri Apr 24 19:18:40.926756 2026] [:error] [pid 22114:tid 22132] [client 72.146.2.23:55393] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aetRkIAuWGz3WlMQjofe1wAAAQ8"]
[Fri Apr 24 19:18:42.536799 2026] [:error] [pid 22114:tid 22141] [client 72.146.2.23:36249] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "aetRkoAuWGz3WlMQjofe3QAAARg"]
[Fri Apr 24 19:18:47.981548 2026] [:error] [pid 4177:tid 4209] [client 72.146.2.23:5966] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetRl32asKnvdrSe0x7YmAAAAZg"]
[Fri Apr 24 19:18:49.762770 2026] [:error] [pid 17721:tid 17795] [client 72.146.2.23:44349] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetRmeFXXkLeyDnfk_8oNQAAAA4"]
[Fri Apr 24 19:18:50.752525 2026] [:error] [pid 17808:tid 17832] [client 72.146.2.23:42547] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetRmuarbOEFI8qshvIarwAAAFY"]
[Fri Apr 24 19:18:54.564904 2026] [:error] [pid 22114:tid 22129] [client 72.146.2.23:44324] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aetRnoAuWGz3WlMQjofe5gAAAQw"]
[Fri Apr 24 19:18:55.588660 2026] [:error] [pid 17721:tid 17781] [client 72.146.2.23:33186] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "aetRn-FXXkLeyDnfk_8oOwAAAAA"]
[Fri Apr 24 19:18:56.985962 2026] [:error] [pid 22114:tid 22135] [client 72.146.2.23:36177] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "aetRoIAuWGz3WlMQjofe6AAAARI"]
[Fri Apr 24 19:18:58.129641 2026] [:error] [pid 17721:tid 17782] [client 72.146.2.23:44343] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "aetRouFXXkLeyDnfk_8oQQAAAAE"]
[Fri Apr 24 19:18:59.436568 2026] [:error] [pid 4177:tid 4208] [client 72.146.2.23:42538] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws48.php"] [unique_id "aetRo32asKnvdrSe0x7YrAAAAZc"]
[Fri Apr 24 19:19:01.263808 2026] [:error] [pid 4177:tid 4187] [client 72.146.2.23:5886] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aetRpX2asKnvdrSe0x7YtAAAAYI"]
[Fri Apr 24 19:19:03.724177 2026] [:error] [pid 17719:tid 17742] [client 72.146.2.23:42512] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aetRp8TZ9gzEyL1BkPqZdwAAAI8"]
[Fri Apr 24 19:19:07.909878 2026] [:error] [pid 4177:tid 4191] [client 72.146.2.23:33173] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aetRq32asKnvdrSe0x7Y1gAAAYY"]
[Fri Apr 24 19:19:09.212851 2026] [:error] [pid 4177:tid 4208] [client 72.146.2.23:42541] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "aetRrX2asKnvdrSe0x7Y3wAAAZc"]
[Fri Apr 24 19:19:10.368062 2026] [:error] [pid 17719:tid 17741] [client 72.146.2.23:5848] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aetRrsTZ9gzEyL1BkPqZeAAAAI4"]
[Fri Apr 24 19:19:12.218340 2026] [:error] [pid 14531:tid 14537] [client 72.146.2.23:33181] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aetRsHfLU2gw-6KR-Gax2wAAAUQ"]
[Fri Apr 24 19:19:16.738506 2026] [:error] [pid 17721:tid 17782] [client 72.146.2.23:44320] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aetRtOFXXkLeyDnfk_8oYwAAAAE"]
[Fri Apr 24 19:19:20.156183 2026] [:error] [pid 17720:tid 17765] [client 72.146.2.23:6005] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dass.php"] [unique_id "aetRuOhlUs6BS3Ng7_WBSAAAAMs"]
[Fri Apr 24 19:19:32.178146 2026] [:error] [pid 4177:tid 4207] [client 72.146.2.23:42529] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aetRxH2asKnvdrSe0x7ZKQAAAZY"]
[Fri Apr 24 19:19:33.462209 2026] [:error] [pid 17721:tid 17786] [client 72.146.2.23:36179] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aetRxeFXXkLeyDnfk_8ohAAAAAU"]
[Fri Apr 24 19:19:34.480717 2026] [:error] [pid 17721:tid 17791] [client 72.146.2.23:36198] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aetRxuFXXkLeyDnfk_8oiQAAAAo"]
[Fri Apr 24 19:19:36.928170 2026] [:error] [pid 4177:tid 4208] [client 72.146.2.23:47274] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aetRyH2asKnvdrSe0x7ZNQAAAZc"]
[Fri Apr 24 19:19:38.506384 2026] [:error] [pid 17720:tid 17756] [client 72.146.2.23:54785] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aetRyuhlUs6BS3Ng7_WBeAAAAMI"]
[Fri Apr 24 19:19:40.144126 2026] [:error] [pid 17720:tid 17757] [client 72.146.2.23:37031] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aetRzOhlUs6BS3Ng7_WBewAAAMM"]
[Fri Apr 24 19:19:42.677037 2026] [:error] [pid 17720:tid 17756] [client 72.146.2.23:35851] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aetRzuhlUs6BS3Ng7_WBgAAAAMI"]
[Fri Apr 24 19:19:44.127900 2026] [:error] [pid 17719:tid 17741] [client 72.146.2.23:36272] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aetR0MTZ9gzEyL1BkPqZgwAAAI4"]
[Fri Apr 24 19:19:45.412538 2026] [:error] [pid 22114:tid 22130] [client 72.146.2.23:42860] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aetR0YAuWGz3WlMQjoffCAAAAQ0"]
[Fri Apr 24 19:19:54.299867 2026] [:error] [pid 17808:tid 17825] [client 72.146.2.23:47294] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aetR2uarbOEFI8qshvIbBQAAAE8"]
[Fri Apr 24 19:19:59.336002 2026] [:error] [pid 14531:tid 14539] [client 72.146.2.23:54834] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aetR33fLU2gw-6KR-GayPAAAAUY"]
[Fri Apr 24 19:20:01.849951 2026] [:error] [pid 17719:tid 17750] [client 72.146.2.23:47247] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aetR4cTZ9gzEyL1BkPqZmwAAAJc"]
[Fri Apr 24 19:20:03.379519 2026] [:error] [pid 17808:tid 17828] [client 72.146.2.23:6013] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aetR4-arbOEFI8qshvIbHAAAAFI"]
[Fri Apr 24 19:20:06.209723 2026] [:error] [pid 4177:tid 4204] [client 72.146.2.23:6015] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aetR5n2asKnvdrSe0x7ZdAAAAZM"]
[Fri Apr 24 19:20:07.860936 2026] [:error] [pid 4177:tid 4201] [client 72.146.2.23:5877] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bnm.php"] [unique_id "aetR532asKnvdrSe0x7ZgQAAAZA"]
[Fri Apr 24 19:20:09.011910 2026] [:error] [pid 17719:tid 17741] [client 72.146.2.23:42515] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aetR6cTZ9gzEyL1BkPqZtQAAAI4"]
[Fri Apr 24 19:20:11.672587 2026] [:error] [pid 4177:tid 4191] [client 72.146.2.23:5205] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aetR632asKnvdrSe0x7ZkAAAAYY"]
[Fri Apr 24 19:20:12.741965 2026] [:error] [pid 22114:tid 22131] [client 72.146.2.23:35900] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aetR7IAuWGz3WlMQjoffEwAAAQ4"]
[Fri Apr 24 19:20:14.525557 2026] [:error] [pid 17808:tid 17822] [client 72.146.2.23:5225] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aetR7uarbOEFI8qshvIbMQAAAEw"]
[Fri Apr 24 19:20:16.294556 2026] [:error] [pid 17808:tid 17824] [client 72.146.2.23:45162] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetR8OarbOEFI8qshvIbNgAAAE4"]
[Fri Apr 24 19:20:18.408123 2026] [:error] [pid 4177:tid 4193] [client 72.146.2.23:35854] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetR8n2asKnvdrSe0x7ZsQAAAYg"]
[Fri Apr 24 19:20:20.035631 2026] [:error] [pid 17720:tid 17771] [client 72.146.2.23:45066] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetR9OhlUs6BS3Ng7_WCEAAAANE"]
[Fri Apr 24 19:20:21.662132 2026] [:error] [pid 22114:tid 22125] [client 72.146.2.23:5187] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aetR9YAuWGz3WlMQjoffGgAAAQg"]
[Fri Apr 24 19:20:25.218804 2026] [:error] [pid 17808:tid 17825] [client 72.146.2.23:57273] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aetR-earbOEFI8qshvIbPwAAAE8"]
[Fri Apr 24 19:20:27.222026 2026] [:error] [pid 17720:tid 17777] [client 72.146.2.23:33932] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aetR--hlUs6BS3Ng7_WCIwAAANc"]
[Fri Apr 24 19:20:29.422767 2026] [:error] [pid 17719:tid 17747] [client 72.146.2.23:35024] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/s.php"] [unique_id "aetR_cTZ9gzEyL1BkPqZzAAAAJQ"]
[Fri Apr 24 19:20:41.303617 2026] [:error] [pid 14531:tid 14534] [client 72.146.2.23:42764] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aetSCXfLU2gw-6KR-GaybAAAAUE"]
[Fri Apr 24 19:20:42.961514 2026] [:error] [pid 17720:tid 17773] [client 72.146.2.23:43352] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aetSCuhlUs6BS3Ng7_WCMgAAANM"]
[Fri Apr 24 19:20:44.537512 2026] [:error] [pid 4177:tid 4194] [client 72.146.2.23:39897] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aetSDH2asKnvdrSe0x7Z5gAAAYk"]
[Fri Apr 24 19:20:47.473704 2026] [:error] [pid 17808:tid 17815] [client 72.146.2.23:42763] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aetSD-arbOEFI8qshvIbWwAAAEU"]
[Fri Apr 24 19:20:50.241767 2026] [:error] [pid 17808:tid 17826] [client 72.146.2.23:42809] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aetSEuarbOEFI8qshvIbZQAAAFA"]
[Fri Apr 24 19:20:53.050314 2026] [:error] [pid 17719:tid 17749] [client 72.146.2.23:43339] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aetSFcTZ9gzEyL1BkPqZ3QAAAJY"]
[Fri Apr 24 19:20:54.570017 2026] [:error] [pid 14531:tid 14548] [client 72.146.2.23:42597] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aetSFnfLU2gw-6KR-GaydQAAAU8"]
[Fri Apr 24 19:20:55.723018 2026] [:error] [pid 17720:tid 17768] [client 72.146.2.23:6027] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aetSF-hlUs6BS3Ng7_WCVQAAAM4"]
[Fri Apr 24 19:20:58.372004 2026] [:error] [pid 17720:tid 17756] [client 72.146.2.23:5138] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aetSGuhlUs6BS3Ng7_WCXgAAAMI"]
[Fri Apr 24 19:21:00.749287 2026] [:error] [pid 4177:tid 4203] [client 72.146.2.23:33920] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aetSHH2asKnvdrSe0x7Z9gAAAZI"]
[Fri Apr 24 19:21:03.475558 2026] [:error] [pid 17719:tid 17741] [client 72.146.2.23:35025] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aetSH8TZ9gzEyL1BkPqZ5QAAAI4"]
[Fri Apr 24 19:21:05.376313 2026] [:error] [pid 4177:tid 4195] [client 72.146.2.23:39912] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aetSIX2asKnvdrSe0x7aBwAAAYo"]
[Fri Apr 24 19:21:07.863895 2026] [:error] [pid 4177:tid 4208] [client 72.146.2.23:35044] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aetSI32asKnvdrSe0x7aDAAAAZc"]
[Fri Apr 24 19:21:09.570590 2026] [:error] [pid 4177:tid 4185] [client 72.146.2.23:55897] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aetSJX2asKnvdrSe0x7aEQAAAYA"]
[Fri Apr 24 19:21:12.277393 2026] [:error] [pid 17720:tid 17761] [client 72.146.2.23:39334] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aetSKOhlUs6BS3Ng7_WCaAAAAMc"]
[Fri Apr 24 19:21:13.905022 2026] [:error] [pid 4177:tid 4191] [client 72.146.2.23:35822] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "aetSKX2asKnvdrSe0x7aJwAAAYY"]
[Fri Apr 24 19:21:15.672900 2026] [:error] [pid 4177:tid 4197] [client 72.146.2.23:57265] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aetSK32asKnvdrSe0x7aOAAAAYw"]
[Fri Apr 24 19:21:17.330102 2026] [:error] [pid 22114:tid 22121] [client 72.146.2.23:35806] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aetSLYAuWGz3WlMQjoffSQAAAQQ"]
[Fri Apr 24 19:21:18.295275 2026] [:error] [pid 14531:tid 14546] [client 72.146.2.23:55809] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aetSLnfLU2gw-6KR-GayhgAAAU0"]
[Fri Apr 24 19:21:19.525049 2026] [:error] [pid 14531:tid 14550] [client 72.146.2.23:55892] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aetSL3fLU2gw-6KR-GaykAAAAVE"]
[Fri Apr 24 19:21:22.117034 2026] [:error] [pid 17719:tid 17732] [client 72.146.2.23:34281] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aetSMsTZ9gzEyL1BkPqZ7gAAAIU"]
[Fri Apr 24 19:21:26.591094 2026] [:error] [pid 17721:tid 17785] [client 72.146.2.23:34294] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aetSNuFXXkLeyDnfk_8pIQAAAAQ"]
[Fri Apr 24 19:21:29.819516 2026] [:error] [pid 17719:tid 17750] [client 72.146.2.23:45077] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aetSOcTZ9gzEyL1BkPqZ9QAAAJc"]
[Fri Apr 24 19:21:31.229199 2026] [:error] [pid 4177:tid 4200] [client 72.146.2.23:45144] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "aetSO32asKnvdrSe0x7aVAAAAY8"]
[Fri Apr 24 19:21:33.485833 2026] [:error] [pid 17720:tid 17773] [client 72.146.2.23:40321] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aetSPehlUs6BS3Ng7_WCewAAANM"]
[Fri Apr 24 19:21:37.507184 2026] [:error] [pid 17808:tid 17819] [client 72.146.2.23:5203] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aetSQearbOEFI8qshvIblQAAAEk"]
[Fri Apr 24 19:21:40.679623 2026] [:error] [pid 17808:tid 17810] [client 72.146.2.23:45150] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "aetSROarbOEFI8qshvIbmwAAAEA"]
[Fri Apr 24 19:21:55.947406 2026] [:error] [pid 4177:tid 4192] [client 72.146.2.23:36641] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aetSU32asKnvdrSe0x7ahwAAAYc"]
[Fri Apr 24 19:21:58.018418 2026] [:error] [pid 17721:tid 17799] [client 72.146.2.23:5232] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aetSVuFXXkLeyDnfk_8pPwAAABI"]
[Fri Apr 24 19:21:59.516115 2026] [:error] [pid 17721:tid 17784] [client 72.146.2.23:35781] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aetSV-FXXkLeyDnfk_8pQwAAAAM"]
[Fri Apr 24 19:22:03.588903 2026] [:error] [pid 17808:tid 17824] [client 72.146.2.23:39351] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aetSW-arbOEFI8qshvIbvQAAAE4"]
[Fri Apr 24 19:22:06.541122 2026] [:error] [pid 17720:tid 17766] [client 72.146.2.23:5211] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "aetSXuhlUs6BS3Ng7_WCpgAAAMw"]
[Fri Apr 24 19:22:07.647303 2026] [:error] [pid 17720:tid 17762] [client 72.146.2.23:5206] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "aetSX-hlUs6BS3Ng7_WCrQAAAMg"]
[Fri Apr 24 19:22:11.748336 2026] [:error] [pid 14531:tid 14552] [client 72.146.2.23:45068] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "aetSY3fLU2gw-6KR-GazGAAAAVM"]
[Fri Apr 24 19:22:13.903929 2026] [:error] [pid 4177:tid 4202] [client 72.146.2.23:36584] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "aetSZX2asKnvdrSe0x7anQAAAZE"]
[Fri Apr 24 19:22:14.806872 2026] [:error] [pid 17719:tid 17727] [client 72.146.2.23:34626] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aetSZsTZ9gzEyL1BkPqaEgAAAIA"]
[Fri Apr 24 19:22:15.787329 2026] [:error] [pid 17720:tid 17762] [client 72.146.2.23:36581] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aetSZ-hlUs6BS3Ng7_WCuAAAAMg"]
[Fri Apr 24 19:22:17.360190 2026] [:error] [pid 17808:tid 17812] [client 72.146.2.23:34665] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aetSaearbOEFI8qshvIb1gAAAEI"]
[Fri Apr 24 19:22:22.472920 2026] [:error] [pid 4177:tid 4192] [client 72.146.2.23:39355] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "aetSbn2asKnvdrSe0x7avgAAAYc"]
[Fri Apr 24 19:22:26.291818 2026] [:error] [pid 22114:tid 22132] [client 72.146.2.23:37342] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetScoAuWGz3WlMQjoffgAAAAQ8"]
[Fri Apr 24 19:22:28.539163 2026] [:error] [pid 14531:tid 14556] [client 72.146.2.23:36548] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetSdHfLU2gw-6KR-GazKAAAAVc"]
[Fri Apr 24 19:22:32.275443 2026] [:error] [pid 4177:tid 4195] [client 72.146.2.23:43623] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetSeH2asKnvdrSe0x7a3gAAAYo"]
[Fri Apr 24 19:22:34.382494 2026] [:error] [pid 17720:tid 17755] [client 72.146.2.23:5349] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yw5bi63u.php"] [unique_id "aetSeuhlUs6BS3Ng7_WCzAAAAME"]
[Fri Apr 24 19:22:35.856545 2026] [:error] [pid 17720:tid 17771] [client 72.146.2.23:41371] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aetSe-hlUs6BS3Ng7_WCzwAAANE"]
[Fri Apr 24 19:22:37.116042 2026] [:error] [pid 14531:tid 14552] [client 72.146.2.23:42011] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aetSfXfLU2gw-6KR-GazMgAAAVM"]
[Fri Apr 24 19:22:38.596877 2026] [:error] [pid 17719:tid 17749] [client 72.146.2.23:43597] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aetSfsTZ9gzEyL1BkPqaKgAAAJY"]
[Fri Apr 24 19:22:40.484353 2026] [:error] [pid 17808:tid 17822] [client 72.146.2.23:37354] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tool.php"] [unique_id "aetSgOarbOEFI8qshvIb6wAAAEw"]
[Fri Apr 24 19:22:44.152080 2026] [:error] [pid 4177:tid 4195] [client 72.146.2.23:58940] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aetShH2asKnvdrSe0x7bCwAAAYo"]
[Fri Apr 24 19:22:46.992883 2026] [:error] [pid 17808:tid 17817] [client 72.146.2.23:42111] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aetShuarbOEFI8qshvIb9wAAAEc"]
[Fri Apr 24 19:22:48.380538 2026] [:error] [pid 4177:tid 4209] [client 72.146.2.23:38482] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aetSiH2asKnvdrSe0x7bJAAAAZg"]
[Fri Apr 24 19:22:51.923122 2026] [:error] [pid 17721:tid 17805] [client 72.146.2.23:5680] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "aetSi-FXXkLeyDnfk_8pdAAAABg"]
[Fri Apr 24 19:22:52.851249 2026] [:error] [pid 17720:tid 17755] [client 72.146.2.23:5673] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "aetSjOhlUs6BS3Ng7_WC6QAAAME"]
[Fri Apr 24 19:23:04.265455 2026] [:error] [pid 17719:tid 17748] [client 72.146.2.23:58888] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aetSmMTZ9gzEyL1BkPqaQwAAAJU"]
[Fri Apr 24 19:23:06.184430 2026] [:error] [pid 4177:tid 4185] [client 72.146.2.23:41833] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aetSmn2asKnvdrSe0x7bXQAAAYA"]
[Fri Apr 24 19:23:10.526218 2026] [:error] [pid 17721:tid 17794] [client 72.146.2.23:35496] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aetSnuFXXkLeyDnfk_8pjAAAAA0"]
[Fri Apr 24 19:23:13.691158 2026] [:error] [pid 4177:tid 4201] [client 72.146.2.23:35493] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aetSoX2asKnvdrSe0x7bcAAAAZA"]
[Fri Apr 24 19:23:15.244593 2026] [:error] [pid 4177:tid 4198] [client 72.146.2.23:40795] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aetSo32asKnvdrSe0x7bfQAAAY0"]
[Fri Apr 24 19:23:18.944453 2026] [:error] [pid 17721:tid 17784] [client 72.146.2.23:5702] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aetSpuFXXkLeyDnfk_8plAAAAAM"]
[Fri Apr 24 19:23:23.800164 2026] [:error] [pid 17720:tid 17757] [client 72.146.2.23:34314] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aetSq-hlUs6BS3Ng7_WDLwAAAMM"]
[Fri Apr 24 19:23:26.732040 2026] [:error] [pid 17808:tid 17828] [client 72.146.2.23:44148] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "aetSruarbOEFI8qshvIcGQAAAFI"]
[Fri Apr 24 19:23:28.797895 2026] [:error] [pid 17721:tid 17793] [client 72.146.2.23:42330] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aetSsOFXXkLeyDnfk_8pmwAAAAw"]
[Fri Apr 24 19:23:31.639808 2026] [:error] [pid 17721:tid 17800] [client 72.146.2.23:5269] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aetSs-FXXkLeyDnfk_8ppAAAABM"]
[Fri Apr 24 19:23:33.549294 2026] [:error] [pid 4177:tid 4190] [client 72.146.2.23:36953] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aetStX2asKnvdrSe0x7b9QAAAYU"]
[Fri Apr 24 19:23:39.646731 2026] [:error] [pid 4177:tid 4200] [client 72.146.2.23:43778] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aetSu32asKnvdrSe0x7cLQAAAY8"]
[Fri Apr 24 19:23:46.456160 2026] [:error] [pid 17721:tid 17785] [client 72.146.2.23:5509] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-api.php"] [unique_id "aetSwuFXXkLeyDnfk_8psgAAAAQ"]
[Fri Apr 24 19:23:50.045908 2026] [:error] [pid 17719:tid 17734] [client 72.146.2.23:34697] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-api.php"] [unique_id "aetSxsTZ9gzEyL1BkPqaagAAAIc"]
[Fri Apr 24 19:23:52.181177 2026] [:error] [pid 17719:tid 17735] [client 72.146.2.23:41074] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-api.php"] [unique_id "aetSyMTZ9gzEyL1BkPqacAAAAIg"]
[Fri Apr 24 19:23:53.962228 2026] [:error] [pid 17721:tid 17790] [client 72.146.2.23:38540] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-class-api.php"] [unique_id "aetSyeFXXkLeyDnfk_8ptwAAAAk"]
[Fri Apr 24 19:23:58.972116 2026] [:error] [pid 17808:tid 17824] [client 72.146.2.23:43316] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aetSzuarbOEFI8qshvIccQAAAE4"]
[Fri Apr 24 19:24:02.935826 2026] [:error] [pid 17720:tid 17772] [client 72.146.2.23:40594] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bolt.php"] [unique_id "aetS0uhlUs6BS3Ng7_WDpQAAANI"]
[Fri Apr 24 19:37:37.843151 2026] [:error] [pid 17720:tid 17765] [client 43.157.95.131:34284] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aetWAehlUs6BS3Ng7_WJRAAAAMs"]
[Fri Apr 24 20:48:13.439446 2026] [:error] [pid 17720:tid 17777] [client 49.234.192.248:32858] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aetmjehlUs6BS3Ng7_WlMQAAANc"]
[Fri Apr 24 22:06:31.634947 2026] [:error] [pid 22114:tid 22120] [client 20.107.212.3:65055] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aet454AuWGz3WlMQjof6OAAAAQM"]
[Fri Apr 24 22:06:32.270664 2026] [:error] [pid 17808:tid 17828] [client 20.107.212.3:62407] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aet46OarbOEFI8qshvJRzAAAAFI"]
[Fri Apr 24 22:06:33.110579 2026] [:error] [pid 17808:tid 17817] [client 20.107.212.3:64981] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aet46earbOEFI8qshvJR1QAAAEc"]
[Fri Apr 24 22:06:33.748246 2026] [:error] [pid 4177:tid 4198] [client 20.107.212.3:62410] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "aet46X2asKnvdrSe0x5AAgAAAY0"]
[Fri Apr 24 22:06:34.436872 2026] [:error] [pid 4177:tid 4197] [client 20.107.212.3:65052] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj11.php"] [unique_id "aet46n2asKnvdrSe0x5AAwAAAYw"]
[Fri Apr 24 22:06:35.250029 2026] [:error] [pid 4177:tid 4199] [client 20.107.212.3:62462] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj11.php"] [unique_id "aet4632asKnvdrSe0x5ABAAAAY4"]
[Fri Apr 24 22:06:35.833829 2026] [:error] [pid 14531:tid 14547] [client 20.107.212.3:64975] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj11.php"] [unique_id "aet463fLU2gw-6KR-GbdIwAAAU4"]
[Fri Apr 24 22:06:36.635739 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:62459] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj11.php"] [unique_id "aet47OhlUs6BS3Ng7_XGUgAAAMk"]
[Fri Apr 24 22:06:37.376951 2026] [:error] [pid 4177:tid 4192] [client 20.107.212.3:62426] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "aet47X2asKnvdrSe0x5ABwAAAYc"]
[Fri Apr 24 22:06:38.034769 2026] [:error] [pid 4177:tid 4194] [client 20.107.212.3:63963] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "aet47n2asKnvdrSe0x5ACgAAAYk"]
[Fri Apr 24 22:06:38.649476 2026] [:error] [pid 4177:tid 4202] [client 20.107.212.3:60571] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "aet47n2asKnvdrSe0x5ADwAAAZE"]
[Fri Apr 24 22:06:39.509107 2026] [:error] [pid 4177:tid 4208] [client 20.107.212.3:61994] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "aet4732asKnvdrSe0x5AEwAAAZc"]
[Fri Apr 24 22:06:40.194929 2026] [:error] [pid 14531:tid 14548] [client 20.107.212.3:60594] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xroot.php"] [unique_id "aet48HfLU2gw-6KR-GbdNAAAAU8"]
[Fri Apr 24 22:06:40.747349 2026] [:error] [pid 14531:tid 14537] [client 20.107.212.3:64045] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xroot.php"] [unique_id "aet48HfLU2gw-6KR-GbdNQAAAUQ"]
[Fri Apr 24 22:06:41.448294 2026] [:error] [pid 17808:tid 17825] [client 20.107.212.3:65031] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xroot.php"] [unique_id "aet48earbOEFI8qshvJR-gAAAE8"]
[Fri Apr 24 22:06:42.044342 2026] [:error] [pid 17721:tid 17784] [client 20.107.212.3:65086] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xroot.php"] [unique_id "aet48uFXXkLeyDnfk_9N4gAAAAM"]
[Fri Apr 24 22:06:42.661572 2026] [:error] [pid 22114:tid 22124] [client 20.107.212.3:65073] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aet48oAuWGz3WlMQjof6PQAAAQc"]
[Fri Apr 24 22:06:43.260442 2026] [:error] [pid 17719:tid 17739] [client 20.107.212.3:62443] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aet488TZ9gzEyL1BkPq51AAAAIw"]
[Fri Apr 24 22:06:43.809497 2026] [:error] [pid 17719:tid 17745] [client 20.107.212.3:59395] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aet488TZ9gzEyL1BkPq51gAAAJI"]
[Fri Apr 24 22:06:44.364146 2026] [:error] [pid 4177:tid 4205] [client 20.107.212.3:61962] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "aet49H2asKnvdrSe0x5AIQAAAZQ"]
[Fri Apr 24 22:06:45.043891 2026] [:error] [pid 17719:tid 17735] [client 20.107.212.3:62453] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "aet49cTZ9gzEyL1BkPq52QAAAIg"]
[Fri Apr 24 22:06:45.621571 2026] [:error] [pid 4177:tid 4198] [client 20.107.212.3:60562] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "aet49X2asKnvdrSe0x5AJgAAAY0"]
[Fri Apr 24 22:06:46.262382 2026] [:error] [pid 17721:tid 17793] [client 20.107.212.3:62433] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "aet49uFXXkLeyDnfk_9N5gAAAAw"]
[Fri Apr 24 22:06:47.111136 2026] [:error] [pid 4177:tid 4191] [client 20.107.212.3:64033] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "aet4932asKnvdrSe0x5ALwAAAYY"]
[Fri Apr 24 22:06:47.836570 2026] [:error] [pid 17720:tid 17760] [client 20.107.212.3:63959] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aet49-hlUs6BS3Ng7_XGWwAAAMY"]
[Fri Apr 24 22:06:48.374021 2026] [:error] [pid 17720:tid 17756] [client 20.107.212.3:61970] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aet4-OhlUs6BS3Ng7_XGXgAAAMI"]
[Fri Apr 24 22:06:49.253113 2026] [:error] [pid 4177:tid 4188] [client 20.107.212.3:59407] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aet4-X2asKnvdrSe0x5AMwAAAYM"]
[Fri Apr 24 22:06:49.951517 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:61969] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aet4-ehlUs6BS3Ng7_XGZAAAAME"]
[Fri Apr 24 22:06:50.823480 2026] [:error] [pid 17720:tid 17766] [client 20.107.212.3:60546] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "aet4-uhlUs6BS3Ng7_XGagAAAMw"]
[Fri Apr 24 22:06:51.545252 2026] [:error] [pid 4177:tid 4190] [client 20.107.212.3:59445] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "aet4-32asKnvdrSe0x5ANQAAAYU"]
[Fri Apr 24 22:06:52.123507 2026] [:error] [pid 17721:tid 17783] [client 20.107.212.3:65060] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "aet4_OFXXkLeyDnfk_9N6QAAAAI"]
[Fri Apr 24 22:06:52.721635 2026] [:error] [pid 17720:tid 17767] [client 20.107.212.3:65083] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "aet4_OhlUs6BS3Ng7_XGcwAAAM0"]
[Fri Apr 24 22:06:53.256145 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:61984] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/006.php"] [unique_id "aet4_ehlUs6BS3Ng7_XGdwAAANQ"]
[Fri Apr 24 22:06:53.958810 2026] [:error] [pid 17720:tid 17772] [client 20.107.212.3:60548] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/006.php"] [unique_id "aet4_ehlUs6BS3Ng7_XGegAAANI"]
[Fri Apr 24 22:06:54.638269 2026] [:error] [pid 4177:tid 4193] [client 20.107.212.3:64032] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/006.php"] [unique_id "aet4_n2asKnvdrSe0x5ANwAAAYg"]
[Fri Apr 24 22:06:55.249155 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:62403] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/006.php"] [unique_id "aet4_-hlUs6BS3Ng7_XGgQAAANU"]
[Fri Apr 24 22:06:55.977567 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:54224] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aet4_-hlUs6BS3Ng7_XGiAAAANA"]
[Fri Apr 24 22:06:56.559060 2026] [:error] [pid 17808:tid 17826] [client 20.107.212.3:60563] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aet5AOarbOEFI8qshvJSOAAAAFA"]
[Fri Apr 24 22:06:57.144527 2026] [:error] [pid 4177:tid 4190] [client 20.107.212.3:62441] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aet5AX2asKnvdrSe0x5APAAAAYU"]
[Fri Apr 24 22:06:57.741575 2026] [:error] [pid 4177:tid 4202] [client 20.107.212.3:63988] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "aet5AX2asKnvdrSe0x5APgAAAZE"]
[Fri Apr 24 22:06:58.408428 2026] [:error] [pid 4177:tid 4207] [client 20.107.212.3:59428] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aet5An2asKnvdrSe0x5APwAAAZY"]
[Fri Apr 24 22:06:59.038279 2026] [:error] [pid 4177:tid 4208] [client 20.107.212.3:62000] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aet5A32asKnvdrSe0x5AQwAAAZc"]
[Fri Apr 24 22:06:59.792213 2026] [:error] [pid 4177:tid 4193] [client 20.107.212.3:64010] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aet5A32asKnvdrSe0x5ARwAAAYg"]
[Fri Apr 24 22:07:00.449434 2026] [:error] [pid 17721:tid 17805] [client 20.107.212.3:65084] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "aet5BOFXXkLeyDnfk_9N7QAAABg"]
[Fri Apr 24 22:07:01.120919 2026] [:error] [pid 22114:tid 22124] [client 20.107.212.3:64002] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aet5BYAuWGz3WlMQjof6TwAAAQc"]
[Fri Apr 24 22:07:01.747772 2026] [:error] [pid 22114:tid 22140] [client 20.107.212.3:59404] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aet5BYAuWGz3WlMQjof6VAAAARc"]
[Fri Apr 24 22:07:02.344872 2026] [:error] [pid 22114:tid 22134] [client 20.107.212.3:62414] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aet5BoAuWGz3WlMQjof6WAAAARE"]
[Fri Apr 24 22:07:03.026946 2026] [:error] [pid 4177:tid 4202] [client 20.107.212.3:57436] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "aet5B32asKnvdrSe0x5ATAAAAZE"]
[Fri Apr 24 22:07:04.038342 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:59429] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amxloxxr.php"] [unique_id "aet5COhlUs6BS3Ng7_XGjAAAANU"]
[Fri Apr 24 22:07:04.788643 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:65087] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amxloxxr.php"] [unique_id "aet5COhlUs6BS3Ng7_XGkgAAAME"]
[Fri Apr 24 22:07:05.426904 2026] [:error] [pid 17720:tid 17776] [client 20.107.212.3:64036] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amxloxxr.php"] [unique_id "aet5CehlUs6BS3Ng7_XGmAAAANY"]
[Fri Apr 24 22:07:06.008066 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:65028] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amxloxxr.php"] [unique_id "aet5CuhlUs6BS3Ng7_XGoAAAAMA"]
[Fri Apr 24 22:07:06.566073 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:59432] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhupyoon.php"] [unique_id "aet5CuarbOEFI8qshvJSPgAAAE4"]
[Fri Apr 24 22:07:07.095441 2026] [:error] [pid 14531:tid 14542] [client 20.107.212.3:64999] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhupyoon.php"] [unique_id "aet5C3fLU2gw-6KR-GbdQwAAAUk"]
[Fri Apr 24 22:07:07.652511 2026] [:error] [pid 14531:tid 14537] [client 20.107.212.3:62444] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhupyoon.php"] [unique_id "aet5C3fLU2gw-6KR-GbdRQAAAUQ"]
[Fri Apr 24 22:07:08.181342 2026] [:error] [pid 17721:tid 17797] [client 20.107.212.3:65037] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qhupyoon.php"] [unique_id "aet5DOFXXkLeyDnfk_9N7wAAABA"]
[Fri Apr 24 22:07:08.809543 2026] [:error] [pid 17720:tid 17766] [client 20.107.212.3:63956] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aet5DOhlUs6BS3Ng7_XGqgAAAMw"]
[Fri Apr 24 22:07:09.377682 2026] [:error] [pid 17720:tid 17760] [client 20.107.212.3:63995] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aet5DehlUs6BS3Ng7_XGqwAAAMY"]
[Fri Apr 24 22:07:09.940634 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:53644] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aet5DehlUs6BS3Ng7_XGrgAAAMA"]
[Fri Apr 24 22:07:10.532436 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:64043] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aet5DuhlUs6BS3Ng7_XGsgAAANQ"]
[Fri Apr 24 22:07:11.142717 2026] [:error] [pid 17720:tid 17777] [client 20.107.212.3:64012] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aet5D-hlUs6BS3Ng7_XGtgAAANc"]
[Fri Apr 24 22:07:11.845373 2026] [:error] [pid 4177:tid 4198] [client 20.107.212.3:60578] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aet5D32asKnvdrSe0x5AVAAAAY0"]
[Fri Apr 24 22:07:12.381857 2026] [:error] [pid 17719:tid 17742] [client 20.107.212.3:59421] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aet5EMTZ9gzEyL1BkPq55AAAAI8"]
[Fri Apr 24 22:07:13.083777 2026] [:error] [pid 17808:tid 17825] [client 20.107.212.3:60557] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "aet5EearbOEFI8qshvJSQQAAAE8"]
[Fri Apr 24 22:07:13.680639 2026] [:error] [pid 17719:tid 17730] [client 20.107.212.3:60564] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6ap7e.php"] [unique_id "aet5EcTZ9gzEyL1BkPq55gAAAIM"]
[Fri Apr 24 22:07:14.370514 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:63983] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6ap7e.php"] [unique_id "aet5EuhlUs6BS3Ng7_XGuwAAAMQ"]
[Fri Apr 24 22:07:14.949304 2026] [:error] [pid 4177:tid 4188] [client 20.107.212.3:63976] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6ap7e.php"] [unique_id "aet5En2asKnvdrSe0x5AWQAAAYM"]
[Fri Apr 24 22:07:15.481026 2026] [:error] [pid 17808:tid 17827] [client 20.107.212.3:64034] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6ap7e.php"] [unique_id "aet5E-arbOEFI8qshvJSRQAAAFE"]
[Fri Apr 24 22:07:16.162666 2026] [:error] [pid 17808:tid 17833] [client 20.107.212.3:65044] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aet5FOarbOEFI8qshvJSRwAAAFc"]
[Fri Apr 24 22:07:16.999690 2026] [:error] [pid 17720:tid 17778] [client 20.107.212.3:60590] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aet5FOhlUs6BS3Ng7_XGvQAAANg"]
[Fri Apr 24 22:07:17.590881 2026] [:error] [pid 17720:tid 17765] [client 20.107.212.3:65006] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aet5FehlUs6BS3Ng7_XGvwAAAMs"]
[Fri Apr 24 22:07:18.152028 2026] [:error] [pid 4177:tid 4191] [client 20.107.212.3:61978] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "aet5Fn2asKnvdrSe0x5AXwAAAYY"]
[Fri Apr 24 22:07:18.769101 2026] [:error] [pid 22114:tid 22122] [client 20.107.212.3:60599] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aet5FoAuWGz3WlMQjof6kgAAAQU"]
[Fri Apr 24 22:07:19.330545 2026] [:error] [pid 17719:tid 17731] [client 20.107.212.3:62405] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aet5F8TZ9gzEyL1BkPq57QAAAIQ"]
[Fri Apr 24 22:07:19.850891 2026] [:error] [pid 22114:tid 22125] [client 20.107.212.3:60606] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aet5F4AuWGz3WlMQjof6lwAAAQg"]
[Fri Apr 24 22:07:20.582433 2026] [:error] [pid 17721:tid 17803] [client 20.107.212.3:63944] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/link.php"] [unique_id "aet5GOFXXkLeyDnfk_9N8wAAABY"]
[Fri Apr 24 22:07:21.304069 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:64979] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aet5GehlUs6BS3Ng7_XGwgAAAMU"]
[Fri Apr 24 22:07:21.866576 2026] [:error] [pid 17720:tid 17767] [client 20.107.212.3:57411] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aet5GehlUs6BS3Ng7_XGxAAAAM0"]
[Fri Apr 24 22:07:23.212660 2026] [:error] [pid 4177:tid 4201] [client 20.107.212.3:62001] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aet5G32asKnvdrSe0x5AaAAAAZA"]
[Fri Apr 24 22:07:24.241136 2026] [:error] [pid 17721:tid 17798] [client 20.107.212.3:60587] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "aet5HOFXXkLeyDnfk_9N9gAAABE"]
[Fri Apr 24 22:07:24.833778 2026] [:error] [pid 17808:tid 17813] [client 20.107.212.3:62442] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zogy1.php"] [unique_id "aet5HOarbOEFI8qshvJSTwAAAEM"]
[Fri Apr 24 22:07:25.557530 2026] [:error] [pid 17721:tid 17789] [client 20.107.212.3:59446] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zogy1.php"] [unique_id "aet5HeFXXkLeyDnfk_9N-AAAAAg"]
[Fri Apr 24 22:07:26.167989 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:57441] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zogy1.php"] [unique_id "aet5HuhlUs6BS3Ng7_XG0AAAAMk"]
[Fri Apr 24 22:07:26.669387 2026] [:error] [pid 17719:tid 17736] [client 20.107.212.3:61993] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zogy1.php"] [unique_id "aet5HsTZ9gzEyL1BkPq59AAAAIk"]
[Fri Apr 24 22:07:27.216927 2026] [:error] [pid 17719:tid 17740] [client 20.107.212.3:62008] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "aet5H8TZ9gzEyL1BkPq59QAAAI0"]
[Fri Apr 24 22:07:27.934027 2026] [:error] [pid 22114:tid 22130] [client 20.107.212.3:53650] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "aet5H4AuWGz3WlMQjof6swAAAQ0"]
[Fri Apr 24 22:07:28.471069 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:62428] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "aet5IOhlUs6BS3Ng7_XG2QAAAMU"]
[Fri Apr 24 22:07:29.058719 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:65069] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "aet5IehlUs6BS3Ng7_XG2gAAAME"]
[Fri Apr 24 22:07:29.570983 2026] [:error] [pid 17720:tid 17772] [client 20.107.212.3:65080] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "aet5IehlUs6BS3Ng7_XG3AAAANI"]
[Fri Apr 24 22:07:30.116022 2026] [:error] [pid 17808:tid 17832] [client 20.107.212.3:65069] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "aet5IuarbOEFI8qshvJSWgAAAFY"]
[Fri Apr 24 22:07:30.732823 2026] [:error] [pid 17720:tid 17767] [client 20.107.212.3:63957] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "aet5IuhlUs6BS3Ng7_XG4gAAAM0"]
[Fri Apr 24 22:07:39.475944 2026] [:error] [pid 17720:tid 17772] [client 20.107.212.3:63981] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axe.php"] [unique_id "aet5K-hlUs6BS3Ng7_XHGAAAANI"]
[Fri Apr 24 22:07:40.262845 2026] [:error] [pid 4177:tid 4185] [client 20.107.212.3:61953] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axe.php"] [unique_id "aet5LH2asKnvdrSe0x5AeQAAAYA"]
[Fri Apr 24 22:07:40.873201 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:64013] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axe.php"] [unique_id "aet5LOarbOEFI8qshvJSYAAAAE4"]
[Fri Apr 24 22:07:41.495094 2026] [:error] [pid 17808:tid 17820] [client 20.107.212.3:61968] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axe.php"] [unique_id "aet5LearbOEFI8qshvJSYwAAAEo"]
[Fri Apr 24 22:07:42.181856 2026] [:error] [pid 17808:tid 17826] [client 20.107.212.3:60595] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index0.php"] [unique_id "aet5LuarbOEFI8qshvJSZwAAAFA"]
[Fri Apr 24 22:07:42.758272 2026] [:error] [pid 4177:tid 4207] [client 20.107.212.3:63947] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index0.php"] [unique_id "aet5Ln2asKnvdrSe0x5AewAAAZY"]
[Fri Apr 24 22:07:43.478162 2026] [:error] [pid 17719:tid 17741] [client 20.107.212.3:59435] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index0.php"] [unique_id "aet5L8TZ9gzEyL1BkPq5_wAAAI4"]
[Fri Apr 24 22:07:44.107163 2026] [:error] [pid 17808:tid 17810] [client 20.107.212.3:64006] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index0.php"] [unique_id "aet5MOarbOEFI8qshvJScAAAAEA"]
[Fri Apr 24 22:07:44.843860 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:64995] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-01ul.php"] [unique_id "aet5MOhlUs6BS3Ng7_XHGwAAAMQ"]
[Fri Apr 24 22:07:45.381438 2026] [:error] [pid 17720:tid 17777] [client 20.107.212.3:60600] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-01ul.php"] [unique_id "aet5MehlUs6BS3Ng7_XHHQAAANc"]
[Fri Apr 24 22:07:45.902149 2026] [:error] [pid 4177:tid 4206] [client 20.107.212.3:59434] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-01ul.php"] [unique_id "aet5MX2asKnvdrSe0x5AfwAAAZU"]
[Fri Apr 24 22:07:46.559435 2026] [:error] [pid 17721:tid 17789] [client 20.107.212.3:63967] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-01ul.php"] [unique_id "aet5MuFXXkLeyDnfk_9OAgAAAAg"]
[Fri Apr 24 22:07:47.141709 2026] [:error] [pid 17720:tid 17764] [client 20.107.212.3:59411] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aet5M-hlUs6BS3Ng7_XHIwAAAMo"]
[Fri Apr 24 22:07:47.767223 2026] [:error] [pid 22114:tid 22128] [client 20.107.212.3:63939] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aet5M4AuWGz3WlMQjof60gAAAQs"]
[Fri Apr 24 22:07:48.397281 2026] [:error] [pid 17721:tid 17802] [client 20.107.212.3:63999] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aet5NOFXXkLeyDnfk_9OBwAAABU"]
[Fri Apr 24 22:07:49.088134 2026] [:error] [pid 14531:tid 14549] [client 20.107.212.3:65016] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/e3.php"] [unique_id "aet5NXfLU2gw-6KR-GbdYwAAAVA"]
[Fri Apr 24 22:07:49.870528 2026] [:error] [pid 17720:tid 17768] [client 20.107.212.3:59438] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fkohd.php"] [unique_id "aet5NehlUs6BS3Ng7_XHJgAAAM4"]
[Fri Apr 24 22:07:50.477590 2026] [:error] [pid 17808:tid 17823] [client 20.107.212.3:61956] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fkohd.php"] [unique_id "aet5NuarbOEFI8qshvJSfQAAAE0"]
[Fri Apr 24 22:07:51.084103 2026] [:error] [pid 22114:tid 22129] [client 20.107.212.3:62401] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fkohd.php"] [unique_id "aet5N4AuWGz3WlMQjof61QAAAQw"]
[Fri Apr 24 22:07:51.759415 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:59434] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fkohd.php"] [unique_id "aet5N-arbOEFI8qshvJShgAAAE4"]
[Fri Apr 24 22:07:52.354520 2026] [:error] [pid 17808:tid 17812] [client 20.107.212.3:59406] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "aet5OOarbOEFI8qshvJSiQAAAEI"]
[Fri Apr 24 22:07:52.911753 2026] [:error] [pid 4177:tid 4189] [client 20.107.212.3:65002] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "aet5OH2asKnvdrSe0x5AgAAAAYQ"]
[Fri Apr 24 22:07:53.472180 2026] [:error] [pid 17719:tid 17727] [client 20.107.212.3:52391] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "aet5OcTZ9gzEyL1BkPq6AgAAAIA"]
[Fri Apr 24 22:07:54.111210 2026] [:error] [pid 17720:tid 17769] [client 20.107.212.3:62402] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "aet5OuhlUs6BS3Ng7_XHKwAAAM8"]
[Fri Apr 24 22:07:54.654873 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:64030] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aet5OuhlUs6BS3Ng7_XHLgAAAME"]
[Fri Apr 24 22:07:55.247873 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:56778] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aet5O-hlUs6BS3Ng7_XHMQAAANU"]
[Fri Apr 24 22:07:55.825406 2026] [:error] [pid 4177:tid 4194] [client 20.107.212.3:53664] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aet5O32asKnvdrSe0x5AiQAAAYk"]
[Fri Apr 24 22:07:56.390597 2026] [:error] [pid 17721:tid 17783] [client 20.107.212.3:57408] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "aet5POFXXkLeyDnfk_9OCwAAAAI"]
[Fri Apr 24 22:07:56.965335 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:62417] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zo.php"] [unique_id "aet5POhlUs6BS3Ng7_XHNgAAAMk"]
[Fri Apr 24 22:07:57.627571 2026] [:error] [pid 22114:tid 22127] [client 20.107.212.3:65035] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zo.php"] [unique_id "aet5PYAuWGz3WlMQjof62gAAAQo"]
[Fri Apr 24 22:07:58.193049 2026] [:error] [pid 17721:tid 17798] [client 20.107.212.3:52375] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zo.php"] [unique_id "aet5PuFXXkLeyDnfk_9ODgAAABE"]
[Fri Apr 24 22:07:58.733457 2026] [:error] [pid 17721:tid 17789] [client 20.107.212.3:62418] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zo.php"] [unique_id "aet5PuFXXkLeyDnfk_9OEAAAAAg"]
[Fri Apr 24 22:07:59.331215 2026] [:error] [pid 17719:tid 17746] [client 20.107.212.3:57469] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aet5P8TZ9gzEyL1BkPq6CAAAAJM"]
[Fri Apr 24 22:07:59.863808 2026] [:error] [pid 22114:tid 22137] [client 20.107.212.3:63979] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aet5P4AuWGz3WlMQjof63QAAARQ"]
[Fri Apr 24 22:08:00.392219 2026] [:error] [pid 17808:tid 17826] [client 20.107.212.3:60589] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aet5QOarbOEFI8qshvJSkwAAAFA"]
[Fri Apr 24 22:08:00.965912 2026] [:error] [pid 17808:tid 17825] [client 20.107.212.3:62418] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "aet5QOarbOEFI8qshvJSlgAAAE8"]
[Fri Apr 24 22:08:01.475391 2026] [:error] [pid 17721:tid 17805] [client 20.107.212.3:63991] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/masks.php"] [unique_id "aet5QeFXXkLeyDnfk_9OEwAAABg"]
[Fri Apr 24 22:08:02.066354 2026] [:error] [pid 17720:tid 17771] [client 20.107.212.3:59400] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/masks.php"] [unique_id "aet5QuhlUs6BS3Ng7_XHOgAAANE"]
[Fri Apr 24 22:08:02.673360 2026] [:error] [pid 17720:tid 17769] [client 20.107.212.3:63968] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/masks.php"] [unique_id "aet5QuhlUs6BS3Ng7_XHOwAAAM8"]
[Fri Apr 24 22:08:03.365340 2026] [:error] [pid 22114:tid 22124] [client 20.107.212.3:63961] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/masks.php"] [unique_id "aet5Q4AuWGz3WlMQjof64QAAAQc"]
[Fri Apr 24 22:08:04.004860 2026] [:error] [pid 17719:tid 17728] [client 20.107.212.3:63986] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aet5RMTZ9gzEyL1BkPq6DwAAAIE"]
[Fri Apr 24 22:08:04.561413 2026] [:error] [pid 17808:tid 17815] [client 20.107.212.3:56812] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aet5ROarbOEFI8qshvJSlwAAAEU"]
[Fri Apr 24 22:08:05.166963 2026] [:error] [pid 22114:tid 22130] [client 20.107.212.3:63977] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aet5RYAuWGz3WlMQjof64gAAAQ0"]
[Fri Apr 24 22:08:05.735898 2026] [:error] [pid 17719:tid 17742] [client 20.107.212.3:65042] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "aet5RcTZ9gzEyL1BkPq6EQAAAI8"]
[Fri Apr 24 22:08:06.322937 2026] [:error] [pid 14531:tid 14533] [client 20.107.212.3:63969] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "aet5RnfLU2gw-6KR-GbdbQAAAUA"]
[Fri Apr 24 22:08:06.902988 2026] [:error] [pid 14531:tid 14538] [client 20.107.212.3:59453] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "aet5RnfLU2gw-6KR-GbdcAAAAUU"]
[Fri Apr 24 22:08:07.471753 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:59417] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "aet5R-hlUs6BS3Ng7_XHQAAAANA"]
[Fri Apr 24 22:08:08.046629 2026] [:error] [pid 17721:tid 17805] [client 20.107.212.3:64027] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "aet5SOFXXkLeyDnfk_9OJQAAABg"]
[Fri Apr 24 22:08:08.611841 2026] [:error] [pid 14531:tid 14535] [client 20.107.212.3:59425] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aet5SHfLU2gw-6KR-GbdeAAAAUI"]
[Fri Apr 24 22:08:09.318941 2026] [:error] [pid 14531:tid 14541] [client 20.107.212.3:53673] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aet5SXfLU2gw-6KR-GbdfwAAAUg"]
[Fri Apr 24 22:08:09.937361 2026] [:error] [pid 17720:tid 17769] [client 20.107.212.3:61965] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aet5SehlUs6BS3Ng7_XHRQAAAM8"]
[Fri Apr 24 22:08:10.519714 2026] [:error] [pid 4177:tid 4192] [client 20.107.212.3:59443] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aet5Sn2asKnvdrSe0x5AwgAAAYc"]
[Fri Apr 24 22:08:11.071625 2026] [:error] [pid 17721:tid 17793] [client 20.107.212.3:61971] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "aet5S-FXXkLeyDnfk_9OKwAAAAw"]
[Fri Apr 24 22:08:11.744522 2026] [:error] [pid 4177:tid 4185] [client 20.107.212.3:64062] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "aet5S32asKnvdrSe0x5AygAAAYA"]
[Fri Apr 24 22:08:12.405331 2026] [:error] [pid 14531:tid 14544] [client 20.107.212.3:64005] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "aet5THfLU2gw-6KR-GbdhwAAAUs"]
[Fri Apr 24 22:08:12.974313 2026] [:error] [pid 17721:tid 17783] [client 20.107.212.3:63964] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "aet5TOFXXkLeyDnfk_9OLwAAAAI"]
[Fri Apr 24 22:08:13.572787 2026] [:error] [pid 17808:tid 17820] [client 20.107.212.3:64023] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpconf.php"] [unique_id "aet5TearbOEFI8qshvJSngAAAEo"]
[Fri Apr 24 22:08:14.246021 2026] [:error] [pid 17719:tid 17727] [client 20.107.212.3:62014] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpconf.php"] [unique_id "aet5TsTZ9gzEyL1BkPq6FgAAAIA"]
[Fri Apr 24 22:08:15.093462 2026] [:error] [pid 22114:tid 22141] [client 20.107.212.3:65050] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpconf.php"] [unique_id "aet5T4AuWGz3WlMQjof65wAAARg"]
[Fri Apr 24 22:08:16.886398 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:64004] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpconf.php"] [unique_id "aet5UOhlUs6BS3Ng7_XHTwAAAMQ"]
[Fri Apr 24 22:08:31.324833 2026] [:error] [pid 17721:tid 17789] [client 20.107.212.3:65012] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aet5X-FXXkLeyDnfk_9ORAAAAAg"]
[Fri Apr 24 22:08:32.005044 2026] [:error] [pid 17721:tid 17782] [client 20.107.212.3:59427] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "aet5YOFXXkLeyDnfk_9OSgAAAAE"]
[Fri Apr 24 22:08:32.645382 2026] [:error] [pid 17720:tid 17764] [client 20.107.212.3:51742] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-zx.php"] [unique_id "aet5YOhlUs6BS3Ng7_XHYAAAAMo"]
[Fri Apr 24 22:08:33.262423 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:56775] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-zx.php"] [unique_id "aet5YehlUs6BS3Ng7_XHYwAAAMg"]
[Fri Apr 24 22:08:33.889710 2026] [:error] [pid 17721:tid 17795] [client 20.107.212.3:59424] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-zx.php"] [unique_id "aet5YeFXXkLeyDnfk_9OTQAAAA4"]
[Fri Apr 24 22:08:34.762521 2026] [:error] [pid 17720:tid 17761] [client 20.107.212.3:63946] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-zx.php"] [unique_id "aet5YuhlUs6BS3Ng7_XHaAAAAMc"]
[Fri Apr 24 22:08:35.469135 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:52376] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aet5Y-hlUs6BS3Ng7_XHbQAAAMA"]
[Fri Apr 24 22:08:36.591154 2026] [:error] [pid 17808:tid 17810] [client 20.107.212.3:53688] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aet5ZOarbOEFI8qshvJSsgAAAEA"]
[Fri Apr 24 22:08:37.369997 2026] [:error] [pid 17808:tid 17815] [client 20.107.212.3:64968] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aet5ZearbOEFI8qshvJStAAAAEU"]
[Fri Apr 24 22:08:38.213014 2026] [:error] [pid 17720:tid 17764] [client 20.107.212.3:53685] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "aet5ZuhlUs6BS3Ng7_XHcgAAAMo"]
[Fri Apr 24 22:08:38.803139 2026] [:error] [pid 17721:tid 17800] [client 20.107.212.3:64991] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mar.php"] [unique_id "aet5ZuFXXkLeyDnfk_9OWwAAABM"]
[Fri Apr 24 22:08:49.897215 2026] [:error] [pid 17721:tid 17799] [client 20.107.212.3:64966] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aet5ceFXXkLeyDnfk_9OegAAABI"]
[Fri Apr 24 22:08:50.604427 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:65058] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aet5cuhlUs6BS3Ng7_XHmQAAANQ"]
[Fri Apr 24 22:08:51.316820 2026] [:error] [pid 17719:tid 17729] [client 20.107.212.3:63951] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aet5c8TZ9gzEyL1BkPq6KgAAAII"]
[Fri Apr 24 22:08:52.219550 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:60585] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Sanskrit.php"] [unique_id "aet5dOhlUs6BS3Ng7_XHoQAAAME"]
[Fri Apr 24 22:08:53.062730 2026] [:error] [pid 17720:tid 17777] [client 20.107.212.3:64058] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bbny.php"] [unique_id "aet5dehlUs6BS3Ng7_XHpAAAANc"]
[Fri Apr 24 22:08:53.631416 2026] [:error] [pid 17720:tid 17761] [client 20.107.212.3:62447] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bbny.php"] [unique_id "aet5dehlUs6BS3Ng7_XHqwAAAMc"]
[Fri Apr 24 22:08:54.722783 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:56787] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bbny.php"] [unique_id "aet5duhlUs6BS3Ng7_XHtwAAANQ"]
[Fri Apr 24 22:08:55.325428 2026] [:error] [pid 17720:tid 17776] [client 20.107.212.3:64990] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bbny.php"] [unique_id "aet5d-hlUs6BS3Ng7_XHuQAAANY"]
[Fri Apr 24 22:08:56.004990 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:63996] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aet5eOhlUs6BS3Ng7_XHvgAAAMU"]
[Fri Apr 24 22:08:56.638704 2026] [:error] [pid 17720:tid 17777] [client 20.107.212.3:57414] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aet5eOhlUs6BS3Ng7_XHxAAAANc"]
[Fri Apr 24 22:08:57.250244 2026] [:error] [pid 17720:tid 17764] [client 20.107.212.3:59405] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aet5eehlUs6BS3Ng7_XHyQAAAMo"]
[Fri Apr 24 22:08:57.895420 2026] [:error] [pid 17720:tid 17767] [client 20.107.212.3:64998] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ggb.php"] [unique_id "aet5eehlUs6BS3Ng7_XHzAAAAM0"]
[Fri Apr 24 22:08:58.450976 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:62413] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zhw.php"] [unique_id "aet5euhlUs6BS3Ng7_XHzwAAAME"]
[Fri Apr 24 22:08:59.121177 2026] [:error] [pid 17720:tid 17766] [client 20.107.212.3:65041] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zhw.php"] [unique_id "aet5e-hlUs6BS3Ng7_XH1AAAAMw"]
[Fri Apr 24 22:08:59.701505 2026] [:error] [pid 17808:tid 17830] [client 20.107.212.3:53652] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zhw.php"] [unique_id "aet5e-arbOEFI8qshvJSzAAAAFQ"]
[Fri Apr 24 22:09:00.273538 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:65024] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zhw.php"] [unique_id "aet5fOhlUs6BS3Ng7_XH1wAAANA"]
[Fri Apr 24 22:09:00.892182 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:63937] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "aet5fOhlUs6BS3Ng7_XH2gAAAMg"]
[Fri Apr 24 22:09:01.471133 2026] [:error] [pid 17808:tid 17811] [client 20.107.212.3:65046] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "aet5fearbOEFI8qshvJSzwAAAEE"]
[Fri Apr 24 22:09:02.292899 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:63966] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "aet5fuhlUs6BS3Ng7_XH4wAAAMk"]
[Fri Apr 24 22:09:03.791098 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:60602] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "aet5f-hlUs6BS3Ng7_XH7QAAAME"]
[Fri Apr 24 22:09:05.118075 2026] [:error] [pid 17720:tid 17766] [client 20.107.212.3:63955] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "aet5gehlUs6BS3Ng7_XH-gAAAMw"]
[Fri Apr 24 22:09:05.943589 2026] [:error] [pid 17720:tid 17768] [client 20.107.212.3:61995] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "aet5gehlUs6BS3Ng7_XIBQAAAM4"]
[Fri Apr 24 22:09:06.701120 2026] [:error] [pid 4177:tid 4196] [client 20.107.212.3:64004] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "aet5gn2asKnvdrSe0x5BJAAAAYs"]
[Fri Apr 24 22:09:07.315759 2026] [:error] [pid 14531:tid 14544] [client 20.107.212.3:64059] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "aet5g3fLU2gw-6KR-GbdzwAAAUs"]
[Fri Apr 24 22:09:07.925483 2026] [:error] [pid 17720:tid 17777] [client 20.107.212.3:61989] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aet5g-hlUs6BS3Ng7_XICQAAANc"]
[Fri Apr 24 22:09:08.619074 2026] [:error] [pid 4177:tid 4191] [client 20.107.212.3:59436] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aet5hH2asKnvdrSe0x5BKgAAAYY"]
[Fri Apr 24 22:09:09.655703 2026] [:error] [pid 17808:tid 17830] [client 20.107.212.3:65072] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aet5hearbOEFI8qshvJS2wAAAFQ"]
[Fri Apr 24 22:09:10.480871 2026] [:error] [pid 14531:tid 14539] [client 20.107.212.3:64017] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "aet5hnfLU2gw-6KR-Gbd0gAAAUY"]
[Fri Apr 24 22:09:11.260607 2026] [:error] [pid 22114:tid 22139] [client 20.107.212.3:62422] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knw.php"] [unique_id "aet5h4AuWGz3WlMQjof6_QAAARY"]
[Fri Apr 24 22:09:11.904129 2026] [:error] [pid 22114:tid 22131] [client 20.107.212.3:65057] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knw.php"] [unique_id "aet5h4AuWGz3WlMQjof6_wAAAQ4"]
[Fri Apr 24 22:09:12.486384 2026] [:error] [pid 14531:tid 14533] [client 20.107.212.3:59412] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knw.php"] [unique_id "aet5iHfLU2gw-6KR-Gbd2QAAAUA"]
[Fri Apr 24 22:09:13.187120 2026] [:error] [pid 17808:tid 17826] [client 20.107.212.3:60601] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knw.php"] [unique_id "aet5iearbOEFI8qshvJS4gAAAFA"]
[Fri Apr 24 22:09:13.856658 2026] [:error] [pid 14531:tid 14555] [client 20.107.212.3:61975] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aet5iXfLU2gw-6KR-Gbd4gAAAVY"]
[Fri Apr 24 22:09:14.419941 2026] [:error] [pid 14531:tid 14539] [client 20.107.212.3:54241] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aet5infLU2gw-6KR-Gbd6QAAAUY"]
[Fri Apr 24 22:09:14.955512 2026] [:error] [pid 14531:tid 14535] [client 20.107.212.3:59414] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aet5infLU2gw-6KR-Gbd7gAAAUI"]
[Fri Apr 24 22:09:15.562148 2026] [:error] [pid 14531:tid 14554] [client 20.107.212.3:64042] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "aet5i3fLU2gw-6KR-Gbd8gAAAVU"]
[Fri Apr 24 22:09:16.105478 2026] [:error] [pid 17721:tid 17794] [client 20.107.212.3:64047] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "aet5jOFXXkLeyDnfk_9OhQAAAA0"]
[Fri Apr 24 22:09:17.984247 2026] [:error] [pid 14531:tid 14545] [client 20.107.212.3:64971] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "aet5jXfLU2gw-6KR-Gbd_wAAAUw"]
[Fri Apr 24 22:09:18.627028 2026] [:error] [pid 17720:tid 17773] [client 20.107.212.3:45600] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "aet5juhlUs6BS3Ng7_XIHgAAANM"]
[Fri Apr 24 22:09:19.242216 2026] [:error] [pid 17808:tid 17812] [client 20.107.212.3:65019] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "aet5j-arbOEFI8qshvJS5gAAAEI"]
[Fri Apr 24 22:09:19.844182 2026] [:error] [pid 17721:tid 17800] [client 20.107.212.3:65063] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aet5j-FXXkLeyDnfk_9OkgAAABM"]
[Fri Apr 24 22:09:20.469552 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:56799] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aet5kOhlUs6BS3Ng7_XIJwAAANA"]
[Fri Apr 24 22:09:21.330203 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:61967] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aet5kehlUs6BS3Ng7_XIKgAAAMg"]
[Fri Apr 24 22:09:21.920421 2026] [:error] [pid 4177:tid 4189] [client 20.107.212.3:59403] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aet5kX2asKnvdrSe0x5BOQAAAYQ"]
[Fri Apr 24 22:09:22.705438 2026] [:error] [pid 4177:tid 4203] [client 20.107.212.3:59449] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tiroto.php"] [unique_id "aet5kn2asKnvdrSe0x5BPQAAAZI"]
[Fri Apr 24 22:09:23.267376 2026] [:error] [pid 14531:tid 14538] [client 20.107.212.3:59408] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tiroto.php"] [unique_id "aet5k3fLU2gw-6KR-GbeBwAAAUU"]
[Fri Apr 24 22:09:24.073506 2026] [:error] [pid 14531:tid 14535] [client 20.107.212.3:63982] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tiroto.php"] [unique_id "aet5lHfLU2gw-6KR-GbeCgAAAUI"]
[Fri Apr 24 22:09:24.878999 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:64039] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tiroto.php"] [unique_id "aet5lOhlUs6BS3Ng7_XILgAAAMU"]
[Fri Apr 24 22:09:25.514041 2026] [:error] [pid 17720:tid 17772] [client 20.107.212.3:63945] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son.php"] [unique_id "aet5lehlUs6BS3Ng7_XILwAAANI"]
[Fri Apr 24 22:09:26.153044 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:61990] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son.php"] [unique_id "aet5luhlUs6BS3Ng7_XIMwAAANQ"]
[Fri Apr 24 22:09:26.752040 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:60549] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son.php"] [unique_id "aet5luhlUs6BS3Ng7_XIOAAAAMk"]
[Fri Apr 24 22:09:27.330543 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:65030] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son.php"] [unique_id "aet5l-hlUs6BS3Ng7_XIPQAAANQ"]
[Fri Apr 24 22:09:27.913481 2026] [:error] [pid 4177:tid 4201] [client 20.107.212.3:65066] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/99.php"] [unique_id "aet5l32asKnvdrSe0x5BRQAAAZA"]
[Fri Apr 24 22:09:28.488365 2026] [:error] [pid 4177:tid 4193] [client 20.107.212.3:62423] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/99.php"] [unique_id "aet5mH2asKnvdrSe0x5BRwAAAYg"]
[Fri Apr 24 22:09:29.140948 2026] [:error] [pid 17719:tid 17739] [client 20.107.212.3:64984] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/99.php"] [unique_id "aet5mcTZ9gzEyL1BkPq6PwAAAIw"]
[Fri Apr 24 22:09:29.702931 2026] [:error] [pid 17721:tid 17804] [client 20.107.212.3:65032] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/99.php"] [unique_id "aet5meFXXkLeyDnfk_9OmwAAABc"]
[Fri Apr 24 22:09:30.322586 2026] [:error] [pid 17719:tid 17727] [client 20.107.212.3:65039] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aet5msTZ9gzEyL1BkPq6QgAAAIA"]
[Fri Apr 24 22:09:30.853431 2026] [:error] [pid 17808:tid 17810] [client 20.107.212.3:63990] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aet5muarbOEFI8qshvJS7gAAAEA"]
[Fri Apr 24 22:09:31.381075 2026] [:error] [pid 4177:tid 4201] [client 20.107.212.3:62430] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aet5m32asKnvdrSe0x5BUQAAAZA"]
[Fri Apr 24 22:09:31.963438 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:62452] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "aet5m-hlUs6BS3Ng7_XIRwAAANA"]
[Fri Apr 24 22:09:32.545279 2026] [:error] [pid 4177:tid 4198] [client 20.107.212.3:60572] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filefuns.php"] [unique_id "aet5nH2asKnvdrSe0x5BWAAAAY0"]
[Fri Apr 24 22:09:33.157899 2026] [:error] [pid 17721:tid 17805] [client 20.107.212.3:63948] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filefuns.php"] [unique_id "aet5neFXXkLeyDnfk_9OogAAABg"]
[Fri Apr 24 22:09:33.979784 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:64967] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filefuns.php"] [unique_id "aet5nehlUs6BS3Ng7_XISgAAAMA"]
[Fri Apr 24 22:09:34.566073 2026] [:error] [pid 17720:tid 17768] [client 20.107.212.3:60603] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filefuns.php"] [unique_id "aet5nuhlUs6BS3Ng7_XITQAAAM4"]
[Fri Apr 24 22:09:35.255021 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:53651] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "aet5n-hlUs6BS3Ng7_XIVQAAAME"]
[Fri Apr 24 22:09:35.872399 2026] [:error] [pid 17808:tid 17822] [client 20.107.212.3:56769] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "aet5n-arbOEFI8qshvJS9AAAAEw"]
[Fri Apr 24 22:09:36.969875 2026] [:error] [pid 17808:tid 17830] [client 20.107.212.3:60593] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "aet5oOarbOEFI8qshvJS-AAAAFQ"]
[Fri Apr 24 22:09:37.564600 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:62461] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "aet5oehlUs6BS3Ng7_XIWQAAANU"]
[Fri Apr 24 22:09:38.205526 2026] [:error] [pid 17808:tid 17831] [client 20.107.212.3:62427] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "aet5ouarbOEFI8qshvJS-gAAAFU"]
[Fri Apr 24 22:09:38.787943 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:64022] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "aet5ouhlUs6BS3Ng7_XIXgAAAMU"]
[Fri Apr 24 22:09:39.309489 2026] [:error] [pid 17720:tid 17760] [client 20.107.212.3:64044] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "aet5o-hlUs6BS3Ng7_XIYgAAAMY"]
[Fri Apr 24 22:09:39.985990 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:63962] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "aet5o-hlUs6BS3Ng7_XIawAAANU"]
[Fri Apr 24 22:09:40.585901 2026] [:error] [pid 4177:tid 4203] [client 20.107.212.3:61959] [client 20.107.212.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aet5pH2asKnvdrSe0x5BYgAAAZI"]
[Fri Apr 24 22:09:41.211834 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:52385] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aet5pehlUs6BS3Ng7_XIcgAAAMQ"]
[Fri Apr 24 22:09:41.921304 2026] [:error] [pid 17808:tid 17822] [client 20.107.212.3:60597] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aet5pearbOEFI8qshvJTAQAAAEw"]
[Fri Apr 24 22:09:42.472887 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:62429] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aet5puhlUs6BS3Ng7_XIegAAAME"]
[Fri Apr 24 22:09:42.989061 2026] [:error] [pid 17808:tid 17818] [client 20.107.212.3:57423] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "aet5puarbOEFI8qshvJTAwAAAEg"]
[Fri Apr 24 22:09:43.526623 2026] [:error] [pid 17720:tid 17765] [client 20.107.212.3:65022] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aet5p-hlUs6BS3Ng7_XIfwAAAMs"]
[Fri Apr 24 22:09:44.134559 2026] [:error] [pid 17720:tid 17776] [client 20.107.212.3:65000] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aet5qOhlUs6BS3Ng7_XIgQAAANY"]
[Fri Apr 24 22:09:44.757200 2026] [:error] [pid 17808:tid 17816] [client 20.107.212.3:62011] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aet5qOarbOEFI8qshvJTBQAAAEY"]
[Fri Apr 24 22:09:45.432144 2026] [:error] [pid 17720:tid 17765] [client 20.107.212.3:65047] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "aet5qehlUs6BS3Ng7_XIjQAAAMs"]
[Fri Apr 24 22:09:46.085220 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:53672] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aet5quhlUs6BS3Ng7_XIkAAAANU"]
[Fri Apr 24 22:09:46.658403 2026] [:error] [pid 4177:tid 4203] [client 20.107.212.3:54212] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aet5qn2asKnvdrSe0x5BcQAAAZI"]
[Fri Apr 24 22:09:47.348124 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:62450] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aet5q-arbOEFI8qshvJTCgAAAE4"]
[Fri Apr 24 22:09:47.882921 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:60586] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "aet5q-hlUs6BS3Ng7_XImQAAANQ"]
[Fri Apr 24 22:09:48.517667 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:60598] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-kikikoko.php"] [unique_id "aet5rOhlUs6BS3Ng7_XInAAAAMg"]
[Fri Apr 24 22:09:58.067884 2026] [:error] [pid 4177:tid 4192] [client 20.107.212.3:63942] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aet5tn2asKnvdrSe0x5BmwAAAYc"]
[Fri Apr 24 22:09:58.611056 2026] [:error] [pid 17808:tid 17814] [client 20.107.212.3:56776] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aet5tuarbOEFI8qshvJTHQAAAEQ"]
[Fri Apr 24 22:09:59.378147 2026] [:error] [pid 17808:tid 17819] [client 20.107.212.3:62451] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aet5t-arbOEFI8qshvJTIQAAAEk"]
[Fri Apr 24 22:10:00.517609 2026] [:error] [pid 17719:tid 17748] [client 20.107.212.3:62408] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "aet5uMTZ9gzEyL1BkPq6RgAAAJU"]
[Fri Apr 24 22:10:01.057724 2026] [:error] [pid 14531:tid 14536] [client 20.107.212.3:65034] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aet5uXfLU2gw-6KR-GbeKAAAAUM"]
[Fri Apr 24 22:10:01.684994 2026] [:error] [pid 4177:tid 4205] [client 20.107.212.3:64996] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aet5uX2asKnvdrSe0x5BnAAAAZQ"]
[Fri Apr 24 22:10:02.578007 2026] [:error] [pid 4177:tid 4201] [client 20.107.212.3:60582] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aet5un2asKnvdrSe0x5BowAAAZA"]
[Fri Apr 24 22:10:03.217935 2026] [:error] [pid 4177:tid 4207] [client 20.107.212.3:61958] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "aet5u32asKnvdrSe0x5BpgAAAZY"]
[Fri Apr 24 22:10:03.984784 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:61966] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "aet5u-hlUs6BS3Ng7_XIwAAAAMQ"]
[Fri Apr 24 22:10:04.628056 2026] [:error] [pid 4177:tid 4205] [client 20.107.212.3:62457] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "aet5vH2asKnvdrSe0x5BqgAAAZQ"]
[Fri Apr 24 22:10:05.429306 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:64980] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "aet5vehlUs6BS3Ng7_XIyQAAAMg"]
[Fri Apr 24 22:10:06.211806 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:63971] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "aet5vuhlUs6BS3Ng7_XIygAAANU"]
[Fri Apr 24 22:10:06.817748 2026] [:error] [pid 17719:tid 17736] [client 20.107.212.3:61978] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wwx.php"] [unique_id "aet5vsTZ9gzEyL1BkPq6TgAAAIk"]
[Fri Apr 24 22:10:07.378981 2026] [:error] [pid 22114:tid 22127] [client 20.107.212.3:64992] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wwx.php"] [unique_id "aet5v4AuWGz3WlMQjof7CAAAAQo"]
[Fri Apr 24 22:10:07.990204 2026] [:error] [pid 17719:tid 17745] [client 20.107.212.3:65076] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wwx.php"] [unique_id "aet5v8TZ9gzEyL1BkPq6UQAAAJI"]
[Fri Apr 24 22:10:08.554737 2026] [:error] [pid 17719:tid 17727] [client 20.107.212.3:64035] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wwx.php"] [unique_id "aet5wMTZ9gzEyL1BkPq6UwAAAIA"]
[Fri Apr 24 22:10:09.143548 2026] [:error] [pid 14531:tid 14535] [client 20.107.212.3:53655] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aet5wXfLU2gw-6KR-GbeOAAAAUI"]
[Fri Apr 24 22:10:09.773139 2026] [:error] [pid 17720:tid 17771] [client 20.107.212.3:65001] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aet5wehlUs6BS3Ng7_XI0gAAANE"]
[Fri Apr 24 22:10:10.377985 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:56792] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aet5wuhlUs6BS3Ng7_XI1AAAAMQ"]
[Fri Apr 24 22:10:11.039883 2026] [:error] [pid 22114:tid 22128] [client 20.107.212.3:57412] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "aet5w4AuWGz3WlMQjof7CwAAAQs"]
[Fri Apr 24 22:10:11.651786 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:53666] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blox.php"] [unique_id "aet5w-hlUs6BS3Ng7_XI1wAAAMk"]
[Fri Apr 24 22:10:12.252997 2026] [:error] [pid 14531:tid 14546] [client 20.107.212.3:61991] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blox.php"] [unique_id "aet5xHfLU2gw-6KR-GbePwAAAU0"]
[Fri Apr 24 22:10:12.792578 2026] [:error] [pid 22114:tid 22137] [client 20.107.212.3:59426] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blox.php"] [unique_id "aet5xIAuWGz3WlMQjof7DgAAARQ"]
[Fri Apr 24 22:10:13.341817 2026] [:error] [pid 22114:tid 22126] [client 20.107.212.3:65079] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blox.php"] [unique_id "aet5xYAuWGz3WlMQjof7DwAAAQk"]
[Fri Apr 24 22:10:14.004548 2026] [:error] [pid 17721:tid 17800] [client 20.107.212.3:59396] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berax.php"] [unique_id "aet5xuFXXkLeyDnfk_9OrQAAABM"]
[Fri Apr 24 22:10:14.712210 2026] [:error] [pid 22114:tid 22121] [client 20.107.212.3:56768] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berax.php"] [unique_id "aet5xoAuWGz3WlMQjof7FwAAAQQ"]
[Fri Apr 24 22:10:15.257427 2026] [:error] [pid 17719:tid 17748] [client 20.107.212.3:63960] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berax.php"] [unique_id "aet5x8TZ9gzEyL1BkPq6VwAAAJU"]
[Fri Apr 24 22:10:15.905403 2026] [:error] [pid 17721:tid 17788] [client 20.107.212.3:60570] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berax.php"] [unique_id "aet5x-FXXkLeyDnfk_9OsgAAAAc"]
[Fri Apr 24 22:10:16.514456 2026] [:error] [pid 17720:tid 17768] [client 20.107.212.3:62009] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkxzo.php"] [unique_id "aet5yOhlUs6BS3Ng7_XI2gAAAM4"]
[Fri Apr 24 22:10:17.274456 2026] [:error] [pid 14531:tid 14534] [client 20.107.212.3:49126] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkxzo.php"] [unique_id "aet5yXfLU2gw-6KR-GbeRwAAAUE"]
[Fri Apr 24 22:10:17.902330 2026] [:error] [pid 17719:tid 17751] [client 20.107.212.3:64974] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkxzo.php"] [unique_id "aet5ycTZ9gzEyL1BkPq6WwAAAJg"]
[Fri Apr 24 22:10:18.587824 2026] [:error] [pid 17808:tid 17812] [client 20.107.212.3:65024] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkxzo.php"] [unique_id "aet5yuarbOEFI8qshvJTLQAAAEI"]
[Fri Apr 24 22:10:19.510082 2026] [:error] [pid 4177:tid 4205] [client 20.107.212.3:60588] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdxadmin.php"] [unique_id "aet5y32asKnvdrSe0x5BtQAAAZQ"]
[Fri Apr 24 22:10:20.308716 2026] [:error] [pid 17719:tid 17733] [client 20.107.212.3:53654] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdxadmin.php"] [unique_id "aet5zMTZ9gzEyL1BkPq6aAAAAIY"]
[Fri Apr 24 22:10:20.903973 2026] [:error] [pid 17720:tid 17756] [client 20.107.212.3:57449] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdxadmin.php"] [unique_id "aet5zOhlUs6BS3Ng7_XI3AAAAMI"]
[Fri Apr 24 22:10:21.430469 2026] [:error] [pid 17721:tid 17784] [client 20.107.212.3:59437] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdxadmin.php"] [unique_id "aet5zeFXXkLeyDnfk_9OtwAAAAM"]
[Fri Apr 24 22:10:21.934368 2026] [:error] [pid 17808:tid 17825] [client 20.107.212.3:53684] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aet5zearbOEFI8qshvJTMgAAAE8"]
[Fri Apr 24 22:10:22.485409 2026] [:error] [pid 14531:tid 14544] [client 20.107.212.3:64040] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aet5znfLU2gw-6KR-GbeUQAAAUs"]
[Fri Apr 24 22:10:23.081569 2026] [:error] [pid 14531:tid 14535] [client 20.107.212.3:62002] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aet5z3fLU2gw-6KR-GbeVAAAAUI"]
[Fri Apr 24 22:10:23.729143 2026] [:error] [pid 14531:tid 14534] [client 20.107.212.3:52381] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "aet5z3fLU2gw-6KR-GbeVwAAAUE"]
[Fri Apr 24 22:10:24.330560 2026] [:error] [pid 14531:tid 14539] [client 20.107.212.3:62006] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aet50HfLU2gw-6KR-GbeWgAAAUY"]
[Fri Apr 24 22:10:24.935180 2026] [:error] [pid 17808:tid 17815] [client 20.107.212.3:64985] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aet50OarbOEFI8qshvJTOgAAAEU"]
[Fri Apr 24 22:10:25.553779 2026] [:error] [pid 17808:tid 17827] [client 20.107.212.3:61985] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aet50earbOEFI8qshvJTPwAAAFE"]
[Fri Apr 24 22:10:26.191844 2026] [:error] [pid 22114:tid 22140] [client 20.107.212.3:61988] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "aet50oAuWGz3WlMQjof7JQAAARc"]
[Fri Apr 24 22:10:26.798121 2026] [:error] [pid 17808:tid 17812] [client 20.107.212.3:63984] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "aet50uarbOEFI8qshvJTRwAAAEI"]
[Fri Apr 24 22:10:27.373793 2026] [:error] [pid 17719:tid 17739] [client 20.107.212.3:64973] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "aet508TZ9gzEyL1BkPq6eAAAAIw"]
[Fri Apr 24 22:10:27.969157 2026] [:error] [pid 17808:tid 17814] [client 20.107.212.3:63993] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "aet50-arbOEFI8qshvJTSQAAAEQ"]
[Fri Apr 24 22:10:28.558421 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:59444] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "aet51OhlUs6BS3Ng7_XI5AAAAMg"]
[Fri Apr 24 22:10:29.166075 2026] [:error] [pid 4177:tid 4193] [client 20.107.212.3:64054] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shelp.php"] [unique_id "aet51X2asKnvdrSe0x5BwQAAAYg"]
[Fri Apr 24 22:10:29.822509 2026] [:error] [pid 4177:tid 4199] [client 20.107.212.3:51734] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shelp.php"] [unique_id "aet51X2asKnvdrSe0x5BxQAAAY4"]
[Fri Apr 24 22:10:30.447977 2026] [:error] [pid 4177:tid 4185] [client 20.107.212.3:65054] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shelp.php"] [unique_id "aet51n2asKnvdrSe0x5BygAAAYA"]
[Fri Apr 24 22:10:31.119722 2026] [:error] [pid 4177:tid 4186] [client 20.107.212.3:63998] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shelp.php"] [unique_id "aet5132asKnvdrSe0x5BywAAAYE"]
[Fri Apr 24 22:10:43.682186 2026] [:error] [pid 4177:tid 4185] [client 20.107.212.3:63940] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seyv.php"] [unique_id "aet5432asKnvdrSe0x5B2QAAAYA"]
[Fri Apr 24 22:11:31.883428 2026] [:error] [pid 17719:tid 17748] [client 20.107.212.3:65053] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aet6E8TZ9gzEyL1BkPq6rAAAAJU"]
[Fri Apr 24 22:11:33.087877 2026] [:error] [pid 4177:tid 4195] [client 20.107.212.3:64053] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aet6FX2asKnvdrSe0x5CyAAAAYo"]
[Fri Apr 24 22:11:33.667765 2026] [:error] [pid 4177:tid 4186] [client 20.107.212.3:63954] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aet6FX2asKnvdrSe0x5CzAAAAYE"]
[Fri Apr 24 22:11:34.304730 2026] [:error] [pid 14531:tid 14554] [client 20.107.212.3:62444] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ortasekerli1.php"] [unique_id "aet6FnfLU2gw-6KR-GbeugAAAVU"]
[Fri Apr 24 22:11:34.905053 2026] [:error] [pid 17721:tid 17785] [client 20.107.212.3:64028] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxa.php"] [unique_id "aet6FuFXXkLeyDnfk_9O6QAAAAQ"]
[Fri Apr 24 22:11:35.537358 2026] [:error] [pid 17720:tid 17769] [client 20.107.212.3:62453] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxa.php"] [unique_id "aet6F-hlUs6BS3Ng7_XJfQAAAM8"]
[Fri Apr 24 22:11:36.138023 2026] [:error] [pid 17808:tid 17822] [client 20.107.212.3:60579] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxa.php"] [unique_id "aet6GOarbOEFI8qshvJTngAAAEw"]
[Fri Apr 24 22:11:37.510128 2026] [:error] [pid 14531:tid 14545] [client 20.107.212.3:60546] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxa.php"] [unique_id "aet6GXfLU2gw-6KR-GbevAAAAUw"]
[Fri Apr 24 22:11:38.082910 2026] [:error] [pid 22114:tid 22137] [client 20.107.212.3:65021] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file6.php"] [unique_id "aet6GoAuWGz3WlMQjof7OAAAARQ"]
[Fri Apr 24 22:11:38.628552 2026] [:error] [pid 17808:tid 17813] [client 20.107.212.3:65006] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file6.php"] [unique_id "aet6GuarbOEFI8qshvJToAAAAEM"]
[Fri Apr 24 22:11:39.232875 2026] [:error] [pid 17808:tid 17815] [client 20.107.212.3:65061] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file6.php"] [unique_id "aet6G-arbOEFI8qshvJTogAAAEU"]
[Fri Apr 24 22:11:39.792153 2026] [:error] [pid 17721:tid 17795] [client 20.107.212.3:62008] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file6.php"] [unique_id "aet6G-FXXkLeyDnfk_9O7gAAAA4"]
[Fri Apr 24 22:11:40.484477 2026] [:error] [pid 22114:tid 22136] [client 20.107.212.3:51735] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aet6HIAuWGz3WlMQjof7QAAAARM"]
[Fri Apr 24 22:11:41.121628 2026] [:error] [pid 4177:tid 4209] [client 20.107.212.3:61952] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aet6HX2asKnvdrSe0x5C2AAAAZg"]
[Fri Apr 24 22:11:41.705169 2026] [:error] [pid 4177:tid 4197] [client 20.107.212.3:52414] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aet6HX2asKnvdrSe0x5C2wAAAYw"]
[Fri Apr 24 22:11:42.573479 2026] [:error] [pid 17808:tid 17819] [client 20.107.212.3:65040] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aet6HuarbOEFI8qshvJTpgAAAEk"]
[Fri Apr 24 22:11:43.499780 2026] [:error] [pid 14531:tid 14553] [client 20.107.212.3:63983] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "aet6H3fLU2gw-6KR-GbevwAAAVQ"]
[Fri Apr 24 22:11:44.255909 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:63938] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "aet6IOarbOEFI8qshvJTpwAAAE4"]
[Fri Apr 24 22:11:45.310856 2026] [:error] [pid 17808:tid 17827] [client 20.107.212.3:61970] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "aet6IearbOEFI8qshvJTqwAAAFE"]
[Fri Apr 24 22:11:45.907174 2026] [:error] [pid 17808:tid 17825] [client 20.107.212.3:59440] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "aet6IearbOEFI8qshvJTrAAAAE8"]
[Fri Apr 24 22:11:46.462815 2026] [:error] [pid 17719:tid 17746] [client 20.107.212.3:54218] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aet6IsTZ9gzEyL1BkPq6tAAAAJM"]
[Fri Apr 24 22:11:47.217976 2026] [:error] [pid 4177:tid 4189] [client 20.107.212.3:64964] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aet6I32asKnvdrSe0x5C6gAAAYQ"]
[Fri Apr 24 22:11:47.864743 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:54218] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aet6I-hlUs6BS3Ng7_XJkAAAANQ"]
[Fri Apr 24 22:11:48.534855 2026] [:error] [pid 17808:tid 17816] [client 20.107.212.3:52386] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "aet6JOarbOEFI8qshvJTsAAAAEY"]
[Fri Apr 24 22:11:49.207286 2026] [:error] [pid 4177:tid 4190] [client 20.107.212.3:52368] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bc.php"] [unique_id "aet6JX2asKnvdrSe0x5C8QAAAYU"]
[Fri Apr 24 22:11:49.864499 2026] [:error] [pid 22114:tid 22131] [client 20.107.212.3:63970] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bc.php"] [unique_id "aet6JYAuWGz3WlMQjof7RAAAAQ4"]
[Fri Apr 24 22:11:50.484221 2026] [:error] [pid 4177:tid 4206] [client 20.107.212.3:52357] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bc.php"] [unique_id "aet6Jn2asKnvdrSe0x5C9gAAAZU"]
[Fri Apr 24 22:11:51.279703 2026] [:error] [pid 4177:tid 4194] [client 20.107.212.3:53638] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bc.php"] [unique_id "aet6J32asKnvdrSe0x5C-QAAAYk"]
[Fri Apr 24 22:11:52.046684 2026] [:error] [pid 4177:tid 4190] [client 20.107.212.3:61994] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/67.php"] [unique_id "aet6KH2asKnvdrSe0x5C_gAAAYU"]
[Fri Apr 24 22:11:53.002101 2026] [:error] [pid 17808:tid 17828] [client 20.107.212.3:62007] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/67.php"] [unique_id "aet6KearbOEFI8qshvJTtgAAAFI"]
[Fri Apr 24 22:11:53.744626 2026] [:error] [pid 17808:tid 17834] [client 20.107.212.3:57456] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/67.php"] [unique_id "aet6KearbOEFI8qshvJTvAAAAFg"]
[Fri Apr 24 22:11:54.496502 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:62459] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/67.php"] [unique_id "aet6KuhlUs6BS3Ng7_XJmgAAAMk"]
[Fri Apr 24 22:11:56.915319 2026] [:error] [pid 14531:tid 14542] [client 20.107.212.3:61999] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1mrX.php"] [unique_id "aet6LHfLU2gw-6KR-GbewQAAAUk"]
[Fri Apr 24 22:11:57.732290 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:65065] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1mrX.php"] [unique_id "aet6LehlUs6BS3Ng7_XJpgAAAMU"]
[Fri Apr 24 22:11:58.764528 2026] [:error] [pid 17808:tid 17834] [client 20.107.212.3:65051] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1mrX.php"] [unique_id "aet6LuarbOEFI8qshvJTxAAAAFg"]
[Fri Apr 24 22:11:59.377247 2026] [:error] [pid 14531:tid 14540] [client 20.107.212.3:62438] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1mrX.php"] [unique_id "aet6L3fLU2gw-6KR-GbexgAAAUc"]
[Fri Apr 24 22:12:00.112767 2026] [:error] [pid 14531:tid 14543] [client 20.107.212.3:63943] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x402.php"] [unique_id "aet6MHfLU2gw-6KR-GbexwAAAUo"]
[Fri Apr 24 22:12:00.767816 2026] [:error] [pid 4177:tid 4199] [client 20.107.212.3:59430] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x402.php"] [unique_id "aet6MH2asKnvdrSe0x5DBQAAAY4"]
[Fri Apr 24 22:12:01.317479 2026] [:error] [pid 14531:tid 14546] [client 20.107.212.3:56814] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x402.php"] [unique_id "aet6MXfLU2gw-6KR-GbeyAAAAU0"]
[Fri Apr 24 22:12:02.009657 2026] [:error] [pid 17719:tid 17733] [client 20.107.212.3:62405] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x402.php"] [unique_id "aet6MsTZ9gzEyL1BkPq6vgAAAIY"]
[Fri Apr 24 22:12:02.664330 2026] [:error] [pid 22114:tid 22121] [client 20.107.212.3:65013] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/485.php"] [unique_id "aet6MoAuWGz3WlMQjof7SwAAAQQ"]
[Fri Apr 24 22:12:03.338591 2026] [:error] [pid 17719:tid 17740] [client 20.107.212.3:61994] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/485.php"] [unique_id "aet6M8TZ9gzEyL1BkPq6xAAAAI0"]
[Fri Apr 24 22:12:04.158104 2026] [:error] [pid 17719:tid 17731] [client 20.107.212.3:57426] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/485.php"] [unique_id "aet6NMTZ9gzEyL1BkPq6xgAAAIQ"]
[Fri Apr 24 22:12:04.833575 2026] [:error] [pid 22114:tid 22133] [client 20.107.212.3:64989] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/485.php"] [unique_id "aet6NIAuWGz3WlMQjof7TgAAARA"]
[Fri Apr 24 22:12:05.481702 2026] [:error] [pid 14531:tid 14553] [client 20.107.212.3:62439] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "aet6NXfLU2gw-6KR-GbeywAAAVQ"]
[Fri Apr 24 22:12:06.110810 2026] [:error] [pid 17721:tid 17789] [client 20.107.212.3:64016] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "aet6NuFXXkLeyDnfk_9O_AAAAAg"]
[Fri Apr 24 22:12:06.807591 2026] [:error] [pid 17721:tid 17796] [client 20.107.212.3:52396] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "aet6NuFXXkLeyDnfk_9O_gAAAA8"]
[Fri Apr 24 22:12:07.432124 2026] [:error] [pid 17721:tid 17797] [client 20.107.212.3:49121] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "aet6N-FXXkLeyDnfk_9PAAAAABA"]
[Fri Apr 24 22:12:08.019506 2026] [:error] [pid 17720:tid 17778] [client 20.107.212.3:52398] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aet6OOhlUs6BS3Ng7_XJuAAAANg"]
[Fri Apr 24 22:12:08.625406 2026] [:error] [pid 17721:tid 17800] [client 20.107.212.3:62462] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aet6OOFXXkLeyDnfk_9PAQAAABM"]
[Fri Apr 24 22:12:09.326386 2026] [:error] [pid 17721:tid 17786] [client 20.107.212.3:65005] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aet6OeFXXkLeyDnfk_9PAgAAAAU"]
[Fri Apr 24 22:12:09.939060 2026] [:error] [pid 17808:tid 17820] [client 20.107.212.3:65085] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aet6OearbOEFI8qshvJTyQAAAEo"]
[Fri Apr 24 22:21:49.325590 2026] [:error] [pid 17808:tid 17829] [client 43.134.35.91:60046] [client 43.134.35.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aet8fearbOEFI8qshvJXTQAAAFM"]
[Sat Apr 25 01:42:20.933168 2026] [autoindex:error] [pid 42792:tid 42827] [client 213.136.67.3:64827] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Apr 25 02:55:51.857001 2026] [:error] [pid 42791:tid 42816] [client 185.213.175.92:41624] [client 185.213.175.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aeu8t7KmN9doraCEWKUGUgAAAdU"]
[Sat Apr 25 02:55:51.858247 2026] [:error] [pid 28717:tid 28740] [client 185.213.175.92:41608] [client 185.213.175.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "aeu8t4Wg982VYbVGgm44QQAAARU"]
[Sat Apr 25 03:20:06.036457 2026] [:error] [pid 28841:tid 28870] [client 23.100.95.109:7192] [client 23.100.95.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aevCZutkQQ-2d-KEcF-vVwAAAo8"]
[Sat Apr 25 03:20:06.523296 2026] [:error] [pid 28786:tid 28811] [client 23.100.95.109:7220] [client 23.100.95.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aevCZtmKAVQi4GwijepTCgAAAZY"]
[Sat Apr 25 03:20:07.023500 2026] [:error] [pid 28786:tid 28804] [client 23.100.95.109:7210] [client 23.100.95.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aevCZ9mKAVQi4GwijepTDQAAAY8"]
[Sat Apr 25 03:20:07.537998 2026] [:error] [pid 42755:tid 42763] [client 23.100.95.109:4681] [client 23.100.95.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "aevCZ9H7__k0j6aa600jHAAAAIY"]
[Sat Apr 25 03:49:07.529961 2026] [:error] [pid 44425:tid 44427] [client 121.229.185.160:44386] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aevJMyUl-VlItvY2tR_IsAAAAMA"]
[Sat Apr 25 04:00:00.471168 2026] [:error] [pid 44320:tid 44380] [client 20.240.242.60:20951] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pinfo.php"] [unique_id "aevLwDmFqSpku_dij8hUTgAAAFg"]
[Sat Apr 25 04:00:01.068862 2026] [:error] [pid 46083:tid 46111] [client 20.240.242.60:65468] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pinfo.php"] [unique_id "aevLwTxw_Zq74vWdjmnk4wAAARc"]
[Sat Apr 25 04:00:01.871148 2026] [:error] [pid 44321:tid 44404] [client 20.240.242.60:4249] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pinfo.php"] [unique_id "aevLwY1b5lV-asWa_Y4CsgAAAJU"]
[Sat Apr 25 04:00:05.685971 2026] [:error] [pid 44321:tid 44390] [client 20.240.242.60:37029] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pinfo.php"] [unique_id "aevLxY1b5lV-asWa_Y4CuAAAAIc"]
[Sat Apr 25 04:00:08.873718 2026] [:error] [pid 44320:tid 44366] [client 20.240.242.60:51174] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/litespeed.php"] [unique_id "aevLyDmFqSpku_dij8hUXwAAAEo"]
[Sat Apr 25 04:00:09.675031 2026] [:error] [pid 44319:tid 44343] [client 20.240.242.60:48078] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/litespeed.php"] [unique_id "aevLyczJPAVLUb2pWtI2BQAAAA4"]
[Sat Apr 25 04:00:10.595629 2026] [:error] [pid 44320:tid 44374] [client 20.240.242.60:61498] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/litespeed.php"] [unique_id "aevLyjmFqSpku_dij8hUYgAAAFI"]
[Sat Apr 25 04:00:12.020251 2026] [:error] [pid 46083:tid 46099] [client 20.240.242.60:32172] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/litespeed.php"] [unique_id "aevLzDxw_Zq74vWdjmnlJwAAAQw"]
[Sat Apr 25 04:00:13.411504 2026] [:error] [pid 44425:tid 44448] [client 20.240.242.60:24023] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environments.php"] [unique_id "aevLzSUl-VlItvY2tR_NmAAAANU"]
[Sat Apr 25 04:00:14.501467 2026] [:error] [pid 46083:tid 46097] [client 20.240.242.60:63767] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environments.php"] [unique_id "aevLzjxw_Zq74vWdjmnlNgAAAQo"]
[Sat Apr 25 04:00:16.361177 2026] [:error] [pid 46083:tid 46110] [client 20.240.242.60:45684] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environments.php"] [unique_id "aevL0Dxw_Zq74vWdjmnlQgAAARY"]
[Sat Apr 25 04:00:17.678859 2026] [:error] [pid 44321:tid 44394] [client 20.240.242.60:48092] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environments.php"] [unique_id "aevL0Y1b5lV-asWa_Y4CywAAAIs"]
[Sat Apr 25 04:00:18.958678 2026] [:error] [pid 46083:tid 46102] [client 20.240.242.60:52195] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raf.php"] [unique_id "aevL0jxw_Zq74vWdjmnlUQAAAQ8"]
[Sat Apr 25 04:00:20.746134 2026] [:error] [pid 46083:tid 46094] [client 20.240.242.60:52160] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raf.php"] [unique_id "aevL1Dxw_Zq74vWdjmnlWwAAAQc"]
[Sat Apr 25 04:00:21.879478 2026] [:error] [pid 44319:tid 44352] [client 20.240.242.60:45650] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raf.php"] [unique_id "aevL1czJPAVLUb2pWtI2FQAAABc"]
[Sat Apr 25 04:00:23.929379 2026] [:error] [pid 44320:tid 44379] [client 20.240.242.60:51916] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raf.php"] [unique_id "aevL1zmFqSpku_dij8hUcwAAAFc"]
[Sat Apr 25 04:00:26.644162 2026] [:error] [pid 44320:tid 44376] [client 20.240.242.60:48831] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aevL2jmFqSpku_dij8hUewAAAFQ"]
[Sat Apr 25 04:00:29.135532 2026] [:error] [pid 44425:tid 44443] [client 20.240.242.60:48108] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aevL3SUl-VlItvY2tR_NrQAAANA"]
[Sat Apr 25 04:00:31.131413 2026] [:error] [pid 44321:tid 44384] [client 20.240.242.60:48093] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aevL341b5lV-asWa_Y4C0QAAAIE"]
[Sat Apr 25 04:00:34.098605 2026] [:error] [pid 46083:tid 46105] [client 20.240.242.60:48769] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aevL4jxw_Zq74vWdjmnllQAAARI"]
[Sat Apr 25 04:00:35.925787 2026] [:error] [pid 44425:tid 44447] [client 20.240.242.60:33227] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infos.php"] [unique_id "aevL4yUl-VlItvY2tR_NtAAAANQ"]
[Sat Apr 25 04:00:36.865572 2026] [:error] [pid 44425:tid 44434] [client 20.240.242.60:62528] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infos.php"] [unique_id "aevL5CUl-VlItvY2tR_NtgAAAMc"]
[Sat Apr 25 04:00:39.074774 2026] [:error] [pid 44319:tid 44349] [client 20.240.242.60:48807] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infos.php"] [unique_id "aevL58zJPAVLUb2pWtI2HAAAABQ"]
[Sat Apr 25 04:00:40.150586 2026] [:error] [pid 46083:tid 46108] [client 20.240.242.60:61448] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infos.php"] [unique_id "aevL6Dxw_Zq74vWdjmnltgAAARQ"]
[Sat Apr 25 04:00:42.098135 2026] [:error] [pid 46083:tid 46093] [client 20.240.242.60:4515] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.php"] [unique_id "aevL6jxw_Zq74vWdjmnlvgAAAQY"]
[Sat Apr 25 04:00:45.760267 2026] [:error] [pid 46083:tid 46104] [client 20.240.242.60:4521] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.php"] [unique_id "aevL7Txw_Zq74vWdjmnl0wAAARE"]
[Sat Apr 25 04:00:47.500283 2026] [:error] [pid 46083:tid 46091] [client 20.240.242.60:48726] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.php"] [unique_id "aevL7zxw_Zq74vWdjmnl2gAAAQQ"]
[Sat Apr 25 04:00:49.048583 2026] [:error] [pid 46083:tid 46095] [client 20.240.242.60:35919] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.php"] [unique_id "aevL8Txw_Zq74vWdjmnl4wAAAQg"]
[Sat Apr 25 04:00:50.603142 2026] [:error] [pid 46083:tid 46102] [client 20.240.242.60:21655] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/embed.php"] [unique_id "aevL8jxw_Zq74vWdjmnl7QAAAQ8"]
[Sat Apr 25 04:00:52.082564 2026] [:error] [pid 46083:tid 46111] [client 20.240.242.60:60783] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/embed.php"] [unique_id "aevL9Dxw_Zq74vWdjmnl8gAAARc"]
[Sat Apr 25 04:00:53.563395 2026] [:error] [pid 44321:tid 44400] [client 20.240.242.60:35916] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/embed.php"] [unique_id "aevL9Y1b5lV-asWa_Y4C6QAAAJE"]
[Sat Apr 25 04:00:54.855695 2026] [:error] [pid 44321:tid 44396] [client 20.240.242.60:63784] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/embed.php"] [unique_id "aevL9o1b5lV-asWa_Y4C6wAAAI0"]
[Sat Apr 25 04:00:57.052748 2026] [:error] [pid 44319:tid 44331] [client 20.240.242.60:65424] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stat.php"] [unique_id "aevL-czJPAVLUb2pWtI2JQAAAAI"]
[Sat Apr 25 04:00:58.283285 2026] [:error] [pid 46083:tid 46099] [client 20.240.242.60:30510] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stat.php"] [unique_id "aevL-jxw_Zq74vWdjmnl_QAAAQw"]
[Sat Apr 25 04:00:59.615952 2026] [:error] [pid 46083:tid 46110] [client 20.240.242.60:28714] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stat.php"] [unique_id "aevL-zxw_Zq74vWdjmnmBgAAARY"]
[Sat Apr 25 04:01:12.592033 2026] [:error] [pid 44425:tid 44447] [client 20.240.242.60:56452] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_flag.php"] [unique_id "aevMCCUl-VlItvY2tR_N6gAAANQ"]
[Sat Apr 25 04:01:15.276275 2026] [:error] [pid 44319:tid 44339] [client 20.240.242.60:28720] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_flag.php"] [unique_id "aevMC8zJPAVLUb2pWtI2NQAAAAo"]
[Sat Apr 25 04:01:18.350772 2026] [:error] [pid 44321:tid 44386] [client 20.240.242.60:61490] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_flag.php"] [unique_id "aevMDo1b5lV-asWa_Y4C-wAAAIM"]
[Sat Apr 25 04:01:20.239340 2026] [:error] [pid 46083:tid 46112] [client 20.240.242.60:63806] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_flag.php"] [unique_id "aevMEDxw_Zq74vWdjmnmTQAAARg"]
[Sat Apr 25 04:01:22.086112 2026] [:error] [pid 44320:tid 44357] [client 20.240.242.60:28727] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_info4.php"] [unique_id "aevMEjmFqSpku_dij8hUtAAAAEE"]
[Sat Apr 25 04:01:23.250726 2026] [:error] [pid 44321:tid 44405] [client 20.240.242.60:35959] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_info4.php"] [unique_id "aevME41b5lV-asWa_Y4C_wAAAJY"]
[Sat Apr 25 04:01:24.113622 2026] [:error] [pid 46083:tid 46087] [client 20.240.242.60:63801] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_info4.php"] [unique_id "aevMFDxw_Zq74vWdjmnmVwAAAQA"]
[Sat Apr 25 04:01:25.626548 2026] [:error] [pid 46083:tid 46101] [client 20.240.242.60:35963] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_info4.php"] [unique_id "aevMFTxw_Zq74vWdjmnmWwAAAQ4"]
[Sat Apr 25 04:01:26.918370 2026] [:error] [pid 46083:tid 46107] [client 20.240.242.60:59701] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevMFjxw_Zq74vWdjmnmYAAAARM"]
[Sat Apr 25 04:01:27.583478 2026] [:error] [pid 44321:tid 44384] [client 20.240.242.60:53557] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevMF41b5lV-asWa_Y4DAQAAAIE"]
[Sat Apr 25 04:01:28.929720 2026] [:error] [pid 46083:tid 46100] [client 20.240.242.60:52165] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevMGDxw_Zq74vWdjmnmZgAAAQ0"]
[Sat Apr 25 04:01:29.546576 2026] [:error] [pid 44320:tid 44356] [client 20.240.242.60:24044] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevMGTmFqSpku_dij8hUuAAAAEA"]
[Sat Apr 25 04:01:30.669639 2026] [:error] [pid 44319:tid 44338] [client 20.240.242.60:60748] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevMGszJPAVLUb2pWtI2RAAAAAk"]
[Sat Apr 25 04:01:31.458864 2026] [:error] [pid 44321:tid 44390] [client 20.240.242.60:60754] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevMG41b5lV-asWa_Y4DCwAAAIc"]
[Sat Apr 25 04:01:34.423357 2026] [:error] [pid 44321:tid 44397] [client 20.240.242.60:20972] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevMHo1b5lV-asWa_Y4DDwAAAI4"]
[Sat Apr 25 04:01:35.908132 2026] [:error] [pid 44320:tid 44357] [client 20.240.242.60:53560] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevMHzmFqSpku_dij8hUwgAAAEE"]
[Sat Apr 25 04:01:36.997160 2026] [:error] [pid 44320:tid 44356] [client 20.240.242.60:59695] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.inc.php"] [unique_id "aevMIDmFqSpku_dij8hUxAAAAEA"]
[Sat Apr 25 04:01:38.958674 2026] [:error] [pid 46083:tid 46090] [client 20.240.242.60:4259] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.inc.php"] [unique_id "aevMIjxw_Zq74vWdjmnmbQAAAQM"]
[Sat Apr 25 04:01:40.576553 2026] [:error] [pid 46083:tid 46109] [client 20.240.242.60:58192] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.inc.php"] [unique_id "aevMJDxw_Zq74vWdjmnmcwAAARU"]
[Sat Apr 25 04:01:42.687013 2026] [:error] [pid 46083:tid 46110] [client 20.240.242.60:4283] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.inc.php"] [unique_id "aevMJjxw_Zq74vWdjmnmdwAAARY"]
[Sat Apr 25 04:01:44.478603 2026] [:error] [pid 46083:tid 46104] [client 20.240.242.60:57354] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aevMKDxw_Zq74vWdjmnmegAAARE"]
[Sat Apr 25 04:01:46.701081 2026] [:error] [pid 46083:tid 46112] [client 20.240.242.60:29802] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aevMKjxw_Zq74vWdjmnmgAAAARg"]
[Sat Apr 25 04:01:50.222712 2026] [:error] [pid 44425:tid 44434] [client 20.240.242.60:4271] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aevMLiUl-VlItvY2tR_OHAAAAMc"]
[Sat Apr 25 04:01:54.972746 2026] [:error] [pid 44321:tid 44383] [client 20.240.242.60:45597] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aevMMo1b5lV-asWa_Y4DIwAAAIA"]
[Sat Apr 25 04:01:59.092874 2026] [:error] [pid 44320:tid 44368] [client 20.240.242.60:38128] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aevMNzmFqSpku_dij8hU0gAAAEw"]
[Sat Apr 25 04:02:02.516253 2026] [:error] [pid 44320:tid 44378] [client 20.240.242.60:61242] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aevMOjmFqSpku_dij8hU1QAAAFY"]
[Sat Apr 25 04:02:05.501228 2026] [:error] [pid 44320:tid 44356] [client 20.240.242.60:42646] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aevMPTmFqSpku_dij8hU3wAAAEA"]
[Sat Apr 25 04:02:07.483649 2026] [:error] [pid 44320:tid 44372] [client 20.240.242.60:38118] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aevMPzmFqSpku_dij8hU6AAAAFA"]
[Sat Apr 25 04:02:10.895019 2026] [:error] [pid 44425:tid 44427] [client 20.240.242.60:42685] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_version.php"] [unique_id "aevMQiUl-VlItvY2tR_OKQAAAMA"]
[Sat Apr 25 04:38:50.805767 2026] [:error] [pid 44425:tid 44443] [client 72.146.2.23:64537] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/166.php"] [unique_id "aevU2iUl-VlItvY2tR_frAAAANA"]
[Sat Apr 25 04:38:52.748248 2026] [:error] [pid 46083:tid 46100] [client 72.146.2.23:25986] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/166.php"] [unique_id "aevU3Dxw_Zq74vWdjmn9nwAAAQ0"]
[Sat Apr 25 04:38:53.759338 2026] [:error] [pid 46083:tid 46098] [client 72.146.2.23:30579] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/166.php"] [unique_id "aevU3Txw_Zq74vWdjmn9qAAAAQs"]
[Sat Apr 25 04:38:57.022070 2026] [:error] [pid 46083:tid 46111] [client 72.146.2.23:35207] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/166.php"] [unique_id "aevU4Txw_Zq74vWdjmn9tgAAARc"]
[Sat Apr 25 04:38:58.044583 2026] [:error] [pid 46083:tid 46092] [client 72.146.2.23:23063] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/term.php"] [unique_id "aevU4jxw_Zq74vWdjmn9uwAAAQU"]
[Sat Apr 25 04:39:01.973795 2026] [:error] [pid 46083:tid 46102] [client 72.146.2.23:64522] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/term.php"] [unique_id "aevU5Txw_Zq74vWdjmn9zAAAAQ8"]
[Sat Apr 25 04:39:07.315078 2026] [:error] [pid 44321:tid 44392] [client 72.146.2.23:4188] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/term.php"] [unique_id "aevU641b5lV-asWa_Y4QFwAAAIk"]
[Sat Apr 25 04:39:09.588316 2026] [:error] [pid 44425:tid 44443] [client 72.146.2.23:33677] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/term.php"] [unique_id "aevU7SUl-VlItvY2tR_f5AAAANA"]
[Sat Apr 25 04:39:11.357179 2026] [:error] [pid 44425:tid 44431] [client 72.146.2.23:33708] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aevU7yUl-VlItvY2tR_f6wAAAMQ"]
[Sat Apr 25 04:39:14.152311 2026] [:error] [pid 44320:tid 44380] [client 72.146.2.23:35252] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aevU8jmFqSpku_dij8hfMQAAAFg"]
[Sat Apr 25 04:39:17.614294 2026] [:error] [pid 44425:tid 44449] [client 72.146.2.23:64542] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aevU9SUl-VlItvY2tR_gCQAAANY"]
[Sat Apr 25 04:39:18.934292 2026] [:error] [pid 44321:tid 44405] [client 72.146.2.23:64513] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/666.php"] [unique_id "aevU9o1b5lV-asWa_Y4QLQAAAJY"]
[Sat Apr 25 04:39:22.376459 2026] [:error] [pid 46083:tid 46088] [client 72.146.2.23:33682] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aevU-jxw_Zq74vWdjmn-FQAAAQE"]
[Sat Apr 25 04:39:25.164147 2026] [:error] [pid 46083:tid 46103] [client 72.146.2.23:32609] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aevU_Txw_Zq74vWdjmn-JQAAARA"]
[Sat Apr 25 04:39:28.340143 2026] [:error] [pid 44425:tid 44438] [client 72.146.2.23:32638] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aevVACUl-VlItvY2tR_gRwAAAMs"]
[Sat Apr 25 04:39:30.738939 2026] [:error] [pid 44320:tid 44380] [client 72.146.2.23:26497] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tt.php"] [unique_id "aevVAjmFqSpku_dij8hfPQAAAFg"]
[Sat Apr 25 04:39:33.527842 2026] [:error] [pid 44425:tid 44440] [client 72.146.2.23:23088] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aevVBSUl-VlItvY2tR_gWwAAAM0"]
[Sat Apr 25 04:39:38.535495 2026] [:error] [pid 44321:tid 44385] [client 72.146.2.23:27112] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aevVCo1b5lV-asWa_Y4QWwAAAII"]
[Sat Apr 25 04:39:41.144830 2026] [:error] [pid 44321:tid 44393] [client 72.146.2.23:32592] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aevVDY1b5lV-asWa_Y4QYQAAAIo"]
[Sat Apr 25 04:39:43.577121 2026] [:error] [pid 44425:tid 44429] [client 72.146.2.23:4820] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "aevVDyUl-VlItvY2tR_ghwAAAMI"]
[Sat Apr 25 04:39:44.857483 2026] [:error] [pid 44320:tid 44370] [client 72.146.2.23:39142] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/66.php"] [unique_id "aevVEDmFqSpku_dij8hfRgAAAE4"]
[Sat Apr 25 04:40:10.449267 2026] [:error] [pid 44321:tid 44383] [client 72.146.2.23:65419] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aevVKo1b5lV-asWa_Y4QkQAAAIA"]
[Sat Apr 25 04:40:12.973767 2026] [:error] [pid 44321:tid 44396] [client 72.146.2.23:23558] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aevVLI1b5lV-asWa_Y4QlQAAAI0"]
[Sat Apr 25 04:40:13.678937 2026] [:error] [pid 44321:tid 44397] [client 72.146.2.23:34788] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aevVLY1b5lV-asWa_Y4QmgAAAI4"]
[Sat Apr 25 04:40:16.209922 2026] [:error] [pid 44425:tid 44434] [client 72.146.2.23:23632] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aevVMCUl-VlItvY2tR_hDwAAAMc"]
[Sat Apr 25 04:40:18.818675 2026] [:error] [pid 44320:tid 44379] [client 72.146.2.23:37655] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aevVMjmFqSpku_dij8hfbgAAAFc"]
[Sat Apr 25 04:40:29.296571 2026] [:error] [pid 46083:tid 46096] [client 72.146.2.23:23162] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "aevVPTxw_Zq74vWdjmn-_gAAAQk"]
[Sat Apr 25 04:40:34.639747 2026] [:error] [pid 46083:tid 46091] [client 72.146.2.23:31970] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aevVQjxw_Zq74vWdjmn_FAAAAQQ"]
[Sat Apr 25 04:40:40.471004 2026] [:error] [pid 46083:tid 46098] [client 72.146.2.23:36021] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aevVSDxw_Zq74vWdjmn_JgAAAQs"]
[Sat Apr 25 04:40:44.248423 2026] [:error] [pid 44425:tid 44430] [client 72.146.2.23:29460] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aevVTCUl-VlItvY2tR_hUAAAAMM"]
[Sat Apr 25 04:40:46.440268 2026] [:error] [pid 44425:tid 44449] [client 72.146.2.23:34766] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/shell.php"] [unique_id "aevVTiUl-VlItvY2tR_hVAAAANY"]
[Sat Apr 25 04:40:48.167551 2026] [:error] [pid 46083:tid 46099] [client 72.146.2.23:19538] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new.php"] [unique_id "aevVUDxw_Zq74vWdjmn_SQAAAQw"]
[Sat Apr 25 04:40:53.741566 2026] [:error] [pid 46083:tid 46111] [client 72.146.2.23:60755] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/new.php"] [unique_id "aevVVTxw_Zq74vWdjmn_WAAAARc"]
[Sat Apr 25 04:41:07.944059 2026] [:error] [pid 44319:tid 44343] [client 72.146.2.23:39139] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aevVY8zJPAVLUb2pWtI_TQAAAA4"]
[Sat Apr 25 04:41:20.263777 2026] [:error] [pid 44425:tid 44432] [client 72.146.2.23:38337] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aevVcCUl-VlItvY2tR_hhwAAAMU"]
[Sat Apr 25 04:41:25.731200 2026] [:error] [pid 46083:tid 46102] [client 72.146.2.23:38357] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aevVdTxw_Zq74vWdjmn_nQAAAQ8"]
[Sat Apr 25 04:41:29.221229 2026] [:error] [pid 44319:tid 44331] [client 72.146.2.23:28650] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aevVeczJPAVLUb2pWtI_ZAAAAAI"]
[Sat Apr 25 04:41:29.816847 2026] [:error] [pid 44319:tid 44343] [client 72.146.2.23:34462] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/a5.php"] [unique_id "aevVeczJPAVLUb2pWtI_ZgAAAA4"]
[Sat Apr 25 04:41:31.578785 2026] [:error] [pid 44425:tid 44446] [client 72.146.2.23:34471] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aevVeyUl-VlItvY2tR_hjgAAANM"]
[Sat Apr 25 04:41:32.801155 2026] [:error] [pid 44425:tid 44447] [client 72.146.2.23:4810] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aevVfCUl-VlItvY2tR_hkgAAANQ"]
[Sat Apr 25 04:41:35.381820 2026] [:error] [pid 44320:tid 44374] [client 72.146.2.23:60743] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aevVfzmFqSpku_dij8hfyAAAAFI"]
[Sat Apr 25 04:41:37.422693 2026] [:error] [pid 46083:tid 46104] [client 72.146.2.23:39124] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cu.php"] [unique_id "aevVgTxw_Zq74vWdjmn_qgAAARE"]
[Sat Apr 25 04:41:40.182000 2026] [:error] [pid 44320:tid 44378] [client 72.146.2.23:39128] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aevVhDmFqSpku_dij8hf1gAAAFY"]
[Sat Apr 25 04:41:43.166659 2026] [:error] [pid 44320:tid 44362] [client 72.146.2.23:28667] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aevVhzmFqSpku_dij8hf5AAAAEY"]
[Sat Apr 25 04:41:46.763693 2026] [:error] [pid 46083:tid 46107] [client 72.146.2.23:60751] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aevVijxw_Zq74vWdjmn_sgAAARM"]
[Sat Apr 25 04:41:51.356788 2026] [:error] [pid 44321:tid 44387] [client 72.146.2.23:39116] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/amax.php"] [unique_id "aevVj41b5lV-asWa_Y4RAAAAAIQ"]
[Sat Apr 25 04:41:53.740922 2026] [:error] [pid 44319:tid 44349] [client 72.146.2.23:37187] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aevVkczJPAVLUb2pWtI_dQAAABQ"]
[Sat Apr 25 04:41:55.845342 2026] [:error] [pid 44425:tid 44450] [client 72.146.2.23:4138] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aevVkyUl-VlItvY2tR_hqQAAANc"]
[Sat Apr 25 04:41:58.797347 2026] [:error] [pid 46083:tid 46095] [client 72.146.2.23:34489] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aevVljxw_Zq74vWdjmn_3gAAAQg"]
[Sat Apr 25 04:42:01.425305 2026] [:error] [pid 46083:tid 46096] [client 72.146.2.23:39156] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mh.php"] [unique_id "aevVmTxw_Zq74vWdjmn_5QAAAQk"]
[Sat Apr 25 04:42:03.602877 2026] [:error] [pid 46083:tid 46109] [client 72.146.2.23:21230] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aevVmzxw_Zq74vWdjmn_7QAAARU"]
[Sat Apr 25 04:42:05.177616 2026] [:error] [pid 46083:tid 46108] [client 72.146.2.23:4821] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aevVnTxw_Zq74vWdjmn_8gAAARQ"]
[Sat Apr 25 04:42:06.578710 2026] [:error] [pid 44425:tid 44440] [client 72.146.2.23:60737] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aevVniUl-VlItvY2tR_htwAAAM0"]
[Sat Apr 25 04:42:07.849827 2026] [:error] [pid 44425:tid 44446] [client 72.146.2.23:38822] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/Jcrop.php"] [unique_id "aevVnyUl-VlItvY2tR_huQAAANM"]
[Sat Apr 25 04:42:09.723793 2026] [:error] [pid 44425:tid 44448] [client 72.146.2.23:38377] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aevVoSUl-VlItvY2tR_hvgAAANU"]
[Sat Apr 25 04:42:12.218912 2026] [:error] [pid 44319:tid 44330] [client 72.146.2.23:4130] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aevVpMzJPAVLUb2pWtI_fgAAAAE"]
[Sat Apr 25 04:42:14.837543 2026] [:error] [pid 44320:tid 44371] [client 72.146.2.23:38834] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aevVpjmFqSpku_dij8hgCAAAAE8"]
[Sat Apr 25 04:42:16.147195 2026] [:error] [pid 44320:tid 44374] [client 72.146.2.23:38340] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/abc.php"] [unique_id "aevVqDmFqSpku_dij8hgCQAAAFI"]
[Sat Apr 25 04:42:18.198252 2026] [:error] [pid 44425:tid 44436] [client 72.146.2.23:39157] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "aevVqiUl-VlItvY2tR_h0gAAAMk"]
[Sat Apr 25 04:42:42.158274 2026] [:error] [pid 46083:tid 46093] [client 72.146.2.23:28670] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aevVwjxw_Zq74vWdjmkAWwAAAQY"]
[Sat Apr 25 04:42:43.475168 2026] [:error] [pid 44321:tid 44387] [client 72.146.2.23:60760] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aevVw41b5lV-asWa_Y4RLQAAAIQ"]
[Sat Apr 25 04:42:45.000757 2026] [:error] [pid 44425:tid 44439] [client 72.146.2.23:38350] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aevVxCUl-VlItvY2tR_iCQAAAMw"]
[Sat Apr 25 04:42:46.537670 2026] [:error] [pid 46083:tid 46103] [client 72.146.2.23:34446] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "aevVxjxw_Zq74vWdjmkAZwAAARA"]
[Sat Apr 25 04:42:51.262137 2026] [:error] [pid 44321:tid 44389] [client 72.146.2.23:4119] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/press.php"] [unique_id "aevVy41b5lV-asWa_Y4RNwAAAIY"]
[Sat Apr 25 04:42:53.031851 2026] [:error] [pid 46083:tid 46097] [client 72.146.2.23:38344] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/press.php"] [unique_id "aevVzTxw_Zq74vWdjmkAcAAAAQo"]
[Sat Apr 25 04:42:54.565587 2026] [:error] [pid 44321:tid 44383] [client 72.146.2.23:28664] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/press.php"] [unique_id "aevVzo1b5lV-asWa_Y4RPgAAAIA"]
[Sat Apr 25 04:42:57.398955 2026] [:error] [pid 44321:tid 44407] [client 72.146.2.23:4135] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/press.php"] [unique_id "aevV0Y1b5lV-asWa_Y4RQAAAAJg"]
[Sat Apr 25 04:42:58.670226 2026] [:error] [pid 44320:tid 44358] [client 72.146.2.23:39165] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/900.php"] [unique_id "aevV0jmFqSpku_dij8hgPAAAAEI"]
[Sat Apr 25 04:43:00.522125 2026] [:error] [pid 44425:tid 44434] [client 72.146.2.23:60750] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/900.php"] [unique_id "aevV1CUl-VlItvY2tR_iJgAAAMc"]
[Sat Apr 25 04:43:01.337914 2026] [:error] [pid 44321:tid 44401] [client 72.146.2.23:34451] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/900.php"] [unique_id "aevV1Y1b5lV-asWa_Y4RRgAAAJI"]
[Sat Apr 25 04:43:03.947449 2026] [:error] [pid 46083:tid 46111] [client 72.146.2.23:60796] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/900.php"] [unique_id "aevV1zxw_Zq74vWdjmkAfgAAARc"]
[Sat Apr 25 04:43:06.010263 2026] [:error] [pid 44319:tid 44333] [client 72.146.2.23:39133] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevV2szJPAVLUb2pWtI_qgAAAAQ"]
[Sat Apr 25 04:43:09.510514 2026] [:error] [pid 44321:tid 44401] [client 72.146.2.23:4854] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevV3Y1b5lV-asWa_Y4RTgAAAJI"]
[Sat Apr 25 04:43:12.833415 2026] [:error] [pid 44320:tid 44362] [client 72.146.2.23:4841] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevV4DmFqSpku_dij8hgTQAAAEY"]
[Sat Apr 25 04:43:17.499880 2026] [:error] [pid 44321:tid 44402] [client 72.146.2.23:28629] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "aevV5Y1b5lV-asWa_Y4RYwAAAJM"]
[Sat Apr 25 04:43:20.202559 2026] [:error] [pid 44321:tid 44399] [client 72.146.2.23:28634] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aevV6I1b5lV-asWa_Y4RbwAAAJA"]
[Sat Apr 25 04:43:22.496408 2026] [:error] [pid 46083:tid 46097] [client 72.146.2.23:37185] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aevV6jxw_Zq74vWdjmkAlwAAAQo"]
[Sat Apr 25 04:43:25.408024 2026] [:error] [pid 46083:tid 46109] [client 72.146.2.23:60786] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aevV7Txw_Zq74vWdjmkAoAAAARU"]
[Sat Apr 25 04:43:27.396643 2026] [:error] [pid 46083:tid 46091] [client 72.146.2.23:31075] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/jk.php"] [unique_id "aevV7zxw_Zq74vWdjmkAowAAAQQ"]
[Sat Apr 25 04:43:31.623893 2026] [:error] [pid 44425:tid 44447] [client 72.146.2.23:4117] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aevV8yUl-VlItvY2tR_iUgAAANQ"]
[Sat Apr 25 04:43:35.693188 2026] [:error] [pid 44319:tid 44348] [client 72.146.2.23:60766] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aevV98zJPAVLUb2pWtI_1QAAABM"]
[Sat Apr 25 04:43:37.716637 2026] [:error] [pid 44319:tid 44349] [client 72.146.2.23:28612] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aevV-czJPAVLUb2pWtI_2wAAABQ"]
[Sat Apr 25 04:43:38.653566 2026] [:error] [pid 44320:tid 44379] [client 72.146.2.23:37214] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dx.php"] [unique_id "aevV-jmFqSpku_dij8hgaQAAAFc"]
[Sat Apr 25 04:43:40.753682 2026] [:error] [pid 44319:tid 44344] [client 72.146.2.23:4825] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aa.php"] [unique_id "aevV_MzJPAVLUb2pWtI_5gAAAA8"]
[Sat Apr 25 04:43:49.980106 2026] [:error] [pid 44320:tid 44365] [client 72.146.2.23:29560] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/t.php"] [unique_id "aevWBTmFqSpku_dij8hgfwAAAEk"]
[Sat Apr 25 04:43:50.680236 2026] [:error] [pid 44425:tid 44450] [client 72.146.2.23:35166] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/t.php"] [unique_id "aevWBiUl-VlItvY2tR_ibgAAANc"]
[Sat Apr 25 04:43:51.668389 2026] [:error] [pid 44425:tid 44435] [client 72.146.2.23:31002] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/t.php"] [unique_id "aevWByUl-VlItvY2tR_icAAAAMg"]
[Sat Apr 25 04:43:52.816632 2026] [:error] [pid 46083:tid 46089] [client 72.146.2.23:22560] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/t.php"] [unique_id "aevWCDxw_Zq74vWdjmkAwAAAAQI"]
[Sat Apr 25 04:43:54.577351 2026] [:error] [pid 44425:tid 44427] [client 72.146.2.23:35190] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aevWCiUl-VlItvY2tR_ifAAAAMA"]
[Sat Apr 25 04:43:55.371789 2026] [:error] [pid 44319:tid 44335] [client 72.146.2.23:31709] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aevWC8zJPAVLUb2pWtJABgAAAAY"]
[Sat Apr 25 04:43:56.875018 2026] [:error] [pid 44321:tid 44387] [client 72.146.2.23:22537] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aevWDI1b5lV-asWa_Y4RiAAAAIQ"]
[Sat Apr 25 04:43:58.415356 2026] [:error] [pid 44425:tid 44441] [client 72.146.2.23:4866] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aevWDiUl-VlItvY2tR_ihgAAAM4"]
[Sat Apr 25 04:44:00.685706 2026] [:error] [pid 44425:tid 44436] [client 72.146.2.23:4256] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/profile.php"] [unique_id "aevWECUl-VlItvY2tR_ijgAAAMk"]
[Sat Apr 25 04:44:06.276407 2026] [:error] [pid 44425:tid 44430] [client 72.146.2.23:36511] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/profile.php"] [unique_id "aevWFiUl-VlItvY2tR_imAAAAMM"]
[Sat Apr 25 04:44:23.248154 2026] [:error] [pid 46083:tid 46102] [client 72.146.2.23:61415] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gaza.php"] [unique_id "aevWJzxw_Zq74vWdjmkA5gAAAQ8"]
[Sat Apr 25 04:44:25.569339 2026] [:error] [pid 44425:tid 44450] [client 72.146.2.23:36439] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gaza.php"] [unique_id "aevWKSUl-VlItvY2tR_iwQAAANc"]
[Sat Apr 25 04:44:27.089280 2026] [:error] [pid 44321:tid 44392] [client 72.146.2.23:65392] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gaza.php"] [unique_id "aevWK41b5lV-asWa_Y4RnQAAAIk"]
[Sat Apr 25 04:44:29.960398 2026] [:error] [pid 44425:tid 44445] [client 72.146.2.23:26065] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aevWLSUl-VlItvY2tR_i0QAAANI"]
[Sat Apr 25 04:44:31.759771 2026] [:error] [pid 44425:tid 44433] [client 72.146.2.23:4314] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aevWLyUl-VlItvY2tR_i0wAAAMY"]
[Sat Apr 25 04:44:33.995299 2026] [:error] [pid 44425:tid 44448] [client 72.146.2.23:65388] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aevWMSUl-VlItvY2tR_i2wAAANU"]
[Sat Apr 25 04:44:35.332677 2026] [:error] [pid 46083:tid 46096] [client 72.146.2.23:21545] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/kj.php"] [unique_id "aevWMzxw_Zq74vWdjmkBNQAAAQk"]
[Sat Apr 25 04:44:38.575854 2026] [:error] [pid 44320:tid 44362] [client 72.146.2.23:21530] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aevWNjmFqSpku_dij8hgsQAAAEY"]
[Sat Apr 25 04:44:41.975901 2026] [:error] [pid 46083:tid 46093] [client 72.146.2.23:35581] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aevWOTxw_Zq74vWdjmkBdAAAAQY"]
[Sat Apr 25 04:44:44.343246 2026] [:error] [pid 44321:tid 44391] [client 72.146.2.23:65521] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aevWPI1b5lV-asWa_Y4RqwAAAIg"]
[Sat Apr 25 04:44:46.243953 2026] [:error] [pid 46083:tid 46096] [client 72.146.2.23:60708] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/aboute.php"] [unique_id "aevWPjxw_Zq74vWdjmkBlgAAAQk"]
[Sat Apr 25 04:44:48.100927 2026] [:error] [pid 44320:tid 44359] [client 72.146.2.23:22614] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ws82.php"] [unique_id "aevWQDmFqSpku_dij8hgtQAAAEM"]
[Sat Apr 25 04:44:58.565576 2026] [:error] [pid 44425:tid 44431] [client 72.146.2.23:22621] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aevWSiUl-VlItvY2tR_jIAAAAMQ"]
[Sat Apr 25 04:44:59.236074 2026] [:error] [pid 44321:tid 44402] [client 72.146.2.23:29082] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aevWS41b5lV-asWa_Y4RuQAAAJM"]
[Sat Apr 25 04:45:00.071477 2026] [:error] [pid 46083:tid 46110] [client 72.146.2.23:4370] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aevWTDxw_Zq74vWdjmkBtgAAARY"]
[Sat Apr 25 04:45:00.927181 2026] [:error] [pid 44320:tid 44374] [client 72.146.2.23:36871] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/rip.php"] [unique_id "aevWTDmFqSpku_dij8hgvQAAAFI"]
[Sat Apr 25 04:45:01.934716 2026] [:error] [pid 46083:tid 46096] [client 72.146.2.23:36869] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aevWTTxw_Zq74vWdjmkBuQAAAQk"]
[Sat Apr 25 04:45:02.923003 2026] [:error] [pid 46083:tid 46111] [client 72.146.2.23:24067] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aevWTjxw_Zq74vWdjmkBvgAAARc"]
[Sat Apr 25 04:45:03.568937 2026] [:error] [pid 44320:tid 44367] [client 72.146.2.23:65499] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aevWTzmFqSpku_dij8hgwQAAAEs"]
[Sat Apr 25 04:45:04.701048 2026] [:error] [pid 46083:tid 46099] [client 72.146.2.23:22639] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "aevWUDxw_Zq74vWdjmkBwQAAAQw"]
[Sat Apr 25 04:45:05.911633 2026] [:error] [pid 44425:tid 44441] [client 72.146.2.23:31427] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aevWUSUl-VlItvY2tR_jKAAAAM4"]
[Sat Apr 25 04:45:06.669755 2026] [:error] [pid 44425:tid 44444] [client 72.146.2.23:22638] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aevWUiUl-VlItvY2tR_jKwAAANE"]
[Sat Apr 25 04:45:07.484413 2026] [:error] [pid 44425:tid 44432] [client 72.146.2.23:65527] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aevWUyUl-VlItvY2tR_jLAAAAMU"]
[Sat Apr 25 04:45:08.049821 2026] [:error] [pid 44320:tid 44377] [client 72.146.2.23:36864] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/zoo.php"] [unique_id "aevWVDmFqSpku_dij8hgxQAAAFU"]
[Sat Apr 25 04:45:09.187017 2026] [:error] [pid 44321:tid 44399] [client 72.146.2.23:4532] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "aevWVY1b5lV-asWa_Y4RwAAAAJA"]
[Sat Apr 25 04:45:10.301058 2026] [:error] [pid 44321:tid 44397] [client 72.146.2.23:21593] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "aevWVo1b5lV-asWa_Y4RwwAAAI4"]
[Sat Apr 25 04:45:12.660029 2026] [:error] [pid 44320:tid 44369] [client 72.146.2.23:60672] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "aevWWDmFqSpku_dij8hgyQAAAE0"]
[Sat Apr 25 04:45:14.778396 2026] [:error] [pid 44425:tid 44439] [client 72.146.2.23:4377] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "aevWWiUl-VlItvY2tR_jMgAAAMw"]
[Sat Apr 25 04:45:19.511373 2026] [:error] [pid 44321:tid 44402] [client 72.146.2.23:31476] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gcqoa.php"] [unique_id "aevWX41b5lV-asWa_Y4R0QAAAJM"]
[Sat Apr 25 04:45:21.630791 2026] [:error] [pid 46083:tid 46110] [client 72.146.2.23:31443] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gcqoa.php"] [unique_id "aevWYTxw_Zq74vWdjmkCmAAAARY"]
[Sat Apr 25 04:45:23.459082 2026] [:error] [pid 44425:tid 44427] [client 72.146.2.23:4513] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gcqoa.php"] [unique_id "aevWYyUl-VlItvY2tR_jPwAAAMA"]
[Sat Apr 25 04:45:25.601156 2026] [:error] [pid 46083:tid 46109] [client 72.146.2.23:31472] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/gcqoa.php"] [unique_id "aevWZTxw_Zq74vWdjmkCqAAAARU"]
[Sat Apr 25 04:45:27.044424 2026] [:error] [pid 46083:tid 46102] [client 72.146.2.23:22625] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aevWZzxw_Zq74vWdjmkCrwAAAQ8"]
[Sat Apr 25 04:45:28.696350 2026] [:error] [pid 46083:tid 46090] [client 72.146.2.23:31424] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aevWaDxw_Zq74vWdjmkCswAAAQM"]
[Sat Apr 25 04:45:29.617898 2026] [:error] [pid 44425:tid 44438] [client 72.146.2.23:4505] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aevWaSUl-VlItvY2tR_jRgAAAMs"]
[Sat Apr 25 04:45:32.292593 2026] [:error] [pid 44425:tid 44434] [client 72.146.2.23:36877] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "aevWbCUl-VlItvY2tR_jUAAAAMc"]
[Sat Apr 25 04:45:33.362855 2026] [:error] [pid 44425:tid 44435] [client 72.146.2.23:4444] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/b.php"] [unique_id "aevWbSUl-VlItvY2tR_jUwAAAMg"]
[Sat Apr 25 04:45:34.831559 2026] [:error] [pid 44425:tid 44430] [client 72.146.2.23:4477] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/b.php"] [unique_id "aevWbiUl-VlItvY2tR_jVwAAAMM"]
[Sat Apr 25 04:45:38.109345 2026] [:error] [pid 46083:tid 46093] [client 72.146.2.23:36886] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/b.php"] [unique_id "aevWcjxw_Zq74vWdjmkCwQAAAQY"]
[Sat Apr 25 04:45:41.594303 2026] [:error] [pid 44425:tid 44439] [client 72.146.2.23:21611] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/b.php"] [unique_id "aevWdSUl-VlItvY2tR_jZQAAAMw"]
[Sat Apr 25 04:45:42.731974 2026] [:error] [pid 44319:tid 44329] [client 72.146.2.23:4503] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aevWdszJPAVLUb2pWtJAQgAAAAA"]
[Sat Apr 25 04:45:43.792101 2026] [:error] [pid 44425:tid 44436] [client 72.146.2.23:22646] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aevWdyUl-VlItvY2tR_jawAAAMk"]
[Sat Apr 25 04:45:45.065198 2026] [:error] [pid 44425:tid 44447] [client 72.146.2.23:22616] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aevWeSUl-VlItvY2tR_jbgAAANQ"]
[Sat Apr 25 04:45:50.250363 2026] [:error] [pid 44321:tid 44385] [client 72.146.2.23:4434] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "aevWfo1b5lV-asWa_Y4R9gAAAII"]
[Sat Apr 25 04:45:54.304124 2026] [:error] [pid 44425:tid 44429] [client 72.146.2.23:65473] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-class-api.php"] [unique_id "aevWgiUl-VlItvY2tR_jdAAAAMI"]
[Sat Apr 25 04:45:55.632519 2026] [:error] [pid 46083:tid 46097] [client 72.146.2.23:36870] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-class-api.php"] [unique_id "aevWgzxw_Zq74vWdjmkCyQAAAQo"]
[Sat Apr 25 04:45:56.388577 2026] [:error] [pid 44425:tid 44433] [client 72.146.2.23:60692] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-class-api.php"] [unique_id "aevWhCUl-VlItvY2tR_jeQAAAMY"]
[Sat Apr 25 04:45:57.541914 2026] [:error] [pid 46083:tid 46109] [client 72.146.2.23:36878] [client 72.146.2.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-class-api.php"] [unique_id "aevWhTxw_Zq74vWdjmkCzAAAARU"]
[Sat Apr 25 05:37:10.798013 2026] [:error] [pid 44320:tid 44371] [client 20.240.242.60:62023] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pinfo.php"] [unique_id "aevihjmFqSpku_dij8hsqAAAAE8"]
[Sat Apr 25 05:37:11.329869 2026] [:error] [pid 44319:tid 44333] [client 20.240.242.60:5272] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pinfo.php"] [unique_id "aevih8zJPAVLUb2pWtJKogAAAAQ"]
[Sat Apr 25 05:37:11.859582 2026] [:error] [pid 46083:tid 46107] [client 20.240.242.60:51881] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pinfo.php"] [unique_id "aevihzxw_Zq74vWdjmkfKAAAARM"]
[Sat Apr 25 05:37:12.405786 2026] [:error] [pid 46083:tid 46091] [client 20.240.242.60:45974] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pinfo.php"] [unique_id "aeviiDxw_Zq74vWdjmkfLQAAAQQ"]
[Sat Apr 25 05:37:12.963384 2026] [:error] [pid 46083:tid 46089] [client 20.240.242.60:5298] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/litespeed.php"] [unique_id "aeviiDxw_Zq74vWdjmkfLwAAAQI"]
[Sat Apr 25 05:37:13.492348 2026] [:error] [pid 46083:tid 46098] [client 20.240.242.60:29707] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/litespeed.php"] [unique_id "aeviiTxw_Zq74vWdjmkfMwAAAQs"]
[Sat Apr 25 05:37:14.041187 2026] [:error] [pid 44425:tid 44447] [client 20.240.242.60:61743] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/litespeed.php"] [unique_id "aeviiiUl-VlItvY2tR_3-QAAANQ"]
[Sat Apr 25 05:37:14.611029 2026] [:error] [pid 44319:tid 44353] [client 20.240.242.60:45954] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/litespeed.php"] [unique_id "aeviiszJPAVLUb2pWtJKpwAAABg"]
[Sat Apr 25 05:37:15.155340 2026] [:error] [pid 46083:tid 46091] [client 20.240.242.60:51875] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environments.php"] [unique_id "aeviizxw_Zq74vWdjmkfOQAAAQQ"]
[Sat Apr 25 05:37:15.684118 2026] [:error] [pid 46083:tid 46088] [client 20.240.242.60:29707] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environments.php"] [unique_id "aeviizxw_Zq74vWdjmkfOwAAAQE"]
[Sat Apr 25 05:37:16.212488 2026] [:error] [pid 46083:tid 46094] [client 20.240.242.60:29744] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environments.php"] [unique_id "aevijDxw_Zq74vWdjmkfPgAAAQc"]
[Sat Apr 25 05:37:16.748525 2026] [:error] [pid 44425:tid 44449] [client 20.240.242.60:47849] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environments.php"] [unique_id "aevijCUl-VlItvY2tR_3_wAAANY"]
[Sat Apr 25 05:37:17.278750 2026] [:error] [pid 44425:tid 44438] [client 20.240.242.60:64127] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raf.php"] [unique_id "aevijSUl-VlItvY2tR_4AgAAAMs"]
[Sat Apr 25 05:37:17.823024 2026] [:error] [pid 46083:tid 46100] [client 20.240.242.60:60340] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raf.php"] [unique_id "aevijTxw_Zq74vWdjmkfRgAAAQ0"]
[Sat Apr 25 05:37:18.439473 2026] [:error] [pid 44425:tid 44429] [client 20.240.242.60:33490] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raf.php"] [unique_id "aevijiUl-VlItvY2tR_4BgAAAMI"]
[Sat Apr 25 05:37:19.017587 2026] [:error] [pid 46083:tid 46087] [client 20.240.242.60:39659] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/raf.php"] [unique_id "aevijzxw_Zq74vWdjmkfTwAAAQA"]
[Sat Apr 25 05:37:19.576043 2026] [:error] [pid 44319:tid 44344] [client 20.240.242.60:60343] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aevij8zJPAVLUb2pWtJKqwAAAA8"]
[Sat Apr 25 05:37:20.119451 2026] [:error] [pid 44320:tid 44369] [client 20.240.242.60:63631] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aevikDmFqSpku_dij8hsrwAAAE0"]
[Sat Apr 25 05:37:20.719821 2026] [:error] [pid 44425:tid 44444] [client 20.240.242.60:60299] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aevikCUl-VlItvY2tR_4CgAAANE"]
[Sat Apr 25 05:37:21.282615 2026] [:error] [pid 44321:tid 44399] [client 20.240.242.60:56774] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "aevikY1b5lV-asWa_Y4f3gAAAJA"]
[Sat Apr 25 05:37:21.846738 2026] [:error] [pid 46083:tid 46087] [client 20.240.242.60:47851] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infos.php"] [unique_id "aevikTxw_Zq74vWdjmkfVwAAAQA"]
[Sat Apr 25 05:37:22.395410 2026] [:error] [pid 44319:tid 44341] [client 20.240.242.60:64351] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infos.php"] [unique_id "aevikszJPAVLUb2pWtJKsgAAAAw"]
[Sat Apr 25 05:37:22.928109 2026] [:error] [pid 44319:tid 44336] [client 20.240.242.60:62086] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infos.php"] [unique_id "aevikszJPAVLUb2pWtJKswAAAAc"]
[Sat Apr 25 05:37:23.514803 2026] [:error] [pid 46083:tid 46104] [client 20.240.242.60:62098] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/infos.php"] [unique_id "aevikzxw_Zq74vWdjmkfWQAAARE"]
[Sat Apr 25 05:37:24.056185 2026] [:error] [pid 44319:tid 44349] [client 20.240.242.60:64349] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.php"] [unique_id "aevilMzJPAVLUb2pWtJKtwAAABQ"]
[Sat Apr 25 05:37:24.610680 2026] [:error] [pid 46083:tid 46087] [client 20.240.242.60:5250] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.php"] [unique_id "aevilDxw_Zq74vWdjmkfWwAAAQA"]
[Sat Apr 25 05:37:25.177302 2026] [:error] [pid 44425:tid 44448] [client 20.240.242.60:51874] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.php"] [unique_id "aevilSUl-VlItvY2tR_4DwAAANU"]
[Sat Apr 25 05:37:25.741609 2026] [:error] [pid 46083:tid 46094] [client 20.240.242.60:53436] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aws.php"] [unique_id "aevilTxw_Zq74vWdjmkfXwAAAQc"]
[Sat Apr 25 05:37:26.308652 2026] [:error] [pid 46083:tid 46097] [client 20.240.242.60:45967] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/embed.php"] [unique_id "aeviljxw_Zq74vWdjmkfYgAAAQo"]
[Sat Apr 25 05:37:26.858755 2026] [:error] [pid 46083:tid 46098] [client 20.240.242.60:58794] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/embed.php"] [unique_id "aeviljxw_Zq74vWdjmkfZQAAAQs"]
[Sat Apr 25 05:37:27.392955 2026] [:error] [pid 46083:tid 46111] [client 20.240.242.60:64112] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/embed.php"] [unique_id "aevilzxw_Zq74vWdjmkfZwAAARc"]
[Sat Apr 25 05:37:27.931011 2026] [:error] [pid 46083:tid 46102] [client 20.240.242.60:45968] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/embed.php"] [unique_id "aevilzxw_Zq74vWdjmkfbQAAAQ8"]
[Sat Apr 25 05:37:28.478401 2026] [:error] [pid 46083:tid 46090] [client 20.240.242.60:29742] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stat.php"] [unique_id "aevimDxw_Zq74vWdjmkfbwAAAQM"]
[Sat Apr 25 05:37:29.047579 2026] [:error] [pid 46083:tid 46088] [client 20.240.242.60:64800] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stat.php"] [unique_id "aevimTxw_Zq74vWdjmkfcgAAAQE"]
[Sat Apr 25 05:37:29.602608 2026] [:error] [pid 44321:tid 44404] [client 20.240.242.60:64125] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stat.php"] [unique_id "aevimY1b5lV-asWa_Y4f6AAAAJU"]
[Sat Apr 25 05:37:30.130051 2026] [:error] [pid 44425:tid 44436] [client 20.240.242.60:64089] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/stat.php"] [unique_id "aevimiUl-VlItvY2tR_4IwAAAMk"]
[Sat Apr 25 05:37:30.690828 2026] [:error] [pid 46083:tid 46104] [client 20.240.242.60:47367] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/setup.php"] [unique_id "aevimjxw_Zq74vWdjmkfdwAAARE"]
[Sat Apr 25 05:37:31.292499 2026] [:error] [pid 46083:tid 46108] [client 20.240.242.60:47415] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/setup.php"] [unique_id "aevimzxw_Zq74vWdjmkfewAAARQ"]
[Sat Apr 25 05:37:31.843307 2026] [:error] [pid 46083:tid 46107] [client 20.240.242.60:58758] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/setup.php"] [unique_id "aevimzxw_Zq74vWdjmkffgAAARM"]
[Sat Apr 25 05:37:32.405499 2026] [:error] [pid 46083:tid 46091] [client 20.240.242.60:64075] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/setup.php"] [unique_id "aevinDxw_Zq74vWdjmkfggAAAQQ"]
[Sat Apr 25 05:37:32.972684 2026] [:error] [pid 44425:tid 44431] [client 20.240.242.60:50342] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/development.php"] [unique_id "aevinCUl-VlItvY2tR_4KwAAAMQ"]
[Sat Apr 25 05:37:33.503334 2026] [:error] [pid 46083:tid 46108] [client 20.240.242.60:5297] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/development.php"] [unique_id "aevinTxw_Zq74vWdjmkfhgAAARQ"]
[Sat Apr 25 05:37:34.042009 2026] [:error] [pid 46083:tid 46100] [client 20.240.242.60:56820] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/development.php"] [unique_id "aevinjxw_Zq74vWdjmkfiQAAAQ0"]
[Sat Apr 25 05:37:34.591666 2026] [:error] [pid 46083:tid 46094] [client 20.240.242.60:29706] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/development.php"] [unique_id "aevinjxw_Zq74vWdjmkfjgAAAQc"]
[Sat Apr 25 05:37:35.140354 2026] [:error] [pid 44320:tid 44371] [client 20.240.242.60:43956] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environment.php"] [unique_id "aevinzmFqSpku_dij8hsvwAAAE8"]
[Sat Apr 25 05:37:35.692374 2026] [:error] [pid 44319:tid 44345] [client 20.240.242.60:63672] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environment.php"] [unique_id "aevin8zJPAVLUb2pWtJKwQAAABA"]
[Sat Apr 25 05:37:36.242453 2026] [:error] [pid 46083:tid 46101] [client 20.240.242.60:64371] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environment.php"] [unique_id "aevioDxw_Zq74vWdjmkfkQAAAQ4"]
[Sat Apr 25 05:37:36.841026 2026] [:error] [pid 44320:tid 44376] [client 20.240.242.60:36208] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/environment.php"] [unique_id "aevioDmFqSpku_dij8hswgAAAFQ"]
[Sat Apr 25 05:37:37.417431 2026] [:error] [pid 46083:tid 46091] [client 20.240.242.60:41336] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db_config.php"] [unique_id "aevioTxw_Zq74vWdjmkfkwAAAQQ"]
[Sat Apr 25 05:37:37.962005 2026] [:error] [pid 46083:tid 46093] [client 20.240.242.60:55191] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db_config.php"] [unique_id "aevioTxw_Zq74vWdjmkflwAAAQY"]
[Sat Apr 25 05:37:38.565784 2026] [:error] [pid 44321:tid 44406] [client 20.240.242.60:52418] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db_config.php"] [unique_id "aevioo1b5lV-asWa_Y4f8AAAAJc"]
[Sat Apr 25 05:37:39.108288 2026] [:error] [pid 44321:tid 44385] [client 20.240.242.60:44536] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db_config.php"] [unique_id "aevio41b5lV-asWa_Y4f8gAAAII"]
[Sat Apr 25 05:37:39.647582 2026] [:error] [pid 44319:tid 44351] [client 20.240.242.60:35435] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aevio8zJPAVLUb2pWtJKxgAAABY"]
[Sat Apr 25 05:37:40.179969 2026] [:error] [pid 44319:tid 44342] [client 20.240.242.60:55186] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aevipMzJPAVLUb2pWtJKyAAAAA0"]
[Sat Apr 25 05:37:40.709180 2026] [:error] [pid 44425:tid 44441] [client 20.240.242.60:59585] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aevipCUl-VlItvY2tR_4PQAAAM4"]
[Sat Apr 25 05:37:41.241799 2026] [:error] [pid 44321:tid 44403] [client 20.240.242.60:46491] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aevipY1b5lV-asWa_Y4f-QAAAJQ"]
[Sat Apr 25 05:37:41.786700 2026] [:error] [pid 44321:tid 44384] [client 20.240.242.60:41291] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/deploy.php"] [unique_id "aevipY1b5lV-asWa_Y4f_AAAAIE"]
[Sat Apr 25 05:37:42.315971 2026] [:error] [pid 44321:tid 44406] [client 20.240.242.60:44499] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/deploy.php"] [unique_id "aevipo1b5lV-asWa_Y4f_gAAAJc"]
[Sat Apr 25 05:37:42.848877 2026] [:error] [pid 44319:tid 44343] [client 20.240.242.60:5427] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/deploy.php"] [unique_id "aevipszJPAVLUb2pWtJKzAAAAA4"]
[Sat Apr 25 05:37:43.375649 2026] [:error] [pid 44321:tid 44394] [client 20.240.242.60:55962] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/deploy.php"] [unique_id "aevip41b5lV-asWa_Y4gBAAAAIs"]
[Sat Apr 25 05:37:43.907017 2026] [:error] [pid 44425:tid 44438] [client 20.240.242.60:5408] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apis.php"] [unique_id "aevipyUl-VlItvY2tR_4QAAAAMs"]
[Sat Apr 25 05:37:44.496704 2026] [:error] [pid 44425:tid 44440] [client 20.240.242.60:55940] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apis.php"] [unique_id "aeviqCUl-VlItvY2tR_4QwAAAM0"]
[Sat Apr 25 05:37:45.046814 2026] [:error] [pid 44425:tid 44430] [client 20.240.242.60:55950] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apis.php"] [unique_id "aeviqSUl-VlItvY2tR_4RAAAAMM"]
[Sat Apr 25 05:37:45.597404 2026] [:error] [pid 44321:tid 44406] [client 20.240.242.60:5336] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/apis.php"] [unique_id "aeviqY1b5lV-asWa_Y4gEgAAAJc"]
[Sat Apr 25 05:37:46.219935 2026] [:error] [pid 44321:tid 44383] [client 20.240.242.60:39561] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asdf.php"] [unique_id "aeviqo1b5lV-asWa_Y4gFgAAAIA"]
[Sat Apr 25 05:37:46.779682 2026] [:error] [pid 44425:tid 44434] [client 20.240.242.60:59613] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asdf.php"] [unique_id "aeviqiUl-VlItvY2tR_4SQAAAMc"]
[Sat Apr 25 05:37:47.328572 2026] [:error] [pid 44319:tid 44341] [client 20.240.242.60:51034] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asdf.php"] [unique_id "aeviq8zJPAVLUb2pWtJK2QAAAAw"]
[Sat Apr 25 05:37:47.881712 2026] [:error] [pid 46083:tid 46088] [client 20.240.242.60:5428] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asdf.php"] [unique_id "aeviqzxw_Zq74vWdjmkfoAAAAQE"]
[Sat Apr 25 05:37:48.409604 2026] [:error] [pid 44425:tid 44427] [client 20.240.242.60:55215] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1100.php"] [unique_id "aevirCUl-VlItvY2tR_4TwAAAMA"]
[Sat Apr 25 05:37:48.956718 2026] [:error] [pid 44321:tid 44387] [client 20.240.242.60:58021] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1100.php"] [unique_id "aevirI1b5lV-asWa_Y4gHAAAAIQ"]
[Sat Apr 25 05:37:49.520973 2026] [:error] [pid 44320:tid 44357] [client 20.240.242.60:43939] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1100.php"] [unique_id "aevirTmFqSpku_dij8hsywAAAEE"]
[Sat Apr 25 05:37:50.082374 2026] [:error] [pid 44320:tid 44363] [client 20.240.242.60:42403] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1100.php"] [unique_id "aevirjmFqSpku_dij8hszQAAAEc"]
[Sat Apr 25 05:37:50.627747 2026] [:error] [pid 44320:tid 44380] [client 20.240.242.60:35442] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/._info.php"] [unique_id "aevirjmFqSpku_dij8hs0AAAAFg"]
[Sat Apr 25 05:37:51.153835 2026] [:error] [pid 46083:tid 46108] [client 20.240.242.60:60652] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/._info.php"] [unique_id "aevirzxw_Zq74vWdjmkfpAAAARQ"]
[Sat Apr 25 05:37:51.697980 2026] [:error] [pid 46083:tid 46099] [client 20.240.242.60:5439] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/._info.php"] [unique_id "aevirzxw_Zq74vWdjmkfpwAAAQw"]
[Sat Apr 25 05:37:52.259230 2026] [:error] [pid 46083:tid 46087] [client 20.240.242.60:60227] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/._info.php"] [unique_id "aevisDxw_Zq74vWdjmkfrAAAAQA"]
[Sat Apr 25 05:37:52.821973 2026] [:error] [pid 44320:tid 44378] [client 20.240.242.60:60668] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_flag.php"] [unique_id "aevisDmFqSpku_dij8hs0gAAAFY"]
[Sat Apr 25 05:37:53.367926 2026] [:error] [pid 46083:tid 46096] [client 20.240.242.60:37486] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_flag.php"] [unique_id "aevisTxw_Zq74vWdjmkftAAAAQk"]
[Sat Apr 25 05:37:53.897597 2026] [:error] [pid 46083:tid 46109] [client 20.240.242.60:5395] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_flag.php"] [unique_id "aevisTxw_Zq74vWdjmkfuwAAARU"]
[Sat Apr 25 05:37:54.422879 2026] [:error] [pid 46083:tid 46091] [client 20.240.242.60:58035] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_flag.php"] [unique_id "aevisjxw_Zq74vWdjmkfwQAAAQQ"]
[Sat Apr 25 05:37:54.949797 2026] [:error] [pid 46083:tid 46103] [client 20.240.242.60:35437] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_info4.php"] [unique_id "aevisjxw_Zq74vWdjmkfwwAAARA"]
[Sat Apr 25 05:37:55.481130 2026] [:error] [pid 46083:tid 46110] [client 20.240.242.60:60629] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_info4.php"] [unique_id "aeviszxw_Zq74vWdjmkfxgAAARY"]
[Sat Apr 25 05:37:56.042029 2026] [:error] [pid 44425:tid 44427] [client 20.240.242.60:60265] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_info4.php"] [unique_id "aevitCUl-VlItvY2tR_4XAAAAMA"]
[Sat Apr 25 05:37:56.607128 2026] [:error] [pid 46083:tid 46104] [client 20.240.242.60:48902] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_info4.php"] [unique_id "aevitDxw_Zq74vWdjmkfzQAAARE"]
[Sat Apr 25 05:37:57.179617 2026] [:error] [pid 46083:tid 46088] [client 20.240.242.60:37448] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevitTxw_Zq74vWdjmkf0AAAAQE"]
[Sat Apr 25 05:37:57.747088 2026] [:error] [pid 46083:tid 46100] [client 20.240.242.60:35403] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevitTxw_Zq74vWdjmkf1AAAAQ0"]
[Sat Apr 25 05:37:58.293311 2026] [:error] [pid 44425:tid 44437] [client 20.240.242.60:54815] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevitiUl-VlItvY2tR_4aQAAAMo"]
[Sat Apr 25 05:37:58.822943 2026] [:error] [pid 46083:tid 46100] [client 20.240.242.60:51020] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aevitjxw_Zq74vWdjmkf2QAAAQ0"]
[Sat Apr 25 05:37:59.351110 2026] [:error] [pid 46083:tid 46088] [client 20.240.242.60:30121] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevitzxw_Zq74vWdjmkf3AAAAQE"]
[Sat Apr 25 05:37:59.949897 2026] [:error] [pid 46083:tid 46098] [client 20.240.242.60:59627] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HsFPDcD.php"] [unique_id "aevitzxw_Zq74vWdjmkf3gAAAQs"]
[Sat Apr 25 05:38:00.513644 2026] [:error] [pid 44425:tid 44434] [client 20.240.242.60:42421] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HsFPDcD.php"] [unique_id "aeviuCUl-VlItvY2tR_4dQAAAMc"]
[Sat Apr 25 05:38:01.062992 2026] [:error] [pid 44425:tid 44444] [client 20.240.242.60:5401] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/HsFPDcD.php"] [unique_id "aeviuSUl-VlItvY2tR_4eQAAANE"]
[Sat Apr 25 05:38:01.656532 2026] [:error] [pid 44319:tid 44351] [client 20.240.242.60:46535] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.inc.php"] [unique_id "aeviuczJPAVLUb2pWtJK4gAAABY"]
[Sat Apr 25 05:38:02.227592 2026] [:error] [pid 44425:tid 44432] [client 20.240.242.60:30135] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.inc.php"] [unique_id "aeviuiUl-VlItvY2tR_4fgAAAMU"]
[Sat Apr 25 05:38:02.801900 2026] [:error] [pid 44425:tid 44437] [client 20.240.242.60:6102] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.inc.php"] [unique_id "aeviuiUl-VlItvY2tR_4gQAAAMo"]
[Sat Apr 25 05:38:03.354034 2026] [:error] [pid 44425:tid 44439] [client 20.240.242.60:57986] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config.inc.php"] [unique_id "aeviuyUl-VlItvY2tR_4hAAAAMw"]
[Sat Apr 25 05:38:03.959057 2026] [:error] [pid 44425:tid 44436] [client 20.240.242.60:59590] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aeviuyUl-VlItvY2tR_4iAAAAMk"]
[Sat Apr 25 05:38:04.513283 2026] [:error] [pid 46083:tid 46105] [client 20.240.242.60:6098] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aevivDxw_Zq74vWdjmkf4QAAARI"]
[Sat Apr 25 05:38:05.054402 2026] [:error] [pid 44319:tid 44340] [client 20.240.242.60:60247] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aevivczJPAVLUb2pWtJK5wAAAAs"]
[Sat Apr 25 05:38:05.605945 2026] [:error] [pid 44425:tid 44437] [client 20.240.242.60:6104] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "aevivSUl-VlItvY2tR_4jAAAAMo"]
[Sat Apr 25 05:38:06.179822 2026] [:error] [pid 46083:tid 46108] [client 20.240.242.60:60229] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aevivjxw_Zq74vWdjmkf5QAAARQ"]
[Sat Apr 25 05:38:06.736088 2026] [:error] [pid 44320:tid 44370] [client 20.240.242.60:51069] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aevivjmFqSpku_dij8hs2AAAAE4"]
[Sat Apr 25 05:38:07.291296 2026] [:error] [pid 44425:tid 44449] [client 20.240.242.60:41307] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aevivyUl-VlItvY2tR_4kQAAANY"]
[Sat Apr 25 05:38:07.866997 2026] [:error] [pid 44425:tid 44428] [client 20.240.242.60:29647] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asus.php"] [unique_id "aevivyUl-VlItvY2tR_4lQAAAME"]
[Sat Apr 25 05:38:08.443886 2026] [:error] [pid 46083:tid 46111] [client 20.240.242.60:29663] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_version.php"] [unique_id "aeviwDxw_Zq74vWdjmkf6gAAARc"]
[Sat Apr 25 05:38:09.031367 2026] [:error] [pid 44425:tid 44445] [client 20.240.242.60:35422] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_version.php"] [unique_id "aeviwSUl-VlItvY2tR_4lgAAANI"]
[Sat Apr 25 05:38:09.582288 2026] [:error] [pid 44320:tid 44378] [client 20.240.242.60:58011] [client 20.240.242.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php_version.php"] [unique_id "aeviwTmFqSpku_dij8hs2QAAAFY"]
[Sat Apr 25 07:28:15.216159 2026] [:error] [pid 46083:tid 46100] [client 103.50.150.178:33636] [client 103.50.150.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.50.150.178, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aev8jzxw_Zq74vWdjmlSfQAAAQ0"]
[Sat Apr 25 09:54:59.836146 2026] [:error] [pid 46083:tid 46087] [client 182.44.12.37:51275] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aewe8zxw_Zq74vWdjmmR3QAAAQA"]
[Sat Apr 25 11:51:56.905349 2026] [:error] [pid 44319:tid 44337] [client 43.157.170.126:40840] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aew6XMzJPAVLUb2pWtKFXgAAAAg"]
[Sat Apr 25 16:37:31.612527 2026] [:error] [pid 44321:tid 44391] [client 175.6.217.4:50778] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aex9S41b5lV-asWa_Y7DyAAAAIg"]
[Sat Apr 25 18:43:20.615253 2026] [:error] [pid 16107:tid 16155] [client 15.237.127.99:56806] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aeyayNIfF7Hy3tw0sYRocgAAAJI"]
[Sat Apr 25 18:43:21.887416 2026] [:error] [pid 16108:tid 16181] [client 15.237.127.99:56960] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "aeyayYbPF4HSQDj6WrljyAAAAM8"]
[Sat Apr 25 18:43:22.883579 2026] [:error] [pid 16108:tid 16182] [client 15.237.127.99:57030] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aeyayobPF4HSQDj6WrljygAAANA"]
[Sat Apr 25 18:43:23.891764 2026] [:error] [pid 16106:tid 16116] [client 15.237.127.99:57086] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aeyayyGjdEsrWF7e-7MhSgAAAEY"]
[Sat Apr 25 18:43:24.893213 2026] [:error] [pid 29049:tid 29070] [client 15.237.127.99:57126] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aeyazCfsWHIvmg63qcVkCQAAARM"]
[Sat Apr 25 18:43:25.902280 2026] [:error] [pid 16106:tid 16128] [client 15.237.127.99:57176] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aeyazSGjdEsrWF7e-7MhSwAAAFI"]
[Sat Apr 25 18:43:26.901108 2026] [:error] [pid 16107:tid 16151] [client 15.237.127.99:57232] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "aeyaztIfF7Hy3tw0sYRoegAAAI4"]
[Sat Apr 25 18:43:27.908705 2026] [:error] [pid 16106:tid 16130] [client 15.237.127.99:57274] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.remote"] [unique_id "aeyazyGjdEsrWF7e-7MhUQAAAFQ"]
[Sat Apr 25 18:43:28.904061 2026] [:error] [pid 16107:tid 16139] [client 15.237.127.99:57308] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "aeya0NIfF7Hy3tw0sYRogAAAAII"]
[Sat Apr 25 18:43:29.899164 2026] [:error] [pid 16195:tid 16214] [client 15.237.127.99:57334] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "aeya0TVPLvrpvXaNQOkVLgAAABA"]
[Sat Apr 25 18:43:30.894727 2026] [:error] [pid 16107:tid 16159] [client 15.237.127.99:57366] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "aeya0tIfF7Hy3tw0sYRoiAAAAJY"]
[Sat Apr 25 18:43:31.893620 2026] [:error] [pid 16107:tid 16138] [client 15.237.127.99:57400] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "aeya09IfF7Hy3tw0sYRojAAAAIE"]
[Sat Apr 25 18:43:32.892117 2026] [:error] [pid 16195:tid 16205] [client 15.237.127.99:57424] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "aeya1DVPLvrpvXaNQOkVMwAAAAc"]
[Sat Apr 25 18:43:33.892084 2026] [:error] [pid 29049:tid 29055] [client 15.237.127.99:57458] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "aeya1SfsWHIvmg63qcVkEgAAAQQ"]
[Sat Apr 25 18:43:34.894376 2026] [:error] [pid 16108:tid 16170] [client 15.237.127.99:57486] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "aeya1obPF4HSQDj6Wrlj1AAAAMY"]
[Sat Apr 25 18:43:35.904475 2026] [:error] [pid 29049:tid 29054] [client 15.237.127.99:57554] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "aeya1yfsWHIvmg63qcVkGwAAAQM"]
[Sat Apr 25 18:43:36.912066 2026] [:error] [pid 29049:tid 29062] [client 15.237.127.99:57624] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.stage"] [unique_id "aeya2CfsWHIvmg63qcVkKgAAAQs"]
[Sat Apr 25 18:43:37.908248 2026] [:error] [pid 29049:tid 29060] [client 15.237.127.99:57700] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.ci"] [unique_id "aeya2SfsWHIvmg63qcVkMAAAAQk"]
[Sat Apr 25 18:43:38.915677 2026] [:error] [pid 29049:tid 29071] [client 15.237.127.99:57764] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.docker"] [unique_id "aeya2ifsWHIvmg63qcVkNAAAARQ"]
[Sat Apr 25 18:43:39.918362 2026] [:error] [pid 16195:tid 16218] [client 15.237.127.99:57854] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.live"] [unique_id "aeya2zVPLvrpvXaNQOkVQgAAABQ"]
[Sat Apr 25 18:43:40.925060 2026] [:error] [pid 16106:tid 16132] [client 15.237.127.99:57932] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.preprod"] [unique_id "aeya3CGjdEsrWF7e-7MhWwAAAFY"]
[Sat Apr 25 18:43:41.925013 2026] [:error] [pid 29049:tid 29067] [client 15.237.127.99:57958] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.uat"] [unique_id "aeya3SfsWHIvmg63qcVkOgAAARA"]
[Sat Apr 25 18:43:42.934371 2026] [:error] [pid 16195:tid 16213] [client 15.237.127.99:57984] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "aeya3jVPLvrpvXaNQOkVRwAAAA8"]
[Sat Apr 25 18:43:43.941505 2026] [:error] [pid 29049:tid 29066] [client 15.237.127.99:58022] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.swp"] [unique_id "aeya3yfsWHIvmg63qcVkQQAAAQ8"]
[Sat Apr 25 18:43:44.946392 2026] [:error] [pid 16108:tid 16170] [client 15.237.127.99:58058] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env~"] [unique_id "aeya4IbPF4HSQDj6Wrlj3QAAAMY"]
[Sat Apr 25 18:43:45.952595 2026] [:error] [pid 16108:tid 16180] [client 15.237.127.99:58084] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "aeya4YbPF4HSQDj6Wrlj3gAAAM4"]
[Sat Apr 25 18:43:46.957797 2026] [:error] [pid 16106:tid 16118] [client 15.237.127.99:58112] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/apps/.env"] [unique_id "aeya4iGjdEsrWF7e-7MhYQAAAEg"]
[Sat Apr 25 18:43:47.964158 2026] [:error] [pid 16195:tid 16219] [client 15.237.127.99:58144] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "aeya4zVPLvrpvXaNQOkVTAAAABU"]
[Sat Apr 25 20:40:03.778869 2026] [:error] [pid 59897:tid 59932] [client 18.136.202.61:50816] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aey2I_BrrkdzpEbmK4d67AAAAIU"]
[Sat Apr 25 20:40:04.339122 2026] [:error] [pid 59898:tid 59958] [client 18.136.202.61:50842] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "aey2JB-4vImxb0kbdzej7QAAAMQ"]
[Sat Apr 25 20:40:04.768486 2026] [:error] [pid 59985:tid 59992] [client 18.136.202.61:50858] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "aey2JAF_zDvEhKvyTH6jWQAAAAU"]
[Sat Apr 25 20:40:05.196190 2026] [:error] [pid 3212:tid 3227] [client 18.136.202.61:50880] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.production"] [unique_id "aey2Jfg-28TY8_YLtUcYmAAAAQ0"]
[Sat Apr 25 20:40:05.624798 2026] [:error] [pid 59985:tid 59994] [client 18.136.202.61:50890] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "aey2JQF_zDvEhKvyTH6jXgAAAAc"]
[Sat Apr 25 20:40:06.060624 2026] [:error] [pid 59985:tid 60010] [client 18.136.202.61:50902] [client 18.136.202.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.development"] [unique_id "aey2JgF_zDvEhKvyTH6jXwAAABc"]
[Sun Apr 26 03:24:50.850944 2026] [:error] [pid 59898:tid 59962] [client 212.47.78.126:52151] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ae0VAh-4vImxb0kbdzf7CQAAAMg"]
[Sun Apr 26 03:24:51.453850 2026] [:error] [pid 59896:tid 59913] [client 212.47.78.126:50638] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae0VA7LLzhtkd-OXUgCC6gAAAE0"]
[Sun Apr 26 03:24:52.045484 2026] [:error] [pid 59898:tid 59963] [client 212.47.78.126:50988] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae0VBB-4vImxb0kbdzf7DgAAAMk"]
[Sun Apr 26 05:08:05.890323 2026] [:error] [pid 10315:tid 10325] [client 20.220.225.64:64774] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "ae0tNaJIw2vjkleLIaB85gAAAQg"]
[Sun Apr 26 05:08:06.875952 2026] [:error] [pid 8491:tid 8499] [client 20.220.225.64:64880] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "ae0tNiq7I7e6CJooQM1_xQAAAMA"]
[Sun Apr 26 05:08:07.875787 2026] [:error] [pid 8390:tid 8455] [client 20.220.225.64:63610] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "ae0tN4GPtFK_i9p5yxQEkQAAAIQ"]
[Sun Apr 26 05:08:08.991091 2026] [:error] [pid 41906:tid 41930] [client 20.220.225.64:64178] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "ae0tOD3-0A3lxw9OXoDtjgAAAZY"]
[Sun Apr 26 05:08:10.126984 2026] [:error] [pid 10315:tid 10338] [client 20.220.225.64:64190] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "ae0tOqJIw2vjkleLIaB86gAAARU"]
[Sun Apr 26 05:08:10.912886 2026] [:error] [pid 31273:tid 31352] [client 20.220.225.64:62950] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "ae0tOvhcNJEGrATcuEexLQAAAU0"]
[Sun Apr 26 05:08:11.958506 2026] [:error] [pid 8383:tid 8409] [client 20.220.225.64:63556] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "ae0tO9Fa2S3EsATMdWOzQAAAAAw"]
[Sun Apr 26 05:08:13.403158 2026] [:error] [pid 41906:tid 41924] [client 20.220.225.64:64815] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "ae0tPT3-0A3lxw9OXoDtlwAAAZA"]
[Sun Apr 26 05:08:15.179168 2026] [:error] [pid 41906:tid 41913] [client 20.220.225.64:64846] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "ae0tPz3-0A3lxw9OXoDtmgAAAYU"]
[Sun Apr 26 05:08:15.989078 2026] [:error] [pid 8390:tid 8467] [client 20.220.225.64:63519] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "ae0tP4GPtFK_i9p5yxQElQAAAJA"]
[Sun Apr 26 05:08:17.083859 2026] [:error] [pid 8385:tid 8425] [client 20.220.225.64:64860] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "ae0tQTOy7_J84Wx3-oxUDAAAAEE"]
[Sun Apr 26 05:08:18.233929 2026] [:error] [pid 41906:tid 41926] [client 20.220.225.64:62915] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "ae0tQj3-0A3lxw9OXoDtpQAAAZI"]
[Sun Apr 26 05:08:18.946799 2026] [:error] [pid 10315:tid 10317] [client 20.220.225.64:64836] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "ae0tQqJIw2vjkleLIaB8_QAAAQA"]
[Sun Apr 26 05:08:19.601847 2026] [:error] [pid 8390:tid 8471] [client 20.220.225.64:64833] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "ae0tQ4GPtFK_i9p5yxQEmAAAAJQ"]
[Sun Apr 26 05:08:20.262786 2026] [:error] [pid 41906:tid 41908] [client 20.220.225.64:62868] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "ae0tRD3-0A3lxw9OXoDttAAAAYA"]
[Sun Apr 26 05:08:21.139684 2026] [:error] [pid 10315:tid 10339] [client 20.220.225.64:64241] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "ae0tRaJIw2vjkleLIaB9BgAAARY"]
[Sun Apr 26 05:08:21.834744 2026] [:error] [pid 10315:tid 10322] [client 20.220.225.64:64773] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "ae0tRaJIw2vjkleLIaB9DwAAAQU"]
[Sun Apr 26 05:08:22.350185 2026] [:error] [pid 41906:tid 41922] [client 20.220.225.64:63612] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "ae0tRj3-0A3lxw9OXoDtuAAAAY4"]
[Sun Apr 26 05:08:23.007691 2026] [:error] [pid 8383:tid 8404] [client 20.220.225.64:64848] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "ae0tR9Fa2S3EsATMdWOzRwAAAAc"]
[Sun Apr 26 05:08:24.755618 2026] [:error] [pid 41906:tid 41913] [client 20.220.225.64:63552] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "ae0tSD3-0A3lxw9OXoDtvgAAAYU"]
[Sun Apr 26 05:08:25.393323 2026] [:error] [pid 8491:tid 8515] [client 20.220.225.64:63496] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "ae0tSSq7I7e6CJooQM1_1AAAANA"]
[Sun Apr 26 05:08:26.385632 2026] [:error] [pid 8383:tid 8412] [client 20.220.225.64:63506] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "ae0tStFa2S3EsATMdWOzSgAAAA8"]
[Sun Apr 26 05:08:27.428705 2026] [:error] [pid 41906:tid 41919] [client 20.220.225.64:63581] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "ae0tSz3-0A3lxw9OXoDtyAAAAYs"]
[Sun Apr 26 05:08:28.323626 2026] [:error] [pid 41906:tid 41914] [client 20.220.225.64:62967] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "ae0tTD3-0A3lxw9OXoDtzgAAAYY"]
[Sun Apr 26 05:08:28.875656 2026] [:error] [pid 41906:tid 41925] [client 20.220.225.64:64235] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "ae0tTD3-0A3lxw9OXoDt0gAAAZE"]
[Sun Apr 26 05:08:29.708692 2026] [:error] [pid 10315:tid 10317] [client 20.220.225.64:64169] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "ae0tTaJIw2vjkleLIaB9HwAAAQA"]
[Sun Apr 26 05:08:30.604954 2026] [:error] [pid 41906:tid 41908] [client 20.220.225.64:64783] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "ae0tTj3-0A3lxw9OXoDt2QAAAYA"]
[Sun Apr 26 05:08:31.232075 2026] [:error] [pid 41906:tid 41927] [client 20.220.225.64:63541] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "ae0tTz3-0A3lxw9OXoDt3gAAAZM"]
[Sun Apr 26 05:08:32.339477 2026] [:error] [pid 41906:tid 41912] [client 20.220.225.64:63508] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "ae0tUD3-0A3lxw9OXoDt5AAAAYQ"]
[Sun Apr 26 05:08:33.039535 2026] [:error] [pid 8491:tid 8524] [client 20.220.225.64:62302] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "ae0tUSq7I7e6CJooQM1_3QAAANg"]
[Sun Apr 26 05:08:33.912374 2026] [:error] [pid 41906:tid 41924] [client 20.220.225.64:64854] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "ae0tUT3-0A3lxw9OXoDt7AAAAZA"]
[Sun Apr 26 05:08:34.392832 2026] [:error] [pid 41906:tid 41928] [client 20.220.225.64:64892] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "ae0tUj3-0A3lxw9OXoDt7wAAAZQ"]
[Sun Apr 26 05:08:35.068680 2026] [:error] [pid 8385:tid 8435] [client 20.220.225.64:62947] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "ae0tUzOy7_J84Wx3-oxUEwAAAEs"]
[Sun Apr 26 05:08:36.079009 2026] [:error] [pid 10315:tid 10337] [client 20.220.225.64:63511] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "ae0tVKJIw2vjkleLIaB9OgAAARQ"]
[Sun Apr 26 05:08:37.070261 2026] [:error] [pid 8385:tid 8426] [client 20.220.225.64:63614] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "ae0tVTOy7_J84Wx3-oxUFgAAAEI"]
[Sun Apr 26 05:08:39.182897 2026] [:error] [pid 10315:tid 10321] [client 20.220.225.64:64797] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "ae0tV6JIw2vjkleLIaB9RwAAAQQ"]
[Sun Apr 26 05:08:40.787805 2026] [:error] [pid 10315:tid 10337] [client 20.220.225.64:63500] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ae0tWKJIw2vjkleLIaB9TgAAARQ"]
[Sun Apr 26 05:08:42.884174 2026] [:error] [pid 8491:tid 8524] [client 20.220.225.64:64813] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ae0tWiq7I7e6CJooQM1_7QAAANg"]
[Sun Apr 26 05:08:44.562011 2026] [:error] [pid 10315:tid 10319] [client 20.220.225.64:64174] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ae0tXKJIw2vjkleLIaB9agAAAQI"]
[Sun Apr 26 05:08:45.573121 2026] [:error] [pid 41906:tid 41929] [client 20.220.225.64:62930] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ae0tXT3-0A3lxw9OXoDuCAAAAZU"]
[Sun Apr 26 05:08:46.386426 2026] [:error] [pid 8383:tid 8400] [client 20.220.225.64:63583] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "ae0tXtFa2S3EsATMdWOzSwAAAAM"]
[Sun Apr 26 05:08:47.756558 2026] [:error] [pid 8383:tid 8415] [client 20.220.225.64:64161] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "ae0tX9Fa2S3EsATMdWOzUgAAABI"]
[Sun Apr 26 05:08:48.639311 2026] [:error] [pid 41906:tid 41908] [client 20.220.225.64:64211] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "ae0tYD3-0A3lxw9OXoDuDwAAAYA"]
[Sun Apr 26 05:08:49.354336 2026] [:error] [pid 41906:tid 41909] [client 20.220.225.64:64861] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "ae0tYT3-0A3lxw9OXoDuFAAAAYE"]
[Sun Apr 26 05:08:50.098149 2026] [:error] [pid 8390:tid 8469] [client 20.220.225.64:64816] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "ae0tYoGPtFK_i9p5yxQErQAAAJI"]
[Sun Apr 26 05:08:50.853354 2026] [:error] [pid 10315:tid 10341] [client 20.220.225.64:64820] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "ae0tYqJIw2vjkleLIaB9eAAAARg"]
[Sun Apr 26 05:08:51.669543 2026] [:error] [pid 10315:tid 10340] [client 20.220.225.64:64196] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "ae0tY6JIw2vjkleLIaB9ewAAARc"]
[Sun Apr 26 05:08:52.523010 2026] [:error] [pid 31273:tid 31363] [client 20.220.225.64:64147] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "ae0tZPhcNJEGrATcuEexWAAAAVg"]
[Sun Apr 26 05:08:53.588294 2026] [:error] [pid 31273:tid 31347] [client 20.220.225.64:62894] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "ae0tZfhcNJEGrATcuEexXAAAAUk"]
[Sun Apr 26 05:08:54.801291 2026] [:error] [pid 41906:tid 41926] [client 20.220.225.64:64782] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "ae0tZj3-0A3lxw9OXoDuKAAAAZI"]
[Sun Apr 26 05:08:56.228927 2026] [:error] [pid 8390:tid 8457] [client 20.220.225.64:63555] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "ae0taIGPtFK_i9p5yxQEsgAAAIY"]
[Sun Apr 26 05:08:57.036488 2026] [:error] [pid 8491:tid 8508] [client 20.220.225.64:63534] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "ae0taSq7I7e6CJooQM1__AAAAMk"]
[Sun Apr 26 05:08:57.683296 2026] [:error] [pid 8491:tid 8519] [client 20.220.225.64:63608] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "ae0taSq7I7e6CJooQM1__gAAANQ"]
[Sun Apr 26 05:08:58.880008 2026] [:error] [pid 8383:tid 8419] [client 20.220.225.64:62912] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "ae0tatFa2S3EsATMdWOzWwAAABY"]
[Sun Apr 26 05:08:59.426371 2026] [:error] [pid 41906:tid 41930] [client 20.220.225.64:63490] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "ae0taz3-0A3lxw9OXoDuMwAAAZY"]
[Sun Apr 26 05:09:00.461984 2026] [:error] [pid 8383:tid 8400] [client 20.220.225.64:63516] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z60.php"] [unique_id "ae0tbNFa2S3EsATMdWOzYgAAAAM"]
[Sun Apr 26 05:09:02.125310 2026] [:error] [pid 8491:tid 8518] [client 20.220.225.64:64840] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae0tbiq7I7e6CJooQM2ABQAAANM"]
[Sun Apr 26 05:09:03.240960 2026] [:error] [pid 41906:tid 41929] [client 20.220.225.64:64787] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae0tbz3-0A3lxw9OXoDuOAAAAZU"]
[Sun Apr 26 05:09:04.006333 2026] [:error] [pid 10315:tid 10324] [client 20.220.225.64:62918] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae0tcKJIw2vjkleLIaB9kgAAAQc"]
[Sun Apr 26 05:09:04.872950 2026] [:error] [pid 41906:tid 41919] [client 20.220.225.64:64842] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae0tcD3-0A3lxw9OXoDuPQAAAYs"]
[Sun Apr 26 05:09:13.223811 2026] [:error] [pid 10315:tid 10317] [client 20.220.225.64:63608] [client 20.220.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ae0teaJIw2vjkleLIaB9oAAAAQA"]
[Sun Apr 26 05:09:16.724059 2026] [:error] [pid 41906:tid 41918] [client 20.220.225.64:64867] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "ae0tfD3-0A3lxw9OXoDuegAAAYo"]
[Sun Apr 26 05:09:18.611789 2026] [:error] [pid 10315:tid 10335] [client 20.220.225.64:64895] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "ae0tfqJIw2vjkleLIaB9pwAAARI"]
[Sun Apr 26 05:09:21.036133 2026] [:error] [pid 41906:tid 41931] [client 20.220.225.64:64776] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "ae0tgT3-0A3lxw9OXoDuhAAAAZc"]
[Sun Apr 26 05:09:22.317709 2026] [:error] [pid 8385:tid 8448] [client 20.220.225.64:62942] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "ae0tgjOy7_J84Wx3-oxUOQAAAFg"]
[Sun Apr 26 05:09:23.862123 2026] [:error] [pid 41906:tid 41916] [client 20.220.225.64:63593] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0tgz3-0A3lxw9OXoDuhwAAAYg"]
[Sun Apr 26 05:09:25.389188 2026] [:error] [pid 41906:tid 41914] [client 20.220.225.64:64182] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0thT3-0A3lxw9OXoDujgAAAYY"]
[Sun Apr 26 05:09:26.791654 2026] [:error] [pid 41906:tid 41924] [client 20.220.225.64:64869] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0thj3-0A3lxw9OXoDukwAAAZA"]
[Sun Apr 26 05:09:31.667763 2026] [:error] [pid 8390:tid 8472] [client 20.220.225.64:64152] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0ti4GPtFK_i9p5yxQE3QAAAJU"]
[Sun Apr 26 05:09:33.399471 2026] [:error] [pid 10315:tid 10340] [client 20.220.225.64:64784] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0tjaJIw2vjkleLIaB9xQAAARc"]
[Sun Apr 26 05:09:34.450887 2026] [:error] [pid 8491:tid 8516] [client 20.220.225.64:64793] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0tjiq7I7e6CJooQM2ANwAAANE"]
[Sun Apr 26 05:09:36.401193 2026] [:error] [pid 31273:tid 31347] [client 20.220.225.64:64253] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0tkPhcNJEGrATcuEexjQAAAUk"]
[Sun Apr 26 05:09:37.866116 2026] [:error] [pid 41906:tid 41910] [client 20.220.225.64:62940] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0tkT3-0A3lxw9OXoDupAAAAYI"]
[Sun Apr 26 05:09:39.258400 2026] [:error] [pid 41906:tid 41920] [client 20.220.225.64:64887] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ae0tkz3-0A3lxw9OXoDuqwAAAYw"]
[Sun Apr 26 05:09:41.604651 2026] [:error] [pid 8390:tid 8467] [client 20.220.225.64:64215] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ae0tlYGPtFK_i9p5yxQE8QAAAJA"]
[Sun Apr 26 05:09:45.414396 2026] [:error] [pid 8390:tid 8453] [client 20.220.225.64:64865] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ae0tmYGPtFK_i9p5yxQE_AAAAII"]
[Sun Apr 26 05:09:52.091984 2026] [:error] [pid 8491:tid 8523] [client 20.220.225.64:64849] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ae0toCq7I7e6CJooQM2AUAAAANc"]
[Sun Apr 26 05:09:58.760932 2026] [:error] [pid 8390:tid 8455] [client 20.220.225.64:64199] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "ae0tpoGPtFK_i9p5yxQFEgAAAIQ"]
[Sun Apr 26 05:10:09.028696 2026] [:error] [pid 31273:tid 31351] [client 20.220.225.64:62914] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "ae0tsfhcNJEGrATcuEexwAAAAUw"]
[Sun Apr 26 05:10:10.443323 2026] [:error] [pid 41906:tid 41922] [client 20.220.225.64:62248] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "ae0tsj3-0A3lxw9OXoDu7gAAAY4"]
[Sun Apr 26 05:10:11.394832 2026] [:error] [pid 8491:tid 8515] [client 20.220.225.64:62214] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "ae0tsyq7I7e6CJooQM2AhAAAANA"]
[Sun Apr 26 05:10:12.033949 2026] [:error] [pid 10315:tid 10333] [client 20.220.225.64:64236] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "ae0ttKJIw2vjkleLIaB-RwAAARA"]
[Sun Apr 26 05:10:14.007157 2026] [:error] [pid 41906:tid 41908] [client 20.220.225.64:64237] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "ae0ttj3-0A3lxw9OXoDu8wAAAYA"]
[Sun Apr 26 05:10:15.285735 2026] [:error] [pid 8390:tid 8467] [client 20.220.225.64:64149] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "ae0tt4GPtFK_i9p5yxQFJQAAAJA"]
[Sun Apr 26 05:10:24.634620 2026] [:error] [pid 8383:tid 8418] [client 20.220.225.64:64862] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae0twNFa2S3EsATMdWOzrwAAABU"]
[Sun Apr 26 05:10:26.972811 2026] [:error] [pid 8383:tid 8401] [client 20.220.225.64:63498] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae0twtFa2S3EsATMdWOzsgAAAAQ"]
[Sun Apr 26 05:10:29.859402 2026] [:error] [pid 10315:tid 10333] [client 20.220.225.64:63592] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae0txaJIw2vjkleLIaB-dgAAARA"]
[Sun Apr 26 05:10:31.049989 2026] [:error] [pid 8383:tid 8410] [client 20.220.225.64:64140] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "ae0tx9Fa2S3EsATMdWOztwAAAA0"]
[Sun Apr 26 05:10:32.106349 2026] [:error] [pid 10315:tid 10335] [client 20.220.225.64:61811] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae0tyKJIw2vjkleLIaB-ewAAARI"]
[Sun Apr 26 05:10:40.430686 2026] [:error] [pid 8491:tid 8520] [client 20.220.225.64:61791] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae0t0Cq7I7e6CJooQM2AqwAAANU"]
[Sun Apr 26 05:10:41.748802 2026] [:error] [pid 10315:tid 10319] [client 20.220.225.64:62933] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "ae0t0aJIw2vjkleLIaB-hwAAAQI"]
[Sun Apr 26 05:11:12.339285 2026] [:error] [pid 8390:tid 8455] [client 20.220.225.64:64195] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/manager.php"] [unique_id "ae0t8IGPtFK_i9p5yxQFXAAAAIQ"]
[Sun Apr 26 05:12:25.762062 2026] [:error] [pid 41906:tid 41910] [client 20.220.225.64:63579] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "ae0uOT3-0A3lxw9OXoDwKgAAAYI"]
[Sun Apr 26 05:12:29.267232 2026] [:error] [pid 10315:tid 10318] [client 20.220.225.64:64880] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "ae0uPaJIw2vjkleLIaB_FQAAAQE"]
[Sun Apr 26 05:12:31.256170 2026] [:error] [pid 8491:tid 8501] [client 20.220.225.64:62953] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "ae0uPyq7I7e6CJooQM2BCwAAAMI"]
[Sun Apr 26 05:12:33.075060 2026] [:error] [pid 31273:tid 31344] [client 20.220.225.64:63611] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gmo.php"] [unique_id "ae0uQfhcNJEGrATcuEeyCQAAAUY"]
[Sun Apr 26 05:12:34.116709 2026] [:error] [pid 41906:tid 41920] [client 20.220.225.64:63565] [client 20.220.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ae0uQj3-0A3lxw9OXoDwPQAAAYw"]
[Sun Apr 26 05:12:35.416866 2026] [:error] [pid 8491:tid 8508] [client 20.220.225.64:64853] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "ae0uQyq7I7e6CJooQM2BDAAAAMk"]
[Sun Apr 26 05:12:37.161206 2026] [:error] [pid 41906:tid 41911] [client 20.220.225.64:64176] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "ae0uRT3-0A3lxw9OXoDwQwAAAYM"]
[Sun Apr 26 05:12:38.485756 2026] [:error] [pid 8383:tid 8417] [client 20.220.225.64:64184] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "ae0uRtFa2S3EsATMdWO0GgAAABQ"]
[Sun Apr 26 05:12:39.178015 2026] [:error] [pid 8383:tid 8414] [client 20.220.225.64:64178] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/index.php"] [unique_id "ae0uR9Fa2S3EsATMdWO0GwAAABE"]
[Sun Apr 26 05:12:41.444122 2026] [:error] [pid 31273:tid 31339] [client 20.220.225.64:64129] [client 20.220.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ae0uSfhcNJEGrATcuEeyDgAAAUM"]
[Sun Apr 26 05:12:42.488586 2026] [:error] [pid 10315:tid 10341] [client 20.220.225.64:63512] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ae0uSqJIw2vjkleLIaB_IgAAARg"]
[Sun Apr 26 05:12:43.679560 2026] [:error] [pid 31273:tid 31363] [client 20.220.225.64:63574] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ae0uS_hcNJEGrATcuEeyEwAAAVg"]
[Sun Apr 26 05:12:44.489421 2026] [:error] [pid 31273:tid 31347] [client 20.220.225.64:62929] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ae0uTPhcNJEGrATcuEeyFQAAAUk"]
[Sun Apr 26 05:12:45.178814 2026] [:error] [pid 8385:tid 8444] [client 20.220.225.64:63603] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae0uTTOy7_J84Wx3-oxUtAAAAFQ"]
[Sun Apr 26 05:12:46.727471 2026] [:error] [pid 31273:tid 31350] [client 20.220.225.64:63573] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae0uTvhcNJEGrATcuEeyGQAAAUs"]
[Sun Apr 26 05:12:49.320533 2026] [:error] [pid 10315:tid 10323] [client 20.220.225.64:64219] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae0uUaJIw2vjkleLIaB_KQAAAQY"]
[Sun Apr 26 05:12:51.205167 2026] [:error] [pid 8390:tid 8474] [client 20.220.225.64:62923] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ae0uU4GPtFK_i9p5yxQFrgAAAJc"]
[Sun Apr 26 05:12:51.828463 2026] [:error] [pid 8385:tid 8438] [client 20.220.225.64:63554] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae0uUzOy7_J84Wx3-oxUuQAAAE4"]
[Sun Apr 26 05:12:53.610637 2026] [:error] [pid 31273:tid 31337] [client 20.220.225.64:64175] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae0uVfhcNJEGrATcuEeyJgAAAUI"]
[Sun Apr 26 05:12:54.744835 2026] [:error] [pid 8491:tid 8499] [client 20.220.225.64:64207] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae0uViq7I7e6CJooQM2BFAAAAMA"]
[Sun Apr 26 05:12:55.773889 2026] [:error] [pid 41906:tid 41929] [client 20.220.225.64:62931] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ae0uVz3-0A3lxw9OXoDwYAAAAZU"]
[Sun Apr 26 05:12:59.124816 2026] [:error] [pid 41906:tid 41917] [client 20.220.225.64:64162] [client 20.220.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "ae0uWz3-0A3lxw9OXoDwbQAAAYk"]
[Sun Apr 26 05:13:11.437538 2026] [:error] [pid 41906:tid 41927] [client 20.220.225.64:63560] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/index/function.php"] [unique_id "ae0uZz3-0A3lxw9OXoDwkAAAAZM"]
[Sun Apr 26 05:13:16.096804 2026] [:error] [pid 8383:tid 8414] [client 20.220.225.64:64837] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae0ubNFa2S3EsATMdWO0KAAAABE"]
[Sun Apr 26 05:13:17.044485 2026] [:error] [pid 10315:tid 10341] [client 20.220.225.64:63598] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae0ubaJIw2vjkleLIaB_QwAAARg"]
[Sun Apr 26 05:13:17.812927 2026] [:error] [pid 41906:tid 41929] [client 20.220.225.64:64821] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae0ubT3-0A3lxw9OXoDwmgAAAZU"]
[Sun Apr 26 05:13:18.847815 2026] [:error] [pid 8491:tid 8521] [client 20.220.225.64:64169] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "ae0ubiq7I7e6CJooQM2BIAAAANY"]
[Sun Apr 26 05:13:20.256456 2026] [:error] [pid 31273:tid 31345] [client 20.220.225.64:62913] [client 20.220.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ae0ucPhcNJEGrATcuEeyQgAAAUc"]
[Sun Apr 26 05:13:21.020359 2026] [:error] [pid 8491:tid 8520] [client 20.220.225.64:64206] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "ae0ucSq7I7e6CJooQM2BJQAAANU"]
[Sun Apr 26 05:13:22.288115 2026] [:error] [pid 8385:tid 8447] [client 20.220.225.64:64885] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "ae0ucjOy7_J84Wx3-oxUxgAAAFc"]
[Sun Apr 26 05:13:24.200034 2026] [:error] [pid 8390:tid 8462] [client 20.220.225.64:64139] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww1.php"] [unique_id "ae0udIGPtFK_i9p5yxQFzAAAAIs"]
[Sun Apr 26 05:13:30.911604 2026] [proxy_fcgi:error] [pid 41906:tid 41930] [client 20.220.225.64:64882] AH01071: Got error 'Primary script unknown'
[Sun Apr 26 05:13:33.368944 2026] [:error] [pid 41906:tid 41915] [client 20.220.225.64:64882] [client 20.220.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ae0ufT3-0A3lxw9OXoDwxQAAAYc"]
[Sun Apr 26 05:13:47.745756 2026] [:error] [pid 8491:tid 8500] [client 20.220.225.64:64815] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "ae0uiyq7I7e6CJooQM2BTAAAAME"]
[Sun Apr 26 05:13:50.613326 2026] [:error] [pid 31273:tid 31356] [client 20.220.225.64:64253] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "ae0ujvhcNJEGrATcuEeyegAAAVE"]
[Sun Apr 26 05:13:56.449854 2026] [:error] [pid 10315:tid 10337] [client 20.220.225.64:64143] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "ae0ulKJIw2vjkleLIaB_twAAARQ"]
[Sun Apr 26 05:13:59.458997 2026] [:error] [pid 10315:tid 10340] [client 20.220.225.64:64225] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/admin.php"] [unique_id "ae0ul6JIw2vjkleLIaB_wwAAARc"]
[Sun Apr 26 05:14:05.174509 2026] [:error] [pid 10315:tid 10341] [client 20.220.225.64:64831] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae0unaJIw2vjkleLIaB_0AAAARg"]
[Sun Apr 26 05:14:11.227942 2026] [:error] [pid 8491:tid 8512] [client 20.220.225.64:64211] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae0uoyq7I7e6CJooQM2BbQAAAM0"]
[Sun Apr 26 05:14:26.318345 2026] [:error] [pid 10315:tid 10331] [client 20.220.225.64:64824] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ae0usqJIw2vjkleLIaCAPQAAAQ4"]
[Sun Apr 26 05:14:29.130375 2026] [:error] [pid 8390:tid 8468] [client 20.220.225.64:63550] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ae0utYGPtFK_i9p5yxQF7QAAAJE"]
[Sun Apr 26 05:14:32.201317 2026] [:error] [pid 31273:tid 31353] [client 20.220.225.64:64250] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ae0uuPhcNJEGrATcuEeytQAAAU4"]
[Sun Apr 26 05:14:33.622988 2026] [:error] [pid 41906:tid 41921] [client 20.220.225.64:63561] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ae0uuT3-0A3lxw9OXoDxEwAAAY0"]
[Sun Apr 26 05:14:36.061741 2026] [:error] [pid 41906:tid 41920] [client 20.220.225.64:63541] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae0uvD3-0A3lxw9OXoDxJAAAAYw"]
[Sun Apr 26 05:14:37.473547 2026] [:error] [pid 41906:tid 41924] [client 20.220.225.64:61781] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae0uvT3-0A3lxw9OXoDxLQAAAZA"]
[Sun Apr 26 05:14:39.424153 2026] [:error] [pid 41906:tid 41930] [client 93.123.109.79:65332] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ae0uvz3-0A3lxw9OXoDxRAAAAZY"]
[Sun Apr 26 05:14:40.273669 2026] [:error] [pid 41906:tid 41909] [client 20.220.225.64:64794] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae0uwD3-0A3lxw9OXoDxVwAAAYE"]
[Sun Apr 26 05:14:40.395973 2026] [:error] [pid 8385:tid 8428] [client 93.123.109.79:59210] [client 93.123.109.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "ae0uwDOy7_J84Wx3-oxVIQAAAEQ"]
[Sun Apr 26 05:14:41.414909 2026] [:error] [pid 8390:tid 8462] [client 20.220.225.64:64812] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae0uwYGPtFK_i9p5yxQF9wAAAIs"]
[Sun Apr 26 05:14:42.597303 2026] [:error] [pid 31273:tid 31347] [client 20.220.225.64:63602] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "ae0uwvhcNJEGrATcuEey0AAAAUk"]
[Sun Apr 26 05:14:43.298378 2026] [:error] [pid 10315:tid 10322] [client 20.220.225.64:64234] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "ae0uw6JIw2vjkleLIaCAagAAAQU"]
[Sun Apr 26 05:14:44.377995 2026] [:error] [pid 10315:tid 10334] [client 20.220.225.64:64786] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "ae0uxKJIw2vjkleLIaCAbgAAARE"]
[Sun Apr 26 05:14:46.096914 2026] [:error] [pid 8383:tid 8419] [client 20.220.225.64:62950] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/log.php"] [unique_id "ae0uxtFa2S3EsATMdWO0XAAAABY"]
[Sun Apr 26 05:14:46.762866 2026] [:error] [pid 10315:tid 10337] [client 20.220.225.64:64864] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "ae0uxqJIw2vjkleLIaCAcwAAARQ"]
[Sun Apr 26 05:14:50.080932 2026] [:error] [pid 8491:tid 8523] [client 20.220.225.64:64246] [client 20.220.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ae0uyiq7I7e6CJooQM2BmgAAANc"]
[Sun Apr 26 05:14:51.764642 2026] [:error] [pid 31273:tid 31335] [client 20.220.225.64:62955] [client 20.220.225.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "ae0uy_hcNJEGrATcuEey4wAAAUA"]
[Sun Apr 26 05:15:01.550038 2026] [:error] [pid 41906:tid 41911] [client 20.220.225.64:63567] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "ae0u1T3-0A3lxw9OXoDxyQAAAYM"]
[Sun Apr 26 05:15:02.353871 2026] [:error] [pid 10315:tid 10324] [client 20.220.225.64:64771] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "ae0u1qJIw2vjkleLIaCAhQAAAQc"]
[Sun Apr 26 05:15:03.310450 2026] [:error] [pid 10315:tid 10340] [client 20.220.225.64:64242] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "ae0u16JIw2vjkleLIaCAhgAAARc"]
[Sun Apr 26 05:15:04.144277 2026] [:error] [pid 8383:tid 8408] [client 20.220.225.64:64830] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "ae0u2NFa2S3EsATMdWO0ZAAAAAs"]
[Sun Apr 26 05:15:04.877243 2026] [:error] [pid 8491:tid 8511] [client 20.220.225.64:62920] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "ae0u2Cq7I7e6CJooQM2BpAAAAMw"]
[Sun Apr 26 05:15:06.256613 2026] [:error] [pid 41906:tid 41918] [client 20.220.225.64:64816] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "ae0u2j3-0A3lxw9OXoDxzgAAAYo"]
[Sun Apr 26 05:15:07.401570 2026] [:error] [pid 31273:tid 31339] [client 20.220.225.64:63600] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "ae0u2_hcNJEGrATcuEey8QAAAUM"]
[Sun Apr 26 05:15:08.453278 2026] [:error] [pid 10315:tid 10319] [client 20.220.225.64:64161] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "ae0u3KJIw2vjkleLIaCAiwAAAQI"]
[Sun Apr 26 05:15:09.249249 2026] [:error] [pid 8390:tid 8465] [client 20.220.225.64:63507] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "ae0u3YGPtFK_i9p5yxQGCwAAAI4"]
[Sun Apr 26 05:15:11.258105 2026] [:error] [pid 31273:tid 31344] [client 20.220.225.64:64841] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "ae0u3_hcNJEGrATcuEey9wAAAUY"]
[Sun Apr 26 05:15:12.756812 2026] [:error] [pid 41906:tid 41916] [client 20.220.225.64:64194] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "ae0u4D3-0A3lxw9OXoDx4AAAAYg"]
[Sun Apr 26 05:15:14.215453 2026] [:error] [pid 41906:tid 41932] [client 20.220.225.64:64892] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "ae0u4j3-0A3lxw9OXoDx5QAAAZg"]
[Sun Apr 26 05:15:15.092859 2026] [:error] [pid 31273:tid 31345] [client 20.220.225.64:64851] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "ae0u4_hcNJEGrATcuEey_wAAAUc"]
[Sun Apr 26 05:15:15.982222 2026] [:error] [pid 8383:tid 8420] [client 20.220.225.64:63531] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "ae0u49Fa2S3EsATMdWO0awAAABc"]
[Sun Apr 26 05:15:17.564326 2026] [:error] [pid 41906:tid 41925] [client 20.220.225.64:61753] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "ae0u5T3-0A3lxw9OXoDx7gAAAZE"]
[Sun Apr 26 05:15:19.111706 2026] [:error] [pid 31273:tid 31346] [client 20.220.225.64:62945] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xx.php"] [unique_id "ae0u5_hcNJEGrATcuEezBQAAAUg"]
[Sun Apr 26 05:15:20.244981 2026] [:error] [pid 41906:tid 41911] [client 20.220.225.64:64173] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "ae0u6D3-0A3lxw9OXoDx_AAAAYM"]
[Sun Apr 26 05:15:20.765317 2026] [:error] [pid 41906:tid 41925] [client 20.220.225.64:63610] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "ae0u6D3-0A3lxw9OXoDx_gAAAZE"]
[Sun Apr 26 05:15:22.422478 2026] [:error] [pid 10315:tid 10330] [client 20.220.225.64:64133] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "ae0u6qJIw2vjkleLIaCAlQAAAQ0"]
[Sun Apr 26 05:15:23.121860 2026] [:error] [pid 8491:tid 8515] [client 20.220.225.64:63503] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass4.php"] [unique_id "ae0u6yq7I7e6CJooQM2BrgAAANA"]
[Sun Apr 26 05:15:24.280972 2026] [:error] [pid 10315:tid 10321] [client 20.220.225.64:64182] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "ae0u7KJIw2vjkleLIaCAnAAAAQQ"]
[Sun Apr 26 05:15:25.362611 2026] [:error] [pid 10315:tid 10333] [client 20.220.225.64:63597] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "ae0u7aJIw2vjkleLIaCAoQAAARA"]
[Sun Apr 26 05:15:26.368115 2026] [:error] [pid 41906:tid 41911] [client 20.220.225.64:64215] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "ae0u7j3-0A3lxw9OXoDyCwAAAYM"]
[Sun Apr 26 05:15:27.002640 2026] [:error] [pid 41906:tid 41920] [client 20.220.225.64:62326] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2clas.php"] [unique_id "ae0u7z3-0A3lxw9OXoDyDgAAAYw"]
[Sun Apr 26 05:15:29.232363 2026] [:error] [pid 8491:tid 8510] [client 20.220.225.64:62871] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "ae0u8Sq7I7e6CJooQM2BsQAAAMs"]
[Sun Apr 26 05:15:30.791870 2026] [:error] [pid 31273:tid 31347] [client 20.220.225.64:63492] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "ae0u8vhcNJEGrATcuEezDAAAAUk"]
[Sun Apr 26 05:15:31.702749 2026] [:error] [pid 8491:tid 8503] [client 20.220.225.64:63555] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "ae0u8yq7I7e6CJooQM2BsgAAAMQ"]
[Sun Apr 26 05:15:32.537916 2026] [:error] [pid 8383:tid 8401] [client 20.220.225.64:63591] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ave.php"] [unique_id "ae0u9NFa2S3EsATMdWO0cAAAAAQ"]
[Sun Apr 26 05:15:33.207654 2026] [:error] [pid 8383:tid 8400] [client 20.220.225.64:64797] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "ae0u9dFa2S3EsATMdWO0cQAAAAM"]
[Sun Apr 26 05:15:34.355863 2026] [:error] [pid 8385:tid 8441] [client 20.220.225.64:64866] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "ae0u9jOy7_J84Wx3-oxVMgAAAFE"]
[Sun Apr 26 05:15:35.296964 2026] [:error] [pid 8385:tid 8437] [client 20.220.225.64:63552] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "ae0u9zOy7_J84Wx3-oxVNQAAAE0"]
[Sun Apr 26 05:15:36.288372 2026] [:error] [pid 10315:tid 10332] [client 20.220.225.64:63601] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrt.php"] [unique_id "ae0u-KJIw2vjkleLIaCApQAAAQ8"]
[Sun Apr 26 05:15:36.961445 2026] [:error] [pid 8491:tid 8517] [client 20.220.225.64:63520] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "ae0u-Cq7I7e6CJooQM2BugAAANI"]
[Sun Apr 26 05:15:38.086296 2026] [:error] [pid 41906:tid 41914] [client 20.220.225.64:64809] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "ae0u-j3-0A3lxw9OXoDyGwAAAYY"]
[Sun Apr 26 05:15:39.216340 2026] [:error] [pid 8390:tid 8457] [client 20.220.225.64:64236] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "ae0u-4GPtFK_i9p5yxQGIwAAAIY"]
[Sun Apr 26 05:15:41.836229 2026] [:error] [pid 8383:tid 8411] [client 20.220.225.64:62906] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bibil.php"] [unique_id "ae0u_dFa2S3EsATMdWO0eQAAAA4"]
[Sun Apr 26 05:15:43.879360 2026] [:error] [pid 8491:tid 8514] [client 20.220.225.64:64251] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "ae0u_yq7I7e6CJooQM2BvwAAAM8"]
[Sun Apr 26 05:15:45.757575 2026] [:error] [pid 8390:tid 8475] [client 20.220.225.64:63511] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "ae0vAYGPtFK_i9p5yxQGJQAAAJg"]
[Sun Apr 26 05:15:47.355403 2026] [:error] [pid 41906:tid 41915] [client 20.220.225.64:64185] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "ae0vAz3-0A3lxw9OXoDyLwAAAYc"]
[Sun Apr 26 05:15:49.831141 2026] [:error] [pid 41906:tid 41930] [client 20.220.225.64:64239] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/radio.php"] [unique_id "ae0vBT3-0A3lxw9OXoDyNwAAAZY"]
[Sun Apr 26 05:15:52.616527 2026] [:error] [pid 10315:tid 10327] [client 20.220.225.64:64800] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "ae0vCKJIw2vjkleLIaCAuwAAAQo"]
[Sun Apr 26 05:15:54.140739 2026] [:error] [pid 10315:tid 10317] [client 20.220.225.64:62327] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "ae0vCqJIw2vjkleLIaCAwAAAAQA"]
[Sun Apr 26 05:15:55.113580 2026] [:error] [pid 31273:tid 31335] [client 20.220.225.64:64884] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "ae0vC_hcNJEGrATcuEezFQAAAUA"]
[Sun Apr 26 05:15:55.991658 2026] [:error] [pid 10315:tid 10327] [client 20.220.225.64:64785] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/files.php"] [unique_id "ae0vC6JIw2vjkleLIaCAwgAAAQo"]
[Sun Apr 26 05:15:56.758079 2026] [:error] [pid 10315:tid 10335] [client 20.220.225.64:64232] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "ae0vDKJIw2vjkleLIaCAxgAAARI"]
[Sun Apr 26 05:15:58.405477 2026] [:error] [pid 8383:tid 8404] [client 20.220.225.64:61750] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "ae0vDtFa2S3EsATMdWO0fAAAAAc"]
[Sun Apr 26 05:15:59.221054 2026] [:error] [pid 31273:tid 31352] [client 20.220.225.64:63546] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "ae0vD_hcNJEGrATcuEezGgAAAU0"]
[Sun Apr 26 05:15:59.861314 2026] [:error] [pid 8390:tid 8453] [client 20.220.225.64:62252] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file7.php"] [unique_id "ae0vD4GPtFK_i9p5yxQGLQAAAII"]
[Sun Apr 26 05:16:00.549117 2026] [:error] [pid 8385:tid 8447] [client 20.220.225.64:63609] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gifclass.php"] [unique_id "ae0vEDOy7_J84Wx3-oxVOQAAAFc"]
[Sun Apr 26 05:16:09.479436 2026] [:error] [pid 8383:tid 8416] [client 20.220.225.64:63525] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ae0vGdFa2S3EsATMdWO0nAAAABM"]
[Sun Apr 26 05:16:10.285344 2026] [:error] [pid 10315:tid 10318] [client 20.220.225.64:62936] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ae0vGqJIw2vjkleLIaCBAgAAAQE"]
[Sun Apr 26 05:16:11.625116 2026] [:error] [pid 41906:tid 41930] [client 20.220.225.64:64235] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ae0vGz3-0A3lxw9OXoDyVgAAAZY"]
[Sun Apr 26 05:16:13.068027 2026] [:error] [pid 8385:tid 8447] [client 20.220.225.64:64200] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ae0vHTOy7_J84Wx3-oxVSAAAAFc"]
[Sun Apr 26 05:16:15.036103 2026] [:error] [pid 41906:tid 41917] [client 20.220.225.64:62334] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "ae0vHz3-0A3lxw9OXoDyWgAAAYk"]
[Sun Apr 26 05:16:21.546950 2026] [:error] [pid 41906:tid 41924] [client 20.220.225.64:64894] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "ae0vJT3-0A3lxw9OXoDybQAAAZA"]
[Sun Apr 26 05:16:28.277480 2026] [:error] [pid 8385:tid 8445] [client 20.220.225.64:64869] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "ae0vLDOy7_J84Wx3-oxVSgAAAFU"]
[Sun Apr 26 05:16:30.175196 2026] [:error] [pid 41906:tid 41924] [client 20.220.225.64:62947] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "ae0vLj3-0A3lxw9OXoDyogAAAZA"]
[Sun Apr 26 05:16:42.441312 2026] [:error] [pid 41906:tid 41928] [client 20.220.225.64:62303] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "ae0vOj3-0A3lxw9OXoDywAAAAZQ"]
[Sun Apr 26 05:18:22.864502 2026] [:error] [pid 10315:tid 10324] [client 20.220.225.64:64160] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/users.php"] [unique_id "ae0vnqJIw2vjkleLIaCB5AAAAQc"]
[Sun Apr 26 05:18:26.988411 2026] [:error] [pid 41906:tid 41912] [client 20.220.225.64:64145] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/users.php"] [unique_id "ae0voj3-0A3lxw9OXoDzMgAAAYQ"]
[Sun Apr 26 05:18:28.328439 2026] [:error] [pid 31273:tid 31352] [client 20.220.225.64:64186] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/users.php"] [unique_id "ae0vpPhcNJEGrATcuEe0DgAAAU0"]
[Sun Apr 26 05:18:29.059449 2026] [:error] [pid 10315:tid 10329] [client 20.220.225.64:64803] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/users.php"] [unique_id "ae0vpaJIw2vjkleLIaCB7wAAAQw"]
[Sun Apr 26 05:18:30.138972 2026] [:error] [pid 8390:tid 8474] [client 20.220.225.64:64863] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0vpoGPtFK_i9p5yxQGmQAAAJc"]
[Sun Apr 26 05:18:31.452666 2026] [:error] [pid 10315:tid 10339] [client 20.220.225.64:63535] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0vp6JIw2vjkleLIaCB9gAAARY"]
[Sun Apr 26 05:18:33.200849 2026] [:error] [pid 41906:tid 41911] [client 20.220.225.64:62864] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0vqT3-0A3lxw9OXoDzPwAAAYM"]
[Sun Apr 26 05:18:34.720459 2026] [:error] [pid 10315:tid 10329] [client 20.220.225.64:64137] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0vqqJIw2vjkleLIaCCAAAAAQw"]
[Sun Apr 26 05:18:41.102013 2026] [:error] [pid 41906:tid 41917] [client 20.220.225.64:62275] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "ae0vsT3-0A3lxw9OXoDzTwAAAYk"]
[Sun Apr 26 05:18:43.656753 2026] [:error] [pid 10315:tid 10317] [client 20.220.225.64:63587] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "ae0vs6JIw2vjkleLIaCCCwAAAQA"]
[Sun Apr 26 05:18:45.502875 2026] [:error] [pid 8383:tid 8420] [client 20.220.225.64:64798] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "ae0vtdFa2S3EsATMdWO07AAAABc"]
[Sun Apr 26 05:18:48.024089 2026] [:error] [pid 31273:tid 31350] [client 20.220.225.64:63498] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "ae0vuPhcNJEGrATcuEe0FgAAAUs"]
[Sun Apr 26 05:18:50.479892 2026] [:error] [pid 8390:tid 8453] [client 20.220.225.64:64821] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "ae0vuoGPtFK_i9p5yxQGqQAAAII"]
[Sun Apr 26 05:18:52.300399 2026] [:error] [pid 10315:tid 10326] [client 20.220.225.64:64129] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "ae0vvKJIw2vjkleLIaCCHgAAAQk"]
[Sun Apr 26 05:18:53.993699 2026] [:error] [pid 31273:tid 31349] [client 20.220.225.64:64164] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "ae0vvfhcNJEGrATcuEe0HAAAAUo"]
[Sun Apr 26 05:18:55.006862 2026] [:error] [pid 8383:tid 8416] [client 20.220.225.64:63528] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "ae0vv9Fa2S3EsATMdWO08AAAABM"]
[Sun Apr 26 05:18:55.985524 2026] [:error] [pid 41906:tid 41924] [client 20.220.225.64:64790] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sites.php"] [unique_id "ae0vvz3-0A3lxw9OXoDzhgAAAZA"]
[Sun Apr 26 05:18:57.370762 2026] [:error] [pid 31273:tid 31345] [client 20.220.225.64:63518] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sites.php"] [unique_id "ae0vwfhcNJEGrATcuEe0JQAAAUc"]
[Sun Apr 26 05:18:58.489398 2026] [:error] [pid 31273:tid 31360] [client 20.220.225.64:64891] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sites.php"] [unique_id "ae0vwvhcNJEGrATcuEe0LQAAAVU"]
[Sun Apr 26 05:18:59.466816 2026] [:error] [pid 8385:tid 8437] [client 20.220.225.64:64199] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sites.php"] [unique_id "ae0vwzOy7_J84Wx3-oxVyQAAAE0"]
[Sun Apr 26 05:19:00.905579 2026] [:error] [pid 8383:tid 8412] [client 20.220.225.64:64855] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0vxNFa2S3EsATMdWO09gAAAA8"]
[Sun Apr 26 05:19:02.165906 2026] [:error] [pid 10315:tid 10339] [client 20.220.225.64:63602] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0vxqJIw2vjkleLIaCCKAAAARY"]
[Sun Apr 26 05:19:03.011153 2026] [:error] [pid 10315:tid 10318] [client 20.220.225.64:63596] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0vx6JIw2vjkleLIaCCKgAAAQE"]
[Sun Apr 26 05:19:06.696085 2026] [:error] [pid 41906:tid 41908] [client 20.220.225.64:63576] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0vyj3-0A3lxw9OXoDziAAAAYA"]
[Sun Apr 26 05:19:07.723987 2026] [:error] [pid 41906:tid 41915] [client 20.220.225.64:63549] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "ae0vyz3-0A3lxw9OXoDziwAAAYc"]
[Sun Apr 26 05:19:08.315454 2026] [:error] [pid 41906:tid 41927] [client 20.220.225.64:62881] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "ae0vzD3-0A3lxw9OXoDzjQAAAZM"]
[Sun Apr 26 05:19:08.929882 2026] [:error] [pid 8491:tid 8512] [client 20.220.225.64:64205] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "ae0vzCq7I7e6CJooQM2CNwAAAM0"]
[Sun Apr 26 05:19:09.706860 2026] [:error] [pid 41906:tid 41920] [client 20.220.225.64:64214] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "ae0vzT3-0A3lxw9OXoDzkAAAAYw"]
[Sun Apr 26 05:19:11.909948 2026] [:error] [pid 41906:tid 41924] [client 20.220.225.64:63579] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ae0vzz3-0A3lxw9OXoDzmAAAAZA"]
[Sun Apr 26 05:19:12.904329 2026] [:error] [pid 10315:tid 10328] [client 20.220.225.64:63549] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ae0v0KJIw2vjkleLIaCCNwAAAQs"]
[Sun Apr 26 05:19:13.803933 2026] [:error] [pid 10315:tid 10318] [client 20.220.225.64:64183] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ae0v0aJIw2vjkleLIaCCOwAAAQE"]
[Sun Apr 26 05:19:14.464179 2026] [:error] [pid 8390:tid 8468] [client 20.220.225.64:64242] [client 20.220.225.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ae0v0oGPtFK_i9p5yxQG1gAAAJE"]
[Sun Apr 26 05:25:05.805098 2026] [:error] [pid 8385:tid 8427] [client 172.212.195.149:17694] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "ae0xMTOy7_J84Wx3-oxWvQAAAEM"]
[Sun Apr 26 05:25:08.893730 2026] [:error] [pid 10315:tid 10341] [client 172.212.195.149:17670] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "ae0xNKJIw2vjkleLIaCEcAAAARg"]
[Sun Apr 26 05:25:10.842294 2026] [:error] [pid 31273:tid 31344] [client 172.212.195.149:17768] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "ae0xNvhcNJEGrATcuEe1-QAAAUY"]
[Sun Apr 26 05:25:12.228348 2026] [:error] [pid 8385:tid 8441] [client 172.212.195.149:17764] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tx1.php"] [unique_id "ae0xODOy7_J84Wx3-oxWvwAAAFE"]
[Sun Apr 26 05:25:12.717448 2026] [:error] [pid 41906:tid 41924] [client 172.212.195.149:17770] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "ae0xOD3-0A3lxw9OXoD2oQAAAZA"]
[Sun Apr 26 05:25:13.350890 2026] [:error] [pid 31273:tid 31345] [client 172.212.195.149:17745] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "ae0xOfhcNJEGrATcuEe2AQAAAUc"]
[Sun Apr 26 05:25:14.086140 2026] [:error] [pid 10315:tid 10322] [client 172.212.195.149:17754] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "ae0xOqJIw2vjkleLIaCEkwAAAQU"]
[Sun Apr 26 05:25:15.141965 2026] [:error] [pid 8390:tid 8460] [client 172.212.195.149:17771] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xv.php"] [unique_id "ae0xO4GPtFK_i9p5yxQIGgAAAIk"]
[Sun Apr 26 05:25:15.606912 2026] [:error] [pid 8383:tid 8418] [client 172.212.195.149:17762] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "ae0xO9Fa2S3EsATMdWO2MQAAABU"]
[Sun Apr 26 05:25:16.796241 2026] [:error] [pid 31273:tid 31335] [client 172.212.195.149:17783] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "ae0xPPhcNJEGrATcuEe2AwAAAUA"]
[Sun Apr 26 05:25:17.324975 2026] [:error] [pid 10315:tid 10319] [client 172.212.195.149:17676] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "ae0xPaJIw2vjkleLIaCEqAAAAQI"]
[Sun Apr 26 05:25:17.998504 2026] [:error] [pid 10315:tid 10332] [client 172.212.195.149:17750] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x56.php"] [unique_id "ae0xPaJIw2vjkleLIaCErwAAAQ8"]
[Sun Apr 26 05:25:19.237974 2026] [:error] [pid 10315:tid 10317] [client 172.212.195.149:17788] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "ae0xP6JIw2vjkleLIaCEuwAAAQA"]
[Sun Apr 26 05:25:20.978796 2026] [:error] [pid 8383:tid 8399] [client 172.212.195.149:17679] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "ae0xQNFa2S3EsATMdWO2MgAAAAI"]
[Sun Apr 26 05:25:21.813891 2026] [:error] [pid 31273:tid 31357] [client 172.212.195.149:17731] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "ae0xQfhcNJEGrATcuEe2CgAAAVI"]
[Sun Apr 26 05:25:23.006651 2026] [:error] [pid 31273:tid 31344] [client 172.212.195.149:17704] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htaccess.php"] [unique_id "ae0xQ_hcNJEGrATcuEe2EwAAAUY"]
[Sun Apr 26 05:25:24.133433 2026] [:error] [pid 31273:tid 31345] [client 172.212.195.149:17680] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "ae0xRPhcNJEGrATcuEe2FgAAAUc"]
[Sun Apr 26 05:25:26.151802 2026] [:error] [pid 8385:tid 8429] [client 172.212.195.149:17734] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "ae0xRjOy7_J84Wx3-oxWzwAAAEU"]
[Sun Apr 26 05:25:27.420157 2026] [:error] [pid 31273:tid 31361] [client 172.212.195.149:17693] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "ae0xR_hcNJEGrATcuEe2IgAAAVY"]
[Sun Apr 26 05:25:28.680980 2026] [:error] [pid 10315:tid 10336] [client 172.212.195.149:17746] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/readme.php"] [unique_id "ae0xSKJIw2vjkleLIaCE7AAAARM"]
[Sun Apr 26 05:25:30.435247 2026] [:error] [pid 8390:tid 8467] [client 172.212.195.149:17761] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "ae0xSoGPtFK_i9p5yxQIJgAAAJA"]
[Sun Apr 26 05:25:31.365539 2026] [:error] [pid 31273:tid 31337] [client 172.212.195.149:17767] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "ae0xS_hcNJEGrATcuEe2JwAAAUI"]
[Sun Apr 26 05:25:32.398517 2026] [:error] [pid 8491:tid 8519] [client 172.212.195.149:17706] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "ae0xTCq7I7e6CJooQM2DyQAAANQ"]
[Sun Apr 26 05:25:33.042454 2026] [:error] [pid 31273:tid 31359] [client 172.212.195.149:17665] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x50.php"] [unique_id "ae0xTfhcNJEGrATcuEe2KwAAAVQ"]
[Sun Apr 26 05:25:33.941635 2026] [:error] [pid 8383:tid 8420] [client 172.212.195.149:17780] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "ae0xTdFa2S3EsATMdWO2OAAAABc"]
[Sun Apr 26 05:25:34.905743 2026] [:error] [pid 41906:tid 41930] [client 172.212.195.149:17692] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "ae0xTj3-0A3lxw9OXoD2twAAAZY"]
[Sun Apr 26 05:25:35.481218 2026] [:error] [pid 41906:tid 41912] [client 172.212.195.149:17790] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "ae0xTz3-0A3lxw9OXoD2uQAAAYQ"]
[Sun Apr 26 05:25:36.042422 2026] [:error] [pid 8491:tid 8508] [client 172.212.195.149:17672] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fv.php"] [unique_id "ae0xUCq7I7e6CJooQM2D1wAAAMk"]
[Sun Apr 26 05:25:36.707419 2026] [:error] [pid 8385:tid 8438] [client 172.212.195.149:17747] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "ae0xUDOy7_J84Wx3-oxW1gAAAE4"]
[Sun Apr 26 05:25:37.267390 2026] [:error] [pid 10315:tid 10335] [client 172.212.195.149:17703] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "ae0xUaJIw2vjkleLIaCFHQAAARI"]
[Sun Apr 26 05:25:37.899295 2026] [:error] [pid 41906:tid 41925] [client 172.212.195.149:17677] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "ae0xUT3-0A3lxw9OXoD2vwAAAZE"]
[Sun Apr 26 05:25:38.824607 2026] [:error] [pid 31273:tid 31357] [client 172.212.195.149:17772] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file.php"] [unique_id "ae0xUvhcNJEGrATcuEe2UwAAAVI"]
[Sun Apr 26 05:25:39.707377 2026] [:error] [pid 10315:tid 10333] [client 172.212.195.149:15310] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "ae0xU6JIw2vjkleLIaCFIQAAARA"]
[Sun Apr 26 05:25:40.887459 2026] [:error] [pid 31273:tid 31342] [client 172.212.195.149:17791] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "ae0xVPhcNJEGrATcuEe2XwAAAUU"]
[Sun Apr 26 05:25:42.601755 2026] [:error] [pid 8385:tid 8442] [client 172.212.195.149:17744] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "ae0xVjOy7_J84Wx3-oxW4QAAAFI"]
[Sun Apr 26 05:25:43.677335 2026] [:error] [pid 8383:tid 8405] [client 172.212.195.149:17782] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lsd.php"] [unique_id "ae0xV9Fa2S3EsATMdWO2SgAAAAg"]
[Sun Apr 26 05:25:44.711507 2026] [:error] [pid 41906:tid 41924] [client 172.212.195.149:15336] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ae0xWD3-0A3lxw9OXoD22gAAAZA"]
[Sun Apr 26 05:25:46.586279 2026] [:error] [pid 8383:tid 8410] [client 172.212.195.149:17759] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ae0xWtFa2S3EsATMdWO2TgAAAA0"]
[Sun Apr 26 05:25:47.510484 2026] [:error] [pid 31273:tid 31337] [client 172.212.195.149:17781] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ae0xW_hcNJEGrATcuEe2ewAAAUI"]
[Sun Apr 26 05:25:48.752528 2026] [:error] [pid 31273:tid 31354] [client 172.212.195.149:17778] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "ae0xXPhcNJEGrATcuEe2hAAAAU8"]
[Sun Apr 26 05:25:49.995227 2026] [:error] [pid 8390:tid 8461] [client 172.212.195.149:17709] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "ae0xXYGPtFK_i9p5yxQIPQAAAIo"]
[Sun Apr 26 05:25:51.726720 2026] [:error] [pid 10315:tid 10337] [client 172.212.195.149:17666] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "ae0xX6JIw2vjkleLIaCFPgAAARQ"]
[Sun Apr 26 05:25:52.583646 2026] [:error] [pid 10315:tid 10338] [client 172.212.195.149:17664] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "ae0xYKJIw2vjkleLIaCFQAAAARU"]
[Sun Apr 26 05:25:53.201505 2026] [:error] [pid 8385:tid 8446] [client 172.212.195.149:17695] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsd.php"] [unique_id "ae0xYTOy7_J84Wx3-oxW7QAAAFY"]
[Sun Apr 26 05:25:54.068838 2026] [:error] [pid 10315:tid 10329] [client 172.212.195.149:17675] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "ae0xYqJIw2vjkleLIaCFSgAAAQw"]
[Sun Apr 26 05:25:55.580714 2026] [:error] [pid 10315:tid 10337] [client 172.212.195.149:17751] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "ae0xY6JIw2vjkleLIaCFSwAAARQ"]
[Sun Apr 26 05:25:56.594637 2026] [:error] [pid 8390:tid 8452] [client 172.212.195.149:17739] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "ae0xZIGPtFK_i9p5yxQIRwAAAIE"]
[Sun Apr 26 05:25:57.537739 2026] [:error] [pid 10315:tid 10331] [client 172.212.195.149:15312] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gtc.php"] [unique_id "ae0xZaJIw2vjkleLIaCFUQAAAQ4"]
[Sun Apr 26 05:25:58.802235 2026] [:error] [pid 10315:tid 10323] [client 172.212.195.149:17711] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "ae0xZqJIw2vjkleLIaCFUgAAAQY"]
[Sun Apr 26 05:26:00.253250 2026] [:error] [pid 10315:tid 10333] [client 172.212.195.149:15232] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "ae0xaKJIw2vjkleLIaCFUwAAARA"]
[Sun Apr 26 05:26:04.939448 2026] [:error] [pid 41906:tid 41920] [client 172.212.195.149:17671] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atx.php"] [unique_id "ae0xbD3-0A3lxw9OXoD3JgAAAYw"]
[Sun Apr 26 05:26:18.755993 2026] [:error] [pid 41906:tid 41931] [client 172.212.195.149:17722] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "ae0xej3-0A3lxw9OXoD3mwAAAZc"]
[Sun Apr 26 05:26:19.527930 2026] [:error] [pid 41906:tid 41908] [client 172.212.195.149:17685] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "ae0xez3-0A3lxw9OXoD3ogAAAYA"]
[Sun Apr 26 05:26:20.383729 2026] [:error] [pid 41906:tid 41918] [client 172.212.195.149:17787] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "ae0xfD3-0A3lxw9OXoD3pwAAAYo"]
[Sun Apr 26 05:26:21.398680 2026] [:error] [pid 31273:tid 31351] [client 172.212.195.149:15331] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "ae0xffhcNJEGrATcuEe2qwAAAUw"]
[Sun Apr 26 05:26:24.013173 2026] [:error] [pid 8385:tid 8431] [client 172.212.195.149:17756] [client 172.212.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ae0xgDOy7_J84Wx3-oxXBQAAAEc"]
[Sun Apr 26 05:26:25.412956 2026] [:error] [pid 41906:tid 41928] [client 172.212.195.149:17773] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "ae0xgT3-0A3lxw9OXoD30AAAAZQ"]
[Sun Apr 26 05:26:26.780183 2026] [:error] [pid 10315:tid 10340] [client 172.212.195.149:17776] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "ae0xgqJIw2vjkleLIaCFZgAAARc"]
[Sun Apr 26 05:26:28.221513 2026] [:error] [pid 8491:tid 8504] [client 172.212.195.149:15332] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "ae0xhCq7I7e6CJooQM2EAgAAAMU"]
[Sun Apr 26 05:26:29.595942 2026] [:error] [pid 8491:tid 8524] [client 172.212.195.149:17765] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "ae0xhSq7I7e6CJooQM2EDAAAANg"]
[Sun Apr 26 05:26:31.033491 2026] [:error] [pid 41906:tid 41924] [client 172.212.195.149:17785] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "ae0xhz3-0A3lxw9OXoD3_AAAAZA"]
[Sun Apr 26 05:26:31.626331 2026] [:error] [pid 10315:tid 10332] [client 172.212.195.149:17683] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "ae0xh6JIw2vjkleLIaCFbQAAAQ8"]
[Sun Apr 26 05:26:32.103306 2026] [:error] [pid 8390:tid 8459] [client 172.212.195.149:17725] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w.php"] [unique_id "ae0xiIGPtFK_i9p5yxQIWQAAAIg"]
[Sun Apr 26 05:26:32.806489 2026] [:error] [pid 10315:tid 10327] [client 172.212.195.149:17697] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0xiKJIw2vjkleLIaCFcAAAAQo"]
[Sun Apr 26 05:26:33.764685 2026] [:error] [pid 8390:tid 8456] [client 172.212.195.149:17755] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0xiYGPtFK_i9p5yxQIXAAAAIU"]
[Sun Apr 26 05:26:34.740003 2026] [:error] [pid 10315:tid 10323] [client 172.212.195.149:17729] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0xiqJIw2vjkleLIaCFeQAAAQY"]
[Sun Apr 26 05:26:35.324131 2026] [:error] [pid 10315:tid 10338] [client 172.212.195.149:17688] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0xi6JIw2vjkleLIaCFegAAARU"]
[Sun Apr 26 05:26:42.633255 2026] [:error] [pid 41906:tid 41914] [client 172.212.195.149:15298] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0xkj3-0A3lxw9OXoD4IAAAAYY"]
[Sun Apr 26 05:26:43.339872 2026] [:error] [pid 8491:tid 8500] [client 172.212.195.149:17763] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0xkyq7I7e6CJooQM2EIAAAAME"]
[Sun Apr 26 05:26:44.512846 2026] [:error] [pid 31273:tid 31346] [client 172.212.195.149:17789] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0xlPhcNJEGrATcuEe26QAAAUg"]
[Sun Apr 26 05:26:45.510624 2026] [:error] [pid 8491:tid 8516] [client 172.212.195.149:17786] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0xlSq7I7e6CJooQM2EJAAAANE"]
[Sun Apr 26 05:26:46.322157 2026] [:error] [pid 41906:tid 41930] [client 172.212.195.149:17687] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ae0xlj3-0A3lxw9OXoD4KQAAAZY"]
[Sun Apr 26 05:26:47.280082 2026] [:error] [pid 41906:tid 41926] [client 172.212.195.149:15255] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ae0xlz3-0A3lxw9OXoD4LQAAAZI"]
[Sun Apr 26 05:26:47.859944 2026] [:error] [pid 41906:tid 41922] [client 172.212.195.149:17757] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ae0xlz3-0A3lxw9OXoD4MAAAAY4"]
[Sun Apr 26 05:26:48.868719 2026] [:error] [pid 8385:tid 8445] [client 172.212.195.149:15234] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "ae0xmDOy7_J84Wx3-oxXDwAAAFU"]
[Sun Apr 26 05:26:50.753888 2026] [:error] [pid 41906:tid 41925] [client 172.212.195.149:17732] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "ae0xmj3-0A3lxw9OXoD4PAAAAZE"]
[Sun Apr 26 05:26:51.515822 2026] [:error] [pid 10315:tid 10332] [client 172.212.195.149:17705] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "ae0xm6JIw2vjkleLIaCFqQAAAQ8"]
[Sun Apr 26 05:26:52.832290 2026] [:error] [pid 8390:tid 8462] [client 172.212.195.149:17764] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "ae0xnIGPtFK_i9p5yxQIZQAAAIs"]
[Sun Apr 26 05:26:54.135047 2026] [:error] [pid 10315:tid 10330] [client 172.212.195.149:17681] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css.php"] [unique_id "ae0xnqJIw2vjkleLIaCFrQAAAQ0"]
[Sun Apr 26 05:26:54.850961 2026] [:error] [pid 10315:tid 10336] [client 172.212.195.149:15326] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "ae0xnqJIw2vjkleLIaCFsgAAARM"]
[Sun Apr 26 05:26:56.711097 2026] [:error] [pid 41906:tid 41916] [client 172.212.195.149:15323] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "ae0xoD3-0A3lxw9OXoD4UQAAAYg"]
[Sun Apr 26 05:26:57.456556 2026] [:error] [pid 10315:tid 10341] [client 172.212.195.149:15320] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "ae0xoaJIw2vjkleLIaCFswAAARg"]
[Sun Apr 26 05:26:58.366390 2026] [:error] [pid 10315:tid 10335] [client 172.212.195.149:15355] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "ae0xoqJIw2vjkleLIaCFtQAAARI"]
[Sun Apr 26 05:26:59.543564 2026] [:error] [pid 8491:tid 8524] [client 172.212.195.149:15297] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "ae0xoyq7I7e6CJooQM2EKgAAANg"]
[Sun Apr 26 05:27:00.384422 2026] [:error] [pid 41906:tid 41909] [client 172.212.195.149:15318] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "ae0xpD3-0A3lxw9OXoD4WwAAAYE"]
[Sun Apr 26 05:27:01.178673 2026] [:error] [pid 41906:tid 41930] [client 172.212.195.149:17760] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "ae0xpT3-0A3lxw9OXoD4XwAAAZY"]
[Sun Apr 26 05:27:02.670835 2026] [:error] [pid 41906:tid 41928] [client 172.212.195.149:17743] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/index.php"] [unique_id "ae0xpj3-0A3lxw9OXoD4YwAAAZQ"]
[Sun Apr 26 05:27:03.630325 2026] [:error] [pid 31273:tid 31358] [client 172.212.195.149:17740] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0xp_hcNJEGrATcuEe3GQAAAVM"]
[Sun Apr 26 05:27:04.630659 2026] [:error] [pid 8385:tid 8447] [client 172.212.195.149:17730] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0xqDOy7_J84Wx3-oxXEgAAAFc"]
[Sun Apr 26 05:27:06.904992 2026] [:error] [pid 41906:tid 41930] [client 172.212.195.149:17779] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0xqj3-0A3lxw9OXoD4cAAAAZY"]
[Sun Apr 26 05:27:10.339783 2026] [:error] [pid 31273:tid 31354] [client 172.212.195.149:17775] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0xrvhcNJEGrATcuEe3HwAAAU8"]
[Sun Apr 26 05:27:12.238616 2026] [:error] [pid 41906:tid 41929] [client 172.212.195.149:17686] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae0xsD3-0A3lxw9OXoD4iQAAAZU"]
[Sun Apr 26 05:27:13.740483 2026] [:error] [pid 10315:tid 10332] [client 172.212.195.149:17669] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae0xsaJIw2vjkleLIaCF4QAAAQ8"]
[Sun Apr 26 05:27:14.776648 2026] [:error] [pid 41906:tid 41912] [client 172.212.195.149:15183] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae0xsj3-0A3lxw9OXoD4kQAAAYQ"]
[Sun Apr 26 05:27:15.805249 2026] [:error] [pid 41906:tid 41908] [client 172.212.195.149:15358] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae0xsz3-0A3lxw9OXoD4lgAAAYA"]
[Sun Apr 26 05:27:16.983301 2026] [:error] [pid 8491:tid 8512] [client 172.212.195.149:17753] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "ae0xtCq7I7e6CJooQM2EMQAAAM0"]
[Sun Apr 26 05:27:17.583961 2026] [:error] [pid 10315:tid 10330] [client 172.212.195.149:17700] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "ae0xtaJIw2vjkleLIaCF8AAAAQ0"]
[Sun Apr 26 05:27:25.039808 2026] [:error] [pid 41906:tid 41920] [client 172.212.195.149:17682] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "ae0xvT3-0A3lxw9OXoD43AAAAYw"]
[Sun Apr 26 05:27:30.388753 2026] [:error] [pid 31273:tid 31344] [client 172.212.195.149:17752] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "ae0xwvhcNJEGrATcuEe3aQAAAUY"]
[Sun Apr 26 05:27:32.034739 2026] [:error] [pid 8385:tid 8437] [client 172.212.195.149:17689] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "ae0xxDOy7_J84Wx3-oxXGwAAAE0"]
[Sun Apr 26 05:27:35.104312 2026] [:error] [pid 41906:tid 41927] [client 172.212.195.149:15305] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/item.php"] [unique_id "ae0xxz3-0A3lxw9OXoD4_wAAAZM"]
[Sun Apr 26 05:27:37.252583 2026] [:error] [pid 10315:tid 10317] [client 172.212.195.149:17720] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae0xyaJIw2vjkleLIaCGNAAAAQA"]
[Sun Apr 26 05:27:38.724672 2026] [:error] [pid 8491:tid 8514] [client 172.212.195.149:17777] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae0xyiq7I7e6CJooQM2EVgAAAM8"]
[Sun Apr 26 05:27:40.646272 2026] [:error] [pid 41906:tid 41921] [client 172.212.195.149:15341] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae0xzD3-0A3lxw9OXoD5EgAAAY0"]
[Sun Apr 26 05:27:41.922874 2026] [:error] [pid 41906:tid 41915] [client 172.212.195.149:15177] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "ae0xzT3-0A3lxw9OXoD5GQAAAYc"]
[Sun Apr 26 05:27:42.577219 2026] [:error] [pid 41906:tid 41917] [client 172.212.195.149:17714] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0xzj3-0A3lxw9OXoD5GwAAAYk"]
[Sun Apr 26 05:27:44.294301 2026] [:error] [pid 41906:tid 41923] [client 172.212.195.149:17690] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0x0D3-0A3lxw9OXoD5IAAAAY8"]
[Sun Apr 26 05:27:45.200313 2026] [:error] [pid 41906:tid 41908] [client 172.212.195.149:17691] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0x0T3-0A3lxw9OXoD5JgAAAYA"]
[Sun Apr 26 05:27:46.552426 2026] [:error] [pid 41906:tid 41911] [client 172.212.195.149:15299] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/404.php"] [unique_id "ae0x0j3-0A3lxw9OXoD5KQAAAYM"]
[Sun Apr 26 05:27:47.601289 2026] [:error] [pid 41906:tid 41913] [client 172.212.195.149:15340] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "ae0x0z3-0A3lxw9OXoD5LgAAAYU"]
[Sun Apr 26 05:27:48.391771 2026] [:error] [pid 10315:tid 10319] [client 172.212.195.149:15353] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "ae0x1KJIw2vjkleLIaCGQAAAAQI"]
[Sun Apr 26 05:27:49.143350 2026] [:error] [pid 41906:tid 41930] [client 172.212.195.149:17673] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "ae0x1T3-0A3lxw9OXoD5MgAAAZY"]
[Sun Apr 26 05:27:49.718133 2026] [:error] [pid 41906:tid 41915] [client 172.212.195.149:17701] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail.php"] [unique_id "ae0x1T3-0A3lxw9OXoD5NAAAAYc"]
[Sun Apr 26 05:27:50.170034 2026] [:error] [pid 41906:tid 41922] [client 172.212.195.149:17737] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae0x1j3-0A3lxw9OXoD5OQAAAY4"]
[Sun Apr 26 05:27:50.588318 2026] [:error] [pid 41906:tid 41915] [client 172.212.195.149:17712] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae0x1j3-0A3lxw9OXoD5PgAAAYc"]
[Sun Apr 26 05:27:51.448407 2026] [:error] [pid 8390:tid 8468] [client 172.212.195.149:17749] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae0x14GPtFK_i9p5yxQIhQAAAJE"]
[Sun Apr 26 05:27:52.355738 2026] [:error] [pid 8390:tid 8470] [client 172.212.195.149:17724] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae0x2IGPtFK_i9p5yxQIiAAAAJM"]
[Sun Apr 26 05:27:52.958135 2026] [:error] [pid 41906:tid 41919] [client 172.212.195.149:17668] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "ae0x2D3-0A3lxw9OXoD5RgAAAYs"]
[Sun Apr 26 05:27:53.996656 2026] [:error] [pid 41906:tid 41928] [client 172.212.195.149:17710] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "ae0x2T3-0A3lxw9OXoD5UQAAAZQ"]
[Sun Apr 26 05:27:55.100937 2026] [:error] [pid 8383:tid 8400] [client 172.212.195.149:15347] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "ae0x29Fa2S3EsATMdWO3JgAAAAM"]
[Sun Apr 26 05:27:56.164645 2026] [:error] [pid 31273:tid 31346] [client 172.212.195.149:17784] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sx.php"] [unique_id "ae0x3PhcNJEGrATcuEe3cQAAAUg"]
[Sun Apr 26 05:27:57.286829 2026] [:error] [pid 31273:tid 31347] [client 172.212.195.149:15321] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae0x3fhcNJEGrATcuEe3dgAAAUk"]
[Sun Apr 26 05:27:58.393933 2026] [:error] [pid 41906:tid 41926] [client 172.212.195.149:15300] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae0x3j3-0A3lxw9OXoD5YQAAAZI"]
[Sun Apr 26 05:27:59.129449 2026] [:error] [pid 41906:tid 41930] [client 172.212.195.149:15351] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae0x3z3-0A3lxw9OXoD5ZAAAAZY"]
[Sun Apr 26 05:27:59.739325 2026] [:error] [pid 10315:tid 10325] [client 172.212.195.149:15237] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae0x36JIw2vjkleLIaCGRwAAAQg"]
[Sun Apr 26 05:28:00.686428 2026] [:error] [pid 10315:tid 10329] [client 172.212.195.149:17727] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "ae0x4KJIw2vjkleLIaCGTAAAAQw"]
[Sun Apr 26 05:28:02.172794 2026] [:error] [pid 10315:tid 10336] [client 172.212.195.149:15308] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "ae0x4qJIw2vjkleLIaCGUQAAARM"]
[Sun Apr 26 05:28:03.267431 2026] [:error] [pid 8390:tid 8475] [client 172.212.195.149:15343] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "ae0x44GPtFK_i9p5yxQIkgAAAJg"]
[Sun Apr 26 05:28:04.835086 2026] [:error] [pid 8385:tid 8432] [client 172.212.195.149:15357] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "ae0x5DOy7_J84Wx3-oxXKAAAAEg"]
[Sun Apr 26 05:28:07.457280 2026] [:error] [pid 41906:tid 41914] [client 172.212.195.149:15314] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ae0x5z3-0A3lxw9OXoD5bgAAAYY"]
[Sun Apr 26 05:28:09.232456 2026] [:error] [pid 41906:tid 41928] [client 172.212.195.149:15349] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ae0x6T3-0A3lxw9OXoD5dwAAAZQ"]
[Sun Apr 26 05:28:10.134120 2026] [:error] [pid 8390:tid 8464] [client 172.212.195.149:15338] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ae0x6oGPtFK_i9p5yxQImAAAAI0"]
[Sun Apr 26 05:28:11.178096 2026] [:error] [pid 41906:tid 41915] [client 172.212.195.149:15333] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ae0x6z3-0A3lxw9OXoD5ggAAAYc"]
[Sun Apr 26 05:28:11.886526 2026] [:error] [pid 41906:tid 41926] [client 172.212.195.149:17696] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0x6z3-0A3lxw9OXoD5iQAAAZI"]
[Sun Apr 26 05:28:12.635272 2026] [:error] [pid 41906:tid 41929] [client 172.212.195.149:17678] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0x7D3-0A3lxw9OXoD5jwAAAZU"]
[Sun Apr 26 05:28:14.666655 2026] [:error] [pid 41906:tid 41914] [client 172.212.195.149:15269] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0x7j3-0A3lxw9OXoD5nwAAAYY"]
[Sun Apr 26 05:28:15.706604 2026] [:error] [pid 31273:tid 31359] [client 172.212.195.149:15256] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0x7_hcNJEGrATcuEe3iQAAAVQ"]
[Sun Apr 26 05:28:16.773583 2026] [:error] [pid 41906:tid 41919] [client 172.212.195.149:15337] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "ae0x8D3-0A3lxw9OXoD5sQAAAYs"]
[Sun Apr 26 05:28:17.928263 2026] [:error] [pid 8390:tid 8471] [client 172.212.195.149:15327] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "ae0x8YGPtFK_i9p5yxQIqAAAAJQ"]
[Sun Apr 26 05:28:19.078105 2026] [:error] [pid 10315:tid 10326] [client 172.212.195.149:17718] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "ae0x86JIw2vjkleLIaCGdAAAAQk"]
[Sun Apr 26 05:28:20.006100 2026] [:error] [pid 8491:tid 8499] [client 172.212.195.149:15247] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-trackback.php"] [unique_id "ae0x9Cq7I7e6CJooQM2EbQAAAMA"]
[Sun Apr 26 05:28:21.260850 2026] [:error] [pid 8383:tid 8415] [client 172.212.195.149:15345] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "ae0x9dFa2S3EsATMdWO3NQAAABI"]
[Sun Apr 26 05:28:23.378250 2026] [:error] [pid 41906:tid 41908] [client 172.212.195.149:17738] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/index.php"] [unique_id "ae0x9z3-0A3lxw9OXoD50AAAAYA"]
[Sun Apr 26 05:28:27.730711 2026] [:error] [pid 31273:tid 31341] [client 172.212.195.149:15328] [client 172.212.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ae0x-_hcNJEGrATcuEe3nAAAAUQ"]
[Sun Apr 26 05:28:29.451820 2026] [:error] [pid 41906:tid 41925] [client 172.212.195.149:15317] [client 172.212.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ae0x_T3-0A3lxw9OXoD57QAAAZE"]
[Sun Apr 26 05:28:31.709612 2026] [:error] [pid 8491:tid 8500] [client 172.212.195.149:17713] [client 172.212.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "ae0x_yq7I7e6CJooQM2EgAAAAME"]
[Sun Apr 26 05:28:33.383056 2026] [:error] [pid 8491:tid 8520] [client 172.212.195.149:15242] [client 172.212.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ae0yASq7I7e6CJooQM2EhAAAANU"]
[Sun Apr 26 05:28:34.658983 2026] [:error] [pid 10315:tid 10341] [client 172.212.195.149:15282] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "ae0yAqJIw2vjkleLIaCGmQAAARg"]
[Sun Apr 26 05:28:35.777142 2026] [:error] [pid 41906:tid 41908] [client 172.212.195.149:15273] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "ae0yAz3-0A3lxw9OXoD58QAAAYA"]
[Sun Apr 26 05:28:36.716485 2026] [:error] [pid 10315:tid 10336] [client 172.212.195.149:15309] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "ae0yBKJIw2vjkleLIaCGmwAAARM"]
[Sun Apr 26 05:28:37.801566 2026] [:error] [pid 10315:tid 10323] [client 172.212.195.149:15238] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about/function.php"] [unique_id "ae0yBaJIw2vjkleLIaCGoAAAAQY"]
[Sun Apr 26 05:28:38.744094 2026] [:error] [pid 8491:tid 8507] [client 172.212.195.149:15286] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "ae0yBiq7I7e6CJooQM2EiAAAAMg"]
[Sun Apr 26 05:28:40.344672 2026] [:error] [pid 41906:tid 41928] [client 172.212.195.149:17667] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "ae0yCD3-0A3lxw9OXoD5_gAAAZQ"]
[Sun Apr 26 05:28:43.216865 2026] [:error] [pid 8491:tid 8517] [client 172.212.195.149:17707] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "ae0yCyq7I7e6CJooQM2ElQAAANI"]
[Sun Apr 26 05:28:46.896436 2026] [:error] [pid 8491:tid 8503] [client 172.212.195.149:17728] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/function.php"] [unique_id "ae0yDiq7I7e6CJooQM2EpQAAAMQ"]
[Sun Apr 26 05:28:50.120334 2026] [:error] [pid 8491:tid 8513] [client 172.212.195.149:15311] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae0yEiq7I7e6CJooQM2EqwAAAM4"]
[Sun Apr 26 05:28:54.929577 2026] [:error] [pid 41906:tid 41928] [client 172.212.195.149:17708] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae0yFj3-0A3lxw9OXoD6DwAAAZQ"]
[Sun Apr 26 05:28:57.716503 2026] [:error] [pid 8385:tid 8446] [client 172.212.195.149:15296] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae0yGTOy7_J84Wx3-oxXfQAAAFY"]
[Sun Apr 26 05:28:59.683033 2026] [:error] [pid 41906:tid 41909] [client 172.212.195.149:17723] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "ae0yGz3-0A3lxw9OXoD6FgAAAYE"]
[Sun Apr 26 05:29:01.978728 2026] [:error] [pid 10315:tid 10335] [client 172.212.195.149:15250] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae0yHaJIw2vjkleLIaCG1QAAARI"]
[Sun Apr 26 05:29:04.337154 2026] [:error] [pid 10315:tid 10320] [client 172.212.195.149:15304] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae0yIKJIw2vjkleLIaCG3gAAAQM"]
[Sun Apr 26 05:29:06.438533 2026] [:error] [pid 41906:tid 41913] [client 172.212.195.149:17717] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae0yIj3-0A3lxw9OXoD6LQAAAYU"]
[Sun Apr 26 05:29:08.917170 2026] [:error] [pid 10315:tid 10341] [client 172.212.195.149:17742] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "ae0yJKJIw2vjkleLIaCG8AAAARg"]
[Sun Apr 26 05:29:15.897677 2026] [:error] [pid 8390:tid 8454] [client 172.212.195.149:15344] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "ae0yK4GPtFK_i9p5yxQJHgAAAIM"]
[Sun Apr 26 05:29:20.935458 2026] [:error] [pid 8491:tid 8500] [client 172.212.195.149:17758] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "ae0yMCq7I7e6CJooQM2E1gAAAME"]
[Sun Apr 26 05:29:22.951606 2026] [:error] [pid 31273:tid 31356] [client 172.212.195.149:15352] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "ae0yMvhcNJEGrATcuEe39wAAAVE"]
[Sun Apr 26 05:29:23.811036 2026] [:error] [pid 8383:tid 8415] [client 172.212.195.149:15319] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/security.php"] [unique_id "ae0yM9Fa2S3EsATMdWO3dAAAABI"]
[Sun Apr 26 05:29:24.325929 2026] [:error] [pid 31273:tid 31335] [client 172.212.195.149:15334] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae0yNPhcNJEGrATcuEe3_AAAAUA"]
[Sun Apr 26 05:29:25.070485 2026] [:error] [pid 41906:tid 41925] [client 172.212.195.149:15233] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae0yNT3-0A3lxw9OXoD6UAAAAZE"]
[Sun Apr 26 05:29:26.151926 2026] [:error] [pid 8491:tid 8508] [client 172.212.195.149:15189] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae0yNiq7I7e6CJooQM2E4QAAAMk"]
[Sun Apr 26 05:29:26.673403 2026] [:error] [pid 8383:tid 8399] [client 172.212.195.149:17774] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae0yNtFa2S3EsATMdWO3dgAAAAI"]
[Sun Apr 26 05:29:27.227572 2026] [:error] [pid 31273:tid 31341] [client 172.212.195.149:15287] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae0yN_hcNJEGrATcuEe4BgAAAUQ"]
[Sun Apr 26 05:29:27.889006 2026] [:error] [pid 10315:tid 10337] [client 172.212.195.149:15315] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae0yN6JIw2vjkleLIaCHEwAAARQ"]
[Sun Apr 26 05:29:28.527546 2026] [:error] [pid 10315:tid 10332] [client 172.212.195.149:15285] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae0yOKJIw2vjkleLIaCHFQAAAQ8"]
[Sun Apr 26 05:29:28.962749 2026] [:error] [pid 41906:tid 41931] [client 172.212.195.149:17684] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae0yOD3-0A3lxw9OXoD6XQAAAZc"]
[Sun Apr 26 05:29:29.797595 2026] [:error] [pid 41906:tid 41932] [client 172.212.195.149:17715] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae0yOT3-0A3lxw9OXoD6ZgAAAZg"]
[Sun Apr 26 05:29:30.336279 2026] [:error] [pid 41906:tid 41922] [client 172.212.195.149:15236] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae0yOj3-0A3lxw9OXoD6aQAAAY4"]
[Sun Apr 26 05:29:30.944872 2026] [:error] [pid 8390:tid 8456] [client 172.212.195.149:15313] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae0yOoGPtFK_i9p5yxQJMQAAAIU"]
[Sun Apr 26 05:29:31.708576 2026] [:error] [pid 8390:tid 8463] [client 172.212.195.149:15359] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae0yO4GPtFK_i9p5yxQJNAAAAIw"]
[Sun Apr 26 05:29:32.358857 2026] [:error] [pid 31273:tid 31349] [client 172.212.195.149:17726] [client 172.212.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ae0yPPhcNJEGrATcuEe4DgAAAUo"]
[Sun Apr 26 05:29:33.088660 2026] [:error] [pid 31273:tid 31346] [client 172.212.195.149:15270] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "ae0yPfhcNJEGrATcuEe4EQAAAUg"]
[Sun Apr 26 05:29:33.652674 2026] [:error] [pid 41906:tid 41928] [client 172.212.195.149:15342] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/radio.php"] [unique_id "ae0yPT3-0A3lxw9OXoD6egAAAZQ"]
[Sun Apr 26 05:29:39.639979 2026] [:error] [pid 10315:tid 10333] [client 172.212.195.149:17736] [client 172.212.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ae0yQ6JIw2vjkleLIaCHIwAAARA"]
[Sun Apr 26 05:29:40.490787 2026] [:error] [pid 8491:tid 8524] [client 172.212.195.149:15302] [client 172.212.195.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "ae0yRCq7I7e6CJooQM2E-gAAANg"]
[Sun Apr 26 05:29:42.414120 2026] [:error] [pid 8491:tid 8506] [client 172.212.195.149:15243] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae0yRiq7I7e6CJooQM2FBQAAAMc"]
[Sun Apr 26 05:29:43.416803 2026] [:error] [pid 41906:tid 41923] [client 172.212.195.149:15249] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae0yRz3-0A3lxw9OXoD6uwAAAY8"]
[Sun Apr 26 05:29:44.336285 2026] [:error] [pid 31273:tid 31336] [client 172.212.195.149:15292] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae0ySPhcNJEGrATcuEe4FAAAAUE"]
[Sun Apr 26 05:29:45.226146 2026] [:error] [pid 8383:tid 8412] [client 172.212.195.149:17699] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o1.php"] [unique_id "ae0ySdFa2S3EsATMdWO3fgAAAA8"]
[Sun Apr 26 05:29:45.831569 2026] [:error] [pid 31273:tid 31341] [client 172.212.195.149:17674] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "ae0ySfhcNJEGrATcuEe4GQAAAUQ"]
[Sun Apr 26 05:29:46.435111 2026] [:error] [pid 10315:tid 10317] [client 172.212.195.149:15275] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "ae0ySqJIw2vjkleLIaCHKAAAAQA"]
[Sun Apr 26 05:29:46.903086 2026] [:error] [pid 10315:tid 10324] [client 172.212.195.149:15252] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "ae0ySqJIw2vjkleLIaCHLQAAAQc"]
[Sun Apr 26 05:29:47.363076 2026] [:error] [pid 10315:tid 10336] [client 172.212.195.149:15254] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/juuuu.php"] [unique_id "ae0yS6JIw2vjkleLIaCHMAAAARM"]
[Sun Apr 26 05:29:47.894024 2026] [:error] [pid 41906:tid 41932] [client 172.212.195.149:15330] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "ae0ySz3-0A3lxw9OXoD61gAAAZg"]
[Sun Apr 26 05:29:48.802725 2026] [:error] [pid 41906:tid 41924] [client 172.212.195.149:15256] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "ae0yTD3-0A3lxw9OXoD63gAAAZA"]
[Sun Apr 26 05:29:49.814010 2026] [:error] [pid 41906:tid 41919] [client 172.212.195.149:15301] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "ae0yTT3-0A3lxw9OXoD65QAAAYs"]
[Sun Apr 26 05:29:50.838650 2026] [:error] [pid 10315:tid 10317] [client 172.212.195.149:15281] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ha.php"] [unique_id "ae0yTqJIw2vjkleLIaCHOgAAAQA"]
[Sun Apr 26 05:29:52.722945 2026] [:error] [pid 31273:tid 31344] [client 172.212.195.149:15245] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "ae0yUPhcNJEGrATcuEe4IgAAAUY"]
[Sun Apr 26 05:29:53.789857 2026] [:error] [pid 10315:tid 10323] [client 172.212.195.149:15258] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "ae0yUaJIw2vjkleLIaCHSgAAAQY"]
[Sun Apr 26 05:29:57.957069 2026] [:error] [pid 10315:tid 10329] [client 172.212.195.149:15203] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "ae0yVaJIw2vjkleLIaCHVAAAAQw"]
[Sun Apr 26 05:30:04.392061 2026] [:error] [pid 10315:tid 10328] [client 172.212.195.149:15284] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gg.php"] [unique_id "ae0yXKJIw2vjkleLIaCHagAAAQs"]
[Sun Apr 26 05:30:05.668896 2026] [:error] [pid 10315:tid 10329] [client 172.212.195.149:15354] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "ae0yXaJIw2vjkleLIaCHcAAAAQw"]
[Sun Apr 26 05:30:06.489969 2026] [:error] [pid 8390:tid 8459] [client 172.212.195.149:17719] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "ae0yXoGPtFK_i9p5yxQJSQAAAIg"]
[Sun Apr 26 05:30:07.160292 2026] [:error] [pid 8390:tid 8463] [client 172.212.195.149:17783] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "ae0yX4GPtFK_i9p5yxQJTgAAAIw"]
[Sun Apr 26 05:30:07.824079 2026] [:error] [pid 10315:tid 10333] [client 172.212.195.149:15295] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we2.php"] [unique_id "ae0yX6JIw2vjkleLIaCHegAAARA"]
[Sun Apr 26 05:30:09.214092 2026] [:error] [pid 10315:tid 10324] [client 172.212.195.149:17670] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "ae0yYaJIw2vjkleLIaCHfwAAAQc"]
[Sun Apr 26 05:30:10.559420 2026] [:error] [pid 10315:tid 10318] [client 172.212.195.149:15268] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "ae0yYqJIw2vjkleLIaCHhAAAAQE"]
[Sun Apr 26 05:30:12.357224 2026] [:error] [pid 8390:tid 8466] [client 172.212.195.149:15293] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "ae0yZIGPtFK_i9p5yxQJVwAAAI8"]
[Sun Apr 26 05:30:13.471549 2026] [:error] [pid 8385:tid 8426] [client 172.212.195.149:17680] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/04.php"] [unique_id "ae0yZTOy7_J84Wx3-oxXrAAAAEI"]
[Sun Apr 26 05:30:14.923185 2026] [:error] [pid 10315:tid 10317] [client 172.212.195.149:15244] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "ae0yZqJIw2vjkleLIaCHjQAAAQA"]
[Sun Apr 26 05:30:16.045976 2026] [:error] [pid 8390:tid 8451] [client 172.212.195.149:15172] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "ae0yaIGPtFK_i9p5yxQJYQAAAIA"]
[Sun Apr 26 05:30:16.633564 2026] [:error] [pid 10315:tid 10332] [client 172.212.195.149:15324] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "ae0yaKJIw2vjkleLIaCHjgAAAQ8"]
[Sun Apr 26 05:30:17.827914 2026] [:error] [pid 41906:tid 41912] [client 172.212.195.149:15329] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "ae0yaT3-0A3lxw9OXoD7BgAAAYQ"]
[Sun Apr 26 05:30:19.177065 2026] [:error] [pid 31273:tid 31355] [client 172.212.195.149:17676] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "ae0ya_hcNJEGrATcuEe4QwAAAVA"]
[Sun Apr 26 05:30:20.041646 2026] [:error] [pid 41906:tid 41913] [client 172.212.195.149:15265] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "ae0ybD3-0A3lxw9OXoD7DgAAAYU"]
[Sun Apr 26 05:30:21.748959 2026] [:error] [pid 8491:tid 8518] [client 172.212.195.149:15179] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "ae0ybSq7I7e6CJooQM2FKwAAANM"]
[Sun Apr 26 05:30:23.281119 2026] [:error] [pid 41906:tid 41922] [client 172.212.195.149:15350] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/520.php"] [unique_id "ae0ybz3-0A3lxw9OXoD7GAAAAY4"]
[Sun Apr 26 05:30:25.961204 2026] [:error] [pid 41906:tid 41924] [client 172.212.195.149:15168] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "ae0ycT3-0A3lxw9OXoD7IQAAAZA"]
[Sun Apr 26 05:30:28.450494 2026] [:error] [pid 8491:tid 8499] [client 172.212.195.149:15257] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "ae0ydCq7I7e6CJooQM2FNAAAAMA"]
[Sun Apr 26 05:30:31.267607 2026] [:error] [pid 41906:tid 41923] [client 172.212.195.149:15322] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "ae0ydz3-0A3lxw9OXoD7LwAAAY8"]
[Sun Apr 26 05:30:35.601838 2026] [:error] [pid 41906:tid 41918] [client 172.212.195.149:15310] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ar.php"] [unique_id "ae0yez3-0A3lxw9OXoD7PAAAAYo"]
[Sun Apr 26 05:30:37.944033 2026] [:error] [pid 41906:tid 41912] [client 172.212.195.149:17744] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "ae0yfT3-0A3lxw9OXoD7SAAAAYQ"]
[Sun Apr 26 05:30:41.773855 2026] [:error] [pid 10315:tid 10331] [client 172.212.195.149:17781] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "ae0ygaJIw2vjkleLIaCHxQAAAQ4"]
[Sun Apr 26 05:30:58.645068 2026] [:error] [pid 8491:tid 8513] [client 172.212.195.149:15312] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "ae0ykiq7I7e6CJooQM2FXgAAAM4"]
[Sun Apr 26 05:31:00.723524 2026] [:error] [pid 41906:tid 41911] [client 172.212.195.149:17664] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "ae0ylD3-0A3lxw9OXoD7lwAAAYM"]
[Sun Apr 26 05:31:01.709820 2026] [:error] [pid 8491:tid 8511] [client 172.212.195.149:17693] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "ae0ylSq7I7e6CJooQM2FZAAAAMw"]
[Sun Apr 26 05:31:02.756601 2026] [:error] [pid 8383:tid 8398] [client 172.212.195.149:15176] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/nox.php"] [unique_id "ae0yltFa2S3EsATMdWO3tQAAAAE"]
[Sun Apr 26 05:31:03.830743 2026] [:error] [pid 8491:tid 8517] [client 172.212.195.149:15263] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "ae0ylyq7I7e6CJooQM2FagAAANI"]
[Sun Apr 26 05:31:04.713739 2026] [:error] [pid 8383:tid 8417] [client 172.212.195.149:17762] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "ae0ymNFa2S3EsATMdWO3uAAAABQ"]
[Sun Apr 26 05:31:06.250510 2026] [:error] [pid 8390:tid 8474] [client 172.212.195.149:15264] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "ae0ymoGPtFK_i9p5yxQJmgAAAJc"]
[Sun Apr 26 05:31:09.123047 2026] [:error] [pid 8385:tid 8448] [client 172.212.195.149:17761] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "ae0ynTOy7_J84Wx3-oxX3gAAAFg"]
[Sun Apr 26 05:31:11.704305 2026] [:error] [pid 8383:tid 8399] [client 172.212.195.149:17782] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "ae0yn9Fa2S3EsATMdWO3yAAAAAI"]
[Sun Apr 26 05:31:13.896104 2026] [:error] [pid 8383:tid 8398] [client 172.212.195.149:17671] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "ae0yodFa2S3EsATMdWO30QAAAAE"]
[Sun Apr 26 05:31:15.272195 2026] [:error] [pid 41906:tid 41909] [client 172.212.195.149:17711] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "ae0yoz3-0A3lxw9OXoD7rQAAAYE"]
[Sun Apr 26 05:31:16.499745 2026] [:error] [pid 10315:tid 10336] [client 172.212.195.149:17731] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php"] [unique_id "ae0ypKJIw2vjkleLIaCH6QAAARM"]
[Sun Apr 26 05:31:17.295448 2026] [:error] [pid 10315:tid 10321] [client 172.212.195.149:15306] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "ae0ypaJIw2vjkleLIaCH7QAAAQQ"]
[Sun Apr 26 05:31:17.946131 2026] [:error] [pid 10315:tid 10325] [client 172.212.195.149:17766] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "ae0ypaJIw2vjkleLIaCH9AAAAQg"]
[Sun Apr 26 05:31:18.963455 2026] [:error] [pid 31273:tid 31339] [client 172.212.195.149:17672] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "ae0ypvhcNJEGrATcuEe40QAAAUM"]
[Sun Apr 26 05:31:20.346308 2026] [:error] [pid 41906:tid 41914] [client 172.212.195.149:15261] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class9.php"] [unique_id "ae0yqD3-0A3lxw9OXoD7uAAAAYY"]
[Sun Apr 26 05:31:21.861565 2026] [:error] [pid 10315:tid 10337] [client 172.212.195.149:17733] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "ae0yqaJIw2vjkleLIaCH_wAAARQ"]
[Sun Apr 26 05:31:24.383790 2026] [:error] [pid 10315:tid 10331] [client 172.212.195.149:15196] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "ae0yrKJIw2vjkleLIaCIDAAAAQ4"]
[Sun Apr 26 05:31:25.342296 2026] [:error] [pid 8383:tid 8410] [client 172.212.195.149:17750] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "ae0yrdFa2S3EsATMdWO35gAAAA0"]
[Sun Apr 26 05:31:27.459309 2026] [:error] [pid 41906:tid 41917] [client 172.212.195.149:15272] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/la.php"] [unique_id "ae0yrz3-0A3lxw9OXoD79wAAAYk"]
[Sun Apr 26 05:31:28.308365 2026] [:error] [pid 8491:tid 8510] [client 172.212.195.149:17769] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "ae0ysCq7I7e6CJooQM2FgQAAAMs"]
[Sun Apr 26 05:31:28.974834 2026] [:error] [pid 8383:tid 8417] [client 172.212.195.149:17765] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "ae0ysNFa2S3EsATMdWO38AAAABQ"]
[Sun Apr 26 05:31:30.378060 2026] [:error] [pid 41906:tid 41920] [client 172.212.195.149:17776] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "ae0ysj3-0A3lxw9OXoD8FwAAAYw"]
[Sun Apr 26 05:31:31.478696 2026] [:error] [pid 8385:tid 8429] [client 172.212.195.149:17694] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bless11.php"] [unique_id "ae0yszOy7_J84Wx3-oxX7AAAAEU"]
[Sun Apr 26 05:31:32.415110 2026] [:error] [pid 8491:tid 8518] [client 172.212.195.149:17739] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "ae0ytCq7I7e6CJooQM2FiQAAANM"]
[Sun Apr 26 05:31:33.048106 2026] [:error] [pid 10315:tid 10334] [client 172.212.195.149:17756] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "ae0ytaJIw2vjkleLIaCIJgAAARE"]
[Sun Apr 26 05:31:34.006203 2026] [:error] [pid 41906:tid 41916] [client 172.212.195.149:17695] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "ae0ytj3-0A3lxw9OXoD8MAAAAYg"]
[Sun Apr 26 05:31:34.841706 2026] [:error] [pid 31273:tid 31337] [client 172.212.195.149:17751] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "ae0ytvhcNJEGrATcuEe42QAAAUI"]
[Sun Apr 26 05:31:35.915990 2026] [:error] [pid 10315:tid 10332] [client 172.212.195.149:15173] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "ae0yt6JIw2vjkleLIaCIMwAAAQ8"]
[Sun Apr 26 05:31:36.808053 2026] [:error] [pid 10315:tid 10333] [client 172.212.195.149:15348] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "ae0yuKJIw2vjkleLIaCIOQAAARA"]
[Sun Apr 26 05:31:37.837704 2026] [:error] [pid 8385:tid 8443] [client 172.212.195.149:17786] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "ae0yuTOy7_J84Wx3-oxX8QAAAFM"]
[Sun Apr 26 05:31:38.952933 2026] [:error] [pid 8385:tid 8441] [client 172.212.195.149:17778] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ton.php"] [unique_id "ae0yujOy7_J84Wx3-oxX9AAAAFE"]
[Sun Apr 26 05:31:40.125537 2026] [:error] [pid 8390:tid 8461] [client 172.212.195.149:15323] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae0yvIGPtFK_i9p5yxQJzAAAAIo"]
[Sun Apr 26 05:31:41.053136 2026] [:error] [pid 8383:tid 8417] [client 172.212.195.149:15240] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae0yvdFa2S3EsATMdWO4AwAAABQ"]
[Sun Apr 26 05:31:42.247764 2026] [:error] [pid 10315:tid 10341] [client 172.212.195.149:17665] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae0yvqJIw2vjkleLIaCISgAAARg"]
[Sun Apr 26 05:31:44.016353 2026] [:error] [pid 31273:tid 31344] [client 172.212.195.149:15291] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae0ywPhcNJEGrATcuEe46gAAAUY"]
[Sun Apr 26 05:31:45.232728 2026] [:error] [pid 31273:tid 31353] [client 172.212.195.149:15331] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ae0ywfhcNJEGrATcuEe47gAAAU4"]
[Sun Apr 26 05:31:46.084964 2026] [:error] [pid 8491:tid 8519] [client 172.212.195.149:15256] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ae0ywiq7I7e6CJooQM2FpAAAANQ"]
[Sun Apr 26 05:31:46.715992 2026] [:error] [pid 31273:tid 31339] [client 172.212.195.149:17709] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ae0ywvhcNJEGrATcuEe49QAAAUM"]
[Sun Apr 26 05:31:47.576967 2026] [:error] [pid 31273:tid 31341] [client 172.212.195.149:17677] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file9.php"] [unique_id "ae0yw_hcNJEGrATcuEe4_AAAAUQ"]
[Sun Apr 26 05:31:48.218420 2026] [:error] [pid 8385:tid 8441] [client 172.212.195.149:15316] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "ae0yxDOy7_J84Wx3-oxYBAAAAFE"]
[Sun Apr 26 05:31:49.202784 2026] [:error] [pid 31273:tid 31359] [client 172.212.195.149:15255] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "ae0yxfhcNJEGrATcuEe5AgAAAVQ"]
[Sun Apr 26 05:31:50.145544 2026] [:error] [pid 41906:tid 41918] [client 172.212.195.149:17685] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "ae0yxj3-0A3lxw9OXoD8bAAAAYo"]
[Sun Apr 26 05:31:51.084808 2026] [:error] [pid 41906:tid 41920] [client 172.212.195.149:15325] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ac.php"] [unique_id "ae0yxz3-0A3lxw9OXoD8dQAAAYw"]
[Sun Apr 26 05:31:51.888052 2026] [:error] [pid 41906:tid 41922] [client 172.212.195.149:17772] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "ae0yxz3-0A3lxw9OXoD8fQAAAY4"]
[Sun Apr 26 05:31:52.703534 2026] [:error] [pid 8385:tid 8432] [client 172.212.195.149:15234] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "ae0yyDOy7_J84Wx3-oxYGQAAAEg"]
[Sun Apr 26 05:31:54.186565 2026] [:error] [pid 10315:tid 10327] [client 172.212.195.149:17679] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "ae0yyqJIw2vjkleLIaCIYAAAAQo"]
[Sun Apr 26 05:31:55.094788 2026] [:error] [pid 8390:tid 8465] [client 172.212.195.149:17675] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "ae0yy4GPtFK_i9p5yxQJ2gAAAI4"]
[Sun Apr 26 05:31:55.910450 2026] [:error] [pid 8390:tid 8462] [client 172.212.195.149:17666] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "ae0yy4GPtFK_i9p5yxQJ2wAAAIs"]
[Sun Apr 26 05:31:56.650929 2026] [:error] [pid 41906:tid 41929] [client 172.212.195.149:17729] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "ae0yzD3-0A3lxw9OXoD8jwAAAZU"]
[Sun Apr 26 05:31:57.819272 2026] [:error] [pid 41906:tid 41912] [client 172.212.195.149:15206] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pop.php"] [unique_id "ae0yzT3-0A3lxw9OXoD8lQAAAYQ"]
[Sun Apr 26 05:32:05.695940 2026] [:error] [pid 8383:tid 8400] [client 172.212.195.149:17759] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "ae0y1dFa2S3EsATMdWO4LAAAAAM"]
[Sun Apr 26 05:32:06.887857 2026] [:error] [pid 8385:tid 8448] [client 172.212.195.149:15181] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "ae0y1jOy7_J84Wx3-oxYTwAAAFg"]
[Sun Apr 26 05:32:08.410711 2026] [:error] [pid 41906:tid 41911] [client 172.212.195.149:15178] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "ae0y2D3-0A3lxw9OXoD8oAAAAYM"]
[Sun Apr 26 05:32:09.706739 2026] [:error] [pid 31273:tid 31337] [client 172.212.195.149:15320] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rh.php"] [unique_id "ae0y2fhcNJEGrATcuEe5LgAAAUI"]
[Sun Apr 26 05:32:10.403063 2026] [:error] [pid 10315:tid 10332] [client 172.212.195.149:17768] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "ae0y2qJIw2vjkleLIaCIbwAAAQ8"]
[Sun Apr 26 05:32:11.085569 2026] [:error] [pid 10315:tid 10335] [client 172.212.195.149:15335] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "ae0y26JIw2vjkleLIaCIdAAAARI"]
[Sun Apr 26 05:32:11.813187 2026] [:error] [pid 8385:tid 8424] [client 172.212.195.149:17745] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "ae0y2zOy7_J84Wx3-oxYUwAAAEA"]
[Sun Apr 26 05:32:12.511814 2026] [:error] [pid 10315:tid 10340] [client 172.212.195.149:17771] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins.php"] [unique_id "ae0y3KJIw2vjkleLIaCIeQAAARc"]
[Sun Apr 26 05:32:13.130861 2026] [:error] [pid 8383:tid 8404] [client 172.212.195.149:17746] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/users.php"] [unique_id "ae0y3dFa2S3EsATMdWO4MwAAAAc"]
[Sun Apr 26 05:32:13.800700 2026] [:error] [pid 41906:tid 41911] [client 172.212.195.149:15336] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/users.php"] [unique_id "ae0y3T3-0A3lxw9OXoD8swAAAYM"]
[Sun Apr 26 05:32:14.686043 2026] [:error] [pid 31273:tid 31336] [client 172.212.195.149:17753] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/users.php"] [unique_id "ae0y3vhcNJEGrATcuEe5NwAAAUE"]
[Sun Apr 26 05:32:15.220833 2026] [:error] [pid 31273:tid 31359] [client 172.212.195.149:15195] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/users.php"] [unique_id "ae0y3_hcNJEGrATcuEe5OAAAAVQ"]
[Sun Apr 26 05:32:16.371503 2026] [:error] [pid 31273:tid 31358] [client 172.212.195.149:17716] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0y4PhcNJEGrATcuEe5PQAAAVM"]
[Sun Apr 26 05:32:17.168445 2026] [:error] [pid 31273:tid 31356] [client 172.212.195.149:15262] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0y4fhcNJEGrATcuEe5QwAAAVE"]
[Sun Apr 26 05:32:18.141836 2026] [:error] [pid 41906:tid 41908] [client 172.212.195.149:17752] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0y4j3-0A3lxw9OXoD8xQAAAYA"]
[Sun Apr 26 05:32:19.127527 2026] [:error] [pid 41906:tid 41925] [client 172.212.195.149:15214] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "ae0y4z3-0A3lxw9OXoD8zgAAAZE"]
[Sun Apr 26 05:32:20.247018 2026] [:error] [pid 31273:tid 31342] [client 172.212.195.149:15298] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "ae0y5PhcNJEGrATcuEe5RQAAAUU"]
[Sun Apr 26 05:32:21.201916 2026] [:error] [pid 31273:tid 31349] [client 172.212.195.149:17740] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "ae0y5fhcNJEGrATcuEe5SgAAAUo"]
[Sun Apr 26 05:32:21.847270 2026] [:error] [pid 10315:tid 10320] [client 172.212.195.149:15293] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "ae0y5aJIw2vjkleLIaCIggAAAQM"]
[Sun Apr 26 05:32:22.683780 2026] [:error] [pid 31273:tid 31344] [client 172.212.195.149:15241] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/profile.php"] [unique_id "ae0y5vhcNJEGrATcuEe5UwAAAUY"]
[Sun Apr 26 05:32:23.496826 2026] [:error] [pid 41906:tid 41926] [client 172.212.195.149:15283] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "ae0y5z3-0A3lxw9OXoD84gAAAZI"]
[Sun Apr 26 05:32:24.459656 2026] [:error] [pid 41906:tid 41911] [client 172.212.195.149:17770] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "ae0y6D3-0A3lxw9OXoD86QAAAYM"]
[Sun Apr 26 05:32:25.463564 2026] [:error] [pid 10315:tid 10336] [client 172.212.195.149:17669] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "ae0y6aJIw2vjkleLIaCIiAAAARM"]
[Sun Apr 26 05:32:26.959900 2026] [:error] [pid 41906:tid 41911] [client 172.212.195.149:15207] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "ae0y6j3-0A3lxw9OXoD88QAAAYM"]
[Sun Apr 26 05:32:28.097664 2026] [:error] [pid 41906:tid 41930] [client 172.212.195.149:15271] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sites.php"] [unique_id "ae0y7D3-0A3lxw9OXoD8-QAAAZY"]
[Sun Apr 26 05:32:29.912656 2026] [:error] [pid 10315:tid 10327] [client 172.212.195.149:17787] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sites.php"] [unique_id "ae0y7aJIw2vjkleLIaCInAAAAQo"]
[Sun Apr 26 05:32:31.203832 2026] [:error] [pid 41906:tid 41910] [client 172.212.195.149:15248] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sites.php"] [unique_id "ae0y7z3-0A3lxw9OXoD9EQAAAYI"]
[Sun Apr 26 05:32:32.772267 2026] [:error] [pid 41906:tid 41914] [client 172.212.195.149:15232] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sites.php"] [unique_id "ae0y8D3-0A3lxw9OXoD9HQAAAYY"]
[Sun Apr 26 05:32:35.134628 2026] [:error] [pid 41906:tid 41912] [client 172.212.195.149:17754] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0y8z3-0A3lxw9OXoD9LgAAAYQ"]
[Sun Apr 26 05:32:38.025561 2026] [:error] [pid 8383:tid 8412] [client 172.212.195.149:15259] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0y9tFa2S3EsATMdWO4OwAAAA8"]
[Sun Apr 26 05:32:40.192227 2026] [:error] [pid 10315:tid 10339] [client 172.212.195.149:17748] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0y-KJIw2vjkleLIaCIvAAAARY"]
[Sun Apr 26 05:32:42.544693 2026] [:error] [pid 41906:tid 41916] [client 172.212.195.149:17724] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byp.php"] [unique_id "ae0y-j3-0A3lxw9OXoD9VgAAAYg"]
[Sun Apr 26 05:32:46.508006 2026] [:error] [pid 10315:tid 10328] [client 172.212.195.149:17697] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "ae0y_qJIw2vjkleLIaCI2AAAAQs"]
[Sun Apr 26 05:32:48.753157 2026] [:error] [pid 41906:tid 41919] [client 172.212.195.149:17789] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "ae0zAD3-0A3lxw9OXoD9ewAAAYs"]
[Sun Apr 26 05:32:51.087075 2026] [:error] [pid 31273:tid 31353] [client 172.212.195.149:15118] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "ae0zA_hcNJEGrATcuEe5iAAAAU4"]
[Sun Apr 26 05:32:52.389197 2026] [:error] [pid 10315:tid 10319] [client 172.212.195.149:15267] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "ae0zBKJIw2vjkleLIaCI4gAAAQI"]
[Sun Apr 26 05:32:54.212064 2026] [:error] [pid 41906:tid 41928] [client 172.212.195.149:17681] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ae0zBj3-0A3lxw9OXoD9mAAAAZQ"]
[Sun Apr 26 05:32:56.927511 2026] [:error] [pid 41906:tid 41913] [client 172.212.195.149:17779] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ae0zCD3-0A3lxw9OXoD9qAAAAYU"]
[Sun Apr 26 05:33:00.600302 2026] [:error] [pid 41906:tid 41910] [client 172.212.195.149:17682] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ae0zDD3-0A3lxw9OXoD9sQAAAYI"]
[Sun Apr 26 05:33:02.590797 2026] [:error] [pid 41906:tid 41920] [client 172.212.195.149:17760] [client 172.212.195.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ae0zDj3-0A3lxw9OXoD9tgAAAYw"]
[Sun Apr 26 05:36:39.668209 2026] [:error] [pid 8491:tid 8516] [client 72.146.5.227:51447] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "ae0z5yq7I7e6CJooQM2GnwAAANE"]
[Sun Apr 26 05:36:40.710165 2026] [:error] [pid 8383:tid 8401] [client 72.146.5.227:51413] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "ae0z6NFa2S3EsATMdWO5HAAAAAQ"]
[Sun Apr 26 05:36:41.847382 2026] [:error] [pid 8491:tid 8521] [client 72.146.5.227:39584] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "ae0z6Sq7I7e6CJooQM2GpwAAANY"]
[Sun Apr 26 05:36:45.743959 2026] [:error] [pid 41906:tid 41925] [client 72.146.5.227:31550] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/G-In.php"] [unique_id "ae0z7T3-0A3lxw9OXoD_6AAAAZE"]
[Sun Apr 26 05:36:46.747865 2026] [:error] [pid 31273:tid 31342] [client 72.146.5.227:39571] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj11.php"] [unique_id "ae0z7vhcNJEGrATcuEe6wwAAAUU"]
[Sun Apr 26 05:36:54.477016 2026] [:error] [pid 10315:tid 10322] [client 72.146.5.227:33700] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj11.php"] [unique_id "ae0z9qJIw2vjkleLIaCKmAAAAQU"]
[Sun Apr 26 05:36:56.188038 2026] [:error] [pid 41906:tid 41930] [client 72.146.5.227:30205] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj11.php"] [unique_id "ae0z-D3-0A3lxw9OXoD_9gAAAZY"]
[Sun Apr 26 05:36:57.117318 2026] [:error] [pid 31273:tid 31356] [client 72.146.5.227:27590] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aj11.php"] [unique_id "ae0z-fhcNJEGrATcuEe6ywAAAVE"]
[Sun Apr 26 05:36:57.936327 2026] [:error] [pid 31273:tid 31360] [client 72.146.5.227:30181] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "ae0z-fhcNJEGrATcuEe60AAAAVU"]
[Sun Apr 26 05:36:59.118175 2026] [:error] [pid 31273:tid 31363] [client 72.146.5.227:30206] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "ae0z-_hcNJEGrATcuEe61gAAAVg"]
[Sun Apr 26 05:37:00.656931 2026] [:error] [pid 8390:tid 8460] [client 72.146.5.227:33710] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "ae0z_IGPtFK_i9p5yxQK9AAAAIk"]
[Sun Apr 26 05:37:02.452451 2026] [:error] [pid 31273:tid 31335] [client 72.146.5.227:33666] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "ae0z_vhcNJEGrATcuEe62gAAAUA"]
[Sun Apr 26 05:37:03.639973 2026] [:error] [pid 8385:tid 8444] [client 72.146.5.227:38798] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xroot.php"] [unique_id "ae0z_zOy7_J84Wx3-oxY7AAAAFQ"]
[Sun Apr 26 05:37:04.650572 2026] [:error] [pid 31273:tid 31351] [client 72.146.5.227:38816] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xroot.php"] [unique_id "ae00APhcNJEGrATcuEe65QAAAUw"]
[Sun Apr 26 05:37:07.241777 2026] [:error] [pid 8385:tid 8446] [client 72.146.5.227:51893] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xroot.php"] [unique_id "ae00AzOy7_J84Wx3-oxY7gAAAFY"]
[Sun Apr 26 05:37:09.835110 2026] [:error] [pid 41906:tid 41916] [client 72.146.5.227:27587] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xroot.php"] [unique_id "ae00BT3-0A3lxw9OXoAAFAAAAYg"]
[Sun Apr 26 05:37:11.542783 2026] [:error] [pid 31273:tid 31353] [client 72.146.5.227:51903] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "ae00B_hcNJEGrATcuEe68wAAAU4"]
[Sun Apr 26 05:37:14.077184 2026] [:error] [pid 8385:tid 8425] [client 72.146.5.227:31523] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "ae00CjOy7_J84Wx3-oxY-AAAAEE"]
[Sun Apr 26 05:37:15.901481 2026] [:error] [pid 31273:tid 31345] [client 72.146.5.227:39610] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "ae00C_hcNJEGrATcuEe6_AAAAUc"]
[Sun Apr 26 05:37:17.113803 2026] [:error] [pid 8383:tid 8419] [client 72.146.5.227:51450] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "ae00DdFa2S3EsATMdWO5NQAAABY"]
[Sun Apr 26 05:37:18.097934 2026] [:error] [pid 8491:tid 8517] [client 72.146.5.227:38840] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "ae00Diq7I7e6CJooQM2G1AAAANI"]
[Sun Apr 26 05:37:19.169585 2026] [:error] [pid 31273:tid 31353] [client 72.146.5.227:38842] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "ae00D_hcNJEGrATcuEe7AwAAAU4"]
[Sun Apr 26 05:37:20.694056 2026] [:error] [pid 8385:tid 8426] [client 72.146.5.227:39605] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "ae00EDOy7_J84Wx3-oxY_wAAAEI"]
[Sun Apr 26 05:37:21.943645 2026] [:error] [pid 31273:tid 31363] [client 72.146.5.227:51870] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "ae00EfhcNJEGrATcuEe7DgAAAVg"]
[Sun Apr 26 05:37:22.860591 2026] [:error] [pid 8385:tid 8438] [client 72.146.5.227:51405] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae00EjOy7_J84Wx3-oxZBwAAAE4"]
[Sun Apr 26 05:37:23.856798 2026] [:error] [pid 10315:tid 10334] [client 72.146.5.227:51423] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae00E6JIw2vjkleLIaCKqAAAARE"]
[Sun Apr 26 05:37:25.750685 2026] [:error] [pid 31273:tid 31361] [client 72.146.5.227:51840] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae00FfhcNJEGrATcuEe7FQAAAVY"]
[Sun Apr 26 05:37:28.041375 2026] [:error] [pid 31273:tid 31339] [client 72.146.5.227:33681] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae00GPhcNJEGrATcuEe7GwAAAUM"]
[Sun Apr 26 05:37:29.777525 2026] [:error] [pid 10315:tid 10336] [client 72.146.5.227:31497] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "ae00GaJIw2vjkleLIaCKtwAAARM"]
[Sun Apr 26 05:37:30.807685 2026] [:error] [pid 31273:tid 31355] [client 72.146.5.227:33704] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "ae00GvhcNJEGrATcuEe7IwAAAVA"]
[Sun Apr 26 05:37:32.247594 2026] [:error] [pid 10315:tid 10338] [client 72.146.5.227:38799] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "ae00HKJIw2vjkleLIaCKxQAAARU"]
[Sun Apr 26 05:37:37.516773 2026] [:error] [pid 8385:tid 8439] [client 72.146.5.227:31529] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "ae00ITOy7_J84Wx3-oxZGgAAAE8"]
[Sun Apr 26 05:37:49.182082 2026] [:error] [pid 8385:tid 8445] [client 72.146.5.227:51847] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "ae00LTOy7_J84Wx3-oxZPAAAAFU"]
[Sun Apr 26 05:37:49.983376 2026] [:error] [pid 8385:tid 8444] [client 72.146.5.227:27603] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "ae00LTOy7_J84Wx3-oxZPgAAAFQ"]
[Sun Apr 26 05:37:50.668734 2026] [:error] [pid 31273:tid 31360] [client 72.146.5.227:51873] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "ae00LvhcNJEGrATcuEe7VQAAAVU"]
[Sun Apr 26 05:37:53.590198 2026] [:error] [pid 10315:tid 10334] [client 72.146.5.227:51418] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fone1.php"] [unique_id "ae00MaJIw2vjkleLIaCK6AAAARE"]
[Sun Apr 26 05:37:54.345978 2026] [:error] [pid 10315:tid 10331] [client 72.146.5.227:39602] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zogy1.php"] [unique_id "ae00MqJIw2vjkleLIaCK7gAAAQ4"]
[Sun Apr 26 05:37:55.797189 2026] [:error] [pid 8390:tid 8457] [client 72.146.5.227:27588] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zogy1.php"] [unique_id "ae00M4GPtFK_i9p5yxQLCAAAAIY"]
[Sun Apr 26 05:37:59.263936 2026] [:error] [pid 41906:tid 41929] [client 72.146.5.227:30207] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zogy1.php"] [unique_id "ae00Nz3-0A3lxw9OXoAATQAAAZU"]
[Sun Apr 26 05:38:01.241679 2026] [:error] [pid 41906:tid 41932] [client 72.146.5.227:38804] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zogy1.php"] [unique_id "ae00OT3-0A3lxw9OXoAAVgAAAZg"]
[Sun Apr 26 05:38:03.701447 2026] [:error] [pid 41906:tid 41922] [client 72.146.5.227:38821] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "ae00Oz3-0A3lxw9OXoAAWgAAAY4"]
[Sun Apr 26 05:38:19.719820 2026] [:error] [pid 41906:tid 41925] [client 72.146.5.227:31518] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "ae00Sz3-0A3lxw9OXoAAjAAAAZE"]
[Sun Apr 26 05:38:21.933315 2026] [:error] [pid 8390:tid 8464] [client 72.146.5.227:30201] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "ae00TYGPtFK_i9p5yxQLEgAAAI0"]
[Sun Apr 26 05:38:23.363170 2026] [:error] [pid 8383:tid 8416] [client 72.146.5.227:38814] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "ae00T9Fa2S3EsATMdWO5dQAAABM"]
[Sun Apr 26 05:38:26.238051 2026] [:error] [pid 8491:tid 8518] [client 72.146.5.227:33698] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "ae00Uiq7I7e6CJooQM2HBwAAANM"]
[Sun Apr 26 05:38:27.807448 2026] [:error] [pid 41906:tid 41918] [client 72.146.5.227:31493] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/de.php"] [unique_id "ae00Uz3-0A3lxw9OXoAAlgAAAYo"]
[Sun Apr 26 05:38:28.948574 2026] [:error] [pid 31273:tid 31339] [client 72.146.5.227:22101] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/de.php"] [unique_id "ae00VPhcNJEGrATcuEe7dgAAAUM"]
[Sun Apr 26 05:38:29.667367 2026] [:error] [pid 31273:tid 31350] [client 72.146.5.227:30169] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/de.php"] [unique_id "ae00VfhcNJEGrATcuEe7egAAAUs"]
[Sun Apr 26 05:38:30.690352 2026] [:error] [pid 10315:tid 10333] [client 72.146.5.227:30162] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/de.php"] [unique_id "ae00VqJIw2vjkleLIaCLYQAAARA"]
[Sun Apr 26 05:38:31.252678 2026] [:error] [pid 10315:tid 10322] [client 72.146.5.227:31548] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/insta.php"] [unique_id "ae00V6JIw2vjkleLIaCLZAAAAQU"]
[Sun Apr 26 05:38:32.009139 2026] [:error] [pid 31273:tid 31349] [client 72.146.5.227:22088] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/insta.php"] [unique_id "ae00WPhcNJEGrATcuEe7fQAAAUo"]
[Sun Apr 26 05:38:32.734544 2026] [:error] [pid 8491:tid 8513] [client 72.146.5.227:51395] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/insta.php"] [unique_id "ae00WCq7I7e6CJooQM2HCwAAAM4"]
[Sun Apr 26 05:38:33.391048 2026] [:error] [pid 8385:tid 8434] [client 72.146.5.227:38795] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/insta.php"] [unique_id "ae00WTOy7_J84Wx3-oxZVAAAAEo"]
[Sun Apr 26 05:38:34.475596 2026] [:error] [pid 8491:tid 8503] [client 72.146.5.227:33684] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "ae00Wiq7I7e6CJooQM2HDwAAAMQ"]
[Sun Apr 26 05:38:36.078628 2026] [:error] [pid 10315:tid 10322] [client 72.146.5.227:51449] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "ae00XKJIw2vjkleLIaCLdAAAAQU"]
[Sun Apr 26 05:38:36.703530 2026] [:error] [pid 8390:tid 8454] [client 72.146.5.227:30191] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "ae00XIGPtFK_i9p5yxQLFwAAAIM"]
[Sun Apr 26 05:38:37.530988 2026] [:error] [pid 8491:tid 8499] [client 72.146.5.227:31535] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpxl.php"] [unique_id "ae00XSq7I7e6CJooQM2HEwAAAMA"]
[Sun Apr 26 05:38:38.114810 2026] [:error] [pid 8491:tid 8501] [client 72.146.5.227:27613] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "ae00Xiq7I7e6CJooQM2HFwAAAMI"]
[Sun Apr 26 05:38:38.990807 2026] [:error] [pid 41906:tid 41932] [client 72.146.5.227:30189] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "ae00Xj3-0A3lxw9OXoAAowAAAZg"]
[Sun Apr 26 05:38:39.787664 2026] [:error] [pid 8383:tid 8418] [client 72.146.5.227:17653] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "ae00X9Fa2S3EsATMdWO5iQAAABU"]
[Sun Apr 26 05:38:40.408042 2026] [:error] [pid 8390:tid 8474] [client 72.146.5.227:38834] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admlo.php"] [unique_id "ae00YIGPtFK_i9p5yxQLGgAAAJc"]
[Sun Apr 26 05:38:41.053154 2026] [:error] [pid 8491:tid 8516] [client 72.146.5.227:33717] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "ae00YSq7I7e6CJooQM2HGQAAANE"]
[Sun Apr 26 05:38:41.879831 2026] [:error] [pid 8390:tid 8451] [client 72.146.5.227:51432] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "ae00YYGPtFK_i9p5yxQLHQAAAIA"]
[Sun Apr 26 05:38:42.714787 2026] [:error] [pid 8491:tid 8510] [client 72.146.5.227:31517] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "ae00Yiq7I7e6CJooQM2HHAAAAMs"]
[Sun Apr 26 05:38:43.916183 2026] [:error] [pid 41906:tid 41912] [client 72.146.5.227:30171] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f5.php"] [unique_id "ae00Yz3-0A3lxw9OXoAAuQAAAYQ"]
[Sun Apr 26 05:38:45.726846 2026] [:error] [pid 41906:tid 41930] [client 72.146.5.227:30144] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ptanf.php"] [unique_id "ae00ZT3-0A3lxw9OXoAAxAAAAZY"]
[Sun Apr 26 05:38:46.668858 2026] [:error] [pid 41906:tid 41919] [client 72.146.5.227:31538] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ptanf.php"] [unique_id "ae00Zj3-0A3lxw9OXoAAygAAAYs"]
[Sun Apr 26 05:38:56.105787 2026] [:error] [pid 10315:tid 10333] [client 72.146.5.227:51888] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "ae00cKJIw2vjkleLIaCLpAAAARA"]
[Sun Apr 26 05:38:57.913786 2026] [:error] [pid 41906:tid 41931] [client 72.146.5.227:38797] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "ae00cT3-0A3lxw9OXoAA4gAAAZc"]
[Sun Apr 26 05:38:58.906246 2026] [:error] [pid 8385:tid 8446] [client 72.146.5.227:51901] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "ae00cjOy7_J84Wx3-oxZXAAAAFY"]
[Sun Apr 26 05:39:01.313837 2026] [:error] [pid 8491:tid 8516] [client 72.146.5.227:31540] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws80.php"] [unique_id "ae00dSq7I7e6CJooQM2HIwAAANE"]
[Sun Apr 26 05:39:03.200653 2026] [:error] [pid 10315:tid 10321] [client 72.146.5.227:39598] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zo.php"] [unique_id "ae00d6JIw2vjkleLIaCLrQAAAQQ"]
[Sun Apr 26 05:39:04.372600 2026] [:error] [pid 41906:tid 41927] [client 72.146.5.227:27522] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zo.php"] [unique_id "ae00eD3-0A3lxw9OXoAA7AAAAZM"]
[Sun Apr 26 05:39:05.172846 2026] [:error] [pid 10315:tid 10319] [client 72.146.5.227:33688] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zo.php"] [unique_id "ae00eaJIw2vjkleLIaCLtQAAAQI"]
[Sun Apr 26 05:39:05.706169 2026] [:error] [pid 8491:tid 8501] [client 72.146.5.227:27599] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zo.php"] [unique_id "ae00eSq7I7e6CJooQM2HMwAAAMI"]
[Sun Apr 26 05:39:06.874401 2026] [:error] [pid 41906:tid 41916] [client 72.146.5.227:51877] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "ae00ej3-0A3lxw9OXoAA9QAAAYg"]
[Sun Apr 26 05:39:07.607311 2026] [:error] [pid 41906:tid 41929] [client 72.146.5.227:51436] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "ae00ez3-0A3lxw9OXoAA-gAAAZU"]
[Sun Apr 26 05:39:09.097449 2026] [:error] [pid 41906:tid 41930] [client 72.146.5.227:39574] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "ae00fT3-0A3lxw9OXoABBAAAAZY"]
[Sun Apr 26 05:39:09.819086 2026] [:error] [pid 10315:tid 10333] [client 72.146.5.227:31504] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xy.php"] [unique_id "ae00faJIw2vjkleLIaCLvQAAARA"]
[Sun Apr 26 05:39:10.464561 2026] [:error] [pid 10315:tid 10326] [client 72.146.5.227:39612] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/masks.php"] [unique_id "ae00fqJIw2vjkleLIaCLxAAAAQk"]
[Sun Apr 26 05:39:11.193946 2026] [:error] [pid 31273:tid 31337] [client 72.146.5.227:38828] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/masks.php"] [unique_id "ae00f_hcNJEGrATcuEe7pQAAAUI"]
[Sun Apr 26 05:39:12.138876 2026] [:error] [pid 8491:tid 8515] [client 72.146.5.227:33677] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/masks.php"] [unique_id "ae00gCq7I7e6CJooQM2HPgAAANA"]
[Sun Apr 26 05:39:13.351804 2026] [:error] [pid 10315:tid 10333] [client 72.146.5.227:33678] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/masks.php"] [unique_id "ae00gaJIw2vjkleLIaCL1QAAARA"]
[Sun Apr 26 05:39:14.350167 2026] [:error] [pid 10315:tid 10330] [client 72.146.5.227:27526] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "ae00gqJIw2vjkleLIaCL1gAAAQ0"]
[Sun Apr 26 05:39:15.209449 2026] [:error] [pid 8390:tid 8466] [client 72.146.5.227:38829] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "ae00g4GPtFK_i9p5yxQLMgAAAI8"]
[Sun Apr 26 05:39:16.086964 2026] [:error] [pid 41906:tid 41928] [client 72.146.5.227:51430] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "ae00hD3-0A3lxw9OXoABGAAAAZQ"]
[Sun Apr 26 05:39:16.758332 2026] [:error] [pid 41906:tid 41924] [client 72.146.5.227:51424] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/man.php"] [unique_id "ae00hD3-0A3lxw9OXoABHAAAAZA"]
[Sun Apr 26 05:39:17.524786 2026] [:error] [pid 41906:tid 41909] [client 72.146.5.227:31507] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "ae00hT3-0A3lxw9OXoABIAAAAYE"]
[Sun Apr 26 05:39:18.892017 2026] [:error] [pid 41906:tid 41932] [client 72.146.5.227:31510] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "ae00hj3-0A3lxw9OXoABKAAAAZg"]
[Sun Apr 26 05:39:19.866705 2026] [:error] [pid 41906:tid 41930] [client 72.146.5.227:38784] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "ae00hz3-0A3lxw9OXoABLgAAAZY"]
[Sun Apr 26 05:39:20.831987 2026] [:error] [pid 31273:tid 31363] [client 72.146.5.227:51415] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xfun.php"] [unique_id "ae00iPhcNJEGrATcuEe7qQAAAVg"]
[Sun Apr 26 05:39:22.723129 2026] [:error] [pid 31273:tid 31356] [client 72.146.5.227:39591] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ae00ivhcNJEGrATcuEe7qgAAAVE"]
[Sun Apr 26 05:39:23.840349 2026] [:error] [pid 10315:tid 10324] [client 72.146.5.227:31519] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ae00i6JIw2vjkleLIaCL4wAAAQc"]
[Sun Apr 26 05:39:25.111695 2026] [:error] [pid 41906:tid 41924] [client 72.146.5.227:51861] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ae00jT3-0A3lxw9OXoABRwAAAZA"]
[Sun Apr 26 05:39:26.330619 2026] [:error] [pid 41906:tid 41919] [client 72.146.5.227:51427] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ae00jj3-0A3lxw9OXoABSgAAAYs"]
[Sun Apr 26 05:39:26.931777 2026] [:error] [pid 41906:tid 41926] [client 72.146.5.227:51854] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "ae00jj3-0A3lxw9OXoABUAAAAZI"]
[Sun Apr 26 05:39:27.625842 2026] [:error] [pid 31273:tid 31351] [client 72.146.5.227:51410] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "ae00j_hcNJEGrATcuEe7rwAAAUw"]
[Sun Apr 26 05:39:28.555411 2026] [:error] [pid 8383:tid 8418] [client 72.146.5.227:31516] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "ae00kNFa2S3EsATMdWO5lgAAABU"]
[Sun Apr 26 05:39:29.219950 2026] [:error] [pid 41906:tid 41908] [client 72.146.5.227:51876] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vv.php"] [unique_id "ae00kT3-0A3lxw9OXoABWQAAAYA"]
[Sun Apr 26 05:39:29.844542 2026] [:error] [pid 41906:tid 41931] [client 72.146.5.227:38843] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpconf.php"] [unique_id "ae00kT3-0A3lxw9OXoABXgAAAZc"]
[Sun Apr 26 05:39:30.370048 2026] [:error] [pid 8383:tid 8397] [client 72.146.5.227:27530] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpconf.php"] [unique_id "ae00ktFa2S3EsATMdWO5mAAAAAA"]
[Sun Apr 26 05:39:30.961761 2026] [:error] [pid 31273:tid 31346] [client 72.146.5.227:27606] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpconf.php"] [unique_id "ae00kvhcNJEGrATcuEe7twAAAUg"]
[Sun Apr 26 05:39:31.525956 2026] [:error] [pid 8383:tid 8400] [client 72.146.5.227:51863] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wpconf.php"] [unique_id "ae00k9Fa2S3EsATMdWO5nQAAAAM"]
[Sun Apr 26 05:39:32.105953 2026] [:error] [pid 10315:tid 10340] [client 72.146.5.227:33689] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ae00lKJIw2vjkleLIaCL9QAAARc"]
[Sun Apr 26 05:39:32.964050 2026] [:error] [pid 10315:tid 10329] [client 72.146.5.227:39583] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ae00lKJIw2vjkleLIaCL-QAAAQw"]
[Sun Apr 26 05:39:33.682284 2026] [:error] [pid 8390:tid 8455] [client 72.146.5.227:39573] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ae00lYGPtFK_i9p5yxQLOgAAAIQ"]
[Sun Apr 26 05:39:34.335035 2026] [:error] [pid 8390:tid 8458] [client 72.146.5.227:39563] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ae00loGPtFK_i9p5yxQLPQAAAIc"]
[Sun Apr 26 05:39:35.153034 2026] [:error] [pid 10315:tid 10332] [client 72.146.5.227:51417] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-zx.php"] [unique_id "ae00l6JIw2vjkleLIaCMBwAAAQ8"]
[Sun Apr 26 05:39:35.918983 2026] [:error] [pid 41906:tid 41925] [client 72.146.5.227:33672] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-zx.php"] [unique_id "ae00lz3-0A3lxw9OXoABawAAAZE"]
[Sun Apr 26 05:39:36.492984 2026] [:error] [pid 8491:tid 8501] [client 72.146.5.227:39559] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-zx.php"] [unique_id "ae00mCq7I7e6CJooQM2HTgAAAMI"]
[Sun Apr 26 05:39:37.349355 2026] [:error] [pid 8383:tid 8415] [client 72.146.5.227:18294] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-zx.php"] [unique_id "ae00mdFa2S3EsATMdWO5ogAAABI"]
[Sun Apr 26 05:39:37.898882 2026] [:error] [pid 41906:tid 41914] [client 72.146.5.227:39557] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "ae00mT3-0A3lxw9OXoABeQAAAYY"]
[Sun Apr 26 05:39:38.547081 2026] [:error] [pid 31273:tid 31349] [client 72.146.5.227:51440] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "ae00mvhcNJEGrATcuEe7wwAAAUo"]
[Sun Apr 26 05:39:39.647142 2026] [:error] [pid 41906:tid 41910] [client 72.146.5.227:39553] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "ae00mz3-0A3lxw9OXoABhQAAAYI"]
[Sun Apr 26 05:39:40.278926 2026] [:error] [pid 31273:tid 31335] [client 72.146.5.227:38809] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/000.php"] [unique_id "ae00nPhcNJEGrATcuEe7xgAAAUA"]
[Sun Apr 26 05:39:40.990799 2026] [:error] [pid 41906:tid 41931] [client 72.146.5.227:33685] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mar.php"] [unique_id "ae00nD3-0A3lxw9OXoABkQAAAZc"]
[Sun Apr 26 05:39:42.068867 2026] [:error] [pid 31273:tid 31353] [client 72.146.5.227:39590] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mar.php"] [unique_id "ae00nvhcNJEGrATcuEe7ywAAAU4"]
[Sun Apr 26 05:39:43.225250 2026] [:error] [pid 41906:tid 41921] [client 72.146.5.227:38818] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mar.php"] [unique_id "ae00nz3-0A3lxw9OXoABnAAAAY0"]
[Sun Apr 26 05:39:43.928508 2026] [:error] [pid 31273:tid 31341] [client 72.146.5.227:33723] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mar.php"] [unique_id "ae00n_hcNJEGrATcuEe72QAAAUQ"]
[Sun Apr 26 05:39:45.213577 2026] [:error] [pid 10315:tid 10339] [client 72.146.5.227:27608] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iov.php"] [unique_id "ae00oaJIw2vjkleLIaCMGQAAARY"]
[Sun Apr 26 05:39:46.042774 2026] [:error] [pid 41906:tid 41932] [client 72.146.5.227:51454] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iov.php"] [unique_id "ae00oj3-0A3lxw9OXoABrwAAAZg"]
[Sun Apr 26 05:39:46.644245 2026] [:error] [pid 8383:tid 8403] [client 72.146.5.227:51441] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iov.php"] [unique_id "ae00otFa2S3EsATMdWO5swAAAAY"]
[Sun Apr 26 05:39:47.329979 2026] [:error] [pid 8390:tid 8464] [client 72.146.5.227:30193] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/iov.php"] [unique_id "ae00o4GPtFK_i9p5yxQLRQAAAI0"]
[Sun Apr 26 05:39:48.001843 2026] [:error] [pid 8383:tid 8402] [client 72.146.5.227:38805] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jodohghi.php"] [unique_id "ae00pNFa2S3EsATMdWO5uAAAAAU"]
[Sun Apr 26 05:39:49.051519 2026] [:error] [pid 31273:tid 31351] [client 72.146.5.227:51438] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jodohghi.php"] [unique_id "ae00pfhcNJEGrATcuEe74wAAAUw"]
[Sun Apr 26 05:39:50.175864 2026] [:error] [pid 10315:tid 10319] [client 72.146.5.227:31494] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jodohghi.php"] [unique_id "ae00pqJIw2vjkleLIaCMLgAAAQI"]
[Sun Apr 26 05:39:50.962926 2026] [:error] [pid 41906:tid 41922] [client 72.146.5.227:38812] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jodohghi.php"] [unique_id "ae00pj3-0A3lxw9OXoABxQAAAY4"]
[Sun Apr 26 05:39:51.846270 2026] [:error] [pid 10315:tid 10338] [client 72.146.5.227:39552] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rendi59.php"] [unique_id "ae00p6JIw2vjkleLIaCMNAAAARU"]
[Sun Apr 26 05:39:52.966847 2026] [:error] [pid 10315:tid 10328] [client 72.146.5.227:39585] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rendi59.php"] [unique_id "ae00qKJIw2vjkleLIaCMQwAAAQs"]
[Sun Apr 26 05:39:53.824713 2026] [:error] [pid 8491:tid 8515] [client 72.146.5.227:31500] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rendi59.php"] [unique_id "ae00qSq7I7e6CJooQM2HXwAAANA"]
[Sun Apr 26 05:39:54.654212 2026] [:error] [pid 31273:tid 31349] [client 72.146.5.227:51446] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rendi59.php"] [unique_id "ae00qvhcNJEGrATcuEe7-gAAAUo"]
[Sun Apr 26 05:40:02.229151 2026] [:error] [pid 8383:tid 8406] [client 72.146.5.227:27604] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "ae00stFa2S3EsATMdWO51gAAAAk"]
[Sun Apr 26 05:40:02.836372 2026] [:error] [pid 8383:tid 8418] [client 72.146.5.227:51429] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "ae00stFa2S3EsATMdWO52AAAABU"]
[Sun Apr 26 05:40:03.462900 2026] [:error] [pid 41906:tid 41909] [client 72.146.5.227:27542] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "ae00sz3-0A3lxw9OXoACAgAAAYE"]
[Sun Apr 26 05:40:04.108285 2026] [:error] [pid 8390:tid 8465] [client 72.146.5.227:22086] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "ae00tIGPtFK_i9p5yxQLWwAAAI4"]
[Sun Apr 26 05:40:04.666249 2026] [:error] [pid 41906:tid 41929] [client 72.146.5.227:33693] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "ae00tD3-0A3lxw9OXoACBgAAAZU"]
[Sun Apr 26 05:40:05.380139 2026] [:error] [pid 8383:tid 8421] [client 72.146.5.227:51407] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "ae00tdFa2S3EsATMdWO54gAAABg"]
[Sun Apr 26 05:40:06.005324 2026] [:error] [pid 10315:tid 10334] [client 72.146.5.227:27629] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "ae00tqJIw2vjkleLIaCMbAAAARE"]
[Sun Apr 26 05:40:06.690693 2026] [:error] [pid 31273:tid 31336] [client 72.146.5.227:27591] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "ae00tvhcNJEGrATcuEe8FAAAAUE"]
[Sun Apr 26 05:40:07.324770 2026] [:error] [pid 10315:tid 10340] [client 72.146.5.227:51451] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "ae00t6JIw2vjkleLIaCMcgAAARc"]
[Sun Apr 26 05:40:08.689130 2026] [:error] [pid 41906:tid 41919] [client 72.146.5.227:51399] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "ae00uD3-0A3lxw9OXoACGwAAAYs"]
[Sun Apr 26 05:40:10.489132 2026] [:error] [pid 8385:tid 8445] [client 72.146.5.227:51420] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "ae00ujOy7_J84Wx3-oxZkAAAAFU"]
[Sun Apr 26 05:40:12.055810 2026] [:error] [pid 31273:tid 31356] [client 72.146.5.227:27609] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lov.php"] [unique_id "ae00vPhcNJEGrATcuEe8IwAAAVE"]
[Sun Apr 26 05:40:15.167206 2026] [:error] [pid 31273:tid 31346] [client 72.146.5.227:39614] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knw.php"] [unique_id "ae00v_hcNJEGrATcuEe8NAAAAUg"]
[Sun Apr 26 05:40:16.605777 2026] [:error] [pid 41906:tid 41912] [client 72.146.5.227:30176] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knw.php"] [unique_id "ae00wD3-0A3lxw9OXoACKQAAAYQ"]
[Sun Apr 26 05:40:17.352702 2026] [:error] [pid 31273:tid 31339] [client 72.146.5.227:51848] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knw.php"] [unique_id "ae00wfhcNJEGrATcuEe8QwAAAUM"]
[Sun Apr 26 05:40:18.090974 2026] [:error] [pid 8383:tid 8408] [client 72.146.5.227:21463] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/knw.php"] [unique_id "ae00wtFa2S3EsATMdWO57QAAAAs"]
[Sun Apr 26 05:40:18.731415 2026] [:error] [pid 8491:tid 8509] [client 72.146.5.227:39592] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "ae00wiq7I7e6CJooQM2HmwAAAMo"]
[Sun Apr 26 05:40:19.353797 2026] [:error] [pid 10315:tid 10333] [client 72.146.5.227:51878] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "ae00w6JIw2vjkleLIaCMkgAAARA"]
[Sun Apr 26 05:40:20.176162 2026] [:error] [pid 8383:tid 8399] [client 72.146.5.227:31488] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "ae00xNFa2S3EsATMdWO58wAAAAI"]
[Sun Apr 26 05:40:21.044020 2026] [:error] [pid 10315:tid 10324] [client 72.146.5.227:39565] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fi.php"] [unique_id "ae00xaJIw2vjkleLIaCMlQAAAQc"]
[Sun Apr 26 05:40:22.073462 2026] [:error] [pid 8385:tid 8428] [client 72.146.5.227:38787] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "ae00xjOy7_J84Wx3-oxZqAAAAEQ"]
[Sun Apr 26 05:40:22.907310 2026] [:error] [pid 41906:tid 41920] [client 72.146.5.227:18276] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "ae00xj3-0A3lxw9OXoACTAAAAYw"]
[Sun Apr 26 05:40:24.256039 2026] [:error] [pid 8383:tid 8414] [client 72.146.5.227:27585] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "ae00yNFa2S3EsATMdWO5-gAAABE"]
[Sun Apr 26 05:40:25.229598 2026] [:error] [pid 8491:tid 8514] [client 72.146.5.227:31506] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jlex.php"] [unique_id "ae00ySq7I7e6CJooQM2HrwAAAM8"]
[Sun Apr 26 05:40:26.627370 2026] [:error] [pid 8491:tid 8519] [client 72.146.5.227:31541] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae00yiq7I7e6CJooQM2HtgAAANQ"]
[Sun Apr 26 05:40:27.532123 2026] [:error] [pid 41906:tid 41921] [client 72.146.5.227:33720] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae00yz3-0A3lxw9OXoACZAAAAY0"]
[Sun Apr 26 05:40:28.319603 2026] [:error] [pid 41906:tid 41925] [client 72.146.5.227:30174] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae00zD3-0A3lxw9OXoACbwAAAZE"]
[Sun Apr 26 05:40:29.420579 2026] [:error] [pid 41906:tid 41929] [client 72.146.5.227:17690] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae00zT3-0A3lxw9OXoACdAAAAZU"]
[Sun Apr 26 05:40:30.311850 2026] [:error] [pid 31273:tid 31336] [client 72.146.5.227:38786] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae00zvhcNJEGrATcuEe8ewAAAUE"]
[Sun Apr 26 05:40:31.530427 2026] [:error] [pid 10315:tid 10329] [client 72.146.5.227:31515] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae00z6JIw2vjkleLIaCMsAAAAQw"]
[Sun Apr 26 05:40:33.272680 2026] [:error] [pid 10315:tid 10319] [client 72.146.5.227:31514] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae000aJIw2vjkleLIaCMtgAAAQI"]
[Sun Apr 26 05:40:34.462966 2026] [:error] [pid 10315:tid 10332] [client 72.146.5.227:27592] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae000qJIw2vjkleLIaCMvgAAAQ8"]
[Sun Apr 26 05:40:35.210176 2026] [:error] [pid 8385:tid 8433] [client 72.146.5.227:39556] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son.php"] [unique_id "ae000zOy7_J84Wx3-oxZvAAAAEk"]
[Sun Apr 26 05:40:35.955027 2026] [:error] [pid 8383:tid 8416] [client 72.146.5.227:30150] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son.php"] [unique_id "ae0009Fa2S3EsATMdWO6AAAAABM"]
[Sun Apr 26 05:40:36.681080 2026] [:error] [pid 8385:tid 8445] [client 72.146.5.227:22115] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son.php"] [unique_id "ae001DOy7_J84Wx3-oxZvQAAAFU"]
[Sun Apr 26 05:40:37.414051 2026] [:error] [pid 8385:tid 8437] [client 72.146.5.227:22096] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/son.php"] [unique_id "ae001TOy7_J84Wx3-oxZvwAAAE0"]
[Sun Apr 26 05:40:38.309347 2026] [:error] [pid 8491:tid 8513] [client 72.146.5.227:27596] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/99.php"] [unique_id "ae001iq7I7e6CJooQM2HwQAAAM4"]
[Sun Apr 26 05:40:38.853953 2026] [:error] [pid 41906:tid 41912] [client 72.146.5.227:33673] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/99.php"] [unique_id "ae001j3-0A3lxw9OXoACeAAAAYQ"]
[Sun Apr 26 05:40:39.597562 2026] [:error] [pid 8383:tid 8404] [client 72.146.5.227:27605] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/99.php"] [unique_id "ae0019Fa2S3EsATMdWO6BQAAAAc"]
[Sun Apr 26 05:40:40.285116 2026] [:error] [pid 8390:tid 8475] [client 72.146.5.227:51866] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/99.php"] [unique_id "ae002IGPtFK_i9p5yxQLkAAAAJg"]
[Sun Apr 26 05:40:40.818658 2026] [:error] [pid 8385:tid 8439] [client 72.146.5.227:38844] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "ae002DOy7_J84Wx3-oxZwAAAAE8"]
[Sun Apr 26 05:40:41.538179 2026] [:error] [pid 31273:tid 31362] [client 72.146.5.227:39560] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "ae002fhcNJEGrATcuEe8tAAAAVc"]
[Sun Apr 26 05:40:42.842313 2026] [:error] [pid 10315:tid 10331] [client 72.146.5.227:51890] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "ae002qJIw2vjkleLIaCM1QAAAQ4"]
[Sun Apr 26 05:40:43.769617 2026] [:error] [pid 41906:tid 41920] [client 72.146.5.227:33667] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "ae002z3-0A3lxw9OXoACgAAAAYw"]
[Sun Apr 26 05:40:44.592697 2026] [:error] [pid 41906:tid 41918] [client 72.146.5.227:21499] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filefuns.php"] [unique_id "ae003D3-0A3lxw9OXoACjQAAAYo"]
[Sun Apr 26 05:40:45.516849 2026] [:error] [pid 10315:tid 10335] [client 72.146.5.227:33665] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filefuns.php"] [unique_id "ae003aJIw2vjkleLIaCM4QAAARI"]
[Sun Apr 26 05:40:46.266510 2026] [:error] [pid 10315:tid 10334] [client 72.146.5.227:31543] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filefuns.php"] [unique_id "ae003qJIw2vjkleLIaCM5QAAARE"]
[Sun Apr 26 05:40:46.823965 2026] [:error] [pid 8385:tid 8424] [client 72.146.5.227:31520] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/filefuns.php"] [unique_id "ae003jOy7_J84Wx3-oxZxwAAAEA"]
[Sun Apr 26 05:40:47.660847 2026] [:error] [pid 8390:tid 8465] [client 72.146.5.227:21485] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "ae0034GPtFK_i9p5yxQLvwAAAI4"]
[Sun Apr 26 05:40:48.305390 2026] [:error] [pid 31273:tid 31341] [client 72.146.5.227:51868] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "ae004PhcNJEGrATcuEe8ygAAAUQ"]
[Sun Apr 26 05:40:49.106270 2026] [:error] [pid 31273:tid 31346] [client 72.146.5.227:38802] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "ae004fhcNJEGrATcuEe8zwAAAUg"]
[Sun Apr 26 05:40:50.168756 2026] [:error] [pid 10315:tid 10328] [client 72.146.5.227:38802] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ay.php"] [unique_id "ae004qJIw2vjkleLIaCM7wAAAQs"]
[Sun Apr 26 05:40:50.778869 2026] [:error] [pid 10315:tid 10329] [client 72.146.5.227:33671] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "ae004qJIw2vjkleLIaCM9QAAAQw"]
[Sun Apr 26 05:40:51.805907 2026] [:error] [pid 10315:tid 10339] [client 72.146.5.227:39606] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "ae0046JIw2vjkleLIaCM_AAAARY"]
[Sun Apr 26 05:40:52.592794 2026] [:error] [pid 10315:tid 10324] [client 72.146.5.227:14739] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "ae005KJIw2vjkleLIaCNAgAAAQc"]
[Sun Apr 26 05:40:53.702416 2026] [:error] [pid 8383:tid 8404] [client 72.146.5.227:27612] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/options.php"] [unique_id "ae005dFa2S3EsATMdWO6GwAAAAc"]
[Sun Apr 26 05:40:55.657002 2026] [:error] [pid 31273:tid 31362] [client 72.146.5.227:33668] [client 72.146.5.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "ae005_hcNJEGrATcuEe85wAAAVc"]
[Sun Apr 26 05:40:56.618033 2026] [:error] [pid 8383:tid 8407] [client 72.146.5.227:33727] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "ae006NFa2S3EsATMdWO6IQAAAAo"]
[Sun Apr 26 05:40:57.308946 2026] [:error] [pid 41906:tid 41926] [client 72.146.5.227:51397] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "ae006T3-0A3lxw9OXoACnAAAAZI"]
[Sun Apr 26 05:40:57.866474 2026] [:error] [pid 8383:tid 8416] [client 72.146.5.227:39561] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "ae006dFa2S3EsATMdWO6JgAAABM"]
[Sun Apr 26 05:40:59.085415 2026] [:error] [pid 41906:tid 41918] [client 72.146.5.227:51899] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/d.php"] [unique_id "ae006z3-0A3lxw9OXoACqQAAAYo"]
[Sun Apr 26 05:41:00.751000 2026] [:error] [pid 8383:tid 8403] [client 72.146.5.227:30204] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1a.php"] [unique_id "ae007NFa2S3EsATMdWO6LAAAAAY"]
[Sun Apr 26 05:41:08.853501 2026] [:error] [pid 8491:tid 8500] [client 72.146.5.227:38822] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bojcdooq.php"] [unique_id "ae009Cq7I7e6CJooQM2INAAAAME"]
[Sun Apr 26 05:41:09.380759 2026] [:error] [pid 41906:tid 41919] [client 72.146.5.227:33695] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bojcdooq.php"] [unique_id "ae009T3-0A3lxw9OXoAC0AAAAYs"]
[Sun Apr 26 05:41:09.966232 2026] [:error] [pid 41906:tid 41927] [client 72.146.5.227:51434] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bojcdooq.php"] [unique_id "ae009T3-0A3lxw9OXoAC0wAAAZM"]
[Sun Apr 26 05:41:11.034486 2026] [:error] [pid 31273:tid 31346] [client 72.146.5.227:33666] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bojcdooq.php"] [unique_id "ae009_hcNJEGrATcuEe9BgAAAUg"]
[Sun Apr 26 05:41:12.066873 2026] [:error] [pid 10315:tid 10318] [client 72.146.5.227:33694] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zdd.php"] [unique_id "ae00-KJIw2vjkleLIaCNKAAAAQE"]
[Sun Apr 26 05:41:12.923080 2026] [:error] [pid 41906:tid 41917] [client 72.146.5.227:17631] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zdd.php"] [unique_id "ae00-D3-0A3lxw9OXoAC2AAAAYk"]
[Sun Apr 26 05:41:13.974411 2026] [:error] [pid 8383:tid 8419] [client 72.146.5.227:51875] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zdd.php"] [unique_id "ae00-dFa2S3EsATMdWO6OwAAABY"]
[Sun Apr 26 05:41:14.686708 2026] [:error] [pid 8383:tid 8406] [client 72.146.5.227:33722] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zdd.php"] [unique_id "ae00-tFa2S3EsATMdWO6PgAAAAk"]
[Sun Apr 26 05:41:15.368634 2026] [:error] [pid 8383:tid 8414] [client 72.146.5.227:27628] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "ae00-9Fa2S3EsATMdWO6RAAAABE"]
[Sun Apr 26 05:41:15.978499 2026] [:error] [pid 8491:tid 8523] [client 72.146.5.227:51403] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "ae00-yq7I7e6CJooQM2INgAAANc"]
[Sun Apr 26 05:41:17.315127 2026] [:error] [pid 8385:tid 8428] [client 72.146.5.227:30160] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "ae00_TOy7_J84Wx3-oxaAQAAAEQ"]
[Sun Apr 26 05:41:18.165877 2026] [:error] [pid 8385:tid 8448] [client 72.146.5.227:33709] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/133.php"] [unique_id "ae00_jOy7_J84Wx3-oxaDgAAAFg"]
[Sun Apr 26 05:41:19.020776 2026] [:error] [pid 41906:tid 41926] [client 72.146.5.227:30186] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "ae00_z3-0A3lxw9OXoAC8QAAAZI"]
[Sun Apr 26 05:41:19.507914 2026] [:error] [pid 41906:tid 41913] [client 72.146.5.227:18247] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "ae00_z3-0A3lxw9OXoAC9gAAAYU"]
[Sun Apr 26 05:41:19.989926 2026] [:error] [pid 8390:tid 8469] [client 72.146.5.227:27527] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "ae00_4GPtFK_i9p5yxQL5gAAAJI"]
[Sun Apr 26 05:41:20.492305 2026] [:error] [pid 8385:tid 8442] [client 72.146.5.227:30172] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jq.php"] [unique_id "ae01ADOy7_J84Wx3-oxaEwAAAFI"]
[Sun Apr 26 05:41:20.967365 2026] [:error] [pid 10315:tid 10327] [client 72.146.5.227:27587] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "ae01AKJIw2vjkleLIaCNOAAAAQo"]
[Sun Apr 26 05:41:21.471723 2026] [:error] [pid 31273:tid 31361] [client 72.146.5.227:27528] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "ae01AfhcNJEGrATcuEe9KwAAAVY"]
[Sun Apr 26 05:41:21.969215 2026] [:error] [pid 8390:tid 8474] [client 72.146.5.227:33696] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "ae01AYGPtFK_i9p5yxQL7QAAAJc"]
[Sun Apr 26 05:41:22.501108 2026] [:error] [pid 10315:tid 10319] [client 72.146.5.227:51885] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cro.php"] [unique_id "ae01AqJIw2vjkleLIaCNQwAAAQI"]
[Sun Apr 26 05:41:23.102160 2026] [:error] [pid 10315:tid 10326] [client 72.146.5.227:21458] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wwx.php"] [unique_id "ae01A6JIw2vjkleLIaCNTgAAAQk"]
[Sun Apr 26 05:41:24.112712 2026] [:error] [pid 10315:tid 10318] [client 72.146.5.227:18298] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wwx.php"] [unique_id "ae01BKJIw2vjkleLIaCNUwAAAQE"]
[Sun Apr 26 05:41:25.085191 2026] [:error] [pid 41906:tid 41911] [client 72.146.5.227:17684] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wwx.php"] [unique_id "ae01BT3-0A3lxw9OXoADAwAAAYM"]
[Sun Apr 26 05:41:25.867444 2026] [:error] [pid 41906:tid 41908] [client 72.146.5.227:38791] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wwx.php"] [unique_id "ae01BT3-0A3lxw9OXoADCwAAAYA"]
[Sun Apr 26 05:41:26.880538 2026] [:error] [pid 31273:tid 31356] [client 72.146.5.227:22121] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "ae01BvhcNJEGrATcuEe9NgAAAVE"]
[Sun Apr 26 05:41:27.790080 2026] [:error] [pid 8491:tid 8509] [client 72.146.5.227:22141] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "ae01Byq7I7e6CJooQM2IRgAAAMo"]
[Sun Apr 26 05:41:28.366479 2026] [:error] [pid 10315:tid 10341] [client 72.146.5.227:38829] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "ae01CKJIw2vjkleLIaCNXQAAARg"]
[Sun Apr 26 05:41:29.209337 2026] [:error] [pid 41906:tid 41908] [client 72.146.5.227:17678] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/trx24.php"] [unique_id "ae01CT3-0A3lxw9OXoADGgAAAYA"]
[Sun Apr 26 05:41:30.539351 2026] [:error] [pid 31273:tid 31345] [client 72.146.5.227:27597] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blox.php"] [unique_id "ae01CvhcNJEGrATcuEe9RgAAAUc"]
[Sun Apr 26 05:41:31.061136 2026] [:error] [pid 8390:tid 8473] [client 72.146.5.227:30165] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blox.php"] [unique_id "ae01C4GPtFK_i9p5yxQMBQAAAJY"]
[Sun Apr 26 05:41:31.830076 2026] [:error] [pid 41906:tid 41910] [client 72.146.5.227:17679] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blox.php"] [unique_id "ae01Cz3-0A3lxw9OXoADLQAAAYI"]
[Sun Apr 26 05:41:32.503500 2026] [:error] [pid 41906:tid 41923] [client 72.146.5.227:27534] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blox.php"] [unique_id "ae01DD3-0A3lxw9OXoADMwAAAY8"]
[Sun Apr 26 05:41:33.116497 2026] [:error] [pid 41906:tid 41920] [client 72.146.5.227:27593] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berax.php"] [unique_id "ae01DT3-0A3lxw9OXoADNwAAAYw"]
[Sun Apr 26 05:41:34.367591 2026] [:error] [pid 8491:tid 8517] [client 72.146.5.227:33708] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berax.php"] [unique_id "ae01Diq7I7e6CJooQM2IWQAAANI"]
[Sun Apr 26 05:41:35.883641 2026] [:error] [pid 41906:tid 41912] [client 72.146.5.227:51402] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berax.php"] [unique_id "ae01Dz3-0A3lxw9OXoADQgAAAYQ"]
[Sun Apr 26 05:41:37.303203 2026] [:error] [pid 8390:tid 8457] [client 72.146.5.227:31527] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/berax.php"] [unique_id "ae01EYGPtFK_i9p5yxQMDAAAAIY"]
[Sun Apr 26 05:41:38.084742 2026] [:error] [pid 41906:tid 41913] [client 72.146.5.227:31536] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkxzo.php"] [unique_id "ae01Ej3-0A3lxw9OXoADTAAAAYU"]
[Sun Apr 26 05:41:38.683551 2026] [:error] [pid 8491:tid 8503] [client 72.146.5.227:30146] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkxzo.php"] [unique_id "ae01Eiq7I7e6CJooQM2IYAAAAMQ"]
[Sun Apr 26 05:41:39.176702 2026] [:error] [pid 31273:tid 31363] [client 72.146.5.227:17671] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkxzo.php"] [unique_id "ae01E_hcNJEGrATcuEe9WAAAAVg"]
[Sun Apr 26 05:41:39.666092 2026] [:error] [pid 8383:tid 8407] [client 72.146.5.227:38820] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkxzo.php"] [unique_id "ae01E9Fa2S3EsATMdWO6VQAAAAo"]
[Sun Apr 26 05:41:40.453183 2026] [:error] [pid 8390:tid 8466] [client 72.146.5.227:31501] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdxadmin.php"] [unique_id "ae01FIGPtFK_i9p5yxQMGwAAAI8"]
[Sun Apr 26 05:41:41.034333 2026] [:error] [pid 41906:tid 41923] [client 72.146.5.227:51400] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdxadmin.php"] [unique_id "ae01FT3-0A3lxw9OXoADWwAAAY8"]
[Sun Apr 26 05:41:41.511507 2026] [:error] [pid 8385:tid 8443] [client 72.146.5.227:30199] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdxadmin.php"] [unique_id "ae01FTOy7_J84Wx3-oxaIAAAAFM"]
[Sun Apr 26 05:41:42.005269 2026] [:error] [pid 41906:tid 41914] [client 72.146.5.227:31498] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cdxadmin.php"] [unique_id "ae01Fj3-0A3lxw9OXoADYgAAAYY"]
[Sun Apr 26 05:41:42.512745 2026] [:error] [pid 41906:tid 41928] [client 72.146.5.227:27602] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "ae01Fj3-0A3lxw9OXoADaQAAAZQ"]
[Sun Apr 26 05:41:43.327273 2026] [:error] [pid 41906:tid 41921] [client 72.146.5.227:33716] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "ae01Fz3-0A3lxw9OXoADcQAAAY0"]
[Sun Apr 26 05:41:44.002559 2026] [:error] [pid 31273:tid 31363] [client 72.146.5.227:51872] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "ae01GPhcNJEGrATcuEe9bAAAAVg"]
[Sun Apr 26 05:41:44.533832 2026] [:error] [pid 10315:tid 10337] [client 72.146.5.227:51411] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dfre.php"] [unique_id "ae01GKJIw2vjkleLIaCNeAAAARQ"]
[Sun Apr 26 05:41:45.031065 2026] [:error] [pid 31273:tid 31341] [client 72.146.5.227:30195] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "ae01GfhcNJEGrATcuEe9cQAAAUQ"]
[Sun Apr 26 05:41:45.515629 2026] [:error] [pid 10315:tid 10323] [client 72.146.5.227:31529] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "ae01GaJIw2vjkleLIaCNgAAAAQY"]
[Sun Apr 26 05:41:46.094198 2026] [:error] [pid 41906:tid 41931] [client 72.146.5.227:30188] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "ae01Gj3-0A3lxw9OXoADgQAAAZc"]
[Sun Apr 26 05:41:46.600294 2026] [:error] [pid 8385:tid 8440] [client 72.146.5.227:51444] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sko.php"] [unique_id "ae01GjOy7_J84Wx3-oxaJwAAAFA"]
[Sun Apr 26 05:41:47.128293 2026] [:error] [pid 41906:tid 41910] [client 72.146.5.227:38798] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "ae01Gz3-0A3lxw9OXoADhwAAAYI"]
[Sun Apr 26 05:41:47.673025 2026] [:error] [pid 8491:tid 8504] [client 72.146.5.227:30151] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "ae01Gyq7I7e6CJooQM2IdQAAAMU"]
[Sun Apr 26 05:41:48.210555 2026] [:error] [pid 10315:tid 10334] [client 72.146.5.227:21441] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "ae01HKJIw2vjkleLIaCNjgAAARE"]
[Sun Apr 26 05:41:48.736303 2026] [:error] [pid 8383:tid 8403] [client 72.146.5.227:22139] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shorw.php"] [unique_id "ae01HNFa2S3EsATMdWO6YAAAAAY"]
[Sun Apr 26 05:41:49.363281 2026] [:error] [pid 41906:tid 41927] [client 72.146.5.227:27620] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shelp.php"] [unique_id "ae01HT3-0A3lxw9OXoADmwAAAZM"]
[Sun Apr 26 05:41:50.271177 2026] [:error] [pid 41906:tid 41913] [client 72.146.5.227:30149] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shelp.php"] [unique_id "ae01Hj3-0A3lxw9OXoADowAAAYU"]
[Sun Apr 26 05:41:51.726412 2026] [:error] [pid 41906:tid 41932] [client 72.146.5.227:51870] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shelp.php"] [unique_id "ae01Hz3-0A3lxw9OXoADsAAAAZg"]
[Sun Apr 26 05:41:52.703883 2026] [:error] [pid 41906:tid 41909] [client 72.146.5.227:51871] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shelp.php"] [unique_id "ae01ID3-0A3lxw9OXoADswAAAYE"]
[Sun Apr 26 05:41:53.453443 2026] [:error] [pid 31273:tid 31352] [client 72.146.5.227:22082] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seyv.php"] [unique_id "ae01IfhcNJEGrATcuEe9mAAAAU0"]
[Sun Apr 26 05:41:54.777378 2026] [:error] [pid 10315:tid 10317] [client 72.146.5.227:18256] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seyv.php"] [unique_id "ae01IqJIw2vjkleLIaCNrwAAAQA"]
[Sun Apr 26 05:41:56.173729 2026] [:error] [pid 8390:tid 8473] [client 72.146.5.227:31534] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seyv.php"] [unique_id "ae01JIGPtFK_i9p5yxQMKQAAAJY"]
[Sun Apr 26 05:41:56.898146 2026] [:error] [pid 41906:tid 41912] [client 72.146.5.227:17652] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seyv.php"] [unique_id "ae01JD3-0A3lxw9OXoAD1AAAAYQ"]
[Sun Apr 26 05:41:57.409807 2026] [:error] [pid 10315:tid 10328] [client 72.146.5.227:30159] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad821.php"] [unique_id "ae01JaJIw2vjkleLIaCNvgAAAQs"]
[Sun Apr 26 05:41:58.320994 2026] [:error] [pid 41906:tid 41929] [client 72.146.5.227:31547] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad821.php"] [unique_id "ae01Jj3-0A3lxw9OXoAD4wAAAZU"]
[Sun Apr 26 05:41:59.000217 2026] [:error] [pid 8491:tid 8524] [client 72.146.5.227:51881] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad821.php"] [unique_id "ae01Jiq7I7e6CJooQM2ImwAAANg"]
[Sun Apr 26 05:41:59.566110 2026] [:error] [pid 8385:tid 8448] [client 72.146.5.227:21494] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad821.php"] [unique_id "ae01JzOy7_J84Wx3-oxaOgAAAFg"]
[Sun Apr 26 05:42:00.186487 2026] [:error] [pid 8491:tid 8516] [client 72.146.5.227:51453] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8210.php"] [unique_id "ae01KCq7I7e6CJooQM2InAAAANE"]
[Sun Apr 26 05:42:00.690512 2026] [:error] [pid 8383:tid 8401] [client 72.146.5.227:33674] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8210.php"] [unique_id "ae01KNFa2S3EsATMdWO6hAAAAAQ"]
[Sun Apr 26 05:42:01.251756 2026] [:error] [pid 41906:tid 41916] [client 72.146.5.227:27598] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8210.php"] [unique_id "ae01KT3-0A3lxw9OXoAD7QAAAYg"]
[Sun Apr 26 05:42:01.785458 2026] [:error] [pid 8383:tid 8406] [client 72.146.5.227:39597] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8210.php"] [unique_id "ae01KdFa2S3EsATMdWO6hgAAAAk"]
[Sun Apr 26 05:42:02.615163 2026] [:error] [pid 41906:tid 41909] [client 72.146.5.227:18284] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8rd1.php"] [unique_id "ae01Kj3-0A3lxw9OXoAD9QAAAYE"]
[Sun Apr 26 05:42:03.179828 2026] [:error] [pid 8390:tid 8455] [client 72.146.5.227:33676] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8rd1.php"] [unique_id "ae01K4GPtFK_i9p5yxQMOwAAAIQ"]
[Sun Apr 26 05:42:03.887669 2026] [:error] [pid 8390:tid 8458] [client 72.146.5.227:38807] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8rd1.php"] [unique_id "ae01K4GPtFK_i9p5yxQMQQAAAIc"]
[Sun Apr 26 05:42:04.605784 2026] [:error] [pid 10315:tid 10332] [client 72.146.5.227:38790] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sad8rd1.php"] [unique_id "ae01LKJIw2vjkleLIaCN3AAAAQ8"]
[Sun Apr 26 05:42:05.133933 2026] [:error] [pid 8390:tid 8475] [client 72.146.5.227:31505] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saxzgf5.php"] [unique_id "ae01LYGPtFK_i9p5yxQMTAAAAJg"]
[Sun Apr 26 05:42:05.786429 2026] [:error] [pid 8385:tid 8432] [client 72.146.5.227:22095] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saxzgf5.php"] [unique_id "ae01LTOy7_J84Wx3-oxaTwAAAEg"]
[Sun Apr 26 05:42:06.344433 2026] [:error] [pid 41906:tid 41929] [client 72.146.5.227:30162] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saxzgf5.php"] [unique_id "ae01Lj3-0A3lxw9OXoAD_wAAAZU"]
[Sun Apr 26 05:42:07.105956 2026] [:error] [pid 8385:tid 8445] [client 72.146.5.227:27576] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saxzgf5.php"] [unique_id "ae01LzOy7_J84Wx3-oxaWQAAAFU"]
[Sun Apr 26 05:42:22.863544 2026] [:error] [pid 31273:tid 31346] [client 72.146.5.227:30200] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "ae01PvhcNJEGrATcuEe-HwAAAUg"]
[Sun Apr 26 05:42:23.535105 2026] [:error] [pid 10315:tid 10326] [client 72.146.5.227:39578] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "ae01P6JIw2vjkleLIaCOMgAAAQk"]
[Sun Apr 26 05:42:24.147548 2026] [:error] [pid 10315:tid 10330] [client 72.146.5.227:30178] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "ae01QKJIw2vjkleLIaCOPgAAAQ0"]
[Sun Apr 26 05:42:24.678281 2026] [:error] [pid 41906:tid 41914] [client 72.146.5.227:21455] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "ae01QD3-0A3lxw9OXoAEYQAAAYY"]
[Sun Apr 26 05:42:25.145562 2026] [:error] [pid 10315:tid 10339] [client 72.146.5.227:21472] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "ae01QaJIw2vjkleLIaCORgAAARY"]
[Sun Apr 26 05:42:25.699330 2026] [:error] [pid 31273:tid 31358] [client 72.146.5.227:30145] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "ae01QfhcNJEGrATcuEe-JQAAAVM"]
[Sun Apr 26 05:42:26.243328 2026] [:error] [pid 8491:tid 8502] [client 72.146.5.227:22122] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "ae01Qiq7I7e6CJooQM2I3gAAAMM"]
[Sun Apr 26 05:42:26.816279 2026] [:error] [pid 8390:tid 8464] [client 72.146.5.227:51874] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/redixsx.php"] [unique_id "ae01QoGPtFK_i9p5yxQMfwAAAI0"]
[Sun Apr 26 05:42:27.318901 2026] [:error] [pid 8390:tid 8458] [client 72.146.5.227:39564] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "ae01Q4GPtFK_i9p5yxQMgQAAAIc"]
[Sun Apr 26 05:42:27.821442 2026] [:error] [pid 41906:tid 41913] [client 72.146.5.227:14738] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "ae01Qz3-0A3lxw9OXoAEdgAAAYU"]
[Sun Apr 26 05:42:28.529971 2026] [:error] [pid 41906:tid 41921] [client 72.146.5.227:51442] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "ae01RD3-0A3lxw9OXoAEfQAAAY0"]
[Sun Apr 26 05:42:29.159520 2026] [:error] [pid 8390:tid 8462] [client 72.146.5.227:21495] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alpha.php"] [unique_id "ae01RYGPtFK_i9p5yxQMhQAAAIs"]
[Sun Apr 26 05:42:31.349795 2026] [:error] [pid 8385:tid 8445] [client 72.146.5.227:21481] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bc.php"] [unique_id "ae01RzOy7_J84Wx3-oxafwAAAFU"]
[Sun Apr 26 05:42:33.465131 2026] [:error] [pid 41906:tid 41925] [client 72.146.5.227:18266] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bc.php"] [unique_id "ae01ST3-0A3lxw9OXoAEnQAAAZE"]
[Sun Apr 26 05:42:35.299143 2026] [:error] [pid 8383:tid 8421] [client 72.146.5.227:51393] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bc.php"] [unique_id "ae01S9Fa2S3EsATMdWO6twAAABg"]
[Sun Apr 26 05:42:36.418978 2026] [:error] [pid 41906:tid 41908] [client 72.146.5.227:22132] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bc.php"] [unique_id "ae01TD3-0A3lxw9OXoAErAAAAYA"]
[Sun Apr 26 05:42:37.139833 2026] [:error] [pid 8383:tid 8399] [client 72.146.5.227:51882] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/67.php"] [unique_id "ae01TdFa2S3EsATMdWO6ugAAAAI"]
[Sun Apr 26 05:42:37.729800 2026] [:error] [pid 41906:tid 41912] [client 72.146.5.227:30192] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/67.php"] [unique_id "ae01TT3-0A3lxw9OXoAEugAAAYQ"]
[Sun Apr 26 05:42:38.723044 2026] [:error] [pid 10315:tid 10318] [client 72.146.5.227:38817] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/67.php"] [unique_id "ae01TqJIw2vjkleLIaCOXwAAAQE"]
[Sun Apr 26 05:42:40.306615 2026] [:error] [pid 41906:tid 41916] [client 72.146.5.227:33703] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/67.php"] [unique_id "ae01UD3-0A3lxw9OXoAExAAAAYg"]
[Sun Apr 26 05:42:43.106082 2026] [:error] [pid 41906:tid 41929] [client 72.146.5.227:33669] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1mrX.php"] [unique_id "ae01Uz3-0A3lxw9OXoAEzAAAAZU"]
[Sun Apr 26 05:42:43.972708 2026] [:error] [pid 8390:tid 8467] [client 72.146.5.227:51395] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1mrX.php"] [unique_id "ae01U4GPtFK_i9p5yxQMqAAAAJA"]
[Sun Apr 26 05:42:45.116597 2026] [:error] [pid 8390:tid 8451] [client 72.146.5.227:22136] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1mrX.php"] [unique_id "ae01VYGPtFK_i9p5yxQMqwAAAIA"]
[Sun Apr 26 05:42:45.920669 2026] [:error] [pid 8491:tid 8499] [client 72.146.5.227:17687] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1mrX.php"] [unique_id "ae01VSq7I7e6CJooQM2JIgAAAMA"]
[Sun Apr 26 05:42:46.944162 2026] [:error] [pid 41906:tid 41930] [client 72.146.5.227:30148] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x402.php"] [unique_id "ae01Vj3-0A3lxw9OXoAE5AAAAZY"]
[Sun Apr 26 05:42:48.239343 2026] [:error] [pid 41906:tid 41909] [client 72.146.5.227:39572] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x402.php"] [unique_id "ae01WD3-0A3lxw9OXoAE7AAAAYE"]
[Sun Apr 26 05:42:48.794479 2026] [:error] [pid 41906:tid 41931] [client 72.146.5.227:30189] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x402.php"] [unique_id "ae01WD3-0A3lxw9OXoAE8gAAAZc"]
[Sun Apr 26 05:42:49.863698 2026] [:error] [pid 41906:tid 41923] [client 72.146.5.227:14720] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x402.php"] [unique_id "ae01WT3-0A3lxw9OXoAFBQAAAY8"]
[Sun Apr 26 05:42:50.704174 2026] [:error] [pid 31273:tid 31337] [client 72.146.5.227:27633] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/485.php"] [unique_id "ae01WvhcNJEGrATcuEe-aAAAAUI"]
[Sun Apr 26 05:42:51.579158 2026] [:error] [pid 31273:tid 31363] [client 72.146.5.227:33683] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/485.php"] [unique_id "ae01W_hcNJEGrATcuEe-cQAAAVg"]
[Sun Apr 26 05:42:52.325699 2026] [:error] [pid 8390:tid 8470] [client 72.146.5.227:31521] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/485.php"] [unique_id "ae01XIGPtFK_i9p5yxQMvgAAAJM"]
[Sun Apr 26 05:42:52.880288 2026] [:error] [pid 31273:tid 31354] [client 72.146.5.227:27632] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/485.php"] [unique_id "ae01XPhcNJEGrATcuEe-dwAAAU8"]
[Sun Apr 26 05:42:53.723614 2026] [:error] [pid 31273:tid 31337] [client 72.146.5.227:39579] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "ae01XfhcNJEGrATcuEe-fAAAAUI"]
[Sun Apr 26 05:42:54.253791 2026] [:error] [pid 8385:tid 8429] [client 72.146.5.227:33719] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "ae01XjOy7_J84Wx3-oxarQAAAEU"]
[Sun Apr 26 05:42:55.105426 2026] [:error] [pid 8390:tid 8460] [client 72.146.5.227:51412] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "ae01X4GPtFK_i9p5yxQMzQAAAIk"]
[Sun Apr 26 05:42:55.784956 2026] [:error] [pid 10315:tid 10323] [client 72.146.5.227:38831] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "ae01X6JIw2vjkleLIaCOuQAAAQY"]
[Sun Apr 26 05:42:56.742618 2026] [:error] [pid 8383:tid 8401] [client 72.146.5.227:39570] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ae01YNFa2S3EsATMdWO63wAAAAQ"]
[Sun Apr 26 05:42:57.462425 2026] [:error] [pid 10315:tid 10322] [client 72.146.5.227:30203] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ae01YaJIw2vjkleLIaCOwQAAAQU"]
[Sun Apr 26 05:42:58.094943 2026] [:error] [pid 8385:tid 8431] [client 72.146.5.227:30147] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ae01YjOy7_J84Wx3-oxaugAAAEc"]
[Sun Apr 26 05:42:59.143890 2026] [:error] [pid 8385:tid 8424] [client 72.146.5.227:30181] [client 72.146.5.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ae01YzOy7_J84Wx3-oxawAAAAEA"]
[Sun Apr 26 06:25:18.240871 2026] [:error] [pid 8390:tid 8453] [client 49.7.227.204:33626] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ae0_ToGPtFK_i9p5yxQdAAAAAII"]
[Sun Apr 26 07:18:58.748558 2026] [:error] [pid 16573:tid 16585] [client 43.153.102.138:58794] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ae1L4gXNFaYgl_cuEbjuTgAAAwg"]
[Sun Apr 26 08:08:00.911648 2026] [:error] [pid 13137:tid 13162] [client 20.205.203.30:4127] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1XYN0RB4J0o4h5neHr7wAAAhU"]
[Sun Apr 26 08:08:01.292521 2026] [:error] [pid 13137:tid 13146] [client 20.205.203.30:4149] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1XYd0RB4J0o4h5neHr8AAAAgY"]
[Sun Apr 26 08:08:01.654728 2026] [:error] [pid 8491:tid 8505] [client 20.205.203.30:4115] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1XYSq7I7e6CJooQM2vcwAAAMY"]
[Sun Apr 26 08:08:02.013578 2026] [:error] [pid 13137:tid 13153] [client 20.205.203.30:4146] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "ae1XYt0RB4J0o4h5neHr8QAAAgw"]
[Sun Apr 26 08:53:07.005337 2026] [:error] [pid 22573:tid 22621] [client 74.249.155.150:38149] [client 74.249.155.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.249.155.150, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae1h83B3EmQlD4yKUt86pAAAAY4"]
[Sun Apr 26 08:53:09.003159 2026] [:error] [pid 22573:tid 22627] [client 74.249.155.150:38149] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae1h9XB3EmQlD4yKUt86xQAAAZQ"]
[Sun Apr 26 08:53:10.679772 2026] [:error] [pid 16515:tid 16535] [client 74.249.155.150:30738] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae1h9ltDrUmgHSvpuLzZTAAAAlE"]
[Sun Apr 26 08:53:12.433826 2026] [:error] [pid 13137:tid 13155] [client 74.249.155.150:35148] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae1h-N0RB4J0o4h5neH2MgAAAg4"]
[Sun Apr 26 08:53:13.422455 2026] [:error] [pid 22573:tid 22608] [client 74.249.155.150:30832] [client 74.249.155.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae1h-XB3EmQlD4yKUt860gAAAYI"]
[Sun Apr 26 08:53:42.611839 2026] [:error] [pid 8491:tid 8509] [client 176.120.22.46:61415] [client 176.120.22.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.120.22.46, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ae1iFiq7I7e6CJooQM21bQAAAMo"], referer: https://measureyourcause.com.au/wp-login.php
[Sun Apr 26 08:53:57.050311 2026] [:error] [pid 8390:tid 8461] [client 176.120.22.46:65002] [client 176.120.22.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.120.22.46, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ae1iJIGPtFK_i9p5yxRNVgAAAIo"], referer: https://measureyourcause.com.au/xmlrpc.php
[Sun Apr 26 12:04:46.783618 2026] [:error] [pid 8385:tid 8435] [client 54.178.182.219:43832] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ae2O3jOy7_J84Wx3-oybQwAAAEs"]
[Sun Apr 26 12:04:47.497645 2026] [:error] [pid 8390:tid 8475] [client 54.178.182.219:43868] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "ae2O34GPtFK_i9p5yxSx1QAAAJg"]
[Sun Apr 26 12:04:48.054307 2026] [:error] [pid 22572:tid 22588] [client 54.178.182.219:43900] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "ae2O4NXOViWCFU-pZzDDIQAAAUo"]
[Sun Apr 26 12:04:48.614622 2026] [:error] [pid 8390:tid 8459] [client 54.178.182.219:43934] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "ae2O4IGPtFK_i9p5yxSx1wAAAIg"]
[Sun Apr 26 12:04:49.176873 2026] [:error] [pid 13137:tid 13151] [client 54.178.182.219:43966] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "ae2O4d0RB4J0o4h5neEjwgAAAgo"]
[Sun Apr 26 12:04:49.744464 2026] [:error] [pid 22573:tid 22626] [client 54.178.182.219:43984] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "ae2O4XB3EmQlD4yKUt-C7gAAAZM"]
[Sun Apr 26 12:04:50.307988 2026] [:error] [pid 13137:tid 13159] [client 54.178.182.219:44020] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "ae2O4t0RB4J0o4h5neEjxAAAAhI"]
[Sun Apr 26 12:04:50.866869 2026] [:error] [pid 22572:tid 22580] [client 54.178.182.219:44206] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.remote"] [unique_id "ae2O4tXOViWCFU-pZzDDLQAAAUI"]
[Sun Apr 26 12:04:51.428495 2026] [:error] [pid 22573:tid 22613] [client 54.178.182.219:44232] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "ae2O43B3EmQlD4yKUt-C7wAAAYc"]
[Sun Apr 26 12:04:51.983419 2026] [:error] [pid 8491:tid 8517] [client 54.178.182.219:44242] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "ae2O4yq7I7e6CJooQM3PqAAAANI"]
[Sun Apr 26 12:04:52.543484 2026] [:error] [pid 22572:tid 22600] [client 54.178.182.219:44272] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.save"] [unique_id "ae2O5NXOViWCFU-pZzDDMgAAAVY"]
[Sun Apr 26 12:04:53.124678 2026] [:error] [pid 22573:tid 22618] [client 54.178.182.219:44296] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "ae2O5XB3EmQlD4yKUt-C-AAAAYs"]
[Sun Apr 26 12:04:53.690303 2026] [:error] [pid 22573:tid 22630] [client 54.178.182.219:44324] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "ae2O5XB3EmQlD4yKUt-C_gAAAZc"]
[Sun Apr 26 12:04:54.252508 2026] [:error] [pid 8491:tid 8520] [client 54.178.182.219:44350] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "ae2O5iq7I7e6CJooQM3PrAAAANU"]
[Sun Apr 26 12:04:54.817040 2026] [:error] [pid 8390:tid 8469] [client 54.178.182.219:44380] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "ae2O5oGPtFK_i9p5yxSx7QAAAJI"]
[Sun Apr 26 12:04:55.374486 2026] [:error] [pid 22573:tid 22623] [client 54.178.182.219:44404] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "ae2O53B3EmQlD4yKUt-DCwAAAZA"]
[Sun Apr 26 12:04:55.936229 2026] [:error] [pid 22573:tid 22624] [client 54.178.182.219:44446] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.stage"] [unique_id "ae2O53B3EmQlD4yKUt-DDwAAAZE"]
[Sun Apr 26 12:04:56.493954 2026] [:error] [pid 22573:tid 22609] [client 54.178.182.219:44478] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.ci"] [unique_id "ae2O6HB3EmQlD4yKUt-DEQAAAYM"]
[Sun Apr 26 12:04:57.053046 2026] [:error] [pid 16574:tid 16606] [client 54.178.182.219:44496] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.docker"] [unique_id "ae2O6X5MsX8wRQr99nYUKAAAA0I"]
[Sun Apr 26 12:04:57.613296 2026] [:error] [pid 13197:tid 13237] [client 54.178.182.219:44516] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.live"] [unique_id "ae2O6d3kktFKdSxTrBuw9wAAAsY"]
[Sun Apr 26 12:04:58.173195 2026] [:error] [pid 16574:tid 16635] [client 54.178.182.219:44534] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.preprod"] [unique_id "ae2O6n5MsX8wRQr99nYUKwAAA1Q"]
[Sun Apr 26 12:04:58.731994 2026] [:error] [pid 13137:tid 13147] [client 54.178.182.219:44560] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.uat"] [unique_id "ae2O6t0RB4J0o4h5neEjygAAAgc"]
[Sun Apr 26 12:04:59.287573 2026] [:error] [pid 13197:tid 13233] [client 54.178.182.219:44576] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dist"] [unique_id "ae2O693kktFKdSxTrBuw-AAAAsI"]
[Sun Apr 26 12:04:59.844058 2026] [:error] [pid 22572:tid 22581] [client 54.178.182.219:44616] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.swp"] [unique_id "ae2O69XOViWCFU-pZzDDNAAAAUM"]
[Sun Apr 26 12:05:00.403830 2026] [:error] [pid 22572:tid 22598] [client 54.178.182.219:41268] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env~"] [unique_id "ae2O7NXOViWCFU-pZzDDNwAAAVQ"]
[Sun Apr 26 12:05:00.965151 2026] [:error] [pid 16574:tid 16604] [client 54.178.182.219:41312] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "ae2O7H5MsX8wRQr99nYULQAAA0A"]
[Sun Apr 26 12:05:01.525139 2026] [:error] [pid 13197:tid 13253] [client 54.178.182.219:41328] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/apps/.env"] [unique_id "ae2O7d3kktFKdSxTrBuw_gAAAtU"]
[Sun Apr 26 12:05:02.087081 2026] [:error] [pid 22572:tid 22586] [client 54.178.182.219:41360] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "ae2O7tXOViWCFU-pZzDDPAAAAUg"]
[Sun Apr 26 12:05:02.653947 2026] [:error] [pid 8390:tid 8475] [client 54.178.182.219:41372] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web/.env"] [unique_id "ae2O7oGPtFK_i9p5yxSx8QAAAJg"]
[Sun Apr 26 12:05:03.214099 2026] [:error] [pid 13197:tid 13255] [client 54.178.182.219:41410] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/site/.env"] [unique_id "ae2O793kktFKdSxTrBuxAAAAAtc"]
[Sun Apr 26 12:52:45.878736 2026] [:error] [pid 13137:tid 13140] [client 134.122.91.23:60662] [client 134.122.91.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.91.23, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ae2aHd0RB4J0o4h5neEs3AAAAgA"]
[Sun Apr 26 12:52:46.914249 2026] [:error] [pid 13137:tid 13156] [client 134.122.91.23:61422] [client 134.122.91.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.122.91.23, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ae2aHt0RB4J0o4h5neEs4wAAAg8"]
[Sun Apr 26 12:55:30.919986 2026] [:error] [pid 16515:tid 16519] [client 125.75.66.97:47179] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ae2awltDrUmgHSvpuLwELwAAAkE"]
[Sun Apr 26 14:02:16.102364 2026] [:error] [pid 8390:tid 8452] [client 43.157.179.227:32870] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ae2qaIGPtFK_i9p5yxTfFAAAAIE"]
[Sun Apr 26 15:05:08.434844 2026] [:error] [pid 8390:tid 8471] [client 170.64.166.171:57407] [client 170.64.166.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.166.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ae25JIGPtFK_i9p5yxT4HwAAAJQ"]
[Sun Apr 26 15:05:08.518816 2026] [:error] [pid 8390:tid 8474] [client 170.64.166.171:57420] [client 170.64.166.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.166.171, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ae25JIGPtFK_i9p5yxT4IAAAAJc"]
[Sun Apr 26 21:46:57.045916 2026] [:error] [pid 13137:tid 13161] [client 20.255.80.192:1160] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "ae4XUd0RB4J0o4h5neGELwAAAhQ"]
[Sun Apr 26 21:46:57.532612 2026] [:error] [pid 8390:tid 8451] [client 20.255.80.192:1172] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "ae4XUYGPtFK_i9p5yxSIhwAAAIA"]
[Sun Apr 26 21:46:58.029378 2026] [:error] [pid 8385:tid 8438] [client 20.255.80.192:1179] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "ae4XUjOy7_J84Wx3-ozcRQAAAE4"]
[Sun Apr 26 21:46:58.508939 2026] [:error] [pid 8385:tid 8443] [client 20.255.80.192:1108] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "ae4XUjOy7_J84Wx3-ozcRwAAAFM"]
[Mon Apr 27 01:36:15.955938 2026] [:error] [pid 16515:tid 16539] [client 36.255.40.68:51890] [client 36.255.40.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.255.40.68, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ae5ND1tDrUmgHSvpuLxpLQAAAlU"]
[Mon Apr 27 02:53:31.830683 2026] [:error] [pid 22572:tid 22582] [client 192.144.148.122:51502] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ae5fK9XOViWCFU-pZzBmZAAAAUQ"]
[Mon Apr 27 05:05:39.917777 2026] [:error] [pid 22751:tid 22767] [client 4.232.184.88:16938] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "ae5-Iyc0tCpVyVdFok-JTwAAAM0"]
[Mon Apr 27 05:05:41.453321 2026] [:error] [pid 22751:tid 22765] [client 4.232.184.88:19558] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "ae5-JSc0tCpVyVdFok-JZAAAAMs"]
[Mon Apr 27 05:05:43.339752 2026] [:error] [pid 22647:tid 22734] [client 4.232.184.88:21045] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "ae5-J2jfVULTjnk5SzOBHwAAAJg"]
[Mon Apr 27 05:05:44.142607 2026] [:error] [pid 22647:tid 22717] [client 4.232.184.88:17112] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "ae5-KGjfVULTjnk5SzOBJgAAAIc"]
[Mon Apr 27 05:05:47.040630 2026] [:error] [pid 22751:tid 22777] [client 4.232.184.88:10371] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "ae5-Kyc0tCpVyVdFok-JkgAAANc"]
[Mon Apr 27 05:05:49.073161 2026] [:error] [pid 22647:tid 22730] [client 4.232.184.88:10413] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "ae5-LWjfVULTjnk5SzOBMQAAAJQ"]
[Mon Apr 27 05:05:51.460892 2026] [:error] [pid 22647:tid 22721] [client 4.232.184.88:3006] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "ae5-L2jfVULTjnk5SzOBMgAAAIs"]
[Mon Apr 27 05:05:52.694283 2026] [:error] [pid 22646:tid 22700] [client 4.232.184.88:19530] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "ae5-MIk_HyZhTP6AYad4kAAAAFE"]
[Mon Apr 27 05:05:54.275245 2026] [:error] [pid 22751:tid 22766] [client 4.232.184.88:12409] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkyac.php"] [unique_id "ae5-Mic0tCpVyVdFok-JogAAAMw"]
[Mon Apr 27 05:05:56.149857 2026] [:error] [pid 22751:tid 22773] [client 4.232.184.88:21019] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkyac.php"] [unique_id "ae5-NCc0tCpVyVdFok-JqwAAANM"]
[Mon Apr 27 05:06:00.018484 2026] [:error] [pid 22647:tid 22730] [client 4.232.184.88:20996] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkyac.php"] [unique_id "ae5-OGjfVULTjnk5SzOBOgAAAJQ"]
[Mon Apr 27 05:06:03.761583 2026] [:error] [pid 22646:tid 22696] [client 4.232.184.88:16913] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkyac.php"] [unique_id "ae5-O4k_HyZhTP6AYad4qQAAAE0"]
[Mon Apr 27 05:06:05.020099 2026] [:error] [pid 22646:tid 22705] [client 4.232.184.88:18315] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "ae5-PYk_HyZhTP6AYad4sQAAAFY"]
[Mon Apr 27 05:06:08.124616 2026] [:error] [pid 22647:tid 22710] [client 4.232.184.88:20995] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "ae5-QGjfVULTjnk5SzOBPwAAAIA"]
[Mon Apr 27 05:06:09.289837 2026] [:error] [pid 22751:tid 22759] [client 4.232.184.88:10437] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "ae5-QSc0tCpVyVdFok-JygAAAMU"]
[Mon Apr 27 05:06:10.429097 2026] [:error] [pid 22751:tid 22760] [client 4.232.184.88:21050] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "ae5-Qic0tCpVyVdFok-J1QAAAMY"]
[Mon Apr 27 05:06:11.212269 2026] [:error] [pid 22751:tid 22772] [client 4.232.184.88:10439] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae5-Qyc0tCpVyVdFok-J3QAAANI"]
[Mon Apr 27 05:06:12.098536 2026] [:error] [pid 22751:tid 22761] [client 4.232.184.88:12380] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae5-RCc0tCpVyVdFok-J5AAAAMc"]
[Mon Apr 27 05:06:12.985716 2026] [:error] [pid 22647:tid 22714] [client 4.232.184.88:2993] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae5-RGjfVULTjnk5SzOBSgAAAIQ"]
[Mon Apr 27 05:06:13.802920 2026] [:error] [pid 22751:tid 22773] [client 4.232.184.88:16947] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae5-RSc0tCpVyVdFok-J7AAAANM"]
[Mon Apr 27 05:06:14.878532 2026] [:error] [pid 22647:tid 22719] [client 4.232.184.88:11543] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "ae5-RmjfVULTjnk5SzOBUAAAAIk"]
[Mon Apr 27 05:06:16.402418 2026] [:error] [pid 22751:tid 22774] [client 4.232.184.88:10468] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "ae5-SCc0tCpVyVdFok-J-gAAANQ"]
[Mon Apr 27 05:06:17.483338 2026] [:error] [pid 22645:tid 22673] [client 4.232.184.88:16909] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "ae5-SX-Pq2r302zQbMaUfwAAABI"]
[Mon Apr 27 05:06:19.182942 2026] [:error] [pid 22647:tid 22714] [client 4.232.184.88:18345] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "ae5-S2jfVULTjnk5SzOBXgAAAIQ"]
[Mon Apr 27 05:06:22.981969 2026] [:error] [pid 22647:tid 22726] [client 4.232.184.88:19564] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae5-TmjfVULTjnk5SzOBZgAAAJA"]
[Mon Apr 27 05:06:24.444851 2026] [:error] [pid 22647:tid 22722] [client 4.232.184.88:12413] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae5-UGjfVULTjnk5SzOBagAAAIw"]
[Mon Apr 27 05:06:30.080904 2026] [:error] [pid 22646:tid 22703] [client 4.232.184.88:16926] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae5-Vok_HyZhTP6AYad4ygAAAFQ"]
[Mon Apr 27 05:06:31.808372 2026] [:error] [pid 22647:tid 22725] [client 4.232.184.88:11573] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae5-V2jfVULTjnk5SzOBkwAAAI8"]
[Mon Apr 27 05:06:49.314408 2026] [:error] [pid 22647:tid 22711] [client 4.232.184.88:12397] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "ae5-aWjfVULTjnk5SzOBxgAAAIE"]
[Mon Apr 27 05:06:50.280112 2026] [:error] [pid 22647:tid 22713] [client 4.232.184.88:30653] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "ae5-amjfVULTjnk5SzOB2wAAAIM"]
[Mon Apr 27 05:06:51.765393 2026] [:error] [pid 22647:tid 22717] [client 4.232.184.88:19568] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "ae5-a2jfVULTjnk5SzOB8wAAAIc"]
[Mon Apr 27 05:06:52.613189 2026] [:error] [pid 22647:tid 22733] [client 4.232.184.88:2233] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "ae5-bGjfVULTjnk5SzOB-QAAAJc"]
[Mon Apr 27 05:06:54.488099 2026] [:error] [pid 22751:tid 22765] [client 4.232.184.88:19497] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae5-bic0tCpVyVdFok-KSwAAAMs"]
[Mon Apr 27 05:06:56.567050 2026] [:error] [pid 22751:tid 22755] [client 4.232.184.88:19527] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae5-cCc0tCpVyVdFok-KVQAAAMI"]
[Mon Apr 27 05:06:58.508917 2026] [:error] [pid 22646:tid 22702] [client 4.232.184.88:17904] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae5-cok_HyZhTP6AYad5GQAAAFM"]
[Mon Apr 27 05:06:59.395938 2026] [:error] [pid 22647:tid 22728] [client 4.232.184.88:30645] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae5-c2jfVULTjnk5SzOCDgAAAJI"]
[Mon Apr 27 05:07:00.262689 2026] [:error] [pid 22646:tid 22700] [client 4.232.184.88:23988] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "ae5-dIk_HyZhTP6AYad5HgAAAFE"]
[Mon Apr 27 05:07:03.616328 2026] [:error] [pid 22647:tid 22726] [client 4.232.184.88:10751] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "ae5-d2jfVULTjnk5SzOCGQAAAJA"]
[Mon Apr 27 05:07:06.882250 2026] [:error] [pid 22645:tid 22658] [client 4.232.184.88:17597] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "ae5-en-Pq2r302zQbMaU7QAAAAM"]
[Mon Apr 27 05:07:08.018291 2026] [:error] [pid 22751:tid 22762] [client 4.232.184.88:23973] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "ae5-fCc0tCpVyVdFok-KcwAAAMg"]
[Mon Apr 27 05:07:10.126721 2026] [:error] [pid 22646:tid 22688] [client 4.232.184.88:17565] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "ae5-fok_HyZhTP6AYad5KwAAAEU"]
[Mon Apr 27 05:07:13.339088 2026] [:error] [pid 22751:tid 22762] [client 4.232.184.88:2235] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "ae5-gSc0tCpVyVdFok-KhwAAAMg"]
[Mon Apr 27 05:07:15.404090 2026] [:error] [pid 22646:tid 22686] [client 4.232.184.88:2539] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "ae5-g4k_HyZhTP6AYad5NAAAAEM"]
[Mon Apr 27 05:07:18.030006 2026] [:error] [pid 22751:tid 22772] [client 4.232.184.88:14606] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "ae5-hic0tCpVyVdFok-KoAAAANI"]
[Mon Apr 27 05:07:21.505471 2026] [:error] [pid 22647:tid 22732] [client 4.232.184.88:60023] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ae5-iWjfVULTjnk5SzOCXgAAAJY"]
[Mon Apr 27 05:07:22.898646 2026] [:error] [pid 22751:tid 22778] [client 4.232.184.88:57143] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ae5-iic0tCpVyVdFok-KsgAAANg"]
[Mon Apr 27 05:07:25.200977 2026] [:error] [pid 22751:tid 22762] [client 4.232.184.88:2658] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ae5-jSc0tCpVyVdFok-KugAAAMg"]
[Mon Apr 27 05:07:26.685750 2026] [:error] [pid 22645:tid 22677] [client 4.232.184.88:13599] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ae5-jn-Pq2r302zQbMaVCgAAABY"]
[Mon Apr 27 05:07:27.713660 2026] [:error] [pid 22751:tid 22753] [client 4.232.184.88:18425] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "ae5-jyc0tCpVyVdFok-KxgAAAMA"]
[Mon Apr 27 05:07:29.284536 2026] [:error] [pid 22751:tid 22765] [client 4.232.184.88:14964] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "ae5-kSc0tCpVyVdFok-KygAAAMs"]
[Mon Apr 27 05:07:31.789809 2026] [:error] [pid 22751:tid 22776] [client 4.232.184.88:2421] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "ae5-kyc0tCpVyVdFok-K0AAAANY"]
[Mon Apr 27 05:07:34.481184 2026] [:error] [pid 22646:tid 22703] [client 4.232.184.88:23731] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "ae5-lok_HyZhTP6AYad5RwAAAFQ"]
[Mon Apr 27 05:07:37.813391 2026] [:error] [pid 22645:tid 22664] [client 4.232.184.88:26521] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ae5-mX-Pq2r302zQbMaVIgAAAAk"]
[Mon Apr 27 05:07:39.470589 2026] [:error] [pid 22751:tid 22759] [client 4.232.184.88:57031] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ae5-myc0tCpVyVdFok-K3QAAAMU"]
[Mon Apr 27 05:07:41.755205 2026] [:error] [pid 22751:tid 22774] [client 4.232.184.88:27410] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ae5-nSc0tCpVyVdFok-K4gAAANQ"]
[Mon Apr 27 05:07:43.515516 2026] [:error] [pid 22751:tid 22758] [client 4.232.184.88:21846] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ae5-nyc0tCpVyVdFok-K5wAAAMQ"]
[Mon Apr 27 05:07:44.326374 2026] [:error] [pid 22647:tid 22726] [client 4.232.184.88:21779] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "ae5-oGjfVULTjnk5SzOCdgAAAJA"]
[Mon Apr 27 05:07:45.455023 2026] [:error] [pid 22751:tid 22772] [client 4.232.184.88:13894] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "ae5-oSc0tCpVyVdFok-K8wAAANI"]
[Mon Apr 27 05:07:46.986766 2026] [:error] [pid 22647:tid 22719] [client 4.232.184.88:17078] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "ae5-omjfVULTjnk5SzOCgAAAAIk"]
[Mon Apr 27 05:07:48.574759 2026] [:error] [pid 22647:tid 22726] [client 4.232.184.88:23442] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "ae5-pGjfVULTjnk5SzOChwAAAJA"]
[Mon Apr 27 05:08:00.688965 2026] [:error] [pid 22751:tid 22769] [client 4.232.184.88:26499] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "ae5-sCc0tCpVyVdFok-LLgAAAM8"]
[Mon Apr 27 05:08:01.396587 2026] [:error] [pid 22647:tid 22716] [client 4.232.184.88:23069] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "ae5-sWjfVULTjnk5SzOCoAAAAIY"]
[Mon Apr 27 05:08:02.830164 2026] [:error] [pid 22646:tid 22700] [client 4.232.184.88:23045] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "ae5-sok_HyZhTP6AYad5agAAAFE"]
[Mon Apr 27 05:08:06.068160 2026] [:error] [pid 22751:tid 22770] [client 4.232.184.88:13876] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "ae5-tic0tCpVyVdFok-LMgAAANA"]
[Mon Apr 27 05:08:09.698545 2026] [:error] [pid 22646:tid 22694] [client 4.232.184.88:16457] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "ae5-uYk_HyZhTP6AYad5fwAAAEs"]
[Mon Apr 27 05:08:10.506416 2026] [:error] [pid 22647:tid 22734] [client 4.232.184.88:19941] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "ae5-umjfVULTjnk5SzOCtgAAAJg"]
[Mon Apr 27 05:08:11.441291 2026] [:error] [pid 22751:tid 22777] [client 4.232.184.88:15429] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "ae5-uyc0tCpVyVdFok-LPgAAANc"]
[Mon Apr 27 05:08:12.297189 2026] [:error] [pid 22647:tid 22732] [client 4.232.184.88:2799] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "ae5-vGjfVULTjnk5SzOCvAAAAJY"]
[Mon Apr 27 05:08:13.817102 2026] [:error] [pid 22645:tid 22666] [client 4.232.184.88:30559] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "ae5-vX-Pq2r302zQbMaVbQAAAAs"]
[Mon Apr 27 05:08:15.807508 2026] [:error] [pid 22646:tid 22689] [client 4.232.184.88:2830] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "ae5-v4k_HyZhTP6AYad5gQAAAEY"]
[Mon Apr 27 05:08:16.588196 2026] [:error] [pid 22647:tid 22727] [client 4.232.184.88:11291] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "ae5-wGjfVULTjnk5SzOCxQAAAJE"]
[Mon Apr 27 05:08:18.687598 2026] [:error] [pid 22647:tid 22711] [client 4.232.184.88:2827] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sa.php7"] [unique_id "ae5-wmjfVULTjnk5SzOCzQAAAIE"]
[Mon Apr 27 05:08:19.920274 2026] [:error] [pid 22751:tid 22759] [client 4.232.184.88:21422] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "ae5-wyc0tCpVyVdFok-LTgAAAMU"]
[Mon Apr 27 05:08:20.879134 2026] [:error] [pid 22751:tid 22774] [client 4.232.184.88:12868] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "ae5-xCc0tCpVyVdFok-LUgAAANQ"]
[Mon Apr 27 05:08:22.119956 2026] [:error] [pid 22647:tid 22718] [client 4.232.184.88:11276] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "ae5-xmjfVULTjnk5SzOC1gAAAIg"]
[Mon Apr 27 05:08:22.954333 2026] [:error] [pid 22646:tid 22698] [client 4.232.184.88:21425] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a7.php"] [unique_id "ae5-xok_HyZhTP6AYad5iAAAAE8"]
[Mon Apr 27 05:08:23.946915 2026] [:error] [pid 22646:tid 22687] [client 4.232.184.88:22228] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ae5-x4k_HyZhTP6AYad5igAAAEQ"]
[Mon Apr 27 05:08:25.206171 2026] [:error] [pid 22751:tid 22760] [client 4.232.184.88:11316] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ae5-ySc0tCpVyVdFok-LWwAAAMY"]
[Mon Apr 27 05:08:26.208974 2026] [:error] [pid 22645:tid 22671] [client 4.232.184.88:23156] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ae5-yn-Pq2r302zQbMaVggAAABA"]
[Mon Apr 27 05:08:27.084616 2026] [:error] [pid 22646:tid 22689] [client 4.232.184.88:60717] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp9.php"] [unique_id "ae5-y4k_HyZhTP6AYad5jgAAAEY"]
[Mon Apr 27 05:08:28.646402 2026] [:error] [pid 22647:tid 22710] [client 4.232.184.88:23166] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "ae5-zGjfVULTjnk5SzOC3QAAAIA"]
[Mon Apr 27 05:08:30.212060 2026] [:error] [pid 22647:tid 22712] [client 4.232.184.88:13423] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "ae5-zmjfVULTjnk5SzOC4AAAAII"]
[Mon Apr 27 05:08:34.284828 2026] [:error] [pid 22645:tid 22672] [client 4.232.184.88:60701] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "ae5-0n-Pq2r302zQbMaViAAAABE"]
[Mon Apr 27 05:08:36.255922 2026] [:error] [pid 22751:tid 22758] [client 4.232.184.88:14656] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "ae5-1Cc0tCpVyVdFok-LbwAAAMQ"]
[Mon Apr 27 05:08:38.156424 2026] [:error] [pid 22751:tid 22776] [client 4.232.184.88:23147] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "ae5-1ic0tCpVyVdFok-LdQAAANY"]
[Mon Apr 27 05:08:40.701295 2026] [:error] [pid 22645:tid 22676] [client 4.232.184.88:14692] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "ae5-2H-Pq2r302zQbMaVjAAAABU"]
[Mon Apr 27 05:08:43.021670 2026] [:error] [pid 22646:tid 22700] [client 4.232.184.88:60065] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "ae5-24k_HyZhTP6AYad5nwAAAFE"]
[Mon Apr 27 05:08:44.926149 2026] [:error] [pid 22751:tid 22764] [client 4.232.184.88:60057] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "ae5-3Cc0tCpVyVdFok-LhQAAAMo"]
[Mon Apr 27 05:08:46.241163 2026] [:error] [pid 22751:tid 22765] [client 4.232.184.88:22248] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "ae5-3ic0tCpVyVdFok-LhwAAAMs"]
[Mon Apr 27 05:08:48.517688 2026] [:error] [pid 22646:tid 22685] [client 4.232.184.88:25202] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "ae5-4Ik_HyZhTP6AYad5rQAAAEI"]
[Mon Apr 27 05:08:50.738448 2026] [:error] [pid 22646:tid 22702] [client 4.232.184.88:23107] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "ae5-4ok_HyZhTP6AYad5rgAAAFM"]
[Mon Apr 27 05:08:53.981174 2026] [:error] [pid 22751:tid 22775] [client 4.232.184.88:12295] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "ae5-5Sc0tCpVyVdFok-LmwAAANU"]
[Mon Apr 27 05:08:56.299367 2026] [:error] [pid 22751:tid 22767] [client 4.232.184.88:61908] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "ae5-6Cc0tCpVyVdFok-LqAAAAM0"]
[Mon Apr 27 05:08:58.255610 2026] [:error] [pid 22645:tid 22665] [client 4.232.184.88:13328] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "ae5-6n-Pq2r302zQbMaVtAAAAAo"]
[Mon Apr 27 05:08:59.643847 2026] [:error] [pid 22751:tid 22772] [client 4.232.184.88:2331] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "ae5-6yc0tCpVyVdFok-LsgAAANI"]
[Mon Apr 27 05:09:07.605649 2026] [:error] [pid 22647:tid 22721] [client 4.232.184.88:18077] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "ae5-82jfVULTjnk5SzODKQAAAIs"]
[Mon Apr 27 05:09:08.434648 2026] [:error] [pid 22646:tid 22702] [client 4.232.184.88:17624] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "ae5-9Ik_HyZhTP6AYad5xAAAAFM"]
[Mon Apr 27 05:09:10.443232 2026] [:error] [pid 22751:tid 22776] [client 4.232.184.88:60071] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "ae5-9ic0tCpVyVdFok-L3QAAANY"]
[Mon Apr 27 05:09:11.511174 2026] [:error] [pid 22751:tid 22772] [client 4.232.184.88:13327] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "ae5-9yc0tCpVyVdFok-L5AAAANI"]
[Mon Apr 27 05:09:13.101185 2026] [:error] [pid 22751:tid 22763] [client 4.232.184.88:60066] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "ae5--Sc0tCpVyVdFok-L7gAAAMk"]
[Mon Apr 27 05:09:15.060523 2026] [:error] [pid 22751:tid 22754] [client 4.232.184.88:23152] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "ae5--yc0tCpVyVdFok-L-AAAAME"]
[Mon Apr 27 05:09:15.805297 2026] [:error] [pid 22751:tid 22757] [client 4.232.184.88:13366] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "ae5--yc0tCpVyVdFok-MAAAAAMM"]
[Mon Apr 27 05:09:16.414638 2026] [:error] [pid 22751:tid 22771] [client 4.232.184.88:22234] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "ae5-_Cc0tCpVyVdFok-MBAAAANE"]
[Mon Apr 27 05:09:17.410068 2026] [:error] [pid 22751:tid 22777] [client 4.232.184.88:2873] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "ae5-_Sc0tCpVyVdFok-MBgAAANc"]
[Mon Apr 27 05:09:18.477907 2026] [:error] [pid 22647:tid 22719] [client 4.232.184.88:15192] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "ae5-_mjfVULTjnk5SzODQQAAAIk"]
[Mon Apr 27 05:09:19.750086 2026] [:error] [pid 22646:tid 22698] [client 4.232.184.88:12648] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "ae5-_4k_HyZhTP6AYad5ywAAAE8"]
[Mon Apr 27 05:09:20.719732 2026] [:error] [pid 22751:tid 22758] [client 4.232.184.88:27430] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "ae5_ACc0tCpVyVdFok-MCwAAAMQ"]
[Mon Apr 27 05:09:21.924132 2026] [:error] [pid 22647:tid 22710] [client 4.232.184.88:23133] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "ae5_AWjfVULTjnk5SzODUwAAAIA"]
[Mon Apr 27 05:09:23.282773 2026] [:error] [pid 22647:tid 22723] [client 4.232.184.88:2685] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "ae5_A2jfVULTjnk5SzODWAAAAI0"]
[Mon Apr 27 05:09:25.361875 2026] [:error] [pid 22751:tid 22766] [client 4.232.184.88:2369] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "ae5_BSc0tCpVyVdFok-MFAAAAMw"]
[Mon Apr 27 05:09:27.933091 2026] [:error] [pid 22751:tid 22772] [client 4.232.184.88:14933] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "ae5_Byc0tCpVyVdFok-MGwAAANI"]
[Mon Apr 27 05:09:29.245631 2026] [:error] [pid 22751:tid 22760] [client 4.232.184.88:11329] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "ae5_CSc0tCpVyVdFok-MHgAAAMY"]
[Mon Apr 27 05:09:31.652983 2026] [:error] [pid 22645:tid 22668] [client 4.232.184.88:11358] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "ae5_C3-Pq2r302zQbMaV2wAAAA0"]
[Mon Apr 27 05:09:33.516495 2026] [:error] [pid 22646:tid 22706] [client 4.232.184.88:11348] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "ae5_DYk_HyZhTP6AYad55wAAAFc"]
[Mon Apr 27 05:09:34.895609 2026] [:error] [pid 22646:tid 22690] [client 4.232.184.88:2370] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8573.php"] [unique_id "ae5_Dok_HyZhTP6AYad5-AAAAEc"]
[Mon Apr 27 05:09:35.745582 2026] [:error] [pid 22645:tid 22677] [client 4.232.184.88:11341] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "ae5_D3-Pq2r302zQbMaV4wAAABY"]
[Mon Apr 27 05:09:37.457881 2026] [:error] [pid 22645:tid 22666] [client 4.232.184.88:16745] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "ae5_EX-Pq2r302zQbMaV6wAAAAs"]
[Mon Apr 27 05:09:39.797688 2026] [:error] [pid 22646:tid 22692] [client 4.232.184.88:2386] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "ae5_E4k_HyZhTP6AYad6BwAAAEk"]
[Mon Apr 27 05:09:40.645052 2026] [:error] [pid 22647:tid 22725] [client 4.232.184.88:16764] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "ae5_FGjfVULTjnk5SzODgAAAAI8"]
[Mon Apr 27 05:09:41.630805 2026] [:error] [pid 22645:tid 22657] [client 4.232.184.88:18403] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "ae5_FX-Pq2r302zQbMaV9wAAAAI"]
[Mon Apr 27 05:09:43.008642 2026] [:error] [pid 22647:tid 22721] [client 4.232.184.88:18406] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "ae5_F2jfVULTjnk5SzODhwAAAIs"]
[Mon Apr 27 05:09:44.456590 2026] [:error] [pid 22646:tid 22700] [client 4.232.184.88:13628] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "ae5_GIk_HyZhTP6AYad6CwAAAFE"]
[Mon Apr 27 05:09:45.914907 2026] [:error] [pid 22646:tid 22697] [client 4.232.184.88:11370] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "ae5_GYk_HyZhTP6AYad6DQAAAE4"]
[Mon Apr 27 05:09:46.969003 2026] [:error] [pid 22645:tid 22674] [client 4.232.184.88:14942] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ae5_Gn-Pq2r302zQbMaWBQAAABM"]
[Mon Apr 27 05:09:48.537492 2026] [:error] [pid 22646:tid 22696] [client 4.232.184.88:14850] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ae5_HIk_HyZhTP6AYad6FgAAAE0"]
[Mon Apr 27 05:09:50.333782 2026] [:error] [pid 22647:tid 22733] [client 4.232.184.88:16747] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ae5_HmjfVULTjnk5SzODkwAAAJc"]
[Mon Apr 27 05:09:51.554544 2026] [:error] [pid 22647:tid 22712] [client 4.232.184.88:14966] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "ae5_H2jfVULTjnk5SzODlgAAAII"]
[Mon Apr 27 05:09:52.488342 2026] [:error] [pid 22751:tid 22757] [client 4.232.184.88:2656] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "ae5_ICc0tCpVyVdFok-MdQAAAMM"]
[Mon Apr 27 05:09:53.197430 2026] [:error] [pid 22647:tid 22727] [client 4.232.184.88:14639] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "ae5_IWjfVULTjnk5SzODmgAAAJE"]
[Mon Apr 27 05:09:53.834462 2026] [:error] [pid 22751:tid 22769] [client 4.232.184.88:2411] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "ae5_ISc0tCpVyVdFok-MewAAAM8"]
[Mon Apr 27 05:09:55.544766 2026] [:error] [pid 22645:tid 22676] [client 4.232.184.88:16757] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/prosellers8.php"] [unique_id "ae5_I3-Pq2r302zQbMaWCgAAABU"]
[Mon Apr 27 05:09:57.186632 2026] [:error] [pid 22647:tid 22730] [client 4.232.184.88:11590] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "ae5_JWjfVULTjnk5SzODpAAAAJQ"]
[Mon Apr 27 05:09:58.388800 2026] [:error] [pid 22751:tid 22754] [client 4.232.184.88:2640] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "ae5_Jic0tCpVyVdFok-MmAAAAME"]
[Mon Apr 27 05:09:59.182976 2026] [:error] [pid 22645:tid 22667] [client 4.232.184.88:18414] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "ae5_J3-Pq2r302zQbMaWEgAAAAw"]
[Mon Apr 27 05:10:00.806315 2026] [:error] [pid 22645:tid 22656] [client 4.232.184.88:2430] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop.php"] [unique_id "ae5_KH-Pq2r302zQbMaWFQAAAAE"]
[Mon Apr 27 05:10:02.147713 2026] [:error] [pid 22646:tid 22703] [client 4.232.184.88:2403] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "ae5_Kok_HyZhTP6AYad6LgAAAFQ"]
[Mon Apr 27 05:10:03.380872 2026] [:error] [pid 22646:tid 22697] [client 4.232.184.88:14633] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "ae5_K4k_HyZhTP6AYad6LwAAAE4"]
[Mon Apr 27 05:10:04.773024 2026] [:error] [pid 22751:tid 22765] [client 4.232.184.88:2394] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "ae5_LCc0tCpVyVdFok-MvgAAAMs"]
[Mon Apr 27 05:10:06.307366 2026] [:error] [pid 22646:tid 22704] [client 4.232.184.88:11586] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "ae5_Lok_HyZhTP6AYad6NwAAAFU"]
[Mon Apr 27 05:10:16.758375 2026] [:error] [pid 22647:tid 22714] [client 4.232.184.88:14605] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sd.php"] [unique_id "ae5_OGjfVULTjnk5SzODzwAAAIQ"]
[Mon Apr 27 05:10:17.659560 2026] [:error] [pid 22646:tid 22701] [client 4.232.184.88:14913] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sd.php"] [unique_id "ae5_OYk_HyZhTP6AYad6XAAAAFI"]
[Mon Apr 27 05:10:19.034365 2026] [:error] [pid 22646:tid 22684] [client 4.232.184.88:2405] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sd.php"] [unique_id "ae5_O4k_HyZhTP6AYad6XgAAAEE"]
[Mon Apr 27 05:10:19.680783 2026] [:error] [pid 22645:tid 22666] [client 4.232.184.88:2376] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sd.php"] [unique_id "ae5_O3-Pq2r302zQbMaWGgAAAAs"]
[Mon Apr 27 06:16:37.386731 2026] [:error] [pid 20603:tid 20620] [client 139.59.224.88:53350] [client 139.59.224.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "ae6OxQ_k682XZv20MXyHjAAAAQw"]
[Mon Apr 27 06:30:24.764186 2026] [autoindex:error] [pid 22751:tid 22761] [client 20.255.80.192:1789] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 06:30:24.885303 2026] [proxy_fcgi:error] [pid 22751:tid 22758] [client 20.255.80.192:1789] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 06:30:25.160019 2026] [autoindex:error] [pid 22751:tid 22774] [client 20.255.80.192:1789] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/pki-validation/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 06:30:26.366079 2026] [:error] [pid 22751:tid 22775] [client 20.255.80.192:1789] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae6SAic0tCpVyVdFok_XqgAAANU"]
[Mon Apr 27 06:30:26.880982 2026] [:error] [pid 22645:tid 22679] [client 20.255.80.192:1732] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae6SAn-Pq2r302zQbMa8QAAAABg"]
[Mon Apr 27 06:30:27.397704 2026] [:error] [pid 20603:tid 20626] [client 20.255.80.192:1027] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae6SAw_k682XZv20MXyNuwAAARI"]
[Mon Apr 27 06:30:27.880448 2026] [:error] [pid 20603:tid 20617] [client 20.255.80.192:1743] [client 20.255.80.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "ae6SAw_k682XZv20MXyNvgAAAQk"]
[Mon Apr 27 06:54:41.383268 2026] [:error] [pid 22647:tid 22726] [client 43.157.98.187:40774] [client 43.157.98.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ae6XsWjfVULTjnk5SzO-JAAAAJA"]
[Mon Apr 27 09:12:04.567200 2026] [:error] [pid 6972:tid 7034] [client 125.75.66.97:59188] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ae635OJniPbCiT6NuKfIQAAAAUY"]
[Mon Apr 27 13:51:51.751586 2026] [:error] [pid 62510:tid 62548] [client 34.55.86.97:54498] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75d4CpoM1jGOxUMpv3agAAAMM"]
[Mon Apr 27 14:08:43.805432 2026] [:error] [pid 62511:tid 62598] [client 104.198.68.113:16052] [client 104.198.68.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ae79a7BjE-jhU4FY4Hh6jAAAAVg"]
[Mon Apr 27 15:33:06.557043 2026] [:error] [pid 41010:tid 41059] [client 182.44.2.148:36746] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ae8RMjc-oOrM_e97_4DmvAAAAdE"]
[Mon Apr 27 19:43:54.354594 2026] [:error] [pid 41098:tid 41124] [client 170.106.65.93:35232] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "ae9L-uIJ72vFwurGAAuG-wAAABg"]
[Mon Apr 27 21:25:33.775496 2026] [:error] [pid 31555:tid 31579] [client 118.179.177.17:60797] [client 118.179.177.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.179.177.17, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ae9jzbJDZf3DNaSMAJ1J6AAAABY"]
[Mon Apr 27 22:09:19.187441 2026] [:error] [pid 13554:tid 13578] [client 34.169.82.53:65418] [client 34.169.82.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.169.82.53, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ae9uD3Jx87Dl-xMmL92bPQAAANY"]
[Mon Apr 27 22:09:21.173134 2026] [:error] [pid 13554:tid 13559] [client 34.169.82.53:65418] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ae9uEXJx87Dl-xMmL92bTgAAAMM"]
[Mon Apr 27 22:09:21.905495 2026] [:error] [pid 31555:tid 31574] [client 34.169.82.53:64234] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ae9uEbJDZf3DNaSMAJ1fMgAAABE"]
[Mon Apr 27 22:09:22.614897 2026] [:error] [pid 13465:tid 13507] [client 34.169.82.53:64025] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ae9uEv19I-6GBJQxn_i_MAAAAEw"]
[Mon Apr 27 22:09:23.320153 2026] [:error] [pid 13465:tid 13504] [client 34.169.82.53:60580] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ae9uE_19I-6GBJQxn_i_MgAAAEk"]
[Mon Apr 27 22:09:24.026305 2026] [:error] [pid 13465:tid 13501] [client 34.169.82.53:65354] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ae9uFP19I-6GBJQxn_i_NAAAAEY"]
[Mon Apr 27 22:09:24.733762 2026] [:error] [pid 13465:tid 13497] [client 34.169.82.53:57319] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ae9uFP19I-6GBJQxn_i_NQAAAEI"]
[Mon Apr 27 22:09:25.446420 2026] [:error] [pid 13464:tid 13490] [client 34.169.82.53:63061] [client 34.169.82.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ae9uFWIEa0q6oQ95zvEuUAAAAdY"]
[Mon Apr 27 23:26:00.129483 2026] [:error] [pid 31555:tid 31574] [client 34.121.67.93:62807] [client 34.121.67.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.121.67.93, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ae-ACLJDZf3DNaSMAJ2FVgAAABE"]
[Mon Apr 27 23:26:02.764104 2026] [:error] [pid 31555:tid 31569] [client 34.121.67.93:62807] [client 34.121.67.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ae-ACrJDZf3DNaSMAJ2FZQAAAAw"]
[Mon Apr 27 23:26:03.620833 2026] [:error] [pid 31555:tid 31570] [client 34.121.67.93:54433] [client 34.121.67.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ae-AC7JDZf3DNaSMAJ2FaAAAAA0"]
[Mon Apr 27 23:26:04.426297 2026] [:error] [pid 31555:tid 31581] [client 34.121.67.93:57842] [client 34.121.67.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ae-ADLJDZf3DNaSMAJ2FbQAAABg"]
[Mon Apr 27 23:26:05.248574 2026] [:error] [pid 13554:tid 13559] [client 34.121.67.93:55461] [client 34.121.67.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ae-ADXJx87Dl-xMmL9222AAAAMM"]
[Mon Apr 27 23:26:06.176917 2026] [:error] [pid 13465:tid 13496] [client 34.121.67.93:61367] [client 34.121.67.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ae-ADv19I-6GBJQxn_jQ6gAAAEE"]
[Mon Apr 27 23:26:07.045739 2026] [:error] [pid 13465:tid 13500] [client 34.121.67.93:63490] [client 34.121.67.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ae-AD_19I-6GBJQxn_jQ7AAAAEU"]
[Mon Apr 27 23:26:07.893095 2026] [:error] [pid 13554:tid 13566] [client 34.121.67.93:51782] [client 34.121.67.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ae-AD3Jx87Dl-xMmL9223AAAAMo"]
[Tue Apr 28 04:20:03.341298 2026] [:error] [pid 14577:tid 14589] [client 172.213.8.172:8415] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "ae_E8yzBH-jwzlgiBdGSNgAAAAM"]
[Tue Apr 28 04:20:04.279266 2026] [:error] [pid 14579:tid 14653] [client 172.213.8.172:22181] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "ae_E9BrUiOG83qKKuuDDoQAAAI0"]
[Tue Apr 28 04:20:05.286182 2026] [:error] [pid 14579:tid 14659] [client 172.213.8.172:3059] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "ae_E9RrUiOG83qKKuuDDowAAAJM"]
[Tue Apr 28 04:20:06.320581 2026] [:error] [pid 14577:tid 14605] [client 172.213.8.172:2336] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws.php"] [unique_id "ae_E9izBH-jwzlgiBdGSOAAAABM"]
[Tue Apr 28 09:19:20.585519 2026] [:error] [pid 33864:tid 33881] [client 101.33.55.204:33224] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afALGDXchLGZ4QggCsmnVAAAAI8"]
[Tue Apr 28 10:42:22.065174 2026] [:error] [pid 33777:tid 33858] [client 203.2.64.59:54069] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afAejrXUCFWqmordGGL4AgAAARc"]
[Tue Apr 28 11:16:11.604482 2026] [autoindex:error] [pid 33864:tid 33872] [client 20.56.20.8:49570] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Apr 28 13:16:18.806232 2026] [autoindex:error] [pid 2741:tid 2746] [client 172.213.8.172:5293] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 13:16:19.052686 2026] [proxy_fcgi:error] [pid 2741:tid 2768] [client 172.213.8.172:5293] AH01071: Got error 'Primary script unknown'
[Tue Apr 28 13:16:19.566498 2026] [autoindex:error] [pid 2741:tid 2753] [client 172.213.8.172:5293] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/pki-validation/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Tue Apr 28 13:16:21.895793 2026] [:error] [pid 2741:tid 2751] [client 172.213.8.172:5293] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "afBCpfp92FeOz1h6ILx4GQAAAUU"]
[Tue Apr 28 13:16:22.914794 2026] [:error] [pid 2741:tid 2757] [client 172.213.8.172:9939] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "afBCpvp92FeOz1h6ILx4HAAAAUs"]
[Tue Apr 28 13:16:23.871702 2026] [:error] [pid 2741:tid 2752] [client 172.213.8.172:10644] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "afBCp_p92FeOz1h6ILx4HwAAAUY"]
[Tue Apr 28 13:16:24.884084 2026] [:error] [pid 2741:tid 2768] [client 172.213.8.172:9972] [client 172.213.8.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/403.php"] [unique_id "afBCqPp92FeOz1h6ILx4IAAAAVY"]
[Tue Apr 28 16:05:40.580894 2026] [:error] [pid 50889:tid 50910] [client 206.255.112.6:61267] [client 206.255.112.6] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.255.112.6, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afBqVIzszBr00txEzGgO-gAAABI"]
[Tue Apr 28 19:40:00.818623 2026] [:error] [pid 2741:tid 2763] [client 4.225.204.143:8976] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afCckPp92FeOz1h6ILzk7gAAAVE"]
[Tue Apr 28 19:40:01.692783 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:52837] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afCckbXUCFWqmordGGLOFwAAARY"]
[Tue Apr 28 19:40:02.321048 2026] [:error] [pid 33777:tid 33844] [client 4.225.204.143:52808] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afCckrXUCFWqmordGGLOGgAAAQk"]
[Tue Apr 28 19:40:03.095098 2026] [:error] [pid 33777:tid 33840] [client 4.225.204.143:62899] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afCck7XUCFWqmordGGLOIQAAAQU"]
[Tue Apr 28 19:40:03.783121 2026] [:error] [pid 33777:tid 33848] [client 4.225.204.143:24564] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afCck7XUCFWqmordGGLOJQAAAQ0"]
[Tue Apr 28 19:40:04.640468 2026] [:error] [pid 33864:tid 33879] [client 4.225.204.143:31127] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afCclDXchLGZ4QggCskYTAAAAI0"]
[Tue Apr 28 19:40:05.423371 2026] [:error] [pid 33777:tid 33846] [client 4.225.204.143:26030] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afCclbXUCFWqmordGGLOKgAAAQs"]
[Tue Apr 28 19:40:05.981113 2026] [:error] [pid 33777:tid 33842] [client 4.225.204.143:59520] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afCclbXUCFWqmordGGLOLQAAAQc"]
[Tue Apr 28 19:40:06.699204 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:62858] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afCclrXUCFWqmordGGLOMAAAARY"]
[Tue Apr 28 19:40:07.432733 2026] [:error] [pid 2741:tid 2757] [client 4.225.204.143:55963] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afCcl_p92FeOz1h6ILzk8AAAAUs"]
[Tue Apr 28 19:40:08.147767 2026] [:error] [pid 2741:tid 2746] [client 4.225.204.143:26026] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afCcmPp92FeOz1h6ILzk8QAAAUA"]
[Tue Apr 28 19:40:08.909727 2026] [:error] [pid 50889:tid 50905] [client 4.225.204.143:55972] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afCcmIzszBr00txEzGg8TwAAAA0"]
[Tue Apr 28 19:40:09.585819 2026] [:error] [pid 33864:tid 33884] [client 4.225.204.143:24515] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afCcmTXchLGZ4QggCskYUAAAAJI"]
[Tue Apr 28 19:40:10.214463 2026] [:error] [pid 33864:tid 33886] [client 4.225.204.143:52838] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afCcmjXchLGZ4QggCskYUQAAAJQ"]
[Tue Apr 28 19:40:11.020768 2026] [:error] [pid 50889:tid 50902] [client 4.225.204.143:8970] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afCcm4zszBr00txEzGg8UQAAAAo"]
[Tue Apr 28 19:40:11.683326 2026] [:error] [pid 50889:tid 50913] [client 4.225.204.143:24549] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afCcm4zszBr00txEzGg8UgAAABU"]
[Tue Apr 28 19:40:12.433213 2026] [:error] [pid 33864:tid 33866] [client 4.225.204.143:31159] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afCcnDXchLGZ4QggCskYVQAAAIA"]
[Tue Apr 28 19:40:13.120683 2026] [:error] [pid 33864:tid 33888] [client 4.225.204.143:25993] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afCcnTXchLGZ4QggCskYVgAAAJY"]
[Tue Apr 28 19:40:14.133204 2026] [:error] [pid 33777:tid 33855] [client 4.225.204.143:26007] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afCcnrXUCFWqmordGGLOOwAAARQ"]
[Tue Apr 28 19:40:14.971295 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:55997] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afCcnrXUCFWqmordGGLOPQAAARY"]
[Tue Apr 28 19:40:15.841119 2026] [:error] [pid 50889:tid 50892] [client 4.225.204.143:55966] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afCcn4zszBr00txEzGg8WAAAAAA"]
[Tue Apr 28 19:40:16.740514 2026] [:error] [pid 50889:tid 50910] [client 4.225.204.143:62875] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afCcoIzszBr00txEzGg8WgAAABI"]
[Tue Apr 28 19:40:17.346683 2026] [:error] [pid 50889:tid 50906] [client 4.225.204.143:25995] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afCcoYzszBr00txEzGg8WwAAAA4"]
[Tue Apr 28 19:40:18.314001 2026] [:error] [pid 2741:tid 2752] [client 4.225.204.143:55999] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afCcovp92FeOz1h6ILzk8gAAAUY"]
[Tue Apr 28 19:40:19.293695 2026] [:error] [pid 2741:tid 2749] [client 4.225.204.143:62883] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afCco_p92FeOz1h6ILzk8wAAAUM"]
[Tue Apr 28 19:40:19.906532 2026] [:error] [pid 2741:tid 2766] [client 4.225.204.143:26019] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afCco_p92FeOz1h6ILzk9AAAAVQ"]
[Tue Apr 28 19:40:20.706641 2026] [:error] [pid 33776:tid 33815] [client 4.225.204.143:9001] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afCcpF-bEJ2CKP3iKAAsDAAAAEc"]
[Tue Apr 28 19:40:21.515176 2026] [:error] [pid 33776:tid 33820] [client 4.225.204.143:25991] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afCcpV-bEJ2CKP3iKAAsDgAAAEw"]
[Tue Apr 28 19:40:22.520482 2026] [:error] [pid 33775:tid 33799] [client 4.225.204.143:62852] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afCcppsYOcoQrq88YbUofQAAANQ"]
[Tue Apr 28 19:40:23.827121 2026] [:error] [pid 2741:tid 2748] [client 4.225.204.143:24567] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afCcp_p92FeOz1h6ILzk-gAAAUI"]
[Tue Apr 28 19:40:24.639541 2026] [:error] [pid 33777:tid 33850] [client 4.225.204.143:31154] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afCcqLXUCFWqmordGGLOQQAAAQ8"]
[Tue Apr 28 19:40:25.361040 2026] [:error] [pid 33777:tid 33854] [client 4.225.204.143:45051] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afCcqbXUCFWqmordGGLORAAAARM"]
[Tue Apr 28 19:40:25.964843 2026] [:error] [pid 33777:tid 33848] [client 4.225.204.143:8980] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afCcqbXUCFWqmordGGLORwAAAQ0"]
[Tue Apr 28 19:40:26.906899 2026] [:error] [pid 33777:tid 33835] [client 4.225.204.143:59549] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afCcqrXUCFWqmordGGLOTAAAAQA"]
[Tue Apr 28 19:40:27.910908 2026] [:error] [pid 33777:tid 33842] [client 4.225.204.143:52856] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afCcq7XUCFWqmordGGLOUQAAAQc"]
[Tue Apr 28 19:40:28.540073 2026] [:error] [pid 33777:tid 33840] [client 4.225.204.143:57316] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afCcrLXUCFWqmordGGLOVAAAAQU"]
[Tue Apr 28 19:40:29.246137 2026] [:error] [pid 50889:tid 50916] [client 4.225.204.143:8971] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afCcrYzszBr00txEzGg8ZgAAABg"]
[Tue Apr 28 19:40:30.242644 2026] [:error] [pid 33777:tid 33844] [client 4.225.204.143:24536] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afCcrrXUCFWqmordGGLOWwAAAQk"]
[Tue Apr 28 19:40:31.141713 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:59527] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afCcr7XUCFWqmordGGLOXQAAARY"]
[Tue Apr 28 19:40:31.855383 2026] [:error] [pid 33777:tid 33845] [client 4.225.204.143:8981] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afCcr7XUCFWqmordGGLOXwAAAQo"]
[Tue Apr 28 19:40:32.707696 2026] [:error] [pid 33777:tid 33848] [client 4.225.204.143:9007] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afCcsLXUCFWqmordGGLOYwAAAQ0"]
[Tue Apr 28 19:40:33.482211 2026] [:error] [pid 33777:tid 33843] [client 4.225.204.143:26028] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afCcsbXUCFWqmordGGLOZQAAAQg"]
[Tue Apr 28 19:40:34.235912 2026] [:error] [pid 33864:tid 33877] [client 4.225.204.143:31108] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afCcsjXchLGZ4QggCskYXQAAAIs"]
[Tue Apr 28 19:40:35.097307 2026] [:error] [pid 33776:tid 33829] [client 4.225.204.143:52814] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afCcs1-bEJ2CKP3iKAAsFAAAAFU"]
[Tue Apr 28 19:40:36.013319 2026] [:error] [pid 2741:tid 2765] [client 4.225.204.143:24565] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afCctPp92FeOz1h6ILzlBAAAAVM"]
[Tue Apr 28 19:40:36.652664 2026] [:error] [pid 2741:tid 2759] [client 4.225.204.143:62885] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afCctPp92FeOz1h6ILzlBgAAAU0"]
[Tue Apr 28 19:40:37.589478 2026] [:error] [pid 2741:tid 2751] [client 4.225.204.143:8977] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afCctfp92FeOz1h6ILzlCAAAAUU"]
[Tue Apr 28 19:40:38.388491 2026] [:error] [pid 33777:tid 33856] [client 4.225.204.143:8992] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afCctrXUCFWqmordGGLOaAAAARU"]
[Tue Apr 28 19:40:39.384733 2026] [:error] [pid 2741:tid 2768] [client 4.225.204.143:62867] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afCct_p92FeOz1h6ILzlCgAAAVY"]
[Tue Apr 28 19:40:40.113139 2026] [:error] [pid 2741:tid 2770] [client 4.225.204.143:24514] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afCcuPp92FeOz1h6ILzlDAAAAVg"]
[Tue Apr 28 19:40:41.210446 2026] [:error] [pid 33777:tid 33846] [client 4.225.204.143:59525] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afCcubXUCFWqmordGGLObwAAAQs"]
[Tue Apr 28 19:40:42.094537 2026] [:error] [pid 33777:tid 33858] [client 4.225.204.143:52834] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afCcurXUCFWqmordGGLOcwAAARc"]
[Tue Apr 28 19:40:42.871652 2026] [:error] [pid 33777:tid 33850] [client 4.225.204.143:8989] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afCcurXUCFWqmordGGLOdwAAAQ8"]
[Tue Apr 28 19:40:43.695376 2026] [:error] [pid 33777:tid 33859] [client 4.225.204.143:62896] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afCcu7XUCFWqmordGGLOewAAARg"]
[Tue Apr 28 19:40:44.374519 2026] [:error] [pid 33777:tid 33855] [client 4.225.204.143:26035] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afCcvLXUCFWqmordGGLOfgAAARQ"]
[Tue Apr 28 19:40:45.029032 2026] [:error] [pid 2741:tid 2767] [client 4.225.204.143:24524] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afCcvfp92FeOz1h6ILzlEAAAAVU"]
[Tue Apr 28 19:40:45.606535 2026] [:error] [pid 2741:tid 2759] [client 4.225.204.143:9004] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afCcvfp92FeOz1h6ILzlEwAAAU0"]
[Tue Apr 28 19:40:46.287347 2026] [:error] [pid 33777:tid 33848] [client 4.225.204.143:8966] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afCcvrXUCFWqmordGGLOhAAAAQ0"]
[Tue Apr 28 19:40:46.969807 2026] [:error] [pid 50889:tid 50904] [client 4.225.204.143:52801] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afCcvozszBr00txEzGg8dAAAAAw"]
[Tue Apr 28 19:40:47.576829 2026] [:error] [pid 33777:tid 33843] [client 4.225.204.143:24572] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afCcv7XUCFWqmordGGLOiQAAAQg"]
[Tue Apr 28 19:40:48.451484 2026] [:error] [pid 33777:tid 33840] [client 4.225.204.143:26042] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afCcwLXUCFWqmordGGLOjAAAAQU"]
[Tue Apr 28 19:40:49.213966 2026] [:error] [pid 33777:tid 33849] [client 4.225.204.143:52810] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afCcwbXUCFWqmordGGLOjwAAAQ4"]
[Tue Apr 28 19:40:49.984539 2026] [:error] [pid 33775:tid 33789] [client 4.225.204.143:24533] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afCcwZsYOcoQrq88YbUohgAAAMo"]
[Tue Apr 28 19:40:51.142601 2026] [:error] [pid 33777:tid 33838] [client 4.225.204.143:8968] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afCcw7XUCFWqmordGGLOlgAAAQM"]
[Tue Apr 28 19:40:51.919320 2026] [:error] [pid 33777:tid 33843] [client 4.225.204.143:26023] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afCcw7XUCFWqmordGGLOmAAAAQg"]
[Tue Apr 28 19:40:53.169706 2026] [:error] [pid 2741:tid 2763] [client 4.225.204.143:31125] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afCcxfp92FeOz1h6ILzlGAAAAVE"]
[Tue Apr 28 19:40:55.531275 2026] [:error] [pid 2741:tid 2764] [client 4.225.204.143:31112] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afCcx_p92FeOz1h6ILzlGwAAAVI"]
[Tue Apr 28 19:40:56.439789 2026] [:error] [pid 2741:tid 2762] [client 4.225.204.143:55955] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afCcyPp92FeOz1h6ILzlHwAAAVA"]
[Tue Apr 28 19:40:57.796790 2026] [:error] [pid 33776:tid 33823] [client 4.225.204.143:62893] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afCcyV-bEJ2CKP3iKAAsHAAAAE8"]
[Tue Apr 28 19:40:58.804130 2026] [:error] [pid 2741:tid 2769] [client 4.225.204.143:62897] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afCcyvp92FeOz1h6ILzlIwAAAVc"]
[Tue Apr 28 19:40:59.704300 2026] [:error] [pid 2741:tid 2755] [client 4.225.204.143:8291] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afCcy_p92FeOz1h6ILzlKQAAAUk"]
[Tue Apr 28 19:41:10.108392 2026] [:error] [pid 33864:tid 33870] [client 4.225.204.143:31144] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "afCc1jXchLGZ4QggCskYfgAAAIQ"]
[Tue Apr 28 19:41:10.806352 2026] [:error] [pid 50889:tid 50899] [client 4.225.204.143:57340] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "afCc1ozszBr00txEzGg8ggAAAAc"]
[Tue Apr 28 19:41:11.386489 2026] [:error] [pid 50889:tid 50912] [client 4.225.204.143:55957] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "afCc14zszBr00txEzGg8hgAAABQ"]
[Tue Apr 28 19:41:12.026009 2026] [:error] [pid 33776:tid 33814] [client 4.225.204.143:59576] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "afCc2F-bEJ2CKP3iKAAsIgAAAEY"]
[Tue Apr 28 19:41:12.746343 2026] [:error] [pid 50889:tid 50914] [client 4.225.204.143:31164] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afCc2IzszBr00txEzGg8hwAAABY"]
[Tue Apr 28 19:41:13.359641 2026] [:error] [pid 50889:tid 50909] [client 4.225.204.143:31122] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afCc2YzszBr00txEzGg8iQAAABE"]
[Tue Apr 28 19:41:13.946838 2026] [:error] [pid 33776:tid 33818] [client 4.225.204.143:55968] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afCc2V-bEJ2CKP3iKAAsJAAAAEo"]
[Tue Apr 28 19:41:14.509828 2026] [:error] [pid 33776:tid 33817] [client 4.225.204.143:55940] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afCc2l-bEJ2CKP3iKAAsJQAAAEk"]
[Tue Apr 28 19:41:15.058717 2026] [:error] [pid 2741:tid 2769] [client 4.225.204.143:24550] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afCc2_p92FeOz1h6ILzlQgAAAVc"]
[Tue Apr 28 19:41:15.640106 2026] [:error] [pid 33775:tid 33781] [client 4.225.204.143:55958] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afCc25sYOcoQrq88YbUonQAAAMI"]
[Tue Apr 28 19:41:16.359151 2026] [:error] [pid 2741:tid 2765] [client 4.225.204.143:57305] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afCc3Pp92FeOz1h6ILzlQwAAAVM"]
[Tue Apr 28 19:41:17.032246 2026] [:error] [pid 33864:tid 33871] [client 4.225.204.143:24547] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afCc3TXchLGZ4QggCskYgwAAAIU"]
[Tue Apr 28 19:41:17.638884 2026] [:error] [pid 2741:tid 2749] [client 4.225.204.143:31105] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afCc3fp92FeOz1h6ILzlRQAAAUM"]
[Tue Apr 28 19:41:18.217675 2026] [:error] [pid 33864:tid 33883] [client 4.225.204.143:62871] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afCc3jXchLGZ4QggCskYhQAAAJE"]
[Tue Apr 28 19:41:18.846890 2026] [:error] [pid 2741:tid 2755] [client 4.225.204.143:55945] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afCc3vp92FeOz1h6ILzlSAAAAUk"]
[Tue Apr 28 19:41:19.462231 2026] [:error] [pid 2741:tid 2763] [client 4.225.204.143:59528] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afCc3_p92FeOz1h6ILzlTQAAAVE"]
[Tue Apr 28 19:41:20.261312 2026] [:error] [pid 2741:tid 2770] [client 4.225.204.143:26022] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afCc4Pp92FeOz1h6ILzlTgAAAVg"]
[Tue Apr 28 19:41:20.873054 2026] [:error] [pid 33777:tid 33843] [client 4.225.204.143:57291] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afCc4LXUCFWqmordGGLOqgAAAQg"]
[Tue Apr 28 19:41:21.526747 2026] [:error] [pid 33777:tid 33854] [client 4.225.204.143:57286] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afCc4bXUCFWqmordGGLOqwAAARM"]
[Tue Apr 28 19:41:22.147319 2026] [:error] [pid 33864:tid 33886] [client 4.225.204.143:24556] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afCc4jXchLGZ4QggCskYhwAAAJQ"]
[Tue Apr 28 19:41:22.788567 2026] [:error] [pid 33777:tid 33840] [client 4.225.204.143:59557] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afCc4rXUCFWqmordGGLOrgAAAQU"]
[Tue Apr 28 19:41:23.316412 2026] [:error] [pid 2741:tid 2750] [client 4.225.204.143:24554] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afCc4_p92FeOz1h6ILzlVQAAAUQ"]
[Tue Apr 28 19:41:24.046964 2026] [:error] [pid 33864:tid 33888] [client 4.225.204.143:26047] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afCc5DXchLGZ4QggCskYjAAAAJY"]
[Tue Apr 28 19:41:24.808559 2026] [:error] [pid 33864:tid 33878] [client 4.225.204.143:8317] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afCc5DXchLGZ4QggCskYjgAAAIw"]
[Tue Apr 28 19:41:25.394542 2026] [:error] [pid 33776:tid 33808] [client 4.225.204.143:52824] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afCc5V-bEJ2CKP3iKAAsKwAAAEA"]
[Tue Apr 28 19:41:25.989794 2026] [:error] [pid 50889:tid 50907] [client 4.225.204.143:55942] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afCc5YzszBr00txEzGg8lQAAAA8"]
[Tue Apr 28 19:41:26.765760 2026] [:error] [pid 2741:tid 2769] [client 4.225.204.143:31124] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afCc5vp92FeOz1h6ILzlZgAAAVc"]
[Tue Apr 28 19:41:27.570302 2026] [:error] [pid 33776:tid 33811] [client 4.225.204.143:59579] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afCc51-bEJ2CKP3iKAAsLwAAAEM"]
[Tue Apr 28 19:41:28.224731 2026] [:error] [pid 50889:tid 50915] [client 4.225.204.143:62117] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afCc6IzszBr00txEzGg8lgAAABc"]
[Tue Apr 28 19:41:28.848476 2026] [:error] [pid 2741:tid 2768] [client 4.225.204.143:59558] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afCc6Pp92FeOz1h6ILzlbgAAAVY"]
[Tue Apr 28 19:41:29.483227 2026] [:error] [pid 33775:tid 33799] [client 4.225.204.143:26005] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afCc6ZsYOcoQrq88YbUopAAAANQ"]
[Tue Apr 28 19:41:30.111420 2026] [:error] [pid 33864:tid 33884] [client 4.225.204.143:8985] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afCc6jXchLGZ4QggCskYkAAAAJI"]
[Tue Apr 28 19:41:30.716514 2026] [:error] [pid 50889:tid 50892] [client 4.225.204.143:62877] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afCc6ozszBr00txEzGg8mQAAAAA"]
[Tue Apr 28 19:41:31.411760 2026] [:error] [pid 2741:tid 2750] [client 4.225.204.143:57302] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afCc6_p92FeOz1h6ILzldQAAAUQ"]
[Tue Apr 28 19:41:32.010105 2026] [:error] [pid 2741:tid 2760] [client 4.225.204.143:57323] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afCc7Pp92FeOz1h6ILzldwAAAU4"]
[Tue Apr 28 19:41:32.683083 2026] [:error] [pid 2741:tid 2763] [client 4.225.204.143:52837] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afCc7Pp92FeOz1h6ILzlegAAAVE"]
[Tue Apr 28 19:41:33.386439 2026] [:error] [pid 33776:tid 33823] [client 4.225.204.143:8994] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afCc7V-bEJ2CKP3iKAAsNAAAAE8"]
[Tue Apr 28 19:41:34.011865 2026] [:error] [pid 2741:tid 2747] [client 4.225.204.143:24543] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afCc7vp92FeOz1h6ILzlfAAAAUE"]
[Tue Apr 28 19:41:34.821888 2026] [:error] [pid 33777:tid 33835] [client 4.225.204.143:62889] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afCc7rXUCFWqmordGGLOtAAAAQA"]
[Tue Apr 28 19:41:35.504322 2026] [:error] [pid 33777:tid 33847] [client 4.225.204.143:59552] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afCc77XUCFWqmordGGLOtQAAAQw"]
[Tue Apr 28 19:41:36.170735 2026] [:error] [pid 2741:tid 2760] [client 4.225.204.143:59580] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afCc8Pp92FeOz1h6ILzlfQAAAU4"]
[Tue Apr 28 19:41:36.847170 2026] [:error] [pid 33777:tid 33841] [client 4.225.204.143:31123] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afCc8LXUCFWqmordGGLOvAAAAQY"]
[Tue Apr 28 19:41:37.548221 2026] [:error] [pid 33777:tid 33850] [client 4.225.204.143:55939] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afCc8bXUCFWqmordGGLOvwAAAQ8"]
[Tue Apr 28 19:41:38.364597 2026] [:error] [pid 2741:tid 2768] [client 4.225.204.143:31111] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afCc8vp92FeOz1h6ILzlfwAAAVY"]
[Tue Apr 28 19:41:38.985831 2026] [:error] [pid 33777:tid 33845] [client 4.225.204.143:59537] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afCc8rXUCFWqmordGGLOwwAAAQo"]
[Tue Apr 28 19:41:39.767162 2026] [:error] [pid 50889:tid 50916] [client 4.225.204.143:31167] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afCc84zszBr00txEzGg8mgAAABg"]
[Tue Apr 28 19:41:40.482058 2026] [:error] [pid 2741:tid 2761] [client 4.225.204.143:31121] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afCc9Pp92FeOz1h6ILzlhAAAAU8"]
[Tue Apr 28 19:41:41.418614 2026] [:error] [pid 2741:tid 2762] [client 4.225.204.143:31133] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afCc9fp92FeOz1h6ILzlhwAAAVA"]
[Tue Apr 28 19:41:42.338883 2026] [:error] [pid 33777:tid 33837] [client 4.225.204.143:8960] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afCc9rXUCFWqmordGGLOzQAAAQI"]
[Tue Apr 28 19:41:42.990320 2026] [:error] [pid 33776:tid 33821] [client 4.225.204.143:26024] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afCc9l-bEJ2CKP3iKAAsOgAAAE0"]
[Tue Apr 28 19:41:43.701795 2026] [:error] [pid 33776:tid 33823] [client 4.225.204.143:62849] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afCc91-bEJ2CKP3iKAAsOwAAAE8"]
[Tue Apr 28 19:41:44.583207 2026] [:error] [pid 33775:tid 33796] [client 4.225.204.143:26014] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afCc-JsYOcoQrq88YbUoqwAAANE"]
[Tue Apr 28 19:41:45.242036 2026] [:error] [pid 2741:tid 2748] [client 4.225.204.143:65334] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afCc-fp92FeOz1h6ILzljwAAAUI"]
[Tue Apr 28 19:41:45.934632 2026] [:error] [pid 33776:tid 33810] [client 4.225.204.143:26029] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afCc-V-bEJ2CKP3iKAAsPgAAAEI"]
[Tue Apr 28 19:41:47.243080 2026] [:error] [pid 33775:tid 33782] [client 4.225.204.143:57313] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afCc-5sYOcoQrq88YbUorgAAAMM"]
[Tue Apr 28 19:41:47.876159 2026] [:error] [pid 33775:tid 33779] [client 4.225.204.143:62891] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afCc-5sYOcoQrq88YbUosAAAAMA"]
[Tue Apr 28 19:41:48.832545 2026] [:error] [pid 2741:tid 2750] [client 4.225.204.143:52843] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afCc_Pp92FeOz1h6ILzllQAAAUQ"]
[Tue Apr 28 19:41:49.620627 2026] [:error] [pid 50889:tid 50914] [client 4.225.204.143:44998] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afCc_YzszBr00txEzGg8oAAAABY"]
[Tue Apr 28 19:41:50.460292 2026] [:error] [pid 33777:tid 33838] [client 4.225.204.143:24544] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afCc_rXUCFWqmordGGLO0QAAAQM"]
[Tue Apr 28 19:41:51.288757 2026] [:error] [pid 2741:tid 2767] [client 4.225.204.143:57300] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afCc__p92FeOz1h6ILzlmwAAAVU"]
[Tue Apr 28 19:41:52.083656 2026] [:error] [pid 33864:tid 33877] [client 4.225.204.143:62866] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afCdADXchLGZ4QggCskYlgAAAIs"]
[Tue Apr 28 19:41:52.716772 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:59578] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afCdALXUCFWqmordGGLO2QAAARY"]
[Tue Apr 28 19:41:53.300983 2026] [:error] [pid 33775:tid 33788] [client 4.225.204.143:57280] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afCdAZsYOcoQrq88YbUotgAAAMk"]
[Tue Apr 28 19:41:53.922293 2026] [:error] [pid 2741:tid 2758] [client 4.225.204.143:31120] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afCdAfp92FeOz1h6ILzlpQAAAUw"]
[Tue Apr 28 19:41:54.471450 2026] [:error] [pid 50889:tid 50898] [client 4.225.204.143:24542] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afCdAozszBr00txEzGg8owAAAAY"]
[Tue Apr 28 19:41:55.068450 2026] [:error] [pid 33777:tid 33858] [client 4.225.204.143:9017] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afCdA7XUCFWqmordGGLO3QAAARc"]
[Tue Apr 28 19:41:55.772047 2026] [:error] [pid 33776:tid 33810] [client 4.225.204.143:25999] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afCdA1-bEJ2CKP3iKAAsRgAAAEI"]
[Tue Apr 28 19:41:56.549135 2026] [:error] [pid 33777:tid 33844] [client 4.225.204.143:8380] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afCdBLXUCFWqmordGGLO4QAAAQk"]
[Tue Apr 28 19:41:57.320421 2026] [:error] [pid 33777:tid 33854] [client 4.225.204.143:62884] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afCdBbXUCFWqmordGGLO4wAAARM"]
[Tue Apr 28 19:41:57.966259 2026] [:error] [pid 33777:tid 33842] [client 4.225.204.143:59568] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afCdBbXUCFWqmordGGLO5gAAAQc"]
[Tue Apr 28 19:41:59.049734 2026] [:error] [pid 33776:tid 33828] [client 4.225.204.143:31158] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afCdB1-bEJ2CKP3iKAAsRwAAAFQ"]
[Tue Apr 28 19:41:59.768510 2026] [:error] [pid 50889:tid 50894] [client 4.225.204.143:24534] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afCdB4zszBr00txEzGg8qAAAAAI"]
[Tue Apr 28 19:42:00.409061 2026] [:error] [pid 33864:tid 33870] [client 4.225.204.143:31111] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeaq.php"] [unique_id "afCdCDXchLGZ4QggCskYnAAAAIQ"]
[Tue Apr 28 19:42:01.009303 2026] [:error] [pid 50889:tid 50900] [client 4.225.204.143:57297] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeaq.php"] [unique_id "afCdCYzszBr00txEzGg8rAAAAAg"]
[Tue Apr 28 19:42:01.710572 2026] [:error] [pid 2741:tid 2754] [client 4.225.204.143:62865] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeaq.php"] [unique_id "afCdCfp92FeOz1h6ILzlqwAAAUg"]
[Tue Apr 28 19:42:02.315761 2026] [:error] [pid 33777:tid 33841] [client 4.225.204.143:62902] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeaq.php"] [unique_id "afCdCrXUCFWqmordGGLO7gAAAQY"]
[Tue Apr 28 19:42:03.035956 2026] [:error] [pid 33777:tid 33839] [client 4.225.204.143:62868] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up2.php"] [unique_id "afCdC7XUCFWqmordGGLO8QAAAQQ"]
[Tue Apr 28 19:42:03.716729 2026] [:error] [pid 33776:tid 33829] [client 4.225.204.143:57308] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up2.php"] [unique_id "afCdC1-bEJ2CKP3iKAAsTQAAAFU"]
[Tue Apr 28 19:42:04.394869 2026] [:error] [pid 33777:tid 33846] [client 4.225.204.143:57315] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up2.php"] [unique_id "afCdDLXUCFWqmordGGLO8gAAAQs"]
[Tue Apr 28 19:42:05.280092 2026] [:error] [pid 33776:tid 33827] [client 4.225.204.143:59582] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up2.php"] [unique_id "afCdDV-bEJ2CKP3iKAAsUQAAAFM"]
[Tue Apr 28 19:42:06.215513 2026] [:error] [pid 33864:tid 33876] [client 4.225.204.143:24570] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afCdDjXchLGZ4QggCskYoAAAAIo"]
[Tue Apr 28 19:42:06.968932 2026] [:error] [pid 33777:tid 33840] [client 4.225.204.143:31157] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afCdDrXUCFWqmordGGLO9gAAAQU"]
[Tue Apr 28 19:42:07.804455 2026] [:error] [pid 2741:tid 2752] [client 4.225.204.143:55962] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afCdD_p92FeOz1h6ILzlrgAAAUY"]
[Tue Apr 28 19:42:08.517745 2026] [:error] [pid 2741:tid 2755] [client 4.225.204.143:57343] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afCdEPp92FeOz1h6ILzlsAAAAUk"]
[Tue Apr 28 19:42:16.375353 2026] [:error] [pid 33776:tid 33821] [client 4.225.204.143:24575] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afCdGF-bEJ2CKP3iKAAsbQAAAE0"]
[Tue Apr 28 19:42:17.687670 2026] [:error] [pid 50889:tid 50895] [client 4.225.204.143:59643] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afCdGYzszBr00txEzGg8tQAAAAM"]
[Tue Apr 28 19:42:18.444286 2026] [:error] [pid 2741:tid 2760] [client 4.225.204.143:59588] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afCdGvp92FeOz1h6ILzlxgAAAU4"]
[Tue Apr 28 19:42:19.423868 2026] [:error] [pid 50889:tid 50911] [client 4.225.204.143:59540] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afCdG4zszBr00txEzGg8ugAAABM"]
[Tue Apr 28 19:42:20.315442 2026] [:error] [pid 33775:tid 33789] [client 4.225.204.143:24033] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afCdHJsYOcoQrq88YbUowQAAAMo"]
[Tue Apr 28 19:42:21.771256 2026] [:error] [pid 33777:tid 33850] [client 4.225.204.143:59595] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afCdHbXUCFWqmordGGLPFQAAAQ8"]
[Tue Apr 28 19:42:23.185088 2026] [:error] [pid 33776:tid 33826] [client 4.225.204.143:59621] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afCdH1-bEJ2CKP3iKAAsjgAAAFI"]
[Tue Apr 28 19:42:23.917298 2026] [:error] [pid 33777:tid 33859] [client 4.225.204.143:59535] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afCdH7XUCFWqmordGGLPHgAAARg"]
[Tue Apr 28 19:42:25.452210 2026] [:error] [pid 33777:tid 33847] [client 4.225.204.143:32215] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "afCdIbXUCFWqmordGGLPJAAAAQw"]
[Tue Apr 28 19:42:26.174094 2026] [:error] [pid 2741:tid 2762] [client 4.225.204.143:24057] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "afCdIvp92FeOz1h6ILzl9wAAAVA"]
[Tue Apr 28 19:42:27.093942 2026] [:error] [pid 2741:tid 2757] [client 4.225.204.143:45055] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "afCdI_p92FeOz1h6ILzl-AAAAUs"]
[Tue Apr 28 19:42:28.037823 2026] [:error] [pid 33777:tid 33859] [client 4.225.204.143:59636] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "afCdJLXUCFWqmordGGLPKwAAARg"]
[Tue Apr 28 19:42:29.392377 2026] [:error] [pid 50889:tid 50905] [client 4.225.204.143:59608] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "afCdJYzszBr00txEzGg8zAAAAA0"]
[Tue Apr 28 19:42:30.596788 2026] [:error] [pid 33864:tid 33881] [client 4.225.204.143:32205] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "afCdJjXchLGZ4QggCskYswAAAI8"]
[Tue Apr 28 19:42:31.480080 2026] [:error] [pid 2741:tid 2766] [client 4.225.204.143:32202] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "afCdJ_p92FeOz1h6ILzl_gAAAVQ"]
[Tue Apr 28 19:42:32.373191 2026] [:error] [pid 2741:tid 2755] [client 4.225.204.143:8240] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "afCdKPp92FeOz1h6ILzmAAAAAUk"]
[Tue Apr 28 19:42:33.399858 2026] [:error] [pid 2741:tid 2768] [client 4.225.204.143:28021] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afCdKfp92FeOz1h6ILzmBQAAAVY"]
[Tue Apr 28 19:42:34.903208 2026] [:error] [pid 33777:tid 33850] [client 4.225.204.143:9210] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afCdKrXUCFWqmordGGLPOwAAAQ8"]
[Tue Apr 28 19:42:35.667693 2026] [:error] [pid 33777:tid 33849] [client 4.225.204.143:8770] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afCdK7XUCFWqmordGGLPPwAAAQ4"]
[Tue Apr 28 19:42:36.354995 2026] [:error] [pid 33776:tid 33832] [client 4.225.204.143:22005] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afCdLF-bEJ2CKP3iKAAsnwAAAFg"]
[Tue Apr 28 19:42:37.317283 2026] [:error] [pid 50889:tid 50903] [client 4.225.204.143:34669] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afCdLYzszBr00txEzGg80gAAAAs"]
[Tue Apr 28 19:42:38.103757 2026] [:error] [pid 50889:tid 50913] [client 4.225.204.143:27990] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afCdLozszBr00txEzGg81gAAABU"]
[Tue Apr 28 19:42:38.807680 2026] [:error] [pid 33864:tid 33866] [client 4.225.204.143:22014] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afCdLjXchLGZ4QggCskYvgAAAIA"]
[Tue Apr 28 19:42:39.448354 2026] [:error] [pid 2741:tid 2765] [client 4.225.204.143:34644] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afCdL_p92FeOz1h6ILzmEgAAAVM"]
[Tue Apr 28 19:42:40.202778 2026] [:error] [pid 33864:tid 33874] [client 4.225.204.143:37804] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afCdMDXchLGZ4QggCskYwgAAAIg"]
[Tue Apr 28 19:42:40.841895 2026] [:error] [pid 33864:tid 33877] [client 4.225.204.143:21985] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afCdMDXchLGZ4QggCskYwwAAAIs"]
[Tue Apr 28 19:42:41.725004 2026] [:error] [pid 33775:tid 33789] [client 4.225.204.143:30170] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afCdMZsYOcoQrq88YbUoxwAAAMo"]
[Tue Apr 28 19:42:42.625007 2026] [:error] [pid 2741:tid 2760] [client 4.225.204.143:37804] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afCdMvp92FeOz1h6ILzmGAAAAU4"]
[Tue Apr 28 19:42:43.582051 2026] [:error] [pid 2741:tid 2752] [client 4.225.204.143:55324] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afCdM_p92FeOz1h6ILzmGwAAAUY"]
[Tue Apr 28 19:42:44.737797 2026] [:error] [pid 33777:tid 33854] [client 4.225.204.143:64727] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afCdNLXUCFWqmordGGLPVAAAARM"]
[Tue Apr 28 19:42:45.528485 2026] [:error] [pid 33777:tid 33835] [client 4.225.204.143:22505] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afCdNbXUCFWqmordGGLPWQAAAQA"]
[Tue Apr 28 19:42:46.481401 2026] [:error] [pid 2741:tid 2747] [client 4.225.204.143:23054] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afCdNvp92FeOz1h6ILzmHwAAAUE"]
[Tue Apr 28 19:42:48.339008 2026] [:error] [pid 33775:tid 33780] [client 4.225.204.143:29632] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "afCdOJsYOcoQrq88YbUoygAAAME"]
[Tue Apr 28 19:42:49.215031 2026] [:error] [pid 33777:tid 33838] [client 4.225.204.143:22515] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "afCdObXUCFWqmordGGLPXQAAAQM"]
[Tue Apr 28 19:42:50.114248 2026] [:error] [pid 33777:tid 33846] [client 4.225.204.143:24621] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "afCdOrXUCFWqmordGGLPYgAAAQs"]
[Tue Apr 28 19:42:51.408361 2026] [:error] [pid 33864:tid 33866] [client 4.225.204.143:23102] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "afCdOzXchLGZ4QggCskY6AAAAIA"]
[Tue Apr 28 19:42:52.673826 2026] [:error] [pid 50889:tid 50897] [client 4.225.204.143:29671] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "afCdPIzszBr00txEzGg8-QAAAAU"]
[Tue Apr 28 19:42:53.991339 2026] [:error] [pid 50889:tid 50901] [client 4.225.204.143:46852] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "afCdPYzszBr00txEzGg8_AAAAAk"]
[Tue Apr 28 19:42:56.002982 2026] [:error] [pid 33776:tid 33814] [client 4.225.204.143:25446] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "afCdQF-bEJ2CKP3iKAAspQAAAEY"]
[Tue Apr 28 19:42:58.745900 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:8445] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "afCdQrXUCFWqmordGGLPggAAARY"]
[Tue Apr 28 19:43:01.038476 2026] [:error] [pid 33864:tid 33880] [client 4.225.204.143:8424] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afCdRTXchLGZ4QggCskY8wAAAI4"]
[Tue Apr 28 19:43:02.266145 2026] [:error] [pid 33777:tid 33846] [client 4.225.204.143:46898] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afCdRrXUCFWqmordGGLPhgAAAQs"]
[Tue Apr 28 19:43:03.357395 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:25450] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afCdR7XUCFWqmordGGLPiQAAARY"]
[Tue Apr 28 19:43:04.514998 2026] [:error] [pid 33776:tid 33818] [client 4.225.204.143:44371] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afCdSF-bEJ2CKP3iKAAsqQAAAEo"]
[Tue Apr 28 19:43:05.919576 2026] [:error] [pid 33777:tid 33844] [client 4.225.204.143:8431] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afCdSbXUCFWqmordGGLPpwAAAQk"]
[Tue Apr 28 19:43:07.228784 2026] [:error] [pid 33777:tid 33843] [client 4.225.204.143:46880] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afCdS7XUCFWqmordGGLPqwAAAQg"]
[Tue Apr 28 19:43:09.231707 2026] [:error] [pid 33777:tid 33838] [client 4.225.204.143:46851] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afCdTbXUCFWqmordGGLP1AAAAQM"]
[Tue Apr 28 19:43:12.449490 2026] [:error] [pid 2741:tid 2770] [client 4.225.204.143:8712] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afCdUPp92FeOz1h6ILzmPwAAAVg"]
[Tue Apr 28 19:43:13.824370 2026] [:error] [pid 2741:tid 2766] [client 4.225.204.143:25454] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afCdUfp92FeOz1h6ILzmQwAAAVQ"]
[Tue Apr 28 19:43:14.786555 2026] [:error] [pid 33775:tid 33798] [client 4.225.204.143:38470] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afCdUpsYOcoQrq88YbUo1gAAANM"]
[Tue Apr 28 19:43:15.972673 2026] [:error] [pid 33775:tid 33799] [client 4.225.204.143:38521] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afCdU5sYOcoQrq88YbUo3QAAANQ"]
[Tue Apr 28 19:43:31.115810 2026] [:error] [pid 33777:tid 33845] [client 4.225.204.143:8433] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afCdY7XUCFWqmordGGLQEAAAAQo"]
[Tue Apr 28 19:43:32.531047 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:8945] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afCdZLXUCFWqmordGGLQEwAAARY"]
[Tue Apr 28 19:43:33.651708 2026] [:error] [pid 2741:tid 2757] [client 4.225.204.143:8893] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afCdZfp92FeOz1h6ILzmTwAAAUs"]
[Tue Apr 28 19:43:35.289744 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:64138] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afCdZ7XUCFWqmordGGLQHQAAARY"]
[Tue Apr 28 19:43:36.186306 2026] [:error] [pid 2741:tid 2769] [client 4.225.204.143:64139] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afCdaPp92FeOz1h6ILzmUAAAAVc"]
[Tue Apr 28 19:43:37.115115 2026] [:error] [pid 2741:tid 2766] [client 4.225.204.143:35889] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afCdafp92FeOz1h6ILzmUQAAAVQ"]
[Tue Apr 28 19:43:37.897273 2026] [:error] [pid 2741:tid 2753] [client 4.225.204.143:27538] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afCdafp92FeOz1h6ILzmVAAAAUc"]
[Tue Apr 28 19:43:38.784836 2026] [:error] [pid 50889:tid 50907] [client 4.225.204.143:64150] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afCdaozszBr00txEzGg9MQAAAA8"]
[Tue Apr 28 19:43:39.857402 2026] [:error] [pid 33775:tid 33781] [client 4.225.204.143:64135] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afCda5sYOcoQrq88YbUo8QAAAMI"]
[Tue Apr 28 19:43:40.618065 2026] [:error] [pid 50889:tid 50893] [client 4.225.204.143:44385] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afCdbIzszBr00txEzGg9NAAAAAE"]
[Tue Apr 28 19:43:41.679306 2026] [:error] [pid 33775:tid 33790] [client 4.225.204.143:38514] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afCdbZsYOcoQrq88YbUo8gAAAMs"]
[Tue Apr 28 19:43:42.993260 2026] [:error] [pid 50889:tid 50912] [client 4.225.204.143:35856] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afCdbozszBr00txEzGg9OAAAABQ"]
[Tue Apr 28 19:43:43.887826 2026] [:error] [pid 50889:tid 50915] [client 4.225.204.143:64147] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afCdb4zszBr00txEzGg9OwAAABc"]
[Tue Apr 28 19:43:44.811624 2026] [:error] [pid 33777:tid 33853] [client 4.225.204.143:24556] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afCdcLXUCFWqmordGGLQHwAAARI"]
[Tue Apr 28 19:43:45.647357 2026] [:error] [pid 33777:tid 33836] [client 4.225.204.143:44398] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afCdcbXUCFWqmordGGLQIQAAAQE"]
[Tue Apr 28 19:43:46.855766 2026] [:error] [pid 2741:tid 2757] [client 4.225.204.143:51130] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afCdcvp92FeOz1h6ILzmVwAAAUs"]
[Tue Apr 28 19:43:48.527031 2026] [:error] [pid 2741:tid 2763] [client 4.225.204.143:23495] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afCddPp92FeOz1h6ILzmWQAAAVE"]
[Tue Apr 28 19:43:49.907367 2026] [:error] [pid 2741:tid 2750] [client 4.225.204.143:27547] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afCddfp92FeOz1h6ILzmXQAAAUQ"]
[Tue Apr 28 19:43:51.544555 2026] [:error] [pid 33775:tid 33803] [client 4.225.204.143:27527] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afCdd5sYOcoQrq88YbUo9AAAANg"]
[Tue Apr 28 19:43:52.556240 2026] [:error] [pid 33776:tid 33813] [client 4.225.204.143:38471] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afCdeF-bEJ2CKP3iKAAszwAAAEU"]
[Tue Apr 28 19:43:53.859691 2026] [:error] [pid 2741:tid 2754] [client 4.225.204.143:46322] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCdefp92FeOz1h6ILzmYAAAAUg"]
[Tue Apr 28 19:43:55.081467 2026] [:error] [pid 2741:tid 2770] [client 4.225.204.143:23507] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCde_p92FeOz1h6ILzmZAAAAVg"]
[Tue Apr 28 19:43:56.327740 2026] [:error] [pid 2741:tid 2746] [client 4.225.204.143:64146] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCdfPp92FeOz1h6ILzmaAAAAUA"]
[Tue Apr 28 19:43:57.045310 2026] [:error] [pid 2741:tid 2768] [client 4.225.204.143:8932] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afCdffp92FeOz1h6ILzmagAAAVY"]
[Tue Apr 28 19:43:57.809390 2026] [:error] [pid 33864:tid 33883] [client 4.225.204.143:51077] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "afCdfTXchLGZ4QggCskZBQAAAJE"]
[Tue Apr 28 19:43:58.661278 2026] [:error] [pid 33776:tid 33822] [client 4.225.204.143:27577] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "afCdfl-bEJ2CKP3iKAAs1QAAAE4"]
[Tue Apr 28 19:44:00.139853 2026] [:error] [pid 33777:tid 33843] [client 4.225.204.143:8956] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "afCdgLXUCFWqmordGGLQJwAAAQg"]
[Tue Apr 28 19:44:00.911865 2026] [:error] [pid 2741:tid 2752] [client 4.225.204.143:64184] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "afCdgPp92FeOz1h6ILzmbAAAAUY"]
[Tue Apr 28 19:44:01.980803 2026] [:error] [pid 33864:tid 33890] [client 4.225.204.143:27565] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "afCdgTXchLGZ4QggCskZCgAAAJg"]
[Tue Apr 28 19:44:03.098651 2026] [:error] [pid 33775:tid 33789] [client 4.225.204.143:64179] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "afCdg5sYOcoQrq88YbUo_QAAAMo"]
[Tue Apr 28 19:44:04.249431 2026] [:error] [pid 50889:tid 50913] [client 4.225.204.143:39002] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "afCdhIzszBr00txEzGg9SgAAABU"]
[Tue Apr 28 19:44:05.947122 2026] [:error] [pid 2741:tid 2765] [client 4.225.204.143:64152] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "afCdhfp92FeOz1h6ILzmbQAAAVM"]
[Tue Apr 28 19:44:07.255948 2026] [:error] [pid 2741:tid 2756] [client 4.225.204.143:38986] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afCdh_p92FeOz1h6ILzmbwAAAUo"]
[Tue Apr 28 19:44:08.007922 2026] [:error] [pid 33775:tid 33780] [client 4.225.204.143:61117] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afCdiJsYOcoQrq88YbUpAgAAAME"]
[Tue Apr 28 19:44:09.217744 2026] [:error] [pid 33864:tid 33881] [client 4.225.204.143:50047] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afCdiTXchLGZ4QggCskZGgAAAI8"]
[Tue Apr 28 19:44:10.602635 2026] [:error] [pid 50889:tid 50895] [client 4.225.204.143:38995] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afCdiozszBr00txEzGg9TAAAAAM"]
[Tue Apr 28 19:44:11.517411 2026] [:error] [pid 33777:tid 33852] [client 4.225.204.143:23550] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afCdi7XUCFWqmordGGLQLAAAARE"]
[Tue Apr 28 19:44:13.268254 2026] [:error] [pid 33777:tid 33856] [client 4.225.204.143:61068] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afCdjbXUCFWqmordGGLQMAAAARU"]
[Tue Apr 28 19:44:14.939728 2026] [:error] [pid 50889:tid 50913] [client 4.225.204.143:61092] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afCdjozszBr00txEzGg9UAAAABU"]
[Tue Apr 28 19:44:17.234642 2026] [:error] [pid 50889:tid 50898] [client 4.225.204.143:38978] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afCdkYzszBr00txEzGg9VAAAAAY"]
[Tue Apr 28 19:44:18.850555 2026] [:error] [pid 33864:tid 33874] [client 4.225.204.143:39872] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afCdkjXchLGZ4QggCskZIwAAAIg"]
[Tue Apr 28 19:44:19.963337 2026] [:error] [pid 33777:tid 33841] [client 4.225.204.143:46304] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afCdk7XUCFWqmordGGLQVQAAAQY"]
[Tue Apr 28 19:44:20.808140 2026] [:error] [pid 50889:tid 50894] [client 4.225.204.143:46320] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afCdlIzszBr00txEzGg9VgAAAAI"]
[Tue Apr 28 19:44:21.561553 2026] [:error] [pid 33776:tid 33826] [client 4.225.204.143:23491] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afCdlV-bEJ2CKP3iKAAs6gAAAFI"]
[Tue Apr 28 19:44:23.015981 2026] [:error] [pid 33776:tid 33815] [client 4.225.204.143:46309] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afCdl1-bEJ2CKP3iKAAs7gAAAEc"]
[Tue Apr 28 19:44:25.028578 2026] [:error] [pid 33864:tid 33887] [client 4.225.204.143:64168] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afCdmTXchLGZ4QggCskZLgAAAJU"]
[Tue Apr 28 19:44:26.243639 2026] [:error] [pid 2741:tid 2764] [client 4.225.204.143:31178] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afCdmvp92FeOz1h6ILzmdgAAAVI"]
[Tue Apr 28 19:44:38.623192 2026] [:error] [pid 33777:tid 33847] [client 4.225.204.143:39036] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afCdprXUCFWqmordGGLQfwAAAQw"]
[Tue Apr 28 19:44:40.824392 2026] [:error] [pid 33777:tid 33852] [client 4.225.204.143:31168] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afCdqLXUCFWqmordGGLQgQAAARE"]
[Tue Apr 28 19:44:41.557016 2026] [:error] [pid 33777:tid 33841] [client 4.225.204.143:63385] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afCdqbXUCFWqmordGGLQgwAAAQY"]
[Tue Apr 28 19:44:43.400521 2026] [:error] [pid 33777:tid 33835] [client 4.225.204.143:46300] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afCdq7XUCFWqmordGGLQhAAAAQA"]
[Tue Apr 28 19:44:44.109528 2026] [:error] [pid 50889:tid 50904] [client 4.225.204.143:49998] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCdrIzszBr00txEzGg9XgAAAAw"]
[Tue Apr 28 19:44:45.484720 2026] [:error] [pid 33775:tid 33787] [client 4.225.204.143:23535] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCdrZsYOcoQrq88YbUpDAAAAMg"]
[Tue Apr 28 19:44:46.335578 2026] [:error] [pid 33864:tid 33884] [client 4.225.204.143:23529] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCdrjXchLGZ4QggCskZNAAAAJI"]
[Tue Apr 28 19:44:47.512719 2026] [:error] [pid 33864:tid 33887] [client 4.225.204.143:27550] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afCdrzXchLGZ4QggCskZNQAAAJU"]
[Tue Apr 28 19:44:49.968463 2026] [:error] [pid 33864:tid 33882] [client 4.225.204.143:46885] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCdsTXchLGZ4QggCskZNgAAAJA"]
[Tue Apr 28 19:44:50.939040 2026] [:error] [pid 33775:tid 33803] [client 4.225.204.143:35887] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCdspsYOcoQrq88YbUpDgAAANg"]
[Tue Apr 28 19:44:52.386473 2026] [:error] [pid 50889:tid 50905] [client 4.225.204.143:50037] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCdtIzszBr00txEzGg9ZQAAAA0"]
[Tue Apr 28 19:44:53.902794 2026] [:error] [pid 2741:tid 2748] [client 4.225.204.143:32314] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afCdtfp92FeOz1h6ILzmjwAAAUI"]
[Tue Apr 28 19:44:55.319129 2026] [:error] [pid 33775:tid 33799] [client 4.225.204.143:36550] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCdt5sYOcoQrq88YbUpEAAAANQ"]
[Tue Apr 28 19:44:57.106048 2026] [:error] [pid 50889:tid 50896] [client 4.225.204.143:25457] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCduYzszBr00txEzGg9swAAAAQ"]
[Tue Apr 28 19:45:00.763627 2026] [:error] [pid 33777:tid 33837] [client 4.225.204.143:25428] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCdvLXUCFWqmordGGLQhwAAAQI"]
[Tue Apr 28 19:45:01.659386 2026] [:error] [pid 2741:tid 2762] [client 4.225.204.143:8404] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afCdvfp92FeOz1h6ILzmnAAAAVA"]
[Tue Apr 28 19:45:02.631391 2026] [:error] [pid 33776:tid 33824] [client 4.225.204.143:39082] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCdvl-bEJ2CKP3iKAAs9wAAAFA"]
[Tue Apr 28 19:45:03.373478 2026] [:error] [pid 33777:tid 33841] [client 4.225.204.143:36549] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCdv7XUCFWqmordGGLQkAAAAQY"]
[Tue Apr 28 19:45:04.171933 2026] [:error] [pid 33777:tid 33859] [client 4.225.204.143:61273] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCdwLXUCFWqmordGGLQkgAAARg"]
[Tue Apr 28 19:45:05.334719 2026] [:error] [pid 33777:tid 33846] [client 4.225.204.143:36578] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCdwbXUCFWqmordGGLQlQAAAQs"]
[Tue Apr 28 19:45:06.569706 2026] [:error] [pid 33777:tid 33836] [client 4.225.204.143:39080] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afCdwrXUCFWqmordGGLQlwAAAQE"]
[Tue Apr 28 19:45:07.669925 2026] [:error] [pid 50889:tid 50916] [client 4.225.204.143:32215] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afCdw4zszBr00txEzGg9vQAAABg"]
[Tue Apr 28 19:45:08.838989 2026] [:error] [pid 33776:tid 33827] [client 4.225.204.143:36544] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afCdxF-bEJ2CKP3iKAAs-wAAAFM"]
[Tue Apr 28 19:45:09.856987 2026] [:error] [pid 33776:tid 33816] [client 4.225.204.143:36606] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afCdxV-bEJ2CKP3iKAAs_AAAAEg"]
[Tue Apr 28 19:45:11.031721 2026] [:error] [pid 33775:tid 33802] [client 4.225.204.143:31157] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCdx5sYOcoQrq88YbUpFwAAANc"]
[Tue Apr 28 19:45:11.811953 2026] [:error] [pid 33776:tid 33832] [client 4.225.204.143:8863] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCdx1-bEJ2CKP3iKAAs_gAAAFg"]
[Tue Apr 28 19:45:13.422525 2026] [:error] [pid 33777:tid 33843] [client 4.225.204.143:8410] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCdybXUCFWqmordGGLQmgAAAQg"]
[Tue Apr 28 19:45:15.161554 2026] [:error] [pid 33776:tid 33822] [client 4.225.204.143:51083] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCdy1-bEJ2CKP3iKAAtAAAAAE4"]
[Tue Apr 28 19:45:16.120693 2026] [:error] [pid 2741:tid 2752] [client 4.225.204.143:36553] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "afCdzPp92FeOz1h6ILzmtAAAAUY"]
[Tue Apr 28 19:45:17.323410 2026] [:error] [pid 33864:tid 33875] [client 4.225.204.143:35858] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "afCdzTXchLGZ4QggCskZRAAAAIk"]
[Tue Apr 28 19:45:18.198976 2026] [:error] [pid 50889:tid 50892] [client 4.225.204.143:35875] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "afCdzozszBr00txEzGg9yQAAAAA"]
[Tue Apr 28 19:45:18.977623 2026] [:error] [pid 2741:tid 2767] [client 4.225.204.143:8396] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "afCdzvp92FeOz1h6ILzmtwAAAVU"]
[Tue Apr 28 19:45:20.353560 2026] [:error] [pid 33776:tid 33828] [client 4.225.204.143:61306] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCd0F-bEJ2CKP3iKAAtAwAAAFQ"]
[Tue Apr 28 19:45:21.199320 2026] [:error] [pid 33776:tid 33809] [client 4.225.204.143:25417] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCd0V-bEJ2CKP3iKAAtBQAAAEE"]
[Tue Apr 28 19:45:22.155594 2026] [:error] [pid 33864:tid 33881] [client 4.225.204.143:32296] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCd0jXchLGZ4QggCskZRwAAAI8"]
[Tue Apr 28 19:45:22.835124 2026] [:error] [pid 33777:tid 33836] [client 4.225.204.143:61260] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afCd0rXUCFWqmordGGLQoQAAAQE"]
[Tue Apr 28 19:45:23.438662 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:61277] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afCd07XUCFWqmordGGLQowAAARY"]
[Tue Apr 28 19:45:24.179095 2026] [:error] [pid 50889:tid 50914] [client 4.225.204.143:46855] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afCd1IzszBr00txEzGg90wAAABY"]
[Tue Apr 28 19:45:25.300106 2026] [:error] [pid 33775:tid 33793] [client 4.225.204.143:46869] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afCd1ZsYOcoQrq88YbUpKQAAAM4"]
[Tue Apr 28 19:45:25.883715 2026] [:error] [pid 2741:tid 2754] [client 4.225.204.143:39079] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afCd1fp92FeOz1h6ILzmuwAAAUg"]
[Tue Apr 28 19:45:26.541119 2026] [:error] [pid 2741:tid 2763] [client 4.225.204.143:39066] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "afCd1vp92FeOz1h6ILzmvAAAAVE"]
[Tue Apr 28 19:45:27.238565 2026] [:error] [pid 50889:tid 50905] [client 4.225.204.143:32272] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "afCd14zszBr00txEzGg91wAAAA0"]
[Tue Apr 28 19:45:28.063409 2026] [:error] [pid 2741:tid 2746] [client 4.225.204.143:61291] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "afCd2Pp92FeOz1h6ILzmvgAAAUA"]
[Tue Apr 28 19:45:28.755644 2026] [:error] [pid 33864:tid 33878] [client 4.225.204.143:39077] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abcd.php"] [unique_id "afCd2DXchLGZ4QggCskZSwAAAIw"]
[Tue Apr 28 19:45:29.511623 2026] [:error] [pid 33775:tid 33787] [client 4.225.204.143:38523] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "afCd2ZsYOcoQrq88YbUpKgAAAMg"]
[Tue Apr 28 19:45:30.350585 2026] [:error] [pid 2741:tid 2762] [client 4.225.204.143:39043] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "afCd2vp92FeOz1h6ILzmvwAAAVA"]
[Tue Apr 28 19:45:31.394372 2026] [:error] [pid 50889:tid 50911] [client 4.225.204.143:39050] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "afCd24zszBr00txEzGg93AAAABM"]
[Tue Apr 28 19:45:32.264645 2026] [:error] [pid 50889:tid 50896] [client 4.225.204.143:35849] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a1.php"] [unique_id "afCd3IzszBr00txEzGg94wAAAAQ"]
[Tue Apr 28 19:45:33.090974 2026] [:error] [pid 33777:tid 33850] [client 4.225.204.143:8402] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "afCd3bXUCFWqmordGGLQqAAAAQ8"]
[Tue Apr 28 19:45:34.236740 2026] [:error] [pid 33776:tid 33827] [client 4.225.204.143:25413] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "afCd3l-bEJ2CKP3iKAAtDAAAAFM"]
[Tue Apr 28 19:45:35.015383 2026] [:error] [pid 33775:tid 33783] [client 4.225.204.143:36548] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "afCd35sYOcoQrq88YbUpLQAAAMQ"]
[Tue Apr 28 19:45:36.214988 2026] [:error] [pid 33864:tid 33884] [client 4.225.204.143:61263] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "afCd4DXchLGZ4QggCskZTQAAAJI"]
[Tue Apr 28 19:45:37.197692 2026] [:error] [pid 33776:tid 33826] [client 4.225.204.143:8866] [client 4.225.204.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afCd4V-bEJ2CKP3iKAAtDgAAAFI"]
[Tue Apr 28 19:45:47.658962 2026] [:error] [pid 33775:tid 33779] [client 4.225.204.143:8882] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afCd65sYOcoQrq88YbUpOQAAAMA"]
[Tue Apr 28 19:45:48.417645 2026] [:error] [pid 33777:tid 33837] [client 4.225.204.143:36586] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afCd7LXUCFWqmordGGLQsAAAAQI"]
[Tue Apr 28 19:45:49.104897 2026] [:error] [pid 33775:tid 33793] [client 4.225.204.143:35892] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afCd7ZsYOcoQrq88YbUpOgAAAM4"]
[Tue Apr 28 19:45:49.842961 2026] [:error] [pid 33775:tid 33795] [client 4.225.204.143:25442] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afCd7ZsYOcoQrq88YbUpOwAAANA"]
[Tue Apr 28 19:45:50.446302 2026] [:error] [pid 2741:tid 2755] [client 4.225.204.143:8403] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afCd7vp92FeOz1h6ILzm5AAAAUk"]
[Tue Apr 28 19:45:51.138508 2026] [:error] [pid 2741:tid 2746] [client 4.225.204.143:46853] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afCd7_p92FeOz1h6ILzm5wAAAUA"]
[Tue Apr 28 19:45:52.110629 2026] [:error] [pid 33776:tid 33812] [client 4.225.204.143:8444] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afCd8F-bEJ2CKP3iKAAtEwAAAEQ"]
[Tue Apr 28 19:45:52.899831 2026] [:error] [pid 2741:tid 2757] [client 4.225.204.143:36546] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afCd8Pp92FeOz1h6ILzm6QAAAUs"]
[Tue Apr 28 19:45:53.790297 2026] [:error] [pid 2741:tid 2769] [client 4.225.204.143:61255] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afCd8fp92FeOz1h6ILzm7gAAAVc"]
[Tue Apr 28 19:45:54.464274 2026] [:error] [pid 2741:tid 2753] [client 4.225.204.143:8894] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afCd8vp92FeOz1h6ILzm7wAAAUc"]
[Tue Apr 28 19:45:55.695589 2026] [:error] [pid 33777:tid 33846] [client 4.225.204.143:36546] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afCd87XUCFWqmordGGLQtgAAAQs"]
[Tue Apr 28 19:45:56.520766 2026] [:error] [pid 33777:tid 33849] [client 4.225.204.143:51074] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afCd9LXUCFWqmordGGLQtwAAAQ4"]
[Tue Apr 28 19:45:57.146300 2026] [:error] [pid 2741:tid 2746] [client 4.225.204.143:36575] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afCd9fp92FeOz1h6ILzm8wAAAUA"]
[Tue Apr 28 19:45:57.805021 2026] [:error] [pid 2741:tid 2748] [client 4.225.204.143:39049] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afCd9fp92FeOz1h6ILzm9AAAAUI"]
[Tue Apr 28 19:45:58.524836 2026] [:error] [pid 33777:tid 33851] [client 4.225.204.143:36573] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afCd9rXUCFWqmordGGLQuwAAARA"]
[Tue Apr 28 19:45:59.396876 2026] [:error] [pid 33777:tid 33847] [client 4.225.204.143:35882] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afCd97XUCFWqmordGGLQvQAAAQw"]
[Tue Apr 28 19:46:00.335682 2026] [:error] [pid 2741:tid 2759] [client 4.225.204.143:25441] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afCd-Pp92FeOz1h6ILzm-QAAAU0"]
[Tue Apr 28 19:46:01.431743 2026] [:error] [pid 33777:tid 33841] [client 4.225.204.143:8415] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afCd-bXUCFWqmordGGLQvwAAAQY"]
[Tue Apr 28 19:46:02.359803 2026] [:error] [pid 33777:tid 33848] [client 4.225.204.143:61293] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afCd-rXUCFWqmordGGLQwwAAAQ0"]
[Tue Apr 28 19:46:03.334157 2026] [:error] [pid 33776:tid 33814] [client 4.225.204.143:46892] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afCd-1-bEJ2CKP3iKAAtFwAAAEY"]
[Tue Apr 28 19:46:04.098422 2026] [:error] [pid 2741:tid 2769] [client 4.225.204.143:35881] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afCd_Pp92FeOz1h6ILzm_AAAAVc"]
[Tue Apr 28 19:46:04.875328 2026] [:error] [pid 50889:tid 50896] [client 4.225.204.143:36583] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afCd_IzszBr00txEzGg97gAAAAQ"]
[Tue Apr 28 19:46:06.194638 2026] [:error] [pid 50889:tid 50900] [client 4.225.204.143:39052] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afCd_ozszBr00txEzGg97wAAAAg"]
[Tue Apr 28 19:46:07.178320 2026] [:error] [pid 33864:tid 33886] [client 4.225.204.143:32265] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afCd_zXchLGZ4QggCskZVwAAAJQ"]
[Tue Apr 28 19:46:07.856741 2026] [:error] [pid 33864:tid 33868] [client 4.225.204.143:8414] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afCd_zXchLGZ4QggCskZWQAAAII"]
[Tue Apr 28 19:46:08.486397 2026] [:error] [pid 33864:tid 33879] [client 4.225.204.143:46850] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afCeADXchLGZ4QggCskZWwAAAI0"]
[Tue Apr 28 19:46:09.179591 2026] [:error] [pid 33864:tid 33882] [client 4.225.204.143:25452] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afCeATXchLGZ4QggCskZYAAAAJA"]
[Tue Apr 28 19:46:10.089786 2026] [:error] [pid 50889:tid 50906] [client 4.225.204.143:35897] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afCeAozszBr00txEzGg98QAAAA4"]
[Tue Apr 28 19:46:10.856892 2026] [:error] [pid 33864:tid 33880] [client 4.225.204.143:8409] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afCeAjXchLGZ4QggCskZZwAAAI4"]
[Tue Apr 28 19:46:11.619994 2026] [:error] [pid 33777:tid 33857] [client 4.225.204.143:8855] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afCeA7XUCFWqmordGGLQ2QAAARY"]
[Tue Apr 28 19:46:12.265852 2026] [:error] [pid 50889:tid 50893] [client 4.225.204.143:8386] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afCeBIzszBr00txEzGg98gAAAAE"]
[Tue Apr 28 19:46:12.877395 2026] [:error] [pid 33777:tid 33842] [client 4.225.204.143:25439] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afCeBLXUCFWqmordGGLQ3gAAAQc"]
[Tue Apr 28 19:46:13.534774 2026] [:error] [pid 33777:tid 33859] [client 4.225.204.143:35843] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afCeBbXUCFWqmordGGLQ4QAAARg"]
[Tue Apr 28 19:46:14.235641 2026] [:error] [pid 50889:tid 50910] [client 4.225.204.143:61311] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afCeBozszBr00txEzGg99AAAABI"]
[Tue Apr 28 19:46:14.832060 2026] [:error] [pid 33864:tid 33871] [client 4.225.204.143:25410] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afCeBjXchLGZ4QggCskZagAAAIU"]
[Tue Apr 28 19:46:15.419530 2026] [:error] [pid 33777:tid 33835] [client 4.225.204.143:36587] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afCeB7XUCFWqmordGGLQ5QAAAQA"]
[Tue Apr 28 19:46:15.991304 2026] [:error] [pid 50889:tid 50912] [client 4.225.204.143:8883] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afCeB4zszBr00txEzGg99QAAABQ"]
[Tue Apr 28 19:46:16.636925 2026] [:error] [pid 50889:tid 50892] [client 4.225.204.143:8392] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afCeCIzszBr00txEzGg99gAAAAA"]
[Tue Apr 28 19:46:17.206963 2026] [:error] [pid 50889:tid 50904] [client 4.225.204.143:32260] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afCeCYzszBr00txEzGg99wAAAAw"]
[Tue Apr 28 19:46:17.818914 2026] [:error] [pid 33777:tid 33848] [client 4.225.204.143:25432] [client 4.225.204.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afCeCbXUCFWqmordGGLQ6gAAAQ0"]
[Tue Apr 28 20:33:22.242759 2026] [:error] [pid 33776:tid 33808] [client 43.135.182.95:41506] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afCpEl-bEJ2CKP3iKAA07wAAAEA"]
[Tue Apr 28 21:27:09.897501 2026] [:error] [pid 33777:tid 33838] [client 136.107.244.136:60563] [client 136.107.244.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.244.136, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afC1rbXUCFWqmordGGL6egAAAQM"]
[Tue Apr 28 21:27:12.833837 2026] [:error] [pid 33777:tid 33847] [client 136.107.244.136:60563] [client 136.107.244.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afC1sLXUCFWqmordGGL6jAAAAQw"]
[Tue Apr 28 21:27:13.878335 2026] [:error] [pid 2741:tid 2751] [client 136.107.244.136:54051] [client 136.107.244.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afC1sfp92FeOz1h6ILwE3wAAAUU"]
[Tue Apr 28 21:27:14.902375 2026] [:error] [pid 33776:tid 33823] [client 136.107.244.136:58521] [client 136.107.244.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afC1sl-bEJ2CKP3iKAA8TwAAAE8"]
[Tue Apr 28 21:27:15.913289 2026] [:error] [pid 33777:tid 33844] [client 136.107.244.136:65520] [client 136.107.244.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afC1s7XUCFWqmordGGL6lwAAAQk"]
[Tue Apr 28 21:27:16.939001 2026] [:error] [pid 33777:tid 33840] [client 136.107.244.136:60305] [client 136.107.244.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afC1tLXUCFWqmordGGL6mgAAAQU"]
[Tue Apr 28 21:27:17.960786 2026] [:error] [pid 33777:tid 33847] [client 136.107.244.136:64806] [client 136.107.244.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afC1tbXUCFWqmordGGL6nQAAAQw"]
[Tue Apr 28 21:27:18.978466 2026] [:error] [pid 33777:tid 33855] [client 136.107.244.136:57191] [client 136.107.244.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afC1trXUCFWqmordGGL6nwAAARQ"]
[Tue Apr 28 23:15:42.808345 2026] [:error] [pid 33776:tid 33823] [client 74.248.34.112:58031] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afDPHl-bEJ2CKP3iKABOLQAAAE8"]
[Tue Apr 28 23:15:43.865200 2026] [:error] [pid 50889:tid 50894] [client 74.248.34.112:44483] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afDPH4zszBr00txEzGhrKAAAAAI"]
[Tue Apr 28 23:15:44.739071 2026] [:error] [pid 33864:tid 33890] [client 74.248.34.112:12879] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afDPIDXchLGZ4QggCsk9SAAAAJg"]
[Tue Apr 28 23:15:46.021121 2026] [:error] [pid 33777:tid 33846] [client 74.248.34.112:12866] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afDPIrXUCFWqmordGGIikAAAAQs"]
[Tue Apr 28 23:15:46.739886 2026] [:error] [pid 33777:tid 33847] [client 74.248.34.112:13183] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afDPIrXUCFWqmordGGIikgAAAQw"]
[Tue Apr 28 23:15:47.756435 2026] [:error] [pid 33777:tid 33858] [client 74.248.34.112:55786] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afDPI7XUCFWqmordGGIilwAAARc"]
[Tue Apr 28 23:15:49.035383 2026] [:error] [pid 50889:tid 50915] [client 74.248.34.112:44490] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afDPJYzszBr00txEzGhrMgAAABc"]
[Tue Apr 28 23:15:49.904643 2026] [:error] [pid 33775:tid 33795] [client 74.248.34.112:51068] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afDPJZsYOcoQrq88YbVBQgAAANA"]
[Tue Apr 28 23:15:50.856702 2026] [:error] [pid 33777:tid 33859] [client 74.248.34.112:44525] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afDPJrXUCFWqmordGGIinQAAARg"]
[Tue Apr 28 23:15:51.756622 2026] [:error] [pid 33775:tid 33788] [client 74.248.34.112:12875] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afDPJ5sYOcoQrq88YbVBRQAAAMk"]
[Tue Apr 28 23:15:52.378526 2026] [:error] [pid 33864:tid 33873] [client 74.248.34.112:12899] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afDPKDXchLGZ4QggCsk9UgAAAIc"]
[Tue Apr 28 23:15:53.071549 2026] [:error] [pid 50889:tid 50900] [client 74.248.34.112:57995] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afDPKYzszBr00txEzGhrNQAAAAg"]
[Tue Apr 28 23:15:55.209346 2026] [:error] [pid 33777:tid 33847] [client 74.248.34.112:58026] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afDPK7XUCFWqmordGGIiqwAAAQw"]
[Tue Apr 28 23:15:56.036112 2026] [:error] [pid 2741:tid 2754] [client 74.248.34.112:44532] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afDPLPp92FeOz1h6ILwhRAAAAUg"]
[Tue Apr 28 23:15:56.909820 2026] [:error] [pid 33776:tid 33816] [client 74.248.34.112:51032] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afDPLF-bEJ2CKP3iKABOMQAAAEg"]
[Tue Apr 28 23:15:57.906852 2026] [:error] [pid 33777:tid 33842] [client 74.248.34.112:44515] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afDPLbXUCFWqmordGGIisAAAAQc"]
[Tue Apr 28 23:15:58.976098 2026] [:error] [pid 2741:tid 2769] [client 74.248.34.112:51062] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afDPLvp92FeOz1h6ILwhRQAAAVc"]
[Tue Apr 28 23:15:59.924215 2026] [:error] [pid 33777:tid 33853] [client 74.248.34.112:51047] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afDPL7XUCFWqmordGGIisgAAARI"]
[Tue Apr 28 23:16:01.575820 2026] [:error] [pid 50889:tid 50908] [client 74.248.34.112:51038] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afDPMYzszBr00txEzGhrPAAAABA"]
[Tue Apr 28 23:16:02.943582 2026] [:error] [pid 33777:tid 33851] [client 74.248.34.112:13169] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afDPMrXUCFWqmordGGIitgAAARA"]
[Tue Apr 28 23:16:04.103530 2026] [:error] [pid 33777:tid 33836] [client 74.248.34.112:13159] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afDPNLXUCFWqmordGGIivAAAAQE"]
[Tue Apr 28 23:16:05.193965 2026] [:error] [pid 33777:tid 33854] [client 74.248.34.112:55762] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afDPNbXUCFWqmordGGIivwAAARM"]
[Tue Apr 28 23:16:06.798296 2026] [:error] [pid 33775:tid 33793] [client 74.248.34.112:26873] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afDPNpsYOcoQrq88YbVBSQAAAM4"]
[Tue Apr 28 23:16:08.074443 2026] [:error] [pid 2741:tid 2755] [client 74.248.34.112:55801] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afDPOPp92FeOz1h6ILwhSgAAAUk"]
[Tue Apr 28 23:16:09.299358 2026] [:error] [pid 33777:tid 33851] [client 74.248.34.112:57999] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afDPObXUCFWqmordGGIixgAAARA"]
[Tue Apr 28 23:16:10.429269 2026] [:error] [pid 33864:tid 33887] [client 74.248.34.112:26866] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afDPOjXchLGZ4QggCsk9XAAAAJU"]
[Tue Apr 28 23:16:11.334703 2026] [:error] [pid 33864:tid 33883] [client 74.248.34.112:55746] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afDPOzXchLGZ4QggCsk9XwAAAJE"]
[Tue Apr 28 23:16:12.094350 2026] [:error] [pid 50889:tid 50915] [client 74.248.34.112:58021] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afDPPIzszBr00txEzGhrQQAAABc"]
[Tue Apr 28 23:16:12.813335 2026] [:error] [pid 33777:tid 33854] [client 74.248.34.112:51013] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afDPPLXUCFWqmordGGIiywAAARM"]
[Tue Apr 28 23:16:14.292660 2026] [:error] [pid 33776:tid 33811] [client 74.248.34.112:12914] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afDPPl-bEJ2CKP3iKABOPgAAAEM"]
[Tue Apr 28 23:16:16.264855 2026] [:error] [pid 2741:tid 2767] [client 74.248.34.112:51061] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afDPQPp92FeOz1h6ILwhTQAAAVU"]
[Tue Apr 28 23:16:17.142205 2026] [:error] [pid 2741:tid 2746] [client 74.248.34.112:55758] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afDPQfp92FeOz1h6ILwhTwAAAUA"]
[Tue Apr 28 23:16:17.944273 2026] [:error] [pid 33776:tid 33808] [client 74.248.34.112:44482] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afDPQV-bEJ2CKP3iKABOQwAAAEA"]
[Tue Apr 28 23:16:18.831755 2026] [:error] [pid 33777:tid 33843] [client 74.248.34.112:12895] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afDPQrXUCFWqmordGGIi0wAAAQg"]
[Tue Apr 28 23:16:19.815460 2026] [:error] [pid 33777:tid 33837] [client 74.248.34.112:51042] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afDPQ7XUCFWqmordGGIi1AAAAQI"]
[Tue Apr 28 23:16:20.749542 2026] [:error] [pid 2741:tid 2769] [client 74.248.34.112:55804] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afDPRPp92FeOz1h6ILwhUgAAAVc"]
[Tue Apr 28 23:16:21.521160 2026] [:error] [pid 2741:tid 2753] [client 74.248.34.112:44516] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afDPRfp92FeOz1h6ILwhVQAAAUc"]
[Tue Apr 28 23:16:22.703629 2026] [:error] [pid 2741:tid 2763] [client 74.248.34.112:44496] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afDPRvp92FeOz1h6ILwhVgAAAVE"]
[Tue Apr 28 23:16:23.932971 2026] [:error] [pid 33777:tid 33854] [client 74.248.34.112:55794] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afDPR7XUCFWqmordGGIi1wAAARM"]
[Tue Apr 28 23:16:25.466000 2026] [:error] [pid 33777:tid 33852] [client 74.248.34.112:55757] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afDPSbXUCFWqmordGGIi2QAAARE"]
[Tue Apr 28 23:16:26.268942 2026] [:error] [pid 2741:tid 2752] [client 74.248.34.112:12897] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afDPSvp92FeOz1h6ILwhWAAAAUY"]
[Tue Apr 28 23:16:27.390680 2026] [:error] [pid 2741:tid 2760] [client 74.248.34.112:26820] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afDPS_p92FeOz1h6ILwhWQAAAU4"]
[Tue Apr 28 23:16:28.508376 2026] [:error] [pid 33776:tid 33810] [client 74.248.34.112:44484] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afDPTF-bEJ2CKP3iKABOSQAAAEI"]
[Tue Apr 28 23:16:29.334678 2026] [:error] [pid 33776:tid 33819] [client 74.248.34.112:57985] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afDPTV-bEJ2CKP3iKABOSgAAAEs"]
[Tue Apr 28 23:16:30.571859 2026] [:error] [pid 33776:tid 33812] [client 74.248.34.112:13179] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afDPTl-bEJ2CKP3iKABOTAAAAEQ"]
[Tue Apr 28 23:16:31.628928 2026] [:error] [pid 33776:tid 33832] [client 74.248.34.112:26833] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afDPT1-bEJ2CKP3iKABOUQAAAFg"]
[Tue Apr 28 23:16:32.677535 2026] [:error] [pid 33776:tid 33826] [client 74.248.34.112:44480] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afDPUF-bEJ2CKP3iKABOVAAAAFI"]
[Tue Apr 28 23:16:33.326010 2026] [:error] [pid 33776:tid 33828] [client 74.248.34.112:55760] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afDPUV-bEJ2CKP3iKABOVQAAAFQ"]
[Tue Apr 28 23:16:34.230033 2026] [:error] [pid 33864:tid 33873] [client 74.248.34.112:51030] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afDPUjXchLGZ4QggCsk9ewAAAIc"]
[Tue Apr 28 23:16:35.209578 2026] [:error] [pid 2741:tid 2753] [client 74.248.34.112:51023] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afDPU_p92FeOz1h6ILwhYAAAAUc"]
[Tue Apr 28 23:16:36.671339 2026] [:error] [pid 50889:tid 50900] [client 74.248.34.112:26860] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afDPVIzszBr00txEzGhrTAAAAAg"]
[Tue Apr 28 23:16:37.746850 2026] [:error] [pid 33777:tid 33843] [client 74.248.34.112:64300] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afDPVbXUCFWqmordGGIi4wAAAQg"]
[Tue Apr 28 23:16:38.608828 2026] [:error] [pid 33777:tid 33837] [client 74.248.34.112:55744] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afDPVrXUCFWqmordGGIi5gAAAQI"]
[Tue Apr 28 23:16:39.753266 2026] [:error] [pid 33777:tid 33858] [client 74.248.34.112:55803] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afDPV7XUCFWqmordGGIi6gAAARc"]
[Tue Apr 28 23:16:40.624199 2026] [:error] [pid 50889:tid 50904] [client 74.248.34.112:12887] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afDPWIzszBr00txEzGhrUQAAAAw"]
[Tue Apr 28 23:16:41.389790 2026] [:error] [pid 33776:tid 33815] [client 74.248.34.112:13145] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afDPWV-bEJ2CKP3iKABOWQAAAEc"]
[Tue Apr 28 23:16:50.600841 2026] [:error] [pid 33777:tid 33839] [client 74.248.34.112:26824] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ref.php"] [unique_id "afDPYrXUCFWqmordGGIjFAAAAQQ"]
[Tue Apr 28 23:16:51.906356 2026] [:error] [pid 33864:tid 33879] [client 74.248.34.112:51041] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ref.php"] [unique_id "afDPYzXchLGZ4QggCsk9fQAAAI0"]
[Tue Apr 28 23:16:52.630049 2026] [:error] [pid 33776:tid 33820] [client 74.248.34.112:55788] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ref.php"] [unique_id "afDPZF-bEJ2CKP3iKABOXwAAAEw"]
[Tue Apr 28 23:16:53.737832 2026] [:error] [pid 33777:tid 33850] [client 74.248.34.112:44521] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ref.php"] [unique_id "afDPZbXUCFWqmordGGIjFgAAAQ8"]
[Tue Apr 28 23:16:54.538928 2026] [:error] [pid 50889:tid 50901] [client 74.248.34.112:13148] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "afDPZozszBr00txEzGhrWAAAAAk"]
[Tue Apr 28 23:16:55.163482 2026] [:error] [pid 33777:tid 33843] [client 74.248.34.112:26818] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "afDPZ7XUCFWqmordGGIjGgAAAQg"]
[Tue Apr 28 23:16:56.371590 2026] [:error] [pid 2741:tid 2757] [client 74.248.34.112:51028] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "afDPaPp92FeOz1h6ILwhagAAAUs"]
[Tue Apr 28 23:16:57.141971 2026] [:error] [pid 2741:tid 2769] [client 74.248.34.112:55766] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-xme.php"] [unique_id "afDPafp92FeOz1h6ILwhbgAAAVc"]
[Tue Apr 28 23:16:57.890872 2026] [:error] [pid 33776:tid 33832] [client 74.248.34.112:44524] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "afDPaV-bEJ2CKP3iKABOYQAAAFg"]
[Tue Apr 28 23:16:58.813040 2026] [:error] [pid 2741:tid 2766] [client 74.248.34.112:13141] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "afDPavp92FeOz1h6ILwhcwAAAVQ"]
[Tue Apr 28 23:16:59.492724 2026] [:error] [pid 2741:tid 2747] [client 74.248.34.112:51012] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "afDPa_p92FeOz1h6ILwheAAAAUE"]
[Tue Apr 28 23:17:00.442364 2026] [:error] [pid 2741:tid 2754] [client 74.248.34.112:12905] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminer.php"] [unique_id "afDPbPp92FeOz1h6ILwhewAAAUg"]
[Tue Apr 28 23:17:01.400993 2026] [:error] [pid 2741:tid 2770] [client 74.248.34.112:44512] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "afDPbfp92FeOz1h6ILwhfgAAAVg"]
[Tue Apr 28 23:17:02.647108 2026] [:error] [pid 33775:tid 33785] [client 74.248.34.112:12910] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "afDPbpsYOcoQrq88YbVBXQAAAMY"]
[Tue Apr 28 23:17:03.610896 2026] [:error] [pid 33777:tid 33841] [client 74.248.34.112:55790] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "afDPb7XUCFWqmordGGIjJwAAAQY"]
[Tue Apr 28 23:17:04.405621 2026] [:error] [pid 33776:tid 33828] [client 74.248.34.112:13166] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ktfow.php"] [unique_id "afDPcF-bEJ2CKP3iKABOZgAAAFQ"]
[Tue Apr 28 23:17:05.113874 2026] [:error] [pid 33775:tid 33780] [client 74.248.34.112:55807] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afDPcZsYOcoQrq88YbVBXwAAAME"]
[Tue Apr 28 23:17:06.334794 2026] [:error] [pid 33864:tid 33866] [client 74.248.34.112:26871] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afDPcjXchLGZ4QggCsk9hAAAAIA"]
[Tue Apr 28 23:17:07.177193 2026] [:error] [pid 33775:tid 33783] [client 74.248.34.112:58012] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afDPc5sYOcoQrq88YbVBYAAAAMQ"]
[Tue Apr 28 23:17:07.941794 2026] [:error] [pid 33776:tid 33809] [client 74.248.34.112:12888] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afDPc1-bEJ2CKP3iKABOawAAAEE"]
[Tue Apr 28 23:17:08.686119 2026] [:error] [pid 33864:tid 33868] [client 74.248.34.112:51018] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afDPdDXchLGZ4QggCsk9hwAAAII"]
[Tue Apr 28 23:17:09.960636 2026] [:error] [pid 50889:tid 50898] [client 74.248.34.112:26852] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afDPdYzszBr00txEzGhrZQAAAAY"]
[Tue Apr 28 23:17:11.219907 2026] [:error] [pid 50889:tid 50902] [client 74.248.34.112:55781] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afDPd4zszBr00txEzGhrZwAAAAo"]
[Tue Apr 28 23:17:12.166394 2026] [:error] [pid 33776:tid 33810] [client 74.248.34.112:58022] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afDPeF-bEJ2CKP3iKABObAAAAEI"]
[Tue Apr 28 23:17:13.202108 2026] [:error] [pid 33864:tid 33890] [client 74.248.34.112:58043] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afDPeTXchLGZ4QggCsk9jgAAAJg"]
[Tue Apr 28 23:17:14.364540 2026] [:error] [pid 33864:tid 33871] [client 74.248.34.112:44504] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afDPejXchLGZ4QggCsk9jwAAAIU"]
[Tue Apr 28 23:17:15.228330 2026] [:error] [pid 33777:tid 33852] [client 74.248.34.112:58041] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afDPe7XUCFWqmordGGIjLQAAARE"]
[Tue Apr 28 23:17:16.689124 2026] [:error] [pid 2741:tid 2751] [client 74.248.34.112:44543] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afDPfPp92FeOz1h6ILwhkQAAAUU"]
[Tue Apr 28 23:17:17.518731 2026] [:error] [pid 33776:tid 33811] [client 74.248.34.112:26828] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afDPfV-bEJ2CKP3iKABOcAAAAEM"]
[Tue Apr 28 23:17:18.510794 2026] [:error] [pid 2741:tid 2755] [client 74.248.34.112:12912] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afDPfvp92FeOz1h6ILwhkwAAAUk"]
[Tue Apr 28 23:17:19.351502 2026] [:error] [pid 50889:tid 50911] [client 74.248.34.112:26864] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afDPf4zszBr00txEzGhrbwAAABM"]
[Tue Apr 28 23:17:20.187028 2026] [:error] [pid 2741:tid 2752] [client 74.248.34.112:52623] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afDPgPp92FeOz1h6ILwhlQAAAUY"]
[Tue Apr 28 23:17:20.990187 2026] [:error] [pid 33775:tid 33799] [client 74.248.34.112:55787] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afDPgJsYOcoQrq88YbVBaQAAANQ"]
[Tue Apr 28 23:17:21.749201 2026] [:error] [pid 33864:tid 33888] [client 74.248.34.112:58023] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afDPgTXchLGZ4QggCsk9lwAAAJY"]
[Tue Apr 28 23:17:22.508539 2026] [:error] [pid 33775:tid 33781] [client 74.248.34.112:44489] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afDPgpsYOcoQrq88YbVBbwAAAMI"]
[Tue Apr 28 23:17:23.309499 2026] [:error] [pid 33864:tid 33889] [client 74.248.34.112:58029] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afDPgzXchLGZ4QggCsk9mgAAAJc"]
[Tue Apr 28 23:17:23.901765 2026] [:error] [pid 50889:tid 50904] [client 74.248.34.112:12876] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afDPg4zszBr00txEzGhrcgAAAAw"]
[Tue Apr 28 23:17:24.464187 2026] [:error] [pid 50889:tid 50906] [client 74.248.34.112:13156] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afDPhIzszBr00txEzGhrcwAAAA4"]
[Tue Apr 28 23:17:25.058531 2026] [:error] [pid 33777:tid 33842] [client 74.248.34.112:44541] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afDPhbXUCFWqmordGGIjNQAAAQc"]
[Tue Apr 28 23:17:25.844053 2026] [:error] [pid 50889:tid 50898] [client 74.248.34.112:51069] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afDPhYzszBr00txEzGhrdwAAAAY"]
[Tue Apr 28 23:17:26.420526 2026] [:error] [pid 33777:tid 33855] [client 74.248.34.112:26823] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afDPhrXUCFWqmordGGIjNwAAARQ"]
[Tue Apr 28 23:17:27.186367 2026] [:error] [pid 2741:tid 2755] [client 74.248.34.112:55775] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afDPh_p92FeOz1h6ILwhngAAAUk"]
[Tue Apr 28 23:17:27.779966 2026] [:error] [pid 2741:tid 2763] [client 74.248.34.112:26876] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afDPh_p92FeOz1h6ILwhoAAAAVE"]
[Tue Apr 28 23:17:28.481004 2026] [:error] [pid 33777:tid 33843] [client 74.248.34.112:44510] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afDPiLXUCFWqmordGGIjOgAAAQg"]
[Tue Apr 28 23:17:29.153922 2026] [:error] [pid 33864:tid 33875] [client 74.248.34.112:64279] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afDPiTXchLGZ4QggCsk9ngAAAIk"]
[Tue Apr 28 23:17:30.231452 2026] [:error] [pid 2741:tid 2754] [client 74.248.34.112:13154] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afDPivp92FeOz1h6ILwhqAAAAUg"]
[Tue Apr 28 23:17:31.088631 2026] [:error] [pid 2741:tid 2751] [client 74.248.34.112:44495] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afDPi_p92FeOz1h6ILwhqwAAAUU"]
[Tue Apr 28 23:17:31.745535 2026] [:error] [pid 33776:tid 33808] [client 74.248.34.112:44519] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afDPi1-bEJ2CKP3iKABOggAAAEA"]
[Tue Apr 28 23:17:32.598528 2026] [:error] [pid 33776:tid 33815] [client 74.248.34.112:12917] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afDPjF-bEJ2CKP3iKABOhAAAAEc"]
[Tue Apr 28 23:17:33.301415 2026] [:error] [pid 2741:tid 2765] [client 74.248.34.112:52656] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afDPjfp92FeOz1h6ILwhsgAAAVM"]
[Tue Apr 28 23:17:34.138808 2026] [:error] [pid 33777:tid 33845] [client 74.248.34.112:44538] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afDPjrXUCFWqmordGGIjQAAAAQo"]
[Tue Apr 28 23:17:35.054747 2026] [:error] [pid 33777:tid 33854] [client 74.248.34.112:26848] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afDPj7XUCFWqmordGGIjQQAAARM"]
[Tue Apr 28 23:17:36.545132 2026] [:error] [pid 33864:tid 33867] [client 74.248.34.112:13144] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afDPkDXchLGZ4QggCsk9oQAAAIE"]
[Tue Apr 28 23:17:37.595578 2026] [:error] [pid 33864:tid 33877] [client 74.248.34.112:64314] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afDPkTXchLGZ4QggCsk9owAAAIs"]
[Tue Apr 28 23:17:38.353119 2026] [:error] [pid 33777:tid 33849] [client 74.248.34.112:64293] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afDPkrXUCFWqmordGGIjRwAAAQ4"]
[Tue Apr 28 23:17:39.240463 2026] [:error] [pid 33864:tid 33866] [client 74.248.34.112:44542] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afDPkzXchLGZ4QggCsk9pgAAAIA"]
[Tue Apr 28 23:17:39.955039 2026] [:error] [pid 50889:tid 50912] [client 74.248.34.112:13157] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afDPk4zszBr00txEzGhregAAABQ"]
[Tue Apr 28 23:17:40.553250 2026] [:error] [pid 33777:tid 33839] [client 74.248.34.112:44511] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afDPlLXUCFWqmordGGIjTQAAAQQ"]
[Tue Apr 28 23:17:41.268177 2026] [:error] [pid 33776:tid 33828] [client 74.248.34.112:57997] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afDPlV-bEJ2CKP3iKABOiQAAAFQ"]
[Tue Apr 28 23:17:42.062611 2026] [:error] [pid 33776:tid 33826] [client 74.248.34.112:44507] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afDPll-bEJ2CKP3iKABOigAAAFI"]
[Tue Apr 28 23:17:43.406723 2026] [:error] [pid 33776:tid 33814] [client 74.248.34.112:44514] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afDPl1-bEJ2CKP3iKABOjAAAAEY"]
[Tue Apr 28 23:17:44.068605 2026] [:error] [pid 33776:tid 33818] [client 74.248.34.112:44486] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afDPmF-bEJ2CKP3iKABOjgAAAEo"]
[Tue Apr 28 23:17:45.539831 2026] [:error] [pid 50889:tid 50908] [client 74.248.34.112:58017] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afDPmYzszBr00txEzGhrgAAAABA"]
[Tue Apr 28 23:17:46.636458 2026] [:error] [pid 50889:tid 50904] [client 74.248.34.112:13121] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afDPmozszBr00txEzGhrggAAAAw"]
[Tue Apr 28 23:17:47.654915 2026] [:error] [pid 50889:tid 50893] [client 74.248.34.112:26865] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afDPm4zszBr00txEzGhrgwAAAAE"]
[Tue Apr 28 23:17:48.430100 2026] [:error] [pid 33777:tid 33847] [client 74.248.34.112:65455] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afDPnLXUCFWqmordGGIjYQAAAQw"]
[Tue Apr 28 23:17:49.178216 2026] [:error] [pid 33864:tid 33867] [client 74.248.34.112:55755] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afDPnTXchLGZ4QggCsk9rwAAAIE"]
[Tue Apr 28 23:17:58.821729 2026] [:error] [pid 33776:tid 33831] [client 74.248.34.112:13133] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afDPpl-bEJ2CKP3iKABOsgAAAFc"]
[Tue Apr 28 23:17:59.688529 2026] [:error] [pid 33777:tid 33837] [client 74.248.34.112:51049] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afDPp7XUCFWqmordGGIjgwAAAQI"]
[Tue Apr 28 23:18:01.176097 2026] [:error] [pid 33777:tid 33838] [client 74.248.34.112:44517] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afDPqbXUCFWqmordGGIjiAAAAQM"]
[Tue Apr 28 23:18:02.221248 2026] [:error] [pid 2741:tid 2748] [client 74.248.34.112:51043] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afDPqvp92FeOz1h6ILwhugAAAUI"]
[Tue Apr 28 23:18:03.387558 2026] [:error] [pid 33777:tid 33840] [client 74.248.34.112:44527] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afDPq7XUCFWqmordGGIjjgAAAQU"]
[Tue Apr 28 23:18:04.029235 2026] [:error] [pid 33777:tid 33835] [client 74.248.34.112:55782] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afDPrLXUCFWqmordGGIjkAAAAQA"]
[Tue Apr 28 23:18:05.631392 2026] [:error] [pid 33776:tid 33830] [client 74.248.34.112:65424] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afDPrV-bEJ2CKP3iKABOtAAAAFY"]
[Tue Apr 28 23:18:07.704775 2026] [:error] [pid 2741:tid 2763] [client 74.248.34.112:26821] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afDPr_p92FeOz1h6ILwhvQAAAVE"]
[Tue Apr 28 23:18:09.416193 2026] [:error] [pid 33864:tid 33875] [client 74.248.34.112:12925] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afDPsTXchLGZ4QggCsk9uAAAAIk"]
[Tue Apr 28 23:18:10.219040 2026] [:error] [pid 33776:tid 33817] [client 74.248.34.112:26847] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afDPsl-bEJ2CKP3iKABOtQAAAEk"]
[Tue Apr 28 23:18:11.400388 2026] [:error] [pid 33777:tid 33839] [client 74.248.34.112:51045] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afDPs7XUCFWqmordGGIjpQAAAQQ"]
[Tue Apr 28 23:18:12.256646 2026] [:error] [pid 33777:tid 33847] [client 74.248.34.112:12870] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afDPtLXUCFWqmordGGIjpwAAAQw"]
[Tue Apr 28 23:18:12.930426 2026] [:error] [pid 33776:tid 33819] [client 74.248.34.112:55793] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afDPtF-bEJ2CKP3iKABOuAAAAEs"]
[Tue Apr 28 23:18:13.596982 2026] [:error] [pid 33777:tid 33856] [client 74.248.34.112:58005] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afDPtbXUCFWqmordGGIjqgAAARU"]
[Tue Apr 28 23:18:14.198839 2026] [:error] [pid 33777:tid 33841] [client 74.248.34.112:58020] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afDPtrXUCFWqmordGGIjrAAAAQY"]
[Tue Apr 28 23:18:14.808808 2026] [:error] [pid 33864:tid 33877] [client 74.248.34.112:12874] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afDPtjXchLGZ4QggCsk9vQAAAIs"]
[Tue Apr 28 23:18:15.537052 2026] [:error] [pid 2741:tid 2760] [client 74.248.34.112:26846] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afDPt_p92FeOz1h6ILwhwAAAAU4"]
[Tue Apr 28 23:18:16.141985 2026] [:error] [pid 2741:tid 2767] [client 74.248.34.112:44540] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afDPuPp92FeOz1h6ILwhwQAAAVU"]
[Tue Apr 28 23:18:16.975685 2026] [:error] [pid 2741:tid 2751] [client 74.248.34.112:12868] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afDPuPp92FeOz1h6ILwhwgAAAUU"]
[Tue Apr 28 23:18:17.737023 2026] [:error] [pid 2741:tid 2764] [client 74.248.34.112:13177] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afDPufp92FeOz1h6ILwhyAAAAVI"]
[Tue Apr 28 23:18:18.388547 2026] [:error] [pid 2741:tid 2755] [client 74.248.34.112:55796] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afDPuvp92FeOz1h6ILwhyQAAAUk"]
[Tue Apr 28 23:18:19.044216 2026] [:error] [pid 33775:tid 33792] [client 74.248.34.112:44499] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afDPu5sYOcoQrq88YbVBiQAAAM0"]
[Tue Apr 28 23:18:19.763014 2026] [:error] [pid 33775:tid 33784] [client 74.248.34.112:12903] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afDPu5sYOcoQrq88YbVBiwAAAMU"]
[Tue Apr 28 23:18:20.482779 2026] [:error] [pid 50889:tid 50911] [client 74.248.34.112:64370] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afDPvIzszBr00txEzGhrjAAAABM"]
[Tue Apr 28 23:18:21.192340 2026] [:error] [pid 33777:tid 33840] [client 74.248.34.112:12872] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afDPvbXUCFWqmordGGIjtwAAAQU"]
[Tue Apr 28 23:18:22.029848 2026] [:error] [pid 33864:tid 33873] [client 74.248.34.112:13124] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afDPvjXchLGZ4QggCsk92wAAAIc"]
[Tue Apr 28 23:18:22.575372 2026] [:error] [pid 33777:tid 33850] [client 74.248.34.112:13160] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afDPvrXUCFWqmordGGIjuwAAAQ8"]
[Tue Apr 28 23:18:23.332518 2026] [:error] [pid 2741:tid 2761] [client 74.248.34.112:55780] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afDPv_p92FeOz1h6ILwh0wAAAU8"]
[Tue Apr 28 23:18:23.995669 2026] [:error] [pid 2741:tid 2753] [client 74.248.34.112:55769] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "afDPv_p92FeOz1h6ILwh1AAAAUc"]
[Tue Apr 28 23:18:24.957917 2026] [:error] [pid 33864:tid 33884] [client 74.248.34.112:64366] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "afDPwDXchLGZ4QggCsk94wAAAJI"]
[Tue Apr 28 23:18:25.664168 2026] [:error] [pid 33864:tid 33889] [client 74.248.34.112:51053] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "afDPwTXchLGZ4QggCsk95wAAAJc"]
[Tue Apr 28 23:18:26.441214 2026] [:error] [pid 33775:tid 33780] [client 74.248.34.112:37643] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "afDPwpsYOcoQrq88YbVBjwAAAME"]
[Tue Apr 28 23:18:27.464487 2026] [:error] [pid 33864:tid 33873] [client 74.248.34.112:26835] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afDPwzXchLGZ4QggCsk96QAAAIc"]
[Tue Apr 28 23:18:28.386601 2026] [:error] [pid 33864:tid 33879] [client 74.248.34.112:13139] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afDPxDXchLGZ4QggCsk97AAAAI0"]
[Tue Apr 28 23:18:30.449312 2026] [:error] [pid 33777:tid 33840] [client 74.248.34.112:37689] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afDPxrXUCFWqmordGGIjygAAAQU"]
[Tue Apr 28 23:18:32.076080 2026] [:error] [pid 33776:tid 33808] [client 74.248.34.112:13147] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afDPyF-bEJ2CKP3iKABOvQAAAEA"]
[Tue Apr 28 23:18:33.307409 2026] [:error] [pid 33864:tid 33883] [client 74.248.34.112:12996] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afDPyTXchLGZ4QggCsk98gAAAJE"]
[Tue Apr 28 23:18:34.057523 2026] [:error] [pid 33777:tid 33842] [client 74.248.34.112:38349] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afDPyrXUCFWqmordGGIjzgAAAQc"]
[Tue Apr 28 23:18:34.895498 2026] [:error] [pid 33776:tid 33817] [client 74.248.34.112:13013] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afDPyl-bEJ2CKP3iKABOvgAAAEk"]
[Tue Apr 28 23:18:36.191795 2026] [:error] [pid 33776:tid 33810] [client 74.248.34.112:26817] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afDPzF-bEJ2CKP3iKABOvwAAAEI"]
[Tue Apr 28 23:18:37.152887 2026] [:error] [pid 33775:tid 33789] [client 74.248.34.112:38350] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "afDPzZsYOcoQrq88YbVBmQAAAMo"]
[Tue Apr 28 23:18:37.927128 2026] [:error] [pid 33777:tid 33839] [client 74.248.34.112:12425] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "afDPzbXUCFWqmordGGIj1wAAAQQ"]
[Tue Apr 28 23:18:38.916628 2026] [:error] [pid 33864:tid 33869] [client 74.248.34.112:38385] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "afDPzjXchLGZ4QggCsk-AAAAAIM"]
[Tue Apr 28 23:18:39.852505 2026] [:error] [pid 2741:tid 2749] [client 74.248.34.112:12426] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/9.php"] [unique_id "afDPz_p92FeOz1h6ILwh3AAAAUM"]
[Tue Apr 28 23:18:40.799126 2026] [:error] [pid 50889:tid 50901] [client 74.248.34.112:23587] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "afDP0IzszBr00txEzGhrlgAAAAk"]
[Tue Apr 28 23:18:42.128349 2026] [:error] [pid 2741:tid 2751] [client 74.248.34.112:52703] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "afDP0vp92FeOz1h6ILwh4QAAAUU"]
[Tue Apr 28 23:18:43.156756 2026] [:error] [pid 2741:tid 2762] [client 74.248.34.112:52680] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "afDP0_p92FeOz1h6ILwh5AAAAVA"]
[Tue Apr 28 23:18:43.884131 2026] [:error] [pid 2741:tid 2759] [client 74.248.34.112:23631] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/10.php"] [unique_id "afDP0_p92FeOz1h6ILwh5gAAAU0"]
[Tue Apr 28 23:18:44.734774 2026] [:error] [pid 2741:tid 2756] [client 74.248.34.112:43855] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afDP1Pp92FeOz1h6ILwh6AAAAUo"]
[Tue Apr 28 23:18:45.770473 2026] [:error] [pid 50889:tid 50912] [client 74.248.34.112:45760] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afDP1YzszBr00txEzGhrmQAAABQ"]
[Tue Apr 28 23:18:47.399502 2026] [:error] [pid 33864:tid 33882] [client 74.248.34.112:43878] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afDP1zXchLGZ4QggCsk-AgAAAJA"]
[Tue Apr 28 23:18:48.776563 2026] [:error] [pid 33777:tid 33847] [client 74.248.34.112:65523] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afDP2LXUCFWqmordGGIj6wAAAQw"]
[Tue Apr 28 23:18:50.689091 2026] [:error] [pid 2741:tid 2754] [client 74.248.34.112:13259] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afDP2vp92FeOz1h6ILwh8QAAAUg"]
[Tue Apr 28 23:18:52.060364 2026] [:error] [pid 33777:tid 33835] [client 74.248.34.112:52078] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afDP3LXUCFWqmordGGIj9gAAAQA"]
[Tue Apr 28 23:18:53.092913 2026] [:error] [pid 33777:tid 33849] [client 74.248.34.112:13303] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afDP3bXUCFWqmordGGIj_wAAAQ4"]
[Tue Apr 28 23:18:54.054523 2026] [:error] [pid 2741:tid 2768] [client 74.248.34.112:65514] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afDP3vp92FeOz1h6ILwh9gAAAVY"]
[Tue Apr 28 23:18:54.922881 2026] [:error] [pid 2741:tid 2747] [client 74.248.34.112:53978] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afDP3vp92FeOz1h6ILwh-AAAAUE"]
[Tue Apr 28 23:18:55.840697 2026] [:error] [pid 50889:tid 50908] [client 74.248.34.112:54560] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afDP34zszBr00txEzGhrogAAABA"]
[Tue Apr 28 23:18:56.554941 2026] [:error] [pid 50889:tid 50893] [client 74.248.34.112:65490] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afDP4IzszBr00txEzGhrpQAAAAE"]
[Tue Apr 28 23:18:57.595870 2026] [:error] [pid 33864:tid 33887] [client 74.248.34.112:52043] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afDP4TXchLGZ4QggCsk-BwAAAJU"]
[Tue Apr 28 23:19:06.997215 2026] [:error] [pid 33775:tid 33786] [client 74.248.34.112:59186] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "afDP6psYOcoQrq88YbVBxAAAAMc"]
[Tue Apr 28 23:19:09.274556 2026] [:error] [pid 33776:tid 33823] [client 74.248.34.112:30265] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "afDP7V-bEJ2CKP3iKABO1gAAAE8"]
[Tue Apr 28 23:19:10.590345 2026] [:error] [pid 33775:tid 33793] [client 74.248.34.112:12731] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "afDP7psYOcoQrq88YbVBxQAAAM4"]
[Tue Apr 28 23:19:11.954578 2026] [:error] [pid 50889:tid 50903] [client 74.248.34.112:52057] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "afDP74zszBr00txEzGhrvAAAAAs"]
[Tue Apr 28 23:19:13.192358 2026] [:error] [pid 33864:tid 33890] [client 74.248.34.112:59161] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afDP8TXchLGZ4QggCsk-IAAAAJg"]
[Tue Apr 28 23:19:16.313645 2026] [:error] [pid 2741:tid 2751] [client 74.248.34.112:13280] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afDP9Pp92FeOz1h6ILwiEgAAAUU"]
[Tue Apr 28 23:19:18.301529 2026] [:error] [pid 33864:tid 33883] [client 74.248.34.112:13283] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afDP9jXchLGZ4QggCsk-JgAAAJE"]
[Tue Apr 28 23:19:20.604947 2026] [:error] [pid 33775:tid 33787] [client 74.248.34.112:59151] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afDP-JsYOcoQrq88YbVBzQAAAMg"]
[Tue Apr 28 23:19:25.225448 2026] [:error] [pid 50889:tid 50912] [client 74.248.34.112:12692] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afDP_YzszBr00txEzGhrygAAABQ"]
[Tue Apr 28 23:19:27.159127 2026] [:error] [pid 33776:tid 33821] [client 74.248.34.112:53955] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afDP_1-bEJ2CKP3iKABO5wAAAE0"]
[Tue Apr 28 23:19:29.559928 2026] [:error] [pid 50889:tid 50911] [client 74.248.34.112:59138] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afDQAYzszBr00txEzGhrzwAAABM"]
[Tue Apr 28 23:19:30.566598 2026] [:error] [pid 33864:tid 33879] [client 74.248.34.112:30245] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afDQAjXchLGZ4QggCsk-LgAAAI0"]
[Tue Apr 28 23:19:31.535762 2026] [:error] [pid 50889:tid 50901] [client 74.248.34.112:54543] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afDQA4zszBr00txEzGhr1wAAAAk"]
[Tue Apr 28 23:19:33.294038 2026] [:error] [pid 50889:tid 50898] [client 74.248.34.112:53964] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afDQBYzszBr00txEzGhr3AAAAAY"]
[Tue Apr 28 23:19:34.538645 2026] [:error] [pid 50889:tid 50897] [client 74.248.34.112:52082] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afDQBozszBr00txEzGhr4AAAAAU"]
[Tue Apr 28 23:19:35.411357 2026] [:error] [pid 2741:tid 2768] [client 74.248.34.112:30214] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afDQB_p92FeOz1h6ILwiIQAAAVY"]
[Tue Apr 28 23:19:36.312742 2026] [:error] [pid 2741:tid 2756] [client 74.248.34.112:59159] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "afDQCPp92FeOz1h6ILwiJAAAAUo"]
[Tue Apr 28 23:19:38.748718 2026] [:error] [pid 50889:tid 50914] [client 74.248.34.112:52047] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "afDQCozszBr00txEzGhr5AAAABY"]
[Tue Apr 28 23:19:40.048113 2026] [:error] [pid 33775:tid 33795] [client 74.248.34.112:62932] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "afDQDJsYOcoQrq88YbVB9QAAANA"]
[Tue Apr 28 23:19:40.832916 2026] [:error] [pid 50889:tid 50901] [client 74.248.34.112:59176] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "afDQDIzszBr00txEzGhr6QAAAAk"]
[Tue Apr 28 23:19:41.792471 2026] [:error] [pid 33777:tid 33856] [client 74.248.34.112:13249] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afDQDbXUCFWqmordGGIkRwAAARU"]
[Tue Apr 28 23:19:43.002738 2026] [:error] [pid 50889:tid 50893] [client 74.248.34.112:12715] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afDQD4zszBr00txEzGhr7AAAAAE"]
[Tue Apr 28 23:19:44.427375 2026] [:error] [pid 33777:tid 33843] [client 74.248.34.112:62953] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afDQELXUCFWqmordGGIkSwAAAQg"]
[Tue Apr 28 23:19:45.373938 2026] [:error] [pid 2741:tid 2763] [client 74.248.34.112:59197] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afDQEfp92FeOz1h6ILwiJgAAAVE"]
[Tue Apr 28 23:19:46.047961 2026] [:error] [pid 33776:tid 33827] [client 74.248.34.112:12734] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afDQEl-bEJ2CKP3iKABO_wAAAFM"]
[Tue Apr 28 23:19:46.981612 2026] [:error] [pid 33777:tid 33840] [client 74.248.34.112:53961] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afDQErXUCFWqmordGGIkTQAAAQU"]
[Tue Apr 28 23:19:47.933294 2026] [:error] [pid 33777:tid 33838] [client 74.248.34.112:52095] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afDQE7XUCFWqmordGGIkUAAAAQM"]
[Tue Apr 28 23:19:48.695617 2026] [:error] [pid 33777:tid 33854] [client 74.248.34.112:52044] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afDQFLXUCFWqmordGGIkUQAAARM"]
[Tue Apr 28 23:19:49.560029 2026] [:error] [pid 33777:tid 33845] [client 74.248.34.112:13274] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afDQFbXUCFWqmordGGIkUgAAAQo"]
[Tue Apr 28 23:19:50.654420 2026] [:error] [pid 50889:tid 50909] [client 74.248.34.112:65508] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afDQFozszBr00txEzGhr9AAAABE"]
[Tue Apr 28 23:19:51.922156 2026] [:error] [pid 2741:tid 2755] [client 74.248.34.112:12678] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afDQF_p92FeOz1h6ILwiJwAAAUk"]
[Tue Apr 28 23:19:52.771818 2026] [:error] [pid 2741:tid 2749] [client 74.248.34.112:30256] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afDQGPp92FeOz1h6ILwiKQAAAUM"]
[Tue Apr 28 23:19:53.851365 2026] [:error] [pid 33775:tid 33781] [client 74.248.34.112:12725] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afDQGZsYOcoQrq88YbVCLAAAAMI"]
[Tue Apr 28 23:19:55.053181 2026] [:error] [pid 33776:tid 33810] [client 74.248.34.112:13282] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afDQG1-bEJ2CKP3iKABPBQAAAEI"]
[Tue Apr 28 23:19:56.212739 2026] [:error] [pid 33776:tid 33830] [client 74.248.34.112:12696] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afDQHF-bEJ2CKP3iKABPBgAAAFY"]
[Tue Apr 28 23:19:58.022447 2026] [:error] [pid 33777:tid 33848] [client 74.248.34.112:12699] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afDQHrXUCFWqmordGGIkWAAAAQ0"]
[Tue Apr 28 23:19:58.885056 2026] [:error] [pid 33777:tid 33852] [client 74.248.34.112:62943] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afDQHrXUCFWqmordGGIkWwAAARE"]
[Tue Apr 28 23:20:00.031836 2026] [:error] [pid 33777:tid 33853] [client 74.248.34.112:12721] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afDQILXUCFWqmordGGIkXwAAARI"]
[Tue Apr 28 23:20:01.078286 2026] [:error] [pid 50889:tid 50915] [client 74.248.34.112:12694] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afDQIYzszBr00txEzGhsAAAAABc"]
[Tue Apr 28 23:20:02.169507 2026] [:error] [pid 2741:tid 2769] [client 74.248.34.112:13261] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afDQIvp92FeOz1h6ILwiLAAAAVc"]
[Tue Apr 28 23:20:03.201200 2026] [:error] [pid 50889:tid 50900] [client 74.248.34.112:62970] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afDQI4zszBr00txEzGhsBQAAAAg"]
[Tue Apr 28 23:20:04.421371 2026] [:error] [pid 33776:tid 33825] [client 74.248.34.112:13256] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afDQJF-bEJ2CKP3iKABPCQAAAFE"]
[Tue Apr 28 23:20:16.280739 2026] [:error] [pid 50889:tid 50893] [client 74.248.34.112:13260] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afDQMIzszBr00txEzGhsQAAAAAE"]
[Tue Apr 28 23:20:17.265384 2026] [:error] [pid 33864:tid 33881] [client 74.248.34.112:52036] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afDQMTXchLGZ4QggCsk-ggAAAI8"]
[Tue Apr 28 23:20:18.361591 2026] [:error] [pid 33777:tid 33855] [client 74.248.34.112:12681] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afDQMrXUCFWqmordGGIkegAAARQ"]
[Tue Apr 28 23:20:20.564069 2026] [:error] [pid 2741:tid 2769] [client 74.248.34.112:59199] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afDQNPp92FeOz1h6ILwiPgAAAVc"]
[Tue Apr 28 23:20:21.641908 2026] [:error] [pid 2741:tid 2751] [client 74.248.34.112:12703] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afDQNfp92FeOz1h6ILwiQQAAAUU"]
[Tue Apr 28 23:20:23.024875 2026] [:error] [pid 33777:tid 33841] [client 74.248.34.112:12683] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afDQN7XUCFWqmordGGIknQAAAQY"]
[Tue Apr 28 23:20:24.220499 2026] [:error] [pid 2741:tid 2747] [client 74.248.34.112:52077] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afDQOPp92FeOz1h6ILwiSAAAAUE"]
[Tue Apr 28 23:20:25.391042 2026] [:error] [pid 2741:tid 2752] [client 74.248.34.112:62969] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afDQOfp92FeOz1h6ILwiSgAAAUY"]
[Tue Apr 28 23:20:26.439499 2026] [:error] [pid 2741:tid 2758] [client 74.248.34.112:59168] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afDQOvp92FeOz1h6ILwiTQAAAUw"]
[Tue Apr 28 23:20:27.631646 2026] [:error] [pid 33864:tid 33880] [client 74.248.34.112:30270] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afDQOzXchLGZ4QggCsk-jwAAAI4"]
[Tue Apr 28 23:20:29.185080 2026] [:error] [pid 33777:tid 33853] [client 74.248.34.112:30229] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afDQPbXUCFWqmordGGIkpgAAARI"]
[Tue Apr 28 23:20:31.901975 2026] [:error] [pid 33777:tid 33837] [client 74.248.34.112:12689] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afDQP7XUCFWqmordGGIkrAAAAQI"]
[Tue Apr 28 23:20:33.014410 2026] [:error] [pid 2741:tid 2767] [client 74.248.34.112:62959] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afDQQfp92FeOz1h6ILwiVAAAAVU"]
[Tue Apr 28 23:20:34.483418 2026] [:error] [pid 33777:tid 33846] [client 74.248.34.112:43901] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afDQQrXUCFWqmordGGIksgAAAQs"]
[Tue Apr 28 23:20:35.437042 2026] [:error] [pid 50889:tid 50909] [client 74.248.34.112:52059] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afDQQ4zszBr00txEzGhsigAAABE"]
[Tue Apr 28 23:20:36.672288 2026] [:error] [pid 50889:tid 50903] [client 74.248.34.112:59154] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afDQRIzszBr00txEzGhskAAAAAs"]
[Tue Apr 28 23:20:37.788823 2026] [:error] [pid 50889:tid 50902] [client 74.248.34.112:12868] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afDQRYzszBr00txEzGhslwAAAAo"]
[Tue Apr 28 23:20:39.396734 2026] [:error] [pid 2741:tid 2765] [client 74.248.34.112:62915] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afDQR_p92FeOz1h6ILwiWQAAAVM"]
[Tue Apr 28 23:20:40.247304 2026] [:error] [pid 33864:tid 33888] [client 74.248.34.112:12716] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afDQSDXchLGZ4QggCsk-lQAAAJY"]
[Tue Apr 28 23:20:41.572444 2026] [:error] [pid 33864:tid 33887] [client 74.248.34.112:53999] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afDQSTXchLGZ4QggCsk-mAAAAJU"]
[Tue Apr 28 23:20:42.583977 2026] [:error] [pid 33864:tid 33886] [client 74.248.34.112:12718] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afDQSjXchLGZ4QggCsk-mgAAAJQ"]
[Tue Apr 28 23:20:43.542957 2026] [:error] [pid 33776:tid 33829] [client 74.248.34.112:54567] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afDQS1-bEJ2CKP3iKABPKgAAAFU"]
[Tue Apr 28 23:20:44.343389 2026] [:error] [pid 33775:tid 33799] [client 74.248.34.112:12674] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afDQTJsYOcoQrq88YbVCRgAAANQ"]
[Tue Apr 28 23:20:45.266959 2026] [:error] [pid 33864:tid 33882] [client 74.248.34.112:52085] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afDQTTXchLGZ4QggCsk-mwAAAJA"]
[Tue Apr 28 23:20:46.204889 2026] [:error] [pid 33864:tid 33885] [client 74.248.34.112:30246] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afDQTjXchLGZ4QggCsk-nwAAAJM"]
[Tue Apr 28 23:20:47.625776 2026] [:error] [pid 33775:tid 33796] [client 74.248.34.112:13258] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afDQT5sYOcoQrq88YbVCSgAAANE"]
[Tue Apr 28 23:20:48.756725 2026] [:error] [pid 33777:tid 33857] [client 74.248.34.112:62927] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afDQULXUCFWqmordGGIkvQAAARY"]
[Tue Apr 28 23:20:49.666123 2026] [:error] [pid 33864:tid 33868] [client 74.248.34.112:30238] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afDQUTXchLGZ4QggCsk-ogAAAII"]
[Tue Apr 28 23:20:50.619045 2026] [:error] [pid 33775:tid 33795] [client 74.248.34.112:53988] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afDQUpsYOcoQrq88YbVCTQAAANA"]
[Tue Apr 28 23:20:51.434217 2026] [:error] [pid 33864:tid 33876] [client 74.248.34.112:30210] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afDQUzXchLGZ4QggCsk-pQAAAIo"]
[Tue Apr 28 23:20:52.280522 2026] [:error] [pid 2741:tid 2755] [client 74.248.34.112:12729] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afDQVPp92FeOz1h6ILwiXQAAAUk"]
[Tue Apr 28 23:20:53.182728 2026] [:error] [pid 2741:tid 2762] [client 74.248.34.112:54003] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afDQVfp92FeOz1h6ILwiXgAAAVA"]
[Tue Apr 28 23:20:53.939812 2026] [:error] [pid 33775:tid 33794] [client 74.248.34.112:62948] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afDQVZsYOcoQrq88YbVCUAAAAM8"]
[Tue Apr 28 23:20:55.147730 2026] [:error] [pid 33864:tid 33869] [client 74.248.34.112:59157] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afDQVzXchLGZ4QggCsk-qAAAAIM"]
[Tue Apr 28 23:20:56.202974 2026] [:error] [pid 2741:tid 2746] [client 74.248.34.112:30231] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afDQWPp92FeOz1h6ILwiYQAAAUA"]
[Tue Apr 28 23:20:58.049155 2026] [:error] [pid 33775:tid 33799] [client 74.248.34.112:52083] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afDQWpsYOcoQrq88YbVCUwAAANQ"]
[Tue Apr 28 23:20:58.651313 2026] [:error] [pid 33775:tid 33803] [client 74.248.34.112:62865] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afDQWpsYOcoQrq88YbVCVgAAANg"]
[Tue Apr 28 23:20:59.398384 2026] [:error] [pid 33776:tid 33826] [client 74.248.34.112:12700] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afDQW1-bEJ2CKP3iKABPVgAAAFI"]
[Tue Apr 28 23:21:00.241315 2026] [:error] [pid 33775:tid 33785] [client 74.248.34.112:65489] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afDQXJsYOcoQrq88YbVCWAAAAMY"]
[Tue Apr 28 23:21:01.074540 2026] [:error] [pid 33864:tid 33870] [client 74.248.34.112:59136] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afDQXTXchLGZ4QggCsk-qwAAAIQ"]
[Tue Apr 28 23:21:02.119294 2026] [:error] [pid 33775:tid 33780] [client 74.248.34.112:43878] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afDQXpsYOcoQrq88YbVCWgAAAME"]
[Tue Apr 28 23:21:03.433273 2026] [:error] [pid 2741:tid 2770] [client 74.248.34.112:53976] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afDQX_p92FeOz1h6ILwiaAAAAVg"]
[Tue Apr 28 23:21:04.655105 2026] [:error] [pid 2741:tid 2756] [client 74.248.34.112:59149] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afDQYPp92FeOz1h6ILwiaQAAAUo"]
[Tue Apr 28 23:21:05.441858 2026] [:error] [pid 33864:tid 33886] [client 74.248.34.112:30215] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afDQYTXchLGZ4QggCsk-rwAAAJQ"]
[Tue Apr 28 23:21:06.120267 2026] [:error] [pid 33775:tid 33782] [client 74.248.34.112:12711] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afDQYpsYOcoQrq88YbVCXQAAAMM"]
[Tue Apr 28 23:21:07.153924 2026] [:error] [pid 2741:tid 2757] [client 74.248.34.112:13254] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afDQY_p92FeOz1h6ILwibwAAAUs"]
[Tue Apr 28 23:21:08.407576 2026] [:error] [pid 2741:tid 2762] [client 74.248.34.112:12724] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afDQZPp92FeOz1h6ILwicQAAAVA"]
[Tue Apr 28 23:21:09.435837 2026] [:error] [pid 2741:tid 2759] [client 74.248.34.112:53962] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afDQZfp92FeOz1h6ILwidQAAAU0"]
[Tue Apr 28 23:21:10.244554 2026] [:error] [pid 2741:tid 2747] [client 74.248.34.112:53953] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afDQZvp92FeOz1h6ILwieAAAAUE"]
[Tue Apr 28 23:21:11.256647 2026] [:error] [pid 50889:tid 50909] [client 74.248.34.112:12685] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afDQZ4zszBr00txEzGhsngAAABE"]
[Tue Apr 28 23:21:12.327342 2026] [:error] [pid 2741:tid 2758] [client 74.248.34.112:54014] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afDQaPp92FeOz1h6ILwifAAAAUw"]
[Tue Apr 28 23:21:13.587378 2026] [:error] [pid 33777:tid 33840] [client 74.248.34.112:62894] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afDQabXUCFWqmordGGIkyAAAAQU"]
[Tue Apr 28 23:21:14.409503 2026] [:error] [pid 50889:tid 50913] [client 74.248.34.112:49427] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "afDQaozszBr00txEzGhsogAAABU"]
[Tue Apr 28 23:21:21.578507 2026] [:error] [pid 33864:tid 33871] [client 74.248.34.112:59198] [client 74.248.34.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afDQcTXchLGZ4QggCsk-wQAAAIU"]
[Tue Apr 28 23:21:26.068596 2026] [:error] [pid 33777:tid 33839] [client 74.248.34.112:12804] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afDQdrXUCFWqmordGGIk3AAAAQQ"]
[Tue Apr 28 23:21:27.155748 2026] [:error] [pid 33776:tid 33823] [client 74.248.34.112:49459] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afDQd1-bEJ2CKP3iKABPXQAAAE8"]
[Tue Apr 28 23:21:28.041788 2026] [:error] [pid 2741:tid 2758] [client 74.248.34.112:49468] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afDQePp92FeOz1h6ILwiiAAAAUw"]
[Tue Apr 28 23:21:29.390375 2026] [:error] [pid 33777:tid 33856] [client 74.248.34.112:12815] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afDQebXUCFWqmordGGIk4AAAARU"]
[Tue Apr 28 23:21:30.678348 2026] [:error] [pid 33864:tid 33877] [client 74.248.34.112:62940] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afDQejXchLGZ4QggCsk-yAAAAIs"]
[Tue Apr 28 23:21:31.448163 2026] [:error] [pid 2741:tid 2752] [client 74.248.34.112:58543] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afDQe_p92FeOz1h6ILwijgAAAUY"]
[Tue Apr 28 23:21:32.527180 2026] [:error] [pid 33777:tid 33835] [client 74.248.34.112:49411] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afDQfLXUCFWqmordGGIk4gAAAQA"]
[Tue Apr 28 23:21:33.672948 2026] [:error] [pid 33777:tid 33841] [client 74.248.34.112:12701] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afDQfbXUCFWqmordGGIk5gAAAQY"]
[Tue Apr 28 23:21:34.799121 2026] [:error] [pid 50889:tid 50916] [client 74.248.34.112:53963] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afDQfozszBr00txEzGhsrQAAABg"]
[Tue Apr 28 23:21:36.114881 2026] [:error] [pid 2741:tid 2765] [client 74.248.34.112:59139] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afDQgPp92FeOz1h6ILwilwAAAVM"]
[Tue Apr 28 23:21:37.045854 2026] [:error] [pid 50889:tid 50913] [client 74.248.34.112:49419] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afDQgYzszBr00txEzGhssAAAABU"]
[Tue Apr 28 23:21:37.934837 2026] [:error] [pid 33777:tid 33837] [client 74.248.34.112:12841] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afDQgbXUCFWqmordGGIk6AAAAQI"]
[Tue Apr 28 23:21:39.196379 2026] [:error] [pid 33864:tid 33869] [client 74.248.34.112:52058] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afDQgzXchLGZ4QggCsk-ywAAAIM"]
[Tue Apr 28 23:21:40.324068 2026] [:error] [pid 33864:tid 33870] [client 74.248.34.112:12690] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afDQhDXchLGZ4QggCsk-zQAAAIQ"]
[Tue Apr 28 23:21:41.581652 2026] [:error] [pid 2741:tid 2763] [client 74.248.34.112:59145] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afDQhfp92FeOz1h6ILwioAAAAVE"]
[Tue Apr 28 23:21:42.698663 2026] [:error] [pid 33776:tid 33832] [client 74.248.34.112:59166] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afDQhl-bEJ2CKP3iKABPXwAAAFg"]
[Tue Apr 28 23:21:44.023846 2026] [:error] [pid 50889:tid 50910] [client 74.248.34.112:49463] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afDQiIzszBr00txEzGhsuAAAABI"]
[Tue Apr 28 23:21:44.873233 2026] [:error] [pid 2741:tid 2756] [client 74.248.34.112:49428] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afDQiPp92FeOz1h6ILwiqQAAAUo"]
[Tue Apr 28 23:21:45.949457 2026] [:error] [pid 33864:tid 33873] [client 74.248.34.112:52072] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afDQiTXchLGZ4QggCsk-0QAAAIc"]
[Tue Apr 28 23:21:46.788931 2026] [:error] [pid 33775:tid 33780] [client 74.248.34.112:62954] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afDQipsYOcoQrq88YbVCagAAAME"]
[Tue Apr 28 23:21:47.599282 2026] [:error] [pid 33777:tid 33849] [client 74.248.34.112:62923] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afDQi7XUCFWqmordGGIk6gAAAQ4"]
[Tue Apr 28 23:21:48.737629 2026] [:error] [pid 33864:tid 33885] [client 74.248.34.112:12851] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afDQjDXchLGZ4QggCsk-0wAAAJM"]
[Tue Apr 28 23:21:49.323181 2026] [:error] [pid 33777:tid 33851] [client 74.248.34.112:62942] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afDQjbXUCFWqmordGGIk7AAAARA"]
[Tue Apr 28 23:21:50.149818 2026] [:error] [pid 33777:tid 33835] [client 74.248.34.112:53985] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afDQjrXUCFWqmordGGIk7QAAAQA"]
[Tue Apr 28 23:21:50.970611 2026] [:error] [pid 2741:tid 2755] [client 74.248.34.112:58540] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afDQjvp92FeOz1h6ILwivwAAAUk"]
[Tue Apr 28 23:21:51.705458 2026] [:error] [pid 33777:tid 33836] [client 74.248.34.112:49456] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afDQj7XUCFWqmordGGIk7gAAAQE"]
[Tue Apr 28 23:21:52.817936 2026] [:error] [pid 2741:tid 2767] [client 74.248.34.112:53998] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afDQkPp92FeOz1h6ILwixQAAAVU"]
[Tue Apr 28 23:21:53.690138 2026] [:error] [pid 2741:tid 2768] [client 74.248.34.112:49423] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afDQkfp92FeOz1h6ILwiyAAAAVY"]
[Tue Apr 28 23:21:54.264026 2026] [:error] [pid 33777:tid 33843] [client 74.248.34.112:59187] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afDQkrXUCFWqmordGGIk9AAAAQg"]
[Tue Apr 28 23:21:55.274461 2026] [:error] [pid 33777:tid 33846] [client 74.248.34.112:49460] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afDQk7XUCFWqmordGGIk9wAAAQs"]
[Tue Apr 28 23:21:57.718300 2026] [:error] [pid 33776:tid 33817] [client 74.248.34.112:52092] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afDQlV-bEJ2CKP3iKABPYgAAAEk"]
[Tue Apr 28 23:21:58.565454 2026] [:error] [pid 33777:tid 33854] [client 74.248.34.112:12829] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afDQlrXUCFWqmordGGIlAAAAARM"]
[Tue Apr 28 23:21:59.412581 2026] [:error] [pid 33777:tid 33838] [client 74.248.34.112:52076] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afDQl7XUCFWqmordGGIlBAAAAQM"]
[Tue Apr 28 23:22:00.400549 2026] [:error] [pid 33776:tid 33819] [client 74.248.34.112:58521] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afDQmF-bEJ2CKP3iKABPZQAAAEs"]
[Tue Apr 28 23:22:01.464789 2026] [:error] [pid 33776:tid 33826] [client 74.248.34.112:58553] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afDQmV-bEJ2CKP3iKABPZgAAAFI"]
[Tue Apr 28 23:22:02.444776 2026] [:error] [pid 2741:tid 2769] [client 74.248.34.112:12806] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afDQmvp92FeOz1h6ILwi0QAAAVc"]
[Tue Apr 28 23:22:03.463201 2026] [:error] [pid 33777:tid 33845] [client 74.248.34.112:13204] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afDQm7XUCFWqmordGGIlCgAAAQo"]
[Tue Apr 28 23:22:04.776611 2026] [:error] [pid 33777:tid 33858] [client 74.248.34.112:13247] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afDQnLXUCFWqmordGGIlDwAAARc"]
[Tue Apr 28 23:22:05.780555 2026] [:error] [pid 33777:tid 33842] [client 74.248.34.112:49443] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afDQnbXUCFWqmordGGIlFAAAAQc"]
[Tue Apr 28 23:22:06.643525 2026] [:error] [pid 50889:tid 50902] [client 74.248.34.112:59137] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afDQnozszBr00txEzGhswwAAAAo"]
[Tue Apr 28 23:22:07.450295 2026] [:error] [pid 33864:tid 33866] [client 74.248.34.112:58538] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afDQnzXchLGZ4QggCsk-1gAAAIA"]
[Tue Apr 28 23:22:08.364489 2026] [:error] [pid 33776:tid 33816] [client 74.248.34.112:58542] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afDQoF-bEJ2CKP3iKABPagAAAEg"]
[Tue Apr 28 23:22:10.389932 2026] [:error] [pid 33775:tid 33783] [client 74.248.34.112:12858] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afDQopsYOcoQrq88YbVCawAAAMQ"]
[Tue Apr 28 23:22:11.675113 2026] [:error] [pid 2741:tid 2754] [client 74.248.34.112:53942] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afDQo_p92FeOz1h6ILwi3AAAAUg"]
[Tue Apr 28 23:22:12.339813 2026] [:error] [pid 2741:tid 2750] [client 74.248.34.112:58549] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afDQpPp92FeOz1h6ILwi3QAAAUQ"]
[Tue Apr 28 23:22:13.541308 2026] [:error] [pid 33864:tid 33873] [client 74.248.34.112:59188] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afDQpTXchLGZ4QggCsk-4AAAAIc"]
[Tue Apr 28 23:22:14.470415 2026] [:error] [pid 2741:tid 2768] [client 74.248.34.112:12847] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afDQpvp92FeOz1h6ILwi3wAAAVY"]
[Tue Apr 28 23:22:15.713406 2026] [:error] [pid 33777:tid 33837] [client 74.248.34.112:62938] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afDQp7XUCFWqmordGGIlIwAAAQI"]
[Tue Apr 28 23:22:16.710501 2026] [:error] [pid 2741:tid 2770] [client 74.248.34.112:53947] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afDQqPp92FeOz1h6ILwi4QAAAVg"]
[Tue Apr 28 23:22:17.654787 2026] [:error] [pid 2741:tid 2761] [client 74.248.34.112:53893] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afDQqfp92FeOz1h6ILwi5AAAAU8"]
[Tue Apr 28 23:22:18.444658 2026] [:error] [pid 33777:tid 33843] [client 74.248.34.112:58551] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afDQqrXUCFWqmordGGIlKAAAAQg"]
[Tue Apr 28 23:22:19.172724 2026] [:error] [pid 33777:tid 33846] [client 74.248.34.112:53915] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afDQq7XUCFWqmordGGIlKgAAAQs"]
[Tue Apr 28 23:22:20.497408 2026] [:error] [pid 33777:tid 33856] [client 74.248.34.112:58536] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afDQrLXUCFWqmordGGIlMAAAARU"]
[Tue Apr 28 23:22:21.967165 2026] [:error] [pid 2741:tid 2765] [client 74.248.34.112:12827] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afDQrfp92FeOz1h6ILwi6AAAAVM"]
[Tue Apr 28 23:22:22.612252 2026] [:error] [pid 33777:tid 33855] [client 74.248.34.112:13219] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afDQrrXUCFWqmordGGIlOQAAARQ"]
[Tue Apr 28 23:22:23.552330 2026] [:error] [pid 33776:tid 33823] [client 74.248.34.112:49434] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afDQr1-bEJ2CKP3iKABPbwAAAE8"]
[Tue Apr 28 23:22:24.355550 2026] [:error] [pid 33776:tid 33824] [client 74.248.34.112:45709] [client 74.248.34.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afDQsF-bEJ2CKP3iKABPcQAAAFA"]
[Wed Apr 29 01:13:52.247493 2026] [:error] [pid 3594:tid 3600] [client 35.230.190.12:51491] [client 35.230.190.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.230.190.12, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afDq0FX25ha35uHxeYk4sQAAAYM"]
[Wed Apr 29 01:13:55.293187 2026] [:error] [pid 3594:tid 3597] [client 35.230.190.12:51491] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afDq01X25ha35uHxeYk4vwAAAYA"]
[Wed Apr 29 01:13:56.312918 2026] [:error] [pid 33776:tid 33820] [client 35.230.190.12:63639] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afDq1F-bEJ2CKP3iKABdfAAAAEw"]
[Wed Apr 29 01:13:57.315790 2026] [:error] [pid 3594:tid 3613] [client 35.230.190.12:59568] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afDq1VX25ha35uHxeYk4wgAAAZA"]
[Wed Apr 29 01:13:58.337016 2026] [:error] [pid 2741:tid 2759] [client 35.230.190.12:52507] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afDq1vp92FeOz1h6ILxCUwAAAU0"]
[Wed Apr 29 01:13:59.337748 2026] [:error] [pid 2741:tid 2751] [client 35.230.190.12:51634] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afDq1_p92FeOz1h6ILxCVAAAAUU"]
[Wed Apr 29 01:14:00.343863 2026] [:error] [pid 33777:tid 33859] [client 35.230.190.12:56497] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afDq2LXUCFWqmordGGJHJwAAARg"]
[Wed Apr 29 01:14:01.352916 2026] [:error] [pid 2741:tid 2754] [client 35.230.190.12:65204] [client 35.230.190.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afDq2fp92FeOz1h6ILxCVwAAAUg"]
[Wed Apr 29 01:43:38.239894 2026] [:error] [pid 50889:tid 50894] [client 43.128.156.124:44090] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afDxyozszBr00txEzGiD0wAAAAI"]
[Wed Apr 29 05:13:52.055160 2026] [:error] [pid 56757:tid 56820] [client 162.62.213.187:42168] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afEjEPj76quHaaG1miSOiwAAAIE"]
[Wed Apr 29 06:04:26.285508 2026] [:error] [pid 56863:tid 56878] [client 85.11.167.38:39320] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afEu6mQQTEnvYCOsiwLUjAAAAM0"], referer: http://measureyourcause.com.au/
[Wed Apr 29 06:04:26.286708 2026] [:error] [pid 26594:tid 26607] [client 85.11.167.38:39246] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "afEu6ts-37Kay1vO52ky2QAAAQs"], referer: http://measureyourcause.com.au/
[Wed Apr 29 06:04:26.289972 2026] [:error] [pid 56863:tid 56883] [client 85.11.167.38:39292] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "afEu6mQQTEnvYCOsiwLUjgAAANI"], referer: http://measureyourcause.com.au/
[Wed Apr 29 06:07:26.770848 2026] [:error] [pid 40313:tid 40322] [client 85.11.167.38:30796] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/web.config"] [unique_id "afEvnqpx5sKFuV9bHzpSeQAAAUc"], referer: http://measureyourcause.com.au/
[Wed Apr 29 06:07:27.248683 2026] [:error] [pid 56863:tid 56873] [client 85.11.167.38:30824] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.bak"] [unique_id "afEvn2QQTEnvYCOsiwLU9AAAAMg"], referer: http://measureyourcause.com.au/
[Wed Apr 29 06:07:27.249738 2026] [:error] [pid 56863:tid 56871] [client 85.11.167.38:30810] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/composer.json"] [unique_id "afEvn2QQTEnvYCOsiwLU9QAAAMY"], referer: http://measureyourcause.com.au/
[Wed Apr 29 06:09:43.670556 2026] [:error] [pid 40343:tid 40350] [client 85.11.167.38:35454] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.js"] [unique_id "afEwJ2iaWCZjSxz2ZNto2QAAAYM"], referer: http://measureyourcause.com.au/
[Wed Apr 29 06:09:43.670660 2026] [:error] [pid 40343:tid 40370] [client 85.11.167.38:35564] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/config/parameters.yml"] [unique_id "afEwJ2iaWCZjSxz2ZNto2gAAAZY"], referer: http://measureyourcause.com.au/
[Wed Apr 29 06:09:43.673335 2026] [:error] [pid 40343:tid 40364] [client 85.11.167.38:35572] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env-config.js"] [unique_id "afEwJ2iaWCZjSxz2ZNto4AAAAZA"], referer: http://measureyourcause.com.au/
[Wed Apr 29 06:09:43.674819 2026] [:error] [pid 40343:tid 40357] [client 85.11.167.38:35516] [client 85.11.167.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/parameters.yml"] [unique_id "afEwJ2iaWCZjSxz2ZNto4gAAAYo"], referer: http://measureyourcause.com.au/
[Wed Apr 29 06:33:31.486098 2026] [:error] [pid 40343:tid 40363] [client 182.42.111.213:33950] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afE1u2iaWCZjSxz2ZNttpgAAAY8"]
[Wed Apr 29 09:36:49.501884 2026] [:error] [pid 37025:tid 37041] [client 177.91.224.145:20064] [client 177.91.224.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.91.224.145, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afFgsVs-FEY5e2vMBmwF1AAAAM4"]
[Wed Apr 29 11:04:29.305569 2026] [:error] [pid 61539:tid 61564] [client 43.130.106.18:56196] [client 43.130.106.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afF1PV3XmLvOLqFtXVEoYwAAABU"]
[Wed Apr 29 15:34:17.058057 2026] [:error] [pid 61628:tid 61647] [client 45.119.85.39:57520] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG0efXzdLVcrP-YPZg_KAAAAM4"], referer: https://www.google.com
[Wed Apr 29 15:34:17.058132 2026] [:error] [pid 61628:tid 61647] [client 45.119.85.39:57520] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 112"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG0efXzdLVcrP-YPZg_KAAAAM4"], referer: https://www.google.com
[Wed Apr 29 15:52:34.087065 2026] [:error] [pid 2604:tid 2621] [client 159.65.197.137:50074] [client 159.65.197.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.197.137, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "afG4whx5WQMU1W68tTYkQQAAAE8"]
[Wed Apr 29 15:52:35.107120 2026] [:error] [pid 45054:tid 45073] [client 159.65.197.137:65458] [client 159.65.197.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.197.137, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "afG4w4tL6SUL31r23c-l2QAAApE"]
[Wed Apr 29 16:09:30.020228 2026] [:error] [pid 22901:tid 22924] [client 64.227.110.50:53216] [client 64.227.110.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.110.50, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "afG8uhvfVEXI-f42iRRSCgAAARU"]
[Wed Apr 29 16:09:30.763178 2026] [:error] [pid 44860:tid 44881] [client 64.227.110.50:51292] [client 64.227.110.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.110.50, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "afG8ukQ82el2g7ESJ16LVwAAAlM"]
[Wed Apr 29 16:53:40.332146 2026] [:error] [pid 61540:tid 61579] [client 43.166.248.219:38466] [client 43.166.248.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afHHFOQ8cJB7pQslzIfdxwAAAIY"]
[Wed Apr 29 18:48:39.596954 2026] [:error] [pid 61628:tid 61655] [client 175.27.163.171:50992] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afHiB_XzdLVcrP-YPZhGTgAAANY"]
[Wed Apr 29 21:17:20.187653 2026] [:error] [pid 21227:tid 21248] [client 2.57.122.173:56354] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.production"] [unique_id "afIE4MB3c6U5AGPPsXqUfAAAAM8"]
[Wed Apr 29 21:17:20.283890 2026] [:error] [pid 21227:tid 21257] [client 2.57.122.173:56374] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/production/.env"] [unique_id "afIE4MB3c6U5AGPPsXqUfgAAANg"]
[Wed Apr 29 21:17:20.283890 2026] [:error] [pid 21227:tid 21237] [client 2.57.122.173:56370] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "afIE4MB3c6U5AGPPsXqUfQAAAMQ"]
[Wed Apr 29 21:17:20.649043 2026] [:error] [pid 21136:tid 21157] [client 2.57.122.173:56394] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/secrets/.env"] [unique_id "afIE4ClIfGGQdPVv8_PqKQAAAFA"]
[Wed Apr 29 21:17:20.718067 2026] [:error] [pid 21136:tid 21164] [client 2.57.122.173:56398] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/docker/.env"] [unique_id "afIE4ClIfGGQdPVv8_PqKgAAAFc"]
[Wed Apr 29 21:17:22.093162 2026] [:error] [pid 21536:tid 21546] [client 2.57.122.173:56408] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "afIE4iREaVkH9P5H_LQn0QAAAIg"]
[Wed Apr 29 23:02:16.012289 2026] [:error] [pid 21137:tid 21189] [client 195.178.110.223:49520] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "afIdePw-HnaioFPIurV0KQAAABQ"]
[Wed Apr 29 23:02:16.981068 2026] [:error] [pid 21138:tid 21210] [client 195.178.110.223:49552] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env.local"] [unique_id "afIdeJuzwUiyMeUnp30GvgAAAQ0"]
[Wed Apr 29 23:02:17.943219 2026] [:error] [pid 47618:tid 47642] [client 195.178.110.223:49580] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afIdeXHYUSxIrhce2OAzzwAAAVU"]
[Wed Apr 29 23:02:20.877029 2026] [:error] [pid 21137:tid 21185] [client 195.178.110.223:47754] [client 195.178.110.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/static/js/main.js"] [unique_id "afIdfPw-HnaioFPIurV0MgAAABA"]
[Wed Apr 29 23:57:39.908190 2026] [:error] [pid 21136:tid 21165] [client 158.158.98.94:15522] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afIqcylIfGGQdPVv8_P38gAAAFg"]
[Wed Apr 29 23:57:40.941542 2026] [:error] [pid 47618:tid 47635] [client 158.158.98.94:18149] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afIqdHHYUSxIrhce2OA7WQAAAU4"]
[Wed Apr 29 23:57:42.015064 2026] [:error] [pid 21138:tid 21217] [client 158.158.98.94:1664] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afIqdpuzwUiyMeUnp30VigAAARQ"]
[Wed Apr 29 23:57:43.079366 2026] [:error] [pid 21136:tid 21164] [client 158.158.98.94:17373] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afIqdylIfGGQdPVv8_P39QAAAFc"]
[Thu Apr 30 01:05:30.977884 2026] [:error] [pid 21138:tid 21209] [client 43.166.251.233:34846] [client 43.166.251.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afI6WpuzwUiyMeUnp30otwAAAQw"]
[Thu Apr 30 02:18:22.730361 2026] [:error] [pid 21137:tid 21173] [client 103.237.39.212:65142] [client 103.237.39.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.237.39.212, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afJLbvw-HnaioFPIurWe7AAAAAQ"]
[Thu Apr 30 02:18:53.057817 2026] [:error] [pid 21138:tid 21196] [client 223.185.134.204:13301] [client 223.185.134.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.134.204, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afJLjZuzwUiyMeUnp31BdwAAAQA"]
[Thu Apr 30 06:07:13.158117 2026] [:error] [pid 18113:tid 18179] [client 43.160.219.206:41658] [client 43.160.219.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afKBEXiIjwsVGkvz5IlT0gAAAII"]
[Thu Apr 30 06:08:08.694503 2026] [:error] [pid 18220:tid 18242] [client 49.235.136.28:40818] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afKBSMyESVSfAPebmxbp7AAAANM"]
[Thu Apr 30 06:43:28.901381 2026] [:error] [pid 18112:tid 18150] [client 158.158.98.94:60118] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "afKJkCUrJv3y8j6Lm1ufuwAAAEA"]
[Thu Apr 30 06:43:29.879631 2026] [:error] [pid 18111:tid 18127] [client 158.158.98.94:18341] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "afKJkWctLbxB7Q1_oK2CtgAAAAU"]
[Thu Apr 30 06:43:30.899717 2026] [:error] [pid 52436:tid 52461] [client 158.158.98.94:56907] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "afKJkgLFWPk_P7AfE8frbwAAAVY"]
[Thu Apr 30 06:43:31.934049 2026] [:error] [pid 52350:tid 52364] [client 158.158.98.94:1161] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "afKJk_1j4GHE9hm7bfdEUQAAAQY"]
[Thu Apr 30 07:58:52.148036 2026] [:error] [pid 18111:tid 18139] [client 185.93.89.167:36336] [client 185.93.89.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "afKbPGctLbxB7Q1_oK2PqwAAABE"]
[Thu Apr 30 07:58:52.304065 2026] [:error] [pid 18111:tid 18140] [client 185.93.89.167:36352] [client 185.93.89.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "afKbPGctLbxB7Q1_oK2PrQAAABI"]
[Thu Apr 30 07:58:52.865973 2026] [:error] [pid 52436:tid 52457] [client 185.93.89.167:26996] [client 185.93.89.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "afKbPALFWPk_P7AfE8f9IQAAAVI"]
[Thu Apr 30 07:58:53.059619 2026] [:error] [pid 18220:tid 18227] [client 185.93.89.167:27042] [client 185.93.89.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env"] [unique_id "afKbPcyESVSfAPebmxb92wAAAMQ"]
[Thu Apr 30 08:55:52.128273 2026] [:error] [pid 52350:tid 52376] [client 43.157.179.227:56312] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afKomP1j4GHE9hm7bfdgcAAAARI"]
[Thu Apr 30 12:48:04.679825 2026] [:error] [pid 18111:tid 18125] [client 158.158.98.94:65478] [client 158.158.98.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 158.158.98.94, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afLfBGctLbxB7Q1_oK3z0AAAAAM"]
[Thu Apr 30 12:48:08.283722 2026] [autoindex:error] [pid 18111:tid 18135] [client 158.158.98.94:65478] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Apr 30 12:48:09.369886 2026] [:error] [pid 18111:tid 18128] [client 158.158.98.94:65478] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bk/index.php"] [unique_id "afLfCWctLbxB7Q1_oK3z4wAAAAY"]
[Thu Apr 30 12:48:10.346307 2026] [:error] [pid 53641:tid 53651] [client 158.158.98.94:15134] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bk/index.php"] [unique_id "afLfCmC119wja3QGeAGz_wAAAYE"]
[Thu Apr 30 12:48:11.376081 2026] [:error] [pid 53641:tid 53654] [client 158.158.98.94:15482] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bk/index.php"] [unique_id "afLfC2C119wja3QGeAG0AgAAAYM"]
[Thu Apr 30 12:48:12.363798 2026] [:error] [pid 18112:tid 18159] [client 158.158.98.94:56947] [client 158.158.98.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bk/index.php"] [unique_id "afLfDCUrJv3y8j6Lm1vsCAAAAEk"]
[Thu Apr 30 13:46:23.079789 2026] [:error] [pid 18111:tid 18136] [client 100.55.164.6:35788] [client 100.55.164.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 100.55.164.6, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "afLsr2ctLbxB7Q1_oK0M0wAAAA4"]
[Thu Apr 30 14:00:07.189600 2026] [:error] [pid 18220:tid 18232] [client 43.159.136.201:33258] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afLv58yESVSfAPebmxYnzwAAAMk"]
[Thu Apr 30 16:28:25.382220 2026] [:error] [pid 18111:tid 18132] [client 43.167.236.228:46918] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afMSqWctLbxB7Q1_oK09fAAAAAo"]
[Thu Apr 30 17:34:15.354477 2026] [:error] [pid 40003:tid 40026] [client 101.42.46.71:46486] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afMiFzIyJ-Orl-2KA1LT6AAAANQ"]
[Thu Apr 30 20:35:54.225524 2026] [:error] [pid 5820:tid 5824] [client 43.167.236.228:58402] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afNMqgyrLh3-LgH3Xv9MSQAAAAI"]
[Thu Apr 30 21:13:48.111195 2026] [:error] [pid 5733:tid 5803] [client 37.210.42.187:62528] [client 37.210.42.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.210.42.187, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afNVjPT55_Ioa9J2OpL0SAAAAQ0"]
[Thu Apr 30 21:35:08.218393 2026] [:error] [pid 6456:tid 6468] [client 105.102.15.139:60516] [client 105.102.15.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 105.102.15.139, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afNajEOBwsDodnkJK5xt1AAAAEo"]
[Thu Apr 30 21:50:09.719476 2026] [:error] [pid 5820:tid 5845] [client 206.189.145.160:60604] [client 206.189.145.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.145.160, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afNeEQyrLh3-LgH3Xv9biwAAABc"], referer: https://mcgesund.de//wp-login.php
[Thu Apr 30 21:57:04.369615 2026] [:error] [pid 6456:tid 6467] [client 152.58.186.159:53229] [client 152.58.186.159] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.186.159, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afNfsEOBwsDodnkJK5xzswAAAEk"]
[Thu Apr 30 21:58:21.168442 2026] [:error] [pid 5733:tid 5810] [client 80.241.213.248:65025] [client 80.241.213.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "afNf_fT55_Ioa9J2OpL6AAAAARQ"], referer: binance.com
[Thu Apr 30 23:09:03.843445 2026] [:error] [pid 6456:tid 6482] [client 170.106.65.93:41382] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afNwj0OBwsDodnkJK5yHrwAAAFg"]
[Thu Apr 30 23:30:37.216418 2026] [:error] [pid 5731:tid 5740] [client 35.187.43.178:44062] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php~"] [unique_id "afN1nQ8tX7TbSfYoUIxS_QAAAIU"]
[Thu Apr 30 23:30:37.250317 2026] [:error] [pid 6456:tid 6462] [client 35.187.43.178:44110] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.old"] [unique_id "afN1nUOBwsDodnkJK5yNPQAAAEQ"]
[Thu Apr 30 23:30:37.259327 2026] [:error] [pid 5731:tid 5754] [client 35.187.43.178:44120] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.txt"] [unique_id "afN1nQ8tX7TbSfYoUIxS_gAAAJM"]
[Thu Apr 30 23:30:37.414085 2026] [:error] [pid 5732:tid 5785] [client 35.187.43.178:44222] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/config/parameters.yml"] [unique_id "afN1nduJ3iSd5GdjqlhWggAAANY"]
[Thu Apr 30 23:30:37.463186 2026] [:error] [pid 5731:tid 5747] [client 35.187.43.178:44278] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/.config/gcloud/credentials.db"] [unique_id "afN1nQ8tX7TbSfYoUIxTBQAAAIw"]
[Thu Apr 30 23:30:37.544154 2026] [:error] [pid 5731:tid 5744] [client 35.187.43.178:44346] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.bak"] [unique_id "afN1nQ8tX7TbSfYoUIxTCQAAAIk"]
[Thu Apr 30 23:30:37.544636 2026] [:error] [pid 5731:tid 5757] [client 35.187.43.178:44336] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php.bak"] [unique_id "afN1nQ8tX7TbSfYoUIxTCgAAAJY"]
[Thu Apr 30 23:30:37.832990 2026] [:error] [pid 6456:tid 6479] [client 35.187.43.178:44426] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/sites/default/settings.php"] [unique_id "afN1nUOBwsDodnkJK5yNSAAAAFU"]
[Thu Apr 30 23:30:38.086893 2026] [:error] [pid 6456:tid 6458] [client 35.187.43.178:44434] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "afN1nkOBwsDodnkJK5yNSQAAAEA"]
[Thu Apr 30 23:30:38.095652 2026] [:error] [pid 5820:tid 5846] [client 35.187.43.178:44452] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/server.key"] [unique_id "afN1ngyrLh3-LgH3Xv9wsAAAABg"]
[Thu Apr 30 23:30:38.216696 2026] [:error] [pid 6456:tid 6459] [client 35.187.43.178:44458] [client 35.187.43.178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/private.key"] [unique_id "afN1nkOBwsDodnkJK5yNSgAAAEE"]
[Fri May 01 00:42:21.384375 2026] [:error] [pid 5733:tid 5813] [client 34.131.120.156:35478] [client 34.131.120.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afOGbfT55_Ioa9J2OpIN_QAAARc"]
[Fri May 01 02:59:19.272435 2026] [:error] [pid 5733:tid 5807] [client 163.7.4.226:43488] [client 163.7.4.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afOmh_T55_Ioa9J2OpIorAAAARE"]
[Fri May 01 03:43:22.215432 2026] [:error] [pid 11946:tid 11958] [client 43.159.138.217:40652] [client 43.159.138.217] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afOw2rNgEmCRQlqcS4Uq_wAAAMo"]
[Fri May 01 04:56:40.363469 2026] [:error] [pid 38015:tid 38053] [client 92.53.64.155:58594] [client 92.53.64.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "afPCCMNJWoh41gYMCSVpTAAAAEI"]
[Fri May 01 06:16:56.106430 2026] [:error] [pid 38014:tid 38044] [client 43.130.16.212:43454] [client 43.130.16.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afPU2FHplhcdzdndjk0IsgAAABU"]
[Fri May 01 13:49:18.432693 2026] [:error] [pid 24995:tid 25006] [client 43.157.179.227:34986] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afQ-3udJG9WB_Q_ne0t04wAAAEc"]
[Fri May 01 17:56:48.598705 2026] [:error] [pid 24997:tid 25079] [client 35.252.64.78:52502] [client 35.252.64.78] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.252.64.78, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afR44POkHa4ScY5oo8yuTQAAANc"]
[Fri May 01 17:56:52.247962 2026] [:error] [pid 24997:tid 25068] [client 35.252.64.78:52502] [client 35.252.64.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afR45POkHa4ScY5oo8yuWgAAAMw"]
[Fri May 01 17:56:52.906590 2026] [:error] [pid 25085:tid 25105] [client 35.252.64.78:64633] [client 35.252.64.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afR45PuD8fWRiE0RX0Hn8wAAAU4"]
[Fri May 01 17:56:53.564226 2026] [:error] [pid 33791:tid 33813] [client 35.252.64.78:55613] [client 35.252.64.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afR45W9ixd-moLycM9DabAAAABM"]
[Fri May 01 17:56:54.219204 2026] [:error] [pid 25085:tid 25102] [client 35.252.64.78:51375] [client 35.252.64.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afR45vuD8fWRiE0RX0Hn9AAAAUs"]
[Fri May 01 17:56:54.871641 2026] [:error] [pid 33791:tid 33797] [client 35.252.64.78:52201] [client 35.252.64.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afR45m9ixd-moLycM9DabwAAAAM"]
[Fri May 01 17:56:55.526841 2026] [:error] [pid 25085:tid 25097] [client 35.252.64.78:51381] [client 35.252.64.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afR45_uD8fWRiE0RX0Hn9QAAAUY"]
[Fri May 01 17:56:56.181321 2026] [:error] [pid 33791:tid 33805] [client 35.252.64.78:54705] [client 35.252.64.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afR46G9ixd-moLycM9DadAAAAAs"]
[Fri May 01 18:08:15.996929 2026] [:error] [pid 25085:tid 25101] [client 43.135.142.7:42020] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afR7j_uD8fWRiE0RX0HrIQAAAUo"]
[Fri May 01 18:23:53.964412 2026] [:error] [pid 24997:tid 25076] [client 111.230.233.46:59230] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afR_OfOkHa4ScY5oo8y18QAAANQ"]
[Fri May 01 19:04:10.028013 2026] [:error] [pid 24995:tid 25021] [client 152.58.17.240:60629] [client 152.58.17.240] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.58.17.240, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afSIqudJG9WB_Q_ne0unJQAAAFY"]
[Fri May 01 20:08:22.077965 2026] [ssl:error] [pid 33791:tid 33816] [client 139.59.177.211:41486] AH02032: Hostname blog.autonomous.ai provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup
[Sat May 02 00:49:23.978523 2026] [:error] [pid 50214:tid 50232] [client 43.166.251.233:59754] [client 43.166.251.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afTZk4s0pgrtfZkbhjOPFQAAAY4"]
[Sat May 02 04:03:36.658336 2026] [:error] [pid 53540:tid 53559] [client 92.118.39.29:59084] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afUHGNQYV6qJFftBNymVzAAAANE"]
[Sat May 02 05:27:47.103841 2026] [:error] [pid 53540:tid 53560] [client 43.153.79.218:51056] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afUa09QYV6qJFftBNymnLQAAANI"]
[Sat May 02 07:04:57.169848 2026] [:error] [pid 53436:tid 53516] [client 92.118.39.29:46714] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afUxma9N0xp8fccVM0BxtQAAAJE"]
[Sat May 02 07:10:14.736807 2026] [:error] [pid 22846:tid 22849] [client 175.178.110.121:33902] [client 175.178.110.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afUy1om1Ms03Mfhp3aawVAAAAQE"]
[Sat May 02 12:02:17.640349 2026] [:error] [pid 11894:tid 11903] [client 162.62.213.165:46462] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afV3STHh6DQF1tkXIKyd-QAAAUY"]
[Sat May 02 12:16:43.978231 2026] [ssl:error] [pid 51950:tid 51983] [client 15.204.183.221:56864] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: http://measureyourcause.com/
[Sat May 02 12:35:12.713622 2026] [:error] [pid 11894:tid 11920] [client 192.96.159.129:59714] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "afV_ADHh6DQF1tkXIKyigAAAAVc"]
[Sat May 02 14:06:51.060142 2026] [ssl:error] [pid 53434:tid 53451] [client 15.204.183.221:1112] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: http://www.measureyourcause.com/
[Sat May 02 14:55:42.968490 2026] [:error] [pid 51950:tid 52002] [client 43.162.95.192:33494] [client 43.162.95.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afWf7ooBJzYZ3RKUhdgNGAAAAlY"]
[Sat May 02 19:18:08.353514 2026] [:error] [pid 51917:tid 51928] [client 43.165.4.2:36668] [client 43.165.4.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afXdcK7wZviJ7BgcCi9FgAAAAck"]
[Sat May 02 20:29:51.770427 2026] [ssl:error] [pid 52012:tid 52082] [client 15.204.161.7:9586] AH02032: Hostname measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://measureyourcause.com/
[Sat May 02 22:05:30.046376 2026] [ssl:error] [pid 53435:tid 53489] [client 15.204.161.7:62486] AH02032: Hostname www.measureyourcause.com provided via SNI and hostname measureyourcause.com.au provided via HTTP have no compatible SSL setup, referer: https://www.measureyourcause.com/
[Sun May 03 00:57:52.675041 2026] [:error] [pid 52012:tid 52091] [client 34.24.172.92:38030] [client 34.24.172.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afYtEEzSWr-8cpS83mgM8AAAA04"]
[Sun May 03 02:16:55.239290 2026] [:error] [pid 51950:tid 51991] [client 170.106.72.93:57094] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afY_l4oBJzYZ3RKUhdiTFQAAAks"]
[Sun May 03 02:22:52.268631 2026] [:error] [pid 53436:tid 53508] [client 20.151.130.38:65467] [client 20.151.130.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afZA_K9N0xp8fccVM0Dx0AAAAIk"]
[Sun May 03 02:22:55.973546 2026] [:error] [pid 53434:tid 53446] [client 20.151.130.38:64799] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spawns.php"] [unique_id "afZA_-9BXmRQcbfsxly9ywAAAAM"]
[Sun May 03 02:22:56.473935 2026] [:error] [pid 52010:tid 52048] [client 20.151.130.38:62503] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spawns.php"] [unique_id "afZBAAiR6wohDtdeJMByygAAAsU"]
[Sun May 03 02:22:56.959792 2026] [:error] [pid 52010:tid 52066] [client 20.151.130.38:62572] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spawns.php"] [unique_id "afZBAAiR6wohDtdeJMBy0QAAAtc"]
[Sun May 03 02:22:57.384144 2026] [:error] [pid 52010:tid 52061] [client 20.151.130.38:65499] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/spawns.php"] [unique_id "afZBAQiR6wohDtdeJMBy1QAAAtI"]
[Sun May 03 02:22:57.810430 2026] [:error] [pid 52010:tid 52055] [client 20.151.130.38:64860] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t3s.php"] [unique_id "afZBAQiR6wohDtdeJMBy2AAAAsw"]
[Sun May 03 02:22:58.293542 2026] [:error] [pid 22846:tid 22871] [client 20.151.130.38:64879] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t3s.php"] [unique_id "afZBAom1Ms03Mfhp3aYYoAAAARc"]
[Sun May 03 02:22:58.737070 2026] [:error] [pid 51917:tid 51930] [client 20.151.130.38:65433] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t3s.php"] [unique_id "afZBAq7wZviJ7BgcCi96VQAAAcs"]
[Sun May 03 02:22:59.246167 2026] [:error] [pid 52010:tid 52044] [client 20.151.130.38:64770] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t3s.php"] [unique_id "afZBAwiR6wohDtdeJMBy2gAAAsE"]
[Sun May 03 02:22:59.739631 2026] [:error] [pid 53434:tid 53456] [client 20.151.130.38:65435] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "afZBA-9BXmRQcbfsxly9zgAAAA0"]
[Sun May 03 02:23:00.195598 2026] [:error] [pid 51950:tid 52003] [client 20.151.130.38:62497] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "afZBBIoBJzYZ3RKUhdiUQAAAAlc"]
[Sun May 03 02:23:00.635532 2026] [:error] [pid 51950:tid 51984] [client 20.151.130.38:65492] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "afZBBIoBJzYZ3RKUhdiUQQAAAkQ"]
[Sun May 03 02:23:01.139461 2026] [:error] [pid 51917:tid 51923] [client 20.151.130.38:64807] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/"] [unique_id "afZBBa7wZviJ7BgcCi96VgAAAcQ"]
[Sun May 03 02:23:01.649190 2026] [:error] [pid 52012:tid 52078] [client 20.151.130.38:61899] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "afZBBUzSWr-8cpS83mgq1AAAA0E"]
[Sun May 03 02:23:02.171329 2026] [:error] [pid 51917:tid 51924] [client 20.151.130.38:64835] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "afZBBq7wZviJ7BgcCi96WAAAAcU"]
[Sun May 03 02:23:02.684841 2026] [:error] [pid 52012:tid 52086] [client 20.151.130.38:62511] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "afZBBkzSWr-8cpS83mgq2gAAA0k"]
[Sun May 03 02:23:03.229740 2026] [:error] [pid 52012:tid 52084] [client 20.151.130.38:64831] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x/"] [unique_id "afZBB0zSWr-8cpS83mgq3gAAA0c"]
[Sun May 03 02:23:03.721594 2026] [:error] [pid 53436:tid 53516] [client 20.151.130.38:64832] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afZBB69N0xp8fccVM0Dx0gAAAJE"]
[Sun May 03 02:23:04.456726 2026] [:error] [pid 53436:tid 53499] [client 20.151.130.38:62589] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afZBCK9N0xp8fccVM0Dx1QAAAIA"]
[Sun May 03 02:23:04.936477 2026] [:error] [pid 53435:tid 53483] [client 20.151.130.38:62465] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afZBCIDmp7_z8QkjSzMhuAAAAEs"]
[Sun May 03 02:23:05.464572 2026] [:error] [pid 52012:tid 52093] [client 20.151.130.38:62575] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afZBCUzSWr-8cpS83mgq4QAAA1A"]
[Sun May 03 02:23:06.045084 2026] [:error] [pid 53435:tid 53489] [client 20.151.130.38:65456] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/configuration.php"] [unique_id "afZBCoDmp7_z8QkjSzMhvgAAAFE"]
[Sun May 03 02:23:06.522350 2026] [:error] [pid 51917:tid 51936] [client 20.151.130.38:62514] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/configuration.php"] [unique_id "afZBCq7wZviJ7BgcCi96WgAAAdE"]
[Sun May 03 02:23:07.040327 2026] [:error] [pid 51917:tid 51934] [client 20.151.130.38:62519] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/configuration.php"] [unique_id "afZBC67wZviJ7BgcCi96WwAAAc8"]
[Sun May 03 02:23:07.476428 2026] [:error] [pid 52012:tid 52082] [client 20.151.130.38:62486] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/configuration.php"] [unique_id "afZBC0zSWr-8cpS83mgq5AAAA0U"]
[Sun May 03 02:23:07.966081 2026] [:error] [pid 52010:tid 52062] [client 20.151.130.38:65463] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/"] [unique_id "afZBCwiR6wohDtdeJMBy5QAAAtM"]
[Sun May 03 02:23:08.453895 2026] [:error] [pid 52012:tid 52094] [client 20.151.130.38:64780] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/"] [unique_id "afZBDEzSWr-8cpS83mgq5QAAA1E"]
[Sun May 03 02:23:08.904578 2026] [:error] [pid 11894:tid 11910] [client 20.151.130.38:60510] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/"] [unique_id "afZBDDHh6DQF1tkXIKz_UQAAAU0"]
[Sun May 03 02:23:09.397561 2026] [:error] [pid 53434:tid 53443] [client 20.151.130.38:64895] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/"] [unique_id "afZBDe9BXmRQcbfsxly91wAAAAA"]
[Sun May 03 02:23:09.884284 2026] [:error] [pid 52010:tid 52055] [client 20.151.130.38:62554] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "afZBDQiR6wohDtdeJMBy5wAAAsw"]
[Sun May 03 02:23:10.375601 2026] [:error] [pid 52012:tid 52099] [client 20.151.130.38:64792] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "afZBDkzSWr-8cpS83mgq5gAAA1Y"]
[Sun May 03 02:23:10.919620 2026] [:error] [pid 53434:tid 53449] [client 20.151.130.38:62466] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "afZBDu9BXmRQcbfsxly93AAAAAY"]
[Sun May 03 02:23:11.526644 2026] [:error] [pid 52012:tid 52085] [client 20.151.130.38:64805] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwu.php"] [unique_id "afZBD0zSWr-8cpS83mgq5wAAA0g"]
[Sun May 03 02:23:12.059732 2026] [:error] [pid 51917:tid 51929] [client 20.151.130.38:62479] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwa.php"] [unique_id "afZBEK7wZviJ7BgcCi96XgAAAco"]
[Sun May 03 02:23:12.532452 2026] [:error] [pid 22846:tid 22865] [client 20.151.130.38:62579] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwa.php"] [unique_id "afZBEIm1Ms03Mfhp3aYYpgAAARE"]
[Sun May 03 02:23:12.983120 2026] [:error] [pid 51917:tid 51943] [client 20.151.130.38:64779] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwa.php"] [unique_id "afZBEK7wZviJ7BgcCi96XwAAAdg"]
[Sun May 03 02:23:13.491895 2026] [:error] [pid 22846:tid 22850] [client 20.151.130.38:64839] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwa.php"] [unique_id "afZBEYm1Ms03Mfhp3aYYpwAAAQI"]
[Sun May 03 02:23:13.979635 2026] [:error] [pid 51950:tid 51993] [client 20.151.130.38:61907] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afZBEYoBJzYZ3RKUhdiURwAAAk0"]
[Sun May 03 02:23:14.472759 2026] [:error] [pid 53436:tid 53502] [client 20.151.130.38:64771] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afZBEq9N0xp8fccVM0Dx3AAAAIM"]
[Sun May 03 02:23:14.910374 2026] [:error] [pid 52010:tid 52054] [client 20.151.130.38:64823] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afZBEgiR6wohDtdeJMBy7AAAAss"]
[Sun May 03 02:23:15.495952 2026] [:error] [pid 53434:tid 53453] [client 20.151.130.38:65459] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afZBE-9BXmRQcbfsxly94wAAAAo"]
[Sun May 03 02:23:15.982572 2026] [:error] [pid 51917:tid 51926] [client 20.151.130.38:65410] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afZBE67wZviJ7BgcCi96YgAAAcc"]
[Sun May 03 02:23:16.402540 2026] [:error] [pid 11894:tid 11918] [client 20.151.130.38:62581] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afZBFDHh6DQF1tkXIKz_VQAAAVU"]
[Sun May 03 02:23:16.898126 2026] [:error] [pid 53436:tid 53511] [client 20.151.130.38:62502] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afZBFK9N0xp8fccVM0Dx3QAAAIw"]
[Sun May 03 02:23:17.357011 2026] [:error] [pid 53436:tid 53519] [client 20.151.130.38:61311] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afZBFa9N0xp8fccVM0Dx3gAAAJQ"]
[Sun May 03 02:23:17.842808 2026] [:error] [pid 11894:tid 11901] [client 20.151.130.38:62542] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afZBFTHh6DQF1tkXIKz_VgAAAUQ"]
[Sun May 03 02:23:18.298251 2026] [:error] [pid 53434:tid 53449] [client 20.151.130.38:64788] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afZBFu9BXmRQcbfsxly96QAAAAY"]
[Sun May 03 02:23:18.733963 2026] [:error] [pid 52010:tid 52067] [client 20.151.130.38:64858] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afZBFgiR6wohDtdeJMBy7gAAAtg"]
[Sun May 03 02:23:19.153670 2026] [:error] [pid 53435:tid 53496] [client 20.151.130.38:62482] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afZBF4Dmp7_z8QkjSzMhwwAAAFg"]
[Sun May 03 02:23:19.624939 2026] [:error] [pid 53435:tid 53477] [client 20.151.130.38:64781] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afZBF4Dmp7_z8QkjSzMhxQAAAEU"]
[Sun May 03 02:23:20.118189 2026] [:error] [pid 52010:tid 52047] [client 20.151.130.38:61857] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afZBGAiR6wohDtdeJMBy7wAAAsQ"]
[Sun May 03 02:23:20.631136 2026] [:error] [pid 52010:tid 52061] [client 20.151.130.38:65471] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afZBGAiR6wohDtdeJMBy8QAAAtI"]
[Sun May 03 02:23:21.121398 2026] [:error] [pid 53434:tid 53461] [client 20.151.130.38:62481] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afZBGe9BXmRQcbfsxly97wAAABI"]
[Sun May 03 02:23:21.597328 2026] [:error] [pid 53435:tid 53473] [client 20.151.130.38:65409] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afZBGYDmp7_z8QkjSzMhyAAAAEE"]
[Sun May 03 02:23:22.079905 2026] [:error] [pid 51917:tid 51927] [client 20.151.130.38:64847] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afZBGq7wZviJ7BgcCi96ZgAAAcg"]
[Sun May 03 02:23:22.569442 2026] [:error] [pid 53435:tid 53476] [client 20.151.130.38:64834] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afZBGoDmp7_z8QkjSzMhzAAAAEQ"]
[Sun May 03 02:23:23.027489 2026] [:error] [pid 53434:tid 53444] [client 20.151.130.38:64768] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afZBG-9BXmRQcbfsxly98wAAAAE"]
[Sun May 03 02:23:23.466821 2026] [:error] [pid 53434:tid 53450] [client 20.151.130.38:65485] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afZBG-9BXmRQcbfsxly99gAAAAc"]
[Sun May 03 02:23:23.915900 2026] [:error] [pid 52012:tid 52092] [client 20.151.130.38:65522] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afZBG0zSWr-8cpS83mgq6wAAA08"]
[Sun May 03 02:23:24.370648 2026] [:error] [pid 52010:tid 52059] [client 20.151.130.38:61837] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afZBHAiR6wohDtdeJMBy9gAAAtA"]
[Sun May 03 02:23:24.850439 2026] [:error] [pid 52010:tid 52060] [client 20.151.130.38:65515] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afZBHAiR6wohDtdeJMBy-QAAAtE"]
[Sun May 03 02:23:25.313674 2026] [:error] [pid 53434:tid 53463] [client 20.151.130.38:64797] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afZBHe9BXmRQcbfsxly-AAAAABQ"]
[Sun May 03 02:23:25.761673 2026] [:error] [pid 53434:tid 53453] [client 20.151.130.38:62501] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afZBHe9BXmRQcbfsxly-AwAAAAo"]
[Sun May 03 02:23:26.229164 2026] [:error] [pid 52010:tid 52065] [client 20.151.130.38:64787] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afZBHgiR6wohDtdeJMBy_AAAAtY"]
[Sun May 03 02:23:26.805493 2026] [:error] [pid 53434:tid 53443] [client 20.151.130.38:62571] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afZBHu9BXmRQcbfsxly-CgAAAAA"]
[Sun May 03 02:23:27.288587 2026] [:error] [pid 53434:tid 53459] [client 20.151.130.38:62566] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afZBH-9BXmRQcbfsxly-DgAAABA"]
[Sun May 03 02:23:27.861204 2026] [:error] [pid 53435:tid 53484] [client 20.151.130.38:62552] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afZBH4Dmp7_z8QkjSzMh2wAAAEw"]
[Sun May 03 02:23:28.305876 2026] [:error] [pid 53435:tid 53494] [client 20.151.130.38:65408] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afZBIIDmp7_z8QkjSzMh4QAAAFY"]
[Sun May 03 02:23:28.767164 2026] [:error] [pid 52010:tid 52050] [client 20.151.130.38:64855] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afZBIAiR6wohDtdeJMBzAQAAAsc"]
[Sun May 03 02:23:29.293675 2026] [:error] [pid 52010:tid 52048] [client 20.151.130.38:62565] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afZBIQiR6wohDtdeJMBzBAAAAsU"]
[Sun May 03 02:23:29.821840 2026] [:error] [pid 53434:tid 53466] [client 20.151.130.38:65474] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afZBIe9BXmRQcbfsxly-EwAAABc"]
[Sun May 03 02:23:30.267823 2026] [:error] [pid 51917:tid 51938] [client 20.151.130.38:65520] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afZBIq7wZviJ7BgcCi96awAAAdM"]
[Sun May 03 02:23:30.734334 2026] [:error] [pid 53435:tid 53486] [client 20.151.130.38:65428] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afZBIoDmp7_z8QkjSzMh6AAAAE4"]
[Sun May 03 02:23:31.214272 2026] [:error] [pid 52012:tid 52080] [client 20.151.130.38:64793] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afZBI0zSWr-8cpS83mgq8wAAA0M"]
[Sun May 03 02:23:31.707932 2026] [:error] [pid 11894:tid 11903] [client 20.151.130.38:64863] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afZBIzHh6DQF1tkXIKz_WwAAAUY"]
[Sun May 03 02:23:32.164284 2026] [:error] [pid 53435:tid 53492] [client 20.151.130.38:62498] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afZBJIDmp7_z8QkjSzMh7gAAAFQ"]
[Sun May 03 02:23:32.717481 2026] [:error] [pid 53435:tid 53478] [client 20.151.130.38:65490] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afZBJIDmp7_z8QkjSzMh7wAAAEY"]
[Sun May 03 02:23:33.169463 2026] [:error] [pid 52010:tid 52058] [client 20.151.130.38:61270] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afZBJQiR6wohDtdeJMBzBwAAAs8"]
[Sun May 03 02:23:33.693388 2026] [:error] [pid 53435:tid 53486] [client 20.151.130.38:62529] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afZBJYDmp7_z8QkjSzMh8gAAAE4"]
[Sun May 03 02:23:34.161705 2026] [:error] [pid 52010:tid 52046] [client 20.151.130.38:64875] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afZBJgiR6wohDtdeJMBzCwAAAsM"]
[Sun May 03 02:23:34.645284 2026] [:error] [pid 52012:tid 52090] [client 20.151.130.38:64848] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afZBJkzSWr-8cpS83mgq-gAAA00"]
[Sun May 03 02:23:35.083017 2026] [:error] [pid 53435:tid 53482] [client 20.151.130.38:61834] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afZBJ4Dmp7_z8QkjSzMh-AAAAEo"]
[Sun May 03 02:23:35.611000 2026] [:error] [pid 52124:tid 52142] [client 20.151.130.38:62499] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afZBJzjabaZ9NMm8eQuh8wAAA40"]
[Sun May 03 02:23:36.086573 2026] [:error] [pid 52010:tid 52066] [client 20.151.130.38:65525] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afZBKAiR6wohDtdeJMBzEQAAAtc"]
[Sun May 03 02:23:36.515593 2026] [:error] [pid 53435:tid 53475] [client 20.151.130.38:65455] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afZBKIDmp7_z8QkjSzMh_AAAAEM"]
[Sun May 03 02:23:36.956607 2026] [:error] [pid 53435:tid 53480] [client 20.151.130.38:64870] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZBKIDmp7_z8QkjSzMh_QAAAEg"]
[Sun May 03 02:23:37.451218 2026] [:error] [pid 53434:tid 53448] [client 20.151.130.38:61189] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZBKe9BXmRQcbfsxly-GwAAAAU"]
[Sun May 03 02:23:37.868973 2026] [:error] [pid 53434:tid 53445] [client 20.151.130.38:64837] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZBKe9BXmRQcbfsxly-HAAAAAI"]
[Sun May 03 02:23:38.349118 2026] [:error] [pid 53435:tid 53476] [client 20.151.130.38:64838] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afZBKoDmp7_z8QkjSzMiBQAAAEQ"]
[Sun May 03 02:23:38.827848 2026] [:error] [pid 53435:tid 53496] [client 20.151.130.38:61900] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afZBKoDmp7_z8QkjSzMiCQAAAFg"]
[Sun May 03 02:23:39.279724 2026] [:error] [pid 53434:tid 53443] [client 20.151.130.38:62509] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afZBK-9BXmRQcbfsxly-HgAAAAA"]
[Sun May 03 02:23:39.779614 2026] [:error] [pid 53435:tid 53486] [client 20.151.130.38:65443] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afZBK4Dmp7_z8QkjSzMiDwAAAE4"]
[Sun May 03 02:23:40.364178 2026] [:error] [pid 53435:tid 53482] [client 20.151.130.38:61850] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afZBLIDmp7_z8QkjSzMiEgAAAEo"]
[Sun May 03 02:23:40.846689 2026] [:error] [pid 52012:tid 52085] [client 20.151.130.38:61281] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afZBLEzSWr-8cpS83mgq_wAAA0g"]
[Sun May 03 02:23:41.309797 2026] [:error] [pid 53435:tid 53477] [client 20.151.130.38:61931] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afZBLYDmp7_z8QkjSzMiGQAAAEU"]
[Sun May 03 02:23:41.842779 2026] [:error] [pid 53435:tid 53488] [client 20.151.130.38:65454] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afZBLYDmp7_z8QkjSzMiHQAAAFA"]
[Sun May 03 02:23:42.337145 2026] [:error] [pid 53435:tid 53493] [client 20.151.130.38:61914] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afZBLoDmp7_z8QkjSzMiHwAAAFU"]
[Sun May 03 02:23:42.805695 2026] [:error] [pid 52010:tid 52057] [client 20.151.130.38:62472] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afZBLgiR6wohDtdeJMBzFAAAAs4"]
[Sun May 03 02:23:43.295763 2026] [:error] [pid 52010:tid 52062] [client 20.151.130.38:64804] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afZBLwiR6wohDtdeJMBzFgAAAtM"]
[Sun May 03 02:23:43.763008 2026] [:error] [pid 52010:tid 52048] [client 20.151.130.38:64843] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afZBLwiR6wohDtdeJMBzGQAAAsU"]
[Sun May 03 02:23:44.188333 2026] [:error] [pid 51950:tid 52002] [client 20.151.130.38:62564] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afZBMIoBJzYZ3RKUhdiUUwAAAlY"]
[Sun May 03 02:23:44.659521 2026] [:error] [pid 51950:tid 51985] [client 20.151.130.38:62574] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afZBMIoBJzYZ3RKUhdiUVQAAAkU"]
[Sun May 03 02:23:45.121389 2026] [:error] [pid 22846:tid 22851] [client 20.151.130.38:64878] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afZBMYm1Ms03Mfhp3aYYuQAAAQM"]
[Sun May 03 02:23:45.610957 2026] [:error] [pid 52010:tid 52065] [client 20.151.130.38:61297] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afZBMQiR6wohDtdeJMBzHAAAAtY"]
[Sun May 03 02:23:46.054429 2026] [:error] [pid 53435:tid 53484] [client 20.151.130.38:65411] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afZBMoDmp7_z8QkjSzMiJwAAAEw"]
[Sun May 03 02:23:46.546142 2026] [:error] [pid 53434:tid 53461] [client 20.151.130.38:61930] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afZBMu9BXmRQcbfsxly-JQAAABI"]
[Sun May 03 02:23:47.006669 2026] [:error] [pid 53435:tid 53483] [client 20.151.130.38:64845] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afZBM4Dmp7_z8QkjSzMiLQAAAEs"]
[Sun May 03 02:23:47.546219 2026] [:error] [pid 52012:tid 52081] [client 20.151.130.38:64814] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afZBM0zSWr-8cpS83mgrAAAAA0Q"]
[Sun May 03 02:23:48.016723 2026] [:error] [pid 52012:tid 52082] [client 20.151.130.38:61881] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afZBNEzSWr-8cpS83mgrAQAAA0U"]
[Sun May 03 02:23:48.525641 2026] [:error] [pid 53435:tid 53472] [client 20.151.130.38:60442] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afZBNIDmp7_z8QkjSzMiMQAAAEA"]
[Sun May 03 02:23:48.983010 2026] [:error] [pid 52010:tid 52057] [client 20.151.130.38:62512] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afZBNAiR6wohDtdeJMBzIQAAAs4"]
[Sun May 03 02:23:49.714006 2026] [:error] [pid 22846:tid 22866] [client 20.151.130.38:64873] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afZBNYm1Ms03Mfhp3aYYvAAAARI"]
[Sun May 03 02:23:50.202184 2026] [:error] [pid 53435:tid 53491] [client 20.151.130.38:64889] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afZBNoDmp7_z8QkjSzMiMwAAAFM"]
[Sun May 03 02:23:50.749829 2026] [:error] [pid 52012:tid 52092] [client 20.151.130.38:64894] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "afZBNkzSWr-8cpS83mgrBwAAA08"]
[Sun May 03 02:23:51.219782 2026] [:error] [pid 52010:tid 52060] [client 20.151.130.38:62477] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "afZBNwiR6wohDtdeJMBzJQAAAtE"]
[Sun May 03 02:23:51.679531 2026] [:error] [pid 53435:tid 53487] [client 20.151.130.38:61935] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "afZBN4Dmp7_z8QkjSzMiNgAAAE8"]
[Sun May 03 02:23:52.153918 2026] [:error] [pid 52012:tid 52102] [client 20.151.130.38:61906] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "afZBOEzSWr-8cpS83mgrDAAAA1g"]
[Sun May 03 02:23:52.658457 2026] [:error] [pid 52012:tid 52097] [client 20.151.130.38:64818] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZBOEzSWr-8cpS83mgrEwAAA1Q"]
[Sun May 03 02:23:53.115084 2026] [:error] [pid 53434:tid 53446] [client 20.151.130.38:61191] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZBOe9BXmRQcbfsxly-MgAAAAM"]
[Sun May 03 02:23:53.581740 2026] [:error] [pid 53435:tid 53481] [client 20.151.130.38:62527] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZBOYDmp7_z8QkjSzMiOQAAAEk"]
[Sun May 03 02:23:54.073249 2026] [:error] [pid 52012:tid 52087] [client 20.151.130.38:62549] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afZBOkzSWr-8cpS83mgrHAAAA0o"]
[Sun May 03 02:23:54.577293 2026] [:error] [pid 53435:tid 53473] [client 20.151.130.38:62492] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afZBOoDmp7_z8QkjSzMiQAAAAEE"]
[Sun May 03 02:24:00.828758 2026] [:error] [pid 52012:tid 52085] [client 20.151.130.38:62544] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afZBQEzSWr-8cpS83mgrUAAAA0g"]
[Sun May 03 02:24:01.332617 2026] [:error] [pid 51950:tid 51982] [client 20.151.130.38:64856] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afZBQYoBJzYZ3RKUhdiUYAAAAkI"]
[Sun May 03 02:24:01.796621 2026] [:error] [pid 51950:tid 51999] [client 20.151.130.38:64842] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afZBQYoBJzYZ3RKUhdiUZAAAAlM"]
[Sun May 03 02:24:02.343696 2026] [:error] [pid 51950:tid 51988] [client 20.151.130.38:64893] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afZBQooBJzYZ3RKUhdiUaAAAAkg"]
[Sun May 03 02:24:02.838281 2026] [:error] [pid 22846:tid 22871] [client 20.151.130.38:64853] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afZBQom1Ms03Mfhp3aYYwwAAARc"]
[Sun May 03 02:24:03.391278 2026] [:error] [pid 53435:tid 53495] [client 20.151.130.38:61856] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afZBQ4Dmp7_z8QkjSzMiRwAAAFc"]
[Sun May 03 02:24:03.883203 2026] [:error] [pid 53435:tid 53472] [client 20.151.130.38:61928] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afZBQ4Dmp7_z8QkjSzMiSQAAAEA"]
[Sun May 03 02:24:04.468551 2026] [:error] [pid 52012:tid 52098] [client 20.151.130.38:61826] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afZBREzSWr-8cpS83mgrVgAAA1U"]
[Sun May 03 02:24:05.144757 2026] [:error] [pid 52012:tid 52094] [client 20.151.130.38:65439] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afZBRUzSWr-8cpS83mgrXQAAA1E"]
[Sun May 03 02:24:05.887051 2026] [:error] [pid 52012:tid 52096] [client 20.151.130.38:61852] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afZBRUzSWr-8cpS83mgrYQAAA1M"]
[Sun May 03 02:24:06.407052 2026] [:error] [pid 52012:tid 52080] [client 20.151.130.38:65445] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afZBRkzSWr-8cpS83mgrZwAAA0M"]
[Sun May 03 02:24:06.885323 2026] [:error] [pid 52012:tid 52084] [client 20.151.130.38:64769] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afZBRkzSWr-8cpS83mgragAAA0c"]
[Sun May 03 02:24:07.341609 2026] [:error] [pid 11894:tid 11905] [client 20.151.130.38:64784] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afZBRzHh6DQF1tkXIKz_YwAAAUg"]
[Sun May 03 02:24:07.883570 2026] [:error] [pid 51950:tid 51997] [client 20.151.130.38:61903] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afZBR4oBJzYZ3RKUhdiUbAAAAlE"]
[Sun May 03 02:24:08.402960 2026] [:error] [pid 52010:tid 52046] [client 20.151.130.38:61908] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afZBSAiR6wohDtdeJMBzOQAAAsM"]
[Sun May 03 02:24:08.880596 2026] [:error] [pid 51950:tid 51982] [client 20.151.130.38:61851] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afZBSIoBJzYZ3RKUhdiUbQAAAkI"]
[Sun May 03 02:24:09.336037 2026] [:error] [pid 52124:tid 52144] [client 20.151.130.38:62490] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afZBSTjabaZ9NMm8eQuh_wAAA48"]
[Sun May 03 02:24:09.754114 2026] [:error] [pid 52010:tid 52062] [client 20.151.130.38:60440] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afZBSQiR6wohDtdeJMBzPAAAAtM"]
[Sun May 03 02:24:10.190620 2026] [:error] [pid 52010:tid 52065] [client 20.151.130.38:62505] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afZBSgiR6wohDtdeJMBzPwAAAtY"]
[Sun May 03 02:24:10.843320 2026] [:error] [pid 52010:tid 52049] [client 20.151.130.38:62494] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afZBSgiR6wohDtdeJMBzRAAAAsY"]
[Sun May 03 02:24:11.341814 2026] [:error] [pid 53435:tid 53492] [client 20.151.130.38:62576] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afZBS4Dmp7_z8QkjSzMiTwAAAFQ"]
[Sun May 03 02:24:11.828615 2026] [:error] [pid 53434:tid 53443] [client 20.151.130.38:62541] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afZBS-9BXmRQcbfsxly-PwAAAAA"]
[Sun May 03 02:24:12.305042 2026] [:error] [pid 53434:tid 53464] [client 20.151.130.38:62538] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afZBTO9BXmRQcbfsxly-QwAAABU"]
[Sun May 03 02:24:12.786654 2026] [:error] [pid 53435:tid 53483] [client 20.151.130.38:61190] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afZBTIDmp7_z8QkjSzMiUgAAAEs"]
[Sun May 03 02:24:13.219520 2026] [:error] [pid 52012:tid 52080] [client 20.151.130.38:64857] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afZBTUzSWr-8cpS83mgrdgAAA0M"]
[Sun May 03 02:24:13.726128 2026] [:error] [pid 53434:tid 53462] [client 20.151.130.38:64884] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afZBTe9BXmRQcbfsxly-RQAAABM"]
[Sun May 03 02:24:14.216012 2026] [:error] [pid 52012:tid 52084] [client 20.151.130.38:62577] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afZBTkzSWr-8cpS83mgreAAAA0c"]
[Sun May 03 02:24:14.701161 2026] [:error] [pid 53434:tid 53463] [client 20.151.130.38:62500] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afZBTu9BXmRQcbfsxly-SAAAABQ"]
[Sun May 03 02:24:15.137748 2026] [:error] [pid 52012:tid 52091] [client 20.151.130.38:64830] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afZBT0zSWr-8cpS83mgrewAAA04"]
[Sun May 03 02:24:15.626614 2026] [:error] [pid 52012:tid 52082] [client 20.151.130.38:61901] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afZBT0zSWr-8cpS83mgrfwAAA0U"]
[Sun May 03 02:24:16.124858 2026] [:error] [pid 52012:tid 52094] [client 20.151.130.38:62478] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afZBUEzSWr-8cpS83mgrgAAAA1E"]
[Sun May 03 02:24:16.594660 2026] [:error] [pid 53435:tid 53472] [client 20.151.130.38:62580] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afZBUIDmp7_z8QkjSzMiXQAAAEA"]
[Sun May 03 02:24:17.117460 2026] [:error] [pid 53434:tid 53453] [client 20.151.130.38:60532] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afZBUe9BXmRQcbfsxly-SgAAAAo"]
[Sun May 03 02:24:17.604437 2026] [:error] [pid 52012:tid 52096] [client 20.151.130.38:65465] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afZBUUzSWr-8cpS83mgrhQAAA1M"]
[Sun May 03 02:24:18.142661 2026] [:error] [pid 51917:tid 51922] [client 20.151.130.38:61897] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afZBUq7wZviJ7BgcCi96eAAAAcM"]
[Sun May 03 02:24:18.627222 2026] [:error] [pid 52124:tid 52146] [client 20.151.130.38:65501] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afZBUjjabaZ9NMm8eQuiBQAAA5E"]
[Sun May 03 02:24:19.149124 2026] [:error] [pid 53436:tid 53522] [client 20.151.130.38:64865] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afZBU69N0xp8fccVM0Dx7QAAAJc"]
[Sun May 03 02:24:19.695638 2026] [:error] [pid 53436:tid 53500] [client 20.151.130.38:61896] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afZBU69N0xp8fccVM0Dx7wAAAIE"]
[Sun May 03 02:24:20.217433 2026] [:error] [pid 51917:tid 51930] [client 20.151.130.38:65450] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afZBVK7wZviJ7BgcCi96gAAAAcs"]
[Sun May 03 02:24:20.679638 2026] [:error] [pid 51917:tid 51936] [client 20.151.130.38:65460] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afZBVK7wZviJ7BgcCi96ggAAAdE"]
[Sun May 03 02:24:21.169505 2026] [:error] [pid 51917:tid 51933] [client 20.151.130.38:64867] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afZBVa7wZviJ7BgcCi96hgAAAc4"]
[Sun May 03 02:24:21.610582 2026] [:error] [pid 52124:tid 52143] [client 20.151.130.38:62504] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afZBVTjabaZ9NMm8eQuiCwAAA44"]
[Sun May 03 02:24:22.070035 2026] [:error] [pid 52124:tid 52151] [client 20.151.130.38:64820] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afZBVjjabaZ9NMm8eQuiDgAAA5Y"]
[Sun May 03 02:24:22.562507 2026] [:error] [pid 51917:tid 51943] [client 20.151.130.38:62535] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afZBVq7wZviJ7BgcCi96jAAAAdg"]
[Sun May 03 02:24:23.073692 2026] [:error] [pid 52124:tid 52135] [client 20.151.130.38:65437] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afZBVzjabaZ9NMm8eQuiEgAAA4Y"]
[Sun May 03 02:24:23.499524 2026] [:error] [pid 52010:tid 52065] [client 20.151.130.38:64824] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afZBVwiR6wohDtdeJMBzTgAAAtY"]
[Sun May 03 02:24:23.975939 2026] [:error] [pid 22846:tid 22859] [client 20.151.130.38:61902] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afZBV4m1Ms03Mfhp3aYY0QAAAQs"]
[Sun May 03 02:24:24.523451 2026] [:error] [pid 22846:tid 22852] [client 20.151.130.38:61278] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afZBWIm1Ms03Mfhp3aYY0gAAAQQ"]
[Sun May 03 02:24:25.054263 2026] [:error] [pid 51917:tid 51931] [client 20.151.130.38:64886] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afZBWa7wZviJ7BgcCi96lAAAAcw"]
[Sun May 03 02:24:25.559458 2026] [:error] [pid 51917:tid 51940] [client 20.151.130.38:65476] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afZBWa7wZviJ7BgcCi96lgAAAdU"]
[Sun May 03 02:24:26.035564 2026] [:error] [pid 53435:tid 53474] [client 20.151.130.38:61937] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afZBWoDmp7_z8QkjSzMiYgAAAEI"]
[Sun May 03 02:24:26.849796 2026] [:error] [pid 11894:tid 11908] [client 20.151.130.38:62584] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afZBWjHh6DQF1tkXIKz_aQAAAUs"]
[Sun May 03 02:24:27.417591 2026] [:error] [pid 52010:tid 52056] [client 20.151.130.38:61852] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afZBWwiR6wohDtdeJMBzUQAAAs0"]
[Sun May 03 02:24:27.869452 2026] [:error] [pid 52124:tid 52130] [client 20.151.130.38:65513] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afZBWzjabaZ9NMm8eQuiFQAAA4E"]
[Sun May 03 02:24:28.310108 2026] [:error] [pid 51950:tid 51992] [client 20.151.130.38:62591] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afZBXIoBJzYZ3RKUhdiUdgAAAkw"]
[Sun May 03 02:24:28.780121 2026] [:error] [pid 51950:tid 51991] [client 20.151.130.38:62471] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afZBXIoBJzYZ3RKUhdiUdwAAAks"]
[Sun May 03 02:24:29.256818 2026] [:error] [pid 51950:tid 51987] [client 20.151.130.38:65418] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeaq.php"] [unique_id "afZBXYoBJzYZ3RKUhdiUeAAAAkc"]
[Sun May 03 02:24:29.730623 2026] [:error] [pid 11894:tid 11919] [client 20.151.130.38:64828] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeaq.php"] [unique_id "afZBXTHh6DQF1tkXIKz_awAAAVY"]
[Sun May 03 02:24:30.216717 2026] [:error] [pid 52012:tid 52096] [client 20.151.130.38:62553] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeaq.php"] [unique_id "afZBXkzSWr-8cpS83mgrlQAAA1M"]
[Sun May 03 02:24:30.683224 2026] [:error] [pid 52010:tid 52049] [client 20.151.130.38:65486] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xeaq.php"] [unique_id "afZBXgiR6wohDtdeJMBzUwAAAsY"]
[Sun May 03 02:24:31.164091 2026] [:error] [pid 52124:tid 52140] [client 20.151.130.38:64862] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up2.php"] [unique_id "afZBXzjabaZ9NMm8eQuiGQAAA4s"]
[Sun May 03 02:24:31.678782 2026] [:error] [pid 53435:tid 53487] [client 20.151.130.38:60514] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up2.php"] [unique_id "afZBX4Dmp7_z8QkjSzMibAAAAE8"]
[Sun May 03 02:24:32.244349 2026] [:error] [pid 52012:tid 52078] [client 20.151.130.38:62495] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up2.php"] [unique_id "afZBYEzSWr-8cpS83mgrnQAAA0E"]
[Sun May 03 02:24:32.744525 2026] [:error] [pid 52012:tid 52087] [client 20.151.130.38:62533] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/up2.php"] [unique_id "afZBYEzSWr-8cpS83mgroQAAA0o"]
[Sun May 03 02:24:33.274441 2026] [:error] [pid 51950:tid 52000] [client 20.151.130.38:65453] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afZBYYoBJzYZ3RKUhdiUfwAAAlQ"]
[Sun May 03 02:24:33.742560 2026] [:error] [pid 52012:tid 52094] [client 20.151.130.38:64786] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afZBYUzSWr-8cpS83mgrpAAAA1E"]
[Sun May 03 02:24:34.204436 2026] [:error] [pid 53435:tid 53474] [client 20.151.130.38:61947] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afZBYoDmp7_z8QkjSzMicQAAAEI"]
[Sun May 03 02:24:34.652365 2026] [:error] [pid 51950:tid 51986] [client 20.151.130.38:61904] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afZBYooBJzYZ3RKUhdiUgwAAAkY"]
[Sun May 03 02:24:35.142876 2026] [:error] [pid 51950:tid 51988] [client 20.151.130.38:62532] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afZBY4oBJzYZ3RKUhdiUhQAAAkg"]
[Sun May 03 02:24:35.624824 2026] [:error] [pid 52010:tid 52050] [client 20.151.130.38:65497] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afZBYwiR6wohDtdeJMBzVgAAAsc"]
[Sun May 03 02:24:36.063191 2026] [:error] [pid 52010:tid 52048] [client 20.151.130.38:64888] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afZBZAiR6wohDtdeJMBzWAAAAsU"]
[Sun May 03 02:24:36.562637 2026] [:error] [pid 52012:tid 52087] [client 20.151.130.38:60513] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afZBZEzSWr-8cpS83mgrrgAAA0o"]
[Sun May 03 02:24:37.033363 2026] [:error] [pid 52124:tid 52131] [client 20.151.130.38:62525] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZBZTjabaZ9NMm8eQuiGgAAA4I"]
[Sun May 03 02:24:37.534569 2026] [:error] [pid 11894:tid 11902] [client 20.151.130.38:60491] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZBZTHh6DQF1tkXIKz_bwAAAUU"]
[Sun May 03 02:24:37.993534 2026] [:error] [pid 53435:tid 53492] [client 20.151.130.38:61263] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZBZYDmp7_z8QkjSzMieAAAAFQ"]
[Sun May 03 02:24:38.479219 2026] [:error] [pid 53435:tid 53488] [client 20.151.130.38:62559] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afZBZoDmp7_z8QkjSzMiewAAAFA"]
[Sun May 03 02:24:38.908960 2026] [:error] [pid 53435:tid 53481] [client 20.151.130.38:61895] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "afZBZoDmp7_z8QkjSzMigAAAAEk"]
[Sun May 03 02:24:39.364028 2026] [:error] [pid 53435:tid 53473] [client 20.151.130.38:61866] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "afZBZ4Dmp7_z8QkjSzMihAAAAEE"]
[Sun May 03 02:24:39.852466 2026] [:error] [pid 52012:tid 52101] [client 20.151.130.38:62470] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "afZBZ0zSWr-8cpS83mgrswAAA1c"]
[Sun May 03 02:24:40.310846 2026] [:error] [pid 53435:tid 53491] [client 20.151.130.38:61226] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "afZBaIDmp7_z8QkjSzMiigAAAFM"]
[Sun May 03 02:24:40.765367 2026] [:error] [pid 53435:tid 53490] [client 20.151.130.38:65417] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afZBaIDmp7_z8QkjSzMijQAAAFI"]
[Sun May 03 02:24:41.277293 2026] [:error] [pid 53435:tid 53496] [client 20.151.130.38:61203] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afZBaYDmp7_z8QkjSzMikAAAAFg"]
[Sun May 03 02:24:41.808849 2026] [:error] [pid 53436:tid 53522] [client 20.151.130.38:64844] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afZBaa9N0xp8fccVM0Dx-wAAAJc"]
[Sun May 03 02:24:42.279737 2026] [:error] [pid 53435:tid 53476] [client 20.151.130.38:65413] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afZBaoDmp7_z8QkjSzMilgAAAEQ"]
[Sun May 03 02:24:42.764260 2026] [:error] [pid 53436:tid 53500] [client 20.151.130.38:61846] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afZBaq9N0xp8fccVM0Dx_AAAAIE"]
[Sun May 03 02:24:43.229633 2026] [:error] [pid 11894:tid 11921] [client 20.151.130.38:60504] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afZBazHh6DQF1tkXIKz_cAAAAVg"]
[Sun May 03 02:24:43.665125 2026] [:error] [pid 52012:tid 52094] [client 20.151.130.38:64809] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afZBa0zSWr-8cpS83mgrtgAAA1E"]
[Sun May 03 02:24:44.131657 2026] [:error] [pid 52010:tid 52044] [client 20.151.130.38:60502] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afZBbAiR6wohDtdeJMBzYAAAAsE"]
[Sun May 03 02:24:44.682945 2026] [:error] [pid 52124:tid 52148] [client 20.151.130.38:65510] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afZBbDjabaZ9NMm8eQuiHQAAA5M"]
[Sun May 03 02:24:45.147895 2026] [:error] [pid 53435:tid 53496] [client 20.151.130.38:65479] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afZBbYDmp7_z8QkjSzMingAAAFg"]
[Sun May 03 02:24:45.621673 2026] [:error] [pid 51950:tid 52002] [client 20.151.130.38:64789] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afZBbYoBJzYZ3RKUhdiUjgAAAlY"]
[Sun May 03 02:24:46.068853 2026] [:error] [pid 51950:tid 52004] [client 20.151.130.38:61889] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afZBbooBJzYZ3RKUhdiUkAAAAlg"]
[Sun May 03 02:24:46.534384 2026] [:error] [pid 52010:tid 52063] [client 20.151.130.38:64804] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afZBbgiR6wohDtdeJMBzZAAAAtQ"]
[Sun May 03 02:24:47.034778 2026] [:error] [pid 53435:tid 53484] [client 20.151.130.38:65507] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afZBb4Dmp7_z8QkjSzMipgAAAEw"]
[Sun May 03 02:24:47.488041 2026] [:error] [pid 53435:tid 53480] [client 20.151.130.38:62551] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afZBb4Dmp7_z8QkjSzMiqAAAAEg"]
[Sun May 03 02:24:47.969949 2026] [:error] [pid 51950:tid 52003] [client 20.151.130.38:61184] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afZBb4oBJzYZ3RKUhdiUlAAAAlc"]
[Sun May 03 02:24:48.397403 2026] [:error] [pid 52010:tid 52046] [client 20.151.130.38:61285] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afZBcAiR6wohDtdeJMBzZgAAAsM"]
[Sun May 03 02:24:48.868158 2026] [:error] [pid 52010:tid 52057] [client 20.151.130.38:62475] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afZBcAiR6wohDtdeJMBzaAAAAs4"]
[Sun May 03 02:24:49.301241 2026] [:error] [pid 52012:tid 52075] [client 20.151.130.38:61234] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afZBcUzSWr-8cpS83mgrtwAAA0A"]
[Sun May 03 02:24:49.760018 2026] [:error] [pid 52010:tid 52045] [client 20.151.130.38:65469] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afZBcQiR6wohDtdeJMBzagAAAsI"]
[Sun May 03 02:24:50.213215 2026] [:error] [pid 51950:tid 51981] [client 20.151.130.38:65472] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afZBcooBJzYZ3RKUhdiUmAAAAkE"]
[Sun May 03 02:24:50.686501 2026] [:error] [pid 52012:tid 52097] [client 20.151.130.38:61884] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afZBckzSWr-8cpS83mgruAAAA1Q"]
[Sun May 03 02:24:51.099825 2026] [:error] [pid 52124:tid 52137] [client 20.151.130.38:65518] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afZBczjabaZ9NMm8eQuiHgAAA4g"]
[Sun May 03 02:24:51.552732 2026] [:error] [pid 52124:tid 52135] [client 20.151.130.38:60495] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afZBczjabaZ9NMm8eQuiHwAAA4Y"]
[Sun May 03 02:24:51.998538 2026] [:error] [pid 11894:tid 11903] [client 20.151.130.38:64810] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afZBczHh6DQF1tkXIKz_dAAAAUY"]
[Sun May 03 02:24:52.472548 2026] [:error] [pid 53435:tid 53474] [client 20.151.130.38:60518] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afZBdIDmp7_z8QkjSzMisQAAAEI"]
[Sun May 03 02:24:52.925126 2026] [:error] [pid 22846:tid 22857] [client 20.151.130.38:62515] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afZBdIm1Ms03Mfhp3aYY2AAAAQk"]
[Sun May 03 02:24:53.388270 2026] [:error] [pid 52012:tid 52089] [client 20.151.130.38:65451] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afZBdUzSWr-8cpS83mgrugAAA0w"]
[Sun May 03 02:24:53.817629 2026] [:error] [pid 51950:tid 51999] [client 20.151.130.38:65478] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "afZBdYoBJzYZ3RKUhdiUnwAAAlM"]
[Sun May 03 02:24:54.254183 2026] [:error] [pid 51950:tid 51992] [client 20.151.130.38:62545] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "afZBdooBJzYZ3RKUhdiUoQAAAkw"]
[Sun May 03 02:24:54.722976 2026] [:error] [pid 51950:tid 51998] [client 20.151.130.38:61279] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "afZBdooBJzYZ3RKUhdiUowAAAlI"]
[Sun May 03 02:24:55.219402 2026] [:error] [pid 52012:tid 52101] [client 20.151.130.38:62539] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/4.php"] [unique_id "afZBd0zSWr-8cpS83mgrvQAAA1c"]
[Sun May 03 02:24:55.669996 2026] [:error] [pid 51950:tid 51996] [client 20.151.130.38:62507] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afZBd4oBJzYZ3RKUhdiUpQAAAlA"]
[Sun May 03 02:24:56.130895 2026] [:error] [pid 53434:tid 53449] [client 20.151.130.38:60455] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afZBeO9BXmRQcbfsxly-VAAAAAY"]
[Sun May 03 02:24:56.708407 2026] [:error] [pid 51950:tid 51989] [client 20.151.130.38:62526] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afZBeIoBJzYZ3RKUhdiUpwAAAkk"]
[Sun May 03 02:24:57.164797 2026] [:error] [pid 51950:tid 51988] [client 20.151.130.38:64796] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/5.php"] [unique_id "afZBeYoBJzYZ3RKUhdiUqAAAAkg"]
[Sun May 03 02:24:57.643532 2026] [:error] [pid 51950:tid 51983] [client 20.151.130.38:64890] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afZBeYoBJzYZ3RKUhdiUqwAAAkM"]
[Sun May 03 02:24:58.182669 2026] [:error] [pid 52010:tid 52050] [client 20.151.130.38:64887] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afZBegiR6wohDtdeJMBzbAAAAsc"]
[Sun May 03 02:24:58.646980 2026] [:error] [pid 53435:tid 53475] [client 20.151.130.38:65524] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afZBeoDmp7_z8QkjSzMitgAAAEM"]
[Sun May 03 02:24:59.117355 2026] [:error] [pid 53434:tid 53448] [client 20.151.130.38:62583] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afZBe-9BXmRQcbfsxly-VwAAAAU"]
[Sun May 03 02:24:59.585801 2026] [:error] [pid 52010:tid 52064] [client 20.151.130.38:61926] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cjfuns.php"] [unique_id "afZBewiR6wohDtdeJMBzcAAAAtU"]
[Sun May 03 02:25:05.819139 2026] [:error] [pid 53436:tid 53518] [client 20.151.130.38:61305] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afZBga9N0xp8fccVM0DyCgAAAJM"]
[Sun May 03 02:25:06.271341 2026] [:error] [pid 51950:tid 51981] [client 20.151.130.38:60431] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afZBgooBJzYZ3RKUhdiUsAAAAkE"]
[Sun May 03 02:25:06.780762 2026] [:error] [pid 51950:tid 51985] [client 20.151.130.38:64790] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afZBgooBJzYZ3RKUhdiUsgAAAkU"]
[Sun May 03 02:25:07.251925 2026] [:error] [pid 52012:tid 52101] [client 20.151.130.38:61227] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afZBg0zSWr-8cpS83mgr0AAAA1c"]
[Sun May 03 02:25:07.698846 2026] [:error] [pid 22846:tid 22865] [client 20.151.130.38:61916] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "afZBg4m1Ms03Mfhp3aYY3QAAARE"]
[Sun May 03 02:25:08.244271 2026] [:error] [pid 52010:tid 52048] [client 20.151.130.38:64877] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "afZBhAiR6wohDtdeJMBzeAAAAsU"]
[Sun May 03 02:25:08.732691 2026] [:error] [pid 52010:tid 52057] [client 20.151.130.38:61277] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "afZBhAiR6wohDtdeJMBzegAAAs4"]
[Sun May 03 02:25:09.196367 2026] [:error] [pid 52010:tid 52059] [client 20.151.130.38:64791] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "afZBhQiR6wohDtdeJMBzewAAAtA"]
[Sun May 03 02:25:09.686630 2026] [:error] [pid 51950:tid 51993] [client 20.151.130.38:64861] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afZBhYoBJzYZ3RKUhdiUtwAAAk0"]
[Sun May 03 02:25:10.143431 2026] [:error] [pid 51950:tid 51992] [client 20.151.130.38:61908] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afZBhooBJzYZ3RKUhdiUuAAAAkw"]
[Sun May 03 02:25:10.632549 2026] [:error] [pid 53435:tid 53484] [client 20.151.130.38:64811] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afZBhoDmp7_z8QkjSzMivgAAAEw"]
[Sun May 03 02:25:11.084941 2026] [:error] [pid 51950:tid 51987] [client 20.151.130.38:65421] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afZBh4oBJzYZ3RKUhdiUugAAAkc"]
[Sun May 03 02:25:11.554828 2026] [:error] [pid 52124:tid 52145] [client 20.151.130.38:64778] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afZBhzjabaZ9NMm8eQuiJQAAA5A"]
[Sun May 03 02:25:12.113357 2026] [:error] [pid 52010:tid 52055] [client 20.151.130.38:61946] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afZBiAiR6wohDtdeJMBzfgAAAsw"]
[Sun May 03 02:25:12.588104 2026] [:error] [pid 53436:tid 53505] [client 20.151.130.38:65514] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afZBiK9N0xp8fccVM0DyDQAAAIY"]
[Sun May 03 02:25:13.080198 2026] [:error] [pid 52012:tid 52094] [client 20.151.130.38:64774] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afZBiUzSWr-8cpS83mgr0QAAA1E"]
[Sun May 03 02:25:13.523139 2026] [:error] [pid 52012:tid 52102] [client 20.151.130.38:65448] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afZBiUzSWr-8cpS83mgr0wAAA1g"]
[Sun May 03 02:25:13.951978 2026] [:error] [pid 52012:tid 52075] [client 20.151.130.38:62467] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afZBiUzSWr-8cpS83mgr1QAAA0A"]
[Sun May 03 02:25:14.380108 2026] [:error] [pid 52012:tid 52088] [client 20.151.130.38:64817] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afZBikzSWr-8cpS83mgr2QAAA0s"]
[Sun May 03 02:25:14.807930 2026] [:error] [pid 52010:tid 52049] [client 20.151.130.38:62582] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afZBigiR6wohDtdeJMBzgQAAAsY"]
[Sun May 03 02:25:15.295193 2026] [:error] [pid 51917:tid 51928] [client 20.151.130.38:62556] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afZBi67wZviJ7BgcCi96nwAAAck"]
[Sun May 03 02:25:15.748413 2026] [:error] [pid 52012:tid 52083] [client 20.151.130.38:62491] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afZBi0zSWr-8cpS83mgr3QAAA0Y"]
[Sun May 03 02:25:16.200276 2026] [:error] [pid 52012:tid 52093] [client 20.151.130.38:62563] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afZBjEzSWr-8cpS83mgr4QAAA1A"]
[Sun May 03 02:25:16.626291 2026] [:error] [pid 52012:tid 52091] [client 20.151.130.38:65464] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afZBjEzSWr-8cpS83mgr4gAAA04"]
[Sun May 03 02:25:17.134633 2026] [:error] [pid 52010:tid 52053] [client 20.151.130.38:61228] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afZBjQiR6wohDtdeJMBzggAAAso"]
[Sun May 03 02:25:17.625210 2026] [:error] [pid 52012:tid 52098] [client 20.151.130.38:59833] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afZBjUzSWr-8cpS83mgr5gAAA1U"]
[Sun May 03 02:25:18.077577 2026] [:error] [pid 53436:tid 53503] [client 20.151.130.38:62484] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afZBjq9N0xp8fccVM0DyDgAAAIQ"]
[Sun May 03 02:25:18.598771 2026] [:error] [pid 51950:tid 52001] [client 20.151.130.38:61841] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afZBjooBJzYZ3RKUhdiUvQAAAlU"]
[Sun May 03 02:25:19.082591 2026] [:error] [pid 22846:tid 22872] [client 20.151.130.38:61276] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZBj4m1Ms03Mfhp3aYY3gAAARg"]
[Sun May 03 02:25:19.531793 2026] [:error] [pid 52124:tid 52141] [client 20.151.130.38:64829] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZBjzjabaZ9NMm8eQuiJwAAA4w"]
[Sun May 03 02:25:20.022890 2026] [:error] [pid 22846:tid 22850] [client 20.151.130.38:61236] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZBkIm1Ms03Mfhp3aYY4AAAAQI"]
[Sun May 03 02:25:20.479347 2026] [:error] [pid 22846:tid 22848] [client 20.151.130.38:60430] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZBkIm1Ms03Mfhp3aYY4QAAAQA"]
[Sun May 03 02:25:20.929090 2026] [:error] [pid 52010:tid 52056] [client 20.151.130.38:61859] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afZBkAiR6wohDtdeJMBzhAAAAs0"]
[Sun May 03 02:25:21.401821 2026] [:error] [pid 11894:tid 11912] [client 20.151.130.38:61198] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afZBkTHh6DQF1tkXIKz_gAAAAU8"]
[Sun May 03 02:25:21.870641 2026] [:error] [pid 52010:tid 52052] [client 20.151.130.38:61910] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afZBkQiR6wohDtdeJMBziAAAAsk"]
[Sun May 03 02:25:22.362072 2026] [:error] [pid 52124:tid 52144] [client 20.151.130.38:64882] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afZBkjjabaZ9NMm8eQuiKAAAA48"]
[Sun May 03 02:25:22.839763 2026] [:error] [pid 52010:tid 52062] [client 20.151.130.38:61262] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afZBkgiR6wohDtdeJMBziwAAAtM"]
[Sun May 03 02:25:23.330502 2026] [:error] [pid 52010:tid 52051] [client 20.151.130.38:61298] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afZBkwiR6wohDtdeJMBzjAAAAsg"]
[Sun May 03 02:25:23.773684 2026] [:error] [pid 52010:tid 52064] [client 20.151.130.38:61898] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afZBkwiR6wohDtdeJMBzjQAAAtU"]
[Sun May 03 02:25:24.235997 2026] [:error] [pid 53435:tid 53484] [client 20.151.130.38:61847] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f6.php"] [unique_id "afZBlIDmp7_z8QkjSzMixgAAAEw"]
[Sun May 03 02:25:24.709119 2026] [:error] [pid 52010:tid 52065] [client 20.151.130.38:62590] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afZBlAiR6wohDtdeJMBzkAAAAtY"]
[Sun May 03 02:25:25.171644 2026] [:error] [pid 52012:tid 52080] [client 20.151.130.38:65505] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afZBlUzSWr-8cpS83mgr8QAAA0M"]
[Sun May 03 02:25:25.644610 2026] [:error] [pid 52012:tid 52092] [client 20.151.130.38:61296] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afZBlUzSWr-8cpS83mgr8gAAA08"]
[Sun May 03 02:25:26.106924 2026] [:error] [pid 53436:tid 53504] [client 20.151.130.38:65519] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inputs.php"] [unique_id "afZBlq9N0xp8fccVM0DyFQAAAIU"]
[Sun May 03 02:25:26.612044 2026] [:error] [pid 52124:tid 52146] [client 20.151.130.38:61932] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afZBljjabaZ9NMm8eQuiLwAAA5E"]
[Sun May 03 02:25:27.048597 2026] [:error] [pid 52010:tid 52054] [client 20.151.130.38:64816] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afZBlwiR6wohDtdeJMBzkgAAAss"]
[Sun May 03 02:25:27.513896 2026] [:error] [pid 53435:tid 53473] [client 20.151.130.38:64821] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afZBl4Dmp7_z8QkjSzMiygAAAEE"]
[Sun May 03 02:25:28.030735 2026] [:error] [pid 53435:tid 53476] [client 20.151.130.38:61831] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afZBmIDmp7_z8QkjSzMiywAAAEQ"]
[Sun May 03 02:25:28.495044 2026] [:error] [pid 52010:tid 52048] [client 20.151.130.38:60492] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afZBmAiR6wohDtdeJMBzlQAAAsU"]
[Sun May 03 02:25:28.962287 2026] [:error] [pid 52012:tid 52099] [client 20.151.130.38:62578] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afZBmEzSWr-8cpS83mgsAQAAA1Y"]
[Sun May 03 02:25:29.406116 2026] [:error] [pid 52012:tid 52098] [client 20.151.130.38:65509] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afZBmUzSWr-8cpS83mgsBgAAA1U"]
[Sun May 03 02:25:29.857152 2026] [:error] [pid 53435:tid 53494] [client 20.151.130.38:62536] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/av.php"] [unique_id "afZBmYDmp7_z8QkjSzMi7AAAAFY"]
[Sun May 03 02:25:30.299559 2026] [:error] [pid 53435:tid 53488] [client 20.151.130.38:61185] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZBmoDmp7_z8QkjSzMi7wAAAFA"]
[Sun May 03 02:25:30.761822 2026] [:error] [pid 53435:tid 53495] [client 20.151.130.38:61301] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZBmoDmp7_z8QkjSzMi8QAAAFc"]
[Sun May 03 02:25:31.217649 2026] [:error] [pid 51950:tid 51998] [client 20.151.130.38:62550] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZBm4oBJzYZ3RKUhdiUwgAAAlI"]
[Sun May 03 02:25:31.678937 2026] [:error] [pid 51950:tid 51984] [client 20.151.130.38:60443] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afZBm4oBJzYZ3RKUhdiUwwAAAkQ"]
[Sun May 03 02:25:32.136964 2026] [:error] [pid 51950:tid 52003] [client 20.151.130.38:62587] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "afZBnIoBJzYZ3RKUhdiUxQAAAlc"]
[Sun May 03 02:25:32.582741 2026] [:error] [pid 51950:tid 51981] [client 20.151.130.38:61265] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "afZBnIoBJzYZ3RKUhdiUxwAAAkE"]
[Sun May 03 02:25:33.058721 2026] [:error] [pid 51917:tid 51936] [client 20.151.130.38:65422] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "afZBna7wZviJ7BgcCi96oAAAAdE"]
[Sun May 03 02:25:33.508531 2026] [:error] [pid 52010:tid 52065] [client 20.151.130.38:61827] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-act.php"] [unique_id "afZBnQiR6wohDtdeJMBzmAAAAtY"]
[Sun May 03 02:25:33.976466 2026] [:error] [pid 51917:tid 51923] [client 20.151.130.38:64849] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "afZBna7wZviJ7BgcCi96ogAAAcQ"]
[Sun May 03 02:25:34.425031 2026] [:error] [pid 51917:tid 51937] [client 20.151.130.38:61273] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "afZBnq7wZviJ7BgcCi96owAAAdI"]
[Sun May 03 02:25:34.881247 2026] [:error] [pid 51917:tid 51942] [client 20.151.130.38:62546] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "afZBnq7wZviJ7BgcCi96pgAAAdc"]
[Sun May 03 02:25:35.351532 2026] [:error] [pid 52012:tid 52096] [client 20.151.130.38:59899] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classwithtostring.php"] [unique_id "afZBn0zSWr-8cpS83mgsEgAAA1M"]
[Sun May 03 02:25:35.864422 2026] [:error] [pid 52012:tid 52089] [client 20.151.130.38:65424] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZBn0zSWr-8cpS83mgsEwAAA0w"]
[Sun May 03 02:25:36.358766 2026] [:error] [pid 51917:tid 51919] [client 20.151.130.38:61825] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZBoK7wZviJ7BgcCi96pwAAAcA"]
[Sun May 03 02:25:36.848932 2026] [:error] [pid 11894:tid 11897] [client 20.151.130.38:62531] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZBoDHh6DQF1tkXIKz_gwAAAUA"]
[Sun May 03 02:25:37.331880 2026] [:error] [pid 52010:tid 52056] [client 20.151.130.38:64822] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afZBoQiR6wohDtdeJMBznQAAAs0"]
[Sun May 03 02:25:37.791512 2026] [:error] [pid 51917:tid 51935] [client 20.151.130.38:60519] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afZBoa7wZviJ7BgcCi96qQAAAdA"]
[Sun May 03 02:25:38.235668 2026] [:error] [pid 51917:tid 51932] [client 20.151.130.38:62496] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afZBoq7wZviJ7BgcCi96qgAAAc0"]
[Sun May 03 02:25:38.730437 2026] [:error] [pid 53434:tid 53457] [client 20.151.130.38:61870] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afZBou9BXmRQcbfsxly-YQAAAA4"]
[Sun May 03 02:25:39.173969 2026] [:error] [pid 53434:tid 53459] [client 20.151.130.38:61949] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afZBo-9BXmRQcbfsxly-YgAAABA"]
[Sun May 03 02:25:39.664607 2026] [:error] [pid 53434:tid 53456] [client 20.151.130.38:61244] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afZBo-9BXmRQcbfsxly-ZAAAAA0"]
[Sun May 03 02:25:40.136411 2026] [:error] [pid 51917:tid 51925] [client 20.151.130.38:60537] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afZBpK7wZviJ7BgcCi96rAAAAcY"]
[Sun May 03 02:25:40.609899 2026] [:error] [pid 51917:tid 51943] [client 20.151.130.38:61951] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afZBpK7wZviJ7BgcCi96rQAAAdg"]
[Sun May 03 02:25:41.103698 2026] [:error] [pid 22846:tid 22860] [client 20.151.130.38:62474] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afZBpYm1Ms03Mfhp3aYY6wAAAQw"]
[Sun May 03 02:25:41.543935 2026] [:error] [pid 51917:tid 51921] [client 20.151.130.38:62588] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZBpa7wZviJ7BgcCi96sAAAAcI"]
[Sun May 03 02:25:42.036029 2026] [:error] [pid 11894:tid 11899] [client 20.151.130.38:62528] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZBpjHh6DQF1tkXIKz_hAAAAUI"]
[Sun May 03 02:25:42.523433 2026] [:error] [pid 53435:tid 53491] [client 20.151.130.38:65446] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZBpoDmp7_z8QkjSzMi9wAAAFM"]
[Sun May 03 02:25:43.020800 2026] [:error] [pid 52012:tid 52075] [client 20.151.130.38:61888] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afZBp0zSWr-8cpS83mgsFQAAA0A"]
[Sun May 03 02:25:43.480409 2026] [:error] [pid 52124:tid 52152] [client 20.151.130.38:60436] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZBpzjabaZ9NMm8eQuiPgAAA5c"]
[Sun May 03 02:25:43.939710 2026] [:error] [pid 52010:tid 52062] [client 20.151.130.38:64871] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZBpwiR6wohDtdeJMBzoAAAAtM"]
[Sun May 03 02:25:44.437190 2026] [:error] [pid 52012:tid 52087] [client 20.151.130.38:62585] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZBqEzSWr-8cpS83mgsFwAAA0o"]
[Sun May 03 02:25:44.914298 2026] [:error] [pid 52012:tid 52096] [client 20.151.130.38:61942] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afZBqEzSWr-8cpS83mgsGgAAA1M"]
[Sun May 03 02:25:45.408371 2026] [:error] [pid 52012:tid 52098] [client 20.151.130.38:64802] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "afZBqUzSWr-8cpS83mgsHQAAA1U"]
[Sun May 03 02:25:45.864815 2026] [:error] [pid 53435:tid 53483] [client 20.151.130.38:61845] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "afZBqYDmp7_z8QkjSzMi_wAAAEs"]
[Sun May 03 02:25:46.323100 2026] [:error] [pid 52012:tid 52092] [client 20.151.130.38:61294] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "afZBqkzSWr-8cpS83mgsIgAAA08"]
[Sun May 03 02:25:46.742189 2026] [:error] [pid 52012:tid 52084] [client 20.151.130.38:61240] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "afZBqkzSWr-8cpS83mgsJAAAA0c"]
[Sun May 03 02:25:47.215026 2026] [:error] [pid 52012:tid 52080] [client 20.151.130.38:61855] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afZBq0zSWr-8cpS83mgsJwAAA0M"]
[Sun May 03 02:25:47.714179 2026] [:error] [pid 52012:tid 52086] [client 20.151.130.38:61941] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afZBq0zSWr-8cpS83mgsKAAAA0k"]
[Sun May 03 02:25:48.141048 2026] [:error] [pid 22846:tid 22871] [client 20.151.130.38:61917] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afZBrIm1Ms03Mfhp3aYY7QAAARc"]
[Sun May 03 02:25:48.600857 2026] [:error] [pid 52012:tid 52082] [client 20.151.130.38:64864] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afZBrEzSWr-8cpS83mgsKwAAA0U"]
[Sun May 03 02:25:49.071414 2026] [:error] [pid 52012:tid 52102] [client 20.151.130.38:61861] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "afZBrUzSWr-8cpS83mgsLgAAA1g"]
[Sun May 03 02:25:49.622605 2026] [:error] [pid 52012:tid 52079] [client 20.151.130.38:61295] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "afZBrUzSWr-8cpS83mgsMQAAA0I"]
[Sun May 03 02:25:50.089834 2026] [:error] [pid 53434:tid 53457] [client 20.151.130.38:61253] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "afZBru9BXmRQcbfsxly-aAAAAA4"]
[Sun May 03 02:25:50.561353 2026] [:error] [pid 52012:tid 52085] [client 20.151.130.38:62534] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "afZBrkzSWr-8cpS83mgsMgAAA0g"]
[Sun May 03 02:25:51.040394 2026] [:error] [pid 51950:tid 51996] [client 20.151.130.38:61252] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afZBr4oBJzYZ3RKUhdiUzAAAAlA"]
[Sun May 03 02:25:51.511186 2026] [:error] [pid 11894:tid 11921] [client 20.151.130.38:61255] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afZBrzHh6DQF1tkXIKz_hwAAAVg"]
[Sun May 03 02:25:51.983923 2026] [:error] [pid 52012:tid 52078] [client 20.151.130.38:61284] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afZBr0zSWr-8cpS83mgsNgAAA0E"]
[Sun May 03 02:25:52.501875 2026] [:error] [pid 11894:tid 11914] [client 20.151.130.38:60508] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afZBsDHh6DQF1tkXIKz_iQAAAVE"]
[Sun May 03 02:25:53.016131 2026] [:error] [pid 52124:tid 52132] [client 20.151.130.38:61858] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afZBsTjabaZ9NMm8eQuiRAAAA4M"]
[Sun May 03 02:25:53.492806 2026] [:error] [pid 22846:tid 22859] [client 20.151.130.38:61294] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afZBsYm1Ms03Mfhp3aYY7gAAAQs"]
[Sun May 03 02:25:53.934617 2026] [:error] [pid 11894:tid 11909] [client 20.151.130.38:65523] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afZBsTHh6DQF1tkXIKz_igAAAUw"]
[Sun May 03 02:25:54.440999 2026] [:error] [pid 51950:tid 51981] [client 20.151.130.38:60511] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afZBsooBJzYZ3RKUhdiU0AAAAkE"]
[Sun May 03 02:25:54.924396 2026] [:error] [pid 52124:tid 52145] [client 20.151.130.38:65503] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZBsjjabaZ9NMm8eQuiRQAAA5A"]
[Sun May 03 02:25:55.443433 2026] [:error] [pid 53434:tid 53456] [client 20.151.130.38:60469] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZBs-9BXmRQcbfsxly-bQAAAA0"]
[Sun May 03 02:25:55.963831 2026] [:error] [pid 53434:tid 53451] [client 20.151.130.38:61829] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZBs-9BXmRQcbfsxly-bgAAAAg"]
[Sun May 03 02:25:56.412772 2026] [:error] [pid 51917:tid 51927] [client 20.151.130.38:61911] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afZBtK7wZviJ7BgcCi96tAAAAcg"]
[Sun May 03 02:25:56.876899 2026] [:error] [pid 52010:tid 52056] [client 20.151.130.38:61192] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afZBtAiR6wohDtdeJMBzowAAAs0"]
[Sun May 03 02:25:57.336272 2026] [:error] [pid 52012:tid 52096] [client 20.151.130.38:61848] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afZBtUzSWr-8cpS83mgsOwAAA1M"]
[Sun May 03 02:25:57.780191 2026] [:error] [pid 51917:tid 51934] [client 20.151.130.38:64777] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afZBta7wZviJ7BgcCi96tgAAAc8"]
[Sun May 03 02:25:58.264707 2026] [:error] [pid 51917:tid 51925] [client 20.151.130.38:61905] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afZBtq7wZviJ7BgcCi96uAAAAcY"]
[Sun May 03 02:25:58.767771 2026] [:error] [pid 52012:tid 52093] [client 20.151.130.38:65521] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afZBtkzSWr-8cpS83mgsQQAAA1A"]
[Sun May 03 02:25:59.287195 2026] [:error] [pid 51950:tid 51987] [client 20.151.130.38:64785] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afZBt4oBJzYZ3RKUhdiU1QAAAkc"]
[Sun May 03 02:25:59.733137 2026] [:error] [pid 22846:tid 22863] [client 20.151.130.38:64776] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afZBt4m1Ms03Mfhp3aYY9QAAAQ8"]
[Sun May 03 02:26:00.219843 2026] [:error] [pid 51917:tid 51941] [client 20.151.130.38:61292] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afZBuK7wZviJ7BgcCi96vAAAAdY"]
[Sun May 03 02:26:00.710954 2026] [:error] [pid 22846:tid 22857] [client 20.151.130.38:60524] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afZBuIm1Ms03Mfhp3aYY9gAAAQk"]
[Sun May 03 02:26:01.202070 2026] [:error] [pid 52010:tid 52060] [client 20.151.130.38:57685] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afZBuQiR6wohDtdeJMBzpAAAAtE"]
[Sun May 03 02:26:01.680116 2026] [:error] [pid 53435:tid 53491] [client 20.151.130.38:64868] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afZBuYDmp7_z8QkjSzMjAAAAAFM"]
[Sun May 03 02:26:02.140046 2026] [:error] [pid 51950:tid 51996] [client 20.151.130.38:61210] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afZBuooBJzYZ3RKUhdiU1wAAAlA"]
[Sun May 03 02:26:02.613025 2026] [:error] [pid 52124:tid 52135] [client 20.151.130.38:61912] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afZBujjabaZ9NMm8eQuiTAAAA4Y"]
[Sun May 03 02:26:03.085417 2026] [:error] [pid 52012:tid 52083] [client 20.151.130.38:65449] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afZBu0zSWr-8cpS83mgsSgAAA0Y"]
[Sun May 03 02:26:03.569216 2026] [:error] [pid 53435:tid 53473] [client 20.151.130.38:65483] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afZBu4Dmp7_z8QkjSzMjEwAAAEE"]
[Sun May 03 02:26:03.998546 2026] [:error] [pid 53435:tid 53496] [client 20.151.130.38:62547] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afZBu4Dmp7_z8QkjSzMjFAAAAFg"]
[Sun May 03 02:26:04.447645 2026] [:error] [pid 22846:tid 22865] [client 20.151.130.38:62520] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afZBvIm1Ms03Mfhp3aYY_wAAARE"]
[Sun May 03 02:26:04.897270 2026] [:error] [pid 53434:tid 53443] [client 20.151.130.38:65460] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afZBvO9BXmRQcbfsxly-dQAAAAA"]
[Sun May 03 02:26:10.936010 2026] [:error] [pid 52124:tid 52131] [client 20.151.130.38:59872] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "afZBwjjabaZ9NMm8eQuiWwAAA4I"]
[Sun May 03 02:26:11.359786 2026] [:error] [pid 53435:tid 53479] [client 20.151.130.38:61196] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "afZBw4Dmp7_z8QkjSzMjJAAAAEc"]
[Sun May 03 02:26:11.813592 2026] [:error] [pid 53435:tid 53489] [client 20.151.130.38:61876] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "afZBw4Dmp7_z8QkjSzMjJgAAAFE"]
[Sun May 03 02:26:12.293941 2026] [:error] [pid 51950:tid 51980] [client 20.151.130.38:61259] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/update/f35.php"] [unique_id "afZBxIoBJzYZ3RKUhdiU6wAAAkA"]
[Sun May 03 02:26:12.771057 2026] [:error] [pid 52012:tid 52086] [client 20.151.130.38:61274] [client 20.151.130.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afZBxEzSWr-8cpS83mgsVwAAA0k"]
[Sun May 03 02:26:13.221200 2026] [:error] [pid 52012:tid 52081] [client 20.151.130.38:65458] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "afZBxUzSWr-8cpS83mgsWwAAA0Q"]
[Sun May 03 02:26:13.741022 2026] [:error] [pid 52012:tid 52078] [client 20.151.130.38:65487] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "afZBxUzSWr-8cpS83mgsXwAAA0E"]
[Sun May 03 02:26:14.261907 2026] [:error] [pid 52012:tid 52088] [client 20.151.130.38:62557] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "afZBxkzSWr-8cpS83mgsZQAAA0s"]
[Sun May 03 02:26:14.862670 2026] [:error] [pid 11894:tid 11908] [client 20.151.130.38:60439] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "afZBxjHh6DQF1tkXIKz_jAAAAUs"]
[Sun May 03 02:26:15.287150 2026] [:error] [pid 52010:tid 52065] [client 20.151.130.38:60428] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZBxwiR6wohDtdeJMBzrwAAAtY"]
[Sun May 03 02:26:15.753327 2026] [:error] [pid 52010:tid 52044] [client 20.151.130.38:61885] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZBxwiR6wohDtdeJMBzsAAAAsE"]
[Sun May 03 02:26:16.218867 2026] [:error] [pid 22846:tid 22859] [client 20.151.130.38:65432] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZByIm1Ms03Mfhp3aYZBgAAAQs"]
[Sun May 03 02:26:16.736752 2026] [:error] [pid 52012:tid 52088] [client 20.151.130.38:61933] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afZByEzSWr-8cpS83mgscQAAA0s"]
[Sun May 03 02:26:17.177988 2026] [:error] [pid 52012:tid 52094] [client 20.151.130.38:59780] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZByUzSWr-8cpS83mgscgAAA1E"]
[Sun May 03 02:26:17.624014 2026] [:error] [pid 53435:tid 53482] [client 20.151.130.38:64795] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZByYDmp7_z8QkjSzMjKQAAAEo"]
[Sun May 03 02:26:18.094173 2026] [:error] [pid 22846:tid 22868] [client 20.151.130.38:65429] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZByom1Ms03Mfhp3aYZCgAAARQ"]
[Sun May 03 02:26:18.573223 2026] [:error] [pid 52012:tid 52098] [client 20.151.130.38:59856] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afZBykzSWr-8cpS83mgsdgAAA1U"]
[Sun May 03 02:26:19.065176 2026] [:error] [pid 52010:tid 52061] [client 20.151.130.38:60493] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afZBywiR6wohDtdeJMBzsgAAAtI"]
[Sun May 03 02:26:19.542343 2026] [:error] [pid 11894:tid 11920] [client 20.151.130.38:60477] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afZByzHh6DQF1tkXIKz_jgAAAVc"]
[Sun May 03 02:26:20.026816 2026] [:error] [pid 53435:tid 53478] [client 20.151.130.38:65477] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afZBzIDmp7_z8QkjSzMjLAAAAEY"]
[Sun May 03 02:26:20.500799 2026] [:error] [pid 53434:tid 53461] [client 20.151.130.38:65519] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afZBzO9BXmRQcbfsxly-fQAAABI"]
[Sun May 03 02:26:20.958840 2026] [:error] [pid 53435:tid 53473] [client 20.151.130.38:65415] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afZBzIDmp7_z8QkjSzMjLQAAAEE"]
[Sun May 03 02:26:21.473340 2026] [:error] [pid 53435:tid 53493] [client 20.151.130.38:61863] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afZBzYDmp7_z8QkjSzMjLwAAAFU"]
[Sun May 03 02:26:21.935348 2026] [:error] [pid 51950:tid 52002] [client 20.151.130.38:62516] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afZBzYoBJzYZ3RKUhdiU8QAAAlY"]
[Sun May 03 02:26:22.391921 2026] [:error] [pid 53435:tid 53489] [client 20.151.130.38:59826] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afZBzoDmp7_z8QkjSzMjMQAAAFE"]
[Sun May 03 02:26:22.944902 2026] [:error] [pid 51950:tid 51993] [client 20.151.130.38:61229] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afZBzooBJzYZ3RKUhdiU9AAAAk0"]
[Sun May 03 02:26:23.416303 2026] [:error] [pid 11894:tid 11913] [client 20.151.130.38:60429] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afZBzzHh6DQF1tkXIKz_kAAAAVA"]
[Sun May 03 02:26:23.896930 2026] [:error] [pid 53434:tid 53444] [client 20.151.130.38:59842] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afZBz-9BXmRQcbfsxly-gAAAAAE"]
[Sun May 03 02:26:24.380773 2026] [:error] [pid 53435:tid 53483] [client 20.151.130.38:59864] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afZB0IDmp7_z8QkjSzMjNwAAAEs"]
[Sun May 03 02:26:24.873100 2026] [:error] [pid 52012:tid 52081] [client 20.151.130.38:61211] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZB0EzSWr-8cpS83mgshgAAA0Q"]
[Sun May 03 02:26:25.315868 2026] [:error] [pid 53435:tid 53475] [client 20.151.130.38:65516] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZB0YDmp7_z8QkjSzMjOwAAAEM"]
[Sun May 03 02:26:25.886499 2026] [:error] [pid 53435:tid 53482] [client 20.151.130.38:61879] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZB0YDmp7_z8QkjSzMjPQAAAEo"]
[Sun May 03 02:26:26.388300 2026] [:error] [pid 53435:tid 53474] [client 20.151.130.38:59783] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afZB0oDmp7_z8QkjSzMjPwAAAEI"]
[Sun May 03 02:26:26.825729 2026] [:error] [pid 52012:tid 52097] [client 20.151.130.38:59294] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afZB0kzSWr-8cpS83mgsiQAAA1Q"]
[Sun May 03 02:26:27.324405 2026] [:error] [pid 53435:tid 53493] [client 20.151.130.38:61925] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afZB04Dmp7_z8QkjSzMjQwAAAFU"]
[Sun May 03 02:26:27.786349 2026] [:error] [pid 53435:tid 53489] [client 20.151.130.38:61207] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afZB04Dmp7_z8QkjSzMjRAAAAFE"]
[Sun May 03 02:26:28.268225 2026] [:error] [pid 53435:tid 53487] [client 20.151.130.38:61890] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afZB1IDmp7_z8QkjSzMjRwAAAE8"]
[Sun May 03 02:26:28.756583 2026] [:error] [pid 11894:tid 11902] [client 20.151.130.38:59288] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZB1DHh6DQF1tkXIKz_kgAAAUU"]
[Sun May 03 02:26:29.254996 2026] [:error] [pid 52012:tid 52080] [client 20.151.130.38:60531] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZB1UzSWr-8cpS83mgsiwAAA0M"]
[Sun May 03 02:26:29.729427 2026] [:error] [pid 52010:tid 52062] [client 20.151.130.38:61231] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZB1QiR6wohDtdeJMBztgAAAtM"]
[Sun May 03 02:26:30.209508 2026] [:error] [pid 53435:tid 53478] [client 20.151.130.38:60486] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afZB1oDmp7_z8QkjSzMjTgAAAEY"]
[Sun May 03 02:26:30.705060 2026] [:error] [pid 52124:tid 52150] [client 20.151.130.38:64883] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afZB1jjabaZ9NMm8eQuiXAAAA5U"]
[Sun May 03 02:26:31.225219 2026] [:error] [pid 52010:tid 52065] [client 20.151.130.38:65412] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afZB1wiR6wohDtdeJMBzuAAAAtY"]
[Sun May 03 02:26:31.653856 2026] [:error] [pid 51950:tid 51991] [client 20.151.130.38:62469] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afZB14oBJzYZ3RKUhdiU9QAAAks"]
[Sun May 03 02:26:32.087386 2026] [:error] [pid 11894:tid 11921] [client 20.151.130.38:60533] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afZB2DHh6DQF1tkXIKz_kwAAAVg"]
[Sun May 03 02:26:32.503503 2026] [:error] [pid 51950:tid 51987] [client 20.151.130.38:62586] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afZB2IoBJzYZ3RKUhdiU9gAAAkc"]
[Sun May 03 02:26:32.961975 2026] [:error] [pid 53435:tid 53488] [client 20.151.130.38:62513] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afZB2IDmp7_z8QkjSzMjVgAAAFA"]
[Sun May 03 02:26:33.431345 2026] [:error] [pid 52012:tid 52094] [client 20.151.130.38:62561] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afZB2UzSWr-8cpS83mgskAAAA1E"]
[Sun May 03 02:26:33.855930 2026] [:error] [pid 51917:tid 51931] [client 20.151.130.38:62480] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afZB2a7wZviJ7BgcCi96xwAAAcw"]
[Sun May 03 02:26:34.336148 2026] [:error] [pid 53435:tid 53484] [client 20.151.130.38:60543] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afZB2oDmp7_z8QkjSzMjVwAAAEw"]
[Sun May 03 02:26:34.847431 2026] [:error] [pid 52010:tid 52049] [client 20.151.130.38:61893] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afZB2giR6wohDtdeJMBzvwAAAsY"]
[Sun May 03 02:26:35.285084 2026] [:error] [pid 52010:tid 52048] [client 20.151.130.38:64773] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afZB2wiR6wohDtdeJMBzwgAAAsU"]
[Sun May 03 02:26:35.715056 2026] [:error] [pid 52010:tid 52062] [client 20.151.130.38:60500] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afZB2wiR6wohDtdeJMBzxQAAAtM"]
[Sun May 03 02:26:36.224293 2026] [:error] [pid 51917:tid 51928] [client 20.151.130.38:61209] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afZB3K7wZviJ7BgcCi96yAAAAck"]
[Sun May 03 02:26:36.805281 2026] [:error] [pid 53435:tid 53491] [client 20.151.130.38:64846] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afZB3IDmp7_z8QkjSzMjWwAAAFM"]
[Sun May 03 02:26:37.449123 2026] [:error] [pid 52010:tid 52052] [client 20.151.130.38:62551] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afZB3QiR6wohDtdeJMBzzAAAAsk"]
[Sun May 03 02:26:37.875296 2026] [:error] [pid 53435:tid 53483] [client 20.151.130.38:60507] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afZB3YDmp7_z8QkjSzMjXAAAAEs"]
[Sun May 03 02:26:38.348712 2026] [:error] [pid 51917:tid 51937] [client 20.151.130.38:61254] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afZB3q7wZviJ7BgcCi96yQAAAdI"]
[Sun May 03 02:26:38.897285 2026] [:error] [pid 52010:tid 52046] [client 20.151.130.38:64885] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afZB3giR6wohDtdeJMBz0gAAAsM"]
[Sun May 03 02:26:39.417544 2026] [:error] [pid 51917:tid 51929] [client 20.151.130.38:59844] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afZB367wZviJ7BgcCi96ygAAAco"]
[Sun May 03 02:26:39.908871 2026] [:error] [pid 11894:tid 11915] [client 20.151.130.38:61827] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "afZB3zHh6DQF1tkXIKz_mQAAAVI"]
[Sun May 03 02:26:40.379511 2026] [:error] [pid 52124:tid 52147] [client 20.151.130.38:61915] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afZB4DjabaZ9NMm8eQuiXwAAA5I"]
[Sun May 03 02:26:40.814992 2026] [:error] [pid 52124:tid 52139] [client 20.151.130.38:65480] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afZB4DjabaZ9NMm8eQuiYAAAA4o"]
[Sun May 03 02:26:41.261552 2026] [:error] [pid 52012:tid 52089] [client 20.151.130.38:65423] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afZB4UzSWr-8cpS83mgslQAAA0w"]
[Sun May 03 02:26:41.748748 2026] [:error] [pid 51950:tid 51990] [client 20.151.130.38:60542] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "afZB4YoBJzYZ3RKUhdiU-AAAAko"]
[Sun May 03 02:26:42.181079 2026] [:error] [pid 22846:tid 22857] [client 20.151.130.38:60478] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afZB4om1Ms03Mfhp3aYZDQAAAQk"]
[Sun May 03 02:26:42.679056 2026] [:error] [pid 11894:tid 11919] [client 20.151.130.38:61838] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afZB4jHh6DQF1tkXIKz_mwAAAVY"]
[Sun May 03 02:26:43.123200 2026] [:error] [pid 11894:tid 11918] [client 20.151.130.38:60520] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afZB4zHh6DQF1tkXIKz_nAAAAVU"]
[Sun May 03 02:26:43.647095 2026] [:error] [pid 53435:tid 53481] [client 20.151.130.38:61266] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hypo.php"] [unique_id "afZB44Dmp7_z8QkjSzMjXgAAAEk"]
[Sun May 03 02:26:44.137489 2026] [:error] [pid 53435:tid 53478] [client 20.151.130.38:65466] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afZB5IDmp7_z8QkjSzMjYQAAAEY"]
[Sun May 03 02:26:44.569796 2026] [:error] [pid 22846:tid 22862] [client 20.151.130.38:61267] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afZB5Im1Ms03Mfhp3aYZDgAAAQ4"]
[Sun May 03 02:26:45.015908 2026] [:error] [pid 51917:tid 51925] [client 20.151.130.38:64840] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afZB5a7wZviJ7BgcCi960QAAAcY"]
[Sun May 03 02:26:45.499068 2026] [:error] [pid 51917:tid 51935] [client 20.151.130.38:61306] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file18.php"] [unique_id "afZB5a7wZviJ7BgcCi960wAAAdA"]
[Sun May 03 02:26:45.956348 2026] [:error] [pid 51917:tid 51943] [client 20.151.130.38:59884] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afZB5a7wZviJ7BgcCi961QAAAdg"]
[Sun May 03 02:26:46.383500 2026] [:error] [pid 53435:tid 53486] [client 20.151.130.38:65500] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afZB5oDmp7_z8QkjSzMjZwAAAE4"]
[Sun May 03 02:26:46.878091 2026] [:error] [pid 52124:tid 52145] [client 20.151.130.38:61213] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afZB5jjabaZ9NMm8eQuiYwAAA5A"]
[Sun May 03 02:26:47.371998 2026] [:error] [pid 52124:tid 52140] [client 20.151.130.38:62524] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afZB5zjabaZ9NMm8eQuiZQAAA4s"]
[Sun May 03 02:26:47.795590 2026] [:error] [pid 52124:tid 52144] [client 20.151.130.38:65526] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZB5zjabaZ9NMm8eQuiZwAAA48"]
[Sun May 03 02:26:48.286545 2026] [:error] [pid 52124:tid 52148] [client 20.151.130.38:62508] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZB6DjabaZ9NMm8eQuiagAAA5M"]
[Sun May 03 02:26:48.725322 2026] [:error] [pid 53435:tid 53473] [client 20.151.130.38:64833] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZB6IDmp7_z8QkjSzMjaQAAAEE"]
[Sun May 03 02:26:49.188462 2026] [:error] [pid 51950:tid 51984] [client 20.151.130.38:64813] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afZB6YoBJzYZ3RKUhdiU-wAAAkQ"]
[Sun May 03 02:26:49.626248 2026] [:error] [pid 53435:tid 53480] [client 20.151.130.38:62558] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afZB6YDmp7_z8QkjSzMjawAAAEg"]
[Sun May 03 02:26:50.139704 2026] [:error] [pid 53435:tid 53478] [client 20.151.130.38:61830] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afZB6oDmp7_z8QkjSzMjbwAAAEY"]
[Sun May 03 02:26:50.566522 2026] [:error] [pid 11894:tid 11914] [client 20.151.130.38:60475] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afZB6jHh6DQF1tkXIKz_oQAAAVE"]
[Sun May 03 02:26:50.983665 2026] [:error] [pid 51950:tid 51980] [client 20.151.130.38:57722] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afZB6ooBJzYZ3RKUhdiU_gAAAkA"]
[Sun May 03 02:26:51.415755 2026] [:error] [pid 11894:tid 11907] [client 20.151.130.38:59875] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/admin.php"] [unique_id "afZB6zHh6DQF1tkXIKz_pAAAAUo"]
[Sun May 03 02:26:51.857570 2026] [:error] [pid 53436:tid 53517] [client 20.151.130.38:57672] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/admin.php"] [unique_id "afZB669N0xp8fccVM0DyIQAAAJI"]
[Sun May 03 02:26:52.328818 2026] [:error] [pid 11894:tid 11915] [client 20.151.130.38:60449] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/admin.php"] [unique_id "afZB7DHh6DQF1tkXIKz_pQAAAVI"]
[Sun May 03 02:26:52.827588 2026] [:error] [pid 51917:tid 51920] [client 20.151.130.38:59824] [client 20.151.130.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/admin.php"] [unique_id "afZB7K7wZviJ7BgcCi962QAAAcE"]
[Sun May 03 03:57:05.856951 2026] [:error] [pid 40732:tid 40762] [client 137.184.235.240:49756] [client 137.184.235.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afZXEf1lQrIvlEdzcVfiUgAAANI"]
[Sun May 03 05:46:56.137696 2026] [:error] [pid 21934:tid 21950] [client 43.130.71.237:43188] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afZw0HWfIjnWjXCxeM4yTgAAAQ4"]
[Sun May 03 07:56:42.402378 2026] [:error] [pid 37127:tid 37196] [client 49.234.192.248:57874] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afaPOv8khJXb5O5aWVXZvQAAAEw"]
[Sun May 03 11:11:05.349851 2026] [:error] [pid 37127:tid 37193] [client 43.173.1.57:37104] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afa8yf8khJXb5O5aWVX-5gAAAEk"]
[Sun May 03 11:33:25.607397 2026] [:error] [pid 40422:tid 40438] [client 209.87.169.5:60093] [client 209.87.169.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afbCBUHBbBLrXh6PBuvPjwAAAUw"]
[Sun May 03 11:41:13.945249 2026] [:error] [pid 37246:tid 37269] [client 172.173.121.85:9982] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afbD2ThvYFGNwhnPamqzAQAAARM"]
[Sun May 03 11:41:15.138638 2026] [:error] [pid 37130:tid 37223] [client 172.173.121.85:42122] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afbD26Iu7bmXKXicRk9TnwAAAIo"]
[Sun May 03 11:41:16.604947 2026] [:error] [pid 37246:tid 37250] [client 172.173.121.85:9558] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afbD3DhvYFGNwhnPamqzBQAAAQI"]
[Sun May 03 11:41:17.804007 2026] [:error] [pid 37126:tid 37171] [client 172.173.121.85:32626] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afbD3fR_A42N-LtDyrv1SwAAABI"]
[Sun May 03 11:41:26.602484 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:9556] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afbD5kHBbBLrXh6PBuvSZAAAAVQ"]
[Sun May 03 11:41:29.303864 2026] [:error] [pid 40386:tid 40407] [client 172.173.121.85:42846] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afbD6VHJDYRXUf3IbRT5ugAAANM"]
[Sun May 03 11:41:30.736671 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:29255] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afbD6jSujTvwdzEkjScJGQAAAYI"]
[Sun May 03 11:41:32.985986 2026] [:error] [pid 37130:tid 37225] [client 172.173.121.85:55985] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afbD7KIu7bmXKXicRk9TqQAAAIw"]
[Sun May 03 11:41:34.072550 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:58688] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afbD7kHBbBLrXh6PBuvSeQAAAUE"]
[Sun May 03 11:41:34.576226 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:29298] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afbD7kHBbBLrXh6PBuvSegAAAVI"]
[Sun May 03 11:41:35.570608 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:29622] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afbD7_8khJXb5O5aWVUDngAAAEI"]
[Sun May 03 11:41:36.825287 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:29249] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afbD8PR_A42N-LtDyrv1bQAAABE"]
[Sun May 03 11:41:37.388548 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:29599] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.admin.php"] [unique_id "afbD8TSujTvwdzEkjScJJwAAAYI"]
[Sun May 03 11:41:37.991925 2026] [:error] [pid 37130:tid 37224] [client 172.173.121.85:42864] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.admin.php"] [unique_id "afbD8aIu7bmXKXicRk9TugAAAIs"]
[Sun May 03 11:41:38.638884 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:29282] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.admin.php"] [unique_id "afbD8kHBbBLrXh6PBuvSqQAAAU0"]
[Sun May 03 11:41:39.378151 2026] [:error] [pid 37126:tid 37169] [client 172.173.121.85:42821] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.admin.php"] [unique_id "afbD8_R_A42N-LtDyrv1bwAAABA"]
[Sun May 03 11:41:40.074332 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:27848] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sw.php"] [unique_id "afbD9DhvYFGNwhnPamqzGgAAARQ"]
[Sun May 03 11:41:40.613679 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:42150] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sw.php"] [unique_id "afbD9DhvYFGNwhnPamqzHQAAAQ4"]
[Sun May 03 11:41:41.276742 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:27849] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sw.php"] [unique_id "afbD9ThvYFGNwhnPamqzIAAAARY"]
[Sun May 03 11:41:41.885907 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:55956] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sw.php"] [unique_id "afbD9UHBbBLrXh6PBuvStQAAAUM"]
[Sun May 03 11:41:42.453143 2026] [:error] [pid 37130:tid 37229] [client 172.173.121.85:9940] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afbD9qIu7bmXKXicRk9TvQAAAJA"]
[Sun May 03 11:41:42.998390 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:29606] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afbD9jhvYFGNwhnPamqzJwAAARA"]
[Sun May 03 11:41:43.727750 2026] [:error] [pid 40456:tid 40475] [client 172.173.121.85:27841] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afbD9zSujTvwdzEkjScJMwAAAZE"]
[Sun May 03 11:41:44.612255 2026] [:error] [pid 37127:tid 37185] [client 172.173.121.85:27885] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afbD-P8khJXb5O5aWVUDsAAAAEE"]
[Sun May 03 11:41:45.403831 2026] [:error] [pid 37130:tid 37216] [client 172.173.121.85:42860] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "afbD-aIu7bmXKXicRk9TxAAAAIM"]
[Sun May 03 11:41:46.813416 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:29277] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "afbD-kHBbBLrXh6PBuvSuwAAAUA"]
[Sun May 03 11:41:49.866397 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:58738] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "afbD_VHJDYRXUf3IbRT5xgAAAMQ"]
[Sun May 03 11:41:51.051833 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:29617] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-temp.php"] [unique_id "afbD_zSujTvwdzEkjScJOAAAAYk"]
[Sun May 03 11:41:52.831482 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:27843] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "afbEAEHBbBLrXh6PBuvSxgAAAVg"]
[Sun May 03 11:41:54.511597 2026] [:error] [pid 40386:tid 40393] [client 172.173.121.85:9921] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "afbEAlHJDYRXUf3IbRT5zQAAAMU"]
[Sun May 03 11:41:55.331888 2026] [:error] [pid 40456:tid 40468] [client 172.173.121.85:32598] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "afbEAzSujTvwdzEkjScJPwAAAYo"]
[Sun May 03 11:41:55.836384 2026] [:error] [pid 37130:tid 37226] [client 172.173.121.85:43448] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sxdfrt.php"] [unique_id "afbEA6Iu7bmXKXicRk9T0QAAAI0"]
[Sun May 03 11:41:56.857112 2026] [:error] [pid 40456:tid 40473] [client 172.173.121.85:9540] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afbEBDSujTvwdzEkjScJQQAAAY8"]
[Sun May 03 11:41:58.119538 2026] [:error] [pid 40456:tid 40470] [client 172.173.121.85:42842] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afbEBjSujTvwdzEkjScJQgAAAYw"]
[Sun May 03 11:41:59.039165 2026] [:error] [pid 40456:tid 40458] [client 172.173.121.85:58750] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afbEBzSujTvwdzEkjScJRAAAAYA"]
[Sun May 03 11:42:00.570703 2026] [:error] [pid 37126:tid 37160] [client 172.173.121.85:58709] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afbECPR_A42N-LtDyrv1fAAAAAc"]
[Sun May 03 11:42:01.534179 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:64306] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afbECThvYFGNwhnPamqzPgAAAQY"]
[Sun May 03 11:42:02.412680 2026] [:error] [pid 37246:tid 37255] [client 172.173.121.85:55963] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afbECjhvYFGNwhnPamqzQQAAAQc"]
[Sun May 03 11:42:03.316407 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:32578] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afbECzSujTvwdzEkjScJSAAAAY0"]
[Sun May 03 11:42:03.907281 2026] [:error] [pid 37130:tid 37218] [client 172.173.121.85:43395] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afbEC6Iu7bmXKXicRk9T2QAAAIU"]
[Sun May 03 11:42:04.863624 2026] [:error] [pid 37127:tid 37201] [client 172.173.121.85:55958] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "afbEDP8khJXb5O5aWVUDuQAAAFA"]
[Sun May 03 11:42:05.879414 2026] [:error] [pid 37127:tid 37208] [client 172.173.121.85:32635] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "afbEDf8khJXb5O5aWVUDugAAAFY"]
[Sun May 03 11:42:07.437758 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:43400] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "afbEDzSujTvwdzEkjScJVAAAAY0"]
[Sun May 03 11:42:08.271259 2026] [:error] [pid 37130:tid 37215] [client 172.173.121.85:42765] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-bda.php"] [unique_id "afbEEKIu7bmXKXicRk9T3wAAAII"]
[Sun May 03 11:42:09.317085 2026] [:error] [pid 37130:tid 37224] [client 172.173.121.85:64283] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "afbEEaIu7bmXKXicRk9T4gAAAIs"]
[Sun May 03 11:42:10.044801 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:32629] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "afbEEjSujTvwdzEkjScJVgAAAYg"]
[Sun May 03 11:42:10.639489 2026] [:error] [pid 37126:tid 37176] [client 172.173.121.85:30721] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "afbEEvR_A42N-LtDyrv1gQAAABc"]
[Sun May 03 11:42:11.293456 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:42771] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bhm.php"] [unique_id "afbEE0HBbBLrXh6PBuvSywAAAVE"]
[Sun May 03 11:42:11.905361 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:32605] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "afbEE0HBbBLrXh6PBuvSzgAAAVc"]
[Sun May 03 11:42:12.863641 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:9973] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "afbEFEHBbBLrXh6PBuvS0wAAAUQ"]
[Sun May 03 11:42:19.298810 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:43401] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afbEG0HBbBLrXh6PBuvTCgAAAUc"]
[Sun May 03 11:42:20.465381 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:32593] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afbEHDSujTvwdzEkjScJWQAAAZA"]
[Sun May 03 11:42:21.033951 2026] [:error] [pid 40386:tid 40406] [client 172.173.121.85:32601] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afbEHVHJDYRXUf3IbRT52wAAANI"]
[Sun May 03 11:42:21.583572 2026] [:error] [pid 40456:tid 40482] [client 172.173.121.85:9960] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afbEHTSujTvwdzEkjScJWwAAAZg"]
[Sun May 03 11:42:22.175807 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:34672] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afbEHvR_A42N-LtDyrv1hwAAAA0"]
[Sun May 03 11:42:23.422427 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:31324] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afbEHzhvYFGNwhnPamqzXgAAAQY"]
[Sun May 03 11:42:23.856069 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:43449] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afbEHzSujTvwdzEkjScJXgAAAY0"]
[Sun May 03 11:42:24.297495 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:64263] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afbEIP8khJXb5O5aWVUDygAAAEI"]
[Sun May 03 11:42:25.175256 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:64312] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afbEIThvYFGNwhnPamqzYQAAAQM"]
[Sun May 03 11:42:26.097216 2026] [:error] [pid 40456:tid 40477] [client 172.173.121.85:32620] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afbEIjSujTvwdzEkjScJXwAAAZM"]
[Sun May 03 11:42:26.667324 2026] [:error] [pid 40386:tid 40397] [client 172.173.121.85:43446] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afbEIlHJDYRXUf3IbRT54QAAAMk"]
[Sun May 03 11:42:27.180628 2026] [:error] [pid 37127:tid 37210] [client 172.173.121.85:42173] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afbEI_8khJXb5O5aWVUDzQAAAFg"]
[Sun May 03 11:42:27.733929 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:9926] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afbEIzhvYFGNwhnPamqzZAAAARA"]
[Sun May 03 11:42:28.204489 2026] [:error] [pid 37126:tid 37158] [client 172.173.121.85:43418] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afbEJPR_A42N-LtDyrv1iQAAAAU"]
[Sun May 03 11:42:28.759489 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:43454] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afbEJEHBbBLrXh6PBuvTDQAAAVc"]
[Sun May 03 11:42:29.230667 2026] [:error] [pid 37126:tid 37168] [client 172.173.121.85:27896] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afbEJfR_A42N-LtDyrv1jAAAAA8"]
[Sun May 03 11:42:29.704870 2026] [:error] [pid 37130:tid 37213] [client 172.173.121.85:43434] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afbEJaIu7bmXKXicRk9T-gAAAIA"]
[Sun May 03 11:42:30.147214 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:64297] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afbEJjhvYFGNwhnPamqzawAAARI"]
[Sun May 03 11:42:30.617448 2026] [:error] [pid 37246:tid 37257] [client 172.173.121.85:42782] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afbEJjhvYFGNwhnPamqzbAAAAQk"]
[Sun May 03 11:42:31.085319 2026] [:error] [pid 40386:tid 40394] [client 172.173.121.85:42143] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afbEJ1HJDYRXUf3IbRT55wAAAMY"]
[Sun May 03 11:42:31.566957 2026] [:error] [pid 37127:tid 37195] [client 172.173.121.85:30762] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "afbEJ_8khJXb5O5aWVUD0AAAAEs"]
[Sun May 03 11:42:32.086640 2026] [:error] [pid 37127:tid 37189] [client 172.173.121.85:42159] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "afbEKP8khJXb5O5aWVUD0QAAAEU"]
[Sun May 03 11:42:32.605768 2026] [:error] [pid 37126:tid 37176] [client 172.173.121.85:43435] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "afbEKPR_A42N-LtDyrv1kwAAABc"]
[Sun May 03 11:42:33.414031 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:30758] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kikikoko.php"] [unique_id "afbEKTSujTvwdzEkjScJZAAAAZQ"]
[Sun May 03 11:42:34.007914 2026] [:error] [pid 40456:tid 40459] [client 172.173.121.85:32577] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afbEKjSujTvwdzEkjScJZgAAAYE"]
[Sun May 03 11:42:34.559868 2026] [:error] [pid 37127:tid 37205] [client 172.173.121.85:43408] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afbEKv8khJXb5O5aWVUD1AAAAFM"]
[Sun May 03 11:42:35.122124 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:42815] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afbEKzSujTvwdzEkjScJaQAAAY0"]
[Sun May 03 11:42:35.616011 2026] [:error] [pid 37130:tid 37214] [client 172.173.121.85:29307] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afbEK6Iu7bmXKXicRk9T_wAAAIE"]
[Sun May 03 11:42:36.187492 2026] [:error] [pid 37126:tid 37158] [client 172.173.121.85:64296] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afbELPR_A42N-LtDyrv1nAAAAAU"]
[Sun May 03 11:42:36.806792 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:9954] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afbELDSujTvwdzEkjScJawAAAZY"]
[Sun May 03 11:42:37.327810 2026] [:error] [pid 37126:tid 37161] [client 172.173.121.85:29582] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afbELfR_A42N-LtDyrv1ngAAAAg"]
[Sun May 03 11:42:38.052741 2026] [:error] [pid 37246:tid 37250] [client 172.173.121.85:42795] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afbELjhvYFGNwhnPamqzcwAAAQI"]
[Sun May 03 11:42:38.546712 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:64292] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afbELjhvYFGNwhnPamqzdgAAAQM"]
[Sun May 03 11:42:39.160971 2026] [:error] [pid 37127:tid 37187] [client 172.173.121.85:42160] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afbEL_8khJXb5O5aWVUD2AAAAEM"]
[Sun May 03 11:42:39.866977 2026] [:error] [pid 37126:tid 37165] [client 172.173.121.85:9957] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afbEL_R_A42N-LtDyrv1oQAAAAw"]
[Sun May 03 11:42:40.478976 2026] [:error] [pid 37127:tid 37193] [client 172.173.121.85:42136] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afbEMP8khJXb5O5aWVUD3QAAAEk"]
[Sun May 03 11:42:41.121327 2026] [:error] [pid 37130:tid 37225] [client 172.173.121.85:32582] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afbEMaIu7bmXKXicRk9UBAAAAIw"]
[Sun May 03 11:42:41.827961 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:34683] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afbEMUHBbBLrXh6PBuvTEgAAAUg"]
[Sun May 03 11:42:42.390967 2026] [:error] [pid 37246:tid 37256] [client 172.173.121.85:9949] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afbEMjhvYFGNwhnPamqzegAAAQg"]
[Sun May 03 11:42:43.064870 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:42147] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afbEMzhvYFGNwhnPamqzfgAAARY"]
[Sun May 03 11:42:43.937604 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:30753] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afbEMzSujTvwdzEkjScJcgAAAYY"]
[Sun May 03 11:42:44.492268 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:64262] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afbENDSujTvwdzEkjScJdAAAAZY"]
[Sun May 03 11:42:44.954329 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:34671] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afbENDSujTvwdzEkjScJdwAAAYU"]
[Sun May 03 11:42:45.652260 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:30747] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afbENThvYFGNwhnPamqzggAAAQo"]
[Sun May 03 11:42:46.480055 2026] [:error] [pid 37127:tid 37203] [client 172.173.121.85:42148] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afbENv8khJXb5O5aWVUD5AAAAFI"]
[Sun May 03 11:42:47.284783 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:42113] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afbENzSujTvwdzEkjScJfgAAAZQ"]
[Sun May 03 11:42:47.851003 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:55971] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afbENzSujTvwdzEkjScJgAAAAZA"]
[Sun May 03 11:42:48.870771 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:34687] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afbEODSujTvwdzEkjScJhwAAAYU"]
[Sun May 03 11:42:49.955736 2026] [:error] [pid 37127:tid 37202] [client 172.173.121.85:42784] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afbEOf8khJXb5O5aWVUD7QAAAFE"]
[Sun May 03 11:42:50.704528 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:42157] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afbEOjSujTvwdzEkjScJiwAAAZQ"]
[Sun May 03 11:42:51.559728 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:42136] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afbEO0HBbBLrXh6PBuvTGgAAAUs"]
[Sun May 03 11:42:52.121850 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:9968] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afbEPDhvYFGNwhnPamqziAAAARA"]
[Sun May 03 11:42:52.915336 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:30768] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afbEPDhvYFGNwhnPamqziwAAARY"]
[Sun May 03 11:42:53.376147 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:43414] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afbEPThvYFGNwhnPamqzjAAAAQ0"]
[Sun May 03 11:42:54.233651 2026] [:error] [pid 37127:tid 37189] [client 172.173.121.85:55982] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afbEPv8khJXb5O5aWVUD9QAAAEU"]
[Sun May 03 11:42:54.977458 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:32639] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afbEPkHBbBLrXh6PBuvTHgAAAVM"]
[Sun May 03 11:42:55.656426 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:42149] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afbEP0HBbBLrXh6PBuvTIQAAAUk"]
[Sun May 03 11:42:56.156792 2026] [:error] [pid 40422:tid 40431] [client 172.173.121.85:30748] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afbEQEHBbBLrXh6PBuvTIwAAAUU"]
[Sun May 03 11:42:56.702063 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:55961] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afbEQEHBbBLrXh6PBuvTJQAAAUY"]
[Sun May 03 11:42:57.459741 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:55966] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afbEQTSujTvwdzEkjScJlwAAAYM"]
[Sun May 03 11:42:58.066898 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:64272] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "afbEQvR_A42N-LtDyrv1pQAAABE"]
[Sun May 03 11:42:58.576160 2026] [:error] [pid 37127:tid 37185] [client 172.173.121.85:42755] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "afbEQv8khJXb5O5aWVUD-gAAAEE"]
[Sun May 03 11:42:59.147171 2026] [:error] [pid 37127:tid 37200] [client 172.173.121.85:43426] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "afbEQ_8khJXb5O5aWVUD_QAAAE8"]
[Sun May 03 11:42:59.760876 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:27899] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "afbEQ0HBbBLrXh6PBuvTKwAAAUM"]
[Sun May 03 11:43:00.231900 2026] [:error] [pid 40386:tid 40399] [client 172.173.121.85:34656] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afbERFHJDYRXUf3IbRT59QAAAMs"]
[Sun May 03 11:43:00.661337 2026] [:error] [pid 37126:tid 37165] [client 172.173.121.85:43399] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afbERPR_A42N-LtDyrv1pwAAAAw"]
[Sun May 03 11:43:01.323438 2026] [:error] [pid 40386:tid 40389] [client 172.173.121.85:9610] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afbERVHJDYRXUf3IbRT59wAAAME"]
[Sun May 03 11:43:02.192217 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:42778] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell.php"] [unique_id "afbERkHBbBLrXh6PBuvTNQAAAUY"]
[Sun May 03 11:43:02.781453 2026] [:error] [pid 37126:tid 37163] [client 172.173.121.85:42773] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "afbERvR_A42N-LtDyrv1qAAAAAo"]
[Sun May 03 11:43:03.210078 2026] [:error] [pid 37126:tid 37177] [client 172.173.121.85:9573] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "afbER_R_A42N-LtDyrv1qQAAABg"]
[Sun May 03 11:43:03.720014 2026] [:error] [pid 37126:tid 37169] [client 172.173.121.85:42132] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "afbER_R_A42N-LtDyrv1rAAAABA"]
[Sun May 03 11:43:04.187188 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:42774] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tea.php"] [unique_id "afbESDhvYFGNwhnPamqzjwAAARE"]
[Sun May 03 11:43:04.668719 2026] [:error] [pid 37126:tid 37151] [client 172.173.121.85:42138] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afbESPR_A42N-LtDyrv1rQAAAAA"]
[Sun May 03 11:43:05.079485 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:27875] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afbESThvYFGNwhnPamqzkgAAAQA"]
[Sun May 03 11:43:05.522713 2026] [:error] [pid 37246:tid 37273] [client 172.173.121.85:27865] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afbESThvYFGNwhnPamqzkwAAARc"]
[Sun May 03 11:43:06.069191 2026] [:error] [pid 37246:tid 37256] [client 172.173.121.85:34634] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/seo.php"] [unique_id "afbESjhvYFGNwhnPamqzlAAAAQg"]
[Sun May 03 11:43:06.551885 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:42871] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afbESjhvYFGNwhnPamqzlgAAARA"]
[Sun May 03 11:43:07.011384 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:32628] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afbES0HBbBLrXh6PBuvTOgAAAUc"]
[Sun May 03 11:43:07.405905 2026] [:error] [pid 40456:tid 40476] [client 172.173.121.85:42789] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afbESzSujTvwdzEkjScJoAAAAZI"]
[Sun May 03 11:43:07.917297 2026] [:error] [pid 37246:tid 37269] [client 172.173.121.85:29253] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7.php"] [unique_id "afbESzhvYFGNwhnPamqzmAAAARM"]
[Sun May 03 11:43:08.358308 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:34681] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afbETDhvYFGNwhnPamqzmQAAAQ0"]
[Sun May 03 11:43:08.963937 2026] [:error] [pid 40456:tid 40468] [client 172.173.121.85:43404] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afbETDSujTvwdzEkjScJpQAAAYo"]
[Sun May 03 11:43:09.523430 2026] [:error] [pid 37126:tid 37158] [client 172.173.121.85:27898] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afbETfR_A42N-LtDyrv1sQAAAAU"]
[Sun May 03 11:43:10.140190 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:9648] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8.php"] [unique_id "afbETjhvYFGNwhnPamqzmwAAAQU"]
[Sun May 03 11:43:10.817922 2026] [:error] [pid 37126:tid 37153] [client 172.173.121.85:27866] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afbETvR_A42N-LtDyrv1swAAAAI"]
[Sun May 03 11:43:11.383596 2026] [:error] [pid 40456:tid 40465] [client 172.173.121.85:9935] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afbETzSujTvwdzEkjScJqwAAAYc"]
[Sun May 03 11:43:12.120409 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:42172] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afbEUDSujTvwdzEkjScJrAAAAZQ"]
[Sun May 03 11:43:12.576063 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:42840] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "afbEUEHBbBLrXh6PBuvTPwAAAUQ"]
[Sun May 03 11:43:13.471539 2026] [:error] [pid 37126:tid 37175] [client 172.173.121.85:42152] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afbEUfR_A42N-LtDyrv1twAAABY"]
[Sun May 03 11:43:13.957514 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:58702] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afbEUUHBbBLrXh6PBuvTQgAAAUI"]
[Sun May 03 11:43:14.528826 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:9634] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afbEUkHBbBLrXh6PBuvTRQAAAVM"]
[Sun May 03 11:43:15.289511 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:55991] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2.php"] [unique_id "afbEU0HBbBLrXh6PBuvTSgAAAVI"]
[Sun May 03 11:43:16.315185 2026] [:error] [pid 37126:tid 37176] [client 172.173.121.85:30770] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afbEVPR_A42N-LtDyrv1uQAAABc"]
[Sun May 03 11:43:17.186974 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:27880] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afbEVUHBbBLrXh6PBuvTTAAAAU0"]
[Sun May 03 11:43:17.858159 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:42156] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afbEVThvYFGNwhnPamqzogAAAQM"]
[Sun May 03 11:43:18.729706 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:42757] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/3.php"] [unique_id "afbEVjSujTvwdzEkjScJsgAAAYM"]
[Sun May 03 11:43:24.421826 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:32583] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "afbEXDhvYFGNwhnPamqzvAAAAQA"]
[Sun May 03 11:43:24.934950 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:27889] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "afbEXEHBbBLrXh6PBuvTTQAAAVQ"]
[Sun May 03 11:43:25.631476 2026] [:error] [pid 40386:tid 40400] [client 172.173.121.85:9922] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "afbEXVHJDYRXUf3IbRT5-QAAAMw"]
[Sun May 03 11:43:26.204623 2026] [:error] [pid 37246:tid 37249] [client 172.173.121.85:42153] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aligk.php"] [unique_id "afbEXjhvYFGNwhnPamqzvQAAAQE"]
[Sun May 03 11:43:27.004373 2026] [:error] [pid 40386:tid 40408] [client 172.173.121.85:30782] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "afbEX1HJDYRXUf3IbRT5-gAAANQ"]
[Sun May 03 11:43:27.510311 2026] [:error] [pid 37126:tid 37168] [client 172.173.121.85:31326] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "afbEX_R_A42N-LtDyrv1xgAAAA8"]
[Sun May 03 11:43:29.027633 2026] [:error] [pid 40456:tid 40470] [client 172.173.121.85:64274] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "afbEYTSujTvwdzEkjScJtgAAAYw"]
[Sun May 03 11:43:30.279951 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:34647] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byrgo.php"] [unique_id "afbEYkHBbBLrXh6PBuvTUgAAAVg"]
[Sun May 03 11:43:30.818143 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:30720] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "afbEYjhvYFGNwhnPamqzwAAAAQ0"]
[Sun May 03 11:43:31.653658 2026] [:error] [pid 37246:tid 37261] [client 172.173.121.85:32618] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "afbEYzhvYFGNwhnPamqzwgAAAQs"]
[Sun May 03 11:43:33.132180 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:42165] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "afbEZThvYFGNwhnPamqzwwAAAQU"]
[Sun May 03 11:43:33.801290 2026] [:error] [pid 37130:tid 37235] [client 172.173.121.85:27879] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwpg.php"] [unique_id "afbEZaIu7bmXKXicRk9UFAAAAJY"]
[Sun May 03 11:43:34.377666 2026] [:error] [pid 37130:tid 37230] [client 172.173.121.85:55946] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "afbEZqIu7bmXKXicRk9UFQAAAJE"]
[Sun May 03 11:43:35.079561 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:30775] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "afbEZ0HBbBLrXh6PBuvTVgAAAUo"]
[Sun May 03 11:43:35.676460 2026] [:error] [pid 37130:tid 37229] [client 172.173.121.85:32634] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "afbEZ6Iu7bmXKXicRk9UFwAAAJA"]
[Sun May 03 11:43:36.691520 2026] [:error] [pid 37126:tid 37163] [client 172.173.121.85:27882] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ass.php"] [unique_id "afbEaPR_A42N-LtDyrv10AAAAAo"]
[Sun May 03 11:43:37.244700 2026] [:error] [pid 37130:tid 37214] [client 172.173.121.85:9595] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afbEaaIu7bmXKXicRk9UGgAAAIE"]
[Sun May 03 11:43:37.736176 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:34669] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afbEaf8khJXb5O5aWVUEFwAAAEI"]
[Sun May 03 11:43:38.251169 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:30731] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afbEakHBbBLrXh6PBuvTWgAAAUY"]
[Sun May 03 11:43:38.795342 2026] [:error] [pid 40422:tid 40441] [client 172.173.121.85:9950] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afbEakHBbBLrXh6PBuvTWwAAAU8"]
[Sun May 03 11:43:39.190418 2026] [:error] [pid 37127:tid 37185] [client 172.173.121.85:34625] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "afbEa_8khJXb5O5aWVUEGwAAAEE"]
[Sun May 03 11:43:39.671400 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:43419] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "afbEa_R_A42N-LtDyrv10gAAAA0"]
[Sun May 03 11:43:40.151478 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:64286] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "afbEbDSujTvwdzEkjScJuAAAAY0"]
[Sun May 03 11:43:40.589603 2026] [:error] [pid 37127:tid 37203] [client 172.173.121.85:9961] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no18.php"] [unique_id "afbEbP8khJXb5O5aWVUEHgAAAFI"]
[Sun May 03 11:43:41.091495 2026] [:error] [pid 37246:tid 37257] [client 172.173.121.85:34646] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "afbEbThvYFGNwhnPamqzyAAAAQk"]
[Sun May 03 11:43:41.474352 2026] [:error] [pid 40456:tid 40479] [client 172.173.121.85:58695] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "afbEbTSujTvwdzEkjScJuQAAAZU"]
[Sun May 03 11:43:41.939027 2026] [:error] [pid 40456:tid 40458] [client 172.173.121.85:42140] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "afbEbTSujTvwdzEkjScJugAAAYA"]
[Sun May 03 11:43:42.409752 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:9946] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fine.php"] [unique_id "afbEbkHBbBLrXh6PBuvTXgAAAUs"]
[Sun May 03 11:43:42.923931 2026] [:error] [pid 37130:tid 37217] [client 172.173.121.85:42872] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afbEbqIu7bmXKXicRk9UHAAAAIQ"]
[Sun May 03 11:43:43.476803 2026] [:error] [pid 37246:tid 37265] [client 172.173.121.85:42123] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afbEbzhvYFGNwhnPamqzyQAAAQ8"]
[Sun May 03 11:43:44.217637 2026] [:error] [pid 37246:tid 37255] [client 172.173.121.85:30761] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afbEcDhvYFGNwhnPamqzygAAAQc"]
[Sun May 03 11:43:44.677833 2026] [:error] [pid 37127:tid 37201] [client 172.173.121.85:30760] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afbEcP8khJXb5O5aWVUEIQAAAFA"]
[Sun May 03 11:43:45.255017 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:55953] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afbEcThvYFGNwhnPamqzzAAAARQ"]
[Sun May 03 11:43:45.803028 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:9947] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afbEcUHBbBLrXh6PBuvTYAAAAVE"]
[Sun May 03 11:43:46.266232 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:42133] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afbEcjSujTvwdzEkjScJvQAAAYg"]
[Sun May 03 11:43:46.716925 2026] [:error] [pid 40386:tid 40410] [client 172.173.121.85:42142] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afbEclHJDYRXUf3IbRT5_gAAANY"]
[Sun May 03 11:43:47.180402 2026] [:error] [pid 37130:tid 37227] [client 172.173.121.85:9962] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afbEc6Iu7bmXKXicRk9UHQAAAI4"]
[Sun May 03 11:43:47.694138 2026] [:error] [pid 37130:tid 37220] [client 172.173.121.85:64301] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afbEc6Iu7bmXKXicRk9UHwAAAIc"]
[Sun May 03 11:43:48.318538 2026] [:error] [pid 37126:tid 37172] [client 172.173.121.85:64267] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afbEdPR_A42N-LtDyrv10wAAABM"]
[Sun May 03 11:43:48.981025 2026] [:error] [pid 40386:tid 40406] [client 172.173.121.85:55957] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afbEdFHJDYRXUf3IbRT6AAAAANI"]
[Sun May 03 11:43:49.642293 2026] [:error] [pid 37130:tid 37228] [client 172.173.121.85:34631] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afbEdaIu7bmXKXicRk9UJAAAAI8"]
[Sun May 03 11:43:50.147520 2026] [:error] [pid 40386:tid 40388] [client 172.173.121.85:42780] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afbEdlHJDYRXUf3IbRT6AgAAAMA"]
[Sun May 03 11:43:50.759404 2026] [:error] [pid 37127:tid 37194] [client 172.173.121.85:32599] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afbEdv8khJXb5O5aWVUEIwAAAEo"]
[Sun May 03 11:43:51.282289 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:38621] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afbEd1HJDYRXUf3IbRT6BAAAAMQ"]
[Sun May 03 11:43:51.820349 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:42130] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "afbEdzhvYFGNwhnPamqzzgAAARA"]
[Sun May 03 11:43:52.658909 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:55954] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "afbEeDhvYFGNwhnPamqz0AAAAQ0"]
[Sun May 03 11:43:53.302744 2026] [:error] [pid 37130:tid 37214] [client 172.173.121.85:32607] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "afbEeaIu7bmXKXicRk9UJgAAAIE"]
[Sun May 03 11:43:53.742319 2026] [:error] [pid 37127:tid 37200] [client 172.173.121.85:42141] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fe5.php"] [unique_id "afbEef8khJXb5O5aWVUEJQAAAE8"]
[Sun May 03 11:43:54.248738 2026] [:error] [pid 37127:tid 37189] [client 172.173.121.85:55972] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "afbEev8khJXb5O5aWVUEJwAAAEU"]
[Sun May 03 11:43:54.988173 2026] [:error] [pid 37126:tid 37173] [client 172.173.121.85:55960] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "afbEevR_A42N-LtDyrv11gAAABQ"]
[Sun May 03 11:43:55.577668 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:42759] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "afbEezSujTvwdzEkjScJwQAAAYU"]
[Sun May 03 11:43:56.112844 2026] [:error] [pid 37127:tid 37201] [client 172.173.121.85:30730] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uuu.php"] [unique_id "afbEfP8khJXb5O5aWVUEKgAAAFA"]
[Sun May 03 11:43:56.985345 2026] [:error] [pid 37127:tid 37198] [client 172.173.121.85:34679] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afbEfP8khJXb5O5aWVUEKwAAAE0"]
[Sun May 03 11:43:57.557782 2026] [:error] [pid 37127:tid 37195] [client 172.173.121.85:58102] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afbEff8khJXb5O5aWVUELAAAAEs"]
[Sun May 03 11:43:58.060430 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:30726] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afbEfkHBbBLrXh6PBuvTYQAAAU0"]
[Sun May 03 11:43:58.773866 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:28931] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afbEfjSujTvwdzEkjScJwgAAAZQ"]
[Sun May 03 11:43:59.637487 2026] [:error] [pid 40456:tid 40470] [client 172.173.121.85:43432] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afbEfzSujTvwdzEkjScJwwAAAYw"]
[Sun May 03 11:44:00.713905 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:58701] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afbEgEHBbBLrXh6PBuvTYwAAAVQ"]
[Sun May 03 11:44:02.093649 2026] [:error] [pid 40456:tid 40477] [client 172.173.121.85:32580] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afbEgjSujTvwdzEkjScJxAAAAZM"]
[Sun May 03 11:44:02.947398 2026] [:error] [pid 37246:tid 37255] [client 172.173.121.85:42775] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afbEgjhvYFGNwhnPamqz1gAAAQc"]
[Sun May 03 11:44:03.840394 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:32625] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afbEgzSujTvwdzEkjScJxQAAAYk"]
[Sun May 03 11:44:04.289531 2026] [:error] [pid 37127:tid 37196] [client 172.173.121.85:32584] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afbEhP8khJXb5O5aWVUELQAAAEw"]
[Sun May 03 11:44:05.560918 2026] [:error] [pid 40386:tid 40397] [client 172.173.121.85:42164] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afbEhVHJDYRXUf3IbRT6BQAAAMk"]
[Sun May 03 11:44:06.372291 2026] [:error] [pid 37130:tid 37226] [client 172.173.121.85:9955] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afbEhqIu7bmXKXicRk9UKgAAAI0"]
[Sun May 03 11:44:07.031103 2026] [:error] [pid 40386:tid 40399] [client 172.173.121.85:9967] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "afbEh1HJDYRXUf3IbRT6BgAAAMs"]
[Sun May 03 11:44:07.801833 2026] [:error] [pid 37126:tid 37171] [client 172.173.121.85:42829] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "afbEh_R_A42N-LtDyrv12AAAABI"]
[Sun May 03 11:44:08.508065 2026] [:error] [pid 37127:tid 37206] [client 172.173.121.85:29251] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "afbEiP8khJXb5O5aWVUEMgAAAFQ"]
[Sun May 03 11:44:08.938434 2026] [:error] [pid 40456:tid 40475] [client 172.173.121.85:27859] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a2.php"] [unique_id "afbEiDSujTvwdzEkjScJxwAAAZE"]
[Sun May 03 11:44:09.545397 2026] [:error] [pid 37246:tid 37256] [client 172.173.121.85:64267] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afbEiThvYFGNwhnPamqz2AAAAQg"]
[Sun May 03 11:44:10.720763 2026] [:error] [pid 37127:tid 37184] [client 172.173.121.85:55959] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afbEiv8khJXb5O5aWVUENAAAAEA"]
[Sun May 03 11:44:11.460952 2026] [:error] [pid 37127:tid 37203] [client 172.173.121.85:43429] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afbEi_8khJXb5O5aWVUENQAAAFI"]
[Sun May 03 11:44:11.923864 2026] [:error] [pid 37127:tid 37200] [client 172.173.121.85:32596] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afbEi_8khJXb5O5aWVUENgAAAE8"]
[Sun May 03 11:44:12.631457 2026] [:error] [pid 37127:tid 37210] [client 172.173.121.85:55980] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afbEjP8khJXb5O5aWVUENwAAAFg"]
[Sun May 03 11:44:13.175935 2026] [:error] [pid 37127:tid 37189] [client 172.173.121.85:64258] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afbEjf8khJXb5O5aWVUEOAAAAEU"]
[Sun May 03 11:44:13.947015 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:64313] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afbEjUHBbBLrXh6PBuvTaQAAAVI"]
[Sun May 03 11:44:14.570006 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:32633] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ioxi-o.php"] [unique_id "afbEjkHBbBLrXh6PBuvTagAAAVE"]
[Sun May 03 11:44:15.405514 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:55997] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afbEj0HBbBLrXh6PBuvTbAAAAVc"]
[Sun May 03 11:44:16.434219 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:34653] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afbEkEHBbBLrXh6PBuvTbwAAAVQ"]
[Sun May 03 11:44:17.326588 2026] [:error] [pid 40456:tid 40476] [client 172.173.121.85:9603] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afbEkTSujTvwdzEkjScJywAAAZI"]
[Sun May 03 11:44:18.217539 2026] [:error] [pid 37130:tid 37230] [client 172.173.121.85:27871] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afbEkqIu7bmXKXicRk9ULAAAAJE"]
[Sun May 03 11:44:19.167682 2026] [:error] [pid 40386:tid 40411] [client 172.173.121.85:42813] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "afbEk1HJDYRXUf3IbRT6CwAAANc"]
[Sun May 03 11:44:19.861996 2026] [:error] [pid 37130:tid 37225] [client 172.173.121.85:30725] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "afbEk6Iu7bmXKXicRk9ULwAAAIw"]
[Sun May 03 11:44:20.561613 2026] [:error] [pid 37130:tid 37223] [client 172.173.121.85:55986] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "afbElKIu7bmXKXicRk9UMQAAAIo"]
[Sun May 03 11:44:21.187471 2026] [:error] [pid 40456:tid 40459] [client 172.173.121.85:27853] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "afbElTSujTvwdzEkjScJzQAAAYE"]
[Sun May 03 11:44:21.805665 2026] [:error] [pid 37126:tid 37159] [client 172.173.121.85:43447] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afbElfR_A42N-LtDyrv12gAAAAY"]
[Sun May 03 11:44:22.417703 2026] [:error] [pid 37126:tid 37165] [client 172.173.121.85:64278] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afbElvR_A42N-LtDyrv12wAAAAw"]
[Sun May 03 11:44:22.953029 2026] [:error] [pid 40456:tid 40473] [client 172.173.121.85:32617] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afbEljSujTvwdzEkjScJzwAAAY8"]
[Sun May 03 11:44:23.723018 2026] [:error] [pid 40386:tid 40403] [client 172.173.121.85:34677] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afbEl1HJDYRXUf3IbRT6DQAAAM8"]
[Sun May 03 11:44:29.580959 2026] [:error] [pid 37130:tid 37235] [client 172.173.121.85:30727] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afbEnaIu7bmXKXicRk9UQQAAAJY"]
[Sun May 03 11:44:30.409729 2026] [:error] [pid 37130:tid 37229] [client 172.173.121.85:55952] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afbEnqIu7bmXKXicRk9UQgAAAJA"]
[Sun May 03 11:44:31.637688 2026] [:error] [pid 37130:tid 37219] [client 172.173.121.85:9981] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afbEn6Iu7bmXKXicRk9URAAAAIY"]
[Sun May 03 11:44:32.522942 2026] [:error] [pid 40422:tid 40441] [client 172.173.121.85:27887] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afbEoEHBbBLrXh6PBuvTcQAAAU8"]
[Sun May 03 11:44:33.133852 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:27851] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afbEoThvYFGNwhnPamqz8QAAAQU"]
[Sun May 03 11:44:34.264901 2026] [:error] [pid 37130:tid 37227] [client 172.173.121.85:42139] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afbEoqIu7bmXKXicRk9URgAAAI4"]
[Sun May 03 11:44:34.933010 2026] [:error] [pid 37130:tid 37224] [client 172.173.121.85:32594] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afbEoqIu7bmXKXicRk9URwAAAIs"]
[Sun May 03 11:44:35.963918 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:42137] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afbEo0HBbBLrXh6PBuvTcwAAAVM"]
[Sun May 03 11:44:36.725990 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:58708] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afbEpEHBbBLrXh6PBuvTdQAAAUk"]
[Sun May 03 11:44:37.429639 2026] [:error] [pid 40386:tid 40398] [client 172.173.121.85:42118] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afbEpVHJDYRXUf3IbRT6EwAAAMo"]
[Sun May 03 11:44:38.355080 2026] [:error] [pid 40386:tid 40390] [client 172.173.121.85:64302] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afbEplHJDYRXUf3IbRT6FQAAAMI"]
[Sun May 03 11:44:38.955368 2026] [:error] [pid 40386:tid 40391] [client 172.173.121.85:42124] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afbEplHJDYRXUf3IbRT6FwAAAMM"]
[Sun May 03 11:44:39.895584 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:42768] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afbEp0HBbBLrXh6PBuvTeQAAAUo"]
[Sun May 03 11:44:40.909323 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:28955] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afbEqEHBbBLrXh6PBuvTegAAAVE"]
[Sun May 03 11:44:42.370874 2026] [:error] [pid 37130:tid 37230] [client 172.173.121.85:34664] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afbEqqIu7bmXKXicRk9USwAAAJE"]
[Sun May 03 11:44:42.999315 2026] [:error] [pid 37130:tid 37225] [client 172.173.121.85:55959] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afbEqqIu7bmXKXicRk9UTAAAAIw"]
[Sun May 03 11:44:43.929156 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:9568] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afbEq0HBbBLrXh6PBuvTfAAAAUY"]
[Sun May 03 11:44:44.703676 2026] [:error] [pid 37130:tid 37229] [client 172.173.121.85:42794] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afbErKIu7bmXKXicRk9UTQAAAJA"]
[Sun May 03 11:44:45.350592 2026] [:error] [pid 37130:tid 37214] [client 172.173.121.85:9963] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afbEraIu7bmXKXicRk9UTgAAAIE"]
[Sun May 03 11:44:46.799688 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:42874] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afbErkHBbBLrXh6PBuvTgAAAAUI"]
[Sun May 03 11:44:47.971858 2026] [:error] [pid 37130:tid 37232] [client 172.173.121.85:43424] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afbEr6Iu7bmXKXicRk9UUgAAAJM"]
[Sun May 03 11:44:48.534599 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:42174] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afbEsEHBbBLrXh6PBuvTggAAAUs"]
[Sun May 03 11:44:48.905829 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:64293] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afbEsEHBbBLrXh6PBuvTgwAAAVU"]
[Sun May 03 11:44:49.316796 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:31346] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afbEsThvYFGNwhnPamqz8wAAAQ0"]
[Sun May 03 11:44:49.794856 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:43413] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afbEsUHBbBLrXh6PBuvThQAAAVY"]
[Sun May 03 11:44:50.232698 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:42810] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afbEskHBbBLrXh6PBuvThgAAAUo"]
[Sun May 03 11:44:50.730787 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:32612] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afbEskHBbBLrXh6PBuvThwAAAVE"]
[Sun May 03 11:44:51.286816 2026] [:error] [pid 37126:tid 37153] [client 172.173.121.85:9927] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afbEs_R_A42N-LtDyrv14AAAAAI"]
[Sun May 03 11:44:51.762240 2026] [:error] [pid 37126:tid 37173] [client 172.173.121.85:34644] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afbEs_R_A42N-LtDyrv14QAAABQ"]
[Sun May 03 11:44:52.227376 2026] [:error] [pid 40386:tid 40407] [client 172.173.121.85:29301] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afbEtFHJDYRXUf3IbRT6GAAAANM"]
[Sun May 03 11:44:52.883038 2026] [:error] [pid 37126:tid 37174] [client 172.173.121.85:55962] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afbEtPR_A42N-LtDyrv15QAAABU"]
[Sun May 03 11:44:53.448372 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:27881] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afbEtUHBbBLrXh6PBuvTigAAAUA"]
[Sun May 03 11:44:53.985451 2026] [:error] [pid 37126:tid 37156] [client 172.173.121.85:9929] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afbEtfR_A42N-LtDyrv16gAAAAM"]
[Sun May 03 11:44:54.588499 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:29628] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afbEtkHBbBLrXh6PBuvTjAAAAVQ"]
[Sun May 03 11:44:55.028225 2026] [:error] [pid 37246:tid 37261] [client 172.173.121.85:9944] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afbEtzhvYFGNwhnPamqz9gAAAQs"]
[Sun May 03 11:44:55.437100 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:42787] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afbEt0HBbBLrXh6PBuvTjwAAAUY"]
[Sun May 03 11:44:55.872171 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:42788] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afbEt0HBbBLrXh6PBuvTkQAAAUE"]
[Sun May 03 11:44:56.307640 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:42160] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afbEuDhvYFGNwhnPamqz-AAAAQw"]
[Sun May 03 11:44:56.807152 2026] [:error] [pid 40386:tid 40388] [client 172.173.121.85:58734] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afbEuFHJDYRXUf3IbRT6GQAAAMA"]
[Sun May 03 11:44:57.304540 2026] [:error] [pid 40456:tid 40477] [client 172.173.121.85:55991] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afbEuTSujTvwdzEkjScJ0gAAAZM"]
[Sun May 03 11:44:57.942743 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:64276] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "afbEuTSujTvwdzEkjScJ1gAAAYY"]
[Sun May 03 11:44:58.459043 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:32609] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "afbEulHJDYRXUf3IbRT6GgAAAMQ"]
[Sun May 03 11:44:59.028839 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:34629] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "afbEuzSujTvwdzEkjScJ2QAAAYg"]
[Sun May 03 11:44:59.837375 2026] [:error] [pid 40456:tid 40476] [client 172.173.121.85:64303] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/we.php"] [unique_id "afbEuzSujTvwdzEkjScJ2gAAAZI"]
[Sun May 03 11:45:00.472640 2026] [:error] [pid 37127:tid 37207] [client 172.173.121.85:49348] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afbEvP8khJXb5O5aWVUERQAAAFU"]
[Sun May 03 11:45:01.671985 2026] [:error] [pid 37127:tid 37187] [client 172.173.121.85:58700] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afbEvf8khJXb5O5aWVUERgAAAEM"]
[Sun May 03 11:45:02.215431 2026] [:error] [pid 40386:tid 40401] [client 172.173.121.85:9930] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afbEvlHJDYRXUf3IbRT6HAAAAM0"]
[Sun May 03 11:45:02.710521 2026] [:error] [pid 37246:tid 37249] [client 172.173.121.85:58098] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afbEvjhvYFGNwhnPamqz_QAAAQE"]
[Sun May 03 11:45:03.546387 2026] [:error] [pid 37126:tid 37156] [client 172.173.121.85:34627] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afbEv_R_A42N-LtDyrv18QAAAAM"]
[Sun May 03 11:45:04.209130 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:9542] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afbEwDhvYFGNwhnPamqz_wAAAQA"]
[Sun May 03 11:45:05.934739 2026] [:error] [pid 37130:tid 37236] [client 172.173.121.85:42804] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afbEwaIu7bmXKXicRk9UVwAAAJc"]
[Sun May 03 11:45:06.789964 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:64284] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afbEwjhvYFGNwhnPamq0AAAAARU"]
[Sun May 03 11:45:07.591340 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:9939] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afbEw_8khJXb5O5aWVUERwAAAEI"]
[Sun May 03 11:45:08.316310 2026] [:error] [pid 37126:tid 37161] [client 172.173.121.85:43428] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afbExPR_A42N-LtDyrv18gAAAAg"]
[Sun May 03 11:45:09.298433 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:28929] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afbExfR_A42N-LtDyrv18wAAABE"]
[Sun May 03 11:45:10.400900 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:42798] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afbExkHBbBLrXh6PBuvTkwAAAVU"]
[Sun May 03 11:45:11.613746 2026] [:error] [pid 37127:tid 37194] [client 172.173.121.85:9959] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afbEx_8khJXb5O5aWVUESAAAAEo"]
[Sun May 03 11:45:12.183521 2026] [:error] [pid 37246:tid 37250] [client 172.173.121.85:9956] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afbEyDhvYFGNwhnPamq0AwAAAQI"]
[Sun May 03 11:45:13.026962 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:42803] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afbEyThvYFGNwhnPamq0BgAAAQw"]
[Sun May 03 11:45:15.204732 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:9974] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afbEy0HBbBLrXh6PBuvTmQAAAUQ"]
[Sun May 03 11:45:15.946009 2026] [:error] [pid 37246:tid 37265] [client 172.173.121.85:64279] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afbEyzhvYFGNwhnPamq0CgAAAQ8"]
[Sun May 03 11:45:17.697347 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:34678] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afbEzUHBbBLrXh6PBuvTnQAAAVM"]
[Sun May 03 11:45:19.002037 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:34638] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afbEzzhvYFGNwhnPamq0DAAAARA"]
[Sun May 03 11:45:20.149969 2026] [:error] [pid 37246:tid 37250] [client 172.173.121.85:29575] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afbE0DhvYFGNwhnPamq0DQAAAQI"]
[Sun May 03 11:45:21.491951 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:55979] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afbE0UHBbBLrXh6PBuvToQAAAUg"]
[Sun May 03 11:45:22.832833 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:31308] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afbE0kHBbBLrXh6PBuvTpAAAAVc"]
[Sun May 03 11:45:23.597295 2026] [:error] [pid 40456:tid 40462] [client 172.173.121.85:34633] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afbE0zSujTvwdzEkjScJ3gAAAYQ"]
[Sun May 03 11:45:24.373064 2026] [:error] [pid 40456:tid 40465] [client 172.173.121.85:42146] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/"] [unique_id "afbE1DSujTvwdzEkjScJ3wAAAYc"]
[Sun May 03 11:45:25.350780 2026] [:error] [pid 40386:tid 40391] [client 172.173.121.85:58689] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afbE1VHJDYRXUf3IbRT6IQAAAMM"]
[Sun May 03 11:45:26.466810 2026] [:error] [pid 40386:tid 40396] [client 172.173.121.85:9942] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afbE1lHJDYRXUf3IbRT6IwAAAMg"]
[Sun May 03 11:45:27.771928 2026] [:error] [pid 37246:tid 37274] [client 172.173.121.85:64298] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afbE1zhvYFGNwhnPamq0EQAAARg"]
[Sun May 03 11:45:28.894664 2026] [:error] [pid 40456:tid 40470] [client 172.173.121.85:32616] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "afbE2DSujTvwdzEkjScJ4AAAAYw"]
[Sun May 03 11:45:36.010990 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:29271] [client 172.173.121.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afbE4DhvYFGNwhnPamq0GwAAARA"]
[Sun May 03 11:45:40.043165 2026] [:error] [pid 40456:tid 40458] [client 172.173.121.85:42145] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "afbE5DSujTvwdzEkjScJ5gAAAYA"]
[Sun May 03 11:45:40.998159 2026] [:error] [pid 37130:tid 37225] [client 172.173.121.85:42167] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "afbE5KIu7bmXKXicRk9UZQAAAIw"]
[Sun May 03 11:45:42.256706 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:27903] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "afbE5kHBbBLrXh6PBuvTtAAAAVE"]
[Sun May 03 11:45:43.236061 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:9934] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/k.php"] [unique_id "afbE5_8khJXb5O5aWVUESwAAAEc"]
[Sun May 03 11:45:44.408846 2026] [:error] [pid 40456:tid 40476] [client 172.173.121.85:58691] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "afbE6DSujTvwdzEkjScJ6AAAAZI"]
[Sun May 03 11:45:46.294355 2026] [:error] [pid 37130:tid 37214] [client 172.173.121.85:55968] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "afbE6qIu7bmXKXicRk9UZwAAAIE"]
[Sun May 03 11:45:48.103149 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:43416] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "afbE7EHBbBLrXh6PBuvTuAAAAVg"]
[Sun May 03 11:45:49.950185 2026] [:error] [pid 37127:tid 37210] [client 172.173.121.85:55944] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev.php"] [unique_id "afbE7f8khJXb5O5aWVUETAAAAFg"]
[Sun May 03 11:45:50.601961 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:28968] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afbE7jSujTvwdzEkjScJ6wAAAY0"]
[Sun May 03 11:45:51.251576 2026] [:error] [pid 40456:tid 40468] [client 172.173.121.85:34628] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afbE7zSujTvwdzEkjScJ7AAAAYo"]
[Sun May 03 11:45:52.429740 2026] [:error] [pid 40386:tid 40399] [client 172.173.121.85:30783] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afbE8FHJDYRXUf3IbRT6KgAAAMs"]
[Sun May 03 11:45:53.314863 2026] [:error] [pid 40386:tid 40397] [client 172.173.121.85:55974] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afbE8VHJDYRXUf3IbRT6KwAAAMk"]
[Sun May 03 11:45:54.239218 2026] [:error] [pid 40386:tid 40390] [client 172.173.121.85:30757] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afbE8lHJDYRXUf3IbRT6LQAAAMI"]
[Sun May 03 11:45:55.024354 2026] [:error] [pid 37246:tid 37269] [client 172.173.121.85:58732] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afbE8zhvYFGNwhnPamq0IAAAARM"]
[Sun May 03 11:45:55.596016 2026] [:error] [pid 37127:tid 37189] [client 172.173.121.85:55976] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afbE8_8khJXb5O5aWVUETQAAAEU"]
[Sun May 03 11:45:56.261990 2026] [:error] [pid 40386:tid 40405] [client 172.173.121.85:43440] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afbE9FHJDYRXUf3IbRT6LgAAANE"]
[Sun May 03 11:45:57.337591 2026] [:error] [pid 37127:tid 37208] [client 172.173.121.85:9953] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afbE9f8khJXb5O5aWVUETgAAAFY"]
[Sun May 03 11:45:58.533633 2026] [:error] [pid 37246:tid 37257] [client 172.173.121.85:64319] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afbE9jhvYFGNwhnPamq0JQAAAQk"]
[Sun May 03 11:45:59.786735 2026] [:error] [pid 37126:tid 37152] [client 172.173.121.85:30744] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afbE9_R_A42N-LtDyrv1-AAAAAE"]
[Sun May 03 11:46:01.368948 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:27863] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afbE-ThvYFGNwhnPamq0KgAAARE"]
[Sun May 03 11:46:04.604574 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:38004] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afbE_DhvYFGNwhnPamq0MwAAARI"]
[Sun May 03 11:46:07.992592 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:52394] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afbE_0HBbBLrXh6PBuvTvgAAAVY"]
[Sun May 03 11:46:10.133468 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:45944] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afbFAkHBbBLrXh6PBuvTwQAAAVE"]
[Sun May 03 11:46:11.098739 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:49329] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afbFAzhvYFGNwhnPamq0OwAAARA"]
[Sun May 03 11:46:13.101784 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:54718] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afbFBUHBbBLrXh6PBuvTxwAAAUw"]
[Sun May 03 11:46:14.765787 2026] [:error] [pid 40456:tid 40477] [client 172.173.121.85:32934] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afbFBjSujTvwdzEkjScJ_QAAAZM"]
[Sun May 03 11:46:16.031961 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:32935] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afbFCDhvYFGNwhnPamq0QQAAAQw"]
[Sun May 03 11:46:17.640289 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:9725] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afbFCTSujTvwdzEkjScKAQAAAYM"]
[Sun May 03 11:46:18.708289 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:34235] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afbFCjhvYFGNwhnPamq0RQAAAQ4"]
[Sun May 03 11:46:22.141994 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:49301] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afbFDkHBbBLrXh6PBuvTzgAAAUI"]
[Sun May 03 11:46:24.580103 2026] [:error] [pid 40456:tid 40479] [client 172.173.121.85:54684] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afbFEDSujTvwdzEkjScKBwAAAZU"]
[Sun May 03 11:46:25.782542 2026] [:error] [pid 40456:tid 40475] [client 172.173.121.85:32904] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afbFETSujTvwdzEkjScKCAAAAZE"]
[Sun May 03 11:46:28.158613 2026] [:error] [pid 40386:tid 40409] [client 172.173.121.85:9768] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "afbFFFHJDYRXUf3IbRT6MgAAANU"]
[Sun May 03 11:46:30.861557 2026] [:error] [pid 37126:tid 37156] [client 172.173.121.85:9702] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "afbFFvR_A42N-LtDyrv2AQAAAAM"]
[Sun May 03 11:46:31.491982 2026] [:error] [pid 37126:tid 37161] [client 172.173.121.85:9700] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "afbFF_R_A42N-LtDyrv2AgAAAAg"]
[Sun May 03 11:46:32.811837 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:9218] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/axx.php"] [unique_id "afbFGEHBbBLrXh6PBuvT1wAAAVc"]
[Sun May 03 11:46:34.932497 2026] [:error] [pid 40386:tid 40398] [client 172.173.121.85:41027] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "afbFGlHJDYRXUf3IbRT6OwAAAMo"]
[Sun May 03 11:46:36.239073 2026] [:error] [pid 37130:tid 37221] [client 172.173.121.85:64337] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "afbFHKIu7bmXKXicRk9UcwAAAIg"]
[Sun May 03 11:46:37.880617 2026] [:error] [pid 37130:tid 37234] [client 172.173.121.85:34199] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfashell.php"] [unique_id "afbFHaIu7bmXKXicRk9UdAAAAJU"]
[Sun May 03 11:46:45.813248 2026] [:error] [pid 37130:tid 37220] [client 172.173.121.85:9754] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afbFJaIu7bmXKXicRk9UjAAAAIc"]
[Sun May 03 11:46:46.934886 2026] [:error] [pid 40456:tid 40470] [client 172.173.121.85:54680] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afbFJjSujTvwdzEkjScKEgAAAYw"]
[Sun May 03 11:46:47.767709 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:64362] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afbFJzhvYFGNwhnPamq0WAAAARQ"]
[Sun May 03 11:46:48.562139 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:34215] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "afbFKDhvYFGNwhnPamq0WQAAARE"]
[Sun May 03 11:46:50.035784 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:9230] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afbFKjSujTvwdzEkjScKFwAAAZA"]
[Sun May 03 11:46:51.035531 2026] [:error] [pid 37130:tid 37226] [client 172.173.121.85:40396] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afbFK6Iu7bmXKXicRk9UjQAAAI0"]
[Sun May 03 11:46:52.133609 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:53831] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afbFLPR_A42N-LtDyrv2JwAAAA0"]
[Sun May 03 11:46:52.879304 2026] [:error] [pid 37126:tid 37151] [client 172.173.121.85:30554] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afbFLPR_A42N-LtDyrv2KQAAAAA"]
[Sun May 03 11:46:53.632248 2026] [:error] [pid 37130:tid 37236] [client 172.173.121.85:54664] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afbFLaIu7bmXKXicRk9UjgAAAJc"]
[Sun May 03 11:46:54.203395 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:32951] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afbFLkHBbBLrXh6PBuvT9QAAAUE"]
[Sun May 03 11:46:55.347610 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:54695] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afbFL_8khJXb5O5aWVUEVAAAAEI"]
[Sun May 03 11:46:56.043461 2026] [:error] [pid 37127:tid 37209] [client 172.173.121.85:32901] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chosen.php"] [unique_id "afbFMP8khJXb5O5aWVUEVgAAAFc"]
[Sun May 03 13:09:29.727806 2026] [:error] [pid 40386:tid 40389] [client 20.43.1.132:8142] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afbYiVHJDYRXUf3IbRQCTQAAAME"]
[Sun May 03 13:09:30.142368 2026] [:error] [pid 40456:tid 40463] [client 20.43.1.132:8136] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afbYijSujTvwdzEkjScZWwAAAYU"]
[Sun May 03 13:09:30.563120 2026] [:error] [pid 37127:tid 37184] [client 20.43.1.132:7458] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afbYiv8khJXb5O5aWVURnAAAAEA"]
[Sun May 03 13:09:30.996127 2026] [:error] [pid 37246:tid 37271] [client 20.43.1.132:7424] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "afbYijhvYFGNwhnPamrJywAAARU"]
[Sun May 03 18:13:15.181200 2026] [:error] [pid 37126:tid 37160] [client 43.130.31.17:37980] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afcfu_R_A42N-LtDyrs0WwAAAAc"]
[Sun May 03 23:58:35.404704 2026] [:error] [pid 37130:tid 37228] [client 35.200.177.94:42612] [client 35.200.177.94] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afdwq6Iu7bmXKXicRk-blQAAAI8"]
[Mon May 04 07:10:48.138871 2026] [:error] [pid 64659:tid 64687] [client 45.94.31.15:61849] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "affV-M91cs28U0G4bUY9uQAAAdg"]
[Mon May 04 07:10:48.632363 2026] [:error] [pid 64630:tid 64634] [client 45.94.31.15:61916] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "affV-BqqGHTFwsmbKEoiMQAAAYI"]
[Mon May 04 07:10:49.119203 2026] [:error] [pid 64630:tid 64654] [client 45.94.31.15:62012] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "affV-RqqGHTFwsmbKEoiMwAAAZY"]
[Mon May 04 07:10:50.112459 2026] [:error] [pid 58625:tid 58629] [client 45.94.31.15:62196] [client 45.94.31.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/txets.php"] [unique_id "affV-vZfjPGFqq6KSLk48wAAAQE"]
[Mon May 04 08:15:16.944990 2026] [:error] [pid 12051:tid 12070] [client 20.48.152.116:39228] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "afflFOrVB-w_PyOHK6kzxwAAAVE"]
[Mon May 04 08:15:17.840087 2026] [:error] [pid 12051:tid 12077] [client 20.48.152.116:35656] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "afflFerVB-w_PyOHK6kz2QAAAVg"]
[Mon May 04 08:15:18.697792 2026] [:error] [pid 11959:tid 11994] [client 20.48.152.116:35809] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "afflFgojk2nvxs7h5KvIHwAAAMY"]
[Mon May 04 08:15:19.524975 2026] [:error] [pid 12051:tid 12067] [client 20.48.152.116:35806] [client 20.48.152.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "afflF-rVB-w_PyOHK6k0AQAAAU4"]
[Mon May 04 08:23:50.315368 2026] [:error] [pid 12051:tid 12062] [client 106.54.62.156:56122] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "affnFurVB-w_PyOHK6k3GwAAAUk"]
[Mon May 04 10:45:05.421648 2026] [:error] [pid 33186:tid 33202] [client 52.165.198.204:9868] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afgIMbqlqe0DcmBS9VwIugAAAA0"]
[Mon May 04 10:45:09.178530 2026] [:error] [pid 12051:tid 12058] [client 52.165.198.204:9917] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afgINerVB-w_PyOHK6lvWwAAAUU"]
[Mon May 04 10:45:13.218062 2026] [:error] [pid 12051:tid 12060] [client 52.165.198.204:27352] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afgIOerVB-w_PyOHK6lvZAAAAUc"]
[Mon May 04 10:45:15.662419 2026] [:error] [pid 33186:tid 33189] [client 52.165.198.204:16464] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afgIO7qlqe0DcmBS9VwJWgAAAAA"]
[Mon May 04 10:53:11.703798 2026] [:error] [pid 12051:tid 12059] [client 43.156.109.53:52890] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afgKF-rVB-w_PyOHK6lz-wAAAUY"]
[Mon May 04 13:19:43.157673 2026] [:error] [pid 64610:tid 64625] [client 217.226.95.121:63898] [client 217.226.95.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 217.226.95.121, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afgsb2hJ7aZW62UOoWhXLAAAAQ0"]
[Mon May 04 13:42:56.098734 2026] [:error] [pid 12022:tid 12026] [client 35.209.111.255:44936] [client 35.209.111.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/bower_components/font-awesome/css/font-awesome.min.css"] [unique_id "afgx4EVhgvCNKBWnaTKNKQAAAII"]
[Mon May 04 13:42:56.310466 2026] [:error] [pid 11958:tid 11963] [client 35.209.111.255:44910] [client 35.209.111.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/dist/css/AdminLTE.min.css"] [unique_id "afgx4DAK_o2NLEdfAUliMAAAAEI"]
[Mon May 04 13:48:43.714831 2026] [:error] [pid 12022:tid 12024] [client 35.209.44.241:34614] [client 35.209.44.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/dist/css/AdminLTE.min.css"] [unique_id "afgzO0VhgvCNKBWnaTKPsQAAAIA"]
[Mon May 04 14:50:26.522468 2026] [:error] [pid 53248:tid 53254] [client 35.209.242.95:43240] [client 35.209.242.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/animate.css"] [unique_id "afhBsgPqlCce9bsWu6jBYQAAAAQ"]
[Mon May 04 14:50:27.937002 2026] [:error] [pid 53161:tid 53235] [client 35.209.242.95:43250] [client 35.209.242.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/dist/css/AdminLTE.min.css"] [unique_id "afhBs05l1qgo2JEi65l8lgAAAFI"]
[Mon May 04 15:06:50.750174 2026] [:error] [pid 61150:tid 61154] [client 43.162.103.213:55588] [client 43.162.103.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afhFiu8QXWVLiwIGVpcfWQAAAUE"]
[Mon May 04 15:45:07.035283 2026] [:error] [pid 61150:tid 61168] [client 136.107.232.91:64793] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afhOg-8QXWVLiwIGVpc8fAAAAU8"]
[Mon May 04 15:45:07.105951 2026] [:error] [pid 61042:tid 61066] [client 136.107.232.91:65122] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afhOg0nAPPS1fjubA9Qq3wAAANQ"]
[Mon May 04 15:45:07.920763 2026] [:error] [pid 61044:tid 61102] [client 136.107.232.91:51610] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOg0w8w2zZZXI6H1tmPgAAAAA"]
[Mon May 04 15:45:08.000857 2026] [:error] [pid 3341:tid 3344] [client 136.107.232.91:52149] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOg09o3_LordU0wW7qogAAAIA"]
[Mon May 04 17:35:22.729596 2026] [:error] [pid 61042:tid 61068] [client 43.159.135.203:45496] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afhoWknAPPS1fjubA9Q99AAAANY"]
[Mon May 04 19:53:56.499914 2026] [:error] [pid 3341:tid 3360] [client 20.213.145.2:7846] [client 20.213.145.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afiI1E9o3_LordU0wW5E0QAAAJA"]
[Mon May 04 19:53:56.572679 2026] [:error] [pid 32471:tid 32490] [client 20.213.145.2:9772] [client 20.213.145.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afiI1Hmjpb9EYq6AqhJMDAAAARA"]
[Mon May 04 19:53:56.633339 2026] [:error] [pid 61150:tid 61164] [client 20.213.145.2:9782] [client 20.213.145.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afiI1O8QXWVLiwIGVpd5lAAAAUs"]
[Mon May 04 19:53:56.689612 2026] [:error] [pid 32471:tid 32492] [client 20.213.145.2:10955] [client 20.213.145.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afiI1Hmjpb9EYq6AqhJMDQAAARI"]
[Mon May 04 22:31:16.957002 2026] [:error] [pid 61150:tid 61158] [client 35.194.234.207:59494] [client 35.194.234.207] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afittO8QXWVLiwIGVpeYBQAAAUU"]
[Tue May 05 00:01:32.021664 2026] [:error] [pid 32471:tid 32497] [client 43.133.187.11:38124] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afjC3Hmjpb9EYq6AqhKV2wAAARc"]
[Tue May 05 00:16:27.606229 2026] [:error] [pid 61043:tid 61078] [client 20.46.112.144:1197] [client 20.46.112.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afjGW58-LwtfURjiAbDuqQAAAEM"]
[Tue May 05 00:16:28.111367 2026] [:error] [pid 61042:tid 61067] [client 20.46.112.144:5008] [client 20.46.112.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afjGXEnAPPS1fjubA9R07AAAANU"]
[Tue May 05 00:16:28.566680 2026] [:error] [pid 61042:tid 61070] [client 20.46.112.144:5034] [client 20.46.112.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afjGXEnAPPS1fjubA9R07QAAANg"]
[Tue May 05 00:16:29.039541 2026] [:error] [pid 3341:tid 3345] [client 20.46.112.144:5029] [client 20.46.112.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afjGXU9o3_LordU0wW6o9QAAAIE"]
[Tue May 05 02:34:38.809442 2026] [:error] [pid 61043:tid 61095] [client 87.120.92.117:47940] [client 87.120.92.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 87.120.92.117, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "afjmvp8-LwtfURjiAbAMNAAAAFQ"]
[Tue May 05 04:37:36.036475 2026] [:error] [pid 39073:tid 39154] [client 43.166.242.189:58874] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afkDkP0kT1BNjk46BkcKGQAAAJQ"]
[Tue May 05 05:27:32.061815 2026] [:error] [pid 39072:tid 39128] [client 209.87.169.16:62925] [client 209.87.169.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afkPRPolSHl4aAnrIovZ_wAAAFU"]
[Tue May 05 07:06:41.982349 2026] [:error] [pid 41055:tid 41079] [client 170.106.72.178:52368] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afkmgSepFwKgA_SKOHjHrwAAARU"]
[Tue May 05 07:23:56.662272 2026] [:error] [pid 41055:tid 41078] [client 104.28.214.112:39926] [client 104.28.214.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/style.php"] [unique_id "afkqjCepFwKgA_SKOHjLKQAAARQ"]
[Tue May 05 07:44:49.042715 2026] [:error] [pid 41055:tid 41058] [client 45.86.200.82:62541] [client 45.86.200.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "afkvcSepFwKgA_SKOHgKRgAAAQA"]
[Tue May 05 07:44:52.425316 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.103:45079] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afkvdPolSHl4aAnrIoshnQAAAFA"]
[Tue May 05 07:44:53.823995 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.80:43105] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "afkvdXG_NPOxSH0O9aQFRAAAAVg"]
[Tue May 05 07:44:56.071458 2026] [:error] [pid 53856:tid 53881] [client 45.86.200.107:45843] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tinyfilemanager.php"] [unique_id "afkveHG_NPOxSH0O9aQF5QAAAVA"]
[Tue May 05 07:44:57.498520 2026] [:error] [pid 39072:tid 39122] [client 45.86.200.79:32317] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "afkvefolSHl4aAnrIosh-QAAAE8"]
[Tue May 05 07:44:58.360954 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.112:37107] [client 45.86.200.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/buy.php"] [unique_id "afkvejaPrgTaiOD_15unggAAANI"]
[Tue May 05 07:45:00.337999 2026] [:error] [pid 39071:tid 39101] [client 45.86.200.92:35115] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "afkvfIvmnRMz9gRzix2ZyQAAABU"]
[Tue May 05 07:45:01.207577 2026] [:error] [pid 53856:tid 53872] [client 45.86.200.111:47385] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "afkvfXG_NPOxSH0O9aQHCQAAAUc"]
[Tue May 05 07:45:01.765661 2026] [:error] [pid 39178:tid 39187] [client 45.86.200.52:21155] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "afkvfTaPrgTaiOD_15unzgAAAMc"]
[Tue May 05 07:45:02.532522 2026] [:error] [pid 39071:tid 39085] [client 45.86.200.90:30647] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "afkvfovmnRMz9gRzix2Z4gAAAAU"]
[Tue May 05 07:45:03.116631 2026] [:error] [pid 39178:tid 39194] [client 45.86.200.76:39277] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "afkvfzaPrgTaiOD_15un-gAAAM4"]
[Tue May 05 07:45:03.690859 2026] [:error] [pid 39071:tid 39083] [client 45.86.200.84:63725] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "afkvf4vmnRMz9gRzix2Z-gAAAAM"]
[Tue May 05 07:45:04.602555 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.88:52193] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "afkvgP0kT1BNjk46BkdkCwAAAJg"]
[Tue May 05 07:45:05.717693 2026] [:error] [pid 39178:tid 39187] [client 45.86.200.75:41339] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/filemanager.php"] [unique_id "afkvgTaPrgTaiOD_15uoPAAAAMc"]
[Tue May 05 07:45:06.835096 2026] [:error] [pid 39071:tid 39103] [client 45.86.200.75:24065] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "afkvgovmnRMz9gRzix2aQgAAABc"]
[Tue May 05 07:45:07.703998 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.98:56135] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "afkvg4vmnRMz9gRzix2aYwAAAAw"]
[Tue May 05 07:45:08.548823 2026] [:error] [pid 41055:tid 41079] [client 45.86.200.93:51203] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "afkvhCepFwKgA_SKOHgMfAAAARU"]
[Tue May 05 07:45:13.704661 2026] [:error] [pid 39073:tid 39153] [client 45.86.200.112:40983] [client 45.86.200.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-signup.php"] [unique_id "afkvif0kT1BNjk46BkdlLwAAAJM"]
[Tue May 05 07:45:16.016205 2026] [:error] [pid 41055:tid 41067] [client 45.86.200.94:30641] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "afkvjCepFwKgA_SKOHgNawAAAQk"]
[Tue May 05 07:45:16.859409 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.84:33245] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "afkvjHG_NPOxSH0O9aQKXAAAAVE"]
[Tue May 05 07:45:18.002747 2026] [:error] [pid 39178:tid 39204] [client 45.86.200.112:43281] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "afkvjjaPrgTaiOD_15upXQAAANg"]
[Tue May 05 07:45:18.813633 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.59:38373] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "afkvjnG_NPOxSH0O9aQK0wAAAVU"]
[Tue May 05 07:45:20.540768 2026] [:error] [pid 39178:tid 39181] [client 45.86.200.94:57761] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "afkvkDaPrgTaiOD_15upugAAAME"]
[Tue May 05 07:45:21.393361 2026] [:error] [pid 39073:tid 39143] [client 45.86.200.110:65267] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "afkvkf0kT1BNjk46Bkdl3wAAAIk"]
[Tue May 05 07:45:22.329030 2026] [:error] [pid 39071:tid 39084] [client 45.86.200.80:40005] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "afkvkovmnRMz9gRzix2b7QAAAAQ"]
[Tue May 05 07:45:22.897499 2026] [:error] [pid 39072:tid 39112] [client 45.86.200.91:64687] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "afkvkvolSHl4aAnrIoskLQAAAEU"]
[Tue May 05 07:45:23.459188 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.77:48149] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afkvk_olSHl4aAnrIoskSgAAAEc"]
[Tue May 05 07:45:24.887105 2026] [:error] [pid 39073:tid 39152] [client 185.82.72.4:31733] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "afkvlP0kT1BNjk46BkdmLAAAAJI"]
[Tue May 05 07:45:25.428713 2026] [:error] [pid 39073:tid 39135] [client 45.86.200.93:41871] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "afkvlf0kT1BNjk46BkdmTAAAAIE"]
[Tue May 05 07:45:26.009088 2026] [:error] [pid 41055:tid 41079] [client 45.86.200.105:24037] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afkvliepFwKgA_SKOHgOlQAAARU"]
[Tue May 05 07:45:28.830152 2026] [:error] [pid 39178:tid 39189] [client 45.86.200.52:64247] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/admin.php"] [unique_id "afkvmDaPrgTaiOD_15uq7AAAAMk"]
[Tue May 05 07:45:30.186985 2026] [:error] [pid 39072:tid 39129] [client 45.86.200.99:30637] [client 45.86.200.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.99, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "afkvmvolSHl4aAnrIoslPAAAAFY"]
[Tue May 05 07:45:33.508384 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.99:30637] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "afkvnfolSHl4aAnrIosllAAAAFU"]
[Tue May 05 07:45:34.668969 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.53:27999] [client 45.86.200.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.53, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "afkvnv0kT1BNjk46BkdnSwAAAJg"]
[Tue May 05 07:45:35.263165 2026] [:error] [pid 39073:tid 39136] [client 45.86.200.53:27999] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/item.php"] [unique_id "afkvn_0kT1BNjk46BkdnXwAAAII"]
[Tue May 05 07:45:38.133144 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.99:20921] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "afkvoiepFwKgA_SKOHgQFwAAARM"]
[Tue May 05 07:45:40.118385 2026] [:error] [pid 53856:tid 53878] [client 45.86.200.82:56247] [client 45.86.200.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Marvins.php"] [unique_id "afkvpHG_NPOxSH0O9aQOewAAAU0"]
[Tue May 05 07:45:40.649988 2026] [:error] [pid 39073:tid 39139] [client 45.86.200.82:39343] [client 45.86.200.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Marvins.php"] [unique_id "afkvpP0kT1BNjk46BkdoIgAAAIU"]
[Tue May 05 07:45:42.143806 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.100:59581] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "afkvpnG_NPOxSH0O9aQOzgAAAUU"]
[Tue May 05 07:45:43.332883 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.82:53077] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "afkvp_olSHl4aAnrIosmxgAAAFU"]
[Tue May 05 07:45:44.792152 2026] [:error] [pid 39178:tid 39192] [client 45.86.200.85:55925] [client 45.86.200.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.85, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "afkvqDaPrgTaiOD_15us9AAAAMw"]
[Tue May 05 07:45:45.128605 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.85:55925] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "afkvqTaPrgTaiOD_15us_AAAAMI"]
[Tue May 05 07:45:50.479523 2026] [:error] [pid 39073:tid 39153] [client 45.86.200.79:35459] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "afkvrv0kT1BNjk46BkdpcgAAAJM"]
[Tue May 05 07:45:51.925568 2026] [:error] [pid 41055:tid 41068] [client 45.86.200.103:49097] [client 45.86.200.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.103, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "afkvryepFwKgA_SKOHgRWwAAAQo"]
[Tue May 05 07:45:53.032105 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.103:49097] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "afkvsSepFwKgA_SKOHgRfQAAARM"]
[Tue May 05 07:45:53.843149 2026] [:error] [pid 39072:tid 39129] [client 45.86.200.87:51021] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/infi.php"] [unique_id "afkvsfolSHl4aAnrIosoFwAAAFY"]
[Tue May 05 07:46:02.195017 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.84:29717] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "afkvunG_NPOxSH0O9aQSowAAAUw"]
[Tue May 05 07:46:04.666084 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.98:47557] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "afkvvP0kT1BNjk46BkdrRAAAAJg"]
[Tue May 05 07:46:05.197546 2026] [:error] [pid 39072:tid 39108] [client 45.86.200.58:44297] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "afkvvfolSHl4aAnrIospbwAAAEE"]
[Tue May 05 07:46:07.327282 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.79:20373] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "afkvvyepFwKgA_SKOHgSwwAAARg"]
[Tue May 05 07:46:08.341595 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.91:28049] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "afkvwCepFwKgA_SKOHgS5AAAARM"]
[Tue May 05 07:46:09.751142 2026] [:error] [pid 39071:tid 39102] [client 45.86.200.104:40021] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/edit.php"] [unique_id "afkvwYvmnRMz9gRzix2hBQAAABY"]
[Tue May 05 07:46:11.121171 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.60:63505] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "afkvw_olSHl4aAnrIosqDgAAAFU"]
[Tue May 05 07:46:12.269367 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.97:21651] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/click.php"] [unique_id "afkvxHG_NPOxSH0O9aQUvQAAAUk"]
[Tue May 05 07:46:13.681741 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.81:52427] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "afkvxfolSHl4aAnrIosqdAAAAEc"]
[Tue May 05 07:46:16.203587 2026] [:error] [pid 39072:tid 39126] [client 45.86.200.105:45913] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "afkvyPolSHl4aAnrIosq4gAAAFM"]
[Tue May 05 07:46:16.769040 2026] [:error] [pid 41055:tid 41067] [client 45.86.200.93:34647] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "afkvyCepFwKgA_SKOHgT5gAAAQk"]
[Tue May 05 07:46:17.387540 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.79:31085] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "afkvyXG_NPOxSH0O9aQV-AAAAUk"]
[Tue May 05 07:46:17.946388 2026] [:error] [pid 53856:tid 53879] [client 45.86.200.88:28259] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "afkvyXG_NPOxSH0O9aQWHAAAAU4"]
[Tue May 05 07:46:18.805586 2026] [:error] [pid 53856:tid 53879] [client 45.86.200.56:42829] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "afkvynG_NPOxSH0O9aQWRgAAAU4"]
[Tue May 05 07:46:19.339622 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.112:63337] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "afkvy3G_NPOxSH0O9aQWYQAAAUw"]
[Tue May 05 07:46:20.445363 2026] [:error] [pid 53856:tid 53881] [client 45.86.200.112:31717] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afkvzHG_NPOxSH0O9aQWtQAAAVA"]
[Tue May 05 07:46:21.028059 2026] [:error] [pid 39178:tid 39192] [client 45.86.200.59:41733] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "afkvzTaPrgTaiOD_15uyWQAAAMw"]
[Tue May 05 07:46:21.565325 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.93:39117] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "afkvzYvmnRMz9gRzix2iAQAAAAw"]
[Tue May 05 07:46:22.170003 2026] [:error] [pid 41055:tid 41060] [client 45.86.200.107:46253] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "afkvziepFwKgA_SKOHgUhgAAAQI"]
[Tue May 05 07:46:22.988088 2026] [:error] [pid 39178:tid 39200] [client 45.86.200.92:24523] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "afkvzjaPrgTaiOD_15uyqQAAANQ"]
[Tue May 05 07:46:24.114351 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.92:40355] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "afkv0HG_NPOxSH0O9aQXjAAAAUM"]
[Tue May 05 07:46:25.821515 2026] [:error] [pid 53856:tid 53885] [client 45.86.200.96:50997] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "afkv0XG_NPOxSH0O9aQX_QAAAVQ"]
[Tue May 05 07:46:28.404098 2026] [:error] [pid 41055:tid 41067] [client 45.86.200.80:35821] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "afkv1CepFwKgA_SKOHgVPwAAAQk"]
[Tue May 05 07:46:30.936689 2026] [:error] [pid 53856:tid 53867] [client 45.86.200.88:22681] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "afkv1nG_NPOxSH0O9aQZIQAAAUI"]
[Tue May 05 07:46:31.472004 2026] [:error] [pid 41055:tid 41080] [client 45.86.200.98:33109] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "afkv1yepFwKgA_SKOHgVjwAAARY"]
[Tue May 05 07:46:34.375095 2026] [:error] [pid 39072:tid 39126] [client 185.82.72.4:28575] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afkv2volSHl4aAnrIostWAAAAFM"]
[Tue May 05 07:46:35.845971 2026] [proxy_fcgi:error] [pid 53856:tid 53869] [client 45.86.200.89:44061] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:36.145085 2026] [proxy_fcgi:error] [pid 53856:tid 53871] [client 45.86.200.89:44061] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:36.437314 2026] [proxy_fcgi:error] [pid 53856:tid 53879] [client 45.86.200.89:44061] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:37.877111 2026] [:error] [pid 53856:tid 53865] [client 45.86.200.89:44061] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "afkv3XG_NPOxSH0O9aQadgAAAUA"]
[Tue May 05 07:46:38.439075 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.74:33475] [client 45.86.200.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "afkv3iepFwKgA_SKOHgWQwAAARg"]
[Tue May 05 07:46:39.018632 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.89:46889] [client 45.86.200.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "afkv33G_NPOxSH0O9aQangAAAVM"]
[Tue May 05 07:46:39.591585 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.109:22115] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "afkv34vmnRMz9gRzix2j1gAAAA0"]
[Tue May 05 07:46:40.139699 2026] [:error] [pid 41055:tid 41073] [client 45.86.200.104:35815] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "afkv4CepFwKgA_SKOHgWbAAAAQ8"]
[Tue May 05 07:46:40.678459 2026] [:error] [pid 41055:tid 41075] [client 45.86.200.93:25923] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "afkv4CepFwKgA_SKOHgWegAAARE"]
[Tue May 05 07:46:41.682826 2026] [:error] [pid 39071:tid 39097] [client 45.86.200.81:60273] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "afkv4YvmnRMz9gRzix2kCwAAABE"]
[Tue May 05 07:46:42.241595 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.95:45573] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "afkv4volSHl4aAnrIosuTwAAAEc"]
[Tue May 05 07:46:42.812896 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.77:24189] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "afkv4iepFwKgA_SKOHgWsQAAARc"]
[Tue May 05 07:46:43.361469 2026] [:error] [pid 39072:tid 39107] [client 45.86.200.91:62953] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "afkv4_olSHl4aAnrIosubwAAAEA"]
[Tue May 05 07:46:44.539554 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.101:57665] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "afkv5DaPrgTaiOD_15u1pAAAANI"]
[Tue May 05 07:46:45.393181 2026] [:error] [pid 39071:tid 39095] [client 45.86.200.80:27799] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "afkv5YvmnRMz9gRzix2kZQAAAA8"]
[Tue May 05 07:46:47.543666 2026] [:error] [pid 39071:tid 39086] [client 45.86.200.108:30893] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "afkv54vmnRMz9gRzix2klwAAAAY"]
[Tue May 05 07:46:48.690679 2026] [:error] [pid 41055:tid 41066] [client 45.86.200.59:20205] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "afkv6CepFwKgA_SKOHgXdQAAAQg"]
[Tue May 05 07:46:50.342423 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.104:45411] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "afkv6volSHl4aAnrIosvWwAAAFA"]
[Tue May 05 07:46:52.186249 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.108:59165] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "afkv7IvmnRMz9gRzix2k5wAAAA0"]
[Tue May 05 07:46:54.114684 2026] [:error] [pid 39178:tid 39181] [client 45.86.200.106:20667] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "afkv7jaPrgTaiOD_15u2lwAAAME"]
[Tue May 05 07:46:59.516964 2026] [:error] [pid 53856:tid 53881] [client 45.86.200.111:22459] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "afkv83G_NPOxSH0O9aQfHQAAAVA"]
[Tue May 05 07:47:00.098613 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.105:51243] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "afkv9P0kT1BNjk46BkdxOAAAAJg"]
[Tue May 05 07:47:00.950677 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.82:58151] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "afkv9IvmnRMz9gRzix2lUgAAAAE"]
[Tue May 05 07:47:02.108610 2026] [:error] [pid 53856:tid 53880] [client 185.82.72.3:51251] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "afkv9nG_NPOxSH0O9aQflgAAAU8"]
[Tue May 05 07:47:02.678490 2026] [:error] [pid 53856:tid 53867] [client 45.86.200.103:49117] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "afkv9nG_NPOxSH0O9aQfqQAAAUI"]
[Tue May 05 07:47:04.433278 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.106:54843] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afkv-DaPrgTaiOD_15u32QAAAMI"]
[Tue May 05 07:47:04.993430 2026] [:error] [pid 39072:tid 39126] [client 45.86.200.99:60915] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/fm.php"] [unique_id "afkv-PolSHl4aAnrIosxOAAAAFM"]
[Tue May 05 07:47:07.008951 2026] [:error] [pid 39071:tid 39098] [client 45.86.200.91:30553] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "afkv-4vmnRMz9gRzix2l1wAAABI"]
[Tue May 05 07:47:07.884308 2026] [proxy_fcgi:error] [pid 39072:tid 39123] [client 45.86.200.51:27477] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:08.466024 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.51:27477] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/function.php"] [unique_id "afkv_PolSHl4aAnrIosx3QAAAEg"]
[Tue May 05 07:47:09.008573 2026] [:error] [pid 39071:tid 39084] [client 45.86.200.102:28033] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "afkv_YvmnRMz9gRzix2l-AAAAAQ"]
[Tue May 05 07:47:10.090163 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.107:64463] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "afkv_jaPrgTaiOD_15u4xwAAAMI"]
[Tue May 05 07:47:10.637550 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.54:24409] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "afkv_volSHl4aAnrIosyPwAAAEg"]
[Tue May 05 07:47:12.635431 2026] [:error] [pid 39178:tid 39180] [client 45.86.200.57:27279] [client 45.86.200.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lock.php"] [unique_id "afkwADaPrgTaiOD_15u5PQAAAMA"]
[Tue May 05 07:47:13.740907 2026] [:error] [pid 39072:tid 39118] [client 45.86.200.110:32957] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "afkwAfolSHl4aAnrIosy2wAAAEs"]
[Tue May 05 07:47:14.334323 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.52:53089] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "afkwAnG_NPOxSH0O9aQhVQAAAUU"]
[Tue May 05 07:47:16.099732 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.51:54961] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/index.php"] [unique_id "afkwBCepFwKgA_SKOHga1wAAARM"]
[Tue May 05 07:47:16.654549 2026] [:error] [pid 39072:tid 39126] [client 45.86.200.75:56927] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "afkwBPolSHl4aAnrIoszVgAAAFM"]
[Tue May 05 07:47:17.208126 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.101:59591] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "afkwBXG_NPOxSH0O9aQhuAAAAVg"]
[Tue May 05 07:47:19.177133 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.85:53313] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "afkwB_olSHl4aAnrIosz4AAAAFA"]
[Tue May 05 07:47:20.033534 2026] [:error] [pid 39072:tid 39110] [client 45.86.200.90:23823] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "afkwCPolSHl4aAnrIos0EgAAAEM"]
[Tue May 05 07:47:27.120651 2026] [:error] [pid 41055:tid 41065] [client 45.86.200.76:22591] [client 45.86.200.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.76, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/js/wp-login.php"] [unique_id "afkwDyepFwKgA_SKOHgcAgAAAQc"]
[Tue May 05 07:47:32.699435 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.76:22591] [client 45.86.200.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.76, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "afkwFCepFwKgA_SKOHgcnAAAAQ4"]
[Tue May 05 07:47:35.819305 2026] [proxy_fcgi:error] [pid 41055:tid 41082] [client 45.86.200.76:22591] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:40.095804 2026] [:error] [pid 41055:tid 41065] [client 45.86.200.76:22591] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "afkwHCepFwKgA_SKOHgdygAAAQc"]
[Tue May 05 07:47:41.471148 2026] [:error] [pid 53856:tid 53866] [client 45.86.200.83:54013] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "afkwHXG_NPOxSH0O9aQloAAAAUE"]
[Tue May 05 07:47:42.593286 2026] [:error] [pid 39073:tid 39137] [client 45.86.200.102:38939] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "afkwHv0kT1BNjk46Bkd1ugAAAIM"]
[Tue May 05 07:47:45.698140 2026] [:error] [pid 39178:tid 39191] [client 45.86.200.85:40175] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "afkwITaPrgTaiOD_15u-HAAAAMs"]
[Tue May 05 07:47:47.898243 2026] [:error] [pid 53856:tid 53866] [client 45.86.200.110:46765] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "afkwI3G_NPOxSH0O9aQnCQAAAUE"]
[Tue May 05 07:47:48.733432 2026] [:error] [pid 41055:tid 41080] [client 45.86.200.94:22415] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "afkwJCepFwKgA_SKOHgevAAAARY"]
[Tue May 05 07:47:50.380514 2026] [proxy_fcgi:error] [pid 39178:tid 39204] [client 45.86.200.103:65293] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:50.660105 2026] [proxy_fcgi:error] [pid 39178:tid 39197] [client 45.86.200.103:65293] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:47:50.965773 2026] [:error] [pid 39178:tid 39201] [client 45.86.200.103:65293] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "afkwJjaPrgTaiOD_15u-0QAAANU"]
[Tue May 05 07:47:51.519563 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.110:58501] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "afkwJzaPrgTaiOD_15u-4wAAANI"]
[Tue May 05 07:47:56.451330 2026] [:error] [pid 53856:tid 53872] [client 45.86.200.100:21225] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "afkwLHG_NPOxSH0O9aQo8QAAAUc"]
[Tue May 05 07:47:57.334108 2026] [:error] [pid 39071:tid 39080] [client 45.86.200.93:40247] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "afkwLYvmnRMz9gRzix2rPwAAAAA"]
[Tue May 05 07:47:58.671894 2026] [:error] [pid 41055:tid 41059] [client 45.86.200.58:64071] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "afkwLiepFwKgA_SKOHgf_QAAAQE"]
[Tue May 05 07:48:01.182794 2026] [:error] [pid 41055:tid 41063] [client 45.86.200.93:29691] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "afkwMSepFwKgA_SKOHggZgAAAQU"]
[Tue May 05 07:48:02.797469 2026] [proxy_fcgi:error] [pid 39178:tid 39190] [client 185.82.72.3:43831] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:03.637452 2026] [:error] [pid 39178:tid 39187] [client 185.82.72.3:43831] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "afkwMzaPrgTaiOD_15vAYAAAAMc"]
[Tue May 05 07:48:05.626299 2026] [proxy_fcgi:error] [pid 53856:tid 53888] [client 45.86.200.86:20249] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:06.232094 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.86:20249] [client 45.86.200.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.86, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "afkwNnG_NPOxSH0O9aQrEAAAAUM"]
[Tue May 05 07:48:07.647522 2026] [:error] [pid 53856:tid 53878] [client 45.86.200.86:20249] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "afkwN3G_NPOxSH0O9aQrXQAAAU0"]
[Tue May 05 07:48:12.271806 2026] [:error] [pid 39071:tid 39082] [client 45.86.200.101:21503] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "afkwPIvmnRMz9gRzix2swAAAAAI"]
[Tue May 05 07:48:13.970745 2026] [:error] [pid 39178:tid 39188] [client 45.86.200.87:24103] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "afkwPTaPrgTaiOD_15vBoAAAAMg"]
[Tue May 05 07:48:15.373096 2026] [:error] [pid 39072:tid 39108] [client 45.86.200.109:64607] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "afkwP_olSHl4aAnrIos7LwAAAEE"]
[Tue May 05 07:48:15.940143 2026] [:error] [pid 39071:tid 39090] [client 45.86.200.90:35859] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "afkwP4vmnRMz9gRzix2tHAAAAAo"]
[Tue May 05 07:48:17.381372 2026] [:error] [pid 53856:tid 53866] [client 45.86.200.75:39799] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "afkwQXG_NPOxSH0O9aQsxAAAAUE"]
[Tue May 05 07:48:18.530582 2026] [proxy_fcgi:error] [pid 39073:tid 39155] [client 45.86.200.58:22953] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:18.813134 2026] [:error] [pid 39073:tid 39152] [client 45.86.200.58:22953] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "afkwQv0kT1BNjk46Bkd59AAAAJI"]
[Tue May 05 07:48:19.628086 2026] [:error] [pid 39073:tid 39154] [client 45.86.200.102:30029] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/db.php"] [unique_id "afkwQ_0kT1BNjk46Bkd6DAAAAJQ"]
[Tue May 05 07:48:20.157380 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.97:63303] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "afkwRHG_NPOxSH0O9aQtPQAAAUw"]
[Tue May 05 07:48:20.700022 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.109:39853] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "afkwRHG_NPOxSH0O9aQtVwAAAUw"]
[Tue May 05 07:48:21.236379 2026] [:error] [pid 39178:tid 39191] [client 45.86.200.56:29695] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "afkwRTaPrgTaiOD_15vCMQAAAMs"]
[Tue May 05 07:48:21.770284 2026] [:error] [pid 53856:tid 53867] [client 45.86.200.91:59417] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "afkwRXG_NPOxSH0O9aQtfQAAAUI"]
[Tue May 05 07:48:22.340747 2026] [:error] [pid 39073:tid 39136] [client 45.86.200.52:37953] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "afkwRv0kT1BNjk46Bkd6VAAAAII"]
[Tue May 05 07:48:23.480288 2026] [:error] [pid 53856:tid 53865] [client 45.86.200.102:57681] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "afkwR3G_NPOxSH0O9aQtuQAAAUA"]
[Tue May 05 07:48:24.038352 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.91:60645] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "afkwSHG_NPOxSH0O9aQtygAAAUg"]
[Tue May 05 07:48:24.609013 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.96:50155] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "afkwSHG_NPOxSH0O9aQt3wAAAUM"]
[Tue May 05 07:48:25.142094 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.80:27523] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "afkwSSepFwKgA_SKOHgjqQAAARg"]
[Tue May 05 07:48:25.695294 2026] [:error] [pid 39071:tid 39097] [client 185.82.72.4:28045] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "afkwSYvmnRMz9gRzix2uEQAAABE"]
[Tue May 05 07:48:26.274318 2026] [proxy_fcgi:error] [pid 53856:tid 53881] [client 45.86.200.103:21035] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:48:27.171825 2026] [:error] [pid 53856:tid 53879] [client 45.86.200.103:21035] [client 45.86.200.103] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.103, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "afkwS3G_NPOxSH0O9aQuWQAAAU4"]
[Tue May 05 07:48:28.621278 2026] [:error] [pid 53856:tid 53875] [client 45.86.200.103:21035] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "afkwTHG_NPOxSH0O9aQuqwAAAUo"]
[Tue May 05 07:48:33.680578 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.87:39945] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "afkwUfolSHl4aAnrIos99QAAAFU"]
[Tue May 05 07:48:34.219299 2026] [:error] [pid 39071:tid 39088] [client 45.86.200.95:36881] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "afkwUovmnRMz9gRzix2u1AAAAAg"]
[Tue May 05 07:48:34.762122 2026] [:error] [pid 39072:tid 39121] [client 45.86.200.102:59963] [client 45.86.200.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "afkwUvolSHl4aAnrIos-HwAAAE4"]
[Tue May 05 07:48:38.176180 2026] [:error] [pid 39071:tid 39100] [client 45.86.200.79:48467] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "afkwVovmnRMz9gRzix2vTwAAABQ"]
[Tue May 05 07:48:38.737400 2026] [:error] [pid 39071:tid 39089] [client 45.86.200.108:26847] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "afkwVovmnRMz9gRzix2vZgAAAAk"]
[Tue May 05 07:48:39.300227 2026] [:error] [pid 41055:tid 41061] [client 45.86.200.110:51241] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "afkwVyepFwKgA_SKOHglzwAAAQM"]
[Tue May 05 07:48:41.105122 2026] [:error] [pid 39072:tid 39118] [client 45.86.200.75:53911] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "afkwWfolSHl4aAnrIos-1gAAAEs"]
[Tue May 05 07:48:42.974289 2026] [:error] [pid 39071:tid 39098] [client 45.86.200.53:42071] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "afkwWovmnRMz9gRzix2v_gAAABI"]
[Tue May 05 07:48:44.065489 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.85:23797] [client 45.86.200.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "afkwXHG_NPOxSH0O9aQw4QAAAVE"]
[Tue May 05 07:48:48.913983 2026] [:error] [pid 53856:tid 53872] [client 45.86.200.83:26993] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "afkwYHG_NPOxSH0O9aQxogAAAUc"]
[Tue May 05 07:49:29.087626 2026] [autoindex:error] [pid 41055:tid 41059] [client 45.86.200.88:20417] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 08:41:36.180969 2026] [:error] [pid 39178:tid 39191] [client 139.155.126.16:58176] [client 139.155.126.16] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afk8wDaPrgTaiOD_15sDLgAAAMs"]
[Tue May 05 10:32:08.247094 2026] [:error] [pid 25835:tid 25856] [client 180.195.40.205:54332] [client 180.195.40.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.40.205, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aflWqFDT5nGJyh1439wrTAAAARM"]
[Tue May 05 10:32:08.248352 2026] [:error] [pid 25744:tid 25780] [client 180.195.40.205:30307] [client 180.195.40.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.195.40.205, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "aflWqCR8IuyzjkW06ONqIgAAAIY"]
[Tue May 05 11:32:17.582510 2026] [:error] [pid 25745:tid 25805] [client 43.157.180.116:36548] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aflkwZsd7hb7vrvCNBnOuAAAAMQ"]
[Tue May 05 11:59:44.650091 2026] [:error] [pid 25835:tid 25854] [client 4.197.158.95:14080] [client 4.197.158.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "aflrMFDT5nGJyh1439xYvgAAARE"]
[Tue May 05 11:59:44.730936 2026] [:error] [pid 25835:tid 25852] [client 4.197.158.95:14182] [client 4.197.158.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "aflrMFDT5nGJyh1439xYvwAAAQ8"]
[Tue May 05 11:59:44.793884 2026] [:error] [pid 25835:tid 25849] [client 4.197.158.95:14101] [client 4.197.158.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "aflrMFDT5nGJyh1439xYwAAAAQw"]
[Tue May 05 11:59:44.859895 2026] [:error] [pid 25835:tid 25843] [client 4.197.158.95:14431] [client 4.197.158.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/"] [unique_id "aflrMFDT5nGJyh1439xYwQAAAQY"]
[Tue May 05 14:09:26.638183 2026] [:error] [pid 25835:tid 25849] [client 43.164.190.28:52146] [client 43.164.190.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afmJllDT5nGJyh1439yJRQAAAQw"]
[Tue May 05 20:41:38.493289 2026] [:error] [pid 2324:tid 2327] [client 43.161.251.162:42316] [client 43.161.251.162] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afnlgmqe2hrcI52A1HyDgQAAAUE"]
[Tue May 05 21:10:24.937714 2026] [:error] [pid 2324:tid 2334] [client 1.12.70.96:43538] [client 1.12.70.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afnsQGqe2hrcI52A1HyNkAAAAUg"]
[Tue May 05 22:12:39.574642 2026] [:error] [pid 2324:tid 2332] [client 194.62.107.77:20145] [client 194.62.107.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "afn612qe2hrcI52A1HyiUAAAAUY"]
[Tue May 05 22:45:00.635086 2026] [:error] [pid 25744:tid 25787] [client 52.243.58.79:1719] [client 52.243.58.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "afoCbCR8IuyzjkW06OMKywAAAI0"]
[Tue May 05 22:45:01.106996 2026] [:error] [pid 25744:tid 25775] [client 52.243.58.79:1690] [client 52.243.58.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "afoCbSR8IuyzjkW06OMKzQAAAIE"]
[Tue May 05 22:45:01.614584 2026] [:error] [pid 25745:tid 25809] [client 52.243.58.79:1430] [client 52.243.58.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "afoCbZsd7hb7vrvCNBlaiAAAAMg"]
[Tue May 05 22:45:02.070340 2026] [:error] [pid 2324:tid 2344] [client 52.243.58.79:1708] [client 52.243.58.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packed.php"] [unique_id "afoCbmqe2hrcI52A1HysWAAAAVI"]
[Wed May 06 01:06:28.366272 2026] [:error] [pid 2324:tid 2340] [client 45.154.98.197:57845] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "afojlGqe2hrcI52A1HzaKgAAAU4"]
[Wed May 06 01:06:28.878471 2026] [:error] [pid 25743:tid 25762] [client 45.154.98.197:58139] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "afojlG-PCMRhF5DdUnMuZwAAAA8"]
[Wed May 06 01:06:29.393733 2026] [:error] [pid 25835:tid 25846] [client 45.154.98.197:58337] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "afojlVDT5nGJyh1439wIMwAAAQk"]
[Wed May 06 01:06:30.408090 2026] [:error] [pid 2324:tid 2334] [client 45.154.98.197:58726] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/txets.php"] [unique_id "afojlmqe2hrcI52A1HzaLQAAAUg"]
[Wed May 06 03:50:36.355433 2026] [:error] [pid 48757:tid 48786] [client 34.42.211.182:56556] [client 34.42.211.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "afpKDEAivC3C614LoA5UtgAAABQ"]
[Wed May 06 03:50:37.243752 2026] [:error] [pid 48757:tid 48783] [client 34.42.211.182:51166] [client 34.42.211.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "afpKDUAivC3C614LoA5UuAAAABE"]
[Wed May 06 04:48:15.152992 2026] [:error] [pid 48757:tid 48775] [client 93.87.35.213:49158] [client 93.87.35.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.87.35.213, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afpXj0AivC3C614LoA5d5QAAAAk"]
[Wed May 06 05:03:35.442384 2026] [:error] [pid 48759:tid 48842] [client 166.88.26.191:53081] [client 166.88.26.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/nacos/"] [unique_id "afpbJ6mcftH9JrQl_yHF8gAAAJQ"]
[Wed May 06 09:09:16.397329 2026] [:error] [pid 9653:tid 9721] [client 106.54.62.156:58586] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afqUvKhJ49Xc4dqq0B5iVAAAABc"]
[Wed May 06 09:42:57.843680 2026] [:error] [pid 13414:tid 13435] [client 68.183.32.46:63644] [client 68.183.32.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.32.46, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "afqcoUuJQpWjVpJTu_nioAAAARM"]
[Wed May 06 09:42:58.831561 2026] [:error] [pid 9789:tid 9798] [client 68.183.32.46:63748] [client 68.183.32.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.32.46, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "afqcoj_YStPJSCHPkUUa4gAAAEc"]
[Wed May 06 10:31:05.820033 2026] [:error] [pid 9789:tid 9794] [client 43.154.127.188:51904] [client 43.154.127.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afqn6T_YStPJSCHPkUUoEQAAAEM"]
[Wed May 06 10:38:17.872435 2026] [:error] [pid 9789:tid 9799] [client 164.92.212.86:58704] [client 164.92.212.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.212.86, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "afqpmT_YStPJSCHPkUUpggAAAEg"]
[Wed May 06 10:38:18.889894 2026] [:error] [pid 13443:tid 13455] [client 164.92.212.86:56224] [client 164.92.212.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.212.86, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "afqpmgCyfZallDmsQrd03QAAAUo"]
[Wed May 06 10:38:29.655379 2026] [:error] [pid 63810:tid 63820] [client 92.118.39.194:32978] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "afqppXpnbsN9Zf6i5IEYowAAAYY"]
[Wed May 06 10:38:29.668719 2026] [:error] [pid 13443:tid 13449] [client 92.118.39.194:33312] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.example"] [unique_id "afqppQCyfZallDmsQrd07AAAAUQ"]
[Wed May 06 10:38:29.691314 2026] [:error] [pid 13443:tid 13459] [client 92.118.39.194:33112] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afqppQCyfZallDmsQrd07QAAAU4"]
[Wed May 06 10:38:29.691955 2026] [:error] [pid 13414:tid 13416] [client 92.118.39.194:33814] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/packed-refs"] [unique_id "afqppUuJQpWjVpJTu_nq8QAAAQA"]
[Wed May 06 10:38:29.693527 2026] [:error] [pid 63810:tid 63817] [client 92.118.39.194:33510] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/db.sql"] [unique_id "afqppXpnbsN9Zf6i5IEYpQAAAYM"]
[Wed May 06 10:38:29.714034 2026] [:error] [pid 63810:tid 63819] [client 92.118.39.194:33160] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/refs/heads/main"] [unique_id "afqppXpnbsN9Zf6i5IEYpwAAAYU"]
[Wed May 06 10:38:29.724323 2026] [:error] [pid 13443:tid 13448] [client 92.118.39.194:33476] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/parameters.yml"] [unique_id "afqppQCyfZallDmsQrd08AAAAUM"]
[Wed May 06 10:38:29.726849 2026] [:error] [pid 63810:tid 63830] [client 92.118.39.194:33008] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.old"] [unique_id "afqppXpnbsN9Zf6i5IEYqgAAAZA"]
[Wed May 06 10:38:29.727716 2026] [:error] [pid 13443:tid 13463] [client 92.118.39.194:33126] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "afqppQCyfZallDmsQrd08gAAAVI"]
[Wed May 06 10:38:29.729200 2026] [:error] [pid 13443:tid 13469] [client 92.118.39.194:33140] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/index"] [unique_id "afqppQCyfZallDmsQrd08wAAAVg"]
[Wed May 06 10:38:29.738771 2026] [:error] [pid 63810:tid 63838] [client 92.118.39.194:33486] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.prod"] [unique_id "afqppXpnbsN9Zf6i5IEYrAAAAZg"]
[Wed May 06 10:38:29.741123 2026] [:error] [pid 63810:tid 63816] [client 92.118.39.194:33518] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/mysql.sql"] [unique_id "afqppXpnbsN9Zf6i5IEYrgAAAYI"]
[Wed May 06 10:38:29.750921 2026] [:error] [pid 13414:tid 13423] [client 92.118.39.194:33080] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/www/.env"] [unique_id "afqppUuJQpWjVpJTu_nq8wAAAQc"]
[Wed May 06 10:38:29.768310 2026] [:error] [pid 63810:tid 63822] [client 92.118.39.194:33108] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.default"] [unique_id "afqppXpnbsN9Zf6i5IEYsQAAAYg"]
[Wed May 06 10:38:29.769874 2026] [:error] [pid 13443:tid 13453] [client 92.118.39.194:33082] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/v1/.env"] [unique_id "afqppQCyfZallDmsQrd09QAAAUg"]
[Wed May 06 10:38:29.774843 2026] [:error] [pid 63810:tid 63821] [client 92.118.39.194:33192] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/actuator/configprops"] [unique_id "afqppXpnbsN9Zf6i5IEYsgAAAYc"]
[Wed May 06 10:38:29.779430 2026] [:error] [pid 13443:tid 13464] [client 92.118.39.194:33644] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/api/graphql"] [unique_id "afqppQCyfZallDmsQrd09gAAAVM"]
[Wed May 06 10:38:29.779567 2026] [:error] [pid 63810:tid 63823] [client 92.118.39.194:33022] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.vault"] [unique_id "afqppXpnbsN9Zf6i5IEYswAAAYk"]
[Wed May 06 10:38:29.780667 2026] [:error] [pid 63810:tid 63826] [client 92.118.39.194:33776] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vercel.json"] [unique_id "afqppXpnbsN9Zf6i5IEYtAAAAYw"]
[Wed May 06 10:38:29.782027 2026] [:error] [pid 13414:tid 13426] [client 92.118.39.194:33874] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bun.lockb"] [unique_id "afqppUuJQpWjVpJTu_nq9QAAAQo"]
[Wed May 06 10:38:29.789895 2026] [:error] [pid 9653:tid 9711] [client 92.118.39.194:33886] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/settings.py"] [unique_id "afqppahJ49Xc4dqq0B5s-AAAAA0"]
[Wed May 06 10:38:29.790757 2026] [:error] [pid 9653:tid 9716] [client 92.118.39.194:33574] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server.key"] [unique_id "afqppahJ49Xc4dqq0B5s-QAAABI"]
[Wed May 06 10:38:29.793904 2026] [:error] [pid 13443:tid 13466] [client 92.118.39.194:33714] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/secrets.yml"] [unique_id "afqppQCyfZallDmsQrd0-AAAAVU"]
[Wed May 06 10:38:29.794726 2026] [:error] [pid 9664:tid 9764] [client 92.118.39.194:33242] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.next/server/pages-manifest.json"] [unique_id "afqppQH4OZbrg1SjsBPz4wAAAII"]
[Wed May 06 10:38:29.795614 2026] [:error] [pid 13443:tid 13451] [client 92.118.39.194:33348] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/actuator/loggers"] [unique_id "afqppQCyfZallDmsQrd0-QAAAUY"]
[Wed May 06 10:38:29.795661 2026] [:error] [pid 63810:tid 63833] [client 92.118.39.194:33096] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.sample"] [unique_id "afqppXpnbsN9Zf6i5IEYtQAAAZM"]
[Wed May 06 10:38:29.796700 2026] [:error] [pid 9659:tid 9735] [client 92.118.39.194:33632] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug/pprof/cmdline"] [unique_id "afqppfwJnWjd8JHpBttRMwAAAME"]
[Wed May 06 10:38:29.796762 2026] [:error] [pid 13443:tid 13468] [client 92.118.39.194:33472] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_profiler/latest"] [unique_id "afqppQCyfZallDmsQrd0-gAAAVc"]
[Wed May 06 10:38:29.800342 2026] [:error] [pid 9789:tid 9795] [client 92.118.39.194:33282] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "afqppT_YStPJSCHPkUUpiAAAAEQ"]
[Wed May 06 10:38:29.815412 2026] [:error] [pid 9653:tid 9719] [client 92.118.39.194:33822] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/oauth/jwks"] [unique_id "afqppahJ49Xc4dqq0B5s-gAAABU"]
[Wed May 06 10:38:29.816161 2026] [:error] [pid 63810:tid 63834] [client 92.118.39.194:33610] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.bunfig.toml"] [unique_id "afqppXpnbsN9Zf6i5IEYtgAAAZQ"]
[Wed May 06 10:38:29.817893 2026] [:error] [pid 9659:tid 9758] [client 92.118.39.194:33458] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jwks.json"] [unique_id "afqppfwJnWjd8JHpBttRNgAAANg"]
[Wed May 06 10:38:29.820373 2026] [:error] [pid 9664:tid 9786] [client 92.118.39.194:33552] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.ssh/id_rsa"] [unique_id "afqppQH4OZbrg1SjsBPz5QAAAJg"]
[Wed May 06 10:38:29.821471 2026] [:error] [pid 13414:tid 13438] [client 92.118.39.194:33766] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/WEB-INF/web.xml"] [unique_id "afqppUuJQpWjVpJTu_nq-QAAARY"]
[Wed May 06 10:38:29.821545 2026] [:error] [pid 9659:tid 9744] [client 92.118.39.194:33284] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "afqppfwJnWjd8JHpBttRNQAAAMo"]
[Wed May 06 10:38:29.821843 2026] [:error] [pid 13414:tid 13420] [client 92.118.39.194:33768] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.s3cfg"] [unique_id "afqppUuJQpWjVpJTu_nq-gAAAQQ"]
[Wed May 06 10:38:29.822275 2026] [:error] [pid 13414:tid 13437] [client 92.118.39.194:33864] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docker-compose.yml"] [unique_id "afqppUuJQpWjVpJTu_nq-wAAARU"]
[Wed May 06 10:38:29.822818 2026] [:error] [pid 9659:tid 9753] [client 92.118.39.194:33036] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/server/.env"] [unique_id "afqppfwJnWjd8JHpBttROgAAANM"]
[Wed May 06 10:38:29.826104 2026] [:error] [pid 13414:tid 13427] [client 92.118.39.194:33582] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug/pprof/heap"] [unique_id "afqppUuJQpWjVpJTu_nq_AAAAQs"]
[Wed May 06 10:38:29.826943 2026] [:error] [pid 13414:tid 13418] [client 92.118.39.194:33716] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/config/master.key"] [unique_id "afqppUuJQpWjVpJTu_nq_QAAAQI"]
[Wed May 06 10:38:29.829914 2026] [:error] [pid 13414:tid 13419] [client 92.118.39.194:33678] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "afqppUuJQpWjVpJTu_nq_gAAAQM"]
[Wed May 06 10:38:29.832069 2026] [:error] [pid 9664:tid 9771] [client 92.118.39.194:33898] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/appsettings.Development.json"] [unique_id "afqppQH4OZbrg1SjsBPz6gAAAIk"]
[Wed May 06 10:38:29.834823 2026] [:error] [pid 63810:tid 63828] [client 92.118.39.194:33694] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php.bak"] [unique_id "afqppXpnbsN9Zf6i5IEYtwAAAY4"]
[Wed May 06 10:38:29.838813 2026] [:error] [pid 9789:tid 9805] [client 92.118.39.194:32986] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.backup"] [unique_id "afqppT_YStPJSCHPkUUpjwAAAE4"]
[Wed May 06 10:38:29.840735 2026] [:error] [pid 13443:tid 13465] [client 92.118.39.194:33844] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2024.sql"] [unique_id "afqppQCyfZallDmsQrd0-wAAAVQ"]
[Wed May 06 10:38:29.843055 2026] [:error] [pid 9664:tid 9770] [client 92.118.39.194:33030] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/core/.env"] [unique_id "afqppQH4OZbrg1SjsBPz7QAAAIg"]
[Wed May 06 10:38:29.844035 2026] [:error] [pid 9659:tid 9734] [client 92.118.39.194:33172] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/COMMIT_EDITMSG"] [unique_id "afqppfwJnWjd8JHpBttRPwAAAMA"]
[Wed May 06 10:38:29.844737 2026] [:error] [pid 9653:tid 9713] [client 92.118.39.194:33746] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.yarnrc"] [unique_id "afqppahJ49Xc4dqq0B5tAwAAAA8"]
[Wed May 06 10:38:29.845621 2026] [:error] [pid 9664:tid 9768] [client 92.118.39.194:33860] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/oauth-authorization-server"] [unique_id "afqppQH4OZbrg1SjsBPz7wAAAIY"]
[Wed May 06 10:38:29.847772 2026] [:error] [pid 13414:tid 13428] [client 92.118.39.194:33780] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/serviceAccountKey.json"] [unique_id "afqppUuJQpWjVpJTu_nrAwAAAQw"]
[Wed May 06 10:38:29.848152 2026] [:error] [pid 9789:tid 9810] [client 92.118.39.194:33320] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/description"] [unique_id "afqppT_YStPJSCHPkUUpkQAAAFM"]
[Wed May 06 10:38:29.848702 2026] [:error] [pid 9664:tid 9766] [client 92.118.39.194:33696] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php~"] [unique_id "afqppQH4OZbrg1SjsBPz8QAAAIQ"]
[Wed May 06 10:38:29.849097 2026] [:error] [pid 9789:tid 9794] [client 92.118.39.194:33752] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/appsettings.json"] [unique_id "afqppT_YStPJSCHPkUUpkgAAAEM"]
[Wed May 06 10:38:29.851580 2026] [:error] [pid 13414:tid 13417] [client 92.118.39.194:33704] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.old"] [unique_id "afqppUuJQpWjVpJTu_nrBAAAAQE"]
[Wed May 06 10:38:29.852136 2026] [:error] [pid 9664:tid 9783] [client 92.118.39.194:33376] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/actuator/trace"] [unique_id "afqppQH4OZbrg1SjsBPz8wAAAJU"]
[Wed May 06 10:38:29.858156 2026] [:error] [pid 9653:tid 9701] [client 92.118.39.194:33438] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/jwks.json"] [unique_id "afqppahJ49Xc4dqq0B5tBQAAAAM"]
[Wed May 06 10:38:29.862863 2026] [:error] [pid 9664:tid 9769] [client 92.118.39.194:33806] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/META-INF/context.xml"] [unique_id "afqppQH4OZbrg1SjsBPz9AAAAIc"]
[Wed May 06 10:38:29.864917 2026] [:error] [pid 9789:tid 9811] [client 92.118.39.194:32950] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "afqppT_YStPJSCHPkUUplAAAAFQ"]
[Wed May 06 10:38:29.870777 2026] [:error] [pid 13443:tid 13467] [client 92.118.39.194:33578] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wrangler.jsonc"] [unique_id "afqppQCyfZallDmsQrd0_QAAAVY"]
[Wed May 06 10:38:29.871310 2026] [:error] [pid 13414:tid 13434] [client 92.118.39.194:33730] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/instance/config.py"] [unique_id "afqppUuJQpWjVpJTu_nrBwAAARI"]
[Wed May 06 10:38:29.871555 2026] [:error] [pid 9789:tid 9791] [client 92.118.39.194:33658] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/storage/app/oauth-private.key"] [unique_id "afqppT_YStPJSCHPkUUplwAAAEA"]
[Wed May 06 10:38:29.879034 2026] [:error] [pid 13443:tid 13458] [client 92.118.39.194:33344] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/actuator/mappings"] [unique_id "afqppQCyfZallDmsQrd0_gAAAU0"]
[Wed May 06 10:38:29.886864 2026] [:error] [pid 13443:tid 13457] [client 92.118.39.194:33046] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/src/.env"] [unique_id "afqppQCyfZallDmsQrd0_wAAAUw"]
[Wed May 06 10:38:29.886996 2026] [:error] [pid 9653:tid 9703] [client 92.118.39.194:33848] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/keystore.properties"] [unique_id "afqppahJ49Xc4dqq0B5tCgAAAAU"]
[Wed May 06 10:38:29.889905 2026] [:error] [pid 9789:tid 9804] [client 92.118.39.194:33674] [client 92.118.39.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/wp-config.php"] [unique_id "afqppT_YStPJSCHPkUUpmQAAAE0"]
[Wed May 06 10:38:29.889965 2026] [:error] [pid 9659:tid 9757] [client 92.118.39.194:33558] [client 92.118.39.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.ssh/config"] [unique_id "afqppfwJnWjd8JHpBttRSAAAANc"]
[Wed May 06 10:48:04.061619 2026] [:error] [pid 63810:tid 63825] [client 34.165.99.231:44964] [client 34.165.99.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "afqr5HpnbsN9Zf6i5IEZUQAAAYs"]
[Wed May 06 10:48:04.299710 2026] [:error] [pid 482:tid 498] [client 34.165.99.231:44972] [client 34.165.99.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "afqr5Mxs8HOc_nWgOW64jQAAAc4"]
[Wed May 06 10:48:04.422723 2026] [:error] [pid 9653:tid 9710] [client 34.165.99.231:44974] [client 34.165.99.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev.local"] [unique_id "afqr5KhJ49Xc4dqq0B5w3QAAAAw"]
[Wed May 06 10:48:04.429100 2026] [:error] [pid 9653:tid 9714] [client 34.165.99.231:44990] [client 34.165.99.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "afqr5KhJ49Xc4dqq0B5w3gAAABA"]
[Wed May 06 10:48:04.504326 2026] [:error] [pid 9653:tid 9699] [client 34.165.99.231:45000] [client 34.165.99.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "afqr5KhJ49Xc4dqq0B5w3wAAAAE"]
[Wed May 06 10:48:04.525049 2026] [:error] [pid 9653:tid 9708] [client 34.165.99.231:44996] [client 34.165.99.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env.local"] [unique_id "afqr5KhJ49Xc4dqq0B5w4AAAAAo"]
[Wed May 06 10:48:04.590675 2026] [:error] [pid 9653:tid 9700] [client 34.165.99.231:45022] [client 34.165.99.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.dev"] [unique_id "afqr5KhJ49Xc4dqq0B5w4QAAAAI"]
[Wed May 06 10:48:04.597471 2026] [:error] [pid 9653:tid 9709] [client 34.165.99.231:45014] [client 34.165.99.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "afqr5KhJ49Xc4dqq0B5w4gAAAAs"]
[Wed May 06 10:48:04.598008 2026] [:error] [pid 9653:tid 9718] [client 34.165.99.231:45008] [client 34.165.99.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.docker"] [unique_id "afqr5KhJ49Xc4dqq0B5w4wAAABQ"]
[Wed May 06 10:48:04.766445 2026] [:error] [pid 557:tid 577] [client 34.165.99.231:45024] [client 34.165.99.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development.local"] [unique_id "afqr5DZjFR8Vd8ce80ARBgAAAlI"]
[Wed May 06 15:47:06.686716 2026] [:error] [pid 13414:tid 13439] [client 49.13.134.145:16732] [client 49.13.134.145] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "159.196.95.52_c2f2df6922bb9816eb96d4968152a7c3a38965e9"): Internal error (specific information not available) [hostname "measureyourcause.com.au"] [uri "/index.php"] [unique_id "afrx9UuJQpWjVpJTu_kFgwAAARc"], referer: https://measureyourcause.com.au/
[Wed May 06 17:51:59.386725 2026] [:error] [pid 13443:tid 13454] [client 43.165.2.110:45482] [client 43.165.2.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afsPPwCyfZallDmsQrePpgAAAUk"]
[Wed May 06 21:49:23.053169 2026] [:error] [pid 9664:tid 9779] [client 162.14.66.219:35692] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "aftG4wH4OZbrg1SjsBNOvAAAAJE"]
[Wed May 06 23:18:29.227410 2026] [:error] [pid 9653:tid 9705] [client 177.7.56.88:48670] [client 177.7.56.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "aftbxahJ49Xc4dqq0B48QgAAAAc"]
[Thu May 07 00:18:04.156793 2026] [:error] [pid 9653:tid 9719] [client 170.106.15.3:35680] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "aftpvKhJ49Xc4dqq0B5SUgAAABU"]
[Thu May 07 00:31:18.400369 2026] [:error] [pid 9653:tid 9717] [client 103.252.166.144:3302] [client 103.252.166.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.252.166.144, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afts1qhJ49Xc4dqq0B5YqgAAABM"]
[Thu May 07 00:31:18.420154 2026] [:error] [pid 9653:tid 9716] [client 103.252.166.144:3301] [client 103.252.166.144] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.252.166.144, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afts1qhJ49Xc4dqq0B5YqwAAABI"]
[Thu May 07 02:40:56.756375 2026] [:error] [pid 13414:tid 13437] [client 172.202.74.222:20183] [client 172.202.74.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "afuLOEuJQpWjVpJTu_lFyAAAARU"]
[Thu May 07 02:40:58.955937 2026] [:error] [pid 9789:tid 9798] [client 172.202.74.222:20169] [client 172.202.74.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/120f9.php"] [unique_id "afuLOj_YStPJSCHPkUXeTQAAAEc"]
[Thu May 07 02:40:59.575125 2026] [:error] [pid 9789:tid 9809] [client 172.202.74.222:20196] [client 172.202.74.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/sitemaps/admin.php"] [unique_id "afuLOz_YStPJSCHPkUXeTwAAAFI"]
[Thu May 07 02:41:00.898340 2026] [:error] [pid 9789:tid 9804] [client 172.202.74.222:20212] [client 172.202.74.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "afuLPD_YStPJSCHPkUXeUgAAAE0"]
[Thu May 07 02:41:02.978784 2026] [:error] [pid 13414:tid 13418] [client 172.202.74.222:20109] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "afuLPkuJQpWjVpJTu_lF2QAAAQI"]
[Thu May 07 02:41:03.762616 2026] [:error] [pid 9789:tid 9796] [client 172.202.74.222:20195] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "afuLPz_YStPJSCHPkUXeVQAAAEU"]
[Thu May 07 02:41:04.380726 2026] [:error] [pid 13443:tid 13468] [client 172.202.74.222:20101] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "afuLQACyfZallDmsQre6dQAAAVc"]
[Thu May 07 02:41:04.847176 2026] [:error] [pid 13414:tid 13422] [client 172.202.74.222:20194] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/to.php"] [unique_id "afuLQEuJQpWjVpJTu_lF2gAAAQY"]
[Thu May 07 02:41:05.410350 2026] [:error] [pid 13414:tid 13437] [client 172.202.74.222:20165] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afuLQUuJQpWjVpJTu_lF3AAAARU"]
[Thu May 07 02:41:05.918569 2026] [:error] [pid 13414:tid 13424] [client 172.202.74.222:20116] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afuLQUuJQpWjVpJTu_lF3QAAAQg"]
[Thu May 07 02:41:06.506174 2026] [:error] [pid 9789:tid 9801] [client 172.202.74.222:20192] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afuLQj_YStPJSCHPkUXeVgAAAEo"]
[Thu May 07 02:41:06.948767 2026] [:error] [pid 592:tid 624] [client 172.202.74.222:20222] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afuLQpiX28mb6xLi2PzPCAAAApg"]
[Thu May 07 02:41:07.467660 2026] [:error] [pid 482:tid 498] [client 172.202.74.222:20202] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/half.php"] [unique_id "afuLQ8xs8HOc_nWgOW6sdQAAAc4"]
[Thu May 07 02:41:08.707385 2026] [:error] [pid 9664:tid 9774] [client 172.202.74.222:20135] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/half.php"] [unique_id "afuLRAH4OZbrg1SjsBOMRAAAAIw"]
[Thu May 07 02:41:09.789664 2026] [:error] [pid 9664:tid 9764] [client 172.202.74.222:20219] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/half.php"] [unique_id "afuLRQH4OZbrg1SjsBOMRwAAAII"]
[Thu May 07 02:41:11.157129 2026] [:error] [pid 482:tid 509] [client 172.202.74.222:20166] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/half.php"] [unique_id "afuLR8xs8HOc_nWgOW6sfAAAAdc"]
[Thu May 07 02:41:13.655080 2026] [:error] [pid 592:tid 606] [client 172.202.74.222:20138] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2P.php"] [unique_id "afuLSZiX28mb6xLi2PzPCwAAAoo"]
[Thu May 07 02:41:14.180341 2026] [:error] [pid 592:tid 597] [client 172.202.74.222:20189] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2P.php"] [unique_id "afuLSpiX28mb6xLi2PzPDAAAAoE"]
[Thu May 07 02:41:15.085519 2026] [:error] [pid 9789:tid 9815] [client 172.202.74.222:20163] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2P.php"] [unique_id "afuLSz_YStPJSCHPkUXeYQAAAFg"]
[Thu May 07 02:41:15.808031 2026] [:error] [pid 9659:tid 9755] [client 172.202.74.222:20173] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2P.php"] [unique_id "afuLS_wJnWjd8JHpBtu_wQAAANU"]
[Thu May 07 02:41:16.885185 2026] [:error] [pid 13443:tid 13461] [client 172.202.74.222:20206] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "afuLTACyfZallDmsQre6fAAAAVA"]
[Thu May 07 02:41:17.755108 2026] [:error] [pid 13414:tid 13429] [client 172.202.74.222:20056] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "afuLTUuJQpWjVpJTu_lF6QAAAQ0"]
[Thu May 07 02:41:18.943821 2026] [:error] [pid 9664:tid 9774] [client 172.202.74.222:20081] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "afuLTgH4OZbrg1SjsBOMTgAAAIw"]
[Thu May 07 02:41:19.879970 2026] [:error] [pid 13443:tid 13446] [client 172.202.74.222:20100] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tires.php"] [unique_id "afuLTwCyfZallDmsQre6fwAAAUE"]
[Thu May 07 02:41:20.507894 2026] [:error] [pid 557:tid 560] [client 172.202.74.222:20193] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xstelth.php"] [unique_id "afuLUDZjFR8Vd8ce80BFZgAAAkE"]
[Thu May 07 02:41:21.441022 2026] [:error] [pid 557:tid 572] [client 172.202.74.222:20176] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xstelth.php"] [unique_id "afuLUTZjFR8Vd8ce80BFaAAAAk0"]
[Thu May 07 02:41:22.263770 2026] [:error] [pid 9789:tid 9803] [client 172.202.74.222:20223] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xstelth.php"] [unique_id "afuLUj_YStPJSCHPkUXeZAAAAEw"]
[Thu May 07 02:41:22.843790 2026] [:error] [pid 557:tid 566] [client 172.202.74.222:20107] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xstelth.php"] [unique_id "afuLUjZjFR8Vd8ce80BFawAAAkc"]
[Thu May 07 02:41:23.398755 2026] [:error] [pid 592:tid 601] [client 172.202.74.222:20215] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chslgui.php"] [unique_id "afuLU5iX28mb6xLi2PzPEgAAAoU"]
[Thu May 07 02:41:24.358704 2026] [:error] [pid 9664:tid 9764] [client 172.202.74.222:20112] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chslgui.php"] [unique_id "afuLVAH4OZbrg1SjsBOMUQAAAII"]
[Thu May 07 02:41:25.617328 2026] [:error] [pid 482:tid 486] [client 172.202.74.222:20113] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chslgui.php"] [unique_id "afuLVcxs8HOc_nWgOW6shQAAAcI"]
[Thu May 07 02:41:26.671308 2026] [:error] [pid 482:tid 503] [client 172.202.74.222:20190] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/chslgui.php"] [unique_id "afuLVsxs8HOc_nWgOW6shwAAAdM"]
[Thu May 07 02:41:27.640319 2026] [:error] [pid 9664:tid 9778] [client 172.202.74.222:20179] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/499.php"] [unique_id "afuLVwH4OZbrg1SjsBOMVQAAAJA"]
[Thu May 07 02:41:28.354356 2026] [:error] [pid 9664:tid 9786] [client 172.202.74.222:20188] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/499.php"] [unique_id "afuLWAH4OZbrg1SjsBOMVwAAAJg"]
[Thu May 07 02:41:29.162681 2026] [:error] [pid 9653:tid 9719] [client 172.202.74.222:20131] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/499.php"] [unique_id "afuLWahJ49Xc4dqq0B6FKwAAABU"]
[Thu May 07 02:41:29.666624 2026] [:error] [pid 9789:tid 9805] [client 172.202.74.222:20185] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/499.php"] [unique_id "afuLWT_YStPJSCHPkUXebQAAAE4"]
[Thu May 07 02:41:30.205583 2026] [:error] [pid 482:tid 493] [client 172.202.74.222:20204] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/like.php"] [unique_id "afuLWsxs8HOc_nWgOW6siAAAAck"]
[Thu May 07 02:41:30.737461 2026] [:error] [pid 557:tid 566] [client 172.202.74.222:20102] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/like.php"] [unique_id "afuLWjZjFR8Vd8ce80BFdQAAAkc"]
[Thu May 07 02:41:31.496504 2026] [:error] [pid 557:tid 578] [client 172.202.74.222:20209] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/like.php"] [unique_id "afuLWzZjFR8Vd8ce80BFdwAAAlM"]
[Thu May 07 02:41:32.366973 2026] [:error] [pid 9659:tid 9751] [client 172.202.74.222:20108] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/like.php"] [unique_id "afuLXPwJnWjd8JHpBtu_zAAAANE"]
[Thu May 07 02:41:33.463802 2026] [:error] [pid 63810:tid 63833] [client 172.202.74.222:20208] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gay.php"] [unique_id "afuLXXpnbsN9Zf6i5IFXtQAAAZM"]
[Thu May 07 02:41:34.291090 2026] [:error] [pid 9659:tid 9734] [client 172.202.74.222:20201] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gay.php"] [unique_id "afuLXvwJnWjd8JHpBtu_zgAAAMA"]
[Thu May 07 02:41:34.954005 2026] [:error] [pid 63810:tid 63826] [client 172.202.74.222:20213] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gay.php"] [unique_id "afuLXnpnbsN9Zf6i5IFXuAAAAYw"]
[Thu May 07 02:41:35.565605 2026] [:error] [pid 13443:tid 13446] [client 172.202.74.222:20175] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gay.php"] [unique_id "afuLXwCyfZallDmsQre6hwAAAUE"]
[Thu May 07 02:41:36.098733 2026] [:error] [pid 13443:tid 13445] [client 172.202.74.222:20099] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "afuLYACyfZallDmsQre6iQAAAUA"]
[Thu May 07 02:41:36.624518 2026] [:error] [pid 592:tid 619] [client 172.202.74.222:20133] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "afuLYJiX28mb6xLi2PzPFQAAApQ"]
[Thu May 07 02:41:37.337467 2026] [:error] [pid 592:tid 615] [client 172.202.74.222:20181] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "afuLYZiX28mb6xLi2PzPGAAAApE"]
[Thu May 07 02:41:38.121103 2026] [:error] [pid 63810:tid 63824] [client 172.202.74.222:20214] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "afuLYnpnbsN9Zf6i5IFXuwAAAYo"]
[Thu May 07 02:41:39.569718 2026] [:error] [pid 482:tid 492] [client 172.202.74.222:20161] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/white.php"] [unique_id "afuLY8xs8HOc_nWgOW6siQAAAcg"]
[Thu May 07 02:41:40.698573 2026] [:error] [pid 9664:tid 9774] [client 172.202.74.222:20111] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/white.php"] [unique_id "afuLZAH4OZbrg1SjsBOMWgAAAIw"]
[Thu May 07 02:41:42.099745 2026] [:error] [pid 9664:tid 9770] [client 172.202.74.222:20155] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/white.php"] [unique_id "afuLZgH4OZbrg1SjsBOMXgAAAIg"]
[Thu May 07 02:41:42.754355 2026] [:error] [pid 9653:tid 9711] [client 172.202.74.222:20170] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/white.php"] [unique_id "afuLZqhJ49Xc4dqq0B6FLwAAAA0"]
[Thu May 07 02:41:43.525454 2026] [:error] [pid 9789:tid 9804] [client 172.202.74.222:20218] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bdroot.php"] [unique_id "afuLZz_YStPJSCHPkUXedQAAAE0"]
[Thu May 07 02:41:44.239187 2026] [:error] [pid 9789:tid 9801] [client 172.202.74.222:20032] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bdroot.php"] [unique_id "afuLaD_YStPJSCHPkUXedwAAAEo"]
[Thu May 07 02:41:44.993953 2026] [:error] [pid 592:tid 612] [client 172.202.74.222:20142] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bdroot.php"] [unique_id "afuLaJiX28mb6xLi2PzPHgAAApA"]
[Thu May 07 02:41:46.543325 2026] [:error] [pid 13443:tid 13463] [client 172.202.74.222:20104] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bdroot.php"] [unique_id "afuLagCyfZallDmsQre6jgAAAVI"]
[Thu May 07 02:41:47.429188 2026] [:error] [pid 592:tid 624] [client 172.202.74.222:20110] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olik.php"] [unique_id "afuLa5iX28mb6xLi2PzPIwAAApg"]
[Thu May 07 02:41:48.189857 2026] [:error] [pid 592:tid 619] [client 172.202.74.222:20203] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olik.php"] [unique_id "afuLbJiX28mb6xLi2PzPJAAAApQ"]
[Thu May 07 02:41:48.760170 2026] [:error] [pid 13414:tid 13438] [client 172.202.74.222:20174] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olik.php"] [unique_id "afuLbEuJQpWjVpJTu_lF8QAAARY"]
[Thu May 07 02:41:49.347427 2026] [:error] [pid 9789:tid 9802] [client 172.202.74.222:20119] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/olik.php"] [unique_id "afuLbT_YStPJSCHPkUXeewAAAEs"]
[Thu May 07 02:41:50.286400 2026] [:error] [pid 13443:tid 13446] [client 172.202.74.222:20114] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h.php"] [unique_id "afuLbgCyfZallDmsQre6kgAAAUE"]
[Thu May 07 02:41:50.974150 2026] [:error] [pid 13443:tid 13459] [client 172.202.74.222:20121] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h.php"] [unique_id "afuLbgCyfZallDmsQre6kwAAAU4"]
[Thu May 07 02:41:51.538986 2026] [:error] [pid 13443:tid 13467] [client 172.202.74.222:20198] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h.php"] [unique_id "afuLbwCyfZallDmsQre6mQAAAVY"]
[Thu May 07 02:41:52.590529 2026] [:error] [pid 13443:tid 13454] [client 172.202.74.222:20098] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/h.php"] [unique_id "afuLcACyfZallDmsQre6mwAAAUk"]
[Thu May 07 02:41:53.699117 2026] [:error] [pid 9664:tid 9762] [client 172.202.74.222:19975] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "afuLcQH4OZbrg1SjsBOMYwAAAIA"]
[Thu May 07 02:41:54.547195 2026] [:error] [pid 557:tid 577] [client 172.202.74.222:20199] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "afuLcjZjFR8Vd8ce80BFgAAAAlI"]
[Thu May 07 02:41:55.410103 2026] [:error] [pid 13414:tid 13418] [client 172.202.74.222:20177] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "afuLc0uJQpWjVpJTu_lF8gAAAQI"]
[Thu May 07 02:41:57.449136 2026] [:error] [pid 9789:tid 9805] [client 172.202.74.222:20034] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cong.php"] [unique_id "afuLdT_YStPJSCHPkUXegAAAAE4"]
[Thu May 07 02:41:58.379823 2026] [:error] [pid 9664:tid 9770] [client 172.202.74.222:20171] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/about.php"] [unique_id "afuLdgH4OZbrg1SjsBOMaAAAAIg"]
[Thu May 07 02:41:58.987332 2026] [:error] [pid 9653:tid 9721] [client 172.202.74.222:20038] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/about.php"] [unique_id "afuLdqhJ49Xc4dqq0B6FNQAAABc"]
[Thu May 07 02:42:00.241768 2026] [:error] [pid 13443:tid 13458] [client 172.202.74.222:20221] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/about.php"] [unique_id "afuLeACyfZallDmsQre6nwAAAU0"]
[Thu May 07 02:42:01.337983 2026] [:error] [pid 9653:tid 9700] [client 172.202.74.222:20217] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/about.php"] [unique_id "afuLeahJ49Xc4dqq0B6FOQAAAAI"]
[Thu May 07 02:42:02.246636 2026] [:error] [pid 13443:tid 13461] [client 172.202.74.222:20115] [client 172.202.74.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afuLegCyfZallDmsQre6ogAAAVA"]
[Thu May 07 02:42:09.365472 2026] [:error] [pid 9659:tid 9740] [client 172.202.74.222:20186] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwa.php"] [unique_id "afuLgfwJnWjd8JHpBtu_8gAAAMY"]
[Thu May 07 02:42:09.869414 2026] [:error] [pid 63810:tid 63827] [client 172.202.74.222:20172] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwa.php"] [unique_id "afuLgXpnbsN9Zf6i5IFXwgAAAY0"]
[Thu May 07 02:42:10.419198 2026] [:error] [pid 557:tid 583] [client 172.202.74.222:20044] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwa.php"] [unique_id "afuLgjZjFR8Vd8ce80BFiQAAAlg"]
[Thu May 07 02:42:10.913459 2026] [:error] [pid 9653:tid 9713] [client 172.202.74.222:20033] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uwa.php"] [unique_id "afuLgqhJ49Xc4dqq0B6FQwAAAA8"]
[Thu May 07 02:42:12.453537 2026] [:error] [pid 592:tid 609] [client 172.202.74.222:20126] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afuLhJiX28mb6xLi2PzPKwAAAo0"]
[Thu May 07 02:42:12.976717 2026] [:error] [pid 9653:tid 9710] [client 172.202.74.222:20127] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afuLhKhJ49Xc4dqq0B6FRQAAAAw"]
[Thu May 07 02:42:13.730730 2026] [:error] [pid 9653:tid 9706] [client 172.202.74.222:20207] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afuLhahJ49Xc4dqq0B6FRwAAAAg"]
[Thu May 07 02:42:14.861415 2026] [:error] [pid 9789:tid 9795] [client 172.202.74.222:20059] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/crgio.php"] [unique_id "afuLhj_YStPJSCHPkUXehwAAAEQ"]
[Thu May 07 02:42:16.049094 2026] [:error] [pid 63810:tid 63823] [client 172.202.74.222:20055] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afuLiHpnbsN9Zf6i5IFXywAAAYk"]
[Thu May 07 02:42:16.693224 2026] [:error] [pid 9664:tid 9770] [client 172.202.74.222:20050] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afuLiAH4OZbrg1SjsBOMiAAAAIg"]
[Thu May 07 02:42:17.740587 2026] [:error] [pid 13414:tid 13422] [client 172.202.74.222:20060] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afuLiUuJQpWjVpJTu_lF9AAAAQY"]
[Thu May 07 02:42:18.767874 2026] [:error] [pid 9664:tid 9782] [client 172.202.74.222:20158] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/geforce.php"] [unique_id "afuLigH4OZbrg1SjsBOMkQAAAJQ"]
[Thu May 07 02:42:19.900399 2026] [:error] [pid 9664:tid 9780] [client 172.202.74.222:20040] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afuLiwH4OZbrg1SjsBOMmAAAAJI"]
[Thu May 07 02:42:20.645130 2026] [:error] [pid 482:tid 509] [client 172.202.74.222:20164] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afuLjMxs8HOc_nWgOW6smAAAAdc"]
[Thu May 07 02:42:21.679423 2026] [:error] [pid 9789:tid 9811] [client 172.202.74.222:20154] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afuLjT_YStPJSCHPkUXeiAAAAFQ"]
[Thu May 07 02:42:22.105380 2026] [:error] [pid 9789:tid 9813] [client 172.202.74.222:20037] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "afuLjj_YStPJSCHPkUXeigAAAFY"]
[Thu May 07 02:42:22.533074 2026] [:error] [pid 63810:tid 63817] [client 172.202.74.222:20139] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afuLjnpnbsN9Zf6i5IFX1AAAAYM"]
[Thu May 07 02:42:23.103305 2026] [:error] [pid 9789:tid 9794] [client 172.202.74.222:20046] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afuLjz_YStPJSCHPkUXejAAAAEM"]
[Thu May 07 02:42:24.094021 2026] [:error] [pid 9653:tid 9711] [client 172.202.74.222:20089] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afuLkKhJ49Xc4dqq0B6FUAAAAA0"]
[Thu May 07 02:42:24.505792 2026] [:error] [pid 9664:tid 9766] [client 172.202.74.222:20178] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/77.php"] [unique_id "afuLkAH4OZbrg1SjsBOMqgAAAIQ"]
[Thu May 07 02:42:25.352629 2026] [:error] [pid 9789:tid 9792] [client 172.202.74.222:20041] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afuLkT_YStPJSCHPkUXejgAAAEE"]
[Thu May 07 02:42:25.999155 2026] [:error] [pid 9653:tid 9702] [client 172.202.74.222:20003] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afuLkahJ49Xc4dqq0B6FVQAAAAQ"]
[Thu May 07 02:42:26.713147 2026] [:error] [pid 13443:tid 13458] [client 172.202.74.222:20036] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afuLkgCyfZallDmsQre6qAAAAU0"]
[Thu May 07 02:42:27.112734 2026] [:error] [pid 482:tid 484] [client 172.202.74.222:20118] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.sghb.php"] [unique_id "afuLk8xs8HOc_nWgOW6smwAAAcA"]
[Thu May 07 02:42:27.985292 2026] [:error] [pid 482:tid 495] [client 172.202.74.222:20150] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afuLk8xs8HOc_nWgOW6snAAAAcs"]
[Thu May 07 02:42:28.663748 2026] [:error] [pid 9659:tid 9758] [client 172.202.74.222:20074] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afuLlPwJnWjd8JHpBtu_9wAAANg"]
[Thu May 07 02:42:29.175592 2026] [:error] [pid 482:tid 510] [client 172.202.74.222:20200] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afuLlcxs8HOc_nWgOW6snQAAAdg"]
[Thu May 07 02:42:30.073065 2026] [:error] [pid 9664:tid 9782] [client 172.202.74.222:20128] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoko.php"] [unique_id "afuLlgH4OZbrg1SjsBOMtwAAAJQ"]
[Thu May 07 02:42:30.634864 2026] [:error] [pid 13443:tid 13449] [client 172.202.74.222:19987] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afuLlgCyfZallDmsQre6qgAAAUQ"]
[Thu May 07 02:42:31.376024 2026] [:error] [pid 9653:tid 9718] [client 172.202.74.222:20137] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afuLl6hJ49Xc4dqq0B6FWQAAABQ"]
[Thu May 07 02:42:31.887764 2026] [:error] [pid 9789:tid 9803] [client 172.202.74.222:20073] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afuLlz_YStPJSCHPkUXelQAAAEw"]
[Thu May 07 02:42:32.360404 2026] [:error] [pid 9789:tid 9812] [client 172.202.74.222:20167] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/solo1.php"] [unique_id "afuLmD_YStPJSCHPkUXelgAAAFU"]
[Thu May 07 02:42:33.049434 2026] [:error] [pid 482:tid 490] [client 172.202.74.222:19973] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afuLmcxs8HOc_nWgOW6soQAAAcY"]
[Thu May 07 02:42:33.578115 2026] [:error] [pid 9653:tid 9717] [client 172.202.74.222:20187] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afuLmahJ49Xc4dqq0B6FXwAAABM"]
[Thu May 07 02:42:34.334349 2026] [:error] [pid 9659:tid 9746] [client 172.202.74.222:20096] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afuLmvwJnWjd8JHpBtu_-wAAAMw"]
[Thu May 07 02:42:35.009296 2026] [:error] [pid 9664:tid 9775] [client 172.202.74.222:20153] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/locales.php"] [unique_id "afuLmwH4OZbrg1SjsBOMvAAAAI0"]
[Thu May 07 02:42:36.422725 2026] [:error] [pid 9664:tid 9786] [client 172.202.74.222:19992] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afuLnAH4OZbrg1SjsBOMvwAAAJg"]
[Thu May 07 02:42:37.646672 2026] [:error] [pid 9664:tid 9785] [client 172.202.74.222:20151] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afuLnQH4OZbrg1SjsBOMwgAAAJc"]
[Thu May 07 02:42:39.396231 2026] [:error] [pid 9789:tid 9814] [client 172.202.74.222:20197] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afuLnz_YStPJSCHPkUXemwAAAFc"]
[Thu May 07 02:42:40.531683 2026] [:error] [pid 9789:tid 9806] [client 172.202.74.222:20048] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "afuLoD_YStPJSCHPkUXengAAAE8"]
[Thu May 07 02:42:41.194402 2026] [:error] [pid 482:tid 503] [client 172.202.74.222:20094] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afuLocxs8HOc_nWgOW6srAAAAdM"]
[Thu May 07 02:42:41.872631 2026] [:error] [pid 592:tid 624] [client 172.202.74.222:20105] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afuLoZiX28mb6xLi2PzPQwAAApg"]
[Thu May 07 02:42:42.747403 2026] [:error] [pid 9653:tid 9714] [client 172.202.74.222:19981] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afuLoqhJ49Xc4dqq0B6FZwAAABA"]
[Thu May 07 02:42:43.254611 2026] [:error] [pid 482:tid 498] [client 172.202.74.222:19984] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pucci.php"] [unique_id "afuLo8xs8HOc_nWgOW6ssAAAAc4"]
[Thu May 07 02:42:43.925521 2026] [:error] [pid 9789:tid 9808] [client 172.202.74.222:20140] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afuLoz_YStPJSCHPkUXeowAAAFE"]
[Thu May 07 02:42:44.819463 2026] [:error] [pid 9789:tid 9813] [client 172.202.74.222:20184] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afuLpD_YStPJSCHPkUXepQAAAFY"]
[Thu May 07 02:42:45.525154 2026] [:error] [pid 9653:tid 9704] [client 172.202.74.222:20097] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afuLpahJ49Xc4dqq0B6FbQAAAAY"]
[Thu May 07 02:42:45.956969 2026] [:error] [pid 63810:tid 63826] [client 172.202.74.222:20147] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afuLpXpnbsN9Zf6i5IFX3QAAAYw"]
[Thu May 07 02:42:46.421108 2026] [:error] [pid 9659:tid 9738] [client 172.202.74.222:20080] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afuLpvwJnWjd8JHpBtvAAAAAAMQ"]
[Thu May 07 02:42:46.826073 2026] [:error] [pid 9653:tid 9719] [client 172.202.74.222:20136] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afuLpqhJ49Xc4dqq0B6FcAAAABU"]
[Thu May 07 02:42:47.520454 2026] [:error] [pid 9664:tid 9771] [client 172.202.74.222:19991] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afuLpwH4OZbrg1SjsBOMywAAAIk"]
[Thu May 07 02:42:48.117286 2026] [:error] [pid 9659:tid 9755] [client 172.202.74.222:19968] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.dj/index.php"] [unique_id "afuLqPwJnWjd8JHpBtvAAwAAANU"]
[Thu May 07 02:42:48.607571 2026] [:error] [pid 9664:tid 9779] [client 172.202.74.222:20216] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afuLqAH4OZbrg1SjsBOMzwAAAJE"]
[Thu May 07 02:42:49.571192 2026] [:error] [pid 63810:tid 63828] [client 172.202.74.222:20084] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afuLqXpnbsN9Zf6i5IFX3gAAAY4"]
[Thu May 07 02:42:50.139372 2026] [:error] [pid 557:tid 582] [client 172.202.74.222:20062] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afuLqjZjFR8Vd8ce80BFlwAAAlc"]
[Thu May 07 02:42:50.808470 2026] [:error] [pid 557:tid 580] [client 172.202.74.222:19970] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afuLqjZjFR8Vd8ce80BFmAAAAlU"]
[Thu May 07 02:42:52.011307 2026] [:error] [pid 9653:tid 9712] [client 172.202.74.222:20103] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afuLrKhJ49Xc4dqq0B6FfQAAAA4"]
[Thu May 07 02:42:52.627457 2026] [:error] [pid 9653:tid 9715] [client 172.202.74.222:20145] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afuLrKhJ49Xc4dqq0B6FgAAAABE"]
[Thu May 07 02:42:53.165555 2026] [:error] [pid 9653:tid 9698] [client 172.202.74.222:20070] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afuLrahJ49Xc4dqq0B6FgQAAAAA"]
[Thu May 07 02:42:53.857921 2026] [:error] [pid 9653:tid 9703] [client 172.202.74.222:20069] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.tmb/"] [unique_id "afuLrahJ49Xc4dqq0B6FhQAAAAU"]
[Thu May 07 02:42:54.301981 2026] [:error] [pid 592:tid 612] [client 172.202.74.222:20191] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afuLrpiX28mb6xLi2PzPSwAAApA"]
[Thu May 07 02:42:55.487586 2026] [:error] [pid 482:tid 507] [client 172.202.74.222:20141] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afuLr8xs8HOc_nWgOW6stAAAAdU"]
[Thu May 07 02:42:56.476320 2026] [:error] [pid 9653:tid 9704] [client 172.202.74.222:19906] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afuLsKhJ49Xc4dqq0B6FiQAAAAY"]
[Thu May 07 02:42:57.168166 2026] [:error] [pid 9653:tid 9722] [client 172.202.74.222:19917] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/one.php"] [unique_id "afuLsahJ49Xc4dqq0B6FjAAAABg"]
[Thu May 07 02:42:57.882926 2026] [:error] [pid 9664:tid 9771] [client 172.202.74.222:20077] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afuLsQH4OZbrg1SjsBOM2AAAAIk"]
[Thu May 07 02:42:58.654794 2026] [:error] [pid 13414:tid 13425] [client 172.202.74.222:20095] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afuLskuJQpWjVpJTu_lF-QAAAQk"]
[Thu May 07 02:42:59.574021 2026] [:error] [pid 592:tid 600] [client 172.202.74.222:20093] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afuLs5iX28mb6xLi2PzPTAAAAoQ"]
[Thu May 07 02:43:00.389437 2026] [:error] [pid 9789:tid 9791] [client 172.202.74.222:20152] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no20.php"] [unique_id "afuLtD_YStPJSCHPkUXeqgAAAEA"]
[Thu May 07 02:43:01.007852 2026] [:error] [pid 9664:tid 9780] [client 172.202.74.222:20106] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afuLtQH4OZbrg1SjsBOM4gAAAJI"]
[Thu May 07 02:43:01.587679 2026] [:error] [pid 9664:tid 9765] [client 172.202.74.222:20168] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afuLtQH4OZbrg1SjsBOM5gAAAIM"]
[Thu May 07 02:43:02.232337 2026] [:error] [pid 9664:tid 9778] [client 172.202.74.222:20090] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afuLtgH4OZbrg1SjsBOM6AAAAJA"]
[Thu May 07 02:43:02.639458 2026] [:error] [pid 9653:tid 9701] [client 172.202.74.222:20124] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yasnu.php"] [unique_id "afuLtqhJ49Xc4dqq0B6FkgAAAAM"]
[Thu May 07 02:43:03.185567 2026] [:error] [pid 9664:tid 9771] [client 172.202.74.222:19974] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afuLtwH4OZbrg1SjsBOM7AAAAIk"]
[Thu May 07 02:43:03.665218 2026] [:error] [pid 9789:tid 9812] [client 172.202.74.222:20143] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afuLtz_YStPJSCHPkUXerwAAAFU"]
[Thu May 07 02:43:04.415361 2026] [:error] [pid 592:tid 618] [client 172.202.74.222:20078] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afuLuJiX28mb6xLi2PzPUAAAApM"]
[Thu May 07 02:43:05.235273 2026] [:error] [pid 9789:tid 9815] [client 172.202.74.222:20159] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sl.php"] [unique_id "afuLuT_YStPJSCHPkUXeuAAAAFg"]
[Thu May 07 02:43:06.371568 2026] [:error] [pid 9653:tid 9699] [client 172.202.74.222:20016] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afuLuqhJ49Xc4dqq0B6FmAAAAAE"]
[Thu May 07 02:43:07.305143 2026] [:error] [pid 557:tid 565] [client 172.202.74.222:20083] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afuLuzZjFR8Vd8ce80BFqwAAAkY"]
[Thu May 07 02:43:08.504942 2026] [:error] [pid 9789:tid 9812] [client 172.202.74.222:20130] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vuln.php"] [unique_id "afuLvD_YStPJSCHPkUXewgAAAFU"]
[Thu May 07 02:43:19.801704 2026] [:error] [pid 63810:tid 63817] [client 172.202.74.222:20057] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afuLx3pnbsN9Zf6i5IFX8gAAAYM"]
[Thu May 07 02:43:20.860276 2026] [:error] [pid 9653:tid 9712] [client 172.202.74.222:20210] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afuLyKhJ49Xc4dqq0B6FrgAAAA4"]
[Thu May 07 02:43:21.524696 2026] [:error] [pid 9659:tid 9736] [client 172.202.74.222:20043] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afuLyfwJnWjd8JHpBtvADwAAAMI"]
[Thu May 07 02:43:22.109850 2026] [:error] [pid 9659:tid 9747] [client 172.202.74.222:19924] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mode.php"] [unique_id "afuLyvwJnWjd8JHpBtvAEgAAAM0"]
[Thu May 07 02:43:23.784528 2026] [:error] [pid 482:tid 484] [client 172.202.74.222:20162] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afuLy8xs8HOc_nWgOW6suwAAAcA"]
[Thu May 07 02:43:24.733637 2026] [:error] [pid 482:tid 498] [client 172.202.74.222:20047] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afuLzMxs8HOc_nWgOW6sxgAAAc4"]
[Thu May 07 02:43:25.231091 2026] [:error] [pid 9653:tid 9701] [client 172.202.74.222:20146] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afuLzahJ49Xc4dqq0B6FwwAAAAM"]
[Thu May 07 02:43:26.022023 2026] [:error] [pid 13443:tid 13463] [client 172.202.74.222:20071] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2468.php"] [unique_id "afuLzgCyfZallDmsQre6xQAAAVI"]
[Thu May 07 02:43:26.579421 2026] [:error] [pid 9789:tid 9801] [client 172.202.74.222:20075] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afuLzj_YStPJSCHPkUXe4AAAAEo"]
[Thu May 07 02:43:27.106311 2026] [:error] [pid 9789:tid 9802] [client 172.202.74.222:20079] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afuLzz_YStPJSCHPkUXe4wAAAEs"]
[Thu May 07 02:43:27.599872 2026] [:error] [pid 13414:tid 13428] [client 172.202.74.222:20148] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afuLz0uJQpWjVpJTu_lGAwAAAQw"]
[Thu May 07 02:43:28.389841 2026] [:error] [pid 63810:tid 63820] [client 172.202.74.222:20011] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afuL0HpnbsN9Zf6i5IFX9gAAAYY"]
[Thu May 07 02:43:29.097321 2026] [:error] [pid 13414:tid 13430] [client 172.202.74.222:20160] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afuL0UuJQpWjVpJTu_lGBgAAAQ4"]
[Thu May 07 02:43:29.775029 2026] [:error] [pid 557:tid 568] [client 172.202.74.222:20051] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afuL0TZjFR8Vd8ce80BFwQAAAkk"]
[Thu May 07 02:43:30.460887 2026] [:error] [pid 9789:tid 9800] [client 172.202.74.222:19980] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afuL0j_YStPJSCHPkUXe5gAAAEk"]
[Thu May 07 02:43:31.038948 2026] [:error] [pid 9789:tid 9791] [client 172.202.74.222:20024] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afuL0z_YStPJSCHPkUXe6AAAAEA"]
[Thu May 07 02:43:31.505434 2026] [:error] [pid 9789:tid 9808] [client 172.202.74.222:20006] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afuL0z_YStPJSCHPkUXe6gAAAFE"]
[Thu May 07 02:43:32.064176 2026] [:error] [pid 557:tid 573] [client 172.202.74.222:20035] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afuL1DZjFR8Vd8ce80BFxgAAAk4"]
[Thu May 07 02:43:32.670829 2026] [:error] [pid 9653:tid 9706] [client 172.202.74.222:20093] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afuL1KhJ49Xc4dqq0B6FygAAAAg"]
[Thu May 07 02:43:33.325871 2026] [:error] [pid 9653:tid 9699] [client 172.202.74.222:20088] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amdin.php"] [unique_id "afuL1ahJ49Xc4dqq0B6FzQAAAAE"]
[Thu May 07 02:43:34.369692 2026] [:error] [pid 482:tid 485] [client 172.202.74.222:20205] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afuL1sxs8HOc_nWgOW6szwAAAcE"]
[Thu May 07 02:43:34.931171 2026] [:error] [pid 557:tid 579] [client 172.202.74.222:20049] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afuL1jZjFR8Vd8ce80BFyQAAAlQ"]
[Thu May 07 02:43:35.462245 2026] [:error] [pid 9659:tid 9743] [client 172.202.74.222:20211] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afuL1_wJnWjd8JHpBtvAJwAAAMk"]
[Thu May 07 02:43:36.496651 2026] [:error] [pid 9653:tid 9719] [client 172.202.74.222:20117] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/huya.php"] [unique_id "afuL2KhJ49Xc4dqq0B6F1AAAABU"]
[Thu May 07 02:43:37.201148 2026] [:error] [pid 9664:tid 9771] [client 172.202.74.222:20053] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afuL2QH4OZbrg1SjsBONCgAAAIk"]
[Thu May 07 02:43:38.606737 2026] [:error] [pid 557:tid 567] [client 172.202.74.222:20072] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afuL2jZjFR8Vd8ce80BF0QAAAkg"]
[Thu May 07 02:43:39.354559 2026] [:error] [pid 9664:tid 9786] [client 172.202.74.222:20039] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afuL2wH4OZbrg1SjsBONDwAAAJg"]
[Thu May 07 02:43:40.649099 2026] [:error] [pid 9789:tid 9804] [client 172.202.74.222:20082] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/puc.php"] [unique_id "afuL3D_YStPJSCHPkUXe9wAAAE0"]
[Thu May 07 02:43:41.865443 2026] [:error] [pid 9789:tid 9793] [client 172.202.74.222:20086] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afuL3T_YStPJSCHPkUXe_QAAAEI"]
[Thu May 07 02:43:43.048824 2026] [:error] [pid 13414:tid 13424] [client 172.202.74.222:20125] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afuL30uJQpWjVpJTu_lGDQAAAQg"]
[Thu May 07 02:43:44.730535 2026] [:error] [pid 63810:tid 63818] [client 172.202.74.222:20052] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afuL4HpnbsN9Zf6i5IFYAAAAAYQ"]
[Thu May 07 02:43:45.424474 2026] [:error] [pid 63810:tid 63819] [client 172.202.74.222:20182] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/themes.php"] [unique_id "afuL4XpnbsN9Zf6i5IFYAQAAAYU"]
[Thu May 07 02:43:46.051994 2026] [:error] [pid 13443:tid 13449] [client 172.202.74.222:20017] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afuL4gCyfZallDmsQre61QAAAUQ"]
[Thu May 07 02:43:46.927861 2026] [:error] [pid 9653:tid 9702] [client 172.202.74.222:20144] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afuL4qhJ49Xc4dqq0B6F1wAAAAQ"]
[Thu May 07 02:43:47.731085 2026] [:error] [pid 482:tid 491] [client 172.202.74.222:19921] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afuL48xs8HOc_nWgOW6s0wAAAcc"]
[Thu May 07 02:43:48.291986 2026] [:error] [pid 482:tid 484] [client 172.202.74.222:20157] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ewp.php"] [unique_id "afuL5Mxs8HOc_nWgOW6s1gAAAcA"]
[Thu May 07 02:43:48.906877 2026] [:error] [pid 557:tid 567] [client 172.202.74.222:19978] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afuL5DZjFR8Vd8ce80BF2AAAAkg"]
[Thu May 07 02:43:49.704548 2026] [:error] [pid 9664:tid 9767] [client 172.202.74.222:20019] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afuL5QH4OZbrg1SjsBONJAAAAIU"]
[Thu May 07 02:43:50.879527 2026] [:error] [pid 9789:tid 9813] [client 172.202.74.222:19995] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afuL5j_YStPJSCHPkUXfBAAAAFY"]
[Thu May 07 02:43:51.392600 2026] [:error] [pid 13443:tid 13468] [client 172.202.74.222:19972] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dx.php"] [unique_id "afuL5wCyfZallDmsQre62wAAAVc"]
[Thu May 07 02:43:52.075575 2026] [:error] [pid 9789:tid 9814] [client 172.202.74.222:20058] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afuL6D_YStPJSCHPkUXfCQAAAFc"]
[Thu May 07 02:43:53.683579 2026] [:error] [pid 9664:tid 9762] [client 172.202.74.222:20000] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afuL6QH4OZbrg1SjsBONLQAAAIA"]
[Thu May 07 02:43:54.299068 2026] [:error] [pid 13414:tid 13419] [client 172.202.74.222:20025] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afuL6kuJQpWjVpJTu_lGFAAAAQM"]
[Thu May 07 02:43:55.065482 2026] [:error] [pid 9789:tid 9809] [client 172.202.74.222:20149] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xff.php"] [unique_id "afuL6z_YStPJSCHPkUXfGgAAAFI"]
[Thu May 07 02:43:55.909827 2026] [:error] [pid 9653:tid 9713] [client 172.202.74.222:19986] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afuL66hJ49Xc4dqq0B6F3AAAAA8"]
[Thu May 07 02:43:57.068957 2026] [:error] [pid 13443:tid 13457] [client 172.202.74.222:20064] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afuL7QCyfZallDmsQre63QAAAUw"]
[Thu May 07 02:43:58.199286 2026] [:error] [pid 13443:tid 13445] [client 172.202.74.222:19988] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afuL7gCyfZallDmsQre63wAAAUA"]
[Thu May 07 02:43:58.933608 2026] [:error] [pid 557:tid 560] [client 172.202.74.222:20214] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lupo.php"] [unique_id "afuL7jZjFR8Vd8ce80BF3QAAAkE"]
[Thu May 07 02:43:59.671550 2026] [:error] [pid 482:tid 509] [client 172.202.74.222:20013] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afuL78xs8HOc_nWgOW6s4QAAAdc"]
[Thu May 07 02:44:00.585038 2026] [:error] [pid 13414:tid 13423] [client 172.202.74.222:20067] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afuL8EuJQpWjVpJTu_lGFgAAAQc"]
[Thu May 07 02:44:01.267909 2026] [:error] [pid 9789:tid 9814] [client 172.202.74.222:20132] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afuL8T_YStPJSCHPkUXfHgAAAFc"]
[Thu May 07 02:44:02.023831 2026] [:error] [pid 63810:tid 63836] [client 172.202.74.222:20122] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/awa.php"] [unique_id "afuL8npnbsN9Zf6i5IFYDAAAAZY"]
[Thu May 07 02:44:03.356056 2026] [:error] [pid 13414:tid 13428] [client 172.202.74.222:19999] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afuL80uJQpWjVpJTu_lGGgAAAQw"]
[Thu May 07 02:44:04.523778 2026] [:error] [pid 557:tid 578] [client 172.202.74.222:20065] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afuL9DZjFR8Vd8ce80BF4QAAAlM"]
[Thu May 07 02:44:05.303998 2026] [:error] [pid 557:tid 570] [client 172.202.74.222:20054] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afuL9TZjFR8Vd8ce80BF4wAAAks"]
[Thu May 07 02:44:05.783515 2026] [:error] [pid 557:tid 567] [client 172.202.74.222:20012] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/popo.php"] [unique_id "afuL9TZjFR8Vd8ce80BF5AAAAkg"]
[Thu May 07 02:44:06.327182 2026] [:error] [pid 13443:tid 13461] [client 172.202.74.222:19971] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afuL9gCyfZallDmsQre65AAAAVA"]
[Thu May 07 02:44:07.108337 2026] [:error] [pid 13443:tid 13448] [client 172.202.74.222:19989] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afuL9wCyfZallDmsQre65gAAAUM"]
[Thu May 07 02:44:07.556415 2026] [:error] [pid 9653:tid 9704] [client 172.202.74.222:19997] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afuL96hJ49Xc4dqq0B6F6gAAAAY"]
[Thu May 07 02:44:08.115672 2026] [:error] [pid 482:tid 495] [client 172.202.74.222:20220] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/13.php"] [unique_id "afuL-Mxs8HOc_nWgOW6s6wAAAcs"]
[Thu May 07 02:44:08.521221 2026] [:error] [pid 482:tid 488] [client 172.202.74.222:19982] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afuL-Mxs8HOc_nWgOW6s7QAAAcQ"]
[Thu May 07 02:44:09.035757 2026] [:error] [pid 13414:tid 13419] [client 172.202.74.222:20042] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afuL-UuJQpWjVpJTu_lGIgAAAQM"]
[Thu May 07 02:44:09.894830 2026] [:error] [pid 9664:tid 9773] [client 172.202.74.222:19977] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afuL-QH4OZbrg1SjsBONNwAAAIs"]
[Thu May 07 02:44:10.581142 2026] [:error] [pid 9789:tid 9795] [client 172.202.74.222:20045] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tews.php"] [unique_id "afuL-j_YStPJSCHPkUXfIgAAAEQ"]
[Thu May 07 02:44:11.221594 2026] [:error] [pid 9664:tid 9765] [client 172.202.74.222:20005] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afuL-wH4OZbrg1SjsBONPAAAAIM"]
[Thu May 07 02:44:11.758110 2026] [:error] [pid 9664:tid 9766] [client 172.202.74.222:20180] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afuL-wH4OZbrg1SjsBONPQAAAIQ"]
[Thu May 07 02:44:12.175638 2026] [:error] [pid 9789:tid 9808] [client 172.202.74.222:19938] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afuL_D_YStPJSCHPkUXfIwAAAFE"]
[Thu May 07 02:44:12.605346 2026] [:error] [pid 592:tid 615] [client 172.202.74.222:19859] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/moshou.php"] [unique_id "afuL_JiX28mb6xLi2PzPYgAAApE"]
[Thu May 07 02:44:13.188036 2026] [:error] [pid 592:tid 622] [client 172.202.74.222:19941] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afuL_ZiX28mb6xLi2PzPZQAAApc"]
[Thu May 07 02:44:13.732902 2026] [:error] [pid 9789:tid 9811] [client 172.202.74.222:20028] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afuL_T_YStPJSCHPkUXfJQAAAFQ"]
[Thu May 07 02:44:14.538367 2026] [:error] [pid 9653:tid 9722] [client 172.202.74.222:20066] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afuL_qhJ49Xc4dqq0B6F7AAAABg"]
[Thu May 07 02:44:15.127923 2026] [:error] [pid 9659:tid 9737] [client 172.202.74.222:19993] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/11.php"] [unique_id "afuL__wJnWjd8JHpBtvARQAAAMM"]
[Thu May 07 02:44:15.667867 2026] [:error] [pid 9664:tid 9785] [client 172.202.74.222:20061] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afuL_wH4OZbrg1SjsBONRAAAAJc"]
[Thu May 07 02:44:16.076691 2026] [:error] [pid 9653:tid 9718] [client 172.202.74.222:20020] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afuMAKhJ49Xc4dqq0B6F8gAAABQ"]
[Thu May 07 02:44:16.638708 2026] [:error] [pid 9664:tid 9786] [client 172.202.74.222:19930] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afuMAAH4OZbrg1SjsBONRgAAAJg"]
[Thu May 07 02:44:17.374960 2026] [:error] [pid 9664:tid 9780] [client 172.202.74.222:20010] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "afuMAQH4OZbrg1SjsBONRwAAAJI"]
[Thu May 07 02:44:18.015420 2026] [:error] [pid 13443:tid 13454] [client 172.202.74.222:19998] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afuMAgCyfZallDmsQre67AAAAUk"]
[Thu May 07 02:44:18.545490 2026] [:error] [pid 482:tid 488] [client 172.202.74.222:19922] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afuMAsxs8HOc_nWgOW6s9wAAAcQ"]
[Thu May 07 02:44:26.381125 2026] [:error] [pid 9789:tid 9801] [client 172.202.74.222:19932] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afuMCj_YStPJSCHPkUXfPAAAAEo"]
[Thu May 07 02:44:28.062586 2026] [:error] [pid 9659:tid 9735] [client 172.202.74.222:20156] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afuMDPwJnWjd8JHpBtvAkAAAAME"]
[Thu May 07 02:44:29.057708 2026] [:error] [pid 9664:tid 9767] [client 172.202.74.222:19950] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afuMDQH4OZbrg1SjsBONWQAAAIU"]
[Thu May 07 02:44:30.289425 2026] [:error] [pid 13443:tid 13465] [client 172.202.74.222:20076] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/6.php"] [unique_id "afuMDgCyfZallDmsQre69QAAAVQ"]
[Thu May 07 02:44:33.034991 2026] [:error] [pid 9653:tid 9708] [client 172.202.74.222:20120] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cjfuns.php"] [unique_id "afuMEahJ49Xc4dqq0B6GAgAAAAo"]
[Thu May 07 02:44:33.915249 2026] [:error] [pid 9653:tid 9707] [client 172.202.74.222:19979] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cjfuns.php"] [unique_id "afuMEahJ49Xc4dqq0B6GBgAAAAk"]
[Thu May 07 02:44:34.959753 2026] [:error] [pid 9664:tid 9780] [client 172.202.74.222:19958] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cjfuns.php"] [unique_id "afuMEgH4OZbrg1SjsBONnwAAAJI"]
[Thu May 07 02:44:35.546243 2026] [:error] [pid 9653:tid 9711] [client 172.202.74.222:19907] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cjfuns.php"] [unique_id "afuME6hJ49Xc4dqq0B6GEQAAAA0"]
[Thu May 07 02:44:36.170931 2026] [:error] [pid 9789:tid 9803] [client 172.202.74.222:19895] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "afuMFD_YStPJSCHPkUXfPgAAAEw"]
[Thu May 07 02:44:36.895332 2026] [:error] [pid 9664:tid 9773] [client 172.202.74.222:20008] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "afuMFAH4OZbrg1SjsBONrAAAAIs"]
[Thu May 07 02:44:37.553702 2026] [:error] [pid 9659:tid 9750] [client 172.202.74.222:20129] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "afuMFfwJnWjd8JHpBtvAsQAAANA"]
[Thu May 07 02:44:39.958928 2026] [:error] [pid 9664:tid 9764] [client 172.202.74.222:20014] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class.php"] [unique_id "afuMFwH4OZbrg1SjsBONsAAAAII"]
[Thu May 07 02:44:40.841552 2026] [:error] [pid 9664:tid 9774] [client 172.202.74.222:19983] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afuMGAH4OZbrg1SjsBONswAAAIw"]
[Thu May 07 02:44:41.757966 2026] [:error] [pid 9789:tid 9801] [client 172.202.74.222:20068] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afuMGT_YStPJSCHPkUXfRQAAAEo"]
[Thu May 07 02:44:43.248686 2026] [:error] [pid 9653:tid 9720] [client 172.202.74.222:19931] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afuMG6hJ49Xc4dqq0B6GIwAAABY"]
[Thu May 07 02:44:43.756723 2026] [:error] [pid 9789:tid 9799] [client 172.202.74.222:20002] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/100.php"] [unique_id "afuMGz_YStPJSCHPkUXfSwAAAEg"]
[Thu May 07 02:44:44.295224 2026] [:error] [pid 9659:tid 9744] [client 172.202.74.222:20030] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afuMHPwJnWjd8JHpBtvAsgAAAMo"]
[Thu May 07 02:44:45.029053 2026] [:error] [pid 13443:tid 13451] [client 172.202.74.222:19955] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afuMHQCyfZallDmsQre7AgAAAUY"]
[Thu May 07 02:44:46.134319 2026] [:error] [pid 9659:tid 9735] [client 172.202.74.222:19905] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afuMHvwJnWjd8JHpBtvAuAAAAME"]
[Thu May 07 02:44:47.128714 2026] [:error] [pid 9659:tid 9752] [client 172.202.74.222:20091] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afuMH_wJnWjd8JHpBtvAuwAAANI"]
[Thu May 07 02:44:47.851092 2026] [:error] [pid 9659:tid 9743] [client 172.202.74.222:20021] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afuMH_wJnWjd8JHpBtvAvAAAAMk"]
[Thu May 07 02:44:48.681846 2026] [:error] [pid 63810:tid 63821] [client 172.202.74.222:19850] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afuMIHpnbsN9Zf6i5IFYMwAAAYc"]
[Thu May 07 02:44:49.587338 2026] [:error] [pid 482:tid 498] [client 172.202.74.222:19914] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afuMIcxs8HOc_nWgOW6tGgAAAc4"]
[Thu May 07 02:44:50.443402 2026] [:error] [pid 482:tid 484] [client 172.202.74.222:19963] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2026w.php"] [unique_id "afuMIsxs8HOc_nWgOW6tIAAAAcA"]
[Thu May 07 02:44:51.078870 2026] [:error] [pid 482:tid 489] [client 172.202.74.222:19969] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afuMI8xs8HOc_nWgOW6tIwAAAcU"]
[Thu May 07 02:44:51.516007 2026] [:error] [pid 9789:tid 9797] [client 172.202.74.222:19926] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afuMIz_YStPJSCHPkUXfWAAAAEY"]
[Thu May 07 02:44:52.162339 2026] [:error] [pid 13414:tid 13437] [client 172.202.74.222:20027] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afuMJEuJQpWjVpJTu_lGKQAAARU"]
[Thu May 07 02:44:53.013916 2026] [:error] [pid 482:tid 492] [client 172.202.74.222:20123] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/about.php"] [unique_id "afuMJcxs8HOc_nWgOW6tJgAAAcg"]
[Thu May 07 02:44:53.916624 2026] [:error] [pid 13414:tid 13425] [client 172.202.74.222:20063] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afuMJUuJQpWjVpJTu_lGLAAAAQk"]
[Thu May 07 02:44:54.505134 2026] [:error] [pid 13414:tid 13430] [client 172.202.74.222:19928] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afuMJkuJQpWjVpJTu_lGLgAAAQ4"]
[Thu May 07 02:44:55.723164 2026] [:error] [pid 9789:tid 9814] [client 172.202.74.222:20092] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afuMJz_YStPJSCHPkUXfXAAAAFc"]
[Thu May 07 02:44:56.737516 2026] [:error] [pid 9659:tid 9748] [client 172.202.74.222:19943] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afuMKPwJnWjd8JHpBtvA0QAAAM4"]
[Thu May 07 02:44:57.381619 2026] [:error] [pid 557:tid 561] [client 172.202.74.222:19996] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afuMKTZjFR8Vd8ce80BF-QAAAkI"]
[Thu May 07 02:44:58.546194 2026] [:error] [pid 9653:tid 9703] [client 172.202.74.222:19851] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afuMKqhJ49Xc4dqq0B6GQQAAAAU"]
[Thu May 07 02:45:00.351726 2026] [:error] [pid 9653:tid 9701] [client 172.202.74.222:20134] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afuMLKhJ49Xc4dqq0B6GRgAAAAM"]
[Thu May 07 02:45:01.251564 2026] [:error] [pid 482:tid 503] [client 172.202.74.222:20015] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "afuMLcxs8HOc_nWgOW6tMgAAAdM"]
[Thu May 07 02:45:01.810307 2026] [:error] [pid 557:tid 560] [client 172.202.74.222:19840] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afuMLTZjFR8Vd8ce80BF_gAAAkE"]
[Thu May 07 02:45:02.660288 2026] [:error] [pid 9789:tid 9796] [client 172.202.74.222:19854] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afuMLj_YStPJSCHPkUXfXwAAAEU"]
[Thu May 07 02:45:03.307758 2026] [:error] [pid 557:tid 574] [client 172.202.74.222:19947] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afuMLzZjFR8Vd8ce80BF_wAAAk8"]
[Thu May 07 02:45:04.121504 2026] [:error] [pid 9659:tid 9755] [client 172.202.74.222:19908] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin.php"] [unique_id "afuMMPwJnWjd8JHpBtvA4QAAANU"]
[Thu May 07 02:45:05.339928 2026] [:error] [pid 482:tid 485] [client 172.202.74.222:19853] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afuMMcxs8HOc_nWgOW6tOQAAAcE"]
[Thu May 07 02:45:05.909088 2026] [:error] [pid 13414:tid 13426] [client 172.202.74.222:20087] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afuMMUuJQpWjVpJTu_lGNAAAAQo"]
[Thu May 07 02:45:06.872399 2026] [:error] [pid 13414:tid 13425] [client 172.202.74.222:19803] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afuMMkuJQpWjVpJTu_lGOwAAAQk"]
[Thu May 07 02:45:07.565303 2026] [:error] [pid 63810:tid 63832] [client 172.202.74.222:19939] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/inege.php"] [unique_id "afuMM3pnbsN9Zf6i5IFYQAAAAZI"]
[Thu May 07 02:45:08.793594 2026] [:error] [pid 482:tid 498] [client 172.202.74.222:19900] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "afuMNMxs8HOc_nWgOW6tQQAAAc4"]
[Thu May 07 02:45:09.481633 2026] [:error] [pid 9659:tid 9746] [client 172.202.74.222:19933] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "afuMNfwJnWjd8JHpBtvA5gAAAMw"]
[Thu May 07 02:45:10.203118 2026] [:error] [pid 592:tid 600] [client 172.202.74.222:20085] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "afuMNpiX28mb6xLi2PzPcwAAAoQ"]
[Thu May 07 02:45:11.164725 2026] [:error] [pid 9664:tid 9779] [client 172.202.74.222:19952] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/classgoto24.php"] [unique_id "afuMNwH4OZbrg1SjsBONzAAAAJE"]
[Thu May 07 02:45:11.767853 2026] [:error] [pid 9664:tid 9765] [client 172.202.74.222:19957] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afuMNwH4OZbrg1SjsBONzwAAAIM"]
[Thu May 07 02:45:12.430855 2026] [:error] [pid 63810:tid 63834] [client 172.202.74.222:19934] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afuMOHpnbsN9Zf6i5IFYQgAAAZQ"]
[Thu May 07 02:45:12.978954 2026] [:error] [pid 9664:tid 9786] [client 172.202.74.222:19848] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afuMOAH4OZbrg1SjsBON1AAAAJg"]
[Thu May 07 02:45:13.673117 2026] [:error] [pid 13443:tid 13446] [client 172.202.74.222:19948] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/no1.php"] [unique_id "afuMOQCyfZallDmsQre7DAAAAUE"]
[Thu May 07 02:45:14.389151 2026] [:error] [pid 482:tid 485] [client 172.202.74.222:19857] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afuMOsxs8HOc_nWgOW6tSwAAAcE"]
[Thu May 07 02:45:15.178338 2026] [:error] [pid 63810:tid 63823] [client 172.202.74.222:19967] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afuMO3pnbsN9Zf6i5IFYRAAAAYk"]
[Thu May 07 02:45:15.885419 2026] [:error] [pid 13443:tid 13466] [client 172.202.74.222:19911] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afuMOwCyfZallDmsQre7EgAAAVU"]
[Thu May 07 02:45:16.981533 2026] [:error] [pid 482:tid 498] [client 172.202.74.222:19870] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/w2025.php"] [unique_id "afuMPMxs8HOc_nWgOW6tUAAAAc4"]
[Thu May 07 02:45:19.564907 2026] [:error] [pid 63810:tid 63817] [client 172.202.74.222:19910] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afuMP3pnbsN9Zf6i5IFYUAAAAYM"]
[Thu May 07 02:45:20.223893 2026] [:error] [pid 9659:tid 9745] [client 172.202.74.222:20001] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afuMQPwJnWjd8JHpBtvA9AAAAMs"]
[Thu May 07 02:45:21.297558 2026] [:error] [pid 63810:tid 63818] [client 172.202.74.222:20018] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afuMQXpnbsN9Zf6i5IFYVwAAAYQ"]
[Thu May 07 02:45:22.437439 2026] [:error] [pid 9659:tid 9752] [client 172.202.74.222:19937] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fvvff.php"] [unique_id "afuMQvwJnWjd8JHpBtvBAwAAANI"]
[Thu May 07 02:45:23.813048 2026] [:error] [pid 9653:tid 9701] [client 172.202.74.222:19844] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afuMQ6hJ49Xc4dqq0B6GTQAAAAM"]
[Thu May 07 02:45:25.216603 2026] [:error] [pid 9789:tid 9792] [client 172.202.74.222:19944] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "afuMRT_YStPJSCHPkUXfbwAAAEE"]
[Thu May 07 02:45:33.574537 2026] [:error] [pid 9659:tid 9758] [client 172.202.74.222:19935] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afuMTfwJnWjd8JHpBtvBIQAAANg"]
[Thu May 07 02:45:34.414837 2026] [:error] [pid 9664:tid 9776] [client 172.202.74.222:19915] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afuMTgH4OZbrg1SjsBOOGQAAAI4"]
[Thu May 07 02:45:35.162686 2026] [:error] [pid 9659:tid 9741] [client 172.202.74.222:20109] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afuMT_wJnWjd8JHpBtvBJAAAAMc"]
[Thu May 07 02:45:35.842977 2026] [:error] [pid 9659:tid 9752] [client 172.202.74.222:19852] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afuMT_wJnWjd8JHpBtvBJgAAANI"]
[Thu May 07 02:45:36.765670 2026] [:error] [pid 13414:tid 13421] [client 172.202.74.222:19954] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afuMUEuJQpWjVpJTu_lGTAAAAQU"]
[Thu May 07 02:45:38.125998 2026] [:error] [pid 9659:tid 9739] [client 172.202.74.222:19990] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afuMUvwJnWjd8JHpBtvBKQAAAMU"]
[Thu May 07 02:45:39.316478 2026] [:error] [pid 9664:tid 9768] [client 172.202.74.222:19919] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afuMUwH4OZbrg1SjsBOOHwAAAIY"]
[Thu May 07 02:45:40.282702 2026] [:error] [pid 592:tid 598] [client 172.202.74.222:19964] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "afuMVJiX28mb6xLi2PzPegAAAoI"]
[Thu May 07 02:45:41.613734 2026] [:error] [pid 9664:tid 9782] [client 172.202.74.222:20212] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afuMVQH4OZbrg1SjsBOOJwAAAJQ"]
[Thu May 07 02:45:42.687000 2026] [:error] [pid 9653:tid 9711] [client 172.202.74.222:20195] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afuMVqhJ49Xc4dqq0B6GUAAAAA0"]
[Thu May 07 02:45:43.170268 2026] [:error] [pid 9653:tid 9716] [client 172.202.74.222:19920] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afuMV6hJ49Xc4dqq0B6GVQAAABI"]
[Thu May 07 02:45:43.810130 2026] [:error] [pid 9659:tid 9737] [client 172.202.74.222:20165] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "afuMV_wJnWjd8JHpBtvBMAAAAMM"]
[Thu May 07 02:45:44.346398 2026] [:error] [pid 9789:tid 9796] [client 172.202.74.222:19877] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afuMWD_YStPJSCHPkUXfkQAAAEU"]
[Thu May 07 02:45:44.903362 2026] [:error] [pid 13443:tid 13445] [client 172.202.74.222:19824] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afuMWACyfZallDmsQre7IQAAAUA"]
[Thu May 07 02:45:45.545477 2026] [:error] [pid 9664:tid 9780] [client 172.202.74.222:19909] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afuMWQH4OZbrg1SjsBOOLQAAAJI"]
[Thu May 07 02:45:46.055784 2026] [:error] [pid 13414:tid 13417] [client 172.202.74.222:20026] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afuMWkuJQpWjVpJTu_lGVQAAAQE"]
[Thu May 07 02:45:46.683928 2026] [:error] [pid 9664:tid 9785] [client 172.202.74.222:20196] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afuMWgH4OZbrg1SjsBOOLwAAAJc"]
[Thu May 07 02:45:47.182972 2026] [:error] [pid 9653:tid 9705] [client 172.202.74.222:20219] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afuMW6hJ49Xc4dqq0B6GXAAAAAc"]
[Thu May 07 02:45:47.764802 2026] [:error] [pid 9659:tid 9746] [client 172.202.74.222:19867] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afuMW_wJnWjd8JHpBtvBPAAAAMw"]
[Thu May 07 02:45:48.419769 2026] [:error] [pid 482:tid 493] [client 172.202.74.222:19869] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/admin.php"] [unique_id "afuMXMxs8HOc_nWgOW6tegAAAck"]
[Thu May 07 02:45:48.903321 2026] [:error] [pid 13443:tid 13448] [client 172.202.74.222:20022] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "afuMXACyfZallDmsQre7IwAAAUM"]
[Thu May 07 02:45:50.006247 2026] [:error] [pid 9659:tid 9745] [client 172.202.74.222:20135] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "afuMXvwJnWjd8JHpBtvBPQAAAMs"]
[Thu May 07 02:45:51.009297 2026] [:error] [pid 9653:tid 9718] [client 172.202.74.222:19843] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "afuMX6hJ49Xc4dqq0B6GYwAAABQ"]
[Thu May 07 02:45:51.942437 2026] [:error] [pid 9653:tid 9705] [client 172.202.74.222:20029] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/8xyz.php"] [unique_id "afuMX6hJ49Xc4dqq0B6GZwAAAAc"]
[Thu May 07 02:45:52.529742 2026] [:error] [pid 482:tid 490] [client 172.202.74.222:20183] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afuMYMxs8HOc_nWgOW6tggAAAcY"]
[Thu May 07 02:45:53.201183 2026] [:error] [pid 482:tid 486] [client 172.202.74.222:19936] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afuMYcxs8HOc_nWgOW6thQAAAcI"]
[Thu May 07 02:45:53.617275 2026] [:error] [pid 9653:tid 9711] [client 172.202.74.222:20192] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afuMYahJ49Xc4dqq0B6GbAAAAA0"]
[Thu May 07 02:45:54.245964 2026] [:error] [pid 9653:tid 9699] [client 172.202.74.222:20081] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/adminfuns.php"] [unique_id "afuMYqhJ49Xc4dqq0B6GbwAAAAE"]
[Thu May 07 02:45:55.087678 2026] [:error] [pid 9653:tid 9703] [client 172.202.74.222:19904] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "afuMY6hJ49Xc4dqq0B6GdAAAAAU"]
[Thu May 07 02:45:55.540734 2026] [:error] [pid 9659:tid 9756] [client 172.202.74.222:19927] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "afuMY_wJnWjd8JHpBtvBPwAAANY"]
[Thu May 07 02:45:56.327117 2026] [:error] [pid 9653:tid 9705] [client 172.202.74.222:20163] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "afuMZKhJ49Xc4dqq0B6GdwAAAAc"]
[Thu May 07 02:45:57.128634 2026] [:error] [pid 9653:tid 9721] [client 172.202.74.222:19879] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/goods.php"] [unique_id "afuMZahJ49Xc4dqq0B6GewAAABc"]
[Thu May 07 02:45:58.446913 2026] [:error] [pid 9659:tid 9755] [client 172.202.74.222:19946] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afuMZvwJnWjd8JHpBtvBQwAAANU"]
[Thu May 07 02:45:59.454291 2026] [:error] [pid 482:tid 498] [client 172.202.74.222:19890] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afuMZ8xs8HOc_nWgOW6tjQAAAc4"]
[Thu May 07 02:46:00.473198 2026] [:error] [pid 482:tid 484] [client 172.202.74.222:19888] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afuMaMxs8HOc_nWgOW6tkQAAAcA"]
[Thu May 07 02:46:01.226751 2026] [:error] [pid 9659:tid 9753] [client 172.202.74.222:19897] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "afuMafwJnWjd8JHpBtvBRwAAANM"]
[Thu May 07 02:46:02.292261 2026] [:error] [pid 9659:tid 9743] [client 172.202.74.222:20031] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afuMavwJnWjd8JHpBtvBTQAAAMk"]
[Thu May 07 02:46:03.503990 2026] [:error] [pid 9664:tid 9763] [client 172.202.74.222:20202] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afuMawH4OZbrg1SjsBOONQAAAIE"]
[Thu May 07 02:46:04.468568 2026] [:error] [pid 9659:tid 9739] [client 172.202.74.222:20209] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afuMbPwJnWjd8JHpBtvBVQAAAMU"]
[Thu May 07 02:46:05.579008 2026] [:error] [pid 9653:tid 9699] [client 172.202.74.222:19866] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/222.php"] [unique_id "afuMbahJ49Xc4dqq0B6GiwAAAAE"]
[Thu May 07 02:46:06.554231 2026] [:error] [pid 9653:tid 9700] [client 172.202.74.222:19976] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afuMbqhJ49Xc4dqq0B6GjgAAAAI"]
[Thu May 07 02:46:07.114999 2026] [:error] [pid 63810:tid 63831] [client 172.202.74.222:20102] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afuMb3pnbsN9Zf6i5IFYbAAAAZE"]
[Thu May 07 02:46:07.888277 2026] [:error] [pid 9653:tid 9701] [client 172.202.74.222:20107] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afuMb6hJ49Xc4dqq0B6GkQAAAAM"]
[Thu May 07 02:46:08.889421 2026] [:error] [pid 13443:tid 13449] [client 172.202.74.222:19846] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afuMcACyfZallDmsQre7LQAAAUQ"]
[Thu May 07 02:46:09.958341 2026] [:error] [pid 592:tid 611] [client 172.202.74.222:19776] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afuMcZiX28mb6xLi2PzPjAAAAo8"]
[Thu May 07 02:46:10.529619 2026] [:error] [pid 13414:tid 13433] [client 172.202.74.222:19949] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afuMckuJQpWjVpJTu_lGawAAARE"]
[Thu May 07 02:46:11.084675 2026] [:error] [pid 9659:tid 9750] [client 172.202.74.222:20189] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afuMc_wJnWjd8JHpBtvBWgAAANA"]
[Thu May 07 02:46:12.310366 2026] [:error] [pid 592:tid 599] [client 172.202.74.222:19951] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fff.php"] [unique_id "afuMdJiX28mb6xLi2PzPkAAAAoM"]
[Thu May 07 02:46:12.902784 2026] [:error] [pid 13443:tid 13447] [client 172.202.74.222:19849] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afuMdACyfZallDmsQre7MAAAAUI"]
[Thu May 07 02:46:13.604494 2026] [:error] [pid 9653:tid 9708] [client 172.202.74.222:19785] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afuMdahJ49Xc4dqq0B6GlgAAAAo"]
[Thu May 07 02:46:14.960813 2026] [:error] [pid 557:tid 566] [client 172.202.74.222:19960] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afuMdjZjFR8Vd8ce80BGEgAAAkc"]
[Thu May 07 02:46:16.134637 2026] [:error] [pid 9653:tid 9709] [client 172.202.74.222:19962] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afuMeKhJ49Xc4dqq0B6GngAAAAs"]
[Thu May 07 02:46:17.003816 2026] [:error] [pid 13414:tid 13416] [client 172.202.74.222:19966] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afuMeUuJQpWjVpJTu_lGbwAAAQA"]
[Thu May 07 02:46:17.932182 2026] [:error] [pid 9659:tid 9743] [client 172.202.74.222:19856] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afuMefwJnWjd8JHpBtvBZQAAAMk"]
[Thu May 07 02:46:18.708288 2026] [:error] [pid 63810:tid 63822] [client 172.202.74.222:20032] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afuMenpnbsN9Zf6i5IFYcAAAAYg"]
[Thu May 07 02:46:19.763485 2026] [:error] [pid 9789:tid 9812] [client 172.202.74.222:19887] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/makeasmtp.php"] [unique_id "afuMez_YStPJSCHPkUXfpQAAAFU"]
[Thu May 07 02:46:20.358998 2026] [:error] [pid 63810:tid 63824] [client 172.202.74.222:20166] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afuMfHpnbsN9Zf6i5IFYcwAAAYo"]
[Thu May 07 02:46:20.913355 2026] [:error] [pid 13414:tid 13421] [client 172.202.74.222:20116] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afuMfEuJQpWjVpJTu_lGcQAAAQU"]
[Thu May 07 02:46:21.607778 2026] [:error] [pid 482:tid 504] [client 172.202.74.222:19861] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afuMfcxs8HOc_nWgOW6tnwAAAdQ"]
[Thu May 07 02:46:22.706907 2026] [:error] [pid 592:tid 624] [client 172.202.74.222:20194] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin1.php"] [unique_id "afuMfpiX28mb6xLi2PzPmwAAApg"]
[Thu May 07 02:46:24.199550 2026] [:error] [pid 592:tid 617] [client 172.202.74.222:19777] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afuMgJiX28mb6xLi2PzPnQAAApI"]
[Thu May 07 02:46:25.704761 2026] [:error] [pid 63810:tid 63823] [client 172.202.74.222:19884] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afuMgXpnbsN9Zf6i5IFYdwAAAYk"]
[Thu May 07 02:46:26.628188 2026] [:error] [pid 9664:tid 9763] [client 172.202.74.222:19815] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afuMggH4OZbrg1SjsBOOPwAAAIE"]
[Thu May 07 02:46:27.341210 2026] [:error] [pid 482:tid 500] [client 172.202.74.222:20131] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afuMg8xs8HOc_nWgOW6tqQAAAdA"]
[Thu May 07 02:46:28.534587 2026] [:error] [pid 482:tid 490] [client 172.202.74.222:20111] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afuMhMxs8HOc_nWgOW6tsAAAAcY"]
[Thu May 07 02:46:30.563358 2026] [:error] [pid 13414:tid 13424] [client 172.202.74.222:19940] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afuMhkuJQpWjVpJTu_lGfAAAAQg"]
[Thu May 07 02:46:31.764045 2026] [:error] [pid 592:tid 604] [client 172.202.74.222:20179] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/BDKR28WP.php"] [unique_id "afuMh5iX28mb6xLi2PzPpAAAAog"]
[Thu May 07 02:46:39.870646 2026] [:error] [pid 13414:tid 13440] [client 172.202.74.222:20198] [client 172.202.74.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afuMj0uJQpWjVpJTu_lGmgAAARg"]
[Thu May 07 02:46:40.282865 2026] [:error] [pid 482:tid 492] [client 172.202.74.222:20222] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "afuMkMxs8HOc_nWgOW6tuAAAAcg"]
[Thu May 07 02:46:41.447508 2026] [:error] [pid 9789:tid 9811] [client 172.202.74.222:20185] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "afuMkT_YStPJSCHPkUXfwAAAAFQ"]
[Thu May 07 02:46:42.713678 2026] [:error] [pid 13443:tid 13460] [client 172.202.74.222:20033] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "afuMkgCyfZallDmsQre7QQAAAU8"]
[Thu May 07 02:46:43.808935 2026] [:error] [pid 9659:tid 9755] [client 172.202.74.222:19913] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/f35.php"] [unique_id "afuMk_wJnWjd8JHpBtvBgAAAANU"]
[Thu May 07 02:46:44.667949 2026] [:error] [pid 13414:tid 13423] [client 172.202.74.222:20100] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afuMlEuJQpWjVpJTu_lGoAAAAQc"]
[Thu May 07 02:46:45.373865 2026] [:error] [pid 13414:tid 13438] [client 172.202.74.222:20099] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afuMlUuJQpWjVpJTu_lGogAAARY"]
[Thu May 07 02:46:46.752139 2026] [:error] [pid 13414:tid 13435] [client 172.202.74.222:20110] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afuMlkuJQpWjVpJTu_lGpAAAARM"]
[Thu May 07 02:46:47.203274 2026] [:error] [pid 9659:tid 9754] [client 172.202.74.222:19874] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afuMl_wJnWjd8JHpBtvBhAAAANQ"]
[Thu May 07 02:46:48.661496 2026] [:error] [pid 9664:tid 9766] [client 172.202.74.222:20171] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afuMmAH4OZbrg1SjsBOOSAAAAIQ"]
[Thu May 07 02:46:49.732993 2026] [:error] [pid 9789:tid 9794] [client 172.202.74.222:20175] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afuMmT_YStPJSCHPkUXf0AAAAEM"]
[Thu May 07 02:46:50.308560 2026] [:error] [pid 9789:tid 9809] [client 172.202.74.222:20218] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afuMmj_YStPJSCHPkUXf0QAAAFI"]
[Thu May 07 02:46:51.323470 2026] [:error] [pid 9664:tid 9776] [client 172.202.74.222:20217] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afuMmwH4OZbrg1SjsBOOTgAAAI4"]
[Thu May 07 02:46:52.517010 2026] [:error] [pid 9664:tid 9771] [client 172.202.74.222:20172] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afuMnAH4OZbrg1SjsBOOUgAAAIk"]
[Thu May 07 02:46:53.505263 2026] [:error] [pid 9664:tid 9782] [client 172.202.74.222:20213] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afuMnQH4OZbrg1SjsBOOVAAAAJQ"]
[Thu May 07 02:46:54.168247 2026] [:error] [pid 9789:tid 9805] [client 172.202.74.222:19923] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afuMnj_YStPJSCHPkUXf1wAAAE4"]
[Thu May 07 02:46:55.549067 2026] [:error] [pid 9789:tid 9810] [client 172.202.74.222:20098] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "afuMnz_YStPJSCHPkUXf2QAAAFM"]
[Thu May 07 02:46:57.212581 2026] [:error] [pid 9659:tid 9742] [client 172.202.74.222:19916] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afuMofwJnWjd8JHpBtvBiAAAAMg"]
[Thu May 07 02:46:59.428175 2026] [:error] [pid 9659:tid 9748] [client 172.202.74.222:20112] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afuMo_wJnWjd8JHpBtvBigAAAM4"]
[Thu May 07 02:47:01.630855 2026] [:error] [pid 9653:tid 9719] [client 172.202.74.222:20208] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afuMpahJ49Xc4dqq0B6GpgAAABU"]
[Thu May 07 02:47:03.669576 2026] [:error] [pid 9653:tid 9722] [client 172.202.74.222:20126] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/in.php"] [unique_id "afuMp6hJ49Xc4dqq0B6GqAAAABg"]
[Thu May 07 02:47:06.263672 2026] [:error] [pid 9653:tid 9717] [client 172.202.74.222:20118] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afuMqqhJ49Xc4dqq0B6GqwAAABM"]
[Thu May 07 02:47:07.225016 2026] [:error] [pid 9789:tid 9813] [client 172.202.74.222:20040] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afuMqz_YStPJSCHPkUXf4gAAAFY"]
[Thu May 07 02:47:07.916847 2026] [:error] [pid 9664:tid 9762] [client 172.202.74.222:19965] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afuMqwH4OZbrg1SjsBOOYgAAAIA"]
[Thu May 07 02:47:09.050480 2026] [:error] [pid 482:tid 494] [client 172.202.74.222:20133] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gssdd.php"] [unique_id "afuMrcxs8HOc_nWgOW6twQAAAco"]
[Thu May 07 02:47:10.447595 2026] [:error] [pid 482:tid 509] [client 172.202.74.222:20204] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afuMrsxs8HOc_nWgOW6tyAAAAdc"]
[Thu May 07 02:47:12.215159 2026] [:error] [pid 9653:tid 9700] [client 172.202.74.222:20187] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afuMsKhJ49Xc4dqq0B6G0AAAAAI"]
[Thu May 07 02:47:14.310263 2026] [:error] [pid 9789:tid 9808] [client 172.202.74.222:20114] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afuMsj_YStPJSCHPkUXf5gAAAFE"]
[Thu May 07 02:47:16.198807 2026] [:error] [pid 9789:tid 9802] [client 172.202.74.222:20101] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afuMtD_YStPJSCHPkUXf6AAAAEs"]
[Thu May 07 02:47:17.608250 2026] [:error] [pid 9789:tid 9811] [client 172.202.74.222:20186] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afuMtT_YStPJSCHPkUXf6wAAAFQ"]
[Thu May 07 02:47:23.337694 2026] [:error] [pid 13414:tid 13429] [client 172.202.74.222:20167] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afuMu0uJQpWjVpJTu_lGzAAAAQ0"]
[Thu May 07 02:47:24.086144 2026] [:error] [pid 9653:tid 9715] [client 172.202.74.222:20147] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afuMvKhJ49Xc4dqq0B6G3gAAABE"]
[Thu May 07 02:47:24.591789 2026] [:error] [pid 13443:tid 13452] [client 172.202.74.222:20096] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bs1.php"] [unique_id "afuMvACyfZallDmsQre7SgAAAUc"]
[Thu May 07 02:47:25.267464 2026] [:error] [pid 63810:tid 63836] [client 172.202.74.222:19973] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afuMvXpnbsN9Zf6i5IFY5wAAAZY"]
[Thu May 07 02:47:25.686832 2026] [:error] [pid 13443:tid 13466] [client 172.202.74.222:20158] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afuMvQCyfZallDmsQre7SwAAAVU"]
[Thu May 07 02:47:26.316676 2026] [:error] [pid 13443:tid 13459] [client 172.202.74.222:20128] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afuMvgCyfZallDmsQre7TAAAAU4"]
[Thu May 07 02:47:27.149061 2026] [:error] [pid 9789:tid 9799] [client 172.202.74.222:20188] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afuMvz_YStPJSCHPkUXf8wAAAEg"]
[Thu May 07 02:47:27.768110 2026] [:error] [pid 13414:tid 13432] [client 172.202.74.222:20223] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afuMv0uJQpWjVpJTu_lG0QAAARA"]
[Thu May 07 02:47:28.788798 2026] [:error] [pid 9789:tid 9792] [client 172.202.74.222:20161] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afuMwD_YStPJSCHPkUXf9AAAAEE"]
[Thu May 07 02:47:29.639701 2026] [:error] [pid 9789:tid 9809] [client 172.202.74.222:19863] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afuMwT_YStPJSCHPkUXf9gAAAFI"]
[Thu May 07 02:47:30.535534 2026] [:error] [pid 9653:tid 9714] [client 172.202.74.222:20207] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gettest.php"] [unique_id "afuMwqhJ49Xc4dqq0B6G4gAAABA"]
[Thu May 07 02:47:31.413128 2026] [:error] [pid 9789:tid 9815] [client 172.202.74.222:20138] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afuMwz_YStPJSCHPkUXf9wAAAFg"]
[Thu May 07 02:47:31.959126 2026] [:error] [pid 482:tid 485] [client 172.202.74.222:19956] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afuMw8xs8HOc_nWgOW6t1AAAAcE"]
[Thu May 07 02:47:32.422140 2026] [:error] [pid 482:tid 484] [client 172.202.74.222:19780] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afuMxMxs8HOc_nWgOW6t1QAAAcA"]
[Thu May 07 02:47:33.445666 2026] [:error] [pid 482:tid 494] [client 172.202.74.222:20184] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file48.php"] [unique_id "afuMxcxs8HOc_nWgOW6t2wAAAco"]
[Thu May 07 02:47:34.102304 2026] [:error] [pid 9664:tid 9773] [client 172.202.74.222:20097] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afuMxgH4OZbrg1SjsBOOaAAAAIs"]
[Thu May 07 02:47:34.703974 2026] [:error] [pid 9664:tid 9770] [client 172.202.74.222:20197] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afuMxgH4OZbrg1SjsBOOagAAAIg"]
[Thu May 07 02:47:35.335956 2026] [:error] [pid 9653:tid 9699] [client 172.202.74.222:20173] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afuMx6hJ49Xc4dqq0B6G5wAAAAE"]
[Thu May 07 02:47:36.069456 2026] [:error] [pid 482:tid 501] [client 172.202.74.222:20141] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/"] [unique_id "afuMyMxs8HOc_nWgOW6t4QAAAdE"]
[Thu May 07 02:47:36.566556 2026] [:error] [pid 9653:tid 9703] [client 172.202.74.222:20139] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afuMyKhJ49Xc4dqq0B6G6AAAAAU"]
[Thu May 07 02:47:37.229020 2026] [:error] [pid 482:tid 488] [client 172.202.74.222:20115] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afuMycxs8HOc_nWgOW6t5QAAAcQ"]
[Thu May 07 02:47:37.860299 2026] [:error] [pid 9659:tid 9753] [client 172.202.74.222:20106] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afuMyfwJnWjd8JHpBtvBnwAAANM"]
[Thu May 07 02:47:38.549294 2026] [:error] [pid 9659:tid 9734] [client 172.202.74.222:20153] [client 172.202.74.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afuMyvwJnWjd8JHpBtvBoAAAAMA"]
[Thu May 07 03:16:40.419039 2026] [:error] [pid 9664:tid 9776] [client 172.182.195.90:56031] [client 172.182.195.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.182.195.90, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "afuTmAH4OZbrg1SjsBOX5wAAAI4"]
[Thu May 07 04:04:31.126976 2026] [:error] [pid 29607:tid 29691] [client 187.127.229.51:57524] [client 187.127.229.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "afuez6bP7TJOAh7WSUNCVAAAAJc"]
[Thu May 07 04:04:35.119068 2026] [:error] [pid 29605:tid 29624] [client 187.127.229.51:57546] [client 187.127.229.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "afue04nxrTjETioEY0TFqAAAAAo"]
[Thu May 07 05:25:34.325365 2026] [:error] [pid 29606:tid 29645] [client 49.51.253.26:40066] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afuxzhR5HjZ1PlSAiKtfmwAAAEQ"]
[Thu May 07 07:57:47.624126 2026] [:error] [pid 4539:tid 4552] [client 43.131.32.36:47262] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afvVe4PEZE1565sDGnx4QgAAAQs"]
[Thu May 07 08:26:09.498850 2026] [:error] [pid 4539:tid 4555] [client 4.206.17.23:14294] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "afvcIYPEZE1565sDGnyJugAAAQ4"]
[Thu May 07 08:26:10.389836 2026] [:error] [pid 4539:tid 4562] [client 4.206.17.23:14320] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "afvcIoPEZE1565sDGnyJvgAAARU"]
[Thu May 07 08:26:11.263775 2026] [:error] [pid 29710:tid 29729] [client 4.206.17.23:14313] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "afvcI_0atTQld9Y2ht8kyQAAANE"]
[Thu May 07 08:26:12.348871 2026] [:error] [pid 29710:tid 29715] [client 4.206.17.23:14329] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/elp.php"] [unique_id "afvcJP0atTQld9Y2ht8k2AAAAMM"]
[Thu May 07 08:26:14.209895 2026] [:error] [pid 29710:tid 29736] [client 4.206.17.23:14324] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "afvcJv0atTQld9Y2ht8k6AAAANg"]
[Thu May 07 08:26:14.931347 2026] [:error] [pid 29710:tid 29722] [client 4.206.17.23:14215] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "afvcJv0atTQld9Y2ht8k7QAAAMo"]
[Thu May 07 08:26:16.709663 2026] [:error] [pid 4539:tid 4554] [client 4.206.17.23:14277] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "afvcKIPEZE1565sDGnyJ0QAAAQ0"]
[Thu May 07 08:26:18.134737 2026] [:error] [pid 29606:tid 29661] [client 4.206.17.23:14334] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zc-243.php"] [unique_id "afvcKhR5HjZ1PlSAiKuRnwAAAFQ"]
[Thu May 07 08:26:19.312780 2026] [:error] [pid 4539:tid 4553] [client 4.206.17.23:14281] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkyac.php"] [unique_id "afvcK4PEZE1565sDGnyJ3gAAAQw"]
[Thu May 07 08:26:20.738460 2026] [:error] [pid 4539:tid 4562] [client 4.206.17.23:14328] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkyac.php"] [unique_id "afvcLIPEZE1565sDGnyJ6AAAARU"]
[Thu May 07 08:26:22.337940 2026] [:error] [pid 29606:tid 29646] [client 4.206.17.23:14214] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkyac.php"] [unique_id "afvcLhR5HjZ1PlSAiKuRpQAAAEU"]
[Thu May 07 08:26:24.796949 2026] [:error] [pid 4539:tid 4560] [client 4.206.17.23:14226] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bkyac.php"] [unique_id "afvcMIPEZE1565sDGnyKBwAAARM"]
[Thu May 07 08:26:26.446790 2026] [:error] [pid 4539:tid 4559] [client 4.206.17.23:14315] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "afvcMoPEZE1565sDGnyKEwAAARI"]
[Thu May 07 08:26:28.356897 2026] [:error] [pid 29710:tid 29715] [client 4.206.17.23:14249] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "afvcNP0atTQld9Y2ht8k_gAAAMM"]
[Thu May 07 08:26:29.799695 2026] [:error] [pid 29710:tid 29729] [client 4.206.17.23:14317] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "afvcNf0atTQld9Y2ht8lBgAAANE"]
[Thu May 07 08:26:31.201143 2026] [:error] [pid 29606:tid 29656] [client 4.206.17.23:14303] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wziar1.php"] [unique_id "afvcNxR5HjZ1PlSAiKuRrQAAAE8"]
[Thu May 07 08:26:32.247404 2026] [:error] [pid 29710:tid 29713] [client 4.206.17.23:14283] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afvcOP0atTQld9Y2ht8lEgAAAME"]
[Thu May 07 08:26:34.247794 2026] [:error] [pid 29605:tid 29628] [client 4.206.17.23:14285] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afvcOonxrTjETioEY0QJyQAAAA4"]
[Thu May 07 08:26:35.438617 2026] [:error] [pid 29607:tid 29679] [client 4.206.17.23:14280] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afvcO6bP7TJOAh7WSUOimAAAAIs"]
[Thu May 07 08:26:36.956332 2026] [:error] [pid 4539:tid 4556] [client 4.206.17.23:14296] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afvcPIPEZE1565sDGnyKTAAAAQ8"]
[Thu May 07 08:26:37.883013 2026] [:error] [pid 29607:tid 29681] [client 4.206.17.23:14212] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "afvcPabP7TJOAh7WSUOipAAAAI0"]
[Thu May 07 08:26:38.669370 2026] [:error] [pid 29607:tid 29680] [client 4.206.17.23:14224] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "afvcPqbP7TJOAh7WSUOiqQAAAIw"]
[Thu May 07 08:26:39.447147 2026] [:error] [pid 4539:tid 4557] [client 4.206.17.23:14312] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "afvcP4PEZE1565sDGnyKTwAAARA"]
[Thu May 07 08:26:40.571084 2026] [:error] [pid 29607:tid 29691] [client 4.206.17.23:14284] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/7logs.php"] [unique_id "afvcQKbP7TJOAh7WSUOirAAAAJc"]
[Thu May 07 08:26:41.555615 2026] [:error] [pid 4539:tid 4559] [client 4.206.17.23:14333] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afvcQYPEZE1565sDGnyKVgAAARI"]
[Thu May 07 08:26:43.538845 2026] [:error] [pid 29710:tid 29719] [client 4.206.17.23:14250] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afvcQ_0atTQld9Y2ht8lJAAAAMc"]
[Thu May 07 08:26:47.033085 2026] [:error] [pid 29607:tid 29692] [client 4.206.17.23:14292] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afvcR6bP7TJOAh7WSUOiuAAAAJg"]
[Thu May 07 08:26:50.511927 2026] [:error] [pid 29607:tid 29683] [client 4.206.17.23:14290] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afvcSqbP7TJOAh7WSUOivgAAAI8"]
[Thu May 07 08:26:52.726853 2026] [:error] [pid 29710:tid 29718] [client 4.206.17.23:14233] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "afvcTP0atTQld9Y2ht8lNgAAAMY"]
[Thu May 07 08:26:55.026850 2026] [:error] [pid 29605:tid 29631] [client 4.206.17.23:14273] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "afvcT4nxrTjETioEY0QJ3gAAABE"]
[Thu May 07 08:26:56.459225 2026] [:error] [pid 4539:tid 4549] [client 4.206.17.23:14318] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "afvcUIPEZE1565sDGnyKdwAAAQg"]
[Thu May 07 08:26:58.010737 2026] [:error] [pid 29607:tid 29676] [client 4.206.17.23:14219] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/as.php"] [unique_id "afvcUqbP7TJOAh7WSUOiyQAAAIg"]
[Thu May 07 08:26:59.394535 2026] [:error] [pid 29710:tid 29725] [client 4.206.17.23:14282] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "afvcU_0atTQld9Y2ht8lRAAAAM0"]
[Thu May 07 08:27:00.243086 2026] [:error] [pid 4539:tid 4554] [client 4.206.17.23:14278] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "afvcVIPEZE1565sDGnyKhwAAAQ0"]
[Thu May 07 08:27:02.128410 2026] [:error] [pid 4539:tid 4552] [client 4.206.17.23:14332] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "afvcVoPEZE1565sDGnyKjAAAAQs"]
[Thu May 07 08:27:03.562086 2026] [:error] [pid 29605:tid 29628] [client 4.206.17.23:14308] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ctex1.php"] [unique_id "afvcV4nxrTjETioEY0QJ4AAAAA4"]
[Thu May 07 08:27:05.493533 2026] [:error] [pid 29607:tid 29684] [client 4.206.17.23:14222] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "afvcWabP7TJOAh7WSUOiygAAAJA"]
[Thu May 07 08:27:06.172194 2026] [:error] [pid 29710:tid 29728] [client 4.206.17.23:14211] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "afvcWv0atTQld9Y2ht8lWwAAANA"]
[Thu May 07 08:27:07.195320 2026] [:error] [pid 29607:tid 29687] [client 4.206.17.23:14228] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lb.php"] [unique_id "afvcW6bP7TJOAh7WSUOizwAAAJM"]
[Thu May 07 08:27:19.504115 2026] [:error] [pid 4539:tid 4546] [client 4.206.17.23:14291] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "afvcZ4PEZE1565sDGnyKyAAAAQU"]
[Thu May 07 08:27:20.401167 2026] [:error] [pid 4539:tid 4561] [client 4.206.17.23:14301] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "afvcaIPEZE1565sDGnyKzwAAARQ"]
[Thu May 07 08:27:21.366212 2026] [:error] [pid 29605:tid 29634] [client 4.206.17.23:14287] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "afvcaYnxrTjETioEY0QJ-wAAABQ"]
[Thu May 07 08:27:22.553477 2026] [:error] [pid 4539:tid 4558] [client 4.206.17.23:14330] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bfil.php"] [unique_id "afvcaoPEZE1565sDGnyK2gAAARE"]
[Thu May 07 08:27:23.209600 2026] [:error] [pid 29710:tid 29727] [client 4.206.17.23:14323] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "afvca_0atTQld9Y2ht8lZQAAAM8"]
[Thu May 07 08:27:24.166807 2026] [:error] [pid 4539:tid 4553] [client 4.206.17.23:14218] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "afvcbIPEZE1565sDGnyK5QAAAQw"]
[Thu May 07 08:27:24.690404 2026] [:error] [pid 4539:tid 4565] [client 4.206.17.23:14221] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "afvcbIPEZE1565sDGnyK5wAAARg"]
[Thu May 07 08:27:25.447022 2026] [:error] [pid 4539:tid 4545] [client 4.206.17.23:14210] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/abrand.php"] [unique_id "afvcbYPEZE1565sDGnyK6gAAAQQ"]
[Thu May 07 08:27:26.435717 2026] [:error] [pid 4539:tid 4541] [client 4.206.17.23:14152] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "afvcboPEZE1565sDGnyK7AAAAQA"]
[Thu May 07 08:27:27.108168 2026] [:error] [pid 29607:tid 29670] [client 4.206.17.23:14297] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "afvcb6bP7TJOAh7WSUOi7QAAAII"]
[Thu May 07 08:27:28.465727 2026] [:error] [pid 4539:tid 4545] [client 4.206.17.23:14246] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "afvccIPEZE1565sDGnyK8QAAAQQ"]
[Thu May 07 08:27:29.333374 2026] [:error] [pid 4539:tid 4543] [client 4.206.17.23:14225] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "afvccYPEZE1565sDGnyK9AAAAQI"]
[Thu May 07 08:27:31.489187 2026] [:error] [pid 4539:tid 4561] [client 4.206.17.23:14160] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "afvcc4PEZE1565sDGnyK_AAAARQ"]
[Thu May 07 08:27:32.940565 2026] [:error] [pid 29607:tid 29668] [client 4.206.17.23:14275] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "afvcdKbP7TJOAh7WSUOi9AAAAIA"]
[Thu May 07 08:27:34.042657 2026] [:error] [pid 29606:tid 29644] [client 4.206.17.23:14321] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "afvcdhR5HjZ1PlSAiKuSCgAAAEM"]
[Thu May 07 08:27:35.099420 2026] [:error] [pid 29607:tid 29679] [client 4.206.17.23:14149] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amwxl.php"] [unique_id "afvcd6bP7TJOAh7WSUOi-gAAAIs"]
[Thu May 07 08:27:37.033016 2026] [:error] [pid 4539:tid 4547] [client 4.206.17.23:14272] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "afvceYPEZE1565sDGnyLBwAAAQY"]
[Thu May 07 08:27:39.148938 2026] [:error] [pid 29607:tid 29679] [client 4.206.17.23:14236] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "afvce6bP7TJOAh7WSUOjBwAAAIs"]
[Thu May 07 08:27:40.168853 2026] [:error] [pid 4539:tid 4543] [client 4.206.17.23:14266] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "afvcfIPEZE1565sDGnyLFgAAAQI"]
[Thu May 07 08:27:40.891329 2026] [:error] [pid 4539:tid 4562] [client 4.206.17.23:14208] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "afvcfIPEZE1565sDGnyLHAAAARU"]
[Thu May 07 08:27:42.007658 2026] [:error] [pid 29607:tid 29678] [client 4.206.17.23:14305] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "afvcfqbP7TJOAh7WSUOjHAAAAIo"]
[Thu May 07 08:27:43.376031 2026] [:error] [pid 4539:tid 4565] [client 4.206.17.23:14244] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "afvcf4PEZE1565sDGnyLJgAAARg"]
[Thu May 07 08:27:44.954777 2026] [:error] [pid 29607:tid 29692] [client 4.206.17.23:14245] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "afvcgKbP7TJOAh7WSUOjNgAAAJg"]
[Thu May 07 08:27:45.906048 2026] [:error] [pid 29605:tid 29625] [client 4.206.17.23:14293] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/userfuns.php"] [unique_id "afvcgYnxrTjETioEY0QKGAAAAAs"]
[Thu May 07 08:27:47.774691 2026] [:error] [pid 4539:tid 4563] [client 4.206.17.23:14170] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "afvcg4PEZE1565sDGnyLOgAAARY"]
[Thu May 07 08:27:49.420064 2026] [:error] [pid 29710:tid 29713] [client 4.206.17.23:14252] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "afvchf0atTQld9Y2ht8luwAAAME"]
[Thu May 07 08:27:50.297556 2026] [:error] [pid 4539:tid 4554] [client 4.206.17.23:14300] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "afvchoPEZE1565sDGnyLRQAAAQ0"]
[Thu May 07 08:27:50.976012 2026] [:error] [pid 29606:tid 29661] [client 4.206.17.23:14155] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/menu.php"] [unique_id "afvchhR5HjZ1PlSAiKuSLwAAAFQ"]
[Thu May 07 08:27:51.500110 2026] [:error] [pid 4539:tid 4561] [client 4.206.17.23:14223] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "afvch4PEZE1565sDGnyLSQAAARQ"]
[Thu May 07 08:27:52.619724 2026] [:error] [pid 29605:tid 29614] [client 4.206.17.23:14241] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "afvciInxrTjETioEY0QKGgAAAAA"]
[Thu May 07 08:27:53.239291 2026] [:error] [pid 29605:tid 29637] [client 4.206.17.23:14184] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "afvciYnxrTjETioEY0QKGwAAABc"]
[Thu May 07 08:27:54.052793 2026] [:error] [pid 29710:tid 29733] [client 4.206.17.23:14178] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-good.php"] [unique_id "afvciv0atTQld9Y2ht8lwQAAANU"]
[Thu May 07 08:27:54.678534 2026] [:error] [pid 29605:tid 29627] [client 4.206.17.23:14325] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "afvcionxrTjETioEY0QKIQAAAA0"]
[Thu May 07 08:27:55.458883 2026] [:error] [pid 29710:tid 29715] [client 4.206.17.23:14274] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "afvci_0atTQld9Y2ht8lwwAAAMM"]
[Thu May 07 08:27:56.162664 2026] [:error] [pid 29607:tid 29671] [client 4.206.17.23:14260] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "afvcjKbP7TJOAh7WSUOjTQAAAIM"]
[Thu May 07 08:27:56.995320 2026] [:error] [pid 29607:tid 29691] [client 4.206.17.23:14299] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/saorix1.php"] [unique_id "afvcjKbP7TJOAh7WSUOjUgAAAJc"]
[Thu May 07 08:27:58.514836 2026] [:error] [pid 4539:tid 4559] [client 4.206.17.23:14327] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "afvcjoPEZE1565sDGnyLUQAAARI"]
[Thu May 07 08:28:00.557099 2026] [:error] [pid 4539:tid 4551] [client 4.206.17.23:14209] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "afvckIPEZE1565sDGnyLVgAAAQo"]
[Thu May 07 08:28:01.954923 2026] [:error] [pid 4539:tid 4546] [client 4.206.17.23:14271] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "afvckYPEZE1565sDGnyLXAAAAQU"]
[Thu May 07 08:28:03.577587 2026] [:error] [pid 29606:tid 29644] [client 4.206.17.23:14168] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/byypas.php"] [unique_id "afvckxR5HjZ1PlSAiKuSOAAAAEM"]
[Thu May 07 08:28:04.859567 2026] [:error] [pid 4539:tid 4559] [client 4.206.17.23:14239] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "afvclIPEZE1565sDGnyLZAAAARI"]
[Thu May 07 08:28:05.574702 2026] [:error] [pid 29607:tid 29671] [client 4.206.17.23:14161] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "afvclabP7TJOAh7WSUOjWAAAAIM"]
[Thu May 07 08:28:06.133055 2026] [:error] [pid 29710:tid 29728] [client 4.206.17.23:14311] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "afvclv0atTQld9Y2ht8l2gAAANA"]
[Thu May 07 08:28:07.004264 2026] [:error] [pid 29605:tid 29634] [client 4.206.17.23:14335] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rip.php"] [unique_id "afvcl4nxrTjETioEY0QKLAAAABQ"]
[Thu May 07 08:28:07.808682 2026] [:error] [pid 4539:tid 4555] [client 4.206.17.23:14162] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "afvcl4PEZE1565sDGnyLbgAAAQ4"]
[Thu May 07 08:28:08.465892 2026] [:error] [pid 29606:tid 29641] [client 4.206.17.23:14270] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "afvcmBR5HjZ1PlSAiKuSPAAAAEA"]
[Thu May 07 08:28:09.076533 2026] [:error] [pid 4539:tid 4551] [client 4.206.17.23:14304] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "afvcmYPEZE1565sDGnyLcQAAAQo"]
[Thu May 07 08:28:10.322080 2026] [:error] [pid 29606:tid 29649] [client 4.206.17.23:14176] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gptsh.php"] [unique_id "afvcmhR5HjZ1PlSAiKuSQAAAAEg"]
[Thu May 07 08:28:11.651388 2026] [:error] [pid 29606:tid 29661] [client 4.206.17.23:14220] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "afvcmxR5HjZ1PlSAiKuSQwAAAFQ"]
[Thu May 07 08:28:12.602885 2026] [:error] [pid 4539:tid 4545] [client 4.206.17.23:14150] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "afvcnIPEZE1565sDGnyLegAAAQQ"]
[Thu May 07 08:28:14.044768 2026] [:error] [pid 29606:tid 29645] [client 4.206.17.23:14279] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/0x.php"] [unique_id "afvcnhR5HjZ1PlSAiKuSRgAAAEQ"]
[Thu May 07 08:28:27.107538 2026] [:error] [pid 29606:tid 29647] [client 4.206.17.23:14269] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "afvcqxR5HjZ1PlSAiKuSWQAAAEY"]
[Thu May 07 08:28:27.703610 2026] [:error] [pid 29606:tid 29644] [client 4.206.17.23:14242] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "afvcqxR5HjZ1PlSAiKuSWwAAAEM"]
[Thu May 07 08:28:28.248569 2026] [:error] [pid 29607:tid 29669] [client 4.206.17.23:14238] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "afvcrKbP7TJOAh7WSUOjcwAAAIE"]
[Thu May 07 08:28:28.934932 2026] [:error] [pid 4539:tid 4548] [client 4.206.17.23:14286] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp5.php"] [unique_id "afvcrIPEZE1565sDGnyLpAAAAQc"]
[Thu May 07 08:28:29.632447 2026] [:error] [pid 29606:tid 29659] [client 4.206.17.23:14145] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "afvcrRR5HjZ1PlSAiKuSXgAAAFI"]
[Thu May 07 08:28:30.992126 2026] [:error] [pid 29606:tid 29653] [client 4.206.17.23:14251] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "afvcrhR5HjZ1PlSAiKuSYgAAAEw"]
[Thu May 07 08:28:31.959678 2026] [:error] [pid 29607:tid 29678] [client 4.206.17.23:14326] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "afvcr6bP7TJOAh7WSUOjeAAAAIo"]
[Thu May 07 08:28:35.963527 2026] [:error] [pid 54504:tid 54509] [client 4.206.17.23:14231] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yuzuru1.php"] [unique_id "afvcs06fd1iKODhqgEp-QwAAAAA"]
[Thu May 07 08:28:37.392759 2026] [:error] [pid 54612:tid 54615] [client 4.206.17.23:14213] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "afvctX87XjkKNyN-HGEBJAAAAQE"]
[Thu May 07 08:28:38.546147 2026] [:error] [pid 54505:tid 54562] [client 4.206.17.23:14148] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "afvctlacGcwp63z1MVputwAAAIQ"]
[Thu May 07 08:28:40.121476 2026] [:error] [pid 54612:tid 54621] [client 4.206.17.23:14314] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "afvcuH87XjkKNyN-HGEBKAAAAQc"]
[Thu May 07 08:28:44.362838 2026] [:error] [pid 54784:tid 54791] [client 4.206.17.23:14322] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file61.php"] [unique_id "afvcvGGvhmRakTfI38TlvQAAAAM"]
[Thu May 07 08:28:46.481921 2026] [:error] [pid 54786:tid 54817] [client 4.206.17.23:14257] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "afvcvk-WVzjtYHe1oaKRbgAAAMI"]
[Thu May 07 08:28:47.505662 2026] [:error] [pid 54786:tid 54820] [client 4.206.17.23:14310] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "afvcv0-WVzjtYHe1oaKRcAAAAMU"]
[Thu May 07 08:28:48.317108 2026] [:error] [pid 54871:tid 54880] [client 4.206.17.23:14092] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "afvcwMDyFL64KsgOO0lUkgAAAQc"]
[Thu May 07 08:28:48.858191 2026] [:error] [pid 54786:tid 54824] [client 4.206.17.23:14306] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/Cap.php"] [unique_id "afvcwE-WVzjtYHe1oaKRdQAAAMk"]
[Thu May 07 08:28:49.306396 2026] [:error] [pid 54784:tid 54811] [client 4.206.17.23:14094] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "afvcwWGvhmRakTfI38Tl3QAAABc"]
[Thu May 07 08:28:49.883461 2026] [:error] [pid 54786:tid 54826] [client 4.206.17.23:14234] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "afvcwU-WVzjtYHe1oaKRdwAAAMs"]
[Thu May 07 08:28:50.340487 2026] [:error] [pid 54785:tid 54848] [client 4.206.17.23:14331] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "afvcwqLIuZFeImmooK1ZvgAAAIY"]
[Thu May 07 08:28:50.911730 2026] [:error] [pid 54785:tid 54850] [client 4.206.17.23:14095] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tfm.php"] [unique_id "afvcwqLIuZFeImmooK1ZwQAAAIg"]
[Thu May 07 08:28:54.379046 2026] [:error] [pid 54972:tid 54978] [client 4.206.17.23:14188] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "afvcxqbCRSGFglLQFBScagAAAAI"]
[Thu May 07 08:28:55.158248 2026] [:error] [pid 54972:tid 54997] [client 4.206.17.23:14159] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "afvcx6bCRSGFglLQFBScewAAABU"]
[Thu May 07 08:28:55.854941 2026] [:error] [pid 55058:tid 55062] [client 4.206.17.23:14276] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "afvcx7zCyO8U2nJT_0VUCQAAAEI"]
[Thu May 07 08:28:56.541741 2026] [:error] [pid 55058:tid 55067] [client 4.206.17.23:14237] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xper1.php"] [unique_id "afvcyLzCyO8U2nJT_0VUDQAAAEc"]
[Thu May 07 08:28:57.106541 2026] [:error] [pid 54974:tid 55032] [client 4.206.17.23:14217] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "afvcyWsRuAjNUHMAP0SKWQAAAMI"]
[Thu May 07 08:28:57.778883 2026] [:error] [pid 54974:tid 55035] [client 4.206.17.23:14289] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "afvcyWsRuAjNUHMAP0SKXQAAAMU"]
[Thu May 07 08:28:58.829600 2026] [:error] [pid 55058:tid 55071] [client 4.206.17.23:14144] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "afvcyrzCyO8U2nJT_0VUEQAAAEs"]
[Thu May 07 08:28:59.949942 2026] [:error] [pid 55058:tid 55076] [client 4.206.17.23:14243] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/t00l.php"] [unique_id "afvcy7zCyO8U2nJT_0VUFgAAAFA"]
[Thu May 07 08:29:00.770090 2026] [:error] [pid 55058:tid 55079] [client 4.206.17.23:14091] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "afvczLzCyO8U2nJT_0VUGQAAAFM"]
[Thu May 07 08:29:01.393132 2026] [:error] [pid 55058:tid 55084] [client 4.206.17.23:14172] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "afvczbzCyO8U2nJT_0VUGwAAAFg"]
[Thu May 07 08:29:01.966439 2026] [:error] [pid 54973:tid 55019] [client 4.206.17.23:14253] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "afvcze0gRfv66dYTV3AfmAAAAJA"]
[Thu May 07 08:29:02.976306 2026] [:error] [pid 55058:tid 55065] [client 4.206.17.23:14267] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/casp1.php"] [unique_id "afvczrzCyO8U2nJT_0VUIgAAAEU"]
[Thu May 07 08:29:03.524431 2026] [:error] [pid 55058:tid 55072] [client 4.206.17.23:14102] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acc.php"] [unique_id "afvcz7zCyO8U2nJT_0VUJAAAAEw"]
[Thu May 07 08:29:04.138450 2026] [:error] [pid 55058:tid 55073] [client 4.206.17.23:14173] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acc.php"] [unique_id "afvc0LzCyO8U2nJT_0VUKAAAAE0"]
[Thu May 07 08:29:05.319733 2026] [:error] [pid 54974:tid 55030] [client 4.206.17.23:14235] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acc.php"] [unique_id "afvc0WsRuAjNUHMAP0SKZQAAAMA"]
[Thu May 07 08:29:06.030925 2026] [:error] [pid 55058:tid 55069] [client 4.206.17.23:14199] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acc.php"] [unique_id "afvc0rzCyO8U2nJT_0VULwAAAEk"]
[Thu May 07 08:29:06.920008 2026] [:error] [pid 54973:tid 55004] [client 4.206.17.23:14165] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "afvc0u0gRfv66dYTV3AfnAAAAIE"]
[Thu May 07 08:29:07.825330 2026] [:error] [pid 54973:tid 55010] [client 4.206.17.23:14099] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "afvc0-0gRfv66dYTV3AfngAAAIc"]
[Thu May 07 08:29:08.724057 2026] [:error] [pid 54974:tid 55031] [client 4.206.17.23:14180] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "afvc1GsRuAjNUHMAP0SKaAAAAME"]
[Thu May 07 08:29:10.127953 2026] [:error] [pid 55058:tid 55071] [client 4.206.17.23:14255] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "afvc1rzCyO8U2nJT_0VUNAAAAEs"]
[Thu May 07 08:29:11.134125 2026] [:error] [pid 55058:tid 55068] [client 4.206.17.23:14121] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "afvc17zCyO8U2nJT_0VUOQAAAEg"]
[Thu May 07 08:29:12.356141 2026] [:error] [pid 54973:tid 55013] [client 4.206.17.23:14096] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "afvc2O0gRfv66dYTV3AfsAAAAIo"]
[Thu May 07 08:29:13.541596 2026] [:error] [pid 54973:tid 55023] [client 4.206.17.23:14302] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "afvc2e0gRfv66dYTV3AftwAAAJQ"]
[Thu May 07 08:29:14.395780 2026] [:error] [pid 55058:tid 55068] [client 4.206.17.23:14154] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xltt.php"] [unique_id "afvc2rzCyO8U2nJT_0VUPwAAAEg"]
[Thu May 07 08:29:14.868843 2026] [:error] [pid 54973:tid 55005] [client 4.206.17.23:14216] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "afvc2u0gRfv66dYTV3AfuwAAAII"]
[Thu May 07 08:29:15.315770 2026] [:error] [pid 55058:tid 55076] [client 4.206.17.23:14153] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "afvc27zCyO8U2nJT_0VURAAAAFA"]
[Thu May 07 08:29:15.777753 2026] [:error] [pid 55058:tid 55075] [client 4.206.17.23:14254] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "afvc27zCyO8U2nJT_0VUSQAAAE8"]
[Thu May 07 08:29:16.335555 2026] [:error] [pid 54973:tid 55015] [client 4.206.17.23:14258] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/packsin1.php"] [unique_id "afvc3O0gRfv66dYTV3AfvAAAAIw"]
[Thu May 07 08:29:17.062170 2026] [:error] [pid 54972:tid 54999] [client 4.206.17.23:14167] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "afvc3abCRSGFglLQFBSckAAAABc"]
[Thu May 07 08:29:17.611037 2026] [:error] [pid 55058:tid 55060] [client 4.206.17.23:14309] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "afvc3bzCyO8U2nJT_0VUWgAAAEA"]
[Thu May 07 08:29:18.041853 2026] [:error] [pid 54973:tid 55016] [client 4.206.17.23:14223] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "afvc3u0gRfv66dYTV3AfwgAAAI0"]
[Thu May 07 08:29:18.537601 2026] [:error] [pid 55058:tid 55078] [client 4.206.17.23:14262] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/press.php"] [unique_id "afvc3rzCyO8U2nJT_0VUYwAAAFI"]
[Thu May 07 08:29:19.019723 2026] [:error] [pid 55058:tid 55081] [client 4.206.17.23:14202] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "afvc37zCyO8U2nJT_0VUaAAAAFU"]
[Thu May 07 08:29:19.569768 2026] [:error] [pid 54972:tid 54994] [client 4.206.17.23:14240] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "afvc36bCRSGFglLQFBSckwAAABI"]
[Thu May 07 08:29:20.002925 2026] [:error] [pid 54972:tid 54995] [client 4.206.17.23:14104] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "afvc4KbCRSGFglLQFBSclQAAABM"]
[Thu May 07 08:29:20.443614 2026] [:error] [pid 55058:tid 55073] [client 4.206.17.23:14195] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws78.php"] [unique_id "afvc4LzCyO8U2nJT_0VUdAAAAE0"]
[Thu May 07 08:29:20.958743 2026] [:error] [pid 54973:tid 55005] [client 4.206.17.23:14204] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "afvc4O0gRfv66dYTV3AfxAAAAII"]
[Thu May 07 08:29:21.736569 2026] [:error] [pid 54973:tid 55008] [client 4.206.17.23:14133] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "afvc4e0gRfv66dYTV3AfxgAAAIU"]
[Thu May 07 08:29:22.311287 2026] [:error] [pid 54973:tid 55026] [client 4.206.17.23:14295] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "afvc4u0gRfv66dYTV3AfyQAAAJc"]
[Thu May 07 08:29:22.992874 2026] [:error] [pid 54972:tid 54985] [client 4.206.17.23:14196] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/motu.php"] [unique_id "afvc4qbCRSGFglLQFBScogAAAAk"]
[Thu May 07 08:29:23.676966 2026] [:error] [pid 54974:tid 55031] [client 4.206.17.23:14247] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afvc42sRuAjNUHMAP0SKcQAAAME"]
[Thu May 07 08:29:24.312455 2026] [:error] [pid 54974:tid 55036] [client 4.206.17.23:14157] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afvc5GsRuAjNUHMAP0SKcwAAAMY"]
[Thu May 07 08:29:24.780444 2026] [:error] [pid 55058:tid 55069] [client 4.206.17.23:14163] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afvc5LzCyO8U2nJT_0VUkwAAAEk"]
[Thu May 07 08:29:25.432487 2026] [:error] [pid 54974:tid 55042] [client 4.206.17.23:14151] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "afvc5WsRuAjNUHMAP0SKdwAAAMw"]
[Thu May 07 08:29:32.773564 2026] [:error] [pid 54973:tid 55018] [client 4.206.17.23:14331] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsjzs.php"] [unique_id "afvc7O0gRfv66dYTV3Af5QAAAI8"]
[Thu May 07 08:29:33.798367 2026] [:error] [pid 54974:tid 55036] [client 4.206.17.23:14214] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsjzs.php"] [unique_id "afvc7WsRuAjNUHMAP0SKggAAAMY"]
[Thu May 07 08:29:34.755020 2026] [:error] [pid 55058:tid 55083] [client 4.206.17.23:14273] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsjzs.php"] [unique_id "afvc7rzCyO8U2nJT_0VUywAAAFc"]
[Thu May 07 08:29:35.947705 2026] [:error] [pid 54972:tid 54989] [client 4.206.17.23:14325] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fsjzs.php"] [unique_id "afvc76bCRSGFglLQFBSc3AAAAA0"]
[Thu May 07 08:29:36.153473 2026] [:error] [pid 54973:tid 55019] [client 4.206.17.23:14026] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "afvc8O0gRfv66dYTV3Af7QAAAJA"]
[Thu May 07 08:29:36.897064 2026] [:error] [pid 54973:tid 55003] [client 4.206.17.23:14093] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "afvc8O0gRfv66dYTV3Af8wAAAIA"]
[Thu May 07 08:29:37.877756 2026] [:error] [pid 54972:tid 54984] [client 4.206.17.23:14230] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "afvc8abCRSGFglLQFBSc5wAAAAg"]
[Thu May 07 08:29:39.139168 2026] [:error] [pid 54973:tid 55009] [client 4.206.17.23:14024] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cwclass.php"] [unique_id "afvc8-0gRfv66dYTV3Af-wAAAIY"]
[Thu May 07 08:29:40.429936 2026] [:error] [pid 54973:tid 55004] [client 4.206.17.23:14190] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "afvc9O0gRfv66dYTV3AgAAAAAIE"]
[Thu May 07 08:29:41.281023 2026] [:error] [pid 54974:tid 55049] [client 4.206.17.23:14264] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "afvc9WsRuAjNUHMAP0SKhAAAANM"]
[Thu May 07 08:29:41.926419 2026] [:error] [pid 54973:tid 55003] [client 4.206.17.23:14201] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "afvc9e0gRfv66dYTV3AgAQAAAIA"]
[Thu May 07 08:29:42.500943 2026] [:error] [pid 54973:tid 55011] [client 4.206.17.23:14307] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit-tags.php"] [unique_id "afvc9u0gRfv66dYTV3AgAwAAAIg"]
[Thu May 07 08:29:43.253868 2026] [:error] [pid 54972:tid 54991] [client 4.206.17.23:14248] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "afvc96bCRSGFglLQFBSc8gAAAA8"]
[Thu May 07 08:29:43.923159 2026] [:error] [pid 55058:tid 55069] [client 4.206.17.23:14187] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "afvc97zCyO8U2nJT_0VU2AAAAEk"]
[Thu May 07 08:29:44.373013 2026] [:error] [pid 55058:tid 55075] [client 4.206.17.23:14227] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "afvc-LzCyO8U2nJT_0VU2QAAAE8"]
[Thu May 07 08:29:44.814201 2026] [:error] [pid 54972:tid 54997] [client 4.206.17.23:14197] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "afvc-KbCRSGFglLQFBSc-QAAABU"]
[Thu May 07 08:29:45.375255 2026] [:error] [pid 54974:tid 55044] [client 4.206.17.23:14193] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "afvc-WsRuAjNUHMAP0SKjAAAAM4"]
[Thu May 07 08:29:45.952465 2026] [:error] [pid 54973:tid 55027] [client 4.206.17.23:14113] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "afvc-e0gRfv66dYTV3AgBwAAAJg"]
[Thu May 07 08:29:46.489156 2026] [:error] [pid 54972:tid 54976] [client 4.206.17.23:14181] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "afvc-qbCRSGFglLQFBSdAwAAAAA"]
[Thu May 07 08:29:47.186684 2026] [:error] [pid 55058:tid 55062] [client 4.206.17.23:14101] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zoper1.php"] [unique_id "afvc-7zCyO8U2nJT_0VU2gAAAEI"]
[Thu May 07 08:29:48.018915 2026] [:error] [pid 54973:tid 55007] [client 4.206.17.23:14203] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afvc_O0gRfv66dYTV3AgCwAAAIQ"]
[Thu May 07 08:29:48.616631 2026] [:error] [pid 54974:tid 55046] [client 4.206.17.23:14097] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afvc_GsRuAjNUHMAP0SKkwAAANA"]
[Thu May 07 08:29:49.171429 2026] [:error] [pid 55058:tid 55081] [client 4.206.17.23:14098] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afvc_bzCyO8U2nJT_0VU4AAAAFU"]
[Thu May 07 08:29:49.768000 2026] [:error] [pid 54974:tid 55051] [client 4.206.17.23:14192] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "afvc_WsRuAjNUHMAP0SKmAAAANU"]
[Thu May 07 08:29:50.364520 2026] [:error] [pid 54974:tid 55044] [client 4.206.17.23:14175] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ai.php"] [unique_id "afvc_msRuAjNUHMAP0SKmwAAAM4"]
[Thu May 07 08:29:51.401661 2026] [:error] [pid 54974:tid 55036] [client 4.206.17.23:14126] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ai.php"] [unique_id "afvc_2sRuAjNUHMAP0SKngAAAMY"]
[Thu May 07 08:29:52.264160 2026] [:error] [pid 55058:tid 55074] [client 4.206.17.23:14268] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ai.php"] [unique_id "afvdALzCyO8U2nJT_0VU5wAAAE4"]
[Thu May 07 08:29:53.269299 2026] [:error] [pid 54974:tid 55035] [client 4.206.17.23:14083] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ai.php"] [unique_id "afvdAWsRuAjNUHMAP0SKnwAAAMU"]
[Thu May 07 08:29:53.823273 2026] [:error] [pid 54973:tid 55019] [client 4.206.17.23:14028] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "afvdAe0gRfv66dYTV3AgDwAAAJA"]
[Thu May 07 08:29:54.426344 2026] [:error] [pid 54973:tid 55010] [client 4.206.17.23:14261] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "afvdAu0gRfv66dYTV3AgEQAAAIc"]
[Thu May 07 08:29:55.174159 2026] [:error] [pid 54973:tid 55017] [client 4.206.17.23:14191] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "afvdA-0gRfv66dYTV3AgEwAAAI4"]
[Thu May 07 08:29:56.035305 2026] [:error] [pid 54972:tid 54995] [client 4.206.17.23:14029] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jga.php"] [unique_id "afvdBKbCRSGFglLQFBSdHQAAABM"]
[Thu May 07 08:29:56.834612 2026] [:error] [pid 54974:tid 55044] [client 4.206.17.23:14186] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "afvdBGsRuAjNUHMAP0SKpQAAAM4"]
[Thu May 07 08:29:57.677090 2026] [:error] [pid 55058:tid 55060] [client 4.206.17.23:14183] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "afvdBbzCyO8U2nJT_0VU8QAAAEA"]
[Thu May 07 08:29:58.561775 2026] [:error] [pid 55058:tid 55073] [client 4.206.17.23:14146] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "afvdBrzCyO8U2nJT_0VU9QAAAE0"]
[Thu May 07 08:29:59.241371 2026] [:error] [pid 54973:tid 55005] [client 4.206.17.23:14103] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/term.php"] [unique_id "afvdB-0gRfv66dYTV3AgHAAAAII"]
[Thu May 07 08:29:59.726401 2026] [:error] [pid 55058:tid 55067] [client 4.206.17.23:14025] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "afvdB7zCyO8U2nJT_0VU_QAAAEc"]
[Thu May 07 08:30:00.254603 2026] [:error] [pid 54972:tid 54985] [client 4.206.17.23:14200] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "afvdCKbCRSGFglLQFBSdLAAAAAk"]
[Thu May 07 08:30:00.793379 2026] [:error] [pid 54973:tid 55009] [client 4.206.17.23:14120] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "afvdCO0gRfv66dYTV3AgHwAAAIY"]
[Thu May 07 08:30:01.385548 2026] [:error] [pid 55058:tid 55066] [client 4.206.17.23:14019] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gk.php"] [unique_id "afvdCbzCyO8U2nJT_0VVAAAAAEY"]
[Thu May 07 08:30:02.140539 2026] [:error] [pid 54973:tid 55027] [client 4.206.17.23:14174] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "afvdCu0gRfv66dYTV3AgJQAAAJg"]
[Thu May 07 08:30:02.619147 2026] [:error] [pid 54974:tid 55031] [client 4.206.17.23:14088] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "afvdCmsRuAjNUHMAP0SKrwAAAME"]
[Thu May 07 08:30:03.102610 2026] [:error] [pid 54973:tid 55021] [client 4.206.17.23:14090] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "afvdC-0gRfv66dYTV3AgJwAAAJI"]
[Thu May 07 08:30:03.648702 2026] [:error] [pid 54973:tid 55004] [client 4.206.17.23:14110] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xmu.php"] [unique_id "afvdC-0gRfv66dYTV3AgKAAAAIE"]
[Thu May 07 08:30:04.776570 2026] [:error] [pid 54974:tid 55035] [client 4.206.17.23:14111] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sd.php"] [unique_id "afvdDGsRuAjNUHMAP0SKuQAAAMU"]
[Thu May 07 08:30:05.632474 2026] [:error] [pid 54972:tid 54999] [client 4.206.17.23:14081] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sd.php"] [unique_id "afvdDabCRSGFglLQFBSdOgAAABc"]
[Thu May 07 08:30:06.532201 2026] [:error] [pid 55058:tid 55061] [client 4.206.17.23:14060] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sd.php"] [unique_id "afvdDrzCyO8U2nJT_0VVEQAAAEE"]
[Thu May 07 08:30:07.130395 2026] [:error] [pid 54974:tid 55033] [client 4.206.17.23:14158] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sd.php"] [unique_id "afvdD2sRuAjNUHMAP0SKvwAAAMM"]
[Thu May 07 09:25:44.859590 2026] [:error] [pid 56150:tid 56168] [client 49.235.136.28:52370] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afvqGNu4duXJJeTigXT8kQAAAFA"]
[Thu May 07 16:44:37.424157 2026] [:error] [pid 15631:tid 15691] [client 94.247.172.129:23626] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afxQ9XvP1GkPUuuLfqUcegAAAMQ"]
[Thu May 07 20:36:06.635841 2026] [:error] [pid 15715:tid 15730] [client 120.56.127.13:50243] [client 120.56.127.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.56.127.13, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afyHNiY4dZsLOttMkcekYAAAAQo"]
[Thu May 07 20:36:39.181660 2026] [:error] [pid 28098:tid 28119] [client 186.179.192.143:41554] [client 186.179.192.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.179.192.143, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afyHV8vhwfljlt8trSr0dAAAAFM"]
[Thu May 07 21:47:55.252395 2026] [:error] [pid 28098:tid 28103] [client 111.230.233.46:57736] [client 111.230.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afyYC8vhwfljlt8trSoTdAAAAEM"]
[Thu May 07 22:25:57.434557 2026] [:error] [pid 15629:tid 15640] [client 49.51.196.42:55876] [client 49.51.196.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "afyg9frIJCALdUrO43mLiAAAAAc"]
[Thu May 07 22:26:40.060453 2026] [:error] [pid 28098:tid 28118] [client 136.109.180.103:59179] [client 136.109.180.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.180.103, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afyhIMvhwfljlt8trSokEwAAAFI"]
[Thu May 07 22:26:40.479536 2026] [:error] [pid 28098:tid 28111] [client 136.109.180.103:54176] [client 136.109.180.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.180.103, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "afyhIMvhwfljlt8trSokHwAAAEs"]
[Thu May 07 22:26:40.611054 2026] [:error] [pid 28098:tid 28124] [client 136.109.180.103:59179] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "afyhIMvhwfljlt8trSokJAAAAFg"]
[Thu May 07 22:26:40.802627 2026] [:error] [pid 28098:tid 28116] [client 136.109.180.103:54176] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "afyhIMvhwfljlt8trSokKAAAAFA"]
[Thu May 07 22:26:41.372078 2026] [:error] [pid 15631:tid 15710] [client 136.109.180.103:59334] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "afyhIXvP1GkPUuuLfqVZBAAAANc"]
[Thu May 07 22:26:41.618996 2026] [:error] [pid 15631:tid 15705] [client 136.109.180.103:56061] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "afyhIXvP1GkPUuuLfqVZBgAAANI"]
[Thu May 07 22:26:42.248300 2026] [:error] [pid 15631:tid 15699] [client 136.109.180.103:50257] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "afyhInvP1GkPUuuLfqVZEgAAAMw"]
[Thu May 07 22:26:42.297132 2026] [:error] [pid 15631:tid 15706] [client 136.109.180.103:57334] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "afyhInvP1GkPUuuLfqVZEwAAANM"]
[Thu May 07 22:26:42.963196 2026] [:error] [pid 15631:tid 15702] [client 136.109.180.103:63841] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "afyhInvP1GkPUuuLfqVZGAAAAM8"]
[Thu May 07 22:26:43.025544 2026] [:error] [pid 15631:tid 15701] [client 136.109.180.103:53362] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "afyhI3vP1GkPUuuLfqVZGQAAAM4"]
[Thu May 07 22:26:43.805698 2026] [:error] [pid 15715:tid 15726] [client 136.109.180.103:58337] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "afyhIyY4dZsLOttMkcfFvAAAAQk"]
[Thu May 07 22:26:43.878051 2026] [:error] [pid 28098:tid 28121] [client 136.109.180.103:50234] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "afyhI8vhwfljlt8trSokPQAAAFU"]
[Thu May 07 22:26:44.491976 2026] [:error] [pid 28098:tid 28115] [client 136.109.180.103:60929] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "afyhJMvhwfljlt8trSokQQAAAE8"]
[Thu May 07 22:26:44.624709 2026] [:error] [pid 15715:tid 15718] [client 136.109.180.103:63155] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "afyhJCY4dZsLOttMkcfFvgAAAQE"]
[Thu May 07 23:33:38.805423 2026] [:error] [pid 28098:tid 28108] [client 4.193.137.131:18524] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "afyw0svhwfljlt8trSo3VwAAAEg"]
[Thu May 07 23:33:39.159652 2026] [:error] [pid 15629:tid 15635] [client 4.193.137.131:18960] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "afyw0_rIJCALdUrO43mVXwAAAAI"]
[Thu May 07 23:33:39.521191 2026] [:error] [pid 15630:tid 15677] [client 4.193.137.131:19264] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "afyw03TithRAi4821qvYhAAAAJE"]
[Thu May 07 23:33:39.874288 2026] [:error] [pid 15631:tid 15704] [client 4.193.137.131:19136] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/alfa.php"] [unique_id "afyw03vP1GkPUuuLfqVmhwAAANE"]
[Fri May 08 00:43:17.354644 2026] [:error] [pid 12374:tid 12388] [client 34.106.134.142:60342] [client 34.106.134.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "afzBJRo3QnNcFDMfKt2B1QAAAYo"]
[Fri May 08 02:17:40.333373 2026] [autoindex:error] [pid 15715:tid 15731] [client 141.98.11.120:51201] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri May 08 03:16:20.169825 2026] [:error] [pid 15631:tid 15709] [client 20.205.36.41:6135] [client 20.205.36.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afzlBHvP1GkPUuuLfqWJogAAANY"]
[Fri May 08 03:16:20.671022 2026] [:error] [pid 15715:tid 15722] [client 20.205.36.41:2051] [client 20.205.36.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afzlBCY4dZsLOttMkccWLgAAAQU"]
[Fri May 08 03:16:21.164121 2026] [:error] [pid 15630:tid 15683] [client 20.205.36.41:5542] [client 20.205.36.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afzlBXTithRAi4821qsBrgAAAJc"]
[Fri May 08 03:16:21.650607 2026] [:error] [pid 15630:tid 15666] [client 20.205.36.41:6576] [client 20.205.36.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/simple.php"] [unique_id "afzlBXTithRAi4821qsBsAAAAIY"]
[Fri May 08 05:48:02.831037 2026] [:error] [pid 34318:tid 34321] [client 34.150.61.185:46742] [client 34.150.61.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "af0Iksr3guirgJiKhzBd1wAAAQE"]
[Fri May 08 09:50:40.779643 2026] [:error] [pid 61356:tid 61411] [client 162.14.109.170:35338] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "af1BcIx3vpB8oWhUq2PGtQAAAdc"]
[Fri May 08 11:21:32.887104 2026] [:error] [pid 61317:tid 61325] [client 170.106.193.108:50178] [client 170.106.193.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "af1WvM-fFk_CedOCOYtuMgAAAUU"]
[Fri May 08 15:07:28.844248 2026] [:error] [pid 34318:tid 34332] [client 34.61.182.234:32770] [client 34.61.182.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "af2LsMr3guirgJiKhzC6NgAAAQw"]
[Fri May 08 18:22:47.512093 2026] [:error] [pid 34318:tid 34344] [client 43.167.239.66:60024] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "af25d8r3guirgJiKhzDLQAAAARg"]
[Fri May 08 20:50:25.439290 2026] [:error] [pid 51008:tid 51059] [client 43.164.1.211:60310] [client 43.164.1.211] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "af3cEXB58C2Y1tgLtuKlgAAAAEo"]
[Fri May 08 22:22:59.382996 2026] [:error] [pid 61355:tid 61374] [client 146.56.199.139:59162] [client 146.56.199.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "af3xw_khJTi30CBXmMnUqQAAAY0"]
[Fri May 08 23:11:35.547371 2026] [:error] [pid 61317:tid 61328] [client 20.166.9.204:7049] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsc.php"] [unique_id "af39J8-fFk_CedOCOYvnwAAAAUg"]
[Fri May 08 23:11:36.644384 2026] [:error] [pid 61356:tid 61397] [client 20.166.9.204:3275] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsc.php"] [unique_id "af39KIx3vpB8oWhUq2PxogAAAck"]
[Fri May 08 23:11:37.867913 2026] [:error] [pid 61355:tid 61377] [client 20.166.9.204:1121] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsc.php"] [unique_id "af39KfkhJTi30CBXmMnmygAAAZA"]
[Fri May 08 23:11:38.884770 2026] [:error] [pid 61355:tid 61365] [client 20.166.9.204:4331] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wsc.php"] [unique_id "af39KvkhJTi30CBXmMnmzgAAAYQ"]
[Fri May 08 23:11:39.144688 2026] [:error] [pid 34318:tid 34332] [client 20.166.9.204:1794] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bngv.php"] [unique_id "af39K8r3guirgJiKhzDvhAAAAQw"]
[Fri May 08 23:11:39.658906 2026] [:error] [pid 61355:tid 61383] [client 20.166.9.204:12295] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bngv.php"] [unique_id "af39K_khJTi30CBXmMnm1wAAAZY"]
[Fri May 08 23:11:40.175060 2026] [:error] [pid 61355:tid 61366] [client 20.166.9.204:1745] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bngv.php"] [unique_id "af39LPkhJTi30CBXmMnm3wAAAYU"]
[Fri May 08 23:11:40.735430 2026] [:error] [pid 34318:tid 34336] [client 20.166.9.204:16307] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bngv.php"] [unique_id "af39LMr3guirgJiKhzDvhQAAARA"]
[Fri May 08 23:11:41.274574 2026] [:error] [pid 51007:tid 51041] [client 20.166.9.204:1797] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl9.php"] [unique_id "af39LVMagSGstWKyzzUEdAAAABM"]
[Fri May 08 23:11:41.826602 2026] [:error] [pid 61356:tid 61402] [client 20.166.9.204:1793] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl9.php"] [unique_id "af39LYx3vpB8oWhUq2PxugAAAc4"]
[Fri May 08 23:11:42.406862 2026] [:error] [pid 61356:tid 61406] [client 20.166.9.204:12004] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl9.php"] [unique_id "af39Lox3vpB8oWhUq2PxvgAAAdI"]
[Fri May 08 23:11:42.962448 2026] [:error] [pid 61355:tid 61382] [client 20.166.9.204:6456] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xl9.php"] [unique_id "af39LvkhJTi30CBXmMnm7wAAAZU"]
[Fri May 08 23:11:43.500101 2026] [:error] [pid 51009:tid 51084] [client 20.166.9.204:12016] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cibai.php"] [unique_id "af39L-B0GbUWhxgzX9VnNAAAAIg"]
[Fri May 08 23:11:44.048380 2026] [:error] [pid 61355:tid 61377] [client 20.166.9.204:10027] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cibai.php"] [unique_id "af39MPkhJTi30CBXmMnm9wAAAZA"]
[Fri May 08 23:11:44.554620 2026] [:error] [pid 61355:tid 61365] [client 20.166.9.204:10857] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cibai.php"] [unique_id "af39MPkhJTi30CBXmMnm-QAAAYQ"]
[Fri May 08 23:11:45.104144 2026] [:error] [pid 61355:tid 61376] [client 20.166.9.204:14492] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cibai.php"] [unique_id "af39MfkhJTi30CBXmMnm_QAAAY8"]
[Fri May 08 23:11:45.619878 2026] [:error] [pid 61355:tid 61378] [client 20.166.9.204:4294] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmp.php"] [unique_id "af39MfkhJTi30CBXmMnnAQAAAZE"]
[Fri May 08 23:11:46.173343 2026] [:error] [pid 61356:tid 61408] [client 20.166.9.204:17715] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmp.php"] [unique_id "af39Mox3vpB8oWhUq2PxwwAAAdQ"]
[Fri May 08 23:11:46.730089 2026] [:error] [pid 34318:tid 34326] [client 20.166.9.204:1839] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmp.php"] [unique_id "af39Msr3guirgJiKhzDvhwAAAQY"]
[Fri May 08 23:11:47.318970 2026] [:error] [pid 51113:tid 51116] [client 20.166.9.204:10824] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mmp.php"] [unique_id "af39M0Qfs7sWtqkpQIeKWQAAAME"]
[Fri May 08 23:11:47.879123 2026] [:error] [pid 61356:tid 61396] [client 20.166.9.204:17682] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "af39M4x3vpB8oWhUq2PxxQAAAcg"]
[Fri May 08 23:11:48.420283 2026] [:error] [pid 51113:tid 51119] [client 20.166.9.204:6446] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/gm.php"] [unique_id "af39NEQfs7sWtqkpQIeKWwAAAMQ"]
[Fri May 08 23:11:48.999546 2026] [:error] [pid 51007:tid 51025] [client 20.166.9.204:17493] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "af39NFMagSGstWKyzzUEdwAAAAM"]
[Fri May 08 23:11:49.535830 2026] [:error] [pid 61355:tid 61369] [client 20.166.9.204:1801] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "af39NfkhJTi30CBXmMnnCgAAAYg"]
[Fri May 08 23:11:50.065324 2026] [:error] [pid 61355:tid 61362] [client 20.166.9.204:6447] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asd67.php"] [unique_id "af39NvkhJTi30CBXmMnnDQAAAYE"]
[Fri May 08 23:11:50.583570 2026] [:error] [pid 61317:tid 61323] [client 20.166.9.204:13087] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i6z19N.php"] [unique_id "af39Ns-fFk_CedOCOYvnyQAAAUM"]
[Fri May 08 23:11:51.079530 2026] [:error] [pid 61356:tid 61388] [client 20.166.9.204:16971] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i6z19N.php"] [unique_id "af39N4x3vpB8oWhUq2PxzgAAAcA"]
[Fri May 08 23:11:51.613963 2026] [:error] [pid 51113:tid 51125] [client 20.166.9.204:10849] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i6z19N.php"] [unique_id "af39N0Qfs7sWtqkpQIeKXgAAAMo"]
[Fri May 08 23:11:52.144695 2026] [:error] [pid 61356:tid 61407] [client 20.166.9.204:1094] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i6z19N.php"] [unique_id "af39OIx3vpB8oWhUq2Px1QAAAdM"]
[Fri May 08 23:11:52.664888 2026] [:error] [pid 51008:tid 51055] [client 20.166.9.204:1352] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clque.php"] [unique_id "af39OHB58C2Y1tgLtuK-PQAAAEY"]
[Fri May 08 23:11:53.213733 2026] [:error] [pid 61356:tid 61392] [client 20.166.9.204:14465] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clque.php"] [unique_id "af39OYx3vpB8oWhUq2Px3gAAAcQ"]
[Fri May 08 23:11:53.730688 2026] [:error] [pid 34318:tid 34340] [client 20.166.9.204:6461] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clque.php"] [unique_id "af39Ocr3guirgJiKhzDvjQAAARQ"]
[Fri May 08 23:11:54.277868 2026] [:error] [pid 61356:tid 61404] [client 20.166.9.204:13106] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/clque.php"] [unique_id "af39Oox3vpB8oWhUq2Px6QAAAdA"]
[Fri May 08 23:11:54.793400 2026] [:error] [pid 51008:tid 51050] [client 20.166.9.204:12033] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ver.php"] [unique_id "af39OnB58C2Y1tgLtuK-PwAAAEE"]
[Fri May 08 23:11:55.371029 2026] [:error] [pid 51007:tid 51023] [client 20.166.9.204:16319] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ver.php"] [unique_id "af39O1MagSGstWKyzzUEfQAAAAE"]
[Fri May 08 23:11:55.921277 2026] [:error] [pid 61317:tid 61342] [client 20.166.9.204:1841] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ver.php"] [unique_id "af39O8-fFk_CedOCOYvnzQAAAVY"]
[Fri May 08 23:11:56.444772 2026] [:error] [pid 61317:tid 61330] [client 20.166.9.204:17520] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ver.php"] [unique_id "af39PM-fFk_CedOCOYvnzgAAAUo"]
[Fri May 08 23:11:57.022548 2026] [:error] [pid 51009:tid 51081] [client 20.166.9.204:4963] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "af39PeB0GbUWhxgzX9VnQgAAAIU"]
[Fri May 08 23:11:57.564679 2026] [:error] [pid 51008:tid 51054] [client 20.166.9.204:17522] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "af39PXB58C2Y1tgLtuK-QAAAAEU"]
[Fri May 08 23:11:58.121200 2026] [:error] [pid 61356:tid 61396] [client 20.166.9.204:13089] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "af39Pox3vpB8oWhUq2Px-gAAAcg"]
[Fri May 08 23:11:58.663897 2026] [:error] [pid 61356:tid 61397] [client 20.166.9.204:17712] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wert.php"] [unique_id "af39Pox3vpB8oWhUq2Px_wAAAck"]
[Fri May 08 23:11:59.192997 2026] [:error] [pid 51009:tid 51091] [client 20.166.9.204:14661] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "af39P-B0GbUWhxgzX9VnRAAAAI8"]
[Fri May 08 23:11:59.729458 2026] [:error] [pid 51009:tid 51089] [client 20.166.9.204:17532] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "af39P-B0GbUWhxgzX9VnRQAAAI0"]
[Fri May 08 23:12:00.277042 2026] [:error] [pid 61317:tid 61329] [client 20.166.9.204:14826] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "af39QM-fFk_CedOCOYvn1QAAAUk"]
[Fri May 08 23:12:00.792195 2026] [:error] [pid 51009:tid 51090] [client 20.166.9.204:12296] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-blog.php"] [unique_id "af39QOB0GbUWhxgzX9VnSAAAAI4"]
[Fri May 08 23:12:01.326179 2026] [:error] [pid 61317:tid 61324] [client 20.166.9.204:1824] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "af39Qc-fFk_CedOCOYvn1gAAAUQ"]
[Fri May 08 23:12:01.840726 2026] [:error] [pid 51009:tid 51078] [client 20.166.9.204:10042] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "af39QeB0GbUWhxgzX9VnSgAAAII"]
[Fri May 08 23:12:02.355091 2026] [:error] [pid 51008:tid 51059] [client 20.166.9.204:10015] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "af39QnB58C2Y1tgLtuK-QwAAAEo"]
[Fri May 08 23:12:02.901634 2026] [:error] [pid 51008:tid 51056] [client 20.166.9.204:7087] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ng.php"] [unique_id "af39QnB58C2Y1tgLtuK-RQAAAEc"]
[Fri May 08 23:12:03.449099 2026] [:error] [pid 51113:tid 51122] [client 20.166.9.204:15802] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xslclbn.php"] [unique_id "af39Q0Qfs7sWtqkpQIeKYwAAAMc"]
[Fri May 08 23:12:04.015878 2026] [:error] [pid 51113:tid 51127] [client 20.166.9.204:11247] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xslclbn.php"] [unique_id "af39REQfs7sWtqkpQIeKZAAAAMw"]
[Fri May 08 23:12:04.529679 2026] [:error] [pid 51009:tid 51077] [client 20.166.9.204:12318] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xslclbn.php"] [unique_id "af39ROB0GbUWhxgzX9VnTwAAAIE"]
[Fri May 08 23:12:05.043750 2026] [:error] [pid 51007:tid 51030] [client 20.166.9.204:11228] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xslclbn.php"] [unique_id "af39RVMagSGstWKyzzUEkgAAAAg"]
[Fri May 08 23:12:05.591189 2026] [:error] [pid 51007:tid 51046] [client 20.166.9.204:1838] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/less.php"] [unique_id "af39RVMagSGstWKyzzUEkwAAABg"]
[Fri May 08 23:12:06.103624 2026] [:error] [pid 51113:tid 51132] [client 20.166.9.204:1110] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/less.php"] [unique_id "af39RkQfs7sWtqkpQIeKaQAAANE"]
[Fri May 08 23:12:06.636470 2026] [:error] [pid 51009:tid 51100] [client 20.166.9.204:10869] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/less.php"] [unique_id "af39RuB0GbUWhxgzX9VnWwAAAJg"]
[Fri May 08 23:12:07.175015 2026] [:error] [pid 51113:tid 51138] [client 20.166.9.204:16267] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/less.php"] [unique_id "af39R0Qfs7sWtqkpQIeKbAAAANc"]
[Fri May 08 23:12:07.704758 2026] [:error] [pid 61355:tid 61383] [client 20.166.9.204:14711] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "af39R_khJTi30CBXmMnnEgAAAZY"]
[Fri May 08 23:12:08.259464 2026] [:error] [pid 61355:tid 61385] [client 20.166.9.204:18487] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "af39SPkhJTi30CBXmMnnFgAAAZg"]
[Fri May 08 23:12:08.803622 2026] [:error] [pid 61355:tid 61379] [client 20.166.9.204:16122] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "af39SPkhJTi30CBXmMnnGQAAAZI"]
[Fri May 08 23:12:09.338978 2026] [:error] [pid 34318:tid 34326] [client 20.166.9.204:13094] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albrt.php"] [unique_id "af39Scr3guirgJiKhzDvlgAAAQY"]
[Fri May 08 23:12:09.887018 2026] [:error] [pid 51007:tid 51031] [client 20.166.9.204:17710] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "af39SVMagSGstWKyzzUEpgAAAAk"]
[Fri May 08 23:12:10.422846 2026] [:error] [pid 61317:tid 61334] [client 20.166.9.204:18371] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "af39Ss-fFk_CedOCOYvn4AAAAU4"]
[Fri May 08 23:12:10.979173 2026] [:error] [pid 61355:tid 61361] [client 20.166.9.204:16998] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "af39SvkhJTi30CBXmMnnJAAAAYA"]
[Fri May 08 23:12:11.543866 2026] [:error] [pid 61356:tid 61410] [client 20.166.9.204:4973] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tiny2.php"] [unique_id "af39S4x3vpB8oWhUq2PyLAAAAdY"]
[Fri May 08 23:12:12.073473 2026] [:error] [pid 61356:tid 61411] [client 20.166.9.204:11241] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "af39TIx3vpB8oWhUq2PyMAAAAdc"]
[Fri May 08 23:12:12.606106 2026] [:error] [pid 61317:tid 61336] [client 20.166.9.204:16993] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "af39TM-fFk_CedOCOYvn5QAAAVA"]
[Fri May 08 23:12:13.122489 2026] [:error] [pid 61356:tid 61408] [client 20.166.9.204:14716] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "af39TYx3vpB8oWhUq2PyNwAAAdQ"]
[Fri May 08 23:12:13.636740 2026] [:error] [pid 51009:tid 51097] [client 20.166.9.204:13073] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/an8.php"] [unique_id "af39TeB0GbUWhxgzX9VnYwAAAJU"]
[Fri May 08 23:12:14.184579 2026] [:error] [pid 34318:tid 34344] [client 20.166.9.204:11208] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "af39Tsr3guirgJiKhzDvmwAAARg"]
[Fri May 08 23:12:14.751939 2026] [:error] [pid 51008:tid 51073] [client 20.166.9.204:12335] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "af39TnB58C2Y1tgLtuK-UQAAAFg"]
[Fri May 08 23:12:15.270471 2026] [:error] [pid 51008:tid 51056] [client 20.166.9.204:13736] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "af39T3B58C2Y1tgLtuK-VAAAAEc"]
[Fri May 08 23:12:15.786719 2026] [:error] [pid 51008:tid 51071] [client 20.166.9.204:10001] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ww.php"] [unique_id "af39T3B58C2Y1tgLtuK-VwAAAFY"]
[Fri May 08 23:12:16.334131 2026] [:error] [pid 61317:tid 61342] [client 20.166.9.204:12312] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq.php"] [unique_id "af39UM-fFk_CedOCOYvn5wAAAVY"]
[Fri May 08 23:12:16.830252 2026] [:error] [pid 51008:tid 51057] [client 20.166.9.204:1846] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq.php"] [unique_id "af39UHB58C2Y1tgLtuK-WwAAAEg"]
[Fri May 08 23:12:17.382292 2026] [:error] [pid 51113:tid 51135] [client 20.166.9.204:18370] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq.php"] [unique_id "af39UUQfs7sWtqkpQIeKcgAAANQ"]
[Fri May 08 23:12:17.915405 2026] [:error] [pid 61317:tid 61338] [client 20.166.9.204:13702] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/zwq.php"] [unique_id "af39Uc-fFk_CedOCOYvn6wAAAVI"]
[Fri May 08 23:12:18.465794 2026] [:error] [pid 51009:tid 51089] [client 20.166.9.204:17015] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "af39UuB0GbUWhxgzX9VnZwAAAI0"]
[Fri May 08 23:12:19.014816 2026] [:error] [pid 51009:tid 51090] [client 20.166.9.204:4301] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "af39U-B0GbUWhxgzX9VnbAAAAI4"]
[Fri May 08 23:12:19.548640 2026] [:error] [pid 51008:tid 51071] [client 20.166.9.204:17477] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "af39U3B58C2Y1tgLtuK-aAAAAFY"]
[Fri May 08 23:12:20.065435 2026] [:error] [pid 51008:tid 51057] [client 20.166.9.204:4311] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "af39VHB58C2Y1tgLtuK-awAAAEg"]
[Fri May 08 23:12:20.615581 2026] [:error] [pid 51113:tid 51132] [client 20.166.9.204:15273] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ups.php"] [unique_id "af39VEQfs7sWtqkpQIeKdgAAANE"]
[Fri May 08 23:12:21.131764 2026] [:error] [pid 61317:tid 61334] [client 20.166.9.204:13085] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ups.php"] [unique_id "af39Vc-fFk_CedOCOYvn7gAAAU4"]
[Fri May 08 23:12:21.636195 2026] [:error] [pid 51007:tid 51034] [client 20.166.9.204:11989] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ups.php"] [unique_id "af39VVMagSGstWKyzzUEtwAAAAw"]
[Fri May 08 23:12:22.132801 2026] [:error] [pid 34318:tid 34340] [client 20.166.9.204:13067] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ups.php"] [unique_id "af39Vsr3guirgJiKhzDvoQAAARQ"]
[Fri May 08 23:12:22.631114 2026] [:error] [pid 61356:tid 61406] [client 20.166.9.204:13064] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-demomav.php"] [unique_id "af39Vox3vpB8oWhUq2PySgAAAdI"]
[Fri May 08 23:12:23.179925 2026] [:error] [pid 61317:tid 61327] [client 20.166.9.204:4318] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-demomav.php"] [unique_id "af39V8-fFk_CedOCOYvoCAAAAUc"]
[Fri May 08 23:12:23.731551 2026] [:error] [pid 51009:tid 51083] [client 20.166.9.204:14701] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-demomav.php"] [unique_id "af39V-B0GbUWhxgzX9VnfAAAAIc"]
[Fri May 08 23:12:24.226200 2026] [:error] [pid 51009:tid 51081] [client 20.166.9.204:4347] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-demomav.php"] [unique_id "af39WOB0GbUWhxgzX9VnfwAAAIU"]
[Fri May 08 23:12:24.720683 2026] [:error] [pid 34318:tid 34331] [client 20.166.9.204:13700] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/greateb.php"] [unique_id "af39WMr3guirgJiKhzDvpgAAAQs"]
[Fri May 08 23:12:25.248413 2026] [:error] [pid 61317:tid 61337] [client 20.166.9.204:10863] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/greateb.php"] [unique_id "af39Wc-fFk_CedOCOYvoEgAAAVE"]
[Fri May 08 23:12:25.761489 2026] [:error] [pid 61356:tid 61402] [client 20.166.9.204:13739] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/greateb.php"] [unique_id "af39WYx3vpB8oWhUq2PyXQAAAc4"]
[Fri May 08 23:12:26.328538 2026] [:error] [pid 51008:tid 51061] [client 20.166.9.204:14793] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/greateb.php"] [unique_id "af39WnB58C2Y1tgLtuK-dAAAAEw"]
[Fri May 08 23:12:26.864481 2026] [:error] [pid 51113:tid 51128] [client 20.166.9.204:14823] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "af39WkQfs7sWtqkpQIeKfAAAAM0"]
[Fri May 08 23:12:27.377914 2026] [:error] [pid 51113:tid 51122] [client 20.166.9.204:14831] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "af39W0Qfs7sWtqkpQIeKfgAAAMc"]
[Fri May 08 23:12:27.925521 2026] [:error] [pid 61356:tid 61405] [client 20.166.9.204:13088] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "af39W4x3vpB8oWhUq2PyZwAAAdE"]
[Fri May 08 23:12:28.439701 2026] [:error] [pid 61356:tid 61408] [client 20.166.9.204:4958] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/co.php"] [unique_id "af39XIx3vpB8oWhUq2PyagAAAdQ"]
[Fri May 08 23:12:28.935805 2026] [:error] [pid 51009:tid 51089] [client 20.166.9.204:11990] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/shlo.php"] [unique_id "af39XOB0GbUWhxgzX9VniQAAAI0"]
[Fri May 08 23:12:29.451451 2026] [:error] [pid 51009:tid 51081] [client 20.166.9.204:10847] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/shlo.php"] [unique_id "af39XeB0GbUWhxgzX9VniwAAAIU"]
[Fri May 08 23:12:29.985607 2026] [:error] [pid 51009:tid 51079] [client 20.166.9.204:15365] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/shlo.php"] [unique_id "af39XeB0GbUWhxgzX9VnjQAAAIM"]
[Fri May 08 23:12:30.499732 2026] [:error] [pid 51007:tid 51035] [client 20.166.9.204:11213] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/css/shlo.php"] [unique_id "af39XlMagSGstWKyzzUEzAAAAA0"]
[Fri May 08 23:12:31.028732 2026] [:error] [pid 61355:tid 61381] [client 20.166.9.204:10854] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acip.php"] [unique_id "af39X_khJTi30CBXmMnnNAAAAZQ"]
[Fri May 08 23:12:31.534572 2026] [:error] [pid 61356:tid 61403] [client 20.166.9.204:10028] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acip.php"] [unique_id "af39X4x3vpB8oWhUq2PybwAAAc8"]
[Fri May 08 23:12:32.075581 2026] [:error] [pid 51113:tid 51123] [client 20.166.9.204:17511] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acip.php"] [unique_id "af39YEQfs7sWtqkpQIeKgwAAAMg"]
[Fri May 08 23:12:32.609506 2026] [:error] [pid 51113:tid 51118] [client 20.166.9.204:4326] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/acip.php"] [unique_id "af39YEQfs7sWtqkpQIeKhQAAAMM"]
[Fri May 08 23:12:33.124701 2026] [:error] [pid 61355:tid 61378] [client 20.166.9.204:15768] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/index.php"] [unique_id "af39YfkhJTi30CBXmMnnOQAAAZE"]
[Fri May 08 23:12:33.677736 2026] [:error] [pid 61355:tid 61369] [client 20.166.9.204:13755] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/index.php"] [unique_id "af39YfkhJTi30CBXmMnnOwAAAYg"]
[Fri May 08 23:12:34.197625 2026] [:error] [pid 61355:tid 61365] [client 20.166.9.204:5350] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/index.php"] [unique_id "af39YvkhJTi30CBXmMnnPwAAAYQ"]
[Fri May 08 23:12:34.714549 2026] [:error] [pid 51009:tid 51077] [client 20.166.9.204:13744] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uploads/index.php"] [unique_id "af39YuB0GbUWhxgzX9VnkgAAAIE"]
[Fri May 08 23:12:37.425610 2026] [:error] [pid 51009:tid 51076] [client 20.166.9.204:15365] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mamzi.php"] [unique_id "af39ZeB0GbUWhxgzX9VnmwAAAIA"]
[Fri May 08 23:12:38.510815 2026] [:error] [pid 51008:tid 51070] [client 20.166.9.204:17851] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mamzi.php"] [unique_id "af39ZnB58C2Y1tgLtuK-gQAAAFU"]
[Fri May 08 23:12:39.581767 2026] [:error] [pid 51008:tid 51058] [client 20.166.9.204:14679] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mamzi.php"] [unique_id "af39Z3B58C2Y1tgLtuK-hAAAAEk"]
[Fri May 08 23:12:40.611507 2026] [:error] [pid 51113:tid 51127] [client 20.166.9.204:13703] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mamzi.php"] [unique_id "af39aEQfs7sWtqkpQIeKigAAAMw"]
[Fri May 08 23:12:40.859959 2026] [:error] [pid 61355:tid 61366] [client 20.166.9.204:13750] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kaza.php"] [unique_id "af39aPkhJTi30CBXmMnnXgAAAYU"]
[Fri May 08 23:12:41.375293 2026] [:error] [pid 51113:tid 51116] [client 20.166.9.204:12828] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kaza.php"] [unique_id "af39aUQfs7sWtqkpQIeKjAAAAME"]
[Fri May 08 23:12:41.891954 2026] [:error] [pid 51113:tid 51121] [client 20.166.9.204:15776] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kaza.php"] [unique_id "af39aUQfs7sWtqkpQIeKjwAAAMY"]
[Fri May 08 23:12:42.440976 2026] [:error] [pid 51008:tid 51067] [client 20.166.9.204:16999] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kaza.php"] [unique_id "af39anB58C2Y1tgLtuK-jwAAAFI"]
[Fri May 08 23:12:42.963622 2026] [:error] [pid 51008:tid 51053] [client 20.166.9.204:18444] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrr.php"] [unique_id "af39anB58C2Y1tgLtuK-kQAAAEQ"]
[Fri May 08 23:12:43.529751 2026] [:error] [pid 51113:tid 51117] [client 20.166.9.204:18418] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrr.php"] [unique_id "af39a0Qfs7sWtqkpQIeKkgAAAMI"]
[Fri May 08 23:12:44.045480 2026] [:error] [pid 51009:tid 51081] [client 20.166.9.204:11262] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrr.php"] [unique_id "af39bOB0GbUWhxgzX9VnngAAAIU"]
[Fri May 08 23:12:44.542209 2026] [:error] [pid 61355:tid 61383] [client 20.166.9.204:15760] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/rrr.php"] [unique_id "af39bPkhJTi30CBXmMnnYgAAAZY"]
[Fri May 08 23:12:45.089160 2026] [:error] [pid 61355:tid 61368] [client 20.166.9.204:12341] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "af39bfkhJTi30CBXmMnnZAAAAYc"]
[Fri May 08 23:12:45.657072 2026] [:error] [pid 61355:tid 61369] [client 20.166.9.204:10166] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "af39bfkhJTi30CBXmMnnagAAAYg"]
[Fri May 08 23:12:46.171948 2026] [:error] [pid 61355:tid 61382] [client 20.166.9.204:17668] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "af39bvkhJTi30CBXmMnnawAAAZU"]
[Fri May 08 23:12:46.719210 2026] [:error] [pid 61355:tid 61381] [client 20.166.9.204:4938] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/img.php"] [unique_id "af39bvkhJTi30CBXmMnnbQAAAZQ"]
[Fri May 08 23:12:47.242231 2026] [:error] [pid 61317:tid 61338] [client 20.166.9.204:2293] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "af39b8-fFk_CedOCOYvoGwAAAVI"]
[Fri May 08 23:12:47.739127 2026] [:error] [pid 61355:tid 61364] [client 20.166.9.204:5321] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "af39b_khJTi30CBXmMnncwAAAYM"]
[Fri May 08 23:12:48.235197 2026] [:error] [pid 61355:tid 61385] [client 20.166.9.204:17485] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "af39cPkhJTi30CBXmMnndQAAAZg"]
[Fri May 08 23:12:48.749742 2026] [:error] [pid 51009:tid 51076] [client 20.166.9.204:17937] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ayk.php"] [unique_id "af39cOB0GbUWhxgzX9VnoQAAAIA"]
[Fri May 08 23:12:49.289787 2026] [:error] [pid 61355:tid 61377] [client 20.166.9.204:1113] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/22name.php"] [unique_id "af39cfkhJTi30CBXmMnngAAAAZA"]
[Fri May 08 23:12:49.806366 2026] [:error] [pid 61355:tid 61368] [client 20.166.9.204:14822] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/22name.php"] [unique_id "af39cfkhJTi30CBXmMnngwAAAYc"]
[Fri May 08 23:12:50.379313 2026] [:error] [pid 61317:tid 61324] [client 20.166.9.204:17727] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "af39cs-fFk_CedOCOYvoHQAAAUQ"]
[Fri May 08 23:12:50.930970 2026] [:error] [pid 51009:tid 51079] [client 20.166.9.204:17019] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "af39cuB0GbUWhxgzX9VnpAAAAIM"]
[Fri May 08 23:12:51.478268 2026] [:error] [pid 61317:tid 61331] [client 20.166.9.204:5728] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "af39c8-fFk_CedOCOYvoIwAAAUs"]
[Fri May 08 23:12:52.045213 2026] [:error] [pid 51113:tid 51132] [client 20.166.9.204:4331] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xwx1.php"] [unique_id "af39dEQfs7sWtqkpQIeKmAAAANE"]
[Fri May 08 23:12:52.592094 2026] [:error] [pid 61355:tid 61372] [client 20.166.9.204:11243] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xse.php"] [unique_id "af39dPkhJTi30CBXmMnniQAAAYs"]
[Fri May 08 23:12:53.138115 2026] [:error] [pid 51113:tid 51118] [client 20.166.9.204:10126] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xse.php"] [unique_id "af39dUQfs7sWtqkpQIeKmgAAAMM"]
[Fri May 08 23:12:53.691871 2026] [:error] [pid 61356:tid 61412] [client 20.166.9.204:10143] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xse.php"] [unique_id "af39dYx3vpB8oWhUq2PygQAAAdg"]
[Fri May 08 23:12:54.241847 2026] [:error] [pid 61355:tid 61377] [client 20.166.9.204:3298] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xse.php"] [unique_id "af39dvkhJTi30CBXmMnnjAAAAZA"]
[Fri May 08 23:49:41.919030 2026] [:error] [pid 51009:tid 51089] [client 130.131.249.131:9298] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "af4GFeB0GbUWhxgzX9VvnAAAAI0"]
[Fri May 08 23:49:45.421858 2026] [:error] [pid 61356:tid 61393] [client 130.131.249.131:9317] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "af4GGYx3vpB8oWhUq2P8pwAAAcU"]
[Fri May 08 23:49:45.818292 2026] [:error] [pid 51113:tid 51135] [client 130.131.249.131:9287] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "af4GGUQfs7sWtqkpQIeN_wAAANQ"]
[Fri May 08 23:49:47.198014 2026] [:error] [pid 61317:tid 61327] [client 130.131.249.131:9320] [client 130.131.249.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "af4GG8-fFk_CedOCOYvuxwAAAUc"]
[Sat May 09 01:17:01.519014 2026] [:error] [pid 51008:tid 51053] [client 13.208.252.11:51970] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "af4ajXB58C2Y1tgLtuLUyAAAAEQ"]
[Sat May 09 01:17:02.266466 2026] [:error] [pid 61355:tid 61380] [client 13.208.252.11:52020] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4ajvkhJTi30CBXmMkiVgAAAZM"]
[Sat May 09 01:17:03.463345 2026] [:error] [pid 51009:tid 51098] [client 13.208.252.11:52054] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "af4aj-B0GbUWhxgzX9WKTgAAAJY"]
[Sat May 09 01:17:04.050475 2026] [:error] [pid 51113:tid 51132] [client 13.208.252.11:52080] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pi.php"] [unique_id "af4akEQfs7sWtqkpQIeYrwAAANE"]
[Sat May 09 01:17:04.635322 2026] [:error] [pid 61355:tid 61381] [client 13.208.252.11:57104] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pinfo.php"] [unique_id "af4akPkhJTi30CBXmMkifgAAAZQ"]
[Sat May 09 01:17:05.215765 2026] [:error] [pid 51007:tid 51039] [client 13.208.252.11:57152] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "af4akVMagSGstWKyzzUWqgAAABE"]
[Sat May 09 01:17:05.794337 2026] [:error] [pid 51113:tid 51124] [client 13.208.252.11:57218] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo"] [unique_id "af4akUQfs7sWtqkpQIeYswAAAMk"]
[Sat May 09 01:17:06.380935 2026] [:error] [pid 61356:tid 61395] [client 13.208.252.11:57270] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/p.php"] [unique_id "af4akox3vpB8oWhUq2MeVQAAAcc"]
[Sat May 09 01:17:06.964480 2026] [:error] [pid 61355:tid 61371] [client 13.208.252.11:57320] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/debug.php"] [unique_id "af4akvkhJTi30CBXmMkigwAAAYo"]
[Sat May 09 01:17:07.543068 2026] [:error] [pid 61317:tid 61323] [client 13.208.252.11:57368] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/phpinfo.php"] [unique_id "af4ak8-fFk_CedOCOYsGZAAAAUM"]
[Sat May 09 01:17:08.127417 2026] [:error] [pid 61356:tid 61408] [client 13.208.252.11:57422] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4alIx3vpB8oWhUq2MeaAAAAdQ"]
[Sat May 09 01:17:08.709232 2026] [:error] [pid 51008:tid 51064] [client 13.208.252.11:57472] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4alHB58C2Y1tgLtuLU1gAAAE8"]
[Sat May 09 01:17:09.291782 2026] [:error] [pid 51008:tid 51065] [client 13.208.252.11:57514] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4alXB58C2Y1tgLtuLU2gAAAFA"]
[Sat May 09 01:17:09.870733 2026] [:error] [pid 61317:tid 61342] [client 13.208.252.11:57552] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4alc-fFk_CedOCOYsGcQAAAVY"]
[Sat May 09 01:17:10.456442 2026] [:error] [pid 51113:tid 51138] [client 13.208.252.11:57592] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4alkQfs7sWtqkpQIeYtwAAANc"]
[Sat May 09 01:17:11.044302 2026] [:error] [pid 51113:tid 51116] [client 13.208.252.11:57632] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info"] [unique_id "af4al0Qfs7sWtqkpQIeYuwAAAME"]
[Sat May 09 01:17:11.627146 2026] [:error] [pid 61355:tid 61371] [client 13.208.252.11:57696] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/php-info.php"] [unique_id "af4al_khJTi30CBXmMkipgAAAYo"]
[Sat May 09 01:17:12.207331 2026] [:error] [pid 61355:tid 61363] [client 13.208.252.11:57750] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "af4amPkhJTi30CBXmMkirQAAAYI"]
[Sat May 09 01:17:12.787275 2026] [:error] [pid 61356:tid 61401] [client 13.208.252.11:57800] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_phpinfo.php"] [unique_id "af4amIx3vpB8oWhUq2MedwAAAc0"]
[Sat May 09 01:17:13.369695 2026] [:error] [pid 51113:tid 51118] [client 13.208.252.11:57844] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4amUQfs7sWtqkpQIeYvgAAAMM"]
[Sat May 09 01:17:13.947580 2026] [:error] [pid 61355:tid 61375] [client 13.208.252.11:57888] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server-info.php"] [unique_id "af4amfkhJTi30CBXmMkiugAAAY4"]
[Sat May 09 01:17:14.528692 2026] [:error] [pid 61355:tid 61381] [client 13.208.252.11:52726] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/server-status.php"] [unique_id "af4amvkhJTi30CBXmMkiwgAAAZQ"]
[Sat May 09 01:17:15.114450 2026] [:error] [pid 61356:tid 61408] [client 13.208.252.11:52774] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4am4x3vpB8oWhUq2MegwAAAdQ"]
[Sat May 09 01:17:15.706663 2026] [:error] [pid 51113:tid 51128] [client 13.208.252.11:52816] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/_environment"] [unique_id "af4am0Qfs7sWtqkpQIeYxQAAAM0"]
[Sat May 09 01:17:16.285808 2026] [:error] [pid 51008:tid 51056] [client 13.208.252.11:52870] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4anHB58C2Y1tgLtuLU8wAAAEc"]
[Sat May 09 01:17:16.866963 2026] [:error] [pid 51009:tid 51084] [client 13.208.252.11:52904] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4anOB0GbUWhxgzX9WKcwAAAIg"]
[Sat May 09 01:17:17.447108 2026] [:error] [pid 51007:tid 51046] [client 13.208.252.11:52952] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4anVMagSGstWKyzzUWugAAABg"]
[Sat May 09 01:17:18.027654 2026] [:error] [pid 61317:tid 61342] [client 13.208.252.11:53010] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4ans-fFk_CedOCOYsGggAAAVY"]
[Sat May 09 01:17:18.615463 2026] [:error] [pid 34318:tid 34321] [client 13.208.252.11:53058] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4ansr3guirgJiKhzAA0QAAAQE"]
[Sat May 09 01:17:19.195316 2026] [:error] [pid 61355:tid 61374] [client 13.208.252.11:53104] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4an_khJTi30CBXmMki1wAAAY0"]
[Sat May 09 01:17:19.776818 2026] [:error] [pid 61356:tid 61398] [client 13.208.252.11:53142] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4an4x3vpB8oWhUq2MelgAAAco"]
[Sat May 09 01:17:20.358728 2026] [:error] [pid 51008:tid 51062] [client 13.208.252.11:53192] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4aoHB58C2Y1tgLtuLVBgAAAE0"]
[Sat May 09 01:17:20.941434 2026] [:error] [pid 34318:tid 34324] [client 13.208.252.11:53228] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php~"] [unique_id "af4aoMr3guirgJiKhzAA2wAAAQQ"]
[Sat May 09 01:17:21.524177 2026] [:error] [pid 51007:tid 51035] [client 13.208.252.11:53270] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/info.php.bak"] [unique_id "af4aoVMagSGstWKyzzUWwwAAAA0"]
[Sat May 09 01:17:22.106604 2026] [:error] [pid 61355:tid 61372] [client 13.208.252.11:53308] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4aovkhJTi30CBXmMki7wAAAYs"]
[Sat May 09 01:17:22.689639 2026] [:error] [pid 61356:tid 61391] [client 13.208.252.11:53348] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4aoox3vpB8oWhUq2MeoAAAAcM"]
[Sat May 09 01:17:23.276832 2026] [:error] [pid 61317:tid 61339] [client 13.208.252.11:53382] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4ao8-fFk_CedOCOYsGigAAAVM"]
[Sat May 09 01:17:23.864333 2026] [:error] [pid 51113:tid 51127] [client 13.208.252.11:53412] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4ao0Qfs7sWtqkpQIeY0wAAAMw"]
[Sat May 09 01:17:24.450581 2026] [:error] [pid 61356:tid 61390] [client 13.208.252.11:36716] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4apIx3vpB8oWhUq2MerQAAAcI"]
[Sat May 09 01:17:25.039014 2026] [:error] [pid 61355:tid 61381] [client 13.208.252.11:36760] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4apfkhJTi30CBXmMki-gAAAZQ"]
[Sat May 09 01:17:25.619364 2026] [:error] [pid 61355:tid 61384] [client 13.208.252.11:36810] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4apfkhJTi30CBXmMki_AAAAZc"]
[Sat May 09 01:17:26.200107 2026] [:error] [pid 51009:tid 51077] [client 13.208.252.11:36848] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4apuB0GbUWhxgzX9WKgwAAAIE"]
[Sat May 09 01:17:26.785488 2026] [:error] [pid 61356:tid 61411] [client 13.208.252.11:36876] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4apox3vpB8oWhUq2MetQAAAdc"]
[Sat May 09 01:17:27.366304 2026] [:error] [pid 61355:tid 61376] [client 13.208.252.11:36914] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4ap_khJTi30CBXmMkjDQAAAY8"]
[Sat May 09 01:17:27.947864 2026] [:error] [pid 51113:tid 51120] [client 13.208.252.11:36930] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4ap0Qfs7sWtqkpQIeY1wAAAMU"]
[Sat May 09 01:17:28.532000 2026] [:error] [pid 34318:tid 34338] [client 13.208.252.11:36944] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4aqMr3guirgJiKhzAA5AAAARI"]
[Sat May 09 01:17:29.141656 2026] [:error] [pid 51008:tid 51057] [client 13.208.252.11:36972] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4aqXB58C2Y1tgLtuLVKQAAAEg"]
[Sat May 09 01:17:29.729295 2026] [:error] [pid 34318:tid 34341] [client 13.208.252.11:36978] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4aqcr3guirgJiKhzAA5QAAARU"]
[Sat May 09 01:17:30.309469 2026] [:error] [pid 61317:tid 61329] [client 13.208.252.11:36996] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4aqs-fFk_CedOCOYsGngAAAUk"]
[Sat May 09 01:57:27.084863 2026] [:error] [pid 61355:tid 61382] [client 45.154.98.197:62307] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "af4kB_khJTi30CBXmMlHOAAAAZU"]
[Sat May 09 01:57:27.594833 2026] [:error] [pid 61356:tid 61391] [client 45.154.98.197:62657] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "af4kB4x3vpB8oWhUq2M24QAAAcM"]
[Sat May 09 01:57:28.098831 2026] [:error] [pid 51007:tid 51028] [client 45.154.98.197:62919] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "af4kCFMagSGstWKyzzUg2QAAAAY"]
[Sat May 09 01:57:29.117684 2026] [:error] [pid 51113:tid 51118] [client 45.154.98.197:63663] [client 45.154.98.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/txets.php"] [unique_id "af4kCUQfs7sWtqkpQIee6QAAAMM"]
[Sat May 09 02:22:34.433932 2026] [:error] [pid 61356:tid 61405] [client 3.101.153.28:44372] [client 3.101.153.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.git/config"] [unique_id "af4p6ox3vpB8oWhUq2NCywAAAdE"]
[Sat May 09 02:22:35.275556 2026] [:error] [pid 61356:tid 61402] [client 3.101.153.28:44396] [client 3.101.153.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4p64x3vpB8oWhUq2NCzwAAAc4"]
[Sat May 09 02:22:36.629674 2026] [:error] [pid 61356:tid 61391] [client 3.101.153.28:44446] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/i.php"] [unique_id "af4p7Ix3vpB8oWhUq2NC5wAAAcM"]
[Sat May 09 02:22:37.289323 2026] [:error] [pid 51009:tid 51077] [client 3.101.153.28:44454] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pi.php"] [unique_id "af4p7eB0GbUWhxgzX9WloAAAAIE"]
[Sat May 09 02:22:37.946945 2026] [:error] [pid 34318:tid 34343] [client 3.101.153.28:44496] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/pinfo.php"] [unique_id "af4p7cr3guirgJiKhzAMXQAAARc"]
[Sat May 09 02:22:38.609938 2026] [:error] [pid 61355:tid 61363] [client 3.101.153.28:44530] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/test.php"] [unique_id "af4p7vkhJTi30CBXmMlYjgAAAYI"]
[Sat May 09 02:22:39.273673 2026] [:error] [pid 34318:tid 34324] [client 3.101.153.28:44558] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpinfo"] [unique_id "af4p78r3guirgJiKhzAMXgAAAQQ"]
[Sat May 09 02:22:39.930310 2026] [:error] [pid 51008:tid 51072] [client 3.101.153.28:44598] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/p.php"] [unique_id "af4p73B58C2Y1tgLtuLn6wAAAFc"]
[Sat May 09 02:22:40.589194 2026] [:error] [pid 61356:tid 61403] [client 3.101.153.28:44650] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/debug.php"] [unique_id "af4p8Ix3vpB8oWhUq2NC8wAAAc8"]
[Sat May 09 02:22:41.244345 2026] [:error] [pid 51007:tid 51030] [client 3.101.153.28:42514] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/admin/phpinfo.php"] [unique_id "af4p8VMagSGstWKyzzUk7wAAAAg"]
[Sat May 09 02:22:41.897673 2026] [:error] [pid 51008:tid 51061] [client 3.101.153.28:42540] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4p8XB58C2Y1tgLtuLn7wAAAEw"]
[Sat May 09 02:22:42.584047 2026] [:error] [pid 51007:tid 51037] [client 3.101.153.28:42596] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4p8lMagSGstWKyzzUk9QAAAA8"]
[Sat May 09 02:22:43.238086 2026] [:error] [pid 51007:tid 51022] [client 3.101.153.28:42626] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4p81MagSGstWKyzzUk-QAAAAA"]
[Sat May 09 02:22:43.901398 2026] [:error] [pid 51008:tid 51071] [client 3.101.153.28:42672] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4p83B58C2Y1tgLtuLn8wAAAFY"]
[Sat May 09 02:22:44.569890 2026] [:error] [pid 61356:tid 61411] [client 3.101.153.28:42718] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4p9Ix3vpB8oWhUq2NC-QAAAdc"]
[Sat May 09 02:22:45.224810 2026] [:error] [pid 51007:tid 51040] [client 3.101.153.28:42754] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info"] [unique_id "af4p9VMagSGstWKyzzUk_gAAABI"]
[Sat May 09 02:22:45.881111 2026] [:error] [pid 51009:tid 51088] [client 3.101.153.28:42796] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/php-info.php"] [unique_id "af4p9eB0GbUWhxgzX9WlpAAAAIw"]
[Sat May 09 02:22:46.529918 2026] [:error] [pid 61355:tid 61385] [client 3.101.153.28:42844] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpversion.php"] [unique_id "af4p9vkhJTi30CBXmMlYnAAAAZg"]
[Sat May 09 02:22:47.176221 2026] [:error] [pid 51009:tid 51089] [client 3.101.153.28:42890] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/_phpinfo.php"] [unique_id "af4p9-B0GbUWhxgzX9WlpwAAAI0"]
[Sat May 09 02:22:47.824621 2026] [:error] [pid 51008:tid 51068] [client 3.101.153.28:42924] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4p93B58C2Y1tgLtuLn9wAAAFM"]
[Sat May 09 02:22:48.479675 2026] [:error] [pid 51007:tid 51032] [client 3.101.153.28:42962] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/server-info.php"] [unique_id "af4p-FMagSGstWKyzzUlAwAAAAo"]
[Sat May 09 02:22:49.135469 2026] [:error] [pid 51007:tid 51024] [client 3.101.153.28:43020] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/server-status.php"] [unique_id "af4p-VMagSGstWKyzzUlCAAAAAI"]
[Sat May 09 02:22:49.790207 2026] [:error] [pid 61356:tid 61397] [client 3.101.153.28:43068] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4p-Yx3vpB8oWhUq2NDAwAAAck"]
[Sat May 09 02:22:50.443137 2026] [:error] [pid 61356:tid 61394] [client 3.101.153.28:43106] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/_environment"] [unique_id "af4p-ox3vpB8oWhUq2NDBQAAAcY"]
[Sat May 09 02:22:51.100669 2026] [:error] [pid 61356:tid 61393] [client 3.101.153.28:49048] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4p-4x3vpB8oWhUq2NDCgAAAcU"]
[Sat May 09 02:22:51.758558 2026] [:error] [pid 61355:tid 61361] [client 3.101.153.28:49088] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4p-_khJTi30CBXmMlYpAAAAYA"]
[Sat May 09 02:22:52.414763 2026] [:error] [pid 61355:tid 61379] [client 3.101.153.28:49126] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4p_PkhJTi30CBXmMlYqQAAAZI"]
[Sat May 09 02:22:53.072669 2026] [:error] [pid 51113:tid 51121] [client 3.101.153.28:49172] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4p_UQfs7sWtqkpQIehdQAAAMY"]
[Sat May 09 02:22:53.730024 2026] [:error] [pid 51007:tid 51045] [client 3.101.153.28:49222] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4p_VMagSGstWKyzzUlDAAAABc"]
[Sat May 09 02:22:54.387116 2026] [:error] [pid 51113:tid 51115] [client 3.101.153.28:49252] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4p_kQfs7sWtqkpQIeheQAAAMA"]
[Sat May 09 02:22:55.047898 2026] [:error] [pid 51007:tid 51029] [client 3.101.153.28:49284] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4p_1MagSGstWKyzzUlFAAAAAc"]
[Sat May 09 02:22:55.704251 2026] [:error] [pid 51007:tid 51022] [client 3.101.153.28:49314] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4p_1MagSGstWKyzzUlFQAAAAA"]
[Sat May 09 02:22:56.358786 2026] [:error] [pid 51009:tid 51086] [client 3.101.153.28:49364] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpinfo.php~"] [unique_id "af4qAOB0GbUWhxgzX9WlugAAAIo"]
[Sat May 09 02:22:57.017879 2026] [:error] [pid 61356:tid 61397] [client 3.101.153.28:49396] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/info.php.bak"] [unique_id "af4qAYx3vpB8oWhUq2NDFwAAAck"]
[Sat May 09 02:22:57.677135 2026] [:error] [pid 61355:tid 61370] [client 3.101.153.28:49444] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4qAfkhJTi30CBXmMlYsAAAAYk"]
[Sat May 09 02:22:58.333799 2026] [:error] [pid 61355:tid 61361] [client 3.101.153.28:49484] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4qAvkhJTi30CBXmMlYtAAAAYA"]
[Sat May 09 02:22:58.990479 2026] [:error] [pid 51007:tid 51045] [client 3.101.153.28:49516] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4qAlMagSGstWKyzzUlHwAAABc"]
[Sat May 09 02:22:59.644938 2026] [:error] [pid 51007:tid 51041] [client 3.101.153.28:49574] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4qA1MagSGstWKyzzUlIQAAABM"]
[Sat May 09 02:23:00.309447 2026] [:error] [pid 51009:tid 51086] [client 3.101.153.28:49628] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4qBOB0GbUWhxgzX9WlyQAAAIo"]
[Sat May 09 02:23:00.969177 2026] [:error] [pid 61355:tid 61378] [client 3.101.153.28:49242] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4qBPkhJTi30CBXmMlYvgAAAZE"]
[Sat May 09 02:23:01.635303 2026] [:error] [pid 51009:tid 51099] [client 3.101.153.28:49300] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4qBeB0GbUWhxgzX9WlzgAAAJc"]
[Sat May 09 02:23:02.297268 2026] [:error] [pid 61356:tid 61405] [client 3.101.153.28:49338] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4qBox3vpB8oWhUq2NDGwAAAdE"]
[Sat May 09 02:23:02.954102 2026] [:error] [pid 61356:tid 61409] [client 3.101.153.28:49372] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4qBox3vpB8oWhUq2NDIAAAAdU"]
[Sat May 09 02:23:03.608444 2026] [:error] [pid 61356:tid 61407] [client 3.101.153.28:49394] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4qB4x3vpB8oWhUq2NDJgAAAdM"]
[Sat May 09 02:23:04.262892 2026] [:error] [pid 51007:tid 51031] [client 3.101.153.28:49414] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4qCFMagSGstWKyzzUlJwAAAAk"]
[Sat May 09 02:23:04.920531 2026] [:error] [pid 61355:tid 61380] [client 3.101.153.28:49446] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4qCPkhJTi30CBXmMlYzgAAAZM"]
[Sat May 09 02:23:05.577164 2026] [:error] [pid 61317:tid 61320] [client 3.101.153.28:49466] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4qCc-fFk_CedOCOYsbYQAAAUA"]
[Sat May 09 02:23:06.234801 2026] [:error] [pid 61356:tid 61410] [client 3.101.153.28:49478] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4qCox3vpB8oWhUq2NDLQAAAdY"]
[Sat May 09 02:23:06.884404 2026] [:error] [pid 61356:tid 61409] [client 3.101.153.28:49500] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4qCox3vpB8oWhUq2NDMAAAAdU"]
[Sat May 09 04:00:21.393009 2026] [:error] [pid 9187:tid 9266] [client 45.130.83.100:23623] [client 45.130.83.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.83.100, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "af5A1RC7An6gkXsRsaG4pgAAAI0"]
[Sat May 09 04:03:37.170076 2026] [:error] [pid 9186:tid 9247] [client 13.208.252.11:42516] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "af5BmRW4eFOEw1mKOgJfsAAAAFU"]
[Sat May 09 04:03:37.927141 2026] [:error] [pid 9293:tid 9299] [client 13.208.252.11:42548] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "af5BmZR__qEzV5O6Z2OICQAAAMI"]
[Sat May 09 04:03:38.515853 2026] [:error] [pid 9184:tid 9210] [client 13.208.252.11:42578] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "af5BmojfODqb_i0Fm99LKgAAAA0"]
[Sat May 09 04:03:40.605341 2026] [:error] [pid 9663:tid 9682] [client 13.208.252.11:42714] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.staging"] [unique_id "af5BnJcWIu01SCxbjwuqmAAAARA"]
[Sat May 09 04:03:41.188309 2026] [:error] [pid 9663:tid 9690] [client 13.208.252.11:42750] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "af5BnZcWIu01SCxbjwuqnQAAARg"]
[Sat May 09 04:03:41.769074 2026] [:error] [pid 9920:tid 9933] [client 13.208.252.11:42802] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.test"] [unique_id "af5BnUxitGYhlzgZb5Y4dgAAAcs"]
[Sat May 09 08:10:26.233584 2026] [:error] [pid 9187:tid 9273] [client 43.135.140.225:56860] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "af57chC7An6gkXsRsaEQaAAAAJQ"]
[Sat May 09 10:30:04.082659 2026] [:error] [pid 9663:tid 9682] [client 162.14.66.219:47842] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "af6cLJcWIu01SCxbjwsBUQAAARA"]
[Sat May 09 11:14:14.291593 2026] [:error] [pid 9920:tid 9929] [client 45.154.98.198:57042] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mhkxitGYhlzgZb5artwAAAcc"], referer: www.google.com
[Sat May 09 11:14:14.291954 2026] [:error] [pid 9187:tid 9276] [client 45.154.98.198:57067] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "af6mhhC7An6gkXsRsaFG-gAAAJc"]
[Sat May 09 11:14:14.295095 2026] [:error] [pid 9187:tid 9263] [client 45.154.98.198:57017] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mhhC7An6gkXsRsaFG-wAAAIo"], referer: www.google.com
[Sat May 09 11:14:14.790269 2026] [:error] [pid 9760:tid 9776] [client 45.154.98.198:58290] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mhmIkCp-C_fh0s7IrBwAAAUo"], referer: www.google.com
[Sat May 09 11:14:14.790724 2026] [:error] [pid 9833:tid 9860] [client 45.154.98.198:58292] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "af6mhiM9JmxIS0KGZUBg_AAAAZY"]
[Sat May 09 11:14:14.793879 2026] [:error] [pid 9833:tid 9840] [client 45.154.98.198:58300] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mhiM9JmxIS0KGZUBg_QAAAYI"], referer: www.google.com
[Sat May 09 11:14:15.041148 2026] [:error] [pid 9760:tid 9772] [client 45.154.98.198:57018] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "af6mh2IkCp-C_fh0s7IrCAAAAUY"]
[Sat May 09 11:14:15.042072 2026] [:error] [pid 9920:tid 9939] [client 45.154.98.198:57051] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mh0xitGYhlzgZb5aruwAAAdE"], referer: www.google.com
[Sat May 09 11:14:15.293211 2026] [:error] [pid 9186:tid 9234] [client 45.154.98.198:59613] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mhxW4eFOEw1mKOgKtpgAAAEg"], referer: www.google.com
[Sat May 09 11:14:15.537207 2026] [:error] [pid 9187:tid 9277] [client 45.154.98.198:60004] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "af6mhxC7An6gkXsRsaFHAAAAAJg"]
[Sat May 09 11:14:15.542110 2026] [:error] [pid 9187:tid 9253] [client 45.154.98.198:60015] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mhxC7An6gkXsRsaFHAQAAAIA"], referer: www.google.com
[Sat May 09 11:14:15.789205 2026] [:error] [pid 9187:tid 9269] [client 45.154.98.198:60369] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mhxC7An6gkXsRsaFHBwAAAJA"], referer: www.google.com
[Sat May 09 11:14:16.036633 2026] [:error] [pid 9920:tid 9942] [client 45.154.98.198:61142] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "af6miExitGYhlzgZb5arvwAAAdQ"]
[Sat May 09 11:14:16.043765 2026] [:error] [pid 9187:tid 9259] [client 45.154.98.198:61148] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6miBC7An6gkXsRsaFHCwAAAIY"], referer: www.google.com
[Sat May 09 11:14:16.290104 2026] [:error] [pid 9187:tid 9271] [client 45.154.98.198:61943] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6miBC7An6gkXsRsaFHDgAAAJI"], referer: www.google.com
[Sat May 09 11:14:16.296490 2026] [:error] [pid 9293:tid 9319] [client 45.154.98.198:58302] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6miJR__qEzV5O6Z2NSGAAAANY"], referer: www.google.com
[Sat May 09 11:14:16.546934 2026] [:error] [pid 9187:tid 9257] [client 45.154.98.198:58304] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6miBC7An6gkXsRsaFHDwAAAIQ"], referer: www.google.com
[Sat May 09 11:14:17.288088 2026] [:error] [pid 9187:tid 9272] [client 45.154.98.198:63093] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6miRC7An6gkXsRsaFHEgAAAJM"], referer: www.google.com
[Sat May 09 11:14:17.546208 2026] [:error] [pid 9187:tid 9268] [client 45.154.98.198:64068] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6miRC7An6gkXsRsaFHFAAAAI8"], referer: www.google.com
[Sat May 09 11:14:18.292180 2026] [:error] [pid 9187:tid 9275] [client 45.154.98.198:49520] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mihC7An6gkXsRsaFHFwAAAJY"], referer: www.google.com
[Sat May 09 11:14:18.545808 2026] [:error] [pid 9187:tid 9254] [client 45.154.98.198:49822] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mihC7An6gkXsRsaFHGQAAAIE"], referer: www.google.com
[Sat May 09 11:14:19.287185 2026] [:error] [pid 9293:tid 9315] [client 45.154.98.198:51171] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mi5R__qEzV5O6Z2NSGgAAANI"], referer: www.google.com
[Sat May 09 11:14:19.554089 2026] [:error] [pid 9293:tid 9306] [client 45.154.98.198:51778] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "af6mi5R__qEzV5O6Z2NSHAAAAMk"], referer: www.google.com
[Sat May 09 11:14:20.288871 2026] [:error] [pid 9833:tid 9845] [client 45.154.98.198:53820] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mjCM9JmxIS0KGZUBhAgAAAYc"], referer: www.google.com
[Sat May 09 11:14:21.294362 2026] [:error] [pid 9184:tid 9220] [client 45.154.98.198:56191] [client 45.154.98.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "af6mjYjfODqb_i0Fm998owAAABc"], referer: www.google.com
[Sat May 09 14:43:55.347591 2026] [:error] [pid 9833:tid 9846] [client 106.215.161.193:22849] [client 106.215.161.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.161.193, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "af7XqyM9JmxIS0KGZUB5mQAAAYg"]
[Sat May 09 17:28:32.810809 2026] [:error] [pid 9293:tid 9321] [client 43.153.15.51:37860] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "af7-QJR__qEzV5O6Z2PARAAAANg"]
[Sat May 09 17:45:28.551549 2026] [:error] [pid 9293:tid 9306] [client 38.158.83.105:52404] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "af8COJR__qEzV5O6Z2PGrQAAAMk"]
[Sat May 09 17:45:30.890471 2026] [:error] [pid 9293:tid 9304] [client 38.158.83.105:52404] [client 38.158.83.105] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 38.158.83.105, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "af8COpR__qEzV5O6Z2PGvgAAAMc"]
[Sat May 09 22:12:56.030509 2026] [:error] [pid 55182:tid 55222] [client 124.156.225.181:37832] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "af9A6DaxmP-S8ASrqQng3gAAAMo"]
[Sun May 10 01:26:59.437001 2026] [:error] [pid 62831:tid 62857] [client 43.159.152.4:49286] [client 43.159.152.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.com.au"] [uri "/"] [unique_id "af9uY-YBNqNhtZ_l7qBnIQAAABg"]
[Sun May 10 09:00:53.666509 2026] [:error] [pid 52634:tid 52641] [client 170.106.160.90:56524] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "af_Yxdwp8XoWCwFb54CbHgAAAMM"]
[Sun May 10 13:52:54.373936 2026] [:error] [pid 46329:tid 46339] [client 103.252.166.50:3164] [client 103.252.166.50] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.252.166.50, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "agAdNuFo7Z2I88d0gPJvfQAAAAY"]
[Wed May 20 12:56:29.658123 2026] [:error] [pid 7731:tid 7738] [client 103.215.74.60:18564] [client 103.215.74.60] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||measureyourcause.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag0-_X9qQlHXbkl2nEuH9AAAAYU"]
[Wed May 20 12:56:29.658217 2026] [:error] [pid 7731:tid 7738] [client 103.215.74.60:18564] [client 103.215.74.60] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag0-_X9qQlHXbkl2nEuH9AAAAYU"]
[Wed May 20 12:56:30.269393 2026] [:error] [pid 7731:tid 7740] [client 103.215.74.60:18564] [client 103.215.74.60] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||measureyourcause.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag0-_n9qQlHXbkl2nEuH9wAAAYc"]
[Wed May 20 12:56:30.269483 2026] [:error] [pid 7731:tid 7740] [client 103.215.74.60:18564] [client 103.215.74.60] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag0-_n9qQlHXbkl2nEuH9wAAAYc"]
[Wed May 20 14:24:52.427197 2026] [:error] [pid 44059:tid 44081] [client 43.152.72.244:35658] [client 43.152.72.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag1TtBfFs-oSOOcyjyzNOAAAARQ"]
[Wed May 20 19:14:37.608486 2026] [:error] [pid 44059:tid 44068] [client 43.159.57.144:52916] [client 43.159.57.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag2XnRfFs-oSOOcyjywONgAAAQc"]
[Wed May 20 22:41:53.385845 2026] [:error] [pid 41364:tid 41386] [client 195.178.110.105:50616] [client 195.178.110.105] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||measureyourcause.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag3IMBKTmyvxtNXrN-j05AAAAJQ"]
[Wed May 20 22:41:53.385946 2026] [:error] [pid 41364:tid 41386] [client 195.178.110.105:50616] [client 195.178.110.105] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||measureyourcause.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag3IMBKTmyvxtNXrN-j05AAAAJQ"]
[Wed May 20 23:54:30.802910 2026] [:error] [pid 41364:tid 41373] [client 43.164.3.182:44568] [client 43.164.3.182] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag3ZNhKTmyvxtNXrN-gLPgAAAIc"]
[Thu May 21 02:35:26.714196 2026] [:error] [pid 44059:tid 44074] [client 102.67.247.185:9656] [client 102.67.247.185] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "ag3-7hfFs-oSOOcyjyxnSgAAAQ0"]
[Thu May 21 13:22:25.474735 2026] [:error] [pid 49884:tid 49969] [client 49.149.78.201:37272] [client 49.149.78.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.78.201, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ag6Wka5MPpsTNNHWS6hQEgAAAJY"]
[Thu May 21 20:45:15.362709 2026] [:error] [pid 9188:tid 9201] [client 43.164.192.151:59262] [client 43.164.192.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag7-W7GYm6q5dNSUvA_pmAAAAck"]
[Thu May 21 23:11:56.330629 2026] [autoindex:error] [pid 49982:tid 49993] [client 20.78.148.25:5714] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu May 21 23:11:57.941603 2026] [:error] [pid 49982:tid 49998] [client 20.78.148.25:5714] [client 20.78.148.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "ag8gvWFwIDa5Tf8O4bYgQwAAAM4"]
[Thu May 21 23:11:58.429644 2026] [:error] [pid 9157:tid 9164] [client 20.78.148.25:10506] [client 20.78.148.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "ag8gvsGfHcLNqE8m88KilAAAAYU"]
[Thu May 21 23:11:58.917695 2026] [:error] [pid 9188:tid 9209] [client 20.78.148.25:9988] [client 20.78.148.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "ag8gvrGYm6q5dNSUvA_91wAAAdE"]
[Thu May 21 23:11:59.415446 2026] [:error] [pid 9114:tid 9117] [client 20.78.148.25:5717] [client 20.78.148.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/class-t.api.php"] [unique_id "ag8gv28FiJqDBEoTvqyLFgAAAUE"]
[Thu May 21 23:15:51.138806 2026] [:error] [pid 49982:tid 50000] [client 38.154.90.11:33810] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag8hp2FwIDa5Tf8O4bYg2wAAANA"]
[Thu May 21 23:15:51.146659 2026] [:error] [pid 49982:tid 49998] [client 38.154.90.11:46337] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/sitemap.xml"] [unique_id "ag8hp2FwIDa5Tf8O4bYg3AAAAM4"]
[Thu May 21 23:15:51.158825 2026] [:error] [pid 9188:tid 9207] [client 38.154.90.11:59776] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "ag8hp7GYm6q5dNSUvA_-KgAAAc8"]
[Thu May 21 23:15:52.507394 2026] [:error] [pid 9188:tid 9201] [client 38.154.90.11:48451] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/robots.txt"] [unique_id "ag8hqLGYm6q5dNSUvA_-KwAAAck"]
[Thu May 21 23:15:52.527107 2026] [:error] [pid 9188:tid 9205] [client 38.154.90.11:59126] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/sitemap.xml"] [unique_id "ag8hqLGYm6q5dNSUvA_-LAAAAc0"]
[Thu May 21 23:15:53.124899 2026] [:error] [pid 9157:tid 9176] [client 38.154.90.11:54387] [client 38.154.90.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag8hqcGfHcLNqE8m88KixAAAAZE"], referer: http://measureyourcause.com.au
[Fri May 22 02:02:25.507797 2026] [:error] [pid 49982:tid 50002] [client 43.130.150.80:47510] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag9IsWFwIDa5Tf8O4bY5MQAAANI"]
[Fri May 22 07:37:31.738467 2026] [:error] [pid 15583:tid 15588] [client 43.130.16.212:59550] [client 43.130.16.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ag-XO3naOncRcIm17YWGRAAAAAA"]
[Fri May 22 08:26:15.273804 2026] [:error] [pid 15679:tid 15693] [client 35.208.170.209:34248] [client 35.208.170.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/css/responsive.css"] [unique_id "ag-ipyh8tgGc38WJ-GyRFgAAAMw"]
[Fri May 22 08:26:15.602602 2026] [:error] [pid 15583:tid 15609] [client 35.208.170.209:34246] [client 35.208.170.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/dist/css/AdminLTE.min.css"] [unique_id "ag-ip3naOncRcIm17YWQKQAAABU"]
[Fri May 22 08:28:15.753607 2026] [:error] [pid 15585:tid 15649] [client 35.208.248.100:50956] [client 35.208.248.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/bower_components/Ionicons/css/ionicons.min.css"] [unique_id "ag-jHyKb-vB41AF-LC13KAAAAII"]
[Fri May 22 08:28:16.039447 2026] [:error] [pid 15585:tid 15659] [client 35.208.248.100:50970] [client 35.208.248.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/bower_components/bootstrap-colorpicker/dist/css/bootstrap-colorpicker.min.css"] [unique_id "ag-jICKb-vB41AF-LC13KQAAAIw"]
[Fri May 22 08:28:16.500323 2026] [:error] [pid 15585:tid 15666] [client 35.208.248.100:50960] [client 35.208.248.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/animate.css"] [unique_id "ag-jICKb-vB41AF-LC13KgAAAJM"]
[Fri May 22 09:17:59.980051 2026] [:error] [pid 15585:tid 15653] [client 45.131.195.33:51709] [client 45.131.195.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ag-uxyKb-vB41AF-LC2YEgAAAIY"]
[Fri May 22 14:33:37.077302 2026] [:error] [pid 15584:tid 15640] [client 104.28.216.170:17677] [client 104.28.216.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ag_4wd9Z_TVLbNEx52jrUgAAAFQ"]
[Fri May 22 14:33:37.086092 2026] [:error] [pid 15584:tid 15629] [client 104.28.216.170:14693] [client 104.28.216.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "ag_4wd9Z_TVLbNEx52jrVAAAAEk"]
[Fri May 22 16:00:26.717249 2026] [:error] [pid 15585:tid 15658] [client 51.158.203.240:40024] [client 51.158.203.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app-ads.txt"] [unique_id "ahANGiKb-vB41AF-LC0vfwAAAIs"]
[Fri May 22 16:00:27.213357 2026] [:error] [pid 15585:tid 15671] [client 51.158.203.240:40040] [client 51.158.203.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app-ads.txt"] [unique_id "ahANGyKb-vB41AF-LC0vggAAAJg"]
[Fri May 22 16:00:27.724049 2026] [:error] [pid 15585:tid 15670] [client 51.158.203.240:40056] [client 51.158.203.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sellers.json"] [unique_id "ahANGyKb-vB41AF-LC0vhgAAAJc"]
[Fri May 22 16:00:28.214805 2026] [:error] [pid 15585:tid 15656] [client 51.158.203.240:40072] [client 51.158.203.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sellers.json"] [unique_id "ahANHCKb-vB41AF-LC0viQAAAIk"]
[Fri May 22 16:00:33.117555 2026] [:error] [pid 15585:tid 15653] [client 51.158.203.240:40078] [client 51.158.203.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ads.txt"] [unique_id "ahANISKb-vB41AF-LC0vmAAAAIY"]
[Fri May 22 16:00:34.122465 2026] [:error] [pid 58813:tid 58832] [client 51.158.203.240:40092] [client 51.158.203.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app-ads.txt"] [unique_id "ahANIp6yyKWDKULhxJ1gBAAAAVA"]
[Fri May 22 16:00:35.124076 2026] [:error] [pid 15585:tid 15664] [client 51.158.203.240:60582] [client 51.158.203.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sellers.json"] [unique_id "ahANIyKb-vB41AF-LC0voQAAAJE"]
[Fri May 22 17:06:18.894285 2026] [:error] [pid 15585:tid 15664] [client 161.118.202.128:49736] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAciiKb-vB41AF-LC1HIgAAAJE"]
[Fri May 22 17:06:19.086549 2026] [:error] [pid 58782:tid 58785] [client 161.118.202.128:49835] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAci4xsdTFafgO8vhQNMwAAAQE"]
[Fri May 22 17:11:08.227076 2026] [:error] [pid 58782:tid 58807] [client 34.93.63.75:61358] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahAdrIxsdTFafgO8vhQNtgAAARc"]
[Fri May 22 17:11:08.517619 2026] [:error] [pid 15583:tid 15589] [client 34.93.63.75:62871] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrHnaOncRcIm17YX1MgAAAAE"]
[Fri May 22 17:11:08.809256 2026] [:error] [pid 58813:tid 58840] [client 34.93.63.75:64616] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feed/"] [unique_id "ahAdrJ6yyKWDKULhxJ1rcgAAAVg"]
[Fri May 22 19:06:34.883224 2026] [:error] [pid 15583:tid 15606] [client 170.106.193.108:34536] [client 170.106.193.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahA4unnaOncRcIm17YUIqQAAABI"]
[Fri May 22 23:42:20.043962 2026] [:error] [pid 15583:tid 15590] [client 34.118.23.254:54324] [client 34.118.23.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ahB5XHnaOncRcIm17YVFGgAAAAI"]
[Sat May 23 06:28:58.314037 2026] [:error] [pid 30941:tid 30997] [client 1.15.52.154:34550] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahDYqnTIgjSDhiZmvlUjjAAAAFU"]
[Sat May 23 14:45:09.267326 2026] [:error] [pid 30940:tid 30961] [client 172.212.197.135:36613] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahFM9ZqUP2XZmzp7RDrXjQAAAAw"]
[Sat May 23 14:45:16.208325 2026] [:error] [pid 30942:tid 31018] [client 172.212.197.135:37805] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahFM_NUosz64YFiBlG01LAAAAI8"]
[Sat May 23 14:45:20.969656 2026] [:error] [pid 31039:tid 31045] [client 172.212.197.135:37712] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahFNAKIYDYo8WvA5zLL5BQAAAMQ"]
[Sat May 23 14:45:23.711041 2026] [:error] [pid 25876:tid 25880] [client 172.212.197.135:38281] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahFNAwSpWUCKPezIBJBKNwAAAQI"]
[Sat May 23 14:45:24.762204 2026] [:error] [pid 25876:tid 25890] [client 172.212.197.135:38237] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xminie.php"] [unique_id "ahFNBASpWUCKPezIBJBKPAAAAQw"]
[Sat May 23 14:45:26.017889 2026] [:error] [pid 25876:tid 25900] [client 172.212.197.135:38320] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xminie.php"] [unique_id "ahFNBgSpWUCKPezIBJBKQQAAARY"]
[Sat May 23 14:45:28.898086 2026] [:error] [pid 30942:tid 31008] [client 172.212.197.135:38246] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xminie.php"] [unique_id "ahFNCNUosz64YFiBlG01WAAAAIU"]
[Sat May 23 14:45:36.260371 2026] [:error] [pid 31039:tid 31058] [client 172.212.197.135:5293] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xminie.php"] [unique_id "ahFNEKIYDYo8WvA5zLL5FwAAANE"]
[Sat May 23 14:45:40.108968 2026] [:error] [pid 30942:tid 31019] [client 172.212.197.135:38308] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "ahFNFNUosz64YFiBlG01YQAAAJA"]
[Sat May 23 14:45:45.323216 2026] [:error] [pid 30941:tid 30979] [client 172.212.197.135:38303] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "ahFNGXTIgjSDhiZmvlWEmQAAAEM"]
[Sat May 23 14:45:48.300345 2026] [:error] [pid 31039:tid 31047] [client 172.212.197.135:38218] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "ahFNHKIYDYo8WvA5zLL5JQAAAMY"]
[Sat May 23 14:45:49.814066 2026] [:error] [pid 30942:tid 31023] [client 172.212.197.135:5274] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aaa.php"] [unique_id "ahFNHdUosz64YFiBlG01awAAAJQ"]
[Sat May 23 14:45:50.533284 2026] [:error] [pid 31039:tid 31052] [client 172.212.197.135:5273] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "ahFNHqIYDYo8WvA5zLL5JgAAAMs"]
[Sat May 23 14:45:51.930245 2026] [:error] [pid 25876:tid 25883] [client 172.212.197.135:38331] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "ahFNHwSpWUCKPezIBJBKcQAAAQU"]
[Sat May 23 14:45:53.017293 2026] [:error] [pid 30942:tid 31017] [client 172.212.197.135:38283] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "ahFNIdUosz64YFiBlG01bgAAAI4"]
[Sat May 23 14:45:53.928188 2026] [:error] [pid 31039:tid 31043] [client 172.212.197.135:38301] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bal.php"] [unique_id "ahFNIaIYDYo8WvA5zLL5LAAAAMI"]
[Sat May 23 14:45:56.262096 2026] [:error] [pid 30940:tid 30957] [client 172.212.197.135:5420] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "ahFNJJqUP2XZmzp7RDrXtwAAAAg"]
[Sat May 23 14:45:57.536568 2026] [:error] [pid 31039:tid 31055] [client 172.212.197.135:5423] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "ahFNJaIYDYo8WvA5zLL5PQAAAM4"]
[Sat May 23 14:45:58.373799 2026] [:error] [pid 31039:tid 31048] [client 172.212.197.135:38725] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "ahFNJqIYDYo8WvA5zLL5RwAAAMc"]
[Sat May 23 14:46:00.351481 2026] [:error] [pid 31039:tid 31051] [client 172.212.197.135:38244] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ws81.php"] [unique_id "ahFNKKIYDYo8WvA5zLL5agAAAMo"]
[Sat May 23 14:46:07.299399 2026] [:error] [pid 30942:tid 31009] [client 172.212.197.135:5277] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "ahFNL9Uosz64YFiBlG01rQAAAIY"]
[Sat May 23 14:46:08.432730 2026] [:error] [pid 31039:tid 31059] [client 172.212.197.135:5421] [client 172.212.197.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "ahFNMKIYDYo8WvA5zLL5gwAAANI"]
[Sat May 23 14:46:44.927870 2026] [:error] [pid 25876:tid 25883] [client 172.212.197.135:39328] [client 172.212.197.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.com.au"] [uri "/tiny.php"] [unique_id "ahFNVASpWUCKPezIBJBLKAAAAQU"]
[Sat May 23 19:06:46.153438 2026] [:error] [pid 30940:tid 30973] [client 43.156.51.128:56246] [client 43.156.51.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahGKRpqUP2XZmzp7RDoDXAAAABg"]
[Sun May 24 01:26:19.699661 2026] [:error] [pid 30942:tid 31015] [client 43.166.136.153:59016] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahHjO9Uosz64YFiBlG2ZcgAAAIw"]
[Sun May 24 06:06:56.074666 2026] [:error] [pid 50873:tid 50950] [client 122.51.236.174:36436] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahIlAOlYxsqwDcWZbhLNogAAAIo"]
[Sun May 24 08:46:08.277516 2026] [:error] [pid 58797:tid 58807] [client 103.99.37.229:52814] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "ahJKUPzoIKLVypLB5NhKCwAAAUc"]
[Sun May 24 08:46:08.277834 2026] [:error] [pid 58797:tid 58816] [client 103.99.37.229:52774] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/app/.env"] [unique_id "ahJKUPzoIKLVypLB5NhKDAAAAVA"]
[Sun May 24 08:46:08.278930 2026] [:error] [pid 58918:tid 58935] [client 103.99.37.229:52802] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "ahJKUKT5tvv40jh4HYZBBAAAAY8"]
[Sun May 24 08:46:08.281566 2026] [:error] [pid 58918:tid 58937] [client 103.99.37.229:52842] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/www/.env"] [unique_id "ahJKUKT5tvv40jh4HYZBBQAAAZE"]
[Sun May 24 08:46:08.283920 2026] [:error] [pid 58918:tid 58921] [client 103.99.37.229:52840] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/public/.env"] [unique_id "ahJKUKT5tvv40jh4HYZBBgAAAYE"]
[Sun May 24 08:46:08.297612 2026] [:error] [pid 58918:tid 58934] [client 103.99.37.229:52788] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/admin/.env"] [unique_id "ahJKUKT5tvv40jh4HYZBBwAAAY4"]
[Sun May 24 08:46:08.311920 2026] [:error] [pid 58918:tid 58944] [client 103.99.37.229:52826] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "ahJKUKT5tvv40jh4HYZBCAAAAZg"]
[Sun May 24 08:46:08.316494 2026] [:error] [pid 50871:tid 50883] [client 103.99.37.229:52768] [client 103.99.37.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/storage/.env"] [unique_id "ahJKUOcdOvA3ACH24letdAAAAAM"]
[Sun May 24 09:56:54.569225 2026] [:error] [pid 49744:tid 49752] [client 43.135.133.241:48570] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahJa5jsE5kPdFpUbbHFowAAAAMY"]
[Sun May 24 15:37:20.577973 2026] [:error] [pid 49689:tid 49729] [client 182.8.195.41:3883] [client 182.8.195.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.195.41, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ahKqsAaxiY3NxLUD97VjVQAAAIs"]
[Sun May 24 15:46:18.814206 2026] [:error] [pid 49689:tid 49737] [client 170.64.224.245:52604] [client 170.64.224.245] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||measureyourcause.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahKsygaxiY3NxLUD97VkNQAAAJM"]
[Sun May 24 15:46:18.968717 2026] [:error] [pid 23497:tid 23520] [client 170.64.224.245:52636] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/server/php/"] [unique_id "ahKsyiPlV47QcYwd2v_IPwAAAVQ"]
[Sun May 24 15:46:18.968717 2026] [:error] [pid 49689:tid 49723] [client 170.64.224.245:52604] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahKsygaxiY3NxLUD97VkOAAAAIU"]
[Sun May 24 15:46:18.969317 2026] [:error] [pid 41708:tid 41724] [client 170.64.224.245:52628] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahKsyv4tQzoTxpuHBF6jZQAAAY4"]
[Sun May 24 15:46:18.983471 2026] [:error] [pid 49689:tid 49724] [client 170.64.224.245:52614] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/server/php/"] [unique_id "ahKsygaxiY3NxLUD97VkOQAAAIY"]
[Sun May 24 15:46:18.983747 2026] [:error] [pid 49744:tid 49755] [client 170.64.224.245:52590] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahKsyjsE5kPdFpUbbHG7lwAAAMk"]
[Sun May 24 15:46:18.984581 2026] [:error] [pid 49744:tid 49760] [client 170.64.224.245:52582] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahKsyjsE5kPdFpUbbHG7mAAAAM4"]
[Sun May 24 15:46:18.992337 2026] [:error] [pid 41708:tid 41722] [client 170.64.224.245:52640] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahKsyv4tQzoTxpuHBF6jZgAAAYw"]
[Sun May 24 15:46:18.992512 2026] [:error] [pid 23497:tid 23508] [client 170.64.224.245:52638] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahKsyiPlV47QcYwd2v_IQAAAAUg"]
[Sun May 24 15:46:19.038201 2026] [:error] [pid 23497:tid 23515] [client 170.64.224.245:52652] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahKsyyPlV47QcYwd2v_IQQAAAU8"]
[Sun May 24 15:46:19.038812 2026] [:error] [pid 49689:tid 49722] [client 170.64.224.245:52656] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahKsywaxiY3NxLUD97VkOgAAAIQ"]
[Sun May 24 15:46:19.069017 2026] [:error] [pid 49689:tid 49726] [client 170.64.224.245:52668] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/upload/server/php/"] [unique_id "ahKsywaxiY3NxLUD97VkOwAAAIg"]
[Sun May 24 15:46:19.070023 2026] [:error] [pid 41708:tid 41713] [client 170.64.224.245:52664] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahKsy_4tQzoTxpuHBF6jaAAAAYM"]
[Sun May 24 15:46:19.070098 2026] [:error] [pid 41708:tid 41726] [client 170.64.224.245:52672] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/public/server/php/"] [unique_id "ahKsy_4tQzoTxpuHBF6jZwAAAZA"]
[Sun May 24 15:46:19.100451 2026] [:error] [pid 41708:tid 41714] [client 170.64.224.245:52704] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahKsy_4tQzoTxpuHBF6jaQAAAYQ"]
[Sun May 24 15:46:19.101101 2026] [:error] [pid 23497:tid 23517] [client 170.64.224.245:52690] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahKsyyPlV47QcYwd2v_IQgAAAVE"]
[Sun May 24 15:46:19.102220 2026] [:error] [pid 41708:tid 41716] [client 170.64.224.245:52688] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahKsy_4tQzoTxpuHBF6jagAAAYY"]
[Sun May 24 15:46:19.103098 2026] [:error] [pid 41708:tid 41723] [client 170.64.224.245:52724] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahKsy_4tQzoTxpuHBF6jawAAAY0"]
[Sun May 24 15:46:19.103814 2026] [:error] [pid 49744:tid 49753] [client 170.64.224.245:52716] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahKsyzsE5kPdFpUbbHG7mQAAAMc"]
[Sun May 24 15:46:19.104710 2026] [:error] [pid 49689:tid 49721] [client 170.64.224.245:52730] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahKsywaxiY3NxLUD97VkPAAAAIM"]
[Sun May 24 15:46:19.148903 2026] [:error] [pid 41708:tid 41712] [client 170.64.224.245:52740] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahKsy_4tQzoTxpuHBF6jbAAAAYI"]
[Sun May 24 15:46:19.149004 2026] [:error] [pid 23497:tid 23521] [client 170.64.224.245:52732] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahKsyyPlV47QcYwd2v_IQwAAAVU"]
[Sun May 24 15:46:19.261573 2026] [:error] [pid 41708:tid 41731] [client 170.64.224.245:52750] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahKsy_4tQzoTxpuHBF6jbgAAAZU"]
[Sun May 24 15:46:19.274869 2026] [:error] [pid 41708:tid 41732] [client 170.64.224.245:52762] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahKsy_4tQzoTxpuHBF6jbwAAAZY"]
[Sun May 24 15:46:19.278808 2026] [:error] [pid 41708:tid 41733] [client 170.64.224.245:52764] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/server/php/"] [unique_id "ahKsy_4tQzoTxpuHBF6jcAAAAZc"]
[Sun May 24 15:46:19.298017 2026] [:error] [pid 41708:tid 41718] [client 170.64.224.245:52780] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahKsy_4tQzoTxpuHBF6jcQAAAYg"]
[Sun May 24 15:46:19.304705 2026] [:error] [pid 49744:tid 49757] [client 170.64.224.245:52790] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahKsyzsE5kPdFpUbbHG7mgAAAMs"]
[Sun May 24 15:46:19.323823 2026] [:error] [pid 49744:tid 49749] [client 170.64.224.245:52798] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/server/php/"] [unique_id "ahKsyzsE5kPdFpUbbHG7mwAAAMM"]
[Sun May 24 15:46:19.325529 2026] [:error] [pid 49744:tid 49759] [client 170.64.224.245:52802] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahKsyzsE5kPdFpUbbHG7nAAAAM0"]
[Sun May 24 15:46:19.328033 2026] [:error] [pid 49689:tid 49730] [client 170.64.224.245:52818] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugin/server/php/"] [unique_id "ahKsywaxiY3NxLUD97VkPQAAAIw"]
[Sun May 24 15:46:19.329266 2026] [:error] [pid 49689:tid 49741] [client 170.64.224.245:52822] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/server/php/"] [unique_id "ahKsywaxiY3NxLUD97VkPgAAAJc"]
[Sun May 24 15:46:19.341444 2026] [:error] [pid 49689:tid 49732] [client 170.64.224.245:52836] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahKsywaxiY3NxLUD97VkPwAAAI4"]
[Sun May 24 15:46:19.341854 2026] [:error] [pid 49689:tid 49728] [client 170.64.224.245:52840] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asset/server/php/"] [unique_id "ahKsywaxiY3NxLUD97VkQAAAAIo"]
[Sun May 24 15:46:19.344381 2026] [:error] [pid 23497:tid 23522] [client 170.64.224.245:52852] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahKsyyPlV47QcYwd2v_IRQAAAVY"]
[Sun May 24 15:46:19.345828 2026] [:error] [pid 23497:tid 23507] [client 170.64.224.245:52862] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/js/server/php/"] [unique_id "ahKsyyPlV47QcYwd2v_IRgAAAUc"]
[Sun May 24 15:46:19.346776 2026] [:error] [pid 23497:tid 23516] [client 170.64.224.245:52868] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahKsyyPlV47QcYwd2v_IRwAAAVA"]
[Sun May 24 15:46:19.357214 2026] [:error] [pid 49775:tid 49789] [client 170.64.224.245:52880] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahKsy4vZb8G6T8WpI1iD7wAAAAw"]
[Sun May 24 15:46:19.357934 2026] [:error] [pid 23497:tid 23519] [client 170.64.224.245:52870] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahKsyyPlV47QcYwd2v_ISAAAAVM"]
[Sun May 24 15:46:19.426540 2026] [:error] [pid 23497:tid 23523] [client 170.64.224.245:52894] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahKsyyPlV47QcYwd2v_ISQAAAVc"]
[Sun May 24 15:46:19.428537 2026] [:error] [pid 49775:tid 49785] [client 170.64.224.245:52908] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahKsy4vZb8G6T8WpI1iD8AAAAAg"]
[Sun May 24 15:46:19.449138 2026] [:error] [pid 49688:tid 49701] [client 170.64.224.245:52910] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahKsy2YoQ9V6a_4pBsif1wAAAEo"]
[Sun May 24 15:46:19.556407 2026] [:error] [pid 23497:tid 23510] [client 170.64.224.245:52916] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahKsyyPlV47QcYwd2v_ISgAAAUo"]
[Sun May 24 15:46:19.572920 2026] [:error] [pid 23497:tid 23512] [client 170.64.224.245:52918] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahKsyyPlV47QcYwd2v_ISwAAAUw"]
[Sun May 24 15:46:19.573984 2026] [:error] [pid 49744:tid 49769] [client 170.64.224.245:52922] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahKsyzsE5kPdFpUbbHG7nQAAANc"]
[Sun May 24 15:46:19.585997 2026] [:error] [pid 41708:tid 41728] [client 170.64.224.245:52930] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahKsy_4tQzoTxpuHBF6jdQAAAZI"]
[Sun May 24 15:46:19.588511 2026] [:error] [pid 23497:tid 23503] [client 170.64.224.245:52940] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahKsyyPlV47QcYwd2v_ITAAAAUM"]
[Sun May 24 15:46:19.594834 2026] [:error] [pid 23497:tid 23500] [client 170.64.224.245:52952] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahKsyyPlV47QcYwd2v_ITQAAAUA"]
[Sun May 24 15:46:19.599154 2026] [:error] [pid 23497:tid 23518] [client 170.64.224.245:52964] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahKsyyPlV47QcYwd2v_ITgAAAVI"]
[Sun May 24 15:46:19.599689 2026] [:error] [pid 49689:tid 49740] [client 170.64.224.245:52972] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahKsywaxiY3NxLUD97VkQQAAAJY"]
[Sun May 24 15:46:19.906885 2026] [:error] [pid 41708:tid 41729] [client 170.64.224.245:52986] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahKsy_4tQzoTxpuHBF6jdgAAAZM"]
[Sun May 24 15:46:20.018599 2026] [:error] [pid 41708:tid 41730] [client 170.64.224.245:52994] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKszP4tQzoTxpuHBF6jdwAAAZQ"]
[Sun May 24 15:46:20.038124 2026] [:error] [pid 41708:tid 41711] [client 170.64.224.245:53002] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKszP4tQzoTxpuHBF6jeAAAAYE"]
[Sun May 24 15:46:20.051648 2026] [:error] [pid 41708:tid 41724] [client 170.64.224.245:53006] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahKszP4tQzoTxpuHBF6jeQAAAY4"]
[Sun May 24 20:42:23.187907 2026] [:error] [pid 11282:tid 11354] [client 86.95.128.14:50420] [client 86.95.128.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 86.95.128.14, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ahLyL-0bPyN3C7HZ1R-LBAAAAM4"]
[Sun May 24 22:53:13.389044 2026] [:error] [pid 11280:tid 11306] [client 43.166.244.251:44778] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahMQ2YRn5s7laoSxy1QksAAAAFU"]
[Mon May 25 20:23:41.389280 2026] [:error] [pid 53791:tid 53807] [client 43.153.54.14:33392] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahQ_TSCRhhNTD40Nf1UYSwAAAY4"]
[Tue May 26 11:06:58.809447 2026] [:error] [pid 55988:tid 56001] [client 43.134.141.244:38672] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahUOUv3kVIz2sql52sfUQQAAAQo"]
[Tue May 26 11:25:23.244653 2026] [:error] [pid 20125:tid 20136] [client 64.227.93.72:55311] [client 64.227.93.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.93.72, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ahUSo9k9jeWERFDLJc7eJgAAAMk"]
[Tue May 26 11:25:23.948175 2026] [:error] [pid 20125:tid 20127] [client 64.227.93.72:55435] [client 64.227.93.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.93.72, incrementing brute counter"] [hostname "measureyourcause.com.au"] [uri "/wp-login.php"] [unique_id "ahUSo9k9jeWERFDLJc7eKAAAAMA"]
[Tue May 26 17:05:08.768701 2026] [:error] [pid 39336:tid 39342] [client 34.11.17.55:64201] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahViRNwmp9MmyaRNgiBzhQAAAUM"]
[Tue May 26 17:05:09.210863 2026] [:error] [pid 55988:tid 55996] [client 34.11.17.55:58214] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRf3kVIz2sql52sdiCgAAAQU"]
[Tue May 26 17:05:09.638613 2026] [:error] [pid 55988:tid 56011] [client 34.11.17.55:55567] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/feed/"] [unique_id "ahViRf3kVIz2sql52sdiIQAAARQ"]
[Tue May 26 17:32:39.498153 2026] [:error] [pid 33888:tid 33955] [client 88.176.24.19:22933] [client 88.176.24.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.176.24.19, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ahVotzqzTeoxiinZsGG-vAAAAQk"]
[Tue May 26 17:35:01.226711 2026] [:error] [pid 33977:tid 34003] [client 43.157.52.37:32874] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahVpRe9cnSDNAU9sYPiJIQAAABc"]
[Tue May 26 17:48:33.499375 2026] [:error] [pid 33977:tid 33999] [client 34.63.195.135:51988] [client 34.63.195.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.195.135, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ahVsce9cnSDNAU9sYPiOWwAAABM"]
[Tue May 26 17:48:33.532116 2026] [:error] [pid 33888:tid 33951] [client 34.63.195.135:51897] [client 34.63.195.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.195.135, incrementing ddos counter"] [hostname "measureyourcause.com.au"] [uri "/xmlrpc.php"] [unique_id "ahVscTqzTeoxiinZsGHDlwAAAQU"]
[Tue May 26 17:48:34.604726 2026] [:error] [pid 33977:tid 33995] [client 34.63.195.135:51988] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "ahVscu9cnSDNAU9sYPiOXgAAAA8"]
[Tue May 26 17:48:34.807099 2026] [:error] [pid 33888:tid 33956] [client 34.63.195.135:51897] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ahVscjqzTeoxiinZsGHDmwAAAQo"]
[Tue May 26 17:48:36.676864 2026] [:error] [pid 33977:tid 33997] [client 34.63.195.135:52482] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "ahVsdO9cnSDNAU9sYPiOYgAAABE"]
[Tue May 26 17:48:36.738786 2026] [:error] [pid 33977:tid 33982] [client 34.63.195.135:53951] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "ahVsdO9cnSDNAU9sYPiOYwAAAAI"]
[Tue May 26 17:48:38.067026 2026] [:error] [pid 33977:tid 33987] [client 34.63.195.135:53033] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ahVsdu9cnSDNAU9sYPiOZgAAAAc"]
[Tue May 26 17:48:38.100610 2026] [:error] [pid 36497:tid 36520] [client 34.63.195.135:53187] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "ahVsdrjKQWM1gBmBY4iJWAAAAMo"]
[Tue May 26 17:48:39.192205 2026] [:error] [pid 36497:tid 36521] [client 34.63.195.135:54921] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "ahVsd7jKQWM1gBmBY4iJWwAAAMs"]
[Tue May 26 17:48:39.228039 2026] [:error] [pid 33977:tid 33984] [client 34.63.195.135:54915] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "ahVsd-9cnSDNAU9sYPiOaQAAAAQ"]
[Tue May 26 17:48:40.463094 2026] [:error] [pid 33977:tid 33996] [client 34.63.195.135:58450] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ahVseO9cnSDNAU9sYPiOawAAABA"]
[Tue May 26 17:48:40.530024 2026] [:error] [pid 33887:tid 33939] [client 34.63.195.135:62946] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "ahVseNCOI_FV7meOxGf7dgAAAJQ"]
[Tue May 26 17:48:41.453361 2026] [:error] [pid 33886:tid 33898] [client 34.63.195.135:52587] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahVsebBYzgp5rPVdHcVpsgAAAEc"]
[Tue May 26 17:48:41.530940 2026] [:error] [pid 33886:tid 33901] [client 34.63.195.135:65466] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "ahVsebBYzgp5rPVdHcVpswAAAEo"]
[Tue May 26 17:48:42.451482 2026] [:error] [pid 33977:tid 33986] [client 34.63.195.135:59123] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahVseu9cnSDNAU9sYPiOdAAAAAY"]
[Tue May 26 17:48:42.605094 2026] [:error] [pid 33977:tid 33983] [client 34.63.195.135:50796] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahVseu9cnSDNAU9sYPiOdQAAAAM"]
[Tue May 26 17:48:43.353529 2026] [:error] [pid 33977:tid 33994] [client 34.63.195.135:61249] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahVse-9cnSDNAU9sYPiOeQAAAA4"]
[Tue May 26 17:48:43.474140 2026] [:error] [pid 33977:tid 34000] [client 34.63.195.135:52559] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahVse-9cnSDNAU9sYPiOegAAABQ"]
[Tue May 26 17:48:44.286691 2026] [:error] [pid 33887:tid 33943] [client 34.63.195.135:59971] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahVsfNCOI_FV7meOxGf7egAAAJg"]
[Tue May 26 17:48:44.770052 2026] [:error] [pid 33977:tid 33981] [client 34.63.195.135:57048] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahVsfO9cnSDNAU9sYPiOfAAAAAE"]
[Tue May 26 17:48:46.080459 2026] [:error] [pid 33888:tid 33967] [client 34.63.195.135:58268] [client 34.63.195.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahVsfjqzTeoxiinZsGHDowAAARU"]
[Tue May 26 18:40:55.516026 2026] [:error] [pid 36497:tid 36524] [client 20.206.111.238:41624] [client 20.206.111.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahV4t7jKQWM1gBmBY4iijQAAAM4"]
[Tue May 26 18:40:58.246760 2026] [:error] [pid 43701:tid 43723] [client 20.206.111.238:33512] [client 20.206.111.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahV4uoWtVI_UGrhtwKAwkwAAAVQ"]
[Tue May 26 18:40:59.746606 2026] [:error] [pid 43701:tid 43705] [client 20.206.111.238:36540] [client 20.206.111.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahV4u4WtVI_UGrhtwKAwowAAAUI"]
[Tue May 26 18:41:01.470693 2026] [:error] [pid 43701:tid 43706] [client 20.206.111.238:36525] [client 20.206.111.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ahV4vYWtVI_UGrhtwKAw6QAAAUM"]
[Tue May 26 18:49:52.096770 2026] [:error] [pid 36497:tid 36518] [client 2.57.122.173:25834] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/secrets/.env"] [unique_id "ahV60LjKQWM1gBmBY4inZwAAAMg"]
[Tue May 26 18:49:52.101765 2026] [:error] [pid 33886:tid 33896] [client 2.57.122.173:25850] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/config/.env.production"] [unique_id "ahV60LBYzgp5rPVdHcV3LwAAAEU"]
[Tue May 26 18:49:52.376385 2026] [:error] [pid 33886:tid 33914] [client 2.57.122.173:25856] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "ahV60LBYzgp5rPVdHcV3MAAAAFc"]
[Tue May 26 18:49:53.438681 2026] [:error] [pid 33888:tid 33954] [client 2.57.122.173:25868] [client 2.57.122.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "ahV60TqzTeoxiinZsGHVwQAAAQg"]
[Tue May 26 21:35:29.474679 2026] [:error] [pid 33888:tid 33950] [client 37.114.46.161:52426] [client 37.114.46.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/HEAD"] [unique_id "ahWhoTqzTeoxiinZsGEYAQAAAQQ"]
[Tue May 26 21:35:31.239753 2026] [:error] [pid 36497:tid 36516] [client 37.114.46.161:53940] [client 37.114.46.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.development"] [unique_id "ahWho7jKQWM1gBmBY4gdlgAAAMY"]
[Tue May 26 21:35:31.290790 2026] [:error] [pid 36497:tid 36510] [client 37.114.46.161:53894] [client 37.114.46.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env"] [unique_id "ahWho7jKQWM1gBmBY4gdlwAAAMA"]
[Tue May 26 21:35:31.458184 2026] [:error] [pid 33888:tid 33952] [client 37.114.46.161:53882] [client 37.114.46.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.git/config"] [unique_id "ahWhozqzTeoxiinZsGEYCgAAAQY"]
[Tue May 26 21:35:31.537151 2026] [:error] [pid 33888:tid 33954] [client 37.114.46.161:53926] [client 37.114.46.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.production"] [unique_id "ahWhozqzTeoxiinZsGEYDQAAAQg"]
[Tue May 26 21:35:31.537800 2026] [:error] [pid 33888:tid 33964] [client 37.114.46.161:53944] [client 37.114.46.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/backend/.env"] [unique_id "ahWhozqzTeoxiinZsGEYDgAAARI"]
[Tue May 26 21:35:31.538723 2026] [:error] [pid 33886:tid 33903] [client 37.114.46.161:53916] [client 37.114.46.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/.env.local"] [unique_id "ahWho7BYzgp5rPVdHcWstAAAAEw"]
[Tue May 26 21:35:31.539876 2026] [:error] [pid 33886:tid 33895] [client 37.114.46.161:53946] [client 37.114.46.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.com.au"] [uri "/api/.env"] [unique_id "ahWho7BYzgp5rPVdHcWstQAAAEQ"]
[Tue May 26 21:46:42.601836 2026] [:error] [pid 33886:tid 33894] [client 20.63.34.22:17362] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "ahWkQrBYzgp5rPVdHcWvKQAAAEM"]
[Tue May 26 21:46:43.398634 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:17289] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "ahWkQ4WtVI_UGrhtwKDqKwAAAUY"]
[Tue May 26 21:46:43.896063 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:17298] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "ahWkQ4WtVI_UGrhtwKDqLgAAAUs"]
[Tue May 26 21:46:44.744184 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:17287] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aboutc.php"] [unique_id "ahWkRIWtVI_UGrhtwKDqPQAAAUA"]
[Tue May 26 21:46:45.859046 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:17365] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "ahWkRdCOI_FV7meOxGdIxgAAAJY"]
[Tue May 26 21:46:46.643647 2026] [:error] [pid 36497:tid 36525] [client 20.63.34.22:17379] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "ahWkRrjKQWM1gBmBY4gjmAAAAM8"]
[Tue May 26 21:46:47.114414 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:17311] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "ahWkR4WtVI_UGrhtwKDqSgAAAUA"]
[Tue May 26 21:46:47.543896 2026] [:error] [pid 33888:tid 33949] [client 20.63.34.22:17389] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-load.php"] [unique_id "ahWkRzqzTeoxiinZsGEbUQAAAQM"]
[Tue May 26 21:46:47.977868 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:17406] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "ahWkR7jKQWM1gBmBY4gjnQAAAMk"]
[Tue May 26 21:46:48.405207 2026] [:error] [pid 36497:tid 36526] [client 20.63.34.22:17357] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "ahWkSLjKQWM1gBmBY4gjnwAAANA"]
[Tue May 26 21:46:48.851898 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:17283] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "ahWkSO9cnSDNAU9sYPgAXwAAAAA"]
[Tue May 26 21:46:49.370310 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:17397] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/aevly.php"] [unique_id "ahWkSYWtVI_UGrhtwKDqTwAAAUM"]
[Tue May 26 21:46:50.087552 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:17388] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "ahWkSoWtVI_UGrhtwKDqUgAAAUY"]
[Tue May 26 21:46:50.627701 2026] [:error] [pid 33886:tid 33909] [client 20.63.34.22:17291] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "ahWkSrBYzgp5rPVdHcWvLAAAAFI"]
[Tue May 26 21:46:51.409095 2026] [:error] [pid 33977:tid 33986] [client 20.63.34.22:17403] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "ahWkS-9cnSDNAU9sYPgAYgAAAAY"]
[Tue May 26 21:46:51.958715 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:17378] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atkno.php"] [unique_id "ahWkS4WtVI_UGrhtwKDqVgAAAUs"]
[Tue May 26 21:46:52.449209 2026] [:error] [pid 33977:tid 34004] [client 20.63.34.22:17385] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ahWkTO9cnSDNAU9sYPgAZwAAABg"]
[Tue May 26 21:46:53.062344 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:17387] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ahWkTYWtVI_UGrhtwKDqWgAAAUQ"]
[Tue May 26 21:46:53.497275 2026] [:error] [pid 33888:tid 33956] [client 20.63.34.22:17381] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ahWkTTqzTeoxiinZsGEbVwAAAQo"]
[Tue May 26 21:46:53.932897 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:17390] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/mini.php"] [unique_id "ahWkTYWtVI_UGrhtwKDqWwAAAUA"]
[Tue May 26 21:46:54.353990 2026] [:error] [pid 33888:tid 33955] [client 20.63.34.22:17377] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-thi.php"] [unique_id "ahWkTjqzTeoxiinZsGEbWAAAAQk"]
[Tue May 26 21:46:54.795498 2026] [:error] [pid 36497:tid 36534] [client 20.63.34.22:17398] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-thi.php"] [unique_id "ahWkTrjKQWM1gBmBY4gjpAAAANg"]
[Tue May 26 21:46:55.248114 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:17290] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-thi.php"] [unique_id "ahWkT4WtVI_UGrhtwKDqXQAAAVg"]
[Tue May 26 21:46:55.700655 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:17383] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-thi.php"] [unique_id "ahWkT4WtVI_UGrhtwKDqYAAAAUM"]
[Tue May 26 21:46:56.300286 2026] [:error] [pid 33887:tid 33937] [client 20.63.34.22:17286] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWkUNCOI_FV7meOxGdIzQAAAJI"]
[Tue May 26 21:46:56.730518 2026] [:error] [pid 33887:tid 33920] [client 20.63.34.22:17366] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWkUNCOI_FV7meOxGdIzgAAAIE"]
[Tue May 26 21:46:57.246223 2026] [:error] [pid 36497:tid 36515] [client 20.63.34.22:17361] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWkUbjKQWM1gBmBY4gjpQAAAMU"]
[Tue May 26 21:46:57.715923 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:17286] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWkUYWtVI_UGrhtwKDqawAAAU0"]
[Tue May 26 21:46:58.236638 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:17407] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ahWkUoWtVI_UGrhtwKDqbQAAAUg"]
[Tue May 26 21:46:58.662885 2026] [:error] [pid 36497:tid 36520] [client 20.63.34.22:17370] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ahWkUrjKQWM1gBmBY4gjpwAAAMo"]
[Tue May 26 21:46:59.115745 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:17293] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ahWkU7jKQWM1gBmBY4gjqAAAAMQ"]
[Tue May 26 21:46:59.548856 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:17355] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amax.php"] [unique_id "ahWkU7jKQWM1gBmBY4gjqgAAANM"]
[Tue May 26 21:46:59.975960 2026] [:error] [pid 33977:tid 33991] [client 20.63.34.22:17297] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wehrman.php"] [unique_id "ahWkU-9cnSDNAU9sYPgAdAAAAAs"]
[Tue May 26 21:47:00.438747 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:17237] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wehrman.php"] [unique_id "ahWkVIWtVI_UGrhtwKDqcwAAAUU"]
[Tue May 26 21:47:00.889580 2026] [:error] [pid 33887:tid 33931] [client 20.63.34.22:17404] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wehrman.php"] [unique_id "ahWkVNCOI_FV7meOxGdI0AAAAIw"]
[Tue May 26 21:47:01.311111 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:17309] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wehrman.php"] [unique_id "ahWkVe9cnSDNAU9sYPgAdQAAAAA"]
[Tue May 26 21:47:01.747691 2026] [:error] [pid 33886:tid 33898] [client 20.63.34.22:17360] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "ahWkVbBYzgp5rPVdHcWvOAAAAEc"]
[Tue May 26 21:47:02.253340 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:17367] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "ahWkVoWtVI_UGrhtwKDqegAAAUI"]
[Tue May 26 21:47:02.748429 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:17303] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "ahWkVoWtVI_UGrhtwKDqfgAAAUQ"]
[Tue May 26 21:47:03.219981 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:17349] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/b.php"] [unique_id "ahWkV4WtVI_UGrhtwKDqgwAAAVE"]
[Tue May 26 21:47:03.815762 2026] [:error] [pid 36497:tid 36526] [client 20.63.34.22:17332] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sing.php"] [unique_id "ahWkV7jKQWM1gBmBY4gjswAAANA"]
[Tue May 26 21:47:04.271499 2026] [:error] [pid 33887:tid 33942] [client 20.63.34.22:17227] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sing.php"] [unique_id "ahWkWNCOI_FV7meOxGdI0wAAAJc"]
[Tue May 26 21:47:04.728894 2026] [:error] [pid 36497:tid 36511] [client 20.63.34.22:17337] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sing.php"] [unique_id "ahWkWLjKQWM1gBmBY4gjuAAAAME"]
[Tue May 26 21:47:05.377132 2026] [:error] [pid 33977:tid 33989] [client 20.63.34.22:17308] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-sing.php"] [unique_id "ahWkWe9cnSDNAU9sYPgAegAAAAk"]
[Tue May 26 21:47:06.088367 2026] [:error] [pid 33886:tid 33893] [client 20.63.34.22:17319] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWkWrBYzgp5rPVdHcWvOgAAAEI"]
[Tue May 26 21:47:06.651490 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:17296] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWkWoWtVI_UGrhtwKDqjAAAAVE"]
[Tue May 26 21:47:07.326002 2026] [:error] [pid 33977:tid 34003] [client 20.63.34.22:17241] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWkW-9cnSDNAU9sYPgAjAAAABc"]
[Tue May 26 21:47:07.768982 2026] [:error] [pid 33977:tid 33991] [client 20.63.34.22:17345] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-links-opml.php"] [unique_id "ahWkW-9cnSDNAU9sYPgAkQAAAAs"]
[Tue May 26 21:47:08.203749 2026] [:error] [pid 36497:tid 36523] [client 20.63.34.22:17294] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "ahWkXLjKQWM1gBmBY4gjzAAAAM0"]
[Tue May 26 21:47:08.632492 2026] [:error] [pid 33977:tid 34001] [client 20.63.34.22:17316] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "ahWkXO9cnSDNAU9sYPgAlQAAABU"]
[Tue May 26 21:47:09.157549 2026] [:error] [pid 33977:tid 33990] [client 20.63.34.22:17354] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "ahWkXe9cnSDNAU9sYPgAlwAAAAo"]
[Tue May 26 21:47:09.624760 2026] [:error] [pid 33977:tid 33986] [client 20.63.34.22:17245] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/edit.php"] [unique_id "ahWkXe9cnSDNAU9sYPgAmAAAAAY"]
[Tue May 26 21:47:10.081416 2026] [:error] [pid 33977:tid 33981] [client 20.63.34.22:17327] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ahWkXu9cnSDNAU9sYPgAmgAAAAE"]
[Tue May 26 21:47:10.515461 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:17356] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ahWkXoWtVI_UGrhtwKDqmgAAAUU"]
[Tue May 26 21:47:10.952246 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:17302] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ahWkXrjKQWM1gBmBY4gj1gAAANM"]
[Tue May 26 21:47:11.438974 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:17348] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wmore1.php"] [unique_id "ahWkX4WtVI_UGrhtwKDqoQAAAVE"]
[Tue May 26 21:47:12.041763 2026] [:error] [pid 33887:tid 33937] [client 20.63.34.22:17395] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "ahWkYNCOI_FV7meOxGdI2AAAAJI"]
[Tue May 26 21:47:12.472888 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:17346] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "ahWkYO9cnSDNAU9sYPgAngAAAAA"]
[Tue May 26 21:47:12.955136 2026] [:error] [pid 33977:tid 33982] [client 20.63.34.22:17373] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "ahWkYO9cnSDNAU9sYPgAnwAAAAI"]
[Tue May 26 21:47:13.454847 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:17281] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-access.php"] [unique_id "ahWkYbjKQWM1gBmBY4gj1wAAAMk"]
[Tue May 26 21:47:13.989670 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:17315] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ahWkYbjKQWM1gBmBY4gj2QAAAMA"]
[Tue May 26 21:47:14.677686 2026] [:error] [pid 33888:tid 33970] [client 20.63.34.22:17339] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ahWkYjqzTeoxiinZsGEbaAAAARg"]
[Tue May 26 21:47:15.319893 2026] [:error] [pid 36497:tid 36526] [client 20.63.34.22:17304] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ahWkY7jKQWM1gBmBY4gj3wAAANA"]
[Tue May 26 21:47:15.811511 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:17396] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1.php"] [unique_id "ahWkY7jKQWM1gBmBY4gj4QAAAMk"]
[Tue May 26 21:47:16.360587 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:17364] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "ahWkZIWtVI_UGrhtwKDqqgAAAUA"]
[Tue May 26 21:47:16.807075 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:17295] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "ahWkZIWtVI_UGrhtwKDqrgAAAUQ"]
[Tue May 26 21:47:17.393738 2026] [:error] [pid 33887:tid 33940] [client 20.63.34.22:17336] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "ahWkZdCOI_FV7meOxGdI2wAAAJU"]
[Tue May 26 21:47:17.988364 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:17307] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sbhu.php"] [unique_id "ahWkZe9cnSDNAU9sYPgAqAAAABQ"]
[Tue May 26 21:47:18.527187 2026] [:error] [pid 43701:tid 43717] [client 20.63.34.22:17341] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "ahWkZoWtVI_UGrhtwKDqtQAAAU4"]
[Tue May 26 21:47:19.000584 2026] [:error] [pid 33886:tid 33908] [client 20.63.34.22:17288] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "ahWkZrBYzgp5rPVdHcWvQwAAAFE"]
[Tue May 26 21:47:19.437734 2026] [:error] [pid 33887:tid 33939] [client 20.63.34.22:17218] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "ahWkZ9COI_FV7meOxGdI3QAAAJQ"]
[Tue May 26 21:47:19.874696 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:17300] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bgymj.php"] [unique_id "ahWkZ9COI_FV7meOxGdI3wAAAJY"]
[Tue May 26 21:47:22.275359 2026] [:error] [pid 33977:tid 33991] [client 20.63.34.22:17344] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "ahWkau9cnSDNAU9sYPgAsQAAAAs"]
[Tue May 26 21:47:23.050624 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:17347] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "ahWka4WtVI_UGrhtwKDquwAAAVA"]
[Tue May 26 21:47:23.601666 2026] [:error] [pid 43701:tid 43703] [client 20.63.34.22:17257] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "ahWka4WtVI_UGrhtwKDqwAAAAUA"]
[Tue May 26 21:47:24.068717 2026] [:error] [pid 33977:tid 34001] [client 20.63.34.22:17402] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file30.php"] [unique_id "ahWkbO9cnSDNAU9sYPgAswAAABU"]
[Tue May 26 21:47:24.522147 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:17369] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "ahWkbIWtVI_UGrhtwKDqxgAAAUI"]
[Tue May 26 21:47:24.965556 2026] [:error] [pid 36497:tid 36522] [client 20.63.34.22:17375] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "ahWkbLjKQWM1gBmBY4gj7gAAAMw"]
[Tue May 26 21:47:25.399954 2026] [:error] [pid 33888:tid 33954] [client 20.63.34.22:17391] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "ahWkbTqzTeoxiinZsGEbcgAAAQg"]
[Tue May 26 21:47:25.830469 2026] [:error] [pid 33888:tid 33950] [client 20.63.34.22:17328] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/yellow.php"] [unique_id "ahWkbTqzTeoxiinZsGEbdQAAAQQ"]
[Tue May 26 21:47:26.260699 2026] [:error] [pid 33888:tid 33947] [client 20.63.34.22:17223] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reze.php"] [unique_id "ahWkbjqzTeoxiinZsGEbdwAAAQE"]
[Tue May 26 21:47:26.719487 2026] [:error] [pid 33977:tid 33989] [client 20.63.34.22:17358] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reze.php"] [unique_id "ahWkbu9cnSDNAU9sYPgAuAAAAAk"]
[Tue May 26 21:47:27.159418 2026] [:error] [pid 33977:tid 33994] [client 20.63.34.22:17352] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reze.php"] [unique_id "ahWkb-9cnSDNAU9sYPgAuwAAAA4"]
[Tue May 26 21:47:27.607771 2026] [:error] [pid 33887:tid 33921] [client 20.63.34.22:17405] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/reze.php"] [unique_id "ahWkb9COI_FV7meOxGdI5gAAAII"]
[Tue May 26 21:47:28.149221 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:17280] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "ahWkcIWtVI_UGrhtwKDqzwAAAUM"]
[Tue May 26 21:47:28.596378 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:17400] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "ahWkcIWtVI_UGrhtwKDq1AAAAVU"]
[Tue May 26 21:47:29.065767 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:17394] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "ahWkcYWtVI_UGrhtwKDq1wAAAUg"]
[Tue May 26 21:47:29.608744 2026] [:error] [pid 33888:tid 33969] [client 20.63.34.22:17335] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wefile.php"] [unique_id "ahWkcTqzTeoxiinZsGEbfAAAARc"]
[Tue May 26 21:47:30.271771 2026] [:error] [pid 33888:tid 33954] [client 20.63.34.22:17238] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "ahWkcjqzTeoxiinZsGEbfQAAAQg"]
[Tue May 26 21:47:30.757605 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:17401] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "ahWkcoWtVI_UGrhtwKDq3AAAAUI"]
[Tue May 26 21:47:31.187021 2026] [:error] [pid 33886:tid 33894] [client 20.63.34.22:17350] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "ahWkc7BYzgp5rPVdHcWvSwAAAEM"]
[Tue May 26 21:47:31.675019 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:17392] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xda.php"] [unique_id "ahWkc4WtVI_UGrhtwKDq4AAAAU0"]
[Tue May 26 21:47:32.112910 2026] [:error] [pid 36497:tid 36534] [client 20.63.34.22:17333] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/revealability.php"] [unique_id "ahWkdLjKQWM1gBmBY4gj9AAAANg"]
[Tue May 26 21:47:32.536010 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:17249] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/revealability.php"] [unique_id "ahWkdIWtVI_UGrhtwKDq6AAAAUM"]
[Tue May 26 21:47:32.981843 2026] [:error] [pid 36497:tid 36515] [client 20.63.34.22:17318] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/revealability.php"] [unique_id "ahWkdLjKQWM1gBmBY4gj-gAAAMU"]
[Tue May 26 21:47:33.552567 2026] [:error] [pid 33977:tid 34002] [client 20.63.34.22:17222] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/revealability.php"] [unique_id "ahWkde9cnSDNAU9sYPgAvwAAABY"]
[Tue May 26 21:47:34.012591 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:17363] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "ahWkdoWtVI_UGrhtwKDq7gAAAUk"]
[Tue May 26 21:47:34.487980 2026] [:error] [pid 36497:tid 36524] [client 20.63.34.22:17340] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "ahWkdrjKQWM1gBmBY4gkBQAAAM4"]
[Tue May 26 21:47:34.961264 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:17317] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "ahWkdoWtVI_UGrhtwKDq8QAAAVM"]
[Tue May 26 21:47:35.467402 2026] [:error] [pid 33887:tid 33943] [client 20.63.34.22:17343] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/forbidals.php"] [unique_id "ahWkd9COI_FV7meOxGdI6gAAAJg"]
[Tue May 26 21:47:35.949076 2026] [:error] [pid 33977:tid 33994] [client 20.63.34.22:17323] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "ahWkd-9cnSDNAU9sYPgAwgAAAA4"]
[Tue May 26 21:47:36.373634 2026] [:error] [pid 33977:tid 33988] [client 20.63.34.22:17246] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "ahWkeO9cnSDNAU9sYPgAxQAAAAg"]
[Tue May 26 21:47:36.836610 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:17306] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "ahWkeIWtVI_UGrhtwKDq9wAAAUQ"]
[Tue May 26 21:47:37.333471 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:17274] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/i.php"] [unique_id "ahWkee9cnSDNAU9sYPgAxwAAAAQ"]
[Tue May 26 21:47:37.802262 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:17292] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "ahWkeYWtVI_UGrhtwKDrAgAAAUY"]
[Tue May 26 21:47:38.847557 2026] [:error] [pid 33888:tid 33947] [client 20.63.34.22:17299] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "ahWkejqzTeoxiinZsGEbjAAAAQE"]
[Tue May 26 21:47:39.497574 2026] [:error] [pid 33887:tid 33920] [client 20.63.34.22:17156] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "ahWke9COI_FV7meOxGdI7gAAAIE"]
[Tue May 26 21:47:40.097569 2026] [:error] [pid 33977:tid 33981] [client 20.63.34.22:17284] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/900.php"] [unique_id "ahWkfO9cnSDNAU9sYPgA6QAAAAE"]
[Tue May 26 21:47:40.769530 2026] [:error] [pid 33977:tid 34003] [client 20.63.34.22:17263] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "ahWkfO9cnSDNAU9sYPgA6wAAABc"]
[Tue May 26 21:47:41.335398 2026] [:error] [pid 36497:tid 36522] [client 20.63.34.22:17322] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "ahWkfbjKQWM1gBmBY4gkFgAAAMw"]
[Tue May 26 21:47:41.845541 2026] [:error] [pid 36497:tid 36517] [client 20.63.34.22:17399] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kj.php"] [unique_id "ahWkfbjKQWM1gBmBY4gkGgAAAMc"]
[Tue May 26 21:47:48.654836 2026] [:error] [pid 36497:tid 36524] [client 20.63.34.22:17331] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWkhLjKQWM1gBmBY4gkSQAAAM4"]
[Tue May 26 21:47:49.121999 2026] [:error] [pid 33887:tid 33924] [client 20.63.34.22:17225] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWkhdCOI_FV7meOxGdI-wAAAIU"]
[Tue May 26 21:47:49.676146 2026] [:error] [pid 36497:tid 36528] [client 20.63.34.22:17202] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWkhbjKQWM1gBmBY4gkTgAAANI"]
[Tue May 26 21:47:50.243161 2026] [:error] [pid 33887:tid 33938] [client 20.63.34.22:17324] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/amxloxxr.php"] [unique_id "ahWkhtCOI_FV7meOxGdJAQAAAJM"]
[Tue May 26 21:47:50.688162 2026] [:error] [pid 36497:tid 36530] [client 20.63.34.22:17273] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "ahWkhrjKQWM1gBmBY4gkUgAAANQ"]
[Tue May 26 21:47:51.143245 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:17376] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "ahWkh4WtVI_UGrhtwKDrSQAAAU8"]
[Tue May 26 21:47:51.601673 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:17224] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "ahWkh4WtVI_UGrhtwKDrTwAAAVU"]
[Tue May 26 21:47:52.086473 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:17351] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file59.php"] [unique_id "ahWkiIWtVI_UGrhtwKDrUAAAAUM"]
[Tue May 26 21:47:52.534573 2026] [:error] [pid 36497:tid 36522] [client 20.63.34.22:17282] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "ahWkiLjKQWM1gBmBY4gkWQAAAMw"]
[Tue May 26 21:47:53.018652 2026] [:error] [pid 33977:tid 34002] [client 20.63.34.22:17397] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "ahWkie9cnSDNAU9sYPgBGAAAABY"]
[Tue May 26 21:47:53.619482 2026] [:error] [pid 36497:tid 36526] [client 20.63.34.22:17320] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "ahWkibjKQWM1gBmBY4gkWwAAANA"]
[Tue May 26 21:47:54.223196 2026] [:error] [pid 33886:tid 33911] [client 20.63.34.22:17230] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/asasx.php"] [unique_id "ahWkirBYzgp5rPVdHcWvYgAAAFQ"]
[Tue May 26 21:47:54.666671 2026] [:error] [pid 33888:tid 33948] [client 20.63.34.22:17285] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWkijqzTeoxiinZsGEbrAAAAQI"]
[Tue May 26 21:47:55.277039 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:17244] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWki7jKQWM1gBmBY4gkYAAAANY"]
[Tue May 26 21:47:55.726586 2026] [:error] [pid 36497:tid 36523] [client 20.63.34.22:17386] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWki7jKQWM1gBmBY4gkYgAAAM0"]
[Tue May 26 21:47:56.171506 2026] [:error] [pid 33887:tid 33927] [client 20.63.34.22:17253] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "ahWkjNCOI_FV7meOxGdJCQAAAIg"]
[Tue May 26 21:47:56.611432 2026] [:error] [pid 33886:tid 33892] [client 20.63.34.22:17384] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ahWkjLBYzgp5rPVdHcWvZAAAAEE"]
[Tue May 26 21:47:57.035369 2026] [:error] [pid 33977:tid 33995] [client 20.63.34.22:17158] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ahWkje9cnSDNAU9sYPgBHQAAAA8"]
[Tue May 26 21:47:57.475569 2026] [:error] [pid 33977:tid 33986] [client 20.63.34.22:17278] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ahWkje9cnSDNAU9sYPgBIwAAAAY"]
[Tue May 26 21:47:57.997633 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:17321] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms-edit.php"] [unique_id "ahWkjbjKQWM1gBmBY4gkZgAAANY"]
[Tue May 26 21:47:58.589579 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:17312] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "ahWkjoWtVI_UGrhtwKDrVwAAAVg"]
[Tue May 26 21:47:59.346773 2026] [:error] [pid 36497:tid 36531] [client 20.63.34.22:17232] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "ahWkj7jKQWM1gBmBY4gkbQAAANU"]
[Tue May 26 21:47:59.850163 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:17240] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "ahWkj4WtVI_UGrhtwKDrWAAAAUs"]
[Tue May 26 21:48:00.323187 2026] [:error] [pid 43701:tid 43719] [client 20.63.34.22:17261] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/file4.php"] [unique_id "ahWkkIWtVI_UGrhtwKDrWQAAAVA"]
[Tue May 26 21:48:00.800232 2026] [:error] [pid 33887:tid 33940] [client 20.63.34.22:17217] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "ahWkkNCOI_FV7meOxGdJEwAAAJU"]
[Tue May 26 21:48:01.224980 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:17247] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "ahWkkYWtVI_UGrhtwKDrXwAAAVM"]
[Tue May 26 21:48:01.687119 2026] [:error] [pid 36497:tid 36522] [client 20.63.34.22:17255] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "ahWkkbjKQWM1gBmBY4gkcgAAAMw"]
[Tue May 26 21:48:02.179547 2026] [:error] [pid 43701:tid 43723] [client 20.63.34.22:17372] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hplfuns.php"] [unique_id "ahWkkoWtVI_UGrhtwKDrZQAAAVQ"]
[Tue May 26 21:48:02.645208 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:17252] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "ahWkkoWtVI_UGrhtwKDrZgAAAUE"]
[Tue May 26 21:48:03.383312 2026] [:error] [pid 33887:tid 33942] [client 20.63.34.22:17325] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "ahWkk9COI_FV7meOxGdJFwAAAJc"]
[Tue May 26 21:48:03.962186 2026] [:error] [pid 36497:tid 36528] [client 20.63.34.22:17334] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "ahWkk7jKQWM1gBmBY4gkdAAAANI"]
[Tue May 26 21:48:04.601595 2026] [:error] [pid 33886:tid 33896] [client 20.63.34.22:17305] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/1index.php"] [unique_id "ahWklLBYzgp5rPVdHcWvaQAAAEU"]
[Tue May 26 21:48:05.144174 2026] [:error] [pid 33886:tid 33913] [client 20.63.34.22:17268] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "ahWklbBYzgp5rPVdHcWvagAAAFY"]
[Tue May 26 21:48:05.639880 2026] [:error] [pid 33887:tid 33927] [client 20.63.34.22:17209] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "ahWkldCOI_FV7meOxGdJHgAAAIg"]
[Tue May 26 21:48:06.071386 2026] [:error] [pid 33887:tid 33921] [client 20.63.34.22:17172] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "ahWkltCOI_FV7meOxGdJIgAAAII"]
[Tue May 26 21:48:06.531283 2026] [:error] [pid 33887:tid 33922] [client 20.63.34.22:17374] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-su.php"] [unique_id "ahWkltCOI_FV7meOxGdJJAAAAIM"]
[Tue May 26 21:48:06.970403 2026] [:error] [pid 33977:tid 33992] [client 20.63.34.22:17251] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "ahWklu9cnSDNAU9sYPgBLwAAAAw"]
[Tue May 26 21:48:07.432436 2026] [:error] [pid 33886:tid 33905] [client 20.63.34.22:17277] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "ahWkl7BYzgp5rPVdHcWvbwAAAE4"]
[Tue May 26 21:48:08.238381 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:17191] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "ahWkmLjKQWM1gBmBY4gkfAAAANY"]
[Tue May 26 21:48:08.663607 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:17380] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ccou.php"] [unique_id "ahWkmIWtVI_UGrhtwKDrbAAAAUg"]
[Tue May 26 21:48:09.233928 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:17193] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ver.php"] [unique_id "ahWkme9cnSDNAU9sYPgBMwAAAAc"]
[Tue May 26 21:48:09.768650 2026] [:error] [pid 33977:tid 34000] [client 20.63.34.22:17201] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ver.php"] [unique_id "ahWkme9cnSDNAU9sYPgBNgAAABQ"]
[Tue May 26 21:48:10.208042 2026] [:error] [pid 43701:tid 43721] [client 20.63.34.22:17353] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ver.php"] [unique_id "ahWkmoWtVI_UGrhtwKDrcQAAAVI"]
[Tue May 26 21:48:10.746090 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:17170] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-ver.php"] [unique_id "ahWkmoWtVI_UGrhtwKDrdQAAAVE"]
[Tue May 26 21:48:11.204625 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:17092] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "ahWkm4WtVI_UGrhtwKDreAAAAUI"]
[Tue May 26 21:48:11.667694 2026] [:error] [pid 33977:tid 34003] [client 20.63.34.22:17231] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "ahWkm-9cnSDNAU9sYPgBOQAAABc"]
[Tue May 26 21:48:12.232544 2026] [:error] [pid 33977:tid 33992] [client 20.63.34.22:17201] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "ahWknO9cnSDNAU9sYPgBOgAAAAw"]
[Tue May 26 21:48:12.680079 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:17226] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/db.php"] [unique_id "ahWknIWtVI_UGrhtwKDrgwAAAVM"]
[Tue May 26 21:48:13.118767 2026] [:error] [pid 36497:tid 36518] [client 20.63.34.22:17167] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ahWknbjKQWM1gBmBY4gkgwAAAMg"]
[Tue May 26 21:48:13.634135 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:17259] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ahWknYWtVI_UGrhtwKDriAAAAVg"]
[Tue May 26 21:48:14.360442 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:17203] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ahWknoWtVI_UGrhtwKDrjgAAAU0"]
[Tue May 26 21:48:14.979306 2026] [:error] [pid 43701:tid 43715] [client 20.63.34.22:17165] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lib.php"] [unique_id "ahWknoWtVI_UGrhtwKDrkQAAAUw"]
[Tue May 26 21:48:15.465229 2026] [:error] [pid 36497:tid 36527] [client 20.63.34.22:17393] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "ahWkn7jKQWM1gBmBY4gkiQAAANE"]
[Tue May 26 21:48:15.995897 2026] [:error] [pid 43701:tid 43713] [client 20.63.34.22:17152] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "ahWkn4WtVI_UGrhtwKDrmAAAAUo"]
[Tue May 26 21:48:16.641506 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:17338] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "ahWkoIWtVI_UGrhtwKDrmwAAAVE"]
[Tue May 26 21:48:17.387491 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:17228] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sys.php"] [unique_id "ahWkoYWtVI_UGrhtwKDroAAAAUs"]
[Tue May 26 21:48:17.847529 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:17329] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "ahWkoe9cnSDNAU9sYPgBQQAAAAQ"]
[Tue May 26 21:48:18.458990 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:17221] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "ahWkou9cnSDNAU9sYPgBQgAAABE"]
[Tue May 26 21:48:19.148083 2026] [:error] [pid 33887:tid 33939] [client 20.63.34.22:17314] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "ahWko9COI_FV7meOxGdJKAAAAJQ"]
[Tue May 26 21:48:19.726583 2026] [:error] [pid 36497:tid 36530] [client 20.63.34.22:17178] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/lala.php"] [unique_id "ahWko7jKQWM1gBmBY4gkjAAAANQ"]
[Tue May 26 21:48:20.208600 2026] [:error] [pid 33888:tid 33969] [client 20.63.34.22:17183] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "ahWkpDqzTeoxiinZsGEbugAAARc"]
[Tue May 26 21:48:20.623865 2026] [:error] [pid 33888:tid 33962] [client 20.63.34.22:17321] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "ahWkpDqzTeoxiinZsGEbvAAAARA"]
[Tue May 26 21:48:21.065900 2026] [:error] [pid 33886:tid 33905] [client 20.63.34.22:17256] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "ahWkpbBYzgp5rPVdHcWveAAAAE4"]
[Tue May 26 21:48:21.522612 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:17219] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/bthil.php"] [unique_id "ahWkpYWtVI_UGrhtwKDrrAAAAUU"]
[Tue May 26 21:48:21.995776 2026] [:error] [pid 33887:tid 33933] [client 20.63.34.22:17248] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "ahWkpdCOI_FV7meOxGdJLwAAAI4"]
[Tue May 26 21:48:22.454797 2026] [:error] [pid 33977:tid 33996] [client 20.63.34.22:17250] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "ahWkpu9cnSDNAU9sYPgBQwAAABA"]
[Tue May 26 21:48:22.879772 2026] [:error] [pid 33886:tid 33896] [client 20.63.34.22:17342] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "ahWkprBYzgp5rPVdHcWvfwAAAEU"]
[Tue May 26 21:48:23.696864 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:17176] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fun.php"] [unique_id "ahWkp4WtVI_UGrhtwKDrswAAAVM"]
[Tue May 26 21:48:24.522542 2026] [:error] [pid 33887:tid 33926] [client 20.63.34.22:17184] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "ahWkqNCOI_FV7meOxGdJMgAAAIc"]
[Tue May 26 21:48:25.467333 2026] [:error] [pid 33886:tid 33898] [client 20.63.34.22:17104] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "ahWkqbBYzgp5rPVdHcWvggAAAEc"]
[Tue May 26 21:48:26.614750 2026] [:error] [pid 33886:tid 33915] [client 20.63.34.22:17155] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "ahWkqrBYzgp5rPVdHcWvhAAAAFg"]
[Tue May 26 21:48:27.189378 2026] [:error] [pid 33977:tid 33989] [client 20.63.34.22:17234] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-the.php"] [unique_id "ahWkq-9cnSDNAU9sYPgBSQAAAAk"]
[Tue May 26 21:48:27.655471 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:17119] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "ahWkq4WtVI_UGrhtwKDrvgAAAVg"]
[Tue May 26 21:48:28.103456 2026] [:error] [pid 33977:tid 33983] [client 20.63.34.22:17266] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "ahWkrO9cnSDNAU9sYPgBSwAAAAM"]
[Tue May 26 21:48:28.544434 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:17330] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "ahWkrO9cnSDNAU9sYPgBTwAAABE"]
[Tue May 26 21:48:28.974116 2026] [:error] [pid 33888:tid 33957] [client 20.63.34.22:17382] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vx.php"] [unique_id "ahWkrDqzTeoxiinZsGEbyAAAAQs"]
[Tue May 26 21:48:29.461802 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:17051] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "ahWkrbjKQWM1gBmBY4gkmAAAAMA"]
[Tue May 26 21:48:29.962619 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:17160] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "ahWkrYWtVI_UGrhtwKDrwQAAAVM"]
[Tue May 26 21:48:30.488265 2026] [:error] [pid 33886:tid 33899] [client 20.63.34.22:17192] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "ahWkrrBYzgp5rPVdHcWvjwAAAEg"]
[Tue May 26 21:48:31.072018 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:17270] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ff1.php"] [unique_id "ahWkr4WtVI_UGrhtwKDrxgAAAVc"]
[Tue May 26 21:48:31.569442 2026] [:error] [pid 33888:tid 33949] [client 20.63.34.22:17188] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWkrzqzTeoxiinZsGEbywAAAQM"]
[Tue May 26 21:48:32.067269 2026] [:error] [pid 33888:tid 33955] [client 20.63.34.22:17260] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWksDqzTeoxiinZsGEbzQAAAQk"]
[Tue May 26 21:48:32.488425 2026] [:error] [pid 33888:tid 33964] [client 20.63.34.22:17100] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWksDqzTeoxiinZsGEb0AAAARI"]
[Tue May 26 21:48:33.027471 2026] [:error] [pid 33887:tid 33933] [client 20.63.34.22:17233] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWksdCOI_FV7meOxGdJOgAAAI4"]
[Tue May 26 21:48:33.528042 2026] [:error] [pid 33886:tid 33892] [client 20.63.34.22:17159] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "ahWksbBYzgp5rPVdHcWvlAAAAEE"]
[Tue May 26 21:48:34.053135 2026] [:error] [pid 33886:tid 33894] [client 20.63.34.22:17094] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "ahWksrBYzgp5rPVdHcWvlQAAAEM"]
[Tue May 26 21:48:34.485912 2026] [:error] [pid 33886:tid 33913] [client 20.63.34.22:17091] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "ahWksrBYzgp5rPVdHcWvmQAAAFY"]
[Tue May 26 21:48:34.937500 2026] [:error] [pid 36497:tid 36531] [client 20.63.34.22:17175] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/error.php"] [unique_id "ahWksrjKQWM1gBmBY4gkmgAAANU"]
[Tue May 26 21:48:35.411130 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:17096] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "ahWks-9cnSDNAU9sYPgBXAAAAAc"]
[Tue May 26 21:48:35.939297 2026] [:error] [pid 33977:tid 33999] [client 20.63.34.22:17206] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "ahWks-9cnSDNAU9sYPgBXQAAABM"]
[Tue May 26 21:48:36.630811 2026] [:error] [pid 33886:tid 33898] [client 20.63.34.22:17093] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "ahWktLBYzgp5rPVdHcWvnAAAAEc"]
[Tue May 26 21:48:37.138432 2026] [:error] [pid 33888:tid 33964] [client 20.63.34.22:17267] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/333.php"] [unique_id "ahWktTqzTeoxiinZsGEb2QAAARI"]
[Tue May 26 21:48:37.605264 2026] [:error] [pid 43701:tid 43715] [client 20.63.34.22:17216] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "ahWktYWtVI_UGrhtwKDr1QAAAUw"]
[Tue May 26 21:48:38.048587 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:17198] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "ahWktu9cnSDNAU9sYPgBXwAAABE"]
[Tue May 26 21:48:38.526134 2026] [:error] [pid 33886:tid 33911] [client 20.63.34.22:17157] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "ahWktrBYzgp5rPVdHcWvnwAAAFQ"]
[Tue May 26 21:48:39.103139 2026] [:error] [pid 33888:tid 33967] [client 20.63.34.22:17140] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ftde.php"] [unique_id "ahWktzqzTeoxiinZsGEb2wAAARU"]
[Tue May 26 21:48:39.691012 2026] [:error] [pid 43701:tid 43720] [client 20.63.34.22:17310] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "ahWkt4WtVI_UGrhtwKDr2gAAAVE"]
[Tue May 26 21:48:40.123353 2026] [:error] [pid 43701:tid 43723] [client 20.63.34.22:17186] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "ahWkuIWtVI_UGrhtwKDr2wAAAVQ"]
[Tue May 26 21:48:40.776444 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:17105] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "ahWkuIWtVI_UGrhtwKDr4AAAAU0"]
[Tue May 26 21:48:41.890751 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:17125] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/app.php"] [unique_id "ahWkue9cnSDNAU9sYPgBYgAAAAc"]
[Tue May 26 21:48:42.537424 2026] [:error] [pid 33888:tid 33949] [client 20.63.34.22:17265] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "ahWkujqzTeoxiinZsGEb4QAAAQM"]
[Tue May 26 21:48:43.178936 2026] [:error] [pid 33977:tid 33995] [client 20.63.34.22:17208] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "ahWku-9cnSDNAU9sYPgBYwAAAA8"]
[Tue May 26 21:48:43.668540 2026] [:error] [pid 33888:tid 33963] [client 20.63.34.22:17194] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "ahWkuzqzTeoxiinZsGEb4gAAARE"]
[Tue May 26 21:48:44.468811 2026] [:error] [pid 33886:tid 33899] [client 20.63.34.22:17276] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/cilus.php"] [unique_id "ahWkvLBYzgp5rPVdHcWvowAAAEg"]
[Tue May 26 21:48:45.263201 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:17236] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "ahWkvYWtVI_UGrhtwKDr8wAAAVM"]
[Tue May 26 21:48:45.966739 2026] [:error] [pid 36497:tid 36517] [client 20.63.34.22:17239] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "ahWkvbjKQWM1gBmBY4gkoQAAAMc"]
[Tue May 26 21:48:46.504322 2026] [:error] [pid 33977:tid 33994] [client 20.63.34.22:17258] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "ahWkvu9cnSDNAU9sYPgBZgAAAA4"]
[Tue May 26 21:48:47.214511 2026] [:error] [pid 36497:tid 36528] [client 20.63.34.22:17242] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/a5.php"] [unique_id "ahWkv7jKQWM1gBmBY4gkpgAAANI"]
[Tue May 26 21:48:47.662613 2026] [:error] [pid 33887:tid 33942] [client 20.63.34.22:17168] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/test.php"] [unique_id "ahWkv9COI_FV7meOxGdJRAAAAJc"]
[Tue May 26 21:48:54.300066 2026] [:error] [pid 33886:tid 33914] [client 20.63.34.22:17173] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "ahWkxrBYzgp5rPVdHcWvuQAAAFc"]
[Tue May 26 21:48:55.175026 2026] [:error] [pid 36497:tid 36529] [client 20.63.34.22:17272] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "ahWkx7jKQWM1gBmBY4gkxAAAANM"]
[Tue May 26 21:48:55.829228 2026] [:error] [pid 36497:tid 36517] [client 20.63.34.22:17088] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "ahWkx7jKQWM1gBmBY4gkygAAAMc"]
[Tue May 26 21:48:56.301690 2026] [:error] [pid 36497:tid 36516] [client 20.63.34.22:17151] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/png.php"] [unique_id "ahWkyLjKQWM1gBmBY4gkzwAAAMY"]
[Tue May 26 21:48:56.757748 2026] [:error] [pid 43701:tid 43707] [client 20.63.34.22:17179] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-at.php"] [unique_id "ahWkyIWtVI_UGrhtwKDsCgAAAUQ"]
[Tue May 26 21:48:57.455836 2026] [:error] [pid 36497:tid 36522] [client 20.63.34.22:17262] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-at.php"] [unique_id "ahWkybjKQWM1gBmBY4gk0wAAAMw"]
[Tue May 26 21:48:57.996508 2026] [:error] [pid 33886:tid 33904] [client 20.63.34.22:17131] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-at.php"] [unique_id "ahWkybBYzgp5rPVdHcWvugAAAE0"]
[Tue May 26 21:48:58.477463 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:17142] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-at.php"] [unique_id "ahWkyoWtVI_UGrhtwKDsEQAAAVM"]
[Tue May 26 21:48:59.078280 2026] [:error] [pid 43701:tid 43725] [client 20.63.34.22:17368] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "ahWky4WtVI_UGrhtwKDsFAAAAVY"]
[Tue May 26 21:48:59.688586 2026] [:error] [pid 33977:tid 33995] [client 20.63.34.22:17275] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "ahWky-9cnSDNAU9sYPgBfgAAAA8"]
[Tue May 26 21:49:00.204437 2026] [:error] [pid 36497:tid 36528] [client 20.63.34.22:17204] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "ahWkzLjKQWM1gBmBY4gk2AAAANI"]
[Tue May 26 21:49:00.839790 2026] [:error] [pid 33886:tid 33913] [client 20.63.34.22:17029] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/database.php"] [unique_id "ahWkzLBYzgp5rPVdHcWvvAAAAFY"]
[Tue May 26 21:49:02.008804 2026] [:error] [pid 36497:tid 36530] [client 20.63.34.22:17243] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/like.php"] [unique_id "ahWkzrjKQWM1gBmBY4gk2wAAANQ"]
[Tue May 26 21:49:04.021917 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:17264] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/like.php"] [unique_id "ahWk0LjKQWM1gBmBY4gk5QAAAMQ"]
[Tue May 26 21:49:06.253638 2026] [:error] [pid 36497:tid 36516] [client 20.63.34.22:17195] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/like.php"] [unique_id "ahWk0rjKQWM1gBmBY4gk7gAAAMY"]
[Tue May 26 21:49:07.702445 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:17127] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/like.php"] [unique_id "ahWk09COI_FV7meOxGdJVgAAAJY"]
[Tue May 26 21:49:08.825978 2026] [:error] [pid 33977:tid 34003] [client 20.63.34.22:17134] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ahWk1O9cnSDNAU9sYPgBhgAAABc"]
[Tue May 26 21:49:09.484555 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:17154] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ahWk1YWtVI_UGrhtwKDsKAAAAVg"]
[Tue May 26 21:49:10.217759 2026] [:error] [pid 33887:tid 33937] [client 20.63.34.22:17118] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ahWk1tCOI_FV7meOxGdJXQAAAJI"]
[Tue May 26 21:49:10.669138 2026] [:error] [pid 33886:tid 33910] [client 20.63.34.22:17313] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xxx.php"] [unique_id "ahWk1rBYzgp5rPVdHcWvwQAAAFM"]
[Tue May 26 21:49:12.273104 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:17101] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "ahWk2O9cnSDNAU9sYPgBiAAAAAU"]
[Tue May 26 21:49:12.845078 2026] [:error] [pid 43701:tid 43716] [client 20.63.34.22:17235] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "ahWk2IWtVI_UGrhtwKDsLgAAAU0"]
[Tue May 26 21:49:13.314040 2026] [:error] [pid 36497:tid 36523] [client 20.63.34.22:17212] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "ahWk2bjKQWM1gBmBY4gk9gAAAM0"]
[Tue May 26 21:49:13.765224 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:17138] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new.php"] [unique_id "ahWk2bjKQWM1gBmBY4gk-QAAANY"]
[Tue May 26 21:49:14.262810 2026] [:error] [pid 36497:tid 36517] [client 20.63.34.22:17213] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "ahWk2rjKQWM1gBmBY4gk_AAAAMc"]
[Tue May 26 21:49:14.689548 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:17095] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "ahWk2rjKQWM1gBmBY4gk_wAAAMA"]
[Tue May 26 21:49:15.156391 2026] [:error] [pid 33977:tid 33995] [client 20.63.34.22:17301] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "ahWk2-9cnSDNAU9sYPgBkQAAAA8"]
[Tue May 26 21:49:15.585515 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:17164] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sid3.php"] [unique_id "ahWk2-9cnSDNAU9sYPgBlgAAAAU"]
[Tue May 26 21:49:16.008541 2026] [:error] [pid 36497:tid 36513] [client 20.63.34.22:17163] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "ahWk3LjKQWM1gBmBY4glBwAAAMM"]
[Tue May 26 21:49:16.460749 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:17181] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "ahWk3IWtVI_UGrhtwKDsPgAAAUk"]
[Tue May 26 21:49:17.035002 2026] [:error] [pid 43701:tid 43723] [client 20.63.34.22:17279] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "ahWk3YWtVI_UGrhtwKDsQgAAAVQ"]
[Tue May 26 21:49:17.499060 2026] [:error] [pid 33887:tid 33942] [client 20.63.34.22:17033] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/txets.php"] [unique_id "ahWk3dCOI_FV7meOxGdJYQAAAJc"]
[Tue May 26 21:49:17.929660 2026] [:error] [pid 36497:tid 36516] [client 20.63.34.22:17189] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "ahWk3bjKQWM1gBmBY4glEwAAAMY"]
[Tue May 26 21:49:18.459878 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:17120] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "ahWk3u9cnSDNAU9sYPgBogAAAAc"]
[Tue May 26 21:49:19.217887 2026] [:error] [pid 33977:tid 33981] [client 20.63.34.22:17102] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "ahWk3-9cnSDNAU9sYPgBpgAAAAE"]
[Tue May 26 21:49:19.641881 2026] [:error] [pid 33887:tid 33931] [client 20.63.34.22:17143] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/shell20211028.php"] [unique_id "ahWk39COI_FV7meOxGdJZAAAAIw"]
[Tue May 26 21:49:20.092356 2026] [:error] [pid 33887:tid 33923] [client 20.63.34.22:17220] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-wz.php"] [unique_id "ahWk4NCOI_FV7meOxGdJZgAAAIQ"]
[Tue May 26 21:49:20.541464 2026] [:error] [pid 43701:tid 43727] [client 20.63.34.22:17186] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-wz.php"] [unique_id "ahWk4IWtVI_UGrhtwKDsVwAAAVg"]
[Tue May 26 21:49:21.008637 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:17106] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-wz.php"] [unique_id "ahWk4YWtVI_UGrhtwKDsXgAAAUk"]
[Tue May 26 21:49:21.427776 2026] [:error] [pid 43701:tid 43721] [client 20.63.34.22:17169] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-wz.php"] [unique_id "ahWk4YWtVI_UGrhtwKDsYgAAAVI"]
[Tue May 26 21:49:21.878414 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:17062] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "ahWk4YWtVI_UGrhtwKDsZAAAAU8"]
[Tue May 26 21:49:22.851521 2026] [:error] [pid 43701:tid 43705] [client 20.63.34.22:17117] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "ahWk4oWtVI_UGrhtwKDsZwAAAUI"]
[Tue May 26 21:49:23.784325 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:17053] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "ahWk4-9cnSDNAU9sYPgBsQAAAAQ"]
[Tue May 26 21:49:24.515173 2026] [:error] [pid 33977:tid 33983] [client 20.63.34.22:17269] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/albin.php"] [unique_id "ahWk5O9cnSDNAU9sYPgBtAAAAAM"]
[Tue May 26 21:49:27.239853 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:17182] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "ahWk54WtVI_UGrhtwKDscwAAAU8"]
[Tue May 26 21:49:29.235464 2026] [:error] [pid 36497:tid 36518] [client 20.63.34.22:17116] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "ahWk6bjKQWM1gBmBY4glNgAAAMg"]
[Tue May 26 21:49:29.862247 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:17166] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "ahWk6e9cnSDNAU9sYPgBtwAAAAU"]
[Tue May 26 21:49:30.364524 2026] [:error] [pid 33888:tid 33969] [client 20.63.34.22:17180] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ok.php"] [unique_id "ahWk6jqzTeoxiinZsGEcDAAAARc"]
[Tue May 26 21:49:30.787694 2026] [:error] [pid 33887:tid 33940] [client 20.63.34.22:17153] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "ahWk6tCOI_FV7meOxGdJcQAAAJU"]
[Tue May 26 21:49:31.257699 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:17132] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "ahWk6-9cnSDNAU9sYPgBuAAAAAA"]
[Tue May 26 21:49:31.695966 2026] [:error] [pid 33977:tid 34004] [client 20.63.34.22:17211] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "ahWk6-9cnSDNAU9sYPgBuQAAABg"]
[Tue May 26 21:49:32.139637 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:17200] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/drykl.php"] [unique_id "ahWk7O9cnSDNAU9sYPgBuwAAABE"]
[Tue May 26 21:49:32.569897 2026] [:error] [pid 36497:tid 36523] [client 20.63.34.22:17111] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "ahWk7LjKQWM1gBmBY4glPgAAAM0"]
[Tue May 26 21:49:33.004516 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:17090] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "ahWk7YWtVI_UGrhtwKDsfwAAAUE"]
[Tue May 26 21:49:33.451884 2026] [:error] [pid 33888:tid 33969] [client 20.63.34.22:17036] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "ahWk7TqzTeoxiinZsGEcEgAAARc"]
[Tue May 26 21:49:33.881668 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:17055] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/atomlib.php"] [unique_id "ahWk7e9cnSDNAU9sYPgBvgAAAAQ"]
[Tue May 26 21:49:34.336445 2026] [:error] [pid 33887:tid 33931] [client 20.63.34.22:17237] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "ahWk7tCOI_FV7meOxGdJdQAAAIw"]
[Tue May 26 21:49:34.811385 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:17114] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "ahWk7oWtVI_UGrhtwKDshgAAAU8"]
[Tue May 26 21:49:35.477597 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:17073] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "ahWk77jKQWM1gBmBY4glQwAAAMs"]
[Tue May 26 21:49:36.040239 2026] [:error] [pid 33887:tid 33935] [client 20.63.34.22:17037] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/z.php"] [unique_id "ahWk8NCOI_FV7meOxGdJeQAAAJA"]
[Tue May 26 21:49:36.482638 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:17089] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "ahWk8IWtVI_UGrhtwKDshwAAAVU"]
[Tue May 26 21:49:36.922051 2026] [:error] [pid 33888:tid 33957] [client 20.63.34.22:17197] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "ahWk8DqzTeoxiinZsGEcGAAAAQs"]
[Tue May 26 21:49:37.527380 2026] [:error] [pid 33977:tid 33993] [client 20.63.34.22:17215] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "ahWk8e9cnSDNAU9sYPgBvwAAAA0"]
[Tue May 26 21:49:38.019973 2026] [:error] [pid 33888:tid 33955] [client 20.63.34.22:17112] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-png.php"] [unique_id "ahWk8jqzTeoxiinZsGEcGQAAAQk"]
[Tue May 26 21:49:38.514744 2026] [:error] [pid 33977:tid 33987] [client 20.63.34.22:17126] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWk8u9cnSDNAU9sYPgBwwAAAAc"]
[Tue May 26 21:49:38.982556 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:17107] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWk8u9cnSDNAU9sYPgBxQAAAAA"]
[Tue May 26 21:49:39.428258 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:17054] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWk8-9cnSDNAU9sYPgBygAAAAQ"]
[Tue May 26 21:49:39.873132 2026] [:error] [pid 33886:tid 33908] [client 20.63.34.22:17187] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ahWk87BYzgp5rPVdHcWv8gAAAFE"]
[Tue May 26 21:49:40.310635 2026] [:error] [pid 33886:tid 33896] [client 20.63.34.22:16389] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWk9LBYzgp5rPVdHcWv8wAAAEU"]
[Tue May 26 21:49:40.803829 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:17185] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWk9IWtVI_UGrhtwKDskAAAAVc"]
[Tue May 26 21:49:41.265938 2026] [:error] [pid 33886:tid 33911] [client 20.63.34.22:17123] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWk9bBYzgp5rPVdHcWv9wAAAFQ"]
[Tue May 26 21:49:41.690641 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:17150] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ahWk9e9cnSDNAU9sYPgB1QAAAAA"]
[Tue May 26 21:49:42.165486 2026] [:error] [pid 36497:tid 36512] [client 20.63.34.22:17056] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "ahWk9rjKQWM1gBmBY4glSwAAAMI"]
[Tue May 26 21:49:42.596573 2026] [:error] [pid 33886:tid 33901] [client 20.63.34.22:16396] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "ahWk9rBYzgp5rPVdHcWv-QAAAEo"]
[Tue May 26 21:49:43.073748 2026] [:error] [pid 33886:tid 33904] [client 20.63.34.22:17214] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "ahWk97BYzgp5rPVdHcWv-wAAAE0"]
[Tue May 26 21:49:43.508181 2026] [:error] [pid 36497:tid 36513] [client 20.63.34.22:17041] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/sadcut1.php"] [unique_id "ahWk97jKQWM1gBmBY4glVAAAAMM"]
[Tue May 26 21:49:43.944166 2026] [:error] [pid 33888:tid 33950] [client 20.63.34.22:17171] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "ahWk9zqzTeoxiinZsGEcHQAAAQQ"]
[Tue May 26 21:49:44.403102 2026] [:error] [pid 33886:tid 33908] [client 20.63.34.22:17161] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "ahWk-LBYzgp5rPVdHcWv_QAAAFE"]
[Tue May 26 21:49:44.882096 2026] [:error] [pid 33977:tid 33998] [client 20.63.34.22:17163] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "ahWk-O9cnSDNAU9sYPgB2AAAABI"]
[Tue May 26 21:49:45.311408 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:17025] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp.php"] [unique_id "ahWk-dCOI_FV7meOxGdJhQAAAJY"]
[Tue May 26 21:49:45.803190 2026] [:error] [pid 36497:tid 36526] [client 20.63.34.22:16433] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "ahWk-bjKQWM1gBmBY4glWAAAANA"]
[Tue May 26 21:49:46.227428 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:16388] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "ahWk-rjKQWM1gBmBY4glWgAAANY"]
[Tue May 26 21:49:46.653048 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:17097] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "ahWk-rjKQWM1gBmBY4glXAAAAMs"]
[Tue May 26 21:49:47.103396 2026] [:error] [pid 36497:tid 36523] [client 20.63.34.22:17147] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/x.php"] [unique_id "ahWk-7jKQWM1gBmBY4glXgAAAM0"]
[Tue May 26 21:49:47.554634 2026] [:error] [pid 33887:tid 33930] [client 20.63.34.22:17254] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWk-9COI_FV7meOxGdJhwAAAIs"]
[Tue May 26 21:49:48.003961 2026] [:error] [pid 43701:tid 43718] [client 20.63.34.22:17108] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWk_IWtVI_UGrhtwKDslQAAAU8"]
[Tue May 26 21:49:48.464757 2026] [:error] [pid 33888:tid 33963] [client 20.63.34.22:17067] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWk_DqzTeoxiinZsGEcIgAAARE"]
[Tue May 26 21:49:48.894566 2026] [:error] [pid 33888:tid 33961] [client 20.63.34.22:17135] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-conflg.php"] [unique_id "ahWk_DqzTeoxiinZsGEcIwAAAQ8"]
[Tue May 26 21:49:49.334879 2026] [:error] [pid 36497:tid 36530] [client 20.63.34.22:17229] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "ahWk_bjKQWM1gBmBY4glZgAAANQ"]
[Tue May 26 21:49:49.826832 2026] [:error] [pid 33888:tid 33948] [client 20.63.34.22:17146] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "ahWk_TqzTeoxiinZsGEcJwAAAQI"]
[Tue May 26 21:49:50.313323 2026] [:error] [pid 36497:tid 36524] [client 20.63.34.22:17136] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "ahWk_rjKQWM1gBmBY4glaQAAAM4"]
[Tue May 26 21:49:50.809434 2026] [:error] [pid 33886:tid 33906] [client 20.63.34.22:17039] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/wp-update.php"] [unique_id "ahWk_rBYzgp5rPVdHcWwBQAAAE8"]
[Tue May 26 21:49:51.246332 2026] [:error] [pid 43701:tid 43712] [client 20.63.34.22:17145] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "ahWk_4WtVI_UGrhtwKDslwAAAUk"]
[Tue May 26 21:49:51.670470 2026] [:error] [pid 33888:tid 33959] [client 20.63.34.22:17099] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "ahWk_zqzTeoxiinZsGEcKAAAAQ0"]
[Tue May 26 21:49:52.097007 2026] [:error] [pid 43701:tid 43708] [client 20.63.34.22:17122] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "ahWlAIWtVI_UGrhtwKDsmAAAAUU"]
[Tue May 26 21:49:52.605997 2026] [:error] [pid 43701:tid 43704] [client 20.63.34.22:17064] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/hello.php"] [unique_id "ahWlAIWtVI_UGrhtwKDsmwAAAUE"]
[Tue May 26 21:49:53.062520 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:17121] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "ahWlAYWtVI_UGrhtwKDsngAAAUc"]
[Tue May 26 21:49:53.528630 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:17210] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "ahWlAYWtVI_UGrhtwKDsoQAAAUg"]
[Tue May 26 21:49:53.966586 2026] [:error] [pid 33887:tid 33923] [client 20.63.34.22:17032] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/NewFile.php"] [unique_id "ahWlAdCOI_FV7meOxGdJlQAAAIQ"]
[Tue May 26 21:50:01.341676 2026] [:error] [pid 33977:tid 33981] [client 20.63.34.22:17026] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "ahWlCe9cnSDNAU9sYPgB8gAAAAE"]
[Tue May 26 21:50:01.877530 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:17139] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "ahWlCYWtVI_UGrhtwKDstQAAAUs"]
[Tue May 26 21:50:02.350009 2026] [:error] [pid 43701:tid 43706] [client 20.63.34.22:17162] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "ahWlCoWtVI_UGrhtwKDstgAAAUM"]
[Tue May 26 21:50:02.802574 2026] [:error] [pid 33977:tid 33991] [client 20.63.34.22:17128] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/myfile.php"] [unique_id "ahWlCu9cnSDNAU9sYPgB9QAAAAs"]
[Tue May 26 21:50:03.255181 2026] [:error] [pid 33888:tid 33951] [client 20.63.34.22:17174] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "ahWlCzqzTeoxiinZsGEcMwAAAQU"]
[Tue May 26 21:50:03.673992 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:17130] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "ahWlC-9cnSDNAU9sYPgB-gAAABE"]
[Tue May 26 21:50:04.095227 2026] [:error] [pid 33886:tid 33891] [client 20.63.34.22:17047] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "ahWlDLBYzgp5rPVdHcWwFAAAAEA"]
[Tue May 26 21:50:04.592654 2026] [:error] [pid 33977:tid 33989] [client 20.63.34.22:17137] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xqq.php"] [unique_id "ahWlDO9cnSDNAU9sYPgB_gAAAAk"]
[Tue May 26 21:50:05.118430 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:17196] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "ahWlDe9cnSDNAU9sYPgCAQAAAAU"]
[Tue May 26 21:50:05.601018 2026] [:error] [pid 43701:tid 43726] [client 20.63.34.22:17113] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "ahWlDYWtVI_UGrhtwKDsuAAAAVc"]
[Tue May 26 21:50:06.160636 2026] [:error] [pid 43701:tid 43710] [client 20.63.34.22:17141] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "ahWlDoWtVI_UGrhtwKDsuQAAAUc"]
[Tue May 26 21:50:06.648083 2026] [:error] [pid 33886:tid 33901] [client 20.63.34.22:17371] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/kolda.php"] [unique_id "ahWlDrBYzgp5rPVdHcWwGQAAAEo"]
[Tue May 26 21:50:07.082284 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:17082] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "ahWlD7jKQWM1gBmBY4gliAAAAMQ"]
[Tue May 26 21:50:07.513183 2026] [:error] [pid 33977:tid 33992] [client 20.63.34.22:16411] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "ahWlD-9cnSDNAU9sYPgCBAAAAAw"]
[Tue May 26 21:50:07.957582 2026] [:error] [pid 43701:tid 43711] [client 20.63.34.22:17065] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "ahWlD4WtVI_UGrhtwKDsvAAAAUg"]
[Tue May 26 21:50:08.451615 2026] [:error] [pid 33977:tid 33994] [client 20.63.34.22:17129] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/666.php"] [unique_id "ahWlEO9cnSDNAU9sYPgCBQAAAA4"]
[Tue May 26 21:50:08.987864 2026] [:error] [pid 33977:tid 33995] [client 20.63.34.22:17031] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "ahWlEO9cnSDNAU9sYPgCBgAAAA8"]
[Tue May 26 21:50:09.415521 2026] [:error] [pid 33886:tid 33906] [client 20.63.34.22:16404] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "ahWlEbBYzgp5rPVdHcWwGgAAAE8"]
[Tue May 26 21:50:09.900107 2026] [:error] [pid 33886:tid 33895] [client 20.63.34.22:17207] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "ahWlEbBYzgp5rPVdHcWwHAAAAEQ"]
[Tue May 26 21:50:10.333586 2026] [:error] [pid 36497:tid 36514] [client 20.63.34.22:17190] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xoot.php"] [unique_id "ahWlErjKQWM1gBmBY4glkAAAAMQ"]
[Tue May 26 21:50:10.852620 2026] [:error] [pid 33887:tid 33923] [client 20.63.34.22:17103] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "ahWlEtCOI_FV7meOxGdJnwAAAIQ"]
[Tue May 26 21:50:11.435755 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:17177] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "ahWlE-9cnSDNAU9sYPgCBwAAAAU"]
[Tue May 26 21:50:11.931726 2026] [:error] [pid 33887:tid 33943] [client 20.63.34.22:17024] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "ahWlE9COI_FV7meOxGdJoAAAAJg"]
[Tue May 26 21:50:12.401282 2026] [:error] [pid 36497:tid 36519] [client 20.63.34.22:17271] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/vgtyu.php"] [unique_id "ahWlFLjKQWM1gBmBY4glkwAAAMk"]
[Tue May 26 21:50:12.932375 2026] [:error] [pid 43701:tid 43724] [client 20.63.34.22:17048] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "ahWlFIWtVI_UGrhtwKDsyQAAAVU"]
[Tue May 26 21:50:13.521882 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:17070] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "ahWlFYWtVI_UGrhtwKDsywAAAUY"]
[Tue May 26 21:50:14.079415 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:17049] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "ahWlFu9cnSDNAU9sYPgCCgAAAAA"]
[Tue May 26 21:50:15.232113 2026] [:error] [pid 36497:tid 36533] [client 20.63.34.22:16386] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/06.php"] [unique_id "ahWlF7jKQWM1gBmBY4gllwAAANc"]
[Tue May 26 21:50:15.989898 2026] [:error] [pid 36497:tid 36510] [client 20.63.34.22:17199] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "ahWlF7jKQWM1gBmBY4glmwAAAMA"]
[Tue May 26 21:50:16.495872 2026] [:error] [pid 33886:tid 33897] [client 20.63.34.22:17047] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "ahWlGLBYzgp5rPVdHcWwJgAAAEY"]
[Tue May 26 21:50:17.055012 2026] [:error] [pid 33977:tid 33984] [client 20.63.34.22:17046] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "ahWlGe9cnSDNAU9sYPgCCwAAAAQ"]
[Tue May 26 21:50:17.647739 2026] [:error] [pid 36497:tid 36532] [client 20.63.34.22:17086] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/erty.php"] [unique_id "ahWlGbjKQWM1gBmBY4glnwAAANY"]
[Tue May 26 21:50:18.138543 2026] [:error] [pid 33977:tid 33997] [client 20.63.34.22:16412] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "ahWlGu9cnSDNAU9sYPgCEAAAABE"]
[Tue May 26 21:50:18.689912 2026] [:error] [pid 43701:tid 43723] [client 20.63.34.22:16392] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "ahWlGoWtVI_UGrhtwKDs1wAAAVQ"]
[Tue May 26 21:50:19.109831 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:17061] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "ahWlG7jKQWM1gBmBY4glpwAAAMs"]
[Tue May 26 21:50:19.565794 2026] [:error] [pid 43701:tid 43709] [client 20.63.34.22:17109] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/fs.php"] [unique_id "ahWlG4WtVI_UGrhtwKDs2AAAAUY"]
[Tue May 26 21:50:20.021340 2026] [:error] [pid 36497:tid 36512] [client 20.63.34.22:17074] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "ahWlHLjKQWM1gBmBY4glqgAAAMI"]
[Tue May 26 21:50:20.505264 2026] [:error] [pid 33886:tid 33909] [client 20.63.34.22:17076] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "ahWlHLBYzgp5rPVdHcWwOQAAAFI"]
[Tue May 26 21:50:21.036463 2026] [:error] [pid 33977:tid 34004] [client 20.63.34.22:16398] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "ahWlHe9cnSDNAU9sYPgCEQAAABg"]
[Tue May 26 21:50:21.472669 2026] [:error] [pid 33886:tid 33897] [client 20.63.34.22:17027] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/66.php"] [unique_id "ahWlHbBYzgp5rPVdHcWwOgAAAEY"]
[Tue May 26 21:50:21.930178 2026] [:error] [pid 33888:tid 33948] [client 20.63.34.22:17359] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "ahWlHTqzTeoxiinZsGEcQwAAAQI"]
[Tue May 26 21:50:22.363884 2026] [:error] [pid 33887:tid 33940] [client 20.63.34.22:16409] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "ahWlHtCOI_FV7meOxGdJqAAAAJU"]
[Tue May 26 21:50:22.788314 2026] [:error] [pid 33888:tid 33965] [client 20.63.34.22:16425] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "ahWlHjqzTeoxiinZsGEcRgAAARM"]
[Tue May 26 21:50:23.243341 2026] [:error] [pid 33887:tid 33933] [client 20.63.34.22:17030] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/grsiuk.php"] [unique_id "ahWlH9COI_FV7meOxGdJqgAAAI4"]
[Tue May 26 21:50:23.714604 2026] [:error] [pid 33977:tid 33980] [client 20.63.34.22:17050] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "ahWlH-9cnSDNAU9sYPgCFwAAAAA"]
[Tue May 26 21:50:24.144427 2026] [:error] [pid 43701:tid 43723] [client 20.63.34.22:17068] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "ahWlIIWtVI_UGrhtwKDs3wAAAVQ"]
[Tue May 26 21:50:24.563998 2026] [:error] [pid 36497:tid 36521] [client 20.63.34.22:16432] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "ahWlILjKQWM1gBmBY4glrgAAAMs"]
[Tue May 26 21:50:25.029078 2026] [:error] [pid 33887:tid 33931] [client 20.63.34.22:16390] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/new4.php"] [unique_id "ahWlIdCOI_FV7meOxGdJrAAAAIw"]
[Tue May 26 21:50:25.562106 2026] [:error] [pid 33888:tid 33960] [client 20.63.34.22:16834] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "ahWlITqzTeoxiinZsGEcSgAAAQ4"]
[Tue May 26 21:50:26.153940 2026] [:error] [pid 33977:tid 33991] [client 20.63.34.22:16391] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "ahWlIu9cnSDNAU9sYPgCGgAAAAs"]
[Tue May 26 21:50:26.593211 2026] [:error] [pid 33887:tid 33919] [client 20.63.34.22:17149] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "ahWlItCOI_FV7meOxGdJrgAAAIA"]
[Tue May 26 21:50:27.037536 2026] [:error] [pid 33977:tid 34002] [client 20.63.34.22:17326] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/pouhg.php"] [unique_id "ahWlI-9cnSDNAU9sYPgCHAAAABY"]
[Tue May 26 21:50:27.463142 2026] [:error] [pid 33887:tid 33934] [client 20.63.34.22:17034] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "ahWlI9COI_FV7meOxGdJrwAAAI8"]
[Tue May 26 21:50:27.891215 2026] [:error] [pid 43701:tid 43722] [client 20.63.34.22:17045] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "ahWlI4WtVI_UGrhtwKDs5AAAAVM"]
[Tue May 26 21:50:28.344469 2026] [:error] [pid 43701:tid 43714] [client 20.63.34.22:17066] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "ahWlJIWtVI_UGrhtwKDs5gAAAUs"]
[Tue May 26 21:50:28.760488 2026] [:error] [pid 33888:tid 33970] [client 20.63.34.22:16416] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/xa.php"] [unique_id "ahWlJDqzTeoxiinZsGEcUgAAARg"]
[Tue May 26 21:50:29.194849 2026] [:error] [pid 33977:tid 34004] [client 20.63.34.22:17059] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "ahWlJe9cnSDNAU9sYPgCHgAAABg"]
[Tue May 26 21:50:29.745890 2026] [:error] [pid 33977:tid 33985] [client 20.63.34.22:17087] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "ahWlJe9cnSDNAU9sYPgCIQAAAAU"]
[Tue May 26 21:50:30.324101 2026] [:error] [pid 33886:tid 33892] [client 20.63.34.22:17058] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "ahWlJrBYzgp5rPVdHcWwSAAAAEE"]
[Tue May 26 21:50:30.823603 2026] [:error] [pid 33887:tid 33941] [client 20.63.34.22:16402] [client 20.63.34.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.com.au"] [uri "/ms.php"] [unique_id "ahWlJtCOI_FV7meOxGdJsAAAAJY"]
[Tue May 26 22:51:40.824677 2026] [:error] [pid 43701:tid 43715] [client 43.130.100.35:34576] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||measureyourcause.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.com.au"] [uri "/"] [unique_id "ahWzfIWtVI_UGrhtwKApFgAAAUw"]